pi-daddy 0.28.0 → 0.32.1

package/dist/kernel/catalog.d.ts

@@ -0,0 +1,125 @@
+/**
+ * Live capability catalog — what *can* be granted, enumerated at runtime.
+ *
+ * Until now grants were checked against agent-type files alone, which covers `tool:` capabilities and
+ * nothing else. That leaves two gaps: extension tools are invisible (so `ext:` grants cannot be
+ * validated), and **skills were ungovernable** despite "skills and tools" being half the requirement.
+ *
+ * Sources, and why each is trusted:
+ *  - **tools** — the `tools` array of a live provider request. Authoritative: it is exactly what pi sent
+ *    the model, so it includes extension-registered tools and reflects any `--tools` allowlist already in
+ *    force. Nothing else can see the real surface.
+ *  - **skills** — `SKILL.md` directories and top-level `.md` files under pi's skill roots.
+ *  - **definitions** — spawnable `SKILL.md` agents (ADR-0016), as `agent:<name>`.
+ *
+ * Provenance note: a provider payload gives tool NAMES, not owning packages, so extension tools cannot be
+ * qualified as `ext:<pkg>/<tool>` from that source alone. They are catalogued as `tool:<name>` — which is
+ * also how pi's `--tools` matches — and marked `kind: "extension"` for display. `ext:` ids remain
+ * supported for hand-authored grants; `deriveOwnGrant` already matches them by bare name.
+ */
+import { type SkillDefinition } from "./definitions.ts";
+import { type Capability } from "./resolve.ts";
+import { type WorkspaceRegistryFile } from "./workspace.ts";
+export type CapabilityKind = "builtin" | "extension" | "skill" | "agentType" | "workspace";
+export interface CatalogEntry {
+    capability: Capability;
+    kind: CapabilityKind;
+    /** Where it was found, for display and debugging. */
+    source?: string;
+}
+export interface Catalog {
+    entries: CatalogEntry[];
+    /** Every capability id in the catalog. */
+    all: Capability[];
+    byKind(kind: CapabilityKind): Capability[];
+    has(capability: Capability): boolean;
+}
+/** Split observed tool names into pi built-ins and extension-provided tools. */
+export declare function classifyToolNames(observed: string[]): CatalogEntry[];
+/** Skill roots pi discovers, project first. */
+export declare function skillDirs(cwd: string): string[];
+/** Enumerate the same enabled Pi resource paths as definitions, preserving resolver precedence. */
+export declare function loadSkills(cwd: string): Promise<CatalogEntry[]>;
+/**
+ * Spawnable definitions, as `agent:<name>` capabilities.
+ *
+ * A definition is BOTH a skill (loadable into a session) and an agent (spawnable as a child) — ADR-0016
+ * collapsed those into one file — so the same `SKILL.md` legitimately appears twice in the catalog under
+ * two capability ids. That is not duplication: `skill:review` means "may load these instructions" and
+ * `agent:review` means "may spawn a child running them", and a grant can hold either without the other.
+ */
+export declare function definitionEntries(definitions: Map<string, SkillDefinition>): CatalogEntry[];
+/**
+ * Registered workspaces, as `workspace:<id>` capabilities (ADR-0035).
+ *
+ * For DISPLAY and SCAFFOLDING only — `/grants` listing what this session may route to, and `init` offering
+ * the ids without choosing among them (ADR-0028). It is deliberately **not** what `unknownCapabilities`
+ * checks against; see the comment there.
+ *
+ * The operator registry is the authority on which ids exist, exactly as it is at `resolveWorkspace`. This
+ * enumerates it; it does not decide anything.
+ */
+export declare function workspaceEntries(registry: WorkspaceRegistryFile, source?: string): CatalogEntry[];
+/** Assemble a catalog from parts. Pure, so it is testable without a filesystem. */
+export declare function makeCatalog(entries: CatalogEntry[]): Catalog;
+/** Build the live catalog. `observedTools` comes from a provider payload; null when not yet seen. */
+export declare function buildCatalog(input: {
+    cwd: string;
+    observedTools: string[] | null;
+    /** Operator workspace registry (`PI_DADDY_WORKSPACE_REGISTRY`). Absent or unreadable yields no entries. */
+    registryPath?: string;
+}): Promise<Catalog>;
+/**
+ * Capabilities requested that the catalog does not contain.
+ *
+ * Reported separately from `denied` because the causes differ and so do the fixes: `denied` means the
+ * delegator lacks authority, `unknown` means the capability does not exist here — usually a typo or a
+ * stale grant referring to an uninstalled package. Silently treating unknown as denied hides that.
+ */
+export declare function unknownCapabilities(requested: Capability[], catalog: Catalog): Capability[];
+/**
+ * The capability an unknown one was most likely meant to be, or null when nothing is close enough.
+ *
+ * Two sources, in order. A known foreign name wins outright — `Glob` is not a typo for `find`, so no
+ * distance metric would ever connect them, and that is exactly the case worth naming. Otherwise the
+ * nearest catalog entry within a small edit distance, which catches `raed`/`serach` and stops well short
+ * of guessing: the threshold scales with the name's length and never exceeds two.
+ */
+export declare function suggestForUnknown(unknown: Capability, catalog: Catalog): Capability | null;
+/**
+ * Why an id carries two namespaces, said as the mistake that produced it.
+ *
+ * `ceilingForDefinition` prefixes a BARE entry with `tool:` and recognises an explicit namespace by its literal
+ * lower-case prefix, so `allowed-tools: Read` and `allowed-tools: tool:read` are both right. The capitalised
+ * spelling the same field invites is not: the frontmatter is copied from Claude Code, where the tool names are
+ * `Read` and `Grep`, so an author who also reaches for the namespace writes `Tool:Read` — which misses the prefix
+ * test, is lower-cased with the rest of the bare entry, and arrives as `tool:tool:read`. Every namespace has this
+ * shape (`Workspace:prod` becomes `tool:workspace:prod`), which is why the prefix is read from the one shared list
+ * rather than a second spelling of it.
+ *
+ * The messages that followed were loud and useless. A spawn refusal said "not present in this session's catalog
+ * (typo, or an uninstalled package?)" about an id nobody typed, and `suggestForUnknown` cannot rescue it either:
+ * `tool:read` is five edits from `read`, well past a threshold that never exceeds two. `pi-daddy init` refuses the
+ * whole definition earlier still, because `isSafeCapability` rejects the extra colon, and named the mangled id too.
+ *
+ * It names the mistake and does not repair it, for `ceilingForDefinition`'s own reason: a capability this package
+ * inferred rather than read is a grant nobody wrote. The author edits the file.
+ *
+ * **What the suggestion cannot recover.** The doubling happens on the bare-entry path, which lower-cases the whole
+ * entry before this function ever sees it, so `Workspace:Prod` and `Workspace:prod` both arrive as
+ * `tool:workspace:prod`. For `tool:` that loses nothing, since a pi tool name is lower-case anyway. For the other
+ * namespaces the identifier's own capitalisation is already gone, so the suggestion says so rather than implying
+ * that copying it verbatim must work. Nor is "or the bare name" offered outside `tool:`: a bare `prod` becomes
+ * `tool:prod`, which is a second unknown capability rather than a fix.
+ */
+export declare function explainDoubledNamespace(unknown: Capability): string | null;
+/**
+ * Skill name -> absolute path, for `planSpawn`'s `--skill` flags (R-32).
+ *
+ * Derived from the catalog's own `source` field rather than re-scanning, so what a child is handed
+ * cannot drift from what was discovered and offered. A skill entry without a source is omitted, which
+ * makes it *unresolvable* rather than silently absent — `planDelegation` refuses on that, because a
+ * grant naming a skill the child never receives is a ledger line that lies.
+ */
+export declare function skillPathsFromCatalog(catalog: Catalog): Record<string, string>;
+//# sourceMappingURL=catalog.d.ts.map

package/dist/kernel/catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../../src/kernel/catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAKH,OAAO,EAAmB,KAAK,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEzE,OAAO,EAAsC,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AACnF,OAAO,EAAyB,KAAK,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAInF,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,WAAW,GAAG,OAAO,GAAG,WAAW,GAAG,WAAW,CAAC;AAE3F,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,UAAU,CAAC;IACvB,IAAI,EAAE,cAAc,CAAC;IACrB,qDAAqD;IACrD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,OAAO;IACtB,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,0CAA0C;IAC1C,GAAG,EAAE,UAAU,EAAE,CAAC;IAClB,MAAM,CAAC,IAAI,EAAE,cAAc,GAAG,UAAU,EAAE,CAAC;IAC3C,GAAG,CAAC,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC;CACtC;AAED,gFAAgF;AAChF,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,YAAY,EAAE,CAMpE;AAED,+CAA+C;AAC/C,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAE/C;AAED,mGAAmG;AACnG,wBAAsB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAOrE;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,GAAG,YAAY,EAAE,CAM3F;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,qBAAqB,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,YAAY,EAAE,CAQjG;AAED,mFAAmF;AACnF,wBAAgB,WAAW,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,OAAO,CAY5D;AAED,qGAAqG;AACrG,wBAAsB,YAAY,CAAC,KAAK,EAAE;IACxC,GAAG,EAAE,MAAM,CAAC;IACZ,aAAa,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC/B,2GAA2G;IAC3G,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,OAAO,CAAC,OAAO,CAAC,CAgCnB;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,OAAO,GAAG,UAAU,EAAE,CAkC3F;AA6DD;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,UAAU,GAAG,IAAI,CAuB1F;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAa1E;AAqBD;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAO9E"}

package/dist/kernel/catalog.js

@@ -0,0 +1,338 @@
+/**
+ * Live capability catalog — what *can* be granted, enumerated at runtime.
+ *
+ * Until now grants were checked against agent-type files alone, which covers `tool:` capabilities and
+ * nothing else. That leaves two gaps: extension tools are invisible (so `ext:` grants cannot be
+ * validated), and **skills were ungovernable** despite "skills and tools" being half the requirement.
+ *
+ * Sources, and why each is trusted:
+ *  - **tools** — the `tools` array of a live provider request. Authoritative: it is exactly what pi sent
+ *    the model, so it includes extension-registered tools and reflects any `--tools` allowlist already in
+ *    force. Nothing else can see the real surface.
+ *  - **skills** — `SKILL.md` directories and top-level `.md` files under pi's skill roots.
+ *  - **definitions** — spawnable `SKILL.md` agents (ADR-0016), as `agent:<name>`.
+ *
+ * Provenance note: a provider payload gives tool NAMES, not owning packages, so extension tools cannot be
+ * qualified as `ext:<pkg>/<tool>` from that source alone. They are catalogued as `tool:<name>` — which is
+ * also how pi's `--tools` matches — and marked `kind: "extension"` for display. `ext:` ids remain
+ * supported for hand-authored grants; `deriveOwnGrant` already matches them by bare name.
+ */
+import { getAgentDir } from "@earendil-works/pi-coding-agent";
+import { resolveSkillResources, skillResourceName } from "./skill-resources.js";
+import { join } from "node:path";
+import { loadDefinitions } from "./definitions.js";
+import { PI_BUILTIN_TOOLS, WILDCARD } from "./pi-tools.js";
+import { AGENT_WILDCARD, WORKSPACE_WILDCARD } from "./resolve.js";
+import { loadWorkspaceRegistry } from "./workspace.js";
+import { CAPABILITY_NAMESPACE_PREFIXES, isSafeWorkspaceId } from "./capabilities.js";
+import { piProjectDir } from "./project-paths.js";
+/** Split observed tool names into pi built-ins and extension-provided tools. */
+export function classifyToolNames(observed) {
+    const builtins = new Set(PI_BUILTIN_TOOLS);
+    return [...new Set(observed)].sort().map((name) => ({
+        capability: `tool:${name}`,
+        kind: builtins.has(name) ? "builtin" : "extension",
+    }));
+}
+/** Skill roots pi discovers, project first. */
+export function skillDirs(cwd) {
+    return [join(piProjectDir(cwd), "skills"), join(getAgentDir(), "skills")];
+}
+/** Enumerate the same enabled Pi resource paths as definitions, preserving resolver precedence. */
+export async function loadSkills(cwd) {
+    const found = new Map();
+    for (const { path } of (await resolveSkillResources(cwd)).skills) {
+        const name = skillResourceName(path);
+        if (!found.has(name))
+            found.set(name, { capability: `skill:${name}`, kind: "skill", source: path });
+    }
+    return [...found.values()];
+}
+/**
+ * Spawnable definitions, as `agent:<name>` capabilities.
+ *
+ * A definition is BOTH a skill (loadable into a session) and an agent (spawnable as a child) — ADR-0016
+ * collapsed those into one file — so the same `SKILL.md` legitimately appears twice in the catalog under
+ * two capability ids. That is not duplication: `skill:review` means "may load these instructions" and
+ * `agent:review` means "may spawn a child running them", and a grant can hold either without the other.
+ */
+export function definitionEntries(definitions) {
+    return [...definitions.values()].map((d) => ({
+        capability: `agent:${d.name}`,
+        kind: "agentType",
+        source: d.source,
+    }));
+}
+/**
+ * Registered workspaces, as `workspace:<id>` capabilities (ADR-0035).
+ *
+ * For DISPLAY and SCAFFOLDING only — `/grants` listing what this session may route to, and `init` offering
+ * the ids without choosing among them (ADR-0028). It is deliberately **not** what `unknownCapabilities`
+ * checks against; see the comment there.
+ *
+ * The operator registry is the authority on which ids exist, exactly as it is at `resolveWorkspace`. This
+ * enumerates it; it does not decide anything.
+ */
+export function workspaceEntries(registry, source) {
+    return Object.keys(registry.workspaces)
+        .sort()
+        .map((id) => ({
+        capability: `workspace:${id}`,
+        kind: "workspace",
+        ...(source ? { source } : {}),
+    }));
+}
+/** Assemble a catalog from parts. Pure, so it is testable without a filesystem. */
+export function makeCatalog(entries) {
+    const deduped = new Map();
+    for (const entry of entries)
+        if (!deduped.has(entry.capability))
+            deduped.set(entry.capability, entry);
+    const list = [...deduped.values()].sort((a, b) => a.capability.localeCompare(b.capability));
+    const ids = list.map((e) => e.capability);
+    const idSet = new Set(ids);
+    return {
+        entries: list,
+        all: ids,
+        byKind: (kind) => list.filter((e) => e.kind === kind).map((e) => e.capability),
+        has: (capability) => idSet.has(capability),
+    };
+}
+/** Build the live catalog. `observedTools` comes from a provider payload; null when not yet seen. */
+export async function buildCatalog(input) {
+    const [skills, definitions, workspaces] = await Promise.all([
+        loadSkills(input.cwd),
+        loadDefinitions(input.cwd),
+        // Fails SOFT, and only because nothing here is an authority. A malformed registry must not stop a
+        // session from starting — `loadWorkspaceRegistry` throws a GovernanceRefusal naming the file, and that
+        // refusal is the operator's signal at the point of USE, where routing actually depends on it. Swallowing
+        // it there would be unsafe; swallowing it here costs a display list.
+        input.registryPath
+            ? loadWorkspaceRegistry(input.registryPath).then((r) => workspaceEntries(r, input.registryPath), () => [])
+            : Promise.resolve([]),
+    ]);
+    return makeCatalog([
+        // pi's built-ins are seeded unconditionally, because they are known statically and the catalog is
+        // consulted BEFORE any provider request has happened — `/grants` runs at that point. Without this,
+        // every capability looked "unknown" until the first model call, so the preview refused grants that
+        // enforcement would have allowed: R-28's failure shape (a diagnostic disagreeing with the enforcer)
+        // reappearing through a different door.
+        //
+        // The trade-off, stated plainly: in a session started with `--tools read`, this still lists `bash`
+        // as an existing capability, so a delegation naming it passes the *unknown* check and is refused by
+        // the *grant* check instead ("this session does not hold it"). That is the better error anyway, and
+        // the grant check — not this catalog — is the authority. Nothing here grants anything.
+        ...PI_BUILTIN_TOOLS.map((name) => ({ capability: `tool:${name}`, kind: "builtin" })),
+        ...(input.observedTools ? classifyToolNames(input.observedTools) : []),
+        ...skills,
+        ...definitionEntries(definitions),
+        ...workspaces,
+    ]);
+}
+/**
+ * Capabilities requested that the catalog does not contain.
+ *
+ * Reported separately from `denied` because the causes differ and so do the fixes: `denied` means the
+ * delegator lacks authority, `unknown` means the capability does not exist here — usually a typo or a
+ * stale grant referring to an uninstalled package. Silently treating unknown as denied hides that.
+ */
+export function unknownCapabilities(requested, catalog) {
+    // Wildcards are GRAMMAR, not entries. Nothing enumerates them into the catalog — `definitionEntries`
+    // emits `agent:<name>` per discovered definition and `PI_BUILTIN_TOOLS` contains no `*` — so this check
+    // reported `agent:*` as *"not present in this session's catalog (typo, or an uninstalled package?)"* and
+    // refused it BEFORE `resolve` could apply ADR-0023's rule. That made the ADR's "a parent holding
+    // `agent:*` may hand down `agent:*`" false, and made a definition declaring `allowed-tools: agent:*`
+    // unspawnable from any grant. The wildcard is live only at the root without this.
+    //
+    // `workspace:` is exempt as a NAMESPACE, not merely at its wildcard, and that asymmetry is deliberate.
+    // ADR-0035 minted the namespace and taught `normaliseCapability`, `resolve` and `childEnv` about it, but
+    // not this line — so with a catalog present (and `delegationContext` always supplies one) every requested
+    // `workspace:<id>` was refused UNKNOWN_TOOL as *"a typo, or an uninstalled package"*. A child could
+    // therefore never be granted a workspace capability at all, which made routing stop dead below the root
+    // instead of attenuating, and made the ADR's own "two authorities, not one" unreachable in production.
+    //
+    // Exempt rather than catalogued-and-checked because the operator registry is the authority and it is
+    // consulted where it matters: `resolveWorkspace` refuses an unregistered id with WORKSPACE_NOT_REGISTERED,
+    // naming the registry. A second, weaker check here can only turn that precise refusal into a misleading
+    // one — and it would do so for reasons that have nothing to do with the id, like a registry this session
+    // cannot read. `buildCatalog` still ENUMERATES workspaces, for `/grants` and for `init`'s scaffold; that
+    // is display, and display is not authority. Same trade-off the built-ins comment above states and accepts.
+    // The workspace exemption requires a WELL-FORMED id, not merely the prefix. A bare `workspace:` names
+    // nothing, and exempting it let it reach a child's grant and the ledger as authority over no workspace at
+    // all — an exemption for ids the registry is authoritative about should not also cover ids no registry
+    // could contain.
+    // `WORKSPACE_WILDCARD` is listed with the other two because it is GRAMMAR, and `isSafeCapability` refuses
+    // wildcards by design — so folding it into the namespace test below un-exempts it. Caught by the tests for
+    // the previous two fixes, which is the checklist paying for itself.
+    const exempt = (c) => c === WILDCARD ||
+        c === AGENT_WILDCARD ||
+        c === WORKSPACE_WILDCARD ||
+        (c.startsWith("workspace:") && isSafeWorkspaceId(c.slice("workspace:".length)));
+    return requested.filter((c) => !exempt(c) && !catalog.has(c)).sort();
+}
+/**
+ * Tool names that exist in OTHER harnesses' vocabularies, mapped to the pi tool that does the same job.
+ *
+ * This is a hint for an error message and nothing else. `ceilingForDefinition` deliberately refuses to
+ * translate names — lowercasing and no more — because a translation table there would have to decide what
+ * `Glob` *means* and would either invent a grant or silently drop one. Naming a likely intent in the
+ * refusal costs nothing and keeps that property: the delegation is still refused, and the author still
+ * edits the file.
+ *
+ * Populated from the names an author actually reaches for. `allowed-tools` is an Agent Skills field, so
+ * the frontmatter people copy in is usually written against Claude Code's toolset; `Glob` is the one that
+ * bit a real consumer (principal-pi-skills, seven definitions), because pi's equivalent is `find`.
+ */
+const FOREIGN_TOOL_NAMES = {
+    "tool:glob": "tool:find",
+    "tool:searchfiles": "tool:find",
+    "tool:bashtool": "tool:bash",
+    "tool:readfile": "tool:read",
+    "tool:writefile": "tool:write",
+    "tool:str_replace_editor": "tool:edit",
+    "tool:multiedit": "tool:edit",
+};
+/**
+ * Optimal string alignment distance — Levenshtein plus adjacent transposition.
+ *
+ * Transposition counts as ONE edit, not two, because it is the typo people actually make: `raed` for
+ * `read` is a single slip of the fingers, and plain Levenshtein scores it 2 — the same as two unrelated
+ * substitutions. With the threshold this small, that difference is the whole feature.
+ */
+function editDistance(a, b) {
+    // Three rows, because a transposition needs the row before last.
+    const rows = [
+        Array.from({ length: b.length + 1 }, (_, j) => j),
+        new Array(b.length + 1).fill(0),
+        new Array(b.length + 1).fill(0),
+    ];
+    let twoBack = rows[2];
+    let prev = rows[0];
+    let cur = rows[1];
+    for (let i = 1; i <= a.length; i++) {
+        cur[0] = i;
+        for (let j = 1; j <= b.length; j++) {
+            const cost = a[i - 1] === b[j - 1] ? 0 : 1;
+            let d = Math.min(prev[j] + 1, cur[j - 1] + 1, prev[j - 1] + cost);
+            if (i > 1 && j > 1 && a[i - 1] === b[j - 2] && a[i - 2] === b[j - 1]) {
+                d = Math.min(d, twoBack[j - 2] + 1);
+            }
+            cur[j] = d;
+        }
+        const spent = twoBack;
+        twoBack = prev;
+        prev = cur;
+        cur = spent;
+    }
+    return prev[b.length];
+}
+/**
+ * The capability an unknown one was most likely meant to be, or null when nothing is close enough.
+ *
+ * Two sources, in order. A known foreign name wins outright — `Glob` is not a typo for `find`, so no
+ * distance metric would ever connect them, and that is exactly the case worth naming. Otherwise the
+ * nearest catalog entry within a small edit distance, which catches `raed`/`serach` and stops well short
+ * of guessing: the threshold scales with the name's length and never exceeds two.
+ */
+export function suggestForUnknown(unknown, catalog) {
+    const foreign = FOREIGN_TOOL_NAMES[unknown.toLowerCase()];
+    if (foreign && catalog.has(foreign))
+        return foreign;
+    // Only among capabilities of the same namespace: suggesting `skill:review` for a mistyped tool name
+    // would be a worse message than none, because it points the author at the wrong kind of fix.
+    const ns = unknown.slice(0, unknown.indexOf(":") + 1);
+    if (!ns)
+        return null;
+    const bare = unknown.slice(ns.length);
+    const limit = Math.min(2, Math.floor(bare.length / 3));
+    if (limit < 1)
+        return null;
+    let best = null;
+    let bestDistance = limit + 1;
+    for (const candidate of catalog.all) {
+        if (!candidate.startsWith(ns))
+            continue;
+        const d = editDistance(bare, candidate.slice(ns.length));
+        if (d < bestDistance) {
+            bestDistance = d;
+            best = candidate;
+        }
+    }
+    return bestDistance <= limit ? best : null;
+}
+/**
+ * Why an id carries two namespaces, said as the mistake that produced it.
+ *
+ * `ceilingForDefinition` prefixes a BARE entry with `tool:` and recognises an explicit namespace by its literal
+ * lower-case prefix, so `allowed-tools: Read` and `allowed-tools: tool:read` are both right. The capitalised
+ * spelling the same field invites is not: the frontmatter is copied from Claude Code, where the tool names are
+ * `Read` and `Grep`, so an author who also reaches for the namespace writes `Tool:Read` — which misses the prefix
+ * test, is lower-cased with the rest of the bare entry, and arrives as `tool:tool:read`. Every namespace has this
+ * shape (`Workspace:prod` becomes `tool:workspace:prod`), which is why the prefix is read from the one shared list
+ * rather than a second spelling of it.
+ *
+ * The messages that followed were loud and useless. A spawn refusal said "not present in this session's catalog
+ * (typo, or an uninstalled package?)" about an id nobody typed, and `suggestForUnknown` cannot rescue it either:
+ * `tool:read` is five edits from `read`, well past a threshold that never exceeds two. `pi-daddy init` refuses the
+ * whole definition earlier still, because `isSafeCapability` rejects the extra colon, and named the mangled id too.
+ *
+ * It names the mistake and does not repair it, for `ceilingForDefinition`'s own reason: a capability this package
+ * inferred rather than read is a grant nobody wrote. The author edits the file.
+ *
+ * **What the suggestion cannot recover.** The doubling happens on the bare-entry path, which lower-cases the whole
+ * entry before this function ever sees it, so `Workspace:Prod` and `Workspace:prod` both arrive as
+ * `tool:workspace:prod`. For `tool:` that loses nothing, since a pi tool name is lower-case anyway. For the other
+ * namespaces the identifier's own capitalisation is already gone, so the suggestion says so rather than implying
+ * that copying it verbatim must work. Nor is "or the bare name" offered outside `tool:`: a bare `prod` becomes
+ * `tool:prod`, which is a second unknown capability rather than a fix.
+ */
+export function explainDoubledNamespace(unknown) {
+    const intended = undoubleNamespace(unknown);
+    if (intended === unknown)
+        return null;
+    const prefix = CAPABILITY_NAMESPACE_PREFIXES.find((p) => unknown.slice("tool:".length).toLowerCase().startsWith(p));
+    const tail = prefix === "tool:"
+        ? ` (or the bare name \`${intended.slice("tool:".length)}\`)`
+        : `, whose own capitalisation was folded when the bare entry was read, so restore it if that id has any`;
+    return (`${unknown} is prefixed twice: \`allowed-tools\` adds \`tool:\` to a bare entry and recognises an ` +
+        `explicit \`${prefix}\` prefix only in lower case, so an entry already carrying a namespace was given ` +
+        `another — write \`${intended}\`${tail} in the definition`);
+}
+/**
+ * The entry the author meant, with every extra `tool:` removed.
+ *
+ * Recursive, because `tool:tool:tool:read` is one mistake made twice and advising `tool:tool:read` would hand back
+ * an id with the same defect. The namespace is matched case-insensitively and re-emitted in lower case, so
+ * `tool:Tool:Read` — reachable on the model-chosen `tools:` path, which does not case-fold — suggests `tool:read`
+ * rather than the broken spelling it arrived in. A `tool:` name is lower-cased because pi's tool names are; any
+ * other identifier is left as it arrived, since its case may be significant and is not this function's to change.
+ */
+function undoubleNamespace(id) {
+    if (!id.startsWith("tool:"))
+        return id;
+    const inner = id.slice("tool:".length);
+    const prefix = CAPABILITY_NAMESPACE_PREFIXES.find((p) => inner.toLowerCase().startsWith(p));
+    // A bare `tool:tool:` names nothing to suggest, so it stays an ordinary unknown capability.
+    if (!prefix || inner.length === prefix.length)
+        return id;
+    const rest = inner.slice(prefix.length);
+    return undoubleNamespace((prefix === "tool:" ? `tool:${rest.toLowerCase()}` : `${prefix}${rest}`));
+}
+/**
+ * Skill name -> absolute path, for `planSpawn`'s `--skill` flags (R-32).
+ *
+ * Derived from the catalog's own `source` field rather than re-scanning, so what a child is handed
+ * cannot drift from what was discovered and offered. A skill entry without a source is omitted, which
+ * makes it *unresolvable* rather than silently absent — `planDelegation` refuses on that, because a
+ * grant naming a skill the child never receives is a ledger line that lies.
+ */
+export function skillPathsFromCatalog(catalog) {
+    const paths = {};
+    for (const entry of catalog.entries) {
+        if (entry.kind !== "skill" || !entry.source)
+            continue;
+        paths[entry.capability.slice("skill:".length)] = entry.source;
+    }
+    return paths;
+}
+//# sourceMappingURL=catalog.js.map

package/dist/kernel/catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../src/kernel/catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAChF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAwB,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAmB,MAAM,cAAc,CAAC;AACnF,OAAO,EAAE,qBAAqB,EAA8B,MAAM,gBAAgB,CAAC;AACnF,OAAO,EAAE,6BAA6B,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACrF,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAmBlD,gFAAgF;AAChF,MAAM,UAAU,iBAAiB,CAAC,QAAkB;IAClD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAS,gBAAgB,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAClD,UAAU,EAAE,QAAQ,IAAI,EAAE;QAC1B,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,SAAmB,CAAC,CAAC,CAAE,WAAqB;KACzE,CAAC,CAAC,CAAC;AACN,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,mGAAmG;AACnG,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAW;IAC1C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC9C,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACjE,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,SAAS,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACtG,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,WAAyC;IACzE,OAAO,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3C,UAAU,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE;QAC7B,IAAI,EAAE,WAAoB;QAC1B,MAAM,EAAE,CAAC,CAAC,MAAM;KACjB,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAA+B,EAAE,MAAe;IAC/E,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;SACpC,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACZ,UAAU,EAAE,aAAa,EAAE,EAAgB;QAC3C,IAAI,EAAE,WAAoB;QAC1B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9B,CAAC,CAAC,CAAC;AACR,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,WAAW,CAAC,OAAuB;IACjD,MAAM,OAAO,GAAG,IAAI,GAAG,EAA4B,CAAC;IACpD,KAAK,MAAM,KAAK,IAAI,OAAO;QAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACtG,MAAM,IAAI,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IAC5F,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO;QACL,OAAO,EAAE,IAAI;QACb,GAAG,EAAE,GAAG;QACR,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;QAC9E,GAAG,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC;KAC3C,CAAC;AACJ,CAAC;AAED,qGAAqG;AACrG,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAKlC;IACC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC1D,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC;QACrB,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC;QAC1B,kGAAkG;QAClG,uGAAuG;QACvG,yGAAyG;QACzG,qEAAqE;QACrE,KAAK,CAAC,YAAY;YAChB,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAC5C,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC,EAC9C,GAAG,EAAE,CAAC,EAAoB,CAC3B;YACH,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAoB,CAAC;KAC1C,CAAC,CAAC;IACH,OAAO,WAAW,CAAC;QACjB,kGAAkG;QAClG,mGAAmG;QACnG,mGAAmG;QACnG,oGAAoG;QACpG,wCAAwC;QACxC,EAAE;QACF,mGAAmG;QACnG,oGAAoG;QACpG,oGAAoG;QACpG,uFAAuF;QACvF,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,IAAI,EAAW,EAAE,IAAI,EAAE,SAAkB,EAAE,CAAC,CAAC;QACtG,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,GAAG,MAAM;QACT,GAAG,iBAAiB,CAAC,WAAW,CAAC;QACjC,GAAG,UAAU;KACd,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,SAAuB,EAAE,OAAgB;IAC3E,qGAAqG;IACrG,wGAAwG;IACxG,yGAAyG;IACzG,iGAAiG;IACjG,qGAAqG;IACrG,kFAAkF;IAClF,EAAE;IACF,uGAAuG;IACvG,yGAAyG;IACzG,0GAA0G;IAC1G,oGAAoG;IACpG,wGAAwG;IACxG,uGAAuG;IACvG,EAAE;IACF,qGAAqG;IACrG,2GAA2G;IAC3G,wGAAwG;IACxG,yGAAyG;IACzG,yGAAyG;IACzG,2GAA2G;IAC3G,sGAAsG;IACtG,0GAA0G;IAC1G,uGAAuG;IACvG,iBAAiB;IACjB,0GAA0G;IAC1G,2GAA2G;IAC3G,oEAAoE;IACpE,MAAM,MAAM,GAAG,CAAC,CAAa,EAAE,EAAE,CAC/B,CAAC,KAAK,QAAQ;QACd,CAAC,KAAK,cAAc;QACpB,CAAC,KAAK,kBAAkB;QACxB,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAClF,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACvE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,kBAAkB,GAAqC;IAC3D,WAAW,EAAE,WAAW;IACxB,kBAAkB,EAAE,WAAW;IAC/B,eAAe,EAAE,WAAW;IAC5B,eAAe,EAAE,WAAW;IAC5B,gBAAgB,EAAE,YAAY;IAC9B,yBAAyB,EAAE,WAAW;IACtC,gBAAgB,EAAE,WAAW;CAC9B,CAAC;AAEF;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,CAAS,EAAE,CAAS;IACxC,iEAAiE;IACjE,MAAM,IAAI,GAAe;QACvB,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACjD,IAAI,KAAK,CAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACvC,IAAI,KAAK,CAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;KACxC,CAAC;IACF,IAAI,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACtB,IAAI,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACnB,IAAI,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAElB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACX,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3C,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YAClE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;gBACrE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACtC,CAAC;YACD,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACb,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC;QACtB,OAAO,GAAG,IAAI,CAAC;QACf,IAAI,GAAG,GAAG,CAAC;QACX,GAAG,GAAG,KAAK,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AACxB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAmB,EAAE,OAAgB;IACrE,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAC1D,IAAI,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IAEpD,oGAAoG;IACpG,6FAA6F;IAC7F,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACtD,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IACrB,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IACvD,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAE3B,IAAI,IAAI,GAAsB,IAAI,CAAC;IACnC,IAAI,YAAY,GAAG,KAAK,GAAG,CAAC,CAAC;IAC7B,KAAK,MAAM,SAAS,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACpC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;YAAE,SAAS;QACxC,MAAM,CAAC,GAAG,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;QACzD,IAAI,CAAC,GAAG,YAAY,EAAE,CAAC;YACrB,YAAY,GAAG,CAAC,CAAC;YACjB,IAAI,GAAG,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,YAAY,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAmB;IACzD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,MAAM,GAAG,6BAA6B,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAE,CAAC;IACrH,MAAM,IAAI,GACR,MAAM,KAAK,OAAO;QAChB,CAAC,CAAC,wBAAwB,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK;QAC7D,CAAC,CAAC,sGAAsG,CAAC;IAC7G,OAAO,CACL,GAAG,OAAO,yFAAyF;QACnG,cAAc,MAAM,mFAAmF;QACvG,qBAAqB,QAAQ,KAAK,IAAI,oBAAoB,CAC3D,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,iBAAiB,CAAC,EAAc;IACvC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,6BAA6B,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5F,4FAA4F;IAC5F,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACzD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACxC,OAAO,iBAAiB,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,IAAI,EAAE,CAAe,CAAC,CAAC;AACnH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpC,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,SAAS;QACtD,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;IAChE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/kernel/chain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chain.d.ts","sourceRoot":"","sources":["../../src/kernel/chain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAIH;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,QAAY,CAAC;AAE3C;;;;;;;;;;GAUG;AACH,eAAO,MAAM,cAAc,SAAU,CAAC;AAEtC,qHAAqH;AACrH,eAAO,MAAM,WAAW,eAAe,CAAC;AAkCxC;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CA2BnD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAWtF;AAED,iGAAiG;AACjG,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0FAA0F;IAC1F,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,OAAO,kBAAkB,EAAE,mBAAmB,CAAC;IAC7D,SAAS,CAAC,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,gBAAgB,EAAE,eAAe,CAAA;KAAE,CAAC;CACxF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAEtF"}

package/dist/kernel/chain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chain.js","sourceRoot":"","sources":["../../src/kernel/chain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,CAAC;AAE3C;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,OAAO,CAAC;AAEtC,qHAAqH;AACrH,MAAM,CAAC,MAAM,WAAW,GAAG,YAAY,CAAC;AAExC;;;;;;;;;;;;GAYG;AACH,SAAS,SAAS,CAAC,IAAY,EAAE,MAAc;IAC7C,IAAI,MAAM,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAC3B,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,MAAM;QAAE,OAAO,IAAI,CAAC;IAEnD,IAAI,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEvE,MAAM,MAAM,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC;IAC9B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC;IAC1B,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,IAAI,IAAI,GAAG,IAAI,GAAG,MAAM;YAAE,MAAM;QAChC,IAAI,IAAI,IAAI,CAAC;QACb,KAAK,GAAG,CAAC,CAAC;IACZ,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACtC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAEjD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,wCAAwC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnF,wGAAwG;IACxG,4GAA4G;IAC5G,+GAA+G;IAC/G,cAAc;IACd,MAAM,MAAM,GAAG,SAAS;QACtB,CAAC,CAAC,aAAa,KAAK,0DAA0D,iBAAiB,YAAY;YACzG,GAAG,IAAI,sDAAsD;QAC/D,CAAC,CAAC,EAAE,CAAC;IAEP,OAAO;QACL,6GAA6G;QAC7G,gGAAgG;QAChG,sGAAsG;QACtG,yBAAyB,KAAK,KAAK;QACnC,IAAI;QACJ,MAAM,CAAC,SAAS,EAAE;QAClB,UAAU,KAAK,KAAK;KACrB;SACE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;SACjC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB,EAAE,QAA4B;IAC5E,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC5C,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACtC,mHAAmH;IACnH,+GAA+G;IAC/G,mHAAmH;IACnH,kHAAkH;IAClH,kHAAkH;IAClH,gGAAgG;IAChG,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,OAAO,QAAQ,CAAC,UAAU,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;IAC1F,OAAO,GAAG,QAAQ,OAAO,MAAM,EAAE,CAAC;AACpC,CAAC;AAcD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa,CAAC,IAAe,EAAE,QAA4B;IACzE,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;AACjE,CAAC"}

package/dist/kernel/correlation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"correlation.d.ts","sourceRoot":"","sources":["../../src/kernel/correlation.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAI/C,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;AAC7D,MAAM,MAAM,SAAS,GAAG,aAAa,GAAG,SAAS,EAAE,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AAEnF,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,YAAY,GAAG,WAAW,CAAC;IACjC,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,mBAAmB;IAClC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,cAAc,CAAC;IACjC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AA0GD;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,mBAAmB,GAAG,SAAS,GAAG,mBAAmB,GAAG,SAAS,CAkE5G;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,SAAS,UAAU,EAAE,GAAG,MAAM,CAG9E;AAED,gEAAgE;AAChE,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,GAAG,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,UAAU,EAAE,CAAC;IACxB,SAAS,EAAE,UAAU,EAAE,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,SAAS,UAAU,EAAE,CAAC;IACjC,SAAS,EAAE,SAAS,UAAU,EAAE,CAAC;IACjC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC;IACvD,QAAQ,EAAE,MAAM,CAAC;IACjB,sFAAsF;IACtF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qFAAqF;IACrF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gGAAgG;IAChG,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+FAA+F;IAC/F,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,GAAG,eAAe,CAiBlB;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,eAAe,GAAG,MAAM,CAkBtE;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,eAAe,CAyB1E;AAED,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,eAAe,GAAG,SAAS,EAAE,CAAC,EAAE,eAAe,GAAG,SAAS,GAAG,OAAO,CAI7G"}