@vinhnt-sdk/step-executor 0.1.3

package/dist/kernel-utils.js

@@ -0,0 +1,117 @@
+import { RunAbortedError } from "@vinhnt-sdk/schema";
+/** Race a promise against an abort signal — rejects with RunAbortedError if aborted. @internal */
+export function raceWithAbort(promise, signal, runId) {
+    if (signal.aborted)
+        return Promise.reject(new RunAbortedError(runId));
+    return new Promise((resolve, reject) => {
+        const onAbort = () => {
+            signal.removeEventListener("abort", onAbort);
+            reject(new RunAbortedError(runId));
+        };
+        signal.addEventListener("abort", onAbort);
+        promise.then((v) => { signal.removeEventListener("abort", onAbort); resolve(v); }, (e) => { signal.removeEventListener("abort", onAbort); reject(e); });
+    });
+}
+/**
+ * Run a tool execution with a cooperative timeout (RV-19). The caller's
+ * `run` receives a local `AbortSignal` that fires when EITHER the parent
+ * (run) signal aborts OR the tool exceeds `timeoutMs`. Well-behaved tools
+ * that watch their context signal stop their side effects at the deadline
+ * instead of continuing past it (a plain `Promise.race` abandons the tool
+ * promise and its effects keep running). The returned promise still
+ * hard-rejects at `timeoutMs`, so a non-cooperative tool can never hang the
+ * caller longer than the deadline. Parent aborts are NOT synthesised here —
+ * the caller's `raceWithAbort` rejects with `RunAbortedError`.
+ * @internal
+ */
+export function withToolTimeout(run, timeoutMs, parent, timeoutMessage) {
+    const ctrl = new AbortController();
+    const onParentAbort = () => ctrl.abort(parent.reason);
+    if (parent.aborted) {
+        ctrl.abort(parent.reason);
+    }
+    else {
+        parent.addEventListener("abort", onParentAbort, { once: true });
+    }
+    return new Promise((resolve, reject) => {
+        const timer = setTimeout(() => {
+            ctrl.abort(new Error(timeoutMessage));
+            reject(new Error(timeoutMessage));
+        }, timeoutMs);
+        run(ctrl.signal).then((v) => {
+            clearTimeout(timer);
+            parent.removeEventListener("abort", onParentAbort);
+            resolve(v);
+        }, (e) => {
+            clearTimeout(timer);
+            parent.removeEventListener("abort", onParentAbort);
+            reject(e);
+        });
+    });
+}
+/** Default cap on steps per run. */
+export const DEFAULT_MAX_STEPS = 25;
+/** Default cap on tool calls per step. */
+export const DEFAULT_MAX_TOOL_CALLS_PER_STEP = 20;
+/** Consecutive identical calls that trigger doom-loop detection. */
+export const DOOM_LOOP_THRESHOLD = 3;
+/** System prompt guiding the model to correct a failed tool call. @internal */
+export const SELF_CORRECT_PROMPT = `A tool call just failed. Analyze the error and try a corrected approach.
+
+Guidelines:
+- If the error is about arguments, fix the arguments and retry.
+- If the tool is unavailable, suggest an alternative tool.
+- If the problem is permanent (e.g., invalid request), explain to the user.
+- Do NOT repeat the same failing call.`;
+/**
+ * Stable, order-independent hash of an arbitrary tool-arguments value.
+ * Object key order is normalized so `{a:1,b:2}` and `{b:2,a:1}` hash the same,
+ * and the hash is computed once per call (vs. repeated JSON.stringify in a
+ * doom-loop scan). Collisions are possible but astronomically unlikely for the
+ * small arg payloads agents produce.
+ * @internal
+ */
+export function hashArgs(value) {
+    return fnv1a(canonicalJson(value)).toString(36);
+}
+function canonicalJson(value) {
+    if (value === null)
+        return "null";
+    if (typeof value !== "object")
+        return JSON.stringify(value);
+    if (Array.isArray(value))
+        return `[${value.map(canonicalJson).join(",")}]`;
+    const obj = value;
+    const keys = Object.keys(obj).sort();
+    return `{${keys.map((k) => `${JSON.stringify(k)}:${canonicalJson(obj[k])}`).join(",")}}`;
+}
+function fnv1a(str) {
+    let h = 0x811c9dc5;
+    for (let i = 0; i < str.length; i++) {
+        h ^= str.charCodeAt(i);
+        h = Math.imul(h, 0x01000193);
+    }
+    return h >>> 0;
+}
+/** Detect whether the same tool+args repeated the last `threshold` calls. @internal */
+export function detectDoomLoop(recentCalls, name, args, threshold = DOOM_LOOP_THRESHOLD) {
+    if (recentCalls.length < threshold)
+        return false;
+    const last = recentCalls.slice(-threshold);
+    const argsKey = hashArgs(args);
+    return last.every((c) => c.id === name && (c.argsKey ?? hashArgs(c.args)) === argsKey);
+}
+/**
+ * Derive the owning domain from a namespaced tool id:
+ * `mcp__<server>__<tool>` → "mcp:<server>", `coding.read_file` → "coding",
+ * bare ids → "core".
+ */
+export function toolDomain(toolName) {
+    if (toolName.startsWith("mcp__")) {
+        const parts = toolName.split("__");
+        return parts.length >= 2 ? `mcp:${parts[1]}` : "mcp";
+    }
+    const dot = toolName.indexOf(".");
+    return dot > 0 ? toolName.slice(0, dot) : "core";
+}
+//# sourceMappingURL=kernel-utils.js.map

package/dist/kernel-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kernel-utils.js","sourceRoot":"","sources":["../src/kernel-utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAGrD,kGAAkG;AAClG,MAAM,UAAU,aAAa,CAAI,OAAmB,EAAE,MAAmB,EAAE,KAAY;IACrF,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;IACtE,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,MAAM,CAAC,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;QACrC,CAAC,CAAC;QACF,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1C,OAAO,CAAC,IAAI,CACV,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EACpE,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACpE,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,eAAe,CAC7B,GAAwC,EACxC,SAAiB,EACjB,MAAmB,EACnB,cAAsB;IAEtB,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;YACtC,MAAM,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;QACpC,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CACnB,CAAC,CAAC,EAAE,EAAE;YACJ,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YACnD,OAAO,CAAC,CAAC,CAAC,CAAC;QACb,CAAC,EACD,CAAC,CAAC,EAAE,EAAE;YACJ,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YACnD,MAAM,CAAC,CAAC,CAAC,CAAC;QACZ,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,oCAAoC;AACpC,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AACpC,0CAA0C;AAC1C,MAAM,CAAC,MAAM,+BAA+B,GAAG,EAAE,CAAC;AAClD,oEAAoE;AACpE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAErC,+EAA+E;AAC/E,MAAM,CAAC,MAAM,mBAAmB,GAAG;;;;;;uCAMI,CAAC;AAUxC;;;;;;;GAOG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC5D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3E,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAC3F,CAAC;AAED,SAAS,KAAK,CAAC,GAAW;IACxB,IAAI,CAAC,GAAG,UAAU,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACvB,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,CAAC;AACjB,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,cAAc,CAAC,WAAyB,EAAE,IAAY,EAAE,IAAa,EAAE,SAAS,GAAG,mBAAmB;IACpH,IAAI,WAAW,CAAC,MAAM,GAAG,SAAS;QAAE,OAAO,KAAK,CAAC;IACjD,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC;AACzF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,QAAgB;IACzC,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IACxD,CAAC;IACD,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClC,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AACnD,CAAC"}

package/dist/path-policy.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Shared external-path containment policy for path-aware tools.
+ *
+ * Single source of truth for "which tools are path-aware" and "what counts as
+ * escaping the workspace root", so the step executor and the tool-error router
+ * can never drift apart (RV-45).
+ *
+ * @module step-executor/path-policy
+ */
+/** Tools whose path arguments are validated against the workspace root. */
+export declare const PATH_AWARE_TOOLS: Set<string>;
+/**
+ * Check that every path argument of a path-aware tool stays inside the
+ * workspace root. Returns a human-readable violation reason, or `undefined`
+ * when the call is allowed (or not path-aware / no root configured).
+ */
+export declare function checkExternalPaths(toolName: string, args: unknown, workspaceRoot: string | undefined): string | undefined;
+//# sourceMappingURL=path-policy.d.ts.map

package/dist/path-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-policy.d.ts","sourceRoot":"","sources":["../src/path-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,2EAA2E;AAC3E,eAAO,MAAM,gBAAgB,aAG3B,CAAC;AAEH;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,OAAO,EACb,aAAa,EAAE,MAAM,GAAG,SAAS,GAChC,MAAM,GAAG,SAAS,CAcpB"}

package/dist/path-policy.js

@@ -0,0 +1,38 @@
+/**
+ * Shared external-path containment policy for path-aware tools.
+ *
+ * Single source of truth for "which tools are path-aware" and "what counts as
+ * escaping the workspace root", so the step executor and the tool-error router
+ * can never drift apart (RV-45).
+ *
+ * @module step-executor/path-policy
+ */
+import { normalize } from "node:path";
+/** Tools whose path arguments are validated against the workspace root. */
+export const PATH_AWARE_TOOLS = new Set([
+    "read_file", "write_file", "edit_file", "apply_patch",
+    "list_directory", "glob_files", "grep_files", "shell", "read_image",
+]);
+/**
+ * Check that every path argument of a path-aware tool stays inside the
+ * workspace root. Returns a human-readable violation reason, or `undefined`
+ * when the call is allowed (or not path-aware / no root configured).
+ */
+export function checkExternalPaths(toolName, args, workspaceRoot) {
+    if (!workspaceRoot || !PATH_AWARE_TOOLS.has(toolName))
+        return undefined;
+    const input = args;
+    if (!input)
+        return undefined;
+    const normalizedRoot = workspaceRoot.replace(/\\/g, "/") + "/";
+    const pathCandidates = [input.filePath, input.path, input.dirPath].filter((p) => typeof p === "string");
+    for (const p of pathCandidates) {
+        const absRaw = p.startsWith("/") || /^[A-Za-z]:[/\\]/.test(p) ? p : workspaceRoot + "/" + p;
+        const absPath = normalize(absRaw).replace(/\\/g, "/");
+        if (!absPath.startsWith(normalizedRoot)) {
+            return `references path outside workspace: "${p}" (${absPath} not in ${normalizedRoot})`;
+        }
+    }
+    return undefined;
+}
+//# sourceMappingURL=path-policy.js.map

package/dist/path-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-policy.js","sourceRoot":"","sources":["../src/path-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,2EAA2E;AAC3E,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IACtC,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa;IACrD,gBAAgB,EAAE,YAAY,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY;CACpE,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAAgB,EAChB,IAAa,EACb,aAAiC;IAEjC,IAAI,CAAC,aAAa,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IACxE,MAAM,KAAK,GAAG,IAA2C,CAAC;IAC1D,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,cAAc,GAAG,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC;IAC/D,MAAM,cAAc,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;IACrH,KAAK,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAW,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,GAAG,GAAG,GAAG,CAAC,CAAC;QACpG,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YACxC,OAAO,uCAAuC,CAAC,MAAM,OAAO,WAAW,cAAc,GAAG,CAAC;QAC3F,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/permission-gate.d.ts

@@ -0,0 +1,93 @@
+import type { RunId, AgentConfig } from "@vinhnt-sdk/schema";
+import type { ToolRisk, PermissionReply } from "@vinhnt-sdk/tools";
+import type { StepExecutorPluginHooks } from "./hooks.js";
+import type { ApprovalStore } from "@vinhnt-sdk/permission";
+import type { RunEventStore } from "@vinhnt-sdk/session";
+import type { EventBus } from "@vinhnt-sdk/event";
+/** Result of an approval check: allow, deny, or needs approval. */
+export type ApprovalDecision = "allow" | "deny" | "approval_required";
+/** A user-approved allow/deny rule for a tool call pattern. */
+export interface DynamicRule {
+    toolName: string;
+    pattern: string;
+    decision: "allow" | "deny";
+}
+/** Outcome of {@link PermissionGate.checkTool}. */
+export interface PermissionCheckResult {
+    allowed: boolean;
+    reason?: string;
+    needsApproval?: boolean;
+}
+/** Dependencies required by {@link PermissionGate}. */
+export interface PermissionGateDeps {
+    readonly store: RunEventStore;
+    readonly eventBus?: EventBus;
+    readonly pluginManager: StepExecutorPluginHooks | undefined;
+    readonly approvalStore: ApprovalStore | undefined;
+    readonly autoApprovalEnabled?: boolean | undefined;
+}
+/** Enforces 4-phase permission gating: global rules, agent perms, dynamic rules, risk defaults. */
+export declare class PermissionGate {
+    private readonly deps;
+    private globalPermissionRules?;
+    private dynamicRules;
+    private riskOverrides?;
+    private topLevelRules;
+    private autoApproval;
+    constructor(deps: PermissionGateDeps);
+    /** Toggle auto-approval at runtime (mirrors config.autoApprovalEnabled). */
+    setAutoApprovalEnabled(enabled: boolean): void;
+    /** Parse and apply config-level permission rules (OpenCode-style nested `{ tool: "allow|deny|ask" }`). */
+    setGlobalRules(configRules: Record<string, string | Record<string, string>>): void;
+    /**
+     * Apply top-level `allow`/`deny`/`ask` pattern lists (OpenCode-style
+     * `"ToolName(glob)"` strings). These take precedence over risk defaults and
+     * agent-level allowed/denied tool lists.
+     */
+    setTopLevelRules(rules: Record<"allow" | "deny" | "ask", string[]>): void;
+    /** Register a user-approved dynamic rule (last-match-wins over risk defaults). */
+    addDynamicRule(rule: DynamicRule): void;
+    /** Override risk-level defaults (read→allow, write→approval, destructive→deny). */
+    setRiskOverrides(overrides?: Partial<Record<ToolRisk, ApprovalDecision>>): void;
+    /**
+     * Evaluate whether a tool call is allowed.
+     * 4-phase gate: global rules → agent permissions → dynamic rules → risk defaults.
+     * Returns { allowed, reason, needsApproval }.
+     */
+    checkTool(name: string, risk: ToolRisk, args?: Record<string, unknown>, agent?: AgentConfig): PermissionCheckResult;
+    /** Check whether combined token count stays within agent's maxTokens limit. */
+    checkMaxTokens(inputTokens: number, outputTokens: number, agent?: AgentConfig): boolean;
+    /** Check whether step count is within agent's maxSteps limit. */
+    checkMaxSteps(step: number, agent?: AgentConfig): boolean;
+    /**
+     * Ask the user to approve a tool call.
+     * Routes through ApprovalStore and plugin hooks.
+     * When reply is "always", `savePatterns` are persisted as allow rules so
+     * future matching calls auto-approve (without opening the whole tool).
+     * Returns "once", "always", or "reject".
+     */
+    askForTool(toolName: string, _toolId: string, runId: RunId, _sessionId: string, reason: string, _agentId: string, traceId: string, pluginManager?: StepExecutorPluginHooks, savePatterns?: readonly string[], signal?: AbortSignal): Promise<PermissionReply>;
+    private askViaApprovalStore;
+    /**
+     * Check whether a previously saved approval exists for this tool+args+agent.
+     * Scoped to the args context pattern (e.g. `tool.write_file(src/*)` covers
+     * `src/a.ts`), falling back to a whole-tool approval (`tool.write_file`).
+     * A matching saved rejection always wins over a saved approval.
+     */
+    checkSavedApproval(toolName: string, argsOrAgentId?: Record<string, unknown> | string, agentId?: string): boolean;
+    /** Return all registered dynamic rules (saved allow/deny policies). */
+    getDynamicRules(): readonly DynamicRule[];
+    /**
+     * Persist a saved approval so future matching calls skip the ask dialog.
+     * Scoped to the args context pattern — approving `read_file("a.txt")` does
+     * NOT auto-approve `read_file("b.txt")` (whole-tool approval requires a call
+     * with no scoped context, which resolves to `tool.<name>`).
+     */
+    saveApproval(toolName: string, argsOrAgentId?: Record<string, unknown> | string, agentId?: string): void;
+    /**
+     * Persist a saved rejection so future matching calls are auto-denied.
+     * Scoped to the args context pattern like {@link saveApproval}.
+     */
+    saveRejection(toolName: string, argsOrAgentId?: Record<string, unknown> | string, agentId?: string): void;
+}
+//# sourceMappingURL=permission-gate.d.ts.map

package/dist/permission-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-gate.d.ts","sourceRoot":"","sources":["../src/permission-gate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAa,WAAW,EAA0C,MAAM,oBAAoB,CAAC;AAChH,OAAO,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAOlD,mEAAmE;AACnE,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,MAAM,GAAG,mBAAmB,CAAC;AAEtE,+DAA+D;AAC/D,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,GAAG,MAAM,CAAC;CAC5B;AAED,mDAAmD;AACnD,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,uDAAuD;AACvD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,uBAAuB,GAAG,SAAS,CAAC;IAC5D,QAAQ,CAAC,aAAa,EAAE,aAAa,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACpD;AA+BD,mGAAmG;AACnG,qBAAa,cAAc;IAOb,OAAO,CAAC,QAAQ,CAAC,IAAI;IANjC,OAAO,CAAC,qBAAqB,CAAC,CAAc;IAC5C,OAAO,CAAC,YAAY,CAAqB;IACzC,OAAO,CAAC,aAAa,CAAC,CAA8C;IACpE,OAAO,CAAC,aAAa,CAAmF;IACxG,OAAO,CAAC,YAAY,CAAU;gBAED,IAAI,EAAE,kBAAkB;IAIrD,4EAA4E;IAC5E,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI;IAI9C,0GAA0G;IAC1G,cAAc,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,IAAI;IASlF;;;;OAIG;IACH,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,GAAG,MAAM,GAAG,KAAK,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI;IAYzE,kFAAkF;IAClF,cAAc,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI;IAIvC,mFAAmF;IACnF,gBAAgB,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC,GAAG,IAAI;IAI/E;;;;OAIG;IACH,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,EAAE,WAAW,GAAG,qBAAqB;IAmEnH,+EAA+E;IAC/E,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,WAAW,GAAG,OAAO;IAMvF,iEAAiE;IACjE,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,WAAW,GAAG,OAAO;IAMzD;;;;;;OAMG;IACG,UAAU,CACd,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,KAAK,EACZ,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,aAAa,CAAC,EAAE,uBAAuB,EACvC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,EAChC,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,eAAe,CAAC;YAcb,mBAAmB;IA6DjC;;;;;OAKG;IACH,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO;IAejH,uEAAuE;IACvE,eAAe,IAAI,SAAS,WAAW,EAAE;IAIzC;;;;;OAKG;IACH,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI;IAYxG;;;OAGG;IACH,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI;CAS1G"}

package/dist/permission-gate.js

@@ -0,0 +1,303 @@
+import { evaluatePermission, checkRiskAllowed } from "@vinhnt-sdk/permission";
+import { wildcardMatch } from "@vinhnt-sdk/schema";
+import { buildPermissionRules } from "@vinhnt-sdk/permission";
+import { commandPattern } from "@vinhnt-sdk/tools";
+import { PermissionRequested, PermissionReplied } from "@vinhnt-sdk/event";
+const RISK_DECISIONS = {
+    read: "allow",
+    write: "approval_required",
+    destructive: "deny",
+    external: "approval_required",
+};
+function extractContextPattern(toolName, args) {
+    if (!args || typeof args !== "object")
+        return "*";
+    if (toolName === "execute_command" || toolName === "bash") {
+        const cmd = args.command;
+        if (typeof cmd === "string" && cmd.trim())
+            return commandPattern(cmd);
+    }
+    const path = args.filePath ?? args.path;
+    if (typeof path === "string" && path.trim())
+        return path;
+    return "*";
+}
+/** Split a `Tool(glob)` permission-pattern string into its parts. Returns null if malformed. */
+function parseToolPattern(expr) {
+    const m = /^\s*([A-Za-z0-9_.-]+)\s*\(\s*(.*?)\s*\)\s*$/.exec(expr);
+    if (!m) {
+        const bare = expr.trim();
+        if (!bare)
+            return null;
+        return { toolName: bare, pattern: "*" };
+    }
+    return { toolName: m[1], pattern: m[2] || "*" };
+}
+/** Enforces 4-phase permission gating: global rules, agent perms, dynamic rules, risk defaults. */
+export class PermissionGate {
+    deps;
+    globalPermissionRules;
+    dynamicRules = [];
+    riskOverrides;
+    topLevelRules = [];
+    autoApproval;
+    constructor(deps) {
+        this.deps = deps;
+        this.autoApproval = deps.autoApprovalEnabled ?? false;
+    }
+    /** Toggle auto-approval at runtime (mirrors config.autoApprovalEnabled). */
+    setAutoApprovalEnabled(enabled) {
+        this.autoApproval = enabled;
+    }
+    /** Parse and apply config-level permission rules (OpenCode-style nested `{ tool: "allow|deny|ask" }`). */
+    setGlobalRules(configRules) {
+        const raw = buildPermissionRules(configRules);
+        this.globalPermissionRules = raw.map((r) => ({
+            effect: r.effect,
+            target: r.action,
+            ...(r.resource !== "*" ? { paramPattern: r.resource } : {}),
+        }));
+    }
+    /**
+     * Apply top-level `allow`/`deny`/`ask` pattern lists (OpenCode-style
+     * `"ToolName(glob)"` strings). These take precedence over risk defaults and
+     * agent-level allowed/denied tool lists.
+     */
+    setTopLevelRules(rules) {
+        const parsed = [];
+        for (const decision of ["allow", "deny", "ask"]) {
+            for (const expr of rules[decision] ?? []) {
+                if (typeof expr !== "string")
+                    continue;
+                const parts = parseToolPattern(expr);
+                if (parts)
+                    parsed.push({ ...parts, decision });
+            }
+        }
+        this.topLevelRules = parsed;
+    }
+    /** Register a user-approved dynamic rule (last-match-wins over risk defaults). */
+    addDynamicRule(rule) {
+        this.dynamicRules.push(rule);
+    }
+    /** Override risk-level defaults (read→allow, write→approval, destructive→deny). */
+    setRiskOverrides(overrides) {
+        if (overrides !== undefined)
+            this.riskOverrides = overrides;
+    }
+    /**
+     * Evaluate whether a tool call is allowed.
+     * 4-phase gate: global rules → agent permissions → dynamic rules → risk defaults.
+     * Returns { allowed, reason, needsApproval }.
+     */
+    checkTool(name, risk, args, agent) {
+        // Phase 1: Global config-level rules (OpenCode-style nested patterns)
+        if (this.globalPermissionRules && this.globalPermissionRules.length > 0) {
+            const globalResult = evaluatePermission({ rules: this.globalPermissionRules }, `tool.${name}`, args);
+            if (globalResult.decision === "deny")
+                return { allowed: false, reason: globalResult.reason };
+            if (globalResult.decision === "ask")
+                return { allowed: false, reason: globalResult.reason, needsApproval: true };
+        }
+        // Phase 1.5: Top-level allow/deny/ask pattern lists ("Tool(glob)")
+        if (this.topLevelRules.length > 0) {
+            const pattern = extractContextPattern(name, args);
+            let matched;
+            for (const rule of this.topLevelRules) {
+                if (rule.toolName === name && wildcardMatch(rule.pattern, pattern)) {
+                    matched = rule; // last-match-wins
+                }
+            }
+            if (matched) {
+                if (matched.decision === "deny")
+                    return { allowed: false, reason: `Tool "${name}" is denied` };
+                if (matched.decision === "ask")
+                    return { allowed: false, reason: `Tool "${name}" requires approval`, needsApproval: true };
+                return { allowed: true, reason: "Allowed by configured rule" };
+            }
+        }
+        // Phase 2: Agent-specific permissions
+        const perms = agent?.permissions;
+        if (perms) {
+            if (perms.ruleset) {
+                const result = evaluatePermission(perms.ruleset, `tool.${name}`, args);
+                if (result.decision === "deny")
+                    return { allowed: false, reason: result.reason };
+                if (result.decision === "ask")
+                    return { allowed: false, reason: result.reason, needsApproval: true };
+                if (perms.ruleset.allowedRisks && !checkRiskAllowed(perms.ruleset, risk)) {
+                    return { allowed: false, reason: `Tool "${name}" has risk "${risk}" which exceeds agent's allowed risks` };
+                }
+                return { allowed: true };
+            }
+            if (perms.deniedTools?.some((p) => wildcardMatch(p, name))) {
+                return { allowed: false, reason: `Tool "${name}" is denied for this agent` };
+            }
+            if (perms.allowedTools && !perms.allowedTools.some((p) => wildcardMatch(p, name))) {
+                return { allowed: false, reason: `Tool "${name}" is not in the allowed tools list` };
+            }
+            if (perms.allowedRisks && !perms.allowedRisks.includes(risk)) {
+                return { allowed: false, reason: `Tool "${name}" has risk "${risk}" which exceeds agent's allowed risks` };
+            }
+        }
+        // Phase 3: Dynamic rules (last-match-wins, same as ToolPolicy)
+        if (this.dynamicRules.length > 0) {
+            const pattern = extractContextPattern(name, args);
+            for (let i = this.dynamicRules.length - 1; i >= 0; i--) {
+                const rule = this.dynamicRules[i];
+                if (rule.toolName === name && wildcardMatch(rule.pattern, pattern)) {
+                    if (rule.decision === "deny")
+                        return { allowed: false, reason: `Tool "${name}" denied by dynamic rule` };
+                    return { allowed: true };
+                }
+            }
+        }
+        // Phase 4: Risk-based default fallback (merged from ToolPolicy)
+        const decision = this.riskOverrides?.[risk] ?? RISK_DECISIONS[risk];
+        if (decision === "deny")
+            return { allowed: false, reason: `Tool "${name}" (risk: ${risk}) is denied` };
+        if (decision === "approval_required")
+            return { allowed: false, needsApproval: true, reason: `Tool "${name}" (risk: ${risk}) requires approval` };
+        return { allowed: true };
+    }
+    /** Check whether combined token count stays within agent's maxTokens limit. */
+    checkMaxTokens(inputTokens, outputTokens, agent) {
+        const perms = agent?.permissions;
+        if (!perms?.maxTokens)
+            return true;
+        return (inputTokens + outputTokens) <= perms.maxTokens;
+    }
+    /** Check whether step count is within agent's maxSteps limit. */
+    checkMaxSteps(step, agent) {
+        const perms = agent?.permissions;
+        if (!perms?.maxSteps)
+            return true;
+        return step < perms.maxSteps;
+    }
+    /**
+     * Ask the user to approve a tool call.
+     * Routes through ApprovalStore and plugin hooks.
+     * When reply is "always", `savePatterns` are persisted as allow rules so
+     * future matching calls auto-approve (without opening the whole tool).
+     * Returns "once", "always", or "reject".
+     */
+    async askForTool(toolName, _toolId, runId, _sessionId, reason, _agentId, traceId, pluginManager, savePatterns, signal) {
+        if (this.autoApproval)
+            return "once";
+        const reply = await this.askViaApprovalStore(toolName, runId, reason, traceId, pluginManager, signal);
+        if (reply === "always" && savePatterns && savePatterns.length > 0) {
+            for (const pattern of savePatterns) {
+                if (!pattern || pattern === "*")
+                    continue;
+                this.addDynamicRule({ toolName, pattern, decision: "allow" });
+            }
+        }
+        return reply;
+    }
+    async askViaApprovalStore(toolName, runId, reason, traceId, pluginManager, signal) {
+        const requestId = crypto.randomUUID();
+        const req = {
+            id: requestId,
+            runId,
+            toolName,
+            resource: toolName,
+            reason,
+            prompt: reason,
+            occurredAt: new Date().toISOString(),
+        };
+        // Persist permission.requested to store (sync for tests) AND publish to bus
+        await this.deps.store.append({
+            id: crypto.randomUUID(), runId, type: "permission.requested",
+            occurredAt: new Date().toISOString(), traceId,
+            data: { requestId, toolName, resource: toolName, reason, prompt: reason },
+        });
+        if (this.deps.eventBus) {
+            this.deps.eventBus.publish(PermissionRequested, {
+                requestId, toolName, resource: toolName, reason, prompt: reason
+            }, { traceId, aggregateId: runId });
+        }
+        let reply = "reject";
+        const hookResult = await pluginManager?.fireHook("onPermissionAsk", {
+            permission: `tool.${toolName}`,
+            resource: toolName,
+            reason,
+        });
+        if (hookResult?.modified?.reply) {
+            reply = hookResult.modified.reply;
+        }
+        else if (this.deps.approvalStore) {
+            // Race the approval wait against the run's abort signal so a cancelled
+            // run does not hang forever waiting for a human reply.
+            reply = await this.deps.approvalStore.awaitReply(req, { signal });
+        }
+        // Persist permission.replied to store (sync for tests) AND publish to bus
+        await this.deps.store.append({
+            id: crypto.randomUUID(), runId, type: "permission.replied",
+            occurredAt: new Date().toISOString(), traceId,
+            data: { requestId, reply },
+        });
+        if (this.deps.eventBus) {
+            this.deps.eventBus.publish(PermissionReplied, {
+                requestId, reply
+            }, { traceId, aggregateId: runId });
+        }
+        return reply;
+    }
+    /**
+     * Check whether a previously saved approval exists for this tool+args+agent.
+     * Scoped to the args context pattern (e.g. `tool.write_file(src/*)` covers
+     * `src/a.ts`), falling back to a whole-tool approval (`tool.write_file`).
+     * A matching saved rejection always wins over a saved approval.
+     */
+    checkSavedApproval(toolName, argsOrAgentId, agentId) {
+        const store = this.deps.approvalStore;
+        if (!store)
+            return false;
+        const args = typeof argsOrAgentId === "object" ? argsOrAgentId : undefined;
+        const resolvedAgentId = typeof argsOrAgentId === "string" ? argsOrAgentId : agentId;
+        const pattern = extractContextPattern(toolName, args);
+        const resource = pattern === "*" ? `tool.${toolName}` : `tool.${toolName}(${pattern})`;
+        // Deny always wins — any scoped or whole-tool rejection blocks the call.
+        if (store.checkRejection(`tool.${toolName}`, toolName, resolvedAgentId))
+            return false;
+        if (store.checkRejection(resource, toolName, resolvedAgentId))
+            return false;
+        // Pattern-scoped approval first, then whole-tool approval as fallback.
+        if (store.checkApproval(resource, toolName, resolvedAgentId))
+            return true;
+        return store.checkApproval(`tool.${toolName}`, toolName, resolvedAgentId);
+    }
+    /** Return all registered dynamic rules (saved allow/deny policies). */
+    getDynamicRules() {
+        return [...this.dynamicRules];
+    }
+    /**
+     * Persist a saved approval so future matching calls skip the ask dialog.
+     * Scoped to the args context pattern — approving `read_file("a.txt")` does
+     * NOT auto-approve `read_file("b.txt")` (whole-tool approval requires a call
+     * with no scoped context, which resolves to `tool.<name>`).
+     */
+    saveApproval(toolName, argsOrAgentId, agentId) {
+        const args = typeof argsOrAgentId === "object" ? argsOrAgentId : undefined;
+        const resolvedAgentId = typeof argsOrAgentId === "string" ? argsOrAgentId : agentId;
+        const pattern = extractContextPattern(toolName, args);
+        const resource = pattern === "*" ? `tool.${toolName}` : `tool.${toolName}(${pattern})`;
+        this.deps.approvalStore?.saveApproval({
+            resource,
+            action: toolName,
+            ...(resolvedAgentId ? { agentId: resolvedAgentId } : {}),
+        });
+    }
+    /**
+     * Persist a saved rejection so future matching calls are auto-denied.
+     * Scoped to the args context pattern like {@link saveApproval}.
+     */
+    saveRejection(toolName, argsOrAgentId, agentId) {
+        const args = typeof argsOrAgentId === "object" ? argsOrAgentId : undefined;
+        const resolvedAgentId = typeof argsOrAgentId === "string" ? argsOrAgentId : agentId;
+        const pattern = extractContextPattern(toolName, args);
+        const resource = pattern === "*" ? `tool.${toolName}` : `tool.${toolName}(${pattern})`;
+        this.deps.approvalStore?.saveRejection(resource, toolName, resolvedAgentId);
+    }
+}
+//# sourceMappingURL=permission-gate.js.map

package/dist/permission-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-gate.js","sourceRoot":"","sources":["../src/permission-gate.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC9E,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AA4B3E,MAAM,cAAc,GAAuC;IACzD,IAAI,EAAE,OAAO;IACb,KAAK,EAAE,mBAAmB;IAC1B,WAAW,EAAE,MAAM;IACnB,QAAQ,EAAE,mBAAmB;CAC9B,CAAC;AAEF,SAAS,qBAAqB,CAAC,QAAgB,EAAE,IAA8B;IAC7E,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IAClD,IAAI,QAAQ,KAAK,iBAAiB,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC;QACzB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE;YAAE,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC;IACxC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IACzD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,gGAAgG;AAChG,SAAS,gBAAgB,CAAC,IAAY;IACpC,MAAM,CAAC,GAAG,6CAA6C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnE,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IAC1C,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;AACnD,CAAC;AAED,mGAAmG;AACnG,MAAM,OAAO,cAAc;IAOI;IANrB,qBAAqB,CAAe;IACpC,YAAY,GAAkB,EAAE,CAAC;IACjC,aAAa,CAA+C;IAC5D,aAAa,GAAgF,EAAE,CAAC;IAChG,YAAY,CAAU;IAE9B,YAA6B,IAAwB;QAAxB,SAAI,GAAJ,IAAI,CAAoB;QACnD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,mBAAmB,IAAI,KAAK,CAAC;IACxD,CAAC;IAED,4EAA4E;IAC5E,sBAAsB,CAAC,OAAgB;QACrC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC;IAC9B,CAAC;IAED,0GAA0G;IAC1G,cAAc,CAAC,WAA4D;QACzE,MAAM,GAAG,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;QAC9C,IAAI,CAAC,qBAAqB,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAiB,EAAE,EAAE,CAAC,CAAC;YAC3D,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5D,CAAC,CAAgB,CAAC;IACrB,CAAC;IAED;;;;OAIG;IACH,gBAAgB,CAAC,KAAiD;QAChE,MAAM,MAAM,GAAgF,EAAE,CAAC;QAC/F,KAAK,MAAM,QAAQ,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAU,EAAE,CAAC;YACzD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;gBACzC,IAAI,OAAO,IAAI,KAAK,QAAQ;oBAAE,SAAS;gBACvC,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;gBACrC,IAAI,KAAK;oBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;QACD,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC;IAC9B,CAAC;IAED,kFAAkF;IAClF,cAAc,CAAC,IAAiB;QAC9B,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,mFAAmF;IACnF,gBAAgB,CAAC,SAAuD;QACtE,IAAI,SAAS,KAAK,SAAS;YAAE,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;IAC9D,CAAC;IAED;;;;OAIG;IACH,SAAS,CAAC,IAAY,EAAE,IAAc,EAAE,IAA8B,EAAE,KAAmB;QACzF,sEAAsE;QACtE,IAAI,IAAI,CAAC,qBAAqB,IAAI,IAAI,CAAC,qBAAqB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxE,MAAM,YAAY,GAAG,kBAAkB,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,qBAAqB,EAAE,EAAE,QAAQ,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;YACrG,IAAI,YAAY,CAAC,QAAQ,KAAK,MAAM;gBAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC;YAC7F,IAAI,YAAY,CAAC,QAAQ,KAAK,KAAK;gBAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;QACnH,CAAC;QAED,mEAAmE;QACnE,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAClD,IAAI,OAA8F,CAAC;YACnG,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;gBACtC,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;oBACnE,OAAO,GAAG,IAAI,CAAC,CAAC,kBAAkB;gBACpC,CAAC;YACH,CAAC;YACD,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM;oBAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,IAAI,aAAa,EAAE,CAAC;gBAC/F,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK;oBAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,IAAI,qBAAqB,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;gBAC3H,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;YACjE,CAAC;QACH,CAAC;QAED,sCAAsC;QACtC,MAAM,KAAK,GAAG,KAAK,EAAE,WAAW,CAAC;QACjC,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClB,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;gBACvE,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM;oBAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;gBACjF,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK;oBAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;gBACrG,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;oBACzE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,IAAI,eAAe,IAAI,uCAAuC,EAAE,CAAC;gBAC7G,CAAC;gBACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC3B,CAAC;YAED,IAAI,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;gBAC3D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,IAAI,4BAA4B,EAAE,CAAC;YAC/E,CAAC;YACD,IAAI,KAAK,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;gBAClF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,IAAI,oCAAoC,EAAE,CAAC;YACvF,CAAC;YACD,IAAI,KAAK,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,IAAI,eAAe,IAAI,uCAAuC,EAAE,CAAC;YAC7G,CAAC;QACH,CAAC;QAED,+DAA+D;QAC/D,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAClD,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBACvD,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAE,CAAC;gBACnC,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;oBACnE,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM;wBAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,IAAI,0BAA0B,EAAE,CAAC;oBACzG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;gBAC3B,CAAC;YACH,CAAC;QACH,CAAC;QAED,gEAAgE;QAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;QACpE,IAAI,QAAQ,KAAK,MAAM;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,IAAI,YAAY,IAAI,aAAa,EAAE,CAAC;QACvG,IAAI,QAAQ,KAAK,mBAAmB;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,IAAI,YAAY,IAAI,qBAAqB,EAAE,CAAC;QACjJ,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,+EAA+E;IAC/E,cAAc,CAAC,WAAmB,EAAE,YAAoB,EAAE,KAAmB;QAC3E,MAAM,KAAK,GAAG,KAAK,EAAE,WAAW,CAAC;QACjC,IAAI,CAAC,KAAK,EAAE,SAAS;YAAE,OAAO,IAAI,CAAC;QACnC,OAAO,CAAC,WAAW,GAAG,YAAY,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC;IACzD,CAAC;IAED,iEAAiE;IACjE,aAAa,CAAC,IAAY,EAAE,KAAmB;QAC7C,MAAM,KAAK,GAAG,KAAK,EAAE,WAAW,CAAC;QACjC,IAAI,CAAC,KAAK,EAAE,QAAQ;YAAE,OAAO,IAAI,CAAC;QAClC,OAAO,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC;IAC/B,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,UAAU,CACd,QAAgB,EAChB,OAAe,EACf,KAAY,EACZ,UAAkB,EAClB,MAAc,EACd,QAAgB,EAChB,OAAe,EACf,aAAuC,EACvC,YAAgC,EAChC,MAAoB;QAEpB,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO,MAAM,CAAC;QAErC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;QAEtG,IAAI,KAAK,KAAK,QAAQ,IAAI,YAAY,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClE,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;gBACnC,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,GAAG;oBAAE,SAAS;gBAC1C,IAAI,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAC/B,QAAgB,EAChB,KAAY,EACZ,MAAc,EACd,OAAe,EACf,aAAuC,EACvC,MAAoB;QAEpB,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,EAAe,CAAC;QACnD,MAAM,GAAG,GAAsB;YAC7B,EAAE,EAAE,SAAS;YACb,KAAK;YACL,QAAQ;YACR,QAAQ,EAAE,QAAQ;YAClB,MAAM;YACN,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC;QAEF,4EAA4E;QAC5E,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YAC3B,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB;YAC5D,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,OAAO;YAC7C,IAAI,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;SAC9D,CAAC,CAAC;QAEf,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACvB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,mBAAmB,EAAE;gBAC9C,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;aAChE,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;QACtC,CAAC;QAED,IAAI,KAAK,GAAoB,QAAQ,CAAC;QACtC,MAAM,UAAU,GAAG,MAAM,aAAa,EAAE,QAAQ,CAAC,iBAAiB,EAAE;YAClE,UAAU,EAAE,QAAQ,QAAQ,EAAE;YAC9B,QAAQ,EAAE,QAAQ;YAClB,MAAM;SACP,CAAC,CAAC;QACH,IAAI,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;YAChC,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAwB,CAAC;QACvD,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACnC,uEAAuE;YACvE,uDAAuD;YACvD,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,0EAA0E;QAC1E,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YAC3B,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB;YAC1D,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,OAAO;YAC7C,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE;SACf,CAAC,CAAC;QAEf,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACvB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,iBAAiB,EAAE;gBAC5C,SAAS,EAAE,KAAK;aACjB,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;OAKG;IACH,kBAAkB,CAAC,QAAgB,EAAE,aAAgD,EAAE,OAAgB;QACrG,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC;QACtC,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,MAAM,IAAI,GAAG,OAAO,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3E,MAAM,eAAe,GAAG,OAAO,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC;QACpF,MAAM,OAAO,GAAG,qBAAqB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,QAAQ,IAAI,OAAO,GAAG,CAAC;QACvF,yEAAyE;QACzE,IAAI,KAAK,CAAC,cAAc,CAAC,QAAQ,QAAQ,EAAE,EAAE,QAAQ,EAAE,eAAe,CAAC;YAAE,OAAO,KAAK,CAAC;QACtF,IAAI,KAAK,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,EAAE,eAAe,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5E,uEAAuE;QACvE,IAAI,KAAK,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,EAAE,eAAe,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1E,OAAO,KAAK,CAAC,aAAa,CAAC,QAAQ,QAAQ,EAAE,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;IAC5E,CAAC;IAED,uEAAuE;IACvE,eAAe;QACb,OAAO,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC;IAChC,CAAC;IAED;;;;;OAKG;IACH,YAAY,CAAC,QAAgB,EAAE,aAAgD,EAAE,OAAgB;QAC/F,MAAM,IAAI,GAAG,OAAO,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3E,MAAM,eAAe,GAAG,OAAO,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC;QACpF,MAAM,OAAO,GAAG,qBAAqB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,QAAQ,IAAI,OAAO,GAAG,CAAC;QACvF,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,YAAY,CAAC;YACpC,QAAQ;YACR,MAAM,EAAE,QAAQ;YAChB,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzD,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,aAAa,CAAC,QAAgB,EAAE,aAAgD,EAAE,OAAgB;QAChG,MAAM,IAAI,GAAG,OAAO,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3E,MAAM,eAAe,GAAG,OAAO,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC;QACpF,MAAM,OAAO,GAAG,qBAAqB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,QAAQ,IAAI,OAAO,GAAG,CAAC;QACvF,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,aAAa,CACpC,QAAQ,EAAE,QAAQ,EAAE,eAAe,CACpC,CAAC;IACJ,CAAC;CACF"}

package/dist/run-context.d.ts

@@ -0,0 +1,26 @@
+import type { AgentConfig, AgentId, RunId } from "@vinhnt-sdk/schema";
+import type { ToolDefinition } from "@vinhnt-sdk/tools";
+import type { ToolSaga } from "@vinhnt-sdk/tools";
+/**
+ * Mutable state that belongs to a single run — kept out of the kernel
+ * instance so concurrent runs never share (and clobber) each other's
+ * active agent, sub-agent depth, agent chain, tool cache or saga.
+ */
+export interface RunContext {
+    /** The run this context belongs to. */
+    readonly runId: RunId;
+    /** Agent actively executing this run (may change during sub-agent traversal). */
+    agent: AgentConfig | undefined;
+    /** Current sub-agent nesting depth of this run. */
+    depth: number;
+    /** Agent ids already in this run's sub-agent call chain (cycle detection). */
+    agentChain: Set<AgentId>;
+    /** Per-run saga for tool compensation recording. */
+    saga: ToolSaga;
+    /** Per-run tool resolution cache, keyed by the agent it was built for. */
+    cachedTools: readonly ToolDefinition[] | null;
+    cachedToolsAgentId: AgentId | undefined;
+}
+/** Create a fresh per-run context. */
+export declare function createRunContext(runId: RunId, agent: AgentConfig | undefined, saga: ToolSaga): RunContext;
+//# sourceMappingURL=run-context.d.ts.map

package/dist/run-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-context.d.ts","sourceRoot":"","sources":["../src/run-context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AACtE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAElD;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,uCAAuC;IACvC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,iFAAiF;IACjF,KAAK,EAAE,WAAW,GAAG,SAAS,CAAC;IAC/B,mDAAmD;IACnD,KAAK,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IACzB,oDAAoD;IACpD,IAAI,EAAE,QAAQ,CAAC;IACf,0EAA0E;IAC1E,WAAW,EAAE,SAAS,cAAc,EAAE,GAAG,IAAI,CAAC;IAC9C,kBAAkB,EAAE,OAAO,GAAG,SAAS,CAAC;CACzC;AAED,sCAAsC;AACtC,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,WAAW,GAAG,SAAS,EAC9B,IAAI,EAAE,QAAQ,GACb,UAAU,CAUZ"}