@qodo/sdk 0.13.4 → 2.0.0-next.1

package/dist/auth/index.browser.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Auth — browser stub. Same API surface as `auth/index.ts`; explicit-`apiKey`
+ * only.
+ *
+ * The Node version supports two implicit resolution paths — `QODO_API_KEY`
+ * env var and a `~/.qodo/auth.key` file. Neither belongs in browser:
+ *   - Filesystem (`os`/`fs`/`path`) doesn't exist in browser at all.
+ *   - `process.env.QODO_API_KEY` is more dangerous than useful — bundlers
+ *     like Vite/Next/webpack-DefinePlugin commonly inline `process.env.*`
+ *     at build time, which would embed the secret into the shipped JS
+ *     where any user can read it. The safe answer is "browser consumers
+ *     pass `apiKey` explicitly."
+ *
+ * So `validate()` throws `QodoAuthError` directing the consumer to wire
+ * `apiKey` through their own server-side handshake (token vending) rather
+ * than letting it leak through the build.
+ *
+ * The Node version of this file is `auth/index.ts`; the swap is wired via the
+ * `browser` field in `package.json` so consumers don't change a single import.
+ */
+export type AuthSource = 'env' | 'file' | 'explicit';
+export interface AuthConfig {
+    readonly token: string;
+    readonly source: AuthSource;
+}
+export declare class QodoAuthError extends Error {
+    readonly name = "QodoAuthError";
+    constructor(message: string);
+}
+export declare class AuthProvider {
+    private key;
+    private keySource;
+    constructor(apiKey?: string);
+    validate(): void;
+    getAuthConfig(): AuthConfig;
+    handle401Error(): never;
+}
+//# sourceMappingURL=index.browser.d.ts.map

package/dist/auth/index.browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.browser.d.ts","sourceRoot":"","sources":["../../src/auth/index.browser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,MAAM,GAAG,UAAU,CAAC;AAErD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;CAC7B;AAED,qBAAa,aAAc,SAAQ,KAAK;IACtC,SAAgB,IAAI,mBAAmB;gBAC3B,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,GAAG,CAAqB;IAChC,OAAO,CAAC,SAAS,CAAa;gBAElB,MAAM,CAAC,EAAE,MAAM;IAapB,QAAQ,IAAI,IAAI;IAShB,aAAa,IAAI,UAAU;IAI3B,cAAc,IAAI,KAAK;CAS/B"}

package/dist/auth/index.browser.js

@@ -0,0 +1,62 @@
+/**
+ * Auth — browser stub. Same API surface as `auth/index.ts`; explicit-`apiKey`
+ * only.
+ *
+ * The Node version supports two implicit resolution paths — `QODO_API_KEY`
+ * env var and a `~/.qodo/auth.key` file. Neither belongs in browser:
+ *   - Filesystem (`os`/`fs`/`path`) doesn't exist in browser at all.
+ *   - `process.env.QODO_API_KEY` is more dangerous than useful — bundlers
+ *     like Vite/Next/webpack-DefinePlugin commonly inline `process.env.*`
+ *     at build time, which would embed the secret into the shipped JS
+ *     where any user can read it. The safe answer is "browser consumers
+ *     pass `apiKey` explicitly."
+ *
+ * So `validate()` throws `QodoAuthError` directing the consumer to wire
+ * `apiKey` through their own server-side handshake (token vending) rather
+ * than letting it leak through the build.
+ *
+ * The Node version of this file is `auth/index.ts`; the swap is wired via the
+ * `browser` field in `package.json` so consumers don't change a single import.
+ */
+export class QodoAuthError extends Error {
+    name = 'QodoAuthError';
+    constructor(message) {
+        super(message);
+        Object.setPrototypeOf(this, new.target.prototype);
+    }
+}
+export class AuthProvider {
+    key;
+    keySource;
+    constructor(apiKey) {
+        if (apiKey !== undefined && apiKey.length > 0) {
+            this.key = apiKey;
+            this.keySource = 'explicit';
+            return;
+        }
+        // Browser path: no env-var, no file fallback. The `keySource` is set to
+        // `'explicit'` (the only legal browser source) so `handle401Error()`'s
+        // diagnostic points the user at the right surface to fix.
+        this.key = undefined;
+        this.keySource = 'explicit';
+    }
+    validate() {
+        if (this.key !== undefined && this.key.length > 0)
+            return;
+        throw new QodoAuthError('Qodo API key not found. In browser bundles, pass an explicit `apiKey` ' +
+            'to QodoClient — env-var and filesystem fallbacks are Node-only and ' +
+            'would risk embedding the secret in the shipped JS.');
+    }
+    getAuthConfig() {
+        return { token: this.key ?? '', source: this.keySource };
+    }
+    handle401Error() {
+        const where = this.keySource === 'env'
+            ? 'QODO_API_KEY environment variable'
+            : this.keySource === 'file'
+                ? '~/.qodo/auth.key'
+                : 'apiKey passed to QodoClient';
+        throw new QodoAuthError(`Invalid API key (source: ${where})`);
+    }
+}
+//# sourceMappingURL=index.browser.js.map

package/dist/auth/index.browser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.browser.js","sourceRoot":"","sources":["../../src/auth/index.browser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AASH,MAAM,OAAO,aAAc,SAAQ,KAAK;IACtB,IAAI,GAAG,eAAe,CAAC;IACvC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF;AAED,MAAM,OAAO,YAAY;IACf,GAAG,CAAqB;IACxB,SAAS,CAAa;IAE9B,YAAY,MAAe;QACzB,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC;YAClB,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC;YAC5B,OAAO;QACT,CAAC;QACD,wEAAwE;QACxE,uEAAuE;QACvE,0DAA0D;QAC1D,IAAI,CAAC,GAAG,GAAG,SAAS,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC;IAC9B,CAAC;IAEM,QAAQ;QACb,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO;QAC1D,MAAM,IAAI,aAAa,CACrB,wEAAwE;YACtE,qEAAqE;YACrE,oDAAoD,CACvD,CAAC;IACJ,CAAC;IAEM,aAAa;QAClB,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;IAC3D,CAAC;IAEM,cAAc;QACnB,MAAM,KAAK,GACT,IAAI,CAAC,SAAS,KAAK,KAAK;YACtB,CAAC,CAAC,mCAAmC;YACrC,CAAC,CAAC,IAAI,CAAC,SAAS,KAAK,MAAM;gBACzB,CAAC,CAAC,kBAAkB;gBACpB,CAAC,CAAC,6BAA6B,CAAC;QACtC,MAAM,IAAI,aAAa,CAAC,4BAA4B,KAAK,GAAG,CAAC,CAAC;IAChE,CAAC;CACF"}

package/dist/auth/index.d.ts

@@ -1,43 +1,57 @@
-import { AuthConfig } from "../api/types.js";
-export declare const CONFIG: {
-    readonly PRODUCTION: "https://api.ng.command.qodo.ai";
-    readonly BETA: "https://api.ng.beta.command.qodo.ai";
-    readonly LOCAL: "http://0.0.0.0:5432";
-    readonly DEFAULT_ENV: "https://api.ng.command.qodo.ai";
-};
 /**
- * Encapsulates API-key resolution and validation as an instance so that
- * multiple QodoSDK instances (each running in its own AsyncLocalStorage
- * environment) can hold independent auth state without polluting module-level
- * variables or process.env.
+ * Auth — environment-scoped bearer-key resolution.
+ *
+ * The bearer model is unchanged from 1.x. `Authorization: Bearer <token>`
+ * on the WS upgrade and HTTP routes; QAR forwards to qodo-platform.
+ * The SDK's job is to produce a valid bearer when asked, and to throw
+ * a typed error when it can't.
+ *
+ * Multiple `QodoClient` instances can run in the same Node.js process (Studio,
+ * IDE extension, CI runner all in one host). Each holds an `AuthProvider`
+ * instance so they don't trample each other's keys via module-level state.
+ */
+/** Where the bearer came from. Used in error messages so consumers know what to fix. */
+export type AuthSource = 'env' | 'file' | 'explicit';
+/** Resolved bearer + provenance. Returned by `AuthProvider.getAuthConfig()`. */
+export interface AuthConfig {
+    readonly token: string;
+    readonly source: AuthSource;
+}
+/**
+ * Auth-related failure. Constructor signature unchanged from 1.x for binary
+ * compatibility with existing handlers (Studio, IDE extension catch by `name`).
+ */
+export declare class QodoAuthError extends Error {
+    readonly name = "QodoAuthError";
+    constructor(message: string);
+}
+/**
+ * Resolves and validates a Qodo API key.
+ *
+ * Resolution order:
+ *   1. Explicit `apiKey` argument to the constructor (`source: 'explicit'`).
+ *   2. `QODO_API_KEY` environment variable (`source: 'env'`).
+ *   3. `~/.qodo/auth.key` (`source: 'file'`).
+ *
+ * `validate()` is the lazy probe — call it before the first network use; it
+ * touches the filesystem only if the env var was unset.
  */
 export declare class AuthProvider {
     private key;
     private keySource;
     constructor(apiKey?: string);
     /**
-     * Validates that a key is available. Tries ~/.qodo/auth.key if not in env.
-     * Throws QodoAuthError if no valid key found.
+     * Ensure a key is available. Falls back to `~/.qodo/auth.key` if neither
+     * explicit nor env-provided. Throws `QodoAuthError` on failure.
      */
     validate(): void;
+    /** Resolved bearer + provenance. Call `validate()` first; this returns `''` if the key isn't loaded. */
     getAuthConfig(): AuthConfig;
+    /**
+     * Throw a `QodoAuthError` whose message names the auth source — useful when
+     * an HTTP/WS round-trip returns 401 and the caller wants the user to fix
+     * the right place.
+     */
     handle401Error(): never;
 }
-/**
- * Validates and loads the API key from environment or file.
- * Throws QodoAuthError if no valid key is found.
- */
-export declare const validateKey: () => void;
-export declare function getAuthConfig(): AuthConfig;
-export declare class QodoAuthError extends Error {
-    constructor(message: string);
-}
-/**
- * Handles 401 authentication errors by throwing QodoAuthError.
- */
-export declare function handle401Error(): never;
-export declare function isBetaVersion(): boolean;
-export declare function getApiEndpoint(): string;
-export declare function shouldDisplayEndpoint(): boolean;
-export declare function getEndpointDisplayMessage(): string | null;
 //# sourceMappingURL=index.d.ts.map

package/dist/auth/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAC,UAAU,EAAC,MAAM,iBAAiB,CAAC;AAI3C,eAAO,MAAM,MAAM;;;;;CAKT,CAAC;AAMX;;;;;GAKG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,GAAG,CAAqB;IAChC,OAAO,CAAC,SAAS,CAAyB;gBAE9B,MAAM,CAAC,EAAE,MAAM;IAa3B;;;OAGG;IACI,QAAQ,IAAI,IAAI;IAsBhB,aAAa,IAAI,UAAU;IAI3B,cAAc,IAAI,KAAK;CAM/B;AASD;;;GAGG;AACH,eAAO,MAAM,WAAW,YAqBvB,CAAA;AAED,wBAAgB,aAAa,IAAI,UAAU,CAG1C;AAED,qBAAa,aAAc,SAAQ,KAAK;gBAC1B,OAAO,EAAE,MAAM;CAI5B;AAED;;GAEG;AACH,wBAAgB,cAAc,IAAI,KAAK,CAQtC;AAED,wBAAgB,aAAa,IAAI,OAAO,CAGvC;AAED,wBAAgB,cAAc,IAAI,MAAM,CAQvC;AAED,wBAAgB,qBAAqB,IAAI,OAAO,CAG/C;AAED,wBAAgB,yBAAyB,IAAI,MAAM,GAAG,IAAI,CAWzD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,wFAAwF;AACxF,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,MAAM,GAAG,UAAU,CAAC;AAErD,gFAAgF;AAChF,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;CAC7B;AAED;;;GAGG;AACH,qBAAa,aAAc,SAAQ,KAAK;IACtC,SAAgB,IAAI,mBAAmB;gBAC3B,OAAO,EAAE,MAAM;CAI5B;AAED;;;;;;;;;;GAUG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,GAAG,CAAqB;IAChC,OAAO,CAAC,SAAS,CAAa;gBAElB,MAAM,CAAC,EAAE,MAAM;IAU3B;;;OAGG;IACI,QAAQ,IAAI,IAAI;IAsBvB,wGAAwG;IACjG,aAAa,IAAI,UAAU;IAIlC;;;;OAIG;IACI,cAAc,IAAI,KAAK;CAS/B"}

package/dist/auth/index.js

@@ -1,46 +1,59 @@
-import os from "node:os";
-import path from "path";
-import fs from "fs";
-import { getCurrentVersion } from "../version.js";
-// Constants
-export const CONFIG = {
-    PRODUCTION: "https://api.ng.command.qodo.ai",
-    BETA: "https://api.ng.beta.command.qodo.ai",
-    LOCAL: "http://0.0.0.0:5432",
-    DEFAULT_ENV: "https://api.ng.command.qodo.ai",
-};
-// ---------------------------------------------------------------------------
-// AuthProvider — environment-scoped auth state
-// ---------------------------------------------------------------------------
 /**
- * Encapsulates API-key resolution and validation as an instance so that
- * multiple QodoSDK instances (each running in its own AsyncLocalStorage
- * environment) can hold independent auth state without polluting module-level
- * variables or process.env.
+ * Auth — environment-scoped bearer-key resolution.
+ *
+ * The bearer model is unchanged from 1.x. `Authorization: Bearer <token>`
+ * on the WS upgrade and HTTP routes; QAR forwards to qodo-platform.
+ * The SDK's job is to produce a valid bearer when asked, and to throw
+ * a typed error when it can't.
+ *
+ * Multiple `QodoClient` instances can run in the same Node.js process (Studio,
+ * IDE extension, CI runner all in one host). Each holds an `AuthProvider`
+ * instance so they don't trample each other's keys via module-level state.
+ */
+import os from 'node:os';
+import path from 'node:path';
+import fs from 'node:fs';
+/**
+ * Auth-related failure. Constructor signature unchanged from 1.x for binary
+ * compatibility with existing handlers (Studio, IDE extension catch by `name`).
+ */
+export class QodoAuthError extends Error {
+    name = 'QodoAuthError';
+    constructor(message) {
+        super(message);
+        Object.setPrototypeOf(this, new.target.prototype);
+    }
+}
+/**
+ * Resolves and validates a Qodo API key.
+ *
+ * Resolution order:
+ *   1. Explicit `apiKey` argument to the constructor (`source: 'explicit'`).
+ *   2. `QODO_API_KEY` environment variable (`source: 'env'`).
+ *   3. `~/.qodo/auth.key` (`source: 'file'`).
+ *
+ * `validate()` is the lazy probe — call it before the first network use; it
+ * touches the filesystem only if the env var was unset.
  */
 export class AuthProvider {
     key;
-    keySource = 'env';
+    keySource;
     constructor(apiKey) {
-        if (apiKey) {
+        if (apiKey !== undefined && apiKey.length > 0) {
             this.key = apiKey;
-            this.keySource = 'env'; // treat explicit key same as env-provided
+            this.keySource = 'explicit';
             return;
         }
-        // Read from environment (but DO NOT mutate process.env)
         this.key = process.env.QODO_API_KEY;
-        if (this.key) {
-            this.keySource = 'env';
-        }
+        this.keySource = 'env';
     }
     /**
-     * Validates that a key is available. Tries ~/.qodo/auth.key if not in env.
-     * Throws QodoAuthError if no valid key found.
+     * Ensure a key is available. Falls back to `~/.qodo/auth.key` if neither
+     * explicit nor env-provided. Throws `QodoAuthError` on failure.
      */
     validate() {
-        if (this.key)
+        if (this.key !== undefined && this.key.length > 0)
             return;
-        // Try reading from auth file
         try {
             const home = os.homedir();
             const authFile = path.join(home, '.qodo', 'auth.key');
@@ -50,95 +63,29 @@ export class AuthProvider {
             }
         }
         catch {
-            // intentionally suppressed: file read errors are non-fatal, will throw below if no key
+            // File-read errors are non-fatal — the throw below is the canonical
+            // diagnostic for "I couldn't find a key anywhere."
         }
-        if (!this.key) {
+        if (this.key === undefined || this.key.length === 0) {
             throw new QodoAuthError('Qodo API key not found. Set the QODO_API_KEY environment variable or create ~/.qodo/auth.key');
         }
     }
+    /** Resolved bearer + provenance. Call `validate()` first; this returns `''` if the key isn't loaded. */
     getAuthConfig() {
         return { token: this.key ?? '', source: this.keySource };
     }
+    /**
+     * Throw a `QodoAuthError` whose message names the auth source — useful when
+     * an HTTP/WS round-trip returns 401 and the caller wants the user to fix
+     * the right place.
+     */
     handle401Error() {
-        const msg = this.keySource === 'env'
-            ? 'Invalid API key. Please check your QODO_API_KEY environment variable.'
-            : 'Invalid API key stored in ~/.qodo/auth.key';
-        throw new QodoAuthError(msg);
-    }
-}
-// ---------------------------------------------------------------------------
-// Legacy free functions — kept for backward compatibility (CLI / non-SDK paths)
-// ---------------------------------------------------------------------------
-let key = process.env.QODO_API_KEY;
-let keySource = 'env';
-/**
- * Validates and loads the API key from environment or file.
- * Throws QodoAuthError if no valid key is found.
- */
-export const validateKey = () => {
-    if (!key && !process.env.QODO_API_KEY) {
-        try {
-            const home = os.homedir();
-            const authFile = path.join(home, '.qodo', 'auth.key');
-            if (fs.existsSync(authFile)) {
-                key = fs.readFileSync(authFile, 'utf-8').trim();
-                keySource = 'file';
-            }
-        }
-        catch {
-            // intentionally suppressed: file read errors are non-fatal
-        }
-    }
-    else if (!key) {
-        key = process.env.QODO_API_KEY;
-    }
-    if (!key) {
-        throw new QodoAuthError('Qodo API key not found. Set the QODO_API_KEY environment variable or create ~/.qodo/auth.key');
-    }
-};
-export function getAuthConfig() {
-    const token = key ?? process.env.QODO_API_KEY ?? "";
-    return { token, source: keySource };
-}
-export class QodoAuthError extends Error {
-    constructor(message) {
-        super(message);
-        this.name = 'QodoAuthError';
-    }
-}
-/**
- * Handles 401 authentication errors by throwing QodoAuthError.
- */
-export function handle401Error() {
-    const authConfig = getAuthConfig();
-    const msg = authConfig.source === 'env'
-        ? "Invalid API key. Please check your QODO_API_KEY environment variable."
-        : "Invalid API key stored in ~/.qodo/auth.key";
-    throw new QodoAuthError(msg);
-}
-export function isBetaVersion() {
-    const version = getCurrentVersion();
-    return version.includes('-beta');
-}
-export function getApiEndpoint() {
-    const currentEndpoint = process.env.QODO_API_BASE_URL || CONFIG.DEFAULT_ENV;
-    if (process.env.QODO_API_BASE_URL) {
-        return currentEndpoint;
-    }
-    return isBetaVersion() ? CONFIG.BETA : CONFIG.PRODUCTION;
-}
-export function shouldDisplayEndpoint() {
-    const endpoint = getApiEndpoint();
-    return endpoint !== CONFIG.PRODUCTION;
-}
-export function getEndpointDisplayMessage() {
-    if (!shouldDisplayEndpoint()) {
-        return null;
-    }
-    const endpoint = getApiEndpoint();
-    if (endpoint === CONFIG.BETA) {
-        return `Using beta endpoint: ${endpoint}`;
+        const where = this.keySource === 'env'
+            ? 'QODO_API_KEY environment variable'
+            : this.keySource === 'file'
+                ? '~/.qodo/auth.key'
+                : 'apiKey passed to QodoClient';
+        throw new QodoAuthError(`Invalid API key (source: ${where})`);
     }
-    return `Using custom endpoint: ${endpoint}`;
 }
 //# sourceMappingURL=index.js.map

package/dist/auth/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,IAAI,CAAC;AAEpB,OAAO,EAAC,iBAAiB,EAAC,MAAM,eAAe,CAAC;AAEhD,YAAY;AACZ,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,UAAU,EAAE,gCAAgC;IAC5C,IAAI,EAAE,qCAAqC;IAC3C,KAAK,EAAE,qBAAqB;IAC5B,WAAW,EAAE,gCAAgC;CACrC,CAAC;AAEX,8EAA8E;AAC9E,+CAA+C;AAC/C,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,OAAO,YAAY;IACf,GAAG,CAAqB;IACxB,SAAS,GAAmB,KAAK,CAAC;IAE1C,YAAY,MAAe;QACzB,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC;YAClB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,CAAC,0CAA0C;YAClE,OAAO;QACT,CAAC;QACD,wDAAwD;QACxD,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QACpC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACzB,CAAC;IACH,CAAC;IAED;;;OAGG;IACI,QAAQ;QACb,IAAI,IAAI,CAAC,GAAG;YAAE,OAAO;QAErB,6BAA6B;QAC7B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;YAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;YACtD,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5B,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;gBACrD,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC;YAC1B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uFAAuF;QACzF,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACd,MAAM,IAAI,aAAa,CACrB,8FAA8F,CAC/F,CAAC;QACJ,CAAC;IACH,CAAC;IAEM,aAAa;QAClB,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;IAC3D,CAAC;IAEM,cAAc;QACnB,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,KAAK,KAAK;YAClC,CAAC,CAAC,uEAAuE;YACzE,CAAC,CAAC,4CAA4C,CAAC;QACjD,MAAM,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;CACF;AAED,8EAA8E;AAC9E,gFAAgF;AAChF,8EAA8E;AAE9E,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;AACnC,IAAI,SAAS,GAAmB,KAAK,CAAC;AAEtC;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,GAAG,EAAE;IAC9B,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;YAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;YACtD,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5B,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;gBAChD,SAAS,GAAG,MAAM,CAAC;YACrB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,2DAA2D;QAC7D,CAAC;IACH,CAAC;SAAM,IAAI,CAAC,GAAG,EAAE,CAAC;QAChB,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IACjC,CAAC;IAED,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,aAAa,CACrB,8FAA8F,CAC/F,CAAC;IACJ,CAAC;AACH,CAAC,CAAA;AAED,MAAM,UAAU,aAAa;IAC3B,MAAM,KAAK,GAAG,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;IACpD,OAAO,EAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAC,CAAC;AACpC,CAAC;AAED,MAAM,OAAO,aAAc,SAAQ,KAAK;IACtC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,cAAc;IAC5B,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;IAEnC,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,KAAK,KAAK;QACrC,CAAC,CAAC,uEAAuE;QACzE,CAAC,CAAC,4CAA4C,CAAC;IAEjD,MAAM,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;IACpC,OAAO,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,MAAM,CAAC,WAAW,CAAC;IAE5E,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAClC,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,OAAO,aAAa,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;IAClC,OAAO,QAAQ,KAAK,MAAM,CAAC,UAAU,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,yBAAyB;IACvC,IAAI,CAAC,qBAAqB,EAAE,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;IAClC,IAAI,QAAQ,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;QAC7B,OAAO,wBAAwB,QAAQ,EAAE,CAAC;IAC5C,CAAC;IAED,OAAO,0BAA0B,QAAQ,EAAE,CAAC;AAC9C,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AAWzB;;;GAGG;AACH,MAAM,OAAO,aAAc,SAAQ,KAAK;IACtB,IAAI,GAAG,eAAe,CAAC;IACvC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,OAAO,YAAY;IACf,GAAG,CAAqB;IACxB,SAAS,CAAa;IAE9B,YAAY,MAAe;QACzB,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC;YAClB,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC;YAC5B,OAAO;QACT,CAAC;QACD,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QACpC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;IACzB,CAAC;IAED;;;OAGG;IACI,QAAQ;QACb,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO;QAE1D,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;YAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;YACtD,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5B,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;gBACrD,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC;YAC1B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;YACpE,mDAAmD;QACrD,CAAC;QAED,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,aAAa,CACrB,8FAA8F,CAC/F,CAAC;QACJ,CAAC;IACH,CAAC;IAED,wGAAwG;IACjG,aAAa;QAClB,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;IAC3D,CAAC;IAED;;;;OAIG;IACI,cAAc;QACnB,MAAM,KAAK,GACT,IAAI,CAAC,SAAS,KAAK,KAAK;YACtB,CAAC,CAAC,mCAAmC;YACrC,CAAC,CAAC,IAAI,CAAC,SAAS,KAAK,MAAM;gBACzB,CAAC,CAAC,kBAAkB;gBACpB,CAAC,CAAC,6BAA6B,CAAC;QACtC,MAAM,IAAI,aAAa,CAAC,4BAA4B,KAAK,GAAG,CAAC,CAAC;IAChE,CAAC;CACF"}

package/dist/client/AgentsClient.d.ts

@@ -0,0 +1,33 @@
+/**
+ * `AgentsClient` — observer for QAR's `agent.spawn` envelopes.
+ *
+ * Each envelope reports a sub-agent spawn: `child_agent_id` /
+ * `parent_agent_id` / `spawn_protocol` (`bulletin` or `direct`).
+ * Surfacing this stream lets consumers like Studio render a
+ * multi-agent run's topology live without scraping a side-channel.
+ *
+ * Filter helpers narrow by parent agent (rendering one tree branch) or by
+ * spawn protocol (bulletin-only vs direct-only views).
+ */
+import type { AgentSpawnEnvelope } from '../qar/envelopes.js';
+import type { SpawnProtocol } from '../qar/payloads.js';
+import { KindObserverClient } from './observers.js';
+import type { EventSubscription } from './observers.js';
+export interface AgentSpawnFilter {
+    /** Match against `payload.parent_agent_id` — useful for tree-branch views. */
+    readonly parent_agent_id?: string;
+    /** Match against `payload.spawn_protocol` — `'bulletin'` or `'direct'`. */
+    readonly spawn_protocol?: SpawnProtocol;
+}
+export type AgentSpawnHandler = (env: AgentSpawnEnvelope) => void;
+export declare class AgentsClient extends KindObserverClient<'agent.spawn', AgentSpawnEnvelope> {
+    /**
+     * Register a handler invoked for every inbound `agent.spawn` envelope.
+     *
+     * Same multi-handler / fan-out / throw-swallowing semantics as the other
+     * observer surfaces.
+     */
+    onSpawn(handler: AgentSpawnHandler): EventSubscription;
+    onSpawn(filter: AgentSpawnFilter, handler: AgentSpawnHandler): EventSubscription;
+}
+//# sourceMappingURL=AgentsClient.d.ts.map

package/dist/client/AgentsClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AgentsClient.d.ts","sourceRoot":"","sources":["../../src/client/AgentsClient.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAExD,MAAM,WAAW,gBAAgB;IAC/B,8EAA8E;IAC9E,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,2EAA2E;IAC3E,QAAQ,CAAC,cAAc,CAAC,EAAE,aAAa,CAAC;CACzC;AAED,MAAM,MAAM,iBAAiB,GAAG,CAAC,GAAG,EAAE,kBAAkB,KAAK,IAAI,CAAC;AAElE,qBAAa,YAAa,SAAQ,kBAAkB,CAAC,aAAa,EAAE,kBAAkB,CAAC;IAMrF;;;;;OAKG;IACI,OAAO,CAAC,OAAO,EAAE,iBAAiB,GAAG,iBAAiB;IACtD,OAAO,CAAC,MAAM,EAAE,gBAAgB,EAAE,OAAO,EAAE,iBAAiB,GAAG,iBAAiB;CAcxF"}

package/dist/client/AgentsClient.js

@@ -0,0 +1,40 @@
+/**
+ * `AgentsClient` — observer for QAR's `agent.spawn` envelopes.
+ *
+ * Each envelope reports a sub-agent spawn: `child_agent_id` /
+ * `parent_agent_id` / `spawn_protocol` (`bulletin` or `direct`).
+ * Surfacing this stream lets consumers like Studio render a
+ * multi-agent run's topology live without scraping a side-channel.
+ *
+ * Filter helpers narrow by parent agent (rendering one tree branch) or by
+ * spawn protocol (bulletin-only vs direct-only views).
+ */
+import { KindObserverClient } from './observers.js';
+export class AgentsClient extends KindObserverClient {
+    /** @internal — instantiated by `QodoClient`. */
+    constructor() {
+        super('agent.spawn');
+    }
+    onSpawn(filterOrHandler, maybeHandler) {
+        if (typeof filterOrHandler === 'function') {
+            return this.register(filterOrHandler);
+        }
+        if (maybeHandler === undefined) {
+            throw new Error('AgentsClient.onSpawn: handler is required when a filter is supplied');
+        }
+        const filter = filterOrHandler;
+        return this.register(maybeHandler, (env) => agentSpawnMatches(env, filter));
+    }
+}
+function agentSpawnMatches(env, filter) {
+    if (filter.parent_agent_id !== undefined &&
+        env.payload.parent_agent_id !== filter.parent_agent_id) {
+        return false;
+    }
+    if (filter.spawn_protocol !== undefined &&
+        env.payload.spawn_protocol !== filter.spawn_protocol) {
+        return false;
+    }
+    return true;
+}
+//# sourceMappingURL=AgentsClient.js.map

package/dist/client/AgentsClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AgentsClient.js","sourceRoot":"","sources":["../../src/client/AgentsClient.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAYpD,MAAM,OAAO,YAAa,SAAQ,kBAAqD;IACrF,gDAAgD;IAChD;QACE,KAAK,CAAC,aAAa,CAAC,CAAC;IACvB,CAAC;IAUM,OAAO,CACZ,eAAqD,EACrD,YAAgC;QAEhC,IAAI,OAAO,eAAe,KAAK,UAAU,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,MAAM,GAAG,eAAe,CAAC;QAC/B,OAAO,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9E,CAAC;CACF;AAED,SAAS,iBAAiB,CAAC,GAAuB,EAAE,MAAwB;IAC1E,IACE,MAAM,CAAC,eAAe,KAAK,SAAS;QACpC,GAAG,CAAC,OAAO,CAAC,eAAe,KAAK,MAAM,CAAC,eAAe,EACtD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IACE,MAAM,CAAC,cAAc,KAAK,SAAS;QACnC,GAAG,CAAC,OAAO,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc,EACpD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/client/ArtifactsClient.d.ts

@@ -0,0 +1,43 @@
+/**
+ * `ArtifactsClient` — observer for QAR's `artifact.add` envelopes.
+ *
+ * Artifacts are durable outputs from a task or sub-agent: files,
+ * structured records, references the consumer can fetch later. The wire
+ * payload is `JsonObject`-shaped today; consumers narrow against their
+ * agent's known artifact schema. The filter helper below matches against
+ * the two fields QAR's runtime exposes consistently (`kind`, `agent_id`).
+ *
+ * Observer-only **today**, bidirectional on the wire. QAR's
+ * `BIDIRECTIONAL_KINDS` whitelist accepts `artifact.add` in either
+ * direction; the SDK aligns its taxonomy in `envelopes.ts` accordingly.
+ * The current SDK surface does not expose a client emitter — tool
+ * handlers that need to write artifacts route them through the agent
+ * loop on the QAR side. A future addition may surface
+ * `ArtifactsClient.emit(...)` without a wire-contract change.
+ */
+import type { ArtifactAddEnvelope } from '../qar/envelopes.js';
+import { KindObserverClient } from './observers.js';
+import type { EventSubscription } from './observers.js';
+/**
+ * Best-effort filter for `artifact.add` envelopes. Each field, when set,
+ * must equal the same-named field in the envelope payload.
+ */
+export interface ArtifactFilter {
+    /** Match against `payload.kind` (artifact schema discriminator). */
+    readonly kind?: string;
+    /** Match against `payload.agent_id` (the agent that produced the artifact). */
+    readonly agent_id?: string;
+}
+export type ArtifactHandler = (env: ArtifactAddEnvelope) => void;
+export declare class ArtifactsClient extends KindObserverClient<'artifact.add', ArtifactAddEnvelope> {
+    /**
+     * Register a handler invoked for every inbound `artifact.add` envelope.
+     *
+     * Same multi-handler / fan-out / throw-swallowing semantics as the other
+     * observer surfaces. The two-arg overload accepts an `ArtifactFilter`;
+     * only envelopes whose payload matches every set field invoke the handler.
+     */
+    onArtifact(handler: ArtifactHandler): EventSubscription;
+    onArtifact(filter: ArtifactFilter, handler: ArtifactHandler): EventSubscription;
+}
+//# sourceMappingURL=ArtifactsClient.d.ts.map

package/dist/client/ArtifactsClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ArtifactsClient.d.ts","sourceRoot":"","sources":["../../src/client/ArtifactsClient.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAExD;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,oEAAoE;IACpE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,+EAA+E;IAC/E,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,mBAAmB,KAAK,IAAI,CAAC;AAEjE,qBAAa,eAAgB,SAAQ,kBAAkB,CAAC,cAAc,EAAE,mBAAmB,CAAC;IAM1F;;;;;;OAMG;IACI,UAAU,CAAC,OAAO,EAAE,eAAe,GAAG,iBAAiB;IACvD,UAAU,CAAC,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,eAAe,GAAG,iBAAiB;CAcvF"}

package/dist/client/ArtifactsClient.js

@@ -0,0 +1,54 @@
+/**
+ * `ArtifactsClient` — observer for QAR's `artifact.add` envelopes.
+ *
+ * Artifacts are durable outputs from a task or sub-agent: files,
+ * structured records, references the consumer can fetch later. The wire
+ * payload is `JsonObject`-shaped today; consumers narrow against their
+ * agent's known artifact schema. The filter helper below matches against
+ * the two fields QAR's runtime exposes consistently (`kind`, `agent_id`).
+ *
+ * Observer-only **today**, bidirectional on the wire. QAR's
+ * `BIDIRECTIONAL_KINDS` whitelist accepts `artifact.add` in either
+ * direction; the SDK aligns its taxonomy in `envelopes.ts` accordingly.
+ * The current SDK surface does not expose a client emitter — tool
+ * handlers that need to write artifacts route them through the agent
+ * loop on the QAR side. A future addition may surface
+ * `ArtifactsClient.emit(...)` without a wire-contract change.
+ */
+import { KindObserverClient } from './observers.js';
+export class ArtifactsClient extends KindObserverClient {
+    /** @internal — instantiated by `QodoClient`. */
+    constructor() {
+        super('artifact.add');
+    }
+    onArtifact(filterOrHandler, maybeHandler) {
+        if (typeof filterOrHandler === 'function') {
+            return this.register(filterOrHandler);
+        }
+        if (maybeHandler === undefined) {
+            throw new Error('ArtifactsClient.onArtifact: handler is required when a filter is supplied');
+        }
+        const filter = filterOrHandler;
+        return this.register(maybeHandler, (env) => artifactMatches(env, filter));
+    }
+}
+function artifactMatches(env, filter) {
+    // Filter helpers are best-effort — a malformed payload (null, primitive,
+    // array) or a hostile property getter must behave like a non-match rather
+    // than throwing inside the predicate and getting logged as a handler error.
+    try {
+        const payload = env.payload;
+        if (payload === null || typeof payload !== 'object')
+            return false;
+        const obj = payload;
+        if (filter.kind !== undefined && obj.kind !== filter.kind)
+            return false;
+        if (filter.agent_id !== undefined && obj.agent_id !== filter.agent_id)
+            return false;
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=ArtifactsClient.js.map

package/dist/client/ArtifactsClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ArtifactsClient.js","sourceRoot":"","sources":["../../src/client/ArtifactsClient.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAgBpD,MAAM,OAAO,eAAgB,SAAQ,kBAAuD;IAC1F,gDAAgD;IAChD;QACE,KAAK,CAAC,cAAc,CAAC,CAAC;IACxB,CAAC;IAWM,UAAU,CACf,eAAiD,EACjD,YAA8B;QAE9B,IAAI,OAAO,eAAe,KAAK,UAAU,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;QAC/F,CAAC;QACD,MAAM,MAAM,GAAG,eAAe,CAAC;QAC/B,OAAO,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5E,CAAC;CACF;AAED,SAAS,eAAe,CAAC,GAAwB,EAAE,MAAsB;IACvE,yEAAyE;IACzE,0EAA0E;IAC1E,4EAA4E;IAC5E,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,GAAG,CAAC,OAAkB,CAAC;QACvC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAClE,MAAM,GAAG,GAAG,OAAkC,CAAC;QAC/C,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACxE,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QACpF,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}