@mpfrontend/ai-skills 0.0.0-stage → 0.1.0

package/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -1,3 +1,25 @@
-# Temporary Holding Version
+# @mpfrontend/ai-skills
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Versioned, product-neutral repository workflows installed explicitly by the MP Frontend CLI.
+The approved catalog has eighteen finite source procedures. The base profile contains fourteen
+implementation, integration, verification, upgrade and release-preparation workflows; the design
+profile adds four import/sync/reconcile/review procedures. Availability means a usable procedure for the implemented finite profile,
+not complete protected scaffolding, schema widgets, arbitrary locales, DLS coverage or agent parity.
+Base installs fourteen; design profile includes all eighteen. Design operations consume a finite reviewed
+local export and hashed evidence, not a Figma extractor or test/visual execution engine. The CLI's
+packaged DESIGN-SYNC.md defines the exact profile and attestation limits.
+The workspace source contract distinguishes a consumer-owned `existing` DLS, a pinned public
+`mpfrontend` release and code-first `none`. Skills inspect and preserve that choice; they never switch
+it merely to make a workflow pass or publish a private design source.
+Installation never runs in npm postinstall and never writes personal/global agent configuration.
+
+`mpfrontend skills list|install|update|check --json` uses the same source for Codex and Claude Code
+repository discovery. Installation is idempotent, dry-run performs no writes and locally modified or
+unowned skill files cause a collision. AGENTS.md, CLAUDE.md and unrelated skills are preserved.
+Format/CLI fixture tests do not establish actual Codex/Claude behavioral equivalence.
+
+Installation holds an exclusive repository-local `skills-install.lock`; a concurrent or interrupted
+installation fails closed. Rollback preserves files edited by another agent after replacement and
+reports the conflict. This is not a filesystem transaction across a machine crash. If a process dies,
+inspect the exact owned files and skills-lock hashes before manually recovering the marker; never
+delete a marker belonging to a running process or retry with a force-overwrite flag.

package/dist/index.d.ts

@@ -0,0 +1,48 @@
+export declare const SKILLS_VERSION = "0.1.0", SKILLS_CLI_VERSION = "0.1.0";
+export declare class SkillsError extends Error {
+    readonly exitCode: number;
+    constructor(message: string, exitCode?: number);
+}
+export declare function skillCatalog(): {
+    version: string;
+    cliVersion: string;
+    skills: {
+        reason?: string;
+        name: string;
+        profile: string;
+        available: boolean;
+    }[];
+};
+type Options = {
+    directory: string;
+    profile?: 'base' | 'design';
+    agent?: 'codex' | 'claude' | 'both';
+    dryRun?: boolean;
+    update?: boolean;
+};
+export declare function installSkills(options: Options): Promise<{
+    ok: boolean;
+    version: string;
+    profile: "base" | "design";
+    agents: ("codex" | "claude")[];
+    dryRun: boolean;
+    changes: {
+        path: string;
+        beforeHash: string | null;
+        afterHash: string;
+    }[];
+    installed: string[];
+    unavailable: {
+        reason?: string;
+        name: string;
+        profile: string;
+        available: boolean;
+    }[];
+}>;
+export declare function checkSkills(directory: string): Promise<{
+    ok: boolean;
+    version: string;
+    checked: number;
+    agents: ("codex" | "claude")[];
+}>;
+export {};

package/dist/index.js

@@ -0,0 +1,221 @@
+import { readFile, lstat, realpath, mkdir, writeFile, rename, unlink, readdir } from 'node:fs/promises';
+import { resolve, join, dirname } from 'node:path';
+import { createHash, randomUUID } from 'node:crypto';
+export const SKILLS_VERSION = '0.1.0', SKILLS_CLI_VERSION = '0.1.0';
+const names = ['scaffold-app', 'implement-feature', 'integrate-openapi', 'form-from-api', 'table-from-api',
+    'integrate-auth', 'apply-access', 'use-ui', 'configure-i18n', 'configure-theme', 'integrate-realtime',
+    'verify-frontend', 'upgrade-project', 'prepare-release', 'import-design-system', 'sync-design-tokens',
+    'reconcile-design-components', 'review-design-drift'];
+const available = new Set(names);
+const hash = (text) => createHash('sha256').update(text).digest('hex');
+export class SkillsError extends Error {
+    exitCode;
+    constructor(message, exitCode = 4) {
+        super(message);
+        this.exitCode = exitCode;
+    }
+}
+export function skillCatalog() {
+    return { version: SKILLS_VERSION, cliVersion: SKILLS_CLI_VERSION, skills: names.map((name, index) => ({
+            name: 'mpfrontend-' + name, profile: index < 14 ? 'base' : 'design', available: available.has(name),
+            ...(available.has(name) ? {} : { reason: 'CAPABILITY_AND_BEHAVIORAL_ACCEPTANCE_PENDING' })
+        })) };
+}
+const lockPath = '.mpfrontend/skills-lock.json';
+const mutexPath = '.mpfrontend/skills-install.lock';
+async function content(root, path) {
+    let current = root;
+    for (const part of path.split('/')) {
+        current = join(current, part);
+        try {
+            const info = await lstat(current);
+            if (info.isSymbolicLink())
+                throw new SkillsError('SKILL_PATH_SYMLINK');
+            if (current !== join(root, path) && !info.isDirectory())
+                throw new SkillsError('SKILL_PARENT_NOT_DIRECTORY');
+        }
+        catch (error) {
+            if (error.code === 'ENOENT')
+                return undefined;
+            throw error;
+        }
+    }
+    try {
+        return await readFile(current, 'utf8');
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return undefined;
+        throw error;
+    }
+}
+function parseLock(bytes) {
+    if (bytes === undefined)
+        return undefined;
+    try {
+        const value = JSON.parse(bytes);
+        if (value.generator !== 'MPFrontendSkills' || value.schemaVersion !== 1 || typeof value.version !== 'string' || typeof value.cliVersion !== 'string' || !['base', 'design'].includes(value.profile) || !Array.isArray(value.agents) || !value.agents.length || value.agents.length > 2 || new Set(value.agents).size !== value.agents.length || value.agents.some(v => !['codex', 'claude'].includes(v)) || !value.files || typeof value.files !== 'object' || Array.isArray(value.files))
+            throw new Error();
+        for (const [path, digest] of Object.entries(value.files))
+            if (!/^\.(?:agents|claude)\/skills\/mpfrontend-[a-z0-9-]+\/SKILL\.md$/.test(path) || !/^([a-f0-9]{64})$/.test(digest))
+                throw new Error();
+        return value;
+    }
+    catch {
+        throw new SkillsError('INVALID_SKILLS_LOCK');
+    }
+}
+/**
+ * The `mpfrontend-` prefix is reserved for the catalog. A consumer's own project and domain skills live
+ * beside the installed ones under another prefix; the installer never reads, changes or removes them.
+ */
+async function refuseReservedNames(root) {
+    const catalog = new Set(names.map(name => 'mpfrontend-' + name));
+    for (const base of ['.agents/skills', '.claude/skills']) {
+        const parent = join(root, base);
+        try {
+            if (!(await lstat(parent)).isDirectory())
+                continue;
+        }
+        catch (error) {
+            if (error.code === 'ENOENT')
+                continue;
+            throw error;
+        }
+        for (const entry of await readdir(parent))
+            if (entry.startsWith('mpfrontend-') && !catalog.has(entry))
+                throw new SkillsError('RESERVED_SKILL_NAME:' + base + '/' + entry, 3);
+    }
+}
+export async function installSkills(options) {
+    const profile = options.profile ?? 'base', agent = options.agent ?? 'both';
+    if (!['base', 'design'].includes(profile) || !['codex', 'claude', 'both'].includes(agent))
+        throw new SkillsError('INVALID_SKILL_PROFILE_OR_AGENT', 2);
+    const root = await realpath(resolve(options.directory)), previousLock = await content(root, lockPath), lock = parseLock(previousLock);
+    if (await content(root, mutexPath) !== undefined)
+        throw new SkillsError('SKILLS_INSTALL_BUSY');
+    if (options.update && !lock)
+        throw new SkillsError('SKILLS_NOT_INSTALLED', 2);
+    // Updates preserve the installed selection unless the caller explicitly changes it.
+    const selectedProfile = options.profile ?? lock?.profile ?? profile;
+    const agents = options.agent ? (agent === 'both' ? ['codex', 'claude'] : [agent]) : lock?.agents ?? ['codex', 'claude'];
+    const catalog = skillCatalog(), selected = catalog.skills.filter(s => selectedProfile === 'design' || s.profile === 'base');
+    const desired = new Map(), before = new Map();
+    const files = { ...lock?.files };
+    for (const skill of selected.filter(s => s.available)) {
+        const source = await readFile(new URL('../skills/' + skill.name + '/SKILL.md', import.meta.url), 'utf8');
+        for (const target of agents) {
+            const path = (target === 'codex' ? '.agents' : '.claude') + '/skills/' + skill.name + '/SKILL.md';
+            const old = await content(root, path);
+            if (old !== undefined && (!lock?.files[path] || hash(old) !== lock.files[path]))
+                throw new SkillsError('MODIFIED_OR_UNOWNED_SKILL:' + path);
+            before.set(path, old);
+            files[path] = hash(source);
+            if (old !== source)
+                desired.set(path, source);
+        }
+    }
+    await refuseReservedNames(root);
+    const next = { generator: 'MPFrontendSkills', schemaVersion: 1, version: SKILLS_VERSION, cliVersion: SKILLS_CLI_VERSION, profile: selectedProfile, agents, files };
+    const encoded = JSON.stringify(next, null, 2) + '\n';
+    before.set(lockPath, previousLock);
+    if (previousLock !== encoded)
+        desired.set(lockPath, encoded);
+    const changes = [...desired].map(([path, text]) => ({ path, beforeHash: before.get(path) === undefined ? null : hash(before.get(path)), afterHash: hash(text) }));
+    if (!options.dryRun) {
+        const staged = new Map(), replaced = [];
+        const owner = randomUUID();
+        let acquired = false;
+        try {
+            await mkdir(join(root, '.mpfrontend'), { recursive: true });
+            await content(root, mutexPath);
+            try {
+                await writeFile(join(root, mutexPath), owner, { flag: 'wx' });
+                acquired = true;
+            }
+            catch (error) {
+                if (error.code === 'EEXIST')
+                    throw new SkillsError('SKILLS_INSTALL_BUSY');
+                throw error;
+            }
+            for (const [path, text] of desired) {
+                if (await content(root, path) !== before.get(path))
+                    throw new SkillsError('CONCURRENT_SKILL_EDIT:' + path);
+                await mkdir(dirname(join(root, path)), { recursive: true });
+                const stage = join(dirname(join(root, path)), '.mpfrontend-' + randomUUID());
+                await writeFile(stage, text, { flag: 'wx' });
+                staged.set(path, stage);
+            }
+            // Lock is written last. No AGENTS.md, CLAUDE.md or unrelated skill is altered.
+            for (const [path, stage] of staged) {
+                const current = await content(root, path);
+                if (current !== before.get(path))
+                    throw new SkillsError('CONCURRENT_SKILL_EDIT:' + path);
+                await rename(stage, join(root, path));
+                staged.delete(path);
+                replaced.push(path);
+            }
+        }
+        catch (error) {
+            const conflicts = [];
+            for (const path of replaced.reverse()) {
+                // A second agent's edit is never overwritten by rollback, even on a failed install.
+                if (await content(root, path) !== desired.get(path)) {
+                    conflicts.push(path);
+                    continue;
+                }
+                const old = before.get(path);
+                if (old === undefined)
+                    await unlink(join(root, path));
+                else
+                    await writeFile(join(root, path), old);
+            }
+            if (conflicts.length)
+                throw new SkillsError('SKILL_ROLLBACK_CONFLICT:' + conflicts.join(','));
+            throw error;
+        }
+        finally {
+            for (const path of staged.values())
+                await unlink(path).catch(() => undefined);
+            if (acquired && await content(root, mutexPath) === owner)
+                await unlink(join(root, mutexPath));
+        }
+    }
+    return { ok: true, version: SKILLS_VERSION, profile: selectedProfile, agents, dryRun: options.dryRun ?? false, changes,
+        installed: selected.filter(s => s.available).map(s => s.name), unavailable: selected.filter(s => !s.available) };
+}
+export async function checkSkills(directory) {
+    const root = await realpath(resolve(directory));
+    if (await content(root, mutexPath) !== undefined)
+        throw new SkillsError('SKILLS_INSTALL_BUSY');
+    const lock = parseLock(await content(root, lockPath));
+    if (!lock)
+        throw new SkillsError('SKILLS_NOT_INSTALLED', 2);
+    if (lock.version !== SKILLS_VERSION || lock.cliVersion !== SKILLS_CLI_VERSION)
+        throw new SkillsError('SKILLS_VERSION_MISMATCH', 3);
+    await refuseReservedNames(root);
+    const catalog = skillCatalog();
+    let checked = 0;
+    for (const skill of catalog.skills.filter(s => s.available && (lock.profile === 'design' || s.profile === 'base')))
+        for (const agent of lock.agents) {
+            const path = (agent === 'codex' ? '.agents' : '.claude') + '/skills/' + skill.name + '/SKILL.md';
+            if (!lock.files[path])
+                throw new SkillsError('INCOMPLETE_SKILLS_LOCK:' + path, 3);
+        }
+    for (const [path, digest] of Object.entries(lock.files)) {
+        const old = await content(root, path);
+        if (old === undefined || hash(old) !== digest)
+            throw new SkillsError('INSTALLED_SKILL_DRIFT:' + path, 3);
+        const name = path.split('/')[2], skill = catalog.skills.find(s => s.name === name);
+        if (!skill?.available)
+            throw new SkillsError('UNAVAILABLE_INSTALLED_SKILL:' + name, 3);
+        const source = await readFile(new URL('../skills/' + name + '/SKILL.md', import.meta.url), 'utf8');
+        if (hash(source) !== digest)
+            throw new SkillsError('SKILLS_SOURCE_DRIFT:' + name, 3);
+        checked++;
+    }
+    if (!checked)
+        throw new SkillsError('EMPTY_SKILLS_LOCK', 3);
+    return { ok: true, version: SKILLS_VERSION, checked, agents: lock.agents };
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,QAAQ,EAAC,KAAK,EAAC,QAAQ,EAAC,KAAK,EAAC,SAAS,EAAC,MAAM,EAAC,MAAM,EAAC,OAAO,EAAC,MAAM,kBAAkB,CAAC;AAC/F,OAAO,EAAC,OAAO,EAAC,IAAI,EAAC,OAAO,EAAC,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAC,UAAU,EAAC,UAAU,EAAC,MAAM,aAAa,CAAC;AAElD,MAAM,CAAC,MAAM,cAAc,GAAC,OAAO,EAAC,kBAAkB,GAAC,OAAO,CAAC;AAC/D,MAAM,KAAK,GAAC,CAAC,cAAc,EAAC,mBAAmB,EAAC,mBAAmB,EAAC,eAAe,EAAC,gBAAgB;IAClG,gBAAgB,EAAC,cAAc,EAAC,QAAQ,EAAC,gBAAgB,EAAC,iBAAiB,EAAC,oBAAoB;IAChG,iBAAiB,EAAC,iBAAiB,EAAC,iBAAiB,EAAC,sBAAsB,EAAC,oBAAoB;IACjG,6BAA6B,EAAC,qBAAqB,CAAU,CAAC;AAChE,MAAM,SAAS,GAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;AAC/B,MAAM,IAAI,GAAC,CAAC,IAAW,EAAC,EAAE,CAAA,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1E,MAAM,OAAO,WAAY,SAAQ,KAAK;IAAqC;IAApC,YAAY,OAAc,EAAU,WAAS,CAAC;QAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAA3B,aAAQ,GAAR,QAAQ,CAAE;IAAiB,CAAC;CAAC;AACxG,MAAM,UAAU,YAAY;IAAG,OAAO,EAAC,OAAO,EAAC,cAAc,EAAC,UAAU,EAAC,kBAAkB,EAAC,MAAM,EAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAC,KAAK,EAAC,EAAE,CAAA,CAAC;YAC1H,IAAI,EAAC,aAAa,GAAC,IAAI,EAAC,OAAO,EAAC,KAAK,GAAC,EAAE,CAAA,CAAC,CAAA,MAAM,CAAA,CAAC,CAAA,QAAQ,EAAC,SAAS,EAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;YACtF,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA,CAAC,CAAA,EAAE,CAAA,CAAC,CAAA,EAAC,MAAM,EAAC,8CAA8C,EAAC,CAAC;SACpF,CAAC,CAAC,EAAC,CAAC;AAAA,CAAC;AAIN,MAAM,QAAQ,GAAC,8BAA8B,CAAC;AAC9C,MAAM,SAAS,GAAC,iCAAiC,CAAC;AAClD,KAAK,UAAU,OAAO,CAAC,IAAW,EAAC,IAAW;IAC5C,IAAI,OAAO,GAAC,IAAI,CAAC;IACjB,KAAI,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAC,CAAC;QACjC,OAAO,GAAC,IAAI,CAAC,OAAO,EAAC,IAAI,CAAC,CAAC;QAC3B,IAAG,CAAC;YAAA,MAAM,IAAI,GAAC,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;YAAA,IAAG,IAAI,CAAC,cAAc,EAAE;gBAAC,MAAM,IAAI,WAAW,CAAC,oBAAoB,CAAC,CAAC;YACvG,IAAG,OAAO,KAAG,IAAI,CAAC,IAAI,EAAC,IAAI,CAAC,IAAE,CAAC,IAAI,CAAC,WAAW,EAAE;gBAAC,MAAM,IAAI,WAAW,CAAC,4BAA4B,CAAC,CAAC;QACxG,CAAC;QAAA,OAAM,KAAK,EAAC,CAAC;YAAA,IAAI,KAA+B,CAAC,IAAI,KAAG,QAAQ;gBAAC,OAAO,SAAS,CAAC;YAAA,MAAM,KAAK,CAAC;QAAA,CAAC;IAClG,CAAC;IACD,IAAG,CAAC;QAAA,OAAO,MAAM,QAAQ,CAAC,OAAO,EAAC,MAAM,CAAC,CAAC;IAAA,CAAC;IAAA,OAAM,KAAK,EAAC,CAAC;QAAA,IAAI,KAA+B,CAAC,IAAI,KAAG,QAAQ;YAAC,OAAO,SAAS,CAAC;QAAA,MAAM,KAAK,CAAC;IAAA,CAAC;AAC5I,CAAC;AACD,SAAS,SAAS,CAAC,KAAsB;IACvC,IAAG,KAAK,KAAG,SAAS;QAAC,OAAO,SAAS,CAAC;IACtC,IAAG,CAAC;QACF,MAAM,KAAK,GAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAS,CAAC;QACtC,IAAG,KAAK,CAAC,SAAS,KAAG,kBAAkB,IAAE,KAAK,CAAC,aAAa,KAAG,CAAC,IAAE,OAAO,KAAK,CAAC,OAAO,KAAG,QAAQ,IAAE,OAAO,KAAK,CAAC,UAAU,KAAG,QAAQ,IAAE,CAAC,CAAC,MAAM,EAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAE,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,IAAE,KAAK,CAAC,MAAM,CAAC,MAAM,GAAC,CAAC,IAAE,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,KAAG,KAAK,CAAC,MAAM,CAAC,MAAM,IAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,OAAO,EAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAE,CAAC,KAAK,CAAC,KAAK,IAAE,OAAO,KAAK,CAAC,KAAK,KAAG,QAAQ,IAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;YAAC,MAAM,IAAI,KAAK,EAAE,CAAC;QACjc,KAAI,MAAM,CAAC,IAAI,EAAC,MAAM,CAAC,IAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;YAAC,IAAG,CAAC,iEAAiE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC;gBAAC,MAAM,IAAI,KAAK,EAAE,CAAC;QAC3L,OAAO,KAAK,CAAC;IACf,CAAC;IAAA,MAAK,CAAC;QAAA,MAAM,IAAI,WAAW,CAAC,qBAAqB,CAAC,CAAC;IAAA,CAAC;AACvD,CAAC;AACD;;;GAGG;AACH,KAAK,UAAU,mBAAmB,CAAC,IAAW;IAC5C,MAAM,OAAO,GAAC,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAA,EAAE,CAAA,aAAa,GAAC,IAAI,CAAC,CAAC,CAAC;IAC3D,KAAI,MAAM,IAAI,IAAI,CAAC,gBAAgB,EAAC,gBAAgB,CAAC,EAAC,CAAC;QACrD,MAAM,MAAM,GAAC,IAAI,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC;QAC7B,IAAG,CAAC;YAAA,IAAG,CAAC,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE;gBAAC,SAAS;QAAA,CAAC;QAAA,OAAM,KAAK,EAAC,CAAC;YAAA,IAAI,KAA+B,CAAC,IAAI,KAAG,QAAQ;gBAAC,SAAS;YAAA,MAAM,KAAK,CAAC;QAAA,CAAC;QAC7I,KAAI,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,MAAM,CAAC;YAAC,IAAG,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,IAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAC,MAAM,IAAI,WAAW,CAAC,sBAAsB,GAAC,IAAI,GAAC,GAAG,GAAC,KAAK,EAAC,CAAC,CAAC,CAAC;IAClK,CAAC;AACH,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAe;IACjD,MAAM,OAAO,GAAC,OAAO,CAAC,OAAO,IAAE,MAAM,EAAC,KAAK,GAAC,OAAO,CAAC,KAAK,IAAE,MAAM,CAAC;IAClE,IAAG,CAAC,CAAC,MAAM,EAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAE,CAAC,CAAC,OAAO,EAAC,QAAQ,EAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAC,MAAM,IAAI,WAAW,CAAC,gCAAgC,EAAC,CAAC,CAAC,CAAC;IAC9I,MAAM,IAAI,GAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EAAC,YAAY,GAAC,MAAM,OAAO,CAAC,IAAI,EAAC,QAAQ,CAAC,EAAC,IAAI,GAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAC7H,IAAG,MAAM,OAAO,CAAC,IAAI,EAAC,SAAS,CAAC,KAAG,SAAS;QAAC,MAAM,IAAI,WAAW,CAAC,qBAAqB,CAAC,CAAC;IAC1F,IAAG,OAAO,CAAC,MAAM,IAAE,CAAC,IAAI;QAAC,MAAM,IAAI,WAAW,CAAC,sBAAsB,EAAC,CAAC,CAAC,CAAC;IACzE,oFAAoF;IACpF,MAAM,eAAe,GAAC,OAAO,CAAC,OAAO,IAAE,IAAI,EAAE,OAAO,IAAE,OAAO,CAAC;IAC9D,MAAM,MAAM,GAAyB,OAAO,CAAC,KAAK,CAAA,CAAC,CAAA,CAAC,KAAK,KAAG,MAAM,CAAA,CAAC,CAAA,CAAC,OAAO,EAAC,QAAQ,CAAC,CAAA,CAAC,CAAA,CAAC,KAAK,CAAC,CAAC,CAAA,CAAC,CAAA,IAAI,EAAE,MAAM,IAAE,CAAC,OAAO,EAAC,QAAQ,CAAC,CAAC;IAChI,MAAM,OAAO,GAAC,YAAY,EAAE,EAAC,QAAQ,GAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,eAAe,KAAG,QAAQ,IAAE,CAAC,CAAC,OAAO,KAAG,MAAM,CAAC,CAAC;IAC/G,MAAM,OAAO,GAAC,IAAI,GAAG,EAAiB,EAAC,MAAM,GAAC,IAAI,GAAG,EAA2B,CAAC;IACjF,MAAM,KAAK,GAAC,EAAC,GAAG,IAAI,EAAE,KAAK,EAAC,CAAC;IAC7B,KAAI,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,SAAS,CAAC,EAAC,CAAC;QAClD,MAAM,MAAM,GAAC,MAAM,QAAQ,CAAC,IAAI,GAAG,CAAC,YAAY,GAAC,KAAK,CAAC,IAAI,GAAC,WAAW,EAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAC,MAAM,CAAC,CAAC;QACjG,KAAI,MAAM,MAAM,IAAI,MAAM,EAAC,CAAC;YAC1B,MAAM,IAAI,GAAC,CAAC,MAAM,KAAG,OAAO,CAAA,CAAC,CAAA,SAAS,CAAA,CAAC,CAAA,SAAS,CAAC,GAAC,UAAU,GAAC,KAAK,CAAC,IAAI,GAAC,WAAW,CAAC;YACpF,MAAM,GAAG,GAAC,MAAM,OAAO,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC;YACnC,IAAG,GAAG,KAAG,SAAS,IAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAE,IAAI,CAAC,GAAG,CAAC,KAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAAC,MAAM,IAAI,WAAW,CAAC,4BAA4B,GAAC,IAAI,CAAC,CAAC;YAChI,MAAM,CAAC,GAAG,CAAC,IAAI,EAAC,GAAG,CAAC,CAAC;YAAA,KAAK,CAAC,IAAI,CAAC,GAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAAA,IAAG,GAAG,KAAG,MAAM;gBAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAC,MAAM,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IACD,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,IAAI,GAAM,EAAC,SAAS,EAAC,kBAAkB,EAAC,aAAa,EAAC,CAAC,EAAC,OAAO,EAAC,cAAc,EAAC,UAAU,EAAC,kBAAkB,EAAC,OAAO,EAAC,eAAe,EAAC,MAAM,EAAC,KAAK,EAAC,CAAC;IACzJ,MAAM,OAAO,GAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAC,IAAI,EAAC,CAAC,CAAC,GAAC,IAAI,CAAC;IAAA,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAC,YAAY,CAAC,CAAC;IAAA,IAAG,YAAY,KAAG,OAAO;QAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAC,OAAO,CAAC,CAAC;IACzI,MAAM,OAAO,GAAC,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAC,IAAI,CAAC,EAAC,EAAE,CAAA,CAAC,EAAC,IAAI,EAAC,UAAU,EAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAG,SAAS,CAAA,CAAC,CAAA,IAAI,CAAA,CAAC,CAAA,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC,EAAC,SAAS,EAAC,IAAI,CAAC,IAAI,CAAC,EAAC,CAAC,CAAC,CAAC;IAClJ,IAAG,CAAC,OAAO,CAAC,MAAM,EAAC,CAAC;QAClB,MAAM,MAAM,GAAC,IAAI,GAAG,EAAiB,EAAC,QAAQ,GAAU,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAC,UAAU,EAAE,CAAC;QAAA,IAAI,QAAQ,GAAC,KAAK,CAAC;QAC5C,IAAG,CAAC;YACF,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAC,aAAa,CAAC,EAAC,EAAC,SAAS,EAAC,IAAI,EAAC,CAAC,CAAC;YAAA,MAAM,OAAO,CAAC,IAAI,EAAC,SAAS,CAAC,CAAC;YACrF,IAAG,CAAC;gBAAA,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAC,SAAS,CAAC,EAAC,KAAK,EAAC,EAAC,IAAI,EAAC,IAAI,EAAC,CAAC,CAAC;gBAAA,QAAQ,GAAC,IAAI,CAAC;YAAA,CAAC;YAC3E,OAAM,KAAK,EAAC,CAAC;gBAAA,IAAI,KAA+B,CAAC,IAAI,KAAG,QAAQ;oBAAC,MAAM,IAAI,WAAW,CAAC,qBAAqB,CAAC,CAAC;gBAAA,MAAM,KAAK,CAAC;YAAA,CAAC;YAC3H,KAAI,MAAM,CAAC,IAAI,EAAC,IAAI,CAAC,IAAG,OAAO,EAAC,CAAC;gBAC/B,IAAG,MAAM,OAAO,CAAC,IAAI,EAAC,IAAI,CAAC,KAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAC,MAAM,IAAI,WAAW,CAAC,wBAAwB,GAAC,IAAI,CAAC,CAAC;gBACpG,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC,EAAC,EAAC,SAAS,EAAC,IAAI,EAAC,CAAC,CAAC;gBACvD,MAAM,KAAK,GAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC,EAAC,cAAc,GAAC,UAAU,EAAE,CAAC,CAAC;gBAAA,MAAM,SAAS,CAAC,KAAK,EAAC,IAAI,EAAC,EAAC,IAAI,EAAC,IAAI,EAAC,CAAC,CAAC;gBAAA,MAAM,CAAC,GAAG,CAAC,IAAI,EAAC,KAAK,CAAC,CAAC;YACxI,CAAC;YACD,+EAA+E;YAC/E,KAAI,MAAM,CAAC,IAAI,EAAC,KAAK,CAAC,IAAG,MAAM,EAAC,CAAC;gBAC/B,MAAM,OAAO,GAAC,MAAM,OAAO,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC;gBAAA,IAAG,OAAO,KAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAC,MAAM,IAAI,WAAW,CAAC,wBAAwB,GAAC,IAAI,CAAC,CAAC;gBAC1H,MAAM,MAAM,CAAC,KAAK,EAAC,IAAI,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC,CAAC;gBAAA,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAAA,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;QAAA,OAAM,KAAK,EAAC,CAAC;YACZ,MAAM,SAAS,GAAU,EAAE,CAAC;YAC5B,KAAI,MAAM,IAAI,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAC,CAAC;gBACpC,oFAAoF;gBACpF,IAAG,MAAM,OAAO,CAAC,IAAI,EAAC,IAAI,CAAC,KAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAC,CAAC;oBAAA,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAAA,SAAS;gBAAA,CAAC;gBAChF,MAAM,GAAG,GAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAAA,IAAG,GAAG,KAAG,SAAS;oBAAC,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC,CAAC;;oBAAK,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAC,IAAI,CAAC,EAAC,GAAG,CAAC,CAAC;YACxH,CAAC;YACD,IAAG,SAAS,CAAC,MAAM;gBAAC,MAAM,IAAI,WAAW,CAAC,0BAA0B,GAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1F,MAAM,KAAK,CAAC;QACd,CAAC;gBAAO,CAAC;YACP,KAAI,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,EAAE;gBAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAE,EAAE,CAAA,SAAS,CAAC,CAAC;YAC1E,IAAG,QAAQ,IAAE,MAAM,OAAO,CAAC,IAAI,EAAC,SAAS,CAAC,KAAG,KAAK;gBAAC,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,EAAC,SAAS,CAAC,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IACD,OAAO,EAAC,EAAE,EAAC,IAAI,EAAC,OAAO,EAAC,cAAc,EAAC,OAAO,EAAC,eAAe,EAAC,MAAM,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,IAAE,KAAK,EAAC,OAAO;QACxG,SAAS,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,IAAI,CAAC,EAAC,WAAW,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,CAAC,SAAS,CAAC,EAAC,CAAC;AAC3G,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,SAAgB;IAChD,MAAM,IAAI,GAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IAC9C,IAAG,MAAM,OAAO,CAAC,IAAI,EAAC,SAAS,CAAC,KAAG,SAAS;QAAC,MAAM,IAAI,WAAW,CAAC,qBAAqB,CAAC,CAAC;IAC1F,MAAM,IAAI,GAAC,SAAS,CAAC,MAAM,OAAO,CAAC,IAAI,EAAC,QAAQ,CAAC,CAAC,CAAC;IACnD,IAAG,CAAC,IAAI;QAAC,MAAM,IAAI,WAAW,CAAC,sBAAsB,EAAC,CAAC,CAAC,CAAC;IACzD,IAAG,IAAI,CAAC,OAAO,KAAG,cAAc,IAAE,IAAI,CAAC,UAAU,KAAG,kBAAkB;QAAC,MAAM,IAAI,WAAW,CAAC,yBAAyB,EAAC,CAAC,CAAC,CAAC;IAC1H,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,OAAO,GAAC,YAAY,EAAE,CAAC;IAAA,IAAI,OAAO,GAAC,CAAC,CAAC;IAC3C,KAAI,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,SAAS,IAAE,CAAC,IAAI,CAAC,OAAO,KAAG,QAAQ,IAAE,CAAC,CAAC,OAAO,KAAG,MAAM,CAAC,CAAC;QAAC,KAAI,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAC,CAAC;YACtI,MAAM,IAAI,GAAC,CAAC,KAAK,KAAG,OAAO,CAAA,CAAC,CAAA,SAAS,CAAA,CAAC,CAAA,SAAS,CAAC,GAAC,UAAU,GAAC,KAAK,CAAC,IAAI,GAAC,WAAW,CAAC;YACnF,IAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAC,MAAM,IAAI,WAAW,CAAC,yBAAyB,GAAC,IAAI,EAAC,CAAC,CAAC,CAAC;QAC/E,CAAC;IACD,KAAI,MAAM,CAAC,IAAI,EAAC,MAAM,CAAC,IAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAC,CAAC;QACpD,MAAM,GAAG,GAAC,MAAM,OAAO,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC;QAAA,IAAG,GAAG,KAAG,SAAS,IAAE,IAAI,CAAC,GAAG,CAAC,KAAG,MAAM;YAAC,MAAM,IAAI,WAAW,CAAC,wBAAwB,GAAC,IAAI,EAAC,CAAC,CAAC,CAAC;QACjI,MAAM,IAAI,GAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,EAAC,KAAK,GAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,IAAI,KAAG,IAAI,CAAC,CAAC;QAC3E,IAAG,CAAC,KAAK,EAAE,SAAS;YAAC,MAAM,IAAI,WAAW,CAAC,8BAA8B,GAAC,IAAI,EAAC,CAAC,CAAC,CAAC;QAClF,MAAM,MAAM,GAAC,MAAM,QAAQ,CAAC,IAAI,GAAG,CAAC,YAAY,GAAC,IAAI,GAAC,WAAW,EAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAC,MAAM,CAAC,CAAC;QAC3F,IAAG,IAAI,CAAC,MAAM,CAAC,KAAG,MAAM;YAAC,MAAM,IAAI,WAAW,CAAC,sBAAsB,GAAC,IAAI,EAAC,CAAC,CAAC,CAAC;QAAA,OAAO,EAAE,CAAC;IAC1F,CAAC;IACD,IAAG,CAAC,OAAO;QAAC,MAAM,IAAI,WAAW,CAAC,mBAAmB,EAAC,CAAC,CAAC,CAAC;IACzD,OAAO,EAAC,EAAE,EAAC,IAAI,EAAC,OAAO,EAAC,cAAc,EAAC,OAAO,EAAC,MAAM,EAAC,IAAI,CAAC,MAAM,EAAC,CAAC;AACrE,CAAC"}

package/package.json

@@ -1,6 +1,28 @@
 {
   "name": "@mpfrontend/ai-skills",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.1.0",
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/panahister/mpfrontend.git",
+    "directory": "packages/ai-skills"
+  },
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "skills",
+    "README.md"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  }
 }

package/skills/mpfrontend-apply-access/SKILL.md

@@ -0,0 +1,44 @@
+---
+name: mpfrontend-apply-access
+description: Apply an approved capability and field/action visibility matrix to an MP Frontend consumer while preserving server authority and stale-response safety. Use after roles, resources and grants are defined elsewhere.
+---
+
+# Apply approved access decisions
+
+Requires the reviewed MP Frontend CLI `0.1.0` cohort, `@mpfrontend/access-core` and
+`@mpfrontend/access-react`. Read the approved capability catalog, persona/tenant matrix and consumer
+instructions. Do not create roles, resources, permissions or grants and do not infer authority from a sample
+identity.
+
+Keep backend or BFF enforcement authoritative. UI guards control presentation only and never turn a hidden
+control into an authorization boundary. The consumer's server resolves its rules into an explicit snapshot (context
+reference, revision, expiry, capabilities, fields); the browser decides no rule, never reads a role name or token
+claim and never calls the identity provider or a policy service. Do not add an "open unless denied" mode in the
+browser: the server resolves such a rule into the snapshot. Do not make the optional `roles` of a Security BFF
+route mandatory.
+
+Register each approved page, menu entry, element and field once in the app's page manifest
+(`definePageManifest`): a route with the capability its page and menu entry need, its elements (an element's own
+stable id is its capability key unless it names another) and the field keys its components read. Load the
+snapshot in a server component with `createAccessLoader` of `@mpfrontend/access-react/server` (the consumer's own
+endpoint through the BFF, the request's context reference, `manifestKeys`, an explicit `timeoutMs`) and pass
+`clientSnapshot(result, pageKeys(manifest, page))` to an `AccessProvider`. Present with `AccessGuard`,
+`AccessLink`, `useCapability`, `useFieldState`, `useNavigation` and the `access` property of `ResourceTable` and
+`ResourceForm`. Denied is hidden by default; use a guard's `fallback` or `whenDenied="disabled"` only where the
+approved UX says so, never by guessing.
+
+Wrap protected asynchronous reads in `AuthorityFence`: inside a provider, capture with `useAccessCapture()` before
+a request and call `assertCurrent()` before publishing its result. The context identity must distinguish subject,
+tenant, effective capability revision and session, so the server's context reference and revision change with them
+and results captured under an older authority cannot publish into a newer view. On identity/tenant/role changes,
+invalidate protected caches and realtime subscriptions without destroying safe unsaved drafts.
+
+Test unauthenticated, forbidden, permitted, tenant-isolated, stale-token, refreshed-token, revoked-role
+and delayed-response cases, an expired snapshot on an idle screen and a revision change during a pending request.
+Run `assertPageManifest(manifest, {routes: await appRoutes('src/app'), ids})` with `appRoutes` from
+`@mpfrontend/access-react/testing`. Include a failing control that proves removing the fence, a guard or the
+server check would expose the defect. Exercise the actual browser surface for every approved persona, check that
+the first paint holds no denied entry, and verify the API still refuses direct unauthorized requests.
+
+Report the exact matrix covered, commands/counts and unresolved policy decisions. This skill does not
+authorize identity-administration writes, production policy changes, deployment or publication.