@remnic/core 10.0.92 → 10.0.94

package/dist/chunk-JTSSSR4L.js

@@ -0,0 +1,359 @@
+import {
+  assertNamespaceAllowed,
+  assertOperationAuthorizationAllowed,
+  tokenCapabilityStore
+} from "./chunk-OGBQMY46.js";
+import {
+  expandTildePath
+} from "./chunk-6KH5NLQS.js";
+import {
+  EngramAccessInputError
+} from "./chunk-CJCTKL6Y.js";
+
+// src/access-boundary.ts
+import { z } from "zod";
+var OPERATION_NAMES = [
+  "memory_get",
+  "memory_search",
+  "external_wiki_search",
+  "memory_store",
+  "coding_decision",
+  "coding_architecture",
+  // codegraph parity tools (issue #1554) -- each maps to one codegraph_*
+  // boundary operation that delegates to the surface handler in
+  // coding/codegraph-surfaces.ts. Names match the external tool suffixes.
+  "codegraph_index",
+  "codegraph_list_projects",
+  "codegraph_delete_project",
+  "codegraph_index_status",
+  "codegraph_search_graph",
+  "codegraph_trace_path",
+  "codegraph_detect_changes",
+  "codegraph_query_graph",
+  "codegraph_get_schema",
+  "codegraph_get_snippet",
+  "codegraph_get_architecture",
+  "codegraph_search_code",
+  "codegraph_manage_adr",
+  "codegraph_ingest_traces",
+  "memory_correct_plan",
+  "memory_correct_apply",
+  "coding_delta",
+  // Remaining MCP/HTTP handlers migrated through the boundary (issue #1525).
+  "recall",
+  "recall_explain",
+  "set_coding_context",
+  "recall_tier_explain",
+  "recall_xray",
+  "recall_why",
+  "who_knows",
+  "promotion_candidates",
+  "namespace_writable",
+  "wearables_status",
+  "wearables_sync",
+  "transcript_day",
+  "transcript_search",
+  "transcript_memories",
+  "location_status",
+  "location_check",
+  "location_sync",
+  "location_backfill",
+  "location_day",
+  "meetings_list",
+  "meetings_get",
+  "meetings_build",
+  "deep_recall",
+  "memory_expand",
+  "memory_traverse",
+  "memory_ls",
+  "memory_tree",
+  "memory_find",
+  "standup",
+  "action_confidence",
+  "chatgpt_memory_inspector",
+  "day_summary",
+  "capsule_export",
+  "capsule_import",
+  "capsule_list",
+  "memory_governance_run",
+  "entity_synthesis_run",
+  "procedure_mining_run",
+  "pattern_reinforcement_run",
+  "procedural_stats",
+  "procedure_library_maintenance",
+  "memory_timeline",
+  "suggestion_submit",
+  "entity_get",
+  "review_queue_list",
+  "correction_pending",
+  "observe",
+  "lcm_search",
+  "lcm_compaction_flush",
+  "extraction_force_flush",
+  "lcm_compaction_record",
+  "continuity_audit_generate",
+  "continuity_incident_open",
+  "continuity_incident_close",
+  "continuity_incident_list",
+  "continuity_loop_add_or_update",
+  "continuity_loop_review",
+  "identity_anchor_get",
+  "identity_anchor_update",
+  "memory_identity",
+  "work_task",
+  "work_project",
+  "work_board",
+  "shared_context_write_output",
+  "shared_feedback_record",
+  "shared_priorities_append",
+  "relay_mission_append",
+  "relay_mission_read",
+  "shared_context_cross_signals_run",
+  "shared_context_curate_daily",
+  "compounding_weekly_synthesize",
+  "compounding_promote_candidate",
+  "compression_guidelines_optimize",
+  "compression_guidelines_activate",
+  "memory_profile",
+  "memory_entities_list",
+  "memory_questions",
+  "memory_last_recall",
+  "memory_intent_debug",
+  "memory_qmd_debug",
+  "memory_graph_explain",
+  "graph_snapshot",
+  "memory_feedback",
+  "memory_promote",
+  "memory_outcome",
+  "memory_action_apply",
+  "context_checkpoint",
+  "briefing",
+  "review_list",
+  "review_resolve",
+  "contradiction_scan_run",
+  "preference_drift_scan",
+  "memory_summarize_hourly",
+  "conversation_index_update",
+  "profiling_report",
+  "graph_edge_decay_run",
+  "live_connectors_run",
+  "peer_list",
+  "peer_get",
+  "peer_set",
+  "peer_delete",
+  "peer_profile_get",
+  "peer_forget",
+  "console_state",
+  "dreams_status",
+  "dreams_run",
+  "support_passport_memory_preview",
+  "support_passport_cards_list",
+  "support_passport_draft_create",
+  "support_passport_drafts_generate",
+  "support_passport_card_replace",
+  "support_passport_card_approve",
+  "support_passport_card_reject",
+  "support_passport_card_withdraw",
+  "support_passport_grant_create",
+  "support_passport_grants_list",
+  "support_passport_grant_revoke",
+  "support_passport_grant_read",
+  "support_passport_grant_ask",
+  // HTTP-only routes (no direct MCP tool equivalent).
+  "adapters_status",
+  "offline_sync_snapshot",
+  "offline_sync_snapshot_stream",
+  "offline_sync_files",
+  "offline_sync_file_content",
+  "offline_sync_apply_file_content",
+  "offline_sync_apply",
+  "lcm_status",
+  "memory_list",
+  "recall_timings",
+  "entity_list",
+  "maintenance_status",
+  "quality_status",
+  "trust_zones_status",
+  "trust_zones_records",
+  "review_disposition",
+  "review_deck_list",
+  "review_deck_action",
+  "review_deck_undo",
+  "trust_zones_promote",
+  "trust_zones_demo_seed",
+  "citations_observed",
+  "contradiction_detail",
+  "graph_events",
+  // Chat surface — conversational memory inspection/correction (issue #1583).
+  "chat_message",
+  "chat_events"
+];
+var IMPLICIT_HTTP_NAMESPACE_OPERATIONS = /* @__PURE__ */ new Set([
+  "offline_sync_snapshot",
+  "offline_sync_snapshot_stream",
+  "memory_list",
+  "entity_list",
+  "maintenance_status",
+  "quality_status",
+  "trust_zones_status",
+  "graph_events",
+  "citations_observed"
+]);
+var PRINCIPAL_NAMESPACE_OPERATIONS = /* @__PURE__ */ new Set([
+  "support_passport_memory_preview",
+  "support_passport_cards_list",
+  "support_passport_draft_create",
+  "support_passport_drafts_generate",
+  "support_passport_card_replace",
+  "support_passport_card_approve",
+  "support_passport_card_reject",
+  "support_passport_card_withdraw",
+  "support_passport_grant_create",
+  "support_passport_grants_list",
+  "support_passport_grant_revoke"
+]);
+function coerceBooleanLike(value) {
+  if (value === void 0 || value === null || value === "") return void 0;
+  if (typeof value === "boolean") return value;
+  if (typeof value === "string") {
+    const lower = value.trim().toLowerCase();
+    if (lower === "true" || lower === "1" || lower === "yes" || lower === "on") return true;
+    if (lower === "false" || lower === "0" || lower === "no" || lower === "off") return false;
+  }
+  throw new EngramAccessInputError(
+    `expected a boolean-like value (true|false|1|0|yes|no|on|off); got ${JSON.stringify(value)}`
+  );
+}
+function coercePositiveInteger(value, label) {
+  if (value === void 0 || value === null || value === "") return void 0;
+  if (typeof value === "number") {
+    if (!Number.isFinite(value) || value <= 0 || !Number.isInteger(value)) {
+      throw new EngramAccessInputError(`${label} expects a positive integer; got ${JSON.stringify(value)}`);
+    }
+    return value;
+  }
+  if (typeof value === "string") {
+    const trimmed = value.trim();
+    if (!/^[+-]?\d+$/.test(trimmed)) {
+      throw new EngramAccessInputError(`${label} expects a positive integer; got ${JSON.stringify(value)}`);
+    }
+    const parsed = Number(trimmed);
+    if (!Number.isSafeInteger(parsed) || parsed <= 0) {
+      throw new EngramAccessInputError(`${label} expects a positive integer; got ${JSON.stringify(value)}`);
+    }
+    return parsed;
+  }
+  throw new EngramAccessInputError(`${label} expects a positive integer; got ${JSON.stringify(value)}`);
+}
+function normalizeOptionalPath(value) {
+  if (value === void 0 || value === null || value === "") return void 0;
+  if (typeof value !== "string") {
+    throw new EngramAccessInputError(`expected a path string; got ${JSON.stringify(value)}`);
+  }
+  return expandTildePath(value);
+}
+function formatZodIssues(error) {
+  const parts = [];
+  for (const issue of error.issues) {
+    const hasNumeric = issue.path.some((p) => typeof p === "number");
+    const path = hasNumeric ? issue.path.filter((p) => typeof p === "string").join(".") || "(root)" : issue.path.length > 0 ? issue.path.join(".") : "(root)";
+    const options = enumOptionsFromIssue(issue);
+    const suffix = options ? `. Valid: ${options.join(", ")}` : "";
+    parts.push(`${path}: ${humanReadableIssueMessage(issue, path, hasNumeric)}${suffix}`);
+  }
+  return parts.length > 0 ? `request validation failed: ${parts.join("; ")}` : "request validation failed";
+}
+function enumOptionsFromIssue(issue) {
+  if (issue.code !== "invalid_value") return void 0;
+  const rawValues = "values" in issue ? issue.values : void 0;
+  return Array.isArray(rawValues) ? rawValues.map((opt) => String(opt)) : void 0;
+}
+function humanReadableIssueMessage(issue, pathLabel, hasNumericPath) {
+  if (issue.code !== "invalid_type") return issue.message;
+  const expected = issue.expected;
+  if (issue.message.endsWith("received undefined")) return issue.message;
+  if (hasNumericPath && expected) {
+    return `${pathLabel} must be an array of ${expected}s`;
+  }
+  const fieldName = issue.path.length > 0 ? String(issue.path[issue.path.length - 1]) : "value";
+  switch (expected) {
+    case "string":
+      return `${fieldName} must be a string`;
+    case "boolean":
+      return `${fieldName} must be a boolean`;
+    case "number":
+      return `${fieldName} must be a number`;
+    case "array":
+      return `${fieldName} must be an array`;
+    case "object":
+      return `${fieldName} must be an object`;
+    default:
+      return issue.message;
+  }
+}
+var registry = /* @__PURE__ */ new Map();
+function defineOperation(spec) {
+  if (registry.has(spec.name)) {
+    throw new Error(`access-boundary: operation already registered: ${spec.name}`);
+  }
+  const bound = {
+    spec,
+    run: async (rawInput, ctx) => {
+      const parseResult = spec.schema.safeParse(rawInput);
+      if (!parseResult.success) {
+        throw new EngramAccessInputError(formatZodIssues(parseResult.error));
+      }
+      assertOperationAuthorizationAllowed(tokenCapabilityStore.getStore(), spec);
+      if (operationRequiresAuthorizedNamespace(spec.name)) {
+        const parsedNamespace = parseResult.data.namespace;
+        if (parsedNamespace) {
+          assertNamespaceAllowed(tokenCapabilityStore.getStore(), parsedNamespace);
+        }
+      }
+      return spec.handler(parseResult.data, { ...ctx, rawInput });
+    }
+  };
+  registry.set(spec.name, bound);
+  return bound;
+}
+function getOperation(name) {
+  return registry.get(name);
+}
+function operationRequiresAuthorizedNamespace(name) {
+  if (name === "namespace_writable") return false;
+  if (IMPLICIT_HTTP_NAMESPACE_OPERATIONS.has(name)) return true;
+  let schema = registry.get(name)?.spec.schema;
+  while (schema instanceof z.ZodType && !(schema instanceof z.ZodObject)) {
+    const wrapper = schema;
+    const sides = [wrapper.in, wrapper.out].filter(
+      (side) => side instanceof z.ZodType && !(side instanceof z.ZodTransform)
+    );
+    if (sides.length !== 1) break;
+    schema = sides[0];
+  }
+  return schema instanceof z.ZodObject && Object.hasOwn(schema.shape, "namespace");
+}
+function operationUsesPrincipalNamespace(name) {
+  return PRINCIPAL_NAMESPACE_OPERATIONS.has(name);
+}
+function listRegisteredOperations() {
+  return [...registry.keys()];
+}
+function __resetRegistryForTest() {
+  registry.clear();
+}
+
+export {
+  OPERATION_NAMES,
+  coerceBooleanLike,
+  coercePositiveInteger,
+  normalizeOptionalPath,
+  formatZodIssues,
+  defineOperation,
+  getOperation,
+  operationRequiresAuthorizedNamespace,
+  operationUsesPrincipalNamespace,
+  listRegisteredOperations,
+  __resetRegistryForTest
+};
+//# sourceMappingURL=chunk-JTSSSR4L.js.map

package/dist/chunk-JTSSSR4L.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/access-boundary.ts"],"sourcesContent":["/**\n * Single input-validation and error boundary for the CLI/MCP/HTTP access\n * surfaces (issue #1525, epic #1520 Phase 1).\n *\n * Every operation that crosses the access-service facade passes through ONE\n * registry entry: a zod-validated request envelope, a shared error mapper,\n * and the \"reject invalid input and list valid options\" behavior that\n * CLAUDE.md rules 14/17/24/28/36/48/51 previously had to be re-implemented\n * per handler. The three surfaces become thin adapters — one operation\n * definition, three transports — so a validation fix lands everywhere at\n * once.\n *\n * Host-agnostic (rule 31): operation names carry no `openclaw-*`/`engram-*`\n * prefix. Session/namespace tenancy stays in the handler layer (resolved via\n * ScopePlan #1521); the boundary validates SHAPE, not tenancy.\n */\n\nimport { z } from \"zod\";\n// The input error lives in the leaf module; importing it from access-service\n// here (a re-export) drags the whole service hub into this module's init and\n// leaves `registry` TDZ-uninitialized when the cycle re-enters (#3354).\nimport { EngramAccessInputError } from \"./access-errors.js\";\nimport type { EngramAccessService } from \"./access-service.js\";\nimport {\n  assertNamespaceAllowed,\n  assertOperationAuthorizationAllowed,\n  tokenCapabilityStore,\n} from \"./access-token-capabilities.js\";\nimport { expandTildePath } from \"./utils/path.js\";\n\n// ---------------------------------------------------------------------------\n// Canonical operation names — host-agnostic (rule 31)\n// ---------------------------------------------------------------------------\n\n/**\n * Canonical operation ids. One id is shared by the MCP tool, the HTTP route,\n * and the CLI command that expose the same operation. Add to this union as\n * each domain-group migration PR (memory ops → connectors → namespaces …)\n * lands; the fitness test in `access-surface-catalog.test.ts` treats the\n * registered set as the migration state.\n */\nexport const OPERATION_NAMES = [\n  \"memory_get\",\n  \"memory_search\",\n  \"external_wiki_search\",\n  \"memory_store\",\n  \"coding_decision\",\n  \"coding_architecture\",\n  // codegraph parity tools (issue #1554) -- each maps to one codegraph_*\n  // boundary operation that delegates to the surface handler in\n  // coding/codegraph-surfaces.ts. Names match the external tool suffixes.\n  \"codegraph_index\",\n  \"codegraph_list_projects\",\n  \"codegraph_delete_project\",\n  \"codegraph_index_status\",\n  \"codegraph_search_graph\",\n  \"codegraph_trace_path\",\n  \"codegraph_detect_changes\",\n  \"codegraph_query_graph\",\n  \"codegraph_get_schema\",\n  \"codegraph_get_snippet\",\n  \"codegraph_get_architecture\",\n  \"codegraph_search_code\",\n  \"codegraph_manage_adr\",\n  \"codegraph_ingest_traces\",\n  \"memory_correct_plan\",\n  \"memory_correct_apply\",\n  \"coding_delta\",\n  // Remaining MCP/HTTP handlers migrated through the boundary (issue #1525).\n  \"recall\",\n  \"recall_explain\",\n  \"set_coding_context\",\n  \"recall_tier_explain\",\n  \"recall_xray\",\n  \"recall_why\",\n  \"who_knows\",\n  \"promotion_candidates\",\n  \"namespace_writable\",\n  \"wearables_status\",\n  \"wearables_sync\",\n  \"transcript_day\",\n  \"transcript_search\",\n  \"transcript_memories\",\n  \"location_status\",\n  \"location_check\",\n  \"location_sync\",\n  \"location_backfill\",\n  \"location_day\",\n  \"meetings_list\",\n  \"meetings_get\",\n  \"meetings_build\",\n  \"deep_recall\",\n  \"memory_expand\",\n  \"memory_traverse\",\n  \"memory_ls\",\n  \"memory_tree\",\n  \"memory_find\",\n  \"standup\",\n  \"action_confidence\",\n  \"chatgpt_memory_inspector\",\n  \"day_summary\",\n  \"capsule_export\",\n  \"capsule_import\",\n  \"capsule_list\",\n  \"memory_governance_run\",\n  \"entity_synthesis_run\",\n  \"procedure_mining_run\",\n  \"pattern_reinforcement_run\",\n  \"procedural_stats\",\n  \"procedure_library_maintenance\",\n  \"memory_timeline\",\n  \"suggestion_submit\",\n  \"entity_get\",\n  \"review_queue_list\",\n  \"correction_pending\",\n  \"observe\",\n  \"lcm_search\",\n  \"lcm_compaction_flush\",\n  \"extraction_force_flush\",\n  \"lcm_compaction_record\",\n  \"continuity_audit_generate\",\n  \"continuity_incident_open\",\n  \"continuity_incident_close\",\n  \"continuity_incident_list\",\n  \"continuity_loop_add_or_update\",\n  \"continuity_loop_review\",\n  \"identity_anchor_get\",\n  \"identity_anchor_update\",\n  \"memory_identity\",\n  \"work_task\",\n  \"work_project\",\n  \"work_board\",\n  \"shared_context_write_output\",\n  \"shared_feedback_record\",\n  \"shared_priorities_append\",\n  \"relay_mission_append\",\n  \"relay_mission_read\",\n  \"shared_context_cross_signals_run\",\n  \"shared_context_curate_daily\",\n  \"compounding_weekly_synthesize\",\n  \"compounding_promote_candidate\",\n  \"compression_guidelines_optimize\",\n  \"compression_guidelines_activate\",\n  \"memory_profile\",\n  \"memory_entities_list\",\n  \"memory_questions\",\n  \"memory_last_recall\",\n  \"memory_intent_debug\",\n  \"memory_qmd_debug\",\n  \"memory_graph_explain\",\n  \"graph_snapshot\",\n  \"memory_feedback\",\n  \"memory_promote\",\n  \"memory_outcome\",\n  \"memory_action_apply\",\n  \"context_checkpoint\",\n  \"briefing\",\n  \"review_list\",\n  \"review_resolve\",\n  \"contradiction_scan_run\",\n  \"preference_drift_scan\",\n  \"memory_summarize_hourly\",\n  \"conversation_index_update\",\n  \"profiling_report\",\n  \"graph_edge_decay_run\",\n  \"live_connectors_run\",\n  \"peer_list\",\n  \"peer_get\",\n  \"peer_set\",\n  \"peer_delete\",\n  \"peer_profile_get\",\n  \"peer_forget\",\n  \"console_state\",\n  \"dreams_status\",\n  \"dreams_run\",\n  \"support_passport_memory_preview\",\n  \"support_passport_cards_list\",\n  \"support_passport_draft_create\",\n  \"support_passport_drafts_generate\",\n  \"support_passport_card_replace\",\n  \"support_passport_card_approve\",\n  \"support_passport_card_reject\",\n  \"support_passport_card_withdraw\",\n  \"support_passport_grant_create\",\n  \"support_passport_grants_list\",\n  \"support_passport_grant_revoke\",\n  \"support_passport_grant_read\",\n  \"support_passport_grant_ask\",\n  // HTTP-only routes (no direct MCP tool equivalent).\n  \"adapters_status\",\n  \"offline_sync_snapshot\",\n  \"offline_sync_snapshot_stream\",\n  \"offline_sync_files\",\n  \"offline_sync_file_content\",\n  \"offline_sync_apply_file_content\",\n  \"offline_sync_apply\",\n  \"lcm_status\",\n  \"memory_list\",\n  \"recall_timings\",\n  \"entity_list\",\n  \"maintenance_status\",\n  \"quality_status\",\n  \"trust_zones_status\",\n  \"trust_zones_records\",\n  \"review_disposition\",\n  \"review_deck_list\",\n  \"review_deck_action\",\n  \"review_deck_undo\",\n  \"trust_zones_promote\",\n  \"trust_zones_demo_seed\",\n  \"citations_observed\",\n  \"contradiction_detail\",\n  \"graph_events\",\n  // Chat surface — conversational memory inspection/correction (issue #1583).\n  \"chat_message\",\n  \"chat_events\",\n] as const;\n\n/**\n * Canonical operation ids. One id is shared by the MCP tool, the HTTP route,\n * and the CLI command that expose the same operation. Derived from\n * {@link OPERATION_NAMES} (single source of truth) so the runtime catalog\n * used for token-capability validation cannot drift from the type. The\n * fitness test in `access-surface-catalog.test.ts` treats the registered set\n * as the migration state.\n */\nexport type OperationName = (typeof OPERATION_NAMES)[number];\n\nconst IMPLICIT_HTTP_NAMESPACE_OPERATIONS = new Set<OperationName>([\n  \"offline_sync_snapshot\",\n  \"offline_sync_snapshot_stream\",\n  \"memory_list\",\n  \"entity_list\",\n  \"maintenance_status\",\n  \"quality_status\",\n  \"trust_zones_status\",\n  \"graph_events\",\n  \"citations_observed\",\n]);\n\nconst PRINCIPAL_NAMESPACE_OPERATIONS = new Set<OperationName>([\n  \"support_passport_memory_preview\",\n  \"support_passport_cards_list\",\n  \"support_passport_draft_create\",\n  \"support_passport_drafts_generate\",\n  \"support_passport_card_replace\",\n  \"support_passport_card_approve\",\n  \"support_passport_card_reject\",\n  \"support_passport_card_withdraw\",\n  \"support_passport_grant_create\",\n  \"support_passport_grants_list\",\n  \"support_passport_grant_revoke\",\n]);\n\n// ---------------------------------------------------------------------------\n// Operation context — what every handler receives\n// ---------------------------------------------------------------------------\n\n/**\n * Per-call context. `service` is the facade the handler delegates to; the\n * boundary never reaches past it. `authenticatedPrincipal` is resolved by\n * the SURFACE (MCP header / HTTP identity / CLI flag) before the boundary\n * runs, so handlers stay principal-source-agnostic. `hooks` carries\n * transport-level callbacks (e.g. HTTP write-quota enforcement) that must\n * fire atomically inside the service call; surfaces that have no such hook\n * leave it undefined.\n */\nexport interface OperationContext {\n  readonly service: EngramAccessService;\n  readonly authenticatedPrincipal?: string;\n  readonly operatorPrincipal?: string;\n  /** Per-request cancellation supplied by transports that own a request lifecycle. */\n  readonly abortSignal?: AbortSignal;\n  /** Server-resolved connector identity (Phase 1 provenance). Set by the HTTP auth boundary from the matched token's connector; flows to write handlers so frontmatter records which connector submitted the memory. Client-supplied values are always overridden. */\n  readonly sourceConnector?: string;\n  /**\n   * The PRE-validation raw envelope exactly as the transport supplied it\n   * (issue #2829). Handlers use it to retain input spellings the schema's\n   * transforms canonicalize — e.g. the memory-store category aliases — so\n   * diagnostics can name what the caller actually sent. Never trust it for\n   * behavior; only the parsed `input` is validated.\n   */\n  readonly rawInput?: unknown;\n  readonly hooks?: OperationHooks;\n}\n\n/**\n * Transport-level callbacks a handler forwards into the service call. Kept\n * narrow on purpose: the boundary owns validation + dispatch shape, not\n * transport policy. Add fields here only when a surface genuinely needs a\n * callback the service itself consumes.\n */\nexport interface OperationHooks {\n  /** HTTP write-quota gate; throws to reject the write when exhausted. */\n  readonly enforceWriteQuota?: () => void | Promise<void>;\n  /** Commit-boundary accounting for writes that can fail after durability. */\n  readonly recordWriteCommit?: () => void;\n}\n\n// ---------------------------------------------------------------------------\n// Operation spec + bound operation\n// ---------------------------------------------------------------------------\n\nexport interface OperationSpec<In, Out> {\n  /** Canonical operation id; matches an {@link OperationName}. */\n  readonly name: OperationName;\n  readonly description: string;\n  /**\n   * Zod schema validating the raw request envelope. Input type may differ\n   * from the output `In` — schemas that canonicalize during parsing (issue\n   * #2829 category aliases) are first-class, declared truthfully instead of\n   * cast into an input-equals-output shape.\n   */\n  readonly schema: z.ZodType<In, unknown>;\n  /** Handler invoked with the parsed input; throws EngramAccessInputError for domain faults. */\n  readonly handler: (input: In, ctx: OperationContext) => Promise<Out>;\n  /**\n   * Marks an operation as inherently FLEET-WIDE / global — it runs across ALL\n   * namespaces (or against a single non-namespaced global layer) and carries no\n   * `namespace` argument, so the MCP `tools/call` effective-namespace chokepoint\n   * never applies. When set, {@link defineOperation}'s run wrapper rejects any\n   * namespace-SCOPED token (fail closed) via assertFleetWideOperationAllowed\n   * BEFORE the handler — no side effect on denial. Unrestricted/legacy tokens\n   * (cron, internal callers, no capability record) are unaffected (issue #1850).\n   */\n  readonly fleetWide?: boolean;\n  /**\n   * Alternate op allow-list: when set, the token may invoke this operation if\n   * its ops allow-list permits ANY of these ops (instead of the default rule\n   * that requires the op's own {@link name}). Lets a read-only diagnostic be\n   * granted by the write ops it diagnoses — e.g. `namespace_writable` is\n   * runnable by any token permitted to `observe`/`memory_store`, so a token\n   * minted before the diagnostic op existed can still call it. Unrestricted /\n   * legacy tokens (no ops axis) are unaffected. Keeps the boundary and any HTTP\n   * transport for the same op enforcing ONE policy.\n   */\n  readonly allowedByOps?: readonly OperationName[];\n}\n\nexport interface BoundOperation<In = unknown, Out = unknown> {\n  readonly spec: OperationSpec<In, Out>;\n  /** Validate the raw envelope, then invoke the handler. Throws EngramAccessInputError on any validation failure. */\n  readonly run: (rawInput: unknown, ctx: OperationContext) => Promise<Out>;\n}\n\n// ---------------------------------------------------------------------------\n// Shared normalizers the boundary owns (rules 17, 28, 36, 48, 51)\n// ---------------------------------------------------------------------------\n\n/**\n * Coerce boolean-like strings at the edge (rule 36). Accepts actual booleans\n * and the string spellings clients send (\"true\"/\"false\"/\"1\"/\"0\"/\"yes\"/\"no\"/\n * \"on\"/\"off\", case-insensitive). Rejects anything else loudly — `Boolean(\"false\")`\n * would silently be `true`, which is the bug rule 36 exists to prevent.\n *\n * `undefined`/`null`/`\"\"` → `undefined`, so callers can keep treating an\n * absent flag as \"use the default\" without a separate presence check.\n */\nexport function coerceBooleanLike(value: unknown): boolean | undefined {\n  if (value === undefined || value === null || value === \"\") return undefined;\n  if (typeof value === \"boolean\") return value;\n  if (typeof value === \"string\") {\n    const lower = value.trim().toLowerCase();\n    if (lower === \"true\" || lower === \"1\" || lower === \"yes\" || lower === \"on\") return true;\n    if (lower === \"false\" || lower === \"0\" || lower === \"no\" || lower === \"off\") return false;\n  }\n  throw new EngramAccessInputError(\n    `expected a boolean-like value (true|false|1|0|yes|no|on|off); got ${JSON.stringify(value)}`,\n  );\n}\n\n/**\n * Coerce + validate a positive integer from a numeric string or number\n * (rule 28). Loosely-typed MCP/CLI clients send `\"5\"`; `typeof saved === \"number\"`\n * on read-back would reject it later, so we coerce at the edge and reject\n * booleans/objects loudly (`Number(true) === 1` would silently pass otherwise).\n *\n * `undefined`/`null`/`\"\"` → `undefined`.\n */\nexport function coercePositiveInteger(value: unknown, label: string): number | undefined {\n  if (value === undefined || value === null || value === \"\") return undefined;\n  if (typeof value === \"number\") {\n    if (!Number.isFinite(value) || value <= 0 || !Number.isInteger(value)) {\n      throw new EngramAccessInputError(`${label} expects a positive integer; got ${JSON.stringify(value)}`);\n    }\n    return value;\n  }\n  if (typeof value === \"string\") {\n    const trimmed = value.trim();\n    if (!/^[+-]?\\d+$/.test(trimmed)) {\n      throw new EngramAccessInputError(`${label} expects a positive integer; got ${JSON.stringify(value)}`);\n    }\n    const parsed = Number(trimmed);\n    if (!Number.isSafeInteger(parsed) || parsed <= 0) {\n      throw new EngramAccessInputError(`${label} expects a positive integer; got ${JSON.stringify(value)}`);\n    }\n    return parsed;\n  }\n  throw new EngramAccessInputError(`${label} expects a positive integer; got ${JSON.stringify(value)}`);\n}\n\n/**\n * Expand `~` in a path-shaped input (rule 17). Node `fs` does NOT expand `~`;\n * ad-hoc regex drifts. `undefined`/`null`/`\"\"` → `undefined`.\n */\nexport function normalizeOptionalPath(value: unknown): string | undefined {\n  if (value === undefined || value === null || value === \"\") return undefined;\n  if (typeof value !== \"string\") {\n    throw new EngramAccessInputError(`expected a path string; got ${JSON.stringify(value)}`);\n  }\n  return expandTildePath(value);\n}\n\n// ---------------------------------------------------------------------------\n// Error formatting — rule 51: list valid options, never silently default\n// ---------------------------------------------------------------------------\n\n/**\n * Turn a zod failure into an {@link EngramAccessInputError} whose message\n * names the offending field and — for enum/union issues — lists the valid\n * options, so the caller can correct rather than guess (rule 51).\n */\nexport function formatZodIssues(error: z.ZodError): string {\n  const parts: string[] = [];\n  for (const issue of error.issues) {\n    // Collapse array-index paths (e.g. [\"currentContextScopes\", 1]) to\n    // the field name so the message reads \"field: must be ...\" not\n    // \"field.1: must be ...\".\n    const hasNumeric = issue.path.some((p) => typeof p === \"number\");\n    const path = hasNumeric\n      ? issue.path.filter((p) => typeof p === \"string\").join(\".\") || \"(root)\"\n      : issue.path.length > 0 ? issue.path.join(\".\") : \"(root)\";\n    const options = enumOptionsFromIssue(issue);\n    const suffix = options ? `. Valid: ${options.join(\", \")}` : \"\";\n    parts.push(`${path}: ${humanReadableIssueMessage(issue, path, hasNumeric)}${suffix}`);\n  }\n  return parts.length > 0\n    ? `request validation failed: ${parts.join(\"; \")}`\n    : \"request validation failed\";\n}\n\nfunction enumOptionsFromIssue(issue: z.core.$ZodIssue): readonly string[] | undefined {\n  // zod 4 exposes accepted enum values on invalid_value issues as `values`\n  // (the v3 `options` spelling is kept as a fallback). Reading them here\n  // keeps \"list valid options\" in ONE place rather than per handler.\n  if (issue.code !== \"invalid_value\") return undefined;\n  const rawValues = \"values\" in issue ? issue.values : undefined;\n  return Array.isArray(rawValues) ? rawValues.map((opt) => String(opt)) : undefined;\n}\n\n/**\n * Human-readable \"must be a <type>\" message for generic type mismatches\n * (rule 51). zod 4 removed parse-time error maps, so the boundary applies\n * this post-parse in formatZodIssues instead — same messages, one place.\n * The caller supplies the collapsed path label and its numeric-segment\n * verdict so this helper runs no representation checks of its own.\n */\nfunction humanReadableIssueMessage(issue: z.core.$ZodIssue, pathLabel: string, hasNumericPath: boolean): string {\n  if (issue.code !== \"invalid_type\") return issue.message;\n  const expected = issue.expected;\n  // zod 4 issues carry no `received` field; its message ends \"received undefined\"\n  // for an absent value, which is a missing field, not a type mismatch.\n  if (issue.message.endsWith(\"received undefined\")) return issue.message;\n  if (hasNumericPath && expected) {\n    return `${pathLabel} must be an array of ${expected}s`;\n  }\n  const fieldName = issue.path.length > 0 ? String(issue.path[issue.path.length - 1]) : \"value\";\n  switch (expected) {\n    case \"string\": return `${fieldName} must be a string`;\n    case \"boolean\": return `${fieldName} must be a boolean`;\n    case \"number\": return `${fieldName} must be a number`;\n    case \"array\": return `${fieldName} must be an array`;\n    case \"object\": return `${fieldName} must be an object`;\n    default: return issue.message;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Registry\n// ---------------------------------------------------------------------------\n\nconst registry = new Map<OperationName, BoundOperation>();\n\n/**\n * Register an operation. Throws if the name is already registered — duplicate\n * registration is a programming error, not a runtime input fault, so it throws\n * a plain Error (not the input-error class surfaces translate for clients).\n */\nexport function defineOperation<In, Out>(spec: OperationSpec<In, Out>): BoundOperation<In, Out> {\n  if (registry.has(spec.name)) {\n    throw new Error(`access-boundary: operation already registered: ${spec.name}`);\n  }\n  const bound: BoundOperation<In, Out> = {\n    spec,\n    run: async (rawInput, ctx) => {\n      const parseResult = spec.schema.safeParse(rawInput);\n      if (!parseResult.success) {\n        throw new EngramAccessInputError(formatZodIssues(parseResult.error));\n      }\n      assertOperationAuthorizationAllowed(tokenCapabilityStore.getStore(), spec);\n      // Post-parse namespace re-check (issue #3225 B1): the transports authorize\n      // the RAW namespace before preprocessing. Re-check the PARSED value so a\n      // namespace that only appears after validation cannot bypass the token\n      // allow-list. Absent namespaces keep the transport check; no default is\n      // invented here.\n      if (operationRequiresAuthorizedNamespace(spec.name)) {\n        // SAFETY: namespace-bearing schemas parse `namespace` as a non-empty\n        // string, an explicit null (transport null-for-absent idiom), or\n        // undefined; falsy spellings mean absent and keep the transport check.\n        const parsedNamespace = (parseResult.data as { namespace?: string | null }).namespace;\n        if (parsedNamespace) {\n          assertNamespaceAllowed(tokenCapabilityStore.getStore(), parsedNamespace);\n        }\n      }\n      return spec.handler(parseResult.data, { ...ctx, rawInput });\n    },\n  };\n  // Store under the canonical name; the cast is safe because In/Out are\n  // erased at the registry boundary and recovered by callers via getOperation.\n  registry.set(spec.name, bound as unknown as BoundOperation);\n  return bound;\n}\n\n/** Look up a registered operation by canonical name. */\nexport function getOperation(name: OperationName): BoundOperation | undefined {\n  return registry.get(name);\n}\n\n/** Whether a probe must authorize an operation's effective namespace. */\nexport function operationRequiresAuthorizedNamespace(name: OperationName): boolean {\n  if (name === \"namespace_writable\") return false;\n  if (IMPLICIT_HTTP_NAMESPACE_OPERATIONS.has(name)) return true;\n  let schema: unknown = registry.get(name)?.spec.schema;\n  // zod 4 has no ZodEffects. Transforms and preprocessors wrap as pipes with\n  // the base schema on the side opposite the ZodTransform. Unwrap until the\n  // base object appears — one unwrap left suggestion_submit looking\n  // namespace-free after the category transform, so the loop stays.\n  while (schema instanceof z.ZodType && !(schema instanceof z.ZodObject)) {\n    // SAFETY: pipe wrappers expose their two sides as `in` / `out`.\n    const wrapper = schema as { in?: unknown; out?: unknown };\n    const sides = [wrapper.in, wrapper.out].filter(\n      (side) => side instanceof z.ZodType && !(side instanceof z.ZodTransform),\n    );\n    if (sides.length !== 1) break;\n    schema = sides[0];\n  }\n  return schema instanceof z.ZodObject && Object.hasOwn(schema.shape, \"namespace\");\n}\n\n/** Whether an operation resolves its namespace from the authenticated principal. */\nexport function operationUsesPrincipalNamespace(name: OperationName): boolean {\n  return PRINCIPAL_NAMESPACE_OPERATIONS.has(name);\n}\n\n/** All registered operation names. */\nexport function listRegisteredOperations(): readonly OperationName[] {\n  return [...registry.keys()];\n}\n\n/** Test-only: clear the registry so pilot definitions can be re-registered. */\nexport function __resetRegistryForTest(): void {\n  registry.clear();\n}\n"],"mappings":";;;;;;;;;;;;;AAiBA,SAAS,SAAS;AAwBX,IAAM,kBAAkB;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA;AAAA;AAAA,EAIA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAEA;AAAA,EACA;AACF;AAYA,IAAM,qCAAqC,oBAAI,IAAmB;AAAA,EAChE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,IAAM,iCAAiC,oBAAI,IAAmB;AAAA,EAC5D;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AA0GM,SAAS,kBAAkB,OAAqC;AACrE,MAAI,UAAU,UAAa,UAAU,QAAQ,UAAU,GAAI,QAAO;AAClE,MAAI,OAAO,UAAU,UAAW,QAAO;AACvC,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,QAAQ,MAAM,KAAK,EAAE,YAAY;AACvC,QAAI,UAAU,UAAU,UAAU,OAAO,UAAU,SAAS,UAAU,KAAM,QAAO;AACnF,QAAI,UAAU,WAAW,UAAU,OAAO,UAAU,QAAQ,UAAU,MAAO,QAAO;AAAA,EACtF;AACA,QAAM,IAAI;AAAA,IACR,qEAAqE,KAAK,UAAU,KAAK,CAAC;AAAA,EAC5F;AACF;AAUO,SAAS,sBAAsB,OAAgB,OAAmC;AACvF,MAAI,UAAU,UAAa,UAAU,QAAQ,UAAU,GAAI,QAAO;AAClE,MAAI,OAAO,UAAU,UAAU;AAC7B,QAAI,CAAC,OAAO,SAAS,KAAK,KAAK,SAAS,KAAK,CAAC,OAAO,UAAU,KAAK,GAAG;AACrE,YAAM,IAAI,uBAAuB,GAAG,KAAK,oCAAoC,KAAK,UAAU,KAAK,CAAC,EAAE;AAAA,IACtG;AACA,WAAO;AAAA,EACT;AACA,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,UAAU,MAAM,KAAK;AAC3B,QAAI,CAAC,aAAa,KAAK,OAAO,GAAG;AAC/B,YAAM,IAAI,uBAAuB,GAAG,KAAK,oCAAoC,KAAK,UAAU,KAAK,CAAC,EAAE;AAAA,IACtG;AACA,UAAM,SAAS,OAAO,OAAO;AAC7B,QAAI,CAAC,OAAO,cAAc,MAAM,KAAK,UAAU,GAAG;AAChD,YAAM,IAAI,uBAAuB,GAAG,KAAK,oCAAoC,KAAK,UAAU,KAAK,CAAC,EAAE;AAAA,IACtG;AACA,WAAO;AAAA,EACT;AACA,QAAM,IAAI,uBAAuB,GAAG,KAAK,oCAAoC,KAAK,UAAU,KAAK,CAAC,EAAE;AACtG;AAMO,SAAS,sBAAsB,OAAoC;AACxE,MAAI,UAAU,UAAa,UAAU,QAAQ,UAAU,GAAI,QAAO;AAClE,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,IAAI,uBAAuB,+BAA+B,KAAK,UAAU,KAAK,CAAC,EAAE;AAAA,EACzF;AACA,SAAO,gBAAgB,KAAK;AAC9B;AAWO,SAAS,gBAAgB,OAA2B;AACzD,QAAM,QAAkB,CAAC;AACzB,aAAW,SAAS,MAAM,QAAQ;AAIhC,UAAM,aAAa,MAAM,KAAK,KAAK,CAAC,MAAM,OAAO,MAAM,QAAQ;AAC/D,UAAM,OAAO,aACT,MAAM,KAAK,OAAO,CAAC,MAAM,OAAO,MAAM,QAAQ,EAAE,KAAK,GAAG,KAAK,WAC7D,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,KAAK,GAAG,IAAI;AACnD,UAAM,UAAU,qBAAqB,KAAK;AAC1C,UAAM,SAAS,UAAU,YAAY,QAAQ,KAAK,IAAI,CAAC,KAAK;AAC5D,UAAM,KAAK,GAAG,IAAI,KAAK,0BAA0B,OAAO,MAAM,UAAU,CAAC,GAAG,MAAM,EAAE;AAAA,EACtF;AACA,SAAO,MAAM,SAAS,IAClB,8BAA8B,MAAM,KAAK,IAAI,CAAC,KAC9C;AACN;AAEA,SAAS,qBAAqB,OAAwD;AAIpF,MAAI,MAAM,SAAS,gBAAiB,QAAO;AAC3C,QAAM,YAAY,YAAY,QAAQ,MAAM,SAAS;AACrD,SAAO,MAAM,QAAQ,SAAS,IAAI,UAAU,IAAI,CAAC,QAAQ,OAAO,GAAG,CAAC,IAAI;AAC1E;AASA,SAAS,0BAA0B,OAAyB,WAAmB,gBAAiC;AAC9G,MAAI,MAAM,SAAS,eAAgB,QAAO,MAAM;AAChD,QAAM,WAAW,MAAM;AAGvB,MAAI,MAAM,QAAQ,SAAS,oBAAoB,EAAG,QAAO,MAAM;AAC/D,MAAI,kBAAkB,UAAU;AAC9B,WAAO,GAAG,SAAS,wBAAwB,QAAQ;AAAA,EACrD;AACA,QAAM,YAAY,MAAM,KAAK,SAAS,IAAI,OAAO,MAAM,KAAK,MAAM,KAAK,SAAS,CAAC,CAAC,IAAI;AACtF,UAAQ,UAAU;AAAA,IAChB,KAAK;AAAU,aAAO,GAAG,SAAS;AAAA,IAClC,KAAK;AAAW,aAAO,GAAG,SAAS;AAAA,IACnC,KAAK;AAAU,aAAO,GAAG,SAAS;AAAA,IAClC,KAAK;AAAS,aAAO,GAAG,SAAS;AAAA,IACjC,KAAK;AAAU,aAAO,GAAG,SAAS;AAAA,IAClC;AAAS,aAAO,MAAM;AAAA,EACxB;AACF;AAMA,IAAM,WAAW,oBAAI,IAAmC;AAOjD,SAAS,gBAAyB,MAAuD;AAC9F,MAAI,SAAS,IAAI,KAAK,IAAI,GAAG;AAC3B,UAAM,IAAI,MAAM,kDAAkD,KAAK,IAAI,EAAE;AAAA,EAC/E;AACA,QAAM,QAAiC;AAAA,IACrC;AAAA,IACA,KAAK,OAAO,UAAU,QAAQ;AAC5B,YAAM,cAAc,KAAK,OAAO,UAAU,QAAQ;AAClD,UAAI,CAAC,YAAY,SAAS;AACxB,cAAM,IAAI,uBAAuB,gBAAgB,YAAY,KAAK,CAAC;AAAA,MACrE;AACA,0CAAoC,qBAAqB,SAAS,GAAG,IAAI;AAMzE,UAAI,qCAAqC,KAAK,IAAI,GAAG;AAInD,cAAM,kBAAmB,YAAY,KAAuC;AAC5E,YAAI,iBAAiB;AACnB,iCAAuB,qBAAqB,SAAS,GAAG,eAAe;AAAA,QACzE;AAAA,MACF;AACA,aAAO,KAAK,QAAQ,YAAY,MAAM,EAAE,GAAG,KAAK,SAAS,CAAC;AAAA,IAC5D;AAAA,EACF;AAGA,WAAS,IAAI,KAAK,MAAM,KAAkC;AAC1D,SAAO;AACT;AAGO,SAAS,aAAa,MAAiD;AAC5E,SAAO,SAAS,IAAI,IAAI;AAC1B;AAGO,SAAS,qCAAqC,MAA8B;AACjF,MAAI,SAAS,qBAAsB,QAAO;AAC1C,MAAI,mCAAmC,IAAI,IAAI,EAAG,QAAO;AACzD,MAAI,SAAkB,SAAS,IAAI,IAAI,GAAG,KAAK;AAK/C,SAAO,kBAAkB,EAAE,WAAW,EAAE,kBAAkB,EAAE,YAAY;AAEtE,UAAM,UAAU;AAChB,UAAM,QAAQ,CAAC,QAAQ,IAAI,QAAQ,GAAG,EAAE;AAAA,MACtC,CAAC,SAAS,gBAAgB,EAAE,WAAW,EAAE,gBAAgB,EAAE;AAAA,IAC7D;AACA,QAAI,MAAM,WAAW,EAAG;AACxB,aAAS,MAAM,CAAC;AAAA,EAClB;AACA,SAAO,kBAAkB,EAAE,aAAa,OAAO,OAAO,OAAO,OAAO,WAAW;AACjF;AAGO,SAAS,gCAAgC,MAA8B;AAC5E,SAAO,+BAA+B,IAAI,IAAI;AAChD;AAGO,SAAS,2BAAqD;AACnE,SAAO,CAAC,GAAG,SAAS,KAAK,CAAC;AAC5B;AAGO,SAAS,yBAA+B;AAC7C,WAAS,MAAM;AACjB;","names":[]}