octoflow-core 1.0.0

package/dist/runtime/bridge/openai-gateway.js

@@ -0,0 +1,199 @@
+import { extractText } from "../../utils/extract-text.js";
+import { createAgent } from "./create-agent.js";
+import {
+  bootHttpServer,
+  modelList,
+  normalizeModel,
+  pathnameOf,
+  readJson,
+  resolvePassthrough,
+  stampProfileHeadersFor,
+  writeJson,
+  writeText
+} from "./gateway-server-core.js";
+import {
+  embeddingFor,
+  normalizeEmbeddingInput
+} from "./openai-gateway-converters.js";
+import {
+  buildOutputOptionsFromRequest,
+  completionBody,
+  responseBody,
+  writeCompletionStream,
+  writeResponseStream
+} from "./openai-gateway-responses.js";
+import { extractToolCalls } from "./openai-gateway-tool-calls.js";
+import { invokeTool, runAgent } from "./openai-gateway-tool-routing.js";
+const DEFAULT_PRIORITY_BY_PROTOCOL = {
+  anthropic: ["anthropic-api", "claude-code-cli", "vercel-ai:anthropic"],
+  "openai-chat": ["openai-api", "codex-cli", "vercel-ai:openai"],
+  "openai-responses": ["openai-api", "codex-cli", "vercel-ai:openai"],
+  gemini: ["vercel-ai:google"],
+  ollama: ["ollama"],
+  "vercel-ai": ["vercel-ai:openai", "vercel-ai:anthropic", "vercel-ai:google"],
+  acp: ["acp-cli"],
+  custom: ["custom-api", "custom", "cursor-cli"]
+};
+function resolveAgentOptions(options) {
+  const base = options.agentOptions ?? {};
+  if (!options.protocol || "priority" in base && Array.isArray(base.priority)) {
+    return base;
+  }
+  const priority = DEFAULT_PRIORITY_BY_PROTOCOL[options.protocol];
+  if (!priority) return base;
+  return { ...base, priority };
+}
+function errorBody(message, type = "invalid_request_error", code = null) {
+  return { error: { message, type, code } };
+}
+async function resolveEmbeddings(values, dimensions, body, embed) {
+  if (!embed) {
+    return {
+      vectors: values.map((v) => embeddingFor(v, dimensions)),
+      source: "deterministic"
+    };
+  }
+  try {
+    const vectors = await embed(values, {
+      ...body.model ? { model: body.model } : {},
+      ...body.dimensions != null ? { dimensions: body.dimensions } : {}
+    });
+    if (vectors.length !== values.length) {
+      throw new Error(
+        `embed returned ${vectors.length} vectors for ${values.length} inputs`
+      );
+    }
+    return { vectors, source: "passthrough" };
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    console.warn(
+      `[octoflow] /v1/embeddings passthrough failed; falling back to SHA256 deterministic vectors: ${message}`
+    );
+    return {
+      vectors: values.map((v) => embeddingFor(v, dimensions)),
+      source: "fallback"
+    };
+  }
+}
+async function respondWithGeneratedText(res, agent, body, options, passthrough, writeStream, createBody) {
+  const model = normalizeModel(body.model, options.defaultModel);
+  const result = await runAgent(agent, body, passthrough);
+  const out = extractText(result);
+  const toolCalls = extractToolCalls(result, out, body);
+  const builderOptions = buildOutputOptionsFromRequest(body);
+  if (body.stream) writeStream(res, out, model, toolCalls, builderOptions);
+  else writeJson(res, 200, createBody(out, model, toolCalls, builderOptions));
+}
+async function handleEmbeddings(res, body, options) {
+  const dimensions = body.dimensions ?? options.embeddingDimensions ?? 1536;
+  const values = normalizeEmbeddingInput(body.input);
+  const { vectors, source } = await resolveEmbeddings(
+    values,
+    dimensions,
+    body,
+    options.embed
+  );
+  writeJson(
+    res,
+    200,
+    {
+      object: "list",
+      model: normalizeModel(
+        body.model,
+        options.defaultModel ?? "octoflow-embedding"
+      ),
+      data: vectors.map((embedding, index) => ({
+        object: "embedding",
+        index,
+        embedding
+      }))
+    },
+    { extraHeaders: { "X-Octoflow-Embeddings": source } }
+  );
+}
+async function createOpenAiGatewayServer(options = {}) {
+  const agent = options.agent ?? await createAgent(resolveAgentOptions(options));
+  const ownsAgent = !options.agent;
+  const host = options.host ?? "127.0.0.1";
+  const port = options.port ?? 0;
+  const stampProfileHeaders = stampProfileHeadersFor(options.responseHeaders);
+  const passthrough = resolvePassthrough(options);
+  const modelListOptions = {
+    models: options.models,
+    defaultModel: options.defaultModel,
+    modelOwner: options.modelOwner,
+    ...options.protocol ? { protocol: options.protocol } : {}
+  };
+  const handleRequest = async (req, res) => {
+    stampProfileHeaders(res);
+    const pathname = pathnameOf(req, host, port);
+    try {
+      if (req.method === "GET" && pathname === "/health") {
+        writeJson(res, 200, { ok: true, status: "ok" });
+        return;
+      }
+      if (req.method === "GET" && pathname === "/v1/models") {
+        writeJson(res, 200, {
+          object: "list",
+          data: await modelList(agent, modelListOptions)
+        });
+        return;
+      }
+      if (req.method === "POST" && pathname === "/v1/chat/completions") {
+        const body = await readJson(req);
+        await respondWithGeneratedText(
+          res,
+          agent,
+          body,
+          options,
+          passthrough,
+          writeCompletionStream,
+          completionBody
+        );
+        return;
+      }
+      if (req.method === "POST" && pathname === "/v1/responses") {
+        const body = await readJson(req);
+        await respondWithGeneratedText(
+          res,
+          agent,
+          body,
+          options,
+          passthrough,
+          writeResponseStream,
+          responseBody
+        );
+        return;
+      }
+      if (req.method === "POST" && pathname === "/v1/embeddings") {
+        const body = await readJson(req);
+        await handleEmbeddings(res, body, options);
+        return;
+      }
+      if (req.method === "POST" && pathname === "/tools/invoke") {
+        const body = await readJson(req);
+        writeJson(res, 200, {
+          object: "tool.invocation",
+          result: await invokeTool(agent, body, passthrough)
+        });
+        return;
+      }
+      writeText(res, 404, "Not found");
+    } catch (error) {
+      const message = error instanceof Error ? error.message : String(error);
+      writeJson(res, 500, errorBody(message, "server_error"));
+    }
+  };
+  return bootHttpServer({
+    host,
+    port,
+    agent,
+    ownsAgent,
+    handleRequest,
+    buildErrorBody: (msg) => errorBody(msg, "server_error")
+  });
+}
+export {
+  createOpenAiGatewayServer
+};
+//# sourceMappingURL=openai-gateway.js.map

package/dist/runtime/bridge/openai-gateway.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/runtime/bridge/openai-gateway.ts"],
+  "sourcesContent": ["/**\n * OpenAI-compatible gateway \u2014 exposes an agent via OpenAI's HTTP wire format\n * (`/v1/chat/completions`, `/v1/responses`, `/v1/embeddings`, `/tools/invoke`)\n * so any OpenAI SDK client can talk to any octoflow backend without code\n * changes.\n *\n * HTTP plumbing (request body parsing, JSON write, model-list, lifecycle,\n * outer error handler) lives in `gateway-server-core.ts`. Per-protocol\n * conversions and the streaming writers live in\n * `openai-gateway-converters.ts` / `openai-gateway-responses.ts`. Tool\n * routing lives in `openai-gateway-tool-routing.ts`.\n */\nimport type { IncomingMessage, Server, ServerResponse } from 'node:http';\n\nimport type { BackendName } from '../../domain/core-client.js';\nimport type { BridgeProtocol } from '../../domain/protocol.js';\nimport { extractText } from '../../utils/extract-text.js';\nimport type { AgentHandle } from './agent-handle.js';\nimport type { CreateAgentOptions } from './agent-routes.js';\nimport { createAgent } from './create-agent.js';\nimport type { GatewayEmbedFn } from './embedders/index.js';\nimport {\n  bootHttpServer,\n  type GatewayCommonOptions,\n  modelList,\n  normalizeModel,\n  pathnameOf,\n  readJson,\n  resolvePassthrough,\n  stampProfileHeadersFor,\n  writeJson,\n  writeText,\n} from './gateway-server-core.js';\nimport type {\n  ChatCompletionRequest,\n  EmbeddingsRequest,\n  ToolInvokeRequest,\n} from './openai-gateway-converters.js';\nimport {\n  embeddingFor,\n  normalizeEmbeddingInput,\n} from './openai-gateway-converters.js';\nimport type { OutputBuilderOptions } from './openai-gateway-responses.js';\nimport {\n  buildOutputOptionsFromRequest,\n  completionBody,\n  responseBody,\n  writeCompletionStream,\n  writeResponseStream,\n} from './openai-gateway-responses.js';\nimport type { OpenAiToolCall } from './openai-gateway-tool-calls.js';\nimport { extractToolCalls } from './openai-gateway-tool-calls.js';\nimport { invokeTool, runAgent } from './openai-gateway-tool-routing.js';\n\nexport type OpenAiGatewayProtocol = Exclude<BridgeProtocol, 'a2a'>;\n\nexport interface OpenAiGatewayModel {\n  id: string;\n  object?: 'model';\n  created?: number;\n  owned_by?: string;\n}\n\nexport interface OpenAiGatewayServerOptions extends GatewayCommonOptions {\n  agent?: AgentHandle;\n  agentOptions?: CreateAgentOptions;\n  embeddingDimensions?: number;\n  /**\n   * Optional pluggable embedder used by `POST /v1/embeddings`. When set the\n   * gateway forwards inbound embedding requests to this function and tags the\n   * response with `X-Octoflow-Embeddings: passthrough` (or `fallback` if the\n   * embedder throws). When unset the gateway returns deterministic SHA256\n   * vectors and tags the response with `X-Octoflow-Embeddings: deterministic`.\n   *\n   * See `createOpenAiEmbedder` and `createOllamaEmbedder` for ready-made\n   * builders.\n   */\n  embed?: GatewayEmbedFn;\n  /** Preferred outbound backend protocol when this helper creates the agent. */\n  protocol?: OpenAiGatewayProtocol;\n}\n\nexport interface OpenAiGatewayServerHandle {\n  server: Server;\n  agent: AgentHandle;\n  close(): Promise<void>;\n}\n\nconst DEFAULT_PRIORITY_BY_PROTOCOL: Record<\n  OpenAiGatewayProtocol,\n  BackendName[]\n> = {\n  anthropic: ['anthropic-api', 'claude-code-cli', 'vercel-ai:anthropic'],\n  'openai-chat': ['openai-api', 'codex-cli', 'vercel-ai:openai'],\n  'openai-responses': ['openai-api', 'codex-cli', 'vercel-ai:openai'],\n  gemini: ['vercel-ai:google'],\n  ollama: ['ollama'],\n  'vercel-ai': ['vercel-ai:openai', 'vercel-ai:anthropic', 'vercel-ai:google'],\n  acp: ['acp-cli'],\n  custom: ['custom-api', 'custom', 'cursor-cli'],\n};\n\nfunction resolveAgentOptions(\n  options: OpenAiGatewayServerOptions\n): CreateAgentOptions {\n  const base = options.agentOptions ?? {};\n  if (\n    !options.protocol ||\n    ('priority' in base && Array.isArray(base.priority))\n  ) {\n    return base;\n  }\n  const priority = DEFAULT_PRIORITY_BY_PROTOCOL[options.protocol];\n  if (!priority) return base;\n  return { ...base, priority };\n}\n\nfunction errorBody(\n  message: string,\n  type = 'invalid_request_error',\n  code: string | null = null\n): unknown {\n  return { error: { message, type, code } };\n}\n\ntype EmbeddingsSource = 'passthrough' | 'fallback' | 'deterministic';\n\ninterface EmbeddingsResolution {\n  vectors: number[][];\n  source: EmbeddingsSource;\n}\n\nasync function resolveEmbeddings(\n  values: string[],\n  dimensions: number,\n  body: EmbeddingsRequest,\n  embed: GatewayEmbedFn | undefined\n): Promise<EmbeddingsResolution> {\n  if (!embed) {\n    return {\n      vectors: values.map((v) => embeddingFor(v, dimensions)),\n      source: 'deterministic',\n    };\n  }\n  try {\n    const vectors = await embed(values, {\n      ...(body.model ? { model: body.model } : {}),\n      ...(body.dimensions != null ? { dimensions: body.dimensions } : {}),\n    });\n    if (vectors.length !== values.length) {\n      throw new Error(\n        `embed returned ${vectors.length} vectors for ${values.length} inputs`\n      );\n    }\n    return { vectors, source: 'passthrough' };\n  } catch (error) {\n    const message = error instanceof Error ? error.message : String(error);\n    console.warn(\n      `[octoflow] /v1/embeddings passthrough failed; falling back to SHA256 deterministic vectors: ${message}`\n    );\n    return {\n      vectors: values.map((v) => embeddingFor(v, dimensions)),\n      source: 'fallback',\n    };\n  }\n}\n\nasync function respondWithGeneratedText(\n  res: ServerResponse,\n  agent: AgentHandle,\n  body: ChatCompletionRequest,\n  options: OpenAiGatewayServerOptions,\n  passthrough: boolean,\n  writeStream: (\n    res: ServerResponse,\n    textValue: string,\n    model: string,\n    toolCalls?: OpenAiToolCall[],\n    builderOptions?: OutputBuilderOptions\n  ) => void,\n  createBody: (\n    textValue: string,\n    model: string,\n    toolCalls?: OpenAiToolCall[],\n    builderOptions?: OutputBuilderOptions\n  ) => unknown\n): Promise<void> {\n  const model = normalizeModel(body.model, options.defaultModel);\n  const result = await runAgent(agent, body, passthrough);\n  const out = extractText(result);\n  const toolCalls = extractToolCalls(result, out, body);\n  const builderOptions = buildOutputOptionsFromRequest(body);\n  if (body.stream) writeStream(res, out, model, toolCalls, builderOptions);\n  else writeJson(res, 200, createBody(out, model, toolCalls, builderOptions));\n}\n\nasync function handleEmbeddings(\n  res: ServerResponse,\n  body: EmbeddingsRequest,\n  options: OpenAiGatewayServerOptions\n): Promise<void> {\n  const dimensions = body.dimensions ?? options.embeddingDimensions ?? 1536;\n  const values = normalizeEmbeddingInput(body.input);\n  const { vectors, source } = await resolveEmbeddings(\n    values,\n    dimensions,\n    body,\n    options.embed\n  );\n  writeJson(\n    res,\n    200,\n    {\n      object: 'list',\n      model: normalizeModel(\n        body.model,\n        options.defaultModel ?? 'octoflow-embedding'\n      ),\n      data: vectors.map((embedding, index) => ({\n        object: 'embedding',\n        index,\n        embedding,\n      })),\n    },\n    { extraHeaders: { 'X-Octoflow-Embeddings': source } }\n  );\n}\n\nexport async function createOpenAiGatewayServer(\n  options: OpenAiGatewayServerOptions = {}\n): Promise<OpenAiGatewayServerHandle> {\n  const agent =\n    options.agent ?? (await createAgent(resolveAgentOptions(options)));\n  const ownsAgent = !options.agent;\n  const host = options.host ?? '127.0.0.1';\n  const port = options.port ?? 0;\n  const stampProfileHeaders = stampProfileHeadersFor(options.responseHeaders);\n  const passthrough = resolvePassthrough(options);\n  const modelListOptions = {\n    models: options.models,\n    defaultModel: options.defaultModel,\n    modelOwner: options.modelOwner,\n    ...(options.protocol ? { protocol: options.protocol } : {}),\n  };\n\n  const handleRequest = async (\n    req: IncomingMessage,\n    res: ServerResponse\n  ): Promise<void> => {\n    stampProfileHeaders(res);\n    const pathname = pathnameOf(req, host, port);\n    try {\n      if (req.method === 'GET' && pathname === '/health') {\n        writeJson(res, 200, { ok: true, status: 'ok' });\n        return;\n      }\n      if (req.method === 'GET' && pathname === '/v1/models') {\n        writeJson(res, 200, {\n          object: 'list',\n          data: await modelList(agent, modelListOptions),\n        });\n        return;\n      }\n      if (req.method === 'POST' && pathname === '/v1/chat/completions') {\n        const body = (await readJson(req)) as ChatCompletionRequest;\n        await respondWithGeneratedText(\n          res,\n          agent,\n          body,\n          options,\n          passthrough,\n          writeCompletionStream,\n          completionBody\n        );\n        return;\n      }\n      if (req.method === 'POST' && pathname === '/v1/responses') {\n        const body = (await readJson(req)) as ChatCompletionRequest;\n        await respondWithGeneratedText(\n          res,\n          agent,\n          body,\n          options,\n          passthrough,\n          writeResponseStream,\n          responseBody\n        );\n        return;\n      }\n      if (req.method === 'POST' && pathname === '/v1/embeddings') {\n        const body = (await readJson(req)) as EmbeddingsRequest;\n        await handleEmbeddings(res, body, options);\n        return;\n      }\n      if (req.method === 'POST' && pathname === '/tools/invoke') {\n        const body = (await readJson(req)) as ToolInvokeRequest;\n        writeJson(res, 200, {\n          object: 'tool.invocation',\n          result: await invokeTool(agent, body, passthrough),\n        });\n        return;\n      }\n      writeText(res, 404, 'Not found');\n    } catch (error) {\n      const message = error instanceof Error ? error.message : String(error);\n      writeJson(res, 500, errorBody(message, 'server_error'));\n    }\n  };\n\n  return bootHttpServer({\n    host,\n    port,\n    agent,\n    ownsAgent,\n    handleRequest,\n    buildErrorBody: (msg) => errorBody(msg, 'server_error'),\n  });\n}\n"],
+  "mappings": "AAgBA,SAAS,mBAAmB;AAG5B,SAAS,mBAAmB;AAE5B;AAAA,EACE;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAMP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,wBAAwB;AACjC,SAAS,YAAY,gBAAgB;AAoCrC,MAAM,+BAGF;AAAA,EACF,WAAW,CAAC,iBAAiB,mBAAmB,qBAAqB;AAAA,EACrE,eAAe,CAAC,cAAc,aAAa,kBAAkB;AAAA,EAC7D,oBAAoB,CAAC,cAAc,aAAa,kBAAkB;AAAA,EAClE,QAAQ,CAAC,kBAAkB;AAAA,EAC3B,QAAQ,CAAC,QAAQ;AAAA,EACjB,aAAa,CAAC,oBAAoB,uBAAuB,kBAAkB;AAAA,EAC3E,KAAK,CAAC,SAAS;AAAA,EACf,QAAQ,CAAC,cAAc,UAAU,YAAY;AAC/C;AAEA,SAAS,oBACP,SACoB;AACpB,QAAM,OAAO,QAAQ,gBAAgB,CAAC;AACtC,MACE,CAAC,QAAQ,YACR,cAAc,QAAQ,MAAM,QAAQ,KAAK,QAAQ,GAClD;AACA,WAAO;AAAA,EACT;AACA,QAAM,WAAW,6BAA6B,QAAQ,QAAQ;AAC9D,MAAI,CAAC,SAAU,QAAO;AACtB,SAAO,EAAE,GAAG,MAAM,SAAS;AAC7B;AAEA,SAAS,UACP,SACA,OAAO,yBACP,OAAsB,MACb;AACT,SAAO,EAAE,OAAO,EAAE,SAAS,MAAM,KAAK,EAAE;AAC1C;AASA,eAAe,kBACb,QACA,YACA,MACA,OAC+B;AAC/B,MAAI,CAAC,OAAO;AACV,WAAO;AAAA,MACL,SAAS,OAAO,IAAI,CAAC,MAAM,aAAa,GAAG,UAAU,CAAC;AAAA,MACtD,QAAQ;AAAA,IACV;AAAA,EACF;AACA,MAAI;AACF,UAAM,UAAU,MAAM,MAAM,QAAQ;AAAA,MAClC,GAAI,KAAK,QAAQ,EAAE,OAAO,KAAK,MAAM,IAAI,CAAC;AAAA,MAC1C,GAAI,KAAK,cAAc,OAAO,EAAE,YAAY,KAAK,WAAW,IAAI,CAAC;AAAA,IACnE,CAAC;AACD,QAAI,QAAQ,WAAW,OAAO,QAAQ;AACpC,YAAM,IAAI;AAAA,QACR,kBAAkB,QAAQ,MAAM,gBAAgB,OAAO,MAAM;AAAA,MAC/D;AAAA,IACF;AACA,WAAO,EAAE,SAAS,QAAQ,cAAc;AAAA,EAC1C,SAAS,OAAO;AACd,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,YAAQ;AAAA,MACN,+FAA+F,OAAO;AAAA,IACxG;AACA,WAAO;AAAA,MACL,SAAS,OAAO,IAAI,CAAC,MAAM,aAAa,GAAG,UAAU,CAAC;AAAA,MACtD,QAAQ;AAAA,IACV;AAAA,EACF;AACF;AAEA,eAAe,yBACb,KACA,OACA,MACA,SACA,aACA,aAOA,YAMe;AACf,QAAM,QAAQ,eAAe,KAAK,OAAO,QAAQ,YAAY;AAC7D,QAAM,SAAS,MAAM,SAAS,OAAO,MAAM,WAAW;AACtD,QAAM,MAAM,YAAY,MAAM;AAC9B,QAAM,YAAY,iBAAiB,QAAQ,KAAK,IAAI;AACpD,QAAM,iBAAiB,8BAA8B,IAAI;AACzD,MAAI,KAAK,OAAQ,aAAY,KAAK,KAAK,OAAO,WAAW,cAAc;AAAA,MAClE,WAAU,KAAK,KAAK,WAAW,KAAK,OAAO,WAAW,cAAc,CAAC;AAC5E;AAEA,eAAe,iBACb,KACA,MACA,SACe;AACf,QAAM,aAAa,KAAK,cAAc,QAAQ,uBAAuB;AACrE,QAAM,SAAS,wBAAwB,KAAK,KAAK;AACjD,QAAM,EAAE,SAAS,OAAO,IAAI,MAAM;AAAA,IAChC;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ;AAAA,EACV;AACA;AAAA,IACE;AAAA,IACA;AAAA,IACA;AAAA,MACE,QAAQ;AAAA,MACR,OAAO;AAAA,QACL,KAAK;AAAA,QACL,QAAQ,gBAAgB;AAAA,MAC1B;AAAA,MACA,MAAM,QAAQ,IAAI,CAAC,WAAW,WAAW;AAAA,QACvC,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,MACF,EAAE;AAAA,IACJ;AAAA,IACA,EAAE,cAAc,EAAE,yBAAyB,OAAO,EAAE;AAAA,EACtD;AACF;AAEA,eAAsB,0BACpB,UAAsC,CAAC,GACH;AACpC,QAAM,QACJ,QAAQ,SAAU,MAAM,YAAY,oBAAoB,OAAO,CAAC;AAClE,QAAM,YAAY,CAAC,QAAQ;AAC3B,QAAM,OAAO,QAAQ,QAAQ;AAC7B,QAAM,OAAO,QAAQ,QAAQ;AAC7B,QAAM,sBAAsB,uBAAuB,QAAQ,eAAe;AAC1E,QAAM,cAAc,mBAAmB,OAAO;AAC9C,QAAM,mBAAmB;AAAA,IACvB,QAAQ,QAAQ;AAAA,IAChB,cAAc,QAAQ;AAAA,IACtB,YAAY,QAAQ;AAAA,IACpB,GAAI,QAAQ,WAAW,EAAE,UAAU,QAAQ,SAAS,IAAI,CAAC;AAAA,EAC3D;AAEA,QAAM,gBAAgB,OACpB,KACA,QACkB;AAClB,wBAAoB,GAAG;AACvB,UAAM,WAAW,WAAW,KAAK,MAAM,IAAI;AAC3C,QAAI;AACF,UAAI,IAAI,WAAW,SAAS,aAAa,WAAW;AAClD,kBAAU,KAAK,KAAK,EAAE,IAAI,MAAM,QAAQ,KAAK,CAAC;AAC9C;AAAA,MACF;AACA,UAAI,IAAI,WAAW,SAAS,aAAa,cAAc;AACrD,kBAAU,KAAK,KAAK;AAAA,UAClB,QAAQ;AAAA,UACR,MAAM,MAAM,UAAU,OAAO,gBAAgB;AAAA,QAC/C,CAAC;AACD;AAAA,MACF;AACA,UAAI,IAAI,WAAW,UAAU,aAAa,wBAAwB;AAChE,cAAM,OAAQ,MAAM,SAAS,GAAG;AAChC,cAAM;AAAA,UACJ;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF;AACA;AAAA,MACF;AACA,UAAI,IAAI,WAAW,UAAU,aAAa,iBAAiB;AACzD,cAAM,OAAQ,MAAM,SAAS,GAAG;AAChC,cAAM;AAAA,UACJ;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF;AACA;AAAA,MACF;AACA,UAAI,IAAI,WAAW,UAAU,aAAa,kBAAkB;AAC1D,cAAM,OAAQ,MAAM,SAAS,GAAG;AAChC,cAAM,iBAAiB,KAAK,MAAM,OAAO;AACzC;AAAA,MACF;AACA,UAAI,IAAI,WAAW,UAAU,aAAa,iBAAiB;AACzD,cAAM,OAAQ,MAAM,SAAS,GAAG;AAChC,kBAAU,KAAK,KAAK;AAAA,UAClB,QAAQ;AAAA,UACR,QAAQ,MAAM,WAAW,OAAO,MAAM,WAAW;AAAA,QACnD,CAAC;AACD;AAAA,MACF;AACA,gBAAU,KAAK,KAAK,WAAW;AAAA,IACjC,SAAS,OAAO;AACd,YAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,gBAAU,KAAK,KAAK,UAAU,SAAS,cAAc,CAAC;AAAA,IACxD;AAAA,EACF;AAEA,SAAO,eAAe;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,gBAAgB,CAAC,QAAQ,UAAU,KAAK,cAAc;AAAA,EACxD,CAAC;AACH;",
+  "names": []
+}

package/dist/runtime/bridge/permission-resolver.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Runtime translation of the public `permission` preset surface
+ * (see `domain/permission.ts`). Maps a `PermissionConfig` into
+ * decisions consumed by the action-loop approval gate.
+ *
+ * The resolver keeps the audit contract intact: when a preset bypasses
+ * the host prompt, the runtime still creates an approval record with
+ * `payload.actionName + args` and auto-resolves it with a deterministic
+ * `decidedBy` label so `approval:created` / `approval:updated` events
+ * fire for every grant or denial.
+ */
+import type { ActionDefinition } from '../../actions/types.js';
+import type { CapabilityToolCall } from '../../capabilities/types.js';
+import { type PermissionConfig, type PermissionDecision, type PermissionOptions } from '../../domain/permission.js';
+export type { PermissionConfig, PermissionDecision, PermissionOptions, PermissionPreset, } from '../../domain/permission.js';
+export { PERMISSION_DESTRUCTIVE_TAG } from '../../domain/permission.js';
+/**
+ * Normalize a preset string or options object into the canonical
+ * `PermissionOptions` shape. Returns `undefined` when the input is
+ * `undefined` so the caller can short-circuit cheaply.
+ *
+ * Symmetry note: the `allow-*` presets inject a default
+ * `alwaysAskTags: ['destructive']` safety net. Structured input that says
+ * `{ decision: 'allow' }` without any `alwaysAskTags` gets the same default
+ * applied so the two ways of saying "allow everything" cannot diverge in
+ * safety. Pass an explicit empty array to opt out.
+ */
+export declare function normalizePermission(input: PermissionConfig | undefined): PermissionOptions | undefined;
+/**
+ * Per-send config wins over per-bridge config. When both are set, the
+ * per-send config is used as-is — it does not deep-merge with the bridge
+ * default to keep the resolution order deterministic for callers.
+ */
+export declare function resolvePermissionConfig(bridgeLevel: PermissionConfig | undefined, sendLevel: PermissionConfig | undefined): PermissionOptions | undefined;
+/**
+ * Decide what to do with one action call given the resolved permission
+ * config. `'ask'` means "fall through to the existing approval flow"
+ * (host callback, store, etc.).
+ *
+ * Precedence (first match wins):
+ *
+ *   1. `action.requireApproval === true` — the strongest per-action signal.
+ *      An explicit "this action requires approval" opt-in by the developer
+ *      (or by an `AgentApprovalPolicy` mode='always' / 'tools') is NEVER
+ *      silently overridden by a session-level `allow-all` preset. The
+ *      preset still saves clicks for actions that didn't opt in, but the
+ *      explicit guards remain effective. Set `permission: 'allow-all'` on
+ *      a flag-only/safety-gate backend if you need a true bypass.
+ *   2. `alwaysAsk` (by name) — targeted exceptions to a blanket decision.
+ *   3. `alwaysAskTags` (by tag) — class-based exceptions; defaults to
+ *      `['destructive']` for `allow-*` presets.
+ *   4. The configured `decision`.
+ */
+export declare function resolvePermissionForAction(config: PermissionOptions, call: Pick<CapabilityToolCall, 'name'>, action: ActionDefinition): PermissionDecision;
+/** Stable `decidedBy` label used when auto-resolving approval records. */
+export declare function permissionDecidedBy(config: PermissionOptions): string;
+//# sourceMappingURL=permission-resolver.d.ts.map

package/dist/runtime/bridge/permission-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-resolver.d.ts","sourceRoot":"","sources":["../../../src/runtime/bridge/permission-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EAEvB,MAAM,4BAA4B,CAAC;AAEpC,YAAY,EACV,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AAWxE;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,gBAAgB,GAAG,SAAS,GAClC,iBAAiB,GAAG,SAAS,CAkB/B;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,WAAW,EAAE,gBAAgB,GAAG,SAAS,EACzC,SAAS,EAAE,gBAAgB,GAAG,SAAS,GACtC,iBAAiB,GAAG,SAAS,CAE/B;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,iBAAiB,EACzB,IAAI,EAAE,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC,EACtC,MAAM,EAAE,gBAAgB,GACvB,kBAAkB,CAYpB;AAED,0EAA0E;AAC1E,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CAErE"}

package/dist/runtime/bridge/permission-resolver.js

@@ -0,0 +1,58 @@
+import {
+  PERMISSION_DESTRUCTIVE_TAG
+} from "../../domain/permission.js";
+import { PERMISSION_DESTRUCTIVE_TAG as PERMISSION_DESTRUCTIVE_TAG2 } from "../../domain/permission.js";
+const ALLOW_PRESETS = /* @__PURE__ */ new Set([
+  "allow-all",
+  "allow-this-session"
+]);
+const DENY_PRESETS = /* @__PURE__ */ new Set([
+  "deny-all",
+  "deny-this-session"
+]);
+function normalizePermission(input) {
+  if (input == null) return void 0;
+  if (typeof input !== "string") {
+    if (input.decision === "allow" && input.alwaysAskTags === void 0) {
+      return { ...input, alwaysAskTags: [PERMISSION_DESTRUCTIVE_TAG] };
+    }
+    return input;
+  }
+  if (ALLOW_PRESETS.has(input)) {
+    return {
+      decision: "allow",
+      alwaysAskTags: [PERMISSION_DESTRUCTIVE_TAG]
+    };
+  }
+  if (DENY_PRESETS.has(input)) {
+    return { decision: "deny" };
+  }
+  return { decision: "ask" };
+}
+function resolvePermissionConfig(bridgeLevel, sendLevel) {
+  return normalizePermission(sendLevel) ?? normalizePermission(bridgeLevel);
+}
+function resolvePermissionForAction(config, call, action) {
+  if (action.requireApproval === true && config.decision === "allow") {
+    return "ask";
+  }
+  if (config.alwaysAsk?.includes(call.name)) return "ask";
+  const askTags = config.alwaysAskTags;
+  if (askTags && askTags.length > 0 && action.tags) {
+    for (const tag of askTags) {
+      if (action.tags.includes(tag)) return "ask";
+    }
+  }
+  return config.decision;
+}
+function permissionDecidedBy(config) {
+  return config.decidedBy ?? `permission:${config.decision}-all`;
+}
+export {
+  PERMISSION_DESTRUCTIVE_TAG2 as PERMISSION_DESTRUCTIVE_TAG,
+  normalizePermission,
+  permissionDecidedBy,
+  resolvePermissionConfig,
+  resolvePermissionForAction
+};
+//# sourceMappingURL=permission-resolver.js.map

package/dist/runtime/bridge/permission-resolver.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/runtime/bridge/permission-resolver.ts"],
+  "sourcesContent": ["/**\n * Runtime translation of the public `permission` preset surface\n * (see `domain/permission.ts`). Maps a `PermissionConfig` into\n * decisions consumed by the action-loop approval gate.\n *\n * The resolver keeps the audit contract intact: when a preset bypasses\n * the host prompt, the runtime still creates an approval record with\n * `payload.actionName + args` and auto-resolves it with a deterministic\n * `decidedBy` label so `approval:created` / `approval:updated` events\n * fire for every grant or denial.\n */\n\nimport type { ActionDefinition } from '../../actions/types.js';\nimport type { CapabilityToolCall } from '../../capabilities/types.js';\nimport {\n  PERMISSION_DESTRUCTIVE_TAG,\n  type PermissionConfig,\n  type PermissionDecision,\n  type PermissionOptions,\n  type PermissionPreset,\n} from '../../domain/permission.js';\n\nexport type {\n  PermissionConfig,\n  PermissionDecision,\n  PermissionOptions,\n  PermissionPreset,\n} from '../../domain/permission.js';\nexport { PERMISSION_DESTRUCTIVE_TAG } from '../../domain/permission.js';\n\nconst ALLOW_PRESETS = new Set<PermissionPreset>([\n  'allow-all',\n  'allow-this-session',\n]);\nconst DENY_PRESETS = new Set<PermissionPreset>([\n  'deny-all',\n  'deny-this-session',\n]);\n\n/**\n * Normalize a preset string or options object into the canonical\n * `PermissionOptions` shape. Returns `undefined` when the input is\n * `undefined` so the caller can short-circuit cheaply.\n *\n * Symmetry note: the `allow-*` presets inject a default\n * `alwaysAskTags: ['destructive']` safety net. Structured input that says\n * `{ decision: 'allow' }` without any `alwaysAskTags` gets the same default\n * applied so the two ways of saying \"allow everything\" cannot diverge in\n * safety. Pass an explicit empty array to opt out.\n */\nexport function normalizePermission(\n  input: PermissionConfig | undefined\n): PermissionOptions | undefined {\n  if (input == null) return undefined;\n  if (typeof input !== 'string') {\n    if (input.decision === 'allow' && input.alwaysAskTags === undefined) {\n      return { ...input, alwaysAskTags: [PERMISSION_DESTRUCTIVE_TAG] };\n    }\n    return input;\n  }\n  if (ALLOW_PRESETS.has(input)) {\n    return {\n      decision: 'allow',\n      alwaysAskTags: [PERMISSION_DESTRUCTIVE_TAG],\n    };\n  }\n  if (DENY_PRESETS.has(input)) {\n    return { decision: 'deny' };\n  }\n  return { decision: 'ask' };\n}\n\n/**\n * Per-send config wins over per-bridge config. When both are set, the\n * per-send config is used as-is \u2014 it does not deep-merge with the bridge\n * default to keep the resolution order deterministic for callers.\n */\nexport function resolvePermissionConfig(\n  bridgeLevel: PermissionConfig | undefined,\n  sendLevel: PermissionConfig | undefined\n): PermissionOptions | undefined {\n  return normalizePermission(sendLevel) ?? normalizePermission(bridgeLevel);\n}\n\n/**\n * Decide what to do with one action call given the resolved permission\n * config. `'ask'` means \"fall through to the existing approval flow\"\n * (host callback, store, etc.).\n *\n * Precedence (first match wins):\n *\n *   1. `action.requireApproval === true` \u2014 the strongest per-action signal.\n *      An explicit \"this action requires approval\" opt-in by the developer\n *      (or by an `AgentApprovalPolicy` mode='always' / 'tools') is NEVER\n *      silently overridden by a session-level `allow-all` preset. The\n *      preset still saves clicks for actions that didn't opt in, but the\n *      explicit guards remain effective. Set `permission: 'allow-all'` on\n *      a flag-only/safety-gate backend if you need a true bypass.\n *   2. `alwaysAsk` (by name) \u2014 targeted exceptions to a blanket decision.\n *   3. `alwaysAskTags` (by tag) \u2014 class-based exceptions; defaults to\n *      `['destructive']` for `allow-*` presets.\n *   4. The configured `decision`.\n */\nexport function resolvePermissionForAction(\n  config: PermissionOptions,\n  call: Pick<CapabilityToolCall, 'name'>,\n  action: ActionDefinition\n): PermissionDecision {\n  if (action.requireApproval === true && config.decision === 'allow') {\n    return 'ask';\n  }\n  if (config.alwaysAsk?.includes(call.name)) return 'ask';\n  const askTags = config.alwaysAskTags;\n  if (askTags && askTags.length > 0 && action.tags) {\n    for (const tag of askTags) {\n      if (action.tags.includes(tag)) return 'ask';\n    }\n  }\n  return config.decision;\n}\n\n/** Stable `decidedBy` label used when auto-resolving approval records. */\nexport function permissionDecidedBy(config: PermissionOptions): string {\n  return config.decidedBy ?? `permission:${config.decision}-all`;\n}\n"],
+  "mappings": "AAcA;AAAA,EACE;AAAA,OAKK;AAQP,SAAS,8BAAAA,mCAAkC;AAE3C,MAAM,gBAAgB,oBAAI,IAAsB;AAAA,EAC9C;AAAA,EACA;AACF,CAAC;AACD,MAAM,eAAe,oBAAI,IAAsB;AAAA,EAC7C;AAAA,EACA;AACF,CAAC;AAaM,SAAS,oBACd,OAC+B;AAC/B,MAAI,SAAS,KAAM,QAAO;AAC1B,MAAI,OAAO,UAAU,UAAU;AAC7B,QAAI,MAAM,aAAa,WAAW,MAAM,kBAAkB,QAAW;AACnE,aAAO,EAAE,GAAG,OAAO,eAAe,CAAC,0BAA0B,EAAE;AAAA,IACjE;AACA,WAAO;AAAA,EACT;AACA,MAAI,cAAc,IAAI,KAAK,GAAG;AAC5B,WAAO;AAAA,MACL,UAAU;AAAA,MACV,eAAe,CAAC,0BAA0B;AAAA,IAC5C;AAAA,EACF;AACA,MAAI,aAAa,IAAI,KAAK,GAAG;AAC3B,WAAO,EAAE,UAAU,OAAO;AAAA,EAC5B;AACA,SAAO,EAAE,UAAU,MAAM;AAC3B;AAOO,SAAS,wBACd,aACA,WAC+B;AAC/B,SAAO,oBAAoB,SAAS,KAAK,oBAAoB,WAAW;AAC1E;AAqBO,SAAS,2BACd,QACA,MACA,QACoB;AACpB,MAAI,OAAO,oBAAoB,QAAQ,OAAO,aAAa,SAAS;AAClE,WAAO;AAAA,EACT;AACA,MAAI,OAAO,WAAW,SAAS,KAAK,IAAI,EAAG,QAAO;AAClD,QAAM,UAAU,OAAO;AACvB,MAAI,WAAW,QAAQ,SAAS,KAAK,OAAO,MAAM;AAChD,eAAW,OAAO,SAAS;AACzB,UAAI,OAAO,KAAK,SAAS,GAAG,EAAG,QAAO;AAAA,IACxC;AAAA,EACF;AACA,SAAO,OAAO;AAChB;AAGO,SAAS,oBAAoB,QAAmC;AACrE,SAAO,OAAO,aAAa,cAAc,OAAO,QAAQ;AAC1D;",
+  "names": ["PERMISSION_DESTRUCTIVE_TAG"]
+}

package/dist/runtime/bridge/plugins.d.ts

@@ -0,0 +1,76 @@
+import type { ActionDefinition } from '../../actions/types.js';
+import type { BudgetCheckResult } from '../../adapters/data/budget/cost-accumulator.js';
+import type { SkillDefinition } from '../../capabilities/skill-types.js';
+import type { BridgeMcpServerConfig, CapabilityContextSection, CapabilityMiddleware } from '../../capabilities/types.js';
+import type { BridgeListTasksOptions, BridgeListTasksResult, BridgeMiddleware, BridgeSendMessageParams, BridgeSendResult } from '../../domain/bridge-api.js';
+import type { Task } from '../../domain/core-task.js';
+import type { Bridge } from './bridge.js';
+import type { BridgeEventHandler, BridgeEventMap } from './events.js';
+export interface PluginContext {
+    readonly bridge: Bridge;
+    on: Bridge['on'];
+    once: Bridge['once'];
+    off: Bridge['off'];
+    getTask: (taskId: string) => Promise<Task>;
+    listTasks: (options?: BridgeListTasksOptions) => Promise<BridgeListTasksResult>;
+    checkBudget: (contextId: string, tenant?: string) => BudgetCheckResult;
+    getSpend: (contextId: string) => {
+        totalUsd: number;
+        totalTokens: number;
+    };
+    sendMessage: (params: BridgeSendMessageParams) => Promise<BridgeSendResult>;
+    registerAction: (action: ActionDefinition) => void;
+    unregisterAction: (name: string) => boolean;
+    registerSkill: (skill: SkillDefinition) => void;
+    unregisterSkill: (name: string) => boolean;
+}
+export interface BridgePlugin {
+    name: string;
+    version?: string;
+    enabled?: boolean;
+    /** Numeric priority: higher runs first. Default 0. Used as tiebreaker among unconstrained peers. */
+    priority?: number;
+    /** Must run before these plugins (by name). */
+    before?: string[];
+    /** Must run after these plugins (by name). */
+    after?: string[];
+    actions?: ActionDefinition[];
+    /** Skills contributed by this plugin — registered into the bridge's SkillRegistry on setup. */
+    skills?: SkillDefinition[];
+    contextSections?: CapabilityContextSection[];
+    mcpServers?: Record<string, BridgeMcpServerConfig>;
+    middleware?: BridgeMiddleware | CapabilityMiddleware | Array<BridgeMiddleware | CapabilityMiddleware>;
+    events?: Partial<{
+        [K in keyof BridgeEventMap]: BridgeEventHandler<K>;
+    }>;
+    setup?(ctx: PluginContext): void | Promise<void>;
+    teardown?(ctx: PluginContext): void | Promise<void>;
+    config?: Record<string, unknown>;
+}
+export interface StoredPlugin {
+    plugin: BridgePlugin;
+    ctx: PluginContext;
+    eventUnsubs: Array<() => void>;
+}
+export declare function attachPluginApis(bridge: Bridge, plugins: BridgePlugin[]): void;
+export declare function buildPluginContext(bridge: Bridge): PluginContext;
+export declare function mergePluginContributions(plugins: BridgePlugin[], opts?: {
+    actions?: ActionDefinition[];
+    contextSections?: CapabilityContextSection[];
+    mcpServers?: Record<string, BridgeMcpServerConfig>;
+    middleware?: Array<BridgeMiddleware | CapabilityMiddleware>;
+}): {
+    mergedActions: ActionDefinition[];
+    mergedContextSections: CapabilityContextSection[];
+    mergedMcpServers: Record<string, BridgeMcpServerConfig>;
+    mergedMiddleware: Array<BridgeMiddleware | CapabilityMiddleware>;
+};
+/**
+ * Topological sort of plugins using `before`/`after` constraints with
+ * `priority` as tiebreaker among unconstrained peers. Higher priority runs first.
+ */
+export declare function sortPlugins(plugins: BridgePlugin[]): BridgePlugin[];
+export declare function initializePlugins(bridge: Bridge, plugins: BridgePlugin[]): Promise<StoredPlugin[]>;
+export declare function teardownPluginSkills(bridge: Bridge, plugins: BridgePlugin[]): void;
+export declare function teardownPlugins(stored: StoredPlugin[]): Promise<void>;
+//# sourceMappingURL=plugins.d.ts.map

package/dist/runtime/bridge/plugins.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugins.d.ts","sourceRoot":"","sources":["../../../src/runtime/bridge/plugins.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gDAAgD,CAAC;AACxF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,KAAK,EACV,qBAAqB,EACrB,wBAAwB,EACxB,oBAAoB,EACrB,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EACV,sBAAsB,EACtB,qBAAqB,EACrB,gBAAgB,EAChB,uBAAuB,EACvB,gBAAgB,EACjB,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAEtE,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IACnB,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,SAAS,EAAE,CACT,OAAO,CAAC,EAAE,sBAAsB,KAC7B,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACpC,WAAW,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,iBAAiB,CAAC;IACvE,QAAQ,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3E,WAAW,EAAE,CAAC,MAAM,EAAE,uBAAuB,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC5E,cAAc,EAAE,CAAC,MAAM,EAAE,gBAAgB,KAAK,IAAI,CAAC;IACnD,gBAAgB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IAC5C,aAAa,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,CAAC;IAChD,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;CAC5C;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,oGAAoG;IACpG,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+CAA+C;IAC/C,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,8CAA8C;IAC9C,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC7B,+FAA+F;IAC/F,MAAM,CAAC,EAAE,eAAe,EAAE,CAAC;IAC3B,eAAe,CAAC,EAAE,wBAAwB,EAAE,CAAC;IAC7C,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IACnD,UAAU,CAAC,EACP,gBAAgB,GAChB,oBAAoB,GACpB,KAAK,CAAC,gBAAgB,GAAG,oBAAoB,CAAC,CAAC;IACnD,MAAM,CAAC,EAAE,OAAO,CAAC;SAAG,CAAC,IAAI,MAAM,cAAc,GAAG,kBAAkB,CAAC,CAAC,CAAC;KAAE,CAAC,CAAC;IACzE,KAAK,CAAC,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,QAAQ,CAAC,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,YAAY,CAAC;IACrB,GAAG,EAAE,aAAa,CAAC;IACnB,WAAW,EAAE,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;CAChC;AA+BD,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,YAAY,EAAE,GACtB,IAAI,CAQN;AAoCD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,CAiBhE;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,YAAY,EAAE,EACvB,IAAI,GAAE;IACJ,OAAO,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC7B,eAAe,CAAC,EAAE,wBAAwB,EAAE,CAAC;IAC7C,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IACnD,UAAU,CAAC,EAAE,KAAK,CAAC,gBAAgB,GAAG,oBAAoB,CAAC,CAAC;CACxD,GACL;IACD,aAAa,EAAE,gBAAgB,EAAE,CAAC;IAClC,qBAAqB,EAAE,wBAAwB,EAAE,CAAC;IAClD,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IACxD,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,GAAG,oBAAoB,CAAC,CAAC;CAClE,CAmCA;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,YAAY,EAAE,CAwDnE;AAED,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,YAAY,EAAE,GACtB,OAAO,CAAC,YAAY,EAAE,CAAC,CAqCzB;AAED,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,YAAY,EAAE,GACtB,IAAI,CAON;AAED,wBAAsB,eAAe,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAgB3E"}