@sapiom/harness 0.1.5 → 0.2.0

package/dist/core/run-transactions.js

@@ -1,129 +0,0 @@
-/**
- * run-transactions — fetches the per-call cost drill-down for an execution
- * from the core surface and maps it to a {@link RunCall}[] the canvas shows
- * when a user clicks a step and asks "why is this costly".
- *
- * WHY this exists alongside run-spend: `/spend` gives per-STEP aggregates
- * (totalUsd + entryCount). This endpoint itemises the individual billable
- * capability calls that make up that total (e.g. "renderPdfs $7.95 = 1 sandbox
- * call"), which is what makes the debug macros actionable.
- *
- * WHY provider-agnostic: the raw upstream service name (the provider) is mapped
- * to a generic capability label here, server-side, so the browser never
- * receives — and this open-source file never hard-codes — a provider or model
- * name. See the capability-label heuristic below (keyed on generic op/resource
- * tokens, never a brand).
- *
- * WHY the key stays server-side: identical rationale to run-state / run-spend —
- * the Sapiom API key is a harness credential that must never reach the browser.
- */
-import { resolveCoreBaseUrl } from "./run-spend.js";
-/**
- * Map a raw upstream operation/resource to a provider-agnostic capability
- * label. Keyed ONLY on generic tokens (message / sandbox / search) and the
- * operation verb — deliberately never on a provider/brand name, so this file
- * stays clean of internal service names and the label is stable if the
- * underlying provider is swapped. Unknown shapes fall back to the operation
- * verb, which is itself generic ("create", "execute", …).
- */
-export function capabilityLabel(op, resource) {
-    const r = (resource ?? "").toLowerCase();
-    if (op === "generate" || r.includes("message") || r.includes("completion")) {
-        return "LLM";
-    }
-    if (r.includes("sandbox"))
-        return "sandbox";
-    if (r.includes("search"))
-        return "web search";
-    return op || "capability";
-}
-/** Sum the active, non-estimate captured USD across a transaction's cost rows. */
-function activeCapturedUsd(costs) {
-    let total = 0;
-    for (const c of costs) {
-        const cost = c;
-        if (cost.isActive === true && cost.isEstimate === false) {
-            const n = Number(cost.fiatAmount);
-            if (Number.isFinite(n))
-                total += n;
-        }
-    }
-    return total;
-}
-/**
- * Create a fetcher that resolves an execution's per-call cost breakdown from
- * the core transactions endpoint. Like the spend fetcher, it is intentionally
- * non-throwing: every error path returns a typed {@link RunCallsResult} with
- * `ok: false` so the router forwards the status without a try/catch.
- *
- * Only BILLABLE calls are returned (active captured USD > 0) — the free
- * `workflows` orchestration rows are dropped as noise. Each call is attributed
- * to `metadata.workflowStepName ?? actionName` so the canvas can match it to a
- * step node.
- */
-export function createRunTransactionsFetcher(opts) {
-    const { apiKey, baseUrl = resolveCoreBaseUrl(), fetchImpl = fetch } = opts;
-    return {
-        async fetch(executionId) {
-            if (!apiKey) {
-                return {
-                    ok: false,
-                    status: 503,
-                    error: "harness is not signed in to Sapiom",
-                };
-            }
-            // filter[trace_external_id] == the workflow execution id; page[limit] is
-            // the endpoint's pagination knob (NOT `limit`/`page[size]`, which 400).
-            const url = `${baseUrl}/v1/transactions` +
-                `?filter[trace_external_id]=${encodeURIComponent(executionId)}` +
-                `&page[limit]=100`;
-            let res;
-            try {
-                res = await fetchImpl(url, { headers: { "x-api-key": apiKey } });
-            }
-            catch {
-                return { ok: false, status: 502, error: "gateway unreachable" };
-            }
-            if (res.status === 404) {
-                return { ok: false, status: 404, error: "transactions not found" };
-            }
-            if (!res.ok) {
-                return {
-                    ok: false,
-                    status: 502,
-                    error: `gateway responded ${res.status}`,
-                };
-            }
-            try {
-                const body = (await res.json());
-                const rows = Array.isArray(body.data) ? body.data : [];
-                const calls = [];
-                for (const row of rows) {
-                    const t = row;
-                    const costs = Array.isArray(t.costs) ? t.costs : [];
-                    const usd = activeCapturedUsd(costs);
-                    if (usd <= 0)
-                        continue; // billable calls only — drop free orchestration
-                    const op = typeof t.actionName === "string" ? t.actionName : "";
-                    const resource = typeof t.resourceName === "string" ? t.resourceName : "";
-                    const metadata = t.metadata ?? {};
-                    const stepName = (typeof metadata.workflowStepName === "string" &&
-                        metadata.workflowStepName) ||
-                        op ||
-                        "unknown";
-                    calls.push({
-                        stepName,
-                        capability: capabilityLabel(op, resource),
-                        op,
-                        usd: usd.toFixed(6),
-                    });
-                }
-                return { ok: true, calls };
-            }
-            catch {
-                return { ok: false, status: 502, error: "could not decode transactions" };
-            }
-        },
-    };
-}
-//# sourceMappingURL=run-transactions.js.map

package/dist/core/run-transactions.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"run-transactions.js","sourceRoot":"","sources":["../../src/core/run-transactions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAkBpD;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,EAAU,EAAE,QAAgB;IAC1D,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACzC,IAAI,EAAE,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAC3E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5C,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,YAAY,CAAC;IAC9C,OAAO,EAAE,IAAI,YAAY,CAAC;AAC5B,CAAC;AAED,kFAAkF;AAClF,SAAS,iBAAiB,CAAC,KAAgB;IACzC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,CAA4B,CAAC;QAC1C,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC;YACxD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAClC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,KAAK,IAAI,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,4BAA4B,CAC1C,IAAgC;IAEhC,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,kBAAkB,EAAE,EAAE,SAAS,GAAG,KAAK,EAAE,GAAG,IAAI,CAAC;IAE3E,OAAO;QACL,KAAK,CAAC,KAAK,CAAC,WAAmB;YAC7B,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,GAAG;oBACX,KAAK,EAAE,oCAAoC;iBAC5C,CAAC;YACJ,CAAC;YAED,yEAAyE;YACzE,wEAAwE;YACxE,MAAM,GAAG,GACP,GAAG,OAAO,kBAAkB;gBAC5B,8BAA8B,kBAAkB,CAAC,WAAW,CAAC,EAAE;gBAC/D,kBAAkB,CAAC;YAErB,IAAI,GAAa,CAAC;YAClB,IAAI,CAAC;gBACH,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;YACnE,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;YAClE,CAAC;YAED,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;YACrE,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,GAAG;oBACX,KAAK,EAAE,qBAAqB,GAAG,CAAC,MAAM,EAAE;iBACzC,CAAC;YACJ,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAyB,CAAC;gBACxD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBAEvD,MAAM,KAAK,GAAc,EAAE,CAAC;gBAC5B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;oBACvB,MAAM,CAAC,GAAG,GAA8B,CAAC;oBACzC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,KAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnE,MAAM,GAAG,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;oBACrC,IAAI,GAAG,IAAI,CAAC;wBAAE,SAAS,CAAC,gDAAgD;oBAExE,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChE,MAAM,QAAQ,GACZ,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3D,MAAM,QAAQ,GAAI,CAAC,CAAC,QAAoC,IAAI,EAAE,CAAC;oBAC/D,MAAM,QAAQ,GACZ,CAAC,OAAO,QAAQ,CAAC,gBAAgB,KAAK,QAAQ;wBAC5C,QAAQ,CAAC,gBAAgB,CAAC;wBAC5B,EAAE;wBACF,SAAS,CAAC;oBAEZ,KAAK,CAAC,IAAI,CAAC;wBACT,QAAQ;wBACR,UAAU,EAAE,eAAe,CAAC,EAAE,EAAE,QAAQ,CAAC;wBACzC,EAAE;wBACF,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;qBACpB,CAAC,CAAC;gBACL,CAAC;gBAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;YAC7B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC;YAC5E,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/profiles/canvas-guidelines.d.ts

@@ -1,20 +0,0 @@
-/**
- * Canvas style contract: injected everywhere an agent is asked to write to
- * `.sapiom/canvas/index.html` (the Visualize macro's inject text, and the
- * system prompt's canvas paragraph for freeform "show me X" asks), so every
- * generated canvas looks Sapiom-native regardless of which prompt triggered
- * it. Kept prompt-sized on purpose — this rides in prompts, not docs.
- *
- * Colors are the harness's own dark-theme tokens (web/src/styles.css,
- * `[data-theme="dark"]`) — dark is the canonical canvas look. Structural
- * conventions (rounded nodes with a uniform glow, straight-then-curved
- * arrowed edges, stats header, legend footer) mirror what
- * scripts/seed-example.mjs's reference canvas already renders; this doesn't
- * change that seed, just documents its pattern for agents generating new
- * ones. Edge/glow/legend wording tightened after a live Visualize proof
- * (see PR history) surfaced ambiguities two different agent runs resolved
- * inconsistently — see git blame for the before/after if the wording here
- * ever seems oddly specific.
- */
-export declare const CANVAS_STYLE_GUIDELINES: string;
-//# sourceMappingURL=canvas-guidelines.d.ts.map

package/dist/profiles/canvas-guidelines.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"canvas-guidelines.d.ts","sourceRoot":"","sources":["../../src/profiles/canvas-guidelines.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,uBAAuB,QA4B5B,CAAC"}

package/dist/profiles/canvas-guidelines.js

@@ -1,48 +0,0 @@
-/**
- * Canvas style contract: injected everywhere an agent is asked to write to
- * `.sapiom/canvas/index.html` (the Visualize macro's inject text, and the
- * system prompt's canvas paragraph for freeform "show me X" asks), so every
- * generated canvas looks Sapiom-native regardless of which prompt triggered
- * it. Kept prompt-sized on purpose — this rides in prompts, not docs.
- *
- * Colors are the harness's own dark-theme tokens (web/src/styles.css,
- * `[data-theme="dark"]`) — dark is the canonical canvas look. Structural
- * conventions (rounded nodes with a uniform glow, straight-then-curved
- * arrowed edges, stats header, legend footer) mirror what
- * scripts/seed-example.mjs's reference canvas already renders; this doesn't
- * change that seed, just documents its pattern for agents generating new
- * ones. Edge/glow/legend wording tightened after a live Visualize proof
- * (see PR history) surfaced ambiguities two different agent runs resolved
- * inconsistently — see git blame for the before/after if the wording here
- * ever seems oddly specific.
- */
-export const CANVAS_STYLE_GUIDELINES = `
-Canvas style contract (.sapiom/canvas/index.html):
-- One self-contained HTML file: inline all CSS/JS, no external stylesheets/
-  scripts or CDN fonts (the CSP blocks them) — no build step, no dependencies.
-- Dark theme, Sapiom palette: background #0f0f0f, panel #1a1a1a, border
-  #2e2e2e, text #fafafa, dim text #a1a1aa, accent/success #6be195, escalation
-  #f59e0b, failure #f87171.
-- Monospace throughout: ui-monospace, "SF Mono", Menlo, Consolas, monospace.
-- Header: title + short status badge, one-line subtitle, and a stats row
-  (e.g. step count, terminal-outcome count, branch count) as label/value pairs.
-- Render the workflow as an inline SVG graph, top-to-bottom: rounded-rect
-  nodes (12-16px radius). Every node gets the same subtle glow on its
-  border — never reserve the glow for entry/terminal nodes only; role and
-  outcome are conveyed by border/stroke color, not by which nodes glow.
-- Edges: straight lines with arrowhead markers for a single-successor step,
-  curved paths with arrowhead markers only where a step branches into
-  multiple successors — don't curve every edge, that reads as noise on a
-  simple linear chain.
-- Color-code terminal outcomes by meaning: accent/green = success, amber =
-  escalation/needs-attention, red = failure. Reserve those colors for actual
-  terminal branches, not regular steps.
-- Footer legend: one visually distinct marker per node kind used (shape
-  and/or fill vs. outline — never reuse the identical marker for two
-  different kinds just because they happen to share a color) + label, plus
-  a short note that this is a static preview to regenerate after the
-  workflow changes.
-- Prefer clarity over decoration: no motion, gradients, or ornamentation that
-  doesn't help someone understand the graph's structure in a few seconds.
-`.trim();
-//# sourceMappingURL=canvas-guidelines.js.map

package/dist/profiles/canvas-guidelines.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"canvas-guidelines.js","sourceRoot":"","sources":["../../src/profiles/canvas-guidelines.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4BtC,CAAC,IAAI,EAAE,CAAC"}

package/dist/server/skills.d.ts

@@ -1,51 +0,0 @@
-/**
- * Skills listing server — backs GET /api/skills and GET /api/skills/:id.
- *
- * Two skill sources are merged:
- *   1. Installed @sapiom packages: scans node_modules/@sapiom/{pkg}/skills/SKILL.md
- *      (gracefully empty when no package ships skills yet).
- *   2. User's own ~/.claude/skills/{id}/SKILL.md (same convention Claude Code
- *      uses for project-specific skills).
- *
- * Path-traversal safety: skill ids are slug-shaped identifiers (letters,
- * digits, hyphens, underscores) — any id that fails the SAFE_SLUG regex is
- * rejected with a 404 before any filesystem access.
- *
- * The list endpoint (GET /api/skills) does a full directory walk across both
- * roots. The detail endpoint (GET /api/skills/:id) resolves in O(1) by
- * constructing candidate paths directly from the slug (= directory name),
- * without re-walking the tree.
- *
- * Markdown is served as-is — the SPA renders it client-side (no HTML
- * injection here). The frontmatter block is stripped before delivery so the
- * rendered view shows only the body.
- */
-import { Router } from "express";
-export interface SkillMeta {
-    /** Stable identifier: directory name of the skill folder. */
-    id: string;
-    /** Human name from the `name:` frontmatter field. Falls back to the id. */
-    name: string;
-    /** One-line description from the `description:` frontmatter field. */
-    description: string;
-    /** Logical source group — shown in the panel's section header. */
-    source: "package" | "user";
-}
-export interface SkillDetail extends SkillMeta {
-    /** The full SKILL.md body with the frontmatter block stripped. */
-    body: string;
-}
-export interface SkillsRouterOptions {
-    /** Override the node_modules root for testing. */
-    nodeModulesRoot?: string;
-    /** Override the user skills root (default: ~/.claude/skills). */
-    userSkillsRoot?: string;
-    /**
-     * Include the user's personal ~/.claude/skills in the LIST response.
-     * Off by default — the panel shows only Sapiom package skills so a
-     * developer's own skills don't clutter the product's skill list.
-     */
-    showUserSkills?: boolean;
-}
-export declare function createSkillsRouter(options?: SkillsRouterOptions): Router;
-//# sourceMappingURL=skills.d.ts.map

package/dist/server/skills.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"skills.d.ts","sourceRoot":"","sources":["../../src/server/skills.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAOH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAGjC,MAAM,WAAW,SAAS;IACxB,6DAA6D;IAC7D,EAAE,EAAE,MAAM,CAAC;IACX,2EAA2E;IAC3E,IAAI,EAAE,MAAM,CAAC;IACb,sEAAsE;IACtE,WAAW,EAAE,MAAM,CAAC;IACpB,kEAAkE;IAClE,MAAM,EAAE,SAAS,GAAG,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,WAAY,SAAQ,SAAS;IAC5C,kEAAkE;IAClE,IAAI,EAAE,MAAM,CAAC;CACd;AAoKD,MAAM,WAAW,mBAAmB;IAClC,kDAAkD;IAClD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iEAAiE;IACjE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,wBAAgB,kBAAkB,CAAC,OAAO,GAAE,mBAAwB,GAAG,MAAM,CAkI5E"}

package/dist/server/skills.js

@@ -1,312 +0,0 @@
-/**
- * Skills listing server — backs GET /api/skills and GET /api/skills/:id.
- *
- * Two skill sources are merged:
- *   1. Installed @sapiom packages: scans node_modules/@sapiom/{pkg}/skills/SKILL.md
- *      (gracefully empty when no package ships skills yet).
- *   2. User's own ~/.claude/skills/{id}/SKILL.md (same convention Claude Code
- *      uses for project-specific skills).
- *
- * Path-traversal safety: skill ids are slug-shaped identifiers (letters,
- * digits, hyphens, underscores) — any id that fails the SAFE_SLUG regex is
- * rejected with a 404 before any filesystem access.
- *
- * The list endpoint (GET /api/skills) does a full directory walk across both
- * roots. The detail endpoint (GET /api/skills/:id) resolves in O(1) by
- * constructing candidate paths directly from the slug (= directory name),
- * without re-walking the tree.
- *
- * Markdown is served as-is — the SPA renders it client-side (no HTML
- * injection here). The frontmatter block is stripped before delivery so the
- * rendered view shows only the body.
- */
-import * as fs from "node:fs/promises";
-import { existsSync } from "node:fs";
-import * as path from "node:path";
-import * as os from "node:os";
-import { createRequire } from "node:module";
-import { Router } from "express";
-import rateLimit from "express-rate-limit";
-/** Stable slug: only letters, digits, and hyphens/underscores. */
-const SAFE_SLUG = /^[a-zA-Z0-9_-]+$/;
-/**
- * Build `<root>/<slug>/SKILL.md` and return it ONLY if the resolved path stays
- * inside `root`. Two independent barriers against path traversal: (1) callers
- * validate the slug with SAFE_SLUG, and (2) this containment check on the
- * fully-resolved path — a defense-in-depth barrier that also makes the
- * no-traversal guarantee legible to static analysis (the resolved child must
- * sit under the resolved root + separator). Returns null if containment fails.
- */
-function resolveSkillFileWithin(root, slug) {
-    const resolvedRoot = path.resolve(root);
-    const candidate = path.resolve(resolvedRoot, slug, "SKILL.md");
-    if (candidate !== path.join(resolvedRoot, slug, "SKILL.md") ||
-        !candidate.startsWith(resolvedRoot + path.sep)) {
-        return null;
-    }
-    return candidate;
-}
-/** Parse the `---\n...\n---` YAML frontmatter block (simple key: value only). */
-function parseFrontmatter(raw) {
-    const meta = {};
-    if (!raw.startsWith("---"))
-        return { meta, body: raw };
-    const end = raw.indexOf("\n---", 3);
-    if (end === -1)
-        return { meta, body: raw };
-    const block = raw.slice(3, end).trim();
-    for (const line of block.split("\n")) {
-        const colon = line.indexOf(":");
-        if (colon === -1)
-            continue;
-        const key = line.slice(0, colon).trim();
-        // Strip inline quotes and leading whitespace; handle multi-line by
-        // collapsing continuation lines (indented) into the value.
-        const value = line.slice(colon + 1).trim().replace(/^["']|["']$/g, "");
-        if (key)
-            meta[key] = value;
-    }
-    return { meta, body: raw.slice(end + 4).trimStart() };
-}
-/** Read and parse a SKILL.md file, returning null on any fs/parse error. */
-async function readSkillFile(filePath, id, source) {
-    try {
-        const raw = await fs.readFile(filePath, "utf-8");
-        const { meta, body } = parseFrontmatter(raw);
-        return {
-            id,
-            name: meta.name ?? id,
-            description: meta.description ?? "",
-            source,
-            body,
-            filePath,
-        };
-    }
-    catch {
-        return null;
-    }
-}
-/**
- * Scan node_modules/@sapiom/{pkg}/skills/{id}/SKILL.md, starting from the
- * given root (defaults to the directory this module lives in, walking up to
- * find the node_modules directory). Returns the discovered skills.
- */
-async function scanPackageSkills(nodeModulesRoot) {
-    const nmRoot = nodeModulesRoot ?? findNodeModules();
-    const sapiomDir = path.join(nmRoot, "@sapiom");
-    const results = [];
-    let pkgDirs;
-    try {
-        pkgDirs = await fs.readdir(sapiomDir);
-    }
-    catch {
-        return results; // no @sapiom packages installed — gracefully empty
-    }
-    for (const pkg of pkgDirs) {
-        const skillsDir = path.join(sapiomDir, pkg, "skills");
-        let skillDirs;
-        try {
-            skillDirs = await fs.readdir(skillsDir);
-        }
-        catch {
-            continue; // package has no skills directory
-        }
-        for (const skillDir of skillDirs) {
-            const skillFile = path.join(skillsDir, skillDir, "SKILL.md");
-            const parsed = await readSkillFile(skillFile, skillDir, "package");
-            if (parsed)
-                results.push(parsed);
-        }
-    }
-    return results;
-}
-/**
- * Resolve the node_modules directory that actually holds the installed
- * @sapiom packages, robust to install layout.
- *
- * The naive "walk up from dist/server/skills.js to my own package-root's
- * node_modules" breaks under npm/npx HOISTING: `npx @sapiom/harness` installs
- * agent-core as a SIBLING in a shared node_modules (…/@sapiom/agent-core),
- * NOT nested under …/@sapiom/harness/node_modules — so the naive path reads an
- * empty (or absent) @sapiom dir and finds zero package skills.
- *
- * Use Node's own module search list (`require.resolve.paths`) for the scope
- * package — the node_modules dirs walking up from this file — and return the
- * first that actually contains `@sapiom/agent-core`. This is symlink-aware (it
- * stats the entry, not its realpath), so it works for BOTH npm/npx hoisting AND
- * pnpm workspace symlinks (where agent-core is linked under
- * packages/harness/node_modules, and resolving to its realpath would wrongly
- * point outside any node_modules). Falls back to the old relative guess, then cwd.
- */
-function findNodeModules() {
-    try {
-        const require = createRequire(import.meta.url);
-        for (const p of require.resolve.paths("@sapiom/agent-core") ?? []) {
-            if (existsSync(path.join(p, "@sapiom", "agent-core")))
-                return p;
-        }
-    }
-    catch {
-        // agent-core unresolvable — fall through to the relative guess.
-    }
-    try {
-        // Legacy fallback: dist/server/skills.js → dist/server → dist → package-root.
-        const here = new URL(import.meta.url).pathname;
-        return path.join(path.dirname(path.dirname(path.dirname(here))), "node_modules");
-    }
-    catch {
-        return path.join(process.cwd(), "node_modules");
-    }
-}
-/** Scan ~/.claude/skills/{id}/SKILL.md. Returns discovered skills. */
-async function scanUserSkills() {
-    const skillsDir = path.join(os.homedir(), ".claude", "skills");
-    const results = [];
-    let skillDirs;
-    try {
-        skillDirs = await fs.readdir(skillsDir);
-    }
-    catch {
-        return results; // directory doesn't exist — gracefully empty
-    }
-    for (const skillDir of skillDirs) {
-        const skillFile = path.join(skillsDir, skillDir, "SKILL.md");
-        const parsed = await readSkillFile(skillFile, skillDir, "user");
-        if (parsed)
-            results.push(parsed);
-    }
-    return results;
-}
-export function createSkillsRouter(options = {}) {
-    const router = Router();
-    // These routes touch the filesystem (skill discovery + detail reads). The
-    // harness server is localhost-only and boot-token-gated (a single local
-    // user), so this ceiling is far above any real interactive flow and never
-    // fires in practice — it's a backstop that bounds a runaway/buggy client
-    // from hammering the FS, and the explicit rate-limit control on an
-    // FS-backed route surface.
-    router.use(rateLimit({
-        windowMs: 60000,
-        limit: 240,
-        standardHeaders: true,
-        legacyHeaders: false,
-    }));
-    /**
-     * GET /api/skills — list all discoverable skills with id, name, description,
-     * and source. Safe: no paths are exposed; ids are directory names.
-     */
-    router.get("/api/skills", async (_req, res) => {
-        try {
-            // Personal user skills (~/.claude/skills) are OPT-IN, off by default: the
-            // panel surfaces what Sapiom ships (e.g. sapiom-agent-authoring), not the
-            // developer's own skills. Flip showUserSkills for a bring-your-own view.
-            const [pkgSkills, userSkills] = await Promise.all([
-                scanPackageSkills(options.nodeModulesRoot),
-                options.showUserSkills
-                    ? options.userSkillsRoot
-                        ? scanUserSkillsFromRoot(options.userSkillsRoot)
-                        : scanUserSkills()
-                    : Promise.resolve([]),
-            ]);
-            // Dedupe by id: user skills (when enabled) win over package skills.
-            const byId = new Map();
-            for (const skill of [...pkgSkills, ...userSkills]) {
-                byId.set(skill.id, { id: skill.id, name: skill.name, description: skill.description, source: skill.source });
-            }
-            res.json(Array.from(byId.values()));
-        }
-        catch (err) {
-            res.status(500).json({ error: err.message });
-        }
-    });
-    /**
-     * GET /api/skills/:id — full detail (meta + markdown body) for a single
-     * skill. Path-traversal safe: the id must be a safe slug (letters, digits,
-     * hyphens, underscores only) — the slug IS the directory name, so we can
-     * resolve it in O(1) by stat/reading `<root>/<slug>/SKILL.md` across the
-     * two roots (user first, per collision rule) without a full directory walk.
-     *
-     * The slug regex + containment guard (SAFE_SLUG + the two fixed roots)
-     * ensure no traversal is possible — a slug can never contain a path separator.
-     */
-    router.get("/api/skills/:id", async (req, res) => {
-        const { id } = req.params;
-        // Reject anything that isn't a safe slug up front — prevents any path-
-        // traversal attempt before filesystem access.
-        if (!id || !SAFE_SLUG.test(id)) {
-            res.status(404).json({ error: `Unknown skill '${id}'` });
-            return;
-        }
-        try {
-            // O(1) resolution: the id is the directory name, so build the candidate
-            // paths directly through the containment barrier. User root first (user
-            // skills win on id collision).
-            const userRoot = options.userSkillsRoot ??
-                path.join(os.homedir(), ".claude", "skills");
-            const userSkillFile = resolveSkillFileWithin(userRoot, id);
-            // Try user skill first; fall through to package skills on null result.
-            let found = userSkillFile
-                ? await readSkillFile(userSkillFile, id, "user")
-                : null;
-            if (!found) {
-                // Package skills: resolve the node_modules root and try each @sapiom
-                // package's skills directory for a matching id. Still O(packages) but
-                // avoids the full readdir of every skills subdirectory.
-                const nmRoot = options.nodeModulesRoot ?? findNodeModules();
-                const sapiomDir = path.join(nmRoot, "@sapiom");
-                let pkgDirs;
-                try {
-                    pkgDirs = await import("node:fs/promises").then((fsp) => fsp.readdir(sapiomDir));
-                }
-                catch {
-                    pkgDirs = [];
-                }
-                for (const pkg of pkgDirs) {
-                    const candidate = resolveSkillFileWithin(path.join(sapiomDir, pkg, "skills"), id);
-                    const parsed = candidate
-                        ? await readSkillFile(candidate, id, "package")
-                        : null;
-                    if (parsed) {
-                        found = parsed;
-                        break;
-                    }
-                }
-            }
-            if (!found) {
-                res.status(404).json({ error: `Unknown skill '${id}'` });
-                return;
-            }
-            const detail = {
-                id: found.id,
-                name: found.name,
-                description: found.description,
-                source: found.source,
-                body: found.body,
-            };
-            res.json(detail);
-        }
-        catch (err) {
-            res.status(500).json({ error: err.message });
-        }
-    });
-    return router;
-}
-/** Scan skills from a custom root (for testing). Same logic as scanUserSkills. */
-async function scanUserSkillsFromRoot(root) {
-    const results = [];
-    let skillDirs;
-    try {
-        skillDirs = await fs.readdir(root);
-    }
-    catch {
-        return results;
-    }
-    for (const skillDir of skillDirs) {
-        const skillFile = path.join(root, skillDir, "SKILL.md");
-        const parsed = await readSkillFile(skillFile, skillDir, "user");
-        if (parsed)
-            results.push(parsed);
-    }
-    return results;
-}
-//# sourceMappingURL=skills.js.map

package/dist/server/skills.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"skills.js","sourceRoot":"","sources":["../../src/server/skills.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,SAAS,MAAM,oBAAoB,CAAC;AAkB3C,kEAAkE;AAClE,MAAM,SAAS,GAAG,kBAAkB,CAAC;AAErC;;;;;;;GAOG;AACH,SAAS,sBAAsB,CAAC,IAAY,EAAE,IAAY;IACxD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;IAC/D,IACE,SAAS,KAAK,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,UAAU,CAAC;QACvD,CAAC,SAAS,CAAC,UAAU,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,EAC9C,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,iFAAiF;AACjF,SAAS,gBAAgB,CAAC,GAAW;IACnC,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IAEvD,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACpC,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IAE3C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,SAAS;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,mEAAmE;QACnE,2DAA2D;QAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QACvE,IAAI,GAAG;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC7B,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC;AACxD,CAAC;AAED,4EAA4E;AAC5E,KAAK,UAAU,aAAa,CAC1B,QAAgB,EAChB,EAAU,EACV,MAA0B;IAE1B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACjD,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC7C,OAAO;YACL,EAAE;YACF,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE;YACrB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE;YACnC,MAAM;YACN,IAAI;YACJ,QAAQ;SACT,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,iBAAiB,CAC9B,eAAwB;IAExB,MAAM,MAAM,GAAG,eAAe,IAAI,eAAe,EAAE,CAAC;IACpD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC/C,MAAM,OAAO,GAA0D,EAAE,CAAC;IAE1E,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC,CAAC,mDAAmD;IACrE,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QACtD,IAAI,SAAmB,CAAC;QACxB,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,kCAAkC;QAC9C,CAAC;QAED,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;YAC7D,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;YACnE,IAAI,MAAM;gBAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAS,eAAe;IACtB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/C,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,IAAI,EAAE,EAAE,CAAC;YAClE,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,gEAAgE;IAClE,CAAC;IACD,IAAI,CAAC;QACH,8EAA8E;QAC9E,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;QAC/C,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;IACnF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,cAAc,CAAC,CAAC;IAClD,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,KAAK,UAAU,cAAc;IAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC/D,MAAM,OAAO,GAA0D,EAAE,CAAC;IAE1E,IAAI,SAAmB,CAAC;IACxB,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC,CAAC,6CAA6C;IAC/D,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAChE,IAAI,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAeD,MAAM,UAAU,kBAAkB,CAAC,UAA+B,EAAE;IAClE,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB,0EAA0E;IAC1E,wEAAwE;IACxE,0EAA0E;IAC1E,yEAAyE;IACzE,mEAAmE;IACnE,2BAA2B;IAC3B,MAAM,CAAC,GAAG,CACR,SAAS,CAAC;QACR,QAAQ,EAAE,KAAM;QAChB,KAAK,EAAE,GAAG;QACV,eAAe,EAAE,IAAI;QACrB,aAAa,EAAE,KAAK;KACrB,CAAC,CACH,CAAC;IAEF;;;OAGG;IACH,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC5C,IAAI,CAAC;YACH,0EAA0E;YAC1E,0EAA0E;YAC1E,yEAAyE;YACzE,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBAChD,iBAAiB,CAAC,OAAO,CAAC,eAAe,CAAC;gBAC1C,OAAO,CAAC,cAAc;oBACpB,CAAC,CAAC,OAAO,CAAC,cAAc;wBACtB,CAAC,CAAC,sBAAsB,CAAC,OAAO,CAAC,cAAc,CAAC;wBAChD,CAAC,CAAC,cAAc,EAAE;oBACpB,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAA2D,CAAC;aACjF,CAAC,CAAC;YAEH,oEAAoE;YACpE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAqB,CAAC;YAC1C,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,SAAS,EAAE,GAAG,UAAU,CAAC,EAAE,CAAC;gBAClD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YAC/G,CAAC;YAED,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH;;;;;;;;;OASG;IACH,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC/C,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAE1B,uEAAuE;QACvE,8CAA8C;QAC9C,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YAC/B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC;YACzD,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,wEAAwE;YACxE,wEAAwE;YACxE,+BAA+B;YAC/B,MAAM,QAAQ,GACZ,OAAO,CAAC,cAAc;gBACtB,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;YAC/C,MAAM,aAAa,GAAG,sBAAsB,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YAE3D,uEAAuE;YACvE,IAAI,KAAK,GAAG,aAAa;gBACvB,CAAC,CAAC,MAAM,aAAa,CAAC,aAAa,EAAE,EAAE,EAAE,MAAM,CAAC;gBAChD,CAAC,CAAC,IAAI,CAAC;YAET,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,qEAAqE;gBACrE,sEAAsE;gBACtE,wDAAwD;gBACxD,MAAM,MAAM,GAAG,OAAO,CAAC,eAAe,IAAI,eAAe,EAAE,CAAC;gBAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;gBAC/C,IAAI,OAAiB,CAAC;gBACtB,IAAI,CAAC;oBACH,OAAO,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACtD,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CACvB,CAAC;gBACJ,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,GAAG,EAAE,CAAC;gBACf,CAAC;gBACD,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;oBAC1B,MAAM,SAAS,GAAG,sBAAsB,CACtC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,QAAQ,CAAC,EACnC,EAAE,CACH,CAAC;oBACF,MAAM,MAAM,GAAG,SAAS;wBACtB,CAAC,CAAC,MAAM,aAAa,CAAC,SAAS,EAAE,EAAE,EAAE,SAAS,CAAC;wBAC/C,CAAC,CAAC,IAAI,CAAC;oBACT,IAAI,MAAM,EAAE,CAAC;wBACX,KAAK,GAAG,MAAM,CAAC;wBACf,MAAM;oBACR,CAAC;gBACH,CAAC;YACH,CAAC;YAED,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC;gBACzD,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAgB;gBAC1B,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,IAAI,EAAE,KAAK,CAAC,IAAI;aACjB,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,kFAAkF;AAClF,KAAK,UAAU,sBAAsB,CACnC,IAAY;IAEZ,MAAM,OAAO,GAA0D,EAAE,CAAC;IAC1E,IAAI,SAAmB,CAAC;IACxB,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAChE,IAAI,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}