antpath 0.6.2 → 0.7.0

package/dist/proxy-endpoint.js

@@ -0,0 +1,131 @@
+import { authShapeHeaderName, PROXY_RESPONSE_MODES } from "./_shared/index.js";
+export class ProxyEndpoint {
+    /** Non-secret half of the wire shape — declaration only. */
+    declaration;
+    /** Per-request secret half — auth value keyed by the same `name`. */
+    auth;
+    constructor(declaration, auth) {
+        this.declaration = declaration;
+        this.auth = auth;
+    }
+    /** Bearer-token endpoint. */
+    static bearer(options) {
+        const common = buildCommonDeclaration(options, { type: "bearer" });
+        requireNonEmpty(options.token, "ProxyEndpoint.bearer: token is required");
+        return new ProxyEndpoint(common, {
+            name: common.name,
+            value: { type: "bearer", token: options.token }
+        });
+    }
+    /** Basic-auth endpoint. */
+    static basic(options) {
+        const common = buildCommonDeclaration(options, { type: "basic" });
+        requireNonEmpty(options.username, "ProxyEndpoint.basic: username is required");
+        requireNonEmpty(options.password, "ProxyEndpoint.basic: password is required");
+        return new ProxyEndpoint(common, {
+            name: common.name,
+            value: { type: "basic", username: options.username, password: options.password }
+        });
+    }
+    /** Custom-header endpoint. */
+    static header(options) {
+        requireNonEmpty(options.header, "ProxyEndpoint.header: header is required");
+        const common = buildCommonDeclaration(options, { type: "header", name: options.header });
+        requireNonEmpty(options.value, "ProxyEndpoint.header: value is required");
+        return new ProxyEndpoint(common, {
+            name: common.name,
+            value: { type: "header", value: options.value }
+        });
+    }
+    /** Query-string-auth endpoint. */
+    static query(options) {
+        requireNonEmpty(options.query, "ProxyEndpoint.query: query is required");
+        const common = buildCommonDeclaration(options, { type: "query", name: options.query });
+        requireNonEmpty(options.value, "ProxyEndpoint.query: value is required");
+        return new ProxyEndpoint(common, {
+            name: common.name,
+            value: { type: "query", value: options.value }
+        });
+    }
+}
+/**
+ * Split a list of `ProxyEndpoint` instances into the public declarations
+ * (`proxyEndpoints[]`) and the per-request auth bundle
+ * (`secrets.proxyEndpointAuth[]`). Mirrors the way `submitRun` already
+ * splits `McpServer.headers` into `secrets.mcpServers[]`.
+ *
+ * Throws on duplicate endpoint names — names are the cross-reference
+ * key between the two halves and the BFF rejects collisions; failing
+ * here gives the caller a precise message at the call site instead of
+ * an opaque HTTP error.
+ */
+export function splitProxyEndpoints(inputs) {
+    if (inputs.length === 0) {
+        return { endpoints: [], auth: [] };
+    }
+    const endpoints = [];
+    const auth = [];
+    const seen = new Set();
+    for (let i = 0; i < inputs.length; i++) {
+        const entry = inputs[i];
+        if (!(entry instanceof ProxyEndpoint)) {
+            throw new TypeError(`proxyEndpoints[${i}] must be a ProxyEndpoint built via ProxyEndpoint.bearer / header / basic / query`);
+        }
+        if (seen.has(entry.declaration.name)) {
+            throw new Error(`proxyEndpoints duplicate name: ${entry.declaration.name}`);
+        }
+        seen.add(entry.declaration.name);
+        endpoints.push(entry.declaration);
+        auth.push(entry.auth);
+    }
+    return { endpoints, auth };
+}
+function buildCommonDeclaration(options, authShape) {
+    requireNonEmpty(options.name, "ProxyEndpoint: name is required");
+    requireNonEmpty(options.baseUrl, "ProxyEndpoint: baseUrl is required");
+    if (!Array.isArray(options.allowMethods) || options.allowMethods.length === 0) {
+        throw new Error("ProxyEndpoint: allowMethods must be a non-empty array");
+    }
+    if (!Array.isArray(options.allowPathPrefixes) || options.allowPathPrefixes.length === 0) {
+        throw new Error("ProxyEndpoint: allowPathPrefixes must be a non-empty array");
+    }
+    if (options.responseMode !== undefined && !PROXY_RESPONSE_MODES.includes(options.responseMode)) {
+        throw new Error(`ProxyEndpoint: responseMode must be one of ${PROXY_RESPONSE_MODES.join(" | ")}`);
+    }
+    // Defence in depth: don't let the caller list the auth carrier
+    // header in `allowHeaders`. The BFF rejects this too, but a precise
+    // SDK-side error message is clearer.
+    if (options.allowHeaders) {
+        const carrier = authShapeHeaderName(authShape);
+        if (carrier) {
+            for (const h of options.allowHeaders) {
+                if (h.toLowerCase() === carrier) {
+                    throw new Error(`ProxyEndpoint: allowHeaders MUST NOT include the auth header "${h}" — ` +
+                        `it's set by the proxy on every request`);
+                }
+            }
+        }
+    }
+    return {
+        name: options.name,
+        baseUrl: options.baseUrl,
+        authShape,
+        allowMethods: options.allowMethods,
+        allowPathPrefixes: options.allowPathPrefixes,
+        ...(options.allowHeaders ? { allowHeaders: options.allowHeaders } : {}),
+        ...(options.responseMode ? { responseMode: options.responseMode } : {}),
+        ...(options.maxRequestBytes !== undefined ? { maxRequestBytes: options.maxRequestBytes } : {}),
+        ...(options.maxResponseBytes !== undefined ? { maxResponseBytes: options.maxResponseBytes } : {}),
+        ...(options.timeoutMs !== undefined ? { timeoutMs: options.timeoutMs } : {}),
+        ...(options.perCallBudget !== undefined ? { perCallBudget: options.perCallBudget } : {}),
+        ...(options.responseByteBudget !== undefined
+            ? { responseByteBudget: options.responseByteBudget }
+            : {})
+    };
+}
+function requireNonEmpty(value, message) {
+    if (typeof value !== "string" || !value) {
+        throw new Error(message);
+    }
+}
+//# sourceMappingURL=proxy-endpoint.js.map

package/dist/proxy-endpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-endpoint.js","sourceRoot":"","sources":["../src/proxy-endpoint.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EAOrB,MAAM,iBAAiB,CAAC;AAwFzB,MAAM,OAAO,aAAa;IACxB,4DAA4D;IACnD,WAAW,CAAwB;IAC5C,qEAAqE;IAC5D,IAAI,CAA4B;IAEzC,YAAoB,WAAkC,EAAE,IAA+B;QACrF,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,6BAA6B;IAC7B,MAAM,CAAC,MAAM,CAAC,OAAmC;QAC/C,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACnE,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,yCAAyC,CAAC,CAAC;QAC1E,OAAO,IAAI,aAAa,CAAC,MAAM,EAAE;YAC/B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE;SAChD,CAAC,CAAC;IACL,CAAC;IAED,2BAA2B;IAC3B,MAAM,CAAC,KAAK,CAAC,OAAkC;QAC7C,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAClE,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,2CAA2C,CAAC,CAAC;QAC/E,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,2CAA2C,CAAC,CAAC;QAC/E,OAAO,IAAI,aAAa,CAAC,MAAM,EAAE;YAC/B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;SACjF,CAAC,CAAC;IACL,CAAC;IAED,8BAA8B;IAC9B,MAAM,CAAC,MAAM,CAAC,OAAmC;QAC/C,eAAe,CAAC,OAAO,CAAC,MAAM,EAAE,0CAA0C,CAAC,CAAC;QAC5E,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACzF,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,yCAAyC,CAAC,CAAC;QAC1E,OAAO,IAAI,aAAa,CAAC,MAAM,EAAE;YAC/B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE;SAChD,CAAC,CAAC;IACL,CAAC;IAED,kCAAkC;IAClC,MAAM,CAAC,KAAK,CAAC,OAAkC;QAC7C,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,wCAAwC,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QACvF,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,wCAAwC,CAAC,CAAC;QACzE,OAAO,IAAI,aAAa,CAAC,MAAM,EAAE;YAC/B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE;SAC/C,CAAC,CAAC;IACL,CAAC;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAgC;IAIlE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACrC,CAAC;IACD,MAAM,SAAS,GAA4B,EAAE,CAAC;IAC9C,MAAM,IAAI,GAAgC,EAAE,CAAC;IAC7C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,CAAC,KAAK,YAAY,aAAa,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,SAAS,CACjB,kBAAkB,CAAC,mFAAmF,CACvG,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,kCAAkC,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACjC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,sBAAsB,CAC7B,OAAmC,EACnC,SAAyB;IAEzB,eAAe,CAAC,OAAO,CAAC,IAAI,EAAE,iCAAiC,CAAC,CAAC;IACjE,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,oCAAoC,CAAC,CAAC;IACvE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,OAAO,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxF,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QAC/F,MAAM,IAAI,KAAK,CACb,8CAA8C,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CACjF,CAAC;IACJ,CAAC;IACD,+DAA+D;IAC/D,oEAAoE;IACpE,qCAAqC;IACrC,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,OAAO,EAAE,CAAC;YACZ,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;gBACrC,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,OAAO,EAAE,CAAC;oBAChC,MAAM,IAAI,KAAK,CACb,iEAAiE,CAAC,MAAM;wBACtE,wCAAwC,CAC3C,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,SAAS;QACT,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9F,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjG,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,GAAG,CAAC,OAAO,CAAC,kBAAkB,KAAK,SAAS;YAC1C,CAAC,CAAC,EAAE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,EAAE;YACpD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,OAAe;IACtD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC"}

package/dist/skill.d.ts

@@ -1,40 +1,80 @@
-import type { ProviderSkillRef, Skill as SkillRecord, SkillRef } from "./_shared/index.js";
+import { type ProviderSkillRef, type Skill as SkillRecord, type SkillRef } from "./_shared/index.js";
+import { type SkillFiles } from "./bundle.js";
 /**
- * Workspace `Skill` and provider `Skill` are both modeled by ONE class with
- * a discriminated wire shape under `.ref`. Keeping a single class means
- * `submitRun({ skills: [...] })` accepts a uniform array; the SDK
- * normalises every entry to its `ref` before sending the wire payload.
- *
- * Three workspace constructors:
- *
- *   - `Skill.fromId("skl_abc123")` — reference an existing workspace
- *     skill without re-uploading. Useful for sharing a skill across many
- *     `submitRun` calls or in a `defineRun` factory.
- *   - `client.skills.upload({ name, files })` — inline files map (UTF-8
- *     strings or `Uint8Array`); SDK zips and uploads.
- *   - `client.skills.fromPath("./dir", { name })` — local directory; SDK
- *     reads, zips, and uploads (Node only).
- *
- * One provider constructor:
- *
- *   - `Skill.provider({ vendor, skillId, version? })` — references a
- *     provider built-in skill (e.g. Anthropic web-search). Provider
- *     skills are NOT uploaded to your workspace and have no
- *     soft-delete semantics.
- *
- * Instances are immutable. The wire `ref` is the only state and never
- * carries credentials.
+ * One `Skill` class, one mental model, three usage modes:
+ *
+ *   - **Workspace** — uploaded to the antpath platform and reused across
+ *     runs.
+ *     ```ts
+ *     const persisted = await Skill.fromFiles({ name, files }).upload(client);
+ *     // or
+ *     const ref = Skill.fromId("skl_abc123");
+ *     ```
+ *
+ *   - **Provider built-in** — references a provider-side skill (e.g.
+ *     Anthropic web-search). Not uploaded to your workspace.
+ *     ```ts
+ *     const websearch = Skill.provider({ vendor: "anthropic", skillId: "web-search" });
+ *     ```
+ *
+ *   - **Transient (per-run)** — built from local files, never persisted.
+ *     The bytes ride alongside `submitRun` as a multipart part and the
+ *     BFF tears them down at run terminal.
+ *     ```ts
+ *     const rules = await Skill.fromFiles({ name: "rules", files: {...} });
+ *     await client.submitRun({ skills: [rules], ... });
+ *     ```
+ *
+ * ## Lifecycle of an unstaged transient Skill
+ *
+ * After `Skill.fromFiles(...)` returns, the Skill is "unstaged transient":
+ *
+ *   1. Passing it to `submitRun` uploads the bytes for that one run only
+ *      and assigns a positional slot id (`transient-0`, `transient-1`, …).
+ *      The same instance may be passed to multiple `submitRun` calls
+ *      until it is consumed by `.upload(...)`.
+ *
+ *   2. Calling `await skill.upload(client)` persists the bundle to the
+ *      workspace skill store and returns a **new** `Skill` instance
+ *      whose `.ref.kind === "workspace"`. The **original** is marked
+ *      **consumed**:
+ *      - any further use in `submitRun` throws a clear validation error,
+ *      - `.upload(...)` on the consumed instance throws,
+ *      - `JSON.stringify` / `toJSON()` on the consumed instance throws.
+ *
+ *      Use the returned (workspace) Skill from then on. The consumed
+ *      reference exists only to surface the mistake loudly the first
+ *      time the user re-uses it; it never silently re-uploads as
+ *      transient.
+ *
+ * Unstaged transient Skills do NOT round-trip through JSON (the bytes
+ * cannot be serialised back). `toJSON()` throws in that state too —
+ * persist via `.upload(client)` first, or pass the unstaged Skill
+ * directly to `submitRun`.
+ *
+ * The Skill class is the only public way to build a transient bundle;
+ * the SDK never accepts a raw `TransientSkillRef` object from user code.
  */
 export declare class Skill {
+    #private;
     /** Workspace skill record returned by the BFF (only set for workspace-uploaded skills). */
     readonly record: SkillRecord | undefined;
-    readonly ref: SkillRef;
     /**
-     * Internal constructor. Use `Skill.fromId`, `Skill.provider`, or
-     * `client.skills.upload` / `client.skills.fromPath` to create
-     * instances.
+     * Internal constructor. Use `Skill.fromId`, `Skill.provider`,
+     * `Skill.fromFiles`, or `Skill.fromPath` to create instances.
      */
-    constructor(ref: SkillRef, record?: SkillRecord);
+    constructor(ref: SkillRef, record?: SkillRecord, transientBytes?: Uint8Array);
+    /**
+     * The wire-level reference. For workspace and provider skills this is
+     * stable. For unstaged transient skills it carries the placeholder
+     * `slot: "(unstaged)"` — `submitRun` rewrites the slot to a real
+     * positional id (`transient-0`, …) before sending.
+     *
+     * For consumed Skills, the getter still returns the original
+     * transient ref so error messages can be precise — but using a
+     * consumed Skill in any submit/serialise path throws.
+     */
+    get ref(): SkillRef;
     /**
      * Reference an existing workspace skill by its id (e.g. `skl_abc123`).
      * Does NOT validate the skill exists — that check happens on the next
@@ -52,8 +92,99 @@ export declare class Skill {
         readonly skillId: string;
         readonly version?: string;
     }): Skill;
-    /** True for `Skill.fromId(...)` and skills returned by `client.skills.upload(...)`. */
+    /**
+     * Build an unstaged transient Skill from an inline files map. The SDK
+     * validates basic safety (no path traversal, size caps, has
+     * `SKILL.md`), deterministically zips the bundle, and computes the
+     * `sha256:<hex>` content hash that travels in the wire ref.
+     *
+     * The returned Skill carries the bytes privately. Pass it to
+     * `submitRun` for transient (per-run) use, or call `.upload(client)`
+     * to persist it as a workspace skill.
+     */
+    static fromFiles(args: {
+        readonly name: string;
+        readonly files: SkillFiles;
+    }): Promise<Skill>;
+    /**
+     * Read a local directory and build an unstaged transient Skill.
+     * Symlinks and non-regular files are skipped. Node-only.
+     *
+     * The returned Skill behaves identically to one built via
+     * `Skill.fromFiles` — pass it to `submitRun` for transient use, or
+     * call `.upload(client)` to persist as a workspace skill.
+     */
+    static fromPath(rootDir: string, args: {
+        readonly name: string;
+    }): Promise<Skill>;
+    /**
+     * Persist this unstaged transient Skill as a workspace skill and
+     * return a new `Skill` instance backed by the resulting `skl_*`
+     * record. After `upload` resolves successfully, the original
+     * instance is marked **consumed** — any further use throws a clear
+     * validation error.
+     *
+     * Only unstaged transient Skills can be uploaded. Calling this on a
+     * workspace-ref Skill, a provider-ref Skill, or a previously
+     * consumed Skill throws.
+     *
+     * Accepts either an `AntpathClient` (preferred) or its
+     * `SkillsClient` if the caller already has a handle to it.
+     */
+    upload(client: SkillUploader): Promise<Skill>;
+    /** True for `Skill.fromId(...)` and skills returned by `.upload(...)`. */
     get isWorkspace(): boolean;
     /** True for `Skill.provider(...)`. */
     get isProvider(): boolean;
+    /** True for any transient Skill (unstaged or consumed). */
+    get isTransient(): boolean;
+    /**
+     * True only while the transient Skill still carries bytes and has
+     * not been consumed by `.upload(...)`. Unstaged Skills can be passed
+     * to `submitRun` or `.upload(client)`; consumed ones cannot.
+     */
+    get isUnstaged(): boolean;
+    /** True after a successful `.upload(...)` — using this instance further throws. */
+    get isConsumed(): boolean;
+    /**
+     * Internal: yield the unstaged transient bundle's payload so the
+     * client's `submitRun` can build a multipart part. Returns undefined
+     * for non-transient or consumed skills. Throws if the instance is
+     * marked consumed (a stronger signal than "no bytes").
+     *
+     * NOT part of the public API — the `_` prefix is a "do not call from
+     * user code" marker. Callers within the SDK pass the returned bytes
+     * into the multipart body once per `submitRun` invocation.
+     */
+    _takeUnstagedBundle(): {
+        name: string;
+        bytes: Uint8Array;
+        contentHash: string;
+    } | undefined;
+    /**
+     * JSON serialisation guard. Workspace and provider Skills serialise
+     * to their `ref`. Unstaged transient Skills throw — the bytes are not
+     * in the JSON, so a round-trip would silently drop them. Consumed
+     * Skills also throw, to surface the "you forgot to use the returned
+     * Skill from `.upload(...)`" mistake at the point it happens.
+     */
+    toJSON(): SkillRef;
+}
+/**
+ * Anything that can persist a skill bundle. Both `AntpathClient` and
+ * the internal `SkillsClient` satisfy this shape — `Skill.upload`
+ * accepts either, but the SDK consumer only ever sees the
+ * `AntpathClient`-based path.
+ */
+export interface SkillUploader {
+    readonly _uploadSkillBundle?: (args: {
+        readonly name: string;
+        readonly body: Uint8Array;
+    }) => Promise<SkillRecord>;
+    readonly skills?: {
+        readonly _uploadSkillBundle?: (args: {
+            readonly name: string;
+            readonly body: Uint8Array;
+        }) => Promise<SkillRecord>;
+    };
 }

package/dist/skill.js

@@ -1,41 +1,88 @@
+import { SKILL_NAME_PATTERN } from "./_shared/index.js";
+import { bundleSkillFiles, hashSkillBundle } from "./bundle.js";
+import { readDirectoryAsFiles } from "./node-fs.js";
 /**
- * Workspace `Skill` and provider `Skill` are both modeled by ONE class with
- * a discriminated wire shape under `.ref`. Keeping a single class means
- * `submitRun({ skills: [...] })` accepts a uniform array; the SDK
- * normalises every entry to its `ref` before sending the wire payload.
+ * One `Skill` class, one mental model, three usage modes:
  *
- * Three workspace constructors:
+ *   - **Workspace** — uploaded to the antpath platform and reused across
+ *     runs.
+ *     ```ts
+ *     const persisted = await Skill.fromFiles({ name, files }).upload(client);
+ *     // or
+ *     const ref = Skill.fromId("skl_abc123");
+ *     ```
  *
- *   - `Skill.fromId("skl_abc123")` — reference an existing workspace
- *     skill without re-uploading. Useful for sharing a skill across many
- *     `submitRun` calls or in a `defineRun` factory.
- *   - `client.skills.upload({ name, files })` — inline files map (UTF-8
- *     strings or `Uint8Array`); SDK zips and uploads.
- *   - `client.skills.fromPath("./dir", { name })` — local directory; SDK
- *     reads, zips, and uploads (Node only).
+ *   - **Provider built-in** — references a provider-side skill (e.g.
+ *     Anthropic web-search). Not uploaded to your workspace.
+ *     ```ts
+ *     const websearch = Skill.provider({ vendor: "anthropic", skillId: "web-search" });
+ *     ```
  *
- * One provider constructor:
+ *   - **Transient (per-run)** — built from local files, never persisted.
+ *     The bytes ride alongside `submitRun` as a multipart part and the
+ *     BFF tears them down at run terminal.
+ *     ```ts
+ *     const rules = await Skill.fromFiles({ name: "rules", files: {...} });
+ *     await client.submitRun({ skills: [rules], ... });
+ *     ```
  *
- *   - `Skill.provider({ vendor, skillId, version? })` — references a
- *     provider built-in skill (e.g. Anthropic web-search). Provider
- *     skills are NOT uploaded to your workspace and have no
- *     soft-delete semantics.
+ * ## Lifecycle of an unstaged transient Skill
  *
- * Instances are immutable. The wire `ref` is the only state and never
- * carries credentials.
+ * After `Skill.fromFiles(...)` returns, the Skill is "unstaged transient":
+ *
+ *   1. Passing it to `submitRun` uploads the bytes for that one run only
+ *      and assigns a positional slot id (`transient-0`, `transient-1`, …).
+ *      The same instance may be passed to multiple `submitRun` calls
+ *      until it is consumed by `.upload(...)`.
+ *
+ *   2. Calling `await skill.upload(client)` persists the bundle to the
+ *      workspace skill store and returns a **new** `Skill` instance
+ *      whose `.ref.kind === "workspace"`. The **original** is marked
+ *      **consumed**:
+ *      - any further use in `submitRun` throws a clear validation error,
+ *      - `.upload(...)` on the consumed instance throws,
+ *      - `JSON.stringify` / `toJSON()` on the consumed instance throws.
+ *
+ *      Use the returned (workspace) Skill from then on. The consumed
+ *      reference exists only to surface the mistake loudly the first
+ *      time the user re-uses it; it never silently re-uploads as
+ *      transient.
+ *
+ * Unstaged transient Skills do NOT round-trip through JSON (the bytes
+ * cannot be serialised back). `toJSON()` throws in that state too —
+ * persist via `.upload(client)` first, or pass the unstaged Skill
+ * directly to `submitRun`.
+ *
+ * The Skill class is the only public way to build a transient bundle;
+ * the SDK never accepts a raw `TransientSkillRef` object from user code.
  */
 export class Skill {
     /** Workspace skill record returned by the BFF (only set for workspace-uploaded skills). */
     record;
-    ref;
+    #ref;
+    #transientBytes;
+    #consumed = false;
     /**
-     * Internal constructor. Use `Skill.fromId`, `Skill.provider`, or
-     * `client.skills.upload` / `client.skills.fromPath` to create
-     * instances.
+     * Internal constructor. Use `Skill.fromId`, `Skill.provider`,
+     * `Skill.fromFiles`, or `Skill.fromPath` to create instances.
      */
-    constructor(ref, record) {
-        this.ref = ref;
+    constructor(ref, record, transientBytes) {
+        this.#ref = ref;
         this.record = record;
+        this.#transientBytes = transientBytes;
+    }
+    /**
+     * The wire-level reference. For workspace and provider skills this is
+     * stable. For unstaged transient skills it carries the placeholder
+     * `slot: "(unstaged)"` — `submitRun` rewrites the slot to a real
+     * positional id (`transient-0`, …) before sending.
+     *
+     * For consumed Skills, the getter still returns the original
+     * transient ref so error messages can be precise — but using a
+     * consumed Skill in any submit/serialise path throws.
+     */
+    get ref() {
+        return this.#ref;
     }
     /**
      * Reference an existing workspace skill by its id (e.g. `skl_abc123`).
@@ -47,8 +94,7 @@ export class Skill {
         if (typeof id !== "string" || !id) {
             throw new Error("Skill.fromId: id is required");
         }
-        const ref = { kind: "workspace", id };
-        return new Skill(ref);
+        return new Skill({ kind: "workspace", id });
     }
     /**
      * Reference a provider built-in skill. The vendor decides what the
@@ -70,13 +116,162 @@ export class Skill {
             : { kind: "provider", vendor: args.vendor, skillId: args.skillId };
         return new Skill(ref);
     }
-    /** True for `Skill.fromId(...)` and skills returned by `client.skills.upload(...)`. */
+    /**
+     * Build an unstaged transient Skill from an inline files map. The SDK
+     * validates basic safety (no path traversal, size caps, has
+     * `SKILL.md`), deterministically zips the bundle, and computes the
+     * `sha256:<hex>` content hash that travels in the wire ref.
+     *
+     * The returned Skill carries the bytes privately. Pass it to
+     * `submitRun` for transient (per-run) use, or call `.upload(client)`
+     * to persist it as a workspace skill.
+     */
+    static async fromFiles(args) {
+        if (!args || typeof args !== "object") {
+            throw new Error("Skill.fromFiles: args is required");
+        }
+        if (typeof args.name !== "string" || !SKILL_NAME_PATTERN.test(args.name)) {
+            throw new Error(`Skill.fromFiles: name must match ${SKILL_NAME_PATTERN.source}`);
+        }
+        const bundled = bundleSkillFiles(args.files);
+        const contentHash = await hashSkillBundle(bundled.zip);
+        const ref = {
+            kind: "transient",
+            slot: UNSTAGED_SLOT,
+            name: args.name,
+            contentHash
+        };
+        return new Skill(ref, undefined, bundled.zip);
+    }
+    /**
+     * Read a local directory and build an unstaged transient Skill.
+     * Symlinks and non-regular files are skipped. Node-only.
+     *
+     * The returned Skill behaves identically to one built via
+     * `Skill.fromFiles` — pass it to `submitRun` for transient use, or
+     * call `.upload(client)` to persist as a workspace skill.
+     */
+    static async fromPath(rootDir, args) {
+        const files = await readDirectoryAsFiles(rootDir);
+        return Skill.fromFiles({ name: args.name, files });
+    }
+    /**
+     * Persist this unstaged transient Skill as a workspace skill and
+     * return a new `Skill` instance backed by the resulting `skl_*`
+     * record. After `upload` resolves successfully, the original
+     * instance is marked **consumed** — any further use throws a clear
+     * validation error.
+     *
+     * Only unstaged transient Skills can be uploaded. Calling this on a
+     * workspace-ref Skill, a provider-ref Skill, or a previously
+     * consumed Skill throws.
+     *
+     * Accepts either an `AntpathClient` (preferred) or its
+     * `SkillsClient` if the caller already has a handle to it.
+     */
+    async upload(client) {
+        if (this.#consumed) {
+            throw new Error(consumedMessage());
+        }
+        if (this.#ref.kind !== "transient" || !this.#transientBytes) {
+            throw new Error("Skill.upload: only unstaged transient Skills (built via Skill.fromFiles / Skill.fromPath) can be uploaded; " +
+                "use Skill.fromId(record.id) to reference an already-persisted skill");
+        }
+        const uploader = resolveUploader(client);
+        const record = await uploader({ name: this.#ref.name, body: this.#transientBytes });
+        // Only mark consumed AFTER a successful upload — a failed upload
+        // leaves the original instance reusable so the caller can retry.
+        this.#consumed = true;
+        return new Skill({ kind: "workspace", id: record.id }, record);
+    }
+    /** True for `Skill.fromId(...)` and skills returned by `.upload(...)`. */
     get isWorkspace() {
-        return this.ref.kind === "workspace";
+        return this.#ref.kind === "workspace";
     }
     /** True for `Skill.provider(...)`. */
     get isProvider() {
-        return this.ref.kind === "provider";
+        return this.#ref.kind === "provider";
+    }
+    /** True for any transient Skill (unstaged or consumed). */
+    get isTransient() {
+        return this.#ref.kind === "transient";
+    }
+    /**
+     * True only while the transient Skill still carries bytes and has
+     * not been consumed by `.upload(...)`. Unstaged Skills can be passed
+     * to `submitRun` or `.upload(client)`; consumed ones cannot.
+     */
+    get isUnstaged() {
+        return (this.#ref.kind === "transient" &&
+            this.#ref.slot === UNSTAGED_SLOT &&
+            !this.#consumed &&
+            this.#transientBytes !== undefined);
+    }
+    /** True after a successful `.upload(...)` — using this instance further throws. */
+    get isConsumed() {
+        return this.#consumed;
     }
+    /**
+     * Internal: yield the unstaged transient bundle's payload so the
+     * client's `submitRun` can build a multipart part. Returns undefined
+     * for non-transient or consumed skills. Throws if the instance is
+     * marked consumed (a stronger signal than "no bytes").
+     *
+     * NOT part of the public API — the `_` prefix is a "do not call from
+     * user code" marker. Callers within the SDK pass the returned bytes
+     * into the multipart body once per `submitRun` invocation.
+     */
+    _takeUnstagedBundle() {
+        if (this.#consumed) {
+            throw new Error(consumedMessage());
+        }
+        if (!this.isUnstaged) {
+            return undefined;
+        }
+        if (this.#ref.kind !== "transient" || !this.#transientBytes) {
+            return undefined;
+        }
+        return {
+            name: this.#ref.name,
+            bytes: this.#transientBytes,
+            contentHash: this.#ref.contentHash
+        };
+    }
+    /**
+     * JSON serialisation guard. Workspace and provider Skills serialise
+     * to their `ref`. Unstaged transient Skills throw — the bytes are not
+     * in the JSON, so a round-trip would silently drop them. Consumed
+     * Skills also throw, to surface the "you forgot to use the returned
+     * Skill from `.upload(...)`" mistake at the point it happens.
+     */
+    toJSON() {
+        if (this.#consumed) {
+            throw new Error(consumedMessage());
+        }
+        if (this.isUnstaged) {
+            throw new Error("Cannot JSON-serialise an unstaged transient Skill — the bytes are not in the JSON. " +
+                "Persist via skill.upload(client) and serialise the returned (workspace) Skill, " +
+                "or pass the unstaged Skill directly to submitRun without serialising.");
+        }
+        return this.#ref;
+    }
+}
+/** Sentinel slot id used by unstaged transient Skills. */
+const UNSTAGED_SLOT = "(unstaged)";
+function resolveUploader(client) {
+    const direct = client._uploadSkillBundle;
+    if (typeof direct === "function") {
+        return direct.bind(client);
+    }
+    const nested = client.skills?._uploadSkillBundle;
+    if (typeof nested === "function") {
+        return nested.bind(client.skills);
+    }
+    throw new Error("Skill.upload: client argument does not expose an upload entry point — " +
+        "pass the AntpathClient instance or its `client.skills`");
+}
+function consumedMessage() {
+    return ("this Skill was already uploaded via skill.upload(client); use the returned Skill or " +
+        "Skill.fromId(record.id) for subsequent runs");
 }
 //# sourceMappingURL=skill.js.map

package/dist/skill.js.map

@@ -1 +1 @@
-{"version":3,"file":"skill.js","sourceRoot":"","sources":["../src/skill.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,OAAO,KAAK;IAChB,2FAA2F;IAClF,MAAM,CAA0B;IAChC,GAAG,CAAW;IAEvB;;;;OAIG;IACH,YAAY,GAAa,EAAE,MAAoB;QAC7C,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,MAAM,CAAC,EAAU;QACtB,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,EAAE,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,GAAG,GAAsB,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;QACzD,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,QAAQ,CAAC,IAA0G;QACxH,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,GAAG,GAAqB,IAAI,CAAC,OAAO;YACxC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;YACzF,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QACrE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAED,uFAAuF;IACvF,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,WAAW,CAAC;IACvC,CAAC;IAED,sCAAsC;IACtC,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,UAAU,CAAC;IACtC,CAAC;CACF"}
+{"version":3,"file":"skill.js","sourceRoot":"","sources":["../src/skill.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAKnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAmB,MAAM,aAAa,CAAC;AACjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEpD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsDG;AACH,MAAM,OAAO,KAAK;IAChB,2FAA2F;IAClF,MAAM,CAA0B;IAEhC,IAAI,CAAW;IACf,eAAe,CAAyB;IACjD,SAAS,GAAY,KAAK,CAAC;IAE3B;;;OAGG;IACH,YAAY,GAAa,EAAE,MAAoB,EAAE,cAA2B;QAC1E,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAChB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,eAAe,GAAG,cAAc,CAAC;IACxC,CAAC;IAED;;;;;;;;;OASG;IACH,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,MAAM,CAAC,EAAU;QACtB,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,EAAE,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,IAAI,KAAK,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,QAAQ,CAAC,IAIf;QACC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,GAAG,GAAqB,IAAI,CAAC,OAAO;YACxC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;YACzF,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QACrE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAED;;;;;;;;;OASG;IACH,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAA2D;QAChF,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,KAAK,CAAC,oCAAoC,kBAAkB,CAAC,MAAM,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACvD,MAAM,GAAG,GAAsB;YAC7B,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW;SACZ,CAAC;QACF,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAChD,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAe,EAAE,IAA+B;QACpE,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAClD,OAAO,KAAK,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrD,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,MAAM,CAAC,MAAqB;QAChC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CACb,6GAA6G;gBAC3G,qEAAqE,CACxE,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;QACpF,iEAAiE;QACjE,iEAAiE;QACjE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,OAAO,IAAI,KAAK,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;IACjE,CAAC;IAED,0EAA0E;IAC1E,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,CAAC;IACxC,CAAC;IAED,sCAAsC;IACtC,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC;IACvC,CAAC;IAED,2DAA2D;IAC3D,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,CAAC;IACxC,CAAC;IAED;;;;OAIG;IACH,IAAI,UAAU;QACZ,OAAO,CACL,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW;YAC9B,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,aAAa;YAChC,CAAC,IAAI,CAAC,SAAS;YACf,IAAI,CAAC,eAAe,KAAK,SAAS,CACnC,CAAC;IACJ,CAAC;IAED,mFAAmF;IACnF,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;;;;;;;;OASG;IACH,mBAAmB;QACjB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC5D,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;YACpB,KAAK,EAAE,IAAI,CAAC,eAAe;YAC3B,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW;SACnC,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,MAAM;QACJ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CACb,qFAAqF;gBACnF,iFAAiF;gBACjF,uEAAuE,CAC1E,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;CACF;AAED,0DAA0D;AAC1D,MAAM,aAAa,GAAG,YAAY,CAAC;AAenC,SAAS,eAAe,CAAC,MAAqB;IAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,kBAAkB,CAAC;IACzC,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;QACjC,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACjD,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;QACjC,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IACD,MAAM,IAAI,KAAK,CACb,wEAAwE;QACtE,wDAAwD,CAC3D,CAAC;AACJ,CAAC;AAED,SAAS,eAAe;IACtB,OAAO,CACL,sFAAsF;QACpF,6CAA6C,CAChD,CAAC;AACJ,CAAC"}