@mcoda/codali 0.1.108 → 0.1.110

package/dist/index.js

@@ -41,3 +41,48 @@ export { loadInstructionBlocks, formatInstructionBlocks } from "./session/Instru
 export { SessionStore } from "./session/SessionStore.js";
 export { SubagentOrchestrator } from "./subagents/SubagentOrchestrator.js";
 export { ClaudeCliProvider } from "./providers/ClaudeCliProvider.js";
+// ---------------------------------------------------------------------------
+// Phase 1 orchestrator surface.
+// ---------------------------------------------------------------------------
+export { AskCommand, runAsk, parseAskArgs } from "./cli/AskCommand.js";
+export { getAgentInventory, loadAgentInventory, resetAgentInventoryCache, } from "./agents/AgentInventory.js";
+export { PHASE_ONE_ROLES, resolveConfigurableRoles } from "./agents/RoleResolution.js";
+export { LocalConfigRunContextResolver, ProvidedRunContextResolver, mergeRunContexts, resolveRunContext, scrubRepoConfig, } from "./runcontext/RunContextResolver.js";
+export { LocalGatewayTaskRunner, createLocalGatewayTaskRunner, MAX_MODEL_CALLS_PER_TASK, MAX_TOOL_CALLS_PER_TASK, } from "./gateway/LocalGatewayTaskRunner.js";
+export { RoleRoutingProvider, createProviderForAssignment, createProviderForName, providerNameForAdapter, } from "./gateway/LocalGatewayProvider.js";
+export { artifactRefsFromStored, decideFinalizerMode, formatArtifactAnswer, formatDeterministicAnswer, } from "./gateway/Finalizer.js";
+export { describeViolations, extractJsonPayload, validateResponseAgainstSchema, } from "./gateway/ResponseSchema.js";
+export { GatewayTracer, sanitizeArgs } from "./gateway/GatewayTracer.js";
+export { MAX_EXPANDED_TOOLS, renderCapabilityLines, renderToolLines, } from "./gateway/ToolExposure.js";
+export { gatewayToolDescriptorsFromDefinitions, gatewayToolDescriptorsFromRegistry, } from "./gateway/ToolDescriptorSource.js";
+export { toolCapabilityForName, DEFAULT_TOOL_CAPABILITY } from "./tools/ToolTypes.js";
+export { toolDescriptorFor } from "./tools/ToolRegistry.js";
+export { filterLocallyDrivable, isLocallyDrivable } from "./agents/AgentInventory.js";
+// ---------------------------------------------------------------------------
+// Phase 2 MCP connector surface.
+// ---------------------------------------------------------------------------
+export { CODALI_MCP_CLIENT_INFO, CODALI_MCP_PROTOCOL_VERSION, McpClient, McpClientError, createMcpClient, flattenMcpContent, } from "./connectors/mcp/McpClient.js";
+export { mcpToolName, mcpToolToDefinition, mcpToolsToDefinitions, normalizeMcpInputSchema, parseMcpToolName, } from "./connectors/mcp/McpToolAdapter.js";
+export { DEFAULT_MAX_CONCURRENT_CALLS, McpServerRegistry, createMcpServerRegistry, } from "./connectors/mcp/McpServerRegistry.js";
+export { attachMcpTools } from "./connectors/mcp/McpToolSource.js";
+export { ToolsCommand, runTools, parseToolsArgs } from "./cli/ToolsCommand.js";
+export { redactSecretValues } from "./gateway/GatewayTracer.js";
+// ---------------------------------------------------------------------------
+// Phase 3 research surface.
+// ---------------------------------------------------------------------------
+export { buildTemporalContext, renderTemporalContext, resolveRelativeRange, } from "./gateway/TemporalContext.js";
+export { applyResponseSelector, buildHttpUrl, httpConnectorToDefinitions, httpToolName, httpToolToDefinition, } from "./connectors/http/HttpToolDefinition.js";
+export { attachHttpTools } from "./connectors/http/HttpToolSource.js";
+// ---------------------------------------------------------------------------
+// Phase 4: the canonical product API.
+// ---------------------------------------------------------------------------
+export { runCodali, messagesToQuery } from "./api/CodaliApi.js";
+export { handleChatCompletion, toCodaliMessages } from "./api/ChatCompletionsAdapter.js";
+export { createCodaliServer, startCodaliServer } from "./api/CodaliServer.js";
+export { IMAGE_TOOL_NAME, createImageGenerationTool, } from "./connectors/media/ImageGenerationTool.js";
+export { ServeCommand, runServe } from "./cli/ServeCommand.js";
+export { credentialFilePath, loadCredentialFile, parseCredentialFile, resetCredentialCache, resolveCredential, } from "./runcontext/CredentialFile.js";
+export { AuthCommand, runAuth, upsertCredential } from "./cli/AuthCommand.js";
+export { MICROSOFT_GRAPH_SCOPES, DeviceCodeError, microsoftEndpoints, pollForDeviceCodeTokens, refreshAccessToken, startDeviceCode, } from "./connectors/oauth/DeviceCodeAuth.js";
+export { resetAccessTokenCache } from "./connectors/http/HttpToolDefinition.js";
+export { createRelevanceJudge, summarizeResultTitles } from "./gateway/RelevanceJudge.js";

package/dist/providers/ClaudeCliProvider.d.ts

@@ -1,6 +1,8 @@
 import type { Provider, ProviderConfig, ProviderRequest, ProviderResponse } from "./ProviderTypes.js";
 export declare class ClaudeCliProvider implements Provider {
     private readonly config;
+    /** Driven through the claude CLI's text interface; no structured tool calls. */
+    readonly supportsToolCalls = false;
     name: string;
     constructor(config: ProviderConfig);
     generate(request: ProviderRequest): Promise<ProviderResponse>;

package/dist/providers/ClaudeCliProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ClaudeCliProvider.d.ts","sourceRoot":"","sources":["../../src/providers/ClaudeCliProvider.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,QAAQ,EACR,cAAc,EAEd,eAAe,EACf,gBAAgB,EACjB,MAAM,oBAAoB,CAAC;AAkB5B,qBAAa,iBAAkB,YAAW,QAAQ;IAGpC,OAAO,CAAC,QAAQ,CAAC,MAAM;IAFnC,IAAI,SAAgB;gBAES,MAAM,EAAE,cAAc;IAE7C,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC;CA4GpE"}
+{"version":3,"file":"ClaudeCliProvider.d.ts","sourceRoot":"","sources":["../../src/providers/ClaudeCliProvider.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,QAAQ,EACR,cAAc,EAEd,eAAe,EACf,gBAAgB,EACjB,MAAM,oBAAoB,CAAC;AAkB5B,qBAAa,iBAAkB,YAAW,QAAQ;IAMpC,OAAO,CAAC,QAAQ,CAAC,MAAM;IALnC,gFAAgF;IAChF,QAAQ,CAAC,iBAAiB,SAAS;IAEnC,IAAI,SAAgB;gBAES,MAAM,EAAE,cAAc;IAE7C,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC;CA4GpE"}

package/dist/providers/ClaudeCliProvider.js

@@ -13,6 +13,8 @@ const isIgnorableStdinError = (error) => error.code === "EPIPE" || error.code ==
 export class ClaudeCliProvider {
     constructor(config) {
         this.config = config;
+        /** Driven through the claude CLI's text interface; no structured tool calls. */
+        this.supportsToolCalls = false;
         this.name = "claude-cli";
     }
     async generate(request) {

package/dist/providers/CodexCliProvider.d.ts

@@ -1,6 +1,8 @@
 import type { Provider, ProviderConfig, ProviderRequest, ProviderResponse } from "./ProviderTypes.js";
 export declare class CodexCliProvider implements Provider {
     private config;
+    /** Driven through the codex CLI's text interface; no structured tool calls. */
+    readonly supportsToolCalls = false;
     name: string;
     constructor(config: ProviderConfig);
     generate(request: ProviderRequest): Promise<ProviderResponse>;

package/dist/providers/CodexCliProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CodexCliProvider.d.ts","sourceRoot":"","sources":["../../src/providers/CodexCliProvider.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAmB,eAAe,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAqHvH,qBAAa,gBAAiB,YAAW,QAAQ;IAGnC,OAAO,CAAC,MAAM;IAF1B,IAAI,SAAe;gBAEC,MAAM,EAAE,cAAc;IAEpC,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC;CAoKpE"}
+{"version":3,"file":"CodexCliProvider.d.ts","sourceRoot":"","sources":["../../src/providers/CodexCliProvider.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAmB,eAAe,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAqHvH,qBAAa,gBAAiB,YAAW,QAAQ;IAMnC,OAAO,CAAC,MAAM;IAL1B,+EAA+E;IAC/E,QAAQ,CAAC,iBAAiB,SAAS;IAEnC,IAAI,SAAe;gBAEC,MAAM,EAAE,cAAc;IAEpC,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC;CAoKpE"}

package/dist/providers/CodexCliProvider.js

@@ -118,6 +118,8 @@ const isIgnorableStdinError = (error) => error.code === "EPIPE" || error.code ==
 export class CodexCliProvider {
     constructor(config) {
         this.config = config;
+        /** Driven through the codex CLI's text interface; no structured tool calls. */
+        this.supportsToolCalls = false;
         this.name = "codex-cli";
     }
     async generate(request) {

package/dist/providers/MswarmWorkerProvider.d.ts

@@ -1,6 +1,8 @@
 import type { Provider, ProviderRequest, ProviderResponse } from "./ProviderTypes.js";
 export declare class MswarmWorkerProvider implements Provider {
     private readonly config;
+    /** Delegates to a remote worker; tool calls are not surfaced to the caller. */
+    readonly supportsToolCalls = false;
     readonly name = "mswarm-worker";
     private readonly runUrl;
     private readonly apiKey;

package/dist/providers/MswarmWorkerProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MswarmWorkerProvider.d.ts","sourceRoot":"","sources":["../../src/providers/MswarmWorkerProvider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,QAAQ,EAER,eAAe,EACf,gBAAgB,EAEjB,MAAM,oBAAoB,CAAC;AA8C5B,qBAAa,oBAAqB,YAAW,QAAQ;IAKvC,OAAO,CAAC,QAAQ,CAAC,MAAM;IAJnC,QAAQ,CAAC,IAAI,mBAAmB;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;gBAEH,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE;IAWvG,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC;CA+DpE"}
+{"version":3,"file":"MswarmWorkerProvider.d.ts","sourceRoot":"","sources":["../../src/providers/MswarmWorkerProvider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,QAAQ,EAER,eAAe,EACf,gBAAgB,EAEjB,MAAM,oBAAoB,CAAC;AA8C5B,qBAAa,oBAAqB,YAAW,QAAQ;IAQvC,OAAO,CAAC,QAAQ,CAAC,MAAM;IAPnC,+EAA+E;IAC/E,QAAQ,CAAC,iBAAiB,SAAS;IAEnC,QAAQ,CAAC,IAAI,mBAAmB;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;gBAEH,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE;IAWvG,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC;CA+DpE"}

package/dist/providers/MswarmWorkerProvider.js

@@ -39,6 +39,8 @@ const parseToolCalls = (payload) => {
 export class MswarmWorkerProvider {
     constructor(config) {
         this.config = config;
+        /** Delegates to a remote worker; tool calls are not surfaced to the caller. */
+        this.supportsToolCalls = false;
         this.name = "mswarm-worker";
         if (!config.apiKey) {
             throw new Error("AUTH_REQUIRED: mswarm-worker provider requires a synced Worker API key.");

package/dist/providers/OllamaRemoteProvider.d.ts

@@ -1,6 +1,8 @@
 import type { Provider, ProviderConfig, ProviderRequest, ProviderResponse } from "./ProviderTypes.js";
 export declare class OllamaRemoteProvider implements Provider {
     private config;
+    /** Ollama's chat API returns structured tool calls. */
+    readonly supportsToolCalls = true;
     name: string;
     constructor(config: ProviderConfig);
     generate(request: ProviderRequest): Promise<ProviderResponse>;

package/dist/providers/OllamaRemoteProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"OllamaRemoteProvider.d.ts","sourceRoot":"","sources":["../../src/providers/OllamaRemoteProvider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,QAAQ,EACR,cAAc,EACd,eAAe,EACf,gBAAgB,EAGjB,MAAM,oBAAoB,CAAC;AA2J5B,qBAAa,oBAAqB,YAAW,QAAQ;IAGvC,OAAO,CAAC,MAAM;IAF1B,IAAI,SAAmB;gBAEH,MAAM,EAAE,cAAc;IAEpC,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC;CAwKpE"}
+{"version":3,"file":"OllamaRemoteProvider.d.ts","sourceRoot":"","sources":["../../src/providers/OllamaRemoteProvider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,QAAQ,EACR,cAAc,EACd,eAAe,EACf,gBAAgB,EAGjB,MAAM,oBAAoB,CAAC;AA2J5B,qBAAa,oBAAqB,YAAW,QAAQ;IAMvC,OAAO,CAAC,MAAM;IAL1B,uDAAuD;IACvD,QAAQ,CAAC,iBAAiB,QAAQ;IAElC,IAAI,SAAmB;gBAEH,MAAM,EAAE,cAAc;IAEpC,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC;CAwKpE"}

package/dist/providers/OllamaRemoteProvider.js

@@ -132,6 +132,8 @@ const applyResponseFormat = (body, format) => {
 export class OllamaRemoteProvider {
     constructor(config) {
         this.config = config;
+        /** Ollama's chat API returns structured tool calls. */
+        this.supportsToolCalls = true;
         this.name = "ollama-remote";
     }
     async generate(request) {

package/dist/providers/OpenAiCompatibleProvider.d.ts

@@ -1,6 +1,8 @@
 import type { Provider, ProviderConfig, ProviderRequest, ProviderResponse } from "./ProviderTypes.js";
 export declare class OpenAiCompatibleProvider implements Provider {
     private config;
+    /** OpenAI-style function calling is supported and parsed from `tool_calls`. */
+    readonly supportsToolCalls = true;
     name: string;
     private localRunner;
     private authMode;

package/dist/providers/OpenAiCompatibleProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"OpenAiCompatibleProvider.d.ts","sourceRoot":"","sources":["../../src/providers/OpenAiCompatibleProvider.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACV,QAAQ,EACR,cAAc,EAEd,eAAe,EACf,gBAAgB,EAGjB,MAAM,oBAAoB,CAAC;AAsH5B,qBAAa,wBAAyB,YAAW,QAAQ;IAM3C,OAAO,CAAC,MAAM;IAL1B,IAAI,SAAuB;IAC3B,OAAO,CAAC,WAAW,CAAoC;IACvD,OAAO,CAAC,QAAQ,CAAsB;IACtC,OAAO,CAAC,sBAAsB,CAAoC;gBAE9C,MAAM,EAAE,cAAc;IAWpC,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAsMnE,OAAO,CAAC,WAAW;CAepB"}
+{"version":3,"file":"OpenAiCompatibleProvider.d.ts","sourceRoot":"","sources":["../../src/providers/OpenAiCompatibleProvider.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACV,QAAQ,EACR,cAAc,EAEd,eAAe,EACf,gBAAgB,EAGjB,MAAM,oBAAoB,CAAC;AAsH5B,qBAAa,wBAAyB,YAAW,QAAQ;IAS3C,OAAO,CAAC,MAAM;IAR1B,+EAA+E;IAC/E,QAAQ,CAAC,iBAAiB,QAAQ;IAElC,IAAI,SAAuB;IAC3B,OAAO,CAAC,WAAW,CAAoC;IACvD,OAAO,CAAC,QAAQ,CAAsB;IACtC,OAAO,CAAC,sBAAsB,CAAoC;gBAE9C,MAAM,EAAE,cAAc;IAWpC,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAsMnE,OAAO,CAAC,WAAW;CAepB"}

package/dist/providers/OpenAiCompatibleProvider.js

@@ -83,6 +83,8 @@ const buildPromptOnlyFormatInstruction = (format) => {
 export class OpenAiCompatibleProvider {
     constructor(config) {
         this.config = config;
+        /** OpenAI-style function calling is supported and parsed from `tool_calls`. */
+        this.supportsToolCalls = true;
         this.name = "openai-compatible";
         const normalizedLocal = normalizeLocalOpenAiCompatibleRunnerConfig({
             config,

package/dist/providers/ProviderTypes.d.ts

@@ -91,6 +91,19 @@ export interface ProviderConfig {
 }
 export interface Provider {
     name: string;
+    /**
+     * Whether this adapter can return `ProviderResponse.toolCalls`.
+     *
+     * Distinct from an agent's advertised `supportsTools`: a CLI-backed agent may
+     * well have tools of its own, but this adapter drives it through a text
+     * interface and can never surface a structured tool call. Treating the two as
+     * the same produces a plan full of tool tasks and then zero tool calls, with
+     * nothing in the trace explaining why.
+     *
+     * Undefined is read as false.
+     */
+    supportsToolCalls?: boolean;
     generate(request: ProviderRequest): Promise<ProviderResponse>;
 }
+export declare const providerSupportsToolCalls: (provider: Provider) => boolean;
 //# sourceMappingURL=ProviderTypes.d.ts.map

package/dist/providers/ProviderTypes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ProviderTypes.d.ts","sourceRoot":"","sources":["../../src/providers/ProviderTypes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iCAAiC,EACjC,mBAAmB,EACnB,eAAe,EACf,iCAAiC,EAClC,MAAM,eAAe,CAAC;AAEvB,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,MAAM,GAAG,WAAW,GAAG,MAAM,CAAC;AAEpE,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,MAAM,gBAAgB,GAAG,UAAU,GAAG,WAAW,GAAG,UAAU,GAAG,MAAM,CAAC;AAE9E,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAClD;IACE,IAAI,EAAE,aAAa,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,GACD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,gBAAgB,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7D;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvC,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,GAAG,aAAa,GAAG,MAAM,GAAG,MAAM,CAAC;IAC/C,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,KAAK,CAAC,EAAE,sBAAsB,EAAE,CAAC;IACjC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAChD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,sBAAsB,CAAC;IACxC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAC;IACtC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,eAAe,CAAC;IACzB,SAAS,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC/B,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,iCAAiC,CAAC;IAChD,UAAU,CAAC,EAAE,eAAe,CAAC;IAC7B,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAC/B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,sBAAsB,CAAC,EAAE,iCAAiC,CAAC;IAC3D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;CAC/D"}
+{"version":3,"file":"ProviderTypes.d.ts","sourceRoot":"","sources":["../../src/providers/ProviderTypes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iCAAiC,EACjC,mBAAmB,EACnB,eAAe,EACf,iCAAiC,EAClC,MAAM,eAAe,CAAC;AAEvB,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,MAAM,GAAG,WAAW,GAAG,MAAM,CAAC;AAEpE,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,MAAM,gBAAgB,GAAG,UAAU,GAAG,WAAW,GAAG,UAAU,GAAG,MAAM,CAAC;AAE9E,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAClD;IACE,IAAI,EAAE,aAAa,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,GACD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,gBAAgB,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7D;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvC,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,GAAG,aAAa,GAAG,MAAM,GAAG,MAAM,CAAC;IAC/C,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,KAAK,CAAC,EAAE,sBAAsB,EAAE,CAAC;IACjC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAChD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,sBAAsB,CAAC;IACxC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAC;IACtC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,eAAe,CAAC;IACzB,SAAS,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC/B,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,iCAAiC,CAAC;IAChD,UAAU,CAAC,EAAE,eAAe,CAAC;IAC7B,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAC/B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,sBAAsB,CAAC,EAAE,iCAAiC,CAAC;IAC3D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb;;;;;;;;;;OAUG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;CAC/D;AAED,eAAO,MAAM,yBAAyB,GAAI,UAAU,QAAQ,KAAG,OAC1B,CAAC"}

package/dist/providers/ProviderTypes.js

@@ -1 +1 @@
-export {};
+export const providerSupportsToolCalls = (provider) => provider.supportsToolCalls === true;

package/dist/runcontext/CredentialFile.d.ts

@@ -0,0 +1,12 @@
+export declare const parseCredentialFile: (contents: string) => Record<string, string>;
+export declare const loadCredentialFile: (filePath?: string, forceReload?: boolean) => Record<string, string>;
+/**
+ * Resolves a credential name. The process environment wins over the file, so a
+ * one-off `GITHUB_TOKEN=… codali ask …` overrides the stored value without
+ * editing anything.
+ */
+export declare const resolveCredential: (name: string) => string | undefined;
+/** Test-only: drops the cached file so a fresh read can be exercised. */
+export declare const resetCredentialCache: () => void;
+export declare const credentialFilePath: () => string;
+//# sourceMappingURL=CredentialFile.d.ts.map

package/dist/runcontext/CredentialFile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CredentialFile.d.ts","sourceRoot":"","sources":["../../src/runcontext/CredentialFile.ts"],"names":[],"mappings":"AAwCA,eAAO,MAAM,mBAAmB,GAAI,UAAU,MAAM,KAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAc3E,CAAC;AAEF,eAAO,MAAM,kBAAkB,GAC7B,WAAU,MAAmB,EAC7B,qBAAmB,KAClB,MAAM,CAAC,MAAM,EAAE,MAAM,CAcvB,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,GAAI,MAAM,MAAM,KAAG,MAAM,GAAG,SACT,CAAC;AAElD,yEAAyE;AACzE,eAAO,MAAM,oBAAoB,QAAO,IAEvC,CAAC;AAEF,eAAO,MAAM,kBAAkB,QAAO,MAAoB,CAAC"}

package/dist/runcontext/CredentialFile.js

@@ -0,0 +1,81 @@
+import { existsSync, readFileSync } from "node:fs";
+import { homedir } from "node:os";
+import path from "node:path";
+/**
+ * Reads operator credentials from `~/.codali/.creds`.
+ *
+ * Config files reference secrets indirectly (`env:GITHUB_TOKEN`) so a config
+ * can be read, diffed, and shared without leaking anything. That indirection is
+ * only useful if the values live somewhere convenient, and exporting shell
+ * variables before every command is not convenient.
+ *
+ * ## Why only the user-level file
+ *
+ * This deliberately does **not** read a `.creds` from the workspace. A
+ * checked-out repository is untrusted input — the same reason
+ * `scrubRepoConfig` refuses repository-supplied credentials. A repo that
+ * shipped its own `.creds` could silently substitute the token used for a
+ * connector the user configured. Credentials come from the operator's home
+ * directory or the process environment, never from the tree being analysed.
+ *
+ * Format is dotenv-style: `KEY=value`, `#` comments, optional quotes.
+ */
+const CREDS_FILE = path.join(homedir(), ".codali", ".creds");
+let cache;
+const stripQuotes = (value) => {
+    const trimmed = value.trim();
+    if (trimmed.length >= 2) {
+        const first = trimmed[0];
+        const last = trimmed[trimmed.length - 1];
+        if ((first === '"' && last === '"') || (first === "'" && last === "'")) {
+            return trimmed.slice(1, -1);
+        }
+    }
+    return trimmed;
+};
+export const parseCredentialFile = (contents) => {
+    const values = {};
+    for (const rawLine of contents.split(/\r?\n/)) {
+        const line = rawLine.trim();
+        if (!line || line.startsWith("#"))
+            continue;
+        // `export FOO=bar` is accepted so the same file can also be sourced by a shell.
+        const withoutExport = line.startsWith("export ") ? line.slice(7).trim() : line;
+        const separator = withoutExport.indexOf("=");
+        if (separator <= 0)
+            continue;
+        const key = withoutExport.slice(0, separator).trim();
+        if (!key)
+            continue;
+        values[key] = stripQuotes(withoutExport.slice(separator + 1));
+    }
+    return values;
+};
+export const loadCredentialFile = (filePath = CREDS_FILE, forceReload = false) => {
+    if (cache && !forceReload)
+        return cache;
+    if (!existsSync(filePath)) {
+        cache = {};
+        return cache;
+    }
+    try {
+        cache = parseCredentialFile(readFileSync(filePath, "utf8"));
+    }
+    catch {
+        // An unreadable creds file must not stop a run; the connector will fail
+        // with a clearer authentication error than anything raised here.
+        cache = {};
+    }
+    return cache;
+};
+/**
+ * Resolves a credential name. The process environment wins over the file, so a
+ * one-off `GITHUB_TOKEN=… codali ask …` overrides the stored value without
+ * editing anything.
+ */
+export const resolveCredential = (name) => process.env[name] ?? loadCredentialFile()[name];
+/** Test-only: drops the cached file so a fresh read can be exercised. */
+export const resetCredentialCache = () => {
+    cache = undefined;
+};
+export const credentialFilePath = () => CREDS_FILE;

package/dist/runcontext/RunContextResolver.d.ts

@@ -0,0 +1,126 @@
+import type { McpServerDefinition } from "../connectors/mcp/McpClient.js";
+import type { HttpConnectorDefinition } from "../connectors/http/HttpToolDefinition.js";
+/**
+ * The one seam through which Codali learns what a request is allowed to touch.
+ *
+ * Codali is meant to serve many products, and a multi-tenant product like
+ * okacam has a different tool set, different credentials, and different limits
+ * for every tenant. So the tool configuration is never read from a file at run
+ * time — it is *resolved* per request.
+ *
+ * A config file is simply one implementation of this interface, used by the
+ * local CLI and single-tenant deployments. An embedded product implements its
+ * own, or passes a `RunContext` directly on the request; either way the host
+ * supplies the context, and Codali never calls back into the product to fetch
+ * it. That callback would create a circular dependency
+ * (product -> codali -> product) plus the caching, invalidation, and
+ * failure-mode machinery that comes with it, and the authenticated host already
+ * holds this data.
+ */
+export interface RunContextRepo {
+    root?: string;
+    repoId?: string;
+}
+export interface RunContextDocdex {
+    baseUrl?: string;
+    apiKey?: string;
+    repoRoot?: string;
+    repoId?: string;
+    allowedOperations?: string[];
+}
+export interface RunContextTenant {
+    id?: string;
+    slug?: string;
+    realm?: string;
+}
+export interface RunContextLimits {
+    maxRounds?: number;
+    maxToolCalls?: number;
+    maxModelCalls?: number;
+    deadlineMs?: number;
+}
+export interface RunContextAgentRoles {
+    /** Routes, plans, assesses completeness, repairs. Runs on every question. */
+    orchestrator?: string;
+    /** Makes the tool calls. Defaults to the orchestrator when unset. */
+    worker?: string;
+    /** Produces multi-source answers. */
+    synthesizer?: string;
+    /** Generates images and other media. */
+    media?: string;
+}
+export interface RunContext {
+    tenant?: RunContextTenant;
+    repo?: RunContextRepo;
+    docdex?: RunContextDocdex;
+    agentRoles?: RunContextAgentRoles;
+    limits?: RunContextLimits;
+    /**
+     * MCP servers this run may connect to.
+     *
+     * Only ever populated from user/host config or a host-supplied context —
+     * never from repository config. See {@link scrubRepoConfig}.
+     */
+    mcpServers?: McpServerDefinition[];
+    /**
+     * Hand-declared HTTP connectors. Same trust rules as MCP servers: trusted
+     * layers only, never repository config.
+     */
+    httpConnectors?: HttpConnectorDefinition[];
+    /** Tool names permitted for this run. Absent means "registry default". */
+    allowedTools?: string[];
+    deniedTools?: string[];
+    /** Non-fatal problems encountered while resolving, surfaced in the trace. */
+    warnings?: string[];
+}
+export interface RunContextResolveInput {
+    workspaceRoot: string;
+    tenant?: RunContextTenant;
+    /** Context supplied directly by an embedding host, taking precedence. */
+    provided?: RunContext;
+}
+export interface RunContextResolver {
+    readonly id: string;
+    resolve(input: RunContextResolveInput): Promise<RunContext>;
+}
+export interface RepoConfigScrubResult {
+    value: Record<string, unknown>;
+    rejectedKeys: string[];
+}
+/**
+ * Strips forbidden keys from a repository config, recording what was dropped.
+ * Rejection is loud rather than silent: the keys land in run warnings so a
+ * repository that tries to widen its own permissions is visible.
+ */
+export declare const scrubRepoConfig: (config: Record<string, unknown>, pathPrefix?: string) => RepoConfigScrubResult;
+/**
+ * Merges a narrower context over a broader one. Allow-lists intersect and
+ * deny-lists union, so a later layer can only ever restrict what an earlier one
+ * permitted — never widen it.
+ */
+export declare const mergeRunContexts: (base: RunContext, override: RunContext) => RunContext;
+export interface LocalConfigResolverOptions {
+    /** Overridden in tests; defaults to `~/.codali`. */
+    userConfigDir?: string;
+}
+/**
+ * Resolves run context from trusted user config, then applies the repository's
+ * narrowing config on top. Used by the CLI and any single-tenant deployment.
+ */
+export declare class LocalConfigRunContextResolver implements RunContextResolver {
+    private readonly options;
+    readonly id = "local_config";
+    constructor(options?: LocalConfigResolverOptions);
+    resolve(input: RunContextResolveInput): Promise<RunContext>;
+}
+/**
+ * Uses context handed over by an embedding host. This is the okacam path: the
+ * product resolves the tenant's tools and credentials from its own database and
+ * passes them on the request.
+ */
+export declare class ProvidedRunContextResolver implements RunContextResolver {
+    readonly id = "provided";
+    resolve(input: RunContextResolveInput): Promise<RunContext>;
+}
+export declare const resolveRunContext: (input: RunContextResolveInput, resolver?: RunContextResolver) => Promise<RunContext>;
+//# sourceMappingURL=RunContextResolver.d.ts.map

package/dist/runcontext/RunContextResolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RunContextResolver.d.ts","sourceRoot":"","sources":["../../src/runcontext/RunContextResolver.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0CAA0C,CAAC;AAGxF;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,oBAAoB;IACnC,6EAA6E;IAC7E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,qEAAqE;IACrE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qCAAqC;IACrC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wCAAwC;IACxC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,IAAI,CAAC,EAAE,cAAc,CAAC;IACtB,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,UAAU,CAAC,EAAE,oBAAoB,CAAC;IAClC,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B;;;;;OAKG;IACH,UAAU,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACnC;;;OAGG;IACH,cAAc,CAAC,EAAE,uBAAuB,EAAE,CAAC;IAC3C,0EAA0E;IAC1E,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,sBAAsB;IACrC,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,yEAAyE;IACzE,QAAQ,CAAC,EAAE,UAAU,CAAC;CACvB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CAC7D;AA2CD,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED;;;;GAIG;AACH,eAAO,MAAM,eAAe,GAC1B,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,mBAAe,KACd,qBAoBF,CAAC;AA6OF;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,GAAI,MAAM,UAAU,EAAE,UAAU,UAAU,KAAG,UAiCzE,CAAC;AAEF,MAAM,WAAW,0BAA0B;IACzC,oDAAoD;IACpD,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;GAGG;AACH,qBAAa,6BAA8B,YAAW,kBAAkB;IAG1D,OAAO,CAAC,QAAQ,CAAC,OAAO;IAFpC,QAAQ,CAAC,EAAE,kBAAkB;gBAEA,OAAO,GAAE,0BAA+B;IAE/D,OAAO,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,UAAU,CAAC;CA8BlE;AAED;;;;GAIG;AACH,qBAAa,0BAA2B,YAAW,kBAAkB;IACnE,QAAQ,CAAC,EAAE,cAAc;IAEnB,OAAO,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,UAAU,CAAC;CAYlE;AAED,eAAO,MAAM,iBAAiB,GAC5B,OAAO,sBAAsB,EAC7B,WAAW,kBAAkB,KAC5B,OAAO,CAAC,UAAU,CAKpB,CAAC"}