@skaile/workspaces 5.18.1 → 6.0.0

package/dist/chunk-IG5LZ3WU.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../core/src/driver-targets.ts"],"names":[],"mappings":";;;;AAsDO,IAAM,cAAA,GAAoD;AAAA,EAC/D,aAAA,EAAe;AAAA,IACb,KAAA,EAAO;AAAA,MACL,KAAA,EAAO,gBAAA;AAAA,MACP,KAAA,EAAO,gBAAA;AAAA,MACP,MAAA,EAAQ,kBAAA;AAAA,MACR,IAAA,EAAM,eAAA;AAAA,MACN,QAAA,EAAU;AAAA,KACZ;AAAA,IACA,MAAA,EAAQ;AAAA,MACN,KAAA,EAAO,kBAAA;AAAA,MACP,KAAA,EAAO,kBAAA;AAAA,MACP,MAAA,EAAQ,oBAAA;AAAA,MACR,IAAA,EAAM,iBAAA;AAAA,MACN,QAAA,EAAU;AAAA;AACZ,GACF;AAAA,EACA,GAAA,EAAK;AAAA,IACH,KAAA,EAAO;AAAA,MACL,KAAA,EAAO,aAAA;AAAA,MACP,KAAA,EAAO,aAAA;AAAA,MACP,MAAA,EAAQ,cAAA;AAAA,MACR,IAAA,EAAM,eAAA;AAAA,MACN,QAAA,EAAU;AAAA,KACZ;AAAA;AAAA;AAAA,IAGA,MAAA,EAAQ;AAAA,MACN,KAAA,EAAO,qBAAA;AAAA,MACP,KAAA,EAAO,qBAAA;AAAA,MACP,MAAA,EAAQ,sBAAA;AAAA,MACR,IAAA,EAAM,iBAAA;AAAA,MACN,QAAA,EAAU;AAAA;AACZ,GACF;AAAA,EACA,KAAA,EAAO;AAAA,IACL,KAAA,EAAO;AAAA,MACL,KAAA,EAAO,eAAA;AAAA,MACP,KAAA,EAAO,eAAA;AAAA,MACP,MAAA,EAAQ,cAAA;AAAA,MACR,IAAA,EAAM,eAAA;AAAA,MACN,QAAA,EAAU;AAAA,KACZ;AAAA,IACA,MAAA,EAAQ;AAAA,MACN,KAAA,EAAO,iBAAA;AAAA,MACP,KAAA,EAAO,iBAAA;AAAA,MACP,MAAA,EAAQ,gBAAA;AAAA,MACR,IAAA,EAAM,iBAAA;AAAA,MACN,QAAA,EAAU;AAAA;AACZ;AAEJ;AAWO,SAAS,sBAAsB,MAAA,EAAsD;AAC1F,EAAA,IAAI,MAAA,KAAW,cAAc,OAAO,aAAA;AACpC,EAAA,IAAI,WAAW,aAAA,IAAiB,MAAA,KAAW,KAAA,IAAS,MAAA,KAAW,SAAS,OAAO,MAAA;AAC/E,EAAA,OAAO,MAAA;AACT;AAOO,IAAM,wBAAA,GAA2B,MAAA,CAAO,IAAA,CAAK,cAAc;AAa3D,SAAS,kBAAkB,MAAA,EAA8B;AAC9D,EAAA,MAAM,SAAA,GAAY,cAAA,CAAe,MAAM,CAAA,CAAE,MAAA,CAAO,KAAA;AAChD,EAAA,MAAM,YAAA,GAAe,UAAU,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA,CAAE,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,CAAA;AAC/D,EAAA,OAAO,IAAA,CAAK,OAAA,EAAQ,EAAG,YAAY,CAAA;AACrC","file":"chunk-IG5LZ3WU.js","sourcesContent":["/**\n * Driver targets — maps agent tool identifiers to their install paths.\n *\n * Only harnesses with a full bridge driver (runtime execution) are included.\n * Render-only targets (cursor, roo, github-copilot, gemini, amp) were removed —\n * add them back when a bridge driver is implemented.\n */\nimport { homedir } from \"node:os\";\nimport { join } from \"node:path\";\nimport type { AssetInstallTarget } from \"@skaile/workspaces/plugins\";\n\n/**\n * All supported coding-agent driver target identifiers.\n * Only harnesses with a full bridge driver (runtime execution) are included.\n * @docLink packages/core/concepts#driver-target\n */\nexport type DriverTarget = \"claude-code\" | \"omp\" | \"codex\";\n\n/**\n * Filesystem install path configuration for a single driver target.\n * Paths are relative to the project root (`local`) or the home directory (`global`).\n * `~` in global paths is expanded to `$HOME` by `deployedBase`.\n * @docLink packages/core/concepts#agent-target\n */\nexport interface AgentTarget {\n  /** Project-relative install paths for each AI component type. */\n  local: Record<AiComponent, string>;\n  /** Home-relative install paths for each AI component type (`~` = `$HOME`). */\n  global: Record<AiComponent, string>;\n}\n\n/**\n * The distinct asset types that can be installed into a driver target directory —\n * the `installTarget` values an `IAssetKindProvider` may declare.\n * Used as keys in `AgentTarget.local` and `AgentTarget.global`.\n * @docLink packages/core/concepts#ai-component\n */\nexport type AiComponent = AssetInstallTarget;\n\n/**\n * Filesystem install path configuration for every supported driver target.\n * `local` paths are relative to the project root; `global` paths are home-relative (`~` = `$HOME`).\n *\n * Only targets with a full bridge driver are included. Removed targets:\n *   cursor         — no bridge driver\n *   roo            — no bridge driver\n *   github-copilot — no bridge driver\n *   gemini         — no bridge driver\n *   amp            — no bridge driver\n *   windsurf       — no file-based agent support\n *   cline          — no file-based agent support\n *   continue       — no file-based agent support\n * @docLink packages/core/concepts#driver-targets\n */\nexport const DRIVER_TARGETS: Record<DriverTarget, AgentTarget> = {\n  \"claude-code\": {\n    local: {\n      skill: \".claude/skills\",\n      agent: \".claude/agents\",\n      prompt: \".claude/commands\",\n      flow: \".skaile/flows\",\n      contract: \".claude/contracts\",\n    },\n    global: {\n      skill: \"~/.claude/skills\",\n      agent: \"~/.claude/agents\",\n      prompt: \"~/.claude/commands\",\n      flow: \"~/.skaile/flows\",\n      contract: \"~/.claude/contracts\",\n    },\n  },\n  omp: {\n    local: {\n      skill: \".omp/skills\",\n      agent: \".omp/agents\",\n      prompt: \".omp/prompts\",\n      flow: \".skaile/flows\",\n      contract: \".omp/contracts\",\n    },\n    // omp reads user-level skills, agents and prompts from its agent dir (`~/.omp/agent/...`), not\n    // from `~/.omp/` itself (omp's config-usage docs, \"Scope-specific loading\").\n    global: {\n      skill: \"~/.omp/agent/skills\",\n      agent: \"~/.omp/agent/agents\",\n      prompt: \"~/.omp/agent/prompts\",\n      flow: \"~/.skaile/flows\",\n      contract: \"~/.omp/agent/contracts\",\n    },\n  },\n  codex: {\n    local: {\n      skill: \".codex/skills\",\n      agent: \".codex/agents\",\n      prompt: \".codex/rules\",\n      flow: \".skaile/flows\",\n      contract: \".codex/contracts\",\n    },\n    global: {\n      skill: \"~/.codex/skills\",\n      agent: \"~/.codex/agents\",\n      prompt: \"~/.codex/rules\",\n      flow: \"~/.skaile/flows\",\n      contract: \"~/.codex/contracts\",\n    },\n  },\n};\n\n/**\n * Map a bridge driver id (`skaile.yaml` `agent-config.*.driver`, as written by\n * `skaile init --harness`) to the {@link DriverTarget} whose install dirs it\n * reads: `claude-sdk` → `claude-code`, `omp` → `omp`, `codex` → `codex`.\n *\n * @param driver - Bridge driver id, or a driver-target id (accepted as-is).\n * @returns The matching target, or `undefined` for an unset/unknown driver.\n * @docLink packages/core/concepts#driver-target-for-driver\n */\nexport function driverTargetForDriver(driver: string | undefined): DriverTarget | undefined {\n  if (driver === \"claude-sdk\") return \"claude-code\";\n  if (driver === \"claude-code\" || driver === \"omp\" || driver === \"codex\") return driver;\n  return undefined;\n}\n\n/**\n * Array of all `DriverTarget` values that support file-based asset installation\n * (skills, agents, prompts, flows, contracts).\n * @docLink packages/core/concepts#supported-driver-targets\n */\nexport const SUPPORTED_DRIVER_TARGETS = Object.keys(DRIVER_TARGETS) as DriverTarget[];\n\n/**\n * Absolute path to a driver target's **global harness root** — the home-relative\n * directory that identifies the harness on disk (e.g. `~/.claude`, `~/.omp`,\n * `~/.codex`). Derived from the first path segment of the target's global skill\n * path. Used by `resolveGlobalHarnesses` to auto-detect which harnesses the user\n * runs globally (a harness \"exists globally\" when this dir is present).\n *\n * @param target - Driver target identifier.\n * @returns Absolute path to the harness's home-relative root dir.\n * @docLink packages/core/concepts#global-harness-root\n */\nexport function globalHarnessRoot(target: DriverTarget): string {\n  const skillPath = DRIVER_TARGETS[target].global.skill; // e.g. \"~/.claude/skills\"\n  const firstSegment = skillPath.replace(/^~\\//, \"\").split(\"/\")[0]; // \".claude\"\n  return join(homedir(), firstSegment);\n}\n"]}

package/dist/chunk-IW6F6R2W.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../cli/src/commands/project.ts"],"names":["confirm"],"mappings":";;;;;;;;;;;;;;AAmDO,IAAM,QAAA,GAAW;AAGxB,SAAS,gBAAgB,GAAA,EAAsB;AAC7C,EAAA,IAAI;AACF,IAAA,aAAA,CAAc,GAAG,CAAA;AACjB,IAAA,OAAO,IAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAqBO,SAAS,wBAAwB,MAAA,EAAkD;AACxF,EAAA,OACE,OAAQ,QAAgE,kBAAA,KACxE,UAAA;AAEJ;AAwCA,eAAsB,qBAAA,CACpB,KACA,IAAA,EACmC;AACnC,EAAA,IAAI,SAAA;AACJ,EAAA,IAAI;AACF,IAAA,SAAA,GAAY,cAAc,GAAG,CAAA;AAAA,EAC/B,SAAS,CAAA,EAAG;AACV,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,qBAAA,EAAwB,GAAG,CAAA,kBAAA,EAAgB,QAAQ,CAAA,EAAA,EAAK,CAAA,YAAa,KAAA,GAAQ,CAAA,CAAE,OAAA,GAAU,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,KACpG;AAAA,EACF;AACA,EAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,OAAA,CAAQ,mBAAmB,GAAG,CAAA;AAI1D,EAAA,MAAM,GAAA,GAAM,aAAA,CAAc,QAAA,CAAS,GAAG,CAAA;AACtC,EAAA,IACE,GAAA,CAAI,IAAA,KAAS,SAAA,CAAU,IAAA,IACvB,IAAI,SAAA,KAAc,SAAA,CAAU,SAAA,IAC5B,GAAA,CAAI,SAAS,SAAA,CAAU,IAAA,IACvB,GAAA,CAAI,GAAA,KAAQ,UAAU,GAAA,EACtB;AACA,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,sCAAA,EAAyC,GAAG,CAAA,2CAAA,EAA8C,QAAA,CAAS,GAAG,CAAA,CAAA;AAAA,KACxG;AAAA,EACF;AACA,EAAA,MAAM,EAAE,WAAA,EAAY,GAAI,MAAM,IAAA,CAAK,OAAA,CAAQ,QAAQ,QAAQ,CAAA;AAC3D,EAAA,OAAO;AAAA,IACL,WAAA;AAAA,IACA,SAAA,EAAW,SAAS,MAAA,CAAO,SAAA;AAAA,IAC3B,SAAA,EAAW,SAAS,KAAA,CAAM;AAAA,GAC5B;AACF;AAOO,SAAS,sBAAA,CACd,OAAA,EACA,MAAA,GAAiC,OAAA,EAC3B;AACN,EAAA,KAAA,MAAW,MAAA,IAAU,OAAA,IAAW,EAAC,EAAG;AAClC,IAAA,MAAA;AAAA,MACE,CAAA,OAAA,EAAU,OAAO,GAAG,CAAA,EAAA,EAAK,OAAO,MAAM,CAAA,SAAA,EAAY,OAAO,OAAO,CAAA,wDAAA;AAAA,KAClE;AAAA,EACF;AACF;AAMO,SAAS,qBACd,SAAA,EACA,YAAA,EACA,MAAA,GAAiC,OAAA,EACjC,YAAoC,OAAA,EAC9B;AACN,EAAA,KAAA,MAAW,QAAA,IAAY,SAAA,IAAa,EAAC,EAAG;AACtC,IAAA,MAAA,CAAO,CAAA,MAAA,EAAS,SAAS,EAAE,CAAA,EAAA,EAAK,SAAS,KAAA,CAAM,IAAA,CAAK,IAAI,CAAC,CAAA,CAAE,CAAA;AAAA,EAC7D;AACA,EAAA,KAAA,MAAW,QAAQ,YAAA,IAAgB,IAAI,SAAA,CAAU,CAAA,SAAA,EAAY,IAAI,CAAA,CAAE,CAAA;AACrE;AAGO,SAAS,cAAA,CACd,QAAA,EACA,MAAA,GAAiC,OAAA,EAC3B;AACN,EAAA,KAAA,MAAW,OAAO,QAAA,IAAY,IAAI,MAAA,CAAO,CAAA,UAAA,EAAa,GAAG,CAAA,CAAE,CAAA;AAC7D;AAGO,SAAS,WAAA,CACd,KAAA,EACA,MAAA,GAAiC,OAAA,EAC3B;AACN,EAAA,KAAA,MAAW,CAAA,IAAK,KAAA,IAAS,EAAC,SAAU,CAAA,EAAG,CAAA,CAAE,GAAG,CAAA,YAAA,EAAe,CAAA,CAAE,IAAI,CAAA,IAAA,EAAO,CAAA,CAAE,EAAE,CAAA,CAAE,CAAA;AAChF;AAGO,SAAS,cAAA,CACd,QAAA,EACA,MAAA,GAAiC,OAAA,EAC3B;AACN,EAAA,KAAA,MAAW,CAAA,IAAK,QAAA,IAAY,EAAC,SAAU,CAAA,EAAG,CAAA,CAAE,GAAG,CAAA,UAAA,EAAa,CAAA,CAAE,IAAI,CAAA,QAAA,EAAM,CAAA,CAAE,EAAE,CAAA,CAAE,CAAA;AAChF;AAGO,SAAS,eAAA,CACd,SAAA,EACA,MAAA,GAAiC,OAAA,EAC3B;AACN,EAAA,KAAA,MAAW,CAAA,IAAK,SAAA,IAAa,EAAC,EAAG;AAC/B,IAAA,KAAA,MAAW,KAAK,CAAA,CAAE,KAAA,EAAO,MAAA,CAAO,CAAA,QAAA,EAAW,CAAC,CAAA,uBAAA,CAAyB,CAAA;AAAA,EACvE;AACF;AAUO,SAAS,sBACd,UAAA,EACS;AACT,EAAA,IAAI,WAAA,GAAc,KAAA;AAClB,EAAA,KAAA,MAAW,CAAA,IAAK,UAAA,IAAc,EAAC,EAAG;AAChC,IAAA,IAAI,CAAA,CAAE,WAAW,aAAA,EAAe;AAC9B,MAAA,WAAA,GAAc,IAAA;AACd,MAAA,MAAA,CAAO,sCAAsC,CAAA,CAAE,GAAG,CAAA,cAAA,EAAiB,CAAA,CAAE,MAAM,CAAA,CAAA,CAAG,CAAA;AAAA,IAChF,CAAA,MAAA,IAAW,CAAA,CAAE,MAAA,KAAW,YAAA,EAAc;AACpC,MAAA,OAAA,CAAQ,CAAA,EAAG,CAAA,CAAE,GAAG,CAAA,2DAAA,CAA6D,CAAA;AAAA,IAC/E,CAAA,MAAO;AACL,MAAA,OAAA,CAAQ,GAAG,CAAA,CAAE,GAAG,CAAA,iBAAA,EAAoB,CAAA,CAAE,MAAM,CAAA,CAAA,CAAG,CAAA;AAAA,IACjD;AAAA,EACF;AACA,EAAA,OAAO,WAAA;AACT;AAoBO,SAAS,kBAAA,GAA8B;AAC5C,EAAA,OAAO,IAAI,OAAA,CAAQ,SAAS,CAAA,CACzB,WAAA,CAAY,CAAA,iEAAA,EAAoE,QAAQ,CAAA,CAAA,CAAG,CAAA,CAC3F,QAAA,CAAS,OAAA,EAAS,CAAA,uCAAA,EAA0C,QAAQ,CAAA,CAAA,CAAG,CAAA,CACvE,MAAA,CAAO,UAAA,EAAY,wDAAmD,CAAA,CACtE,MAAA,CAAO,sBAAA,EAAwB,qBAAqB,OAAA,CAAQ,GAAA,EAAK,CAAA,CACjE,MAAA,CAAO,kBAAA,EAAoB,CAAA,iBAAA,EAAoB,mBAAmB,GAAG,CAAA,CACrE,MAAA;AAAA,IACC,UAAA;AAAA,IACA;AAAA,GACF,CACC,MAAA;AAAA,IACC,iBAAA;AAAA,IACA;AAAA,GACF,CACC,MAAA;AAAA,IACC,QAAA;AAAA,IACA;AAAA,GACF,CACC,MAAA;AAAA,IACC,SAAA;AAAA,IACA;AAAA,GACF,CACC,MAAA;AAAA,IACC,WAAA;AAAA,IACA;AAAA,GACF,CACC,OAAO,iBAAiB,CAAA;AAC7B;AAmBA,eAAe,iBAAA,CACb,KACA,IAAA,EACe;AAEf,EAAA,IAAI,QAAQ,MAAA,EAAW;AACrB,IAAA,MAAM,aAAA,CAAc,KAAK,IAAI,CAAA;AAC7B,IAAA;AAAA,EACF;AAGA,EAAA,MAAM,eAAe,IAAI,CAAA;AAC3B;AAGA,eAAe,aAAA,CAAc,KAAa,IAAA,EAA4C;AACpF,EAAA,IAAI,CAAC,eAAA,CAAgB,GAAG,CAAA,EAAG;AACzB,IAAA,MAAA,CAAO,CAAA,qBAAA,EAAwB,GAAG,CAAA,kBAAA,EAAgB,QAAQ,CAAA,CAAE,CAAA;AAC5D,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AAGA,EAAA,IAAI,CAAC,aAAA,CAAc,GAAG,CAAA,CAAE,GAAA,EAAK;AAC3B,IAAA,MAAA;AAAA,MACE,CAAA,EAAG,GAAG,CAAA,sBAAA,EAAyB,GAAG,6DAA6D,GAAG,CAAA,2BAAA;AAAA,KACpG;AACA,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AACA,EAAA,MAAM,UAAU,aAAA,EAAc;AAC9B,EAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,WAAA,EAAc,GAAG,CAAA,CAAE,CAAA;AACjC,EAAA,IAAI;AACF,IAAA,MAAM,EAAE,iBAAA,EAAmB,WAAA,EAAY,GAAI,MAAM,OAAO,4BAAoB,CAAA;AAC5E,IAAA,MAAM,OAAA,GAAU,MAAM,iBAAA,CAAkB,EAAE,UAAA,EAAY,KAAK,OAAA,CAAQ,IAAA,CAAK,UAAU,CAAA,EAAG,CAAA;AAIrF,IAAA,IAAI,CAAC,uBAAA,CAAwB,OAAO,CAAA,EAAG;AACrC,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,oOAAA,EAGQ,gBAAgB,CAAA,CAAA;AAAA,OAC1B;AAAA,IACF;AACA,IAAA,MAAM,OAAA,GAAU,MAAM,WAAA,EAAY;AAClC,IAAA,IAAI;AACF,MAAA,MAAM,SAAS,MAAM,qBAAA,CAAsB,KAAK,EAAE,OAAA,EAAS,SAAS,CAAA;AACpE,MAAA,OAAA,CAAQ,KAAK,MAAM,CAAA;AACnB,MAAA,KAAA,CAAM,CAAA,UAAA,EAAa,QAAA,CAAS,GAAG,CAAC,CAAA,CAAE,CAAA;AAClC,MAAA,OAAA,CAAQ,SAAS,CAAA,CAAE,GAAA,CAAI,MAAA,CAAO,WAAW,CAAC,CAAA,CAAE,CAAA;AAC5C,MAAA,OAAA,CAAQ,WAAW,CAAA,CAAE,GAAA,CAAI,MAAA,CAAO,SAAS,CAAC,CAAA,CAAE,CAAA;AAC5C,MAAA,OAAA,CAAQ,CAAA,OAAA,EAAU,EAAE,GAAA,CAAI,MAAA,CAAO,OAAO,SAAS,CAAC,CAAC,CAAA,CAAE,CAAA;AACnD,MAAA,OAAA;AAAA,QACE,CAAA,CAAE,GAAA;AAAA,UACA,+DAA0D,GAAG,CAAA,+BAAA;AAAA;AAC/D,OACF;AAAA,IACF,CAAA,SAAE;AACA,MAAA,OAAA,CAAQ,KAAA,EAAM;AAAA,IAChB;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,OAAA,CAAQ,KAAK,QAAQ,CAAA;AACrB,IAAA,MAAM,MAAM,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAC3D,IAAA,IAAI,eAAA,CAAgB,IAAA,CAAK,GAAG,CAAA,EAAG;AAC7B,MAAA,MAAA;AAAA,QACE,GAAG,GAAG,CAAA,2DAAA,EAA8D,IAAI,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAC,CAAA,GAAA;AAAA,OAC7F;AAAA,IACF,CAAA,MAAA,IAAW,cAAA,CAAe,IAAA,CAAK,GAAG,CAAA,EAAG;AACnC,MAAA,MAAA,CAAO,CAAA,8DAAA,EAA4D,GAAG,CAAA,CAAA,CAAG,CAAA;AAAA,IAC3E,CAAA,MAAO;AACL,MAAA,MAAA,CAAO,GAAG,CAAA;AAAA,IACZ;AACA,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AACF;AAGA,eAAe,eAAe,IAAA,EAA4C;AACxE,EAAA,MAAM,UAAA,GAAa,IAAA,CAAK,OAAA,CAAQ,IAAA,CAAK,UAAU,CAAA;AAE/C,EAAA,MAAM,SAAA,GAAY,kBAAA,CAAmB,IAAA,CAAK,OAAO,CAAA;AAEjD,EAAA,IAAI,IAAA,CAAK,UAAU,SAAA,EAAW;AAC5B,IAAA,MAAM,gBAAA,CAAiB,MAAM,SAAS,CAAA;AACtC,IAAA;AAAA,EACF;AAIA,EAAA,oBAAA,CAAqB,UAAU,CAAA;AAI/B,EAAA,IAAI;AACF,IAAA,MAAM,EAAE,mBAAA,EAAoB,GAAI,MAAM,OAAO,8BAAsB,CAAA;AACnE,IAAA,MAAM,UAAU,mBAAA,CAAoB,UAAA,EAAY,EAAE,KAAA,EAAO,MAAM,CAAA;AAC/D,IAAA,IAAI,OAAA,CAAQ,MAAA,CAAO,MAAA,GAAS,CAAA,EAAG;AAC7B,MAAA,KAAA,CAAM,qBAAqB,OAAA,CAAQ,MAAA,CAAO,IAAA,CAAK,IAAI,CAAC,CAAA,CAAE,CAAA;AAAA,IACxD;AACA,IAAA,IAAI,OAAA,CAAQ,MAAA,CAAO,MAAA,GAAS,CAAA,EAAG;AAC7B,MAAA,MAAA,CAAO,8BAA8B,OAAA,CAAQ,MAAA,CAAO,IAAA,CAAK,IAAI,CAAC,CAAA,CAAE,CAAA;AAAA,IAClE;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,OAAA,CAAQ,CAAA,0BAAA,EAA6B,eAAe,KAAA,GAAQ,GAAA,CAAI,UAAU,MAAA,CAAO,GAAG,CAAC,CAAA,CAAE,CAAA;AAAA,EACzF;AAEA,EAAA,MAAM,EAAA,GAAK,IAAI,YAAA,CAAa;AAAA,IAC1B,UAAU,eAAA,EAAgB;AAAA,IAC1B,UAAA;AAAA,IACA,cAAc,IAAA,CAAK;AAAA,GACpB,CAAA;AACD,EAAA,MAAM,UAAU,aAAA,EAAc;AAC9B,EAAA,OAAA,CAAQ,KAAA,CAAM,IAAA,CAAK,MAAA,GAAS,2BAAA,GAA8B,yBAAyB,CAAA;AACnF,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,MAAM,EAAA,CAAG,OAAA,CAAQ,EAAE,MAAA,EAAQ,IAAA,CAAK,MAAA,EAAQ,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,KAAA,EAAO,IAAA,CAAK,OAAO,CAAA;AAC3F,IAAA,MAAM,gBAAA,GAAmB,OAAO,eAAA,EAAiB,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,WAAW,aAAa,CAAA;AACvF,IAAA,OAAA,CAAQ,IAAA;AAAA,MACN,MAAA,CAAO,qBAAqB,MAAA,IAAU,MAAA,CAAO,QAAQ,MAAA,GAAS,CAAA,IAAK,mBAC/D,QAAA,GACA;AAAA,KACN;AACA,IAAA,IAAI,MAAA,CAAO,QAAA,CAAS,MAAA,GAAS,CAAA,EAAG;AAC9B,MAAA,KAAA,MAAW,CAAA,IAAK,MAAA,CAAO,QAAA,EAAU,KAAA,CAAM,CAAC,CAAA;AAAA,IAC1C;AACA,IAAA,qBAAA,CAAsB,MAAA,CAAO,iBAAA,EAAmB,MAAA,CAAO,uBAAuB,CAAA;AAC9E,IAAA,KAAA,MAAW,CAAA,IAAK,MAAA,CAAO,QAAA,IAAY,EAAC,EAAG;AACrC,MAAA,KAAA,MAAW,KAAK,CAAA,CAAE,QAAA,EAAU,OAAA,CAAQ,CAAA,SAAA,EAAY,CAAC,CAAA,CAAE,CAAA;AACnD,MAAA,KAAA,MAAW,CAAA,IAAK,EAAE,OAAA,EAAS,OAAA,CAAQ,WAAW,CAAC,CAAA,cAAA,EAAiB,CAAA,CAAE,GAAG,CAAA,CAAA,CAAG,CAAA;AAAA,IAC1E;AACA,IAAA,eAAA,CAAgB,OAAO,SAAS,CAAA;AAChC,IAAA,sBAAA,CAAuB,OAAO,OAAO,CAAA;AACrC,IAAA,oBAAA,CAAqB,MAAA,CAAO,cAAA,EAAgB,MAAA,CAAO,iBAAiB,CAAA;AAEpE,IAAA,IAAI,MAAA,CAAO,SAAS,MAAA,GAAS,CAAA,IAAK,OAAO,QAAA,EAAU,MAAA,IAAU,MAAA,CAAO,cAAA,EAAgB,MAAA,EAAQ;AAC1F,MAAA,sBAAA,CAAuB,EAAA,CAAG,UAAA,EAAY,EAAA,CAAG,YAAY,CAAA;AAAA,IACvD;AACA,IAAA,IAAI,MAAA,CAAO,OAAA,CAAQ,MAAA,GAAS,CAAA,EAAG;AAC7B,MAAA,KAAA,MAAW,KAAK,MAAA,CAAO,OAAA,EAAS,OAAA,CAAQ,CAAA,SAAA,EAAY,CAAC,CAAA,CAAE,CAAA;AAAA,IACzD;AACA,IAAA,cAAA,CAAe,OAAO,QAAQ,CAAA;AAC9B,IAAA,cAAA,CAAe,OAAO,QAAQ,CAAA;AAC9B,IAAA,WAAA,CAAY,OAAO,KAAK,CAAA;AACxB,IAAA,IACE,MAAA,CAAO,QAAA,CAAS,MAAA,KAAW,CAAA,IAC3B,OAAO,OAAA,CAAQ,MAAA,KAAW,CAAA,IAC1B,CAAC,OAAO,QAAA,EAAU,MAAA,IAClB,MAAA,CAAO,OAAA,CAAQ,WAAW,CAAA,IAC1B,CAAC,MAAA,CAAO,eAAA,EAAiB,UACzB,CAAC,MAAA,CAAO,QAAA,EAAU,MAAA,IAClB,CAAC,MAAA,CAAO,QAAA,EAAU,MAAA,IAClB,CAAC,OAAO,KAAA,EAAO,MAAA,IACf,CAAC,MAAA,CAAO,qBAAqB,MAAA,EAC7B;AACA,MAAA,OAAA,CAAQ,0CAA0C,CAAA;AAAA,IACpD;AACA,IAAA,IAAI,MAAA,CAAO,qBAAqB,MAAA,EAAQ;AACtC,MAAA,IAAI,IAAA,CAAK,OAAA,EAAS,KAAA,MAAW,CAAA,IAAK,MAAA,CAAO,oBAAA,IAAwB,EAAC,EAAG,OAAA,CAAQ,CAAA,CAAE,GAAA,CAAI,CAAC,CAAC,CAAA;AACrF,MAAA,MAAA;AAAA,QACE,CAAA,EAAG,MAAA,CAAO,mBAAA,CAAoB,MAAM,CAAA,oDAAA;AAAA,OACtC;AACA,MAAA,OAAA,CAAQ,QAAA,GAAW,CAAA;AAAA,IACrB;AACA,IAAA,IAAI,MAAA,CAAO,OAAA,CAAQ,MAAA,GAAS,CAAA,EAAG;AAC7B,MAAA,KAAA,MAAW,CAAA,IAAK,MAAA,CAAO,OAAA,EAAS,MAAA,CAAO,CAAA,SAAA,EAAY,CAAC,CAAA,EAAG,MAAA,CAAO,YAAA,GAAe,CAAC,CAAA,IAAK,EAAE,CAAA,CAAE,CAAA;AAGvF,MAAA,OAAA,CAAQ,QAAA,GAAW,CAAA;AAAA,IACrB;AACA,IAAA,IAAI,qBAAA,CAAsB,MAAA,CAAO,eAAe,CAAA,UAAW,QAAA,GAAW,CAAA;AACtE,IAAA,IAAI,OAAO,WAAA,EAAa;AACtB,MAAA,OAAA,CAAQ,CAAA,mBAAA,EAAsB,CAAA,CAAE,GAAA,CAAI,kBAAkB,CAAC,CAAA,CAAE,CAAA;AAAA,IAC3D;AACA,IAAA,sBAAA,CAAuB,EAAE,CAAA;AAIzB,IAAA,IAAI,CAAC,IAAA,CAAK,MAAA,EAAQ,MAAM,wBAAwB,EAAE,CAAA;AAAA,EACpD,SAAS,GAAA,EAAK;AACZ,IAAA,OAAA,CAAQ,KAAK,QAAQ,CAAA;AACrB,IAAA,MAAA,CAAO,eAAe,gBAAA,GAAmB,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA;AAClE,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AACF;AASA,eAAsB,uBAAA,CACpB,EAAA,EACA,MAAA,GAAiC,CAAC,CAAA,KAAM,QAAQ,CAAA,CAAE,GAAA,CAAI,CAAC,CAAC,CAAA,EACzC;AACf,EAAA,IAAI;AACF,IAAA,MAAM,QAAA,GAAA,CAAY,MAAM,EAAA,CAAG,YAAA,IAAgB,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,GAAG,CAAA;AAC3D,IAAA,IAAI,QAAA,CAAS,WAAW,CAAA,EAAG;AAC3B,IAAA,MAAM,KAAA,GAAQ,MAAM,EAAA,CAAG,cAAA,CAAe,QAAQ,CAAA;AAC9C,IAAA,KAAA,MAAW,IAAA,IAAQ,KAAA,EAAO,MAAA,CAAO,iBAAA,CAAkB,IAAI,CAAC,CAAA;AAAA,EAC1D,CAAA,CAAA,MAAQ;AAAA,EAER;AACF;AAQA,eAAe,gBAAA,CACb,MACA,SAAA,EACe;AACf,EAAA,MAAM,EAAA,GAAK,IAAI,YAAA,CAAa;AAAA,IAC1B,UAAU,eAAA,EAAgB;AAAA,IAC1B,UAAA,EAAY,IAAA,CAAK,OAAA,CAAQ,IAAA,CAAK,UAAU,CAAA;AAAA,IACxC,MAAA,EAAQ,IAAA;AAAA,IACR;AAAA,GACD,CAAA;AACD,EAAA,MAAM,UAAU,aAAA,EAAc;AAC9B,EAAA,OAAA,CAAQ,MAAM,gCAAgC,CAAA;AAC9C,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,MAAM,EAAA,CAAG,OAAA,CAAQ,EAAE,MAAA,EAAQ,IAAA,CAAK,MAAA,EAAQ,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,KAAA,EAAO,IAAA,CAAK,OAAO,CAAA;AAC3F,IAAA,MAAM,gBAAA,GAAmB,OAAO,eAAA,EAAiB,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,WAAW,aAAa,CAAA;AACvF,IAAA,OAAA,CAAQ,KAAK,MAAA,CAAO,OAAA,CAAQ,SAAS,CAAA,IAAK,gBAAA,GAAmB,WAAW,MAAM,CAAA;AAC9E,IAAA,IAAI,MAAA,CAAO,SAAS,MAAA,GAAS,CAAA,aAAc,CAAA,IAAK,MAAA,CAAO,QAAA,EAAU,KAAA,CAAM,CAAC,CAAA;AACxE,IAAA,qBAAA,CAAsB,MAAA,CAAO,iBAAA,EAAmB,MAAA,CAAO,uBAAuB,CAAA;AAC9E,IAAA,sBAAA,CAAuB,OAAO,OAAO,CAAA;AACrC,IAAA,IAAI,MAAA,CAAO,OAAA,CAAQ,MAAA,GAAS,CAAA,EAAG,KAAA,MAAW,CAAA,IAAK,MAAA,CAAO,OAAA,EAAS,OAAA,CAAQ,CAAA,SAAA,EAAY,CAAC,CAAA,CAAE,CAAA;AACtF,IAAA,cAAA,CAAe,OAAO,QAAQ,CAAA;AAC9B,IAAA,cAAA,CAAe,OAAO,QAAQ,CAAA;AAC9B,IAAA,WAAA,CAAY,OAAO,KAAK,CAAA;AACxB,IAAA,IACE,MAAA,CAAO,QAAA,CAAS,MAAA,KAAW,CAAA,IAC3B,MAAA,CAAO,OAAA,CAAQ,MAAA,KAAW,CAAA,IAC1B,CAAC,MAAA,CAAO,QAAA,EAAU,MAAA,IAClB,MAAA,CAAO,QAAQ,MAAA,KAAW,CAAA,IAC1B,CAAC,MAAA,CAAO,eAAA,EAAiB,MAAA,IACzB,CAAC,MAAA,CAAO,QAAA,EAAU,MAAA,IAClB,CAAC,MAAA,CAAO,KAAA,EAAO,MAAA;AAEf,MAAA,OAAA,CAAQ,0CAA0C,CAAA;AACpD,IAAA,IAAI,qBAAA,CAAsB,MAAA,CAAO,eAAe,CAAA,UAAW,QAAA,GAAW,CAAA;AACtE,IAAA,IAAI,MAAA,CAAO,OAAA,CAAQ,MAAA,GAAS,CAAA,EAAG;AAC7B,MAAA,KAAA,MAAW,CAAA,IAAK,MAAA,CAAO,OAAA,EAAS,MAAA,CAAO,CAAA,SAAA,EAAY,CAAC,CAAA,EAAG,MAAA,CAAO,YAAA,GAAe,CAAC,CAAA,IAAK,EAAE,CAAA,CAAE,CAAA;AACvF,MAAA,OAAA,CAAQ,QAAA,GAAW,CAAA;AAAA,IACrB;AACA,IAAA,IAAI,MAAA,CAAO,aAAa,OAAA,CAAQ,CAAA,qBAAA,EAAwB,EAAE,GAAA,CAAI,4BAA4B,CAAC,CAAA,CAAE,CAAA;AAC7F,IAAA,qBAAA,CAAsB,EAAA,CAAG,uBAAA,EAAwB,EAAG,EAAA,CAAG,sBAAsB,CAAA;AAG7E,IAAA,MAAM,KAAA,GAAQ,EAAA,CAAG,WAAA,CAAY,EAAE,CAAA;AAC/B,IAAA,MAAM,SAAA,uBAAgB,GAAA,EAAoB;AAC1C,IAAA,KAAA,MAAW,CAAA,IAAK,KAAA;AACd,MAAA,IAAI,CAAA,CAAE,KAAA,KAAU,WAAA,EAAa,SAAA,CAAU,GAAA,CAAI,CAAA,CAAE,OAAA,EAAA,CAAU,SAAA,CAAU,GAAA,CAAI,CAAA,CAAE,OAAO,CAAA,IAAK,KAAK,CAAC,CAAA;AAC3F,IAAA,KAAA,MAAW,CAAC,OAAA,EAAS,CAAC,CAAA,IAAK,SAAA,UAAmB,CAAA,EAAG,OAAO,CAAA,EAAA,EAAK,CAAC,CAAA,UAAA,CAAY,CAAA;AAAA,EAC5E,SAAS,GAAA,EAAK;AACZ,IAAA,OAAA,CAAQ,KAAK,QAAQ,CAAA;AACrB,IAAA,MAAA,CAAO,MAAA,CAAO,GAAG,CAAC,CAAA;AAClB,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AACF;AAUA,SAAS,cAAc,IAAA,EAAwC;AAC7D,EAAA,OAAO,IAAI,YAAA,CAAa;AAAA,IACtB,UAAU,eAAA,EAAgB;AAAA,IAC1B,UAAA,EAAY,IAAA,CAAK,OAAA,CAAQ,IAAA,CAAK,UAAU,CAAA;AAAA,IACxC,MAAA,EAAQ,IAAA;AAAA,IACR,SAAA,EAAW,kBAAA,CAAmB,IAAA,CAAK,OAAO;AAAA,GAC3C,CAAA;AACH;AAOO,SAAS,eAAe,EAAA,EAA4B;AACzD,EAAA,MAAM,KAAA,uBAAY,GAAA,EAAY;AAC9B,EAAA,KAAA,MAAW,GAAA,IAAO,EAAA,CAAG,WAAA,CAAY,EAAE,CAAA,EAAG;AACpC,IAAA,IAAI,GAAA,CAAI,UAAU,UAAA,EAAY;AAC5B,MAAA,KAAA,CAAM,GAAA;AAAA,QACJ,CAAA,EAAG,IAAI,GAAG,CAAA,oFAAA;AAAA,OACZ;AAAA,IACF,CAAA,MAAA,IAAW,GAAA,CAAI,KAAA,KAAU,OAAA,EAAS;AAChC,MAAA,KAAA,CAAM,GAAA;AAAA,QACJ,CAAA,EAAG,IAAI,GAAG,CAAA,iBAAA,EAAoB,IAAI,OAAO,CAAA,wCAAA,EAA2C,IAAI,OAAO,CAAA;AAAA,OACjG;AAAA,IACF,CAAA,MAAA,IAAW,GAAA,CAAI,KAAA,KAAU,SAAA,EAAW;AAClC,MAAA,KAAA,CAAM,GAAA,CAAI,CAAA,EAAG,GAAA,CAAI,GAAG,CAAA,kDAAA,CAAoD,CAAA;AAAA,IAC1E;AAAA,EACF;AACA,EAAA,KAAA,MAAW,KAAA,IAAS,EAAA,CAAG,oBAAA,EAAqB,EAAG;AAC7C,IAAA,KAAA,CAAM,GAAA;AAAA,MACJ,CAAA,EAAG,KAAA,CAAM,IAAA,CAAK,OAAA,CAAQ,OAAA,IAAW,GAAG,CAAC,CAAA,uBAAA,EAA0B,KAAA,CAAM,GAAG,CAAA,kFAAA;AAAA,KAC1E;AAAA,EACF;AACA,EAAA,OAAO,CAAC,GAAG,KAAK,CAAA;AAClB;AAiBO,SAAS,gBAAA,GAA4B;AAC1C,EAAA,OAAO,IAAI,OAAA,CAAQ,OAAO,CAAA,CACvB,WAAA,CAAY,8BAA8B,CAAA,CAC1C,MAAA,CAAO,sBAAA,EAAwB,mBAAA,EAAqB,OAAA,CAAQ,GAAA,EAAK,CAAA,CACjE,MAAA,CAAO,UAAA,EAAY,6DAA6D,CAAA,CAChF,MAAA,CAAO,mBAAmB,uDAAuD,CAAA,CACjF,MAAA,CAAO,OAAO,IAAA,KAAS;AACtB,IAAA,IAAI,IAAA,CAAK,MAAA,IAAU,IAAA,CAAK,OAAA,EAAS;AAC/B,MAAA,MAAM,QAAA,GAAW,eAAe,aAAA,CAAc,EAAE,GAAG,IAAmB,CAAC,CAAC,CAAA;AACxE,MAAA,IAAI,QAAA,CAAS,WAAW,CAAA,EAAG;AACzB,QAAA,KAAA,CAAM,oCAAoC,CAAA;AAC1C,QAAA;AAAA,MACF;AACA,MAAA,KAAA,MAAW,IAAA,IAAQ,QAAA,EAAU,MAAA,CAAO,IAAI,CAAA;AACxC,MAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,IAChB;AACA,IAAA,oBAAA,CAAqB,KAAK,UAAU,CAAA;AACpC,IAAA,MAAM,EAAA,GAAK,IAAI,YAAA,CAAa;AAAA,MAC1B,UAAU,eAAA,EAAgB;AAAA,MAC1B,UAAA,EAAY,IAAA,CAAK,OAAA,CAAQ,IAAA,CAAK,UAAU;AAAA,KACzC,CAAA;AACD,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,GAAG,YAAA,EAAa;AACvC,IAAA,MAAM,SAAS,MAAM,qBAAA,CAAsB,KAAK,OAAA,CAAQ,IAAA,CAAK,UAAU,CAAC,CAAA;AAExE,IAAA,MAAM,OAAA,GAAU,MAAM,EAAA,CAAG,UAAA,EAAW;AACpC,IAAA,IAAI,IAAA,CAAK,MAAA,KAAW,CAAA,IAAK,MAAA,CAAO,WAAW,CAAA,EAAG;AAC5C,MAAA,KAAA,CAAM,6BAA6B,CAAA;AACnC,MAAA,KAAA,MAAW,CAAA,IAAK,OAAA,EAAS,OAAA,CAAQ,CAAA,CAAE,IAAI,CAAA;AAAA,IACzC,CAAA,MAAO;AACL,MAAA,KAAA,MAAW,CAAA,IAAK,IAAA,EAAM,MAAA,CAAO,CAAA,CAAE,OAAO,CAAA;AACtC,MAAA,KAAA,MAAW,CAAA,IAAK,MAAA,EAAQ,MAAA,CAAO,CAAC,CAAA;AAChC,MAAA,KAAA,MAAW,CAAA,IAAK,OAAA,EAAS,OAAA,CAAQ,CAAA,CAAE,IAAI,CAAA;AACvC,MAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,IAChB;AAAA,EACF,CAAC,CAAA;AACL;AASA,eAAsB,sBAAsB,UAAA,EAAuC;AACjF,EAAA,MAAM,SAAA,GAAY,uBAAA,CAAwB,wBAAA,CAAyB,UAAU,CAAC,CAAA;AAC9E,EAAA,MAAM,KAAA,uBAAY,GAAA,EAA4C;AAC9D,EAAA,KAAA,MAAW,CAAC,EAAA,EAAI,QAAQ,KAAK,MAAA,CAAO,OAAA,CAAQ,SAAS,CAAA,EAAG;AACtD,IAAA,IAAI,QAAA;AACJ,IAAA,IAAI;AACF,MAAA,QAAA,GAAW,yBAAA,CAA0B,UAAA,EAAY,QAAA,CAAS,GAAG,CAAA;AAAA,IAC/D,SAAS,GAAA,EAAK;AACZ,MAAA,IAAI,eAAe,uBAAA,EAAyB;AAC5C,MAAA,MAAM,GAAA;AAAA,IACR;AACA,IAAA,IAAI,CAAC,QAAA,EAAU;AACf,IAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,GAAA,CAAI,QAAQ,CAAA;AAChC,IAAA,IAAI,KAAA,EAAO,KAAA,CAAM,GAAA,CAAI,IAAA,CAAK,EAAE,CAAA;AAAA,SACvB,KAAA,CAAM,GAAA,CAAI,QAAA,EAAU,EAAE,GAAA,EAAK,QAAA,CAAS,GAAA,EAAK,GAAA,EAAK,CAAC,EAAE,CAAA,EAAG,CAAA;AAAA,EAC3D;AACA,EAAA,MAAM,WAAqB,EAAC;AAC5B,EAAA,KAAA,MAAW,CAAC,QAAA,EAAU,EAAE,KAAK,GAAA,EAAK,KAAK,KAAA,EAAO;AAC5C,IAAA,MAAM,OAAA,GAAU,MAAM,qBAAA,CAAsB;AAAA,MAC1C,QAAA;AAAA,MACA,UAAA;AAAA,MACA,UAAU,eAAA;AAAgB,KAC3B,CAAA;AACD,IAAA,MAAM,KAAA,GAAQ,CAAA,EAAG,GAAA,CAAI,MAAA,KAAW,CAAA,GAAI,UAAA,GAAa,WAAW,CAAA,CAAA,EAAI,GAAA,CAAI,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAC9E,IAAA,KAAA,MAAW,GAAA,IAAO,OAAA,EAAS,QAAA,CAAS,IAAA,CAAK,CAAA,EAAG,GAAG,CAAA,EAAA,EAAK,KAAK,CAAA,GAAA,EAAM,GAAA,CAAI,OAAO,CAAA,CAAE,CAAA;AAAA,EAC9E;AACA,EAAA,OAAO,QAAA;AACT;AAYO,SAAS,gBAAA,GAA4B;AAC1C,EAAA,OAAO,IAAI,OAAA,CAAQ,OAAO,EACvB,WAAA,CAAY,qDAAqD,EACjE,MAAA,CAAO,OAAA,EAAS,gEAAgE,CAAA,CAChF,MAAA,CAAO,aAAa,6CAA6C,CAAA,CACjE,OAAO,WAAA,EAAa,0BAA0B,EAC9C,MAAA,CAAO,sBAAA,EAAwB,mBAAA,EAAqB,OAAA,CAAQ,KAAK,CAAA,CACjE,OAAO,kBAAA,EAAoB,CAAA,iBAAA,EAAoB,mBAAmB,CAAA,CAAA,CAAG,CAAA,CACrE,OAAO,UAAA,EAAY,+DAA+D,EAClF,MAAA,CAAO,iBAAA,EAAmB,uDAAuD,CAAA,CACjF,MAAA,CAAO,OAAO,IAAA,KAAS;AACtB,IAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,IAAA,CAAK,MAAA,IAAU,KAAK,OAAO,CAAA;AAEpD,IAAA,IAAI,CAAC,UAAU,oBAAA,CAAqB,IAAA,CAAK,YAAY,EAAE,YAAA,EAAc,MAAM,CAAA;AAC3E,IAAA,MAAM,EAAA,GAAK,QAAA,GACP,aAAA,CAAc,EAAE,GAAG,IAAmB,CAAC,CAAA,GACvC,IAAI,YAAA,CAAa;AAAA,MACf,UAAU,eAAA,EAAgB;AAAA,MAC1B,UAAA,EAAY,IAAA,CAAK,OAAA,CAAQ,IAAA,CAAK,UAAU,CAAA;AAAA,MACxC,cAAc,IAAA,CAAK;AAAA,KACpB,CAAA;AAGL,IAAA,MAAM,IAAA,GAAO,QAAA;AAAA,MACX,QAAA,GACI,IAAA,CAAK,IAAA,CAAK,eAAA,EAAgB,EAAG,kBAAkB,CAAA,GAC/C,IAAA,CAAK,OAAA,CAAQ,IAAA,CAAK,UAAA,EAAY,kBAAkB;AAAA,KACtD;AAEA,IAAA,IAAI,CAAC,QAAQ,MAAA,CAAO,IAAA,CAAK,KAAK,MAAM,CAAA,CAAE,WAAW,CAAA,EAAG;AAClD,MAAA,OAAA,CAAQ,oDAAoD,CAAA;AAC5D,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,SAAA,GAAY,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,MAAM,CAAA;AACzC,IAAA,OAAA,CAAQ,GAAA,EAAI;AACZ,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,EAAA,EAAK,CAAA,CAAE,OAAA,CAAQ,mBAAmB,CAAC,CAAA,CAAA,EAAI,CAAA,CAAE,GAAA,CAAI,CAAA,CAAA,EAAI,SAAA,CAAU,MAAM,CAAA,CAAA,CAAG,CAAC,CAAA,CAAE,CAAA;AACnF,IAAA,KAAA,MAAW,OAAO,SAAA,EAAW;AAC3B,MAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,IAAA,EAAO,QAAA,CAAS,GAAG,CAAC,CAAA,CAAE,CAAA;AAAA,IACpC;AAEA,IAAA,IAAI,KAAK,GAAA,EAAK;AACZ,MAAA,OAAA,CAAQ,GAAA,EAAI;AACZ,MAAA,OAAA,CAAQ,IAAI,CAAA,EAAA,EAAK,CAAA,CAAE,OAAA,CAAQ,gBAAgB,CAAC,CAAA,CAAE,CAAA;AAC9C,MAAA,IAAI,CAAC,QAAA,EAAU;AACb,QAAA,OAAA,CAAQ,IAAI,CAAA,IAAA,EAAO,CAAA,CAAE,GAAA,CAAI,sBAAsB,CAAC,CAAA,CAAE,CAAA;AAClD,QAAA,OAAA,CAAQ,IAAI,CAAA,IAAA,EAAO,CAAA,CAAE,GAAA,CAAI,kBAAkB,CAAC,CAAA,CAAE,CAAA;AAAA,MAChD;AACA,MAAA,OAAA,CAAQ,GAAA,CAAI,OAAO,CAAA,CAAE,GAAA,CAAI,WAAW,4BAAA,GAA+B,kBAAkB,CAAC,CAAA,CAAE,CAAA;AAAA,IAC1F;AAEA,IAAA,IAAI,KAAK,MAAA,EAAQ;AACf,MAAA,OAAA,CAAQ,GAAA,EAAI;AACZ,MAAA,OAAA,CAAQ,iCAA4B,CAAA;AACpC,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,CAAC,KAAK,GAAA,EAAK;AACb,MAAA,MAAMA,WAAU,MAAQ,CAAA,CAAA,OAAA,CAAQ,EAAE,OAAA,EAAS,YAAY,CAAA;AACvD,MAAA,IAAM,CAAA,CAAA,QAAA,CAASA,QAAO,CAAA,IAAK,CAACA,QAAAA,EAAS;AACnC,QAAA,OAAA,CAAQ,YAAY,CAAA;AACpB,QAAA;AAAA,MACF;AAAA,IACF;AAEA,IAAA,MAAM,SAAS,EAAA,CAAG,KAAA,CAAM,EAAE,GAAA,EAAK,IAAA,CAAK,KAAK,CAAA;AAEzC,IAAA,OAAA,CAAQ,GAAA,EAAI;AACZ,IAAA,KAAA,MAAW,CAAA,IAAK,OAAO,OAAA,EAAS;AAC9B,MAAA,KAAA,CAAM,CAAA,QAAA,EAAW,CAAC,CAAA,CAAE,CAAA;AAAA,IACtB;AACA,IAAA,KAAA,MAAW,CAAA,IAAK,OAAO,OAAA,EAAS;AAC9B,MAAA,OAAA,CAAQ,WAAW,CAAA,CAAE,GAAG,CAAA,EAAA,EAAK,CAAA,CAAE,MAAM,CAAA,CAAE,CAAA;AAAA,IACzC;AACA,IAAA,IAAI,MAAA,CAAO,SAAA,CAAU,MAAA,GAAS,CAAA,EAAG;AAC/B,MAAA,OAAA,CAAQ,GAAA,EAAI;AACZ,MAAA,OAAA,CAAQ,CAAA,KAAA,EAAQ,MAAA,CAAO,SAAA,CAAU,MAAM,CAAA,oBAAA,CAAsB,CAAA;AAC7D,MAAA,KAAA,MAAW,CAAA,IAAK,OAAO,SAAA,EAAW;AAChC,QAAA,OAAA,CAAQ,IAAI,CAAA,IAAA,EAAO,CAAA,CAAE,GAAA,CAAI,CAAC,CAAC,CAAA,CAAE,CAAA;AAAA,MAC/B;AAAA,IACF;AACA,IAAA,IAAI,KAAK,GAAA,EAAK;AACZ,MAAA,OAAA,CAAQ,GAAA,EAAI;AACZ,MAAA,KAAA,CAAM,sBAAsB,CAAA;AAAA,IAC9B;AAAA,EACF,CAAC,CAAA;AACL","file":"chunk-IW6F6R2W.js","sourcesContent":["import { homedir } from \"node:os\";\nimport path from \"node:path\";\nimport * as p from \"@clack/prompts\";\nimport {\n  AssetManager,\n  type InstalledAgentInstance,\n  type LibraryMove,\n  type ReplacedAsset,\n  type RewrittenAgent,\n} from \"@skaile/workspaces/asset-manager\";\nimport {\n  AgentRefResolutionError,\n  type DriverTarget,\n  effectiveAgentInstances,\n  globalSkaileDir,\n  type PresetExpansion,\n  parseAssetRef,\n  readLock,\n  resolveAgentDefinitionDir,\n  resolveSkWorkspaceConfig,\n  SourceEntryError,\n  userConfigPath,\n} from \"@skaile/workspaces/core\";\nimport { verifyConventionItems } from \"@skaile/workspaces/runner\";\nimport type { InstallManifest } from \"@skaile/workspaces/types\";\nimport { Command } from \"commander\";\nimport {\n  colorRef,\n  requireProjectConfig,\n  formatSoftDepHint,\n  logErr,\n  logInfo,\n  logOk,\n  logWarn,\n  parseHarnessFilter,\n  reportLegacyOmpCopies,\n  S,\n  TARGET_DEFAULT_HINT,\n  warnFilesOnlyDelegates,\n  warnLegacyClaudeCopies,\n  warnPlaceholderBodies,\n} from \"../helpers.ts\";\nimport { createSpinner } from \"../spinner.ts\";\nimport { getKindRegistry } from \"../open-registry.ts\";\n\n/**\n * Canonical asset-ref shape accepted by `skaile install <ref>`:\n * `kind:@<publisher>/<name>#<version>` (the `#` version sigil). Validated via\n * `parseAssetRef` so the CLI shares the single canonical grammar; the legacy\n * trailing-`@version` shape is rejected.\n */\nexport const REF_HINT = \"kind:@<publisher>/<name>#<version> (e.g. skill:@skaile/use-exa#1.0.0)\";\n\n/** True when `ref` parses as a canonical asset ref. */\nfunction isValidAssetRef(ref: string): boolean {\n  try {\n    parseAssetRef(ref);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Minimal catalog-source surface the pointer-only install path needs.\n * `RemoteCatalogSource` satisfies this — narrowing keeps {@link runPointerOnlyInstall}\n * testable with a hand-rolled stub.\n */\nexport interface InstallManifestSource {\n  getInstallManifest(ref: string): Promise<InstallManifest>;\n}\n\n/**\n * Capability check: is this catalog source able to serve install manifests?\n *\n * `openCatalogSource` returns a `RemoteCatalogSource | RestCatalogSource`.\n * Only the tRPC-framed `RemoteCatalogSource` implements `getInstallManifest`;\n * the REST-framed `RestCatalogSource` (the default for any catalog URL other\n * than `https://skaile.store`) does not. Calling it unconditionally would be a\n * runtime `TypeError`, so the pointer-only install path must capability-detect\n * first and fail with a clear, actionable message.\n */\nexport function supportsInstallManifest(source: unknown): source is InstallManifestSource {\n  return (\n    typeof (source as { getInstallManifest?: unknown } | null | undefined)?.getInstallManifest ===\n    \"function\"\n  );\n}\n\n/**\n * Minimal library surface the pointer-only install path needs.\n * `LocalIndex` satisfies this.\n */\nexport interface InstallLibrary {\n  install(manifest: InstallManifest): Promise<{ installPath: string }>;\n}\n\n/**\n * Result of a pointer-only catalog install.\n */\nexport interface PointerOnlyInstallResult {\n  /** Absolute path the verified asset bytes were written to. */\n  installPath: string;\n  /** The pinned upstream commit SHA the asset was fetched at. */\n  commitSha: string;\n  /** Number of files in the install manifest. */\n  fileCount: number;\n}\n\n/**\n * Pointer-only catalog install — the `skaile install <ref>` code path.\n *\n * 1. Resolves the pointer-only {@link InstallManifest} from the Catalog.\n * 2. Hands it to the library, which fetches each file's bytes directly from\n *    the upstream repo at the pinned commit, verifies every per-file SHA256\n *    plus the composite SHA256, and only then writes the verified files.\n *\n * Both dependencies are injected so the function is unit-testable without a\n * network round-trip. In production the CLI passes a `RemoteCatalogSource`\n * and a `LocalIndex`.\n *\n * @param ref - Canonical asset ref (`kind:@<publisher>/<name>#<version>`).\n * @param deps - Injected catalog source + library.\n * @returns The install path, pinned commit SHA, and file count.\n * @throws When the ref is malformed, the manifest cannot be resolved, or any\n *   hash verification fails. The underlying error message is surfaced as-is.\n */\nexport async function runPointerOnlyInstall(\n  ref: string,\n  deps: { catalog: InstallManifestSource; library: InstallLibrary },\n): Promise<PointerOnlyInstallResult> {\n  let requested: ReturnType<typeof parseAssetRef>;\n  try {\n    requested = parseAssetRef(ref);\n  } catch (e) {\n    throw new Error(\n      `malformed asset ref '${ref}' — expected ${REF_HINT}: ${e instanceof Error ? e.message : String(e)}`,\n    );\n  }\n  const manifest = await deps.catalog.getInstallManifest(ref);\n  // [M1] Identity check: the catalog must not install a different asset than\n  // requested. Compare the PARSED refs (kind/publisher/name/pin) so equivalent\n  // spellings (optional `kind:`, default `skill`) are treated as the same ref.\n  const got = parseAssetRef(manifest.ref);\n  if (\n    got.kind !== requested.kind ||\n    got.publisher !== requested.publisher ||\n    got.name !== requested.name ||\n    got.pin !== requested.pin\n  ) {\n    throw new Error(\n      `catalog identity mismatch: requested '${ref}' but the catalog returned a manifest for '${manifest.ref}'`,\n    );\n  }\n  const { installPath } = await deps.library.install(manifest);\n  return {\n    installPath,\n    commitSha: manifest.source.commitSha,\n    fileCount: manifest.files.length,\n  };\n}\n\n/**\n * Print one summary line per `preset:` dependency `skaile install` expanded: how many\n * asset items joined the install set and how many instance items (`library://`,\n * placeholders) were skipped, which only `skaile preset apply` materialises.\n */\nexport function reportPresetExpansions(\n  presets: readonly PresetExpansion[] | undefined,\n  onLine: (line: string) => void = logInfo,\n): void {\n  for (const preset of presets ?? []) {\n    onLine(\n      `preset ${preset.ref}: ${preset.assets} assets, ${preset.skipped} instance items skipped (apply with skaile preset apply)`,\n    );\n  }\n}\n\n/**\n * Print one line per agent instance `skaile install` rendered (with the files\n * written) and one per native agent file removed because its instance left `skaile.yaml`.\n */\nexport function reportAgentInstances(\n  instances: readonly InstalledAgentInstance[] | undefined,\n  removedFiles: readonly string[] | undefined,\n  onLine: (line: string) => void = logInfo,\n  onRemoved: (line: string) => void = logWarn,\n): void {\n  for (const instance of instances ?? []) {\n    onLine(`agent ${instance.id}: ${instance.files.join(\", \")}`);\n  }\n  for (const file of removedFiles ?? []) onRemoved(`Removed: ${file}`);\n}\n\n/** One `Re-locked` line per lock entry `install`/`update` rewrote for an already-locked asset. */\nexport function reportRelocked(\n  relocked: string[] | undefined,\n  onLine: (line: string) => void = logInfo,\n): void {\n  for (const ref of relocked ?? []) onLine(`Re-locked ${ref}`);\n}\n\n/** One `! <ref> moved from <a> to <b>` line per locked asset that now resolves from another library. */\nexport function reportMoved(\n  moved: readonly LibraryMove[] | undefined,\n  onLine: (line: string) => void = logWarn,\n): void {\n  for (const m of moved ?? []) onLine(`${m.ref} moved from ${m.from} to ${m.to}`);\n}\n\n/** One `replaced <old> → <new>` line per asset `install`/`update` moved to another locked version. */\nexport function reportReplaced(\n  replaced: readonly ReplacedAsset[] | undefined,\n  onLine: (line: string) => void = logInfo,\n): void {\n  for (const r of replaced ?? []) onLine(`${r.ref} replaced ${r.from} → ${r.to}`);\n}\n\n/** One `Rewrote <file> (agent render changed)` line per rendered agent file whose bytes the CLI's render changed. */\nexport function reportRewritten(\n  rewritten: readonly RewrittenAgent[] | undefined,\n  onLine: (line: string) => void = logInfo,\n): void {\n  for (const r of rewritten ?? []) {\n    for (const f of r.files) onLine(`Rewrote ${f} (agent render changed)`);\n  }\n}\n\n/**\n * Say which locked store assets `install`/`update` did not check against the store (p792,\n * p799). A chosen mode (air-gapped, `--no-catalog`) is one info line per asset; a store that\n * did not answer is an error line `store unreachable: could not check <ref> for updates`.\n *\n * @returns Whether any asset could not be checked because the store was unreachable: the\n *   command then ends `Failed` with exit 1.\n */\nexport function reportStoreNotChecked(\n  notChecked: readonly { ref: string; reason: string; detail: string }[] | undefined,\n): boolean {\n  let unreachable = false;\n  for (const n of notChecked ?? []) {\n    if (n.reason === \"unreachable\") {\n      unreachable = true;\n      logErr(`store unreachable: could not check ${n.ref} for updates (${n.detail})`);\n    } else if (n.reason === \"air-gapped\") {\n      logInfo(`${n.ref} kept as locked (air-gapped: not checked against the store)`);\n    } else {\n      logInfo(`${n.ref} kept as locked (${n.detail})`);\n    }\n  }\n  return unreachable;\n}\n\n/**\n * Creates the `skaile install` command.\n *\n * Two modes, selected by argument shape:\n *\n * - `skaile install` (no positional arg) — reads `skaile.yaml` and deploys all\n *   declared assets (and their transitive dependencies) to the configured\n *   driver target directory. Supports `--locked` for CI-mode install from a\n *   lock file.\n * - `skaile install kind:@<publisher>/<name>#<version>` — pointer-only catalog\n *   install: resolves the pointer-only install manifest from the configured\n *   Catalog, fetches each file's bytes directly from the upstream repo at the\n *   pinned commit, verifies every per-file + the composite SHA256, then writes\n *   the verified files into the local Library.\n *\n * @returns Configured {@link Command} ready for `program.addCommand()`.\n * @docLink cli/commands/project#make-install-command\n */\nexport function makeInstallCommand(): Command {\n  return new Command(\"install\")\n    .description(`Install dependencies from skaile.yaml, or a single asset by ref (${REF_HINT})`)\n    .argument(\"[ref]\", `Asset ref to install from the Catalog (${REF_HINT})`)\n    .option(\"--locked\", \"Install from lock file (CI mode — fails on drift)\")\n    .option(\"--project-dir <path>\", \"Project directory\", process.cwd())\n    .option(\"--target <agent>\", `Agent framework (${TARGET_DEFAULT_HINT})`)\n    .option(\n      \"--global\",\n      \"Install the global SSOT (~/.skaile/skaile.yaml), fanning out to every global harness\",\n    )\n    .option(\n      \"--harness <ids>\",\n      \"Comma-separated global harnesses to install into (default: all resolved); implies --global\",\n    )\n    .option(\n      \"--link\",\n      \"symlink local-path assets instead of copying (dev loop; machine-local, not for committing)\",\n    )\n    .option(\n      \"--force\",\n      \"Deploy over a folder no lock entry owns (a hand-made skill of the same name) instead of refusing\",\n    )\n    .option(\n      \"--verbose\",\n      \"also print the resolver's searched directories for an agent it cannot find\",\n    )\n    .action(runInstallCommand);\n}\n\n/** Options shape accepted by the `skaile install` command action. */\ninterface InstallCommandOptions {\n  locked?: boolean;\n  projectDir: string;\n  target?: string;\n  global?: boolean;\n  harness?: string;\n  link?: boolean;\n  force?: boolean;\n  verbose?: boolean;\n}\n\n/**\n * `skaile install` action body. Dispatches by argument shape:\n * a positional `ref` selects pointer-only catalog install, otherwise the\n * legacy `skaile.yaml` install path runs.\n */\nasync function runInstallCommand(\n  ref: string | undefined,\n  opts: InstallCommandOptions,\n): Promise<void> {\n  // ── Pointer-only catalog install: `skaile install <ref>` ──────────────\n  if (ref !== undefined) {\n    await runRefInstall(ref, opts);\n    return;\n  }\n\n  // ── Legacy install: `skaile install` reads skaile.yaml ────────────────\n  await runYamlInstall(opts);\n}\n\n/** Pointer-only catalog install path for `skaile install <ref>`. */\nasync function runRefInstall(ref: string, opts: InstallCommandOptions): Promise<void> {\n  if (!isValidAssetRef(ref)) {\n    logErr(`malformed asset ref '${ref}' — expected ${REF_HINT}`);\n    process.exit(1);\n  }\n  // The store installs one exact version; without `#<version>` it answers a bare 400, so say\n  // what is missing before the call.\n  if (!parseAssetRef(ref).pin) {\n    logErr(\n      `${ref} needs a version: use ${ref}#<version>. A library asset is deployed with \\`skaile add ${ref}\\`, not \\`skaile install\\`.`,\n    );\n    process.exit(1);\n  }\n  const spinner = createSpinner();\n  spinner.start(`Installing ${ref}`);\n  try {\n    const { openCatalogSource, openLibrary } = await import(\"../open-library.ts\");\n    const catalog = await openCatalogSource({ projectDir: path.resolve(opts.projectDir) });\n    // [H2] REST-framed catalogs (the default for any catalog URL other\n    // than https://skaile.store) cannot serve install manifests. Detect\n    // and fail clearly rather than throwing a runtime TypeError.\n    if (!supportsInstallManifest(catalog)) {\n      throw new Error(\n        \"pointer-only install (skaile install <ref>) requires a tRPC-framed Catalog. \" +\n          \"The configured catalog uses REST framing, which does not serve install \" +\n          \"manifests. Set catalog.url to https://skaile.store, or catalog.framing: trpc, \" +\n          `in ${userConfigPath()}.`,\n      );\n    }\n    const library = await openLibrary();\n    try {\n      const result = await runPointerOnlyInstall(ref, { catalog, library });\n      spinner.stop(\"Done\");\n      logOk(`Installed ${colorRef(ref)}`);\n      logInfo(`Path: ${S.dim(result.installPath)}`);\n      logInfo(`Commit: ${S.dim(result.commitSha)}`);\n      logInfo(`Files: ${S.dim(String(result.fileCount))}`);\n      logInfo(\n        S.dim(\n          `Installed globally (see Path above) — use \\`skaile add ${ref}\\` to deploy into this project.`,\n        ),\n      );\n    } finally {\n      library.close();\n    }\n  } catch (err) {\n    spinner.stop(\"Failed\");\n    const msg = err instanceof Error ? err.message : String(err);\n    if (/failed: 404\\b/.test(msg)) {\n      logErr(\n        `${ref} is not in the store. For a library asset use \\`skaile add ${ref.replace(/#.*$/, \"\")}\\`.`,\n      );\n    } else if (/unreachable/i.test(msg)) {\n      logErr(`asset uninstallable — source commit no longer available (${msg})`);\n    } else {\n      logErr(msg);\n    }\n    process.exit(1);\n  }\n}\n\n/** Legacy install path for bare `skaile install` (reads skaile.yaml). */\nasync function runYamlInstall(opts: InstallCommandOptions): Promise<void> {\n  const projectDir = path.resolve(opts.projectDir);\n\n  const harnesses = parseHarnessFilter(opts.harness);\n  // `--harness` implies `--global`.\n  if (opts.global || harnesses) {\n    await runGlobalInstall(opts, harnesses);\n    return;\n  }\n\n  // A project without a readable skaile.yaml stops here, before sources are cloned, assets\n  // are deployed or undeployed, or the lock is written.\n  requireProjectConfig(projectDir);\n\n  // Hydrate sources declared in skaile.yaml before resolving assets, so\n  // freshly checked-out projects pull their source clones automatically.\n  try {\n    const { ensureSourcesCloned } = await import(\"../ensure-sources.ts\");\n    const hydrate = ensureSourcesCloned(projectDir, { quiet: true });\n    if (hydrate.cloned.length > 0) {\n      logOk(`Cloned source(s): ${hydrate.cloned.join(\", \")}`);\n    }\n    if (hydrate.failed.length > 0) {\n      logErr(`Failed to clone source(s): ${hydrate.failed.join(\", \")}`);\n    }\n  } catch (err) {\n    logWarn(`source hydration skipped: ${err instanceof Error ? err.message : String(err)}`);\n  }\n\n  const am = new AssetManager({\n    registry: getKindRegistry(),\n    projectDir,\n    driverTarget: opts.target as DriverTarget,\n  });\n  const spinner = createSpinner();\n  spinner.start(opts.locked ? \"Installing from lock file\" : \"Installing dependencies\");\n  try {\n    const result = await am.install({ locked: opts.locked, link: opts.link, force: opts.force });\n    const storeUnreachable = result.storeNotChecked?.some((n) => n.reason === \"unreachable\");\n    spinner.stop(\n      result.agentInstanceErrors?.length || result.missing.length > 0 || storeUnreachable\n        ? \"Failed\"\n        : \"Done\",\n    );\n    if (result.deployed.length > 0) {\n      for (const d of result.deployed) logOk(d);\n    }\n    warnPlaceholderBodies(result.placeholderBodies, result.placeholderDescriptions);\n    for (const r of result.restored ?? []) {\n      for (const f of r.restored) logInfo(`Restored ${f}`);\n      for (const f of r.removed) logInfo(`Removed ${f} (not part of ${r.ref})`);\n    }\n    reportRewritten(result.rewritten);\n    reportPresetExpansions(result.presets);\n    reportAgentInstances(result.agentInstances, result.agentFilesRemoved);\n    // Said when this install wrote something (a fresh clone, a changed agent), not on a no-op one.\n    if (result.deployed.length > 0 || result.replaced?.length || result.agentInstances?.length) {\n      warnFilesOnlyDelegates(am.projectDir, am.driverTarget);\n    }\n    if (result.removed.length > 0) {\n      for (const r of result.removed) logWarn(`Removed: ${r}`);\n    }\n    reportReplaced(result.replaced);\n    reportRelocked(result.relocked);\n    reportMoved(result.moved);\n    if (\n      result.deployed.length === 0 &&\n      result.removed.length === 0 &&\n      !result.replaced?.length &&\n      result.missing.length === 0 &&\n      !result.storeNotChecked?.length &&\n      !result.restored?.length &&\n      !result.relocked?.length &&\n      !result.moved?.length &&\n      !result.agentInstanceErrors?.length\n    ) {\n      logInfo(\"Nothing to install (already up to date).\");\n    }\n    if (result.agentInstanceErrors?.length) {\n      if (opts.verbose) for (const d of result.agentInstanceDetails ?? []) logInfo(S.dim(d));\n      logErr(\n        `${result.agentInstanceErrors.length} agent instance(s) could not be rendered (see above)`,\n      );\n      process.exitCode = 1;\n    }\n    if (result.missing.length > 0) {\n      for (const m of result.missing) logErr(`Missing: ${m}${result.missingHints?.[m] ?? \"\"}`);\n      // Partial-miss must fail the process — CI can't otherwise distinguish a\n      // clean install from \"half the assets never resolved\".\n      process.exitCode = 1;\n    }\n    if (reportStoreNotChecked(result.storeNotChecked)) process.exitCode = 1;\n    if (result.lockWritten) {\n      logInfo(`Lock file written: ${S.dim(\"skaile.lock.yaml\")}`);\n    }\n    warnLegacyClaudeCopies(am);\n    // Report-only: surface soft deps the declared assets reference but aren't\n    // present. Never a prompt — install is a batch/CI path. Skipped under\n    // --locked: that mode is \"restore exactly\", so an `add` nudge would jar.\n    if (!opts.locked) await reportInstalledSoftDeps(am);\n  } catch (err) {\n    spinner.stop(\"Failed\");\n    logErr(err instanceof SourceEntryError ? err.message : String(err));\n    process.exit(1);\n  }\n}\n\n/**\n * Report (never prompt) the body-link soft deps that the declared assets\n * reference but that aren't in the project — the `install` counterpart to the\n * `add`-time soft-dep surface. `install` is a batch/CI path (often non-TTY), so\n * it only ever prints a hint: pulling stays an explicit `skaile add`. Best-effort\n * — `reportSoftDeps` swallows any index failure and returns `[]`.\n */\nexport async function reportInstalledSoftDeps(\n  am: Pick<AssetManager, \"listDeclared\" | \"reportSoftDeps\">,\n  onHint: (line: string) => void = (l) => logInfo(S.dim(l)),\n): Promise<void> {\n  try {\n    const declared = (await am.listDeclared()).map((d) => d.ref);\n    if (declared.length === 0) return;\n    const edges = await am.reportSoftDeps(declared);\n    for (const edge of edges) onHint(formatSoftDepHint(edge));\n  } catch {\n    // Best-effort: a soft-dep report must never fail an install that succeeded.\n  }\n}\n\n/**\n * Global cross-harness install: deploy every dep declared in the global SSOT\n * (`~/.skaile/skaile.yaml`) into each resolved global harness's dir under `~`,\n * write the global lock (`~/.skaile/skaile.lock.yaml`), then print per-harness\n * state. `harnesses` is the `--harness` filter (omit for the full resolved set).\n */\nasync function runGlobalInstall(\n  opts: InstallCommandOptions,\n  harnesses: DriverTarget[] | undefined,\n): Promise<void> {\n  const am = new AssetManager({\n    registry: getKindRegistry(),\n    projectDir: path.resolve(opts.projectDir),\n    global: true,\n    harnesses,\n  });\n  const spinner = createSpinner();\n  spinner.start(\"Installing global dependencies\");\n  try {\n    const result = await am.install({ locked: opts.locked, link: opts.link, force: opts.force });\n    const storeUnreachable = result.storeNotChecked?.some((n) => n.reason === \"unreachable\");\n    spinner.stop(result.missing.length > 0 || storeUnreachable ? \"Failed\" : \"Done\");\n    if (result.deployed.length > 0) for (const d of result.deployed) logOk(d);\n    warnPlaceholderBodies(result.placeholderBodies, result.placeholderDescriptions);\n    reportPresetExpansions(result.presets);\n    if (result.removed.length > 0) for (const r of result.removed) logWarn(`Removed: ${r}`);\n    reportReplaced(result.replaced);\n    reportRelocked(result.relocked);\n    reportMoved(result.moved);\n    if (\n      result.deployed.length === 0 &&\n      result.removed.length === 0 &&\n      !result.replaced?.length &&\n      result.missing.length === 0 &&\n      !result.storeNotChecked?.length &&\n      !result.relocked?.length &&\n      !result.moved?.length\n    )\n      logInfo(\"Nothing to install (already up to date).\");\n    if (reportStoreNotChecked(result.storeNotChecked)) process.exitCode = 1;\n    if (result.missing.length > 0) {\n      for (const m of result.missing) logErr(`Missing: ${m}${result.missingHints?.[m] ?? \"\"}`);\n      process.exitCode = 1;\n    }\n    if (result.lockWritten) logInfo(`Global lock written: ${S.dim(\"~/.skaile/skaile.lock.yaml\")}`);\n    reportLegacyOmpCopies(am.takeLegacyCopiesRemoved(), am.takeLegacyCopiesKept());\n\n    // Per-harness reconciliation summary so a partial fan-out is visible.\n    const state = am.globalState({});\n    const byHarness = new Map<string, number>();\n    for (const s of state)\n      if (s.state === \"installed\") byHarness.set(s.harness, (byHarness.get(s.harness) ?? 0) + 1);\n    for (const [harness, n] of byHarness) logInfo(`${harness}: ${n} installed`);\n  } catch (err) {\n    spinner.stop(\"Failed\");\n    logErr(String(err));\n    process.exit(1);\n  }\n}\n\n/** The `--global` options of `check`, `doctor` and `clean`. */\ninterface GlobalScopeOptions {\n  global?: boolean;\n  harness?: string;\n  projectDir: string;\n}\n\n/** A manager over the user-scope SSOT (`~/.skaile`), limited to `--harness` when given. */\nfunction globalManager(opts: GlobalScopeOptions): AssetManager {\n  return new AssetManager({\n    registry: getKindRegistry(),\n    projectDir: path.resolve(opts.projectDir),\n    global: true,\n    harnesses: parseHarnessFilter(opts.harness),\n  });\n}\n\n/**\n * What is wrong with the global install: one line per declared asset a harness does not hold\n * (`list --global` calls these `declared` and `drift`), per invalid entry, and per old\n * `~/.omp/<dir>` copy a 5.12.0 install left behind. Empty when the global state is clean (p911).\n */\nexport function globalProblems(am: AssetManager): string[] {\n  const lines = new Set<string>();\n  for (const row of am.globalState({})) {\n    if (row.state === \"declared\") {\n      lines.add(\n        `${row.ref} is declared in ~/.skaile/skaile.yaml but not installed: run skaile install --global`,\n      );\n    } else if (row.state === \"drift\") {\n      lines.add(\n        `${row.ref} is missing from ${row.harness}: run skaile install --global --harness ${row.harness}`,\n      );\n    } else if (row.state === \"invalid\") {\n      lines.add(`${row.ref} in ~/.skaile/skaile.yaml is not a valid asset ref`);\n    }\n  }\n  for (const stale of am.staleLegacyOmpCopies()) {\n    lines.add(\n      `${stale.path.replace(homedir(), \"~\")} is an old omp copy of ${stale.ref} (omp reads ~/.omp/agent): run skaile install --global --harness omp, or delete it`,\n    );\n  }\n  return [...lines];\n}\n\n/**\n * Creates the `skaile check` command.\n *\n * Fails (exit 1) on every problem {@link AssetManager.projectState} reports: unmet\n * requirements of deployed assets, a declared dep that never resolved into the lock (its\n * library or source is gone, like `skaile list` showing it as `declared`) or never\n * materialized (e.g. a store-sourced `mcp-server`, #462), a locked asset whose library is\n * gone or whose deployed copy or files are missing, a locked library asset whose files\n * changed since the lock (or whose lock hash predates the shared asset hash), and an\n * `agents.<id>.ref` that binds to no agent. `doctor`, `outdated`, `diff` and\n * `install --locked` take their verdict from the same state.\n *\n * @returns Configured {@link Command} ready for `program.addCommand()`.\n * @docLink cli/commands/project#make-check-command\n */\nexport function makeCheckCommand(): Command {\n  return new Command(\"check\")\n    .description(\"Check for unmet requirements\")\n    .option(\"--project-dir <path>\", \"Project directory\", process.cwd())\n    .option(\"--global\", \"Check the global install (~/.skaile) instead of the project\")\n    .option(\"--harness <ids>\", \"With --global: only these harnesses (comma-separated)\")\n    .action(async (opts) => {\n      if (opts.global || opts.harness) {\n        const problems = globalProblems(globalManager({ ...opts, global: true }));\n        if (problems.length === 0) {\n          logOk(\"All global dependencies satisfied.\");\n          return;\n        }\n        for (const line of problems) logErr(line);\n        process.exit(1);\n      }\n      requireProjectConfig(opts.projectDir);\n      const am = new AssetManager({\n        registry: getKindRegistry(),\n        projectDir: path.resolve(opts.projectDir),\n      });\n      const { gaps } = await am.projectState();\n      const edited = await editedConventionFiles(path.resolve(opts.projectDir));\n      // A skipped `mcp-server` or an unset required field fails nothing: a `!` line each.\n      const notices = await am.mcpNotices();\n      if (gaps.length === 0 && edited.length === 0) {\n        logOk(\"All dependencies satisfied.\");\n        for (const n of notices) logWarn(n.text);\n      } else {\n        for (const g of gaps) logErr(g.message);\n        for (const e of edited) logErr(e);\n        for (const n of notices) logWarn(n.text);\n        process.exit(1);\n      }\n    });\n}\n\n/**\n * One message per convention file (SOUL.md, knowledge/, …) of a bound agent that was edited\n * after `skaile rebuild` pinned it: the compile manifest, not the file, is what the agent\n * runs from, so the edit never reaches it. Instances bound to the same agent directory share\n * the files, so one message names every instance that runs from them. A binding that resolves\n * to no agent is a `projectState` gap, not reported here. Shared by `check` and `doctor`.\n */\nexport async function editedConventionFiles(projectDir: string): Promise<string[]> {\n  const instances = effectiveAgentInstances(resolveSkWorkspaceConfig(projectDir));\n  const byDir = new Map<string, { ref: string; ids: string[] }>();\n  for (const [id, instance] of Object.entries(instances)) {\n    let agentDir: string | undefined;\n    try {\n      agentDir = resolveAgentDefinitionDir(projectDir, instance.ref);\n    } catch (err) {\n      if (err instanceof AgentRefResolutionError) continue;\n      throw err;\n    }\n    if (!agentDir) continue;\n    const bound = byDir.get(agentDir);\n    if (bound) bound.ids.push(id);\n    else byDir.set(agentDir, { ref: instance.ref, ids: [id] });\n  }\n  const messages: string[] = [];\n  for (const [agentDir, { ref, ids }] of byDir) {\n    const drifted = await verifyConventionItems({\n      agentDir,\n      projectDir,\n      registry: getKindRegistry(),\n    });\n    const label = `${ids.length === 1 ? \"instance\" : \"instances\"} ${ids.join(\", \")}`;\n    for (const err of drifted) messages.push(`${ref} (${label}): ${err.message}`);\n  }\n  return messages;\n}\n\n/**\n * Creates the `skaile clean` command.\n *\n * Removes all skaile-managed assets tracked in `skaile.lock.yaml` from the\n * workspace. With `--all` also removes history, patches, repos, and the lock\n * file itself. Preserves unmanaged (manually placed) assets.\n *\n * @returns Configured {@link Command} ready for `program.addCommand()`.\n * @docLink cli/commands/project#make-clean-command\n */\nexport function makeCleanCommand(): Command {\n  return new Command(\"clean\")\n    .description(\"Remove all skaile-managed assets from the workspace\")\n    .option(\"--all\", \"Full reset: also remove history, patches, repos, and lock file\")\n    .option(\"--dry-run\", \"Show what would be removed without doing it\")\n    .option(\"-y, --yes\", \"Skip confirmation prompt\")\n    .option(\"--project-dir <path>\", \"Project directory\", process.cwd())\n    .option(\"--target <agent>\", `Agent framework (${TARGET_DEFAULT_HINT})`)\n    .option(\"--global\", \"Clean the global install (~/.skaile and every global harness)\")\n    .option(\"--harness <ids>\", \"With --global: only these harnesses (comma-separated)\")\n    .action(async (opts) => {\n      const isGlobal = Boolean(opts.global || opts.harness);\n      // A skaile.yaml that does not parse stops `clean` with one `✗` line (p910).\n      if (!isGlobal) requireProjectConfig(opts.projectDir, { allowMissing: true });\n      const am = isGlobal\n        ? globalManager({ ...opts, global: true })\n        : new AssetManager({\n            registry: getKindRegistry(),\n            projectDir: path.resolve(opts.projectDir),\n            driverTarget: opts.target as DriverTarget,\n          });\n\n      // Preview: load lock file to show what will be cleaned\n      const lock = readLock(\n        isGlobal\n          ? path.join(globalSkaileDir(), \"skaile.lock.yaml\")\n          : path.resolve(opts.projectDir, \"skaile.lock.yaml\"),\n      );\n\n      if (!lock || Object.keys(lock.assets).length === 0) {\n        logInfo(\"Nothing to clean (no skaile-managed assets found).\");\n        return;\n      }\n\n      const assetRefs = Object.keys(lock.assets);\n      console.log();\n      console.log(`  ${S.heading(\"Assets to remove:\")} ${S.dim(`(${assetRefs.length})`)}`);\n      for (const ref of assetRefs) {\n        console.log(`    ${colorRef(ref)}`);\n      }\n\n      if (opts.all) {\n        console.log();\n        console.log(`  ${S.heading(\"Also removing:\")}`);\n        if (!isGlobal) {\n          console.log(`    ${S.dim(\".skaile/history.yaml\")}`);\n          console.log(`    ${S.dim(\".skaile/patches/\")}`);\n        }\n        console.log(`    ${S.dim(isGlobal ? \"~/.skaile/skaile.lock.yaml\" : \"skaile.lock.yaml\")}`);\n      }\n\n      if (opts.dryRun) {\n        console.log();\n        logInfo(\"Dry run — no changes made.\");\n        return;\n      }\n\n      if (!opts.yes) {\n        const confirm = await p.confirm({ message: \"Proceed?\" });\n        if (p.isCancel(confirm) || !confirm) {\n          logInfo(\"Cancelled.\");\n          return;\n        }\n      }\n\n      const result = am.clean({ all: opts.all });\n\n      console.log();\n      for (const r of result.removed) {\n        logOk(`Removed ${r}`);\n      }\n      for (const s of result.skipped) {\n        logWarn(`Skipped ${s.ref}: ${s.reason}`);\n      }\n      if (result.unmanaged.length > 0) {\n        console.log();\n        logInfo(`Kept ${result.unmanaged.length} unmanaged asset(s):`);\n        for (const u of result.unmanaged) {\n          console.log(`    ${S.dim(u)}`);\n        }\n      }\n      if (opts.all) {\n        console.log();\n        logOk(\"Full reset complete.\");\n      }\n    });\n}\n"]}

package/dist/chunk-IZCR27MU.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../bridge/src/drivers/recovery-policy.ts"],"names":[],"mappings":";AA8DO,IAAM,IAAA,GAAyB,EAAE,IAAA,EAAM,IAAA,EAAK;AAMnD,IAAM,oBAAA,GAAuB,wCAAA;AAG7B,SAAS,uBAAuB,OAAA,EAA0B;AACxD,EAAA,OACE,yBAAyB,IAAA,CAAK,OAAO,CAAA,IACrC,qEAAA,CAAsE,KAAK,OAAO,CAAA;AAEtF;AAGO,SAAS,WAAA,GAA8B;AAC5C,EAAA,OAAO;AAAA,IACL,YAAA,EAAc,KAAA;AAAA,IACd,YAAA,EAAc,KAAA;AAAA,IACd,YAAA,EAAc,KAAA;AAAA,IACd,cAAA,EAAgB,KAAA;AAAA,IAChB,kBAAA,EAAoB;AAAA,GACtB;AACF;AAGO,SAAS,KAAA,CAAM,QAAwB,IAAA,EAAoC;AAChF,EAAA,OAAO,EAAE,GAAG,MAAA,EAAQ,CAAC,IAAI,GAAG,IAAA,EAAK;AACnC;AAGO,SAAS,OAAA,CAAQ,QAAwB,IAAA,EAA6B;AAC3E,EAAA,OAAO,OAAO,IAAI,CAAA;AACpB;AAMO,SAAS,eAAe,MAAA,EAAiC;AAC9D,EAAA,OAAO,CAAC,MAAA,CAAO,MAAA,CAAO,MAAM,CAAA,CAAE,KAAK,OAAO,CAAA;AAC5C;AAOO,SAAS,WAAA,CACd,MAAA,EACA,IAAA,EACA,MAAA,EACS;AACT,EAAA,IAAI,MAAA,CAAO,IAAI,CAAA,EAAG,OAAO,KAAA;AACzB,EAAA,QAAQ,IAAA;AAAM,IACZ,KAAK,cAAA;AACH,MAAA,OAAO,MAAA,CAAO,WAAA;AAAA,IAChB,KAAK,gBAAA;AACH,MAAA,OAAO,MAAA,CAAO,cAAA;AAAA,IAChB,KAAK,cAAA;AACH,MAAA,OAAO,MAAA,CAAO,kBAAA;AAAA,IAChB,KAAK,cAAA;AAAA,IACL,KAAK,oBAAA;AACH,MAAA,OAAO,IAAA;AAAA;AAEb;AAMO,SAAS,MAAA,CACd,WAAA,EACA,MAAA,EACA,MAAA,EACkB;AAElB,EAAA,IAAI,YAAY,UAAA,EAAY;AAC1B,IAAA,OAAO,WAAA,CAAY,QAAQ,oBAAA,EAAsB,MAAM,IACnD,EAAE,OAAA,EAAS,sBAAqB,GAChC,IAAA;AAAA,EACN;AACA,EAAA,IACE,oBAAA,CAAqB,KAAK,WAAA,CAAY,OAAO,KAC7C,WAAA,CAAY,MAAA,EAAQ,cAAA,EAAgB,MAAM,CAAA,EAC1C;AACA,IAAA,OAAO,EAAE,SAAS,cAAA,EAAe;AAAA,EACnC;AACA,EAAA,IAAI,sBAAA,CAAuB,YAAY,OAAO,CAAA,IAAK,YAAY,MAAA,EAAQ,cAAA,EAAgB,MAAM,CAAA,EAAG;AAC9F,IAAA,OAAO,EAAE,SAAS,cAAA,EAAe;AAAA,EACnC;AAIA,EAAA,IAAI,YAAY,SAAA,IAAa,WAAA,CAAY,MAAA,EAAQ,cAAA,EAAgB,MAAM,CAAA,EAAG;AACxE,IAAA,OAAO,EAAE,SAAS,cAAA,EAAe;AAAA,EACnC;AACA,EAAA,IAAI,YAAY,aAAA,IAAiB,WAAA,CAAY,MAAA,EAAQ,gBAAA,EAAkB,MAAM,CAAA,EAAG;AAC9E,IAAA,OAAO,EAAE,SAAS,gBAAA,EAAiB;AAAA,EACrC;AACA,EAAA,OAAO,IAAA;AACT","file":"chunk-IZCR27MU.js","sourcesContent":["/**\n * Recovery policy for a failed turn: one decision per failure.\n *\n * A harness driver that can recover from a failed turn (the claude-sdk driver,\n * and the managed codex driver's 401 refresh gate) observes a failure, asks\n * {@link decide} once what to do, records the answer on the turn, and acts on\n * that record. The policy is pure: it picks at most one recovery *attempt* or\n * says to *fail*, and it owns the per-turn budgets. The recovery actions\n * themselves (drop the query, retract text, scrub a transcript, replay the\n * prompt, refresh a credential) stay in the driver.\n *\n * Rules:\n * - One attempt per kind per turn. Budgets are independent per kind, so a\n *   stale-resume retry never uses up the auth budget (the fresh session it\n *   starts can still meet an expired credential).\n * - Auth refresh and limit failover exclude each other: an auth failure with\n *   no `onAuthError` callback falls through to limit failover.\n * - Limit failover needs a limit rejection seen on *this* attempt.\n * - A poisoned-transcript scrub needs a resumable session id.\n *\n * Internal module: not exported from `bridge/src/index.ts`.\n */\n\n/** The recovery attempts a failed turn can take. */\nexport type RecoveryKind =\n  | \"stale_resume\"\n  | \"poison_scrub\"\n  | \"auth_refresh\"\n  | \"limit_failover\"\n  | \"query_ended_replay\";\n\n/**\n * What the driver saw fail. Facts only — the policy derives the meaning.\n */\nexport interface FailureObservation {\n  /** The failure's message text (thrown error, or the result's joined `errors[]`). */\n  message: string;\n  /** The failure was classified as an auth failure (a 401-shaped `AuthError`). */\n  authError: boolean;\n  /** An upstream usage-limit rejection was seen on THIS attempt (not an earlier one). */\n  limitRejected: boolean;\n  /** The turn was never dispatched: the serving query ended before it ran. */\n  queryEnded: boolean;\n}\n\n/** Which host capabilities exist for this failure. */\nexport interface RecoveryWiring {\n  /** The host wired an `onAuthError` credential-refresh callback. */\n  onAuthError: boolean;\n  /** The host wired an `onLimitBlocked` seat-failover callback. */\n  onLimitBlocked: boolean;\n  /** A session id exists that a transcript scrub could repair and resume. */\n  resumableSessionId: boolean;\n}\n\n/** One-shot budgets for a single logical turn; `true` = that kind has been spent. */\nexport type RecoveryBudget = Readonly<Record<RecoveryKind, boolean>>;\n\n/** The policy's answer: take one recovery attempt, or fail the turn. */\nexport type RecoveryDecision = { attempt: RecoveryKind } | { fail: true };\n\n/** The \"no recovery\" answer. */\nexport const FAIL: RecoveryDecision = { fail: true };\n\n/**\n * The CLI's text for a resume whose on-disk transcript is gone. It arrives\n * either as an iterator throw or inside an `is_error` result's `errors[]`.\n */\nconst STALE_RESUME_PATTERN = /No conversation found with session ID/i;\n\n/** A `400 invalid_request_error` the reactive transcript scrub may be able to repair. */\nfunction isPoisonedHistoryError(message: string): boolean {\n  return (\n    /invalid_request_error/i.test(message) &&\n    /media[_ ]?type|could not process image|image exceeds|cache_control/i.test(message)\n  );\n}\n\n/** A pristine budget for the first attempt of a turn (nothing spent yet). */\nexport function freshBudget(): RecoveryBudget {\n  return {\n    stale_resume: false,\n    poison_scrub: false,\n    auth_refresh: false,\n    limit_failover: false,\n    query_ended_replay: false,\n  };\n}\n\n/** The budget after `kind` has been spent; the input is not modified. */\nexport function spend(budget: RecoveryBudget, kind: RecoveryKind): RecoveryBudget {\n  return { ...budget, [kind]: true };\n}\n\n/** Whether `kind` has already been spent this turn (regardless of wiring). */\nexport function isSpent(budget: RecoveryBudget, kind: RecoveryKind): boolean {\n  return budget[kind];\n}\n\n/**\n * Whether no recovery has been spent yet — the turn is on its first attempt.\n * Derived from the budget, so a new {@link RecoveryKind} is covered by default.\n */\nexport function isFirstAttempt(budget: RecoveryBudget): boolean {\n  return !Object.values(budget).some(Boolean);\n}\n\n/**\n * Whether `kind` could still run this turn: unspent and with the host\n * capability it needs. For checks that run before any failure is classified\n * (e.g. hiding an auth-error render while a self-heal can still follow).\n */\nexport function isAvailable(\n  budget: RecoveryBudget,\n  kind: RecoveryKind,\n  wiring: RecoveryWiring,\n): boolean {\n  if (budget[kind]) return false;\n  switch (kind) {\n    case \"auth_refresh\":\n      return wiring.onAuthError;\n    case \"limit_failover\":\n      return wiring.onLimitBlocked;\n    case \"poison_scrub\":\n      return wiring.resumableSessionId;\n    case \"stale_resume\":\n    case \"query_ended_replay\":\n      return true;\n  }\n}\n\n/**\n * Decide what to do about one failure. Call once per failure, where it is\n * classified, and act on the recorded answer.\n */\nexport function decide(\n  observation: FailureObservation,\n  budget: RecoveryBudget,\n  wiring: RecoveryWiring,\n): RecoveryDecision {\n  // The prompt never reached a CLI; nothing else about the failure matters.\n  if (observation.queryEnded) {\n    return isAvailable(budget, \"query_ended_replay\", wiring)\n      ? { attempt: \"query_ended_replay\" }\n      : FAIL;\n  }\n  if (\n    STALE_RESUME_PATTERN.test(observation.message) &&\n    isAvailable(budget, \"stale_resume\", wiring)\n  ) {\n    return { attempt: \"stale_resume\" };\n  }\n  if (isPoisonedHistoryError(observation.message) && isAvailable(budget, \"poison_scrub\", wiring)) {\n    return { attempt: \"poison_scrub\" };\n  }\n  // Auth and limit exclude each other: when auth owns the failure, limit\n  // failover is not tried. An auth failure auth cannot own (no `onAuthError`,\n  // or its budget spent) falls through to limit failover.\n  if (observation.authError && isAvailable(budget, \"auth_refresh\", wiring)) {\n    return { attempt: \"auth_refresh\" };\n  }\n  if (observation.limitRejected && isAvailable(budget, \"limit_failover\", wiring)) {\n    return { attempt: \"limit_failover\" };\n  }\n  return FAIL;\n}\n"]}

package/dist/chunk-JYWW32JI.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../cli/src/plugin-store/paths.ts","../cli/src/plugin-store/spec.ts","../cli/src/plugin-store/load.ts","../cli/src/plugin-store/reconcile.ts","../cli/src/plugin-store/index.ts"],"names":["existsSync","readFileSync","join"],"mappings":";;;;;;;;AAWO,SAAS,WAAW,UAAA,EAA4B;AACrD,EAAA,OAAO,IAAA,CAAK,UAAA,EAAY,SAAA,EAAW,SAAS,CAAA;AAC9C;AAGO,SAAS,eAAe,UAAA,EAA4B;AACzD,EAAA,OAAO,IAAA,CAAK,UAAA,CAAW,UAAU,CAAA,EAAG,cAAc,CAAA;AACpD;AAGO,SAAS,eAAe,UAAA,EAA4B;AACzD,EAAA,OAAO,IAAA,CAAK,UAAA,CAAW,UAAU,CAAA,EAAG,cAAc,CAAA;AACpD;AAGO,SAAS,kBAAkB,UAAA,EAA4B;AAC5D,EAAA,OAAO,IAAA,CAAK,UAAA,CAAW,UAAU,CAAA,EAAG,iBAAiB,CAAA;AACvD;AAGA,SAAS,cAAc,MAAA,EAAqC;AAC1D,EAAA,IAAI,OAAO,MAAA,KAAW,QAAA,EAAU,OAAO,MAAA;AACvC,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,MAAM,CAAA,EAAG;AACzB,IAAA,KAAA,MAAW,KAAK,MAAA,EAAQ;AACtB,MAAA,MAAM,GAAA,GAAM,cAAc,CAAC,CAAA;AAC3B,MAAA,IAAI,KAAK,OAAO,GAAA;AAAA,IAClB;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,IAAI,MAAA,IAAU,OAAO,MAAA,KAAW,QAAA,EAAU;AACxC,IAAA,MAAM,GAAA,GAAM,MAAA;AACZ,IAAA,KAAA,MAAW,QAAQ,CAAC,QAAA,EAAU,MAAA,EAAQ,SAAA,EAAW,SAAS,CAAA,EAAG;AAC3D,MAAA,IAAI,QAAQ,GAAA,EAAK;AACf,QAAA,MAAM,GAAA,GAAM,aAAA,CAAc,GAAA,CAAI,IAAI,CAAC,CAAA;AACnC,QAAA,IAAI,KAAK,OAAO,GAAA;AAAA,MAClB;AAAA,IACF;AAAA,EACF;AACA,EAAA,OAAO,MAAA;AACT;AAWO,SAAS,kBAAA,CAAmB,YAAoB,OAAA,EAAyB;AAC9E,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,cAAA,CAAe,UAAU,GAAG,OAAO,CAAA;AACvD,EAAA,MAAM,WAAA,GAAc,IAAA,CAAK,MAAA,EAAQ,cAAc,CAAA;AAC/C,EAAA,IAAI,CAAC,UAAA,CAAW,WAAW,CAAA,EAAG;AAC5B,IAAA,MAAM,IAAI,MAAM,CAAA,SAAA,EAAY,OAAO,yBAAyB,cAAA,CAAe,UAAU,CAAC,CAAA,CAAE,CAAA;AAAA,EAC1F;AACA,EAAA,MAAM,MAAM,IAAA,CAAK,KAAA,CAAM,YAAA,CAAa,WAAA,EAAa,MAAM,CAAC,CAAA;AAKxD,EAAA,IAAI,GAAA;AACJ,EAAA,IAAI,GAAA,CAAI,YAAY,MAAA,EAAW;AAC7B,IAAA,MAAM,IAAA,GACJ,OAAO,GAAA,CAAI,OAAA,KAAY,YAAY,GAAA,CAAI,OAAA,KAAY,QAAQ,CAAC,KAAA,CAAM,QAAQ,GAAA,CAAI,OAAO,IAC/E,GAAA,CAAI,OAAA,CAAoC,GAAG,CAAA,IAAK,GAAA,CAAI,UACtD,GAAA,CAAI,OAAA;AACV,IAAA,GAAA,GAAM,cAAc,IAAI,CAAA;AAAA,EAC1B;AACA,EAAA,GAAA,KAAQ,GAAA,CAAI,MAAA,IAAU,GAAA,CAAI,IAAA,IAAQ,UAAA;AAClC,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,MAAA,EAAQ,GAAG,CAAA;AACjC,EAAA,IAAI,CAAC,UAAA,CAAW,KAAK,CAAA,EAAG;AACtB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,SAAA,EAAY,OAAO,CAAA,QAAA,EAAW,GAAG,CAAA,eAAA,CAAiB,CAAA;AAAA,EACpE;AACA,EAAA,OAAO,KAAA;AACT;;;AC/DO,SAAS,UAAU,IAAA,EAA0B;AAClD,EAAA,MAAM,OAAA,GAAU,KAAK,IAAA,EAAK;AAC1B,EAAA,IAAI,CAAC,OAAA,EAAS,MAAM,IAAI,MAAM,4BAA4B,CAAA;AAI1D,EAAA,MAAM,EAAA,GAAK,OAAA,CAAQ,WAAA,CAAY,GAAG,CAAA;AAClC,EAAA,IAAI,MAAM,CAAA,EAAG;AACX,IAAA,OAAO,EAAE,IAAA,EAAM,OAAA,EAAS,KAAA,EAAO,GAAA,EAAI;AAAA,EACrC;AACA,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA;AAChC,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,KAAA,CAAM,EAAA,GAAK,CAAC,CAAA;AAClC,EAAA,OAAO,EAAE,IAAA,EAAM,KAAA,EAAO,MAAM,MAAA,GAAS,CAAA,GAAI,QAAQ,GAAA,EAAI;AACvD;AAGO,SAAS,SAAS,IAAA,EAAsB;AAC7C,EAAA,OAAO,SAAA,CAAU,IAAI,CAAA,CAAE,IAAA;AACzB;;;ACDA,eAAsB,YACpB,UAAA,EACA,OAAA,EACA,WAA2B,cAAA,EAC3B,IAAA,GAAoB,EAAC,EACA;AACrB,EAAA,MAAM,SAAmB,EAAC;AAC1B,EAAA,MAAM,SAA4D,EAAC;AAEnE,EAAA,KAAA,MAAW,QAAQ,OAAA,EAAS;AAC1B,IAAA,IAAI;AACF,MAAA,MAAM,EAAE,IAAA,EAAK,GAAI,SAAA,CAAU,IAAI,CAAA;AAC/B,MAAA,MAAM,KAAA,GAAQ,kBAAA,CAAmB,UAAA,EAAY,IAAI,CAAA;AACjD,MAAA,MAAM,GAAA,GAAO,MAAM,OAAO,aAAA,CAAc,KAAK,CAAA,CAAE,IAAA,CAAA;AAC/C,MAAA,IAAI,OAAO,GAAA,CAAI,QAAA,KAAa,UAAA,EAAY;AACtC,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,QAAA,EAAW,IAAI,CAAA,uCAAA,CAAyC,CAAA;AAAA,MAC1E;AACA,MAAA,GAAA,CAAI,SAAS,QAAQ,CAAA;AACrB,MAAA,MAAA,CAAO,KAAK,IAAI,CAAA;AAAA,IAClB,SAAS,GAAA,EAAK;AACZ,MAAA,MAAM,UAAU,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAC/D,MAAA,MAAA,CAAO,IAAA,CAAK,EAAE,IAAA,EAAM,KAAA,EAAO,CAAA,uBAAA,EAA0B,IAAI,CAAA,GAAA,EAAM,OAAO,CAAA,CAAA,EAAI,MAAA,EAAQ,OAAA,EAAS,CAAA;AAC3F,MAAA,IAAA,CAAK,GAAA,EAAK,KAAK,CAAA,oBAAA,EAAuB,IAAI,IAAI,EAAE,KAAA,EAAO,SAAS,CAAA;AAAA,IAClE;AAAA,EACF;AAEA,EAAA,OAAO,EAAE,QAAQ,MAAA,EAAO;AAC1B;ACZA,eAAe,UAAA,CACb,MACA,GAAA,EAC6D;AAC7D,EAAA,MAAM,EAAE,aAAA,EAAc,GAAI,MAAM,OAAO,iBAAyB,CAAA;AAChE,EAAA,MAAM,IAAA,GAAO,aAAA,CAAc,IAAA,EAAM,EAAE,KAAK,CAAA;AACxC,EAAA,MAAM,SAAmB,EAAC;AAC1B,EAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY;AAChC,EAAA,MAAM,IAAA,GAAO,OAAO,MAAA,KAAuC;AACzD,IAAA,MAAM,MAAA,GAAS,OAAO,SAAA,EAAU;AAChC,IAAA,WAAS;AACP,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAM,GAAI,MAAM,OAAO,IAAA,EAAK;AAC1C,MAAA,IAAI,IAAA,EAAM;AACV,MAAA,IAAI,KAAA,EAAO,MAAA,CAAO,IAAA,CAAK,OAAA,CAAQ,MAAA,CAAO,OAAO,EAAE,MAAA,EAAQ,IAAA,EAAM,CAAC,CAAA;AAAA,IAChE;AAAA,EACF,CAAA;AACA,EAAA,MAAM,OAAA,CAAQ,GAAA,CAAI,CAAC,IAAA,CAAK,IAAA,CAAK,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,CAAK,MAAM,CAAC,CAAC,CAAA;AACxD,EAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,MAAA;AAExB,EAAA,OAAO,EAAE,OAAA,EAAS,IAAA,CAAK,GAAA,KAAQ,EAAA,EAAI,MAAM,MAAA,EAAQ,MAAA,CAAO,IAAA,CAAK,EAAE,CAAA,EAAE;AACnE;AAQO,IAAM,cAAA,GAA4B,OAAO,GAAA,EAAK,IAAA,GAAO,EAAC,KAAM;AACjE,EAAA,MAAM,UAAA,GAAaA,WAAW,CAAA,EAAG,GAAG,WAAW,CAAA,IAAKA,UAAAA,CAAW,CAAA,EAAG,GAAG,CAAA,UAAA,CAAY,CAAA;AACjF,EAAA,MAAM,UAAA,GAAaA,UAAAA,CAAW,CAAA,EAAG,GAAG,CAAA,kBAAA,CAAoB,CAAA;AACxD,EAAA,MAAM,MAAA,GAAS,KAAK,MAAA,KAAW,KAAA;AAE/B,EAAA,MAAM,OAAA,GACJ,MAAA,KAAW,UAAA,IAAc,UAAA,CAAA,GACrB,CAAC,KAAA,EAAO,SAAA,EAAW,mBAAmB,CAAA,GACtC,CAAC,KAAA,EAAO,SAAS,CAAA;AACvB,EAAA,MAAM,OAAA,GAAU,MAAM,UAAA,CAAW,OAAA,EAAS,GAAG,CAAA;AAC7C,EAAA,IAAI,OAAA,CAAQ,OAAA,EAAS,OAAO,EAAE,EAAA,EAAI,QAAQ,IAAA,KAAS,CAAA,EAAG,MAAA,EAAQ,OAAA,CAAQ,MAAA,EAAO;AAE7E,EAAA,MAAM,OAAA,GACJ,MAAA,IAAU,UAAA,GACN,CAAC,OAAO,IAAA,EAAM,kBAAA,EAAoB,YAAA,EAAc,WAAW,IAC3D,CAAC,KAAA,EAAO,SAAA,EAAW,kBAAA,EAAoB,cAAc,WAAW,CAAA;AACtE,EAAA,MAAM,OAAA,GAAU,MAAM,UAAA,CAAW,OAAA,EAAS,GAAG,CAAA;AAC7C,EAAA,IAAI,OAAA,CAAQ,OAAA,EAAS,OAAO,EAAE,EAAA,EAAI,QAAQ,IAAA,KAAS,CAAA,EAAG,MAAA,EAAQ,OAAA,CAAQ,MAAA,EAAO;AAC7E,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,KAAA;AAAA,IACJ,MAAA,EACE;AAAA,GACJ;AACF,CAAA;AAOA,SAAS,gBAAA,CACP,YACA,OAAA,EACwD;AACxD,EAAA,MAAM,eAAuC,EAAC;AAC9C,EAAA,KAAA,MAAW,QAAQ,OAAA,EAAS;AAC1B,IAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAM,GAAI,UAAU,IAAI,CAAA;AACtC,IAAA,YAAA,CAAa,IAAI,CAAA,GAAI,KAAA;AAAA,EACvB;AACA,EAAA,MAAM,GAAA,GAAM;AAAA,IACV,IAAA,EAAM,wBAAA;AAAA,IACN,OAAA,EAAS,IAAA;AAAA,IACT;AAAA,GACF;AACA,EAAA,MAAM,IAAA,GAAO,eAAe,UAAU,CAAA;AACtC,EAAA,MAAM,WAAWA,UAAAA,CAAW,IAAI,IAAIC,YAAAA,CAAa,IAAA,EAAM,MAAM,CAAA,GAAI,MAAA;AACjE,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,aAAa,KAAA,CAAA,GAAY,KAAA,CAAA,GAAY,IAAA,CAAK,KAAA,CAAM,QAAQ,CAAA,CAAE,YAAA;AAAA,EACrE,CAAA,CAAA,MAAQ;AACN,IAAA,MAAA,GAAS,MAAA;AAAA,EACX;AACA,EAAA,MAAM,UAAA,GAAa,CAAC,CAAA,KAClB,IAAA,CAAK,UAAU,MAAA,CAAO,OAAA,CAAQ,CAAA,IAAK,EAAE,CAAA,CAAE,KAAK,CAAC,CAAC,CAAC,CAAA,EAAG,CAAC,CAAC,MAAM,CAAA,CAAE,aAAA,CAAc,CAAC,CAAC,CAAC,CAAA;AAC/E,EAAA,MAAM,cAAc,MAAA,KAAW,MAAA,IAAa,WAAW,MAAM,CAAA,KAAM,WAAW,YAAY,CAAA;AAC1F,EAAA,SAAA,CAAU,WAAW,UAAU,CAAA,EAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AACrD,EAAA,aAAA,CAAc,MAAM,CAAA,EAAG,IAAA,CAAK,UAAU,GAAA,EAAK,IAAA,EAAM,CAAC,CAAC;AAAA,CAAI,CAAA;AACvD,EAAA,OAAO,EAAE,UAAU,WAAA,EAAY;AACjC;AAUA,eAAsB,gBAAA,CACpB,UAAA,EACA,OAAA,EACA,IAAA,GAAyB,EAAC,EACA;AAC1B,EAAA,IAAI,OAAA,CAAQ,WAAW,CAAA,EAAG;AACxB,IAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,MAAA,EAAQ,YAAA,EAAa;AAAA,EAChD;AAEA,EAAA,MAAM,SAAA,GAAY,IAAA,CAAK,SAAA,IAAa,oBAAA,CAAqB,UAAU,CAAA;AACnE,EAAA,MAAM,QAAA,GAAW,WAAW,QAAQ,CAAA,CACjC,OAAO,IAAA,CAAK,SAAA,CAAU,EAAE,OAAA,EAAS,CAAC,GAAG,OAAO,CAAA,CAAE,MAAK,EAAG,IAAA,EAAM,WAAW,CAAC,CAAA,CACxE,MAAA,CAAO,KAAK,CAAA;AAEf,EAAA,MAAM,QAAA,GAAW,kBAAkB,UAAU,CAAA;AAC7C,EAAA,IAAID,UAAAA,CAAW,QAAQ,CAAA,EAAG;AACxB,IAAA,MAAM,IAAA,GAAOC,YAAAA,CAAa,QAAA,EAAU,MAAM,EAAE,IAAA,EAAK;AACjD,IAAA,IAAI,SAAS,QAAA,EAAU;AACrB,MAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,MAAA,EAAQ,YAAA,EAAa;AAAA,IAChD;AAAA,EACF;AAEA,EAAA,MAAM,EAAE,QAAA,EAAU,WAAA,EAAY,GAAI,gBAAA,CAAiB,YAAY,OAAO,CAAA;AAEtE,EAAA,MAAM,OAAA,GAAU,KAAK,UAAA,IAAc,cAAA;AACnC,EAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,UAAA,CAAW,UAAU,GAAG,EAAE,MAAA,EAAQ,CAAC,WAAA,EAAa,CAAA;AAC7E,EAAA,IAAI,CAAC,OAAO,EAAA,EAAI;AAGd,IAAA,IAAI,QAAA,KAAa,QAAW,MAAA,CAAO,cAAA,CAAe,UAAU,CAAA,EAAG,EAAE,KAAA,EAAO,IAAA,EAAM,CAAA;AAAA,SACzE,aAAA,CAAc,cAAA,CAAe,UAAU,CAAA,EAAG,QAAQ,CAAA;AACvD,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA;AAAA,EAA2B,MAAA,CAAO,MAAM,CAAA,CAAE,CAAA;AAAA,EAC5D;AAEA,EAAA,aAAA,CAAc,UAAU,QAAQ,CAAA;AAChC,EAAA,OAAO,EAAE,OAAA,EAAS,IAAA,EAAM,MAAA,EAAQ,YAAA,EAAa;AAC/C;AAYA,eAAsB,mBAAA,CACpB,UAAA,EACA,eAAA,EACA,IAAA,GAAyB,EAAC,EACX;AACf,EAAA,IAAI,eAAA,CAAgB,WAAW,CAAA,EAAG;AAChC,IAAA,MAAM,GAAA,GAAM,WAAW,UAAU,CAAA;AACjC,IAAA,MAAA,CAAO,eAAe,UAAU,CAAA,EAAG,EAAE,KAAA,EAAO,MAAM,CAAA;AAClD,IAAA,MAAA,CAAO,kBAAkB,UAAU,CAAA,EAAG,EAAE,KAAA,EAAO,MAAM,CAAA;AACrD,IAAA,MAAA,CAAO,cAAA,CAAe,UAAU,CAAA,EAAG,EAAE,WAAW,IAAA,EAAM,KAAA,EAAO,MAAM,CAAA;AACnE,IAAA,KAAA,MAAW,IAAA,IAAQ,CAAC,UAAA,EAAY,WAAA,EAAa,mBAAmB,CAAA,EAAG;AACjE,MAAA,MAAA,CAAOC,KAAK,GAAA,EAAK,IAAI,GAAG,EAAE,KAAA,EAAO,MAAM,CAAA;AAAA,IACzC;AACA,IAAA;AAAA,EACF;AACA,EAAA,IAAI;AACF,IAAA,MAAM,gBAAA,CAAiB,UAAA,EAAY,eAAA,EAAiB,IAAI,CAAA;AAAA,EAC1D,CAAA,CAAA,MAAQ;AAAA,EAER;AACF;;;ACpLA,eAAsB,oBACpB,UAAA,EACA,OAAA,EACA,WAA2B,cAAA,EAC3B,IAAA,GAA6B,EAAC,EACT;AACrB,EAAA,IAAI,CAAC,OAAA,IAAW,OAAA,CAAQ,MAAA,KAAW,CAAA,EAAG;AACpC,IAAA,OAAO,EAAE,MAAA,EAAQ,EAAC,EAAG,MAAA,EAAQ,EAAC,EAAE;AAAA,EAClC;AACA,EAAA,MAAM,gBAAA,CAAiB,UAAA,EAAY,OAAA,EAAS,IAAI,CAAA;AAChD,EAAA,OAAO,WAAA,CAAY,YAAY,OAAA,EAAS,QAAA,EAAU,EAAE,GAAA,EAAK,IAAA,CAAK,KAAK,CAAA;AACrE;AAOO,SAAS,sBAAsB,MAAA,EAAwB;AAC5D,EAAA,MAAM,QAAQ,MAAA,CACX,KAAA,CAAM,IAAI,CAAA,CACV,IAAI,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,EAAM,CAAA,CACnB,MAAA,CAAO,CAAC,CAAA,KAAM,MAAM,EAAE,CAAA;AACzB,EAAA,MAAM,CAAC,KAAA,EAAO,GAAG,IAAI,CAAA,GAAI,KAAA;AACzB,EAAA,IAAI,CAAC,OAAO,UAAA,CAAW,uBAAuB,KAAK,KAAA,KAAU,MAAA,IAAa,IAAA,CAAK,MAAA,KAAW,CAAA,EAAG;AAC3F,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,MAAM,IAAA,GAAO,IAAA,CAAK,MAAA,CAAO,CAAC,MAAM,8BAAA,CAA+B,IAAA,CAAK,CAAC,CAAC,CAAA,CAAE,GAAA,EAAI,IAAK,IAAA,CAAK,GAAG,EAAE,CAAA;AAC3F,EAAA,OAAO,GAAG,KAAA,CAAM,OAAA,CAAQ,MAAM,EAAE,CAAC,KAAK,IAAI,CAAA,CAAA;AAC5C;AAGA,SAAS,gBAAA,CAAiB,MAAc,MAAA,EAAsB;AAC5D,EAAA,IAAI,IAAA,GAAO,IAAA;AACX,EAAA,IAAI;AACF,IAAA,IAAA,GAAO,SAAS,IAAI,CAAA;AAAA,EACtB,CAAA,CAAA,MAAQ;AAAA,EAER;AACA,EAAA,OAAA,CAAQ,MAAA,CAAO,KAAA;AAAA,IACb,CAAA,EAAA,EAAK,EAAA,CAAG,MAAA,CAAO,GAAG,CAAC,WAAW,IAAI,CAAA,iBAAA,EAAoB,qBAAA,CAAsB,MAAM,CAAC;AAAA;AAAA,GACrF;AACF;AASA,eAAsB,oBAAoB,UAAA,EAAmC;AAC3E,EAAA,IAAI,OAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAM,EAAE,wBAAA,EAAyB,GAAI,MAAM,OAAO,iBAAyB,CAAA;AAC3E,IAAA,OAAA,GAAU,wBAAA,CAAyB,UAAU,CAAA,CAAE,OAAA;AAAA,EACjD,CAAA,CAAA,MAAQ;AACN,IAAA;AAAA,EACF;AACA,EAAA,IAAI,CAAC,OAAA,IAAW,OAAA,CAAQ,MAAA,KAAW,CAAA,EAAG;AACtC,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,MAAM,mBAAA,CAAoB,UAAA,EAAY,SAAS,cAAc,CAAA;AAC5E,IAAA,KAAA,MAAW,KAAK,MAAA,CAAO,MAAA,mBAAyB,CAAA,CAAE,IAAA,EAAM,EAAE,MAAM,CAAA;AAAA,EAClE,SAAS,GAAA,EAAK;AAEZ,IAAA,MAAM,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAC9D,IAAA,KAAA,MAAW,IAAA,IAAQ,OAAA,EAAS,gBAAA,CAAiB,IAAA,EAAM,MAAM,CAAA;AAAA,EAC3D;AACF","file":"chunk-JYWW32JI.js","sourcesContent":["/**\n * Pure path helpers for the project-local plugin store.\n *\n * The store is a self-contained npm workspace owned by the CLI under\n * `<projectDir>/.skaile/plugins/`. Only `resolvePluginEntry` reads the filesystem.\n */\n\nimport { existsSync, readFileSync } from \"node:fs\";\nimport { join, resolve } from \"node:path\";\n\n/** `<projectDir>/.skaile/plugins` — the store root. */\nexport function pluginsDir(projectDir: string): string {\n  return join(projectDir, \".skaile\", \"plugins\");\n}\n\n/** `<store>/package.json` — generated, never user-edited. */\nexport function pluginsPkgJson(projectDir: string): string {\n  return join(pluginsDir(projectDir), \"package.json\");\n}\n\n/** `<store>/node_modules` — where reconciled plugin packages land. */\nexport function nodeModulesDir(projectDir: string): string {\n  return join(pluginsDir(projectDir), \"node_modules\");\n}\n\n/** `<store>/.reconcile-hash` — SHA of plugins-list + lock slice; skip reinstall when unchanged. */\nexport function reconcileHashFile(projectDir: string): string {\n  return join(pluginsDir(projectDir), \".reconcile-hash\");\n}\n\n/** Pick the file an `exports` target points at, preferring the ESM-friendly conditions. */\nfunction exportsTarget(target: unknown): string | undefined {\n  if (typeof target === \"string\") return target;\n  if (Array.isArray(target)) {\n    for (const t of target) {\n      const hit = exportsTarget(t);\n      if (hit) return hit;\n    }\n    return undefined;\n  }\n  if (target && typeof target === \"object\") {\n    const map = target as Record<string, unknown>;\n    for (const cond of [\"import\", \"node\", \"default\", \"require\"]) {\n      if (cond in map) {\n        const hit = exportsTarget(map[cond]);\n        if (hit) return hit;\n      }\n    }\n  }\n  return undefined;\n}\n\n/**\n * Absolute path to a plugin package's entry file under the store's\n * `node_modules`, resolved from its `package.json` (`exports[\".\"]`, then\n * `module`, then `main`, then `index.js`). Node's ESM loader rejects directory\n * imports, so the entry must be a file; `import()` of the result works inside\n * compiled binaries via `pathToFileURL`.\n *\n * @throws When the package is not installed or declares no resolvable entry.\n */\nexport function resolvePluginEntry(projectDir: string, pkgName: string): string {\n  const pkgDir = join(nodeModulesDir(projectDir), pkgName);\n  const pkgJsonPath = join(pkgDir, \"package.json\");\n  if (!existsSync(pkgJsonPath)) {\n    throw new Error(`package \"${pkgName}\" is not installed in ${nodeModulesDir(projectDir)}`);\n  }\n  const pkg = JSON.parse(readFileSync(pkgJsonPath, \"utf8\")) as {\n    exports?: unknown;\n    module?: string;\n    main?: string;\n  };\n  let rel: string | undefined;\n  if (pkg.exports !== undefined) {\n    const root =\n      typeof pkg.exports === \"object\" && pkg.exports !== null && !Array.isArray(pkg.exports)\n        ? ((pkg.exports as Record<string, unknown>)[\".\"] ?? pkg.exports)\n        : pkg.exports;\n    rel = exportsTarget(root);\n  }\n  rel ??= pkg.module ?? pkg.main ?? \"index.js\";\n  const entry = resolve(pkgDir, rel);\n  if (!existsSync(entry)) {\n    throw new Error(`package \"${pkgName}\" entry ${rel} does not exist`);\n  }\n  return entry;\n}\n","/**\n * Parse npm package specifiers from the `plugins:` list into name + range.\n *\n * The leading `@` of a scope is NOT a separator: only the last `@` at a\n * non-zero index splits the package name from its semver range.\n *   \"@skaile/provider-fly@^0.1.0\" → { name: \"@skaile/provider-fly\", range: \"^0.1.0\" }\n *   \"@skaile/connector-redis\"     → { name: \"@skaile/connector-redis\", range: \"*\" }\n *   \"lodash@^4\"                   → { name: \"lodash\", range: \"^4\" }\n */\n\n/** A parsed plugin specifier: package name plus a semver range (`\"*\"` when omitted). */\nexport interface PluginSpec {\n  name: string;\n  range: string;\n}\n\n/**\n * Parse a single plugin specifier into `{ name, range }`.\n *\n * @param spec - An npm specifier, e.g. `\"@skaile/provider-fly@^0.1.0\"` or `\"lodash\"`.\n * @returns The package name and semver range (range defaults to `\"*\"`).\n * @throws Error when the specifier is empty.\n */\nexport function parseSpec(spec: string): PluginSpec {\n  const trimmed = spec.trim();\n  if (!trimmed) throw new Error(\"parseSpec: empty specifier\");\n\n  // Find the version-separating `@` — the last one that is not the scope `@`\n  // at index 0. A bare `@scope/name` has its only `@` at index 0 (no range).\n  const at = trimmed.lastIndexOf(\"@\");\n  if (at <= 0) {\n    return { name: trimmed, range: \"*\" };\n  }\n  const name = trimmed.slice(0, at);\n  const range = trimmed.slice(at + 1);\n  return { name, range: range.length > 0 ? range : \"*\" };\n}\n\n/** Convenience: just the package name of a specifier. */\nexport function specName(spec: string): string {\n  return parseSpec(spec).name;\n}\n","/**\n * Runtime plugin loader: dynamic-import each reconciled plugin and let it\n * self-register into the `pluginRegistry`.\n *\n * Each plugin specifier resolves to an absolute path under the store's\n * `node_modules`; we import it via a `file://` URL so the import works inside\n * `bun --compile` binaries (which bundle only the literal-string switches, but\n * can still execute a `file://` import against the unpacked store on disk).\n * Failures are caught per-plugin so one broken plugin never aborts the rest.\n */\n\nimport { pathToFileURL } from \"node:url\";\nimport { type PluginRegistry, pluginRegistry } from \"@skaile/workspaces/plugin-registry\";\nimport type { Logger } from \"@skaile/workspaces/types\";\nimport { resolvePluginEntry } from \"./paths.js\";\nimport { parseSpec } from \"./spec.js\";\n\n/** Options for {@link loadPlugins}. */\nexport interface LoadOptions {\n  log?: Logger;\n}\n\n/** Result of a load pass: which specs registered and which failed. */\nexport interface LoadResult {\n  loaded: string[];\n  failed: { spec: string; error: string; reason: string }[];\n}\n\n/** The self-registration entrypoint a plugin module is expected to export. */\ntype PluginModule = { register?: (registry: PluginRegistry) => void };\n\n/**\n * Load and register each plugin in `plugins` into `registry`.\n *\n * @param projectDir - Project root holding `.skaile/plugins/node_modules`.\n * @param plugins - The `skaile.yaml` `plugins:` list (npm specifiers).\n * @param registry - Registry to register into. Defaults to the process-wide `pluginRegistry`.\n * @param opts - Optional logger.\n * @returns Loaded specs + per-plugin failures (never throws).\n */\nexport async function loadPlugins(\n  projectDir: string,\n  plugins: string[],\n  registry: PluginRegistry = pluginRegistry,\n  opts: LoadOptions = {},\n): Promise<LoadResult> {\n  const loaded: string[] = [];\n  const failed: { spec: string; error: string; reason: string }[] = [];\n\n  for (const spec of plugins) {\n    try {\n      const { name } = parseSpec(spec);\n      const entry = resolvePluginEntry(projectDir, name);\n      const mod = (await import(pathToFileURL(entry).href)) as PluginModule;\n      if (typeof mod.register !== \"function\") {\n        throw new Error(`plugin \"${name}\" does not export a register() function`);\n      }\n      mod.register(registry);\n      loaded.push(spec);\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      failed.push({ spec, error: `failed to load plugin \"${spec}\": ${message}`, reason: message });\n      opts.log?.warn(`plugin load failed: ${spec}`, { error: message });\n    }\n  }\n\n  return { loaded, failed };\n}\n","/**\n * Reconcile the project-local plugin store (`<projectDir>/.skaile/plugins/`).\n *\n * The reconciler is hash-skipped: it computes a SHA-256 over the sorted plugin\n * list plus the lock file's `plugins` slice and compares it to the stored\n * `.reconcile-hash`. On a match it returns with zero further I/O; otherwise it\n * regenerates the store's `package.json` and runs `bun install` against it.\n *\n * The install step is injectable (`InstallFn`) so tests stay hermetic — they\n * pass a fake installer that records calls and writes a stub `node_modules`.\n */\n\nimport { createHash } from \"node:crypto\";\nimport { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { readPluginsLockSlice } from \"@skaile/workspaces/core\";\nimport { nodeModulesDir, pluginsDir, pluginsPkgJson, reconcileHashFile } from \"./paths.js\";\nimport { parseSpec } from \"./spec.js\";\n\n/** How `InstallFn` may treat the store's lock: `frozen` forbids lock changes. */\nexport interface InstallOptions {\n  /**\n   * `false` when the spec list changed since the last `package.json`, so the\n   * lock has to change too. Defaults to `true` (frozen when a lock exists).\n   */\n  frozen?: boolean;\n}\n\n/**\n * Installs the store's dependencies. Returns `ok: false` (never throws) on a\n * failed install so the reconciler can surface the captured `output`.\n */\nexport type InstallFn = (\n  pluginsDir: string,\n  opts?: InstallOptions,\n) => Promise<{ ok: boolean; output: string }>;\n\n/** Options for {@link reconcilePlugins}. */\nexport interface ReconcileOptions {\n  /** Injectable installer. Defaults to a real `bun install` of the store. */\n  runInstall?: InstallFn;\n  /**\n   * Lock slice to fold into the reconcile-hash. Defaults to\n   * `readPluginsLockSlice(projectDir)` so a lock edit invalidates the hash.\n   */\n  lockSlice?: unknown;\n}\n\n/** Result of a reconcile pass. */\nexport interface ReconcileResult {\n  changed: boolean;\n  reason: \"no-plugins\" | \"up-to-date\" | \"reconciled\";\n}\n\n/** Run a command to completion, capturing stdout+stderr. `started: false` when it cannot spawn. */\nasync function runCapture(\n  args: string[],\n  cwd: string,\n): Promise<{ started: boolean; code: number; output: string }> {\n  const { portableSpawn } = await import(\"@skaile/workspaces/core\");\n  const proc = portableSpawn(args, { cwd });\n  const chunks: string[] = [];\n  const decoder = new TextDecoder();\n  const pump = async (stream: ReadableStream<Uint8Array>) => {\n    const reader = stream.getReader();\n    for (;;) {\n      const { done, value } = await reader.read();\n      if (done) break;\n      if (value) chunks.push(decoder.decode(value, { stream: true }));\n    }\n  };\n  await Promise.all([pump(proc.stdout), pump(proc.stderr)]);\n  const code = await proc.exited;\n  // `portableSpawn` reports a spawn error (ENOENT) as exit -1 with no pid.\n  return { started: proc.pid !== -1, code, output: chunks.join(\"\") };\n}\n\n/**\n * The default real installer: `bun install` inside the store directory, or\n * `npm install` when `bun` is not on PATH. Frozen only when a lock exists and\n * the spec list did not change (`opts.frozen !== false`): a changed list has to\n * rewrite the lock, which a frozen install refuses.\n */\nexport const defaultInstall: InstallFn = async (dir, opts = {}) => {\n  const hasBunLock = existsSync(`${dir}/bun.lock`) || existsSync(`${dir}/bun.lockb`);\n  const hasNpmLock = existsSync(`${dir}/package-lock.json`);\n  const frozen = opts.frozen !== false;\n\n  const bunArgs =\n    frozen && (hasBunLock || hasNpmLock)\n      ? [\"bun\", \"install\", \"--frozen-lockfile\"]\n      : [\"bun\", \"install\"];\n  const withBun = await runCapture(bunArgs, dir);\n  if (withBun.started) return { ok: withBun.code === 0, output: withBun.output };\n\n  const npmArgs =\n    frozen && hasNpmLock\n      ? [\"npm\", \"ci\", \"--ignore-scripts\", \"--no-audit\", \"--no-fund\"]\n      : [\"npm\", \"install\", \"--ignore-scripts\", \"--no-audit\", \"--no-fund\"];\n  const withNpm = await runCapture(npmArgs, dir);\n  if (withNpm.started) return { ok: withNpm.code === 0, output: withNpm.output };\n  return {\n    ok: false,\n    output:\n      \"neither bun nor npm found on PATH; plugin install needs one of them (https://bun.sh or https://nodejs.org)\",\n  };\n};\n\n/**\n * Generate the store's `package.json` from the plugin specs. Returns the\n * previous file content (`undefined` when there was none) and whether the\n * dependency set changed.\n */\nfunction writePackageJson(\n  projectDir: string,\n  plugins: string[],\n): { previous: string | undefined; depsChanged: boolean } {\n  const dependencies: Record<string, string> = {};\n  for (const spec of plugins) {\n    const { name, range } = parseSpec(spec);\n    dependencies[name] = range;\n  }\n  const pkg = {\n    name: \"skaile-project-plugins\",\n    private: true,\n    dependencies,\n  };\n  const file = pluginsPkgJson(projectDir);\n  const previous = existsSync(file) ? readFileSync(file, \"utf8\") : undefined;\n  let before: Record<string, string> | undefined;\n  try {\n    before = previous === undefined ? undefined : JSON.parse(previous).dependencies;\n  } catch {\n    before = undefined;\n  }\n  const sortedJson = (d: Record<string, string> | undefined) =>\n    JSON.stringify(Object.entries(d ?? {}).sort(([a], [b]) => a.localeCompare(b)));\n  const depsChanged = before === undefined || sortedJson(before) !== sortedJson(dependencies);\n  mkdirSync(pluginsDir(projectDir), { recursive: true });\n  writeFileSync(file, `${JSON.stringify(pkg, null, 2)}\\n`);\n  return { previous, depsChanged };\n}\n\n/**\n * Reconcile the plugin store for a project.\n *\n * @param projectDir - Project root containing `skaile.yaml` / `skaile.lock.yaml`.\n * @param plugins - The `skaile.yaml` `plugins:` list (npm specifiers).\n * @param opts - Optional injectable installer + lock slice override.\n * @returns Whether the store changed and why.\n */\nexport async function reconcilePlugins(\n  projectDir: string,\n  plugins: string[],\n  opts: ReconcileOptions = {},\n): Promise<ReconcileResult> {\n  if (plugins.length === 0) {\n    return { changed: false, reason: \"no-plugins\" };\n  }\n\n  const lockSlice = opts.lockSlice ?? readPluginsLockSlice(projectDir);\n  const wantHash = createHash(\"sha256\")\n    .update(JSON.stringify({ plugins: [...plugins].sort(), lock: lockSlice }))\n    .digest(\"hex\");\n\n  const hashFile = reconcileHashFile(projectDir);\n  if (existsSync(hashFile)) {\n    const have = readFileSync(hashFile, \"utf8\").trim();\n    if (have === wantHash) {\n      return { changed: false, reason: \"up-to-date\" };\n    }\n  }\n\n  const { previous, depsChanged } = writePackageJson(projectDir, plugins);\n\n  const install = opts.runInstall ?? defaultInstall;\n  const result = await install(pluginsDir(projectDir), { frozen: !depsChanged });\n  if (!result.ok) {\n    // A failed install must not leave the spec behind: the next reconcile\n    // would compare against it and treat the store as already changed.\n    if (previous === undefined) rmSync(pluginsPkgJson(projectDir), { force: true });\n    else writeFileSync(pluginsPkgJson(projectDir), previous);\n    throw new Error(`plugin install failed:\\n${result.output}`);\n  }\n\n  writeFileSync(hashFile, wantHash);\n  return { changed: true, reason: \"reconciled\" };\n}\n\n/**\n * Put the store back to `previousPlugins` after `plugin install` failed past\n * the reconcile (the plugin installed but does not load). Best effort: a\n * failing reinstall is swallowed, the store is then rebuilt by the next\n * reconcile because the hash no longer matches the declared list.\n *\n * With no previous plugins every generated file of the store goes away\n * (`package.json`, hash, lock file and `node_modules`), so the store keeps\n * neither the rejected spec nor its installed package.\n */\nexport async function rollbackPluginStore(\n  projectDir: string,\n  previousPlugins: string[],\n  opts: ReconcileOptions = {},\n): Promise<void> {\n  if (previousPlugins.length === 0) {\n    const dir = pluginsDir(projectDir);\n    rmSync(pluginsPkgJson(projectDir), { force: true });\n    rmSync(reconcileHashFile(projectDir), { force: true });\n    rmSync(nodeModulesDir(projectDir), { recursive: true, force: true });\n    for (const lock of [\"bun.lock\", \"bun.lockb\", \"package-lock.json\"]) {\n      rmSync(join(dir, lock), { force: true });\n    }\n    return;\n  }\n  try {\n    await reconcilePlugins(projectDir, previousPlugins, opts);\n  } catch {\n    // the next reconcile retries\n  }\n}\n","/**\n * The project-local plugin store: reconcile (`<projectDir>/.skaile/plugins/`)\n * then load the reconciled plugins into the `pluginRegistry`.\n *\n * `ensurePluginsLoaded` is the single entrypoint commands wire in. It is a\n * guarded no-op when `plugins` is empty/undefined — zero overhead for the\n * common case where no project declares `plugins:` in `skaile.yaml`.\n */\n\nimport { type PluginRegistry, pluginRegistry } from \"@skaile/workspaces/plugin-registry\";\nimport type { Logger } from \"@skaile/workspaces/types\";\nimport pc from \"picocolors\";\nimport { type LoadResult, loadPlugins } from \"./load.js\";\nimport { type ReconcileOptions, reconcilePlugins } from \"./reconcile.js\";\nimport { specName } from \"./spec.js\";\n\nexport type { LoadResult } from \"./load.js\";\nexport { loadPlugins } from \"./load.js\";\nexport type { ReconcileOptions } from \"./reconcile.js\";\nexport { reconcilePlugins, rollbackPluginStore } from \"./reconcile.js\";\nexport { specName } from \"./spec.js\";\n\n/** Options for {@link ensurePluginsLoaded}. */\nexport interface EnsurePluginsOptions extends ReconcileOptions {\n  log?: Logger;\n}\n\n/**\n * Reconcile the plugin store then load each plugin into `registry`.\n *\n * No-op (returns immediately) when `plugins` is empty/undefined, so the common\n * no-plugins path costs nothing.\n *\n * @param projectDir - Project root.\n * @param plugins - The `skaile.yaml` `plugins:` list (may be undefined).\n * @param registry - Registry to register into. Defaults to `pluginRegistry`.\n * @param opts - Injectable installer / lock slice + optional logger.\n * @returns The load result, or an empty result when there are no plugins.\n */\nexport async function ensurePluginsLoaded(\n  projectDir: string,\n  plugins: string[] | undefined,\n  registry: PluginRegistry = pluginRegistry,\n  opts: EnsurePluginsOptions = {},\n): Promise<LoadResult> {\n  if (!plugins || plugins.length === 0) {\n    return { loaded: [], failed: [] };\n  }\n  await reconcilePlugins(projectDir, plugins, opts);\n  return loadPlugins(projectDir, plugins, registry, { log: opts.log });\n}\n\n/**\n * The installer's output of a failed `plugin install` is a dump (bun's banner, resolver\n * progress, then the `error:` lines). A load warning keeps the first line and the last error\n * line of it (p1113); `skaile plugin install <spec>` prints the whole output.\n */\nexport function condensePluginFailure(reason: string): string {\n  const lines = reason\n    .split(\"\\n\")\n    .map((l) => l.trim())\n    .filter((l) => l !== \"\");\n  const [first, ...rest] = lines;\n  if (!reason.startsWith(\"plugin install failed\") || first === undefined || rest.length === 0) {\n    return reason;\n  }\n  const last = rest.filter((l) => /^(error|npm (ERR!|error))\\b/i.test(l)).pop() ?? rest.at(-1);\n  return `${first.replace(/:$/, \"\")}: ${last}`;\n}\n\n/** One `! plugin <name> failed to load: <reason>` line on stderr (stdout carries a run's answer). */\nfunction warnPluginFailed(spec: string, reason: string): void {\n  let name = spec;\n  try {\n    name = specName(spec);\n  } catch {\n    /* a spec that does not parse is named as written */\n  }\n  process.stderr.write(\n    `  ${pc.yellow(\"!\")} plugin ${name} failed to load: ${condensePluginFailure(reason)}\\n`,\n  );\n}\n\n/**\n * Reconcile + load the `plugins:` of the project's `skaile.yaml` into the process registry, so a\n * plugin's driver is known to `run`, `repl` and `config set driver`. A plugin that fails to\n * reconcile or load is skipped (its driver stays unknown, the command goes on) and named in one\n * `! plugin <name> failed to load: <reason>` line on stderr. An unreadable config is not this\n * function's to report: the command reads it again and says so.\n */\nexport async function loadDeclaredPlugins(projectDir: string): Promise<void> {\n  let plugins: string[] | undefined;\n  try {\n    const { resolveSkWorkspaceConfig } = await import(\"@skaile/workspaces/core\");\n    plugins = resolveSkWorkspaceConfig(projectDir).plugins;\n  } catch {\n    return;\n  }\n  if (!plugins || plugins.length === 0) return;\n  try {\n    const result = await ensurePluginsLoaded(projectDir, plugins, pluginRegistry);\n    for (const f of result.failed) warnPluginFailed(f.spec, f.reason);\n  } catch (err) {\n    // The store could not be reconciled: no plugin was loaded.\n    const reason = err instanceof Error ? err.message : String(err);\n    for (const spec of plugins) warnPluginFailed(spec, reason);\n  }\n}\n"]}

package/dist/chunk-KY4UXX7M.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../bridge/src/provider-catalog.ts","../bridge/src/provider-materialize/credential-env.ts","../bridge/src/driver-capabilities.ts","../bridge/src/registry.ts"],"names":[],"mappings":";;;;;AAsFA,IAAM,wBAAA,GAAmD,EAAE,mBAAA,EAAqB,YAAA,EAAa;AAE7F,IAAM,SAAA,GAAkC,EAAE,IAAA,EAAM,WAAA,EAAa,UAAU,cAAA,EAAe;AAEtF,IAAM,kBAAA,GAAqB,YAAA;AAYpB,IAAM,mBAAA,GAAwD;AAAA,EACnE,SAAA,EAAW;AAAA,IACT,EAAA,EAAI,WAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,WAAA;AAAA,IACP,OAAA,EAAS,oBAAA;AAAA,IACT,QAAA,EAAU,2BAAA;AAAA,IACV,YAAA,EAAc,oBAAA;AAAA,IACd,OAAA,EAAS,wBAAA;AAAA,IACT,UAAA,EAAY,EAAE,IAAA,EAAM,gBAAA,EAAkB,KAAK,mBAAA,EAAoB;AAAA,IAC/D,WAAA,EAAa,SAAA;AAAA,IACb,UAAA,EAAY,YAAA;AAAA,IACZ,SAAA,EAAW,EAAE,IAAA,EAAM,uBAAA;AAAwB,GAC7C;AAAA,EACA,MAAA,EAAQ;AAAA,IACN,EAAA,EAAI,QAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,QAAA;AAAA,IACP,OAAA,EAAS,kBAAA;AAAA,IACT,QAAA,EAAU,2BAAA;AAAA,IACV,YAAA,EAAc,iBAAA;AAAA,IACd,UAAA,EAAY,EAAE,IAAA,EAAM,QAAA,EAAU,KAAK,gBAAA,EAAiB;AAAA,IACpD,UAAA,EAAY,kBAAA;AAAA,IACZ,SAAA,EAAW,EAAE,IAAA,EAAM,oBAAA,EAAqB;AAAA,IACxC,KAAA,EACE;AAAA,GACJ;AAAA,EACA,MAAA,EAAQ;AAAA,IACN,EAAA,EAAI,QAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,mBAAA;AAAA,IACP,OAAA,EAAS,sBAAA;AAAA,IACT,QAAA,EAAU,kDAAA;AAAA,IACV,UAAA,EAAY,EAAE,IAAA,EAAM,gBAAA,EAAkB,KAAK,gBAAA,EAAiB;AAAA,IAC5D,WAAA,EAAa,EAAE,IAAA,EAAM,gBAAA,EAAkB,UAAU,cAAA,EAAe;AAAA,IAChE,UAAA,EAAY,gBAAA;AAAA,IACZ,SAAA,EAAW,EAAE,IAAA,EAAM,oBAAA;AAAqB,GAC1C;AAAA,EACA,IAAA,EAAM;AAAA,IACJ,EAAA,EAAI,MAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,MAAA;AAAA,IACP,OAAA,EAAS,oBAAA;AAAA,IACT,QAAA,EAAU,gCAAA;AAAA,IACV,UAAA,EAAY,EAAE,IAAA,EAAM,QAAA,EAAU,KAAK,cAAA,EAAe;AAAA,IAClD,UAAA,EAAY,kBAAA;AAAA,IACZ,SAAA,EAAW,EAAE,IAAA,EAAM,oBAAA;AAAqB,GAC1C;AAAA,EACA,QAAA,EAAU;AAAA,IACR,EAAA,EAAI,UAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,UAAA;AAAA,IACP,OAAA,EAAS,oBAAA;AAAA,IACT,QAAA,EAAU,0BAAA;AAAA,IACV,UAAA,EAAY,EAAE,IAAA,EAAM,QAAA,EAAU,KAAK,kBAAA,EAAmB;AAAA,IACtD,UAAA,EAAY,SAAA;AAAA,IACZ,SAAA,EAAW,EAAE,IAAA,EAAM,oBAAA,EAAqB;AAAA,IACxC,KAAA,EACE;AAAA,GACJ;AAAA,EACA,UAAA,EAAY;AAAA,IACV,EAAA,EAAI,YAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,YAAA;AAAA,IACP,OAAA,EAAS,oBAAA;AAAA,IACT,QAAA,EAAU,8BAAA;AAAA,IACV,UAAA,EAAY,EAAE,IAAA,EAAM,QAAA,EAAU,KAAK,oBAAA,EAAqB;AAAA,IACxD,UAAA,EAAY,kBAAA;AAAA,IACZ,SAAA,EAAW,EAAE,IAAA,EAAM,oBAAA;AAAqB,GAC1C;AAAA,EACA,OAAA,EAAS;AAAA,IACP,EAAA,EAAI,SAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,SAAA;AAAA,IACP,OAAA,EAAS,oBAAA;AAAA,IACT,QAAA,EAAU,2BAAA;AAAA,IACV,UAAA,EAAY,EAAE,IAAA,EAAM,QAAA,EAAU,KAAK,iBAAA,EAAkB;AAAA,IACrD,UAAA,EAAY,kBAAA;AAAA,IACZ,SAAA,EAAW,EAAE,IAAA,EAAM,oBAAA;AAAqB,GAC1C;AAAA,EACA,GAAA,EAAK;AAAA,IACH,EAAA,EAAI,KAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,YAAA;AAAA,IACP,OAAA,EAAS,oBAAA;AAAA,IACT,QAAA,EAAU,qBAAA;AAAA,IACV,UAAA,EAAY,EAAE,IAAA,EAAM,QAAA,EAAU,KAAK,aAAA,EAAc;AAAA,IACjD,UAAA,EAAY,kBAAA;AAAA,IACZ,SAAA,EAAW,EAAE,IAAA,EAAM,oBAAA;AAAqB,GAC1C;AAAA,EACA,QAAA,EAAU;AAAA,IACR,EAAA,EAAI,UAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,aAAA;AAAA,IACP,OAAA,EAAS,oBAAA;AAAA,IACT,QAAA,EAAU,4BAAA;AAAA,IACV,UAAA,EAAY,EAAE,IAAA,EAAM,QAAA,EAAU,KAAK,kBAAA,EAAmB;AAAA,IACtD,UAAA,EAAY,kBAAA;AAAA,IACZ,SAAA,EAAW,EAAE,IAAA,EAAM,oBAAA;AAAqB,GAC1C;AAAA,EACA,SAAA,EAAW;AAAA,IACT,EAAA,EAAI,WAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,cAAA;AAAA,IACP,OAAA,EAAS,oBAAA;AAAA,IACT,QAAA,EAAU,uCAAA;AAAA,IACV,UAAA,EAAY,EAAE,IAAA,EAAM,QAAA,EAAU,KAAK,mBAAA,EAAoB;AAAA,IACvD,UAAA,EAAY,kBAAA;AAAA,IACZ,SAAA,EAAW,EAAE,IAAA,EAAM,oBAAA;AAAqB,GAC1C;AAAA,EACA,OAAA,EAAS;AAAA,IACP,EAAA,EAAI,SAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,aAAA;AAAA,IACP,OAAA,EAAS,yBAAA;AAAA,IACT,SAAA,EAAW,SAAA;AAAA,IACX,UAAA,EAAY,EAAE,IAAA,EAAM,OAAA,EAAQ;AAAA,IAC5B,eAAA,EAAiB,CAAC,QAAQ,CAAA;AAAA,IAC1B,KAAA,EAAO;AAAA,GACT;AAAA,EACA,MAAA,EAAQ;AAAA,IACN,EAAA,EAAI,QAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,kBAAA;AAAA,IACP,OAAA,EAAS,eAAA;AAAA,IACT,SAAA,EAAW,QAAA;AAAA,IACX,UAAA,EAAY,EAAE,IAAA,EAAM,YAAA,EAAa;AAAA,IACjC,MAAA,EAAQ,EAAE,SAAA,EAAW,QAAA,EAAS;AAAA,IAC9B,eAAA,EAAiB,CAAC,SAAA,EAAW,UAAU,CAAA;AAAA,IACvC,UAAA,EAAY;AAAA,GACd;AAAA,EACA,cAAA,EAAgB;AAAA,IACd,EAAA,EAAI,cAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,cAAA;AAAA,IACP,OAAA,EAAS,wBAAA;AAAA,IACT,SAAA,EAAW,cAAA;AAAA,IACX,UAAA,EAAY,EAAE,IAAA,EAAM,gBAAA,EAAkB,KAAK,sBAAA,EAAuB;AAAA,IAClE,WAAA,EAAa,EAAE,IAAA,EAAM,SAAA,EAAW,UAAU,cAAA,EAAe;AAAA,IACzD,eAAA,EAAiB,CAAC,UAAA,EAAY,YAAA,EAAc,aAAa,CAAA;AAAA,IACzD,UAAA,EAAY,SAAA;AAAA,IACZ,KAAA,EACE;AAAA,GACJ;AAAA,EACA,OAAA,EAAS;AAAA,IACP,EAAA,EAAI,SAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,6BAAA;AAAA,IACP,OAAA,EAAS,oBAAA;AAAA,IACT,SAAA,EAAW,SAAA;AAAA,IACX,OAAA,EAAS,wBAAA;AAAA,IACT,UAAA,EAAY,EAAE,IAAA,EAAM,gBAAA,EAAkB,KAAK,2BAAA,EAA4B;AAAA,IACvE,WAAA,EAAa,SAAA;AAAA,IACb,eAAA,EAAiB,CAAC,UAAU,CAAA;AAAA,IAC5B,UAAA,EAAY;AAAA,GACd;AAAA,EACA,MAAA,EAAQ;AAAA,IACN,EAAA,EAAI,QAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,gBAAA;AAAA,IACP,OAAA,EAAS,oBAAA;AAAA,IACT,QAAA,EAAU,2BAAA;AAAA,IACV,UAAA,EAAY,EAAE,IAAA,EAAM,MAAA,EAAO;AAAA,IAC3B,UAAA,EAAY,kBAAA;AAAA,IACZ,SAAA,EAAW,EAAE,IAAA,EAAM,oBAAA;AAAqB,GAC1C;AAAA,EACA,QAAA,EAAU;AAAA,IACR,EAAA,EAAI,UAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,mBAAA;AAAA,IACP,OAAA,EAAS,oBAAA;AAAA,IACT,QAAA,EAAU,0BAAA;AAAA,IACV,UAAA,EAAY,EAAE,IAAA,EAAM,MAAA,EAAO;AAAA,IAC3B,UAAA,EAAY,kBAAA;AAAA,IACZ,SAAA,EAAW,EAAE,IAAA,EAAM,oBAAA;AAAqB,GAC1C;AAAA,EACA,IAAA,EAAM;AAAA,IACJ,EAAA,EAAI,MAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,oBAAA;AAAA,IACP,OAAA,EAAS,oBAAA;AAAA,IACT,QAAA,EAAU,0BAAA;AAAA,IACV,UAAA,EAAY,EAAE,IAAA,EAAM,MAAA,EAAO;AAAA,IAC3B,UAAA,EAAY,kBAAA;AAAA,IACZ,SAAA,EAAW,EAAE,IAAA,EAAM,oBAAA,EAAqB;AAAA,IACxC,KAAA,EAAO;AAAA,GACT;AAAA,EACA,OAAA,EAAS;AAAA,IACP,EAAA,EAAI,SAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,eAAA;AAAA,IACP,OAAA,EAAS,oBAAA;AAAA,IACT,QAAA,EAAU,uBAAA;AAAA,IACV,UAAA,EAAY,EAAE,IAAA,EAAM,QAAA,EAAU,KAAK,iBAAA,EAAkB;AAAA,IACrD,UAAA,EAAY,kBAAA;AAAA,IACZ,SAAA,EAAW,EAAE,IAAA,EAAM,oBAAA,EAAqB;AAAA,IACxC,KAAA,EAAO;AAAA,GACT;AAAA,EACA,QAAA,EAAU;AAAA,IACR,EAAA,EAAI,UAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,UAAA;AAAA,IACP,QAAA,EAAU,0BAAA;AAAA,IACV,UAAA,EAAY,EAAE,IAAA,EAAM,gBAAA,EAAkB,KAAK,kBAAA,EAAmB;AAAA,IAC9D,WAAA,EAAa,EAAE,IAAA,EAAM,eAAA,EAAiB,UAAU,oBAAA,EAAqB;AAAA,IACrE,MAAA,EAAQ,EAAE,KAAA,EAAO,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,IAC1C,UAAA,EAAY;AAAA,GACd;AAAA,EACA,UAAA,EAAY;AAAA,IACV,EAAA,EAAI,YAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,YAAA;AAAA,IACP,QAAA,EAAU,2BAAA;AAAA,IACV,UAAA,EAAY,EAAE,IAAA,EAAM,gBAAA,EAAkB,KAAK,oBAAA,EAAqB;AAAA,IAChE,WAAA,EAAa,EAAE,IAAA,EAAM,YAAA,EAAc,UAAU,cAAA,EAAe;AAAA,IAC5D,MAAA,EAAQ,EAAE,QAAA,EAAU,sBAAA,EAAwB,eAAe,eAAA,EAAgB;AAAA,IAC3E,UAAA,EAAY;AAAA;AAEhB;AAGO,SAAS,mBAAA,GAA0C;AACxD,EAAA,OAAO,MAAA,CAAO,OAAO,mBAAmB,CAAA;AAC1C;AAGO,SAAS,kBAAkB,EAAA,EAA0C;AAC1E,EAAA,OAAO,oBAAoB,EAAE,CAAA;AAC/B;AAQO,SAAS,cAAc,MAAA,EAA8C;AAC1E,EAAA,IAAI,MAAA,CAAO,QAAA,EAAU,OAAO,MAAA,CAAO,QAAA;AACnC,EAAA,IAAI,CAAC,MAAA,CAAO,SAAA,IAAa,MAAA,CAAO,SAAA,KAAc,UAAU,OAAO,MAAA;AAC/D,EAAA,OAAO,8BAAA,CAA+B,OAAO,SAAS,CAAA;AACxD;AAcO,SAAS,oBAAA,CACd,MAAA,EACA,OAAA,GAA0E,EAAC,EACvD;AACpB,EAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,OAAA,EAAS,IAAA,EAAK;AACvC,EAAA,IAAI,UAAU,OAAO,QAAA;AACrB,EAAA,MAAM,OAAA,GAAU,OAAO,YAAA,GAAe,OAAA,CAAQ,MAAM,MAAA,CAAO,YAAY,CAAA,EAAG,IAAA,EAAK,GAAI,MAAA;AACnF,EAAA,OAAO,WAAW,MAAA,CAAO,QAAA;AAC3B;AAqBO,SAAS,YAAA,CACd,MAAA,EACA,OAAA,GAA+B,EAAC,EACf;AACjB,EAAA,MAAM,GAAA,GACJ,OAAA,CAAQ,aAAA,KAAkB,MAAA,CAAO,UAAA,CAAW,MAAM,CAAA,IAAA,EAAO,MAAA,CAAO,UAAA,CAAW,GAAG,CAAA,CAAA,GAAK,MAAA,CAAA;AACrF,EAAA,MAAM,UAAA,GAAa,GAAA,GAAM,EAAE,IAAA,EAAM,MAAA,CAAO,UAAA,CAAW,IAAA,EAAM,GAAA,EAAI,GAAI,EAAE,IAAA,EAAM,MAAA,CAAO,WAAW,IAAA,EAAK;AAChG,EAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,OAAA,IAAW,MAAA,CAAO,QAAA;AAC3C,EAAA,MAAM,SAAS,EAAE,GAAG,OAAO,MAAA,EAAQ,GAAG,QAAQ,MAAA,EAAO;AAErD,EAAA,IAAI,MAAA,CAAO,IAAA,KAAS,KAAA,IAAS,MAAA,CAAO,SAAS,KAAA,EAAO;AAClD,IAAA,OAAO;AAAA,MACL,MAAM,MAAA,CAAO,IAAA;AAAA,MACb,KAAA,EAAO,OAAA,CAAQ,KAAA,IAAS,MAAA,CAAO,KAAA;AAAA,MAC/B,QAAQ,MAAA,CAAO,EAAA;AAAA,MACf,GAAI,QAAA,GAAW,EAAE,QAAA,KAAa,EAAC;AAAA,MAC/B,GAAI,MAAA,CAAO,OAAA,GAAU,EAAE,OAAA,EAAS,EAAE,GAAG,MAAA,CAAO,OAAA,EAAQ,EAAE,GAAI,EAAC;AAAA,MAC3D,UAAA;AAAA,MACA,GAAI,MAAA,CAAO,IAAA,CAAK,MAAM,CAAA,CAAE,SAAS,CAAA,GAAI,EAAE,MAAA,EAAwC,GAAI;AAAC,KACtF;AAAA,EACF;AAEA,EAAA,MAAM,SAAA,GAAY,OAAO,SAAA,IAAa,QAAA;AACtC,EAAA,MAAM,KAAA,GAA4B;AAAA,IAChC,IAAA,EAAM,MAAA,CAAO,IAAA,KAAS,OAAA,GAAU,OAAA,GAAU,KAAA;AAAA,IAC1C,KAAA,EAAO,OAAA,CAAQ,KAAA,IAAS,MAAA,CAAO,KAAA;AAAA,IAC/B,QAAQ,MAAA,CAAO,EAAA;AAAA,IACf,GAAK,OAAA,CAAQ,OAAA,IAAW,MAAA,CAAO,OAAA,GAAW,EAAE,OAAA,EAAS,OAAA,CAAQ,OAAA,IAAW,MAAA,CAAO,OAAA,EAAQ,GAAI,EAAC;AAAA,IAC5F,GAAI,QAAA,GAAW,EAAE,QAAA,KAAa,EAAC;AAAA,IAC/B,GAAI,MAAA,CAAO,OAAA,GAAU,EAAE,OAAA,EAAS,EAAE,GAAG,MAAA,CAAO,OAAA,EAAQ,EAAE,GAAI,EAAC;AAAA,IAC3D,UAAA;AAAA,IACA,GAAI,MAAA,CAAO,SAAA,GAAY,EAAE,SAAA,EAAW,EAAE,GAAG,MAAA,CAAO,SAAA,EAAU,EAAE,GAAI;AAAC,GACnE;AAEA,EAAA,IAAI,cAAc,QAAA,EAAU;AAC1B,IAAA,MAAA,CAAO,MAAA,CAAO,KAAA,EAAO,EAAE,SAAA,EAAW,QAAQ,CAAA;AAC1C,IAAA,IAAI,SAAA,KAAc,cAAA,IAAkB,MAAA,CAAO,WAAA,EAAa;AACtD,MAAA,KAAA,CAAM,YAAA,GAAe,EAAE,aAAA,EAAe,MAAA,CAAO,WAAA,EAAY;AAAA,IAC3D;AAAA,EACF;AACA,EAAA,OAAO,KAAA;AACT;AAcO,SAAS,aAAa,SAAA,EAA6D;AACxF,EAAA,MAAM,WAA+B,EAAC;AACtC,EAAA,KAAA,MAAW,CAAC,EAAA,EAAI,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,SAAS,CAAA,EAAG;AACnD,IAAA,IAAI,CAAC,MAAM,MAAA,EAAQ;AACnB,IAAA,MAAM,MAAA,GAAS,mBAAA,CAAoB,KAAA,CAAM,MAAM,CAAA;AAC/C,IAAA,IAAI,CAAC,MAAA,EAAQ;AACb,IAAA,QAAA,CAAS,EAAE,CAAA,GAAI,YAAA,CAAa,MAAM,CAAA;AAAA,EACpC;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,SAAA,EAAW,QAAA,EAAS;AACjD;AAQA,SAAS,eAAA,CAAgB,MAAc,IAAA,EAAsB;AAC3D,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AACvC,EAAA,MAAM,WAAW,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA,CAAE,OAAO,OAAO,CAAA;AAC/C,EAAA,MAAM,IAAA,GAAO,SAAS,CAAC,CAAA;AACvB,EAAA,IAAI,IAAA,IAAQ,OAAA,CAAQ,WAAA,EAAY,CAAE,QAAA,CAAS,IAAI,IAAA,CAAK,WAAA,EAAa,CAAA,CAAE,CAAA,EAAG;AACpE,IAAA,OAAO,CAAA,EAAG,OAAO,CAAA,CAAA,EAAI,QAAA,CAAS,MAAM,CAAC,CAAA,CAAE,IAAA,CAAK,GAAG,CAAC,CAAA,CAAA;AAAA,EAClD;AACA,EAAA,OAAO,CAAA,EAAG,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA;AAC1B;AAUO,SAAS,gBAAgB,KAAA,EAA4C;AAC1E,EAAA,MAAM,IAAA,GAAO,oBAAoB,KAAK,CAAA;AACtC,EAAA,IAAI,CAAC,MAAM,OAAO,MAAA;AAClB,EAAA,MAAM,SAAS,KAAA,CAAM,MAAA,GAAS,mBAAA,CAAoB,KAAA,CAAM,MAAM,CAAA,GAAI,MAAA;AAClE,EAAA,MAAM,IAAA,GAAQ,KAAA,CAA6B,SAAA,EAAW,IAAA,IAAQ,MAAA,EAAQ,UAAA;AACtE,EAAA,IAAI,CAAC,MAAM,OAAO,MAAA;AAClB,EAAA,MAAM,GAAA,GAAM,eAAA,CAAgB,IAAA,EAAM,IAAI,CAAA;AACtC,EAAA,MAAM,QAAS,KAAA,CAA6B,YAAA;AAC5C,EAAA,IAAI,CAAC,SAAS,MAAA,CAAO,IAAA,CAAK,KAAK,CAAA,CAAE,MAAA,KAAW,GAAG,OAAO,GAAA;AACtD,EAAA,MAAM,MAAA,GAAS,IAAI,eAAA,CAAgB,KAAK,EAAE,QAAA,EAAS;AACnD,EAAA,OAAO,CAAA,EAAG,GAAG,CAAA,EAAG,GAAA,CAAI,QAAA,CAAS,GAAG,CAAA,GAAI,GAAA,GAAM,GAAG,CAAA,EAAG,MAAM,CAAA,CAAA;AACxD;AAWO,SAAS,sBAAA,CACd,OACA,MAAA,EACwB;AACxB,EAAA,MAAM,IAAA,GAAO,KAAA,CAAM,UAAA,EAAY,IAAA,IAAQ,MAAA;AACvC,EAAA,IAAI,CAAC,UAAU,IAAA,KAAS,MAAA,IAAU,SAAS,OAAA,IAAW,IAAA,KAAS,YAAA,EAAc,OAAO,EAAC;AAErF,EAAA,MAAM,SAAS,KAAA,CAAM,MAAA,GAAS,mBAAA,CAAoB,KAAA,CAAM,MAAM,CAAA,GAAI,MAAA;AAClE,EAAA,IAAI,QAAQ,WAAA,EAAa;AACvB,IAAA,OAAO;AAAA,MACL,CAAC,MAAA,CAAO,WAAA,CAAY,IAAI,GAAG,OAAO,WAAA,CAAY,QAAA,CAAS,OAAA,CAAQ,cAAA,EAAgB,MAAM;AAAA,KACvF;AAAA,EACF;AACA,EAAA,IAAI,SAAS,gBAAA,EAAkB;AAC7B,IAAA,MAAM,UAAW,KAAA,CAA6B,OAAA;AAC9C,IAAA,IAAI,OAAA,KAAY,sBAAA,EAAwB,OAAO,EAAE,kBAAkB,MAAA,EAAO;AAC1E,IAAA,IAAI,OAAA,KAAY,wBAAA,EAA0B,OAAO,EAAE,WAAW,MAAA,EAAO;AACrE,IAAA,OAAO,EAAE,aAAa,MAAA,EAAO;AAAA,EAC/B;AACA,EAAA,OAAO,EAAE,aAAA,EAAe,CAAA,OAAA,EAAU,MAAM,CAAA,CAAA,EAAG;AAC7C;AA8BA,eAAsB,kBAAA,CACpB,KAAA,EACA,OAAA,GAAgC,EAAC,EACD;AAChC,EAAA,MAAM,GAAA,GAAM,gBAAgB,KAAK,CAAA;AACjC,EAAA,IAAI,CAAC,GAAA,EAAK;AACR,IAAA,MAAM,IAAA,GAAO,oBAAoB,KAAK,CAAA;AACtC,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,KAAA;AAAA,MACJ,MAAA,EAAQ,KAAA;AAAA,MACR,MAAA,EAAQ,IAAA,GACJ,CAAA,uDAAA,EAA0D,IAAI,CAAA,CAAA,CAAA,GAC9D;AAAA,KACN;AAAA,EACF;AAEA,EAAA,MAAM,OAAA,GAAkC;AAAA,IACtC,GAAG,KAAA,CAAM,OAAA;AAAA,IACT,GAAG,sBAAA,CAAuB,KAAA,EAAO,OAAA,CAAQ,MAAM;AAAA,GACjD;AAEA,EAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,EAAA,MAAM,OAAA,GAAU,WAAW,MAAM,UAAA,CAAW,OAAM,EAAG,OAAA,CAAQ,aAAa,GAAI,CAAA;AAC9E,EAAA,IAAI;AACF,IAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,EAAK,EAAE,MAAA,EAAQ,KAAA,EAAO,OAAA,EAAS,MAAA,EAAQ,UAAA,CAAW,MAAA,EAAQ,CAAA;AACvF,IAAA,IAAI,SAAS,EAAA,EAAI;AACf,MAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,KAAK,MAAA,EAAQ,QAAA,CAAS,MAAA,EAAQ,MAAA,EAAQ,oBAAA,EAAqB;AAAA,IAC9F;AACA,IAAA,MAAM,MAAA,GACJ,QAAA,CAAS,MAAA,KAAW,GAAA,IAAO,QAAA,CAAS,WAAW,GAAA,GAC3C,6CAAA,GACA,CAAA,uBAAA,EAA0B,QAAA,CAAS,MAAM,CAAA,CAAA;AAC/C,IAAA,OAAO,EAAE,IAAI,KAAA,EAAO,MAAA,EAAQ,MAAM,GAAA,EAAK,MAAA,EAAQ,QAAA,CAAS,MAAA,EAAQ,MAAA,EAAO;AAAA,EACzE,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,UAAU,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAC/D,IAAA,MAAM,MAAA,GACJ,GAAA,YAAe,KAAA,IAAS,GAAA,CAAI,IAAA,KAAS,eACjC,CAAA,wBAAA,EAA2B,OAAA,CAAQ,SAAA,IAAa,GAAI,CAAA,EAAA,CAAA,GACpD,OAAA;AACN,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,IAAA,EAAM,KAAK,MAAA,EAAO;AAAA,EAChD,CAAA,SAAE;AACA,IAAA,YAAA,CAAa,OAAO,CAAA;AAAA,EACtB;AACF;;;AC9hBO,IAAM,8BAAA,GAAiC;AAGvC,IAAM,8BAAA,GAAiC;AAUvC,SAAS,0BAA0B,UAAA,EAA4B;AACpE,EAAA,MAAM,OAAO,UAAA,CAAW,OAAA,CAAQ,eAAA,EAAiB,GAAG,EAAE,WAAA,EAAY;AAClE,EAAA,OAAO,CAAA,EAAG,8BAA8B,CAAA,EAAG,IAAI,GAAG,8BAA8B,CAAA,CAAA;AAClF;AAWO,SAAS,8BAA8B,KAAA,EAA4C;AACxF,EAAA,MAAM,SAAS,KAAA,CAAM,MAAA,GAAS,mBAAA,CAAoB,KAAA,CAAM,MAAM,CAAA,GAAI,MAAA;AAClE,EAAA,IAAI,MAAA,EAAQ,UAAA,CAAW,GAAA,EAAK,OAAO,OAAO,UAAA,CAAW,GAAA;AACrD,EAAA,MAAM,GAAA,GAAM,MAAM,UAAA,EAAY,GAAA,GAAM,mBAAmB,KAAA,CAAM,UAAA,CAAW,GAAG,CAAA,GAAI,MAAA;AAC/E,EAAA,OAAO,GAAA,EAAK,IAAA,KAAS,KAAA,GAAQ,GAAA,CAAI,IAAA,GAAO,MAAA;AAC1C;AAOO,SAAS,sBAAA,CACd,KAAA,EACA,OAAA,GAAqC,EAAC,EAClB;AACpB,EAAA,OAAO,kBAAkB,KAAA,EAAO;AAAA,IAC9B,GAAI,QAAQ,GAAA,GAAM,EAAE,KAAK,OAAA,CAAQ,GAAA,KAAQ,EAAC;AAAA,IAC1C,GAAI,QAAQ,OAAA,GAAU,EAAE,SAAS,OAAA,CAAQ,OAAA,KAAY,EAAC;AAAA,IACtD,GAAI,QAAQ,YAAA,KAAiB,MAAA,GAAY,EAAC,GAAI,EAAE,YAAA,EAAc,OAAA,CAAQ,YAAA;AAAa,GACpF,CAAA,CAAE,KAAA;AACL;AAYO,SAAS,oBAAA,CACd,UAAA,EACA,KAAA,EACA,OAAA,GAAqC,EAAC,EAClB;AACpB,EAAA,OACE,sBAAA,CAAuB,OAAO,OAAO,CAAA,IAAK,QAAQ,GAAA,GAAM,yBAAA,CAA0B,UAAU,CAAC,CAAA;AAEjG;AAiBO,SAAS,6BAAA,CACd,QAAA,EACA,OAAA,GAAqC,EAAC,EACN;AAChC,EAAA,MAAM,MAAsC,EAAC;AAC7C,EAAA,KAAA,MAAW,CAAC,EAAA,EAAI,KAAK,CAAA,IAAK,eAAA,CAAgB,QAAQ,CAAA,EAAG;AACnD,IAAA,IAAI,KAAA,CAAM,IAAA,KAAS,KAAA,IAAS,KAAA,CAAM,SAAS,OAAA,EAAS;AACpD,IAAA,IAAI,CAAC,cAAA,CAAe,KAAK,CAAA,EAAG;AAC5B,IAAA,IAAI,OAAA,CAAQ,UAAA,IAAc,EAAA,KAAO,OAAA,CAAQ,UAAA,EAAY;AACrD,IAAA,MAAM,QAAA,GAAW,kBAAkB,KAAA,EAAO;AAAA,MACxC,GAAI,QAAQ,GAAA,GAAM,EAAE,KAAK,OAAA,CAAQ,GAAA,KAAQ,EAAC;AAAA,MAC1C,GAAI,QAAQ,OAAA,GAAU,EAAE,SAAS,OAAA,CAAQ,OAAA,KAAY,EAAC;AAAA,MACtD,GAAI,QAAQ,YAAA,KAAiB,MAAA,GAAY,EAAC,GAAI,EAAE,YAAA,EAAc,OAAA,CAAQ,YAAA;AAAa,KACpF,CAAA;AACD,IAAA,IAAI,CAAC,SAAS,KAAA,EAAO;AACrB,IAAA,IAAI,OAAA,CAAQ,GAAA,GAAM,yBAAA,CAA0B,EAAE,CAAC,CAAA,EAAG;AAClD,IAAA,GAAA,CAAI,KAAK,EAAE,UAAA,EAAY,IAAI,MAAA,EAAQ,QAAA,CAAS,OAAO,CAAA;AAAA,EACrD;AACA,EAAA,OAAO,GAAA;AACT;AAkBO,SAAS,kBAAA,CACd,UAAA,EACA,KAAA,EACA,OAAA,GAAwC,EAAC,EACjB;AACxB,EAAA,MAAM,KAAA,GAAQ,sBAAA,CAAuB,KAAA,EAAO,OAAO,CAAA;AACnD,EAAA,IAAI,CAAC,KAAA,EAAO,OAAO,EAAC;AACpB,EAAA,MAAM,MAA8B,EAAE,CAAC,0BAA0B,UAAU,CAAC,GAAG,KAAA,EAAM;AACrF,EAAA,IAAI,OAAA,CAAQ,YAAY,KAAA,EAAO;AAC7B,IAAA,MAAM,KAAA,GAAQ,8BAA8B,KAAK,CAAA;AACjD,IAAA,IAAI,KAAA,EAAO,GAAA,CAAI,KAAK,CAAA,GAAI,KAAA;AAAA,EAC1B;AACA,EAAA,OAAO,GAAA;AACT;AAWO,SAAS,qBAAA,CACd,QAAA,EACA,OAAA,GAAwC,EAAC,EACjB;AACxB,EAAA,MAAM,YAAoC,EAAC;AAC3C,EAAA,MAAM,UAAkC,EAAC;AACzC,EAAA,KAAA,MAAW,CAAC,EAAA,EAAI,KAAK,CAAA,IAAK,eAAA,CAAgB,QAAQ,CAAA,EAAG;AACnD,IAAA,IAAI,OAAA,CAAQ,UAAA,IAAc,EAAA,KAAO,OAAA,CAAQ,UAAA,EAAY;AACrD,IAAA,IAAI,CAAC,cAAA,CAAe,KAAK,CAAA,EAAG;AAC5B,IAAA,MAAM,KAAA,GAAQ,sBAAA,CAAuB,KAAA,EAAO,OAAO,CAAA;AACnD,IAAA,IAAI,CAAC,KAAA,EAAO;AACZ,IAAA,SAAA,CAAU,yBAAA,CAA0B,EAAE,CAAC,CAAA,GAAI,KAAA;AAC3C,IAAA,IAAI,OAAA,CAAQ,YAAY,KAAA,EAAO;AAC/B,IAAA,MAAM,KAAA,GAAQ,8BAA8B,KAAK,CAAA;AACjD,IAAA,IAAI,SAAS,OAAA,CAAQ,KAAK,MAAM,MAAA,EAAW,OAAA,CAAQ,KAAK,CAAA,GAAI,KAAA;AAAA,EAC9D;AACA,EAAA,OAAO,EAAE,GAAG,OAAA,EAAS,GAAG,SAAA,EAAU;AACpC;;;AC9LA,IAAM,2BAAA,GAAkD;AAAA,EACtD,mBAAA,EAAqB,KAAA;AAAA,EACrB,eAAA,EAAiB,IAAA;AAAA,EACjB,cAAA,EAAgB,KAAA;AAAA,EAChB,qBAAA,EAAuB,KAAA;AAAA,EACvB,qBAAA,EAAuB;AACzB,CAAA;AAQO,IAAM,2BAAA,GAA8B;AAAA;AAAA,EAEzC,GAAA,EAAK;AAAA,IACH,mBAAA,EAAqB,KAAA;AAAA,IACrB,eAAA,EAAiB,IAAA;AAAA,IACjB,cAAA,EAAgB,KAAA;AAAA,IAChB,qBAAA,EAAuB,KAAA;AAAA,IACvB,qBAAA,EAAuB;AAAA,GACzB;AAAA;AAAA;AAAA,EAGA,YAAA,EAAc;AAAA,IACZ,mBAAA,EAAqB,IAAA;AAAA,IACrB,eAAA,EAAiB,KAAA;AAAA,IACjB,cAAA,EAAgB,KAAA;AAAA,IAChB,qBAAA,EAAuB,IAAA;AAAA,IACvB,qBAAA,EAAuB;AAAA,GACzB;AAAA;AAAA;AAAA,EAGA,KAAA,EAAO;AAAA,IACL,mBAAA,EAAqB,KAAA;AAAA,IACrB,eAAA,EAAiB,IAAA;AAAA,IACjB,cAAA,EAAgB,IAAA;AAAA,IAChB,qBAAA,EAAuB,KAAA;AAAA,IACvB,qBAAA,EAAuB;AAAA;AAE3B,CAAA;AAcO,SAAS,mBAAmB,EAAA,EAA4C;AAC7E,EAAA,MAAM,QAAA,GAAW,EAAA,GACb,MAAA,CAAO,MAAA,CAAO,6BAA6B,EAAE,CAAA,GAC3C,2BAAA,CAA4B,EAA8C,IAC1E,cAAA,CAAe,GAAA,CAAI,QAAA,EAAU,EAAE,GAAG,YAAA,GACpC,MAAA;AACJ,EAAA,OAAO,EAAE,GAAG,2BAAA,EAA6B,GAAG,QAAA,EAAS;AACvD;AAWO,SAAS,uBAAA,CAAwB,EAAA,EAAwB,OAAA,GAAU,KAAA,EAAgB;AACxF,EAAA,MAAM,IAAA,GAAO,mBAAmB,EAAE,CAAA;AAClC,EAAA,OAAO,IAAA,CAAK,eAAA,IAAmB,EAAE,OAAA,IAAW,IAAA,CAAK,cAAA,CAAA;AACnD;;;AC9EA,IAAM,kBAAA,GACJ,OAAO,sBAAA,KAA2B,WAAA,GAAc,IAAA,GAAO,sBAAA;AACzD,IAAM,aAAA,GAAgB,OAAO,iBAAA,KAAsB,WAAA,GAAc,IAAA,GAAO,iBAAA;AAMxE,IAAM,YAAA,GAAe;AAAA,EACnB,oBAAA;AAAA,EACA,oBAAA;AAAA,EACA,kBAAA;AAAA,EACA,wBAAA;AAAA,EACA,wBAAA;AAAA,EACA,yBAAA;AAAA,EACA,sBAAA;AAAA,EACA;AACF,CAAA;AAmBO,IAAM,sBAAA,GAAqD;AAAA,EAChE,GAAA,EAAK;AAAA,IACH,EAAA,EAAI,KAAA;AAAA,IACJ,IAAA,EAAM,gBAAA;AAAA,IACN,aAAA,EAAe,IAAA;AAAA,IACf,mBAAA,EAAqB,IAAA;AAAA,IACrB,QAAA,EAAU,YAAA;AAAA;AAAA;AAAA,IAGV,iBAAA,EAAmB,UAAA;AAAA,IACnB,cAAc,2BAAA,CAA4B;AAAA,GAC5C;AAAA,EACA,YAAA,EAAc;AAAA,IACZ,EAAA,EAAI,YAAA;AAAA,IACJ,IAAA,EAAM,kBAAA;AAAA,IACN,aAAA,EAAe,KAAA;AAAA,IACf,mBAAA,EAAqB,IAAA;AAAA;AAAA;AAAA,IAGrB,QAAA,EAAU,CAAC,oBAAA,EAAsB,yBAAA,EAA2B,eAAe,CAAA;AAAA,IAC3E,iBAAA,EAAmB,QAAA;AAAA,IACnB,YAAA,EAAc,4BAA4B,YAAY;AAAA,GACxD;AAAA,EACA,KAAA,EAAO;AAAA,IACL,EAAA,EAAI,OAAA;AAAA,IACJ,IAAA,EAAM,cAAA;AAAA,IACN,aAAA,EAAe,KAAA;AAAA,IACf,mBAAA,EAAqB,IAAA;AAAA;AAAA;AAAA,IAGrB,QAAA,EAAU,CAAC,wBAAA,EAA0B,kBAAA,EAAoB,oBAAoB,CAAA;AAAA,IAC7E,iBAAA,EAAmB,QAAA;AAAA,IACnB,cAAc,2BAAA,CAA4B;AAAA,GAC5C;AAAA,EACA,IAAA,EAAM;AAAA,IACJ,EAAA,EAAI,MAAA;AAAA,IACJ,IAAA,EAAM,iBAAA;AAAA,IACN,aAAA,EAAe,IAAA;AAAA,IACf,mBAAA,EAAqB,KAAA;AAAA;AAAA;AAAA,IAGrB,UAAU,EAAC;AAAA,IACX,iBAAA,EAAmB;AAAA,GACrB;AAAA,EACA,MAAA,EAAQ;AAAA,IACN,EAAA,EAAI,QAAA;AAAA,IACJ,IAAA,EAAM,YAAA;AAAA,IACN,aAAA,EAAe,KAAA;AAAA,IACf,mBAAA,EAAqB,KAAA;AAAA,IACrB,QAAA,EAAU,CAAC,sBAAsB,CAAA;AAAA,IACjC,iBAAA,EAAmB;AAAA,GACrB;AAAA,EACA,IAAA,EAAM;AAAA,IACJ,EAAA,EAAI,MAAA;AAAA,IACJ,IAAA,EAAM,WAAA;AAAA,IACN,aAAA,EAAe,IAAA;AAAA,IACf,mBAAA,EAAqB,KAAA;AAAA;AAAA,IAErB,QAAA,EAAU,CAAC,oBAAoB,CAAA;AAAA,IAC/B,iBAAA,EAAmB;AAAA,GACrB;AAAA,EACA,QAAA,EAAU;AAAA,IACR,EAAA,EAAI,UAAA;AAAA,IACJ,IAAA,EAAM,UAAA;AAAA,IACN,aAAA,EAAe,IAAA;AAAA,IACf,mBAAA,EAAqB,KAAA;AAAA,IACrB,QAAA,EAAU;AAAA,MACR,oBAAA;AAAA,MACA,oBAAA;AAAA,MACA,kBAAA;AAAA,MACA;AAAA,KACF;AAAA,IACA,iBAAA,EAAmB;AAAA,GACrB;AAAA,EACA,KAAA,EAAO;AAAA,IACL,EAAA,EAAI,OAAA;AAAA,IACJ,IAAA,EAAM,OAAA;AAAA,IACN,aAAA,EAAe,IAAA;AAAA,IACf,mBAAA,EAAqB,KAAA;AAAA,IACrB,QAAA,EAAU;AAAA,MACR,oBAAA;AAAA,MACA,oBAAA;AAAA,MACA,sBAAA;AAAA,MACA;AAAA,KACF;AAAA,IACA,iBAAA,EAAmB;AAAA,GACrB;AAAA,EACA,QAAA,EAAU;AAAA,IACR,EAAA,EAAI,UAAA;AAAA,IACJ,IAAA,EAAM,cAAA;AAAA,IACN,aAAA,EAAe,IAAA;AAAA,IACf,mBAAA,EAAqB,KAAA;AAAA,IACrB,QAAA,EAAU,CAAC,oBAAA,EAAsB,oBAAA,EAAsB,sBAAsB,CAAA;AAAA,IAC7E,iBAAA,EAAmB;AAAA;AAEvB;AAQO,IAAM,cAAA,GAAiB;AAE9B,IAAI,kBAAA,GAAqB,KAAA;AAsBzB,eAAsB,sBAAA,CACpB,WAA2B,cAAA,EACZ;AACf,EAAA,IAAI,QAAA,KAAa,kBAAkB,kBAAA,EAAoB;AAEvD,EAAA,IAAI,CAAC,QAAA,CAAS,GAAA,CAAI,QAAA,EAAU,KAAK,CAAA,EAAG;AAClC,IAAA,MAAM,CAAA,GAAI,MAAM,OAAO,yBAAgC,CAAA;AACvD,IAAA,QAAA,CAAS,QAAA,CAAS,QAAA,EAAU,CAAA,CAAE,eAAe,CAAA;AAAA,EAC/C;AACA,EAAA,IAAI,CAAC,QAAA,CAAS,GAAA,CAAI,QAAA,EAAU,MAAM,CAAA,EAAG;AACnC,IAAA,MAAM,CAAA,GAAI,MAAM,OAAO,0BAAiC,CAAA;AACxD,IAAA,QAAA,CAAS,QAAA,CAAS,QAAA,EAAU,CAAA,CAAE,gBAAgB,CAAA;AAAA,EAChD;AACA,EAAA,IAAI,sBAAsB,CAAC,QAAA,CAAS,GAAA,CAAI,QAAA,EAAU,YAAY,CAAA,EAAG;AAC/D,IAAA,MAAM,CAAA,GAAI,MAAM,OAAO,gCAAuC,CAAA;AAC9D,IAAA,QAAA,CAAS,QAAA,CAAS,QAAA,EAAU,CAAA,CAAE,qBAAqB,CAAA;AAAA,EACrD;AACA,EAAA,IAAI,iBAAiB,CAAC,QAAA,CAAS,GAAA,CAAI,QAAA,EAAU,OAAO,CAAA,EAAG;AACrD,IAAA,MAAM,CAAA,GAAI,MAAM,OAAO,2BAAkC,CAAA;AACzD,IAAA,QAAA,CAAS,QAAA,CAAS,QAAA,EAAU,CAAA,CAAE,iBAAiB,CAAA;AAAA,EACjD;AAIA,EAAA,IAAI,CAAC,QAAA,CAAS,GAAA,CAAI,QAAA,EAAU,QAAQ,CAAA,EAAG;AACrC,IAAA,MAAM,CAAA,GAAI,MAAM,OAAO,4BAAmC,CAAA;AAC1D,IAAA,QAAA,CAAS,QAAA,CAAS,QAAA,EAAU,CAAA,CAAE,kBAAkB,CAAA;AAAA,EAClD;AACA,EAAA,IAAI,CAAC,QAAA,CAAS,GAAA,CAAI,QAAA,EAAU,MAAM,CAAA,EAAG;AACnC,IAAA,MAAM,CAAA,GAAI,MAAM,OAAO,0BAAiC,CAAA;AACxD,IAAA,QAAA,CAAS,QAAA,CAAS,QAAA,EAAU,CAAA,CAAE,gBAAgB,CAAA;AAAA,EAChD;AACA,EAAA,IAAI,CAAC,QAAA,CAAS,GAAA,CAAI,QAAA,EAAU,UAAU,CAAA,EAAG;AACvC,IAAA,MAAM,CAAA,GAAI,MAAM,OAAO,8BAAqC,CAAA;AAC5D,IAAA,QAAA,CAAS,QAAA,CAAS,QAAA,EAAU,CAAA,CAAE,oBAAoB,CAAA;AAAA,EACpD;AACA,EAAA,IAAI,CAAC,QAAA,CAAS,GAAA,CAAI,QAAA,EAAU,OAAO,CAAA,EAAG;AACpC,IAAA,MAAM,CAAA,GAAI,MAAM,OAAO,2BAAkC,CAAA;AACzD,IAAA,QAAA,CAAS,QAAA,CAAS,QAAA,EAAU,CAAA,CAAE,iBAAiB,CAAA;AAAA,EACjD;AACA,EAAA,IAAI,CAAC,QAAA,CAAS,GAAA,CAAI,QAAA,EAAU,UAAU,CAAA,EAAG;AACvC,IAAA,MAAM,CAAA,GAAI,MAAM,OAAO,8BAAqC,CAAA;AAC5D,IAAA,QAAA,CAAS,QAAA,CAAS,QAAA,EAAU,CAAA,CAAE,oBAAoB,CAAA;AAAA,EACpD;AAEA,EAAA,IAAI,QAAA,KAAa,gBAAgB,kBAAA,GAAqB,IAAA;AACxD;AAkBA,eAAsB,YAAA,CACpB,EAAA,EACA,MAAA,EACA,GAAA,EACsB;AACtB,EAAA,MAAM,MAAA,GAAS,MAAM,mBAAA,CAAoB,EAAE,CAAA;AAC3C,EAAA,OAAO,MAAA,CAAO,MAAA,CAAO,MAAA,EAAQ,GAAA,IAAO,EAAE,CAAA;AACxC;AAWA,eAAe,oBAAoB,EAAA,EAAY;AAC7C,EAAA,MAAM,sBAAA,EAAuB;AAC7B,EAAA,MAAM,MAAA,GAAS,cAAA,CAAe,GAAA,CAAI,QAAA,EAAU,EAAE,CAAA;AAC9C,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,IAAI,MAAM,sBAAA,EAAwB;AAChC,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,cAAA,EAAiB,EAAE,CAAA,+BAAA,CAAiC,CAAA;AAAA,IACtE;AACA,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,uBAAA,EAA0B,EAAE,CAAA,cAAA,EAAiB,WAAA,EAAY,CACtD,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,EAAE,CAAA,CACf,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,KACf;AAAA,EACF;AACA,EAAA,OAAO,MAAA;AACT;AAaO,SAAS,WAAA,GAA4B;AAC1C,EAAA,MAAM,MAAA,uBAAa,GAAA,EAAwB;AAC3C,EAAA,KAAA,MAAW,IAAA,IAAQ,MAAA,CAAO,MAAA,CAAO,sBAAsB,CAAA,EAAG;AACxD,IAAA,MAAA,CAAO,GAAA,CAAI,IAAA,CAAK,EAAA,EAAI,IAAI,CAAA;AAAA,EAC1B;AACA,EAAA,KAAA,MAAW,IAAA,IAAQ,cAAA,CAAe,IAAA,CAAK,QAAQ,CAAA,EAAG;AAChD,IAAA,IAAI,CAAC,MAAA,CAAO,GAAA,CAAI,IAAA,CAAK,EAAE,CAAA,EAAG;AAIxB,MAAA,MAAM,MAAA,GAAS,cAAA,CAAe,GAAA,CAAI,QAAA,EAAU,KAAK,EAAE,CAAA;AACnD,MAAA,MAAA,CAAO,GAAA,CAAI,KAAK,EAAA,EAAI;AAAA,QAClB,IAAI,IAAA,CAAK,EAAA;AAAA,QACT,MAAM,IAAA,CAAK,WAAA;AAAA,QACX,aAAA,EAAe,QAAQ,aAAA,IAAiB,KAAA;AAAA,QACxC,mBAAA,EAAqB,QAAQ,mBAAA,IAAuB,KAAA;AAAA;AAAA;AAAA;AAAA,QAIpD,GAAI,QAAQ,QAAA,GAAW,EAAE,UAAU,MAAA,CAAO,QAAA,KAAa,EAAC;AAAA,QACxD,GAAI,QAAQ,iBAAA,GAAoB,EAAE,mBAAmB,MAAA,CAAO,iBAAA,KAAsB,EAAC;AAAA,QACnF,GAAI,QAAQ,YAAA,GAAe,EAAE,cAAc,MAAA,CAAO,YAAA,KAAiB;AAAC,OACrE,CAAA;AAAA,IACH;AAAA,EACF;AACA,EAAA,OAAO,CAAC,GAAG,MAAA,CAAO,MAAA,EAAQ,CAAA;AAC5B;AAqBA,eAAsB,mBAAA,CACpB,QAAA,EACA,QAAA,EACA,OAAA,EACuB;AACvB,EAAA,MAAM,MAAA,GAAS,MAAM,mBAAA,CAAoB,QAAQ,CAAA;AACjD,EAAA,OAAQ,MAAM,MAAA,CAAO,UAAA,GAAa,QAAA,EAAU,OAAO,KAAM,EAAC;AAC5D","file":"chunk-KY4UXX7M.js","sourcesContent":["/**\n * The AI provider catalog — the preset layer of the provider registry (§1.5,\n * layer 5).\n *\n * A preset is the three-or-four literals an endpoint needs beyond a credential:\n * its wire `surface`, its `base_url` (or the transport that derives one), the\n * header the credential rides in, and the path a read-only probe can GET. With\n * them, `skaile providers add --preset groq` needs nothing but an env var name.\n *\n * This replaced `provider-endpoints.ts` `PROVIDER_ENDPOINTS`: every endpoint\n * that table knew is present here, with the surface/transport/credential facts\n * it could not express.\n *\n * The record types come from `@skaile/workspaces/core/provider-registry` — the\n * schema has exactly one home.\n *\n * @see PROVIDER-CONFIG-PLAN.md §1.2, §1.3, §2.5\n */\n\nimport {\n  AI_PROVIDER_BASE_URL_TEMPLATES,\n  type AIProviderCredentialKind,\n  type AIProviderDiscovery,\n  type AIProviderEntry,\n  type AIProviderKind,\n  type AIProviderLlmEntry,\n  type AIProviderRegistry,\n  type AIProviderRegistryLayer,\n  type AIProviderRegistryPatch,\n  type AIProviderSurface,\n  type AIProviderTransport,\n  type AIProviderVoiceParams,\n  resolveEntryBaseUrl,\n} from \"@skaile/workspaces/core/provider-registry\";\n\n/**\n * Where the credential goes on the wire. `{credential}` is replaced with the\n * resolved secret. Needed because `credential.kind` alone is ambiguous:\n * `api_key_header` is `x-api-key` for Anthropic, `x-goog-api-key` for Gemini,\n * `api-key` for Azure OpenAI and `Authorization: Token …` for Deepgram.\n */\nexport interface AIProviderAuthHeader {\n  name: string;\n  template: string;\n}\n\n/** A catalog preset — the fields an entry inherits by naming it. */\nexport interface AIProviderPreset {\n  /** Preset id; also the default entry id `skaile providers add` writes. */\n  id: string;\n  kind: AIProviderKind;\n  label: string;\n  /** `llm`/`embed` only. */\n  surface?: AIProviderSurface;\n  /** `llm`/`embed` only; omitted means `direct`. */\n  transport?: AIProviderTransport;\n  /** Literal endpoint. Absent when the transport derives one from `params`. */\n  base_url?: string;\n  /**\n   * Env var the vendor's own SDK reads as a base-URL override, when one\n   * exists. Consulted by the callers that still address an endpoint by preset\n   * id — model discovery, key validation, and `skaile migrate providers` — so\n   * a shell already pointed at a gateway keeps pointing there.\n   */\n  base_url_env?: string;\n  /** Static non-secret headers, e.g. Anthropic's `anthropic-version`. */\n  headers?: Record<string, string>;\n  /** Credential shape plus the conventional env var holding the secret. */\n  credential: { kind: AIProviderCredentialKind; env?: string };\n  /** Header the credential rides in; defaults per surface when omitted. */\n  auth_header?: AIProviderAuthHeader;\n  /** Default routing/voice parameters. */\n  params?: Record<string, string>;\n  /** `params` keys the operator must supply — the preset cannot know them. */\n  required_params?: string[];\n  /**\n   * Read-only path a health probe GETs, relative to `base_url`: the models\n   * list for LLM surfaces, an equivalent authenticated read for voice.\n   * Absent when the endpoint has none (Bedrock's runtime host).\n   */\n  probe_path?: string;\n  discovery?: AIProviderDiscovery;\n  /** Anything the operator has to know that the fields do not say. */\n  notes?: string;\n}\n\nconst ANTHROPIC_VERSION_HEADER: Record<string, string> = { \"anthropic-version\": \"2023-06-01\" };\n\nconst X_API_KEY: AIProviderAuthHeader = { name: \"x-api-key\", template: \"{credential}\" };\n\nconst OPENAI_MODELS_PATH = \"/v1/models\";\n\n/**\n * Every preset the runtime ships.\n *\n * Insertion order is display order in `skaile providers list`: first-party\n * clouds, then OpenAI-compatible vendors, then the transports that need\n * routing parameters, then local runtimes and gateways, then voice.\n *\n * Sources: `platform/_devlog/reports/2026-09-20-inference-provider-market-survey.md`\n * (36 endpoints, base URLs and auth headers verified there).\n */\nexport const AI_PROVIDER_PRESETS: Record<string, AIProviderPreset> = {\n  anthropic: {\n    id: \"anthropic\",\n    kind: \"llm\",\n    label: \"Anthropic\",\n    surface: \"anthropic-messages\",\n    base_url: \"https://api.anthropic.com\",\n    base_url_env: \"ANTHROPIC_BASE_URL\",\n    headers: ANTHROPIC_VERSION_HEADER,\n    credential: { kind: \"api_key_header\", env: \"ANTHROPIC_API_KEY\" },\n    auth_header: X_API_KEY,\n    probe_path: \"/v1/models\",\n    discovery: { type: \"anthropic-models-list\" },\n  },\n  openai: {\n    id: \"openai\",\n    kind: \"llm\",\n    label: \"OpenAI\",\n    surface: \"openai-responses\",\n    base_url: \"https://api.openai.com/v1\",\n    base_url_env: \"OPENAI_BASE_URL\",\n    credential: { kind: \"bearer\", env: \"OPENAI_API_KEY\" },\n    probe_path: OPENAI_MODELS_PATH,\n    discovery: { type: \"openai-models-list\" },\n    notes:\n      \"Responses is OpenAI's current API; set surface openai-completions for chat-only clients.\",\n  },\n  google: {\n    id: \"google\",\n    kind: \"llm\",\n    label: \"Google Gemini API\",\n    surface: \"google-generative-ai\",\n    base_url: \"https://generativelanguage.googleapis.com/v1beta\",\n    credential: { kind: \"api_key_header\", env: \"GEMINI_API_KEY\" },\n    auth_header: { name: \"x-goog-api-key\", template: \"{credential}\" },\n    probe_path: \"/v1beta/models\",\n    discovery: { type: \"google-models-list\" },\n  },\n  groq: {\n    id: \"groq\",\n    kind: \"llm\",\n    label: \"Groq\",\n    surface: \"openai-completions\",\n    base_url: \"https://api.groq.com/openai/v1\",\n    credential: { kind: \"bearer\", env: \"GROQ_API_KEY\" },\n    probe_path: OPENAI_MODELS_PATH,\n    discovery: { type: \"openai-models-list\" },\n  },\n  deepseek: {\n    id: \"deepseek\",\n    kind: \"llm\",\n    label: \"DeepSeek\",\n    surface: \"openai-completions\",\n    base_url: \"https://api.deepseek.com\",\n    credential: { kind: \"bearer\", env: \"DEEPSEEK_API_KEY\" },\n    probe_path: \"/models\",\n    discovery: { type: \"openai-models-list\" },\n    notes:\n      \"Anthropic-shaped clients use https://api.deepseek.com/anthropic with surface anthropic-messages.\",\n  },\n  openrouter: {\n    id: \"openrouter\",\n    kind: \"llm\",\n    label: \"OpenRouter\",\n    surface: \"openai-completions\",\n    base_url: \"https://openrouter.ai/api/v1\",\n    credential: { kind: \"bearer\", env: \"OPENROUTER_API_KEY\" },\n    probe_path: OPENAI_MODELS_PATH,\n    discovery: { type: \"openai-models-list\" },\n  },\n  mistral: {\n    id: \"mistral\",\n    kind: \"llm\",\n    label: \"Mistral\",\n    surface: \"openai-completions\",\n    base_url: \"https://api.mistral.ai/v1\",\n    credential: { kind: \"bearer\", env: \"MISTRAL_API_KEY\" },\n    probe_path: OPENAI_MODELS_PATH,\n    discovery: { type: \"openai-models-list\" },\n  },\n  xai: {\n    id: \"xai\",\n    kind: \"llm\",\n    label: \"xAI (Grok)\",\n    surface: \"openai-completions\",\n    base_url: \"https://api.x.ai/v1\",\n    credential: { kind: \"bearer\", env: \"XAI_API_KEY\" },\n    probe_path: OPENAI_MODELS_PATH,\n    discovery: { type: \"openai-models-list\" },\n  },\n  together: {\n    id: \"together\",\n    kind: \"llm\",\n    label: \"Together AI\",\n    surface: \"openai-completions\",\n    base_url: \"https://api.together.ai/v1\",\n    credential: { kind: \"bearer\", env: \"TOGETHER_API_KEY\" },\n    probe_path: OPENAI_MODELS_PATH,\n    discovery: { type: \"openai-models-list\" },\n  },\n  fireworks: {\n    id: \"fireworks\",\n    kind: \"llm\",\n    label: \"Fireworks AI\",\n    surface: \"openai-completions\",\n    base_url: \"https://api.fireworks.ai/inference/v1\",\n    credential: { kind: \"bearer\", env: \"FIREWORKS_API_KEY\" },\n    probe_path: OPENAI_MODELS_PATH,\n    discovery: { type: \"openai-models-list\" },\n  },\n  bedrock: {\n    id: \"bedrock\",\n    kind: \"llm\",\n    label: \"AWS Bedrock\",\n    surface: \"bedrock-converse-stream\",\n    transport: \"bedrock\",\n    credential: { kind: \"sigv4\" },\n    required_params: [\"region\"],\n    notes: \"Credentials come from the AWS default chain; the runtime host serves no models list.\",\n  },\n  vertex: {\n    id: \"vertex\",\n    kind: \"llm\",\n    label: \"Google Vertex AI\",\n    surface: \"google-vertex\",\n    transport: \"vertex\",\n    credential: { kind: \"google_adc\" },\n    params: { publisher: \"google\" },\n    required_params: [\"project\", \"location\"],\n    probe_path: \"/models\",\n  },\n  \"azure-openai\": {\n    id: \"azure-openai\",\n    kind: \"llm\",\n    label: \"Azure OpenAI\",\n    surface: \"azure-openai-responses\",\n    transport: \"azure-openai\",\n    credential: { kind: \"api_key_header\", env: \"AZURE_OPENAI_API_KEY\" },\n    auth_header: { name: \"api-key\", template: \"{credential}\" },\n    required_params: [\"resource\", \"deployment\", \"api_version\"],\n    probe_path: \"/models\",\n    notes:\n      \"api_version is mirrored into query_params['api-version']; switch credential.kind to azure_entra for Entra tokens.\",\n  },\n  foundry: {\n    id: \"foundry\",\n    kind: \"llm\",\n    label: \"Claude on Microsoft Foundry\",\n    surface: \"anthropic-messages\",\n    transport: \"foundry\",\n    headers: ANTHROPIC_VERSION_HEADER,\n    credential: { kind: \"api_key_header\", env: \"ANTHROPIC_FOUNDRY_API_KEY\" },\n    auth_header: X_API_KEY,\n    required_params: [\"resource\"],\n    probe_path: \"/v1/models\",\n  },\n  ollama: {\n    id: \"ollama\",\n    kind: \"llm\",\n    label: \"Ollama (local)\",\n    surface: \"openai-completions\",\n    base_url: \"http://localhost:11434/v1\",\n    credential: { kind: \"none\" },\n    probe_path: OPENAI_MODELS_PATH,\n    discovery: { type: \"openai-models-list\" },\n  },\n  lmstudio: {\n    id: \"lmstudio\",\n    kind: \"llm\",\n    label: \"LM Studio (local)\",\n    surface: \"openai-completions\",\n    base_url: \"http://localhost:1234/v1\",\n    credential: { kind: \"none\" },\n    probe_path: OPENAI_MODELS_PATH,\n    discovery: { type: \"openai-models-list\" },\n  },\n  vllm: {\n    id: \"vllm\",\n    kind: \"llm\",\n    label: \"vLLM (self-hosted)\",\n    surface: \"openai-completions\",\n    base_url: \"http://localhost:8000/v1\",\n    credential: { kind: \"none\" },\n    probe_path: OPENAI_MODELS_PATH,\n    discovery: { type: \"openai-models-list\" },\n    notes: \"A server started with --api-key expects credential.kind bearer and an env: ref.\",\n  },\n  litellm: {\n    id: \"litellm\",\n    kind: \"llm\",\n    label: \"LiteLLM proxy\",\n    surface: \"openai-completions\",\n    base_url: \"http://localhost:4000\",\n    credential: { kind: \"bearer\", env: \"LITELLM_API_KEY\" },\n    probe_path: OPENAI_MODELS_PATH,\n    discovery: { type: \"openai-models-list\" },\n    notes: \"The credential is the proxy's virtual key; upstream keys stay in the proxy config.\",\n  },\n  deepgram: {\n    id: \"deepgram\",\n    kind: \"stt\",\n    label: \"Deepgram\",\n    base_url: \"https://api.deepgram.com\",\n    credential: { kind: \"api_key_header\", env: \"DEEPGRAM_API_KEY\" },\n    auth_header: { name: \"Authorization\", template: \"Token {credential}\" },\n    params: { model: \"nova-3\", language: \"en\" },\n    probe_path: \"/v1/projects\",\n  },\n  elevenlabs: {\n    id: \"elevenlabs\",\n    kind: \"tts\",\n    label: \"ElevenLabs\",\n    base_url: \"https://api.elevenlabs.io\",\n    credential: { kind: \"api_key_header\", env: \"ELEVENLABS_API_KEY\" },\n    auth_header: { name: \"xi-api-key\", template: \"{credential}\" },\n    params: { voice_id: \"21m00Tcm4TlvDq8ikWAM\", output_format: \"mp3_44100_128\" },\n    probe_path: \"/v1/models\",\n  },\n};\n\n/** Presets in catalog order. */\nexport function listProviderPresets(): AIProviderPreset[] {\n  return Object.values(AI_PROVIDER_PRESETS);\n}\n\n/** Look up a preset by id. */\nexport function getProviderPreset(id: string): AIProviderPreset | undefined {\n  return AI_PROVIDER_PRESETS[id];\n}\n\n/**\n * The endpoint `skaile providers list` shows for a preset: the literal when\n * there is one, otherwise the transport's `base_url` template (§1.3) with its\n * `{param}` placeholders left in — they are exactly what the operator must\n * supply.\n */\nexport function presetBaseUrl(preset: AIProviderPreset): string | undefined {\n  if (preset.base_url) return preset.base_url;\n  if (!preset.transport || preset.transport === \"direct\") return undefined;\n  return AI_PROVIDER_BASE_URL_TEMPLATES[preset.transport];\n}\n\n/**\n * The endpoint a request to this preset should actually go to: an explicit\n * override first, then the vendor's own `*_BASE_URL` variable\n * ({@link AIProviderPreset.base_url_env}), then the preset literal.\n *\n * Behind a gateway the credential in play is the *gateway's*, not the\n * vendor's, so discovery and key validation have to follow dispatch — firing\n * either at the vendor's public API 401s and yields an empty catalog, which a\n * caller that reads \"empty\" as \"unknown\" then degrades into \"accept anything\".\n *\n * Pure: reads only the `env` record it is handed.\n */\nexport function resolvePresetBaseUrl(\n  preset: AIProviderPreset,\n  options: { baseUrl?: string; env?: Record<string, string | undefined> } = {},\n): string | undefined {\n  const explicit = options.baseUrl?.trim();\n  if (explicit) return explicit;\n  const fromEnv = preset.base_url_env ? options.env?.[preset.base_url_env]?.trim() : undefined;\n  return fromEnv || preset.base_url;\n}\n\n/** Overrides {@link expandPreset} accepts from `skaile providers add`. */\nexport interface ExpandPresetOptions {\n  /** `env:NAME` / `cmd:…` / `platform:…` / `keyring:…`. Never a literal. */\n  credentialRef?: string;\n  baseUrl?: string;\n  surface?: AIProviderSurface;\n  label?: string;\n  /** Transport routing parameters, or voice parameters for `stt`/`tts`. */\n  params?: Record<string, string>;\n}\n\n/**\n * Materialize a preset into a registry entry.\n *\n * The credential is always a reference: the preset's conventional `env:` var\n * unless the caller names another ref. No code path here can write a secret.\n * For `transport: azure-openai` the `api_version` parameter is mirrored into\n * `query_params['api-version']`, which is where the wire expects it (§1.3).\n */\nexport function expandPreset(\n  preset: AIProviderPreset,\n  options: ExpandPresetOptions = {},\n): AIProviderEntry {\n  const ref =\n    options.credentialRef ?? (preset.credential.env ? `env:${preset.credential.env}` : undefined);\n  const credential = ref ? { kind: preset.credential.kind, ref } : { kind: preset.credential.kind };\n  const base_url = options.baseUrl ?? preset.base_url;\n  const params = { ...preset.params, ...options.params };\n\n  if (preset.kind === \"stt\" || preset.kind === \"tts\") {\n    return {\n      kind: preset.kind,\n      label: options.label ?? preset.label,\n      preset: preset.id,\n      ...(base_url ? { base_url } : {}),\n      ...(preset.headers ? { headers: { ...preset.headers } } : {}),\n      credential,\n      ...(Object.keys(params).length > 0 ? { params: params as AIProviderVoiceParams } : {}),\n    };\n  }\n\n  const transport = preset.transport ?? \"direct\";\n  const entry: AIProviderLlmEntry = {\n    kind: preset.kind === \"embed\" ? \"embed\" : \"llm\",\n    label: options.label ?? preset.label,\n    preset: preset.id,\n    ...((options.surface ?? preset.surface) ? { surface: options.surface ?? preset.surface } : {}),\n    ...(base_url ? { base_url } : {}),\n    ...(preset.headers ? { headers: { ...preset.headers } } : {}),\n    credential,\n    ...(preset.discovery ? { discovery: { ...preset.discovery } } : {}),\n  } as AIProviderLlmEntry;\n\n  if (transport !== \"direct\") {\n    Object.assign(entry, { transport, params });\n    if (transport === \"azure-openai\" && params.api_version) {\n      entry.query_params = { \"api-version\": params.api_version };\n    }\n  }\n  return entry;\n}\n\n/**\n * Build the catalog merge layer for a set of configured entries (§1.5).\n *\n * Only the presets actually referenced by a `preset:` key are expanded, keyed\n * by the *entry* id — so `groq: {kind: llm, preset: groq}` deep-merges onto a\n * full Groq definition while an unreferenced preset stays out of the registry.\n *\n * Takes the **pre-gate** merge (`LoadedProviderRegistry.patches`), not the\n * gated registry: an entry that leaves `kind` or its transport `params` to the\n * preset is exactly the one the gate drops before this layer exists, and a\n * dropped entry names no preset to expand.\n */\nexport function catalogLayer(providers: AIProviderRegistryPatch): AIProviderRegistryLayer {\n  const expanded: AIProviderRegistry = {};\n  for (const [id, entry] of Object.entries(providers)) {\n    if (!entry.preset) continue;\n    const preset = AI_PROVIDER_PRESETS[entry.preset];\n    if (!preset) continue;\n    expanded[id] = expandPreset(preset);\n  }\n  return { layer: \"catalog\", providers: expanded };\n}\n\n/**\n * Join a base URL and a path without duplicating a shared leading segment:\n * `(\"https://gw/v1\", \"/v1/models\")` → `https://gw/v1/models`. Both spellings\n * are common in the wild, and a preset's path must work against a gateway base\n * the operator typed either way.\n */\nfunction joinBaseAndPath(base: string, path: string): string {\n  const trimmed = base.replace(/\\/+$/, \"\");\n  const segments = path.split(\"/\").filter(Boolean);\n  const lead = segments[0];\n  if (lead && trimmed.toLowerCase().endsWith(`/${lead.toLowerCase()}`)) {\n    return `${trimmed}/${segments.slice(1).join(\"/\")}`;\n  }\n  return `${trimmed}${path}`;\n}\n\n/**\n * The read-only URL a health probe or model discovery can GET for an entry —\n * the models list on LLM surfaces, the equivalent authenticated read on voice\n * ones. `undefined` when the entry has no endpoint yet (missing transport\n * parameters) or the surface serves no such path (Bedrock runtime).\n *\n * This is the catalog method that supersedes `resolveProviderModelsUrl`.\n */\nexport function resolveProbeUrl(entry: AIProviderEntry): string | undefined {\n  const base = resolveEntryBaseUrl(entry);\n  if (!base) return undefined;\n  const preset = entry.preset ? AI_PROVIDER_PRESETS[entry.preset] : undefined;\n  const path = (entry as AIProviderLlmEntry).discovery?.path ?? preset?.probe_path;\n  if (!path) return undefined;\n  const url = joinBaseAndPath(base, path);\n  const query = (entry as AIProviderLlmEntry).query_params;\n  if (!query || Object.keys(query).length === 0) return url;\n  const search = new URLSearchParams(query).toString();\n  return `${url}${url.includes(\"?\") ? \"&\" : \"?\"}${search}`;\n}\n\n/**\n * The header(s) that present a credential on the wire for an entry.\n *\n * `credential.kind` alone does not determine the header — `api_key_header` is\n * `x-api-key` at Anthropic, `x-goog-api-key` at Google and `api-key` at Azure —\n * so the preset's `auth_header` wins, then a per-surface default.\n * Returns `{}` when the credential is signed elsewhere (`sigv4`, `google_adc`)\n * or absent.\n */\nexport function buildCredentialHeaders(\n  entry: AIProviderEntry,\n  secret: string | undefined,\n): Record<string, string> {\n  const kind = entry.credential?.kind ?? \"none\";\n  if (!secret || kind === \"none\" || kind === \"sigv4\" || kind === \"google_adc\") return {};\n\n  const preset = entry.preset ? AI_PROVIDER_PRESETS[entry.preset] : undefined;\n  if (preset?.auth_header) {\n    return {\n      [preset.auth_header.name]: preset.auth_header.template.replace(\"{credential}\", secret),\n    };\n  }\n  if (kind === \"api_key_header\") {\n    const surface = (entry as AIProviderLlmEntry).surface;\n    if (surface === \"google-generative-ai\") return { \"x-goog-api-key\": secret };\n    if (surface === \"azure-openai-responses\") return { \"api-key\": secret };\n    return { \"x-api-key\": secret };\n  }\n  return { Authorization: `Bearer ${secret}` };\n}\n\n/** Outcome of {@link probeProviderEntry}. Never carries the credential. */\nexport interface AIProviderProbeResult {\n  /** The endpoint answered 2xx. */\n  ok: boolean;\n  /** `false` when no request was made — nothing was verified either way. */\n  probed: boolean;\n  url?: string;\n  status?: number;\n  /** Human-readable outcome. Secret-free. */\n  detail: string;\n}\n\n/** Options for {@link probeProviderEntry}. */\nexport interface ProbeProviderOptions {\n  /** Resolved credential value, if the entry has one. Never logged. */\n  secret?: string;\n  /** Request deadline; default 8000 ms, matching `validateApiKey`. */\n  timeoutMs?: number;\n}\n\n/**\n * Send one minimal, read-only request to an entry's endpoint and report what\n * came back.\n *\n * Returns `probed: false` — rather than a false negative — when the entry has\n * no probe path (Bedrock's runtime host) or no resolvable endpoint yet: a\n * SigV4- or ADC-signed request is the transport SDK's job, not this function's.\n */\nexport async function probeProviderEntry(\n  entry: AIProviderEntry,\n  options: ProbeProviderOptions = {},\n): Promise<AIProviderProbeResult> {\n  const url = resolveProbeUrl(entry);\n  if (!url) {\n    const base = resolveEntryBaseUrl(entry);\n    return {\n      ok: false,\n      probed: false,\n      detail: base\n        ? `no read-only probe endpoint is defined for this entry (${base})`\n        : \"no base_url could be resolved — set base_url or the transport's params\",\n    };\n  }\n\n  const headers: Record<string, string> = {\n    ...entry.headers,\n    ...buildCredentialHeaders(entry, options.secret),\n  };\n\n  const controller = new AbortController();\n  const timeout = setTimeout(() => controller.abort(), options.timeoutMs ?? 8000);\n  try {\n    const response = await fetch(url, { method: \"GET\", headers, signal: controller.signal });\n    if (response.ok) {\n      return { ok: true, probed: true, url, status: response.status, detail: \"endpoint reachable\" };\n    }\n    const detail =\n      response.status === 401 || response.status === 403\n        ? \"credential rejected (authentication failed)\"\n        : `endpoint returned HTTP ${response.status}`;\n    return { ok: false, probed: true, url, status: response.status, detail };\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err);\n    const detail =\n      err instanceof Error && err.name === \"AbortError\"\n        ? `request timed out after ${options.timeoutMs ?? 8000}ms`\n        : message;\n    return { ok: false, probed: true, url, detail };\n  } finally {\n    clearTimeout(timeout);\n  }\n}\n","/**\n * Credential delivery for driver adapters — the one naming rule (§2.3).\n *\n * Every adapter that hands a registry entry's secret to a child process, and\n * every renderer that has to *name* that secret in a config file it writes\n * (omp's `models.yml` `apiKey:`, Codex's `env_key`, OpenCode's `{env:…}`),\n * agrees on one env-var name per entry: `SKAILE_AIP_<UPPER_ID>_KEY`. The name\n * goes in the file, the value goes in the child environment — a rendered\n * config never contains a secret.\n *\n * The platform's secret-env allowlist is a prefix rule on exactly that name,\n * and forge-common delivers the same names when it spawns `skaile serve`, so\n * the transform below is a cross-repo contract: uppercase, every character\n * outside `[A-Za-z0-9]` mapped to `_` (registry ids are `[a-z0-9][a-z0-9_-]*`,\n * so in practice only `-`).\n *\n * Alongside the canonical name, {@link registryCredentialEnv} also sets the\n * *conventional* carrier a CLI already reads (`ANTHROPIC_API_KEY`,\n * `GEMINI_API_KEY`, `GROQ_API_KEY`, …) so a catalog-preset entry works in a\n * harness that has no per-endpoint config file yet.\n *\n * @see PROVIDER-CONFIG-PLAN.md §1.4, §2.3\n */\n\nimport {\n  type AIProviderEntry,\n  type AIProviderRegistry,\n  isEntryEnabled,\n  type MergedAIProviderRegistry,\n  parseCredentialRef,\n  registryEntries,\n} from \"@skaile/workspaces/core/provider-registry\";\nimport { resolveCredential } from \"@skaile/workspaces/core/provider-registry-credentials\";\nimport { AI_PROVIDER_PRESETS } from \"../provider-catalog.js\";\n\n/** Options shared by every registry-shaped credential resolution. */\nexport interface RegistryCredentialOptions {\n  /** Restrict resolution to one entry — the provider half of a `modelRef`. */\n  providerId?: string;\n  /** Environment `env:` refs resolve against. Defaults to `process.env`. */\n  env?: Record<string, string | undefined>;\n  /** Control-plane secrets keyed by config id, for `platform:` refs. */\n  secrets?: Record<string, string>;\n  /** Run `cmd:` references. Default `true`. */\n  allowCommand?: boolean;\n}\n\n/** Prefix of the canonical per-entry credential variable. */\nexport const PROVIDER_CREDENTIAL_ENV_PREFIX = \"SKAILE_AIP_\";\n\n/** Suffix of the canonical per-entry credential variable. */\nexport const PROVIDER_CREDENTIAL_ENV_SUFFIX = \"_KEY\";\n\n/**\n * The env-var name that carries a registry entry's credential:\n * `anthropic` → `SKAILE_AIP_ANTHROPIC_KEY`, `my-gw.eu` → `SKAILE_AIP_MY_GW_EU_KEY`.\n *\n * Pure: no environment, no registry, no I/O. Renderers call it per entry while\n * emitting a config file, adapters call it while assembling a child env, and\n * the platform allowlist matches the prefix.\n */\nexport function providerCredentialEnvName(providerId: string): string {\n  const slug = providerId.replace(/[^A-Za-z0-9]/g, \"_\").toUpperCase();\n  return `${PROVIDER_CREDENTIAL_ENV_PREFIX}${slug}${PROVIDER_CREDENTIAL_ENV_SUFFIX}`;\n}\n\n/**\n * The env var a harness already looks for on its own, when the entry names one.\n *\n * The catalog preset's conventional carrier wins (`GEMINI_API_KEY` for\n * `google`), because that is the name the vendor's own CLI reads; otherwise an\n * `env:NAME` credential reference is taken at face value — the operator named\n * that variable, so the child gets it under the same name. `cmd:`, `platform:`\n * and `keyring:` refs have no conventional carrier and return `undefined`.\n */\nexport function conventionalCredentialEnvName(entry: AIProviderEntry): string | undefined {\n  const preset = entry.preset ? AI_PROVIDER_PRESETS[entry.preset] : undefined;\n  if (preset?.credential.env) return preset.credential.env;\n  const ref = entry.credential?.ref ? parseCredentialRef(entry.credential.ref) : undefined;\n  return ref?.form === \"env\" ? ref.name : undefined;\n}\n\n/**\n * Resolve one entry's credential to its value, or `undefined` when there is\n * none to hand over (`kind: none`, an ambient `sigv4`/`google_adc` chain, an\n * unset variable, a reserved `keyring:` ref).\n */\nexport function resolveEntryCredential(\n  entry: AIProviderEntry,\n  options: RegistryCredentialOptions = {},\n): string | undefined {\n  return resolveCredential(entry, {\n    ...(options.env ? { env: options.env } : {}),\n    ...(options.secrets ? { secrets: options.secrets } : {}),\n    ...(options.allowCommand === undefined ? {} : { allowCommand: options.allowCommand }),\n  }).value;\n}\n\n/**\n * One entry's credential value, including the one the session boundary\n * already resolved for it.\n *\n * A `platform:<configId>` reference is resolved by the runner — it holds the\n * `session_init` secrets map, the driver does not — and materialized into the\n * child environment under {@link providerCredentialEnvName}. So when the\n * reference itself yields nothing, that carrier is consulted: it is the same\n * secret, delivered one step earlier.\n */\nexport function entryCredentialValue(\n  providerId: string,\n  entry: AIProviderEntry,\n  options: RegistryCredentialOptions = {},\n): string | undefined {\n  return (\n    resolveEntryCredential(entry, options) ?? options.env?.[providerCredentialEnvName(providerId)]\n  );\n}\n\n/** One enabled entry whose credential is declared but cannot be resolved. */\nexport interface UnresolvedProviderCredential {\n  providerId: string;\n  /** Why it does not resolve, e.g. `environment variable ANTHROPIC_API_KEY is not set`. */\n  reason: string;\n}\n\n/**\n * The enabled LLM/embed entries that name a credential this process cannot\n * resolve (the variable is unset, the command fails). A driver must not be\n * handed such an entry: the child would send an empty key and fail with a 401\n * instead of using its own login. Entries with no credential, an ambient\n * signing chain, or a value the session boundary already delivered under\n * {@link providerCredentialEnvName} are fine.\n */\nexport function unresolvedProviderCredentials(\n  registry: AIProviderRegistry | MergedAIProviderRegistry,\n  options: RegistryCredentialOptions = {},\n): UnresolvedProviderCredential[] {\n  const out: UnresolvedProviderCredential[] = [];\n  for (const [id, entry] of registryEntries(registry)) {\n    if (entry.kind !== \"llm\" && entry.kind !== \"embed\") continue;\n    if (!isEntryEnabled(entry)) continue;\n    if (options.providerId && id !== options.providerId) continue;\n    const resolved = resolveCredential(entry, {\n      ...(options.env ? { env: options.env } : {}),\n      ...(options.secrets ? { secrets: options.secrets } : {}),\n      ...(options.allowCommand === undefined ? {} : { allowCommand: options.allowCommand }),\n    });\n    if (!resolved.error) continue;\n    if (options.env?.[providerCredentialEnvName(id)]) continue;\n    out.push({ providerId: id, reason: resolved.error });\n  }\n  return out;\n}\n\n/** Options for {@link entryCredentialEnv} / {@link registryCredentialEnv}. */\nexport interface RegistryCredentialEnvOptions extends RegistryCredentialOptions {\n  /**\n   * Also set the harness-conventional carrier\n   * ({@link conventionalCredentialEnvName}). Default `true`. Set `false` for a\n   * harness that reads every endpoint out of a rendered config file and must\n   * not inherit a vendor default from a neighbouring entry.\n   */\n  aliases?: boolean;\n}\n\n/**\n * The credential variables one entry contributes: always\n * `SKAILE_AIP_<ID>_KEY`, plus the conventional carrier unless `aliases` is\n * `false`. Empty when the entry has no resolvable secret.\n */\nexport function entryCredentialEnv(\n  providerId: string,\n  entry: AIProviderEntry,\n  options: RegistryCredentialEnvOptions = {},\n): Record<string, string> {\n  const value = resolveEntryCredential(entry, options);\n  if (!value) return {};\n  const out: Record<string, string> = { [providerCredentialEnvName(providerId)]: value };\n  if (options.aliases !== false) {\n    const alias = conventionalCredentialEnvName(entry);\n    if (alias) out[alias] = value;\n  }\n  return out;\n}\n\n/**\n * Every enabled entry's credential, as a child-process environment fragment.\n *\n * One canonical `SKAILE_AIP_<ID>_KEY` per entry whose credential resolves; the\n * conventional carriers are added underneath, first entry in registry order\n * winning a collision (registry order is highest-precedence layer first, so\n * the alias follows the same precedence the selector does). Entries whose\n * credential cannot be resolved contribute nothing.\n */\nexport function registryCredentialEnv(\n  registry: AIProviderRegistry | MergedAIProviderRegistry,\n  options: RegistryCredentialEnvOptions = {},\n): Record<string, string> {\n  const canonical: Record<string, string> = {};\n  const aliases: Record<string, string> = {};\n  for (const [id, entry] of registryEntries(registry)) {\n    if (options.providerId && id !== options.providerId) continue;\n    if (!isEntryEnabled(entry)) continue;\n    const value = resolveEntryCredential(entry, options);\n    if (!value) continue;\n    canonical[providerCredentialEnvName(id)] = value;\n    if (options.aliases === false) continue;\n    const alias = conventionalCredentialEnvName(entry);\n    if (alias && aliases[alias] === undefined) aliases[alias] = value;\n  }\n  return { ...aliases, ...canonical };\n}\n","/**\n * What the runner may ask of a harness, by driver id.\n *\n * Deliberately light: this module imports no driver, no SDK and no `zod`, so a\n * runner file that only needs a capability can import it without loading the\n * driver graph. The plugin-registry singleton is read through its `internal`\n * module (the same file `@skaile/workspaces/plugin-registry` re-exports, so one\n * instance under the bundler's shared chunks), not through the package index,\n * which pulls in the deploy helpers and their `zod` schemas.\n *\n * @docLink packages/bridge/api-reference#registry\n */\n\nimport { pluginRegistry } from \"../../plugin-registry/src/internal.js\";\nimport type { DriverCapabilities } from \"@skaile/workspaces/types\";\n\n/**\n * Capabilities of a harness that declares none: it recomposes its tools per\n * turn like every bridge driver that is not an in-process SDK, and has no\n * managed session, credentials file or transcript-file resume.\n */\nconst GENERIC_DRIVER_CAPABILITIES: DriverCapabilities = {\n  inProcessMcpServers: false,\n  liveToolUpdates: true,\n  managedSession: false,\n  claudeCodeCredentials: false,\n  resumeNeedsTranscript: false,\n};\n\n/**\n * Declared capabilities of the built-in harnesses that differ from nothing.\n * `BUILTIN_DRIVER_CATALOG` rows point at these entries, so `listDrivers()` and\n * {@link driverCapabilities} read one table. A built-in absent here (echo,\n * gemini, qwen, opencode, goose, continue) takes the generic defaults.\n */\nexport const BUILTIN_DRIVER_CAPABILITIES = {\n  // Recomposes its tools per turn, so a hot-plugged MCP server is live.\n  omp: {\n    inProcessMcpServers: false,\n    liveToolUpdates: true,\n    managedSession: false,\n    claudeCodeCredentials: false,\n    resumeNeedsTranscript: false,\n  },\n  // The SDK takes in-process server instances and bakes its tool set at\n  // creation; it reads Claude's `~/.claude` credentials and JSONL transcripts.\n  \"claude-sdk\": {\n    inProcessMcpServers: true,\n    liveToolUpdates: false,\n    managedSession: false,\n    claudeCodeCredentials: true,\n    resumeNeedsTranscript: true,\n  },\n  // Standalone SDK recomposes its tools per turn. A host-managed session\n  // (native app-server) refreshes its own native tool snapshot instead.\n  codex: {\n    inProcessMcpServers: false,\n    liveToolUpdates: true,\n    managedSession: true,\n    claudeCodeCredentials: false,\n    resumeNeedsTranscript: false,\n  },\n} as const satisfies Record<string, DriverCapabilities>;\n\n/**\n * Resolve what the runner may ask of a harness, by driver id, without loading\n * its module. Built-ins read {@link BUILTIN_DRIVER_CAPABILITIES}; a third-party\n * driver reads its registered `DriverTarget`; an unknown or absent id gets the\n * generic defaults. Fields a driver omits take the generic default too.\n *\n * This is the one place the runner learns driver facts — it never compares an\n * id against `\"claude-sdk\"`, `\"codex\"` or `\"omp\"`.\n *\n * @param id - Driver id (e.g. a session's `driverType`); `undefined` resolves to the defaults.\n * @docLink packages/bridge/api-reference#registry\n */\nexport function driverCapabilities(id: string | undefined): DriverCapabilities {\n  const declared = id\n    ? Object.hasOwn(BUILTIN_DRIVER_CAPABILITIES, id)\n      ? BUILTIN_DRIVER_CAPABILITIES[id as keyof typeof BUILTIN_DRIVER_CAPABILITIES]\n      : pluginRegistry.get(\"driver\", id)?.capabilities\n    : undefined;\n  return { ...GENERIC_DRIVER_CAPABILITIES, ...declared };\n}\n\n/**\n * Whether a hot-plugged MCP server reaches the agent's next turn without a\n * driver restart. A host-managed session refreshes its native tool snapshot\n * itself, so it never takes live updates, whatever the standalone driver does.\n *\n * @param id - Driver id of the live session.\n * @param managed - Whether the session is host-managed (`managedCodex`).\n * @docLink packages/bridge/api-reference#registry\n */\nexport function supportsLiveToolUpdates(id: string | undefined, managed = false): boolean {\n  const caps = driverCapabilities(id);\n  return caps.liveToolUpdates && !(managed && caps.managedSession);\n}\n","import type {\n  AIProviderRegistry,\n  AIProviderSurface,\n  MergedAIProviderRegistry,\n} from \"@skaile/workspaces/core/provider-registry\";\nimport type { DriverContext } from \"@skaile/workspaces/plugin-registry\";\nimport { type PluginRegistry, pluginRegistry } from \"@skaile/workspaces/plugin-registry\";\nimport type { ModelEntry } from \"./models.js\";\nimport type { RegistryCredentialOptions } from \"./provider-materialize/credential-env.js\";\nimport { BUILTIN_DRIVER_CAPABILITIES } from \"./driver-capabilities.js\";\nimport type { AgentConfig, AgentDriver, DriverInfo } from \"./types.js\";\n\n// Build-time harness gating. `bun build --compile --define:__INCLUDE_*__=...`\n// folds these to literal booleans so an excluded harness's driver module and\n// its SDK are dead-code-stripped from the binary. Under tsup / vitest / bun\n// run-on-source no `--define` runs and the `typeof` guard defaults to `true` —\n// every harness is available (the SDKs stay optional peers).\ndeclare const __INCLUDE_CLAUDE_SDK__: boolean;\ndeclare const __INCLUDE_CODEX__: boolean;\nconst INCLUDE_CLAUDE_SDK =\n  typeof __INCLUDE_CLAUDE_SDK__ === \"undefined\" ? true : __INCLUDE_CLAUDE_SDK__;\nconst INCLUDE_CODEX = typeof __INCLUDE_CODEX__ === \"undefined\" ? true : __INCLUDE_CODEX__;\n\n/**\n * Every wire surface omp can speak — it is the harness the `surface` enum was\n * lifted from, so its list is the enum.\n */\nconst OMP_SURFACES = [\n  \"anthropic-messages\",\n  \"openai-completions\",\n  \"openai-responses\",\n  \"openai-codex-responses\",\n  \"azure-openai-responses\",\n  \"bedrock-converse-stream\",\n  \"google-generative-ai\",\n  \"google-vertex\",\n] as const satisfies readonly AIProviderSurface[];\n\n/**\n * Static capability metadata for every built-in harness.\n *\n * Pure data — this object imports no driver module and references no harness\n * SDK. {@link listDrivers} returns it (merged with any third-party drivers)\n * so selection UIs can enumerate every harness without loading a single\n * driver module. The matching driver module's `DriverTarget` is registered\n * into the plugin registry by {@link registerBuiltinDrivers}.\n *\n * `surfaces` and `providerPlurality` are the driver-capability declaration\n * the AI provider registry resolves against (plan §2.3): which wire protocols\n * a harness can be pointed at, and how many registry entries it can use at\n * once. The platform's resolver filters candidate entries on `surfaces`\n * instead of matching vendor names.\n *\n * @docLink packages/bridge/api-reference#registry\n */\nexport const BUILTIN_DRIVER_CATALOG: Record<string, DriverInfo> = {\n  omp: {\n    id: \"omp\",\n    name: \"omp (oh-my-pi)\",\n    modelAgnostic: true,\n    supportsInBandAbort: true,\n    surfaces: OMP_SURFACES,\n    // omp renders the whole registry as its own `models.yml`, so every entry\n    // stays selectable and roles / per-subagent models resolve across them.\n    providerPlurality: \"registry\",\n    capabilities: BUILTIN_DRIVER_CAPABILITIES.omp,\n  },\n  \"claude-sdk\": {\n    id: \"claude-sdk\",\n    name: \"Claude Agent SDK\",\n    modelAgnostic: false,\n    supportsInBandAbort: true,\n    // Anthropic's own API, plus the two clouds the SDK addresses natively.\n    // Foundry is `anthropic-messages` at a different host, not a surface.\n    surfaces: [\"anthropic-messages\", \"bedrock-converse-stream\", \"google-vertex\"],\n    providerPlurality: \"single\",\n    capabilities: BUILTIN_DRIVER_CAPABILITIES[\"claude-sdk\"],\n  },\n  codex: {\n    id: \"codex\",\n    name: \"OpenAI Codex\",\n    modelAgnostic: false,\n    supportsInBandAbort: true,\n    // Codex's `wire_api` is `responses` or `chat`; its subscription transport\n    // is the codex-specific responses flavour.\n    surfaces: [\"openai-codex-responses\", \"openai-responses\", \"openai-completions\"],\n    providerPlurality: \"single\",\n    capabilities: BUILTIN_DRIVER_CAPABILITIES.codex,\n  },\n  echo: {\n    id: \"echo\",\n    name: \"Echo (E2E mock)\",\n    modelAgnostic: true,\n    supportsInBandAbort: false,\n    // Deterministic mock: it never opens a connection, so it speaks no wire\n    // surface and no registry entry can be dispatched to it.\n    surfaces: [],\n    providerPlurality: \"single\",\n  },\n  gemini: {\n    id: \"gemini\",\n    name: \"Gemini CLI\",\n    modelAgnostic: false,\n    supportsInBandAbort: false,\n    surfaces: [\"google-generative-ai\"],\n    providerPlurality: \"single\",\n  },\n  qwen: {\n    id: \"qwen\",\n    name: \"Qwen Code\",\n    modelAgnostic: true,\n    supportsInBandAbort: false,\n    // Driven entirely through OPENAI_BASE_URL / OPENAI_API_KEY.\n    surfaces: [\"openai-completions\"],\n    providerPlurality: \"single\",\n  },\n  opencode: {\n    id: \"opencode\",\n    name: \"OpenCode\",\n    modelAgnostic: true,\n    supportsInBandAbort: false,\n    surfaces: [\n      \"anthropic-messages\",\n      \"openai-completions\",\n      \"openai-responses\",\n      \"google-generative-ai\",\n    ],\n    providerPlurality: \"credentials-n\",\n  },\n  goose: {\n    id: \"goose\",\n    name: \"Goose\",\n    modelAgnostic: true,\n    supportsInBandAbort: false,\n    surfaces: [\n      \"anthropic-messages\",\n      \"openai-completions\",\n      \"google-generative-ai\",\n      \"bedrock-converse-stream\",\n    ],\n    providerPlurality: \"credentials-n\",\n  },\n  continue: {\n    id: \"continue\",\n    name: \"Continue CLI\",\n    modelAgnostic: true,\n    supportsInBandAbort: false,\n    surfaces: [\"anthropic-messages\", \"openai-completions\", \"google-generative-ai\"],\n    providerPlurality: \"credentials-n\",\n  },\n};\n\n/**\n * Back-compat alias for {@link BUILTIN_DRIVER_CATALOG}. Consumers and tests that\n * predate the plugin-registry refactor still import `DRIVER_CATALOG`.\n *\n * @docLink packages/bridge/api-reference#registry\n */\nexport const DRIVER_CATALOG = BUILTIN_DRIVER_CATALOG;\n\nlet _driversRegistered = false;\n\n/**\n * Register every built-in driver's `DriverTarget` into the plugin registry.\n *\n * This is the single id → module map in bridge core. Every specifier is a\n * literal string so `bun --compile` can statically bundle the driver module\n * (and, transitively, its SDK). The in-process-SDK harnesses (`claude-sdk`,\n * `codex`) are wrapped in build-constant guards so an excluded harness's\n * `await import` folds to dead code in the compiled binary. `omp` and `echo`\n * carry no SDK weight and are always available.\n *\n * **Static import discipline.** Every `import()` specifier below must be a\n * string literal — never aliased through a variable. Indirection defeats\n * `bun --compile`'s static analysis and silently drops the module from the\n * binary.\n *\n * Idempotent: guarded by a module flag so a second call is a no-op (a duplicate\n * `register` would otherwise throw `RegistrationError`).\n *\n * @docLink packages/bridge/api-reference#registry\n */\nexport async function registerBuiltinDrivers(\n  registry: PluginRegistry = pluginRegistry,\n): Promise<void> {\n  if (registry === pluginRegistry && _driversRegistered) return;\n\n  if (!registry.get(\"driver\", \"omp\")) {\n    const m = await import(\"@skaile/workspaces/drivers/omp\");\n    registry.register(\"driver\", m.ompDriverTarget);\n  }\n  if (!registry.get(\"driver\", \"echo\")) {\n    const m = await import(\"@skaile/workspaces/drivers/echo\");\n    registry.register(\"driver\", m.echoDriverTarget);\n  }\n  if (INCLUDE_CLAUDE_SDK && !registry.get(\"driver\", \"claude-sdk\")) {\n    const m = await import(\"@skaile/workspaces/drivers/claude-sdk\");\n    registry.register(\"driver\", m.claudeSdkDriverTarget);\n  }\n  if (INCLUDE_CODEX && !registry.get(\"driver\", \"codex\")) {\n    const m = await import(\"@skaile/workspaces/drivers/codex\");\n    registry.register(\"driver\", m.codexDriverTarget);\n  }\n  // Subprocess CLI harnesses spawn an external binary the user installs\n  // separately — no bundled SDK to dead-code-strip, so (like omp/echo) they\n  // carry no build constant and are always registered.\n  if (!registry.get(\"driver\", \"gemini\")) {\n    const m = await import(\"@skaile/workspaces/drivers/gemini\");\n    registry.register(\"driver\", m.geminiDriverTarget);\n  }\n  if (!registry.get(\"driver\", \"qwen\")) {\n    const m = await import(\"@skaile/workspaces/drivers/qwen\");\n    registry.register(\"driver\", m.qwenDriverTarget);\n  }\n  if (!registry.get(\"driver\", \"opencode\")) {\n    const m = await import(\"@skaile/workspaces/drivers/opencode\");\n    registry.register(\"driver\", m.opencodeDriverTarget);\n  }\n  if (!registry.get(\"driver\", \"goose\")) {\n    const m = await import(\"@skaile/workspaces/drivers/goose\");\n    registry.register(\"driver\", m.gooseDriverTarget);\n  }\n  if (!registry.get(\"driver\", \"continue\")) {\n    const m = await import(\"@skaile/workspaces/drivers/continue\");\n    registry.register(\"driver\", m.continueDriverTarget);\n  }\n\n  if (registry === pluginRegistry) _driversRegistered = true;\n}\n\n/**\n * Creates a new driver instance for the given harness id.\n *\n * Ensures the built-in driver targets are registered (idempotent), then looks\n * up the target in the plugin registry and calls its `create()`. The returned\n * driver has not been started yet — call `driver.start()` before sending\n * prompts.\n *\n * @param id - Registered driver identifier (e.g. `\"omp\"`, `\"claude-sdk\"`).\n * @param config - Configuration forwarded to the driver constructor.\n * @param ctx - Optional driver context (logger / abort signal). Defaults to `{}`.\n * @returns A freshly constructed (not yet started) {@link AgentDriver}.\n * @throws {Error} When `id` is a known harness excluded from this build, or\n *   when `id` does not match any registered driver at all.\n * @docLink packages/bridge/api-reference#registry\n */\nexport async function createDriver(\n  id: string,\n  config: AgentConfig,\n  ctx?: DriverContext,\n): Promise<AgentDriver> {\n  const target = await resolveDriverTarget(id);\n  return target.create(config, ctx ?? {});\n}\n\n/**\n * Resolve a registered driver target by id, ensuring the built-ins are\n * registered first. Throws the canonical \"not bundled\" / \"unknown driver\"\n * errors so every caller (`createDriver`, `listModelsForDriver`) reports an\n * unrecognized id the same way instead of silently degrading.\n *\n * @throws {Error} When `id` is a known harness excluded from this build, or\n *   when `id` does not match any registered driver at all.\n */\nasync function resolveDriverTarget(id: string) {\n  await registerBuiltinDrivers();\n  const target = pluginRegistry.get(\"driver\", id);\n  if (!target) {\n    if (id in BUILTIN_DRIVER_CATALOG) {\n      throw new Error(`Agent driver \"${id}\" is not bundled in this build.`);\n    }\n    throw new Error(\n      `Unknown agent driver: \"${id}\". Available: ${listDrivers()\n        .map((d) => d.id)\n        .join(\", \")}`,\n    );\n  }\n  return target;\n}\n\n/**\n * Returns the capability metadata for every available driver.\n *\n * Enumerates every built-in harness from {@link BUILTIN_DRIVER_CATALOG} without\n * loading a single driver module or harness SDK, then merges in any third-party\n * driver targets registered into the plugin registry that are not already in\n * the catalog. Use this to populate driver selection UIs.\n *\n * @returns Array of {@link DriverInfo} objects, one per available driver.\n * @docLink packages/bridge/api-reference#registry\n */\nexport function listDrivers(): DriverInfo[] {\n  const merged = new Map<string, DriverInfo>();\n  for (const info of Object.values(BUILTIN_DRIVER_CATALOG)) {\n    merged.set(info.id, info);\n  }\n  for (const meta of pluginRegistry.list(\"driver\")) {\n    if (!merged.has(meta.id)) {\n      // Third-party drivers carry no DriverInfo row; read the capability flags\n      // off the registered target (defaulting to conservative false) so a\n      // model-agnostic / in-band-abort harness can still advertise them.\n      const target = pluginRegistry.get(\"driver\", meta.id);\n      merged.set(meta.id, {\n        id: meta.id,\n        name: meta.displayName,\n        modelAgnostic: target?.modelAgnostic ?? false,\n        supportsInBandAbort: target?.supportsInBandAbort ?? false,\n        // Left absent when the target declares nothing: \"speaks no surface\" and\n        // \"did not say\" are different claims, and the platform resolver must be\n        // able to tell them apart before it filters a driver out.\n        ...(target?.surfaces ? { surfaces: target.surfaces } : {}),\n        ...(target?.providerPlurality ? { providerPlurality: target.providerPlurality } : {}),\n        ...(target?.capabilities ? { capabilities: target.capabilities } : {}),\n      });\n    }\n  }\n  return [...merged.values()];\n}\n\n/**\n * List models available to a specific driver without starting a full agent session.\n *\n * Ensures the built-in driver targets are registered (idempotent), then\n * delegates to the target's optional `listModels()`. Throws on an unknown /\n * not-bundled id (same contract as {@link createDriver}); returns `[]` only\n * when the target exists but exposes no `listModels`.\n *\n * @param driverId - Registered driver id (e.g. `\"omp\"`, `\"claude-sdk\"`, `\"codex\"`).\n * @param registry - The AI provider registry to discover against — either the\n *   bare `id → entry` map or a merged view. Each entry names its credential by\n *   reference, resolved through `options` and delivered to the throwaway\n *   driver as `SKAILE_AIP_<ID>_KEY` environment entries.\n * @param options - Which entry to restrict to, and where `env:` / `platform:`\n *   references resolve from. Defaults to the whole registry against\n *   `process.env`.\n * @throws {Error} When `driverId` is unknown or excluded from this build.\n * @docLink packages/bridge/api-reference#registry\n */\nexport async function listModelsForDriver(\n  driverId: string,\n  registry: AIProviderRegistry | MergedAIProviderRegistry,\n  options?: RegistryCredentialOptions,\n): Promise<ModelEntry[]> {\n  const target = await resolveDriverTarget(driverId);\n  return (await target.listModels?.(registry, options)) ?? [];\n}\n"]}

package/dist/chunk-L2AMXONH.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../bridge/src/mcp-tool-schema-filter.ts"],"names":[],"mappings":";;;;AAuBO,IAAM,yBAAA,GAA4B;AAEzC,IAAM,kBAAA,GAAqB,8CAAA;AAC3B,IAAM,gBAAA,GAAmB,GAAA;AAYzB,IAAI,aAAA,GAAyC,IAAA;AAE7C,SAAS,wBAAA,GAA6C;AACpD,EAAA,IAAI,eAAe,OAAO,aAAA;AAG1B,EAAA,MAAM,GAAA,GAAM,IAAI,OAAA,CAAQ,EAAE,MAAA,EAAQ,OAAO,eAAA,EAAiB,KAAA,EAAO,MAAA,EAAQ,KAAA,EAAO,CAAA;AAChF,EAAA,MAAM,QAAA,GAAW,GAAA,CAAI,SAAA,CAAU,kBAAkB,CAAA;AACjD,EAAA,IAAI,CAAC,QAAA,EAAU,MAAM,IAAI,MAAM,8CAA8C,CAAA;AAC7E,EAAA,aAAA,GAAgB,QAAA;AAChB,EAAA,OAAO,QAAA;AACT;AAOO,SAAS,sBAAsB,MAAA,EAAgC;AACpE,EAAA,IAAI,CAAC,UAAU,OAAO,MAAA,KAAW,YAAY,KAAA,CAAM,OAAA,CAAQ,MAAM,CAAA,EAAG,OAAO,IAAA;AAC3E,EAAA,MAAM,QAAS,MAAA,CAAoC,UAAA;AACnD,EAAA,IAAI,CAAC,SAAS,OAAO,KAAA,KAAU,YAAY,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG,OAAO,IAAA;AACxE,EAAA,KAAA,MAAW,GAAA,IAAO,MAAA,CAAO,IAAA,CAAK,KAAK,CAAA,EAAG;AACpC,IAAA,IAAI,CAAC,yBAAA,CAA0B,IAAA,CAAK,GAAG,CAAA,EAAG;AACxC,MAAA,OAAO,gBAAgB,IAAA,CAAK,SAAA,CAAU,GAAG,CAAC,CAAA,gBAAA,EAAmB,0BAA0B,MAAM,CAAA,CAAA;AAAA,IAC/F;AAAA,EACF;AACA,EAAA,OAAO,IAAA;AACT;AAOO,SAAS,qBAAqB,MAAA,EAAgC;AACnE,EAAA,IAAI,CAAC,UAAU,OAAO,MAAA,KAAW,YAAY,KAAA,CAAM,OAAA,CAAQ,MAAM,CAAA,EAAG;AAClE,IAAA,OAAO,mCAAA;AAAA,EACT;AACA,EAAA,MAAM,SAAA,GAAY,sBAAsB,MAAM,CAAA;AAC9C,EAAA,IAAI,WAAW,OAAO,SAAA;AAKtB,EAAA,MAAM,WAAW,wBAAA,EAAyB;AAC1C,EAAA,IAAI,CAAC,QAAA,CAAS,MAAM,CAAA,EAAG;AACrB,IAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,MAAA,GAAS,CAAC,CAAA;AACjC,IAAA,MAAM,KAAA,GAAQ,OAAO,YAAA,IAAgB,GAAA;AACrC,IAAA,OAAO,CAAA,qCAAA,EAAwC,KAAK,CAAA,CAAA,EAAI,KAAA,EAAO,WAAW,YAAY,CAAA,CAAA;AAAA,EACxF;AACA,EAAA,OAAO,IAAA;AACT;AAsBA,IAAM,iBAAA,uBAAwB,OAAA,EAAkC;AAEhE,SAAS,cAAc,MAAA,EAA+C;AACpE,EAAA,IAAI,CAAC,MAAA,IAAU,OAAO,MAAA,KAAW,UAAU,OAAO,IAAA;AAClD,EAAA,MAAM,CAAA,GAAI,MAAA;AACV,EAAA,IAAI,CAAA,CAAE,IAAA,KAAS,KAAA,IAAS,CAAC,CAAA,CAAE,YAAY,OAAO,CAAA,CAAE,QAAA,KAAa,QAAA,EAAU,OAAO,IAAA;AAC9E,EAAA,MAAM,OAAO,CAAA,CAAE,QAAA;AACf,EAAA,OAAO,OAAO,KAAK,OAAA,KAAY,UAAA,IAAc,OAAO,IAAA,CAAK,KAAA,KAAU,aAAa,IAAA,GAAO,IAAA;AACzF;AAEA,SAAS,WAAA,CAAe,GAAe,IAAA,EAA0B;AAC/D,EAAA,IAAI,KAAA;AACJ,EAAA,MAAM,OAAA,GAAU,IAAI,OAAA,CAAe,CAAC,GAAG,MAAA,KAAW;AAChD,IAAA,KAAA,GAAQ,UAAA,CAAW,MAAM,MAAA,CAAO,IAAI,KAAA,CAAM,GAAG,IAAI,CAAA,UAAA,CAAY,CAAC,CAAA,EAAG,gBAAgB,CAAA;AAAA,EACnF,CAAC,CAAA;AACD,EAAA,OAAO,OAAA,CAAQ,IAAA,CAAK,CAAC,CAAA,EAAG,OAAO,CAAC,CAAA,CAAE,OAAA,CAAQ,MAAM,YAAA,CAAa,KAAK,CAAC,CAAA;AACrE;AAOA,eAAe,mBAAmB,QAAA,EAAsD;AACtF,EAAA,MAAM,CAAC,UAAA,EAAY,UAAU,CAAA,GAAI,kBAAkB,gBAAA,EAAiB;AACpE,EAAA,MAAM,OAAA,uBAAc,GAAA,EAAoD;AACxE,EAAA,UAAA,CAAW,SAAA,GAAY,CAAC,GAAA,KAAQ;AAC9B,IAAA,MAAM,CAAA,GAAI,GAAA;AACV,IAAA,MAAM,KAAK,OAAO,CAAA,CAAE,EAAA,KAAO,QAAA,GAAW,EAAE,EAAA,GAAK,MAAA;AAC7C,IAAA,IAAI,OAAO,MAAA,EAAW;AACtB,IAAA,OAAA,CAAQ,GAAA,CAAI,EAAE,CAAA,GAAI,CAAC,CAAA;AACnB,IAAA,OAAA,CAAQ,OAAO,EAAE,CAAA;AAAA,EACnB,CAAA;AACA,EAAA,IAAI,MAAA,GAAS,CAAA;AACb,EAAA,MAAM,IAAA,GAAO,CAAC,MAAA,EAAgB,MAAA,KAC5B,WAAA;AAAA,IACE,IAAI,OAAA,CAAiC,CAAC,OAAA,EAAS,MAAA,KAAW;AACxD,MAAA,MAAM,EAAA,GAAK,MAAA,EAAA;AACX,MAAA,OAAA,CAAQ,GAAA,CAAI,IAAI,OAAO,CAAA;AACvB,MAAA,UAAA,CAAW,IAAA,CAAK,EAAE,OAAA,EAAS,KAAA,EAAO,EAAA,EAAI,QAAQ,MAAA,EAAQ,CAAA,CAAE,KAAA,CAAM,MAAM,CAAA;AAAA,IACtE,CAAC,CAAA;AAAA,IACD;AAAA,GACF,CAAE,IAAA,CAAK,CAAC,GAAA,KAAQ;AACd,IAAA,IAAI,GAAA,CAAI,KAAA,EAAO,MAAM,IAAI,KAAA,CAAM,CAAA,EAAG,MAAM,CAAA,SAAA,EAAY,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,KAAK,CAAC,CAAA,CAAE,CAAA;AAC/E,IAAA,OAAQ,GAAA,CAAI,UAAU,EAAC;AAAA,EACzB,CAAC,CAAA;AAEH,EAAA,MAAM,WAAW,KAAA,EAAM;AACvB,EAAA,MAAM,QAAA,CAAS,QAAQ,UAAU,CAAA;AACjC,EAAA,IAAI;AACF,IAAA,MAAM,KAAK,YAAA,EAAc;AAAA,MACvB,eAAA,EAAiB,YAAA;AAAA,MACjB,cAAc,EAAC;AAAA,MACf,UAAA,EAAY,EAAE,IAAA,EAAM,2BAAA,EAA6B,SAAS,OAAA;AAAQ,KACnE,CAAA;AACD,IAAA,MAAM,WAAW,IAAA,CAAK,EAAE,SAAS,KAAA,EAAO,MAAA,EAAQ,6BAA6B,CAAA;AAC7E,IAAA,MAAM,QAAoB,EAAC;AAC3B,IAAA,IAAI,MAAA;AACJ,IAAA,GAAG;AACD,MAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,YAAA,EAAc,SAAS,EAAE,MAAA,EAAO,GAAI,EAAE,CAAA;AAC9D,MAAA,KAAA,CAAM,IAAA,CAAK,GAAK,IAAA,CAAK,KAAA,IAAoC,EAAG,CAAA;AAC5D,MAAA,MAAA,GAAS,OAAO,IAAA,CAAK,UAAA,KAAe,QAAA,GAAW,KAAK,UAAA,GAAa,KAAA,CAAA;AAAA,IACnE,CAAA,QAAS,MAAA;AACT,IAAA,OAAO,KAAA;AAAA,EACT,CAAA,SAAE;AAEA,IAAA,MAAM,QAAA,CAAS,KAAA,EAAM,CAAE,KAAA,CAAM,MAAM;AAAA,IAAC,CAAC,CAAA;AAAA,EACvC;AACF;AAEA,IAAM,aAAa,YAAA,CAAa,EAAE,MAAM,KAAA,EAAO,OAAA,EAAS,sBAAsB,CAAA;AAe9E,eAAsB,6BAAA,CACpB,MAAA,EACA,MAAA,EACA,GAAA,GAAc,UAAA,EACa;AAC3B,EAAA,MAAM,QAAA,GAAW,cAAc,MAAM,CAAA;AACrC,EAAA,IAAI,CAAC,QAAA,EAAU,OAAO,EAAC;AACvB,EAAA,MAAM,MAAA,GAAS,iBAAA,CAAkB,GAAA,CAAI,QAAQ,CAAA;AAC7C,EAAA,IAAI,QAAQ,OAAO,MAAA;AACnB,EAAA,MAAM,aAAa,QAAA,CAAS,gBAAA;AAC5B,EAAA,IAAI,CAAC,cAAc,MAAA,CAAO,IAAA,CAAK,UAAU,CAAA,CAAE,MAAA,KAAW,CAAA,EAAG,OAAO,EAAC;AACjE,EAAA,IAAI,QAAA,CAAS,eAAc,EAAG;AAG5B,IAAA,GAAA,CAAI,KAAA,CAAM,+DAAA,EAAiE,EAAE,MAAA,EAAQ,CAAA;AACrF,IAAA,OAAO,EAAC;AAAA,EACV;AAEA,EAAA,IAAI,SAAA;AACJ,EAAA,IAAI;AACF,IAAA,SAAA,GAAY,MAAM,mBAAmB,QAAQ,CAAA;AAAA,EAC/C,SAAS,GAAA,EAAK;AACZ,IAAA,GAAA,CAAI,KAAK,qEAAA,EAAuE;AAAA,MAC9E,MAAA;AAAA,MACA,OAAO,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACvD,CAAA;AACD,IAAA,OAAO,EAAC;AAAA,EACV;AAEA,EAAA,MAAM,UAA4B,EAAC;AACnC,EAAA,KAAA,MAAW,QAAQ,SAAA,EAAW;AAC5B,IAAA,MAAM,MAAA,GAAS,oBAAA,CAAqB,IAAA,CAAK,WAAW,CAAA;AACpD,IAAA,IAAI,CAAC,MAAA,EAAQ;AACb,IAAA,MAAM,MAAA,GAAS,UAAA,CAAW,IAAA,CAAK,IAAI,CAAA;AACnC,IAAA,IAAI,OAAO,MAAA,EAAQ,OAAA,KAAY,UAAA,EAAY;AACzC,MAAA,GAAA,CAAI,KAAK,6DAAA,EAA+D;AAAA,QACtE,MAAA;AAAA,QACA,MAAM,IAAA,CAAK,IAAA;AAAA,QACX;AAAA,OACD,CAAA;AACD,MAAA;AAAA,IACF;AACA,IAAA,MAAA,CAAO,OAAA,EAAQ;AACf,IAAA,OAAA,CAAQ,KAAK,EAAE,MAAA,EAAQ,MAAM,IAAA,CAAK,IAAA,EAAM,QAAQ,CAAA;AAChD,IAAA,GAAA,CAAI,IAAA,CAAK,0CAA0C,EAAE,MAAA,EAAQ,MAAM,IAAA,CAAK,IAAA,EAAM,QAAQ,CAAA;AAAA,EACxF;AACA,EAAA,iBAAA,CAAkB,GAAA,CAAI,UAAU,OAAO,CAAA;AACvC,EAAA,OAAO,OAAA;AACT;AAMO,SAAS,yBAAyB,OAAA,EAAmD;AAC1F,EAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,CAAA,EAAG,OAAO,IAAA;AACjC,EAAA,MAAM,QAAQ,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,KAAM,GAAG,CAAA,CAAE,IAAI,CAAA,SAAA,EAAY,CAAA,CAAE,MAAM,CAAA,EAAA,EAAK,CAAA,CAAE,MAAM,CAAA,CAAA,CAAG,CAAA,CAAE,KAAK,IAAI,CAAA;AACzF,EAAA,OAAO,0FAA0F,KAAK,CAAA,0BAAA,CAAA;AACxG","file":"chunk-L2AMXONH.js","sourcesContent":["/**\n * Drop MCP tools whose input schema the Claude API would reject.\n *\n * The API refuses a whole request when any one tool fails either check below,\n * so a single bad tool turns every turn of the session into a 400. The Claude\n * CLI drops such tools itself, but only after it has fetched its remote\n * feature flags; with flag fetching off (`DISABLE_TELEMETRY=1` and friends)\n * it sends them as they are. The driver therefore runs both checks itself\n * before any tool reaches the CLI:\n *\n *   1. every top-level property key matches {@link TOOL_PROPERTY_KEY_PATTERN};\n *   2. the schema is valid JSON Schema draft 2020-12 (ajv's meta-schema).\n *\n * In-process servers are inspected through their own `tools/list`, over an\n * in-memory transport, so the checked schema is byte-for-byte what the CLI\n * would receive (zod shape → JSON Schema exactly as the server converts it).\n */\nimport { InMemoryTransport } from \"@modelcontextprotocol/sdk/inMemory.js\";\nimport { createLogger } from \"@skaile/workspaces/core/logging\";\nimport type { Logger } from \"@skaile/workspaces/types\";\nimport { Ajv2020, type ValidateFunction } from \"ajv/dist/2020.js\";\n\n/** The Claude API's rule for top-level `input_schema.properties` keys. */\nexport const TOOL_PROPERTY_KEY_PATTERN = /^[a-zA-Z0-9_.-]{1,64}$/;\n\nconst DRAFT_2020_12_META = \"https://json-schema.org/draft/2020-12/schema\";\nconst PROBE_TIMEOUT_MS = 5_000;\n\n/** One tool removed before it reached the CLI. */\nexport interface DroppedMcpTool {\n  /** MCP server name as passed to the SDK (`skaile-capabilities`, `skaile-connectors`, ...). */\n  server: string;\n  /** Tool name on that server. */\n  tool: string;\n  /** Human-readable reason; safe to show to the agent. */\n  reason: string;\n}\n\nlet metaValidator: ValidateFunction | null = null;\n\nfunction draft202012MetaValidator(): ValidateFunction {\n  if (metaValidator) return metaValidator;\n  // Only the bundled meta-schema is compiled; tool schemas are validated as\n  // data. validateFormats:false — the API checks structure, not `format` strings.\n  const ajv = new Ajv2020({ strict: false, validateFormats: false, logger: false });\n  const validate = ajv.getSchema(DRAFT_2020_12_META);\n  if (!validate) throw new Error(\"ajv draft 2020-12 meta-schema is unavailable\");\n  metaValidator = validate;\n  return validate;\n}\n\n/**\n * Check only the property-key rule (rule 1).\n *\n * @returns `null` when every top-level property key is acceptable, otherwise the reason.\n */\nexport function checkToolPropertyKeys(schema: unknown): string | null {\n  if (!schema || typeof schema !== \"object\" || Array.isArray(schema)) return null;\n  const props = (schema as { properties?: unknown }).properties;\n  if (!props || typeof props !== \"object\" || Array.isArray(props)) return null;\n  for (const key of Object.keys(props)) {\n    if (!TOOL_PROPERTY_KEY_PATTERN.test(key)) {\n      return `property key ${JSON.stringify(key)} does not match ${TOOL_PROPERTY_KEY_PATTERN.source}`;\n    }\n  }\n  return null;\n}\n\n/**\n * Check one tool input schema, as it goes on the wire, against both API rules.\n *\n * @returns `null` when the schema is acceptable, otherwise the reason it is not.\n */\nexport function checkToolInputSchema(schema: unknown): string | null {\n  if (!schema || typeof schema !== \"object\" || Array.isArray(schema)) {\n    return \"input schema is not a JSON object\";\n  }\n  const keyReason = checkToolPropertyKeys(schema);\n  if (keyReason) return keyReason;\n  // Validated against the 2020-12 meta-schema regardless of the schema's own\n  // `$schema` (the MCP SDK stamps draft-07 on every in-process tool), because\n  // the API names 2020-12 in its 400. Deliberate consequence: a draft-07-only\n  // construct such as a tuple's `items: [...]` (`z.tuple()`) is dropped too.\n  const validate = draft202012MetaValidator();\n  if (!validate(schema)) {\n    const first = validate.errors?.[0];\n    const where = first?.instancePath || \"/\";\n    return `not valid JSON Schema draft 2020-12: ${where} ${first?.message ?? \"is invalid\"}`;\n  }\n  return null;\n}\n\n// ── In-process (type: \"sdk\") servers ─────────────────────────────────────────\n\ninterface RegisteredToolLike {\n  enabled?: boolean;\n  disable?: () => void;\n}\n\ninterface McpServerInstanceLike {\n  connect(transport: unknown): Promise<void>;\n  close(): Promise<void>;\n  isConnected?: () => boolean;\n  _registeredTools?: Record<string, RegisteredToolLike>;\n}\n\ninterface WireTool {\n  name: string;\n  inputSchema?: unknown;\n}\n\n/** Instances already filtered; their bad tools stay disabled for good. */\nconst filteredInstances = new WeakMap<object, DroppedMcpTool[]>();\n\nfunction sdkInstanceOf(config: unknown): McpServerInstanceLike | null {\n  if (!config || typeof config !== \"object\") return null;\n  const c = config as { type?: unknown; instance?: unknown };\n  if (c.type !== \"sdk\" || !c.instance || typeof c.instance !== \"object\") return null;\n  const inst = c.instance as McpServerInstanceLike;\n  return typeof inst.connect === \"function\" && typeof inst.close === \"function\" ? inst : null;\n}\n\nfunction withTimeout<T>(p: Promise<T>, what: string): Promise<T> {\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  const timeout = new Promise<never>((_, reject) => {\n    timer = setTimeout(() => reject(new Error(`${what} timed out`)), PROBE_TIMEOUT_MS);\n  });\n  return Promise.race([p, timeout]).finally(() => clearTimeout(timer));\n}\n\n/**\n * Speak just enough JSON-RPC to read the server's `tools/list`. A hand-rolled\n * exchange rather than the SDK `Client`, whose result validation would reject\n * the whole list over the one malformed tool this exists to find.\n */\nasync function listInProcessTools(instance: McpServerInstanceLike): Promise<WireTool[]> {\n  const [clientSide, serverSide] = InMemoryTransport.createLinkedPair();\n  const pending = new Map<number, (msg: Record<string, unknown>) => void>();\n  clientSide.onmessage = (msg) => {\n    const m = msg as Record<string, unknown>;\n    const id = typeof m.id === \"number\" ? m.id : undefined;\n    if (id === undefined) return;\n    pending.get(id)?.(m);\n    pending.delete(id);\n  };\n  let nextId = 1;\n  const call = (method: string, params: Record<string, unknown>) =>\n    withTimeout(\n      new Promise<Record<string, unknown>>((resolve, reject) => {\n        const id = nextId++;\n        pending.set(id, resolve);\n        clientSide.send({ jsonrpc: \"2.0\", id, method, params }).catch(reject);\n      }),\n      method,\n    ).then((res) => {\n      if (res.error) throw new Error(`${method} failed: ${JSON.stringify(res.error)}`);\n      return (res.result ?? {}) as Record<string, unknown>;\n    });\n\n  await clientSide.start();\n  await instance.connect(serverSide);\n  try {\n    await call(\"initialize\", {\n      protocolVersion: \"2025-06-18\",\n      capabilities: {},\n      clientInfo: { name: \"skaile-tool-schema-filter\", version: \"1.0.0\" },\n    });\n    await clientSide.send({ jsonrpc: \"2.0\", method: \"notifications/initialized\" });\n    const tools: WireTool[] = [];\n    let cursor: string | undefined;\n    do {\n      const page = await call(\"tools/list\", cursor ? { cursor } : {});\n      tools.push(...((page.tools as WireTool[] | undefined) ?? []));\n      cursor = typeof page.nextCursor === \"string\" ? page.nextCursor : undefined;\n    } while (cursor);\n    return tools;\n  } finally {\n    // Leaves the instance unconnected so the SDK can attach its own transport.\n    await instance.close().catch(() => {});\n  }\n}\n\nconst defaultLog = createLogger({ kind: \"mcp\", subkind: \"tool-schema-filter\" });\n\n/**\n * Disable every tool on an in-process MCP server whose wire input schema\n * fails {@link checkToolInputSchema}. Valid tools on the same server stay.\n *\n * Mutates the server in place (`RegisteredTool.disable()` hides a tool from\n * `tools/list` and refuses calls to it). Non-`sdk` configs (stdio/sse/http)\n * are returned untouched: the CLI spawns those, so the bridge cannot see\n * their tools. Fails open — a server that cannot be inspected is passed\n * through and a warning is logged, because blocking it would cost the\n * session every one of its valid tools.\n *\n * @returns the tools dropped from this server (empty when none or not inspectable).\n */\nexport async function filterInProcessMcpServerTools(\n  server: string,\n  config: unknown,\n  log: Logger = defaultLog,\n): Promise<DroppedMcpTool[]> {\n  const instance = sdkInstanceOf(config);\n  if (!instance) return [];\n  const cached = filteredInstances.get(instance);\n  if (cached) return cached;\n  const registered = instance._registeredTools;\n  if (!registered || Object.keys(registered).length === 0) return [];\n  if (instance.isConnected?.()) {\n    // Already attached to a live query; it was either filtered when first\n    // passed or belongs to someone else's transport. Do not steal it.\n    log.debug(\"in-process MCP server already connected; schema check skipped\", { server });\n    return [];\n  }\n\n  let wireTools: WireTool[];\n  try {\n    wireTools = await listInProcessTools(instance);\n  } catch (err) {\n    log.warn(\"could not inspect in-process MCP server tools; passing it unchanged\", {\n      server,\n      error: err instanceof Error ? err.message : String(err),\n    });\n    return [];\n  }\n\n  const dropped: DroppedMcpTool[] = [];\n  for (const tool of wireTools) {\n    const reason = checkToolInputSchema(tool.inputSchema);\n    if (!reason) continue;\n    const handle = registered[tool.name];\n    if (typeof handle?.disable !== \"function\") {\n      log.warn(\"MCP tool has an invalid input schema but cannot be disabled\", {\n        server,\n        tool: tool.name,\n        reason,\n      });\n      continue;\n    }\n    handle.disable();\n    dropped.push({ server, tool: tool.name, reason });\n    log.warn(\"MCP tool dropped: invalid input schema\", { server, tool: tool.name, reason });\n  }\n  filteredInstances.set(instance, dropped);\n  return dropped;\n}\n\n/**\n * The line the agent reads about dropped tools, mirroring what the CLI\n * reports when it drops them itself. `null` when nothing was dropped.\n */\nexport function formatDroppedToolsNotice(dropped: readonly DroppedMcpTool[]): string | null {\n  if (dropped.length === 0) return null;\n  const items = dropped.map((d) => `${d.tool} (server ${d.server}: ${d.reason})`).join(\"; \");\n  return `Some MCP tools were not loaded because the Claude API would reject their input schema: ${items}. Do not try to call them.`;\n}\n"]}

package/dist/chunk-LW7ZI6EQ.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../transport/src/ws/server.ts"],"names":[],"mappings":";;;;;AAiDA,IAAM,oBAAA,GAAuB,GAAA;AAC7B,IAAM,wBAAA,GAA2B,CAAA;AAkBjC,SAAS,yBAAyB,GAAA,EAA6C;AAC7E,EAAA,IAAI,GAAA,CAAI,IAAA,KAAS,cAAA,EAAgB,OAAO,6BAAA;AAExC,EAAA,MAAM,WAAW,GAAA,CAAI,QAAA;AACrB,EAAA,IAAI,CAAC,YAAY,OAAO,QAAA,KAAa,YAAY,KAAA,CAAM,OAAA,CAAQ,QAAQ,CAAA,EAAG;AACxE,IAAA,OAAO,4BAAA;AAAA,EACT;AACA,EAAA,IAAI,OAAO,QAAA,CAAS,WAAA,KAAgB,QAAA,EAAU,OAAO,uCAAA;AACrD,EAAA,IAAI,OAAO,QAAA,CAAS,SAAA,KAAc,QAAA,EAAU,OAAO,qCAAA;AACnD,EAAA,IAAI,OAAO,QAAA,CAAS,SAAA,KAAc,QAAA,EAAU,OAAO,qCAAA;AAEnD,EAAA,MAAM,kBAAkB,GAAA,CAAI,eAAA;AAC5B,EAAA,IAAI,CAAC,mBAAmB,OAAO,eAAA,KAAoB,YAAY,KAAA,CAAM,OAAA,CAAQ,eAAe,CAAA,EAAG;AAC7F,IAAA,OAAO,mCAAA;AAAA,EACT;AACA,EAAA,IAAI,OAAO,eAAA,CAAgB,KAAA,KAAU,QAAA,EAAU,OAAO,wCAAA;AACtD,EAAA,IAAI,OAAO,eAAA,CAAgB,KAAA,KAAU,QAAA,EAAU,OAAO,wCAAA;AACtD,EAAA,IAAI,OAAO,eAAA,CAAgB,KAAA,KAAU,QAAA,EAAU,OAAO,wCAAA;AAEtD,EAAA,IACE,CAAC,GAAA,CAAI,cAAA,IACL,OAAO,GAAA,CAAI,cAAA,KAAmB,QAAA,IAC9B,KAAA,CAAM,OAAA,CAAQ,GAAA,CAAI,cAAc,CAAA,EAChC;AACA,IAAA,OAAO,kCAAA;AAAA,EACT;AAEA,EAAA,IAAI,CAAC,GAAA,CAAI,WAAA,IAAe,OAAO,GAAA,CAAI,WAAA,KAAgB,QAAA,IAAY,KAAA,CAAM,OAAA,CAAQ,GAAA,CAAI,WAAW,CAAA,EAAG;AAC7F,IAAA,OAAO,+BAAA;AAAA,EACT;AAEA,EAAA,OAAO,IAAA;AACT;AAyBO,IAAM,2BAAN,MAA0D;AAAA,EACvD,UAAA,GAAgC,IAAA;AAAA,EAChC,GAAA,GAA8B,IAAA;AAAA,EAC9B,YAAA,GAAiC,IAAA;AAAA,EACxB,IAAA;AAAA,EACA,GAAA;AAAA,EACA,IAAA;AAAA,EACA,SAAA;AAAA,EACA,WAAA;AAAA,EACA,cAAA;AAAA,EAEA,WAAA;AAAA,EACA,eAAA,uBAAsB,GAAA,EAAqC;AAAA,EAC3D,eAAA,uBAAsB,GAAA,EAAgB;AAAA,EACtC,kBAAA,uBAAyB,GAAA,EAAgB;AAAA,EAE1D,YAAY,OAAA,EAAiC;AAC3C,IAAA,IAAA,CAAK,OAAO,OAAA,CAAQ,IAAA;AACpB,IAAA,IAAA,CAAK,GAAA,GAAM,OAAA,CAAQ,KAAA,IAAS,OAAA,CAAQ,GAAA;AACpC,IAAA,IAAA,CAAK,OAAO,OAAA,CAAQ,IAAA;AACpB,IAAA,IAAA,CAAK,YAAY,OAAA,CAAQ,SAAA;AACzB,IAAA,IAAA,CAAK,cAAc,OAAA,CAAQ,WAAA;AAC3B,IAAA,IAAA,CAAK,WAAA,GAAc,QAAQ,WAAA,IAAe,oBAAA;AAC1C,IAAA,IAAA,CAAK,cAAA,GAAiB,QAAQ,cAAA,IAAkB,wBAAA;AAAA,EAClD;AAAA;AAAA,EAGA,MAAM,MAAA,GAAwB;AAC5B,IAAA,MAAM,UAAA,GAAa,YAAA,CAAa,CAAC,IAAA,EAAM,GAAA,KAAQ;AAC7C,MAAA,GAAA,CAAI,SAAA,CAAU,GAAA,EAAK,EAAE,cAAA,EAAgB,cAAc,CAAA;AACnD,MAAA,GAAA,CAAI,IAAI,qBAAqB,CAAA;AAAA,IAC/B,CAAC,CAAA;AAKD,IAAA,MAAM,WAAW,IAAA,CAAK,SAAA;AACtB,IAAA,MAAM,GAAA,GAAM,IAAI,eAAA,CAAgB;AAAA,MAC9B,MAAA,EAAQ,UAAA;AAAA,MACR,YAAA,EAAc,QAAA,GACV,CAAC,IAAA,EAAM,EAAA,KAAO;AACZ,QAAA,MAAM,YAAY,sBAAA,CAAuB,IAAA,CAAK,GAAA,CAAI,OAAA,CAAQ,wBAAwB,CAAC,CAAA;AACnF,QAAA,IAAI,SAAA,KAAc,IAAA,IAAQ,WAAA,CAAY,SAAA,EAAW,QAAQ,CAAA,EAAG;AAC1D,UAAA,EAAA,CAAG,IAAI,CAAA;AAAA,QACT,CAAA,MAAO;AACL,UAAA,IAAA,CAAK,IAAI,+CAA+C,CAAA;AACxD,UAAA,EAAA,CAAG,KAAA,EAAO,KAAK,cAAc,CAAA;AAAA,QAC/B;AAAA,MACF,CAAA,GACA;AAAA,KACL,CAAA;AACD,IAAA,GAAA,CAAI,GAAG,YAAA,EAAc,CAAC,OAAO,IAAA,CAAK,gBAAA,CAAiB,EAAE,CAAC,CAAA;AAItD,IAAA,MAAM,mBAAmB,MAAM;AAAA,IAAC,CAAA;AAChC,IAAA,GAAA,CAAI,EAAA,CAAG,SAAS,gBAAgB,CAAA;AAChC,IAAA,IAAA,CAAK,UAAA,GAAa,UAAA;AAClB,IAAA,IAAA,CAAK,GAAA,GAAM,GAAA;AAEX,IAAA,IAAI;AACF,MAAA,MAAM,eAAA,CAAgB,UAAA,EAAY,IAAA,CAAK,IAAA,EAAM,KAAK,IAAI,CAAA;AAAA,IACxD,SAAS,GAAA,EAAK;AACZ,MAAA,GAAA,CAAI,KAAA,EAAM;AACV,MAAA,IAAA,CAAK,GAAA,GAAM,IAAA;AACX,MAAA,IAAA,CAAK,UAAA,GAAa,IAAA;AAClB,MAAA,IAAI,eAAe,KAAA,IAAS,MAAA,IAAU,GAAA,IAAO,GAAA,CAAI,SAAS,YAAA,EAAc;AACtE,QAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,IAAA,GAAO,CAAA,EAAG,IAAA,CAAK,IAAI,CAAA,CAAA,EAAI,IAAA,CAAK,IAAI,CAAA,CAAA,GAAK,CAAA,KAAA,EAAQ,IAAA,CAAK,IAAI,CAAA,CAAA;AACzE,QAAA,MAAM,MAAA,CAAO,MAAA;AAAA,UACX,IAAI,KAAA;AAAA,YACF,GAAG,KAAK,CAAA,qEAAA;AAAA,WACV;AAAA,UACA,EAAE,MAAM,YAAA;AAAa,SACvB;AAAA,MACF;AACA,MAAA,MAAM,GAAA;AAAA,IACR,CAAA,SAAE;AACA,MAAA,GAAA,CAAI,GAAA,CAAI,SAAS,gBAAgB,CAAA;AAAA,IACnC;AAEA,IAAA,MAAM,IAAA,GAAO,WAAW,OAAA,EAAQ;AAChC,IAAA,MAAM,YAAY,OAAO,IAAA,KAAS,YAAY,IAAA,GAAO,IAAA,CAAK,OAAO,IAAA,CAAK,IAAA;AACtE,IAAA,MAAM,IAAA,GAAO,KAAK,IAAA,IAAQ,gBAAA;AAC1B,IAAA,IAAA,CAAK,GAAA;AAAA,MACH,CAAA,8BAAA,EAAiC,SAAS,CAAA,EAAA,EAAK,IAAI,KAAK,IAAA,CAAK,SAAA,GAAY,mBAAmB,mBAAmB,CAAA,CAAA;AAAA,KACjH;AAEA,IAAA,MAAM,OAAA,GACJ,CAAC,IAAA,CAAK,IAAA,IAAQ,IAAA,CAAK,IAAA,KAAS,SAAA,IAAa,IAAA,CAAK,IAAA,KAAS,IAAA,GACnD,WAAA,GACA,IAAA,CAAK,IAAA,CAAK,SAAS,GAAG,CAAA,IAAK,CAAC,IAAA,CAAK,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,GAClD,CAAA,CAAA,EAAI,IAAA,CAAK,IAAI,CAAA,CAAA,CAAA,GACb,IAAA,CAAK,IAAA;AACb,IAAA,IAAA,CAAK,WAAA,GAAc;AAAA,MACjB,GAAA,EAAK,CAAA,KAAA,EAAQ,OAAO,CAAA,CAAA,EAAI,SAAS,CAAA,CAAA;AAAA,MACjC,IAAA,EAAM,SAAA;AAAA,MACN,aAAA,EAAe,KAAK,SAAA,KAAc;AAAA,KACnC,CAAA;AAAA,EACH;AAAA,EAEQ,iBAAiB,EAAA,EAAqB;AAC5C,IAAA,IAAI,KAAK,YAAA,EAAc;AAIrB,MAAA,IAAA,CAAK,IAAI,2CAA2C,CAAA;AACpD,MAAA,IAAI;AACF,QAAA,IAAA,CAAK,YAAA,CAAa,KAAA,CAAM,IAAA,EAAM,4BAA4B,CAAA;AAAA,MAC5D,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF;AACA,IAAA,IAAA,CAAK,IAAI,8BAA8B,CAAA;AACvC,IAAA,IAAA,CAAK,YAAA,GAAe,EAAA;AACpB,IAAA,KAAA,MAAW,OAAA,IAAW,KAAK,eAAA,EAAiB;AAC1C,MAAA,OAAA,EAAQ;AAAA,IACV;AAEA,IAAA,MAAM,aAAA,GAAgB,IAAA,CAAK,cAAA,CAAe,EAAE,CAAA;AAE5C,IAAA,EAAA,CAAG,EAAA,CAAG,SAAA,EAAW,CAAC,IAAA,KAAS;AACzB,MAAA,IAAI;AACF,QAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,MAAA,CAAO,IAAI,CAAC,CAAA;AAKtC,QAAA,IAAI,UAAU,OAAO,MAAA,KAAW,QAAA,IAAY,MAAA,CAAO,SAAS,cAAA,EAAgB;AAC1E,UAAA,MAAM,MAAA,GAAS,yBAAyB,MAAM,CAAA;AAC9C,UAAA,IAAI,WAAW,IAAA,EAAM;AACnB,YAAA,IAAA,CAAK,GAAA,CAAI,CAAA,4CAAA,EAA+C,MAAM,CAAA,CAAE,CAAA;AAChE,YAAA,IAAA,CAAK,OAAA,CAAQ;AAAA,cACX,IAAA,EAAM,OAAA;AAAA,cACN,OAAA,EAAS,yBAAyB,MAAM,CAAA,CAAA;AAAA,cACxC,KAAA,EAAO;AAAA,aACR,CAAA;AACD,YAAA;AAAA,UACF;AAAA,QACF;AACA,QAAA,MAAM,GAAA,GAAM,MAAA;AACZ,QAAA,KAAA,MAAW,OAAA,IAAW,KAAK,eAAA,EAAiB;AAC1C,UAAA,OAAA,CAAQ,GAAG,CAAA;AAAA,QACb;AAAA,MACF,SAAS,GAAA,EAAK;AACZ,QAAA,IAAA,CAAK,OAAA,CAAQ;AAAA,UACX,IAAA,EAAM,OAAA;AAAA,UACN,OAAA,EAAS,oBAAoB,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA,CAAA;AAAA,UAC7E,KAAA,EAAO;AAAA,SACR,CAAA;AAAA,MACH;AAAA,IACF,CAAC,CAAA;AAED,IAAA,EAAA,CAAG,EAAA,CAAG,SAAS,MAAM;AACnB,MAAA,aAAA,EAAc;AACd,MAAA,IAAA,CAAK,IAAI,iCAAiC,CAAA;AAC1C,MAAA,IAAI,IAAA,CAAK,iBAAiB,EAAA,EAAI;AAC5B,QAAA,IAAA,CAAK,YAAA,GAAe,IAAA;AACpB,QAAA,KAAA,MAAW,OAAA,IAAW,KAAK,kBAAA,EAAoB;AAC7C,UAAA,OAAA,EAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF,CAAC,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,eAAe,EAAA,EAA2B;AAChD,IAAA,IAAI,IAAA,CAAK,cAAA,IAAkB,CAAA,EAAG,OAAO,MAAM;AAAA,IAAC,CAAA;AAC5C,IAAA,IAAI,MAAA,GAAS,CAAA;AACb,IAAA,MAAM,YAAY,MAAM;AACtB,MAAA,MAAA,GAAS,CAAA;AAAA,IACX,CAAA;AACA,IAAA,EAAA,CAAG,EAAA,CAAG,QAAQ,SAAS,CAAA;AACvB,IAAA,EAAA,CAAG,EAAA,CAAG,WAAW,SAAS,CAAA;AAC1B,IAAA,MAAM,KAAA,GAAQ,YAAY,MAAM;AAC9B,MAAA,IAAI,EAAA,CAAG,UAAA,KAAe,EAAA,CAAG,IAAA,EAAM;AAC/B,MAAA,IAAI,MAAA,IAAU,KAAK,cAAA,EAAgB;AACjC,QAAA,IAAA,CAAK,GAAA;AAAA,UACH,CAAA,wBAAA,EAA2B,MAAM,CAAA,eAAA,EAAkB,IAAA,CAAK,WAAW,CAAA,sBAAA;AAAA,SACrE;AACA,QAAA,aAAA,CAAc,KAAK,CAAA;AACnB,QAAA,EAAA,CAAG,SAAA,EAAU;AACb,QAAA;AAAA,MACF;AACA,MAAA,MAAA,EAAA;AACA,MAAA,IAAI;AACF,QAAA,EAAA,CAAG,IAAA,EAAK;AAAA,MACV,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF,CAAA,EAAG,KAAK,WAAW,CAAA;AACnB,IAAA,KAAA,CAAM,KAAA,IAAQ;AACd,IAAA,OAAO,MAAM,cAAc,KAAK,CAAA;AAAA,EAClC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,KAAA,GAAuB;AAC3B,IAAA,IAAI;AACF,MAAA,IAAA,CAAK,cAAc,SAAA,EAAU;AAAA,IAC/B,CAAA,CAAA,MAAQ;AAAA,IAER;AACA,IAAA,IAAA,CAAK,YAAA,GAAe,IAAA;AACpB,IAAA,IAAA,CAAK,KAAK,KAAA,EAAM;AAChB,IAAA,IAAA,CAAK,GAAA,GAAM,IAAA;AACX,IAAA,MAAM,aAAa,IAAA,CAAK,UAAA;AACxB,IAAA,IAAA,CAAK,UAAA,GAAa,IAAA;AAClB,IAAA,IAAI,UAAA,EAAY;AACd,MAAA,UAAA,CAAW,mBAAA,EAAoB;AAC/B,MAAA,MAAM,IAAI,QAAc,CAAC,OAAA,KAAY,WAAW,KAAA,CAAM,MAAM,OAAA,EAAS,CAAC,CAAA;AAAA,IACxE;AAAA,EACF;AAAA,EAEA,KAAK,KAAA,EAAyB;AAC5B,IAAA,IAAA,CAAK,QAAQ,KAAK,CAAA;AAAA,EACpB;AAAA,EAEA,UAAU,OAAA,EAAsD;AAC9D,IAAA,IAAA,CAAK,eAAA,CAAgB,IAAI,OAAO,CAAA;AAChC,IAAA,OAAO,MAAM;AACX,MAAA,IAAA,CAAK,eAAA,CAAgB,OAAO,OAAO,CAAA;AAAA,IACrC,CAAA;AAAA,EACF;AAAA,EAEA,UAAU,OAAA,EAAiC;AACzC,IAAA,IAAA,CAAK,eAAA,CAAgB,IAAI,OAAO,CAAA;AAChC,IAAA,OAAO,MAAM;AACX,MAAA,IAAA,CAAK,eAAA,CAAgB,OAAO,OAAO,CAAA;AAAA,IACrC,CAAA;AAAA,EACF;AAAA,EAEA,aAAa,OAAA,EAAiC;AAC5C,IAAA,IAAA,CAAK,kBAAA,CAAmB,IAAI,OAAO,CAAA;AACnC,IAAA,OAAO,MAAM;AACX,MAAA,IAAA,CAAK,kBAAA,CAAmB,OAAO,OAAO,CAAA;AAAA,IACxC,CAAA;AAAA,EACF;AAAA,EAEA,IAAI,SAAA,GAAqB;AACvB,IAAA,OAAO,KAAK,YAAA,KAAiB,IAAA;AAAA,EAC/B;AAAA;AAAA,EAGA,IAAI,SAAA,GAAgC;AAClC,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,UAAA,EAAY,OAAA,EAAQ;AACtC,IAAA,OAAO,OAAO,IAAA,KAAS,QAAA,IAAY,IAAA,GAAO,KAAK,IAAA,GAAO,MAAA;AAAA,EACxD;AAAA,EAEQ,QAAQ,IAAA,EAAqB;AACnC,IAAA,IAAI;AACF,MAAA,MAAM,SAAS,IAAA,CAAK,YAAA;AACpB,MAAA,IAAI,MAAA,IAAU,MAAA,CAAO,UAAA,KAAe,CAAA,EAAG;AACrC,QAAA,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AAAA,MAClC;AAAA,IACF,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AACF","file":"chunk-LW7ZI6EQ.js","sourcesContent":["/**\n * WebSocketServerTransport — `ws`-based WebSocket server.\n *\n * Accepts one client at a time. Implements ServerTransport from @skaile/workspaces/types.\n * Built on the `ws` package + `node:http`, both of which run under Node and Bun.\n */\n\nimport { createServer, type Server as HttpServer } from \"node:http\";\nimport { listenWithProbe } from \"@skaile/workspaces/core\";\nimport type { AgentCommand, AgentEvent, ServerTransport } from \"@skaile/workspaces/types\";\nimport { type WebSocket, WebSocketServer } from \"ws\";\nimport { decodeBearerFromHeader, tokensEqual } from \"./auth.js\";\n\n/** Moved to `@skaile/workspaces/core` (`core/bind`); re-exported so this subpath keeps it. */\nexport { needsWildcardProbe } from \"@skaile/workspaces/core\";\n\n/**\n * Options for {@link WebSocketServerTransport}.\n *\n * @param port - TCP port to bind to; `0` picks a free port (read it back via `boundPort`).\n * @param onLog - Optional callback for internal log lines (client connect/disconnect events).\n * @param host - Address to bind. Default: every interface (Node's unspecified address).\n *   `127.0.0.1` accepts local clients only.\n * @param authToken - When set, every upgrade must present this token via the\n *   `skaile-bearer.<base64url>` subprotocol or the handshake is rejected with\n *   HTTP 401. When unset, no auth is enforced (back-compatible default).\n * @param onListening - Called once the socket is bound, with the address a client\n *   connects to (`url`) and whether it needs a token. For a plain-text ready line\n *   (the `onLog` record carries the port only inside a log sentence).\n * @param heartbeatMs - Interval in milliseconds between pings to the active\n *   client. Default: 30 000.\n * @param maxMissedPongs - Heartbeat ticks the client may go without a pong (or\n *   any inbound frame) before its socket is terminated, so a client lost behind a\n *   dead path (no FIN) fires `onDisconnect` instead of swallowing every event\n *   sent to it. Default: 2, i.e. detection within 3 x `heartbeatMs`. `0` turns\n *   the heartbeat off. Every WebSocket client answers pings on its own.\n *\n * @docLink packages/transport/dev-guide#websocket-server-transport\n */\nexport interface WebSocketServerOptions {\n  port: number;\n  host?: string;\n  onLog?: (line: string) => void;\n  authToken?: string;\n  onListening?: (info: { url: string; port: number; tokenRequired: boolean }) => void;\n  heartbeatMs?: number;\n  maxMissedPongs?: number;\n}\n\nconst DEFAULT_HEARTBEAT_MS = 30_000;\nconst DEFAULT_MAX_MISSED_PONGS = 2;\n\n/**\n * Shape-validate a `session_init` frame at ingress before forwarding to the\n * runner. Protocol v3 requires the deterministic bootstrap envelope to carry\n * an identity tuple, a semver-shaped `protocolVersion`, a resolved config\n * object, and a `credentials` map keyed by `mounts` / `connectors`. Frames\n * that fail the guard are rejected on the wire so the runner never sees a\n * malformed boot envelope.\n *\n * Returns `null` when the frame is well-formed, or a human-readable reason\n * when it should be rejected.\n *\n * Spec: `_devlog/specs/2026-05-10-deterministic-session-bootstrap.md`\n * § \"SessionInitCommand schema\".\n *\n * @internal\n */\nfunction validateSessionInitShape(cmd: Record<string, unknown>): string | null {\n  if (cmd.type !== \"session_init\") return \"type must be 'session_init'\";\n\n  const identity = cmd.identity as Record<string, unknown> | undefined;\n  if (!identity || typeof identity !== \"object\" || Array.isArray(identity)) {\n    return \"identity must be an object\";\n  }\n  if (typeof identity.containerId !== \"string\") return \"identity.containerId must be a string\";\n  if (typeof identity.sessionId !== \"string\") return \"identity.sessionId must be a string\";\n  if (typeof identity.projectId !== \"string\") return \"identity.projectId must be a string\";\n\n  const protocolVersion = cmd.protocolVersion as Record<string, unknown> | undefined;\n  if (!protocolVersion || typeof protocolVersion !== \"object\" || Array.isArray(protocolVersion)) {\n    return \"protocolVersion must be an object\";\n  }\n  if (typeof protocolVersion.major !== \"number\") return \"protocolVersion.major must be a number\";\n  if (typeof protocolVersion.minor !== \"number\") return \"protocolVersion.minor must be a number\";\n  if (typeof protocolVersion.patch !== \"number\") return \"protocolVersion.patch must be a number\";\n\n  if (\n    !cmd.resolvedConfig ||\n    typeof cmd.resolvedConfig !== \"object\" ||\n    Array.isArray(cmd.resolvedConfig)\n  ) {\n    return \"resolvedConfig must be an object\";\n  }\n\n  if (!cmd.credentials || typeof cmd.credentials !== \"object\" || Array.isArray(cmd.credentials)) {\n    return \"credentials must be an object\";\n  }\n\n  return null;\n}\n\n/**\n * `ServerTransport` implementation backed by the `ws` package on top of a\n * `node:http` server.\n *\n * Enforces a single-client policy: if a new connection arrives while a client is\n * already connected, the stale connection is closed with code 4001 and replaced.\n * Incoming frames are parsed as JSON `AgentCommand` messages and fanned out to\n * registered `onCommand` handlers; outgoing `AgentEvent` objects are JSON-serialised\n * before sending. Call `listen()` to start accepting connections and `close()` to\n * shut down cleanly — `close()` terminates the active socket immediately rather\n * than keeping the event loop alive.\n *\n * @example\n * ```ts\n * const server = new WebSocketServerTransport({ port: 8080 });\n * await server.listen();\n * server.onCommand((cmd) => console.log(cmd));\n * server.send({ type: 'agent_end' });\n * await server.close();\n * ```\n *\n * @docLink packages/transport/dev-guide#websocket-server-transport\n */\nexport class WebSocketServerTransport implements ServerTransport {\n  private httpServer: HttpServer | null = null;\n  private wss: WebSocketServer | null = null;\n  private activeClient: WebSocket | null = null;\n  private readonly port: number;\n  private readonly log: (line: string) => void;\n  private readonly host?: string;\n  private readonly authToken?: string;\n  private readonly heartbeatMs: number;\n  private readonly maxMissedPongs: number;\n\n  private readonly onListening: WebSocketServerOptions[\"onListening\"];\n  private readonly commandHandlers = new Set<(command: AgentCommand) => void>();\n  private readonly connectHandlers = new Set<() => void>();\n  private readonly disconnectHandlers = new Set<() => void>();\n\n  constructor(options: WebSocketServerOptions) {\n    this.port = options.port;\n    this.log = options.onLog ?? console.log;\n    this.host = options.host;\n    this.authToken = options.authToken;\n    this.onListening = options.onListening;\n    this.heartbeatMs = options.heartbeatMs ?? DEFAULT_HEARTBEAT_MS;\n    this.maxMissedPongs = options.maxMissedPongs ?? DEFAULT_MAX_MISSED_PONGS;\n  }\n\n  /** Start the server and accept connections. */\n  async listen(): Promise<void> {\n    const httpServer = createServer((_req, res) => {\n      res.writeHead(200, { \"content-type\": \"text/plain\" });\n      res.end(\"skaile agent server\");\n    });\n    // When an auth token is configured, reject the upgrade at handshake time\n    // (HTTP 401) unless the client presents the matching bearer subprotocol.\n    // Rejecting here — before `connection` — keeps unauthenticated sockets from\n    // ever reaching the command handlers.\n    const expected = this.authToken;\n    const wss = new WebSocketServer({\n      server: httpServer,\n      verifyClient: expected\n        ? (info, cb) => {\n            const presented = decodeBearerFromHeader(info.req.headers[\"sec-websocket-protocol\"]);\n            if (presented !== null && tokensEqual(presented, expected)) {\n              cb(true);\n            } else {\n              this.log(\"[ws-server] rejecting unauthenticated upgrade\");\n              cb(false, 401, \"Unauthorized\");\n            }\n          }\n        : undefined,\n    });\n    wss.on(\"connection\", (ws) => this.handleConnection(ws));\n    // `ws` re-emits the http server's errors on `wss`; unhandled during the bind,\n    // that throws before the reject below runs and `listen()` hangs. Scoped to the\n    // bind so a post-startup server error still surfaces loudly.\n    const swallowBindError = () => {};\n    wss.on(\"error\", swallowBindError);\n    this.httpServer = httpServer;\n    this.wss = wss;\n\n    try {\n      await listenWithProbe(httpServer, this.port, this.host);\n    } catch (err) {\n      wss.close();\n      this.wss = null;\n      this.httpServer = null;\n      if (err instanceof Error && \"code\" in err && err.code === \"EADDRINUSE\") {\n        const where = this.host ? `${this.host}:${this.port}` : `port ${this.port}`;\n        throw Object.assign(\n          new Error(\n            `${where} is already in use: another process listens there. Pick another port.`,\n          ),\n          { code: \"EADDRINUSE\" },\n        );\n      }\n      throw err;\n    } finally {\n      wss.off(\"error\", swallowBindError);\n    }\n\n    const addr = httpServer.address();\n    const boundPort = typeof addr === \"object\" && addr ? addr.port : this.port;\n    const bind = this.host ?? \"all interfaces\";\n    this.log(\n      `[ws-server] listening on port ${boundPort} (${bind}; ${this.authToken ? \"token required\" : \"no authentication\"})`,\n    );\n    // A wildcard bind is reachable on loopback; that is the URL worth printing.\n    const urlHost =\n      !this.host || this.host === \"0.0.0.0\" || this.host === \"::\"\n        ? \"127.0.0.1\"\n        : this.host.includes(\":\") && !this.host.startsWith(\"[\")\n          ? `[${this.host}]`\n          : this.host;\n    this.onListening?.({\n      url: `ws://${urlHost}:${boundPort}`,\n      port: boundPort,\n      tokenRequired: this.authToken !== undefined,\n    });\n  }\n\n  private handleConnection(ws: WebSocket): void {\n    if (this.activeClient) {\n      // Close the stale connection instead of rejecting the new one.\n      // This handles the race where waitForWsReady's probe hasn't\n      // fully disconnected before the real gateway client connects.\n      this.log(\"[ws-server] replacing previous connection\");\n      try {\n        this.activeClient.close(4001, \"Replaced by new connection\");\n      } catch {\n        // already closed\n      }\n    }\n    this.log(\"[ws-server] client connected\");\n    this.activeClient = ws;\n    for (const handler of this.connectHandlers) {\n      handler();\n    }\n\n    const stopHeartbeat = this.startHeartbeat(ws);\n\n    ws.on(\"message\", (data) => {\n      try {\n        const parsed = JSON.parse(String(data)) as Record<string, unknown>;\n        // Protocol v3: shape-validate `session_init` at ingress so the\n        // runner never receives a malformed boot envelope. Other command\n        // shapes pass through unchanged — invalid `AgentCommand`s surface\n        // through the existing per-command handlers in serve.ts.\n        if (parsed && typeof parsed === \"object\" && parsed.type === \"session_init\") {\n          const reason = validateSessionInitShape(parsed);\n          if (reason !== null) {\n            this.log(`[ws-server] rejecting invalid session_init: ${reason}`);\n            this.sendRaw({\n              type: \"error\",\n              message: `Invalid session_init: ${reason}`,\n              fatal: false,\n            });\n            return;\n          }\n        }\n        const cmd = parsed as unknown as AgentCommand;\n        for (const handler of this.commandHandlers) {\n          handler(cmd);\n        }\n      } catch (err) {\n        this.sendRaw({\n          type: \"error\",\n          message: `Invalid message: ${err instanceof Error ? err.message : String(err)}`,\n          fatal: false,\n        });\n      }\n    });\n\n    ws.on(\"close\", () => {\n      stopHeartbeat();\n      this.log(\"[ws-server] client disconnected\");\n      if (this.activeClient === ws) {\n        this.activeClient = null;\n        for (const handler of this.disconnectHandlers) {\n          handler();\n        }\n      }\n    });\n  }\n\n  /**\n   * Ping `ws` every {@link heartbeatMs}; terminate it after\n   * {@link maxMissedPongs} unanswered ticks. `terminate()` makes `ws` emit\n   * `close`, which runs the normal disconnect path. Returns the stop function.\n   */\n  private startHeartbeat(ws: WebSocket): () => void {\n    if (this.maxMissedPongs <= 0) return () => {};\n    let missed = 0;\n    const markAlive = () => {\n      missed = 0;\n    };\n    ws.on(\"pong\", markAlive);\n    ws.on(\"message\", markAlive);\n    const timer = setInterval(() => {\n      if (ws.readyState !== ws.OPEN) return;\n      if (missed >= this.maxMissedPongs) {\n        this.log(\n          `[ws-server] no pong for ${missed} heartbeats of ${this.heartbeatMs}ms; terminating client`,\n        );\n        clearInterval(timer);\n        ws.terminate();\n        return;\n      }\n      missed++;\n      try {\n        ws.ping();\n      } catch {\n        // socket closing underneath us; the close event cleans up\n      }\n    }, this.heartbeatMs);\n    timer.unref?.();\n    return () => clearInterval(timer);\n  }\n\n  /**\n   * Stop the server.\n   *\n   * Terminates the active socket immediately — otherwise a still-connected\n   * client would keep the event loop alive and block process shutdown.\n   */\n  async close(): Promise<void> {\n    try {\n      this.activeClient?.terminate();\n    } catch {\n      // already closed\n    }\n    this.activeClient = null;\n    this.wss?.close();\n    this.wss = null;\n    const httpServer = this.httpServer;\n    this.httpServer = null;\n    if (httpServer) {\n      httpServer.closeAllConnections();\n      await new Promise<void>((resolve) => httpServer.close(() => resolve()));\n    }\n  }\n\n  send(event: AgentEvent): void {\n    this.sendRaw(event);\n  }\n\n  onCommand(handler: (command: AgentCommand) => void): () => void {\n    this.commandHandlers.add(handler);\n    return () => {\n      this.commandHandlers.delete(handler);\n    };\n  }\n\n  onConnect(handler: () => void): () => void {\n    this.connectHandlers.add(handler);\n    return () => {\n      this.connectHandlers.delete(handler);\n    };\n  }\n\n  onDisconnect(handler: () => void): () => void {\n    this.disconnectHandlers.add(handler);\n    return () => {\n      this.disconnectHandlers.delete(handler);\n    };\n  }\n\n  get connected(): boolean {\n    return this.activeClient !== null;\n  }\n\n  /** The port actually bound by `listen()` (resolves `port: 0`); `undefined` when not listening. */\n  get boundPort(): number | undefined {\n    const addr = this.httpServer?.address();\n    return typeof addr === \"object\" && addr ? addr.port : undefined;\n  }\n\n  private sendRaw(data: unknown): void {\n    try {\n      const client = this.activeClient;\n      if (client && client.readyState === 1) {\n        client.send(JSON.stringify(data));\n      }\n    } catch {\n      // Silently ignore send failures\n    }\n  }\n}\n"]}