@skaile/workspaces 6.2.0 → 6.4.0

package/dist/chunk-U673DB5U.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../bridge/src/codex/config-toml.ts"],"names":["stringifyToml"],"mappings":";;;;;;;;AAyDA,IAAM,cAAA,GAA6D;AAAA,EACjE,wBAAA,EAA0B,WAAA;AAAA,EAC1B,kBAAA,EAAoB,WAAA;AAAA,EACpB,wBAAA,EAA0B;AAC5B,CAAA;AAQA,IAAM,8CAAmD,IAAI,GAAA,CAAI,CAAC,QAAA,EAAU,QAAA,EAAU,UAAU,CAAC,CAAA;AAM1F,SAAS,qBAAqB,EAAA,EAAoB;AACvD,EAAA,OAAO,4BAA4B,GAAA,CAAI,EAAE,CAAA,GAAI,CAAA,OAAA,EAAU,EAAE,CAAA,CAAA,GAAK,EAAA;AAChE;AAGA,IAAM,yBAAA,GAAkD;AAAA,EACtD,cAAA,EAAgB,IAAA;AAAA,EAChB,MAAA,EAAQ,IAAA;AAAA,EACR,OAAA,EAAS;AACX,CAAA;AAyDA,SAAS,mBAAA,CACP,KAAA,EACA,QAAA,EACA,QAAA,EACS;AACT,EAAA,IAAI,QAAA,CAAS,IAAA,IAAQ,QAAA,CAAS,OAAA,KAAY,QAAW,OAAO,IAAA;AAC5D,EAAA,MAAM,QAAA,GAAW,MAAM,QAAA,EAAU,IAAA,MAAU,KAAA,CAAM,KAAA,EAAO,MAAK,IAAK,EAAA;AAClE,EAAA,IAAI,SAAS,UAAA,CAAW,CAAA,EAAG,SAAS,UAAU,CAAA,CAAA,CAAG,GAAG,OAAO,IAAA;AAC3D,EAAA,MAAM,KAAA,GAAQ,eAAA,CAAgB,QAAQ,CAAA,CAAE,IAAA,CAAK,CAAC,CAAC,EAAE,CAAA,KAAM,EAAA,KAAO,QAAA,CAAS,UAAU,IAAI,CAAC,CAAA;AAGtF,EAAA,MAAM,UAAU,QAAA,CAAS,OAAA;AACzB,EAAA,OACE,OAAA,KAAY,MAAA,KACX,KAAA,EAAO,SAAA,GAAY,OAAO,MAAM,MAAA,IAAa,KAAA,EAAO,YAAA,GAAe,OAAO,CAAA,KAAM,MAAA,CAAA;AAErF;AAiBO,SAAS,wBAAA,CACd,IACA,KAAA,EAC0D;AAC1D,EAAA,IAAI,CAAC,cAAA,CAAe,KAAK,GAAG,OAAO,EAAE,SAAS,mBAAA,EAAoB;AAClE,EAAA,IAAI,KAAA,CAAM,IAAA,KAAS,KAAA,IAAS,KAAA,CAAM,IAAA,KAAS,OAAA;AACzC,IAAA,OAAO,EAAE,OAAA,EAAS,CAAA,MAAA,EAAS,KAAA,CAAM,IAAI,CAAA,yBAAA,CAAA,EAA4B;AACnE,EAAA,MAAM,GAAA,GAAM,KAAA;AAIZ,EAAA,MAAM,SAAS,KAAA,CAAM,MAAA,GAAS,iBAAA,CAAkB,KAAA,CAAM,MAAM,CAAA,GAAI,MAAA;AAChE,EAAA,MAAM,OAAA,GAAU,GAAA,CAAI,OAAA,IAAW,MAAA,EAAQ,OAAA;AACvC,EAAA,MAAM,OAAA,GAAU,OAAA,GAAU,cAAA,CAAe,OAAO,CAAA,GAAI,MAAA;AACpD,EAAA,IAAI,CAAC,OAAA;AACH,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,OAAA,GACL,CAAA,mCAAA,EAAsC,OAAO,CAAA,CAAA,CAAA,GAC7C;AAAA,KACN;AACF,EAAA,MAAM,cAAA,GAAiB,MAAM,UAAA,EAAY,IAAA;AACzC,EAAA,MAAM,KAAA,GAAiC,EAAE,IAAA,EAAM,KAAA,CAAM,SAAS,EAAA,EAAG;AACjE,EAAA,MAAM,OAAA,GAAU,mBAAA,CAAoB,KAAK,CAAA,IAAK,MAAA,EAAQ,QAAA;AACtD,EAAA,IAAI,OAAA,QAAe,QAAA,GAAW,OAAA;AAC9B,EAAA,IAAI,cAAA,IAAkB,0BAA0B,cAAc,CAAA;AAC5D,IAAA,KAAA,CAAM,OAAA,GAAU,0BAA0B,EAAE,CAAA;AAC9C,EAAA,KAAA,CAAM,QAAA,GAAW,OAAA;AACjB,EAAA,IAAI,cAAA,KAAmB,OAAA,EAAS,KAAA,CAAM,oBAAA,GAAuB,IAAA;AAC7D,EAAA,IAAI,IAAI,YAAA,IAAgB,MAAA,CAAO,KAAK,GAAA,CAAI,YAAY,EAAE,MAAA,GAAS,CAAA;AAC7D,IAAA,KAAA,CAAM,YAAA,GAAe,EAAE,GAAG,GAAA,CAAI,YAAA,EAAa;AAC7C,EAAA,IAAI,MAAM,OAAA,IAAW,MAAA,CAAO,KAAK,KAAA,CAAM,OAAO,EAAE,MAAA,GAAS,CAAA;AACvD,IAAA,KAAA,CAAM,YAAA,GAAe,EAAE,GAAG,KAAA,CAAM,OAAA,EAAQ;AAC1C,EAAA,OAAO,EAAE,KAAA,EAAM;AACjB;AAMO,SAAS,yBAAyB,KAAA,EAA2C;AAClF,EAAA,MAAM,QAAA,GAAgC,EAAE,eAAA,EAAiB,EAAC,EAAE;AAC5D,EAAA,MAAM,UAA+B,EAAC;AACtC,EAAA,MAAM,UAAU,KAAA,CAAM,QAAA,GAAW,gBAAgB,KAAA,CAAM,QAAQ,IAAI,EAAC;AACpE,EAAA,KAAA,MAAW,CAAC,EAAA,EAAI,KAAK,CAAA,IAAK,OAAA,EAAS;AACjC,IAAA,MAAM,QAAA,GAAW,wBAAA,CAAyB,EAAA,EAAI,KAAK,CAAA;AACnD,IAAA,IAAI,SAAA,IAAa,UAAU,OAAA,CAAQ,IAAA,CAAK,EAAE,EAAA,EAAI,MAAA,EAAQ,QAAA,CAAS,OAAA,EAAS,CAAA;AAAA,kBAC1D,eAAA,CAAgB,oBAAA,CAAqB,EAAE,CAAC,IAAI,QAAA,CAAS,KAAA;AAAA,EACrE;AAEA,EAAA,IAAI,CAAC,MAAM,QAAA,EAAU,OAAO,EAAE,QAAA,EAAU,OAAA,EAAS,QAAA,EAAU,EAAC,EAAE;AAI9D,EAAA,MAAM,QAAA,GAAW,aAAA;AAAA,IACf,MAAM,QAAA,EAAU,IAAA,MAAU,KAAA,CAAM,KAAA,EAAO,MAAK,IAAK,EAAA;AAAA,IACjD,KAAA,CAAM,QAAA;AAAA,IACN,KAAA,CAAM;AAAA,GACR;AACA,EAAA,IAAI,CAAC,UAAU,OAAO,EAAE,UAAU,OAAA,EAAS,QAAA,EAAU,EAAC,EAAE;AACxD,EAAA,MAAM,WAAW,QAAA,CAAS,QAAA;AAC1B,EAAA,MAAM,OAAA,GAAU,oBAAA,CAAqB,QAAA,CAAS,UAAU,CAAA;AACxD,EAAA,IAAI,CAAC,QAAA,CAAS,eAAA,CAAgB,OAAO,CAAA,EAAG;AAMtC,IAAA,MAAM,MAAA,GAAS,QAAQ,IAAA,CAAK,CAAC,MAAM,CAAA,CAAE,EAAA,KAAO,QAAA,CAAS,UAAU,CAAA,EAAG,MAAA;AAClE,IAAA,IAAI,UAAU,mBAAA,CAAoB,KAAA,EAAO,QAAA,EAAU,KAAA,CAAM,QAAQ,CAAA,EAAG;AAClE,MAAA,OAAO;AAAA,QACL,QAAA;AAAA,QACA,OAAA;AAAA,QACA,QAAA;AAAA,QACA,aAAA,EAAe,EAAE,EAAA,EAAI,QAAA,CAAS,YAAY,MAAA;AAAO,OACnD;AAAA,IACF;AACA,IAAA,OAAO,EAAE,QAAA,EAAU,OAAA,EAAS,QAAA,EAAS;AAAA,EACvC;AACA,EAAA,QAAA,CAAS,cAAA,GAAiB,OAAA;AAC1B,EAAA,IAAI,QAAA,CAAS,eAAA,EAAiB,QAAA,CAAS,KAAA,GAAQ,QAAA,CAAS,eAAA;AACxD,EAAA,OAAO;AAAA,IACL,QAAA;AAAA,IACA,YAAY,QAAA,CAAS,UAAA;AAAA,IACrB,GAAI,SAAS,eAAA,GAAkB,EAAE,OAAO,QAAA,CAAS,eAAA,KAAoB,EAAC;AAAA,IACtE,OAAA;AAAA,IACA;AAAA,GACF;AACF;AAGO,SAAS,sBAAsB,QAAA,EAAuC;AAC3E,EAAA,MAAM,UAAmC,EAAC;AAC1C,EAAA,IAAI,QAAA,CAAS,cAAA,EAAgB,OAAA,CAAQ,cAAA,GAAiB,QAAA,CAAS,cAAA;AAC/D,EAAA,IAAI,QAAA,CAAS,KAAA,EAAO,OAAA,CAAQ,KAAA,GAAQ,QAAA,CAAS,KAAA;AAC7C,EAAA,OAAA,CAAQ,kBAAkB,QAAA,CAAS,eAAA;AACnC,EAAA,OAAO,CAAA,EAAGA,SAAA,CAAc,OAAO,CAAC;AAAA,CAAA;AAClC;AAWO,SAAS,iBAAiB,MAAA,EAAqD;AACpF,EAAA,MAAM,GAAA,GACJ,MAAA,CAAO,SAAA,IAAa,yBAAA,CAA0B,IAAA,CAAK,OAAO,SAAS,CAAA,GAC/D,MAAA,CAAO,SAAA,GACP,UAAA,CAAW,QAAQ,EAChB,MAAA,CAAO,MAAA,CAAO,SAAA,IAAa,MAAA,CAAO,GAAG,CAAA,CACrC,OAAO,KAAK,CAAA,CACZ,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA;AACpB,EAAA,OAAO,IAAA,CAAK,eAAA,EAAgB,EAAG,OAAA,EAAS,GAAG,CAAA;AAC7C;AAeO,SAAS,oBAAA,CACd,MACA,QAAA,EACoB;AACpB,EAAA,MAAM,IAAA,GAAO,IAAA,CAAK,IAAA,EAAM,aAAa,CAAA;AAGrC,EAAA,SAAA,CAAU,MAAM,EAAE,SAAA,EAAW,IAAA,EAAM,IAAA,EAAM,KAAO,CAAA;AAChD,EAAA,IAAI,OAAO,IAAA,CAAK,QAAA,CAAS,eAAe,CAAA,CAAE,WAAW,CAAA,EAAG;AACtD,IAAA,MAAA,CAAO,IAAA,EAAM,EAAE,KAAA,EAAO,IAAA,EAAM,CAAA;AAC5B,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,MAAM,SAAA,GAAY,IAAA,CAAK,IAAA,EAAM,iBAAiB,CAAA;AAC9C,EAAA,MAAA,CAAO,SAAA,EAAW,EAAE,KAAA,EAAO,IAAA,EAAM,CAAA;AACjC,EAAA,aAAA,CAAc,SAAA,EAAW,sBAAsB,QAAQ,CAAA,EAAG,EAAE,IAAA,EAAM,GAAA,EAAO,IAAA,EAAM,IAAA,EAAM,CAAA;AACrF,EAAA,UAAA,CAAW,WAAW,IAAI,CAAA;AAC1B,EAAA,OAAO,IAAA;AACT","file":"chunk-U673DB5U.js","sourcesContent":["/**\n * Codex's `config.toml` adapter — the AI provider registry materialized into\n * the only provider surface the Codex CLI reads (plan §2.3, codex rows).\n *\n * Codex is a **file-shaped** harness: it takes its endpoints from\n * `$CODEX_HOME/config.toml`, never from per-request options. Both codex modes\n * therefore get a session-private `CODEX_HOME` holding a rendered document:\n *\n * - every addressable registry entry becomes `[model_providers.<id>]` with\n *   `base_url`, `env_key`, `wire_api`, `query_params` and `http_headers`\n *   mapping 1:1 onto the entry's `base_url`, `credential`, `surface`,\n *   `query_params` and `headers`;\n * - `model_provider` and `model` at the top level name the selected entry.\n *\n * The rendered file never contains a credential **value** — `env_key` holds\n * the *name* of the per-entry variable (`SKAILE_AIP_<ID>_KEY`, minted by\n * {@link providerCredentialEnvName}), and the value rides in the child\n * environment. An `oauth` entry has no env carrier at all: it gets\n * `requires_openai_auth`, which routes codex to its own auth manager.\n *\n * **Surface coverage.** Codex names the wire protocol `wire_api` and, as of\n * codex-cli 0.154, accepts exactly one value: `responses`. `chat` was removed\n * (\"`wire_api = \\\"chat\\\"` is no longer supported\", openai/codex#7782), and an\n * unknown value fails the *whole* document at load time — one unaddressable\n * entry would take the rest of the registry down with it. Entries whose\n * surface codex cannot speak (`openai-completions`, `anthropic-messages`,\n * `bedrock-converse-stream`, `google-*`) are therefore left out and reported\n * in {@link CodexConfigBuild.skipped} for the harness to log.\n *\n * @docLink packages/bridge/harnesses#codex-harness\n */\n\nimport { createHash } from \"node:crypto\";\nimport { mkdirSync, renameSync, rmSync, writeFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { globalSkaileDir } from \"@skaile/workspaces/core\";\nimport {\n  type AIProviderEntry,\n  type AIProviderLlmEntry,\n  type AIProviderRegistry,\n  type AIProviderSurface,\n  isEntryEnabled,\n  type MergedAIProviderRegistry,\n  parseModelRef,\n  registryEntries,\n  type ResolvedModelRef,\n  resolveEntryBaseUrl,\n} from \"@skaile/workspaces/core/provider-registry\";\nimport { stringify as stringifyToml } from \"smol-toml\";\nimport { getProviderPreset } from \"../provider-catalog.js\";\nimport { providerCredentialEnvName } from \"../provider-materialize/credential-env.js\";\n\n/**\n * `surface` → codex `wire_api`. Only the responses-flavoured surfaces have a\n * codex spelling; see the module docstring for why `openai-completions` is\n * absent rather than mapped to the removed `chat` value.\n */\nconst CODEX_WIRE_API: Partial<Record<AIProviderSurface, string>> = {\n  \"openai-codex-responses\": \"responses\",\n  \"openai-responses\": \"responses\",\n  \"azure-openai-responses\": \"responses\",\n};\n\n/**\n * Provider ids codex reserves for its own built-ins. A `[model_providers.<id>]`\n * table under one of them fails the whole document (\"model_providers contains\n * reserved built-in provider IDs\"), so such an entry is rendered under\n * {@link codexProviderTableId}.\n */\nconst CODEX_RESERVED_PROVIDER_IDS: ReadonlySet<string> = new Set([\"openai\", \"ollama\", \"lmstudio\"]);\n\n/**\n * The `[model_providers.<id>]` table name for a registry entry: the entry id,\n * or `skaile-<id>` when codex reserves that id (the `openai` preset).\n */\nexport function codexProviderTableId(id: string): string {\n  return CODEX_RESERVED_PROVIDER_IDS.has(id) ? `skaile-${id}` : id;\n}\n\n/** Credential kinds whose value the adapter hands over in an env var. */\nconst ENV_DELIVERED_CREDENTIALS: Record<string, true> = {\n  api_key_header: true,\n  bearer: true,\n  command: true,\n};\n\n/** One `[model_providers.<id>]` table, in codex's own vocabulary. */\nexport interface CodexModelProviderTable {\n  /** Display name. Codex rejects a provider table without one. */\n  name: string;\n  base_url?: string;\n  /** Name of the variable carrying the credential — never the credential. */\n  env_key?: string;\n  wire_api?: string;\n  /** Routes codex to its own auth manager (ChatGPT subscription / stored key). */\n  requires_openai_auth?: boolean;\n  query_params?: Record<string, string>;\n  http_headers?: Record<string, string>;\n}\n\n/** The subset of codex's `config.toml` this adapter owns. */\nexport interface CodexConfigDocument {\n  /** Table id the session addresses (see {@link codexProviderTableId}); absent when nothing rendered. */\n  model_provider?: string;\n  /** Provider-side model id. */\n  model?: string;\n  model_providers: Record<string, CodexModelProviderTable>;\n}\n\n/** An entry codex cannot address, and why. */\nexport interface CodexSkippedEntry {\n  id: string;\n  reason: string;\n}\n\n/** Result of {@link buildCodexConfigDocument}. */\nexport interface CodexConfigBuild {\n  document: CodexConfigDocument;\n  /** Selected registry entry id (not the table id), when it rendered. */\n  providerId?: string;\n  /** Provider-side model id of the selection, when the selector named one. */\n  model?: string;\n  /**\n   * Entries left out of the document. Non-fatal: codex keeps its built-in\n   * providers, so a session whose selection was skipped behaves exactly as it\n   * did before the registry existed.\n   */\n  skipped: CodexSkippedEntry[];\n  /** Notes from `modelRef` resolution (dangling role, disabled provider, …). */\n  warnings: string[];\n  /**\n   * Set when the selector named an entry codex cannot address: the session\n   * must stop with `reason`, not fall back to codex's built-in providers.\n   */\n  unaddressable?: { id: string; reason: string };\n}\n\n/**\n * Whether the session's selector named the entry `selected` resolved to, rather\n * than reaching it by registry order alone.\n */\nfunction selectionNamesEntry(\n  input: CodexConfigInput,\n  selected: ResolvedModelRef,\n  registry: AIProviderRegistry | MergedAIProviderRegistry,\n): boolean {\n  if (selected.role && selected.modelId !== undefined) return true;\n  const selector = input.modelRef?.trim() || input.model?.trim() || \"\";\n  if (selector.startsWith(`${selected.providerId}/`)) return true;\n  const entry = registryEntries(registry).find(([id]) => id === selected.providerId)?.[1] as\n    | AIProviderLlmEntry\n    | undefined;\n  const modelId = selected.modelId;\n  return (\n    modelId !== undefined &&\n    (entry?.model_map?.[modelId] !== undefined || entry?.capabilities?.[modelId] !== undefined)\n  );\n}\n\n/** Inputs {@link buildCodexConfigDocument} reads off an `AgentConfig`. */\nexport interface CodexConfigInput {\n  registry?: AIProviderRegistry | MergedAIProviderRegistry;\n  /** `\"<providerId>/<modelId>\"`, a bare model id, or `\"@role\"`. */\n  modelRef?: string;\n  /** Legacy model field, used as the selector when `modelRef` is absent. */\n  model?: string;\n  /** Roles table (`skaile.yaml`), consulted for an `@role` selector. */\n  roles?: Record<string, string>;\n}\n\n/**\n * Render one entry as a codex provider table, or explain why codex cannot\n * address it.\n */\nexport function renderCodexProviderTable(\n  id: string,\n  entry: AIProviderEntry,\n): { table: CodexModelProviderTable } | { skipped: string } {\n  if (!isEntryEnabled(entry)) return { skipped: \"entry is disabled\" };\n  if (entry.kind !== \"llm\" && entry.kind !== \"embed\")\n    return { skipped: `kind '${entry.kind}' is not a model endpoint` };\n  const llm = entry as AIProviderLlmEntry;\n  // `surface` and `base_url` may live on the catalog preset the entry names —\n  // the catalog layer fills them during a merge, but an entry handed straight\n  // to a harness has not necessarily been through one.\n  const preset = entry.preset ? getProviderPreset(entry.preset) : undefined;\n  const surface = llm.surface ?? preset?.surface;\n  const wireApi = surface ? CODEX_WIRE_API[surface] : undefined;\n  if (!wireApi)\n    return {\n      skipped: surface\n        ? `codex has no wire_api for surface '${surface}'`\n        : \"entry declares no surface\",\n    };\n  const credentialKind = entry.credential?.kind;\n  const table: CodexModelProviderTable = { name: entry.label ?? id };\n  const baseUrl = resolveEntryBaseUrl(entry) ?? preset?.base_url;\n  if (baseUrl) table.base_url = baseUrl;\n  if (credentialKind && ENV_DELIVERED_CREDENTIALS[credentialKind])\n    table.env_key = providerCredentialEnvName(id);\n  table.wire_api = wireApi;\n  if (credentialKind === \"oauth\") table.requires_openai_auth = true;\n  if (llm.query_params && Object.keys(llm.query_params).length > 0)\n    table.query_params = { ...llm.query_params };\n  if (entry.headers && Object.keys(entry.headers).length > 0)\n    table.http_headers = { ...entry.headers };\n  return { table };\n}\n\n/**\n * Build the document for a session: every addressable entry, plus the\n * selection when it resolved to one of them.\n */\nexport function buildCodexConfigDocument(input: CodexConfigInput): CodexConfigBuild {\n  const document: CodexConfigDocument = { model_providers: {} };\n  const skipped: CodexSkippedEntry[] = [];\n  const entries = input.registry ? registryEntries(input.registry) : [];\n  for (const [id, entry] of entries) {\n    const rendered = renderCodexProviderTable(id, entry);\n    if (\"skipped\" in rendered) skipped.push({ id, reason: rendered.skipped });\n    else document.model_providers[codexProviderTableId(id)] = rendered.table;\n  }\n\n  if (!input.registry) return { document, skipped, warnings: [] };\n  // An empty selector resolves the same way a bare one does — first entry in\n  // registry order. A session that configured an endpoint and named no model\n  // still means that endpoint, not codex's built-in default.\n  const selected = parseModelRef(\n    input.modelRef?.trim() || input.model?.trim() || \"\",\n    input.registry,\n    input.roles,\n  );\n  if (!selected) return { document, skipped, warnings: [] };\n  const warnings = selected.warnings;\n  const tableId = codexProviderTableId(selected.providerId);\n  if (!document.model_providers[tableId]) {\n    // A selector that names the entry (`ollama/llama3`, a role or a model its\n    // `model_map` lists) and cannot be rendered must not fall through to\n    // codex's built-in OpenAI: the prompt would go to a provider the user did\n    // not pick. A bare model id that matched no entry only landed on the first\n    // entry by registry order, so codex's own providers stay the right answer.\n    const reason = skipped.find((s) => s.id === selected.providerId)?.reason;\n    if (reason && selectionNamesEntry(input, selected, input.registry)) {\n      return {\n        document,\n        skipped,\n        warnings,\n        unaddressable: { id: selected.providerId, reason },\n      };\n    }\n    return { document, skipped, warnings };\n  }\n  document.model_provider = tableId;\n  if (selected.providerModelId) document.model = selected.providerModelId;\n  return {\n    document,\n    providerId: selected.providerId,\n    ...(selected.providerModelId ? { model: selected.providerModelId } : {}),\n    skipped,\n    warnings,\n  };\n}\n\n/** Serialize a document to TOML. Deterministic: registry order throughout. */\nexport function renderCodexConfigToml(document: CodexConfigDocument): string {\n  const ordered: Record<string, unknown> = {};\n  if (document.model_provider) ordered.model_provider = document.model_provider;\n  if (document.model) ordered.model = document.model;\n  ordered.model_providers = document.model_providers;\n  return `${stringifyToml(ordered)}\\n`;\n}\n\n/**\n * The session-private codex home.\n *\n * Deliberately outside `cwd`: codex's `workspace-write` sandbox makes the\n * working tree writable by the model, and a config home inside it would let a\n * turn rewrite its own `base_url`. `$SKAILE_HOME` (honoured by\n * {@link globalSkaileDir}) relocates the whole tree, which is also the test\n * seam.\n */\nexport function codexSessionHome(config: { cwd: string; sessionId?: string }): string {\n  const key =\n    config.sessionId && /^[A-Za-z0-9._-]{1,128}$/.test(config.sessionId)\n      ? config.sessionId\n      : createHash(\"sha256\")\n          .update(config.sessionId ?? config.cwd)\n          .digest(\"hex\")\n          .slice(0, 32);\n  return join(globalSkaileDir(), \"codex\", key);\n}\n\n/**\n * Write `<home>/config.toml`, creating the home always. Atomic: a\n * partially written document would fail codex's config load for the whole\n * session.\n *\n * A document with no provider tables says nothing codex does not already\n * know, so nothing is written and a file left by an earlier render is\n * removed — a session that no longer carries a registry must not keep\n * answering to the one it used to have.\n *\n * @returns the absolute path written, or `undefined` when there was nothing\n *   to render.\n */\nexport function writeCodexConfigToml(\n  home: string,\n  document: CodexConfigDocument,\n): string | undefined {\n  const path = join(home, \"config.toml\");\n  // codex exits when CODEX_HOME names a directory that does not exist, so the\n  // home exists before the early return too.\n  mkdirSync(home, { recursive: true, mode: 0o700 });\n  if (Object.keys(document.model_providers).length === 0) {\n    rmSync(path, { force: true });\n    return undefined;\n  }\n  const temporary = join(home, \"config.toml.new\");\n  rmSync(temporary, { force: true });\n  writeFileSync(temporary, renderCodexConfigToml(document), { mode: 0o600, flag: \"wx\" });\n  renameSync(temporary, path);\n  return path;\n}\n"]}

package/dist/chunk-X37JUNEW.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../bridge/src/harness-capabilities.ts","../bridge/src/provider-catalog.ts","../bridge/src/provider-materialize/credential-env.ts","../bridge/src/registry.ts"],"names":[],"mappings":";;;;;AAqBA,IAAM,4BAAA,GAAoD;AAAA,EACxD,mBAAA,EAAqB,KAAA;AAAA,EACrB,eAAA,EAAiB,IAAA;AAAA,EACjB,cAAA,EAAgB,KAAA;AAAA,EAChB,qBAAA,EAAuB,KAAA;AAAA,EACvB,qBAAA,EAAuB;AACzB,CAAA;AAQO,IAAM,4BAAA,GAA+B;AAAA;AAAA,EAE1C,GAAA,EAAK;AAAA,IACH,mBAAA,EAAqB,KAAA;AAAA,IACrB,eAAA,EAAiB,IAAA;AAAA,IACjB,cAAA,EAAgB,KAAA;AAAA,IAChB,qBAAA,EAAuB,KAAA;AAAA,IACvB,qBAAA,EAAuB;AAAA,GACzB;AAAA;AAAA;AAAA,EAGA,YAAA,EAAc;AAAA,IACZ,mBAAA,EAAqB,IAAA;AAAA,IACrB,eAAA,EAAiB,KAAA;AAAA,IACjB,cAAA,EAAgB,KAAA;AAAA,IAChB,qBAAA,EAAuB,IAAA;AAAA,IACvB,qBAAA,EAAuB;AAAA,GACzB;AAAA;AAAA;AAAA,EAGA,KAAA,EAAO;AAAA,IACL,mBAAA,EAAqB,KAAA;AAAA,IACrB,eAAA,EAAiB,IAAA;AAAA,IACjB,cAAA,EAAgB,IAAA;AAAA,IAChB,qBAAA,EAAuB,KAAA;AAAA,IACvB,qBAAA,EAAuB;AAAA;AAE3B,CAAA;AAcO,SAAS,oBAAoB,EAAA,EAA6C;AAC/E,EAAA,MAAM,QAAA,GAAW,EAAA,GACb,MAAA,CAAO,MAAA,CAAO,8BAA8B,EAAE,CAAA,GAC5C,4BAAA,CAA6B,EAA+C,IAC5E,cAAA,CAAe,GAAA,CAAI,SAAA,EAAW,EAAE,GAAG,YAAA,GACrC,MAAA;AACJ,EAAA,OAAO,EAAE,GAAG,4BAAA,EAA8B,GAAG,QAAA,EAAS;AACxD;AAWO,SAAS,uBAAA,CAAwB,EAAA,EAAwB,OAAA,GAAU,KAAA,EAAgB;AACxF,EAAA,MAAM,IAAA,GAAO,oBAAoB,EAAE,CAAA;AACnC,EAAA,OAAO,IAAA,CAAK,eAAA,IAAmB,EAAE,OAAA,IAAW,IAAA,CAAK,cAAA,CAAA;AACnD;;;ACXA,IAAM,wBAAA,GAAmD,EAAE,mBAAA,EAAqB,YAAA,EAAa;AAE7F,IAAM,SAAA,GAAkC,EAAE,IAAA,EAAM,WAAA,EAAa,UAAU,cAAA,EAAe;AAEtF,IAAM,kBAAA,GAAqB,YAAA;AAYpB,IAAM,mBAAA,GAAwD;AAAA,EACnE,SAAA,EAAW;AAAA,IACT,EAAA,EAAI,WAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,WAAA;AAAA,IACP,OAAA,EAAS,oBAAA;AAAA,IACT,QAAA,EAAU,2BAAA;AAAA,IACV,YAAA,EAAc,oBAAA;AAAA,IACd,OAAA,EAAS,wBAAA;AAAA,IACT,UAAA,EAAY,EAAE,IAAA,EAAM,gBAAA,EAAkB,KAAK,mBAAA,EAAoB;AAAA,IAC/D,WAAA,EAAa,SAAA;AAAA,IACb,UAAA,EAAY,YAAA;AAAA,IACZ,SAAA,EAAW,EAAE,IAAA,EAAM,uBAAA;AAAwB,GAC7C;AAAA,EACA,MAAA,EAAQ;AAAA,IACN,EAAA,EAAI,QAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,QAAA;AAAA,IACP,OAAA,EAAS,kBAAA;AAAA,IACT,QAAA,EAAU,2BAAA;AAAA,IACV,YAAA,EAAc,iBAAA;AAAA,IACd,UAAA,EAAY,EAAE,IAAA,EAAM,QAAA,EAAU,KAAK,gBAAA,EAAiB;AAAA,IACpD,UAAA,EAAY,kBAAA;AAAA,IACZ,SAAA,EAAW,EAAE,IAAA,EAAM,oBAAA,EAAqB;AAAA,IACxC,KAAA,EACE;AAAA,GACJ;AAAA,EACA,MAAA,EAAQ;AAAA,IACN,EAAA,EAAI,QAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,mBAAA;AAAA,IACP,OAAA,EAAS,sBAAA;AAAA,IACT,QAAA,EAAU,kDAAA;AAAA,IACV,UAAA,EAAY,EAAE,IAAA,EAAM,gBAAA,EAAkB,KAAK,gBAAA,EAAiB;AAAA,IAC5D,WAAA,EAAa,EAAE,IAAA,EAAM,gBAAA,EAAkB,UAAU,cAAA,EAAe;AAAA,IAChE,UAAA,EAAY,gBAAA;AAAA,IACZ,SAAA,EAAW,EAAE,IAAA,EAAM,oBAAA;AAAqB,GAC1C;AAAA,EACA,IAAA,EAAM;AAAA,IACJ,EAAA,EAAI,MAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,MAAA;AAAA,IACP,OAAA,EAAS,oBAAA;AAAA,IACT,QAAA,EAAU,gCAAA;AAAA,IACV,UAAA,EAAY,EAAE,IAAA,EAAM,QAAA,EAAU,KAAK,cAAA,EAAe;AAAA,IAClD,UAAA,EAAY,kBAAA;AAAA,IACZ,SAAA,EAAW,EAAE,IAAA,EAAM,oBAAA;AAAqB,GAC1C;AAAA,EACA,QAAA,EAAU;AAAA,IACR,EAAA,EAAI,UAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,UAAA;AAAA,IACP,OAAA,EAAS,oBAAA;AAAA,IACT,QAAA,EAAU,0BAAA;AAAA,IACV,UAAA,EAAY,EAAE,IAAA,EAAM,QAAA,EAAU,KAAK,kBAAA,EAAmB;AAAA,IACtD,UAAA,EAAY,SAAA;AAAA,IACZ,SAAA,EAAW,EAAE,IAAA,EAAM,oBAAA,EAAqB;AAAA,IACxC,KAAA,EACE;AAAA,GACJ;AAAA,EACA,UAAA,EAAY;AAAA,IACV,EAAA,EAAI,YAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,YAAA;AAAA,IACP,OAAA,EAAS,oBAAA;AAAA,IACT,QAAA,EAAU,8BAAA;AAAA,IACV,UAAA,EAAY,EAAE,IAAA,EAAM,QAAA,EAAU,KAAK,oBAAA,EAAqB;AAAA,IACxD,UAAA,EAAY,kBAAA;AAAA,IACZ,SAAA,EAAW,EAAE,IAAA,EAAM,oBAAA;AAAqB,GAC1C;AAAA,EACA,OAAA,EAAS;AAAA,IACP,EAAA,EAAI,SAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,SAAA;AAAA,IACP,OAAA,EAAS,oBAAA;AAAA,IACT,QAAA,EAAU,2BAAA;AAAA,IACV,UAAA,EAAY,EAAE,IAAA,EAAM,QAAA,EAAU,KAAK,iBAAA,EAAkB;AAAA,IACrD,UAAA,EAAY,kBAAA;AAAA,IACZ,SAAA,EAAW,EAAE,IAAA,EAAM,oBAAA;AAAqB,GAC1C;AAAA,EACA,GAAA,EAAK;AAAA,IACH,EAAA,EAAI,KAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,YAAA;AAAA,IACP,OAAA,EAAS,oBAAA;AAAA,IACT,QAAA,EAAU,qBAAA;AAAA,IACV,UAAA,EAAY,EAAE,IAAA,EAAM,QAAA,EAAU,KAAK,aAAA,EAAc;AAAA,IACjD,UAAA,EAAY,kBAAA;AAAA,IACZ,SAAA,EAAW,EAAE,IAAA,EAAM,oBAAA;AAAqB,GAC1C;AAAA,EACA,QAAA,EAAU;AAAA,IACR,EAAA,EAAI,UAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,aAAA;AAAA,IACP,OAAA,EAAS,oBAAA;AAAA,IACT,QAAA,EAAU,4BAAA;AAAA,IACV,UAAA,EAAY,EAAE,IAAA,EAAM,QAAA,EAAU,KAAK,kBAAA,EAAmB;AAAA,IACtD,UAAA,EAAY,kBAAA;AAAA,IACZ,SAAA,EAAW,EAAE,IAAA,EAAM,oBAAA;AAAqB,GAC1C;AAAA,EACA,SAAA,EAAW;AAAA,IACT,EAAA,EAAI,WAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,cAAA;AAAA,IACP,OAAA,EAAS,oBAAA;AAAA,IACT,QAAA,EAAU,uCAAA;AAAA,IACV,UAAA,EAAY,EAAE,IAAA,EAAM,QAAA,EAAU,KAAK,mBAAA,EAAoB;AAAA,IACvD,UAAA,EAAY,kBAAA;AAAA,IACZ,SAAA,EAAW,EAAE,IAAA,EAAM,oBAAA;AAAqB,GAC1C;AAAA,EACA,OAAA,EAAS;AAAA,IACP,EAAA,EAAI,SAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,aAAA;AAAA,IACP,OAAA,EAAS,yBAAA;AAAA,IACT,SAAA,EAAW,SAAA;AAAA,IACX,UAAA,EAAY,EAAE,IAAA,EAAM,OAAA,EAAQ;AAAA,IAC5B,eAAA,EAAiB,CAAC,QAAQ,CAAA;AAAA,IAC1B,KAAA,EAAO;AAAA,GACT;AAAA,EACA,MAAA,EAAQ;AAAA,IACN,EAAA,EAAI,QAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,kBAAA;AAAA,IACP,OAAA,EAAS,eAAA;AAAA,IACT,SAAA,EAAW,QAAA;AAAA,IACX,UAAA,EAAY,EAAE,IAAA,EAAM,YAAA,EAAa;AAAA,IACjC,MAAA,EAAQ,EAAE,SAAA,EAAW,QAAA,EAAS;AAAA,IAC9B,eAAA,EAAiB,CAAC,SAAA,EAAW,UAAU,CAAA;AAAA,IACvC,UAAA,EAAY;AAAA,GACd;AAAA,EACA,cAAA,EAAgB;AAAA,IACd,EAAA,EAAI,cAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,cAAA;AAAA,IACP,OAAA,EAAS,wBAAA;AAAA,IACT,SAAA,EAAW,cAAA;AAAA,IACX,UAAA,EAAY,EAAE,IAAA,EAAM,gBAAA,EAAkB,KAAK,sBAAA,EAAuB;AAAA,IAClE,WAAA,EAAa,EAAE,IAAA,EAAM,SAAA,EAAW,UAAU,cAAA,EAAe;AAAA,IACzD,eAAA,EAAiB,CAAC,UAAA,EAAY,YAAA,EAAc,aAAa,CAAA;AAAA,IACzD,UAAA,EAAY,SAAA;AAAA,IACZ,KAAA,EACE;AAAA,GACJ;AAAA,EACA,OAAA,EAAS;AAAA,IACP,EAAA,EAAI,SAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,6BAAA;AAAA,IACP,OAAA,EAAS,oBAAA;AAAA,IACT,SAAA,EAAW,SAAA;AAAA,IACX,OAAA,EAAS,wBAAA;AAAA,IACT,UAAA,EAAY,EAAE,IAAA,EAAM,gBAAA,EAAkB,KAAK,2BAAA,EAA4B;AAAA,IACvE,WAAA,EAAa,SAAA;AAAA,IACb,eAAA,EAAiB,CAAC,UAAU,CAAA;AAAA,IAC5B,UAAA,EAAY;AAAA,GACd;AAAA,EACA,MAAA,EAAQ;AAAA,IACN,EAAA,EAAI,QAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,gBAAA;AAAA,IACP,OAAA,EAAS,oBAAA;AAAA,IACT,QAAA,EAAU,2BAAA;AAAA,IACV,UAAA,EAAY,EAAE,IAAA,EAAM,MAAA,EAAO;AAAA,IAC3B,UAAA,EAAY,kBAAA;AAAA,IACZ,SAAA,EAAW,EAAE,IAAA,EAAM,oBAAA;AAAqB,GAC1C;AAAA,EACA,QAAA,EAAU;AAAA,IACR,EAAA,EAAI,UAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,mBAAA;AAAA,IACP,OAAA,EAAS,oBAAA;AAAA,IACT,QAAA,EAAU,0BAAA;AAAA,IACV,UAAA,EAAY,EAAE,IAAA,EAAM,MAAA,EAAO;AAAA,IAC3B,UAAA,EAAY,kBAAA;AAAA,IACZ,SAAA,EAAW,EAAE,IAAA,EAAM,oBAAA;AAAqB,GAC1C;AAAA,EACA,IAAA,EAAM;AAAA,IACJ,EAAA,EAAI,MAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,oBAAA;AAAA,IACP,OAAA,EAAS,oBAAA;AAAA,IACT,QAAA,EAAU,0BAAA;AAAA,IACV,UAAA,EAAY,EAAE,IAAA,EAAM,MAAA,EAAO;AAAA,IAC3B,UAAA,EAAY,kBAAA;AAAA,IACZ,SAAA,EAAW,EAAE,IAAA,EAAM,oBAAA,EAAqB;AAAA,IACxC,KAAA,EAAO;AAAA,GACT;AAAA,EACA,OAAA,EAAS;AAAA,IACP,EAAA,EAAI,SAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,eAAA;AAAA,IACP,OAAA,EAAS,oBAAA;AAAA,IACT,QAAA,EAAU,uBAAA;AAAA,IACV,UAAA,EAAY,EAAE,IAAA,EAAM,QAAA,EAAU,KAAK,iBAAA,EAAkB;AAAA,IACrD,UAAA,EAAY,kBAAA;AAAA,IACZ,SAAA,EAAW,EAAE,IAAA,EAAM,oBAAA,EAAqB;AAAA,IACxC,KAAA,EAAO;AAAA,GACT;AAAA,EACA,QAAA,EAAU;AAAA,IACR,EAAA,EAAI,UAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,UAAA;AAAA,IACP,QAAA,EAAU,0BAAA;AAAA,IACV,UAAA,EAAY,EAAE,IAAA,EAAM,gBAAA,EAAkB,KAAK,kBAAA,EAAmB;AAAA,IAC9D,WAAA,EAAa,EAAE,IAAA,EAAM,eAAA,EAAiB,UAAU,oBAAA,EAAqB;AAAA,IACrE,MAAA,EAAQ,EAAE,KAAA,EAAO,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,IAC1C,UAAA,EAAY;AAAA,GACd;AAAA,EACA,UAAA,EAAY;AAAA,IACV,EAAA,EAAI,YAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,YAAA;AAAA,IACP,QAAA,EAAU,2BAAA;AAAA,IACV,UAAA,EAAY,EAAE,IAAA,EAAM,gBAAA,EAAkB,KAAK,oBAAA,EAAqB;AAAA,IAChE,WAAA,EAAa,EAAE,IAAA,EAAM,YAAA,EAAc,UAAU,cAAA,EAAe;AAAA,IAC5D,MAAA,EAAQ,EAAE,QAAA,EAAU,sBAAA,EAAwB,eAAe,eAAA,EAAgB;AAAA,IAC3E,UAAA,EAAY;AAAA;AAEhB;AAGO,SAAS,mBAAA,GAA0C;AACxD,EAAA,OAAO,MAAA,CAAO,OAAO,mBAAmB,CAAA;AAC1C;AAGO,SAAS,kBAAkB,EAAA,EAA0C;AAC1E,EAAA,OAAO,oBAAoB,EAAE,CAAA;AAC/B;AAQO,SAAS,cAAc,MAAA,EAA8C;AAC1E,EAAA,IAAI,MAAA,CAAO,QAAA,EAAU,OAAO,MAAA,CAAO,QAAA;AACnC,EAAA,IAAI,CAAC,MAAA,CAAO,SAAA,IAAa,MAAA,CAAO,SAAA,KAAc,UAAU,OAAO,MAAA;AAC/D,EAAA,OAAO,8BAAA,CAA+B,OAAO,SAAS,CAAA;AACxD;AAcO,SAAS,oBAAA,CACd,MAAA,EACA,OAAA,GAA0E,EAAC,EACvD;AACpB,EAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,OAAA,EAAS,IAAA,EAAK;AACvC,EAAA,IAAI,UAAU,OAAO,QAAA;AACrB,EAAA,MAAM,OAAA,GAAU,OAAO,YAAA,GAAe,OAAA,CAAQ,MAAM,MAAA,CAAO,YAAY,CAAA,EAAG,IAAA,EAAK,GAAI,MAAA;AACnF,EAAA,OAAO,WAAW,MAAA,CAAO,QAAA;AAC3B;AAqBO,SAAS,YAAA,CACd,MAAA,EACA,OAAA,GAA+B,EAAC,EACf;AACjB,EAAA,MAAM,GAAA,GACJ,OAAA,CAAQ,aAAA,KAAkB,MAAA,CAAO,UAAA,CAAW,MAAM,CAAA,IAAA,EAAO,MAAA,CAAO,UAAA,CAAW,GAAG,CAAA,CAAA,GAAK,MAAA,CAAA;AACrF,EAAA,MAAM,UAAA,GAAa,GAAA,GAAM,EAAE,IAAA,EAAM,MAAA,CAAO,UAAA,CAAW,IAAA,EAAM,GAAA,EAAI,GAAI,EAAE,IAAA,EAAM,MAAA,CAAO,WAAW,IAAA,EAAK;AAChG,EAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,OAAA,IAAW,MAAA,CAAO,QAAA;AAC3C,EAAA,MAAM,SAAS,EAAE,GAAG,OAAO,MAAA,EAAQ,GAAG,QAAQ,MAAA,EAAO;AAErD,EAAA,IAAI,MAAA,CAAO,IAAA,KAAS,KAAA,IAAS,MAAA,CAAO,SAAS,KAAA,EAAO;AAClD,IAAA,OAAO;AAAA,MACL,MAAM,MAAA,CAAO,IAAA;AAAA,MACb,KAAA,EAAO,OAAA,CAAQ,KAAA,IAAS,MAAA,CAAO,KAAA;AAAA,MAC/B,QAAQ,MAAA,CAAO,EAAA;AAAA,MACf,GAAI,QAAA,GAAW,EAAE,QAAA,KAAa,EAAC;AAAA,MAC/B,GAAI,MAAA,CAAO,OAAA,GAAU,EAAE,OAAA,EAAS,EAAE,GAAG,MAAA,CAAO,OAAA,EAAQ,EAAE,GAAI,EAAC;AAAA,MAC3D,UAAA;AAAA,MACA,GAAI,MAAA,CAAO,IAAA,CAAK,MAAM,CAAA,CAAE,SAAS,CAAA,GAAI,EAAE,MAAA,EAAwC,GAAI;AAAC,KACtF;AAAA,EACF;AAEA,EAAA,MAAM,SAAA,GAAY,OAAO,SAAA,IAAa,QAAA;AACtC,EAAA,MAAM,KAAA,GAA4B;AAAA,IAChC,IAAA,EAAM,MAAA,CAAO,IAAA,KAAS,OAAA,GAAU,OAAA,GAAU,KAAA;AAAA,IAC1C,KAAA,EAAO,OAAA,CAAQ,KAAA,IAAS,MAAA,CAAO,KAAA;AAAA,IAC/B,QAAQ,MAAA,CAAO,EAAA;AAAA,IACf,GAAK,OAAA,CAAQ,OAAA,IAAW,MAAA,CAAO,OAAA,GAAW,EAAE,OAAA,EAAS,OAAA,CAAQ,OAAA,IAAW,MAAA,CAAO,OAAA,EAAQ,GAAI,EAAC;AAAA,IAC5F,GAAI,QAAA,GAAW,EAAE,QAAA,KAAa,EAAC;AAAA,IAC/B,GAAI,MAAA,CAAO,OAAA,GAAU,EAAE,OAAA,EAAS,EAAE,GAAG,MAAA,CAAO,OAAA,EAAQ,EAAE,GAAI,EAAC;AAAA,IAC3D,UAAA;AAAA,IACA,GAAI,MAAA,CAAO,SAAA,GAAY,EAAE,SAAA,EAAW,EAAE,GAAG,MAAA,CAAO,SAAA,EAAU,EAAE,GAAI;AAAC,GACnE;AAEA,EAAA,IAAI,cAAc,QAAA,EAAU;AAC1B,IAAA,MAAA,CAAO,MAAA,CAAO,KAAA,EAAO,EAAE,SAAA,EAAW,QAAQ,CAAA;AAC1C,IAAA,IAAI,SAAA,KAAc,cAAA,IAAkB,MAAA,CAAO,WAAA,EAAa;AACtD,MAAA,KAAA,CAAM,YAAA,GAAe,EAAE,aAAA,EAAe,MAAA,CAAO,WAAA,EAAY;AAAA,IAC3D;AAAA,EACF;AACA,EAAA,OAAO,KAAA;AACT;AAcO,SAAS,aAAa,SAAA,EAA6D;AACxF,EAAA,MAAM,WAA+B,EAAC;AACtC,EAAA,KAAA,MAAW,CAAC,EAAA,EAAI,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,SAAS,CAAA,EAAG;AACnD,IAAA,IAAI,CAAC,MAAM,MAAA,EAAQ;AACnB,IAAA,MAAM,MAAA,GAAS,mBAAA,CAAoB,KAAA,CAAM,MAAM,CAAA;AAC/C,IAAA,IAAI,CAAC,MAAA,EAAQ;AACb,IAAA,QAAA,CAAS,EAAE,CAAA,GAAI,YAAA,CAAa,MAAM,CAAA;AAAA,EACpC;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,SAAA,EAAW,QAAA,EAAS;AACjD;AAQA,SAAS,eAAA,CAAgB,MAAc,IAAA,EAAsB;AAC3D,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AACvC,EAAA,MAAM,WAAW,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA,CAAE,OAAO,OAAO,CAAA;AAC/C,EAAA,MAAM,IAAA,GAAO,SAAS,CAAC,CAAA;AACvB,EAAA,IAAI,IAAA,IAAQ,OAAA,CAAQ,WAAA,EAAY,CAAE,QAAA,CAAS,IAAI,IAAA,CAAK,WAAA,EAAa,CAAA,CAAE,CAAA,EAAG;AACpE,IAAA,OAAO,CAAA,EAAG,OAAO,CAAA,CAAA,EAAI,QAAA,CAAS,MAAM,CAAC,CAAA,CAAE,IAAA,CAAK,GAAG,CAAC,CAAA,CAAA;AAAA,EAClD;AACA,EAAA,OAAO,CAAA,EAAG,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA;AAC1B;AAUO,SAAS,gBAAgB,KAAA,EAA4C;AAC1E,EAAA,MAAM,IAAA,GAAO,oBAAoB,KAAK,CAAA;AACtC,EAAA,IAAI,CAAC,MAAM,OAAO,MAAA;AAClB,EAAA,MAAM,SAAS,KAAA,CAAM,MAAA,GAAS,mBAAA,CAAoB,KAAA,CAAM,MAAM,CAAA,GAAI,MAAA;AAClE,EAAA,MAAM,IAAA,GAAQ,KAAA,CAA6B,SAAA,EAAW,IAAA,IAAQ,MAAA,EAAQ,UAAA;AACtE,EAAA,IAAI,CAAC,MAAM,OAAO,MAAA;AAClB,EAAA,MAAM,GAAA,GAAM,eAAA,CAAgB,IAAA,EAAM,IAAI,CAAA;AACtC,EAAA,MAAM,QAAS,KAAA,CAA6B,YAAA;AAC5C,EAAA,IAAI,CAAC,SAAS,MAAA,CAAO,IAAA,CAAK,KAAK,CAAA,CAAE,MAAA,KAAW,GAAG,OAAO,GAAA;AACtD,EAAA,MAAM,MAAA,GAAS,IAAI,eAAA,CAAgB,KAAK,EAAE,QAAA,EAAS;AACnD,EAAA,OAAO,CAAA,EAAG,GAAG,CAAA,EAAG,GAAA,CAAI,QAAA,CAAS,GAAG,CAAA,GAAI,GAAA,GAAM,GAAG,CAAA,EAAG,MAAM,CAAA,CAAA;AACxD;AAWO,SAAS,sBAAA,CACd,OACA,MAAA,EACwB;AACxB,EAAA,MAAM,IAAA,GAAO,KAAA,CAAM,UAAA,EAAY,IAAA,IAAQ,MAAA;AACvC,EAAA,IAAI,CAAC,UAAU,IAAA,KAAS,MAAA,IAAU,SAAS,OAAA,IAAW,IAAA,KAAS,YAAA,EAAc,OAAO,EAAC;AAErF,EAAA,MAAM,SAAS,KAAA,CAAM,MAAA,GAAS,mBAAA,CAAoB,KAAA,CAAM,MAAM,CAAA,GAAI,MAAA;AAClE,EAAA,IAAI,QAAQ,WAAA,EAAa;AACvB,IAAA,OAAO;AAAA,MACL,CAAC,MAAA,CAAO,WAAA,CAAY,IAAI,GAAG,OAAO,WAAA,CAAY,QAAA,CAAS,OAAA,CAAQ,cAAA,EAAgB,MAAM;AAAA,KACvF;AAAA,EACF;AACA,EAAA,IAAI,SAAS,gBAAA,EAAkB;AAC7B,IAAA,MAAM,UAAW,KAAA,CAA6B,OAAA;AAC9C,IAAA,IAAI,OAAA,KAAY,sBAAA,EAAwB,OAAO,EAAE,kBAAkB,MAAA,EAAO;AAC1E,IAAA,IAAI,OAAA,KAAY,wBAAA,EAA0B,OAAO,EAAE,WAAW,MAAA,EAAO;AACrE,IAAA,OAAO,EAAE,aAAa,MAAA,EAAO;AAAA,EAC/B;AACA,EAAA,OAAO,EAAE,aAAA,EAAe,CAAA,OAAA,EAAU,MAAM,CAAA,CAAA,EAAG;AAC7C;AA8BA,eAAsB,kBAAA,CACpB,KAAA,EACA,OAAA,GAAgC,EAAC,EACD;AAChC,EAAA,MAAM,GAAA,GAAM,gBAAgB,KAAK,CAAA;AACjC,EAAA,IAAI,CAAC,GAAA,EAAK;AACR,IAAA,MAAM,IAAA,GAAO,oBAAoB,KAAK,CAAA;AACtC,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,KAAA;AAAA,MACJ,MAAA,EAAQ,KAAA;AAAA,MACR,MAAA,EAAQ,IAAA,GACJ,CAAA,uDAAA,EAA0D,IAAI,CAAA,CAAA,CAAA,GAC9D;AAAA,KACN;AAAA,EACF;AAEA,EAAA,MAAM,OAAA,GAAkC;AAAA,IACtC,GAAG,KAAA,CAAM,OAAA;AAAA,IACT,GAAG,sBAAA,CAAuB,KAAA,EAAO,OAAA,CAAQ,MAAM;AAAA,GACjD;AAEA,EAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,EAAA,MAAM,OAAA,GAAU,WAAW,MAAM,UAAA,CAAW,OAAM,EAAG,OAAA,CAAQ,aAAa,GAAI,CAAA;AAC9E,EAAA,IAAI;AACF,IAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,EAAK,EAAE,MAAA,EAAQ,KAAA,EAAO,OAAA,EAAS,MAAA,EAAQ,UAAA,CAAW,MAAA,EAAQ,CAAA;AACvF,IAAA,IAAI,SAAS,EAAA,EAAI;AACf,MAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,KAAK,MAAA,EAAQ,QAAA,CAAS,MAAA,EAAQ,MAAA,EAAQ,oBAAA,EAAqB;AAAA,IAC9F;AACA,IAAA,MAAM,MAAA,GACJ,QAAA,CAAS,MAAA,KAAW,GAAA,IAAO,QAAA,CAAS,WAAW,GAAA,GAC3C,6CAAA,GACA,CAAA,uBAAA,EAA0B,QAAA,CAAS,MAAM,CAAA,CAAA;AAC/C,IAAA,OAAO,EAAE,IAAI,KAAA,EAAO,MAAA,EAAQ,MAAM,GAAA,EAAK,MAAA,EAAQ,QAAA,CAAS,MAAA,EAAQ,MAAA,EAAO;AAAA,EACzE,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,UAAU,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAC/D,IAAA,MAAM,MAAA,GACJ,GAAA,YAAe,KAAA,IAAS,GAAA,CAAI,IAAA,KAAS,eACjC,CAAA,wBAAA,EAA2B,OAAA,CAAQ,SAAA,IAAa,GAAI,CAAA,EAAA,CAAA,GACpD,OAAA;AACN,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,IAAA,EAAM,KAAK,MAAA,EAAO;AAAA,EAChD,CAAA,SAAE;AACA,IAAA,YAAA,CAAa,OAAO,CAAA;AAAA,EACtB;AACF;;;AC9hBO,IAAM,8BAAA,GAAiC;AAGvC,IAAM,8BAAA,GAAiC;AAUvC,SAAS,0BAA0B,UAAA,EAA4B;AACpE,EAAA,MAAM,OAAO,UAAA,CAAW,OAAA,CAAQ,eAAA,EAAiB,GAAG,EAAE,WAAA,EAAY;AAClE,EAAA,OAAO,CAAA,EAAG,8BAA8B,CAAA,EAAG,IAAI,GAAG,8BAA8B,CAAA,CAAA;AAClF;AAWO,SAAS,8BAA8B,KAAA,EAA4C;AACxF,EAAA,MAAM,SAAS,KAAA,CAAM,MAAA,GAAS,mBAAA,CAAoB,KAAA,CAAM,MAAM,CAAA,GAAI,MAAA;AAClE,EAAA,IAAI,MAAA,EAAQ,UAAA,CAAW,GAAA,EAAK,OAAO,OAAO,UAAA,CAAW,GAAA;AACrD,EAAA,MAAM,GAAA,GAAM,MAAM,UAAA,EAAY,GAAA,GAAM,mBAAmB,KAAA,CAAM,UAAA,CAAW,GAAG,CAAA,GAAI,MAAA;AAC/E,EAAA,OAAO,GAAA,EAAK,IAAA,KAAS,KAAA,GAAQ,GAAA,CAAI,IAAA,GAAO,MAAA;AAC1C;AAOO,SAAS,sBAAA,CACd,KAAA,EACA,OAAA,GAAqC,EAAC,EAClB;AACpB,EAAA,OAAO,kBAAkB,KAAA,EAAO;AAAA,IAC9B,GAAI,QAAQ,GAAA,GAAM,EAAE,KAAK,OAAA,CAAQ,GAAA,KAAQ,EAAC;AAAA,IAC1C,GAAI,QAAQ,OAAA,GAAU,EAAE,SAAS,OAAA,CAAQ,OAAA,KAAY,EAAC;AAAA,IACtD,GAAI,QAAQ,YAAA,KAAiB,MAAA,GAAY,EAAC,GAAI,EAAE,YAAA,EAAc,OAAA,CAAQ,YAAA;AAAa,GACpF,CAAA,CAAE,KAAA;AACL;AAYO,SAAS,oBAAA,CACd,UAAA,EACA,KAAA,EACA,OAAA,GAAqC,EAAC,EAClB;AACpB,EAAA,OACE,sBAAA,CAAuB,OAAO,OAAO,CAAA,IAAK,QAAQ,GAAA,GAAM,yBAAA,CAA0B,UAAU,CAAC,CAAA;AAEjG;AAiBO,SAAS,6BAAA,CACd,QAAA,EACA,OAAA,GAAqC,EAAC,EACN;AAChC,EAAA,MAAM,MAAsC,EAAC;AAC7C,EAAA,KAAA,MAAW,CAAC,EAAA,EAAI,KAAK,CAAA,IAAK,eAAA,CAAgB,QAAQ,CAAA,EAAG;AACnD,IAAA,IAAI,KAAA,CAAM,IAAA,KAAS,KAAA,IAAS,KAAA,CAAM,SAAS,OAAA,EAAS;AACpD,IAAA,IAAI,CAAC,cAAA,CAAe,KAAK,CAAA,EAAG;AAC5B,IAAA,IAAI,OAAA,CAAQ,UAAA,IAAc,EAAA,KAAO,OAAA,CAAQ,UAAA,EAAY;AACrD,IAAA,MAAM,QAAA,GAAW,kBAAkB,KAAA,EAAO;AAAA,MACxC,GAAI,QAAQ,GAAA,GAAM,EAAE,KAAK,OAAA,CAAQ,GAAA,KAAQ,EAAC;AAAA,MAC1C,GAAI,QAAQ,OAAA,GAAU,EAAE,SAAS,OAAA,CAAQ,OAAA,KAAY,EAAC;AAAA,MACtD,GAAI,QAAQ,YAAA,KAAiB,MAAA,GAAY,EAAC,GAAI,EAAE,YAAA,EAAc,OAAA,CAAQ,YAAA;AAAa,KACpF,CAAA;AACD,IAAA,IAAI,CAAC,SAAS,KAAA,EAAO;AACrB,IAAA,IAAI,OAAA,CAAQ,GAAA,GAAM,yBAAA,CAA0B,EAAE,CAAC,CAAA,EAAG;AAClD,IAAA,GAAA,CAAI,KAAK,EAAE,UAAA,EAAY,IAAI,MAAA,EAAQ,QAAA,CAAS,OAAO,CAAA;AAAA,EACrD;AACA,EAAA,OAAO,GAAA;AACT;AAkBO,SAAS,kBAAA,CACd,UAAA,EACA,KAAA,EACA,OAAA,GAAwC,EAAC,EACjB;AACxB,EAAA,MAAM,KAAA,GAAQ,sBAAA,CAAuB,KAAA,EAAO,OAAO,CAAA;AACnD,EAAA,IAAI,CAAC,KAAA,EAAO,OAAO,EAAC;AACpB,EAAA,MAAM,MAA8B,EAAE,CAAC,0BAA0B,UAAU,CAAC,GAAG,KAAA,EAAM;AACrF,EAAA,IAAI,OAAA,CAAQ,YAAY,KAAA,EAAO;AAC7B,IAAA,MAAM,KAAA,GAAQ,8BAA8B,KAAK,CAAA;AACjD,IAAA,IAAI,KAAA,EAAO,GAAA,CAAI,KAAK,CAAA,GAAI,KAAA;AAAA,EAC1B;AACA,EAAA,OAAO,GAAA;AACT;AAWO,SAAS,qBAAA,CACd,QAAA,EACA,OAAA,GAAwC,EAAC,EACjB;AACxB,EAAA,MAAM,YAAoC,EAAC;AAC3C,EAAA,MAAM,UAAkC,EAAC;AACzC,EAAA,KAAA,MAAW,CAAC,EAAA,EAAI,KAAK,CAAA,IAAK,eAAA,CAAgB,QAAQ,CAAA,EAAG;AACnD,IAAA,IAAI,OAAA,CAAQ,UAAA,IAAc,EAAA,KAAO,OAAA,CAAQ,UAAA,EAAY;AACrD,IAAA,IAAI,CAAC,cAAA,CAAe,KAAK,CAAA,EAAG;AAC5B,IAAA,MAAM,KAAA,GAAQ,sBAAA,CAAuB,KAAA,EAAO,OAAO,CAAA;AACnD,IAAA,IAAI,CAAC,KAAA,EAAO;AACZ,IAAA,SAAA,CAAU,yBAAA,CAA0B,EAAE,CAAC,CAAA,GAAI,KAAA;AAC3C,IAAA,IAAI,OAAA,CAAQ,YAAY,KAAA,EAAO;AAC/B,IAAA,MAAM,KAAA,GAAQ,8BAA8B,KAAK,CAAA;AACjD,IAAA,IAAI,SAAS,OAAA,CAAQ,KAAK,MAAM,MAAA,EAAW,OAAA,CAAQ,KAAK,CAAA,GAAI,KAAA;AAAA,EAC9D;AACA,EAAA,OAAO,EAAE,GAAG,OAAA,EAAS,GAAG,SAAA,EAAU;AACpC;;;AChMA,IAAM,kBAAA,GACJ,OAAO,sBAAA,KAA2B,WAAA,GAAc,IAAA,GAAO,sBAAA;AACzD,IAAM,aAAA,GAAgB,OAAO,iBAAA,KAAsB,WAAA,GAAc,IAAA,GAAO,iBAAA;AAMxE,IAAM,YAAA,GAAe;AAAA,EACnB,oBAAA;AAAA,EACA,oBAAA;AAAA,EACA,kBAAA;AAAA,EACA,wBAAA;AAAA,EACA,wBAAA;AAAA,EACA,yBAAA;AAAA,EACA,sBAAA;AAAA,EACA;AACF,CAAA;AAmBO,IAAM,uBAAA,GAAuD;AAAA,EAClE,GAAA,EAAK;AAAA,IACH,EAAA,EAAI,KAAA;AAAA,IACJ,IAAA,EAAM,gBAAA;AAAA,IACN,aAAA,EAAe,IAAA;AAAA,IACf,mBAAA,EAAqB,IAAA;AAAA,IACrB,QAAA,EAAU,YAAA;AAAA;AAAA;AAAA,IAGV,iBAAA,EAAmB,UAAA;AAAA,IACnB,cAAc,4BAAA,CAA6B;AAAA,GAC7C;AAAA,EACA,YAAA,EAAc;AAAA,IACZ,EAAA,EAAI,YAAA;AAAA,IACJ,IAAA,EAAM,kBAAA;AAAA,IACN,aAAA,EAAe,KAAA;AAAA,IACf,mBAAA,EAAqB,IAAA;AAAA;AAAA;AAAA,IAGrB,QAAA,EAAU,CAAC,oBAAA,EAAsB,yBAAA,EAA2B,eAAe,CAAA;AAAA,IAC3E,iBAAA,EAAmB,QAAA;AAAA,IACnB,YAAA,EAAc,6BAA6B,YAAY;AAAA,GACzD;AAAA,EACA,KAAA,EAAO;AAAA,IACL,EAAA,EAAI,OAAA;AAAA,IACJ,IAAA,EAAM,cAAA;AAAA,IACN,aAAA,EAAe,KAAA;AAAA,IACf,mBAAA,EAAqB,IAAA;AAAA;AAAA;AAAA,IAGrB,QAAA,EAAU,CAAC,wBAAA,EAA0B,kBAAA,EAAoB,oBAAoB,CAAA;AAAA,IAC7E,iBAAA,EAAmB,QAAA;AAAA,IACnB,cAAc,4BAAA,CAA6B;AAAA,GAC7C;AAAA,EACA,IAAA,EAAM;AAAA,IACJ,EAAA,EAAI,MAAA;AAAA,IACJ,IAAA,EAAM,iBAAA;AAAA,IACN,aAAA,EAAe,IAAA;AAAA,IACf,mBAAA,EAAqB,KAAA;AAAA;AAAA;AAAA,IAGrB,UAAU,EAAC;AAAA,IACX,iBAAA,EAAmB;AAAA,GACrB;AAAA,EACA,MAAA,EAAQ;AAAA,IACN,EAAA,EAAI,QAAA;AAAA,IACJ,IAAA,EAAM,YAAA;AAAA,IACN,aAAA,EAAe,KAAA;AAAA,IACf,mBAAA,EAAqB,KAAA;AAAA,IACrB,QAAA,EAAU,CAAC,sBAAsB,CAAA;AAAA,IACjC,iBAAA,EAAmB;AAAA,GACrB;AAAA,EACA,IAAA,EAAM;AAAA,IACJ,EAAA,EAAI,MAAA;AAAA,IACJ,IAAA,EAAM,WAAA;AAAA,IACN,aAAA,EAAe,IAAA;AAAA,IACf,mBAAA,EAAqB,KAAA;AAAA;AAAA,IAErB,QAAA,EAAU,CAAC,oBAAoB,CAAA;AAAA,IAC/B,iBAAA,EAAmB;AAAA,GACrB;AAAA,EACA,QAAA,EAAU;AAAA,IACR,EAAA,EAAI,UAAA;AAAA,IACJ,IAAA,EAAM,UAAA;AAAA,IACN,aAAA,EAAe,IAAA;AAAA,IACf,mBAAA,EAAqB,KAAA;AAAA,IACrB,QAAA,EAAU;AAAA,MACR,oBAAA;AAAA,MACA,oBAAA;AAAA,MACA,kBAAA;AAAA,MACA;AAAA,KACF;AAAA,IACA,iBAAA,EAAmB;AAAA,GACrB;AAAA,EACA,KAAA,EAAO;AAAA,IACL,EAAA,EAAI,OAAA;AAAA,IACJ,IAAA,EAAM,OAAA;AAAA,IACN,aAAA,EAAe,IAAA;AAAA,IACf,mBAAA,EAAqB,KAAA;AAAA,IACrB,QAAA,EAAU;AAAA,MACR,oBAAA;AAAA,MACA,oBAAA;AAAA,MACA,sBAAA;AAAA,MACA;AAAA,KACF;AAAA,IACA,iBAAA,EAAmB;AAAA,GACrB;AAAA,EACA,QAAA,EAAU;AAAA,IACR,EAAA,EAAI,UAAA;AAAA,IACJ,IAAA,EAAM,cAAA;AAAA,IACN,aAAA,EAAe,IAAA;AAAA,IACf,mBAAA,EAAqB,KAAA;AAAA,IACrB,QAAA,EAAU,CAAC,oBAAA,EAAsB,oBAAA,EAAsB,sBAAsB,CAAA;AAAA,IAC7E,iBAAA,EAAmB;AAAA;AAEvB;AAEA,IAAI,oBAAA,GAAuB,KAAA;AAsB3B,eAAsB,wBAAA,CACpB,WAA2B,cAAA,EACZ;AACf,EAAA,IAAI,QAAA,KAAa,kBAAkB,oBAAA,EAAsB;AAEzD,EAAA,IAAI,CAAC,QAAA,CAAS,GAAA,CAAI,SAAA,EAAW,KAAK,CAAA,EAAG;AACnC,IAAA,MAAM,CAAA,GAAI,MAAM,OAAO,2BAAkC,CAAA;AACzD,IAAA,QAAA,CAAS,QAAA,CAAS,SAAA,EAAW,CAAA,CAAE,gBAAgB,CAAA;AAAA,EACjD;AACA,EAAA,IAAI,CAAC,QAAA,CAAS,GAAA,CAAI,SAAA,EAAW,MAAM,CAAA,EAAG;AACpC,IAAA,MAAM,CAAA,GAAI,MAAM,OAAO,4BAAmC,CAAA;AAC1D,IAAA,QAAA,CAAS,QAAA,CAAS,SAAA,EAAW,CAAA,CAAE,iBAAiB,CAAA;AAAA,EAClD;AACA,EAAA,IAAI,sBAAsB,CAAC,QAAA,CAAS,GAAA,CAAI,SAAA,EAAW,YAAY,CAAA,EAAG;AAChE,IAAA,MAAM,CAAA,GAAI,MAAM,OAAO,kCAAyC,CAAA;AAChE,IAAA,QAAA,CAAS,QAAA,CAAS,SAAA,EAAW,CAAA,CAAE,sBAAsB,CAAA;AAAA,EACvD;AACA,EAAA,IAAI,iBAAiB,CAAC,QAAA,CAAS,GAAA,CAAI,SAAA,EAAW,OAAO,CAAA,EAAG;AACtD,IAAA,MAAM,CAAA,GAAI,MAAM,OAAO,6BAAoC,CAAA;AAC3D,IAAA,QAAA,CAAS,QAAA,CAAS,SAAA,EAAW,CAAA,CAAE,kBAAkB,CAAA;AAAA,EACnD;AAIA,EAAA,IAAI,CAAC,QAAA,CAAS,GAAA,CAAI,SAAA,EAAW,QAAQ,CAAA,EAAG;AACtC,IAAA,MAAM,CAAA,GAAI,MAAM,OAAO,8BAAqC,CAAA;AAC5D,IAAA,QAAA,CAAS,QAAA,CAAS,SAAA,EAAW,CAAA,CAAE,mBAAmB,CAAA;AAAA,EACpD;AACA,EAAA,IAAI,CAAC,QAAA,CAAS,GAAA,CAAI,SAAA,EAAW,MAAM,CAAA,EAAG;AACpC,IAAA,MAAM,CAAA,GAAI,MAAM,OAAO,4BAAmC,CAAA;AAC1D,IAAA,QAAA,CAAS,QAAA,CAAS,SAAA,EAAW,CAAA,CAAE,iBAAiB,CAAA;AAAA,EAClD;AACA,EAAA,IAAI,CAAC,QAAA,CAAS,GAAA,CAAI,SAAA,EAAW,UAAU,CAAA,EAAG;AACxC,IAAA,MAAM,CAAA,GAAI,MAAM,OAAO,gCAAuC,CAAA;AAC9D,IAAA,QAAA,CAAS,QAAA,CAAS,SAAA,EAAW,CAAA,CAAE,qBAAqB,CAAA;AAAA,EACtD;AACA,EAAA,IAAI,CAAC,QAAA,CAAS,GAAA,CAAI,SAAA,EAAW,OAAO,CAAA,EAAG;AACrC,IAAA,MAAM,CAAA,GAAI,MAAM,OAAO,6BAAoC,CAAA;AAC3D,IAAA,QAAA,CAAS,QAAA,CAAS,SAAA,EAAW,CAAA,CAAE,kBAAkB,CAAA;AAAA,EACnD;AACA,EAAA,IAAI,CAAC,QAAA,CAAS,GAAA,CAAI,SAAA,EAAW,UAAU,CAAA,EAAG;AACxC,IAAA,MAAM,CAAA,GAAI,MAAM,OAAO,gCAAuC,CAAA;AAC9D,IAAA,QAAA,CAAS,QAAA,CAAS,SAAA,EAAW,CAAA,CAAE,qBAAqB,CAAA;AAAA,EACtD;AAEA,EAAA,IAAI,QAAA,KAAa,gBAAgB,oBAAA,GAAuB,IAAA;AAC1D;AAkBA,eAAsB,aAAA,CACpB,EAAA,EACA,MAAA,EACA,GAAA,EACuB;AACvB,EAAA,MAAM,MAAA,GAAS,MAAM,oBAAA,CAAqB,EAAE,CAAA;AAC5C,EAAA,OAAO,MAAA,CAAO,MAAA,CAAO,MAAA,EAAQ,GAAA,IAAO,EAAE,CAAA;AACxC;AAWA,eAAe,qBAAqB,EAAA,EAAY;AAC9C,EAAA,MAAM,wBAAA,EAAyB;AAC/B,EAAA,MAAM,MAAA,GAAS,cAAA,CAAe,GAAA,CAAI,SAAA,EAAW,EAAE,CAAA;AAC/C,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,IAAI,MAAM,uBAAA,EAAyB;AACjC,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,eAAA,EAAkB,EAAE,CAAA,+BAAA,CAAiC,CAAA;AAAA,IACvE;AACA,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,wBAAA,EAA2B,EAAE,CAAA,cAAA,EAAiB,aAAA,EAAc,CACzD,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,EAAE,CAAA,CACf,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,KACf;AAAA,EACF;AACA,EAAA,OAAO,MAAA;AACT;AAaO,SAAS,aAAA,GAA+B;AAC7C,EAAA,MAAM,MAAA,uBAAa,GAAA,EAAyB;AAC5C,EAAA,KAAA,MAAW,IAAA,IAAQ,MAAA,CAAO,MAAA,CAAO,uBAAuB,CAAA,EAAG;AACzD,IAAA,MAAA,CAAO,GAAA,CAAI,IAAA,CAAK,EAAA,EAAI,IAAI,CAAA;AAAA,EAC1B;AACA,EAAA,KAAA,MAAW,IAAA,IAAQ,cAAA,CAAe,IAAA,CAAK,SAAS,CAAA,EAAG;AACjD,IAAA,IAAI,CAAC,MAAA,CAAO,GAAA,CAAI,IAAA,CAAK,EAAE,CAAA,EAAG;AAIxB,MAAA,MAAM,MAAA,GAAS,cAAA,CAAe,GAAA,CAAI,SAAA,EAAW,KAAK,EAAE,CAAA;AACpD,MAAA,MAAA,CAAO,GAAA,CAAI,KAAK,EAAA,EAAI;AAAA,QAClB,IAAI,IAAA,CAAK,EAAA;AAAA,QACT,MAAM,IAAA,CAAK,WAAA;AAAA,QACX,aAAA,EAAe,QAAQ,aAAA,IAAiB,KAAA;AAAA,QACxC,mBAAA,EAAqB,QAAQ,mBAAA,IAAuB,KAAA;AAAA;AAAA;AAAA;AAAA,QAIpD,GAAI,QAAQ,QAAA,GAAW,EAAE,UAAU,MAAA,CAAO,QAAA,KAAa,EAAC;AAAA,QACxD,GAAI,QAAQ,iBAAA,GAAoB,EAAE,mBAAmB,MAAA,CAAO,iBAAA,KAAsB,EAAC;AAAA,QACnF,GAAI,QAAQ,YAAA,GAAe,EAAE,cAAc,MAAA,CAAO,YAAA,KAAiB;AAAC,OACrE,CAAA;AAAA,IACH;AAAA,EACF;AACA,EAAA,OAAO,CAAC,GAAG,MAAA,CAAO,MAAA,EAAQ,CAAA;AAC5B;AAqBA,eAAsB,oBAAA,CACpB,SAAA,EACA,QAAA,EACA,OAAA,EACuB;AACvB,EAAA,MAAM,MAAA,GAAS,MAAM,oBAAA,CAAqB,SAAS,CAAA;AACnD,EAAA,OAAQ,MAAM,MAAA,CAAO,UAAA,GAAa,QAAA,EAAU,OAAO,KAAM,EAAC;AAC5D","file":"chunk-X37JUNEW.js","sourcesContent":["/**\n * What the runner may ask of a harness, by harness id.\n *\n * Deliberately light: this module imports no harness, no SDK and no `zod`, so a\n * runner file that only needs a capability can import it without loading the\n * harness graph. The plugin-registry singleton is read through its `internal`\n * module (the same file `@skaile/workspaces/plugin-registry` re-exports, so one\n * instance under the bundler's shared chunks), not through the package index,\n * which pulls in the deploy helpers and their `zod` schemas.\n *\n * @docLink packages/bridge/api-reference#registry\n */\n\nimport { pluginRegistry } from \"../../plugin-registry/src/internal.js\";\nimport type { HarnessCapabilities } from \"@skaile/workspaces/types\";\n\n/**\n * Capabilities of a harness that declares none: it recomposes its tools per\n * turn like every bridge harness that is not an in-process SDK, and has no\n * managed session, credentials file or transcript-file resume.\n */\nconst GENERIC_HARNESS_CAPABILITIES: HarnessCapabilities = {\n  inProcessMcpServers: false,\n  liveToolUpdates: true,\n  managedSession: false,\n  claudeCodeCredentials: false,\n  resumeNeedsTranscript: false,\n};\n\n/**\n * Declared capabilities of the built-in harnesses that differ from nothing.\n * `BUILTIN_HARNESS_CATALOG` rows point at these entries, so `listHarnesses()` and\n * {@link harnessCapabilities} read one table. A built-in absent here (echo,\n * gemini, qwen, opencode, goose, continue) takes the generic defaults.\n */\nexport const BUILTIN_HARNESS_CAPABILITIES = {\n  // Recomposes its tools per turn, so a hot-plugged MCP server is live.\n  omp: {\n    inProcessMcpServers: false,\n    liveToolUpdates: true,\n    managedSession: false,\n    claudeCodeCredentials: false,\n    resumeNeedsTranscript: false,\n  },\n  // The SDK takes in-process server instances and bakes its tool set at\n  // creation; it reads Claude's `~/.claude` credentials and JSONL transcripts.\n  \"claude-sdk\": {\n    inProcessMcpServers: true,\n    liveToolUpdates: false,\n    managedSession: false,\n    claudeCodeCredentials: true,\n    resumeNeedsTranscript: true,\n  },\n  // Standalone SDK recomposes its tools per turn. A host-managed session\n  // (native app-server) refreshes its own native tool snapshot instead.\n  codex: {\n    inProcessMcpServers: false,\n    liveToolUpdates: true,\n    managedSession: true,\n    claudeCodeCredentials: false,\n    resumeNeedsTranscript: false,\n  },\n} as const satisfies Record<string, HarnessCapabilities>;\n\n/**\n * Resolve what the runner may ask of a harness, by harness id, without loading\n * its module. Built-ins read {@link BUILTIN_HARNESS_CAPABILITIES}; a third-party\n * harness reads its registered `HarnessTarget`; an unknown or absent id gets the\n * generic defaults. Fields a harness omits take the generic default too.\n *\n * This is the one place the runner learns harness facts — it never compares an\n * id against `\"claude-sdk\"`, `\"codex\"` or `\"omp\"`.\n *\n * @param id - Harness id (e.g. a session's `harnessType`); `undefined` resolves to the defaults.\n * @docLink packages/bridge/api-reference#registry\n */\nexport function harnessCapabilities(id: string | undefined): HarnessCapabilities {\n  const declared = id\n    ? Object.hasOwn(BUILTIN_HARNESS_CAPABILITIES, id)\n      ? BUILTIN_HARNESS_CAPABILITIES[id as keyof typeof BUILTIN_HARNESS_CAPABILITIES]\n      : pluginRegistry.get(\"harness\", id)?.capabilities\n    : undefined;\n  return { ...GENERIC_HARNESS_CAPABILITIES, ...declared };\n}\n\n/**\n * Whether a hot-plugged MCP server reaches the agent's next turn without a\n * harness restart. A host-managed session refreshes its native tool snapshot\n * itself, so it never takes live updates, whatever the standalone harness does.\n *\n * @param id - Harness id of the live session.\n * @param managed - Whether the session is host-managed (`managedCodex`).\n * @docLink packages/bridge/api-reference#registry\n */\nexport function supportsLiveToolUpdates(id: string | undefined, managed = false): boolean {\n  const caps = harnessCapabilities(id);\n  return caps.liveToolUpdates && !(managed && caps.managedSession);\n}\n","/**\n * The AI provider catalog — the preset layer of the provider registry (§1.5,\n * layer 5).\n *\n * A preset is the three-or-four literals an endpoint needs beyond a credential:\n * its wire `surface`, its `base_url` (or the transport that derives one), the\n * header the credential rides in, and the path a read-only probe can GET. With\n * them, `skaile providers add --preset groq` needs nothing but an env var name.\n *\n * This replaced `provider-endpoints.ts` `PROVIDER_ENDPOINTS`: every endpoint\n * that table knew is present here, with the surface/transport/credential facts\n * it could not express.\n *\n * The record types come from `@skaile/workspaces/core/provider-registry` — the\n * schema has exactly one home.\n *\n * @see PROVIDER-CONFIG-PLAN.md §1.2, §1.3, §2.5\n */\n\nimport {\n  AI_PROVIDER_BASE_URL_TEMPLATES,\n  type AIProviderCredentialKind,\n  type AIProviderDiscovery,\n  type AIProviderEntry,\n  type AIProviderKind,\n  type AIProviderLlmEntry,\n  type AIProviderRegistry,\n  type AIProviderRegistryLayer,\n  type AIProviderRegistryPatch,\n  type AIProviderSurface,\n  type AIProviderTransport,\n  type AIProviderVoiceParams,\n  resolveEntryBaseUrl,\n} from \"@skaile/workspaces/core/provider-registry\";\n\n/**\n * Where the credential goes on the wire. `{credential}` is replaced with the\n * resolved secret. Needed because `credential.kind` alone is ambiguous:\n * `api_key_header` is `x-api-key` for Anthropic, `x-goog-api-key` for Gemini,\n * `api-key` for Azure OpenAI and `Authorization: Token …` for Deepgram.\n */\nexport interface AIProviderAuthHeader {\n  name: string;\n  template: string;\n}\n\n/** A catalog preset — the fields an entry inherits by naming it. */\nexport interface AIProviderPreset {\n  /** Preset id; also the default entry id `skaile providers add` writes. */\n  id: string;\n  kind: AIProviderKind;\n  label: string;\n  /** `llm`/`embed` only. */\n  surface?: AIProviderSurface;\n  /** `llm`/`embed` only; omitted means `direct`. */\n  transport?: AIProviderTransport;\n  /** Literal endpoint. Absent when the transport derives one from `params`. */\n  base_url?: string;\n  /**\n   * Env var the vendor's own SDK reads as a base-URL override, when one\n   * exists. Consulted by the callers that still address an endpoint by preset\n   * id — model discovery, key validation, and `skaile migrate providers` — so\n   * a shell already pointed at a gateway keeps pointing there.\n   */\n  base_url_env?: string;\n  /** Static non-secret headers, e.g. Anthropic's `anthropic-version`. */\n  headers?: Record<string, string>;\n  /** Credential shape plus the conventional env var holding the secret. */\n  credential: { kind: AIProviderCredentialKind; env?: string };\n  /** Header the credential rides in; defaults per surface when omitted. */\n  auth_header?: AIProviderAuthHeader;\n  /** Default routing/voice parameters. */\n  params?: Record<string, string>;\n  /** `params` keys the operator must supply — the preset cannot know them. */\n  required_params?: string[];\n  /**\n   * Read-only path a health probe GETs, relative to `base_url`: the models\n   * list for LLM surfaces, an equivalent authenticated read for voice.\n   * Absent when the endpoint has none (Bedrock's runtime host).\n   */\n  probe_path?: string;\n  discovery?: AIProviderDiscovery;\n  /** Anything the operator has to know that the fields do not say. */\n  notes?: string;\n}\n\nconst ANTHROPIC_VERSION_HEADER: Record<string, string> = { \"anthropic-version\": \"2023-06-01\" };\n\nconst X_API_KEY: AIProviderAuthHeader = { name: \"x-api-key\", template: \"{credential}\" };\n\nconst OPENAI_MODELS_PATH = \"/v1/models\";\n\n/**\n * Every preset the runtime ships.\n *\n * Insertion order is display order in `skaile providers list`: first-party\n * clouds, then OpenAI-compatible vendors, then the transports that need\n * routing parameters, then local runtimes and gateways, then voice.\n *\n * Sources: `platform/_devlog/reports/2026-09-20-inference-provider-market-survey.md`\n * (36 endpoints, base URLs and auth headers verified there).\n */\nexport const AI_PROVIDER_PRESETS: Record<string, AIProviderPreset> = {\n  anthropic: {\n    id: \"anthropic\",\n    kind: \"llm\",\n    label: \"Anthropic\",\n    surface: \"anthropic-messages\",\n    base_url: \"https://api.anthropic.com\",\n    base_url_env: \"ANTHROPIC_BASE_URL\",\n    headers: ANTHROPIC_VERSION_HEADER,\n    credential: { kind: \"api_key_header\", env: \"ANTHROPIC_API_KEY\" },\n    auth_header: X_API_KEY,\n    probe_path: \"/v1/models\",\n    discovery: { type: \"anthropic-models-list\" },\n  },\n  openai: {\n    id: \"openai\",\n    kind: \"llm\",\n    label: \"OpenAI\",\n    surface: \"openai-responses\",\n    base_url: \"https://api.openai.com/v1\",\n    base_url_env: \"OPENAI_BASE_URL\",\n    credential: { kind: \"bearer\", env: \"OPENAI_API_KEY\" },\n    probe_path: OPENAI_MODELS_PATH,\n    discovery: { type: \"openai-models-list\" },\n    notes:\n      \"Responses is OpenAI's current API; set surface openai-completions for chat-only clients.\",\n  },\n  google: {\n    id: \"google\",\n    kind: \"llm\",\n    label: \"Google Gemini API\",\n    surface: \"google-generative-ai\",\n    base_url: \"https://generativelanguage.googleapis.com/v1beta\",\n    credential: { kind: \"api_key_header\", env: \"GEMINI_API_KEY\" },\n    auth_header: { name: \"x-goog-api-key\", template: \"{credential}\" },\n    probe_path: \"/v1beta/models\",\n    discovery: { type: \"google-models-list\" },\n  },\n  groq: {\n    id: \"groq\",\n    kind: \"llm\",\n    label: \"Groq\",\n    surface: \"openai-completions\",\n    base_url: \"https://api.groq.com/openai/v1\",\n    credential: { kind: \"bearer\", env: \"GROQ_API_KEY\" },\n    probe_path: OPENAI_MODELS_PATH,\n    discovery: { type: \"openai-models-list\" },\n  },\n  deepseek: {\n    id: \"deepseek\",\n    kind: \"llm\",\n    label: \"DeepSeek\",\n    surface: \"openai-completions\",\n    base_url: \"https://api.deepseek.com\",\n    credential: { kind: \"bearer\", env: \"DEEPSEEK_API_KEY\" },\n    probe_path: \"/models\",\n    discovery: { type: \"openai-models-list\" },\n    notes:\n      \"Anthropic-shaped clients use https://api.deepseek.com/anthropic with surface anthropic-messages.\",\n  },\n  openrouter: {\n    id: \"openrouter\",\n    kind: \"llm\",\n    label: \"OpenRouter\",\n    surface: \"openai-completions\",\n    base_url: \"https://openrouter.ai/api/v1\",\n    credential: { kind: \"bearer\", env: \"OPENROUTER_API_KEY\" },\n    probe_path: OPENAI_MODELS_PATH,\n    discovery: { type: \"openai-models-list\" },\n  },\n  mistral: {\n    id: \"mistral\",\n    kind: \"llm\",\n    label: \"Mistral\",\n    surface: \"openai-completions\",\n    base_url: \"https://api.mistral.ai/v1\",\n    credential: { kind: \"bearer\", env: \"MISTRAL_API_KEY\" },\n    probe_path: OPENAI_MODELS_PATH,\n    discovery: { type: \"openai-models-list\" },\n  },\n  xai: {\n    id: \"xai\",\n    kind: \"llm\",\n    label: \"xAI (Grok)\",\n    surface: \"openai-completions\",\n    base_url: \"https://api.x.ai/v1\",\n    credential: { kind: \"bearer\", env: \"XAI_API_KEY\" },\n    probe_path: OPENAI_MODELS_PATH,\n    discovery: { type: \"openai-models-list\" },\n  },\n  together: {\n    id: \"together\",\n    kind: \"llm\",\n    label: \"Together AI\",\n    surface: \"openai-completions\",\n    base_url: \"https://api.together.ai/v1\",\n    credential: { kind: \"bearer\", env: \"TOGETHER_API_KEY\" },\n    probe_path: OPENAI_MODELS_PATH,\n    discovery: { type: \"openai-models-list\" },\n  },\n  fireworks: {\n    id: \"fireworks\",\n    kind: \"llm\",\n    label: \"Fireworks AI\",\n    surface: \"openai-completions\",\n    base_url: \"https://api.fireworks.ai/inference/v1\",\n    credential: { kind: \"bearer\", env: \"FIREWORKS_API_KEY\" },\n    probe_path: OPENAI_MODELS_PATH,\n    discovery: { type: \"openai-models-list\" },\n  },\n  bedrock: {\n    id: \"bedrock\",\n    kind: \"llm\",\n    label: \"AWS Bedrock\",\n    surface: \"bedrock-converse-stream\",\n    transport: \"bedrock\",\n    credential: { kind: \"sigv4\" },\n    required_params: [\"region\"],\n    notes: \"Credentials come from the AWS default chain; the runtime host serves no models list.\",\n  },\n  vertex: {\n    id: \"vertex\",\n    kind: \"llm\",\n    label: \"Google Vertex AI\",\n    surface: \"google-vertex\",\n    transport: \"vertex\",\n    credential: { kind: \"google_adc\" },\n    params: { publisher: \"google\" },\n    required_params: [\"project\", \"location\"],\n    probe_path: \"/models\",\n  },\n  \"azure-openai\": {\n    id: \"azure-openai\",\n    kind: \"llm\",\n    label: \"Azure OpenAI\",\n    surface: \"azure-openai-responses\",\n    transport: \"azure-openai\",\n    credential: { kind: \"api_key_header\", env: \"AZURE_OPENAI_API_KEY\" },\n    auth_header: { name: \"api-key\", template: \"{credential}\" },\n    required_params: [\"resource\", \"deployment\", \"api_version\"],\n    probe_path: \"/models\",\n    notes:\n      \"api_version is mirrored into query_params['api-version']; switch credential.kind to azure_entra for Entra tokens.\",\n  },\n  foundry: {\n    id: \"foundry\",\n    kind: \"llm\",\n    label: \"Claude on Microsoft Foundry\",\n    surface: \"anthropic-messages\",\n    transport: \"foundry\",\n    headers: ANTHROPIC_VERSION_HEADER,\n    credential: { kind: \"api_key_header\", env: \"ANTHROPIC_FOUNDRY_API_KEY\" },\n    auth_header: X_API_KEY,\n    required_params: [\"resource\"],\n    probe_path: \"/v1/models\",\n  },\n  ollama: {\n    id: \"ollama\",\n    kind: \"llm\",\n    label: \"Ollama (local)\",\n    surface: \"openai-completions\",\n    base_url: \"http://localhost:11434/v1\",\n    credential: { kind: \"none\" },\n    probe_path: OPENAI_MODELS_PATH,\n    discovery: { type: \"openai-models-list\" },\n  },\n  lmstudio: {\n    id: \"lmstudio\",\n    kind: \"llm\",\n    label: \"LM Studio (local)\",\n    surface: \"openai-completions\",\n    base_url: \"http://localhost:1234/v1\",\n    credential: { kind: \"none\" },\n    probe_path: OPENAI_MODELS_PATH,\n    discovery: { type: \"openai-models-list\" },\n  },\n  vllm: {\n    id: \"vllm\",\n    kind: \"llm\",\n    label: \"vLLM (self-hosted)\",\n    surface: \"openai-completions\",\n    base_url: \"http://localhost:8000/v1\",\n    credential: { kind: \"none\" },\n    probe_path: OPENAI_MODELS_PATH,\n    discovery: { type: \"openai-models-list\" },\n    notes: \"A server started with --api-key expects credential.kind bearer and an env: ref.\",\n  },\n  litellm: {\n    id: \"litellm\",\n    kind: \"llm\",\n    label: \"LiteLLM proxy\",\n    surface: \"openai-completions\",\n    base_url: \"http://localhost:4000\",\n    credential: { kind: \"bearer\", env: \"LITELLM_API_KEY\" },\n    probe_path: OPENAI_MODELS_PATH,\n    discovery: { type: \"openai-models-list\" },\n    notes: \"The credential is the proxy's virtual key; upstream keys stay in the proxy config.\",\n  },\n  deepgram: {\n    id: \"deepgram\",\n    kind: \"stt\",\n    label: \"Deepgram\",\n    base_url: \"https://api.deepgram.com\",\n    credential: { kind: \"api_key_header\", env: \"DEEPGRAM_API_KEY\" },\n    auth_header: { name: \"Authorization\", template: \"Token {credential}\" },\n    params: { model: \"nova-3\", language: \"en\" },\n    probe_path: \"/v1/projects\",\n  },\n  elevenlabs: {\n    id: \"elevenlabs\",\n    kind: \"tts\",\n    label: \"ElevenLabs\",\n    base_url: \"https://api.elevenlabs.io\",\n    credential: { kind: \"api_key_header\", env: \"ELEVENLABS_API_KEY\" },\n    auth_header: { name: \"xi-api-key\", template: \"{credential}\" },\n    params: { voice_id: \"21m00Tcm4TlvDq8ikWAM\", output_format: \"mp3_44100_128\" },\n    probe_path: \"/v1/models\",\n  },\n};\n\n/** Presets in catalog order. */\nexport function listProviderPresets(): AIProviderPreset[] {\n  return Object.values(AI_PROVIDER_PRESETS);\n}\n\n/** Look up a preset by id. */\nexport function getProviderPreset(id: string): AIProviderPreset | undefined {\n  return AI_PROVIDER_PRESETS[id];\n}\n\n/**\n * The endpoint `skaile providers list` shows for a preset: the literal when\n * there is one, otherwise the transport's `base_url` template (§1.3) with its\n * `{param}` placeholders left in — they are exactly what the operator must\n * supply.\n */\nexport function presetBaseUrl(preset: AIProviderPreset): string | undefined {\n  if (preset.base_url) return preset.base_url;\n  if (!preset.transport || preset.transport === \"direct\") return undefined;\n  return AI_PROVIDER_BASE_URL_TEMPLATES[preset.transport];\n}\n\n/**\n * The endpoint a request to this preset should actually go to: an explicit\n * override first, then the vendor's own `*_BASE_URL` variable\n * ({@link AIProviderPreset.base_url_env}), then the preset literal.\n *\n * Behind a gateway the credential in play is the *gateway's*, not the\n * vendor's, so discovery and key validation have to follow dispatch — firing\n * either at the vendor's public API 401s and yields an empty catalog, which a\n * caller that reads \"empty\" as \"unknown\" then degrades into \"accept anything\".\n *\n * Pure: reads only the `env` record it is handed.\n */\nexport function resolvePresetBaseUrl(\n  preset: AIProviderPreset,\n  options: { baseUrl?: string; env?: Record<string, string | undefined> } = {},\n): string | undefined {\n  const explicit = options.baseUrl?.trim();\n  if (explicit) return explicit;\n  const fromEnv = preset.base_url_env ? options.env?.[preset.base_url_env]?.trim() : undefined;\n  return fromEnv || preset.base_url;\n}\n\n/** Overrides {@link expandPreset} accepts from `skaile providers add`. */\nexport interface ExpandPresetOptions {\n  /** `env:NAME` / `cmd:…` / `platform:…` / `keyring:…`. Never a literal. */\n  credentialRef?: string;\n  baseUrl?: string;\n  surface?: AIProviderSurface;\n  label?: string;\n  /** Transport routing parameters, or voice parameters for `stt`/`tts`. */\n  params?: Record<string, string>;\n}\n\n/**\n * Materialize a preset into a registry entry.\n *\n * The credential is always a reference: the preset's conventional `env:` var\n * unless the caller names another ref. No code path here can write a secret.\n * For `transport: azure-openai` the `api_version` parameter is mirrored into\n * `query_params['api-version']`, which is where the wire expects it (§1.3).\n */\nexport function expandPreset(\n  preset: AIProviderPreset,\n  options: ExpandPresetOptions = {},\n): AIProviderEntry {\n  const ref =\n    options.credentialRef ?? (preset.credential.env ? `env:${preset.credential.env}` : undefined);\n  const credential = ref ? { kind: preset.credential.kind, ref } : { kind: preset.credential.kind };\n  const base_url = options.baseUrl ?? preset.base_url;\n  const params = { ...preset.params, ...options.params };\n\n  if (preset.kind === \"stt\" || preset.kind === \"tts\") {\n    return {\n      kind: preset.kind,\n      label: options.label ?? preset.label,\n      preset: preset.id,\n      ...(base_url ? { base_url } : {}),\n      ...(preset.headers ? { headers: { ...preset.headers } } : {}),\n      credential,\n      ...(Object.keys(params).length > 0 ? { params: params as AIProviderVoiceParams } : {}),\n    };\n  }\n\n  const transport = preset.transport ?? \"direct\";\n  const entry: AIProviderLlmEntry = {\n    kind: preset.kind === \"embed\" ? \"embed\" : \"llm\",\n    label: options.label ?? preset.label,\n    preset: preset.id,\n    ...((options.surface ?? preset.surface) ? { surface: options.surface ?? preset.surface } : {}),\n    ...(base_url ? { base_url } : {}),\n    ...(preset.headers ? { headers: { ...preset.headers } } : {}),\n    credential,\n    ...(preset.discovery ? { discovery: { ...preset.discovery } } : {}),\n  } as AIProviderLlmEntry;\n\n  if (transport !== \"direct\") {\n    Object.assign(entry, { transport, params });\n    if (transport === \"azure-openai\" && params.api_version) {\n      entry.query_params = { \"api-version\": params.api_version };\n    }\n  }\n  return entry;\n}\n\n/**\n * Build the catalog merge layer for a set of configured entries (§1.5).\n *\n * Only the presets actually referenced by a `preset:` key are expanded, keyed\n * by the *entry* id — so `groq: {kind: llm, preset: groq}` deep-merges onto a\n * full Groq definition while an unreferenced preset stays out of the registry.\n *\n * Takes the **pre-gate** merge (`LoadedProviderRegistry.patches`), not the\n * gated registry: an entry that leaves `kind` or its transport `params` to the\n * preset is exactly the one the gate drops before this layer exists, and a\n * dropped entry names no preset to expand.\n */\nexport function catalogLayer(providers: AIProviderRegistryPatch): AIProviderRegistryLayer {\n  const expanded: AIProviderRegistry = {};\n  for (const [id, entry] of Object.entries(providers)) {\n    if (!entry.preset) continue;\n    const preset = AI_PROVIDER_PRESETS[entry.preset];\n    if (!preset) continue;\n    expanded[id] = expandPreset(preset);\n  }\n  return { layer: \"catalog\", providers: expanded };\n}\n\n/**\n * Join a base URL and a path without duplicating a shared leading segment:\n * `(\"https://gw/v1\", \"/v1/models\")` → `https://gw/v1/models`. Both spellings\n * are common in the wild, and a preset's path must work against a gateway base\n * the operator typed either way.\n */\nfunction joinBaseAndPath(base: string, path: string): string {\n  const trimmed = base.replace(/\\/+$/, \"\");\n  const segments = path.split(\"/\").filter(Boolean);\n  const lead = segments[0];\n  if (lead && trimmed.toLowerCase().endsWith(`/${lead.toLowerCase()}`)) {\n    return `${trimmed}/${segments.slice(1).join(\"/\")}`;\n  }\n  return `${trimmed}${path}`;\n}\n\n/**\n * The read-only URL a health probe or model discovery can GET for an entry —\n * the models list on LLM surfaces, the equivalent authenticated read on voice\n * ones. `undefined` when the entry has no endpoint yet (missing transport\n * parameters) or the surface serves no such path (Bedrock runtime).\n *\n * This is the catalog method that supersedes `resolveProviderModelsUrl`.\n */\nexport function resolveProbeUrl(entry: AIProviderEntry): string | undefined {\n  const base = resolveEntryBaseUrl(entry);\n  if (!base) return undefined;\n  const preset = entry.preset ? AI_PROVIDER_PRESETS[entry.preset] : undefined;\n  const path = (entry as AIProviderLlmEntry).discovery?.path ?? preset?.probe_path;\n  if (!path) return undefined;\n  const url = joinBaseAndPath(base, path);\n  const query = (entry as AIProviderLlmEntry).query_params;\n  if (!query || Object.keys(query).length === 0) return url;\n  const search = new URLSearchParams(query).toString();\n  return `${url}${url.includes(\"?\") ? \"&\" : \"?\"}${search}`;\n}\n\n/**\n * The header(s) that present a credential on the wire for an entry.\n *\n * `credential.kind` alone does not determine the header — `api_key_header` is\n * `x-api-key` at Anthropic, `x-goog-api-key` at Google and `api-key` at Azure —\n * so the preset's `auth_header` wins, then a per-surface default.\n * Returns `{}` when the credential is signed elsewhere (`sigv4`, `google_adc`)\n * or absent.\n */\nexport function buildCredentialHeaders(\n  entry: AIProviderEntry,\n  secret: string | undefined,\n): Record<string, string> {\n  const kind = entry.credential?.kind ?? \"none\";\n  if (!secret || kind === \"none\" || kind === \"sigv4\" || kind === \"google_adc\") return {};\n\n  const preset = entry.preset ? AI_PROVIDER_PRESETS[entry.preset] : undefined;\n  if (preset?.auth_header) {\n    return {\n      [preset.auth_header.name]: preset.auth_header.template.replace(\"{credential}\", secret),\n    };\n  }\n  if (kind === \"api_key_header\") {\n    const surface = (entry as AIProviderLlmEntry).surface;\n    if (surface === \"google-generative-ai\") return { \"x-goog-api-key\": secret };\n    if (surface === \"azure-openai-responses\") return { \"api-key\": secret };\n    return { \"x-api-key\": secret };\n  }\n  return { Authorization: `Bearer ${secret}` };\n}\n\n/** Outcome of {@link probeProviderEntry}. Never carries the credential. */\nexport interface AIProviderProbeResult {\n  /** The endpoint answered 2xx. */\n  ok: boolean;\n  /** `false` when no request was made — nothing was verified either way. */\n  probed: boolean;\n  url?: string;\n  status?: number;\n  /** Human-readable outcome. Secret-free. */\n  detail: string;\n}\n\n/** Options for {@link probeProviderEntry}. */\nexport interface ProbeProviderOptions {\n  /** Resolved credential value, if the entry has one. Never logged. */\n  secret?: string;\n  /** Request deadline; default 8000 ms, matching `validateApiKey`. */\n  timeoutMs?: number;\n}\n\n/**\n * Send one minimal, read-only request to an entry's endpoint and report what\n * came back.\n *\n * Returns `probed: false` — rather than a false negative — when the entry has\n * no probe path (Bedrock's runtime host) or no resolvable endpoint yet: a\n * SigV4- or ADC-signed request is the transport SDK's job, not this function's.\n */\nexport async function probeProviderEntry(\n  entry: AIProviderEntry,\n  options: ProbeProviderOptions = {},\n): Promise<AIProviderProbeResult> {\n  const url = resolveProbeUrl(entry);\n  if (!url) {\n    const base = resolveEntryBaseUrl(entry);\n    return {\n      ok: false,\n      probed: false,\n      detail: base\n        ? `no read-only probe endpoint is defined for this entry (${base})`\n        : \"no base_url could be resolved — set base_url or the transport's params\",\n    };\n  }\n\n  const headers: Record<string, string> = {\n    ...entry.headers,\n    ...buildCredentialHeaders(entry, options.secret),\n  };\n\n  const controller = new AbortController();\n  const timeout = setTimeout(() => controller.abort(), options.timeoutMs ?? 8000);\n  try {\n    const response = await fetch(url, { method: \"GET\", headers, signal: controller.signal });\n    if (response.ok) {\n      return { ok: true, probed: true, url, status: response.status, detail: \"endpoint reachable\" };\n    }\n    const detail =\n      response.status === 401 || response.status === 403\n        ? \"credential rejected (authentication failed)\"\n        : `endpoint returned HTTP ${response.status}`;\n    return { ok: false, probed: true, url, status: response.status, detail };\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err);\n    const detail =\n      err instanceof Error && err.name === \"AbortError\"\n        ? `request timed out after ${options.timeoutMs ?? 8000}ms`\n        : message;\n    return { ok: false, probed: true, url, detail };\n  } finally {\n    clearTimeout(timeout);\n  }\n}\n","/**\n * Credential delivery for harness adapters — the one naming rule (§2.3).\n *\n * Every adapter that hands a registry entry's secret to a child process, and\n * every renderer that has to *name* that secret in a config file it writes\n * (omp's `models.yml` `apiKey:`, Codex's `env_key`, OpenCode's `{env:…}`),\n * agrees on one env-var name per entry: `SKAILE_AIP_<UPPER_ID>_KEY`. The name\n * goes in the file, the value goes in the child environment — a rendered\n * config never contains a secret.\n *\n * The platform's secret-env allowlist is a prefix rule on exactly that name,\n * and forge-common delivers the same names when it spawns `skaile serve`, so\n * the transform below is a cross-repo contract: uppercase, every character\n * outside `[A-Za-z0-9]` mapped to `_` (registry ids are `[a-z0-9][a-z0-9_-]*`,\n * so in practice only `-`).\n *\n * Alongside the canonical name, {@link registryCredentialEnv} also sets the\n * *conventional* carrier a CLI already reads (`ANTHROPIC_API_KEY`,\n * `GEMINI_API_KEY`, `GROQ_API_KEY`, …) so a catalog-preset entry works in a\n * harness that has no per-endpoint config file yet.\n *\n * @see PROVIDER-CONFIG-PLAN.md §1.4, §2.3\n */\n\nimport {\n  type AIProviderEntry,\n  type AIProviderRegistry,\n  isEntryEnabled,\n  type MergedAIProviderRegistry,\n  parseCredentialRef,\n  registryEntries,\n} from \"@skaile/workspaces/core/provider-registry\";\nimport { resolveCredential } from \"@skaile/workspaces/core/provider-registry-credentials\";\nimport { AI_PROVIDER_PRESETS } from \"../provider-catalog.js\";\n\n/** Options shared by every registry-shaped credential resolution. */\nexport interface RegistryCredentialOptions {\n  /** Restrict resolution to one entry — the provider half of a `modelRef`. */\n  providerId?: string;\n  /** Environment `env:` refs resolve against. Defaults to `process.env`. */\n  env?: Record<string, string | undefined>;\n  /** Control-plane secrets keyed by config id, for `platform:` refs. */\n  secrets?: Record<string, string>;\n  /** Run `cmd:` references. Default `true`. */\n  allowCommand?: boolean;\n}\n\n/** Prefix of the canonical per-entry credential variable. */\nexport const PROVIDER_CREDENTIAL_ENV_PREFIX = \"SKAILE_AIP_\";\n\n/** Suffix of the canonical per-entry credential variable. */\nexport const PROVIDER_CREDENTIAL_ENV_SUFFIX = \"_KEY\";\n\n/**\n * The env-var name that carries a registry entry's credential:\n * `anthropic` → `SKAILE_AIP_ANTHROPIC_KEY`, `my-gw.eu` → `SKAILE_AIP_MY_GW_EU_KEY`.\n *\n * Pure: no environment, no registry, no I/O. Renderers call it per entry while\n * emitting a config file, adapters call it while assembling a child env, and\n * the platform allowlist matches the prefix.\n */\nexport function providerCredentialEnvName(providerId: string): string {\n  const slug = providerId.replace(/[^A-Za-z0-9]/g, \"_\").toUpperCase();\n  return `${PROVIDER_CREDENTIAL_ENV_PREFIX}${slug}${PROVIDER_CREDENTIAL_ENV_SUFFIX}`;\n}\n\n/**\n * The env var a harness already looks for on its own, when the entry names one.\n *\n * The catalog preset's conventional carrier wins (`GEMINI_API_KEY` for\n * `google`), because that is the name the vendor's own CLI reads; otherwise an\n * `env:NAME` credential reference is taken at face value — the operator named\n * that variable, so the child gets it under the same name. `cmd:`, `platform:`\n * and `keyring:` refs have no conventional carrier and return `undefined`.\n */\nexport function conventionalCredentialEnvName(entry: AIProviderEntry): string | undefined {\n  const preset = entry.preset ? AI_PROVIDER_PRESETS[entry.preset] : undefined;\n  if (preset?.credential.env) return preset.credential.env;\n  const ref = entry.credential?.ref ? parseCredentialRef(entry.credential.ref) : undefined;\n  return ref?.form === \"env\" ? ref.name : undefined;\n}\n\n/**\n * Resolve one entry's credential to its value, or `undefined` when there is\n * none to hand over (`kind: none`, an ambient `sigv4`/`google_adc` chain, an\n * unset variable, a reserved `keyring:` ref).\n */\nexport function resolveEntryCredential(\n  entry: AIProviderEntry,\n  options: RegistryCredentialOptions = {},\n): string | undefined {\n  return resolveCredential(entry, {\n    ...(options.env ? { env: options.env } : {}),\n    ...(options.secrets ? { secrets: options.secrets } : {}),\n    ...(options.allowCommand === undefined ? {} : { allowCommand: options.allowCommand }),\n  }).value;\n}\n\n/**\n * One entry's credential value, including the one the session boundary\n * already resolved for it.\n *\n * A `platform:<configId>` reference is resolved by the runner — it holds the\n * `session_init` secrets map, the harness does not — and materialized into the\n * child environment under {@link providerCredentialEnvName}. So when the\n * reference itself yields nothing, that carrier is consulted: it is the same\n * secret, delivered one step earlier.\n */\nexport function entryCredentialValue(\n  providerId: string,\n  entry: AIProviderEntry,\n  options: RegistryCredentialOptions = {},\n): string | undefined {\n  return (\n    resolveEntryCredential(entry, options) ?? options.env?.[providerCredentialEnvName(providerId)]\n  );\n}\n\n/** One enabled entry whose credential is declared but cannot be resolved. */\nexport interface UnresolvedProviderCredential {\n  providerId: string;\n  /** Why it does not resolve, e.g. `environment variable ANTHROPIC_API_KEY is not set`. */\n  reason: string;\n}\n\n/**\n * The enabled LLM/embed entries that name a credential this process cannot\n * resolve (the variable is unset, the command fails). A harness must not be\n * handed such an entry: the child would send an empty key and fail with a 401\n * instead of using its own login. Entries with no credential, an ambient\n * signing chain, or a value the session boundary already delivered under\n * {@link providerCredentialEnvName} are fine.\n */\nexport function unresolvedProviderCredentials(\n  registry: AIProviderRegistry | MergedAIProviderRegistry,\n  options: RegistryCredentialOptions = {},\n): UnresolvedProviderCredential[] {\n  const out: UnresolvedProviderCredential[] = [];\n  for (const [id, entry] of registryEntries(registry)) {\n    if (entry.kind !== \"llm\" && entry.kind !== \"embed\") continue;\n    if (!isEntryEnabled(entry)) continue;\n    if (options.providerId && id !== options.providerId) continue;\n    const resolved = resolveCredential(entry, {\n      ...(options.env ? { env: options.env } : {}),\n      ...(options.secrets ? { secrets: options.secrets } : {}),\n      ...(options.allowCommand === undefined ? {} : { allowCommand: options.allowCommand }),\n    });\n    if (!resolved.error) continue;\n    if (options.env?.[providerCredentialEnvName(id)]) continue;\n    out.push({ providerId: id, reason: resolved.error });\n  }\n  return out;\n}\n\n/** Options for {@link entryCredentialEnv} / {@link registryCredentialEnv}. */\nexport interface RegistryCredentialEnvOptions extends RegistryCredentialOptions {\n  /**\n   * Also set the harness-conventional carrier\n   * ({@link conventionalCredentialEnvName}). Default `true`. Set `false` for a\n   * harness that reads every endpoint out of a rendered config file and must\n   * not inherit a vendor default from a neighbouring entry.\n   */\n  aliases?: boolean;\n}\n\n/**\n * The credential variables one entry contributes: always\n * `SKAILE_AIP_<ID>_KEY`, plus the conventional carrier unless `aliases` is\n * `false`. Empty when the entry has no resolvable secret.\n */\nexport function entryCredentialEnv(\n  providerId: string,\n  entry: AIProviderEntry,\n  options: RegistryCredentialEnvOptions = {},\n): Record<string, string> {\n  const value = resolveEntryCredential(entry, options);\n  if (!value) return {};\n  const out: Record<string, string> = { [providerCredentialEnvName(providerId)]: value };\n  if (options.aliases !== false) {\n    const alias = conventionalCredentialEnvName(entry);\n    if (alias) out[alias] = value;\n  }\n  return out;\n}\n\n/**\n * Every enabled entry's credential, as a child-process environment fragment.\n *\n * One canonical `SKAILE_AIP_<ID>_KEY` per entry whose credential resolves; the\n * conventional carriers are added underneath, first entry in registry order\n * winning a collision (registry order is highest-precedence layer first, so\n * the alias follows the same precedence the selector does). Entries whose\n * credential cannot be resolved contribute nothing.\n */\nexport function registryCredentialEnv(\n  registry: AIProviderRegistry | MergedAIProviderRegistry,\n  options: RegistryCredentialEnvOptions = {},\n): Record<string, string> {\n  const canonical: Record<string, string> = {};\n  const aliases: Record<string, string> = {};\n  for (const [id, entry] of registryEntries(registry)) {\n    if (options.providerId && id !== options.providerId) continue;\n    if (!isEntryEnabled(entry)) continue;\n    const value = resolveEntryCredential(entry, options);\n    if (!value) continue;\n    canonical[providerCredentialEnvName(id)] = value;\n    if (options.aliases === false) continue;\n    const alias = conventionalCredentialEnvName(entry);\n    if (alias && aliases[alias] === undefined) aliases[alias] = value;\n  }\n  return { ...aliases, ...canonical };\n}\n","import type {\n  AIProviderRegistry,\n  AIProviderSurface,\n  MergedAIProviderRegistry,\n} from \"@skaile/workspaces/core/provider-registry\";\nimport type { HarnessContext } from \"@skaile/workspaces/plugin-registry\";\nimport { type PluginRegistry, pluginRegistry } from \"@skaile/workspaces/plugin-registry\";\nimport type { ModelEntry } from \"./models.js\";\nimport type { RegistryCredentialOptions } from \"./provider-materialize/credential-env.js\";\nimport { BUILTIN_HARNESS_CAPABILITIES } from \"./harness-capabilities.js\";\nimport type { AgentConfig, AgentHarness, HarnessInfo } from \"./types.js\";\n\n// Build-time harness gating. `bun build --compile --define:__INCLUDE_*__=...`\n// folds these to literal booleans so an excluded harness module and\n// its SDK are dead-code-stripped from the binary. Under tsup / vitest / bun\n// run-on-source no `--define` runs and the `typeof` guard defaults to `true` —\n// every harness is available (the SDKs stay optional peers).\ndeclare const __INCLUDE_CLAUDE_SDK__: boolean;\ndeclare const __INCLUDE_CODEX__: boolean;\nconst INCLUDE_CLAUDE_SDK =\n  typeof __INCLUDE_CLAUDE_SDK__ === \"undefined\" ? true : __INCLUDE_CLAUDE_SDK__;\nconst INCLUDE_CODEX = typeof __INCLUDE_CODEX__ === \"undefined\" ? true : __INCLUDE_CODEX__;\n\n/**\n * Every wire surface omp can speak — it is the harness the `surface` enum was\n * lifted from, so its list is the enum.\n */\nconst OMP_SURFACES = [\n  \"anthropic-messages\",\n  \"openai-completions\",\n  \"openai-responses\",\n  \"openai-codex-responses\",\n  \"azure-openai-responses\",\n  \"bedrock-converse-stream\",\n  \"google-generative-ai\",\n  \"google-vertex\",\n] as const satisfies readonly AIProviderSurface[];\n\n/**\n * Static capability metadata for every built-in harness.\n *\n * Pure data — this object imports no harness module and references no harness\n * SDK. {@link listHarnesses} returns it (merged with any third-party harnesses)\n * so selection UIs can enumerate every harness without loading a single\n * harness module. The matching harness module's `HarnessTarget` is registered\n * into the plugin registry by {@link registerBuiltinHarnesses}.\n *\n * `surfaces` and `providerPlurality` are the harness-capability declaration\n * the AI provider registry resolves against (plan §2.3): which wire protocols\n * a harness can be pointed at, and how many registry entries it can use at\n * once. The platform's resolver filters candidate entries on `surfaces`\n * instead of matching vendor names.\n *\n * @docLink packages/bridge/api-reference#registry\n */\nexport const BUILTIN_HARNESS_CATALOG: Record<string, HarnessInfo> = {\n  omp: {\n    id: \"omp\",\n    name: \"omp (oh-my-pi)\",\n    modelAgnostic: true,\n    supportsInBandAbort: true,\n    surfaces: OMP_SURFACES,\n    // omp renders the whole registry as its own `models.yml`, so every entry\n    // stays selectable and roles / per-subagent models resolve across them.\n    providerPlurality: \"registry\",\n    capabilities: BUILTIN_HARNESS_CAPABILITIES.omp,\n  },\n  \"claude-sdk\": {\n    id: \"claude-sdk\",\n    name: \"Claude Agent SDK\",\n    modelAgnostic: false,\n    supportsInBandAbort: true,\n    // Anthropic's own API, plus the two clouds the SDK addresses natively.\n    // Foundry is `anthropic-messages` at a different host, not a surface.\n    surfaces: [\"anthropic-messages\", \"bedrock-converse-stream\", \"google-vertex\"],\n    providerPlurality: \"single\",\n    capabilities: BUILTIN_HARNESS_CAPABILITIES[\"claude-sdk\"],\n  },\n  codex: {\n    id: \"codex\",\n    name: \"OpenAI Codex\",\n    modelAgnostic: false,\n    supportsInBandAbort: true,\n    // Codex's `wire_api` is `responses` or `chat`; its subscription transport\n    // is the codex-specific responses flavour.\n    surfaces: [\"openai-codex-responses\", \"openai-responses\", \"openai-completions\"],\n    providerPlurality: \"single\",\n    capabilities: BUILTIN_HARNESS_CAPABILITIES.codex,\n  },\n  echo: {\n    id: \"echo\",\n    name: \"Echo (E2E mock)\",\n    modelAgnostic: true,\n    supportsInBandAbort: false,\n    // Deterministic mock: it never opens a connection, so it speaks no wire\n    // surface and no registry entry can be dispatched to it.\n    surfaces: [],\n    providerPlurality: \"single\",\n  },\n  gemini: {\n    id: \"gemini\",\n    name: \"Gemini CLI\",\n    modelAgnostic: false,\n    supportsInBandAbort: false,\n    surfaces: [\"google-generative-ai\"],\n    providerPlurality: \"single\",\n  },\n  qwen: {\n    id: \"qwen\",\n    name: \"Qwen Code\",\n    modelAgnostic: true,\n    supportsInBandAbort: false,\n    // Driven entirely through OPENAI_BASE_URL / OPENAI_API_KEY.\n    surfaces: [\"openai-completions\"],\n    providerPlurality: \"single\",\n  },\n  opencode: {\n    id: \"opencode\",\n    name: \"OpenCode\",\n    modelAgnostic: true,\n    supportsInBandAbort: false,\n    surfaces: [\n      \"anthropic-messages\",\n      \"openai-completions\",\n      \"openai-responses\",\n      \"google-generative-ai\",\n    ],\n    providerPlurality: \"credentials-n\",\n  },\n  goose: {\n    id: \"goose\",\n    name: \"Goose\",\n    modelAgnostic: true,\n    supportsInBandAbort: false,\n    surfaces: [\n      \"anthropic-messages\",\n      \"openai-completions\",\n      \"google-generative-ai\",\n      \"bedrock-converse-stream\",\n    ],\n    providerPlurality: \"credentials-n\",\n  },\n  continue: {\n    id: \"continue\",\n    name: \"Continue CLI\",\n    modelAgnostic: true,\n    supportsInBandAbort: false,\n    surfaces: [\"anthropic-messages\", \"openai-completions\", \"google-generative-ai\"],\n    providerPlurality: \"credentials-n\",\n  },\n};\n\nlet _harnessesRegistered = false;\n\n/**\n * Register every built-in harness's `HarnessTarget` into the plugin registry.\n *\n * This is the single id → module map in bridge core. Every specifier is a\n * literal string so `bun --compile` can statically bundle the harness module\n * (and, transitively, its SDK). The in-process-SDK harnesses (`claude-sdk`,\n * `codex`) are wrapped in build-constant guards so an excluded harness's\n * `await import` folds to dead code in the compiled binary. `omp` and `echo`\n * carry no SDK weight and are always available.\n *\n * **Static import discipline.** Every `import()` specifier below must be a\n * string literal — never aliased through a variable. Indirection defeats\n * `bun --compile`'s static analysis and silently drops the module from the\n * binary.\n *\n * Idempotent: guarded by a module flag so a second call is a no-op (a duplicate\n * `register` would otherwise throw `RegistrationError`).\n *\n * @docLink packages/bridge/api-reference#registry\n */\nexport async function registerBuiltinHarnesses(\n  registry: PluginRegistry = pluginRegistry,\n): Promise<void> {\n  if (registry === pluginRegistry && _harnessesRegistered) return;\n\n  if (!registry.get(\"harness\", \"omp\")) {\n    const m = await import(\"@skaile/workspaces/harnesses/omp\");\n    registry.register(\"harness\", m.ompHarnessTarget);\n  }\n  if (!registry.get(\"harness\", \"echo\")) {\n    const m = await import(\"@skaile/workspaces/harnesses/echo\");\n    registry.register(\"harness\", m.echoHarnessTarget);\n  }\n  if (INCLUDE_CLAUDE_SDK && !registry.get(\"harness\", \"claude-sdk\")) {\n    const m = await import(\"@skaile/workspaces/harnesses/claude-sdk\");\n    registry.register(\"harness\", m.claudeSdkHarnessTarget);\n  }\n  if (INCLUDE_CODEX && !registry.get(\"harness\", \"codex\")) {\n    const m = await import(\"@skaile/workspaces/harnesses/codex\");\n    registry.register(\"harness\", m.codexHarnessTarget);\n  }\n  // Subprocess CLI harnesses spawn an external binary the user installs\n  // separately — no bundled SDK to dead-code-strip, so (like omp/echo) they\n  // carry no build constant and are always registered.\n  if (!registry.get(\"harness\", \"gemini\")) {\n    const m = await import(\"@skaile/workspaces/harnesses/gemini\");\n    registry.register(\"harness\", m.geminiHarnessTarget);\n  }\n  if (!registry.get(\"harness\", \"qwen\")) {\n    const m = await import(\"@skaile/workspaces/harnesses/qwen\");\n    registry.register(\"harness\", m.qwenHarnessTarget);\n  }\n  if (!registry.get(\"harness\", \"opencode\")) {\n    const m = await import(\"@skaile/workspaces/harnesses/opencode\");\n    registry.register(\"harness\", m.opencodeHarnessTarget);\n  }\n  if (!registry.get(\"harness\", \"goose\")) {\n    const m = await import(\"@skaile/workspaces/harnesses/goose\");\n    registry.register(\"harness\", m.gooseHarnessTarget);\n  }\n  if (!registry.get(\"harness\", \"continue\")) {\n    const m = await import(\"@skaile/workspaces/harnesses/continue\");\n    registry.register(\"harness\", m.continueHarnessTarget);\n  }\n\n  if (registry === pluginRegistry) _harnessesRegistered = true;\n}\n\n/**\n * Creates a new harness instance for the given harness id.\n *\n * Ensures the built-in harness targets are registered (idempotent), then looks\n * up the target in the plugin registry and calls its `create()`. The returned\n * harness has not been started yet — call `harness.start()` before sending\n * prompts.\n *\n * @param id - Registered harness identifier (e.g. `\"omp\"`, `\"claude-sdk\"`).\n * @param config - Configuration forwarded to the harness constructor.\n * @param ctx - Optional harness context (logger / abort signal). Defaults to `{}`.\n * @returns A freshly constructed (not yet started) {@link AgentHarness}.\n * @throws {Error} When `id` is a known harness excluded from this build, or\n *   when `id` does not match any registered harness at all.\n * @docLink packages/bridge/api-reference#registry\n */\nexport async function createHarness(\n  id: string,\n  config: AgentConfig,\n  ctx?: HarnessContext,\n): Promise<AgentHarness> {\n  const target = await resolveHarnessTarget(id);\n  return target.create(config, ctx ?? {});\n}\n\n/**\n * Resolve a registered harness target by id, ensuring the built-ins are\n * registered first. Throws the canonical \"not bundled\" / \"unknown harness\"\n * errors so every caller (`createHarness`, `listModelsForHarness`) reports an\n * unrecognized id the same way instead of silently degrading.\n *\n * @throws {Error} When `id` is a known harness excluded from this build, or\n *   when `id` does not match any registered harness at all.\n */\nasync function resolveHarnessTarget(id: string) {\n  await registerBuiltinHarnesses();\n  const target = pluginRegistry.get(\"harness\", id);\n  if (!target) {\n    if (id in BUILTIN_HARNESS_CATALOG) {\n      throw new Error(`Agent harness \"${id}\" is not bundled in this build.`);\n    }\n    throw new Error(\n      `Unknown agent harness: \"${id}\". Available: ${listHarnesses()\n        .map((d) => d.id)\n        .join(\", \")}`,\n    );\n  }\n  return target;\n}\n\n/**\n * Returns the capability metadata for every available harness.\n *\n * Enumerates every built-in harness from {@link BUILTIN_HARNESS_CATALOG} without\n * loading a single harness module or harness SDK, then merges in any third-party\n * harness targets registered into the plugin registry that are not already in\n * the catalog. Use this to populate harness selection UIs.\n *\n * @returns Array of {@link HarnessInfo} objects, one per available harness.\n * @docLink packages/bridge/api-reference#registry\n */\nexport function listHarnesses(): HarnessInfo[] {\n  const merged = new Map<string, HarnessInfo>();\n  for (const info of Object.values(BUILTIN_HARNESS_CATALOG)) {\n    merged.set(info.id, info);\n  }\n  for (const meta of pluginRegistry.list(\"harness\")) {\n    if (!merged.has(meta.id)) {\n      // Third-party harnesses carry no HarnessInfo row; read the capability flags\n      // off the registered target (defaulting to conservative false) so a\n      // model-agnostic / in-band-abort harness can still advertise them.\n      const target = pluginRegistry.get(\"harness\", meta.id);\n      merged.set(meta.id, {\n        id: meta.id,\n        name: meta.displayName,\n        modelAgnostic: target?.modelAgnostic ?? false,\n        supportsInBandAbort: target?.supportsInBandAbort ?? false,\n        // Left absent when the target declares nothing: \"speaks no surface\" and\n        // \"did not say\" are different claims, and the platform resolver must be\n        // able to tell them apart before it filters a harness out.\n        ...(target?.surfaces ? { surfaces: target.surfaces } : {}),\n        ...(target?.providerPlurality ? { providerPlurality: target.providerPlurality } : {}),\n        ...(target?.capabilities ? { capabilities: target.capabilities } : {}),\n      });\n    }\n  }\n  return [...merged.values()];\n}\n\n/**\n * List models available to a specific harness without starting a full agent session.\n *\n * Ensures the built-in harness targets are registered (idempotent), then\n * delegates to the target's optional `listModels()`. Throws on an unknown /\n * not-bundled id (same contract as {@link createHarness}); returns `[]` only\n * when the target exists but exposes no `listModels`.\n *\n * @param harnessId - Registered harness id (e.g. `\"omp\"`, `\"claude-sdk\"`, `\"codex\"`).\n * @param registry - The AI provider registry to discover against — either the\n *   bare `id → entry` map or a merged view. Each entry names its credential by\n *   reference, resolved through `options` and delivered to the throwaway\n *   harness as `SKAILE_AIP_<ID>_KEY` environment entries.\n * @param options - Which entry to restrict to, and where `env:` / `platform:`\n *   references resolve from. Defaults to the whole registry against\n *   `process.env`.\n * @throws {Error} When `harnessId` is unknown or excluded from this build.\n * @docLink packages/bridge/api-reference#registry\n */\nexport async function listModelsForHarness(\n  harnessId: string,\n  registry: AIProviderRegistry | MergedAIProviderRegistry,\n  options?: RegistryCredentialOptions,\n): Promise<ModelEntry[]> {\n  const target = await resolveHarnessTarget(harnessId);\n  return (await target.listModels?.(registry, options)) ?? [];\n}\n"]}

package/dist/ensure-sources-K5EFNC3L.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../cli/src/ensure-sources.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqBA,SAAS,gBAAgB,GAAA,EAAqB;AAC5C,EAAA,OAAY,IAAA,CAAA,IAAA,CAAK,iBAAA,EAAkB,EAAG,GAAG,CAAA;AAC3C;AASA,SAAS,kBAAA,CAAmB,UAAkB,KAAA,EAAsC;AAClF,EAAA,IAAI;AACF,IAAA,OAAO,mBAAA,CAAoB,IAAA,CAAK,QAAQ,CAAA,CAAE,UAAA,EAAW;AAAA,EACvD,SAAS,GAAA,EAAK;AACZ,IAAA,IAAI,CAAC,KAAA,EAAO;AACV,MAAA,MAAA,CAAO,CAAA,eAAA,EAAkB,QAAQ,CAAA,EAAA,EAAK,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA,CAAE,CAAA;AAAA,IAC1F;AACA,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAMA,SAAS,kBAAA,CAAmB,KAAA,EAAoB,KAAA,EAAgB,MAAA,EAA4B;AAC1F,EAAA,MAAM,GAAA,GAAM,cAAA,CAAe,KAAA,CAAM,GAAG,CAAA;AACpC,EAAA,MAAM,IAAA,GAAO,eAAA,CAAgB,KAAA,CAAM,GAAG,CAAA;AACtC,EAAA,MAAM,IAAA,GAAO,gBAAgB,GAAG,CAAA;AAChC,EAAA,IAAI,UAAA,CAAW,IAAI,CAAA,EAAG;AACpB,IAAA,MAAA,CAAO,MAAA,CAAO,KAAK,IAAI,CAAA;AACvB,IAAA;AAAA,EACF;AACA,EAAA,SAAA,CAAe,aAAQ,IAAI,CAAA,EAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AACjD,EAAA,MAAM,IAAA,GAAO,CAAC,OAAA,EAAS,KAAA,CAAM,KAAK,IAAI,CAAA;AACtC,EAAA,IAAI,KAAA,CAAM,KAAK,IAAA,CAAK,MAAA,CAAO,GAAG,CAAA,EAAG,UAAA,EAAY,MAAM,GAAG,CAAA;AACtD,EAAA,MAAM,KAAA,GAAQ,UAAU,KAAA,EAAO,IAAA,EAAM,EAAE,KAAA,EAAO,KAAA,GAAQ,MAAA,GAAS,SAAA,EAAW,CAAA;AAC1E,EAAA,IAAI,KAAA,CAAM,WAAW,CAAA,EAAG;AACtB,IAAA,MAAA,CAAO,MAAA,CAAO,KAAK,IAAI,CAAA;AACvB,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,MAAA,CAAO,CAAA,qBAAA,EAAwB,KAAA,CAAM,GAAG,CAAA,CAAE,CAAA;AAAA,IAC5C;AACA,IAAA;AAAA,EACF;AACA,EAAA,MAAA,CAAO,MAAA,CAAO,KAAK,IAAI,CAAA;AACzB;AAGA,SAAS,kBAAkB,MAAA,EAA4B;AACrD,EAAA,KAAA,MAAW,KAAK,MAAA,CAAO,MAAA,EAAQ,KAAA,CAAM,CAAA,eAAA,EAAkB,CAAC,CAAA,EAAA,CAAI,CAAA;AAC5D,EAAA,IAAI,MAAA,CAAO,MAAA,CAAO,MAAA,GAAS,CAAA,EAAG;AAC5B,IAAA,OAAA,CAAQ,yBAAyB,MAAA,CAAO,MAAA,CAAO,IAAA,CAAK,IAAI,CAAC,CAAA,CAAE,CAAA;AAAA,EAC7D;AACF;AAUO,SAAS,mBAAA,CACd,UAAA,EACA,IAAA,GAA4B,EAAC,EACf;AACd,EAAA,MAAM,MAAA,GAAuB,EAAE,MAAA,EAAQ,EAAC,EAAG,QAAQ,EAAC,EAAG,MAAA,EAAQ,EAAC,EAAE;AAClE,EAAA,MAAM,QAAA,GAAgB,IAAA,CAAA,IAAA,CAAK,UAAA,EAAY,aAAa,CAAA;AACpD,EAAA,IAAI,CAAC,UAAA,CAAW,QAAQ,CAAA,EAAG,OAAO,MAAA;AAElC,EAAA,MAAM,KAAA,GAAQ,KAAK,KAAA,IAAS,KAAA;AAC5B,EAAA,MAAM,OAAA,GAAU,kBAAA,CAAmB,QAAA,EAAU,KAAK,CAAA;AAClD,EAAA,IAAI,OAAA,KAAY,MAAM,OAAO,MAAA;AAC7B,EAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,CAAA,EAAG,OAAO,MAAA;AAEjC,EAAA,KAAA,MAAW,SAAS,OAAA,EAAS;AAC3B,IAAA,kBAAA,CAAmB,KAAA,EAAO,OAAO,MAAM,CAAA;AAAA,EACzC;AAEA,EAAA,IAAI,CAAC,KAAA,EAAO;AACV,IAAA,iBAAA,CAAkB,MAAM,CAAA;AAAA,EAC1B;AAEA,EAAA,OAAO,MAAA;AACT","file":"ensure-sources-K5EFNC3L.js","sourcesContent":["/**\n * ensure-sources.ts — hydrate the `~/.skaile/cache/sources/` clone cache from a\n * project's `skaile.yaml` `sources:` entries.\n *\n * Called by `skaile init` (idempotent: no-op when no sources declared) and\n * `skaile install` so checking out a project pulls its source clones onto\n * the local machine.\n */\n\nimport { spawnSync } from \"node:child_process\";\nimport { existsSync, mkdirSync } from \"node:fs\";\nimport * as path from \"node:path\";\nimport {\n  getGlobalCacheDir,\n  type SourceEntry,\n  sourceCacheKey,\n  sourceShortName,\n  WorkspaceYamlEditor,\n} from \"@skaile/workspaces/core\";\nimport { logErr, logInfo, logOk } from \"./helpers.ts\";\n\nfunction sourceClonePath(key: string): string {\n  return path.join(getGlobalCacheDir(), key);\n}\n\nexport interface EnsureResult {\n  cloned: string[];\n  cached: string[];\n  failed: string[];\n}\n\n/** Load `sources:` from a project's `skaile.yaml`, or `null` when unavailable. */\nfunction loadProjectSources(yamlPath: string, quiet: boolean): SourceEntry[] | null {\n  try {\n    return WorkspaceYamlEditor.load(yamlPath).getSources();\n  } catch (err) {\n    if (!quiet) {\n      logErr(`Could not read ${yamlPath}: ${err instanceof Error ? err.message : String(err)}`);\n    }\n    return null;\n  }\n}\n\n/**\n * Hydrate a single source entry into `result`: skip when already cached,\n * otherwise clone and record success/failure. Mutates `result` in place.\n */\nfunction hydrateSourceEntry(entry: SourceEntry, quiet: boolean, result: EnsureResult): void {\n  const key = sourceCacheKey(entry.url);\n  const slug = sourceShortName(entry.url);\n  const dest = sourceClonePath(key);\n  if (existsSync(dest)) {\n    result.cached.push(slug);\n    return;\n  }\n  mkdirSync(path.dirname(dest), { recursive: true });\n  const args = [\"clone\", entry.url, dest];\n  if (entry.pin) args.splice(1, 0, \"--branch\", entry.pin);\n  const clone = spawnSync(\"git\", args, { stdio: quiet ? \"pipe\" : \"inherit\" });\n  if (clone.status !== 0) {\n    result.failed.push(slug);\n    if (quiet) {\n      logErr(`git clone failed for ${entry.url}`);\n    }\n    return;\n  }\n  result.cloned.push(slug);\n}\n\n/** Log a full-hydrate summary of cloned + reused-cached entries. */\nfunction logHydrateSummary(result: EnsureResult): void {\n  for (const n of result.cloned) logOk(`Cloned source \"${n}\".`);\n  if (result.cached.length > 0) {\n    logInfo(`Reused cached clones: ${result.cached.join(\", \")}`);\n  }\n}\n\n/**\n * Walk `projectDir/skaile.yaml` `sources:` and clone any entries whose\n * clone directory does not yet exist under `~/.skaile/cache/sources/`. Existing\n * clones are left untouched — this is hydration, not sync.\n *\n * Quiet by default: when `quiet: true` the helper only prints failures.\n * On full hydrate (`quiet: false`) it logs each cloned/cached entry.\n */\nexport function ensureSourcesCloned(\n  projectDir: string,\n  opts: { quiet?: boolean } = {},\n): EnsureResult {\n  const result: EnsureResult = { cloned: [], cached: [], failed: [] };\n  const yamlPath = path.join(projectDir, \"skaile.yaml\");\n  if (!existsSync(yamlPath)) return result;\n\n  const quiet = opts.quiet ?? false;\n  const sources = loadProjectSources(yamlPath, quiet);\n  if (sources === null) return result;\n  if (sources.length === 0) return result;\n\n  for (const entry of sources) {\n    hydrateSourceEntry(entry, quiet, result);\n  }\n\n  if (!quiet) {\n    logHydrateSummary(result);\n  }\n\n  return result;\n}\n"]}

package/dist/library-publish-XMRCKRNR.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../cli/src/commands/library-publish.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuFA,IAAM,iBAAA,GAAoB,sBAAA;AAG1B,SAAS,YAAY,GAAA,EAAkC;AACrD,EAAA,IAAI,GAAA,CAAI,OAAA,KAAY,KAAA,EAAO,OAAO,MAAA;AAClC,EAAA,OAAQ,IAAI,aAAA,CAAmC,GAAA;AACjD;AAGA,SAAS,SAAS,GAAA,EAAsB;AACtC,EAAA,IAAI,GAAA,CAAI,OAAA,KAAY,KAAA,EAAO,OAAO,MAAA;AAClC,EAAA,OAAQ,GAAA,CAAI,cAAmC,MAAA,IAAU,MAAA;AAC3D;AAMA,SAAS,aAAa,OAAA,EAAoC;AACxD,EAAA,IAAI,IAAA;AACJ,EAAA,IAAI;AACF,IAAA,IAAA,GAAO,YAAA,CAAa,IAAA,CAAK,OAAA,EAAS,iBAAiB,GAAG,OAAO,CAAA;AAAA,EAC/D,CAAA,CAAA,MAAQ;AACN,IAAA,MAAA;AAAA,MACE,CAAA,GAAA,EAAM,CAAA,CAAE,GAAA,CAAI,iBAAiB,CAAC,CAAA,+GAAA;AAAA,KAEhC;AACA,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AACA,EAAA,MAAM,EAAE,QAAA,EAAU,WAAA,EAAY,GAAI,qBAAqB,IAAI,CAAA;AAC3D,EAAA,MAAM,SAAS,WAAA,CAAY,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,aAAa,OAAO,CAAA;AAC/D,EAAA,IAAI,MAAA,CAAO,SAAS,CAAA,EAAG;AACrB,IAAA,KAAA,MAAW,CAAA,IAAK,QAAQ,MAAA,CAAO,CAAA,EAAG,EAAE,IAAI,CAAA,EAAA,EAAK,CAAA,CAAE,OAAO,CAAA,CAAE,CAAA;AACxD,IAAA,MAAA,CAAO,mFAA8E,CAAA;AACrF,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AACA,EAAA,OAAO,QAAA;AACT;AAGA,SAAS,MAAA,CAAO,KAAA,EAAkB,GAAA,EAAa,IAAA,EAAgB;AAC7D,EAAA,OAAO,KAAA,CAAM,KAAA,EAAO,CAAC,IAAA,EAAM,GAAA,EAAK,GAAG,IAAI,CAAA,EAAG,EAAE,QAAA,EAAU,OAAA,EAAS,CAAA;AACjE;AAYA,SAAS,gBAAA,CAAiB,OAAA,EAAiB,OAAA,EAAiB,GAAA,EAAa,KAAA,EAAwB;AAC/F,EAAA,MAAM,aACJ,CAAC,GAAA,CAAI,WAAW,GAAG,CAAA,IACnB,MAAM,KAAA,EAAO,CAAC,kBAAA,EAAoB,kBAAA,EAAoB,GAAG,CAAA,EAAG,EAAE,UAAU,OAAA,EAAS,EAAE,MAAA,KAAW,CAAA;AAChG,EAAA,IAAI,CAAC,UAAA,EAAY;AACf,IAAA,MAAA;AAAA,MACE,UAAU,GAAG,CAAA,4HAAA;AAAA,KAEf;AACA,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AACA,EAAA,IAAI,MAAA,CAAO,OAAO,OAAA,EAAS,CAAC,aAAa,WAAW,CAAC,CAAA,CAAE,MAAA,KAAW,CAAA,EAAG;AACrE,EAAA,MAAM,SAAS,CAAC,GAAA,EAAK,CAAA,oBAAA,EAAuB,GAAG,EAAE,CAAA,CAAE,IAAA;AAAA,IACjD,CAAC,SAAA,KACC,MAAA,CAAO,KAAA,EAAO,SAAS,CAAC,WAAA,EAAa,UAAA,EAAY,SAAA,EAAW,CAAA,EAAG,SAAS,CAAA,SAAA,CAAW,CAAC,EACjF,MAAA,KAAW;AAAA,GAClB;AACA,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,MAAA;AAAA,MACE,CAAA,OAAA,EAAU,GAAG,CAAA,6CAAA,EAAgD,OAAO,4CACzB,OAAO,CAAA,oCAAA;AAAA,KACpD;AACA,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AACF;AAQA,SAAS,cAAc,IAAA,EAKd;AACP,EAAA,MAAM,EAAE,OAAA,EAAS,SAAA,EAAW,MAAA,EAAQ,OAAM,GAAI,IAAA;AAE9C,EAAA,MAAM,SAAS,MAAA,CAAO,KAAA,EAAO,SAAS,CAAC,WAAA,EAAa,WAAW,CAAC,CAAA;AAChE,EAAA,IAAI,MAAA,CAAO,WAAW,CAAA,EAAG;AACvB,IAAA,MAAM,OAAO,MAAA,CAAO,KAAA,EAAO,OAAA,EAAS,CAAC,MAAM,CAAC,CAAA;AAC5C,IAAA,IAAI,IAAA,CAAK,WAAW,CAAA,EAAG;AACrB,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,iBAAA,EAAA,CAAqB,IAAA,CAAK,MAAA,IAAU,EAAA,EAAI,QAAA,EAAS,CAAE,IAAA,EAAK,IAAK,CAAA,KAAA,EAAQ,IAAA,CAAK,MAAM,CAAA,CAAE,CAAA;AAAA,OACpF;AAAA,IACF;AAAA,EACF;AAGA,EAAA,MAAM,MAAA,GAAS,OAAO,KAAA,EAAO,OAAA,EAAS,CAAC,QAAA,EAAU,SAAA,EAAW,QAAQ,CAAC,CAAA;AACrE,EAAA,MAAM,UAAA,GACJ,MAAA,CAAO,MAAA,KAAW,CAAA,GACd,CAAC,QAAA,EAAU,SAAA,EAAW,QAAA,EAAU,SAAS,CAAA,GACzC,CAAC,QAAA,EAAU,KAAA,EAAO,UAAU,SAAS,CAAA;AAC3C,EAAA,MAAM,SAAA,GAAY,MAAA,CAAO,KAAA,EAAO,OAAA,EAAS,UAAU,CAAA;AACnD,EAAA,IAAI,SAAA,CAAU,WAAW,CAAA,EAAG;AAC1B,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,mBAAA,EAAA,CAAuB,SAAA,CAAU,MAAA,IAAU,EAAA,EAAI,QAAA,EAAS,CAAE,IAAA,EAAK,IAAK,CAAA,KAAA,EAAQ,SAAA,CAAU,MAAM,CAAA,CAAE,CAAA;AAAA,KAChG;AAAA,EACF;AAEA,EAAA,MAAM,MAAM,MAAA,CAAO,KAAA,EAAO,SAAS,CAAC,KAAA,EAAO,IAAI,CAAC,CAAA;AAChD,EAAA,IAAI,GAAA,CAAI,WAAW,CAAA,EAAG;AACpB,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,gBAAA,EAAA,CAAoB,GAAA,CAAI,MAAA,IAAU,EAAA,EAAI,QAAA,EAAS,CAAE,IAAA,EAAK,IAAK,CAAA,KAAA,EAAQ,GAAA,CAAI,MAAM,CAAA,CAAE,CAAA;AAAA,KACjF;AAAA,EACF;AAIA,EAAA,MAAM,MAAA,GAAS,KAAA;AAAA,IACb,KAAA;AAAA,IACA;AAAA,MACE,IAAA;AAAA,MACA,OAAA;AAAA,MACA,IAAA;AAAA,MACA,iCAAA;AAAA,MACA,IAAA;AAAA,MACA,kBAAA;AAAA,MACA,QAAA;AAAA,MACA,IAAA;AAAA,MACA;AAAA,KACF;AAAA,IACA,EAAE,UAAU,OAAA;AAAQ,GACtB;AACA,EAAA,IAAI,MAAA,CAAO,WAAW,CAAA,EAAG;AACvB,IAAA,MAAM,GAAA,GAAM,GAAG,MAAA,CAAO,MAAA,IAAU,EAAE,CAAA,EAAG,MAAA,CAAO,UAAU,EAAE,CAAA,CAAA;AACxD,IAAA,IAAI,CAAC,oBAAA,CAAqB,IAAA,CAAK,GAAG,CAAA,EAAG;AACnC,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,mBAAA,EAAsB,GAAA,CAAI,IAAA,MAAU,CAAA,KAAA,EAAQ,MAAA,CAAO,MAAM,CAAA,CAAE,CAAA,CAAE,CAAA;AAAA,IAC/E;AAAA,EACF;AAEA,EAAA,MAAM,IAAA,GAAO,MAAA,CAAO,KAAA,EAAO,OAAA,EAAS,CAAC,QAAQ,QAAA,EAAU,CAAA,KAAA,EAAQ,MAAM,CAAA,CAAE,CAAC,CAAA;AACxE,EAAA,IAAI,IAAA,CAAK,WAAW,CAAA,EAAG;AACrB,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,iBAAA,EAAA,CAAqB,IAAA,CAAK,MAAA,IAAU,EAAA,EAAI,QAAA,EAAS,CAAE,IAAA,EAAK,IAAK,CAAA,KAAA,EAAQ,IAAA,CAAK,MAAM,CAAA,CAAE,CAAA;AAAA,KACpF;AAAA,EACF;AACF;AAQO,SAAS,eAAe,GAAA,EAAsB;AACnD,EAAA,OAAO,yGAAA,CAA0G,IAAA;AAAA,IAC/G,IAAI,IAAA;AAAK,GACX;AACF;AAGO,SAAS,sBAAA,CAAuB,MAAc,GAAA,EAAqB;AACxE,EAAA,OACE,CAAA,uBAAA,EAA0B,IAAI,CAAA,uBAAA,EAA0B,GAAG,gGAEnC,IAAI,CAAA,uDAAA,CAAA;AAEhC;AAGA,IAAM,oBAAA,GAAuB,EAAA;AAiB7B,SAAS,UAAA,CACP,OAAA,EACA,QAAA,EACA,UAAA,EACA,WAAA,EACa;AACb,EAAA,MAAM,MAAmB,EAAC;AAC1B,EAAA,MAAM,WAAW,eAAA,EAAgB;AACjC,EAAA,KAAA,MAAW,KAAA,IAAS,QAAA,CAAS,MAAA,IAAU,EAAC,EAAG;AACzC,IAAA,IAAI,UAAA,IAAc,KAAA,CAAM,IAAA,KAAS,UAAA,EAAY;AAC7C,IAAA,IAAI,KAAA,CAAM,MAAA,IAAU,QAAA,CAAS,MAAA,EAAQ;AACrC,IAAA,MAAM,IAAA,GAAO,qBAAA,CAAsB,OAAA,EAAS,KAAK,CAAA;AACjD,IAAA,IAAI,CAAC,IAAA,EAAM;AACX,IAAA,MAAM,IAAA,GAAO,YAAA,CAAa,IAAA,EAAM,OAAO,CAAA;AACvC,IAAA,MAAM,MAAA,GAAS,iBAAA,CAAkB,IAAA,EAAM,IAAI,CAAA;AAC3C,IAAA,IAAI,OAAA;AACJ,IAAA,IAAI,OAAO,EAAA,EAAI;AACb,MAAA,OAAA,GAAU,UAAA;AAAA,QACR,KAAA,CAAM,IAAA;AAAA,QACN,MAAA,CAAO,IAAA;AAAA,QACP,aAAA,CAAc,MAAM,IAAI,CAAA;AAAA,QACxB,QAAA,CAAS,OAAA,CAAQ,IAAI,CAAC,CAAA;AAAA,QACtB,QAAA;AAAA,QACA,IAAA;AAAA,QACA,SAAS,IAAI,CAAA;AAAA,QACb,EAAE,GAAA,EAAK,OAAA,CAAQ,IAAI,CAAA,EAAG,WAAA,EAAa,SAAS,WAAA;AAAY,OAC1D;AAAA,IACF;AACA,IAAA,GAAA,CAAI,IAAA,CAAK,EAAE,KAAA,EAAO,GAAA,EAAK,QAAA,CAAS,SAAS,IAAI,CAAA,EAAG,MAAA,EAAQ,OAAA,EAAS,CAAA;AAAA,EACnE;AACA,EAAA,OAAO,GAAA;AACT;AAOA,SAAS,wBAAA,CACP,UACA,MAAA,EACmB;AACnB,EAAA,OAAO;AAAA,IACL,GAAG,QAAA;AAAA,IACH,MAAA,EAAQ,QAAA,CAAS,MAAA,EAAQ,GAAA,CAAI,CAAC,KAAA,KAAU;AACtC,MAAA,MAAM,UAAU,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,UAAU,KAAK,CAAA;AACpD,MAAA,MAAM,WAAA,GAAc,SAAS,MAAA,CAAO,EAAA,GAAK,gBAAgB,OAAA,CAAQ,MAAA,CAAO,IAAI,CAAA,GAAI,MAAA;AAChF,MAAA,OAAO,gBAAgB,MAAA,GAAY,KAAA,GAAQ,EAAE,GAAG,KAAA,EAAO,SAAS,WAAA,EAAY;AAAA,IAC9E,CAAC;AAAA,GACH;AACF;AAiBA,SAAS,YAAA,CAAa,QAAqB,QAAA,EAA6C;AACtF,EAAA,MAAM,MAAsB,EAAC;AAC7B,EAAA,KAAA,MAAW,SAAS,MAAA,EAAQ;AAC1B,IAAA,IAAI,CAAC,KAAA,CAAM,MAAA,CAAO,EAAA,EAAI;AACtB,IAAA,MAAM,WAAA,GAAc,eAAA,CAAgB,KAAA,CAAM,MAAA,CAAO,IAAI,CAAA;AACrD,IAAA,MAAM,YAAA,GAAe,KAAA,CAAM,KAAA,CAAM,OAAA,IAAW,QAAA,CAAS,OAAA;AACrD,IAAA,IAAI,WAAA,KAAgB,MAAA,IAAa,WAAA,KAAgB,YAAA,EAAc;AAC7D,MAAA,GAAA,CAAI,IAAA,CAAK,EAAE,KAAA,EAAO,GAAA,EAAK,aAAA,CAAc,KAAA,CAAM,KAAA,EAAO,QAAQ,CAAA,EAAG,YAAA,EAAc,WAAA,EAAa,CAAA;AAAA,IAC1F;AAAA,EACF;AACA,EAAA,OAAO,GAAA;AACT;AAEA,IAAM,aAAA,GAAgB,CAAC,CAAA,KACrB,CAAA,EAAG,EAAE,GAAG,CAAA,mBAAA,EAAsB,CAAA,CAAE,YAAA,IAAgB,QAAQ,CAAA,QAAA,EAAM,EAAE,WAAW,CAAA,EAAA,EAAK,EAAE,KAAA,CAAM,GAAA,CAAI,MAAM,GAAG,CAAA,CAAE,IAAA,CAAK,GAAG,CAAC,CAAA,CAAA,CAAA;AAWlH,SAAS,aAAA,CAAc,QAAqB,QAAA,EAAuC;AACjF,EAAA,MAAM,WAAqB,EAAC;AAC5B,EAAA,KAAA,MAAW,EAAE,KAAA,EAAO,GAAA,EAAK,MAAA,EAAQ,OAAA,MAAa,MAAA,EAAQ;AACpD,IAAA,MAAM,GAAA,GAAM,aAAA,CAAc,KAAA,EAAO,QAAQ,CAAA;AACzC,IAAA,IAAI,CAAC,MAAA,CAAO,EAAA,IAAM,CAAC,OAAA,EAAS;AAC1B,MAAA,MAAM,MAAA,GAAS,MAAA,CAAO,EAAA,GAAK,qCAAA,GAAwC,MAAA,CAAO,MAAA;AAC1E,MAAA,QAAA,CAAS,IAAA,CAAK,CAAA,EAAG,GAAG,CAAA,EAAA,EAAK,GAAG,CAAA,GAAA,EAAM,KAAA,CAAM,IAAI,CAAA,SAAA,EAAO,sBAAA,CAAuB,MAAM,CAAC,CAAA,CAAE,CAAA;AACnF,MAAA;AAAA,IACF;AACA,IAAA,KAAA,MAAW,CAAA,IAAK,OAAA,CAAQ,MAAA,EAAQ,QAAA,CAAS,KAAK,CAAA,EAAG,GAAG,CAAA,EAAA,EAAK,GAAG,MAAM,CAAA,CAAE,GAAG,CAAA,SAAA,EAAO,CAAA,CAAE,IAAI,CAAA,CAAE,CAAA;AAGtF,IAAA,KAAA,MAAW,CAAA,IAAK,QAAQ,UAAA,CAAW,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,YAAY,CAAA,EAAG;AAChE,MAAA,QAAA,CAAS,IAAA,CAAK,CAAA,EAAG,GAAG,CAAA,EAAA,EAAK,GAAG,CAAA,GAAA,EAAM,CAAA,CAAE,GAAG,CAAA,SAAA,EAAO,CAAA,CAAE,IAAI,CAAA,CAAE,CAAA;AAAA,IACxD;AAEA,IAAA,MAAM,QAAA,GAAW,MAAM,IAAA,KAAS,MAAA,GAAS,OAAO,IAAA,CAAK,EAAA,GAAK,OAAO,IAAA,CAAK,IAAA;AACtE,IAAA,IAAI,OAAO,QAAA,KAAa,QAAA,IAAY,aAAa,EAAA,IAAM,QAAA,KAAa,MAAM,IAAA,EAAM;AAC9E,MAAA,QAAA,CAAS,IAAA;AAAA,QACP,CAAA,EAAG,GAAG,CAAA,EAAA,EAAK,GAAG,sCAAiC,QAAQ,CAAA,yEAAA;AAAA,OACzD;AAAA,IACF;AAEA,IAAA,MAAM,eAAe,KAAA,CAAM,OAAA,KAAY,SAAY,MAAA,GAAY,iBAAA,CAAkB,MAAM,OAAO,CAAA;AAC9F,IAAA,IAAI,gBAAgB,KAAA,CAAM,OAAA,KAAY,eAAA,CAAgB,MAAA,CAAO,IAAI,CAAA,EAAG;AAClE,MAAA,QAAA,CAAS,KAAK,CAAA,EAAG,GAAG,KAAK,GAAG,CAAA,SAAA,EAAO,YAAY,CAAA,CAAE,CAAA;AAAA,IACnD;AAAA,EACF;AACA,EAAA,OAAO,QAAA;AACT;AASA,SAAS,aAAA,CAAc,QAAqB,QAAA,EAAuC;AACjF,EAAA,MAAM,WAAqB,EAAC;AAC5B,EAAA,KAAA,MAAW,EAAE,KAAA,EAAO,GAAA,EAAK,MAAA,EAAQ,OAAA,MAAa,MAAA,EAAQ;AACpD,IAAA,IAAI,CAAC,MAAA,CAAO,EAAA,IAAM,CAAC,OAAA,IAAW,MAAA,CAAO,IAAA,CAAK,MAAA,CAAO,IAAI,CAAA,CAAE,MAAA,KAAW,CAAA,EAAG;AACrE,IAAA,KAAA,MAAW,CAAA,IAAK,OAAA,CAAQ,UAAA,CAAW,MAAA,CAAO,CAAC,CAAA,KAAM,CAAC,CAAA,CAAE,YAAA,IAAgB,CAAC,CAAA,CAAE,SAAS,CAAA,EAAG;AACjF,MAAA,QAAA,CAAS,IAAA,CAAK,CAAA,EAAG,aAAA,CAAc,KAAA,EAAO,QAAQ,CAAC,CAAA,EAAA,EAAK,GAAG,CAAA,GAAA,EAAM,CAAA,CAAE,GAAG,CAAA,SAAA,EAAO,CAAA,CAAE,IAAI,CAAA,CAAE,CAAA;AAAA,IACnF;AAAA,EACF;AACA,EAAA,OAAO,QAAA;AACT;AAKA,eAAe,cAAc,GAAA,EAA+B;AAC1D,EAAA,MAAM,MAAA,GAAS,MAAM,iBAAA,CAAkB,EAAE,YAAY,OAAA,CAAQ,GAAA,IAAO,CAAA;AACpE,EAAA,OAAQ,MAAM,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAA,KAAO,IAAA;AACzC;AAIA,eAAe,WAAA,CAAY,OAAmB,GAAA,EAAoC;AAChF,EAAA,IAAI;AACF,IAAA,OAAO,EAAE,MAAA,EAAQ,MAAM,KAAA,CAAM,GAAG,CAAA,EAAE;AAAA,EACpC,SAAS,GAAA,EAAK;AACZ,IAAA,OAAO,EAAE,OAAO,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAA,EAAE;AAAA,EACnE;AACF;AASA,eAAe,mBAAA,CACb,MAAA,EACA,QAAA,EACA,YAAA,EACA,KAAA,EACqD;AACrD,EAAA,MAAM,SAA8D,EAAC;AACrE,EAAA,KAAA,MAAW,EAAE,KAAA,EAAO,GAAA,EAAK,OAAA,MAAa,MAAA,EAAQ;AAC5C,IAAA,KAAA,MAAW,CAAA,IAAK,OAAA,EAAS,UAAA,IAAc,EAAC,EAAG;AACzC,MAAA,IAAI,CAAC,EAAE,SAAA,EAAW;AAClB,MAAA,MAAA,CAAO,IAAA,CAAK;AAAA,QACV,KAAA,EAAO,CAAA,EAAG,aAAA,CAAc,KAAA,EAAO,QAAQ,CAAC,CAAA,EAAA,EAAK,GAAG,CAAA,GAAA,EAAM,CAAA,CAAE,GAAG,CAAA,CAAA,CAAA;AAAA,QAC3D,IAAA,EAAM,UAAA;AAAA,QACN,KAAK,CAAA,CAAE;AAAA,OACR,CAAA;AAAA,IACH;AAAA,EACF;AACA,EAAA,KAAA,MAAW,KAAK,YAAA,EAAc;AAC5B,IAAA,IAAI,CAAC,EAAE,SAAA,EAAW;AAClB,IAAA,MAAA,CAAO,IAAA,CAAK;AAAA,MACV,KAAA,EAAO,CAAA,EAAG,iBAAiB,CAAA,iBAAA,EAAe,EAAE,KAAK,CAAA,CAAA;AAAA,MACjD,IAAA,EAAM,YAAA;AAAA,MACN,KAAK,CAAA,CAAE;AAAA,KACR,CAAA;AAAA,EACH;AACA,EAAA,MAAM,OAAA,uBAAc,GAAA,EAA0B;AAC9C,EAAA,MAAM,MAAM,EAAE,QAAA,EAAU,EAAC,EAAe,QAAA,EAAU,EAAC,EAAc;AACjE,EAAA,KAAA,MAAW,EAAE,KAAA,EAAO,IAAA,EAAM,GAAA,MAAS,MAAA,EAAQ;AACzC,IAAA,IAAI,MAAA,GAAS,OAAA,CAAQ,GAAA,CAAI,GAAG,CAAA;AAC5B,IAAA,IAAI,WAAW,MAAA,EAAW;AACxB,MAAA,MAAA,GAAS,MAAM,WAAA,CAAY,KAAA,EAAO,GAAG,CAAA;AACrC,MAAA,OAAA,CAAQ,GAAA,CAAI,KAAK,MAAM,CAAA;AAAA,IACzB;AACA,IAAA,IAAI,QAAA,IAAY,MAAA,IAAU,MAAA,CAAO,MAAA,EAAQ;AACzC,IAAA,MAAM,OAAO,CAAA,EAAG,KAAK,CAAA,QAAA,EAAM,IAAI,KAAK,GAAG,CAAA,uCAAA,CAAA;AACvC,IAAA,IAAI,WAAW,MAAA,EAAQ;AACrB,MAAA,GAAA,CAAI,QAAA,CAAS,IAAA;AAAA,QACX,CAAA,EAAG,IAAI,CAAA,mCAAA,EAAsC,MAAA,CAAO,MAAM,KAAA,CAAM,IAAI,CAAA,CAAE,CAAC,CAAC,CAAA,wFAAA;AAAA,OAC1E;AAAA,IACF,CAAA,MAAO;AACL,MAAA,GAAA,CAAI,QAAA,CAAS,IAAA;AAAA,QACX,CAAA,EAAG,IAAI,CAAA,oEAAA,EAAuE,IAAI,iGAA4F,IAAI,CAAA,CAAA;AAAA,OACpL;AAAA,IACF;AAAA,EACF;AACA,EAAA,OAAO,GAAA;AACT;AAQA,SAAS,eAAA,CACP,OAAA,EACA,KAAA,EACA,QAAA,EACA,UACA,MAAA,EACU;AACV,EAAA,MAAM,WAAqB,EAAC;AAC5B,EAAA,IAAI,CAAC,UAAA,CAAW,IAAA,CAAK,OAAA,EAAS,SAAS,CAAC,CAAA,IAAK,CAAC,UAAA,CAAW,IAAA,CAAK,OAAA,EAAS,YAAY,CAAC,CAAA,EAAG;AACrF,IAAA,QAAA,CAAS,IAAA;AAAA,MACP;AAAA,KACF;AAAA,EACF;AACA,EAAA,QAAA,CAAS,IAAA,CAAK,GAAG,aAAA,CAAc,MAAA,EAAQ,QAAQ,CAAC,CAAA;AAChD,EAAA,IAAI,CAAC,QAAA,EAAU;AACb,IAAA,MAAM,MAAA,GAAS,OAAO,KAAA,EAAO,OAAA,EAAS,CAAC,QAAA,EAAU,aAAA,EAAe,uBAAuB,CAAC,CAAA;AACxF,IAAA,IAAI,MAAA,CAAO,WAAW,CAAA,EAAG;AACvB,MAAA,MAAM,SAAS,MAAA,CAAO,MAAA,IAAU,IAAI,QAAA,EAAS,CAAE,MAAM,IAAI,CAAA;AACzD,MAAA,MAAM,YAAY,KAAA,CAAM,MAAA,CAAO,CAAC,CAAA,KAAM,EAAE,UAAA,CAAW,KAAK,CAAC,CAAA,CAAE,IAAI,CAAC,CAAA,KAAM,CAAA,CAAE,KAAA,CAAM,CAAC,CAAC,CAAA;AAChF,MAAA,IAAI,SAAA,CAAU,SAAS,CAAA,EAAG;AACxB,QAAA,MAAM,QAAQ,SAAA,CAAU,KAAA,CAAM,GAAG,oBAAoB,CAAA,CAAE,KAAK,IAAI,CAAA;AAChE,QAAA,MAAM,IAAA,GACJ,UAAU,MAAA,GAAS,oBAAA,GACf,QAAQ,SAAA,CAAU,MAAA,GAAS,oBAAoB,CAAA,KAAA,CAAA,GAC/C,EAAA;AACN,QAAA,QAAA,CAAS,IAAA;AAAA,UACP,GAAG,SAAA,CAAU,MAAM,CAAA,sEAAA,EAAyE,KAAK,GAAG,IAAI,CAAA,CAAA;AAAA,SAC1G;AAAA,MACF;AAEA,MAAA,MAAM,OAAA,GAAU,MACb,MAAA,CAAO,CAAC,MAAM,CAAA,CAAE,MAAA,GAAS,KAAK,CAAC,CAAA,CAAE,WAAW,KAAK,CAAA,IAAK,CAAC,CAAA,CAAE,UAAA,CAAW,KAAK,CAAC,CAAA,CAC1E,GAAA,CAAI,CAAC,CAAA,KAAM;AACV,QAAA,MAAM,IAAA,GAAO,CAAA,CAAE,KAAA,CAAM,CAAA,EAAG,CAAC,CAAA;AACzB,QAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,QAAA,CAAS,GAAG,IAC3B,SAAA,GACA,IAAA,CAAK,QAAA,CAAS,GAAG,IACf,SAAA,GACA,IAAA,CAAK,QAAA,CAAS,GAAG,IACf,OAAA,GACA,UAAA;AACR,QAAA,OAAO,GAAG,KAAK,CAAA,CAAA,EAAI,CAAA,CAAE,KAAA,CAAM,CAAC,CAAC,CAAA,CAAA;AAAA,MAC/B,CAAC,CAAA;AACH,MAAA,IAAI,OAAA,CAAQ,SAAS,CAAA,EAAG;AACtB,QAAA,MAAM,QAAQ,OAAA,CAAQ,KAAA,CAAM,GAAG,oBAAoB,CAAA,CAAE,KAAK,IAAI,CAAA;AAC9D,QAAA,MAAM,IAAA,GACJ,QAAQ,MAAA,GAAS,oBAAA,GACb,QAAQ,OAAA,CAAQ,MAAA,GAAS,oBAAoB,CAAA,KAAA,CAAA,GAC7C,EAAA;AACN,QAAA,QAAA,CAAS,IAAA;AAAA,UACP,GAAG,OAAA,CAAQ,MAAM,CAAA,4EAAA,EAA+E,KAAK,GAAG,IAAI,CAAA,CAAA;AAAA,SAC9G;AAAA,MACF;AAEA,MAAA,MAAM,OAAA,GAAU,MACb,MAAA,CAAO,CAAC,MAAM,CAAA,CAAE,MAAA,GAAS,CAAA,IAAK,CAAC,CAAA,CAAE,UAAA,CAAW,KAAK,CAAA,IAAK,CAAC,EAAE,KAAA,CAAM,CAAA,EAAG,CAAC,CAAA,CAAE,QAAA,CAAS,GAAG,CAAC,CAAA,CAClF,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,MAAM,CAAC,CAAA,CAAE,MAAM,MAAM,CAAA,CAAE,GAAA,EAAI,IAAK,EAAE,CAAA,CAC/C,OAAO,CAAC,IAAA,KAAS,iBAAiB,QAAA,CAAS,IAAA,CAAK,QAAQ,QAAA,EAAU,EAAE,CAAC,CAAC,CAAC,CAAA;AAC1E,MAAA,IAAI,OAAA,CAAQ,SAAS,CAAA,EAAG;AACtB,QAAA,QAAA,CAAS,IAAA;AAAA,UACP,GAAG,OAAA,CAAQ,MAAM,qFAAqF,OAAA,CAAQ,IAAA,CAAK,IAAI,CAAC,CAAA,wCAAA;AAAA,SAC1H;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,EAAA,OAAO,QAAA;AACT;AAMA,IAAM,oBAAA,GACJ,6PAAA;AAQF,SAAS,eAAA,CAAgB,IAAA,EAAc,KAAA,EAAkB,SAAA,EAA4B;AACnF,EAAA,MAAM,GAAA,GAAM,KAAA,CAAM,IAAA,EAAM,CAAC,MAAA,EAAQ,UAAU,IAAA,EAAM,SAAA,GAAY,WAAA,GAAc,UAAU,CAAA,EAAG;AAAA,IACtF,QAAA,EAAU;AAAA,GACX,CAAA;AACD,EAAA,IAAI,GAAA,CAAI,WAAW,CAAA,EAAG;AACpB,IAAA,MAAM,UAAU,GAAA,CAAI,MAAA,IAAU,EAAA,EAAI,QAAA,GAAW,IAAA,EAAK;AAClD,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,eAAA,EAAkB,IAAI,CAAA,SAAA,EAAY,UAAU,CAAA,KAAA,EAAQ,GAAA,CAAI,MAAM,CAAA,CAAE,CAAA,CAAE,CAAA;AAAA,EACpF;AAIA,EAAA,MAAM,GAAA,GAAM,CAAA,EAAG,GAAA,CAAI,MAAA,IAAU,EAAE;AAAA,EAAK,GAAA,CAAI,UAAU,EAAE,CAAA,CAAA;AACpD,EAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,KAAA,CAAM,+BAA+B,CAAA;AACvD,EAAA,IAAI,CAAC,KAAA,EAAO;AACV,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,eAAA,EAAkB,IAAI,CAAA;AAAA,EAAwC,GAAA,CAAI,IAAA,EAAM,CAAA,CAAE,CAAA;AAAA,EAC5F;AACA,EAAA,OAAO,MAAM,CAAC,CAAA,CAAE,QAAQ,QAAA,EAAU,EAAE,EAAE,IAAA,EAAK;AAC7C;AAUA,SAAS,oBAAoB,GAAA,EAA6B;AACxD,EAAA,MAAM,CAAC,MAAM,GAAG,QAAQ,IAAI,GAAA,CAAI,IAAA,EAAK,CAAE,KAAA,CAAM,GAAG,CAAA;AAChD,EAAA,MAAM,GAAA,GAAM,QAAA,CAAS,IAAA,CAAK,GAAG,CAAA,IAAK,MAAA;AAClC,EAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA;AAC9B,EAAA,MAAM,OAAO,KAAA,GAAQ,CAAA,GAAI,KAAK,KAAA,CAAM,CAAA,EAAG,KAAK,CAAA,GAAI,MAAA;AAChD,EAAA,MAAM,OAAO,KAAA,GAAQ,CAAA,GAAI,KAAK,KAAA,CAAM,KAAA,GAAQ,CAAC,CAAA,GAAI,IAAA;AACjD,EAAA,MAAM,MAAA,GAAS,KAAK,UAAA,CAAW,GAAG,IAAI,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA,GAAI,EAAA;AAC1D,EAAA,MAAM,YAAY,MAAA,GAAS,CAAA,GAAI,KAAK,KAAA,CAAM,CAAA,EAAG,MAAM,CAAA,GAAI,MAAA;AACvD,EAAA,MAAM,OAAO,MAAA,GAAS,CAAA,GAAI,KAAK,KAAA,CAAM,MAAA,GAAS,CAAC,CAAA,GAAI,IAAA;AACnD,EAAA,OAAO,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,GAAA,EAAI;AACtC;AAGA,SAAS,eAAA,CAAgB,UAA6B,GAAA,EAAmC;AACvF,EAAA,OAAA,CAAQ,QAAA,CAAS,MAAA,IAAU,EAAC,EAAG,MAAA;AAAA,IAC7B,CAAC,MACC,CAAA,CAAE,IAAA,KAAS,IAAI,IAAA,KACd,CAAC,IAAI,IAAA,IAAQ,CAAA,CAAE,SAAS,GAAA,CAAI,IAAA,CAAA,KAC5B,CAAC,GAAA,CAAI,SAAA,IAAa,eAAe,CAAA,EAAG,QAAQ,MAAM,GAAA,CAAI,SAAA;AAAA,GAC3D;AACF;AAUA,eAAe,qBAAA,CACb,OAAA,EACA,QAAA,EACA,OAAA,EACA,YACA,WAAA,EACmB;AACnB,EAAA,MAAM,WAAqB,EAAC;AAC5B,EAAA,MAAM,WAAW,eAAA,EAAgB;AACjC,EAAA,MAAM,WAAW,MAAM,kBAAA;AAAA,IACrB,OAAA;AAAA,IACA,SAAS,SAAA,IAAa,OAAA;AAAA,IACtB,QAAA;AAAA,IACA;AAAA,GACF;AACA,EAAA,KAAA,MAAW,KAAK,QAAA,EAAU;AACxB,IAAA,IAAI,UAAA,IAAc,CAAA,CAAE,KAAA,CAAM,IAAA,KAAS,UAAA,EAAY;AAC/C,IAAA,MAAM,GAAA,GAAM,QAAA,CAAS,OAAA,EAAS,CAAA,CAAE,MAAM,MAAM,CAAA;AAC5C,IAAA,IAAI,EAAE,YAAA,EAAc;AAClB,MAAA,QAAA,CAAS,IAAA;AAAA,QACP,qBAAA;AAAA,UACE,EAAE,KAAA,CAAM,IAAA;AAAA,UACR,EAAE,KAAA,CAAM,IAAA;AAAA,UACR,CAAA,CAAE,IAAA;AAAA,UACF,CAAA,uBAAA,EAA0B,EAAE,YAAY,CAAA,CAAA,CAAA;AAAA,UACxC;AAAA;AACF,OACF;AACA,MAAA;AAAA,IACF;AACA,IAAA,IAAI,EAAE,YAAA,EAAc;AAElB,MAAA,QAAA,CAAS,IAAA;AAAA,QACP,GAAG,CAAA,CAAE,KAAA,CAAM,IAAI,CAAA,CAAA,EAAI,CAAA,CAAE,MAAM,IAAI,CAAA,EAAA,EAAK,GAAG,CAAA,GAAA,EAAM,EAAE,KAAA,CAAM,IAAI,YAAO,sBAAA,CAAuB,CAAA,CAAE,YAAY,CAAC,CAAA;AAAA,OACxG;AACA,MAAA;AAAA,IACF;AACA,IAAA,MAAM,MAAA,GAAS,cAAA,CAAe,CAAA,CAAE,KAAA,CAAM,MAAA,EAAQ,EAAE,KAAA,CAAM,IAAA,EAAM,QAAA,EAAU,OAAA,EAAS,WAAW,CAAA;AAC1F,IAAA,KAAA,MAAW,CAAA,IAAK,MAAA;AACd,MAAA,QAAA,CAAS,KAAK,CAAA,EAAG,CAAA,CAAE,KAAA,CAAM,IAAI,IAAI,CAAA,CAAE,KAAA,CAAM,IAAI,CAAA,EAAA,EAAK,GAAG,CAAA,GAAA,EAAM,CAAA,CAAE,GAAG,CAAA,SAAA,EAAO,CAAA,CAAE,IAAI,CAAA,CAAE,CAAA;AACjF,IAAA,IAAI,MAAA,CAAO,WAAW,CAAA,EAAG;AACvB,MAAA,QAAA,CAAS,IAAA;AAAA,QACP,CAAA,EAAG,CAAA,CAAE,KAAA,CAAM,IAAI,CAAA,CAAA,EAAI,CAAA,CAAE,KAAA,CAAM,IAAI,CAAA,EAAA,EAAK,GAAG,CAAA,yFAAA,EAA4F,OAAO,CAAA,GAAA;AAAA,OAC5I;AAAA,IACF;AAAA,EACF;AACA,EAAA,OAAO,QAAA;AACT;AAGA,eAAe,cAAA,CACb,IAAA,EACA,IAAA,EAUA,MAAA,EACA,QAAmB,SAAA,EACJ;AACf,EAAA,gBAAA,CAAiB,KAAK,KAAK,CAAA;AAC3B,EAAA,MAAM,WAAW,MAAA,KAAW,MAAA;AAC5B,EAAA,MAAM,EAAE,OAAA,EAAS,KAAA,EAAM,GAAI,MAAM,kBAAA,EAAmB;AACpD,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,OAAA,CAAQ,iBAAA,CAAkB,IAAI,CAAA;AAChD,IAAA,MAAM,QAAA,GAAW,YAAA,CAAa,GAAA,CAAI,IAAI,CAAA;AAItC,IAAA,+BAAA,CAAgC,GAAA,CAAI,MAAM,IAAI,CAAA;AAE9C,IAAA,qBAAA,CAAsB,GAAA,CAAI,IAAA,EAAM,CAAA,uBAAA,EAA0B,IAAI,CAAA,CAAE,CAAA;AAEhE,IAAA,0BAAA,CAA2B,GAAA,CAAI,IAAA,EAAM,CAAA,uBAAA,EAA0B,IAAI,CAAA,CAAE,CAAA;AAIrE,IAAA,MAAM,OAAA,GAAU,iBAAA,CAAkB,GAAA,CAAI,IAAA,EAAM,QAAQ,CAAA;AACpD,IAAA,IAAI,OAAA,CAAQ,SAAS,CAAA,EAAG;AACtB,MAAA,KAAA,MAAW,KAAK,OAAA,EAAS;AACvB,QAAA,MAAA,CAAO,CAAA,EAAG,cAAc,CAAA,EAAG,QAAQ,CAAC,CAAA,cAAA,EAAY,CAAA,CAAE,IAAI,CAAA,gCAAA,CAAkC,CAAA;AAAA,MAC1F;AACA,MAAA,MAAA;AAAA,QACE,oFAC4B,IAAI,CAAA,+CAAA;AAAA,OAClC;AACA,MAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,IAChB;AAGA,IAAA,MAAM,YAAY,IAAA,CAAK,KAAA,GAAQ,mBAAA,CAAoB,IAAA,CAAK,KAAK,CAAA,GAAI,KAAA,CAAA;AACjE,IAAA,IAAI,IAAA,CAAK,SAAS,SAAA,IAAa,eAAA,CAAgB,UAAU,SAAS,CAAA,CAAE,WAAW,CAAA,EAAG;AAChF,MAAA,MAAM,MAAA,GAAA,CAAU,QAAA,CAAS,MAAA,IAAU,EAAC,EAAG,GAAA,CAAI,CAAC,CAAA,KAAM,aAAA,CAAc,CAAA,EAAG,QAAQ,CAAC,CAAA;AAC5E,MAAA,MAAA;AAAA,QACE,CAAA,kBAAA,EAAqB,IAAA,CAAK,KAAK,CAAA,cAAA,EAAiB,IAAI,CAAA,CAAA,CAAA,IACjD,MAAA,CAAO,MAAA,GAAS,CAAA,GACb,CAAA,sBAAA,EAAyB,MAAA,CAAO,IAAA,CAAK,IAAI,CAAC,CAAA,EAAA,CAAA,GAC1C,kCAAA;AAAA,OACR;AACA,MAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,IAChB;AAIA,IAAA,IAAI,IAAA,CAAK,QAAQ,KAAA,CAAA,EAAW,gBAAA,CAAiB,IAAI,IAAA,EAAM,IAAA,EAAM,IAAA,CAAK,GAAA,EAAK,KAAK,CAAA;AAI5E,IAAA,IAAI,SAAA,GAAY,YAAY,GAAG,CAAA;AAC/B,IAAA,IAAI,eAAA,GAAkB,KAAA;AACtB,IAAA,IAAI,IAAA,CAAK,OAAA,IAAW,CAAC,IAAA,CAAK,UAAA,EAAY;AACpC,MAAA,MAAA;AAAA,QACE;AAAA,OACF;AACA,MAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,IAChB;AACA,IAAA,MAAM,UAAA,GAAa,IAAA,CAAK,OAAA,GAAU,SAAA,GAAY,QAAA;AAC9C,IAAA,IAAI,CAAC,SAAA,EAAW;AACd,MAAA,IAAI,KAAK,UAAA,EAAY;AACnB,QAAA,IAAI,IAAA,CAAK,OAAA,EAAS,OAAA,CAAQ,oBAAoB,CAAA;AAC9C,QAAA,IAAI,KAAK,MAAA,EAAQ;AAGf,UAAA,eAAA,GAAkB,IAAA;AAClB,UAAA,SAAA,GAAY,CAAA,kCAAA,EAAqC,IAAI,IAAI,CAAA,CAAA;AAAA,QAC3D,CAAA,MAAO;AACL,UAAA,SAAA,GAAY,gBAAgB,GAAA,CAAI,IAAA,EAAM,KAAA,EAAO,IAAA,CAAK,YAAY,IAAI,CAAA;AAClE,UAAA,MAAM,OAAA,CAAQ,cAAc,IAAA,EAAM;AAAA,YAChC,OAAA,EAAS,KAAA;AAAA,YACT,eAAe,EAAE,GAAA,EAAK,WAAW,MAAA,EAAQ,MAAA,EAAQ,UAAU,KAAA;AAAM,WAClE,CAAA;AACD,UAAA,KAAA,CAAM,oBAAoB,CAAA,CAAE,GAAA,CAAI,SAAS,CAAC,CAAA,EAAA,EAAK,UAAU,CAAA,EAAA,CAAI,CAAA;AAAA,QAC/D;AAAA,MACF,CAAA,MAAO;AACL,QAAA,MAAA;AAAA,UACE,CAAA,SAAA,EAAY,IAAI,CAAA,2BAAA,EAAyB,CAAA,CAAE,IAAI,CAAA,oBAAA,EAAuB,IAAI,QAAQ,CAAC,CAAA,6DAAA;AAAA,SAErF;AACA,QAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,MAChB;AAAA,IACF,CAAA,MAAA,IAAW,CAAC,cAAA,CAAe,SAAS,CAAA,EAAG;AAIrC,MAAA,MAAA,CAAO,sBAAA,CAAuB,IAAA,EAAM,SAAS,CAAC,CAAA;AAC9C,MAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,IAChB;AAIA,IAAA,MAAM,aAAa,IAAA,CAAK,KAAA,GAAQ,QAAA,CAAS,IAAA,CAAK,KAAK,CAAA,GAAI,KAAA,CAAA;AACvD,IAAA,MAAM,UAAA,GAAa,kBAAA,CAAmB,QAAA,EAAU,UAAU,CAAA;AAK1D,IAAA,MAAM,WAAA,GAAc,iBAAA;AAAA,MAClB,cAAA,CAAe,IAAI,IAAI,CAAA;AAAA,MACvB,MAAM,mBAAA,CAAoB,GAAA,CAAI,IAAI,CAAA;AAAA,MAClC,QAAA,CAAS;AAAA,KACX;AACA,IAAA,MAAM,SAAS,UAAA,CAAW,GAAA,CAAI,IAAA,EAAM,QAAA,EAAU,YAAY,WAAW,CAAA;AACrE,IAAA,MAAM,cAAc,WAAA,CAAY,wBAAA,CAAyB,QAAA,EAAU,MAAM,GAAG,UAAU,CAAA;AACtF,IAAA,MAAM,QAAA,GAAW,MAAM,qBAAA,CAAsB,GAAA,CAAI,MAAM,QAAA,EAAU,IAAA,EAAM,YAAY,WAAW,CAAA;AAE9F,IAAA,MAAM,mBAAmB,wBAAA,CAAyB,GAAA,CAAI,IAAI,CAAA,CACvD,OAAO,CAAC,CAAA,KAAM,CAAC,UAAA,IAAc,EAAE,KAAA,CAAM,QAAA,CAAS,IAAI,UAAU,CAAA,CAAE,CAAC,CAAA,CAC/D,GAAA;AAAA,MACC,CAAC,MACC,CAAA,EAAG,iBAAiB,oBAAe,CAAA,CAAE,KAAK,CAAA,EAAA,EAAK,CAAA,CAAE,OAAO,CAAA,oDAAA;AAAA,KAE5D;AAEF,IAAA,MAAM,kBAAA,GAAA,CAAsB,MAAM,0BAAA,CAA2B,GAAA,CAAI,IAAI,CAAA,EAAG,MAAA;AAAA,MACtE,CAAC,CAAA,KAAM,CAAA,CAAE,SAAA,KAAc,CAAC,UAAA,IAAc,CAAA,CAAE,KAAA,CAAM,QAAA,CAAS,CAAA,CAAA,EAAI,UAAU,CAAA,CAAE,CAAA;AAAA,KACzE;AACA,IAAA,MAAM,gBAAgB,MAAM,mBAAA;AAAA,MAC1B,MAAA;AAAA,MACA,QAAA;AAAA,MACA,kBAAA;AAAA,MACA,KAAK,UAAA,IAAc;AAAA,KACrB;AACA,IAAA,MAAM,QAAA,GAAW;AAAA,MACf,GAAG,aAAA,CAAc,MAAA,EAAQ,QAAQ,CAAA;AAAA,MACjC,GAAG,gBAAA;AAAA,MACH,GAAG,QAAA;AAAA,MACH,GAAG,aAAA,CAAc;AAAA,KACnB;AACA,IAAA,IAAI,SAAA,EAAW,QAAQ,KAAA,CAAA,EAAW;AAChC,MAAA,MAAM,OAAO,eAAA,CAAgB,QAAA,EAAU,SAAS,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,KAAM;AAC3D,QAAA,MAAM,UAAU,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,UAAU,CAAC,CAAA;AAChD,QAAA,MAAM,WAAA,GAAc,SAAS,MAAA,CAAO,EAAA,GAAK,gBAAgB,OAAA,CAAQ,MAAA,CAAO,IAAI,CAAA,GAAI,KAAA,CAAA;AAChF,QAAA,OAAO,WAAA,IAAe,CAAA,CAAE,OAAA,IAAW,QAAA,CAAS,OAAA;AAAA,MAC9C,CAAC,CAAA;AACD,MAAA,IAAI,CAAC,IAAA,CAAK,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,KAAM,KAAA,CAAA,IAAa,QAAA,CAAS,SAAA,CAAU,GAAA,EAAK,CAAC,CAAC,CAAA,EAAG;AACpE,QAAA,MAAA;AAAA,UACE,GAAG,IAAA,CAAK,KAAK,CAAA,oBAAA,EAAuB,IAAA,CAAK,OAAO,CAAC,CAAA,KAAM,CAAC,CAAA,CAAE,KAAK,IAAI,CAAA,IAAK,YAAY,CAAA,qBAAA,EAAwB,UAAU,GAAG,CAAA,yFAAA;AAAA,SAE3H;AACA,QAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,MAChB;AAAA,IACF;AACA,IAAA,IAAI,QAAA,CAAS,SAAS,CAAA,EAAG;AACvB,MAAA,KAAA,MAAW,CAAA,IAAK,QAAA,EAAU,MAAA,CAAO,CAAC,CAAA;AAClC,MAAA,MAAA;AAAA,QACE,yGAC4B,IAAI,CAAA,cAAA;AAAA,OAClC;AACA,MAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,IAChB;AAMA,IAAA,MAAM,KAAA,GAAQ,YAAA,CAAa,MAAA,EAAQ,QAAQ,CAAA;AAC3C,IAAA,IAAI,KAAA,CAAM,MAAA,GAAS,CAAA,IAAK,IAAA,CAAK,QAAA,EAAU;AACrC,MAAA,KAAA,MAAW,CAAA,IAAK,KAAA,EAAO,MAAA,CAAO,aAAA,CAAc,CAAC,CAAC,CAAA;AAC9C,MAAA,MAAA;AAAA,QACE,mJAC8D,IAAI,CAAA,iCAAA;AAAA,OACpE;AACA,MAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,IAChB;AAEA,IAAA,MAAM,SAAA,GAAY,IAAA,CAAK,GAAA,IAAO,QAAA,CAAS,GAAG,CAAA;AAC1C,IAAA,MAAM,QAAA,GAAW;AAAA,MACf,GAAG,gBAAgB,GAAA,CAAI,IAAA,EAAM,OAAO,IAAA,CAAK,QAAA,EAAU,UAAU,MAAM,CAAA;AAAA,MACnE,GAAG,aAAA,CAAc;AAAA,KACnB;AAEA,IAAA,IAAI,KAAK,MAAA,EAAQ;AACf,MAAA,OAAA,CAAQ,CAAA,iBAAA,EAAoB,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA,CAAG,CAAA;AAC3C,MAAA,OAAA;AAAA,QACE,CAAA,cAAA,EAAiB,SAAS,CAAA,EAAG,eAAA,GAAkB,uBAAuB,UAAU,CAAA,wBAAA,EAA2B,UAAU,CAAA,GAAA,CAAA,GAAQ,EAAE,CAAA;AAAA,OACjI;AACA,MAAA,OAAA;AAAA,QACE,CAAA,cAAA,EAAiB,WAAW,MAAA,GAAS,CAAA,GAAI,WAAW,IAAA,CAAK,IAAI,IAAI,sBAAsB,CAAA;AAAA,OACzF;AAGA,MAAA,MAAM,QAAA,GAAW,YAAY,oBAAA,EAAqB;AAClD,MAAA,IAAI,CAAC,QAAA,EAAU;AAEb,QAAA,OAAA,CAAQ,mEAAmE,CAAA;AAAA,MAC7E,CAAA,MAAA,IAAW,UAAA,CAAW,MAAA,GAAS,CAAA,EAAG;AAChC,QAAA,KAAA,MAAW,MAAM,UAAA,EAAY;AAC3B,UAAA,IAAI;AACF,YAAA,MAAM,QAAQ,MAAA,CAAO,MAAA,IAAU,uBAAA,EAAwB,EAAG,sBAAsB,EAAE,CAAA;AAClF,YAAA,MAAM,SAAS,UAAA,CAAW,MAAA,GAAS,CAAA,GAAI,CAAA,CAAA,EAAI,EAAE,CAAA,QAAA,CAAA,GAAQ,EAAA;AACrD,YAAA,OAAA,CAAQ,iBAAiB,MAAM,CAAA,EAAG,2BAAA,CAA4B,KAAK,CAAC,CAAA,CAAE,CAAA;AAAA,UACxE,CAAA,CAAA,MAAQ;AAAA,UAER;AAAA,QACF;AAAA,MACF;AACA,MAAA,OAAA,CAAQ,CAAA,cAAA,EAAiB,SAAS,CAAA,CAAE,CAAA;AACpC,MAAA,OAAA,CAAQ,CAAA,gBAAA,EAAmB,WAAA,CAAY,MAAM,CAAA,UAAA,CAAY,CAAA;AACzD,MAAA,KAAA,MAAW,CAAA,IAAK,WAAA,EAAa,OAAA,CAAQ,CAAA,IAAA,EAAO,CAAC,CAAA,CAAE,CAAA;AAC/C,MAAA,KAAA,MAAW,KAAK,KAAA,EAAO,OAAA,CAAQ,gCAAgC,aAAA,CAAc,CAAC,CAAC,CAAA,CAAE,CAAA;AACjF,MAAA,KAAA,MAAW,CAAA,IAAK,QAAA,EAAU,OAAA,CAAQ,CAAC,CAAA;AACnC,MAAA;AAAA,IACF;AAGA,IAAA,KAAA,MAAW,CAAA,IAAK,QAAA,EAAU,OAAA,CAAQ,CAAC,CAAA;AAGnC,IAAA,IAAI,CAAC,QAAA,IAAY,CAAC,oBAAA,EAAqB,EAAG;AACxC,MAAA,MAAA,CAAO,sDAAiD,CAAA;AACxD,MAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,IAChB;AAEA,IAAA,MAAM,GAAA,GAAM,UAAU,uBAAA,EAAwB;AAI9C,IAAA,KAAA,MAAW,MAAM,UAAA,EAAY;AAC3B,MAAA,MAAM,IAAA,GAAO,MAAM,kBAAA,CAAmB,GAAA,EAAK,EAAE,CAAA;AAC7C,MAAA,IAAI,CAAC,KAAK,EAAA,EAAI;AACZ,QAAA,MAAA,CAAO,IAAA,CAAK,OAAA,IAAW,CAAA,sBAAA,EAAyB,EAAE,CAAA,CAAA,CAAG,CAAA;AACrD,QAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,MAChB;AAAA,IACF;AAGA,IAAA,KAAA,MAAW,KAAK,KAAA,EAAO;AACrB,MAAA,mBAAA,CAAoB,IAAI,IAAA,EAAM;AAAA,QAC5B,IAAA,EAAM,CAAA,CAAE,KAAA,CAAM,KAAA,CAAM,IAAA;AAAA,QACpB,IAAA,EAAM,CAAA,CAAE,KAAA,CAAM,KAAA,CAAM,IAAA;AAAA,QACpB,IAAA,EAAM,CAAA,CAAE,KAAA,CAAM,KAAA,CAAM,IAAA,IAAQ,EAAA;AAAA,QAC5B,SAAS,CAAA,CAAE;AAAA,OACZ,CAAA;AACD,MAAA,OAAA,CAAQ,CAAA,sBAAA,EAAyB,aAAA,CAAc,CAAC,CAAC,CAAA,CAAE,CAAA;AAAA,IACrD;AAGA,IAAA,IAAI,CAAC,KAAK,QAAA,EAAU;AAGlB,MAAA,OAAA;AAAA,QACE,CAAA,wDAAA,EAA2D,CAAA,CAAE,GAAA,CAAI,SAAS,CAAC,CAAA,wEAAA;AAAA,OAE7E;AACA,MAAA,aAAA,CAAc,EAAE,OAAA,EAAS,GAAA,CAAI,IAAA,EAAM,SAAA,EAAW,QAAQ,QAAA,CAAS,GAAG,CAAA,EAAG,KAAA,EAAO,CAAA;AAC5E,MAAA,KAAA,CAAM,CAAA,OAAA,EAAU,CAAA,CAAE,GAAA,CAAI,IAAI,CAAC,OAAO,CAAA,CAAE,GAAA,CAAI,SAAS,CAAC,CAAA,CAAA,CAAG,CAAA;AAAA,IACvD;AAEA,IAAA,MAAM,EAAE,SAAA,EAAU,GAAI,MAAM,cAAA,CAAe;AAAA,MACzC,SAAA,EAAW,SAAA;AAAA,MACX,GAAA,EAAK,SAAA;AAAA,MACL,QAAA,EAAU,wBAAA,CAAyB,QAAA,EAAU,MAAM,CAAA;AAAA,MACnD,SAAA,EAAW,UAAA;AAAA,MACX,MAAA,EAAQ;AAAA,KACT,CAAA;AAED,IAAA,IAAI,SAAA,CAAU,SAAS,CAAA,EAAG;AACxB,MAAA,OAAA,CAAQ,CAAA,+BAAA,EAAkC,SAAA,CAAU,CAAC,CAAC,CAAA,GAAA,CAAK,CAAA;AAAA,IAC7D;AAAA,EACF,CAAA,SAAE;AACA,IAAA,KAAA,EAAM;AAAA,EACR;AACF;AAOA,eAAsB,iBAAA,CACpB,IAAA,EACA,IAAA,EAQA,MAAA,EACA,QAAmB,SAAA,EACJ;AACf,EAAA,MAAM,cAAA,CAAe,MAAM,EAAE,GAAG,MAAM,QAAA,EAAU,KAAA,EAAM,EAAG,MAAA,EAAQ,KAAK,CAAA;AACxE;AAOA,eAAsB,kBAAA,CACpB,IAAA,EACA,IAAA,EACA,MAAA,EACA,QAAmB,SAAA,EACJ;AACf,EAAA,MAAM,cAAA,CAAe,MAAM,EAAE,GAAG,MAAM,QAAA,EAAU,IAAA,EAAK,EAAG,MAAA,EAAQ,KAAK,CAAA;AACvE;AAOA,eAAsB,cAAA,CACpB,IAAA,EACA,IAAA,EACA,MAAA,EACe;AACf,EAAA,gBAAA,CAAiB,KAAK,KAAK,CAAA;AAC3B,EAAA,MAAM,WAAW,MAAA,KAAW,MAAA;AAC5B,EAAA,MAAM,EAAE,OAAA,EAAS,KAAA,EAAM,GAAI,MAAM,kBAAA,EAAmB;AACpD,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,OAAA,CAAQ,cAAA,CAAe,IAAI,CAAA;AAC7C,IAAA,MAAM,SAAA,GAAY,YAAY,GAAG,CAAA;AACjC,IAAA,IAAI,CAAC,SAAA,EAAW;AACd,MAAA,MAAA,CAAO,CAAA,SAAA,EAAY,IAAI,CAAA,iDAAA,CAA8C,CAAA;AACrE,MAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,IAChB;AAEA,IAAA,IAAI,CAAC,QAAA,IAAY,CAAC,oBAAA,EAAqB,EAAG;AACxC,MAAA,MAAA,CAAO,sDAAiD,CAAA;AACxD,MAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,IAChB;AAEA,IAAA,MAAM,GAAA,GAAM,UAAU,uBAAA,EAAwB;AAC9C,IAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,WAAA,EAAY;AACnC,IAAA,MAAM,SAAS,IAAA,CAAK,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,QAAQ,SAAS,CAAA;AACnD,IAAA,IAAI,CAAC,MAAA,EAAQ;AACX,MAAA,MAAA,CAAO,CAAA,SAAA,EAAY,IAAI,CAAA,wDAAA,CAAqD,CAAA;AAC5E,MAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,IAChB;AAEA,IAAA,MAAM,aAAa,IAAA,CAAK,KAAA,GAAQ,QAAA,CAAS,IAAA,CAAK,KAAK,CAAA,GAAI,KAAA,CAAA;AACvD,IAAA,MAAM,cAAc,MAAM,GAAA,CAAI,gBAAA,CAAiB,MAAA,CAAO,EAAE,CAAA,EAAG,MAAA;AAAA,MACzD,CAAC,CAAA,KAAM,CAAA,CAAE,cAAc,CAAC,UAAA,IAAc,EAAE,IAAA,KAAS,UAAA;AAAA,KACnD;AACA,IAAA,IAAI,UAAA,CAAW,WAAW,CAAA,EAAG;AAC3B,MAAA,OAAA,CAAQ,qDAAgD,CAAA;AACxD,MAAA;AAAA,IACF;AAKA,IAAA,MAAM,QAAA,GAAW,qBAAA,CAAsB,GAAA,CAAI,IAAI,CAAA;AAC/C,IAAA,MAAM,SAAmB,EAAC;AAC1B,IAAA,KAAA,MAAW,KAAK,UAAA,EAAY;AAC1B,MAAA,IAAI;AACF,QAAA,MAAM,GAAA,CAAI,cAAA,CAAe,CAAA,CAAE,EAAE,CAAA;AAC7B,QAAA,MAAM,KAAA,GAAQ,QAAA,EAAU,MAAA,EAAQ,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,KAAS,CAAA,CAAE,IAAA,IAAQ,CAAA,CAAE,IAAA,KAAS,EAAE,IAAI,CAAA;AAClF,QAAA,MAAM,KAAK,QAAA,IAAY,KAAA,GAAQ,cAAA,CAAe,KAAA,EAAO,QAAQ,CAAA,GAAI,KAAA,CAAA;AACjE,QAAA,MAAA,CAAO,KAAK,EAAA,GAAK,MAAA,CAAO,CAAA,CAAE,IAAA,EAAM,IAAI,CAAA,CAAE,IAAA,EAAM,CAAA,CAAE,OAAO,IAAI,CAAA,EAAG,CAAA,CAAE,IAAI,CAAA,CAAA,EAAI,CAAA,CAAE,IAAI,CAAA,CAAE,CAAA;AAAA,MAChF,SAAS,GAAA,EAAK;AACZ,QAAA,MAAA;AAAA,UACE,CAAA,eAAA,EAAkB,CAAA,CAAE,IAAI,CAAA,CAAA,EAAI,CAAA,CAAE,IAAI,CAAA,EAAA,EAAK,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA;AAAA,SACzF;AAAA,MACF;AAAA,IACF;AAEA,IAAA,KAAA,CAAM,CAAA,OAAA,EAAU,MAAA,CAAO,MAAM,CAAA,UAAA,CAAY,CAAA;AACzC,IAAA,KAAA,MAAW,CAAA,IAAK,MAAA,EAAQ,OAAA,CAAQ,CAAA,EAAA,EAAK,CAAC,CAAA,CAAE,CAAA;AAAA,EAC1C,CAAA,SAAE;AACA,IAAA,KAAA,EAAM;AAAA,EACR;AACF","file":"library-publish-XMRCKRNR.js","sourcesContent":["/**\n * `skaile library publish / register / yank` — the first-party publish flow.\n * A git-backed library you own carries an in-repo `skaile.manifest.yaml`; this\n * commits + pushes the library repo (publish), or takes the current remote HEAD\n * as-is (register), then registers + syncs it as a store source and publishes\n * the manifest's assets, each under its own namespace — `assets[].publisher`,\n * else the manifest's top-level `publisher` (no namespace remap — first-party\n * authors intend their declared namespace). Every distinct namespace is\n * preflighted before the push. The plan phase (dry-run and real) also requires the\n * remote to be a GitHub url and warns about a missing LICENSE and, for `publish`,\n * untracked files that `git add -A` would make public.\n *\n *   - `publish`  = commit (if dirty) + push + register + sync + publish.\n *   - `register` = same, but skip the commit/push (bytes already on GitHub).\n *   - `yank`     = unpublish the library's published assets (all, or one).\n *\n * The store REST surface is reached through the injectable {@link PublisherClient}\n * (default HTTP); git side-effects go through an injectable `spawn`. Both seams\n * keep the flow unit/integration-testable without a live store or a real remote.\n *\n * @docLink cli/commands/library\n */\n\nimport { spawnSync } from \"node:child_process\";\nimport { existsSync, readFileSync } from \"node:fs\";\nimport { basename, dirname, join, relative, sep } from \"node:path\";\nimport {\n  type AssetEntry,\n  decodeSkaileManifest,\n  loadSkPublishManifest,\n  matchPin,\n  type SkPublishManifest,\n  readAssetBody,\n} from \"@skaile/workspaces/core\";\nimport { isSecretFileName } from \"@skaile/workspaces/core/publish-manifest\";\nimport { type ParseManifestResult, parseManifestFile } from \"@skaile/workspaces/discovery\";\nimport {\n  type GitBackendConfig,\n  type Library,\n  missingRootAssets,\n  scanUnlistedAssets,\n  UNLISTED_SCAN_SKIP_DIRS,\n  upsertManifestAsset,\n} from \"@skaile/workspaces/library\";\nimport { type ComposeRefContext, composeRefContext } from \"../agent-checks.ts\";\nimport { logErr, logInfo, logOk, logWarn, S } from \"../helpers.ts\";\nimport { openCatalogSource, openLibraryManager } from \"../open-library.ts\";\nimport { getKindRegistry } from \"../open-registry.ts\";\nimport {\n  type AssetCheckResult,\n  checkAsset,\n  checkAssetFile,\n  declaredVersion,\n  duplicateAssetMessage,\n  findEntryManifestFile,\n  invalidSemverText,\n  manifestParseErrorText,\n} from \"../skill-checks.ts\";\nimport { isStoreAuthenticated } from \"../store-client.ts\";\nimport { makeHttpPublisherClient, type PublisherClient } from \"../store-publisher.ts\";\nimport {\n  exitOnLibrarySymlinks,\n  exitOnManifestPublisherProblems,\n  exitOnManifestPathProblems,\n  type ManifestDependencyProblem,\n  manifestDependencyProblems,\n  manifestRequiresProblems,\n  registeredAssetKeys,\n} from \"./library-index.ts\";\nimport { scanIdentities } from \"./validate.ts\";\nimport {\n  assetEntryRef,\n  assetNamespace,\n  bareName,\n  exitOnEmptyAsset,\n  formatNamespaceAvailability,\n  manifestNamespaces,\n  plannedRefs,\n  preflightNamespace,\n  publishToStore,\n  refFor,\n} from \"./publish-core.ts\";\n\n/** Injectable spawn contract — the subset of `spawnSync` these helpers use. */\ntype SpawnLike = typeof spawnSync;\n\n/** The fixed filename a library carries at its root for publication. */\nconst MANIFEST_FILENAME = \"skaile.manifest.yaml\";\n\n/** The remote url of a git-backed library, or `undefined` for a local one. */\nfunction remoteUrlOf(lib: Library): string | undefined {\n  if (lib.backend !== \"git\") return undefined;\n  return (lib.backendConfig as GitBackendConfig).url;\n}\n\n/** The publish branch of a git-backed library (defaults to `main`). */\nfunction branchOf(lib: Library): string {\n  if (lib.backend !== \"git\") return \"main\";\n  return (lib.backendConfig as GitBackendConfig).branch ?? \"main\";\n}\n\n/**\n * Read + decode the in-repo `skaile.manifest.yaml`. Prints each error\n * diagnostic and exits (1) — mirroring the sidecar flow's validation gate.\n */\nfunction loadManifest(libPath: string): SkPublishManifest {\n  let text: string;\n  try {\n    text = readFileSync(join(libPath, MANIFEST_FILENAME), \"utf-8\");\n  } catch {\n    logErr(\n      `No ${S.dim(MANIFEST_FILENAME)} in the library — author it (see \\`skaile library create\\`) ` +\n        \"and run `skaile validate` before publishing.\",\n    );\n    process.exit(1);\n  }\n  const { manifest, diagnostics } = decodeSkaileManifest(text);\n  const errors = diagnostics.filter((d) => d.severity === \"error\");\n  if (errors.length > 0) {\n    for (const d of errors) logErr(`${d.code}: ${d.message}`);\n    logErr(\"The manifest has errors — fix them with `skaile validate` before publishing.\");\n    process.exit(1);\n  }\n  return manifest;\n}\n\n/** Run a git command in `cwd` via the injected spawn; returns the result. */\nfunction runGit(spawn: SpawnLike, cwd: string, args: string[]) {\n  return spawn(\"git\", [\"-C\", cwd, ...args], { encoding: \"utf-8\" });\n}\n\n/**\n * Refuse (exit 1) a `--ref` that is not a valid git ref name, or that names no branch, tag\n * or commit of the library repo (local, or fetched from `origin`). A library directory that\n * is not a git repo yet has nothing to check against and passes: `publish` creates the repo.\n *\n * The ref is sent to the store as a plain string and the store ingests the GitHub repo at that\n * name, so only what GitHub resolves by name is accepted: a branch, a tag or a commit id. A\n * revision expression (`HEAD~1`, `v1.0^{}`) resolves locally but not in the store, so it is\n * refused here rather than published under a ref the store cannot read.\n */\nfunction exitOnUnknownRef(libPath: string, libName: string, ref: string, spawn: SpawnLike): void {\n  const wellFormed =\n    !ref.startsWith(\"-\") &&\n    spawn(\"git\", [\"check-ref-format\", \"--allow-onelevel\", ref], { encoding: \"utf-8\" }).status === 0;\n  if (!wellFormed) {\n    logErr(\n      `--ref \"${ref}\" is not a valid git ref name; pass a branch or tag name or a commit id ` +\n        \"(revision expressions like HEAD~1 are not accepted).\",\n    );\n    process.exit(1);\n  }\n  if (runGit(spawn, libPath, [\"rev-parse\", \"--git-dir\"]).status !== 0) return;\n  const exists = [ref, `refs/remotes/origin/${ref}`].some(\n    (candidate) =>\n      runGit(spawn, libPath, [\"rev-parse\", \"--verify\", \"--quiet\", `${candidate}^{commit}`])\n        .status === 0,\n  );\n  if (!exists) {\n    logErr(\n      `--ref \"${ref}\" is not a branch, tag or commit of library \"${libName}\"; ` +\n        `fetch it first (\\`skaile library pull ${libName}\\`) if it only exists on the remote.`,\n    );\n    process.exit(1);\n  }\n}\n\n/**\n * Ensure `libPath` is a git repo whose `origin` points at `remoteUrl`, then\n * commit any changes and push to `branch`. Idempotent re-publish: an unchanged\n * tree makes `git commit` fail with \"nothing to commit\" — swallowed. Push (or\n * any other git) failures surface as thrown Errors carrying git's stderr.\n */\nfunction commitAndPush(opts: {\n  libPath: string;\n  remoteUrl: string;\n  branch: string;\n  spawn: SpawnLike;\n}): void {\n  const { libPath, remoteUrl, branch, spawn } = opts;\n\n  const gitDir = runGit(spawn, libPath, [\"rev-parse\", \"--git-dir\"]);\n  if (gitDir.status !== 0) {\n    const init = runGit(spawn, libPath, [\"init\"]);\n    if (init.status !== 0) {\n      throw new Error(\n        `git init failed: ${(init.stderr ?? \"\").toString().trim() || `exit ${init.status}`}`,\n      );\n    }\n  }\n\n  // Point origin at the resolved remote (add if absent, else set-url).\n  const getUrl = runGit(spawn, libPath, [\"remote\", \"get-url\", \"origin\"]);\n  const originArgs =\n    getUrl.status === 0\n      ? [\"remote\", \"set-url\", \"origin\", remoteUrl]\n      : [\"remote\", \"add\", \"origin\", remoteUrl];\n  const setOrigin = runGit(spawn, libPath, originArgs);\n  if (setOrigin.status !== 0) {\n    throw new Error(\n      `git remote failed: ${(setOrigin.stderr ?? \"\").toString().trim() || `exit ${setOrigin.status}`}`,\n    );\n  }\n\n  const add = runGit(spawn, libPath, [\"add\", \"-A\"]);\n  if (add.status !== 0) {\n    throw new Error(\n      `git add failed: ${(add.stderr ?? \"\").toString().trim() || `exit ${add.status}`}`,\n    );\n  }\n\n  // Fixed bot identity via -c so the commit succeeds regardless of the author's\n  // git config (the publish commit is a machine action).\n  const commit = spawn(\n    \"git\",\n    [\n      \"-C\",\n      libPath,\n      \"-c\",\n      \"user.email=publish@skaile.store\",\n      \"-c\",\n      \"user.name=skaile\",\n      \"commit\",\n      \"-m\",\n      \"chore: publish\",\n    ],\n    { encoding: \"utf-8\" },\n  );\n  if (commit.status !== 0) {\n    const out = `${commit.stdout ?? \"\"}${commit.stderr ?? \"\"}`;\n    if (!/nothing to commit/i.test(out)) {\n      throw new Error(`git commit failed: ${out.trim() || `exit ${commit.status}`}`);\n    }\n  }\n\n  const push = runGit(spawn, libPath, [\"push\", \"origin\", `HEAD:${branch}`]);\n  if (push.status !== 0) {\n    throw new Error(\n      `git push failed: ${(push.stderr ?? \"\").toString().trim() || `exit ${push.status}`}`,\n    );\n  }\n}\n\n/**\n * `true` when `url` is a GitHub repo remote the store can fetch: `https://github.com/<o>/<r>[.git]`,\n * `git@github.com:<o>/<r>[.git]` or `ssh://git@github.com/<o>/<r>[.git]`. The store is\n * pointer-only and fetches bytes from GitHub, so any other remote (a local path, a `file://`\n * url, another host) can be pushed to but never published.\n */\nexport function isGithubRemote(url: string): boolean {\n  return /^(?:https:\\/\\/github\\.com\\/|git@github\\.com:|ssh:\\/\\/git@github\\.com\\/)[^/\\s]+\\/[^/\\s]+?(?:\\.git)?\\/?$/i.test(\n    url.trim(),\n  );\n}\n\n/** The advisory for a remote `library publish` cannot use (see {@link isGithubRemote}). */\nexport function notGithubRemoteMessage(name: string, url: string): string {\n  return (\n    `The remote of library \"${name}\" is not a GitHub url: ${url}. ` +\n    \"The store fetches published assets from GitHub — repoint it with \" +\n    `\\`skaile library set ${name} backendConfig.url=https://github.com/<owner>/<repo>\\`.`\n  );\n}\n\n/** How many untracked paths the publish plan lists before collapsing to \"and N more\". */\nconst MAX_LISTED_UNTRACKED = 10;\n\n/** A first-party manifest asset resolved to its on-disk manifest file, read and parsed. */\ninterface PlanAsset {\n  entry: AssetEntry;\n  /** Path relative to the library root, for messages. */\n  rel: string;\n  parsed: ParseManifestResult;\n  /** The shared per-asset checks ({@link checkAsset}); `undefined` when the file did not parse. */\n  checked: AssetCheckResult | undefined;\n}\n\n/**\n * The first-party assets the plan covers (a `root:` entry or a `files:` list), each with its\n * manifest file read. Curated entries (`source`) carry no library directory and a root with no\n * manifest file is `missingRootAssets`' concern, so both are left out.\n */\nfunction planAssets(\n  libPath: string,\n  manifest: SkPublishManifest,\n  targetName: string | undefined,\n  composeRefs: ComposeRefContext,\n): PlanAsset[] {\n  const out: PlanAsset[] = [];\n  const registry = getKindRegistry();\n  for (const entry of manifest.assets ?? []) {\n    if (targetName && entry.name !== targetName) continue;\n    if (entry.source || manifest.source) continue;\n    const file = findEntryManifestFile(libPath, entry);\n    if (!file) continue;\n    const text = readFileSync(file, \"utf-8\");\n    const parsed = parseManifestFile(file, text);\n    let checked: AssetCheckResult | undefined;\n    if (parsed.ok) {\n      checked = checkAsset(\n        entry.kind,\n        parsed.data,\n        readAssetBody(file, text),\n        basename(dirname(file)),\n        registry,\n        text,\n        basename(file),\n        { dir: dirname(file), libraryRoot: libPath, composeRefs },\n      );\n    }\n    out.push({ entry, rel: relative(libPath, file), parsed, checked });\n  }\n  return out;\n}\n\n/**\n * The manifest with every entry's `version` replaced by the one in its asset\n * file — the version a publish ships (the file is the source of truth; the\n * entry only mirrors it after `skaile library index`).\n */\nfunction manifestWithFileVersions(\n  manifest: SkPublishManifest,\n  assets: PlanAsset[],\n): SkPublishManifest {\n  return {\n    ...manifest,\n    assets: manifest.assets?.map((entry) => {\n      const planned = assets.find((a) => a.entry === entry);\n      const fileVersion = planned?.parsed.ok ? declaredVersion(planned.parsed.data) : undefined;\n      return fileVersion === undefined ? entry : { ...entry, version: fileVersion };\n    }),\n  };\n}\n\n/** A manifest entry whose version differs from the one in its asset file. */\ninterface VersionDrift {\n  asset: PlanAsset;\n  ref: string;\n  /** The version the manifest records (`assets[].version ?? version`), `undefined` when none. */\n  entryVersion: string | undefined;\n  fileVersion: string;\n}\n\n/**\n * The planned assets whose manifest entry does not carry the version of their asset\n * file. The store reads the manifest it finds in the pushed repo, so a publish\n * records the entry's version — {@link manifestWithFileVersions} is what the plan\n * shows, and these are the entries a real publish has to rewrite to match it.\n */\nfunction versionDrift(assets: PlanAsset[], manifest: SkPublishManifest): VersionDrift[] {\n  const out: VersionDrift[] = [];\n  for (const asset of assets) {\n    if (!asset.parsed.ok) continue;\n    const fileVersion = declaredVersion(asset.parsed.data);\n    const entryVersion = asset.entry.version ?? manifest.version;\n    if (fileVersion !== undefined && fileVersion !== entryVersion) {\n      out.push({ asset, ref: assetEntryRef(asset.entry, manifest), entryVersion, fileVersion });\n    }\n  }\n  return out;\n}\n\nconst describeDrift = (d: VersionDrift): string =>\n  `${d.ref}: manifest version ${d.entryVersion ?? \"(none)\"} → ${d.fileVersion} (${d.asset.rel.split(sep).join(\"/\")})`;\n\n/**\n * Reasons the plan cannot publish an asset: its manifest file cannot be parsed (an\n * empty `SKILL.md`), or it fails the errors of the shared per-asset check list\n * ({@link checkAsset}: version not semver, the kind's manifest schema — the skill\n * schema refuses the scaffold `TODO:` description — and the flow definition parser),\n * or its manifest entry carries a version that is not semver. These are the cases\n * `skaile validate` fails on and `skaile library index` keeps out of the manifest;\n * a hand-edited manifest can still list one, so the plan stops rather than ships it.\n */\nfunction assetRefusals(assets: PlanAsset[], manifest: SkPublishManifest): string[] {\n  const refusals: string[] = [];\n  for (const { entry, rel, parsed, checked } of assets) {\n    const ref = assetEntryRef(entry, manifest);\n    if (!parsed.ok || !checked) {\n      const reason = parsed.ok ? \"the manifest file could not be read\" : parsed.reason;\n      refusals.push(`${ref} (${rel}) [${entry.kind}] — ${manifestParseErrorText(reason)}`);\n      continue;\n    }\n    for (const f of checked.errors) refusals.push(`${ref} (${rel}) [${f.tag}] — ${f.text}`);\n    // An untouched scaffold body is an error in `validate` too: a publish would ship an empty asset.\n    // (A `requires:` ref no registered library holds is judged against the store: see `storeHolderVerdicts`.)\n    for (const f of checked.advisories.filter((a) => a.scaffoldBody)) {\n      refusals.push(`${ref} (${rel}) [${f.tag}] — ${f.text}`);\n    }\n    // The asset file renamed in place: the entry is a ref `add` cannot resolve (p700).\n    const fileName = entry.kind === \"flow\" ? parsed.data.id : parsed.data.name;\n    if (typeof fileName === \"string\" && fileName !== \"\" && fileName !== entry.name) {\n      refusals.push(\n        `${ref} (${rel}) — the asset file now names \"${fileName}\": run \\`skaile library index\\` to rename the entry, or restore the name.`,\n      );\n    }\n    // The file's own version is checked above; the entry's can differ from it.\n    const entryInvalid = entry.version === undefined ? undefined : invalidSemverText(entry.version);\n    if (entryInvalid && entry.version !== declaredVersion(parsed.data)) {\n      refusals.push(`${ref} (${rel}) — ${entryInvalid}`);\n    }\n  }\n  return refusals;\n}\n\n/**\n * Per-asset advisories for the assets the plan would publish — the advisories of the\n * shared check list `skaile validate` runs (agentskills.io conformance for skills, the\n * untouched `library create` scaffold for skill, agent, prompt, contract, flow and\n * preset), one line per asset/finding. An unparsable manifest is {@link assetRefusals}'\n * to report.\n */\nfunction assetWarnings(assets: PlanAsset[], manifest: SkPublishManifest): string[] {\n  const warnings: string[] = [];\n  for (const { entry, rel, parsed, checked } of assets) {\n    if (!parsed.ok || !checked || Object.keys(parsed.data).length === 0) continue;\n    for (const f of checked.advisories.filter((a) => !a.scaffoldBody && !a.unheldRef)) {\n      warnings.push(`${assetEntryRef(entry, manifest)} (${rel}) [${f.tag}] — ${f.text}`);\n    }\n  }\n  return warnings;\n}\n\n/** Asks the store whether it lists `ref` (`kind:@publisher/name`); rejects when it cannot be asked. */\ntype StoreHolds = (ref: string) => Promise<boolean>;\n\nasync function storeListsRef(ref: string): Promise<boolean> {\n  const remote = await openCatalogSource({ projectDir: process.cwd() });\n  return (await remote.resolve(ref)) !== null;\n}\n\ntype HolderAnswer = { listed: true } | { listed: false } | { error: string };\n\nasync function holdsAnswer(holds: StoreHolds, ref: string): Promise<HolderAnswer> {\n  try {\n    return { listed: await holds(ref) };\n  } catch (err) {\n    return { error: err instanceof Error ? err.message : String(err) };\n  }\n}\n\n/**\n * What the publish plan says about every `requires:` (asset file) and `dependencies:` (manifest)\n * ref that no registered library holds (p1200). `validate` and `library index` warn from what is\n * registered on this machine alone; the plan also asks the store. A store that lists the ref\n * says nothing; one that does not refuses the plan, since `add` would fail on the consumer's\n * side; one that cannot be asked only warns.\n */\nasync function storeHolderVerdicts(\n  assets: PlanAsset[],\n  manifest: SkPublishManifest,\n  dependencies: ManifestDependencyProblem[],\n  holds: StoreHolds,\n): Promise<{ refusals: string[]; warnings: string[] }> {\n  const wanted: Array<{ where: string; what: string; ref: string }> = [];\n  for (const { entry, rel, checked } of assets) {\n    for (const f of checked?.advisories ?? []) {\n      if (!f.unheldRef) continue;\n      wanted.push({\n        where: `${assetEntryRef(entry, manifest)} (${rel}) [${f.tag}]`,\n        what: \"requires\",\n        ref: f.unheldRef,\n      });\n    }\n  }\n  for (const p of dependencies) {\n    if (!p.unheldRef) continue;\n    wanted.push({\n      where: `${MANIFEST_FILENAME} [assets] — ${p.asset}`,\n      what: \"dependency\",\n      ref: p.unheldRef,\n    });\n  }\n  const answers = new Map<string, HolderAnswer>();\n  const out = { refusals: [] as string[], warnings: [] as string[] };\n  for (const { where, what, ref } of wanted) {\n    let answer = answers.get(ref);\n    if (answer === undefined) {\n      answer = await holdsAnswer(holds, ref);\n      answers.set(ref, answer);\n    }\n    if (\"listed\" in answer && answer.listed) continue;\n    const base = `${where} — ${what} \"${ref}\" is not held by any registered library`;\n    if (\"error\" in answer) {\n      out.warnings.push(\n        `${base} and the store could not be asked (${answer.error.split(\"\\n\")[0]}). \\`skaile add\\` fails for a consumer unless the store or a registered library holds it`,\n      );\n    } else {\n      out.refusals.push(\n        `${base} and the store does not list it, so \\`skaile add\\` would fail with \"${what} … not found\". Publish that asset first, register the library that holds it, or drop the ${what}.`,\n      );\n    }\n  }\n  return out;\n}\n\n/**\n * Advisory publish-plan warnings: a missing LICENSE (a public repo without one grants\n * consumers no rights), per-asset skill warnings ({@link assetWarnings}) and — for `publish`,\n * which runs `git add -A` — untracked files that would become public. Never throws; a\n * non-git directory simply yields no untracked warning.\n */\nfunction publishWarnings(\n  libPath: string,\n  spawn: SpawnLike,\n  skipPush: boolean,\n  manifest: SkPublishManifest,\n  assets: PlanAsset[],\n): string[] {\n  const warnings: string[] = [];\n  if (!existsSync(join(libPath, \"LICENSE\")) && !existsSync(join(libPath, \"LICENSE.md\"))) {\n    warnings.push(\n      \"No LICENSE or LICENSE.md in the library root — a public repo without a license grants consumers no rights to use it.\",\n    );\n  }\n  warnings.push(...assetWarnings(assets, manifest));\n  if (!skipPush) {\n    const status = runGit(spawn, libPath, [\"status\", \"--porcelain\", \"--untracked-files=all\"]);\n    if (status.status === 0) {\n      const lines = (status.stdout ?? \"\").toString().split(\"\\n\");\n      const untracked = lines.filter((l) => l.startsWith(\"?? \")).map((l) => l.slice(3));\n      if (untracked.length > 0) {\n        const shown = untracked.slice(0, MAX_LISTED_UNTRACKED).join(\", \");\n        const more =\n          untracked.length > MAX_LISTED_UNTRACKED\n            ? ` and ${untracked.length - MAX_LISTED_UNTRACKED} more`\n            : \"\";\n        warnings.push(\n          `${untracked.length} untracked file(s) will be committed by \\`git add -A\\` and published: ${shown}${more}.`,\n        );\n      }\n      // `git add -A` also stages every change of a tracked file: name them too.\n      const changed = lines\n        .filter((l) => l.length > 3 && !l.startsWith(\"?? \") && !l.startsWith(\"!! \"))\n        .map((l) => {\n          const code = l.slice(0, 2);\n          const label = code.includes(\"D\")\n            ? \"deleted\"\n            : code.includes(\"R\")\n              ? \"renamed\"\n              : code.includes(\"A\")\n                ? \"added\"\n                : \"modified\";\n          return `${label} ${l.slice(3)}`;\n        });\n      if (changed.length > 0) {\n        const shown = changed.slice(0, MAX_LISTED_UNTRACKED).join(\", \");\n        const more =\n          changed.length > MAX_LISTED_UNTRACKED\n            ? ` and ${changed.length - MAX_LISTED_UNTRACKED} more`\n            : \"\";\n        warnings.push(\n          `${changed.length} changed tracked file(s) will be committed by \\`git add -A\\` and published: ${shown}${more}.`,\n        );\n      }\n      // A secret the commit would publish: a `.env`, a private key (p704).\n      const secrets = lines\n        .filter((l) => l.length > 3 && !l.startsWith(\"!! \") && !l.slice(0, 2).includes(\"D\"))\n        .map((l) => l.slice(3).split(\" -> \").pop() ?? \"\")\n        .filter((file) => isSecretFileName(basename(file.replace(/^\"|\"$/g, \"\"))));\n      if (secrets.length > 0) {\n        warnings.push(\n          `${secrets.length} file(s) look like secrets and will be committed by \\`git add -A\\` and published: ${secrets.join(\", \")}. Delete them or add them to .gitignore.`,\n        );\n      }\n    }\n  }\n  return warnings;\n}\n\n/**\n * The store only registers PUBLIC repos (the backend rejects a private one with \"must be\n * public\"), so a repo provisioned with `--private` can be created and linked but not published.\n */\nconst PRIVATE_REPO_WARNING =\n  \"--private: the store only accepts PUBLIC repos — registering a private repo is rejected. \" +\n  \"The repo will be created private, but publishing it will fail; share it directly \" +\n  \"(`skaile source add <url>` with the consumer's own git credentials) instead.\";\n\n/**\n * Provision a GitHub repo `github.com/<you>/<name>` via `gh` (public unless `isPrivate`) and\n * return its https url. Parses the url `gh` prints on success. Throws on failure.\n */\nfunction createRepoViaGh(name: string, spawn: SpawnLike, isPrivate: boolean): string {\n  const res = spawn(\"gh\", [\"repo\", \"create\", name, isPrivate ? \"--private\" : \"--public\"], {\n    encoding: \"utf-8\",\n  });\n  if (res.status !== 0) {\n    const stderr = (res.stderr ?? \"\").toString().trim();\n    throw new Error(`gh repo create ${name} failed: ${stderr || `exit ${res.status}`}`);\n  }\n  // `gh repo create` prints the repo url (e.g. `https://github.com/<owner>/<name>`);\n  // scan combined output for the first github.com url so we capture whatever\n  // owner gh resolved (the authed user).\n  const out = `${res.stdout ?? \"\"}\\n${res.stderr ?? \"\"}`;\n  const match = out.match(/https:\\/\\/github\\.com\\/[^\\s]+/);\n  if (!match) {\n    throw new Error(`gh repo create ${name} succeeded but printed no repo url:\\n${out.trim()}`);\n  }\n  return match[0].replace(/\\.git$/, \"\").trim();\n}\n\n/** `--asset <ref>` split into its parts: `[kind:][@publisher/]name[#pin]`. */\ninterface AssetSelection {\n  kind?: string;\n  publisher?: string;\n  name: string;\n  pin?: string;\n}\n\nfunction parseAssetSelection(ref: string): AssetSelection {\n  const [head, ...pinParts] = ref.trim().split(\"#\");\n  const pin = pinParts.join(\"#\") || undefined;\n  const colon = head.indexOf(\":\");\n  const kind = colon > 0 ? head.slice(0, colon) : undefined;\n  const rest = colon > 0 ? head.slice(colon + 1) : head;\n  const scoped = rest.startsWith(\"@\") ? rest.indexOf(\"/\") : -1;\n  const publisher = scoped > 0 ? rest.slice(1, scoped) : undefined;\n  const name = scoped > 0 ? rest.slice(scoped + 1) : rest;\n  return { kind, publisher, name, pin };\n}\n\n/** The manifest entries `--asset` selects: same name, and kind / publisher when the ref names them. */\nfunction selectedEntries(manifest: SkPublishManifest, sel: AssetSelection): AssetEntry[] {\n  return (manifest.assets ?? []).filter(\n    (a) =>\n      a.name === sel.name &&\n      (!sel.kind || a.kind === sel.kind) &&\n      (!sel.publisher || assetNamespace(a, manifest) === sel.publisher),\n  );\n}\n\n/**\n * What the plan says about asset directories the manifest does not list - the ones\n * `skaile library index` would add or skip. A directory holding a kind + name the manifest\n * already names elsewhere is refused (index skips it and exits 1); a new asset the shared\n * checks reject is refused with the same finding text `validate` prints; a valid new asset is\n * refused as well, as `validate` does: the plan would not ship it, but `git add -A` would commit\n * its files (p1193).\n */\nasync function unlistedAssetProblems(\n  libPath: string,\n  manifest: SkPublishManifest,\n  libName: string,\n  targetName: string | undefined,\n  composeRefs: ComposeRefContext,\n): Promise<string[]> {\n  const refusals: string[] = [];\n  const registry = getKindRegistry();\n  const unlisted = await scanUnlistedAssets(\n    libPath,\n    manifest.publisher ?? libName,\n    registry,\n    UNLISTED_SCAN_SKIP_DIRS,\n  );\n  for (const u of unlisted) {\n    if (targetName && u.entry.name !== targetName) continue;\n    const rel = relative(libPath, u.entry.source);\n    if (u.registeredAt) {\n      refusals.push(\n        duplicateAssetMessage(\n          u.entry.kind,\n          u.entry.name,\n          u.root,\n          `already registered at \"${u.registeredAt}\"`,\n          libName,\n        ),\n      );\n      continue;\n    }\n    if (u.parseFailure) {\n      // `library index` rejects the file too: send the author to the file, not to the command.\n      refusals.push(\n        `${u.entry.kind}:${u.entry.name} (${rel}) [${u.entry.kind}] — ${manifestParseErrorText(u.parseFailure)}`,\n      );\n      continue;\n    }\n    const errors = checkAssetFile(u.entry.source, u.entry.kind, registry, libPath, composeRefs);\n    for (const f of errors)\n      refusals.push(`${u.entry.kind}:${u.entry.name} (${rel}) [${f.tag}] — ${f.text}`);\n    if (errors.length === 0) {\n      refusals.push(\n        `${u.entry.kind}:${u.entry.name} (${rel}) is on disk but not in the manifest, so it is not published; run \\`skaile library index ${libName}\\`.`,\n      );\n    }\n  }\n  return refusals;\n}\n\n/** Shared publish body for `publish` (pushes) and `register` (skips the push). */\nasync function publishLibrary(\n  name: string,\n  opts: {\n    asset?: string;\n    createRepo?: boolean;\n    private?: boolean;\n    ref?: string;\n    dryRun?: boolean;\n    skipPush: boolean;\n    /** Asks the store whether it lists a ref; injected by tests. */\n    storeHolds?: StoreHolds;\n  },\n  client?: PublisherClient,\n  spawn: SpawnLike = spawnSync,\n): Promise<void> {\n  exitOnEmptyAsset(opts.asset);\n  const injected = client !== undefined;\n  const { manager, close } = await openLibraryManager();\n  try {\n    const lib = await manager.requireLibraryDir(name);\n    const manifest = loadManifest(lib.path);\n\n    // A publisher that is not a valid slug would publish refs `add` cannot parse: refuse\n    // (dry-run included) with the text `library index` and `validate` print.\n    exitOnManifestPublisherProblems(lib.path, name);\n    // The same symlink refusal as `validate` and `library index`.\n    exitOnLibrarySymlinks(lib.path, `skaile library publish ${name}`);\n    // A `root:` or `files:` entry outside the library, through a symlink or naming a missing file is never found by `add` (p701, p1403, p1404).\n    exitOnManifestPathProblems(lib.path, `skaile library publish ${name}`);\n\n    // A manifest entry whose directory is gone would publish a catalog entry\n    // that points at nothing — refuse (dry-run included) rather than plan it.\n    const missing = missingRootAssets(lib.path, manifest);\n    if (missing.length > 0) {\n      for (const a of missing) {\n        logErr(`${assetEntryRef(a, manifest)} — root \"${a.root}\" does not exist in the library.`);\n      }\n      logErr(\n        \"The manifest lists assets that are no longer on disk. Run \" +\n          `\\`skaile library index ${name}\\` to drop them from the manifest, then re-run.`,\n      );\n      process.exit(1);\n    }\n\n    // `--asset` must select something: a plan of 0 assets that exits 0 reads as a publish.\n    const selection = opts.asset ? parseAssetSelection(opts.asset) : undefined;\n    if (opts.asset && selection && selectedEntries(manifest, selection).length === 0) {\n      const listed = (manifest.assets ?? []).map((a) => assetEntryRef(a, manifest));\n      logErr(\n        `No asset matches \"${opts.asset}\" in library \"${name}\"` +\n          (listed.length > 0\n            ? ` (the manifest lists: ${listed.join(\", \")}).`\n            : \" (the manifest lists no assets).\"),\n      );\n      process.exit(1);\n    }\n\n    // `--ref` must name a ref the library repo has: a plan for `source ref: nosuchref` reads as a\n    // publish of it.\n    if (opts.ref !== undefined) exitOnUnknownRef(lib.path, name, opts.ref, spawn);\n\n    // Resolve the remote: git-backed → its url; local + --create-repo → provision\n    // and link; else stop with a hint.\n    let remoteUrl = remoteUrlOf(lib);\n    let wouldCreateRepo = false;\n    if (opts.private && !opts.createRepo) {\n      logErr(\n        \"--private only applies together with --create-repo (it sets the new repo's visibility).\",\n      );\n      process.exit(1);\n    }\n    const visibility = opts.private ? \"private\" : \"public\";\n    if (!remoteUrl) {\n      if (opts.createRepo) {\n        if (opts.private) logWarn(PRIVATE_REPO_WARNING);\n        if (opts.dryRun) {\n          // A dry-run must not provision anything — defer the real\n          // `gh repo create` to the live run and just show the would-be remote.\n          wouldCreateRepo = true;\n          remoteUrl = `https://github.com/<your-account>/${lib.name}`;\n        } else {\n          remoteUrl = createRepoViaGh(lib.name, spawn, opts.private === true);\n          await manager.updateLibrary(name, {\n            backend: \"git\",\n            backendConfig: { url: remoteUrl, branch: \"main\", authHint: \"ssh\" },\n          });\n          logOk(`Created + linked ${S.dim(remoteUrl)} (${visibility}).`);\n        }\n      } else {\n        logErr(\n          `Library \"${name}\" has no remote — run ${S.cmd(`skaile library link ${name} <url>`)} ` +\n            \"first, or pass `--create-repo` to provision a public repo.\",\n        );\n        process.exit(1);\n      }\n    } else if (!isGithubRemote(remoteUrl)) {\n      // Plan-phase gate (dry-run and real): the store fetches from GitHub, so a\n      // local-path / other-host remote can never be published. A remote here means\n      // the library is already git-backed, where `library link` refuses.\n      logErr(notGithubRemoteMessage(name, remoteUrl));\n      process.exit(1);\n    }\n\n    // Each asset publishes under `assets[].publisher ?? manifest.publisher`\n    // (first-party — no remap), so one library can span several namespaces.\n    const targetName = opts.asset ? bareName(opts.asset) : undefined;\n    const namespaces = manifestNamespaces(manifest, targetName);\n\n    // An asset whose manifest file cannot be parsed or carries a non-semver version\n    // must not be planned (dry-run included): it would publish as a broken entry.\n    // An agent's `composes:` refs resolve as in `validate` and `library index` (p415).\n    const composeRefs = composeRefContext(\n      scanIdentities(lib.path),\n      await registeredAssetKeys(lib.path),\n      manifest.publisher,\n    );\n    const assets = planAssets(lib.path, manifest, targetName, composeRefs);\n    const wouldBeRefs = plannedRefs(manifestWithFileVersions(manifest, assets), targetName);\n    const unlisted = await unlistedAssetProblems(lib.path, manifest, name, targetName, composeRefs);\n    // A manifest `dependencies:` entry `validate` and `index` reject would ship as an unresolvable ref.\n    const requiresRefusals = manifestRequiresProblems(lib.path)\n      .filter((p) => !targetName || p.asset.endsWith(`:${targetName}`))\n      .map(\n        (p) =>\n          `${MANIFEST_FILENAME} [assets] — ${p.asset}: ${p.message}. ` +\n          \"Use the `kind:@<publisher>/name[#version]` form.\",\n      );\n    // A `requires:` / `dependencies:` ref no registered library holds: the store has the last word.\n    const unheldDependencies = (await manifestDependencyProblems(lib.path)).filter(\n      (p) => p.unheldRef && (!targetName || p.asset.endsWith(`:${targetName}`)),\n    );\n    const storeVerdicts = await storeHolderVerdicts(\n      assets,\n      manifest,\n      unheldDependencies,\n      opts.storeHolds ?? storeListsRef,\n    );\n    const refusals = [\n      ...assetRefusals(assets, manifest),\n      ...requiresRefusals,\n      ...unlisted,\n      ...storeVerdicts.refusals,\n    ];\n    if (selection?.pin !== undefined) {\n      const held = selectedEntries(manifest, selection).map((e) => {\n        const planned = assets.find((a) => a.entry === e);\n        const fileVersion = planned?.parsed.ok ? declaredVersion(planned.parsed.data) : undefined;\n        return fileVersion ?? e.version ?? manifest.version;\n      });\n      if (!held.some((v) => v !== undefined && matchPin(selection.pin, v))) {\n        logErr(\n          `${opts.asset}: the library holds ${held.filter((v) => v).join(\", \") || \"no version\"} of this asset, not #${selection.pin}. ` +\n            \"A publish ships the version in the asset file; drop the pin or change the file version.\",\n        );\n        process.exit(1);\n      }\n    }\n    if (refusals.length > 0) {\n      for (const r of refusals) logErr(r);\n      logErr(\n        \"These assets cannot be published. Fix them (see `skaile validate`), then run \" +\n          `\\`skaile library index ${name}\\` and re-run.`,\n      );\n      process.exit(1);\n    }\n\n    // The store records the version of the manifest it finds in the pushed repo, so\n    // the plan (file versions) and the publish only agree when the entries match the\n    // files. `publish` rewrites them before it commits; `register` pushes nothing,\n    // so it cannot, and stops instead.\n    const drift = versionDrift(assets, manifest);\n    if (drift.length > 0 && opts.skipPush) {\n      for (const d of drift) logErr(describeDrift(d));\n      logErr(\n        \"register publishes the remote HEAD as-is, so these manifest versions would be recorded \" +\n          `instead of the file versions. Run \\`skaile library index ${name}\\`, commit and push, then re-run.`,\n      );\n      process.exit(1);\n    }\n\n    const sourceRef = opts.ref ?? branchOf(lib);\n    const warnings = [\n      ...publishWarnings(lib.path, spawn, opts.skipPush, manifest, assets),\n      ...storeVerdicts.warnings,\n    ];\n\n    if (opts.dryRun) {\n      logInfo(`Publish plan for ${S.bold(name)}:`);\n      logInfo(\n        `  remote:     ${remoteUrl}${wouldCreateRepo ? `  (would be created ${visibility} via \\`gh repo create --${visibility}\\`)` : \"\"}`,\n      );\n      logInfo(\n        `  publisher:  ${namespaces.length > 0 ? namespaces.join(\", \") : \"<manifest publisher>\"}`,\n      );\n      // Best-effort namespace-availability probe — a read-only GET, only when\n      // signed in (or a client is injected). A failure keeps dry-run offline-safe.\n      const canCheck = injected || isStoreAuthenticated();\n      if (!canCheck) {\n        // The real run stops at \"Not signed in\" before any namespace check.\n        logWarn(\"namespace check skipped: not signed in (run `skaile store login`)\");\n      } else if (namespaces.length > 0) {\n        for (const ns of namespaces) {\n          try {\n            const avail = await (client ?? makeHttpPublisherClient()).namespaceAvailability(ns);\n            const prefix = namespaces.length > 1 ? `@${ns} — ` : \"\";\n            logInfo(`  namespace:  ${prefix}${formatNamespaceAvailability(avail)}`);\n          } catch {\n            // Store unreachable / not signed in — skip the advisory, never fail.\n          }\n        }\n      }\n      logInfo(`  source ref: ${sourceRef}`);\n      logInfo(`  would publish ${wouldBeRefs.length} asset(s):`);\n      for (const r of wouldBeRefs) logInfo(`    ${r}`);\n      for (const d of drift) logInfo(`  would update the manifest: ${describeDrift(d)}`);\n      for (const w of warnings) logWarn(w);\n      return;\n    }\n\n    // Real run: surface the same advisories before anything is pushed.\n    for (const w of warnings) logWarn(w);\n\n    // A real publish makes store calls, so it needs a token (injected fakes bypass).\n    if (!injected && !isStoreAuthenticated()) {\n      logErr(\"Not signed in — run `skaile store login` first.\");\n      process.exit(1);\n    }\n\n    const pub = client ?? makeHttpPublisherClient();\n\n    // Preflight EVERY distinct namespace BEFORE the public git push, so a\n    // reserved/unclaimed one fails fast with guidance instead of after publishing bytes.\n    for (const ns of namespaces) {\n      const gate = await preflightNamespace(pub, ns);\n      if (!gate.ok) {\n        logErr(gate.message ?? `Cannot publish under @${ns}.`);\n        process.exit(1);\n      }\n    }\n\n    // Bring the entries to the file versions the plan showed, before they are committed.\n    for (const d of drift) {\n      upsertManifestAsset(lib.path, {\n        kind: d.asset.entry.kind,\n        name: d.asset.entry.name,\n        root: d.asset.entry.root ?? \"\",\n        version: d.fileVersion,\n      });\n      logInfo(`Updated the manifest: ${describeDrift(d)}`);\n    }\n\n    // publish commits + pushes the library repo; register takes the remote HEAD as-is.\n    if (!opts.skipPush) {\n      // `git add -A` stages every non-ignored file → a PUBLIC push. Surface it so\n      // an unexpected file in the working tree is not silently published.\n      logInfo(\n        `Committing the library and pushing to the PUBLIC remote ${S.dim(remoteUrl)} ` +\n          \"(.gitignore honored; anything else in the working tree becomes public).\",\n      );\n      commitAndPush({ libPath: lib.path, remoteUrl, branch: branchOf(lib), spawn });\n      logOk(`Pushed ${S.dim(name)} to ${S.dim(remoteUrl)}.`);\n    }\n\n    const { published } = await publishToStore({\n      sourceUrl: remoteUrl,\n      ref: sourceRef,\n      manifest: manifestWithFileVersions(manifest, assets),\n      assetName: targetName,\n      client: pub,\n    });\n\n    if (published.length > 0) {\n      logInfo(`Consumers can now \\`skaile add ${published[0]}\\`.`);\n    }\n  } finally {\n    close();\n  }\n}\n\n/**\n * `skaile library publish <lib>` — commit + push the library repo, register +\n * sync it as a store source, and publish its manifest's assets under the\n * manifest publisher. See the module header for the full flow.\n */\nexport async function runLibraryPublish(\n  name: string,\n  opts: {\n    asset?: string;\n    createRepo?: boolean;\n    private?: boolean;\n    ref?: string;\n    dryRun?: boolean;\n    storeHolds?: StoreHolds;\n  },\n  client?: PublisherClient,\n  spawn: SpawnLike = spawnSync,\n): Promise<void> {\n  await publishLibrary(name, { ...opts, skipPush: false }, client, spawn);\n}\n\n/**\n * `skaile library register <lib>` — same as publish but skips the commit/push\n * (the bytes are already on GitHub at the current remote HEAD). Still requires a\n * git-backed remote.\n */\nexport async function runLibraryRegister(\n  name: string,\n  opts: { asset?: string; ref?: string; dryRun?: boolean },\n  client?: PublisherClient,\n  spawn: SpawnLike = spawnSync,\n): Promise<void> {\n  await publishLibrary(name, { ...opts, skipPush: true }, client, spawn);\n}\n\n/**\n * `skaile library yank <lib>` — unpublish the library's published assets from\n * the store (all, or the single asset matching `opts.asset`'s name).\n * Auth-gated like publish.\n */\nexport async function runLibraryYank(\n  name: string,\n  opts: { asset?: string },\n  client?: PublisherClient,\n): Promise<void> {\n  exitOnEmptyAsset(opts.asset);\n  const injected = client !== undefined;\n  const { manager, close } = await openLibraryManager();\n  try {\n    const lib = await manager.requireLibrary(name);\n    const remoteUrl = remoteUrlOf(lib);\n    if (!remoteUrl) {\n      logErr(`Library \"${name}\" has no remote — nothing published to yank.`);\n      process.exit(1);\n    }\n\n    if (!injected && !isStoreAuthenticated()) {\n      logErr(\"Not signed in — run `skaile store login` first.\");\n      process.exit(1);\n    }\n\n    const pub = client ?? makeHttpPublisherClient();\n    const rows = await pub.sourcesList();\n    const source = rows.find((r) => r.url === remoteUrl);\n    if (!source) {\n      logErr(`Library \"${name}\" is not registered in the store — nothing to yank.`);\n      process.exit(1);\n    }\n\n    const targetName = opts.asset ? bareName(opts.asset) : undefined;\n    const candidates = (await pub.sourceCandidates(source.id)).filter(\n      (c) => c.published && (!targetName || c.name === targetName),\n    );\n    if (candidates.length === 0) {\n      logInfo(\"No published assets matched — nothing to yank.\");\n      return;\n    }\n\n    // Report each yanked asset under its own namespace\n    // (`assets[].publisher ?? manifest.publisher`); fall back to `kind:name`\n    // when the manifest is absent or declares no namespace for it.\n    const manifest = loadSkPublishManifest(lib.path);\n    const yanked: string[] = [];\n    for (const c of candidates) {\n      try {\n        await pub.assetUnpublish(c.id);\n        const entry = manifest?.assets?.find((a) => a.kind === c.kind && a.name === c.name);\n        const ns = manifest && entry ? assetNamespace(entry, manifest) : undefined;\n        yanked.push(ns ? refFor(c.kind, ns, c.name, c.version) : `${c.kind}:${c.name}`);\n      } catch (err) {\n        logErr(\n          `Failed to yank ${c.kind}:${c.name}: ${err instanceof Error ? err.message : String(err)}`,\n        );\n      }\n    }\n\n    logOk(`Yanked ${yanked.length} asset(s):`);\n    for (const r of yanked) logInfo(`  ${r}`);\n  } finally {\n    close();\n  }\n}\n"]}

package/dist/open-library-XBR46DJL.js

@@ -1,56 +0,0 @@
-export { LocalCatalogDisabledError, openCatalogSource, openLibrary, openLibraryManager, resolveCatalogSource } from './chunk-BEYNH2LS.js';
-import './chunk-T2VBPVWZ.js';
-import './chunk-JJJ2G4K2.js';
-import './chunk-RQMIZONH.js';
-import './chunk-JFLQICIU.js';
-import './chunk-QXKUFROW.js';
-import './chunk-U673DB5U.js';
-import './chunk-LOO5CB5M.js';
-import './chunk-BIRW3HOG.js';
-import './chunk-TZERN27L.js';
-import './chunk-BOT64P3U.js';
-import './chunk-6OHZUUR7.js';
-import './chunk-7DN6JKP2.js';
-import './chunk-M4OG2YN4.js';
-import './chunk-X37JUNEW.js';
-import './chunk-G5SUWZEU.js';
-import './chunk-PJJSBZZP.js';
-import './chunk-7RGTAEG6.js';
-import './chunk-JCPD4QRM.js';
-import './chunk-PKBLJI23.js';
-import './chunk-6CYKTHNT.js';
-import './chunk-MAZ3UXJK.js';
-import './chunk-E5NQRHEB.js';
-import './chunk-F3D25RGM.js';
-import './chunk-3TXEJN4W.js';
-import './chunk-ISHJITXJ.js';
-import './chunk-LNFKL23K.js';
-import './chunk-JRN5QF4C.js';
-import './chunk-NUELZWCF.js';
-import './chunk-S2H3RBK7.js';
-import './chunk-PKE3PXOK.js';
-import './chunk-KTBKW2FI.js';
-import './chunk-UQ6LFBPZ.js';
-import './chunk-COAFAYBS.js';
-import './chunk-76FLBODK.js';
-import './chunk-BRK5QZKI.js';
-import './chunk-4GY63JU6.js';
-import './chunk-QPWR3YMY.js';
-import './chunk-5KRMNUL4.js';
-import './chunk-C5HFK34M.js';
-import './chunk-MWXYN6NY.js';
-import './chunk-KJSC2ZD6.js';
-import './chunk-L5VSIPQD.js';
-import './chunk-VTETQCR6.js';
-import './chunk-KPKGWXUJ.js';
-import './chunk-RVRB27AN.js';
-import './chunk-JMIKGAUA.js';
-import './chunk-IZQOO6MN.js';
-import './chunk-VSX2G7LA.js';
-import './chunk-DKXNKFKP.js';
-import './chunk-RXGPFAMN.js';
-import './chunk-C3CAXQMA.js';
-import './chunk-BOFL7GIF.js';
-import './chunk-NSBPE2FW.js';
-//# sourceMappingURL=open-library-XBR46DJL.js.map
-//# sourceMappingURL=open-library-XBR46DJL.js.map

package/dist/serve-preflight-CGA5G3AE.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../cli/src/commands/serve-preflight.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+BA,IAAM,YAAA,GAGF;AAAA,EACF,YAAA,EAAc;AAAA,IACZ,GAAA,EAAK,gCAAA;AAAA,IACL,IAAA,EAAM,CAAC,UAAA,KACL,cAAA;AAAA,MACE,gCAAA;AAAA,MACA,UAAA;AAAA,MACA,MAAM,OAAO,gCAAgC;AAAA;AAC/C,GACJ;AAAA,EACA,KAAA,EAAO;AAAA,IACL,GAAA,EAAK,mBAAA;AAAA,IACL,IAAA,EAAM,CAAC,UAAA,KACL,cAAA,CAAe,qBAAqB,UAAA,EAAY,MAAM,OAAO,mBAAmB,CAAC;AAAA;AAEvF,CAAA;AAYA,eAAsB,eAAA,CACpB,UAAA,EACA,eAAA,EACA,KAAA,GAA6B,YAAA,EACL;AACxB,EAAA,MAAM,WAAW,MAAM,eAAA;AAAA,IACrB,UAAA;AAAA,IACA,eAAA,GAAkB,EAAE,OAAA,EAAS,eAAA,KAAoB;AAAC,GACpD;AACA,EAAA,MAAM,OAAA,GAAU,SAAS,OAAA,IAAW,kBAAA;AACpC,EAAA,MAAM,GAAA,GAAM,MAAM,OAAO,CAAA;AACzB,EAAA,IAAI,CAAC,KAAK,OAAO,IAAA;AACjB,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,CAAI,KAAK,UAAU,CAAA;AACzB,IAAA,OAAO,IAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,CAAA,IAAA,EAAO,OAAO,CAAA,eAAA,EAAkB,GAAA,CAAI,GAAG,CAAA,oCAAA,EAAuC,eAAA,CAAgB,UAAU,CAAC,CAAA,sBAAA,EAAyB,iBAAA,CAAkB,GAAA,CAAI,GAAA,EAAK,UAAU,CAAC,CAAA,0CAAA,CAAA;AAAA,EACjL;AACF;AAYA,eAAsB,sBAAA,CACpB,UAAA,EACA,IAAA,EACA,KAAA,EACwB;AACxB,EAAA,MAAM,UACJ,IAAA,EAAM,OAAA,IAAW,yBAAyB,UAAU,CAAA,CAAE,gBAAgB,OAAA,KAAY,IAAA;AACpF,EAAA,IAAI,CAAC,SAAS,OAAO,IAAA;AACrB,EAAA,MAAM,KAAA,GAAQ,KAAA,IAAA,CAAU,MAAM,OAAO,2BAAmC,CAAA,EAAG,kBAAA;AAC3E,EAAA,OAAO,MAAM,UAAU,CAAA;AACzB;AAoBA,eAAsB,eAAA,CACpB,UAAA,EACA,SAAA,EACA,QAAA,GAA2C,MAAM,gBAAA,CAAiB,EAAE,UAAA,EAAY,CAAA,CAAE,MAAA,EAClF,SAAA,GAA4D,mBAAA,EACpC;AACxB,EAAA,IAAI,CAAC,SAAA,CAAU,KAAA,EAAO,OAAO,IAAA;AAE7B,EAAA,MAAM,eAAA,GAAkB,wBAAA,CAAyB,UAAU,CAAA,CAAE,OAAA,EAAS,QAAA;AACtE,EAAA,IAAI,eAAA,IAAmB,eAAA,KAAoB,KAAA,EAAO,OAAO,IAAA;AACzD,EAAA,MAAM,QAAA,GAAW,MAAM,eAAA,CAAgB,UAAA,EAAY;AAAA,IACjD,GAAI,UAAU,OAAA,GAAU,EAAE,SAAS,SAAA,CAAU,OAAA,KAAY,EAAC;AAAA,IAC1D,OAAO,SAAA,CAAU;AAAA,GAClB,CAAA;AACD,EAAA,IAAI,CAAC,QAAA,CAAS,KAAA,EAAO,OAAO,IAAA;AAC5B,EAAA,MAAM,QAAQ,QAAA,EAAS;AACvB,EAAA,MAAM,QAAA,GAAW,UAAU,SAAA,EAAW,MAAA,GAClC,oBAAoB,KAAA,EAAO,SAAA,CAAU,SAAS,CAAA,GAC9C,KAAA;AACJ,EAAA,MAAM,OAAA,GAAU,SAAS,OAAA,IAAW,kBAAA;AACpC,EAAA,MAAM,QAAQ,EAAE,QAAA,EAAU,QAAA,EAAU,KAAA,EAAO,SAAS,KAAA,EAAM;AAE1D,EAAA,MAAM,OAAA,GACJ,kBAAkB,OAAA,EAAS,KAAK,MAC/B,OAAA,KAAY,KAAA,GAAQ,kBAAA,CAAmB,KAAK,CAAA,GAAI,MAAA,CAAA;AACnD,EAAA,IAAI,SAAS,OAAO,OAAA;AAEpB,EAAA,MAAM,UACJ,OAAA,KAAY,KAAA,IACZ,CAAC,eAAA,CAAgB,QAAQ,CAAA,CAAE,IAAA;AAAA,IACzB,CAAC,GAAG,KAAK,CAAA,KAAA,CAAO,KAAA,CAAM,IAAA,KAAS,KAAA,IAAS,KAAA,CAAM,IAAA,KAAS,OAAA,KAAY,cAAA,CAAe,KAAK;AAAA,GACzF;AACF,EAAA,OAAA,CAAQ,UAAU,MAAM,SAAA,CAAU,QAAA,CAAS,KAAK,IAAI,MAAA,KAAc,IAAA;AACpE;AAUO,SAAS,qBAAqB,UAAA,EAAmC;AACtE,EAAA,IAAI;AACF,IAAA,IAAI,QAAA,CAAS,UAAU,CAAA,CAAE,WAAA,IAAe,OAAO,IAAA;AAAA,EACjD,CAAA,CAAA,MAAQ;AAAA,EAER;AACA,EAAA,OAAO,mBAAmB,UAAU,CAAA,oBAAA,CAAA;AACtC;AAYA,eAAsB,iBAAA,CACpB,YACA,eAAA,EACwB;AACxB,EAAA,MAAM,WAAW,MAAM,eAAA;AAAA,IACrB,UAAA;AAAA,IACA,eAAA,GAAkB,EAAE,OAAA,EAAS,eAAA,KAAoB;AAAC,GACpD;AACA,EAAA,OAAO,qBAAA,CAAsB,QAAA,CAAS,OAAA,IAAW,kBAAkB,CAAA,IAAK,IAAA;AAC1E;AAUO,SAAS,0BAA0B,UAAA,EAAmC;AAC3E,EAAA,IAAI;AACF,IAAA,eAAA,CAAgB,UAAU,CAAA;AAC1B,IAAA,OAAO,IAAA;AAAA,EACT,SAAS,GAAA,EAAK;AACZ,IAAA,IAAI,GAAA,YAAe,uBAAA,EAAyB,OAAO,GAAA,CAAI,OAAA;AACvD,IAAA,MAAM,GAAA;AAAA,EACR;AACF","file":"serve-preflight-CGA5G3AE.js","sourcesContent":["/**\n * Start-up checks for `skaile serve`: fail with one actionable line before the\n * runner reports ready, instead of on the first prompt.\n */\n\nimport { statSync } from \"node:fs\";\nimport {\n  checkHarnessModel,\n  checkOmpListedModel,\n  checkOmpServeModel,\n} from \"@skaile/workspaces/bridge\";\nimport {\n  isEntryEnabled,\n  type MergedAIProviderRegistry,\n  pickRegistryEntries,\n  registryEntries,\n} from \"@skaile/workspaces/core/provider-registry\";\nimport { loadRegistryView } from \"./providers.ts\";\nimport {\n  AgentRefResolutionError,\n  DEFAULT_HARNESS_ID,\n  installCommandFor,\n  loadHarnessSdk,\n  resolveAgentDir,\n  resolveSettings,\n  resolveSkWorkspaceConfig,\n  sdkLookupPlaces,\n} from \"@skaile/workspaces/core\";\nimport { unknownHarnessMessage } from \"../harness-error.ts\";\n\n/** Optional SDK a harness needs at run time, and how to probe that it loads from a project. */\nconst HARNESS_SDKS: Record<\n  string,\n  { pkg: string; load: (projectDir: string) => Promise<unknown> }\n> = {\n  \"claude-sdk\": {\n    pkg: \"@anthropic-ai/claude-agent-sdk\",\n    load: (projectDir) =>\n      loadHarnessSdk(\n        \"@anthropic-ai/claude-agent-sdk\",\n        projectDir,\n        () => import(\"@anthropic-ai/claude-agent-sdk\"),\n      ),\n  },\n  codex: {\n    pkg: \"@openai/codex-sdk\",\n    load: (projectDir) =>\n      loadHarnessSdk(\"@openai/codex-sdk\", projectDir, () => import(\"@openai/codex-sdk\")),\n  },\n};\n\n/**\n * Check that the harness `skaile serve` would start can load its SDK. The probe\n * is the same lookup the harness runs in `start()` (the project's `node_modules`,\n * then next to skaile), so a compiled binary that bundles the SDK passes.\n *\n * @param projectDir - Project the server serves.\n * @param harnessOverride - `--harness`, when given.\n * @param probe - Replaceable loader table, for tests.\n * @returns The one-line problem, or `null` when the harness can start.\n */\nexport async function checkHarnessSdk(\n  projectDir: string,\n  harnessOverride?: string,\n  probe: typeof HARNESS_SDKS = HARNESS_SDKS,\n): Promise<string | null> {\n  const settings = await resolveSettings(\n    projectDir,\n    harnessOverride ? { harness: harnessOverride } : {},\n  );\n  const harness = settings.harness ?? DEFAULT_HARNESS_ID;\n  const sdk = probe[harness];\n  if (!sdk) return null;\n  try {\n    await sdk.load(projectDir);\n    return null;\n  } catch {\n    return `The ${harness} harness needs ${sdk.pkg}, which is not installed. Looked in ${sdkLookupPlaces(projectDir)}. Run in the project: ${installCommandFor(sdk.pkg, projectDir)} (or pick another harness with --harness).`;\n  }\n}\n\n/**\n * Check that the model endpoint can load pi-ai, when `skaile serve` will start the\n * endpoint (`--model-endpoint`, or `model_endpoint.enabled` in skaile.yaml). Without\n * this the endpoint printed its ready line and answered every request with a 500.\n *\n * @param projectDir - Project the server serves.\n * @param flag - Parsed `--model-endpoint`, when given.\n * @param probe - Replaceable pi-ai check, for tests.\n * @returns The one-line problem (both places looked in, the install command), or `null`.\n */\nexport async function checkModelEndpointPeer(\n  projectDir: string,\n  flag: { enabled?: boolean } | undefined,\n  probe?: (projectDir: string) => Promise<string | null>,\n): Promise<string | null> {\n  const enabled =\n    flag?.enabled ?? resolveSkWorkspaceConfig(projectDir).model_endpoint?.enabled === true;\n  if (!enabled) return null;\n  const check = probe ?? (await import(\"@skaile/workspaces/model-endpoint\")).checkPiAiInstalled;\n  return check(projectDir);\n}\n\n/**\n * Check that the harness `skaile serve` would start can take the model given with `--model`: the\n * refusal a first prompt would raise as a fatal `error` (p1334), one line before the ready line.\n * The same check as `skaile run --dry-run`.\n *\n * Only an explicit `--model` is checked. A model that comes from `skaile.yaml` or the settings\n * files is not: the platform sends its registry layer at `session_init`, after the server is up,\n * so a provider the local `providers.yml` lacks may still be served. That model is checked at\n * the first prompt, as before. The check sees the local registry, narrowed by `--providers` as\n * the session narrows it, and is skipped when the registry comes from the host\n * (`secrets.provider` other than `env`).\n *\n * @param projectDir - Project the server serves.\n * @param overrides - `--harness`, `--model` and `--providers`, when given.\n * @param registry - Replaceable registry loader, for tests.\n * @param ompListed - Replaceable omp model lookup (`omp models find`), for tests.\n * @returns The one-line refusal, or `null` when the harness takes the model.\n */\nexport async function checkServeModel(\n  projectDir: string,\n  overrides: { harness?: string; model?: string; providers?: readonly string[] },\n  registry: () => MergedAIProviderRegistry = () => loadRegistryView({ projectDir }).merged,\n  ompListed: (model: string) => Promise<string | undefined> = checkOmpListedModel,\n): Promise<string | null> {\n  if (!overrides.model) return null;\n  // The platform delivers its registry layer over the transport after the server is up (p1332).\n  const secretsProvider = resolveSkWorkspaceConfig(projectDir).secrets?.provider;\n  if (secretsProvider && secretsProvider !== \"env\") return null;\n  const settings = await resolveSettings(projectDir, {\n    ...(overrides.harness ? { harness: overrides.harness } : {}),\n    model: overrides.model,\n  });\n  if (!settings.model) return null;\n  const local = registry();\n  const narrowed = overrides.providers?.length\n    ? pickRegistryEntries(local, overrides.providers)\n    : local;\n  const harness = settings.harness ?? DEFAULT_HARNESS_ID;\n  const input = { registry: narrowed, model: settings.model };\n  // A server answers its first prompt after it is ready: omp must be known to take the model now (p1334).\n  const refusal =\n    checkHarnessModel(harness, input) ??\n    (harness === \"omp\" ? checkOmpServeModel(input) : undefined);\n  if (refusal) return refusal;\n  // No enabled registry entry: omp serves from its own agent directory, which only omp can list.\n  const ownHome =\n    harness === \"omp\" &&\n    !registryEntries(narrowed).some(\n      ([, entry]) => (entry.kind === \"llm\" || entry.kind === \"embed\") && isEntryEnabled(entry),\n    );\n  return (ownHome ? await ompListed(settings.model) : undefined) ?? null;\n}\n\n/**\n * Check that `--project-dir` is an existing directory, before `serve` creates anything in it. A\n * missing folder used to fail with a raw `ENOENT` stack from the log store (p1732). A symlink to\n * a directory passes; a relative path is read from the current directory.\n *\n * @param projectDir - The `--project-dir` value as typed.\n * @returns The one-line problem, or `null` when the directory exists.\n */\nexport function checkServeProjectDir(projectDir: string): string | null {\n  try {\n    if (statSync(projectDir).isDirectory()) return null;\n  } catch {\n    // missing, a dangling link or unreadable: the same line\n  }\n  return `--project-dir: '${projectDir}' is not a directory`;\n}\n\n/**\n * Check that the harness `skaile serve` would start is one that is registered: `--harness`, else\n * the project's settings, else the default. The same refusal `run` prints; without it the first\n * session build died with a raw stack (p1731). Load the project's plugins first: a plugin's\n * harness counts.\n *\n * @param projectDir - Project the server serves.\n * @param harnessOverride - `--harness`, when given.\n * @returns The one-line problem, or `null` when the harness is known.\n */\nexport async function checkServeHarness(\n  projectDir: string,\n  harnessOverride?: string,\n): Promise<string | null> {\n  const settings = await resolveSettings(\n    projectDir,\n    harnessOverride ? { harness: harnessOverride } : {},\n  );\n  return unknownHarnessMessage(settings.harness ?? DEFAULT_HARNESS_ID) ?? null;\n}\n\n/**\n * Check that `agent.definition` of the project's `skaile.yaml` resolves, the rule `validate`\n * applies (`agent_ref_unresolved`, p1733). Without it `serve` died with a raw\n * `AgentRefResolutionError` stack.\n *\n * @param projectDir - Project the server serves.\n * @returns The error message, or `null` when no definition is set or it resolves.\n */\nexport function checkServeAgentDefinition(projectDir: string): string | null {\n  try {\n    resolveAgentDir(projectDir);\n    return null;\n  } catch (err) {\n    if (err instanceof AgentRefResolutionError) return err.message;\n    throw err;\n  }\n}\n"]}