@namzu/sdk 0.4.3 → 0.4.5

package/CHANGELOG.md

@@ -1,5 +1,134 @@
 # Changelog
 
+## 0.4.5
+
+### Patch Changes
+
+- aead3a8: Doctor registry runtime + 5 built-in checks — ses_007 Phase 4.
+
+  `runDoctor(opts?)` aggregates registered checks into a `DoctorReport` with per-check status + summary + sysexits exit code. `registerDoctorCheck(check)` is the programmatic registration entry point.
+
+  **New runtime exports (12 names):**
+
+  - `doctor` (singleton `DoctorRegistry`), `DoctorRegistry`, `createDoctorRegistry`
+  - `registerDoctorCheck(check)` — programmatic registration
+  - `runDoctor(opts?)` → `Promise<DoctorReport>`
+  - `builtInDoctorChecks` — readonly list of the six shipped checks
+  - Six individual built-in checks: `sandboxPlatformCheck`, `cwdWritableCheck`, `tmpdirWritableCheck`, `vaultRegisteredCheck`, `providersRegisteredCheck`, `telemetryInstalledCheck`
+
+  **LLMProvider interface gains optional `doctorCheck?(): Promise<DoctorCheckResult>`.** Non-breaking — existing providers don't need to implement it. Consumers wanting provider health probes register a custom check that walks `ProviderRegistry.getAll()` and calls `provider.doctorCheck?.()` per provider.
+
+  **Built-in checks ship intentionally conservative for v1.** `sandbox.platform` passes on darwin if `/usr/bin/sandbox-exec` is executable; inconclusive on linux (proc namespace probe deferred); warn on win32; inconclusive elsewhere. `runtime.cwd-writable` + `runtime.tmpdir-writable` are real `fs.access(W_OK)` probes. `telemetry.installed` dynamic-imports `@namzu/telemetry` (specifier-variable to evade TS resolution since SDK doesn't depend on telemetry); pass if installed, inconclusive if not. `vault.registered` + `providers.registered` are intentionally inconclusive with explicit "register your own check" guidance — vault and provider registries are module-private and aren't auto-discoverable from a standalone process.
+
+  **Failure isolation:** a thrown check is recorded as `fail` with the throw message; other checks still run. A check exceeding `perCheckTimeoutMs` (default 5000ms) becomes `inconclusive`. Wall-clock timeout (default 10000ms) marks not-yet-completed checks as `inconclusive`. Status set: `pass | fail | inconclusive | warn`. Only `fail` affects the exit code (1); `inconclusive` and `warn` are informational. Empty registry → exit 2 (no config).
+
+  **Embedded usage today, CLI command in the next patch.** Consumers can `import { runDoctor, registerDoctorCheck } from '@namzu/sdk'` and integrate the doctor in their own process where their checks have already executed. The standalone `namzu doctor` CLI command lands in the next patch (Phase 5).
+
+- 8f076e5: ses_007 Phase 5 — doctor runtime moved from `@namzu/sdk` to `@namzu/cli`. Architectural pivot: kernel = SDK (pure runtime primitives), operator surface = CLI (presentation + tooling).
+
+  ## Breaking changes — `@namzu/sdk`
+
+  The following 12 runtime exports have been **removed** from `@namzu/sdk`. They now live in `@namzu/cli`:
+
+  - `doctor` (singleton), `DoctorRegistry`, `createDoctorRegistry`
+  - `registerDoctorCheck`, `runDoctor`
+  - `builtInDoctorChecks`
+  - `sandboxPlatformCheck`, `cwdWritableCheck`, `tmpdirWritableCheck`
+  - `vaultRegisteredCheck`, `providersRegisteredCheck`, `telemetryInstalledCheck`
+
+  The `RunDoctorOptions` type has also been removed from `@namzu/sdk` exports.
+
+  **What stays in `@namzu/sdk`:**
+
+  - The protocol types — `DoctorCheck`, `DoctorCheckResult`, `DoctorCheckContext`, `DoctorCheckRecord`, `DoctorReport`, `DoctorStatus`, `DoctorCategory` — remain in `types/doctor/` so kernel components can implement custom checks against them.
+  - `LLMProvider.doctorCheck?(): Promise<DoctorCheckResult>` — the kernel hook that lets a provider expose its own healthcheck stays on the interface.
+
+  ## Migration
+
+  If you were calling the doctor in your own process:
+
+  ```diff
+  - import { runDoctor, registerDoctorCheck } from '@namzu/sdk'
+  + import { runDoctor, registerDoctorCheck } from '@namzu/cli'
+  ```
+
+  If you were running it from the command line:
+
+  ```bash
+  # Before — required a custom CLI bin or `pnpm dlx tsx packages/sdk/src/doctor/...`
+  # After:
+  pnpm dlx @namzu/cli doctor
+  # or, after install: namzu doctor
+  ```
+
+  Custom check authors continue to import the protocol types from `@namzu/sdk`:
+
+  ```ts
+  import type { DoctorCheck, DoctorCheckResult } from "@namzu/sdk";
+  import { registerDoctorCheck } from "@namzu/cli";
+
+  const myCheck: DoctorCheck = {
+    id: "app.db.reachable",
+    category: "custom",
+    run: async (): Promise<DoctorCheckResult> => {
+      // your probe
+    },
+  };
+  registerDoctorCheck(myCheck);
+  ```
+
+  ## New — `@namzu/cli` (initial public release)
+
+  `@namzu/cli` v0.1.0 ships as a public package for the first time. Dual-purpose:
+
+  - **Standalone bin** — `npx @namzu/cli doctor`, or after install: `namzu doctor`. Supports `--json`, `--verbose`, `--category <a,b,c>`, `--per-check-timeout <ms>`, `--wall-clock-timeout <ms>`. Sysexits-aligned exit codes (`0` ok, `1` fail, `2` no config, `70` internal error).
+  - **Library** — `import { runDoctor, registerDoctorCheck, builtInDoctorChecks } from '@namzu/cli'` for embedded usage where consumer code wants to invoke the doctor in its own process so app-registered checks are visible.
+
+  **What ships built-in:**
+
+  - `sandbox.platform` (darwin sandbox-exec presence + win32 warn + linux/other inconclusive)
+  - `runtime.cwd-writable` + `runtime.tmpdir-writable` (real `fs.access(W_OK)` probes)
+  - `telemetry.installed` (dynamic-import probe for `@namzu/telemetry`)
+  - `vault.registered` + `providers.registered` (intentionally inconclusive — consumers register their own walking their setup)
+
+  **Why patch-bump-equivalent:** `@namzu/sdk: minor` carries the breaking removal (pre-1.0 cadence); `@namzu/cli: minor` carries the new package's first feature release. Together they make the next release a coordinated cut.
+
+## 0.4.4
+
+### Patch Changes
+
+- ffe516c: Probe layer (typed observation + narrow veto) over AgentBus + RunEvent stream — ses_007 phases 0–3.
+
+  Public surface additions:
+
+  - **Typed probe observation.** `probe.on(kind | kind[], handler, opts?)` registers a typed handler scoped to one or more event kinds. `probe.onAny(handler, opts?)` is the catch-all tier preserving legacy `AgentBus.on` semantics. Options: `{ where, priority, name, override }`. Events are frozen at the registry boundary; throws are isolated per probe.
+  - **Narrow veto on tool execution.** `probe.veto('tool_executing', handler, opts?)` registers a veto handler. Handler returns `'allow' | 'deny' | { action: 'deny', reason }`. `VetoableEventKind = 'tool_executing'` in v1 (additive minor adds more kinds later). First-deny wins by ascending priority; subsequent veto handlers still fire for audit. Tool executor short-circuits before `tools.execute(...)` on deny: returns a synthetic tool failure carrying `ProbeVetoError.message` so the LLM sees a normal tool-call failure with the probe name + reason.
+  - **5 new bus event variants.** `provider_call_start`, `provider_call_completed`, `provider_call_failed`, `vault_lookup`, `sandbox_decision`. Joined to the existing `AgentBusEvent` discriminated union. Snake_case real discriminants — no rename pass on existing events.
+  - **Opt-in instrumentation wrappers.** `wrapProviderWithProbes(provider, opts?)` returns an `LLMProvider` that emits `provider_call_*` around every `chat`/`chatStream` call (correlated by a `pcall_${string}` callId, with optional usage telemetry). `wrapVaultWithProbes(vault, opts?)` emits `vault_lookup` on every `retrieve()`; the secret value is never included in the event payload (covered by a "no leakage" test).
+  - **First-time public exposure of bus event types.** `AgentBusEvent`, `AgentBusEventListener`, `CircuitBreakerSnapshot`, `FileLock`, etc. were already reachable via `AgentBus.on(listener)` at runtime but couldn't be statically typed by consumers. Now in `public-types.ts`. Pre-existing duplicate `LockId` declaration in `types/bus/` was deduplicated to a re-export from `types/ids/` in passing.
+  - **Replay-aware probe context.** `ProbeContext.isReplay: boolean` flag wired through `buildProbeContext({ runId?, isReplay? })` so probes that bill or call external services can opt out on replayed runs (`ctx.isReplay === true`). Replay-execution wiring lands in a future session; the accessor is ready.
+
+  Integration:
+
+  - `AgentBus.emit` dispatches through `ProbeRegistry` first (typed-priority probes → legacy `bus.on` listeners → `onAny` catch-all). Existing `bus.on(listener)` consumers see every event in unchanged relative order.
+  - `EventTranslator.emitEvent` dispatches every `RunEvent` through the same registry before the existing pendingEvents push + persist flow.
+  - `ToolExecutor.executeSingle` calls `probes.queryVeto({type: 'tool_executing', ...})` immediately after the existing `tool_executing` emit, before `tools.execute(...)`.
+
+  Not yet wired (follow-up commits):
+
+  - Per-run probes via `createRun({ probes: [...] })` — the registry has the foundation; createRun plumbing lands in a follow-up.
+  - `wrapProviderWithProbes` / `wrapVaultWithProbes` are opt-in helpers; the SDK's own `ProviderRegistry` does not auto-wrap registered providers yet.
+  - `sandbox_decision` ships as a type only; emit site lands when a real sandbox provider exists (current `LocalSandboxProvider` is a stub).
+
+  Public surface delta: `380 → 392` runtime keys (verified against the regenerated baseline). Net new symbols added by this changeset:
+
+  - `probe`, `ProbeRegistry`, `createProbeRegistry`, `buildProbeContext`, `ProbeNameCollisionError`, `ProbeVetoError`
+  - `wrapProviderWithProbes`, `wrapVaultWithProbes`
+
+  Non-runtime (types-only) additions: `ProbeEventKind`, `ProbeEventOf<K>`, `ProbeContext`, `ProbeHandler<K>`, `ProbeOptions<K>`, `Unsubscribe`, `VetoableEventKind`, `VetoDecision`, `VetoHandler<K>`, `VetoOutcome`, `DoctorStatus`, `DoctorCategory`, `DoctorCheck`, `DoctorCheckContext`, `DoctorCheckResult`, `DoctorCheckRecord`, `DoctorReport`, `ProviderCallId`, `ProviderCallUsage`, `SandboxDecisionAction`, plus first-time exposure of all `AgentBusEvent` shape types.
+
+  Doctor types ship in this release; the runtime registry + CLI command land in a subsequent ses_007 patch.
+
 ## 0.4.3
 
 ### Patch Changes

package/dist/bridge/tools/connector/adapter.d.ts

@@ -12,13 +12,13 @@ declare const ConnectorRouterInputSchema: z.ZodObject<{
     method: z.ZodString;
     input: z.ZodRecord<z.ZodString, z.ZodUnknown>;
 }, "strip", z.ZodTypeAny, {
-    method: string;
     input: Record<string, unknown>;
+    method: string;
     connectorId: string;
     instanceId: string;
 }, {
-    method: string;
     input: Record<string, unknown>;
+    method: string;
     connectorId: string;
     instanceId: string;
 }>;

package/dist/bus/index.d.ts

@@ -1,3 +1,4 @@
+import { type ProbeRegistry } from '../probe/registry.js';
 import type { AgentBusEventListener } from '../types/bus/index.js';
 import type { RunId } from '../types/ids/index.js';
 import type { Logger } from '../utils/logger.js';
@@ -19,7 +20,8 @@ export declare class AgentBus {
     private readonly listeners;
     private readonly log;
     private readonly config;
-    constructor(log: Logger, config?: Partial<AgentBusConfig>);
+    private readonly probes;
+    constructor(log: Logger, config?: Partial<AgentBusConfig>, probeRegistry?: ProbeRegistry);
     on(listener: AgentBusEventListener): () => void;
     private emit;
     cleanupAgent(runId: RunId): void;

package/dist/bus/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/bus/index.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAiB,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AACjF,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAA;AAClD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAEhD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAC3C,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAA;AAErD,MAAM,WAAW,cAAc;IAC9B,OAAO,EAAE,OAAO,CAAA;IAChB,aAAa,EAAE,MAAM,CAAA;IACrB,oBAAoB,EAAE,MAAM,CAAA;IAC5B,gBAAgB,EAAE,MAAM,CAAA;IACxB,uBAAuB,EAAE,MAAM,CAAA;IAC/B,qBAAqB,EAAE,MAAM,CAAA;CAC7B;AAWD,qBAAa,QAAQ;IACpB,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAA;IAC/B,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAA;IACxC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAA;IAEhC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAwC;IAClE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAQ;IAC5B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgB;gBAE3B,GAAG,EAAE,MAAM,EAAE,MAAM,GAAE,OAAO,CAAC,cAAc,CAAM;IAsB7D,EAAE,CAAC,QAAQ,EAAE,qBAAqB,GAAG,MAAM,IAAI;IAO/C,OAAO,CAAC,IAAI;IAaZ,YAAY,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI;IAahC,WAAW,IAAI,IAAI;CAMnB;AAED,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAC3C,YAAY,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAA;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAA;AACrD,YAAY,EACX,aAAa,EACb,qBAAqB,EACrB,sBAAsB,EACtB,mBAAmB,EACnB,QAAQ,EACR,aAAa,EACb,iBAAiB,EACjB,MAAM,EACN,oBAAoB,GACpB,MAAM,uBAAuB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/bus/index.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,KAAK,aAAa,EAAiC,MAAM,sBAAsB,CAAA;AACxF,OAAO,KAAK,EAAiB,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AACjF,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAA;AAClD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAEhD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAC3C,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAA;AAErD,MAAM,WAAW,cAAc;IAC9B,OAAO,EAAE,OAAO,CAAA;IAChB,aAAa,EAAE,MAAM,CAAA;IACrB,oBAAoB,EAAE,MAAM,CAAA;IAC5B,gBAAgB,EAAE,MAAM,CAAA;IACxB,uBAAuB,EAAE,MAAM,CAAA;IAC/B,qBAAqB,EAAE,MAAM,CAAA;CAC7B;AAWD,qBAAa,QAAQ;IACpB,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAA;IAC/B,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAA;IACxC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAA;IAEhC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAwC;IAClE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAQ;IAC5B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgB;IACvC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAe;gBAGrC,GAAG,EAAE,MAAM,EACX,MAAM,GAAE,OAAO,CAAC,cAAc,CAAM,EACpC,aAAa,GAAE,aAAoC;IAyBpD,EAAE,CAAC,QAAQ,EAAE,qBAAqB,GAAG,MAAM,IAAI;IAO/C,OAAO,CAAC,IAAI;IAeZ,YAAY,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI;IAahC,WAAW,IAAI,IAAI;CAMnB;AAED,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAC3C,YAAY,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAA;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAA;AACrD,YAAY,EACX,aAAa,EACb,qBAAqB,EACrB,sBAAsB,EACtB,mBAAmB,EACnB,QAAQ,EACR,aAAa,EACb,iBAAiB,EACjB,MAAM,EACN,oBAAoB,GACpB,MAAM,uBAAuB,CAAA"}

package/dist/bus/index.js

@@ -1,4 +1,6 @@
 import { DEFAULT_BREAKER_FAILURE_THRESHOLD, DEFAULT_BREAKER_RESET_TIMEOUT_MS, DEFAULT_LOCK_ACQUIRE_TIMEOUT_MS, DEFAULT_LOCK_TIMEOUT_MS, DEFAULT_MAX_LOCKS_PER_AGENT, } from '../constants/bus/index.js';
+import { buildProbeContext } from '../probe/context.js';
+import { probe as defaultProbeRegistry } from '../probe/registry.js';
 import { CircuitBreaker } from './breaker.js';
 import { FileLockManager } from './lock.js';
 import { EditOwnershipTracker } from './ownership.js';
@@ -17,9 +19,12 @@ export class AgentBus {
     listeners = new Set();
     log;
     config;
-    constructor(log, config = {}) {
+    probes;
+    constructor(log, config = {}, probeRegistry = defaultProbeRegistry) {
         this.config = { ...DEFAULT_AGENT_BUS_CONFIG, ...config };
         this.log = log.child({ component: 'AgentBus' });
+        this.probes = probeRegistry;
+        this.probes.setLogger(log);
         const emitFn = (event) => this.emit(event);
         this.locks = new FileLockManager(this.log, emitFn, {
             lockTimeoutMs: this.config.lockTimeoutMs,
@@ -36,17 +41,19 @@ export class AgentBus {
         };
     }
     emit(event) {
-        for (const listener of this.listeners) {
-            try {
-                listener(event);
+        this.probes.dispatch(event, buildProbeContext(), () => {
+            for (const listener of this.listeners) {
+                try {
+                    listener(event);
+                }
+                catch (error) {
+                    this.log.error('event listener threw', {
+                        eventType: event.type,
+                        error: error instanceof Error ? error.message : String(error),
+                    });
+                }
             }
-            catch (error) {
-                this.log.error('event listener threw', {
-                    eventType: event.type,
-                    error: error instanceof Error ? error.message : String(error),
-                });
-            }
-        }
+        });
     }
     cleanupAgent(runId) {
         this.log.info('cleaning up agent resources', { runId });

package/dist/bus/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/bus/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,iCAAiC,EACjC,gCAAgC,EAChC,+BAA+B,EAC/B,uBAAuB,EACvB,2BAA2B,GAC3B,MAAM,2BAA2B,CAAA;AAKlC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAC3C,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAA;AAWrD,MAAM,wBAAwB,GAAmB;IAChD,OAAO,EAAE,IAAI;IACb,aAAa,EAAE,uBAAuB;IACtC,oBAAoB,EAAE,+BAA+B;IACrD,gBAAgB,EAAE,2BAA2B;IAC7C,uBAAuB,EAAE,iCAAiC;IAC1D,qBAAqB,EAAE,gCAAgC;CACvD,CAAA;AAED,MAAM,OAAO,QAAQ;IACX,KAAK,CAAiB;IACtB,SAAS,CAAsB;IAC/B,OAAO,CAAgB;IAEf,SAAS,GAA+B,IAAI,GAAG,EAAE,CAAA;IACjD,GAAG,CAAQ;IACX,MAAM,CAAgB;IAEvC,YAAY,GAAW,EAAE,SAAkC,EAAE;QAC5D,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,wBAAwB,EAAE,GAAG,MAAM,EAAE,CAAA;QACxD,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAA;QAE/C,MAAM,MAAM,GAAG,CAAC,KAAoB,EAAQ,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAE/D,IAAI,CAAC,KAAK,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE;YAClD,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;YACxC,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,oBAAoB;YAClD,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB;SAC9C,CAAC,CAAA;QAEF,IAAI,CAAC,SAAS,GAAG,IAAI,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QAE3D,IAAI,CAAC,OAAO,GAAG,IAAI,cAAc,CAChC,IAAI,CAAC,GAAG,EACR,MAAM,EACN,IAAI,CAAC,MAAM,CAAC,uBAAuB,EACnC,IAAI,CAAC,MAAM,CAAC,qBAAqB,CACjC,CAAA;IACF,CAAC;IAED,EAAE,CAAC,QAA+B;QACjC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAC5B,OAAO,GAAG,EAAE;YACX,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;QAChC,CAAC,CAAA;IACF,CAAC;IAEO,IAAI,CAAC,KAAoB;QAChC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACvC,IAAI,CAAC;gBACJ,QAAQ,CAAC,KAAK,CAAC,CAAA;YAChB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,sBAAsB,EAAE;oBACtC,SAAS,EAAE,KAAK,CAAC,IAAI;oBACrB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC7D,CAAC,CAAA;YACH,CAAC;QACF,CAAC;IACF,CAAC;IAED,YAAY,CAAC,KAAY;QACxB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,6BAA6B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;QACvD,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;QAClD,MAAM,kBAAkB,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;QAC3D,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QAEzB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,wBAAwB,EAAE;YACvC,KAAK;YACL,aAAa;YACb,kBAAkB;SAClB,CAAC,CAAA;IACH,CAAC;IAED,WAAW;QACV,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAA;QACxC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YACjB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,kCAAkC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;QACtE,CAAC;IACF,CAAC;CACD;AAED,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAE3C,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/bus/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,iCAAiC,EACjC,gCAAgC,EAChC,+BAA+B,EAC/B,uBAAuB,EACvB,2BAA2B,GAC3B,MAAM,2BAA2B,CAAA;AAClC,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,EAAsB,KAAK,IAAI,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AAKxF,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAC3C,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAA;AAWrD,MAAM,wBAAwB,GAAmB;IAChD,OAAO,EAAE,IAAI;IACb,aAAa,EAAE,uBAAuB;IACtC,oBAAoB,EAAE,+BAA+B;IACrD,gBAAgB,EAAE,2BAA2B;IAC7C,uBAAuB,EAAE,iCAAiC;IAC1D,qBAAqB,EAAE,gCAAgC;CACvD,CAAA;AAED,MAAM,OAAO,QAAQ;IACX,KAAK,CAAiB;IACtB,SAAS,CAAsB;IAC/B,OAAO,CAAgB;IAEf,SAAS,GAA+B,IAAI,GAAG,EAAE,CAAA;IACjD,GAAG,CAAQ;IACX,MAAM,CAAgB;IACtB,MAAM,CAAe;IAEtC,YACC,GAAW,EACX,SAAkC,EAAE,EACpC,gBAA+B,oBAAoB;QAEnD,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,wBAAwB,EAAE,GAAG,MAAM,EAAE,CAAA;QACxD,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAA;QAC/C,IAAI,CAAC,MAAM,GAAG,aAAa,CAAA;QAC3B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;QAE1B,MAAM,MAAM,GAAG,CAAC,KAAoB,EAAQ,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAE/D,IAAI,CAAC,KAAK,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE;YAClD,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;YACxC,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,oBAAoB;YAClD,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB;SAC9C,CAAC,CAAA;QAEF,IAAI,CAAC,SAAS,GAAG,IAAI,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QAE3D,IAAI,CAAC,OAAO,GAAG,IAAI,cAAc,CAChC,IAAI,CAAC,GAAG,EACR,MAAM,EACN,IAAI,CAAC,MAAM,CAAC,uBAAuB,EACnC,IAAI,CAAC,MAAM,CAAC,qBAAqB,CACjC,CAAA;IACF,CAAC;IAED,EAAE,CAAC,QAA+B;QACjC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAC5B,OAAO,GAAG,EAAE;YACX,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;QAChC,CAAC,CAAA;IACF,CAAC;IAEO,IAAI,CAAC,KAAoB;QAChC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,iBAAiB,EAAE,EAAE,GAAG,EAAE;YACrD,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBACvC,IAAI,CAAC;oBACJ,QAAQ,CAAC,KAAK,CAAC,CAAA;gBAChB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAChB,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,sBAAsB,EAAE;wBACtC,SAAS,EAAE,KAAK,CAAC,IAAI;wBACrB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;qBAC7D,CAAC,CAAA;gBACH,CAAC;YACF,CAAC;QACF,CAAC,CAAC,CAAA;IACH,CAAC;IAED,YAAY,CAAC,KAAY;QACxB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,6BAA6B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;QACvD,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;QAClD,MAAM,kBAAkB,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;QAC3D,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QAEzB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,wBAAwB,EAAE;YACvC,KAAK;YACL,aAAa;YACb,kBAAkB;SAClB,CAAC,CAAA;IACH,CAAC;IAED,WAAW;QACV,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAA;QACxC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YACjB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,kCAAkC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;QACtE,CAAC;IACF,CAAC;CACD;AAED,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAE3C,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAA"}

package/dist/config/runtime.d.ts

@@ -294,6 +294,20 @@ export declare const RuntimeConfigSchema: z.ZodObject<{
     tokenBudget: number;
     maxResponseTokens: number;
     maxIterations: number;
+    sandbox?: {
+        enabled: boolean;
+        provider: "local";
+        timeoutMs: number;
+        memoryLimitMb: number;
+        maxProcesses: number;
+        cleanupOnDestroy: boolean;
+    } | undefined;
+    plugins?: {
+        enabled: boolean;
+        autoDiscovery: boolean;
+        allowedScopes: ("user" | "project")[];
+        hookTimeoutMs: number;
+    } | undefined;
     taskRouter?: {
         default?: string | null | undefined;
         compaction?: string | null | undefined;
@@ -315,22 +329,22 @@ export declare const RuntimeConfigSchema: z.ZodObject<{
         enabled: boolean;
         strategy: "auto" | "disabled";
     } | undefined;
-    plugins?: {
-        enabled: boolean;
-        autoDiscovery: boolean;
-        allowedScopes: ("user" | "project")[];
-        hookTimeoutMs: number;
-    } | undefined;
-    sandbox?: {
-        enabled: boolean;
-        provider: "local";
-        timeoutMs: number;
-        memoryLimitMb: number;
-        maxProcesses: number;
-        cleanupOnDestroy: boolean;
-    } | undefined;
 }, {
     timeoutMs?: number | undefined;
+    sandbox?: {
+        enabled?: boolean | undefined;
+        provider?: "local" | undefined;
+        timeoutMs?: number | undefined;
+        memoryLimitMb?: number | undefined;
+        maxProcesses?: number | undefined;
+        cleanupOnDestroy?: boolean | undefined;
+    } | undefined;
+    plugins?: {
+        enabled?: boolean | undefined;
+        autoDiscovery?: boolean | undefined;
+        allowedScopes?: ("user" | "project")[] | undefined;
+        hookTimeoutMs?: number | undefined;
+    } | undefined;
     compaction?: {
         strategy?: "disabled" | "structured" | "sliding-window" | undefined;
         triggerThreshold?: number | undefined;
@@ -373,20 +387,6 @@ export declare const RuntimeConfigSchema: z.ZodObject<{
         enabled?: boolean | undefined;
         strategy?: "auto" | "disabled" | undefined;
     } | undefined;
-    plugins?: {
-        enabled?: boolean | undefined;
-        autoDiscovery?: boolean | undefined;
-        allowedScopes?: ("user" | "project")[] | undefined;
-        hookTimeoutMs?: number | undefined;
-    } | undefined;
-    sandbox?: {
-        enabled?: boolean | undefined;
-        provider?: "local" | undefined;
-        timeoutMs?: number | undefined;
-        memoryLimitMb?: number | undefined;
-        maxProcesses?: number | undefined;
-        cleanupOnDestroy?: boolean | undefined;
-    } | undefined;
 }>;
 export type RuntimeConfig = z.infer<typeof RuntimeConfigSchema>;
 export declare const RUNTIME_DEFAULTS: Readonly<RuntimeConfig>;

package/dist/probe/context.d.ts

@@ -0,0 +1,8 @@
+import type { RunId } from '../types/ids/index.js';
+import type { ProbeContext } from '../types/probe/index.js';
+export interface ProbeContextInput {
+    readonly runId?: RunId;
+    readonly isReplay?: boolean;
+}
+export declare function buildProbeContext(input?: ProbeContextInput): ProbeContext;
+//# sourceMappingURL=context.d.ts.map

package/dist/probe/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/probe/context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAA;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AAE3D,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAA;IACtB,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAC3B;AAED,wBAAgB,iBAAiB,CAAC,KAAK,GAAE,iBAAsB,GAAG,YAAY,CAK7E"}

package/dist/probe/context.js

@@ -0,0 +1,7 @@
+export function buildProbeContext(input = {}) {
+    return Object.freeze({
+        runId: input.runId,
+        isReplay: input.isReplay ?? false,
+    });
+}
+//# sourceMappingURL=context.js.map

package/dist/probe/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/probe/context.ts"],"names":[],"mappings":"AAQA,MAAM,UAAU,iBAAiB,CAAC,QAA2B,EAAE;IAC9D,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,KAAK;KACjC,CAAC,CAAA;AACH,CAAC"}

package/dist/probe/errors.d.ts

@@ -0,0 +1,12 @@
+import type { VetoableEventKind } from '../types/probe/index.js';
+export declare class ProbeNameCollisionError extends Error {
+    readonly probeName: string;
+    constructor(probeName: string);
+}
+export declare class ProbeVetoError extends Error {
+    readonly probeName: string;
+    readonly reason: string;
+    readonly eventKind: VetoableEventKind;
+    constructor(probeName: string, reason: string, eventKind: VetoableEventKind);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/probe/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/probe/errors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AAEhE,qBAAa,uBAAwB,SAAQ,KAAK;IACjD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;gBAEd,SAAS,EAAE,MAAM;CAO7B;AAED,qBAAa,cAAe,SAAQ,KAAK;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAA;gBAEzB,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,iBAAiB;CAO3E"}

package/dist/probe/errors.js

@@ -0,0 +1,21 @@
+export class ProbeNameCollisionError extends Error {
+    probeName;
+    constructor(probeName) {
+        super(`Probe name "${probeName}" is already registered. Pass { override: true } to replace, or pick a different name.`);
+        this.name = 'ProbeNameCollisionError';
+        this.probeName = probeName;
+    }
+}
+export class ProbeVetoError extends Error {
+    probeName;
+    reason;
+    eventKind;
+    constructor(probeName, reason, eventKind) {
+        super(`Operation denied by probe "${probeName}" on ${eventKind}: ${reason}`);
+        this.name = 'ProbeVetoError';
+        this.probeName = probeName;
+        this.reason = reason;
+        this.eventKind = eventKind;
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/probe/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/probe/errors.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IACxC,SAAS,CAAQ;IAE1B,YAAY,SAAiB;QAC5B,KAAK,CACJ,eAAe,SAAS,wFAAwF,CAChH,CAAA;QACD,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAA;QACrC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;IAC3B,CAAC;CACD;AAED,MAAM,OAAO,cAAe,SAAQ,KAAK;IAC/B,SAAS,CAAQ;IACjB,MAAM,CAAQ;IACd,SAAS,CAAmB;IAErC,YAAY,SAAiB,EAAE,MAAc,EAAE,SAA4B;QAC1E,KAAK,CAAC,8BAA8B,SAAS,QAAQ,SAAS,KAAK,MAAM,EAAE,CAAC,CAAA;QAC5E,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAA;QAC5B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;QAC1B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;IAC3B,CAAC;CACD"}

package/dist/probe/index.d.ts

@@ -0,0 +1,5 @@
+export { ProbeNameCollisionError, ProbeVetoError } from './errors.js';
+export { buildProbeContext } from './context.js';
+export type { ProbeContextInput } from './context.js';
+export { ProbeRegistry, createProbeRegistry, probe } from './registry.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/probe/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/probe/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAChD,YAAY,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AACrD,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,KAAK,EAAE,MAAM,eAAe,CAAA"}

package/dist/probe/index.js

@@ -0,0 +1,4 @@
+export { ProbeNameCollisionError, ProbeVetoError } from './errors.js';
+export { buildProbeContext } from './context.js';
+export { ProbeRegistry, createProbeRegistry, probe } from './registry.js';
+//# sourceMappingURL=index.js.map

package/dist/probe/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/probe/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAEhD,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,KAAK,EAAE,MAAM,eAAe,CAAA"}

package/dist/probe/registry.d.ts

@@ -0,0 +1,24 @@
+import type { ProbeContext, ProbeEvent, ProbeEventKind, ProbeEventOf, ProbeHandler, ProbeOptions, Unsubscribe, VetoHandler, VetoOutcome, VetoableEventKind } from '../types/probe/index.js';
+import type { Logger } from '../utils/logger.js';
+export declare class ProbeRegistry {
+    private readonly typedByKind;
+    private readonly vetoByKind;
+    private readonly catchAll;
+    private readonly byName;
+    private nextId;
+    private log?;
+    setLogger(log: Logger): void;
+    on<K extends ProbeEventKind>(kind: K | readonly K[], handler: ProbeHandler<K>, opts?: ProbeOptions<K>): Unsubscribe;
+    onAny(handler: (event: ProbeEvent, ctx: ProbeContext) => void, opts?: ProbeOptions): Unsubscribe;
+    dispatch(event: ProbeEvent, ctx: ProbeContext, betweenTier?: () => void): void;
+    veto<K extends VetoableEventKind>(kind: K, handler: VetoHandler<K>, opts?: ProbeOptions<K>): Unsubscribe;
+    queryVeto<K extends VetoableEventKind>(event: ProbeEventOf<K>, ctx: ProbeContext): VetoOutcome;
+    clear(): void;
+    private runTier;
+    private makeEntry;
+    private removeAnywhere;
+    private logThrow;
+}
+export declare const probe: ProbeRegistry;
+export declare function createProbeRegistry(): ProbeRegistry;
+//# sourceMappingURL=registry.d.ts.map

package/dist/probe/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/probe/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACX,YAAY,EACZ,UAAU,EACV,cAAc,EACd,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,WAAW,EAEX,WAAW,EACX,WAAW,EACX,iBAAiB,EACjB,MAAM,yBAAyB,CAAA;AAChC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAoEhD,qBAAa,aAAa;IACzB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA+C;IAC3E,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAiD;IAC5E,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmB;IAC5C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiD;IACxE,OAAO,CAAC,MAAM,CAAI;IAClB,OAAO,CAAC,GAAG,CAAC,CAAQ;IAEpB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAI5B,EAAE,CAAC,CAAC,SAAS,cAAc,EAC1B,IAAI,EAAE,CAAC,GAAG,SAAS,CAAC,EAAE,EACtB,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,EACxB,IAAI,GAAE,YAAY,CAAC,CAAC,CAAM,GACxB,WAAW;IAyBd,KAAK,CACJ,OAAO,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,YAAY,KAAK,IAAI,EACvD,IAAI,GAAE,YAAiB,GACrB,WAAW;IASd,QAAQ,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,YAAY,EAAE,WAAW,CAAC,EAAE,MAAM,IAAI,GAAG,IAAI;IAa9E,IAAI,CAAC,CAAC,SAAS,iBAAiB,EAC/B,IAAI,EAAE,CAAC,EACP,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,EACvB,IAAI,GAAE,YAAY,CAAC,CAAC,CAAM,GACxB,WAAW;IAgCd,SAAS,CAAC,CAAC,SAAS,iBAAiB,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,YAAY,GAAG,WAAW;IA6B9F,KAAK,IAAI,IAAI;IAOb,OAAO,CAAC,OAAO;IAWf,OAAO,CAAC,SAAS;IAwBjB,OAAO,CAAC,cAAc;IAOtB,OAAO,CAAC,QAAQ;CAQhB;AAED,eAAO,MAAM,KAAK,EAAE,aAAmC,CAAA;AAEvD,wBAAgB,mBAAmB,IAAI,aAAa,CAEnD"}