@productbrain/cli 0.1.0-beta.1419 → 0.1.0-beta.14193

package/dist/lib/checklist.d.ts

@@ -0,0 +1,151 @@
+/**
+ * TASK-1026 (WP-862, RULE-664): THE sentence for the link that reaches a spine rung, built from
+ * SPINE_RUNG_SEQUENCE. `rung` is the level the link reaches: rungLine('vision') is "A strategy hangs on
+ * an accepted vision with part_of." and rungLine('key_result') is "A work package validates an accepted key result."
+ * Null for a kind that is no rung. It names kinds and the verb only (DEC-1994); each surface appends
+ * its own Next line. The checklist rung lines, SPINE_LINKS_LINES, the capture reply, relate and
+ * preflight help and the MCP relations and capture descriptions all print it; one test pins it.
+ * `label` words a kind (TASK-1027: preflight passes the workspace's own labels; default the kind's own words).
+ */
+export declare function rungLine(rung: string, label?: (kind: string) => string): string | null;
+/** TASK-1164 (DEC-2295): a spine link that skips the rung it owes, in rungLine's words. skippedRungLine('key_result',
+ *  'objective') is "A work package validates an accepted key result, never an objective." */
+export declare function skippedRungLine(owed: string, skippedTo: string): string | null;
+/** TASK-1164 (DEC-2295): how many accepted entries on the rung above a create receipt names, and how long each name runs. */
+export declare const SPINE_CANDIDATES_NAMED = 3;
+/**
+ * TASK-1164 (DEC-2295, RULE-662): what a spine create's receipt says about the accepted entries on the rung above it, names
+ * first. The one link written: "Linked to Ship invoicing (KR-2), the only accepted key result." Otherwise the ones to choose
+ * from, at most three by name: "Needs a key result: Ship invoicing (KR-2), Ten founders (KR-3), Renewals (KR-6) and 4 more."
+ * `complete` false (the read hit its bound) never counts the rest: "and more". Null with none, so the receipt keeps rungLine.
+ */
+export declare function spineCandidatesLine(parentKind: string, candidates: ReadonlyArray<{
+    entryId: string;
+    name: string;
+}>, { linked, complete }: {
+    linked: boolean;
+    complete: boolean;
+}): string | null;
+/** TASK-1164 (DEC-2295 addendum, DEC-1994): a second part_of to the rung above, names only; each surface adds its move door. */
+export declare function heldParentLine(childKind: string, parentName: string): string;
+/** TASK-1233 (TEN-5878): a move asked for an entry that hangs on no parent yet; each surface adds the plain relate as its Next. */
+export declare function nothingToMoveLine(childKind: string): string;
+/** TASK-1233 (TEN-5878): a move asked for an entry on two or more parents; a person keeps one, so no surface adds a Next. */
+export declare function manyParentsLine(childKind: string, parents: ReadonlyArray<{
+    entryId?: string;
+    name: string;
+}>): string;
+/** TASK-1164 (DEC-2295 addendum): the history row and receipt of an explicit move to a new parent. */
+export declare function movedParentLine(newParentName: string, oldParentName: string): string;
+/** Every rung's sentence, child to parent: what help and tool descriptions list. */
+export declare const SPINE_RUNG_LINES: readonly string[];
+/** The one direction line (TASK-1214): the rungs top first, how they link and the plan under them, from the rung sequence. The agent
+ *  block prints it and the MCP connector instructions read it, so it is worded once for every surface. */
+export declare const DIRECTION_LINE: string;
+/**
+ * TASK-1026 (WP-862): the spine-grammar lines the session start prints after the direction line,
+ * at most 11 words each and no command, kept beside rungLine so the start text adds no wording of its own.
+ */
+export declare const SPINE_LINKS_LINES: readonly string[];
+/**
+ * TASK-1038 (WP-863, RULE-664): the one refusal an entry that links to nothing it serves meets, and the refusal of an accept
+ * that is not verified yet. The kernel names the fix in words (DEC-1994); the CLI and the MCP add their own command. The
+ * telemetry (kernel/telemetry/coherencyEvent.ts) sorts a thrown refusal by these sentences, so a change here moves both.
+ */
+export declare const LINK_REFUSAL_WORDS: {
+    readonly unlinked: "This entry links to nothing it serves.";
+    readonly linkOrReason: "Link it to what it serves, or say why it stands alone.";
+    readonly linkOrAnswer: "Link it to what it serves, or answer why it stands alone.";
+    readonly linkThenSave: "Link it to what it serves, then save it again.";
+    readonly orientFirst: "Orient this session first, then save it again.";
+    readonly savedAnyway: "This entry links to nothing it serves yet; it was saved anyway.";
+    readonly reasonTooShort: (chars: number) => string;
+    readonly linkRoute: "Link it to the work package, goal or principle it serves, then try again; a linked entry needs no answer.";
+    readonly answerRoute: "Pick the answer that fits; a reason is needed only if you diverge.";
+    readonly reasonRoute: "Say why it stands alone; your name is kept with it.";
+    readonly notVerified: "This entry is not verified yet. Verify it, then accept it again.";
+    readonly verifyRoute: "Verify the entry, then accept it again.";
+    readonly personAccepts: "Only a person can accept this entry; a person accepts it in Product Brain.";
+    readonly notAccepted: (entryId: string) => string;
+    readonly notChanged: (entryId: string) => string;
+    /** The accept preview's label for an accept that would not go through (signed row 31). */
+    readonly wouldBeRefused: "Would be refused";
+    /** The accept preview's label for an accept that would go through, beside wouldBeRefused. */
+    readonly wouldBeAccepted: "Would be accepted";
+    /** The refusal steps: each step's title and its retry button, carried on the payload for the CLI and MCP accept refusal. */
+    readonly steps: {
+        readonly link: {
+            readonly title: "Link the authorizing entry";
+            readonly cta: "I've linked it — retry";
+        };
+        readonly answer: {
+            readonly title: "Answer it";
+            readonly cta: "Record my answer, then retry";
+            readonly legend: "Your answer";
+        };
+        readonly reason: {
+            readonly title: "Override with a typed reason";
+            readonly cta: "Override & retry";
+            readonly label: "Typed override reason";
+        };
+        readonly verify: {
+            readonly title: "Verify the entry";
+            readonly cta: "I've verified it — retry";
+        };
+        readonly person: {
+            readonly title: "A human must accept it directly";
+            readonly cta: "I've had a human accept it — retry";
+        };
+    };
+    readonly heldBundle: (count: number) => string;
+};
+/** The fix a thrown accept refusal names, from the row its error data carries (`details`, the field that crosses the gateway). */
+export declare function refusalFixOf(details: readonly unknown[] | undefined): 'verify' | 'person' | null;
+/** The words no line a person or agent reads may use (RULE-705 check 2); a method draft naming one is refused. */
+export declare const VOICE_BANNED_WORDS: readonly string[];
+/** The first banned word a line uses as a word (its plural too), or undefined: the one test a method line and a served line meet. */
+export declare const bannedWordIn: (line: string) => string | undefined;
+/** One instruction per criterion id, per gated rubric. A kernel test pins it to the rubrics. */
+export declare const CHECKLIST_LINES: Readonly<Record<string, Readonly<Record<string, string>>>>;
+/** TASK-1161 (DEC-2292): the criteria that block an accept, per spine kind, each measured to the block bar by X6; the rest coach.
+ *  The set moves only through the weekly blind read (DEC-2275); a kind with no row here keeps every criterion required. */
+export declare const BLOCKING_CRITERIA: Readonly<Record<string, readonly string[]>>;
+/** A criterion holds an accept when it is in its kind's set, its kind has none, or a structural fact (no judge) failed it. */
+export declare function isRequiredCriterion(kind: string, c: {
+    id: string;
+    passed: boolean;
+    failedBy?: string;
+}): boolean;
+export interface ChecklistCriterion {
+    id: string;
+    passed: boolean;
+    /** What the AI judge named as concretely absent, on a fail. */
+    missing?: string;
+    failedBy?: string;
+    questionTemplate?: string;
+    /** This verdict's own instruction in place of the rubric line: the spine gate's failing rung names its blocking entry (TASK-1027). */
+    line?: string;
+}
+/** The checklist's three states as words, one constant: every row a refusal or a prompt prints opens with one. */
+export declare const CHECKLIST_STATE_WORDS: {
+    readonly met: "Met";
+    readonly not_yet: "Not yet";
+    readonly judging: "Still judging";
+};
+/** The one line over a refused accept's rows, on every surface that shows them. */
+export declare const ACCEPT_REFUSAL_HEADLINE = "Not accepted yet";
+/** The one line over a refused or held save (DEC-2334, RULE-664): the entry panel's foot, the held edit's lines, the daily limit. */
+export declare const SAVE_REFUSAL_HEADLINE = "Not saved yet";
+/** The kind a part_of_any entry (a task) hangs on: the work package below the first rung. */
+export declare const PART_OF_ANY_PARENT_KIND = "work_package";
+/** A refused accept's row for an entry with no parent link, on every surface that shows the rows: the parent kind in the
+ *  workspace's own lower-case words, or what it belongs to when the kind is unknown (Voice signed both, 2026-10-25). */
+export declare function missingParentLine(parentWord?: string | null): string;
+/** TASK-1161: the header over the questions a failed coaching criterion asks; they never block. */
+export declare const COACHING_HEADER = "Worth asking (does not block):";
+/**
+ * The checklist lines for an entry's verdict, or null when its type has no checklist.
+ * `judging` is true while the AI verdict has not settled; a failed non-blocking criterion prints "? <its question>".
+ */
+export declare function renderChecklist(canonicalKey: string, criteria: readonly ChecklistCriterion[], judging: boolean): string[] | null;
+//# sourceMappingURL=checklist.d.ts.map

package/dist/lib/checklist.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checklist.d.ts","sourceRoot":"","sources":["../../src/lib/checklist.ts"],"names":[],"mappings":"AA+BA;;;;;;;;GAQG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAiB,GAAG,MAAM,GAAG,IAAI,CAOhG;AAED;6FAC6F;AAC7F,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAG9E;AAED,6HAA6H;AAC7H,eAAO,MAAM,sBAAsB,IAAI,CAAC;AAKxC;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAClC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,GAC5I,MAAM,GAAG,IAAI,CAOf;AAED,gIAAgI;AAChI,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAE5E;AAED,mIAAmI;AACnI,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED,6HAA6H;AAC7H,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,MAAM,CAKrH;AAED,sGAAsG;AACtG,wBAAgB,eAAe,CAAC,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,CAEpF;AAED,oFAAoF;AACpF,eAAO,MAAM,gBAAgB,EAAE,SAAS,MAAM,EAAiE,CAAC;AAEhH;0GAC0G;AAC1G,eAAO,MAAM,cAAc,QAC0G,CAAC;AAEtI;;;GAGG;AACH,eAAO,MAAM,iBAAiB,EAAE,SAAS,MAAM,EAG9C,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,kBAAkB;;;;;;;qCAON,MAAM;;;;;;;oCAOP,MAAM;mCACP,MAAM;IAC5B,0FAA0F;;IAE1F,6FAA6F;;IAE7F,4HAA4H;;;;;;;;;;;;;;;;;;;;;;;;;iCAQxG,MAAM;CACjB,CAAC;AAEX,kIAAkI;AAClI,wBAAgB,YAAY,CAAC,OAAO,EAAE,SAAS,OAAO,EAAE,GAAG,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,IAAI,CAGhG;AAED,kHAAkH;AAClH,eAAO,MAAM,kBAAkB,EAAE,SAAS,MAAM,EAE/C,CAAC;AAEF,qIAAqI;AACrI,eAAO,MAAM,YAAY,GAAI,MAAM,MAAM,KAAG,MAAM,GAAG,SAC4B,CAAC;AAElF,gGAAgG;AAChG,eAAO,MAAM,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAiCtF,CAAC;AAEF;2HAC2H;AAC3H,eAAO,MAAM,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAMzE,CAAC;AAEF,8HAA8H;AAC9H,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAGhH;AAED,MAAM,WAAW,kBAAkB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,OAAO,CAAC;IAChB,+DAA+D;IAC/D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,sIAAsI;IACtI,IAAI,CAAC,EAAE,MAAM,CAAC;CACd;AAGD,kHAAkH;AAClH,eAAO,MAAM,qBAAqB;;;;CAAwE,CAAC;AAC3G,mFAAmF;AACnF,eAAO,MAAM,uBAAuB,qBAAqB,CAAC;AAC1D,qIAAqI;AACrI,eAAO,MAAM,qBAAqB,kBAAkB,CAAC;AACrD,6FAA6F;AAC7F,eAAO,MAAM,uBAAuB,iBAAsB,CAAC;AAC3D;wHACwH;AACxH,wBAAgB,iBAAiB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAEpE;AACD,mGAAmG;AACnG,eAAO,MAAM,eAAe,mCAAmC,CAAC;AAEhE;;;GAGG;AACH,wBAAgB,eAAe,CAC9B,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,SAAS,kBAAkB,EAAE,EACvC,OAAO,EAAE,OAAO,GACd,MAAM,EAAE,GAAG,IAAI,CAajB"}

package/dist/lib/checklist.js

@@ -0,0 +1,235 @@
+// GENERATED by scripts/generate-mcp-embedded-copies.mjs from kernel/quality/checklist.ts.
+// DO NOT EDIT. Run `npm run mcp:embedded-copies` to regenerate.
+// Local runtime copy for the isolated connector build.
+/**
+ * The quality checklist — one renderer for every surface (TASK-590, DEC-1910, DEC-1913).
+ *
+ * A blocked or pending accept shows every criterion of the entry's rubric as one short
+ * instruction with one of three states: met, not yet, or still judging (the AI verdict has
+ * not landed). The line is the repair; an unmet line adds what the AI judge named as missing.
+ * The judge's free-text explanation is never shown, so it can never contradict a tick. A failed criterion that does not block (TASK-1161) asks its question.
+ *
+ * Lines exist only for the gated spine rubrics, purpose, vision, strategy, objective and key
+ * result (DEC-1913, DEC-1935), and for the strategy-link gate's rungs (TASK-609:
+ * kernel/strategy/spineRefusal.ts marks each rung above a work package, key result, objective,
+ * strategy or vision met or not yet); for any other key `renderChecklist` returns null. No Chain ids in any line:
+ * these strings reach users. The AI judge decides every spine line, so no line names a word count.
+ *
+ * It imports only kernel/strategy/spineRungs.ts, itself dependency-free: scripts/generate-mcp-embedded-copies.mjs
+ * ships both sources to the CLI and the MCP server, and the accept gate (convex/lib/gates/evaluate.ts)
+ * calls it for the Rail, so every surface prints the same lines.
+ */
+import { SPINE_RUNG_SEQUENCE } from './spineRungs.js';
+/** The kind below the first rung of SPINE_RUNG_SEQUENCE. */
+const FIRST_SPINE_SUBJECT = 'work_package';
+const kindWord = (kind) => kind.replace(/_/g, ' ');
+const withArticle = (word) => `${/^[aeiou]/i.test(word) ? 'an' : 'a'} ${word}`;
+const spineSubject = (kind, label = kindWord) => { const words = withArticle(label(kind)); return words[0].toUpperCase() + words.slice(1); };
+/**
+ * TASK-1026 (WP-862, RULE-664): THE sentence for the link that reaches a spine rung, built from
+ * SPINE_RUNG_SEQUENCE. `rung` is the level the link reaches: rungLine('vision') is "A strategy hangs on
+ * an accepted vision with part_of." and rungLine('key_result') is "A work package validates an accepted key result."
+ * Null for a kind that is no rung. It names kinds and the verb only (DEC-1994); each surface appends
+ * its own Next line. The checklist rung lines, SPINE_LINKS_LINES, the capture reply, relate and
+ * preflight help and the MCP relations and capture descriptions all print it; one test pins it.
+ * `label` words a kind (TASK-1027: preflight passes the workspace's own labels; default the kind's own words).
+ */
+export function rungLine(rung, label = kindWord) {
+    const index = SPINE_RUNG_SEQUENCE.findIndex((spec) => spec.targetKey === rung);
+    if (index < 0)
+        return null;
+    const { relationType, targetKey } = SPINE_RUNG_SEQUENCE[index];
+    const parent = `an accepted ${label(targetKey)}`;
+    const subject = spineSubject(index === 0 ? FIRST_SPINE_SUBJECT : SPINE_RUNG_SEQUENCE[index - 1].targetKey, label);
+    return relationType === 'part_of' ? `${subject} hangs on ${parent} with ${relationType}.` : `${subject} ${relationType} ${parent}.`;
+}
+/** TASK-1164 (DEC-2295): a spine link that skips the rung it owes, in rungLine's words. skippedRungLine('key_result',
+ *  'objective') is "A work package validates an accepted key result, never an objective." */
+export function skippedRungLine(owed, skippedTo) {
+    const line = rungLine(owed);
+    return line ? `${line.slice(0, -1)}, never ${withArticle(kindWord(skippedTo))}.` : null;
+}
+/** TASK-1164 (DEC-2295): how many accepted entries on the rung above a create receipt names, and how long each name runs. */
+export const SPINE_CANDIDATES_NAMED = 3;
+const CANDIDATE_NAME_CHARS = 40;
+const named = (c) => `${c.name.length > CANDIDATE_NAME_CHARS ? `${c.name.slice(0, CANDIDATE_NAME_CHARS).trimEnd()}...` : c.name} (${c.entryId})`;
+/**
+ * TASK-1164 (DEC-2295, RULE-662): what a spine create's receipt says about the accepted entries on the rung above it, names
+ * first. The one link written: "Linked to Ship invoicing (KR-2), the only accepted key result." Otherwise the ones to choose
+ * from, at most three by name: "Needs a key result: Ship invoicing (KR-2), Ten founders (KR-3), Renewals (KR-6) and 4 more."
+ * `complete` false (the read hit its bound) never counts the rest: "and more". Null with none, so the receipt keeps rungLine.
+ */
+export function spineCandidatesLine(parentKind, candidates, { linked, complete }) {
+    const kind = kindWord(parentKind);
+    if (linked && candidates.length === 1)
+        return `Linked to ${named(candidates[0])}, the only accepted ${kind}.`;
+    if (candidates.length === 0)
+        return null;
+    const rest = candidates.length - SPINE_CANDIDATES_NAMED;
+    const more = !complete ? ' and more' : rest > 0 ? ` and ${rest} more` : '';
+    return `Needs ${withArticle(kind)}: ${candidates.slice(0, SPINE_CANDIDATES_NAMED).map(named).join(', ')}${more}.`;
+}
+/** TASK-1164 (DEC-2295 addendum, DEC-1994): a second part_of to the rung above, names only; each surface adds its move door. */
+export function heldParentLine(childKind, parentName) {
+    return `This ${kindWord(childKind)} already hangs on ${parentName}.`;
+}
+/** TASK-1233 (TEN-5878): a move asked for an entry that hangs on no parent yet; each surface adds the plain relate as its Next. */
+export function nothingToMoveLine(childKind) {
+    return `Nothing to move: this ${kindWord(childKind)} hangs on nothing yet, so relate it without a move.`;
+}
+/** TASK-1233 (TEN-5878): a move asked for an entry on two or more parents; a person keeps one, so no surface adds a Next. */
+export function manyParentsLine(childKind, parents) {
+    const shown = parents.slice(0, 2).map((p) => (p.entryId ? named({ entryId: p.entryId, name: p.name }) : p.name));
+    const rest = parents.length - shown.length;
+    const list = rest > 0 ? `${shown.join(', ')} and ${rest} more` : shown.join(' and ');
+    return `This ${kindWord(childKind)} hangs on ${list}; a person removes ${parents.length === 2 ? 'one' : 'all but one'} in the Rail before a move.`;
+}
+/** TASK-1164 (DEC-2295 addendum): the history row and receipt of an explicit move to a new parent. */
+export function movedParentLine(newParentName, oldParentName) {
+    return `Now hangs on ${newParentName}, moved from ${oldParentName}.`;
+}
+/** Every rung's sentence, child to parent: what help and tool descriptions list. */
+export const SPINE_RUNG_LINES = SPINE_RUNG_SEQUENCE.map((spec) => rungLine(spec.targetKey));
+/** The one direction line (TASK-1214): the rungs top first, how they link and the plan under them, from the rung sequence. The agent
+ *  block prints it and the MCP connector instructions read it, so it is worded once for every surface. */
+export const DIRECTION_LINE = `Direction runs ${[...SPINE_RUNG_SEQUENCE].reverse().map((rung) => kindWord(rung.targetKey)).join(', ')}: `
+    + `each ${SPINE_RUNG_SEQUENCE[1].relationType} the one above and accepted after it; a work package is the plan under a key result.`;
+/**
+ * TASK-1026 (WP-862): the spine-grammar lines the session start prints after the direction line,
+ * at most 11 words each and no command, kept beside rungLine so the start text adds no wording of its own.
+ */
+export const SPINE_LINKS_LINES = [
+    `${spineSubject(FIRST_SPINE_SUBJECT)} ${SPINE_RUNG_SEQUENCE[0].relationType} ${withArticle(kindWord(SPINE_RUNG_SEQUENCE[0].targetKey))}; informs joins no levels.`,
+    'Before accepting an entry, preflight it: it names what blocks.',
+];
+/**
+ * TASK-1038 (WP-863, RULE-664): the one refusal an entry that links to nothing it serves meets, and the refusal of an accept
+ * that is not verified yet. The kernel names the fix in words (DEC-1994); the CLI and the MCP add their own command. The
+ * telemetry (kernel/telemetry/coherencyEvent.ts) sorts a thrown refusal by these sentences, so a change here moves both.
+ */
+export const LINK_REFUSAL_WORDS = {
+    unlinked: 'This entry links to nothing it serves.',
+    linkOrReason: 'Link it to what it serves, or say why it stands alone.',
+    linkOrAnswer: 'Link it to what it serves, or answer why it stands alone.',
+    linkThenSave: 'Link it to what it serves, then save it again.',
+    orientFirst: 'Orient this session first, then save it again.',
+    savedAnyway: 'This entry links to nothing it serves yet; it was saved anyway.',
+    reasonTooShort: (chars) => `The reason it stands alone needs at least ${chars} characters.`,
+    linkRoute: 'Link it to the work package, goal or principle it serves, then try again; a linked entry needs no answer.',
+    answerRoute: 'Pick the answer that fits; a reason is needed only if you diverge.',
+    reasonRoute: 'Say why it stands alone; your name is kept with it.',
+    notVerified: 'This entry is not verified yet. Verify it, then accept it again.',
+    verifyRoute: 'Verify the entry, then accept it again.',
+    personAccepts: 'Only a person can accept this entry; a person accepts it in Product Brain.',
+    notAccepted: (entryId) => `${entryId} was not accepted and stays a draft.`,
+    notChanged: (entryId) => `${entryId} was not changed.`,
+    /** The accept preview's label for an accept that would not go through (signed row 31). */
+    wouldBeRefused: 'Would be refused',
+    /** The accept preview's label for an accept that would go through, beside wouldBeRefused. */
+    wouldBeAccepted: 'Would be accepted',
+    /** The refusal steps: each step's title and its retry button, carried on the payload for the CLI and MCP accept refusal. */
+    steps: {
+        link: { title: 'Link the authorizing entry', cta: "I've linked it — retry" },
+        answer: { title: 'Answer it', cta: 'Record my answer, then retry', legend: 'Your answer' },
+        reason: { title: 'Override with a typed reason', cta: 'Override & retry', label: 'Typed override reason' },
+        verify: { title: 'Verify the entry', cta: "I've verified it — retry" },
+        person: { title: 'A human must accept it directly', cta: "I've had a human accept it — retry" },
+    },
+    heldBundle: (count) => `Nothing was accepted: ${count} ${count === 1 ? 'entry links to nothing it serves' : 'entries link to nothing they serve'}.`,
+};
+/** The fix a thrown accept refusal names, from the row its error data carries (`details`, the field that crosses the gateway). */
+export function refusalFixOf(details) {
+    const row = details?.find((d) => typeof d === 'object' && d !== null && 'refusalFix' in d);
+    return row?.refusalFix === 'verify' || row?.refusalFix === 'person' ? row.refusalFix : null;
+}
+/** The words no line a person or agent reads may use (RULE-705 check 2); a method draft naming one is refused. */
+export const VOICE_BANNED_WORDS = [
+    'canonical', 'gate', 'coherency', 'constellation', 'stratum', 'attestation', 'readiness', 'verdict', 'SSOT', 'spine',
+];
+/** The first banned word a line uses as a word (its plural too), or undefined: the one test a method line and a served line meet. */
+export const bannedWordIn = (line) => VOICE_BANNED_WORDS.find((word) => new RegExp(`\\b${word}s?\\b`, 'i').test(line));
+/** One instruction per criterion id, per gated rubric. A kernel test pins it to the rubrics. */
+export const CHECKLIST_LINES = {
+    purpose: {
+        stranger_test: 'Explain it so a stranger knows why this company exists',
+        specificity: 'Say what would be missing from the world without this company',
+        not_a_platitude: 'Say something a reasonable company would not also claim',
+        beneficiary_named: 'Name who it is for: people, a community or part of the world, specific enough to say who it is not for',
+        durable_not_dated: 'Leave out dates and planning cycles; those belong on goals',
+    },
+    vision: {
+        specificity: 'Say what will be different, in words only this product could use',
+        beneficiary: 'Name who it is for: people, a community or part of the world, specific enough to say who it is not for',
+        falsifiability: 'Choose a direction a reasonable rival would reject',
+        stranger_test: 'Explain it so a stranger knows what will be different, and for whom',
+        serves_rung_above: 'Say how this vision serves the purpose above it',
+    },
+    strategy: {
+        coherent_narrative: 'Connect the diagnosis, the policy and the first actions',
+        decisiveness: 'Say what you will not do',
+        time_bounded: 'Name a horizon: a date, a duration or a milestone',
+        serves_rung_above: 'Say how this strategy serves the vision above it',
+    },
+    objective: {
+        outcome_not_activity: 'State what will be true once it is met, not the work to do',
+        serves_strategy: 'Say what must be true for the strategy to succeed',
+        observable: 'Make it something a reader could see has happened',
+    },
+    key_result: {
+        measurable: 'Name a measure and the target value or state',
+        bounded: 'Say by when, or how often, the measure is read',
+        moves_the_objective: 'Pick a result that shows the objective is happening, not that work was done',
+    },
+    /** One line per spine rung, keyed by the rung it reaches: rungLine, in SPINE_RUNG_SEQUENCE order (TASK-1026). */
+    strategy_link: Object.fromEntries(SPINE_RUNG_SEQUENCE.map((spec) => [spec.targetKey, rungLine(spec.targetKey)])),
+};
+/** TASK-1161 (DEC-2292): the criteria that block an accept, per spine kind, each measured to the block bar by X6; the rest coach.
+ *  The set moves only through the weekly blind read (DEC-2275); a kind with no row here keeps every criterion required. */
+export const BLOCKING_CRITERIA = {
+    purpose: [],
+    vision: ['beneficiary'],
+    strategy: ['coherent_narrative', 'serves_rung_above'],
+    objective: [],
+    key_result: [],
+};
+/** A criterion holds an accept when it is in its kind's set, its kind has none, or a structural fact (no judge) failed it. */
+export function isRequiredCriterion(kind, c) {
+    const blocking = BLOCKING_CRITERIA[kind];
+    return !blocking || blocking.includes(c.id) || (!c.passed && c.failedBy !== 'judge');
+}
+const MARK = { met: '[x]', not_yet: '[ ]', judging: '[~]' };
+/** The checklist's three states as words, one constant: every row a refusal or a prompt prints opens with one. */
+export const CHECKLIST_STATE_WORDS = { met: 'Met', not_yet: 'Not yet', judging: 'Still judging' };
+/** The one line over a refused accept's rows, on every surface that shows them. */
+export const ACCEPT_REFUSAL_HEADLINE = 'Not accepted yet';
+/** The one line over a refused or held save (DEC-2334, RULE-664): the entry panel's foot, the held edit's lines, the daily limit. */
+export const SAVE_REFUSAL_HEADLINE = 'Not saved yet';
+/** The kind a part_of_any entry (a task) hangs on: the work package below the first rung. */
+export const PART_OF_ANY_PARENT_KIND = FIRST_SPINE_SUBJECT;
+/** A refused accept's row for an entry with no parent link, on every surface that shows the rows: the parent kind in the
+ *  workspace's own lower-case words, or what it belongs to when the kind is unknown (Voice signed both, 2026-10-25). */
+export function missingParentLine(parentWord) {
+    return parentWord ? `Link it to the ${parentWord} it belongs to.` : 'Link it to what it belongs to.';
+}
+/** TASK-1161: the header over the questions a failed coaching criterion asks; they never block. */
+export const COACHING_HEADER = 'Worth asking (does not block):';
+/**
+ * The checklist lines for an entry's verdict, or null when its type has no checklist.
+ * `judging` is true while the AI verdict has not settled; a failed non-blocking criterion prints "? <its question>".
+ */
+export function renderChecklist(canonicalKey, criteria, judging) {
+    const lines = CHECKLIST_LINES[canonicalKey];
+    if (!lines)
+        return null;
+    const listed = criteria.filter((c) => (c.line ?? lines[c.id]) !== undefined);
+    const asks = listed.filter((c) => !c.passed && !isRequiredCriterion(canonicalKey, c)).map((c) => `? ${c.questionTemplate ?? c.line ?? lines[c.id]}`);
+    return listed
+        .filter((c) => c.passed || isRequiredCriterion(canonicalKey, c))
+        .map((c) => {
+        const state = !c.passed ? 'not_yet' : judging ? 'judging' : 'met';
+        const still = state === 'judging' ? ' (still judging)' : '';
+        const missing = state === 'not_yet' && c.missing ? ` — missing: ${c.missing}` : '';
+        return `${MARK[state]} ${c.line ?? lines[c.id]}${still}${missing}`;
+    }).concat(asks.length > 0 ? [COACHING_HEADER, ...asks] : []);
+}
+//# sourceMappingURL=checklist.js.map

package/dist/lib/checklist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checklist.js","sourceRoot":"","sources":["../../src/lib/checklist.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,gEAAgE;AAChE,uDAAuD;AAEvD;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAEtD,4DAA4D;AAC5D,MAAM,mBAAmB,GAAG,cAAc,CAAC;AAE3C,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AACnE,MAAM,WAAW,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;AAC/F,MAAM,YAAY,GAAG,CAAC,IAAY,EAAE,QAAkC,QAAQ,EAAU,EAAE,GAAG,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAExL;;;;;;;;GAQG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,QAAkC,QAAQ;IAChF,MAAM,KAAK,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC;IAC/E,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,mBAAmB,CAAC,KAAK,CAAE,CAAC;IAChE,MAAM,MAAM,GAAG,eAAe,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;IACjD,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,mBAAmB,CAAC,KAAK,GAAG,CAAC,CAAE,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACnH,OAAO,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,OAAO,aAAa,MAAM,SAAS,YAAY,GAAG,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,YAAY,IAAI,MAAM,GAAG,CAAC;AACrI,CAAC;AAED;6FAC6F;AAC7F,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,SAAiB;IAC9D,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5B,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACzF,CAAC;AAED,6HAA6H;AAC7H,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AACxC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAChC,MAAM,KAAK,GAAG,CAAC,CAAoC,EAAU,EAAE,CAC9D,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,oBAAoB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,GAAG,CAAC;AAE7H;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAClC,UAAkB,EAAE,UAA4D,EAAE,EAAE,MAAM,EAAE,QAAQ,EAA0C;IAE9I,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IAClC,IAAI,MAAM,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,aAAa,KAAK,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,uBAAuB,IAAI,GAAG,CAAC;IAC/G,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,GAAG,sBAAsB,CAAC;IACxD,MAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,OAAO,SAAS,WAAW,CAAC,IAAI,CAAC,KAAK,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC;AACnH,CAAC;AAED,gIAAgI;AAChI,MAAM,UAAU,cAAc,CAAC,SAAiB,EAAE,UAAkB;IACnE,OAAO,QAAQ,QAAQ,CAAC,SAAS,CAAC,qBAAqB,UAAU,GAAG,CAAC;AACtE,CAAC;AAED,mIAAmI;AACnI,MAAM,UAAU,iBAAiB,CAAC,SAAiB;IAClD,OAAO,yBAAyB,QAAQ,CAAC,SAAS,CAAC,qDAAqD,CAAC;AAC1G,CAAC;AAED,6HAA6H;AAC7H,MAAM,UAAU,eAAe,CAAC,SAAiB,EAAE,OAA0D;IAC5G,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACjH,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC3C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrF,OAAO,QAAQ,QAAQ,CAAC,SAAS,CAAC,aAAa,IAAI,sBAAsB,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,6BAA6B,CAAC;AACpJ,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,eAAe,CAAC,aAAqB,EAAE,aAAqB;IAC3E,OAAO,gBAAgB,aAAa,gBAAgB,aAAa,GAAG,CAAC;AACtE,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,MAAM,gBAAgB,GAAsB,mBAAmB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAE,CAAC,CAAC;AAEhH;0GAC0G;AAC1G,MAAM,CAAC,MAAM,cAAc,GAAG,kBAAkB,CAAC,GAAG,mBAAmB,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;MACtI,QAAQ,mBAAmB,CAAC,CAAC,CAAE,CAAC,YAAY,sFAAsF,CAAC;AAEtI;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAsB;IACnD,GAAG,YAAY,CAAC,mBAAmB,CAAC,IAAI,mBAAmB,CAAC,CAAC,CAAE,CAAC,YAAY,IAAI,WAAW,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAE,CAAC,SAAS,CAAC,CAAC,4BAA4B;IACpK,gEAAgE;CAChE,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IACjC,QAAQ,EAAE,wCAAwC;IAClD,YAAY,EAAE,wDAAwD;IACtE,YAAY,EAAE,2DAA2D;IACzE,YAAY,EAAE,gDAAgD;IAC9D,WAAW,EAAE,gDAAgD;IAC7D,WAAW,EAAE,iEAAiE;IAC9E,cAAc,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,6CAA6C,KAAK,cAAc;IACnG,SAAS,EAAE,2GAA2G;IACtH,WAAW,EAAE,oEAAoE;IACjF,WAAW,EAAE,qDAAqD;IAClE,WAAW,EAAE,kEAAkE;IAC/E,WAAW,EAAE,yCAAyC;IACtD,aAAa,EAAE,4EAA4E;IAC3F,WAAW,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,GAAG,OAAO,sCAAsC;IAClF,UAAU,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,GAAG,OAAO,mBAAmB;IAC9D,0FAA0F;IAC1F,cAAc,EAAE,kBAAkB;IAClC,6FAA6F;IAC7F,eAAe,EAAE,mBAAmB;IACpC,4HAA4H;IAC5H,KAAK,EAAE;QACN,IAAI,EAAE,EAAE,KAAK,EAAE,4BAA4B,EAAE,GAAG,EAAE,wBAAwB,EAAE;QAC5E,MAAM,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,8BAA8B,EAAE,MAAM,EAAE,aAAa,EAAE;QAC1F,MAAM,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE,GAAG,EAAE,kBAAkB,EAAE,KAAK,EAAE,uBAAuB,EAAE;QAC1G,MAAM,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,GAAG,EAAE,0BAA0B,EAAE;QACtE,MAAM,EAAE,EAAE,KAAK,EAAE,iCAAiC,EAAE,GAAG,EAAE,oCAAoC,EAAE;KAC/F;IACD,UAAU,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,yBAAyB,KAAK,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,oCAAoC,GAAG;CAClJ,CAAC;AAEX,kIAAkI;AAClI,MAAM,UAAU,YAAY,CAAC,OAAuC;IACnE,MAAM,GAAG,GAAG,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAgC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,YAAY,IAAI,CAAC,CAAC,CAAC;IACzH,OAAO,GAAG,EAAE,UAAU,KAAK,QAAQ,IAAI,GAAG,EAAE,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7F,CAAC;AAED,kHAAkH;AAClH,MAAM,CAAC,MAAM,kBAAkB,GAAsB;IACpD,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO;CACpH,CAAC;AAEF,qIAAqI;AACrI,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,IAAY,EAAsB,EAAE,CAChE,kBAAkB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,IAAI,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAElF,gGAAgG;AAChG,MAAM,CAAC,MAAM,eAAe,GAA+D;IAC1F,OAAO,EAAE;QACR,aAAa,EAAE,wDAAwD;QACvE,WAAW,EAAE,+DAA+D;QAC5E,eAAe,EAAE,yDAAyD;QAC1E,iBAAiB,EAAE,wGAAwG;QAC3H,iBAAiB,EAAE,4DAA4D;KAC/E;IACD,MAAM,EAAE;QACP,WAAW,EAAE,kEAAkE;QAC/E,WAAW,EAAE,wGAAwG;QACrH,cAAc,EAAE,oDAAoD;QACpE,aAAa,EAAE,qEAAqE;QACpF,iBAAiB,EAAE,iDAAiD;KACpE;IACD,QAAQ,EAAE;QACT,kBAAkB,EAAE,yDAAyD;QAC7E,YAAY,EAAE,0BAA0B;QACxC,YAAY,EAAE,mDAAmD;QACjE,iBAAiB,EAAE,kDAAkD;KACrE;IACD,SAAS,EAAE;QACV,oBAAoB,EAAE,4DAA4D;QAClF,eAAe,EAAE,mDAAmD;QACpE,UAAU,EAAE,mDAAmD;KAC/D;IACD,UAAU,EAAE;QACX,UAAU,EAAE,8CAA8C;QAC1D,OAAO,EAAE,gDAAgD;QACzD,mBAAmB,EAAE,6EAA6E;KAClG;IACD,iHAAiH;IACjH,aAAa,EAAE,MAAM,CAAC,WAAW,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAE,CAAC,CAAC,CAAC;CACjH,CAAC;AAEF;2HAC2H;AAC3H,MAAM,CAAC,MAAM,iBAAiB,GAAgD;IAC7E,OAAO,EAAE,EAAE;IACX,MAAM,EAAE,CAAC,aAAa,CAAC;IACvB,QAAQ,EAAE,CAAC,oBAAoB,EAAE,mBAAmB,CAAC;IACrD,SAAS,EAAE,EAAE;IACb,UAAU,EAAE,EAAE;CACd,CAAC;AAEF,8HAA8H;AAC9H,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,CAAqD;IACtG,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACzC,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;AACtF,CAAC;AAaD,MAAM,IAAI,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAW,CAAC;AACrE,kHAAkH;AAClH,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,EAAW,CAAC;AAC3G,mFAAmF;AACnF,MAAM,CAAC,MAAM,uBAAuB,GAAG,kBAAkB,CAAC;AAC1D,qIAAqI;AACrI,MAAM,CAAC,MAAM,qBAAqB,GAAG,eAAe,CAAC;AACrD,6FAA6F;AAC7F,MAAM,CAAC,MAAM,uBAAuB,GAAG,mBAAmB,CAAC;AAC3D;wHACwH;AACxH,MAAM,UAAU,iBAAiB,CAAC,UAA0B;IAC3D,OAAO,UAAU,CAAC,CAAC,CAAC,kBAAkB,UAAU,iBAAiB,CAAC,CAAC,CAAC,gCAAgC,CAAC;AACtG,CAAC;AACD,mGAAmG;AACnG,MAAM,CAAC,MAAM,eAAe,GAAG,gCAAgC,CAAC;AAEhE;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC9B,YAAoB,EACpB,QAAuC,EACvC,OAAgB;IAEhB,MAAM,KAAK,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IAC7E,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,gBAAgB,IAAI,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACrJ,OAAO,MAAM;SACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,mBAAmB,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;SAC/D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACV,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;QAClE,MAAM,KAAK,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,MAAM,OAAO,GAAG,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,KAAK,GAAG,OAAO,EAAE,CAAC;IACpE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC/D,CAAC"}

package/dist/lib/cliFirstRun.d.ts

@@ -0,0 +1,36 @@
+/**
+ * The terminal first run, declared once (TASK-562, WP-861, TEN-1923, RULE-664, RULE-657): install pb,
+ * connect in the project folder, then init. A new person on a machine without pb reads these lines.
+ *
+ * Readers: the connect-token mint (convex/auth/connectTokens.ts) and the pb CLI through its
+ * generated copy packages/cli/src/lib/cliFirstRun.ts (scripts/generate-mcp-embedded-copies.mjs,
+ * DEC-1481). Zero imports, so the generator copies it verbatim.
+ */
+/** The one install line. `engines.node` in packages/cli/package.json is the Node floor it needs. */
+export declare const CLI_INSTALL_COMMAND = "npm install -g @productbrain/cli@beta";
+/** The step after connect: it writes the session hooks that open a briefed session (DEC-1926). */
+export declare const CLI_INIT_COMMAND = "pb init";
+/**
+ * The agent tools pb init writes a start hook for (TASK-1543, TEN-6149). `pb init --client <x>` writes x's
+ * hook even in a folder without its marker files; with no --client, init detects from the folder.
+ */
+export declare const INIT_CLIENTS: readonly ["claude", "codex", "cursor"];
+export type InitClient = (typeof INIT_CLIENTS)[number];
+/** The init line the connect screen pastes for the tool picked there; with no pick, plain pb init. */
+export declare const cliInitCommand: (client?: InitClient | null) => string;
+/**
+ * The one pb connect line. The connect screen's block is run by an agent in a shell with no terminal to
+ * confirm in, so it carries --yes, else pb connect refuses once (TEN-5925); Settings, API keys tells a
+ * person to run it in their own terminal, where the confirm runs, so it passes `{ yes: false }`.
+ */
+export declare const cliConnectCommand: (token: string, gateway?: string | null, { yes }?: {
+    yes?: boolean;
+}) => string;
+/** What a person says to an agent with no start hook: it names the pb CLI, never the MCP tools (TEN-6149). */
+export declare const CLI_START_SENTENCE = "Run pb session start.";
+/** A connect token lives this long and works once (FEAT-958). */
+export declare const CONNECT_TOKEN_TTL_MINUTES = 15;
+export declare const CONNECT_TOKEN_TTL_MS: number;
+/** A connect token bound to an OAuth client's PKCE challenge and redirect is that client's authorization code: it lives 5 minutes (DEC-2588). */
+export declare const BOUND_CONNECT_TOKEN_TTL_MS: number;
+//# sourceMappingURL=cliFirstRun.d.ts.map

package/dist/lib/cliFirstRun.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cliFirstRun.d.ts","sourceRoot":"","sources":["../../src/lib/cliFirstRun.ts"],"names":[],"mappings":"AAIA;;;;;;;GAOG;AAEH,oGAAoG;AACpG,eAAO,MAAM,mBAAmB,0CAA0C,CAAC;AAE3E,kGAAkG;AAClG,eAAO,MAAM,gBAAgB,YAAY,CAAC;AAE1C;;;GAGG;AACH,eAAO,MAAM,YAAY,wCAAyC,CAAC;AACnE,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,sGAAsG;AACtG,eAAO,MAAM,cAAc,GAAI,SAAS,UAAU,GAAG,IAAI,KAAG,MACS,CAAC;AAEtE;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,GAAI,OAAO,MAAM,EAAE,UAAU,MAAM,GAAG,IAAI,EAAE,UAAgB;IAAE,GAAG,CAAC,EAAE,OAAO,CAAA;CAAO,KAAG,MAC9B,CAAC;AAEtF,8GAA8G;AAC9G,eAAO,MAAM,kBAAkB,0BAA0B,CAAC;AAE1D,iEAAiE;AACjE,eAAO,MAAM,yBAAyB,KAAK,CAAC;AAC5C,eAAO,MAAM,oBAAoB,QAAwC,CAAC;AAE1E,iJAAiJ;AACjJ,eAAO,MAAM,0BAA0B,QAAgB,CAAC"}

package/dist/lib/cliFirstRun.js

@@ -0,0 +1,36 @@
+// GENERATED by scripts/generate-mcp-embedded-copies.mjs from kernel/governance/cliFirstRun.ts.
+// DO NOT EDIT. Run `npm run mcp:embedded-copies` to regenerate.
+// Local runtime copy for the isolated connector build.
+/**
+ * The terminal first run, declared once (TASK-562, WP-861, TEN-1923, RULE-664, RULE-657): install pb,
+ * connect in the project folder, then init. A new person on a machine without pb reads these lines.
+ *
+ * Readers: the connect-token mint (convex/auth/connectTokens.ts) and the pb CLI through its
+ * generated copy packages/cli/src/lib/cliFirstRun.ts (scripts/generate-mcp-embedded-copies.mjs,
+ * DEC-1481). Zero imports, so the generator copies it verbatim.
+ */
+/** The one install line. `engines.node` in packages/cli/package.json is the Node floor it needs. */
+export const CLI_INSTALL_COMMAND = 'npm install -g @productbrain/cli@beta';
+/** The step after connect: it writes the session hooks that open a briefed session (DEC-1926). */
+export const CLI_INIT_COMMAND = 'pb init';
+/**
+ * The agent tools pb init writes a start hook for (TASK-1543, TEN-6149). `pb init --client <x>` writes x's
+ * hook even in a folder without its marker files; with no --client, init detects from the folder.
+ */
+export const INIT_CLIENTS = ['claude', 'codex', 'cursor'];
+/** The init line the connect screen pastes for the tool picked there; with no pick, plain pb init. */
+export const cliInitCommand = (client) => client ? `${CLI_INIT_COMMAND} --client ${client}` : CLI_INIT_COMMAND;
+/**
+ * The one pb connect line. The connect screen's block is run by an agent in a shell with no terminal to
+ * confirm in, so it carries --yes, else pb connect refuses once (TEN-5925); Settings, API keys tells a
+ * person to run it in their own terminal, where the confirm runs, so it passes `{ yes: false }`.
+ */
+export const cliConnectCommand = (token, gateway, { yes = true } = {}) => `pb connect ${yes ? '--yes ' : ''}${gateway ? `--gateway ${gateway} ` : ''}${token}`;
+/** What a person says to an agent with no start hook: it names the pb CLI, never the MCP tools (TEN-6149). */
+export const CLI_START_SENTENCE = 'Run pb session start.';
+/** A connect token lives this long and works once (FEAT-958). */
+export const CONNECT_TOKEN_TTL_MINUTES = 15;
+export const CONNECT_TOKEN_TTL_MS = CONNECT_TOKEN_TTL_MINUTES * 60 * 1000;
+/** A connect token bound to an OAuth client's PKCE challenge and redirect is that client's authorization code: it lives 5 minutes (DEC-2588). */
+export const BOUND_CONNECT_TOKEN_TTL_MS = 5 * 60 * 1000;
+//# sourceMappingURL=cliFirstRun.js.map

package/dist/lib/cliFirstRun.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cliFirstRun.js","sourceRoot":"","sources":["../../src/lib/cliFirstRun.ts"],"names":[],"mappings":"AAAA,+FAA+F;AAC/F,gEAAgE;AAChE,uDAAuD;AAEvD;;;;;;;GAOG;AAEH,oGAAoG;AACpG,MAAM,CAAC,MAAM,mBAAmB,GAAG,uCAAuC,CAAC;AAE3E,kGAAkG;AAClG,MAAM,CAAC,MAAM,gBAAgB,GAAG,SAAS,CAAC;AAE1C;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAU,CAAC;AAGnE,sGAAsG;AACtG,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,MAA0B,EAAU,EAAE,CACpE,MAAM,CAAC,CAAC,CAAC,GAAG,gBAAgB,aAAa,MAAM,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC;AAEtE;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,KAAa,EAAE,OAAuB,EAAE,EAAE,GAAG,GAAG,IAAI,KAAwB,EAAE,EAAU,EAAE,CAC3H,cAAc,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,aAAa,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC;AAEtF,8GAA8G;AAC9G,MAAM,CAAC,MAAM,kBAAkB,GAAG,uBAAuB,CAAC;AAE1D,iEAAiE;AACjE,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAC5C,MAAM,CAAC,MAAM,oBAAoB,GAAG,yBAAyB,GAAG,EAAE,GAAG,IAAI,CAAC;AAE1E,iJAAiJ;AACjJ,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC"}

package/dist/lib/client.d.ts

@@ -1,29 +1,27 @@
 /**
  * MCP HTTP client — POST to Convex gateway with Bearer auth.
  *
- * TEN-729: Detects sandbox-blocked fetch (Claude Code, Cursor, etc.) and
- * provides an actionable error instead of the opaque "fetch failed".
+ * TEN-729: Detects sandbox-blocked fetch (Claude Code, Cursor, etc.) and provides an
+ * actionable error instead of the opaque "fetch failed".
  *
- * Sandbox proxy support: Node.js fetch (undici) ignores proxy env vars by
- * default. We detect HTTPS_PROXY and configure a ProxyAgent so pb works in
- * sandboxed environments (Claude Code, Cursor) without requiring
- * NODE_OPTIONS="--use-env-proxy".
+ * Sandbox proxy support: Node.js fetch (undici) ignores proxy env vars by default. We detect
+ * HTTPS_PROXY and configure a ProxyAgent so pb works in sandboxed environments (Claude Code,
+ * Cursor) without requiring NODE_OPTIONS="--use-env-proxy".
  */
+import type { ValidationErrorDetail } from './kernelEnvelope.js';
 import { CLIError } from './errors.js';
-/** Structured field-level detail from a VALIDATION_FAILED response. */
-export interface ValidationErrorDetail {
-    fieldKey: string;
-    fieldLabel: string;
-    invalidValue: unknown;
-    validOptions?: string[];
-    errorType: 'type_mismatch' | 'invalid_option' | 'required';
-    message: string;
-}
+import { type KernelCallOptions } from './rate-limit.js';
+export declare function isPerEntryAuthorizationRefusal(code?: string): boolean;
 /** Error thrown by kernelCall/kernelCallWithSession when the server returns a non-OK response. */
 export declare class McpError extends CLIError {
     details?: ValidationErrorDetail[];
-    constructor(message: string, code?: string, details?: ValidationErrorDetail[]);
+    /** Present only when code === 'rate-limited' — seconds until the caller may retry. */
+    retryAfterSeconds?: number;
+    missingRequiredFields?: string[];
+    constructor(message: string, code?: string, details?: ValidationErrorDetail[], retryAfterSeconds?: number, missingRequiredFields?: string[]);
 }
+export { resetRateLimitBackoff, resetTouchThrottle, type KernelCallOptions } from './rate-limit.js';
+export type { KernelEnvelope, ValidationErrorDetail } from './kernelEnvelope.js';
 /** Result of validateKey — used by `pb login` to verify a key before saving. */
 export type ValidateKeyResult = {
     valid: true;
@@ -39,9 +37,18 @@ export type ValidateKeyResult = {
  * Returns { valid: true, workspaceId } on success.
  * Returns { valid: false, error } on auth failure (401) or other server error.
  * Throws on network/timeout errors so the caller can distinguish "bad key" from "can't reach server".
+ *
+ * WP-575: `timeoutMs` now DEFAULTS to `resolveWorkspace`'s declared budget instead of a
+ * local `5000` literal — that literal was the last connector-owned timeout on the gateway
+ * path, and the point of this work package is that no connector gets to pick its own. It
+ * stays an explicit parameter so a caller (or a test) can still override deliberately.
+ * Widening 5s -> the declared 10s costs nothing in the case people actually hit: an
+ * unreachable host fails with ECONNREFUSED/ENOTFOUND immediately, not by timeout. The
+ * timeout only governs a server that ACCEPTS the connection then stalls, where waiting the
+ * route's real declared budget before calling the key invalid is the correct behavior.
  */
 export declare function validateKey(apiKey: string, siteUrl: string, timeoutMs?: number): Promise<ValidateKeyResult>;
-/** Get a human-friendly spinner label for an MCP function name. */
+/** Get a human-friendly spinner label for an MCP function name; a route with a CLI command word names it (DEC-2441). */
 export declare function spinnerLabel(fn: string): string;
 /**
  * POST to the admin gateway (/api/admin) — separate from /api/aki (STD-101, BR-109).
@@ -51,16 +58,12 @@ export declare function spinnerLabel(fn: string): string;
  * Throws CLIError on auth failure or non-OK response.
  */
 export declare function adminCall(command: string, args?: Record<string, unknown>): Promise<unknown>;
-export declare function kernelCall<T = unknown>(fn: string, args?: Record<string, unknown>): Promise<T>;
 /**
- * kernelCall variant that injects X-Agent-Session-Id header for write operations.
- * All write commands (update, relate, unrelate, capture) should use this.
- *
- * After a successful write, fires a non-blocking `agent.touchSession` call to
- * renew the session TTL — mirroring MCP server behavior (DEC-299, BET-181 Slice 1).
- * The touch is fire-and-forget: it does not block the write response, and errors
- * are silently swallowed. No touch is attempted if no session is active or if
- * the write itself fails.
+ * Headers every gateway request carries: connector identity and the command it serves. TASK-894 (DEC-2113):
+ * `sessionId` rides as `x-pb-session` and the gateway touches that session, so no second request does.
+ * TASK-1352: `actingSessionId` rides as `x-pb-acting-session` on every request, so the call log row names its session and role.
  */
-export declare function kernelCallWithSession<T = unknown>(fn: string, args?: Record<string, unknown>): Promise<T>;
+export declare function gatewayHeaders(apiKey: string, sessionId?: string, actingSessionId?: string): Record<string, string>;
+export declare function kernelCall<T = unknown>(fn: string, args?: Record<string, unknown>, options?: KernelCallOptions): Promise<T>;
+export declare function kernelCallWithSession<T = unknown>(fn: string, args?: Record<string, unknown>, options?: KernelCallOptions): Promise<T>;
 //# sourceMappingURL=client.d.ts.map

package/dist/lib/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/lib/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,EAAE,QAAQ,EAAa,MAAM,aAAa,CAAC;AAKlD,uEAAuE;AACvE,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,OAAO,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,SAAS,EAAE,eAAe,GAAG,gBAAgB,GAAG,UAAU,CAAC;IAC3D,OAAO,EAAE,MAAM,CAAC;CACjB;AAeD,kGAAkG;AAClG,qBAAa,QAAS,SAAQ,QAAQ;IACpC,OAAO,CAAC,EAAE,qBAAqB,EAAE,CAAC;gBAEtB,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,qBAAqB,EAAE;CAQ9E;AA2DD,gFAAgF;AAChF,MAAM,MAAM,iBAAiB,GACzB;IAAE,KAAK,EAAE,IAAI,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,KAAK,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpC;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,SAAS,SAAO,GACf,OAAO,CAAC,iBAAiB,CAAC,CAqC5B;AA0BD,mEAAmE;AACnE,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED;;;;;;GAMG;AACH,wBAAsB,SAAS,CAC7B,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,OAAO,CAAC,OAAO,CAAC,CAsBlB;AASD,wBAAsB,UAAU,CAAC,CAAC,GAAG,OAAO,EAC1C,EAAE,EAAE,MAAM,EACV,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GACjC,OAAO,CAAC,CAAC,CAAC,CA2BZ;AA0BD;;;;;;;;;GASG;AACH,wBAAsB,qBAAqB,CAAC,CAAC,GAAG,OAAO,EACrD,EAAE,EAAE,MAAM,EACV,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GACjC,OAAO,CAAC,CAAC,CAAC,CAwCZ"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/lib/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAcH,OAAO,KAAK,EAAkB,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAMjF,OAAO,EAAE,QAAQ,EAAiC,MAAM,aAAa,CAAC;AAGtE,OAAO,EAAkC,KAAK,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAoBzF,wBAAgB,8BAA8B,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAErE;AA8CD,kGAAkG;AAClG,qBAAa,QAAS,SAAQ,QAAQ;IACpC,OAAO,CAAC,EAAE,qBAAqB,EAAE,CAAC;IAClC,sFAAsF;IACtF,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAAC,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;gBAEjD,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,qBAAqB,EAAE,EAAE,iBAAiB,CAAC,EAAE,MAAM,EAAE,qBAAqB,CAAC,EAAE,MAAM,EAAE;CAe5I;AAGD,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,KAAK,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAKpG,YAAY,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAmDjF,gFAAgF;AAChF,MAAM,MAAM,iBAAiB,GACzB;IAAE,KAAK,EAAE,IAAI,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,KAAK,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpC;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,SAAS,SAA8C,GACtD,OAAO,CAAC,iBAAiB,CAAC,CAqC5B;AA+BD,wHAAwH;AACxH,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED;;;;;;GAMG;AACH,wBAAsB,SAAS,CAC7B,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,OAAO,CAAC,OAAO,CAAC,CAqClB;AAkBD;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAUnH;AAsED,wBAAsB,UAAU,CAAC,CAAC,GAAG,OAAO,EAC1C,EAAE,EAAE,MAAM,EACV,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EAClC,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,CAAC,CAAC,CAQZ;AAoBD,wBAAsB,qBAAqB,CAAC,CAAC,GAAG,OAAO,EACrD,EAAE,EAAE,MAAM,EACV,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EAClC,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,CAAC,CAAC,CAiBZ"}