@vendoai/apps 0.4.0

package/dist/agent-tools.js

@@ -0,0 +1,252 @@
+import { VENDO_APPS_CREATE_TOOL, VENDO_VIEW_STREAM, VendoError, vendoViewStreamId, } from "@vendoai/core";
+const DRAFT_2020_12 = "https://json-schema.org/draft/2020-12/schema";
+const descriptors = [
+    {
+        // The agent's streaming-view bridge keys on this exact core-defined name.
+        name: VENDO_APPS_CREATE_TOOL,
+        description: "Create a Vendo app from a natural-language prompt.",
+        inputSchema: {
+            $schema: DRAFT_2020_12,
+            type: "object",
+            properties: { prompt: { type: "string", minLength: 1 } },
+            required: ["prompt"],
+            additionalProperties: false,
+        },
+        // Creation is structurally rung 1: a jailed document render with no server,
+        // host-tool execution, or egress. The lifecycle write is only to Vendo's
+        // own app store, so consent policy treats it like opening a local view.
+        risk: "read",
+    },
+    {
+        name: "vendo_apps_edit",
+        description: "Edit an existing Vendo app with one natural-language instruction. If the result has failure.retryable=true, retry vendo_apps_edit on the same appId with a narrower instruction; do not rebuild it with vendo_apps_create.",
+        inputSchema: {
+            $schema: DRAFT_2020_12,
+            type: "object",
+            properties: {
+                appId: { type: "string", minLength: 1 },
+                instruction: { type: "string", minLength: 1 },
+            },
+            required: ["appId", "instruction"],
+            additionalProperties: false,
+        },
+        risk: "write",
+    },
+    {
+        name: "vendo_apps_rebase_pin",
+        description: "Rebase one drifted remixed pin of a Vendo app onto the host's updated component: re-fork the new captured baseline and replay the recorded edit intents in order. Use when an edit result or open() payload reports drifted pins and the user asks to update the remix. If the result has status \"failed\", nothing was changed; it lists which intents replayed and which failed.",
+        inputSchema: {
+            $schema: DRAFT_2020_12,
+            type: "object",
+            properties: {
+                appId: { type: "string", minLength: 1 },
+                slot: { type: "string", minLength: 1 },
+            },
+            required: ["appId", "slot"],
+            additionalProperties: false,
+        },
+        risk: "write",
+    },
+    {
+        name: "vendo_apps_open",
+        description: "Open the latest serving surface for a Vendo app.",
+        inputSchema: {
+            $schema: DRAFT_2020_12,
+            type: "object",
+            properties: { appId: { type: "string", minLength: 1 } },
+            required: ["appId"],
+            additionalProperties: false,
+        },
+        risk: "read",
+    },
+    {
+        name: "vendo_apps_data_list",
+        description: "List records from a declared Vendo app data collection.",
+        inputSchema: {
+            $schema: DRAFT_2020_12,
+            type: "object",
+            properties: {
+                appId: { type: "string", minLength: 1 },
+                collection: { type: "string", minLength: 1 },
+                refs: { type: "object", additionalProperties: { type: "string", minLength: 1 } },
+                limit: { type: "integer", minimum: 1 },
+                cursor: { type: "string", minLength: 1 },
+            },
+            required: ["appId", "collection"],
+            additionalProperties: false,
+        },
+        risk: "read",
+    },
+    {
+        name: "vendo_apps_data_put",
+        description: "Create or replace a record in a declared Vendo app data collection.",
+        inputSchema: {
+            $schema: DRAFT_2020_12,
+            type: "object",
+            properties: {
+                appId: { type: "string", minLength: 1 },
+                collection: { type: "string", minLength: 1 },
+                id: { type: "string", minLength: 1 },
+                data: {},
+                refs: { type: "object", additionalProperties: { type: "string", minLength: 1 } },
+            },
+            required: ["appId", "collection", "id", "data"],
+            additionalProperties: false,
+        },
+        risk: "write",
+    },
+    {
+        name: "vendo_apps_data_delete",
+        description: "Delete a record from a declared Vendo app data collection.",
+        inputSchema: {
+            $schema: DRAFT_2020_12,
+            type: "object",
+            properties: {
+                appId: { type: "string", minLength: 1 },
+                collection: { type: "string", minLength: 1 },
+                id: { type: "string", minLength: 1 },
+            },
+            required: ["appId", "collection", "id"],
+            additionalProperties: false,
+        },
+        risk: "write",
+    },
+];
+const input = (value, required, optional = []) => {
+    if (typeof value !== "object" || value === null || Array.isArray(value)) {
+        throw new VendoError("validation", "tool input must be an object");
+    }
+    const record = value;
+    const allowed = new Set([...required, ...optional]);
+    const unexpected = Object.keys(record).find((key) => !allowed.has(key));
+    if (unexpected !== undefined)
+        throw new VendoError("validation", `unexpected input property: ${unexpected}`);
+    for (const key of required) {
+        if (typeof record[key] !== "string" || record[key].trim() === "") {
+            throw new VendoError("validation", `${key} must be a non-empty string`);
+        }
+    }
+    return record;
+};
+const optionalRefs = (value) => {
+    if (value === undefined)
+        return undefined;
+    if (typeof value !== "object" || value === null || Array.isArray(value)) {
+        throw new VendoError("validation", "refs must be an object");
+    }
+    const refs = {};
+    for (const [key, item] of Object.entries(value)) {
+        if (key === "" || typeof item !== "string" || item.trim() === "") {
+            throw new VendoError("validation", "refs must have non-empty string keys and values");
+        }
+        refs[key] = item;
+    }
+    return refs;
+};
+const optionalLimit = (value) => {
+    if (value === undefined)
+        return undefined;
+    if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 1) {
+        throw new VendoError("validation", "limit must be a positive integer");
+    }
+    return value;
+};
+const errorOutcome = (error) => ({
+    status: "error",
+    error: error instanceof VendoError
+        ? { code: error.code, message: error.message }
+        : { code: "internal", message: error instanceof Error ? error.message : "unknown apps error" },
+});
+/** 06-apps §§1,5 — unbound Vendo app capabilities; the umbrella binds this registry. */
+export const createAgentTools = (runtime, dependencies) => ({
+    async descriptors() {
+        return structuredClone(descriptors);
+    },
+    async execute(call, ctx) {
+        try {
+            if (call.tool === "vendo_apps_create") {
+                const args = input(call.args, ["prompt"]);
+                const stream = call[VENDO_VIEW_STREAM];
+                const app = await runtime.create({
+                    prompt: args.prompt,
+                    ...(stream === undefined ? {} : {
+                        onView: (part) => stream({ id: vendoViewStreamId(part.appId), part }),
+                    }),
+                }, ctx);
+                return { status: "ok", output: app };
+            }
+            if (call.tool === "vendo_apps_edit") {
+                const args = input(call.args, ["appId", "instruction"]);
+                const result = await runtime.edit(args.appId, args.instruction, ctx);
+                return {
+                    status: "ok",
+                    output: {
+                        app: result.app,
+                        ...(result.issues === undefined ? {} : { issues: result.issues }),
+                        ...(result.failure === undefined ? {} : { failure: result.failure }),
+                        ...(result.driftedPins === undefined ? {} : { driftedPins: result.driftedPins }),
+                        // Wave 9 — a ladder-authored automation (mode, trigger, pending
+                        // standing-grant approvals) so the agent can narrate what was set
+                        // up and which approvals are waiting.
+                        ...(result.automation === undefined ? {} : { automation: result.automation }),
+                    },
+                };
+            }
+            if (call.tool === "vendo_apps_rebase_pin") {
+                const args = input(call.args, ["appId", "slot"]);
+                const result = await runtime.pins.rebase({
+                    appId: args.appId,
+                    slot: args.slot,
+                }, ctx);
+                return { status: "ok", output: result };
+            }
+            if (call.tool === "vendo_apps_open") {
+                const args = input(call.args, ["appId"]);
+                return { status: "ok", output: await runtime.open(args.appId, ctx) };
+            }
+            if (call.tool === "vendo_apps_data_list") {
+                const args = input(call.args, ["appId", "collection"], ["refs", "limit", "cursor"]);
+                const app = await dependencies.requireOwned(args.appId, ctx.principal.subject);
+                const refs = optionalRefs(args.refs);
+                const limit = optionalLimit(args.limit);
+                if (args.cursor !== undefined && (typeof args.cursor !== "string" || args.cursor.trim() === "")) {
+                    throw new VendoError("validation", "cursor must be a non-empty string");
+                }
+                const query = {
+                    ...(refs === undefined ? {} : { refs }),
+                    ...(limit === undefined ? {} : { limit }),
+                    ...(args.cursor === undefined ? {} : { cursor: args.cursor }),
+                };
+                return {
+                    status: "ok",
+                    output: await dependencies.data.records(app, args.collection).list(query),
+                };
+            }
+            if (call.tool === "vendo_apps_data_put") {
+                const args = input(call.args, ["appId", "collection", "id"], ["data", "refs"]);
+                if (!Object.prototype.hasOwnProperty.call(args, "data") || args.data === undefined) {
+                    throw new VendoError("validation", "data is required");
+                }
+                const app = await dependencies.requireOwned(args.appId, ctx.principal.subject);
+                const refs = optionalRefs(args.refs);
+                const record = await dependencies.data.records(app, args.collection).put({
+                    id: args.id,
+                    data: args.data,
+                    ...(refs === undefined ? {} : { refs }),
+                });
+                return { status: "ok", output: record };
+            }
+            if (call.tool === "vendo_apps_data_delete") {
+                const args = input(call.args, ["appId", "collection", "id"]);
+                const app = await dependencies.requireOwned(args.appId, ctx.principal.subject);
+                await dependencies.data.records(app, args.collection).delete(args.id);
+                return { status: "ok", output: { status: "ok" } };
+            }
+            return { status: "error", error: { code: "not-found", message: `Unknown tool: ${call.tool}` } };
+        }
+        catch (error) {
+            return errorOutcome(error);
+        }
+    },
+});
+//# sourceMappingURL=agent-tools.js.map

package/dist/agent-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-tools.js","sourceRoot":"","sources":["../src/agent-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,iBAAiB,EACjB,UAAU,EACV,iBAAiB,GAUlB,MAAM,eAAe,CAAC;AAIvB,MAAM,aAAa,GAAG,8CAA8C,CAAC;AAErE,MAAM,WAAW,GAAqB;IACpC;QACE,0EAA0E;QAC1E,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,oDAAoD;QACjE,WAAW,EAAE;YACX,OAAO,EAAE,aAAa;YACtB,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE;YACxD,QAAQ,EAAE,CAAC,QAAQ,CAAC;YACpB,oBAAoB,EAAE,KAAK;SAC5B;QACD,4EAA4E;QAC5E,yEAAyE;QACzE,wEAAwE;QACxE,IAAI,EAAE,MAAM;KACb;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,4NAA4N;QACzO,WAAW,EAAE;YACX,OAAO,EAAE,aAAa;YACtB,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;gBACvC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;aAC9C;YACD,QAAQ,EAAE,CAAC,OAAO,EAAE,aAAa,CAAC;YAClC,oBAAoB,EAAE,KAAK;SAC5B;QACD,IAAI,EAAE,OAAO;KACd;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EAAE,qXAAqX;QAClY,WAAW,EAAE;YACX,OAAO,EAAE,aAAa;YACtB,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;gBACvC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;aACvC;YACD,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC;YAC3B,oBAAoB,EAAE,KAAK;SAC5B;QACD,IAAI,EAAE,OAAO;KACd;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,kDAAkD;QAC/D,WAAW,EAAE;YACX,OAAO,EAAE,aAAa;YACtB,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE;YACvD,QAAQ,EAAE,CAAC,OAAO,CAAC;YACnB,oBAAoB,EAAE,KAAK;SAC5B;QACD,IAAI,EAAE,MAAM;KACb;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,yDAAyD;QACtE,WAAW,EAAE;YACX,OAAO,EAAE,aAAa;YACtB,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;gBACvC,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;gBAC5C,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE;gBAChF,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE;gBACtC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;aACzC;YACD,QAAQ,EAAE,CAAC,OAAO,EAAE,YAAY,CAAC;YACjC,oBAAoB,EAAE,KAAK;SAC5B;QACD,IAAI,EAAE,MAAM;KACb;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,qEAAqE;QAClF,WAAW,EAAE;YACX,OAAO,EAAE,aAAa;YACtB,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;gBACvC,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;gBAC5C,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;gBACpC,IAAI,EAAE,EAAE;gBACR,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE;aACjF;YACD,QAAQ,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,CAAC;YAC/C,oBAAoB,EAAE,KAAK;SAC5B;QACD,IAAI,EAAE,OAAO;KACd;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE,4DAA4D;QACzE,WAAW,EAAE;YACX,OAAO,EAAE,aAAa;YACtB,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;gBACvC,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;gBAC5C,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;aACrC;YACD,QAAQ,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC;YACvC,oBAAoB,EAAE,KAAK;SAC5B;QACD,IAAI,EAAE,OAAO;KACd;CACF,CAAC;AAEF,MAAM,KAAK,GAAG,CACZ,KAAW,EACX,QAAkB,EAClB,WAAqB,EAAE,EACD,EAAE;IACxB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,UAAU,CAAC,YAAY,EAAE,8BAA8B,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,MAAM,GAAG,KAA6B,CAAC;IAC7C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACxE,IAAI,UAAU,KAAK,SAAS;QAAE,MAAM,IAAI,UAAU,CAAC,YAAY,EAAE,8BAA8B,UAAU,EAAE,CAAC,CAAC;IAC7G,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAK,MAAM,CAAC,GAAG,CAAY,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAC7E,MAAM,IAAI,UAAU,CAAC,YAAY,EAAE,GAAG,GAAG,6BAA6B,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,KAAuB,EAAsC,EAAE;IACnF,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,UAAU,CAAC,YAAY,EAAE,wBAAwB,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,IAAI,GAAG,KAAK,EAAE,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACjE,MAAM,IAAI,UAAU,CAAC,YAAY,EAAE,iDAAiD,CAAC,CAAC;QACxF,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,KAAuB,EAAsB,EAAE;IACpE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,UAAU,CAAC,YAAY,EAAE,kCAAkC,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAOF,MAAM,YAAY,GAAG,CAAC,KAAc,EAAe,EAAE,CAAC,CAAC;IACrD,MAAM,EAAE,OAAO;IACf,KAAK,EAAE,KAAK,YAAY,UAAU;QAChC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;QAC9C,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB,EAAE;CACjG,CAAC,CAAC;AAEH,wFAAwF;AACxF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,OAAoB,EACpB,YAAwC,EAC1B,EAAE,CAAC,CAAC;IAClB,KAAK,CAAC,WAAW;QACf,OAAO,eAAe,CAAC,WAAW,CAAC,CAAC;IACtC,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAe;QACjC,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBACtC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAC1C,MAAM,MAAM,GAAI,IAAmC,CAAC,iBAAiB,CAAC,CAAC;gBACvE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC;oBAC/B,MAAM,EAAE,IAAI,CAAC,MAAgB;oBAC7B,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;wBAC9B,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;qBACtE,CAAC;iBACH,EAAE,GAAG,CAAC,CAAC;gBACR,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAsB,EAAE,CAAC;YAC1D,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBACpC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;gBACxD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAe,EAAE,IAAI,CAAC,WAAqB,EAAE,GAAG,CAAC,CAAC;gBACzF,OAAO;oBACL,MAAM,EAAE,IAAI;oBACZ,MAAM,EAAE;wBACN,GAAG,EAAE,MAAM,CAAC,GAAG;wBACf,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;wBACjE,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;wBACpE,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;wBAChF,gEAAgE;wBAChE,kEAAkE;wBAClE,sCAAsC;wBACtC,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;qBAC3D;iBACrB,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;gBAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;gBACjD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;oBACvC,KAAK,EAAE,IAAI,CAAC,KAAe;oBAC3B,IAAI,EAAE,IAAI,CAAC,IAAc;iBAC1B,EAAE,GAAG,CAAC,CAAC;gBACR,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAyB,EAAE,CAAC;YAC7D,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBACpC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;gBACzC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAe,EAAE,GAAG,CAAoB,EAAE,CAAC;YACpG,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;gBACzC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;gBACpF,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,KAAe,EAAE,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;gBACzF,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACrC,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACxC,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;oBAChG,MAAM,IAAI,UAAU,CAAC,YAAY,EAAE,mCAAmC,CAAC,CAAC;gBAC1E,CAAC;gBACD,MAAM,KAAK,GAAgB;oBACzB,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;oBACvC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;oBACzC,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAgB,EAAE,CAAC;iBACxE,CAAC;gBACF,OAAO;oBACL,MAAM,EAAE,IAAI;oBACZ,MAAM,EAAE,MAAM,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,UAAoB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAoB;iBACvG,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;gBACxC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;gBAC/E,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBACnF,MAAM,IAAI,UAAU,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;gBACzD,CAAC;gBACD,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,KAAe,EAAE,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;gBACzF,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACrC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,UAAoB,CAAC,CAAC,GAAG,CAAC;oBACjF,EAAE,EAAE,IAAI,CAAC,EAAY;oBACrB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;iBACxC,CAAC,CAAC;gBACH,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAyB,EAAE,CAAC;YAC7D,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,KAAK,wBAAwB,EAAE,CAAC;gBAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC;gBAC7D,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,KAAe,EAAE,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;gBACzF,MAAM,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,UAAoB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAY,CAAC,CAAC;gBAC1F,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;YACpD,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,iBAAiB,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;QAClG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;CACF,CAAC,CAAC"}

package/dist/app-data.d.ts

@@ -0,0 +1,23 @@
+import type { AppDocument, AppId, BlobStore, Json, RecordStore, StorageDecl, StoreAdapter } from "@vendoai/core";
+export declare const APP_RECORD_MAX_BYTES: number;
+/** ENG-289 M1 — app-declared file collections accept blobs up to 5 MB each. */
+export declare const APP_BLOB_MAX_BYTES: number;
+export type AppStorage = {
+    kind: "records";
+    records: RecordStore;
+} | {
+    kind: "files";
+    blobs: BlobStore;
+};
+/** 06-apps §6 — resolve an app declaration onto its isolated store collection. */
+export declare const resolveAppStorage: (store: StoreAdapter, appId: AppId, name: string, declaration: StorageDecl) => AppStorage;
+export interface AppDataAccess {
+    getState(appId: AppId, subject: string): Promise<Json | null>;
+    setState(appId: AppId, subject: string, data: Json): Promise<void>;
+    records(app: AppDocument, name: string): RecordStore;
+    blobs(app: AppDocument, name: string): BlobStore;
+    clear(app: AppDocument, subject: string, historical?: readonly AppDocument[]): Promise<void>;
+}
+/** 06-apps §6 — private app-data API consumed by lifecycle and later execution lanes. */
+export declare const createAppData: (store: StoreAdapter) => AppDataAccess;
+//# sourceMappingURL=app-data.d.ts.map

package/dist/app-data.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-data.d.ts","sourceRoot":"","sources":["../src/app-data.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,WAAW,EACX,KAAK,EACL,SAAS,EACT,IAAI,EACJ,WAAW,EACX,WAAW,EACX,YAAY,EACb,MAAM,eAAe,CAAC;AAIvB,eAAO,MAAM,oBAAoB,QAAa,CAAC;AAC/C,+EAA+E;AAC/E,eAAO,MAAM,kBAAkB,QAAkB,CAAC;AAIlD,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,WAAW,CAAA;CAAE,GACzC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,SAAS,CAAA;CAAE,CAAC;AAExC,kFAAkF;AAClF,eAAO,MAAM,iBAAiB,GAC5B,OAAO,YAAY,EACnB,OAAO,KAAK,EACZ,MAAM,MAAM,EACZ,aAAa,WAAW,KACvB,UAEoE,CAAC;AAaxE,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IAC9D,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,OAAO,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;IACrD,KAAK,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACjD,KAAK,CAAC,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,SAAS,WAAW,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9F;AAgDD,yFAAyF;AACzF,eAAO,MAAM,aAAa,GAAI,OAAO,YAAY,KAAG,aAiElD,CAAC"}

package/dist/app-data.js

@@ -0,0 +1,129 @@
+import { VendoError } from "@vendoai/core";
+import { listAllRecords } from "./persistence.js";
+export const APP_RECORD_MAX_BYTES = 256 * 1024;
+/** ENG-289 M1 — app-declared file collections accept blobs up to 5 MB each. */
+export const APP_BLOB_MAX_BYTES = 5 * 1024 * 1024;
+const encoder = new TextEncoder();
+/** 06-apps §6 — resolve an app declaration onto its isolated store collection. */
+export const resolveAppStorage = (store, appId, name, declaration) => declaration.kind === "files"
+    ? { kind: "files", blobs: store.blobs(`app:${appId}:${name}`) }
+    : { kind: "records", records: store.records(`app:${appId}:${name}`) };
+const allRecordIds = async (records) => (await listAllRecords(records)).map((record) => record.id);
+const clearRecords = async (records) => {
+    for (const id of await allRecordIds(records))
+        await records.delete(id);
+};
+const clearBlobs = async (blobs) => {
+    for (const key of await blobs.list())
+        await blobs.delete(key);
+};
+const declaredStorage = (app, name, kind) => {
+    if (name === "state")
+        throw new VendoError("validation", 'storage collection "state" is reserved');
+    const declaration = app.storage !== undefined
+        && Object.prototype.hasOwnProperty.call(app.storage, name)
+        ? app.storage[name]
+        : undefined;
+    const actualKind = declaration?.kind ?? "records";
+    if (declaration === undefined || actualKind !== kind) {
+        throw new VendoError("not-found", `${kind} collection not found: ${name}`);
+    }
+    return declaration;
+};
+const validateRecordRefs = (declaration, refs) => {
+    if (refs === undefined)
+        return;
+    if (typeof refs !== "object" || refs === null || Array.isArray(refs)) {
+        throw new VendoError("validation", "record refs must be an object");
+    }
+    const declared = declaration.refs ?? {};
+    for (const [key, value] of Object.entries(refs)) {
+        if (!Object.prototype.hasOwnProperty.call(declared, key)) {
+            throw new VendoError("validation", `undeclared record ref: ${key}`);
+        }
+        if (typeof value !== "string" || value.trim() === "") {
+            throw new VendoError("validation", `record ref ${key} must be a non-empty string`);
+        }
+    }
+};
+const recordByteLength = (record) => {
+    try {
+        const serialized = JSON.stringify(record);
+        if (serialized === undefined)
+            throw new Error("record is not JSON serializable");
+        return encoder.encode(serialized).byteLength;
+    }
+    catch {
+        throw new VendoError("validation", "record must be valid JSON");
+    }
+};
+/** 06-apps §6 — private app-data API consumed by lifecycle and later execution lanes. */
+export const createAppData = (store) => ({
+    async getState(appId, subject) {
+        const record = await store.records("vendo_state").get(`${appId}:${subject}`);
+        return record === null ? null : structuredClone(record.data);
+    },
+    async setState(appId, subject, data) {
+        await store.records("vendo_state").put({
+            id: `${appId}:${subject}`,
+            data: structuredClone(data),
+            refs: { subject, app_id: appId },
+        });
+    },
+    records(app, name) {
+        const declaration = declaredStorage(app, name, "records");
+        const storage = resolveAppStorage(store, app.id, name, declaration);
+        if (storage.kind !== "records") {
+            throw new VendoError("not-found", `records collection not found: ${name}`);
+        }
+        return {
+            get: (id) => storage.records.get(id),
+            async put(record) {
+                validateRecordRefs(declaration, record.refs);
+                if (recordByteLength(record) > APP_RECORD_MAX_BYTES) {
+                    throw new VendoError("validation", "record exceeds 256 KB size limit");
+                }
+                return storage.records.put(record);
+            },
+            delete: (id) => storage.records.delete(id),
+            list: (query) => storage.records.list(query),
+        };
+    },
+    blobs(app, name) {
+        const declaration = declaredStorage(app, name, "files");
+        const storage = resolveAppStorage(store, app.id, name, declaration);
+        if (storage.kind !== "files") {
+            throw new VendoError("not-found", `files collection not found: ${name}`);
+        }
+        return {
+            async put(key, bytes, meta) {
+                if (bytes.byteLength > APP_BLOB_MAX_BYTES) {
+                    throw new VendoError("validation", "blob exceeds 5 MB size limit");
+                }
+                await storage.blobs.put(key, bytes, meta);
+            },
+            get: (key) => storage.blobs.get(key),
+            delete: (key) => storage.blobs.delete(key),
+            list: (prefix) => storage.blobs.list(prefix),
+        };
+    },
+    async clear(app, subject, historical = []) {
+        const declarations = new Map();
+        for (const document of [...historical, app]) {
+            for (const [name, declaration] of Object.entries(document.storage ?? {})) {
+                declarations.set(`${name}:${declaration.kind ?? "records"}`, declaration);
+            }
+        }
+        for (const [key, declaration] of declarations) {
+            const name = key.slice(0, key.lastIndexOf(":"));
+            const storage = resolveAppStorage(store, app.id, name, declaration);
+            if (storage.kind === "records")
+                await clearRecords(storage.records);
+            else
+                await clearBlobs(storage.blobs);
+        }
+        await store.records("vendo_state").delete(`${app.id}:${subject}`);
+        await clearBlobs(store.blobs(`app:${app.id}`));
+    },
+});
+//# sourceMappingURL=app-data.js.map

package/dist/app-data.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-data.js","sourceRoot":"","sources":["../src/app-data.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,GAAG,IAAI,CAAC;AAC/C,+EAA+E;AAC/E,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAElD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAMlC,kFAAkF;AAClF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,KAAmB,EACnB,KAAY,EACZ,IAAY,EACZ,WAAwB,EACZ,EAAE,CAAC,WAAW,CAAC,IAAI,KAAK,OAAO;IAC3C,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,EAAE,CAAC,EAAE;IAC/D,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,KAAK,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;AAExE,MAAM,YAAY,GAAG,KAAK,EAAE,OAAoB,EAAqB,EAAE,CACrE,CAAC,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAE7D,MAAM,YAAY,GAAG,KAAK,EAAE,OAAoB,EAAiB,EAAE;IACjE,KAAK,MAAM,EAAE,IAAI,MAAM,YAAY,CAAC,OAAO,CAAC;QAAE,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACzE,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,KAAK,EAAE,KAAgB,EAAiB,EAAE;IAC3D,KAAK,MAAM,GAAG,IAAI,MAAM,KAAK,CAAC,IAAI,EAAE;QAAE,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAChE,CAAC,CAAC;AAUF,MAAM,eAAe,GAAG,CACtB,GAAgB,EAChB,IAAY,EACZ,IAAyB,EACZ,EAAE;IACf,IAAI,IAAI,KAAK,OAAO;QAAE,MAAM,IAAI,UAAU,CAAC,YAAY,EAAE,wCAAwC,CAAC,CAAC;IACnG,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,KAAK,SAAS;WACxC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC;QAC1D,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;QACnB,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,UAAU,GAAG,WAAW,EAAE,IAAI,IAAI,SAAS,CAAC;IAClD,IAAI,WAAW,KAAK,SAAS,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACrD,MAAM,IAAI,UAAU,CAAC,WAAW,EAAE,GAAG,IAAI,0BAA0B,IAAI,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,CACzB,WAAwB,EACxB,IAAwC,EAClC,EAAE;IACR,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO;IAC/B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,UAAU,CAAC,YAAY,EAAE,+BAA+B,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,IAAI,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,UAAU,CAAC,YAAY,EAAE,0BAA0B,GAAG,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACrD,MAAM,IAAI,UAAU,CAAC,YAAY,EAAE,cAAc,GAAG,6BAA6B,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,CAAC,MAAyC,EAAU,EAAE;IAC7E,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,UAAU,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACjF,OAAO,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,UAAU,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,UAAU,CAAC,YAAY,EAAE,2BAA2B,CAAC,CAAC;IAClE,CAAC;AACH,CAAC,CAAC;AAEF,yFAAyF;AACzF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,KAAmB,EAAiB,EAAE,CAAC,CAAC;IACpE,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO;QAC3B,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,IAAI,OAAO,EAAE,CAAC,CAAC;QAC7E,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC/D,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI;QACjC,MAAM,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC;YACrC,EAAE,EAAE,GAAG,KAAK,IAAI,OAAO,EAAE;YACzB,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC;YAC3B,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE;SACjC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,CAAC,GAAG,EAAE,IAAI;QACf,MAAM,WAAW,GAAG,eAAe,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;QACpE,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,IAAI,UAAU,CAAC,WAAW,EAAE,iCAAiC,IAAI,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO;YACL,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,KAAK,CAAC,GAAG,CAAC,MAAM;gBACd,kBAAkB,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC7C,IAAI,gBAAgB,CAAC,MAAM,CAAC,GAAG,oBAAoB,EAAE,CAAC;oBACpD,MAAM,IAAI,UAAU,CAAC,YAAY,EAAE,kCAAkC,CAAC,CAAC;gBACzE,CAAC;gBACD,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACrC,CAAC;YACD,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1C,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;SAC7C,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,GAAG,EAAE,IAAI;QACb,MAAM,WAAW,GAAG,eAAe,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;QACpE,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC7B,MAAM,IAAI,UAAU,CAAC,WAAW,EAAE,+BAA+B,IAAI,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO;YACL,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI;gBACxB,IAAI,KAAK,CAAC,UAAU,GAAG,kBAAkB,EAAE,CAAC;oBAC1C,MAAM,IAAI,UAAU,CAAC,YAAY,EAAE,8BAA8B,CAAC,CAAC;gBACrE,CAAC;gBACD,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YAC5C,CAAC;YACD,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;YACpC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC;YAC1C,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;SAC7C,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,UAAU,GAAG,EAAE;QACvC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAuB,CAAC;QACpD,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC;YAC5C,KAAK,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;gBACzE,YAAY,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,WAAW,CAAC,IAAI,IAAI,SAAS,EAAE,EAAE,WAAW,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,YAAY,EAAE,CAAC;YAC9C,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;YAChD,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;YACpE,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;gBAAE,MAAM,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;;gBAC/D,MAAM,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,EAAE,IAAI,OAAO,EAAE,CAAC,CAAC;QAClE,MAAM,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACjD,CAAC;CACF,CAAC,CAAC"}

package/dist/app-token.d.ts

@@ -0,0 +1,24 @@
+import { type AppId, type StoreAdapter } from "@vendoai/core";
+/** execution-v2 skin contract — the per-app bearer the box calls back with.
+ * Minted at provision (Lane B) and presented on every callback-surface request
+ * (VENDO_STORE_URL rows + VENDO_HOST_URL tools). Follows the house de-HMAC
+ * pattern (wire/context.ts anon cookie): the token itself is an opaque 256-bit
+ * random value and the STORE ROW IS THE AUTHORITY — only its SHA-256 hash is
+ * persisted (row id = hash), so a store dump never yields a usable bearer and
+ * guessing a live token is a 2^256 search. Rotation = re-mint (the old hash
+ * row is deleted); revocation = delete the app's rows. */
+export declare const APP_TOKEN_COLLECTION = "vendo_app_tokens";
+export interface AppTokenIdentity {
+    appId: AppId;
+    subject: string;
+}
+export interface AppTokens {
+    /** Mint (and rotate: any previous token for the app stops verifying). */
+    mint(appId: AppId, subject: string): Promise<string>;
+    /** Resolve a presented bearer to its app + owner, or null. Never throws. */
+    verify(token: string): Promise<AppTokenIdentity | null>;
+    /** Delete every token for the app (app deletion / de-provision). */
+    revoke(appId: AppId): Promise<void>;
+}
+export declare const createAppTokens: (store: StoreAdapter) => AppTokens;
+//# sourceMappingURL=app-token.d.ts.map

package/dist/app-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-token.d.ts","sourceRoot":"","sources":["../src/app-token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,KAAK,KAAK,EAAE,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AAEzE;;;;;;;0DAO0D;AAE1D,eAAO,MAAM,oBAAoB,qBAAqB,CAAC;AAIvD,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,KAAK,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,SAAS;IACxB,yEAAyE;IACzE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,4EAA4E;IAC5E,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IACxD,oEAAoE;IACpE,MAAM,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACrC;AAED,eAAO,MAAM,eAAe,GAAI,OAAO,YAAY,KAAG,SA6CrD,CAAC"}

package/dist/app-token.js

@@ -0,0 +1,61 @@
+import { sha256Hex } from "@vendoai/core";
+/** execution-v2 skin contract — the per-app bearer the box calls back with.
+ * Minted at provision (Lane B) and presented on every callback-surface request
+ * (VENDO_STORE_URL rows + VENDO_HOST_URL tools). Follows the house de-HMAC
+ * pattern (wire/context.ts anon cookie): the token itself is an opaque 256-bit
+ * random value and the STORE ROW IS THE AUTHORITY — only its SHA-256 hash is
+ * persisted (row id = hash), so a store dump never yields a usable bearer and
+ * guessing a live token is a 2^256 search. Rotation = re-mint (the old hash
+ * row is deleted); revocation = delete the app's rows. */
+export const APP_TOKEN_COLLECTION = "vendo_app_tokens";
+const TOKEN_PATTERN = /^vat_[0-9a-f]{64}$/;
+export const createAppTokens = (store) => {
+    const records = store.records(APP_TOKEN_COLLECTION);
+    const revoke = async (appId) => {
+        // Re-list from the start after each deleted page instead of following the
+        // cursor: deleting mid-pagination can skip rows under an offset-shaped
+        // cursor. Terminates because every pass deletes everything it saw.
+        for (;;) {
+            const page = await records.list({ refs: { app_id: appId } });
+            if (page.records.length === 0)
+                return;
+            for (const record of page.records)
+                await records.delete(record.id);
+            if (page.cursor === undefined)
+                return;
+        }
+    };
+    return {
+        async mint(appId, subject) {
+            // One live token per app: minting rotates, so a leaked pre-rotation
+            // bearer dies with the re-provision instead of accumulating. Rotation is
+            // revoke-then-put without a store transaction; the provision path that
+            // calls mint is single-flighted per app (machine lifecycle), so
+            // concurrent mints for one app do not occur in practice — racing mints
+            // could each leave a verifiable row until the next rotation.
+            await revoke(appId);
+            const bytes = globalThis.crypto.getRandomValues(new Uint8Array(32));
+            const token = `vat_${[...bytes].map((byte) => byte.toString(16).padStart(2, "0")).join("")}`;
+            await records.put({
+                id: sha256Hex(token),
+                data: { mintedAt: new Date().toISOString() },
+                refs: { app_id: appId, subject },
+            });
+            return token;
+        },
+        async verify(token) {
+            if (!TOKEN_PATTERN.test(token))
+                return null;
+            // Constant-work by construction: the hash lookup is a store key equality
+            // on a value the caller cannot choose collisions for (cf. run-token HMAC).
+            const record = await records.get(sha256Hex(token));
+            const appId = record?.refs?.["app_id"];
+            const subject = record?.refs?.["subject"];
+            if (typeof appId !== "string" || typeof subject !== "string")
+                return null;
+            return { appId, subject };
+        },
+        revoke,
+    };
+};
+//# sourceMappingURL=app-token.js.map

package/dist/app-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-token.js","sourceRoot":"","sources":["../src/app-token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAiC,MAAM,eAAe,CAAC;AAEzE;;;;;;;0DAO0D;AAE1D,MAAM,CAAC,MAAM,oBAAoB,GAAG,kBAAkB,CAAC;AAEvD,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAgB3C,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAAmB,EAAa,EAAE;IAChE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAEpD,MAAM,MAAM,GAAG,KAAK,EAAE,KAAY,EAAiB,EAAE;QACnD,0EAA0E;QAC1E,uEAAuE;QACvE,mEAAmE;QACnE,SAAS,CAAC;YACR,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YAC7D,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YACtC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO;gBAAE,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACnE,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;gBAAE,OAAO;QACxC,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO;YACvB,oEAAoE;YACpE,yEAAyE;YACzE,uEAAuE;YACvE,gEAAgE;YAChE,uEAAuE;YACvE,6DAA6D;YAC7D,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;YACpE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YAC7F,MAAM,OAAO,CAAC,GAAG,CAAC;gBAChB,EAAE,EAAE,SAAS,CAAC,KAAK,CAAC;gBACpB,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE;gBAC5C,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE;aACjC,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,KAAK;YAChB,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC5C,yEAAyE;YACzE,2EAA2E;YAC3E,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;YACnD,MAAM,KAAK,GAAG,MAAM,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC;YACvC,MAAM,OAAO,GAAG,MAAM,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC;YAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,OAAO,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC1E,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAC5B,CAAC;QACD,MAAM;KACP,CAAC;AACJ,CAAC,CAAC"}

package/dist/audit.d.ts

@@ -0,0 +1,11 @@
+import type { AppId, AuditEvent, Json, Principal, RunContext, TriggerRef } from "@vendoai/core";
+/**
+ * 01-core §7 — the one mint for this package's "app-lifecycle" audit events
+ * (runtime guard/lifecycle reports, interchange export/import, schedule
+ * fires). Copies the principal and trigger so a caller's context object never
+ * aliases the emitted event.
+ */
+export declare const appLifecycleEvent: (principal: Principal, ctx: Pick<RunContext, "venue" | "presence"> & {
+    trigger?: TriggerRef;
+}, appId: AppId, detail: Record<string, Json>, outcome?: AuditEvent["outcome"]) => AuditEvent;
+//# sourceMappingURL=audit.d.ts.map

package/dist/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,KAAK,EACL,UAAU,EACV,IAAI,EACJ,SAAS,EACT,UAAU,EACV,UAAU,EACX,MAAM,eAAe,CAAC;AAEvB;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,GAC5B,WAAW,SAAS,EACpB,KAAK,IAAI,CAAC,UAAU,EAAE,OAAO,GAAG,UAAU,CAAC,GAAG;IAAE,OAAO,CAAC,EAAE,UAAU,CAAA;CAAE,EACtE,OAAO,KAAK,EACZ,QAAQ,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,EAC5B,UAAS,UAAU,CAAC,SAAS,CAAQ,KACpC,UAWD,CAAC"}

package/dist/audit.js

@@ -0,0 +1,19 @@
+/**
+ * 01-core §7 — the one mint for this package's "app-lifecycle" audit events
+ * (runtime guard/lifecycle reports, interchange export/import, schedule
+ * fires). Copies the principal and trigger so a caller's context object never
+ * aliases the emitted event.
+ */
+export const appLifecycleEvent = (principal, ctx, appId, detail, outcome = "ok") => ({
+    id: `aud_${globalThis.crypto.randomUUID()}`,
+    at: new Date().toISOString(),
+    kind: "app-lifecycle",
+    principal: { ...principal },
+    venue: ctx.venue,
+    presence: ctx.presence,
+    appId,
+    ...(ctx.trigger === undefined ? {} : { trigger: { ...ctx.trigger } }),
+    outcome,
+    detail,
+});
+//# sourceMappingURL=audit.js.map

package/dist/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AASA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,SAAoB,EACpB,GAAsE,EACtE,KAAY,EACZ,MAA4B,EAC5B,UAAiC,IAAI,EACzB,EAAE,CAAC,CAAC;IAChB,EAAE,EAAE,OAAO,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE;IAC3C,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IAC5B,IAAI,EAAE,eAAe;IACrB,SAAS,EAAE,EAAE,GAAG,SAAS,EAAE;IAC3B,KAAK,EAAE,GAAG,CAAC,KAAK;IAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;IACtB,KAAK;IACL,GAAG,CAAC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;IACrE,OAAO;IACP,MAAM;CACP,CAAC,CAAC"}

package/dist/automation-plan.d.ts

@@ -0,0 +1,43 @@
+import { type ShapeType, type Trigger } from "@vendoai/core";
+import type { LanguageModel } from "ai";
+import { type HostToolInfo } from "./engine.js";
+/**
+ * execution-v2 Wave 9 — the escalation ladder's automation authoring: ONE
+ * structured model call turns a server-shaped instruction into a Trigger the
+ * EXISTING automations engine runs (07-automations), plus the results
+ * collection the tree binds. No new automation machinery — the plan is just
+ * the document fields (`trigger`, a `storage` declaration) the engine already
+ * consumes; setup completes in seconds because no machine is involved.
+ */
+export interface AutomationPlanInput {
+    appId: string;
+    appName: string;
+    instruction: string;
+    /** The judge's rung: (a) steps or (b) agentic (see engine.serverWorkRung). */
+    mode: "steps" | "agentic";
+    /** The tools steps may name / the agentic prompt may reference — the SAME
+     *  guard-bound surface the automations engine executes through. */
+    tools: readonly HostToolInfo[];
+    /** Sampled result shapes (the engine's shape cards, keyed by tool name):
+     *  without them the model guesses output fields and the jsonata reads
+     *  nothing (the live-gate "steps.unpaid.items" class). */
+    toolShapes?: Readonly<Record<string, ShapeType>>;
+}
+export interface AutomationPlan {
+    trigger: Trigger;
+    name?: string;
+    /** The app records collection the automation writes displayable results
+     *  into (the store rows the tree queries via vendo_apps_data_list). */
+    resultsCollection?: string;
+}
+export type AutomationPlanResult = {
+    kind: "plan";
+    plan: AutomationPlan;
+} | {
+    kind: "failure";
+    issues: string[];
+};
+/** Author the automation for one ladder rung: up to 3 model attempts, each
+ *  repair fed the accumulated issues (the engine's create/edit loop shape). */
+export declare const planAutomation: (input: AutomationPlanInput, model: LanguageModel) => Promise<AutomationPlanResult>;
+//# sourceMappingURL=automation-plan.d.ts.map

package/dist/automation-plan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"automation-plan.d.ts","sourceRoot":"","sources":["../src/automation-plan.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,SAAS,EACd,KAAK,OAAO,EACb,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AAExC,OAAO,EAAkB,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhE;;;;;;;GAOG;AAEH,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,8EAA8E;IAC9E,IAAI,EAAE,OAAO,GAAG,SAAS,CAAC;IAC1B;uEACmE;IACnE,KAAK,EAAE,SAAS,YAAY,EAAE,CAAC;IAC/B;;8DAE0D;IAC1D,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;CAClD;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;2EACuE;IACvE,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,oBAAoB,GAC5B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,cAAc,CAAA;CAAE,GACtC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAiN1C;+EAC+E;AAC/E,eAAO,MAAM,cAAc,GACzB,OAAO,mBAAmB,EAC1B,OAAO,aAAa,KACnB,OAAO,CAAC,oBAAoB,CAe9B,CAAC"}