apcore-cli 0.2.0 → 0.2.1

package/CHANGELOG.md

@@ -5,6 +5,23 @@ All notable changes to apcore-cli (TypeScript SDK) will be documented in this fi
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.2.1] - 2026-03-19
+
+### Changed
+- Help text truncation limit increased from 200 to 1000 characters (configurable via `cli.help_text_max_length` config key)
+- `extractHelp`: added `maxLength` parameter (default 1000) (`schema-parser.ts`)
+- `schemaToCliOptions`: added `maxHelpLength` parameter (default 1000) (`schema-parser.ts`)
+- `buildModuleCommand`: added `helpTextMaxLength` parameter (default 1000), threaded through to schema parser (`main.ts`)
+- `LazyModuleGroup`: constructor accepts `helpTextMaxLength` (default 1000), passes to `buildModuleCommand` (`cli.ts`)
+
+### Added
+- `cli.help_text_max_length` config key (default: 1000) in `DEFAULTS` (`config.ts`)
+- `APCORE_CLI_HELP_TEXT_MAX_LENGTH` environment variable support
+- Test: "truncates help text at 1000 chars (default)"
+- Test: "does not truncate text within default limit"
+- Test: "truncates at custom maxLength"
+- 183 tests (up from 181)
+
 ## [0.2.0] - 2026-03-18
 
 ### Added

package/README.md

@@ -8,7 +8,7 @@ Terminal adapter for apcore. Execute AI-Perceivable modules from the command lin
 
 [![License](https://img.shields.io/badge/license-Apache%202.0-blue.svg)](LICENSE)
 [![Node](https://img.shields.io/badge/node-18%2B-blue.svg)](https://nodejs.org)
-[![Tests](https://img.shields.io/badge/tests-181%20passed-brightgreen.svg)]()
+[![Tests](https://img.shields.io/badge/tests-183%20passed-brightgreen.svg)]()
 
 | | |
 |---|---|
@@ -207,6 +207,7 @@ apcore-cli uses a 4-tier configuration precedence:
 | `APCORE_LOGGING_LEVEL` | Global apcore log level (fallback when `APCORE_CLI_LOGGING_LEVEL` is unset) | `WARNING` |
 | `APCORE_AUTH_API_KEY` | API key for remote registry authentication | *(unset)* |
 | `APCORE_CLI_SANDBOX` | Set to `1` to enable subprocess sandboxing | *(unset)* |
+| `APCORE_CLI_HELP_TEXT_MAX_LENGTH` | Maximum characters for CLI option help text before truncation | `1000` |
 
 ### Config File (`apcore.yaml`)
 
@@ -217,6 +218,8 @@ logging:
   level: DEBUG
 sandbox:
   enabled: false
+cli:
+  help_text_max_length: 1000
 ```
 
 ## Features
@@ -281,7 +284,7 @@ apcore Registry + Executor (your modules, unchanged)
 git clone https://github.com/aipartnerup/apcore-cli-typescript.git
 cd apcore-cli-typescript
 pnpm install
-pnpm test                        # 181 tests
+pnpm test                        # 183 tests
 pnpm build                       # compile TypeScript
 ```
 

package/dist/bin/apcore-cli.js

@@ -4,11 +4,11 @@ var __esm = (fn, res) => function __init() {
   return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
 };
 
-// node_modules/.pnpm/tsup@8.5.1_postcss@8.5.8_typescript@5.9.3/node_modules/tsup/assets/esm_shims.js
+// node_modules/tsup/assets/esm_shims.js
 import path from "path";
 import { fileURLToPath } from "url";
 var init_esm_shims = __esm({
-  "node_modules/.pnpm/tsup@8.5.1_postcss@8.5.8_typescript@5.9.3/node_modules/tsup/assets/esm_shims.js"() {
+  "node_modules/tsup/assets/esm_shims.js"() {
     "use strict";
   }
 });

package/dist/bin/apcore-cli.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../node_modules/.pnpm/tsup@8.5.1_postcss@8.5.8_typescript@5.9.3/node_modules/tsup/assets/esm_shims.js","../../src/errors.ts","../../bin/apcore-cli.ts","../../src/main.ts","../../src/ref-resolver.ts","../../src/schema-parser.ts","../../src/approval.ts","../../src/output.ts","../../src/logger.ts"],"sourcesContent":["// Shim globals in esm bundle\nimport path from 'node:path'\nimport { fileURLToPath } from 'node:url'\n\nconst getFilename = () => fileURLToPath(import.meta.url)\nconst getDirname = () => path.dirname(getFilename())\n\nexport const __dirname = /* @__PURE__ */ getDirname()\nexport const __filename = /* @__PURE__ */ getFilename()\n","/**\n * Error classes and exit code mapping for apcore-cli.\n *\n * Protocol spec: Error handling & exit codes\n */\n\n// ---------------------------------------------------------------------------\n// Error classes\n// ---------------------------------------------------------------------------\n\n/** Thrown when the user does not approve module execution within the timeout. */\nexport class ApprovalTimeoutError extends Error {\n  constructor(message = \"Approval timed out\") {\n    super(message);\n    this.name = \"ApprovalTimeoutError\";\n  }\n}\n\n/** Thrown when API key authentication fails or is missing. */\nexport class AuthenticationError extends Error {\n  constructor(message = \"Authentication failed\") {\n    super(message);\n    this.name = \"AuthenticationError\";\n  }\n}\n\n/** Thrown when encrypted config cannot be decrypted. */\nexport class ConfigDecryptionError extends Error {\n  constructor(message = \"Config decryption failed\") {\n    super(message);\n    this.name = \"ConfigDecryptionError\";\n  }\n}\n\n/** Thrown when module execution fails. */\nexport class ModuleExecutionError extends Error {\n  constructor(message = \"Module execution failed\") {\n    super(message);\n    this.name = \"ModuleExecutionError\";\n  }\n}\n\n/** Thrown when approval is denied by the user. */\nexport class ApprovalDeniedError extends Error {\n  constructor(message = \"Approval denied\") {\n    super(message);\n    this.name = \"ApprovalDeniedError\";\n  }\n}\n\n/** Thrown when schema validation fails. */\nexport class SchemaValidationError extends Error {\n  constructor(message = \"Schema validation failed\") {\n    super(message);\n    this.name = \"SchemaValidationError\";\n  }\n}\n\n/** Thrown when a module is not found. */\nexport class ModuleNotFoundError extends Error {\n  constructor(message = \"Module not found\") {\n    super(message);\n    this.name = \"ModuleNotFoundError\";\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Exit code map\n// ---------------------------------------------------------------------------\n\nexport const EXIT_CODES = {\n  SUCCESS: 0,\n  MODULE_EXECUTE_ERROR: 1,\n  MODULE_TIMEOUT: 1,\n  INVALID_CLI_INPUT: 2,\n  MODULE_NOT_FOUND: 44,\n  MODULE_LOAD_ERROR: 44,\n  MODULE_DISABLED: 44,\n  SCHEMA_VALIDATION_ERROR: 45,\n  APPROVAL_DENIED: 46,\n  APPROVAL_TIMEOUT: 46,\n  CONFIG_NOT_FOUND: 47,\n  CONFIG_INVALID: 47,\n  SCHEMA_CIRCULAR_REF: 48,\n  ACL_DENIED: 77,\n  KEYBOARD_INTERRUPT: 130,\n} as const;\n\nexport type ExitCode = (typeof EXIT_CODES)[keyof typeof EXIT_CODES];\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/**\n * Map a caught error to the appropriate process exit code.\n * Also checks for apcore error codes on the error object.\n */\nexport function exitCodeForError(error: unknown): ExitCode {\n  if (error instanceof ApprovalTimeoutError) {\n    return EXIT_CODES.APPROVAL_TIMEOUT;\n  }\n  if (error instanceof ApprovalDeniedError) {\n    return EXIT_CODES.APPROVAL_DENIED;\n  }\n  if (error instanceof AuthenticationError) {\n    return EXIT_CODES.ACL_DENIED;\n  }\n  if (error instanceof ConfigDecryptionError) {\n    return EXIT_CODES.CONFIG_INVALID;\n  }\n  if (error instanceof SchemaValidationError) {\n    return EXIT_CODES.SCHEMA_VALIDATION_ERROR;\n  }\n  if (error instanceof ModuleNotFoundError) {\n    return EXIT_CODES.MODULE_NOT_FOUND;\n  }\n  if (error instanceof ModuleExecutionError) {\n    return EXIT_CODES.MODULE_EXECUTE_ERROR;\n  }\n\n  // Check for apcore error codes on the error object\n  if (error instanceof Error) {\n    const code = (error as unknown as Record<string, unknown>).code as string | undefined;\n    const codeMap: Record<string, ExitCode> = {\n      MODULE_NOT_FOUND: EXIT_CODES.MODULE_NOT_FOUND,\n      MODULE_LOAD_ERROR: EXIT_CODES.MODULE_LOAD_ERROR,\n      MODULE_DISABLED: EXIT_CODES.MODULE_DISABLED,\n      SCHEMA_VALIDATION_ERROR: EXIT_CODES.SCHEMA_VALIDATION_ERROR,\n      SCHEMA_CIRCULAR_REF: EXIT_CODES.SCHEMA_CIRCULAR_REF,\n      APPROVAL_DENIED: EXIT_CODES.APPROVAL_DENIED,\n      APPROVAL_TIMEOUT: EXIT_CODES.APPROVAL_TIMEOUT,\n      CONFIG_NOT_FOUND: EXIT_CODES.CONFIG_NOT_FOUND,\n      CONFIG_INVALID: EXIT_CODES.CONFIG_INVALID,\n      MODULE_EXECUTE_ERROR: EXIT_CODES.MODULE_EXECUTE_ERROR,\n      MODULE_TIMEOUT: EXIT_CODES.MODULE_TIMEOUT,\n      ACL_DENIED: EXIT_CODES.ACL_DENIED,\n    };\n    if (code && code in codeMap) {\n      return codeMap[code];\n    }\n  }\n\n  return EXIT_CODES.MODULE_EXECUTE_ERROR;\n}\n","#!/usr/bin/env node\n/**\n * apcore-cli — Shebang entry point.\n *\n * This file is the bin target. It bootstraps the CLI and delegates to main().\n */\n\nimport { main } from \"../src/main.js\";\n\nmain(\"apcore-cli\");\n","/**\n * CLI entry point — createCli / main equivalents.\n *\n * Protocol spec: CLI bootstrapping & command registration\n */\n\nimport { readFileSync } from \"node:fs\";\nimport { fileURLToPath } from \"node:url\";\nimport * as path from \"node:path\";\nimport { Command, CommanderError } from \"commander\";\nimport { EXIT_CODES, exitCodeForError } from \"./errors.js\";\nimport { resolveRefs } from \"./ref-resolver.js\";\nimport { schemaToCliOptions } from \"./schema-parser.js\";\nimport { checkApproval } from \"./approval.js\";\nimport { formatExecResult } from \"./output.js\";\nimport { setLogLevel } from \"./logger.js\";\nimport type { Executor, ModuleDescriptor } from \"./cli.js\";\n\nconst __dirname = path.dirname(fileURLToPath(import.meta.url));\nconst pkg = JSON.parse(readFileSync(path.resolve(__dirname, \"../package.json\"), \"utf-8\"));\nconst VERSION: string = pkg.version;\n\n// ---------------------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------------------\n\n/** Configuration for a single Commander option derived from a JSON Schema property. */\nexport interface OptionConfig {\n  /** The property name from the schema. */\n  name: string;\n  /** Commander flags string (e.g. \"--my-flag <value>\" or \"--flag, --no-flag\"). */\n  flags: string;\n  /** Help text for the option. */\n  description: string;\n  /** Default value. */\n  defaultValue?: unknown;\n  /** Whether the field is required (for display only). */\n  required: boolean;\n  /** Enum choices (string values). */\n  choices?: string[];\n  /** Whether this is a boolean flag pair (--flag/--no-flag). */\n  isBooleanFlag?: boolean;\n  /** Maps string enum value → original type name (\"int\", \"float\", \"bool\"). */\n  enumOriginalTypes?: Record<string, string>;\n  /** Parser function for Commander (e.g. parseInt, parseFloat). */\n  parseArg?: (value: string) => unknown;\n}\n\n// ---------------------------------------------------------------------------\n// createCli\n// ---------------------------------------------------------------------------\n\n/**\n * Build and return the top-level Commander program.\n *\n * @param extensionsDir  Path to the extensions directory (default: ./extensions)\n * @param progName       Program name shown in help (default: apcore-cli)\n */\nexport function createCli(\n  extensionsDir?: string,\n  progName?: string,\n): Command {\n  // Resolve program name\n  const resolvedProgName = progName ?? path.basename(process.argv[1] ?? \"apcore-cli\") ?? \"apcore-cli\";\n\n  // Resolve log level\n  const cliLogLevel = process.env.APCORE_CLI_LOGGING_LEVEL ?? process.env.APCORE_LOGGING_LEVEL ?? \"WARNING\";\n  setLogLevel(cliLogLevel);\n\n  const program = new Command(resolvedProgName)\n    .exitOverride()\n    .version(VERSION, \"--version\", `Show ${resolvedProgName} version`)\n    .description(\"apcore CLI — execute apcore modules from the command line\")\n    .option(\"--extensions-dir <path>\", \"Path to extensions directory\")\n    .option(\"--log-level <level>\", \"Logging level (DEBUG|INFO|WARNING|ERROR)\", \"WARNING\");\n\n  // NOTE: Full registry/executor wiring requires apcore-js to be available.\n  // For now, extensions-dir is accepted but not wired to a real registry.\n  void extensionsDir;\n\n  return program;\n}\n\n// ---------------------------------------------------------------------------\n// main\n// ---------------------------------------------------------------------------\n\n/**\n * Parse argv and run the CLI. Handles top-level error catching and exit codes.\n */\nexport function main(progName?: string): void {\n  const program = createCli(undefined, progName);\n\n  try {\n    program.parse(process.argv);\n  } catch (error: unknown) {\n    if (error instanceof CommanderError) {\n      // Commander already printed the error message\n      process.exit(error.exitCode);\n    }\n    const code = exitCodeForError(error);\n    if (error instanceof Error) {\n      process.stderr.write(`Error: ${error.message}\\n`);\n    }\n    process.exit(code);\n  }\n}\n\n// ---------------------------------------------------------------------------\n// buildModuleCommand\n// ---------------------------------------------------------------------------\n\n/**\n * Build a Commander Command for a single apcore module.\n */\nexport function buildModuleCommand(\n  moduleDef: ModuleDescriptor,\n  executor: Executor,\n): Command {\n  const moduleId = moduleDef.id;\n  let resolvedSchema: Record<string, unknown> = {};\n  let schemaOptions: OptionConfig[] = [];\n\n  // Resolve schema\n  const inputSchema = moduleDef.inputSchema;\n  if (inputSchema && typeof inputSchema === \"object\" && inputSchema.properties) {\n    try {\n      resolvedSchema = resolveRefs(inputSchema, 32, moduleId);\n    } catch {\n      resolvedSchema = inputSchema;\n    }\n    schemaOptions = schemaToCliOptions(resolvedSchema);\n  }\n\n  const cmd = new Command(moduleId).description(moduleDef.description);\n\n  // Built-in options\n  cmd.option(\"--input <source>\", \"Read input from STDIN ('-')\");\n  cmd.option(\"-y, --yes\", \"Bypass approval prompts\", false);\n  cmd.option(\"--large-input\", \"Allow STDIN input larger than 10MB\", false);\n  cmd.option(\"--format <format>\", \"Output format (json|table)\");\n  cmd.option(\"--sandbox\", \"Run module in subprocess sandbox\", false);\n\n  // Schema-generated options\n  for (const opt of schemaOptions) {\n    if (opt.parseArg) {\n      cmd.option(opt.flags, opt.description, opt.parseArg, opt.defaultValue);\n    } else {\n      cmd.option(opt.flags, opt.description, opt.defaultValue as string | boolean | undefined);\n    }\n  }\n\n  // Action callback\n  cmd.action(async (options: Record<string, unknown>) => {\n    // Pop built-in options\n    const stdinFlag = options.input as string | undefined;\n    const autoApprove = options.yes as boolean;\n    const largeInput = options.largeInput as boolean;\n    const outputFormat = options.format as string | undefined;\n    const sandboxEnabled = options.sandbox as boolean;\n\n    // Remove built-in keys from options to get schema kwargs\n    const schemaKwargs: Record<string, unknown> = {};\n    const builtinKeys = new Set([\"input\", \"yes\", \"largeInput\", \"format\", \"sandbox\"]);\n    for (const [k, v] of Object.entries(options)) {\n      if (!builtinKeys.has(k)) {\n        schemaKwargs[k] = v;\n      }\n    }\n\n    try {\n      // Collect and merge input\n      const merged = await collectInput(stdinFlag, schemaKwargs, largeInput);\n\n      // Reconvert enum values\n      const reconverted = reconvertEnumValues(merged, schemaOptions);\n\n      // Check approval\n      await checkApproval(moduleDef, autoApprove);\n\n      // Execute with timing\n      const { Sandbox } = await import(\"./security/index.js\");\n      const sandbox = new Sandbox(sandboxEnabled);\n      const startTime = performance.now();\n      const result = await sandbox.execute(moduleId, reconverted, executor);\n      const durationMs = Math.round(performance.now() - startTime);\n\n      // Audit log (success)\n      const { getAuditLogger } = await import(\"./security/audit.js\");\n      const auditLogger = getAuditLogger();\n      if (auditLogger) {\n        auditLogger.logExecution(moduleId, reconverted, \"success\", 0, durationMs);\n      }\n\n      // Format output\n      formatExecResult(result, outputFormat);\n    } catch (err: unknown) {\n      // Audit log (error)\n      const { getAuditLogger } = await import(\"./security/audit.js\");\n      const auditLogger = getAuditLogger();\n      const code = exitCodeForError(err);\n      if (auditLogger) {\n        auditLogger.logExecution(moduleId, {}, \"error\", code, 0);\n      }\n\n      if (err instanceof Error) {\n        process.stderr.write(`Error: ${err.message}\\n`);\n      }\n      process.exit(code);\n    }\n  });\n\n  return cmd;\n}\n\n// ---------------------------------------------------------------------------\n// validateModuleId\n// ---------------------------------------------------------------------------\n\n/**\n * Validate that a module ID conforms to the expected format.\n * Pattern: [a-z][a-z0-9_]*(.[a-z][a-z0-9_])* — max 128 chars.\n */\nexport function validateModuleId(moduleId: string): void {\n  if (moduleId.length > 128) {\n    process.stderr.write(\n      `Error: Invalid module ID format: '${moduleId}'. Maximum length is 128 characters.\\n`,\n    );\n    process.exit(EXIT_CODES.INVALID_CLI_INPUT);\n  }\n  if (!/^[a-z][a-z0-9_]*(\\.[a-z][a-z0-9_]*)*$/.test(moduleId)) {\n    process.stderr.write(\n      `Error: Invalid module ID format: '${moduleId}'.\\n`,\n    );\n    process.exit(EXIT_CODES.INVALID_CLI_INPUT);\n  }\n}\n\n// ---------------------------------------------------------------------------\n// collectInput\n// ---------------------------------------------------------------------------\n\n/**\n * Collect module input from stdin and/or CLI keyword arguments.\n */\nexport async function collectInput(\n  stdinFlag?: string,\n  cliKwargs: Record<string, unknown> = {},\n  largeInput?: boolean,\n): Promise<Record<string, unknown>> {\n  // Remove null/undefined values from CLI kwargs\n  const cliKwargsNonNull: Record<string, unknown> = {};\n  for (const [k, v] of Object.entries(cliKwargs)) {\n    if (v !== null && v !== undefined) {\n      cliKwargsNonNull[k] = v;\n    }\n  }\n\n  if (!stdinFlag) {\n    return cliKwargsNonNull;\n  }\n\n  if (stdinFlag === \"-\") {\n    const raw = await readStdin();\n    const rawSize = Buffer.byteLength(raw, \"utf-8\");\n\n    if (rawSize > 10_485_760 && !largeInput) {\n      process.stderr.write(\n        \"Error: STDIN input exceeds 10MB limit. Use --large-input to override.\\n\",\n      );\n      process.exit(EXIT_CODES.INVALID_CLI_INPUT);\n    }\n\n    if (!raw) {\n      return cliKwargsNonNull;\n    }\n\n    let stdinData: unknown;\n    try {\n      stdinData = JSON.parse(raw);\n    } catch {\n      process.stderr.write(\n        \"Error: STDIN does not contain valid JSON.\\n\",\n      );\n      process.exit(EXIT_CODES.INVALID_CLI_INPUT);\n    }\n\n    if (typeof stdinData !== \"object\" || stdinData === null || Array.isArray(stdinData)) {\n      process.stderr.write(\n        `Error: STDIN JSON must be an object, got ${Array.isArray(stdinData) ? \"array\" : typeof stdinData}.\\n`,\n      );\n      process.exit(EXIT_CODES.INVALID_CLI_INPUT);\n    }\n\n    // CLI flags override STDIN for duplicate keys\n    return { ...(stdinData as Record<string, unknown>), ...cliKwargsNonNull };\n  }\n\n  return cliKwargsNonNull;\n}\n\n/**\n * Read all data from stdin with proper cleanup.\n */\nfunction readStdin(): Promise<string> {\n  return new Promise((resolve, reject) => {\n    const chunks: Buffer[] = [];\n    const onData = (chunk: Buffer) => chunks.push(chunk);\n    const onEnd = () => {\n      cleanup();\n      resolve(Buffer.concat(chunks).toString(\"utf-8\"));\n    };\n    const onError = (err: Error) => {\n      cleanup();\n      reject(err);\n    };\n    const cleanup = () => {\n      process.stdin.removeListener(\"data\", onData);\n      process.stdin.removeListener(\"end\", onEnd);\n      process.stdin.removeListener(\"error\", onError);\n    };\n    process.stdin.on(\"data\", onData);\n    process.stdin.on(\"end\", onEnd);\n    process.stdin.on(\"error\", onError);\n    process.stdin.resume();\n  });\n}\n\n// ---------------------------------------------------------------------------\n// reconvertEnumValues\n// ---------------------------------------------------------------------------\n\n/**\n * Re-convert CLI string values back to their schema-typed equivalents\n * based on the option configs.\n */\nexport function reconvertEnumValues(\n  kwargs: Record<string, unknown>,\n  options: OptionConfig[],\n): Record<string, unknown> {\n  const result = { ...kwargs };\n  for (const opt of options) {\n    if (!opt.enumOriginalTypes) continue;\n    const paramName = opt.name;\n    if (!(paramName in result) || result[paramName] === null || result[paramName] === undefined) {\n      continue;\n    }\n    const strVal = String(result[paramName]);\n    const origType = opt.enumOriginalTypes[strVal];\n    if (origType === \"int\") {\n      result[paramName] = parseInt(strVal, 10);\n    } else if (origType === \"float\") {\n      result[paramName] = parseFloat(strVal);\n    } else if (origType === \"bool\") {\n      result[paramName] = strVal.toLowerCase() === \"true\";\n    }\n  }\n  return result;\n}\n","/**\n * JSON Schema $ref resolver.\n *\n * Protocol spec: Schema resolution & $ref handling\n */\n\nimport { EXIT_CODES } from \"./errors.js\";\n\n// ---------------------------------------------------------------------------\n// resolveRefs\n// ---------------------------------------------------------------------------\n\n/**\n * Resolve all $ref references in a JSON Schema.\n * Returns a fully inlined schema with $defs/definitions removed.\n */\nexport function resolveRefs(\n  schema: Record<string, unknown>,\n  maxDepth = 32,\n  moduleId = \"\",\n): Record<string, unknown> {\n  const cloned = structuredClone(schema);\n  const defs = (cloned.$defs ?? cloned.definitions ?? {}) as Record<\n    string,\n    unknown\n  >;\n  const result = resolveNode(\n    cloned,\n    defs,\n    new Set<string>(),\n    0,\n    maxDepth,\n    moduleId,\n  ) as Record<string, unknown>;\n\n  // Remove definition keys\n  delete result.$defs;\n  delete result.definitions;\n  return result;\n}\n\nfunction resolveNode(\n  node: unknown,\n  defs: Record<string, unknown>,\n  visited: Set<string>,\n  depth: number,\n  maxDepth: number,\n  moduleId: string,\n): unknown {\n  if (typeof node !== \"object\" || node === null || Array.isArray(node)) {\n    return node;\n  }\n\n  const obj = node as Record<string, unknown>;\n\n  // Handle $ref\n  if (\"$ref\" in obj) {\n    const refPath = obj.$ref as string;\n\n    if (depth >= maxDepth) {\n      process.stderr.write(\n        `Error: $ref resolution depth exceeded maximum of ${maxDepth} for module '${moduleId}'.\\n`,\n      );\n      process.exit(EXIT_CODES.SCHEMA_CIRCULAR_REF);\n    }\n\n    if (visited.has(refPath)) {\n      process.stderr.write(\n        `Error: Circular $ref detected in schema for module '${moduleId}' at path '${refPath}'.\\n`,\n      );\n      process.exit(EXIT_CODES.SCHEMA_CIRCULAR_REF);\n    }\n\n    // Parse ref target: extract key from \"#/$defs/Address\" → \"Address\"\n    const parts = refPath.split(\"/\");\n    const key = parts[parts.length - 1];\n\n    if (!(key in defs)) {\n      process.stderr.write(\n        `Error: Unresolvable $ref '${refPath}' in schema for module '${moduleId}'.\\n`,\n      );\n      process.exit(EXIT_CODES.SCHEMA_VALIDATION_ERROR);\n    }\n\n    const newVisited = new Set(visited);\n    newVisited.add(refPath);\n    return resolveNode(defs[key], defs, newVisited, depth + 1, maxDepth, moduleId);\n  }\n\n  // Handle allOf\n  if (\"allOf\" in obj && Array.isArray(obj.allOf)) {\n    const merged: Record<string, unknown> = {\n      properties: {},\n      required: [] as string[],\n    };\n    for (const subSchema of obj.allOf as unknown[]) {\n      const resolved = resolveNode(\n        subSchema,\n        defs,\n        visited,\n        depth + 1,\n        maxDepth,\n        moduleId,\n      ) as Record<string, unknown>;\n      if (resolved.properties) {\n        Object.assign(\n          merged.properties as Record<string, unknown>,\n          resolved.properties,\n        );\n      }\n      if (Array.isArray(resolved.required)) {\n        (merged.required as string[]).push(...resolved.required);\n      }\n    }\n    // Deduplicate required\n    merged.required = [...new Set(merged.required as string[])];\n    // Copy non-composition keys\n    for (const [k, v] of Object.entries(obj)) {\n      if (k !== \"allOf\" && !(k in merged)) {\n        merged[k] = v;\n      }\n    }\n    return merged;\n  }\n\n  // Handle anyOf / oneOf\n  for (const keyword of [\"anyOf\", \"oneOf\"]) {\n    if (keyword in obj && Array.isArray(obj[keyword])) {\n      const merged: Record<string, unknown> = {\n        properties: {},\n        required: [] as string[],\n      };\n      const allRequiredSets: Set<string>[] = [];\n      for (const subSchema of obj[keyword] as unknown[]) {\n        const resolved = resolveNode(\n          subSchema,\n          defs,\n          visited,\n          depth + 1,\n          maxDepth,\n          moduleId,\n        ) as Record<string, unknown>;\n        if (resolved.properties) {\n          Object.assign(\n            merged.properties as Record<string, unknown>,\n            resolved.properties,\n          );\n        }\n        if (Array.isArray(resolved.required)) {\n          allRequiredSets.push(new Set(resolved.required as string[]));\n        }\n      }\n      // Required = intersection of all branches\n      if (allRequiredSets.length > 0) {\n        let intersection = allRequiredSets[0];\n        for (let i = 1; i < allRequiredSets.length; i++) {\n          intersection = new Set(\n            [...intersection].filter((x) => allRequiredSets[i].has(x)),\n          );\n        }\n        merged.required = [...intersection];\n      } else {\n        merged.required = [];\n      }\n      // Copy non-composition keys\n      for (const [k, v] of Object.entries(obj)) {\n        if (k !== keyword && !(k in merged)) {\n          merged[k] = v;\n        }\n      }\n      return merged;\n    }\n  }\n\n  // Recursively process nested properties\n  if (\"properties\" in obj && typeof obj.properties === \"object\" && obj.properties !== null) {\n    const props = obj.properties as Record<string, unknown>;\n    for (const [propName, propSchema] of Object.entries(props)) {\n      props[propName] = resolveNode(\n        propSchema,\n        defs,\n        visited,\n        depth + 1,\n        maxDepth,\n        moduleId,\n      );\n    }\n  }\n\n  return obj;\n}\n","/**\n * JSON Schema -> Commander options mapping.\n *\n * Protocol spec: Schema-driven argument parsing\n */\n\nimport type { OptionConfig } from \"./main.js\";\nimport { EXIT_CODES } from \"./errors.js\";\n\n// ---------------------------------------------------------------------------\n// Internal helpers\n// ---------------------------------------------------------------------------\n\n/** Sentinel type marker for boolean flags. */\nconst BOOLEAN_FLAG = Symbol(\"BOOLEAN_FLAG\");\n\ntype TypeResult = \"string\" | \"int\" | \"float\" | typeof BOOLEAN_FLAG | \"file\";\n\n/**\n * Map JSON Schema type to a type identifier.\n */\nexport function mapType(propName: string, propSchema: Record<string, unknown>): TypeResult {\n  const schemaType = propSchema.type as string | undefined;\n\n  // Check file convention\n  if (\n    schemaType === \"string\" &&\n    (propName.endsWith(\"_file\") || propSchema[\"x-cli-file\"] === true)\n  ) {\n    return \"file\";\n  }\n\n  const typeMap: Record<string, TypeResult> = {\n    string: \"string\",\n    integer: \"int\",\n    number: \"float\",\n    boolean: BOOLEAN_FLAG,\n    object: \"string\",\n    array: \"string\",\n  };\n\n  if (!schemaType) {\n    return \"string\";\n  }\n\n  return typeMap[schemaType] ?? \"string\";\n}\n\n/**\n * Extract help text from schema property, preferring x-llm-description.\n */\nexport function extractHelp(propSchema: Record<string, unknown>): string | undefined {\n  let text = propSchema[\"x-llm-description\"] as string | undefined;\n  if (!text) {\n    text = propSchema.description as string | undefined;\n  }\n  if (!text) {\n    return undefined;\n  }\n  if (text.length > 200) {\n    return text.slice(0, 197) + \"...\";\n  }\n  return text;\n}\n\n// ---------------------------------------------------------------------------\n// schemaToCliOptions\n// ---------------------------------------------------------------------------\n\n/** Reserved CLI option names that cannot be used by schema properties. */\nconst RESERVED_NAMES = new Set([\"input\", \"yes\", \"large_input\", \"format\", \"sandbox\"]);\n\n/**\n * Convert a JSON Schema `properties` object into an array of\n * Commander option configurations.\n */\nexport function schemaToCliOptions(\n  schema: Record<string, unknown>,\n): OptionConfig[] {\n  const properties = (schema.properties ?? {}) as Record<\n    string,\n    Record<string, unknown>\n  >;\n  const requiredList = (schema.required ?? []) as string[];\n  const options: OptionConfig[] = [];\n  const flagNames: Record<string, string> = {};\n\n  for (const [propName, propSchema] of Object.entries(properties)) {\n    const flagName = \"--\" + propName.replace(/_/g, \"-\");\n\n    // Collision detection\n    if (flagName in flagNames) {\n      process.stderr.write(\n        `Error: Flag name collision: properties '${propName}' and '${flagNames[flagName]}' both map to '${flagName}'.\\n`,\n      );\n      process.exit(EXIT_CODES.INVALID_CLI_INPUT);\n    }\n    flagNames[flagName] = propName;\n\n    // Reserved name check\n    if (RESERVED_NAMES.has(propName)) {\n      process.stderr.write(\n        `Error: Module schema property '${propName}' conflicts with a reserved CLI option name. Rename the property.\\n`,\n      );\n      process.exit(EXIT_CODES.INVALID_CLI_INPUT);\n    }\n\n    const typeResult = mapType(propName, propSchema);\n    const isRequired = requiredList.includes(propName);\n    const helpBase = extractHelp(propSchema);\n    const helpText = isRequired\n      ? (helpBase ? helpBase + \" \" : \"\") + \"[required]\"\n      : helpBase ?? \"\";\n    const defaultValue = propSchema.default as unknown;\n\n    if (typeResult === BOOLEAN_FLAG) {\n      // Boolean flag pair: --flag/--no-flag\n      const flagBase = propName.replace(/_/g, \"-\");\n      const defaultVal = (propSchema.default as boolean) ?? false;\n      options.push({\n        name: propName,\n        flags: `--${flagBase}, --no-${flagBase}`,\n        description: helpText,\n        defaultValue: defaultVal,\n        required: false,\n        isBooleanFlag: true,\n      });\n    } else if (\"enum\" in propSchema && Array.isArray(propSchema.enum)) {\n      const enumValues = propSchema.enum as unknown[];\n      if (enumValues.length === 0) {\n        // Empty enum — fall back to plain string option\n        options.push({\n          name: propName,\n          flags: `${flagName} <value>`,\n          description: helpText,\n          defaultValue,\n          required: false,\n        });\n      } else {\n        const stringValues = enumValues.map(String);\n        const enumOriginalTypes: Record<string, string> = {};\n        for (const v of enumValues) {\n          if (typeof v === \"number\" && Number.isInteger(v)) {\n            enumOriginalTypes[String(v)] = \"int\";\n          } else if (typeof v === \"number\") {\n            enumOriginalTypes[String(v)] = \"float\";\n          } else if (typeof v === \"boolean\") {\n            enumOriginalTypes[String(v)] = \"bool\";\n          }\n        }\n        options.push({\n          name: propName,\n          flags: `${flagName} <value>`,\n          description: helpText,\n          defaultValue:\n            defaultValue !== undefined ? String(defaultValue) : undefined,\n          required: false,\n          choices: stringValues,\n          enumOriginalTypes:\n            Object.keys(enumOriginalTypes).length > 0\n              ? enumOriginalTypes\n              : undefined,\n        });\n      }\n    } else {\n      // Standard option\n      let parseArg: ((value: string) => unknown) | undefined;\n      if (typeResult === \"int\") {\n        parseArg = (v: string) => {\n          const n = parseInt(v, 10);\n          if (isNaN(n)) throw new Error(`Invalid integer: ${v}`);\n          return n;\n        };\n      } else if (typeResult === \"float\") {\n        parseArg = (v: string) => {\n          const n = parseFloat(v);\n          if (isNaN(n)) throw new Error(`Invalid number: ${v}`);\n          return n;\n        };\n      }\n      options.push({\n        name: propName,\n        flags: `${flagName} <value>`,\n        description: helpText,\n        defaultValue,\n        required: false,\n        parseArg,\n      });\n    }\n  }\n\n  return options;\n}\n","/**\n * Interactive approval prompts with timeout.\n *\n * Protocol spec: Approval workflow\n */\n\nimport * as readline from \"node:readline\";\nimport type { ModuleDescriptor } from \"./cli.js\";\nimport { ApprovalTimeoutError, EXIT_CODES } from \"./errors.js\";\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/**\n * Get an annotation value from either a dict or an object.\n */\nfunction getAnnotation(\n  annotations: unknown,\n  key: string,\n  defaultValue: unknown = undefined,\n): unknown {\n  if (!annotations || typeof annotations !== \"object\") return defaultValue;\n  const ann = annotations as Record<string, unknown>;\n  return key in ann ? ann[key] : defaultValue;\n}\n\n// ---------------------------------------------------------------------------\n// checkApproval\n// ---------------------------------------------------------------------------\n\n/**\n * Check if module requires approval and handle accordingly.\n * Returns normally if approved (or approval not required).\n * Calls process.exit(46) if denied/timed out/non-TTY.\n */\nexport async function checkApproval(\n  moduleDef: ModuleDescriptor,\n  autoApprove: boolean,\n): Promise<void> {\n  const annotations = moduleDef.annotations;\n\n  // Check if approval is required\n  let requiresApproval: boolean;\n  if (moduleDef.requiresApproval !== undefined) {\n    requiresApproval = moduleDef.requiresApproval;\n  } else if (annotations) {\n    requiresApproval = getAnnotation(annotations, \"requires_approval\", false) === true;\n  } else {\n    return; // No annotations, no approval needed\n  }\n\n  if (!requiresApproval) {\n    return;\n  }\n\n  const moduleId = moduleDef.id;\n\n  // Bypass: autoApprove flag (highest priority)\n  if (autoApprove) {\n    return;\n  }\n\n  // Bypass: APCORE_CLI_AUTO_APPROVE env var\n  const envVal = process.env.APCORE_CLI_AUTO_APPROVE ?? \"\";\n  if (envVal === \"1\") {\n    return;\n  }\n  if (envVal !== \"\" && envVal !== \"1\") {\n    process.stderr.write(\n      `Warning: APCORE_CLI_AUTO_APPROVE is set to '${envVal}', expected '1'. Ignoring.\\n`,\n    );\n  }\n\n  // Non-TTY check\n  if (!process.stdin.isTTY) {\n    process.stderr.write(\n      `Error: Module '${moduleId}' requires approval but no interactive ` +\n        \"terminal is available. Use --yes or set APCORE_CLI_AUTO_APPROVE=1 \" +\n        \"to bypass.\\n\",\n    );\n    process.exit(EXIT_CODES.APPROVAL_DENIED);\n  }\n\n  // TTY prompt\n  await promptWithTimeout(moduleDef, 60);\n}\n\n/**\n * Display approval prompt with timeout.\n */\nasync function promptWithTimeout(\n  moduleDef: ModuleDescriptor,\n  timeout: number,\n): Promise<void> {\n  // Clamp timeout\n  timeout = Math.max(1, Math.min(timeout, 3600));\n\n  const moduleId = moduleDef.id;\n  const annotations = moduleDef.annotations;\n  const message =\n    (annotations\n      ? (getAnnotation(annotations, \"approval_message\") as string | undefined)\n      : undefined) ??\n    `Module '${moduleId}' requires approval to execute.`;\n\n  process.stderr.write(message + \"\\n\");\n\n  const rl = readline.createInterface({\n    input: process.stdin,\n    output: process.stderr,\n  });\n\n  let timer: ReturnType<typeof setTimeout> | undefined;\n\n  try {\n    const answer = await Promise.race([\n      new Promise<string>((resolve) => {\n        rl.question(\"Proceed? [y/N] \", (ans) => resolve(ans));\n      }),\n      new Promise<never>((_, reject) => {\n        timer = setTimeout(() => {\n          reject(new ApprovalTimeoutError(\n            `Approval prompt timed out after ${timeout} seconds.`,\n          ));\n        }, timeout * 1000);\n      }),\n    ]);\n\n    // Clear the timeout — prompt resolved before timeout fired\n    if (timer) clearTimeout(timer);\n\n    const normalized = answer.trim().toLowerCase();\n    if (normalized === \"y\" || normalized === \"yes\") {\n      return;\n    }\n\n    process.stderr.write(\"Error: Approval denied.\\n\");\n    process.exit(EXIT_CODES.APPROVAL_DENIED);\n  } catch (err) {\n    if (timer) clearTimeout(timer);\n    if (err instanceof ApprovalTimeoutError) {\n      process.stderr.write(\n        `Error: Approval prompt timed out after ${timeout} seconds.\\n`,\n      );\n      process.exit(EXIT_CODES.APPROVAL_TIMEOUT);\n    }\n    throw err;\n  } finally {\n    rl.close();\n  }\n}\n","/**\n * TTY-adaptive output formatting (table/json).\n *\n * Protocol spec: Output formatting\n */\n\nimport type { ModuleDescriptor } from \"./cli.js\";\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/**\n * Resolve output format with TTY-adaptive default.\n */\nexport function resolveFormat(explicitFormat?: string): string {\n  if (explicitFormat !== undefined) {\n    return explicitFormat;\n  }\n  return process.stdout.isTTY ? \"table\" : \"json\";\n}\n\n/**\n * Truncate text to maxLength, appending '...' if needed.\n */\nexport function truncate(text: string, maxLength = 80): string {\n  if (text.length <= maxLength) {\n    return text;\n  }\n  return text.slice(0, maxLength - 3) + \"...\";\n}\n\n/**\n * Render a simple plain-text table with column headers.\n */\nfunction formatTable(\n  headers: string[],\n  rows: string[][],\n): string {\n  // Calculate column widths\n  const colWidths = headers.map((h, i) =>\n    Math.max(h.length, ...rows.map((r) => (r[i] ?? \"\").length)),\n  );\n\n  const sep = colWidths.map((w) => \"-\".repeat(w)).join(\"  \");\n  const headerLine = headers\n    .map((h, i) => h.padEnd(colWidths[i]))\n    .join(\"  \");\n  const dataLines = rows.map((row) =>\n    row.map((cell, i) => (cell ?? \"\").padEnd(colWidths[i])).join(\"  \"),\n  );\n\n  return [headerLine, sep, ...dataLines].join(\"\\n\") + \"\\n\";\n}\n\n// ---------------------------------------------------------------------------\n// formatModuleList\n// ---------------------------------------------------------------------------\n\n/**\n * Format and print a list of modules.\n */\nexport function formatModuleList(\n  modules: ModuleDescriptor[],\n  format: string,\n  filterTags?: string[],\n): void {\n  if (format === \"table\") {\n    if (modules.length === 0 && filterTags && filterTags.length > 0) {\n      process.stdout.write(\n        `No modules found matching tags: ${filterTags.join(\", \")}.\\n`,\n      );\n      return;\n    }\n    if (modules.length === 0) {\n      process.stdout.write(\"No modules found.\\n\");\n      return;\n    }\n\n    const headers = [\"ID\", \"Description\", \"Tags\"];\n    const rows = modules.map((m) => [\n      m.id,\n      truncate(m.description, 80),\n      (m.tags ?? []).join(\", \"),\n    ]);\n    process.stdout.write(formatTable(headers, rows));\n  } else if (format === \"json\") {\n    const result = modules.map((m) => ({\n      id: m.id,\n      description: m.description,\n      tags: m.tags ?? [],\n    }));\n    process.stdout.write(JSON.stringify(result, null, 2) + \"\\n\");\n  }\n}\n\n// ---------------------------------------------------------------------------\n// formatModuleDetail\n// ---------------------------------------------------------------------------\n\n/**\n * Convert annotations to a plain dict, filtering out falsy/default values.\n */\nfunction annotationsToDict(\n  annotations: unknown,\n): Record<string, unknown> | null {\n  if (!annotations) return null;\n  if (typeof annotations !== \"object\" || Array.isArray(annotations)) return null;\n  const result: Record<string, unknown> = {};\n  for (const [k, v] of Object.entries(annotations as Record<string, unknown>)) {\n    if (v !== null && v !== undefined && v !== false && v !== 0 && !(Array.isArray(v) && v.length === 0)) {\n      result[k] = v;\n    }\n  }\n  return Object.keys(result).length > 0 ? result : null;\n}\n\n/**\n * Format and print full module metadata.\n */\nexport function formatModuleDetail(\n  moduleDef: ModuleDescriptor,\n  format: string,\n): void {\n  if (format === \"table\") {\n    process.stdout.write(`\\nModule: ${moduleDef.id}\\n`);\n    process.stdout.write(`\\nDescription:\\n  ${moduleDef.description}\\n`);\n\n    if (moduleDef.inputSchema && Object.keys(moduleDef.inputSchema).length > 0) {\n      process.stdout.write(\"\\nInput Schema:\\n\");\n      process.stdout.write(JSON.stringify(moduleDef.inputSchema, null, 2) + \"\\n\");\n    }\n\n    if (moduleDef.outputSchema && Object.keys(moduleDef.outputSchema).length > 0) {\n      process.stdout.write(\"\\nOutput Schema:\\n\");\n      process.stdout.write(JSON.stringify(moduleDef.outputSchema, null, 2) + \"\\n\");\n    }\n\n    const annDict = annotationsToDict(\n      moduleDef.annotations,\n    );\n    if (annDict) {\n      process.stdout.write(\"\\nAnnotations:\\n\");\n      for (const [k, v] of Object.entries(annDict)) {\n        process.stdout.write(`  ${k}: ${v}\\n`);\n      }\n    }\n\n    // Extension metadata (x- prefixed)\n    const metadata = moduleDef.metadata;\n    if (metadata) {\n      const xFields: Record<string, unknown> = {};\n      for (const [k, v] of Object.entries(metadata)) {\n        if (k.startsWith(\"x-\") || k.startsWith(\"x_\")) {\n          xFields[k] = v;\n        }\n      }\n      if (Object.keys(xFields).length > 0) {\n        process.stdout.write(\"\\nExtension Metadata:\\n\");\n        for (const [k, v] of Object.entries(xFields)) {\n          process.stdout.write(`  ${k}: ${v}\\n`);\n        }\n      }\n    }\n\n    const tags = moduleDef.tags ?? [];\n    if (tags.length > 0) {\n      process.stdout.write(`\\nTags: ${tags.join(\", \")}\\n`);\n    }\n  } else if (format === \"json\") {\n    const result: Record<string, unknown> = {\n      id: moduleDef.id,\n      description: moduleDef.description,\n    };\n    if (moduleDef.inputSchema) result.input_schema = moduleDef.inputSchema;\n    if (moduleDef.outputSchema) result.output_schema = moduleDef.outputSchema;\n\n    const annDict = annotationsToDict(\n      moduleDef.annotations,\n    );\n    if (annDict) result.annotations = annDict;\n\n    const tags = moduleDef.tags ?? [];\n    if (tags.length > 0) result.tags = tags;\n\n    // Extension metadata\n    const metadata = moduleDef.metadata;\n    if (metadata) {\n      for (const [k, v] of Object.entries(metadata)) {\n        if (k.startsWith(\"x-\") || k.startsWith(\"x_\")) {\n          result[k] = v;\n        }\n      }\n    }\n\n    process.stdout.write(JSON.stringify(result, null, 2) + \"\\n\");\n  }\n}\n\n// ---------------------------------------------------------------------------\n// formatExecResult\n// ---------------------------------------------------------------------------\n\n/**\n * Format and print module execution result.\n */\nexport function formatExecResult(\n  result: unknown,\n  format?: string,\n): void {\n  if (result === null || result === undefined) {\n    return;\n  }\n  const effective = resolveFormat(format);\n  if (\n    effective === \"table\" &&\n    typeof result === \"object\" &&\n    !Array.isArray(result)\n  ) {\n    // Key-value table\n    const entries = Object.entries(result as Record<string, unknown>);\n    const headers = [\"Key\", \"Value\"];\n    const rows = entries.map(([k, v]) => [String(k), String(v)]);\n    process.stdout.write(formatTable(headers, rows));\n  } else if (typeof result === \"object\") {\n    process.stdout.write(JSON.stringify(result, null, 2) + \"\\n\");\n  } else if (typeof result === \"string\") {\n    process.stdout.write(result + \"\\n\");\n  } else {\n    process.stdout.write(String(result) + \"\\n\");\n  }\n}\n","/**\n * Simple structured logger respecting logging.level config.\n */\n\nconst LEVELS = { DEBUG: 0, INFO: 1, WARNING: 2, ERROR: 3 } as const;\ntype LogLevel = keyof typeof LEVELS;\n\nlet currentLevel: LogLevel = \"WARNING\";\n\nexport function setLogLevel(level: string): void {\n  const upper = level.toUpperCase();\n  if (upper in LEVELS) {\n    currentLevel = upper as LogLevel;\n  }\n}\n\nexport function getLogLevel(): LogLevel {\n  return currentLevel;\n}\n\nfunction shouldLog(level: LogLevel): boolean {\n  return LEVELS[level] >= LEVELS[currentLevel];\n}\n\nexport function debug(message: string): void {\n  if (shouldLog(\"DEBUG\")) process.stderr.write(`DEBUG: ${message}\\n`);\n}\n\nexport function info(message: string): void {\n  if (shouldLog(\"INFO\")) process.stderr.write(`INFO: ${message}\\n`);\n}\n\nexport function warn(message: string): void {\n  if (shouldLog(\"WARNING\")) process.stderr.write(`WARNING: ${message}\\n`);\n}\n\nexport function error(message: string): void {\n  if (shouldLog(\"ERROR\")) process.stderr.write(`ERROR: ${message}\\n`);\n}\n"],"mappings":";;;;;;;AACA,OAAO,UAAU;AACjB,SAAS,qBAAqB;AAF9B;AAAA;AAAA;AAAA;AAAA;;;ACkGO,SAAS,iBAAiB,OAA0B;AACzD,MAAI,iBAAiB,sBAAsB;AACzC,WAAO,WAAW;AAAA,EACpB;AACA,MAAI,iBAAiB,qBAAqB;AACxC,WAAO,WAAW;AAAA,EACpB;AACA,MAAI,iBAAiB,qBAAqB;AACxC,WAAO,WAAW;AAAA,EACpB;AACA,MAAI,iBAAiB,uBAAuB;AAC1C,WAAO,WAAW;AAAA,EACpB;AACA,MAAI,iBAAiB,uBAAuB;AAC1C,WAAO,WAAW;AAAA,EACpB;AACA,MAAI,iBAAiB,qBAAqB;AACxC,WAAO,WAAW;AAAA,EACpB;AACA,MAAI,iBAAiB,sBAAsB;AACzC,WAAO,WAAW;AAAA,EACpB;AAGA,MAAI,iBAAiB,OAAO;AAC1B,UAAM,OAAQ,MAA6C;AAC3D,UAAM,UAAoC;AAAA,MACxC,kBAAkB,WAAW;AAAA,MAC7B,mBAAmB,WAAW;AAAA,MAC9B,iBAAiB,WAAW;AAAA,MAC5B,yBAAyB,WAAW;AAAA,MACpC,qBAAqB,WAAW;AAAA,MAChC,iBAAiB,WAAW;AAAA,MAC5B,kBAAkB,WAAW;AAAA,MAC7B,kBAAkB,WAAW;AAAA,MAC7B,gBAAgB,WAAW;AAAA,MAC3B,sBAAsB,WAAW;AAAA,MACjC,gBAAgB,WAAW;AAAA,MAC3B,YAAY,WAAW;AAAA,IACzB;AACA,QAAI,QAAQ,QAAQ,SAAS;AAC3B,aAAO,QAAQ,IAAI;AAAA,IACrB;AAAA,EACF;AAEA,SAAO,WAAW;AACpB;AAhJA,IAWa,sBAQA,qBAQA,uBAQA,sBAQA,qBAQA,uBAQA,qBAWA;AAtEb;AAAA;AAAA;AAAA;AAWO,IAAM,uBAAN,cAAmC,MAAM;AAAA,MAC9C,YAAY,UAAU,sBAAsB;AAC1C,cAAM,OAAO;AACb,aAAK,OAAO;AAAA,MACd;AAAA,IACF;AAGO,IAAM,sBAAN,cAAkC,MAAM;AAAA,MAC7C,YAAY,UAAU,yBAAyB;AAC7C,cAAM,OAAO;AACb,aAAK,OAAO;AAAA,MACd;AAAA,IACF;AAGO,IAAM,wBAAN,cAAoC,MAAM;AAAA,MAC/C,YAAY,UAAU,4BAA4B;AAChD,cAAM,OAAO;AACb,aAAK,OAAO;AAAA,MACd;AAAA,IACF;AAGO,IAAM,uBAAN,cAAmC,MAAM;AAAA,MAC9C,YAAY,UAAU,2BAA2B;AAC/C,cAAM,OAAO;AACb,aAAK,OAAO;AAAA,MACd;AAAA,IACF;AAGO,IAAM,sBAAN,cAAkC,MAAM;AAAA,MAC7C,YAAY,UAAU,mBAAmB;AACvC,cAAM,OAAO;AACb,aAAK,OAAO;AAAA,MACd;AAAA,IACF;AAGO,IAAM,wBAAN,cAAoC,MAAM;AAAA,MAC/C,YAAY,UAAU,4BAA4B;AAChD,cAAM,OAAO;AACb,aAAK,OAAO;AAAA,MACd;AAAA,IACF;AAGO,IAAM,sBAAN,cAAkC,MAAM;AAAA,MAC7C,YAAY,UAAU,oBAAoB;AACxC,cAAM,OAAO;AACb,aAAK,OAAO;AAAA,MACd;AAAA,IACF;AAMO,IAAM,aAAa;AAAA,MACxB,SAAS;AAAA,MACT,sBAAsB;AAAA,MACtB,gBAAgB;AAAA,MAChB,mBAAmB;AAAA,MACnB,kBAAkB;AAAA,MAClB,mBAAmB;AAAA,MACnB,iBAAiB;AAAA,MACjB,yBAAyB;AAAA,MACzB,iBAAiB;AAAA,MACjB,kBAAkB;AAAA,MAClB,kBAAkB;AAAA,MAClB,gBAAgB;AAAA,MAChB,qBAAqB;AAAA,MACrB,YAAY;AAAA,MACZ,oBAAoB;AAAA,IACtB;AAAA;AAAA;;;ACtFA;;;ACAA;AAUA;AAJA,SAAS,oBAAoB;AAC7B,SAAS,iBAAAA,sBAAqB;AAC9B,YAAYC,WAAU;AACtB,SAAS,SAAS,sBAAsB;;;ACTxC;AAMA;;;ACNA;AAOA;;;ACPA;AAQA;AAFA,YAAY,cAAc;;;ACN1B;;;ACAA;AAIA,IAAM,SAAS,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,EAAE;AAGzD,IAAI,eAAyB;AAEtB,SAAS,YAAY,OAAqB;AAC/C,QAAM,QAAQ,MAAM,YAAY;AAChC,MAAI,SAAS,QAAQ;AACnB,mBAAe;AAAA,EACjB;AACF;;;ALIA,IAAMC,aAAiB,cAAQC,eAAc,YAAY,GAAG,CAAC;AAC7D,IAAM,MAAM,KAAK,MAAM,aAAkB,cAAQD,YAAW,iBAAiB,GAAG,OAAO,CAAC;AACxF,IAAM,UAAkB,IAAI;AAsCrB,SAAS,UACd,eACA,UACS;AAET,QAAM,mBAAmB,YAAiB,eAAS,QAAQ,KAAK,CAAC,KAAK,YAAY,KAAK;AAGvF,QAAM,cAAc,QAAQ,IAAI,4BAA4B,QAAQ,IAAI,wBAAwB;AAChG,cAAY,WAAW;AAEvB,QAAM,UAAU,IAAI,QAAQ,gBAAgB,EACzC,aAAa,EACb,QAAQ,SAAS,aAAa,QAAQ,gBAAgB,UAAU,EAChE,YAAY,gEAA2D,EACvE,OAAO,2BAA2B,8BAA8B,EAChE,OAAO,uBAAuB,4CAA4C,SAAS;AAItF,OAAK;AAEL,SAAO;AACT;AASO,SAAS,KAAK,UAAyB;AAC5C,QAAM,UAAU,UAAU,QAAW,QAAQ;AAE7C,MAAI;AACF,YAAQ,MAAM,QAAQ,IAAI;AAAA,EAC5B,SAAS,OAAgB;AACvB,QAAI,iBAAiB,gBAAgB;AAEnC,cAAQ,KAAK,MAAM,QAAQ;AAAA,IAC7B;AACA,UAAM,OAAO,iBAAiB,KAAK;AACnC,QAAI,iBAAiB,OAAO;AAC1B,cAAQ,OAAO,MAAM,UAAU,MAAM,OAAO;AAAA,CAAI;AAAA,IAClD;AACA,YAAQ,KAAK,IAAI;AAAA,EACnB;AACF;;;ADjGA,KAAK,YAAY;","names":["fileURLToPath","path","__dirname","fileURLToPath"]}
+{"version":3,"sources":["../../node_modules/tsup/assets/esm_shims.js","../../src/errors.ts","../../bin/apcore-cli.ts","../../src/main.ts","../../src/ref-resolver.ts","../../src/schema-parser.ts","../../src/approval.ts","../../src/output.ts","../../src/logger.ts"],"sourcesContent":["// Shim globals in esm bundle\nimport path from 'node:path'\nimport { fileURLToPath } from 'node:url'\n\nconst getFilename = () => fileURLToPath(import.meta.url)\nconst getDirname = () => path.dirname(getFilename())\n\nexport const __dirname = /* @__PURE__ */ getDirname()\nexport const __filename = /* @__PURE__ */ getFilename()\n","/**\n * Error classes and exit code mapping for apcore-cli.\n *\n * Protocol spec: Error handling & exit codes\n */\n\n// ---------------------------------------------------------------------------\n// Error classes\n// ---------------------------------------------------------------------------\n\n/** Thrown when the user does not approve module execution within the timeout. */\nexport class ApprovalTimeoutError extends Error {\n  constructor(message = \"Approval timed out\") {\n    super(message);\n    this.name = \"ApprovalTimeoutError\";\n  }\n}\n\n/** Thrown when API key authentication fails or is missing. */\nexport class AuthenticationError extends Error {\n  constructor(message = \"Authentication failed\") {\n    super(message);\n    this.name = \"AuthenticationError\";\n  }\n}\n\n/** Thrown when encrypted config cannot be decrypted. */\nexport class ConfigDecryptionError extends Error {\n  constructor(message = \"Config decryption failed\") {\n    super(message);\n    this.name = \"ConfigDecryptionError\";\n  }\n}\n\n/** Thrown when module execution fails. */\nexport class ModuleExecutionError extends Error {\n  constructor(message = \"Module execution failed\") {\n    super(message);\n    this.name = \"ModuleExecutionError\";\n  }\n}\n\n/** Thrown when approval is denied by the user. */\nexport class ApprovalDeniedError extends Error {\n  constructor(message = \"Approval denied\") {\n    super(message);\n    this.name = \"ApprovalDeniedError\";\n  }\n}\n\n/** Thrown when schema validation fails. */\nexport class SchemaValidationError extends Error {\n  constructor(message = \"Schema validation failed\") {\n    super(message);\n    this.name = \"SchemaValidationError\";\n  }\n}\n\n/** Thrown when a module is not found. */\nexport class ModuleNotFoundError extends Error {\n  constructor(message = \"Module not found\") {\n    super(message);\n    this.name = \"ModuleNotFoundError\";\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Exit code map\n// ---------------------------------------------------------------------------\n\nexport const EXIT_CODES = {\n  SUCCESS: 0,\n  MODULE_EXECUTE_ERROR: 1,\n  MODULE_TIMEOUT: 1,\n  INVALID_CLI_INPUT: 2,\n  MODULE_NOT_FOUND: 44,\n  MODULE_LOAD_ERROR: 44,\n  MODULE_DISABLED: 44,\n  SCHEMA_VALIDATION_ERROR: 45,\n  APPROVAL_DENIED: 46,\n  APPROVAL_TIMEOUT: 46,\n  CONFIG_NOT_FOUND: 47,\n  CONFIG_INVALID: 47,\n  SCHEMA_CIRCULAR_REF: 48,\n  ACL_DENIED: 77,\n  KEYBOARD_INTERRUPT: 130,\n} as const;\n\nexport type ExitCode = (typeof EXIT_CODES)[keyof typeof EXIT_CODES];\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/**\n * Map a caught error to the appropriate process exit code.\n * Also checks for apcore error codes on the error object.\n */\nexport function exitCodeForError(error: unknown): ExitCode {\n  if (error instanceof ApprovalTimeoutError) {\n    return EXIT_CODES.APPROVAL_TIMEOUT;\n  }\n  if (error instanceof ApprovalDeniedError) {\n    return EXIT_CODES.APPROVAL_DENIED;\n  }\n  if (error instanceof AuthenticationError) {\n    return EXIT_CODES.ACL_DENIED;\n  }\n  if (error instanceof ConfigDecryptionError) {\n    return EXIT_CODES.CONFIG_INVALID;\n  }\n  if (error instanceof SchemaValidationError) {\n    return EXIT_CODES.SCHEMA_VALIDATION_ERROR;\n  }\n  if (error instanceof ModuleNotFoundError) {\n    return EXIT_CODES.MODULE_NOT_FOUND;\n  }\n  if (error instanceof ModuleExecutionError) {\n    return EXIT_CODES.MODULE_EXECUTE_ERROR;\n  }\n\n  // Check for apcore error codes on the error object\n  if (error instanceof Error) {\n    const code = (error as unknown as Record<string, unknown>).code as string | undefined;\n    const codeMap: Record<string, ExitCode> = {\n      MODULE_NOT_FOUND: EXIT_CODES.MODULE_NOT_FOUND,\n      MODULE_LOAD_ERROR: EXIT_CODES.MODULE_LOAD_ERROR,\n      MODULE_DISABLED: EXIT_CODES.MODULE_DISABLED,\n      SCHEMA_VALIDATION_ERROR: EXIT_CODES.SCHEMA_VALIDATION_ERROR,\n      SCHEMA_CIRCULAR_REF: EXIT_CODES.SCHEMA_CIRCULAR_REF,\n      APPROVAL_DENIED: EXIT_CODES.APPROVAL_DENIED,\n      APPROVAL_TIMEOUT: EXIT_CODES.APPROVAL_TIMEOUT,\n      CONFIG_NOT_FOUND: EXIT_CODES.CONFIG_NOT_FOUND,\n      CONFIG_INVALID: EXIT_CODES.CONFIG_INVALID,\n      MODULE_EXECUTE_ERROR: EXIT_CODES.MODULE_EXECUTE_ERROR,\n      MODULE_TIMEOUT: EXIT_CODES.MODULE_TIMEOUT,\n      ACL_DENIED: EXIT_CODES.ACL_DENIED,\n    };\n    if (code && code in codeMap) {\n      return codeMap[code];\n    }\n  }\n\n  return EXIT_CODES.MODULE_EXECUTE_ERROR;\n}\n","#!/usr/bin/env node\n/**\n * apcore-cli — Shebang entry point.\n *\n * This file is the bin target. It bootstraps the CLI and delegates to main().\n */\n\nimport { main } from \"../src/main.js\";\n\nmain(\"apcore-cli\");\n","/**\n * CLI entry point — createCli / main equivalents.\n *\n * Protocol spec: CLI bootstrapping & command registration\n */\n\nimport { readFileSync } from \"node:fs\";\nimport { fileURLToPath } from \"node:url\";\nimport * as path from \"node:path\";\nimport { Command, CommanderError } from \"commander\";\nimport { EXIT_CODES, exitCodeForError } from \"./errors.js\";\nimport { resolveRefs } from \"./ref-resolver.js\";\nimport { schemaToCliOptions } from \"./schema-parser.js\";\nimport { checkApproval } from \"./approval.js\";\nimport { formatExecResult } from \"./output.js\";\nimport { setLogLevel } from \"./logger.js\";\nimport type { Executor, ModuleDescriptor } from \"./cli.js\";\n\nconst __dirname = path.dirname(fileURLToPath(import.meta.url));\nconst pkg = JSON.parse(readFileSync(path.resolve(__dirname, \"../package.json\"), \"utf-8\"));\nconst VERSION: string = pkg.version;\n\n// ---------------------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------------------\n\n/** Configuration for a single Commander option derived from a JSON Schema property. */\nexport interface OptionConfig {\n  /** The property name from the schema. */\n  name: string;\n  /** Commander flags string (e.g. \"--my-flag <value>\" or \"--flag, --no-flag\"). */\n  flags: string;\n  /** Help text for the option. */\n  description: string;\n  /** Default value. */\n  defaultValue?: unknown;\n  /** Whether the field is required (for display only). */\n  required: boolean;\n  /** Enum choices (string values). */\n  choices?: string[];\n  /** Whether this is a boolean flag pair (--flag/--no-flag). */\n  isBooleanFlag?: boolean;\n  /** Maps string enum value → original type name (\"int\", \"float\", \"bool\"). */\n  enumOriginalTypes?: Record<string, string>;\n  /** Parser function for Commander (e.g. parseInt, parseFloat). */\n  parseArg?: (value: string) => unknown;\n}\n\n// ---------------------------------------------------------------------------\n// createCli\n// ---------------------------------------------------------------------------\n\n/**\n * Build and return the top-level Commander program.\n *\n * @param extensionsDir  Path to the extensions directory (default: ./extensions)\n * @param progName       Program name shown in help (default: apcore-cli)\n */\nexport function createCli(\n  extensionsDir?: string,\n  progName?: string,\n): Command {\n  // Resolve program name\n  const resolvedProgName = progName ?? path.basename(process.argv[1] ?? \"apcore-cli\") ?? \"apcore-cli\";\n\n  // Resolve log level\n  const cliLogLevel = process.env.APCORE_CLI_LOGGING_LEVEL ?? process.env.APCORE_LOGGING_LEVEL ?? \"WARNING\";\n  setLogLevel(cliLogLevel);\n\n  const program = new Command(resolvedProgName)\n    .exitOverride()\n    .version(VERSION, \"--version\", `Show ${resolvedProgName} version`)\n    .description(\"apcore CLI — execute apcore modules from the command line\")\n    .option(\"--extensions-dir <path>\", \"Path to extensions directory\")\n    .option(\"--log-level <level>\", \"Logging level (DEBUG|INFO|WARNING|ERROR)\", \"WARNING\");\n\n  // NOTE: Full registry/executor wiring requires apcore-js to be available.\n  // For now, extensions-dir is accepted but not wired to a real registry.\n  void extensionsDir;\n\n  return program;\n}\n\n// ---------------------------------------------------------------------------\n// main\n// ---------------------------------------------------------------------------\n\n/**\n * Parse argv and run the CLI. Handles top-level error catching and exit codes.\n */\nexport function main(progName?: string): void {\n  const program = createCli(undefined, progName);\n\n  try {\n    program.parse(process.argv);\n  } catch (error: unknown) {\n    if (error instanceof CommanderError) {\n      // Commander already printed the error message\n      process.exit(error.exitCode);\n    }\n    const code = exitCodeForError(error);\n    if (error instanceof Error) {\n      process.stderr.write(`Error: ${error.message}\\n`);\n    }\n    process.exit(code);\n  }\n}\n\n// ---------------------------------------------------------------------------\n// buildModuleCommand\n// ---------------------------------------------------------------------------\n\n/**\n * Build a Commander Command for a single apcore module.\n */\nexport function buildModuleCommand(\n  moduleDef: ModuleDescriptor,\n  executor: Executor,\n  helpTextMaxLength = 1000,\n): Command {\n  const moduleId = moduleDef.id;\n  let resolvedSchema: Record<string, unknown> = {};\n  let schemaOptions: OptionConfig[] = [];\n\n  // Resolve schema\n  const inputSchema = moduleDef.inputSchema;\n  if (inputSchema && typeof inputSchema === \"object\" && inputSchema.properties) {\n    try {\n      resolvedSchema = resolveRefs(inputSchema, 32, moduleId);\n    } catch {\n      resolvedSchema = inputSchema;\n    }\n    schemaOptions = schemaToCliOptions(resolvedSchema, helpTextMaxLength);\n  }\n\n  const cmd = new Command(moduleId).description(moduleDef.description);\n\n  // Built-in options\n  cmd.option(\"--input <source>\", \"Read input from STDIN ('-')\");\n  cmd.option(\"-y, --yes\", \"Bypass approval prompts\", false);\n  cmd.option(\"--large-input\", \"Allow STDIN input larger than 10MB\", false);\n  cmd.option(\"--format <format>\", \"Output format (json|table)\");\n  cmd.option(\"--sandbox\", \"Run module in subprocess sandbox\", false);\n\n  // Schema-generated options\n  for (const opt of schemaOptions) {\n    if (opt.parseArg) {\n      cmd.option(opt.flags, opt.description, opt.parseArg, opt.defaultValue);\n    } else {\n      cmd.option(opt.flags, opt.description, opt.defaultValue as string | boolean | undefined);\n    }\n  }\n\n  // Action callback\n  cmd.action(async (options: Record<string, unknown>) => {\n    // Pop built-in options\n    const stdinFlag = options.input as string | undefined;\n    const autoApprove = options.yes as boolean;\n    const largeInput = options.largeInput as boolean;\n    const outputFormat = options.format as string | undefined;\n    const sandboxEnabled = options.sandbox as boolean;\n\n    // Remove built-in keys from options to get schema kwargs\n    const schemaKwargs: Record<string, unknown> = {};\n    const builtinKeys = new Set([\"input\", \"yes\", \"largeInput\", \"format\", \"sandbox\"]);\n    for (const [k, v] of Object.entries(options)) {\n      if (!builtinKeys.has(k)) {\n        schemaKwargs[k] = v;\n      }\n    }\n\n    try {\n      // Collect and merge input\n      const merged = await collectInput(stdinFlag, schemaKwargs, largeInput);\n\n      // Reconvert enum values\n      const reconverted = reconvertEnumValues(merged, schemaOptions);\n\n      // Check approval\n      await checkApproval(moduleDef, autoApprove);\n\n      // Execute with timing\n      const { Sandbox } = await import(\"./security/index.js\");\n      const sandbox = new Sandbox(sandboxEnabled);\n      const startTime = performance.now();\n      const result = await sandbox.execute(moduleId, reconverted, executor);\n      const durationMs = Math.round(performance.now() - startTime);\n\n      // Audit log (success)\n      const { getAuditLogger } = await import(\"./security/audit.js\");\n      const auditLogger = getAuditLogger();\n      if (auditLogger) {\n        auditLogger.logExecution(moduleId, reconverted, \"success\", 0, durationMs);\n      }\n\n      // Format output\n      formatExecResult(result, outputFormat);\n    } catch (err: unknown) {\n      // Audit log (error)\n      const { getAuditLogger } = await import(\"./security/audit.js\");\n      const auditLogger = getAuditLogger();\n      const code = exitCodeForError(err);\n      if (auditLogger) {\n        auditLogger.logExecution(moduleId, {}, \"error\", code, 0);\n      }\n\n      if (err instanceof Error) {\n        process.stderr.write(`Error: ${err.message}\\n`);\n      }\n      process.exit(code);\n    }\n  });\n\n  return cmd;\n}\n\n// ---------------------------------------------------------------------------\n// validateModuleId\n// ---------------------------------------------------------------------------\n\n/**\n * Validate that a module ID conforms to the expected format.\n * Pattern: [a-z][a-z0-9_]*(.[a-z][a-z0-9_])* — max 128 chars.\n */\nexport function validateModuleId(moduleId: string): void {\n  if (moduleId.length > 128) {\n    process.stderr.write(\n      `Error: Invalid module ID format: '${moduleId}'. Maximum length is 128 characters.\\n`,\n    );\n    process.exit(EXIT_CODES.INVALID_CLI_INPUT);\n  }\n  if (!/^[a-z][a-z0-9_]*(\\.[a-z][a-z0-9_]*)*$/.test(moduleId)) {\n    process.stderr.write(\n      `Error: Invalid module ID format: '${moduleId}'.\\n`,\n    );\n    process.exit(EXIT_CODES.INVALID_CLI_INPUT);\n  }\n}\n\n// ---------------------------------------------------------------------------\n// collectInput\n// ---------------------------------------------------------------------------\n\n/**\n * Collect module input from stdin and/or CLI keyword arguments.\n */\nexport async function collectInput(\n  stdinFlag?: string,\n  cliKwargs: Record<string, unknown> = {},\n  largeInput?: boolean,\n): Promise<Record<string, unknown>> {\n  // Remove null/undefined values from CLI kwargs\n  const cliKwargsNonNull: Record<string, unknown> = {};\n  for (const [k, v] of Object.entries(cliKwargs)) {\n    if (v !== null && v !== undefined) {\n      cliKwargsNonNull[k] = v;\n    }\n  }\n\n  if (!stdinFlag) {\n    return cliKwargsNonNull;\n  }\n\n  if (stdinFlag === \"-\") {\n    const raw = await readStdin();\n    const rawSize = Buffer.byteLength(raw, \"utf-8\");\n\n    if (rawSize > 10_485_760 && !largeInput) {\n      process.stderr.write(\n        \"Error: STDIN input exceeds 10MB limit. Use --large-input to override.\\n\",\n      );\n      process.exit(EXIT_CODES.INVALID_CLI_INPUT);\n    }\n\n    if (!raw) {\n      return cliKwargsNonNull;\n    }\n\n    let stdinData: unknown;\n    try {\n      stdinData = JSON.parse(raw);\n    } catch {\n      process.stderr.write(\n        \"Error: STDIN does not contain valid JSON.\\n\",\n      );\n      process.exit(EXIT_CODES.INVALID_CLI_INPUT);\n    }\n\n    if (typeof stdinData !== \"object\" || stdinData === null || Array.isArray(stdinData)) {\n      process.stderr.write(\n        `Error: STDIN JSON must be an object, got ${Array.isArray(stdinData) ? \"array\" : typeof stdinData}.\\n`,\n      );\n      process.exit(EXIT_CODES.INVALID_CLI_INPUT);\n    }\n\n    // CLI flags override STDIN for duplicate keys\n    return { ...(stdinData as Record<string, unknown>), ...cliKwargsNonNull };\n  }\n\n  return cliKwargsNonNull;\n}\n\n/**\n * Read all data from stdin with proper cleanup.\n */\nfunction readStdin(): Promise<string> {\n  return new Promise((resolve, reject) => {\n    const chunks: Buffer[] = [];\n    const onData = (chunk: Buffer) => chunks.push(chunk);\n    const onEnd = () => {\n      cleanup();\n      resolve(Buffer.concat(chunks).toString(\"utf-8\"));\n    };\n    const onError = (err: Error) => {\n      cleanup();\n      reject(err);\n    };\n    const cleanup = () => {\n      process.stdin.removeListener(\"data\", onData);\n      process.stdin.removeListener(\"end\", onEnd);\n      process.stdin.removeListener(\"error\", onError);\n    };\n    process.stdin.on(\"data\", onData);\n    process.stdin.on(\"end\", onEnd);\n    process.stdin.on(\"error\", onError);\n    process.stdin.resume();\n  });\n}\n\n// ---------------------------------------------------------------------------\n// reconvertEnumValues\n// ---------------------------------------------------------------------------\n\n/**\n * Re-convert CLI string values back to their schema-typed equivalents\n * based on the option configs.\n */\nexport function reconvertEnumValues(\n  kwargs: Record<string, unknown>,\n  options: OptionConfig[],\n): Record<string, unknown> {\n  const result = { ...kwargs };\n  for (const opt of options) {\n    if (!opt.enumOriginalTypes) continue;\n    const paramName = opt.name;\n    if (!(paramName in result) || result[paramName] === null || result[paramName] === undefined) {\n      continue;\n    }\n    const strVal = String(result[paramName]);\n    const origType = opt.enumOriginalTypes[strVal];\n    if (origType === \"int\") {\n      result[paramName] = parseInt(strVal, 10);\n    } else if (origType === \"float\") {\n      result[paramName] = parseFloat(strVal);\n    } else if (origType === \"bool\") {\n      result[paramName] = strVal.toLowerCase() === \"true\";\n    }\n  }\n  return result;\n}\n","/**\n * JSON Schema $ref resolver.\n *\n * Protocol spec: Schema resolution & $ref handling\n */\n\nimport { EXIT_CODES } from \"./errors.js\";\n\n// ---------------------------------------------------------------------------\n// resolveRefs\n// ---------------------------------------------------------------------------\n\n/**\n * Resolve all $ref references in a JSON Schema.\n * Returns a fully inlined schema with $defs/definitions removed.\n */\nexport function resolveRefs(\n  schema: Record<string, unknown>,\n  maxDepth = 32,\n  moduleId = \"\",\n): Record<string, unknown> {\n  const cloned = structuredClone(schema);\n  const defs = (cloned.$defs ?? cloned.definitions ?? {}) as Record<\n    string,\n    unknown\n  >;\n  const result = resolveNode(\n    cloned,\n    defs,\n    new Set<string>(),\n    0,\n    maxDepth,\n    moduleId,\n  ) as Record<string, unknown>;\n\n  // Remove definition keys\n  delete result.$defs;\n  delete result.definitions;\n  return result;\n}\n\nfunction resolveNode(\n  node: unknown,\n  defs: Record<string, unknown>,\n  visited: Set<string>,\n  depth: number,\n  maxDepth: number,\n  moduleId: string,\n): unknown {\n  if (typeof node !== \"object\" || node === null || Array.isArray(node)) {\n    return node;\n  }\n\n  const obj = node as Record<string, unknown>;\n\n  // Handle $ref\n  if (\"$ref\" in obj) {\n    const refPath = obj.$ref as string;\n\n    if (depth >= maxDepth) {\n      process.stderr.write(\n        `Error: $ref resolution depth exceeded maximum of ${maxDepth} for module '${moduleId}'.\\n`,\n      );\n      process.exit(EXIT_CODES.SCHEMA_CIRCULAR_REF);\n    }\n\n    if (visited.has(refPath)) {\n      process.stderr.write(\n        `Error: Circular $ref detected in schema for module '${moduleId}' at path '${refPath}'.\\n`,\n      );\n      process.exit(EXIT_CODES.SCHEMA_CIRCULAR_REF);\n    }\n\n    // Parse ref target: extract key from \"#/$defs/Address\" → \"Address\"\n    const parts = refPath.split(\"/\");\n    const key = parts[parts.length - 1];\n\n    if (!(key in defs)) {\n      process.stderr.write(\n        `Error: Unresolvable $ref '${refPath}' in schema for module '${moduleId}'.\\n`,\n      );\n      process.exit(EXIT_CODES.SCHEMA_VALIDATION_ERROR);\n    }\n\n    const newVisited = new Set(visited);\n    newVisited.add(refPath);\n    return resolveNode(defs[key], defs, newVisited, depth + 1, maxDepth, moduleId);\n  }\n\n  // Handle allOf\n  if (\"allOf\" in obj && Array.isArray(obj.allOf)) {\n    const merged: Record<string, unknown> = {\n      properties: {},\n      required: [] as string[],\n    };\n    for (const subSchema of obj.allOf as unknown[]) {\n      const resolved = resolveNode(\n        subSchema,\n        defs,\n        visited,\n        depth + 1,\n        maxDepth,\n        moduleId,\n      ) as Record<string, unknown>;\n      if (resolved.properties) {\n        Object.assign(\n          merged.properties as Record<string, unknown>,\n          resolved.properties,\n        );\n      }\n      if (Array.isArray(resolved.required)) {\n        (merged.required as string[]).push(...resolved.required);\n      }\n    }\n    // Deduplicate required\n    merged.required = [...new Set(merged.required as string[])];\n    // Copy non-composition keys\n    for (const [k, v] of Object.entries(obj)) {\n      if (k !== \"allOf\" && !(k in merged)) {\n        merged[k] = v;\n      }\n    }\n    return merged;\n  }\n\n  // Handle anyOf / oneOf\n  for (const keyword of [\"anyOf\", \"oneOf\"]) {\n    if (keyword in obj && Array.isArray(obj[keyword])) {\n      const merged: Record<string, unknown> = {\n        properties: {},\n        required: [] as string[],\n      };\n      const allRequiredSets: Set<string>[] = [];\n      for (const subSchema of obj[keyword] as unknown[]) {\n        const resolved = resolveNode(\n          subSchema,\n          defs,\n          visited,\n          depth + 1,\n          maxDepth,\n          moduleId,\n        ) as Record<string, unknown>;\n        if (resolved.properties) {\n          Object.assign(\n            merged.properties as Record<string, unknown>,\n            resolved.properties,\n          );\n        }\n        if (Array.isArray(resolved.required)) {\n          allRequiredSets.push(new Set(resolved.required as string[]));\n        }\n      }\n      // Required = intersection of all branches\n      if (allRequiredSets.length > 0) {\n        let intersection = allRequiredSets[0];\n        for (let i = 1; i < allRequiredSets.length; i++) {\n          intersection = new Set(\n            [...intersection].filter((x) => allRequiredSets[i].has(x)),\n          );\n        }\n        merged.required = [...intersection];\n      } else {\n        merged.required = [];\n      }\n      // Copy non-composition keys\n      for (const [k, v] of Object.entries(obj)) {\n        if (k !== keyword && !(k in merged)) {\n          merged[k] = v;\n        }\n      }\n      return merged;\n    }\n  }\n\n  // Recursively process nested properties\n  if (\"properties\" in obj && typeof obj.properties === \"object\" && obj.properties !== null) {\n    const props = obj.properties as Record<string, unknown>;\n    for (const [propName, propSchema] of Object.entries(props)) {\n      props[propName] = resolveNode(\n        propSchema,\n        defs,\n        visited,\n        depth + 1,\n        maxDepth,\n        moduleId,\n      );\n    }\n  }\n\n  return obj;\n}\n","/**\n * JSON Schema -> Commander options mapping.\n *\n * Protocol spec: Schema-driven argument parsing\n */\n\nimport type { OptionConfig } from \"./main.js\";\nimport { EXIT_CODES } from \"./errors.js\";\n\n// ---------------------------------------------------------------------------\n// Internal helpers\n// ---------------------------------------------------------------------------\n\n/** Sentinel type marker for boolean flags. */\nconst BOOLEAN_FLAG = Symbol(\"BOOLEAN_FLAG\");\n\ntype TypeResult = \"string\" | \"int\" | \"float\" | typeof BOOLEAN_FLAG | \"file\";\n\n/**\n * Map JSON Schema type to a type identifier.\n */\nexport function mapType(propName: string, propSchema: Record<string, unknown>): TypeResult {\n  const schemaType = propSchema.type as string | undefined;\n\n  // Check file convention\n  if (\n    schemaType === \"string\" &&\n    (propName.endsWith(\"_file\") || propSchema[\"x-cli-file\"] === true)\n  ) {\n    return \"file\";\n  }\n\n  const typeMap: Record<string, TypeResult> = {\n    string: \"string\",\n    integer: \"int\",\n    number: \"float\",\n    boolean: BOOLEAN_FLAG,\n    object: \"string\",\n    array: \"string\",\n  };\n\n  if (!schemaType) {\n    return \"string\";\n  }\n\n  return typeMap[schemaType] ?? \"string\";\n}\n\n/**\n * Extract help text from schema property, preferring x-llm-description.\n */\nexport function extractHelp(propSchema: Record<string, unknown>, maxLength = 1000): string | undefined {\n  let text = propSchema[\"x-llm-description\"] as string | undefined;\n  if (!text) {\n    text = propSchema.description as string | undefined;\n  }\n  if (!text) {\n    return undefined;\n  }\n  if (maxLength > 0 && text.length > maxLength) {\n    return text.slice(0, maxLength - 3) + \"...\";\n  }\n  return text;\n}\n\n// ---------------------------------------------------------------------------\n// schemaToCliOptions\n// ---------------------------------------------------------------------------\n\n/** Reserved CLI option names that cannot be used by schema properties. */\nconst RESERVED_NAMES = new Set([\"input\", \"yes\", \"large_input\", \"format\", \"sandbox\"]);\n\n/**\n * Convert a JSON Schema `properties` object into an array of\n * Commander option configurations.\n */\nexport function schemaToCliOptions(\n  schema: Record<string, unknown>,\n  maxHelpLength = 1000,\n): OptionConfig[] {\n  const properties = (schema.properties ?? {}) as Record<\n    string,\n    Record<string, unknown>\n  >;\n  const requiredList = (schema.required ?? []) as string[];\n  const options: OptionConfig[] = [];\n  const flagNames: Record<string, string> = {};\n\n  for (const [propName, propSchema] of Object.entries(properties)) {\n    const flagName = \"--\" + propName.replace(/_/g, \"-\");\n\n    // Collision detection\n    if (flagName in flagNames) {\n      process.stderr.write(\n        `Error: Flag name collision: properties '${propName}' and '${flagNames[flagName]}' both map to '${flagName}'.\\n`,\n      );\n      process.exit(EXIT_CODES.INVALID_CLI_INPUT);\n    }\n    flagNames[flagName] = propName;\n\n    // Reserved name check\n    if (RESERVED_NAMES.has(propName)) {\n      process.stderr.write(\n        `Error: Module schema property '${propName}' conflicts with a reserved CLI option name. Rename the property.\\n`,\n      );\n      process.exit(EXIT_CODES.INVALID_CLI_INPUT);\n    }\n\n    const typeResult = mapType(propName, propSchema);\n    const isRequired = requiredList.includes(propName);\n    const helpBase = extractHelp(propSchema, maxHelpLength);\n    const helpText = isRequired\n      ? (helpBase ? helpBase + \" \" : \"\") + \"[required]\"\n      : helpBase ?? \"\";\n    const defaultValue = propSchema.default as unknown;\n\n    if (typeResult === BOOLEAN_FLAG) {\n      // Boolean flag pair: --flag/--no-flag\n      const flagBase = propName.replace(/_/g, \"-\");\n      const defaultVal = (propSchema.default as boolean) ?? false;\n      options.push({\n        name: propName,\n        flags: `--${flagBase}, --no-${flagBase}`,\n        description: helpText,\n        defaultValue: defaultVal,\n        required: false,\n        isBooleanFlag: true,\n      });\n    } else if (\"enum\" in propSchema && Array.isArray(propSchema.enum)) {\n      const enumValues = propSchema.enum as unknown[];\n      if (enumValues.length === 0) {\n        // Empty enum — fall back to plain string option\n        options.push({\n          name: propName,\n          flags: `${flagName} <value>`,\n          description: helpText,\n          defaultValue,\n          required: false,\n        });\n      } else {\n        const stringValues = enumValues.map(String);\n        const enumOriginalTypes: Record<string, string> = {};\n        for (const v of enumValues) {\n          if (typeof v === \"number\" && Number.isInteger(v)) {\n            enumOriginalTypes[String(v)] = \"int\";\n          } else if (typeof v === \"number\") {\n            enumOriginalTypes[String(v)] = \"float\";\n          } else if (typeof v === \"boolean\") {\n            enumOriginalTypes[String(v)] = \"bool\";\n          }\n        }\n        options.push({\n          name: propName,\n          flags: `${flagName} <value>`,\n          description: helpText,\n          defaultValue:\n            defaultValue !== undefined ? String(defaultValue) : undefined,\n          required: false,\n          choices: stringValues,\n          enumOriginalTypes:\n            Object.keys(enumOriginalTypes).length > 0\n              ? enumOriginalTypes\n              : undefined,\n        });\n      }\n    } else {\n      // Standard option\n      let parseArg: ((value: string) => unknown) | undefined;\n      if (typeResult === \"int\") {\n        parseArg = (v: string) => {\n          const n = parseInt(v, 10);\n          if (isNaN(n)) throw new Error(`Invalid integer: ${v}`);\n          return n;\n        };\n      } else if (typeResult === \"float\") {\n        parseArg = (v: string) => {\n          const n = parseFloat(v);\n          if (isNaN(n)) throw new Error(`Invalid number: ${v}`);\n          return n;\n        };\n      }\n      options.push({\n        name: propName,\n        flags: `${flagName} <value>`,\n        description: helpText,\n        defaultValue,\n        required: false,\n        parseArg,\n      });\n    }\n  }\n\n  return options;\n}\n","/**\n * Interactive approval prompts with timeout.\n *\n * Protocol spec: Approval workflow\n */\n\nimport * as readline from \"node:readline\";\nimport type { ModuleDescriptor } from \"./cli.js\";\nimport { ApprovalTimeoutError, EXIT_CODES } from \"./errors.js\";\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/**\n * Get an annotation value from either a dict or an object.\n */\nfunction getAnnotation(\n  annotations: unknown,\n  key: string,\n  defaultValue: unknown = undefined,\n): unknown {\n  if (!annotations || typeof annotations !== \"object\") return defaultValue;\n  const ann = annotations as Record<string, unknown>;\n  return key in ann ? ann[key] : defaultValue;\n}\n\n// ---------------------------------------------------------------------------\n// checkApproval\n// ---------------------------------------------------------------------------\n\n/**\n * Check if module requires approval and handle accordingly.\n * Returns normally if approved (or approval not required).\n * Calls process.exit(46) if denied/timed out/non-TTY.\n */\nexport async function checkApproval(\n  moduleDef: ModuleDescriptor,\n  autoApprove: boolean,\n): Promise<void> {\n  const annotations = moduleDef.annotations;\n\n  // Check if approval is required\n  let requiresApproval: boolean;\n  if (moduleDef.requiresApproval !== undefined) {\n    requiresApproval = moduleDef.requiresApproval;\n  } else if (annotations) {\n    requiresApproval = getAnnotation(annotations, \"requires_approval\", false) === true;\n  } else {\n    return; // No annotations, no approval needed\n  }\n\n  if (!requiresApproval) {\n    return;\n  }\n\n  const moduleId = moduleDef.id;\n\n  // Bypass: autoApprove flag (highest priority)\n  if (autoApprove) {\n    return;\n  }\n\n  // Bypass: APCORE_CLI_AUTO_APPROVE env var\n  const envVal = process.env.APCORE_CLI_AUTO_APPROVE ?? \"\";\n  if (envVal === \"1\") {\n    return;\n  }\n  if (envVal !== \"\" && envVal !== \"1\") {\n    process.stderr.write(\n      `Warning: APCORE_CLI_AUTO_APPROVE is set to '${envVal}', expected '1'. Ignoring.\\n`,\n    );\n  }\n\n  // Non-TTY check\n  if (!process.stdin.isTTY) {\n    process.stderr.write(\n      `Error: Module '${moduleId}' requires approval but no interactive ` +\n        \"terminal is available. Use --yes or set APCORE_CLI_AUTO_APPROVE=1 \" +\n        \"to bypass.\\n\",\n    );\n    process.exit(EXIT_CODES.APPROVAL_DENIED);\n  }\n\n  // TTY prompt\n  await promptWithTimeout(moduleDef, 60);\n}\n\n/**\n * Display approval prompt with timeout.\n */\nasync function promptWithTimeout(\n  moduleDef: ModuleDescriptor,\n  timeout: number,\n): Promise<void> {\n  // Clamp timeout\n  timeout = Math.max(1, Math.min(timeout, 3600));\n\n  const moduleId = moduleDef.id;\n  const annotations = moduleDef.annotations;\n  const message =\n    (annotations\n      ? (getAnnotation(annotations, \"approval_message\") as string | undefined)\n      : undefined) ??\n    `Module '${moduleId}' requires approval to execute.`;\n\n  process.stderr.write(message + \"\\n\");\n\n  const rl = readline.createInterface({\n    input: process.stdin,\n    output: process.stderr,\n  });\n\n  let timer: ReturnType<typeof setTimeout> | undefined;\n\n  try {\n    const answer = await Promise.race([\n      new Promise<string>((resolve) => {\n        rl.question(\"Proceed? [y/N] \", (ans) => resolve(ans));\n      }),\n      new Promise<never>((_, reject) => {\n        timer = setTimeout(() => {\n          reject(new ApprovalTimeoutError(\n            `Approval prompt timed out after ${timeout} seconds.`,\n          ));\n        }, timeout * 1000);\n      }),\n    ]);\n\n    // Clear the timeout — prompt resolved before timeout fired\n    if (timer) clearTimeout(timer);\n\n    const normalized = answer.trim().toLowerCase();\n    if (normalized === \"y\" || normalized === \"yes\") {\n      return;\n    }\n\n    process.stderr.write(\"Error: Approval denied.\\n\");\n    process.exit(EXIT_CODES.APPROVAL_DENIED);\n  } catch (err) {\n    if (timer) clearTimeout(timer);\n    if (err instanceof ApprovalTimeoutError) {\n      process.stderr.write(\n        `Error: Approval prompt timed out after ${timeout} seconds.\\n`,\n      );\n      process.exit(EXIT_CODES.APPROVAL_TIMEOUT);\n    }\n    throw err;\n  } finally {\n    rl.close();\n  }\n}\n","/**\n * TTY-adaptive output formatting (table/json).\n *\n * Protocol spec: Output formatting\n */\n\nimport type { ModuleDescriptor } from \"./cli.js\";\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/**\n * Resolve output format with TTY-adaptive default.\n */\nexport function resolveFormat(explicitFormat?: string): string {\n  if (explicitFormat !== undefined) {\n    return explicitFormat;\n  }\n  return process.stdout.isTTY ? \"table\" : \"json\";\n}\n\n/**\n * Truncate text to maxLength, appending '...' if needed.\n */\nexport function truncate(text: string, maxLength = 80): string {\n  if (text.length <= maxLength) {\n    return text;\n  }\n  return text.slice(0, maxLength - 3) + \"...\";\n}\n\n/**\n * Render a simple plain-text table with column headers.\n */\nfunction formatTable(\n  headers: string[],\n  rows: string[][],\n): string {\n  // Calculate column widths\n  const colWidths = headers.map((h, i) =>\n    Math.max(h.length, ...rows.map((r) => (r[i] ?? \"\").length)),\n  );\n\n  const sep = colWidths.map((w) => \"-\".repeat(w)).join(\"  \");\n  const headerLine = headers\n    .map((h, i) => h.padEnd(colWidths[i]))\n    .join(\"  \");\n  const dataLines = rows.map((row) =>\n    row.map((cell, i) => (cell ?? \"\").padEnd(colWidths[i])).join(\"  \"),\n  );\n\n  return [headerLine, sep, ...dataLines].join(\"\\n\") + \"\\n\";\n}\n\n// ---------------------------------------------------------------------------\n// formatModuleList\n// ---------------------------------------------------------------------------\n\n/**\n * Format and print a list of modules.\n */\nexport function formatModuleList(\n  modules: ModuleDescriptor[],\n  format: string,\n  filterTags?: string[],\n): void {\n  if (format === \"table\") {\n    if (modules.length === 0 && filterTags && filterTags.length > 0) {\n      process.stdout.write(\n        `No modules found matching tags: ${filterTags.join(\", \")}.\\n`,\n      );\n      return;\n    }\n    if (modules.length === 0) {\n      process.stdout.write(\"No modules found.\\n\");\n      return;\n    }\n\n    const headers = [\"ID\", \"Description\", \"Tags\"];\n    const rows = modules.map((m) => [\n      m.id,\n      truncate(m.description, 80),\n      (m.tags ?? []).join(\", \"),\n    ]);\n    process.stdout.write(formatTable(headers, rows));\n  } else if (format === \"json\") {\n    const result = modules.map((m) => ({\n      id: m.id,\n      description: m.description,\n      tags: m.tags ?? [],\n    }));\n    process.stdout.write(JSON.stringify(result, null, 2) + \"\\n\");\n  }\n}\n\n// ---------------------------------------------------------------------------\n// formatModuleDetail\n// ---------------------------------------------------------------------------\n\n/**\n * Convert annotations to a plain dict, filtering out falsy/default values.\n */\nfunction annotationsToDict(\n  annotations: unknown,\n): Record<string, unknown> | null {\n  if (!annotations) return null;\n  if (typeof annotations !== \"object\" || Array.isArray(annotations)) return null;\n  const result: Record<string, unknown> = {};\n  for (const [k, v] of Object.entries(annotations as Record<string, unknown>)) {\n    if (v !== null && v !== undefined && v !== false && v !== 0 && !(Array.isArray(v) && v.length === 0)) {\n      result[k] = v;\n    }\n  }\n  return Object.keys(result).length > 0 ? result : null;\n}\n\n/**\n * Format and print full module metadata.\n */\nexport function formatModuleDetail(\n  moduleDef: ModuleDescriptor,\n  format: string,\n): void {\n  if (format === \"table\") {\n    process.stdout.write(`\\nModule: ${moduleDef.id}\\n`);\n    process.stdout.write(`\\nDescription:\\n  ${moduleDef.description}\\n`);\n\n    if (moduleDef.inputSchema && Object.keys(moduleDef.inputSchema).length > 0) {\n      process.stdout.write(\"\\nInput Schema:\\n\");\n      process.stdout.write(JSON.stringify(moduleDef.inputSchema, null, 2) + \"\\n\");\n    }\n\n    if (moduleDef.outputSchema && Object.keys(moduleDef.outputSchema).length > 0) {\n      process.stdout.write(\"\\nOutput Schema:\\n\");\n      process.stdout.write(JSON.stringify(moduleDef.outputSchema, null, 2) + \"\\n\");\n    }\n\n    const annDict = annotationsToDict(\n      moduleDef.annotations,\n    );\n    if (annDict) {\n      process.stdout.write(\"\\nAnnotations:\\n\");\n      for (const [k, v] of Object.entries(annDict)) {\n        process.stdout.write(`  ${k}: ${v}\\n`);\n      }\n    }\n\n    // Extension metadata (x- prefixed)\n    const metadata = moduleDef.metadata;\n    if (metadata) {\n      const xFields: Record<string, unknown> = {};\n      for (const [k, v] of Object.entries(metadata)) {\n        if (k.startsWith(\"x-\") || k.startsWith(\"x_\")) {\n          xFields[k] = v;\n        }\n      }\n      if (Object.keys(xFields).length > 0) {\n        process.stdout.write(\"\\nExtension Metadata:\\n\");\n        for (const [k, v] of Object.entries(xFields)) {\n          process.stdout.write(`  ${k}: ${v}\\n`);\n        }\n      }\n    }\n\n    const tags = moduleDef.tags ?? [];\n    if (tags.length > 0) {\n      process.stdout.write(`\\nTags: ${tags.join(\", \")}\\n`);\n    }\n  } else if (format === \"json\") {\n    const result: Record<string, unknown> = {\n      id: moduleDef.id,\n      description: moduleDef.description,\n    };\n    if (moduleDef.inputSchema) result.input_schema = moduleDef.inputSchema;\n    if (moduleDef.outputSchema) result.output_schema = moduleDef.outputSchema;\n\n    const annDict = annotationsToDict(\n      moduleDef.annotations,\n    );\n    if (annDict) result.annotations = annDict;\n\n    const tags = moduleDef.tags ?? [];\n    if (tags.length > 0) result.tags = tags;\n\n    // Extension metadata\n    const metadata = moduleDef.metadata;\n    if (metadata) {\n      for (const [k, v] of Object.entries(metadata)) {\n        if (k.startsWith(\"x-\") || k.startsWith(\"x_\")) {\n          result[k] = v;\n        }\n      }\n    }\n\n    process.stdout.write(JSON.stringify(result, null, 2) + \"\\n\");\n  }\n}\n\n// ---------------------------------------------------------------------------\n// formatExecResult\n// ---------------------------------------------------------------------------\n\n/**\n * Format and print module execution result.\n */\nexport function formatExecResult(\n  result: unknown,\n  format?: string,\n): void {\n  if (result === null || result === undefined) {\n    return;\n  }\n  const effective = resolveFormat(format);\n  if (\n    effective === \"table\" &&\n    typeof result === \"object\" &&\n    !Array.isArray(result)\n  ) {\n    // Key-value table\n    const entries = Object.entries(result as Record<string, unknown>);\n    const headers = [\"Key\", \"Value\"];\n    const rows = entries.map(([k, v]) => [String(k), String(v)]);\n    process.stdout.write(formatTable(headers, rows));\n  } else if (typeof result === \"object\") {\n    process.stdout.write(JSON.stringify(result, null, 2) + \"\\n\");\n  } else if (typeof result === \"string\") {\n    process.stdout.write(result + \"\\n\");\n  } else {\n    process.stdout.write(String(result) + \"\\n\");\n  }\n}\n","/**\n * Simple structured logger respecting logging.level config.\n */\n\nconst LEVELS = { DEBUG: 0, INFO: 1, WARNING: 2, ERROR: 3 } as const;\ntype LogLevel = keyof typeof LEVELS;\n\nlet currentLevel: LogLevel = \"WARNING\";\n\nexport function setLogLevel(level: string): void {\n  const upper = level.toUpperCase();\n  if (upper in LEVELS) {\n    currentLevel = upper as LogLevel;\n  }\n}\n\nexport function getLogLevel(): LogLevel {\n  return currentLevel;\n}\n\nfunction shouldLog(level: LogLevel): boolean {\n  return LEVELS[level] >= LEVELS[currentLevel];\n}\n\nexport function debug(message: string): void {\n  if (shouldLog(\"DEBUG\")) process.stderr.write(`DEBUG: ${message}\\n`);\n}\n\nexport function info(message: string): void {\n  if (shouldLog(\"INFO\")) process.stderr.write(`INFO: ${message}\\n`);\n}\n\nexport function warn(message: string): void {\n  if (shouldLog(\"WARNING\")) process.stderr.write(`WARNING: ${message}\\n`);\n}\n\nexport function error(message: string): void {\n  if (shouldLog(\"ERROR\")) process.stderr.write(`ERROR: ${message}\\n`);\n}\n"],"mappings":";;;;;;;AACA,OAAO,UAAU;AACjB,SAAS,qBAAqB;AAF9B;AAAA;AAAA;AAAA;AAAA;;;ACkGO,SAAS,iBAAiB,OAA0B;AACzD,MAAI,iBAAiB,sBAAsB;AACzC,WAAO,WAAW;AAAA,EACpB;AACA,MAAI,iBAAiB,qBAAqB;AACxC,WAAO,WAAW;AAAA,EACpB;AACA,MAAI,iBAAiB,qBAAqB;AACxC,WAAO,WAAW;AAAA,EACpB;AACA,MAAI,iBAAiB,uBAAuB;AAC1C,WAAO,WAAW;AAAA,EACpB;AACA,MAAI,iBAAiB,uBAAuB;AAC1C,WAAO,WAAW;AAAA,EACpB;AACA,MAAI,iBAAiB,qBAAqB;AACxC,WAAO,WAAW;AAAA,EACpB;AACA,MAAI,iBAAiB,sBAAsB;AACzC,WAAO,WAAW;AAAA,EACpB;AAGA,MAAI,iBAAiB,OAAO;AAC1B,UAAM,OAAQ,MAA6C;AAC3D,UAAM,UAAoC;AAAA,MACxC,kBAAkB,WAAW;AAAA,MAC7B,mBAAmB,WAAW;AAAA,MAC9B,iBAAiB,WAAW;AAAA,MAC5B,yBAAyB,WAAW;AAAA,MACpC,qBAAqB,WAAW;AAAA,MAChC,iBAAiB,WAAW;AAAA,MAC5B,kBAAkB,WAAW;AAAA,MAC7B,kBAAkB,WAAW;AAAA,MAC7B,gBAAgB,WAAW;AAAA,MAC3B,sBAAsB,WAAW;AAAA,MACjC,gBAAgB,WAAW;AAAA,MAC3B,YAAY,WAAW;AAAA,IACzB;AACA,QAAI,QAAQ,QAAQ,SAAS;AAC3B,aAAO,QAAQ,IAAI;AAAA,IACrB;AAAA,EACF;AAEA,SAAO,WAAW;AACpB;AAhJA,IAWa,sBAQA,qBAQA,uBAQA,sBAQA,qBAQA,uBAQA,qBAWA;AAtEb;AAAA;AAAA;AAAA;AAWO,IAAM,uBAAN,cAAmC,MAAM;AAAA,MAC9C,YAAY,UAAU,sBAAsB;AAC1C,cAAM,OAAO;AACb,aAAK,OAAO;AAAA,MACd;AAAA,IACF;AAGO,IAAM,sBAAN,cAAkC,MAAM;AAAA,MAC7C,YAAY,UAAU,yBAAyB;AAC7C,cAAM,OAAO;AACb,aAAK,OAAO;AAAA,MACd;AAAA,IACF;AAGO,IAAM,wBAAN,cAAoC,MAAM;AAAA,MAC/C,YAAY,UAAU,4BAA4B;AAChD,cAAM,OAAO;AACb,aAAK,OAAO;AAAA,MACd;AAAA,IACF;AAGO,IAAM,uBAAN,cAAmC,MAAM;AAAA,MAC9C,YAAY,UAAU,2BAA2B;AAC/C,cAAM,OAAO;AACb,aAAK,OAAO;AAAA,MACd;AAAA,IACF;AAGO,IAAM,sBAAN,cAAkC,MAAM;AAAA,MAC7C,YAAY,UAAU,mBAAmB;AACvC,cAAM,OAAO;AACb,aAAK,OAAO;AAAA,MACd;AAAA,IACF;AAGO,IAAM,wBAAN,cAAoC,MAAM;AAAA,MAC/C,YAAY,UAAU,4BAA4B;AAChD,cAAM,OAAO;AACb,aAAK,OAAO;AAAA,MACd;AAAA,IACF;AAGO,IAAM,sBAAN,cAAkC,MAAM;AAAA,MAC7C,YAAY,UAAU,oBAAoB;AACxC,cAAM,OAAO;AACb,aAAK,OAAO;AAAA,MACd;AAAA,IACF;AAMO,IAAM,aAAa;AAAA,MACxB,SAAS;AAAA,MACT,sBAAsB;AAAA,MACtB,gBAAgB;AAAA,MAChB,mBAAmB;AAAA,MACnB,kBAAkB;AAAA,MAClB,mBAAmB;AAAA,MACnB,iBAAiB;AAAA,MACjB,yBAAyB;AAAA,MACzB,iBAAiB;AAAA,MACjB,kBAAkB;AAAA,MAClB,kBAAkB;AAAA,MAClB,gBAAgB;AAAA,MAChB,qBAAqB;AAAA,MACrB,YAAY;AAAA,MACZ,oBAAoB;AAAA,IACtB;AAAA;AAAA;;;ACtFA;;;ACAA;AAUA;AAJA,SAAS,oBAAoB;AAC7B,SAAS,iBAAAA,sBAAqB;AAC9B,YAAYC,WAAU;AACtB,SAAS,SAAS,sBAAsB;;;ACTxC;AAMA;;;ACNA;AAOA;;;ACPA;AAQA;AAFA,YAAY,cAAc;;;ACN1B;;;ACAA;AAIA,IAAM,SAAS,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,EAAE;AAGzD,IAAI,eAAyB;AAEtB,SAAS,YAAY,OAAqB;AAC/C,QAAM,QAAQ,MAAM,YAAY;AAChC,MAAI,SAAS,QAAQ;AACnB,mBAAe;AAAA,EACjB;AACF;;;ALIA,IAAMC,aAAiB,cAAQC,eAAc,YAAY,GAAG,CAAC;AAC7D,IAAM,MAAM,KAAK,MAAM,aAAkB,cAAQD,YAAW,iBAAiB,GAAG,OAAO,CAAC;AACxF,IAAM,UAAkB,IAAI;AAsCrB,SAAS,UACd,eACA,UACS;AAET,QAAM,mBAAmB,YAAiB,eAAS,QAAQ,KAAK,CAAC,KAAK,YAAY,KAAK;AAGvF,QAAM,cAAc,QAAQ,IAAI,4BAA4B,QAAQ,IAAI,wBAAwB;AAChG,cAAY,WAAW;AAEvB,QAAM,UAAU,IAAI,QAAQ,gBAAgB,EACzC,aAAa,EACb,QAAQ,SAAS,aAAa,QAAQ,gBAAgB,UAAU,EAChE,YAAY,gEAA2D,EACvE,OAAO,2BAA2B,8BAA8B,EAChE,OAAO,uBAAuB,4CAA4C,SAAS;AAItF,OAAK;AAEL,SAAO;AACT;AASO,SAAS,KAAK,UAAyB;AAC5C,QAAM,UAAU,UAAU,QAAW,QAAQ;AAE7C,MAAI;AACF,YAAQ,MAAM,QAAQ,IAAI;AAAA,EAC5B,SAAS,OAAgB;AACvB,QAAI,iBAAiB,gBAAgB;AAEnC,cAAQ,KAAK,MAAM,QAAQ;AAAA,IAC7B;AACA,UAAM,OAAO,iBAAiB,KAAK;AACnC,QAAI,iBAAiB,OAAO;AAC1B,cAAQ,OAAO,MAAM,UAAU,MAAM,OAAO;AAAA,CAAI;AAAA,IAClD;AACA,YAAQ,KAAK,IAAI;AAAA,EACnB;AACF;;;ADjGA,KAAK,YAAY;","names":["fileURLToPath","path","__dirname","fileURLToPath"]}

package/dist/src/index.d.ts

@@ -39,8 +39,9 @@ interface ModuleDescriptor {
 declare class LazyModuleGroup {
     private readonly registry;
     readonly executor: Executor;
+    private readonly helpTextMaxLength;
     private commandCache;
-    constructor(registry: Registry, executor: Executor);
+    constructor(registry: Registry, executor: Executor, helpTextMaxLength?: number);
     /**
      * List all available command names from the Registry.
      *
@@ -96,7 +97,7 @@ declare function main(progName?: string): void;
 /**
  * Build a Commander Command for a single apcore module.
  */
-declare function buildModuleCommand(moduleDef: ModuleDescriptor, executor: Executor): Command;
+declare function buildModuleCommand(moduleDef: ModuleDescriptor, executor: Executor, helpTextMaxLength?: number): Command;
 /**
  * Validate that a module ID conforms to the expected format.
  * Pattern: [a-z][a-z0-9_]*(.[a-z][a-z0-9_])* — max 128 chars.
@@ -215,12 +216,12 @@ declare function mapType(propName: string, propSchema: Record<string, unknown>):
 /**
  * Extract help text from schema property, preferring x-llm-description.
  */
-declare function extractHelp(propSchema: Record<string, unknown>): string | undefined;
+declare function extractHelp(propSchema: Record<string, unknown>, maxLength?: number): string | undefined;
 /**
  * Convert a JSON Schema `properties` object into an array of
  * Commander option configurations.
  */
-declare function schemaToCliOptions(schema: Record<string, unknown>): OptionConfig[];
+declare function schemaToCliOptions(schema: Record<string, unknown>, maxHelpLength?: number): OptionConfig[];
 
 /**
  * Interactive approval prompts with timeout.

package/dist/src/index.js

@@ -8,11 +8,11 @@ var __export = (target, all) => {
     __defProp(target, name, { get: all[name], enumerable: true });
 };
 
-// node_modules/.pnpm/tsup@8.5.1_postcss@8.5.8_typescript@5.9.3/node_modules/tsup/assets/esm_shims.js
+// node_modules/tsup/assets/esm_shims.js
 import path from "path";
 import { fileURLToPath } from "url";
 var init_esm_shims = __esm({
-  "node_modules/.pnpm/tsup@8.5.1_postcss@8.5.8_typescript@5.9.3/node_modules/tsup/assets/esm_shims.js"() {
+  "node_modules/tsup/assets/esm_shims.js"() {
     "use strict";
   }
 });
@@ -663,7 +663,7 @@ function mapType(propName, propSchema) {
   }
   return typeMap[schemaType] ?? "string";
 }
-function extractHelp(propSchema) {
+function extractHelp(propSchema, maxLength = 1e3) {
   let text = propSchema["x-llm-description"];
   if (!text) {
     text = propSchema.description;
@@ -671,13 +671,13 @@ function extractHelp(propSchema) {
   if (!text) {
     return void 0;
   }
-  if (text.length > 200) {
-    return text.slice(0, 197) + "...";
+  if (maxLength > 0 && text.length > maxLength) {
+    return text.slice(0, maxLength - 3) + "...";
   }
   return text;
 }
 var RESERVED_NAMES = /* @__PURE__ */ new Set(["input", "yes", "large_input", "format", "sandbox"]);
-function schemaToCliOptions(schema) {
+function schemaToCliOptions(schema, maxHelpLength = 1e3) {
   const properties = schema.properties ?? {};
   const requiredList = schema.required ?? [];
   const options = [];
@@ -701,7 +701,7 @@ function schemaToCliOptions(schema) {
     }
     const typeResult = mapType(propName, propSchema);
     const isRequired = requiredList.includes(propName);
-    const helpBase = extractHelp(propSchema);
+    const helpBase = extractHelp(propSchema, maxHelpLength);
     const helpText = isRequired ? (helpBase ? helpBase + " " : "") + "[required]" : helpBase ?? "";
     const defaultValue = propSchema.default;
     if (typeResult === BOOLEAN_FLAG) {
@@ -1084,7 +1084,7 @@ function main(progName) {
     process.exit(code);
   }
 }
-function buildModuleCommand(moduleDef, executor) {
+function buildModuleCommand(moduleDef, executor, helpTextMaxLength = 1e3) {
   const moduleId = moduleDef.id;
   let resolvedSchema = {};
   let schemaOptions = [];
@@ -1095,7 +1095,7 @@ function buildModuleCommand(moduleDef, executor) {
     } catch {
       resolvedSchema = inputSchema;
     }
-    schemaOptions = schemaToCliOptions(resolvedSchema);
+    schemaOptions = schemaToCliOptions(resolvedSchema, helpTextMaxLength);
   }
   const cmd = new Command(moduleId).description(moduleDef.description);
   cmd.option("--input <source>", "Read input from STDIN ('-')");
@@ -1261,10 +1261,12 @@ init_esm_shims();
 var LazyModuleGroup = class {
   registry;
   executor;
+  helpTextMaxLength;
   commandCache = /* @__PURE__ */ new Map();
-  constructor(registry, executor) {
+  constructor(registry, executor, helpTextMaxLength = 1e3) {
     this.registry = registry;
     this.executor = executor;
+    this.helpTextMaxLength = helpTextMaxLength;
   }
   /**
    * List all available command names from the Registry.
@@ -1287,7 +1289,7 @@ var LazyModuleGroup = class {
     if (!moduleDef) {
       return null;
     }
-    const cmd = buildModuleCommand(moduleDef, this.executor);
+    const cmd = buildModuleCommand(moduleDef, this.executor, this.helpTextMaxLength);
     this.commandCache.set(cmdName, cmd);
     return cmd;
   }
@@ -1302,7 +1304,8 @@ var DEFAULTS = {
   "logging.level": "WARNING",
   "sandbox.enabled": false,
   "cli.stdin_buffer_limit": 10485760,
-  "cli.auto_approve": false
+  "cli.auto_approve": false,
+  "cli.help_text_max_length": 1e3
 };
 var ConfigResolver = class {
   cliFlags;

package/dist/src/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../node_modules/.pnpm/tsup@8.5.1_postcss@8.5.8_typescript@5.9.3/node_modules/tsup/assets/esm_shims.js","../../src/errors.ts","../../src/security/audit.ts","../../src/security/config-encryptor.ts","../../src/security/auth.ts","../../src/security/sandbox.ts","../../src/security/index.ts","../../src/index.ts","../../src/main.ts","../../src/ref-resolver.ts","../../src/schema-parser.ts","../../src/approval.ts","../../src/output.ts","../../src/logger.ts","../../src/cli.ts","../../src/config.ts","../../src/discovery.ts","../../src/shell.ts"],"sourcesContent":["// Shim globals in esm bundle\nimport path from 'node:path'\nimport { fileURLToPath } from 'node:url'\n\nconst getFilename = () => fileURLToPath(import.meta.url)\nconst getDirname = () => path.dirname(getFilename())\n\nexport const __dirname = /* @__PURE__ */ getDirname()\nexport const __filename = /* @__PURE__ */ getFilename()\n","/**\n * Error classes and exit code mapping for apcore-cli.\n *\n * Protocol spec: Error handling & exit codes\n */\n\n// ---------------------------------------------------------------------------\n// Error classes\n// ---------------------------------------------------------------------------\n\n/** Thrown when the user does not approve module execution within the timeout. */\nexport class ApprovalTimeoutError extends Error {\n  constructor(message = \"Approval timed out\") {\n    super(message);\n    this.name = \"ApprovalTimeoutError\";\n  }\n}\n\n/** Thrown when API key authentication fails or is missing. */\nexport class AuthenticationError extends Error {\n  constructor(message = \"Authentication failed\") {\n    super(message);\n    this.name = \"AuthenticationError\";\n  }\n}\n\n/** Thrown when encrypted config cannot be decrypted. */\nexport class ConfigDecryptionError extends Error {\n  constructor(message = \"Config decryption failed\") {\n    super(message);\n    this.name = \"ConfigDecryptionError\";\n  }\n}\n\n/** Thrown when module execution fails. */\nexport class ModuleExecutionError extends Error {\n  constructor(message = \"Module execution failed\") {\n    super(message);\n    this.name = \"ModuleExecutionError\";\n  }\n}\n\n/** Thrown when approval is denied by the user. */\nexport class ApprovalDeniedError extends Error {\n  constructor(message = \"Approval denied\") {\n    super(message);\n    this.name = \"ApprovalDeniedError\";\n  }\n}\n\n/** Thrown when schema validation fails. */\nexport class SchemaValidationError extends Error {\n  constructor(message = \"Schema validation failed\") {\n    super(message);\n    this.name = \"SchemaValidationError\";\n  }\n}\n\n/** Thrown when a module is not found. */\nexport class ModuleNotFoundError extends Error {\n  constructor(message = \"Module not found\") {\n    super(message);\n    this.name = \"ModuleNotFoundError\";\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Exit code map\n// ---------------------------------------------------------------------------\n\nexport const EXIT_CODES = {\n  SUCCESS: 0,\n  MODULE_EXECUTE_ERROR: 1,\n  MODULE_TIMEOUT: 1,\n  INVALID_CLI_INPUT: 2,\n  MODULE_NOT_FOUND: 44,\n  MODULE_LOAD_ERROR: 44,\n  MODULE_DISABLED: 44,\n  SCHEMA_VALIDATION_ERROR: 45,\n  APPROVAL_DENIED: 46,\n  APPROVAL_TIMEOUT: 46,\n  CONFIG_NOT_FOUND: 47,\n  CONFIG_INVALID: 47,\n  SCHEMA_CIRCULAR_REF: 48,\n  ACL_DENIED: 77,\n  KEYBOARD_INTERRUPT: 130,\n} as const;\n\nexport type ExitCode = (typeof EXIT_CODES)[keyof typeof EXIT_CODES];\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/**\n * Map a caught error to the appropriate process exit code.\n * Also checks for apcore error codes on the error object.\n */\nexport function exitCodeForError(error: unknown): ExitCode {\n  if (error instanceof ApprovalTimeoutError) {\n    return EXIT_CODES.APPROVAL_TIMEOUT;\n  }\n  if (error instanceof ApprovalDeniedError) {\n    return EXIT_CODES.APPROVAL_DENIED;\n  }\n  if (error instanceof AuthenticationError) {\n    return EXIT_CODES.ACL_DENIED;\n  }\n  if (error instanceof ConfigDecryptionError) {\n    return EXIT_CODES.CONFIG_INVALID;\n  }\n  if (error instanceof SchemaValidationError) {\n    return EXIT_CODES.SCHEMA_VALIDATION_ERROR;\n  }\n  if (error instanceof ModuleNotFoundError) {\n    return EXIT_CODES.MODULE_NOT_FOUND;\n  }\n  if (error instanceof ModuleExecutionError) {\n    return EXIT_CODES.MODULE_EXECUTE_ERROR;\n  }\n\n  // Check for apcore error codes on the error object\n  if (error instanceof Error) {\n    const code = (error as unknown as Record<string, unknown>).code as string | undefined;\n    const codeMap: Record<string, ExitCode> = {\n      MODULE_NOT_FOUND: EXIT_CODES.MODULE_NOT_FOUND,\n      MODULE_LOAD_ERROR: EXIT_CODES.MODULE_LOAD_ERROR,\n      MODULE_DISABLED: EXIT_CODES.MODULE_DISABLED,\n      SCHEMA_VALIDATION_ERROR: EXIT_CODES.SCHEMA_VALIDATION_ERROR,\n      SCHEMA_CIRCULAR_REF: EXIT_CODES.SCHEMA_CIRCULAR_REF,\n      APPROVAL_DENIED: EXIT_CODES.APPROVAL_DENIED,\n      APPROVAL_TIMEOUT: EXIT_CODES.APPROVAL_TIMEOUT,\n      CONFIG_NOT_FOUND: EXIT_CODES.CONFIG_NOT_FOUND,\n      CONFIG_INVALID: EXIT_CODES.CONFIG_INVALID,\n      MODULE_EXECUTE_ERROR: EXIT_CODES.MODULE_EXECUTE_ERROR,\n      MODULE_TIMEOUT: EXIT_CODES.MODULE_TIMEOUT,\n      ACL_DENIED: EXIT_CODES.ACL_DENIED,\n    };\n    if (code && code in codeMap) {\n      return codeMap[code];\n    }\n  }\n\n  return EXIT_CODES.MODULE_EXECUTE_ERROR;\n}\n","/**\n * AuditLogger — JSONL audit trail.\n *\n * Protocol spec: Security — audit logging\n */\n\nimport * as crypto from \"node:crypto\";\nimport * as fs from \"node:fs\";\nimport * as os from \"node:os\";\nimport * as path from \"node:path\";\n\n// ---------------------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------------------\n\ntype ExecutionStatus = \"success\" | \"error\";\n\ninterface AuditEntry {\n  timestamp: string;\n  user: string;\n  module_id: string;\n  input_hash: string;\n  status: ExecutionStatus;\n  exit_code: number;\n  duration_ms: number;\n}\n\n// ---------------------------------------------------------------------------\n// AuditLogger\n// ---------------------------------------------------------------------------\n\n/**\n * Appends structured JSONL entries to an audit log file for every module\n * execution, supporting compliance and debugging.\n */\nlet _auditLogger: AuditLogger | null = null;\n\n/**\n * Set the module-level audit logger instance.\n */\nexport function setAuditLogger(auditLogger: AuditLogger | null): void {\n  _auditLogger = auditLogger;\n}\n\n/**\n * Get the current module-level audit logger instance.\n */\nexport function getAuditLogger(): AuditLogger | null {\n  return _auditLogger;\n}\n\nexport class AuditLogger {\n  static readonly DEFAULT_PATH = path.join(\n    os.homedir(),\n    \".apcore-cli\",\n    \"audit.jsonl\",\n  );\n\n  private readonly logPath: string;\n\n  constructor(path?: string) {\n    this.logPath = path ?? AuditLogger.DEFAULT_PATH;\n    this.ensureDirectory();\n  }\n\n  private ensureDirectory(): void {\n    try {\n      fs.mkdirSync(path.dirname(this.logPath), { recursive: true });\n    } catch {\n      // Silently ignore — we'll handle write errors in logExecution\n    }\n  }\n\n  logExecution(\n    moduleId: string,\n    inputData: Record<string, unknown>,\n    status: ExecutionStatus,\n    exitCode: number,\n    durationMs: number,\n  ): void {\n    const entry: AuditEntry = {\n      timestamp: new Date().toISOString(),\n      user: this.getUser(),\n      module_id: moduleId,\n      input_hash: this.hashInput(inputData),\n      status,\n      exit_code: exitCode,\n      duration_ms: durationMs,\n    };\n    try {\n      fs.appendFileSync(this.logPath, JSON.stringify(entry) + \"\\n\");\n    } catch (err) {\n      console.warn(`Could not write audit log: ${err}`);\n    }\n  }\n\n  private hashInput(inputData: Record<string, unknown>): string {\n    const salt = crypto.randomBytes(16);\n    const sortedKeys = Object.keys(inputData).sort();\n    const payload = JSON.stringify(inputData, sortedKeys);\n    return crypto\n      .createHash(\"sha256\")\n      .update(Buffer.concat([salt, Buffer.from(payload, \"utf-8\")]))\n      .digest(\"hex\");\n  }\n\n  private getUser(): string {\n    try {\n      return os.userInfo().username;\n    } catch {\n      return process.env.USER ?? process.env.USERNAME ?? \"unknown\";\n    }\n  }\n}\n","/**\n * ConfigEncryptor — Keyring + AES-256-GCM fallback.\n *\n * Protocol spec: Security — config encryption\n */\n\nimport * as crypto from \"node:crypto\";\nimport * as os from \"node:os\";\nimport { ConfigDecryptionError } from \"../errors.js\";\n\n// ---------------------------------------------------------------------------\n// Keytar dynamic import helper\n// ---------------------------------------------------------------------------\n\nlet keytarModule: any = null; // eslint-disable-line @typescript-eslint/no-explicit-any\nasync function getKeytar(): Promise<any> { // eslint-disable-line @typescript-eslint/no-explicit-any\n  if (keytarModule) return keytarModule;\n  try {\n    // @ts-expect-error — keytar is an optional peer dependency\n    keytarModule = await import(\"keytar\");\n    return keytarModule;\n  } catch {\n    return null;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// ConfigEncryptor\n// ---------------------------------------------------------------------------\n\n/**\n * Encrypts and decrypts configuration values. Prefers OS keyring for key\n * storage, falling back to AES-256-GCM with a derived key.\n */\nexport class ConfigEncryptor {\n  static readonly SERVICE_NAME = \"apcore-cli\";\n\n  /**\n   * Encrypt and store a configuration value.\n   */\n  async store(key: string, value: string): Promise<string> {\n    const keytar = await getKeytar();\n    if (keytar) {\n      try {\n        await keytar.setPassword(ConfigEncryptor.SERVICE_NAME, key, value);\n        return `keyring:${key}`;\n      } catch {\n        // Fall through to file-based encryption\n      }\n    }\n    console.warn(\"OS keyring unavailable. Using file-based encryption.\");\n    const ciphertext = this.aesEncrypt(value);\n    return `enc:${Buffer.from(ciphertext).toString(\"base64\")}`;\n  }\n\n  /**\n   * Retrieve and decrypt a configuration value.\n   */\n  async retrieve(configValue: string, key: string): Promise<string> {\n    if (configValue.startsWith(\"keyring:\")) {\n      const keytar = await getKeytar();\n      if (!keytar) {\n        throw new ConfigDecryptionError(\n          `Keyring module not available to retrieve '${key}'.`,\n        );\n      }\n      try {\n        const refKey = configValue.slice(\"keyring:\".length);\n        const result = await keytar.getPassword(\n          ConfigEncryptor.SERVICE_NAME,\n          refKey,\n        );\n        if (result === null || result === undefined) {\n          throw new ConfigDecryptionError(\n            `Keyring entry not found for '${refKey}'.`,\n          );\n        }\n        return result;\n      } catch (err) {\n        if (err instanceof ConfigDecryptionError) throw err;\n        throw new ConfigDecryptionError(\n          `Failed to retrieve from keyring: ${err}`,\n        );\n      }\n    }\n\n    if (configValue.startsWith(\"enc:\")) {\n      const ciphertext = Buffer.from(\n        configValue.slice(\"enc:\".length),\n        \"base64\",\n      );\n      try {\n        return this.aesDecrypt(ciphertext);\n      } catch {\n        throw new ConfigDecryptionError(\n          `Failed to decrypt configuration value '${key}'. Re-configure with 'apcore-cli config set ${key}'.`,\n        );\n      }\n    }\n\n    // Unrecognized prefix — return as-is\n    return configValue;\n  }\n\n  // NOTE: Best-effort fallback when OS keyring is unavailable.\n  // The key is derived from hostname + username (non-secret inputs).\n  // For production security, ensure the OS keyring is accessible.\n  private deriveKey(): Buffer {\n    const hostname = os.hostname();\n    const username =\n      process.env.USER ?? process.env.USERNAME ?? \"unknown\";\n    const salt = Buffer.from(\"apcore-cli-config-v1\");\n    const material = `${hostname}:${username}`;\n    return crypto.pbkdf2Sync(material, salt, 100_000, 32, \"sha256\");\n  }\n\n  private aesEncrypt(plaintext: string): Buffer {\n    const key = this.deriveKey();\n    const nonce = crypto.randomBytes(12);\n    const cipher = crypto.createCipheriv(\"aes-256-gcm\", key, nonce);\n    const ct = Buffer.concat([\n      cipher.update(plaintext, \"utf-8\"),\n      cipher.final(),\n    ]);\n    const tag = cipher.getAuthTag();\n    // Wire format: nonce(12) + tag(16) + ciphertext\n    return Buffer.concat([nonce, tag, ct]);\n  }\n\n  private aesDecrypt(data: Buffer): string {\n    const key = this.deriveKey();\n    const nonce = data.subarray(0, 12);\n    const tag = data.subarray(12, 28);\n    const ct = data.subarray(28);\n    const decipher = crypto.createDecipheriv(\"aes-256-gcm\", key, nonce);\n    decipher.setAuthTag(tag);\n    const plaintext = Buffer.concat([decipher.update(ct), decipher.final()]);\n    return plaintext.toString(\"utf-8\");\n  }\n}\n","/**\n * AuthProvider — API key auth with keyring/encrypted storage.\n *\n * Protocol spec: Security — authentication\n */\n\nimport type { ConfigResolver } from \"../config.js\";\nimport { AuthenticationError } from \"../errors.js\";\nimport { ConfigEncryptor } from \"./config-encryptor.js\";\n\n// ---------------------------------------------------------------------------\n// AuthProvider\n// ---------------------------------------------------------------------------\n\n/**\n * Manages API key retrieval and request authentication.\n */\nexport class AuthProvider {\n  private readonly config: ConfigResolver;\n  private readonly encryptor: ConfigEncryptor;\n\n  constructor(config: ConfigResolver, encryptor?: ConfigEncryptor) {\n    this.config = config;\n    this.encryptor = encryptor ?? new ConfigEncryptor();\n  }\n\n  /**\n   * Retrieve the API key from the configured sources.\n   * Handles keyring: and enc: prefixes via ConfigEncryptor.\n   */\n  async getApiKey(): Promise<string | null> {\n    const result = this.config.resolve(\n      \"auth.api_key\",\n      \"--api-key\",\n      \"APCORE_AUTH_API_KEY\",\n    );\n    if (result === null || result === undefined) {\n      return null;\n    }\n    const strResult = String(result);\n    if (strResult.startsWith(\"keyring:\") || strResult.startsWith(\"enc:\")) {\n      return this.encryptor.retrieve(strResult, \"auth.api_key\");\n    }\n    return strResult;\n  }\n\n  /**\n   * Add authentication headers to an outgoing request.\n   */\n  async authenticateRequest(\n    headers: Record<string, string>,\n  ): Promise<Record<string, string>> {\n    const key = await this.getApiKey();\n    if (!key) {\n      throw new AuthenticationError(\n        \"Remote registry requires authentication. \" +\n          \"Set --api-key, APCORE_AUTH_API_KEY, or auth.api_key in config.\",\n      );\n    }\n    return { ...headers, Authorization: `Bearer ${key}` };\n  }\n\n  /**\n   * Handle an HTTP response status code for auth-related errors.\n   */\n  handleResponse(statusCode: number): void {\n    if (statusCode === 401 || statusCode === 403) {\n      throw new AuthenticationError(\n        \"Authentication failed. Verify your API key.\",\n      );\n    }\n  }\n}\n","/**\n * Sandbox — Subprocess isolation for module execution.\n *\n * Protocol spec: Security — sandboxed execution\n */\n\nimport * as child_process from \"node:child_process\";\nimport * as fs from \"node:fs\";\nimport * as os from \"node:os\";\nimport * as path from \"node:path\";\nimport type { Executor } from \"../cli.js\";\nimport { ModuleExecutionError } from \"../errors.js\";\n\n// ---------------------------------------------------------------------------\n// Sandbox\n// ---------------------------------------------------------------------------\n\n/**\n * Executes modules in an isolated subprocess to limit the blast radius\n * of untrusted or third-party modules.\n *\n * When disabled, delegates directly to the Executor.\n */\nexport class Sandbox {\n  private readonly enabled: boolean;\n\n  constructor(enabled = false) {\n    this.enabled = enabled;\n  }\n\n  /**\n   * Execute a module, optionally inside a sandboxed subprocess.\n   */\n  async execute(\n    moduleId: string,\n    inputData: Record<string, unknown>,\n    executor: Executor,\n  ): Promise<unknown> {\n    if (!this.enabled) {\n      return executor.execute(moduleId, inputData);\n    }\n    return this.sandboxedExecute(moduleId, inputData);\n  }\n\n  private sandboxedExecute(\n    moduleId: string,\n    inputData: Record<string, unknown>,\n  ): unknown {\n    // Build restricted environment\n    const env: Record<string, string> = {};\n    for (const key of [\"PATH\", \"NODE_PATH\", \"LANG\", \"LC_ALL\"]) {\n      if (process.env[key]) {\n        env[key] = process.env[key]!;\n      }\n    }\n    for (const [key, value] of Object.entries(process.env)) {\n      if (key.startsWith(\"APCORE_\") && value) {\n        env[key] = value;\n      }\n    }\n\n    const tmpDir = fs.mkdtempSync(\n      path.join(os.tmpdir(), \"apcore_sandbox_\"),\n    );\n\n    try {\n      env.HOME = tmpDir;\n      env.TMPDIR = tmpDir;\n\n      const script = [\n        \"let d='';\",\n        \"process.stdin.setEncoding('utf-8');\",\n        \"process.stdin.on('data',c=>d+=c);\",\n        \"process.stdin.on('end',()=>{\",\n        \"  const input=JSON.parse(d);\",\n        `  process.stdout.write(JSON.stringify({error:\"Sandbox runner not yet implemented for module: ${moduleId}\"}));`,\n        \"});\",\n      ].join(\"\");\n\n      const result = child_process.execFileSync(\n        process.execPath,\n        [\"-e\", script],\n        {\n          input: JSON.stringify(inputData),\n          env,\n          cwd: tmpDir,\n          timeout: 300_000,\n          maxBuffer: 10 * 1024 * 1024,\n        },\n      );\n\n      return JSON.parse(result.toString(\"utf-8\"));\n    } catch (err: unknown) {\n      if (\n        err instanceof Error &&\n        \"killed\" in err &&\n        (err as Record<string, unknown>).killed\n      ) {\n        throw new ModuleExecutionError(\n          `Error: Module '${moduleId}' timed out in sandbox.`,\n        );\n      }\n      const stderr =\n        err instanceof Error && \"stderr\" in err\n          ? String((err as Record<string, unknown>).stderr)\n          : String(err);\n      throw new ModuleExecutionError(\n        `Error: Module '${moduleId}' execution failed: ${stderr}`,\n      );\n    } finally {\n      try {\n        fs.rmSync(tmpDir, { recursive: true, force: true });\n      } catch {\n        // Best effort cleanup\n      }\n    }\n  }\n}\n","/**\n * Security module re-exports.\n *\n * Protocol spec: Security subsystem\n */\n\nexport { AuditLogger, setAuditLogger, getAuditLogger } from \"./audit.js\";\nexport { AuthProvider } from \"./auth.js\";\nexport { ConfigEncryptor } from \"./config-encryptor.js\";\nexport { Sandbox } from \"./sandbox.js\";\n","/**\n * apcore-cli — Public API exports.\n *\n * This module re-exports the public surface of the apcore CLI package.\n */\n\n// Core CLI\nexport { createCli, main, buildModuleCommand, validateModuleId, collectInput, reconvertEnumValues } from \"./main.js\";\nexport type { OptionConfig } from \"./main.js\";\n\n// Lazy module loading\nexport { LazyModuleGroup } from \"./cli.js\";\nexport type { Registry, Executor, ModuleDescriptor } from \"./cli.js\";\n\n// Configuration\nexport { ConfigResolver, DEFAULTS } from \"./config.js\";\n\n// Discovery\nexport { registerDiscoveryCommands } from \"./discovery.js\";\n\n// Output formatting\nexport { formatExecResult, resolveFormat, truncate, formatModuleList, formatModuleDetail } from \"./output.js\";\n\n// Schema handling\nexport { resolveRefs } from \"./ref-resolver.js\";\nexport { schemaToCliOptions, mapType, extractHelp } from \"./schema-parser.js\";\n\n// Approval\nexport { checkApproval } from \"./approval.js\";\n\n// Shell integration\nexport { registerShellCommands } from \"./shell.js\";\n\n// Errors\nexport {\n  ApprovalTimeoutError,\n  ApprovalDeniedError,\n  AuthenticationError,\n  ConfigDecryptionError,\n  ModuleExecutionError,\n  ModuleNotFoundError,\n  SchemaValidationError,\n  EXIT_CODES,\n  exitCodeForError,\n} from \"./errors.js\";\nexport type { ExitCode } from \"./errors.js\";\n\n// Logger\nexport { setLogLevel, getLogLevel, debug, info, warn, error } from \"./logger.js\";\n\n// Security\nexport { AuditLogger, setAuditLogger, getAuditLogger, AuthProvider, ConfigEncryptor, Sandbox } from \"./security/index.js\";\n","/**\n * CLI entry point — createCli / main equivalents.\n *\n * Protocol spec: CLI bootstrapping & command registration\n */\n\nimport { readFileSync } from \"node:fs\";\nimport { fileURLToPath } from \"node:url\";\nimport * as path from \"node:path\";\nimport { Command, CommanderError } from \"commander\";\nimport { EXIT_CODES, exitCodeForError } from \"./errors.js\";\nimport { resolveRefs } from \"./ref-resolver.js\";\nimport { schemaToCliOptions } from \"./schema-parser.js\";\nimport { checkApproval } from \"./approval.js\";\nimport { formatExecResult } from \"./output.js\";\nimport { setLogLevel } from \"./logger.js\";\nimport type { Executor, ModuleDescriptor } from \"./cli.js\";\n\nconst __dirname = path.dirname(fileURLToPath(import.meta.url));\nconst pkg = JSON.parse(readFileSync(path.resolve(__dirname, \"../package.json\"), \"utf-8\"));\nconst VERSION: string = pkg.version;\n\n// ---------------------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------------------\n\n/** Configuration for a single Commander option derived from a JSON Schema property. */\nexport interface OptionConfig {\n  /** The property name from the schema. */\n  name: string;\n  /** Commander flags string (e.g. \"--my-flag <value>\" or \"--flag, --no-flag\"). */\n  flags: string;\n  /** Help text for the option. */\n  description: string;\n  /** Default value. */\n  defaultValue?: unknown;\n  /** Whether the field is required (for display only). */\n  required: boolean;\n  /** Enum choices (string values). */\n  choices?: string[];\n  /** Whether this is a boolean flag pair (--flag/--no-flag). */\n  isBooleanFlag?: boolean;\n  /** Maps string enum value → original type name (\"int\", \"float\", \"bool\"). */\n  enumOriginalTypes?: Record<string, string>;\n  /** Parser function for Commander (e.g. parseInt, parseFloat). */\n  parseArg?: (value: string) => unknown;\n}\n\n// ---------------------------------------------------------------------------\n// createCli\n// ---------------------------------------------------------------------------\n\n/**\n * Build and return the top-level Commander program.\n *\n * @param extensionsDir  Path to the extensions directory (default: ./extensions)\n * @param progName       Program name shown in help (default: apcore-cli)\n */\nexport function createCli(\n  extensionsDir?: string,\n  progName?: string,\n): Command {\n  // Resolve program name\n  const resolvedProgName = progName ?? path.basename(process.argv[1] ?? \"apcore-cli\") ?? \"apcore-cli\";\n\n  // Resolve log level\n  const cliLogLevel = process.env.APCORE_CLI_LOGGING_LEVEL ?? process.env.APCORE_LOGGING_LEVEL ?? \"WARNING\";\n  setLogLevel(cliLogLevel);\n\n  const program = new Command(resolvedProgName)\n    .exitOverride()\n    .version(VERSION, \"--version\", `Show ${resolvedProgName} version`)\n    .description(\"apcore CLI — execute apcore modules from the command line\")\n    .option(\"--extensions-dir <path>\", \"Path to extensions directory\")\n    .option(\"--log-level <level>\", \"Logging level (DEBUG|INFO|WARNING|ERROR)\", \"WARNING\");\n\n  // NOTE: Full registry/executor wiring requires apcore-js to be available.\n  // For now, extensions-dir is accepted but not wired to a real registry.\n  void extensionsDir;\n\n  return program;\n}\n\n// ---------------------------------------------------------------------------\n// main\n// ---------------------------------------------------------------------------\n\n/**\n * Parse argv and run the CLI. Handles top-level error catching and exit codes.\n */\nexport function main(progName?: string): void {\n  const program = createCli(undefined, progName);\n\n  try {\n    program.parse(process.argv);\n  } catch (error: unknown) {\n    if (error instanceof CommanderError) {\n      // Commander already printed the error message\n      process.exit(error.exitCode);\n    }\n    const code = exitCodeForError(error);\n    if (error instanceof Error) {\n      process.stderr.write(`Error: ${error.message}\\n`);\n    }\n    process.exit(code);\n  }\n}\n\n// ---------------------------------------------------------------------------\n// buildModuleCommand\n// ---------------------------------------------------------------------------\n\n/**\n * Build a Commander Command for a single apcore module.\n */\nexport function buildModuleCommand(\n  moduleDef: ModuleDescriptor,\n  executor: Executor,\n): Command {\n  const moduleId = moduleDef.id;\n  let resolvedSchema: Record<string, unknown> = {};\n  let schemaOptions: OptionConfig[] = [];\n\n  // Resolve schema\n  const inputSchema = moduleDef.inputSchema;\n  if (inputSchema && typeof inputSchema === \"object\" && inputSchema.properties) {\n    try {\n      resolvedSchema = resolveRefs(inputSchema, 32, moduleId);\n    } catch {\n      resolvedSchema = inputSchema;\n    }\n    schemaOptions = schemaToCliOptions(resolvedSchema);\n  }\n\n  const cmd = new Command(moduleId).description(moduleDef.description);\n\n  // Built-in options\n  cmd.option(\"--input <source>\", \"Read input from STDIN ('-')\");\n  cmd.option(\"-y, --yes\", \"Bypass approval prompts\", false);\n  cmd.option(\"--large-input\", \"Allow STDIN input larger than 10MB\", false);\n  cmd.option(\"--format <format>\", \"Output format (json|table)\");\n  cmd.option(\"--sandbox\", \"Run module in subprocess sandbox\", false);\n\n  // Schema-generated options\n  for (const opt of schemaOptions) {\n    if (opt.parseArg) {\n      cmd.option(opt.flags, opt.description, opt.parseArg, opt.defaultValue);\n    } else {\n      cmd.option(opt.flags, opt.description, opt.defaultValue as string | boolean | undefined);\n    }\n  }\n\n  // Action callback\n  cmd.action(async (options: Record<string, unknown>) => {\n    // Pop built-in options\n    const stdinFlag = options.input as string | undefined;\n    const autoApprove = options.yes as boolean;\n    const largeInput = options.largeInput as boolean;\n    const outputFormat = options.format as string | undefined;\n    const sandboxEnabled = options.sandbox as boolean;\n\n    // Remove built-in keys from options to get schema kwargs\n    const schemaKwargs: Record<string, unknown> = {};\n    const builtinKeys = new Set([\"input\", \"yes\", \"largeInput\", \"format\", \"sandbox\"]);\n    for (const [k, v] of Object.entries(options)) {\n      if (!builtinKeys.has(k)) {\n        schemaKwargs[k] = v;\n      }\n    }\n\n    try {\n      // Collect and merge input\n      const merged = await collectInput(stdinFlag, schemaKwargs, largeInput);\n\n      // Reconvert enum values\n      const reconverted = reconvertEnumValues(merged, schemaOptions);\n\n      // Check approval\n      await checkApproval(moduleDef, autoApprove);\n\n      // Execute with timing\n      const { Sandbox } = await import(\"./security/index.js\");\n      const sandbox = new Sandbox(sandboxEnabled);\n      const startTime = performance.now();\n      const result = await sandbox.execute(moduleId, reconverted, executor);\n      const durationMs = Math.round(performance.now() - startTime);\n\n      // Audit log (success)\n      const { getAuditLogger } = await import(\"./security/audit.js\");\n      const auditLogger = getAuditLogger();\n      if (auditLogger) {\n        auditLogger.logExecution(moduleId, reconverted, \"success\", 0, durationMs);\n      }\n\n      // Format output\n      formatExecResult(result, outputFormat);\n    } catch (err: unknown) {\n      // Audit log (error)\n      const { getAuditLogger } = await import(\"./security/audit.js\");\n      const auditLogger = getAuditLogger();\n      const code = exitCodeForError(err);\n      if (auditLogger) {\n        auditLogger.logExecution(moduleId, {}, \"error\", code, 0);\n      }\n\n      if (err instanceof Error) {\n        process.stderr.write(`Error: ${err.message}\\n`);\n      }\n      process.exit(code);\n    }\n  });\n\n  return cmd;\n}\n\n// ---------------------------------------------------------------------------\n// validateModuleId\n// ---------------------------------------------------------------------------\n\n/**\n * Validate that a module ID conforms to the expected format.\n * Pattern: [a-z][a-z0-9_]*(.[a-z][a-z0-9_])* — max 128 chars.\n */\nexport function validateModuleId(moduleId: string): void {\n  if (moduleId.length > 128) {\n    process.stderr.write(\n      `Error: Invalid module ID format: '${moduleId}'. Maximum length is 128 characters.\\n`,\n    );\n    process.exit(EXIT_CODES.INVALID_CLI_INPUT);\n  }\n  if (!/^[a-z][a-z0-9_]*(\\.[a-z][a-z0-9_]*)*$/.test(moduleId)) {\n    process.stderr.write(\n      `Error: Invalid module ID format: '${moduleId}'.\\n`,\n    );\n    process.exit(EXIT_CODES.INVALID_CLI_INPUT);\n  }\n}\n\n// ---------------------------------------------------------------------------\n// collectInput\n// ---------------------------------------------------------------------------\n\n/**\n * Collect module input from stdin and/or CLI keyword arguments.\n */\nexport async function collectInput(\n  stdinFlag?: string,\n  cliKwargs: Record<string, unknown> = {},\n  largeInput?: boolean,\n): Promise<Record<string, unknown>> {\n  // Remove null/undefined values from CLI kwargs\n  const cliKwargsNonNull: Record<string, unknown> = {};\n  for (const [k, v] of Object.entries(cliKwargs)) {\n    if (v !== null && v !== undefined) {\n      cliKwargsNonNull[k] = v;\n    }\n  }\n\n  if (!stdinFlag) {\n    return cliKwargsNonNull;\n  }\n\n  if (stdinFlag === \"-\") {\n    const raw = await readStdin();\n    const rawSize = Buffer.byteLength(raw, \"utf-8\");\n\n    if (rawSize > 10_485_760 && !largeInput) {\n      process.stderr.write(\n        \"Error: STDIN input exceeds 10MB limit. Use --large-input to override.\\n\",\n      );\n      process.exit(EXIT_CODES.INVALID_CLI_INPUT);\n    }\n\n    if (!raw) {\n      return cliKwargsNonNull;\n    }\n\n    let stdinData: unknown;\n    try {\n      stdinData = JSON.parse(raw);\n    } catch {\n      process.stderr.write(\n        \"Error: STDIN does not contain valid JSON.\\n\",\n      );\n      process.exit(EXIT_CODES.INVALID_CLI_INPUT);\n    }\n\n    if (typeof stdinData !== \"object\" || stdinData === null || Array.isArray(stdinData)) {\n      process.stderr.write(\n        `Error: STDIN JSON must be an object, got ${Array.isArray(stdinData) ? \"array\" : typeof stdinData}.\\n`,\n      );\n      process.exit(EXIT_CODES.INVALID_CLI_INPUT);\n    }\n\n    // CLI flags override STDIN for duplicate keys\n    return { ...(stdinData as Record<string, unknown>), ...cliKwargsNonNull };\n  }\n\n  return cliKwargsNonNull;\n}\n\n/**\n * Read all data from stdin with proper cleanup.\n */\nfunction readStdin(): Promise<string> {\n  return new Promise((resolve, reject) => {\n    const chunks: Buffer[] = [];\n    const onData = (chunk: Buffer) => chunks.push(chunk);\n    const onEnd = () => {\n      cleanup();\n      resolve(Buffer.concat(chunks).toString(\"utf-8\"));\n    };\n    const onError = (err: Error) => {\n      cleanup();\n      reject(err);\n    };\n    const cleanup = () => {\n      process.stdin.removeListener(\"data\", onData);\n      process.stdin.removeListener(\"end\", onEnd);\n      process.stdin.removeListener(\"error\", onError);\n    };\n    process.stdin.on(\"data\", onData);\n    process.stdin.on(\"end\", onEnd);\n    process.stdin.on(\"error\", onError);\n    process.stdin.resume();\n  });\n}\n\n// ---------------------------------------------------------------------------\n// reconvertEnumValues\n// ---------------------------------------------------------------------------\n\n/**\n * Re-convert CLI string values back to their schema-typed equivalents\n * based on the option configs.\n */\nexport function reconvertEnumValues(\n  kwargs: Record<string, unknown>,\n  options: OptionConfig[],\n): Record<string, unknown> {\n  const result = { ...kwargs };\n  for (const opt of options) {\n    if (!opt.enumOriginalTypes) continue;\n    const paramName = opt.name;\n    if (!(paramName in result) || result[paramName] === null || result[paramName] === undefined) {\n      continue;\n    }\n    const strVal = String(result[paramName]);\n    const origType = opt.enumOriginalTypes[strVal];\n    if (origType === \"int\") {\n      result[paramName] = parseInt(strVal, 10);\n    } else if (origType === \"float\") {\n      result[paramName] = parseFloat(strVal);\n    } else if (origType === \"bool\") {\n      result[paramName] = strVal.toLowerCase() === \"true\";\n    }\n  }\n  return result;\n}\n","/**\n * JSON Schema $ref resolver.\n *\n * Protocol spec: Schema resolution & $ref handling\n */\n\nimport { EXIT_CODES } from \"./errors.js\";\n\n// ---------------------------------------------------------------------------\n// resolveRefs\n// ---------------------------------------------------------------------------\n\n/**\n * Resolve all $ref references in a JSON Schema.\n * Returns a fully inlined schema with $defs/definitions removed.\n */\nexport function resolveRefs(\n  schema: Record<string, unknown>,\n  maxDepth = 32,\n  moduleId = \"\",\n): Record<string, unknown> {\n  const cloned = structuredClone(schema);\n  const defs = (cloned.$defs ?? cloned.definitions ?? {}) as Record<\n    string,\n    unknown\n  >;\n  const result = resolveNode(\n    cloned,\n    defs,\n    new Set<string>(),\n    0,\n    maxDepth,\n    moduleId,\n  ) as Record<string, unknown>;\n\n  // Remove definition keys\n  delete result.$defs;\n  delete result.definitions;\n  return result;\n}\n\nfunction resolveNode(\n  node: unknown,\n  defs: Record<string, unknown>,\n  visited: Set<string>,\n  depth: number,\n  maxDepth: number,\n  moduleId: string,\n): unknown {\n  if (typeof node !== \"object\" || node === null || Array.isArray(node)) {\n    return node;\n  }\n\n  const obj = node as Record<string, unknown>;\n\n  // Handle $ref\n  if (\"$ref\" in obj) {\n    const refPath = obj.$ref as string;\n\n    if (depth >= maxDepth) {\n      process.stderr.write(\n        `Error: $ref resolution depth exceeded maximum of ${maxDepth} for module '${moduleId}'.\\n`,\n      );\n      process.exit(EXIT_CODES.SCHEMA_CIRCULAR_REF);\n    }\n\n    if (visited.has(refPath)) {\n      process.stderr.write(\n        `Error: Circular $ref detected in schema for module '${moduleId}' at path '${refPath}'.\\n`,\n      );\n      process.exit(EXIT_CODES.SCHEMA_CIRCULAR_REF);\n    }\n\n    // Parse ref target: extract key from \"#/$defs/Address\" → \"Address\"\n    const parts = refPath.split(\"/\");\n    const key = parts[parts.length - 1];\n\n    if (!(key in defs)) {\n      process.stderr.write(\n        `Error: Unresolvable $ref '${refPath}' in schema for module '${moduleId}'.\\n`,\n      );\n      process.exit(EXIT_CODES.SCHEMA_VALIDATION_ERROR);\n    }\n\n    const newVisited = new Set(visited);\n    newVisited.add(refPath);\n    return resolveNode(defs[key], defs, newVisited, depth + 1, maxDepth, moduleId);\n  }\n\n  // Handle allOf\n  if (\"allOf\" in obj && Array.isArray(obj.allOf)) {\n    const merged: Record<string, unknown> = {\n      properties: {},\n      required: [] as string[],\n    };\n    for (const subSchema of obj.allOf as unknown[]) {\n      const resolved = resolveNode(\n        subSchema,\n        defs,\n        visited,\n        depth + 1,\n        maxDepth,\n        moduleId,\n      ) as Record<string, unknown>;\n      if (resolved.properties) {\n        Object.assign(\n          merged.properties as Record<string, unknown>,\n          resolved.properties,\n        );\n      }\n      if (Array.isArray(resolved.required)) {\n        (merged.required as string[]).push(...resolved.required);\n      }\n    }\n    // Deduplicate required\n    merged.required = [...new Set(merged.required as string[])];\n    // Copy non-composition keys\n    for (const [k, v] of Object.entries(obj)) {\n      if (k !== \"allOf\" && !(k in merged)) {\n        merged[k] = v;\n      }\n    }\n    return merged;\n  }\n\n  // Handle anyOf / oneOf\n  for (const keyword of [\"anyOf\", \"oneOf\"]) {\n    if (keyword in obj && Array.isArray(obj[keyword])) {\n      const merged: Record<string, unknown> = {\n        properties: {},\n        required: [] as string[],\n      };\n      const allRequiredSets: Set<string>[] = [];\n      for (const subSchema of obj[keyword] as unknown[]) {\n        const resolved = resolveNode(\n          subSchema,\n          defs,\n          visited,\n          depth + 1,\n          maxDepth,\n          moduleId,\n        ) as Record<string, unknown>;\n        if (resolved.properties) {\n          Object.assign(\n            merged.properties as Record<string, unknown>,\n            resolved.properties,\n          );\n        }\n        if (Array.isArray(resolved.required)) {\n          allRequiredSets.push(new Set(resolved.required as string[]));\n        }\n      }\n      // Required = intersection of all branches\n      if (allRequiredSets.length > 0) {\n        let intersection = allRequiredSets[0];\n        for (let i = 1; i < allRequiredSets.length; i++) {\n          intersection = new Set(\n            [...intersection].filter((x) => allRequiredSets[i].has(x)),\n          );\n        }\n        merged.required = [...intersection];\n      } else {\n        merged.required = [];\n      }\n      // Copy non-composition keys\n      for (const [k, v] of Object.entries(obj)) {\n        if (k !== keyword && !(k in merged)) {\n          merged[k] = v;\n        }\n      }\n      return merged;\n    }\n  }\n\n  // Recursively process nested properties\n  if (\"properties\" in obj && typeof obj.properties === \"object\" && obj.properties !== null) {\n    const props = obj.properties as Record<string, unknown>;\n    for (const [propName, propSchema] of Object.entries(props)) {\n      props[propName] = resolveNode(\n        propSchema,\n        defs,\n        visited,\n        depth + 1,\n        maxDepth,\n        moduleId,\n      );\n    }\n  }\n\n  return obj;\n}\n","/**\n * JSON Schema -> Commander options mapping.\n *\n * Protocol spec: Schema-driven argument parsing\n */\n\nimport type { OptionConfig } from \"./main.js\";\nimport { EXIT_CODES } from \"./errors.js\";\n\n// ---------------------------------------------------------------------------\n// Internal helpers\n// ---------------------------------------------------------------------------\n\n/** Sentinel type marker for boolean flags. */\nconst BOOLEAN_FLAG = Symbol(\"BOOLEAN_FLAG\");\n\ntype TypeResult = \"string\" | \"int\" | \"float\" | typeof BOOLEAN_FLAG | \"file\";\n\n/**\n * Map JSON Schema type to a type identifier.\n */\nexport function mapType(propName: string, propSchema: Record<string, unknown>): TypeResult {\n  const schemaType = propSchema.type as string | undefined;\n\n  // Check file convention\n  if (\n    schemaType === \"string\" &&\n    (propName.endsWith(\"_file\") || propSchema[\"x-cli-file\"] === true)\n  ) {\n    return \"file\";\n  }\n\n  const typeMap: Record<string, TypeResult> = {\n    string: \"string\",\n    integer: \"int\",\n    number: \"float\",\n    boolean: BOOLEAN_FLAG,\n    object: \"string\",\n    array: \"string\",\n  };\n\n  if (!schemaType) {\n    return \"string\";\n  }\n\n  return typeMap[schemaType] ?? \"string\";\n}\n\n/**\n * Extract help text from schema property, preferring x-llm-description.\n */\nexport function extractHelp(propSchema: Record<string, unknown>): string | undefined {\n  let text = propSchema[\"x-llm-description\"] as string | undefined;\n  if (!text) {\n    text = propSchema.description as string | undefined;\n  }\n  if (!text) {\n    return undefined;\n  }\n  if (text.length > 200) {\n    return text.slice(0, 197) + \"...\";\n  }\n  return text;\n}\n\n// ---------------------------------------------------------------------------\n// schemaToCliOptions\n// ---------------------------------------------------------------------------\n\n/** Reserved CLI option names that cannot be used by schema properties. */\nconst RESERVED_NAMES = new Set([\"input\", \"yes\", \"large_input\", \"format\", \"sandbox\"]);\n\n/**\n * Convert a JSON Schema `properties` object into an array of\n * Commander option configurations.\n */\nexport function schemaToCliOptions(\n  schema: Record<string, unknown>,\n): OptionConfig[] {\n  const properties = (schema.properties ?? {}) as Record<\n    string,\n    Record<string, unknown>\n  >;\n  const requiredList = (schema.required ?? []) as string[];\n  const options: OptionConfig[] = [];\n  const flagNames: Record<string, string> = {};\n\n  for (const [propName, propSchema] of Object.entries(properties)) {\n    const flagName = \"--\" + propName.replace(/_/g, \"-\");\n\n    // Collision detection\n    if (flagName in flagNames) {\n      process.stderr.write(\n        `Error: Flag name collision: properties '${propName}' and '${flagNames[flagName]}' both map to '${flagName}'.\\n`,\n      );\n      process.exit(EXIT_CODES.INVALID_CLI_INPUT);\n    }\n    flagNames[flagName] = propName;\n\n    // Reserved name check\n    if (RESERVED_NAMES.has(propName)) {\n      process.stderr.write(\n        `Error: Module schema property '${propName}' conflicts with a reserved CLI option name. Rename the property.\\n`,\n      );\n      process.exit(EXIT_CODES.INVALID_CLI_INPUT);\n    }\n\n    const typeResult = mapType(propName, propSchema);\n    const isRequired = requiredList.includes(propName);\n    const helpBase = extractHelp(propSchema);\n    const helpText = isRequired\n      ? (helpBase ? helpBase + \" \" : \"\") + \"[required]\"\n      : helpBase ?? \"\";\n    const defaultValue = propSchema.default as unknown;\n\n    if (typeResult === BOOLEAN_FLAG) {\n      // Boolean flag pair: --flag/--no-flag\n      const flagBase = propName.replace(/_/g, \"-\");\n      const defaultVal = (propSchema.default as boolean) ?? false;\n      options.push({\n        name: propName,\n        flags: `--${flagBase}, --no-${flagBase}`,\n        description: helpText,\n        defaultValue: defaultVal,\n        required: false,\n        isBooleanFlag: true,\n      });\n    } else if (\"enum\" in propSchema && Array.isArray(propSchema.enum)) {\n      const enumValues = propSchema.enum as unknown[];\n      if (enumValues.length === 0) {\n        // Empty enum — fall back to plain string option\n        options.push({\n          name: propName,\n          flags: `${flagName} <value>`,\n          description: helpText,\n          defaultValue,\n          required: false,\n        });\n      } else {\n        const stringValues = enumValues.map(String);\n        const enumOriginalTypes: Record<string, string> = {};\n        for (const v of enumValues) {\n          if (typeof v === \"number\" && Number.isInteger(v)) {\n            enumOriginalTypes[String(v)] = \"int\";\n          } else if (typeof v === \"number\") {\n            enumOriginalTypes[String(v)] = \"float\";\n          } else if (typeof v === \"boolean\") {\n            enumOriginalTypes[String(v)] = \"bool\";\n          }\n        }\n        options.push({\n          name: propName,\n          flags: `${flagName} <value>`,\n          description: helpText,\n          defaultValue:\n            defaultValue !== undefined ? String(defaultValue) : undefined,\n          required: false,\n          choices: stringValues,\n          enumOriginalTypes:\n            Object.keys(enumOriginalTypes).length > 0\n              ? enumOriginalTypes\n              : undefined,\n        });\n      }\n    } else {\n      // Standard option\n      let parseArg: ((value: string) => unknown) | undefined;\n      if (typeResult === \"int\") {\n        parseArg = (v: string) => {\n          const n = parseInt(v, 10);\n          if (isNaN(n)) throw new Error(`Invalid integer: ${v}`);\n          return n;\n        };\n      } else if (typeResult === \"float\") {\n        parseArg = (v: string) => {\n          const n = parseFloat(v);\n          if (isNaN(n)) throw new Error(`Invalid number: ${v}`);\n          return n;\n        };\n      }\n      options.push({\n        name: propName,\n        flags: `${flagName} <value>`,\n        description: helpText,\n        defaultValue,\n        required: false,\n        parseArg,\n      });\n    }\n  }\n\n  return options;\n}\n","/**\n * Interactive approval prompts with timeout.\n *\n * Protocol spec: Approval workflow\n */\n\nimport * as readline from \"node:readline\";\nimport type { ModuleDescriptor } from \"./cli.js\";\nimport { ApprovalTimeoutError, EXIT_CODES } from \"./errors.js\";\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/**\n * Get an annotation value from either a dict or an object.\n */\nfunction getAnnotation(\n  annotations: unknown,\n  key: string,\n  defaultValue: unknown = undefined,\n): unknown {\n  if (!annotations || typeof annotations !== \"object\") return defaultValue;\n  const ann = annotations as Record<string, unknown>;\n  return key in ann ? ann[key] : defaultValue;\n}\n\n// ---------------------------------------------------------------------------\n// checkApproval\n// ---------------------------------------------------------------------------\n\n/**\n * Check if module requires approval and handle accordingly.\n * Returns normally if approved (or approval not required).\n * Calls process.exit(46) if denied/timed out/non-TTY.\n */\nexport async function checkApproval(\n  moduleDef: ModuleDescriptor,\n  autoApprove: boolean,\n): Promise<void> {\n  const annotations = moduleDef.annotations;\n\n  // Check if approval is required\n  let requiresApproval: boolean;\n  if (moduleDef.requiresApproval !== undefined) {\n    requiresApproval = moduleDef.requiresApproval;\n  } else if (annotations) {\n    requiresApproval = getAnnotation(annotations, \"requires_approval\", false) === true;\n  } else {\n    return; // No annotations, no approval needed\n  }\n\n  if (!requiresApproval) {\n    return;\n  }\n\n  const moduleId = moduleDef.id;\n\n  // Bypass: autoApprove flag (highest priority)\n  if (autoApprove) {\n    return;\n  }\n\n  // Bypass: APCORE_CLI_AUTO_APPROVE env var\n  const envVal = process.env.APCORE_CLI_AUTO_APPROVE ?? \"\";\n  if (envVal === \"1\") {\n    return;\n  }\n  if (envVal !== \"\" && envVal !== \"1\") {\n    process.stderr.write(\n      `Warning: APCORE_CLI_AUTO_APPROVE is set to '${envVal}', expected '1'. Ignoring.\\n`,\n    );\n  }\n\n  // Non-TTY check\n  if (!process.stdin.isTTY) {\n    process.stderr.write(\n      `Error: Module '${moduleId}' requires approval but no interactive ` +\n        \"terminal is available. Use --yes or set APCORE_CLI_AUTO_APPROVE=1 \" +\n        \"to bypass.\\n\",\n    );\n    process.exit(EXIT_CODES.APPROVAL_DENIED);\n  }\n\n  // TTY prompt\n  await promptWithTimeout(moduleDef, 60);\n}\n\n/**\n * Display approval prompt with timeout.\n */\nasync function promptWithTimeout(\n  moduleDef: ModuleDescriptor,\n  timeout: number,\n): Promise<void> {\n  // Clamp timeout\n  timeout = Math.max(1, Math.min(timeout, 3600));\n\n  const moduleId = moduleDef.id;\n  const annotations = moduleDef.annotations;\n  const message =\n    (annotations\n      ? (getAnnotation(annotations, \"approval_message\") as string | undefined)\n      : undefined) ??\n    `Module '${moduleId}' requires approval to execute.`;\n\n  process.stderr.write(message + \"\\n\");\n\n  const rl = readline.createInterface({\n    input: process.stdin,\n    output: process.stderr,\n  });\n\n  let timer: ReturnType<typeof setTimeout> | undefined;\n\n  try {\n    const answer = await Promise.race([\n      new Promise<string>((resolve) => {\n        rl.question(\"Proceed? [y/N] \", (ans) => resolve(ans));\n      }),\n      new Promise<never>((_, reject) => {\n        timer = setTimeout(() => {\n          reject(new ApprovalTimeoutError(\n            `Approval prompt timed out after ${timeout} seconds.`,\n          ));\n        }, timeout * 1000);\n      }),\n    ]);\n\n    // Clear the timeout — prompt resolved before timeout fired\n    if (timer) clearTimeout(timer);\n\n    const normalized = answer.trim().toLowerCase();\n    if (normalized === \"y\" || normalized === \"yes\") {\n      return;\n    }\n\n    process.stderr.write(\"Error: Approval denied.\\n\");\n    process.exit(EXIT_CODES.APPROVAL_DENIED);\n  } catch (err) {\n    if (timer) clearTimeout(timer);\n    if (err instanceof ApprovalTimeoutError) {\n      process.stderr.write(\n        `Error: Approval prompt timed out after ${timeout} seconds.\\n`,\n      );\n      process.exit(EXIT_CODES.APPROVAL_TIMEOUT);\n    }\n    throw err;\n  } finally {\n    rl.close();\n  }\n}\n","/**\n * TTY-adaptive output formatting (table/json).\n *\n * Protocol spec: Output formatting\n */\n\nimport type { ModuleDescriptor } from \"./cli.js\";\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/**\n * Resolve output format with TTY-adaptive default.\n */\nexport function resolveFormat(explicitFormat?: string): string {\n  if (explicitFormat !== undefined) {\n    return explicitFormat;\n  }\n  return process.stdout.isTTY ? \"table\" : \"json\";\n}\n\n/**\n * Truncate text to maxLength, appending '...' if needed.\n */\nexport function truncate(text: string, maxLength = 80): string {\n  if (text.length <= maxLength) {\n    return text;\n  }\n  return text.slice(0, maxLength - 3) + \"...\";\n}\n\n/**\n * Render a simple plain-text table with column headers.\n */\nfunction formatTable(\n  headers: string[],\n  rows: string[][],\n): string {\n  // Calculate column widths\n  const colWidths = headers.map((h, i) =>\n    Math.max(h.length, ...rows.map((r) => (r[i] ?? \"\").length)),\n  );\n\n  const sep = colWidths.map((w) => \"-\".repeat(w)).join(\"  \");\n  const headerLine = headers\n    .map((h, i) => h.padEnd(colWidths[i]))\n    .join(\"  \");\n  const dataLines = rows.map((row) =>\n    row.map((cell, i) => (cell ?? \"\").padEnd(colWidths[i])).join(\"  \"),\n  );\n\n  return [headerLine, sep, ...dataLines].join(\"\\n\") + \"\\n\";\n}\n\n// ---------------------------------------------------------------------------\n// formatModuleList\n// ---------------------------------------------------------------------------\n\n/**\n * Format and print a list of modules.\n */\nexport function formatModuleList(\n  modules: ModuleDescriptor[],\n  format: string,\n  filterTags?: string[],\n): void {\n  if (format === \"table\") {\n    if (modules.length === 0 && filterTags && filterTags.length > 0) {\n      process.stdout.write(\n        `No modules found matching tags: ${filterTags.join(\", \")}.\\n`,\n      );\n      return;\n    }\n    if (modules.length === 0) {\n      process.stdout.write(\"No modules found.\\n\");\n      return;\n    }\n\n    const headers = [\"ID\", \"Description\", \"Tags\"];\n    const rows = modules.map((m) => [\n      m.id,\n      truncate(m.description, 80),\n      (m.tags ?? []).join(\", \"),\n    ]);\n    process.stdout.write(formatTable(headers, rows));\n  } else if (format === \"json\") {\n    const result = modules.map((m) => ({\n      id: m.id,\n      description: m.description,\n      tags: m.tags ?? [],\n    }));\n    process.stdout.write(JSON.stringify(result, null, 2) + \"\\n\");\n  }\n}\n\n// ---------------------------------------------------------------------------\n// formatModuleDetail\n// ---------------------------------------------------------------------------\n\n/**\n * Convert annotations to a plain dict, filtering out falsy/default values.\n */\nfunction annotationsToDict(\n  annotations: unknown,\n): Record<string, unknown> | null {\n  if (!annotations) return null;\n  if (typeof annotations !== \"object\" || Array.isArray(annotations)) return null;\n  const result: Record<string, unknown> = {};\n  for (const [k, v] of Object.entries(annotations as Record<string, unknown>)) {\n    if (v !== null && v !== undefined && v !== false && v !== 0 && !(Array.isArray(v) && v.length === 0)) {\n      result[k] = v;\n    }\n  }\n  return Object.keys(result).length > 0 ? result : null;\n}\n\n/**\n * Format and print full module metadata.\n */\nexport function formatModuleDetail(\n  moduleDef: ModuleDescriptor,\n  format: string,\n): void {\n  if (format === \"table\") {\n    process.stdout.write(`\\nModule: ${moduleDef.id}\\n`);\n    process.stdout.write(`\\nDescription:\\n  ${moduleDef.description}\\n`);\n\n    if (moduleDef.inputSchema && Object.keys(moduleDef.inputSchema).length > 0) {\n      process.stdout.write(\"\\nInput Schema:\\n\");\n      process.stdout.write(JSON.stringify(moduleDef.inputSchema, null, 2) + \"\\n\");\n    }\n\n    if (moduleDef.outputSchema && Object.keys(moduleDef.outputSchema).length > 0) {\n      process.stdout.write(\"\\nOutput Schema:\\n\");\n      process.stdout.write(JSON.stringify(moduleDef.outputSchema, null, 2) + \"\\n\");\n    }\n\n    const annDict = annotationsToDict(\n      moduleDef.annotations,\n    );\n    if (annDict) {\n      process.stdout.write(\"\\nAnnotations:\\n\");\n      for (const [k, v] of Object.entries(annDict)) {\n        process.stdout.write(`  ${k}: ${v}\\n`);\n      }\n    }\n\n    // Extension metadata (x- prefixed)\n    const metadata = moduleDef.metadata;\n    if (metadata) {\n      const xFields: Record<string, unknown> = {};\n      for (const [k, v] of Object.entries(metadata)) {\n        if (k.startsWith(\"x-\") || k.startsWith(\"x_\")) {\n          xFields[k] = v;\n        }\n      }\n      if (Object.keys(xFields).length > 0) {\n        process.stdout.write(\"\\nExtension Metadata:\\n\");\n        for (const [k, v] of Object.entries(xFields)) {\n          process.stdout.write(`  ${k}: ${v}\\n`);\n        }\n      }\n    }\n\n    const tags = moduleDef.tags ?? [];\n    if (tags.length > 0) {\n      process.stdout.write(`\\nTags: ${tags.join(\", \")}\\n`);\n    }\n  } else if (format === \"json\") {\n    const result: Record<string, unknown> = {\n      id: moduleDef.id,\n      description: moduleDef.description,\n    };\n    if (moduleDef.inputSchema) result.input_schema = moduleDef.inputSchema;\n    if (moduleDef.outputSchema) result.output_schema = moduleDef.outputSchema;\n\n    const annDict = annotationsToDict(\n      moduleDef.annotations,\n    );\n    if (annDict) result.annotations = annDict;\n\n    const tags = moduleDef.tags ?? [];\n    if (tags.length > 0) result.tags = tags;\n\n    // Extension metadata\n    const metadata = moduleDef.metadata;\n    if (metadata) {\n      for (const [k, v] of Object.entries(metadata)) {\n        if (k.startsWith(\"x-\") || k.startsWith(\"x_\")) {\n          result[k] = v;\n        }\n      }\n    }\n\n    process.stdout.write(JSON.stringify(result, null, 2) + \"\\n\");\n  }\n}\n\n// ---------------------------------------------------------------------------\n// formatExecResult\n// ---------------------------------------------------------------------------\n\n/**\n * Format and print module execution result.\n */\nexport function formatExecResult(\n  result: unknown,\n  format?: string,\n): void {\n  if (result === null || result === undefined) {\n    return;\n  }\n  const effective = resolveFormat(format);\n  if (\n    effective === \"table\" &&\n    typeof result === \"object\" &&\n    !Array.isArray(result)\n  ) {\n    // Key-value table\n    const entries = Object.entries(result as Record<string, unknown>);\n    const headers = [\"Key\", \"Value\"];\n    const rows = entries.map(([k, v]) => [String(k), String(v)]);\n    process.stdout.write(formatTable(headers, rows));\n  } else if (typeof result === \"object\") {\n    process.stdout.write(JSON.stringify(result, null, 2) + \"\\n\");\n  } else if (typeof result === \"string\") {\n    process.stdout.write(result + \"\\n\");\n  } else {\n    process.stdout.write(String(result) + \"\\n\");\n  }\n}\n","/**\n * Simple structured logger respecting logging.level config.\n */\n\nconst LEVELS = { DEBUG: 0, INFO: 1, WARNING: 2, ERROR: 3 } as const;\ntype LogLevel = keyof typeof LEVELS;\n\nlet currentLevel: LogLevel = \"WARNING\";\n\nexport function setLogLevel(level: string): void {\n  const upper = level.toUpperCase();\n  if (upper in LEVELS) {\n    currentLevel = upper as LogLevel;\n  }\n}\n\nexport function getLogLevel(): LogLevel {\n  return currentLevel;\n}\n\nfunction shouldLog(level: LogLevel): boolean {\n  return LEVELS[level] >= LEVELS[currentLevel];\n}\n\nexport function debug(message: string): void {\n  if (shouldLog(\"DEBUG\")) process.stderr.write(`DEBUG: ${message}\\n`);\n}\n\nexport function info(message: string): void {\n  if (shouldLog(\"INFO\")) process.stderr.write(`INFO: ${message}\\n`);\n}\n\nexport function warn(message: string): void {\n  if (shouldLog(\"WARNING\")) process.stderr.write(`WARNING: ${message}\\n`);\n}\n\nexport function error(message: string): void {\n  if (shouldLog(\"ERROR\")) process.stderr.write(`ERROR: ${message}\\n`);\n}\n","/**\n * LazyModuleGroup — Dynamic command loading from Registry.\n *\n * Equivalent to the Python LazyModuleGroup. Dynamically discovers apcore\n * modules from the Registry and exposes them as Commander subcommands.\n *\n * Protocol spec: CLI command structure & lazy loading\n */\n\nimport { Command } from \"commander\";\nimport { buildModuleCommand } from \"./main.js\";\n\n// TODO: Import Registry and Executor from apcore-js once available\n// import type { Registry, Executor, ModuleDescriptor } from \"apcore-js\";\n\n// ---------------------------------------------------------------------------\n// Placeholder types until apcore-js types are available\n// ---------------------------------------------------------------------------\n\n/** Placeholder for apcore-js Registry. */\nexport interface Registry {\n  listModules(): ModuleDescriptor[];\n  getModule(moduleId: string): ModuleDescriptor | null;\n}\n\n/** Placeholder for apcore-js Executor. */\nexport interface Executor {\n  execute(moduleId: string, input: Record<string, unknown>): Promise<unknown>;\n}\n\n/** Placeholder for apcore-js ModuleDescriptor. */\nexport interface ModuleDescriptor {\n  id: string;\n  name: string;\n  description: string;\n  tags?: string[];\n  inputSchema?: Record<string, unknown>;\n  outputSchema?: Record<string, unknown>;\n  requiresApproval?: boolean;\n  annotations?: Record<string, unknown>;\n  metadata?: Record<string, unknown>;\n}\n\n// ---------------------------------------------------------------------------\n// LazyModuleGroup\n// ---------------------------------------------------------------------------\n\n/**\n * Dynamically loads apcore modules as Commander subcommands from Registry.\n *\n * TODO: Implement lazy loading — commands should only be fully built when\n * actually invoked, not at registration time.\n */\nexport class LazyModuleGroup {\n  private readonly registry: Registry;\n  readonly executor: Executor;\n  private commandCache: Map<string, Command> = new Map();\n\n  constructor(registry: Registry, executor: Executor) {\n    this.registry = registry;\n    this.executor = executor;\n  }\n\n  /**\n   * List all available command names from the Registry.\n   *\n   * TODO: Implement registry enumeration.\n   */\n  listCommands(): string[] {\n    // TODO: Query registry for all module IDs\n    return this.registry.listModules().map((m) => m.id);\n  }\n\n  /**\n   * Get or lazily build a Commander Command for the given module.\n   *\n   * TODO: Implement lazy command construction with schema-based options.\n   */\n  getCommand(cmdName: string): Command | null {\n    if (this.commandCache.has(cmdName)) {\n      return this.commandCache.get(cmdName)!;\n    }\n\n    const moduleDef = this.registry.getModule(cmdName);\n    if (!moduleDef) {\n      return null;\n    }\n\n    const cmd = buildModuleCommand(moduleDef, this.executor);\n    this.commandCache.set(cmdName, cmd);\n    return cmd;\n  }\n}\n","/**\n * ConfigResolver — 4-tier config resolution (CLI flag > env > file > default).\n *\n * Protocol spec: Configuration resolution\n */\n\nimport * as fs from \"node:fs\";\nimport yaml from \"js-yaml\";\n\n// ---------------------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------------------\n\n/** Default configuration values. */\nexport const DEFAULTS: Record<string, unknown> = {\n  \"extensions.root\": \"./extensions\",\n  \"logging.level\": \"WARNING\",\n  \"sandbox.enabled\": false,\n  \"cli.stdin_buffer_limit\": 10_485_760,\n  \"cli.auto_approve\": false,\n};\n\n// ---------------------------------------------------------------------------\n// ConfigResolver\n// ---------------------------------------------------------------------------\n\n/**\n * Resolves configuration from four tiers (highest to lowest priority):\n *   1. CLI flags\n *   2. Environment variables\n *   3. Config file (YAML/JSON)\n *   4. Built-in defaults\n */\nexport class ConfigResolver {\n  private readonly cliFlags: Record<string, unknown>;\n  private readonly configPath: string;\n  private fileCache: Record<string, unknown> | null = null;\n  private fileCacheLoaded = false;\n\n  constructor(cliFlags?: Record<string, unknown>, configPath?: string) {\n    this.cliFlags = cliFlags ?? {};\n    this.configPath = configPath ?? \"apcore.yaml\";\n  }\n\n  /**\n   * Resolve a single configuration key across all four tiers.\n   */\n  resolve(key: string, cliFlag?: string, envVar?: string): unknown {\n    // Tier 1: CLI flag\n    const flagKey = cliFlag ?? key;\n    if (flagKey in this.cliFlags) {\n      const value = this.cliFlags[flagKey];\n      if (value !== null && value !== undefined) {\n        return value;\n      }\n    }\n\n    // Tier 2: Environment variable\n    if (envVar) {\n      const envValue = process.env[envVar];\n      if (envValue !== undefined && envValue !== \"\") {\n        return envValue;\n      }\n    }\n\n    // Tier 3: Config file\n    const fileValue = this.resolveFromFile(key);\n    if (fileValue !== undefined) {\n      return fileValue;\n    }\n\n    // Tier 4: Defaults\n    return DEFAULTS[key];\n  }\n\n  /**\n   * Load a value from the config file using a dot-separated key path.\n   */\n  private resolveFromFile(key: string): unknown {\n    if (!this.fileCacheLoaded) {\n      this.fileCache = this.loadConfigFile();\n      this.fileCacheLoaded = true;\n    }\n    if (this.fileCache === null) {\n      return undefined;\n    }\n    return this.fileCache[key];\n  }\n\n  /**\n   * Load and flatten a YAML config file.\n   */\n  private loadConfigFile(): Record<string, unknown> | null {\n    let content: string;\n    try {\n      content = fs.readFileSync(this.configPath, \"utf-8\");\n    } catch (err: unknown) {\n      if (err instanceof Error && \"code\" in err && err.code === \"ENOENT\") {\n        return null;\n      }\n      console.warn(\n        `Configuration file '${this.configPath}' is malformed, using defaults.`,\n      );\n      return null;\n    }\n\n    let parsed: unknown;\n    try {\n      parsed = yaml.load(content);\n    } catch {\n      console.warn(\n        `Configuration file '${this.configPath}' is malformed, using defaults.`,\n      );\n      return null;\n    }\n\n    if (typeof parsed !== \"object\" || parsed === null || Array.isArray(parsed)) {\n      console.warn(\n        `Configuration file '${this.configPath}' is malformed, using defaults.`,\n      );\n      return null;\n    }\n\n    return this.flattenDict(parsed as Record<string, unknown>);\n  }\n\n  /**\n   * Flatten nested dict to dot-notation keys.\n   */\n  private flattenDict(\n    d: Record<string, unknown>,\n    prefix = \"\",\n  ): Record<string, unknown> {\n    const result: Record<string, unknown> = {};\n    for (const [key, value] of Object.entries(d)) {\n      const fullKey = prefix ? `${prefix}.${key}` : key;\n      if (\n        typeof value === \"object\" &&\n        value !== null &&\n        !Array.isArray(value)\n      ) {\n        Object.assign(\n          result,\n          this.flattenDict(value as Record<string, unknown>, fullKey),\n        );\n      } else {\n        result[fullKey] = value;\n      }\n    }\n    return result;\n  }\n}\n","/**\n * Discovery commands — list and describe modules.\n *\n * Protocol spec: Module discovery & introspection\n */\n\nimport { Command } from \"commander\";\nimport type { ModuleDescriptor, Registry } from \"./cli.js\";\nimport { EXIT_CODES } from \"./errors.js\";\nimport { validateModuleId } from \"./main.js\";\nimport {\n  formatModuleDetail,\n  formatModuleList,\n  resolveFormat,\n} from \"./output.js\";\n\nconst TAG_PATTERN = /^[a-z][a-z0-9_-]*$/;\n\nfunction validateTag(tag: string): void {\n  if (!TAG_PATTERN.test(tag)) {\n    process.stderr.write(\n      `Error: Invalid tag format: '${tag}'. Tags must match [a-z][a-z0-9_-]*.\\n`,\n    );\n    process.exit(EXIT_CODES.INVALID_CLI_INPUT);\n  }\n}\n\n/**\n * Collect repeated --tag options into an array.\n */\nfunction collectTag(value: string, previous: string[]): string[] {\n  return previous.concat([value]);\n}\n\n/**\n * Register list and describe commands on the CLI group.\n */\nexport function registerDiscoveryCommands(\n  cli: Command,\n  registry: Registry,\n): void {\n  const listCmd = new Command(\"list\")\n    .description(\"List available modules in the registry.\")\n    .option(\"--tag <tag>\", \"Filter modules by tag (AND logic). Repeatable.\", collectTag, [])\n    .option(\"--format <format>\", \"Output format.\", undefined)\n    .action((opts: { tag: string[]; format?: string }) => {\n      // Validate tags\n      for (const t of opts.tag) {\n        validateTag(t);\n      }\n\n      const modules: ModuleDescriptor[] = [];\n      for (const m of registry.listModules()) {\n        modules.push(m);\n      }\n\n      let filtered = modules;\n      if (opts.tag.length > 0) {\n        const filterTags = new Set(opts.tag);\n        filtered = modules.filter((m) => {\n          const mTags = m.tags ?? [];\n          return [...filterTags].every((t) => mTags.includes(t));\n        });\n      }\n\n      const fmt = resolveFormat(opts.format);\n      formatModuleList(filtered, fmt, opts.tag.length > 0 ? opts.tag : undefined);\n    });\n  cli.addCommand(listCmd);\n\n  const describeCmd = new Command(\"describe\")\n    .description(\"Show metadata, schema, and annotations for a module.\")\n    .argument(\"<module-id>\", \"Module ID to describe\")\n    .option(\"--format <format>\", \"Output format.\", undefined)\n    .action((moduleId: string, opts: { format?: string }) => {\n      validateModuleId(moduleId);\n\n      const moduleDef = registry.getModule(moduleId);\n      if (!moduleDef) {\n        process.stderr.write(\n          `Error: Module '${moduleId}' not found.\\n`,\n        );\n        process.exit(EXIT_CODES.MODULE_NOT_FOUND);\n      }\n\n      const fmt = resolveFormat(opts.format);\n      formatModuleDetail(moduleDef, fmt);\n    });\n  cli.addCommand(describeCmd);\n}\n","/**\n * Shell completion + man page generation.\n *\n * Protocol spec: Shell integration\n */\n\nimport { readFileSync } from \"node:fs\";\nimport { fileURLToPath } from \"node:url\";\nimport * as path from \"node:path\";\nimport { Command } from \"commander\";\nimport { EXIT_CODES } from \"./errors.js\";\n\nconst __dirname = path.dirname(fileURLToPath(import.meta.url));\nconst pkg = JSON.parse(readFileSync(path.resolve(__dirname, \"../package.json\"), \"utf-8\"));\nconst SHELL_VERSION: string = pkg.version;\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/**\n * Convert a prog_name like 'my-tool' to a valid shell identifier '_my_tool'.\n */\nfunction makeFunctionName(progName: string): string {\n  return \"_\" + progName.replace(/[^a-zA-Z0-9]/g, \"_\");\n}\n\n/**\n * Shell-safe quoting.\n */\nfunction shellQuote(s: string): string {\n  return \"'\" + s.replace(/'/g, \"'\\\\''\") + \"'\";\n}\n\n// ---------------------------------------------------------------------------\n// Completion generators\n// ---------------------------------------------------------------------------\n\nfunction generateBashCompletion(progName: string): string {\n  const fn = makeFunctionName(progName);\n  const quoted = shellQuote(progName);\n  const moduleListCmd =\n    `${quoted} list --format json 2>/dev/null` +\n    ` | node -e \"process.stdin.on('data',d=>{JSON.parse(d).forEach(m=>console.log(m.id))})\" 2>/dev/null`;\n\n  return (\n    `${fn}() {\\n` +\n    `    local cur prev opts\\n` +\n    `    COMPREPLY=()\\n` +\n    `    cur=\"\\${COMP_WORDS[COMP_CWORD]}\"\\n` +\n    `    prev=\"\\${COMP_WORDS[COMP_CWORD-1]}\"\\n` +\n    `\\n` +\n    `    if [[ \\${COMP_CWORD} -eq 1 ]]; then\\n` +\n    `        opts=\"list describe completion man\"\\n` +\n    `        COMPREPLY=( $(compgen -W \"\\${opts}\" -- \\${cur}) )\\n` +\n    `        return 0\\n` +\n    `    fi\\n` +\n    `\\n` +\n    `    if [[ \"\\${COMP_WORDS[1]}\" == \"exec\" && \\${COMP_CWORD} -eq 2 ]]; then\\n` +\n    `        local modules=$(${moduleListCmd})\\n` +\n    `        COMPREPLY=( $(compgen -W \"\\${modules}\" -- \\${cur}) )\\n` +\n    `        return 0\\n` +\n    `    fi\\n` +\n    `}\\n` +\n    `complete -F ${fn} ${quoted}\\n`\n  );\n}\n\nfunction generateZshCompletion(progName: string): string {\n  const fn = makeFunctionName(progName);\n  const quoted = shellQuote(progName);\n  const moduleListCmd =\n    `${quoted} list --format json 2>/dev/null` +\n    ` | node -e \"process.stdin.on('data',d=>{JSON.parse(d).forEach(m=>console.log(m.id))})\" 2>/dev/null`;\n\n  return (\n    `#compdef ${progName}\\n` +\n    `\\n` +\n    `${fn}() {\\n` +\n    `    local -a commands\\n` +\n    `    commands=(\\n` +\n    `        'list:List available modules'\\n` +\n    `        'describe:Show module metadata and schema'\\n` +\n    `        'completion:Generate shell completion script'\\n` +\n    `        'man:Generate man page'\\n` +\n    `    )\\n` +\n    `\\n` +\n    `    _arguments -C \\\\\\n` +\n    `        '1:command:->command' \\\\\\n` +\n    `        '*::arg:->args'\\n` +\n    `\\n` +\n    `    case \"$state\" in\\n` +\n    `        command)\\n` +\n    `            _describe -t commands '${progName} commands' commands\\n` +\n    `            ;;\\n` +\n    `        args)\\n` +\n    `            case \"\\${words[1]}\" in\\n` +\n    `                exec)\\n` +\n    `                    local modules\\n` +\n    `                    modules=($(${moduleListCmd}))\\n` +\n    `                    compadd -a modules\\n` +\n    `                    ;;\\n` +\n    `            esac\\n` +\n    `            ;;\\n` +\n    `    esac\\n` +\n    `}\\n` +\n    `\\n` +\n    `compdef ${fn} ${quoted}\\n`\n  );\n}\n\nfunction generateFishCompletion(progName: string): string {\n  const quoted = shellQuote(progName);\n  const moduleListCmd =\n    `${quoted} list --format json 2>/dev/null` +\n    ` | node -e \\\\\"process.stdin.on('data',d=>{JSON.parse(d).forEach(m=>console.log(m.id))})\\\\\" 2>/dev/null`;\n\n  return (\n    `# Fish completions for ${progName}\\n` +\n    `complete -c ${quoted} -n \"__fish_use_subcommand\"` +\n    ` -a list -d \"List available modules\"\\n` +\n    `complete -c ${quoted} -n \"__fish_use_subcommand\"` +\n    ` -a describe -d \"Show module metadata and schema\"\\n` +\n    `complete -c ${quoted} -n \"__fish_use_subcommand\"` +\n    ` -a completion -d \"Generate shell completion script\"\\n` +\n    `complete -c ${quoted} -n \"__fish_use_subcommand\"` +\n    ` -a man -d \"Generate man page\"\\n` +\n    `\\n` +\n    `complete -c ${quoted} -n \"__fish_seen_subcommand_from exec\"` +\n    ` -a \"(${moduleListCmd})\"\\n`\n  );\n}\n\n// ---------------------------------------------------------------------------\n// Man page generation\n// ---------------------------------------------------------------------------\n\nfunction buildSynopsis(\n  command: Command | null,\n  progName: string,\n  commandName: string,\n): string {\n  if (!command) {\n    return `\\\\fB${progName} ${commandName}\\\\fR [OPTIONS]`;\n  }\n\n  const parts = [`\\\\fB${progName} ${commandName}\\\\fR`];\n  for (const opt of command.options) {\n    const flag = opt.long ?? opt.short ?? \"\";\n    if (opt.isBoolean?.()) {\n      parts.push(`[${flag}]`);\n    } else if (opt.required) {\n      const typeName = (opt.argChoices ? \"CHOICE\" : \"VALUE\").toUpperCase();\n      parts.push(`${flag} \\\\fI${typeName}\\\\fR`);\n    } else {\n      const typeName = (opt.argChoices ? \"CHOICE\" : \"VALUE\").toUpperCase();\n      parts.push(`[${flag} \\\\fI${typeName}\\\\fR]`);\n    }\n  }\n\n  for (const arg of command.registeredArguments ?? []) {\n    const meta = arg.name().toUpperCase();\n    if (arg.required) {\n      parts.push(`\\\\fI${meta}\\\\fR`);\n    } else {\n      parts.push(`[\\\\fI${meta}\\\\fR]`);\n    }\n  }\n\n  return parts.join(\" \");\n}\n\nfunction generateManPage(\n  commandName: string,\n  command: Command | null,\n  progName: string,\n  version = SHELL_VERSION,\n): string {\n  const today = new Date().toISOString().slice(0, 10);\n  const title = `${progName}-${commandName}`.toUpperCase();\n  const pkgLabel = `${progName} ${version}`;\n  const manualLabel = `${progName} Manual`;\n\n  const sections: string[] = [];\n  sections.push(`.TH \"${title}\" \"1\" \"${today}\" \"${pkgLabel}\" \"${manualLabel}\"`);\n\n  sections.push(\".SH NAME\");\n  const desc = command?.description() ?? commandName;\n  const nameDesc = desc.split(\"\\n\")[0].replace(/\\.$/, \"\");\n  sections.push(`${progName}-${commandName} \\\\- ${nameDesc}`);\n\n  sections.push(\".SH SYNOPSIS\");\n  sections.push(buildSynopsis(command, progName, commandName));\n\n  if (command?.description()) {\n    sections.push(\".SH DESCRIPTION\");\n    sections.push(\n      command.description().replace(/\\\\/g, \"\\\\\\\\\").replace(/-/g, \"\\\\-\"),\n    );\n  }\n\n  if (command && command.options.length > 0) {\n    sections.push(\".SH OPTIONS\");\n    for (const opt of command.options) {\n      const flag = [opt.short, opt.long].filter(Boolean).join(\", \");\n      sections.push(\".TP\");\n      if (opt.isBoolean?.()) {\n        sections.push(`\\\\fB${flag}\\\\fR`);\n      } else {\n        sections.push(`\\\\fB${flag}\\\\fR \\\\fIVALUE\\\\fR`);\n      }\n      if (opt.description) {\n        sections.push(opt.description);\n      }\n      if (opt.defaultValue !== undefined && !opt.isBoolean?.()) {\n        sections.push(`Default: ${opt.defaultValue}.`);\n      }\n    }\n  }\n\n  sections.push(\".SH ENVIRONMENT\");\n  sections.push(\".TP\");\n  sections.push(\"\\\\fBAPCORE_EXTENSIONS_ROOT\\\\fR\");\n  sections.push(\n    \"Path to the apcore extensions directory. Overrides the default \\\\fI./extensions\\\\fR.\",\n  );\n  sections.push(\".TP\");\n  sections.push(\"\\\\fBAPCORE_CLI_AUTO_APPROVE\\\\fR\");\n  sections.push(\n    \"Set to \\\\fB1\\\\fR to bypass approval prompts for modules that require human-in-the-loop confirmation.\",\n  );\n  sections.push(\".TP\");\n  sections.push(\"\\\\fBAPCORE_CLI_LOGGING_LEVEL\\\\fR\");\n  sections.push(\n    \"CLI-specific logging verbosity. One of: DEBUG, INFO, WARNING, ERROR. \" +\n      \"Takes priority over \\\\fBAPCORE_LOGGING_LEVEL\\\\fR. Default: WARNING.\",\n  );\n  sections.push(\".TP\");\n  sections.push(\"\\\\fBAPCORE_LOGGING_LEVEL\\\\fR\");\n  sections.push(\n    \"Global apcore logging verbosity. One of: DEBUG, INFO, WARNING, ERROR. \" +\n      \"Used as fallback when \\\\fBAPCORE_CLI_LOGGING_LEVEL\\\\fR is not set. Default: WARNING.\",\n  );\n\n  sections.push(\".SH EXIT CODES\");\n  const exitCodes: [string, string][] = [\n    [\"0\", \"Success.\"],\n    [\"1\", \"Module execution error.\"],\n    [\"2\", \"Invalid CLI input or missing argument.\"],\n    [\"44\", \"Module not found, disabled, or failed to load.\"],\n    [\"45\", \"Input failed JSON Schema validation.\"],\n    [\n      \"46\",\n      \"Approval denied, timed out, or no interactive terminal available.\",\n    ],\n    [\n      \"47\",\n      \"Configuration error (extensions directory not found or unreadable).\",\n    ],\n    [\"48\", \"Schema contains a circular \\\\fB$ref\\\\fR.\"],\n    [\"77\", \"ACL denied — insufficient permissions for this module.\"],\n    [\"130\", \"Execution cancelled by user (SIGINT / Ctrl\\\\-C).\"],\n  ];\n  for (const [code, meaning] of exitCodes) {\n    sections.push(`.TP\\n\\\\fB${code}\\\\fR\\n${meaning}`);\n  }\n\n  sections.push(\".SH SEE ALSO\");\n  sections.push(\n    [\n      `\\\\fB${progName}\\\\fR(1)`,\n      `\\\\fB${progName}\\\\-list\\\\fR(1)`,\n      `\\\\fB${progName}\\\\-describe\\\\fR(1)`,\n      `\\\\fB${progName}\\\\-completion\\\\fR(1)`,\n    ].join(\", \"),\n  );\n\n  return sections.join(\"\\n\");\n}\n\n// ---------------------------------------------------------------------------\n// registerShellCommands\n// ---------------------------------------------------------------------------\n\n/**\n * Register completion and man commands.\n */\nexport function registerShellCommands(\n  cli: Command,\n  progName = \"apcore-cli\",\n): void {\n  const completionCmd = new Command(\"completion\")\n    .description(\n      \"Generate a shell completion script and print it to stdout.\",\n    )\n    .argument(\"<shell>\", \"Shell type: bash, zsh, or fish\")\n    .action((shell: string) => {\n      const validShells = [\"bash\", \"zsh\", \"fish\"];\n      if (!validShells.includes(shell)) {\n        process.stderr.write(\n          `Error: Unknown shell '${shell}'. Expected: bash, zsh, or fish.\\n`,\n        );\n        process.exit(EXIT_CODES.INVALID_CLI_INPUT);\n      }\n\n      const resolved = cli.name() || progName;\n      const generators: Record<string, () => string> = {\n        bash: () => generateBashCompletion(resolved),\n        zsh: () => generateZshCompletion(resolved),\n        fish: () => generateFishCompletion(resolved),\n      };\n      process.stdout.write(generators[shell]());\n    });\n  cli.addCommand(completionCmd);\n\n  const manCmd = new Command(\"man\")\n    .description(\"Generate a roff man page for COMMAND and print it to stdout.\")\n    .argument(\"<command>\", \"Command to generate man page for\")\n    .action((commandName: string) => {\n      const knownBuiltins = new Set([\"list\", \"describe\", \"completion\", \"man\"]);\n      const cmd = cli.commands.find((c) => c.name() === commandName) ?? null;\n\n      if (!cmd && !knownBuiltins.has(commandName)) {\n        process.stderr.write(\n          `Error: Unknown command '${commandName}'.\\n`,\n        );\n        process.exit(EXIT_CODES.INVALID_CLI_INPUT);\n      }\n\n      const resolved = cli.name() || progName;\n      const roff = generateManPage(commandName, cmd, resolved);\n      process.stdout.write(roff);\n    });\n  cli.addCommand(manCmd);\n}\n"],"mappings":";;;;;;;;;;;AACA,OAAO,UAAU;AACjB,SAAS,qBAAqB;AAF9B;AAAA;AAAA;AAAA;AAAA;;;ACkGO,SAAS,iBAAiBA,QAA0B;AACzD,MAAIA,kBAAiB,sBAAsB;AACzC,WAAO,WAAW;AAAA,EACpB;AACA,MAAIA,kBAAiB,qBAAqB;AACxC,WAAO,WAAW;AAAA,EACpB;AACA,MAAIA,kBAAiB,qBAAqB;AACxC,WAAO,WAAW;AAAA,EACpB;AACA,MAAIA,kBAAiB,uBAAuB;AAC1C,WAAO,WAAW;AAAA,EACpB;AACA,MAAIA,kBAAiB,uBAAuB;AAC1C,WAAO,WAAW;AAAA,EACpB;AACA,MAAIA,kBAAiB,qBAAqB;AACxC,WAAO,WAAW;AAAA,EACpB;AACA,MAAIA,kBAAiB,sBAAsB;AACzC,WAAO,WAAW;AAAA,EACpB;AAGA,MAAIA,kBAAiB,OAAO;AAC1B,UAAM,OAAQA,OAA6C;AAC3D,UAAM,UAAoC;AAAA,MACxC,kBAAkB,WAAW;AAAA,MAC7B,mBAAmB,WAAW;AAAA,MAC9B,iBAAiB,WAAW;AAAA,MAC5B,yBAAyB,WAAW;AAAA,MACpC,qBAAqB,WAAW;AAAA,MAChC,iBAAiB,WAAW;AAAA,MAC5B,kBAAkB,WAAW;AAAA,MAC7B,kBAAkB,WAAW;AAAA,MAC7B,gBAAgB,WAAW;AAAA,MAC3B,sBAAsB,WAAW;AAAA,MACjC,gBAAgB,WAAW;AAAA,MAC3B,YAAY,WAAW;AAAA,IACzB;AACA,QAAI,QAAQ,QAAQ,SAAS;AAC3B,aAAO,QAAQ,IAAI;AAAA,IACrB;AAAA,EACF;AAEA,SAAO,WAAW;AACpB;AAhJA,IAWa,sBAQA,qBAQA,uBAQA,sBAQA,qBAQA,uBAQA,qBAWA;AAtEb;AAAA;AAAA;AAAA;AAWO,IAAM,uBAAN,cAAmC,MAAM;AAAA,MAC9C,YAAY,UAAU,sBAAsB;AAC1C,cAAM,OAAO;AACb,aAAK,OAAO;AAAA,MACd;AAAA,IACF;AAGO,IAAM,sBAAN,cAAkC,MAAM;AAAA,MAC7C,YAAY,UAAU,yBAAyB;AAC7C,cAAM,OAAO;AACb,aAAK,OAAO;AAAA,MACd;AAAA,IACF;AAGO,IAAM,wBAAN,cAAoC,MAAM;AAAA,MAC/C,YAAY,UAAU,4BAA4B;AAChD,cAAM,OAAO;AACb,aAAK,OAAO;AAAA,MACd;AAAA,IACF;AAGO,IAAM,uBAAN,cAAmC,MAAM;AAAA,MAC9C,YAAY,UAAU,2BAA2B;AAC/C,cAAM,OAAO;AACb,aAAK,OAAO;AAAA,MACd;AAAA,IACF;AAGO,IAAM,sBAAN,cAAkC,MAAM;AAAA,MAC7C,YAAY,UAAU,mBAAmB;AACvC,cAAM,OAAO;AACb,aAAK,OAAO;AAAA,MACd;AAAA,IACF;AAGO,IAAM,wBAAN,cAAoC,MAAM;AAAA,MAC/C,YAAY,UAAU,4BAA4B;AAChD,cAAM,OAAO;AACb,aAAK,OAAO;AAAA,MACd;AAAA,IACF;AAGO,IAAM,sBAAN,cAAkC,MAAM;AAAA,MAC7C,YAAY,UAAU,oBAAoB;AACxC,cAAM,OAAO;AACb,aAAK,OAAO;AAAA,MACd;AAAA,IACF;AAMO,IAAM,aAAa;AAAA,MACxB,SAAS;AAAA,MACT,sBAAsB;AAAA,MACtB,gBAAgB;AAAA,MAChB,mBAAmB;AAAA,MACnB,kBAAkB;AAAA,MAClB,mBAAmB;AAAA,MACnB,iBAAiB;AAAA,MACjB,yBAAyB;AAAA,MACzB,iBAAiB;AAAA,MACjB,kBAAkB;AAAA,MAClB,kBAAkB;AAAA,MAClB,gBAAgB;AAAA,MAChB,qBAAqB;AAAA,MACrB,YAAY;AAAA,MACZ,oBAAoB;AAAA,IACtB;AAAA;AAAA;;;ACtFA;AAAA;AAAA;AAAA;AAAA;AAAA;AAMA,YAAY,YAAY;AACxB,YAAY,QAAQ;AACpB,YAAY,QAAQ;AACpB,YAAYC,WAAU;AA+Bf,SAAS,eAAe,aAAuC;AACpE,iBAAe;AACjB;AAKO,SAAS,iBAAqC;AACnD,SAAO;AACT;AAjDA,IAmCI,cAgBS;AAnDb;AAAA;AAAA;AAAA;AAmCA,IAAI,eAAmC;AAgBhC,IAAM,cAAN,MAAM,aAAY;AAAA,MACvB,OAAgB,eAAoB;AAAA,QAC/B,WAAQ;AAAA,QACX;AAAA,QACA;AAAA,MACF;AAAA,MAEiB;AAAA,MAEjB,YAAYA,OAAe;AACzB,aAAK,UAAUA,SAAQ,aAAY;AACnC,aAAK,gBAAgB;AAAA,MACvB;AAAA,MAEQ,kBAAwB;AAC9B,YAAI;AACF,UAAG,aAAe,cAAQ,KAAK,OAAO,GAAG,EAAE,WAAW,KAAK,CAAC;AAAA,QAC9D,QAAQ;AAAA,QAER;AAAA,MACF;AAAA,MAEA,aACE,UACA,WACA,QACA,UACA,YACM;AACN,cAAM,QAAoB;AAAA,UACxB,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,UAClC,MAAM,KAAK,QAAQ;AAAA,UACnB,WAAW;AAAA,UACX,YAAY,KAAK,UAAU,SAAS;AAAA,UACpC;AAAA,UACA,WAAW;AAAA,UACX,aAAa;AAAA,QACf;AACA,YAAI;AACF,UAAG,kBAAe,KAAK,SAAS,KAAK,UAAU,KAAK,IAAI,IAAI;AAAA,QAC9D,SAAS,KAAK;AACZ,kBAAQ,KAAK,8BAA8B,GAAG,EAAE;AAAA,QAClD;AAAA,MACF;AAAA,MAEQ,UAAU,WAA4C;AAC5D,cAAM,OAAc,mBAAY,EAAE;AAClC,cAAM,aAAa,OAAO,KAAK,SAAS,EAAE,KAAK;AAC/C,cAAM,UAAU,KAAK,UAAU,WAAW,UAAU;AACpD,eACG,kBAAW,QAAQ,EACnB,OAAO,OAAO,OAAO,CAAC,MAAM,OAAO,KAAK,SAAS,OAAO,CAAC,CAAC,CAAC,EAC3D,OAAO,KAAK;AAAA,MACjB;AAAA,MAEQ,UAAkB;AACxB,YAAI;AACF,iBAAU,YAAS,EAAE;AAAA,QACvB,QAAQ;AACN,iBAAO,QAAQ,IAAI,QAAQ,QAAQ,IAAI,YAAY;AAAA,QACrD;AAAA,MACF;AAAA,IACF;AAAA;AAAA;;;AC3GA,YAAYC,aAAY;AACxB,YAAYC,SAAQ;AAQpB,eAAe,YAA0B;AACvC,MAAI,aAAc,QAAO;AACzB,MAAI;AAEF,mBAAe,MAAM,OAAO,QAAQ;AACpC,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAxBA,IAcI,cAoBS;AAlCb;AAAA;AAAA;AAAA;AAQA;AAMA,IAAI,eAAoB;AAoBjB,IAAM,kBAAN,MAAM,iBAAgB;AAAA,MAC3B,OAAgB,eAAe;AAAA;AAAA;AAAA;AAAA,MAK/B,MAAM,MAAM,KAAa,OAAgC;AACvD,cAAM,SAAS,MAAM,UAAU;AAC/B,YAAI,QAAQ;AACV,cAAI;AACF,kBAAM,OAAO,YAAY,iBAAgB,cAAc,KAAK,KAAK;AACjE,mBAAO,WAAW,GAAG;AAAA,UACvB,QAAQ;AAAA,UAER;AAAA,QACF;AACA,gBAAQ,KAAK,sDAAsD;AACnE,cAAM,aAAa,KAAK,WAAW,KAAK;AACxC,eAAO,OAAO,OAAO,KAAK,UAAU,EAAE,SAAS,QAAQ,CAAC;AAAA,MAC1D;AAAA;AAAA;AAAA;AAAA,MAKA,MAAM,SAAS,aAAqB,KAA8B;AAChE,YAAI,YAAY,WAAW,UAAU,GAAG;AACtC,gBAAM,SAAS,MAAM,UAAU;AAC/B,cAAI,CAAC,QAAQ;AACX,kBAAM,IAAI;AAAA,cACR,6CAA6C,GAAG;AAAA,YAClD;AAAA,UACF;AACA,cAAI;AACF,kBAAM,SAAS,YAAY,MAAM,WAAW,MAAM;AAClD,kBAAM,SAAS,MAAM,OAAO;AAAA,cAC1B,iBAAgB;AAAA,cAChB;AAAA,YACF;AACA,gBAAI,WAAW,QAAQ,WAAW,QAAW;AAC3C,oBAAM,IAAI;AAAA,gBACR,gCAAgC,MAAM;AAAA,cACxC;AAAA,YACF;AACA,mBAAO;AAAA,UACT,SAAS,KAAK;AACZ,gBAAI,eAAe,sBAAuB,OAAM;AAChD,kBAAM,IAAI;AAAA,cACR,oCAAoC,GAAG;AAAA,YACzC;AAAA,UACF;AAAA,QACF;AAEA,YAAI,YAAY,WAAW,MAAM,GAAG;AAClC,gBAAM,aAAa,OAAO;AAAA,YACxB,YAAY,MAAM,OAAO,MAAM;AAAA,YAC/B;AAAA,UACF;AACA,cAAI;AACF,mBAAO,KAAK,WAAW,UAAU;AAAA,UACnC,QAAQ;AACN,kBAAM,IAAI;AAAA,cACR,0CAA0C,GAAG,+CAA+C,GAAG;AAAA,YACjG;AAAA,UACF;AAAA,QACF;AAGA,eAAO;AAAA,MACT;AAAA;AAAA;AAAA;AAAA,MAKQ,YAAoB;AAC1B,cAAMC,YAAc,aAAS;AAC7B,cAAM,WACJ,QAAQ,IAAI,QAAQ,QAAQ,IAAI,YAAY;AAC9C,cAAM,OAAO,OAAO,KAAK,sBAAsB;AAC/C,cAAM,WAAW,GAAGA,SAAQ,IAAI,QAAQ;AACxC,eAAc,mBAAW,UAAU,MAAM,KAAS,IAAI,QAAQ;AAAA,MAChE;AAAA,MAEQ,WAAW,WAA2B;AAC5C,cAAM,MAAM,KAAK,UAAU;AAC3B,cAAM,QAAe,oBAAY,EAAE;AACnC,cAAM,SAAgB,uBAAe,eAAe,KAAK,KAAK;AAC9D,cAAM,KAAK,OAAO,OAAO;AAAA,UACvB,OAAO,OAAO,WAAW,OAAO;AAAA,UAChC,OAAO,MAAM;AAAA,QACf,CAAC;AACD,cAAM,MAAM,OAAO,WAAW;AAE9B,eAAO,OAAO,OAAO,CAAC,OAAO,KAAK,EAAE,CAAC;AAAA,MACvC;AAAA,MAEQ,WAAW,MAAsB;AACvC,cAAM,MAAM,KAAK,UAAU;AAC3B,cAAM,QAAQ,KAAK,SAAS,GAAG,EAAE;AACjC,cAAM,MAAM,KAAK,SAAS,IAAI,EAAE;AAChC,cAAM,KAAK,KAAK,SAAS,EAAE;AAC3B,cAAM,WAAkB,yBAAiB,eAAe,KAAK,KAAK;AAClE,iBAAS,WAAW,GAAG;AACvB,cAAM,YAAY,OAAO,OAAO,CAAC,SAAS,OAAO,EAAE,GAAG,SAAS,MAAM,CAAC,CAAC;AACvE,eAAO,UAAU,SAAS,OAAO;AAAA,MACnC;AAAA,IACF;AAAA;AAAA;;;AC3IA,IAiBa;AAjBb;AAAA;AAAA;AAAA;AAOA;AACA;AASO,IAAM,eAAN,MAAmB;AAAA,MACP;AAAA,MACA;AAAA,MAEjB,YAAY,QAAwB,WAA6B;AAC/D,aAAK,SAAS;AACd,aAAK,YAAY,aAAa,IAAI,gBAAgB;AAAA,MACpD;AAAA;AAAA;AAAA;AAAA;AAAA,MAMA,MAAM,YAAoC;AACxC,cAAM,SAAS,KAAK,OAAO;AAAA,UACzB;AAAA,UACA;AAAA,UACA;AAAA,QACF;AACA,YAAI,WAAW,QAAQ,WAAW,QAAW;AAC3C,iBAAO;AAAA,QACT;AACA,cAAM,YAAY,OAAO,MAAM;AAC/B,YAAI,UAAU,WAAW,UAAU,KAAK,UAAU,WAAW,MAAM,GAAG;AACpE,iBAAO,KAAK,UAAU,SAAS,WAAW,cAAc;AAAA,QAC1D;AACA,eAAO;AAAA,MACT;AAAA;AAAA;AAAA;AAAA,MAKA,MAAM,oBACJ,SACiC;AACjC,cAAM,MAAM,MAAM,KAAK,UAAU;AACjC,YAAI,CAAC,KAAK;AACR,gBAAM,IAAI;AAAA,YACR;AAAA,UAEF;AAAA,QACF;AACA,eAAO,EAAE,GAAG,SAAS,eAAe,UAAU,GAAG,GAAG;AAAA,MACtD;AAAA;AAAA;AAAA;AAAA,MAKA,eAAe,YAA0B;AACvC,YAAI,eAAe,OAAO,eAAe,KAAK;AAC5C,gBAAM,IAAI;AAAA,YACR;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA;AAAA;;;AClEA,YAAY,mBAAmB;AAC/B,YAAYC,SAAQ;AACpB,YAAYC,SAAQ;AACpB,YAAYC,WAAU;AATtB,IAuBa;AAvBb;AAAA;AAAA;AAAA;AAWA;AAYO,IAAM,UAAN,MAAc;AAAA,MACF;AAAA,MAEjB,YAAY,UAAU,OAAO;AAC3B,aAAK,UAAU;AAAA,MACjB;AAAA;AAAA;AAAA;AAAA,MAKA,MAAM,QACJ,UACA,WACA,UACkB;AAClB,YAAI,CAAC,KAAK,SAAS;AACjB,iBAAO,SAAS,QAAQ,UAAU,SAAS;AAAA,QAC7C;AACA,eAAO,KAAK,iBAAiB,UAAU,SAAS;AAAA,MAClD;AAAA,MAEQ,iBACN,UACA,WACS;AAET,cAAM,MAA8B,CAAC;AACrC,mBAAW,OAAO,CAAC,QAAQ,aAAa,QAAQ,QAAQ,GAAG;AACzD,cAAI,QAAQ,IAAI,GAAG,GAAG;AACpB,gBAAI,GAAG,IAAI,QAAQ,IAAI,GAAG;AAAA,UAC5B;AAAA,QACF;AACA,mBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,QAAQ,GAAG,GAAG;AACtD,cAAI,IAAI,WAAW,SAAS,KAAK,OAAO;AACtC,gBAAI,GAAG,IAAI;AAAA,UACb;AAAA,QACF;AAEA,cAAM,SAAY;AAAA,UACX,WAAQ,WAAO,GAAG,iBAAiB;AAAA,QAC1C;AAEA,YAAI;AACF,cAAI,OAAO;AACX,cAAI,SAAS;AAEb,gBAAM,SAAS;AAAA,YACb;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA,gGAAgG,QAAQ;AAAA,YACxG;AAAA,UACF,EAAE,KAAK,EAAE;AAET,gBAAM,SAAuB;AAAA,YAC3B,QAAQ;AAAA,YACR,CAAC,MAAM,MAAM;AAAA,YACb;AAAA,cACE,OAAO,KAAK,UAAU,SAAS;AAAA,cAC/B;AAAA,cACA,KAAK;AAAA,cACL,SAAS;AAAA,cACT,WAAW,KAAK,OAAO;AAAA,YACzB;AAAA,UACF;AAEA,iBAAO,KAAK,MAAM,OAAO,SAAS,OAAO,CAAC;AAAA,QAC5C,SAAS,KAAc;AACrB,cACE,eAAe,SACf,YAAY,OACX,IAAgC,QACjC;AACA,kBAAM,IAAI;AAAA,cACR,kBAAkB,QAAQ;AAAA,YAC5B;AAAA,UACF;AACA,gBAAM,SACJ,eAAe,SAAS,YAAY,MAChC,OAAQ,IAAgC,MAAM,IAC9C,OAAO,GAAG;AAChB,gBAAM,IAAI;AAAA,YACR,kBAAkB,QAAQ,uBAAuB,MAAM;AAAA,UACzD;AAAA,QACF,UAAE;AACA,cAAI;AACF,YAAG,WAAO,QAAQ,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,UACpD,QAAQ;AAAA,UAER;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA;AAAA;;;ACrHA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAMA;AACA;AACA;AACA;AAAA;AAAA;;;ACTA;;;ACAA;AAUA;AAJA,SAAS,oBAAoB;AAC7B,SAAS,iBAAAC,sBAAqB;AAC9B,YAAYC,WAAU;AACtB,SAAS,SAAS,sBAAsB;;;ACTxC;AAMA;AAUO,SAAS,YACd,QACA,WAAW,IACX,WAAW,IACc;AACzB,QAAM,SAAS,gBAAgB,MAAM;AACrC,QAAM,OAAQ,OAAO,SAAS,OAAO,eAAe,CAAC;AAIrD,QAAM,SAAS;AAAA,IACb;AAAA,IACA;AAAA,IACA,oBAAI,IAAY;AAAA,IAChB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAGA,SAAO,OAAO;AACd,SAAO,OAAO;AACd,SAAO;AACT;AAEA,SAAS,YACP,MACA,MACA,SACA,OACA,UACA,UACS;AACT,MAAI,OAAO,SAAS,YAAY,SAAS,QAAQ,MAAM,QAAQ,IAAI,GAAG;AACpE,WAAO;AAAA,EACT;AAEA,QAAM,MAAM;AAGZ,MAAI,UAAU,KAAK;AACjB,UAAM,UAAU,IAAI;AAEpB,QAAI,SAAS,UAAU;AACrB,cAAQ,OAAO;AAAA,QACb,oDAAoD,QAAQ,gBAAgB,QAAQ;AAAA;AAAA,MACtF;AACA,cAAQ,KAAK,WAAW,mBAAmB;AAAA,IAC7C;AAEA,QAAI,QAAQ,IAAI,OAAO,GAAG;AACxB,cAAQ,OAAO;AAAA,QACb,uDAAuD,QAAQ,cAAc,OAAO;AAAA;AAAA,MACtF;AACA,cAAQ,KAAK,WAAW,mBAAmB;AAAA,IAC7C;AAGA,UAAM,QAAQ,QAAQ,MAAM,GAAG;AAC/B,UAAM,MAAM,MAAM,MAAM,SAAS,CAAC;AAElC,QAAI,EAAE,OAAO,OAAO;AAClB,cAAQ,OAAO;AAAA,QACb,6BAA6B,OAAO,2BAA2B,QAAQ;AAAA;AAAA,MACzE;AACA,cAAQ,KAAK,WAAW,uBAAuB;AAAA,IACjD;AAEA,UAAM,aAAa,IAAI,IAAI,OAAO;AAClC,eAAW,IAAI,OAAO;AACtB,WAAO,YAAY,KAAK,GAAG,GAAG,MAAM,YAAY,QAAQ,GAAG,UAAU,QAAQ;AAAA,EAC/E;AAGA,MAAI,WAAW,OAAO,MAAM,QAAQ,IAAI,KAAK,GAAG;AAC9C,UAAM,SAAkC;AAAA,MACtC,YAAY,CAAC;AAAA,MACb,UAAU,CAAC;AAAA,IACb;AACA,eAAW,aAAa,IAAI,OAAoB;AAC9C,YAAM,WAAW;AAAA,QACf;AAAA,QACA;AAAA,QACA;AAAA,QACA,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,MACF;AACA,UAAI,SAAS,YAAY;AACvB,eAAO;AAAA,UACL,OAAO;AAAA,UACP,SAAS;AAAA,QACX;AAAA,MACF;AACA,UAAI,MAAM,QAAQ,SAAS,QAAQ,GAAG;AACpC,QAAC,OAAO,SAAsB,KAAK,GAAG,SAAS,QAAQ;AAAA,MACzD;AAAA,IACF;AAEA,WAAO,WAAW,CAAC,GAAG,IAAI,IAAI,OAAO,QAAoB,CAAC;AAE1D,eAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,GAAG,GAAG;AACxC,UAAI,MAAM,WAAW,EAAE,KAAK,SAAS;AACnC,eAAO,CAAC,IAAI;AAAA,MACd;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAGA,aAAW,WAAW,CAAC,SAAS,OAAO,GAAG;AACxC,QAAI,WAAW,OAAO,MAAM,QAAQ,IAAI,OAAO,CAAC,GAAG;AACjD,YAAM,SAAkC;AAAA,QACtC,YAAY,CAAC;AAAA,QACb,UAAU,CAAC;AAAA,MACb;AACA,YAAM,kBAAiC,CAAC;AACxC,iBAAW,aAAa,IAAI,OAAO,GAAgB;AACjD,cAAM,WAAW;AAAA,UACf;AAAA,UACA;AAAA,UACA;AAAA,UACA,QAAQ;AAAA,UACR;AAAA,UACA;AAAA,QACF;AACA,YAAI,SAAS,YAAY;AACvB,iBAAO;AAAA,YACL,OAAO;AAAA,YACP,SAAS;AAAA,UACX;AAAA,QACF;AACA,YAAI,MAAM,QAAQ,SAAS,QAAQ,GAAG;AACpC,0BAAgB,KAAK,IAAI,IAAI,SAAS,QAAoB,CAAC;AAAA,QAC7D;AAAA,MACF;AAEA,UAAI,gBAAgB,SAAS,GAAG;AAC9B,YAAI,eAAe,gBAAgB,CAAC;AACpC,iBAAS,IAAI,GAAG,IAAI,gBAAgB,QAAQ,KAAK;AAC/C,yBAAe,IAAI;AAAA,YACjB,CAAC,GAAG,YAAY,EAAE,OAAO,CAAC,MAAM,gBAAgB,CAAC,EAAE,IAAI,CAAC,CAAC;AAAA,UAC3D;AAAA,QACF;AACA,eAAO,WAAW,CAAC,GAAG,YAAY;AAAA,MACpC,OAAO;AACL,eAAO,WAAW,CAAC;AAAA,MACrB;AAEA,iBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,GAAG,GAAG;AACxC,YAAI,MAAM,WAAW,EAAE,KAAK,SAAS;AACnC,iBAAO,CAAC,IAAI;AAAA,QACd;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAAA,EACF;AAGA,MAAI,gBAAgB,OAAO,OAAO,IAAI,eAAe,YAAY,IAAI,eAAe,MAAM;AACxF,UAAM,QAAQ,IAAI;AAClB,eAAW,CAAC,UAAU,UAAU,KAAK,OAAO,QAAQ,KAAK,GAAG;AAC1D,YAAM,QAAQ,IAAI;AAAA,QAChB;AAAA,QACA;AAAA,QACA;AAAA,QACA,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;;;AC9LA;AAOA;AAOA,IAAM,eAAe,uBAAO,cAAc;AAOnC,SAAS,QAAQ,UAAkB,YAAiD;AACzF,QAAM,aAAa,WAAW;AAG9B,MACE,eAAe,aACd,SAAS,SAAS,OAAO,KAAK,WAAW,YAAY,MAAM,OAC5D;AACA,WAAO;AAAA,EACT;AAEA,QAAM,UAAsC;AAAA,IAC1C,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,QAAQ;AAAA,IACR,OAAO;AAAA,EACT;AAEA,MAAI,CAAC,YAAY;AACf,WAAO;AAAA,EACT;AAEA,SAAO,QAAQ,UAAU,KAAK;AAChC;AAKO,SAAS,YAAY,YAAyD;AACnF,MAAI,OAAO,WAAW,mBAAmB;AACzC,MAAI,CAAC,MAAM;AACT,WAAO,WAAW;AAAA,EACpB;AACA,MAAI,CAAC,MAAM;AACT,WAAO;AAAA,EACT;AACA,MAAI,KAAK,SAAS,KAAK;AACrB,WAAO,KAAK,MAAM,GAAG,GAAG,IAAI;AAAA,EAC9B;AACA,SAAO;AACT;AAOA,IAAM,iBAAiB,oBAAI,IAAI,CAAC,SAAS,OAAO,eAAe,UAAU,SAAS,CAAC;AAM5E,SAAS,mBACd,QACgB;AAChB,QAAM,aAAc,OAAO,cAAc,CAAC;AAI1C,QAAM,eAAgB,OAAO,YAAY,CAAC;AAC1C,QAAM,UAA0B,CAAC;AACjC,QAAM,YAAoC,CAAC;AAE3C,aAAW,CAAC,UAAU,UAAU,KAAK,OAAO,QAAQ,UAAU,GAAG;AAC/D,UAAM,WAAW,OAAO,SAAS,QAAQ,MAAM,GAAG;AAGlD,QAAI,YAAY,WAAW;AACzB,cAAQ,OAAO;AAAA,QACb,2CAA2C,QAAQ,UAAU,UAAU,QAAQ,CAAC,kBAAkB,QAAQ;AAAA;AAAA,MAC5G;AACA,cAAQ,KAAK,WAAW,iBAAiB;AAAA,IAC3C;AACA,cAAU,QAAQ,IAAI;AAGtB,QAAI,eAAe,IAAI,QAAQ,GAAG;AAChC,cAAQ,OAAO;AAAA,QACb,kCAAkC,QAAQ;AAAA;AAAA,MAC5C;AACA,cAAQ,KAAK,WAAW,iBAAiB;AAAA,IAC3C;AAEA,UAAM,aAAa,QAAQ,UAAU,UAAU;AAC/C,UAAM,aAAa,aAAa,SAAS,QAAQ;AACjD,UAAM,WAAW,YAAY,UAAU;AACvC,UAAM,WAAW,cACZ,WAAW,WAAW,MAAM,MAAM,eACnC,YAAY;AAChB,UAAM,eAAe,WAAW;AAEhC,QAAI,eAAe,cAAc;AAE/B,YAAM,WAAW,SAAS,QAAQ,MAAM,GAAG;AAC3C,YAAM,aAAc,WAAW,WAAuB;AACtD,cAAQ,KAAK;AAAA,QACX,MAAM;AAAA,QACN,OAAO,KAAK,QAAQ,UAAU,QAAQ;AAAA,QACtC,aAAa;AAAA,QACb,cAAc;AAAA,QACd,UAAU;AAAA,QACV,eAAe;AAAA,MACjB,CAAC;AAAA,IACH,WAAW,UAAU,cAAc,MAAM,QAAQ,WAAW,IAAI,GAAG;AACjE,YAAM,aAAa,WAAW;AAC9B,UAAI,WAAW,WAAW,GAAG;AAE3B,gBAAQ,KAAK;AAAA,UACX,MAAM;AAAA,UACN,OAAO,GAAG,QAAQ;AAAA,UAClB,aAAa;AAAA,UACb;AAAA,UACA,UAAU;AAAA,QACZ,CAAC;AAAA,MACH,OAAO;AACL,cAAM,eAAe,WAAW,IAAI,MAAM;AAC1C,cAAM,oBAA4C,CAAC;AACnD,mBAAW,KAAK,YAAY;AAC1B,cAAI,OAAO,MAAM,YAAY,OAAO,UAAU,CAAC,GAAG;AAChD,8BAAkB,OAAO,CAAC,CAAC,IAAI;AAAA,UACjC,WAAW,OAAO,MAAM,UAAU;AAChC,8BAAkB,OAAO,CAAC,CAAC,IAAI;AAAA,UACjC,WAAW,OAAO,MAAM,WAAW;AACjC,8BAAkB,OAAO,CAAC,CAAC,IAAI;AAAA,UACjC;AAAA,QACF;AACA,gBAAQ,KAAK;AAAA,UACX,MAAM;AAAA,UACN,OAAO,GAAG,QAAQ;AAAA,UAClB,aAAa;AAAA,UACb,cACE,iBAAiB,SAAY,OAAO,YAAY,IAAI;AAAA,UACtD,UAAU;AAAA,UACV,SAAS;AAAA,UACT,mBACE,OAAO,KAAK,iBAAiB,EAAE,SAAS,IACpC,oBACA;AAAA,QACR,CAAC;AAAA,MACH;AAAA,IACF,OAAO;AAEL,UAAI;AACJ,UAAI,eAAe,OAAO;AACxB,mBAAW,CAAC,MAAc;AACxB,gBAAM,IAAI,SAAS,GAAG,EAAE;AACxB,cAAI,MAAM,CAAC,EAAG,OAAM,IAAI,MAAM,oBAAoB,CAAC,EAAE;AACrD,iBAAO;AAAA,QACT;AAAA,MACF,WAAW,eAAe,SAAS;AACjC,mBAAW,CAAC,MAAc;AACxB,gBAAM,IAAI,WAAW,CAAC;AACtB,cAAI,MAAM,CAAC,EAAG,OAAM,IAAI,MAAM,mBAAmB,CAAC,EAAE;AACpD,iBAAO;AAAA,QACT;AAAA,MACF;AACA,cAAQ,KAAK;AAAA,QACX,MAAM;AAAA,QACN,OAAO,GAAG,QAAQ;AAAA,QAClB,aAAa;AAAA,QACb;AAAA,QACA,UAAU;AAAA,QACV;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO;AACT;;;AChMA;AAQA;AAFA,YAAY,cAAc;AAW1B,SAAS,cACP,aACA,KACA,eAAwB,QACf;AACT,MAAI,CAAC,eAAe,OAAO,gBAAgB,SAAU,QAAO;AAC5D,QAAM,MAAM;AACZ,SAAO,OAAO,MAAM,IAAI,GAAG,IAAI;AACjC;AAWA,eAAsB,cACpB,WACA,aACe;AACf,QAAM,cAAc,UAAU;AAG9B,MAAI;AACJ,MAAI,UAAU,qBAAqB,QAAW;AAC5C,uBAAmB,UAAU;AAAA,EAC/B,WAAW,aAAa;AACtB,uBAAmB,cAAc,aAAa,qBAAqB,KAAK,MAAM;AAAA,EAChF,OAAO;AACL;AAAA,EACF;AAEA,MAAI,CAAC,kBAAkB;AACrB;AAAA,EACF;AAEA,QAAM,WAAW,UAAU;AAG3B,MAAI,aAAa;AACf;AAAA,EACF;AAGA,QAAM,SAAS,QAAQ,IAAI,2BAA2B;AACtD,MAAI,WAAW,KAAK;AAClB;AAAA,EACF;AACA,MAAI,WAAW,MAAM,WAAW,KAAK;AACnC,YAAQ,OAAO;AAAA,MACb,+CAA+C,MAAM;AAAA;AAAA,IACvD;AAAA,EACF;AAGA,MAAI,CAAC,QAAQ,MAAM,OAAO;AACxB,YAAQ,OAAO;AAAA,MACb,kBAAkB,QAAQ;AAAA;AAAA,IAG5B;AACA,YAAQ,KAAK,WAAW,eAAe;AAAA,EACzC;AAGA,QAAM,kBAAkB,WAAW,EAAE;AACvC;AAKA,eAAe,kBACb,WACA,SACe;AAEf,YAAU,KAAK,IAAI,GAAG,KAAK,IAAI,SAAS,IAAI,CAAC;AAE7C,QAAM,WAAW,UAAU;AAC3B,QAAM,cAAc,UAAU;AAC9B,QAAM,WACH,cACI,cAAc,aAAa,kBAAkB,IAC9C,WACJ,WAAW,QAAQ;AAErB,UAAQ,OAAO,MAAM,UAAU,IAAI;AAEnC,QAAM,KAAc,yBAAgB;AAAA,IAClC,OAAO,QAAQ;AAAA,IACf,QAAQ,QAAQ;AAAA,EAClB,CAAC;AAED,MAAI;AAEJ,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ,KAAK;AAAA,MAChC,IAAI,QAAgB,CAACC,aAAY;AAC/B,WAAG,SAAS,mBAAmB,CAAC,QAAQA,SAAQ,GAAG,CAAC;AAAA,MACtD,CAAC;AAAA,MACD,IAAI,QAAe,CAAC,GAAG,WAAW;AAChC,gBAAQ,WAAW,MAAM;AACvB,iBAAO,IAAI;AAAA,YACT,mCAAmC,OAAO;AAAA,UAC5C,CAAC;AAAA,QACH,GAAG,UAAU,GAAI;AAAA,MACnB,CAAC;AAAA,IACH,CAAC;AAGD,QAAI,MAAO,cAAa,KAAK;AAE7B,UAAM,aAAa,OAAO,KAAK,EAAE,YAAY;AAC7C,QAAI,eAAe,OAAO,eAAe,OAAO;AAC9C;AAAA,IACF;AAEA,YAAQ,OAAO,MAAM,2BAA2B;AAChD,YAAQ,KAAK,WAAW,eAAe;AAAA,EACzC,SAAS,KAAK;AACZ,QAAI,MAAO,cAAa,KAAK;AAC7B,QAAI,eAAe,sBAAsB;AACvC,cAAQ,OAAO;AAAA,QACb,0CAA0C,OAAO;AAAA;AAAA,MACnD;AACA,cAAQ,KAAK,WAAW,gBAAgB;AAAA,IAC1C;AACA,UAAM;AAAA,EACR,UAAE;AACA,OAAG,MAAM;AAAA,EACX;AACF;;;ACvJA;AAeO,SAAS,cAAc,gBAAiC;AAC7D,MAAI,mBAAmB,QAAW;AAChC,WAAO;AAAA,EACT;AACA,SAAO,QAAQ,OAAO,QAAQ,UAAU;AAC1C;AAKO,SAAS,SAAS,MAAc,YAAY,IAAY;AAC7D,MAAI,KAAK,UAAU,WAAW;AAC5B,WAAO;AAAA,EACT;AACA,SAAO,KAAK,MAAM,GAAG,YAAY,CAAC,IAAI;AACxC;AAKA,SAAS,YACP,SACA,MACQ;AAER,QAAM,YAAY,QAAQ;AAAA,IAAI,CAAC,GAAG,MAChC,KAAK,IAAI,EAAE,QAAQ,GAAG,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,IAAI,MAAM,CAAC;AAAA,EAC5D;AAEA,QAAM,MAAM,UAAU,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,IAAI;AACzD,QAAM,aAAa,QAChB,IAAI,CAAC,GAAG,MAAM,EAAE,OAAO,UAAU,CAAC,CAAC,CAAC,EACpC,KAAK,IAAI;AACZ,QAAM,YAAY,KAAK;AAAA,IAAI,CAAC,QAC1B,IAAI,IAAI,CAAC,MAAM,OAAO,QAAQ,IAAI,OAAO,UAAU,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI;AAAA,EACnE;AAEA,SAAO,CAAC,YAAY,KAAK,GAAG,SAAS,EAAE,KAAK,IAAI,IAAI;AACtD;AASO,SAAS,iBACd,SACA,QACA,YACM;AACN,MAAI,WAAW,SAAS;AACtB,QAAI,QAAQ,WAAW,KAAK,cAAc,WAAW,SAAS,GAAG;AAC/D,cAAQ,OAAO;AAAA,QACb,mCAAmC,WAAW,KAAK,IAAI,CAAC;AAAA;AAAA,MAC1D;AACA;AAAA,IACF;AACA,QAAI,QAAQ,WAAW,GAAG;AACxB,cAAQ,OAAO,MAAM,qBAAqB;AAC1C;AAAA,IACF;AAEA,UAAM,UAAU,CAAC,MAAM,eAAe,MAAM;AAC5C,UAAM,OAAO,QAAQ,IAAI,CAAC,MAAM;AAAA,MAC9B,EAAE;AAAA,MACF,SAAS,EAAE,aAAa,EAAE;AAAA,OACzB,EAAE,QAAQ,CAAC,GAAG,KAAK,IAAI;AAAA,IAC1B,CAAC;AACD,YAAQ,OAAO,MAAM,YAAY,SAAS,IAAI,CAAC;AAAA,EACjD,WAAW,WAAW,QAAQ;AAC5B,UAAM,SAAS,QAAQ,IAAI,CAAC,OAAO;AAAA,MACjC,IAAI,EAAE;AAAA,MACN,aAAa,EAAE;AAAA,MACf,MAAM,EAAE,QAAQ,CAAC;AAAA,IACnB,EAAE;AACF,YAAQ,OAAO,MAAM,KAAK,UAAU,QAAQ,MAAM,CAAC,IAAI,IAAI;AAAA,EAC7D;AACF;AASA,SAAS,kBACP,aACgC;AAChC,MAAI,CAAC,YAAa,QAAO;AACzB,MAAI,OAAO,gBAAgB,YAAY,MAAM,QAAQ,WAAW,EAAG,QAAO;AAC1E,QAAM,SAAkC,CAAC;AACzC,aAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,WAAsC,GAAG;AAC3E,QAAI,MAAM,QAAQ,MAAM,UAAa,MAAM,SAAS,MAAM,KAAK,EAAE,MAAM,QAAQ,CAAC,KAAK,EAAE,WAAW,IAAI;AACpG,aAAO,CAAC,IAAI;AAAA,IACd;AAAA,EACF;AACA,SAAO,OAAO,KAAK,MAAM,EAAE,SAAS,IAAI,SAAS;AACnD;AAKO,SAAS,mBACd,WACA,QACM;AACN,MAAI,WAAW,SAAS;AACtB,YAAQ,OAAO,MAAM;AAAA,UAAa,UAAU,EAAE;AAAA,CAAI;AAClD,YAAQ,OAAO,MAAM;AAAA;AAAA,IAAqB,UAAU,WAAW;AAAA,CAAI;AAEnE,QAAI,UAAU,eAAe,OAAO,KAAK,UAAU,WAAW,EAAE,SAAS,GAAG;AAC1E,cAAQ,OAAO,MAAM,mBAAmB;AACxC,cAAQ,OAAO,MAAM,KAAK,UAAU,UAAU,aAAa,MAAM,CAAC,IAAI,IAAI;AAAA,IAC5E;AAEA,QAAI,UAAU,gBAAgB,OAAO,KAAK,UAAU,YAAY,EAAE,SAAS,GAAG;AAC5E,cAAQ,OAAO,MAAM,oBAAoB;AACzC,cAAQ,OAAO,MAAM,KAAK,UAAU,UAAU,cAAc,MAAM,CAAC,IAAI,IAAI;AAAA,IAC7E;AAEA,UAAM,UAAU;AAAA,MACd,UAAU;AAAA,IACZ;AACA,QAAI,SAAS;AACX,cAAQ,OAAO,MAAM,kBAAkB;AACvC,iBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,OAAO,GAAG;AAC5C,gBAAQ,OAAO,MAAM,KAAK,CAAC,KAAK,CAAC;AAAA,CAAI;AAAA,MACvC;AAAA,IACF;AAGA,UAAM,WAAW,UAAU;AAC3B,QAAI,UAAU;AACZ,YAAM,UAAmC,CAAC;AAC1C,iBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,QAAQ,GAAG;AAC7C,YAAI,EAAE,WAAW,IAAI,KAAK,EAAE,WAAW,IAAI,GAAG;AAC5C,kBAAQ,CAAC,IAAI;AAAA,QACf;AAAA,MACF;AACA,UAAI,OAAO,KAAK,OAAO,EAAE,SAAS,GAAG;AACnC,gBAAQ,OAAO,MAAM,yBAAyB;AAC9C,mBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,OAAO,GAAG;AAC5C,kBAAQ,OAAO,MAAM,KAAK,CAAC,KAAK,CAAC;AAAA,CAAI;AAAA,QACvC;AAAA,MACF;AAAA,IACF;AAEA,UAAM,OAAO,UAAU,QAAQ,CAAC;AAChC,QAAI,KAAK,SAAS,GAAG;AACnB,cAAQ,OAAO,MAAM;AAAA,QAAW,KAAK,KAAK,IAAI,CAAC;AAAA,CAAI;AAAA,IACrD;AAAA,EACF,WAAW,WAAW,QAAQ;AAC5B,UAAM,SAAkC;AAAA,MACtC,IAAI,UAAU;AAAA,MACd,aAAa,UAAU;AAAA,IACzB;AACA,QAAI,UAAU,YAAa,QAAO,eAAe,UAAU;AAC3D,QAAI,UAAU,aAAc,QAAO,gBAAgB,UAAU;AAE7D,UAAM,UAAU;AAAA,MACd,UAAU;AAAA,IACZ;AACA,QAAI,QAAS,QAAO,cAAc;AAElC,UAAM,OAAO,UAAU,QAAQ,CAAC;AAChC,QAAI,KAAK,SAAS,EAAG,QAAO,OAAO;AAGnC,UAAM,WAAW,UAAU;AAC3B,QAAI,UAAU;AACZ,iBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,QAAQ,GAAG;AAC7C,YAAI,EAAE,WAAW,IAAI,KAAK,EAAE,WAAW,IAAI,GAAG;AAC5C,iBAAO,CAAC,IAAI;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAEA,YAAQ,OAAO,MAAM,KAAK,UAAU,QAAQ,MAAM,CAAC,IAAI,IAAI;AAAA,EAC7D;AACF;AASO,SAAS,iBACd,QACA,QACM;AACN,MAAI,WAAW,QAAQ,WAAW,QAAW;AAC3C;AAAA,EACF;AACA,QAAM,YAAY,cAAc,MAAM;AACtC,MACE,cAAc,WACd,OAAO,WAAW,YAClB,CAAC,MAAM,QAAQ,MAAM,GACrB;AAEA,UAAM,UAAU,OAAO,QAAQ,MAAiC;AAChE,UAAM,UAAU,CAAC,OAAO,OAAO;AAC/B,UAAM,OAAO,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;AAC3D,YAAQ,OAAO,MAAM,YAAY,SAAS,IAAI,CAAC;AAAA,EACjD,WAAW,OAAO,WAAW,UAAU;AACrC,YAAQ,OAAO,MAAM,KAAK,UAAU,QAAQ,MAAM,CAAC,IAAI,IAAI;AAAA,EAC7D,WAAW,OAAO,WAAW,UAAU;AACrC,YAAQ,OAAO,MAAM,SAAS,IAAI;AAAA,EACpC,OAAO;AACL,YAAQ,OAAO,MAAM,OAAO,MAAM,IAAI,IAAI;AAAA,EAC5C;AACF;;;ACvOA;AAIA,IAAM,SAAS,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,EAAE;AAGzD,IAAI,eAAyB;AAEtB,SAAS,YAAY,OAAqB;AAC/C,QAAM,QAAQ,MAAM,YAAY;AAChC,MAAI,SAAS,QAAQ;AACnB,mBAAe;AAAA,EACjB;AACF;AAEO,SAAS,cAAwB;AACtC,SAAO;AACT;AAEA,SAAS,UAAU,OAA0B;AAC3C,SAAO,OAAO,KAAK,KAAK,OAAO,YAAY;AAC7C;AAEO,SAAS,MAAM,SAAuB;AAC3C,MAAI,UAAU,OAAO,EAAG,SAAQ,OAAO,MAAM,UAAU,OAAO;AAAA,CAAI;AACpE;AAEO,SAAS,KAAK,SAAuB;AAC1C,MAAI,UAAU,MAAM,EAAG,SAAQ,OAAO,MAAM,SAAS,OAAO;AAAA,CAAI;AAClE;AAEO,SAAS,KAAK,SAAuB;AAC1C,MAAI,UAAU,SAAS,EAAG,SAAQ,OAAO,MAAM,YAAY,OAAO;AAAA,CAAI;AACxE;AAEO,SAAS,MAAM,SAAuB;AAC3C,MAAI,UAAU,OAAO,EAAG,SAAQ,OAAO,MAAM,UAAU,OAAO;AAAA,CAAI;AACpE;;;ALpBA,IAAMC,aAAiB,cAAQC,eAAc,YAAY,GAAG,CAAC;AAC7D,IAAM,MAAM,KAAK,MAAM,aAAkB,cAAQD,YAAW,iBAAiB,GAAG,OAAO,CAAC;AACxF,IAAM,UAAkB,IAAI;AAsCrB,SAAS,UACd,eACA,UACS;AAET,QAAM,mBAAmB,YAAiB,eAAS,QAAQ,KAAK,CAAC,KAAK,YAAY,KAAK;AAGvF,QAAM,cAAc,QAAQ,IAAI,4BAA4B,QAAQ,IAAI,wBAAwB;AAChG,cAAY,WAAW;AAEvB,QAAM,UAAU,IAAI,QAAQ,gBAAgB,EACzC,aAAa,EACb,QAAQ,SAAS,aAAa,QAAQ,gBAAgB,UAAU,EAChE,YAAY,gEAA2D,EACvE,OAAO,2BAA2B,8BAA8B,EAChE,OAAO,uBAAuB,4CAA4C,SAAS;AAItF,OAAK;AAEL,SAAO;AACT;AASO,SAAS,KAAK,UAAyB;AAC5C,QAAM,UAAU,UAAU,QAAW,QAAQ;AAE7C,MAAI;AACF,YAAQ,MAAM,QAAQ,IAAI;AAAA,EAC5B,SAASE,QAAgB;AACvB,QAAIA,kBAAiB,gBAAgB;AAEnC,cAAQ,KAAKA,OAAM,QAAQ;AAAA,IAC7B;AACA,UAAM,OAAO,iBAAiBA,MAAK;AACnC,QAAIA,kBAAiB,OAAO;AAC1B,cAAQ,OAAO,MAAM,UAAUA,OAAM,OAAO;AAAA,CAAI;AAAA,IAClD;AACA,YAAQ,KAAK,IAAI;AAAA,EACnB;AACF;AASO,SAAS,mBACd,WACA,UACS;AACT,QAAM,WAAW,UAAU;AAC3B,MAAI,iBAA0C,CAAC;AAC/C,MAAI,gBAAgC,CAAC;AAGrC,QAAM,cAAc,UAAU;AAC9B,MAAI,eAAe,OAAO,gBAAgB,YAAY,YAAY,YAAY;AAC5E,QAAI;AACF,uBAAiB,YAAY,aAAa,IAAI,QAAQ;AAAA,IACxD,QAAQ;AACN,uBAAiB;AAAA,IACnB;AACA,oBAAgB,mBAAmB,cAAc;AAAA,EACnD;AAEA,QAAM,MAAM,IAAI,QAAQ,QAAQ,EAAE,YAAY,UAAU,WAAW;AAGnE,MAAI,OAAO,oBAAoB,6BAA6B;AAC5D,MAAI,OAAO,aAAa,2BAA2B,KAAK;AACxD,MAAI,OAAO,iBAAiB,sCAAsC,KAAK;AACvE,MAAI,OAAO,qBAAqB,4BAA4B;AAC5D,MAAI,OAAO,aAAa,oCAAoC,KAAK;AAGjE,aAAW,OAAO,eAAe;AAC/B,QAAI,IAAI,UAAU;AAChB,UAAI,OAAO,IAAI,OAAO,IAAI,aAAa,IAAI,UAAU,IAAI,YAAY;AAAA,IACvE,OAAO;AACL,UAAI,OAAO,IAAI,OAAO,IAAI,aAAa,IAAI,YAA4C;AAAA,IACzF;AAAA,EACF;AAGA,MAAI,OAAO,OAAO,YAAqC;AAErD,UAAM,YAAY,QAAQ;AAC1B,UAAM,cAAc,QAAQ;AAC5B,UAAM,aAAa,QAAQ;AAC3B,UAAM,eAAe,QAAQ;AAC7B,UAAM,iBAAiB,QAAQ;AAG/B,UAAM,eAAwC,CAAC;AAC/C,UAAM,cAAc,oBAAI,IAAI,CAAC,SAAS,OAAO,cAAc,UAAU,SAAS,CAAC;AAC/E,eAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,OAAO,GAAG;AAC5C,UAAI,CAAC,YAAY,IAAI,CAAC,GAAG;AACvB,qBAAa,CAAC,IAAI;AAAA,MACpB;AAAA,IACF;AAEA,QAAI;AAEF,YAAM,SAAS,MAAM,aAAa,WAAW,cAAc,UAAU;AAGrE,YAAM,cAAc,oBAAoB,QAAQ,aAAa;AAG7D,YAAM,cAAc,WAAW,WAAW;AAG1C,YAAM,EAAE,SAAAC,SAAQ,IAAI,MAAM;AAC1B,YAAM,UAAU,IAAIA,SAAQ,cAAc;AAC1C,YAAM,YAAY,YAAY,IAAI;AAClC,YAAM,SAAS,MAAM,QAAQ,QAAQ,UAAU,aAAa,QAAQ;AACpE,YAAM,aAAa,KAAK,MAAM,YAAY,IAAI,IAAI,SAAS;AAG3D,YAAM,EAAE,gBAAAC,gBAAe,IAAI,MAAM;AACjC,YAAM,cAAcA,gBAAe;AACnC,UAAI,aAAa;AACf,oBAAY,aAAa,UAAU,aAAa,WAAW,GAAG,UAAU;AAAA,MAC1E;AAGA,uBAAiB,QAAQ,YAAY;AAAA,IACvC,SAAS,KAAc;AAErB,YAAM,EAAE,gBAAAA,gBAAe,IAAI,MAAM;AACjC,YAAM,cAAcA,gBAAe;AACnC,YAAM,OAAO,iBAAiB,GAAG;AACjC,UAAI,aAAa;AACf,oBAAY,aAAa,UAAU,CAAC,GAAG,SAAS,MAAM,CAAC;AAAA,MACzD;AAEA,UAAI,eAAe,OAAO;AACxB,gBAAQ,OAAO,MAAM,UAAU,IAAI,OAAO;AAAA,CAAI;AAAA,MAChD;AACA,cAAQ,KAAK,IAAI;AAAA,IACnB;AAAA,EACF,CAAC;AAED,SAAO;AACT;AAUO,SAAS,iBAAiB,UAAwB;AACvD,MAAI,SAAS,SAAS,KAAK;AACzB,YAAQ,OAAO;AAAA,MACb,qCAAqC,QAAQ;AAAA;AAAA,IAC/C;AACA,YAAQ,KAAK,WAAW,iBAAiB;AAAA,EAC3C;AACA,MAAI,CAAC,wCAAwC,KAAK,QAAQ,GAAG;AAC3D,YAAQ,OAAO;AAAA,MACb,qCAAqC,QAAQ;AAAA;AAAA,IAC/C;AACA,YAAQ,KAAK,WAAW,iBAAiB;AAAA,EAC3C;AACF;AASA,eAAsB,aACpB,WACA,YAAqC,CAAC,GACtC,YACkC;AAElC,QAAM,mBAA4C,CAAC;AACnD,aAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,SAAS,GAAG;AAC9C,QAAI,MAAM,QAAQ,MAAM,QAAW;AACjC,uBAAiB,CAAC,IAAI;AAAA,IACxB;AAAA,EACF;AAEA,MAAI,CAAC,WAAW;AACd,WAAO;AAAA,EACT;AAEA,MAAI,cAAc,KAAK;AACrB,UAAM,MAAM,MAAM,UAAU;AAC5B,UAAM,UAAU,OAAO,WAAW,KAAK,OAAO;AAE9C,QAAI,UAAU,YAAc,CAAC,YAAY;AACvC,cAAQ,OAAO;AAAA,QACb;AAAA,MACF;AACA,cAAQ,KAAK,WAAW,iBAAiB;AAAA,IAC3C;AAEA,QAAI,CAAC,KAAK;AACR,aAAO;AAAA,IACT;AAEA,QAAI;AACJ,QAAI;AACF,kBAAY,KAAK,MAAM,GAAG;AAAA,IAC5B,QAAQ;AACN,cAAQ,OAAO;AAAA,QACb;AAAA,MACF;AACA,cAAQ,KAAK,WAAW,iBAAiB;AAAA,IAC3C;AAEA,QAAI,OAAO,cAAc,YAAY,cAAc,QAAQ,MAAM,QAAQ,SAAS,GAAG;AACnF,cAAQ,OAAO;AAAA,QACb,4CAA4C,MAAM,QAAQ,SAAS,IAAI,UAAU,OAAO,SAAS;AAAA;AAAA,MACnG;AACA,cAAQ,KAAK,WAAW,iBAAiB;AAAA,IAC3C;AAGA,WAAO,EAAE,GAAI,WAAuC,GAAG,iBAAiB;AAAA,EAC1E;AAEA,SAAO;AACT;AAKA,SAAS,YAA6B;AACpC,SAAO,IAAI,QAAQ,CAACC,UAAS,WAAW;AACtC,UAAM,SAAmB,CAAC;AAC1B,UAAM,SAAS,CAAC,UAAkB,OAAO,KAAK,KAAK;AACnD,UAAM,QAAQ,MAAM;AAClB,cAAQ;AACR,MAAAA,SAAQ,OAAO,OAAO,MAAM,EAAE,SAAS,OAAO,CAAC;AAAA,IACjD;AACA,UAAM,UAAU,CAAC,QAAe;AAC9B,cAAQ;AACR,aAAO,GAAG;AAAA,IACZ;AACA,UAAM,UAAU,MAAM;AACpB,cAAQ,MAAM,eAAe,QAAQ,MAAM;AAC3C,cAAQ,MAAM,eAAe,OAAO,KAAK;AACzC,cAAQ,MAAM,eAAe,SAAS,OAAO;AAAA,IAC/C;AACA,YAAQ,MAAM,GAAG,QAAQ,MAAM;AAC/B,YAAQ,MAAM,GAAG,OAAO,KAAK;AAC7B,YAAQ,MAAM,GAAG,SAAS,OAAO;AACjC,YAAQ,MAAM,OAAO;AAAA,EACvB,CAAC;AACH;AAUO,SAAS,oBACd,QACA,SACyB;AACzB,QAAM,SAAS,EAAE,GAAG,OAAO;AAC3B,aAAW,OAAO,SAAS;AACzB,QAAI,CAAC,IAAI,kBAAmB;AAC5B,UAAM,YAAY,IAAI;AACtB,QAAI,EAAE,aAAa,WAAW,OAAO,SAAS,MAAM,QAAQ,OAAO,SAAS,MAAM,QAAW;AAC3F;AAAA,IACF;AACA,UAAM,SAAS,OAAO,OAAO,SAAS,CAAC;AACvC,UAAM,WAAW,IAAI,kBAAkB,MAAM;AAC7C,QAAI,aAAa,OAAO;AACtB,aAAO,SAAS,IAAI,SAAS,QAAQ,EAAE;AAAA,IACzC,WAAW,aAAa,SAAS;AAC/B,aAAO,SAAS,IAAI,WAAW,MAAM;AAAA,IACvC,WAAW,aAAa,QAAQ;AAC9B,aAAO,SAAS,IAAI,OAAO,YAAY,MAAM;AAAA,IAC/C;AAAA,EACF;AACA,SAAO;AACT;;;AMtWA;AAqDO,IAAM,kBAAN,MAAsB;AAAA,EACV;AAAA,EACR;AAAA,EACD,eAAqC,oBAAI,IAAI;AAAA,EAErD,YAAY,UAAoB,UAAoB;AAClD,SAAK,WAAW;AAChB,SAAK,WAAW;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,eAAyB;AAEvB,WAAO,KAAK,SAAS,YAAY,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE;AAAA,EACpD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,WAAW,SAAiC;AAC1C,QAAI,KAAK,aAAa,IAAI,OAAO,GAAG;AAClC,aAAO,KAAK,aAAa,IAAI,OAAO;AAAA,IACtC;AAEA,UAAM,YAAY,KAAK,SAAS,UAAU,OAAO;AACjD,QAAI,CAAC,WAAW;AACd,aAAO;AAAA,IACT;AAEA,UAAM,MAAM,mBAAmB,WAAW,KAAK,QAAQ;AACvD,SAAK,aAAa,IAAI,SAAS,GAAG;AAClC,WAAO;AAAA,EACT;AACF;;;AC5FA;AAMA,YAAYC,SAAQ;AACpB,OAAO,UAAU;AAOV,IAAM,WAAoC;AAAA,EAC/C,mBAAmB;AAAA,EACnB,iBAAiB;AAAA,EACjB,mBAAmB;AAAA,EACnB,0BAA0B;AAAA,EAC1B,oBAAoB;AACtB;AAaO,IAAM,iBAAN,MAAqB;AAAA,EACT;AAAA,EACA;AAAA,EACT,YAA4C;AAAA,EAC5C,kBAAkB;AAAA,EAE1B,YAAY,UAAoC,YAAqB;AACnE,SAAK,WAAW,YAAY,CAAC;AAC7B,SAAK,aAAa,cAAc;AAAA,EAClC;AAAA;AAAA;AAAA;AAAA,EAKA,QAAQ,KAAa,SAAkB,QAA0B;AAE/D,UAAM,UAAU,WAAW;AAC3B,QAAI,WAAW,KAAK,UAAU;AAC5B,YAAM,QAAQ,KAAK,SAAS,OAAO;AACnC,UAAI,UAAU,QAAQ,UAAU,QAAW;AACzC,eAAO;AAAA,MACT;AAAA,IACF;AAGA,QAAI,QAAQ;AACV,YAAM,WAAW,QAAQ,IAAI,MAAM;AACnC,UAAI,aAAa,UAAa,aAAa,IAAI;AAC7C,eAAO;AAAA,MACT;AAAA,IACF;AAGA,UAAM,YAAY,KAAK,gBAAgB,GAAG;AAC1C,QAAI,cAAc,QAAW;AAC3B,aAAO;AAAA,IACT;AAGA,WAAO,SAAS,GAAG;AAAA,EACrB;AAAA;AAAA;AAAA;AAAA,EAKQ,gBAAgB,KAAsB;AAC5C,QAAI,CAAC,KAAK,iBAAiB;AACzB,WAAK,YAAY,KAAK,eAAe;AACrC,WAAK,kBAAkB;AAAA,IACzB;AACA,QAAI,KAAK,cAAc,MAAM;AAC3B,aAAO;AAAA,IACT;AACA,WAAO,KAAK,UAAU,GAAG;AAAA,EAC3B;AAAA;AAAA;AAAA;AAAA,EAKQ,iBAAiD;AACvD,QAAI;AACJ,QAAI;AACF,gBAAa,iBAAa,KAAK,YAAY,OAAO;AAAA,IACpD,SAAS,KAAc;AACrB,UAAI,eAAe,SAAS,UAAU,OAAO,IAAI,SAAS,UAAU;AAClE,eAAO;AAAA,MACT;AACA,cAAQ;AAAA,QACN,uBAAuB,KAAK,UAAU;AAAA,MACxC;AACA,aAAO;AAAA,IACT;AAEA,QAAI;AACJ,QAAI;AACF,eAAS,KAAK,KAAK,OAAO;AAAA,IAC5B,QAAQ;AACN,cAAQ;AAAA,QACN,uBAAuB,KAAK,UAAU;AAAA,MACxC;AACA,aAAO;AAAA,IACT;AAEA,QAAI,OAAO,WAAW,YAAY,WAAW,QAAQ,MAAM,QAAQ,MAAM,GAAG;AAC1E,cAAQ;AAAA,QACN,uBAAuB,KAAK,UAAU;AAAA,MACxC;AACA,aAAO;AAAA,IACT;AAEA,WAAO,KAAK,YAAY,MAAiC;AAAA,EAC3D;AAAA;AAAA;AAAA;AAAA,EAKQ,YACN,GACA,SAAS,IACgB;AACzB,UAAM,SAAkC,CAAC;AACzC,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,CAAC,GAAG;AAC5C,YAAM,UAAU,SAAS,GAAG,MAAM,IAAI,GAAG,KAAK;AAC9C,UACE,OAAO,UAAU,YACjB,UAAU,QACV,CAAC,MAAM,QAAQ,KAAK,GACpB;AACA,eAAO;AAAA,UACL;AAAA,UACA,KAAK,YAAY,OAAkC,OAAO;AAAA,QAC5D;AAAA,MACF,OAAO;AACL,eAAO,OAAO,IAAI;AAAA,MACpB;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;;;ACvJA;AAQA;AAFA,SAAS,WAAAC,gBAAe;AAUxB,IAAM,cAAc;AAEpB,SAAS,YAAY,KAAmB;AACtC,MAAI,CAAC,YAAY,KAAK,GAAG,GAAG;AAC1B,YAAQ,OAAO;AAAA,MACb,+BAA+B,GAAG;AAAA;AAAA,IACpC;AACA,YAAQ,KAAK,WAAW,iBAAiB;AAAA,EAC3C;AACF;AAKA,SAAS,WAAW,OAAe,UAA8B;AAC/D,SAAO,SAAS,OAAO,CAAC,KAAK,CAAC;AAChC;AAKO,SAAS,0BACd,KACA,UACM;AACN,QAAM,UAAU,IAAIC,SAAQ,MAAM,EAC/B,YAAY,yCAAyC,EACrD,OAAO,eAAe,kDAAkD,YAAY,CAAC,CAAC,EACtF,OAAO,qBAAqB,kBAAkB,MAAS,EACvD,OAAO,CAAC,SAA6C;AAEpD,eAAW,KAAK,KAAK,KAAK;AACxB,kBAAY,CAAC;AAAA,IACf;AAEA,UAAM,UAA8B,CAAC;AACrC,eAAW,KAAK,SAAS,YAAY,GAAG;AACtC,cAAQ,KAAK,CAAC;AAAA,IAChB;AAEA,QAAI,WAAW;AACf,QAAI,KAAK,IAAI,SAAS,GAAG;AACvB,YAAM,aAAa,IAAI,IAAI,KAAK,GAAG;AACnC,iBAAW,QAAQ,OAAO,CAAC,MAAM;AAC/B,cAAM,QAAQ,EAAE,QAAQ,CAAC;AACzB,eAAO,CAAC,GAAG,UAAU,EAAE,MAAM,CAAC,MAAM,MAAM,SAAS,CAAC,CAAC;AAAA,MACvD,CAAC;AAAA,IACH;AAEA,UAAM,MAAM,cAAc,KAAK,MAAM;AACrC,qBAAiB,UAAU,KAAK,KAAK,IAAI,SAAS,IAAI,KAAK,MAAM,MAAS;AAAA,EAC5E,CAAC;AACH,MAAI,WAAW,OAAO;AAEtB,QAAM,cAAc,IAAIA,SAAQ,UAAU,EACvC,YAAY,sDAAsD,EAClE,SAAS,eAAe,uBAAuB,EAC/C,OAAO,qBAAqB,kBAAkB,MAAS,EACvD,OAAO,CAAC,UAAkB,SAA8B;AACvD,qBAAiB,QAAQ;AAEzB,UAAM,YAAY,SAAS,UAAU,QAAQ;AAC7C,QAAI,CAAC,WAAW;AACd,cAAQ,OAAO;AAAA,QACb,kBAAkB,QAAQ;AAAA;AAAA,MAC5B;AACA,cAAQ,KAAK,WAAW,gBAAgB;AAAA,IAC1C;AAEA,UAAM,MAAM,cAAc,KAAK,MAAM;AACrC,uBAAmB,WAAW,GAAG;AAAA,EACnC,CAAC;AACH,MAAI,WAAW,WAAW;AAC5B;;;ACzFA;AAUA;AAJA,SAAS,gBAAAC,qBAAoB;AAC7B,SAAS,iBAAAC,sBAAqB;AAC9B,YAAYC,WAAU;AACtB,SAAS,WAAAC,gBAAe;AAGxB,IAAMC,aAAiB,cAAQH,eAAc,YAAY,GAAG,CAAC;AAC7D,IAAMI,OAAM,KAAK,MAAML,cAAkB,cAAQI,YAAW,iBAAiB,GAAG,OAAO,CAAC;AACxF,IAAM,gBAAwBC,KAAI;AASlC,SAAS,iBAAiB,UAA0B;AAClD,SAAO,MAAM,SAAS,QAAQ,iBAAiB,GAAG;AACpD;AAKA,SAAS,WAAW,GAAmB;AACrC,SAAO,MAAM,EAAE,QAAQ,MAAM,OAAO,IAAI;AAC1C;AAMA,SAAS,uBAAuB,UAA0B;AACxD,QAAM,KAAK,iBAAiB,QAAQ;AACpC,QAAM,SAAS,WAAW,QAAQ;AAClC,QAAM,gBACJ,GAAG,MAAM;AAGX,SACE,GAAG,EAAE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,0BAasB,aAAa;AAAA;AAAA;AAAA;AAAA;AAAA,cAKzB,EAAE,IAAI,MAAM;AAAA;AAE/B;AAEA,SAAS,sBAAsB,UAA0B;AACvD,QAAM,KAAK,iBAAiB,QAAQ;AACpC,QAAM,SAAS,WAAW,QAAQ;AAClC,QAAM,gBACJ,GAAG,MAAM;AAGX,SACE,YAAY,QAAQ;AAAA;AAAA,EAEjB,EAAE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,qCAeiC,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,iCAMZ,aAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,UAQpC,EAAE,IAAI,MAAM;AAAA;AAE3B;AAEA,SAAS,uBAAuB,UAA0B;AACxD,QAAM,SAAS,WAAW,QAAQ;AAClC,QAAM,gBACJ,GAAG,MAAM;AAGX,SACE,0BAA0B,QAAQ;AAAA,cACnB,MAAM;AAAA,cAEN,MAAM;AAAA,cAEN,MAAM;AAAA,cAEN,MAAM;AAAA;AAAA,cAGN,MAAM,+CACZ,aAAa;AAAA;AAE1B;AAMA,SAAS,cACP,SACA,UACA,aACQ;AACR,MAAI,CAAC,SAAS;AACZ,WAAO,OAAO,QAAQ,IAAI,WAAW;AAAA,EACvC;AAEA,QAAM,QAAQ,CAAC,OAAO,QAAQ,IAAI,WAAW,MAAM;AACnD,aAAW,OAAO,QAAQ,SAAS;AACjC,UAAM,OAAO,IAAI,QAAQ,IAAI,SAAS;AACtC,QAAI,IAAI,YAAY,GAAG;AACrB,YAAM,KAAK,IAAI,IAAI,GAAG;AAAA,IACxB,WAAW,IAAI,UAAU;AACvB,YAAM,YAAY,IAAI,aAAa,WAAW,SAAS,YAAY;AACnE,YAAM,KAAK,GAAG,IAAI,QAAQ,QAAQ,MAAM;AAAA,IAC1C,OAAO;AACL,YAAM,YAAY,IAAI,aAAa,WAAW,SAAS,YAAY;AACnE,YAAM,KAAK,IAAI,IAAI,QAAQ,QAAQ,OAAO;AAAA,IAC5C;AAAA,EACF;AAEA,aAAW,OAAO,QAAQ,uBAAuB,CAAC,GAAG;AACnD,UAAM,OAAO,IAAI,KAAK,EAAE,YAAY;AACpC,QAAI,IAAI,UAAU;AAChB,YAAM,KAAK,OAAO,IAAI,MAAM;AAAA,IAC9B,OAAO;AACL,YAAM,KAAK,QAAQ,IAAI,OAAO;AAAA,IAChC;AAAA,EACF;AAEA,SAAO,MAAM,KAAK,GAAG;AACvB;AAEA,SAAS,gBACP,aACA,SACA,UACA,UAAU,eACF;AACR,QAAM,SAAQ,oBAAI,KAAK,GAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AAClD,QAAM,QAAQ,GAAG,QAAQ,IAAI,WAAW,GAAG,YAAY;AACvD,QAAM,WAAW,GAAG,QAAQ,IAAI,OAAO;AACvC,QAAM,cAAc,GAAG,QAAQ;AAE/B,QAAM,WAAqB,CAAC;AAC5B,WAAS,KAAK,QAAQ,KAAK,UAAU,KAAK,MAAM,QAAQ,MAAM,WAAW,GAAG;AAE5E,WAAS,KAAK,UAAU;AACxB,QAAM,OAAO,SAAS,YAAY,KAAK;AACvC,QAAM,WAAW,KAAK,MAAM,IAAI,EAAE,CAAC,EAAE,QAAQ,OAAO,EAAE;AACtD,WAAS,KAAK,GAAG,QAAQ,IAAI,WAAW,QAAQ,QAAQ,EAAE;AAE1D,WAAS,KAAK,cAAc;AAC5B,WAAS,KAAK,cAAc,SAAS,UAAU,WAAW,CAAC;AAE3D,MAAI,SAAS,YAAY,GAAG;AAC1B,aAAS,KAAK,iBAAiB;AAC/B,aAAS;AAAA,MACP,QAAQ,YAAY,EAAE,QAAQ,OAAO,MAAM,EAAE,QAAQ,MAAM,KAAK;AAAA,IAClE;AAAA,EACF;AAEA,MAAI,WAAW,QAAQ,QAAQ,SAAS,GAAG;AACzC,aAAS,KAAK,aAAa;AAC3B,eAAW,OAAO,QAAQ,SAAS;AACjC,YAAM,OAAO,CAAC,IAAI,OAAO,IAAI,IAAI,EAAE,OAAO,OAAO,EAAE,KAAK,IAAI;AAC5D,eAAS,KAAK,KAAK;AACnB,UAAI,IAAI,YAAY,GAAG;AACrB,iBAAS,KAAK,OAAO,IAAI,MAAM;AAAA,MACjC,OAAO;AACL,iBAAS,KAAK,OAAO,IAAI,oBAAoB;AAAA,MAC/C;AACA,UAAI,IAAI,aAAa;AACnB,iBAAS,KAAK,IAAI,WAAW;AAAA,MAC/B;AACA,UAAI,IAAI,iBAAiB,UAAa,CAAC,IAAI,YAAY,GAAG;AACxD,iBAAS,KAAK,YAAY,IAAI,YAAY,GAAG;AAAA,MAC/C;AAAA,IACF;AAAA,EACF;AAEA,WAAS,KAAK,iBAAiB;AAC/B,WAAS,KAAK,KAAK;AACnB,WAAS,KAAK,gCAAgC;AAC9C,WAAS;AAAA,IACP;AAAA,EACF;AACA,WAAS,KAAK,KAAK;AACnB,WAAS,KAAK,iCAAiC;AAC/C,WAAS;AAAA,IACP;AAAA,EACF;AACA,WAAS,KAAK,KAAK;AACnB,WAAS,KAAK,kCAAkC;AAChD,WAAS;AAAA,IACP;AAAA,EAEF;AACA,WAAS,KAAK,KAAK;AACnB,WAAS,KAAK,8BAA8B;AAC5C,WAAS;AAAA,IACP;AAAA,EAEF;AAEA,WAAS,KAAK,gBAAgB;AAC9B,QAAM,YAAgC;AAAA,IACpC,CAAC,KAAK,UAAU;AAAA,IAChB,CAAC,KAAK,yBAAyB;AAAA,IAC/B,CAAC,KAAK,wCAAwC;AAAA,IAC9C,CAAC,MAAM,gDAAgD;AAAA,IACvD,CAAC,MAAM,sCAAsC;AAAA,IAC7C;AAAA,MACE;AAAA,MACA;AAAA,IACF;AAAA,IACA;AAAA,MACE;AAAA,MACA;AAAA,IACF;AAAA,IACA,CAAC,MAAM,0CAA0C;AAAA,IACjD,CAAC,MAAM,6DAAwD;AAAA,IAC/D,CAAC,OAAO,kDAAkD;AAAA,EAC5D;AACA,aAAW,CAAC,MAAM,OAAO,KAAK,WAAW;AACvC,aAAS,KAAK;AAAA,MAAY,IAAI;AAAA,EAAS,OAAO,EAAE;AAAA,EAClD;AAEA,WAAS,KAAK,cAAc;AAC5B,WAAS;AAAA,IACP;AAAA,MACE,OAAO,QAAQ;AAAA,MACf,OAAO,QAAQ;AAAA,MACf,OAAO,QAAQ;AAAA,MACf,OAAO,QAAQ;AAAA,IACjB,EAAE,KAAK,IAAI;AAAA,EACb;AAEA,SAAO,SAAS,KAAK,IAAI;AAC3B;AASO,SAAS,sBACd,KACA,WAAW,cACL;AACN,QAAM,gBAAgB,IAAIF,SAAQ,YAAY,EAC3C;AAAA,IACC;AAAA,EACF,EACC,SAAS,WAAW,gCAAgC,EACpD,OAAO,CAAC,UAAkB;AACzB,UAAM,cAAc,CAAC,QAAQ,OAAO,MAAM;AAC1C,QAAI,CAAC,YAAY,SAAS,KAAK,GAAG;AAChC,cAAQ,OAAO;AAAA,QACb,yBAAyB,KAAK;AAAA;AAAA,MAChC;AACA,cAAQ,KAAK,WAAW,iBAAiB;AAAA,IAC3C;AAEA,UAAM,WAAW,IAAI,KAAK,KAAK;AAC/B,UAAM,aAA2C;AAAA,MAC/C,MAAM,MAAM,uBAAuB,QAAQ;AAAA,MAC3C,KAAK,MAAM,sBAAsB,QAAQ;AAAA,MACzC,MAAM,MAAM,uBAAuB,QAAQ;AAAA,IAC7C;AACA,YAAQ,OAAO,MAAM,WAAW,KAAK,EAAE,CAAC;AAAA,EAC1C,CAAC;AACH,MAAI,WAAW,aAAa;AAE5B,QAAM,SAAS,IAAIA,SAAQ,KAAK,EAC7B,YAAY,8DAA8D,EAC1E,SAAS,aAAa,kCAAkC,EACxD,OAAO,CAAC,gBAAwB;AAC/B,UAAM,gBAAgB,oBAAI,IAAI,CAAC,QAAQ,YAAY,cAAc,KAAK,CAAC;AACvE,UAAM,MAAM,IAAI,SAAS,KAAK,CAAC,MAAM,EAAE,KAAK,MAAM,WAAW,KAAK;AAElE,QAAI,CAAC,OAAO,CAAC,cAAc,IAAI,WAAW,GAAG;AAC3C,cAAQ,OAAO;AAAA,QACb,2BAA2B,WAAW;AAAA;AAAA,MACxC;AACA,cAAQ,KAAK,WAAW,iBAAiB;AAAA,IAC3C;AAEA,UAAM,WAAW,IAAI,KAAK,KAAK;AAC/B,UAAM,OAAO,gBAAgB,aAAa,KAAK,QAAQ;AACvD,YAAQ,OAAO,MAAM,IAAI;AAAA,EAC3B,CAAC;AACH,MAAI,WAAW,MAAM;AACvB;;;AV5SA;AAiBA;","names":["error","path","crypto","os","hostname","fs","os","path","fileURLToPath","path","resolve","__dirname","fileURLToPath","error","Sandbox","getAuditLogger","resolve","fs","Command","Command","readFileSync","fileURLToPath","path","Command","__dirname","pkg"]}
+{"version":3,"sources":["../../node_modules/tsup/assets/esm_shims.js","../../src/errors.ts","../../src/security/audit.ts","../../src/security/config-encryptor.ts","../../src/security/auth.ts","../../src/security/sandbox.ts","../../src/security/index.ts","../../src/index.ts","../../src/main.ts","../../src/ref-resolver.ts","../../src/schema-parser.ts","../../src/approval.ts","../../src/output.ts","../../src/logger.ts","../../src/cli.ts","../../src/config.ts","../../src/discovery.ts","../../src/shell.ts"],"sourcesContent":["// Shim globals in esm bundle\nimport path from 'node:path'\nimport { fileURLToPath } from 'node:url'\n\nconst getFilename = () => fileURLToPath(import.meta.url)\nconst getDirname = () => path.dirname(getFilename())\n\nexport const __dirname = /* @__PURE__ */ getDirname()\nexport const __filename = /* @__PURE__ */ getFilename()\n","/**\n * Error classes and exit code mapping for apcore-cli.\n *\n * Protocol spec: Error handling & exit codes\n */\n\n// ---------------------------------------------------------------------------\n// Error classes\n// ---------------------------------------------------------------------------\n\n/** Thrown when the user does not approve module execution within the timeout. */\nexport class ApprovalTimeoutError extends Error {\n  constructor(message = \"Approval timed out\") {\n    super(message);\n    this.name = \"ApprovalTimeoutError\";\n  }\n}\n\n/** Thrown when API key authentication fails or is missing. */\nexport class AuthenticationError extends Error {\n  constructor(message = \"Authentication failed\") {\n    super(message);\n    this.name = \"AuthenticationError\";\n  }\n}\n\n/** Thrown when encrypted config cannot be decrypted. */\nexport class ConfigDecryptionError extends Error {\n  constructor(message = \"Config decryption failed\") {\n    super(message);\n    this.name = \"ConfigDecryptionError\";\n  }\n}\n\n/** Thrown when module execution fails. */\nexport class ModuleExecutionError extends Error {\n  constructor(message = \"Module execution failed\") {\n    super(message);\n    this.name = \"ModuleExecutionError\";\n  }\n}\n\n/** Thrown when approval is denied by the user. */\nexport class ApprovalDeniedError extends Error {\n  constructor(message = \"Approval denied\") {\n    super(message);\n    this.name = \"ApprovalDeniedError\";\n  }\n}\n\n/** Thrown when schema validation fails. */\nexport class SchemaValidationError extends Error {\n  constructor(message = \"Schema validation failed\") {\n    super(message);\n    this.name = \"SchemaValidationError\";\n  }\n}\n\n/** Thrown when a module is not found. */\nexport class ModuleNotFoundError extends Error {\n  constructor(message = \"Module not found\") {\n    super(message);\n    this.name = \"ModuleNotFoundError\";\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Exit code map\n// ---------------------------------------------------------------------------\n\nexport const EXIT_CODES = {\n  SUCCESS: 0,\n  MODULE_EXECUTE_ERROR: 1,\n  MODULE_TIMEOUT: 1,\n  INVALID_CLI_INPUT: 2,\n  MODULE_NOT_FOUND: 44,\n  MODULE_LOAD_ERROR: 44,\n  MODULE_DISABLED: 44,\n  SCHEMA_VALIDATION_ERROR: 45,\n  APPROVAL_DENIED: 46,\n  APPROVAL_TIMEOUT: 46,\n  CONFIG_NOT_FOUND: 47,\n  CONFIG_INVALID: 47,\n  SCHEMA_CIRCULAR_REF: 48,\n  ACL_DENIED: 77,\n  KEYBOARD_INTERRUPT: 130,\n} as const;\n\nexport type ExitCode = (typeof EXIT_CODES)[keyof typeof EXIT_CODES];\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/**\n * Map a caught error to the appropriate process exit code.\n * Also checks for apcore error codes on the error object.\n */\nexport function exitCodeForError(error: unknown): ExitCode {\n  if (error instanceof ApprovalTimeoutError) {\n    return EXIT_CODES.APPROVAL_TIMEOUT;\n  }\n  if (error instanceof ApprovalDeniedError) {\n    return EXIT_CODES.APPROVAL_DENIED;\n  }\n  if (error instanceof AuthenticationError) {\n    return EXIT_CODES.ACL_DENIED;\n  }\n  if (error instanceof ConfigDecryptionError) {\n    return EXIT_CODES.CONFIG_INVALID;\n  }\n  if (error instanceof SchemaValidationError) {\n    return EXIT_CODES.SCHEMA_VALIDATION_ERROR;\n  }\n  if (error instanceof ModuleNotFoundError) {\n    return EXIT_CODES.MODULE_NOT_FOUND;\n  }\n  if (error instanceof ModuleExecutionError) {\n    return EXIT_CODES.MODULE_EXECUTE_ERROR;\n  }\n\n  // Check for apcore error codes on the error object\n  if (error instanceof Error) {\n    const code = (error as unknown as Record<string, unknown>).code as string | undefined;\n    const codeMap: Record<string, ExitCode> = {\n      MODULE_NOT_FOUND: EXIT_CODES.MODULE_NOT_FOUND,\n      MODULE_LOAD_ERROR: EXIT_CODES.MODULE_LOAD_ERROR,\n      MODULE_DISABLED: EXIT_CODES.MODULE_DISABLED,\n      SCHEMA_VALIDATION_ERROR: EXIT_CODES.SCHEMA_VALIDATION_ERROR,\n      SCHEMA_CIRCULAR_REF: EXIT_CODES.SCHEMA_CIRCULAR_REF,\n      APPROVAL_DENIED: EXIT_CODES.APPROVAL_DENIED,\n      APPROVAL_TIMEOUT: EXIT_CODES.APPROVAL_TIMEOUT,\n      CONFIG_NOT_FOUND: EXIT_CODES.CONFIG_NOT_FOUND,\n      CONFIG_INVALID: EXIT_CODES.CONFIG_INVALID,\n      MODULE_EXECUTE_ERROR: EXIT_CODES.MODULE_EXECUTE_ERROR,\n      MODULE_TIMEOUT: EXIT_CODES.MODULE_TIMEOUT,\n      ACL_DENIED: EXIT_CODES.ACL_DENIED,\n    };\n    if (code && code in codeMap) {\n      return codeMap[code];\n    }\n  }\n\n  return EXIT_CODES.MODULE_EXECUTE_ERROR;\n}\n","/**\n * AuditLogger — JSONL audit trail.\n *\n * Protocol spec: Security — audit logging\n */\n\nimport * as crypto from \"node:crypto\";\nimport * as fs from \"node:fs\";\nimport * as os from \"node:os\";\nimport * as path from \"node:path\";\n\n// ---------------------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------------------\n\ntype ExecutionStatus = \"success\" | \"error\";\n\ninterface AuditEntry {\n  timestamp: string;\n  user: string;\n  module_id: string;\n  input_hash: string;\n  status: ExecutionStatus;\n  exit_code: number;\n  duration_ms: number;\n}\n\n// ---------------------------------------------------------------------------\n// AuditLogger\n// ---------------------------------------------------------------------------\n\n/**\n * Appends structured JSONL entries to an audit log file for every module\n * execution, supporting compliance and debugging.\n */\nlet _auditLogger: AuditLogger | null = null;\n\n/**\n * Set the module-level audit logger instance.\n */\nexport function setAuditLogger(auditLogger: AuditLogger | null): void {\n  _auditLogger = auditLogger;\n}\n\n/**\n * Get the current module-level audit logger instance.\n */\nexport function getAuditLogger(): AuditLogger | null {\n  return _auditLogger;\n}\n\nexport class AuditLogger {\n  static readonly DEFAULT_PATH = path.join(\n    os.homedir(),\n    \".apcore-cli\",\n    \"audit.jsonl\",\n  );\n\n  private readonly logPath: string;\n\n  constructor(path?: string) {\n    this.logPath = path ?? AuditLogger.DEFAULT_PATH;\n    this.ensureDirectory();\n  }\n\n  private ensureDirectory(): void {\n    try {\n      fs.mkdirSync(path.dirname(this.logPath), { recursive: true });\n    } catch {\n      // Silently ignore — we'll handle write errors in logExecution\n    }\n  }\n\n  logExecution(\n    moduleId: string,\n    inputData: Record<string, unknown>,\n    status: ExecutionStatus,\n    exitCode: number,\n    durationMs: number,\n  ): void {\n    const entry: AuditEntry = {\n      timestamp: new Date().toISOString(),\n      user: this.getUser(),\n      module_id: moduleId,\n      input_hash: this.hashInput(inputData),\n      status,\n      exit_code: exitCode,\n      duration_ms: durationMs,\n    };\n    try {\n      fs.appendFileSync(this.logPath, JSON.stringify(entry) + \"\\n\");\n    } catch (err) {\n      console.warn(`Could not write audit log: ${err}`);\n    }\n  }\n\n  private hashInput(inputData: Record<string, unknown>): string {\n    const salt = crypto.randomBytes(16);\n    const sortedKeys = Object.keys(inputData).sort();\n    const payload = JSON.stringify(inputData, sortedKeys);\n    return crypto\n      .createHash(\"sha256\")\n      .update(Buffer.concat([salt, Buffer.from(payload, \"utf-8\")]))\n      .digest(\"hex\");\n  }\n\n  private getUser(): string {\n    try {\n      return os.userInfo().username;\n    } catch {\n      return process.env.USER ?? process.env.USERNAME ?? \"unknown\";\n    }\n  }\n}\n","/**\n * ConfigEncryptor — Keyring + AES-256-GCM fallback.\n *\n * Protocol spec: Security — config encryption\n */\n\nimport * as crypto from \"node:crypto\";\nimport * as os from \"node:os\";\nimport { ConfigDecryptionError } from \"../errors.js\";\n\n// ---------------------------------------------------------------------------\n// Keytar dynamic import helper\n// ---------------------------------------------------------------------------\n\nlet keytarModule: any = null; // eslint-disable-line @typescript-eslint/no-explicit-any\nasync function getKeytar(): Promise<any> { // eslint-disable-line @typescript-eslint/no-explicit-any\n  if (keytarModule) return keytarModule;\n  try {\n    // @ts-expect-error — keytar is an optional peer dependency\n    keytarModule = await import(\"keytar\");\n    return keytarModule;\n  } catch {\n    return null;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// ConfigEncryptor\n// ---------------------------------------------------------------------------\n\n/**\n * Encrypts and decrypts configuration values. Prefers OS keyring for key\n * storage, falling back to AES-256-GCM with a derived key.\n */\nexport class ConfigEncryptor {\n  static readonly SERVICE_NAME = \"apcore-cli\";\n\n  /**\n   * Encrypt and store a configuration value.\n   */\n  async store(key: string, value: string): Promise<string> {\n    const keytar = await getKeytar();\n    if (keytar) {\n      try {\n        await keytar.setPassword(ConfigEncryptor.SERVICE_NAME, key, value);\n        return `keyring:${key}`;\n      } catch {\n        // Fall through to file-based encryption\n      }\n    }\n    console.warn(\"OS keyring unavailable. Using file-based encryption.\");\n    const ciphertext = this.aesEncrypt(value);\n    return `enc:${Buffer.from(ciphertext).toString(\"base64\")}`;\n  }\n\n  /**\n   * Retrieve and decrypt a configuration value.\n   */\n  async retrieve(configValue: string, key: string): Promise<string> {\n    if (configValue.startsWith(\"keyring:\")) {\n      const keytar = await getKeytar();\n      if (!keytar) {\n        throw new ConfigDecryptionError(\n          `Keyring module not available to retrieve '${key}'.`,\n        );\n      }\n      try {\n        const refKey = configValue.slice(\"keyring:\".length);\n        const result = await keytar.getPassword(\n          ConfigEncryptor.SERVICE_NAME,\n          refKey,\n        );\n        if (result === null || result === undefined) {\n          throw new ConfigDecryptionError(\n            `Keyring entry not found for '${refKey}'.`,\n          );\n        }\n        return result;\n      } catch (err) {\n        if (err instanceof ConfigDecryptionError) throw err;\n        throw new ConfigDecryptionError(\n          `Failed to retrieve from keyring: ${err}`,\n        );\n      }\n    }\n\n    if (configValue.startsWith(\"enc:\")) {\n      const ciphertext = Buffer.from(\n        configValue.slice(\"enc:\".length),\n        \"base64\",\n      );\n      try {\n        return this.aesDecrypt(ciphertext);\n      } catch {\n        throw new ConfigDecryptionError(\n          `Failed to decrypt configuration value '${key}'. Re-configure with 'apcore-cli config set ${key}'.`,\n        );\n      }\n    }\n\n    // Unrecognized prefix — return as-is\n    return configValue;\n  }\n\n  // NOTE: Best-effort fallback when OS keyring is unavailable.\n  // The key is derived from hostname + username (non-secret inputs).\n  // For production security, ensure the OS keyring is accessible.\n  private deriveKey(): Buffer {\n    const hostname = os.hostname();\n    const username =\n      process.env.USER ?? process.env.USERNAME ?? \"unknown\";\n    const salt = Buffer.from(\"apcore-cli-config-v1\");\n    const material = `${hostname}:${username}`;\n    return crypto.pbkdf2Sync(material, salt, 100_000, 32, \"sha256\");\n  }\n\n  private aesEncrypt(plaintext: string): Buffer {\n    const key = this.deriveKey();\n    const nonce = crypto.randomBytes(12);\n    const cipher = crypto.createCipheriv(\"aes-256-gcm\", key, nonce);\n    const ct = Buffer.concat([\n      cipher.update(plaintext, \"utf-8\"),\n      cipher.final(),\n    ]);\n    const tag = cipher.getAuthTag();\n    // Wire format: nonce(12) + tag(16) + ciphertext\n    return Buffer.concat([nonce, tag, ct]);\n  }\n\n  private aesDecrypt(data: Buffer): string {\n    const key = this.deriveKey();\n    const nonce = data.subarray(0, 12);\n    const tag = data.subarray(12, 28);\n    const ct = data.subarray(28);\n    const decipher = crypto.createDecipheriv(\"aes-256-gcm\", key, nonce);\n    decipher.setAuthTag(tag);\n    const plaintext = Buffer.concat([decipher.update(ct), decipher.final()]);\n    return plaintext.toString(\"utf-8\");\n  }\n}\n","/**\n * AuthProvider — API key auth with keyring/encrypted storage.\n *\n * Protocol spec: Security — authentication\n */\n\nimport type { ConfigResolver } from \"../config.js\";\nimport { AuthenticationError } from \"../errors.js\";\nimport { ConfigEncryptor } from \"./config-encryptor.js\";\n\n// ---------------------------------------------------------------------------\n// AuthProvider\n// ---------------------------------------------------------------------------\n\n/**\n * Manages API key retrieval and request authentication.\n */\nexport class AuthProvider {\n  private readonly config: ConfigResolver;\n  private readonly encryptor: ConfigEncryptor;\n\n  constructor(config: ConfigResolver, encryptor?: ConfigEncryptor) {\n    this.config = config;\n    this.encryptor = encryptor ?? new ConfigEncryptor();\n  }\n\n  /**\n   * Retrieve the API key from the configured sources.\n   * Handles keyring: and enc: prefixes via ConfigEncryptor.\n   */\n  async getApiKey(): Promise<string | null> {\n    const result = this.config.resolve(\n      \"auth.api_key\",\n      \"--api-key\",\n      \"APCORE_AUTH_API_KEY\",\n    );\n    if (result === null || result === undefined) {\n      return null;\n    }\n    const strResult = String(result);\n    if (strResult.startsWith(\"keyring:\") || strResult.startsWith(\"enc:\")) {\n      return this.encryptor.retrieve(strResult, \"auth.api_key\");\n    }\n    return strResult;\n  }\n\n  /**\n   * Add authentication headers to an outgoing request.\n   */\n  async authenticateRequest(\n    headers: Record<string, string>,\n  ): Promise<Record<string, string>> {\n    const key = await this.getApiKey();\n    if (!key) {\n      throw new AuthenticationError(\n        \"Remote registry requires authentication. \" +\n          \"Set --api-key, APCORE_AUTH_API_KEY, or auth.api_key in config.\",\n      );\n    }\n    return { ...headers, Authorization: `Bearer ${key}` };\n  }\n\n  /**\n   * Handle an HTTP response status code for auth-related errors.\n   */\n  handleResponse(statusCode: number): void {\n    if (statusCode === 401 || statusCode === 403) {\n      throw new AuthenticationError(\n        \"Authentication failed. Verify your API key.\",\n      );\n    }\n  }\n}\n","/**\n * Sandbox — Subprocess isolation for module execution.\n *\n * Protocol spec: Security — sandboxed execution\n */\n\nimport * as child_process from \"node:child_process\";\nimport * as fs from \"node:fs\";\nimport * as os from \"node:os\";\nimport * as path from \"node:path\";\nimport type { Executor } from \"../cli.js\";\nimport { ModuleExecutionError } from \"../errors.js\";\n\n// ---------------------------------------------------------------------------\n// Sandbox\n// ---------------------------------------------------------------------------\n\n/**\n * Executes modules in an isolated subprocess to limit the blast radius\n * of untrusted or third-party modules.\n *\n * When disabled, delegates directly to the Executor.\n */\nexport class Sandbox {\n  private readonly enabled: boolean;\n\n  constructor(enabled = false) {\n    this.enabled = enabled;\n  }\n\n  /**\n   * Execute a module, optionally inside a sandboxed subprocess.\n   */\n  async execute(\n    moduleId: string,\n    inputData: Record<string, unknown>,\n    executor: Executor,\n  ): Promise<unknown> {\n    if (!this.enabled) {\n      return executor.execute(moduleId, inputData);\n    }\n    return this.sandboxedExecute(moduleId, inputData);\n  }\n\n  private sandboxedExecute(\n    moduleId: string,\n    inputData: Record<string, unknown>,\n  ): unknown {\n    // Build restricted environment\n    const env: Record<string, string> = {};\n    for (const key of [\"PATH\", \"NODE_PATH\", \"LANG\", \"LC_ALL\"]) {\n      if (process.env[key]) {\n        env[key] = process.env[key]!;\n      }\n    }\n    for (const [key, value] of Object.entries(process.env)) {\n      if (key.startsWith(\"APCORE_\") && value) {\n        env[key] = value;\n      }\n    }\n\n    const tmpDir = fs.mkdtempSync(\n      path.join(os.tmpdir(), \"apcore_sandbox_\"),\n    );\n\n    try {\n      env.HOME = tmpDir;\n      env.TMPDIR = tmpDir;\n\n      const script = [\n        \"let d='';\",\n        \"process.stdin.setEncoding('utf-8');\",\n        \"process.stdin.on('data',c=>d+=c);\",\n        \"process.stdin.on('end',()=>{\",\n        \"  const input=JSON.parse(d);\",\n        `  process.stdout.write(JSON.stringify({error:\"Sandbox runner not yet implemented for module: ${moduleId}\"}));`,\n        \"});\",\n      ].join(\"\");\n\n      const result = child_process.execFileSync(\n        process.execPath,\n        [\"-e\", script],\n        {\n          input: JSON.stringify(inputData),\n          env,\n          cwd: tmpDir,\n          timeout: 300_000,\n          maxBuffer: 10 * 1024 * 1024,\n        },\n      );\n\n      return JSON.parse(result.toString(\"utf-8\"));\n    } catch (err: unknown) {\n      if (\n        err instanceof Error &&\n        \"killed\" in err &&\n        (err as Record<string, unknown>).killed\n      ) {\n        throw new ModuleExecutionError(\n          `Error: Module '${moduleId}' timed out in sandbox.`,\n        );\n      }\n      const stderr =\n        err instanceof Error && \"stderr\" in err\n          ? String((err as Record<string, unknown>).stderr)\n          : String(err);\n      throw new ModuleExecutionError(\n        `Error: Module '${moduleId}' execution failed: ${stderr}`,\n      );\n    } finally {\n      try {\n        fs.rmSync(tmpDir, { recursive: true, force: true });\n      } catch {\n        // Best effort cleanup\n      }\n    }\n  }\n}\n","/**\n * Security module re-exports.\n *\n * Protocol spec: Security subsystem\n */\n\nexport { AuditLogger, setAuditLogger, getAuditLogger } from \"./audit.js\";\nexport { AuthProvider } from \"./auth.js\";\nexport { ConfigEncryptor } from \"./config-encryptor.js\";\nexport { Sandbox } from \"./sandbox.js\";\n","/**\n * apcore-cli — Public API exports.\n *\n * This module re-exports the public surface of the apcore CLI package.\n */\n\n// Core CLI\nexport { createCli, main, buildModuleCommand, validateModuleId, collectInput, reconvertEnumValues } from \"./main.js\";\nexport type { OptionConfig } from \"./main.js\";\n\n// Lazy module loading\nexport { LazyModuleGroup } from \"./cli.js\";\nexport type { Registry, Executor, ModuleDescriptor } from \"./cli.js\";\n\n// Configuration\nexport { ConfigResolver, DEFAULTS } from \"./config.js\";\n\n// Discovery\nexport { registerDiscoveryCommands } from \"./discovery.js\";\n\n// Output formatting\nexport { formatExecResult, resolveFormat, truncate, formatModuleList, formatModuleDetail } from \"./output.js\";\n\n// Schema handling\nexport { resolveRefs } from \"./ref-resolver.js\";\nexport { schemaToCliOptions, mapType, extractHelp } from \"./schema-parser.js\";\n\n// Approval\nexport { checkApproval } from \"./approval.js\";\n\n// Shell integration\nexport { registerShellCommands } from \"./shell.js\";\n\n// Errors\nexport {\n  ApprovalTimeoutError,\n  ApprovalDeniedError,\n  AuthenticationError,\n  ConfigDecryptionError,\n  ModuleExecutionError,\n  ModuleNotFoundError,\n  SchemaValidationError,\n  EXIT_CODES,\n  exitCodeForError,\n} from \"./errors.js\";\nexport type { ExitCode } from \"./errors.js\";\n\n// Logger\nexport { setLogLevel, getLogLevel, debug, info, warn, error } from \"./logger.js\";\n\n// Security\nexport { AuditLogger, setAuditLogger, getAuditLogger, AuthProvider, ConfigEncryptor, Sandbox } from \"./security/index.js\";\n","/**\n * CLI entry point — createCli / main equivalents.\n *\n * Protocol spec: CLI bootstrapping & command registration\n */\n\nimport { readFileSync } from \"node:fs\";\nimport { fileURLToPath } from \"node:url\";\nimport * as path from \"node:path\";\nimport { Command, CommanderError } from \"commander\";\nimport { EXIT_CODES, exitCodeForError } from \"./errors.js\";\nimport { resolveRefs } from \"./ref-resolver.js\";\nimport { schemaToCliOptions } from \"./schema-parser.js\";\nimport { checkApproval } from \"./approval.js\";\nimport { formatExecResult } from \"./output.js\";\nimport { setLogLevel } from \"./logger.js\";\nimport type { Executor, ModuleDescriptor } from \"./cli.js\";\n\nconst __dirname = path.dirname(fileURLToPath(import.meta.url));\nconst pkg = JSON.parse(readFileSync(path.resolve(__dirname, \"../package.json\"), \"utf-8\"));\nconst VERSION: string = pkg.version;\n\n// ---------------------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------------------\n\n/** Configuration for a single Commander option derived from a JSON Schema property. */\nexport interface OptionConfig {\n  /** The property name from the schema. */\n  name: string;\n  /** Commander flags string (e.g. \"--my-flag <value>\" or \"--flag, --no-flag\"). */\n  flags: string;\n  /** Help text for the option. */\n  description: string;\n  /** Default value. */\n  defaultValue?: unknown;\n  /** Whether the field is required (for display only). */\n  required: boolean;\n  /** Enum choices (string values). */\n  choices?: string[];\n  /** Whether this is a boolean flag pair (--flag/--no-flag). */\n  isBooleanFlag?: boolean;\n  /** Maps string enum value → original type name (\"int\", \"float\", \"bool\"). */\n  enumOriginalTypes?: Record<string, string>;\n  /** Parser function for Commander (e.g. parseInt, parseFloat). */\n  parseArg?: (value: string) => unknown;\n}\n\n// ---------------------------------------------------------------------------\n// createCli\n// ---------------------------------------------------------------------------\n\n/**\n * Build and return the top-level Commander program.\n *\n * @param extensionsDir  Path to the extensions directory (default: ./extensions)\n * @param progName       Program name shown in help (default: apcore-cli)\n */\nexport function createCli(\n  extensionsDir?: string,\n  progName?: string,\n): Command {\n  // Resolve program name\n  const resolvedProgName = progName ?? path.basename(process.argv[1] ?? \"apcore-cli\") ?? \"apcore-cli\";\n\n  // Resolve log level\n  const cliLogLevel = process.env.APCORE_CLI_LOGGING_LEVEL ?? process.env.APCORE_LOGGING_LEVEL ?? \"WARNING\";\n  setLogLevel(cliLogLevel);\n\n  const program = new Command(resolvedProgName)\n    .exitOverride()\n    .version(VERSION, \"--version\", `Show ${resolvedProgName} version`)\n    .description(\"apcore CLI — execute apcore modules from the command line\")\n    .option(\"--extensions-dir <path>\", \"Path to extensions directory\")\n    .option(\"--log-level <level>\", \"Logging level (DEBUG|INFO|WARNING|ERROR)\", \"WARNING\");\n\n  // NOTE: Full registry/executor wiring requires apcore-js to be available.\n  // For now, extensions-dir is accepted but not wired to a real registry.\n  void extensionsDir;\n\n  return program;\n}\n\n// ---------------------------------------------------------------------------\n// main\n// ---------------------------------------------------------------------------\n\n/**\n * Parse argv and run the CLI. Handles top-level error catching and exit codes.\n */\nexport function main(progName?: string): void {\n  const program = createCli(undefined, progName);\n\n  try {\n    program.parse(process.argv);\n  } catch (error: unknown) {\n    if (error instanceof CommanderError) {\n      // Commander already printed the error message\n      process.exit(error.exitCode);\n    }\n    const code = exitCodeForError(error);\n    if (error instanceof Error) {\n      process.stderr.write(`Error: ${error.message}\\n`);\n    }\n    process.exit(code);\n  }\n}\n\n// ---------------------------------------------------------------------------\n// buildModuleCommand\n// ---------------------------------------------------------------------------\n\n/**\n * Build a Commander Command for a single apcore module.\n */\nexport function buildModuleCommand(\n  moduleDef: ModuleDescriptor,\n  executor: Executor,\n  helpTextMaxLength = 1000,\n): Command {\n  const moduleId = moduleDef.id;\n  let resolvedSchema: Record<string, unknown> = {};\n  let schemaOptions: OptionConfig[] = [];\n\n  // Resolve schema\n  const inputSchema = moduleDef.inputSchema;\n  if (inputSchema && typeof inputSchema === \"object\" && inputSchema.properties) {\n    try {\n      resolvedSchema = resolveRefs(inputSchema, 32, moduleId);\n    } catch {\n      resolvedSchema = inputSchema;\n    }\n    schemaOptions = schemaToCliOptions(resolvedSchema, helpTextMaxLength);\n  }\n\n  const cmd = new Command(moduleId).description(moduleDef.description);\n\n  // Built-in options\n  cmd.option(\"--input <source>\", \"Read input from STDIN ('-')\");\n  cmd.option(\"-y, --yes\", \"Bypass approval prompts\", false);\n  cmd.option(\"--large-input\", \"Allow STDIN input larger than 10MB\", false);\n  cmd.option(\"--format <format>\", \"Output format (json|table)\");\n  cmd.option(\"--sandbox\", \"Run module in subprocess sandbox\", false);\n\n  // Schema-generated options\n  for (const opt of schemaOptions) {\n    if (opt.parseArg) {\n      cmd.option(opt.flags, opt.description, opt.parseArg, opt.defaultValue);\n    } else {\n      cmd.option(opt.flags, opt.description, opt.defaultValue as string | boolean | undefined);\n    }\n  }\n\n  // Action callback\n  cmd.action(async (options: Record<string, unknown>) => {\n    // Pop built-in options\n    const stdinFlag = options.input as string | undefined;\n    const autoApprove = options.yes as boolean;\n    const largeInput = options.largeInput as boolean;\n    const outputFormat = options.format as string | undefined;\n    const sandboxEnabled = options.sandbox as boolean;\n\n    // Remove built-in keys from options to get schema kwargs\n    const schemaKwargs: Record<string, unknown> = {};\n    const builtinKeys = new Set([\"input\", \"yes\", \"largeInput\", \"format\", \"sandbox\"]);\n    for (const [k, v] of Object.entries(options)) {\n      if (!builtinKeys.has(k)) {\n        schemaKwargs[k] = v;\n      }\n    }\n\n    try {\n      // Collect and merge input\n      const merged = await collectInput(stdinFlag, schemaKwargs, largeInput);\n\n      // Reconvert enum values\n      const reconverted = reconvertEnumValues(merged, schemaOptions);\n\n      // Check approval\n      await checkApproval(moduleDef, autoApprove);\n\n      // Execute with timing\n      const { Sandbox } = await import(\"./security/index.js\");\n      const sandbox = new Sandbox(sandboxEnabled);\n      const startTime = performance.now();\n      const result = await sandbox.execute(moduleId, reconverted, executor);\n      const durationMs = Math.round(performance.now() - startTime);\n\n      // Audit log (success)\n      const { getAuditLogger } = await import(\"./security/audit.js\");\n      const auditLogger = getAuditLogger();\n      if (auditLogger) {\n        auditLogger.logExecution(moduleId, reconverted, \"success\", 0, durationMs);\n      }\n\n      // Format output\n      formatExecResult(result, outputFormat);\n    } catch (err: unknown) {\n      // Audit log (error)\n      const { getAuditLogger } = await import(\"./security/audit.js\");\n      const auditLogger = getAuditLogger();\n      const code = exitCodeForError(err);\n      if (auditLogger) {\n        auditLogger.logExecution(moduleId, {}, \"error\", code, 0);\n      }\n\n      if (err instanceof Error) {\n        process.stderr.write(`Error: ${err.message}\\n`);\n      }\n      process.exit(code);\n    }\n  });\n\n  return cmd;\n}\n\n// ---------------------------------------------------------------------------\n// validateModuleId\n// ---------------------------------------------------------------------------\n\n/**\n * Validate that a module ID conforms to the expected format.\n * Pattern: [a-z][a-z0-9_]*(.[a-z][a-z0-9_])* — max 128 chars.\n */\nexport function validateModuleId(moduleId: string): void {\n  if (moduleId.length > 128) {\n    process.stderr.write(\n      `Error: Invalid module ID format: '${moduleId}'. Maximum length is 128 characters.\\n`,\n    );\n    process.exit(EXIT_CODES.INVALID_CLI_INPUT);\n  }\n  if (!/^[a-z][a-z0-9_]*(\\.[a-z][a-z0-9_]*)*$/.test(moduleId)) {\n    process.stderr.write(\n      `Error: Invalid module ID format: '${moduleId}'.\\n`,\n    );\n    process.exit(EXIT_CODES.INVALID_CLI_INPUT);\n  }\n}\n\n// ---------------------------------------------------------------------------\n// collectInput\n// ---------------------------------------------------------------------------\n\n/**\n * Collect module input from stdin and/or CLI keyword arguments.\n */\nexport async function collectInput(\n  stdinFlag?: string,\n  cliKwargs: Record<string, unknown> = {},\n  largeInput?: boolean,\n): Promise<Record<string, unknown>> {\n  // Remove null/undefined values from CLI kwargs\n  const cliKwargsNonNull: Record<string, unknown> = {};\n  for (const [k, v] of Object.entries(cliKwargs)) {\n    if (v !== null && v !== undefined) {\n      cliKwargsNonNull[k] = v;\n    }\n  }\n\n  if (!stdinFlag) {\n    return cliKwargsNonNull;\n  }\n\n  if (stdinFlag === \"-\") {\n    const raw = await readStdin();\n    const rawSize = Buffer.byteLength(raw, \"utf-8\");\n\n    if (rawSize > 10_485_760 && !largeInput) {\n      process.stderr.write(\n        \"Error: STDIN input exceeds 10MB limit. Use --large-input to override.\\n\",\n      );\n      process.exit(EXIT_CODES.INVALID_CLI_INPUT);\n    }\n\n    if (!raw) {\n      return cliKwargsNonNull;\n    }\n\n    let stdinData: unknown;\n    try {\n      stdinData = JSON.parse(raw);\n    } catch {\n      process.stderr.write(\n        \"Error: STDIN does not contain valid JSON.\\n\",\n      );\n      process.exit(EXIT_CODES.INVALID_CLI_INPUT);\n    }\n\n    if (typeof stdinData !== \"object\" || stdinData === null || Array.isArray(stdinData)) {\n      process.stderr.write(\n        `Error: STDIN JSON must be an object, got ${Array.isArray(stdinData) ? \"array\" : typeof stdinData}.\\n`,\n      );\n      process.exit(EXIT_CODES.INVALID_CLI_INPUT);\n    }\n\n    // CLI flags override STDIN for duplicate keys\n    return { ...(stdinData as Record<string, unknown>), ...cliKwargsNonNull };\n  }\n\n  return cliKwargsNonNull;\n}\n\n/**\n * Read all data from stdin with proper cleanup.\n */\nfunction readStdin(): Promise<string> {\n  return new Promise((resolve, reject) => {\n    const chunks: Buffer[] = [];\n    const onData = (chunk: Buffer) => chunks.push(chunk);\n    const onEnd = () => {\n      cleanup();\n      resolve(Buffer.concat(chunks).toString(\"utf-8\"));\n    };\n    const onError = (err: Error) => {\n      cleanup();\n      reject(err);\n    };\n    const cleanup = () => {\n      process.stdin.removeListener(\"data\", onData);\n      process.stdin.removeListener(\"end\", onEnd);\n      process.stdin.removeListener(\"error\", onError);\n    };\n    process.stdin.on(\"data\", onData);\n    process.stdin.on(\"end\", onEnd);\n    process.stdin.on(\"error\", onError);\n    process.stdin.resume();\n  });\n}\n\n// ---------------------------------------------------------------------------\n// reconvertEnumValues\n// ---------------------------------------------------------------------------\n\n/**\n * Re-convert CLI string values back to their schema-typed equivalents\n * based on the option configs.\n */\nexport function reconvertEnumValues(\n  kwargs: Record<string, unknown>,\n  options: OptionConfig[],\n): Record<string, unknown> {\n  const result = { ...kwargs };\n  for (const opt of options) {\n    if (!opt.enumOriginalTypes) continue;\n    const paramName = opt.name;\n    if (!(paramName in result) || result[paramName] === null || result[paramName] === undefined) {\n      continue;\n    }\n    const strVal = String(result[paramName]);\n    const origType = opt.enumOriginalTypes[strVal];\n    if (origType === \"int\") {\n      result[paramName] = parseInt(strVal, 10);\n    } else if (origType === \"float\") {\n      result[paramName] = parseFloat(strVal);\n    } else if (origType === \"bool\") {\n      result[paramName] = strVal.toLowerCase() === \"true\";\n    }\n  }\n  return result;\n}\n","/**\n * JSON Schema $ref resolver.\n *\n * Protocol spec: Schema resolution & $ref handling\n */\n\nimport { EXIT_CODES } from \"./errors.js\";\n\n// ---------------------------------------------------------------------------\n// resolveRefs\n// ---------------------------------------------------------------------------\n\n/**\n * Resolve all $ref references in a JSON Schema.\n * Returns a fully inlined schema with $defs/definitions removed.\n */\nexport function resolveRefs(\n  schema: Record<string, unknown>,\n  maxDepth = 32,\n  moduleId = \"\",\n): Record<string, unknown> {\n  const cloned = structuredClone(schema);\n  const defs = (cloned.$defs ?? cloned.definitions ?? {}) as Record<\n    string,\n    unknown\n  >;\n  const result = resolveNode(\n    cloned,\n    defs,\n    new Set<string>(),\n    0,\n    maxDepth,\n    moduleId,\n  ) as Record<string, unknown>;\n\n  // Remove definition keys\n  delete result.$defs;\n  delete result.definitions;\n  return result;\n}\n\nfunction resolveNode(\n  node: unknown,\n  defs: Record<string, unknown>,\n  visited: Set<string>,\n  depth: number,\n  maxDepth: number,\n  moduleId: string,\n): unknown {\n  if (typeof node !== \"object\" || node === null || Array.isArray(node)) {\n    return node;\n  }\n\n  const obj = node as Record<string, unknown>;\n\n  // Handle $ref\n  if (\"$ref\" in obj) {\n    const refPath = obj.$ref as string;\n\n    if (depth >= maxDepth) {\n      process.stderr.write(\n        `Error: $ref resolution depth exceeded maximum of ${maxDepth} for module '${moduleId}'.\\n`,\n      );\n      process.exit(EXIT_CODES.SCHEMA_CIRCULAR_REF);\n    }\n\n    if (visited.has(refPath)) {\n      process.stderr.write(\n        `Error: Circular $ref detected in schema for module '${moduleId}' at path '${refPath}'.\\n`,\n      );\n      process.exit(EXIT_CODES.SCHEMA_CIRCULAR_REF);\n    }\n\n    // Parse ref target: extract key from \"#/$defs/Address\" → \"Address\"\n    const parts = refPath.split(\"/\");\n    const key = parts[parts.length - 1];\n\n    if (!(key in defs)) {\n      process.stderr.write(\n        `Error: Unresolvable $ref '${refPath}' in schema for module '${moduleId}'.\\n`,\n      );\n      process.exit(EXIT_CODES.SCHEMA_VALIDATION_ERROR);\n    }\n\n    const newVisited = new Set(visited);\n    newVisited.add(refPath);\n    return resolveNode(defs[key], defs, newVisited, depth + 1, maxDepth, moduleId);\n  }\n\n  // Handle allOf\n  if (\"allOf\" in obj && Array.isArray(obj.allOf)) {\n    const merged: Record<string, unknown> = {\n      properties: {},\n      required: [] as string[],\n    };\n    for (const subSchema of obj.allOf as unknown[]) {\n      const resolved = resolveNode(\n        subSchema,\n        defs,\n        visited,\n        depth + 1,\n        maxDepth,\n        moduleId,\n      ) as Record<string, unknown>;\n      if (resolved.properties) {\n        Object.assign(\n          merged.properties as Record<string, unknown>,\n          resolved.properties,\n        );\n      }\n      if (Array.isArray(resolved.required)) {\n        (merged.required as string[]).push(...resolved.required);\n      }\n    }\n    // Deduplicate required\n    merged.required = [...new Set(merged.required as string[])];\n    // Copy non-composition keys\n    for (const [k, v] of Object.entries(obj)) {\n      if (k !== \"allOf\" && !(k in merged)) {\n        merged[k] = v;\n      }\n    }\n    return merged;\n  }\n\n  // Handle anyOf / oneOf\n  for (const keyword of [\"anyOf\", \"oneOf\"]) {\n    if (keyword in obj && Array.isArray(obj[keyword])) {\n      const merged: Record<string, unknown> = {\n        properties: {},\n        required: [] as string[],\n      };\n      const allRequiredSets: Set<string>[] = [];\n      for (const subSchema of obj[keyword] as unknown[]) {\n        const resolved = resolveNode(\n          subSchema,\n          defs,\n          visited,\n          depth + 1,\n          maxDepth,\n          moduleId,\n        ) as Record<string, unknown>;\n        if (resolved.properties) {\n          Object.assign(\n            merged.properties as Record<string, unknown>,\n            resolved.properties,\n          );\n        }\n        if (Array.isArray(resolved.required)) {\n          allRequiredSets.push(new Set(resolved.required as string[]));\n        }\n      }\n      // Required = intersection of all branches\n      if (allRequiredSets.length > 0) {\n        let intersection = allRequiredSets[0];\n        for (let i = 1; i < allRequiredSets.length; i++) {\n          intersection = new Set(\n            [...intersection].filter((x) => allRequiredSets[i].has(x)),\n          );\n        }\n        merged.required = [...intersection];\n      } else {\n        merged.required = [];\n      }\n      // Copy non-composition keys\n      for (const [k, v] of Object.entries(obj)) {\n        if (k !== keyword && !(k in merged)) {\n          merged[k] = v;\n        }\n      }\n      return merged;\n    }\n  }\n\n  // Recursively process nested properties\n  if (\"properties\" in obj && typeof obj.properties === \"object\" && obj.properties !== null) {\n    const props = obj.properties as Record<string, unknown>;\n    for (const [propName, propSchema] of Object.entries(props)) {\n      props[propName] = resolveNode(\n        propSchema,\n        defs,\n        visited,\n        depth + 1,\n        maxDepth,\n        moduleId,\n      );\n    }\n  }\n\n  return obj;\n}\n","/**\n * JSON Schema -> Commander options mapping.\n *\n * Protocol spec: Schema-driven argument parsing\n */\n\nimport type { OptionConfig } from \"./main.js\";\nimport { EXIT_CODES } from \"./errors.js\";\n\n// ---------------------------------------------------------------------------\n// Internal helpers\n// ---------------------------------------------------------------------------\n\n/** Sentinel type marker for boolean flags. */\nconst BOOLEAN_FLAG = Symbol(\"BOOLEAN_FLAG\");\n\ntype TypeResult = \"string\" | \"int\" | \"float\" | typeof BOOLEAN_FLAG | \"file\";\n\n/**\n * Map JSON Schema type to a type identifier.\n */\nexport function mapType(propName: string, propSchema: Record<string, unknown>): TypeResult {\n  const schemaType = propSchema.type as string | undefined;\n\n  // Check file convention\n  if (\n    schemaType === \"string\" &&\n    (propName.endsWith(\"_file\") || propSchema[\"x-cli-file\"] === true)\n  ) {\n    return \"file\";\n  }\n\n  const typeMap: Record<string, TypeResult> = {\n    string: \"string\",\n    integer: \"int\",\n    number: \"float\",\n    boolean: BOOLEAN_FLAG,\n    object: \"string\",\n    array: \"string\",\n  };\n\n  if (!schemaType) {\n    return \"string\";\n  }\n\n  return typeMap[schemaType] ?? \"string\";\n}\n\n/**\n * Extract help text from schema property, preferring x-llm-description.\n */\nexport function extractHelp(propSchema: Record<string, unknown>, maxLength = 1000): string | undefined {\n  let text = propSchema[\"x-llm-description\"] as string | undefined;\n  if (!text) {\n    text = propSchema.description as string | undefined;\n  }\n  if (!text) {\n    return undefined;\n  }\n  if (maxLength > 0 && text.length > maxLength) {\n    return text.slice(0, maxLength - 3) + \"...\";\n  }\n  return text;\n}\n\n// ---------------------------------------------------------------------------\n// schemaToCliOptions\n// ---------------------------------------------------------------------------\n\n/** Reserved CLI option names that cannot be used by schema properties. */\nconst RESERVED_NAMES = new Set([\"input\", \"yes\", \"large_input\", \"format\", \"sandbox\"]);\n\n/**\n * Convert a JSON Schema `properties` object into an array of\n * Commander option configurations.\n */\nexport function schemaToCliOptions(\n  schema: Record<string, unknown>,\n  maxHelpLength = 1000,\n): OptionConfig[] {\n  const properties = (schema.properties ?? {}) as Record<\n    string,\n    Record<string, unknown>\n  >;\n  const requiredList = (schema.required ?? []) as string[];\n  const options: OptionConfig[] = [];\n  const flagNames: Record<string, string> = {};\n\n  for (const [propName, propSchema] of Object.entries(properties)) {\n    const flagName = \"--\" + propName.replace(/_/g, \"-\");\n\n    // Collision detection\n    if (flagName in flagNames) {\n      process.stderr.write(\n        `Error: Flag name collision: properties '${propName}' and '${flagNames[flagName]}' both map to '${flagName}'.\\n`,\n      );\n      process.exit(EXIT_CODES.INVALID_CLI_INPUT);\n    }\n    flagNames[flagName] = propName;\n\n    // Reserved name check\n    if (RESERVED_NAMES.has(propName)) {\n      process.stderr.write(\n        `Error: Module schema property '${propName}' conflicts with a reserved CLI option name. Rename the property.\\n`,\n      );\n      process.exit(EXIT_CODES.INVALID_CLI_INPUT);\n    }\n\n    const typeResult = mapType(propName, propSchema);\n    const isRequired = requiredList.includes(propName);\n    const helpBase = extractHelp(propSchema, maxHelpLength);\n    const helpText = isRequired\n      ? (helpBase ? helpBase + \" \" : \"\") + \"[required]\"\n      : helpBase ?? \"\";\n    const defaultValue = propSchema.default as unknown;\n\n    if (typeResult === BOOLEAN_FLAG) {\n      // Boolean flag pair: --flag/--no-flag\n      const flagBase = propName.replace(/_/g, \"-\");\n      const defaultVal = (propSchema.default as boolean) ?? false;\n      options.push({\n        name: propName,\n        flags: `--${flagBase}, --no-${flagBase}`,\n        description: helpText,\n        defaultValue: defaultVal,\n        required: false,\n        isBooleanFlag: true,\n      });\n    } else if (\"enum\" in propSchema && Array.isArray(propSchema.enum)) {\n      const enumValues = propSchema.enum as unknown[];\n      if (enumValues.length === 0) {\n        // Empty enum — fall back to plain string option\n        options.push({\n          name: propName,\n          flags: `${flagName} <value>`,\n          description: helpText,\n          defaultValue,\n          required: false,\n        });\n      } else {\n        const stringValues = enumValues.map(String);\n        const enumOriginalTypes: Record<string, string> = {};\n        for (const v of enumValues) {\n          if (typeof v === \"number\" && Number.isInteger(v)) {\n            enumOriginalTypes[String(v)] = \"int\";\n          } else if (typeof v === \"number\") {\n            enumOriginalTypes[String(v)] = \"float\";\n          } else if (typeof v === \"boolean\") {\n            enumOriginalTypes[String(v)] = \"bool\";\n          }\n        }\n        options.push({\n          name: propName,\n          flags: `${flagName} <value>`,\n          description: helpText,\n          defaultValue:\n            defaultValue !== undefined ? String(defaultValue) : undefined,\n          required: false,\n          choices: stringValues,\n          enumOriginalTypes:\n            Object.keys(enumOriginalTypes).length > 0\n              ? enumOriginalTypes\n              : undefined,\n        });\n      }\n    } else {\n      // Standard option\n      let parseArg: ((value: string) => unknown) | undefined;\n      if (typeResult === \"int\") {\n        parseArg = (v: string) => {\n          const n = parseInt(v, 10);\n          if (isNaN(n)) throw new Error(`Invalid integer: ${v}`);\n          return n;\n        };\n      } else if (typeResult === \"float\") {\n        parseArg = (v: string) => {\n          const n = parseFloat(v);\n          if (isNaN(n)) throw new Error(`Invalid number: ${v}`);\n          return n;\n        };\n      }\n      options.push({\n        name: propName,\n        flags: `${flagName} <value>`,\n        description: helpText,\n        defaultValue,\n        required: false,\n        parseArg,\n      });\n    }\n  }\n\n  return options;\n}\n","/**\n * Interactive approval prompts with timeout.\n *\n * Protocol spec: Approval workflow\n */\n\nimport * as readline from \"node:readline\";\nimport type { ModuleDescriptor } from \"./cli.js\";\nimport { ApprovalTimeoutError, EXIT_CODES } from \"./errors.js\";\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/**\n * Get an annotation value from either a dict or an object.\n */\nfunction getAnnotation(\n  annotations: unknown,\n  key: string,\n  defaultValue: unknown = undefined,\n): unknown {\n  if (!annotations || typeof annotations !== \"object\") return defaultValue;\n  const ann = annotations as Record<string, unknown>;\n  return key in ann ? ann[key] : defaultValue;\n}\n\n// ---------------------------------------------------------------------------\n// checkApproval\n// ---------------------------------------------------------------------------\n\n/**\n * Check if module requires approval and handle accordingly.\n * Returns normally if approved (or approval not required).\n * Calls process.exit(46) if denied/timed out/non-TTY.\n */\nexport async function checkApproval(\n  moduleDef: ModuleDescriptor,\n  autoApprove: boolean,\n): Promise<void> {\n  const annotations = moduleDef.annotations;\n\n  // Check if approval is required\n  let requiresApproval: boolean;\n  if (moduleDef.requiresApproval !== undefined) {\n    requiresApproval = moduleDef.requiresApproval;\n  } else if (annotations) {\n    requiresApproval = getAnnotation(annotations, \"requires_approval\", false) === true;\n  } else {\n    return; // No annotations, no approval needed\n  }\n\n  if (!requiresApproval) {\n    return;\n  }\n\n  const moduleId = moduleDef.id;\n\n  // Bypass: autoApprove flag (highest priority)\n  if (autoApprove) {\n    return;\n  }\n\n  // Bypass: APCORE_CLI_AUTO_APPROVE env var\n  const envVal = process.env.APCORE_CLI_AUTO_APPROVE ?? \"\";\n  if (envVal === \"1\") {\n    return;\n  }\n  if (envVal !== \"\" && envVal !== \"1\") {\n    process.stderr.write(\n      `Warning: APCORE_CLI_AUTO_APPROVE is set to '${envVal}', expected '1'. Ignoring.\\n`,\n    );\n  }\n\n  // Non-TTY check\n  if (!process.stdin.isTTY) {\n    process.stderr.write(\n      `Error: Module '${moduleId}' requires approval but no interactive ` +\n        \"terminal is available. Use --yes or set APCORE_CLI_AUTO_APPROVE=1 \" +\n        \"to bypass.\\n\",\n    );\n    process.exit(EXIT_CODES.APPROVAL_DENIED);\n  }\n\n  // TTY prompt\n  await promptWithTimeout(moduleDef, 60);\n}\n\n/**\n * Display approval prompt with timeout.\n */\nasync function promptWithTimeout(\n  moduleDef: ModuleDescriptor,\n  timeout: number,\n): Promise<void> {\n  // Clamp timeout\n  timeout = Math.max(1, Math.min(timeout, 3600));\n\n  const moduleId = moduleDef.id;\n  const annotations = moduleDef.annotations;\n  const message =\n    (annotations\n      ? (getAnnotation(annotations, \"approval_message\") as string | undefined)\n      : undefined) ??\n    `Module '${moduleId}' requires approval to execute.`;\n\n  process.stderr.write(message + \"\\n\");\n\n  const rl = readline.createInterface({\n    input: process.stdin,\n    output: process.stderr,\n  });\n\n  let timer: ReturnType<typeof setTimeout> | undefined;\n\n  try {\n    const answer = await Promise.race([\n      new Promise<string>((resolve) => {\n        rl.question(\"Proceed? [y/N] \", (ans) => resolve(ans));\n      }),\n      new Promise<never>((_, reject) => {\n        timer = setTimeout(() => {\n          reject(new ApprovalTimeoutError(\n            `Approval prompt timed out after ${timeout} seconds.`,\n          ));\n        }, timeout * 1000);\n      }),\n    ]);\n\n    // Clear the timeout — prompt resolved before timeout fired\n    if (timer) clearTimeout(timer);\n\n    const normalized = answer.trim().toLowerCase();\n    if (normalized === \"y\" || normalized === \"yes\") {\n      return;\n    }\n\n    process.stderr.write(\"Error: Approval denied.\\n\");\n    process.exit(EXIT_CODES.APPROVAL_DENIED);\n  } catch (err) {\n    if (timer) clearTimeout(timer);\n    if (err instanceof ApprovalTimeoutError) {\n      process.stderr.write(\n        `Error: Approval prompt timed out after ${timeout} seconds.\\n`,\n      );\n      process.exit(EXIT_CODES.APPROVAL_TIMEOUT);\n    }\n    throw err;\n  } finally {\n    rl.close();\n  }\n}\n","/**\n * TTY-adaptive output formatting (table/json).\n *\n * Protocol spec: Output formatting\n */\n\nimport type { ModuleDescriptor } from \"./cli.js\";\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/**\n * Resolve output format with TTY-adaptive default.\n */\nexport function resolveFormat(explicitFormat?: string): string {\n  if (explicitFormat !== undefined) {\n    return explicitFormat;\n  }\n  return process.stdout.isTTY ? \"table\" : \"json\";\n}\n\n/**\n * Truncate text to maxLength, appending '...' if needed.\n */\nexport function truncate(text: string, maxLength = 80): string {\n  if (text.length <= maxLength) {\n    return text;\n  }\n  return text.slice(0, maxLength - 3) + \"...\";\n}\n\n/**\n * Render a simple plain-text table with column headers.\n */\nfunction formatTable(\n  headers: string[],\n  rows: string[][],\n): string {\n  // Calculate column widths\n  const colWidths = headers.map((h, i) =>\n    Math.max(h.length, ...rows.map((r) => (r[i] ?? \"\").length)),\n  );\n\n  const sep = colWidths.map((w) => \"-\".repeat(w)).join(\"  \");\n  const headerLine = headers\n    .map((h, i) => h.padEnd(colWidths[i]))\n    .join(\"  \");\n  const dataLines = rows.map((row) =>\n    row.map((cell, i) => (cell ?? \"\").padEnd(colWidths[i])).join(\"  \"),\n  );\n\n  return [headerLine, sep, ...dataLines].join(\"\\n\") + \"\\n\";\n}\n\n// ---------------------------------------------------------------------------\n// formatModuleList\n// ---------------------------------------------------------------------------\n\n/**\n * Format and print a list of modules.\n */\nexport function formatModuleList(\n  modules: ModuleDescriptor[],\n  format: string,\n  filterTags?: string[],\n): void {\n  if (format === \"table\") {\n    if (modules.length === 0 && filterTags && filterTags.length > 0) {\n      process.stdout.write(\n        `No modules found matching tags: ${filterTags.join(\", \")}.\\n`,\n      );\n      return;\n    }\n    if (modules.length === 0) {\n      process.stdout.write(\"No modules found.\\n\");\n      return;\n    }\n\n    const headers = [\"ID\", \"Description\", \"Tags\"];\n    const rows = modules.map((m) => [\n      m.id,\n      truncate(m.description, 80),\n      (m.tags ?? []).join(\", \"),\n    ]);\n    process.stdout.write(formatTable(headers, rows));\n  } else if (format === \"json\") {\n    const result = modules.map((m) => ({\n      id: m.id,\n      description: m.description,\n      tags: m.tags ?? [],\n    }));\n    process.stdout.write(JSON.stringify(result, null, 2) + \"\\n\");\n  }\n}\n\n// ---------------------------------------------------------------------------\n// formatModuleDetail\n// ---------------------------------------------------------------------------\n\n/**\n * Convert annotations to a plain dict, filtering out falsy/default values.\n */\nfunction annotationsToDict(\n  annotations: unknown,\n): Record<string, unknown> | null {\n  if (!annotations) return null;\n  if (typeof annotations !== \"object\" || Array.isArray(annotations)) return null;\n  const result: Record<string, unknown> = {};\n  for (const [k, v] of Object.entries(annotations as Record<string, unknown>)) {\n    if (v !== null && v !== undefined && v !== false && v !== 0 && !(Array.isArray(v) && v.length === 0)) {\n      result[k] = v;\n    }\n  }\n  return Object.keys(result).length > 0 ? result : null;\n}\n\n/**\n * Format and print full module metadata.\n */\nexport function formatModuleDetail(\n  moduleDef: ModuleDescriptor,\n  format: string,\n): void {\n  if (format === \"table\") {\n    process.stdout.write(`\\nModule: ${moduleDef.id}\\n`);\n    process.stdout.write(`\\nDescription:\\n  ${moduleDef.description}\\n`);\n\n    if (moduleDef.inputSchema && Object.keys(moduleDef.inputSchema).length > 0) {\n      process.stdout.write(\"\\nInput Schema:\\n\");\n      process.stdout.write(JSON.stringify(moduleDef.inputSchema, null, 2) + \"\\n\");\n    }\n\n    if (moduleDef.outputSchema && Object.keys(moduleDef.outputSchema).length > 0) {\n      process.stdout.write(\"\\nOutput Schema:\\n\");\n      process.stdout.write(JSON.stringify(moduleDef.outputSchema, null, 2) + \"\\n\");\n    }\n\n    const annDict = annotationsToDict(\n      moduleDef.annotations,\n    );\n    if (annDict) {\n      process.stdout.write(\"\\nAnnotations:\\n\");\n      for (const [k, v] of Object.entries(annDict)) {\n        process.stdout.write(`  ${k}: ${v}\\n`);\n      }\n    }\n\n    // Extension metadata (x- prefixed)\n    const metadata = moduleDef.metadata;\n    if (metadata) {\n      const xFields: Record<string, unknown> = {};\n      for (const [k, v] of Object.entries(metadata)) {\n        if (k.startsWith(\"x-\") || k.startsWith(\"x_\")) {\n          xFields[k] = v;\n        }\n      }\n      if (Object.keys(xFields).length > 0) {\n        process.stdout.write(\"\\nExtension Metadata:\\n\");\n        for (const [k, v] of Object.entries(xFields)) {\n          process.stdout.write(`  ${k}: ${v}\\n`);\n        }\n      }\n    }\n\n    const tags = moduleDef.tags ?? [];\n    if (tags.length > 0) {\n      process.stdout.write(`\\nTags: ${tags.join(\", \")}\\n`);\n    }\n  } else if (format === \"json\") {\n    const result: Record<string, unknown> = {\n      id: moduleDef.id,\n      description: moduleDef.description,\n    };\n    if (moduleDef.inputSchema) result.input_schema = moduleDef.inputSchema;\n    if (moduleDef.outputSchema) result.output_schema = moduleDef.outputSchema;\n\n    const annDict = annotationsToDict(\n      moduleDef.annotations,\n    );\n    if (annDict) result.annotations = annDict;\n\n    const tags = moduleDef.tags ?? [];\n    if (tags.length > 0) result.tags = tags;\n\n    // Extension metadata\n    const metadata = moduleDef.metadata;\n    if (metadata) {\n      for (const [k, v] of Object.entries(metadata)) {\n        if (k.startsWith(\"x-\") || k.startsWith(\"x_\")) {\n          result[k] = v;\n        }\n      }\n    }\n\n    process.stdout.write(JSON.stringify(result, null, 2) + \"\\n\");\n  }\n}\n\n// ---------------------------------------------------------------------------\n// formatExecResult\n// ---------------------------------------------------------------------------\n\n/**\n * Format and print module execution result.\n */\nexport function formatExecResult(\n  result: unknown,\n  format?: string,\n): void {\n  if (result === null || result === undefined) {\n    return;\n  }\n  const effective = resolveFormat(format);\n  if (\n    effective === \"table\" &&\n    typeof result === \"object\" &&\n    !Array.isArray(result)\n  ) {\n    // Key-value table\n    const entries = Object.entries(result as Record<string, unknown>);\n    const headers = [\"Key\", \"Value\"];\n    const rows = entries.map(([k, v]) => [String(k), String(v)]);\n    process.stdout.write(formatTable(headers, rows));\n  } else if (typeof result === \"object\") {\n    process.stdout.write(JSON.stringify(result, null, 2) + \"\\n\");\n  } else if (typeof result === \"string\") {\n    process.stdout.write(result + \"\\n\");\n  } else {\n    process.stdout.write(String(result) + \"\\n\");\n  }\n}\n","/**\n * Simple structured logger respecting logging.level config.\n */\n\nconst LEVELS = { DEBUG: 0, INFO: 1, WARNING: 2, ERROR: 3 } as const;\ntype LogLevel = keyof typeof LEVELS;\n\nlet currentLevel: LogLevel = \"WARNING\";\n\nexport function setLogLevel(level: string): void {\n  const upper = level.toUpperCase();\n  if (upper in LEVELS) {\n    currentLevel = upper as LogLevel;\n  }\n}\n\nexport function getLogLevel(): LogLevel {\n  return currentLevel;\n}\n\nfunction shouldLog(level: LogLevel): boolean {\n  return LEVELS[level] >= LEVELS[currentLevel];\n}\n\nexport function debug(message: string): void {\n  if (shouldLog(\"DEBUG\")) process.stderr.write(`DEBUG: ${message}\\n`);\n}\n\nexport function info(message: string): void {\n  if (shouldLog(\"INFO\")) process.stderr.write(`INFO: ${message}\\n`);\n}\n\nexport function warn(message: string): void {\n  if (shouldLog(\"WARNING\")) process.stderr.write(`WARNING: ${message}\\n`);\n}\n\nexport function error(message: string): void {\n  if (shouldLog(\"ERROR\")) process.stderr.write(`ERROR: ${message}\\n`);\n}\n","/**\n * LazyModuleGroup — Dynamic command loading from Registry.\n *\n * Equivalent to the Python LazyModuleGroup. Dynamically discovers apcore\n * modules from the Registry and exposes them as Commander subcommands.\n *\n * Protocol spec: CLI command structure & lazy loading\n */\n\nimport { Command } from \"commander\";\nimport { buildModuleCommand } from \"./main.js\";\n\n// TODO: Import Registry and Executor from apcore-js once available\n// import type { Registry, Executor, ModuleDescriptor } from \"apcore-js\";\n\n// ---------------------------------------------------------------------------\n// Placeholder types until apcore-js types are available\n// ---------------------------------------------------------------------------\n\n/** Placeholder for apcore-js Registry. */\nexport interface Registry {\n  listModules(): ModuleDescriptor[];\n  getModule(moduleId: string): ModuleDescriptor | null;\n}\n\n/** Placeholder for apcore-js Executor. */\nexport interface Executor {\n  execute(moduleId: string, input: Record<string, unknown>): Promise<unknown>;\n}\n\n/** Placeholder for apcore-js ModuleDescriptor. */\nexport interface ModuleDescriptor {\n  id: string;\n  name: string;\n  description: string;\n  tags?: string[];\n  inputSchema?: Record<string, unknown>;\n  outputSchema?: Record<string, unknown>;\n  requiresApproval?: boolean;\n  annotations?: Record<string, unknown>;\n  metadata?: Record<string, unknown>;\n}\n\n// ---------------------------------------------------------------------------\n// LazyModuleGroup\n// ---------------------------------------------------------------------------\n\n/**\n * Dynamically loads apcore modules as Commander subcommands from Registry.\n *\n * TODO: Implement lazy loading — commands should only be fully built when\n * actually invoked, not at registration time.\n */\nexport class LazyModuleGroup {\n  private readonly registry: Registry;\n  readonly executor: Executor;\n  private readonly helpTextMaxLength: number;\n  private commandCache: Map<string, Command> = new Map();\n\n  constructor(registry: Registry, executor: Executor, helpTextMaxLength = 1000) {\n    this.registry = registry;\n    this.executor = executor;\n    this.helpTextMaxLength = helpTextMaxLength;\n  }\n\n  /**\n   * List all available command names from the Registry.\n   *\n   * TODO: Implement registry enumeration.\n   */\n  listCommands(): string[] {\n    // TODO: Query registry for all module IDs\n    return this.registry.listModules().map((m) => m.id);\n  }\n\n  /**\n   * Get or lazily build a Commander Command for the given module.\n   *\n   * TODO: Implement lazy command construction with schema-based options.\n   */\n  getCommand(cmdName: string): Command | null {\n    if (this.commandCache.has(cmdName)) {\n      return this.commandCache.get(cmdName)!;\n    }\n\n    const moduleDef = this.registry.getModule(cmdName);\n    if (!moduleDef) {\n      return null;\n    }\n\n    const cmd = buildModuleCommand(moduleDef, this.executor, this.helpTextMaxLength);\n    this.commandCache.set(cmdName, cmd);\n    return cmd;\n  }\n}\n","/**\n * ConfigResolver — 4-tier config resolution (CLI flag > env > file > default).\n *\n * Protocol spec: Configuration resolution\n */\n\nimport * as fs from \"node:fs\";\nimport yaml from \"js-yaml\";\n\n// ---------------------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------------------\n\n/** Default configuration values. */\nexport const DEFAULTS: Record<string, unknown> = {\n  \"extensions.root\": \"./extensions\",\n  \"logging.level\": \"WARNING\",\n  \"sandbox.enabled\": false,\n  \"cli.stdin_buffer_limit\": 10_485_760,\n  \"cli.auto_approve\": false,\n  \"cli.help_text_max_length\": 1000,\n};\n\n// ---------------------------------------------------------------------------\n// ConfigResolver\n// ---------------------------------------------------------------------------\n\n/**\n * Resolves configuration from four tiers (highest to lowest priority):\n *   1. CLI flags\n *   2. Environment variables\n *   3. Config file (YAML/JSON)\n *   4. Built-in defaults\n */\nexport class ConfigResolver {\n  private readonly cliFlags: Record<string, unknown>;\n  private readonly configPath: string;\n  private fileCache: Record<string, unknown> | null = null;\n  private fileCacheLoaded = false;\n\n  constructor(cliFlags?: Record<string, unknown>, configPath?: string) {\n    this.cliFlags = cliFlags ?? {};\n    this.configPath = configPath ?? \"apcore.yaml\";\n  }\n\n  /**\n   * Resolve a single configuration key across all four tiers.\n   */\n  resolve(key: string, cliFlag?: string, envVar?: string): unknown {\n    // Tier 1: CLI flag\n    const flagKey = cliFlag ?? key;\n    if (flagKey in this.cliFlags) {\n      const value = this.cliFlags[flagKey];\n      if (value !== null && value !== undefined) {\n        return value;\n      }\n    }\n\n    // Tier 2: Environment variable\n    if (envVar) {\n      const envValue = process.env[envVar];\n      if (envValue !== undefined && envValue !== \"\") {\n        return envValue;\n      }\n    }\n\n    // Tier 3: Config file\n    const fileValue = this.resolveFromFile(key);\n    if (fileValue !== undefined) {\n      return fileValue;\n    }\n\n    // Tier 4: Defaults\n    return DEFAULTS[key];\n  }\n\n  /**\n   * Load a value from the config file using a dot-separated key path.\n   */\n  private resolveFromFile(key: string): unknown {\n    if (!this.fileCacheLoaded) {\n      this.fileCache = this.loadConfigFile();\n      this.fileCacheLoaded = true;\n    }\n    if (this.fileCache === null) {\n      return undefined;\n    }\n    return this.fileCache[key];\n  }\n\n  /**\n   * Load and flatten a YAML config file.\n   */\n  private loadConfigFile(): Record<string, unknown> | null {\n    let content: string;\n    try {\n      content = fs.readFileSync(this.configPath, \"utf-8\");\n    } catch (err: unknown) {\n      if (err instanceof Error && \"code\" in err && err.code === \"ENOENT\") {\n        return null;\n      }\n      console.warn(\n        `Configuration file '${this.configPath}' is malformed, using defaults.`,\n      );\n      return null;\n    }\n\n    let parsed: unknown;\n    try {\n      parsed = yaml.load(content);\n    } catch {\n      console.warn(\n        `Configuration file '${this.configPath}' is malformed, using defaults.`,\n      );\n      return null;\n    }\n\n    if (typeof parsed !== \"object\" || parsed === null || Array.isArray(parsed)) {\n      console.warn(\n        `Configuration file '${this.configPath}' is malformed, using defaults.`,\n      );\n      return null;\n    }\n\n    return this.flattenDict(parsed as Record<string, unknown>);\n  }\n\n  /**\n   * Flatten nested dict to dot-notation keys.\n   */\n  private flattenDict(\n    d: Record<string, unknown>,\n    prefix = \"\",\n  ): Record<string, unknown> {\n    const result: Record<string, unknown> = {};\n    for (const [key, value] of Object.entries(d)) {\n      const fullKey = prefix ? `${prefix}.${key}` : key;\n      if (\n        typeof value === \"object\" &&\n        value !== null &&\n        !Array.isArray(value)\n      ) {\n        Object.assign(\n          result,\n          this.flattenDict(value as Record<string, unknown>, fullKey),\n        );\n      } else {\n        result[fullKey] = value;\n      }\n    }\n    return result;\n  }\n}\n","/**\n * Discovery commands — list and describe modules.\n *\n * Protocol spec: Module discovery & introspection\n */\n\nimport { Command } from \"commander\";\nimport type { ModuleDescriptor, Registry } from \"./cli.js\";\nimport { EXIT_CODES } from \"./errors.js\";\nimport { validateModuleId } from \"./main.js\";\nimport {\n  formatModuleDetail,\n  formatModuleList,\n  resolveFormat,\n} from \"./output.js\";\n\nconst TAG_PATTERN = /^[a-z][a-z0-9_-]*$/;\n\nfunction validateTag(tag: string): void {\n  if (!TAG_PATTERN.test(tag)) {\n    process.stderr.write(\n      `Error: Invalid tag format: '${tag}'. Tags must match [a-z][a-z0-9_-]*.\\n`,\n    );\n    process.exit(EXIT_CODES.INVALID_CLI_INPUT);\n  }\n}\n\n/**\n * Collect repeated --tag options into an array.\n */\nfunction collectTag(value: string, previous: string[]): string[] {\n  return previous.concat([value]);\n}\n\n/**\n * Register list and describe commands on the CLI group.\n */\nexport function registerDiscoveryCommands(\n  cli: Command,\n  registry: Registry,\n): void {\n  const listCmd = new Command(\"list\")\n    .description(\"List available modules in the registry.\")\n    .option(\"--tag <tag>\", \"Filter modules by tag (AND logic). Repeatable.\", collectTag, [])\n    .option(\"--format <format>\", \"Output format.\", undefined)\n    .action((opts: { tag: string[]; format?: string }) => {\n      // Validate tags\n      for (const t of opts.tag) {\n        validateTag(t);\n      }\n\n      const modules: ModuleDescriptor[] = [];\n      for (const m of registry.listModules()) {\n        modules.push(m);\n      }\n\n      let filtered = modules;\n      if (opts.tag.length > 0) {\n        const filterTags = new Set(opts.tag);\n        filtered = modules.filter((m) => {\n          const mTags = m.tags ?? [];\n          return [...filterTags].every((t) => mTags.includes(t));\n        });\n      }\n\n      const fmt = resolveFormat(opts.format);\n      formatModuleList(filtered, fmt, opts.tag.length > 0 ? opts.tag : undefined);\n    });\n  cli.addCommand(listCmd);\n\n  const describeCmd = new Command(\"describe\")\n    .description(\"Show metadata, schema, and annotations for a module.\")\n    .argument(\"<module-id>\", \"Module ID to describe\")\n    .option(\"--format <format>\", \"Output format.\", undefined)\n    .action((moduleId: string, opts: { format?: string }) => {\n      validateModuleId(moduleId);\n\n      const moduleDef = registry.getModule(moduleId);\n      if (!moduleDef) {\n        process.stderr.write(\n          `Error: Module '${moduleId}' not found.\\n`,\n        );\n        process.exit(EXIT_CODES.MODULE_NOT_FOUND);\n      }\n\n      const fmt = resolveFormat(opts.format);\n      formatModuleDetail(moduleDef, fmt);\n    });\n  cli.addCommand(describeCmd);\n}\n","/**\n * Shell completion + man page generation.\n *\n * Protocol spec: Shell integration\n */\n\nimport { readFileSync } from \"node:fs\";\nimport { fileURLToPath } from \"node:url\";\nimport * as path from \"node:path\";\nimport { Command } from \"commander\";\nimport { EXIT_CODES } from \"./errors.js\";\n\nconst __dirname = path.dirname(fileURLToPath(import.meta.url));\nconst pkg = JSON.parse(readFileSync(path.resolve(__dirname, \"../package.json\"), \"utf-8\"));\nconst SHELL_VERSION: string = pkg.version;\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/**\n * Convert a prog_name like 'my-tool' to a valid shell identifier '_my_tool'.\n */\nfunction makeFunctionName(progName: string): string {\n  return \"_\" + progName.replace(/[^a-zA-Z0-9]/g, \"_\");\n}\n\n/**\n * Shell-safe quoting.\n */\nfunction shellQuote(s: string): string {\n  return \"'\" + s.replace(/'/g, \"'\\\\''\") + \"'\";\n}\n\n// ---------------------------------------------------------------------------\n// Completion generators\n// ---------------------------------------------------------------------------\n\nfunction generateBashCompletion(progName: string): string {\n  const fn = makeFunctionName(progName);\n  const quoted = shellQuote(progName);\n  const moduleListCmd =\n    `${quoted} list --format json 2>/dev/null` +\n    ` | node -e \"process.stdin.on('data',d=>{JSON.parse(d).forEach(m=>console.log(m.id))})\" 2>/dev/null`;\n\n  return (\n    `${fn}() {\\n` +\n    `    local cur prev opts\\n` +\n    `    COMPREPLY=()\\n` +\n    `    cur=\"\\${COMP_WORDS[COMP_CWORD]}\"\\n` +\n    `    prev=\"\\${COMP_WORDS[COMP_CWORD-1]}\"\\n` +\n    `\\n` +\n    `    if [[ \\${COMP_CWORD} -eq 1 ]]; then\\n` +\n    `        opts=\"list describe completion man\"\\n` +\n    `        COMPREPLY=( $(compgen -W \"\\${opts}\" -- \\${cur}) )\\n` +\n    `        return 0\\n` +\n    `    fi\\n` +\n    `\\n` +\n    `    if [[ \"\\${COMP_WORDS[1]}\" == \"exec\" && \\${COMP_CWORD} -eq 2 ]]; then\\n` +\n    `        local modules=$(${moduleListCmd})\\n` +\n    `        COMPREPLY=( $(compgen -W \"\\${modules}\" -- \\${cur}) )\\n` +\n    `        return 0\\n` +\n    `    fi\\n` +\n    `}\\n` +\n    `complete -F ${fn} ${quoted}\\n`\n  );\n}\n\nfunction generateZshCompletion(progName: string): string {\n  const fn = makeFunctionName(progName);\n  const quoted = shellQuote(progName);\n  const moduleListCmd =\n    `${quoted} list --format json 2>/dev/null` +\n    ` | node -e \"process.stdin.on('data',d=>{JSON.parse(d).forEach(m=>console.log(m.id))})\" 2>/dev/null`;\n\n  return (\n    `#compdef ${progName}\\n` +\n    `\\n` +\n    `${fn}() {\\n` +\n    `    local -a commands\\n` +\n    `    commands=(\\n` +\n    `        'list:List available modules'\\n` +\n    `        'describe:Show module metadata and schema'\\n` +\n    `        'completion:Generate shell completion script'\\n` +\n    `        'man:Generate man page'\\n` +\n    `    )\\n` +\n    `\\n` +\n    `    _arguments -C \\\\\\n` +\n    `        '1:command:->command' \\\\\\n` +\n    `        '*::arg:->args'\\n` +\n    `\\n` +\n    `    case \"$state\" in\\n` +\n    `        command)\\n` +\n    `            _describe -t commands '${progName} commands' commands\\n` +\n    `            ;;\\n` +\n    `        args)\\n` +\n    `            case \"\\${words[1]}\" in\\n` +\n    `                exec)\\n` +\n    `                    local modules\\n` +\n    `                    modules=($(${moduleListCmd}))\\n` +\n    `                    compadd -a modules\\n` +\n    `                    ;;\\n` +\n    `            esac\\n` +\n    `            ;;\\n` +\n    `    esac\\n` +\n    `}\\n` +\n    `\\n` +\n    `compdef ${fn} ${quoted}\\n`\n  );\n}\n\nfunction generateFishCompletion(progName: string): string {\n  const quoted = shellQuote(progName);\n  const moduleListCmd =\n    `${quoted} list --format json 2>/dev/null` +\n    ` | node -e \\\\\"process.stdin.on('data',d=>{JSON.parse(d).forEach(m=>console.log(m.id))})\\\\\" 2>/dev/null`;\n\n  return (\n    `# Fish completions for ${progName}\\n` +\n    `complete -c ${quoted} -n \"__fish_use_subcommand\"` +\n    ` -a list -d \"List available modules\"\\n` +\n    `complete -c ${quoted} -n \"__fish_use_subcommand\"` +\n    ` -a describe -d \"Show module metadata and schema\"\\n` +\n    `complete -c ${quoted} -n \"__fish_use_subcommand\"` +\n    ` -a completion -d \"Generate shell completion script\"\\n` +\n    `complete -c ${quoted} -n \"__fish_use_subcommand\"` +\n    ` -a man -d \"Generate man page\"\\n` +\n    `\\n` +\n    `complete -c ${quoted} -n \"__fish_seen_subcommand_from exec\"` +\n    ` -a \"(${moduleListCmd})\"\\n`\n  );\n}\n\n// ---------------------------------------------------------------------------\n// Man page generation\n// ---------------------------------------------------------------------------\n\nfunction buildSynopsis(\n  command: Command | null,\n  progName: string,\n  commandName: string,\n): string {\n  if (!command) {\n    return `\\\\fB${progName} ${commandName}\\\\fR [OPTIONS]`;\n  }\n\n  const parts = [`\\\\fB${progName} ${commandName}\\\\fR`];\n  for (const opt of command.options) {\n    const flag = opt.long ?? opt.short ?? \"\";\n    if (opt.isBoolean?.()) {\n      parts.push(`[${flag}]`);\n    } else if (opt.required) {\n      const typeName = (opt.argChoices ? \"CHOICE\" : \"VALUE\").toUpperCase();\n      parts.push(`${flag} \\\\fI${typeName}\\\\fR`);\n    } else {\n      const typeName = (opt.argChoices ? \"CHOICE\" : \"VALUE\").toUpperCase();\n      parts.push(`[${flag} \\\\fI${typeName}\\\\fR]`);\n    }\n  }\n\n  for (const arg of command.registeredArguments ?? []) {\n    const meta = arg.name().toUpperCase();\n    if (arg.required) {\n      parts.push(`\\\\fI${meta}\\\\fR`);\n    } else {\n      parts.push(`[\\\\fI${meta}\\\\fR]`);\n    }\n  }\n\n  return parts.join(\" \");\n}\n\nfunction generateManPage(\n  commandName: string,\n  command: Command | null,\n  progName: string,\n  version = SHELL_VERSION,\n): string {\n  const today = new Date().toISOString().slice(0, 10);\n  const title = `${progName}-${commandName}`.toUpperCase();\n  const pkgLabel = `${progName} ${version}`;\n  const manualLabel = `${progName} Manual`;\n\n  const sections: string[] = [];\n  sections.push(`.TH \"${title}\" \"1\" \"${today}\" \"${pkgLabel}\" \"${manualLabel}\"`);\n\n  sections.push(\".SH NAME\");\n  const desc = command?.description() ?? commandName;\n  const nameDesc = desc.split(\"\\n\")[0].replace(/\\.$/, \"\");\n  sections.push(`${progName}-${commandName} \\\\- ${nameDesc}`);\n\n  sections.push(\".SH SYNOPSIS\");\n  sections.push(buildSynopsis(command, progName, commandName));\n\n  if (command?.description()) {\n    sections.push(\".SH DESCRIPTION\");\n    sections.push(\n      command.description().replace(/\\\\/g, \"\\\\\\\\\").replace(/-/g, \"\\\\-\"),\n    );\n  }\n\n  if (command && command.options.length > 0) {\n    sections.push(\".SH OPTIONS\");\n    for (const opt of command.options) {\n      const flag = [opt.short, opt.long].filter(Boolean).join(\", \");\n      sections.push(\".TP\");\n      if (opt.isBoolean?.()) {\n        sections.push(`\\\\fB${flag}\\\\fR`);\n      } else {\n        sections.push(`\\\\fB${flag}\\\\fR \\\\fIVALUE\\\\fR`);\n      }\n      if (opt.description) {\n        sections.push(opt.description);\n      }\n      if (opt.defaultValue !== undefined && !opt.isBoolean?.()) {\n        sections.push(`Default: ${opt.defaultValue}.`);\n      }\n    }\n  }\n\n  sections.push(\".SH ENVIRONMENT\");\n  sections.push(\".TP\");\n  sections.push(\"\\\\fBAPCORE_EXTENSIONS_ROOT\\\\fR\");\n  sections.push(\n    \"Path to the apcore extensions directory. Overrides the default \\\\fI./extensions\\\\fR.\",\n  );\n  sections.push(\".TP\");\n  sections.push(\"\\\\fBAPCORE_CLI_AUTO_APPROVE\\\\fR\");\n  sections.push(\n    \"Set to \\\\fB1\\\\fR to bypass approval prompts for modules that require human-in-the-loop confirmation.\",\n  );\n  sections.push(\".TP\");\n  sections.push(\"\\\\fBAPCORE_CLI_LOGGING_LEVEL\\\\fR\");\n  sections.push(\n    \"CLI-specific logging verbosity. One of: DEBUG, INFO, WARNING, ERROR. \" +\n      \"Takes priority over \\\\fBAPCORE_LOGGING_LEVEL\\\\fR. Default: WARNING.\",\n  );\n  sections.push(\".TP\");\n  sections.push(\"\\\\fBAPCORE_LOGGING_LEVEL\\\\fR\");\n  sections.push(\n    \"Global apcore logging verbosity. One of: DEBUG, INFO, WARNING, ERROR. \" +\n      \"Used as fallback when \\\\fBAPCORE_CLI_LOGGING_LEVEL\\\\fR is not set. Default: WARNING.\",\n  );\n\n  sections.push(\".SH EXIT CODES\");\n  const exitCodes: [string, string][] = [\n    [\"0\", \"Success.\"],\n    [\"1\", \"Module execution error.\"],\n    [\"2\", \"Invalid CLI input or missing argument.\"],\n    [\"44\", \"Module not found, disabled, or failed to load.\"],\n    [\"45\", \"Input failed JSON Schema validation.\"],\n    [\n      \"46\",\n      \"Approval denied, timed out, or no interactive terminal available.\",\n    ],\n    [\n      \"47\",\n      \"Configuration error (extensions directory not found or unreadable).\",\n    ],\n    [\"48\", \"Schema contains a circular \\\\fB$ref\\\\fR.\"],\n    [\"77\", \"ACL denied — insufficient permissions for this module.\"],\n    [\"130\", \"Execution cancelled by user (SIGINT / Ctrl\\\\-C).\"],\n  ];\n  for (const [code, meaning] of exitCodes) {\n    sections.push(`.TP\\n\\\\fB${code}\\\\fR\\n${meaning}`);\n  }\n\n  sections.push(\".SH SEE ALSO\");\n  sections.push(\n    [\n      `\\\\fB${progName}\\\\fR(1)`,\n      `\\\\fB${progName}\\\\-list\\\\fR(1)`,\n      `\\\\fB${progName}\\\\-describe\\\\fR(1)`,\n      `\\\\fB${progName}\\\\-completion\\\\fR(1)`,\n    ].join(\", \"),\n  );\n\n  return sections.join(\"\\n\");\n}\n\n// ---------------------------------------------------------------------------\n// registerShellCommands\n// ---------------------------------------------------------------------------\n\n/**\n * Register completion and man commands.\n */\nexport function registerShellCommands(\n  cli: Command,\n  progName = \"apcore-cli\",\n): void {\n  const completionCmd = new Command(\"completion\")\n    .description(\n      \"Generate a shell completion script and print it to stdout.\",\n    )\n    .argument(\"<shell>\", \"Shell type: bash, zsh, or fish\")\n    .action((shell: string) => {\n      const validShells = [\"bash\", \"zsh\", \"fish\"];\n      if (!validShells.includes(shell)) {\n        process.stderr.write(\n          `Error: Unknown shell '${shell}'. Expected: bash, zsh, or fish.\\n`,\n        );\n        process.exit(EXIT_CODES.INVALID_CLI_INPUT);\n      }\n\n      const resolved = cli.name() || progName;\n      const generators: Record<string, () => string> = {\n        bash: () => generateBashCompletion(resolved),\n        zsh: () => generateZshCompletion(resolved),\n        fish: () => generateFishCompletion(resolved),\n      };\n      process.stdout.write(generators[shell]());\n    });\n  cli.addCommand(completionCmd);\n\n  const manCmd = new Command(\"man\")\n    .description(\"Generate a roff man page for COMMAND and print it to stdout.\")\n    .argument(\"<command>\", \"Command to generate man page for\")\n    .action((commandName: string) => {\n      const knownBuiltins = new Set([\"list\", \"describe\", \"completion\", \"man\"]);\n      const cmd = cli.commands.find((c) => c.name() === commandName) ?? null;\n\n      if (!cmd && !knownBuiltins.has(commandName)) {\n        process.stderr.write(\n          `Error: Unknown command '${commandName}'.\\n`,\n        );\n        process.exit(EXIT_CODES.INVALID_CLI_INPUT);\n      }\n\n      const resolved = cli.name() || progName;\n      const roff = generateManPage(commandName, cmd, resolved);\n      process.stdout.write(roff);\n    });\n  cli.addCommand(manCmd);\n}\n"],"mappings":";;;;;;;;;;;AACA,OAAO,UAAU;AACjB,SAAS,qBAAqB;AAF9B;AAAA;AAAA;AAAA;AAAA;;;ACkGO,SAAS,iBAAiBA,QAA0B;AACzD,MAAIA,kBAAiB,sBAAsB;AACzC,WAAO,WAAW;AAAA,EACpB;AACA,MAAIA,kBAAiB,qBAAqB;AACxC,WAAO,WAAW;AAAA,EACpB;AACA,MAAIA,kBAAiB,qBAAqB;AACxC,WAAO,WAAW;AAAA,EACpB;AACA,MAAIA,kBAAiB,uBAAuB;AAC1C,WAAO,WAAW;AAAA,EACpB;AACA,MAAIA,kBAAiB,uBAAuB;AAC1C,WAAO,WAAW;AAAA,EACpB;AACA,MAAIA,kBAAiB,qBAAqB;AACxC,WAAO,WAAW;AAAA,EACpB;AACA,MAAIA,kBAAiB,sBAAsB;AACzC,WAAO,WAAW;AAAA,EACpB;AAGA,MAAIA,kBAAiB,OAAO;AAC1B,UAAM,OAAQA,OAA6C;AAC3D,UAAM,UAAoC;AAAA,MACxC,kBAAkB,WAAW;AAAA,MAC7B,mBAAmB,WAAW;AAAA,MAC9B,iBAAiB,WAAW;AAAA,MAC5B,yBAAyB,WAAW;AAAA,MACpC,qBAAqB,WAAW;AAAA,MAChC,iBAAiB,WAAW;AAAA,MAC5B,kBAAkB,WAAW;AAAA,MAC7B,kBAAkB,WAAW;AAAA,MAC7B,gBAAgB,WAAW;AAAA,MAC3B,sBAAsB,WAAW;AAAA,MACjC,gBAAgB,WAAW;AAAA,MAC3B,YAAY,WAAW;AAAA,IACzB;AACA,QAAI,QAAQ,QAAQ,SAAS;AAC3B,aAAO,QAAQ,IAAI;AAAA,IACrB;AAAA,EACF;AAEA,SAAO,WAAW;AACpB;AAhJA,IAWa,sBAQA,qBAQA,uBAQA,sBAQA,qBAQA,uBAQA,qBAWA;AAtEb;AAAA;AAAA;AAAA;AAWO,IAAM,uBAAN,cAAmC,MAAM;AAAA,MAC9C,YAAY,UAAU,sBAAsB;AAC1C,cAAM,OAAO;AACb,aAAK,OAAO;AAAA,MACd;AAAA,IACF;AAGO,IAAM,sBAAN,cAAkC,MAAM;AAAA,MAC7C,YAAY,UAAU,yBAAyB;AAC7C,cAAM,OAAO;AACb,aAAK,OAAO;AAAA,MACd;AAAA,IACF;AAGO,IAAM,wBAAN,cAAoC,MAAM;AAAA,MAC/C,YAAY,UAAU,4BAA4B;AAChD,cAAM,OAAO;AACb,aAAK,OAAO;AAAA,MACd;AAAA,IACF;AAGO,IAAM,uBAAN,cAAmC,MAAM;AAAA,MAC9C,YAAY,UAAU,2BAA2B;AAC/C,cAAM,OAAO;AACb,aAAK,OAAO;AAAA,MACd;AAAA,IACF;AAGO,IAAM,sBAAN,cAAkC,MAAM;AAAA,MAC7C,YAAY,UAAU,mBAAmB;AACvC,cAAM,OAAO;AACb,aAAK,OAAO;AAAA,MACd;AAAA,IACF;AAGO,IAAM,wBAAN,cAAoC,MAAM;AAAA,MAC/C,YAAY,UAAU,4BAA4B;AAChD,cAAM,OAAO;AACb,aAAK,OAAO;AAAA,MACd;AAAA,IACF;AAGO,IAAM,sBAAN,cAAkC,MAAM;AAAA,MAC7C,YAAY,UAAU,oBAAoB;AACxC,cAAM,OAAO;AACb,aAAK,OAAO;AAAA,MACd;AAAA,IACF;AAMO,IAAM,aAAa;AAAA,MACxB,SAAS;AAAA,MACT,sBAAsB;AAAA,MACtB,gBAAgB;AAAA,MAChB,mBAAmB;AAAA,MACnB,kBAAkB;AAAA,MAClB,mBAAmB;AAAA,MACnB,iBAAiB;AAAA,MACjB,yBAAyB;AAAA,MACzB,iBAAiB;AAAA,MACjB,kBAAkB;AAAA,MAClB,kBAAkB;AAAA,MAClB,gBAAgB;AAAA,MAChB,qBAAqB;AAAA,MACrB,YAAY;AAAA,MACZ,oBAAoB;AAAA,IACtB;AAAA;AAAA;;;ACtFA;AAAA;AAAA;AAAA;AAAA;AAAA;AAMA,YAAY,YAAY;AACxB,YAAY,QAAQ;AACpB,YAAY,QAAQ;AACpB,YAAYC,WAAU;AA+Bf,SAAS,eAAe,aAAuC;AACpE,iBAAe;AACjB;AAKO,SAAS,iBAAqC;AACnD,SAAO;AACT;AAjDA,IAmCI,cAgBS;AAnDb;AAAA;AAAA;AAAA;AAmCA,IAAI,eAAmC;AAgBhC,IAAM,cAAN,MAAM,aAAY;AAAA,MACvB,OAAgB,eAAoB;AAAA,QAC/B,WAAQ;AAAA,QACX;AAAA,QACA;AAAA,MACF;AAAA,MAEiB;AAAA,MAEjB,YAAYA,OAAe;AACzB,aAAK,UAAUA,SAAQ,aAAY;AACnC,aAAK,gBAAgB;AAAA,MACvB;AAAA,MAEQ,kBAAwB;AAC9B,YAAI;AACF,UAAG,aAAe,cAAQ,KAAK,OAAO,GAAG,EAAE,WAAW,KAAK,CAAC;AAAA,QAC9D,QAAQ;AAAA,QAER;AAAA,MACF;AAAA,MAEA,aACE,UACA,WACA,QACA,UACA,YACM;AACN,cAAM,QAAoB;AAAA,UACxB,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,UAClC,MAAM,KAAK,QAAQ;AAAA,UACnB,WAAW;AAAA,UACX,YAAY,KAAK,UAAU,SAAS;AAAA,UACpC;AAAA,UACA,WAAW;AAAA,UACX,aAAa;AAAA,QACf;AACA,YAAI;AACF,UAAG,kBAAe,KAAK,SAAS,KAAK,UAAU,KAAK,IAAI,IAAI;AAAA,QAC9D,SAAS,KAAK;AACZ,kBAAQ,KAAK,8BAA8B,GAAG,EAAE;AAAA,QAClD;AAAA,MACF;AAAA,MAEQ,UAAU,WAA4C;AAC5D,cAAM,OAAc,mBAAY,EAAE;AAClC,cAAM,aAAa,OAAO,KAAK,SAAS,EAAE,KAAK;AAC/C,cAAM,UAAU,KAAK,UAAU,WAAW,UAAU;AACpD,eACG,kBAAW,QAAQ,EACnB,OAAO,OAAO,OAAO,CAAC,MAAM,OAAO,KAAK,SAAS,OAAO,CAAC,CAAC,CAAC,EAC3D,OAAO,KAAK;AAAA,MACjB;AAAA,MAEQ,UAAkB;AACxB,YAAI;AACF,iBAAU,YAAS,EAAE;AAAA,QACvB,QAAQ;AACN,iBAAO,QAAQ,IAAI,QAAQ,QAAQ,IAAI,YAAY;AAAA,QACrD;AAAA,MACF;AAAA,IACF;AAAA;AAAA;;;AC3GA,YAAYC,aAAY;AACxB,YAAYC,SAAQ;AAQpB,eAAe,YAA0B;AACvC,MAAI,aAAc,QAAO;AACzB,MAAI;AAEF,mBAAe,MAAM,OAAO,QAAQ;AACpC,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAxBA,IAcI,cAoBS;AAlCb;AAAA;AAAA;AAAA;AAQA;AAMA,IAAI,eAAoB;AAoBjB,IAAM,kBAAN,MAAM,iBAAgB;AAAA,MAC3B,OAAgB,eAAe;AAAA;AAAA;AAAA;AAAA,MAK/B,MAAM,MAAM,KAAa,OAAgC;AACvD,cAAM,SAAS,MAAM,UAAU;AAC/B,YAAI,QAAQ;AACV,cAAI;AACF,kBAAM,OAAO,YAAY,iBAAgB,cAAc,KAAK,KAAK;AACjE,mBAAO,WAAW,GAAG;AAAA,UACvB,QAAQ;AAAA,UAER;AAAA,QACF;AACA,gBAAQ,KAAK,sDAAsD;AACnE,cAAM,aAAa,KAAK,WAAW,KAAK;AACxC,eAAO,OAAO,OAAO,KAAK,UAAU,EAAE,SAAS,QAAQ,CAAC;AAAA,MAC1D;AAAA;AAAA;AAAA;AAAA,MAKA,MAAM,SAAS,aAAqB,KAA8B;AAChE,YAAI,YAAY,WAAW,UAAU,GAAG;AACtC,gBAAM,SAAS,MAAM,UAAU;AAC/B,cAAI,CAAC,QAAQ;AACX,kBAAM,IAAI;AAAA,cACR,6CAA6C,GAAG;AAAA,YAClD;AAAA,UACF;AACA,cAAI;AACF,kBAAM,SAAS,YAAY,MAAM,WAAW,MAAM;AAClD,kBAAM,SAAS,MAAM,OAAO;AAAA,cAC1B,iBAAgB;AAAA,cAChB;AAAA,YACF;AACA,gBAAI,WAAW,QAAQ,WAAW,QAAW;AAC3C,oBAAM,IAAI;AAAA,gBACR,gCAAgC,MAAM;AAAA,cACxC;AAAA,YACF;AACA,mBAAO;AAAA,UACT,SAAS,KAAK;AACZ,gBAAI,eAAe,sBAAuB,OAAM;AAChD,kBAAM,IAAI;AAAA,cACR,oCAAoC,GAAG;AAAA,YACzC;AAAA,UACF;AAAA,QACF;AAEA,YAAI,YAAY,WAAW,MAAM,GAAG;AAClC,gBAAM,aAAa,OAAO;AAAA,YACxB,YAAY,MAAM,OAAO,MAAM;AAAA,YAC/B;AAAA,UACF;AACA,cAAI;AACF,mBAAO,KAAK,WAAW,UAAU;AAAA,UACnC,QAAQ;AACN,kBAAM,IAAI;AAAA,cACR,0CAA0C,GAAG,+CAA+C,GAAG;AAAA,YACjG;AAAA,UACF;AAAA,QACF;AAGA,eAAO;AAAA,MACT;AAAA;AAAA;AAAA;AAAA,MAKQ,YAAoB;AAC1B,cAAMC,YAAc,aAAS;AAC7B,cAAM,WACJ,QAAQ,IAAI,QAAQ,QAAQ,IAAI,YAAY;AAC9C,cAAM,OAAO,OAAO,KAAK,sBAAsB;AAC/C,cAAM,WAAW,GAAGA,SAAQ,IAAI,QAAQ;AACxC,eAAc,mBAAW,UAAU,MAAM,KAAS,IAAI,QAAQ;AAAA,MAChE;AAAA,MAEQ,WAAW,WAA2B;AAC5C,cAAM,MAAM,KAAK,UAAU;AAC3B,cAAM,QAAe,oBAAY,EAAE;AACnC,cAAM,SAAgB,uBAAe,eAAe,KAAK,KAAK;AAC9D,cAAM,KAAK,OAAO,OAAO;AAAA,UACvB,OAAO,OAAO,WAAW,OAAO;AAAA,UAChC,OAAO,MAAM;AAAA,QACf,CAAC;AACD,cAAM,MAAM,OAAO,WAAW;AAE9B,eAAO,OAAO,OAAO,CAAC,OAAO,KAAK,EAAE,CAAC;AAAA,MACvC;AAAA,MAEQ,WAAW,MAAsB;AACvC,cAAM,MAAM,KAAK,UAAU;AAC3B,cAAM,QAAQ,KAAK,SAAS,GAAG,EAAE;AACjC,cAAM,MAAM,KAAK,SAAS,IAAI,EAAE;AAChC,cAAM,KAAK,KAAK,SAAS,EAAE;AAC3B,cAAM,WAAkB,yBAAiB,eAAe,KAAK,KAAK;AAClE,iBAAS,WAAW,GAAG;AACvB,cAAM,YAAY,OAAO,OAAO,CAAC,SAAS,OAAO,EAAE,GAAG,SAAS,MAAM,CAAC,CAAC;AACvE,eAAO,UAAU,SAAS,OAAO;AAAA,MACnC;AAAA,IACF;AAAA;AAAA;;;AC3IA,IAiBa;AAjBb;AAAA;AAAA;AAAA;AAOA;AACA;AASO,IAAM,eAAN,MAAmB;AAAA,MACP;AAAA,MACA;AAAA,MAEjB,YAAY,QAAwB,WAA6B;AAC/D,aAAK,SAAS;AACd,aAAK,YAAY,aAAa,IAAI,gBAAgB;AAAA,MACpD;AAAA;AAAA;AAAA;AAAA;AAAA,MAMA,MAAM,YAAoC;AACxC,cAAM,SAAS,KAAK,OAAO;AAAA,UACzB;AAAA,UACA;AAAA,UACA;AAAA,QACF;AACA,YAAI,WAAW,QAAQ,WAAW,QAAW;AAC3C,iBAAO;AAAA,QACT;AACA,cAAM,YAAY,OAAO,MAAM;AAC/B,YAAI,UAAU,WAAW,UAAU,KAAK,UAAU,WAAW,MAAM,GAAG;AACpE,iBAAO,KAAK,UAAU,SAAS,WAAW,cAAc;AAAA,QAC1D;AACA,eAAO;AAAA,MACT;AAAA;AAAA;AAAA;AAAA,MAKA,MAAM,oBACJ,SACiC;AACjC,cAAM,MAAM,MAAM,KAAK,UAAU;AACjC,YAAI,CAAC,KAAK;AACR,gBAAM,IAAI;AAAA,YACR;AAAA,UAEF;AAAA,QACF;AACA,eAAO,EAAE,GAAG,SAAS,eAAe,UAAU,GAAG,GAAG;AAAA,MACtD;AAAA;AAAA;AAAA;AAAA,MAKA,eAAe,YAA0B;AACvC,YAAI,eAAe,OAAO,eAAe,KAAK;AAC5C,gBAAM,IAAI;AAAA,YACR;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA;AAAA;;;AClEA,YAAY,mBAAmB;AAC/B,YAAYC,SAAQ;AACpB,YAAYC,SAAQ;AACpB,YAAYC,WAAU;AATtB,IAuBa;AAvBb;AAAA;AAAA;AAAA;AAWA;AAYO,IAAM,UAAN,MAAc;AAAA,MACF;AAAA,MAEjB,YAAY,UAAU,OAAO;AAC3B,aAAK,UAAU;AAAA,MACjB;AAAA;AAAA;AAAA;AAAA,MAKA,MAAM,QACJ,UACA,WACA,UACkB;AAClB,YAAI,CAAC,KAAK,SAAS;AACjB,iBAAO,SAAS,QAAQ,UAAU,SAAS;AAAA,QAC7C;AACA,eAAO,KAAK,iBAAiB,UAAU,SAAS;AAAA,MAClD;AAAA,MAEQ,iBACN,UACA,WACS;AAET,cAAM,MAA8B,CAAC;AACrC,mBAAW,OAAO,CAAC,QAAQ,aAAa,QAAQ,QAAQ,GAAG;AACzD,cAAI,QAAQ,IAAI,GAAG,GAAG;AACpB,gBAAI,GAAG,IAAI,QAAQ,IAAI,GAAG;AAAA,UAC5B;AAAA,QACF;AACA,mBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,QAAQ,GAAG,GAAG;AACtD,cAAI,IAAI,WAAW,SAAS,KAAK,OAAO;AACtC,gBAAI,GAAG,IAAI;AAAA,UACb;AAAA,QACF;AAEA,cAAM,SAAY;AAAA,UACX,WAAQ,WAAO,GAAG,iBAAiB;AAAA,QAC1C;AAEA,YAAI;AACF,cAAI,OAAO;AACX,cAAI,SAAS;AAEb,gBAAM,SAAS;AAAA,YACb;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA,gGAAgG,QAAQ;AAAA,YACxG;AAAA,UACF,EAAE,KAAK,EAAE;AAET,gBAAM,SAAuB;AAAA,YAC3B,QAAQ;AAAA,YACR,CAAC,MAAM,MAAM;AAAA,YACb;AAAA,cACE,OAAO,KAAK,UAAU,SAAS;AAAA,cAC/B;AAAA,cACA,KAAK;AAAA,cACL,SAAS;AAAA,cACT,WAAW,KAAK,OAAO;AAAA,YACzB;AAAA,UACF;AAEA,iBAAO,KAAK,MAAM,OAAO,SAAS,OAAO,CAAC;AAAA,QAC5C,SAAS,KAAc;AACrB,cACE,eAAe,SACf,YAAY,OACX,IAAgC,QACjC;AACA,kBAAM,IAAI;AAAA,cACR,kBAAkB,QAAQ;AAAA,YAC5B;AAAA,UACF;AACA,gBAAM,SACJ,eAAe,SAAS,YAAY,MAChC,OAAQ,IAAgC,MAAM,IAC9C,OAAO,GAAG;AAChB,gBAAM,IAAI;AAAA,YACR,kBAAkB,QAAQ,uBAAuB,MAAM;AAAA,UACzD;AAAA,QACF,UAAE;AACA,cAAI;AACF,YAAG,WAAO,QAAQ,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,UACpD,QAAQ;AAAA,UAER;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA;AAAA;;;ACrHA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAMA;AACA;AACA;AACA;AAAA;AAAA;;;ACTA;;;ACAA;AAUA;AAJA,SAAS,oBAAoB;AAC7B,SAAS,iBAAAC,sBAAqB;AAC9B,YAAYC,WAAU;AACtB,SAAS,SAAS,sBAAsB;;;ACTxC;AAMA;AAUO,SAAS,YACd,QACA,WAAW,IACX,WAAW,IACc;AACzB,QAAM,SAAS,gBAAgB,MAAM;AACrC,QAAM,OAAQ,OAAO,SAAS,OAAO,eAAe,CAAC;AAIrD,QAAM,SAAS;AAAA,IACb;AAAA,IACA;AAAA,IACA,oBAAI,IAAY;AAAA,IAChB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAGA,SAAO,OAAO;AACd,SAAO,OAAO;AACd,SAAO;AACT;AAEA,SAAS,YACP,MACA,MACA,SACA,OACA,UACA,UACS;AACT,MAAI,OAAO,SAAS,YAAY,SAAS,QAAQ,MAAM,QAAQ,IAAI,GAAG;AACpE,WAAO;AAAA,EACT;AAEA,QAAM,MAAM;AAGZ,MAAI,UAAU,KAAK;AACjB,UAAM,UAAU,IAAI;AAEpB,QAAI,SAAS,UAAU;AACrB,cAAQ,OAAO;AAAA,QACb,oDAAoD,QAAQ,gBAAgB,QAAQ;AAAA;AAAA,MACtF;AACA,cAAQ,KAAK,WAAW,mBAAmB;AAAA,IAC7C;AAEA,QAAI,QAAQ,IAAI,OAAO,GAAG;AACxB,cAAQ,OAAO;AAAA,QACb,uDAAuD,QAAQ,cAAc,OAAO;AAAA;AAAA,MACtF;AACA,cAAQ,KAAK,WAAW,mBAAmB;AAAA,IAC7C;AAGA,UAAM,QAAQ,QAAQ,MAAM,GAAG;AAC/B,UAAM,MAAM,MAAM,MAAM,SAAS,CAAC;AAElC,QAAI,EAAE,OAAO,OAAO;AAClB,cAAQ,OAAO;AAAA,QACb,6BAA6B,OAAO,2BAA2B,QAAQ;AAAA;AAAA,MACzE;AACA,cAAQ,KAAK,WAAW,uBAAuB;AAAA,IACjD;AAEA,UAAM,aAAa,IAAI,IAAI,OAAO;AAClC,eAAW,IAAI,OAAO;AACtB,WAAO,YAAY,KAAK,GAAG,GAAG,MAAM,YAAY,QAAQ,GAAG,UAAU,QAAQ;AAAA,EAC/E;AAGA,MAAI,WAAW,OAAO,MAAM,QAAQ,IAAI,KAAK,GAAG;AAC9C,UAAM,SAAkC;AAAA,MACtC,YAAY,CAAC;AAAA,MACb,UAAU,CAAC;AAAA,IACb;AACA,eAAW,aAAa,IAAI,OAAoB;AAC9C,YAAM,WAAW;AAAA,QACf;AAAA,QACA;AAAA,QACA;AAAA,QACA,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,MACF;AACA,UAAI,SAAS,YAAY;AACvB,eAAO;AAAA,UACL,OAAO;AAAA,UACP,SAAS;AAAA,QACX;AAAA,MACF;AACA,UAAI,MAAM,QAAQ,SAAS,QAAQ,GAAG;AACpC,QAAC,OAAO,SAAsB,KAAK,GAAG,SAAS,QAAQ;AAAA,MACzD;AAAA,IACF;AAEA,WAAO,WAAW,CAAC,GAAG,IAAI,IAAI,OAAO,QAAoB,CAAC;AAE1D,eAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,GAAG,GAAG;AACxC,UAAI,MAAM,WAAW,EAAE,KAAK,SAAS;AACnC,eAAO,CAAC,IAAI;AAAA,MACd;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAGA,aAAW,WAAW,CAAC,SAAS,OAAO,GAAG;AACxC,QAAI,WAAW,OAAO,MAAM,QAAQ,IAAI,OAAO,CAAC,GAAG;AACjD,YAAM,SAAkC;AAAA,QACtC,YAAY,CAAC;AAAA,QACb,UAAU,CAAC;AAAA,MACb;AACA,YAAM,kBAAiC,CAAC;AACxC,iBAAW,aAAa,IAAI,OAAO,GAAgB;AACjD,cAAM,WAAW;AAAA,UACf;AAAA,UACA;AAAA,UACA;AAAA,UACA,QAAQ;AAAA,UACR;AAAA,UACA;AAAA,QACF;AACA,YAAI,SAAS,YAAY;AACvB,iBAAO;AAAA,YACL,OAAO;AAAA,YACP,SAAS;AAAA,UACX;AAAA,QACF;AACA,YAAI,MAAM,QAAQ,SAAS,QAAQ,GAAG;AACpC,0BAAgB,KAAK,IAAI,IAAI,SAAS,QAAoB,CAAC;AAAA,QAC7D;AAAA,MACF;AAEA,UAAI,gBAAgB,SAAS,GAAG;AAC9B,YAAI,eAAe,gBAAgB,CAAC;AACpC,iBAAS,IAAI,GAAG,IAAI,gBAAgB,QAAQ,KAAK;AAC/C,yBAAe,IAAI;AAAA,YACjB,CAAC,GAAG,YAAY,EAAE,OAAO,CAAC,MAAM,gBAAgB,CAAC,EAAE,IAAI,CAAC,CAAC;AAAA,UAC3D;AAAA,QACF;AACA,eAAO,WAAW,CAAC,GAAG,YAAY;AAAA,MACpC,OAAO;AACL,eAAO,WAAW,CAAC;AAAA,MACrB;AAEA,iBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,GAAG,GAAG;AACxC,YAAI,MAAM,WAAW,EAAE,KAAK,SAAS;AACnC,iBAAO,CAAC,IAAI;AAAA,QACd;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAAA,EACF;AAGA,MAAI,gBAAgB,OAAO,OAAO,IAAI,eAAe,YAAY,IAAI,eAAe,MAAM;AACxF,UAAM,QAAQ,IAAI;AAClB,eAAW,CAAC,UAAU,UAAU,KAAK,OAAO,QAAQ,KAAK,GAAG;AAC1D,YAAM,QAAQ,IAAI;AAAA,QAChB;AAAA,QACA;AAAA,QACA;AAAA,QACA,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;;;AC9LA;AAOA;AAOA,IAAM,eAAe,uBAAO,cAAc;AAOnC,SAAS,QAAQ,UAAkB,YAAiD;AACzF,QAAM,aAAa,WAAW;AAG9B,MACE,eAAe,aACd,SAAS,SAAS,OAAO,KAAK,WAAW,YAAY,MAAM,OAC5D;AACA,WAAO;AAAA,EACT;AAEA,QAAM,UAAsC;AAAA,IAC1C,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,QAAQ;AAAA,IACR,OAAO;AAAA,EACT;AAEA,MAAI,CAAC,YAAY;AACf,WAAO;AAAA,EACT;AAEA,SAAO,QAAQ,UAAU,KAAK;AAChC;AAKO,SAAS,YAAY,YAAqC,YAAY,KAA0B;AACrG,MAAI,OAAO,WAAW,mBAAmB;AACzC,MAAI,CAAC,MAAM;AACT,WAAO,WAAW;AAAA,EACpB;AACA,MAAI,CAAC,MAAM;AACT,WAAO;AAAA,EACT;AACA,MAAI,YAAY,KAAK,KAAK,SAAS,WAAW;AAC5C,WAAO,KAAK,MAAM,GAAG,YAAY,CAAC,IAAI;AAAA,EACxC;AACA,SAAO;AACT;AAOA,IAAM,iBAAiB,oBAAI,IAAI,CAAC,SAAS,OAAO,eAAe,UAAU,SAAS,CAAC;AAM5E,SAAS,mBACd,QACA,gBAAgB,KACA;AAChB,QAAM,aAAc,OAAO,cAAc,CAAC;AAI1C,QAAM,eAAgB,OAAO,YAAY,CAAC;AAC1C,QAAM,UAA0B,CAAC;AACjC,QAAM,YAAoC,CAAC;AAE3C,aAAW,CAAC,UAAU,UAAU,KAAK,OAAO,QAAQ,UAAU,GAAG;AAC/D,UAAM,WAAW,OAAO,SAAS,QAAQ,MAAM,GAAG;AAGlD,QAAI,YAAY,WAAW;AACzB,cAAQ,OAAO;AAAA,QACb,2CAA2C,QAAQ,UAAU,UAAU,QAAQ,CAAC,kBAAkB,QAAQ;AAAA;AAAA,MAC5G;AACA,cAAQ,KAAK,WAAW,iBAAiB;AAAA,IAC3C;AACA,cAAU,QAAQ,IAAI;AAGtB,QAAI,eAAe,IAAI,QAAQ,GAAG;AAChC,cAAQ,OAAO;AAAA,QACb,kCAAkC,QAAQ;AAAA;AAAA,MAC5C;AACA,cAAQ,KAAK,WAAW,iBAAiB;AAAA,IAC3C;AAEA,UAAM,aAAa,QAAQ,UAAU,UAAU;AAC/C,UAAM,aAAa,aAAa,SAAS,QAAQ;AACjD,UAAM,WAAW,YAAY,YAAY,aAAa;AACtD,UAAM,WAAW,cACZ,WAAW,WAAW,MAAM,MAAM,eACnC,YAAY;AAChB,UAAM,eAAe,WAAW;AAEhC,QAAI,eAAe,cAAc;AAE/B,YAAM,WAAW,SAAS,QAAQ,MAAM,GAAG;AAC3C,YAAM,aAAc,WAAW,WAAuB;AACtD,cAAQ,KAAK;AAAA,QACX,MAAM;AAAA,QACN,OAAO,KAAK,QAAQ,UAAU,QAAQ;AAAA,QACtC,aAAa;AAAA,QACb,cAAc;AAAA,QACd,UAAU;AAAA,QACV,eAAe;AAAA,MACjB,CAAC;AAAA,IACH,WAAW,UAAU,cAAc,MAAM,QAAQ,WAAW,IAAI,GAAG;AACjE,YAAM,aAAa,WAAW;AAC9B,UAAI,WAAW,WAAW,GAAG;AAE3B,gBAAQ,KAAK;AAAA,UACX,MAAM;AAAA,UACN,OAAO,GAAG,QAAQ;AAAA,UAClB,aAAa;AAAA,UACb;AAAA,UACA,UAAU;AAAA,QACZ,CAAC;AAAA,MACH,OAAO;AACL,cAAM,eAAe,WAAW,IAAI,MAAM;AAC1C,cAAM,oBAA4C,CAAC;AACnD,mBAAW,KAAK,YAAY;AAC1B,cAAI,OAAO,MAAM,YAAY,OAAO,UAAU,CAAC,GAAG;AAChD,8BAAkB,OAAO,CAAC,CAAC,IAAI;AAAA,UACjC,WAAW,OAAO,MAAM,UAAU;AAChC,8BAAkB,OAAO,CAAC,CAAC,IAAI;AAAA,UACjC,WAAW,OAAO,MAAM,WAAW;AACjC,8BAAkB,OAAO,CAAC,CAAC,IAAI;AAAA,UACjC;AAAA,QACF;AACA,gBAAQ,KAAK;AAAA,UACX,MAAM;AAAA,UACN,OAAO,GAAG,QAAQ;AAAA,UAClB,aAAa;AAAA,UACb,cACE,iBAAiB,SAAY,OAAO,YAAY,IAAI;AAAA,UACtD,UAAU;AAAA,UACV,SAAS;AAAA,UACT,mBACE,OAAO,KAAK,iBAAiB,EAAE,SAAS,IACpC,oBACA;AAAA,QACR,CAAC;AAAA,MACH;AAAA,IACF,OAAO;AAEL,UAAI;AACJ,UAAI,eAAe,OAAO;AACxB,mBAAW,CAAC,MAAc;AACxB,gBAAM,IAAI,SAAS,GAAG,EAAE;AACxB,cAAI,MAAM,CAAC,EAAG,OAAM,IAAI,MAAM,oBAAoB,CAAC,EAAE;AACrD,iBAAO;AAAA,QACT;AAAA,MACF,WAAW,eAAe,SAAS;AACjC,mBAAW,CAAC,MAAc;AACxB,gBAAM,IAAI,WAAW,CAAC;AACtB,cAAI,MAAM,CAAC,EAAG,OAAM,IAAI,MAAM,mBAAmB,CAAC,EAAE;AACpD,iBAAO;AAAA,QACT;AAAA,MACF;AACA,cAAQ,KAAK;AAAA,QACX,MAAM;AAAA,QACN,OAAO,GAAG,QAAQ;AAAA,QAClB,aAAa;AAAA,QACb;AAAA,QACA,UAAU;AAAA,QACV;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO;AACT;;;ACjMA;AAQA;AAFA,YAAY,cAAc;AAW1B,SAAS,cACP,aACA,KACA,eAAwB,QACf;AACT,MAAI,CAAC,eAAe,OAAO,gBAAgB,SAAU,QAAO;AAC5D,QAAM,MAAM;AACZ,SAAO,OAAO,MAAM,IAAI,GAAG,IAAI;AACjC;AAWA,eAAsB,cACpB,WACA,aACe;AACf,QAAM,cAAc,UAAU;AAG9B,MAAI;AACJ,MAAI,UAAU,qBAAqB,QAAW;AAC5C,uBAAmB,UAAU;AAAA,EAC/B,WAAW,aAAa;AACtB,uBAAmB,cAAc,aAAa,qBAAqB,KAAK,MAAM;AAAA,EAChF,OAAO;AACL;AAAA,EACF;AAEA,MAAI,CAAC,kBAAkB;AACrB;AAAA,EACF;AAEA,QAAM,WAAW,UAAU;AAG3B,MAAI,aAAa;AACf;AAAA,EACF;AAGA,QAAM,SAAS,QAAQ,IAAI,2BAA2B;AACtD,MAAI,WAAW,KAAK;AAClB;AAAA,EACF;AACA,MAAI,WAAW,MAAM,WAAW,KAAK;AACnC,YAAQ,OAAO;AAAA,MACb,+CAA+C,MAAM;AAAA;AAAA,IACvD;AAAA,EACF;AAGA,MAAI,CAAC,QAAQ,MAAM,OAAO;AACxB,YAAQ,OAAO;AAAA,MACb,kBAAkB,QAAQ;AAAA;AAAA,IAG5B;AACA,YAAQ,KAAK,WAAW,eAAe;AAAA,EACzC;AAGA,QAAM,kBAAkB,WAAW,EAAE;AACvC;AAKA,eAAe,kBACb,WACA,SACe;AAEf,YAAU,KAAK,IAAI,GAAG,KAAK,IAAI,SAAS,IAAI,CAAC;AAE7C,QAAM,WAAW,UAAU;AAC3B,QAAM,cAAc,UAAU;AAC9B,QAAM,WACH,cACI,cAAc,aAAa,kBAAkB,IAC9C,WACJ,WAAW,QAAQ;AAErB,UAAQ,OAAO,MAAM,UAAU,IAAI;AAEnC,QAAM,KAAc,yBAAgB;AAAA,IAClC,OAAO,QAAQ;AAAA,IACf,QAAQ,QAAQ;AAAA,EAClB,CAAC;AAED,MAAI;AAEJ,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ,KAAK;AAAA,MAChC,IAAI,QAAgB,CAACC,aAAY;AAC/B,WAAG,SAAS,mBAAmB,CAAC,QAAQA,SAAQ,GAAG,CAAC;AAAA,MACtD,CAAC;AAAA,MACD,IAAI,QAAe,CAAC,GAAG,WAAW;AAChC,gBAAQ,WAAW,MAAM;AACvB,iBAAO,IAAI;AAAA,YACT,mCAAmC,OAAO;AAAA,UAC5C,CAAC;AAAA,QACH,GAAG,UAAU,GAAI;AAAA,MACnB,CAAC;AAAA,IACH,CAAC;AAGD,QAAI,MAAO,cAAa,KAAK;AAE7B,UAAM,aAAa,OAAO,KAAK,EAAE,YAAY;AAC7C,QAAI,eAAe,OAAO,eAAe,OAAO;AAC9C;AAAA,IACF;AAEA,YAAQ,OAAO,MAAM,2BAA2B;AAChD,YAAQ,KAAK,WAAW,eAAe;AAAA,EACzC,SAAS,KAAK;AACZ,QAAI,MAAO,cAAa,KAAK;AAC7B,QAAI,eAAe,sBAAsB;AACvC,cAAQ,OAAO;AAAA,QACb,0CAA0C,OAAO;AAAA;AAAA,MACnD;AACA,cAAQ,KAAK,WAAW,gBAAgB;AAAA,IAC1C;AACA,UAAM;AAAA,EACR,UAAE;AACA,OAAG,MAAM;AAAA,EACX;AACF;;;ACvJA;AAeO,SAAS,cAAc,gBAAiC;AAC7D,MAAI,mBAAmB,QAAW;AAChC,WAAO;AAAA,EACT;AACA,SAAO,QAAQ,OAAO,QAAQ,UAAU;AAC1C;AAKO,SAAS,SAAS,MAAc,YAAY,IAAY;AAC7D,MAAI,KAAK,UAAU,WAAW;AAC5B,WAAO;AAAA,EACT;AACA,SAAO,KAAK,MAAM,GAAG,YAAY,CAAC,IAAI;AACxC;AAKA,SAAS,YACP,SACA,MACQ;AAER,QAAM,YAAY,QAAQ;AAAA,IAAI,CAAC,GAAG,MAChC,KAAK,IAAI,EAAE,QAAQ,GAAG,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,IAAI,MAAM,CAAC;AAAA,EAC5D;AAEA,QAAM,MAAM,UAAU,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,IAAI;AACzD,QAAM,aAAa,QAChB,IAAI,CAAC,GAAG,MAAM,EAAE,OAAO,UAAU,CAAC,CAAC,CAAC,EACpC,KAAK,IAAI;AACZ,QAAM,YAAY,KAAK;AAAA,IAAI,CAAC,QAC1B,IAAI,IAAI,CAAC,MAAM,OAAO,QAAQ,IAAI,OAAO,UAAU,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI;AAAA,EACnE;AAEA,SAAO,CAAC,YAAY,KAAK,GAAG,SAAS,EAAE,KAAK,IAAI,IAAI;AACtD;AASO,SAAS,iBACd,SACA,QACA,YACM;AACN,MAAI,WAAW,SAAS;AACtB,QAAI,QAAQ,WAAW,KAAK,cAAc,WAAW,SAAS,GAAG;AAC/D,cAAQ,OAAO;AAAA,QACb,mCAAmC,WAAW,KAAK,IAAI,CAAC;AAAA;AAAA,MAC1D;AACA;AAAA,IACF;AACA,QAAI,QAAQ,WAAW,GAAG;AACxB,cAAQ,OAAO,MAAM,qBAAqB;AAC1C;AAAA,IACF;AAEA,UAAM,UAAU,CAAC,MAAM,eAAe,MAAM;AAC5C,UAAM,OAAO,QAAQ,IAAI,CAAC,MAAM;AAAA,MAC9B,EAAE;AAAA,MACF,SAAS,EAAE,aAAa,EAAE;AAAA,OACzB,EAAE,QAAQ,CAAC,GAAG,KAAK,IAAI;AAAA,IAC1B,CAAC;AACD,YAAQ,OAAO,MAAM,YAAY,SAAS,IAAI,CAAC;AAAA,EACjD,WAAW,WAAW,QAAQ;AAC5B,UAAM,SAAS,QAAQ,IAAI,CAAC,OAAO;AAAA,MACjC,IAAI,EAAE;AAAA,MACN,aAAa,EAAE;AAAA,MACf,MAAM,EAAE,QAAQ,CAAC;AAAA,IACnB,EAAE;AACF,YAAQ,OAAO,MAAM,KAAK,UAAU,QAAQ,MAAM,CAAC,IAAI,IAAI;AAAA,EAC7D;AACF;AASA,SAAS,kBACP,aACgC;AAChC,MAAI,CAAC,YAAa,QAAO;AACzB,MAAI,OAAO,gBAAgB,YAAY,MAAM,QAAQ,WAAW,EAAG,QAAO;AAC1E,QAAM,SAAkC,CAAC;AACzC,aAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,WAAsC,GAAG;AAC3E,QAAI,MAAM,QAAQ,MAAM,UAAa,MAAM,SAAS,MAAM,KAAK,EAAE,MAAM,QAAQ,CAAC,KAAK,EAAE,WAAW,IAAI;AACpG,aAAO,CAAC,IAAI;AAAA,IACd;AAAA,EACF;AACA,SAAO,OAAO,KAAK,MAAM,EAAE,SAAS,IAAI,SAAS;AACnD;AAKO,SAAS,mBACd,WACA,QACM;AACN,MAAI,WAAW,SAAS;AACtB,YAAQ,OAAO,MAAM;AAAA,UAAa,UAAU,EAAE;AAAA,CAAI;AAClD,YAAQ,OAAO,MAAM;AAAA;AAAA,IAAqB,UAAU,WAAW;AAAA,CAAI;AAEnE,QAAI,UAAU,eAAe,OAAO,KAAK,UAAU,WAAW,EAAE,SAAS,GAAG;AAC1E,cAAQ,OAAO,MAAM,mBAAmB;AACxC,cAAQ,OAAO,MAAM,KAAK,UAAU,UAAU,aAAa,MAAM,CAAC,IAAI,IAAI;AAAA,IAC5E;AAEA,QAAI,UAAU,gBAAgB,OAAO,KAAK,UAAU,YAAY,EAAE,SAAS,GAAG;AAC5E,cAAQ,OAAO,MAAM,oBAAoB;AACzC,cAAQ,OAAO,MAAM,KAAK,UAAU,UAAU,cAAc,MAAM,CAAC,IAAI,IAAI;AAAA,IAC7E;AAEA,UAAM,UAAU;AAAA,MACd,UAAU;AAAA,IACZ;AACA,QAAI,SAAS;AACX,cAAQ,OAAO,MAAM,kBAAkB;AACvC,iBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,OAAO,GAAG;AAC5C,gBAAQ,OAAO,MAAM,KAAK,CAAC,KAAK,CAAC;AAAA,CAAI;AAAA,MACvC;AAAA,IACF;AAGA,UAAM,WAAW,UAAU;AAC3B,QAAI,UAAU;AACZ,YAAM,UAAmC,CAAC;AAC1C,iBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,QAAQ,GAAG;AAC7C,YAAI,EAAE,WAAW,IAAI,KAAK,EAAE,WAAW,IAAI,GAAG;AAC5C,kBAAQ,CAAC,IAAI;AAAA,QACf;AAAA,MACF;AACA,UAAI,OAAO,KAAK,OAAO,EAAE,SAAS,GAAG;AACnC,gBAAQ,OAAO,MAAM,yBAAyB;AAC9C,mBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,OAAO,GAAG;AAC5C,kBAAQ,OAAO,MAAM,KAAK,CAAC,KAAK,CAAC;AAAA,CAAI;AAAA,QACvC;AAAA,MACF;AAAA,IACF;AAEA,UAAM,OAAO,UAAU,QAAQ,CAAC;AAChC,QAAI,KAAK,SAAS,GAAG;AACnB,cAAQ,OAAO,MAAM;AAAA,QAAW,KAAK,KAAK,IAAI,CAAC;AAAA,CAAI;AAAA,IACrD;AAAA,EACF,WAAW,WAAW,QAAQ;AAC5B,UAAM,SAAkC;AAAA,MACtC,IAAI,UAAU;AAAA,MACd,aAAa,UAAU;AAAA,IACzB;AACA,QAAI,UAAU,YAAa,QAAO,eAAe,UAAU;AAC3D,QAAI,UAAU,aAAc,QAAO,gBAAgB,UAAU;AAE7D,UAAM,UAAU;AAAA,MACd,UAAU;AAAA,IACZ;AACA,QAAI,QAAS,QAAO,cAAc;AAElC,UAAM,OAAO,UAAU,QAAQ,CAAC;AAChC,QAAI,KAAK,SAAS,EAAG,QAAO,OAAO;AAGnC,UAAM,WAAW,UAAU;AAC3B,QAAI,UAAU;AACZ,iBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,QAAQ,GAAG;AAC7C,YAAI,EAAE,WAAW,IAAI,KAAK,EAAE,WAAW,IAAI,GAAG;AAC5C,iBAAO,CAAC,IAAI;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAEA,YAAQ,OAAO,MAAM,KAAK,UAAU,QAAQ,MAAM,CAAC,IAAI,IAAI;AAAA,EAC7D;AACF;AASO,SAAS,iBACd,QACA,QACM;AACN,MAAI,WAAW,QAAQ,WAAW,QAAW;AAC3C;AAAA,EACF;AACA,QAAM,YAAY,cAAc,MAAM;AACtC,MACE,cAAc,WACd,OAAO,WAAW,YAClB,CAAC,MAAM,QAAQ,MAAM,GACrB;AAEA,UAAM,UAAU,OAAO,QAAQ,MAAiC;AAChE,UAAM,UAAU,CAAC,OAAO,OAAO;AAC/B,UAAM,OAAO,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;AAC3D,YAAQ,OAAO,MAAM,YAAY,SAAS,IAAI,CAAC;AAAA,EACjD,WAAW,OAAO,WAAW,UAAU;AACrC,YAAQ,OAAO,MAAM,KAAK,UAAU,QAAQ,MAAM,CAAC,IAAI,IAAI;AAAA,EAC7D,WAAW,OAAO,WAAW,UAAU;AACrC,YAAQ,OAAO,MAAM,SAAS,IAAI;AAAA,EACpC,OAAO;AACL,YAAQ,OAAO,MAAM,OAAO,MAAM,IAAI,IAAI;AAAA,EAC5C;AACF;;;ACvOA;AAIA,IAAM,SAAS,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,EAAE;AAGzD,IAAI,eAAyB;AAEtB,SAAS,YAAY,OAAqB;AAC/C,QAAM,QAAQ,MAAM,YAAY;AAChC,MAAI,SAAS,QAAQ;AACnB,mBAAe;AAAA,EACjB;AACF;AAEO,SAAS,cAAwB;AACtC,SAAO;AACT;AAEA,SAAS,UAAU,OAA0B;AAC3C,SAAO,OAAO,KAAK,KAAK,OAAO,YAAY;AAC7C;AAEO,SAAS,MAAM,SAAuB;AAC3C,MAAI,UAAU,OAAO,EAAG,SAAQ,OAAO,MAAM,UAAU,OAAO;AAAA,CAAI;AACpE;AAEO,SAAS,KAAK,SAAuB;AAC1C,MAAI,UAAU,MAAM,EAAG,SAAQ,OAAO,MAAM,SAAS,OAAO;AAAA,CAAI;AAClE;AAEO,SAAS,KAAK,SAAuB;AAC1C,MAAI,UAAU,SAAS,EAAG,SAAQ,OAAO,MAAM,YAAY,OAAO;AAAA,CAAI;AACxE;AAEO,SAAS,MAAM,SAAuB;AAC3C,MAAI,UAAU,OAAO,EAAG,SAAQ,OAAO,MAAM,UAAU,OAAO;AAAA,CAAI;AACpE;;;ALpBA,IAAMC,aAAiB,cAAQC,eAAc,YAAY,GAAG,CAAC;AAC7D,IAAM,MAAM,KAAK,MAAM,aAAkB,cAAQD,YAAW,iBAAiB,GAAG,OAAO,CAAC;AACxF,IAAM,UAAkB,IAAI;AAsCrB,SAAS,UACd,eACA,UACS;AAET,QAAM,mBAAmB,YAAiB,eAAS,QAAQ,KAAK,CAAC,KAAK,YAAY,KAAK;AAGvF,QAAM,cAAc,QAAQ,IAAI,4BAA4B,QAAQ,IAAI,wBAAwB;AAChG,cAAY,WAAW;AAEvB,QAAM,UAAU,IAAI,QAAQ,gBAAgB,EACzC,aAAa,EACb,QAAQ,SAAS,aAAa,QAAQ,gBAAgB,UAAU,EAChE,YAAY,gEAA2D,EACvE,OAAO,2BAA2B,8BAA8B,EAChE,OAAO,uBAAuB,4CAA4C,SAAS;AAItF,OAAK;AAEL,SAAO;AACT;AASO,SAAS,KAAK,UAAyB;AAC5C,QAAM,UAAU,UAAU,QAAW,QAAQ;AAE7C,MAAI;AACF,YAAQ,MAAM,QAAQ,IAAI;AAAA,EAC5B,SAASE,QAAgB;AACvB,QAAIA,kBAAiB,gBAAgB;AAEnC,cAAQ,KAAKA,OAAM,QAAQ;AAAA,IAC7B;AACA,UAAM,OAAO,iBAAiBA,MAAK;AACnC,QAAIA,kBAAiB,OAAO;AAC1B,cAAQ,OAAO,MAAM,UAAUA,OAAM,OAAO;AAAA,CAAI;AAAA,IAClD;AACA,YAAQ,KAAK,IAAI;AAAA,EACnB;AACF;AASO,SAAS,mBACd,WACA,UACA,oBAAoB,KACX;AACT,QAAM,WAAW,UAAU;AAC3B,MAAI,iBAA0C,CAAC;AAC/C,MAAI,gBAAgC,CAAC;AAGrC,QAAM,cAAc,UAAU;AAC9B,MAAI,eAAe,OAAO,gBAAgB,YAAY,YAAY,YAAY;AAC5E,QAAI;AACF,uBAAiB,YAAY,aAAa,IAAI,QAAQ;AAAA,IACxD,QAAQ;AACN,uBAAiB;AAAA,IACnB;AACA,oBAAgB,mBAAmB,gBAAgB,iBAAiB;AAAA,EACtE;AAEA,QAAM,MAAM,IAAI,QAAQ,QAAQ,EAAE,YAAY,UAAU,WAAW;AAGnE,MAAI,OAAO,oBAAoB,6BAA6B;AAC5D,MAAI,OAAO,aAAa,2BAA2B,KAAK;AACxD,MAAI,OAAO,iBAAiB,sCAAsC,KAAK;AACvE,MAAI,OAAO,qBAAqB,4BAA4B;AAC5D,MAAI,OAAO,aAAa,oCAAoC,KAAK;AAGjE,aAAW,OAAO,eAAe;AAC/B,QAAI,IAAI,UAAU;AAChB,UAAI,OAAO,IAAI,OAAO,IAAI,aAAa,IAAI,UAAU,IAAI,YAAY;AAAA,IACvE,OAAO;AACL,UAAI,OAAO,IAAI,OAAO,IAAI,aAAa,IAAI,YAA4C;AAAA,IACzF;AAAA,EACF;AAGA,MAAI,OAAO,OAAO,YAAqC;AAErD,UAAM,YAAY,QAAQ;AAC1B,UAAM,cAAc,QAAQ;AAC5B,UAAM,aAAa,QAAQ;AAC3B,UAAM,eAAe,QAAQ;AAC7B,UAAM,iBAAiB,QAAQ;AAG/B,UAAM,eAAwC,CAAC;AAC/C,UAAM,cAAc,oBAAI,IAAI,CAAC,SAAS,OAAO,cAAc,UAAU,SAAS,CAAC;AAC/E,eAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,OAAO,GAAG;AAC5C,UAAI,CAAC,YAAY,IAAI,CAAC,GAAG;AACvB,qBAAa,CAAC,IAAI;AAAA,MACpB;AAAA,IACF;AAEA,QAAI;AAEF,YAAM,SAAS,MAAM,aAAa,WAAW,cAAc,UAAU;AAGrE,YAAM,cAAc,oBAAoB,QAAQ,aAAa;AAG7D,YAAM,cAAc,WAAW,WAAW;AAG1C,YAAM,EAAE,SAAAC,SAAQ,IAAI,MAAM;AAC1B,YAAM,UAAU,IAAIA,SAAQ,cAAc;AAC1C,YAAM,YAAY,YAAY,IAAI;AAClC,YAAM,SAAS,MAAM,QAAQ,QAAQ,UAAU,aAAa,QAAQ;AACpE,YAAM,aAAa,KAAK,MAAM,YAAY,IAAI,IAAI,SAAS;AAG3D,YAAM,EAAE,gBAAAC,gBAAe,IAAI,MAAM;AACjC,YAAM,cAAcA,gBAAe;AACnC,UAAI,aAAa;AACf,oBAAY,aAAa,UAAU,aAAa,WAAW,GAAG,UAAU;AAAA,MAC1E;AAGA,uBAAiB,QAAQ,YAAY;AAAA,IACvC,SAAS,KAAc;AAErB,YAAM,EAAE,gBAAAA,gBAAe,IAAI,MAAM;AACjC,YAAM,cAAcA,gBAAe;AACnC,YAAM,OAAO,iBAAiB,GAAG;AACjC,UAAI,aAAa;AACf,oBAAY,aAAa,UAAU,CAAC,GAAG,SAAS,MAAM,CAAC;AAAA,MACzD;AAEA,UAAI,eAAe,OAAO;AACxB,gBAAQ,OAAO,MAAM,UAAU,IAAI,OAAO;AAAA,CAAI;AAAA,MAChD;AACA,cAAQ,KAAK,IAAI;AAAA,IACnB;AAAA,EACF,CAAC;AAED,SAAO;AACT;AAUO,SAAS,iBAAiB,UAAwB;AACvD,MAAI,SAAS,SAAS,KAAK;AACzB,YAAQ,OAAO;AAAA,MACb,qCAAqC,QAAQ;AAAA;AAAA,IAC/C;AACA,YAAQ,KAAK,WAAW,iBAAiB;AAAA,EAC3C;AACA,MAAI,CAAC,wCAAwC,KAAK,QAAQ,GAAG;AAC3D,YAAQ,OAAO;AAAA,MACb,qCAAqC,QAAQ;AAAA;AAAA,IAC/C;AACA,YAAQ,KAAK,WAAW,iBAAiB;AAAA,EAC3C;AACF;AASA,eAAsB,aACpB,WACA,YAAqC,CAAC,GACtC,YACkC;AAElC,QAAM,mBAA4C,CAAC;AACnD,aAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,SAAS,GAAG;AAC9C,QAAI,MAAM,QAAQ,MAAM,QAAW;AACjC,uBAAiB,CAAC,IAAI;AAAA,IACxB;AAAA,EACF;AAEA,MAAI,CAAC,WAAW;AACd,WAAO;AAAA,EACT;AAEA,MAAI,cAAc,KAAK;AACrB,UAAM,MAAM,MAAM,UAAU;AAC5B,UAAM,UAAU,OAAO,WAAW,KAAK,OAAO;AAE9C,QAAI,UAAU,YAAc,CAAC,YAAY;AACvC,cAAQ,OAAO;AAAA,QACb;AAAA,MACF;AACA,cAAQ,KAAK,WAAW,iBAAiB;AAAA,IAC3C;AAEA,QAAI,CAAC,KAAK;AACR,aAAO;AAAA,IACT;AAEA,QAAI;AACJ,QAAI;AACF,kBAAY,KAAK,MAAM,GAAG;AAAA,IAC5B,QAAQ;AACN,cAAQ,OAAO;AAAA,QACb;AAAA,MACF;AACA,cAAQ,KAAK,WAAW,iBAAiB;AAAA,IAC3C;AAEA,QAAI,OAAO,cAAc,YAAY,cAAc,QAAQ,MAAM,QAAQ,SAAS,GAAG;AACnF,cAAQ,OAAO;AAAA,QACb,4CAA4C,MAAM,QAAQ,SAAS,IAAI,UAAU,OAAO,SAAS;AAAA;AAAA,MACnG;AACA,cAAQ,KAAK,WAAW,iBAAiB;AAAA,IAC3C;AAGA,WAAO,EAAE,GAAI,WAAuC,GAAG,iBAAiB;AAAA,EAC1E;AAEA,SAAO;AACT;AAKA,SAAS,YAA6B;AACpC,SAAO,IAAI,QAAQ,CAACC,UAAS,WAAW;AACtC,UAAM,SAAmB,CAAC;AAC1B,UAAM,SAAS,CAAC,UAAkB,OAAO,KAAK,KAAK;AACnD,UAAM,QAAQ,MAAM;AAClB,cAAQ;AACR,MAAAA,SAAQ,OAAO,OAAO,MAAM,EAAE,SAAS,OAAO,CAAC;AAAA,IACjD;AACA,UAAM,UAAU,CAAC,QAAe;AAC9B,cAAQ;AACR,aAAO,GAAG;AAAA,IACZ;AACA,UAAM,UAAU,MAAM;AACpB,cAAQ,MAAM,eAAe,QAAQ,MAAM;AAC3C,cAAQ,MAAM,eAAe,OAAO,KAAK;AACzC,cAAQ,MAAM,eAAe,SAAS,OAAO;AAAA,IAC/C;AACA,YAAQ,MAAM,GAAG,QAAQ,MAAM;AAC/B,YAAQ,MAAM,GAAG,OAAO,KAAK;AAC7B,YAAQ,MAAM,GAAG,SAAS,OAAO;AACjC,YAAQ,MAAM,OAAO;AAAA,EACvB,CAAC;AACH;AAUO,SAAS,oBACd,QACA,SACyB;AACzB,QAAM,SAAS,EAAE,GAAG,OAAO;AAC3B,aAAW,OAAO,SAAS;AACzB,QAAI,CAAC,IAAI,kBAAmB;AAC5B,UAAM,YAAY,IAAI;AACtB,QAAI,EAAE,aAAa,WAAW,OAAO,SAAS,MAAM,QAAQ,OAAO,SAAS,MAAM,QAAW;AAC3F;AAAA,IACF;AACA,UAAM,SAAS,OAAO,OAAO,SAAS,CAAC;AACvC,UAAM,WAAW,IAAI,kBAAkB,MAAM;AAC7C,QAAI,aAAa,OAAO;AACtB,aAAO,SAAS,IAAI,SAAS,QAAQ,EAAE;AAAA,IACzC,WAAW,aAAa,SAAS;AAC/B,aAAO,SAAS,IAAI,WAAW,MAAM;AAAA,IACvC,WAAW,aAAa,QAAQ;AAC9B,aAAO,SAAS,IAAI,OAAO,YAAY,MAAM;AAAA,IAC/C;AAAA,EACF;AACA,SAAO;AACT;;;AMvWA;AAqDO,IAAM,kBAAN,MAAsB;AAAA,EACV;AAAA,EACR;AAAA,EACQ;AAAA,EACT,eAAqC,oBAAI,IAAI;AAAA,EAErD,YAAY,UAAoB,UAAoB,oBAAoB,KAAM;AAC5E,SAAK,WAAW;AAChB,SAAK,WAAW;AAChB,SAAK,oBAAoB;AAAA,EAC3B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,eAAyB;AAEvB,WAAO,KAAK,SAAS,YAAY,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE;AAAA,EACpD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,WAAW,SAAiC;AAC1C,QAAI,KAAK,aAAa,IAAI,OAAO,GAAG;AAClC,aAAO,KAAK,aAAa,IAAI,OAAO;AAAA,IACtC;AAEA,UAAM,YAAY,KAAK,SAAS,UAAU,OAAO;AACjD,QAAI,CAAC,WAAW;AACd,aAAO;AAAA,IACT;AAEA,UAAM,MAAM,mBAAmB,WAAW,KAAK,UAAU,KAAK,iBAAiB;AAC/E,SAAK,aAAa,IAAI,SAAS,GAAG;AAClC,WAAO;AAAA,EACT;AACF;;;AC9FA;AAMA,YAAYC,SAAQ;AACpB,OAAO,UAAU;AAOV,IAAM,WAAoC;AAAA,EAC/C,mBAAmB;AAAA,EACnB,iBAAiB;AAAA,EACjB,mBAAmB;AAAA,EACnB,0BAA0B;AAAA,EAC1B,oBAAoB;AAAA,EACpB,4BAA4B;AAC9B;AAaO,IAAM,iBAAN,MAAqB;AAAA,EACT;AAAA,EACA;AAAA,EACT,YAA4C;AAAA,EAC5C,kBAAkB;AAAA,EAE1B,YAAY,UAAoC,YAAqB;AACnE,SAAK,WAAW,YAAY,CAAC;AAC7B,SAAK,aAAa,cAAc;AAAA,EAClC;AAAA;AAAA;AAAA;AAAA,EAKA,QAAQ,KAAa,SAAkB,QAA0B;AAE/D,UAAM,UAAU,WAAW;AAC3B,QAAI,WAAW,KAAK,UAAU;AAC5B,YAAM,QAAQ,KAAK,SAAS,OAAO;AACnC,UAAI,UAAU,QAAQ,UAAU,QAAW;AACzC,eAAO;AAAA,MACT;AAAA,IACF;AAGA,QAAI,QAAQ;AACV,YAAM,WAAW,QAAQ,IAAI,MAAM;AACnC,UAAI,aAAa,UAAa,aAAa,IAAI;AAC7C,eAAO;AAAA,MACT;AAAA,IACF;AAGA,UAAM,YAAY,KAAK,gBAAgB,GAAG;AAC1C,QAAI,cAAc,QAAW;AAC3B,aAAO;AAAA,IACT;AAGA,WAAO,SAAS,GAAG;AAAA,EACrB;AAAA;AAAA;AAAA;AAAA,EAKQ,gBAAgB,KAAsB;AAC5C,QAAI,CAAC,KAAK,iBAAiB;AACzB,WAAK,YAAY,KAAK,eAAe;AACrC,WAAK,kBAAkB;AAAA,IACzB;AACA,QAAI,KAAK,cAAc,MAAM;AAC3B,aAAO;AAAA,IACT;AACA,WAAO,KAAK,UAAU,GAAG;AAAA,EAC3B;AAAA;AAAA;AAAA;AAAA,EAKQ,iBAAiD;AACvD,QAAI;AACJ,QAAI;AACF,gBAAa,iBAAa,KAAK,YAAY,OAAO;AAAA,IACpD,SAAS,KAAc;AACrB,UAAI,eAAe,SAAS,UAAU,OAAO,IAAI,SAAS,UAAU;AAClE,eAAO;AAAA,MACT;AACA,cAAQ;AAAA,QACN,uBAAuB,KAAK,UAAU;AAAA,MACxC;AACA,aAAO;AAAA,IACT;AAEA,QAAI;AACJ,QAAI;AACF,eAAS,KAAK,KAAK,OAAO;AAAA,IAC5B,QAAQ;AACN,cAAQ;AAAA,QACN,uBAAuB,KAAK,UAAU;AAAA,MACxC;AACA,aAAO;AAAA,IACT;AAEA,QAAI,OAAO,WAAW,YAAY,WAAW,QAAQ,MAAM,QAAQ,MAAM,GAAG;AAC1E,cAAQ;AAAA,QACN,uBAAuB,KAAK,UAAU;AAAA,MACxC;AACA,aAAO;AAAA,IACT;AAEA,WAAO,KAAK,YAAY,MAAiC;AAAA,EAC3D;AAAA;AAAA;AAAA;AAAA,EAKQ,YACN,GACA,SAAS,IACgB;AACzB,UAAM,SAAkC,CAAC;AACzC,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,CAAC,GAAG;AAC5C,YAAM,UAAU,SAAS,GAAG,MAAM,IAAI,GAAG,KAAK;AAC9C,UACE,OAAO,UAAU,YACjB,UAAU,QACV,CAAC,MAAM,QAAQ,KAAK,GACpB;AACA,eAAO;AAAA,UACL;AAAA,UACA,KAAK,YAAY,OAAkC,OAAO;AAAA,QAC5D;AAAA,MACF,OAAO;AACL,eAAO,OAAO,IAAI;AAAA,MACpB;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;;;ACxJA;AAQA;AAFA,SAAS,WAAAC,gBAAe;AAUxB,IAAM,cAAc;AAEpB,SAAS,YAAY,KAAmB;AACtC,MAAI,CAAC,YAAY,KAAK,GAAG,GAAG;AAC1B,YAAQ,OAAO;AAAA,MACb,+BAA+B,GAAG;AAAA;AAAA,IACpC;AACA,YAAQ,KAAK,WAAW,iBAAiB;AAAA,EAC3C;AACF;AAKA,SAAS,WAAW,OAAe,UAA8B;AAC/D,SAAO,SAAS,OAAO,CAAC,KAAK,CAAC;AAChC;AAKO,SAAS,0BACd,KACA,UACM;AACN,QAAM,UAAU,IAAIC,SAAQ,MAAM,EAC/B,YAAY,yCAAyC,EACrD,OAAO,eAAe,kDAAkD,YAAY,CAAC,CAAC,EACtF,OAAO,qBAAqB,kBAAkB,MAAS,EACvD,OAAO,CAAC,SAA6C;AAEpD,eAAW,KAAK,KAAK,KAAK;AACxB,kBAAY,CAAC;AAAA,IACf;AAEA,UAAM,UAA8B,CAAC;AACrC,eAAW,KAAK,SAAS,YAAY,GAAG;AACtC,cAAQ,KAAK,CAAC;AAAA,IAChB;AAEA,QAAI,WAAW;AACf,QAAI,KAAK,IAAI,SAAS,GAAG;AACvB,YAAM,aAAa,IAAI,IAAI,KAAK,GAAG;AACnC,iBAAW,QAAQ,OAAO,CAAC,MAAM;AAC/B,cAAM,QAAQ,EAAE,QAAQ,CAAC;AACzB,eAAO,CAAC,GAAG,UAAU,EAAE,MAAM,CAAC,MAAM,MAAM,SAAS,CAAC,CAAC;AAAA,MACvD,CAAC;AAAA,IACH;AAEA,UAAM,MAAM,cAAc,KAAK,MAAM;AACrC,qBAAiB,UAAU,KAAK,KAAK,IAAI,SAAS,IAAI,KAAK,MAAM,MAAS;AAAA,EAC5E,CAAC;AACH,MAAI,WAAW,OAAO;AAEtB,QAAM,cAAc,IAAIA,SAAQ,UAAU,EACvC,YAAY,sDAAsD,EAClE,SAAS,eAAe,uBAAuB,EAC/C,OAAO,qBAAqB,kBAAkB,MAAS,EACvD,OAAO,CAAC,UAAkB,SAA8B;AACvD,qBAAiB,QAAQ;AAEzB,UAAM,YAAY,SAAS,UAAU,QAAQ;AAC7C,QAAI,CAAC,WAAW;AACd,cAAQ,OAAO;AAAA,QACb,kBAAkB,QAAQ;AAAA;AAAA,MAC5B;AACA,cAAQ,KAAK,WAAW,gBAAgB;AAAA,IAC1C;AAEA,UAAM,MAAM,cAAc,KAAK,MAAM;AACrC,uBAAmB,WAAW,GAAG;AAAA,EACnC,CAAC;AACH,MAAI,WAAW,WAAW;AAC5B;;;ACzFA;AAUA;AAJA,SAAS,gBAAAC,qBAAoB;AAC7B,SAAS,iBAAAC,sBAAqB;AAC9B,YAAYC,WAAU;AACtB,SAAS,WAAAC,gBAAe;AAGxB,IAAMC,aAAiB,cAAQH,eAAc,YAAY,GAAG,CAAC;AAC7D,IAAMI,OAAM,KAAK,MAAML,cAAkB,cAAQI,YAAW,iBAAiB,GAAG,OAAO,CAAC;AACxF,IAAM,gBAAwBC,KAAI;AASlC,SAAS,iBAAiB,UAA0B;AAClD,SAAO,MAAM,SAAS,QAAQ,iBAAiB,GAAG;AACpD;AAKA,SAAS,WAAW,GAAmB;AACrC,SAAO,MAAM,EAAE,QAAQ,MAAM,OAAO,IAAI;AAC1C;AAMA,SAAS,uBAAuB,UAA0B;AACxD,QAAM,KAAK,iBAAiB,QAAQ;AACpC,QAAM,SAAS,WAAW,QAAQ;AAClC,QAAM,gBACJ,GAAG,MAAM;AAGX,SACE,GAAG,EAAE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,0BAasB,aAAa;AAAA;AAAA;AAAA;AAAA;AAAA,cAKzB,EAAE,IAAI,MAAM;AAAA;AAE/B;AAEA,SAAS,sBAAsB,UAA0B;AACvD,QAAM,KAAK,iBAAiB,QAAQ;AACpC,QAAM,SAAS,WAAW,QAAQ;AAClC,QAAM,gBACJ,GAAG,MAAM;AAGX,SACE,YAAY,QAAQ;AAAA;AAAA,EAEjB,EAAE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,qCAeiC,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,iCAMZ,aAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,UAQpC,EAAE,IAAI,MAAM;AAAA;AAE3B;AAEA,SAAS,uBAAuB,UAA0B;AACxD,QAAM,SAAS,WAAW,QAAQ;AAClC,QAAM,gBACJ,GAAG,MAAM;AAGX,SACE,0BAA0B,QAAQ;AAAA,cACnB,MAAM;AAAA,cAEN,MAAM;AAAA,cAEN,MAAM;AAAA,cAEN,MAAM;AAAA;AAAA,cAGN,MAAM,+CACZ,aAAa;AAAA;AAE1B;AAMA,SAAS,cACP,SACA,UACA,aACQ;AACR,MAAI,CAAC,SAAS;AACZ,WAAO,OAAO,QAAQ,IAAI,WAAW;AAAA,EACvC;AAEA,QAAM,QAAQ,CAAC,OAAO,QAAQ,IAAI,WAAW,MAAM;AACnD,aAAW,OAAO,QAAQ,SAAS;AACjC,UAAM,OAAO,IAAI,QAAQ,IAAI,SAAS;AACtC,QAAI,IAAI,YAAY,GAAG;AACrB,YAAM,KAAK,IAAI,IAAI,GAAG;AAAA,IACxB,WAAW,IAAI,UAAU;AACvB,YAAM,YAAY,IAAI,aAAa,WAAW,SAAS,YAAY;AACnE,YAAM,KAAK,GAAG,IAAI,QAAQ,QAAQ,MAAM;AAAA,IAC1C,OAAO;AACL,YAAM,YAAY,IAAI,aAAa,WAAW,SAAS,YAAY;AACnE,YAAM,KAAK,IAAI,IAAI,QAAQ,QAAQ,OAAO;AAAA,IAC5C;AAAA,EACF;AAEA,aAAW,OAAO,QAAQ,uBAAuB,CAAC,GAAG;AACnD,UAAM,OAAO,IAAI,KAAK,EAAE,YAAY;AACpC,QAAI,IAAI,UAAU;AAChB,YAAM,KAAK,OAAO,IAAI,MAAM;AAAA,IAC9B,OAAO;AACL,YAAM,KAAK,QAAQ,IAAI,OAAO;AAAA,IAChC;AAAA,EACF;AAEA,SAAO,MAAM,KAAK,GAAG;AACvB;AAEA,SAAS,gBACP,aACA,SACA,UACA,UAAU,eACF;AACR,QAAM,SAAQ,oBAAI,KAAK,GAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AAClD,QAAM,QAAQ,GAAG,QAAQ,IAAI,WAAW,GAAG,YAAY;AACvD,QAAM,WAAW,GAAG,QAAQ,IAAI,OAAO;AACvC,QAAM,cAAc,GAAG,QAAQ;AAE/B,QAAM,WAAqB,CAAC;AAC5B,WAAS,KAAK,QAAQ,KAAK,UAAU,KAAK,MAAM,QAAQ,MAAM,WAAW,GAAG;AAE5E,WAAS,KAAK,UAAU;AACxB,QAAM,OAAO,SAAS,YAAY,KAAK;AACvC,QAAM,WAAW,KAAK,MAAM,IAAI,EAAE,CAAC,EAAE,QAAQ,OAAO,EAAE;AACtD,WAAS,KAAK,GAAG,QAAQ,IAAI,WAAW,QAAQ,QAAQ,EAAE;AAE1D,WAAS,KAAK,cAAc;AAC5B,WAAS,KAAK,cAAc,SAAS,UAAU,WAAW,CAAC;AAE3D,MAAI,SAAS,YAAY,GAAG;AAC1B,aAAS,KAAK,iBAAiB;AAC/B,aAAS;AAAA,MACP,QAAQ,YAAY,EAAE,QAAQ,OAAO,MAAM,EAAE,QAAQ,MAAM,KAAK;AAAA,IAClE;AAAA,EACF;AAEA,MAAI,WAAW,QAAQ,QAAQ,SAAS,GAAG;AACzC,aAAS,KAAK,aAAa;AAC3B,eAAW,OAAO,QAAQ,SAAS;AACjC,YAAM,OAAO,CAAC,IAAI,OAAO,IAAI,IAAI,EAAE,OAAO,OAAO,EAAE,KAAK,IAAI;AAC5D,eAAS,KAAK,KAAK;AACnB,UAAI,IAAI,YAAY,GAAG;AACrB,iBAAS,KAAK,OAAO,IAAI,MAAM;AAAA,MACjC,OAAO;AACL,iBAAS,KAAK,OAAO,IAAI,oBAAoB;AAAA,MAC/C;AACA,UAAI,IAAI,aAAa;AACnB,iBAAS,KAAK,IAAI,WAAW;AAAA,MAC/B;AACA,UAAI,IAAI,iBAAiB,UAAa,CAAC,IAAI,YAAY,GAAG;AACxD,iBAAS,KAAK,YAAY,IAAI,YAAY,GAAG;AAAA,MAC/C;AAAA,IACF;AAAA,EACF;AAEA,WAAS,KAAK,iBAAiB;AAC/B,WAAS,KAAK,KAAK;AACnB,WAAS,KAAK,gCAAgC;AAC9C,WAAS;AAAA,IACP;AAAA,EACF;AACA,WAAS,KAAK,KAAK;AACnB,WAAS,KAAK,iCAAiC;AAC/C,WAAS;AAAA,IACP;AAAA,EACF;AACA,WAAS,KAAK,KAAK;AACnB,WAAS,KAAK,kCAAkC;AAChD,WAAS;AAAA,IACP;AAAA,EAEF;AACA,WAAS,KAAK,KAAK;AACnB,WAAS,KAAK,8BAA8B;AAC5C,WAAS;AAAA,IACP;AAAA,EAEF;AAEA,WAAS,KAAK,gBAAgB;AAC9B,QAAM,YAAgC;AAAA,IACpC,CAAC,KAAK,UAAU;AAAA,IAChB,CAAC,KAAK,yBAAyB;AAAA,IAC/B,CAAC,KAAK,wCAAwC;AAAA,IAC9C,CAAC,MAAM,gDAAgD;AAAA,IACvD,CAAC,MAAM,sCAAsC;AAAA,IAC7C;AAAA,MACE;AAAA,MACA;AAAA,IACF;AAAA,IACA;AAAA,MACE;AAAA,MACA;AAAA,IACF;AAAA,IACA,CAAC,MAAM,0CAA0C;AAAA,IACjD,CAAC,MAAM,6DAAwD;AAAA,IAC/D,CAAC,OAAO,kDAAkD;AAAA,EAC5D;AACA,aAAW,CAAC,MAAM,OAAO,KAAK,WAAW;AACvC,aAAS,KAAK;AAAA,MAAY,IAAI;AAAA,EAAS,OAAO,EAAE;AAAA,EAClD;AAEA,WAAS,KAAK,cAAc;AAC5B,WAAS;AAAA,IACP;AAAA,MACE,OAAO,QAAQ;AAAA,MACf,OAAO,QAAQ;AAAA,MACf,OAAO,QAAQ;AAAA,MACf,OAAO,QAAQ;AAAA,IACjB,EAAE,KAAK,IAAI;AAAA,EACb;AAEA,SAAO,SAAS,KAAK,IAAI;AAC3B;AASO,SAAS,sBACd,KACA,WAAW,cACL;AACN,QAAM,gBAAgB,IAAIF,SAAQ,YAAY,EAC3C;AAAA,IACC;AAAA,EACF,EACC,SAAS,WAAW,gCAAgC,EACpD,OAAO,CAAC,UAAkB;AACzB,UAAM,cAAc,CAAC,QAAQ,OAAO,MAAM;AAC1C,QAAI,CAAC,YAAY,SAAS,KAAK,GAAG;AAChC,cAAQ,OAAO;AAAA,QACb,yBAAyB,KAAK;AAAA;AAAA,MAChC;AACA,cAAQ,KAAK,WAAW,iBAAiB;AAAA,IAC3C;AAEA,UAAM,WAAW,IAAI,KAAK,KAAK;AAC/B,UAAM,aAA2C;AAAA,MAC/C,MAAM,MAAM,uBAAuB,QAAQ;AAAA,MAC3C,KAAK,MAAM,sBAAsB,QAAQ;AAAA,MACzC,MAAM,MAAM,uBAAuB,QAAQ;AAAA,IAC7C;AACA,YAAQ,OAAO,MAAM,WAAW,KAAK,EAAE,CAAC;AAAA,EAC1C,CAAC;AACH,MAAI,WAAW,aAAa;AAE5B,QAAM,SAAS,IAAIA,SAAQ,KAAK,EAC7B,YAAY,8DAA8D,EAC1E,SAAS,aAAa,kCAAkC,EACxD,OAAO,CAAC,gBAAwB;AAC/B,UAAM,gBAAgB,oBAAI,IAAI,CAAC,QAAQ,YAAY,cAAc,KAAK,CAAC;AACvE,UAAM,MAAM,IAAI,SAAS,KAAK,CAAC,MAAM,EAAE,KAAK,MAAM,WAAW,KAAK;AAElE,QAAI,CAAC,OAAO,CAAC,cAAc,IAAI,WAAW,GAAG;AAC3C,cAAQ,OAAO;AAAA,QACb,2BAA2B,WAAW;AAAA;AAAA,MACxC;AACA,cAAQ,KAAK,WAAW,iBAAiB;AAAA,IAC3C;AAEA,UAAM,WAAW,IAAI,KAAK,KAAK;AAC/B,UAAM,OAAO,gBAAgB,aAAa,KAAK,QAAQ;AACvD,YAAQ,OAAO,MAAM,IAAI;AAAA,EAC3B,CAAC;AACH,MAAI,WAAW,MAAM;AACvB;;;AV5SA;AAiBA;","names":["error","path","crypto","os","hostname","fs","os","path","fileURLToPath","path","resolve","__dirname","fileURLToPath","error","Sandbox","getAuditLogger","resolve","fs","Command","Command","readFileSync","fileURLToPath","path","Command","__dirname","pkg"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "apcore-cli",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "CLI wrapper for the apcore core SDK — exposes apcore modules as CLI commands",
   "type": "module",
   "main": "./dist/index.js",