agim-cli 1.2.45 → 1.2.49

package/dist/core/llm/openai-compat-provider.js

@@ -0,0 +1,451 @@
+// OpenAI-compatible chat completions provider.
+//
+// One adapter covers the entire OpenAI-compatible ecosystem: OpenAI,
+// DeepSeek, Moonshot/Kimi, Qwen DashScope (compat mode), MiniMax,
+// StepFun, VolcEngine, LongCat, Mistral La Plateforme, Groq, Together,
+// SiliconFlow, OpenRouter, vLLM, LM Studio, Ollama's OpenAI-compat
+// endpoint, and any custom gateway that exposes `/v1/chat/completions`.
+//
+// Stage 1 scope (intentionally narrow):
+//   - POST /v1/chat/completions with `messages` + `temperature` + `max_tokens`
+//   - Standard streaming via SSE (`stream: true`)
+//   - Single retry on 429 / 5xx transient errors
+//   - Usage extraction (prompt_tokens / completion_tokens / total_tokens)
+//
+// Out of scope for Stage 1 (lands in Stage 2):
+//   - structured outputs (json_schema)
+//   - response_format
+//
+// (Stage 2 added tool_calls + vision / image_url content parts; the
+// remaining items are still pending.)
+//
+// Why no SDK: every OpenAI-compatible vendor diverges in subtle ways and
+// the official `openai` SDK adds a 5MB+ dep tree for what is ultimately
+// one POST. `fetch` keeps the code auditable and dependency-free.
+import { LlmProvider, LlmProviderError, } from './provider-base.js';
+import { statSync as fsStatSync, readFileSync as fsReadFileSync } from 'node:fs';
+const DEFAULT_BASE_URL = 'https://api.openai.com/v1';
+const DEFAULT_RETRY = 1;
+/**
+ * Concrete provider for any OpenAI-compatible `/v1/chat/completions`
+ * endpoint. Single-shot chat is the only Stage-1 path we care about —
+ * the streaming method is wired up for Stage 2 / future "show thinking
+ * in web UI" features and is fully functional.
+ */
+export class OpenAICompatProvider extends LlmProvider {
+    baseUrl;
+    extraHeaders;
+    retryOnTransient;
+    vision;
+    constructor(cfg) {
+        super({
+            ...cfg,
+            providerType: cfg.providerLabel || 'openai-compat',
+        });
+        this.baseUrl = (cfg.baseUrl || DEFAULT_BASE_URL).replace(/\/+$/, '');
+        this.extraHeaders = cfg.extraHeaders || {};
+        this.retryOnTransient = Math.max(0, cfg.retryOnTransient ?? DEFAULT_RETRY);
+        if (typeof cfg.vision === 'boolean') {
+            this.vision = cfg.vision;
+        }
+        else {
+            // Heuristic: well-known vision-capable model families.
+            const m = (cfg.model || '').toLowerCase();
+            this.vision = /vision|gpt-4o|gpt-4\.1|qwen-vl|glm-4v|llava/.test(m);
+        }
+    }
+    supportsVision() {
+        return this.vision;
+    }
+    async _callApi(messages, opts, signal) {
+        const body = this._buildBody(messages, opts, false);
+        const json = await this._postJson(body, signal);
+        const text = extractText(json);
+        const finishReason = mapFinishReason(json?.choices?.[0]?.finish_reason);
+        const usage = extractUsage(json);
+        const toolCalls = extractToolCalls(json);
+        const reasoningContent = extractReasoningContent(json);
+        return {
+            text,
+            toolCalls: toolCalls.length > 0 ? toolCalls : undefined,
+            reasoningContent,
+            usage,
+            finishReason,
+            modelUsed: typeof json?.model === 'string' ? json.model : opts.model,
+        };
+    }
+    async *_callApiStream(messages, opts, signal) {
+        const body = this._buildBody(messages, opts, true);
+        const url = `${this.baseUrl}/chat/completions`;
+        const resp = await this._fetchWithRetry(url, body, signal);
+        if (!resp.body) {
+            throw new LlmProviderError(this.name, 'streaming response had no body', { httpStatus: resp.status });
+        }
+        const reader = resp.body.getReader();
+        const decoder = new TextDecoder('utf-8');
+        let buffer = '';
+        let lastUsage;
+        let lastFinish;
+        try {
+            while (true) {
+                const { value, done } = await reader.read();
+                if (done)
+                    break;
+                buffer += decoder.decode(value, { stream: true });
+                // SSE frames are separated by blank lines (`\n\n`); each frame
+                // contains one or more `data: <json>` lines.
+                for (;;) {
+                    const sep = buffer.indexOf('\n\n');
+                    if (sep === -1)
+                        break;
+                    const frame = buffer.slice(0, sep);
+                    buffer = buffer.slice(sep + 2);
+                    for (const line of frame.split('\n')) {
+                        const trimmed = line.trim();
+                        if (!trimmed.startsWith('data:'))
+                            continue;
+                        const payload = trimmed.slice(5).trim();
+                        if (payload === '[DONE]') {
+                            yield { textDelta: '', finishReason: lastFinish ?? 'stop', usage: lastUsage };
+                            return;
+                        }
+                        let parsed = null;
+                        try {
+                            parsed = JSON.parse(payload);
+                        }
+                        catch { /* ignore */ }
+                        if (!parsed)
+                            continue;
+                        const delta = parsed.choices?.[0]?.delta?.content;
+                        if (parsed.usage)
+                            lastUsage = extractUsage(parsed);
+                        if (parsed.choices?.[0]?.finish_reason) {
+                            lastFinish = mapFinishReason(parsed.choices[0].finish_reason);
+                        }
+                        if (typeof delta === 'string' && delta.length > 0) {
+                            yield { textDelta: delta };
+                        }
+                    }
+                }
+            }
+            // Stream ended without `[DONE]` (some vendors do this) — surface
+            // the trailing state so callers still see a finalized chunk.
+            yield { textDelta: '', finishReason: lastFinish ?? 'stop', usage: lastUsage };
+        }
+        finally {
+            try {
+                reader.releaseLock();
+            }
+            catch { /* ignore */ }
+        }
+    }
+    /**
+     * Compose the JSON body. Kept tiny on purpose — the messages array
+     * goes through as-is and the rest of the OpenAI surface (logprobs,
+     * top_p, stop, …) lands when callers ask for it via providerOptions.
+     */
+    _buildBody(messages, opts, stream) {
+        const body = {
+            model: opts.model,
+            messages: messages.map((m) => serializeMessage(m, { vision: this.vision })),
+            temperature: opts.temperature,
+            max_tokens: opts.maxTokens,
+        };
+        if (stream)
+            body.stream = true;
+        if (opts.tools && opts.tools.length > 0) {
+            body.tools = opts.tools.map(serializeToolDef);
+            const tc = serializeToolChoice(opts.toolChoice);
+            if (tc !== undefined)
+                body.tool_choice = tc;
+        }
+        // providerOptions lets callers pass through e.g. {top_p: 0.9} or
+        // DeepSeek's {response_format: {type:'json_object'}} without
+        // requiring a release of this file every time a vendor adds a knob.
+        for (const [k, v] of Object.entries(opts.providerOptions)) {
+            if (v !== undefined)
+                body[k] = v;
+        }
+        return body;
+    }
+    async _postJson(body, signal) {
+        const url = `${this.baseUrl}/chat/completions`;
+        const resp = await this._fetchWithRetry(url, body, signal);
+        let json;
+        try {
+            json = await resp.json();
+        }
+        catch (err) {
+            throw new LlmProviderError(this.name, 'failed to parse JSON response', {
+                httpStatus: resp.status,
+                cause: err,
+            });
+        }
+        return json;
+    }
+    /**
+     * fetch + minimal retry. We backoff with a tiny fixed delay rather
+     * than honoring Retry-After because Stage 1 callers (distill /
+     * intent) have very short deadlines — long backoffs would force a
+     * fallback to CLI anyway, which is the whole point of "transient
+     * retry, then surrender".
+     */
+    async _fetchWithRetry(url, body, signal) {
+        let lastErr;
+        let attempts = 0;
+        const maxAttempts = this.retryOnTransient + 1;
+        while (attempts < maxAttempts) {
+            attempts++;
+            try {
+                const headers = {
+                    'Content-Type': 'application/json',
+                    'User-Agent': 'agim-cli/llm-client',
+                    ...this.extraHeaders,
+                };
+                if (this.apiKey)
+                    headers.Authorization = `Bearer ${this.apiKey}`;
+                const resp = await fetch(url, {
+                    method: 'POST',
+                    headers,
+                    body: JSON.stringify(body),
+                    signal,
+                });
+                if (resp.ok)
+                    return resp;
+                const transient = resp.status === 429 || resp.status === 408 || (resp.status >= 500 && resp.status < 600);
+                // Read body so we can surface a useful error message; vendor
+                // error envelopes vary too much to parse reliably here.
+                let bodyText = '';
+                try {
+                    bodyText = (await resp.text()).slice(0, 500);
+                }
+                catch { /* ignore */ }
+                if (!transient || attempts >= maxAttempts) {
+                    throw new LlmProviderError(this.name, `HTTP ${resp.status} from ${this.providerType}: ${bodyText || '(no body)'}`, { httpStatus: resp.status, transient });
+                }
+                // Transient and budget remaining — sleep and let the while loop
+                // tick to the next attempt. The retry budget is the only thing
+                // standing between us and an infinite loop.
+                await sleep(250 * attempts, signal);
+            }
+            catch (err) {
+                // AbortError propagates immediately — callers wired timeouts on
+                // purpose and want to bail.
+                if (isAbortError(err))
+                    throw err;
+                lastErr = err;
+                if (attempts < maxAttempts) {
+                    await sleep(250 * attempts, signal);
+                }
+            }
+        }
+        if (lastErr instanceof LlmProviderError)
+            throw lastErr;
+        throw new LlmProviderError(this.name, `transport error: ${lastErr?.message ?? String(lastErr)}`, { transient: true, cause: lastErr });
+    }
+}
+function extractReasoningContent(json) {
+    const r = json?.choices?.[0]?.message?.reasoning_content;
+    return typeof r === 'string' && r.length > 0 ? r : undefined;
+}
+function extractText(json) {
+    const c = json?.choices?.[0]?.message?.content;
+    if (typeof c === 'string')
+        return c;
+    return '';
+}
+function extractUsage(json) {
+    const u = json?.usage;
+    if (!u)
+        return {};
+    const result = {
+        promptTokens: typeof u.prompt_tokens === 'number' ? u.prompt_tokens : undefined,
+        completionTokens: typeof u.completion_tokens === 'number' ? u.completion_tokens : undefined,
+        totalTokens: typeof u.total_tokens === 'number' ? u.total_tokens : undefined,
+    };
+    const cost = typeof u.cost === 'number' ? u.cost
+        : typeof u.total_cost === 'number' ? u.total_cost
+            : undefined;
+    if (cost !== undefined)
+        result.costUsd = cost;
+    return result;
+}
+function mapFinishReason(raw) {
+    switch (raw) {
+        case 'stop': return 'stop';
+        case 'length': return 'length';
+        case 'content_filter': return 'content_filter';
+        case 'tool_calls': return 'tool_use'; // Stage 2 — agent loop iterates on this
+        case 'function_call': return 'tool_use';
+        case null:
+        case undefined:
+        case '': return 'unknown';
+        default: return 'unknown';
+    }
+}
+function sleep(ms, signal) {
+    return new Promise((resolve, reject) => {
+        if (signal.aborted) {
+            reject(signal.reason ?? new Error('aborted'));
+            return;
+        }
+        const t = setTimeout(() => {
+            signal.removeEventListener('abort', onAbort);
+            resolve();
+        }, ms);
+        const onAbort = () => {
+            clearTimeout(t);
+            reject(signal.reason ?? new Error('aborted'));
+        };
+        signal.addEventListener('abort', onAbort, { once: true });
+    });
+}
+function isAbortError(err) {
+    if (!err)
+        return false;
+    if (typeof err !== 'object')
+        return false;
+    const name = err.name;
+    return name === 'AbortError';
+}
+// ─── Stage 2 — tool-call serialization / deserialization ─────────────
+function serializeMessage(m, opts) {
+    // OpenAI's wire-format expects either:
+    //   - {role:'system'|'user', content}
+    //   - {role:'assistant', content, tool_calls?: [...]}
+    //   - {role:'tool', tool_call_id, content}
+    // We branch on role to put fields in the right shape, otherwise the
+    // API politely 400s with very unhelpful errors.
+    if (m.role === 'tool') {
+        return {
+            role: 'tool',
+            tool_call_id: m.toolCallId ?? '',
+            content: m.content,
+        };
+    }
+    if (m.role === 'assistant' && m.toolCalls && m.toolCalls.length > 0) {
+        const out = {
+            role: 'assistant',
+            // content may be empty when the assistant emitted only tool_calls.
+            // OpenAI requires the key to be present (use null over '').
+            content: m.content || null,
+            tool_calls: m.toolCalls.map((tc) => ({
+                id: tc.id,
+                type: 'function',
+                function: {
+                    name: tc.name,
+                    arguments: tc.argumentsRaw ?? JSON.stringify(tc.arguments),
+                },
+            })),
+        };
+        if (m.reasoningContent)
+            out.reasoning_content = m.reasoningContent;
+        return out;
+    }
+    if (m.role === 'assistant' && m.reasoningContent) {
+        return { role: 'assistant', content: m.content || null, reasoning_content: m.reasoningContent };
+    }
+    // User / system path. Encode media as image_url content blocks when
+    // the provider declared vision support; otherwise drop the media
+    // (the text path already mentions the attachment by path so the
+    // model can still acknowledge it textually).
+    if (opts.vision && m.media && m.media.length > 0 && m.role === 'user') {
+        const blocks = [];
+        if (m.content)
+            blocks.push({ type: 'text', text: m.content });
+        for (const item of m.media) {
+            const dataUrl = mediaToDataUrl(item.path, item.mime);
+            if (dataUrl)
+                blocks.push({ type: 'image_url', image_url: { url: dataUrl } });
+        }
+        if (blocks.length > 0)
+            return { role: 'user', content: blocks };
+    }
+    return { role: m.role, content: m.content };
+}
+/** Read a local file and inline-base64 it as a data URL. Returns null
+ *  on read failure so the caller can fall back to text-only. Capped at
+ *  20MB — most IM attachments are well under, and oversize files would
+ *  blow past most providers' request-size limits anyway. */
+function mediaToDataUrl(path, mimeHint) {
+    try {
+        const stat = fsStatSync(path);
+        if (stat.size > 20 * 1024 * 1024)
+            return null;
+        const buf = fsReadFileSync(path);
+        const mime = mimeHint || sniffMime(path);
+        return `data:${mime};base64,${buf.toString('base64')}`;
+    }
+    catch {
+        return null;
+    }
+}
+function sniffMime(path) {
+    const lower = path.toLowerCase();
+    if (lower.endsWith('.jpg') || lower.endsWith('.jpeg'))
+        return 'image/jpeg';
+    if (lower.endsWith('.png'))
+        return 'image/png';
+    if (lower.endsWith('.webp'))
+        return 'image/webp';
+    if (lower.endsWith('.gif'))
+        return 'image/gif';
+    return 'application/octet-stream';
+}
+function serializeToolDef(t) {
+    return {
+        type: 'function',
+        function: {
+            name: t.name,
+            description: t.description,
+            parameters: t.parameters,
+        },
+    };
+}
+function serializeToolChoice(choice) {
+    if (!choice)
+        return undefined;
+    if (choice === 'auto' || choice === 'required' || choice === 'none')
+        return choice;
+    if (typeof choice === 'object' && choice.type === 'tool') {
+        return { type: 'function', function: { name: choice.name } };
+    }
+    return undefined;
+}
+function extractToolCalls(json) {
+    const calls = json?.choices?.[0]?.message?.tool_calls;
+    if (!Array.isArray(calls) || calls.length === 0)
+        return [];
+    const out = [];
+    for (const c of calls) {
+        const id = typeof c?.id === 'string' ? c.id : '';
+        const name = typeof c?.function?.name === 'string' ? c.function.name : '';
+        const rawArgs = typeof c?.function?.arguments === 'string' ? c.function.arguments : '';
+        if (!id || !name)
+            continue;
+        let parsed = {};
+        let argumentsRaw;
+        if (rawArgs) {
+            try {
+                const obj = JSON.parse(rawArgs);
+                if (obj && typeof obj === 'object' && !Array.isArray(obj)) {
+                    parsed = obj;
+                }
+                else {
+                    argumentsRaw = rawArgs;
+                }
+            }
+            catch {
+                // Model emitted malformed JSON. Surface the raw text so tools
+                // can decide whether to error or to attempt a salvage.
+                argumentsRaw = rawArgs;
+            }
+        }
+        const req = { id, name, arguments: parsed };
+        if (argumentsRaw !== undefined)
+            req.argumentsRaw = argumentsRaw;
+        out.push(req);
+    }
+    return out;
+}
+//# sourceMappingURL=openai-compat-provider.js.map

package/dist/core/llm/openai-compat-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai-compat-provider.js","sourceRoot":"","sources":["../../../src/core/llm/openai-compat-provider.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAC/C,EAAE;AACF,qEAAqE;AACrE,kEAAkE;AAClE,uEAAuE;AACvE,mEAAmE;AACnE,wEAAwE;AACxE,EAAE;AACF,wCAAwC;AACxC,+EAA+E;AAC/E,kDAAkD;AAClD,iDAAiD;AACjD,0EAA0E;AAC1E,EAAE;AACF,+CAA+C;AAC/C,uCAAuC;AACvC,sBAAsB;AACtB,EAAE;AACF,oEAAoE;AACpE,sCAAsC;AACtC,EAAE;AACF,yEAAyE;AACzE,wEAAwE;AACxE,kEAAkE;AAElE,OAAO,EACL,WAAW,EACX,gBAAgB,GAWjB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,QAAQ,IAAI,UAAU,EAAE,YAAY,IAAI,cAAc,EAAE,MAAM,SAAS,CAAA;AAmChF,MAAM,gBAAgB,GAAG,2BAA2B,CAAA;AACpD,MAAM,aAAa,GAAG,CAAC,CAAA;AAEvB;;;;;GAKG;AACH,MAAM,OAAO,oBAAqB,SAAQ,WAAW;IAClC,OAAO,CAAQ;IACf,YAAY,CAAwB;IACpC,gBAAgB,CAAQ;IACxB,MAAM,CAAS;IAEhC,YAAY,GAA+B;QACzC,KAAK,CAAC;YACJ,GAAG,GAAG;YACN,YAAY,EAAE,GAAG,CAAC,aAAa,IAAI,eAAe;SACnD,CAAC,CAAA;QACF,IAAI,CAAC,OAAO,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,gBAAgB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QACpE,IAAI,CAAC,YAAY,GAAG,GAAG,CAAC,YAAY,IAAI,EAAE,CAAA;QAC1C,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,gBAAgB,IAAI,aAAa,CAAC,CAAA;QAC1E,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAA;QAC1B,CAAC;aAAM,CAAC;YACN,uDAAuD;YACvD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;YACzC,IAAI,CAAC,MAAM,GAAG,6CAA6C,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACrE,CAAC;IACH,CAAC;IAEQ,cAAc;QACrB,OAAO,IAAI,CAAC,MAAM,CAAA;IACpB,CAAC;IAES,KAAK,CAAC,QAAQ,CACtB,QAAsB,EACtB,IAAuB,EACvB,MAAmB;QAEnB,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;QACnD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAC/C,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAA;QAC9B,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,CAAA;QACvE,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;QAChC,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAA;QACxC,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAA;QACtD,OAAO;YACL,IAAI;YACJ,SAAS,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YACvD,gBAAgB;YAChB,KAAK;YACL,YAAY;YACZ,SAAS,EAAE,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK;SACrE,CAAA;IACH,CAAC;IAES,KAAK,CAAC,CAAC,cAAc,CAC7B,QAAsB,EACtB,IAAuB,EACvB,MAAmB;QAEnB,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;QAClD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,mBAAmB,CAAA;QAC9C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;QAC1D,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,gCAAgC,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAA;QACtG,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAA;QACpC,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,CAAC,CAAA;QACxC,IAAI,MAAM,GAAG,EAAE,CAAA;QACf,IAAI,SAA+B,CAAA;QACnC,IAAI,UAAoC,CAAA;QACxC,IAAI,CAAC;YACH,OAAO,IAAI,EAAE,CAAC;gBACZ,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;gBAC3C,IAAI,IAAI;oBAAE,MAAK;gBACf,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;gBACjD,+DAA+D;gBAC/D,6CAA6C;gBAC7C,SAAS,CAAC;oBACR,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;oBAClC,IAAI,GAAG,KAAK,CAAC,CAAC;wBAAE,MAAK;oBACrB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;oBAClC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAA;oBAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;wBACrC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;wBAC3B,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;4BAAE,SAAQ;wBAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;wBACvC,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;4BACzB,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,YAAY,EAAE,UAAU,IAAI,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,CAAA;4BAC7E,OAAM;wBACR,CAAC;wBACD,IAAI,MAAM,GAA+B,IAAI,CAAA;wBAC7C,IAAI,CAAC;4BAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAwB,CAAA;wBAAC,CAAC;wBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;wBAClF,IAAI,CAAC,MAAM;4BAAE,SAAQ;wBACrB,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAA;wBACjD,IAAI,MAAM,CAAC,KAAK;4BAAE,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;wBAClD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC;4BACvC,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAA;wBAC/D,CAAC;wBACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;4BAClD,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;wBAC5B,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YACD,iEAAiE;YACjE,6DAA6D;YAC7D,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,YAAY,EAAE,UAAU,IAAI,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,CAAA;QAC/E,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC;gBAAC,MAAM,CAAC,WAAW,EAAE,CAAA;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,UAAU,CAChB,QAAsB,EACtB,IAAuB,EACvB,MAAe;QAEf,MAAM,IAAI,GAA4B;YACpC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YAC3E,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,UAAU,EAAE,IAAI,CAAC,SAAS;SAC3B,CAAA;QACD,IAAI,MAAM;YAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAA;QAC9B,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;YAC7C,MAAM,EAAE,GAAG,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YAC/C,IAAI,EAAE,KAAK,SAAS;gBAAE,IAAI,CAAC,WAAW,GAAG,EAAE,CAAA;QAC7C,CAAC;QACD,iEAAiE;QACjE,6DAA6D;QAC7D,oEAAoE;QACpE,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;YAC1D,IAAI,CAAC,KAAK,SAAS;gBAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QAClC,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,IAAa,EAAE,MAAmB;QACxD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,mBAAmB,CAAA;QAC9C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;QAC1D,IAAI,IAA4B,CAAA;QAChC,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAA4B,CAAA;QACpD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,+BAA+B,EAAE;gBACrE,UAAU,EAAE,IAAI,CAAC,MAAM;gBACvB,KAAK,EAAE,GAAG;aACX,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,eAAe,CAAC,GAAW,EAAE,IAAa,EAAE,MAAmB;QAC3E,IAAI,OAAgB,CAAA;QACpB,IAAI,QAAQ,GAAG,CAAC,CAAA;QAChB,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,GAAG,CAAC,CAAA;QAC7C,OAAO,QAAQ,GAAG,WAAW,EAAE,CAAC;YAC9B,QAAQ,EAAE,CAAA;YACV,IAAI,CAAC;gBACH,MAAM,OAAO,GAA2B;oBACtC,cAAc,EAAE,kBAAkB;oBAClC,YAAY,EAAE,qBAAqB;oBACnC,GAAG,IAAI,CAAC,YAAY;iBACrB,CAAA;gBACD,IAAI,IAAI,CAAC,MAAM;oBAAE,OAAO,CAAC,aAAa,GAAG,UAAU,IAAI,CAAC,MAAM,EAAE,CAAA;gBAChE,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;oBAC5B,MAAM,EAAE,MAAM;oBACd,OAAO;oBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;oBAC1B,MAAM;iBACP,CAAC,CAAA;gBACF,IAAI,IAAI,CAAC,EAAE;oBAAE,OAAO,IAAI,CAAA;gBACxB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAA;gBACzG,6DAA6D;gBAC7D,wDAAwD;gBACxD,IAAI,QAAQ,GAAG,EAAE,CAAA;gBACjB,IAAI,CAAC;oBAAC,QAAQ,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;gBAC3E,IAAI,CAAC,SAAS,IAAI,QAAQ,IAAI,WAAW,EAAE,CAAC;oBAC1C,MAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAClC,QAAQ,IAAI,CAAC,MAAM,SAAS,IAAI,CAAC,YAAY,KAAK,QAAQ,IAAI,WAAW,EAAE,EAC3E,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAA;gBAC3C,CAAC;gBACD,gEAAgE;gBAChE,+DAA+D;gBAC/D,4CAA4C;gBAC5C,MAAM,KAAK,CAAC,GAAG,GAAG,QAAQ,EAAE,MAAM,CAAC,CAAA;YACrC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,gEAAgE;gBAChE,4BAA4B;gBAC5B,IAAI,YAAY,CAAC,GAAG,CAAC;oBAAE,MAAM,GAAG,CAAA;gBAChC,OAAO,GAAG,GAAG,CAAA;gBACb,IAAI,QAAQ,GAAG,WAAW,EAAE,CAAC;oBAC3B,MAAM,KAAK,CAAC,GAAG,GAAG,QAAQ,EAAE,MAAM,CAAC,CAAA;gBACrC,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,OAAO,YAAY,gBAAgB;YAAE,MAAM,OAAO,CAAA;QACtD,MAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAClC,oBAAqB,OAAiB,EAAE,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,EACpE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;IACxC,CAAC;CACF;AA8CD,SAAS,uBAAuB,CAAC,IAAmC;IAClE,MAAM,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,iBAAiB,CAAA;IACxD,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AAC9D,CAAC;AAED,SAAS,WAAW,CAAC,IAAmC;IACtD,MAAM,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAA;IAC9C,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAA;IACnC,OAAO,EAAE,CAAA;AACX,CAAC;AAED,SAAS,YAAY,CAAC,IAA4C;IAChE,MAAM,CAAC,GAAG,IAAI,EAAE,KAAK,CAAA;IACrB,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAA;IACjB,MAAM,MAAM,GAAa;QACvB,YAAY,EAAE,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;QAC/E,gBAAgB,EAAE,OAAO,CAAC,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;QAC3F,WAAW,EAAE,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;KAC7E,CAAA;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;QAC9C,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU;YACjD,CAAC,CAAC,SAAS,CAAA;IACb,IAAI,IAAI,KAAK,SAAS;QAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAA;IAC7C,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,eAAe,CAAC,GAA8B;IACrD,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,MAAM,CAAC,CAAC,OAAO,MAAM,CAAA;QAC1B,KAAK,QAAQ,CAAC,CAAC,OAAO,QAAQ,CAAA;QAC9B,KAAK,gBAAgB,CAAC,CAAC,OAAO,gBAAgB,CAAA;QAC9C,KAAK,YAAY,CAAC,CAAC,OAAO,UAAU,CAAA,CAAG,wCAAwC;QAC/E,KAAK,eAAe,CAAC,CAAC,OAAO,UAAU,CAAA;QACvC,KAAK,IAAI,CAAC;QACV,KAAK,SAAS,CAAC;QACf,KAAK,EAAE,CAAC,CAAC,OAAO,SAAS,CAAA;QACzB,OAAO,CAAC,CAAC,OAAO,SAAS,CAAA;IAC3B,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,EAAU,EAAE,MAAmB;IAC5C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAA;YAC7C,OAAM;QACR,CAAC;QACD,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE;YACxB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YAC5C,OAAO,EAAE,CAAA;QACX,CAAC,EAAE,EAAE,CAAC,CAAA;QACN,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,YAAY,CAAC,CAAC,CAAC,CAAA;YACf,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAA;QAC/C,CAAC,CAAA;QACD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IAC3D,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,GAAY;IAChC,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAA;IACtB,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IACzC,MAAM,IAAI,GAAI,GAA0B,CAAC,IAAI,CAAA;IAC7C,OAAO,IAAI,KAAK,YAAY,CAAA;AAC9B,CAAC;AAED,wEAAwE;AAExE,SAAS,gBAAgB,CAAC,CAAa,EAAE,IAAyB;IAChE,uCAAuC;IACvC,sCAAsC;IACtC,sDAAsD;IACtD,2CAA2C;IAC3C,oEAAoE;IACpE,gDAAgD;IAChD,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO;YACL,IAAI,EAAE,MAAM;YACZ,YAAY,EAAE,CAAC,CAAC,UAAU,IAAI,EAAE;YAChC,OAAO,EAAE,CAAC,CAAC,OAAO;SACnB,CAAA;IACH,CAAC;IACD,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpE,MAAM,GAAG,GAA4B;YACnC,IAAI,EAAE,WAAW;YACjB,mEAAmE;YACnE,4DAA4D;YAC5D,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI;YAC1B,UAAU,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;gBACnC,EAAE,EAAE,EAAE,CAAC,EAAE;gBACT,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE;oBACR,IAAI,EAAE,EAAE,CAAC,IAAI;oBACb,SAAS,EAAE,EAAE,CAAC,YAAY,IAAI,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC;iBAC3D;aACF,CAAC,CAAC;SACJ,CAAA;QACD,IAAI,CAAC,CAAC,gBAAgB;YAAE,GAAG,CAAC,iBAAiB,GAAG,CAAC,CAAC,gBAAgB,CAAA;QAClE,OAAO,GAAG,CAAA;IACZ,CAAC;IACD,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;QACjD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAA;IACjG,CAAC;IACD,oEAAoE;IACpE,iEAAiE;IACjE,gEAAgE;IAChE,6CAA6C;IAC7C,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACtE,MAAM,MAAM,GAAmC,EAAE,CAAA;QACjD,IAAI,CAAC,CAAC,OAAO;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAA;QAC7D,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;YACpD,IAAI,OAAO;gBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,CAAA;QAC9E,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAA;IACjE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAA;AAC7C,CAAC;AAED;;;4DAG4D;AAC5D,SAAS,cAAc,CAAC,IAAY,EAAE,QAAiB;IACrD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;QAC7B,IAAI,IAAI,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI;YAAE,OAAO,IAAI,CAAA;QAC7C,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,CAAC,CAAA;QAChC,MAAM,IAAI,GAAG,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,CAAA;QACxC,OAAO,QAAQ,IAAI,WAAW,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAA;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAA;IAChC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,YAAY,CAAA;IAC1E,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,WAAW,CAAA;IAC9C,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,YAAY,CAAA;IAChD,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,WAAW,CAAA;IAC9C,OAAO,0BAA0B,CAAA;AACnC,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAU;IAClC,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE;YACR,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,UAAU,EAAE,CAAC,CAAC,UAAU;SACzB;KACF,CAAA;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,MAA8B;IACzD,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAA;IAC7B,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,UAAU,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,MAAM,CAAA;IAClF,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACzD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,CAAA;IAC9D,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAmC;IAC3D,MAAM,KAAK,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,CAAA;IACrD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAC1D,MAAM,GAAG,GAAsB,EAAE,CAAA;IACjC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAChD,MAAM,IAAI,GAAG,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;QACzE,MAAM,OAAO,GAAG,OAAO,CAAC,EAAE,QAAQ,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAA;QACtF,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI;YAAE,SAAQ;QAC1B,IAAI,MAAM,GAA4B,EAAE,CAAA;QACxC,IAAI,YAAgC,CAAA;QACpC,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAA;gBAC1C,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC1D,MAAM,GAAG,GAA8B,CAAA;gBACzC,CAAC;qBAAM,CAAC;oBACN,YAAY,GAAG,OAAO,CAAA;gBACxB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,8DAA8D;gBAC9D,uDAAuD;gBACvD,YAAY,GAAG,OAAO,CAAA;YACxB,CAAC;QACH,CAAC;QACD,MAAM,GAAG,GAAoB,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAA;QAC5D,IAAI,YAAY,KAAK,SAAS;YAAE,GAAG,CAAC,YAAY,GAAG,YAAY,CAAA;QAC/D,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACf,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/core/llm/policy-approval-gate.d.ts

@@ -0,0 +1,30 @@
+import type { ApprovalGate } from './agent-loop.js';
+/**
+ * Approval mode. Defaults to 'allow-list' which is the safest sane
+ * default — operators must explicitly enumerate tools the agent may
+ * call without an external approver.
+ */
+export type ApprovalMode = 'allow-all' | 'read-only' | 'allow-list' | 'deny-all';
+export interface PolicyApprovalGateConfig {
+    /** Selection rule. Default 'allow-list'. */
+    mode?: ApprovalMode;
+    /** Tools that are always allowed regardless of mode (except 'deny-all'
+     *  where nothing passes). Names can be either built-in tool names
+     *  (`native_echo`) or MCP namespaced names (`mcp_filesystem_read_file`). */
+    autoAllow?: string[];
+    /** Tools that are always denied regardless of mode (even in
+     *  'allow-all'). Use this as the operator's emergency brake. */
+    denyList?: string[];
+}
+/**
+ * Build an ApprovalGate based on the supplied policy. The returned gate
+ * is synchronous-fast (no IO) and always resolves — it never throws.
+ */
+export declare function buildPolicyApprovalGate(cfg?: PolicyApprovalGateConfig): ApprovalGate;
+/**
+ * Describe a policy decision for logs / future IM "approval requested"
+ * preview cards. Returned as a one-liner; the gate itself doesn't log
+ * (logging belongs to the agent loop's `toolCalls` report).
+ */
+export declare function describePolicy(cfg: PolicyApprovalGateConfig): string;
+//# sourceMappingURL=policy-approval-gate.d.ts.map

package/dist/core/llm/policy-approval-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-approval-gate.d.ts","sourceRoot":"","sources":["../../../src/core/llm/policy-approval-gate.ts"],"names":[],"mappings":"AAyBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAEnD;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,WAAW,GAAG,WAAW,GAAG,YAAY,GAAG,UAAU,CAAA;AAEhF,MAAM,WAAW,wBAAwB;IACvC,4CAA4C;IAC5C,IAAI,CAAC,EAAE,YAAY,CAAA;IACnB;;gFAE4E;IAC5E,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;IACpB;oEACgE;IAChE,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;CACpB;AA2BD;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,GAAE,wBAA6B,GAAG,YAAY,CAqBxF;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,wBAAwB,GAAG,MAAM,CAKpE"}

package/dist/core/llm/policy-approval-gate.js

@@ -0,0 +1,86 @@
+// policy-approval-gate — declarative approval gate for the native
+// agent loop (Stage 2 sub-PR #4).
+//
+// Stage 2 sub-PR #4 ships a *policy-driven* gate rather than a full
+// IM-interactive approval card. Why:
+//
+//   - The existing approval-router pipeline is wired tightly to the
+//     MCP sidecar's Unix-socket bus protocol (one runId per CLI agent
+//     subprocess, decisions echoed back through that socket). Reusing
+//     it for native calls would require a substantial refactor of
+//     approval-bus to support arbitrary in-process awaiters.
+//   - For the native agent's initial cut, three operating modes cover
+//     the realistic ops surface:
+//        1. 'allow-all'    — fully autonomous (CI / monitoring runs).
+//        2. 'read-only'    — allow tools whose name suggests pure read
+//                            (heuristic + explicit allow list).
+//        3. 'allow-list'   — explicit `autoAllow: string[]` from config;
+//                            anything else is denied.
+//     This is enough to let operators run native safely while we design
+//     the cross-platform IM approval gate as a follow-up.
+//   - The agent loop ALWAYS calls `approve(call)`; passing our gate
+//     here doesn't preclude swapping for a richer gate later. Tests
+//     verify the contract.
+/**
+ * Heuristic for the 'read-only' mode: tool names that historically
+ * mean "look but don't touch". Conservative on purpose — anything not
+ * on this list is treated as write-y and requires explicit allow-list
+ * approval. The list is shared by every backend (MCP tool naming
+ * conventions are loose enough that this works as a starting filter,
+ * and the explicit autoAllow always overrides it).
+ */
+const READ_ONLY_HINTS = [
+    'read', 'list', 'get', 'search', 'find', 'fetch', 'show', 'view',
+    'inspect', 'describe', 'status', 'echo', 'now', 'random_uuid',
+];
+function looksReadOnly(toolName) {
+    // Strip the mcp_{server}_ prefix so the verb appears at the start.
+    const stripped = toolName.replace(/^mcp_[A-Za-z0-9_]+?_/, '').toLowerCase();
+    for (const hint of READ_ONLY_HINTS) {
+        if (stripped.startsWith(hint) || stripped.endsWith(`_${hint}`) ||
+            stripped.includes(`_${hint}_`)) {
+            return true;
+        }
+    }
+    return false;
+}
+/**
+ * Build an ApprovalGate based on the supplied policy. The returned gate
+ * is synchronous-fast (no IO) and always resolves — it never throws.
+ */
+export function buildPolicyApprovalGate(cfg = {}) {
+    const mode = cfg.mode ?? 'allow-list';
+    const autoAllow = new Set(cfg.autoAllow ?? []);
+    const denyList = new Set(cfg.denyList ?? []);
+    return async (call) => {
+        if (denyList.has(call.name))
+            return 'deny';
+        if (autoAllow.has(call.name))
+            return 'allow';
+        switch (mode) {
+            case 'allow-all':
+                return 'allow';
+            case 'deny-all':
+                return 'deny';
+            case 'read-only':
+                return looksReadOnly(call.name) ? 'allow' : 'deny';
+            case 'allow-list':
+                // Outside the allow-list → deny. This is the default mode.
+                return 'deny';
+            default:
+                return 'deny';
+        }
+    };
+}
+/**
+ * Describe a policy decision for logs / future IM "approval requested"
+ * preview cards. Returned as a one-liner; the gate itself doesn't log
+ * (logging belongs to the agent loop's `toolCalls` report).
+ */
+export function describePolicy(cfg) {
+    const mode = cfg.mode ?? 'allow-list';
+    const allowCount = cfg.autoAllow?.length ?? 0;
+    const denyCount = cfg.denyList?.length ?? 0;
+    return `mode=${mode}, autoAllow=${allowCount}, denyList=${denyCount}`;
+}
+//# sourceMappingURL=policy-approval-gate.js.map

package/dist/core/llm/policy-approval-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-approval-gate.js","sourceRoot":"","sources":["../../../src/core/llm/policy-approval-gate.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,kCAAkC;AAClC,EAAE;AACF,oEAAoE;AACpE,qCAAqC;AACrC,EAAE;AACF,oEAAoE;AACpE,sEAAsE;AACtE,sEAAsE;AACtE,kEAAkE;AAClE,6DAA6D;AAC7D,sEAAsE;AACtE,iCAAiC;AACjC,sEAAsE;AACtE,uEAAuE;AACvE,gEAAgE;AAChE,yEAAyE;AACzE,sDAAsD;AACtD,wEAAwE;AACxE,0DAA0D;AAC1D,oEAAoE;AACpE,oEAAoE;AACpE,2BAA2B;AAwB3B;;;;;;;GAOG;AACH,MAAM,eAAe,GAAG;IACtB,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM;IAChE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa;CAC9D,CAAA;AAED,SAAS,aAAa,CAAC,QAAgB;IACrC,mEAAmE;IACnE,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;IAC3E,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;QACnC,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC;YAC1D,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;YACnC,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAgC,EAAE;IACxE,MAAM,IAAI,GAAiB,GAAG,CAAC,IAAI,IAAI,YAAY,CAAA;IACnD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAA;IAC9C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAA;IAC5C,OAAO,KAAK,EAAE,IAAqB,EAA6B,EAAE;QAChE,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,MAAM,CAAA;QAC1C,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,OAAO,CAAA;QAC5C,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,WAAW;gBACd,OAAO,OAAO,CAAA;YAChB,KAAK,UAAU;gBACb,OAAO,MAAM,CAAA;YACf,KAAK,WAAW;gBACd,OAAO,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAA;YACpD,KAAK,YAAY;gBACf,2DAA2D;gBAC3D,OAAO,MAAM,CAAA;YACf;gBACE,OAAO,MAAM,CAAA;QACjB,CAAC;IACH,CAAC,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,GAA6B;IAC1D,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,YAAY,CAAA;IACrC,MAAM,UAAU,GAAG,GAAG,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC,CAAA;IAC7C,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,CAAA;IAC3C,OAAO,QAAQ,IAAI,eAAe,UAAU,cAAc,SAAS,EAAE,CAAA;AACvE,CAAC"}