@plurnk/plurnk-service 1.0.0

package/dist/core/PluginLoader.js

@@ -0,0 +1,97 @@
+// Plugin discovery + loading for the daemon. SPEC §plugin-discovery.
+//
+// Boot-time scope-agnostic scan of node_modules — every scoped and unscoped
+// package with a `plurnk` manifest field is a candidate, gated by the shared
+// ecosystem trust rule (PLURNK_PLUGINS_TRUSTED_ONLY); dynamic-import them,
+// register with the matching registry by kind. Alphabetical load order;
+// collisions on (kind, name) fail-hard at registration time.
+var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExtension) || function (path, preserveJsx) {
+    if (typeof path === "string" && /^\.\.?\//.test(path)) {
+        return path.replace(/\.(tsx)$|((?:\.d)?)((?:\.[^./]+?)?)\.([cm]?)ts$/i, function (m, tsx, d, ext, cm) {
+            return tsx ? preserveJsx ? ".jsx" : ".js" : d && (!ext || !cm) ? m : (d + ext + "." + cm.toLowerCase() + "js");
+        });
+    }
+    return path;
+};
+import { readFile } from "node:fs/promises";
+import { resolve } from "node:path";
+import Meta from "@plurnk/plurnk-meta";
+export default class PluginLoader {
+    static #isValidKind(kind) {
+        return kind === "provider" || kind === "scheme" || kind === "mimetype";
+    }
+    static async discoverPlugins(nodeModulesDir) {
+        const candidates = await Meta.packageDirs(nodeModulesDir);
+        const discovered = [];
+        for (const { dir: packagePath, name } of candidates) {
+            if (!Meta.isTrusted(name))
+                continue;
+            let pkg;
+            try {
+                const content = await readFile(resolve(packagePath, "package.json"), "utf8");
+                pkg = JSON.parse(content);
+            }
+            catch {
+                continue;
+            }
+            if (typeof pkg.name !== "string")
+                continue;
+            if (pkg.plurnk === undefined || pkg.plurnk === null || typeof pkg.plurnk !== "object")
+                continue;
+            const candidate = pkg.plurnk;
+            if (!PluginLoader.#isValidKind(candidate.kind))
+                continue;
+            if (typeof candidate.name !== "string" || candidate.name.length === 0)
+                continue;
+            discovered.push({
+                packageName: pkg.name,
+                packagePath,
+                manifest: { kind: candidate.kind, name: candidate.name },
+            });
+        }
+        return discovered.toSorted((a, b) => a.packageName.localeCompare(b.packageName));
+    }
+    // Dynamic-import a discovered plugin's default export and instantiate it.
+    // Default export MUST be a constructable class with a zero-arg constructor.
+    // Identity-match enforcement per plurnk-mimetypes / plurnk-schemes manifests:
+    // the instance's claimed identity MUST match the package manifest's `plurnk.name`.
+    // Providers skip this check — manifest.name is a vendor identifier; the
+    // instance's `model` is per-config (plurnk-providers#1, identity getters).
+    static async loadPlugin(plugin) {
+        const mod = await import(__rewriteRelativeImportExtension(plugin.packageName));
+        const PluginClass = mod.default;
+        if (typeof PluginClass !== "function") {
+            throw new Error(`${plugin.packageName}: default export is not a constructor`);
+        }
+        const instance = new PluginClass();
+        PluginLoader.assertIdentityMatch(plugin, instance);
+        return instance;
+    }
+    static assertIdentityMatch(plugin, instance) {
+        if (plugin.manifest.kind === "mimetype") {
+            const declared = instance.mimetype;
+            if (typeof declared !== "string") {
+                throw new Error(`${plugin.packageName}: mimetype handler instance must declare a string \`mimetype\` field`);
+            }
+            if (declared !== plugin.manifest.name) {
+                throw new Error(`${plugin.packageName}: identity mismatch — package manifest declares mimetype '${plugin.manifest.name}', instance declares '${declared}'`);
+            }
+            return;
+        }
+        if (plugin.manifest.kind === "scheme") {
+            // Schemes carry a static `manifest` on the class (plurnk-schemes contract).
+            // Transitional: bundled schemes don't yet have it (task #32 wires
+            // manifest registration). When the static manifest is absent, accept
+            // the package manifest name as the source of truth and trust the caller.
+            const classManifest = instance.constructor;
+            const declared = classManifest?.manifest?.name;
+            if (declared !== undefined && declared !== plugin.manifest.name) {
+                throw new Error(`${plugin.packageName}: identity mismatch — package manifest declares scheme '${plugin.manifest.name}', class manifest declares '${String(declared)}'`);
+            }
+            return;
+        }
+        // Providers: no identity-match at this layer. Package manifest `name` is
+        // the vendor family; instance `model` is per-config (plurnk-providers#1).
+    }
+}
+//# sourceMappingURL=PluginLoader.js.map

package/dist/core/PluginLoader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PluginLoader.js","sourceRoot":"","sources":["../../src/core/PluginLoader.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,EAAE;AACF,4EAA4E;AAC5E,6EAA6E;AAC7E,2EAA2E;AAC3E,wEAAwE;AACxE,6DAA6D;;;;;;;;;AAE7D,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,IAAI,MAAM,qBAAqB,CAAC;AAevC,MAAM,CAAC,OAAO,OAAO,YAAY;IAC7B,MAAM,CAAC,YAAY,CAAC,IAAa;QAC7B,OAAO,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,UAAU,CAAC;IAC3E,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,cAAsB;QAC/C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;QAE1D,MAAM,UAAU,GAAuB,EAAE,CAAC;QAC1C,KAAK,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,UAAU,EAAE,CAAC;YAClD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAAE,SAAS;YACpC,IAAI,GAAwC,CAAC;YAC7C,IAAI,CAAC;gBACD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC;gBAC7E,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACL,SAAS;YACb,CAAC;YACD,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;gBAAE,SAAS;YAC3C,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;gBAAE,SAAS;YAChG,MAAM,SAAS,GAAG,GAAG,CAAC,MAA4C,CAAC;YACnE,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC;gBAAE,SAAS;YACzD,IAAI,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAChF,UAAU,CAAC,IAAI,CAAC;gBACZ,WAAW,EAAE,GAAG,CAAC,IAAI;gBACrB,WAAW;gBACX,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE;aAC3D,CAAC,CAAC;QACP,CAAC;QAED,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;IACrF,CAAC;IAED,0EAA0E;IAC1E,4EAA4E;IAC5E,8EAA8E;IAC9E,mFAAmF;IACnF,wEAAwE;IACxE,2EAA2E;IAC3E,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,MAAwB;QAC5C,MAAM,GAAG,GAAG,MAAM,MAAM,kCAAC,MAAM,CAAC,WAAW,EAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC;QAChC,IAAI,OAAO,WAAW,KAAK,UAAU,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,CAAC,WAAW,uCAAuC,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,WAAW,EAAE,CAAC;QACnC,YAAY,CAAC,mBAAmB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACnD,OAAO,QAAQ,CAAC;IACpB,CAAC;IAED,MAAM,CAAC,mBAAmB,CAAC,MAAwB,EAAE,QAAiB;QAClE,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAI,QAAmC,CAAC,QAAQ,CAAC;YAC/D,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CACX,GAAG,MAAM,CAAC,WAAW,sEAAsE,CAC9F,CAAC;YACN,CAAC;YACD,IAAI,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACpC,MAAM,IAAI,KAAK,CACX,GAAG,MAAM,CAAC,WAAW,6DAA6D,MAAM,CAAC,QAAQ,CAAC,IAAI,yBAAyB,QAAQ,GAAG,CAC7I,CAAC;YACN,CAAC;YACD,OAAO;QACX,CAAC;QAED,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACpC,4EAA4E;YAC5E,kEAAkE;YAClE,qEAAqE;YACrE,yEAAyE;YACzE,MAAM,aAAa,GAAI,QAAmB,CAAC,WAAgD,CAAC;YAC5F,MAAM,QAAQ,GAAG,aAAa,EAAE,QAAQ,EAAE,IAAI,CAAC;YAC/C,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAC9D,MAAM,IAAI,KAAK,CACX,GAAG,MAAM,CAAC,WAAW,2DAA2D,MAAM,CAAC,QAAQ,CAAC,IAAI,+BAA+B,MAAM,CAAC,QAAQ,CAAC,GAAG,CACzJ,CAAC;YACN,CAAC;YACD,OAAO;QACX,CAAC;QAED,yEAAyE;QACzE,0EAA0E;IAC9E,CAAC;CACJ"}

package/dist/core/ProposalLifecycle.d.ts

@@ -0,0 +1,59 @@
+import type { PlurnkStatement } from "@plurnk/plurnk-grammar";
+import type { Db } from "./Db.ts";
+import type SchemeRegistry from "./SchemeRegistry.ts";
+import type ExecutorRegistry from "./ExecutorRegistry.ts";
+import type TelemetryChannel from "./TelemetryChannel.ts";
+import type { Mimetypes } from "@plurnk/plurnk-mimetypes";
+import type { StreamEventNotify, WakeRunNotify } from "./ChannelWrite.ts";
+import type { LoopFlags } from "./scheme-types.ts";
+import type { DispatchResult } from "./Dispatcher.ts";
+export type ProposalDecision = "accept" | "reject" | "cancel";
+export interface ProposalResolution {
+    decision: ProposalDecision;
+    body?: string;
+    outcome?: string;
+}
+export interface ProposalPendingEvent {
+    logEntryId: number;
+    sessionId: number;
+    runId: number;
+    loopId: number;
+    turnId: number;
+    op: string;
+    target: {
+        scheme: string | null;
+        pathname: string | null;
+    };
+    body: string;
+    attrs: object;
+    flags: LoopFlags;
+    staleClobberRisk: boolean;
+}
+export default class ProposalLifecycle {
+    #private;
+    constructor({ db, schemes, telemetry, streamEventNotify, wakeRunNotify, tokenize, mimetypes, executors, loopSignal }: {
+        db: Db;
+        schemes: SchemeRegistry;
+        telemetry: TelemetryChannel;
+        streamEventNotify?: StreamEventNotify;
+        wakeRunNotify?: WakeRunNotify;
+        tokenize: (text: string) => number;
+        mimetypes?: Mimetypes;
+        executors: () => ExecutorRegistry | undefined;
+        loopSignal: (loopId: number) => AbortSignal | undefined;
+    });
+    resolve(logEntryId: number, resolution: ProposalResolution): void;
+    pendingIds(): number[];
+    cancelAll(outcome: string): void;
+    onPending(listener: (event: ProposalPendingEvent) => void): void;
+    notifyPending(event: ProposalPendingEvent): void;
+    awaitResolution(logEntryId: number): Promise<ProposalResolution>;
+    runApply(statement: PlurnkStatement, originalResult: DispatchResult, resolution: ProposalResolution, ids: {
+        sessionId: number;
+        runId: number;
+        loopId: number;
+        turnId: number;
+    }): Promise<ProposalResolution>;
+    applyResolution(logEntryId: number, resolution: ProposalResolution): Promise<DispatchResult>;
+}
+//# sourceMappingURL=ProposalLifecycle.d.ts.map

package/dist/core/ProposalLifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProposalLifecycle.d.ts","sourceRoot":"","sources":["../../src/core/ProposalLifecycle.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAc,MAAM,wBAAwB,CAAC;AAC1E,OAAO,KAAK,EAAE,EAAE,EAAc,MAAM,SAAS,CAAC;AAC9C,OAAO,KAAK,cAAc,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,gBAAgB,MAAM,uBAAuB,CAAC;AAC1D,OAAO,KAAK,gBAAgB,MAAM,uBAAuB,CAAC;AAC1D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC1E,OAAO,KAAK,EAAuB,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACxE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAQtD,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAC9D,MAAM,WAAW,kBAAkB;IAC/B,QAAQ,EAAE,gBAAgB,CAAC;IAI3B,IAAI,CAAC,EAAE,MAAM,CAAC;IAKd,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB;AAYD,MAAM,WAAW,oBAAoB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAC3D,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,SAAS,CAAC;IAIjB,gBAAgB,EAAE,OAAO,CAAC;CAC7B;AAmBD,MAAM,CAAC,OAAO,OAAO,iBAAiB;;IAwBlC,YAAY,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,aAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE;QAClH,EAAE,EAAE,EAAE,CAAC;QACP,OAAO,EAAE,cAAc,CAAC;QACxB,SAAS,EAAE,gBAAgB,CAAC;QAC5B,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;QACtC,aAAa,CAAC,EAAE,aAAa,CAAC;QAC9B,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;QACnC,SAAS,CAAC,EAAE,SAAS,CAAC;QACtB,SAAS,EAAE,MAAM,gBAAgB,GAAG,SAAS,CAAC;QAC9C,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,WAAW,GAAG,SAAS,CAAC;KAC3D,EAUA;IAOD,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,kBAAkB,GAAG,IAAI,CAQhE;IAID,UAAU,IAAI,MAAM,EAAE,CAErB;IAOD,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAM/B;IAOD,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,IAAI,GAAG,IAAI,CAE/D;IAED,aAAa,CAAC,KAAK,EAAE,oBAAoB,GAAG,IAAI,CAI/C;IAED,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAa/D;IAGK,QAAQ,CACV,SAAS,EAAE,eAAe,EAC1B,cAAc,EAAE,cAAc,EAC9B,UAAU,EAAE,kBAAkB,EAC9B,GAAG,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAC1E,OAAO,CAAC,kBAAkB,CAAC,CA0D7B;IAEK,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,kBAAkB,GAAG,OAAO,CAAC,cAAc,CAAC,CAkCjG;CACJ"}

package/dist/core/ProposalLifecycle.js

@@ -0,0 +1,215 @@
+import { schemeNameOf } from "./plurnk-uri.js";
+// Resolution timeout — OFF by default (owner ruling, the AG-UI migration's first surfaced
+// decision): a stopped world awaiting a human WAITS — the human's absence is not an answer,
+// and a silent five-minute cancel is the machine deciding it was. The [102]<-1> doctrine's
+// sibling: waiting is a mode of continuing. An operator whose deployment needs a bound sets
+// PLURNK_SERVICE_PROPOSAL_TIMEOUT_MS explicitly (the decision table); empty = indefinite.
+const readProposalTimeoutMs = () => {
+    const raw = process.env.PLURNK_SERVICE_PROPOSAL_TIMEOUT_MS;
+    if (raw === undefined || raw.length === 0)
+        return null;
+    const n = Number(raw);
+    if (!Number.isFinite(n) || n <= 0)
+        return null;
+    return n;
+};
+// The proposal lifecycle (SPEC.md §engine-rails + §methods loop.resolve): a
+// side-effecting op that returns 202 pauses in dispatch until a resolution
+// arrives — from the loop/resolve RPC, the in-tree YOLO listener, or the
+// timeout — then the scheme's applyResolution hook applies the accept.
+export default class ProposalLifecycle {
+    #db;
+    #schemes;
+    #telemetry;
+    #streamEventNotify;
+    #wakeRunNotify;
+    #tokenize;
+    #mimetypes;
+    // Boot-discovered runtime executors, late-injected on Engine — thunked.
+    #executors;
+    // Per-loop abort signal, owned by Engine.runLoop — thunked.
+    #loopSignal;
+    // Proposal lifecycle: pending dispatch pauses waiting for resolution.
+    // Dispatch awaits the promise when a scheme returns status 202;
+    // Engine.resolveProposal feeds the resolution back in. Map is per-log-
+    // entry-id; entries clear on resolution. SPEC.md §engine-rails + §methods (loop.resolve).
+    #pending = new Map();
+    // External observers of proposal lifecycle events. Daemon subscribes
+    // here to push `loop/proposal` notifications when an entry enters
+    // pending state. YOLO listener (Phase E.3) subscribes here too. Lean
+    // event emitter — no priority, no veto chain at this layer; filter
+    // chains come later if a real consumer needs them.
+    #listeners = [];
+    constructor({ db, schemes, telemetry, streamEventNotify, wakeRunNotify, tokenize, mimetypes, executors, loopSignal }) {
+        this.#db = db;
+        this.#schemes = schemes;
+        this.#telemetry = telemetry;
+        this.#streamEventNotify = streamEventNotify;
+        this.#wakeRunNotify = wakeRunNotify;
+        this.#tokenize = tokenize;
+        this.#mimetypes = mimetypes;
+        this.#executors = executors;
+        this.#loopSignal = loopSignal;
+    }
+    // External API to feed a resolution into a pending proposal. Called by
+    // the loop/resolve RPC handler (Phase E.2), the in-tree YOLO listener
+    // (Phase E.3), or the timeout watcher. Throws when the logEntryId has no
+    // pending waiter — duplicate resolutions, IDs for non-proposed entries,
+    // or entries already-resolved are caller errors.
+    resolve(logEntryId, resolution) {
+        const waiter = this.#pending.get(logEntryId);
+        if (waiter === undefined) {
+            throw new Error(`Engine.resolveProposal: no pending proposal for log_entry ${logEntryId}`);
+        }
+        if (waiter.timeoutHandle !== null)
+            clearTimeout(waiter.timeoutHandle);
+        this.#pending.delete(logEntryId);
+        waiter.resolve(resolution);
+    }
+    // Snapshot of pending proposals (for diagnostic / RPC listings). Returns
+    // the log entry IDs currently awaiting resolution.
+    pendingIds() {
+        return [...this.#pending.keys()];
+    }
+    // Daemon shutdown: settle EVERY pending waiter with a cancel so the stopped world can't
+    // deadlock the stop — a drain paused inside dispatch awaiting a resolution that will never
+    // come held Promise.allSettled(drains) open forever (a daemon with a pending HITL proposal
+    // could not shut down; the #344 wedge class). §proposal-cancel-aborts — same cancel lane as
+    // a timeout, outcome names the cause.
+    cancelAll(outcome) {
+        for (const [logEntryId, waiter] of [...this.#pending.entries()]) {
+            if (waiter.timeoutHandle !== null)
+                clearTimeout(waiter.timeoutHandle);
+            this.#pending.delete(logEntryId);
+            waiter.resolve({ decision: "cancel", outcome });
+        }
+    }
+    // Subscribe to proposal-pending events. Daemon registers a listener
+    // that broadcasts the loop/proposal WS notification; YOLO listener
+    // (Phase E.3) registers one that auto-resolves. Listeners fire BEFORE
+    // dispatch awaits resolution, so synchronous (or fast-async) handlers
+    // can resolve inline.
+    onPending(listener) {
+        this.#listeners.push(listener);
+    }
+    notifyPending(event) {
+        for (const listener of this.#listeners) {
+            try {
+                listener(event);
+            }
+            catch (_) { /* listener errors don't break dispatch */ }
+        }
+    }
+    awaitResolution(logEntryId) {
+        const timeoutMs = readProposalTimeoutMs();
+        return new Promise((resolve) => {
+            const timeoutHandle = timeoutMs === null ? null : setTimeout(() => {
+                // Operator-bounded lane only: synthesize a cancel resolution through the same
+                // path as any other. State transitions to cancelled with outcome='timeout'.
+                if (this.#pending.has(logEntryId)) {
+                    this.#pending.delete(logEntryId);
+                    resolve({ decision: "cancel", outcome: "timeout" }); // §proposal-timeout-cancels
+                }
+            }, timeoutMs);
+            this.#pending.set(logEntryId, { resolve, timeoutHandle });
+        });
+    }
+    // On accept, run the scheme's applyResolution — File writes disk, Exec spawns. §proposal-accept-applies
+    async runApply(statement, originalResult, resolution, ids) {
+        const { sessionId, runId, loopId, turnId } = ids;
+        if (resolution.decision !== "accept")
+            return resolution;
+        // EXEC routes to the exec scheme regardless of target (cwd, not
+        // a scheme address). All other ops resolve their handler from
+        // statement.target's scheme.
+        // COPY/MOVE write the DEST (statement.body), not the source (target): the
+        // accept must reach the dest scheme's applyResolution (File writes disk).
+        const schemeName = statement.op === "EXEC" ? "exec"
+            : (statement.op === "COPY" || statement.op === "MOVE") ? schemeNameOf(statement.body)
+                : schemeNameOf(statement.target);
+        if (schemeName === null)
+            return resolution;
+        const handler = this.#schemes.get(schemeName);
+        if (handler === undefined || typeof handler.applyResolution !== "function")
+            return resolution;
+        try {
+            // Build a ctx for the scheme's applyResolution. The proposal
+            // was raised inside a specific (session, run, loop, turn);
+            // the scheme uses ctx to write the entry that makes the
+            // operation's artifact visible in the next packet's index.
+            const applyCtx = {
+                db: this.#db, sessionId, runId, loopId, turnId,
+                writer: "model", signal: this.#loopSignal(loopId),
+                streamEventNotify: this.#streamEventNotify,
+                wakeRunNotify: this.#wakeRunNotify,
+                tokenize: this.#tokenize,
+                mimetypes: this.#mimetypes,
+                pushTelemetry: (event) => this.#telemetry.push(sessionId, loopId, event),
+                executors: this.#executors(),
+            };
+            const applyResult = await handler.applyResolution({
+                attrs: (originalResult.attrs ?? {}),
+                body: resolution.body,
+            }, applyCtx);
+            if (applyResult.status >= 400) {
+                return {
+                    decision: "reject",
+                    outcome: applyResult.outcome ?? "apply_failed",
+                    body: applyResult.body,
+                };
+            }
+            // Propagate applyResolution.outcome onto the accepted resolution
+            // (operational metadata, e.g. exec's "started") AND its body — the applied result the
+            // model must see THIS turn: a file EDIT's line-numbered diff, a [300] answer. EXEC
+            // never uses the body rail — its output streams uniformly (§exec-stream, NO same-turn
+            // in-body exception; inline only skips the review pause) and is READ next turn.
+            const withOutcome = applyResult.outcome !== undefined && resolution.outcome === undefined
+                ? { ...resolution, outcome: applyResult.outcome }
+                : resolution;
+            return applyResult.body === undefined ? withOutcome : { ...withOutcome, body: applyResult.body };
+        }
+        catch (err) {
+            return {
+                decision: "reject",
+                outcome: "apply_threw",
+                body: err instanceof Error ? err.message : String(err),
+            };
+        }
+    }
+    async applyResolution(logEntryId, resolution) {
+        // Map decision → terminal state + HTTP-aligned status:
+        //   accept  → state='resolved', status=200
+        //   reject  → state='failed',   status=400, outcome='rejected' (default) §proposal-reject-fails
+        //   cancel  → state='cancelled',status=499, outcome='loop_aborted' (default) §proposal-cancel-aborts
+        // resolution.outcome wins over the default when supplied; this is how
+        // veto filters (Phase E.2 proposal.accepting) can specify a more
+        // precise outcome string like 'policy_veto' or 'timeout'.
+        const decision = resolution.decision;
+        const state = decision === "accept" ? "resolved"
+            : decision === "reject" ? "failed"
+                : "cancelled";
+        const status = decision === "accept" ? 200
+            : decision === "reject" ? 400
+                : 499;
+        const defaultOutcome = decision === "accept" ? null
+            : decision === "reject" ? "rejected"
+                : "loop_aborted";
+        const outcome = resolution.outcome ?? defaultOutcome;
+        // rx is the model-facing operation result. Status always. Body is normally dropped —
+        // the propose preview was an input echo — EXCEPT an inline auto-run (read/pure) carries
+        // its run output AS the body, the "what happened" the model needs this turn. A non-accept
+        // carries the outcome TOKEN as its terse error (write_failed / rejected / timeout — one
+        // word, never prose): a bare {"status":400} left the model blind to a mechanically failed
+        // apply and parking on a phantom worker (the fan-out digest).
+        const rx = (decision === "accept" && resolution.body !== undefined)
+            ? JSON.stringify({ status, body: resolution.body })
+            : decision === "accept"
+                ? JSON.stringify({ status })
+                : JSON.stringify({ status, error: outcome });
+        await this.#db.engine_resolve_log_entry.run({
+            id: logEntryId, state, outcome, status_rx: status, rx,
+        });
+        return { status, outcome, body: resolution.body };
+    }
+}
+//# sourceMappingURL=ProposalLifecycle.js.map

package/dist/core/ProposalLifecycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProposalLifecycle.js","sourceRoot":"","sources":["../../src/core/ProposalLifecycle.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAgD/C,0FAA0F;AAC1F,4FAA4F;AAC5F,2FAA2F;AAC3F,4FAA4F;AAC5F,0FAA0F;AAC1F,MAAM,qBAAqB,GAAG,GAAkB,EAAE;IAC9C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC;IAC3D,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACtB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,OAAO,CAAC,CAAC;AACb,CAAC,CAAC;AAEF,4EAA4E;AAC5E,2EAA2E;AAC3E,yEAAyE;AACzE,uEAAuE;AACvE,MAAM,CAAC,OAAO,OAAO,iBAAiB;IAClC,GAAG,CAAK;IACR,QAAQ,CAAiB;IACzB,UAAU,CAAmB;IAC7B,kBAAkB,CAAgC;IAClD,cAAc,CAA4B;IAC1C,SAAS,CAA2B;IACpC,UAAU,CAAwB;IAClC,wEAAwE;IACxE,UAAU,CAAqC;IAC/C,4DAA4D;IAC5D,WAAW,CAA8C;IACzD,sEAAsE;IACtE,gEAAgE;IAChE,uEAAuE;IACvE,0FAA0F;IAC1F,QAAQ,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC7C,qEAAqE;IACrE,kEAAkE;IAClE,qEAAqE;IACrE,mEAAmE;IACnE,mDAAmD;IACnD,UAAU,GAAmD,EAAE,CAAC;IAEhE,YAAY,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,aAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAUjH;QACG,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;QACd,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,IAAI,CAAC,kBAAkB,GAAG,iBAAiB,CAAC;QAC5C,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC;QACpC,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC1B,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC;IAClC,CAAC;IAED,uEAAuE;IACvE,sEAAsE;IACtE,yEAAyE;IACzE,wEAAwE;IACxE,iDAAiD;IACjD,OAAO,CAAC,UAAkB,EAAE,UAA8B;QACtD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC7C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,6DAA6D,UAAU,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,IAAI,MAAM,CAAC,aAAa,KAAK,IAAI;YAAE,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACtE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACjC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/B,CAAC;IAED,yEAAyE;IACzE,mDAAmD;IACnD,UAAU;QACN,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACrC,CAAC;IAED,wFAAwF;IACxF,2FAA2F;IAC3F,2FAA2F;IAC3F,4FAA4F;IAC5F,sCAAsC;IACtC,SAAS,CAAC,OAAe;QACrB,KAAK,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;YAC9D,IAAI,MAAM,CAAC,aAAa,KAAK,IAAI;gBAAE,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YACtE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACjC,MAAM,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACpD,CAAC;IACL,CAAC;IAED,oEAAoE;IACpE,mEAAmE;IACnE,sEAAsE;IACtE,sEAAsE;IACtE,sBAAsB;IACtB,SAAS,CAAC,QAA+C;QACrD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED,aAAa,CAAC,KAA2B;QACrC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACrC,IAAI,CAAC;gBAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC,CAAC,0CAA0C,CAAC,CAAC;QACrF,CAAC;IACL,CAAC;IAED,eAAe,CAAC,UAAkB;QAC9B,MAAM,SAAS,GAAG,qBAAqB,EAAE,CAAC;QAC1C,OAAO,IAAI,OAAO,CAAqB,CAAC,OAAO,EAAE,EAAE;YAC/C,MAAM,aAAa,GAAG,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE;gBAC9D,8EAA8E;gBAC9E,4EAA4E;gBAC5E,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;oBAChC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;oBACjC,OAAO,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,4BAA4B;gBACrF,CAAC;YACL,CAAC,EAAE,SAAS,CAAC,CAAC;YACd,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;QAC9D,CAAC,CAAC,CAAC;IACP,CAAC;IAED,wGAAwG;IACxG,KAAK,CAAC,QAAQ,CACV,SAA0B,EAC1B,cAA8B,EAC9B,UAA8B,EAC9B,GAAyE;QAEzE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;QACjD,IAAI,UAAU,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,UAAU,CAAC;QACxD,gEAAgE;QAChE,8DAA8D;QAC9D,6BAA6B;QAC7B,0EAA0E;QAC1E,0EAA0E;QAC1E,MAAM,UAAU,GAAG,SAAS,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM;YAC/C,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK,MAAM,IAAI,SAAS,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,IAAyB,CAAC;gBAC1G,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,UAAU,KAAK,IAAI;YAAE,OAAO,UAAU,CAAC;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAE7B,CAAC;QAChB,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,eAAe,KAAK,UAAU;YAAE,OAAO,UAAU,CAAC;QAC9F,IAAI,CAAC;YACD,6DAA6D;YAC7D,2DAA2D;YAC3D,wDAAwD;YACxD,2DAA2D;YAC3D,MAAM,QAAQ,GAAwB;gBAClC,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM;gBAC9C,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;gBACjD,iBAAiB,EAAE,IAAI,CAAC,kBAAkB;gBAC1C,aAAa,EAAE,IAAI,CAAC,cAAc;gBAClC,QAAQ,EAAE,IAAI,CAAC,SAAS;gBACxB,SAAS,EAAE,IAAI,CAAC,UAAU;gBAC1B,aAAa,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC;gBACxE,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE;aAC/B,CAAC;YACF,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC;gBAC9C,KAAK,EAAE,CAAC,cAAc,CAAC,KAAK,IAAI,EAAE,CAAW;gBAC7C,IAAI,EAAE,UAAU,CAAC,IAAI;aACxB,EAAE,QAAQ,CAAC,CAAC;YACb,IAAI,WAAW,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;gBAC5B,OAAO;oBACH,QAAQ,EAAE,QAAQ;oBAClB,OAAO,EAAE,WAAW,CAAC,OAAO,IAAI,cAAc;oBAC9C,IAAI,EAAE,WAAW,CAAC,IAAI;iBACzB,CAAC;YACN,CAAC;YACD,iEAAiE;YACjE,sFAAsF;YACtF,mFAAmF;YACnF,sFAAsF;YACtF,gFAAgF;YAChF,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,KAAK,SAAS,IAAI,UAAU,CAAC,OAAO,KAAK,SAAS;gBACrF,CAAC,CAAC,EAAE,GAAG,UAAU,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE;gBACjD,CAAC,CAAC,UAAU,CAAC;YACjB,OAAO,WAAW,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,WAAW,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC;QACrG,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,OAAO;gBACH,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,aAAa;gBACtB,IAAI,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACzD,CAAC;QACN,CAAC;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,UAAkB,EAAE,UAA8B;QACpE,uDAAuD;QACvD,2CAA2C;QAC3C,gGAAgG;QAChG,qGAAqG;QACrG,sEAAsE;QACtE,iEAAiE;QACjE,0DAA0D;QAC1D,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACrC,MAAM,KAAK,GAAG,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU;YAC5C,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ;gBAClC,CAAC,CAAC,WAAW,CAAC;QAClB,MAAM,MAAM,GAAG,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG;YACtC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG;gBAC7B,CAAC,CAAC,GAAG,CAAC;QACV,MAAM,cAAc,GAAG,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI;YAC/C,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU;gBACpC,CAAC,CAAC,cAAc,CAAC;QACrB,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,IAAI,cAAc,CAAC;QACrD,qFAAqF;QACrF,wFAAwF;QACxF,0FAA0F;QAC1F,wFAAwF;QACxF,0FAA0F;QAC1F,8DAA8D;QAC9D,MAAM,EAAE,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,CAAC;YAC/D,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC;YACnD,CAAC,CAAC,QAAQ,KAAK,QAAQ;gBACnB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;gBAC5B,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACrD,MAAO,IAAI,CAAC,GAAG,CAAC,wBAAuC,CAAC,GAAG,CAAC;YACxD,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE;SACxD,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC;IACtD,CAAC;CACJ"}

package/dist/core/ProviderInstantiate.d.ts

@@ -0,0 +1,9 @@
+import type { Provider, ProviderAlias } from "@plurnk/plurnk-providers";
+export default class ProviderInstantiate {
+    #private;
+    static aliasOf(provider: Provider): string | undefined;
+    static instantiateProvider(alias: ProviderAlias, env?: NodeJS.ProcessEnv): Promise<Provider>;
+    static loadActiveProvider(env?: NodeJS.ProcessEnv): Promise<Provider | null>;
+    static verifyGrammarEnforcement(provider: Provider, env?: NodeJS.ProcessEnv): Promise<void>;
+}
+//# sourceMappingURL=ProviderInstantiate.d.ts.map

package/dist/core/ProviderInstantiate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProviderInstantiate.d.ts","sourceRoot":"","sources":["../../src/core/ProviderInstantiate.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAmB,MAAM,0BAA0B,CAAC;AAEzF,MAAM,CAAC,OAAO,OAAO,mBAAmB;;IAcpC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,GAAG,SAAS,CAErD;IAED,OAAa,mBAAmB,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAY9G;IA2CD,OAAa,kBAAkB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAM9F;IAWD,OAAa,wBAAwB,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAyD7G;CACJ"}

package/dist/core/ProviderInstantiate.js

@@ -0,0 +1,156 @@
+// Dynamic provider instantiation. Lives in plurnk-service (the consumer)
+// because Node's `import()` resolves package specifiers relative to the
+// calling module's location; this is the package that actually has the
+// `@plurnk/plurnk-providers-*` siblings installed in its node_modules.
+//
+// The pure helpers (parseAliasesFromEnv, resolveActiveAlias) live in
+// @plurnk/plurnk-providers as framework-grade env parsing.
+var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExtension) || function (path, preserveJsx) {
+    if (typeof path === "string" && /^\.\.?\//.test(path)) {
+        return path.replace(/\.(tsx)$|((?:\.d)?)((?:\.[^./]+?)?)\.([cm]?)ts$/i, function (m, tsx, d, ext, cm) {
+            return tsx ? preserveJsx ? ".jsx" : ".js" : d && (!ext || !cm) ? m : (d + ext + "." + cm.toLowerCase() + "js");
+        });
+    }
+    return path;
+};
+import { resolveActiveAlias, scopeEnvToAlias, isStandardProvider, standardProviderFromEnv } from "@plurnk/plurnk-providers";
+export default class ProviderInstantiate {
+    // One provider per (provider, model, baseUrl) for the process lifetime: a provider is
+    // stateless per the contract, and loop.run instantiating fresh per aliased call re-probed
+    // the backend (latency) and re-fired providers' construction warnings on every loop (the
+    // owner's boot log: one heuristic warning per loop.run). Cache keyed on the wire identity;
+    // env is process-stable for these fields.
+    static #instances = new Map();
+    // #352 — provider handle → the alias name that produced it, so the service scopes its OWN
+    // per-alias partition knobs (PLURNK_SERVICE_*_<alias>) by the provider it's building a packet
+    // for. Service-owned metadata about handles WE created; never a provider-contract field.
+    static #aliasByProvider = new WeakMap();
+    // The alias name a provider was built under, or undefined (a test Mock, a hand-built handle).
+    // PacketBuilder falls back to resolveActiveAlias for the boot-global case.
+    static aliasOf(provider) {
+        return ProviderInstantiate.#aliasByProvider.get(provider);
+    }
+    static async instantiateProvider(alias, env = process.env) {
+        if (env === process.env) {
+            const key = `${alias.provider}|${alias.model}|${alias.baseUrl ?? ""}`;
+            let cached = ProviderInstantiate.#instances.get(key);
+            if (cached === undefined) {
+                cached = ProviderInstantiate.#instantiate(alias, env);
+                ProviderInstantiate.#instances.set(key, cached);
+                cached.catch(() => ProviderInstantiate.#instances.delete(key)); // a failed construct never poisons the cache
+            }
+            return cached;
+        }
+        return ProviderInstantiate.#instantiate(alias, env); // custom env (tests) — never cached
+    }
+    static async #instantiate(alias, env) {
+        const provider = await ProviderInstantiate.#construct(alias, env);
+        ProviderInstantiate.#aliasByProvider.set(provider, alias.alias);
+        return provider;
+    }
+    static async #construct(alias, env) {
+        // Standard providers (openai-compat + groq/deepinfra/...) construct via
+        // the framework's factory — it carries probeNctx (auto-detect the
+        // endpoint's n_ctx, so a local llama-server isn't a no-window black box
+        // that disables the budget grinder + tokensFree) and the shared
+        // OpenAICompat transport. `openai` here replaces the former
+        // @plurnk/plurnk-providers-openai sibling verbatim.
+        if (isStandardProvider(alias.provider)) {
+            // alias.baseUrl MUST thread through — it's the per-alias PLURNK_BASEURL_<alias>
+            // override. Drop it and every openai-compat alias silently collapses to a shared
+            // OPENAI_BASE_URL (or fails hard), so a multi-endpoint setup runs the wrong box.
+            const provider = await standardProviderFromEnv(alias.provider, env, alias.model, alias.baseUrl);
+            if (provider === null)
+                throw new Error(`standard provider '${alias.provider}' returned null for model '${alias.model}'`);
+            return provider;
+        }
+        // Bespoke siblings (ollama/openrouter/google/xai/cloudflare): dynamic-
+        // import the package's own fromEnv factory.
+        const packageName = `@plurnk/plurnk-providers-${alias.provider}`;
+        let mod;
+        try {
+            mod = await import(__rewriteRelativeImportExtension(packageName));
+        }
+        catch (cause) {
+            throw new Error(`provider package ${packageName} not installed (alias '${alias.alias}' requires it)`, { cause });
+        }
+        const factory = mod.default;
+        if (typeof factory?.fromEnv !== "function") {
+            throw new Error(`${packageName}: default export must have a static \`fromEnv(env, model)\` factory`);
+        }
+        return await factory.fromEnv(env, alias.model, alias.baseUrl !== undefined ? { baseUrl: alias.baseUrl } : undefined);
+    }
+    // Convenience: resolve + instantiate in one call. Returns null when no
+    // PLURNK_MODEL is set (caller decides what 'no provider' means).
+    static async loadActiveProvider(env = process.env) {
+        const alias = resolveActiveAlias(env); // the active provider alias resolves from PLURNK_MODEL — §provider-instantiation-alias-resolution
+        if (alias === null)
+            return null;
+        const provider = await ProviderInstantiate.instantiateProvider(alias, env);
+        await ProviderInstantiate.verifyGrammarEnforcement(provider, env);
+        return provider;
+    }
+    // §grammar-enforcement-verified-at-boot — the rails are useless if silently OFF. The openai
+    // provider only transports the grammar when its boot probe DETECTS llama-server (grammarStyle
+    // 'llamacpp'); any probe hiccup silently falls back to 'none' — unconstrained generation, no
+    // signal, and the whole grammar contract dark (weeks of "gemma strokes" were unconstrained
+    // gemma). The Provider interface exposes no capability to introspect this, so we VERIFY the
+    // contract end to end: when the operator requested a grammar, force a trivial one and confirm
+    // the backend actually constrained the output. Anything else FAILS HARD at boot — a legible
+    // refusal to run beats silent garbage that reads as model failure. No-op when GBNF is off.
+    static #VERIFY_TOKEN = "PLURNK-RAILS-LIVE";
+    static async verifyGrammarEnforcement(provider, env = process.env) {
+        // #353 — resolve GBNF PER ALIAS, exactly as Engine.#grammarConstraint does. The per-alias
+        // move (#352) left this reading the BARE knob (now empty by default), so the boot verify
+        // was SILENTLY SKIPPED for every alias whose grammar rides a suffix (turboderp) — the rails
+        // ran UNVERIFIED, the #34 hole this method exists to close reopened. The alias is the one
+        // that built this provider (the side-table), falling back to the active alias.
+        const alias = ProviderInstantiate.aliasOf(provider) ?? resolveActiveAlias(env)?.alias ?? "";
+        const gbnf = scopeEnvToAlias(env, alias, ["PLURNK_PROVIDERS_GBNF"]).PLURNK_PROVIDERS_GBNF;
+        if (gbnf === undefined || gbnf === "" || gbnf === "0")
+            return; // rails not requested — nothing to verify
+        // #336 — gate on the provider's own claim: a grammarStyle-'none' provider DROPS the grammar
+        // cleanly (never on the wire, constrainsOutput:false), so a global GBNF default must not
+        // refuse boot against it — the rails are simply not in play for this backend. The #34 hole
+        // stays closed: wherever the provider CLAIMS constrainsOutput, the end-to-end verify below
+        // still fails hard; and a llama-server whose /v1/models probe raced to 'none' is cured
+        // deterministically by PLURNK_PROVIDERS_LLAMA_SERVER_<alias>=1, which the notice names.
+        if (provider.constrainsOutput === false) {
+            process.stderr.write(`plurnk-service: PLURNK_PROVIDERS_GBNF=${gbnf} is configured, but '${provider.model}' does not enforce grammars — running UNCONSTRAINED on this alias. `
+                + `If this backend is a llama-server, pin PLURNK_PROVIDERS_LLAMA_SERVER_<alias>=1 so detection never races.\n`);
+            return;
+        }
+        const forcing = `root ::= "${ProviderInstantiate.#VERIFY_TOKEN}"`;
+        let content;
+        try {
+            const res = await provider.generate({
+                messages: [{ role: "user", content: "ok" }],
+                runId: "gbnf-enforcement-verify", grammar: forcing, maxTokens: 16,
+            });
+            // llama-server sometimes renders the end-of-sequence token as literal text after the
+            // forced string ("PLURNK-RAILS-LIVE<eos>") — that IS proof of enforcement (the grammar
+            // matched exactly, then the sampler stopped); strip one trailing eos-ish marker.
+            content = res.assistant.content.trim().replace(/(<eos>|<\/s>|<\|eot_id\|>|<\|endoftext\|>|<end_of_turn>)\s*$/, "").trim();
+        }
+        catch (cause) {
+            // The probe REQUEST was rejected (not "rails came back unconstrained"). This is loud, not
+            // the silent-off failure the verify guards against — and it will recur on every real turn,
+            // so refuse legibly and name the likely cause. The classic one: the provider sends a
+            // reasoning parameter the model rejects (a non-reasoning model + PLURNK_PROVIDERS_THINKING
+            // defaulting on → OpenAI 400 "does not support parameter reasoningEffort").
+            const detail = cause instanceof Error ? cause.message : String(cause);
+            throw new Error(`grammar enforcement verification could not COMPLETE its probe against '${provider.model}' (PLURNK_PROVIDERS_GBNF=${gbnf}) — the model REJECTED the probe request. `
+                + `This is a request/config incompatibility, NOT proof the rails are dark (and it would fail every real turn too). `
+                + `Most common cause: the model does not accept a parameter the provider sends — e.g. a reasoning param on a non-reasoning model; set PLURNK_PROVIDERS_THINKING=off (or the model-appropriate posture). `
+                + `Refusing to boot until the request the daemon sends is one the model accepts. Probe error: ${detail}`, { cause });
+        }
+        if (content !== ProviderInstantiate.#VERIFY_TOKEN) {
+            throw new Error(`grammar enforcement is OFF: PLURNK_PROVIDERS_GBNF=${gbnf} requests constrained sampling, but '${provider.model}' returned UNCONSTRAINED output to a forcing grammar `
+                + `(expected ${JSON.stringify(ProviderInstantiate.#VERIFY_TOKEN)}, got ${JSON.stringify(content.slice(0, 40))}). `
+                + `The provider likely failed to detect the llama-server backend (grammarStyle 'none') — the grammar was never transported. `
+                + `Refusing to boot: unconstrained generation reads as model failure and hides that the rails are dark. `
+                + `Check the backend is a live llama-server (/v1/models must carry a per-model 'meta'), or unset PLURNK_PROVIDERS_GBNF to run unconstrained deliberately.`);
+        }
+    }
+}
+//# sourceMappingURL=ProviderInstantiate.js.map

package/dist/core/ProviderInstantiate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProviderInstantiate.js","sourceRoot":"","sources":["../../src/core/ProviderInstantiate.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,wEAAwE;AACxE,uEAAuE;AACvE,uEAAuE;AACvE,EAAE;AACF,qEAAqE;AACrE,2DAA2D;;;;;;;;;AAE3D,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAG5H,MAAM,CAAC,OAAO,OAAO,mBAAmB;IACpC,sFAAsF;IACtF,0FAA0F;IAC1F,yFAAyF;IACzF,2FAA2F;IAC3F,0CAA0C;IAC1C,MAAM,CAAC,UAAU,GAAG,IAAI,GAAG,EAA6B,CAAC;IACzD,0FAA0F;IAC1F,8FAA8F;IAC9F,yFAAyF;IACzF,MAAM,CAAC,gBAAgB,GAAG,IAAI,OAAO,EAAoB,CAAC;IAE1D,8FAA8F;IAC9F,2EAA2E;IAC3E,MAAM,CAAC,OAAO,CAAC,QAAkB;QAC7B,OAAO,mBAAmB,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,KAAoB,EAAE,GAAG,GAAsB,OAAO,CAAC,GAAG;QACvF,IAAI,GAAG,KAAK,OAAO,CAAC,GAAG,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;YACtE,IAAI,MAAM,GAAG,mBAAmB,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACrD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACvB,MAAM,GAAG,mBAAmB,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBACtD,mBAAmB,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBAChD,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,6CAA6C;YACjH,CAAC;YACD,OAAO,MAAM,CAAC;QAClB,CAAC;QACD,OAAO,mBAAmB,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,oCAAoC;IAC7F,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,KAAoB,EAAE,GAAsB;QAClE,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAClE,mBAAmB,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAChE,OAAO,QAAQ,CAAC;IACpB,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,KAAoB,EAAE,GAAsB;QAChE,wEAAwE;QACxE,kEAAkE;QAClE,wEAAwE;QACxE,gEAAgE;QAChE,4DAA4D;QAC5D,oDAAoD;QACpD,IAAI,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,gFAAgF;YAChF,iFAAiF;YACjF,iFAAiF;YACjF,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAChG,IAAI,QAAQ,KAAK,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,KAAK,CAAC,QAAQ,8BAA8B,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;YACzH,OAAO,QAAQ,CAAC;QACpB,CAAC;QACD,uEAAuE;QACvE,4CAA4C;QAC5C,MAAM,WAAW,GAAG,4BAA4B,KAAK,CAAC,QAAQ,EAAE,CAAC;QACjE,IAAI,GAAiC,CAAC;QACtC,IAAI,CAAC;YACD,GAAG,GAAG,MAAM,MAAM,kCAAC,WAAW,EAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,oBAAoB,WAAW,0BAA0B,KAAK,CAAC,KAAK,gBAAgB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACrH,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QAC5B,IAAI,OAAO,OAAO,EAAE,OAAO,KAAK,UAAU,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CACX,GAAG,WAAW,qEAAqE,CACtF,CAAC;QACN,CAAC;QACD,OAAO,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACzH,CAAC;IAED,uEAAuE;IACvE,iEAAiE;IACjE,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG;QAChE,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,kGAAkG;QACzI,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,mBAAmB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC3E,MAAM,mBAAmB,CAAC,wBAAwB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAClE,OAAO,QAAQ,CAAC;IACpB,CAAC;IAED,4FAA4F;IAC5F,8FAA8F;IAC9F,6FAA6F;IAC7F,2FAA2F;IAC3F,4FAA4F;IAC5F,8FAA8F;IAC9F,4FAA4F;IAC5F,2FAA2F;IAC3F,MAAM,CAAC,aAAa,GAAG,mBAAmB,CAAC;IAC3C,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,QAAkB,EAAE,GAAG,GAAsB,OAAO,CAAC,GAAG;QAC1F,0FAA0F;QAC1F,yFAAyF;QACzF,4FAA4F;QAC5F,0FAA0F;QAC1F,+EAA+E;QAC/E,MAAM,KAAK,GAAG,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;QAC5F,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,uBAAuB,CAAC,CAAC,CAAC,qBAAqB,CAAC;QAC1F,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,GAAG;YAAE,OAAO,CAAC,0CAA0C;QACzG,4FAA4F;QAC5F,yFAAyF;QACzF,2FAA2F;QAC3F,2FAA2F;QAC3F,uFAAuF;QACvF,wFAAwF;QACxF,IAAI,QAAQ,CAAC,gBAAgB,KAAK,KAAK,EAAE,CAAC;YACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CAChB,yCAAyC,IAAI,wBAAwB,QAAQ,CAAC,KAAK,qEAAqE;kBACtJ,4GAA4G,CACjH,CAAC;YACF,OAAO;QACX,CAAC;QACD,MAAM,OAAO,GAAG,aAAa,mBAAmB,CAAC,aAAa,GAAG,CAAC;QAClE,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC;gBAChC,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;gBAC3C,KAAK,EAAE,yBAAyB,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE;aACpE,CAAC,CAAC;YACH,qFAAqF;YACrF,uFAAuF;YACvF,iFAAiF;YACjF,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,8DAA8D,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9H,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,0FAA0F;YAC1F,2FAA2F;YAC3F,qFAAqF;YACrF,2FAA2F;YAC3F,4EAA4E;YAC5E,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtE,MAAM,IAAI,KAAK,CACX,0EAA0E,QAAQ,CAAC,KAAK,4BAA4B,IAAI,4CAA4C;kBAClK,kHAAkH;kBAClH,uMAAuM;kBACvM,8FAA8F,MAAM,EAAE,EACxG,EAAE,KAAK,EAAE,CACZ,CAAC;QACN,CAAC;QACD,IAAI,OAAO,KAAK,mBAAmB,CAAC,aAAa,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CACX,qDAAqD,IAAI,wCAAwC,QAAQ,CAAC,KAAK,uDAAuD;kBACpK,aAAa,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,aAAa,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK;kBAChH,2HAA2H;kBAC3H,uGAAuG;kBACvG,wJAAwJ,CAC7J,CAAC;QACN,CAAC;IACL,CAAC;CACJ"}

package/dist/core/SchemeRegistry.d.ts

@@ -0,0 +1,26 @@
+import type { LoopFlags } from "./types.ts";
+import type { PacketSection } from "./packet-wire.ts";
+import type ExecutorRegistry from "./ExecutorRegistry.ts";
+import type { Executor } from "./ExecutorRegistry.ts";
+export default class SchemeRegistry {
+    #private;
+    constructor();
+    register(name: string, handler: object): void;
+    registerRuntimeSchemes(executors: ExecutorRegistry): void;
+    registerRuntimeScheme(tag: string, executor: Executor): void;
+    get(name: string): object | undefined;
+    has(name: string): boolean;
+    isExternal(name: string): boolean;
+    list(): string[];
+    defaultChannelFor(scheme: string | null): string;
+    teach(): string;
+    docs(): Array<{
+        name: string;
+        content: string;
+    }>;
+    transformSections(sections: PacketSection[]): Promise<PacketSection[]>;
+    discoverExternal(cwd?: string): Promise<void>;
+    attributions(): string[];
+    resolveForLoop(flags: LoopFlags): Set<string>;
+}
+//# sourceMappingURL=SchemeRegistry.d.ts.map

package/dist/core/SchemeRegistry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SchemeRegistry.d.ts","sourceRoot":"","sources":["../../src/core/SchemeRegistry.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAItD,OAAO,KAAK,gBAAgB,MAAM,uBAAuB,CAAC;AAC1D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAkBtD,MAAM,CAAC,OAAO,OAAO,cAAc;;IAc/B,cAaC;IAED,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAG5C;IAOD,sBAAsB,CAAC,SAAS,EAAE,gBAAgB,GAAG,IAAI,CAMxD;IAOD,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAQ3D;IAED,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAqC;IAE1E,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAqC;IAI/D,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAqC;IAEtE,IAAI,IAAI,MAAM,EAAE,CAAkD;IAIlE,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAI/C;IAWD,KAAK,IAAI,MAAM,CAYd;IAID,IAAI,IAAI,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAW/C;IAOK,iBAAiB,CAAC,QAAQ,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAO3E;IAUK,gBAAgB,CAAC,GAAG,GAAE,MAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAajE;IAID,YAAY,IAAI,MAAM,EAAE,CAAoC;IAI5D,cAAc,CAAC,KAAK,EAAE,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,CAE5C;CACJ"}