@nodetool-ai/agents 0.7.0-rc.22 → 0.8.1

package/dist/codeact/sandbox-package-listing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-package-listing.d.ts","sourceRoot":"","sources":["../../src/codeact/sandbox-package-listing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAGlE,qDAAqD;AACrD,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gFAAgF;IAChF,IAAI,EAAE,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACnC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0CAA0C;IAC1C,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,qEAAqE;AACrE,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,mDAAmD;IACnD,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAChC,4DAA4D;IAC5D,QAAQ,EAAE,oBAAoB,EAAE,CAAC;IACjC,iEAAiE;IACjE,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,oBAAoB,CAAC,MAAM,CAAC,GAAG,UAAU,CAAC;IAChD,gEAAgE;IAChE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACzB,0EAA0E;IAC1E,QAAQ,EAAE,OAAO,CAAC;IAClB,4CAA4C;IAC5C,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,2BAA2B,GACnC,qBAAqB,GACrB,oBAAoB,GACpB;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvC;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,SAAS,EAAE,MAAM,GAChB,OAAO,CAIT;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM;;;;;;;;;;;;EAsD/C"}

package/dist/codeact/sandbox-package-listing.js

@@ -0,0 +1,101 @@
+import * as acorn from "acorn";
+/**
+ * Consent is per pack, so a subpath of an allowed specifier is covered — the
+ * same rule `mountActionModules` enforces when the import actually runs.
+ */
+export function allowlistCovers(allowed, specifier) {
+    return allowed.some((entry) => specifier === entry || specifier.startsWith(`${entry}/`));
+}
+/**
+ * The names a JavaScript module declares as exports.
+ *
+ * ESM exports are static syntax, so this reads what the module says rather than
+ * guessing: a parse gives the whole list. What it cannot resolve is
+ * `export * from "./other"` — the names live in a file this scan does not walk
+ * — and that is reported as an incomplete answer instead of a short one.
+ */
+export function scanModuleExports(source) {
+    let program;
+    try {
+        program = acorn.parse(source, {
+            ecmaVersion: "latest",
+            sourceType: "module"
+        });
+    }
+    catch (e) {
+        return {
+            exports: null,
+            complete: false,
+            note: `This module could not be parsed, so its exports are unknown: ${e instanceof Error ? e.message : String(e)}`
+        };
+    }
+    const names = new Set();
+    let starReExport = false;
+    for (const statement of program.body) {
+        if (statement.type === "ExportDefaultDeclaration") {
+            names.add("default");
+            continue;
+        }
+        if (statement.type === "ExportAllDeclaration") {
+            const exported = exportedName(statement.exported);
+            if (exported === undefined)
+                starReExport = true;
+            else
+                names.add(exported);
+            continue;
+        }
+        if (statement.type !== "ExportNamedDeclaration")
+            continue;
+        for (const specifier of statement.specifiers) {
+            const exported = exportedName(specifier.exported);
+            if (exported !== undefined)
+                names.add(exported);
+        }
+        const declaration = statement.declaration;
+        if (declaration === null || declaration === undefined)
+            continue;
+        if (declaration.type === "VariableDeclaration") {
+            for (const declarator of declaration.declarations) {
+                for (const name of patternNames(declarator.id))
+                    names.add(name);
+            }
+            continue;
+        }
+        if (declaration.id !== null && declaration.id !== undefined) {
+            names.add(declaration.id.name);
+        }
+    }
+    const exports = [...names].sort();
+    return starReExport
+        ? {
+            exports,
+            complete: false,
+            note: "This module re-exports another module with `export *`, so it exports more names than are listed here. Read its documentation for the full surface."
+        }
+        : { exports, complete: true };
+}
+function exportedName(node) {
+    if (node === null || node === undefined)
+        return undefined;
+    return node.type === "Identifier" ? node.name : String(node.value);
+}
+/** Every binding a declaration pattern introduces, destructuring included. */
+function patternNames(pattern) {
+    switch (pattern.type) {
+        case "Identifier":
+            return [pattern.name];
+        case "ObjectPattern":
+            return pattern.properties.flatMap((property) => property.type === "RestElement"
+                ? patternNames(property.argument)
+                : patternNames(property.value));
+        case "ArrayPattern":
+            return pattern.elements.flatMap((element) => element === null ? [] : patternNames(element));
+        case "AssignmentPattern":
+            return patternNames(pattern.left);
+        case "RestElement":
+            return patternNames(pattern.argument);
+        default:
+            return [];
+    }
+}
+//# sourceMappingURL=sandbox-package-listing.js.map

package/dist/codeact/sandbox-package-listing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-package-listing.js","sourceRoot":"","sources":["../../src/codeact/sandbox-package-listing.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AA6C/B;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,OAA0B,EAC1B,SAAiB;IAEjB,OAAO,OAAO,CAAC,IAAI,CACjB,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,KAAK,KAAK,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,KAAK,GAAG,CAAC,CACpE,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,IAAI,OAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE;YAC5B,WAAW,EAAE,QAAQ;YACrB,UAAU,EAAE,QAAQ;SACrB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO;YACL,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,KAAK;YACf,IAAI,EAAE,gEACJ,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAC3C,EAAE;SACH,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,KAAK,MAAM,SAAS,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,SAAS,CAAC,IAAI,KAAK,0BAA0B,EAAE,CAAC;YAClD,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACrB,SAAS;QACX,CAAC;QACD,IAAI,SAAS,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;YAC9C,MAAM,QAAQ,GAAG,YAAY,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YAClD,IAAI,QAAQ,KAAK,SAAS;gBAAE,YAAY,GAAG,IAAI,CAAC;;gBAC3C,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACzB,SAAS;QACX,CAAC;QACD,IAAI,SAAS,CAAC,IAAI,KAAK,wBAAwB;YAAE,SAAS;QAC1D,KAAK,MAAM,SAAS,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;YAC7C,MAAM,QAAQ,GAAG,YAAY,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YAClD,IAAI,QAAQ,KAAK,SAAS;gBAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,WAAW,GAAG,SAAS,CAAC,WAAW,CAAC;QAC1C,IAAI,WAAW,KAAK,IAAI,IAAI,WAAW,KAAK,SAAS;YAAE,SAAS;QAChE,IAAI,WAAW,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;YAC/C,KAAK,MAAM,UAAU,IAAI,WAAW,CAAC,YAAY,EAAE,CAAC;gBAClD,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;oBAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClE,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,WAAW,CAAC,EAAE,KAAK,IAAI,IAAI,WAAW,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;YAC5D,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,OAAO,YAAY;QACjB,CAAC,CAAC;YACE,OAAO;YACP,QAAQ,EAAE,KAAK;YACf,IAAI,EAAE,oJAAoJ;SAC3J;QACH,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,YAAY,CACnB,IAAyD;IAEzD,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1D,OAAO,IAAI,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACrE,CAAC;AAED,8EAA8E;AAC9E,SAAS,YAAY,CAAC,OAAsB;IAC1C,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,YAAY;YACf,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACxB,KAAK,eAAe;YAClB,OAAO,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC7C,QAAQ,CAAC,IAAI,KAAK,aAAa;gBAC7B,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACjC,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CACjC,CAAC;QACJ,KAAK,cAAc;YACjB,OAAO,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAC1C,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAC9C,CAAC;QACJ,KAAK,mBAAmB;YACtB,OAAO,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACpC,KAAK,aAAa;YAChB,OAAO,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxC;YACE,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/codeact/sandbox-packages.d.ts

@@ -0,0 +1,72 @@
+/**
+ * Session package consent for CodeAct actions.
+ *
+ * A Code node runs a body a person saved; a CodeAct action is code the model
+ * just wrote. Mounting whatever happens to be installed would
+ * let the model hand an unrelated pack the action's `fetch`, `workspace`,
+ * `getSecret` and tool capabilities, so an action imports only what the session
+ * allowed — and the prompt advertises only those specifiers, one line each,
+ * never the installed catalog.
+ *
+ * A session that allowed nothing therefore imports nothing: the allowlist is
+ * empty, the prompt says so, and an import is refused as an observation the
+ * model can correct.
+ */
+import { type SandboxModuleResolution } from "@nodetool-ai/protocol";
+import type { SandboxModuleCatalog } from "@nodetool-ai/runtime";
+/** Longest description the one-line tier prints (the summary schema caps at 160). */
+export declare const MAX_PACKAGE_DESCRIPTION = 160;
+/** The specifiers an action may import: the session's allowlist, deduped. */
+export declare function sessionAllowedPackages(allowlist: readonly string[] | undefined): string[];
+/**
+ * Unique installed pack names. Consent is per pack, so a JS-script session
+ * lists roots only — a subpath of an allowed pack is already covered.
+ */
+export declare function installedPackAllowlist(catalog: SandboxModuleCatalog | null | undefined): string[];
+/** Admit the shipped builder when the belt can create and edit games. */
+export declare function withGamePackage(allowed: readonly string[], toolNames: Iterable<string>, catalog: SandboxModuleCatalog | null | undefined): string[];
+/**
+ * Chat session allowlist. JS scripts may import installed packs. Game chats
+ * admit the installed game builder alongside the normal platform defaults.
+ */
+export declare function sandboxPackagesForChat(opts: {
+    source?: string | null;
+    focusedType?: string | null;
+    catalog: SandboxModuleCatalog | null | undefined;
+}): string[] | undefined;
+/**
+ * Pack-authored text reaches every prompt of the session, so it is stripped to
+ * a single short line: no control characters, no newlines, no runaway length.
+ * The rule lives in protocol, where the catalog that fills a summary's
+ * description applies it too — one limit, enforced at both ends.
+ */
+export declare function sanitizePackageDescription(text: string): string;
+/**
+ * One line per allowed specifier the catalog knows: `specifier — description`.
+ * A specifier the catalog cannot describe still gets its line — the model needs
+ * to know it may import it.
+ */
+export declare function packagePromptLines(allowed: readonly string[], catalog: SandboxModuleCatalog | null | undefined): string[];
+export type ActionModuleMount = {
+    ok: true;
+    modules?: SandboxModuleResolution;
+} | {
+    ok: false;
+    error: string;
+};
+/**
+ * Resolve the modules one action's code may mount.
+ *
+ * Code that imports nothing mounts nothing (and installs no loader). A
+ * specifier off the allowlist — or one the catalog cannot serve — stops the
+ * action before the guest starts: the model sees the refusal as its
+ * observation and can drop the import or ask for the package.
+ */
+export declare function mountActionModules(code: string, allowed: readonly string[], catalog: SandboxModuleCatalog | null | undefined, 
+/**
+ * Specifiers the host mounted itself — NodeTool's own capability modules.
+ * They are not pack code and never went through consent, so they are neither
+ * checked against the allowlist nor resolved through the catalog.
+ */
+hostMounted?: ReadonlySet<string>): ActionModuleMount;
+//# sourceMappingURL=sandbox-packages.d.ts.map

package/dist/codeact/sandbox-packages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-packages.d.ts","sourceRoot":"","sources":["../../src/codeact/sandbox-packages.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAGL,KAAK,uBAAuB,EAC7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAUjE,qFAAqF;AACrF,eAAO,MAAM,uBAAuB,MAA0B,CAAC;AAE/D,6EAA6E;AAC7E,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,GACvC,MAAM,EAAE,CAEV;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,oBAAoB,GAAG,IAAI,GAAG,SAAS,GAC/C,MAAM,EAAE,CAEV;AAED,yEAAyE;AACzE,wBAAgB,eAAe,CAC7B,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,EAC3B,OAAO,EAAE,oBAAoB,GAAG,IAAI,GAAG,SAAS,GAC/C,MAAM,EAAE,CAQV;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAC3C,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,EAAE,oBAAoB,GAAG,IAAI,GAAG,SAAS,CAAC;CAClD,GAAG,MAAM,EAAE,GAAG,SAAS,CAQvB;AAoBD;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,OAAO,EAAE,oBAAoB,GAAG,IAAI,GAAG,SAAS,GAC/C,MAAM,EAAE,CAUV;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,CAAC,EAAE,uBAAuB,CAAA;CAAE,GAC/C;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjC;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,OAAO,EAAE,oBAAoB,GAAG,IAAI,GAAG,SAAS;AAChD;;;;GAIG;AACH,WAAW,GAAE,WAAW,CAAC,MAAM,CAAa,GAC3C,iBAAiB,CA2EnB"}

package/dist/codeact/sandbox-packages.js

@@ -0,0 +1,230 @@
+/**
+ * Session package consent for CodeAct actions.
+ *
+ * A Code node runs a body a person saved; a CodeAct action is code the model
+ * just wrote. Mounting whatever happens to be installed would
+ * let the model hand an unrelated pack the action's `fetch`, `workspace`,
+ * `getSecret` and tool capabilities, so an action imports only what the session
+ * allowed — and the prompt advertises only those specifiers, one line each,
+ * never the installed catalog.
+ *
+ * A session that allowed nothing therefore imports nothing: the allowlist is
+ * empty, the prompt says so, and an import is refused as an observation the
+ * model can correct.
+ */
+import { MAX_SANDBOX_DESCRIPTION, sanitizeSandboxDescription } from "@nodetool-ai/protocol";
+import { dynamicModuleAccess, exportedNames, parseCodeBody, staticImportBindings, staticImportSpecifiers } from "@nodetool-ai/node-sdk";
+/** Longest description the one-line tier prints (the summary schema caps at 160). */
+export const MAX_PACKAGE_DESCRIPTION = MAX_SANDBOX_DESCRIPTION;
+/** The specifiers an action may import: the session's allowlist, deduped. */
+export function sessionAllowedPackages(allowlist) {
+    return [...new Set(allowlist ?? [])];
+}
+/**
+ * Unique installed pack names. Consent is per pack, so a JS-script session
+ * lists roots only — a subpath of an allowed pack is already covered.
+ */
+export function installedPackAllowlist(catalog) {
+    return [...new Set((catalog?.summaries() ?? []).map((s) => s.packName))];
+}
+/** Admit the shipped builder when the belt can create and edit games. */
+export function withGamePackage(allowed, toolNames, catalog) {
+    const pack = "@nodetool-ai/sandbox-game";
+    const tools = new Set(toolNames);
+    if (allowed.includes(pack) || !tools.has("create_native_game") || !tools.has("edit_native_game") ||
+        !catalog?.summaries().some((summary) => summary.specifier === pack)) {
+        return [...allowed];
+    }
+    return [...allowed, pack];
+}
+/**
+ * Chat session allowlist. JS scripts may import installed packs. Game chats
+ * admit the installed game builder alongside the normal platform defaults.
+ */
+export function sandboxPackagesForChat(opts) {
+    const isJsScript = opts.source === "jsscript_assistant" || opts.focusedType === "jsscript";
+    if (isJsScript) {
+        return installedPackAllowlist(opts.catalog);
+    }
+    if (opts.source === "game_assistant" || opts.focusedType === "game") {
+        return installedPackAllowlist(opts.catalog).filter((name) => name === "@nodetool-ai/sandbox-game");
+    }
+    return undefined;
+}
+/**
+ * Whether an allowlist covers one import specifier.
+ *
+ * Consent is per pack, so a subpath of an allowed specifier is covered: it is
+ * the same pack's code, shipped in the same manifest, resolved through the same
+ * catalog entry. `@nodetool-ai/sandbox-dsl` ships one module per node
+ * namespace, and listing all seventy-two in the prompt would spend the budget
+ * the one-line tier exists to protect.
+ */
+function allowlistCovers(allowed, specifier) {
+    return allowed.some((entry) => specifier === entry || specifier.startsWith(`${entry}/`));
+}
+/**
+ * Pack-authored text reaches every prompt of the session, so it is stripped to
+ * a single short line: no control characters, no newlines, no runaway length.
+ * The rule lives in protocol, where the catalog that fills a summary's
+ * description applies it too — one limit, enforced at both ends.
+ */
+export function sanitizePackageDescription(text) {
+    return sanitizeSandboxDescription(text);
+}
+/**
+ * One line per allowed specifier the catalog knows: `specifier — description`.
+ * A specifier the catalog cannot describe still gets its line — the model needs
+ * to know it may import it.
+ */
+export function packagePromptLines(allowed, catalog) {
+    if (allowed.length === 0)
+        return [];
+    const summaries = new Map((catalog?.summaries() ?? []).map((summary) => [summary.specifier, summary]));
+    return allowed.map((specifier) => {
+        const description = summaries.get(specifier)?.description;
+        const clean = description ? sanitizePackageDescription(description) : "";
+        return clean ? `${specifier} — ${clean}` : specifier;
+    });
+}
+/**
+ * Resolve the modules one action's code may mount.
+ *
+ * Code that imports nothing mounts nothing (and installs no loader). A
+ * specifier off the allowlist — or one the catalog cannot serve — stops the
+ * action before the guest starts: the model sees the refusal as its
+ * observation and can drop the import or ask for the package.
+ */
+export function mountActionModules(code, allowed, catalog, 
+/**
+ * Specifiers the host mounted itself — NodeTool's own capability modules.
+ * They are not pack code and never went through consent, so they are neither
+ * checked against the allowlist nor resolved through the catalog.
+ */
+hostMounted = new Set()) {
+    const parsed = parseCodeBody(code);
+    // A body that does not parse has no imports to serve; the sandbox reports the
+    // syntax error itself, where the position still points at the model's code.
+    if ("error" in parsed)
+        return { ok: true };
+    // `require` is not a guest global, so a CommonJS body used to die on
+    // `ReferenceError: require is not defined` — true, and no help. The Code
+    // node has said what to write instead since it grew a validator; an action
+    // says it here, before the run.
+    const dynamic = dynamicModuleAccess(parsed.statements);
+    if (dynamic.require || dynamic.dynamicImport) {
+        const used = [
+            ...(dynamic.dynamicImport ? ["import()"] : []),
+            ...(dynamic.require ? ["require()"] : [])
+        ]
+            .map((name) => `\`${name}\``)
+            .join(" and ");
+        return {
+            ok: false,
+            error: `The action uses ${used}, which the sandbox does not support — the ` +
+                "loader denies every dynamic resolution. Import the module with a " +
+                "static `import` at the top of the action instead."
+        };
+    }
+    const specifiers = [
+        ...new Set(staticImportSpecifiers(parsed.statements))
+    ].filter((specifier) => !hostMounted.has(specifier));
+    if (specifiers.length === 0)
+        return { ok: true };
+    const denied = specifiers.filter((specifier) => !allowlistCovers(allowed, specifier));
+    if (denied.length > 0) {
+        const list = denied.map((specifier) => `"${specifier}"`).join(", ");
+        return {
+            ok: false,
+            error: `The action imports ${list}, which is not on this session's package ` +
+                `allowlist. ${allowed.length > 0
+                    ? `Only ${allowed.map((s) => `"${s}"`).join(", ")} can be imported here.`
+                    : "No sandbox package is available in this session."} Rewrite the action without the import.`
+        };
+    }
+    if (!catalog) {
+        return {
+            ok: false,
+            error: "Sandbox packages cannot be resolved in this process, so the action's " +
+                "imports cannot be served. Rewrite the action without the import."
+        };
+    }
+    const resolution = catalog.resolveForExecution(specifiers.map((specifier) => ({ specifier })));
+    const errors = resolution.statuses.filter((status) => status.status === "error");
+    if (errors.length > 0) {
+        return {
+            ok: false,
+            error: errors
+                .map((status) => `${status.message} (pack "${status.packName}")`)
+                .join(" ")
+        };
+    }
+    const unknown = unknownPackExports(parsed.statements, resolution);
+    if (unknown !== undefined)
+        return { ok: false, error: unknown };
+    return { ok: true, modules: resolution };
+}
+/**
+ * Refuse an import of a name a resolved pack module does not export.
+ *
+ * Capability modules already get this check
+ * (`capability-modules.ts`); pack modules did not, and the guest's own report
+ * — `SyntaxError: Could not find export 'websearch' in module
+ * 'nodetool-sandbox:@nodetool-ai/sandbox-dsl|sandbox/generated/xai.text.js'` —
+ * names neither the module's exports nor the near miss (`webSearch`). Decide
+ * it here instead, before the guest starts, with both.
+ *
+ * Only JS modules are checked: their source is in hand, so the export list is
+ * a parse away. A module whose exports cannot be decided
+ * ({@link exportedNames} returns null) is left alone — an unknowable list must
+ * not read as an empty one.
+ *
+ * Returns the refusal, or `undefined` when every imported name exists.
+ */
+function unknownPackExports(statements, resolution) {
+    const exportsBySpecifier = new Map();
+    for (const module of resolution.modules) {
+        if (module.kind !== "js")
+            continue;
+        const names = exportedNames(module.source);
+        if (names !== null)
+            exportsBySpecifier.set(module.specifier, names);
+    }
+    for (const binding of staticImportBindings(statements)) {
+        const available = exportsBySpecifier.get(binding.specifier);
+        if (available === undefined)
+            continue;
+        const missing = binding.named.filter((name) => !available.includes(name));
+        if (missing.length === 0)
+            continue;
+        const names = missing.map((name) => `"${name}"`).join(", ");
+        const suggestions = missing
+            .map((name) => nearExportSentence(name, available))
+            .filter((sentence) => sentence.length > 0)
+            .join(" ");
+        return (`The action imports ${names} from "${binding.specifier}", which that ` +
+            `module does not export. ${suggestions}"${binding.specifier}" exports: ` +
+            `${listExports(available)}.`);
+    }
+    return undefined;
+}
+/** How many export names a refusal prints before it says how many are left. */
+const MAX_LISTED_EXPORTS = 40;
+/** The module's exports, capped so a barrel module cannot flood the message. */
+function listExports(available) {
+    if (available.length <= MAX_LISTED_EXPORTS)
+        return available.join(", ");
+    const shown = available.slice(0, MAX_LISTED_EXPORTS).join(", ");
+    return `${shown}, and ${available.length - MAX_LISTED_EXPORTS} more`;
+}
+/**
+ * "Did you mean …" for the one export that differs only in casing or
+ * separators — `websearch` for `webSearch`, `find_model` for `findModel`.
+ */
+function nearExportSentence(wanted, available) {
+    const flatten = (name) => name.replace(/[_-]/g, "").toLowerCase();
+    const target = flatten(wanted);
+    const match = available.find((name) => flatten(name) === target);
+    return match === undefined ? "" : `Did you mean "${match}" for "${wanted}"? `;
+}
+//# sourceMappingURL=sandbox-packages.js.map

package/dist/codeact/sandbox-packages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-packages.js","sourceRoot":"","sources":["../../src/codeact/sandbox-packages.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EACL,uBAAuB,EACvB,0BAA0B,EAE3B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,aAAa,EACb,oBAAoB,EACpB,sBAAsB,EAEvB,MAAM,uBAAuB,CAAC;AAE/B,qFAAqF;AACrF,MAAM,CAAC,MAAM,uBAAuB,GAAG,uBAAuB,CAAC;AAE/D,6EAA6E;AAC7E,MAAM,UAAU,sBAAsB,CACpC,SAAwC;IAExC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAAgD;IAEhD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,eAAe,CAC7B,OAA0B,EAC1B,SAA2B,EAC3B,OAAgD;IAEhD,MAAM,IAAI,GAAG,2BAA2B,CAAC;IACzC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IACjC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC;QAC9F,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,KAAK,IAAI,CAAC,EAAE,CAAC;QACtE,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,CAAC,GAAG,OAAO,EAAE,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAItC;IACC,MAAM,UAAU,GACd,IAAI,CAAC,MAAM,KAAK,oBAAoB,IAAI,IAAI,CAAC,WAAW,KAAK,UAAU,CAAC;IAC1E,IAAI,UAAU,EAAE,CAAC;QAAC,OAAO,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAAC,CAAC;IAChE,IAAI,IAAI,CAAC,MAAM,KAAK,gBAAgB,IAAI,IAAI,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;QACpE,OAAO,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,2BAA2B,CAAC,CAAC;IACrG,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,eAAe,CACtB,OAA0B,EAC1B,SAAiB;IAEjB,OAAO,OAAO,CAAC,IAAI,CACjB,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,KAAK,KAAK,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,KAAK,GAAG,CAAC,CACpE,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,IAAY;IACrD,OAAO,0BAA0B,CAAC,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAA0B,EAC1B,OAAgD;IAEhD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAC5E,CAAC;IACF,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;QAC/B,MAAM,WAAW,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,WAAW,CAAC;QAC1D,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,0BAA0B,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,OAAO,KAAK,CAAC,CAAC,CAAC,GAAG,SAAS,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,CAAC,CAAC,CAAC;AACL,CAAC;AAMD;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAY,EACZ,OAA0B,EAC1B,OAAgD;AAChD;;;;GAIG;AACH,WAAW,GAAwB,IAAI,GAAG,EAAE;IAE5C,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACnC,8EAA8E;IAC9E,4EAA4E;IAC5E,IAAI,OAAO,IAAI,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAE3C,qEAAqE;IACrE,yEAAyE;IACzE,2EAA2E;IAC3E,gCAAgC;IAChC,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACvD,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG;YACX,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9C,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1C;aACE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,IAAI,CAAC;aAC5B,IAAI,CAAC,OAAO,CAAC,CAAC;QACjB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EACH,mBAAmB,IAAI,6CAA6C;gBACpE,mEAAmE;gBACnE,mDAAmD;SACtD,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG;QACjB,GAAG,IAAI,GAAG,CAAC,sBAAsB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;KACtD,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IACrD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAEjD,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAC9B,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,OAAO,EAAE,SAAS,CAAC,CACpD,CAAC;IACF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EACH,sBAAsB,IAAI,2CAA2C;gBACrE,cACE,OAAO,CAAC,MAAM,GAAG,CAAC;oBAChB,CAAC,CAAC,QAAQ,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,wBAAwB;oBACzE,CAAC,CAAC,kDACN,yCAAyC;SAC5C,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EACH,uEAAuE;gBACvE,kEAAkE;SACrE,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,mBAAmB,CAC5C,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAC/C,CAAC;IACF,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,CACvC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,OAAO,CACtC,CAAC;IACF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,MAAM;iBACV,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC,QAAQ,IAAI,CAAC;iBAChE,IAAI,CAAC,GAAG,CAAC;SACb,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAClE,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAChE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AAC3C,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,kBAAkB,CACzB,UAAwC,EACxC,UAAmC;IAEnC,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAA6B,CAAC;IAChE,KAAK,MAAM,MAAM,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;QACxC,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI;YAAE,SAAS;QACnC,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,KAAK,KAAK,IAAI;YAAE,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACtE,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,oBAAoB,CAAC,UAAU,CAAC,EAAE,CAAC;QACvD,MAAM,SAAS,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,SAAS,KAAK,SAAS;YAAE,SAAS;QACtC,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACnC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5D,MAAM,WAAW,GAAG,OAAO;aACxB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;aAClD,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;aACzC,IAAI,CAAC,GAAG,CAAC,CAAC;QACb,OAAO,CACL,sBAAsB,KAAK,UAAU,OAAO,CAAC,SAAS,gBAAgB;YACtE,2BAA2B,WAAW,IAAI,OAAO,CAAC,SAAS,aAAa;YACxE,GAAG,WAAW,CAAC,SAAS,CAAC,GAAG,CAC7B,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,+EAA+E;AAC/E,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAE9B,gFAAgF;AAChF,SAAS,WAAW,CAAC,SAA4B;IAC/C,IAAI,SAAS,CAAC,MAAM,IAAI,kBAAkB;QAAE,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChE,OAAO,GAAG,KAAK,SAAS,SAAS,CAAC,MAAM,GAAG,kBAAkB,OAAO,CAAC;AACvE,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CACzB,MAAc,EACd,SAA4B;IAE5B,MAAM,OAAO,GAAG,CAAC,IAAY,EAAU,EAAE,CACvC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,CAAC;IACjE,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,KAAK,UAAU,MAAM,KAAK,CAAC;AAChF,CAAC"}

package/dist/codeact/timeline-package.d.ts

@@ -0,0 +1,5 @@
+import type { SandboxModuleCatalog } from "@nodetool-ai/runtime";
+export declare const TIMELINE_PACKAGE = "@nodetool-ai/sandbox-timeline";
+/** Allow timeline authoring when the session catalog serves the builder pack. */
+export declare function withTimelinePackage(allowed: readonly string[], catalog: SandboxModuleCatalog | null | undefined): string[];
+//# sourceMappingURL=timeline-package.d.ts.map

package/dist/codeact/timeline-package.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"timeline-package.d.ts","sourceRoot":"","sources":["../../src/codeact/timeline-package.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAEjE,eAAO,MAAM,gBAAgB,kCAAkC,CAAC;AAEhE,iFAAiF;AACjF,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,OAAO,EAAE,oBAAoB,GAAG,IAAI,GAAG,SAAS,GAC/C,MAAM,EAAE,CAUV"}

package/dist/codeact/timeline-package.js

@@ -0,0 +1,10 @@
+export const TIMELINE_PACKAGE = "@nodetool-ai/sandbox-timeline";
+/** Allow timeline authoring when the session catalog serves the builder pack. */
+export function withTimelinePackage(allowed, catalog) {
+    if (allowed.includes(TIMELINE_PACKAGE) ||
+        !(catalog?.summaries() ?? []).some((summary) => summary.specifier === TIMELINE_PACKAGE)) {
+        return [...allowed];
+    }
+    return [...allowed, TIMELINE_PACKAGE];
+}
+//# sourceMappingURL=timeline-package.js.map

package/dist/codeact/timeline-package.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"timeline-package.js","sourceRoot":"","sources":["../../src/codeact/timeline-package.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,gBAAgB,GAAG,+BAA+B,CAAC;AAEhE,iFAAiF;AACjF,MAAM,UAAU,mBAAmB,CACjC,OAA0B,EAC1B,OAAgD;IAEhD,IACE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAClC,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAChC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,KAAK,gBAAgB,CACpD,EACD,CAAC;QACD,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,CAAC,GAAG,OAAO,EAAE,gBAAgB,CAAC,CAAC;AACxC,CAAC"}