kairo-mcp 1.3.0

package/dist/plugins/loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../src/plugins/loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAE3D,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C;;;;;GAKG;AAEH,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC;IACzB,aAAa;IACb,kBAAkB;IAClB,gBAAgB;IAChB,gBAAgB;IAChB,gBAAgB;IAChB,mBAAmB;CACpB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC;KACvB,MAAM,CAAC;IACN,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;IACvC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC;IAClC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,SAAS,EAAE,CAAC;SACT,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACpC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;KACjD,CAAC;SACD,QAAQ,EAAE;IACb,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC;KACD,WAAW,EAAE,CAAC;AAEjB,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,WAAoB;IACpD,MAAM,KAAK,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IACnD,MAAM,GAAG,GAAmB,EAAE,CAAC;IAE/B,+CAA+C;IAC/C,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACpB,IAAI,KAAK,GAAa,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,KAAK,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACzE,CAAC;QAAC,MAAM,CAAC;YACP,2BAA2B;QAC7B,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACvB,GAAG,CAAC,IAAI,CAAC,MAAM,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,oDAAoD;IACpD,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAY,CAAC;YACrE,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACpC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,SAAS,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC,kBAAkB,SAAS,KAAK,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAY;IAC1C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAY,CAAC;QAChE,OAAO,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO;YACL,QAAQ,EAAE,cAAc,CAAC,IAAI,CAAC;YAC9B,YAAY,EAAE,IAAI;YAClB,UAAU,EAAE,KAAK;YACjB,OAAO,EAAE,oBAAoB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;SAC1E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,GAAY,EAAE,MAAc;IACjD,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO;YACL,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC;YAChC,YAAY,EAAE,MAAM;YACpB,UAAU,EAAE,KAAK;YACjB,OAAO,EACL,4BAA4B;gBAC5B,MAAM,CAAC,KAAK,CAAC,MAAM;qBAChB,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;qBACX,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC;qBACrD,IAAI,CAAC,IAAI,CAAC;SAChB,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAA2B,CAAC;IACpD,MAAM,UAAU,GAAG,kBAAkB,CAAC,QAAQ,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAC;IACnF,MAAM,KAAK,GAAiB;QAC1B,QAAQ;QACR,YAAY,EAAE,MAAM;QACpB,UAAU;KACX,CAAC;IACF,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,KAAK,CAAC,OAAO,GAAG,kBAAkB,QAAQ,CAAC,kBAAkB,aAAa,cAAc,EAAE,CAAC;IAC7F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACpC,OAAO;QACL,UAAU,EAAE,gBAAgB;QAC5B,IAAI,EAAE,UAAU,MAAM,EAAE;QACxB,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,oBAAoB;QACjC,YAAY,EAAE,EAAE;QAChB,kBAAkB,EAAE,GAAG;KACxB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,OAAe;IAC/D,MAAM,KAAK,GAAG,KAAK;SAChB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,OAAe;IAC9C,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACrB,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC/B,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAClD,MAAM,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAChC,qDAAqD;QACrD,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAChG,OAAO,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAClD,MAAM,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QAC/B,OAAO,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACnD,CAAC;IACD,6CAA6C;IAC7C,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,KAAK;aACT,KAAK,CAAC,KAAK,CAAC;aACZ,MAAM,CAAC,OAAO,CAAC;aACf,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAClD,MAAM,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QAC/B,OAAO,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAClD,CAAC;IACD,eAAe;IACf,OAAO,KAAK,KAAK,OAAO,CAAC;AAC3B,CAAC;AAQD,SAAS,WAAW,CAAC,CAAS;IAC5B,MAAM,CAAC,GAAG,gCAAgC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnD,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnB,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5C,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED,SAAS,GAAG,CAAC,CAAS,EAAE,CAAS;IAC/B,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK;QAAE,OAAO,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;IAClD,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK;QAAE,OAAO,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;IAClD,OAAO,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;AAC3B,CAAC"}

package/dist/plugins/types.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Plugin manifest contract (v0.9.4, ADR-0015).
+ *
+ * **Manifest-only.** Kairo does NOT load or execute plugin code in-process.
+ * A plugin declares itself, its capabilities, and (optionally) an external
+ * MCP server config that the host (Claude Desktop, Cursor, the IDE) can
+ * wire up. The host runs it, not Kairo.
+ */
+export type PluginCapability = 'read-events' | 'read-checkpoints' | 'read-telemetry' | 'render-reports' | 'extend-inspect' | 'embedder-provider';
+export interface PluginMcpServerSpec {
+    command: string;
+    args?: string[];
+    env?: Record<string, string>;
+}
+export interface KairoPluginManifest {
+    apiVersion: 'kairo.plugin/1';
+    name: string;
+    version: string;
+    description: string;
+    /** Coarse-grained UI/discovery hints — declarations, not enforcement. */
+    capabilities: PluginCapability[];
+    /** Semver range of Kairo this plugin targets, e.g. "^0.9 || ^1". */
+    kairoCompatibility: string;
+    /** Optional external MCP server config; the HOST loads it, not Kairo. */
+    mcpServer?: PluginMcpServerSpec;
+    homepage?: string;
+    author?: string;
+}
+export interface LoadedPlugin {
+    manifest: KairoPluginManifest;
+    /** Absolute path to the manifest file on disk. */
+    manifestPath: string;
+    /** True if `kairoCompatibility` matches the running build. */
+    compatible: boolean;
+    /** Reason a plugin was rejected, if any. */
+    warning?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/plugins/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/plugins/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,MAAM,gBAAgB,GACxB,aAAa,GACb,kBAAkB,GAClB,gBAAgB,GAChB,gBAAgB,GAChB,gBAAgB,GAChB,mBAAmB,CAAC;AAExB,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AAED,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,gBAAgB,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,yEAAyE;IACzE,YAAY,EAAE,gBAAgB,EAAE,CAAC;IACjC,oEAAoE;IACpE,kBAAkB,EAAE,MAAM,CAAC;IAC3B,yEAAyE;IACzE,SAAS,CAAC,EAAE,mBAAmB,CAAC;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,kDAAkD;IAClD,YAAY,EAAE,MAAM,CAAC;IACrB,8DAA8D;IAC9D,UAAU,EAAE,OAAO,CAAC;IACpB,4CAA4C;IAC5C,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB"}

package/dist/plugins/types.js

@@ -0,0 +1,10 @@
+/**
+ * Plugin manifest contract (v0.9.4, ADR-0015).
+ *
+ * **Manifest-only.** Kairo does NOT load or execute plugin code in-process.
+ * A plugin declares itself, its capabilities, and (optionally) an external
+ * MCP server config that the host (Claude Desktop, Cursor, the IDE) can
+ * wire up. The host runs it, not Kairo.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/plugins/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/plugins/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/dist/pressure/pressureModel.d.ts

@@ -0,0 +1,6 @@
+import type { PressureSignals, PressureSnapshot, DirectiveLevel } from '../types/domain.js';
+export declare function directiveFor(score: number): DirectiveLevel;
+export declare function computePressure(signals: PressureSignals): PressureSnapshot;
+/** One-line directive the tool layer appends to every response. */
+export declare function directiveBanner(p: PressureSnapshot): string;
+//# sourceMappingURL=pressureModel.d.ts.map

package/dist/pressure/pressureModel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pressureModel.d.ts","sourceRoot":"","sources":["../../src/pressure/pressureModel.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAqF5F,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,cAAc,CAI1D;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,eAAe,GAAG,gBAAgB,CAqB1E;AAED,mEAAmE;AACnE,wBAAgB,eAAe,CAAC,CAAC,EAAE,gBAAgB,GAAG,MAAM,CAS3D"}

package/dist/pressure/pressureModel.js

@@ -0,0 +1,102 @@
+const SPECS = [
+    {
+        key: 'toolCalls',
+        weight: 0.18,
+        full: 120,
+        reason: (v) => `high tool-call volume (${v})`,
+    },
+    {
+        key: 'compactions',
+        weight: 0.18,
+        full: 3,
+        reason: (v) => `${v} context compaction(s) reported (strong loss signal)`,
+    },
+    {
+        key: 'repeatedRereads',
+        weight: 0.16,
+        full: 14,
+        reason: (v) => `${v} re-reads of already-seen files (context-loss proxy)`,
+    },
+    {
+        key: 'changedFiles',
+        weight: 0.12,
+        full: 40,
+        reason: (v) => `${v} files changed in one session`,
+    },
+    {
+        key: 'clarificationLoops',
+        weight: 0.1,
+        full: 5,
+        reason: (v) => `${v} clarification loop(s) — agent re-asking for context`,
+    },
+    {
+        key: 'retries',
+        weight: 0.1,
+        full: 12,
+        reason: (v) => `${v} retry loops`,
+    },
+    {
+        key: 'unresolvedErrors',
+        weight: 0.08,
+        full: 8,
+        reason: (v) => `${v} unresolved errors accumulating`,
+    },
+    {
+        key: 'cumulativeDiffBytes',
+        weight: 0.05,
+        full: 400_000,
+        reason: (v) => `${Math.round(v / 1000)}KB of cumulative tracked diff`,
+    },
+    {
+        key: 'elapsedMs',
+        weight: 0.03,
+        full: 90 * 60_000,
+        reason: (v) => `${Math.round(v / 60_000)}min elapsed`,
+    },
+];
+const SOON_THRESHOLD = 0.6;
+const NOW_THRESHOLD = 0.8;
+/** A signal contributes a "reason" once it is this saturated on its own. */
+const REASON_SATURATION = 0.7;
+function saturate(value, full) {
+    if (value <= 0)
+        return 0;
+    return Math.min(1, value / full);
+}
+export function directiveFor(score) {
+    if (score >= NOW_THRESHOLD)
+        return 'CHECKPOINT_NOW';
+    if (score >= SOON_THRESHOLD)
+        return 'CHECKPOINT_SOON';
+    return 'CONTINUE';
+}
+export function computePressure(signals) {
+    let score = 0;
+    const reasons = [];
+    for (const spec of SPECS) {
+        const raw = signals[spec.key];
+        const norm = saturate(raw, spec.full);
+        score += norm * spec.weight;
+        if (norm >= REASON_SATURATION) {
+            reasons.push(spec.reason(raw));
+        }
+    }
+    score = Math.min(1, Math.max(0, Number(score.toFixed(4))));
+    const directive = directiveFor(score);
+    if (reasons.length === 0 && directive !== 'CONTINUE') {
+        reasons.push('cumulative pressure across several signals');
+    }
+    return { score, directive, signals, reasons };
+}
+/** One-line directive the tool layer appends to every response. */
+export function directiveBanner(p) {
+    switch (p.directive) {
+        case 'CHECKPOINT_NOW':
+            return `⛔ KAIRO DIRECTIVE: CHECKPOINT_NOW (pressure ${p.score}). Call kairo_checkpoint before any further risky work.`;
+        case 'CHECKPOINT_SOON':
+            return `⚠️ KAIRO DIRECTIVE: CHECKPOINT_SOON (pressure ${p.score}). Finish the current step, then kairo_checkpoint.`;
+        case 'CONTINUE':
+            return `✅ KAIRO: CONTINUE (pressure ${p.score}).`;
+    }
+}
+//# sourceMappingURL=pressureModel.js.map

package/dist/pressure/pressureModel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pressureModel.js","sourceRoot":"","sources":["../../src/pressure/pressureModel.ts"],"names":[],"mappings":"AAkBA,MAAM,KAAK,GAA0B;IACnC;QACE,GAAG,EAAE,WAAW;QAChB,MAAM,EAAE,IAAI;QACZ,IAAI,EAAE,GAAG;QACT,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,0BAA0B,CAAC,GAAG;KAC9C;IACD;QACE,GAAG,EAAE,aAAa;QAClB,MAAM,EAAE,IAAI;QACZ,IAAI,EAAE,CAAC;QACP,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,sDAAsD;KAC1E;IACD;QACE,GAAG,EAAE,iBAAiB;QACtB,MAAM,EAAE,IAAI;QACZ,IAAI,EAAE,EAAE;QACR,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,sDAAsD;KAC1E;IACD;QACE,GAAG,EAAE,cAAc;QACnB,MAAM,EAAE,IAAI;QACZ,IAAI,EAAE,EAAE;QACR,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,+BAA+B;KACnD;IACD;QACE,GAAG,EAAE,oBAAoB;QACzB,MAAM,EAAE,GAAG;QACX,IAAI,EAAE,CAAC;QACP,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,sDAAsD;KAC1E;IACD;QACE,GAAG,EAAE,SAAS;QACd,MAAM,EAAE,GAAG;QACX,IAAI,EAAE,EAAE;QACR,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,cAAc;KAClC;IACD;QACE,GAAG,EAAE,kBAAkB;QACvB,MAAM,EAAE,IAAI;QACZ,IAAI,EAAE,CAAC;QACP,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,iCAAiC;KACrD;IACD;QACE,GAAG,EAAE,qBAAqB;QAC1B,MAAM,EAAE,IAAI;QACZ,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,+BAA+B;KACtE;IACD;QACE,GAAG,EAAE,WAAW;QAChB,MAAM,EAAE,IAAI;QACZ,IAAI,EAAE,EAAE,GAAG,MAAM;QACjB,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,MAAM,CAAC,aAAa;KACtD;CACF,CAAC;AAEF,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,4EAA4E;AAC5E,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAE9B,SAAS,QAAQ,CAAC,KAAa,EAAE,IAAY;IAC3C,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IACzB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,IAAI,KAAK,IAAI,aAAa;QAAE,OAAO,gBAAgB,CAAC;IACpD,IAAI,KAAK,IAAI,cAAc;QAAE,OAAO,iBAAiB,CAAC;IACtD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAwB;IACtD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,KAAK,IAAI,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC;QAC5B,IAAI,IAAI,IAAI,iBAAiB,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAEtC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;QACrD,OAAO,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;IAC7D,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAChD,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,eAAe,CAAC,CAAmB;IACjD,QAAQ,CAAC,CAAC,SAAS,EAAE,CAAC;QACpB,KAAK,gBAAgB;YACnB,OAAO,+CAA+C,CAAC,CAAC,KAAK,yDAAyD,CAAC;QACzH,KAAK,iBAAiB;YACpB,OAAO,iDAAiD,CAAC,CAAC,KAAK,oDAAoD,CAAC;QACtH,KAAK,UAAU;YACb,OAAO,+BAA+B,CAAC,CAAC,KAAK,IAAI,CAAC;IACtD,CAAC;AACH,CAAC"}

package/dist/prompts/continuityPrompt.d.ts

@@ -0,0 +1,7 @@
+/**
+ * The cooperation contract, shipped as a first-class MCP prompt. Kairo cannot observe
+ * the agent's context budget, so its value depends on the agent following this. We make
+ * the contract explicit and the incentive obvious (skip rescanning).
+ */
+export declare const CONTINUITY_PROMPT_TEXT = "You are working through Kairo, a persistent engineering memory layer. Follow this contract:\n\n1. START: Call `kairo_session_start` with the agent name and the task. Kairo returns a\n   continuation brief from prior work \u2014 READ IT and resume from it. Do NOT rescan the\n   whole repository; inspect only the files the brief lists unless they prove\n   insufficient. For structure, call `kairo_graph` (module/service/architecture/\n   pipeline) instead of walking the tree yourself.\n\n2. WORK: As you make changes, call `kairo_record`:\n   - kind:\"file\" for each file you change (Kairo infers risk if you omit it)\n   - kind:\"decision\" for architectural choices (include the rationale)\n   - kind:\"error\" / \"error-resolved\" as failures appear and are fixed\n   - kind:\"retry\" when you re-attempt something that failed\n   - kind:\"pending\" / \"completed\" / \"blocker\" to track work items\n   - kind:\"compaction\" if your context was summarized/compacted, and\n     kind:\"clarification\" if you had to re-ask the user \u2014 these are the strongest\n     context-loss signals you can give Kairo; always report them.\n\n3. PULSE: Every few steps call `kairo_heartbeat`. If you re-read a file you had\n   already read, pass its path as `reread` \u2014 repeated re-reads are a strong signal\n   that context is being lost.\n\n4. ASSESS: Before a risky change (auth, payments, infra, deletions, schema), call\n   `kairo_assess` with the files/intent. It returns ALLOW / CAUTION / HOLD and gets\n   stricter as pressure rises. On HOLD, checkpoint instead of making the change.\n\n5. DIRECTIVE: Every Kairo response carries a directive. On `CHECKPOINT_SOON` finish\n   the current step then checkpoint. On `CHECKPOINT_NOW` call `kairo_checkpoint`\n   immediately, before any further risky change.\n\n6. SHIP: When ready to commit, call `kairo_commit_message` (and\n   `kairo_changelog` / `kairo_release_plan` at release time). Kairo proposes the\n   text from its memory; YOU run git \u2014 Kairo never commits, tags, or pushes.\n\n7. END: Call `kairo_session_end` so the next agent gets a clean, exact handoff.\n\nTreat Kairo as a senior engineer supervising you: it remembers so you don't have to.";
+//# sourceMappingURL=continuityPrompt.d.ts.map

package/dist/prompts/continuityPrompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"continuityPrompt.d.ts","sourceRoot":"","sources":["../../src/prompts/continuityPrompt.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,yqEAoCkD,CAAC"}

package/dist/prompts/continuityPrompt.js

@@ -0,0 +1,43 @@
+/**
+ * The cooperation contract, shipped as a first-class MCP prompt. Kairo cannot observe
+ * the agent's context budget, so its value depends on the agent following this. We make
+ * the contract explicit and the incentive obvious (skip rescanning).
+ */
+export const CONTINUITY_PROMPT_TEXT = `You are working through Kairo, a persistent engineering memory layer. Follow this contract:
+
+1. START: Call \`kairo_session_start\` with the agent name and the task. Kairo returns a
+   continuation brief from prior work — READ IT and resume from it. Do NOT rescan the
+   whole repository; inspect only the files the brief lists unless they prove
+   insufficient. For structure, call \`kairo_graph\` (module/service/architecture/
+   pipeline) instead of walking the tree yourself.
+
+2. WORK: As you make changes, call \`kairo_record\`:
+   - kind:"file" for each file you change (Kairo infers risk if you omit it)
+   - kind:"decision" for architectural choices (include the rationale)
+   - kind:"error" / "error-resolved" as failures appear and are fixed
+   - kind:"retry" when you re-attempt something that failed
+   - kind:"pending" / "completed" / "blocker" to track work items
+   - kind:"compaction" if your context was summarized/compacted, and
+     kind:"clarification" if you had to re-ask the user — these are the strongest
+     context-loss signals you can give Kairo; always report them.
+
+3. PULSE: Every few steps call \`kairo_heartbeat\`. If you re-read a file you had
+   already read, pass its path as \`reread\` — repeated re-reads are a strong signal
+   that context is being lost.
+
+4. ASSESS: Before a risky change (auth, payments, infra, deletions, schema), call
+   \`kairo_assess\` with the files/intent. It returns ALLOW / CAUTION / HOLD and gets
+   stricter as pressure rises. On HOLD, checkpoint instead of making the change.
+
+5. DIRECTIVE: Every Kairo response carries a directive. On \`CHECKPOINT_SOON\` finish
+   the current step then checkpoint. On \`CHECKPOINT_NOW\` call \`kairo_checkpoint\`
+   immediately, before any further risky change.
+
+6. SHIP: When ready to commit, call \`kairo_commit_message\` (and
+   \`kairo_changelog\` / \`kairo_release_plan\` at release time). Kairo proposes the
+   text from its memory; YOU run git — Kairo never commits, tags, or pushes.
+
+7. END: Call \`kairo_session_end\` so the next agent gets a clean, exact handoff.
+
+Treat Kairo as a senior engineer supervising you: it remembers so you don't have to.`;
+//# sourceMappingURL=continuityPrompt.js.map

package/dist/prompts/continuityPrompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"continuityPrompt.js","sourceRoot":"","sources":["../../src/prompts/continuityPrompt.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qFAoC+C,CAAC"}

package/dist/sdk/index.d.ts

@@ -0,0 +1,53 @@
+import type { StabilityEntry, StabilityTier } from '../contracts/stability.js';
+import type { KairoSnapshot } from '../snapshot/types.js';
+import type { LoadedPlugin } from '../plugins/types.js';
+import type { CheckpointListEntry, CoordinationSnapshot, GraphSummary, InspectOverview, MemoryIndexSnapshot, RiskSnapshot, SessionListEntry } from '../inspect/projections.js';
+import type { Checkpoint, SessionState } from '../types/domain.js';
+export interface KairoClientOptions {
+    /** Defaults to `KAIRO_PROJECT_ROOT` env or cwd. */
+    projectRoot?: string;
+}
+export declare class KairoClient {
+    private readonly projection;
+    private readonly paths;
+    constructor(opts?: KairoClientOptions);
+    /** Build version of the Kairo library this SDK was bundled with. */
+    static version(): string;
+    /** True if the target project has a `.kairo/` directory at all. */
+    hasKairo(): boolean;
+    overview(): Promise<InspectOverview>;
+    sessions(): Promise<SessionListEntry[]>;
+    session(id: string): Promise<SessionState | undefined>;
+    checkpoints(): Promise<CheckpointListEntry[]>;
+    checkpoint(id: string): Promise<Checkpoint | undefined>;
+    latestCheckpoint(): Promise<Checkpoint | undefined>;
+    graphs(): Promise<string[]>;
+    graph(kind: string): Promise<GraphSummary | undefined>;
+    memoryIndex(): Promise<MemoryIndexSnapshot | undefined>;
+    coordination(): Promise<CoordinationSnapshot>;
+    risk(): Promise<RiskSnapshot>;
+    /** Read a continuation brief by filename. */
+    brief(name: string): Promise<string | undefined>;
+    /** Read the latest continuation brief, if any. */
+    latestBrief(): Promise<string | undefined>;
+    /** Read a report from `.kairo/reports/{name}`. Returns undefined if absent. */
+    readReport(name: string): Promise<string | undefined>;
+    /**
+     * Validate a snapshot file without importing it. Returns the manifest
+     * + a list of warnings; throws on unparseable JSON.
+     */
+    validateSnapshot(path: string): Promise<{
+        manifest: KairoSnapshot['manifest'];
+        warnings: string[];
+    }>;
+    /** Lookup a single surface entry (tool/route/schema/snapshot). */
+    stabilityOf(id: string): StabilityEntry | undefined;
+    /** All entries at the given tier. */
+    byTier(tier: StabilityTier): StabilityEntry[];
+    /** Full registry (sorted by surface, then id, for deterministic output). */
+    stabilityRegistry(): readonly StabilityEntry[];
+    plugins(): Promise<LoadedPlugin[]>;
+}
+export type { StabilityEntry, StabilityTier } from '../contracts/stability.js';
+export type { LoadedPlugin, KairoPluginManifest, PluginCapability } from '../plugins/types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/sdk/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/sdk/index.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAG/E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EACV,mBAAmB,EACnB,oBAAoB,EACpB,YAAY,EACZ,eAAe,EACf,mBAAmB,EACnB,YAAY,EACZ,gBAAgB,EACjB,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGnE,MAAM,WAAW,kBAAkB;IACjC,mDAAmD;IACnD,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoB;IAC/C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;gBAEvB,IAAI,GAAE,kBAAuB;IAKzC,oEAAoE;IACpE,MAAM,CAAC,OAAO,IAAI,MAAM;IAIxB,mEAAmE;IACnE,QAAQ,IAAI,OAAO;IAMnB,QAAQ,IAAI,OAAO,CAAC,eAAe,CAAC;IAIpC,QAAQ,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAIvC,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;IAItD,WAAW,IAAI,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAI7C,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IAIvD,gBAAgB,IAAI,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IAInD,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAI3B,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;IAItD,WAAW,IAAI,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC;IAIvD,YAAY,IAAI,OAAO,CAAC,oBAAoB,CAAC;IAI7C,IAAI,IAAI,OAAO,CAAC,YAAY,CAAC;IAI7B,6CAA6C;IAC7C,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAIhD,kDAAkD;IAC5C,WAAW,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAQhD,+EAA+E;IACzE,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAQ3D;;;OAGG;IACG,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAC5C,QAAQ,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC;QACpC,QAAQ,EAAE,MAAM,EAAE,CAAC;KACpB,CAAC;IAqBF,kEAAkE;IAClE,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAInD,qCAAqC;IACrC,MAAM,CAAC,IAAI,EAAE,aAAa,GAAG,cAAc,EAAE;IAI7C,4EAA4E;IAC5E,iBAAiB,IAAI,SAAS,cAAc,EAAE;IAQ9C,OAAO,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;CAGnC;AAED,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/E,YAAY,EAAE,YAAY,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/sdk/index.js

@@ -0,0 +1,130 @@
+/**
+ * Kairo SDK (v0.9.4, ADR-0015). Small, dependency-light, **local** client
+ * for reading `.kairo/` state, reports, and stability metadata.
+ *
+ * Suitable for build scripts, CI checks, and editor extensions that want
+ * the same data the web inspector renders — without spawning the MCP
+ * server or speaking the wire protocol. Read-only by design.
+ *
+ * SDK and MCP are parallel ways to read Kairo, not alternatives. MCP is
+ * for agents over stdio; SDK is for local code in the same process.
+ */
+import { readFile } from 'node:fs/promises';
+import { existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { kairoPaths } from '../storage/paths.js';
+import { InspectProjection } from '../inspect/projections.js';
+import { stabilityOf, byTier, STABILITY } from '../contracts/stability.js';
+import { loadPlugins } from '../plugins/loader.js';
+import { SNAPSHOT_SCHEMA } from '../snapshot/types.js';
+import { SERVER_VERSION } from '../server/createServer.js';
+export class KairoClient {
+    projection;
+    paths;
+    constructor(opts = {}) {
+        this.projection = new InspectProjection(opts.projectRoot);
+        this.paths = kairoPaths(opts.projectRoot);
+    }
+    /** Build version of the Kairo library this SDK was bundled with. */
+    static version() {
+        return SERVER_VERSION;
+    }
+    /** True if the target project has a `.kairo/` directory at all. */
+    hasKairo() {
+        return this.projection.hasKairo();
+    }
+    // ── Read-only inspect projections ──────────────────────────────────────
+    overview() {
+        return this.projection.overview();
+    }
+    sessions() {
+        return this.projection.listSessions();
+    }
+    session(id) {
+        return this.projection.getSession(id);
+    }
+    checkpoints() {
+        return this.projection.listCheckpoints();
+    }
+    checkpoint(id) {
+        return this.projection.getCheckpoint(id);
+    }
+    latestCheckpoint() {
+        return this.projection.latestCheckpoint();
+    }
+    graphs() {
+        return this.projection.listGraphs();
+    }
+    graph(kind) {
+        return this.projection.readGraph(kind);
+    }
+    memoryIndex() {
+        return this.projection.memoryIndex();
+    }
+    coordination() {
+        return this.projection.coordination();
+    }
+    risk() {
+        return this.projection.risk();
+    }
+    /** Read a continuation brief by filename. */
+    brief(name) {
+        return this.projection.readContinuation(name);
+    }
+    /** Read the latest continuation brief, if any. */
+    async latestBrief() {
+        const list = await this.projection.listContinuations();
+        const last = list[list.length - 1];
+        return last ? this.projection.readContinuation(last) : undefined;
+    }
+    // ── Reports under `.kairo/reports/` ────────────────────────────────────
+    /** Read a report from `.kairo/reports/{name}`. Returns undefined if absent. */
+    async readReport(name) {
+        const p = join(this.paths.reportsDir, name);
+        if (!existsSync(p))
+            return undefined;
+        return readFile(p, 'utf8');
+    }
+    // ── Snapshot validation ───────────────────────────────────────────────
+    /**
+     * Validate a snapshot file without importing it. Returns the manifest
+     * + a list of warnings; throws on unparseable JSON.
+     */
+    async validateSnapshot(path) {
+        const raw = await readFile(path, 'utf8');
+        const snap = JSON.parse(raw);
+        const warnings = [];
+        if (!snap.manifest) {
+            throw new Error('Snapshot has no manifest');
+        }
+        const onDiskSchema = snap.manifest.snapshotSchema;
+        if (onDiskSchema !== SNAPSHOT_SCHEMA) {
+            warnings.push(`snapshotSchema=${String(onDiskSchema)}; this build understands ${String(SNAPSHOT_SCHEMA)}`);
+        }
+        if (!Array.isArray(snap.events))
+            warnings.push('events: not an array');
+        if (!Array.isArray(snap.telemetry))
+            warnings.push('telemetry: not an array');
+        if (!Array.isArray(snap.audit))
+            warnings.push('audit: not an array');
+        return { manifest: snap.manifest, warnings };
+    }
+    // ── Stability registry ────────────────────────────────────────────────
+    /** Lookup a single surface entry (tool/route/schema/snapshot). */
+    stabilityOf(id) {
+        return stabilityOf(id);
+    }
+    /** All entries at the given tier. */
+    byTier(tier) {
+        return byTier(tier);
+    }
+    /** Full registry (sorted by surface, then id, for deterministic output). */
+    stabilityRegistry() {
+        return [...STABILITY].sort((a, b) => a.surface === b.surface ? a.id.localeCompare(b.id) : a.surface.localeCompare(b.surface));
+    }
+    // ── Plugin manifests (metadata only — no execution) ───────────────────
+    plugins() {
+        return loadPlugins(this.paths.root);
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/sdk/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/sdk/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAmB,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAE3E,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAavD,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAO3D,MAAM,OAAO,WAAW;IACL,UAAU,CAAoB;IAC9B,KAAK,CAAa;IAEnC,YAAY,OAA2B,EAAE;QACvC,IAAI,CAAC,UAAU,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC5C,CAAC;IAED,oEAAoE;IACpE,MAAM,CAAC,OAAO;QACZ,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,mEAAmE;IACnE,QAAQ;QACN,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;IACpC,CAAC;IAED,0EAA0E;IAE1E,QAAQ;QACN,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;IACpC,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;IACxC,CAAC;IAED,OAAO,CAAC,EAAU;QAChB,OAAO,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,UAAU,CAAC,eAAe,EAAE,CAAC;IAC3C,CAAC;IAED,UAAU,CAAC,EAAU;QACnB,OAAO,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,gBAAgB;QACd,OAAO,IAAI,CAAC,UAAU,CAAC,gBAAgB,EAAE,CAAC;IAC5C,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,IAAY;QAChB,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;IACvC,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;IACxC,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IAChC,CAAC;IAED,6CAA6C;IAC7C,KAAK,CAAC,IAAY;QAChB,OAAO,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC;IAED,kDAAkD;IAClD,KAAK,CAAC,WAAW;QACf,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC;QACvD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,CAAC;IAED,0EAA0E;IAE1E,+EAA+E;IAC/E,KAAK,CAAC,UAAU,CAAC,IAAY;QAC3B,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QACrC,OAAO,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC7B,CAAC;IAED,yEAAyE;IAEzE;;;OAGG;IACH,KAAK,CAAC,gBAAgB,CAAC,IAAY;QAIjC,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkB,CAAC;QAC9C,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;QACD,MAAM,YAAY,GAAI,IAAI,CAAC,QAAwC,CAAC,cAAc,CAAC;QACnF,IAAI,YAAY,KAAK,eAAe,EAAE,CAAC;YACrC,QAAQ,CAAC,IAAI,CACX,kBAAkB,MAAM,CAAC,YAAY,CAAC,4BAA4B,MAAM,CAAC,eAAe,CAAC,EAAE,CAC5F,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACvE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAC7E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACrE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC;IAC/C,CAAC;IAED,yEAAyE;IAEzE,kEAAkE;IAClE,WAAW,CAAC,EAAU;QACpB,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC;IACzB,CAAC;IAED,qCAAqC;IACrC,MAAM,CAAC,IAAmB;QACxB,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IAED,4EAA4E;IAC5E,iBAAiB;QACf,OAAO,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAClC,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CACxF,CAAC;IACJ,CAAC;IAED,yEAAyE;IAEzE,OAAO;QACL,OAAO,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;CACF"}

package/dist/security/patterns.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Secret detectors. Pattern-based and intentionally conservative-but-broad: a false
+ * positive only redacts a harmless string; a false negative leaks a credential to
+ * disk. We bias toward over-redaction.
+ *
+ * `replace` receives the full match and must return the replacement, allowing
+ * patterns (e.g. KEY=VALUE) to preserve a non-sensitive prefix for readability.
+ */
+export interface SecretPattern {
+    /** Stable type tag used in audit details and the redaction placeholder. */
+    readonly type: string;
+    readonly regex: RegExp;
+    readonly replace: (match: string, ...groups: string[]) => string;
+}
+export declare const SECRET_PATTERNS: readonly SecretPattern[];
+//# sourceMappingURL=patterns.d.ts.map

package/dist/security/patterns.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"patterns.d.ts","sourceRoot":"","sources":["../../src/security/patterns.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC5B,2EAA2E;IAC3E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,KAAK,MAAM,CAAC;CAClE;AAID,eAAO,MAAM,eAAe,EAAE,SAAS,aAAa,EA6DnD,CAAC"}

package/dist/security/patterns.js

@@ -0,0 +1,61 @@
+const tag = (type) => `«REDACTED:${type}»`;
+export const SECRET_PATTERNS = [
+    {
+        type: 'PEM_PRIVATE_KEY',
+        regex: /-----BEGIN (?:RSA |EC |DSA |OPENSSH |PGP )?PRIVATE KEY-----[\s\S]*?-----END (?:RSA |EC |DSA |OPENSSH |PGP )?PRIVATE KEY-----/g,
+        replace: () => tag('PEM_PRIVATE_KEY'),
+    },
+    {
+        type: 'AWS_ACCESS_KEY_ID',
+        regex: /\b(?:AKIA|ASIA)[0-9A-Z]{16}\b/g,
+        replace: () => tag('AWS_ACCESS_KEY_ID'),
+    },
+    {
+        type: 'GITHUB_TOKEN',
+        regex: /\bgh[pousr]_[A-Za-z0-9]{36,255}\b/g,
+        replace: () => tag('GITHUB_TOKEN'),
+    },
+    {
+        type: 'GITHUB_PAT',
+        regex: /\bgithub_pat_[A-Za-z0-9_]{22,255}\b/g,
+        replace: () => tag('GITHUB_PAT'),
+    },
+    {
+        type: 'GOOGLE_API_KEY',
+        regex: /\bAIza[0-9A-Za-z\-_]{35}\b/g,
+        replace: () => tag('GOOGLE_API_KEY'),
+    },
+    {
+        type: 'SLACK_TOKEN',
+        regex: /\bxox[baprs]-[0-9A-Za-z-]{10,72}\b/g,
+        replace: () => tag('SLACK_TOKEN'),
+    },
+    {
+        type: 'STRIPE_KEY',
+        regex: /\b(?:sk|rk)_(?:live|test)_[0-9A-Za-z]{16,99}\b/g,
+        replace: () => tag('STRIPE_KEY'),
+    },
+    {
+        type: 'RAZORPAY_KEY',
+        regex: /\brzp_(?:live|test)_[0-9A-Za-z]{10,40}\b/g,
+        replace: () => tag('RAZORPAY_KEY'),
+    },
+    {
+        type: 'JWT',
+        regex: /\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\b/g,
+        replace: () => tag('JWT'),
+    },
+    {
+        type: 'CONNECTION_STRING_CREDENTIALS',
+        // scheme://user:password@host  →  redact only the credentials portion
+        regex: /\b((?:postgres(?:ql)?|mysql|mongodb(?:\+srv)?|redis|amqps?|rediss):\/\/)[^\s:@/]+:[^\s:@/]+@/gi,
+        replace: (_m, scheme) => `${scheme}${tag('CONNECTION_CREDENTIALS')}@`,
+    },
+    {
+        type: 'GENERIC_SECRET_ASSIGNMENT',
+        // KEY = VALUE where KEY looks secret-shaped. Preserve the key for readability.
+        regex: /\b([A-Za-z0-9_]*(?:PASSWORD|PASSWD|SECRET|TOKEN|API[_-]?KEY|ACCESS[_-]?KEY|PRIVATE[_-]?KEY|CLIENT[_-]?SECRET|AUTH)[A-Za-z0-9_]*)\s*[:=]\s*["']?([^\s"',]{6,})["']?/gi,
+        replace: (_m, key) => `${key}=${tag('GENERIC_SECRET')}`,
+    },
+];
+//# sourceMappingURL=patterns.js.map

package/dist/security/patterns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"patterns.js","sourceRoot":"","sources":["../../src/security/patterns.ts"],"names":[],"mappings":"AAeA,MAAM,GAAG,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,aAAa,IAAI,GAAG,CAAC;AAE3D,MAAM,CAAC,MAAM,eAAe,GAA6B;IACvD;QACE,IAAI,EAAE,iBAAiB;QACvB,KAAK,EACH,+HAA+H;QACjI,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,iBAAiB,CAAC;KACtC;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,KAAK,EAAE,gCAAgC;QACvC,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,mBAAmB,CAAC;KACxC;IACD;QACE,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE,oCAAoC;QAC3C,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC;KACnC;IACD;QACE,IAAI,EAAE,YAAY;QAClB,KAAK,EAAE,sCAAsC;QAC7C,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC;KACjC;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,KAAK,EAAE,6BAA6B;QACpC,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,gBAAgB,CAAC;KACrC;IACD;QACE,IAAI,EAAE,aAAa;QACnB,KAAK,EAAE,qCAAqC;QAC5C,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC;KAClC;IACD;QACE,IAAI,EAAE,YAAY;QAClB,KAAK,EAAE,iDAAiD;QACxD,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC;KACjC;IACD;QACE,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE,2CAA2C;QAClD,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC;KACnC;IACD;QACE,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,iEAAiE;QACxE,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC;KAC1B;IACD;QACE,IAAI,EAAE,+BAA+B;QACrC,sEAAsE;QACtE,KAAK,EACH,gGAAgG;QAClG,OAAO,EAAE,CAAC,EAAE,EAAE,MAAc,EAAE,EAAE,CAAC,GAAG,MAAM,GAAG,GAAG,CAAC,wBAAwB,CAAC,GAAG;KAC9E;IACD;QACE,IAAI,EAAE,2BAA2B;QACjC,+EAA+E;QAC/E,KAAK,EACH,sKAAsK;QACxK,OAAO,EAAE,CAAC,EAAE,EAAE,GAAW,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,EAAE;KAChE;CACF,CAAC"}

package/dist/security/redactor.d.ts

@@ -0,0 +1,20 @@
+export interface RedactionResult<T> {
+    value: T;
+    /** secret type → number of occurrences removed. Never contains values. */
+    findings: Record<string, number>;
+    get redacted(): boolean;
+}
+/**
+ * The redaction boundary. Recursively walks any JSON-serializable value and replaces
+ * detected secrets in every string. Object *keys* are preserved (they carry structure,
+ * not secrets); only string *values* and array elements are scanned.
+ *
+ * This module is pure. It is wired in at the storage-adapter seam
+ * (see storage/redactingAdapter.ts) so no engine can write un-sanitized data.
+ */
+export declare function redactString(input: string): {
+    value: string;
+    findings: Record<string, number>;
+};
+export declare function sanitize<T>(input: T): RedactionResult<T>;
+//# sourceMappingURL=redactor.d.ts.map

package/dist/security/redactor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redactor.d.ts","sourceRoot":"","sources":["../../src/security/redactor.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,eAAe,CAAC,CAAC;IAChC,KAAK,EAAE,CAAC,CAAC;IACT,0EAA0E;IAC1E,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,IAAI,QAAQ,IAAI,OAAO,CAAC;CACzB;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAa/F;AAED,wBAAgB,QAAQ,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,CA8BxD"}

package/dist/security/redactor.js

@@ -0,0 +1,58 @@
+import { SECRET_PATTERNS } from './patterns.js';
+/**
+ * The redaction boundary. Recursively walks any JSON-serializable value and replaces
+ * detected secrets in every string. Object *keys* are preserved (they carry structure,
+ * not secrets); only string *values* and array elements are scanned.
+ *
+ * This module is pure. It is wired in at the storage-adapter seam
+ * (see storage/redactingAdapter.ts) so no engine can write un-sanitized data.
+ */
+export function redactString(input) {
+    let value = input;
+    const findings = {};
+    for (const pattern of SECRET_PATTERNS) {
+        // Fresh lastIndex each pass; patterns are global.
+        pattern.regex.lastIndex = 0;
+        value = value.replace(pattern.regex, (...args) => {
+            findings[pattern.type] = (findings[pattern.type] ?? 0) + 1;
+            const groups = args.slice(1, -2);
+            return pattern.replace(args[0], ...groups);
+        });
+    }
+    return { value, findings };
+}
+export function sanitize(input) {
+    const findings = {};
+    const walk = (node) => {
+        if (typeof node === 'string') {
+            const r = redactString(node);
+            mergeInto(findings, r.findings);
+            return r.value;
+        }
+        if (Array.isArray(node)) {
+            return node.map(walk);
+        }
+        if (node !== null && typeof node === 'object') {
+            const out = {};
+            for (const [k, v] of Object.entries(node)) {
+                out[k] = walk(v);
+            }
+            return out;
+        }
+        return node;
+    };
+    const value = walk(input);
+    return {
+        value,
+        findings,
+        get redacted() {
+            return Object.keys(findings).length > 0;
+        },
+    };
+}
+function mergeInto(target, source) {
+    for (const [k, v] of Object.entries(source)) {
+        target[k] = (target[k] ?? 0) + v;
+    }
+}
+//# sourceMappingURL=redactor.js.map

package/dist/security/redactor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redactor.js","sourceRoot":"","sources":["../../src/security/redactor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAShD;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,kDAAkD;QAClD,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;QAC5B,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,GAAG,IAAc,EAAE,EAAE;YACzD,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACjC,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAW,EAAE,GAAG,MAAM,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,QAAQ,CAAI,KAAQ;IAClC,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAE5C,MAAM,IAAI,GAAG,CAAC,IAAa,EAAW,EAAE;QACtC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YAC7B,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;YAChC,OAAO,CAAC,CAAC,KAAK,CAAC;QACjB,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;QACD,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9C,MAAM,GAAG,GAA4B,EAAE,CAAC;YACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1C,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACnB,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAM,CAAC;IAC/B,OAAO;QACL,KAAK;QACL,QAAQ;QACR,IAAI,QAAQ;YACV,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QAC1C,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,MAA8B,EAAE,MAA8B;IAC/E,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5C,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;AACH,CAAC"}