aimeat 2.7.0 → 3.1.0

package/dist/src/services/build-app-prompt.js

@@ -1,3 +1,95 @@
+/**
+ * @file build-app-prompt.ts
+ * @description The canonical "build an AIMEAT app" prompt — the SAME text the app-catalog's
+ *   Create-new-app button copies, served from the node so every consumer (app-catalog UI,
+ *   agentic coders via GET /v1/prompts/build-app, llms.txt readers) gets one non-drifting
+ *   source of truth. The app-catalog composes its dynamic header (user's idea, improve-mode
+ *   source app, selected template) around the `body` part; agents take `full` as-is.
+ * @structure buildAppPrompt(config, opts) -> { full, body }
+ *   - body: the platform-instructions core (heading + libraries + auth + data + AI + realtime
+ *     + design + rules [+ publish-back for mode 'new']) — what the app-catalog fetches.
+ *   - full: language line + interview header (mode 'new') + body — what agents fetch.
+ *   - buildAppSpecToken(config): the digest of this document, which the publish gate checks.
+ * @usage import { buildAppPrompt } from '../services/build-app-prompt.js';
+ *   const { full, body } = buildAppPrompt(config, { lang: 'en', mode: 'new', idea: '...' });
+ * @version-history
+ *   2026-08-12 — ADDITIVE: "Mobile input" section after the mobile safety checklist, plus the
+ *     aimeat-input pack in the Ready-made UI list (registry-driven). Everything the prompt said
+ *     about phones was LAYOUT — overflow, viewport, the bottom chrome strip, fifteen appdev
+ *     pitfalls — and none of it about how a control answers a finger, so touch was hand-rolled per
+ *     app and got the same three bugs each time. The section names one default (tappable) and the
+ *     one option that must be declared (axis). Existing text untouched.
+ *   2026-08-11 — ADDITIVE: the spec token. buildAppSpecToken(config) digests this document, the
+ *     prompt names it once in the MCP-agent section, and services/app-spec-gate.ts checks it at
+ *     publish. Born from an app that went live on 2026-08-11 with three defects this text already
+ *     answers, published by an agent that never fetched it — the soft "read this first" in the MCP
+ *     instructions and the skill changed nothing, while a machine-readable field in a publish
+ *     response changed behaviour on the spot. Existing text untouched.
+ *   2026-08-09 — ADDITIVE (permission granted 2026-08-09): four memory-SHAPE rules at the top of Data
+ *     Storage — one key per entity or coherent collection, the 1024 kB / 1000-key ceilings with the
+ *     `keys_per_day × 365 > 1000` check, nesting is free for search (depth ≤ 5), and a key name is an
+ *     address not a sentence. Born from the memory-key-shape audit: 21% of the node's keyspace sat in
+ *     one-key-per-small-fact templates and no guidance surface stated either quota. Existing text
+ *     untouched; the "one public key per entry" line at the end of the section is NOT changed here.
+ *   2026-08-02 — ADDITIVE: "The node's bottom chrome strip" section + finish-gate check 6. The node
+ *     now serves `--aimeat-chrome-bottom` (utils/app-chrome-reserve.ts) and apps lift fixed bottom
+ *     UI / pad scrollers by it, so nothing renders under the AI label or the attribution badge.
+ *     Existing text untouched.
+ *   2026-08-01 — TARGET-058 Phase 5, ADDITIVE (permission granted 2026-08-01): "Say that the AI made
+ *     it" — the disclose/declare/chatNotice calls with one worked snippet, the `<meta name="aimeat-ai">`
+ *     posture declaration, and the Art. 50(3) paragraph putting the biometric-inference duty on the
+ *     app owner as deployer. Plus one bullet in Important Rules and one line in the finish gate.
+ *     Existing text untouched.
+ *   2026-07-31 — "Spending the user's money" section (AI calls + agent commissions): one click =
+ *     one run on the SDK's own repeat guard, confirm before a batch via AIMEAT.spend.confirm,
+ *     budget on screen, no automatic retry of a paid call, a cancel path for a running job — plus
+ *     the matching publish check (five fast clicks must produce exactly one request).
+ *   2026-07-25 — Fleet-facing app sections, all three born from real DESK build failures: "Reading
+ *     data your AGENTS produced" (agent keys live under the agent GAII; an app-grant token needs
+ *     ownerScope/agent explicitly, so an unscoped list() returns [] and the app looks empty; meta/
+ *     count for listings; the task:<id> tag rather than the optional deliverableKey), "Live updates
+ *     without a firehose" (the memory domain is continuous on an active fleet; keyPrefix/minIntervalMs
+ *     gates; never repaint a surface the user is reading), and "Before you call it done" (three
+ *     viewports incl. 1280x460, repaint count on the open dialog, network log after idle).
+ *   2026-07-25 — Theme system v2: the two-axis model (data-theme mode × data-palette look, five
+ *     designed palettes), the head restore snippet covers both axes, typography/elevation/motion
+ *     tokens documented, the control-cluster rule (language + mode + palette all live in the pill),
+ *     and the visual audit gains a non-default-palette spot check.
+ *   2026-07-25 — Visual design sections. The prompt's only real design content used to be the GAME
+ *     form-language block, which ended by telling every non-game app that a flat daisyUI page was
+ *     "the right default" — so the paved path reliably produced identical grey cards, one type size
+ *     and no focal point. Adds "Visual design: components are not a design" (focal point, type
+ *     scale, colour as meaning, grouping, measure, designed empty/loading states, and the cortex
+ *     packs to reach for) and "Verify what it LOOKS like" (both themes, contrast, brand token,
+ *     type scale, with a runnable audit snippet). Design Guidelines now states the brand-is-a-token
+ *     rule, since /lib/aimeat-theme.css makes --color-primary the coral.
+ *   2026-07-19 — Mobile safety checklist section (overflow-x:clip, minmax(0,1fr)+min-width:0,
+ *     wrap-wide-content, verify scrollWidth===clientWidth) + viewport meta gains viewport-fit=cover
+ *     + interactive-widget=resizes-content. Prevention baked into the paved path.
+ *   2026-07-19 — Research-first flow (AppDev KB Phase 7): Step 0 + tier decision tree + finish checklist / appdev-flow prompt / handbook module
+ *   v1.5.0 — 2026-07-19 — MCP-agent section: load node:aimeat-app-builder first + curated
+ *     pitfall registry pointer (/v1/appdev/pitfalls) (AppDev KB Phase 2)
+ *   v1.4.0 — 2026-07-16 — Auth Pattern path 3: AIMEAT.auth.on('login'/'logout') — async logins
+ *     (app-subdomain silent SSO, consent-popup return) fire neither onLogin nor a pending
+ *     login(); AEB-3 finding aeb3-flow-001 (a 5/5 app stayed hidden after grant on app origin).
+ *   v1.3.0 — 2026-07-16 — Library sections generated from the library-pack registry
+ *     (src/data/library-packs.ts): SDK groups + Ready-made UI + the NEW "Optional capability
+ *     packs" index (vendored libs with fetch-on-demand docs at GET /v1/library-packs/:id).
+ *     Design Guidelines now name the self-hosted styling stack; improve mode gains the
+ *     conscious-upgrade rule (read the pack changelog, explain, upgrade only with consent).
+ *   v1.2.0 — 2026-07-14 — Agent face section (Agent Face phase 3): the three agent surfaces
+ *     (read=face, act=WebMCP tools, learn=bound skill), the six face rules, and the
+ *     AIMEATAgentFace.publish snippet (aimeat-agentface.js, phase 2)
+ *   v1.1.0 — 2026-07-14 — aimeat-commerce.js added to the Economy & agents library group
+ *     (checkout sessions, offer prices, micro-unit money formatting; TARGET-033)
+ *   v1.0.0 — 2026-07-13 — ported verbatim from app-catalog buildPromptFromBuilder() (cortex.js)
+ *     so the node becomes the single source of truth (AEB pilot finding: the best app-building
+ *     accelerator was locked inside the browser bundle, invisible to agentic coders).
+ *   v1.1.0 — 2026-07-19 — "Game / playful look — form language, not just palette" section
+ *     (extruded type via the fonts pack, sticker cards, juice, world-object ambient rule) —
+ *     born from pitfall app/candy-palette-alone-is-not-a-game-look.
+ */
+import { createHash } from 'node:crypto';
 // The grantable scope vocabulary — imported so the prompt's scope list can NEVER drift from
 // what the authorize endpoint actually accepts (guessed scope names were an AEB-2 finding).
 import { APP_GRANTABLE_SCOPES } from '../routes/app-grants.js';
@@ -8,8 +100,15 @@ import { buildPromptLibrarySections } from '../data/library-packs.js';
 import { buildResearchStep, buildFinishChecklist } from './appdev-flow-constants.js';
 const PB_LANGS = { en: 'English', fi: 'Finnish (Suomi)' };
 const DEFAULT_IDEA = '(not given yet — ask me what to build)';
+/**
+ * Where the spec token is written into the prompt text.
+ *
+ * The token is a digest OF this prompt, and the prompt names the token — so the digest is taken
+ * with the slot still unfilled. Otherwise the text would have to contain its own hash.
+ */
+const SPEC_TOKEN_SLOT = '{{aimeat_spec_token}}';
 /** Compose the canonical build-an-app prompt. Text mirrors the app-catalog prompt builder. */
-export function buildAppPrompt(config, opts = {}) {
+function composeAppPrompt(config, opts = {}) {
     const nodeUrl = config.baseUrl.replace(/\/+$/, '');
     const mode = opts.mode === 'improve' ? 'improve' : 'new';
     const isImprove = mode === 'improve';
@@ -84,6 +183,14 @@ export function buildAppPrompt(config, opts = {}) {
     body += 'Notes: deleting memory keys needs `memory:delete` (NOT in the defaults). File DELETION is covered by `storage:write` — there is NO storage:delete scope. AI features need `ai:use`.\n\n';
     // Data storage
     body += '### Data Storage\n';
+    // Shape rules. Added 2026-08-09 after a node-wide audit found 3,628 keys (21% of the keyspace)
+    // in one-key-per-small-fact templates, and found that NO guidance surface stated either quota.
+    // The rules are phrased as checks rather than advice because "use good judgement about keys"
+    // is what produced a 941-key article store next to a 448 kB key in the same namespace.
+    body += '**Decide the SHAPE before the first `set()`.** One key holds one entity the user can open on its own, or one collection they read as a unit. Never one key per field of an entity, and never one key per row of a list your UI always renders together. A high-score table is ONE key holding an array, not one key per score.\n';
+    body += '**The two ceilings, as numbers.** A value may be **1024 kB** serialised, so a whole small database fits in one key. A principal may hold **1000 keys** by default (`AIMEAT_MEMORY_MAX_KEYS`; some nodes raise it, do not count on it). Before you ship, count the keys one day of ordinary use writes: **if `keys_per_day × 365` exceeds 1000, the shape is wrong.** Fold the per-item keys into a per-period collection (`myapp.log.2026-08` holding an array) and split only once `JSON.stringify(value).length` passes ~256 kB.\n';
+    body += '**Nesting is free for search.** Search indexes the key, its dot-separated segments, the tags AND the scalar values inside the record, so an item inside an array inside one key is as findable as a key of its own. Keep data within 5 levels of the value root: on the production backend, scalars nested deeper than 6 levels fall out of the index.\n';
+    body += '**A key name is a stable address, not a sentence.** Lowercase dot-separated segments, each one either a fixed word or an id you can reconstruct from the data. Never a title, a tag label, a write timestamp, or anything a user typed (`myapp.index.by-tag.all conspiracies are real` is a value, not an address).\n';
     body += 'Match the PRIVATE vs SHARED choice from Step 1:\n';
     body += '```javascript\n';
     body += '// PRIVATE — scoped to the logged-in owner, only they can read it:\n';
@@ -298,6 +405,37 @@ export function buildAppPrompt(config, opts = {}) {
     body += '- **Wrap wide content** — put tables / code blocks / diagrams in a `overflow-x:auto` container, and `flex-wrap: wrap` any toolbar/nav row whose item count can grow (tabs, pager dots).\n';
     body += '- **Verify**: at 390px (portrait) AND ~844px (landscape), `document.documentElement.scrollWidth === clientWidth` (zero horizontal overflow) and body text stays ≥14px.\n';
     body += 'For a focused view (chat/editor/wizard) on ≤760px, go full-screen (`position:fixed; inset:0` gated on an is-active class) with a Back affordance, rather than sharing the screen with app chrome.\n\n';
+    // Mobile INPUT, which is a different failure from mobile layout and was missing until
+    // aimeat-input v1.0.0 (2026-08-12). Everything above this point is about what the page LOOKS
+    // like on a phone; a layout that passes every check above is still unusable if its controls only
+    // answer a mouse. The rule is stated as one default (tappable) plus the one option that has to
+    // be declared (axis), because that is what a builder gets wrong unaided.
+    body += '### Mobile input — make a control answer a finger, a mouse and a keyboard\n';
+    body += 'A layout that passes every check above is still unusable if its controls were built for a mouse. Load `aimeat-input` and let it decide:\n';
+    body += '```html\n';
+    body += '<script src="' + nodeUrl + '/v1/cortex/aimeat-input/libs/aimeat-input.js"></' + 'script>\n';
+    body += '```\n';
+    body += '- **`AIMEAT.input.tappable(el, onActivate)` for every button, card, tile, chip and list row.** It is built on `click`, so a tap, a mouse and Enter/Space all arrive once and a screen reader announces the control. It adds what the browser does not: `touch-action: manipulation` (removes the 300ms tap delay), no grey iOS flash, the 44px minimum target, and `role` + `tabindex` on an element that is not natively a button.\n';
+    body += '- **Do not hand-roll `addEventListener("touchstart", …)`.** It produces three bugs at once: the handler fires twice (touch, then the synthetic click), it triggers while the user is scrolling past, and the control becomes unreachable by keyboard.\n';
+    body += '- **`AIMEAT.input.on(el, { tap, longPress, swipe, dragStart, dragMove, dragEnd }, { axis })` when a click is genuinely not enough** — a canvas, a map, a row that both taps and swipes. Every gesture gets a desktop path by default: arrows fire `swipe`, Enter/Space fire `tap`, a right click fires `longPress`.\n';
+    body += '- **Declare `axis` on anything that also scrolls.** The pack sets `touch-action` from the handlers you registered, and `axis: "x"` becomes `pan-y`, so the user can still scroll a list vertically while swiping a row sideways. Leaving it at `"both"` takes the element out of scrolling entirely: right for a canvas, wrong for a list.\n';
+    body += '- **A game that needs continuous direction** uses `AIMEAT.input.pad(host, { onChange })`, a virtual thumbstick whose vector WASD and the arrow keys also drive. Read `pad.value()` from the game loop.\n';
+    body += '- **Verify with a real touch:** every interactive element measures at least 44x44 CSS px, and a tap handler runs ONCE (log a counter and tap once — two entries means a hand-rolled touch listener is still there).\n\n';
+    // The reserved bottom strip. Two fixed node marks (the AI-disclosure label bottom-left, the
+    // aimeat.io attribution badge bottom-right) ride every served app and always win the paint, so an
+    // app's own fixed bottom bar ends up covered unless it lifts itself clear. The node publishes the
+    // strip height as --aimeat-chrome-bottom (utils/app-chrome-reserve.ts via app-serve-marks.ts);
+    // this section is the app-side half of that contract. (Oma talo stats bar under both marks at
+    // 390px, 2026-08-02.)
+    body += '### The node\'s bottom chrome strip — lift your bottom UI clear of it\n';
+    body += 'Every served app carries two permanent marks fixed to the bottom corners: the AI-disclosure label (bottom-left; on phones a compact icon pill that expands on tap) and the aimeat.io attribution badge (bottom-right). They are node chrome, they always paint on top, and they stay — so design the bottom edge of the app as RESERVED. The node tells you exactly how much: at serve time it sets `--aimeat-chrome-bottom` on `:root` (one strip height in px, every viewport). Read the variable rather than hardcoding numbers, and give it a fallback matching the current geometry (56px) so a locally previewed file lays out correctly too:\n';
+    body += '```css\n';
+    body += '/* Fixed/sticky bottom bars sit ABOVE the strip */\n';
+    body += '.bottom-bar { bottom: var(--aimeat-chrome-bottom, 56px); }\n';
+    body += '/* Scroll containers pad past it so the last row is reachable */\n';
+    body += '.scroll-area { padding-bottom: calc(var(--aimeat-chrome-bottom, 56px) + 12px); }\n';
+    body += '```\n';
+    body += 'The same applies to full-screen focused views: give their bottom input row the same `padding-bottom`. When the node\'s chrome geometry changes, the served variable overrides your fallback automatically — that is the point of reading it.\n\n';
     // Visual verification. The mobile checklist proved a machine-checkable rule beats good intentions
     // (scrollWidth === clientWidth). These are the same idea for appearance: an app can pass every
     // functional test and still ship an unreadable dark theme, because nobody ever opened it.
@@ -331,6 +469,7 @@ export function buildAppPrompt(config, opts = {}) {
     body += '3. **Read the network log after 60 idle seconds.** A repeating full listing is a bug even when nothing visibly breaks: it is a poll you did not intend. Gate it (see the live-updates section) so an idle app is idle.\n';
     body += '4. **If anything in the app costs money** (an AI call, an agent commission): open the network log, click that control FIVE times as fast as you can, and count the requests. Expected: **one**. Then RELOAD the page and commission the same job again — the node answers with the run you already have (`task.deduplicated`), and your UI must say so rather than claim a new one. Report both.\n';
     body += '5. **If the app generates content with a model**: the AI label is VISIBLE at all three viewports in both themes, and a generated item you stored carries its provenance record. Open the stored record and look for `aiProvenance` — the label on screen and the record in storage are two separate things and both are owed.\n';
+    body += '6. **The bottom chrome strip is clear at all three viewports**: scroll every scrollable surface to its end and confirm the last row and every fixed bottom control sit fully above the node\'s bottom marks (the AI label and the aimeat.io badge). If anything of yours renders under them, apply the `--aimeat-chrome-bottom` rules from the bottom-chrome section.\n';
     body += 'Verify the FEATURE too, not just the render: perform the real interaction (commission the thing, save the thing, delete the thing) and confirm the result actually appears and persists. "It did not crash" is not a pass.\n\n';
     // Game form language — palette alone reads as a dashboard; the FORM LANGUAGE makes the game.
     // Born from pitfall app/candy-palette-alone-is-not-a-game-look (TOWER TETRIS, 2026-07-19).
@@ -362,6 +501,11 @@ export function buildAppPrompt(config, opts = {}) {
     body += '### If you are an agentic coder with AIMEAT MCP tools\n';
     body += 'When `aimeat_*` MCP tools are available in your environment (Claude Code, Cursor, OpenHands, any MCP client), they are already authenticated as the user — USE THEM for node operations instead of raw HTTP: `aimeat_app_publish` to publish/update the app (upload mode for files > 1 KB), `aimeat_storage_upload` for files, `aimeat_memory_write`/`aimeat_memory_read` for data, `aimeat_discover` for discovery. Register throwaway accounts only for cross-user testing; the app itself is published under the user\'s own account via MCP. The publish walkthrough below is for HUMANS pasting in a chat — skip telling it to an MCP-equipped agent, just publish.\n';
     body += 'Load the paved-path skill first: `aimeat_skill_get` with ref `node:aimeat-app-builder` (spec-first workflow, research-before-building, publish checklist). Research with ONE call: `aimeat_appdev_overview` (pass your OWN model id — self-identify, never ask the user) — your existing apps + template proposals, library packs with per-model proofs, curated + learned pitfalls. Skim the pitfalls for the areas you touch before you hit them.\n';
+    // The spec token. Added 2026-08-11 after an app went live with three defects this document
+    // already answers, published by an agent that never fetched it: the soft "read this first" in the
+    // MCP instructions and in the skill changed nothing, while the machine-readable `mobile_hints` in
+    // a publish response changed behaviour immediately. So the ASK became a value to carry.
+    body += 'Carry the spec token when you publish: `spec_token: "' + SPEC_TOKEN_SLOT + '"` on `aimeat_app_publish` (or in the POST /v1/apps body). It is the digest of THIS document; it changes when the spec changes, so passing it says which version you actually built against. Publishing without it returns `spec_check: { status: "missing" }` and publishing against an older one returns `"stale"` — neither refuses the publish, both mean fetch GET ' + nodeUrl + '/v1/prompts/build-app again and read what changed. If the owner tells you to skip the spec, send `spec_ack: "skipped-by-owner"`; that is recorded rather than silent.\n';
     body += buildFinishChecklist();
     body += 'Namespace rule: data written through MCP tools is stored under the AGENT\'s identity (GAII, `name#owner@node`), NOT the human owner\'s — so a browser app reading the signed-in owner\'s keys will NOT see it. When agents seed or share data the app must read: store the author identity inside each record, write such keys with public visibility and read them with `AIMEAT.data.getPublic(<full agent GAII>, key)`, or add `?owner_scope=true` to memory reads (resolves the owner\'s agents\' keys too).\n\n';
     // After-build publish walkthrough (new-app mode only)
@@ -369,13 +513,16 @@ export function buildAppPrompt(config, opts = {}) {
         body += '## When the app is ready — tell me how to publish it\n';
         body += 'After you hand me the finished single HTML file, END your reply by telling me (in my language) to do exactly this:\n';
         body += '1. Open ' + nodeUrl + '/app-catalog.html\n';
-        body += '2. Click "+ Add" → open the "Paste" tab → paste the HTML (or drop it as a file). The app name + description fill in automatically.\n';
-        body += '3. Click Publish.\n';
+        body += '2. Click "+" → "Add app" → the "Paste" tab → paste the HTML (or drop it as a file). The app name + description fill in automatically.\n';
+        body += '3. Click Save. A second dialog opens: fill in the description and click Publish. (Two dialogs, not one — Save takes the file, Publish puts it on the node.)\n';
         body += 'I will be asked to sign in first — it is fast: one click with Google, or a quick email + password, and a brand-new account is created right there in seconds.\n';
-        body += 'What I get: once published, the app is LIVE on my own AIMEAT node and PUBLIC — anyone can find it in the community catalogue and use it, and I get a link to share. From my catalogue I can launch it, publish updates (older versions are always kept), park it (hide it from the public), or delete it. It keeps working with my AIMEAT login, saved data, files, AI and realtime features.\n\n';
+        body += 'What I get: the app goes live on my own AIMEAT node at its own address, and I get a link to share. It starts UNLISTED (only I can find it) — from my catalogue I can list it publicly in the community catalogue, launch it, publish updates (older versions are always kept), or delete it. It keeps working with my AIMEAT login, saved data, files, AI and realtime features.\n\n';
     }
     // ── full: language line + header (new mode) + body ──
-    let full = 'Language: talk to me and write ALL user-facing text (UI labels, buttons, messages) in ' + pbLang + '. These build instructions are in English, but converse with me and build the app interface in ' + pbLang + '.\n\n';
+    // The language line follows the UI language, but the USER's own words win: someone who writes
+    // "in Finnish please" into their idea and then gets an English app has been overruled by a
+    // default they never saw (UX-remake v3, measured in the Fatalii run). Additive sentence only.
+    let full = 'Language: talk to me and write ALL user-facing text (UI labels, buttons, messages) in ' + pbLang + '. These build instructions are in English, but converse with me and build the app interface in ' + pbLang + '. If I ask for another language anywhere in my idea or in the conversation, that wins over this line.\n\n';
     if (!isImprove) {
         full += 'Help me build a single-file HTML app that runs on AIMEAT.\n';
         full += 'My initial idea: ' + idea + '\n\n';
@@ -393,4 +540,41 @@ export function buildAppPrompt(config, opts = {}) {
     full += body;
     return { full, body };
 }
+/**
+ * The spec token: a short digest of the build spec as this node currently serves it.
+ *
+ * WHY A DIGEST AND NOT A CONSTANT. A fixed string would prove only that somebody, at some point,
+ * saw a document by this name. A digest changes the moment the spec changes, so a token that still
+ * matches is evidence the publisher read the version that is in force now — and a token that no
+ * longer matches names its own remedy ("fetch it again"). It is a memory aid for an agent, not a
+ * credential: nothing here is secret and the gate warns rather than refuses.
+ *
+ * Canonicalised on `improve` mode with no idea and English, because those are the axes that vary
+ * per REQUEST rather than per spec — a token that changed when the caller passed `?idea=` would be
+ * stale for everybody and would teach agents to ignore it. The node's own base URL IS part of the
+ * digest: the library URLs a self-hosted node serves are part of what the spec says.
+ */
+const specTokenCache = new Map();
+export function buildAppSpecToken(config) {
+    const cached = specTokenCache.get(config.baseUrl);
+    if (cached)
+        return cached;
+    // The slot is still unfilled here, which is the point: the digest is taken over the spec text
+    // WITHOUT its own token in it.
+    const canonical = composeAppPrompt(config, { lang: 'en', mode: 'improve' }).body;
+    const token = 'spec-' + createHash('sha256').update(canonical, 'utf8').digest('hex').slice(0, 12);
+    specTokenCache.set(config.baseUrl, token);
+    return token;
+}
+/**
+ * Compose the canonical build-an-app prompt, with the spec token written into it.
+ *
+ * Every caller goes through here — the app-catalog's `body`, an agent's `full`, the `?format=txt`
+ * plain-text form — so no consumer can end up with a prompt that names no token.
+ */
+export function buildAppPrompt(config, opts = {}) {
+    const token = buildAppSpecToken(config);
+    const { full, body } = composeAppPrompt(config, opts);
+    return { full: full.split(SPEC_TOKEN_SLOT).join(token), body: body.split(SPEC_TOKEN_SLOT).join(token) };
+}
 //# sourceMappingURL=build-app-prompt.js.map

package/dist/src/services/build-app-prompt.js.map

@@ -1 +1 @@
-{"version":3,"file":"build-app-prompt.js","sourceRoot":"","sources":["../../../src/services/build-app-prompt.ts"],"names":[],"mappings":"AAqEA,4FAA4F;AAC5F,4FAA4F;AAC5F,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,yFAAyF;AACzF,yFAAyF;AACzF,8EAA8E;AAC9E,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAWrF,MAAM,QAAQ,GAA2B,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,iBAAiB,EAAE,CAAC;AAClF,MAAM,YAAY,GAAG,wCAAwC,CAAC;AAE9D,8FAA8F;AAC9F,MAAM,UAAU,cAAc,CAC5B,MAAoB,EACpB,OAA8B,EAAE;IAEhC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;IACzD,MAAM,SAAS,GAAG,IAAI,KAAK,SAAS,CAAC;IACrC,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,YAAY,CAAC;IACpE,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,SAAS,CAAC;IAExD,gFAAgF;IAChF,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,IAAI,SAAS,CAAC,CAAC,CAAC,qCAAqC,CAAC,CAAC,CAAC,iDAAiD,CAAC;IAC9G,IAAI,IAAI,2EAA2E,CAAC;IAEpF,qFAAqF;IACrF,IAAI,IAAI,yCAAyC,CAAC;IAClD,IAAI,IAAI,8DAA8D,GAAG,OAAO,GAAG,sBAAsB,CAAC;IAC1G,IAAI,IAAI,mHAAmH,CAAC;IAC5H,IAAI,IAAI,6IAA6I,CAAC;IACtJ,IAAI,IAAI,0OAA0O,CAAC;IACnP,IAAI,IAAI,8wBAA8wB,CAAC;IAEvxB,wFAAwF;IACxF,2FAA2F;IAC3F,0FAA0F;IAC1F,IAAI,IAAI,0BAA0B,CAAC,OAAO,CAAC,CAAC;IAE5C,eAAe;IACf,IAAI,IAAI,oBAAoB,CAAC;IAC7B,IAAI,IAAI,kVAAkV,CAAC;IAC3V,IAAI,IAAI,8TAA8T,CAAC;IACvU,IAAI,IAAI,WAAW,CAAC;IACpB,IAAI,IAAI,eAAe,GAAG,OAAO,GAAG,6BAA6B,GAAG,WAAW,CAAC;IAChF,IAAI,IAAI,YAAY,CAAC;IACrB,IAAI,IAAI,mFAAmF,CAAC;IAC5F,IAAI,IAAI,uEAAuE,CAAC;IAChF,IAAI,IAAI,IAAI,CAAC;IACb,IAAI,IAAI,8DAA8D,CAAC;IACvE,IAAI,IAAI,4CAA4C,CAAC;IACrD,IAAI,IAAI,+EAA+E,CAAC;IACxF,IAAI,IAAI,uBAAuB,CAAC;IAChC,IAAI,IAAI,OAAO,CAAC;IAChB,IAAI,IAAI,IAAI,CAAC;IACb,IAAI,IAAI,iFAAiF,CAAC;IAC1F,IAAI,IAAI,0EAA0E,CAAC;IACnF,IAAI,IAAI,oFAAoF,CAAC;IAC7F,IAAI,IAAI,IAAI,CAAC;IACb,IAAI,IAAI,oFAAoF,CAAC;IAC7F,IAAI,IAAI,uFAAuF,CAAC;IAChG,IAAI,IAAI,0FAA0F,CAAC;IACnG,IAAI,IAAI,qCAAqC,CAAC;IAC9C,IAAI,IAAI,sCAAsC,CAAC;IAC/C,IAAI,IAAI,IAAI,GAAG,WAAW,CAAC;IAC3B,IAAI,IAAI,SAAS,CAAC;IAElB,+FAA+F;IAC/F,iGAAiG;IACjG,iGAAiG;IACjG,0FAA0F;IAC1F,mCAAmC;IACnC,IAAI,IAAI,oDAAoD,CAAC;IAC7D,IAAI,IAAI,2XAA2X,CAAC;IACpY,IAAI,IAAI,WAAW,CAAC;IACpB,IAAI,IAAI,gDAAgD,CAAC;IACzD,IAAI,IAAI,OAAO,CAAC;IAChB,IAAI,IAAI,iBAAiB,CAAC;IAC1B,IAAI,IAAI,0HAA0H,CAAC;IACnI,IAAI,IAAI,oGAAoG,CAAC;IAC7G,IAAI,IAAI,OAAO,CAAC;IAChB,IAAI,IAAI,+UAA+U,CAAC;IAExV,IAAI,IAAI,gCAAgC,CAAC;IACzC,IAAI,IAAI,mNAAmN,CAAC;IAC5N,IAAI,IAAI,WAAW,CAAC;IACpB,IAAI,IAAI,kHAAkH,CAAC;IAC3H,IAAI,IAAI,OAAO,CAAC;IAChB,IAAI,IAAI,6KAA6K,GAAG,OAAO,GAAG,2BAA2B,CAAC;IAC9N,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAC1D,IAAI,IAAI,KAAK,GAAG,CAAC,GAAG,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC;IACxC,CAAC;IACD,IAAI,IAAI,yLAAyL,CAAC;IAElM,eAAe;IACf,IAAI,IAAI,oBAAoB,CAAC;IAC7B,IAAI,IAAI,mDAAmD,CAAC;IAC5D,IAAI,IAAI,iBAAiB,CAAC;IAC1B,IAAI,IAAI,sEAAsE,CAAC;IAC/E,IAAI,IAAI,2FAA2F,CAAC;IACpG,IAAI,IAAI,sDAAsD,CAAC;IAC/D,IAAI,IAAI,sFAAsF,CAAC;IAC/F,IAAI,IAAI,uFAAuF,CAAC;IAChG,IAAI,IAAI,+FAA+F,CAAC;IACxG,IAAI,IAAI,sDAAsD,CAAC;IAC/D,IAAI,IAAI,OAAO,CAAC;IAChB,IAAI,IAAI,mFAAmF,CAAC;IAC5F,IAAI,IAAI,oZAAoZ,CAAC;IAC7Z,IAAI,IAAI,wZAAwZ,CAAC;IACja,IAAI,IAAI,oaAAoa,CAAC;IAE7a,yFAAyF;IACzF,6FAA6F;IAC7F,+FAA+F;IAC/F,IAAI,IAAI,6DAA6D,CAAC;IACtE,IAAI,IAAI,6TAA6T,CAAC;IACtU,IAAI,IAAI,iBAAiB,CAAC;IAC1B,IAAI,IAAI,qFAAqF,CAAC;IAC9F,IAAI,IAAI,iGAAiG,CAAC;IAC1G,IAAI,IAAI,sEAAsE,CAAC;IAC/E,IAAI,IAAI,iGAAiG,CAAC;IAC1G,IAAI,IAAI,sFAAsF,CAAC;IAC/F,IAAI,IAAI,OAAO,CAAC;IAChB,IAAI,IAAI,6YAA6Y,CAAC;IACtZ,IAAI,IAAI,0YAA0Y,CAAC;IAEnZ,oGAAoG;IACpG,qGAAqG;IACrG,IAAI,IAAI,gEAAgE,CAAC;IACzE,IAAI,IAAI,wwBAAwwB,CAAC;IACjxB,IAAI,IAAI,iBAAiB,CAAC;IAC1B,IAAI,IAAI,oEAAoE,CAAC;IAC7E,IAAI,IAAI,oEAAoE,CAAC;IAC7E,IAAI,IAAI,4GAA4G,CAAC;IACrH,IAAI,IAAI,gHAAgH,CAAC;IACzH,IAAI,IAAI,gGAAgG,CAAC;IACzG,IAAI,IAAI,mFAAmF,CAAC;IAC5F,IAAI,IAAI,uGAAuG,CAAC;IAChH,IAAI,IAAI,yGAAyG,CAAC;IAClH,IAAI,IAAI,2EAA2E,CAAC;IACpF,IAAI,IAAI,wGAAwG,CAAC;IACjH,IAAI,IAAI,8GAA8G,CAAC;IACvH,IAAI,IAAI,OAAO,CAAC;IAChB,IAAI,IAAI,wOAAwO,CAAC;IAEjP,4FAA4F;IAC5F,IAAI,IAAI,2CAA2C,CAAC;IACpD,IAAI,IAAI,gNAAgN,CAAC;IACzN,IAAI,IAAI,iBAAiB,CAAC;IAC1B,IAAI,IAAI,mDAAmD,CAAC;IAC5D,IAAI,IAAI,qEAAqE,CAAC;IAC9E,IAAI,IAAI,2EAA2E,CAAC;IACpF,IAAI,IAAI,eAAe,GAAG,OAAO,GAAG,6DAA6D,CAAC;IAClG,IAAI,IAAI,oFAAoF,CAAC;IAC7F,IAAI,IAAI,OAAO,CAAC;IAChB,IAAI,IAAI,+NAA+N,CAAC;IAExO,KAAK;IACL,IAAI,IAAI,0BAA0B,CAAC;IACnC,IAAI,IAAI,kMAAkM,CAAC;IAC3M,IAAI,IAAI,WAAW,CAAC;IACpB,IAAI,IAAI,eAAe,GAAG,OAAO,GAAG,6BAA6B,GAAG,WAAW,CAAC;IAChF,IAAI,IAAI,eAAe,GAAG,OAAO,GAAG,2BAA2B,GAAG,WAAW,CAAC;IAC9E,IAAI,IAAI,OAAO,CAAC;IAChB,IAAI,IAAI,iBAAiB,CAAC;IAC1B,IAAI,IAAI,yFAAyF,CAAC;IAClG,IAAI,IAAI,+FAA+F,CAAC;IACxG,IAAI,IAAI,uFAAuF,CAAC;IAChG,IAAI,IAAI,oEAAoE,CAAC;IAC7E,IAAI,IAAI,sGAAsG,CAAC;IAC/G,IAAI,IAAI,OAAO,CAAC;IAChB,IAAI,IAAI,iGAAiG,CAAC;IAE1G,iGAAiG;IACjG,+FAA+F;IAC/F,4FAA4F;IAC5F,yFAAyF;IACzF,IAAI,IAAI,oEAAoE,CAAC;IAC7E,IAAI,IAAI,0NAA0N,CAAC;IACnO,IAAI,IAAI,iBAAiB,CAAC;IAC1B,IAAI,IAAI,qEAAqE,CAAC;IAC9E,IAAI,IAAI,oFAAoF,CAAC;IAC7F,IAAI,IAAI,0FAA0F,CAAC;IACnG,IAAI,IAAI,kEAAkE,CAAC;IAC3E,IAAI,IAAI,qFAAqF,CAAC;IAC9F,IAAI,IAAI,mDAAmD,CAAC;IAC5D,IAAI,IAAI,kDAAkD,CAAC;IAC3D,IAAI,IAAI,OAAO,CAAC;IAChB,IAAI,IAAI,iXAAiX,CAAC;IAC1X,IAAI,IAAI,+FAA+F,CAAC;IACxG,IAAI,IAAI,WAAW,CAAC;IACpB,IAAI,IAAI,6FAA6F,CAAC;IACtG,IAAI,IAAI,OAAO,CAAC;IAChB,IAAI,IAAI,mNAAmN,CAAC;IAC5N,IAAI,IAAI,sgBAAsgB,CAAC;IAE/gB,iGAAiG;IACjG,8FAA8F;IAC9F,kGAAkG;IAClG,uFAAuF;IACvF,IAAI,IAAI,mEAAmE,CAAC;IAC5E,IAAI,IAAI,8SAA8S,CAAC;IACvT,IAAI,IAAI,keAAke,CAAC;IAC3e,IAAI,IAAI,oOAAoO,CAAC;IAC7O,IAAI,IAAI,iBAAiB,CAAC;IAC1B,IAAI,IAAI,kEAAkE,CAAC;IAC3E,IAAI,IAAI,4GAA4G,CAAC;IACrH,IAAI,IAAI,kGAAkG,CAAC;IAC3G,IAAI,IAAI,0FAA0F,CAAC;IACnG,IAAI,IAAI,+FAA+F,CAAC;IACxG,IAAI,IAAI,gGAAgG,CAAC;IACzG,IAAI,IAAI,OAAO,CAAC;IAChB,IAAI,IAAI,kSAAkS,CAAC;IAC3S,IAAI,IAAI,yNAAyN,CAAC;IAClO,IAAI,IAAI,yUAAyU,CAAC;IAClV,IAAI,IAAI,iQAAiQ,CAAC;IAC1Q,IAAI,IAAI,mPAAmP,CAAC;IAC5P,IAAI,IAAI,2jBAA2jB,CAAC;IAEpkB,0BAA0B;IAC1B,IAAI,IAAI,0CAA0C,CAAC;IACnD,IAAI,IAAI,+GAA+G,CAAC;IACxH,IAAI,IAAI,iBAAiB,CAAC;IAC1B,IAAI,IAAI,+BAA+B,CAAC;IACxC,IAAI,IAAI,6EAA6E,CAAC;IACtF,IAAI,IAAI,+EAA+E,CAAC;IACxF,IAAI,IAAI,uDAAuD,CAAC;IAChE,IAAI,IAAI,mFAAmF,CAAC;IAC5F,IAAI,IAAI,qDAAqD,CAAC;IAC9D,IAAI,IAAI,0EAA0E,CAAC;IACnF,IAAI,IAAI,OAAO,CAAC;IAChB,IAAI,IAAI,sFAAsF,CAAC;IAE/F,yFAAyF;IACzF,sFAAsF;IACtF,IAAI,IAAI,wDAAwD,CAAC;IACjE,IAAI,IAAI,uRAAuR,CAAC;IAChS,IAAI,IAAI,iBAAiB,CAAC;IAC1B,IAAI,IAAI,yEAAyE,CAAC;IAClF,IAAI,IAAI,yFAAyF,CAAC;IAClG,IAAI,IAAI,gGAAgG,CAAC;IACzG,IAAI,IAAI,OAAO,CAAC;IAChB,IAAI,IAAI,oOAAoO,CAAC;IAC7O,IAAI,IAAI,ydAAyd,CAAC;IAEle,mEAAmE;IACnE,IAAI,IAAI,qDAAqD,CAAC;IAC9D,IAAI,IAAI,mZAAmZ,CAAC;IAC5Z,IAAI,IAAI,qUAAqU,CAAC;IAC9U,IAAI,IAAI,UAAU,CAAC;IACnB,IAAI,IAAI,oHAAoH,CAAC;IAC7H,IAAI,IAAI,qHAAqH,CAAC;IAC9H,IAAI,IAAI,gGAAgG,CAAC;IACzG,IAAI,IAAI,gGAAgG,CAAC;IACzG,IAAI,IAAI,6GAA6G,CAAC;IACtH,IAAI,IAAI,mGAAmG,CAAC;IAC5G,IAAI,IAAI,WAAW,CAAC;IACpB,IAAI,IAAI,eAAe,GAAG,OAAO,GAAG,6BAA6B,GAAG,WAAW,CAAC;IAChF,IAAI,IAAI,eAAe,GAAG,OAAO,GAAG,kCAAkC,GAAG,WAAW,CAAC;IACrF,IAAI,IAAI,OAAO,CAAC;IAChB,IAAI,IAAI,iBAAiB,CAAC;IAC1B,IAAI,IAAI,oEAAoE,CAAC;IAC7E,IAAI,IAAI,wFAAwF,CAAC;IACjG,IAAI,IAAI,mCAAmC,CAAC;IAC5C,IAAI,IAAI,sBAAsB,CAAC;IAC/B,IAAI,IAAI,iBAAiB,CAAC;IAC1B,IAAI,IAAI,0FAA0F,CAAC;IACnG,IAAI,IAAI,yIAAyI,CAAC;IAClJ,IAAI,IAAI,QAAQ,CAAC;IACjB,IAAI,IAAI,+BAA+B,CAAC;IACxC,IAAI,IAAI,2GAA2G,CAAC;IACpH,IAAI,IAAI,OAAO,CAAC;IAChB,IAAI,IAAI,kcAAkc,CAAC;IAE3c,oBAAoB;IACpB,IAAI,IAAI,yBAAyB,CAAC;IAClC,IAAI,IAAI,2XAA2X,CAAC;IACpY,IAAI,IAAI,kbAAkb,CAAC;IAC3b,IAAI,IAAI,unBAAunB,CAAC;IAChoB,IAAI,IAAI,SAAS,CAAC;IAClB,IAAI,IAAI,oHAAoH,CAAC;IAC7H,IAAI,IAAI,uKAAuK,CAAC;IAChL,IAAI,IAAI,4HAA4H,CAAC;IACrI,IAAI,IAAI,kDAAkD,CAAC;IAC3D,IAAI,IAAI,yGAAyG,CAAC;IAClH,IAAI,IAAI,6EAA6E,CAAC;IACtF,IAAI,IAAI,OAAO,CAAC;IAChB,IAAI,IAAI,kTAAkT,CAAC;IAC3T,IAAI,IAAI,4rBAA4rB,CAAC;IACrsB,IAAI,IAAI,8UAA8U,CAAC;IAEvV,iGAAiG;IACjG,mGAAmG;IACnG,oGAAoG;IACpG,mGAAmG;IACnG,gGAAgG;IAChG,iGAAiG;IACjG,gGAAgG;IAChG,6FAA6F;IAC7F,IAAI,IAAI,sCAAsC,CAAC;IAC/C,IAAI,IAAI,8lBAA8lB,CAAC;IACvmB,IAAI,IAAI,mDAAmD,CAAC;IAC5D,IAAI,IAAI,gTAAgT,CAAC;IACzT,IAAI,IAAI,0SAA0S,CAAC;IACnT,IAAI,IAAI,yUAAyU,CAAC;IAClV,IAAI,IAAI,mSAAmS,CAAC;IAC5S,IAAI,IAAI,2WAA2W,CAAC;IACpX,IAAI,IAAI,qSAAqS,CAAC;IAC9S,IAAI,IAAI,sSAAsS,CAAC;IAC/S,IAAI,IAAI,kbAAkb,CAAC;IAE3b,+FAA+F;IAC/F,gGAAgG;IAChG,sGAAsG;IACtG,IAAI,IAAI,0EAA0E,CAAC;IACnF,IAAI,IAAI,iIAAiI,CAAC;IAC1I,IAAI,IAAI,oMAAoM,CAAC;IAC7M,IAAI,IAAI,yQAAyQ,CAAC;IAClR,IAAI,IAAI,2WAA2W,CAAC;IACpX,IAAI,IAAI,2LAA2L,CAAC;IACpM,IAAI,IAAI,0KAA0K,CAAC;IACnL,IAAI,IAAI,uMAAuM,CAAC;IAEhN,kGAAkG;IAClG,+FAA+F;IAC/F,0FAA0F;IAC1F,IAAI,IAAI,yDAAyD,CAAC;IAClE,IAAI,IAAI,oMAAoM,CAAC;IAC7M,IAAI,IAAI,8aAA8a,CAAC;IACvb,IAAI,IAAI,mQAAmQ,CAAC;IAC5Q,IAAI,IAAI,0LAA0L,CAAC;IACnM,IAAI,IAAI,mMAAmM,CAAC;IAC5M,IAAI,IAAI,kFAAkF,CAAC;IAC3F,IAAI,IAAI,2DAA2D,CAAC;IACpE,IAAI,IAAI,SAAS,CAAC;IAClB,IAAI,IAAI,oHAAoH,CAAC;IAC7H,IAAI,IAAI,6IAA6I,CAAC;IACtJ,IAAI,IAAI,+DAA+D,CAAC;IACxE,IAAI,IAAI,gEAAgE,CAAC;IACzE,IAAI,IAAI,yCAAyC,CAAC;IAClD,IAAI,IAAI,4HAA4H,CAAC;IACrI,IAAI,IAAI,wGAAwG,CAAC;IACjH,IAAI,IAAI,8FAA8F,CAAC;IACvG,IAAI,IAAI,OAAO,CAAC;IAChB,IAAI,IAAI,iaAAia,CAAC;IAE1a,wFAAwF;IACxF,6FAA6F;IAC7F,0FAA0F;IAC1F,wEAAwE;IACxE,IAAI,IAAI,gEAAgE,CAAC;IACzE,IAAI,IAAI,0LAA0L,CAAC;IACnM,IAAI,IAAI,maAAma,CAAC;IAC5a,IAAI,IAAI,6SAA6S,CAAC;IACtT,IAAI,IAAI,0NAA0N,CAAC;IACnO,IAAI,IAAI,oYAAoY,CAAC;IAC7Y,IAAI,IAAI,iUAAiU,CAAC;IAC1U,IAAI,IAAI,gOAAgO,CAAC;IAEzO,6FAA6F;IAC7F,2FAA2F;IAC3F,IAAI,IAAI,6DAA6D,CAAC;IACtE,IAAI,IAAI,iNAAiN,CAAC;IAC1N,IAAI,IAAI,oTAAoT,CAAC;IAC7T,IAAI,IAAI,oOAAoO,CAAC;IAC7O,IAAI,IAAI,mKAAmK,CAAC;IAC5K,IAAI,IAAI,wMAAwM,CAAC;IACjN,IAAI,IAAI,0UAA0U,CAAC;IACnV,IAAI,IAAI,wQAAwQ,CAAC;IAEjR,QAAQ;IACR,IAAI,IAAI,uBAAuB,CAAC;IAChC,IAAI,IAAI,kDAAkD,CAAC;IAC3D,IAAI,IAAI,qEAAqE,CAAC;IAC9E,IAAI,IAAI,kDAAkD,CAAC;IAC3D,IAAI,IAAI,gGAAgG,CAAC;IACzG,IAAI,IAAI,yFAAyF,CAAC;IAClG,IAAI,IAAI,mTAAmT,CAAC;IAC5T,IAAI,IAAI,kLAAkL,CAAC;IAC3L,IAAI,IAAI,sRAAsR,CAAC;IAC/R,IAAI,IAAI,+DAA+D,CAAC;IAExE,4FAA4F;IAC5F,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,IAAI,kDAAkD,CAAC;QAC3D,IAAI,IAAI,+HAA+H,GAAG,OAAO,GAAG,6dAA6d,CAAC;IACpnB,CAAC;IAED,6FAA6F;IAC7F,IAAI,IAAI,yDAAyD,CAAC;IAClE,IAAI,IAAI,4oBAA4oB,CAAC;IACrpB,IAAI,IAAI,ubAAub,CAAC;IAChc,IAAI,IAAI,oBAAoB,EAAE,CAAC;IAC/B,IAAI,IAAI,qfAAqf,CAAC;IAE9f,sDAAsD;IACtD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,IAAI,IAAI,wDAAwD,CAAC;QACjE,IAAI,IAAI,sHAAsH,CAAC;QAC/H,IAAI,IAAI,UAAU,GAAG,OAAO,GAAG,qBAAqB,CAAC;QACrD,IAAI,IAAI,sIAAsI,CAAC;QAC/I,IAAI,IAAI,qBAAqB,CAAC;QAC9B,IAAI,IAAI,iKAAiK,CAAC;QAC1K,IAAI,IAAI,mYAAmY,CAAC;IAC9Y,CAAC;IAED,uDAAuD;IACvD,IAAI,IAAI,GAAG,wFAAwF,GAAG,MAAM,GAAG,iGAAiG,GAAG,MAAM,GAAG,OAAO,CAAC;IACpO,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,IAAI,IAAI,6DAA6D,CAAC;QACtE,IAAI,IAAI,mBAAmB,GAAG,IAAI,GAAG,MAAM,CAAC;QAC5C,IAAI,IAAI,iBAAiB,EAAE,CAAC;QAC5B,IAAI,IAAI,kCAAkC,CAAC;QAC3C,IAAI,IAAI,uJAAuJ,CAAC;QAChK,IAAI,IAAI,wPAAwP,CAAC;QACjQ,IAAI,IAAI,gCAAgC,CAAC;QACzC,IAAI,IAAI,iIAAiI,CAAC;QAC1I,IAAI,IAAI,yFAAyF,CAAC;QAClG,IAAI,IAAI,8GAA8G,CAAC;QACvH,IAAI,IAAI,wSAAwS,CAAC;QACjT,IAAI,IAAI,8GAA8G,CAAC;IACzH,CAAC;IACD,IAAI,IAAI,IAAI,CAAC;IAEb,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC"}
+{"version":3,"file":"build-app-prompt.js","sourceRoot":"","sources":["../../../src/services/build-app-prompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0FG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,4FAA4F;AAC5F,4FAA4F;AAC5F,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,yFAAyF;AACzF,yFAAyF;AACzF,8EAA8E;AAC9E,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAWrF,MAAM,QAAQ,GAA2B,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,iBAAiB,EAAE,CAAC;AAClF,MAAM,YAAY,GAAG,wCAAwC,CAAC;AAE9D;;;;;GAKG;AACH,MAAM,eAAe,GAAG,uBAAuB,CAAC;AAEhD,8FAA8F;AAC9F,SAAS,gBAAgB,CACvB,MAAoB,EACpB,OAA8B,EAAE;IAEhC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;IACzD,MAAM,SAAS,GAAG,IAAI,KAAK,SAAS,CAAC;IACrC,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,YAAY,CAAC;IACpE,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,SAAS,CAAC;IAExD,gFAAgF;IAChF,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,IAAI,SAAS,CAAC,CAAC,CAAC,qCAAqC,CAAC,CAAC,CAAC,iDAAiD,CAAC;IAC9G,IAAI,IAAI,2EAA2E,CAAC;IAEpF,qFAAqF;IACrF,IAAI,IAAI,yCAAyC,CAAC;IAClD,IAAI,IAAI,8DAA8D,GAAG,OAAO,GAAG,sBAAsB,CAAC;IAC1G,IAAI,IAAI,mHAAmH,CAAC;IAC5H,IAAI,IAAI,6IAA6I,CAAC;IACtJ,IAAI,IAAI,0OAA0O,CAAC;IACnP,IAAI,IAAI,8wBAA8wB,CAAC;IAEvxB,wFAAwF;IACxF,2FAA2F;IAC3F,0FAA0F;IAC1F,IAAI,IAAI,0BAA0B,CAAC,OAAO,CAAC,CAAC;IAE5C,eAAe;IACf,IAAI,IAAI,oBAAoB,CAAC;IAC7B,IAAI,IAAI,kVAAkV,CAAC;IAC3V,IAAI,IAAI,8TAA8T,CAAC;IACvU,IAAI,IAAI,WAAW,CAAC;IACpB,IAAI,IAAI,eAAe,GAAG,OAAO,GAAG,6BAA6B,GAAG,WAAW,CAAC;IAChF,IAAI,IAAI,YAAY,CAAC;IACrB,IAAI,IAAI,mFAAmF,CAAC;IAC5F,IAAI,IAAI,uEAAuE,CAAC;IAChF,IAAI,IAAI,IAAI,CAAC;IACb,IAAI,IAAI,8DAA8D,CAAC;IACvE,IAAI,IAAI,4CAA4C,CAAC;IACrD,IAAI,IAAI,+EAA+E,CAAC;IACxF,IAAI,IAAI,uBAAuB,CAAC;IAChC,IAAI,IAAI,OAAO,CAAC;IAChB,IAAI,IAAI,IAAI,CAAC;IACb,IAAI,IAAI,iFAAiF,CAAC;IAC1F,IAAI,IAAI,0EAA0E,CAAC;IACnF,IAAI,IAAI,oFAAoF,CAAC;IAC7F,IAAI,IAAI,IAAI,CAAC;IACb,IAAI,IAAI,oFAAoF,CAAC;IAC7F,IAAI,IAAI,uFAAuF,CAAC;IAChG,IAAI,IAAI,0FAA0F,CAAC;IACnG,IAAI,IAAI,qCAAqC,CAAC;IAC9C,IAAI,IAAI,sCAAsC,CAAC;IAC/C,IAAI,IAAI,IAAI,GAAG,WAAW,CAAC;IAC3B,IAAI,IAAI,SAAS,CAAC;IAElB,+FAA+F;IAC/F,iGAAiG;IACjG,iGAAiG;IACjG,0FAA0F;IAC1F,mCAAmC;IACnC,IAAI,IAAI,oDAAoD,CAAC;IAC7D,IAAI,IAAI,2XAA2X,CAAC;IACpY,IAAI,IAAI,WAAW,CAAC;IACpB,IAAI,IAAI,gDAAgD,CAAC;IACzD,IAAI,IAAI,OAAO,CAAC;IAChB,IAAI,IAAI,iBAAiB,CAAC;IAC1B,IAAI,IAAI,0HAA0H,CAAC;IACnI,IAAI,IAAI,oGAAoG,CAAC;IAC7G,IAAI,IAAI,OAAO,CAAC;IAChB,IAAI,IAAI,+UAA+U,CAAC;IAExV,IAAI,IAAI,gCAAgC,CAAC;IACzC,IAAI,IAAI,mNAAmN,CAAC;IAC5N,IAAI,IAAI,WAAW,CAAC;IACpB,IAAI,IAAI,kHAAkH,CAAC;IAC3H,IAAI,IAAI,OAAO,CAAC;IAChB,IAAI,IAAI,6KAA6K,GAAG,OAAO,GAAG,2BAA2B,CAAC;IAC9N,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAC1D,IAAI,IAAI,KAAK,GAAG,CAAC,GAAG,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC;IACxC,CAAC;IACD,IAAI,IAAI,yLAAyL,CAAC;IAElM,eAAe;IACf,IAAI,IAAI,oBAAoB,CAAC;IAC7B,+FAA+F;IAC/F,+FAA+F;IAC/F,6FAA6F;IAC7F,uFAAuF;IACvF,IAAI,IAAI,kUAAkU,CAAC;IAC3U,IAAI,IAAI,sgBAAsgB,CAAC;IAC/gB,IAAI,IAAI,0VAA0V,CAAC;IACnW,IAAI,IAAI,uTAAuT,CAAC;IAChU,IAAI,IAAI,mDAAmD,CAAC;IAC5D,IAAI,IAAI,iBAAiB,CAAC;IAC1B,IAAI,IAAI,sEAAsE,CAAC;IAC/E,IAAI,IAAI,2FAA2F,CAAC;IACpG,IAAI,IAAI,sDAAsD,CAAC;IAC/D,IAAI,IAAI,sFAAsF,CAAC;IAC/F,IAAI,IAAI,uFAAuF,CAAC;IAChG,IAAI,IAAI,+FAA+F,CAAC;IACxG,IAAI,IAAI,sDAAsD,CAAC;IAC/D,IAAI,IAAI,OAAO,CAAC;IAChB,IAAI,IAAI,mFAAmF,CAAC;IAC5F,IAAI,IAAI,oZAAoZ,CAAC;IAC7Z,IAAI,IAAI,wZAAwZ,CAAC;IACja,IAAI,IAAI,oaAAoa,CAAC;IAE7a,yFAAyF;IACzF,6FAA6F;IAC7F,+FAA+F;IAC/F,IAAI,IAAI,6DAA6D,CAAC;IACtE,IAAI,IAAI,6TAA6T,CAAC;IACtU,IAAI,IAAI,iBAAiB,CAAC;IAC1B,IAAI,IAAI,qFAAqF,CAAC;IAC9F,IAAI,IAAI,iGAAiG,CAAC;IAC1G,IAAI,IAAI,sEAAsE,CAAC;IAC/E,IAAI,IAAI,iGAAiG,CAAC;IAC1G,IAAI,IAAI,sFAAsF,CAAC;IAC/F,IAAI,IAAI,OAAO,CAAC;IAChB,IAAI,IAAI,6YAA6Y,CAAC;IACtZ,IAAI,IAAI,0YAA0Y,CAAC;IAEnZ,oGAAoG;IACpG,qGAAqG;IACrG,IAAI,IAAI,gEAAgE,CAAC;IACzE,IAAI,IAAI,wwBAAwwB,CAAC;IACjxB,IAAI,IAAI,iBAAiB,CAAC;IAC1B,IAAI,IAAI,oEAAoE,CAAC;IAC7E,IAAI,IAAI,oEAAoE,CAAC;IAC7E,IAAI,IAAI,4GAA4G,CAAC;IACrH,IAAI,IAAI,gHAAgH,CAAC;IACzH,IAAI,IAAI,gGAAgG,CAAC;IACzG,IAAI,IAAI,mFAAmF,CAAC;IAC5F,IAAI,IAAI,uGAAuG,CAAC;IAChH,IAAI,IAAI,yGAAyG,CAAC;IAClH,IAAI,IAAI,2EAA2E,CAAC;IACpF,IAAI,IAAI,wGAAwG,CAAC;IACjH,IAAI,IAAI,8GAA8G,CAAC;IACvH,IAAI,IAAI,OAAO,CAAC;IAChB,IAAI,IAAI,wOAAwO,CAAC;IAEjP,4FAA4F;IAC5F,IAAI,IAAI,2CAA2C,CAAC;IACpD,IAAI,IAAI,gNAAgN,CAAC;IACzN,IAAI,IAAI,iBAAiB,CAAC;IAC1B,IAAI,IAAI,mDAAmD,CAAC;IAC5D,IAAI,IAAI,qEAAqE,CAAC;IAC9E,IAAI,IAAI,2EAA2E,CAAC;IACpF,IAAI,IAAI,eAAe,GAAG,OAAO,GAAG,6DAA6D,CAAC;IAClG,IAAI,IAAI,oFAAoF,CAAC;IAC7F,IAAI,IAAI,OAAO,CAAC;IAChB,IAAI,IAAI,+NAA+N,CAAC;IAExO,KAAK;IACL,IAAI,IAAI,0BAA0B,CAAC;IACnC,IAAI,IAAI,kMAAkM,CAAC;IAC3M,IAAI,IAAI,WAAW,CAAC;IACpB,IAAI,IAAI,eAAe,GAAG,OAAO,GAAG,6BAA6B,GAAG,WAAW,CAAC;IAChF,IAAI,IAAI,eAAe,GAAG,OAAO,GAAG,2BAA2B,GAAG,WAAW,CAAC;IAC9E,IAAI,IAAI,OAAO,CAAC;IAChB,IAAI,IAAI,iBAAiB,CAAC;IAC1B,IAAI,IAAI,yFAAyF,CAAC;IAClG,IAAI,IAAI,+FAA+F,CAAC;IACxG,IAAI,IAAI,uFAAuF,CAAC;IAChG,IAAI,IAAI,oEAAoE,CAAC;IAC7E,IAAI,IAAI,sGAAsG,CAAC;IAC/G,IAAI,IAAI,OAAO,CAAC;IAChB,IAAI,IAAI,iGAAiG,CAAC;IAE1G,iGAAiG;IACjG,+FAA+F;IAC/F,4FAA4F;IAC5F,yFAAyF;IACzF,IAAI,IAAI,oEAAoE,CAAC;IAC7E,IAAI,IAAI,0NAA0N,CAAC;IACnO,IAAI,IAAI,iBAAiB,CAAC;IAC1B,IAAI,IAAI,qEAAqE,CAAC;IAC9E,IAAI,IAAI,oFAAoF,CAAC;IAC7F,IAAI,IAAI,0FAA0F,CAAC;IACnG,IAAI,IAAI,kEAAkE,CAAC;IAC3E,IAAI,IAAI,qFAAqF,CAAC;IAC9F,IAAI,IAAI,mDAAmD,CAAC;IAC5D,IAAI,IAAI,kDAAkD,CAAC;IAC3D,IAAI,IAAI,OAAO,CAAC;IAChB,IAAI,IAAI,iXAAiX,CAAC;IAC1X,IAAI,IAAI,+FAA+F,CAAC;IACxG,IAAI,IAAI,WAAW,CAAC;IACpB,IAAI,IAAI,6FAA6F,CAAC;IACtG,IAAI,IAAI,OAAO,CAAC;IAChB,IAAI,IAAI,mNAAmN,CAAC;IAC5N,IAAI,IAAI,sgBAAsgB,CAAC;IAE/gB,iGAAiG;IACjG,8FAA8F;IAC9F,kGAAkG;IAClG,uFAAuF;IACvF,IAAI,IAAI,mEAAmE,CAAC;IAC5E,IAAI,IAAI,8SAA8S,CAAC;IACvT,IAAI,IAAI,keAAke,CAAC;IAC3e,IAAI,IAAI,oOAAoO,CAAC;IAC7O,IAAI,IAAI,iBAAiB,CAAC;IAC1B,IAAI,IAAI,kEAAkE,CAAC;IAC3E,IAAI,IAAI,4GAA4G,CAAC;IACrH,IAAI,IAAI,kGAAkG,CAAC;IAC3G,IAAI,IAAI,0FAA0F,CAAC;IACnG,IAAI,IAAI,+FAA+F,CAAC;IACxG,IAAI,IAAI,gGAAgG,CAAC;IACzG,IAAI,IAAI,OAAO,CAAC;IAChB,IAAI,IAAI,kSAAkS,CAAC;IAC3S,IAAI,IAAI,yNAAyN,CAAC;IAClO,IAAI,IAAI,yUAAyU,CAAC;IAClV,IAAI,IAAI,iQAAiQ,CAAC;IAC1Q,IAAI,IAAI,mPAAmP,CAAC;IAC5P,IAAI,IAAI,2jBAA2jB,CAAC;IAEpkB,0BAA0B;IAC1B,IAAI,IAAI,0CAA0C,CAAC;IACnD,IAAI,IAAI,+GAA+G,CAAC;IACxH,IAAI,IAAI,iBAAiB,CAAC;IAC1B,IAAI,IAAI,+BAA+B,CAAC;IACxC,IAAI,IAAI,6EAA6E,CAAC;IACtF,IAAI,IAAI,+EAA+E,CAAC;IACxF,IAAI,IAAI,uDAAuD,CAAC;IAChE,IAAI,IAAI,mFAAmF,CAAC;IAC5F,IAAI,IAAI,qDAAqD,CAAC;IAC9D,IAAI,IAAI,0EAA0E,CAAC;IACnF,IAAI,IAAI,OAAO,CAAC;IAChB,IAAI,IAAI,sFAAsF,CAAC;IAE/F,yFAAyF;IACzF,sFAAsF;IACtF,IAAI,IAAI,wDAAwD,CAAC;IACjE,IAAI,IAAI,uRAAuR,CAAC;IAChS,IAAI,IAAI,iBAAiB,CAAC;IAC1B,IAAI,IAAI,yEAAyE,CAAC;IAClF,IAAI,IAAI,yFAAyF,CAAC;IAClG,IAAI,IAAI,gGAAgG,CAAC;IACzG,IAAI,IAAI,OAAO,CAAC;IAChB,IAAI,IAAI,oOAAoO,CAAC;IAC7O,IAAI,IAAI,ydAAyd,CAAC;IAEle,mEAAmE;IACnE,IAAI,IAAI,qDAAqD,CAAC;IAC9D,IAAI,IAAI,mZAAmZ,CAAC;IAC5Z,IAAI,IAAI,qUAAqU,CAAC;IAC9U,IAAI,IAAI,UAAU,CAAC;IACnB,IAAI,IAAI,oHAAoH,CAAC;IAC7H,IAAI,IAAI,qHAAqH,CAAC;IAC9H,IAAI,IAAI,gGAAgG,CAAC;IACzG,IAAI,IAAI,gGAAgG,CAAC;IACzG,IAAI,IAAI,6GAA6G,CAAC;IACtH,IAAI,IAAI,mGAAmG,CAAC;IAC5G,IAAI,IAAI,WAAW,CAAC;IACpB,IAAI,IAAI,eAAe,GAAG,OAAO,GAAG,6BAA6B,GAAG,WAAW,CAAC;IAChF,IAAI,IAAI,eAAe,GAAG,OAAO,GAAG,kCAAkC,GAAG,WAAW,CAAC;IACrF,IAAI,IAAI,OAAO,CAAC;IAChB,IAAI,IAAI,iBAAiB,CAAC;IAC1B,IAAI,IAAI,oEAAoE,CAAC;IAC7E,IAAI,IAAI,wFAAwF,CAAC;IACjG,IAAI,IAAI,mCAAmC,CAAC;IAC5C,IAAI,IAAI,sBAAsB,CAAC;IAC/B,IAAI,IAAI,iBAAiB,CAAC;IAC1B,IAAI,IAAI,0FAA0F,CAAC;IACnG,IAAI,IAAI,yIAAyI,CAAC;IAClJ,IAAI,IAAI,QAAQ,CAAC;IACjB,IAAI,IAAI,+BAA+B,CAAC;IACxC,IAAI,IAAI,2GAA2G,CAAC;IACpH,IAAI,IAAI,OAAO,CAAC;IAChB,IAAI,IAAI,kcAAkc,CAAC;IAE3c,oBAAoB;IACpB,IAAI,IAAI,yBAAyB,CAAC;IAClC,IAAI,IAAI,2XAA2X,CAAC;IACpY,IAAI,IAAI,kbAAkb,CAAC;IAC3b,IAAI,IAAI,unBAAunB,CAAC;IAChoB,IAAI,IAAI,SAAS,CAAC;IAClB,IAAI,IAAI,oHAAoH,CAAC;IAC7H,IAAI,IAAI,uKAAuK,CAAC;IAChL,IAAI,IAAI,4HAA4H,CAAC;IACrI,IAAI,IAAI,kDAAkD,CAAC;IAC3D,IAAI,IAAI,yGAAyG,CAAC;IAClH,IAAI,IAAI,6EAA6E,CAAC;IACtF,IAAI,IAAI,OAAO,CAAC;IAChB,IAAI,IAAI,kTAAkT,CAAC;IAC3T,IAAI,IAAI,4rBAA4rB,CAAC;IACrsB,IAAI,IAAI,8UAA8U,CAAC;IAEvV,iGAAiG;IACjG,mGAAmG;IACnG,oGAAoG;IACpG,mGAAmG;IACnG,gGAAgG;IAChG,iGAAiG;IACjG,gGAAgG;IAChG,6FAA6F;IAC7F,IAAI,IAAI,sCAAsC,CAAC;IAC/C,IAAI,IAAI,8lBAA8lB,CAAC;IACvmB,IAAI,IAAI,mDAAmD,CAAC;IAC5D,IAAI,IAAI,gTAAgT,CAAC;IACzT,IAAI,IAAI,0SAA0S,CAAC;IACnT,IAAI,IAAI,yUAAyU,CAAC;IAClV,IAAI,IAAI,mSAAmS,CAAC;IAC5S,IAAI,IAAI,2WAA2W,CAAC;IACpX,IAAI,IAAI,qSAAqS,CAAC;IAC9S,IAAI,IAAI,sSAAsS,CAAC;IAC/S,IAAI,IAAI,kbAAkb,CAAC;IAE3b,+FAA+F;IAC/F,gGAAgG;IAChG,sGAAsG;IACtG,IAAI,IAAI,0EAA0E,CAAC;IACnF,IAAI,IAAI,iIAAiI,CAAC;IAC1I,IAAI,IAAI,oMAAoM,CAAC;IAC7M,IAAI,IAAI,yQAAyQ,CAAC;IAClR,IAAI,IAAI,2WAA2W,CAAC;IACpX,IAAI,IAAI,2LAA2L,CAAC;IACpM,IAAI,IAAI,0KAA0K,CAAC;IACnL,IAAI,IAAI,uMAAuM,CAAC;IAEhN,sFAAsF;IACtF,6FAA6F;IAC7F,iGAAiG;IACjG,+FAA+F;IAC/F,yEAAyE;IACzE,IAAI,IAAI,6EAA6E,CAAC;IACtF,IAAI,IAAI,2IAA2I,CAAC;IACpJ,IAAI,IAAI,WAAW,CAAC;IACpB,IAAI,IAAI,eAAe,GAAG,OAAO,GAAG,kDAAkD,GAAG,WAAW,CAAC;IACrG,IAAI,IAAI,OAAO,CAAC;IAChB,IAAI,IAAI,uaAAua,CAAC;IAChb,IAAI,IAAI,yPAAyP,CAAC;IAClQ,IAAI,IAAI,uTAAuT,CAAC;IAChU,IAAI,IAAI,8UAA8U,CAAC;IACvV,IAAI,IAAI,0MAA0M,CAAC;IACnN,IAAI,IAAI,yNAAyN,CAAC;IAElO,4FAA4F;IAC5F,kGAAkG;IAClG,kGAAkG;IAClG,+FAA+F;IAC/F,8FAA8F;IAC9F,sBAAsB;IACtB,IAAI,IAAI,yEAAyE,CAAC;IAClF,IAAI,IAAI,unBAAunB,CAAC;IAChoB,IAAI,IAAI,UAAU,CAAC;IACnB,IAAI,IAAI,sDAAsD,CAAC;IAC/D,IAAI,IAAI,8DAA8D,CAAC;IACvE,IAAI,IAAI,oEAAoE,CAAC;IAC7E,IAAI,IAAI,oFAAoF,CAAC;IAC7F,IAAI,IAAI,OAAO,CAAC;IAChB,IAAI,IAAI,kPAAkP,CAAC;IAE3P,kGAAkG;IAClG,+FAA+F;IAC/F,0FAA0F;IAC1F,IAAI,IAAI,yDAAyD,CAAC;IAClE,IAAI,IAAI,oMAAoM,CAAC;IAC7M,IAAI,IAAI,8aAA8a,CAAC;IACvb,IAAI,IAAI,mQAAmQ,CAAC;IAC5Q,IAAI,IAAI,0LAA0L,CAAC;IACnM,IAAI,IAAI,mMAAmM,CAAC;IAC5M,IAAI,IAAI,kFAAkF,CAAC;IAC3F,IAAI,IAAI,2DAA2D,CAAC;IACpE,IAAI,IAAI,SAAS,CAAC;IAClB,IAAI,IAAI,oHAAoH,CAAC;IAC7H,IAAI,IAAI,6IAA6I,CAAC;IACtJ,IAAI,IAAI,+DAA+D,CAAC;IACxE,IAAI,IAAI,gEAAgE,CAAC;IACzE,IAAI,IAAI,yCAAyC,CAAC;IAClD,IAAI,IAAI,4HAA4H,CAAC;IACrI,IAAI,IAAI,wGAAwG,CAAC;IACjH,IAAI,IAAI,8FAA8F,CAAC;IACvG,IAAI,IAAI,OAAO,CAAC;IAChB,IAAI,IAAI,iaAAia,CAAC;IAE1a,wFAAwF;IACxF,6FAA6F;IAC7F,0FAA0F;IAC1F,wEAAwE;IACxE,IAAI,IAAI,gEAAgE,CAAC;IACzE,IAAI,IAAI,0LAA0L,CAAC;IACnM,IAAI,IAAI,maAAma,CAAC;IAC5a,IAAI,IAAI,6SAA6S,CAAC;IACtT,IAAI,IAAI,0NAA0N,CAAC;IACnO,IAAI,IAAI,oYAAoY,CAAC;IAC7Y,IAAI,IAAI,iUAAiU,CAAC;IAC1U,IAAI,IAAI,yWAAyW,CAAC;IAClX,IAAI,IAAI,gOAAgO,CAAC;IAEzO,6FAA6F;IAC7F,2FAA2F;IAC3F,IAAI,IAAI,6DAA6D,CAAC;IACtE,IAAI,IAAI,iNAAiN,CAAC;IAC1N,IAAI,IAAI,oTAAoT,CAAC;IAC7T,IAAI,IAAI,oOAAoO,CAAC;IAC7O,IAAI,IAAI,mKAAmK,CAAC;IAC5K,IAAI,IAAI,wMAAwM,CAAC;IACjN,IAAI,IAAI,0UAA0U,CAAC;IACnV,IAAI,IAAI,wQAAwQ,CAAC;IAEjR,QAAQ;IACR,IAAI,IAAI,uBAAuB,CAAC;IAChC,IAAI,IAAI,kDAAkD,CAAC;IAC3D,IAAI,IAAI,qEAAqE,CAAC;IAC9E,IAAI,IAAI,kDAAkD,CAAC;IAC3D,IAAI,IAAI,gGAAgG,CAAC;IACzG,IAAI,IAAI,yFAAyF,CAAC;IAClG,IAAI,IAAI,mTAAmT,CAAC;IAC5T,IAAI,IAAI,kLAAkL,CAAC;IAC3L,IAAI,IAAI,sRAAsR,CAAC;IAC/R,IAAI,IAAI,+DAA+D,CAAC;IAExE,4FAA4F;IAC5F,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,IAAI,kDAAkD,CAAC;QAC3D,IAAI,IAAI,+HAA+H,GAAG,OAAO,GAAG,6dAA6d,CAAC;IACpnB,CAAC;IAED,6FAA6F;IAC7F,IAAI,IAAI,yDAAyD,CAAC;IAClE,IAAI,IAAI,4oBAA4oB,CAAC;IACrpB,IAAI,IAAI,ubAAub,CAAC;IAChc,2FAA2F;IAC3F,kGAAkG;IAClG,kGAAkG;IAClG,wFAAwF;IACxF,IAAI,IAAI,uDAAuD,GAAG,eAAe,GAAG,0WAA0W,GAAG,OAAO,GAAG,yKAAyK,CAAC;IACrnB,IAAI,IAAI,oBAAoB,EAAE,CAAC;IAC/B,IAAI,IAAI,qfAAqf,CAAC;IAE9f,sDAAsD;IACtD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,IAAI,IAAI,wDAAwD,CAAC;QACjE,IAAI,IAAI,sHAAsH,CAAC;QAC/H,IAAI,IAAI,UAAU,GAAG,OAAO,GAAG,qBAAqB,CAAC;QACrD,IAAI,IAAI,yIAAyI,CAAC;QAClJ,IAAI,IAAI,+JAA+J,CAAC;QACxK,IAAI,IAAI,iKAAiK,CAAC;QAC1K,IAAI,IAAI,sXAAsX,CAAC;IACjY,CAAC;IAED,uDAAuD;IACvD,8FAA8F;IAC9F,2FAA2F;IAC3F,8FAA8F;IAC9F,IAAI,IAAI,GAAG,wFAAwF,GAAG,MAAM,GAAG,iGAAiG,GAAG,MAAM,GAAG,2GAA2G,CAAC;IACxU,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,IAAI,IAAI,6DAA6D,CAAC;QACtE,IAAI,IAAI,mBAAmB,GAAG,IAAI,GAAG,MAAM,CAAC;QAC5C,IAAI,IAAI,iBAAiB,EAAE,CAAC;QAC5B,IAAI,IAAI,kCAAkC,CAAC;QAC3C,IAAI,IAAI,uJAAuJ,CAAC;QAChK,IAAI,IAAI,wPAAwP,CAAC;QACjQ,IAAI,IAAI,gCAAgC,CAAC;QACzC,IAAI,IAAI,iIAAiI,CAAC;QAC1I,IAAI,IAAI,yFAAyF,CAAC;QAClG,IAAI,IAAI,8GAA8G,CAAC;QACvH,IAAI,IAAI,wSAAwS,CAAC;QACjT,IAAI,IAAI,8GAA8G,CAAC;IACzH,CAAC;IACD,IAAI,IAAI,IAAI,CAAC;IAEb,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;AAEjD,MAAM,UAAU,iBAAiB,CAAC,MAAoB;IACpD,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,8FAA8F;IAC9F,+BAA+B;IAC/B,MAAM,SAAS,GAAG,gBAAgB,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC;IACjF,MAAM,KAAK,GAAG,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAClG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC1C,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC5B,MAAoB,EACpB,OAA8B,EAAE;IAEhC,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACtD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;AAC1G,CAAC"}

package/dist/src/services/capability-record.d.ts

@@ -0,0 +1,103 @@
+import type { AimeatConfig } from '../config.js';
+import type { Storage, CapabilityRecord } from '../storage/interface.js';
+/** The fields a caller may set. Everything absent takes the shape's own default. */
+export interface CapabilityInput {
+    id?: string;
+    name?: string;
+    summary?: string;
+    visibility?: CapabilityRecord['visibility'];
+    authRequired?: CapabilityRecord['authRequired'];
+    callable?: boolean;
+    inputSchema?: unknown;
+    outputSchema?: unknown;
+    exports?: unknown;
+    usage?: string;
+    whenToUse?: string;
+    whenNotToUse?: string;
+    examples?: unknown[];
+    dependencies?: unknown[];
+    webhookUrl?: string | null;
+    cost?: unknown;
+    trustRequired?: unknown;
+    redactedFields?: string[];
+    tags?: string[];
+    source?: CapabilityRecord['source'];
+}
+/** What a door hands the create path: the input above, plus the two fields it validates itself. */
+export interface CapabilityCreateInput extends Omit<CapabilityInput, 'source'> {
+    /** The caller's source descriptor, in whatever shape it arrived. Normalised below. */
+    source?: unknown;
+    /** 'draft' (the default) or 'active'. A public capability on a moderated node still waits. */
+    status?: CapabilityRecord['status'];
+}
+export interface CapabilityDeps {
+    storage: Storage;
+    config: AimeatConfig;
+}
+/** Who is asking. Each door resolves this from its own session and hands over the result. */
+export interface CapabilityCaller {
+    /** The identity a new capability is stored under, and the one ownership is compared against. */
+    gaii: string;
+    /** Exempt from the publishing policy, and allowed to act on another owner's capability. */
+    isOperator: boolean;
+}
+export type CapabilityResult<T> = {
+    ok: true;
+    value: T;
+} | {
+    ok: false;
+    status: number;
+    code: string;
+    message: string;
+};
+/**
+ * A PUBLIC capability on a moderated node waits for review, whoever registered it and whichever door
+ * they came through. An operator is exempt — moderating your own node is not a queue you join.
+ */
+export declare function moderatedStatus(config: AimeatConfig, visibility: string | undefined, isOperator: boolean, requested: CapabilityRecord['status']): CapabilityRecord['status'];
+/**
+ * Build the record. `status` is already decided by the caller, because the moderation rule needs to
+ * know whether the caller is an operator and that is a per-door fact.
+ */
+export declare function buildCapabilityRecord(ctx: {
+    ownerGhii: string;
+    schemaHash: string;
+    status: CapabilityRecord['status'];
+    now: string;
+}, input: CapabilityInput): CapabilityRecord;
+/** Register one capability. Policy first, then the shape, then the insert. */
+export declare function createCapability(deps: CapabilityDeps, caller: CapabilityCaller, input: CapabilityCreateInput): Promise<CapabilityResult<CapabilityRecord>>;
+/**
+ * Apply one patch. WHICH fields a door accepts is the door's own declaration — an MCP tool publishes
+ * a parameter list, an HTTP route takes a body — so the patch arrives already shaped. What happens
+ * to it is the same either way.
+ */
+export declare function updateCapability(deps: CapabilityDeps, caller: CapabilityCaller, id: string, patch: Record<string, unknown>): Promise<CapabilityResult<CapabilityRecord>>;
+/** Remove one capability. Only a manual one: the rest belong to whatever produced them. */
+export declare function deleteCapability(deps: CapabilityDeps, caller: CapabilityCaller, id: string): Promise<CapabilityResult<{
+    id: string;
+}>>;
+/** Vouch for someone else's capability. Your own does not count, which is the whole point. */
+export declare function vouchCapability(deps: CapabilityDeps, caller: CapabilityCaller, id: string): Promise<CapabilityResult<{
+    vouchCount: number;
+}>>;
+/**
+ * What an invocation leaves behind: the counters, and one line in the capability's call log. The
+ * tool surface wrote the counters and no log at all, so the log the owner reads to see who has been
+ * calling them was missing the agent traffic.
+ *
+ * A failed input is logged in full, because a redacted argument list cannot be debugged and the
+ * owner is the only reader. A successful one is logged through the owner's redaction rules.
+ *
+ * Never throws: the call already happened and its answer is owed to the caller either way.
+ */
+export declare function recordCapabilityInvocation(deps: {
+    storage: Storage;
+}, cap: CapabilityRecord, callerGhii: string, input: Record<string, unknown>, outcome: {
+    ok: true;
+    durationMs: number;
+} | {
+    ok: false;
+    message: string;
+}): Promise<void>;
+//# sourceMappingURL=capability-record.d.ts.map

package/dist/src/services/capability-record.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability-record.d.ts","sourceRoot":"","sources":["../../../src/services/capability-record.ts"],"names":[],"mappings":"AAyCA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAGzE,oFAAoF;AACpF,MAAM,WAAW,eAAe;IAC5B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,gBAAgB,CAAC,YAAY,CAAC,CAAC;IAC5C,YAAY,CAAC,EAAE,gBAAgB,CAAC,cAAc,CAAC,CAAC;IAChD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC;IACrB,YAAY,CAAC,EAAE,OAAO,EAAE,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,CAAC,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;CACvC;AAED,mGAAmG;AACnG,MAAM,WAAW,qBAAsB,SAAQ,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC;IAC1E,sFAAsF;IACtF,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,8FAA8F;IAC9F,MAAM,CAAC,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,cAAc;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,YAAY,CAAC;CACxB;AAED,6FAA6F;AAC7F,MAAM,WAAW,gBAAgB;IAC7B,gGAAgG;IAChG,IAAI,EAAE,MAAM,CAAC;IACb,2FAA2F;IAC3F,UAAU,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,MAAM,gBAAgB,CAAC,CAAC,IACxB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GACtB;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAUnE;;;GAGG;AACH,wBAAgB,eAAe,CAC3B,MAAM,EAAE,YAAY,EACpB,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,UAAU,EAAE,OAAO,EACnB,SAAS,EAAE,gBAAgB,CAAC,QAAQ,CAAC,GACtC,gBAAgB,CAAC,QAAQ,CAAC,CAG5B;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACjC,GAAG,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,EAC/F,KAAK,EAAE,eAAe,GACvB,gBAAgB,CAmClB;AAoBD,8EAA8E;AAC9E,wBAAsB,gBAAgB,CAClC,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE,gBAAgB,EACxB,KAAK,EAAE,qBAAqB,GAC7B,OAAO,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,CAAC,CAkE7C;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CAClC,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE,gBAAgB,EACxB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,CAAC,CA8B7C;AAED,2FAA2F;AAC3F,wBAAsB,gBAAgB,CAClC,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE,gBAAgB,EACxB,EAAE,EAAE,MAAM,GACX,OAAO,CAAC,gBAAgB,CAAC;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAc3C;AAED,8FAA8F;AAC9F,wBAAsB,eAAe,CACjC,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE,gBAAgB,EACxB,EAAE,EAAE,MAAM,GACX,OAAO,CAAC,gBAAgB,CAAC;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAYnD;AAyBD;;;;;;;;;GASG;AACH,wBAAsB,0BAA0B,CAC5C,IAAI,EAAE;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,EAC1B,GAAG,EAAE,gBAAgB,EACrB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,OAAO,EAAE;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC3E,OAAO,CAAC,IAAI,CAAC,CAyBf"}