@remnic/core 9.4.2 → 9.5.0

package/dist/bootstrap.d.ts

@@ -1,5 +1,5 @@
-import { P as PluginConfig } from './types-ljkd82rn.js';
-import { O as Orchestrator } from './orchestrator-B2Y28Z9t.js';
+import { P as PluginConfig } from './types-C7HUgOuA.js';
+import { O as Orchestrator } from './orchestrator-Dh3WSW_O.js';
 import './types-gb_SNtjR.js';
 import './message-parts/index.js';
 import './briefing.js';
@@ -23,7 +23,7 @@ import './session-integrity.js';
 import './summarizer.js';
 import './orchestration/maintenance.js';
 import './namespaces/search.js';
-import './catalog-BxWokdC2.js';
+import './catalog-DoH2b0OR.js';
 import './recall-state.js';
 import './compounding/engine.js';
 import './shared-context/manager.js';
@@ -33,7 +33,7 @@ import './utility-runtime.js';
 import './tier-routing.js';
 import './lifecycle.js';
 import './orchestration/compression-guideline-coordinator.js';
-import './semantic-consolidation-BDVIbLRw.js';
+import './semantic-consolidation-Dof1865o.js';
 import './connectors/codex-materialize.js';
 import './logger.js';
 import './embedding-fallback.js';

package/dist/briefing.d.ts

@@ -1,5 +1,5 @@
 import { StorageManager } from './storage.js';
-import { i as BriefingSections, j as BriefingFollowup, k as BriefingFocus, C as CalendarSource, l as CalendarEvent, M as MemoryFile, m as BriefingActiveThread, n as BriefingResult, E as EntityFile, o as BriefingRecentEntity } from './types-ljkd82rn.js';
+import { h as BriefingSections, i as BriefingFollowup, j as BriefingFocus, C as CalendarSource, k as CalendarEvent, M as MemoryFile, l as BriefingActiveThread, m as BriefingResult, E as EntityFile, n as BriefingRecentEntity } from './types-C7HUgOuA.js';
 import './page-versioning.js';
 import './consolidation-operator.js';
 import './memory-projection-store.js';

package/dist/briefing.js

@@ -17,25 +17,25 @@ import {
   renderBriefingMarkdown,
   resolveBriefingSaveDir,
   validateBriefingFormat
-} from "./chunk-DGYCWCQ7.js";
-import "./chunk-M7GGMGMZ.js";
+} from "./chunk-DZSAXE3T.js";
+import "./chunk-UDCDGP6A.js";
 import "./chunk-M7XQSUBB.js";
 import "./chunk-L2B3EE7B.js";
 import "./chunk-5UZXUTVO.js";
 import "./chunk-5GPPACXK.js";
 import "./chunk-EHK6KZHK.js";
 import "./chunk-6CIAGZ6X.js";
-import "./chunk-SVOZFLIQ.js";
-import "./chunk-LTJAMRGI.js";
 import "./chunk-J6A3CX5N.js";
 import "./chunk-4KJLYTLS.js";
+import "./chunk-SVOZFLIQ.js";
+import "./chunk-LTJAMRGI.js";
 import "./chunk-JS2HKKOK.js";
+import "./chunk-RHOZ5LLO.js";
+import "./chunk-RL6NEVXT.js";
 import "./chunk-AWJ2FHCF.js";
 import "./chunk-42JKGUFJ.js";
 import "./chunk-RULE4VG5.js";
 import "./chunk-SCU65EZI.js";
-import "./chunk-RHOZ5LLO.js";
-import "./chunk-RL6NEVXT.js";
 import "./chunk-DM2T26WE.js";
 import "./chunk-LDXUBPMO.js";
 import "./chunk-MNUHL34L.js";
@@ -51,8 +51,8 @@ import "./chunk-RGMVMVMF.js";
 import "./chunk-N7RWREIQ.js";
 import "./chunk-OEHCMALU.js";
 import "./chunk-PHK3HARR.js";
-import "./chunk-5GKPFL3S.js";
 import "./chunk-4DJQYKMN.js";
+import "./chunk-5GKPFL3S.js";
 import "./chunk-EYIEWJNI.js";
 import "./chunk-JUC24CTX.js";
 import "./chunk-37CTGERM.js";

package/dist/buffer-surprise-report.d.ts

@@ -1,4 +1,4 @@
-import { X as BufferSurpriseEvent } from './types-ljkd82rn.js';
+import { X as BufferSurpriseEvent } from './types-C7HUgOuA.js';
 import './types-gb_SNtjR.js';
 import './message-parts/index.js';
 

package/dist/buffer.d.ts

@@ -1,5 +1,5 @@
 import { StorageManager } from './storage.js';
-import { P as PluginConfig, p as BufferTurn } from './types-ljkd82rn.js';
+import { P as PluginConfig, o as BufferTurn } from './types-C7HUgOuA.js';
 import './page-versioning.js';
 import './consolidation-operator.js';
 import './memory-projection-store.js';

package/dist/calibration.d.ts

@@ -1,5 +1,5 @@
 import { FallbackLlmClient } from './fallback-llm.js';
-import { G as GatewayConfig, s as AgentPersonaModelConfig } from './types-ljkd82rn.js';
+import { G as GatewayConfig, r as AgentPersonaModelConfig } from './types-C7HUgOuA.js';
 import './resolve-provider-secret.js';
 import './types-gb_SNtjR.js';
 import './message-parts/index.js';

package/dist/capabilities.d.ts

@@ -1,4 +1,4 @@
-import { P as PluginConfig } from './types-ljkd82rn.js';
+import { P as PluginConfig } from './types-C7HUgOuA.js';
 import './types-gb_SNtjR.js';
 import './message-parts/index.js';
 

package/dist/{capsule-crypto-CZJSLEFG.js → capsule-crypto-RAARDY3M.js}

@@ -3,7 +3,7 @@ import {
   decryptCapsuleFileInMemory,
   encryptCapsuleFile,
   isEncryptedCapsuleFile
-} from "./chunk-437S3G37.js";
+} from "./chunk-LNQUAJNC.js";
 import "./chunk-GWTFLF2P.js";
 import "./chunk-UKJAGEXH.js";
 import "./chunk-FP2373TW.js";
@@ -15,4 +15,4 @@ export {
   encryptCapsuleFile,
   isEncryptedCapsuleFile
 };
-//# sourceMappingURL=capsule-crypto-CZJSLEFG.js.map
+//# sourceMappingURL=capsule-crypto-RAARDY3M.js.map

package/dist/capsule-crypto-RAARDY3M.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/{catalog-BxWokdC2.d.ts → catalog-DoH2b0OR.d.ts}

@@ -1,4 +1,4 @@
-import { P as PluginConfig } from './types-ljkd82rn.js';
+import { P as PluginConfig } from './types-C7HUgOuA.js';
 
 /**
  * Rebuildable namespace catalog (issue #1499).

package/dist/causal-behavior.d.ts

@@ -2,7 +2,7 @@ import { CausalChainIndex } from './causal-chain.js';
 import { ConsolidatedPreference } from './compounding/preference-consolidator.js';
 import './causal-trajectory.js';
 import './objective-state.js';
-import './types-ljkd82rn.js';
+import './types-C7HUgOuA.js';
 import './types-gb_SNtjR.js';
 import './message-parts/index.js';
 import './lcm/engine.js';

package/dist/causal-behavior.js

@@ -1,17 +1,17 @@
 import {
   readChainIndex,
   resolveChainsDir
-} from "./chunk-OUMTBFSQ.js";
+} from "./chunk-NKCPUHCI.js";
 import "./chunk-2A3OXAP2.js";
 import {
   resolveCausalTrajectoryStoreDir
-} from "./chunk-CXLNZXG5.js";
-import {
-  log
-} from "./chunk-37CTGERM.js";
+} from "./chunk-7XGSIUP5.js";
 import {
   normalizeRecallTokens
 } from "./chunk-ZBJMUXZH.js";
+import {
+  log
+} from "./chunk-37CTGERM.js";
 import {
   isRecord
 } from "./chunk-A2IYSXDQ.js";

package/dist/causal-chain.js

@@ -6,11 +6,11 @@ import {
   stitchCausalChain,
   validateCausalEdge,
   writeChainIndex
-} from "./chunk-OUMTBFSQ.js";
+} from "./chunk-NKCPUHCI.js";
 import "./chunk-2A3OXAP2.js";
-import "./chunk-CXLNZXG5.js";
-import "./chunk-37CTGERM.js";
+import "./chunk-7XGSIUP5.js";
 import "./chunk-ZBJMUXZH.js";
+import "./chunk-37CTGERM.js";
 import "./chunk-A2IYSXDQ.js";
 import "./chunk-LPSF4OQH.js";
 import "./chunk-PZ5AY32C.js";

package/dist/causal-consolidation.d.ts

@@ -1,4 +1,4 @@
-import { G as GatewayConfig, s as AgentPersonaModelConfig, P as PluginConfig, M as MemoryFile } from './types-ljkd82rn.js';
+import { G as GatewayConfig, r as AgentPersonaModelConfig, P as PluginConfig, M as MemoryFile } from './types-C7HUgOuA.js';
 import { RolloutSummaryInput, MaterializeResult } from './connectors/codex-materialize.js';
 import './types-gb_SNtjR.js';
 import './message-parts/index.js';

package/dist/causal-consolidation.js

@@ -1,38 +1,39 @@
 import {
   readChainIndex,
   resolveChainsDir
-} from "./chunk-OUMTBFSQ.js";
+} from "./chunk-NKCPUHCI.js";
 import {
   buildExtensionsBlockForConsolidation
-} from "./chunk-EPGWWCZF.js";
+} from "./chunk-UBGAOYBP.js";
 import {
   runPostConsolidationMaterialize
-} from "./chunk-KCJ5H6XQ.js";
+} from "./chunk-ODSYJXDU.js";
 import "./chunk-QLULYKWZ.js";
 import "./chunk-JLNBQWZ2.js";
 import "./chunk-3UXOZBHV.js";
 import "./chunk-2A3OXAP2.js";
 import {
   resolveCausalTrajectoryStoreDir
-} from "./chunk-CXLNZXG5.js";
-import "./chunk-M7GGMGMZ.js";
+} from "./chunk-7XGSIUP5.js";
+import "./chunk-ZBJMUXZH.js";
+import "./chunk-UDCDGP6A.js";
 import "./chunk-M7XQSUBB.js";
 import "./chunk-L2B3EE7B.js";
 import "./chunk-5UZXUTVO.js";
 import "./chunk-5GPPACXK.js";
 import "./chunk-EHK6KZHK.js";
 import "./chunk-6CIAGZ6X.js";
-import "./chunk-SVOZFLIQ.js";
-import "./chunk-LTJAMRGI.js";
 import "./chunk-J6A3CX5N.js";
 import "./chunk-4KJLYTLS.js";
+import "./chunk-SVOZFLIQ.js";
+import "./chunk-LTJAMRGI.js";
 import "./chunk-JS2HKKOK.js";
+import "./chunk-RHOZ5LLO.js";
+import "./chunk-RL6NEVXT.js";
 import "./chunk-AWJ2FHCF.js";
 import "./chunk-42JKGUFJ.js";
 import "./chunk-RULE4VG5.js";
 import "./chunk-SCU65EZI.js";
-import "./chunk-RHOZ5LLO.js";
-import "./chunk-RL6NEVXT.js";
 import "./chunk-DM2T26WE.js";
 import "./chunk-LDXUBPMO.js";
 import "./chunk-MNUHL34L.js";
@@ -53,8 +54,8 @@ import "./chunk-U3PN77QT.js";
 import "./chunk-VSF7AAGE.js";
 import "./chunk-OEHCMALU.js";
 import "./chunk-PHK3HARR.js";
-import "./chunk-5GKPFL3S.js";
 import "./chunk-4DJQYKMN.js";
+import "./chunk-5GKPFL3S.js";
 import "./chunk-EYIEWJNI.js";
 import "./chunk-JUC24CTX.js";
 import {
@@ -66,7 +67,6 @@ import "./chunk-P7FMDTKL.js";
 import "./chunk-VS2IYZRU.js";
 import "./chunk-6MKAMLQL.js";
 import "./chunk-JAKIDQB2.js";
-import "./chunk-ZBJMUXZH.js";
 import {
   isRecord
 } from "./chunk-A2IYSXDQ.js";

package/dist/causal-retrieval.js

@@ -1,16 +1,16 @@
 import {
   readChainIndex,
   resolveChainsDir
-} from "./chunk-OUMTBFSQ.js";
+} from "./chunk-NKCPUHCI.js";
 import "./chunk-2A3OXAP2.js";
 import {
   readCausalTrajectoryRecords,
   searchCausalTrajectories
-} from "./chunk-CXLNZXG5.js";
+} from "./chunk-7XGSIUP5.js";
+import "./chunk-ZBJMUXZH.js";
 import {
   log
 } from "./chunk-37CTGERM.js";
-import "./chunk-ZBJMUXZH.js";
 import "./chunk-A2IYSXDQ.js";
 import "./chunk-LPSF4OQH.js";
 import "./chunk-PZ5AY32C.js";

package/dist/causal-trajectory-graph.d.ts

@@ -1,7 +1,7 @@
 import { GraphEdge } from './graph.js';
 import { CausalTrajectoryRecord } from './causal-trajectory.js';
 import './capabilities.js';
-import './types-ljkd82rn.js';
+import './types-C7HUgOuA.js';
 import './types-gb_SNtjR.js';
 import './message-parts/index.js';
 import './objective-state.js';

package/dist/causal-trajectory.js

@@ -6,7 +6,7 @@ import {
   resolveCausalTrajectoryStoreDir,
   searchCausalTrajectories,
   validateCausalTrajectoryRecord
-} from "./chunk-CXLNZXG5.js";
+} from "./chunk-7XGSIUP5.js";
 import "./chunk-ZBJMUXZH.js";
 import "./chunk-A2IYSXDQ.js";
 import "./chunk-LPSF4OQH.js";

package/dist/{chunk-7QWMTOIF.js → chunk-2B7DP7AP.js}

@@ -7,27 +7,27 @@ import {
 import {
   openclawReplayNormalizer
 } from "./chunk-7F7Z6MOS.js";
+import {
+  importMarkdownBundle
+} from "./chunk-HDDRVXX4.js";
 import {
   importSqlite
 } from "./chunk-PYHOAXTI.js";
+import {
+  backupMemoryDir
+} from "./chunk-EEIROWEG.js";
 import {
   exportJsonBundle
 } from "./chunk-UP6MOYCB.js";
 import {
   exportSqlite
 } from "./chunk-BV2TIZ4F.js";
-import {
-  importMarkdownBundle
-} from "./chunk-HDDRVXX4.js";
 import {
   detectImportFormat
 } from "./chunk-OZKVVUJB.js";
 import {
   importJsonBundle
 } from "./chunk-2DL3OFLD.js";
-import {
-  backupMemoryDir
-} from "./chunk-2BFLDH5F.js";
 import {
   exportMarkdownBundle
 } from "./chunk-765K3SAT.js";
@@ -54,27 +54,27 @@ import {
 } from "./chunk-D6RIFG4O.js";
 import {
   rebuildMemoryLifecycleLedger
-} from "./chunk-HRCACVHL.js";
+} from "./chunk-NFTABV56.js";
 import {
   rebuildMemoryProjection,
   repairMemoryProjection,
   verifyMemoryProjection
-} from "./chunk-6BISDEN6.js";
+} from "./chunk-LNHJ32NK.js";
 import {
   rebuildObservations
 } from "./chunk-LZZNTPLR.js";
 import {
   archiveObservations
 } from "./chunk-WMWVO45V.js";
-import {
-  runCompatChecks
-} from "./chunk-GQL52GQ5.js";
 import {
   getBulkImportSource,
   listBulkImportSources,
   registerBulkImportSource,
   runBulkImportPipeline
 } from "./chunk-CKITWVWJ.js";
+import {
+  runCompatChecks
+} from "./chunk-GQL52GQ5.js";
 import {
   getUtilityLearningStatus,
   learnUtilityPromotionWeights
@@ -85,16 +85,16 @@ import {
 } from "./chunk-TERNBNJB.js";
 import {
   searchVerifiedEpisodes
-} from "./chunk-66FLU5BT.js";
+} from "./chunk-II6WHCCW.js";
 import {
   ThreadingManager
 } from "./chunk-DBRYEIGY.js";
 import {
   promoteSemanticRuleFromMemory
-} from "./chunk-OHDJ34CC.js";
+} from "./chunk-2SFEFR5I.js";
 import {
   searchVerifiedSemanticRules
-} from "./chunk-YPEMNNNY.js";
+} from "./chunk-ITWTKT2R.js";
 import {
   resolveAgentAccessAuthToken
 } from "./chunk-TGQ2NTWH.js";
@@ -135,12 +135,12 @@ import {
   runOperatorInventory,
   runOperatorRepair,
   runOperatorSetup
-} from "./chunk-P6SYWE4G.js";
+} from "./chunk-STCCFQU5.js";
 import {
   listNamespaces,
   runNamespaceMigration,
   verifyNamespaces
-} from "./chunk-JLR3JSTL.js";
+} from "./chunk-L6V3WJ55.js";
 import {
   analyzeSessionIntegrity,
   applySessionRepair,
@@ -178,6 +178,9 @@ import {
   runEvalStoredBaselineCiGate,
   validateEvalBenchmarkPack
 } from "./chunk-3PY7VHV7.js";
+import {
+  GraphDashboardServer
+} from "./chunk-YNDLCWXS.js";
 import {
   buildConnectorRowsFromDefinitions,
   parseConnectorsListOptions,
@@ -190,9 +193,6 @@ import {
 import {
   getCueAnchorStoreStatus
 } from "./chunk-FZZ2QTJI.js";
-import {
-  GraphDashboardServer
-} from "./chunk-EZ25VE3G.js";
 import {
   applyCommitmentLedgerLifecycle,
   getCommitmentLedgerStatus,
@@ -213,7 +213,7 @@ import {
 } from "./chunk-OADWQ5CR.js";
 import {
   EngramAccessHttpServer
-} from "./chunk-2FOD2YY3.js";
+} from "./chunk-I74ZEBMA.js";
 import {
   WearablesInputError
 } from "./chunk-V7IZKJI3.js";
@@ -226,10 +226,10 @@ import {
   createProductionChatLlmAdapter,
   loadChatSession,
   sessionBelongsToPrincipal
-} from "./chunk-DR6PEJU3.js";
+} from "./chunk-VWEWK2BM.js";
 import {
   EngramAccessService
-} from "./chunk-X4A62ET7.js";
+} from "./chunk-TI7IHDBQ.js";
 import {
   WorkStorage
 } from "./chunk-GDB4J2H3.js";
@@ -255,13 +255,13 @@ import {
   readMemoryGovernanceRunArtifact,
   restoreMemoryGovernanceRun,
   runMemoryGovernance
-} from "./chunk-IC6QX5TC.js";
+} from "./chunk-BGMSRN6I.js";
+import {
+  getCausalTrajectoryStoreStatus
+} from "./chunk-7XGSIUP5.js";
 import {
   analyzeGraphHealth
 } from "./chunk-OBMR4VIX.js";
-import {
-  getCausalTrajectoryStoreStatus
-} from "./chunk-CXLNZXG5.js";
 import {
   assertPathInsideRoot
 } from "./chunk-5GPPACXK.js";
@@ -3546,7 +3546,7 @@ function registerCli(api, orchestrator, registerOptions = {}) {
       );
       tierCmd.command("list").description("Summarize tier distribution across all memories").option("--json", "Emit machine-readable JSON only").action(async (...args) => {
         const options = args[0] ?? {};
-        const { summarizeTiers, formatTierSummaryText } = await import("./tier-stats-TG6GUZ6N.js");
+        const { summarizeTiers, formatTierSummaryText } = await import("./tier-stats-5XF4UBRQ.js");
         const summary = await summarizeTiers(orchestrator.storage);
         if (reportHasMachineReadableOutput(options)) {
           console.log(JSON.stringify(summary, null, 2));
@@ -3557,7 +3557,7 @@ function registerCli(api, orchestrator, registerOptions = {}) {
       tierCmd.command("explain").description("Explain the tier-transition decision for a single memory").argument("<id>", "Memory id to explain").option("--json", "Emit machine-readable JSON only").action(async (...args) => {
         const idArg = typeof args[0] === "string" ? args[0] : "";
         const options = args[1] ?? {};
-        const { explainTierForMemory, formatTierExplainText } = await import("./tier-stats-TG6GUZ6N.js");
+        const { explainTierForMemory, formatTierExplainText } = await import("./tier-stats-5XF4UBRQ.js");
         try {
           const explain = await explainTierForMemory(
             orchestrator.storage,
@@ -4148,7 +4148,7 @@ function registerCli(api, orchestrator, registerOptions = {}) {
           }
         }
         if (sourceArchive.endsWith(".enc")) {
-          const { isEncryptedCapsuleFile } = await import("./capsule-crypto-CZJSLEFG.js");
+          const { isEncryptedCapsuleFile } = await import("./capsule-crypto-RAARDY3M.js");
           const encDetected = await isEncryptedCapsuleFile(sourceArchive).catch(() => true);
           if (encDetected) {
             throw new Error(
@@ -4311,7 +4311,7 @@ function registerCli(api, orchestrator, registerOptions = {}) {
           const { parseExportBundle } = await import("./transfer/types.js");
           let decryptedBuf;
           try {
-            const { decryptCapsuleFileInMemory } = await import("./capsule-crypto-CZJSLEFG.js");
+            const { decryptCapsuleFileInMemory } = await import("./capsule-crypto-RAARDY3M.js");
             decryptedBuf = await decryptCapsuleFileInMemory(archivePath, memoryDir);
           } catch (decErr) {
             const msg = decErr instanceof Error ? decErr.message : String(decErr);
@@ -7520,4 +7520,4 @@ export {
   listMemoryMarkdownFilePaths,
   registerCli
 };
-//# sourceMappingURL=chunk-7QWMTOIF.js.map
+//# sourceMappingURL=chunk-2B7DP7AP.js.map

package/dist/{chunk-4BFRBP45.js → chunk-2JFDHI2K.js}

@@ -1,6 +1,6 @@
 import {
   createSearchBackend
-} from "./chunk-27FLVMDC.js";
+} from "./chunk-KMF67QDQ.js";
 import {
   namespaceIdentityToken,
   normalizeNamespaceIdentity
@@ -404,4 +404,4 @@ export {
   namespaceCollectionName,
   NamespaceSearchRouter
 };
-//# sourceMappingURL=chunk-4BFRBP45.js.map
+//# sourceMappingURL=chunk-2JFDHI2K.js.map

package/dist/{chunk-OHDJ34CC.js → chunk-2SFEFR5I.js}

@@ -1,6 +1,6 @@
 import {
   StorageManager
-} from "./chunk-M7GGMGMZ.js";
+} from "./chunk-UDCDGP6A.js";
 
 // src/semantic-rule-promotion.ts
 import { createHash, randomUUID } from "crypto";
@@ -529,4 +529,4 @@ export {
   setSemanticRulePromotionTestHooks,
   promoteSemanticRuleFromMemory
 };
-//# sourceMappingURL=chunk-OHDJ34CC.js.map
+//# sourceMappingURL=chunk-2SFEFR5I.js.map

package/dist/{chunk-E2SPGGUI.js → chunk-4OKLXWDZ.js}

@@ -1,3 +1,7 @@
+import {
+  TOKEN_CAPABILITIES_VERSION,
+  normalizeCapabilities
+} from "./chunk-D7FOKIY5.js";
 import {
   resolveHomeDir
 } from "./chunk-JUC24CTX.js";
@@ -55,10 +59,12 @@ function validateTokenEntry(raw, index) {
   if (typeof entry.connector !== "string" || entry.connector.length === 0) {
     throw new Error(`invalid token entry at index ${index}: connector must be a non-empty string`);
   }
+  const capabilities = entry.capabilities !== void 0 ? normalizeCapabilities(entry.capabilities) : void 0;
   return {
     token: entry.token,
     connector: entry.connector,
-    createdAt: typeof entry.createdAt === "string" && entry.createdAt.length > 0 ? entry.createdAt : (/* @__PURE__ */ new Date(0)).toISOString()
+    createdAt: typeof entry.createdAt === "string" && entry.createdAt.length > 0 ? entry.createdAt : (/* @__PURE__ */ new Date(0)).toISOString(),
+    ...capabilities ? { capabilities } : {}
   };
 }
 function parseTokenStore(rawText, filePath) {
@@ -170,13 +176,14 @@ function saveTokenStore(store, tokensPath) {
     throw error;
   }
 }
-function buildTokenEntry(connector) {
+function buildTokenEntry(connector, capabilities) {
   const prefix = TOKEN_PREFIXES[connector] ?? "remnic_xx_";
   const token = prefix + randomBytes(24).toString("hex");
   return {
     token,
     connector,
-    createdAt: (/* @__PURE__ */ new Date()).toISOString()
+    createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+    capabilities: capabilities ?? { version: TOKEN_CAPABILITIES_VERSION }
   };
 }
 function commitTokenEntry(entry, tokensPath) {
@@ -185,10 +192,10 @@ function commitTokenEntry(entry, tokensPath) {
   store.tokens.push(entry);
   saveTokenStore(store, tokensPath);
 }
-function generateToken(connector, tokensPath) {
+function generateToken(connector, tokensPath, capabilities) {
   const store = loadTokenStore(tokensPath);
   store.tokens = store.tokens.filter((t) => t.connector !== connector);
-  const entry = buildTokenEntry(connector);
+  const entry = buildTokenEntry(connector, capabilities);
   store.tokens.push(entry);
   saveTokenStore(store, tokensPath);
   return entry;
@@ -246,4 +253,4 @@ export {
   getAllValidTokensCached,
   resolveConnectorFromToken
 };
-//# sourceMappingURL=chunk-E2SPGGUI.js.map
+//# sourceMappingURL=chunk-4OKLXWDZ.js.map

package/dist/chunk-4OKLXWDZ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/tokens.ts"],"sourcesContent":["/**\n * Token management for Remnic multi-connector auth.\n *\n * Manages per-connector tokens in ~/.remnic/tokens.json.\n * Each connector gets a unique token with a recognizable prefix.\n */\n\nimport fs from \"node:fs\";\nimport path from \"node:path\";\nimport { randomBytes, randomUUID } from \"node:crypto\";\nimport { resolveHomeDir } from \"./runtime/env.js\";\nimport {\n  TOKEN_CAPABILITIES_VERSION,\n  normalizeCapabilities,\n  type TokenCapabilities,\n} from \"./access-token-capabilities.js\";\n\nexport interface TokenEntry {\n  token: string;\n  connector: string;\n  createdAt: string;\n  /**\n   * Versioned capabilities record (issue #1837). PRESENT ⇒ the token was\n   * minted by the capability-aware path; its ops/namespaces axes are\n   * enforced (absent axis ⇒ unrestricted on that axis; empty array ⇒ deny\n   * all; non-empty ⇒ allow-list). ABSENT ⇒ a pre-feature legacy entry ⇒\n   * unrestricted (full access), purely for backward compatibility — this is\n   * the ONLY path by which full access is granted by omission. Every new\n   * token carries an explicit record (even `{ version: 1 }` for a deliberate\n   * unrestricted mint), so a new token can never silently gain full access.\n   */\n  capabilities?: TokenCapabilities;\n}\n\nexport interface TokenStore {\n  tokens: TokenEntry[];\n}\n\nconst TOKEN_PREFIXES: Record<string, string> = {\n  \"openclaw\": \"remnic_oc_\",\n  \"claude-code\": \"remnic_cc_\",\n  \"codex-cli\": \"remnic_cx_\",\n  \"codex\": \"remnic_cx_\",\n  \"hermes\": \"remnic_hm_\",\n  \"pi\": \"remnic_pi_\",\n  \"omp\": \"remnic_op_\",\n  \"replit\": \"remnic_rl_\",\n  \"cursor\": \"remnic_cu_\",\n  \"cline\": \"remnic_cl_\",\n  \"github-copilot\": \"remnic_gh_\",\n  \"roo-code\": \"remnic_rc_\",\n  \"windsurf\": \"remnic_ws_\",\n  \"amp\": \"remnic_am_\",\n  \"generic-mcp\": \"remnic_gm_\",\n  \"chatgpt\": \"remnic_cg_\",\n};\n\nfunction defaultTokensPath(): string {\n  return path.join(resolveHomeDir(), \".remnic\", \"tokens.json\");\n}\n\nfunction legacyTokensPath(): string {\n  return path.join(resolveHomeDir(), \".engram\", \"tokens.json\");\n}\n\nfunction resolveReadPath(tokensPath?: string): string {\n  const primary = tokensPath ?? defaultTokensPath();\n  if (tokensPath) return primary;\n  if (fs.existsSync(primary)) return primary;\n  const legacy = legacyTokensPath();\n  return fs.existsSync(legacy) ? legacy : primary;\n}\n\nfunction ensureDir(filePath: string): void {\n  const dir = path.dirname(filePath);\n  fs.mkdirSync(dir, { recursive: true });\n}\n\nfunction isEnoent(error: unknown): boolean {\n  return error instanceof Error && \"code\" in error && (error as NodeJS.ErrnoException).code === \"ENOENT\";\n}\n\nfunction validateTokenEntry(raw: unknown, index: number): TokenEntry {\n  if (typeof raw !== \"object\" || raw === null || Array.isArray(raw)) {\n    throw new Error(`invalid token entry at index ${index}: expected object`);\n  }\n  const entry = raw as Record<string, unknown>;\n  if (typeof entry.token !== \"string\" || entry.token.length === 0) {\n    throw new Error(`invalid token entry at index ${index}: token must be a non-empty string`);\n  }\n  if (typeof entry.connector !== \"string\" || entry.connector.length === 0) {\n    throw new Error(`invalid token entry at index ${index}: connector must be a non-empty string`);\n  }\n  const capabilities = entry.capabilities !== undefined\n    ? normalizeCapabilities(entry.capabilities)\n    : undefined;\n  return {\n    token: entry.token,\n    connector: entry.connector,\n    createdAt:\n      typeof entry.createdAt === \"string\" && entry.createdAt.length > 0\n        ? entry.createdAt\n        : new Date(0).toISOString(),\n    ...(capabilities ? { capabilities } : {}),\n  };\n}\n\nfunction parseTokenStore(rawText: string, filePath: string): { store: TokenStore; migratedLegacy: boolean } {\n  let raw: unknown;\n  try {\n    raw = JSON.parse(rawText);\n  } catch (error) {\n    throw new Error(\n      `failed to parse token store at ${filePath}: ${error instanceof Error ? error.message : String(error)}`,\n    );\n  }\n\n  if (typeof raw === \"object\" && raw !== null && !Array.isArray(raw)) {\n    const record = raw as Record<string, unknown>;\n    if (record.tokens !== undefined) {\n      if (!Array.isArray(record.tokens)) {\n        throw new Error(`invalid token store at ${filePath}: tokens must be an array`);\n      }\n      return {\n        store: {\n          tokens: record.tokens.map((entry, index) => validateTokenEntry(entry, index)),\n        },\n        migratedLegacy: false,\n      };\n    }\n\n    // Migrate legacy flat-map format: { \"connector\": \"token_value\", ... }\n    const migrated: TokenEntry[] = [];\n    for (const [key, value] of Object.entries(record)) {\n      if (typeof value === \"string\" && value.length > 0) {\n        migrated.push(\n          validateTokenEntry(\n            { token: value, connector: key, createdAt: new Date().toISOString() },\n            migrated.length,\n          ),\n        );\n      }\n    }\n    if (migrated.length > 0) {\n      return { store: { tokens: migrated }, migratedLegacy: true };\n    }\n  }\n\n  throw new Error(`invalid token store at ${filePath}: expected token array or legacy connector map`);\n}\n\nexport function loadTokenStore(tokensPath?: string): TokenStore {\n  const p = resolveReadPath(tokensPath);\n  try {\n    const rawText = fs.readFileSync(p, \"utf8\");\n    const { store, migratedLegacy } = parseTokenStore(rawText, p);\n    if (migratedLegacy) {\n      // Auto-migrate legacy flat-map stores in new format. This is best-effort:\n      // a migration write failure must not hide the successfully parsed tokens.\n      try {\n        saveTokenStore(store, tokensPath);\n      } catch {\n        // Migration write failed (e.g., read-only fs) — still return parsed tokens.\n      }\n    }\n    return store;\n  } catch (error) {\n    if (isEnoent(error)) {\n      return { tokens: [] };\n    }\n    throw error;\n  }\n}\n\nfunction fsyncDirectoryBestEffort(dirPath: string): void {\n  let dirFd: number | null = null;\n  try {\n    dirFd = fs.openSync(dirPath, \"r\");\n    fs.fsyncSync(dirFd);\n  } catch {\n    // Directory fsync is not supported on every platform/filesystem.\n  } finally {\n    if (dirFd !== null) {\n      try { fs.closeSync(dirFd); } catch { /* ignore */ }\n    }\n  }\n}\n\nexport function saveTokenStore(store: TokenStore, tokensPath?: string): void {\n  const p = tokensPath ?? defaultTokensPath();\n  ensureDir(p);\n  const validated: TokenStore = {\n    tokens: store.tokens.map((entry, index) => validateTokenEntry(entry, index)),\n  };\n  const dir = path.dirname(p);\n  const tmpPath = path.join(dir, `.${path.basename(p)}.${process.pid}.${randomUUID()}.tmp`);\n  let fd: number | null = null;\n  try {\n    fd = fs.openSync(tmpPath, \"w\", 0o600);\n    fs.writeFileSync(fd, JSON.stringify(validated, null, 2) + \"\\n\", \"utf8\");\n    fs.fsyncSync(fd);\n    fs.closeSync(fd);\n    fd = null;\n    fs.renameSync(tmpPath, p);\n    // Tighten permissions on pre-existing files after atomic replacement.\n    try { fs.chmodSync(p, 0o600); } catch { /* ignore on platforms without chmod */ }\n    fsyncDirectoryBestEffort(dir);\n    invalidateTokenCache();\n  } catch (error) {\n    if (fd !== null) {\n      try { fs.closeSync(fd); } catch { /* ignore */ }\n    }\n    try { fs.rmSync(tmpPath, { force: true }); } catch { /* ignore cleanup failure */ }\n    throw error;\n  }\n}\n\n/**\n * Build a TokenEntry candidate WITHOUT saving it to the store.\n * Callers use this when they need to defer the save until after a\n * dependent write (e.g. Hermes config.yaml) succeeds — see\n * commitTokenEntry() to persist the candidate.\n */\nexport function buildTokenEntry(connector: string, capabilities?: TokenCapabilities): TokenEntry {\n  const prefix = TOKEN_PREFIXES[connector] ?? \"remnic_xx_\";\n  const token = prefix + randomBytes(24).toString(\"hex\");\n  // Every newly-built entry carries an EXPLICIT capabilities record (issue\n  // #1837). When none is requested, record a deliberate unrestricted\n  // `{ version: 1 }` — never an omitted field — so \"full access via omission\"\n  // is reachable only by pre-feature legacy entries lacking the marker.\n  return {\n    token,\n    connector,\n    createdAt: new Date().toISOString(),\n    capabilities: capabilities ?? { version: TOKEN_CAPABILITIES_VERSION },\n  };\n}\n\n/**\n * Persist a pre-built TokenEntry into the store, replacing any existing\n * entry for the same connector. Used together with buildTokenEntry() when\n * the caller wants to defer the save until after a dependent write succeeds.\n *\n * For transactional rollback, callers should snapshot the full store via\n * loadTokenStore() BEFORE calling commitTokenEntry() and restore it with\n * saveTokenStore() on failure. A full-store snapshot handles partial writes\n * of tokens.json atomically — single-entry restore via the return value is\n * insufficient because if this function throws during saveTokenStore, the\n * return statement never executes (UXJI/UXJT fix).\n */\nexport function commitTokenEntry(entry: TokenEntry, tokensPath?: string): void {\n  const store = loadTokenStore(tokensPath);\n  store.tokens = store.tokens.filter((t) => t.connector !== entry.connector);\n  store.tokens.push(entry);\n  saveTokenStore(store, tokensPath);\n}\n\nexport function generateToken(\n  connector: string,\n  tokensPath?: string,\n  capabilities?: TokenCapabilities,\n): TokenEntry {\n  const store = loadTokenStore(tokensPath);\n\n  // Remove existing token for this connector\n  store.tokens = store.tokens.filter((t) => t.connector !== connector);\n\n  const entry = buildTokenEntry(connector, capabilities);\n  store.tokens.push(entry);\n  saveTokenStore(store, tokensPath);\n  return entry;\n}\n\nexport function listTokens(tokensPath?: string): TokenEntry[] {\n  return loadTokenStore(tokensPath).tokens;\n}\n\nexport function revokeToken(connector: string, tokensPath?: string): boolean {\n  const store = loadTokenStore(tokensPath);\n  const before = store.tokens.length;\n  store.tokens = store.tokens.filter((t) => t.connector !== connector);\n  if (store.tokens.length < before) {\n    saveTokenStore(store, tokensPath);\n    return true;\n  }\n  return false;\n}\n\nexport function getAllValidTokens(tokensPath?: string): string[] {\n  return loadTokenStore(tokensPath).tokens.map((t) => t.token);\n}\n\n// Cached token-entry snapshot to avoid synchronous disk I/O on every HTTP\n// request. Re-reads tokens.json at most once per TTL interval (default 5s).\n// There is deliberately exactly ONE cache: validation (token strings) and\n// identity (connector ids) are derived from the SAME snapshot, so a token\n// can never validate against a fresher snapshot than the one that resolves\n// its connector. saveTokenStore() invalidates on every mutation, so a\n// freshly minted or revoked token is coherent immediately.\nconst TOKEN_CACHE_TTL_MS = 5_000;\nlet _cachedEntries: TokenEntry[] = [];\nlet _cachedAt = 0;\nlet _cachedPath: string | undefined;\n\nfunction invalidateTokenCache(): void {\n  _cachedEntries = [];\n  _cachedAt = 0;\n  _cachedPath = undefined;\n}\n\n/** Cached token-entry snapshot ({token, connector} pairs). */\nexport function getAllValidTokenEntriesCached(tokensPath?: string): readonly TokenEntry[] {\n  const now = Date.now();\n  if (now - _cachedAt < TOKEN_CACHE_TTL_MS && tokensPath === _cachedPath) return _cachedEntries;\n  _cachedEntries = loadTokenStore(tokensPath).tokens;\n  _cachedAt = now;\n  _cachedPath = tokensPath;\n  return _cachedEntries;\n}\n\nexport function getAllValidTokensCached(tokensPath?: string): string[] {\n  return getAllValidTokenEntriesCached(tokensPath).map((entry) => entry.token);\n}\n\nexport function resolveConnectorFromToken(token: string, tokensPath?: string): string | undefined {\n  return loadTokenStore(tokensPath).tokens.find((t) => t.token === token)?.connector;\n}\n"],"mappings":";;;;;;;;;AAOA,OAAO,QAAQ;AACf,OAAO,UAAU;AACjB,SAAS,aAAa,kBAAkB;AA6BxC,IAAM,iBAAyC;AAAA,EAC7C,YAAY;AAAA,EACZ,eAAe;AAAA,EACf,aAAa;AAAA,EACb,SAAS;AAAA,EACT,UAAU;AAAA,EACV,MAAM;AAAA,EACN,OAAO;AAAA,EACP,UAAU;AAAA,EACV,UAAU;AAAA,EACV,SAAS;AAAA,EACT,kBAAkB;AAAA,EAClB,YAAY;AAAA,EACZ,YAAY;AAAA,EACZ,OAAO;AAAA,EACP,eAAe;AAAA,EACf,WAAW;AACb;AAEA,SAAS,oBAA4B;AACnC,SAAO,KAAK,KAAK,eAAe,GAAG,WAAW,aAAa;AAC7D;AAEA,SAAS,mBAA2B;AAClC,SAAO,KAAK,KAAK,eAAe,GAAG,WAAW,aAAa;AAC7D;AAEA,SAAS,gBAAgB,YAA6B;AACpD,QAAM,UAAU,cAAc,kBAAkB;AAChD,MAAI,WAAY,QAAO;AACvB,MAAI,GAAG,WAAW,OAAO,EAAG,QAAO;AACnC,QAAM,SAAS,iBAAiB;AAChC,SAAO,GAAG,WAAW,MAAM,IAAI,SAAS;AAC1C;AAEA,SAAS,UAAU,UAAwB;AACzC,QAAM,MAAM,KAAK,QAAQ,QAAQ;AACjC,KAAG,UAAU,KAAK,EAAE,WAAW,KAAK,CAAC;AACvC;AAEA,SAAS,SAAS,OAAyB;AACzC,SAAO,iBAAiB,SAAS,UAAU,SAAU,MAAgC,SAAS;AAChG;AAEA,SAAS,mBAAmB,KAAc,OAA2B;AACnE,MAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,MAAM,QAAQ,GAAG,GAAG;AACjE,UAAM,IAAI,MAAM,gCAAgC,KAAK,mBAAmB;AAAA,EAC1E;AACA,QAAM,QAAQ;AACd,MAAI,OAAO,MAAM,UAAU,YAAY,MAAM,MAAM,WAAW,GAAG;AAC/D,UAAM,IAAI,MAAM,gCAAgC,KAAK,oCAAoC;AAAA,EAC3F;AACA,MAAI,OAAO,MAAM,cAAc,YAAY,MAAM,UAAU,WAAW,GAAG;AACvE,UAAM,IAAI,MAAM,gCAAgC,KAAK,wCAAwC;AAAA,EAC/F;AACA,QAAM,eAAe,MAAM,iBAAiB,SACxC,sBAAsB,MAAM,YAAY,IACxC;AACJ,SAAO;AAAA,IACL,OAAO,MAAM;AAAA,IACb,WAAW,MAAM;AAAA,IACjB,WACE,OAAO,MAAM,cAAc,YAAY,MAAM,UAAU,SAAS,IAC5D,MAAM,aACN,oBAAI,KAAK,CAAC,GAAE,YAAY;AAAA,IAC9B,GAAI,eAAe,EAAE,aAAa,IAAI,CAAC;AAAA,EACzC;AACF;AAEA,SAAS,gBAAgB,SAAiB,UAAkE;AAC1G,MAAI;AACJ,MAAI;AACF,UAAM,KAAK,MAAM,OAAO;AAAA,EAC1B,SAAS,OAAO;AACd,UAAM,IAAI;AAAA,MACR,kCAAkC,QAAQ,KAAK,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,IACvG;AAAA,EACF;AAEA,MAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,CAAC,MAAM,QAAQ,GAAG,GAAG;AAClE,UAAM,SAAS;AACf,QAAI,OAAO,WAAW,QAAW;AAC/B,UAAI,CAAC,MAAM,QAAQ,OAAO,MAAM,GAAG;AACjC,cAAM,IAAI,MAAM,0BAA0B,QAAQ,2BAA2B;AAAA,MAC/E;AACA,aAAO;AAAA,QACL,OAAO;AAAA,UACL,QAAQ,OAAO,OAAO,IAAI,CAAC,OAAO,UAAU,mBAAmB,OAAO,KAAK,CAAC;AAAA,QAC9E;AAAA,QACA,gBAAgB;AAAA,MAClB;AAAA,IACF;AAGA,UAAM,WAAyB,CAAC;AAChC,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACjD,UAAI,OAAO,UAAU,YAAY,MAAM,SAAS,GAAG;AACjD,iBAAS;AAAA,UACP;AAAA,YACE,EAAE,OAAO,OAAO,WAAW,KAAK,YAAW,oBAAI,KAAK,GAAE,YAAY,EAAE;AAAA,YACpE,SAAS;AAAA,UACX;AAAA,QACF;AAAA,MACF;AAAA,IACF;AACA,QAAI,SAAS,SAAS,GAAG;AACvB,aAAO,EAAE,OAAO,EAAE,QAAQ,SAAS,GAAG,gBAAgB,KAAK;AAAA,IAC7D;AAAA,EACF;AAEA,QAAM,IAAI,MAAM,0BAA0B,QAAQ,gDAAgD;AACpG;AAEO,SAAS,eAAe,YAAiC;AAC9D,QAAM,IAAI,gBAAgB,UAAU;AACpC,MAAI;AACF,UAAM,UAAU,GAAG,aAAa,GAAG,MAAM;AACzC,UAAM,EAAE,OAAO,eAAe,IAAI,gBAAgB,SAAS,CAAC;AAC5D,QAAI,gBAAgB;AAGlB,UAAI;AACF,uBAAe,OAAO,UAAU;AAAA,MAClC,QAAQ;AAAA,MAER;AAAA,IACF;AACA,WAAO;AAAA,EACT,SAAS,OAAO;AACd,QAAI,SAAS,KAAK,GAAG;AACnB,aAAO,EAAE,QAAQ,CAAC,EAAE;AAAA,IACtB;AACA,UAAM;AAAA,EACR;AACF;AAEA,SAAS,yBAAyB,SAAuB;AACvD,MAAI,QAAuB;AAC3B,MAAI;AACF,YAAQ,GAAG,SAAS,SAAS,GAAG;AAChC,OAAG,UAAU,KAAK;AAAA,EACpB,QAAQ;AAAA,EAER,UAAE;AACA,QAAI,UAAU,MAAM;AAClB,UAAI;AAAE,WAAG,UAAU,KAAK;AAAA,MAAG,QAAQ;AAAA,MAAe;AAAA,IACpD;AAAA,EACF;AACF;AAEO,SAAS,eAAe,OAAmB,YAA2B;AAC3E,QAAM,IAAI,cAAc,kBAAkB;AAC1C,YAAU,CAAC;AACX,QAAM,YAAwB;AAAA,IAC5B,QAAQ,MAAM,OAAO,IAAI,CAAC,OAAO,UAAU,mBAAmB,OAAO,KAAK,CAAC;AAAA,EAC7E;AACA,QAAM,MAAM,KAAK,QAAQ,CAAC;AAC1B,QAAM,UAAU,KAAK,KAAK,KAAK,IAAI,KAAK,SAAS,CAAC,CAAC,IAAI,QAAQ,GAAG,IAAI,WAAW,CAAC,MAAM;AACxF,MAAI,KAAoB;AACxB,MAAI;AACF,SAAK,GAAG,SAAS,SAAS,KAAK,GAAK;AACpC,OAAG,cAAc,IAAI,KAAK,UAAU,WAAW,MAAM,CAAC,IAAI,MAAM,MAAM;AACtE,OAAG,UAAU,EAAE;AACf,OAAG,UAAU,EAAE;AACf,SAAK;AACL,OAAG,WAAW,SAAS,CAAC;AAExB,QAAI;AAAE,SAAG,UAAU,GAAG,GAAK;AAAA,IAAG,QAAQ;AAAA,IAA0C;AAChF,6BAAyB,GAAG;AAC5B,yBAAqB;AAAA,EACvB,SAAS,OAAO;AACd,QAAI,OAAO,MAAM;AACf,UAAI;AAAE,WAAG,UAAU,EAAE;AAAA,MAAG,QAAQ;AAAA,MAAe;AAAA,IACjD;AACA,QAAI;AAAE,SAAG,OAAO,SAAS,EAAE,OAAO,KAAK,CAAC;AAAA,IAAG,QAAQ;AAAA,IAA+B;AAClF,UAAM;AAAA,EACR;AACF;AAQO,SAAS,gBAAgB,WAAmB,cAA8C;AAC/F,QAAM,SAAS,eAAe,SAAS,KAAK;AAC5C,QAAM,QAAQ,SAAS,YAAY,EAAE,EAAE,SAAS,KAAK;AAKrD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IAClC,cAAc,gBAAgB,EAAE,SAAS,2BAA2B;AAAA,EACtE;AACF;AAcO,SAAS,iBAAiB,OAAmB,YAA2B;AAC7E,QAAM,QAAQ,eAAe,UAAU;AACvC,QAAM,SAAS,MAAM,OAAO,OAAO,CAAC,MAAM,EAAE,cAAc,MAAM,SAAS;AACzE,QAAM,OAAO,KAAK,KAAK;AACvB,iBAAe,OAAO,UAAU;AAClC;AAEO,SAAS,cACd,WACA,YACA,cACY;AACZ,QAAM,QAAQ,eAAe,UAAU;AAGvC,QAAM,SAAS,MAAM,OAAO,OAAO,CAAC,MAAM,EAAE,cAAc,SAAS;AAEnE,QAAM,QAAQ,gBAAgB,WAAW,YAAY;AACrD,QAAM,OAAO,KAAK,KAAK;AACvB,iBAAe,OAAO,UAAU;AAChC,SAAO;AACT;AAEO,SAAS,WAAW,YAAmC;AAC5D,SAAO,eAAe,UAAU,EAAE;AACpC;AAEO,SAAS,YAAY,WAAmB,YAA8B;AAC3E,QAAM,QAAQ,eAAe,UAAU;AACvC,QAAM,SAAS,MAAM,OAAO;AAC5B,QAAM,SAAS,MAAM,OAAO,OAAO,CAAC,MAAM,EAAE,cAAc,SAAS;AACnE,MAAI,MAAM,OAAO,SAAS,QAAQ;AAChC,mBAAe,OAAO,UAAU;AAChC,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEO,SAAS,kBAAkB,YAA+B;AAC/D,SAAO,eAAe,UAAU,EAAE,OAAO,IAAI,CAAC,MAAM,EAAE,KAAK;AAC7D;AASA,IAAM,qBAAqB;AAC3B,IAAI,iBAA+B,CAAC;AACpC,IAAI,YAAY;AAChB,IAAI;AAEJ,SAAS,uBAA6B;AACpC,mBAAiB,CAAC;AAClB,cAAY;AACZ,gBAAc;AAChB;AAGO,SAAS,8BAA8B,YAA4C;AACxF,QAAM,MAAM,KAAK,IAAI;AACrB,MAAI,MAAM,YAAY,sBAAsB,eAAe,YAAa,QAAO;AAC/E,mBAAiB,eAAe,UAAU,EAAE;AAC5C,cAAY;AACZ,gBAAc;AACd,SAAO;AACT;AAEO,SAAS,wBAAwB,YAA+B;AACrE,SAAO,8BAA8B,UAAU,EAAE,IAAI,CAAC,UAAU,MAAM,KAAK;AAC7E;AAEO,SAAS,0BAA0B,OAAe,YAAyC;AAChG,SAAO,eAAe,UAAU,EAAE,OAAO,KAAK,CAAC,MAAM,EAAE,UAAU,KAAK,GAAG;AAC3E;","names":[]}