@spinabot/brigade 0.1.1 → 1.0.0

package/dist/agents/skills/grant.js

@@ -0,0 +1,106 @@
+/**
+ * Skill command grants — bulk pre-approval of a skill's declared commands.
+ *
+ * Point 3b: "an agent is the whole-and-sole owner of its skills; stop asking
+ * me to approve every command its own skill documents." The SAFE realisation
+ * (a SKILL.md is just markdown the model itself can write, so we can NEVER
+ * blanket-trust whatever the file currently says): the operator GRANTS a skill
+ * once; granting copies the skill's CURRENT command manifest into the agent's
+ * exec-approvals allowlist via the normal `recordApproval` path. Because it's a
+ * snapshot, a later edit to the skill can't silently widen the grant — newly
+ * added commands simply aren't in the allowlist until the operator re-grants.
+ *
+ * No schema change: grants land as ordinary `commands` / `patterns` entries the
+ * exec-gate already consults. Hard-deny commands are refused (never approvable).
+ * Revoking re-reads the manifest and removes those entries.
+ *
+ * The grant flow is OPERATOR-INITIATED (the TUI `/grant-skill` command). The
+ * agent can't silently self-trust: a grant always runs in an owner-driven turn
+ * and reports exactly what it approved.
+ */
+import { isHardDenied, patternMatchesHardDeny, recordApproval, removeApproval, } from "../../core/exec-approvals.js";
+import { discoverEligibleSkills } from "./index.js";
+import { readSkillCommandManifest } from "./skill-manifest.js";
+/** Locate a discovered skill's SKILL.md path by name for the given agent. */
+function resolveSkillFilePath(config, workspaceDir, agentId, skillName) {
+    const target = skillName.trim().toLowerCase();
+    if (!target)
+        return undefined;
+    const discovered = discoverEligibleSkills({ workspaceDir, config, agentId });
+    return discovered.skills.find((s) => s.name.toLowerCase() === target)?.filePath;
+}
+/**
+ * Preview or apply a skill grant. `apply: false` (default) is a dry run that
+ * reports the manifest without writing — the operator sees what they'd approve.
+ * `apply: true` records each command/pattern into the agent's allowlist.
+ */
+export function grantSkill(args) {
+    const filePath = resolveSkillFilePath(args.config, args.workspaceDir, args.agentId, args.skillName);
+    const base = {
+        found: filePath !== undefined,
+        skill: args.skillName.trim(),
+        manifest: { commands: [], patterns: [] },
+        granted: { commands: [], patterns: [] },
+        refused: [],
+        applied: false,
+        emptyManifest: false,
+    };
+    if (!filePath)
+        return base;
+    const manifest = readSkillCommandManifest(filePath);
+    base.manifest = manifest;
+    if (manifest.commands.length === 0 && manifest.patterns.length === 0) {
+        base.emptyManifest = true;
+        return base;
+    }
+    // Filter out hard-denied entries up front so the preview is honest about
+    // what would actually be approvable.
+    const grantableCommands = manifest.commands.filter((c) => {
+        if (isHardDenied(c)) {
+            base.refused.push(c);
+            return false;
+        }
+        return true;
+    });
+    const grantablePatterns = manifest.patterns.filter((p) => {
+        if (patternMatchesHardDeny(p)) {
+            base.refused.push(p);
+            return false;
+        }
+        return true;
+    });
+    if (!args.apply) {
+        // Dry run — report the grantable set without writing.
+        base.granted = { commands: grantableCommands, patterns: grantablePatterns };
+        return base;
+    }
+    for (const cmd of grantableCommands) {
+        recordApproval(cmd, "exact", args.agentId);
+        base.granted.commands.push(cmd);
+    }
+    for (const pat of grantablePatterns) {
+        recordApproval(pat, "pattern", args.agentId);
+        base.granted.patterns.push(pat);
+    }
+    base.applied = true;
+    return base;
+}
+/**
+ * Revoke a prior grant by re-reading the skill's CURRENT manifest and removing
+ * those exact entries from the allowlist. Note: if the skill was edited since
+ * the grant, manifest entries that changed won't be matched — the operator can
+ * always remove stragglers with `brigade exec` directly.
+ */
+export function revokeSkill(args) {
+    const filePath = resolveSkillFilePath(args.config, args.workspaceDir, args.agentId, args.skillName);
+    if (!filePath)
+        return { found: false, skill: args.skillName.trim(), removed: 0 };
+    const manifest = readSkillCommandManifest(filePath);
+    let removed = 0;
+    for (const value of [...manifest.commands, ...manifest.patterns]) {
+        const r = removeApproval(value, args.agentId);
+        removed += r.removedCommands + r.removedPatterns;
+    }
+    return { found: true, skill: args.skillName.trim(), removed };
+}
+//# sourceMappingURL=grant.js.map

package/dist/agents/skills/grant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant.js","sourceRoot":"","sources":["../../../src/agents/skills/grant.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,EACN,YAAY,EACZ,sBAAsB,EACtB,cAAc,EACd,cAAc,GACd,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,wBAAwB,EAA6B,MAAM,qBAAqB,CAAC;AAmB1F,6EAA6E;AAC7E,SAAS,oBAAoB,CAC5B,MAAqB,EACrB,YAAoB,EACpB,OAAe,EACf,SAAiB;IAEjB,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,UAAU,GAAG,sBAAsB,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IAC7E,OAAO,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,EAAE,QAAQ,CAAC;AACjF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,IAM1B;IACA,MAAM,QAAQ,GAAG,oBAAoB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACpG,MAAM,IAAI,GAAqB;QAC9B,KAAK,EAAE,QAAQ,KAAK,SAAS;QAC7B,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE;QAC5B,QAAQ,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;QACxC,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;QACvC,OAAO,EAAE,EAAE;QACX,OAAO,EAAE,KAAK;QACd,aAAa,EAAE,KAAK;KACpB,CAAC;IACF,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE3B,MAAM,QAAQ,GAAG,wBAAwB,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACzB,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtE,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC1B,OAAO,IAAI,CAAC;IACb,CAAC;IAED,yEAAyE;IACzE,qCAAqC;IACrC,MAAM,iBAAiB,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACxD,IAAI,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;YACrB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACrB,OAAO,KAAK,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC;IACb,CAAC,CAAC,CAAC;IACH,MAAM,iBAAiB,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACxD,IAAI,sBAAsB,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACrB,OAAO,KAAK,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC;IACb,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACjB,sDAAsD;QACtD,IAAI,CAAC,OAAO,GAAG,EAAE,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC;QAC5E,OAAO,IAAI,CAAC;IACb,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,iBAAiB,EAAE,CAAC;QACrC,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,iBAAiB,EAAE,CAAC;QACrC,cAAc,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;IACpB,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,IAK3B;IACA,MAAM,QAAQ,GAAG,oBAAoB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACpG,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACjF,MAAM,QAAQ,GAAG,wBAAwB,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClE,MAAM,CAAC,GAAG,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC,CAAC,eAAe,GAAG,CAAC,CAAC,eAAe,CAAC;IAClD,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC;AAC/D,CAAC"}

package/dist/agents/skills/index.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Skills (Primitive #5) — public entry point.
+ *
+ * `discoverEligibleSkills` is the one call the runtime makes per turn: it reads
+ * the skills config, resolves the bundled + workspace + config-extra roots, and
+ * returns the eligible skills plus the rendered `<available_skills>` prompt
+ * block. The agent-loop passes the block into the assembler (gated on
+ * `capabilities.skills`) and the model loads a skill's body on demand with the
+ * existing `read` tool — no skill-specific tool exists.
+ */
+import type { BrigadeConfig } from "../../config/io.js";
+import { type SkillDiscoveryResult } from "./discovery.js";
+export { discoverSkills, SOURCE_MANAGED, SOURCE_PERSONAL, SOURCE_PROJECT, type DiscoveredSkill, type SkillDiscoveryResult, type DiscoverSkillsArgs, } from "./discovery.js";
+export { isSkillEligible, hasBinary, readSkillEligibility, parseEligibility, type SkillEligibility, } from "./eligibility.js";
+export { resolveEffectiveAgentSkillFilter, isSkillAllowedForAgent, } from "./agent-filter.js";
+export interface DiscoverEligibleSkillsArgs {
+    /** Resolved workspace dir (same value memory/persona use) — skills live in `<workspaceDir>/skills`. */
+    workspaceDir: string;
+    /** The active config (caller already has it loaded; avoids a second read). */
+    config: BrigadeConfig;
+    /**
+     * Optional agent id. When supplied, the per-agent skill allowlist
+     * (`cfg.agents.<id>.skills`, falling back to `cfg.agents.defaults.skills`)
+     * gates which discovered skills land in the prompt block. Omit for
+     * single-agent / legacy callers that don't enforce per-agent scope.
+     */
+    agentId?: string;
+}
+/**
+ * Discover the skills eligible for this turn. Returns the empty result when the
+ * subsystem is globally disabled (`skills.enabled === false`). Synchronous +
+ * cheap (a small directory scan), so it runs per turn with no caching.
+ */
+export declare function discoverEligibleSkills(args: DiscoverEligibleSkillsArgs): SkillDiscoveryResult;
+//# sourceMappingURL=index.d.ts.map

package/dist/agents/skills/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/agents/skills/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AASxD,OAAO,EAAwC,KAAK,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAGjG,OAAO,EACN,cAAc,EACd,cAAc,EACd,eAAe,EACf,cAAc,EACd,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,GACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACN,eAAe,EACf,SAAS,EACT,oBAAoB,EACpB,gBAAgB,EAChB,KAAK,gBAAgB,GACrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACN,gCAAgC,EAChC,sBAAsB,GACtB,MAAM,mBAAmB,CAAC;AAgC3B,MAAM,WAAW,0BAA0B;IAC1C,uGAAuG;IACvG,YAAY,EAAE,MAAM,CAAC;IACrB,8EAA8E;IAC9E,MAAM,EAAE,aAAa,CAAC;IACtB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,0BAA0B,GAAG,oBAAoB,CAmC7F"}

package/dist/agents/skills/index.js

@@ -0,0 +1,88 @@
+/**
+ * Skills (Primitive #5) — public entry point.
+ *
+ * `discoverEligibleSkills` is the one call the runtime makes per turn: it reads
+ * the skills config, resolves the bundled + workspace + config-extra roots, and
+ * returns the eligible skills plus the rendered `<available_skills>` prompt
+ * block. The agent-loop passes the block into the assembler (gated on
+ * `capabilities.skills`) and the model loads a skill's body on demand with the
+ * existing `read` tool — no skill-specific tool exists.
+ */
+import * as os from "node:os";
+import * as path from "node:path";
+import { resolveBundledSkillsDir, resolveManagedSkillsDir, resolveSkillsDir, } from "../../config/paths.js";
+import { resolveEffectiveAgentSkillFilter, } from "./agent-filter.js";
+import { discoverSkills } from "./discovery.js";
+import { resolveOrgVisibleSkillAgents } from "./org-access.js";
+export { discoverSkills, SOURCE_MANAGED, SOURCE_PERSONAL, SOURCE_PROJECT, } from "./discovery.js";
+export { isSkillEligible, hasBinary, readSkillEligibility, parseEligibility, } from "./eligibility.js";
+export { resolveEffectiveAgentSkillFilter, isSkillAllowedForAgent, } from "./agent-filter.js";
+/** The empty result — skills disabled or none found. */
+const EMPTY = {
+    skills: [],
+    promptBlock: undefined,
+    totalDiscovered: 0,
+    diagnostics: [],
+};
+/** Read a peer agent's `cfg.agents.<id>.workspace` override (string) or undefined. */
+function readAgentWorkspaceOverride(config, agentId) {
+    const agents = config.agents;
+    const entry = agents?.[agentId];
+    if (entry && typeof entry === "object" && !Array.isArray(entry)) {
+        const ws = entry.workspace;
+        if (typeof ws === "string" && ws.trim().length > 0)
+            return ws.trim();
+    }
+    return undefined;
+}
+/** Names disabled via `skills.entries[<name>].enabled === false`. */
+function resolveDisabledNames(config) {
+    const out = new Set();
+    const entries = config.skills?.entries;
+    if (!entries)
+        return out;
+    for (const [name, entry] of Object.entries(entries)) {
+        if (entry && entry.enabled === false)
+            out.add(name);
+    }
+    return out;
+}
+/**
+ * Discover the skills eligible for this turn. Returns the empty result when the
+ * subsystem is globally disabled (`skills.enabled === false`). Synchronous +
+ * cheap (a small directory scan), so it runs per turn with no caching.
+ */
+export function discoverEligibleSkills(args) {
+    if (args.config.skills?.enabled === false)
+        return EMPTY;
+    const allowlist = resolveEffectiveAgentSkillFilter(args.config, args.agentId);
+    // 3c — org-hierarchy skill access. Resolve OTHER agents whose workspace
+    // skills this agent may see (its reports / managers, per skills.orgAccess),
+    // and add each as a low-precedence root tagged `org:<id>`. Honours each
+    // peer's own `cfg.agents.<id>.workspace` override so the dir matches where
+    // that agent actually keeps its skills.
+    const orgSkillRoots = resolveOrgVisibleSkillAgents(args.config, args.agentId, args.config.skills?.orgAccess).map((id) => ({ dir: resolveSkillsDir(id, readAgentWorkspaceOverride(args.config, id)), agentId: id }));
+    return discoverSkills({
+        workspaceSkillsDir: path.join(args.workspaceDir, "skills"),
+        bundledSkillsDir: resolveBundledSkillsDir(),
+        managedSkillsDir: resolveManagedSkillsDir(),
+        personalSkillsDir: path.join(os.homedir(), ".agents", "skills"),
+        projectSkillsDir: path.join(args.workspaceDir, ".agents", "skills"),
+        extraPaths: args.config.skills?.paths ?? [],
+        disabledNames: resolveDisabledNames(args.config),
+        ...(orgSkillRoots.length > 0 ? { orgSkillRoots } : {}),
+        ...(allowlist !== undefined ? { skillAllowlist: allowlist } : {}),
+        // Pass the active config so `requires.config` paths actually gate
+        // channel-specific skills (e.g. a bluebubbles skill is hidden when
+        // the operator has no `channels.bluebubbles` section). Without this
+        // the eligibility evaluator conservatively allows every skill that
+        // passes os/bins/env — exactly the case that surfaced when the model
+        // tried to invoke the bluebubbles skill to send a WhatsApp message.
+        eligibilityCtx: {
+            platform: process.platform,
+            env: process.env,
+            config: args.config,
+        },
+    });
+}
+//# sourceMappingURL=index.js.map

package/dist/agents/skills/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/agents/skills/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC,OAAO,EACN,uBAAuB,EACvB,uBAAuB,EACvB,gBAAgB,GAChB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACN,gCAAgC,GAChC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,cAAc,EAAmD,MAAM,gBAAgB,CAAC;AACjG,OAAO,EAAE,4BAA4B,EAAE,MAAM,iBAAiB,CAAC;AAE/D,OAAO,EACN,cAAc,EACd,cAAc,EACd,eAAe,EACf,cAAc,GAId,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACN,eAAe,EACf,SAAS,EACT,oBAAoB,EACpB,gBAAgB,GAEhB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACN,gCAAgC,EAChC,sBAAsB,GACtB,MAAM,mBAAmB,CAAC;AAE3B,wDAAwD;AACxD,MAAM,KAAK,GAAyB;IACnC,MAAM,EAAE,EAAE;IACV,WAAW,EAAE,SAAS;IACtB,eAAe,EAAE,CAAC;IAClB,WAAW,EAAE,EAAE;CACf,CAAC;AAEF,sFAAsF;AACtF,SAAS,0BAA0B,CAAC,MAAqB,EAAE,OAAe;IACzE,MAAM,MAAM,GAAG,MAAM,CAAC,MAA6C,CAAC;IACpE,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC;IAChC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjE,MAAM,EAAE,GAAI,KAAiC,CAAC,SAAS,CAAC;QACxD,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC;IACtE,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,qEAAqE;AACrE,SAAS,oBAAoB,CAAC,MAAqB;IAClD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACvC,IAAI,CAAC,OAAO;QAAE,OAAO,GAAG,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACrD,IAAI,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK;YAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAgBD;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAgC;IACtE,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IACxD,MAAM,SAAS,GAAG,gCAAgC,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9E,wEAAwE;IACxE,4EAA4E;IAC5E,wEAAwE;IACxE,2EAA2E;IAC3E,wCAAwC;IACxC,MAAM,aAAa,GAAG,4BAA4B,CACjD,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAC7B,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,gBAAgB,CAAC,EAAE,EAAE,0BAA0B,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IACzG,OAAO,cAAc,CAAC;QACrB,kBAAkB,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC;QAC1D,gBAAgB,EAAE,uBAAuB,EAAE;QAC3C,gBAAgB,EAAE,uBAAuB,EAAE;QAC3C,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC;QAC/D,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,QAAQ,CAAC;QACnE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE;QAC3C,aAAa,EAAE,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC;QAChD,GAAG,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,kEAAkE;QAClE,mEAAmE;QACnE,oEAAoE;QACpE,mEAAmE;QACnE,qEAAqE;QACrE,oEAAoE;QACpE,cAAc,EAAE;YACf,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,MAAM,EAAE,IAAI,CAAC,MAAM;SACnB;KACD,CAAC,CAAC;AACJ,CAAC"}

package/dist/agents/skills/install-spec.d.ts

@@ -0,0 +1,51 @@
+/**
+ * `SkillInstallSpec` — the structured shape behind the `skills.install` RPC
+ * for installer-managed skill setup. Mirrors the reference codebase's
+ * spec; Brigade implements the universal install kinds (no ClawHub remote
+ * registry yet, so `clawhub` source is intentionally absent).
+ *
+ * Each `kind` has its own required fields; the union is kept narrow so a
+ * misshapen request fails validation at the boundary rather than mid-shell.
+ *
+ *   - `brew`     → `brew install <formula>`   (macOS / Linuxbrew only)
+ *   - `node`     → `npm install -g <package>` (system node)
+ *   - `go`       → `go install <module>`      (system go toolchain)
+ *   - `uv`       → `uv pip install <package>` (system uv)
+ *   - `download` → fetch `url` to `targetDir`/<basename>
+ *
+ * The shape is intentionally permissive (every package-shape field optional)
+ * so a single TS type can describe any installer; the install runner
+ * (`install.ts`) validates per-kind before invoking the underlying tool.
+ */
+export type SkillInstallSpecKind = "brew" | "node" | "go" | "uv" | "download";
+export interface SkillInstallSpec {
+    /** Discriminator — selects the installer command shape below. */
+    kind: SkillInstallSpecKind;
+    /**
+     * Generic per-kind target. `brew` reads `formula`, `node` reads
+     * `package`, `go` reads `module`, `uv` reads `package`, `download`
+     * reads `url`. `target` is a friendly alias the caller can supply
+     * instead — when set, the install runner copies it into the per-kind
+     * field if that field is missing.
+     */
+    target?: string;
+    /** Cosmetic id for the option (so `skills.status` can refer to it). */
+    id?: string;
+    /** Human-readable label (for status/install UIs). */
+    label?: string;
+    /** Bins this install is expected to make available afterwards. */
+    bins?: string[];
+    /** OS allowlist (`process.platform` values). Empty/absent → all OSes. */
+    os?: string[];
+    /** brew formula name (e.g. `gh`). */
+    formula?: string;
+    /** npm package name for `kind === "node"` (e.g. `cowsay`). */
+    package?: string;
+    /** go module path for `kind === "go"` (e.g. `github.com/x/y@latest`). */
+    module?: string;
+    /** Source URL for `kind === "download"`. */
+    url?: string;
+    /** Destination directory for `kind === "download"`. Created if missing. */
+    targetDir?: string;
+}
+//# sourceMappingURL=install-spec.d.ts.map

package/dist/agents/skills/install-spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-spec.d.ts","sourceRoot":"","sources":["../../../src/agents/skills/install-spec.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,IAAI,GAAG,UAAU,CAAC;AAE9E,MAAM,WAAW,gBAAgB;IAChC,iEAAiE;IACjE,IAAI,EAAE,oBAAoB,CAAC;IAC3B;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,qDAAqD;IACrD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,yEAAyE;IACzE,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;IAGd,qCAAqC;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8DAA8D;IAC9D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4CAA4C;IAC5C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,2EAA2E;IAC3E,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB"}

package/dist/agents/skills/install-spec.js

@@ -0,0 +1,21 @@
+/**
+ * `SkillInstallSpec` — the structured shape behind the `skills.install` RPC
+ * for installer-managed skill setup. Mirrors the reference codebase's
+ * spec; Brigade implements the universal install kinds (no ClawHub remote
+ * registry yet, so `clawhub` source is intentionally absent).
+ *
+ * Each `kind` has its own required fields; the union is kept narrow so a
+ * misshapen request fails validation at the boundary rather than mid-shell.
+ *
+ *   - `brew`     → `brew install <formula>`   (macOS / Linuxbrew only)
+ *   - `node`     → `npm install -g <package>` (system node)
+ *   - `go`       → `go install <module>`      (system go toolchain)
+ *   - `uv`       → `uv pip install <package>` (system uv)
+ *   - `download` → fetch `url` to `targetDir`/<basename>
+ *
+ * The shape is intentionally permissive (every package-shape field optional)
+ * so a single TS type can describe any installer; the install runner
+ * (`install.ts`) validates per-kind before invoking the underlying tool.
+ */
+export {};
+//# sourceMappingURL=install-spec.js.map

package/dist/agents/skills/install-spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-spec.js","sourceRoot":"","sources":["../../../src/agents/skills/install-spec.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG"}

package/dist/agents/skills/install.d.ts

@@ -0,0 +1,68 @@
+/**
+ * Per-kind installer for `skills.install`.
+ *
+ * Each kind (`brew`, `node`, `go`, `uv`, `download`) maps to a small
+ * `child_process.spawn` invocation (or a `fetch`+write for `download`).
+ * The runner returns a structured result so the gateway handler can hand
+ * the operator a JSON blob with stdout/stderr/exit code — no stdout
+ * shell-out gymnastics. Tests inject a stub `spawn` via the optional
+ * `deps.spawn` seam so the assertion can be "we asked npm to install the
+ * right package" without a real child running.
+ *
+ * Out of scope here: ClawHub-style remote skill registries. The RPC is
+ * intentionally limited to deterministic system-tool invocations + a
+ * direct URL download so the surface stays auditable.
+ */
+import { type SpawnOptions } from "node:child_process";
+import { Writable } from "node:stream";
+import { SkillInstallSpec, type SkillInstallSpecKind } from "./install-spec.js";
+/** What a child process produced — captured so the result is auditable. */
+export interface ChildProcessResult {
+    ok: boolean;
+    exitCode: number | null;
+    stdout: string;
+    stderr: string;
+}
+/** Final result of `installSkill`. */
+export interface InstallResult {
+    ok: boolean;
+    kind: SkillInstallSpecKind;
+    command?: string;
+    args?: string[];
+    stdout?: string;
+    stderr?: string;
+    exitCode?: number | null;
+    message?: string;
+    /** Absolute path of any file written by a `download` install. */
+    downloadedTo?: string;
+}
+/** Minimal child-process handle the install runner reads. */
+export interface InstallSpawnedChild {
+    stdout: {
+        on(event: "data", cb: (chunk: Buffer | string) => void): void;
+    } | null;
+    stderr: {
+        on(event: "data", cb: (chunk: Buffer | string) => void): void;
+    } | null;
+    on(event: "error", cb: (err: Error) => void): InstallSpawnedChild;
+    on(event: "close", cb: (code: number | null) => void): InstallSpawnedChild;
+    stdin?: Writable | null;
+}
+/** Minimal `spawn` shape we depend on — keeps the test stub focused. */
+export type SpawnLike = (command: string, args: ReadonlyArray<string>, options?: SpawnOptions) => InstallSpawnedChild;
+/** Test seam — inject a stubbed `spawn` to assert the invocation. */
+export interface InstallSkillDeps {
+    spawn?: SpawnLike;
+    /** Override `fetch` for `download` installs (tests). */
+    fetchImpl?: typeof fetch;
+    /** Override the `hasBinary` probe (tests). */
+    hasBinaryImpl?: (name: string) => boolean;
+}
+/**
+ * Install one skill spec. Caller is responsible for any user-facing
+ * confirmation; this function just shells out (or downloads).
+ */
+export declare function installSkill(spec: SkillInstallSpec, deps?: InstallSkillDeps, options?: {
+    timeoutMs?: number;
+}): Promise<InstallResult>;
+//# sourceMappingURL=install.d.ts.map

package/dist/agents/skills/install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../../src/agents/skills/install.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAG3E,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAGvC,OAAO,EAAE,gBAAgB,EAAE,KAAK,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAEhF,2EAA2E;AAC3E,MAAM,WAAW,kBAAkB;IAClC,EAAE,EAAE,OAAO,CAAC;IACZ,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CACf;AAED,sCAAsC;AACtC,MAAM,WAAW,aAAa;IAC7B,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,oBAAoB,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iEAAiE;IACjE,YAAY,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,6DAA6D;AAC7D,MAAM,WAAW,mBAAmB;IACnC,MAAM,EAAE;QAAE,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,KAAK,IAAI,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IACjF,MAAM,EAAE;QAAE,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,KAAK,IAAI,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IACjF,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,KAAK,KAAK,IAAI,GAAG,mBAAmB,CAAC;IAClE,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,GAAG,mBAAmB,CAAC;IAC3E,KAAK,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC;CACxB;AAED,wEAAwE;AACxE,MAAM,MAAM,SAAS,GAAG,CACvB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,EAC3B,OAAO,CAAC,EAAE,YAAY,KAClB,mBAAmB,CAAC;AAEzB,qEAAqE;AACrE,MAAM,WAAW,gBAAgB;IAChC,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,wDAAwD;IACxD,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,8CAA8C;IAC9C,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;CAC1C;AAwDD;;;GAGG;AACH,wBAAsB,YAAY,CACjC,IAAI,EAAE,gBAAgB,EACtB,IAAI,GAAE,gBAAqB,EAC3B,OAAO,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAClC,OAAO,CAAC,aAAa,CAAC,CA+HxB"}

package/dist/agents/skills/install.js

@@ -0,0 +1,206 @@
+/**
+ * Per-kind installer for `skills.install`.
+ *
+ * Each kind (`brew`, `node`, `go`, `uv`, `download`) maps to a small
+ * `child_process.spawn` invocation (or a `fetch`+write for `download`).
+ * The runner returns a structured result so the gateway handler can hand
+ * the operator a JSON blob with stdout/stderr/exit code — no stdout
+ * shell-out gymnastics. Tests inject a stub `spawn` via the optional
+ * `deps.spawn` seam so the assertion can be "we asked npm to install the
+ * right package" without a real child running.
+ *
+ * Out of scope here: ClawHub-style remote skill registries. The RPC is
+ * intentionally limited to deterministic system-tool invocations + a
+ * direct URL download so the surface stays auditable.
+ */
+import { spawn as nodeSpawn } from "node:child_process";
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { hasBinary } from "./eligibility.js";
+const DEFAULT_TIMEOUT_MS = 5 * 60 * 1000;
+async function runProcess(command, args, deps, timeoutMs) {
+    const spawnFn = (deps.spawn ?? nodeSpawn);
+    return await new Promise((resolve) => {
+        const child = spawnFn(command, args, {
+            stdio: ["ignore", "pipe", "pipe"],
+            windowsHide: true,
+        });
+        let stdout = "";
+        let stderr = "";
+        let settled = false;
+        const settle = (result) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            resolve(result);
+        };
+        const timer = setTimeout(() => {
+            settle({
+                ok: false,
+                exitCode: null,
+                stdout,
+                stderr: stderr + `\n[brigade-install] timed out after ${timeoutMs}ms`,
+            });
+        }, timeoutMs);
+        child.stdout?.on("data", (chunk) => {
+            stdout += chunk.toString();
+        });
+        child.stderr?.on("data", (chunk) => {
+            stderr += chunk.toString();
+        });
+        child.on("error", (err) => {
+            settle({ ok: false, exitCode: null, stdout, stderr: stderr + (stderr ? "\n" : "") + err.message });
+        });
+        child.on("close", (code) => {
+            settle({ ok: code === 0, exitCode: code, stdout, stderr });
+        });
+    });
+}
+function resolveTarget(spec, field) {
+    const fromField = spec[field];
+    if (typeof fromField === "string" && fromField.trim().length > 0)
+        return fromField.trim();
+    const fromTarget = spec.target;
+    if (typeof fromTarget === "string" && fromTarget.trim().length > 0)
+        return fromTarget.trim();
+    return undefined;
+}
+/**
+ * Install one skill spec. Caller is responsible for any user-facing
+ * confirmation; this function just shells out (or downloads).
+ */
+export async function installSkill(spec, deps = {}, options = {}) {
+    const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    const probe = deps.hasBinaryImpl ?? hasBinary;
+    switch (spec.kind) {
+        case "brew": {
+            const formula = resolveTarget(spec, "formula");
+            if (!formula)
+                return { ok: false, kind: spec.kind, message: "brew install: missing formula/target" };
+            if (!probe("brew"))
+                return {
+                    ok: false,
+                    kind: spec.kind,
+                    message: "brew binary not on PATH — install Homebrew first",
+                };
+            const res = await runProcess("brew", ["install", formula], deps, timeoutMs);
+            return {
+                ok: res.ok,
+                kind: spec.kind,
+                command: "brew",
+                args: ["install", formula],
+                stdout: res.stdout,
+                stderr: res.stderr,
+                exitCode: res.exitCode,
+                ...(res.ok ? {} : { message: `brew install ${formula} failed (code ${res.exitCode})` }),
+            };
+        }
+        case "node": {
+            const pkg = resolveTarget(spec, "package");
+            if (!pkg)
+                return { ok: false, kind: spec.kind, message: "node install: missing package/target" };
+            if (!probe("npm"))
+                return {
+                    ok: false,
+                    kind: spec.kind,
+                    message: "npm binary not on PATH — install Node.js first",
+                };
+            const res = await runProcess("npm", ["install", "-g", pkg], deps, timeoutMs);
+            return {
+                ok: res.ok,
+                kind: spec.kind,
+                command: "npm",
+                args: ["install", "-g", pkg],
+                stdout: res.stdout,
+                stderr: res.stderr,
+                exitCode: res.exitCode,
+                ...(res.ok ? {} : { message: `npm install -g ${pkg} failed (code ${res.exitCode})` }),
+            };
+        }
+        case "go": {
+            const module = resolveTarget(spec, "module");
+            if (!module)
+                return { ok: false, kind: spec.kind, message: "go install: missing module/target" };
+            if (!probe("go"))
+                return {
+                    ok: false,
+                    kind: spec.kind,
+                    message: "go binary not on PATH — install the Go toolchain first",
+                };
+            const res = await runProcess("go", ["install", module], deps, timeoutMs);
+            return {
+                ok: res.ok,
+                kind: spec.kind,
+                command: "go",
+                args: ["install", module],
+                stdout: res.stdout,
+                stderr: res.stderr,
+                exitCode: res.exitCode,
+                ...(res.ok ? {} : { message: `go install ${module} failed (code ${res.exitCode})` }),
+            };
+        }
+        case "uv": {
+            const pkg = resolveTarget(spec, "package");
+            if (!pkg)
+                return { ok: false, kind: spec.kind, message: "uv install: missing package/target" };
+            if (!probe("uv"))
+                return {
+                    ok: false,
+                    kind: spec.kind,
+                    message: "uv binary not on PATH — install uv first",
+                };
+            const res = await runProcess("uv", ["pip", "install", pkg], deps, timeoutMs);
+            return {
+                ok: res.ok,
+                kind: spec.kind,
+                command: "uv",
+                args: ["pip", "install", pkg],
+                stdout: res.stdout,
+                stderr: res.stderr,
+                exitCode: res.exitCode,
+                ...(res.ok ? {} : { message: `uv pip install ${pkg} failed (code ${res.exitCode})` }),
+            };
+        }
+        case "download": {
+            const url = resolveTarget(spec, "url");
+            if (!url)
+                return { ok: false, kind: spec.kind, message: "download install: missing url/target" };
+            const targetDir = typeof spec.targetDir === "string" && spec.targetDir.trim().length > 0
+                ? spec.targetDir.trim()
+                : process.cwd();
+            try {
+                fs.mkdirSync(targetDir, { recursive: true });
+                const fetchImpl = deps.fetchImpl ?? globalThis.fetch;
+                if (!fetchImpl) {
+                    return { ok: false, kind: spec.kind, message: "fetch is unavailable in this runtime" };
+                }
+                const response = await fetchImpl(url);
+                if (!response.ok) {
+                    return {
+                        ok: false,
+                        kind: spec.kind,
+                        message: `download ${url} failed: HTTP ${response.status}`,
+                    };
+                }
+                const buffer = Buffer.from(await response.arrayBuffer());
+                const basename = path.basename(new URL(url).pathname) || "downloaded";
+                const dest = path.join(targetDir, basename);
+                fs.writeFileSync(dest, buffer);
+                return { ok: true, kind: spec.kind, downloadedTo: dest };
+            }
+            catch (err) {
+                return {
+                    ok: false,
+                    kind: spec.kind,
+                    message: `download ${url} failed: ${err instanceof Error ? err.message : String(err)}`,
+                };
+            }
+        }
+        default: {
+            const exhaustive = spec.kind;
+            return { ok: false, kind: spec.kind, message: `unknown install kind: ${String(exhaustive)}` };
+        }
+    }
+}
+//# sourceMappingURL=install.js.map

package/dist/agents/skills/install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.js","sourceRoot":"","sources":["../../../src/agents/skills/install.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,KAAK,IAAI,SAAS,EAAqB,MAAM,oBAAoB,CAAC;AAC3E,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAkD7C,MAAM,kBAAkB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAEzC,KAAK,UAAU,UAAU,CACxB,OAAe,EACf,IAA2B,EAC3B,IAAsB,EACtB,SAAiB;IAEjB,MAAM,OAAO,GAAc,CAAC,IAAI,CAAC,KAAK,IAAK,SAAkC,CAAC,CAAC;IAC/E,OAAO,MAAM,IAAI,OAAO,CAAqB,CAAC,OAAO,EAAE,EAAE;QACxD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE;YACpC,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,WAAW,EAAE,IAAI;SACjB,CAAC,CAAC;QACH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,MAA0B,EAAQ,EAAE;YACnD,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,MAAM,CAAC,CAAC;QACjB,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC7B,MAAM,CAAC;gBACN,EAAE,EAAE,KAAK;gBACT,QAAQ,EAAE,IAAI;gBACd,MAAM;gBACN,MAAM,EAAE,MAAM,GAAG,uCAAuC,SAAS,IAAI;aACrE,CAAC,CAAC;QACJ,CAAC,EAAE,SAAS,CAAC,CAAC;QACd,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;YACnD,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;YACnD,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;YAChC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACpG,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAmB,EAAE,EAAE;YACzC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,KAAK,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,IAAsB,EAAE,KAA6B;IAC3E,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC,IAAI,EAAE,CAAC;IAC1F,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC;IAC/B,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,UAAU,CAAC,IAAI,EAAE,CAAC;IAC7F,OAAO,SAAS,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CACjC,IAAsB,EACtB,OAAyB,EAAE,EAC3B,UAAkC,EAAE;IAEpC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,IAAI,SAAS,CAAC;IAC9C,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,MAAM,CAAC,CAAC,CAAC;YACb,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YAC/C,IAAI,CAAC,OAAO;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC;YACrG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;gBACjB,OAAO;oBACN,EAAE,EAAE,KAAK;oBACT,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,OAAO,EAAE,kDAAkD;iBAC3D,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;YAC5E,OAAO;gBACN,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC;gBAC1B,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,gBAAgB,OAAO,iBAAiB,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC;aACvF,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACb,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YAC3C,IAAI,CAAC,GAAG;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC;YACjG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;gBAChB,OAAO;oBACN,EAAE,EAAE,KAAK;oBACT,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,OAAO,EAAE,gDAAgD;iBACzD,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;YAC7E,OAAO;gBACN,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC;gBAC5B,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,kBAAkB,GAAG,iBAAiB,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC;aACrF,CAAC;QACH,CAAC;QACD,KAAK,IAAI,CAAC,CAAC,CAAC;YACX,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC7C,IAAI,CAAC,MAAM;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC;YACjG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBACf,OAAO;oBACN,EAAE,EAAE,KAAK;oBACT,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,OAAO,EAAE,wDAAwD;iBACjE,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;YACzE,OAAO;gBACN,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC;gBACzB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,MAAM,iBAAiB,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC;aACpF,CAAC;QACH,CAAC;QACD,KAAK,IAAI,CAAC,CAAC,CAAC;YACX,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YAC3C,IAAI,CAAC,GAAG;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC;YAC/F,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBACf,OAAO;oBACN,EAAE,EAAE,KAAK;oBACT,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,OAAO,EAAE,0CAA0C;iBACnD,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;YAC7E,OAAO;gBACN,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC;gBAC7B,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,kBAAkB,GAAG,iBAAiB,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC;aACrF,CAAC;QACH,CAAC;QACD,KAAK,UAAU,CAAC,CAAC,CAAC;YACjB,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACvC,IAAI,CAAC,GAAG;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC;YACjG,MAAM,SAAS,GACd,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;gBACrE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE;gBACvB,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YAClB,IAAI,CAAC;gBACJ,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAK,UAAU,CAAC,KAAkC,CAAC;gBACnF,IAAI,CAAC,SAAS,EAAE,CAAC;oBAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC;gBACxF,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;gBACtC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBAClB,OAAO;wBACN,EAAE,EAAE,KAAK;wBACT,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,OAAO,EAAE,YAAY,GAAG,iBAAiB,QAAQ,CAAC,MAAM,EAAE;qBAC1D,CAAC;gBACH,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;gBACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,YAAY,CAAC;gBACtE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;gBAC5C,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBAC/B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;YAC1D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,OAAO;oBACN,EAAE,EAAE,KAAK;oBACT,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,OAAO,EAAE,YAAY,GAAG,YAAY,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;iBACtF,CAAC;YACH,CAAC;QACF,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACT,MAAM,UAAU,GAAU,IAAI,CAAC,IAAI,CAAC;YACpC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,yBAAyB,MAAM,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QAC/F,CAAC;IACF,CAAC;AACF,CAAC"}