@smthrs/gateway 0.35.0 → 1.0.0-rc.4

package/dist/cjs/internal/NativeGateway.js

@@ -0,0 +1,187 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var NativeGateway_exports = {};
+__export(NativeGateway_exports, {
+  bearerPrincipal: () => bearerPrincipal,
+  bindRefusal: () => bindRefusal,
+  defaultServerOptions: () => defaultServerOptions,
+  ingressOptions: () => ingressOptions,
+  isLoopbackHost: () => isLoopbackHost,
+  layerAuth: () => layerAuth,
+  listenOptions: () => listenOptions,
+  makeLayer: () => makeLayer,
+  scopedPrincipal: () => scopedPrincipal,
+  scopedTokenPaths: () => scopedTokenPaths
+});
+module.exports = __toCommonJS(NativeGateway_exports);
+var import_control = require("@smthrs/control");
+var import_effect = require("effect");
+var import_http = require("effect/unstable/http");
+var import_rpc = require("effect/unstable/rpc");
+var import_GatewayError = require("../GatewayError.js");
+var GatewayServer = __toESM(require("../GatewayServer.js"), 1);
+const defaultServerOptions = { host: "127.0.0.1", port: 7331 };
+const isLoopbackHost = (host) => GatewayServer.loopbackHostNames.includes(host);
+const bindRefusal = (options) => {
+  const setting = (0, import_GatewayError.settingRefusal)("The gateway keepalive cadence", options.heartbeatMillis) ?? (0, import_GatewayError.settingRefusal)("The gateway request body limit", options.maxRequestBodyBytes);
+  if (setting !== void 0) return setting;
+  if (options.runtimeBridge !== void 0 && (options.credential === void 0 || options.credential === "")) {
+    return new import_GatewayError.GatewayError({
+      code: "bind_failed",
+      message: "Refusing to enable the runtime bridge without a bearer credential"
+    });
+  }
+  const host = options.host ?? "127.0.0.1";
+  if (isLoopbackHost(host)) return void 0;
+  if (options.listen !== true) {
+    return new import_GatewayError.GatewayError({
+      code: "bind_failed",
+      message: `Refusing non-loopback gateway bind ${host} without an explicit --listen opt-in`
+    });
+  }
+  if (options.credential === void 0 || options.credential === "") {
+    return new import_GatewayError.GatewayError({
+      code: "bind_failed",
+      message: `Refusing non-loopback gateway bind ${host} without a bearer credential`
+    });
+  }
+  return void 0;
+};
+const listenOptions = (options) => import_effect.Effect.suspend(() => {
+  const refusal = bindRefusal(options);
+  if (refusal !== void 0) return import_effect.Effect.fail(refusal);
+  const {
+    allowedHosts: _allowedHosts,
+    credential: _credential,
+    heartbeatMillis: _cadence,
+    listen: _listen,
+    maxRequestBodyBytes: _maxBody,
+    runtimeBridge: _runtimeBridge,
+    ...node
+  } = options;
+  return import_effect.Effect.succeed({ ...node, host: node.host ?? "127.0.0.1" });
+});
+const layerAuth = (options) => options.credential === void 0 || options.credential === "" ? import_control.ControlRpcs.layerAuth({
+  authenticate: (headers) => {
+    const token = options.operatorToken;
+    if (token === void 0 || token === "") {
+      return import_effect.Effect.succeed({ id: "loopback", kind: "anonymous", stampedAt: 0 });
+    }
+    return import_control.ControlRpcs.bearerAuthenticator({
+      token,
+      principal: { id: "local", kind: "operator" }
+    }).authenticate(headers).pipe(
+      import_effect.Effect.catchTag(
+        "/control/Unauthorized",
+        () => import_effect.Effect.succeed({ id: "loopback", kind: "anonymous", stampedAt: 0 })
+      )
+    );
+  }
+}, gatewayRunVisibility) : import_control.ControlRpcs.layerAuth(credentialAuthenticator(options.credential), gatewayRunVisibility);
+const gatewayRunVisibility = { seesAllRuns: () => true };
+const credentialAuthenticator = (credential) => import_control.ControlRpcs.anyAuthenticator([
+  import_control.ControlRpcs.bearerAuthenticator({ token: credential, principal: bearerPrincipal }),
+  import_control.ScopedToken.authenticator({ key: credential, principal: scopedPrincipal })
+]);
+const bearerPrincipal = Object.freeze({ id: "gateway", kind: "bearer" });
+const scopedTokenPaths = [
+  "/rpc",
+  "/rpc/ws",
+  "/projections",
+  "/projections/ws",
+  "/auth/ticket"
+];
+const scopedPrincipal = Object.freeze({ id: "gateway", kind: "scoped" });
+const ingressOptions = (options) => {
+  const maxRequestBodyBytes = options.maxRequestBodyBytes;
+  const host = options.host ?? "127.0.0.1";
+  const allowedHosts = [...GatewayServer.loopbackHostHeaderNames, ...options.allowedHosts ?? []];
+  const bindAuthority = URL.parse(`http://${host.includes(":") ? `[${host}]` : host}`);
+  if (host !== "0.0.0.0" && host !== "::" && bindAuthority !== null && !allowedHosts.includes(bindAuthority.hostname)) {
+    allowedHosts.push(bindAuthority.hostname);
+  }
+  if (options.credential === void 0 || options.credential === "") {
+    return {
+      loopbackOnly: true,
+      ...maxRequestBodyBytes === void 0 ? {} : { maxRequestBodyBytes },
+      allowedHosts
+    };
+  }
+  const bearer = import_control.ControlRpcs.bearerAuthenticator({ token: options.credential, principal: bearerPrincipal });
+  const scoped = credentialAuthenticator(options.credential);
+  return {
+    allowedHosts,
+    ...maxRequestBodyBytes === void 0 ? {} : { maxRequestBodyBytes },
+    authorize: (headers, path) => (scopedTokenPaths.includes(path) ? scoped : bearer).authenticate(headers).pipe(
+      import_effect.Effect.match({ onFailure: () => false, onSuccess: () => true })
+    )
+  };
+};
+const bindFailure = (failure) => new import_GatewayError.GatewayError({
+  code: "bind_failed",
+  message: "The gateway socket could not be bound",
+  cause: { _tag: failure._tag }
+});
+const mapServeError = (bind, server) => server.pipe(
+  import_effect.Layer.catch(
+    (failure) => import_effect.Layer.effectContext(
+      import_effect.Effect.logError({
+        message: "The gateway socket could not be bound",
+        host: bind.host,
+        port: bind.port,
+        cause: failure
+      }).pipe(import_effect.Effect.andThen(import_effect.Effect.fail(bindFailure(failure))))
+    )
+  )
+);
+const makeLayer = (server) => (health, options = defaultServerOptions) => import_effect.Layer.unwrap(
+  import_effect.Effect.map(listenOptions(options), (nodeOptions) => import_http.HttpRouter.serve(
+    GatewayServer.layer(health, {
+      ...options.heartbeatMillis === void 0 ? {} : { heartbeatMillis: options.heartbeatMillis },
+      ingress: ingressOptions(options),
+      ...options.runtimeBridge === void 0 ? {} : {
+        runtimeBridge: {
+          ...options.runtimeBridge,
+          authenticate: import_control.ControlRpcs.bearerAuthenticator({
+            // listenOptions rejects a runtime bridge without a credential.
+            token: options.credential,
+            principal: bearerPrincipal
+          }).authenticate
+        }
+      }
+    }).pipe(
+      import_effect.Layer.provide(layerAuth(options)),
+      import_effect.Layer.provide(import_rpc.RpcSerialization.layerNdjson)
+    ),
+    { disableListenLog: true, disableLogger: true }
+  ).pipe(
+    import_effect.Layer.provideMerge(mapServeError(nodeOptions, server(nodeOptions)))
+  ))
+);
+//# sourceMappingURL=NativeGateway.js.map

package/dist/cjs/internal/NativeGateway.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/internal/NativeGateway.ts"],
+  "sourcesContent": ["/**\n * Shared native gateway bind policy, credential policy,\n * and the one composition a `smithers serve` verb hosts.\n *\n * Two rules decide whether a bind is allowed, and both fail closed:\n *\n * 1. A non-loopback host requires an explicit `listen` opt-in. Binding\n *    `0.0.0.0` because a port was free is how a workspace gateway ends up on\n *    a shared network by accident.\n * 2. A non-loopback bind requires a bearer credential. The control plane can\n *    launch runs, cancel them, and approve capability grants; reachable from\n *    another machine, an unauthenticated one is a remote execution service.\n *\n * A loopback bind with no network credential allows anonymous reads; approval\n * decisions require the session operator token. Ingress still checks Host and\n * Origin so a web page cannot exercise the loopback endpoint.\n *\n * @since 1.0.0\n */\n\nimport { ControlRpcs, ScopedToken } from \"@smthrs/control\"\nimport { Effect, Layer } from \"effect\"\nimport { HttpRouter } from \"effect/unstable/http\"\nimport type { HttpServer } from \"effect/unstable/http/HttpServer\"\nimport type { ServeError } from \"effect/unstable/http/HttpServerError\"\nimport { RpcSerialization } from \"effect/unstable/rpc\"\nimport type { ListenOptions } from \"node:net\"\nimport { GatewayError, settingRefusal } from \"../GatewayError.ts\"\nimport * as GatewayServer from \"../GatewayServer.ts\"\nimport type * as RuntimeBridge from \"../RuntimeBridge.ts\"\n\n/**\n * Where the gateway binds, and whether a non-loopback bind was asked for.\n *\n * @since 1.0.0\n * @category models\n */\nexport interface ServerOptions extends ListenOptions {\n  /** Additional accepted Host header names (without ports), for network or proxy access. */\n  readonly allowedHosts?: ReadonlyArray<string> | undefined\n  /** The `--listen` opt-in required for a non-loopback host. */\n  readonly listen?: boolean | undefined\n  /** The shared bearer credential, required for a non-loopback bind. */\n  readonly credential?: string | undefined\n  /** Per-session approval token on credential-free loopback. Read calls remain anonymous. */\n  readonly operatorToken?: string | undefined\n  /**\n   * How often an idle followed `Watch` on `/rpc/ws` and an idle followed\n   * `Projection.Subscribe` on `/projections/ws` emit a keepalive frame. Unset,\n   * both run at `Projections.heartbeatIntervalMillis` unless the supplied\n   * `Projections` service was built with its own cadence. A relay with an idle\n   * cut shorter than that one needs a shorter cadence here.\n   */\n  readonly heartbeatMillis?: number | undefined\n  /** Maximum bytes accepted on one HTTP RPC request. Default one MiB. */\n  readonly maxRequestBodyBytes?: number | undefined\n  /** Immutable identity of an opt-in packaged Flow runtime bridge. */\n  readonly runtimeBridge?: Omit<RuntimeBridge.Config, \"authenticate\"> | undefined\n}\n\n/**\n * The default bind: loopback, port 7331, no credential.\n *\n * @since 1.0.0\n * @category models\n */\nexport const defaultServerOptions: ServerOptions = { host: \"127.0.0.1\", port: 7331 }\n\n/**\n * Whether a host names this machine only.\n *\n * @param host the host to classify\n * @since 1.0.0\n * @category predicates\n */\nexport const isLoopbackHost = (host: string): boolean => GatewayServer.loopbackHostNames.includes(host)\n\n/**\n * The typed refusal a requested bind earns, or `undefined` when it is allowed.\n *\n * Every start-time rule this module enforces answers here as a `bind_failed`\n * `GatewayError`, so a host that wants to report a refusal rather than crash on\n * one asks this before it composes a layer. {@link listenOptions} and\n * {@link layer} fail with exactly what this returns.\n *\n * @param options the requested bind\n * @since 1.0.0\n * @category constructors\n */\nexport const bindRefusal = (options: ServerOptions): GatewayError | undefined => {\n  const setting = settingRefusal(\"The gateway keepalive cadence\", options.heartbeatMillis) ??\n    settingRefusal(\"The gateway request body limit\", options.maxRequestBodyBytes)\n  if (setting !== undefined) return setting\n  // The bridge authenticates only with the bearer credential, even on\n  // loopback, so a bridge without one would answer 401 to every request.\n  if (options.runtimeBridge !== undefined && (options.credential === undefined || options.credential === \"\")) {\n    return new GatewayError({\n      code: \"bind_failed\",\n      message: \"Refusing to enable the runtime bridge without a bearer credential\"\n    })\n  }\n  const host = options.host ?? \"127.0.0.1\"\n  if (isLoopbackHost(host)) return undefined\n  if (options.listen !== true) {\n    return new GatewayError({\n      code: \"bind_failed\",\n      message: `Refusing non-loopback gateway bind ${host} without an explicit --listen opt-in`\n    })\n  }\n  if (options.credential === undefined || options.credential === \"\") {\n    return new GatewayError({\n      code: \"bind_failed\",\n      message: `Refusing non-loopback gateway bind ${host} without a bearer credential`\n    })\n  }\n  return undefined\n}\n\n/**\n * Applies the bind policy, returning the admitted Node options or a typed\n * `bind_failed` refusal.\n *\n * @param options the requested bind\n * @since 1.0.0\n * @category constructors\n */\nexport const listenOptions = (options: ServerOptions): Effect.Effect<ListenOptions, GatewayError> =>\n  Effect.suspend(() => {\n    const refusal = bindRefusal(options)\n    if (refusal !== undefined) return Effect.fail(refusal)\n    // `credential`, `listen`, and the keepalive cadence are this module's, not\n    // `node:net`'s: they are named here so the rest is exactly a bind.\n    const {\n      allowedHosts: _allowedHosts,\n      credential: _credential,\n      heartbeatMillis: _cadence,\n      listen: _listen,\n      maxRequestBodyBytes: _maxBody,\n      runtimeBridge: _runtimeBridge,\n      ...node\n    } = options\n    return Effect.succeed({ ...node, host: node.host ?? \"127.0.0.1\" })\n  })\n\n/**\n * The authentication both RPC mounts run under.\n *\n * A configured credential authenticates every request that presents it and\n * stamps the same server-owned principal. A scoped token minted under that\n * credential (`@smthrs/control` `ScopedToken`) authenticates only the\n * procedures, run, or flow it names, until it expires, and stamps\n * {@link scopedPrincipal}. With no credential the composition is\n * loopback-only (see {@link listenOptions}) and every request runs as the\n * anonymous read principal. A session operator token alone stamps the local\n * operator for approval decisions; without it approvals are unauthorized.\n *\n * @param options the requested bind\n * @since 1.0.0\n * @category layers\n */\nexport const layerAuth = (options: ServerOptions): Layer.Layer<ControlRpcs.ControlAuth> =>\n  options.credential === undefined || options.credential === \"\"\n    ? ControlRpcs.layerAuth({\n      authenticate: (headers) => {\n        const token = options.operatorToken\n        if (token === undefined || token === \"\") {\n          return Effect.succeed({ id: \"loopback\", kind: \"anonymous\", stampedAt: 0 })\n        }\n        return ControlRpcs.bearerAuthenticator({\n          token,\n          principal: { id: \"local\", kind: \"operator\" }\n        }).authenticate(headers).pipe(\n          Effect.catchTag(\n            \"/control/Unauthorized\",\n            () => Effect.succeed({ id: \"loopback\", kind: \"anonymous\", stampedAt: 0 })\n          )\n        )\n      }\n    }, gatewayRunVisibility)\n    : ControlRpcs.layerAuth(credentialAuthenticator(options.credential), gatewayRunVisibility)\n\n/**\n * Every identity this gateway stamps reads every run. They all stand for the\n * one operator who holds the gateway's credential, or the machine's loopback\n * user when there is none; a scoped token is that operator's grant, confined\n * by the procedures, run, or flow it names rather than by who launched a run.\n */\nconst gatewayRunVisibility: ControlRpcs.AuthOptions = { seesAllRuns: () => true }\n\n/**\n * The bearer credential itself, or a scoped token minted under it.\n *\n * The runtime bridge deliberately does not use this: it accepts the bearer\n * alone, because a scoped token names control procedures and the bridge's\n * versioned commands are not those.\n */\nconst credentialAuthenticator = (credential: string): ControlRpcs.Authenticator =>\n  ControlRpcs.anyAuthenticator([\n    ControlRpcs.bearerAuthenticator({ token: credential, principal: bearerPrincipal }),\n    ScopedToken.authenticator({ key: credential, principal: scopedPrincipal })\n  ])\n\n/**\n * The identity stamped only after this gateway verifies its configured token.\n * Hosts may explicitly delegate operator decisions to this exact identity.\n * @category constants\n * @since 1.0.0\n */\nexport const bearerPrincipal = Object.freeze({ id: \"gateway\", kind: \"bearer\" })\n\n/**\n * The protected mounts a scoped token may reach: those guarded in band by\n * `ControlAuth`, which checks each frame's procedure against the token, and\n * the ticket exchange that opens their sockets.\n * @category constants\n * @since 1.0.0\n */\nexport const scopedTokenPaths: ReadonlyArray<string> = [\n  \"/rpc\",\n  \"/rpc/ws\",\n  \"/projections\",\n  \"/projections/ws\",\n  \"/auth/ticket\"\n]\n\n/**\n * The identity stamped after this gateway verifies a scoped token minted\n * under its configured credential. It is its own kind so that delegating\n * approval to {@link bearerPrincipal} does not delegate it to every token\n * minted from the bearer; a host that wants a scoped `approve:runs` token to\n * decide delegates to this identity explicitly.\n * @category constants\n * @since 1.0.0\n */\nexport const scopedPrincipal = Object.freeze({ id: \"gateway\", kind: \"scoped\" })\n\n/**\n * The ingress policy a requested bind runs behind.\n *\n * The accepted Host names are the loopback names, the operator's\n * `allowedHosts`, and the concrete bind host itself, so `--host 192.168.1.10`\n * is reachable at that address without naming it twice. A wildcard bind\n * (`0.0.0.0` or `::`) adds nothing: every interface is not a Host name, and\n * the operator names the reachable ones. Protected paths are authenticated\n * before any request body is read.\n *\n * @param options the requested bind\n * @since 1.0.0\n * @category constructors\n */\nexport const ingressOptions = (options: ServerOptions): GatewayServer.IngressOptions => {\n  const maxRequestBodyBytes = options.maxRequestBodyBytes\n  const host = options.host ?? \"127.0.0.1\"\n  const allowedHosts = [...GatewayServer.loopbackHostHeaderNames, ...options.allowedHosts ?? []]\n  const bindAuthority = URL.parse(`http://${host.includes(\":\") ? `[${host}]` : host}`)\n  if (host !== \"0.0.0.0\" && host !== \"::\" && bindAuthority !== null && !allowedHosts.includes(bindAuthority.hostname)) {\n    allowedHosts.push(bindAuthority.hostname)\n  }\n  if (options.credential === undefined || options.credential === \"\") {\n    return {\n      loopbackOnly: true,\n      ...(maxRequestBodyBytes === undefined ? {} : { maxRequestBodyBytes }),\n      allowedHosts\n    }\n  }\n  // The edge knows no call, so a scoped token passes here on its signature\n  // and expiry, and only toward the mounts whose every frame `ControlAuth`\n  // judges in band; journal sync and the runtime bridge take the bearer alone.\n  const bearer = ControlRpcs.bearerAuthenticator({ token: options.credential, principal: bearerPrincipal })\n  const scoped = credentialAuthenticator(options.credential)\n  return {\n    allowedHosts,\n    ...(maxRequestBodyBytes === undefined ? {} : { maxRequestBodyBytes }),\n    authorize: (headers, path) =>\n      (scopedTokenPaths.includes(path) ? scoped : bearer).authenticate(headers).pipe(\n        Effect.match({ onFailure: () => false, onSuccess: () => true })\n      )\n  }\n}\n\nconst bindFailure = (failure: ServeError | GatewayError): GatewayError =>\n  new GatewayError({\n    code: \"bind_failed\",\n    message: \"The gateway socket could not be bound\",\n    cause: { _tag: failure._tag }\n  })\n\n/**\n * Fails the layer with the sanitized refusal every bearer holder may see, after\n * logging the operator's copy: the requested authority and the operating-system\n * cause (`EADDRINUSE`, `EACCES`, `EADDRNOTAVAIL`), which the wire error omits.\n */\nconst mapServeError = <A, R>(\n  bind: ListenOptions,\n  server: Layer.Layer<A, ServeError | GatewayError, R>\n): Layer.Layer<A, GatewayError, R> =>\n  server.pipe(\n    Layer.catch((failure) =>\n      Layer.effectContext<A, GatewayError, never>(\n        Effect.logError({\n          message: \"The gateway socket could not be bound\",\n          host: bind.host,\n          port: bind.port,\n          cause: failure\n        }).pipe(Effect.andThen(Effect.fail(bindFailure(failure))))\n      )\n    )\n  )\n\n/**\n * Hosts the assembled gateway on an injected native HTTP server.\n *\n * Supplies the bind policy, the shared-credential authentication both RPC\n * mounts run under, and newline-delimited JSON as the wire serialization. The\n * caller supplies what the mounts read through: `Control`, `Projections`,\n * `SyncServer`, and the `SyncAuth` middleware.\n *\n * The returned layer retains the concrete `HttpServer` service, so a caller\n * that bound port 0 can read the ephemeral address it got.\n *\n * Policy refusals and operating-system listen failures both fail the layer as\n * sanitized `bind_failed` `GatewayError` values.\n *\n * @param health the identity `GET /health` answers with\n * @param options the requested bind\n * @since 1.0.0\n * @category layers\n */\nexport const makeLayer = (\n  server: (options: ListenOptions) => Layer.Layer<HttpServer, ServeError | GatewayError>\n) =>\n(\n  health: GatewayServer.Health,\n  options: ServerOptions = defaultServerOptions\n) =>\n  Layer.unwrap(\n    Effect.map(listenOptions(options), (nodeOptions) =>\n      HttpRouter.serve(\n        GatewayServer.layer(health, {\n          ...(options.heartbeatMillis === undefined ? {} : { heartbeatMillis: options.heartbeatMillis }),\n          ingress: ingressOptions(options),\n          ...(options.runtimeBridge === undefined ? {} : {\n            runtimeBridge: {\n              ...options.runtimeBridge,\n              authenticate: ControlRpcs.bearerAuthenticator({\n                // listenOptions rejects a runtime bridge without a credential.\n                token: options.credential!,\n                principal: bearerPrincipal\n              }).authenticate\n            }\n          })\n        }).pipe(\n          Layer.provide(layerAuth(options)),\n          Layer.provide(RpcSerialization.layerNdjson)\n        ),\n        { disableListenLog: true, disableLogger: true }\n      ).pipe(\n        Layer.provideMerge(mapServeError(nodeOptions, server(nodeOptions)))\n      ))\n  )\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAoBA,qBAAyC;AACzC,oBAA8B;AAC9B,kBAA2B;AAG3B,iBAAiC;AAEjC,0BAA6C;AAC7C,oBAA+B;AAsCxB,MAAM,uBAAsC,EAAE,MAAM,aAAa,MAAM,KAAK;AAS5E,MAAM,iBAAiB,CAAC,SAA0B,cAAc,kBAAkB,SAAS,IAAI;AAc/F,MAAM,cAAc,CAAC,YAAqD;AAC/E,QAAM,cAAU,oCAAe,iCAAiC,QAAQ,eAAe,SACrF,oCAAe,kCAAkC,QAAQ,mBAAmB;AAC9E,MAAI,YAAY,OAAW,QAAO;AAGlC,MAAI,QAAQ,kBAAkB,WAAc,QAAQ,eAAe,UAAa,QAAQ,eAAe,KAAK;AAC1G,WAAO,IAAI,iCAAa;AAAA,MACtB,MAAM;AAAA,MACN,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACA,QAAM,OAAO,QAAQ,QAAQ;AAC7B,MAAI,eAAe,IAAI,EAAG,QAAO;AACjC,MAAI,QAAQ,WAAW,MAAM;AAC3B,WAAO,IAAI,iCAAa;AAAA,MACtB,MAAM;AAAA,MACN,SAAS,sCAAsC,IAAI;AAAA,IACrD,CAAC;AAAA,EACH;AACA,MAAI,QAAQ,eAAe,UAAa,QAAQ,eAAe,IAAI;AACjE,WAAO,IAAI,iCAAa;AAAA,MACtB,MAAM;AAAA,MACN,SAAS,sCAAsC,IAAI;AAAA,IACrD,CAAC;AAAA,EACH;AACA,SAAO;AACT;AAUO,MAAM,gBAAgB,CAAC,YAC5B,qBAAO,QAAQ,MAAM;AACnB,QAAM,UAAU,YAAY,OAAO;AACnC,MAAI,YAAY,OAAW,QAAO,qBAAO,KAAK,OAAO;AAGrD,QAAM;AAAA,IACJ,cAAc;AAAA,IACd,YAAY;AAAA,IACZ,iBAAiB;AAAA,IACjB,QAAQ;AAAA,IACR,qBAAqB;AAAA,IACrB,eAAe;AAAA,IACf,GAAG;AAAA,EACL,IAAI;AACJ,SAAO,qBAAO,QAAQ,EAAE,GAAG,MAAM,MAAM,KAAK,QAAQ,YAAY,CAAC;AACnE,CAAC;AAkBI,MAAM,YAAY,CAAC,YACxB,QAAQ,eAAe,UAAa,QAAQ,eAAe,KACvD,2BAAY,UAAU;AAAA,EACtB,cAAc,CAAC,YAAY;AACzB,UAAM,QAAQ,QAAQ;AACtB,QAAI,UAAU,UAAa,UAAU,IAAI;AACvC,aAAO,qBAAO,QAAQ,EAAE,IAAI,YAAY,MAAM,aAAa,WAAW,EAAE,CAAC;AAAA,IAC3E;AACA,WAAO,2BAAY,oBAAoB;AAAA,MACrC;AAAA,MACA,WAAW,EAAE,IAAI,SAAS,MAAM,WAAW;AAAA,IAC7C,CAAC,EAAE,aAAa,OAAO,EAAE;AAAA,MACvB,qBAAO;AAAA,QACL;AAAA,QACA,MAAM,qBAAO,QAAQ,EAAE,IAAI,YAAY,MAAM,aAAa,WAAW,EAAE,CAAC;AAAA,MAC1E;AAAA,IACF;AAAA,EACF;AACF,GAAG,oBAAoB,IACrB,2BAAY,UAAU,wBAAwB,QAAQ,UAAU,GAAG,oBAAoB;AAQ7F,MAAM,uBAAgD,EAAE,aAAa,MAAM,KAAK;AAShF,MAAM,0BAA0B,CAAC,eAC/B,2BAAY,iBAAiB;AAAA,EAC3B,2BAAY,oBAAoB,EAAE,OAAO,YAAY,WAAW,gBAAgB,CAAC;AAAA,EACjF,2BAAY,cAAc,EAAE,KAAK,YAAY,WAAW,gBAAgB,CAAC;AAC3E,CAAC;AAQI,MAAM,kBAAkB,OAAO,OAAO,EAAE,IAAI,WAAW,MAAM,SAAS,CAAC;AASvE,MAAM,mBAA0C;AAAA,EACrD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAWO,MAAM,kBAAkB,OAAO,OAAO,EAAE,IAAI,WAAW,MAAM,SAAS,CAAC;AAgBvE,MAAM,iBAAiB,CAAC,YAAyD;AACtF,QAAM,sBAAsB,QAAQ;AACpC,QAAM,OAAO,QAAQ,QAAQ;AAC7B,QAAM,eAAe,CAAC,GAAG,cAAc,yBAAyB,GAAG,QAAQ,gBAAgB,CAAC,CAAC;AAC7F,QAAM,gBAAgB,IAAI,MAAM,UAAU,KAAK,SAAS,GAAG,IAAI,IAAI,IAAI,MAAM,IAAI,EAAE;AACnF,MAAI,SAAS,aAAa,SAAS,QAAQ,kBAAkB,QAAQ,CAAC,aAAa,SAAS,cAAc,QAAQ,GAAG;AACnH,iBAAa,KAAK,cAAc,QAAQ;AAAA,EAC1C;AACA,MAAI,QAAQ,eAAe,UAAa,QAAQ,eAAe,IAAI;AACjE,WAAO;AAAA,MACL,cAAc;AAAA,MACd,GAAI,wBAAwB,SAAY,CAAC,IAAI,EAAE,oBAAoB;AAAA,MACnE;AAAA,IACF;AAAA,EACF;AAIA,QAAM,SAAS,2BAAY,oBAAoB,EAAE,OAAO,QAAQ,YAAY,WAAW,gBAAgB,CAAC;AACxG,QAAM,SAAS,wBAAwB,QAAQ,UAAU;AACzD,SAAO;AAAA,IACL;AAAA,IACA,GAAI,wBAAwB,SAAY,CAAC,IAAI,EAAE,oBAAoB;AAAA,IACnE,WAAW,CAAC,SAAS,UAClB,iBAAiB,SAAS,IAAI,IAAI,SAAS,QAAQ,aAAa,OAAO,EAAE;AAAA,MACxE,qBAAO,MAAM,EAAE,WAAW,MAAM,OAAO,WAAW,MAAM,KAAK,CAAC;AAAA,IAChE;AAAA,EACJ;AACF;AAEA,MAAM,cAAc,CAAC,YACnB,IAAI,iCAAa;AAAA,EACf,MAAM;AAAA,EACN,SAAS;AAAA,EACT,OAAO,EAAE,MAAM,QAAQ,KAAK;AAC9B,CAAC;AAOH,MAAM,gBAAgB,CACpB,MACA,WAEA,OAAO;AAAA,EACL,oBAAM;AAAA,IAAM,CAAC,YACX,oBAAM;AAAA,MACJ,qBAAO,SAAS;AAAA,QACd,SAAS;AAAA,QACT,MAAM,KAAK;AAAA,QACX,MAAM,KAAK;AAAA,QACX,OAAO;AAAA,MACT,CAAC,EAAE,KAAK,qBAAO,QAAQ,qBAAO,KAAK,YAAY,OAAO,CAAC,CAAC,CAAC;AAAA,IAC3D;AAAA,EACF;AACF;AAqBK,MAAM,YAAY,CACvB,WAEF,CACE,QACA,UAAyB,yBAEzB,oBAAM;AAAA,EACJ,qBAAO,IAAI,cAAc,OAAO,GAAG,CAAC,gBAClC,uBAAW;AAAA,IACT,cAAc,MAAM,QAAQ;AAAA,MAC1B,GAAI,QAAQ,oBAAoB,SAAY,CAAC,IAAI,EAAE,iBAAiB,QAAQ,gBAAgB;AAAA,MAC5F,SAAS,eAAe,OAAO;AAAA,MAC/B,GAAI,QAAQ,kBAAkB,SAAY,CAAC,IAAI;AAAA,QAC7C,eAAe;AAAA,UACb,GAAG,QAAQ;AAAA,UACX,cAAc,2BAAY,oBAAoB;AAAA;AAAA,YAE5C,OAAO,QAAQ;AAAA,YACf,WAAW;AAAA,UACb,CAAC,EAAE;AAAA,QACL;AAAA,MACF;AAAA,IACF,CAAC,EAAE;AAAA,MACD,oBAAM,QAAQ,UAAU,OAAO,CAAC;AAAA,MAChC,oBAAM,QAAQ,4BAAiB,WAAW;AAAA,IAC5C;AAAA,IACA,EAAE,kBAAkB,MAAM,eAAe,KAAK;AAAA,EAChD,EAAE;AAAA,IACA,oBAAM,aAAa,cAAc,aAAa,OAAO,WAAW,CAAC,CAAC;AAAA,EACpE,CAAC;AACL;",
+  "names": []
+}

package/dist/cjs/internal/actionRenderings.d.ts

@@ -0,0 +1,12 @@
+/**
+ * The deterministic Inspect label of each kept action in .specs/product/actions.md
+ * Appendix C, keyed by action id; null marks an action whose Inspect shows no label.
+ *
+ * @since 1.0.0
+ */
+/**
+ * @since 1.0.0
+ * @private
+ */
+export declare const ACTION_RENDERINGS: Readonly<Record<string, string | null>>;
+//# sourceMappingURL=actionRenderings.d.ts.map

package/dist/cjs/internal/actionRenderings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"actionRenderings.d.ts","sourceRoot":"","sources":["../../../src/internal/actionRenderings.ts"],"names":[],"mappings":"AACA;;;;;GAKG;AAEH;;;GAGG;AACH,eAAO,MAAM,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAuMrE,CAAA"}

package/dist/cjs/internal/actionRenderings.js

@@ -0,0 +1,224 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var actionRenderings_exports = {};
+__export(actionRenderings_exports, {
+  ACTION_RENDERINGS: () => ACTION_RENDERINGS
+});
+module.exports = __toCommonJS(actionRenderings_exports);
+const ACTION_RENDERINGS = {
+  "<boundary:name>": null,
+  "<park>/parked": null,
+  "<quota-park>/<session>": null,
+  "<seal-step>": null,
+  "<structured-output-count>/<name>": null,
+  "agent/capacity/<seat>/cool/<n>": "Waiting for a model",
+  "agent/opening-instructions": "Read the instructions",
+  "agent/opening-memory": "Loaded context",
+  "agent/route-seat": "Chose a model",
+  "agent/run": "Worked a turn",
+  "agent/send (stamp)": null,
+  "agent/trace/checkpoint": null,
+  "apply_patch": "An attributed edit in the File and Diff cards",
+  "ask": "Needs you",
+  "bash": "Terminal card (agent session). Missing: no terminal today",
+  "checks/lint": "Linted the change",
+  "checks/review": "Reviewed the change",
+  "checks/security": "Reviewed security",
+  "checks/wiki": "Checked the wiki",
+  "coding/AdmitVibe": "Opened the change for landing",
+  "coding/ApplyNative": "Applied the changes",
+  "coding/CleanVibeHistory": "Tidied the history",
+  "coding/CommandCheck": "Ran checks",
+  "coding/CoordinateRequest": "Worked the TODO",
+  "coding/CorrectPlan": "Fixed review findings",
+  "coding/CorrectionRound": "Fixed review findings",
+  "coding/DescribeFinalAtom": "Wrote the commit message",
+  "coding/Dispatch": "Ran an agent turn",
+  "coding/FlowLoad": "Validated the flows",
+  "coding/ImplementAtom": "Implemented one step",
+  "coding/ImplementAtoms": "Implemented the plan",
+  "coding/ImplementPlan": "Implemented the plan",
+  "coding/JevCheck": "Checked rules",
+  "coding/LandVibe": "Landed the change",
+  "coding/ObservePlan": "Tracked progress",
+  "coding/Poc": "Drafted a prototype",
+  "coding/PreparePlan": "Planned the change",
+  "coding/PrepareRequest": "Prepared the request",
+  "coding/ProposeFinalHistory": "Reviewed the history",
+  "coding/Prototype": "Drafted a prototype",
+  "coding/PublishVibeSource": "Published the change",
+  "coding/ReadNative": "Read the changes",
+  "coding/RecheckCorrected": "Re-checked the fix",
+  "coding/RecheckFinalHistory": "Re-checked the history",
+  "coding/RefreshWiki": "Refreshed wiki pages",
+  "coding/RepairPass": "Repaired the change",
+  "coding/ReviewCapturedChange": "Reviewed the change",
+  "coding/ReviewCapturedWiki": "Checked the wiki",
+  "coding/ReviewCheck": "Reviewed the change",
+  "coding/RewriteFinalHistory": "Tidied the history",
+  "coding/SecurityAudit": "Audited security",
+  "coding/SecurityReviewCheck": "Reviewed security",
+  "coding/VerifyVibe": "Verified before landing",
+  "coding/Wiki": "Refreshed the wiki",
+  "coding/WikiCheck": "Checked the wiki",
+  "coding/admit-retained-source": "Opened the source",
+  "coding/admit-verify-source": "Opened the candidate",
+  "coding/assess": "Assessed the change",
+  "coding/audit-security": "Audited security",
+  "coding/begin-correction": "Started a fix round",
+  "coding/capture-poc-source": "Captured the source",
+  "coding/capture-review-check": "Captured the change",
+  "coding/capture-wiki-check": "Captured the wiki",
+  "coding/check": "Ran checks",
+  "coding/check-command": "Ran checks",
+  "coding/check-jev-rules": "Checked rules",
+  "coding/configure-planning-wiki": "Chose wiki pages",
+  "coding/confirm-final-description": "Confirmed the commit message",
+  "coding/create-stack-base": "Created the stack base",
+  "coding/create-vibe-landing": "Added to the stack",
+  "coding/decline-request": "Declined the request",
+  "coding/dispatch-turn": "Worked a turn",
+  "coding/draft-plan": "Drafted the plan",
+  "coding/draft-poc": "Drafted a prototype",
+  "coding/edit-atom": "Edited the files",
+  "coding/fast-forward-vibe": "Moved the branch forward",
+  "coding/fast-gate": "Ran quick checks",
+  "coding/fence-vibe-source": "Pinned the change",
+  "coding/finalize-plan": "Finalized the plan",
+  "coding/find-planning-wiki-review": "Found wiki notes",
+  "coding/finish-correction": "Finished the fix round",
+  "coding/finish-final-history": "Finished the history",
+  "coding/finish-review-check": "Collected review findings",
+  "coding/finish-wiki-check": "Checked the wiki",
+  "coding/gather-planning-context": "Gathered context",
+  "coding/implement-change": "Implemented the change",
+  "coding/import-dependency-docs": "Imported dependency docs",
+  "coding/install-dependency-pages": "Added dependency pages",
+  "coding/load-flows": "Validated the flows",
+  "coding/materialize-poc": "Applied the prototype",
+  "coding/merge-request-feedback": "Took in your steer",
+  "coding/merge-vibe-local-pull": "Merged the change",
+  "coding/observe-atom": "Saved the edit",
+  "coding/observe-dispatch": "Saved the turn",
+  "coding/observe-vibe-append": "Added to the stack",
+  "coding/observe-vibe-pull-checks": "Watched PR checks",
+  "coding/open-vibe-local-pull": "Opened the pull request",
+  "coding/open-vibe-pull": "Opened the pull request",
+  "coding/prepare-atom": "Opened the working copy",
+  "coding/prepare-atom-mutation": "Prepared to edit",
+  "coding/prepare-final-description": "Drafted the commit message",
+  "coding/prepare-owner-repair": "Prepared the repair",
+  "coding/prepare-repair-context": "Gathered repair context",
+  "coding/prepare-return-mythical-tip": "Returned to the stack tip",
+  "coding/prepare-stack-base": "Prepared the stack",
+  "coding/prepare-vibe-append": "Prepared to add to the stack",
+  "coding/prepare-vibe-candidate": "Prepared the change",
+  "coding/publish-vibe-source": "Published the change",
+  "coding/queue-vibe-append": "Queued for the stack",
+  "coding/read-correction-history": "Read earlier fixes",
+  "coding/read-feedback-cancellation": "Read your steer",
+  "coding/read-published-wiki": "Read the wiki",
+  "coding/read-vibe-delivery": "Read delivery status",
+  "coding/read-vibe-lander": "Read landing state",
+  "coding/read-vibe-request": "Read the request",
+  "coding/read-vibe-stack": "Read the stack",
+  "coding/receive-request-feedback": "Waited for your steer",
+  "coding/record-fast-gated-progress": "Recorded progress",
+  "coding/record-learning": "Saved a lesson",
+  "coding/record-slow-feedback": "Recorded feedback",
+  "coding/refresh-final-history": "Refreshed the history",
+  "coding/refresh-planning-wiki": "Refreshed wiki pages",
+  "coding/refresh-restacked-evidence": "Refreshed evidence",
+  "coding/refuse-plan-approval": "Refused a plan approval",
+  "coding/repair-final-history": "Corrected the history",
+  "coding/retain-poc": "Saved the prototype",
+  "coding/review-final-history": "Reviewed the history",
+  "coding/review-lens": "Reviewed through one lens",
+  "coding/review-poc": "Reviewed the prototype",
+  "coding/review-request": "Reviewed the request",
+  "coding/review-security": "Reviewed security",
+  "coding/run-correction-round": "Fixed review findings",
+  "coding/select-owner-repair": "Chose what to fix",
+  "coding/submit-vibe-lane": "Queued the change",
+  "coding/todo-boundary": null,
+  "coding/todo-delivery": "Prepared the delivery",
+  "coding/todo-pause-requested": null,
+  "coding/todo-resume": null,
+  "coding/todo-review": null,
+  "coding/todo-review-input": null,
+  "coding/validate-final-history": "Checked the history",
+  "coding/validate-plan": "Checked the plan",
+  "coding/verify-planning-context": "Checked the context",
+  "coding/verify-vibe-landed": "Confirmed it landed",
+  "create-flow": "Created a flow",
+  "create-flow/clarify": "Asked what the flow should do",
+  "create-flow/design": "Designed the flow",
+  "create-flow/document": "Documented the flow",
+  "create-flow/fix": "Fixed the flow",
+  "create-flow/provision": "Set up the flow",
+  "create-flow/scaffold": "Wrote the flow",
+  "edit": "An attributed edit in the File and Diff cards",
+  "factory/Todo": "Routed the TODO",
+  "factory/route-todo": "Chose how to start",
+  "factory/stamp-route": "Declined the TODO",
+  "glob": 'A "read" line in branch activity, opening the File card',
+  "grep": 'A "read" line in branch activity, opening the File card',
+  "jev": 'Inspect only: "Decided <question>"',
+  "ls": 'A "read" line in branch activity, opening the File card',
+  "memory": 'The "Context" line and the preflight cell in Inspect',
+  "memory/mine": "Saved lessons",
+  "memory/mine/run": "Saved lessons",
+  "read": 'A "read" line in branch activity, opening the File card',
+  "recall": 'The "Context" line and the preflight cell in Inspect',
+  "recall (namespaced)": 'The "Context" line and the preflight cell in Inspect',
+  "remember": "Learning receipt",
+  "review": "Reviewed the change",
+  "smithers-review/ApplyVerdicts": "Settled findings",
+  "smithers-review/FinalizeReview": "Finished the review",
+  "smithers-review/MergeFileBatch": "Collected findings",
+  "smithers-review/NarrateChanges": "Wrote the walkthrough",
+  "smithers-review/NarrateReview": "Wrote the walkthrough",
+  "smithers-review/PrepareReview": "Prepared the review",
+  "smithers-review/RenderWalkthrough": "Rendered the walkthrough",
+  "smithers-review/ReviewFile": "Reviewed one file",
+  "smithers-review/ReviewFiles": "Reviewed the files",
+  "smithers-review/VerifyFindings": "Verified findings",
+  "smithers-review/VerifyReview": "Verified findings",
+  "smithers/IncrementalWiki": "Refreshed the wiki",
+  "smithers/Wiki": "Refreshed the wiki",
+  "stack.candidate": "Saved the candidate",
+  "stack.propose": "Proposed the candidate",
+  "system/human-task": "Waited for your answer",
+  "system/sleep": null,
+  "system/wait-for": null,
+  "test": "Terminal card plus checks. Missing: needs SMITHERS_TEST_COMMAND",
+  "wait": "Waited",
+  "wiki/assess-review": "Assessed a wiki page",
+  "wiki/bind-review-provenance": "Linked a review to its source",
+  "wiki/check-citations": "Checked citations",
+  "wiki/collect-page": "Collected sources for a page",
+  "wiki/load-recorded-reviews": "Found earlier reviews",
+  "wiki/publish-recorded-reviews": "Saved wiki pages",
+  "wiki/review-page": "Reviewed a wiki page",
+  "wiki/select-recorded-review": "Reused a review",
+  "wiki/validate-review": "Checked a wiki page",
+  "wiki/write-snapshot": "Saved wiki pages",
+  "write": "An attributed edit in the File and Diff cards"
+};
+//# sourceMappingURL=actionRenderings.js.map

package/dist/cjs/internal/actionRenderings.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/internal/actionRenderings.ts"],
+  "sourcesContent": ["// Generated by scripts/catalog-mvp.ts from Appendix C; do not edit.\n/**\n * The deterministic Inspect label of each kept action in .specs/product/actions.md\n * Appendix C, keyed by action id; null marks an action whose Inspect shows no label.\n *\n * @since 1.0.0\n */\n\n/**\n * @since 1.0.0\n * @private\n */\nexport const ACTION_RENDERINGS: Readonly<Record<string, string | null>> = {\n  \"<boundary:name>\": null,\n  \"<park>/parked\": null,\n  \"<quota-park>/<session>\": null,\n  \"<seal-step>\": null,\n  \"<structured-output-count>/<name>\": null,\n  \"agent/capacity/<seat>/cool/<n>\": \"Waiting for a model\",\n  \"agent/opening-instructions\": \"Read the instructions\",\n  \"agent/opening-memory\": \"Loaded context\",\n  \"agent/route-seat\": \"Chose a model\",\n  \"agent/run\": \"Worked a turn\",\n  \"agent/send (stamp)\": null,\n  \"agent/trace/checkpoint\": null,\n  \"apply_patch\": \"An attributed edit in the File and Diff cards\",\n  \"ask\": \"Needs you\",\n  \"bash\": \"Terminal card (agent session). Missing: no terminal today\",\n  \"checks/lint\": \"Linted the change\",\n  \"checks/review\": \"Reviewed the change\",\n  \"checks/security\": \"Reviewed security\",\n  \"checks/wiki\": \"Checked the wiki\",\n  \"coding/AdmitVibe\": \"Opened the change for landing\",\n  \"coding/ApplyNative\": \"Applied the changes\",\n  \"coding/CleanVibeHistory\": \"Tidied the history\",\n  \"coding/CommandCheck\": \"Ran checks\",\n  \"coding/CoordinateRequest\": \"Worked the TODO\",\n  \"coding/CorrectPlan\": \"Fixed review findings\",\n  \"coding/CorrectionRound\": \"Fixed review findings\",\n  \"coding/DescribeFinalAtom\": \"Wrote the commit message\",\n  \"coding/Dispatch\": \"Ran an agent turn\",\n  \"coding/FlowLoad\": \"Validated the flows\",\n  \"coding/ImplementAtom\": \"Implemented one step\",\n  \"coding/ImplementAtoms\": \"Implemented the plan\",\n  \"coding/ImplementPlan\": \"Implemented the plan\",\n  \"coding/JevCheck\": \"Checked rules\",\n  \"coding/LandVibe\": \"Landed the change\",\n  \"coding/ObservePlan\": \"Tracked progress\",\n  \"coding/Poc\": \"Drafted a prototype\",\n  \"coding/PreparePlan\": \"Planned the change\",\n  \"coding/PrepareRequest\": \"Prepared the request\",\n  \"coding/ProposeFinalHistory\": \"Reviewed the history\",\n  \"coding/Prototype\": \"Drafted a prototype\",\n  \"coding/PublishVibeSource\": \"Published the change\",\n  \"coding/ReadNative\": \"Read the changes\",\n  \"coding/RecheckCorrected\": \"Re-checked the fix\",\n  \"coding/RecheckFinalHistory\": \"Re-checked the history\",\n  \"coding/RefreshWiki\": \"Refreshed wiki pages\",\n  \"coding/RepairPass\": \"Repaired the change\",\n  \"coding/ReviewCapturedChange\": \"Reviewed the change\",\n  \"coding/ReviewCapturedWiki\": \"Checked the wiki\",\n  \"coding/ReviewCheck\": \"Reviewed the change\",\n  \"coding/RewriteFinalHistory\": \"Tidied the history\",\n  \"coding/SecurityAudit\": \"Audited security\",\n  \"coding/SecurityReviewCheck\": \"Reviewed security\",\n  \"coding/VerifyVibe\": \"Verified before landing\",\n  \"coding/Wiki\": \"Refreshed the wiki\",\n  \"coding/WikiCheck\": \"Checked the wiki\",\n  \"coding/admit-retained-source\": \"Opened the source\",\n  \"coding/admit-verify-source\": \"Opened the candidate\",\n  \"coding/assess\": \"Assessed the change\",\n  \"coding/audit-security\": \"Audited security\",\n  \"coding/begin-correction\": \"Started a fix round\",\n  \"coding/capture-poc-source\": \"Captured the source\",\n  \"coding/capture-review-check\": \"Captured the change\",\n  \"coding/capture-wiki-check\": \"Captured the wiki\",\n  \"coding/check\": \"Ran checks\",\n  \"coding/check-command\": \"Ran checks\",\n  \"coding/check-jev-rules\": \"Checked rules\",\n  \"coding/configure-planning-wiki\": \"Chose wiki pages\",\n  \"coding/confirm-final-description\": \"Confirmed the commit message\",\n  \"coding/create-stack-base\": \"Created the stack base\",\n  \"coding/create-vibe-landing\": \"Added to the stack\",\n  \"coding/decline-request\": \"Declined the request\",\n  \"coding/dispatch-turn\": \"Worked a turn\",\n  \"coding/draft-plan\": \"Drafted the plan\",\n  \"coding/draft-poc\": \"Drafted a prototype\",\n  \"coding/edit-atom\": \"Edited the files\",\n  \"coding/fast-forward-vibe\": \"Moved the branch forward\",\n  \"coding/fast-gate\": \"Ran quick checks\",\n  \"coding/fence-vibe-source\": \"Pinned the change\",\n  \"coding/finalize-plan\": \"Finalized the plan\",\n  \"coding/find-planning-wiki-review\": \"Found wiki notes\",\n  \"coding/finish-correction\": \"Finished the fix round\",\n  \"coding/finish-final-history\": \"Finished the history\",\n  \"coding/finish-review-check\": \"Collected review findings\",\n  \"coding/finish-wiki-check\": \"Checked the wiki\",\n  \"coding/gather-planning-context\": \"Gathered context\",\n  \"coding/implement-change\": \"Implemented the change\",\n  \"coding/import-dependency-docs\": \"Imported dependency docs\",\n  \"coding/install-dependency-pages\": \"Added dependency pages\",\n  \"coding/load-flows\": \"Validated the flows\",\n  \"coding/materialize-poc\": \"Applied the prototype\",\n  \"coding/merge-request-feedback\": \"Took in your steer\",\n  \"coding/merge-vibe-local-pull\": \"Merged the change\",\n  \"coding/observe-atom\": \"Saved the edit\",\n  \"coding/observe-dispatch\": \"Saved the turn\",\n  \"coding/observe-vibe-append\": \"Added to the stack\",\n  \"coding/observe-vibe-pull-checks\": \"Watched PR checks\",\n  \"coding/open-vibe-local-pull\": \"Opened the pull request\",\n  \"coding/open-vibe-pull\": \"Opened the pull request\",\n  \"coding/prepare-atom\": \"Opened the working copy\",\n  \"coding/prepare-atom-mutation\": \"Prepared to edit\",\n  \"coding/prepare-final-description\": \"Drafted the commit message\",\n  \"coding/prepare-owner-repair\": \"Prepared the repair\",\n  \"coding/prepare-repair-context\": \"Gathered repair context\",\n  \"coding/prepare-return-mythical-tip\": \"Returned to the stack tip\",\n  \"coding/prepare-stack-base\": \"Prepared the stack\",\n  \"coding/prepare-vibe-append\": \"Prepared to add to the stack\",\n  \"coding/prepare-vibe-candidate\": \"Prepared the change\",\n  \"coding/publish-vibe-source\": \"Published the change\",\n  \"coding/queue-vibe-append\": \"Queued for the stack\",\n  \"coding/read-correction-history\": \"Read earlier fixes\",\n  \"coding/read-feedback-cancellation\": \"Read your steer\",\n  \"coding/read-published-wiki\": \"Read the wiki\",\n  \"coding/read-vibe-delivery\": \"Read delivery status\",\n  \"coding/read-vibe-lander\": \"Read landing state\",\n  \"coding/read-vibe-request\": \"Read the request\",\n  \"coding/read-vibe-stack\": \"Read the stack\",\n  \"coding/receive-request-feedback\": \"Waited for your steer\",\n  \"coding/record-fast-gated-progress\": \"Recorded progress\",\n  \"coding/record-learning\": \"Saved a lesson\",\n  \"coding/record-slow-feedback\": \"Recorded feedback\",\n  \"coding/refresh-final-history\": \"Refreshed the history\",\n  \"coding/refresh-planning-wiki\": \"Refreshed wiki pages\",\n  \"coding/refresh-restacked-evidence\": \"Refreshed evidence\",\n  \"coding/refuse-plan-approval\": \"Refused a plan approval\",\n  \"coding/repair-final-history\": \"Corrected the history\",\n  \"coding/retain-poc\": \"Saved the prototype\",\n  \"coding/review-final-history\": \"Reviewed the history\",\n  \"coding/review-lens\": \"Reviewed through one lens\",\n  \"coding/review-poc\": \"Reviewed the prototype\",\n  \"coding/review-request\": \"Reviewed the request\",\n  \"coding/review-security\": \"Reviewed security\",\n  \"coding/run-correction-round\": \"Fixed review findings\",\n  \"coding/select-owner-repair\": \"Chose what to fix\",\n  \"coding/submit-vibe-lane\": \"Queued the change\",\n  \"coding/todo-boundary\": null,\n  \"coding/todo-delivery\": \"Prepared the delivery\",\n  \"coding/todo-pause-requested\": null,\n  \"coding/todo-resume\": null,\n  \"coding/todo-review\": null,\n  \"coding/todo-review-input\": null,\n  \"coding/validate-final-history\": \"Checked the history\",\n  \"coding/validate-plan\": \"Checked the plan\",\n  \"coding/verify-planning-context\": \"Checked the context\",\n  \"coding/verify-vibe-landed\": \"Confirmed it landed\",\n  \"create-flow\": \"Created a flow\",\n  \"create-flow/clarify\": \"Asked what the flow should do\",\n  \"create-flow/design\": \"Designed the flow\",\n  \"create-flow/document\": \"Documented the flow\",\n  \"create-flow/fix\": \"Fixed the flow\",\n  \"create-flow/provision\": \"Set up the flow\",\n  \"create-flow/scaffold\": \"Wrote the flow\",\n  \"edit\": \"An attributed edit in the File and Diff cards\",\n  \"factory/Todo\": \"Routed the TODO\",\n  \"factory/route-todo\": \"Chose how to start\",\n  \"factory/stamp-route\": \"Declined the TODO\",\n  \"glob\": \"A \\\"read\\\" line in branch activity, opening the File card\",\n  \"grep\": \"A \\\"read\\\" line in branch activity, opening the File card\",\n  \"jev\": \"Inspect only: \\\"Decided <question>\\\"\",\n  \"ls\": \"A \\\"read\\\" line in branch activity, opening the File card\",\n  \"memory\": \"The \\\"Context\\\" line and the preflight cell in Inspect\",\n  \"memory/mine\": \"Saved lessons\",\n  \"memory/mine/run\": \"Saved lessons\",\n  \"read\": \"A \\\"read\\\" line in branch activity, opening the File card\",\n  \"recall\": \"The \\\"Context\\\" line and the preflight cell in Inspect\",\n  \"recall (namespaced)\": \"The \\\"Context\\\" line and the preflight cell in Inspect\",\n  \"remember\": \"Learning receipt\",\n  \"review\": \"Reviewed the change\",\n  \"smithers-review/ApplyVerdicts\": \"Settled findings\",\n  \"smithers-review/FinalizeReview\": \"Finished the review\",\n  \"smithers-review/MergeFileBatch\": \"Collected findings\",\n  \"smithers-review/NarrateChanges\": \"Wrote the walkthrough\",\n  \"smithers-review/NarrateReview\": \"Wrote the walkthrough\",\n  \"smithers-review/PrepareReview\": \"Prepared the review\",\n  \"smithers-review/RenderWalkthrough\": \"Rendered the walkthrough\",\n  \"smithers-review/ReviewFile\": \"Reviewed one file\",\n  \"smithers-review/ReviewFiles\": \"Reviewed the files\",\n  \"smithers-review/VerifyFindings\": \"Verified findings\",\n  \"smithers-review/VerifyReview\": \"Verified findings\",\n  \"smithers/IncrementalWiki\": \"Refreshed the wiki\",\n  \"smithers/Wiki\": \"Refreshed the wiki\",\n  \"stack.candidate\": \"Saved the candidate\",\n  \"stack.propose\": \"Proposed the candidate\",\n  \"system/human-task\": \"Waited for your answer\",\n  \"system/sleep\": null,\n  \"system/wait-for\": null,\n  \"test\": \"Terminal card plus checks. Missing: needs SMITHERS_TEST_COMMAND\",\n  \"wait\": \"Waited\",\n  \"wiki/assess-review\": \"Assessed a wiki page\",\n  \"wiki/bind-review-provenance\": \"Linked a review to its source\",\n  \"wiki/check-citations\": \"Checked citations\",\n  \"wiki/collect-page\": \"Collected sources for a page\",\n  \"wiki/load-recorded-reviews\": \"Found earlier reviews\",\n  \"wiki/publish-recorded-reviews\": \"Saved wiki pages\",\n  \"wiki/review-page\": \"Reviewed a wiki page\",\n  \"wiki/select-recorded-review\": \"Reused a review\",\n  \"wiki/validate-review\": \"Checked a wiki page\",\n  \"wiki/write-snapshot\": \"Saved wiki pages\",\n  \"write\": \"An attributed edit in the File and Diff cards\"\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAYO,MAAM,oBAA6D;AAAA,EACxE,mBAAmB;AAAA,EACnB,iBAAiB;AAAA,EACjB,0BAA0B;AAAA,EAC1B,eAAe;AAAA,EACf,oCAAoC;AAAA,EACpC,kCAAkC;AAAA,EAClC,8BAA8B;AAAA,EAC9B,wBAAwB;AAAA,EACxB,oBAAoB;AAAA,EACpB,aAAa;AAAA,EACb,sBAAsB;AAAA,EACtB,0BAA0B;AAAA,EAC1B,eAAe;AAAA,EACf,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,eAAe;AAAA,EACf,iBAAiB;AAAA,EACjB,mBAAmB;AAAA,EACnB,eAAe;AAAA,EACf,oBAAoB;AAAA,EACpB,sBAAsB;AAAA,EACtB,2BAA2B;AAAA,EAC3B,uBAAuB;AAAA,EACvB,4BAA4B;AAAA,EAC5B,sBAAsB;AAAA,EACtB,0BAA0B;AAAA,EAC1B,4BAA4B;AAAA,EAC5B,mBAAmB;AAAA,EACnB,mBAAmB;AAAA,EACnB,wBAAwB;AAAA,EACxB,yBAAyB;AAAA,EACzB,wBAAwB;AAAA,EACxB,mBAAmB;AAAA,EACnB,mBAAmB;AAAA,EACnB,sBAAsB;AAAA,EACtB,cAAc;AAAA,EACd,sBAAsB;AAAA,EACtB,yBAAyB;AAAA,EACzB,8BAA8B;AAAA,EAC9B,oBAAoB;AAAA,EACpB,4BAA4B;AAAA,EAC5B,qBAAqB;AAAA,EACrB,2BAA2B;AAAA,EAC3B,8BAA8B;AAAA,EAC9B,sBAAsB;AAAA,EACtB,qBAAqB;AAAA,EACrB,+BAA+B;AAAA,EAC/B,6BAA6B;AAAA,EAC7B,sBAAsB;AAAA,EACtB,8BAA8B;AAAA,EAC9B,wBAAwB;AAAA,EACxB,8BAA8B;AAAA,EAC9B,qBAAqB;AAAA,EACrB,eAAe;AAAA,EACf,oBAAoB;AAAA,EACpB,gCAAgC;AAAA,EAChC,8BAA8B;AAAA,EAC9B,iBAAiB;AAAA,EACjB,yBAAyB;AAAA,EACzB,2BAA2B;AAAA,EAC3B,6BAA6B;AAAA,EAC7B,+BAA+B;AAAA,EAC/B,6BAA6B;AAAA,EAC7B,gBAAgB;AAAA,EAChB,wBAAwB;AAAA,EACxB,0BAA0B;AAAA,EAC1B,kCAAkC;AAAA,EAClC,oCAAoC;AAAA,EACpC,4BAA4B;AAAA,EAC5B,8BAA8B;AAAA,EAC9B,0BAA0B;AAAA,EAC1B,wBAAwB;AAAA,EACxB,qBAAqB;AAAA,EACrB,oBAAoB;AAAA,EACpB,oBAAoB;AAAA,EACpB,4BAA4B;AAAA,EAC5B,oBAAoB;AAAA,EACpB,4BAA4B;AAAA,EAC5B,wBAAwB;AAAA,EACxB,oCAAoC;AAAA,EACpC,4BAA4B;AAAA,EAC5B,+BAA+B;AAAA,EAC/B,8BAA8B;AAAA,EAC9B,4BAA4B;AAAA,EAC5B,kCAAkC;AAAA,EAClC,2BAA2B;AAAA,EAC3B,iCAAiC;AAAA,EACjC,mCAAmC;AAAA,EACnC,qBAAqB;AAAA,EACrB,0BAA0B;AAAA,EAC1B,iCAAiC;AAAA,EACjC,gCAAgC;AAAA,EAChC,uBAAuB;AAAA,EACvB,2BAA2B;AAAA,EAC3B,8BAA8B;AAAA,EAC9B,mCAAmC;AAAA,EACnC,+BAA+B;AAAA,EAC/B,yBAAyB;AAAA,EACzB,uBAAuB;AAAA,EACvB,gCAAgC;AAAA,EAChC,oCAAoC;AAAA,EACpC,+BAA+B;AAAA,EAC/B,iCAAiC;AAAA,EACjC,sCAAsC;AAAA,EACtC,6BAA6B;AAAA,EAC7B,8BAA8B;AAAA,EAC9B,iCAAiC;AAAA,EACjC,8BAA8B;AAAA,EAC9B,4BAA4B;AAAA,EAC5B,kCAAkC;AAAA,EAClC,qCAAqC;AAAA,EACrC,8BAA8B;AAAA,EAC9B,6BAA6B;AAAA,EAC7B,2BAA2B;AAAA,EAC3B,4BAA4B;AAAA,EAC5B,0BAA0B;AAAA,EAC1B,mCAAmC;AAAA,EACnC,qCAAqC;AAAA,EACrC,0BAA0B;AAAA,EAC1B,+BAA+B;AAAA,EAC/B,gCAAgC;AAAA,EAChC,gCAAgC;AAAA,EAChC,qCAAqC;AAAA,EACrC,+BAA+B;AAAA,EAC/B,+BAA+B;AAAA,EAC/B,qBAAqB;AAAA,EACrB,+BAA+B;AAAA,EAC/B,sBAAsB;AAAA,EACtB,qBAAqB;AAAA,EACrB,yBAAyB;AAAA,EACzB,0BAA0B;AAAA,EAC1B,+BAA+B;AAAA,EAC/B,8BAA8B;AAAA,EAC9B,2BAA2B;AAAA,EAC3B,wBAAwB;AAAA,EACxB,wBAAwB;AAAA,EACxB,+BAA+B;AAAA,EAC/B,sBAAsB;AAAA,EACtB,sBAAsB;AAAA,EACtB,4BAA4B;AAAA,EAC5B,iCAAiC;AAAA,EACjC,wBAAwB;AAAA,EACxB,kCAAkC;AAAA,EAClC,6BAA6B;AAAA,EAC7B,eAAe;AAAA,EACf,uBAAuB;AAAA,EACvB,sBAAsB;AAAA,EACtB,wBAAwB;AAAA,EACxB,mBAAmB;AAAA,EACnB,yBAAyB;AAAA,EACzB,wBAAwB;AAAA,EACxB,QAAQ;AAAA,EACR,gBAAgB;AAAA,EAChB,sBAAsB;AAAA,EACtB,uBAAuB;AAAA,EACvB,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,MAAM;AAAA,EACN,UAAU;AAAA,EACV,eAAe;AAAA,EACf,mBAAmB;AAAA,EACnB,QAAQ;AAAA,EACR,UAAU;AAAA,EACV,uBAAuB;AAAA,EACvB,YAAY;AAAA,EACZ,UAAU;AAAA,EACV,iCAAiC;AAAA,EACjC,kCAAkC;AAAA,EAClC,kCAAkC;AAAA,EAClC,kCAAkC;AAAA,EAClC,iCAAiC;AAAA,EACjC,iCAAiC;AAAA,EACjC,qCAAqC;AAAA,EACrC,8BAA8B;AAAA,EAC9B,+BAA+B;AAAA,EAC/B,kCAAkC;AAAA,EAClC,gCAAgC;AAAA,EAChC,4BAA4B;AAAA,EAC5B,iBAAiB;AAAA,EACjB,mBAAmB;AAAA,EACnB,iBAAiB;AAAA,EACjB,qBAAqB;AAAA,EACrB,gBAAgB;AAAA,EAChB,mBAAmB;AAAA,EACnB,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,sBAAsB;AAAA,EACtB,+BAA+B;AAAA,EAC/B,wBAAwB;AAAA,EACxB,qBAAqB;AAAA,EACrB,8BAA8B;AAAA,EAC9B,iCAAiC;AAAA,EACjC,oBAAoB;AAAA,EACpB,+BAA+B;AAAA,EAC/B,wBAAwB;AAAA,EACxB,uBAAuB;AAAA,EACvB,SAAS;AACX;",
+  "names": []
+}

package/dist/cjs/internal/callEvents.d.ts

@@ -0,0 +1,97 @@
+/**
+ * Shared call lifecycle identity rules for full and incremental projections.
+ *
+ * @since 1.0.0
+ */
+/** A sparse historical observation is readable without inventing missing fields.
+ * @category models
+ * @since 1.0.0
+ */
+export interface CallObservation {
+    readonly kind?: string | undefined;
+    readonly runId?: string | undefined;
+    readonly sequence?: number | undefined;
+    readonly payload?: unknown;
+}
+/** Interpret only the native producer's versioned, run-scoped outbox facts.
+ * @category projections
+ * @since 1.0.0
+ */
+export declare const nativeCallEvent: <Event extends CallObservation>(event: Event) => Event | undefined;
+/** Normalize a checkpoint only within its recorded execution and source.
+ * Replayed prefixes retain the generation that first recorded the work.
+ * @category projections
+ * @since 1.0.0
+ */
+export declare const nativeStepEvent: <Event extends CallObservation>(event: Event) => Event | undefined;
+/** Scope call matching to the recorded invocation, including its generation.
+ * @category projections
+ * @since 1.0.0
+ */
+export declare const callScope: (event: CallObservation) => string | undefined;
+/**
+ * Identity first; the upgrade fallback can consume only unidentified starts.
+ *
+ * @category projections
+ * @since 1.0.0
+ */
+export declare const openCallIndex: (open: ReadonlyArray<{
+    readonly flowName: string;
+    readonly callId?: string | undefined;
+    readonly scope?: string | undefined;
+}>, callId: string | undefined, flowName: string | undefined, scope?: string) => number;
+/**
+ * Deduplicate identified call lifecycles and committed checkpoint observations.
+ *
+ * @category projections
+ * @since 1.0.0
+ */
+export declare const callEventKey: (event: CallObservation) => string | undefined;
+/**
+ * Native facts supersede identified telemetry while retaining its display
+ * position. Unidentified history cannot acquire an invented identity.
+ *
+ * @category projections
+ * @since 1.0.0
+ */
+export declare const uniqueCallEvents: <Event extends CallObservation>(events: ReadonlyArray<Event>) => ReadonlyArray<Event>;
+/**
+ * What {@link CallEventFilter} did with one event.
+ *
+ * `rewrite` means the event superseded one the filter already kept: the batch
+ * rule replaces the earlier event in place, so a reader holding the earlier
+ * output must refold from the whole journal.
+ *
+ * @category projections
+ * @since 1.0.0
+ */
+export type CallEventVerdict<Event> = {
+    readonly _tag: "keep";
+    readonly event: Event;
+} | {
+    readonly _tag: "drop";
+} | {
+    readonly _tag: "rewrite";
+};
+/**
+ * {@link uniqueCallEvents} one event at a time, for a journal read in order.
+ *
+ * The sets are exactly the ones the batch builds, so a filter fed a whole
+ * journal holds the state the batch ended with. Only one case cannot be
+ * answered in order: a native fact whose key an earlier telemetry event
+ * already claimed. That verdict is `rewrite`.
+ *
+ * @category projections
+ * @since 1.0.0
+ */
+export interface CallEventFilter<Event extends CallObservation> {
+    readonly push: (event: Event) => CallEventVerdict<Event>;
+}
+/**
+ * Builds an empty {@link CallEventFilter}.
+ *
+ * @category projections
+ * @since 1.0.0
+ */
+export declare const callEventFilter: <Event extends CallObservation>() => CallEventFilter<Event>;
+//# sourceMappingURL=callEvents.d.ts.map

package/dist/cjs/internal/callEvents.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"callEvents.d.ts","sourceRoot":"","sources":["../../../src/internal/callEvents.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAClC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACtC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAC3B;AAED;;;GAGG;AACH,eAAO,MAAM,eAAe,GAAI,KAAK,SAAS,eAAe,EAAE,OAAO,KAAK,KAAG,KAAK,GAAG,SAsBrF,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,eAAe,GAAI,KAAK,SAAS,eAAe,EAAE,OAAO,KAAK,KAAG,KAAK,GAAG,SA8BrF,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,SAAS,GAAI,OAAO,eAAe,KAAG,MAAM,GAAG,SAe3D,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,aAAa,GACxB,MAAM,aAAa,CACjB;IAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CACzG,EACD,QAAQ,MAAM,GAAG,SAAS,EAC1B,UAAU,MAAM,GAAG,SAAS,EAC5B,QAAQ,MAAM,KACb,MAQF,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,YAAY,GAAI,OAAO,eAAe,KAAG,MAAM,GAAG,SAgB9D,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,GAAI,KAAK,SAAS,eAAe,EAC5D,QAAQ,aAAa,CAAC,KAAK,CAAC,KAC3B,aAAa,CAAC,KAAK,CA2BrB,CAAA;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,gBAAgB,CAAC,KAAK,IAC9B;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;CAAE,GAChD;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACzB;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,CAAA;AAEhC;;;;;;;;;;GAUG;AACH,MAAM,WAAW,eAAe,CAAC,KAAK,SAAS,eAAe;IAC5D,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,gBAAgB,CAAC,KAAK,CAAC,CAAA;CACzD;AAED;;;;;GAKG;AACH,eAAO,MAAM,eAAe,GAAI,KAAK,SAAS,eAAe,OAAK,eAAe,CAAC,KAAK,CA6BtF,CAAA"}