@qodo/sdk 0.13.3 → 2.0.0-next.0

package/dist/skills/preprocess.js

@@ -0,0 +1,535 @@
+/**
+ * `!command` body preprocessing.
+ *
+ * Skills may embed shell-command blocks that the SDK runs at body-load
+ * time and splices the output into the rendered body before the model
+ * sees it. The feature is **disabled by default** because the OSS skill
+ * survey (29 real skills, 0 used `!command`) suggests it's a rarely-
+ * needed compatibility shim, not a hot-path tool.
+ *
+ * Two block forms are recognised, mirroring Claude Code's surface:
+ *
+ *   - Inline: a single-backticked command line whose body starts with
+ *     `!`, e.g. `` `!git log --oneline -5` ``.
+ *   - Fenced: a triple-backtick block tagged with `!`, e.g.
+ *     ```` ```!\nbash -c 'pwd'\n``` ````.
+ *
+ * Three modes, gated through {@link SkillsPreprocessingConfig.mode}:
+ *
+ *   - `'disabled'` (default) — every block is left literal. No execution,
+ *     no telemetry. Cheapest path; ships zero attack surface.
+ *   - `'allowlisted'` — every block's first shell-tokenised argv must
+ *     match one of {@link SkillsPreprocessingConfig.allow}. Non-matches
+ *     are replaced with a disable marker + `preprocess_blocked` event.
+ *     Matches execute through the consumer's bash (or powershell, gated
+ *     by env-var).
+ *   - `'full'` — every block executes. Reserved for trusted environments;
+ *     third-party skills always bypass this mode regardless of opt-in.
+ *
+ * Tier gate runs *before* the mode gate: third-party skills never
+ * execute, ever, regardless of `mode`. The trust derivation is the same
+ * value `SkillsManager.isTrusted` returns.
+ *
+ * Substitution order (per `skills-trust.md` §4):
+ *
+ *   1. `${QODO_SKILL_DIR}` substituted in the entire body text before
+ *      block detection. Authors compose commands like
+ *      `` `!cat ${QODO_SKILL_DIR}/references/style.md` `` so the
+ *      command's `cwd` (and any path arguments) resolve correctly even
+ *      when the skill is loaded from a non-default source.
+ *   2. `!command` blocks executed; output spliced in place.
+ *   3. `$ARGUMENTS` substitution (separate path) runs after
+ *      preprocessing — output is treated as inert text, so a command
+ *      whose stdout contains `$ARGUMENTS` will see it substituted on
+ *      the final pass.
+ *
+ * Threat model:
+ *
+ *   - Skill body content is untrusted even from a `trusted` tier — a
+ *     skill author may have copied a recipe from the wider OSS
+ *     ecosystem without realising it embeds a `!command`. The
+ *     allowlist is the only mechanism that can be safely relied on for
+ *     blast-radius control; `full` mode means "I trust every skill in
+ *     this catalog".
+ *   - `!command` blocks run through the consumer's shell, which gives
+ *     them pipes / redirects / shell builtins. The allowlist gates the
+ *     first command name only; downstream pipe tokens are not screened.
+ *     Operators wiring `mode: 'full'` accept that trade-off. The right
+ *     answer is to either disallow shell metacharacters in the command
+ *     line entirely (rejected) or trust the operator's allowlist
+ *     (accepted, with this caveat documented).
+ *   - Hard kill via `setTimeout` + `SIGKILL`. Output capped during
+ *     buffering — a multi-gigabyte stream is truncated as it arrives,
+ *     not after the process completes.
+ *   - `cwd` defaults to the skill's directory; we don't enforce
+ *     containment because the shell can `cd` freely. Operators wiring
+ *     `full` mode accept that.
+ *
+ * The module is async (subprocess spawn) but pure-ish: it takes a body,
+ * returns a transformed body + telemetry events. Caller (typically the
+ * MCP server's `get_skill` handler) forwards the events to the
+ * configured sink.
+ */
+import { spawn } from 'node:child_process';
+import * as os from 'node:os';
+import * as path from 'node:path';
+import { PREPROCESS_DEFAULT_MAX_OUTPUT_BYTES, PREPROCESS_DEFAULT_TIMEOUT_MS, } from './types.js';
+/**
+ * Environment-variable gate matching Claude Code's
+ * `CLAUDE_CODE_USE_POWERSHELL_TOOL`. When unset, skills declaring
+ * `shell: powershell` get their `!command` blocks blocked with a
+ * `powershell_disabled` event regardless of mode.
+ */
+export const POWERSHELL_GATE_ENV_VAR = 'QODO_SKILLS_ENABLE_POWERSHELL';
+/** Placeholder substituted in place of a non-executing `!command` block. */
+const DISABLE_MARKER = '[shell command execution disabled by policy]';
+/**
+ * Preprocess a skill body. Returns the transformed body + telemetry.
+ *
+ * Calling with `mode: 'disabled'` is a no-op fast-path: the body is
+ * returned unchanged and no events are emitted. Operators who never
+ * configure preprocessing pay zero overhead.
+ */
+export async function preprocessBody(rawBody, ctx, config) {
+    const mode = config?.mode ?? 'disabled';
+    if (mode === 'disabled') {
+        return { body: rawBody, events: [] };
+    }
+    const substituted = substituteQodoVars(rawBody, ctx.skill);
+    const blocks = findCommandBlocks(substituted);
+    if (blocks.length === 0) {
+        return { body: substituted, events: [] };
+    }
+    const events = [];
+    const replacements = [];
+    for (const block of blocks) {
+        if (!ctx.isTrusted) {
+            events.push({
+                kind: 'sdk.skill.preprocess_blocked',
+                skill: ctx.skill.fqn,
+                command: scrubCommandForTelemetry(block.command, ctx.skill.path),
+                reason: 'tier_third_party',
+            });
+            replacements.push({ block, output: DISABLE_MARKER });
+            continue;
+        }
+        if (ctx.skill.frontmatter.shell === 'powershell' && !powershellAllowed(ctx.env)) {
+            events.push({
+                kind: 'sdk.skill.preprocess_blocked',
+                skill: ctx.skill.fqn,
+                command: scrubCommandForTelemetry(block.command, ctx.skill.path),
+                reason: 'powershell_disabled',
+            });
+            replacements.push({ block, output: DISABLE_MARKER });
+            continue;
+        }
+        if (mode === 'allowlisted') {
+            const allowed = config?.allow ?? [];
+            // block.command may contain newlines (the fenced
+            // form joins every interior line into one shell-piped string).
+            // The first-token check would allow `git status` to slip
+            // `\nrm -rf /` past the gate. In allowlisted mode the only safe
+            // policy is to evaluate every non-blank line independently: each
+            // line's first token must match the allowlist, OR the whole
+            // command is blocked.
+            const linesAllowed = block.command.split('\n').every((line) => {
+                const trimmed = line.trim();
+                if (trimmed.length === 0 || trimmed.startsWith('#'))
+                    return true;
+                const first = parseFirstToken(trimmed);
+                return first !== null && isAllowlisted(first, allowed);
+            });
+            if (!linesAllowed) {
+                events.push({
+                    kind: 'sdk.skill.preprocess_blocked',
+                    skill: ctx.skill.fqn,
+                    command: scrubCommandForTelemetry(block.command, ctx.skill.path),
+                    reason: 'not_allowlisted',
+                });
+                replacements.push({ block, output: DISABLE_MARKER });
+                continue;
+            }
+        }
+        const exec = await runCommand(ctx, config, block.command);
+        events.push({
+            kind: 'sdk.skill.preprocess_executed',
+            skill: ctx.skill.fqn,
+            command: scrubCommandForTelemetry(block.command, ctx.skill.path),
+            mode,
+            durationMs: exec.durationMs,
+            exitCode: exec.exitCode,
+            outputBytes: exec.outputBytes,
+            truncated: exec.truncated,
+            timedOut: exec.timedOut,
+        });
+        replacements.push({ block, output: exec.output });
+    }
+    return { body: applyReplacements(substituted, replacements), events };
+}
+/**
+ * Sanitise a command line before emitting it in telemetry. The
+ * substituted absolute `${QODO_SKILL_DIR}` value leaks the operator's
+ * filesystem layout when it lands in `sdk.skill.preprocess_*` events;
+ * `scrubEvent` on `SkillsManager` runs after the event is built, so we
+ * collapse the substituted path back to the literal `${QODO_SKILL_DIR}`
+ * token here.
+ */
+function scrubCommandForTelemetry(command, skillPath) {
+    if (skillPath.length === 0)
+        return command;
+    return command.split(skillPath).join('${QODO_SKILL_DIR}');
+}
+/**
+ * Find all `!command` blocks in a body. The scanner walks the body once
+ * and emits matches in source order so the replacement step can stitch
+ * the output back together with a single pass.
+ *
+ * The scanner ignores `!`-prefixed commands inside non-`!` fenced
+ * blocks — those are narrative code samples, not commands. Conversely,
+ * a `!`-tagged fenced block hides any inner backticks from the inline
+ * regex.
+ */
+export function findCommandBlocks(body) {
+    const out = [];
+    let i = 0;
+    while (i < body.length) {
+        if (body.startsWith('```!', i) &&
+            (i === 0 || body[i - 1] === '\n')) {
+            const blockStart = i;
+            let cursor = i + 4;
+            while (cursor < body.length && (body[cursor] === ' ' || body[cursor] === '\t'))
+                cursor += 1;
+            if (body[cursor] === '\n')
+                cursor += 1;
+            const contentStart = cursor;
+            const closeIdx = findFenceClose(body, cursor);
+            if (closeIdx === -1) {
+                i = blockStart + 4;
+                continue;
+            }
+            const command = body.slice(contentStart, closeIdx).trim();
+            let end = closeIdx + 3;
+            if (body[end] === '\n')
+                end += 1;
+            out.push({
+                raw: body.slice(blockStart, end),
+                command,
+                start: blockStart,
+                end,
+            });
+            i = end;
+            continue;
+        }
+        if (body.startsWith('```', i) &&
+            (i === 0 || body[i - 1] === '\n')) {
+            const close = findFenceClose(body, i + 3);
+            if (close === -1) {
+                i += 3;
+                continue;
+            }
+            i = close + 3;
+            continue;
+        }
+        if (body[i] === '`' && body[i + 1] === '!' && (i === 0 || body[i - 1] !== '\\')) {
+            const close = body.indexOf('`', i + 2);
+            if (close === -1 || body.slice(i + 2, close).includes('\n')) {
+                i += 1;
+                continue;
+            }
+            const command = body.slice(i + 2, close).trim();
+            if (command.length === 0) {
+                i = close + 1;
+                continue;
+            }
+            out.push({
+                raw: body.slice(i, close + 1),
+                command,
+                start: i,
+                end: close + 1,
+            });
+            i = close + 1;
+            continue;
+        }
+        i += 1;
+    }
+    return out;
+}
+function findFenceClose(body, from) {
+    let pos = from;
+    while (pos < body.length) {
+        const newline = body.indexOf('\n', pos);
+        if (newline === -1)
+            return -1;
+        pos = newline + 1;
+        if (body.startsWith('```', pos)) {
+            let tail = pos + 3;
+            while (tail < body.length && (body[tail] === ' ' || body[tail] === '\t'))
+                tail += 1;
+            if (tail === body.length || body[tail] === '\n')
+                return pos;
+        }
+    }
+    return -1;
+}
+// ---------------------------------------------------------------------------
+// Substitution
+// ---------------------------------------------------------------------------
+/**
+ * Replace `${QODO_SKILL_DIR}` (and any future `${QODO_*}` vars) in the
+ * body. The substitution is global — every occurrence is replaced.
+ *
+ * Only `QODO_SKILL_DIR` is supported in this wave; unknown `${QODO_*}`
+ * references pass through literal so a typo doesn't disappear silently.
+ */
+export function substituteQodoVars(body, skill) {
+    return body.replace(/\$\{QODO_([A-Z_]+)\}/g, (match, name) => {
+        if (name === 'SKILL_DIR')
+            return skill.path;
+        return match;
+    });
+}
+// ---------------------------------------------------------------------------
+// Allowlist
+// ---------------------------------------------------------------------------
+/**
+ * Extract the first shell-tokenised argv from a command line. Matches
+ * `cmd args` and `cmd "with spaces"`; returns the bare command name
+ * with no quotes. `null` if the line is empty after tokenisation.
+ *
+ * Deliberately incomplete — we only need to know the first command
+ * name for allowlist gating. Pipes, env assignment, here-docs, and
+ * other shell features fall through to the shell itself (`bash -c`).
+ *
+ * `FOO=bar cmd` is peeled — env-assign prefixes don't change the
+ * command identity for allowlist purposes, and an attacker shouldn't
+ * be able to dodge an allowlist that whitelists `cmd` by prepending
+ * `PATH=/evil cmd`.
+ */
+export function parseFirstToken(line) {
+    let i = 0;
+    while (i < line.length && (line[i] === ' ' || line[i] === '\t'))
+        i += 1;
+    while (true) {
+        const assignMatch = /^([A-Za-z_][A-Za-z0-9_]*)=([^\s'"`]*|'[^']*'|"[^"]*")\s+/.exec(line.slice(i));
+        if (assignMatch === null)
+            break;
+        i += assignMatch[0].length;
+    }
+    if (i >= line.length)
+        return null;
+    const ch = line[i];
+    if (ch === '"' || ch === "'") {
+        const close = line.indexOf(ch, i + 1);
+        if (close === -1)
+            return null;
+        return line.slice(i + 1, close);
+    }
+    let j = i;
+    while (j < line.length && !/[\s|;&<>(){}]/.test(line[j]))
+        j += 1;
+    if (j === i)
+        return null;
+    return line.slice(i, j);
+}
+/**
+ * Check whether `cmd` matches one of the allowlist entries. Match is
+ * left-anchored:
+ *
+ *   - Bare names (`git`) match the basename of `cmd` (so `git` matches
+ *     both `git` and `/usr/bin/git`).
+ *   - Path-bearing entries (`/usr/bin/jq`, `./bin/foo`) must match
+ *     verbatim.
+ */
+export function isAllowlisted(cmd, allow) {
+    if (allow.length === 0)
+        return false;
+    const cmdBase = path.basename(cmd);
+    for (const entry of allow) {
+        if (entry.length === 0)
+            continue;
+        if (entry === cmd)
+            return true;
+        if (!entry.includes('/') && !entry.includes('\\') && entry === cmdBase)
+            return true;
+    }
+    return false;
+}
+function powershellAllowed(env) {
+    const flag = env[POWERSHELL_GATE_ENV_VAR];
+    if (flag === undefined)
+        return false;
+    return flag === '1' || flag.toLowerCase() === 'true' || flag.toLowerCase() === 'yes';
+}
+/**
+ * Run a single `!command` line. The command is passed verbatim to the
+ * consumer's shell (`/bin/bash -c '<cmd>'` on Unix, PowerShell when the
+ * env-var gate is on). Output (stdout + stderr) is buffered up to
+ * `maxOutputBytes` and the process is hard-killed after `timeoutMs`.
+ *
+ * Output framing:
+ *
+ *   - Successful exit: stdout, trimmed of trailing newline.
+ *   - Non-zero exit: `[error: <stderr or "exit N">]`. The skill loads
+ *     anyway — preprocessing failures are not fatal to the skill body.
+ *   - Timeout: `[error: timeout after Xms]`.
+ *   - Truncation: appended `[truncated at <bytes>]` marker.
+ */
+async function runCommand(ctx, config, command) {
+    const timeoutMs = config?.timeoutMs ?? PREPROCESS_DEFAULT_TIMEOUT_MS;
+    const maxOutputBytes = config?.maxOutputBytes ?? PREPROCESS_DEFAULT_MAX_OUTPUT_BYTES;
+    const cwd = config?.cwd ?? ctx.skill.path;
+    const useShell = ctx.skill.frontmatter.shell === 'powershell' ? 'powershell' : 'bash';
+    const now = ctx.now ?? Date.now;
+    const start = now();
+    return new Promise((resolve) => {
+        let bytes = 0;
+        let truncated = false;
+        const stdoutChunks = [];
+        const stderrChunks = [];
+        let timedOut = false;
+        const args = useShell === 'powershell'
+            ? ['-NoProfile', '-NonInteractive', '-Command', command]
+            : ['-c', command];
+        const cmdPath = useShell === 'powershell' ? resolvePowershellPath(ctx.env) : resolveBashPath(ctx.env);
+        const child = spawn(cmdPath, args, {
+            cwd,
+            env: {
+                ...ctx.env,
+                QODO_SKILL_DIR: ctx.skill.path,
+            },
+            stdio: ['ignore', 'pipe', 'pipe'],
+        });
+        const onData = (chunks, chunk) => {
+            if (truncated)
+                return;
+            const remaining = maxOutputBytes - bytes;
+            if (remaining <= 0) {
+                truncated = true;
+                child.kill('SIGKILL');
+                return;
+            }
+            if (chunk.length > remaining) {
+                chunks.push(chunk.subarray(0, remaining));
+                bytes += remaining;
+                truncated = true;
+                child.kill('SIGKILL');
+                return;
+            }
+            chunks.push(chunk);
+            bytes += chunk.length;
+        };
+        child.stdout.on('data', (chunk) => onData(stdoutChunks, chunk));
+        child.stderr.on('data', (chunk) => onData(stderrChunks, chunk));
+        const killTimer = setTimeout(() => {
+            timedOut = true;
+            child.kill('SIGKILL');
+        }, timeoutMs);
+        child.on('error', (err) => {
+            clearTimeout(killTimer);
+            resolve({
+                output: `[error: ${err.message}]`,
+                outputBytes: 0,
+                exitCode: null,
+                truncated: false,
+                timedOut: false,
+                durationMs: now() - start,
+            });
+        });
+        child.on('close', (code, signal) => {
+            clearTimeout(killTimer);
+            const stdout = Buffer.concat(stdoutChunks).toString('utf-8');
+            const stderr = Buffer.concat(stderrChunks).toString('utf-8');
+            const durationMs = now() - start;
+            if (timedOut) {
+                resolve({
+                    output: `[error: timeout after ${timeoutMs}ms]`,
+                    outputBytes: 0,
+                    exitCode: null,
+                    truncated: false,
+                    timedOut: true,
+                    durationMs,
+                });
+                return;
+            }
+            // When output exceeds `maxOutputBytes` we
+            // SIGKILL the child, which surfaces here as `signal !== null`
+            // even though there's useful buffered output. Treat the
+            // truncation kill as success-with-truncation rather than as a
+            // killed-by-signal error so the operator still gets the partial
+            // stdout. Errors from the regular non-zero-exit path are
+            // unchanged.
+            let output;
+            if (truncated) {
+                output = stripTrailingNewline(stdout);
+                output += `\n[truncated at ${bytes} bytes]`;
+            }
+            else if (code !== null && code !== 0) {
+                const reason = stderr.trim().length > 0 ? stderr.trim() : `exit ${code}`;
+                output = `[error: ${reason}]`;
+            }
+            else if (signal !== null) {
+                output = `[error: killed by ${signal}]`;
+            }
+            else {
+                output = stripTrailingNewline(stdout);
+            }
+            resolve({
+                output,
+                outputBytes: bytes,
+                exitCode: code,
+                truncated,
+                timedOut: false,
+                durationMs,
+            });
+        });
+    });
+}
+function resolvePowershellPath(env) {
+    const override = env['QODO_SKILLS_POWERSHELL_PATH'];
+    if (override !== undefined && override.length > 0)
+        return override;
+    if (os.platform() === 'win32')
+        return 'powershell.exe';
+    return 'pwsh';
+}
+/**
+ * Resolve the bash executable to invoke. A hardcoded `/bin/bash` would
+ * fail on Windows-host operators and on Nix / NixOS systems where bash
+ * lives under `/run/current-system/sw/bin/` instead of `/bin/`. Resolution
+ * order:
+ *
+ *   1. `QODO_SKILLS_BASH_PATH` env override — explicit operator
+ *      control, takes precedence over everything.
+ *   2. `SHELL` env when it's a bash variant — covers the common Unix
+ *      case where the operator's preferred shell is already on PATH.
+ *   3. `bash` (rely on PATH lookup) — works on macOS, most Linux
+ *      distros, and Windows when bash is on PATH (e.g. Git Bash).
+ */
+function resolveBashPath(env) {
+    const override = env['QODO_SKILLS_BASH_PATH'];
+    if (override !== undefined && override.length > 0)
+        return override;
+    const shell = env['SHELL'];
+    if (shell !== undefined && shell.length > 0 && /\bbash$/.test(shell))
+        return shell;
+    return 'bash';
+}
+function stripTrailingNewline(s) {
+    if (s.endsWith('\n'))
+        return s.slice(0, -1);
+    return s;
+}
+function applyReplacements(body, replacements) {
+    if (replacements.length === 0)
+        return body;
+    let out = '';
+    let cursor = 0;
+    for (const r of replacements) {
+        out += body.slice(cursor, r.block.start);
+        out += r.output;
+        cursor = r.block.end;
+    }
+    out += body.slice(cursor);
+    return out;
+}
+//# sourceMappingURL=preprocess.js.map

package/dist/skills/preprocess.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preprocess.js","sourceRoot":"","sources":["../../src/skills/preprocess.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuEG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAQlC,OAAO,EACL,mCAAmC,EACnC,6BAA6B,GAC9B,MAAM,YAAY,CAAC;AAEpB;;;;;GAKG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,+BAA+B,CAAC;AAEvE,4EAA4E;AAC5E,MAAM,cAAc,GAAG,8CAA8C,CAAC;AA8BtE;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAe,EACf,GAAsB,EACtB,MAA6C;IAE7C,MAAM,IAAI,GAA4B,MAAM,EAAE,IAAI,IAAI,UAAU,CAAC;IACjE,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACvC,CAAC;IACD,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAC9C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC3C,CAAC;IACD,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,MAAM,YAAY,GAAuB,EAAE,CAAC;IAC5C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,8BAA8B;gBACpC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG;gBACpB,OAAO,EAAE,wBAAwB,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBAChE,MAAM,EAAE,kBAAkB;aAC3B,CAAC,CAAC;YACH,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;YACrD,SAAS;QACX,CAAC;QACD,IAAI,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,KAAK,YAAY,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAChF,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,8BAA8B;gBACpC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG;gBACpB,OAAO,EAAE,wBAAwB,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBAChE,MAAM,EAAE,qBAAqB;aAC9B,CAAC,CAAC;YACH,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;YACrD,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC;YACpC,iDAAiD;YACjD,+DAA+D;YAC/D,yDAAyD;YACzD,gEAAgE;YAChE,iEAAiE;YACjE,4DAA4D;YAC5D,sBAAsB;YACtB,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE;gBAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC5B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,OAAO,IAAI,CAAC;gBACjE,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBACvC,OAAO,KAAK,KAAK,IAAI,IAAI,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YACzD,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,8BAA8B;oBACpC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG;oBACpB,OAAO,EAAE,wBAAwB,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;oBAChE,MAAM,EAAE,iBAAiB;iBAC1B,CAAC,CAAC;gBACH,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;gBACrD,SAAS;YACX,CAAC;QACH,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,+BAA+B;YACrC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG;YACpB,OAAO,EAAE,wBAAwB,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAChE,IAAI;YACJ,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC,CAAC;QACH,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,iBAAiB,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;AACxE,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,wBAAwB,CAAC,OAAe,EAAE,SAAiB;IAClE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IAC3C,OAAO,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;AAC5D,CAAC;AAqBD;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,IACE,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;YAC1B,CAAC,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,EACjC,CAAC;YACD,MAAM,UAAU,GAAG,CAAC,CAAC;YACrB,IAAI,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC;YACnB,OAAO,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC;gBAAE,MAAM,IAAI,CAAC,CAAC;YAC5F,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI;gBAAE,MAAM,IAAI,CAAC,CAAC;YACvC,MAAM,YAAY,GAAG,MAAM,CAAC;YAC5B,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC9C,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;gBACpB,CAAC,GAAG,UAAU,GAAG,CAAC,CAAC;gBACnB,SAAS;YACX,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;YAC1D,IAAI,GAAG,GAAG,QAAQ,GAAG,CAAC,CAAC;YACvB,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI;gBAAE,GAAG,IAAI,CAAC,CAAC;YACjC,GAAG,CAAC,IAAI,CAAC;gBACP,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC;gBAChC,OAAO;gBACP,KAAK,EAAE,UAAU;gBACjB,GAAG;aACJ,CAAC,CAAC;YACH,CAAC,GAAG,GAAG,CAAC;YACR,SAAS;QACX,CAAC;QACD,IACE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;YACzB,CAAC,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,EACjC,CAAC;YACD,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1C,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBACjB,CAAC,IAAI,CAAC,CAAC;gBACP,SAAS;YACX,CAAC;YACD,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;YACd,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;YAChF,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACvC,IAAI,KAAK,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5D,CAAC,IAAI,CAAC,CAAC;gBACP,SAAS;YACX,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;YAChD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;gBACd,SAAS;YACX,CAAC;YACD,GAAG,CAAC,IAAI,CAAC;gBACP,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC;gBAC7B,OAAO;gBACP,KAAK,EAAE,CAAC;gBACR,GAAG,EAAE,KAAK,GAAG,CAAC;aACf,CAAC,CAAC;YACH,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;YACd,SAAS;QACX,CAAC;QACD,CAAC,IAAI,CAAC,CAAC;IACT,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,IAAY;IAChD,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,OAAO,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACxC,IAAI,OAAO,KAAK,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC;QAC9B,GAAG,GAAG,OAAO,GAAG,CAAC,CAAC;QAClB,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;YAChC,IAAI,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC;YACnB,OAAO,IAAI,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC;gBAAE,IAAI,IAAI,CAAC,CAAC;YACpF,IAAI,IAAI,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI;gBAAE,OAAO,GAAG,CAAC;QAC9D,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAC,CAAC;AACZ,CAAC;AAED,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,KAAkB;IACjE,OAAO,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE;QACnE,IAAI,IAAI,KAAK,WAAW;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC;QAC5C,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;QAAE,CAAC,IAAI,CAAC,CAAC;IACxE,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,WAAW,GAAG,0DAA0D,CAAC,IAAI,CACjF,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CACd,CAAC;QACF,IAAI,WAAW,KAAK,IAAI;YAAE,MAAM;QAChC,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC7B,CAAC;IACD,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACnB,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACtC,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC;QAAE,CAAC,IAAI,CAAC,CAAC;IAClE,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,KAAwB;IACjE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACnC,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACjC,IAAI,KAAK,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC;IACtF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAiD;IAC1E,MAAM,IAAI,GAAG,GAAG,CAAC,uBAAuB,CAAC,CAAC;IAC1C,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACrC,OAAO,IAAI,KAAK,GAAG,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC;AACvF,CAAC;AAeD;;;;;;;;;;;;;GAaG;AACH,KAAK,UAAU,UAAU,CACvB,GAAsB,EACtB,MAA6C,EAC7C,OAAe;IAEf,MAAM,SAAS,GAAG,MAAM,EAAE,SAAS,IAAI,6BAA6B,CAAC;IACrE,MAAM,cAAc,GAAG,MAAM,EAAE,cAAc,IAAI,mCAAmC,CAAC;IACrF,MAAM,GAAG,GAAG,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;IAC1C,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,KAAK,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC;IACtF,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IAChC,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC;IAEpB,OAAO,IAAI,OAAO,CAAa,CAAC,OAAO,EAAE,EAAE;QACzC,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,IAAI,QAAQ,GAAG,KAAK,CAAC;QAErB,MAAM,IAAI,GACR,QAAQ,KAAK,YAAY;YACvB,CAAC,CAAC,CAAC,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,OAAO,CAAC;YACxD,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACtB,MAAM,OAAO,GACX,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAExF,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;YACjC,GAAG;YACH,GAAG,EAAE;gBACH,GAAG,GAAG,CAAC,GAAG;gBACV,cAAc,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI;aACV;YACtB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,CAAC,MAAgB,EAAE,KAAa,EAAQ,EAAE;YACvD,IAAI,SAAS;gBAAE,OAAO;YACtB,MAAM,SAAS,GAAG,cAAc,GAAG,KAAK,CAAC;YACzC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;gBACnB,SAAS,GAAG,IAAI,CAAC;gBACjB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,OAAO;YACT,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;gBAC7B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;gBAC1C,KAAK,IAAI,SAAS,CAAC;gBACnB,SAAS,GAAG,IAAI,CAAC;gBACjB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;QACxB,CAAC,CAAC;QACF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC;QACxE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC;QAExE,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;YAChC,QAAQ,GAAG,IAAI,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,YAAY,CAAC,SAAS,CAAC,CAAC;YACxB,OAAO,CAAC;gBACN,MAAM,EAAE,WAAW,GAAG,CAAC,OAAO,GAAG;gBACjC,WAAW,EAAE,CAAC;gBACd,QAAQ,EAAE,IAAI;gBACd,SAAS,EAAE,KAAK;gBAChB,QAAQ,EAAE,KAAK;gBACf,UAAU,EAAE,GAAG,EAAE,GAAG,KAAK;aAC1B,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YACjC,YAAY,CAAC,SAAS,CAAC,CAAC;YACxB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC7D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC7D,MAAM,UAAU,GAAG,GAAG,EAAE,GAAG,KAAK,CAAC;YACjC,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,CAAC;oBACN,MAAM,EAAE,yBAAyB,SAAS,KAAK;oBAC/C,WAAW,EAAE,CAAC;oBACd,QAAQ,EAAE,IAAI;oBACd,SAAS,EAAE,KAAK;oBAChB,QAAQ,EAAE,IAAI;oBACd,UAAU;iBACX,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,0CAA0C;YAC1C,8DAA8D;YAC9D,wDAAwD;YACxD,8DAA8D;YAC9D,gEAAgE;YAChE,yDAAyD;YACzD,aAAa;YACb,IAAI,MAAc,CAAC;YACnB,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;gBACtC,MAAM,IAAI,mBAAmB,KAAK,SAAS,CAAC;YAC9C,CAAC;iBAAM,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACvC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC;gBACzE,MAAM,GAAG,WAAW,MAAM,GAAG,CAAC;YAChC,CAAC;iBAAM,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBAC3B,MAAM,GAAG,qBAAqB,MAAM,GAAG,CAAC;YAC1C,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;YACxC,CAAC;YACD,OAAO,CAAC;gBACN,MAAM;gBACN,WAAW,EAAE,KAAK;gBAClB,QAAQ,EAAE,IAAI;gBACd,SAAS;gBACT,QAAQ,EAAE,KAAK;gBACf,UAAU;aACX,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAiD;IAC9E,MAAM,QAAQ,GAAG,GAAG,CAAC,6BAA6B,CAAC,CAAC;IACpD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IACnE,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO;QAAE,OAAO,gBAAgB,CAAC;IACvD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,eAAe,CAAC,GAAiD;IACxE,MAAM,QAAQ,GAAG,GAAG,CAAC,uBAAuB,CAAC,CAAC;IAC9C,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IACnE,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,oBAAoB,CAAC,CAAS;IACrC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5C,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,YAAyC;IAChF,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;QAC7B,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACzC,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC;QAChB,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;IACvB,CAAC;IACD,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1B,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/skills/render.d.ts

@@ -0,0 +1,83 @@
+/**
+ * Slim-index renderer.
+ *
+ * Renders the `<available_skills>` block injected into the SDK's wire
+ * `instructions` field. The renderer is pure: input = catalog +
+ * options, output = `{ text, included, truncated, telemetry }`.
+ *
+ * Per `skills.md` §5 and `skills-activation.md` §3:
+ *
+ *   - Per-entry combined `description + when_to_use` capped at 1,536 chars.
+ *   - Total block capped at `min(8000, ceil(0.01 * contextWindow))`,
+ *     configurable via `SkillsConfig.indexCharBudget`.
+ *   - When the catalog fits: include every latest-version skill that is
+ *     not `disable-model-invocation: true` and matches the optional
+ *     `paths:` filter context.
+ *   - When the catalog exceeds budget AND no embedder is configured:
+ *     truncate by `mtime` descending, then alphabetical; emit
+ *     `sdk.skill.index_truncated`.
+ *   - Caller-pinned skills are always included. If a pinned skill's
+ *     entry doesn't fit, the budget is exceeded — emit
+ *     `sdk.skill.index_overflow_pinned` and proceed.
+ *   - `disable-model-invocation: true` skills are **filtered out** of
+ *     the model-visible slim index unless caller-pinned. Pinning is the
+ *     explicit human-in-the-loop waiver (`skills-activation.md` §2.85).
+ *     Pinned user-only skills are still rendered with the `[loaded]`
+ *     marker.
+ *   - Caller-pinned + already-loaded entries marked `[loaded]`.
+ */
+import type { ParsedSkill, SkillEvent } from './types.js';
+/**
+ * Per-call rendering options. Each field has a sensible default — the
+ * minimum input is `{ skills }`.
+ */
+export interface RenderOptions {
+    /** Total block char budget. Defaults to `DEFAULT_INDEX_CHAR_BUDGET` (8000). */
+    readonly charBudget?: number;
+    /**
+     * Caller-pinned skills (FQNs or bare names). The renderer includes
+     * these unconditionally and decorates them with the `[loaded]` marker
+     * since pinning means the body is already in conversation.
+     */
+    readonly pinned?: readonly string[];
+    /**
+     * "Current file" context for `paths:` filtering. Consumers without a
+     * current-file concept omit this; the renderer treats `paths:` as a
+     * no-op for those skills.
+     */
+    readonly currentFilePath?: string;
+    /**
+     * Whether the renderer is rendering in `paths`-aware mode. Defaults to
+     * `true` iff `currentFilePath` is set; consumers can force-disable
+     * by passing `false` so a skill carrying `paths:` is always shown
+     * regardless of context (useful for Slack-bot-style consumers).
+     */
+    readonly enablePathsFilter?: boolean;
+}
+export interface RenderResult {
+    /** The rendered `<available_skills>...</available_skills>` block. Empty string when no skills land. */
+    readonly text: string;
+    /** Skills that made it into the rendered block, in render order. */
+    readonly included: readonly ParsedSkill[];
+    /** `true` iff one or more skills were dropped by budget pressure. */
+    readonly truncated: boolean;
+    /** Total char count of `text`. */
+    readonly charsUsed: number;
+    /** Telemetry events the renderer would emit. Caller dispatches to the configured sink. */
+    readonly events: readonly SkillEvent[];
+    /**
+     * Pinned skills that were dropped because rendering them would have
+     * pushed the block past the renderer's hard cap (F5 — `2 ×
+     * charBudget`, floored at `charBudget + 4096`). Empty in the common
+     * case. `TaskClient` throws `SkillsBudgetExceededError` when this is
+     * non-empty so a buggy caller-pin list surfaces as a loud failure
+     * instead of a silently truncated wire payload.
+     */
+    readonly omittedPinned: readonly ParsedSkill[];
+}
+/**
+ * Render the slim index. Pure function — no IO, no state mutation; the
+ * caller routes the returned `events` to the configured telemetry sink.
+ */
+export declare function renderSlimIndex(skills: readonly ParsedSkill[], opts?: RenderOptions): RenderResult;
+//# sourceMappingURL=render.d.ts.map

package/dist/skills/render.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"render.d.ts","sourceRoot":"","sources":["../../src/skills/render.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAG1D;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,+EAA+E;IAC/E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC;;;;;OAKG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;CACtC;AAED,MAAM,WAAW,YAAY;IAC3B,uGAAuG;IACvG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,oEAAoE;IACpE,QAAQ,CAAC,QAAQ,EAAE,SAAS,WAAW,EAAE,CAAC;IAC1C,qEAAqE;IACrE,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,kCAAkC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,0FAA0F;IAC1F,QAAQ,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,CAAC;IACvC;;;;;;;OAOG;IACH,QAAQ,CAAC,aAAa,EAAE,SAAS,WAAW,EAAE,CAAC;CAChD;AAsBD;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,SAAS,WAAW,EAAE,EAC9B,IAAI,GAAE,aAAkB,GACvB,YAAY,CAmJd"}