p-spore 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (261) hide show
  1. package/README.md +97 -0
  2. package/dist/agents/agent-manager.d.ts +57 -0
  3. package/dist/agents/agent-manager.d.ts.map +1 -0
  4. package/dist/agents/agent-manager.js +559 -0
  5. package/dist/agents/agent-manager.js.map +1 -0
  6. package/dist/agents/agent-tools.d.ts +4 -0
  7. package/dist/agents/agent-tools.d.ts.map +1 -0
  8. package/dist/agents/agent-tools.js +111 -0
  9. package/dist/agents/agent-tools.js.map +1 -0
  10. package/dist/agents/types.d.ts +52 -0
  11. package/dist/agents/types.d.ts.map +1 -0
  12. package/dist/agents/types.js +2 -0
  13. package/dist/agents/types.js.map +1 -0
  14. package/dist/application/agent-application.d.ts +89 -0
  15. package/dist/application/agent-application.d.ts.map +1 -0
  16. package/dist/application/agent-application.js +542 -0
  17. package/dist/application/agent-application.js.map +1 -0
  18. package/dist/automation/automation-tools.d.ts +4 -0
  19. package/dist/automation/automation-tools.d.ts.map +1 -0
  20. package/dist/automation/automation-tools.js +35 -0
  21. package/dist/automation/automation-tools.js.map +1 -0
  22. package/dist/automation/cron-adapter.d.ts +11 -0
  23. package/dist/automation/cron-adapter.d.ts.map +1 -0
  24. package/dist/automation/cron-adapter.js +48 -0
  25. package/dist/automation/cron-adapter.js.map +1 -0
  26. package/dist/automation/daemon-run-executor.d.ts +18 -0
  27. package/dist/automation/daemon-run-executor.d.ts.map +1 -0
  28. package/dist/automation/daemon-run-executor.js +69 -0
  29. package/dist/automation/daemon-run-executor.js.map +1 -0
  30. package/dist/automation/job-store.d.ts +12 -0
  31. package/dist/automation/job-store.d.ts.map +1 -0
  32. package/dist/automation/job-store.js +185 -0
  33. package/dist/automation/job-store.js.map +1 -0
  34. package/dist/automation/run-ledger.d.ts +25 -0
  35. package/dist/automation/run-ledger.d.ts.map +1 -0
  36. package/dist/automation/run-ledger.js +148 -0
  37. package/dist/automation/run-ledger.js.map +1 -0
  38. package/dist/automation/scheduler.d.ts +36 -0
  39. package/dist/automation/scheduler.d.ts.map +1 -0
  40. package/dist/automation/scheduler.js +300 -0
  41. package/dist/automation/scheduler.js.map +1 -0
  42. package/dist/automation/types.d.ts +81 -0
  43. package/dist/automation/types.d.ts.map +1 -0
  44. package/dist/automation/types.js +2 -0
  45. package/dist/automation/types.js.map +1 -0
  46. package/dist/cli/main.d.ts +4 -0
  47. package/dist/cli/main.d.ts.map +1 -0
  48. package/dist/cli/main.js +768 -0
  49. package/dist/cli/main.js.map +1 -0
  50. package/dist/config/config.d.ts +52 -0
  51. package/dist/config/config.d.ts.map +1 -0
  52. package/dist/config/config.js +345 -0
  53. package/dist/config/config.js.map +1 -0
  54. package/dist/daemon/daemon.d.ts +30 -0
  55. package/dist/daemon/daemon.d.ts.map +1 -0
  56. package/dist/daemon/daemon.js +437 -0
  57. package/dist/daemon/daemon.js.map +1 -0
  58. package/dist/daemon/supervisor.d.ts +18 -0
  59. package/dist/daemon/supervisor.d.ts.map +1 -0
  60. package/dist/daemon/supervisor.js +37 -0
  61. package/dist/daemon/supervisor.js.map +1 -0
  62. package/dist/desktop/daemon-bridge.d.ts +32 -0
  63. package/dist/desktop/daemon-bridge.d.ts.map +1 -0
  64. package/dist/desktop/daemon-bridge.js +204 -0
  65. package/dist/desktop/daemon-bridge.js.map +1 -0
  66. package/dist/desktop/daemon-supervisor.d.ts +2 -0
  67. package/dist/desktop/daemon-supervisor.d.ts.map +1 -0
  68. package/dist/desktop/daemon-supervisor.js +2 -0
  69. package/dist/desktop/daemon-supervisor.js.map +1 -0
  70. package/dist/desktop/ipc-contract.d.ts +153 -0
  71. package/dist/desktop/ipc-contract.d.ts.map +1 -0
  72. package/dist/desktop/ipc-contract.js +219 -0
  73. package/dist/desktop/ipc-contract.js.map +1 -0
  74. package/dist/desktop/main.d.ts +2 -0
  75. package/dist/desktop/main.d.ts.map +1 -0
  76. package/dist/desktop/main.js +594 -0
  77. package/dist/desktop/main.js.map +1 -0
  78. package/dist/desktop/preload.cjs +32 -0
  79. package/dist/desktop/renderer/index.html +284 -0
  80. package/dist/desktop/renderer/renderer.d.ts +2 -0
  81. package/dist/desktop/renderer/renderer.d.ts.map +1 -0
  82. package/dist/desktop/renderer/renderer.js +895 -0
  83. package/dist/desktop/renderer/renderer.js.map +1 -0
  84. package/dist/desktop/renderer/store.d.ts +33 -0
  85. package/dist/desktop/renderer/store.d.ts.map +1 -0
  86. package/dist/desktop/renderer/store.js +144 -0
  87. package/dist/desktop/renderer/store.js.map +1 -0
  88. package/dist/desktop/renderer/styles.css +540 -0
  89. package/dist/desktop/security.d.ts +5 -0
  90. package/dist/desktop/security.d.ts.map +1 -0
  91. package/dist/desktop/security.js +49 -0
  92. package/dist/desktop/security.js.map +1 -0
  93. package/dist/desktop/smoke-fixture.d.ts +3 -0
  94. package/dist/desktop/smoke-fixture.d.ts.map +1 -0
  95. package/dist/desktop/smoke-fixture.js +223 -0
  96. package/dist/desktop/smoke-fixture.js.map +1 -0
  97. package/dist/desktop/validation.d.ts +8 -0
  98. package/dist/desktop/validation.d.ts.map +1 -0
  99. package/dist/desktop/validation.js +341 -0
  100. package/dist/desktop/validation.js.map +1 -0
  101. package/dist/domain/runtime.d.ts +116 -0
  102. package/dist/domain/runtime.d.ts.map +1 -0
  103. package/dist/domain/runtime.js +2 -0
  104. package/dist/domain/runtime.js.map +1 -0
  105. package/dist/gateway/local-gateway.d.ts +23 -0
  106. package/dist/gateway/local-gateway.d.ts.map +1 -0
  107. package/dist/gateway/local-gateway.js +265 -0
  108. package/dist/gateway/local-gateway.js.map +1 -0
  109. package/dist/kernel/loop.d.ts +10 -0
  110. package/dist/kernel/loop.d.ts.map +1 -0
  111. package/dist/kernel/loop.js +41 -0
  112. package/dist/kernel/loop.js.map +1 -0
  113. package/dist/kernel/reducer.d.ts +3 -0
  114. package/dist/kernel/reducer.d.ts.map +1 -0
  115. package/dist/kernel/reducer.js +102 -0
  116. package/dist/kernel/reducer.js.map +1 -0
  117. package/dist/kernel/state.d.ts +93 -0
  118. package/dist/kernel/state.d.ts.map +1 -0
  119. package/dist/kernel/state.js +15 -0
  120. package/dist/kernel/state.js.map +1 -0
  121. package/dist/mcp/mcp-manager.d.ts +55 -0
  122. package/dist/mcp/mcp-manager.d.ts.map +1 -0
  123. package/dist/mcp/mcp-manager.js +591 -0
  124. package/dist/mcp/mcp-manager.js.map +1 -0
  125. package/dist/mcp/mcp-tools.d.ts +4 -0
  126. package/dist/mcp/mcp-tools.d.ts.map +1 -0
  127. package/dist/mcp/mcp-tools.js +53 -0
  128. package/dist/mcp/mcp-tools.js.map +1 -0
  129. package/dist/mcp/types.d.ts +73 -0
  130. package/dist/mcp/types.d.ts.map +1 -0
  131. package/dist/mcp/types.js +2 -0
  132. package/dist/mcp/types.js.map +1 -0
  133. package/dist/memory/bm25.d.ts +14 -0
  134. package/dist/memory/bm25.d.ts.map +1 -0
  135. package/dist/memory/bm25.js +40 -0
  136. package/dist/memory/bm25.js.map +1 -0
  137. package/dist/memory/context-loader.d.ts +26 -0
  138. package/dist/memory/context-loader.d.ts.map +1 -0
  139. package/dist/memory/context-loader.js +97 -0
  140. package/dist/memory/context-loader.js.map +1 -0
  141. package/dist/memory/memory-service.d.ts +30 -0
  142. package/dist/memory/memory-service.d.ts.map +1 -0
  143. package/dist/memory/memory-service.js +133 -0
  144. package/dist/memory/memory-service.js.map +1 -0
  145. package/dist/memory/memory-tools.d.ts +4 -0
  146. package/dist/memory/memory-tools.d.ts.map +1 -0
  147. package/dist/memory/memory-tools.js +49 -0
  148. package/dist/memory/memory-tools.js.map +1 -0
  149. package/dist/memory/search-service.d.ts +38 -0
  150. package/dist/memory/search-service.d.ts.map +1 -0
  151. package/dist/memory/search-service.js +463 -0
  152. package/dist/memory/search-service.js.map +1 -0
  153. package/dist/memory/tokenizer.d.ts +5 -0
  154. package/dist/memory/tokenizer.d.ts.map +1 -0
  155. package/dist/memory/tokenizer.js +42 -0
  156. package/dist/memory/tokenizer.js.map +1 -0
  157. package/dist/notifications/notification-service.d.ts +47 -0
  158. package/dist/notifications/notification-service.d.ts.map +1 -0
  159. package/dist/notifications/notification-service.js +163 -0
  160. package/dist/notifications/notification-service.js.map +1 -0
  161. package/dist/notifications/notification-tools.d.ts +4 -0
  162. package/dist/notifications/notification-tools.d.ts.map +1 -0
  163. package/dist/notifications/notification-tools.js +31 -0
  164. package/dist/notifications/notification-tools.js.map +1 -0
  165. package/dist/pi/pi-runtime-adapter.d.ts +38 -0
  166. package/dist/pi/pi-runtime-adapter.d.ts.map +1 -0
  167. package/dist/pi/pi-runtime-adapter.js +483 -0
  168. package/dist/pi/pi-runtime-adapter.js.map +1 -0
  169. package/dist/plugins/extension-manager.d.ts +32 -0
  170. package/dist/plugins/extension-manager.d.ts.map +1 -0
  171. package/dist/plugins/extension-manager.js +562 -0
  172. package/dist/plugins/extension-manager.js.map +1 -0
  173. package/dist/plugins/resource-inspector.d.ts +18 -0
  174. package/dist/plugins/resource-inspector.d.ts.map +1 -0
  175. package/dist/plugins/resource-inspector.js +386 -0
  176. package/dist/plugins/resource-inspector.js.map +1 -0
  177. package/dist/plugins/types.d.ts +96 -0
  178. package/dist/plugins/types.d.ts.map +1 -0
  179. package/dist/plugins/types.js +2 -0
  180. package/dist/plugins/types.js.map +1 -0
  181. package/dist/policy/approval-service.d.ts +68 -0
  182. package/dist/policy/approval-service.d.ts.map +1 -0
  183. package/dist/policy/approval-service.js +349 -0
  184. package/dist/policy/approval-service.js.map +1 -0
  185. package/dist/policy/policy.d.ts +26 -0
  186. package/dist/policy/policy.d.ts.map +1 -0
  187. package/dist/policy/policy.js +228 -0
  188. package/dist/policy/policy.js.map +1 -0
  189. package/dist/protocol/client.d.ts +25 -0
  190. package/dist/protocol/client.d.ts.map +1 -0
  191. package/dist/protocol/client.js +188 -0
  192. package/dist/protocol/client.js.map +1 -0
  193. package/dist/protocol/errors.d.ts +5 -0
  194. package/dist/protocol/errors.d.ts.map +1 -0
  195. package/dist/protocol/errors.js +9 -0
  196. package/dist/protocol/errors.js.map +1 -0
  197. package/dist/protocol/schema.d.ts +71 -0
  198. package/dist/protocol/schema.d.ts.map +1 -0
  199. package/dist/protocol/schema.js +155 -0
  200. package/dist/protocol/schema.js.map +1 -0
  201. package/dist/settings/llm-settings-service.d.ts +9 -0
  202. package/dist/settings/llm-settings-service.d.ts.map +1 -0
  203. package/dist/settings/llm-settings-service.js +199 -0
  204. package/dist/settings/llm-settings-service.js.map +1 -0
  205. package/dist/settings/llm-settings.d.ts +29 -0
  206. package/dist/settings/llm-settings.d.ts.map +1 -0
  207. package/dist/settings/llm-settings.js +113 -0
  208. package/dist/settings/llm-settings.js.map +1 -0
  209. package/dist/shell/shell-service.d.ts +88 -0
  210. package/dist/shell/shell-service.d.ts.map +1 -0
  211. package/dist/shell/shell-service.js +459 -0
  212. package/dist/shell/shell-service.js.map +1 -0
  213. package/dist/storage/atomic.d.ts +4 -0
  214. package/dist/storage/atomic.d.ts.map +1 -0
  215. package/dist/storage/atomic.js +49 -0
  216. package/dist/storage/atomic.js.map +1 -0
  217. package/dist/storage/daemon-lock.d.ts +17 -0
  218. package/dist/storage/daemon-lock.d.ts.map +1 -0
  219. package/dist/storage/daemon-lock.js +97 -0
  220. package/dist/storage/daemon-lock.js.map +1 -0
  221. package/dist/storage/home.d.ts +29 -0
  222. package/dist/storage/home.d.ts.map +1 -0
  223. package/dist/storage/home.js +108 -0
  224. package/dist/storage/home.js.map +1 -0
  225. package/dist/storage/jsonl.d.ts +2 -0
  226. package/dist/storage/jsonl.d.ts.map +1 -0
  227. package/dist/storage/jsonl.js +45 -0
  228. package/dist/storage/jsonl.js.map +1 -0
  229. package/dist/tools/core-tools.d.ts +16 -0
  230. package/dist/tools/core-tools.d.ts.map +1 -0
  231. package/dist/tools/core-tools.js +283 -0
  232. package/dist/tools/core-tools.js.map +1 -0
  233. package/dist/ui/shared/presentation.d.ts +46 -0
  234. package/dist/ui/shared/presentation.d.ts.map +1 -0
  235. package/dist/ui/shared/presentation.js +81 -0
  236. package/dist/ui/shared/presentation.js.map +1 -0
  237. package/dist/ui/shared/protocol-state.d.ts +30 -0
  238. package/dist/ui/shared/protocol-state.d.ts.map +1 -0
  239. package/dist/ui/shared/protocol-state.js +165 -0
  240. package/dist/ui/shared/protocol-state.js.map +1 -0
  241. package/dist/ui/tui/commands.d.ts +2 -0
  242. package/dist/ui/tui/commands.d.ts.map +1 -0
  243. package/dist/ui/tui/commands.js +33 -0
  244. package/dist/ui/tui/commands.js.map +1 -0
  245. package/dist/ui/tui/store.d.ts +32 -0
  246. package/dist/ui/tui/store.d.ts.map +1 -0
  247. package/dist/ui/tui/store.js +62 -0
  248. package/dist/ui/tui/store.js.map +1 -0
  249. package/dist/ui/tui/tui-app.d.ts +21 -0
  250. package/dist/ui/tui/tui-app.d.ts.map +1 -0
  251. package/dist/ui/tui/tui-app.js +643 -0
  252. package/dist/ui/tui/tui-app.js.map +1 -0
  253. package/dist/ui/tui/view.d.ts +29 -0
  254. package/dist/ui/tui/view.d.ts.map +1 -0
  255. package/dist/ui/tui/view.js +255 -0
  256. package/dist/ui/tui/view.js.map +1 -0
  257. package/dist/version.d.ts +5 -0
  258. package/dist/version.d.ts.map +1 -0
  259. package/dist/version.js +5 -0
  260. package/dist/version.js.map +1 -0
  261. package/package.json +62 -0
@@ -0,0 +1,386 @@
1
+ import { execFile } from "node:child_process";
2
+ import { constants } from "node:fs";
3
+ import { mkdir, open, readdir, realpath, rename, rm, stat, } from "node:fs/promises";
4
+ import { createHash, randomUUID } from "node:crypto";
5
+ import { basename, dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
6
+ import { promisify } from "node:util";
7
+ import { loadSkillsFromDir } from "@earendil-works/pi-coding-agent";
8
+ const execFileAsync = promisify(execFile);
9
+ const MAX_FILES = 256;
10
+ const MAX_FILE_BYTES = 2 * 1024 * 1024;
11
+ const MAX_TOTAL_BYTES = 8 * 1024 * 1024;
12
+ const MAX_DEPTH = 12;
13
+ const MAX_RELATIVE_PATH = 240;
14
+ const PLUGIN_MANIFEST = "pspore.plugin.json";
15
+ const CONTRIBUTIONS = ["trigger", "tool", "retrieval", "executor", "transport"];
16
+ export async function resolveStagedResource(stagingRoot, input) {
17
+ if (!input.trim() || input.includes("\0"))
18
+ throw new Error("Staging path must be non-empty");
19
+ const canonicalRoot = await realpath(stagingRoot);
20
+ const candidate = await realpath(isAbsolute(input) ? input : resolve(canonicalRoot, input));
21
+ assertContained(candidate, canonicalRoot, "Staged resource escapes workspace/staging");
22
+ if (!(await stat(candidate)).isDirectory())
23
+ throw new Error(`Staged resource must be a directory: ${candidate}`);
24
+ return candidate;
25
+ }
26
+ export async function inspectResourceDirectory(directory) {
27
+ const canonical = await realpath(directory);
28
+ if (!(await stat(canonical)).isDirectory())
29
+ throw new Error(`Resource must be a directory: ${canonical}`);
30
+ const files = await scanDirectory(canonical);
31
+ const paths = new Set(files.map((file) => file.path));
32
+ const hasSkill = paths.has("SKILL.md");
33
+ const hasPlugin = paths.has(PLUGIN_MANIFEST);
34
+ if (hasSkill === hasPlugin) {
35
+ throw new Error(`Resource must contain exactly one of SKILL.md or ${PLUGIN_MANIFEST}`);
36
+ }
37
+ const digest = digestFiles(files);
38
+ const packageMetadata = packageDetails(files);
39
+ const base = {
40
+ version: 1,
41
+ sourcePath: canonical,
42
+ digest,
43
+ files: files.map(({ content: _content, ...file }) => file),
44
+ totalBytes: files.reduce((sum, file) => sum + file.bytes, 0),
45
+ dependencies: packageMetadata.dependencies,
46
+ lifecycleScripts: packageMetadata.lifecycleScripts,
47
+ };
48
+ if (hasSkill) {
49
+ const loaded = loadSkillsFromDir({ dir: canonical, source: "pspore-staging" });
50
+ const expectedPath = await realpath(join(canonical, "SKILL.md"));
51
+ const skill = loaded.skills.find((candidate) => resolve(candidate.filePath) === expectedPath);
52
+ if (!skill || loaded.skills.length !== 1) {
53
+ throw new Error("A staged skill must contain exactly one root SKILL.md with name and description");
54
+ }
55
+ validateName(skill.name, "skill name");
56
+ const diagnostics = loaded.diagnostics.map((diagnostic) => `${diagnostic.type}: ${diagnostic.message}`);
57
+ return {
58
+ directory: canonical,
59
+ files,
60
+ inspection: {
61
+ ...base,
62
+ kind: "skill",
63
+ name: skill.name,
64
+ resourceVersion: "unversioned",
65
+ description: bounded(skill.description, 1_024),
66
+ entry: "SKILL.md",
67
+ capabilities: [],
68
+ contributes: [],
69
+ diagnostics,
70
+ installable: !loaded.diagnostics.some((diagnostic) => diagnostic.type === "error" || diagnostic.type === "collision"),
71
+ },
72
+ };
73
+ }
74
+ const manifestFile = files.find((file) => file.path === PLUGIN_MANIFEST);
75
+ if (!manifestFile)
76
+ throw new Error(`Missing ${PLUGIN_MANIFEST}`);
77
+ const manifest = parseManifest(parseJson(manifestFile.content, PLUGIN_MANIFEST));
78
+ const entry = files.find((file) => file.path === manifest.entry);
79
+ if (!entry)
80
+ throw new Error(`Host plugin entry is missing from its package: ${manifest.entry}`);
81
+ if (!/\.(?:cjs|mjs|js)$/.test(entry.path))
82
+ throw new Error("Host plugin entry must be a .js, .mjs, or .cjs file");
83
+ const diagnostics = [];
84
+ if (packageMetadata.dependencies.length > 0) {
85
+ diagnostics.push("Host plugin dependencies are not installed by pSpore v1; bundle them or use a dependency-free entry");
86
+ }
87
+ if (packageMetadata.lifecycleScripts.length > 0) {
88
+ diagnostics.push(`Lifecycle scripts will never run: ${packageMetadata.lifecycleScripts.join(", ")}`);
89
+ }
90
+ try {
91
+ await execFileAsync(process.execPath, ["--check", join(canonical, manifest.entry)], {
92
+ timeout: 5_000,
93
+ maxBuffer: 256 * 1024,
94
+ encoding: "utf8",
95
+ });
96
+ }
97
+ catch (error) {
98
+ diagnostics.push(`Entry syntax check failed: ${bounded(toError(error).message, 1_000)}`);
99
+ }
100
+ return {
101
+ directory: canonical,
102
+ files,
103
+ inspection: {
104
+ ...base,
105
+ kind: "host-plugin",
106
+ name: manifest.name,
107
+ resourceVersion: manifest.version,
108
+ entry: manifest.entry,
109
+ capabilities: manifest.capabilities,
110
+ contributes: manifest.contributes,
111
+ diagnostics,
112
+ installable: packageMetadata.dependencies.length === 0 && !diagnostics.some((item) => item.startsWith("Entry syntax")),
113
+ },
114
+ };
115
+ }
116
+ export async function installSnapshot(snapshot, destination) {
117
+ const parent = dirname(destination);
118
+ await mkdir(parent, { recursive: true, mode: 0o700 });
119
+ try {
120
+ const existing = await inspectResourceDirectory(destination);
121
+ if (existing.inspection.digest !== snapshot.inspection.digest) {
122
+ throw new Error(`Installed resource path contains a different digest: ${destination}`);
123
+ }
124
+ return;
125
+ }
126
+ catch (error) {
127
+ if (!isMissing(error))
128
+ throw error;
129
+ }
130
+ const temporary = join(parent, `.${basename(destination)}.${randomUUID()}.tmp`);
131
+ await mkdir(temporary, { mode: 0o700 });
132
+ try {
133
+ for (const file of snapshot.files) {
134
+ const output = join(temporary, file.path);
135
+ assertContained(output, temporary, "Resource output path escaped install directory");
136
+ await mkdir(dirname(output), { recursive: true, mode: 0o700 });
137
+ const handle = await open(output, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL, file.executable ? 0o700 : 0o600);
138
+ try {
139
+ await handle.writeFile(file.content);
140
+ await handle.sync();
141
+ }
142
+ finally {
143
+ await handle.close();
144
+ }
145
+ }
146
+ const installed = await inspectResourceDirectory(temporary);
147
+ if (installed.inspection.digest !== snapshot.inspection.digest) {
148
+ throw new Error("Installed resource digest changed during copy");
149
+ }
150
+ await rename(temporary, destination);
151
+ const directoryHandle = await open(parent, "r");
152
+ try {
153
+ await directoryHandle.sync();
154
+ }
155
+ finally {
156
+ await directoryHandle.close();
157
+ }
158
+ }
159
+ catch (error) {
160
+ await rm(temporary, { recursive: true, force: true });
161
+ if (isAlreadyExists(error)) {
162
+ const existing = await inspectResourceDirectory(destination);
163
+ if (existing.inspection.digest === snapshot.inspection.digest)
164
+ return;
165
+ }
166
+ throw error;
167
+ }
168
+ }
169
+ export function resourceInstallPath(kind, name, digest, skillsRoot, pluginsRoot) {
170
+ validateName(name, "resource name");
171
+ validateDigest(digest, "resource digest");
172
+ return kind === "skill"
173
+ ? join(skillsRoot, ".installed", name, digest)
174
+ : join(pluginsRoot, name, digest);
175
+ }
176
+ export function validateDigest(value, path) {
177
+ if (!/^[a-f0-9]{64}$/.test(value))
178
+ throw new Error(`${path} must be a lowercase SHA-256 digest`);
179
+ }
180
+ export function validateName(value, path) {
181
+ if (!/^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?$/.test(value) || value.includes("--")) {
182
+ throw new Error(`${path} must be 1-64 lowercase letters, numbers, or single hyphens`);
183
+ }
184
+ }
185
+ export function resourceKey(kind, name) {
186
+ return `${kind}:${name}`;
187
+ }
188
+ function parseManifest(value) {
189
+ const manifest = record(value, PLUGIN_MANIFEST);
190
+ exactKeys(manifest, ["apiVersion", "name", "version", "entry", "capabilities", "contributes"], PLUGIN_MANIFEST);
191
+ if (manifest["apiVersion"] !== 1)
192
+ throw new Error(`${PLUGIN_MANIFEST}.apiVersion must be 1`);
193
+ const name = nonEmptyString(manifest["name"], `${PLUGIN_MANIFEST}.name`);
194
+ validateName(name, `${PLUGIN_MANIFEST}.name`);
195
+ const version = nonEmptyString(manifest["version"], `${PLUGIN_MANIFEST}.version`);
196
+ if (!/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/.test(version)) {
197
+ throw new Error(`${PLUGIN_MANIFEST}.version must be an explicit semantic version`);
198
+ }
199
+ const entry = normalizedRelativePath(manifest["entry"], `${PLUGIN_MANIFEST}.entry`);
200
+ const capabilities = uniqueStrings(manifest["capabilities"], `${PLUGIN_MANIFEST}.capabilities`, validateCapability);
201
+ const contributes = uniqueStrings(manifest["contributes"], `${PLUGIN_MANIFEST}.contributes`, (item, path) => {
202
+ if (!CONTRIBUTIONS.includes(item)) {
203
+ throw new Error(`${path} must be one of: ${CONTRIBUTIONS.join(", ")}`);
204
+ }
205
+ });
206
+ return { apiVersion: 1, name, version, entry, capabilities, contributes };
207
+ }
208
+ function packageDetails(files) {
209
+ const file = files.find((candidate) => candidate.path === "package.json");
210
+ if (!file)
211
+ return { dependencies: [], lifecycleScripts: [] };
212
+ const value = record(parseJson(file.content, "package.json"), "package.json");
213
+ const dependencies = [];
214
+ for (const [field, kind] of [
215
+ ["dependencies", "dependency"],
216
+ ["optionalDependencies", "optional"],
217
+ ["peerDependencies", "peer"],
218
+ ]) {
219
+ const section = value[field];
220
+ if (section === undefined)
221
+ continue;
222
+ for (const [name, version] of Object.entries(record(section, `package.json.${field}`))) {
223
+ const exact = nonEmptyString(version, `package.json.${field}.${name}`);
224
+ if (!/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/.test(exact)) {
225
+ throw new Error(`package.json.${field}.${name} must pin an exact semantic version`);
226
+ }
227
+ dependencies.push({ name, version: exact, kind });
228
+ }
229
+ }
230
+ dependencies.sort((left, right) => left.name.localeCompare(right.name) || left.kind.localeCompare(right.kind));
231
+ const scriptsValue = value["scripts"];
232
+ const lifecycleScripts = scriptsValue === undefined
233
+ ? []
234
+ : Object.keys(record(scriptsValue, "package.json.scripts"))
235
+ .filter((name) => /^(?:pre|post)?install$|^prepare$/.test(name))
236
+ .sort();
237
+ return { dependencies, lifecycleScripts };
238
+ }
239
+ async function scanDirectory(root) {
240
+ const files = [];
241
+ let totalBytes = 0;
242
+ const visit = async (directory, depth) => {
243
+ if (depth > MAX_DEPTH)
244
+ throw new Error(`Resource directory depth exceeds ${MAX_DEPTH}`);
245
+ const entries = await readdir(directory, { withFileTypes: true });
246
+ entries.sort((left, right) => left.name.localeCompare(right.name));
247
+ for (const entry of entries) {
248
+ if (entry.name === ".git" || entry.name === "node_modules") {
249
+ throw new Error(`Resource cannot contain ${entry.name}`);
250
+ }
251
+ const path = join(directory, entry.name);
252
+ const relativePath = relative(root, path);
253
+ if (!relativePath || relativePath.length > MAX_RELATIVE_PATH || isAbsolute(relativePath) || relativePath.startsWith(`..${sep}`)) {
254
+ throw new Error(`Invalid resource path: ${relativePath}`);
255
+ }
256
+ if (entry.isSymbolicLink())
257
+ throw new Error(`Resource cannot contain symbolic links: ${relativePath}`);
258
+ if (entry.isDirectory()) {
259
+ await visit(path, depth + 1);
260
+ continue;
261
+ }
262
+ if (!entry.isFile())
263
+ throw new Error(`Resource cannot contain special files: ${relativePath}`);
264
+ if (files.length >= MAX_FILES)
265
+ throw new Error(`Resource contains more than ${MAX_FILES} files`);
266
+ const handle = await open(path, constants.O_RDONLY | constants.O_NOFOLLOW);
267
+ try {
268
+ const metadata = await handle.stat();
269
+ if (!metadata.isFile())
270
+ throw new Error(`Resource path is no longer a regular file: ${relativePath}`);
271
+ if (metadata.size > MAX_FILE_BYTES)
272
+ throw new Error(`Resource file exceeds ${MAX_FILE_BYTES} bytes: ${relativePath}`);
273
+ totalBytes += metadata.size;
274
+ if (totalBytes > MAX_TOTAL_BYTES)
275
+ throw new Error(`Resource exceeds ${MAX_TOTAL_BYTES} total bytes`);
276
+ const content = await handle.readFile();
277
+ if (content.byteLength !== metadata.size)
278
+ throw new Error(`Resource file changed while inspecting: ${relativePath}`);
279
+ files.push({
280
+ path: relativePath.split(sep).join("/"),
281
+ bytes: content.byteLength,
282
+ sha256: createHash("sha256").update(content).digest("hex"),
283
+ executable: (metadata.mode & 0o111) !== 0,
284
+ content,
285
+ });
286
+ }
287
+ finally {
288
+ await handle.close();
289
+ }
290
+ }
291
+ };
292
+ await visit(root, 0);
293
+ if (files.length === 0)
294
+ throw new Error("Resource directory is empty");
295
+ return files.sort((left, right) => left.path.localeCompare(right.path));
296
+ }
297
+ function digestFiles(files) {
298
+ const digest = createHash("sha256");
299
+ digest.update("pspore-resource-v1\0");
300
+ for (const file of files) {
301
+ digest.update(file.path);
302
+ digest.update("\0");
303
+ digest.update(file.executable ? "x" : "-");
304
+ digest.update("\0");
305
+ digest.update(String(file.bytes));
306
+ digest.update("\0");
307
+ digest.update(file.content);
308
+ digest.update("\0");
309
+ }
310
+ return digest.digest("hex");
311
+ }
312
+ function parseJson(content, path) {
313
+ try {
314
+ return JSON.parse(content.toString("utf8"));
315
+ }
316
+ catch {
317
+ throw new Error(`${path} must contain valid JSON`);
318
+ }
319
+ }
320
+ function normalizedRelativePath(value, path) {
321
+ const input = nonEmptyString(value, path);
322
+ if (input.includes("\\") || input.includes("\0") || isAbsolute(input))
323
+ throw new Error(`${path} must be a portable relative path`);
324
+ const normalized = input.split("/").filter(Boolean).join("/");
325
+ if (!normalized || normalized !== input || normalized.split("/").some((part) => part === "." || part === "..")) {
326
+ throw new Error(`${path} must be a normalized relative path`);
327
+ }
328
+ return normalized;
329
+ }
330
+ function validateCapability(value, path) {
331
+ if (!/^[a-z][a-z0-9_-]*(?:\.[a-z][a-z0-9_-]*)*$/.test(value))
332
+ throw new Error(`${path} is not a valid capability`);
333
+ }
334
+ function uniqueStrings(value, path, validate) {
335
+ if (!Array.isArray(value) || value.length > 64)
336
+ throw new Error(`${path} must be an array with at most 64 entries`);
337
+ const result = value.map((item, index) => {
338
+ const text = nonEmptyString(item, `${path}[${index}]`);
339
+ validate(text, `${path}[${index}]`);
340
+ return text;
341
+ });
342
+ if (new Set(result).size !== result.length)
343
+ throw new Error(`${path} must not contain duplicates`);
344
+ return result;
345
+ }
346
+ function exactKeys(value, keys, path) {
347
+ const expected = new Set(keys);
348
+ const unknown = Object.keys(value).filter((key) => !expected.has(key));
349
+ if (unknown.length > 0)
350
+ throw new Error(`${path} contains unknown keys: ${unknown.join(", ")}`);
351
+ for (const key of keys)
352
+ if (!(key in value))
353
+ throw new Error(`${path}.${key} is required`);
354
+ }
355
+ function record(value, path) {
356
+ if (typeof value !== "object" || value === null || Array.isArray(value))
357
+ throw new Error(`${path} must be an object`);
358
+ return value;
359
+ }
360
+ function nonEmptyString(value, path) {
361
+ if (typeof value !== "string" || !value.trim())
362
+ throw new Error(`${path} must be a non-empty string`);
363
+ return value;
364
+ }
365
+ function assertContained(path, root, message) {
366
+ const canonicalRoot = resolve(root);
367
+ const candidate = resolve(path);
368
+ if (candidate !== canonicalRoot && !candidate.startsWith(`${canonicalRoot}${sep}`))
369
+ throw new Error(`${message}: ${candidate}`);
370
+ }
371
+ function bounded(value, maximum) {
372
+ return value.length <= maximum ? value : `${value.slice(0, maximum - 1)}…`;
373
+ }
374
+ function isMissing(error) {
375
+ return isNodeError(error) && error.code === "ENOENT";
376
+ }
377
+ function isAlreadyExists(error) {
378
+ return isNodeError(error) && (error.code === "EEXIST" || error.code === "ENOTEMPTY");
379
+ }
380
+ function isNodeError(error) {
381
+ return error instanceof Error && "code" in error;
382
+ }
383
+ function toError(error) {
384
+ return error instanceof Error ? error : new Error(String(error));
385
+ }
386
+ //# sourceMappingURL=resource-inspector.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"resource-inspector.js","sourceRoot":"","sources":["../../src/plugins/resource-inspector.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EACL,KAAK,EACL,IAAI,EACJ,OAAO,EACP,QAAQ,EACR,MAAM,EACN,EAAE,EACF,IAAI,GACL,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACxF,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AAqBpE,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAC1C,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACvC,MAAM,eAAe,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACxC,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,eAAe,GAAG,oBAAoB,CAAC;AAC7C,MAAM,aAAa,GAAkC,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;AAE/G,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,WAAmB,EAAE,KAAa;IAC5E,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAC7F,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC;IAC5F,eAAe,CAAC,SAAS,EAAE,aAAa,EAAE,2CAA2C,CAAC,CAAC;IACvF,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,SAAS,EAAE,CAAC,CAAC;IACjH,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,SAAiB;IAC9D,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,SAAS,EAAE,CAAC,CAAC;IAC1G,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC7C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,oDAAoD,eAAe,EAAE,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,eAAe,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG;QACX,OAAO,EAAE,CAAU;QACnB,UAAU,EAAE,SAAS;QACrB,MAAM;QACN,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC;QAC1D,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAC5D,YAAY,EAAE,eAAe,CAAC,YAAY;QAC1C,gBAAgB,EAAE,eAAe,CAAC,gBAAgB;KACnD,CAAC;IAEF,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,iBAAiB,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC/E,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,YAAY,CAAC,CAAC;QAC9F,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;QACrG,CAAC;QACD,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACvC,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,GAAG,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;QACxG,OAAO;YACL,SAAS,EAAE,SAAS;YACpB,KAAK;YACL,UAAU,EAAE;gBACV,GAAG,IAAI;gBACP,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,eAAe,EAAE,aAAa;gBAC9B,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC;gBAC9C,KAAK,EAAE,UAAU;gBACjB,YAAY,EAAE,EAAE;gBAChB,WAAW,EAAE,EAAE;gBACf,WAAW;gBACX,WAAW,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,KAAK,OAAO,IAAI,UAAU,CAAC,IAAI,KAAK,WAAW,CAAC;aACtH;SACF,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC;IACzE,IAAI,CAAC,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,eAAe,EAAE,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAG,aAAa,CAAC,SAAS,CAAC,YAAY,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC;IACjF,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,KAAK,CAAC,CAAC;IACjE,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IAChG,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IAClH,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,IAAI,eAAe,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5C,WAAW,CAAC,IAAI,CAAC,qGAAqG,CAAC,CAAC;IAC1H,CAAC;IACD,IAAI,eAAe,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,WAAW,CAAC,IAAI,CAAC,qCAAqC,eAAe,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvG,CAAC;IACD,IAAI,CAAC;QACH,MAAM,aAAa,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE;YAClF,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,GAAG,GAAG,IAAI;YACrB,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,WAAW,CAAC,IAAI,CAAC,8BAA8B,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO;QACL,SAAS,EAAE,SAAS;QACpB,KAAK;QACL,UAAU,EAAE;YACV,GAAG,IAAI;YACP,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,eAAe,EAAE,QAAQ,CAAC,OAAO;YACjC,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,WAAW;YACX,WAAW,EAAE,eAAe,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;SACvH;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAA0B,EAAE,WAAmB;IACnF,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACpC,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,WAAW,CAAC,CAAC;QAC7D,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;YAC9D,MAAM,IAAI,KAAK,CAAC,wDAAwD,WAAW,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,OAAO;IACT,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC;IACrC,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,WAAW,CAAC,IAAI,UAAU,EAAE,MAAM,CAAC,CAAC;IAChF,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxC,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1C,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,gDAAgD,CAAC,CAAC;YACrF,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAC9H,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACrC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACtB,CAAC;oBAAS,CAAC;gBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;QACH,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,wBAAwB,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,SAAS,CAAC,UAAU,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACrC,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC;YACH,MAAM,eAAe,CAAC,IAAI,EAAE,CAAC;QAC/B,CAAC;gBAAS,CAAC;YACT,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC;QAChC,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,WAAW,CAAC,CAAC;YAC7D,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,CAAC,MAAM;gBAAE,OAAO;QACxE,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,IAAkB,EAClB,IAAY,EACZ,MAAc,EACd,UAAkB,EAClB,WAAmB;IAEnB,YAAY,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IACpC,cAAc,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAC1C,OAAO,IAAI,KAAK,OAAO;QACrB,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,CAAC;QAC9C,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAa,EAAE,IAAY;IACxD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,qCAAqC,CAAC,CAAC;AACnG,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAa,EAAE,IAAY;IACtD,IAAI,CAAC,wCAAwC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAClF,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,6DAA6D,CAAC,CAAC;IACxF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAkB,EAAE,IAAY;IAC1D,OAAO,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IAChD,SAAS,CAAC,QAAQ,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,cAAc,EAAE,aAAa,CAAC,EAAE,eAAe,CAAC,CAAC;IAChH,IAAI,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,eAAe,uBAAuB,CAAC,CAAC;IAC7F,MAAM,IAAI,GAAG,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,eAAe,OAAO,CAAC,CAAC;IACzE,YAAY,CAAC,IAAI,EAAE,GAAG,eAAe,OAAO,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,GAAG,eAAe,UAAU,CAAC,CAAC;IAClF,IAAI,CAAC,qCAAqC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,GAAG,eAAe,+CAA+C,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,KAAK,GAAG,sBAAsB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,eAAe,QAAQ,CAAC,CAAC;IACpF,MAAM,YAAY,GAAG,aAAa,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,GAAG,eAAe,eAAe,EAAE,kBAAkB,CAAC,CAAC;IACpH,MAAM,WAAW,GAAG,aAAa,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,GAAG,eAAe,cAAc,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;QAC1G,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAA0B,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,oBAAoB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC,CAAyB,CAAC;IAC3B,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC;AAC5E,CAAC;AAED,SAAS,cAAc,CAAC,KAA8B;IAIpD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC;IAC1E,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,YAAY,EAAE,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC;IAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,cAAc,CAAC,CAAC;IAC9E,MAAM,YAAY,GAAyB,EAAE,CAAC;IAC9C,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI;QAC1B,CAAC,cAAc,EAAE,YAAY,CAAC;QAC9B,CAAC,sBAAsB,EAAE,UAAU,CAAC;QACpC,CAAC,kBAAkB,EAAE,MAAM,CAAC;KACpB,EAAE,CAAC;QACX,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,OAAO,KAAK,SAAS;YAAE,SAAS;QACpC,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,gBAAgB,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC;YACvF,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,EAAE,gBAAgB,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC;YACvE,IAAI,CAAC,qCAAqC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvD,MAAM,IAAI,KAAK,CAAC,gBAAgB,KAAK,IAAI,IAAI,qCAAqC,CAAC,CAAC;YACtF,CAAC;YACD,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IACD,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/G,MAAM,YAAY,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;IACtC,MAAM,gBAAgB,GAAG,YAAY,KAAK,SAAS;QACjD,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,sBAAsB,CAAC,CAAC;aACtD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;aAC/D,IAAI,EAAE,CAAC;IACd,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,CAAC;AAC5C,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAY;IACvC,MAAM,KAAK,GAAmB,EAAE,CAAC;IACjC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,MAAM,KAAK,GAAG,KAAK,EAAE,SAAiB,EAAE,KAAa,EAAiB,EAAE;QACtE,IAAI,KAAK,GAAG,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,SAAS,EAAE,CAAC,CAAC;QACxF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACnE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;gBAC3D,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAC3D,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACzC,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC1C,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,MAAM,GAAG,iBAAiB,IAAI,UAAU,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC;gBAChI,MAAM,IAAI,KAAK,CAAC,0BAA0B,YAAY,EAAE,CAAC,CAAC;YAC5D,CAAC;YACD,IAAI,KAAK,CAAC,cAAc,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,YAAY,EAAE,CAAC,CAAC;YACvG,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBAC7B,SAAS;YACX,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,YAAY,EAAE,CAAC,CAAC;YAC/F,IAAI,KAAK,CAAC,MAAM,IAAI,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,SAAS,QAAQ,CAAC,CAAC;YACjG,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;YAC3E,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBACrC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;oBAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,YAAY,EAAE,CAAC,CAAC;gBACtG,IAAI,QAAQ,CAAC,IAAI,GAAG,cAAc;oBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,cAAc,WAAW,YAAY,EAAE,CAAC,CAAC;gBACtH,UAAU,IAAI,QAAQ,CAAC,IAAI,CAAC;gBAC5B,IAAI,UAAU,GAAG,eAAe;oBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,eAAe,cAAc,CAAC,CAAC;gBACrG,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACxC,IAAI,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,IAAI;oBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,YAAY,EAAE,CAAC,CAAC;gBACrH,KAAK,CAAC,IAAI,CAAC;oBACT,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;oBACvC,KAAK,EAAE,OAAO,CAAC,UAAU;oBACzB,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;oBAC1D,UAAU,EAAE,CAAC,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;oBACzC,OAAO;iBACR,CAAC,CAAC;YACL,CAAC;oBAAS,CAAC;gBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACrB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACvE,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,WAAW,CAAC,KAA8B;IACjD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;IACtC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACpB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACpB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACpB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,SAAS,CAAC,OAAe,EAAE,IAAY;IAC9C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,0BAA0B,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc,EAAE,IAAY;IAC1D,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC1C,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,mCAAmC,CAAC,CAAC;IACnI,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9D,IAAI,CAAC,UAAU,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/G,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,qCAAqC,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa,EAAE,IAAY;IACrD,IAAI,CAAC,2CAA2C,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,4BAA4B,CAAC,CAAC;AACrH,CAAC;AAED,SAAS,aAAa,CACpB,KAAc,EACd,IAAY,EACZ,QAA8C;IAE9C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,2CAA2C,CAAC,CAAC;IACpH,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QACvC,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC;QACvD,QAAQ,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IACH,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,8BAA8B,CAAC,CAAC;IACnG,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,KAA8B,EAAE,IAAuB,EAAE,IAAY;IACtF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACvE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,2BAA2B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChG,KAAK,MAAM,GAAG,IAAI,IAAI;QAAE,IAAI,CAAC,CAAC,GAAG,IAAI,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,IAAI,GAAG,cAAc,CAAC,CAAC;AAC7F,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,IAAY;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,oBAAoB,CAAC,CAAC;IACtH,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,IAAY;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,6BAA6B,CAAC,CAAC;IACtG,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,IAAY,EAAE,OAAe;IAClE,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,SAAS,KAAK,aAAa,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,aAAa,GAAG,GAAG,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,KAAK,SAAS,EAAE,CAAC,CAAC;AAClI,CAAC;AAED,SAAS,OAAO,CAAC,KAAa,EAAE,OAAe;IAC7C,OAAO,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC;AAC7E,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;AACvD,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,CAAC;AACnD,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACnE,CAAC"}
@@ -0,0 +1,96 @@
1
+ export type ResourceKind = "skill" | "host-plugin";
2
+ export type PluginContribution = "trigger" | "tool" | "retrieval" | "executor" | "transport";
3
+ export interface HostPluginManifest {
4
+ apiVersion: 1;
5
+ name: string;
6
+ version: string;
7
+ entry: string;
8
+ capabilities: string[];
9
+ contributes: PluginContribution[];
10
+ }
11
+ export interface HostPluginActivationConfig {
12
+ name: string;
13
+ enabled: boolean;
14
+ digest: string;
15
+ grantedCapabilities: string[];
16
+ }
17
+ export interface ResourceFileDescriptor {
18
+ path: string;
19
+ bytes: number;
20
+ sha256: string;
21
+ executable: boolean;
22
+ }
23
+ export interface ResourceDependency {
24
+ name: string;
25
+ version: string;
26
+ kind: "dependency" | "optional" | "peer";
27
+ }
28
+ export interface StagedResourceInspection {
29
+ version: 1;
30
+ kind: ResourceKind;
31
+ sourcePath: string;
32
+ name: string;
33
+ resourceVersion: string;
34
+ description?: string;
35
+ digest: string;
36
+ entry: string;
37
+ files: ResourceFileDescriptor[];
38
+ totalBytes: number;
39
+ dependencies: ResourceDependency[];
40
+ lifecycleScripts: string[];
41
+ capabilities: string[];
42
+ contributes: PluginContribution[];
43
+ diagnostics: string[];
44
+ installable: boolean;
45
+ }
46
+ export interface TrustedResourceRecord {
47
+ version: 1;
48
+ kind: ResourceKind;
49
+ name: string;
50
+ resourceVersion: string;
51
+ description?: string;
52
+ digest: string;
53
+ entry: string;
54
+ capabilities: string[];
55
+ contributes: PluginContribution[];
56
+ trusted: boolean;
57
+ installedAt: string;
58
+ }
59
+ export type ResourceHealthStatus = "installed" | "active" | "starting" | "ready" | "disabled" | "blocked" | "degraded" | "stopped";
60
+ export interface ResourceHealthRecord {
61
+ version: 1;
62
+ key: string;
63
+ kind: ResourceKind;
64
+ name: string;
65
+ resourceVersion: string;
66
+ digest: string;
67
+ status: ResourceHealthStatus;
68
+ updatedAt: string;
69
+ restartRequired: boolean;
70
+ message?: string;
71
+ }
72
+ export interface ResourceCatalogEntry {
73
+ record: TrustedResourceRecord;
74
+ health: ResourceHealthRecord;
75
+ installPath: string;
76
+ }
77
+ export interface HostPluginHealth {
78
+ status: "ready" | "degraded";
79
+ message?: string;
80
+ }
81
+ export interface HostPluginContext {
82
+ apiVersion: 1;
83
+ name: string;
84
+ version: string;
85
+ digest: string;
86
+ capabilities: readonly string[];
87
+ contributes: readonly PluginContribution[];
88
+ signal: AbortSignal;
89
+ report(message: string): void;
90
+ }
91
+ export interface HostPlugin {
92
+ start(context: HostPluginContext, signal: AbortSignal): Promise<void> | void;
93
+ health?(): Promise<HostPluginHealth> | HostPluginHealth;
94
+ stop(reason: string): Promise<void> | void;
95
+ }
96
+ //# sourceMappingURL=types.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/plugins/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,aAAa,CAAC;AAEnD,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,MAAM,GAAG,WAAW,GAAG,UAAU,GAAG,WAAW,CAAC;AAE7F,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,CAAC,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,WAAW,EAAE,kBAAkB,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,mBAAmB,EAAE,MAAM,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,YAAY,GAAG,UAAU,GAAG,MAAM,CAAC;CAC1C;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,CAAC,CAAC;IACX,IAAI,EAAE,YAAY,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,sBAAsB,EAAE,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,kBAAkB,EAAE,CAAC;IACnC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,WAAW,EAAE,kBAAkB,EAAE,CAAC;IAClC,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,CAAC,CAAC;IACX,IAAI,EAAE,YAAY,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,WAAW,EAAE,kBAAkB,EAAE,CAAC;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,oBAAoB,GAC5B,WAAW,GACX,QAAQ,GACR,UAAU,GACV,OAAO,GACP,UAAU,GACV,SAAS,GACT,UAAU,GACV,SAAS,CAAC;AAEd,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,CAAC,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,YAAY,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,oBAAoB,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,OAAO,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,qBAAqB,CAAC;IAC9B,MAAM,EAAE,oBAAoB,CAAC;IAC7B,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,OAAO,GAAG,UAAU,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,CAAC,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,WAAW,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAC3C,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,CAAC,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC7E,MAAM,CAAC,IAAI,OAAO,CAAC,gBAAgB,CAAC,GAAG,gBAAgB,CAAC;IACxD,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC5C"}
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=types.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/plugins/types.ts"],"names":[],"mappings":""}
@@ -0,0 +1,68 @@
1
+ import type { ToolAuthorizationRequest, ToolAuthorizationResult, ToolGate } from "../domain/runtime.js";
2
+ import type { Capability, PolicyEngine, PolicyEvaluation } from "./policy.js";
3
+ export type ApprovalScope = "once" | "session" | "job";
4
+ export interface ApprovalRequest {
5
+ id: string;
6
+ sessionId: string;
7
+ agentPath: string[];
8
+ toolCallId: string;
9
+ runId?: string;
10
+ jobId?: string;
11
+ capability: Capability;
12
+ canonicalTarget?: string;
13
+ display: {
14
+ summary: string;
15
+ command?: string;
16
+ cwd?: string;
17
+ };
18
+ riskReasons: string[];
19
+ requestedAt: string;
20
+ expiresAt: string;
21
+ allowedScopes: ApprovalScope[];
22
+ }
23
+ export interface ApprovalResolution {
24
+ approved: boolean;
25
+ scope: ApprovalScope;
26
+ actor: string;
27
+ }
28
+ export interface JobGrant {
29
+ version: 1;
30
+ id: string;
31
+ jobId: string;
32
+ capability: Capability;
33
+ canonicalTarget?: string;
34
+ actor: string;
35
+ createdAt: string;
36
+ }
37
+ export interface ApprovalServiceOptions {
38
+ pendingPath: string;
39
+ auditPath: string;
40
+ grantsPath?: string;
41
+ timeoutMs: number;
42
+ clock?: () => Date;
43
+ idFactory?: () => string;
44
+ onRequested?: (request: ApprovalRequest) => void;
45
+ onResolved?: (request: ApprovalRequest, resolution: ApprovalResolution | {
46
+ interrupted: true;
47
+ }) => void;
48
+ }
49
+ export declare class ApprovalService {
50
+ #private;
51
+ constructor(options: ApprovalServiceOptions);
52
+ initialize(): Promise<void>;
53
+ request(input: Omit<ApprovalRequest, "id" | "requestedAt" | "expiresAt">): Promise<ApprovalResolution>;
54
+ resolve(id: string, resolution: ApprovalResolution): Promise<{
55
+ status: "resolved" | "already_resolved" | "not_found" | "invalid_scope";
56
+ }>;
57
+ list(): ApprovalRequest[];
58
+ listJobGrants(): JobGrant[];
59
+ hasJobGrant(jobId: string, evaluation: Pick<PolicyEvaluation, "capability" | "canonicalTarget">): boolean;
60
+ cancelSession(sessionId: string): Promise<void>;
61
+ close(): Promise<void>;
62
+ }
63
+ export declare class PolicyToolGate implements ToolGate {
64
+ #private;
65
+ constructor(policy: PolicyEngine, approvals: ApprovalService);
66
+ authorize(request: ToolAuthorizationRequest): Promise<ToolAuthorizationResult>;
67
+ }
68
+ //# sourceMappingURL=approval-service.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"approval-service.d.ts","sourceRoot":"","sources":["../../src/policy/approval-service.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAExG,OAAO,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE9E,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,SAAS,GAAG,KAAK,CAAC;AAEvD,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,UAAU,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE;QACP,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,GAAG,CAAC,EAAE,MAAM,CAAC;KACd,CAAC;IACF,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,aAAa,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,OAAO,CAAC;IAClB,KAAK,EAAE,aAAa,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,CAAC,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,UAAU,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AAQD,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,IAAI,CAAC;IACjD,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,kBAAkB,GAAG;QAAE,WAAW,EAAE,IAAI,CAAA;KAAE,KAAK,IAAI,CAAC;CACzG;AAED,qBAAa,eAAe;;gBAcd,OAAO,EAAE,sBAAsB;IAWrC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAiB3B,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,eAAe,EAAE,IAAI,GAAG,aAAa,GAAG,WAAW,CAAC,GAAG,OAAO,CAAC,kBAAkB,CAAC;IA4BtG,OAAO,CACX,EAAE,EAAE,MAAM,EACV,UAAU,EAAE,kBAAkB,GAC7B,OAAO,CAAC;QAAE,MAAM,EAAE,UAAU,GAAG,kBAAkB,GAAG,WAAW,GAAG,eAAe,CAAA;KAAE,CAAC;IAmDvF,IAAI,IAAI,eAAe,EAAE;IAIzB,aAAa,IAAI,QAAQ,EAAE;IAI3B,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,gBAAgB,EAAE,YAAY,GAAG,iBAAiB,CAAC,GAAG,OAAO;IAInG,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAS/C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CA+C7B;AAED,qBAAa,cAAe,YAAW,QAAQ;;gBAKjC,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe;IAKtD,SAAS,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,uBAAuB,CAAC;CAsCrF"}