@namzu/cli 37.2.0 → 38.0.0

package/dist/permissions/auto-classifier.d.ts

@@ -0,0 +1,74 @@
+import { type AutoReviewClassifier, type LLMProvider, type Logger, type ResumeHandler, type SessionId, type TokenUsage, type TurnId, createAutoReviewClassifier } from '@namzu/sdk';
+import type { AutoModeSettings } from './settings.js';
+/**
+ * The auto mode's classifier as this application builds it.
+ *
+ * The kernel owns the mechanism (`createAutoReviewClassifier`); this decides
+ * three things it leaves to the host: which model answers, how a model is
+ * reached for the session in hand, and who pays for the passes.
+ *
+ * ## The model
+ *
+ * `permissions.autoMode.model` names it. Left out, the session's own model
+ * answers: a check that is cheaper than the work it guards is a check that is
+ * easy to talk round, so quality is the default. `smallModel` as the value
+ * means the side model, for an operator who would rather spend less. Anything
+ * else is read like `smallModel` itself (`provider/model`, or a bare model of
+ * the session's provider).
+ *
+ * ## Failing closed
+ *
+ * A model that cannot be reached, a provider with no credential on this
+ * machine, a name nobody knows: each blocks the call it was asked about, in
+ * the kernel's own words (`cause: 'unavailable'`). Nothing here turns "could
+ * not check" into "go ahead".
+ */
+/** The reserved word for the side model in `permissions.autoMode.model`. */
+export declare const SMALL_MODEL_KEYWORD = "smallModel";
+export interface ClassifierTarget {
+    readonly providerId: string;
+    readonly model: string;
+}
+export interface SessionClassifierDeps {
+    readonly settings?: AutoModeSettings | undefined;
+    /** The provider and model the conversation runs on right now. */
+    readonly active: () => ClassifierTarget;
+    readonly isKnownProvider: (providerId: string) => boolean;
+    /** A provider client for `target`; rejects when the machine has no credential for it. */
+    readonly providerFor: (sessionId: SessionId, target: ClassifierTarget) => Promise<LLMProvider>;
+    /** The side model's route, when it is wanted. Absent: `smallModel` cannot be honoured. */
+    readonly smallRoute?: (sessionId: SessionId, signal: AbortSignal) => Promise<ClassifierTarget>;
+    readonly log?: Logger | undefined;
+    /** Counts what a pass cost against the turn it belongs to. */
+    readonly charge?: (input: {
+        readonly sessionId: SessionId;
+        readonly turnId: TurnId;
+        readonly usage: TokenUsage;
+        readonly stage: 1 | 2;
+    }) => void;
+    /** Overrides for tests (limits, retry sleep and the like). */
+    readonly classifierOptions?: Partial<Parameters<typeof createAutoReviewClassifier>[0]>;
+}
+/**
+ * Runs a review handler inside the scope the classifier reads its session and
+ * turn from. The kernel passes the classifier the call and the transcript, not
+ * the turn that asked, and a pass has to be charged to a turn.
+ */
+export declare function withClassifierScope(handler: ResumeHandler): ResumeHandler;
+/** Why the classifier cannot be used with these settings, or undefined when it can. */
+export declare function classifierUnavailableReason(opts: {
+    readonly settings?: AutoModeSettings | undefined;
+    readonly disabled?: boolean | undefined;
+    readonly active: ClassifierTarget;
+    readonly isKnownProvider: (providerId: string) => boolean;
+    /** Whether this machine holds a credential for the provider. */
+    readonly hasCredential: (providerId: string) => boolean;
+    readonly hasSmallModel: boolean;
+}): string | undefined;
+/**
+ * One classifier for the session. The model it asks is settled on each review,
+ * so a model switch mid-session is followed; the block counters belong to the
+ * model in use, and start again when it changes.
+ */
+export declare function createSessionClassifier(deps: SessionClassifierDeps): AutoReviewClassifier;
+//# sourceMappingURL=auto-classifier.d.ts.map

package/dist/permissions/auto-classifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-classifier.d.ts","sourceRoot":"","sources":["../../src/permissions/auto-classifier.ts"],"names":[],"mappings":"AAEA,OAAO,EACN,KAAK,oBAAoB,EAGzB,KAAK,WAAW,EAChB,KAAK,MAAM,EACX,KAAK,aAAa,EAClB,KAAK,SAAS,EACd,KAAK,UAAU,EACf,KAAK,MAAM,EACX,0BAA0B,EAC1B,MAAM,YAAY,CAAA;AAGnB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAErD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,4EAA4E;AAC5E,eAAO,MAAM,mBAAmB,eAAe,CAAA;AAE/C,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,QAAQ,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAA;IAChD,iEAAiE;IACjE,QAAQ,CAAC,MAAM,EAAE,MAAM,gBAAgB,CAAA;IACvC,QAAQ,CAAC,eAAe,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAA;IACzD,yFAAyF;IACzF,QAAQ,CAAC,WAAW,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,gBAAgB,KAAK,OAAO,CAAC,WAAW,CAAC,CAAA;IAC9F,0FAA0F;IAC1F,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAC9F,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACjC,8DAA8D;IAC9D,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE;QACzB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;QAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;QACvB,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;QAC1B,QAAQ,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAA;KACrB,KAAK,IAAI,CAAA;IACV,8DAA8D;IAC9D,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,0BAA0B,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;CACtF;AAUD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,aAAa,GAAG,aAAa,CAKzE;AAED,uFAAuF;AACvF,wBAAgB,2BAA2B,CAAC,IAAI,EAAE;IACjD,QAAQ,CAAC,QAAQ,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAA;IAChD,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IACvC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAA;IACjC,QAAQ,CAAC,eAAe,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAA;IACzD,gEAAgE;IAChE,QAAQ,CAAC,aAAa,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAA;IACvD,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;CAC/B,GAAG,MAAM,GAAG,SAAS,CAYrB;AAUD;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,qBAAqB,GAAG,oBAAoB,CAkEzF"}

package/dist/permissions/consent-prompt.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Asks once, on the terminal, before the screen opens, whether bypass mode
+ * may start. Only an explicit yes counts; an empty line, end of input and
+ * anything else decline, so a script that happens to reach it never says yes
+ * by accident.
+ */
+export declare function askBypassConsent(io?: {
+    readonly input?: NodeJS.ReadableStream;
+    readonly output?: NodeJS.WritableStream;
+}): Promise<boolean>;
+//# sourceMappingURL=consent-prompt.d.ts.map

package/dist/permissions/consent-prompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consent-prompt.d.ts","sourceRoot":"","sources":["../../src/permissions/consent-prompt.ts"],"names":[],"mappings":"AAIA;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACrC,EAAE,GAAE;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,cAAc,CAAA;IACtC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,cAAc,CAAA;CAClC,GACJ,OAAO,CAAC,OAAO,CAAC,CAgBlB"}

package/dist/permissions/consent.d.ts

@@ -0,0 +1,9 @@
+export declare function acknowledgementsPath(home?: string): string;
+/** Whether the person has already accepted what bypass mode does. */
+export declare function hasAcknowledgedBypass(home?: string): boolean;
+/** Record the acknowledgement (idempotent). A failure to write is reported, not hidden. */
+export declare function acknowledgeBypass(home?: string, now?: () => Date): void;
+/** The words of the question, shared by the launch prompt and the in-terminal one. */
+export declare const BYPASS_CONSENT_TITLE = "Run without asking?";
+export declare const BYPASS_CONSENT_BODY = "In bypass mode Namzu runs commands and edits files anywhere you can, without asking, including outside this folder. It still stops for removing a home or top-level folder, leaving a sandbox, rules that say deny or ask, and a short list of destructive commands. Only use it in a folder and on a machine you trust.";
+//# sourceMappingURL=consent.d.ts.map

package/dist/permissions/consent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consent.d.ts","sourceRoot":"","sources":["../../src/permissions/consent.ts"],"names":[],"mappings":"AAwBA,wBAAgB,oBAAoB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAE1D;AAcD,qEAAqE;AACrE,wBAAgB,qBAAqB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAE5D;AAED,2FAA2F;AAC3F,wBAAgB,iBAAiB,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,IAAuB,GAAG,IAAI,CAczF;AAED,sFAAsF;AACtF,eAAO,MAAM,oBAAoB,wBAAwB,CAAA;AACzD,eAAO,MAAM,mBAAmB,6TAC2R,CAAA"}

package/dist/permissions/launch.d.ts

@@ -0,0 +1,59 @@
+import { type PermissionMode } from './mode.js';
+import type { PermissionSettings } from './settings.js';
+/**
+ * How a launch settles its permission mode, and what it may not start in.
+ *
+ * One function for every entry point (the terminal, `exec`, `exec --json`, a
+ * resident step) so the answer to "may this process run without asking?" is
+ * the same wherever the question is put.
+ */
+export interface LaunchEnvironment {
+    /** Whether the process runs as the superuser. */
+    readonly root: boolean;
+    /** Whether it runs inside a container or a sandbox that already bounds it. */
+    readonly sandboxed: boolean;
+}
+/** Whether a container or sandbox already bounds this process. */
+export declare function detectSandbox(env?: NodeJS.ProcessEnv): boolean;
+export declare function detectLaunchEnvironment(env?: NodeJS.ProcessEnv): LaunchEnvironment;
+/**
+ * Why a process may not start in `mode`, in words for the person who typed the
+ * flag, or undefined when it may.
+ *
+ * Bypass is refused as the superuser outside a sandbox: with no account
+ * boundary and no container, "run everything" is the whole machine. This is a
+ * decision about the process, not about a rule, so no setting lifts it.
+ */
+export declare function launchRefusal(mode: PermissionMode, options?: {
+    readonly settings?: PermissionSettings | undefined;
+    readonly environment?: LaunchEnvironment | undefined;
+}): string | undefined;
+export interface LaunchPlan {
+    /** The mode the session starts in. */
+    readonly mode: PermissionMode;
+    /** Why: the flag, the bypass alias, the configured default, or nothing. */
+    readonly source: 'launch-flag' | 'launch-bypass' | 'config-default' | 'default';
+    /** Whether Shift+Tab and `/permissions` may reach bypass in this session. */
+    readonly bypassAvailable: boolean;
+}
+/**
+ * The terminal's starting mode from the command line and the configuration.
+ *
+ * A `--permission-mode` names the mode outright and wins over the aliases. The
+ * aliases (`--yolo`, `--dangerously-skip-permissions`) mean bypass. With
+ * neither, the configured `permissions.defaultMode` applies, and a default that
+ * the settings switched off falls back to `prompt` rather than refusing to
+ * start: nobody typed it on this launch.
+ */
+export declare function planLaunchMode(opts: {
+    readonly permissionModeFlag?: string | undefined;
+    readonly skipPermissions?: boolean | undefined;
+    readonly allowBypassFlag?: boolean | undefined;
+    readonly settings?: PermissionSettings | undefined;
+    readonly environment?: LaunchEnvironment | undefined;
+}): {
+    readonly plan: LaunchPlan;
+} | {
+    readonly error: string;
+};
+//# sourceMappingURL=launch.d.ts.map

package/dist/permissions/launch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"launch.d.ts","sourceRoot":"","sources":["../../src/permissions/launch.ts"],"names":[],"mappings":"AAEA,OAAO,EACN,KAAK,cAAc,EAInB,MAAM,WAAW,CAAA;AAClB,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAA;AAEvD;;;;;;GAMG;AAEH,MAAM,WAAW,iBAAiB;IACjC,iDAAiD;IACjD,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;IACtB,8EAA8E;IAC9E,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;CAC3B;AAED,kEAAkE;AAClE,wBAAgB,aAAa,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAG3E;AAED,wBAAgB,uBAAuB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,iBAAiB,CAK/F;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAC5B,IAAI,EAAE,cAAc,EACpB,OAAO,GAAE;IACR,QAAQ,CAAC,QAAQ,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAClD,QAAQ,CAAC,WAAW,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAA;CAC/C,GACJ,MAAM,GAAG,SAAS,CAcpB;AAED,MAAM,WAAW,UAAU;IAC1B,sCAAsC;IACtC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;IAC7B,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,EAAE,aAAa,GAAG,eAAe,GAAG,gBAAgB,GAAG,SAAS,CAAA;IAC/E,6EAA6E;IAC7E,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAA;CACjC;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE;IACpC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAChD,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC9C,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC9C,QAAQ,CAAC,QAAQ,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAClD,QAAQ,CAAC,WAAW,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAA;CACpD,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CA2C7D"}

package/dist/permissions/live-mode.d.ts

@@ -1,4 +1,4 @@
-import type { ResumeHandler, SessionApprovalPolicy } from '@namzu/sdk';
+import { type ResumeHandler, type SessionApprovalPolicy } from '@namzu/sdk';
 import { type PermissionMode } from './mode.js';
 /**
  * A turn's permission mode, changeable while the turn runs.
@@ -54,9 +54,10 @@ export interface LiveModeControl {
     /**
      * Whether the kernel must send a batch to `handler` even when a rule allows
      * every call in it, or a grant from earlier in the turn covers it
-     * (`reviewAllowedCalls`). True only in plan mode, the one mode stricter than
-     * the rules: it refuses a change a rule would let through. Read per batch,
-     * so entering plan mode mid-turn reaches the next batch.
+     * (`reviewAllowedCalls`). True in plan mode, the one mode stricter than
+     * the rules (it refuses a change a rule would let through), and in the
+     * classifier mode, which looks at a call an allow rule is too wide to vouch
+     * for. Read per batch, so entering either mid-turn reaches the next batch.
      */
     reviewAllowedCalls(): boolean;
     /** Receive the turn's approval-policy box (`onApprovalPolicy`). */

package/dist/permissions/live-mode.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"live-mode.d.ts","sourceRoot":"","sources":["../../src/permissions/live-mode.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAA;AAEtE,OAAO,EAAE,KAAK,cAAc,EAAuB,MAAM,WAAW,CAAA;AAEpE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,MAAM,WAAW,eAAe;IAC/B,0CAA0C;IAC1C,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAA;IAChC,uFAAuF;IACvF,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,cAAc,CAAA;IACpC;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAA;IAClC,2EAA2E;IAC3E,QAAQ,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,cAAc,KAAK,aAAa,CAAA;CAC5D;AAED,MAAM,WAAW,eAAe;IAC/B,+EAA+E;IAC/E,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAA;IAC/B,oEAAoE;IACpE,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAA;IACpC,mDAAmD;IACnD,OAAO,IAAI,cAAc,CAAA;IACzB;;;;;;OAMG;IACH,kBAAkB,IAAI,OAAO,CAAA;IAC7B,mEAAmE;IACnE,MAAM,CAAC,GAAG,EAAE,qBAAqB,GAAG,IAAI,CAAA;IACxC;;;OAGG;IACH,MAAM,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC3D;AAED,sFAAsF;AACtF,wBAAgB,sBAAsB,CACrC,IAAI,EAAE,cAAc,EACpB,IAAI,EAAE,KAAK,GAAG,eAAe,GAC3B,MAAM,CASR;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,eAAe,GAAG,eAAe,CAsD/E"}
+{"version":3,"file":"live-mode.d.ts","sourceRoot":"","sources":["../../src/permissions/live-mode.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,aAAa,EAAE,KAAK,qBAAqB,EAA2B,MAAM,YAAY,CAAA;AAEpG,OAAO,EAAE,KAAK,cAAc,EAAuB,MAAM,WAAW,CAAA;AAEpE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,MAAM,WAAW,eAAe;IAC/B,0CAA0C;IAC1C,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAA;IAChC,uFAAuF;IACvF,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,cAAc,CAAA;IACpC;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAA;IAClC,2EAA2E;IAC3E,QAAQ,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,cAAc,KAAK,aAAa,CAAA;CAC5D;AAED,MAAM,WAAW,eAAe;IAC/B,+EAA+E;IAC/E,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAA;IAC/B,oEAAoE;IACpE,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAA;IACpC,mDAAmD;IACnD,OAAO,IAAI,cAAc,CAAA;IACzB;;;;;;;OAOG;IACH,kBAAkB,IAAI,OAAO,CAAA;IAC7B,mEAAmE;IACnE,MAAM,CAAC,GAAG,EAAE,qBAAqB,GAAG,IAAI,CAAA;IACxC;;;OAGG;IACH,MAAM,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC3D;AAED,sFAAsF;AACtF,wBAAgB,sBAAsB,CACrC,IAAI,EAAE,cAAc,EACpB,IAAI,EAAE,KAAK,GAAG,eAAe,GAC3B,MAAM,CASR;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,eAAe,GAAG,eAAe,CAwD/E"}

package/dist/permissions/mode-names.d.ts

@@ -1,2 +1,3 @@
-export declare const PERMISSION_MODE_NAMES: readonly ["prompt", "accept-edits", "auto", "strict", "plan"];
+export declare const PERMISSION_MODE_NAMES: readonly ["prompt", "accept-edits", "plan", "bypass", "auto", "strict"];
+export type PermissionModeName = (typeof PERMISSION_MODE_NAMES)[number];
 //# sourceMappingURL=mode-names.d.ts.map

package/dist/permissions/mode-names.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mode-names.d.ts","sourceRoot":"","sources":["../../src/permissions/mode-names.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,qBAAqB,+DAMQ,CAAA"}
+{"version":3,"file":"mode-names.d.ts","sourceRoot":"","sources":["../../src/permissions/mode-names.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,qBAAqB,yEAOxB,CAAA;AAEV,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAA"}

package/dist/permissions/mode.d.ts

@@ -1,4 +1,5 @@
 import { type ReviewMode } from '@namzu/sdk';
+import { type PermissionModeName } from './mode-names.js';
 /**
  * How a turn resolves the calls no rule decided.
  *
@@ -27,40 +28,79 @@ import { type ReviewMode } from '@namzu/sdk';
  * floor sits above both and no mode reaches it either.
  */
 export type PermissionMode = ReviewMode;
+/**
+ * The kernel modes a person can choose, in the order the picker lists them.
+ *
+ * The CLI works in the kernel's mode names inside and the CLI's own words at
+ * the edge (`permissionModeFromName`, `permissionModeName`): the word `auto`
+ * means the classifier to a person and `classify` to the kernel, while the
+ * kernel's `auto` stays what an unattended run uses. The kernel's `auto` is
+ * not in this list because nobody picks it.
+ */
 export declare const PERMISSION_MODES: readonly PermissionMode[];
+/** The mode a typed name means, or undefined for a word that is not one. */
+export declare function permissionModeFromName(name: unknown): PermissionMode | undefined;
+/** Whether a typed word names a mode a person can choose. */
+export declare function isPermissionModeName(value: unknown): value is PermissionModeName;
+/** The word a person uses for a kernel mode. The kernel's `auto` is the unattended default. */
+export declare function permissionModeName(mode: PermissionMode): string;
 export { ACCEPT_EDITS_TOOLS, PLAN_MODE_REFUSAL } from '@namzu/sdk';
+/** Whether a value is a kernel review mode (what the wire between Desktop and the CLI carries). */
 export declare const isPermissionMode: (value: unknown) => value is PermissionMode;
 export declare function permissionModeLabel(mode: PermissionMode): string;
 /**
- * The mode Shift+Tab moves to. The reference's cycle (`c4t`) runs default,
- * accept edits, plan, then bypass when the session may use it, then back to
- * default; `auto` is that bypass stop here and is reached only when
- * `bypassAvailable`. `auto` and `strict` go back to `prompt`.
+ * What Shift+Tab can reach in this session: the two modes that stop asking are
+ * opt-in, so each is a door that is open or shut, not a mode in a list.
+ */
+export interface ModeAvailability {
+    readonly bypass: boolean;
+    readonly auto: boolean;
+}
+/** The cycle with every stop on it. */
+export declare const FULL_AVAILABILITY: ModeAvailability;
+/**
+ * The mode Shift+Tab moves to. The reference's cycle runs default, accept
+ * edits, plan, then bypass and auto when the session may use them, then back
+ * to default. `strict` is not on it, and neither is the kernel's unattended
+ * `auto`: leaving either goes back to `prompt`.
  */
-export declare function nextCycleMode(current: PermissionMode, bypassAvailable: boolean): PermissionMode;
+export declare function nextCycleMode(current: PermissionMode, available: ModeAvailability): PermissionMode;
 /**
- * Whether Shift+Tab may land on `auto`: the session was launched in it
- * (`--dangerously-skip-permissions`, `--yolo`, `--permission-mode auto`),
- * or asked for it with `--allow-dangerously-skip-permissions`. Choosing
- * `auto` by name in `/permissions` grants it for the rest of the session.
+ * Whether bypass may be entered in this session.
+ *
+ * A flag that names it (`--yolo`, `--dangerously-skip-permissions`,
+ * `--allow-dangerously-skip-permissions`, `--permission-mode bypass`) or the
+ * operator's own `permissions.defaultMode: bypass` opens the door; the
+ * `permissions.disableBypassMode` setting shuts it for good. The loader has
+ * already dropped a project file's `defaultMode: bypass`, so what arrives here
+ * is trusted.
  */
-export declare function bypassAvailableAtLaunch(opts: {
-    readonly launchMode: PermissionMode;
-    readonly allowDangerouslySkipPermissions?: boolean;
+export declare function bypassAvailable(opts: {
+    readonly flagged: boolean;
+    readonly defaultMode?: PermissionModeName | undefined;
+    readonly disabled?: boolean | undefined;
+}): boolean;
+/** Whether auto may be entered: on unless switched off, and only with a model to ask. */
+export declare function autoAvailable(opts: {
+    readonly disabled?: boolean | undefined;
+    readonly classifierUsable: boolean;
 }): boolean;
 /** The behavior shown by both the permission selector and the session report. */
 export declare function permissionModeDescription(mode: PermissionMode): string;
+/** The reason a typed name is not a mode, naming the ones that are. */
+export declare function unknownPermissionModeMessage(flag: string): string;
 /**
  * The mode for a turn, from the flag, the bypass alias, and whether anyone is
  * there to answer.
  *
- * `--yolo` / `--dangerously-skip-permissions` map to `auto`. They were accepted
- * and documented as doing nothing, which was true and unsatisfying; now they
- * say the same thing the mode vocabulary says, and in the TUI they do what
- * their name has always implied. Neither reaches a `deny` rule or the
- * dangerous-pattern floor, so the name still overstates what it can do —
- * deliberately, because it should read as more dangerous than it is rather than
- * less.
+ * `--yolo` and `--dangerously-skip-permissions` mean `bypass`. A rule that
+ * denies, a rule that asks, the dangerous-pattern floor and the few things no
+ * mode may approve in advance still hold; everything else runs without a
+ * question, including a path outside the folder and a program the line does
+ * not name.
+ *
+ * With nobody to ask and no flag the kernel's unattended `auto` applies: it
+ * approves routine calls and refuses whatever would have been a question.
  */
 export declare function resolvePermissionMode(opts: {
     readonly flag?: string | null;

package/dist/permissions/mode.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mode.d.ts","sourceRoot":"","sources":["../../src/permissions/mode.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,UAAU,EAAgB,MAAM,YAAY,CAAA;AAExE;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,MAAM,cAAc,GAAG,UAAU,CAAA;AAEvC,eAAO,MAAM,gBAAgB,EAAE,SAAS,cAAc,EAAiB,CAAA;AAEvE,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAElE,eAAO,MAAM,gBAAgB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,KAAK,IAAI,cAA6B,CAAA;AAEzF,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,CAahE;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,OAAO,GAAG,cAAc,CAY/F;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC7C,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAA;IACnC,QAAQ,CAAC,+BAA+B,CAAC,EAAE,OAAO,CAAA;CAClD,GAAG,OAAO,CAEV;AAED,iFAAiF;AACjF,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,CAatE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE;IAC3C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAA;IAClC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAA;CAC7B,GAAG;IAAE,IAAI,EAAE,cAAc,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAa/C"}
+{"version":3,"file":"mode.d.ts","sourceRoot":"","sources":["../../src/permissions/mode.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,UAAU,EAAgB,MAAM,YAAY,CAAA;AAE1D,OAAO,EAAyB,KAAK,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AAEhF;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,MAAM,cAAc,GAAG,UAAU,CAAA;AAEvC;;;;;;;;GAQG;AACH,eAAO,MAAM,gBAAgB,EAAE,SAAS,cAAc,EAOrD,CAAA;AAWD,4EAA4E;AAC5E,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,OAAO,GAAG,cAAc,GAAG,SAAS,CAIhF;AAED,6DAA6D;AAC7D,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,kBAAkB,CAEhF;AAED,+FAA+F;AAC/F,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,CAS/D;AAED,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAElE,mGAAmG;AACnG,eAAO,MAAM,gBAAgB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,KAAK,IAAI,cAA6B,CAAA;AAEzF,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,CAiBhE;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;IACxB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CACtB;AAED,uCAAuC;AACvC,eAAO,MAAM,iBAAiB,EAAE,gBAA+C,CAAA;AAE/E;;;;;GAKG;AACH,wBAAgB,aAAa,CAC5B,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,gBAAgB,GACzB,cAAc,CAehB;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE;IACrC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;IACrD,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CACvC,GAAG,OAAO,CAGV;AAED,yFAAyF;AACzF,wBAAgB,aAAa,CAAC,IAAI,EAAE;IACnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IACvC,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAA;CAClC,GAAG,OAAO,CAEV;AAED,iFAAiF;AACjF,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,CAiBtE;AAED,uEAAuE;AACvE,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEjE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE;IAC3C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAA;IAClC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAA;CAC7B,GAAG;IAAE,IAAI,EAAE,cAAc,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAU/C"}

package/dist/permissions/rules.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rules.d.ts","sourceRoot":"","sources":["../../src/permissions/rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAGN,KAAK,iBAAiB,EACtB,KAAK,MAAM,EAIX,MAAM,YAAY,CAAA;AAGnB,OAAO,EAAE,KAAK,sBAAsB,EAA0B,MAAM,aAAa,CAAA;AAEjF,6DAA6D;AAC7D,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,KAAK,GAAG,MAAM,CAAA;AAIvD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,gBAAgB,CAE5E;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,cAAc,GAAG,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAA;AAE1F,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAA;AAExE,uEAAuE;AACvE,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,iBAAiB,GAAG,SAAS,GAAG,SAAS,MAAM,EAAE,CAEjG;AAID,qFAAqF;AACrF,wBAAgB,4BAA4B,CAC3C,MAAM,EAAE,iBAAiB,GAAG,SAAS,EACrC,GAAG,GAAE,IAAI,CAAC,MAAM,EAAE,MAAM,CAAe,GACrC,IAAI,CAWN;AAED,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,KAAK,EAAE,SAAS,iBAAiB,EAAE,CAAA;IAC5C;;;;;;;OAOG;IACH,QAAQ,CAAC,WAAW,EAAE,SAAS,iBAAiB,EAAE,CAAA;CAClD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAI7D;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgEG;AACH,wBAAgB,iBAAiB,CAChC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE,OAAO,GAAG,MAAe,GACjC,MAAM,CASR;AA+CD,oEAAoE;AACpE,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAKtE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAU1D;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CACjC,MAAM,EAAE,iBAAiB,GAAG,SAAS,EACrC,MAAM,CAAC,EAAE,sBAAsB,GAC7B,mBAAmB,CAsJrB;AAwCD;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CACpC,MAAM,EAAE,SAAS,CAAC,iBAAiB,GAAG,SAAS,CAAC,EAAE,GAChD,iBAAiB,CASnB;AAED,mEAAmE;AACnE,wBAAgB,kBAAkB,CAAC,MAAM,EAAE;IAC1C,QAAQ,CAAC,WAAW,CAAC,EAAE,iBAAiB,CAAA;IACxC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAA;CACxD,GAAG,SAAS,iBAAiB,EAAE,CAG/B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uBAAuB,CACtC,MAAM,EAAE,SAAS,CAAC,iBAAiB,GAAG,SAAS,CAAC,EAAE,EAClD,MAAM,CAAC,EAAE,sBAAsB,GAC7B,mBAAmB,CAiDrB"}
+{"version":3,"file":"rules.d.ts","sourceRoot":"","sources":["../../src/permissions/rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAGN,KAAK,iBAAiB,EACtB,KAAK,MAAM,EAIX,MAAM,YAAY,CAAA;AAInB,OAAO,EAAE,KAAK,sBAAsB,EAA0B,MAAM,aAAa,CAAA;AAEjF,6DAA6D;AAC7D,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,KAAK,GAAG,MAAM,CAAA;AAIvD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,gBAAgB,CAE5E;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,cAAc,GAAG,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAA;AAE1F,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAA;AAExE,uEAAuE;AACvE,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,iBAAiB,GAAG,SAAS,GAAG,SAAS,MAAM,EAAE,CAEjG;AAID,qFAAqF;AACrF,wBAAgB,4BAA4B,CAC3C,MAAM,EAAE,iBAAiB,GAAG,SAAS,EACrC,GAAG,GAAE,IAAI,CAAC,MAAM,EAAE,MAAM,CAAe,GACrC,IAAI,CAWN;AAED,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,KAAK,EAAE,SAAS,iBAAiB,EAAE,CAAA;IAC5C;;;;;;;OAOG;IACH,QAAQ,CAAC,WAAW,EAAE,SAAS,iBAAiB,EAAE,CAAA;CAClD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAI7D;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgEG;AACH,wBAAgB,iBAAiB,CAChC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE,OAAO,GAAG,MAAe,GACjC,MAAM,CASR;AA+CD,oEAAoE;AACpE,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAKtE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAU1D;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CACjC,MAAM,EAAE,iBAAiB,GAAG,SAAS,EACrC,MAAM,CAAC,EAAE,sBAAsB,GAC7B,mBAAmB,CAwJrB;AAwCD;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CACpC,MAAM,EAAE,SAAS,CAAC,iBAAiB,GAAG,SAAS,CAAC,EAAE,GAChD,iBAAiB,CASnB;AAED,mEAAmE;AACnE,wBAAgB,kBAAkB,CAAC,MAAM,EAAE;IAC1C,QAAQ,CAAC,WAAW,CAAC,EAAE,iBAAiB,CAAA;IACxC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAA;CACxD,GAAG,SAAS,iBAAiB,EAAE,CAG/B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uBAAuB,CACtC,MAAM,EAAE,SAAS,CAAC,iBAAiB,GAAG,SAAS,CAAC,EAAE,EAClD,MAAM,CAAC,EAAE,sBAAsB,GAC7B,mBAAmB,CAiDrB"}

package/dist/permissions/settings.d.ts

@@ -0,0 +1,81 @@
+import type { PermissionModeName } from './mode-names.js';
+/**
+ * The settings that live beside the tool rules in the `permissions` table.
+ *
+ * A key of that table is a tool name, and its value an effect. These four are
+ * not tools; they say which mode a session starts in, whether the two
+ * no-prompt modes may be reached at all, and how the auto mode's classifier is
+ * tuned. They are lifted out of the table when a config is loaded, so the rule
+ * compiler never sees them, and the authority of the file they came from decides
+ * which of them count.
+ *
+ * ## Who may say what
+ *
+ * A mode that stops asking is the operator's choice, never a repository's. A
+ * project file that could write `defaultMode: bypass` would make every clone of
+ * it a session that runs everything the moment someone opens it. So:
+ *
+ * - `defaultMode` of `bypass` or `auto` is honoured from the user's file and the
+ *   managed file only. A project may still pick a stricter default.
+ * - `disableBypassMode` and `disableAutoMode` can only close a door, so every
+ *   file may write them, and a `true` in one file is not undone by another.
+ * - `autoMode` names a model that receives the conversation and the rules that
+ *   steer the classifier, so it is the operator's alone, like `routing`.
+ */
+/** The settings, after the layers have been combined. */
+export interface PermissionSettings {
+    /** The mode a session starts in when the command line names none. */
+    readonly defaultMode?: PermissionModeName;
+    /** No session may enter bypass, whatever flag was given. */
+    readonly disableBypassMode?: boolean;
+    /** No session may enter auto. */
+    readonly disableAutoMode?: boolean;
+    readonly autoMode?: AutoModeSettings;
+    /**
+     * What was written and not honoured, one plain sentence each, so a person
+     * who put a setting in the wrong file is told rather than left to wonder.
+     */
+    readonly ignored?: readonly string[];
+}
+/** How the auto mode's classifier is steered. Every list accepts the `"$defaults"` entry. */
+export interface AutoModeSettings {
+    /**
+     * The classifier's model: `provider:model`, a bare model of the session's
+     * provider, or `smallModel` for the side model. Absent: the session's own model.
+     */
+    readonly model?: string;
+    readonly allow?: readonly string[];
+    readonly softDeny?: readonly string[];
+    readonly hardDeny?: readonly string[];
+    readonly environment?: readonly string[];
+}
+/** The keys of the `permissions` table that are settings and not tool names. */
+export declare const PERMISSION_SETTING_KEYS: readonly string[];
+export declare function isPermissionSettingKey(key: string): boolean;
+/**
+ * What is wrong with the settings in one `permissions` table, or undefined.
+ * The loader raises it as a config error so a typo is said at start-up.
+ */
+export declare function permissionSettingsProblem(table: Readonly<Record<string, unknown>>): {
+    readonly path: readonly string[];
+    readonly message: string;
+} | undefined;
+/** Whether a file speaks with the operator's authority or the workspace's. */
+export type SettingsAuthority = 'operator' | 'workspace';
+/**
+ * Takes the settings out of one layer's `permissions` table.
+ *
+ * `rules` is the table without them; `settings` is what the layer's authority
+ * lets stand; `ignored` says what it does not.
+ */
+export declare function splitPermissionsTable<T>(table: Readonly<Record<string, T>>, authority: SettingsAuthority, where: string): {
+    rules: Record<string, T>;
+    settings: PermissionSettings;
+};
+/**
+ * Combines the layers' settings, lowest precedence first. A later default
+ * replaces an earlier one; a `true` that closes a mode stays; the classifier
+ * settings of a later layer replace those of an earlier one key by key.
+ */
+export declare function mergePermissionSettings(base: PermissionSettings | undefined, next: PermissionSettings): PermissionSettings;
+//# sourceMappingURL=settings.d.ts.map

package/dist/permissions/settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.d.ts","sourceRoot":"","sources":["../../src/permissions/settings.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AAGzD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,yDAAyD;AACzD,MAAM,WAAW,kBAAkB;IAClC,qEAAqE;IACrE,QAAQ,CAAC,WAAW,CAAC,EAAE,kBAAkB,CAAA;IACzC,4DAA4D;IAC5D,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAA;IACpC,iCAAiC;IACjC,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAA;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,gBAAgB,CAAA;IACpC;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CACpC;AAED,6FAA6F;AAC7F,MAAM,WAAW,gBAAgB;IAChC;;;OAGG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACrC,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACrC,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CACxC;AAED,gFAAgF;AAChF,eAAO,MAAM,uBAAuB,EAAE,SAAS,MAAM,EAKpD,CAAA;AAKD,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAE3D;AAKD;;;GAGG;AACH,wBAAgB,yBAAyB,CACxC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GACtC;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAwC5E;AAED,8EAA8E;AAC9E,MAAM,MAAM,iBAAiB,GAAG,UAAU,GAAG,WAAW,CAAA;AAExD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,CAAC,EACtC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAClC,SAAS,EAAE,iBAAiB,EAC5B,KAAK,EAAE,MAAM,GACX;IAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAAC,QAAQ,EAAE,kBAAkB,CAAA;CAAE,CAsC5D;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACtC,IAAI,EAAE,kBAAkB,GAAG,SAAS,EACpC,IAAI,EAAE,kBAAkB,GACtB,kBAAkB,CAYpB"}

package/dist/tui/App.d.ts

@@ -1,6 +1,13 @@
-import { type Message } from '@namzu/sdk';
+import { type Message, type ReasoningEffort, type SessionId } from '@namzu/sdk';
+import { type SubscriptionProviderId } from '../integrations/providers/index.js';
+import type { Batch } from '../integrations/subagents/batches.js';
+import { type ModeAvailability, type PermissionMode } from '../permissions/mode.js';
+import { type ChoicePickerOption } from './ChoicePicker.js';
+import { type AgentSession } from './agent.js';
 import type { TuiExitSummary } from './exit-summary.js';
+import { type CommandPickerEntry } from './slashCommands.js';
 import type { TranscriptMessage, TuiContext } from './types.js';
+import { type ReviewCommit } from './workspace-review.js';
 export interface AppProps {
     readonly ctx: TuiContext;
     readonly onExitSummary?: (summary: TuiExitSummary) => void;
@@ -20,9 +27,161 @@ export type ExternalEditorAdapter = (request: {
     readonly cwd: string;
     readonly signal: AbortSignal;
 }) => Promise<string>;
+type ReviewPreset = 'base-branch' | 'uncommitted' | 'commit' | 'custom';
+type PluginChoiceState = ({
+    readonly kind: 'plugin';
+} | {
+    readonly kind: 'plugin-action';
+}) & {
+    readonly title: string;
+    readonly notice?: string;
+    readonly owner: AgentSession;
+    readonly pluginName?: string;
+    readonly busy?: boolean;
+    readonly values: readonly string[];
+    readonly options: readonly ChoicePickerOption[];
+};
+type ChoicePickerState = {
+    readonly back?: ChoicePickerState;
+    readonly request?: object;
+} & (PluginChoiceState | {
+    readonly kind: 'resume-goal';
+    readonly title: string;
+    readonly notice: string;
+    readonly sessionId: string;
+    readonly values: readonly ('resume' | 'later')[];
+    readonly options: readonly ChoicePickerOption[];
+} | {
+    /**
+     * A question the model put to the operator. `values` are option ids
+     * plus `FREE_TEXT_ANSWER` when the model allowed an answer in the
+     * operator's own words; the resolver lives in a ref, like a
+     * permission's, because a picker is state and a promise is not.
+     */
+    readonly kind: 'user-question';
+    readonly title: string;
+    readonly notice?: string;
+    readonly values: readonly string[];
+    readonly options: readonly ChoicePickerOption[];
+} | {
+    readonly kind: 'command';
+    readonly title: string;
+    readonly notice?: string;
+    readonly values: readonly CommandPickerEntry[];
+    readonly options: readonly ChoicePickerOption[];
+    readonly windowSize: number;
+} | {
+    /**
+     * `/agents batches`. `values` holds `'loading'` alone while the index
+     * read is still in flight — its lone option carries a `disabledReason`,
+     * so Enter cannot select it — and is replaced with the resolved rows
+     * once it settles; never a mix of the two.
+     */
+    readonly kind: 'agent-batches';
+    readonly title: string;
+    readonly notice?: string;
+    readonly values: readonly (Batch | 'loading')[];
+    readonly options: readonly ChoicePickerOption[];
+} | {
+    /** `/workflows`: the runs of this conversation; `values` are their run ids. */
+    readonly kind: 'workflow-runs';
+    readonly title: string;
+    readonly notice?: string;
+    readonly values: readonly string[];
+    readonly options: readonly ChoicePickerOption[];
+} | {
+    readonly kind: 'archive-conversation';
+    readonly title: string;
+    readonly notice?: string;
+    readonly values: readonly ('cancel' | 'archive')[];
+    readonly options: readonly ChoicePickerOption[];
+} | {
+    readonly kind: 'export-destination';
+    readonly title: string;
+    readonly notice?: string;
+    readonly values: readonly ('clipboard' | 'file')[];
+    readonly options: readonly ChoicePickerOption[];
+} | {
+    readonly kind: 'permission-mode';
+    readonly title: string;
+    readonly notice?: string;
+    readonly values: readonly (PermissionMode | 'more' | 'rules')[];
+    readonly options: readonly ChoicePickerOption[];
+} | {
+    /** The first switch into bypass: asked once, then remembered. */
+    readonly kind: 'bypass-consent';
+    readonly title: string;
+    readonly notice?: string;
+    /** Whether the switch was asked for by name (and so gets a reply line). */
+    readonly announce: boolean;
+    readonly values: readonly ('decline' | 'accept')[];
+    readonly options: readonly ChoicePickerOption[];
+} | {
+    readonly kind: 'reasoning-effort';
+    readonly title: string;
+    readonly notice?: string;
+    /** The published model whose paused queue this follow-up may configure. */
+    readonly selectedSession?: AgentSession;
+    /** The last entry is the hypermode row, below a rule; never a `ReasoningEffort`. */
+    readonly values: readonly (ReasoningEffort | undefined | 'hypermode')[];
+    readonly options: readonly ChoicePickerOption[];
+} | {
+    /**
+     * A command that acts on the conversation, typed while an agent is
+     * viewed: asks once, then runs it against the conversation.
+     */
+    readonly kind: 'agent-view-command';
+    readonly title: string;
+    readonly notice?: string;
+    readonly line: string;
+    readonly values: readonly ('cancel' | 'run')[];
+    readonly options: readonly ChoicePickerOption[];
+} | {
+    readonly kind: 'feedback-rating';
+    readonly title: string;
+    readonly notice?: string;
+    readonly messageId: string;
+    readonly sessionId: SessionId;
+    readonly values: readonly ('good' | 'bad')[];
+    readonly options: readonly ChoicePickerOption[];
+} | {
+    readonly kind: 'skill';
+    readonly title: string;
+    readonly notice?: string;
+    readonly values: readonly string[];
+    readonly options: readonly ChoicePickerOption[];
+} | {
+    readonly kind: 'credential-logout';
+    readonly title: string;
+    readonly notice?: string;
+    readonly values: readonly (SubscriptionProviderId | 'google')[];
+    readonly options: readonly ChoicePickerOption[];
+} | {
+    readonly kind: 'review-preset';
+    readonly title: string;
+    readonly notice?: string;
+    readonly values: readonly ReviewPreset[];
+    readonly options: readonly ChoicePickerOption[];
+} | {
+    readonly kind: 'review-branch';
+    readonly title: string;
+    readonly notice?: string;
+    readonly values: readonly string[];
+    readonly options: readonly ChoicePickerOption[];
+} | {
+    readonly kind: 'review-commit';
+    readonly title: string;
+    readonly notice?: string;
+    readonly values: readonly ReviewCommit[];
+    readonly options: readonly ChoicePickerOption[];
+});
 /** Exact operator-authored prompts that belong in terminal input history. */
 export declare function promptHistoryFromConversation(messages: readonly Message[]): readonly string[];
 /** Build the transcript projection of exact model-visible history. */
 export declare function projectConversation(messages: readonly Message[], nextId: () => string, readableUserTexts?: readonly string[]): readonly TranscriptMessage[];
 export declare function App({ ctx: initialCtx, onExitSummary, externalEditor, terminationExit, }: AppProps): import("react/jsx-runtime").JSX.Element;
+export declare function permissionPicker(mode: PermissionMode, more?: boolean, availability?: ModeAvailability): Extract<ChoicePickerState, {
+    kind: 'permission-mode';
+}>;
+export {};
 //# sourceMappingURL=App.d.ts.map

package/dist/tui/App.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"App.d.ts","sourceRoot":"","sources":["../../src/tui/App.tsx"],"names":[],"mappings":"AAiBA,OAAO,EAWN,KAAK,OAAO,EAsBZ,MAAM,YAAY,CAAA;AAqQnB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AA8JvD,OAAO,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAc/D,MAAM,WAAW,QAAQ;IACxB,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAA;IACxB,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,IAAI,CAAA;IAC1D,0EAA0E;IAC1E,QAAQ,CAAC,cAAc,CAAC,EAAE,qBAAqB,CAAA;IAC/C;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE;QAAE,OAAO,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,IAAI,CAAA;KAAE,CAAA;CAC3D;AASD,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,EAAE;IAC7C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;CAC5B,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;AAsVrB,6EAA6E;AAC7E,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,GAAG,SAAS,MAAM,EAAE,CAM7F;AAED,sEAAsE;AACtE,wBAAgB,mBAAmB,CAClC,QAAQ,EAAE,SAAS,OAAO,EAAE,EAC5B,MAAM,EAAE,MAAM,MAAM,EACpB,iBAAiB,GAAE,SAAS,MAAM,EAAO,GACvC,SAAS,iBAAiB,EAAE,CAyE9B;AA6KD,wBAAgB,GAAG,CAAC,EACnB,GAAG,EAAE,UAAU,EACf,aAAa,EACb,cAAsC,EACtC,eAAe,GACf,EAAE,QAAQ,2CAkwXV"}
+{"version":3,"file":"App.d.ts","sourceRoot":"","sources":["../../src/tui/App.tsx"],"names":[],"mappings":"AAiBA,OAAO,EAWN,KAAK,OAAO,EAGZ,KAAK,eAAe,EAKpB,KAAK,SAAS,EAcd,MAAM,YAAY,CAAA;AA4CnB,OAAO,EAQN,KAAK,sBAAsB,EAoB3B,MAAM,oCAAoC,CAAA;AAoC3C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,sCAAsC,CAAA;AA2BjE,OAAO,EACN,KAAK,gBAAgB,EACrB,KAAK,cAAc,EAKnB,MAAM,wBAAwB,CAAA;AAkD/B,OAAO,EAAgB,KAAK,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AA4CzE,OAAO,EAEN,KAAK,YAAY,EAYjB,MAAM,YAAY,CAAA;AAkBnB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AA+HvD,OAAO,EACN,KAAK,kBAAkB,EAYvB,MAAM,oBAAoB,CAAA;AAkB3B,OAAO,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAI/D,OAAO,EACN,KAAK,YAAY,EAIjB,MAAM,uBAAuB,CAAA;AAK9B,MAAM,WAAW,QAAQ;IACxB,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAA;IACxB,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,IAAI,CAAA;IAC1D,0EAA0E;IAC1E,QAAQ,CAAC,cAAc,CAAC,EAAE,qBAAqB,CAAA;IAC/C;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE;QAAE,OAAO,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,IAAI,CAAA;KAAE,CAAA;CAC3D;AASD,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,EAAE;IAC7C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;CAC5B,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;AA2DrB,KAAK,YAAY,GAAG,aAAa,GAAG,aAAa,GAAG,QAAQ,GAAG,QAAQ,CAAA;AA6BvE,KAAK,iBAAiB,GAAG,CAAC;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAA;CAAE,CAAC,GAAG;IAC7F,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAA;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAA;IAClC,QAAQ,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAA;CAC/C,CAAA;AAED,KAAK,iBAAiB,GAAG;IAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,CACzF,iBAAiB,GACjB;IACA,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,QAAQ,GAAG,OAAO,CAAC,EAAE,CAAA;IAChD,QAAQ,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAA;CAC9C,GACD;IACA;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAA;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAA;IAClC,QAAQ,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAA;CAC9C,GACD;IACA,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,SAAS,kBAAkB,EAAE,CAAA;IAC9C,QAAQ,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAA;IAC/C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC1B,GACD;IACA;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAA;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAC,EAAE,CAAA;IAC/C,QAAQ,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAA;CAC9C,GACD;IACA,+EAA+E;IAC/E,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAA;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAA;IAClC,QAAQ,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAA;CAC9C,GACD;IACA,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAA;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,EAAE,CAAA;IAClD,QAAQ,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAA;CAC9C,GACD;IACA,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAA;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,WAAW,GAAG,MAAM,CAAC,EAAE,CAAA;IAClD,QAAQ,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAA;CAC9C,GACD;IACA,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,cAAc,GAAG,MAAM,GAAG,OAAO,CAAC,EAAE,CAAA;IAC/D,QAAQ,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAA;CAC9C,GACD;IACA,iEAAiE;IACjE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAA;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,2EAA2E;IAC3E,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,SAAS,GAAG,QAAQ,CAAC,EAAE,CAAA;IAClD,QAAQ,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAA;CAC9C,GACD;IACA,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAA;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,2EAA2E;IAC3E,QAAQ,CAAC,eAAe,CAAC,EAAE,YAAY,CAAA;IACvC,oFAAoF;IACpF,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,eAAe,GAAG,SAAS,GAAG,WAAW,CAAC,EAAE,CAAA;IACvE,QAAQ,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAA;CAC9C,GACD;IACA;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAA;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,QAAQ,GAAG,KAAK,CAAC,EAAE,CAAA;IAC9C,QAAQ,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAA;CAC9C,GACD;IACA,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;IAC7B,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,GAAG,KAAK,CAAC,EAAE,CAAA;IAC5C,QAAQ,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAA;CAC9C,GACD;IACA,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAA;IAClC,QAAQ,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAA;CAC9C,GACD;IACA,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAA;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,sBAAsB,GAAG,QAAQ,CAAC,EAAE,CAAA;IAC/D,QAAQ,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAA;CAC9C,GACD;IACA,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAA;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAA;IACxC,QAAQ,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAA;CAC9C,GACD;IACA,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAA;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAA;IAClC,QAAQ,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAA;CAC9C,GACD;IACA,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAA;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAA;IACxC,QAAQ,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAA;CAC9C,CACH,CAAA;AAyGD,6EAA6E;AAC7E,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,GAAG,SAAS,MAAM,EAAE,CAM7F;AAED,sEAAsE;AACtE,wBAAgB,mBAAmB,CAClC,QAAQ,EAAE,SAAS,OAAO,EAAE,EAC5B,MAAM,EAAE,MAAM,MAAM,EACpB,iBAAiB,GAAE,SAAS,MAAM,EAAO,GACvC,SAAS,iBAAiB,EAAE,CAyE9B;AA6KD,wBAAgB,GAAG,CAAC,EACnB,GAAG,EAAE,UAAU,EACf,aAAa,EACb,cAAsC,EACtC,eAAe,GACf,EAAE,QAAQ,2CAm3XV;AA6MD,wBAAgB,gBAAgB,CAC/B,IAAI,EAAE,cAAc,EACpB,IAAI,UAAQ,EACZ,YAAY,GAAE,gBAA+C,GAC3D,OAAO,CAAC,iBAAiB,EAAE;IAAE,IAAI,EAAE,iBAAiB,CAAA;CAAE,CAAC,CAoCzD"}