@theokit/agents 13.0.0-next.8 → 13.0.0

package/dist/{bridge-entry-BJ86tO6e.d.ts → bridge-entry-DBkqwe6b.d.ts}

@@ -1,13 +1,14 @@
 import { ExecutionContext } from '@theokit/http';
 import { c as AgentOptions, T as ToolOptions, P as ProjectContextOptions, H as HumanInTheLoopOptions, R as ReasoningEffort, M as McpServersMap } from './types-C16Wuh9E.js';
-import { C as CompiledAgentOptions, a as CompiledTool, G as Guardrail, S as SkillsSelection, H as HookApprovalGate } from './agent-compiler-C2jIZ4CZ.js';
-import { SkillsSettings, ContextSettings, SystemPromptResolver, ModelSelection, PluginsSettings, Plugin, ProviderRoutingSettings, AgentDefinition as AgentDefinition$1, BudgetTracker, CustomTool, RunEventSink, MemorySettings } from '@theokit/sdk';
-import { S as StreamEvent, f as ApprovalRequiredEvent, a4 as MaskError } from './delegation-scoring-BrBQXvIp.js';
+import { a as CompiledAgentOptions, b as CompiledTool, G as Guardrail, S as SkillsSelection, H as HookApprovalGate, C as CodePlugin } from './agent-compiler-B0hb6HCo.js';
+import { SkillsSettings, ContextSettings, SystemPromptResolver, ModelSelection, PluginsSettings, Plugin, ProviderRoutingSettings, AgentDefinition as AgentDefinition$1, BudgetTracker, CustomTool, RunEventSink, MemorySettings, TelemetrySettings } from '@theokit/sdk';
+import { S as StreamEvent, f as ApprovalRequiredEvent, a4 as MaskError } from './delegation-scoring-BzJEheml.js';
 import { RetryOptions } from '@theokit/sdk/retry';
 import { SandboxPosture } from '@theokit/sdk/sandbox';
-import { A as AgentDefinition, S as SettingSourcesSelection } from './define-agent-WYnUlWaH.js';
+import { A as AgentDefinition } from './define-agent-DhwNmdej.js';
 import { z } from 'zod';
 import { H as HookHandlers } from './hook-handlers-Cw2FsnE5.js';
+import { S as SettingSourcesSelection } from './setting-sources-gate-DFu51i50.js';
 import { WireChunk } from '@theokit/presenter/wire';
 import { TheokitAgentError } from '@theokit/sdk/errors';
 
@@ -82,6 +83,20 @@ declare function compileSkills(options: SkillsOptions): SkillsSettings;
 interface ContextWindowOptions {
     /** Maximum tokens before compaction triggers. */
     maxTokens?: number;
+    /**
+     * Per-file truncation cap in CHARACTERS (SDK default 40 000, ~10k tokens). Larger files are
+     * truncated head/tail with a marker.
+     *
+     * Reachable here because the surface that turns instruction discovery on is the same surface that
+     * decides when an instruction file gets cut: a 60 000-character `CLAUDE.md` was silently
+     * truncated to 40 000, and the only knob on offer was named after tokens.
+     */
+    maxBytesPerFile?: number;
+    /**
+     * Aggregate cap across all context files in CHARACTERS (SDK default 120 000). Past it,
+     * lower-priority sources are DROPPED — not truncated.
+     */
+    maxBytesTotal?: number;
 }
 interface CompiledContextWindow {
     /** SDK-shaped context budget passed to `Agent.create({ context })`. */
@@ -508,6 +523,35 @@ interface SdkTurnHandle {
 type SdkSendOptions = Record<string, unknown>;
 interface SdkAgentHandle {
     readonly agentId: string;
+    /**
+     * B-062 — a tool-using run that returns schema-validated output.
+     *
+     * The SDK's `agent.generate(input, { output })` "runs the agent's NORMAL tool loop (the user's
+     * tools run first) and then coerces the final answer into a Zod schema". It existed and this
+     * handle did not declare it, so a consumer of `@theokit/agents` could reach it only by importing
+     * `@theokit/sdk` directly — the one thing this layer's doctrine forbids.
+     *
+     * The survey that filed this concluded the capability was absent, having measured `generateObject`
+     * — which is the TOOLLESS path by design: it builds a transient agent whose only tool is the
+     * synthetic output tool. Both paths exist and answer different questions.
+     *
+     * OPTIONAL, because a caller-injected handle (tests, a custom transport) need not implement it,
+     * and requiring it would break every such double to add a method most of them never call.
+     *
+     * BOTH wrappers below forward it. A wrapper that rebuilds the handle silently removes every method
+     * it does not name, and the consumer meets the loss at runtime as "the handle has no `generate`"
+     * after the types said it had one. Each forward is pinned by its own mutation.
+     *
+     * It is NOT put through the output guards, stated rather than assumed: `generate` resolves to a
+     * validated OBJECT and those guards moderate TEXT, so running them over a serialised object would
+     * moderate a shape no guard was written against. Guarding the structured path needs its own
+     * decision about what a redaction means to a schema, and inventing one would be the gate that
+     * reports without gating this module already refuses to build.
+     */
+    readonly generate?: (message: string, options: {
+        output: unknown;
+        [key: string]: unknown;
+    }) => Promise<unknown>;
     /**
      * M91 — era `(msg: string, opts?: unknown) => unknown`.
      *
@@ -934,6 +978,17 @@ interface AgentBuilder<TInput extends z.ZodType | UnsetMarker = UnsetMarker, TMo
      * `MemorySettings` verbatim — `{ enabled: true }` is the minimal opt-in.
      */
     memory(settings: MemorySettings): AgentBuilder<TInput, TModel, TContext, TTools>;
+    /**
+     * B-072 — emit OpenTelemetry spans for this agent's runs (`agent.send`, `llm.call`, `tool.call`,
+     * `memory.search`). Takes the SDK's `TelemetrySettings` verbatim; `{ enabled: true }` is the
+     * minimal opt-in, and content (prompts, responses, tool args) is omitted unless
+     * `includeContent: true` is set.
+     *
+     * Distinct from a diagnostics sink, which answers "what did this run LOG". A trace answers "where
+     * did this run SPEND its time, and which call was the slow one" — two questions, and the sink
+     * could never answer the second.
+     */
+    telemetry(settings: TelemetrySettings): AgentBuilder<TInput, TModel, TContext, TTools>;
     /**
      * Attach LIFECYCLE HOOKS in code, keyed by `HookName` — the builder-chain seam for intercepting
      * the agent loop. `pre_tool_call` may VETO a tool by returning `{ block: true, message }` before
@@ -960,8 +1015,13 @@ interface AgentBuilder<TInput extends z.ZodType | UnsetMarker = UnsetMarker, TMo
      * For lifecycle interception prefer {@link AgentBuilder.hooks} — a hook needs a plugin only as its
      * transport, and `plugins()` makes the caller assemble that transport by hand. Reach for this when
      * you genuinely have a plugin (a provider, a memory adapter, a tool-registering extension).
+     *
+     * NOT the Claude Code filesystem-bundle form (B-055). `[{ type: 'local', path: './p' }]` used to
+     * typecheck here against `readonly unknown[]` and do nothing — the typecheck that should have
+     * caught it was what let it through. A bundle is declared by living in a `plugins/` directory
+     * under `.theokit/` or `.claude/`, where its `skills/` and `agents/` are discovered.
      */
-    plugins(list: readonly unknown[]): AgentBuilder<TInput, TModel, TContext, TTools>;
+    plugins(list: readonly CodePlugin[]): AgentBuilder<TInput, TModel, TContext, TTools>;
     /**
      * Declare MCP (Model Context Protocol) servers available to this agent — the builder-chain
      * equivalent of the `@MCP` class decorator. Each key is a server name; the value is its config
@@ -1403,6 +1463,12 @@ declare function mcpToolApprovals(specs: Record<string, McpApprovalSpec>): Recor
  */
 interface LoadMcpJsonOptions {
     onWarn?: (warning: string) => void;
+    /**
+     * The environment `${VAR}` references resolve against. Injected rather than read from
+     * `process.env` so a test can prove the expansion without mutating the process it runs in —
+     * the convention `diagnostic-sink.ts` and `transcript-root-hint.ts` already follow.
+     */
+    env?: Record<string, string | undefined>;
 }
 /**
  * Raised when `<cwd>/.mcp.json` exists but cannot be read, is not valid JSON, or does not match the
@@ -1573,4 +1639,4 @@ declare function agentsPlugin(opts: AgentsPluginOptions): {
     register(app: PluginApp): void;
 };
 
-export { compileProjectContext as $, type AgentManifestEntry as A, type BeforeToolCallContext as B, type ContextWindowOptions as C, type DefinitionOrThunk as D, type EphemeralAgent as E, type McpSelection as F, type SdkAgentHandle as G, type HitlDecision as H, type SdkMessage as I, type SdkSendOptions as J, type SdkTurnHandle as K, type LLMCallContext as L, type McpApprovalSpec as M, type Segment as N, type ShouldAutoApproveOptions as O, type ProcessInputContext as P, type ToolHooks as Q, type ToolHooksPlugin as R, type SkillsOptions as S, type ToolCallVeto as T, agentsPlugin as U, applyPosture as V, WRITE_SCOPED_TOOLS as W, buildModelSelection as X, compileAgentModule as Y, compileContextWindow as Z, compileLoadedAgentModule as _, type ApprovalPosture as a, compileSkills as a0, createAgentExecutionContext as a1, createApiErrorHandler as a2, createSdkAgentStream as a3, createThinkTagExtractor as a4, createToolHooksPlugin as a5, extractThinkTagStream as a6, generateAgentManifest as a7, generateAgentRoutes as a8, isAgentContext as a9, loadMcpJson as aa, mcpRegistry as ab, mcpToolApprovals as ac, projectContextMetadataOnlyKnobs as ad, reasoningEffortOf as ae, resolveMcpServers as af, runWithApiErrorHandling as ag, shouldAutoApprove as ah, toAgentFactory as ai, translateSdkEvent as aj, withClockCap as ak, withEphemeralAgent as al, type AgentModule as b, APPROVAL_MODES as c, type AfterToolCallContext as d, AgentBuilder as e, AgentDefinitionError as f, type AgentExecutionContext as g, type AgentManifest as h, type AgentManifestSource as i, type AgentManifestTool as j, type AgentRoute as k, type AgentRouteContext as l, type AgentRunInfo as m, type AgentsPluginOptions as n, type ApiErrorContext as o, type ApiErrorDecision as p, type ApiErrorPolicy as q, type ApprovalMode as r, streamAgentUIMessages as s, type ApprovalRequest as t, type CompiledContextWindow as u, ContextualTool as v, DelegationTimeoutError as w, McpFileError as x, type McpRegistryConfig as y, type McpRequestContext as z };
+export { compileLoadedAgentModule as $, type AgentManifestEntry as A, type BeforeToolCallContext as B, type ContextWindowOptions as C, type DefinitionOrThunk as D, type EphemeralAgent as E, type McpSelection as F, type SdkAgentHandle as G, type HitlDecision as H, type SdkMessage as I, type SdkSendOptions as J, type SdkTurnHandle as K, type LLMCallContext as L, type McpApprovalSpec as M, type Segment as N, type ShouldAutoApproveOptions as O, type ProcessInputContext as P, type ToolHooks as Q, type RuntimeOverrides as R, type SkillsOptions as S, type ToolCallVeto as T, type ToolHooksPlugin as U, agentsPlugin as V, WRITE_SCOPED_TOOLS as W, applyPosture as X, buildModelSelection as Y, compileAgentModule as Z, compileContextWindow as _, type ApprovalPosture as a, compileProjectContext as a0, compileSkills as a1, createAgentExecutionContext as a2, createApiErrorHandler as a3, createSdkAgentStream as a4, createThinkTagExtractor as a5, createToolHooksPlugin as a6, extractThinkTagStream as a7, generateAgentManifest as a8, generateAgentRoutes as a9, isAgentContext as aa, loadMcpJson as ab, mcpRegistry as ac, mcpToolApprovals as ad, projectContextMetadataOnlyKnobs as ae, reasoningEffortOf as af, resolveMcpServers as ag, runWithApiErrorHandling as ah, shouldAutoApprove as ai, toAgentFactory as aj, translateSdkEvent as ak, withClockCap as al, withEphemeralAgent as am, type AgentModule as b, APPROVAL_MODES as c, type AfterToolCallContext as d, AgentBuilder as e, AgentDefinitionError as f, type AgentExecutionContext as g, type AgentManifest as h, type AgentManifestSource as i, type AgentManifestTool as j, type AgentRoute as k, type AgentRouteContext as l, type AgentRunInfo as m, type AgentsPluginOptions as n, type ApiErrorContext as o, type ApiErrorDecision as p, type ApiErrorPolicy as q, type ApprovalMode as r, streamAgentUIMessages as s, type ApprovalRequest as t, type CompiledContextWindow as u, ContextualTool as v, DelegationTimeoutError as w, McpFileError as x, type McpRegistryConfig as y, type McpRequestContext as z };

package/dist/bridge.d.ts

@@ -1,7 +1,8 @@
-export { c as APPROVAL_MODES, d as AfterToolCallContext, e as AgentBuilder, f as AgentDefinitionError, g as AgentExecutionContext, h as AgentManifest, A as AgentManifestEntry, i as AgentManifestSource, j as AgentManifestTool, b as AgentModule, k as AgentRoute, l as AgentRouteContext, m as AgentRunInfo, n as AgentsPluginOptions, o as ApiErrorContext, p as ApiErrorDecision, q as ApiErrorPolicy, r as ApprovalMode, a as ApprovalPosture, B as BeforeToolCallContext, u as CompiledContextWindow, v as ContextualTool, D as DefinitionOrThunk, w as DelegationTimeoutError, E as EphemeralAgent, L as LLMCallContext, M as McpApprovalSpec, x as McpFileError, y as McpRegistryConfig, z as McpRequestContext, F as McpSelection, P as ProcessInputContext, G as SdkAgentHandle, I as SdkMessage, J as SdkSendOptions, K as SdkTurnHandle, N as Segment, O as ShouldAutoApproveOptions, T as ToolCallVeto, Q as ToolHooks, R as ToolHooksPlugin, W as WRITE_SCOPED_TOOLS, U as agentsPlugin, V as applyPosture, X as buildModelSelection, Y as compileAgentModule, Z as compileContextWindow, _ as compileLoadedAgentModule, $ as compileProjectContext, a0 as compileSkills, a1 as createAgentExecutionContext, a2 as createApiErrorHandler, a3 as createSdkAgentStream, a4 as createThinkTagExtractor, a5 as createToolHooksPlugin, a6 as extractThinkTagStream, a7 as generateAgentManifest, a8 as generateAgentRoutes, a9 as isAgentContext, aa as loadMcpJson, ab as mcpRegistry, ac as mcpToolApprovals, ad as projectContextMetadataOnlyKnobs, ae as reasoningEffortOf, af as resolveMcpServers, ag as runWithApiErrorHandling, ah as shouldAutoApprove, s as streamAgentUIMessages, ai as toAgentFactory, aj as translateSdkEvent, ak as withClockCap, al as withEphemeralAgent } from './bridge-entry-BJ86tO6e.js';
-export { C as CompiledAgentOptions, a as CompiledTool, H as HookApprovalGate, g as HookApprovalRequest, h as HookGateUnsupportedError, T as ToolWalkResult, j as ToolboxWalkResult, k as compileTools } from './agent-compiler-C2jIZ4CZ.js';
-export { A as AgentStopReason, d as AgentStreamEvent, e as AgentTurnMetadata, f as ApprovalRequiredEvent, g as ArtifactChunkEvent, h as ArtifactStartEvent, B as BackgroundDelegation, i as BudgetExceededError, C as CheckpointSavedEvent, k as DelegateFn, a as DelegateOptions, l as DelegationBudgetExceededError, m as DelegationError, n as DelegationPort, c as DelegationResult, D as DelegationTarget, o as DoneEvent, E as ErrorEvent, F as FileEditEvent, I as IterationEvent, P as PartialToolCallEvent, v as RunStartedEvent, w as ScoreVerdict, x as ScoredDelegation, y as Scorer, z as StateUpdateEvent, S as StreamEvent, T as TextDeltaEvent, G as ThinkingEvent, H as ToolCallEvent, J as ToolResultEvent, K as delegate, M as delegateBackground, N as delegateWithScoring, O as isApprovalRequired, Q as isDone, U as isError, V as isPartialToolCall, W as isTextDelta, X as isToolCall, Y as isToolResult, a0 as presentUIMessageStream, a3 as streamAgentResponse } from './delegation-scoring-BrBQXvIp.js';
-export { a as AGENT_BRAND, A as AgentDefinition, D as DefineAgentConfig, I as InferAgentInput, b as InferAgentToolNames, P as ProjectSettingsGrant, c as SettingSourceCapability, S as SettingSourcesSelection, U as UntrustedSettingSourceError, d as compileAgentDefinition, i as isAgentDefinition, r as resolveCompatSources, e as resolveSettingSources } from './define-agent-WYnUlWaH.js';
+export { c as APPROVAL_MODES, d as AfterToolCallContext, e as AgentBuilder, f as AgentDefinitionError, g as AgentExecutionContext, h as AgentManifest, A as AgentManifestEntry, i as AgentManifestSource, j as AgentManifestTool, b as AgentModule, k as AgentRoute, l as AgentRouteContext, m as AgentRunInfo, n as AgentsPluginOptions, o as ApiErrorContext, p as ApiErrorDecision, q as ApiErrorPolicy, r as ApprovalMode, a as ApprovalPosture, B as BeforeToolCallContext, u as CompiledContextWindow, v as ContextualTool, D as DefinitionOrThunk, w as DelegationTimeoutError, E as EphemeralAgent, L as LLMCallContext, M as McpApprovalSpec, x as McpFileError, y as McpRegistryConfig, z as McpRequestContext, F as McpSelection, P as ProcessInputContext, G as SdkAgentHandle, I as SdkMessage, J as SdkSendOptions, K as SdkTurnHandle, N as Segment, O as ShouldAutoApproveOptions, T as ToolCallVeto, Q as ToolHooks, U as ToolHooksPlugin, W as WRITE_SCOPED_TOOLS, V as agentsPlugin, X as applyPosture, Y as buildModelSelection, Z as compileAgentModule, _ as compileContextWindow, $ as compileLoadedAgentModule, a0 as compileProjectContext, a1 as compileSkills, a2 as createAgentExecutionContext, a3 as createApiErrorHandler, a4 as createSdkAgentStream, a5 as createThinkTagExtractor, a6 as createToolHooksPlugin, a7 as extractThinkTagStream, a8 as generateAgentManifest, a9 as generateAgentRoutes, aa as isAgentContext, ab as loadMcpJson, ac as mcpRegistry, ad as mcpToolApprovals, ae as projectContextMetadataOnlyKnobs, af as reasoningEffortOf, ag as resolveMcpServers, ah as runWithApiErrorHandling, ai as shouldAutoApprove, s as streamAgentUIMessages, aj as toAgentFactory, ak as translateSdkEvent, al as withClockCap, am as withEphemeralAgent } from './bridge-entry-DBkqwe6b.js';
+export { c as CompatImportUnsupportedError, a as CompiledAgentOptions, b as CompiledTool, H as HookApprovalGate, j as HookApprovalRequest, k as HookGateUnsupportedError, T as ToolWalkResult, m as ToolboxWalkResult, n as compileTools } from './agent-compiler-B0hb6HCo.js';
+export { A as AgentStopReason, d as AgentStreamEvent, e as AgentTurnMetadata, f as ApprovalRequiredEvent, g as ArtifactChunkEvent, h as ArtifactStartEvent, B as BackgroundDelegation, i as BudgetExceededError, C as CheckpointSavedEvent, k as DelegateFn, a as DelegateOptions, l as DelegationBudgetExceededError, m as DelegationError, n as DelegationPort, c as DelegationResult, D as DelegationTarget, o as DoneEvent, E as ErrorEvent, F as FileEditEvent, I as IterationEvent, P as PartialToolCallEvent, v as RunStartedEvent, w as ScoreVerdict, x as ScoredDelegation, y as Scorer, z as StateUpdateEvent, S as StreamEvent, T as TextDeltaEvent, G as ThinkingEvent, H as ToolCallEvent, J as ToolResultEvent, K as delegate, M as delegateBackground, N as delegateWithScoring, O as isApprovalRequired, Q as isDone, U as isError, V as isPartialToolCall, W as isTextDelta, X as isToolCall, Y as isToolResult, a0 as presentUIMessageStream, a3 as streamAgentResponse } from './delegation-scoring-BzJEheml.js';
+export { a as AGENT_BRAND, A as AgentDefinition, D as DefineAgentConfig, I as InferAgentInput, b as InferAgentToolNames, c as compileAgentDefinition, i as isAgentDefinition } from './define-agent-DhwNmdej.js';
+export { C as CompatSurface, a as GatedCompatSource, G as GatedSettingSource, P as ProjectSettingsGrant, R as ResolvedCompatSource, b as SettingSourceCapability, S as SettingSourcesSelection, U as UntrustedSettingSourceError, r as resolveCompatSources, c as resolveSettingSources } from './setting-sources-gate-DFu51i50.js';
 import '@theokit/http';
 import './types-C16Wuh9E.js';
 import '@theokit/sdk';
@@ -11,3 +12,4 @@ import '@theokit/sdk/sandbox';
 import './hook-handlers-Cw2FsnE5.js';
 import '@theokit/presenter/wire';
 import '@theokit/sdk/errors';
+import '@theokit/sdk/subagents-loader';

package/dist/bridge.js

@@ -29,10 +29,12 @@ import {
   runWithApiErrorHandling,
   streamAgentResponse,
   streamAgentUIMessages
-} from "./chunk-3GQJ2BHT.js";
+} from "./chunk-G7QBDGZ4.js";
+import "./chunk-HGVT4VCE.js";
 import {
   APPROVAL_MODES,
   BudgetExceededError,
+  CompatImportUnsupportedError,
   DelegationBudgetExceededError,
   DelegationError,
   DelegationTimeoutError,
@@ -55,8 +57,8 @@ import {
   translateSdkEvent,
   withClockCap,
   withEphemeralAgent
-} from "./chunk-NZTLBLHB.js";
-import "./chunk-RKWCXVYG.js";
+} from "./chunk-KTQID5V3.js";
+import "./chunk-MJ6FRILJ.js";
 import {
   AGENT_BRAND,
   UntrustedSettingSourceError,
@@ -64,7 +66,9 @@ import {
   isAgentDefinition,
   resolveCompatSources,
   resolveSettingSources
-} from "./chunk-X4IGZHOV.js";
+} from "./chunk-PMMOOXR6.js";
+import "./chunk-M5J3Q6YC.js";
+import "./chunk-U72XTMYB.js";
 import "./chunk-OXNDJSAJ.js";
 import "./chunk-Z4QWC7IK.js";
 export {
@@ -73,6 +77,7 @@ export {
   AgentBuilder,
   AgentDefinitionError,
   BudgetExceededError,
+  CompatImportUnsupportedError,
   ContextualTool,
   DelegationBudgetExceededError,
   DelegationError,

package/dist/{chunk-3GQJ2BHT.js → chunk-G7QBDGZ4.js}

@@ -1,19 +1,26 @@
+import {
+  currentOperatorPolicy,
+  mcpServerAdmitted
+} from "./chunk-HGVT4VCE.js";
 import {
   createHitlPlugin,
-  createSdkAgentStream
-} from "./chunk-NZTLBLHB.js";
+  createSdkAgentStream,
+  moderateOutputStream,
+  runInputGuards,
+  textPayloadExtractor
+} from "./chunk-KTQID5V3.js";
 import {
   compileAgentDefinition,
   defineAgent,
   isAgentDefinition
-} from "./chunk-X4IGZHOV.js";
+} from "./chunk-PMMOOXR6.js";
+import {
+  ConfigurationError
+} from "./chunk-U72XTMYB.js";
 import {
   __name
 } from "./chunk-Z4QWC7IK.js";
 
-// src/errors.ts
-import { ConfigurationError } from "@theokit/sdk/errors";
-
 // src/bridge/compile-context-window.ts
 var STRATEGY_KNOBS = [
   "compactionStrategy",
@@ -26,6 +33,12 @@ function compileContextWindow(options) {
   if (typeof options.maxTokens === "number") {
     context.maxTokens = options.maxTokens;
   }
+  if (typeof options.maxBytesPerFile === "number") {
+    context.maxBytesPerFile = options.maxBytesPerFile;
+  }
+  if (typeof options.maxBytesTotal === "number") {
+    context.maxBytesTotal = options.maxBytesTotal;
+  }
   const opts = options;
   const metadataOnlyKnobs = STRATEGY_KNOBS.filter((knob) => opts[knob] !== void 0);
   return {
@@ -649,6 +662,10 @@ function makeBuilder(config) {
       ...config,
       memory: settings
     }), "memory"),
+    telemetry: /* @__PURE__ */ __name((settings) => makeBuilder({
+      ...config,
+      telemetry: settings
+    }), "telemetry"),
     hooks: /* @__PURE__ */ __name((map) => makeBuilder({
       ...config,
       hooks: map
@@ -777,6 +794,29 @@ async function* appendCheckpointSaved(source, sessionId) {
 }
 __name(appendCheckpointSaved, "appendCheckpointSaved");
 function streamAgentUIMessages(compiled, apiKey, input) {
+  const guardrails = compiled.guardrails;
+  if (guardrails !== void 0 && guardrails.length > 0) {
+    return guardedStream(compiled, apiKey, input, guardrails);
+  }
+  return unguardedStream(compiled, apiKey, input);
+}
+__name(streamAgentUIMessages, "streamAgentUIMessages");
+async function* guardedStream(compiled, apiKey, input, guardrails) {
+  const safe = await runInputGuards(input.message, guardrails);
+  const inner = moderateOutputStream(unguardedStream(compiled, apiKey, {
+    ...input,
+    message: safe
+  }), guardrails, textPayloadExtractor("text-delta", (e) => e.delta), (delta, replaced) => ({
+    ...replaced,
+    delta
+  }), (_text, result) => result);
+  yield* moderateOutputStream(inner, guardrails, textPayloadExtractor("reasoning-delta", (e) => e.delta), (delta, replaced) => ({
+    ...replaced,
+    delta
+  }), (_text, result) => result);
+}
+__name(guardedStream, "guardedStream");
+function unguardedStream(compiled, apiKey, input) {
   const textId = crypto.randomUUID();
   const overrides = {};
   if (input.cwd !== void 0) overrides.cwd = input.cwd;
@@ -841,7 +881,7 @@ function streamAgentUIMessages(compiled, apiKey, input) {
     onError: input.onError
   });
 }
-__name(streamAgentUIMessages, "streamAgentUIMessages");
+__name(unguardedStream, "unguardedStream");
 
 // src/bridge/api-error-handler.ts
 var DEFAULT_MAX_ATTEMPTS = 3;
@@ -940,6 +980,27 @@ __name(mcpToolApprovals, "mcpToolApprovals");
 import { existsSync, readFileSync } from "fs";
 import { join } from "path";
 import { TheokitAgentError as TheokitAgentError2 } from "@theokit/sdk/errors";
+var ENV_REFERENCE_REGEX = /^\$\{([A-Za-z_]\w*)\}$/;
+function expandEnvReferences(record, env, field, server, warn) {
+  const out = {};
+  for (const [key, value] of Object.entries(record)) {
+    const match = ENV_REFERENCE_REGEX.exec(value);
+    if (match === null) {
+      out[key] = value;
+      continue;
+    }
+    const name = match[1];
+    const resolved = env[name];
+    if (resolved === void 0) {
+      warn(`${MCP_FILENAME}: server "${server}" references \${${name}} in "${field}.${key}", and that variable is not set \u2014 the reference is left as written`);
+      out[key] = value;
+      continue;
+    }
+    out[key] = resolved;
+  }
+  return out;
+}
+__name(expandEnvReferences, "expandEnvReferences");
 function warningChannel(opts) {
   return opts.onWarn ?? ((warning) => {
     process.stderr.write(`[@theokit/agents] ${warning}
@@ -972,10 +1033,10 @@ function loadMcpJson(cwd, opts = {}) {
   } catch (err) {
     throw new McpFileError(`${path} is not valid JSON: ${describeIt(err)}`);
   }
-  return parseMcpJson(parsed, path, warningChannel(opts));
+  return parseMcpJson(parsed, path, warningChannel(opts), opts.env ?? process.env);
 }
 __name(loadMcpJson, "loadMcpJson");
-function parseMcpJson(raw, source, onWarn) {
+function parseMcpJson(raw, source, onWarn, env) {
   if (typeof raw !== "object" || raw === null || Array.isArray(raw)) {
     throw new McpFileError(`${source}: root must be a JSON object with an "mcpServers" key.`);
   }
@@ -985,13 +1046,18 @@ function parseMcpJson(raw, source, onWarn) {
     throw new McpFileError(`${source}: "mcpServers" must be an object keyed by server name.`);
   }
   const out = {};
+  const policy = currentOperatorPolicy(onWarn);
   for (const [name, entryRaw] of Object.entries(serversRaw)) {
+    if (!mcpServerAdmitted(name, policy)) {
+      onWarn(`${source}: server "${name}" not started \u2014 an operator policy does not admit it`);
+      continue;
+    }
     const reason = validateEntry(name, entryRaw);
     if (reason !== void 0) {
       onWarn(`${source}: server "${name}" ignored \u2014 ${reason}`);
       continue;
     }
-    out[name] = buildEntry(entryRaw);
+    out[name] = buildEntry(entryRaw, name, env, onWarn);
   }
   return out;
 }
@@ -1018,6 +1084,12 @@ function validateStdio(entry) {
   return void 0;
 }
 __name(validateStdio, "validateStdio");
+function normaliseTransport(value) {
+  if (value === "http" || value === "streamable-http") return "http";
+  if (value === "sse") return "sse";
+  return void 0;
+}
+__name(normaliseTransport, "normaliseTransport");
 function validateRemote(entry) {
   if (typeof entry.url !== "string" || entry.url.length === 0) {
     return 'field "url" must be a non-empty string.';
@@ -1027,8 +1099,8 @@ function validateRemote(entry) {
   } catch {
     return 'field "url" is not a valid URL.';
   }
-  if (entry.type !== void 0 && entry.type !== "http" && entry.type !== "sse") {
-    return 'field "type" must be "http" or "sse".';
+  if (entry.type !== void 0 && normaliseTransport(entry.type) === void 0) {
+    return 'field "type" must be "http", "streamable-http" or "sse".';
   }
   if (entry.headers !== void 0 && !isStringRecord(entry.headers)) {
     return 'field "headers" must be a map of strings.';
@@ -1039,13 +1111,15 @@ function validateRemote(entry) {
   return void 0;
 }
 __name(validateRemote, "validateRemote");
-function buildEntry(entry) {
+function buildEntry(entry, name, env, warn) {
   if (entry.url !== void 0) {
     const remote = {
       url: entry.url
     };
-    if (entry.type !== void 0) remote.type = entry.type;
-    if (entry.headers !== void 0) remote.headers = entry.headers;
+    if (entry.type !== void 0) remote.type = normaliseTransport(entry.type);
+    if (entry.headers !== void 0) {
+      remote.headers = expandEnvReferences(entry.headers, env, "headers", name, warn);
+    }
     if (entry.auth !== void 0) remote.auth = entry.auth;
     if (entry.requestTimeoutMs !== void 0) remote.requestTimeoutMs = entry.requestTimeoutMs;
     return remote;
@@ -1054,7 +1128,9 @@ function buildEntry(entry) {
     command: entry.command
   };
   if (entry.args !== void 0) stdio.args = entry.args;
-  if (entry.env !== void 0) stdio.env = entry.env;
+  if (entry.env !== void 0) {
+    stdio.env = expandEnvReferences(entry.env, env, "env", name, warn);
+  }
   if (entry.cwd !== void 0) stdio.cwd = entry.cwd;
   return stdio;
 }
@@ -1206,7 +1282,6 @@ function matchRoute(routes, method, pathname) {
 __name(matchRoute, "matchRoute");
 
 export {
-  ConfigurationError,
   compileContextWindow,
   compileSkills,
   toolRuntimeName,
@@ -1240,4 +1315,4 @@ export {
   generateAgentManifest,
   agentsPlugin
 };
-//# sourceMappingURL=chunk-3GQJ2BHT.js.map
+//# sourceMappingURL=chunk-G7QBDGZ4.js.map

package/dist/chunk-G7QBDGZ4.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/bridge/compile-context-window.ts","../src/bridge/compile-skills.ts","../src/bridge/agent-compiler.ts","../src/bridge/agent-execution-context.ts","../src/bridge/present-ui-message-stream.ts","../src/bridge/hitl-call-correlation.ts","../src/bridge/agent-sse-handler.ts","../src/bridge/agent-stream-events.ts","../src/bridge/agent-route-generator.ts","../src/bridge/agent-builder.ts","../src/bridge/agent-endpoint.ts","../src/bridge/api-error-handler.ts","../src/bridge/mcp-resolver.ts","../src/bridge/mcp-file.ts","../src/manifest/agent-manifest.ts","../src/theokit-plugin.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAwFA,IAAMA,iBAAiB;EACrB;EACA;EACA;EACA;;AAUK,SAASC,qBAAqBC,SAA6B;AAChE,QAAMC,UAA2B,CAAC;AAClC,MAAI,OAAOD,QAAQE,cAAc,UAAU;AACzCD,YAAQC,YAAYF,QAAQE;EAC9B;AAGA,MAAI,OAAOF,QAAQG,oBAAoB,UAAU;AAC/CF,YAAQE,kBAAkBH,QAAQG;EACpC;AACA,MAAI,OAAOH,QAAQI,kBAAkB,UAAU;AAC7CH,YAAQG,gBAAgBJ,QAAQI;EAClC;AAEA,QAAMC,OAAOL;AACb,QAAMM,oBAAoBR,eAAeS,OAAO,CAACC,SAASH,KAAKG,IAAAA,MAAUC,MAAAA;AAEzE,SAAO;IAAER;IAASK;EAAkB;AACtC;AAlBgBP;;;AC3ET,SAASW,cAAcC,SAAsB;AAClD,MAAIA,QAAQC,cAAc;AACxB,WAAO;MAAEC,YAAY;IAAK;EAC5B;AACA,SAAO;IAAEC,SAASH,QAAQI;IAASF,YAAY;EAAK;AACtD;AALgBH;;;ACwEhB,IAAMM,gBAAgB;AAGtB,IAAMC,2BAA2B;AAGjC,IAAMC,wBAAwB;AAU9B,IAAMC,0BAA+C,oBAAIC,IAAI;EAC3D;EACA;EACA;CACD;AACD,IAAMC,2BAA2B;AAmB1B,SAASC,gBAAgBC,WAAmBC,UAAgB;AAIjE,MAAIA,SAASC,KAAI,EAAGC,WAAW,GAAG;AAChC,UAAMC,QAAQJ,YAAY,kBAAkBA,SAAAA,MAAe;AAC3D,UAAM,IAAIK,mBAAmB,mBAAmBD,KAAAA,+CAA+C;EACjG;AAEA,QAAME,OAAON,YAAY,GAAGA,SAAAA,IAAaC,QAAAA,KAAaA;AAEtD,MAAI,CAACR,cAAcc,KAAKD,IAAAA,GAAO;AAG7B,QAAIX,sBAAsBY,KAAKD,IAAAA,GAAO;AACpC,YAAM,IAAID,mBACR,eAAeC,IAAAA,gBAAoBA,KAAKH,MAAM,yEACKT,wBAAAA,kBAA0C;IAEjG;AACA,UAAM,IAAIW,mBACR,uBAAuBC,IAAAA,0BAAyBE,OAAOf,aAAAA,CAAAA,oEACrD;EAEN;AAEA,MAAIG,wBAAwBa,IAAIH,IAAAA,KAASA,KAAKI,WAAWZ,wBAAAA,GAA2B;AAClF,UAAM,IAAIO,mBACR,wBAAwBC,IAAAA,6BACnB;SAAIV;MAAyBe,KAAK,IAAA,CAAA,oBAAyBb,wBAAAA,GAA2B;EAE/F;AAEA,SAAOQ;AACT;AAlCgBP;AAyCT,SAASa,iBACdC,WAA8B;AAE9B,QAAMC,QAAQ,oBAAIC,IAAAA;AAClB,aAAWC,MAAMH,WAAW;AAC1B,eAAWI,QAAQD,GAAGE,OAAO;AAC3B,UAAID,KAAKE,MAAM;AACbL,cAAMM,IAAIrB,gBAAgBiB,GAAGhB,WAAWiB,KAAKI,OAAOf,IAAI,GAAGW,KAAKE,IAAI;MACtE;IACF;EACF;AACA,SAAOL;AACT;AAZgBF;AAoBT,SAASU,aACdT,WACAU,kBAAyC;AAEzC,QAAML,QAAwB,CAAA;AAE9B,aAAWF,MAAMH,WAAW;AAE1B,UAAMW,WAAWD,iBAAiBE,IAAIT,GAAGU,KAAK;AAC9C,QAAI,CAACF,UAAU;AAIb,YAAM,IAAInB,mBACR,YAAYW,GAAGU,MAAMpB,IAAI,wEAAmE;IAEhG;AAEA,eAAWW,QAAQD,GAAGE,OAAO;AAC3B,YAAMS,UAAWH,SACfP,KAAKW,WAAW;AAElB,UAAI,OAAOD,YAAY,YAAY;AACjC,cAAM,IAAItB,mBACR,YAAYW,GAAGU,MAAMpB,IAAI,IAAIE,OAAOS,KAAKW,WAAW,CAAA,2BACxCX,KAAKI,OAAOf,IAAI,IAAI;MAEpC;AAEA,YAAMA,OAAOP,gBAAgBiB,GAAGhB,WAAWiB,KAAKI,OAAOf,IAAI;AAE3DY,YAAMW,KAAK;QACTvB;QACAwB,aAAab,KAAKI,OAAOS;QACzBC,aAAad,KAAKI,OAAOW;QACzBL,SAAS,wBAACK,UAAmBL,QAAQM,KAAKT,UAAUQ,KAAAA,GAA3C;MACX,CAAA;IACF;EACF;AAEA,SAAOd;AACT;AAzCgBI;;;AC7KT,SAASY,4BACdC,MACAC,OACAC,KACAC,UAAsB;AAEtB,SAAO;IACLC,YAAY,6BAAMJ,KAAKI,WAAU,GAArB;IACZC,QAAQ,6BAAML,KAAKK,OAAM,GAAjB;IACRC,UAAU,6BAAMN,KAAKM,SAAQ,GAAnB;IACVC,eAAe,6BAAMP,KAAKO,cAAa,GAAxB;IACfC,UAAU,6BAAMP,OAAN;IACVQ,QAAQ,6BAAMP,KAAN;IACRQ,aAAa,6BAAMP,YAAY,MAAlB;IACbQ,gBAAgB,6BAAM,MAAN;EAClB;AACF;AAhBgBZ;AAmBT,SAASY,eAAeC,KAAqB;AAClD,SAAO,oBAAoBA,OAAQA,IAA8BD,eAAc;AACjF;AAFgBA;;;AC9ChB,SAASE,gCAAgC;AAEzC,SAASC,iCAAiC;;;AC6C1C,SAASC,MAAMC,QAA+BC,UAAgB;AAC5D,QAAMC,QAAQF,OAAOG,IAAIF,QAAAA;AACzB,MAAIC,UAAUE,OAAW,QAAOA;AAChC,QAAMC,UAAUH,MAAMI,MAAK;AAC3B,MAAIJ,MAAMK,WAAW,EAAGP,QAAOQ,OAAOP,QAAAA;AACtC,SAAOI;AACT;AANSN;AAST,SAASU,QAAQT,QAA+BC,UAAkBS,IAAU;AAC1E,QAAMR,QAAQF,OAAOG,IAAIF,QAAAA;AACzB,MAAIC,UAAUE,OAAWJ,QAAOW,IAAIV,UAAU;IAACS;GAAG;MAC7CR,OAAMU,KAAKF,EAAAA;AAClB;AAJSD;AAOT,SAASI,OAAOb,QAA+BC,UAAkBS,IAAU;AACzE,QAAMR,QAAQF,OAAOG,IAAIF,QAAAA;AACzB,MAAIC,UAAUE,OAAW;AACzB,QAAMU,KAAKZ,MAAMa,QAAQL,EAAAA;AACzB,MAAII,OAAO,GAAI;AACfZ,QAAMc,OAAOF,IAAI,CAAA;AACjB,MAAIZ,MAAMK,WAAW,EAAGP,QAAOQ,OAAOP,QAAAA;AACxC;AAPSY;AAaF,IAAMI,sBAAN,MAAMA;EA5Eb,OA4EaA;;;;EAEF,kBAAkB,oBAAIC,IAAAA;;EAEtB,sBAAsB,oBAAIA,IAAAA;;EAE1B,eAAe,oBAAIA,IAAAA;;EAG5BC,iBAAiBlB,UAAkBmB,QAAqC;AACtE,UAAMC,YAAYtB,MAAM,KAAK,qBAAqBE,QAAAA;AAClD,QAAIoB,cAAcjB,QAAW;AAC3BK,cAAQ,KAAK,iBAAiBR,UAAUmB,MAAAA;AACxC,aAAO;IACT;AACA,SAAK,aAAaT,IAAIS,QAAQC,SAAAA;AAC9B,WAAO;EACT;;EAGAC,mBAAmBrB,UAAkBsB,YAA4B;AAC/D,UAAMF,YAAYtB,MAAM,KAAK,iBAAiBE,QAAAA;AAC9C,QAAIoB,cAAcjB,OAAW,QAAOiB;AACpCZ,YAAQ,KAAK,qBAAqBR,UAAUsB,UAAAA;AAC5C,WAAOA;EACT;;EAGAC,iBAAiBvB,UAAkBmB,QAAwB;AACzD,UAAMC,YAAY,KAAK,aAAalB,IAAIiB,MAAAA;AACxC,QAAIC,cAAcjB,QAAW;AAC3B,WAAK,aAAaI,OAAOY,MAAAA;AACzB,aAAOC;IACT;AA+BAtB,UAAM,KAAK,qBAAqBE,QAAAA;AAGhCY,WAAO,KAAK,iBAAiBZ,UAAUmB,MAAAA;AACvC,WAAOA;EACT;AACF;;;AD9HA,SAASK,mBAAmBC,GAAmB;AAC7C,UAAQA,EAAEC,MAAI;IACZ,KAAK;AACH,aAAO;QAAEA,MAAM;QAAQC,MAAMF,EAAEG;MAAQ;IACzC,KAAK;AACH,aAAO;QAAEF,MAAM;QAAaC,MAAMF,EAAEG;MAAQ;IAC9C,KAAK;AACH,aAAO;QAAEF,MAAM;QAAaG,QAAQJ,EAAEI;QAAQC,MAAML,EAAEM;QAAUC,OAAOP,EAAEO;MAAM;IACjF,KAAK;AACH,aAAO;QACLN,MAAM;QACNG,QAAQJ,EAAEI;QACVC,MAAML,EAAEM;QACRE,QAAQR,EAAES;QACVC,SAASV,EAAEU;MACb;IACF;AACE,aAAO;EACX;AACF;AAnBSX;AAkCT,SAASY,eAAeC,OAAgB;AACtC,SAAO;IACLC,OAAOD,MAAMC;IACbC,YAAYF,MAAME;IAClB,GAAIF,MAAMG,SAASC,SAAY,CAAC,IAAI;MAAED,MAAMH,MAAMG;IAAK;IACvD,GAAIH,MAAMK,eAAeD,SAAY,CAAC,IAAI;MAAEC,YAAYL,MAAMK;IAAW;IACzE,GAAIL,MAAMM,UAAUF,SAAY,CAAC,IAAI;MAAEE,OAAON,MAAMM;IAAM;EAC5D;AACF;AARSP;AAWF,IAAMQ,uBAAuB;AAM7B,IAAMC,4BAA4B;AAClC,IAAMC,0BAA0B;AAChC,IAAMC,yBAAyB;AAOtC,SAASC,SAAStB,MAAcuB,MAA6B;AAC3D,SAAO;IAAEvB;IAAMuB;IAAMC,WAAW;EAAK;AACvC;AAFSF;AAoET,IAAMG,iBAAsC,oBAAIC,IAAI;EAAC;EAAmB;CAAoB;AAO5F,IAAMC,aAAwB,wBAACC,UAC7BA,MAAMC,SAASd,UAAaU,eAAeK,IAAIF,MAAMC,IAAI,IAAID,MAAMG,UAAU,sBADjD;AAG9B,UAAUC,YAAYC,WAAmBJ,MAAwB;AAC/D,MAAIA,SAASd,OAAW,OAAMO,SAASJ,sBAAsB;IAAEW;EAAK,CAAA;AACpE,QAAM;IAAE7B,MAAM;IAASiC;EAAU;AACnC;AAHUD;AAoBV,SAASE,mBAAmBvB,OAAuB;AACjD,UAAQA,MAAMX,MAAI;IAChB,KAAK;AACH,aAAOsB,SAAS,mBAAmB;QACjCa,cAAcxB,MAAMwB;QACpBC,aAAazB,MAAMyB;QACnBC,MAAM1B,MAAM0B;MACd,CAAA;;;;IAIF,KAAK;AACH,aAAOf,SAASH,2BAA2B;QAAEmB,WAAW3B,MAAM2B;MAAU,CAAA;IAC1E,KAAK;AACH,aAAOhB,SAASF,yBAAyB;QACvC,GAAIT,MAAM4B,WAAWxB,SAAY;UAAEwB,QAAQ5B,MAAM4B;QAAO,IAAI,CAAC;QAC7D,GAAI5B,MAAMV,SAASc,SAAY;UAAEd,MAAMU,MAAMV;QAAK,IAAI,CAAC;MACzD,CAAA;IACF,KAAK;AACH,aAAOqB,SAASD,wBAAwB;QAAEV,OAAOA,MAAMA;MAAM,CAAA;IAC/D;AACE,aAAO;EACX;AACF;AAvBSuB;AAmCT,SAASM,iBACPC,aACAjC,QAAwB;AAExB,MAAIA,OAAOR,SAAS,aAAa;AAC/B,WAAOyC,YAAYC,iBAAiBlC,OAAOJ,MAAMI,OAAOL,MAAM,MAAM,sBAChE,OACAK;EACN;AACA,MAAIA,OAAOR,SAAS,eAAe;AACjC,WAAO;MAAE,GAAGQ;MAAQL,QAAQsC,YAAYE,iBAAiBnC,OAAOJ,MAAMI,OAAOL,MAAM;IAAE;EACvF;AACA,SAAOK;AACT;AAbSgC;AAeT,gBAAuBI,uBACrBC,QACAC,MAA6C;AAE7C,QAAMC,UAAUD,KAAKC,WAAWpB;AAChC,QAAMqB,YAAY,IAAIC,yBAAyB;IAAEC,QAAQJ,KAAKI;IAAQH;EAAQ,CAAA;AAC9E,QAAMN,cAAc,IAAIU,oBAAAA;AACxB,QAAM;IAAEnD,MAAM;EAAQ;AACtB,MAAIoD;AACJ,MAAI;AACF,qBAAiBzC,SAASkC,QAAQ;AAChC,YAAMrC,SAASV,mBAAmBa,KAAAA;AAClC,UAAIH,WAAW,MAAM;AACnB,cAAM6C,aAAab,iBAAiBC,aAAajC,MAAAA;AACjD,YAAI6C,eAAe,KAAM,QAAOL,UAAUM,QAAQD,UAAAA;AAClD;MACF;AACA,UAAI1C,MAAMX,SAAS,qBAAqB;AAItC,eAAOgD,UAAUO,WAAU;AAI3B,cAAMC,aAAaf,YAAYgB,mBAAmB9C,MAAMN,UAAUM,MAAMR,MAAM;AAC9E,YAAI,CAAC6C,UAAUU,QAAQF,UAAAA,GAAa;AAClCR,oBAAUW,SAASH,UAAAA;AACnB,gBAAM;YACJxD,MAAM;YACNwD;YACAnD,UAAUM,MAAMN;YAChBC,OAAOK,MAAML,SAAS,CAAC;YACvBsD,SAAS;UACX;QACF;AAWA,cAAMtC,SAASuC,2BAA2B;UACxCC,YAAYnD,MAAMR;UAClB4D,UAAUpD,MAAMoD;UAChBC,WAAWrD,MAAMqD;QACnB,CAAA;AACA,cAAM;UAAEhE,MAAM;UAAyB8D,YAAYnD,MAAMR;UAAQqD;QAAW;AAC5E;MACF;AACA,YAAMS,aAAa/B,mBAAmBvB,KAAAA;AACtC,UAAIsD,eAAe,MAAM;AACvB,eAAOjB,UAAUO,WAAU;AAC3B,cAAMU;AACN;MACF;AACA,UAAItD,MAAMX,SAAS,SAAS;AAC1B;AACE,gBAAM6B,OAAQlB,MAA4BkB;AAC1C,iBAAOG,YAAYe,QAAQ;YAAEhB,SAASpB,MAAMoB;YAASF;UAAK,CAAA,GAAIA,IAAAA;QAChE;AACA;MACF;AACA,UAAIlB,MAAMX,SAAS,QAAQ;AACzBoD,uBAAe1C,eAAeC,KAAAA;AAC9B;MACF;IAEF;EACF,SAASuD,KAAK;AACZ,UAAMrC,OAAQqC,IAA0BrC;AACxC,UAAMsC,kBAAkB,OAAOtC,SAAS,WAAWA,OAAOd;AAC1D,WAAOiB,YAAYe,QAAQ;MAAEhB,SAASqC,OAAOF,GAAAA;MAAMrC,MAAMsC;IAAgB,CAAA,GAAIA,eAAAA;EAC/E;AACA,SAAOnB,UAAUqB,OAAOjB,YAAAA;AAC1B;AA/EuBR;;;AEhMvB,IAAM0B,UAAU,IAAIC,YAAAA;AAGpB,IAAMC,aAAa;AAYZ,SAASC,oBACdC,aACAC,OAA8E,CAAC,GAAC;AAEhF,QAAMC,SAAS,IAAIC,eAAe;IAChC,MAAMC,MAAMC,YAAU;AACpB,UAAIC,SAAS;AACb,YAAMC,cAAc,wBAACC,UAAAA;AACnB,YAAIF,OAAQ;AACZ,YAAI;AACFD,qBAAWI,QAAQD,KAAAA;QACrB,QAAQ;AACNF,mBAAS;QACX;MACF,GAPoB;AASpB,YAAMI,SAASC,uBAAuBX,aAAgD;QACpFY,QAAQC,OAAOC,WAAU;QACzB,GAAIb,KAAKc,YAAYC,SAAY;UAAED,SAASd,KAAKc;QAAQ,IAAI,CAAC;MAChE,CAAA;AAEA,UAAI;AACF,yBAAiBP,SAASE,QAAQ;AAChC,cAAIJ,OAAQ;AACZ,gBAAMW,OAAOC,KAAKC,UAAUX,KAAAA;AAC5BD,sBAAYX,QAAQwB,OAAO,UAAUZ,MAAMa,IAAI;QAAWJ,IAAAA;;CAAU,CAAA;QACtE;AACAV,oBAAYX,QAAQwB,OAAOtB,UAAAA,CAAAA;MAC7B,QAAQ;MAIR,UAAA;AACEO,mBAAWiB,MAAK;MAClB;IACF;EACF,CAAA;AAEA,SAAO,IAAIC,SAASrB,QAAQ;IAC1BsB,QAAQ;IACRC,SAAS;MACP,gBAAgB;;;MAGhB,iBAAiB;MACjB,qBAAqB;IACvB;EACF,CAAA;AACF;AAhDgB1B;;;ACwPT,SAAS2B,YAAYC,GAAmB;AAC7C,SAAOA,EAAEC,SAAS;AACpB;AAFgBF;AAGT,SAASG,WAAWF,GAAmB;AAC5C,SAAOA,EAAEC,SAAS;AACpB;AAFgBC;AAGT,SAASC,kBAAkBH,GAAmB;AACnD,SAAOA,EAAEC,SAAS;AACpB;AAFgBE;AAGT,SAASC,aAAaJ,GAAmB;AAC9C,SAAOA,EAAEC,SAAS;AACpB;AAFgBG;AAGT,SAASC,OAAOL,GAAmB;AACxC,SAAOA,EAAEC,SAAS;AACpB;AAFgBI;AAGT,SAASC,QAAQN,GAAmB;AACzC,SAAOA,EAAEC,SAAS;AACpB;AAFgBK;AAGT,SAASC,mBAAmBP,GAAmB;AACpD,SAAOA,EAAEC,SAAS;AACpB;AAFgBM;;;AC9RT,SAASC,oBAAoBC,KAAsB;AACxD,QAAM,EAAEC,YAAYC,WAAWC,OAAM,IAAKH;AAC1C,QAAMI,WAAWH,WAAWI,MAAMC,QAAQ,OAAO,EAAA;AACjD,QAAMC,SAAuB,CAAA;AAE7BA,SAAOC,KAAK;IACVC,QAAQ;IACRC,MAAM,GAAGN,QAAAA;IACTO,SAAS,8BAAOC,YAAAA;AACd,UAAIC,OAAuC;AAC3C,UAAI;AACFA,eAAQ,MAAMD,QAAQE,KAAI;MAC5B,QAAQ;MAER;AAEA,YAAMC,UAAUF,MAAME;AACtB,UAAI,OAAOA,YAAY,YAAYA,QAAQC,WAAW,GAAG;AACvD,eAAO,IAAIC,SACTC,KAAKC,UAAU;UAAEC,OAAO;YAAEC,MAAM;YAAeN,SAAS;UAAyB;QAAE,CAAA,GACnF;UAAEO,QAAQ;UAAKC,SAAS;YAAE,gBAAgB;UAAmB;QAAE,CAAA;MAEnE;AAEA,YAAMC,eAAeX,MAAMY;AAC3B,YAAMA,YAAY,OAAOD,iBAAiB,WAAWA,eAAe,WAAWE,KAAKC,IAAG,CAAA;AACvF,aAAOC,oBAAoB1B,UAAUa,SAASU,SAAAA,CAAAA;IAChD,GAnBS;EAoBX,CAAA;AAEA,MAAItB,QAAQ;AACVI,WAAOC,KAAK;MACVC,QAAQ;MACRC,MAAM,GAAGN,QAAAA;MACTO,SAAS,8BAAOC,YAAAA;AACd,cAAMiB,MAAM,IAAIC,IAAIlB,QAAQiB,GAAG;AAC/B,cAAME,QAAQF,IAAIG,SAASC,MAAM,GAAA,EAAKC,IAAG,KAAM;AAC/C,cAAMC,MAAM,MAAMhC,OAAO4B,KAAAA;AACzB,YAAI,CAACI,KAAK;AACR,iBAAO,IAAIlB,SACTC,KAAKC,UAAU;YAAEC,OAAO;cAAEC,MAAM;cAAaN,SAAS,OAAOgB,KAAAA;YAAkB;UAAE,CAAA,GACjF;YAAET,QAAQ;YAAKC,SAAS;cAAE,gBAAgB;YAAmB;UAAE,CAAA;QAEnE;AACA,eAAO,IAAIN,SAASC,KAAKC,UAAUgB,GAAAA,GAAM;UACvCb,QAAQ;UACRC,SAAS;YAAE,gBAAgB;UAAmB;QAChD,CAAA;MACF,GAdS;IAeX,CAAA;EACF;AAEA,SAAOhB;AACT;AArDgBR;;;AC6ET,IAAMqC,iBAAiB;;;;;;EAM5BC,GACEC,MACAC,kBAA4B;AAE5B,WAAOD;EACT;AACF;AAiOA,SAASE,YAAYC,QAAyB;AAC5C,QAAMC,UAAU;IACdC,OAAO,wBAACC,WAAsBJ,YAAY;MAAE,GAAGC;MAAQE,OAAOC;IAAO,CAAA,GAA9D;IACPC,OAAO,wBAACC,OAAeN,YAAY;MAAE,GAAGC;MAAQI,OAAOC;IAAG,CAAA,GAAnD;IACPC,QAAQ,wBAACC,WAAmBR,YAAY;MAAE,GAAGC;MAAQM,QAAQC;IAAO,CAAA,GAA5D;IACRC,iBAAiB,wBAACC,WAChBV,YAAY;MAAE,GAAGC;MAAQQ,iBAAiBC;IAAO,CAAA,GADlC;;;IAIjBC,eAAe,wBAACC,UAAkBZ,YAAY;MAAE,GAAGC;MAAQU,eAAeC;IAAM,CAAA,GAAjE;IACfC,SAAS,wBAACC,UAAmCd,YAAY;MAAE,GAAGC;MAAQY,SAASC;IAAM,CAAA,GAA5E;IACThB,MAAM,wBAACA,SAAqBE,YAAY;MAAE,GAAGC;MAAQc,OAAO;WAAKd,OAAOc,SAAS,CAAA;QAAKjB;;IAAM,CAAA,GAAtF;IACNiB,OAAO,wBAACC,SACNhB,YAAY;MAAE,GAAGC;MAAQc,OAAO;WAAKd,OAAOc,SAAS,CAAA;WAAQC;;IAAM,CAAA,GAD9D;;;;IAKPC,MAAM,wBAACC,WAAoBC,UAAAA;AACzB,YAAMC,UAAUpB,YAAYC,MAAAA;AAC5B,aAAOiB,YAAYC,MAAMC,OAAAA,IAAWA;IACtC,GAHM;IAINC,WAAW,wBAACC,MACVtB,YAAY;MAAE,GAAGC;MAAQsB,YAAY;WAAKtB,OAAOsB,cAAc,CAAA;QAAKD;;IAAG,CAAA,GAD9D;IAEXC,YAAY,wBAACC,OAA6BxB,YAAY;MAAE,GAAGC;MAAQsB,YAAYC;IAAG,CAAA,GAAtE;IACZC,UAAU,wBAACC,UAAkBC,YAC3B3B,YAAY;MAAE,GAAGC;MAAQ2B,WAAW;QAAE,GAAI3B,OAAO2B,aAAa,CAAC;QAAI,CAACF,QAAAA,GAAWC;MAAQ;IAAE,CAAA,GADjF;IAEVC,WAAW,wBAACC,QACV7B,YAAY;MAAE,GAAGC;MAAQ2B,WAAWC;IAAI,CAAA,GAD/B;IAEXC,QAAQ,wBAACC,cAA+B/B,YAAY;MAAE,GAAGC;MAAQ6B,QAAQC;IAAU,CAAA,GAA3E;IACRC,gBAAgB,wBAACD,cACf/B,YAAY;MAAE,GAAGC;MAAQ+B,gBAAgBD;IAAU,CAAA,GADrC;IAEhBE,cAAc,wBAACC,SAA2BlC,YAAY;MAAE,GAAGC;MAAQgC,cAAcC;IAAK,CAAA,GAAxE;IACdC,QAAQ,wBAACC,aAA6BpC,YAAY;MAAE,GAAGC;MAAQkC,QAAQC;IAAS,CAAA,GAAxE;IACRC,WAAW,wBAACD,aAAgCpC,YAAY;MAAE,GAAGC;MAAQoC,WAAWD;IAAS,CAAA,GAA9E;IACXE,OAAO,wBAACT,QACN7B,YAAY;MAAE,GAAGC;MAAQqC,OAAOT;IAAI,CAAA,GAD/B;IAEPU,SAAS,wBAACvB,SAAgChB,YAAY;MAAE,GAAGC;MAAQsC,SAASvB;IAAK,CAAA,GAAxE;IACTwB,KAAK,wBAACC,YAA2BzC,YAAY;MAAE,GAAGC;MAAQyC,YAAYD;IAAQ,CAAA,GAAzE;IACLE,KAAK,wBAACC,WAAoCA,OAAO1C,OAAAA,GAA5C;IACL2C,OAAO,6BAAMC,YAAY7C,MAAAA,GAAlB;EACT;AACA,SAAOC;AACT;AA1CSF;AAkDF,IAAM+C,eAAe;;;;;EAK1BC,SAAAA;AACE,WAAOhD,YAAY,CAAC,CAAA;EACtB;AACF;;;AClZA,SAASiD,yBAAyB;AAqC3B,IAAMC,uBAAN,cAAmCC,kBAAAA;EArC1C,OAqC0CA;;;EACtBC,OAAO;EACzB,YAAYC,QAAgB;AAC1B,UACE,qBAAqBA,MAAAA,gGAGrB;MACEC,MAAM;;MAENC,aAAa;IACf,CAAA;EAEJ;AACF;AAgCA,SAASC,qBAAqBC,KAAY;AACxC,MAAI,OAAOA,QAAQ,YAAYA,QAAQ,QAAQ,aAAaA,KAAK;AAC/D,WAAOA,IAAIC;EACb;AACA,SAAOD;AACT;AALSD;AAkBT,SAASG,uBAAuBC,OAAc;AAC5C,MAAI,OAAOA,UAAU,YAAYA,UAAU,KAAM,QAAO;AACxD,QAAMC,IAAID;AACV,SAAOE,MAAMC,QAAQF,EAAEG,KAAK,KAAK,OAAOH,EAAEI,WAAW,YAAYJ,EAAEI,WAAW;AAChF;AAJSN;AAMF,SAASO,mBACdT,KACAJ,SAAS,gBAAc;AAEvB,QAAMc,MAAMX,qBAAqBC,GAAAA;AACjC,MAAIW,kBAAkBD,GAAAA,GAAM;AAC1B,WAAOE,uBAAuBF,GAAAA;EAChC;AAGA,MAAIR,uBAAuBQ,GAAAA,EAAM,QAAOA;AACxC,QAAM,IAAIjB,qBAAqBG,MAAAA;AACjC;AAZgBa;AAwBT,SAASI,yBACdb,KACAJ,SAAS,gBAAc;AAEvB,SAAOa,mBAAmBT,KAAoBJ,MAAAA;AAChD;AALgBiB;AAahB,gBAAgBC,cACdC,QAAkC;AAKlC,mBAAiBC,KAAKD,OAAQ,OAAMC;AACtC;AAPgBF;AAgBhB,IAAMG,aAAN,MAAMA,YAAAA;EAhKN,OAgKMA;;;EACJ,SAAc,CAAA;EACd,aAAiD,CAAA;EACjD,UAAU;EACVC,KAAKC,MAAe;AAClB,QAAI,KAAK,QAAS;AAClB,UAAMC,IAAI,KAAK,WAAWC,MAAK;AAC/B,QAAID,EAAGA,GAAE;MAAEjB,OAAOgB;MAAMG,MAAM;IAAM,CAAA;QAC/B,MAAK,OAAOJ,KAAKC,IAAAA;EACxB;EACAI,QAAc;AACZ,SAAK,UAAU;AACf,eAAWH,KAAK,KAAK,WAAWI,OAAO,CAAA,EAAIJ,GAAE;MAAEjB,OAAOsB;MAAoBH,MAAM;IAAK,CAAA;EACvF;EACA,OAAOI,QAA2B;AAChC,eAAS;AACP,UAAI,KAAK,OAAOC,SAAS,GAAG;AAC1B,cAAM,KAAK,OAAON,MAAK;AACvB;MACF;AACA,UAAI,KAAK,QAAS;AAClB,YAAMO,OAAO,MAAM,IAAIC,QAA2B,CAACC,YAAY,KAAK,WAAWZ,KAAKY,OAAAA,CAAAA;AACpF,UAAIF,KAAKN,KAAM;AACf,YAAMM,KAAKzB;IACb;EACF;AACF;AASA,gBAAgB4B,sBACdnC,QACAoC,WAAiB;AAEjB,MAAIC,UAAU;AACd,QAAMC,aAAa,8BAAyB;IAC1CC,MAAM;IACNC,cAAcC,OAAOC,WAAU;IAC/BC,MAAM;IACNC,aAAaR;EACf,IALmB;AAMnB,mBAAiBS,MAAM7C,QAAQ;AAC7B,QAAI6C,GAAGN,SAAS,UAAU,CAACF,SAAS;AAClCA,gBAAU;AACV,YAAMC,WAAAA;IACR;AACA,UAAMO;EACR;AACA,MAAI,CAACR,QAAS,OAAMC,WAAAA;AACtB;AAnBgBH;AA2GT,SAASW,sBACdC,UACAC,QACAC,OAAyB;AAezB,QAAMC,aAAaH,SAASG;AAC5B,MAAIA,eAAerB,UAAaqB,WAAWnB,SAAS,GAAG;AACrD,WAAOoB,cAAcJ,UAAUC,QAAQC,OAAOC,UAAAA;EAChD;AACA,SAAOE,gBAAgBL,UAAUC,QAAQC,KAAAA;AAC3C;AAvBgBH;AA2ChB,gBAAgBK,cACdJ,UACAC,QACAC,OACAC,YAAgC;AAEhC,QAAMG,OAAO,MAAMC,eAAeL,MAAMM,SAASL,UAAAA;AACjD,QAAMM,QAAQC,qBACZL,gBAAgBL,UAAUC,QAAQ;IAAE,GAAGC;IAAOM,SAASF;EAAK,CAAA,GAC5DH,YACAQ,qBAAqC,cAAc,CAACtC,MAAOA,EAA0BuC,KAAK,GAC1F,CAACA,OAAOC,cAAc;IAAE,GAAGA;IAAUD;EAAM,IAC3C,CAACE,OAAOC,WAAWA,MAAAA;AAErB,SAAOL,qBACLD,OACAN,YACAQ,qBACE,mBACA,CAACtC,MAAOA,EAA0BuC,KAAK,GAEzC,CAACA,OAAOC,cAAc;IAAE,GAAGA;IAAUD;EAAM,IAC3C,CAACE,OAAOC,WAAWA,MAAAA;AAEvB;AAxBgBX;AA0BhB,SAASC,gBACPL,UACAC,QACAC,OAAyB;AAMzB,QAAMc,SAAStB,OAAOC,WAAU;AAChC,QAAMsB,YAA8B,CAAC;AAGrC,MAAIf,MAAMgB,QAAQpC,OAAWmC,WAAUC,MAAMhB,MAAMgB;AAEnD,MAAIhB,MAAMiB,YAAYrC,OAAWmC,WAAUE,UAAUjB,MAAMiB;AAE3D,MAAIjB,MAAMkB,WAAWtC,OAAWmC,WAAUG,SAASlB,MAAMkB;AAEzD,MAAIlB,MAAMmB,eAAevC,OAAWmC,WAAUI,aAAanB,MAAMmB;AAIjE,MAAInB,MAAMoB,UAAUxC,QAAW;AAC7BmC,cAAUK,QAAQ;MAAE,GAAGpB,MAAMoB;MAAOC,QAAQrB,MAAMoB,MAAMC,UAAUrB,MAAMqB;IAAO;EACjF;AAEA,MAAIrB,MAAMsB,uBAAuB1C,QAAW;AAC1CmC,cAAUO,qBAAqBtB,MAAMsB;EACvC;AAEA,MAAIvE;AACJ,MAAI,CAACiD,MAAMuB,QAAQvB,MAAMuB,KAAKC,MAAMC,SAAS,GAAG;AAE9C,UAAMvD,UAASwD,qBACb5B,UACAA,SAASpC,OACTqC,QACAgB,SAAAA,EACAf,MAAMM,SAASN,MAAMb,SAAS;AAChCpC,aAASkB,cAAcC,OAAAA;EACzB,OAAO;AAEL,UAAMyD,QAAQ,IAAIvD,WAAAA;AAGlB4B,UAAMqB,QAAQO,iBACZ,SACA,MAAA;AACED,YAAMjD,MAAK;IACb,GACA;MAAEmD,MAAM;IAAK,CAAA;AAEf,UAAMC,SAASC,iBAAiB;MAC9BP,OAAOxB,MAAMuB,KAAKC;MAClBQ,MAAM,wBAAC7D,MAAAA;AACLwD,cAAMtD,KAAKF,CAAAA;MACb,GAFM;MAGN8D,eAAejC,MAAMuB,KAAKU;IAC5B,CAAA;AACA,UAAMC,YAAYR,qBAAqB5B,UAAUA,SAASpC,OAAOqC,QAAQ;MACvE,GAAGgB;;;MAGHoB,SAAS;QAACL;;IACZ,CAAA,EAAG9B,MAAMM,SAASN,MAAMb,SAAS;AAKjC,UAAM,YAAA;AACJ,UAAI;AACF,yBAAiBhB,KAAK+D,UAAWP,OAAMtD,KAAKF,CAAAA;MAC9C,SAASiE,KAAK;AACZT,cAAMtD,KAAK;UACTiB,MAAM;UACNtC,MAAM;UACNsD,SAAS8B,eAAeC,QAAQD,IAAI9B,UAAUgC,OAAOF,GAAAA;UACrDG,WAAW;QACb,CAAA;MACF,UAAA;AACEZ,cAAMjD,MAAK;MACb;IACF,GAAA;AACA3B,aAAS4E,MAAM9C,MAAK;EACtB;AAOA,QAAM2D,oBAAoB1C,SAAST,YAAYoD,YAAY;AAC3D,QAAMvE,SAASsE,oBAAoBtD,sBAAsBnC,QAAQiD,MAAMb,SAAS,IAAIpC;AACpF,SAAO2F,uBAAuBxE,QAAQ;IAAE4C;IAAQ6B,SAAS3C,MAAM2C;EAAQ,CAAA;AACzE;AA/FSxC;;;AC5UT,IAAMyC,uBAAuB;AAS7B,eAAsBC,wBACpBC,OACAC,QAAyB;AAEzB,QAAMC,cAAcD,OAAOC,eAAeJ;AAC1C,MAAIK,UAAU;AAEd,aAAS;AACPA,eAAW;AACX,QAAI;AACF,aAAO,MAAMH,MAAAA;IACf,SAASI,OAAO;AACd,YAAMC,WAAW,MAAMJ,OAAOK,gBAAgB;QAAEF;QAAOD;MAAQ,CAAA;AAC/D,UAAIE,SAASE,SAASJ,UAAUD,YAAa;AAC7C,UAAI,CAACG,SAASE,SAAS,cAAcF,YAAYA,SAASG,aAAaC,QAAW;AAChF,eAAOJ,SAASG;MAClB;AACA,YAAMJ;IACR;EACF;AACF;AApBsBL;AA0Bf,SAASW,sBACdT,QAAyB;AAEzB,SAAO,CAACD,UAAUD,wBAAwBC,OAAOC,MAAAA;AACnD;AAJgBS;;;AC5ChB,eAAsBC,kBACpBC,WACAC,KAAsB;AAEtB,MAAID,cAAcE,OAAW,QAAOA;AACpC,MAAI,OAAOF,cAAc,WAAY,QAAOA;AAC5C,QAAMG,WAAoB,MAAMH,UAAUC,GAAAA;AAC1C,MAAI,OAAOE,aAAa,YAAYA,aAAa,MAAM;AACrD,UAAM,IAAIC,MAAM,oEAAA;EAClB;AACA,SAAOD;AACT;AAXsBJ;AA6Bf,SAASM,YAAYC,QAAyB;AAEnD,QAAMC,WAAmBD,OAAOC;AAChC,MAAIA,aAAa,YAAY;AAC3B,UAAMC,OAAOF,OAAOE,QAAQ,CAAA;AAC5B,WAAO;MACLC,UAAU;QACRC,SAAS;QACTC,MAAM;UAAC;UAAM;aAAqBH,KAAKI,SAAS,IAAI;YAAC;YAAUJ,KAAKK,KAAK,GAAA;cAAQ,CAAA;;QACjFC,KAAK;UAAEC,kBAAkBT,OAAOU;QAAO;MACzC;IACF;EACF;AACA,MAAIT,aAAa,WAAW;AAC1B,WAAO;MACL,WAAW;QACTG,SAAS;QACTC,MAAM;UACJ;UACA;UACA;aACIL,OAAOW,UAAU;YAAC;YAAaX,OAAOW;cAAW,CAAA;;QAEvDH,KAAK;UAAEI,iBAAiBZ,OAAOU;QAAO;MACxC;IACF;EACF;AACA,QAAM,IAAIZ,MACR,iCAAiCe,KAAKC,UAAUb,QAAAA,CAAAA,sCAA+C;AAEnG;AA9BgBF;AAyCT,SAASgB,iBACdC,OAAsC;AAEtC,QAAMC,MAA6C,CAAC;AACpD,aAAW,CAACC,MAAMC,IAAAA,KAASC,OAAOC,QAAQL,KAAAA,GAAQ;AAChDC,QAAIC,IAAAA,IAAQ,OAAOC,SAAS,WAAW;MAAEG,UAAUH;IAAK,IAAIA;EAC9D;AACA,SAAOF;AACT;AARgBF;;;ACzDhB,SAASQ,YAAYC,oBAAoB;AACzC,SAASC,YAAY;AAErB,SAASC,qBAAAA,0BAAyB;AA2BlC,IAAMC,sBAAsB;AAkB5B,SAASC,oBACPC,QACAC,KACAC,OACAC,QACAC,MAA+B;AAE/B,QAAMC,MAA8B,CAAC;AACrC,aAAW,CAACC,KAAKC,KAAAA,KAAUC,OAAOC,QAAQT,MAAAA,GAAS;AACjD,UAAMU,QAAQZ,oBAAoBa,KAAKJ,KAAAA;AACvC,QAAIG,UAAU,MAAM;AAClBL,UAAIC,GAAAA,IAAOC;AACX;IACF;AACA,UAAMK,OAAOF,MAAM,CAAA;AACnB,UAAMG,WAAWZ,IAAIW,IAAAA;AACrB,QAAIC,aAAaC,QAAW;AAC1BV,WACE,GAAGW,YAAAA,aAAyBZ,MAAAA,mBAAyBS,IAAAA,SAAaV,KAAAA,IAASI,GAAAA,yEACR;AAErED,UAAIC,GAAAA,IAAOC;AACX;IACF;AACAF,QAAIC,GAAAA,IAAOO;EACb;AACA,SAAOR;AACT;AA3BSN;AA8BT,SAASiB,eAAeC,MAAwB;AAC9C,SACEA,KAAKC,WACJ,CAACC,YAAAA;AACAC,YAAQC,OAAOC,MAAM,qBAAqBH,OAAAA;CAAW;EACvD;AAEJ;AAPSH;AAkBF,IAAMO,eAAN,cAA2BC,mBAAAA;EA5IlC,OA4IkCA;;;EACdZ,OAAO;EAEzB,YAAYa,SAAiB;AAC3B,UAAM,qBAAqBA,OAAAA,EAAS;EACtC;AACF;AAGA,IAAMV,eAAe;AAWd,SAASW,YAAYC,KAAaV,OAA2B,CAAC,GAAC;AACpE,QAAMW,OAAOC,KAAKF,KAAKZ,YAAAA;AAEvB,MAAI,CAACe,WAAWF,IAAAA,EAAO,QAAO,CAAC;AAC/B,MAAIG;AACJ,MAAI;AAEFA,WAAOC,aAAaJ,MAAM,MAAA;EAC5B,SAASK,KAAK;AACZ,UAAM,IAAIV,aAAa,kBAAkBK,IAAAA,KAASM,WAAWD,GAAAA,CAAAA,EAAM;EACrE;AACA,MAAIE;AACJ,MAAI;AACFA,aAASC,KAAKC,MAAMN,IAAAA;EACtB,SAASE,KAAK;AACZ,UAAM,IAAIV,aAAa,GAAGK,IAAAA,uBAA2BM,WAAWD,GAAAA,CAAAA,EAAM;EACxE;AACA,SAAOK,aAAaH,QAAQP,MAAMZ,eAAeC,IAAAA,GAAOA,KAAKhB,OAAOmB,QAAQnB,GAAG;AACjF;AAlBgByB;AAqBhB,SAASY,aACPC,KACAC,QACAtB,QACAjB,KAAuC;AAEvC,MAAI,OAAOsC,QAAQ,YAAYA,QAAQ,QAAQE,MAAMC,QAAQH,GAAAA,GAAM;AACjE,UAAM,IAAIhB,aAAa,GAAGiB,MAAAA,wDAA8D;EAC1F;AACA,QAAMG,aAAcJ,IAAgCK;AACpD,MAAID,eAAe7B,OAAW,QAAO,CAAC;AACtC,MAAI,OAAO6B,eAAe,YAAYA,eAAe,QAAQF,MAAMC,QAAQC,UAAAA,GAAa;AACtF,UAAM,IAAIpB,aAAa,GAAGiB,MAAAA,wDAA8D;EAC1F;AACA,QAAMnC,MAAqB,CAAC;AAQ5B,QAAMwC,SAASC,sBAAsB5B,MAAAA;AACrC,aAAW,CAACN,MAAMmC,QAAAA,KAAavC,OAAOC,QAAQkC,UAAAA,GAAwC;AACpF,QAAI,CAACK,kBAAkBpC,MAAMiC,MAAAA,GAAS;AAGpC3B,aAAO,GAAGsB,MAAAA,aAAmB5B,IAAAA,2DAA0D;AACvF;IACF;AAGA,UAAMqC,SAASC,cAActC,MAAMmC,QAAAA;AACnC,QAAIE,WAAWnC,QAAW;AAGxBI,aAAO,GAAGsB,MAAAA,aAAmB5B,IAAAA,oBAAmBqC,MAAAA,EAAQ;AACxD;IACF;AACA5C,QAAIO,IAAAA,IAAQuC,WAAWJ,UAAqCnC,MAAMX,KAAKiB,MAAAA;EACzE;AACA,SAAOb;AACT;AA1CSiC;AAoDT,SAASY,cAActC,MAAcmC,UAAiB;AACpD,MAAI,OAAOA,aAAa,YAAYA,aAAa,QAAQN,MAAMC,QAAQK,QAAAA,GAAW;AAChF,WAAO;EACT;AACA,QAAMK,QAAQL;AACd,QAAMM,SAASD,MAAME,QAAQxC;AAC7B,QAAMyC,aAAaH,MAAMI,YAAY1C;AAIrC,MAAIuC,UAAUE,WAAY,QAAO;AACjC,MAAI,CAACF,UAAU,CAACE,WAAY,QAAO;AAEnC,SAAOF,SAASI,eAAeL,KAAAA,IAASM,cAAcN,KAAAA;AACxD;AAdSF;AAiBT,SAASQ,cAAcN,OAA8B;AACnD,MAAI,OAAOA,MAAMI,YAAY,YAAYJ,MAAMI,QAAQG,WAAW,GAAG;AACnE,WAAO;EACT;AACA,MAAIP,MAAMQ,SAAS9C,UAAa,CAAC+C,cAAcT,MAAMQ,IAAI,EACvD,QAAO;AACT,MAAIR,MAAMnD,QAAQa,UAAa,CAACgD,eAAeV,MAAMnD,GAAG,EACtD,QAAO;AACT,MAAImD,MAAMzB,QAAQb,UAAa,OAAOsC,MAAMzB,QAAQ,SAClD,QAAO;AACT,SAAOb;AACT;AAXS4C;AA0BT,SAASK,mBAAmBxD,OAAc;AACxC,MAAIA,UAAU,UAAUA,UAAU,kBAAmB,QAAO;AAC5D,MAAIA,UAAU,MAAO,QAAO;AAC5B,SAAOO;AACT;AAJSiD;AAMT,SAASN,eAAeL,OAA8B;AACpD,MAAI,OAAOA,MAAME,QAAQ,YAAYF,MAAME,IAAIK,WAAW,GAAG;AAC3D,WAAO;EACT;AACA,MAAI;AACF,QAAIK,IAAIZ,MAAME,GAAG;EACnB,QAAQ;AACN,WAAO;EACT;AACA,MAAIF,MAAMa,SAASnD,UAAaiD,mBAAmBX,MAAMa,IAAI,MAAMnD,QAAW;AAC5E,WAAO;EACT;AACA,MAAIsC,MAAMc,YAAYpD,UAAa,CAACgD,eAAeV,MAAMc,OAAO,GAAG;AAEjE,WAAO;EACT;AACA,MAAId,MAAMe,qBAAqBrD,UAAa,OAAOsC,MAAMe,qBAAqB,UAAU;AACtF,WAAO;EACT;AACA,SAAOrD;AACT;AApBS2C;AAsDT,SAASN,WACPC,OACAxC,MACAX,KACAG,MAA+B;AAE/B,MAAIgD,MAAME,QAAQxC,QAAW;AAC3B,UAAMsD,SAAkC;MAAEd,KAAKF,MAAME;IAAI;AAKzD,QAAIF,MAAMa,SAASnD,OAAWsD,QAAOH,OAAOF,mBAAmBX,MAAMa,IAAI;AACzE,QAAIb,MAAMc,YAAYpD,QAAW;AAC/BsD,aAAOF,UAAUnE,oBACfqD,MAAMc,SACNjE,KACA,WACAW,MACAR,IAAAA;IAEJ;AACA,QAAIgD,MAAMiB,SAASvD,OAAWsD,QAAOC,OAAOjB,MAAMiB;AAClD,QAAIjB,MAAMe,qBAAqBrD,OAAWsD,QAAOD,mBAAmBf,MAAMe;AAC1E,WAAOC;EACT;AACA,QAAME,QAAiC;IAAEd,SAASJ,MAAMI;EAAQ;AAChE,MAAIJ,MAAMQ,SAAS9C,OAAWwD,OAAMV,OAAOR,MAAMQ;AACjD,MAAIR,MAAMnD,QAAQa,QAAW;AAC3BwD,UAAMrE,MAAMF,oBAAoBqD,MAAMnD,KAA+BA,KAAK,OAAOW,MAAMR,IAAAA;EACzF;AACA,MAAIgD,MAAMzB,QAAQb,OAAWwD,OAAM3C,MAAMyB,MAAMzB;AAC/C,SAAO2C;AACT;AAjCSnB;AAoCT,SAASjB,WAAWD,KAAY;AAC9B,SAAOA,eAAesC,QAAQtC,IAAIR,UAAU+C,OAAOvC,GAAAA;AACrD;AAFSC;AAIT,SAAS2B,cAAcY,GAAU;AAC/B,SAAOhC,MAAMC,QAAQ+B,CAAAA,KAAMA,EAAEC,MAAM,CAACC,MAAM,OAAOA,MAAM,QAAA;AACzD;AAFSd;AAIT,SAASC,eAAeW,GAAU;AAChC,SACE,OAAOA,MAAM,YACbA,MAAM,QACN,CAAChC,MAAMC,QAAQ+B,CAAAA,KACfjE,OAAOoE,OAAOH,CAAAA,EAAGC,MAAM,CAACC,MAAM,OAAOA,MAAM,QAAA;AAE/C;AAPSb;;;AC9SF,SAASe,sBAAsBC,SAA8B;AAClE,SAAO;IACLC,SAAS;IACTC,cAAa,oBAAIC,KAAAA,GAAOC,YAAW;IACnCC,QAAQL,QAAQM,IAAI,CAACC,OAAO;MAC1BC,MAAMD,EAAEE,YAAYD;MACpBE,OAAOH,EAAEG;MACTC,OAAOJ,EAAEE,YAAYE;MACrBC,QAAQL,EAAEE,YAAYG,UAAU;MAChCC,UAAU;QACRC,QAAQC,OAAOR,EAAEM,SAASG,WAAW;QACrCC,UAAUV,EAAEM,SAASI;MACvB;MACAC,QAAQX,EAAEW,OAAOZ,IAAI,CAACa,MAAMA,EAAEX,IAAI;MAClCY,cAAcb,EAAEa,aAAad,IAAI,CAACe,MAAMA,EAAEb,IAAI;MAC9Cc,OAAOf,EAAEgB,UAAUC,QAAQ,CAACC,OAC1BA,GAAGH,MAAMhB,IAAI,CAACoB,OAAO;QACnBlB,MAAMiB,GAAGE,YAAY,GAAGF,GAAGE,SAAS,IAAID,EAAEE,OAAOpB,IAAI,KAAKkB,EAAEE,OAAOpB;QACnEqB,aAAaH,EAAEE,OAAOC;QACtBC,MAAMJ,EAAEE,OAAOE;QACfC,UAAUL,EAAEK,aAAaC;QACzBC,cAAcP,EAAEO;QAChBC,OAAOR,EAAEQ;QACTC,OAAOT,EAAES;MACX,EAAA,CAAA;MAEFC,SAAS7B,EAAE6B,UACP;QACEC,WAAW9B,EAAE6B,QAAQC;QACrBC,iBAAiB/B,EAAE6B,QAAQE,mBAAmB;MAChD,IACAN;MACJO,WAAWhC,EAAEiC,gBAAgBlC,IAAI,CAACmC,QAAQA,IAAIjC,IAAI;MAClDkC,QAAQnC,EAAEmC,SACN;QACEC,UAAUpC,EAAEmC,OAAOC,YAAY;QAC/BC,YAAYrC,EAAEmC,OAAOE,cAAc;QACnCC,KAAKtC,EAAEmC,OAAOG,OAAO;QACrBC,OAAOvC,EAAEmC,OAAOI,SAAS;MAC3B,IACAd;MACJe,QAAQxC,EAAEwC,QAAQC;MAClBC,YAAY1C,EAAE0C,aAAaC,OAAOC,KAAK5C,EAAE0C,UAAU,IAAIjB;IACzD,EAAA;EACF;AACF;AA7CgBjC;;;ACjDhB,SAASqD,qBAAqBC,SAAiC;AAC7D,QAAMC,OAAO,oBAAIC,IAAAA;AACjB,aAAWC,KAAKH,SAAS;AACvB,UAAMI,WAAWH,KAAKI,IAAIF,EAAEG,KAAK;AACjC,QAAIF,aAAaG,QAAW;AAC1B,YAAM,IAAIC,MACR,4CAA4CL,EAAEG,KAAK,YACxCF,QAAAA,UAAkBD,EAAEM,YAAYC,IAAI,eAAe;IAElE;AACAT,SAAKU,IAAIR,EAAEG,OAAOH,EAAEM,YAAYC,IAAI;EACtC;AACF;AAZSX;AA+BF,SAASa,aAAaC,MAAyB;AACpD,MAAIC,SAAiC;AAErC,SAAO;IACLJ,MAAM;IAENK,SAASC,KAAc;AACrBA,UAAIC,QAAQ,aAAa,OAAOC,cAAAA;AAC9BJ,mBAAWK,WAAWN,IAAAA;AAEtB,cAAMO,UAAUF,UAAUE;AAC1B,cAAMC,MAAM,IAAIC,IAAIF,QAAQC,GAAG;AAC/B,cAAME,SAASH,QAAQG,OAAOC,YAAW;AAEzC,cAAMC,UAAUC,WAAWZ,QAAQS,QAAQF,IAAIM,QAAQ;AACvD,YAAI,CAACF,QAAS;AAEd,eAAOA,QAAQG,QAAQR,OAAAA;MACzB,CAAA;IACF;EACF;AACF;AArBgBR;AAwBhB,SAASO,WAAWN,MAAyB;AAC3C,QAAMgB,YAA0B,CAAA;AAChC,QAAMC,kBAAmC,CAAA;AAEzC,aAAWC,SAASlB,KAAKmB,QAAQ;AAC/BF,oBAAgBG,KAAK;MAAE3B,OAAOyB,MAAMzB;MAAOG,aAAa;QAAEC,MAAMqB,MAAMrB;MAAK;IAAE,CAAA;AAE7E,UAAMwB,YAAYrB,KAAKsB,mBACnBtB,KAAKsB,iBAAiBJ,MAAMK,QAAQ,IACpCC,iBAAiBN,MAAMK,QAAQ;AAEnCP,cAAUI,KAAI,GACTK,oBAAoB;MACrBC,YAAY;QAAEjC,OAAOyB,MAAMzB;MAAM;MACjCkC,iBAAiBT,MAAMK;MACvBF;IACF,CAAA,CAAA;EAEJ;AAEAnC,uBAAqB+B,eAAAA;AACrB,SAAOW,qBAAqBZ,SAAAA;AAC9B;AAtBSV;AAyBT,SAASkB,iBAAiBD,UAA8B;AACtD,SAAO,iBAAiBM,UAAkBC,YAAkB;AAC1D,UAAMC,QAAQC,QAAO;AACrB,UAAM;MACJC,MAAM;MACNC,OAAO,OAAOC,KAAKC,IAAG,CAAA;MACtBC,WAAWd,SAASe,SAAS;IAC/B;AACA,UAAM;MACJL,MAAM;MACNM,MAAM;MACNC,SACE;MACFC,WAAW;IACb;EACF;AACF;AAhBSjB;AAuBT,SAASI,qBAAqB3B,QAAoB;AAChD,SAAOA,OAAOyC,IAAI,CAACpD,MAAAA;AACjB,QAAI,CAACA,EAAEqD,KAAKC,SAAS,GAAA,EAAM,QAAOtD;AAClC,UAAMuD,cAAcvD,EAAEqD,KAAKG,QAAQ,WAAW,OAAA;AAC9C,WAAO;MAAE,GAAGxD;MAAGyD,OAAOC,OAAO,IAAIH,WAAAA,GAAc;IAAE;EACnD,CAAA;AACF;AANSjB;AAST,SAASf,WACPZ,QACAS,QACAI,UAAgB;AAEhB,SAAOb,OAAOgD,KAAK,CAAC3D,MAAAA;AAClB,QAAIA,EAAEoB,WAAWA,OAAQ,QAAO;AAChC,QAAIpB,EAAEyD,MAAO,QAAOzD,EAAEyD,MAAMG,KAAKpC,QAAAA;AACjC,WAAOxB,EAAEqD,SAAS7B;EACpB,CAAA;AACF;AAVSD;","names":["STRATEGY_KNOBS","compileContextWindow","options","context","maxTokens","maxBytesPerFile","maxBytesTotal","opts","metadataOnlyKnobs","filter","knob","undefined","compileSkills","options","autoDiscover","autoInject","enabled","include","SDK_TOOL_NAME","SDK_TOOL_NAME_MAX_LENGTH","SDK_TOOL_NAME_CHARSET","SDK_RESERVED_TOOL_NAMES","Set","SDK_RESERVED_TOOL_PREFIX","toolRuntimeName","namespace","toolName","trim","length","where","ConfigurationError","name","test","String","has","startsWith","join","compileHitlGates","toolboxes","gates","Map","tb","tool","tools","hitl","set","config","compileTools","toolboxInstances","instance","get","class","handler","propertyKey","push","description","inputSchema","input","call","createAgentExecutionContext","base","agent","run","toolCall","getRequest","getUrl","getClass","getMethodName","getAgent","getRun","getToolCall","isAgentContext","ctx","UIMessageStreamPresenter","WIRE_APPROVAL_DETAIL_PART","claim","queues","toolName","queue","get","undefined","claimed","shift","length","delete","enqueue","id","set","push","forget","at","indexOf","splice","HitlCallCorrelation","Map","announceToolCall","callId","announced","approvalToolCallId","approvalId","resultToolCallId","toAgentOutputEvent","e","type","text","content","callId","name","toolName","input","result","output","isError","doneToMetadata","event","usage","durationMs","cost","undefined","stopReason","model","ERROR_CODE_DATA_PART","INPUT_REQUESTED_DATA_PART","TASK_PROGRESS_DATA_PART","SHELL_OUTPUT_DATA_PART","dataPart","data","transient","UNMASKED_CODES","Set","MASK_ERROR","error","code","has","message","errorChunks","errorText","diagnosticDataPart","checkpointId","resumeToken","step","requestId","status","correlateToolIds","correlation","announceToolCall","resultToolCallId","presentUIMessageStream","events","opts","onError","presenter","UIMessageStreamPresenter","textId","HitlCallCorrelation","turnMetadata","correlated","present","closeBlock","toolCallId","approvalToolCallId","hasSeen","markSeen","dynamic","WIRE_APPROVAL_DETAIL_PART","approvalId","question","timeoutMs","diagnostic","err","codeOrUndefined","String","finish","encoder","TextEncoder","DONE_FRAME","streamAgentResponse","eventStream","opts","stream","ReadableStream","start","controller","closed","safeEnqueue","chunk","enqueue","chunks","presentUIMessageStream","textId","crypto","randomUUID","onError","undefined","data","JSON","stringify","encode","type","close","Response","status","headers","isTextDelta","e","type","isToolCall","isPartialToolCall","isToolResult","isDone","isError","isApprovalRequired","generateAgentRoutes","ctx","walkResult","createRun","getRun","basePath","route","replace","routes","push","method","path","handler","request","body","json","message","length","Response","JSON","stringify","error","code","status","headers","rawSessionId","sessionId","Date","now","streamAgentResponse","url","URL","runId","pathname","split","pop","run","ContextualTool","of","tool","_requiredContext","makeBuilder","config","runtime","input","schema","model","id","system","prompt","reasoningEffort","effort","maxIterations","limit","context","value","tools","list","when","condition","apply","builder","guardrail","g","guardrails","gs","approval","toolName","options","approvals","map","skills","selection","settingSources","hookApproval","gate","memory","settings","telemetry","hooks","plugins","mcp","servers","mcpServers","use","preset","build","defineAgent","AgentBuilder","create","TheokitAgentError","AgentDefinitionError","TheokitAgentError","name","source","code","isRetryable","extractDefaultExport","mod","default","isCompiledAgentOptions","value","v","Array","isArray","tools","agents","compileAgentModule","def","isAgentDefinition","compileAgentDefinition","compileLoadedAgentModule","asAgentStream","events","e","EventQueue","push","item","r","shift","done","close","splice","undefined","drain","length","next","Promise","resolve","appendCheckpointSaved","sessionId","emitted","checkpoint","type","checkpointId","crypto","randomUUID","step","resumeToken","ev","streamAgentUIMessages","compiled","apiKey","input","guardrails","guardedStream","unguardedStream","safe","runInputGuards","message","inner","moderateOutputStream","textPayloadExtractor","delta","replaced","_text","result","textId","overrides","cwd","baseDir","images","onRunEvent","retry","signal","exposeUsageToTools","hitl","gated","size","createSdkAgentStream","queue","addEventListener","once","plugin","createHitlPlugin","emit","awaitApproval","sdkStream","plugins","err","Error","String","retryable","durableCheckpoint","storage","presentUIMessageStream","onError","DEFAULT_MAX_ATTEMPTS","runWithApiErrorHandling","thunk","policy","maxAttempts","attempt","error","decision","processApiError","retry","fallback","undefined","createApiErrorHandler","resolveMcpServers","selection","ctx","undefined","resolved","Error","mcpRegistry","config","registry","apps","composio","command","args","length","join","env","COMPOSIO_API_KEY","apiKey","profile","MCP_RUN_API_KEY","JSON","stringify","mcpToolApprovals","specs","out","tool","spec","Object","entries","question","existsSync","readFileSync","join","TheokitAgentError","ENV_REFERENCE_REGEX","expandEnvReferences","record","env","field","server","warn","out","key","value","Object","entries","match","exec","name","resolved","undefined","MCP_FILENAME","warningChannel","opts","onWarn","warning","process","stderr","write","McpFileError","TheokitAgentError","message","loadMcpJson","cwd","path","join","existsSync","text","readFileSync","err","describeIt","parsed","JSON","parse","parseMcpJson","raw","source","Array","isArray","serversRaw","mcpServers","policy","currentOperatorPolicy","entryRaw","mcpServerAdmitted","reason","validateEntry","buildEntry","entry","hasUrl","url","hasCommand","command","validateRemote","validateStdio","length","args","isStringArray","isStringRecord","normaliseTransport","URL","type","headers","requestTimeoutMs","remote","auth","stdio","Error","String","v","every","x","values","generateAgentManifest","sources","version","generatedAt","Date","toISOString","agents","map","r","name","agentConfig","route","model","stream","mainLoop","method","String","propertyKey","strategy","guards","g","interceptors","i","tools","toolboxes","flatMap","tb","t","namespace","config","description","risk","approval","undefined","capabilities","trace","audit","gateway","platforms","sessionStrategy","subAgents","subAgentClasses","cls","memory","provider","embeddings","fts","scope","skills","include","mcpServers","Object","keys","validateUniqueRoutes","results","seen","Map","r","existing","get","route","undefined","Error","agentConfig","name","set","agentsPlugin","opts","routes","register","app","addHook","pluginCtx","initRoutes","request","url","URL","method","toUpperCase","matched","matchRoute","pathname","handler","allRoutes","routeIdentities","entry","agents","push","createRun","createRunFactory","compiled","defaultCreateRun","generateAgentRoutes","walkResult","compiledOptions","compileRoutePatterns","_message","_sessionId","Promise","resolve","type","runId","Date","now","agentName","model","code","message","retryable","map","path","includes","regexSource","replace","regex","RegExp","find","test"]}

package/dist/chunk-HGVT4VCE.js

@@ -0,0 +1,97 @@
+import {
+  __name
+} from "./chunk-Z4QWC7IK.js";
+
+// src/config/operator-policy.ts
+import { existsSync, readFileSync } from "fs";
+import { join } from "path";
+var KNOWN_KEYS = /* @__PURE__ */ new Set([
+  "disableSkillShellExecution",
+  "deniedMcpServers",
+  "allowedMcpServers"
+]);
+var LIST_KEYS = /* @__PURE__ */ new Set([
+  "deniedMcpServers",
+  "allowedMcpServers"
+]);
+function operatorPolicyPath(root) {
+  if (root !== void 0) return join(root, "claude-code", "managed-settings.json");
+  if (process.platform === "darwin") {
+    return "/Library/Application Support/ClaudeCode/managed-settings.json";
+  }
+  if (process.platform === "win32") {
+    return join(process.env.PROGRAMDATA ?? "C:\\ProgramData", "ClaudeCode", "managed-settings.json");
+  }
+  return "/etc/claude-code/managed-settings.json";
+}
+__name(operatorPolicyPath, "operatorPolicyPath");
+function readOperatorPolicy(root, warn) {
+  const path = operatorPolicyPath(root);
+  const parsed = readPolicyDocument(path, warn);
+  if (parsed === void 0) return {};
+  const out = {};
+  for (const [key, value] of Object.entries(parsed)) {
+    applyPolicyKey(out, key, value, path, warn);
+  }
+  return out;
+}
+__name(readOperatorPolicy, "readOperatorPolicy");
+function readPolicyDocument(path, warn) {
+  if (!existsSync(path)) return void 0;
+  let parsed;
+  try {
+    parsed = JSON.parse(readFileSync(path, "utf8"));
+  } catch (cause) {
+    warn(`${path} could not be read as JSON (${cause.message}) \u2014 NO operator policy is being applied.`);
+    return void 0;
+  }
+  if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+    warn(`${path} is not a JSON object \u2014 NO operator policy is being applied.`);
+    return void 0;
+  }
+  return parsed;
+}
+__name(readPolicyDocument, "readPolicyDocument");
+function applyPolicyKey(out, key, value, path, warn) {
+  if (!KNOWN_KEYS.has(key)) return;
+  if (LIST_KEYS.has(key)) {
+    const list = readStringList(value, key, path, warn);
+    if (list === void 0) return;
+    if (key === "deniedMcpServers") out.deniedMcpServers = list;
+    if (key === "allowedMcpServers") out.allowedMcpServers = list;
+    return;
+  }
+  if (typeof value !== "boolean") {
+    warn(`${path} declares "${key}" as ${typeof value}, not a boolean \u2014 it is NOT being applied.`);
+    return;
+  }
+  if (key === "disableSkillShellExecution") out.disableSkillShellExecution = value;
+}
+__name(applyPolicyKey, "applyPolicyKey");
+function readStringList(value, key, path, warn) {
+  if (Array.isArray(value) && value.every((v) => typeof v === "string")) {
+    return value;
+  }
+  warn(`${path} declares "${key}" as ${Array.isArray(value) ? "an array with a non-string entry" : typeof value}, not an array of strings \u2014 it is NOT being applied.`);
+  return void 0;
+}
+__name(readStringList, "readStringList");
+var cached;
+var rootOverride;
+function currentOperatorPolicy(warn) {
+  cached ??= readOperatorPolicy(rootOverride, warn);
+  return cached;
+}
+__name(currentOperatorPolicy, "currentOperatorPolicy");
+function mcpServerAdmitted(name, policy) {
+  if (policy.deniedMcpServers?.includes(name) === true) return false;
+  if (policy.allowedMcpServers === void 0) return true;
+  return policy.allowedMcpServers.includes(name);
+}
+__name(mcpServerAdmitted, "mcpServerAdmitted");
+
+export {
+  currentOperatorPolicy,
+  mcpServerAdmitted
+};
+//# sourceMappingURL=chunk-HGVT4VCE.js.map

package/dist/chunk-HGVT4VCE.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/config/operator-policy.ts"],"mappings":";;;;;AA4BA,SAASA,YAAYC,oBAAoB;AACzC,SAASC,YAAY;AA8BrB,IAAMC,aAAa,oBAAIC,IAA0B;EAC/C;EACA;EACA;CACD;AAGD,IAAMC,YAAY,oBAAID,IAA0B;EAAC;EAAoB;CAAoB;AASzF,SAASE,mBAAmBC,MAAa;AACvC,MAAIA,SAASC,OAAW,QAAOC,KAAKF,MAAM,eAAe,uBAAA;AACzD,MAAIG,QAAQC,aAAa,UAAU;AACjC,WAAO;EACT;AACA,MAAID,QAAQC,aAAa,SAAS;AAChC,WAAOF,KAAKC,QAAQE,IAAIC,eAAe,mBAAmB,cAAc,uBAAA;EAC1E;AACA,SAAO;AACT;AATSP;AAqBT,SAASQ,mBACPP,MACAQ,MAA+B;AAE/B,QAAMC,OAAOV,mBAAmBC,IAAAA;AAChC,QAAMU,SAASC,mBAAmBF,MAAMD,IAAAA;AACxC,MAAIE,WAAWT,OAAW,QAAO,CAAC;AAElC,QAAMW,MAAsB,CAAC;AAC7B,aAAW,CAACC,KAAKC,KAAAA,KAAUC,OAAOC,QAAQN,MAAAA,GAAS;AACjDO,mBAAeL,KAAKC,KAA6BC,OAAOL,MAAMD,IAAAA;EAChE;AACA,SAAOI;AACT;AAbSL;AA0BT,SAASI,mBACPF,MACAD,MAA+B;AAG/B,MAAI,CAACU,WAAWT,IAAAA,EAAO,QAAOR;AAE9B,MAAIS;AACJ,MAAI;AAEFA,aAASS,KAAKC,MAAMC,aAAaZ,MAAM,MAAA,CAAA;EACzC,SAASa,OAAO;AACdd,SACE,GAAGC,IAAAA,+BAAoCa,MAAgBC,OAAO,+CAA0C;AAE1G,WAAOtB;EACT;AACA,MAAI,OAAOS,WAAW,YAAYA,WAAW,QAAQc,MAAMC,QAAQf,MAAAA,GAAS;AAC1EF,SAAK,GAAGC,IAAAA,mEAAkE;AAC1E,WAAOR;EACT;AACA,SAAOS;AACT;AAtBSC;AAgCT,SAASM,eACPL,KACAC,KACAC,OACAL,MACAD,MAA+B;AAE/B,MAAI,CAACZ,WAAW8B,IAAIb,GAAAA,EAAM;AAC1B,MAAIf,UAAU4B,IAAIb,GAAAA,GAAM;AACtB,UAAMc,OAAOC,eAAed,OAAOD,KAAKJ,MAAMD,IAAAA;AAC9C,QAAImB,SAAS1B,OAAW;AACxB,QAAIY,QAAQ,mBAAoBD,KAAIiB,mBAAmBF;AACvD,QAAId,QAAQ,oBAAqBD,KAAIkB,oBAAoBH;AACzD;EACF;AACA,MAAI,OAAOb,UAAU,WAAW;AAC9BN,SAAK,GAAGC,IAAAA,cAAkBI,GAAAA,QAAW,OAAOC,KAAAA,iDAAiD;AAC7F;EACF;AACA,MAAID,QAAQ,6BAA8BD,KAAImB,6BAA6BjB;AAC7E;AApBSG;AA4BT,SAASW,eACPd,OACAD,KACAJ,MACAD,MAA+B;AAE/B,MAAIgB,MAAMC,QAAQX,KAAAA,KAAUA,MAAMkB,MAAM,CAACC,MAAM,OAAOA,MAAM,QAAA,GAAW;AACrE,WAAOnB;EACT;AACAN,OACE,GAAGC,IAAAA,cAAkBI,GAAAA,QAChBW,MAAMC,QAAQX,KAAAA,IAAS,qCAAqC,OAAOA,KAAAA,2DAClB;AAExD,SAAOb;AACT;AAfS2B;AAwBT,IAAIM;AACJ,IAAIC;AAEG,SAASC,sBAAsB5B,MAA+B;AACnE0B,aAAW3B,mBAAmB4B,cAAc3B,IAAAA;AAC5C,SAAO0B;AACT;AAHgBE;AAuBT,SAASC,kBAAkBC,MAAcC,QAAsB;AACpE,MAAIA,OAAOC,kBAAkBC,SAASH,IAAAA,MAAU,KAAM,QAAO;AAC7D,MAAIC,OAAOG,sBAAsBC,OAAW,QAAO;AACnD,SAAOJ,OAAOG,kBAAkBD,SAASH,IAAAA;AAC3C;AAJgBD;","names":["existsSync","readFileSync","join","KNOWN_KEYS","Set","LIST_KEYS","operatorPolicyPath","root","undefined","join","process","platform","env","PROGRAMDATA","readOperatorPolicy","warn","path","parsed","readPolicyDocument","out","key","value","Object","entries","applyPolicyKey","existsSync","JSON","parse","readFileSync","cause","message","Array","isArray","has","list","readStringList","deniedMcpServers","allowedMcpServers","disableSkillShellExecution","every","v","cached","rootOverride","currentOperatorPolicy","mcpServerAdmitted","name","policy","deniedMcpServers","includes","allowedMcpServers","undefined"]}