@nebutra/agent-runtime 0.2.1 → 2.0.0

package/.turbo/turbo-build.log

@@ -1,130 +0,0 @@
-
-> @nebutra/agent-runtime@0.2.1 build /home/runner/work/Nebutra-Sailor/Nebutra-Sailor/packages/ai/agent-runtime
-> tsup
-
-CLI Building entry: {"index":"src/index.ts","adapters/index":"src/adapters/index.ts","adapters/dispatcher-sse":"src/adapters/dispatcher-sse.ts","adapters/mcp-catalog":"src/adapters/mcp-catalog.ts","adapters/prisma-rollout":"src/adapters/prisma-rollout.ts","commands":"src/commands.ts","cli":"src/cli.ts","definitions":"src/definitions.ts","dispatcher":"src/dispatcher.ts","durable-turn":"src/durable-turn.ts","hook-pipeline":"src/hook-pipeline.ts","loop":"src/loop.ts","mcp-bridge":"src/mcp-bridge.ts","model":"src/model.ts","orchestration":"src/orchestration.ts","policy":"src/policy.ts","protocol":"src/protocol.ts","pulsar":"src/pulsar.ts","rollout":"src/rollout.ts","rollout-store-persistent":"src/rollout-store-persistent.ts","sandbox":"src/sandbox.ts","skills":"src/skills.ts","subagents":"src/subagents.ts","tools":"src/tools.ts"}
-CLI Using tsconfig: tsconfig.json
-CLI tsup v8.5.1
-CLI Using tsup config: /home/runner/work/Nebutra-Sailor/Nebutra-Sailor/packages/ai/agent-runtime/tsup.config.ts
-CLI Target: es2022
-CLI Cleaning output folder
-ESM Build start
-ESM dist/protocol.js                     293.00 B
-ESM dist/adapters/index.js               480.00 B
-ESM dist/pulsar.js                       349.00 B
-ESM dist/rollout.js                      316.00 B
-ESM dist/rollout-store-persistent.js     219.00 B
-ESM dist/sandbox.js                      348.00 B
-ESM dist/skills.js                       215.00 B
-ESM dist/subagents.js                    404.00 B
-ESM dist/tools.js                        229.00 B
-ESM dist/dispatcher.js                   191.00 B
-ESM dist/durable-turn.js                 221.00 B
-ESM dist/hook-pipeline.js                244.00 B
-ESM dist/loop.js                         193.00 B
-ESM dist/mcp-bridge.js                   187.00 B
-ESM dist/model.js                        186.00 B
-ESM dist/orchestration.js                234.00 B
-ESM dist/policy.js                       527.00 B
-ESM dist/index.js                        100.03 KB
-ESM dist/chunk-KCNN4QUQ.js               6.91 KB
-ESM dist/chunk-2DA6Q6TN.js               3.42 KB
-ESM dist/chunk-MUF7ZZTO.js               1.62 KB
-ESM dist/chunk-GQZKYWFT.js               4.41 KB
-ESM dist/chunk-5YS7WAPS.js               5.67 KB
-ESM dist/chunk-RDKYDMXT.js               4.08 KB
-ESM dist/chunk-FUG5DT2C.js               2.45 KB
-ESM dist/chunk-SD2ZJ7XG.js               1.92 KB
-ESM dist/chunk-LO24VOA3.js               6.31 KB
-ESM dist/chunk-D4YAPLOW.js               4.19 KB
-ESM dist/chunk-37BBB2P2.js               2.19 KB
-ESM dist/chunk-NI4EDT4T.js               1.00 KB
-ESM dist/chunk-4Y25ZTKI.js               1.40 KB
-ESM dist/chunk-6EGG2OZC.js               324.00 B
-ESM dist/chunk-MX2WL43P.js               3.28 KB
-ESM dist/chunk-CGRCUKGT.js               2.38 KB
-ESM dist/adapters/dispatcher-sse.js      245.00 B
-ESM dist/chunk-ZTSKS42I.js               3.65 KB
-ESM dist/adapters/mcp-catalog.js         218.00 B
-ESM dist/chunk-24ZXP7FI.js               2.47 KB
-ESM dist/adapters/prisma-rollout.js      191.00 B
-ESM dist/chunk-57W3AR43.js               1.55 KB
-ESM dist/commands.js                     217.00 B
-ESM dist/chunk-YYFPDBJG.js               1.86 KB
-ESM dist/cli.js                          1.30 KB
-ESM dist/definitions.js                  322.00 B
-ESM dist/chunk-7BUOF367.js               4.13 KB
-ESM dist/chunk-424PT5DM.js               919.00 B
-ESM dist/protocol.js.map                 71.00 B
-ESM dist/adapters/index.js.map           71.00 B
-ESM dist/pulsar.js.map                   71.00 B
-ESM dist/rollout.js.map                  71.00 B
-ESM dist/rollout-store-persistent.js.map 71.00 B
-ESM dist/sandbox.js.map                  71.00 B
-ESM dist/skills.js.map                   71.00 B
-ESM dist/subagents.js.map                71.00 B
-ESM dist/tools.js.map                    71.00 B
-ESM dist/dispatcher.js.map               71.00 B
-ESM dist/durable-turn.js.map             71.00 B
-ESM dist/hook-pipeline.js.map            71.00 B
-ESM dist/loop.js.map                     71.00 B
-ESM dist/mcp-bridge.js.map               71.00 B
-ESM dist/model.js.map                    71.00 B
-ESM dist/orchestration.js.map            71.00 B
-ESM dist/policy.js.map                   71.00 B
-ESM dist/index.js.map                    246.22 KB
-ESM dist/chunk-KCNN4QUQ.js.map           14.41 KB
-ESM dist/chunk-2DA6Q6TN.js.map           8.01 KB
-ESM dist/chunk-MUF7ZZTO.js.map           4.91 KB
-ESM dist/chunk-GQZKYWFT.js.map           13.03 KB
-ESM dist/chunk-5YS7WAPS.js.map           15.75 KB
-ESM dist/chunk-RDKYDMXT.js.map           8.81 KB
-ESM dist/chunk-FUG5DT2C.js.map           7.87 KB
-ESM dist/chunk-SD2ZJ7XG.js.map           6.73 KB
-ESM dist/chunk-LO24VOA3.js.map           17.32 KB
-ESM dist/chunk-D4YAPLOW.js.map           10.82 KB
-ESM dist/chunk-37BBB2P2.js.map           6.88 KB
-ESM dist/chunk-NI4EDT4T.js.map           3.53 KB
-ESM dist/chunk-4Y25ZTKI.js.map           5.46 KB
-ESM dist/chunk-6EGG2OZC.js.map           5.96 KB
-ESM dist/chunk-MX2WL43P.js.map           6.96 KB
-ESM dist/chunk-CGRCUKGT.js.map           7.65 KB
-ESM dist/adapters/dispatcher-sse.js.map  71.00 B
-ESM dist/chunk-ZTSKS42I.js.map           10.83 KB
-ESM dist/adapters/mcp-catalog.js.map     71.00 B
-ESM dist/chunk-24ZXP7FI.js.map           8.26 KB
-ESM dist/adapters/prisma-rollout.js.map  71.00 B
-ESM dist/chunk-57W3AR43.js.map           4.88 KB
-ESM dist/commands.js.map                 71.00 B
-ESM dist/chunk-YYFPDBJG.js.map           6.97 KB
-ESM dist/cli.js.map                      2.29 KB
-ESM dist/definitions.js.map              71.00 B
-ESM dist/chunk-7BUOF367.js.map           10.17 KB
-ESM dist/chunk-424PT5DM.js.map           71.00 B
-ESM ⚡️ Build success in 361ms
-DTS Build start
-DTS ⚡️ Build success in 13376ms
-DTS dist/adapters/index.d.ts           581.00 B
-DTS dist/cli.d.ts                      13.00 B
-DTS dist/adapters/dispatcher-sse.d.ts  3.18 KB
-DTS dist/adapters/mcp-catalog.d.ts     2.77 KB
-DTS dist/adapters/prisma-rollout.d.ts  2.10 KB
-DTS dist/commands.d.ts                 3.64 KB
-DTS dist/dispatcher.d.ts               1.91 KB
-DTS dist/durable-turn.d.ts             2.55 KB
-DTS dist/hook-pipeline.d.ts            5.33 KB
-DTS dist/mcp-bridge.d.ts               1.91 KB
-DTS dist/orchestration.d.ts            1.64 KB
-DTS dist/pulsar.d.ts                   2.71 KB
-DTS dist/loop.d.ts                     3.16 KB
-DTS dist/protocol.d.ts                 5.32 KB
-DTS dist/rollout-store-persistent.d.ts 1.77 KB
-DTS dist/rollout.d.ts                  3.28 KB
-DTS dist/sandbox.d.ts                  2.80 KB
-DTS dist/policy.d.ts                   5.59 KB
-DTS dist/skills.d.ts                   4.40 KB
-DTS dist/subagents.d.ts                5.74 KB
-DTS dist/model.d.ts                    5.79 KB
-DTS dist/definitions.d.ts              3.96 KB
-DTS dist/tools.d.ts                    3.01 KB
-DTS dist/index.d.ts                    83.11 KB

package/.turbo/turbo-test.log

@@ -1,47 +0,0 @@
-
-> @nebutra/agent-runtime@0.2.1 test /home/runner/work/Nebutra-Sailor/Nebutra-Sailor/packages/ai/agent-runtime
-> vitest run
-
-
- RUN  v4.1.4 /home/runner/work/Nebutra-Sailor/Nebutra-Sailor/packages/ai/agent-runtime
-
- ✓ src/context-compaction.test.ts (38 tests) 131ms
- ✓ src/channel-gateway.test.ts (32 tests) 237ms
- ✓ src/code-review.test.ts (43 tests) 240ms
- ✓ src/inbound-admission.test.ts (45 tests) 214ms
- ✓ src/fuzzy-match.test.ts (36 tests) 138ms
- ✓ src/permission-ruleset.test.ts (41 tests) 245ms
- ✓ src/session-share.test.ts (29 tests) 136ms
- ✓ src/artifact-stream.test.ts (27 tests) 193ms
- ✓ src/skills.test.ts (16 tests) 198ms
- ✓ src/command-suggestions.test.ts (25 tests) 157ms
- ✓ src/commit-message.test.ts (29 tests) 173ms
- ✓ src/subagents.test.ts (20 tests) 74ms
- ✓ src/hook-pipeline.test.ts (18 tests) 289ms
- ✓ src/memory-provider.test.ts (18 tests) 139ms
- ✓ src/project-repo.test.ts (13 tests) 112ms
- ✓ src/adapters/dispatcher-sse.test.ts (11 tests) 282ms
- ✓ src/dispatcher.test.ts (16 tests) 213ms
- ✓ src/commands.test.ts (16 tests) 69ms
- ✓ src/workbench.test.ts (19 tests) 113ms
- ✓ src/adapters/mcp-catalog.test.ts (9 tests) 126ms
- ✓ src/rollout-store-persistent.test.ts (12 tests) 148ms
- ✓ src/edit-planner.test.ts (21 tests) 146ms
- ✓ src/deployment-status.test.ts (20 tests) 69ms
- ✓ src/durable-turn.test.ts (5 tests) 54ms
- ✓ src/skill-distillation.test.ts (18 tests) 40ms
- ✓ src/design-context.test.ts (17 tests) 49ms
- ✓ src/mcp-bridge.test.ts (7 tests) 49ms
- ✓ src/agent-runtime.test.ts (15 tests) 98ms
- ✓ src/adapters/prisma-rollout.test.ts (6 tests) 41ms
- ✓ src/loop.test.ts (4 tests) 40ms
- ✓ src/pulsar.test.ts (4 tests) 44ms
- ✓ src/definitions.test.ts (6 tests) 13ms
- ✓ src/orchestration.test.ts (4 tests) 9ms
- ✓ src/tools.test.ts (1 test) 15ms
-
- Test Files  34 passed (34)
-      Tests  641 passed (641)
-   Start at  08:15:22
-   Duration  15.08s (transform 4.12s, setup 0ms, import 15.30s, tests 4.29s, environment 6ms)
-

package/.turbo/turbo-typecheck.log

@@ -1,4 +0,0 @@
-
-> @nebutra/agent-runtime@0.2.1 typecheck /home/runner/work/Nebutra-Sailor/Nebutra-Sailor/packages/ai/agent-runtime
-> tsc --noEmit
-

package/CHANGELOG.md

@@ -1,250 +0,0 @@
-# @nebutra/agent-runtime
-
-## 0.2.1
-
-### Patch Changes
-
-- Publish registry package metadata under the MIT license.
-
-- Updated dependencies []:
-  - @nebutra/ai-primitives@0.1.1
-  - @nebutra/capability-kit@0.2.1
-  - @nebutra/execution-policy@0.1.1
-  - @nebutra/mcp@0.1.2
-
-## 0.2.0
-
-### Minor Changes
-
-- [`fab751f`](https://github.com/Nebutra/Nebutra-Sailor/commit/fab751f39639251bfa006b1bfbcd8cd62f94626a) Thanks [@TsekaLuk](https://github.com/TsekaLuk)! - New adapter subpaths inside `@nebutra/agent-runtime`: concrete reusable port
-  adapters for the runtime package.
-  - `mcp-catalog`: adapts `@nebutra/mcp` `serverRegistry`/`mcpClient` into the
-    `McpServerCatalogPort` / `McpClientLike` ports — plan-gated, tenant
-    fail-closed, schema-less MCP tools still yield usable definitions,
-    composes with `activateMcpTools`.
-  - `dispatcher-sse`: runtime-agnostic transport for `ProtocolDispatcher` using
-    only Web-standard `Request`/`Response` — JSON-RPC handler (never throws),
-    incremental `text/event-stream` SSE with error-frame + `AbortSignal`
-    cancellation, listener→async-iterable notification bridge.
-
-  Dependency-injected (no hidden globals), tenant fail-closed, zero framework
-  lock-in. The durable rollout-store backend adapter is intentionally not
-  included (a correct system-of-record needs a fail-loud datastore; pending a
-  governance decision — documented in the README).
-
-- [`4865ac9`](https://github.com/Nebutra/Nebutra-Sailor/commit/4865ac9bff6dd83635bc33e4aeb348b087dee7c7) Thanks [@TsekaLuk](https://github.com/TsekaLuk)! - Absorb the IDE-coding-agent delta (over the already-absorbed CLI core).
-  - `code-review`: a pure unified-diff parser, branch-base resolution, a
-    confidence-banded review prompt (CRITICAL ≥95% / WARNING ≥85% /
-    SUGGESTION ≥75% / below → omit) with an untrusted-content injection guard
-    over diff + commit messages, an advisory/no-edit invariant, a fail-closed
-    finding parser (`ReviewParseError` rather than a fabricated empty result),
-    and a deterministic post-review mode handoff.
-  - `context-compaction`: in-session, mid-turn context-overflow recovery — a
-    1.3× token-correction estimator, a 60%-floored budget, greedy whole-message
-    packing with an oversized-message clipped-transcript fallback,
-    bounded-concurrency chunk summarization with a preserve-rubric prompt, a
-    recursive binary reduce capped at an output token limit, and a fail-closed
-    `"compact"` retry sentinel (never silently drops context).
-  - `commit-message` (WRAP): a Conventional-Commits prompt + git-context shape +
-    "regenerate materially different" negative constraint + fence/quote
-    stripping + bounded retry over the existing injected small-model seam.
-
-  Tenant-scoped / fail-closed where stateful; pure where stateless; the only
-  impurity is an injected model/summarize port. 632 package tests.
-
-- [`67f9cd0`](https://github.com/Nebutra/Nebutra-Sailor/commit/67f9cd02c0ee908f0579efadc4292d535a758c16) Thanks [@TsekaLuk](https://github.com/TsekaLuk)! - Durable rollout-store backend (the agent-runtime system-of-record).
-  - New Prisma model `AgentRolloutLine` → table `agent_rollout_lines`, additive
-    migration `20260519000000_add_agent_rollout_store` (one CREATE TABLE).
-  - `createPrismaRolloutPersistence` in `@nebutra/agent-runtime-adapters`:
-    fail-loud `RolloutPersistencePort` over a minimal injected
-    `PrismaRolloutDelegate` (no generated-client / `@nebutra/db` dependency;
-    per-tenant resolver for RLS). 6 TDD tests.
-  - Gateway route store is env-gated: `AGENT_ROLLOUT_DURABLE=1` selects the
-    durable Postgres store, default stays in-memory. Activation is a standard
-    migrate+generate deploy step (ADR 2026-05-19), not faked durability.
-
-- [`bb1b126`](https://github.com/Nebutra/Nebutra-Sailor/commit/bb1b126e82379d88da10f43a86d9d07bccc3a224) Thanks [@TsekaLuk](https://github.com/TsekaLuk)! - Absorb the git-backed-project delta (over the already-absorbed core).
-  - `project-repo`: durable project = git repo. Metadata + per-conversation
-    jsonl logs persisted as committed files (one commit per turn); history /
-    restore by commit SHA (commit graph IS the history — distinct from
-    workbench's in-memory snapshot ring); injected `GitHostPort` (no git
-    vendor lock-in); tenant ownership gate (`ownsRepo`, default-deny).
-  - `deployment-status`: commit-keyed lifecycle (`idle|deploying|live|
-failed`), latest-status + timeline-from-commits derivations, explicit
-    `advanceState` machine; preview domain from an injected suffix (no
-    hardcoded host).
-
-  Tenant-scoped & fail-closed; pure data/logic; git + deploy hosts injected.
-  Resolved a `CommitRef` barrel collision (deployment-status structural type
-  renamed `DeploymentCommitRef`). 252 package tests.
-
-- [`da6bfea`](https://github.com/Nebutra/Nebutra-Sailor/commit/da6bfeaf6c323a9aecefdd65c481a9852aee25b9) Thanks [@TsekaLuk](https://github.com/TsekaLuk)! - Add `@nebutra/agent-runtime`: a multi-tenant agent-runtime grammar.
-  - New package re-expresses a coding-agent runtime _design_ in Sailor grammar —
-    thread/turn/item model + event lifecycle, two-axis approval/capability
-    policy, uniform tool/MCP abstraction, event-sourced rollout with compaction,
-    and an external-sandbox delegation seam.
-  - Every serialization scope, store key, and dispatch is tenant-scoped;
-    cross-tenant requests can never share a serial lane.
-  - No infra change and no in-process untrusted-code execution: the default
-    executor fails closed; real execution is delegated behind `ExternalSandbox`.
-  - Adds an off-by-default `agent-runtime-demo` feature flag gating a demo route
-    in `apps/web`.
-
-- [`3c5c43e`](https://github.com/Nebutra/Nebutra-Sailor/commit/3c5c43e1c07c03da936d2948408f8abb4b113321) Thanks [@TsekaLuk](https://github.com/TsekaLuk)! - Absorb the differentiated coding-agent-harness capabilities (the delta over
-  the already-absorbed core).
-  - `definitions`: shared layered-tier resolver (precedence + dual
-    availability/enabled gate) + frontmatter parser — backs commands, skills,
-    subagents from one kernel.
-  - `skills`: two-phase progressive disclosure (token-budget listing,
-    first-party never-truncated, path-activation), lazy body expansion,
-    per-skill model/tool override merge.
-  - `hook-pipeline`: 18-event taxonomy, config matcher/`if` resolver,
-    structured decision protocol, multi-transport (function/http/prompt),
-    parallel fan-out with deterministic precedence merge; wraps the bare
-    `ToolHooks` as the in-process transport.
-  - `commands`: unified command=skill model with dual user/model front-doors
-    and a pure arg-substitution + templating expander.
-  - `subagents`: definition resolver (tool allow−deny), fork-vs-spawn
-    context-boundary contract, typed terminal-envelope result contract, and a
-    tenant-scoped Task lifecycle registry.
-
-  All tenant-scoped & fail-closed; pure data/logic (no FS/shell/TUI — those
-  transports deliberately dropped for multi-tenant safety). 135 package tests.
-
-- [`a29b2d9`](https://github.com/Nebutra/Nebutra-Sailor/commit/a29b2d997416edc4e421b31b777724ae70e4da54) Thanks [@TsekaLuk](https://github.com/TsekaLuk)! - Add the agent loop runner — the turn engine.
-  - `runTurn()` drives a turn `loop { model_call → emit items → execute tools
-→ feed results back }` until the model stops requesting tools or a bounded
-    step ceiling is hit. Single-threaded (shared context, no conflicting
-    sub-agent decisions).
-  - The model call is abstracted behind `ModelInvoker`, WRAPping an existing
-    model stack rather than re-porting provider/routing/fallback.
-  - Every terminal item and the turn outcome are appended to the tenant-scoped
-    rollout (resumable by replay); tool calls pass the approval gate
-    (`resolveRuleDecision` + server-initiated `ApprovalGate`); unapproved tools
-    are never dispatched. Internal failures surface as `turn.failed`, never
-    thrown to the caller.
-
-- [`cd34724`](https://github.com/Nebutra/Nebutra-Sailor/commit/cd347242ab6874931a74aa72aa9a0d183f7dd5d3) Thanks [@TsekaLuk](https://github.com/TsekaLuk)! - Absorb the multi-channel-gateway delta (over the already-absorbed core).
-  - `channel-gateway`: channel-agnostic `InboundMessage`/`OutboundMessage`
-    normalization, a `ChannelAdapter` port (parseInbound returns null for
-    non-message events, never throws on junk), tenant-scoped `ChannelRegistry`,
-    and outbound route-back through the originating channel.
-  - `inbound-admission`: deterministic tenant-prefixed `resolveSessionKey`
-    (group/DM/thread bindings, cross-tenant non-colliding), allowlist gating
-    (exact / `*` / `prefix:*`, closed-by-default), mention gating (group
-    requires @mention or reply-to-assistant; DM never), a time-injected
-    `InboundDebouncer`, composed by `admitInbound`.
-
-  Tenant-scoped & fail-closed; pure data/logic; transport + time injected.
-  Only the clean contracts were re-expressed (the messy source impl is not
-  ported). 365 package tests.
-
-- [`447e948`](https://github.com/Nebutra/Nebutra-Sailor/commit/447e948a7153446e7bc3769395c1687c9f27c991) Thanks [@TsekaLuk](https://github.com/TsekaLuk)! - Close the runtime gap — four capabilities, all tenant-scoped & fail-closed,
-  each behind an injectable port so the package keeps zero datastore/queue
-  dependency ("no infra change" stays honest):
-  - **Durable / resumable turn** (`durable-turn.ts`): `createDurableTurn` wraps
-    `runTurn` behind a `DurableTurnQueuePort`; `resume` replays the rollout and
-    re-drives an unfinished turn, idempotent and cross-tenant isolated.
-  - **Protocol dispatcher** (`dispatcher.ts`): transport-agnostic JSON-RPC
-    dispatcher serving the method registry — envelope validation fail-closed,
-    per-`scopeKey` serialization (cross-tenant never shares a lane), errors
-    mapped to JSON-RPC codes, validated notification stream.
-  - **MCP activation** (`mcp-bridge.ts`): `activateMcpTools` adapts tenant/plan
-    -visible MCP-server tools into the uniform `ToolRegistry` via an injectable
-    `McpServerCatalogPort`; duplicate names skipped, empty tenant fails closed.
-  - **Persistent rollout store** (`rollout-store-persistent.ts`):
-    `PersistentRolloutStore` over a `RolloutPersistencePort` (satisfiable by an
-    `@nebutra/audit`/`@nebutra/db` adapter) — monotonic per-(tenant,thread)
-    seq, faithful round-trip, cross-tenant isolation, typed round-trip errors.
-
-- [`b1b9b72`](https://github.com/Nebutra/Nebutra-Sailor/commit/b1b9b7251ef6b1b84e5211dd9b4ae14a1be4b05a) Thanks [@TsekaLuk](https://github.com/TsekaLuk)! - Absorb the self-improving-loop delta (over the already-absorbed core).
-  - `memory-provider`: pluggable cross-session `MemoryProvider` port (full
-    lifecycle: initialize/prefetch/syncTurn/onSessionEnd/onSessionSwitch/
-    onPreCompress/onDelegation/systemPromptBlock) + a `MemoryManager` that
-    degrades safely + memory-context injection defense (recalled text
-    banner-wrapped as reference-not-instructions; a split-safe streaming
-    scrubber strips model-forged memory banners). Vendor backends injected.
-  - `skill-distillation`: the learning loop — eligibility gate (only
-    non-trivial successful trajectories), `distillSkill` (deterministic
-    prompt → injected synthesize → skill record with `allowedTools` clamped
-    to tools the experience actually used = least privilege), `improveSkill`
-    (versioned, tenant-locked), pure `shouldNudgePersist` heuristic.
-
-  Tenant-scoped & fail-closed; pure data/logic; LLM synthesis + memory
-  backends are injected ports. 288 package tests.
-
-- [`5ed8c38`](https://github.com/Nebutra/Nebutra-Sailor/commit/5ed8c38362e86bad51786383b81cc921b11d1b18) Thanks [@TsekaLuk](https://github.com/TsekaLuk)! - Absorb the coding-agent share/permission delta (over the already-absorbed core).
-  - `permission-ruleset`: `Rule{permission,pattern,action:allow|deny|ask}` +
-    `evaluate(...rulesets)` first-match over both dimensions with fail-safe
-    `ask` default, a `wildcardMatch` with the faithful trailing `" *"`-optional
-    rule (no catastrophic backtracking), and a bash-command-prefix/arity
-    extractor (`commandPrefix`/`commandPermissionKey`).
-  - `session-share`: mint a read-only `ShareRecord{id,url,secret}` for a
-    session, revoke it, public secret-gated `verifyViewer` (no tenantId —
-    constant-time compare; documented threat model). Injected id-mint /
-    url-builder / sync-sink / store ports; kill-switch; persist-first
-    best-effort sync.
-
-  Owner plane tenant-scoped & fail-closed; viewer plane secret-gated; pure
-  where stateless; transport/crypto/store injected. 496 package tests.
-
-- [`77c0105`](https://github.com/Nebutra/Nebutra-Sailor/commit/77c0105ce89a4ff0f5e86229cce9c2561c1b1c5f) Thanks [@TsekaLuk](https://github.com/TsekaLuk)! - Absorb the site-clone / targeted-edit delta (over the already-absorbed core).
-  - `design-context`: website → structured generation seed
-    `{content, brand{colors,fonts}, screenshot, title}` — pure normalizer +
-    injected `ScrapeProvider` port (no network/provider lock-in),
-    `toGenerationSeed` bounded deterministic prompt block.
-  - `edit-planner`: pattern-driven `analyzeEditIntent` (7 EditTypes) +
-    `selectFilesForEdit` (primary/context split + deterministic system-prompt
-    builder) + generalised fast-apply (`parseEditBlocks` / `applyEditBlock`
-    with an injected merger). Targeted edit planning vs regenerate-all.
-
-  Tenant-scoped & fail-closed; pure data/logic; scrape + LLM-merge are
-  injected ports. 219 package tests.
-
-- [`1e2d929`](https://github.com/Nebutra/Nebutra-Sailor/commit/1e2d9298f4f093cbe81199e7dcd3991116d01ea2) Thanks [@TsekaLuk](https://github.com/TsekaLuk)! - Absorb the terminal-suggestion delta (over the already-absorbed core).
-  - `fuzzy-match`: smart-case subsequence fuzzy match returning
-    `{score, indices}` (lowercase query ⇒ case-insensitive; any uppercase ⇒
-    case-sensitive), case-insensitive + ignore-spaces variants (indices map to
-    original text), anchored glob-wildcard (`* ? [a-z] \`, no catastrophic
-    backtracking), stable `rankByFuzzy`. Pure, dependency-free.
-  - `command-suggestions`: `classifyMatch` with deterministic
-    exact > prefix > fuzzy score banding, `rankSuggestions` (history-boost +
-    shorter-text + stable tie-breaks), `dedupeByText` (history-wins,
-    case-insensitive), tenant-scoped `SuggestionHistoryStore` (recency ring,
-    cross-tenant isolation). Fuzzy matcher injected.
-
-  Tenant-scoped & fail-closed where stateful; pure data/logic. The source's
-  generated `command-signatures-v2` JS bundle was deliberately not ported.
-  426 package tests.
-
-- [`509338e`](https://github.com/Nebutra/Nebutra-Sailor/commit/509338ee5ffc537c108f06cd1fc24a811a5e05b8) Thanks [@TsekaLuk](https://github.com/TsekaLuk)! - Concrete Track-B coupling for the agent-runtime external-sandbox seam.
-  - Add `createHttpSandbox(baseUrl)`: an `ExternalSandbox` that delegates
-    execution over HTTP to the decoupled Rust isolator
-    (`backends/rust/sandbox`, `POST /api/v1/sandbox/exec`).
-  - Non-2xx isolator responses (e.g. a fail-closed 403 refusal) surface as
-    `SandboxDelegationError` and are never coerced into a fabricated result.
-  - The Rust isolator now mirrors the `SandboxExecRequest` /
-    `SandboxExecResult` / `CapabilityPolicy` wire shapes and is fail-closed
-    until a real isolation backend (Wasmtime/Firecracker) is wired.
-
-- [`efe764d`](https://github.com/Nebutra/Nebutra-Sailor/commit/efe764d60085352eae304dc37dc22fda8920e587) Thanks [@TsekaLuk](https://github.com/TsekaLuk)! - Absorb the web-app-builder delta (the differentiated capabilities over the
-  already-absorbed harness core).
-  - `artifact-stream`: streaming artifact/action protocol — a chunk-fed
-    incremental parser for an `<artifact>` of ordered
-    `<action type=file|shell|start|build|data>` blocks (split-tag safe, no
-    duplicate emit), plus an action runner with a
-    `pending→running→complete|aborted|failed` state-machine, submission-order
-    queue, halt-on-failure, and execution delegated through injected ports
-    (no in-process exec / host FS). Distinct from tool-calling.
-  - `workbench`: tenant-scoped project-state model — immutable FileMap with
-    auto-derived folders, apply-file-mutation, snapshot/restore with
-    deep-copy isolation, bounded snapshot history, project diff; behind a
-    `ProjectPersistencePort` (in-memory ref impl mirroring the rollout-store
-    seam).
-
-  All tenant-scoped & fail-closed, pure data/logic. 181 package tests.
-
-### Patch Changes
-
-- Updated dependencies [[`5d3d7e6`](https://github.com/Nebutra/Nebutra-Sailor/commit/5d3d7e6c59cae5aa242bb988b75a9888cfd0db39)]:
-  - @nebutra/mcp@0.1.1

package/dist/chunk-MUF7ZZTO.js

@@ -1,57 +0,0 @@
-// src/sandbox.ts
-var NoExecutorConfiguredError = class extends Error {
-  constructor() {
-    super(
-      "No ExternalSandbox configured. This runtime never executes untrusted code in-process; delegate to a decoupled isolator (Track B)."
-    );
-    this.name = "NoExecutorConfiguredError";
-  }
-};
-var REFUSING_SANDBOX = {
-  async exec() {
-    throw new NoExecutorConfiguredError();
-  }
-};
-var SandboxDelegationError = class extends Error {
-  constructor(message, status) {
-    super(message);
-    this.status = status;
-    this.name = "SandboxDelegationError";
-  }
-};
-function createHttpSandbox(baseUrl, fetchImpl = fetch) {
-  const endpoint = `${baseUrl.replace(/\/$/, "")}/api/v1/sandbox/exec`;
-  return {
-    async exec(request) {
-      const response = await fetchImpl(endpoint, {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify(request)
-      });
-      if (!response.ok) {
-        const detail = await response.text().catch(() => "");
-        throw new SandboxDelegationError(
-          `Isolator refused execution (${response.status}): ${detail}`,
-          response.status
-        );
-      }
-      return await response.json();
-    }
-  };
-}
-function assertSafePosture(policy, allowDanger = false) {
-  if (policy.kind === "danger_full_access" && !allowDanger) {
-    throw new Error(
-      "danger_full_access capability policy refused: not permitted for multi-tenant delegation without explicit opt-in."
-    );
-  }
-}
-
-export {
-  NoExecutorConfiguredError,
-  REFUSING_SANDBOX,
-  SandboxDelegationError,
-  createHttpSandbox,
-  assertSafePosture
-};
-//# sourceMappingURL=chunk-MUF7ZZTO.js.map

package/dist/chunk-MUF7ZZTO.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/sandbox.ts"],"sourcesContent":["/**\n * External-sandbox delegation seam (PORT — capability #11).\n *\n * Governance decision (dual-track, ExternalSandbox posture): this multi-tenant\n * web runtime NEVER executes untrusted code itself and introduces no isolation\n * infrastructure. It only:\n *   1. carries the capability policy (see ./policy),\n *   2. delegates execution to an external isolator behind this interface\n *      (a self-hosted kernel sidecar — Track B — or any other executor),\n *   3. records the outcome as a `command_execution` item (see ./model).\n *\n * The upstream OS enforcers (Seatbelt / Landlock / bubblewrap / Windows\n * restricted token) are deliberately NOT ported — they are single-host and\n * out of scope for a multi-tenant web product.\n */\n\nimport type { CapabilityPolicy } from \"./policy\";\n\nexport interface SandboxExecRequest {\n  /** Mandatory tenant scope — every delegated exec is tenant-bound. */\n  readonly tenantId: string;\n  readonly threadId: string;\n  readonly command: string;\n  /** The capabilities the external isolator must honor. */\n  readonly capabilityPolicy: CapabilityPolicy;\n  /** Optional inputs the executor should materialize before running. */\n  readonly inputs?: Readonly<Record<string, string>>;\n}\n\nexport interface SandboxExecResult {\n  readonly exitCode: number;\n  readonly aggregatedOutput: string;\n  /** Identifier of the isolator that actually ran the command. */\n  readonly executedOn: string;\n}\n\n/**\n * The only thing Track A depends on for execution. Implemented by a decoupled\n * isolator over the ./protocol contract; never implemented in-process here.\n */\nexport interface ExternalSandbox {\n  exec(request: SandboxExecRequest): Promise<SandboxExecResult>;\n}\n\n/**\n * Fail-closed default. Wiring this in production requires a real\n * {@link ExternalSandbox}; absent one, untrusted code never runs — by design.\n */\nexport class NoExecutorConfiguredError extends Error {\n  constructor() {\n    super(\n      \"No ExternalSandbox configured. This runtime never executes untrusted \" +\n        \"code in-process; delegate to a decoupled isolator (Track B).\",\n    );\n    this.name = \"NoExecutorConfiguredError\";\n  }\n}\n\nexport const REFUSING_SANDBOX: ExternalSandbox = {\n  async exec(): Promise<SandboxExecResult> {\n    throw new NoExecutorConfiguredError();\n  },\n};\n\nexport class SandboxDelegationError extends Error {\n  constructor(\n    message: string,\n    readonly status: number,\n  ) {\n    super(message);\n    this.name = \"SandboxDelegationError\";\n  }\n}\n\n/**\n * The concrete Track-B coupling: delegate execution over HTTP to the decoupled\n * Rust isolator (`backends/rust/sandbox`, `POST /api/v1/sandbox/exec`). The\n * isolator is fail-closed; a non-2xx (e.g. 403 refusal) is surfaced as an\n * error and never coerced into a fabricated result.\n */\nexport function createHttpSandbox(\n  baseUrl: string,\n  fetchImpl: typeof fetch = fetch,\n): ExternalSandbox {\n  const endpoint = `${baseUrl.replace(/\\/$/, \"\")}/api/v1/sandbox/exec`;\n  return {\n    async exec(request: SandboxExecRequest): Promise<SandboxExecResult> {\n      const response = await fetchImpl(endpoint, {\n        method: \"POST\",\n        headers: { \"content-type\": \"application/json\" },\n        body: JSON.stringify(request),\n      });\n      if (!response.ok) {\n        const detail = await response.text().catch(() => \"\");\n        throw new SandboxDelegationError(\n          `Isolator refused execution (${response.status}): ${detail}`,\n          response.status,\n        );\n      }\n      return (await response.json()) as SandboxExecResult;\n    },\n  };\n}\n\n/** Guard: reject the most dangerous posture unless explicitly opted in. */\nexport function assertSafePosture(policy: CapabilityPolicy, allowDanger = false): void {\n  if (policy.kind === \"danger_full_access\" && !allowDanger) {\n    throw new Error(\n      \"danger_full_access capability policy refused: not permitted for \" +\n        \"multi-tenant delegation without explicit opt-in.\",\n    );\n  }\n}\n"],"mappings":";AAgDO,IAAM,4BAAN,cAAwC,MAAM;AAAA,EACnD,cAAc;AACZ;AAAA,MACE;AAAA,IAEF;AACA,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,mBAAoC;AAAA,EAC/C,MAAM,OAAmC;AACvC,UAAM,IAAI,0BAA0B;AAAA,EACtC;AACF;AAEO,IAAM,yBAAN,cAAqC,MAAM;AAAA,EAChD,YACE,SACS,QACT;AACA,UAAM,OAAO;AAFJ;AAGT,SAAK,OAAO;AAAA,EACd;AACF;AAQO,SAAS,kBACd,SACA,YAA0B,OACT;AACjB,QAAM,WAAW,GAAG,QAAQ,QAAQ,OAAO,EAAE,CAAC;AAC9C,SAAO;AAAA,IACL,MAAM,KAAK,SAAyD;AAClE,YAAM,WAAW,MAAM,UAAU,UAAU;AAAA,QACzC,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,OAAO;AAAA,MAC9B,CAAC;AACD,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,SAAS,MAAM,SAAS,KAAK,EAAE,MAAM,MAAM,EAAE;AACnD,cAAM,IAAI;AAAA,UACR,+BAA+B,SAAS,MAAM,MAAM,MAAM;AAAA,UAC1D,SAAS;AAAA,QACX;AAAA,MACF;AACA,aAAQ,MAAM,SAAS,KAAK;AAAA,IAC9B;AAAA,EACF;AACF;AAGO,SAAS,kBAAkB,QAA0B,cAAc,OAAa;AACrF,MAAI,OAAO,SAAS,wBAAwB,CAAC,aAAa;AACxD,UAAM,IAAI;AAAA,MACR;AAAA,IAEF;AAAA,EACF;AACF;","names":[]}

package/dist/chunk-MX2WL43P.js

@@ -1,90 +0,0 @@
-// src/orchestration.ts
-function fail(message, suggestion) {
-  throw new Error(`${message}. Suggestion: ${suggestion}`);
-}
-function validateBrief(brief) {
-  if (!brief.id.trim()) fail("brief.id is required", "Use a stable role or task id.");
-  if (!brief.objective.trim()) {
-    fail("brief.objective is required", "Write a concrete objective before dispatching.");
-  }
-  if (brief.allowedTools.length === 0) {
-    fail("brief.allowedTools is required", "Constrain each subagent to an explicit tool scope.");
-  }
-  if (brief.boundaries.length === 0) {
-    fail("brief.boundaries is required", "State at least one boundary for the worker.");
-  }
-  if (brief.budget.tokenLimit <= 0 || brief.budget.durationMs <= 0 || brief.budget.costUsd < 0) {
-    fail("brief.budget is invalid", "Set positive token/time caps and a non-negative cost cap.");
-  }
-}
-function dependencySet(briefs) {
-  const dependencies = /* @__PURE__ */ new Set();
-  for (const brief of briefs) {
-    for (const dep of brief.dependsOn ?? []) dependencies.add(dep);
-  }
-  return dependencies;
-}
-function topologicalOrder(briefs) {
-  const byId = new Map(briefs.map((brief) => [brief.id, brief]));
-  const visited = /* @__PURE__ */ new Set();
-  const visiting = /* @__PURE__ */ new Set();
-  const ordered = [];
-  const visit = (brief) => {
-    if (visited.has(brief.id)) return;
-    if (visiting.has(brief.id)) {
-      fail(
-        `subagent dependency cycle includes '${brief.id}'`,
-        "Remove the cycle or collapse the dependent work into one sequential brief."
-      );
-    }
-    visiting.add(brief.id);
-    for (const dep of brief.dependsOn ?? []) {
-      const dependency = byId.get(dep);
-      if (dependency) visit(dependency);
-    }
-    visiting.delete(brief.id);
-    visited.add(brief.id);
-    ordered.push(brief);
-  };
-  for (const brief of briefs) visit(brief);
-  return ordered;
-}
-function planSubagentDispatch(briefs, options = {}) {
-  if (briefs.length === 0) {
-    fail("at least one brief is required", "Create a concrete worker brief before dispatching.");
-  }
-  for (const brief of briefs) validateBrief(brief);
-  const dependencies = dependencySet(briefs);
-  if ((options.strategy ?? "auto") === "fanout" && dependencies.size > 0) {
-    fail(
-      "fan-out cannot run briefs that depend on each other",
-      "Use sequential dispatch for dependent work or split independent briefs only."
-    );
-  }
-  const order = topologicalOrder(briefs);
-  const strategy = options.strategy === "fanout" || options.strategy === "auto" && dependencies.size === 0 ? "fanout" : "sequential";
-  return { strategy, order };
-}
-async function fanOutSubagents(briefs, run) {
-  const plan = planSubagentDispatch(briefs, { strategy: "fanout" });
-  return Promise.all(plan.order.map((brief) => run(brief)));
-}
-function costReport(results) {
-  return {
-    totalInputTokens: results.reduce((sum, result) => sum + result.usage.inputTokens, 0),
-    totalOutputTokens: results.reduce((sum, result) => sum + result.usage.outputTokens, 0),
-    totalReasoningTokens: results.reduce(
-      (sum, result) => sum + result.usage.reasoningOutputTokens,
-      0
-    ),
-    maxDurationMs: results.reduce((max, result) => Math.max(max, result.durationMs), 0),
-    subagents: results.length
-  };
-}
-
-export {
-  planSubagentDispatch,
-  fanOutSubagents,
-  costReport
-};
-//# sourceMappingURL=chunk-MX2WL43P.js.map

package/dist/chunk-MX2WL43P.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/orchestration.ts"],"sourcesContent":["import type { TurnUsage } from \"./model\";\n\nexport interface BudgetCap {\n  readonly durationMs: number;\n  readonly costUsd: number;\n  readonly tokenLimit: number;\n}\n\nexport interface Brief {\n  readonly id: string;\n  readonly objective: string;\n  readonly outputFormat: Record<string, unknown>;\n  readonly allowedTools: readonly string[];\n  readonly contextRefs: readonly string[];\n  readonly boundaries: readonly string[];\n  readonly budget: BudgetCap;\n  readonly dependsOn?: readonly string[];\n}\n\nexport type DispatchStrategy = \"auto\" | \"sequential\" | \"fanout\";\n\nexport interface DispatchPlan {\n  readonly strategy: Exclude<DispatchStrategy, \"auto\">;\n  readonly order: readonly Brief[];\n}\n\nexport interface DispatchPlanOptions {\n  readonly strategy?: DispatchStrategy;\n}\n\nexport interface SubagentResult {\n  readonly briefId: string;\n  readonly output: unknown;\n  readonly usage: TurnUsage;\n  readonly durationMs: number;\n}\n\nexport interface SubagentCostReport {\n  readonly totalInputTokens: number;\n  readonly totalOutputTokens: number;\n  readonly totalReasoningTokens: number;\n  readonly maxDurationMs: number;\n  readonly subagents: number;\n}\n\nfunction fail(message: string, suggestion: string): never {\n  throw new Error(`${message}. Suggestion: ${suggestion}`);\n}\n\nfunction validateBrief(brief: Brief): void {\n  if (!brief.id.trim()) fail(\"brief.id is required\", \"Use a stable role or task id.\");\n  if (!brief.objective.trim()) {\n    fail(\"brief.objective is required\", \"Write a concrete objective before dispatching.\");\n  }\n  if (brief.allowedTools.length === 0) {\n    fail(\"brief.allowedTools is required\", \"Constrain each subagent to an explicit tool scope.\");\n  }\n  if (brief.boundaries.length === 0) {\n    fail(\"brief.boundaries is required\", \"State at least one boundary for the worker.\");\n  }\n  if (brief.budget.tokenLimit <= 0 || brief.budget.durationMs <= 0 || brief.budget.costUsd < 0) {\n    fail(\"brief.budget is invalid\", \"Set positive token/time caps and a non-negative cost cap.\");\n  }\n}\n\nfunction dependencySet(briefs: readonly Brief[]): Set<string> {\n  const dependencies = new Set<string>();\n  for (const brief of briefs) {\n    for (const dep of brief.dependsOn ?? []) dependencies.add(dep);\n  }\n  return dependencies;\n}\n\nfunction topologicalOrder(briefs: readonly Brief[]): Brief[] {\n  const byId = new Map(briefs.map((brief) => [brief.id, brief]));\n  const visited = new Set<string>();\n  const visiting = new Set<string>();\n  const ordered: Brief[] = [];\n\n  const visit = (brief: Brief): void => {\n    if (visited.has(brief.id)) return;\n    if (visiting.has(brief.id)) {\n      fail(\n        `subagent dependency cycle includes '${brief.id}'`,\n        \"Remove the cycle or collapse the dependent work into one sequential brief.\",\n      );\n    }\n    visiting.add(brief.id);\n    for (const dep of brief.dependsOn ?? []) {\n      const dependency = byId.get(dep);\n      if (dependency) visit(dependency);\n    }\n    visiting.delete(brief.id);\n    visited.add(brief.id);\n    ordered.push(brief);\n  };\n\n  for (const brief of briefs) visit(brief);\n  return ordered;\n}\n\nexport function planSubagentDispatch(\n  briefs: readonly Brief[],\n  options: DispatchPlanOptions = {},\n): DispatchPlan {\n  if (briefs.length === 0) {\n    fail(\"at least one brief is required\", \"Create a concrete worker brief before dispatching.\");\n  }\n  for (const brief of briefs) validateBrief(brief);\n\n  const dependencies = dependencySet(briefs);\n  if ((options.strategy ?? \"auto\") === \"fanout\" && dependencies.size > 0) {\n    fail(\n      \"fan-out cannot run briefs that depend on each other\",\n      \"Use sequential dispatch for dependent work or split independent briefs only.\",\n    );\n  }\n\n  const order = topologicalOrder(briefs);\n  const strategy =\n    options.strategy === \"fanout\" || (options.strategy === \"auto\" && dependencies.size === 0)\n      ? \"fanout\"\n      : \"sequential\";\n  return { strategy, order };\n}\n\nexport async function fanOutSubagents(\n  briefs: readonly Brief[],\n  run: (brief: Brief) => Promise<SubagentResult>,\n): Promise<readonly SubagentResult[]> {\n  const plan = planSubagentDispatch(briefs, { strategy: \"fanout\" });\n  return Promise.all(plan.order.map((brief) => run(brief)));\n}\n\nexport function costReport(results: readonly SubagentResult[]): SubagentCostReport {\n  return {\n    totalInputTokens: results.reduce((sum, result) => sum + result.usage.inputTokens, 0),\n    totalOutputTokens: results.reduce((sum, result) => sum + result.usage.outputTokens, 0),\n    totalReasoningTokens: results.reduce(\n      (sum, result) => sum + result.usage.reasoningOutputTokens,\n      0,\n    ),\n    maxDurationMs: results.reduce((max, result) => Math.max(max, result.durationMs), 0),\n    subagents: results.length,\n  };\n}\n"],"mappings":";AA6CA,SAAS,KAAK,SAAiB,YAA2B;AACxD,QAAM,IAAI,MAAM,GAAG,OAAO,iBAAiB,UAAU,EAAE;AACzD;AAEA,SAAS,cAAc,OAAoB;AACzC,MAAI,CAAC,MAAM,GAAG,KAAK,EAAG,MAAK,wBAAwB,+BAA+B;AAClF,MAAI,CAAC,MAAM,UAAU,KAAK,GAAG;AAC3B,SAAK,+BAA+B,gDAAgD;AAAA,EACtF;AACA,MAAI,MAAM,aAAa,WAAW,GAAG;AACnC,SAAK,kCAAkC,oDAAoD;AAAA,EAC7F;AACA,MAAI,MAAM,WAAW,WAAW,GAAG;AACjC,SAAK,gCAAgC,6CAA6C;AAAA,EACpF;AACA,MAAI,MAAM,OAAO,cAAc,KAAK,MAAM,OAAO,cAAc,KAAK,MAAM,OAAO,UAAU,GAAG;AAC5F,SAAK,2BAA2B,2DAA2D;AAAA,EAC7F;AACF;AAEA,SAAS,cAAc,QAAuC;AAC5D,QAAM,eAAe,oBAAI,IAAY;AACrC,aAAW,SAAS,QAAQ;AAC1B,eAAW,OAAO,MAAM,aAAa,CAAC,EAAG,cAAa,IAAI,GAAG;AAAA,EAC/D;AACA,SAAO;AACT;AAEA,SAAS,iBAAiB,QAAmC;AAC3D,QAAM,OAAO,IAAI,IAAI,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC;AAC7D,QAAM,UAAU,oBAAI,IAAY;AAChC,QAAM,WAAW,oBAAI,IAAY;AACjC,QAAM,UAAmB,CAAC;AAE1B,QAAM,QAAQ,CAAC,UAAuB;AACpC,QAAI,QAAQ,IAAI,MAAM,EAAE,EAAG;AAC3B,QAAI,SAAS,IAAI,MAAM,EAAE,GAAG;AAC1B;AAAA,QACE,uCAAuC,MAAM,EAAE;AAAA,QAC/C;AAAA,MACF;AAAA,IACF;AACA,aAAS,IAAI,MAAM,EAAE;AACrB,eAAW,OAAO,MAAM,aAAa,CAAC,GAAG;AACvC,YAAM,aAAa,KAAK,IAAI,GAAG;AAC/B,UAAI,WAAY,OAAM,UAAU;AAAA,IAClC;AACA,aAAS,OAAO,MAAM,EAAE;AACxB,YAAQ,IAAI,MAAM,EAAE;AACpB,YAAQ,KAAK,KAAK;AAAA,EACpB;AAEA,aAAW,SAAS,OAAQ,OAAM,KAAK;AACvC,SAAO;AACT;AAEO,SAAS,qBACd,QACA,UAA+B,CAAC,GAClB;AACd,MAAI,OAAO,WAAW,GAAG;AACvB,SAAK,kCAAkC,oDAAoD;AAAA,EAC7F;AACA,aAAW,SAAS,OAAQ,eAAc,KAAK;AAE/C,QAAM,eAAe,cAAc,MAAM;AACzC,OAAK,QAAQ,YAAY,YAAY,YAAY,aAAa,OAAO,GAAG;AACtE;AAAA,MACE;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,QAAQ,iBAAiB,MAAM;AACrC,QAAM,WACJ,QAAQ,aAAa,YAAa,QAAQ,aAAa,UAAU,aAAa,SAAS,IACnF,WACA;AACN,SAAO,EAAE,UAAU,MAAM;AAC3B;AAEA,eAAsB,gBACpB,QACA,KACoC;AACpC,QAAM,OAAO,qBAAqB,QAAQ,EAAE,UAAU,SAAS,CAAC;AAChE,SAAO,QAAQ,IAAI,KAAK,MAAM,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC,CAAC;AAC1D;AAEO,SAAS,WAAW,SAAwD;AACjF,SAAO;AAAA,IACL,kBAAkB,QAAQ,OAAO,CAAC,KAAK,WAAW,MAAM,OAAO,MAAM,aAAa,CAAC;AAAA,IACnF,mBAAmB,QAAQ,OAAO,CAAC,KAAK,WAAW,MAAM,OAAO,MAAM,cAAc,CAAC;AAAA,IACrF,sBAAsB,QAAQ;AAAA,MAC5B,CAAC,KAAK,WAAW,MAAM,OAAO,MAAM;AAAA,MACpC;AAAA,IACF;AAAA,IACA,eAAe,QAAQ,OAAO,CAAC,KAAK,WAAW,KAAK,IAAI,KAAK,OAAO,UAAU,GAAG,CAAC;AAAA,IAClF,WAAW,QAAQ;AAAA,EACrB;AACF;","names":[]}