@skaile/workspaces 5.19.0 → 6.0.0

package/dist/chunk-LSI2IVFT.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../core/src/provider-registry.ts"],"names":["ok","providerId","entry"],"mappings":";AA+BO,IAAM,iBAAA,GAAoB,CAAC,KAAA,EAAO,KAAA,EAAO,OAAO,OAAO;AAMvD,IAAM,uBAAA,GAA0B,CAAC,KAAA,EAAO,KAAK;AAS7C,IAAM,oBAAA,GAAuB;AAAA,EAClC,oBAAA;AAAA,EACA,oBAAA;AAAA,EACA,kBAAA;AAAA,EACA,wBAAA;AAAA,EACA,wBAAA;AAAA,EACA,yBAAA;AAAA,EACA,sBAAA;AAAA,EACA;AACF;AAMO,IAAM,sBAAA,GAAyB;AAAA,EACpC,QAAA;AAAA,EACA,SAAA;AAAA,EACA,QAAA;AAAA,EACA,SAAA;AAAA,EACA;AACF;AASO,IAAM,4BAAA,GAA+B;AAAA,EAC1C,gBAAA;AAAA,EACA,QAAA;AAAA,EACA,OAAA;AAAA,EACA,YAAA;AAAA,EACA,aAAA;AAAA,EACA,OAAA;AAAA,EACA,MAAA;AAAA,EACA;AACF;AAUA,IAAM,uBAAA,GAA2E;AAAA,EAC/E,cAAA,EAAgB,IAAA;AAAA,EAChB,MAAA,EAAQ,IAAA;AAAA,EACR,KAAA,EAAO,IAAA;AAAA,EACP,OAAA,EAAS;AACX,CAAA;AAGO,IAAM,2BAAA,GAA8B;AAAA,EACzC,oBAAA;AAAA,EACA,uBAAA;AAAA,EACA,oBAAA;AAAA,EACA;AACF;AAUO,IAAM,qBAAqB,CAAC,SAAA,EAAW,MAAA,EAAQ,WAAA,EAAa,WAAW,SAAS;AAmOvF,IAAM,OAAA,GAAU,uBAAA;AAGhB,IAAM,QAAA,GAAW,0BAAA;AAGjB,IAAM,cAAA,GAAiB,wCAAA;AAGvB,IAAM,UAAA,GACJ,2HAAA;AAGF,IAAM,qBAAA,GAAkC;AAAA,EACtC,OAAA;AAAA,EACA,QAAA;AAAA,EACA,OAAA;AAAA,EACA,qBAAA;AAAA,EACA,cAAA;AAAA,EACA,cAAA;AAAA,EACA,yBAAA;AAAA,EACA,kCAAA;AAAA;AAAA,EAEA;AACF,CAAA;AAGA,IAAM,aAAA,GAAgB,aAAA;AAGtB,IAAM,QAAA,GAAiC;AAAA,EACrC,IAAA,EAAM,IAAA;AAAA,EACN,KAAA,EAAO,IAAA;AAAA,EACP,MAAA,EAAQ,IAAA;AAAA,EACR,OAAA,EAAS,IAAA;AAAA,EACT,SAAA,EAAW,IAAA;AAAA,EACX,QAAA,EAAU,IAAA;AAAA,EACV,MAAA,EAAQ,IAAA;AAAA,EACR,OAAA,EAAS,IAAA;AAAA,EACT,YAAA,EAAc,IAAA;AAAA,EACd,UAAA,EAAY,IAAA;AAAA,EACZ,SAAA,EAAW,IAAA;AAAA,EACX,YAAA,EAAc,IAAA;AAAA,EACd,SAAA,EAAW,IAAA;AAAA,EACX,OAAA,EAAS,IAAA;AAAA,EACT,MAAA,EAAQ;AACV,CAAA;AAGA,IAAM,UAAA,GAAmC;AAAA,EACvC,IAAA,EAAM,IAAA;AAAA,EACN,KAAA,EAAO,IAAA;AAAA,EACP,MAAA,EAAQ,IAAA;AAAA,EACR,QAAA,EAAU,IAAA;AAAA,EACV,MAAA,EAAQ,IAAA;AAAA,EACR,OAAA,EAAS,IAAA;AAAA,EACT,UAAA,EAAY,IAAA;AAAA,EACZ,OAAA,EAAS,IAAA;AAAA,EACT,MAAA,EAAQ;AACV,CAAA;AAQA,IAAM,UAAA,GAAmC,EAAE,GAAG,QAAA,EAAU,GAAG,UAAA,EAAW;AAGtE,IAAM,gBAAgB,CAAC,SAAA,EAAW,WAAA,EAAa,WAAA,EAAa,gBAAgB,WAAW,CAAA;AAEvF,IAAM,eAAA,GAAwC;AAAA,EAC5C,cAAA,EAAgB,IAAA;AAAA,EAChB,KAAA,EAAO,IAAA;AAAA,EACP,MAAA,EAAQ,IAAA;AAAA,EACR,YAAA,EAAc;AAChB,CAAA;AAGA,IAAM,gBAAA,GAGF;AAAA,EACF,OAAA,EAAS,EAAE,QAAA,EAAU,CAAC,QAAQ,CAAA,EAAG,QAAA,EAAU,EAAC,EAAE;AAAA,EAC9C,MAAA,EAAQ,EAAE,QAAA,EAAU,CAAC,SAAA,EAAW,UAAU,CAAA,EAAG,QAAA,EAAU,CAAC,WAAW,CAAA,EAAE;AAAA,EACrE,OAAA,EAAS,EAAE,QAAA,EAAU,CAAC,UAAU,CAAA,EAAG,QAAA,EAAU,EAAC,EAAE;AAAA,EAChD,cAAA,EAAgB,EAAE,QAAA,EAAU,CAAC,UAAA,EAAY,cAAc,aAAa,CAAA,EAAG,QAAA,EAAU,EAAC;AACpF,CAAA;AAMO,IAAM,8BAAA,GAGT;AAAA,EACF,OAAA,EAAS,gDAAA;AAAA,EACT,MAAA,EACE,gHAAA;AAAA,EACF,OAAA,EAAS,oDAAA;AAAA,EACT,cAAA,EAAgB;AAClB;AAEA,SAAS,cAAc,KAAA,EAAkD;AACvE,EAAA,OAAO,OAAO,UAAU,QAAA,IAAY,KAAA,KAAU,QAAQ,CAAC,KAAA,CAAM,QAAQ,KAAK,CAAA;AAC5E;AAGO,SAAS,iBAAiB,EAAA,EAAqB;AACpD,EAAA,OAAO,OAAA,CAAQ,KAAK,EAAE,CAAA;AACxB;AAcO,SAAS,sBAAA,CAAuB,KAAa,KAAA,EAAwB;AAC1E,EAAA,MAAM,OAAA,GAAU,MAAM,IAAA,EAAK;AAC3B,EAAA,IAAI,OAAA,KAAY,IAAI,OAAO,KAAA;AAC3B,EAAA,IAAI,aAAA,CAAc,IAAA,CAAK,OAAO,CAAA,EAAG,OAAO,KAAA;AACxC,EAAA,IAAI,cAAA,CAAe,IAAA,CAAK,OAAO,CAAA,EAAG,OAAO,KAAA;AACzC,EAAA,IAAI,UAAA,CAAW,IAAA,CAAK,GAAG,CAAA,EAAG,OAAO,IAAA;AACjC,EAAA,OAAO,sBAAsB,IAAA,CAAK,CAAC,OAAO,EAAA,CAAG,IAAA,CAAK,OAAO,CAAC,CAAA;AAC5D;AAMA,SAAS,GAAA,CAAI,GAAA,EAAU,IAAA,EAAc,IAAA,EAAc,OAAA,EAAuB;AACxE,EAAA,GAAA,CAAI,WAAA,CAAY,KAAK,EAAE,IAAA,EAAM,UAAU,OAAA,EAAS,OAAA,EAAS,MAAM,CAAA;AACjE;AAEA,SAAS,IAAA,CAAK,GAAA,EAAU,IAAA,EAAc,IAAA,EAAc,OAAA,EAAuB;AACzE,EAAA,GAAA,CAAI,WAAA,CAAY,KAAK,EAAE,IAAA,EAAM,UAAU,SAAA,EAAW,OAAA,EAAS,MAAM,CAAA;AACnE;AAGA,SAAS,aAAA,CACP,GAAA,EACA,GAAA,EACA,IAAA,EACA,IAAA,EACoC;AACpC,EAAA,IAAI,CAAC,aAAA,CAAc,GAAG,CAAA,EAAG;AACvB,IAAA,GAAA,CAAI,GAAA,EAAK,cAAA,EAAgB,IAAA,EAAM,CAAA,EAAG,IAAI,CAAA,+BAAA,CAAiC,CAAA;AACvE,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,MAAM,MAA8B,EAAC;AACrC,EAAA,IAAI,EAAA,GAAK,IAAA;AACT,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAA,EAAG;AAC9C,IAAA,MAAM,OAAA,GAAU,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,GAAG,CAAA,CAAA;AAC9B,IAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC7B,MAAA,GAAA,CAAI,GAAA,EAAK,cAAA,EAAgB,OAAA,EAAS,CAAA,EAAG,OAAO,CAAA,iBAAA,CAAmB,CAAA;AAC/D,MAAA,EAAA,GAAK,KAAA;AACL,MAAA;AAAA,IACF;AACA,IAAA,IAAI,IAAA,CAAK,UAAA,IAAc,sBAAA,CAAuB,GAAA,EAAK,KAAK,CAAA,EAAG;AACzD,MAAA,GAAA;AAAA,QACE,GAAA;AAAA,QACA,gBAAA;AAAA,QACA,OAAA;AAAA,QACA,GAAG,OAAO,CAAA,2JAAA;AAAA,OAGZ;AACA,MAAA,EAAA,GAAK,KAAA;AACL,MAAA;AAAA,IACF;AACA,IAAA,GAAA,CAAI,GAAG,CAAA,GAAI,KAAA;AAAA,EACb;AACA,EAAA,OAAO,KAAK,GAAA,GAAM,MAAA;AACpB;AAEA,SAAS,cAAA,CACP,GAAA,EACA,GAAA,EACA,IAAA,EAC+C;AAC/C,EAAA,IAAI,CAAC,aAAA,CAAc,GAAG,CAAA,EAAG;AACvB,IAAA,GAAA,CAAI,GAAA,EAAK,cAAA,EAAgB,IAAA,EAAM,CAAA,EAAG,IAAI,CAAA,4BAAA,CAA8B,CAAA;AACpE,IAAA,OAAO,EAAE,IAAI,KAAA,EAAM;AAAA,EACrB;AACA,EAAA,IAAI,EAAA,GAAK,IAAA;AACT,EAAA,KAAA,MAAW,GAAA,IAAO,MAAA,CAAO,IAAA,CAAK,GAAG,CAAA,EAAG;AAClC,IAAA,IAAI,GAAA,KAAQ,MAAA,IAAU,GAAA,KAAQ,KAAA,EAAO;AACnC,MAAA,GAAA,CAAI,GAAA,EAAK,aAAA,EAAe,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,GAAG,CAAA,CAAA,EAAI,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,GAAG,CAAA,wBAAA,CAA0B,CAAA;AAClF,MAAA,EAAA,GAAK,KAAA;AAAA,IACP;AAAA,EACF;AACA,EAAA,MAAM,OAAO,GAAA,CAAI,IAAA;AACjB,EAAA,IACE,OAAO,IAAA,KAAS,QAAA,IAChB,CAAE,4BAAA,CAAmD,QAAA,CAAS,IAAI,CAAA,EAClE;AACA,IAAA,GAAA;AAAA,MACE,GAAA;AAAA,MACA,yBAAA;AAAA,MACA,GAAG,IAAI,CAAA,KAAA,CAAA;AAAA,MACP,GAAG,IAAI,CAAA,qBAAA,EAAwB,4BAAA,CAA6B,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,KACxE;AACA,IAAA,OAAO,EAAE,IAAI,KAAA,EAAM;AAAA,EACrB;AACA,EAAA,MAAM,cAAA,GAAiB,IAAA;AAEvB,EAAA,MAAM,SAAS,GAAA,CAAI,GAAA;AACnB,EAAA,IAAI,GAAA;AACJ,EAAA,IAAI,WAAW,MAAA,EAAW;AACxB,IAAA,IAAI,OAAO,WAAW,QAAA,EAAU;AAC9B,MAAA,GAAA,CAAI,KAAK,cAAA,EAAgB,CAAA,EAAG,IAAI,CAAA,IAAA,CAAA,EAAQ,CAAA,EAAG,IAAI,CAAA,qBAAA,CAAuB,CAAA;AACtE,MAAA,EAAA,GAAK,KAAA;AAAA,IACP,CAAA,MAAA,IAAW,CAAC,kBAAA,CAAmB,MAAM,CAAA,EAAG;AACtC,MAAA,GAAA;AAAA,QACE,GAAA;AAAA,QACA,gBAAA;AAAA,QACA,GAAG,IAAI,CAAA,IAAA,CAAA;AAAA,QACP,GAAG,IAAI,CAAA,mIAAA;AAAA,OAET;AACA,MAAA,EAAA,GAAK,KAAA;AAAA,IACP,CAAA,MAAO;AACL,MAAA,GAAA,GAAM,MAAA;AAAA,IACR;AAAA,EACF,CAAA,MAAA,IAAW,uBAAA,CAAwB,cAAc,CAAA,EAAG;AAClD,IAAA,GAAA;AAAA,MACE,GAAA;AAAA,MACA,wBAAA;AAAA,MACA,GAAG,IAAI,CAAA,IAAA,CAAA;AAAA,MACP,CAAA,EAAG,IAAI,CAAA,sCAAA,EAAyC,cAAc,CAAA,CAAA;AAAA,KAChE;AACA,IAAA,EAAA,GAAK,KAAA;AAAA,EACP;AAEA,EAAA,IAAI,CAAC,EAAA,EAAI,OAAO,EAAE,IAAI,KAAA,EAAM;AAC5B,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,IAAA;AAAA,IACJ,KAAA,EAAO,GAAA,KAAQ,MAAA,GAAY,EAAE,IAAA,EAAM,gBAAe,GAAI,EAAE,IAAA,EAAM,cAAA,EAAgB,GAAA;AAAI,GACpF;AACF;AAcA,SAAS,kBAAA,CACP,GAAA,EACA,SAAA,EACA,MAAA,EACA,MACA,OAAA,EACkD;AAElD,EAAA,IAAI,SAAA,KAAc,MAAA,IAAa,OAAA,CAAQ,GAAA,CAAI,WAAW,CAAA,EAAG,OAAO,EAAE,KAAA,EAAO,EAAC,EAAG,EAAA,EAAI,KAAA,EAAM;AACvF,EAAA,MAAM,WAAW,SAAA,KAAc,MAAA;AAC/B,EAAA,MAAM,YAAY,SAAA,IAAa,QAAA;AAC/B,EAAA,MAAM,cAAA,GAAiB,MAAA,KAAW,MAAA,IAAa,OAAA,CAAQ,IAAI,QAAQ,CAAA;AAEnE,EAAA,IAAI,cAAc,QAAA,EAAU;AAC1B,IAAA,IAAIA,GAAAA,GAAK,IAAA;AACT,IAAA,KAAA,MAAW,OAAO,MAAA,CAAO,IAAA,CAAK,MAAA,IAAU,EAAE,CAAA,EAAG;AAC3C,MAAA,GAAA;AAAA,QACE,GAAA;AAAA,QACA,eAAA;AAAA,QACA,CAAA,EAAG,IAAI,CAAA,QAAA,EAAW,GAAG,CAAA,CAAA;AAAA,QACrB,CAAA,EAAG,IAAI,CAAA,QAAA,EAAW,GAAG,CAAA,kEAAA;AAAA,OACvB;AACA,MAAAA,GAAAA,GAAK,KAAA;AAAA,IACP;AACA,IAAA,OAAO,EAAE,KAAA,EAAO,QAAA,GAAW,EAAE,SAAA,EAAW,UAAS,GAAI,EAAC,EAAG,EAAA,EAAAA,GAAAA,EAAG;AAAA,EAC9D;AAEA,EAAA,MAAM,IAAA,GAAO,iBAAiB,SAAS,CAAA;AACvC,EAAA,IAAI,WAAW,MAAA,EAAW;AAExB,IAAA,IAAI,CAAC,cAAA,EAAgB;AACnB,MAAA,GAAA;AAAA,QACE,GAAA;AAAA,QACA,gBAAA;AAAA,QACA,GAAG,IAAI,CAAA,OAAA,CAAA;AAAA,QACP,CAAA,EAAG,IAAI,CAAA,mCAAA,EAAsC,SAAS,MAAM,IAAA,CAAK,QAAA,CAAS,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,OACtF;AAAA,IACF;AACA,IAAA,OAAO,EAAE,KAAA,EAAO,EAAC,EAAG,IAAI,KAAA,EAAM;AAAA,EAChC;AAEA,EAAA,IAAI,EAAA,GAAK,IAAA;AACT,EAAA,MAAM,SAAiC,EAAC;AACxC,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,EAAG;AACjD,IAAA,IAAI,CAAC,IAAA,CAAK,QAAA,CAAS,QAAA,CAAS,GAAG,CAAA,IAAK,CAAC,IAAA,CAAK,QAAA,CAAS,QAAA,CAAS,GAAG,CAAA,EAAG;AAChE,MAAA,GAAA;AAAA,QACE,GAAA;AAAA,QACA,eAAA;AAAA,QACA,CAAA,EAAG,IAAI,CAAA,QAAA,EAAW,GAAG,CAAA,CAAA;AAAA,QACrB,GAAG,IAAI,CAAA,QAAA,EAAW,GAAG,CAAA,6BAAA,EAAgC,SAAS,CAAA,aAAA,EAC9C,CAAC,GAAG,IAAA,CAAK,UAAU,GAAG,IAAA,CAAK,QAAQ,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,OACjE;AACA,MAAA,EAAA,GAAK,KAAA;AACL,MAAA;AAAA,IACF;AACA,IAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC7B,MAAA,GAAA,CAAI,GAAA,EAAK,cAAA,EAAgB,CAAA,EAAG,IAAI,CAAA,QAAA,EAAW,GAAG,CAAA,CAAA,EAAI,CAAA,EAAG,IAAI,CAAA,QAAA,EAAW,GAAG,CAAA,iBAAA,CAAmB,CAAA;AAC1F,MAAA,EAAA,GAAK,KAAA;AACL,MAAA;AAAA,IACF;AACA,IAAA,MAAA,CAAO,GAAG,CAAA,GAAI,KAAA;AAAA,EAChB;AACA,EAAA,KAAA,MAAW,GAAA,IAAO,KAAK,QAAA,EAAU;AAC/B,IAAA,IAAI,MAAA,CAAO,GAAG,CAAA,KAAM,MAAA,EAAW;AAC7B,MAAA,GAAA;AAAA,QACE,GAAA;AAAA,QACA,eAAA;AAAA,QACA,CAAA,EAAG,IAAI,CAAA,QAAA,EAAW,GAAG,CAAA,CAAA;AAAA,QACrB,CAAA,EAAG,IAAI,CAAA,QAAA,EAAW,GAAG,+BAA+B,SAAS,CAAA,CAAA;AAAA,OAC/D;AACA,MAAA,EAAA,GAAK,KAAA;AAAA,IACP;AAAA,EACF;AACA,EAAA,IAAI,CAAC,IAAI,OAAO,EAAE,OAAO,EAAC,EAAG,IAAI,KAAA,EAAM;AAGvC,EAAA,QAAQ,SAAA;AAAW,IACjB,KAAK,SAAA;AACH,MAAA,OAAO,EAAE,KAAA,EAAO,EAAE,SAAA,EAAW,SAAA,EAAW,MAAA,EAAQ,EAAE,MAAA,EAAQ,MAAA,CAAO,MAAA,EAAO,EAAE,EAAG,IAAI,IAAA,EAAK;AAAA,IACxF,KAAK,QAAA;AACH,MAAA,OAAO;AAAA,QACL,KAAA,EAAO;AAAA,UACL,SAAA,EAAW,SAAA;AAAA,UACX,MAAA,EAAQ;AAAA,YACN,SAAS,MAAA,CAAO,OAAA;AAAA,YAChB,UAAU,MAAA,CAAO,QAAA;AAAA,YACjB,GAAI,OAAO,SAAA,KAAc,MAAA,GAAY,EAAC,GAAI,EAAE,SAAA,EAAW,MAAA,CAAO,SAAA;AAAU;AAC1E,SACF;AAAA,QACA,EAAA,EAAI;AAAA,OACN;AAAA,IACF,KAAK,SAAA;AACH,MAAA,OAAO,EAAE,KAAA,EAAO,EAAE,SAAA,EAAW,SAAA,EAAW,MAAA,EAAQ,EAAE,QAAA,EAAU,MAAA,CAAO,QAAA,EAAS,EAAE,EAAG,IAAI,IAAA,EAAK;AAAA,IAC5F,KAAK,cAAA;AACH,MAAA,OAAO;AAAA,QACL,KAAA,EAAO;AAAA,UACL,SAAA,EAAW,SAAA;AAAA,UACX,MAAA,EAAQ;AAAA,YACN,UAAU,MAAA,CAAO,QAAA;AAAA,YACjB,YAAY,MAAA,CAAO,UAAA;AAAA,YACnB,aAAa,MAAA,CAAO;AAAA;AACtB,SACF;AAAA,QACA,EAAA,EAAI;AAAA,OACN;AAAA;AAEN;AAQA,SAAS,UAAA,CACP,GAAA,EACA,GAAA,EACA,IAAA,EACoE;AACpE,EAAA,IAAI,CAAC,aAAA,CAAc,GAAG,CAAA,EAAG;AACvB,IAAA,GAAA,CAAI,GAAA,EAAK,cAAA,EAAgB,IAAA,EAAM,CAAA,EAAG,IAAI,CAAA,cAAA,CAAgB,CAAA;AACtD,IAAA,OAAO,EAAE,IAAI,KAAA,EAAM;AAAA,EACrB;AACA,EAAA,MAAM,MAAiD,EAAC;AACxD,EAAA,IAAI,EAAA,GAAK,IAAA;AACT,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAA,EAAG;AAC9C,IAAA,IAAI,OAAO,UAAU,QAAA,IAAY,OAAO,UAAU,QAAA,IAAY,OAAO,UAAU,SAAA,EAAW;AACxF,MAAA,GAAA;AAAA,QACE,GAAA;AAAA,QACA,cAAA;AAAA,QACA,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,GAAG,CAAA,CAAA;AAAA,QACd,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,GAAG,CAAA,oCAAA;AAAA,OAChB;AACA,MAAA,EAAA,GAAK,KAAA;AACL,MAAA;AAAA,IACF;AACA,IAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,sBAAA,CAAuB,GAAA,EAAK,KAAK,CAAA,EAAG;AACnE,MAAA,GAAA;AAAA,QACE,GAAA;AAAA,QACA,gBAAA;AAAA,QACA,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,GAAG,CAAA,CAAA;AAAA,QACd,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,GAAG,CAAA,sEAAA;AAAA,OAChB;AACA,MAAA,EAAA,GAAK,KAAA;AACL,MAAA;AAAA,IACF;AACA,IAAA,GAAA,CAAI,GAAG,CAAA,GAAI,KAAA;AAAA,EACb;AACA,EAAA,OAAO,EAAA,GAAK,EAAE,EAAA,EAAI,IAAA,EAAM,OAAO,GAAA,EAAI,GAAI,EAAE,EAAA,EAAI,KAAA,EAAM;AACrD;AAEA,SAAS,WAAA,CAAY,GAAA,EAAU,GAAA,EAAc,IAAA,EAA+C;AAC1F,EAAA,IAAI,OAAO,QAAQ,QAAA,EAAU;AAC3B,IAAA,GAAA,CAAI,GAAA,EAAK,cAAA,EAAgB,IAAA,EAAM,CAAA,EAAG,IAAI,CAAA,iBAAA,CAAmB,CAAA;AACzD,IAAA,OAAO,EAAE,IAAI,KAAA,EAAM;AAAA,EACrB;AACA,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,IAAI,IAAI,GAAG,CAAA;AAAA,EACtB,CAAA,CAAA,MAAQ;AACN,IAAA,GAAA,CAAI,KAAK,kBAAA,EAAoB,IAAA,EAAM,GAAG,IAAI,CAAA,qBAAA,EAAwB,GAAG,CAAA,CAAE,CAAA;AACvE,IAAA,OAAO,EAAE,IAAI,KAAA,EAAM;AAAA,EACrB;AACA,EAAA,IAAI,MAAA,CAAO,QAAA,KAAa,OAAA,IAAW,MAAA,CAAO,aAAa,QAAA,EAAU;AAC/D,IAAA,GAAA;AAAA,MACE,GAAA;AAAA,MACA,kBAAA;AAAA,MACA,IAAA;AAAA,MACA,CAAA,EAAG,IAAI,CAAA,mCAAA,EAAsC,MAAA,CAAO,QAAQ,CAAA,GAAA;AAAA,KAC9D;AACA,IAAA,OAAO,EAAE,IAAI,KAAA,EAAM;AAAA,EACrB;AACA,EAAA,IAAI,MAAA,CAAO,QAAA,IAAY,MAAA,CAAO,QAAA,EAAU;AACtC,IAAA,GAAA;AAAA,MACE,GAAA;AAAA,MACA,gBAAA;AAAA,MACA,IAAA;AAAA,MACA,GAAG,IAAI,CAAA,gFAAA;AAAA,KACT;AACA,IAAA,OAAO,EAAE,IAAI,KAAA,EAAM;AAAA,EACrB;AACA,EAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,KAAA,EAAO,GAAA,EAAI;AAChC;AAEA,SAAS,WAAA,CAAY,GAAA,EAAU,GAAA,EAAc,IAAA,EAAgD;AAC3F,EAAA,IAAI,OAAO,QAAQ,SAAA,EAAW;AAC5B,IAAA,GAAA,CAAI,GAAA,EAAK,cAAA,EAAgB,IAAA,EAAM,CAAA,EAAG,IAAI,CAAA,sBAAA,CAAwB,CAAA;AAC9D,IAAA,OAAO,EAAE,IAAI,KAAA,EAAM;AAAA,EACrB;AACA,EAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,KAAA,EAAO,GAAA,EAAI;AAChC;AAqBA,SAAS,SAAA,CAAU,GAAA,EAAU,GAAA,EAAc,IAAA,EAA2C;AACpF,EAAA,IAAI,CAAC,aAAA,CAAc,GAAG,CAAA,EAAG;AACvB,IAAA,GAAA,CAAI,GAAA,EAAK,cAAA,EAAgB,IAAA,EAAM,CAAA,EAAG,IAAI,CAAA,cAAA,CAAgB,CAAA;AACtD,IAAA,OAAO,MAAA;AAAA,EACT;AAEA,EAAA,MAAM,UAA+B,IAAI,GAAA,CAAI,MAAA,CAAO,IAAA,CAAK,GAAG,CAAC,CAAA;AAC7D,EAAA,MAAM,QAA8B,EAAC;AACrC,EAAA,IAAI,EAAA,GAAK,IAAA;AAET,EAAA,IAAI,GAAA,CAAI,SAAS,MAAA,EAAW;AAC1B,IAAA,IACE,OAAO,IAAI,IAAA,KAAS,QAAA,IACpB,CAAE,iBAAA,CAAwC,QAAA,CAAS,GAAA,CAAI,IAAI,CAAA,EAC3D;AACA,MAAA,GAAA;AAAA,QACE,GAAA;AAAA,QACA,cAAA;AAAA,QACA,GAAG,IAAI,CAAA,KAAA,CAAA;AAAA,QACP,GAAG,IAAI,CAAA,qBAAA,EAAwB,iBAAA,CAAkB,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,OAC7D;AACA,MAAA,EAAA,GAAK,KAAA;AAAA,IACP,CAAA,MAAO;AACL,MAAA,KAAA,CAAM,OAAO,GAAA,CAAI,IAAA;AAAA,IACnB;AAAA,EACF;AAEA,EAAA,KAAA,MAAW,OAAO,OAAA,EAAS;AACzB,IAAA,IAAI,CAAC,UAAA,CAAW,GAAG,CAAA,EAAG;AACpB,MAAA,GAAA,CAAI,GAAA,EAAK,aAAA,EAAe,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,GAAG,CAAA,CAAA,EAAI,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,GAAG,CAAA,sBAAA,CAAwB,CAAA;AAChF,MAAA,EAAA,GAAK,KAAA;AAAA,IACP;AAAA,EACF;AAEA,EAAA,IAAI,GAAA,CAAI,UAAU,MAAA,EAAW;AAC3B,IAAA,IAAI,OAAO,GAAA,CAAI,KAAA,KAAU,QAAA,EAAU;AACjC,MAAA,GAAA,CAAI,KAAK,cAAA,EAAgB,CAAA,EAAG,IAAI,CAAA,MAAA,CAAA,EAAU,CAAA,EAAG,IAAI,CAAA,uBAAA,CAAyB,CAAA;AAC1E,MAAA,EAAA,GAAK,KAAA;AAAA,IACP,CAAA,MAAO;AACL,MAAA,KAAA,CAAM,QAAQ,GAAA,CAAI,KAAA;AAAA,IACpB;AAAA,EACF;AACA,EAAA,IAAI,GAAA,CAAI,WAAW,MAAA,EAAW;AAC5B,IAAA,IAAI,OAAO,IAAI,MAAA,KAAW,QAAA,IAAY,CAAC,gBAAA,CAAiB,GAAA,CAAI,MAAM,CAAA,EAAG;AACnE,MAAA,GAAA;AAAA,QACE,GAAA;AAAA,QACA,gBAAA;AAAA,QACA,GAAG,IAAI,CAAA,OAAA,CAAA;AAAA,QACP,GAAG,IAAI,CAAA,gEAAA;AAAA,OACT;AACA,MAAA,EAAA,GAAK,KAAA;AAAA,IACP,CAAA,MAAO;AACL,MAAA,KAAA,CAAM,SAAS,GAAA,CAAI,MAAA;AAAA,IACrB;AAAA,EACF;AACA,EAAA,IAAI,GAAA,CAAI,aAAa,MAAA,EAAW;AAC9B,IAAA,MAAM,MAAM,WAAA,CAAY,GAAA,EAAK,IAAI,QAAA,EAAU,CAAA,EAAG,IAAI,CAAA,SAAA,CAAW,CAAA;AAC7D,IAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,EAAA,GAAK,KAAA;AAAA,SACb,KAAA,CAAM,WAAW,GAAA,CAAI,KAAA;AAAA,EAC5B;AACA,EAAA,IAAI,GAAA,CAAI,YAAY,MAAA,EAAW;AAC7B,IAAA,MAAM,OAAA,GAAU,aAAA,CAAc,GAAA,EAAK,GAAA,CAAI,OAAA,EAAS,CAAA,EAAG,IAAI,CAAA,QAAA,CAAA,EAAY,EAAE,UAAA,EAAY,IAAA,EAAM,CAAA;AACvF,IAAA,IAAI,CAAC,SAAS,EAAA,GAAK,KAAA;AAAA,eACR,OAAA,GAAU,OAAA;AAAA,EACvB;AACA,EAAA,IAAI,GAAA,CAAI,eAAe,MAAA,EAAW;AAChC,IAAA,MAAM,MAAM,cAAA,CAAe,GAAA,EAAK,IAAI,UAAA,EAAY,CAAA,EAAG,IAAI,CAAA,WAAA,CAAa,CAAA;AACpE,IAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,EAAA,GAAK,KAAA;AAAA,SACb,KAAA,CAAM,aAAa,GAAA,CAAI,KAAA;AAAA,EAC9B;AACA,EAAA,IAAI,GAAA,CAAI,YAAY,MAAA,EAAW;AAC7B,IAAA,MAAM,MAAM,WAAA,CAAY,GAAA,EAAK,IAAI,OAAA,EAAS,CAAA,EAAG,IAAI,CAAA,QAAA,CAAU,CAAA;AAC3D,IAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,EAAA,GAAK,KAAA;AAAA,SACb,KAAA,CAAM,UAAU,GAAA,CAAI,KAAA;AAAA,EAC3B;AACA,EAAA,IAAI,GAAA,CAAI,WAAW,MAAA,EAAW;AAC5B,IAAA,MAAM,MAAM,WAAA,CAAY,GAAA,EAAK,IAAI,MAAA,EAAQ,CAAA,EAAG,IAAI,CAAA,OAAA,CAAS,CAAA;AACzD,IAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,EAAA,GAAK,KAAA;AAAA,SACb,KAAA,CAAM,SAAS,GAAA,CAAI,KAAA;AAAA,EAC1B;AACA,EAAA,IAAI,GAAA,CAAI,YAAY,MAAA,EAAW;AAC7B,IAAA,IACE,OAAO,IAAI,OAAA,KAAY,QAAA,IACvB,CAAE,oBAAA,CAA2C,QAAA,CAAS,GAAA,CAAI,OAAO,CAAA,EACjE;AACA,MAAA,GAAA;AAAA,QACE,GAAA;AAAA,QACA,iBAAA;AAAA,QACA,GAAG,IAAI,CAAA,QAAA,CAAA;AAAA,QACP,GAAG,IAAI,CAAA,wBAAA,EAA2B,oBAAA,CAAqB,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,OACnE;AACA,MAAA,EAAA,GAAK,KAAA;AAAA,IACP,CAAA,MAAO;AACL,MAAA,KAAA,CAAM,UAAU,GAAA,CAAI,OAAA;AAAA,IACtB;AAAA,EACF;AACA,EAAA,IAAI,GAAA,CAAI,cAAc,MAAA,EAAW;AAC/B,IAAA,IACE,OAAO,IAAI,SAAA,KAAc,QAAA,IACzB,CAAE,sBAAA,CAA6C,QAAA,CAAS,GAAA,CAAI,SAAS,CAAA,EACrE;AACA,MAAA,GAAA;AAAA,QACE,GAAA;AAAA,QACA,mBAAA;AAAA,QACA,GAAG,IAAI,CAAA,UAAA,CAAA;AAAA,QACP,GAAG,IAAI,CAAA,0BAAA,EAA6B,sBAAA,CAAuB,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,OACvE;AACA,MAAA,EAAA,GAAK,KAAA;AAAA,IACP,CAAA,MAAO;AACL,MAAA,KAAA,CAAM,YAAY,GAAA,CAAI,SAAA;AAAA,IACxB;AAAA,EACF;AACA,EAAA,IAAI,GAAA,CAAI,WAAW,MAAA,EAAW;AAC5B,IAAA,MAAM,MAAM,UAAA,CAAW,GAAA,EAAK,IAAI,MAAA,EAAQ,CAAA,EAAG,IAAI,CAAA,OAAA,CAAS,CAAA;AACxD,IAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,EAAA,GAAK,KAAA;AAAA,SACb,KAAA,CAAM,SAAS,GAAA,CAAI,KAAA;AAAA,EAC1B;AACA,EAAA,IAAI,GAAA,CAAI,iBAAiB,MAAA,EAAW;AAClC,IAAA,MAAM,EAAA,GAAK,aAAA,CAAc,GAAA,EAAK,GAAA,CAAI,YAAA,EAAc,CAAA,EAAG,IAAI,CAAA,aAAA,CAAA,EAAiB,EAAE,UAAA,EAAY,IAAA,EAAM,CAAA;AAC5F,IAAA,IAAI,CAAC,IAAI,EAAA,GAAK,KAAA;AAAA,eACH,YAAA,GAAe,EAAA;AAAA,EAC5B;AACA,EAAA,IAAI,GAAA,CAAI,cAAc,MAAA,EAAW;AAC/B,IAAA,MAAM,GAAA,GAAM,aAAA,CAAc,GAAA,EAAK,GAAA,CAAI,SAAA,EAAW,CAAA,EAAG,IAAI,CAAA,UAAA,CAAA,EAAc,EAAE,UAAA,EAAY,KAAA,EAAO,CAAA;AACxF,IAAA,IAAI,CAAC,KAAK,EAAA,GAAK,KAAA;AAAA,eACJ,SAAA,GAAY,GAAA;AAAA,EACzB;AACA,EAAA,IAAI,GAAA,CAAI,iBAAiB,MAAA,EAAW;AAClC,IAAA,IAAI,CAAC,aAAA,CAAc,GAAA,CAAI,YAAY,CAAA,EAAG;AACpC,MAAA,GAAA,CAAI,KAAK,cAAA,EAAgB,CAAA,EAAG,IAAI,CAAA,aAAA,CAAA,EAAiB,CAAA,EAAG,IAAI,CAAA,2BAAA,CAA6B,CAAA;AACrF,MAAA,EAAA,GAAK,KAAA;AAAA,IACP,CAAA,MAAO;AACL,MAAA,MAAM,OAA+C,EAAC;AACtD,MAAA,KAAA,MAAW,CAAC,SAAS,KAAK,CAAA,IAAK,OAAO,OAAA,CAAQ,GAAA,CAAI,YAAY,CAAA,EAAG;AAC/D,QAAA,MAAM,OAAA,GAAU,CAAA,EAAG,IAAI,CAAA,cAAA,EAAiB,OAAO,CAAA,CAAA;AAC/C,QAAA,IAAI,CAAC,aAAA,CAAc,KAAK,CAAA,EAAG;AACzB,UAAA,GAAA,CAAI,GAAA,EAAK,cAAA,EAAgB,OAAA,EAAS,CAAA,EAAG,OAAO,CAAA,cAAA,CAAgB,CAAA;AAC5D,UAAA,EAAA,GAAK,KAAA;AACL,UAAA;AAAA,QACF;AACA,QAAA,MAAM,MAA8B,EAAC;AACrC,QAAA,KAAA,MAAW,CAAC,MAAA,EAAQ,QAAQ,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAG;AACtD,UAAA,IAAI,CAAC,eAAA,CAAgB,MAAM,CAAA,EAAG;AAC5B,YAAA,GAAA;AAAA,cACE,GAAA;AAAA,cACA,aAAA;AAAA,cACA,CAAA,EAAG,OAAO,CAAA,CAAA,EAAI,MAAM,CAAA,CAAA;AAAA,cACpB,CAAA,EAAG,OAAO,CAAA,CAAA,EAAI,MAAM,CAAA,sBAAA,EAAyB,MAAA,CAAO,IAAA,CAAK,eAAe,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,aACtF;AACA,YAAA,EAAA,GAAK,KAAA;AACL,YAAA;AAAA,UACF;AACA,UAAA,MAAM,QAAA,GAAW,MAAA,KAAW,OAAA,IAAW,MAAA,KAAW,WAAW,SAAA,GAAY,QAAA;AACzE,UAAA,IAAI,OAAO,aAAa,QAAA,EAAU;AAChC,YAAA,GAAA;AAAA,cACE,GAAA;AAAA,cACA,cAAA;AAAA,cACA,CAAA,EAAG,OAAO,CAAA,CAAA,EAAI,MAAM,CAAA,CAAA;AAAA,cACpB,CAAA,EAAG,OAAO,CAAA,CAAA,EAAI,MAAM,cAAc,QAAQ,CAAA;AAAA,aAC5C;AACA,YAAA,EAAA,GAAK,KAAA;AACL,YAAA;AAAA,UACF;AACA,UAAC,GAAA,CAAgC,MAAM,CAAA,GAAI,QAAA;AAAA,QAC7C;AACA,QAAA,IAAA,CAAK,OAAO,CAAA,GAAI,GAAA;AAAA,MAClB;AACA,MAAA,KAAA,CAAM,YAAA,GAAe,IAAA;AAAA,IACvB;AAAA,EACF;AACA,EAAA,IAAI,GAAA,CAAI,cAAc,MAAA,EAAW;AAC/B,IAAA,IAAI,CAAC,aAAA,CAAc,GAAA,CAAI,SAAS,CAAA,EAAG;AACjC,MAAA,GAAA,CAAI,KAAK,cAAA,EAAgB,CAAA,EAAG,IAAI,CAAA,UAAA,CAAA,EAAc,CAAA,EAAG,IAAI,CAAA,wBAAA,CAA0B,CAAA;AAC/E,MAAA,EAAA,GAAK,KAAA;AAAA,IACP,CAAA,MAAO;AACL,MAAA,MAAM,IAAA,GAAO,IAAI,SAAA,CAAU,IAAA;AAC3B,MAAA,IAAI,OAAO,SAAS,QAAA,EAAU;AAC5B,QAAA,GAAA;AAAA,UACE,GAAA;AAAA,UACA,cAAA;AAAA,UACA,GAAG,IAAI,CAAA,eAAA,CAAA;AAAA,UACP,GAAG,IAAI,CAAA,gCAAA;AAAA,SACT;AACA,QAAA,EAAA,GAAK,KAAA;AAAA,MACP,CAAA,MAAO;AACL,QAAA,IAAI,CAAE,2BAAA,CAAkD,QAAA,CAAS,IAAI,CAAA,EAAG;AACtE,UAAA,IAAA;AAAA,YACE,GAAA;AAAA,YACA,wBAAA;AAAA,YACA,GAAG,IAAI,CAAA,eAAA,CAAA;AAAA,YACP,CAAA,EAAG,IAAI,CAAA,iBAAA,EAAoB,IAAI,2BACzB,2BAAA,CAA4B,IAAA,CAAK,IAAI,CAAC,CAAA,4BAAA;AAAA,WAC9C;AAAA,QACF;AACA,QAAA,MAAM,SAAA,GAAiC,EAAE,IAAA,EAAK;AAC9C,QAAA,MAAM,QAAA,GAAW,IAAI,SAAA,CAAU,IAAA;AAC/B,QAAA,IAAI,aAAa,MAAA,EAAW;AAC1B,UAAA,IAAI,OAAO,aAAa,QAAA,EAAU;AAChC,YAAA,GAAA;AAAA,cACE,GAAA;AAAA,cACA,cAAA;AAAA,cACA,GAAG,IAAI,CAAA,eAAA,CAAA;AAAA,cACP,GAAG,IAAI,CAAA,gCAAA;AAAA,aACT;AACA,YAAA,EAAA,GAAK,KAAA;AAAA,UACP,CAAA,MAAO;AACL,YAAA,SAAA,CAAU,IAAA,GAAO,QAAA;AAAA,UACnB;AAAA,QACF;AACA,QAAA,KAAA,MAAW,GAAA,IAAO,MAAA,CAAO,IAAA,CAAK,GAAA,CAAI,SAAS,CAAA,EAAG;AAC5C,UAAA,IAAI,GAAA,KAAQ,MAAA,IAAU,GAAA,KAAQ,MAAA,EAAQ;AACpC,YAAA,GAAA;AAAA,cACE,GAAA;AAAA,cACA,aAAA;AAAA,cACA,CAAA,EAAG,IAAI,CAAA,WAAA,EAAc,GAAG,CAAA,CAAA;AAAA,cACxB,CAAA,EAAG,IAAI,CAAA,WAAA,EAAc,GAAG,CAAA,uBAAA;AAAA,aAC1B;AACA,YAAA,EAAA,GAAK,KAAA;AAAA,UACP;AAAA,QACF;AACA,QAAA,KAAA,CAAM,SAAA,GAAY,SAAA;AAAA,MACpB;AAAA,IACF;AAAA,EACF;AAEA,EAAA,OAAO,EAAA,GAAK,EAAE,KAAA,EAAO,OAAA,EAAQ,GAAI,MAAA;AACnC;AAGA,SAAS,YAAY,KAAA,EAAoD;AACvE,EAAA,MAAM,SAAgC,EAAC;AACvC,EAAA,IAAI,KAAA,CAAM,KAAA,KAAU,MAAA,EAAW,MAAA,CAAO,QAAQ,KAAA,CAAM,KAAA;AACpD,EAAA,IAAI,KAAA,CAAM,MAAA,KAAW,MAAA,EAAW,MAAA,CAAO,SAAS,KAAA,CAAM,MAAA;AACtD,EAAA,IAAI,KAAA,CAAM,QAAA,KAAa,MAAA,EAAW,MAAA,CAAO,WAAW,KAAA,CAAM,QAAA;AAC1D,EAAA,IAAI,KAAA,CAAM,OAAA,KAAY,MAAA,EAAW,MAAA,CAAO,UAAU,KAAA,CAAM,OAAA;AACxD,EAAA,IAAI,KAAA,CAAM,UAAA,KAAe,MAAA,EAAW,MAAA,CAAO,aAAa,KAAA,CAAM,UAAA;AAC9D,EAAA,IAAI,KAAA,CAAM,OAAA,KAAY,MAAA,EAAW,MAAA,CAAO,UAAU,KAAA,CAAM,OAAA;AACxD,EAAA,IAAI,KAAA,CAAM,MAAA,KAAW,MAAA,EAAW,MAAA,CAAO,SAAS,KAAA,CAAM,MAAA;AACtD,EAAA,OAAO,MAAA;AACT;AAgBA,SAAS,UAAA,CACP,GAAA,EACA,KAAA,EACA,IAAA,EACA,OAAA,EAC6B;AAC7B,EAAA,MAAM,OAAO,KAAA,CAAM,IAAA;AACnB,EAAA,IAAI,SAAS,MAAA,EAAW;AAEtB,IAAA,IAAI,CAAC,OAAA,CAAQ,GAAA,CAAI,MAAM,CAAA,EAAG;AACxB,MAAA,GAAA;AAAA,QACE,GAAA;AAAA,QACA,cAAA;AAAA,QACA,GAAG,IAAI,CAAA,KAAA,CAAA;AAAA,QACP,GAAG,IAAI,CAAA,wEAAA,EACoB,iBAAA,CAAkB,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,OACzD;AAAA,IACF;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AAEA,EAAA,IAAI,EAAA,GAAK,IAAA;AACT,EAAA,MAAM,MAAA,GAAS,YAAY,KAAK,CAAA;AAMhC,EAAA,IAAI,KAAA,CAAM,QAAA,KAAa,MAAA,IAAa,CAAC,WAAA,CAAY,GAAA,EAAK,KAAA,CAAM,QAAA,EAAU,CAAA,EAAG,IAAI,CAAA,SAAA,CAAW,CAAA,CAAE,EAAA,EAAI;AAC5F,IAAA,EAAA,GAAK,KAAA;AAAA,EACP;AACA,EAAA,IACE,KAAA,CAAM,OAAA,KAAY,MAAA,IAClB,aAAA,CAAc,KAAK,KAAA,CAAM,OAAA,EAAS,CAAA,EAAG,IAAI,YAAY,EAAE,UAAA,EAAY,IAAA,EAAM,MAAM,MAAA,EAC/E;AACA,IAAA,EAAA,GAAK,KAAA;AAAA,EACP;AACA,EAAA,IACE,KAAA,CAAM,YAAA,KAAiB,MAAA,IACvB,aAAA,CAAc,KAAK,KAAA,CAAM,YAAA,EAAc,CAAA,EAAG,IAAI,iBAAiB,EAAE,UAAA,EAAY,IAAA,EAAM,MACjF,MAAA,EACF;AACA,IAAA,EAAA,GAAK,KAAA;AAAA,EACP;AACA,EAAA,IACE,KAAA,CAAM,UAAA,KAAe,MAAA,IACrB,CAAC,cAAA,CAAe,GAAA,EAAK,KAAA,CAAM,UAAA,EAAY,CAAA,EAAG,IAAI,CAAA,WAAA,CAAa,CAAA,CAAE,EAAA,EAC7D;AACA,IAAA,EAAA,GAAK,KAAA;AAAA,EACP;AACA,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI,KAAA,CAAM,WAAW,MAAA,EAAW;AAC9B,IAAA,MAAM,MAAM,UAAA,CAAW,GAAA,EAAK,MAAM,MAAA,EAAQ,CAAA,EAAG,IAAI,CAAA,OAAA,CAAS,CAAA;AAC1D,IAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,EAAA,GAAK,KAAA;AAAA,kBACJ,GAAA,CAAI,KAAA;AAAA,EACpB;AAEA,EAAA,IAAI,IAAA,KAAS,KAAA,IAAS,IAAA,KAAS,KAAA,EAAO;AAGpC,IAAA,KAAA,MAAW,OAAO,aAAA,EAAe;AAC/B,MAAA,IAAI,CAAC,OAAA,CAAQ,GAAA,CAAI,GAAG,CAAA,EAAG;AACvB,MAAA,GAAA;AAAA,QACE,GAAA;AAAA,QACA,cAAA;AAAA,QACA,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,GAAG,CAAA,CAAA;AAAA,QACd,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,GAAG,0CAA0C,IAAI,CAAA,0FAAA;AAAA,OAE9D;AACA,MAAA,EAAA,GAAK,KAAA;AAAA,IACP;AACA,IAAA,KAAA,MAAW,OAAO,OAAA,EAAS;AACzB,MAAA,IAAI,WAAW,GAAG,CAAA,IAAM,aAAA,CAAoC,QAAA,CAAS,GAAG,CAAA,EAAG;AAC3E,MAAA,GAAA,CAAI,GAAA,EAAK,aAAA,EAAe,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,GAAG,CAAA,CAAA,EAAI,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,GAAG,CAAA,sBAAA,CAAwB,CAAA;AAChF,MAAA,EAAA,GAAK,KAAA;AAAA,IACP;AACA,IAAA,MAAM,KAAA,GAA8B,EAAE,IAAA,EAAM,GAAG,MAAA,EAAO;AACtD,IAAA,IAAI,MAAA,KAAW,MAAA,EAAW,KAAA,CAAM,MAAA,GAAS,MAAA;AACzC,IAAA,OAAO,KAAK,KAAA,GAAQ,MAAA;AAAA,EACtB;AAEA,EAAA,MAAM,GAAA,GAA0B,EAAE,IAAA,EAAM,GAAG,MAAA,EAAO;AAElD,EAAA,IAAI,KAAA,CAAM,YAAY,MAAA,EAAW;AAC/B,IAAA,GAAA,CAAI,UAAU,KAAA,CAAM,OAAA;AAAA,EACtB,CAAA,MAAA,IAAW,CAAC,OAAA,CAAQ,GAAA,CAAI,SAAS,CAAA,IAAK,KAAA,CAAM,WAAW,MAAA,EAAW;AAChE,IAAA,GAAA;AAAA,MACE,GAAA;AAAA,MACA,iBAAA;AAAA,MACA,GAAG,IAAI,CAAA,QAAA,CAAA;AAAA,MACP,GAAG,IAAI,CAAA,gEAAA;AAAA,KACT;AACA,IAAA,EAAA,GAAK,KAAA;AAAA,EACP;AAEA,EAAA,MAAM,kBAAkB,kBAAA,CAAmB,GAAA,EAAK,MAAM,SAAA,EAAW,MAAA,EAAQ,MAAM,OAAO,CAAA;AACtF,EAAA,IAAI,CAAC,eAAA,CAAgB,EAAA,EAAI,EAAA,GAAK,KAAA;AAAA,OACzB,MAAA,CAAO,MAAA,CAAO,GAAA,EAAK,eAAA,CAAgB,KAAK,CAAA;AAE7C,EAAA,IAAI,KAAA,CAAM,YAAA,KAAiB,MAAA,EAAW,GAAA,CAAI,eAAe,KAAA,CAAM,YAAA;AAC/D,EAAA,IAAI,KAAA,CAAM,SAAA,KAAc,MAAA,EAAW,GAAA,CAAI,YAAY,KAAA,CAAM,SAAA;AACzD,EAAA,IAAI,KAAA,CAAM,YAAA,KAAiB,MAAA,EAAW,GAAA,CAAI,eAAe,KAAA,CAAM,YAAA;AAC/D,EAAA,IAAI,KAAA,CAAM,SAAA,KAAc,MAAA,EAAW,GAAA,CAAI,YAAY,KAAA,CAAM,SAAA;AAEzD,EAAA,OAAO,KAAK,GAAA,GAAM,MAAA;AACpB;AA4CO,SAAS,gBAAA,CACd,GAAA,EACA,OAAA,GAAmC,EAAC,EAChB;AACpB,EAAA,MAAM,GAAA,GAAW,EAAE,WAAA,EAAa,EAAC,EAAE;AACnC,EAAA,MAAM,WAAuC,EAAE,OAAA,EAAS,CAAA,EAAG,SAAA,EAAW,EAAC,EAAE;AACzE,EAAA,MAAM,SAAS,OAAA,CAAQ,MAAA,GAAS,CAAA,EAAG,OAAA,CAAQ,MAAM,CAAA,EAAA,CAAA,GAAO,EAAA;AAGxD,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,KAAA,KAAU,MAAA,IAAa,QAAQ,KAAA,KAAU,SAAA;AAEjE,EAAA,IAAI,GAAA,KAAQ,UAAa,GAAA,KAAQ,IAAA,SAAa,EAAE,QAAA,EAAU,WAAA,EAAa,GAAA,CAAI,WAAA,EAAY;AACvF,EAAA,IAAI,CAAC,aAAA,CAAc,GAAG,CAAA,EAAG;AACvB,IAAA,GAAA,CAAI,GAAA,EAAK,cAAA,EAAgB,EAAA,EAAI,CAAA,EAAG,MAAM,CAAA,+BAAA,CAAiC,CAAA;AACvE,IAAA,OAAO,EAAE,QAAA,EAAU,WAAA,EAAa,GAAA,CAAI,WAAA,EAAY;AAAA,EAClD;AAEA,EAAA,IAAI,GAAA,CAAI,OAAA,KAAY,MAAA,IAAa,GAAA,CAAI,YAAY,CAAA,EAAG;AAClD,IAAA,GAAA,CAAI,GAAA,EAAK,uBAAuB,SAAA,EAAW,CAAA,uBAAA,EAA0B,OAAO,GAAA,CAAI,OAAO,CAAC,CAAA,CAAA,CAAG,CAAA;AAC3F,IAAA,OAAO,EAAE,QAAA,EAAU,WAAA,EAAa,GAAA,CAAI,WAAA,EAAY;AAAA,EAClD;AAEA,EAAA,KAAA,MAAW,GAAA,IAAO,MAAA,CAAO,IAAA,CAAK,GAAG,CAAA,EAAG;AAClC,IAAA,IAAI,GAAA,KAAQ,SAAA,IAAa,GAAA,KAAQ,WAAA,EAAa;AAC9C,IAAA,IAAI,QAAQ,OAAA,EAAS;AACnB,MAAA,IAAA;AAAA,QACE,GAAA;AAAA,QACA,gBAAA;AAAA,QACA,OAAA;AAAA,QACA;AAAA,OACF;AACA,MAAA;AAAA,IACF;AACA,IAAA,IAAA,CAAK,GAAA,EAAK,aAAA,EAAe,GAAA,EAAK,CAAA,EAAG,GAAG,CAAA,8CAAA,CAA2C,CAAA;AAAA,EACjF;AAEA,EAAA,IAAI,GAAA,CAAI,cAAc,MAAA,EAAW,OAAO,EAAE,QAAA,EAAU,WAAA,EAAa,IAAI,WAAA,EAAY;AACjF,EAAA,IAAI,CAAC,aAAA,CAAc,GAAA,CAAI,SAAS,CAAA,EAAG;AACjC,IAAA,GAAA,CAAI,GAAA,EAAK,cAAA,EAAgB,WAAA,EAAa,kDAA6C,CAAA;AACnF,IAAA,OAAO,EAAE,QAAA,EAAU,WAAA,EAAa,GAAA,CAAI,WAAA,EAAY;AAAA,EAClD;AAEA,EAAA,KAAA,MAAW,CAAC,IAAI,QAAQ,CAAA,IAAK,OAAO,OAAA,CAAQ,GAAA,CAAI,SAAS,CAAA,EAAG;AAC1D,IAAA,MAAM,IAAA,GAAO,aAAa,EAAE,CAAA,CAAA;AAC5B,IAAA,IAAI,CAAC,gBAAA,CAAiB,EAAE,CAAA,EAAG;AACzB,MAAA,GAAA;AAAA,QACE,GAAA;AAAA,QACA,YAAA;AAAA,QACA,IAAA;AAAA,QACA,IAAI,EAAE,CAAA,2GAAA;AAAA,OAER;AACA,MAAA;AAAA,IACF;AACA,IAAA,MAAM,IAAA,GAAO,SAAA,CAAU,GAAA,EAAK,QAAA,EAAU,IAAI,CAAA;AAC1C,IAAA,IAAI,CAAC,IAAA,EAAM;AACX,IAAA,IAAI,OAAA,EAAS;AACX,MAAA,QAAA,CAAS,SAAA,CAAU,EAAE,CAAA,GAAI,IAAA,CAAK,KAAA;AAC9B,MAAA;AAAA,IACF;AACA,IAAA,MAAM,QAAQ,UAAA,CAAW,GAAA,EAAK,KAAK,KAAA,EAAO,IAAA,EAAM,KAAK,OAAO,CAAA;AAC5D,IAAA,IAAI,KAAA,EAAO,QAAA,CAAS,SAAA,CAAU,EAAE,CAAA,GAAI,KAAA;AAAA,EACtC;AAEA,EAAA,IAAI,QAAQ,MAAA,EAAQ;AAClB,IAAA,KAAA,MAAW,UAAA,IAAc,IAAI,WAAA,EAAa;AACxC,MAAA,UAAA,CAAW,OAAA,GAAU,CAAA,EAAG,MAAM,CAAA,EAAG,WAAW,OAAO,CAAA,CAAA;AAAA,IACrD;AAAA,EACF;AACA,EAAA,OAAO,EAAE,QAAA,EAAU,WAAA,EAAa,GAAA,CAAI,WAAA,EAAY;AAClD;AAKO,SAAS,eAAe,KAAA,EAAiC;AAC9D,EAAA,OAAO,MAAM,OAAA,KAAY,KAAA;AAC3B;AAGO,SAAS,eAAe,KAAA,EAAyD;AACtF,EAAA,IAAI,MAAM,IAAA,KAAS,KAAA,IAAS,KAAA,CAAM,IAAA,KAAS,SAAS,OAAO,MAAA;AAC3D,EAAA,OAAO,MAAM,SAAA,IAAa,QAAA;AAC5B;AAWO,SAAS,oBAAoB,KAAA,EAA4C;AAC9E,EAAA,IAAI,KAAA,CAAM,QAAA,EAAU,OAAO,KAAA,CAAM,QAAA;AACjC,EAAA,MAAM,SAAA,GAAY,eAAe,KAAK,CAAA;AACtC,EAAA,IAAI,CAAC,SAAA,IAAa,SAAA,KAAc,QAAA,EAAU,OAAO,MAAA;AACjD,EAAA,MAAM,QAAA,GAAW,+BAA+B,SAAS,CAAA;AACzD,EAAA,MAAM,SAAU,KAAA,CAA6B,MAAA;AAC7C,EAAA,IAAI,CAAC,QAAQ,OAAO,MAAA;AACpB,EAAA,MAAM,MAAA,GAAiC,EAAE,GAAG,MAAA,EAAO;AACnD,EAAA,IAAI,SAAA,KAAc,QAAA,EAAU,MAAA,CAAO,SAAA,KAAc,QAAA;AACjD,EAAA,IAAI,GAAA,GAAM,QAAA;AACV,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,EAAG;AACjD,IAAA,GAAA,GAAM,GAAA,CAAI,UAAA,CAAW,CAAA,CAAA,EAAI,GAAG,KAAK,KAAK,CAAA;AAAA,EACxC;AACA,EAAA,OAAO,aAAA,CAAc,IAAA,CAAK,GAAG,CAAA,GAAI,MAAA,GAAY,GAAA;AAC/C;AAcO,SAAS,0BAA0B,GAAA,EAA6C;AACrF,EAAA,MAAM,OAAA,GAAU,KAAK,IAAA,EAAK;AAC1B,EAAA,IAAI,CAAC,SAAS,OAAO,MAAA;AACrB,EAAA,MAAM,MAAA,GAAS,4BAA4B,OAAO,CAAA;AAClD,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,OAAO,OAAA,CAAQ,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA,CAAE,OAAA,CAAQ,QAAA,EAAU,EAAE,CAAA,CAAE,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA,IAAK,MAAA;AAAA,EAClF;AAGA,EAAA,MAAM,IAAA,GAAO,MAAA,CAAO,QAAA,CAAS,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA,CAAE,OAAA,CAAQ,QAAA,EAAU,EAAE,CAAA,CAAE,OAAA,CAAQ,QAAQ,EAAE,CAAA;AACzF,EAAA,OAAO,CAAA,EAAG,MAAA,CAAO,MAAM,CAAA,EAAG,IAAI,GAAG,MAAA,CAAO,MAAM,CAAA,EAAG,MAAA,CAAO,IAAI,CAAA,CAAA;AAC9D;AAOA,SAAS,4BAA4B,GAAA,EAA8B;AACjE,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,IAAI,IAAI,GAAG,CAAA;AAAA,EACtB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,IAAI,OAAO,QAAA,KAAa,OAAA,IAAW,MAAA,CAAO,QAAA,KAAa,UAAU,OAAO,MAAA;AACxE,EAAA,IAAI,MAAA,CAAO,QAAA,IAAY,MAAA,CAAO,QAAA,EAAU,OAAO,MAAA;AAC/C,EAAA,OAAO,MAAA;AACT;AAUO,SAAS,qBAAA,CACd,KACA,OAAA,EACoB;AACpB,EAAA,OAAO,OAAA,KAAY,oBAAA,GAAuB,yBAAA,CAA0B,GAAG,CAAA,GAAI,GAAA;AAC7E;AAIA,IAAM,UAAA,GAAgD;AAAA,EACpD,OAAA,EAAS,CAAA;AAAA,EACT,IAAA,EAAM,CAAA;AAAA,EACN,SAAA,EAAW,CAAA;AAAA,EACX,OAAA,EAAS,CAAA;AAAA,EACT,OAAA,EAAS;AACX,CAAA;AAMA,SAAS,SAAA,CAAU,MAAe,GAAA,EAAuB;AACvD,EAAA,IAAI,IAAA,KAAS,QAAW,OAAO,GAAA;AAC/B,EAAA,IAAI,GAAA,KAAQ,QAAW,OAAO,IAAA;AAC9B,EAAA,IAAI,CAAC,cAAc,IAAI,CAAA,IAAK,CAAC,aAAA,CAAc,GAAG,GAAG,OAAO,IAAA;AACxD,EAAA,MAAM,GAAA,GAA+B,EAAE,GAAG,GAAA,EAAI;AAC9C,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,IAAI,CAAA,EAAG;AAC/C,IAAA,GAAA,CAAI,GAAG,CAAA,GAAI,SAAA,CAAU,KAAA,EAAO,GAAA,CAAI,GAAG,CAAC,CAAA;AAAA,EACtC;AACA,EAAA,OAAO,GAAA;AACT;AAqBO,SAAS,gBAAgB,MAAA,EAA6D;AAC3F,EAAA,MAAM,OAAA,GAAU,MAAA,CACb,GAAA,CAAI,CAAC,OAAO,KAAA,MAAW,EAAE,KAAA,EAAO,KAAA,EAAM,CAAE,CAAA,CACxC,IAAA,CAAK,CAAC,GAAG,CAAA,KAAM;AACd,IAAA,MAAM,IAAA,GAAO,WAAW,CAAA,CAAE,KAAA,CAAM,KAAK,CAAA,GAAI,UAAA,CAAW,CAAA,CAAE,KAAA,CAAM,KAAK,CAAA;AACjE,IAAA,OAAO,IAAA,KAAS,CAAA,GAAI,IAAA,GAAO,CAAA,CAAE,QAAQ,CAAA,CAAE,KAAA;AAAA,EACzC,CAAC,CAAA,CACA,GAAA,CAAI,CAAC,CAAA,KAAM,EAAE,KAAK,CAAA;AAErB,EAAA,MAAM,YAAqC,EAAC;AAC5C,EAAA,MAAM,SAA4C,EAAC;AACnD,EAAA,MAAM,QAAkB,EAAC;AACzB,EAAA,MAAM,MAAA,uBAAa,GAAA,EAAY;AAE/B,EAAA,KAAA,MAAW,EAAE,KAAA,EAAO,SAAA,EAAW,OAAA,MAAa,OAAA,EAAS;AACnD,IAAA,KAAA,MAAW,CAAC,EAAA,EAAI,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,OAAO,CAAA,EAAG;AACjD,MAAA,IAAI,MAAA,CAAO,GAAA,CAAI,EAAE,CAAA,EAAG;AACpB,MAAA,IAAI,SAAA,CAAU,EAAE,CAAA,KAAM,MAAA,EAAW;AAC/B,QAAA,SAAA,CAAU,EAAE,CAAA,GAAI,EAAE,GAAG,KAAA,EAAM;AAC3B,QAAA,MAAA,CAAO,EAAE,CAAA,GAAI,KAAA;AACb,QAAA,KAAA,CAAM,KAAK,EAAE,CAAA;AAAA,MACf,CAAA,MAAO;AACL,QAAA,SAAA,CAAU,EAAE,CAAA,GAAI,SAAA,CAAU,SAAA,CAAU,EAAE,GAAG,KAAK,CAAA;AAAA,MAChD;AACA,MAAA,IAAI,KAAA,CAAM,MAAA,EAAQ,MAAA,CAAO,GAAA,CAAI,EAAE,CAAA;AAAA,IACjC;AAAA,EACF;AAEA,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,CAAA;AAAA;AAAA;AAAA,IAGT,SAAA;AAAA,IACA,KAAA;AAAA,IACA,MAAA;AAAA,IACA,MAAA,EAAQ,CAAC,GAAG,MAAM;AAAA,GACpB;AACF;AAyCO,SAAS,sBAAA,CACd,MAAA,EACA,OAAA,GAAyC,EAAC,EAChB;AAC1B,EAAA,MAAM,GAAA,GAAW,EAAE,WAAA,EAAa,EAAC,EAAE;AACnC,EAAA,MAAM,YAAgC,EAAC;AACvC,EAAA,MAAM,SAA4C,EAAC;AACnD,EAAA,MAAM,QAAkB,EAAC;AAEzB,EAAA,KAAA,MAAW,EAAA,IAAM,OAAO,KAAA,EAAO;AAC7B,IAAA,MAAM,KAAA,GAA0C,MAAA,CAAO,SAAA,CAAU,EAAE,CAAA;AACnE,IAAA,IAAI,UAAU,MAAA,EAAW;AACzB,IAAA,MAAM,UAA+B,IAAI,GAAA;AAAA,MACvC,OAAO,OAAA,CAAQ,KAAK,EACjB,MAAA,CAAO,CAAC,GAAG,KAAK,CAAA,KAAM,KAAA,KAAU,MAAS,CAAA,CACzC,GAAA,CAAI,CAAC,CAAC,GAAG,MAAM,GAAG;AAAA,KACvB;AACA,IAAA,MAAM,IAAA,GAAO,IAAI,WAAA,CAAY,MAAA;AAC7B,IAAA,MAAM,QAAQ,UAAA,CAAW,GAAA,EAAK,OAAO,CAAA,UAAA,EAAa,EAAE,IAAI,OAAO,CAAA;AAG/D,IAAA,MAAM,gBAAgB,OAAA,CAAQ,OAAA,IAAW,EAAC,EACvC,MAAA,CAAO,CAAC,MAAA,KAAW,MAAA,CAAO,SAAA,CAAU,EAAE,MAAM,MAAS,CAAA,CACrD,IAAI,CAAC,MAAA,KAAW,OAAO,KAAK,CAAA;AAC/B,IAAA,IAAI,YAAA,CAAa,SAAS,CAAA,EAAG;AAC3B,MAAA,MAAM,KAAA,GAAQ,CAAA,iBAAA,EAAoB,YAAA,CAAa,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA,CAAA;AACzD,MAAA,KAAA,MAAW,cAAc,GAAA,CAAI,WAAA,CAAY,MAAM,IAAI,CAAA,aAAc,OAAA,IAAW,KAAA;AAAA,IAC9E;AACA,IAAA,IAAI,UAAU,MAAA,EAAW;AACzB,IAAA,SAAA,CAAU,EAAE,CAAA,GAAI,KAAA;AAChB,IAAA,MAAA,CAAO,EAAE,CAAA,GAAI,MAAA,CAAO,MAAA,CAAO,EAAE,CAAA;AAC7B,IAAA,KAAA,CAAM,KAAK,EAAE,CAAA;AAAA,EACf;AAEA,EAAA,OAAO;AAAA,IACL,QAAA,EAAU;AAAA,MACR,OAAA,EAAS,CAAA;AAAA,MACT,SAAA;AAAA,MACA,KAAA;AAAA,MACA,MAAA;AAAA,MACA,MAAA,EAAQ,OAAO,MAAA,CAAO,MAAA,CAAO,CAAC,EAAA,KAAO,SAAA,CAAU,EAAE,CAAA,KAAM,MAAS;AAAA,KAClE;AAAA,IACA,aAAa,GAAA,CAAI;AAAA,GACnB;AACF;AAWO,SAAS,mBAAA,CACd,QACA,GAAA,EAC0B;AAC1B,EAAA,MAAM,MAAA,GAA8B,IAAI,GAAA,CAAI,GAAG,CAAA;AAC/C,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,KAAA,CAAM,MAAA,CAAO,CAAC,EAAA,KAAO,MAAA,CAAO,GAAA,CAAI,EAAE,CAAA,IAAK,MAAA,CAAO,SAAA,CAAU,EAAE,MAAM,MAAS,CAAA;AAC9F,EAAA,MAAM,YAAgC,EAAC;AACvC,EAAA,MAAM,SAA4C,EAAC;AACnD,EAAA,KAAA,MAAW,MAAM,KAAA,EAAO;AACtB,IAAA,SAAA,CAAU,EAAE,CAAA,GAAI,MAAA,CAAO,SAAA,CAAU,EAAE,CAAA;AACnC,IAAA,MAAA,CAAO,EAAE,CAAA,GAAI,MAAA,CAAO,MAAA,CAAO,EAAE,CAAA;AAAA,EAC/B;AACA,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,CAAA;AAAA,IACT,SAAA;AAAA,IACA,KAAA;AAAA,IACA,MAAA;AAAA,IACA,MAAA,EAAQ,OAAO,MAAA,CAAO,MAAA,CAAO,CAAC,EAAA,KAAO,SAAA,CAAU,EAAE,CAAA,KAAM,MAAS;AAAA,GAClE;AACF;AAGO,SAAS,gBACd,QAAA,EACkC;AAClC,EAAA,IAAI,gBAAA,CAAiB,QAAQ,CAAA,EAAG;AAC9B,IAAA,OAAO,QAAA,CAAS,KAAA,CAAM,GAAA,CAAI,CAAC,EAAA,KAAO,CAAC,EAAA,EAAI,QAAA,CAAS,SAAA,CAAU,EAAE,CAAC,CAA8B,CAAA;AAAA,EAC7F;AACA,EAAA,OAAO,MAAA,CAAO,QAAQ,QAAQ,CAAA;AAChC;AAEA,SAAS,iBACP,QAAA,EACsC;AACtC,EAAA,OAAO,KAAA,CAAM,OAAA,CAAS,QAAA,CAAsC,KAAK,CAAA;AACnE;AAeO,SAAS,mBAAmB,GAAA,EAAkD;AACnF,EAAA,MAAM,KAAA,GAAQ,cAAA,CAAe,IAAA,CAAK,GAAA,CAAI,MAAM,CAAA;AAC5C,EAAA,IAAI,CAAC,OAAO,OAAO,MAAA;AACnB,EAAA,MAAM,GAAG,IAAA,EAAM,IAAI,CAAA,GAAI,KAAA;AACvB,EAAA,MAAM,IAAA,GAAO,KAAK,IAAA,EAAK;AACvB,EAAA,IAAI,IAAA,KAAS,IAAI,OAAO,MAAA;AACxB,EAAA,QAAQ,IAAA;AAAM,IACZ,KAAK,KAAA;AACH,MAAA,OAAO,QAAA,CAAS,KAAK,IAAI,CAAA,GAAI,EAAE,IAAA,EAAM,KAAA,EAAO,IAAA,EAAM,IAAA,EAAK,GAAI,MAAA;AAAA,IAC7D,KAAK,KAAA;AACH,MAAA,OAAO,EAAE,IAAA,EAAM,KAAA,EAAO,OAAA,EAAS,IAAA,EAAK;AAAA,IACtC,KAAK,UAAA;AACH,MAAA,OAAO,EAAE,IAAA,EAAM,UAAA,EAAY,QAAA,EAAU,IAAA,EAAK;AAAA,IAC5C,KAAK,SAAA,EAAW;AACd,MAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA;AAC9B,MAAA,IAAI,SAAS,CAAA,IAAK,KAAA,KAAU,IAAA,CAAK,MAAA,GAAS,GAAG,OAAO,MAAA;AACpD,MAAA,OAAO,EAAE,IAAA,EAAM,SAAA,EAAW,OAAA,EAAS,KAAK,KAAA,CAAM,CAAA,EAAG,KAAK,CAAA,EAAG,OAAA,EAAS,IAAA,CAAK,KAAA,CAAM,KAAA,GAAQ,CAAC,CAAA,EAAE;AAAA,IAC1F;AAAA,IACA;AACE,MAAA,OAAO,MAAA;AAAA;AAEb;AAGO,SAAS,oBAAoB,GAAA,EAAsC;AACxE,EAAA,QAAQ,IAAI,IAAA;AAAM,IAChB,KAAK,KAAA;AACH,MAAA,OAAO,CAAA,IAAA,EAAO,IAAI,IAAI,CAAA,CAAA;AAAA,IACxB,KAAK,KAAA;AACH,MAAA,OAAO,CAAA,IAAA,EAAO,IAAI,OAAO,CAAA,CAAA;AAAA,IAC3B,KAAK,UAAA;AACH,MAAA,OAAO,CAAA,SAAA,EAAY,IAAI,QAAQ,CAAA,CAAA;AAAA,IACjC,KAAK,SAAA;AACH,MAAA,OAAO,CAAA,QAAA,EAAW,GAAA,CAAI,OAAO,CAAA,CAAA,EAAI,IAAI,OAAO,CAAA,CAAA;AAAA;AAElD;AAuBA,SAAS,kBACP,QAAA,EACqC;AACrC,EAAA,OAAO,eAAA,CAAgB,QAAQ,CAAA,CAAE,MAAA;AAAA,IAC/B,CAAC,IAAA,KAAA,CACE,IAAA,CAAK,CAAC,EAAE,IAAA,KAAS,KAAA,IAAS,IAAA,CAAK,CAAC,EAAE,IAAA,KAAS,OAAA,KAAY,cAAA,CAAe,IAAA,CAAK,CAAC,CAAC;AAAA,GAClF;AACF;AAEA,SAAS,mBAAA,CACP,UAAA,EACA,KAAA,EACA,OAAA,EACA,KAAA,EACkB;AAClB,EAAA,OAAO;AAAA,IACL,UAAA;AAAA,IACA,OAAA;AAAA,IACA,iBAAiB,OAAA,KAAY,MAAA,GAAY,SAAa,KAAA,CAAM,SAAA,GAAY,OAAO,CAAA,IAAK,OAAA;AAAA,IACpF,MAAM,KAAA,CAAM,IAAA;AAAA,IACZ,UAAU,KAAA,CAAM;AAAA,GAClB;AACF;AAmBO,SAAS,aAAA,CACd,GAAA,EACA,QAAA,EACA,KAAA,EAC8B;AAC9B,EAAA,MAAM,OAAA,GAAU,kBAAkB,QAAQ,CAAA;AAC1C,EAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,CAAA,EAAG,OAAO,MAAA;AAEjC,EAAA,MAAM,WAAqB,EAAC;AAC5B,EAAA,IAAI,QAAA,GAAW,IAAI,IAAA,EAAK;AACxB,EAAA,IAAI,IAAA;AAEJ,EAAA,IAAI,QAAA,CAAS,UAAA,CAAW,GAAG,CAAA,EAAG;AAC5B,IAAA,IAAA,GAAO,QAAA,CAAS,MAAM,CAAC,CAAA;AACvB,IAAA,MAAM,MAAA,GAAS,QAAQ,IAAI,CAAA;AAC3B,IAAA,IAAI,CAAC,MAAA,EAAQ;AACX,MAAA,QAAA,CAAS,IAAA,CAAK,CAAA,OAAA,EAAU,IAAI,CAAA,+DAAA,CAA4D,CAAA;AACxF,MAAA,MAAM,CAACC,WAAAA,EAAYC,MAAK,CAAA,GAAI,QAAQ,CAAC,CAAA;AACrC,MAAA,OAAO,oBAAoBD,WAAAA,EAAYC,MAAAA,EAAO,QAAW,EAAE,IAAA,EAAM,UAAU,CAAA;AAAA,IAC7E;AACA,IAAA,QAAA,GAAW,OAAO,IAAA,EAAK;AACvB,IAAA,IAAI,QAAA,CAAS,UAAA,CAAW,GAAG,CAAA,EAAG;AAC5B,MAAA,QAAA,CAAS,IAAA,CAAK,CAAA,OAAA,EAAU,IAAI,CAAA,2BAAA,EAA8B,QAAQ,CAAA,4BAAA,CAAyB,CAAA;AAC3F,MAAA,MAAM,CAACD,WAAAA,EAAYC,MAAK,CAAA,GAAI,QAAQ,CAAC,CAAA;AACrC,MAAA,OAAO,oBAAoBD,WAAAA,EAAYC,MAAAA,EAAO,QAAW,EAAE,IAAA,EAAM,UAAU,CAAA;AAAA,IAC7E;AAAA,EACF;AAEA,EAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,OAAA,CAAQ,GAAG,CAAA;AAClC,EAAA,IAAI,QAAQ,CAAA,EAAG;AACb,IAAA,MAAM,IAAA,GAAO,QAAA,CAAS,KAAA,CAAM,CAAA,EAAG,KAAK,CAAA;AACpC,IAAA,MAAM,IAAA,GAAO,QAAA,CAAS,KAAA,CAAM,KAAA,GAAQ,CAAC,CAAA;AACrC,IAAA,MAAM,KAAA,GAAQ,QAAQ,IAAA,CAAK,CAAC,CAAC,EAAE,CAAA,KAAM,OAAO,IAAI,CAAA;AAChD,IAAA,IAAI,KAAA,IAAS,SAAS,EAAA,EAAI;AACxB,MAAA,OAAO,mBAAA,CAAoB,KAAA,CAAM,CAAC,CAAA,EAAG,KAAA,CAAM,CAAC,CAAA,EAAG,IAAA,EAAM,EAAE,IAAA,EAAM,QAAA,EAAU,CAAA;AAAA,IACzE;AACA,IAAA,IAAI,CAAC,KAAA,IAAS,eAAA,CAAgB,QAAQ,CAAA,CAAE,IAAA,CAAK,CAAC,CAAC,EAAE,CAAA,KAAM,EAAA,KAAO,IAAI,CAAA,EAAG;AACnE,MAAA,QAAA,CAAS,IAAA,CAAK,CAAA,UAAA,EAAa,IAAI,CAAA,qDAAA,CAAkD,CAAA;AAAA,IACnF;AAAA,EACF;AAEA,EAAA,MAAM,SAAS,OAAA,CAAQ,IAAA;AAAA,IACrB,CAAC,GAAGA,MAAK,CAAA,KAAMA,MAAAA,CAAM,SAAA,GAAY,QAAQ,CAAA,KAAM,MAAA,IAAaA,MAAAA,CAAM,YAAA,GAAe,QAAQ;AAAA,GAC3F;AACA,EAAA,MAAM,CAAC,UAAA,EAAY,KAAK,CAAA,GAAI,MAAA,IAAU,QAAQ,CAAC,CAAA;AAC/C,EAAA,OAAO,oBAAoB,UAAA,EAAY,KAAA,EAAO,UAAU,EAAE,IAAA,EAAM,UAAU,CAAA;AAC5E","file":"chunk-LSI2IVFT.js","sourcesContent":["/**\n * The AI provider registry — one keyed definition of every LLM / voice endpoint\n * the runtime may talk to.\n *\n * This module is the **single canonical home** of the registry record: its\n * types, its validation, the layered merge (§1.5), the `base_url` derivation\n * (§1.3), the credential-reference grammar (§1.4) and the model-reference\n * parser. Nothing here is duplicated in `bridge`, `runner` or `platform` — the\n * structurally-identical-copy pattern that `CloudConfig` fell into is exactly\n * what this module exists to avoid.\n *\n * Vocabulary: this is the **AI provider** registry. It is unrelated to the\n * platform's connector `ProviderType` / `ProviderLink` (git, SharePoint,\n * Drive…). Types are named `AIProvider*` throughout, never bare `Provider*`.\n *\n * The `surface` enum is omp's `api` vocabulary verbatim, so the omp adapter is\n * a serializer rather than a translator.\n *\n * @see PROVIDER-CONFIG-PLAN.md §1\n */\n\n// No runtime imports: this module is the schema, and it must stay loadable in a\n// browser bundle. Credential *resolution* (which spawns processes and reads\n// `process.env`) lives in `./provider-registry-credentials.ts`.\n\n// ── Enums ──────────────────────────────────────────────────────────────────\n\n/**\n * What an entry produces. `llm` and `embed` carry a wire `surface`; `stt` and\n * `tts` use the reduced voice record (§1.7).\n */\nexport const AI_PROVIDER_KINDS = [\"llm\", \"stt\", \"tts\", \"embed\"] as const;\n\n/** Union of {@link AI_PROVIDER_KINDS}. */\nexport type AIProviderKind = (typeof AI_PROVIDER_KINDS)[number];\n\n/** Kinds that use the voice subset of the record (§1.7). */\nexport const AI_PROVIDER_VOICE_KINDS = [\"stt\", \"tts\"] as const;\n\n/** Union of {@link AI_PROVIDER_VOICE_KINDS}. */\nexport type AIProviderVoiceKind = (typeof AI_PROVIDER_VOICE_KINDS)[number];\n\n/**\n * Wire protocol — the discriminator a harness adapter switches on. These are\n * omp's `api` values verbatim (Codex CLI calls the same concept `wire_api`).\n */\nexport const AI_PROVIDER_SURFACES = [\n  \"anthropic-messages\",\n  \"openai-completions\",\n  \"openai-responses\",\n  \"openai-codex-responses\",\n  \"azure-openai-responses\",\n  \"bedrock-converse-stream\",\n  \"google-generative-ai\",\n  \"google-vertex\",\n] as const;\n\n/** Union of {@link AI_PROVIDER_SURFACES}. */\nexport type AIProviderSurface = (typeof AI_PROVIDER_SURFACES)[number];\n\n/** How the request reaches the surface — selects the `params` shape (§1.3). */\nexport const AI_PROVIDER_TRANSPORTS = [\n  \"direct\",\n  \"bedrock\",\n  \"vertex\",\n  \"foundry\",\n  \"azure-openai\",\n] as const;\n\n/** Union of {@link AI_PROVIDER_TRANSPORTS}. */\nexport type AIProviderTransport = (typeof AI_PROVIDER_TRANSPORTS)[number];\n\n/**\n * How the credential is presented (§1.4). `command` is a reserved grammar slot:\n * the schema accepts it, no refresh loop ships yet.\n */\nexport const AI_PROVIDER_CREDENTIAL_KINDS = [\n  \"api_key_header\",\n  \"bearer\",\n  \"sigv4\",\n  \"google_adc\",\n  \"azure_entra\",\n  \"oauth\",\n  \"none\",\n  \"command\",\n] as const;\n\n/** Union of {@link AI_PROVIDER_CREDENTIAL_KINDS}. */\nexport type AIProviderCredentialKind = (typeof AI_PROVIDER_CREDENTIAL_KINDS)[number];\n\n/**\n * Credential kinds that cannot work without a `ref`. The rest either sign from\n * an ambient chain (`sigv4`, `google_adc`, `azure_entra`) or need nothing\n * (`none`).\n */\nconst CREDENTIAL_REF_REQUIRED: Partial<Record<AIProviderCredentialKind, true>> = {\n  api_key_header: true,\n  bearer: true,\n  oauth: true,\n  command: true,\n};\n\n/** omp-compatible model-discovery probes. Unknown values are tolerated with a warning. */\nexport const AI_PROVIDER_DISCOVERY_TYPES = [\n  \"openai-models-list\",\n  \"anthropic-models-list\",\n  \"google-models-list\",\n  \"none\",\n] as const;\n\n/** Union of {@link AI_PROVIDER_DISCOVERY_TYPES}. */\nexport type AIProviderDiscoveryType = (typeof AI_PROVIDER_DISCOVERY_TYPES)[number];\n\n/**\n * Configuration layers, **lowest precedence first** (§1.5). `runtime` is the\n * CLI/runtime override layer (`--model`, `--api-key`); `session` is the\n * control-plane layer the platform injects into `session_init`.\n */\nexport const AI_PROVIDER_LAYERS = [\"catalog\", \"user\", \"workspace\", \"runtime\", \"session\"] as const;\n\n/** Union of {@link AI_PROVIDER_LAYERS}. */\nexport type AIProviderLayerId = (typeof AI_PROVIDER_LAYERS)[number];\n\n// ── Record ─────────────────────────────────────────────────────────────────\n\n/** `transport: bedrock` routing parameters. */\nexport interface AIProviderBedrockParams {\n  /** AWS region, e.g. `us-east-1`. */\n  region: string;\n}\n\n/** `transport: vertex` routing parameters. */\nexport interface AIProviderVertexParams {\n  /** GCP project id. */\n  project: string;\n  /** Vertex location, e.g. `europe-west4`. */\n  location: string;\n  /** Model publisher; defaults to `google` (use `anthropic` for Claude on Vertex). */\n  publisher?: string;\n}\n\n/** `transport: foundry` routing parameters. */\nexport interface AIProviderFoundryParams {\n  /** Azure AI Foundry resource name (the `{resource}` in the endpoint host). */\n  resource: string;\n}\n\n/**\n * `transport: azure-openai` routing parameters. `resource` is required even\n * though the plan's §1.3 table lists only `deployment`/`api_version`: the\n * derived `base_url` in that same row interpolates `{resource}`.\n */\nexport interface AIProviderAzureOpenAIParams {\n  /** Azure OpenAI resource name (the `{resource}` in the endpoint host). */\n  resource: string;\n  /** Deployment name the request is routed to. */\n  deployment: string;\n  /** `api-version` query value; mirrored into `query_params` by the adapter. */\n  api_version: string;\n}\n\n/** Free-form voice parameters, typed per preset (Deepgram, ElevenLabs, …). */\nexport type AIProviderVoiceParams = Record<string, string | number | boolean>;\n\n/**\n * The `transport` → `params` discriminated union (§1.3, decision §9.9). An open\n * `Record<string, string>` would lose per-transport field rendering in the\n * admin UI, so the pairing is encoded in the type.\n */\nexport type AIProviderTransportSlice =\n  | { transport?: \"direct\"; params?: Record<string, never> }\n  | { transport: \"bedrock\"; params: AIProviderBedrockParams }\n  | { transport: \"vertex\"; params: AIProviderVertexParams }\n  | { transport: \"foundry\"; params: AIProviderFoundryParams }\n  | { transport: \"azure-openai\"; params: AIProviderAzureOpenAIParams };\n\n/** Reference to a secret. Never the secret itself — see {@link parseCredentialRef}. */\nexport interface AIProviderCredential {\n  kind: AIProviderCredentialKind;\n  /**\n   * `env:NAME` · `cmd:<shell>` · `platform:<configId>` · `keyring:<service>/<account>`.\n   * A literal secret here is a validation error.\n   */\n  ref?: string;\n}\n\n/** Per-model capability facts; unknown ids otherwise truncate silently. */\nexport interface AIProviderCapabilities {\n  context_window?: number;\n  tools?: boolean;\n  images?: boolean;\n  thinking_max?: number;\n}\n\n/** omp-compatible discovery descriptor. */\nexport interface AIProviderDiscovery {\n  type: AIProviderDiscoveryType | (string & {});\n  /** Path appended to `base_url` when the surface default does not apply. */\n  path?: string;\n}\n\n/** Fields every entry carries, whatever its `kind`. */\nexport interface AIProviderEntryCommon {\n  /** Display name. Never load-bearing. */\n  label?: string;\n  /** Catalog preset this entry inherits from (`bridge/src/provider-catalog.ts`). */\n  preset?: string;\n  /** Literal endpoint; wins over the preset value and the transport derivation. */\n  base_url?: string;\n  /** Static, non-secret request headers. */\n  headers?: Record<string, string>;\n  credential?: AIProviderCredential;\n  /** Default `true`; read it through {@link isEntryEnabled}. */\n  enabled?: boolean;\n  /** Set by the control plane: lower layers cannot override this entry (§1.5). */\n  locked?: boolean;\n}\n\n/** An `llm`/`embed` entry — the full record. */\nexport type AIProviderLlmEntry = AIProviderEntryCommon &\n  AIProviderTransportSlice & {\n    kind: \"llm\" | \"embed\";\n    /** Required unless a `preset` supplies it. */\n    surface?: AIProviderSurface;\n    /** Azure's `api-version` lives here. */\n    query_params?: Record<string, string>;\n    /** Logical id → provider-side id. */\n    model_map?: Record<string, string>;\n    /** Keyed by the *logical* id, i.e. the `model_map` key. */\n    capabilities?: Record<string, AIProviderCapabilities>;\n    discovery?: AIProviderDiscovery;\n  };\n\n/**\n * An `stt`/`tts` entry — the reduced record (§1.7). `surface`, `transport`,\n * `model_map`, `capabilities` and `discovery` are `llm`-only and rejected here:\n * a TTS voice is not a wire protocol.\n */\nexport type AIProviderVoiceEntry = AIProviderEntryCommon & {\n  kind: AIProviderVoiceKind;\n  /** Preset-typed: Deepgram `{model, language}`, ElevenLabs `{voice_id, output_format}`. */\n  params?: AIProviderVoiceParams;\n};\n\n/** One registry entry. */\nexport type AIProviderEntry = AIProviderLlmEntry | AIProviderVoiceEntry;\n\n/** Entry id → entry. Iteration order is registry order. */\nexport type AIProviderRegistry = Record<string, AIProviderEntry>;\n\n/**\n * Any entry's `params`: transport routing parameters (§1.3) or voice options\n * (§1.7). Which of them applies is decided by `transport` and `kind`, and a\n * layer may not carry either — so a patch holds the union and\n * {@link validateMergedRegistry} narrows it.\n */\nexport type AIProviderParams =\n  | AIProviderBedrockParams\n  | AIProviderVertexParams\n  | AIProviderFoundryParams\n  | AIProviderAzureOpenAIParams\n  | AIProviderVoiceParams;\n\n/**\n * An entry as a single layer may write it (§1.5): any subset of the record,\n * `kind` included. A `<workspace>/.skaile/providers.yml` that names `base_url`\n * alone is an override of one field, not a redefinition — so a layer holds\n * patches, and completeness is gated on the merged entry\n * ({@link validateMergedRegistry}) rather than per layer.\n *\n * Every {@link AIProviderEntry} is a patch; the reverse needs the gate. The\n * `transport`/`params` pairing is deliberately un-discriminated here, because\n * the two halves may come from different layers.\n */\nexport type AIProviderEntryPatch = AIProviderEntryCommon & {\n  kind?: AIProviderKind;\n  surface?: AIProviderSurface;\n  transport?: AIProviderTransport;\n  params?: AIProviderParams;\n  query_params?: Record<string, string>;\n  model_map?: Record<string, string>;\n  capabilities?: Record<string, AIProviderCapabilities>;\n  discovery?: AIProviderDiscovery;\n};\n\n/** Entry id → partial entry: one layer's contribution to the registry. */\nexport type AIProviderRegistryPatch = Record<string, AIProviderEntryPatch>;\n\n/** A parsed `providers.yml` document — one layer, so entries may be partial. */\nexport interface AIProviderRegistryDocument {\n  version: 1;\n  providers: AIProviderRegistryPatch;\n}\n\n/** One input to {@link mergeRegistries}. */\nexport interface AIProviderRegistryLayer {\n  layer: AIProviderLayerId;\n  providers: AIProviderRegistryPatch;\n}\n\n/** The merged view every consumer reads. */\nexport interface MergedAIProviderRegistry {\n  version: 1;\n  providers: AIProviderRegistry;\n  /**\n   * Registry order: highest-precedence layer first, document order within a\n   * layer. Bare model ids resolve down this list (§1.6).\n   */\n  order: string[];\n  /** Highest-precedence layer that contributed to each entry. */\n  origin: Record<string, AIProviderLayerId>;\n  /** Entries frozen by `locked: true`; lower layers were ignored for these. */\n  locked: string[];\n}\n\n// ── Diagnostics ────────────────────────────────────────────────────────────\n\n/** Severity of an {@link AIProviderDiagnostic}. */\nexport type AIProviderDiagnosticSeverity = \"error\" | \"warning\";\n\n/**\n * A structured note about a registry document. {@link validateRegistry} never\n * throws: every problem is reported here with the offending key in `path`, and\n * each caller (CLI, runner, platform) decides how loud to be.\n */\nexport interface AIProviderDiagnostic {\n  /** Stable machine code, e.g. `\"literal_secret\"` / `\"unknown_surface\"`. */\n  code: string;\n  severity: AIProviderDiagnosticSeverity;\n  /** Human-readable, actionable message. */\n  message: string;\n  /** Dotted path to the offending key, e.g. `providers.groq.headers.x-api-key`. */\n  path: string;\n}\n\n/** Result of {@link validateRegistry}: the surviving document plus every note. */\nexport interface RegistryValidation {\n  /** Entries that produced an error diagnostic are omitted. */\n  document: AIProviderRegistryDocument;\n  diagnostics: AIProviderDiagnostic[];\n}\n\n// ── Validation ─────────────────────────────────────────────────────────────\n\n/** Entry ids are file-safe, env-var-derivable keys. */\nconst SAFE_ID = /^[a-z0-9][a-z0-9_-]*$/;\n\n/** POSIX environment variable name. */\nconst ENV_NAME = /^[A-Za-z_][A-Za-z0-9_]*$/;\n\n/** The four `credential.ref` forms (§1.4). */\nconst CREDENTIAL_REF = /^(env|cmd|platform|keyring):([\\s\\S]+)$/;\n\n/** Header/query keys whose value must be an indirection, never a literal. */\nconst SECRET_KEY =\n  /(^|[-_])(api[-_]?key|apikey|authorization|auth|token|secret|password|passwd|credential|credentials|cookie)([-_]|$)|^key$/i;\n\n/** Value shapes that are a secret whatever the key is called. */\nconst SECRET_VALUE_PATTERNS: RegExp[] = [\n  /^sk-/i,\n  /^xai-/i,\n  /^gsk_/,\n  /^(ghp|gho|ghu|ghs)_/,\n  /^github_pat_/,\n  /^xox[baprs]-/,\n  /^AIza[0-9A-Za-z_-]{10,}/,\n  /^(Bearer|Token|Basic)\\s+\\S{8,}$/i,\n  // Long opaque blob: no spaces, no dots, no scheme punctuation.\n  /^[A-Za-z0-9+/_-]{40,}={0,2}$/,\n];\n\n/** `${...}` interpolation — the escape hatch for a templated, non-literal value. */\nconst INTERPOLATION = /\\$\\{[^}]+\\}/;\n\n/** Every key the `llm`/`embed` record accepts. */\nconst LLM_KEYS: Record<string, true> = {\n  kind: true,\n  label: true,\n  preset: true,\n  surface: true,\n  transport: true,\n  base_url: true,\n  params: true,\n  headers: true,\n  query_params: true,\n  credential: true,\n  model_map: true,\n  capabilities: true,\n  discovery: true,\n  enabled: true,\n  locked: true,\n};\n\n/** Every key the `stt`/`tts` record accepts (§1.7). */\nconst VOICE_KEYS: Record<string, true> = {\n  kind: true,\n  label: true,\n  preset: true,\n  base_url: true,\n  params: true,\n  headers: true,\n  credential: true,\n  enabled: true,\n  locked: true,\n};\n\n/**\n * Every key either record accepts. This is the allow-list a *layer* is read\n * against: which of the two records applies is only known once `kind` is, and\n * a layer may leave `kind` to a lower one (§1.5). The `llm`-only keys are\n * rejected on a voice entry by {@link checkEntry}, at merge time.\n */\nconst ENTRY_KEYS: Record<string, true> = { ...LLM_KEYS, ...VOICE_KEYS };\n\n/** Keys that exist only on `llm`/`embed` — named individually when rejected. */\nconst LLM_ONLY_KEYS = [\"surface\", \"transport\", \"model_map\", \"capabilities\", \"discovery\"] as const;\n\nconst CAPABILITY_KEYS: Record<string, true> = {\n  context_window: true,\n  tools: true,\n  images: true,\n  thinking_max: true,\n};\n\n/** Required `params` keys per transport (§1.3). */\nconst TRANSPORT_PARAMS: Record<\n  Exclude<AIProviderTransport, \"direct\">,\n  { required: string[]; optional: string[] }\n> = {\n  bedrock: { required: [\"region\"], optional: [] },\n  vertex: { required: [\"project\", \"location\"], optional: [\"publisher\"] },\n  foundry: { required: [\"resource\"], optional: [] },\n  \"azure-openai\": { required: [\"resource\", \"deployment\", \"api_version\"], optional: [] },\n};\n\n/**\n * `transport` → `base_url` template (§1.3). Placeholders are `params` keys.\n * `direct` has no template: it uses the preset literal or an explicit value.\n */\nexport const AI_PROVIDER_BASE_URL_TEMPLATES: Record<\n  Exclude<AIProviderTransport, \"direct\">,\n  string\n> = {\n  bedrock: \"https://bedrock-runtime.{region}.amazonaws.com\",\n  vertex:\n    \"https://{location}-aiplatform.googleapis.com/v1/projects/{project}/locations/{location}/publishers/{publisher}\",\n  foundry: \"https://{resource}.services.ai.azure.com/anthropic\",\n  \"azure-openai\": \"https://{resource}.openai.azure.com/openai\",\n};\n\nfunction isPlainObject(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\n/** True when `id` is usable as a registry key (`[a-z0-9][a-z0-9_-]*`). */\nexport function isSafeProviderId(id: string): boolean {\n  return SAFE_ID.test(id);\n}\n\n/**\n * True when `value` must not appear literally under `key`.\n *\n * A value is acceptable when it is an indirection — a `${...}` interpolation or\n * one of the four `credential.ref` forms. Otherwise a value is a literal secret\n * when the key names a credential-bearing header (`authorization`, `x-api-key`,\n * the bare `key` query param Google uses…) or when the value itself has the\n * shape of a token (`sk-…`, `AIza…`, a 40-char opaque blob…).\n *\n * Non-secret literals stay legal: `anthropic-version: 2023-06-01`,\n * `api-version: 2026-01-01`, `HTTP-Referer: https://skaile.ai`.\n */\nexport function looksLikeLiteralSecret(key: string, value: string): boolean {\n  const trimmed = value.trim();\n  if (trimmed === \"\") return false;\n  if (INTERPOLATION.test(trimmed)) return false;\n  if (CREDENTIAL_REF.test(trimmed)) return false;\n  if (SECRET_KEY.test(key)) return true;\n  return SECRET_VALUE_PATTERNS.some((re) => re.test(trimmed));\n}\n\ninterface Ctx {\n  diagnostics: AIProviderDiagnostic[];\n}\n\nfunction err(ctx: Ctx, code: string, path: string, message: string): void {\n  ctx.diagnostics.push({ code, severity: \"error\", message, path });\n}\n\nfunction warn(ctx: Ctx, code: string, path: string, message: string): void {\n  ctx.diagnostics.push({ code, severity: \"warning\", message, path });\n}\n\n/** Validate a `Record<string, string>` field and reject literal secrets in it. */\nfunction readStringMap(\n  ctx: Ctx,\n  raw: unknown,\n  path: string,\n  opts: { secretScan: boolean },\n): Record<string, string> | undefined {\n  if (!isPlainObject(raw)) {\n    err(ctx, \"invalid_type\", path, `${path} must be a map of string values`);\n    return undefined;\n  }\n  const out: Record<string, string> = {};\n  let ok = true;\n  for (const [key, value] of Object.entries(raw)) {\n    const keyPath = `${path}.${key}`;\n    if (typeof value !== \"string\") {\n      err(ctx, \"invalid_type\", keyPath, `${keyPath} must be a string`);\n      ok = false;\n      continue;\n    }\n    if (opts.secretScan && looksLikeLiteralSecret(key, value)) {\n      err(\n        ctx,\n        \"literal_secret\",\n        keyPath,\n        `${keyPath} holds a literal secret — use a reference instead ` +\n          `(env:NAME, cmd:<shell>, platform:<configId>, keyring:<service>/<account>) ` +\n          `or a \\${...} interpolation`,\n      );\n      ok = false;\n      continue;\n    }\n    out[key] = value;\n  }\n  return ok ? out : undefined;\n}\n\nfunction readCredential(\n  ctx: Ctx,\n  raw: unknown,\n  path: string,\n): { value?: AIProviderCredential; ok: boolean } {\n  if (!isPlainObject(raw)) {\n    err(ctx, \"invalid_type\", path, `${path} must be a map with a 'kind'`);\n    return { ok: false };\n  }\n  let ok = true;\n  for (const key of Object.keys(raw)) {\n    if (key !== \"kind\" && key !== \"ref\") {\n      err(ctx, \"unknown_key\", `${path}.${key}`, `${path}.${key} is not a credential key`);\n      ok = false;\n    }\n  }\n  const kind = raw.kind;\n  if (\n    typeof kind !== \"string\" ||\n    !(AI_PROVIDER_CREDENTIAL_KINDS as readonly string[]).includes(kind)\n  ) {\n    err(\n      ctx,\n      \"unknown_credential_kind\",\n      `${path}.kind`,\n      `${path}.kind must be one of ${AI_PROVIDER_CREDENTIAL_KINDS.join(\", \")}`,\n    );\n    return { ok: false };\n  }\n  const credentialKind = kind as AIProviderCredentialKind;\n\n  const rawRef = raw.ref;\n  let ref: string | undefined;\n  if (rawRef !== undefined) {\n    if (typeof rawRef !== \"string\") {\n      err(ctx, \"invalid_type\", `${path}.ref`, `${path}.ref must be a string`);\n      ok = false;\n    } else if (!parseCredentialRef(rawRef)) {\n      err(\n        ctx,\n        \"literal_secret\",\n        `${path}.ref`,\n        `${path}.ref must be a reference, not a literal secret — ` +\n          `use env:NAME, cmd:<shell>, platform:<configId> or keyring:<service>/<account>`,\n      );\n      ok = false;\n    } else {\n      ref = rawRef;\n    }\n  } else if (CREDENTIAL_REF_REQUIRED[credentialKind]) {\n    err(\n      ctx,\n      \"missing_credential_ref\",\n      `${path}.ref`,\n      `${path}.ref is required for credential kind '${credentialKind}'`,\n    );\n    ok = false;\n  }\n\n  if (!ok) return { ok: false };\n  return {\n    ok: true,\n    value: ref === undefined ? { kind: credentialKind } : { kind: credentialKind, ref },\n  };\n}\n\n/**\n * Validate `transport` + `params` against §1.3 and rebuild the discriminated\n * union from the merged values.\n *\n * This runs at merge time, not per layer: `params` and the `transport` that\n * types them may be written in different layers (§1.5), so a layer on its own\n * cannot tell a foreign parameter from an override of a legal one.\n *\n * @param present keys the source wrote — a `transport` or `params` that was\n *   written and rejected is already reported, and must not also be reported as\n *   missing.\n */\nfunction readTransportSlice(\n  ctx: Ctx,\n  transport: AIProviderTransport | undefined,\n  params: Record<string, string | number | boolean> | undefined,\n  path: string,\n  present: ReadonlySet<string>,\n): { slice: AIProviderTransportSlice; ok: boolean } {\n  // Re-deriving `params` against the default would bury the enum diagnostic.\n  if (transport === undefined && present.has(\"transport\")) return { slice: {}, ok: false };\n  const explicit = transport !== undefined;\n  const effective = transport ?? \"direct\";\n  const rejectedParams = params === undefined && present.has(\"params\");\n\n  if (effective === \"direct\") {\n    let ok = true;\n    for (const key of Object.keys(params ?? {})) {\n      err(\n        ctx,\n        \"unknown_param\",\n        `${path}.params.${key}`,\n        `${path}.params.${key} is not valid for transport 'direct' — it takes no parameters`,\n      );\n      ok = false;\n    }\n    return { slice: explicit ? { transport: \"direct\" } : {}, ok };\n  }\n\n  const spec = TRANSPORT_PARAMS[effective];\n  if (params === undefined) {\n    // Written and rejected by the per-layer read — its diagnostic already stands.\n    if (!rejectedParams) {\n      err(\n        ctx,\n        \"missing_params\",\n        `${path}.params`,\n        `${path}.params is required for transport '${effective}' (${spec.required.join(\", \")})`,\n      );\n    }\n    return { slice: {}, ok: false };\n  }\n\n  let ok = true;\n  const values: Record<string, string> = {};\n  for (const [key, value] of Object.entries(params)) {\n    if (!spec.required.includes(key) && !spec.optional.includes(key)) {\n      err(\n        ctx,\n        \"unknown_param\",\n        `${path}.params.${key}`,\n        `${path}.params.${key} is not valid for transport '${effective}' ` +\n          `(accepted: ${[...spec.required, ...spec.optional].join(\", \")})`,\n      );\n      ok = false;\n      continue;\n    }\n    if (typeof value !== \"string\") {\n      err(ctx, \"invalid_type\", `${path}.params.${key}`, `${path}.params.${key} must be a string`);\n      ok = false;\n      continue;\n    }\n    values[key] = value;\n  }\n  for (const key of spec.required) {\n    if (values[key] === undefined) {\n      err(\n        ctx,\n        \"missing_param\",\n        `${path}.params.${key}`,\n        `${path}.params.${key} is required for transport '${effective}'`,\n      );\n      ok = false;\n    }\n  }\n  if (!ok) return { slice: {}, ok: false };\n  // Rebuilt field by field so the discriminated union narrows without a cast;\n  // every `required` key is present by the check above.\n  switch (effective) {\n    case \"bedrock\":\n      return { slice: { transport: effective, params: { region: values.region } }, ok: true };\n    case \"vertex\":\n      return {\n        slice: {\n          transport: effective,\n          params: {\n            project: values.project,\n            location: values.location,\n            ...(values.publisher === undefined ? {} : { publisher: values.publisher }),\n          },\n        },\n        ok: true,\n      };\n    case \"foundry\":\n      return { slice: { transport: effective, params: { resource: values.resource } }, ok: true };\n    case \"azure-openai\":\n      return {\n        slice: {\n          transport: effective,\n          params: {\n            resource: values.resource,\n            deployment: values.deployment,\n            api_version: values.api_version,\n          },\n        },\n        ok: true,\n      };\n  }\n}\n\n/**\n * `params` as a layer may write them: scalars, and no literal secret. Which\n * keys are legal depends on `transport` (§1.3) or on the voice preset (§1.7),\n * so that half waits for the merge — the secret scan does not, because its\n * diagnostic has to name the file the secret was written into.\n */\nfunction readParams(\n  ctx: Ctx,\n  raw: unknown,\n  path: string,\n): { value?: Record<string, string | number | boolean>; ok: boolean } {\n  if (!isPlainObject(raw)) {\n    err(ctx, \"invalid_type\", path, `${path} must be a map`);\n    return { ok: false };\n  }\n  const out: Record<string, string | number | boolean> = {};\n  let ok = true;\n  for (const [key, value] of Object.entries(raw)) {\n    if (typeof value !== \"string\" && typeof value !== \"number\" && typeof value !== \"boolean\") {\n      err(\n        ctx,\n        \"invalid_type\",\n        `${path}.${key}`,\n        `${path}.${key} must be a string, number or boolean`,\n      );\n      ok = false;\n      continue;\n    }\n    if (typeof value === \"string\" && looksLikeLiteralSecret(key, value)) {\n      err(\n        ctx,\n        \"literal_secret\",\n        `${path}.${key}`,\n        `${path}.${key} holds a literal secret — put it in credential.ref as a reference`,\n      );\n      ok = false;\n      continue;\n    }\n    out[key] = value;\n  }\n  return ok ? { ok: true, value: out } : { ok: false };\n}\n\nfunction readBaseUrl(ctx: Ctx, raw: unknown, path: string): { value?: string; ok: boolean } {\n  if (typeof raw !== \"string\") {\n    err(ctx, \"invalid_type\", path, `${path} must be a string`);\n    return { ok: false };\n  }\n  let parsed: URL;\n  try {\n    parsed = new URL(raw);\n  } catch {\n    err(ctx, \"invalid_base_url\", path, `${path} is not a valid URL: ${raw}`);\n    return { ok: false };\n  }\n  if (parsed.protocol !== \"http:\" && parsed.protocol !== \"https:\") {\n    err(\n      ctx,\n      \"invalid_base_url\",\n      path,\n      `${path} must use http:// or https:// (got ${parsed.protocol}//)`,\n    );\n    return { ok: false };\n  }\n  if (parsed.username || parsed.password) {\n    err(\n      ctx,\n      \"literal_secret\",\n      path,\n      `${path} embeds credentials in the URL — move them to credential.ref as a reference`,\n    );\n    return { ok: false };\n  }\n  return { ok: true, value: raw };\n}\n\nfunction readBoolean(ctx: Ctx, raw: unknown, path: string): { value?: boolean; ok: boolean } {\n  if (typeof raw !== \"boolean\") {\n    err(ctx, \"invalid_type\", path, `${path} must be true or false`);\n    return { ok: false };\n  }\n  return { ok: true, value: raw };\n}\n\n/** What one layer wrote for an entry, before the kind-dependent half runs. */\ninterface ReadEntryResult {\n  entry: AIProviderEntryPatch;\n  /**\n   * Keys this layer wrote, valid or not. A field that was written and rejected\n   * here must not be reported a second time as missing.\n   */\n  present: ReadonlySet<string>;\n}\n\n/**\n * Read one entry as a **patch**: every check that does not depend on `kind` —\n * types, URLs, the credential grammar, literal secrets, unknown keys.\n *\n * A layer may hold a partial entry (§1.5), so `kind` is optional here and the\n * checks that need it are {@link checkEntry}'s, which runs on the merged\n * entry. A `kind` that *is* written still has to be one of\n * {@link AI_PROVIDER_KINDS}: a typo is malformed input, not an override.\n */\nfunction readEntry(ctx: Ctx, raw: unknown, path: string): ReadEntryResult | undefined {\n  if (!isPlainObject(raw)) {\n    err(ctx, \"invalid_type\", path, `${path} must be a map`);\n    return undefined;\n  }\n\n  const present: ReadonlySet<string> = new Set(Object.keys(raw));\n  const entry: AIProviderEntryPatch = {};\n  let ok = true;\n\n  if (raw.kind !== undefined) {\n    if (\n      typeof raw.kind !== \"string\" ||\n      !(AI_PROVIDER_KINDS as readonly string[]).includes(raw.kind)\n    ) {\n      err(\n        ctx,\n        \"unknown_kind\",\n        `${path}.kind`,\n        `${path}.kind must be one of ${AI_PROVIDER_KINDS.join(\", \")}`,\n      );\n      ok = false;\n    } else {\n      entry.kind = raw.kind as AIProviderKind;\n    }\n  }\n\n  for (const key of present) {\n    if (!ENTRY_KEYS[key]) {\n      err(ctx, \"unknown_key\", `${path}.${key}`, `${path}.${key} is not a registry key`);\n      ok = false;\n    }\n  }\n\n  if (raw.label !== undefined) {\n    if (typeof raw.label !== \"string\") {\n      err(ctx, \"invalid_type\", `${path}.label`, `${path}.label must be a string`);\n      ok = false;\n    } else {\n      entry.label = raw.label;\n    }\n  }\n  if (raw.preset !== undefined) {\n    if (typeof raw.preset !== \"string\" || !isSafeProviderId(raw.preset)) {\n      err(\n        ctx,\n        \"invalid_preset\",\n        `${path}.preset`,\n        `${path}.preset must be a catalog preset id matching [a-z0-9][a-z0-9_-]*`,\n      );\n      ok = false;\n    } else {\n      entry.preset = raw.preset;\n    }\n  }\n  if (raw.base_url !== undefined) {\n    const res = readBaseUrl(ctx, raw.base_url, `${path}.base_url`);\n    if (!res.ok) ok = false;\n    else entry.base_url = res.value;\n  }\n  if (raw.headers !== undefined) {\n    const headers = readStringMap(ctx, raw.headers, `${path}.headers`, { secretScan: true });\n    if (!headers) ok = false;\n    else entry.headers = headers;\n  }\n  if (raw.credential !== undefined) {\n    const res = readCredential(ctx, raw.credential, `${path}.credential`);\n    if (!res.ok) ok = false;\n    else entry.credential = res.value;\n  }\n  if (raw.enabled !== undefined) {\n    const res = readBoolean(ctx, raw.enabled, `${path}.enabled`);\n    if (!res.ok) ok = false;\n    else entry.enabled = res.value;\n  }\n  if (raw.locked !== undefined) {\n    const res = readBoolean(ctx, raw.locked, `${path}.locked`);\n    if (!res.ok) ok = false;\n    else entry.locked = res.value;\n  }\n  if (raw.surface !== undefined) {\n    if (\n      typeof raw.surface !== \"string\" ||\n      !(AI_PROVIDER_SURFACES as readonly string[]).includes(raw.surface)\n    ) {\n      err(\n        ctx,\n        \"unknown_surface\",\n        `${path}.surface`,\n        `${path}.surface must be one of ${AI_PROVIDER_SURFACES.join(\", \")}`,\n      );\n      ok = false;\n    } else {\n      entry.surface = raw.surface as AIProviderSurface;\n    }\n  }\n  if (raw.transport !== undefined) {\n    if (\n      typeof raw.transport !== \"string\" ||\n      !(AI_PROVIDER_TRANSPORTS as readonly string[]).includes(raw.transport)\n    ) {\n      err(\n        ctx,\n        \"unknown_transport\",\n        `${path}.transport`,\n        `${path}.transport must be one of ${AI_PROVIDER_TRANSPORTS.join(\", \")}`,\n      );\n      ok = false;\n    } else {\n      entry.transport = raw.transport as AIProviderTransport;\n    }\n  }\n  if (raw.params !== undefined) {\n    const res = readParams(ctx, raw.params, `${path}.params`);\n    if (!res.ok) ok = false;\n    else entry.params = res.value;\n  }\n  if (raw.query_params !== undefined) {\n    const qp = readStringMap(ctx, raw.query_params, `${path}.query_params`, { secretScan: true });\n    if (!qp) ok = false;\n    else entry.query_params = qp;\n  }\n  if (raw.model_map !== undefined) {\n    const map = readStringMap(ctx, raw.model_map, `${path}.model_map`, { secretScan: false });\n    if (!map) ok = false;\n    else entry.model_map = map;\n  }\n  if (raw.capabilities !== undefined) {\n    if (!isPlainObject(raw.capabilities)) {\n      err(ctx, \"invalid_type\", `${path}.capabilities`, `${path}.capabilities must be a map`);\n      ok = false;\n    } else {\n      const caps: Record<string, AIProviderCapabilities> = {};\n      for (const [modelId, value] of Object.entries(raw.capabilities)) {\n        const capPath = `${path}.capabilities.${modelId}`;\n        if (!isPlainObject(value)) {\n          err(ctx, \"invalid_type\", capPath, `${capPath} must be a map`);\n          ok = false;\n          continue;\n        }\n        const cap: AIProviderCapabilities = {};\n        for (const [capKey, capValue] of Object.entries(value)) {\n          if (!CAPABILITY_KEYS[capKey]) {\n            err(\n              ctx,\n              \"unknown_key\",\n              `${capPath}.${capKey}`,\n              `${capPath}.${capKey} is not a capability (${Object.keys(CAPABILITY_KEYS).join(\", \")})`,\n            );\n            ok = false;\n            continue;\n          }\n          const expected = capKey === \"tools\" || capKey === \"images\" ? \"boolean\" : \"number\";\n          if (typeof capValue !== expected) {\n            err(\n              ctx,\n              \"invalid_type\",\n              `${capPath}.${capKey}`,\n              `${capPath}.${capKey} must be a ${expected}`,\n            );\n            ok = false;\n            continue;\n          }\n          (cap as Record<string, unknown>)[capKey] = capValue;\n        }\n        caps[modelId] = cap;\n      }\n      entry.capabilities = caps;\n    }\n  }\n  if (raw.discovery !== undefined) {\n    if (!isPlainObject(raw.discovery)) {\n      err(ctx, \"invalid_type\", `${path}.discovery`, `${path}.discovery must be a map`);\n      ok = false;\n    } else {\n      const type = raw.discovery.type;\n      if (typeof type !== \"string\") {\n        err(\n          ctx,\n          \"invalid_type\",\n          `${path}.discovery.type`,\n          `${path}.discovery.type must be a string`,\n        );\n        ok = false;\n      } else {\n        if (!(AI_PROVIDER_DISCOVERY_TYPES as readonly string[]).includes(type)) {\n          warn(\n            ctx,\n            \"unknown_discovery_type\",\n            `${path}.discovery.type`,\n            `${path}.discovery.type '${type}' is not a known probe ` +\n              `(${AI_PROVIDER_DISCOVERY_TYPES.join(\", \")}) — it is kept verbatim`,\n          );\n        }\n        const discovery: AIProviderDiscovery = { type };\n        const discPath = raw.discovery.path;\n        if (discPath !== undefined) {\n          if (typeof discPath !== \"string\") {\n            err(\n              ctx,\n              \"invalid_type\",\n              `${path}.discovery.path`,\n              `${path}.discovery.path must be a string`,\n            );\n            ok = false;\n          } else {\n            discovery.path = discPath;\n          }\n        }\n        for (const key of Object.keys(raw.discovery)) {\n          if (key !== \"type\" && key !== \"path\") {\n            err(\n              ctx,\n              \"unknown_key\",\n              `${path}.discovery.${key}`,\n              `${path}.discovery.${key} is not a discovery key`,\n            );\n            ok = false;\n          }\n        }\n        entry.discovery = discovery;\n      }\n    }\n  }\n\n  return ok ? { entry, present } : undefined;\n}\n\n/** The seven fields both records share, in document order. */\nfunction entryCommon(patch: AIProviderEntryPatch): AIProviderEntryCommon {\n  const common: AIProviderEntryCommon = {};\n  if (patch.label !== undefined) common.label = patch.label;\n  if (patch.preset !== undefined) common.preset = patch.preset;\n  if (patch.base_url !== undefined) common.base_url = patch.base_url;\n  if (patch.headers !== undefined) common.headers = patch.headers;\n  if (patch.credential !== undefined) common.credential = patch.credential;\n  if (patch.enabled !== undefined) common.enabled = patch.enabled;\n  if (patch.locked !== undefined) common.locked = patch.locked;\n  return common;\n}\n\n/**\n * Complete a patch into an entry, or report why it cannot be one.\n *\n * This is the kind-dependent half of validation — the `stt`/`tts` record split\n * (§1.7), the `surface` requirement, the per-transport `params` union (§1.3) —\n * plus the completeness gate itself. It runs on the **merged** entry, because\n * `kind` decides which record applies and a layer is allowed to leave `kind`\n * to a lower one (§1.5).\n *\n * Diagnostics name the entry, not the layers that fed it: the caller that\n * knows the sources ({@link validateMergedRegistry}) attributes them.\n *\n * @param present keys the source wrote, valid or not.\n */\nfunction checkEntry(\n  ctx: Ctx,\n  patch: AIProviderEntryPatch,\n  path: string,\n  present: ReadonlySet<string>,\n): AIProviderEntry | undefined {\n  const kind = patch.kind;\n  if (kind === undefined) {\n    // A written-but-rejected `kind` already has its `unknown_kind` diagnostic.\n    if (!present.has(\"kind\")) {\n      err(\n        ctx,\n        \"missing_kind\",\n        `${path}.kind`,\n        `${path}.kind is required and no layer supplies it — ` +\n          `an entry needs one of ${AI_PROVIDER_KINDS.join(\", \")}`,\n      );\n    }\n    return undefined;\n  }\n\n  let ok = true;\n  const common = entryCommon(patch);\n  // Re-read through the scalar/secret gate: a patch that came from a file has\n  // already passed it, but a programmatically injected layer (the control\n  // plane's `session`) has not — and the no-literal-secrets rule is one rule,\n  // so every site the per-file read scans (`credential.ref`, `headers`,\n  // `query_params`, `base_url` userinfo, `params`) is scanned here too.\n  if (patch.base_url !== undefined && !readBaseUrl(ctx, patch.base_url, `${path}.base_url`).ok) {\n    ok = false;\n  }\n  if (\n    patch.headers !== undefined &&\n    readStringMap(ctx, patch.headers, `${path}.headers`, { secretScan: true }) === undefined\n  ) {\n    ok = false;\n  }\n  if (\n    patch.query_params !== undefined &&\n    readStringMap(ctx, patch.query_params, `${path}.query_params`, { secretScan: true }) ===\n      undefined\n  ) {\n    ok = false;\n  }\n  if (\n    patch.credential !== undefined &&\n    !readCredential(ctx, patch.credential, `${path}.credential`).ok\n  ) {\n    ok = false;\n  }\n  let params: Record<string, string | number | boolean> | undefined;\n  if (patch.params !== undefined) {\n    const res = readParams(ctx, patch.params, `${path}.params`);\n    if (!res.ok) ok = false;\n    else params = res.value;\n  }\n\n  if (kind === \"stt\" || kind === \"tts\") {\n    // §1.7 is the whole point of the reduced record, so the message says which\n    // key and why.\n    for (const key of LLM_ONLY_KEYS) {\n      if (!present.has(key)) continue;\n      err(\n        ctx,\n        \"llm_only_key\",\n        `${path}.${key}`,\n        `${path}.${key} is llm-only and not accepted on kind '${kind}' ` +\n          `(voice entries take kind, label, preset, base_url, headers, credential, params, enabled)`,\n      );\n      ok = false;\n    }\n    for (const key of present) {\n      if (VOICE_KEYS[key] || (LLM_ONLY_KEYS as readonly string[]).includes(key)) continue;\n      err(ctx, \"unknown_key\", `${path}.${key}`, `${path}.${key} is not a registry key`);\n      ok = false;\n    }\n    const voice: AIProviderVoiceEntry = { kind, ...common };\n    if (params !== undefined) voice.params = params;\n    return ok ? voice : undefined;\n  }\n\n  const llm: AIProviderLlmEntry = { kind, ...common };\n\n  if (patch.surface !== undefined) {\n    llm.surface = patch.surface;\n  } else if (!present.has(\"surface\") && patch.preset === undefined) {\n    err(\n      ctx,\n      \"missing_surface\",\n      `${path}.surface`,\n      `${path}.surface is required unless the entry inherits one from a preset`,\n    );\n    ok = false;\n  }\n\n  const transportResult = readTransportSlice(ctx, patch.transport, params, path, present);\n  if (!transportResult.ok) ok = false;\n  else Object.assign(llm, transportResult.slice);\n\n  if (patch.query_params !== undefined) llm.query_params = patch.query_params;\n  if (patch.model_map !== undefined) llm.model_map = patch.model_map;\n  if (patch.capabilities !== undefined) llm.capabilities = patch.capabilities;\n  if (patch.discovery !== undefined) llm.discovery = patch.discovery;\n\n  return ok ? llm : undefined;\n}\n\n/** Options for {@link validateRegistry}. */\nexport interface ValidateRegistryOptions {\n  /** Prefix for diagnostic paths — normally the file the document came from. */\n  source?: string;\n  /**\n   * The layer this document feeds. Given — and not `catalog` — the document is\n   * read as **one layer** of the §1.5 stack: an entry may be a partial\n   * override, so a `kind`, `surface` or transport `params` that another layer\n   * supplies is not an error here. {@link validateMergedRegistry} gates the\n   * merged entry instead.\n   *\n   * Omitted, the document has to stand on its own: every entry must be\n   * complete, which is what a writer (`skaile providers add`) checks the entry\n   * it just built against.\n   */\n  layer?: AIProviderLayerId;\n}\n\n/**\n * Validate a parsed `providers.yml` document (§1.1–§1.7).\n *\n * Total: never throws. Entries that produce an error are omitted from\n * `document`, mirroring the resolver's per-entry skip semantics — one bad entry\n * must not take the whole registry down. Every diagnostic names the offending\n * key in `path`.\n *\n * Enforced here whatever the mode: safe entry ids, the `kind`/`surface`/\n * `transport`/`credential.kind` enums, the value types, and the\n * no-literal-secrets rule for `credential.ref`, `headers`, `query_params`,\n * `params` and `base_url` userinfo — a secret must be caught in the file it\n * was written into, not in an anonymous merged document.\n *\n * Enforced only when {@link ValidateRegistryOptions.layer} says this document\n * is complete on its own: that an entry has a `kind`, that an `llm` entry has a\n * `surface`, the voice subset (§1.7), and the per-transport `params` union\n * (§1.3). Those depend on `kind`, which a layer may leave to a lower one.\n *\n * Defaults are deliberately **not** materialized: writing `enabled: true` or\n * `transport: direct` into a layer would let that layer's implicit default\n * override a lower layer's explicit value during the merge. Read them through\n * {@link isEntryEnabled} / {@link entryTransport}.\n */\nexport function validateRegistry(\n  raw: unknown,\n  options: ValidateRegistryOptions = {},\n): RegistryValidation {\n  const ctx: Ctx = { diagnostics: [] };\n  const document: AIProviderRegistryDocument = { version: 1, providers: {} };\n  const prefix = options.source ? `${options.source}: ` : \"\";\n  // The catalog layer is generated from presets, never hand-written, so it is\n  // held to the same completeness bar as a standalone document.\n  const partial = options.layer !== undefined && options.layer !== \"catalog\";\n\n  if (raw === undefined || raw === null) return { document, diagnostics: ctx.diagnostics };\n  if (!isPlainObject(raw)) {\n    err(ctx, \"invalid_type\", \"\", `${prefix}registry document must be a map`);\n    return { document, diagnostics: ctx.diagnostics };\n  }\n\n  if (raw.version !== undefined && raw.version !== 1) {\n    err(ctx, \"unsupported_version\", \"version\", `version must be 1 (got ${String(raw.version)})`);\n    return { document, diagnostics: ctx.diagnostics };\n  }\n\n  for (const key of Object.keys(raw)) {\n    if (key === \"version\" || key === \"providers\") continue;\n    if (key === \"roles\") {\n      warn(\n        ctx,\n        \"roles_not_here\",\n        \"roles\",\n        \"roles are read from skaile.yaml, not from providers.yml — this block is ignored\",\n      );\n      continue;\n    }\n    warn(ctx, \"unknown_key\", key, `${key} is not a registry document key — ignored`);\n  }\n\n  if (raw.providers === undefined) return { document, diagnostics: ctx.diagnostics };\n  if (!isPlainObject(raw.providers)) {\n    err(ctx, \"invalid_type\", \"providers\", \"providers must be a map of entry id → entry\");\n    return { document, diagnostics: ctx.diagnostics };\n  }\n\n  for (const [id, rawEntry] of Object.entries(raw.providers)) {\n    const path = `providers.${id}`;\n    if (!isSafeProviderId(id)) {\n      err(\n        ctx,\n        \"invalid_id\",\n        path,\n        `'${id}' is not a valid entry id — use lowercase letters, digits, '-' and '_' ` +\n          `starting with a letter or digit`,\n      );\n      continue;\n    }\n    const read = readEntry(ctx, rawEntry, path);\n    if (!read) continue;\n    if (partial) {\n      document.providers[id] = read.entry;\n      continue;\n    }\n    const entry = checkEntry(ctx, read.entry, path, read.present);\n    if (entry) document.providers[id] = entry;\n  }\n\n  if (options.source) {\n    for (const diagnostic of ctx.diagnostics) {\n      diagnostic.message = `${prefix}${diagnostic.message}`;\n    }\n  }\n  return { document, diagnostics: ctx.diagnostics };\n}\n\n// ── Reading defaults ───────────────────────────────────────────────────────\n\n/** `enabled` defaults to `true`. */\nexport function isEntryEnabled(entry: AIProviderEntry): boolean {\n  return entry.enabled !== false;\n}\n\n/** `transport` defaults to `direct`; voice entries have none. */\nexport function entryTransport(entry: AIProviderEntry): AIProviderTransport | undefined {\n  if (entry.kind !== \"llm\" && entry.kind !== \"embed\") return undefined;\n  return entry.transport ?? \"direct\";\n}\n\n/**\n * Resolve an entry's endpoint (§1.3).\n *\n * An explicit `base_url` always wins. Otherwise the transport's template is\n * interpolated from `params` (`publisher` defaults to `google` for Vertex).\n * `transport: direct` has no derivation — an entry that reaches here without a\n * `base_url` inherits one from its preset, which the catalog layer supplies\n * during the merge.\n */\nexport function resolveEntryBaseUrl(entry: AIProviderEntry): string | undefined {\n  if (entry.base_url) return entry.base_url;\n  const transport = entryTransport(entry);\n  if (!transport || transport === \"direct\") return undefined;\n  const template = AI_PROVIDER_BASE_URL_TEMPLATES[transport];\n  const params = (entry as AIProviderLlmEntry).params as Record<string, string> | undefined;\n  if (!params) return undefined;\n  const filled: Record<string, string> = { ...params };\n  if (transport === \"vertex\") filled.publisher ??= \"google\";\n  let out = template;\n  for (const [key, value] of Object.entries(filled)) {\n    out = out.replaceAll(`{${key}}`, value);\n  }\n  return /\\{[a-z_]+\\}/.test(out) ? undefined : out;\n}\n\n/**\n * The canonical spelling of an `anthropic-messages` endpoint: the host root\n * that `ANTHROPIC_BASE_URL` takes. Trims, then drops trailing slashes and one\n * trailing `/v1` path segment (case-insensitive), keeping any query or\n * fragment.\n *\n * The Claude CLI, the Anthropic SDK and Goose append `/v1/messages`, so a\n * stored `https://api.anthropic.com/v1` would reach `/v1/v1/messages` and 404.\n * Clients that want the versioned base (`@ai-sdk/anthropic`, Continue) add the\n * `/v1` back themselves. Never apply this to another surface: an OpenAI-style\n * base URL legitimately ends in `/v1` — use {@link normalizeEntryBaseUrl}.\n */\nexport function normalizeAnthropicBaseUrl(url: string | undefined): string | undefined {\n  const trimmed = url?.trim();\n  if (!trimmed) return undefined;\n  const parsed = parseHttpUrlWithoutUserinfo(trimmed);\n  if (!parsed) {\n    return trimmed.replace(/\\/+$/, \"\").replace(/\\/v1$/i, \"\").replace(/\\/+$/, \"\") || undefined;\n  }\n  // Work on the path, so a query or fragment does not hide the `/v1`. Built by\n  // hand because an emptied path would serialize as \"/\".\n  const path = parsed.pathname.replace(/\\/+$/, \"\").replace(/\\/v1$/i, \"\").replace(/\\/+$/, \"\");\n  return `${parsed.origin}${path}${parsed.search}${parsed.hash}`;\n}\n\n/**\n * `url` parsed, when rebuilding it from `origin` loses nothing: an http(s)\n * URL without userinfo. `origin` is the string \"null\" for other schemes, and a\n * registry that skipped `readBaseUrl` can still carry either shape.\n */\nfunction parseHttpUrlWithoutUserinfo(url: string): URL | undefined {\n  let parsed: URL;\n  try {\n    parsed = new URL(url);\n  } catch {\n    return undefined;\n  }\n  if (parsed.protocol !== \"http:\" && parsed.protocol !== \"https:\") return undefined;\n  if (parsed.username || parsed.password) return undefined;\n  return parsed;\n}\n\n/**\n * An entry's endpoint in the registry's canonical spelling for its wire\n * `surface`: {@link normalizeAnthropicBaseUrl} for `anthropic-messages`, the\n * URL unchanged for every other surface.\n *\n * `surface` is a parameter, not read off an entry, because an entry may\n * inherit it from a catalog preset that this module cannot see.\n */\nexport function normalizeEntryBaseUrl(\n  url: string | undefined,\n  surface: AIProviderSurface | undefined,\n): string | undefined {\n  return surface === \"anthropic-messages\" ? normalizeAnthropicBaseUrl(url) : url;\n}\n\n// ── Merge ──────────────────────────────────────────────────────────────────\n\nconst LAYER_RANK: Record<AIProviderLayerId, number> = {\n  catalog: 0,\n  user: 1,\n  workspace: 2,\n  runtime: 3,\n  session: 4,\n};\n\n/**\n * Per-key deep merge with `high` winning. Plain objects recurse; everything\n * else (scalars, arrays) is taken wholesale from whichever side defines it.\n */\nfunction deepMerge(high: unknown, low: unknown): unknown {\n  if (high === undefined) return low;\n  if (low === undefined) return high;\n  if (!isPlainObject(high) || !isPlainObject(low)) return high;\n  const out: Record<string, unknown> = { ...low };\n  for (const [key, value] of Object.entries(high)) {\n    out[key] = deepMerge(value, low[key]);\n  }\n  return out;\n}\n\n/**\n * Merge registry layers into one view (§1.5).\n *\n * Precedence is taken from each layer's `layer` id, not from array position:\n * `catalog` < `user` < `workspace` < `runtime` < `session`. Two layers with the\n * same id are applied in array order, earliest winning. The merge is per key\n * and deep — a workspace entry that sets only `base_url` keeps the user\n * entry's credential, headers and model map.\n *\n * `locked: true` freezes an entry: every **lower** layer's contribution to that\n * id is dropped silently, which is what makes a control-plane-pinned endpoint\n * un-overridable from a checkout. (`skaile providers set` refuses loudly\n * instead — silence is only correct for the merge.)\n *\n * This is a fold over layer *patches* and checks nothing: an entry no layer\n * completed comes out of here incomplete. {@link validateMergedRegistry} is\n * the gate — {@link loadProviderRegistry} runs it, and any other caller that\n * merges hand-written layers has to as well.\n */\nexport function mergeRegistries(layers: AIProviderRegistryLayer[]): MergedAIProviderRegistry {\n  const ordered = layers\n    .map((layer, index) => ({ layer, index }))\n    .sort((a, b) => {\n      const rank = LAYER_RANK[b.layer.layer] - LAYER_RANK[a.layer.layer];\n      return rank !== 0 ? rank : a.index - b.index;\n    })\n    .map((x) => x.layer);\n\n  const providers: AIProviderRegistryPatch = {};\n  const origin: Record<string, AIProviderLayerId> = {};\n  const order: string[] = [];\n  const frozen = new Set<string>();\n\n  for (const { layer, providers: entries } of ordered) {\n    for (const [id, entry] of Object.entries(entries)) {\n      if (frozen.has(id)) continue;\n      if (providers[id] === undefined) {\n        providers[id] = { ...entry };\n        origin[id] = layer;\n        order.push(id);\n      } else {\n        providers[id] = deepMerge(providers[id], entry) as AIProviderEntryPatch;\n      }\n      if (entry.locked) frozen.add(id);\n    }\n  }\n\n  return {\n    version: 1,\n    // The fold cannot narrow a patch into an entry; `validateMergedRegistry`\n    // is what turns this view into one every consumer can read as complete.\n    providers: providers as AIProviderRegistry,\n    order,\n    origin,\n    locked: [...frozen],\n  };\n}\n\n/** One labelled input to {@link validateMergedRegistry}. */\nexport interface AIProviderRegistrySource {\n  /** Where the layer came from — the file path, for the two on-disk layers. */\n  label: string;\n  providers: AIProviderRegistryPatch;\n}\n\n/** Options for {@link validateMergedRegistry}. */\nexport interface ValidateMergedRegistryOptions {\n  /**\n   * The layers that were merged, labelled. A merge-time diagnostic names the\n   * files that contributed the entry, because those are what the operator has\n   * to edit — collapsing the layers into one anonymous document would lose\n   * exactly the information the error is about.\n   */\n  sources?: AIProviderRegistrySource[];\n}\n\n/** Result of {@link validateMergedRegistry}. */\nexport interface MergedRegistryValidation {\n  /** The merged view, with every entry no layer completed removed. */\n  registry: MergedAIProviderRegistry;\n  diagnostics: AIProviderDiagnostic[];\n}\n\n/**\n * Gate the **merged** registry (§1.5) — the completeness half of validation.\n *\n * {@link validateRegistry} in layer mode accepts a partial entry, because a\n * workspace file that names `base_url` alone is an override, not a\n * redefinition. This is where an entry has to be whole: only here has every\n * layer folded in, so only here is `kind` known and with it which record\n * applies (§1.7), whether a `surface` is missing, and which transport the\n * `params` belong to (§1.3).\n *\n * Entries that fail are dropped, so a consumer never sees a half-defined\n * endpoint. Every diagnostic names the entry id and — when `sources` are\n * given — the layers that fed the entry, whatever the check that raised it.\n */\nexport function validateMergedRegistry(\n  merged: MergedAIProviderRegistry,\n  options: ValidateMergedRegistryOptions = {},\n): MergedRegistryValidation {\n  const ctx: Ctx = { diagnostics: [] };\n  const providers: AIProviderRegistry = {};\n  const origin: Record<string, AIProviderLayerId> = {};\n  const order: string[] = [];\n\n  for (const id of merged.order) {\n    const patch: AIProviderEntryPatch | undefined = merged.providers[id];\n    if (patch === undefined) continue;\n    const present: ReadonlySet<string> = new Set(\n      Object.entries(patch)\n        .filter(([, value]) => value !== undefined)\n        .map(([key]) => key),\n    );\n    const from = ctx.diagnostics.length;\n    const entry = checkEntry(ctx, patch, `providers.${id}`, present);\n    // Attributed once over everything this entry raised, so no message site\n    // can forget to say which files the operator has to edit.\n    const contributors = (options.sources ?? [])\n      .filter((source) => source.providers[id] !== undefined)\n      .map((source) => source.label);\n    if (contributors.length > 0) {\n      const where = ` (contributed by ${contributors.join(\", \")})`;\n      for (const diagnostic of ctx.diagnostics.slice(from)) diagnostic.message += where;\n    }\n    if (entry === undefined) continue;\n    providers[id] = entry;\n    origin[id] = merged.origin[id];\n    order.push(id);\n  }\n\n  return {\n    registry: {\n      version: 1,\n      providers,\n      order,\n      origin,\n      locked: merged.locked.filter((id) => providers[id] !== undefined),\n    },\n    diagnostics: ctx.diagnostics,\n  };\n}\n\n/**\n * Narrow a merged registry to the entries named in `ids`.\n *\n * Registry order is kept (the order of `merged.order`, not of `ids`), so bare\n * model ids still resolve down the same precedence list. `origin` and\n * `locked` are restricted to the picked entries. An id the registry does not\n * hold is ignored here; the caller that wants to warn about it compares `ids`\n * with the result's `order`.\n */\nexport function pickRegistryEntries(\n  merged: MergedAIProviderRegistry,\n  ids: readonly string[],\n): MergedAIProviderRegistry {\n  const wanted: ReadonlySet<string> = new Set(ids);\n  const order = merged.order.filter((id) => wanted.has(id) && merged.providers[id] !== undefined);\n  const providers: AIProviderRegistry = {};\n  const origin: Record<string, AIProviderLayerId> = {};\n  for (const id of order) {\n    providers[id] = merged.providers[id];\n    origin[id] = merged.origin[id];\n  }\n  return {\n    version: 1,\n    providers,\n    order,\n    origin,\n    locked: merged.locked.filter((id) => providers[id] !== undefined),\n  };\n}\n\n/** Entries of a registry in registry order, as `[id, entry]` pairs. */\nexport function registryEntries(\n  registry: AIProviderRegistry | MergedAIProviderRegistry,\n): Array<[string, AIProviderEntry]> {\n  if (isMergedRegistry(registry)) {\n    return registry.order.map((id) => [id, registry.providers[id]] as [string, AIProviderEntry]);\n  }\n  return Object.entries(registry);\n}\n\nfunction isMergedRegistry(\n  registry: AIProviderRegistry | MergedAIProviderRegistry,\n): registry is MergedAIProviderRegistry {\n  return Array.isArray((registry as MergedAIProviderRegistry).order);\n}\n\n// ── Credential references ──────────────────────────────────────────────────\n\n/** A parsed `credential.ref` (§1.4). */\nexport type AIProviderCredentialRef =\n  | { form: \"env\"; name: string }\n  | { form: \"cmd\"; command: string }\n  | { form: \"platform\"; configId: string }\n  | { form: \"keyring\"; service: string; account: string };\n\n/**\n * Parse a `credential.ref`. Returns `undefined` for anything that is not one of\n * the four reference forms — which, in a registry file, means a literal secret.\n */\nexport function parseCredentialRef(ref: string): AIProviderCredentialRef | undefined {\n  const match = CREDENTIAL_REF.exec(ref.trim());\n  if (!match) return undefined;\n  const [, form, rest] = match;\n  const body = rest.trim();\n  if (body === \"\") return undefined;\n  switch (form) {\n    case \"env\":\n      return ENV_NAME.test(body) ? { form: \"env\", name: body } : undefined;\n    case \"cmd\":\n      return { form: \"cmd\", command: body };\n    case \"platform\":\n      return { form: \"platform\", configId: body };\n    case \"keyring\": {\n      const slash = body.indexOf(\"/\");\n      if (slash <= 0 || slash === body.length - 1) return undefined;\n      return { form: \"keyring\", service: body.slice(0, slash), account: body.slice(slash + 1) };\n    }\n    default:\n      return undefined;\n  }\n}\n\n/** Render a parsed reference back to its `<form>:<body>` string. */\nexport function formatCredentialRef(ref: AIProviderCredentialRef): string {\n  switch (ref.form) {\n    case \"env\":\n      return `env:${ref.name}`;\n    case \"cmd\":\n      return `cmd:${ref.command}`;\n    case \"platform\":\n      return `platform:${ref.configId}`;\n    case \"keyring\":\n      return `keyring:${ref.service}/${ref.account}`;\n  }\n}\n\n// ── Model references ───────────────────────────────────────────────────────\n\n/** A model selector resolved against a registry. */\nexport interface ResolvedModelRef {\n  /** Entry the model routes to. */\n  providerId: string;\n  /**\n   * Logical model id, after `@role` expansion and before `model_map`. Absent\n   * only when a dangling role left the provider without a named model — the\n   * harness then uses its own default.\n   */\n  modelId?: string;\n  /** Provider-side id: `model_map[modelId] ?? modelId`. */\n  providerModelId?: string;\n  /** The role name, when the selector was `@role`. */\n  role?: string;\n  /** Non-fatal notes: a dangling role, a role pointing at an unknown provider. */\n  warnings: string[];\n}\n\n/** Entries a model reference may resolve to: enabled, and not a voice endpoint. */\nfunction selectableEntries(\n  registry: AIProviderRegistry | MergedAIProviderRegistry,\n): Array<[string, AIProviderLlmEntry]> {\n  return registryEntries(registry).filter(\n    (pair): pair is [string, AIProviderLlmEntry] =>\n      (pair[1].kind === \"llm\" || pair[1].kind === \"embed\") && isEntryEnabled(pair[1]),\n  );\n}\n\nfunction resolveAgainstEntry(\n  providerId: string,\n  entry: AIProviderLlmEntry,\n  modelId: string | undefined,\n  extra: { role?: string; warnings: string[] },\n): ResolvedModelRef {\n  return {\n    providerId,\n    modelId,\n    providerModelId: modelId === undefined ? undefined : (entry.model_map?.[modelId] ?? modelId),\n    role: extra.role,\n    warnings: extra.warnings,\n  };\n}\n\n/**\n * Resolve a model selector against a registry (§1.6, §9.8).\n *\n * Three forms:\n * - `\"<providerId>/<modelId>\"` — explicit. The leading segment is only treated\n *   as a provider when the registry actually has that entry, so vendor-scoped\n *   ids (`meta-llama/Llama-3.3-70B`, `openai/gpt-oss-120b`) still resolve as\n *   bare model ids.\n * - `\"<modelId>\"` — bare; the first entry in registry order that maps the id\n *   wins, else the first entry in registry order.\n * - `\"@role\"` — resolved through `roles` (which lives in `skaile.yaml`). A\n *   dangling role is **not** fatal: it falls back to registry order and reports\n *   a warning.\n *\n * Returns `undefined` when no entry can serve the reference at all (an empty or\n * fully-disabled registry).\n */\nexport function parseModelRef(\n  ref: string,\n  registry: AIProviderRegistry | MergedAIProviderRegistry,\n  roles?: Record<string, string>,\n): ResolvedModelRef | undefined {\n  const entries = selectableEntries(registry);\n  if (entries.length === 0) return undefined;\n\n  const warnings: string[] = [];\n  let selector = ref.trim();\n  let role: string | undefined;\n\n  if (selector.startsWith(\"@\")) {\n    role = selector.slice(1);\n    const target = roles?.[role];\n    if (!target) {\n      warnings.push(`role '@${role}' is not defined in roles — falling back to registry order`);\n      const [providerId, entry] = entries[0];\n      return resolveAgainstEntry(providerId, entry, undefined, { role, warnings });\n    }\n    selector = target.trim();\n    if (selector.startsWith(\"@\")) {\n      warnings.push(`role '@${role}' points at another role ('${selector}') — roles do not chain`);\n      const [providerId, entry] = entries[0];\n      return resolveAgainstEntry(providerId, entry, undefined, { role, warnings });\n    }\n  }\n\n  const slash = selector.indexOf(\"/\");\n  if (slash > 0) {\n    const head = selector.slice(0, slash);\n    const tail = selector.slice(slash + 1);\n    const match = entries.find(([id]) => id === head);\n    if (match && tail !== \"\") {\n      return resolveAgainstEntry(match[0], match[1], tail, { role, warnings });\n    }\n    if (!match && registryEntries(registry).some(([id]) => id === head)) {\n      warnings.push(`provider '${head}' is disabled or not an llm entry — falling back`);\n    }\n  }\n\n  const mapped = entries.find(\n    ([, entry]) => entry.model_map?.[selector] !== undefined || entry.capabilities?.[selector],\n  );\n  const [providerId, entry] = mapped ?? entries[0];\n  return resolveAgainstEntry(providerId, entry, selector, { role, warnings });\n}\n"]}

package/dist/{chunk-VIM3PWZM.js → chunk-MCUJTNY5.js}

@@ -1,4 +1,4 @@
-import { getStoreConfig, getStoreToken, storeFetch } from './chunk-25ZVWL2R.js';
+import { getStoreConfig, getStoreToken, storeFetch } from './chunk-VXEYX73S.js';
 
 // cli/src/store-publisher.ts
 function makeHttpPublisherClient(config = getStoreConfig(), timeoutMs = 2e4) {
@@ -25,5 +25,5 @@ function makeHttpPublisherClient(config = getStoreConfig(), timeoutMs = 2e4) {
 }
 
 export { makeHttpPublisherClient };
-//# sourceMappingURL=chunk-VIM3PWZM.js.map
-//# sourceMappingURL=chunk-VIM3PWZM.js.map
+//# sourceMappingURL=chunk-MCUJTNY5.js.map
+//# sourceMappingURL=chunk-MCUJTNY5.js.map

package/dist/{chunk-VIM3PWZM.js.map → chunk-MCUJTNY5.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../cli/src/store-publisher.ts"],"names":[],"mappings":";;;AA+FO,SAAS,uBAAA,CACd,MAAA,GAAsB,cAAA,EAAe,EACrC,YAAY,GAAA,EACK;AAGjB,EAAA,MAAM,IAAA,GAAO,OACX,IAAA,EACA,IAAA,KACe;AACf,IAAA,MAAM,GAAA,GAAM,MAAM,aAAA,EAAc;AAChC,IAAA,OAAO,UAAA,CAAc,EAAE,GAAG,MAAA,EAAQ,GAAA,EAAI,EAAG,IAAA,EAAM,EAAE,SAAA,EAAW,GAAG,IAAA,EAAM,CAAA;AAAA,EACvE,CAAA;AACA,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,MAAM,IAAA,CAAK,YAAY,CAAA;AAAA,IAC3B,UAAA,EAAY,CAAC,IAAA,KAAS,IAAA,CAAK,mBAAmB,EAAE,MAAA,EAAQ,MAAA,EAAQ,IAAA,EAAM,CAAA;AAAA,IACtE,WAAA,EAAa,MAAM,IAAA,CAAK,iBAAiB,CAAA;AAAA,IACzC,UAAA,EAAY,CAAC,EAAA,KAAO,IAAA,CAAK,CAAA,gBAAA,EAAmB,EAAE,CAAA,KAAA,CAAA,EAAS,EAAE,MAAA,EAAQ,MAAA,EAAQ,IAAA,EAAM,IAAI,CAAA;AAAA,IACnF,QAAQ,CAAC,KAAA,KAAU,IAAA,CAAK,CAAA,aAAA,EAAgB,KAAK,CAAA,CAAE,CAAA;AAAA,IAC/C,kBAAkB,CAAC,EAAA,KAAO,IAAA,CAAK,CAAA,gBAAA,EAAmB,EAAE,CAAA,WAAA,CAAa,CAAA;AAAA,IACjE,cAAc,CAAC,EAAA,KAAO,IAAA,CAAK,CAAA,eAAA,EAAkB,EAAE,CAAA,QAAA,CAAU,CAAA;AAAA,IACzD,YAAA,EAAc,CAAC,EAAA,EAAI,IAAA,EAAM,WACvB,IAAA,CAAK,CAAA,eAAA,EAAkB,EAAE,CAAA,QAAA,CAAA,EAAY;AAAA,MACnC,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA;AAAA,MACA,GAAI,SAAS,EAAE,MAAA,EAAQ,EAAE,MAAA,EAAQ,GAAA,EAAI,EAAE,GAAI;AAAC,KAC7C,CAAA;AAAA,IACH,cAAA,EAAgB,CAAC,EAAA,KAAO,IAAA,CAAK,CAAA,eAAA,EAAkB,EAAE,CAAA,UAAA,CAAA,EAAc,EAAE,MAAA,EAAQ,MAAA,EAAQ,IAAA,EAAM,IAAI,CAAA;AAAA,IAC3F,qBAAA,EAAuB,CAAC,EAAA,KACtB,IAAA,CAAK,sBAAsB,kBAAA,CAAmB,EAAE,CAAC,CAAA,aAAA,CAAe;AAAA,GACpE;AACF","file":"chunk-VIM3PWZM.js","sourcesContent":["/**\n * Typed REST client for the AI Asset Store **publisher** surface — the\n * curator-publish flow (`skaile source manifest publish` / `yank`). Thin\n * wrappers over {@link storeFetch}; every method maps 1:1 to an `/api/v1/…`\n * endpoint. The {@link PublisherClient} interface is injectable so the\n * orchestration in `commands/source-manifest-publish.ts` can be unit-tested\n * against a fake without a live store.\n *\n * @docLink cli/dev-guide#store-publisher\n */\n\nimport { getStoreConfig, getStoreToken, type StoreConfig, storeFetch } from \"./store-client.ts\";\n\n/**\n * The publisher REST surface used by the curator-publish flow. Kept minimal —\n * only the endpoints `runPublish` / `runYank` actually call. Response shapes\n * are narrowed to the fields the orchestration reads (the server returns more).\n */\nexport interface PublisherClient {\n  /**\n   * Identity of the caller. `username` is the Keycloak login (personal-tier\n   * namespace); `githubLogin` is the verified GitHub handle when connected —\n   * the namespace to publish under when it differs from the login.\n   */\n  me(): Promise<{ username: string; githubLogin?: string | null }>;\n  /** Register (or re-register) a source; returns the created/existing row id. */\n  sourcesAdd(body: {\n    url: string;\n    ref: string;\n    sidecarUrl?: string;\n    sidecarRef?: string;\n    /**\n     * Target publisher namespace (the manifest's `publisher`). When it differs\n     * from the caller's login username, the store resolves the CLAIMED Publisher\n     * for it (the store must already have the claim). Omitted → the store\n     * defaults to `@<username>` (personal).\n     */\n    namespace?: string;\n  }): Promise<{ id: string }>;\n  /** List sources — used to recover an id when `sourcesAdd` rejects a dup url. */\n  sourcesList(): Promise<Array<{ id: string; url: string }>>;\n  /** Kick off a source sync; returns the async job id to poll. */\n  sourceSync(id: string): Promise<{ jobId: string }>;\n  /** Poll a job's terminal status + per-item results. */\n  jobGet(\n    jobId: string,\n  ): Promise<{ status: string; items?: Array<{ label: string; status: string; error?: string }> }>;\n  /** Discovered publishable candidates for a synced source. */\n  sourceCandidates(id: string): Promise<\n    Array<{\n      id: string;\n      name: string;\n      version: string;\n      kind: string;\n      published: boolean;\n      assetRoot: string;\n    }>\n  >;\n  /** Per-asset preview — the discovered file set + resolved candidate metadata. */\n  assetPreview(id: string): Promise<{\n    discoveredFiles: string[];\n    candidate: { name: string; version: string; kind: string; publisherNamespace: string };\n  }>;\n  /**\n   * Publish one asset. `dryRun` returns the would-be `{ manifest }` without\n   * launching a job; the normal path returns `{ jobId }`.\n   */\n  assetPublish(\n    id: string,\n    body: { ref: string; files: string[] },\n    dryRun?: boolean,\n  ): Promise<{ jobId?: string; manifest?: unknown }>;\n  /** Retract a published asset. Response body is ignored. */\n  assetUnpublish(id: string): Promise<unknown>;\n  /**\n   * Read-only \"can I publish under `@<ns>` right now, and if not, what's the\n   * path?\" probe. Backs the `publish --dry-run` namespace status line; its\n   * `message` is store-authored and meant to be surfaced verbatim.\n   */\n  namespaceAvailability(ns: string): Promise<{\n    namespace: string;\n    status: \"owned-by-you\" | \"claimable-by-you\" | \"reserved\" | \"available\";\n    claimMethod?: string;\n    message: string;\n  }>;\n}\n\n/**\n * Construct the real HTTP-backed {@link PublisherClient}. Every call carries a\n * longer timeout than the default store client because publish/sync trigger\n * server-side clone work.\n *\n * @param config - Store connection config; defaults to {@link getStoreConfig}.\n * @param timeoutMs - Per-request abort timeout (default 20s).\n */\nexport function makeHttpPublisherClient(\n  config: StoreConfig = getStoreConfig(),\n  timeoutMs = 20_000,\n): PublisherClient {\n  // Acquire a fresh Keycloak token per call (device-flow session in\n  // ~/.skaile/auth.json, refreshed on demand) rather than a static config.jwt.\n  const call = async <T>(\n    path: string,\n    opts?: { method?: string; body?: unknown; params?: Record<string, string> },\n  ): Promise<T> => {\n    const jwt = await getStoreToken();\n    return storeFetch<T>({ ...config, jwt }, path, { timeoutMs, ...opts });\n  };\n  return {\n    me: () => call(\"/api/v1/me\"),\n    sourcesAdd: (body) => call(\"/api/v1/sources\", { method: \"POST\", body }),\n    sourcesList: () => call(\"/api/v1/sources\"),\n    sourceSync: (id) => call(`/api/v1/sources/${id}/sync`, { method: \"POST\", body: {} }),\n    jobGet: (jobId) => call(`/api/v1/jobs/${jobId}`),\n    sourceCandidates: (id) => call(`/api/v1/sources/${id}/candidates`),\n    assetPreview: (id) => call(`/api/v1/assets/${id}/preview`),\n    assetPublish: (id, body, dryRun) =>\n      call(`/api/v1/assets/${id}/publish`, {\n        method: \"POST\",\n        body,\n        ...(dryRun ? { params: { dryRun: \"1\" } } : {}),\n      }),\n    assetUnpublish: (id) => call(`/api/v1/assets/${id}/unpublish`, { method: \"POST\", body: {} }),\n    namespaceAvailability: (ns) =>\n      call(`/api/v1/namespaces/${encodeURIComponent(ns)}/availability`),\n  };\n}\n"]}
+{"version":3,"sources":["../cli/src/store-publisher.ts"],"names":[],"mappings":";;;AA+FO,SAAS,uBAAA,CACd,MAAA,GAAsB,cAAA,EAAe,EACrC,YAAY,GAAA,EACK;AAGjB,EAAA,MAAM,IAAA,GAAO,OACX,IAAA,EACA,IAAA,KACe;AACf,IAAA,MAAM,GAAA,GAAM,MAAM,aAAA,EAAc;AAChC,IAAA,OAAO,UAAA,CAAc,EAAE,GAAG,MAAA,EAAQ,GAAA,EAAI,EAAG,IAAA,EAAM,EAAE,SAAA,EAAW,GAAG,IAAA,EAAM,CAAA;AAAA,EACvE,CAAA;AACA,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,MAAM,IAAA,CAAK,YAAY,CAAA;AAAA,IAC3B,UAAA,EAAY,CAAC,IAAA,KAAS,IAAA,CAAK,mBAAmB,EAAE,MAAA,EAAQ,MAAA,EAAQ,IAAA,EAAM,CAAA;AAAA,IACtE,WAAA,EAAa,MAAM,IAAA,CAAK,iBAAiB,CAAA;AAAA,IACzC,UAAA,EAAY,CAAC,EAAA,KAAO,IAAA,CAAK,CAAA,gBAAA,EAAmB,EAAE,CAAA,KAAA,CAAA,EAAS,EAAE,MAAA,EAAQ,MAAA,EAAQ,IAAA,EAAM,IAAI,CAAA;AAAA,IACnF,QAAQ,CAAC,KAAA,KAAU,IAAA,CAAK,CAAA,aAAA,EAAgB,KAAK,CAAA,CAAE,CAAA;AAAA,IAC/C,kBAAkB,CAAC,EAAA,KAAO,IAAA,CAAK,CAAA,gBAAA,EAAmB,EAAE,CAAA,WAAA,CAAa,CAAA;AAAA,IACjE,cAAc,CAAC,EAAA,KAAO,IAAA,CAAK,CAAA,eAAA,EAAkB,EAAE,CAAA,QAAA,CAAU,CAAA;AAAA,IACzD,YAAA,EAAc,CAAC,EAAA,EAAI,IAAA,EAAM,WACvB,IAAA,CAAK,CAAA,eAAA,EAAkB,EAAE,CAAA,QAAA,CAAA,EAAY;AAAA,MACnC,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA;AAAA,MACA,GAAI,SAAS,EAAE,MAAA,EAAQ,EAAE,MAAA,EAAQ,GAAA,EAAI,EAAE,GAAI;AAAC,KAC7C,CAAA;AAAA,IACH,cAAA,EAAgB,CAAC,EAAA,KAAO,IAAA,CAAK,CAAA,eAAA,EAAkB,EAAE,CAAA,UAAA,CAAA,EAAc,EAAE,MAAA,EAAQ,MAAA,EAAQ,IAAA,EAAM,IAAI,CAAA;AAAA,IAC3F,qBAAA,EAAuB,CAAC,EAAA,KACtB,IAAA,CAAK,sBAAsB,kBAAA,CAAmB,EAAE,CAAC,CAAA,aAAA,CAAe;AAAA,GACpE;AACF","file":"chunk-MCUJTNY5.js","sourcesContent":["/**\n * Typed REST client for the AI Asset Store **publisher** surface — the\n * curator-publish flow (`skaile source manifest publish` / `yank`). Thin\n * wrappers over {@link storeFetch}; every method maps 1:1 to an `/api/v1/…`\n * endpoint. The {@link PublisherClient} interface is injectable so the\n * orchestration in `commands/source-manifest-publish.ts` can be unit-tested\n * against a fake without a live store.\n *\n * @docLink cli/dev-guide#store-publisher\n */\n\nimport { getStoreConfig, getStoreToken, type StoreConfig, storeFetch } from \"./store-client.ts\";\n\n/**\n * The publisher REST surface used by the curator-publish flow. Kept minimal —\n * only the endpoints `runPublish` / `runYank` actually call. Response shapes\n * are narrowed to the fields the orchestration reads (the server returns more).\n */\nexport interface PublisherClient {\n  /**\n   * Identity of the caller. `username` is the Keycloak login (personal-tier\n   * namespace); `githubLogin` is the verified GitHub handle when connected —\n   * the namespace to publish under when it differs from the login.\n   */\n  me(): Promise<{ username: string; githubLogin?: string | null }>;\n  /** Register (or re-register) a source; returns the created/existing row id. */\n  sourcesAdd(body: {\n    url: string;\n    ref: string;\n    sidecarUrl?: string;\n    sidecarRef?: string;\n    /**\n     * Target publisher namespace (the manifest's `publisher`). When it differs\n     * from the caller's login username, the store resolves the CLAIMED Publisher\n     * for it (the store must already have the claim). Omitted → the store\n     * defaults to `@<username>` (personal).\n     */\n    namespace?: string;\n  }): Promise<{ id: string }>;\n  /** List sources — used to recover an id when `sourcesAdd` rejects a dup url. */\n  sourcesList(): Promise<Array<{ id: string; url: string }>>;\n  /** Kick off a source sync; returns the async job id to poll. */\n  sourceSync(id: string): Promise<{ jobId: string }>;\n  /** Poll a job's terminal status + per-item results. */\n  jobGet(\n    jobId: string,\n  ): Promise<{ status: string; items?: Array<{ label: string; status: string; error?: string }> }>;\n  /** Discovered publishable candidates for a synced source. */\n  sourceCandidates(id: string): Promise<\n    Array<{\n      id: string;\n      name: string;\n      version: string;\n      kind: string;\n      published: boolean;\n      assetRoot: string;\n    }>\n  >;\n  /** Per-asset preview — the discovered file set + resolved candidate metadata. */\n  assetPreview(id: string): Promise<{\n    discoveredFiles: string[];\n    candidate: { name: string; version: string; kind: string; publisherNamespace: string };\n  }>;\n  /**\n   * Publish one asset. `dryRun` returns the would-be `{ manifest }` without\n   * launching a job; the normal path returns `{ jobId }`.\n   */\n  assetPublish(\n    id: string,\n    body: { ref: string; files: string[] },\n    dryRun?: boolean,\n  ): Promise<{ jobId?: string; manifest?: unknown }>;\n  /** Retract a published asset. Response body is ignored. */\n  assetUnpublish(id: string): Promise<unknown>;\n  /**\n   * Read-only \"can I publish under `@<ns>` right now, and if not, what's the\n   * path?\" probe. Backs the `publish --dry-run` namespace status line; its\n   * `message` is store-authored and meant to be surfaced verbatim.\n   */\n  namespaceAvailability(ns: string): Promise<{\n    namespace: string;\n    status: \"owned-by-you\" | \"claimable-by-you\" | \"reserved\" | \"available\";\n    claimMethod?: string;\n    message: string;\n  }>;\n}\n\n/**\n * Construct the real HTTP-backed {@link PublisherClient}. Every call carries a\n * longer timeout than the default store client because publish/sync trigger\n * server-side clone work.\n *\n * @param config - Store connection config; defaults to {@link getStoreConfig}.\n * @param timeoutMs - Per-request abort timeout (default 20s).\n */\nexport function makeHttpPublisherClient(\n  config: StoreConfig = getStoreConfig(),\n  timeoutMs = 20_000,\n): PublisherClient {\n  // Acquire a fresh Keycloak token per call (device-flow session in\n  // ~/.skaile/auth.json, refreshed on demand) rather than a static config.jwt.\n  const call = async <T>(\n    path: string,\n    opts?: { method?: string; body?: unknown; params?: Record<string, string> },\n  ): Promise<T> => {\n    const jwt = await getStoreToken();\n    return storeFetch<T>({ ...config, jwt }, path, { timeoutMs, ...opts });\n  };\n  return {\n    me: () => call(\"/api/v1/me\"),\n    sourcesAdd: (body) => call(\"/api/v1/sources\", { method: \"POST\", body }),\n    sourcesList: () => call(\"/api/v1/sources\"),\n    sourceSync: (id) => call(`/api/v1/sources/${id}/sync`, { method: \"POST\", body: {} }),\n    jobGet: (jobId) => call(`/api/v1/jobs/${jobId}`),\n    sourceCandidates: (id) => call(`/api/v1/sources/${id}/candidates`),\n    assetPreview: (id) => call(`/api/v1/assets/${id}/preview`),\n    assetPublish: (id, body, dryRun) =>\n      call(`/api/v1/assets/${id}/publish`, {\n        method: \"POST\",\n        body,\n        ...(dryRun ? { params: { dryRun: \"1\" } } : {}),\n      }),\n    assetUnpublish: (id) => call(`/api/v1/assets/${id}/unpublish`, { method: \"POST\", body: {} }),\n    namespaceAvailability: (ns) =>\n      call(`/api/v1/namespaces/${encodeURIComponent(ns)}/availability`),\n  };\n}\n"]}

package/dist/{chunk-EAZECHPM.js → chunk-NBAGV6L2.js}

@@ -3,9 +3,9 @@ import { createHash } from 'crypto';
 import { mkdirSync, rmSync, writeFileSync, renameSync, existsSync, readdirSync } from 'fs';
 import { join } from 'path';
 
-function driverSessionConfigHome(driverId, config) {
+function harnessSessionConfigHome(harnessId, config) {
   const key = config.sessionId && /^[A-Za-z0-9._-]{1,128}$/.test(config.sessionId) ? config.sessionId : createHash("sha256").update(config.sessionId ?? config.cwd).digest("hex").slice(0, 32);
-  return join(globalSkaileDir(), driverId, key);
+  return join(globalSkaileDir(), harnessId, key);
 }
 function writeSessionConfigFile(dir, filename, contents) {
   mkdirSync(dir, { recursive: true, mode: 448 });
@@ -27,6 +27,6 @@ function removeSessionConfigFile(dir, filename) {
   rmSync(join(dir, filename), { force: true });
 }
 
-export { driverSessionConfigHome, pruneSessionConfigDir, removeSessionConfigFile, writeSessionConfigFile };
-//# sourceMappingURL=chunk-EAZECHPM.js.map
-//# sourceMappingURL=chunk-EAZECHPM.js.map
+export { harnessSessionConfigHome, pruneSessionConfigDir, removeSessionConfigFile, writeSessionConfigFile };
+//# sourceMappingURL=chunk-NBAGV6L2.js.map
+//# sourceMappingURL=chunk-NBAGV6L2.js.map

package/dist/chunk-NBAGV6L2.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../bridge/src/provider-materialize/session-config-home.ts"],"names":[],"mappings":";;;;;AAmDO,SAAS,wBAAA,CAAyB,WAAmB,MAAA,EAAkC;AAC5F,EAAA,MAAM,GAAA,GACJ,MAAA,CAAO,SAAA,IAAa,yBAAA,CAA0B,IAAA,CAAK,OAAO,SAAS,CAAA,GAC/D,MAAA,CAAO,SAAA,GACP,UAAA,CAAW,QAAQ,EAChB,MAAA,CAAO,MAAA,CAAO,SAAA,IAAa,MAAA,CAAO,GAAG,CAAA,CACrC,OAAO,KAAK,CAAA,CACZ,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA;AACpB,EAAA,OAAO,IAAA,CAAK,eAAA,EAAgB,EAAG,SAAA,EAAW,GAAG,CAAA;AAC/C;AAQO,SAAS,sBAAA,CAAuB,GAAA,EAAa,QAAA,EAAkB,QAAA,EAA0B;AAC9F,EAAA,SAAA,CAAU,KAAK,EAAE,SAAA,EAAW,IAAA,EAAM,IAAA,EAAM,KAAO,CAAA;AAC/C,EAAA,MAAM,IAAA,GAAO,IAAA,CAAK,GAAA,EAAK,QAAQ,CAAA;AAC/B,EAAA,MAAM,SAAA,GAAY,GAAG,IAAI,CAAA,IAAA,CAAA;AACzB,EAAA,MAAA,CAAO,SAAA,EAAW,EAAE,KAAA,EAAO,IAAA,EAAM,CAAA;AACjC,EAAA,aAAA,CAAc,WAAW,QAAA,EAAU,EAAE,MAAM,GAAA,EAAO,IAAA,EAAM,MAAM,CAAA;AAC9D,EAAA,UAAA,CAAW,WAAW,IAAI,CAAA;AAC1B,EAAA,OAAO,IAAA;AACT;AASO,SAAS,qBAAA,CAAsB,KAAa,IAAA,EAAiC;AAClF,EAAA,IAAI,CAAC,UAAA,CAAW,GAAG,CAAA,EAAG;AACtB,EAAA,KAAA,MAAW,IAAA,IAAQ,WAAA,CAAY,GAAG,CAAA,EAAG;AACnC,IAAA,IAAI,CAAC,KAAK,QAAA,CAAS,OAAO,KAAK,IAAA,CAAK,GAAA,CAAI,IAAI,CAAA,EAAG;AAC/C,IAAA,MAAA,CAAO,KAAK,GAAA,EAAK,IAAI,GAAG,EAAE,KAAA,EAAO,MAAM,CAAA;AAAA,EACzC;AACF;AAGO,SAAS,uBAAA,CAAwB,KAAa,QAAA,EAAwB;AAC3E,EAAA,MAAA,CAAO,KAAK,GAAA,EAAK,QAAQ,GAAG,EAAE,KAAA,EAAO,MAAM,CAAA;AAC7C","file":"chunk-NBAGV6L2.js","sourcesContent":["/**\n * Session-private config homes for the **file-shaped CLI harnesses** — OpenCode,\n * Goose and Continue (§2.3, file rows).\n *\n * An environment variable can say *which* endpoint a harness should use, but\n * it cannot describe one the harness has never heard of: a self-hosted\n * gateway, a LiteLLM proxy, an Ollama box. Each of these three harnesses learns\n * such an endpoint only from its own config file, and each resolves that file\n * out of a config home it takes from the environment:\n *\n * | harness     | variable             | file this adapter writes             |\n * |------------|----------------------|--------------------------------------|\n * | `opencode` | `XDG_CONFIG_HOME`    | `opencode/opencode.json`             |\n * | `goose`    | `GOOSE_PATH_ROOT`    | `config/custom_providers/<id>.json`  |\n * | `continue` | `CONTINUE_GLOBAL_DIR`| `config.yaml`                        |\n *\n * Pointing those variables at a directory this process owns is what keeps the\n * developer's real `~/.config/opencode`, goose config dir and `~/.continue`\n * out of the session: unread, and — the part that matters — unwritten. The\n * harnesses all persist state next to their config (sessions, logs, an index),\n * so a session that rendered into the ambient home would leave its debris in\n * it.\n *\n * The home is keyed by session id so a resumed turn finds the same directory,\n * and it lives under `$SKAILE_HOME` (default `~/.skaile`) rather than inside\n * `cwd`: the working tree is writable by the model, and a config home in there\n * would let a turn rewrite its own `base_url`. `$SKAILE_HOME` is also the test\n * seam.\n *\n * @see PROVIDER-CONFIG-PLAN.md §2.3\n */\n\nimport { createHash } from \"node:crypto\";\nimport { existsSync, mkdirSync, readdirSync, renameSync, rmSync, writeFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { globalSkaileDir } from \"@skaile/workspaces/core\";\n\n/** The `AgentConfig` fields a session home is derived from. */\nexport interface SessionHomeInput {\n  cwd: string;\n  sessionId?: string;\n}\n\n/**\n * `$SKAILE_HOME/<harnessId>/<key>` — the directory this process owns on the\n * session's behalf.\n *\n * `key` is the session id when it is already a safe path segment, and a\n * digest of it (or of `cwd`, for a session that carries no id) otherwise, so\n * an id containing a separator can never escape the harness's subtree.\n */\nexport function harnessSessionConfigHome(harnessId: string, config: SessionHomeInput): string {\n  const key =\n    config.sessionId && /^[A-Za-z0-9._-]{1,128}$/.test(config.sessionId)\n      ? config.sessionId\n      : createHash(\"sha256\")\n          .update(config.sessionId ?? config.cwd)\n          .digest(\"hex\")\n          .slice(0, 32);\n  return join(globalSkaileDir(), harnessId, key);\n}\n\n/**\n * Write `contents` to `path`, creating its directory.\n *\n * Atomic by rename: a harness reading a half-written config fails the whole\n * session, and these files are re-rendered before every turn.\n */\nexport function writeSessionConfigFile(dir: string, filename: string, contents: string): string {\n  mkdirSync(dir, { recursive: true, mode: 0o700 });\n  const path = join(dir, filename);\n  const temporary = `${path}.new`;\n  rmSync(temporary, { force: true });\n  writeFileSync(temporary, contents, { mode: 0o600, flag: \"wx\" });\n  renameSync(temporary, path);\n  return path;\n}\n\n/**\n * Delete every `.json` file in `dir` that is not in `keep`.\n *\n * Goose loads *all* of `custom_providers/`, so a provider file left over from\n * an earlier render of the same session would keep answering for an endpoint\n * the registry no longer declares.\n */\nexport function pruneSessionConfigDir(dir: string, keep: ReadonlySet<string>): void {\n  if (!existsSync(dir)) return;\n  for (const name of readdirSync(dir)) {\n    if (!name.endsWith(\".json\") || keep.has(name)) continue;\n    rmSync(join(dir, name), { force: true });\n  }\n}\n\n/** Remove a file an earlier render left behind. */\nexport function removeSessionConfigFile(dir: string, filename: string): void {\n  rmSync(join(dir, filename), { force: true });\n}\n"]}

package/dist/{chunk-ZQSOJH6I.js → chunk-NMI2TWMH.js}

@@ -1,14 +1,14 @@
-import { registeredAssetKeys, unresolvedManifestDependencies, warnIgnoredDomainFiles, warnLegacyBundleFiles, removedDomainOption, rejectRemovedDomainOption, reportLibrarySymlinks, composeRefContext, assetEntryRef, manifestPublisherProblems, manifestRootProblems, manifestEntryNameProblems, manifestRequiresProblems, findEntryManifestFile, declaredVersion, manifestVersionMismatchMessage, checkAsset, invalidPublisherMessage, invalidSemverText } from './chunk-WOIRYY5L.js';
-import { AI_RESOURCES } from './chunk-2PBSAH3Z.js';
-import { logErr, logInfo, logWarn, logOk } from './chunk-QG6GHTRM.js';
-import { getKindRegistry } from './chunk-F6AA42GW.js';
+import { registeredAssetKeys, unresolvedManifestDependencies, warnIgnoredDomainFiles, warnLegacyBundleFiles, removedDomainOption, rejectRemovedDomainOption, reportLibrarySymlinks, composeRefContext, assetEntryRef, manifestPublisherProblems, manifestRootProblems, manifestEntryNameProblems, manifestRequiresProblems, findEntryManifestFile, declaredVersion, manifestVersionMismatchMessage, checkAsset, invalidPublisherMessage, invalidSemverText } from './chunk-TKHJXPSB.js';
+import { AI_RESOURCES } from './chunk-2UUKCROR.js';
+import { logErr, logInfo, logWarn, logOk } from './chunk-KX2PT5Q4.js';
+import { getKindRegistry } from './chunk-ARWKK325.js';
 import { validateFlowVersions } from './chunk-FKU57Q5Q.js';
-import { loadFlow } from './chunk-IF6IA3PZ.js';
+import { loadFlow } from './chunk-SZXGRHQQ.js';
 import { flowSkillVersionPins } from './chunk-7RGTAEG6.js';
-import { missingRootAssets, assertManifestEditable, scanUnlistedAssets, UNLISTED_SCAN_SKIP_DIRS } from './chunk-XM6T2AZ2.js';
-import { parseManifestFile } from './chunk-I37INEWE.js';
-import { resolveRuntimeAssets } from './chunk-TIIXG3PN.js';
-import { decodeSkaileYaml, normalizeAgentInstances, agentBlockKeyDiagnostics, agentInstanceDiagnostics, localConnectorMountDir, symlinkEscapeOfProject, isInsideProject, resolveAgentDefinitionDir, AgentRefResolutionError } from './chunk-V257LUBM.js';
+import { missingRootAssets, assertManifestEditable, scanUnlistedAssets, UNLISTED_SCAN_SKIP_DIRS } from './chunk-UL22SDGR.js';
+import { parseManifestFile } from './chunk-QOM5Z62G.js';
+import { resolveRuntimeAssets } from './chunk-OTIB4D2K.js';
+import { decodeSkaileYaml, normalizeAgentInstances, agentBlockKeyDiagnostics, agentInstanceDiagnostics, localConnectorMountDir, symlinkEscapeOfProject, isInsideProject, resolveAgentDefinitionDir, AgentRefResolutionError } from './chunk-OHNKYHRR.js';
 import { SKAILE_MANIFEST_FILENAME, loadSkPublishManifest, expandManifestFiles, isNonAssetPath } from './chunk-UQ33Y4DM.js';
 import { readAssetBody } from './chunk-GOCWM7FN.js';
 import { parseAssetRef, isValidPublisher, isValidAssetName, ASSET_NAME_HINT } from './chunk-WDXZA7QW.js';
@@ -554,6 +554,16 @@ async function validateWorkspaceManifests(rootPath) {
       logErr(relPath === "skaile.yaml" ? d.message : `${relPath} \u2014 ${d.message}`);
       errors++;
     }
+    for (const d of decoded.diagnostics) {
+      if (d.code !== "deprecated_harness_key" && d.code !== "harness_key_conflict") continue;
+      const line = `${relPath} [agent-config] \u2014 ${d.code}: ${d.message}`;
+      if (d.severity === "error") {
+        logErr(line);
+        errors++;
+      } else {
+        logWarn(line);
+      }
+    }
     errors += validateLocalConnectorMountPaths(
       path2.dirname(file),
       relPath,
@@ -1068,5 +1078,5 @@ function makeValidateCommand() {
 }
 
 export { isRecord, makeValidateCommand, scanIdentities };
-//# sourceMappingURL=chunk-ZQSOJH6I.js.map
-//# sourceMappingURL=chunk-ZQSOJH6I.js.map
+//# sourceMappingURL=chunk-NMI2TWMH.js.map
+//# sourceMappingURL=chunk-NMI2TWMH.js.map