@vibesdotdev/tools 0.0.0-stage → 1.0.0-rc.4

package/dist/agents/approval/store.d.ts

@@ -0,0 +1,36 @@
+import { type RuntimeRef } from '@vibesdotdev/kernel';
+import type { ApprovalRequest, ApprovalResponse } from './schemas.ts';
+import { type RegisterApprovalOptions, type PendingApprovalRequest } from '../schemas/pending-approval.ts';
+export type { RegisterApprovalOptions } from '../schemas/pending-approval.ts';
+/** Pending decisions belong to ToolsClient.approval and close with that owner. */
+export declare class PendingApprovalStore {
+    private readonly runtime;
+    private readonly entries;
+    private readonly close;
+    private listening;
+    private disposed;
+    constructor(runtime: RuntimeRef);
+    register(request: ApprovalRequest, input: RegisterApprovalOptions): Promise<{
+        approved: boolean;
+        response: ApprovalResponse;
+    }>;
+    resolve(response: ApprovalResponse & {
+        approved: boolean;
+    }): boolean;
+    cancel(requestId: string, error: Error): void;
+    list(): PendingApprovalRequest[];
+    clear(error?: Error): void;
+    dispose(): void;
+    private take;
+}
+export declare function registerPendingApproval(runtime: RuntimeRef, request: ApprovalRequest, options: RegisterApprovalOptions): Promise<{
+    approved: boolean;
+    response: ApprovalResponse;
+}>;
+export declare function resolvePendingApproval(runtime: RuntimeRef, response: ApprovalResponse & {
+    approved: boolean;
+}): boolean;
+export declare function cancelPendingApproval(runtime: RuntimeRef, requestId: string, error: Error): void;
+export declare function listPendingApprovals(runtime: RuntimeRef): PendingApprovalRequest[];
+export declare function clearPendingApprovals(runtime: RuntimeRef): void;
+//# sourceMappingURL=store.d.ts.map

package/dist/agents/approval/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../../src/agents/approval/store.ts"],"names":[],"mappings":"AACA,OAAO,EAAmB,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAGvE,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACtE,OAAO,EAAiC,KAAK,uBAAuB,EAAE,KAAK,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAE1I,YAAY,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAS9E,kFAAkF;AAClF,qBAAa,oBAAoB;IAOpB,OAAO,CAAC,QAAQ,CAAC,OAAO;IANpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA2C;IAEnE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAwB;IAC9C,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,QAAQ,CAAS;gBAEI,OAAO,EAAE,UAAU;IAEhD,QAAQ,CAAC,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,gBAAgB,CAAA;KAAE,CAAC;IAkC9H,OAAO,CAAC,QAAQ,EAAE,gBAAgB,GAAG;QAAE,QAAQ,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO;IAOpE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI;IAI7C,IAAI,IAAI,sBAAsB,EAAE;IAIhC,KAAK,CAAC,KAAK,QAAoC,GAAG,IAAI;IAItD,OAAO,IAAI,IAAI;IAWf,OAAO,CAAC,IAAI;CAQZ;AAYD,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,uBAAuB;cApF9B,OAAO;cAAY,gBAAgB;GAsF3H;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,gBAAgB,GAAG;IAAE,QAAQ,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAEvH;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI,CAEhG;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,UAAU,GAAG,sBAAsB,EAAE,CAElF;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,CAE/D"}

package/dist/agents/approval/store.js

@@ -0,0 +1,107 @@
+import { nanoid } from 'nanoid';
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { tryGetVibesClient } from '@vibesdotdev/kernel/client';
+import { RegisterApprovalOptionsSchema } from "../schemas/pending-approval.js";
+/** Pending decisions belong to ToolsClient.approval and close with that owner. */
+export class PendingApprovalStore {
+    runtime;
+    entries = new Map();
+    close = () => this.dispose();
+    listening = false;
+    disposed = false;
+    constructor(runtime) {
+        this.runtime = runtime;
+    }
+    register(request, input) {
+        const options = RegisterApprovalOptionsSchema.parse(input);
+        if (this.disposed || this.runtime.lifecycle.signal.aborted) {
+            throw new CapabilityError('The Tools approval owner was disposed.', 'UNAVAILABLE', {
+                reason: 'tools-approval-disposed', retryable: false
+            });
+        }
+        if (!this.listening) {
+            this.runtime.lifecycle.signal.addEventListener('abort', this.close, { once: true });
+            this.listening = true;
+        }
+        const enrichedRequest = {
+            ...request,
+            requestId: request.requestId || `approval_${nanoid()}`,
+            jobId: options.jobId,
+            sessionId: options.sessionId,
+            channel: options.channel,
+            agentId: options.agentId,
+            agentName: options.agentName
+        };
+        // Replacing a request must settle its previous waiter and disarm its deadline.
+        this.cancel(enrichedRequest.requestId, new Error('APPROVAL_STORE_RESET'));
+        return new Promise((resolve, reject) => {
+            const entry = { request: enrichedRequest, resolve, reject };
+            if (options.timeoutMs && options.timeoutMs > 0) {
+                entry.disarm = this.runtime.lifecycle.timeout(() => {
+                    this.cancel(enrichedRequest.requestId, new Error('APPROVAL_TIMEOUT'));
+                }, options.timeoutMs);
+            }
+            this.entries.set(enrichedRequest.requestId, entry);
+        });
+    }
+    resolve(response) {
+        const entry = this.take(response.requestId);
+        if (!entry)
+            return false;
+        entry.resolve({ approved: response.approved, response });
+        return true;
+    }
+    cancel(requestId, error) {
+        this.take(requestId)?.reject(error);
+    }
+    list() {
+        return Array.from(this.entries.values(), entry => entry.request);
+    }
+    clear(error = new Error('APPROVAL_STORE_RESET')) {
+        for (const requestId of this.entries.keys())
+            this.cancel(requestId, error);
+    }
+    dispose() {
+        this.disposed = true;
+        if (this.listening) {
+            this.runtime.lifecycle.signal.removeEventListener('abort', this.close);
+            this.listening = false;
+        }
+        this.clear(new CapabilityError('The Tools approval owner was disposed.', 'UNAVAILABLE', {
+            reason: 'tools-approval-disposed', retryable: false
+        }));
+    }
+    take(requestId) {
+        const entry = this.entries.get(requestId);
+        if (entry) {
+            this.entries.delete(requestId);
+            entry.disarm?.();
+        }
+        return entry;
+    }
+}
+function pendingFor(runtime) {
+    const client = tryGetVibesClient('tools', runtime);
+    if (!client) {
+        throw new CapabilityError('Activate the Tools client before accessing pending approvals.', 'UNAVAILABLE', {
+            reason: 'tools-client-unavailable', retryable: false
+        });
+    }
+    return client.approval.pending;
+}
+export function registerPendingApproval(runtime, request, options) {
+    return pendingFor(runtime).register(request, options);
+}
+export function resolvePendingApproval(runtime, response) {
+    return pendingFor(runtime).resolve(response);
+}
+export function cancelPendingApproval(runtime, requestId, error) {
+    pendingFor(runtime).cancel(requestId, error);
+}
+export function listPendingApprovals(runtime) {
+    return pendingFor(runtime).list();
+}
+export function clearPendingApprovals(runtime) {
+    pendingFor(runtime).clear();
+}
+//# sourceMappingURL=store.js.map

package/dist/agents/approval/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../../src/agents/approval/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,eAAe,EAAmB,MAAM,qBAAqB,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAG/D,OAAO,EAAE,6BAA6B,EAA6D,MAAM,gCAAgC,CAAC;AAW1I,kFAAkF;AAClF,MAAM,OAAO,oBAAoB;IAOH;IANZ,OAAO,GAAG,IAAI,GAAG,EAAgC,CAAC;IAElD,KAAK,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;IACtC,SAAS,GAAG,KAAK,CAAC;IAClB,QAAQ,GAAG,KAAK,CAAC;IAEzB,YAA6B,OAAmB;QAAnB,YAAO,GAAP,OAAO,CAAY;IAAG,CAAC;IAEpD,QAAQ,CAAC,OAAwB,EAAE,KAA8B;QAChE,MAAM,OAAO,GAAG,6BAA6B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3D,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC5D,MAAM,IAAI,eAAe,CAAC,wCAAwC,EAAE,aAAa,EAAE;gBAClF,MAAM,EAAE,yBAAyB,EAAE,SAAS,EAAE,KAAK;aACnD,CAAC,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACrB,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACpF,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACvB,CAAC;QACD,MAAM,eAAe,GAAG;YACvB,GAAG,OAAO;YACV,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,YAAY,MAAM,EAAE,EAAE;YACtD,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,SAAS,EAAE,OAAO,CAAC,SAAS;SAC5B,CAAC;QAEF,+EAA+E;QAC/E,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAC1E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACtC,MAAM,KAAK,GAAyB,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;YAClF,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;gBAChD,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE;oBAClD,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC;gBACvE,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;YACvB,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,QAAkD;QACzD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,CAAC,SAAiB,EAAE,KAAY;QACrC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IAED,IAAI;QACH,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,sBAAsB,CAAC;QAC9C,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;YAAE,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC5E,CAAC;IAED,OAAO;QACN,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YACvE,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACxB,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,IAAI,eAAe,CAAC,wCAAwC,EAAE,aAAa,EAAE;YACvF,MAAM,EAAE,yBAAyB,EAAE,SAAS,EAAE,KAAK;SACnD,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,IAAI,CAAC,SAAiB;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC/B,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QAClB,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;CACD;AAED,SAAS,UAAU,CAAC,OAAmB;IACtC,MAAM,MAAM,GAAG,iBAAiB,CAAc,OAAO,EAAE,OAAO,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,MAAM,IAAI,eAAe,CAAC,+DAA+D,EAAE,aAAa,EAAE;YACzG,MAAM,EAAE,0BAA0B,EAAE,SAAS,EAAE,KAAK;SACpD,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAmB,EAAE,OAAwB,EAAE,OAAgC;IACtH,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAmB,EAAE,QAAkD;IAC7G,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAmB,EAAE,SAAiB,EAAE,KAAY;IACzF,UAAU,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAmB;IACvD,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAmB;IACxD,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC;AAC7B,CAAC"}

package/dist/agents/approval/types.d.ts

@@ -0,0 +1,3 @@
+export * from '@vibesdotdev/ai-schemas/agents/approval/types';
+export type { ToolApprovalRuntime } from '../contracts/approval-types.ts';
+//# sourceMappingURL=types.d.ts.map

package/dist/agents/approval/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/agents/approval/types.ts"],"names":[],"mappings":"AAEA,cAAc,+CAA+C,CAAC;AAC9D,YAAY,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC"}

package/dist/agents/approval/types.js

@@ -0,0 +1,4 @@
+// The approval request and decision are wire data owned by @vibesdotdev/ai-schemas; the port is
+// owned by ../contracts/approval-types.ts. Re-exported here so existing imports keep resolving.
+export * from '@vibesdotdev/ai-schemas/agents/approval/types';
+//# sourceMappingURL=types.js.map

package/dist/agents/approval/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/agents/approval/types.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,gGAAgG;AAChG,cAAc,+CAA+C,CAAC"}

package/dist/agents/approval/when-to-ask.prompt.descriptor.d.ts

@@ -0,0 +1,135 @@
+/**
+ * `tools.approval.when-to-ask`: the instruction an agent gets when its task carries
+ * an approval policy. The policy's `changes` fill it in (`ask`, `never`, `auto`);
+ * the agent judges its own change against them and calls `request-approval`.
+ */
+export declare const whenToAskPromptManifest: {
+    id: string;
+    version: string;
+    name: string;
+    description: string;
+    type: "system";
+    category: "development";
+    tags: string[];
+    scope: "builtin";
+    isPublic: boolean;
+    generator: "template";
+    content: string;
+    metadata: {
+        author: string;
+        source: string;
+    };
+};
+export declare const whenToAskPromptDescriptor: {
+    id: string;
+    kind: "prompts/manifest";
+    owner: string;
+    manifest: {
+        id: string;
+        version: string;
+        name: string;
+        description: string;
+        type: "system" | "workflow" | "specialist" | "tool" | "extraction";
+        tags: string[];
+        scope: "user" | "shared" | "builtin" | "project";
+        isPublic: boolean;
+        content: string;
+        generator: "static" | "template" | "dynamic";
+        category?: "custom" | "generation" | "extraction" | "development" | "knowledge" | "chat" | "analysis" | "validation" | undefined;
+        ownerId?: string | undefined;
+        projectId?: string | undefined;
+        sections?: {
+            key: string;
+            title: string;
+            content: string;
+            order: number;
+            collapsible: boolean;
+            conditional?: string | undefined;
+        }[] | undefined;
+        contentPath?: string | undefined;
+        tools?: string[] | undefined;
+        contextRequired?: string[] | undefined;
+        modelConfig?: {
+            model?: string | undefined;
+            temperature?: number | undefined;
+            maxTokens?: number | undefined;
+            topP?: number | undefined;
+            stopSequences?: string[] | undefined;
+        } | undefined;
+        knowledgeBaseIds?: string[] | undefined;
+        dependencies?: string[] | undefined;
+        composedWith?: string[] | undefined;
+        inject?: "tools"[] | undefined;
+        arguments?: {
+            name: string;
+            description: string;
+            type: "string" | "number" | "boolean" | "file" | "select" | "multiselect" | "text" | "json";
+            required: boolean;
+            default?: unknown;
+            options?: {
+                label: string;
+                value: string;
+                description?: string | undefined;
+            }[] | undefined;
+            validation?: string | undefined;
+            placeholder?: string | undefined;
+        }[] | undefined;
+        templateEngine?: "handlebars" | "mustache" | "native" | undefined;
+        transform?: {
+            inputSchema?: Record<string, unknown> | undefined;
+            transformPath?: string | undefined;
+            transformSpread?: {
+                spreadFrom?: ("data" | "user" | "project" | "session")[] | undefined;
+                assigns?: Record<string, {
+                    literal: import("@vibesdotdev/kernel/bootstrap").JsonValue;
+                } | {
+                    path: string;
+                }> | undefined;
+            } | undefined;
+        } | undefined;
+        versions?: {
+            version: string;
+            createdAt: string;
+            changelog?: string | undefined;
+            parentVersion?: string | undefined;
+            author?: string | undefined;
+        }[] | undefined;
+        currentVersion?: {
+            version: string;
+            createdAt: string;
+            changelog?: string | undefined;
+            parentVersion?: string | undefined;
+            author?: string | undefined;
+        } | undefined;
+        metadata?: {
+            author?: string | undefined;
+            license?: string | undefined;
+            source?: string | undefined;
+            related?: string[] | undefined;
+            custom?: Record<string, unknown> | undefined;
+        } | undefined;
+        createdAt?: string | undefined;
+        updatedAt?: string | undefined;
+    };
+    name?: string | undefined;
+    description?: string | undefined;
+    tags?: string[] | undefined;
+    hardware?: string[] | undefined;
+    enabled?: boolean | undefined;
+    priority?: number | undefined;
+    capabilityId?: string | undefined;
+    requiredContext?: string[] | undefined;
+    optionalContext?: string[] | undefined;
+    config?: unknown;
+    retention?: string | {
+        reason: string;
+        maxAgeDays?: number | undefined;
+        maxEntries?: number | undefined;
+        maxBytes?: number | undefined;
+        cascadeFrom?: string | undefined;
+        ageField?: string | undefined;
+        enforcedBy?: string | undefined;
+    } | undefined;
+};
+export default whenToAskPromptDescriptor;
+//# sourceMappingURL=when-to-ask.prompt.descriptor.d.ts.map

package/dist/agents/approval/when-to-ask.prompt.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"when-to-ask.prompt.descriptor.d.ts","sourceRoot":"","sources":["../../../src/agents/approval/when-to-ask.prompt.descriptor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;CAwBnC,CAAC;AAEF,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAA8E,CAAC;AAErH,eAAe,yBAAyB,CAAC"}

package/dist/agents/approval/when-to-ask.prompt.descriptor.js

@@ -0,0 +1,35 @@
+/**
+ * `tools.approval.when-to-ask`: the instruction an agent gets when its task carries
+ * an approval policy. The policy's `changes` fill it in (`ask`, `never`, `auto`);
+ * the agent judges its own change against them and calls `request-approval`.
+ */
+import { definePromptManifestDescriptor } from '@vibesdotdev/ai-schemas';
+import { APPROVAL_WHEN_TO_ASK_PROMPT_ID } from '@vibesdotdev/ai-schemas/agents/schemas/approval-policy';
+export const whenToAskPromptManifest = {
+    id: APPROVAL_WHEN_TO_ASK_PROMPT_ID,
+    version: '1.0.0',
+    name: 'When to ask for approval',
+    description: 'Tells an agent which kinds of change need approval and how to ask with request-approval',
+    type: 'system',
+    category: 'development',
+    tags: ['approval', 'agents', 'instructions'],
+    scope: 'builtin',
+    isPublic: false,
+    generator: 'template',
+    content: [
+        'Approval. Some kinds of change need a person to approve them first.',
+        '{{#if ask}}Ask first before: {{ask}}.{{/if}}',
+        '{{#if never}}Never make: {{never}}.{{/if}}',
+        '{{#if auto}}Go ahead without asking: {{auto}}.{{/if}}',
+        'To ask, call `request-approval` with what you intend to do, why it is the right change, the paths it touches, and what you checked. Wait for the answer.',
+        'If it is approved, make the change. Approval covers only the stated change; it does not grant custody of someone else’s work or permission outside the task. If it is declined, do not make it: say so in your report and carry on with the rest of your work.',
+        'Classify by effect, not by file name or size. A refactor preserves public behavior and capabilities. If a change also falls into an ask or never category, that category still applies; do not relabel it as a refactor. A canonical replacement justifies preserving a capability elsewhere; it does not waive configured approval requirements. When unsure, ask.'
+    ].join('\n'),
+    metadata: {
+        author: 'vibes',
+        source: 'tools/src/agents/approval/when-to-ask.prompt.descriptor.ts'
+    }
+};
+export const whenToAskPromptDescriptor = definePromptManifestDescriptor(whenToAskPromptManifest, { owner: 'tools' });
+export default whenToAskPromptDescriptor;
+//# sourceMappingURL=when-to-ask.prompt.descriptor.js.map

package/dist/agents/approval/when-to-ask.prompt.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"when-to-ask.prompt.descriptor.js","sourceRoot":"","sources":["../../../src/agents/approval/when-to-ask.prompt.descriptor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,8BAA8B,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,8BAA8B,EAAE,MAAM,wDAAwD,CAAC;AAExG,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACtC,EAAE,EAAE,8BAA8B;IAClC,OAAO,EAAE,OAAO;IAChB,IAAI,EAAE,0BAA0B;IAChC,WAAW,EAAE,yFAAyF;IACtG,IAAI,EAAE,QAAiB;IACvB,QAAQ,EAAE,aAAsB;IAChC,IAAI,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,cAAc,CAAC;IAC5C,KAAK,EAAE,SAAkB;IACzB,QAAQ,EAAE,KAAK;IACf,SAAS,EAAE,UAAmB;IAC9B,OAAO,EAAE;QACR,qEAAqE;QACrE,8CAA8C;QAC9C,4CAA4C;QAC5C,uDAAuD;QACvD,0JAA0J;QAC1J,gQAAgQ;QAChQ,qWAAqW;KACrW,CAAC,IAAI,CAAC,IAAI,CAAC;IACZ,QAAQ,EAAE;QACT,MAAM,EAAE,OAAO;QACf,MAAM,EAAE,4DAA4D;KACpE;CACD,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAG,8BAA8B,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;AAErH,eAAe,yBAAyB,CAAC"}

package/dist/agents/approval-channel.kind.d.ts

@@ -0,0 +1,89 @@
+/**
+ * The `tools/approval-channel` runtime kind.
+ *
+ * A channel is the answer to "WHERE do I ask for approval?" — and, crucially,
+ * the answer is allowed to be different depending on where you are standing.
+ *
+ * The SAME request descriptor `{ channel: 'chat-room', correlation: {...} }`
+ * resolves to:
+ *   - inside chat-web  → a gate backed by chat-web's own approval store, because
+ *                        chat-web OWNS that store;
+ *   - inside ai-web    → an HTTP-backed gate that asks chat-web, because ai-web
+ *                        does not;
+ *   - inside a worker  → whichever of the two that worker composed.
+ *
+ * The caller never chose. The agent loop never knew. Each runtime simply knows
+ * how to ask from where it sits. That is what makes the generation request fully
+ * serializable — and therefore what makes shipping an agent run to a worker or
+ * another app possible at all.
+ *
+ * A descriptor with no impl registered in this scope resolves to nothing, and
+ * `ToolsClient.approval.resolveGate` then fails CLOSED (deny-all). Absent is never open.
+ */
+import * as z from 'zod/v4';
+import { TOOL_APPROVAL_CHANNEL_KIND } from '@vibesdotdev/ai-schemas/agents/approval/channel';
+import type { ToolApprovalChannelInterface } from './approval/channel.ts';
+export declare const ToolApprovalChannelRuntimeDescriptorSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    hardware: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    priority: z.ZodOptional<z.ZodNumber>;
+    capabilityId: z.ZodOptional<z.ZodString>;
+    requiredContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    optionalContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    config: z.ZodOptional<z.ZodUnknown>;
+    retention: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        maxAgeDays: z.ZodOptional<z.ZodNumber>;
+        maxEntries: z.ZodOptional<z.ZodNumber>;
+        maxBytes: z.ZodOptional<z.ZodNumber>;
+        cascadeFrom: z.ZodOptional<z.ZodString>;
+        ageField: z.ZodOptional<z.ZodString>;
+        reason: z.ZodString;
+        enforcedBy: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>]>>;
+    kind: z.ZodLiteral<"tools/approval-channel">;
+    surfaces: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+/**
+ * Default impl: deny everything.
+ *
+ * Reached when a descriptor is registered but no implementation loads for this
+ * scope. Denying is the only safe default — an approval channel that cannot ask
+ * anyone must not answer "yes".
+ */
+declare class DefaultToolApprovalChannel implements ToolApprovalChannelInterface {
+    createRuntime(): import("./contracts/approval-types.ts").ToolApprovalRuntime;
+}
+export declare const toolApprovalChannelKind: {
+    id: "tools/approval-channel";
+    descriptorSchema: z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        hardware: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        priority: z.ZodOptional<z.ZodNumber>;
+        capabilityId: z.ZodOptional<z.ZodString>;
+        requiredContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        optionalContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        config: z.ZodOptional<z.ZodUnknown>;
+        retention: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+            maxAgeDays: z.ZodOptional<z.ZodNumber>;
+            maxEntries: z.ZodOptional<z.ZodNumber>;
+            maxBytes: z.ZodOptional<z.ZodNumber>;
+            cascadeFrom: z.ZodOptional<z.ZodString>;
+            ageField: z.ZodOptional<z.ZodString>;
+            reason: z.ZodString;
+            enforcedBy: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>]>>;
+        kind: z.ZodLiteral<"tools/approval-channel">;
+        surfaces: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>;
+    defaultImplementation: typeof DefaultToolApprovalChannel;
+};
+export { TOOL_APPROVAL_CHANNEL_KIND };
+//# sourceMappingURL=approval-channel.kind.d.ts.map

package/dist/agents/approval-channel.kind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-channel.kind.d.ts","sourceRoot":"","sources":["../../src/agents/approval-channel.kind.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B,OAAO,EAAE,0BAA0B,EAAE,MAAM,iDAAiD,CAAC;AAC7F,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAC;AAG1E,eAAO,MAAM,0CAA0C;;;;;;;;;;;;;;;;;;;;;;;iBAGrD,CAAC;AAEH;;;;;;GAMG;AACH,cAAM,0BAA2B,YAAW,4BAA4B;IACvE,aAAa;CAGb;AAED,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;CAIiC,CAAC;AAEtE,OAAO,EAAE,0BAA0B,EAAE,CAAC"}

package/dist/agents/approval-channel.kind.js

@@ -0,0 +1,49 @@
+/**
+ * The `tools/approval-channel` runtime kind.
+ *
+ * A channel is the answer to "WHERE do I ask for approval?" — and, crucially,
+ * the answer is allowed to be different depending on where you are standing.
+ *
+ * The SAME request descriptor `{ channel: 'chat-room', correlation: {...} }`
+ * resolves to:
+ *   - inside chat-web  → a gate backed by chat-web's own approval store, because
+ *                        chat-web OWNS that store;
+ *   - inside ai-web    → an HTTP-backed gate that asks chat-web, because ai-web
+ *                        does not;
+ *   - inside a worker  → whichever of the two that worker composed.
+ *
+ * The caller never chose. The agent loop never knew. Each runtime simply knows
+ * how to ask from where it sits. That is what makes the generation request fully
+ * serializable — and therefore what makes shipping an agent run to a worker or
+ * another app possible at all.
+ *
+ * A descriptor with no impl registered in this scope resolves to nothing, and
+ * `ToolsClient.approval.resolveGate` then fails CLOSED (deny-all). Absent is never open.
+ */
+import * as z from 'zod/v4';
+import { RuntimeDescriptorSchema } from '@vibesdotdev/kernel/schemas/descriptor';
+import { TOOL_APPROVAL_CHANNEL_KIND } from '@vibesdotdev/ai-schemas/agents/approval/channel';
+import { denyAllApprovalRuntime } from "./approval/approval-client.js";
+export const ToolApprovalChannelRuntimeDescriptorSchema = RuntimeDescriptorSchema.extend({
+    kind: z.literal(TOOL_APPROVAL_CHANNEL_KIND),
+    surfaces: z.array(z.string()).optional()
+});
+/**
+ * Default impl: deny everything.
+ *
+ * Reached when a descriptor is registered but no implementation loads for this
+ * scope. Denying is the only safe default — an approval channel that cannot ask
+ * anyone must not answer "yes".
+ */
+class DefaultToolApprovalChannel {
+    createRuntime() {
+        return denyAllApprovalRuntime;
+    }
+}
+export const toolApprovalChannelKind = {
+    id: TOOL_APPROVAL_CHANNEL_KIND,
+    descriptorSchema: ToolApprovalChannelRuntimeDescriptorSchema,
+    defaultImplementation: DefaultToolApprovalChannel
+};
+export { TOOL_APPROVAL_CHANNEL_KIND };
+//# sourceMappingURL=approval-channel.kind.js.map

package/dist/agents/approval-channel.kind.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-channel.kind.js","sourceRoot":"","sources":["../../src/agents/approval-channel.kind.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,EAAE,0BAA0B,EAAE,MAAM,iDAAiD,CAAC;AAE7F,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAEvE,MAAM,CAAC,MAAM,0CAA0C,GAAG,uBAAuB,CAAC,MAAM,CAAC;IACxF,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC;IAC3C,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,0BAA0B;IAC/B,aAAa;QACZ,OAAO,sBAAsB,CAAC;IAC/B,CAAC;CACD;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACtC,EAAE,EAAE,0BAA0B;IAC9B,gBAAgB,EAAE,0CAA0C;IAC5D,qBAAqB,EAAE,0BAA0B;CACmB,CAAC;AAEtE,OAAO,EAAE,0BAA0B,EAAE,CAAC"}

package/dist/agents/authorization.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Agent RUN authorization.
+ *
+ * ai-web already had the right rule for the READ path — `canViewAgent`:
+ *
+ *     a user-authored agent that is not public may only be seen by its creator.
+ *
+ * It was applied to page loads so a guessed UUID could not expose another
+ * tenant's private agent. The RUN path never applied it, and could not have:
+ * the runtime descriptor did not carry `createdById` at all, so no executor had
+ * anything to compare an actor against. The result was an IDOR that was strictly
+ * worse than the one the read-side gate prevented — you could not LOOK at another
+ * user's private agent, but you could EXECUTE it.
+ *
+ * This is that same rule, homed in the tools package so every execution path — the
+ * direct executor, the worker executor, the agent-execution tool, ai-web's routes,
+ * the subagent spawner — reaches the identical predicate instead of each surface
+ * re-deciding (or forgetting). It is a pure function of the descriptor: no DB, no
+ * app coupling, callable from cloud and consumer alike.
+ *
+ * `resolveAgentForRun` applies it by default. A caller with an actor does not have
+ * to remember to authorize; it has to deliberately opt OUT.
+ */
+import type { AIAgentInstanceDescriptor } from './schemas/descriptor.ts';
+/** The fields authorization actually reads. Keeps callers free of the full descriptor. */
+export type AgentOwnership = Pick<AIAgentInstanceDescriptor, 'sourceType' | 'isPublic' | 'createdById'>;
+/**
+ * The organization an agent BELONGS TO, or undefined when it belongs to none.
+ *
+ * Read from `configuration.orgScope`, which is where the seeder puts it (a
+ * woodshop work assistant carries its org id there). This lives beside the
+ * ownership predicates rather than in an app, because tenancy is an ownership
+ * fact and every surface that asks "may this actor use this agent" needs the
+ * same answer. ai-web has carried a private copy of this rule and applies it at
+ * two routes; the chat composer applies none — which is exactly how an
+ * org-scoped agent reaches a picker outside its org.
+ *
+ * Pure and total: a missing, non-string, or empty scope means "not org-scoped".
+ */
+export declare function readAgentOrgScope(agent: {
+    configuration?: object | null;
+} | null | undefined): string | undefined;
+/**
+ * May `userId` run this agent?
+ *
+ * - System agents: yes, for anyone (including an actorless internal run).
+ * - Public user agents: yes, for anyone.
+ * - Private user agents: ONLY the creator.
+ *
+ * Fails closed on ambiguity. A private user-agent with a null `createdById` is a
+ * data defect (the `created_by_id = NULL` regression is documented history in this
+ * repo), and "unknown owner" must never widen to "everyone's owner" — that would
+ * reopen the IDOR through the very hole that created it. Likewise an actorless run
+ * of a private agent is denied: absence of an actor is not permission.
+ */
+export declare function canRunAgent(agent: AgentOwnership | null | undefined, userId: string | undefined): boolean;
+//# sourceMappingURL=authorization.d.ts.map

package/dist/agents/authorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization.d.ts","sourceRoot":"","sources":["../../src/agents/authorization.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAGH,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AAKzE,0FAA0F;AAC1F,MAAM,MAAM,cAAc,GAAG,IAAI,CAChC,yBAAyB,EACzB,YAAY,GAAG,UAAU,GAAG,aAAa,CACzC,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAChC,KAAK,EAAE;IAAE,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,GACzD,MAAM,GAAG,SAAS,CAGpB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,WAAW,CAC1B,KAAK,EAAE,cAAc,GAAG,IAAI,GAAG,SAAS,EACxC,MAAM,EAAE,MAAM,GAAG,SAAS,GACxB,OAAO,CAcT"}

package/dist/agents/authorization.js

@@ -0,0 +1,73 @@
+/**
+ * Agent RUN authorization.
+ *
+ * ai-web already had the right rule for the READ path — `canViewAgent`:
+ *
+ *     a user-authored agent that is not public may only be seen by its creator.
+ *
+ * It was applied to page loads so a guessed UUID could not expose another
+ * tenant's private agent. The RUN path never applied it, and could not have:
+ * the runtime descriptor did not carry `createdById` at all, so no executor had
+ * anything to compare an actor against. The result was an IDOR that was strictly
+ * worse than the one the read-side gate prevented — you could not LOOK at another
+ * user's private agent, but you could EXECUTE it.
+ *
+ * This is that same rule, homed in the tools package so every execution path — the
+ * direct executor, the worker executor, the agent-execution tool, ai-web's routes,
+ * the subagent spawner — reaches the identical predicate instead of each surface
+ * re-deciding (or forgetting). It is a pure function of the descriptor: no DB, no
+ * app coupling, callable from cloud and consumer alike.
+ *
+ * `resolveAgentForRun` applies it by default. A caller with an actor does not have
+ * to remember to authorize; it has to deliberately opt OUT.
+ */
+import * as z from 'zod/v4';
+/** A configuration that scopes the agent to one organization. */
+const OrgScopedConfigurationSchema = z.looseObject({ orgScope: z.string().min(1) });
+/**
+ * The organization an agent BELONGS TO, or undefined when it belongs to none.
+ *
+ * Read from `configuration.orgScope`, which is where the seeder puts it (a
+ * woodshop work assistant carries its org id there). This lives beside the
+ * ownership predicates rather than in an app, because tenancy is an ownership
+ * fact and every surface that asks "may this actor use this agent" needs the
+ * same answer. ai-web has carried a private copy of this rule and applies it at
+ * two routes; the chat composer applies none — which is exactly how an
+ * org-scoped agent reaches a picker outside its org.
+ *
+ * Pure and total: a missing, non-string, or empty scope means "not org-scoped".
+ */
+export function readAgentOrgScope(agent) {
+    const scoped = OrgScopedConfigurationSchema.safeParse(agent?.configuration);
+    return scoped.success ? scoped.data.orgScope : undefined;
+}
+/**
+ * May `userId` run this agent?
+ *
+ * - System agents: yes, for anyone (including an actorless internal run).
+ * - Public user agents: yes, for anyone.
+ * - Private user agents: ONLY the creator.
+ *
+ * Fails closed on ambiguity. A private user-agent with a null `createdById` is a
+ * data defect (the `created_by_id = NULL` regression is documented history in this
+ * repo), and "unknown owner" must never widen to "everyone's owner" — that would
+ * reopen the IDOR through the very hole that created it. Likewise an actorless run
+ * of a private agent is denied: absence of an actor is not permission.
+ */
+export function canRunAgent(agent, userId) {
+    if (!agent)
+        return false;
+    // System agents are platform-owned and runnable by anyone, including trusted
+    // internal runs that carry no actor.
+    if (agent.sourceType === 'system')
+        return true;
+    if (agent.isPublic === true)
+        return true;
+    // Private user agent from here down.
+    if (!userId)
+        return false;
+    if (!agent.createdById)
+        return false;
+    return agent.createdById === userId;
+}
+//# sourceMappingURL=authorization.js.map

package/dist/agents/authorization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization.js","sourceRoot":"","sources":["../../src/agents/authorization.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B,iEAAiE;AACjE,MAAM,4BAA4B,GAAG,CAAC,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAQpF;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,iBAAiB,CAChC,KAA2D;IAE3D,MAAM,MAAM,GAAG,4BAA4B,CAAC,SAAS,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IAC5E,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1D,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,WAAW,CAC1B,KAAwC,EACxC,MAA0B;IAE1B,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IAEzB,6EAA6E;IAC7E,qCAAqC;IACrC,IAAI,KAAK,CAAC,UAAU,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE/C,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAEzC,qCAAqC;IACrC,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,IAAI,CAAC,KAAK,CAAC,WAAW;QAAE,OAAO,KAAK,CAAC;IAErC,OAAO,KAAK,CAAC,WAAW,KAAK,MAAM,CAAC;AACrC,CAAC"}