prismatica 0.2.0

package/dist/selfhost.js

@@ -0,0 +1,199 @@
+/**
+ * Advisory UX for the ONE repository where `prismatica next`'s advice can be
+ * wrong about itself: Prismatica's own checkout.
+ *
+ * When the target lane is a checkout of Prismatica, the `prismatica` on the
+ * owner's PATH is some OTHER copy — an npm install, or a different lane —
+ * and running it against this lane exercises code the lane does not contain.
+ * The honest fix is to name the lane's own built CLI instead of the global
+ * one, so the advice runs the code the owner is actually changing.
+ *
+ * This is ADVICE AND NOTHING ELSE. It emits a different string; it gates
+ * nothing, hashes no executable, embeds no commit, negotiates no version and
+ * builds nothing. A wrong answer here costs the owner one confusing command,
+ * never a merge. Everything it says is deliberately non-committal about which
+ * copy is newer, because nothing here can know that — the two checkouts may
+ * be any distance apart in either direction.
+ *
+ * `selfHostReadiness` reads the filesystem (`node_modules`, `dist/cli.js`)
+ * so the advice never names a build the target lane cannot actually run —
+ * a fresh or unbuilt lane is told the one exact `npm ci` / `npm run build`
+ * recovery instead, and only a ready lane hears `node dist/cli.js`. Reading
+ * two paths to pick a STRING is still advice, not a gate: nothing installs,
+ * builds, hashes or version-checks on the owner's behalf.
+ *
+ * Detection is narrow on purpose: `package.json`'s own `name` AND its `bin`
+ * entry, both of them, at the repo root. A repo that merely depends on
+ * Prismatica, vendors it, or happens to contain the word is not this repo.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { shellQuote } from './shellquote.js';
+/** The lane-relative path of the built CLI a Prismatica checkout runs itself from. */
+export const SELF_HOSTED_CLI = 'dist/cli.js';
+const PACKAGE_NAME = 'prismatica';
+/**
+ * True only for a checkout of Prismatica ITSELF. Both signals must agree: a
+ * `name` alone would match a fork's rename-in-progress or any package that
+ * borrowed the word, and a `bin` alone would match anything that ships a
+ * command by that name.
+ */
+export function isPrismaticaCheckout(repoRoot) {
+    try {
+        const pkg = JSON.parse(fs.readFileSync(path.join(repoRoot, 'package.json'), 'utf8'));
+        if (pkg.name !== PACKAGE_NAME) {
+            return false;
+        }
+        const bin = pkg.bin;
+        return typeof bin === 'object' && bin !== null && bin[PACKAGE_NAME] === SELF_HOSTED_CLI;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * The repository root of the CLI that is EXECUTING right now, or null when it
+ * cannot be established (a bundled or relocated build). `import.meta.url`
+ * points at this module inside `dist/`, so the root is two levels up — and it
+ * only counts if that root is itself a Prismatica checkout, which is what
+ * distinguishes a lane's own `node dist/cli.js` from a global npm install.
+ */
+export function executingCheckout(moduleUrl = import.meta.url) {
+    try {
+        const root = path.resolve(path.dirname(fileURLToPath(moduleUrl)), '..');
+        return isPrismaticaCheckout(root) ? root : null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Set when the target lane is a Prismatica checkout that is NOT the checkout
+ * this CLI is running from — the only case where following ordinary
+ * `prismatica …` advice would run the wrong code. Same checkout, or an
+ * ordinary governed repo, returns null and nothing changes.
+ */
+export function selfHostAdvice(target, runningFrom = executingCheckout()) {
+    if (!isPrismaticaCheckout(target)) {
+        return null;
+    }
+    if (runningFrom !== null && path.resolve(runningFrom) === path.resolve(target)) {
+        return null;
+    }
+    return { runningFrom, target };
+}
+/**
+ * Distinguishes a checkout with no dependencies installed, one installed but
+ * unbuilt, and one ready to run its own `dist/cli.js` — the three states
+ * `rewriteForSelfHost` must tell apart before ever naming `node
+ * ${SELF_HOSTED_CLI}`, since recommending it against a lane that cannot run
+ * it is worse than no advice at all. `node_modules` is checked first: a
+ * `dist/` left over from a previous install is not runnable once
+ * dependencies are gone, so deps take priority over build output.
+ */
+export function selfHostReadiness(target) {
+    if (!fs.existsSync(path.join(target, 'node_modules'))) {
+        return 'missing-deps';
+    }
+    if (!fs.existsSync(path.join(target, SELF_HOSTED_CLI))) {
+        return 'missing-build';
+    }
+    return 'ready';
+}
+/**
+ * Rewrites a `prismatica …` command to run the TARGET lane's own build.
+ * Anything else — a `git` command, a `gh` command, a bare `prismatica` that
+ * isn't at the start — is returned untouched: this only ever knows how to
+ * speak about its own CLI.
+ *
+ * A lane that cannot actually run its own `dist/cli.js` yet is never told
+ * to: `selfHostReadiness` decides, and a not-ready lane gets the ONE exact
+ * recovery command for its state (`npm ci` or `npm run build`) in place of
+ * the advice, never alongside it — chaining the two would nudge an
+ * install/build the owner never asked Prismatica to perform. Only a READY
+ * lane is told to run `node ${SELF_HOSTED_CLI}`.
+ *
+ * The lane is quoted, so a path containing spaces, quotes or any other
+ * shell-sensitive character still resolves to one argument.
+ */
+export function rewriteForSelfHost(command, target) {
+    if (!command.startsWith('prismatica ') && command !== 'prismatica') {
+        return command;
+    }
+    const readiness = selfHostReadiness(target);
+    if (readiness === 'missing-deps') {
+        return `cd ${shellQuote(target)} && npm ci`;
+    }
+    if (readiness === 'missing-build') {
+        return `cd ${shellQuote(target)} && npm run build`;
+    }
+    const rest = command.slice('prismatica'.length).trimStart();
+    const invocation = `node ${SELF_HOSTED_CLI}${rest ? ` ${rest}` : ''}`;
+    return `cd ${shellQuote(target)} && ${invocation}`;
+}
+/** The one line printed beside rewritten advice — factual about both locations, silent about which is newer. */
+export function describeSelfHost(advice) {
+    const running = advice.runningFrom ?? 'an installed copy outside any checkout';
+    return `this lane is Prismatica itself: the CLI you ran lives in ${running}, the lane is ${advice.target} — these commands run the lane's own build, so build it first (npm run build) if it is stale`;
+}
+// ── Saying it once, to the person who can act on it ─────────────────────────
+/**
+ * Whether this process has already said it. Module-level because "once" means
+ * once per RUN, not once per call site: a single command resolves the change
+ * home several times over, and a repeated advisory is noise the owner learns
+ * to scroll past.
+ */
+let warningIssued = false;
+/** Test seam. The flag is process-lifetime state, and a test needs a fresh process's worth of it. */
+export function resetSelfHostWarning() {
+    warningIssued = false;
+}
+/** Whether the advisory has already been printed in this process. */
+export function selfHostWarningIssued() {
+    return warningIssued;
+}
+/**
+ * The one advisory Prismatica gives about ITSELF: you are governing a checkout
+ * of Prismatica with a DIFFERENT copy of Prismatica, so what runs is not the
+ * code in front of you.
+ *
+ * It is advice, and stays advice — nothing is gated, hashed, fingerprinted,
+ * rebuilt or relinked, and a wrong answer costs one confusing command rather
+ * than a merge. Three silences are deliberate:
+ *
+ *  - **an ordinary repository** never sees it, because `selfHostAdvice` returns
+ *    null for anything that is not a Prismatica checkout;
+ *  - **CI** never sees it: there is no owner at a terminal to act on it, and a
+ *    log line about which checkout is running is not a CI finding;
+ *  - **a non-TTY run** never sees it, for the same reason plus a stronger one —
+ *    output being piped or captured must not gain a line nobody asked for.
+ *
+ * stderr, never stdout: a command's stdout may be the thing being captured.
+ *
+ * Returns whether it printed, so a caller that would otherwise say the same
+ * thing itself (`next` prints this note beside its rewritten command) can tell.
+ */
+export function warnSelfHostOnce(target, options = {}) {
+    if (warningIssued) {
+        return false;
+    }
+    const env = options.env ?? process.env;
+    if (env.CI) {
+        return false;
+    }
+    const stream = options.stream ?? process.stderr;
+    if (!stream.isTTY) {
+        return false;
+    }
+    const advice = options.runningFrom === undefined
+        ? selfHostAdvice(target)
+        : selfHostAdvice(target, options.runningFrom);
+    if (!advice) {
+        return false;
+    }
+    warningIssued = true;
+    stream.write(`  note: ${describeSelfHost(advice)}\n`);
+    return true;
+}
+//# sourceMappingURL=selfhost.js.map

package/dist/selfhost.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"selfhost.js","sourceRoot":"","sources":["../src/selfhost.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C,sFAAsF;AACtF,MAAM,CAAC,MAAM,eAAe,GAAG,aAAa,CAAC;AAE7C,MAAM,YAAY,GAAG,YAAY,CAAC;AAElC;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAgB;IACnD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAGlF,CAAC;QACF,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;QACpB,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAK,GAA+B,CAAC,YAAY,CAAC,KAAK,eAAe,CAAC;IACvH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,YAAoB,MAAM,CAAC,IAAI,CAAC,GAAG;IACnE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACxE,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AASD;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,WAAW,GAAG,iBAAiB,EAAE;IAC9E,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,WAAW,KAAK,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;AACjC,CAAC;AAKD;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC;QACtD,OAAO,cAAc,CAAC;IACxB,CAAC;IACD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,EAAE,CAAC;QACvD,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,MAAc;IAChE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,OAAO,KAAK,YAAY,EAAE,CAAC;QACnE,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,SAAS,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,SAAS,KAAK,cAAc,EAAE,CAAC;QACjC,OAAO,MAAM,UAAU,CAAC,MAAM,CAAC,YAAY,CAAC;IAC9C,CAAC;IACD,IAAI,SAAS,KAAK,eAAe,EAAE,CAAC;QAClC,OAAO,MAAM,UAAU,CAAC,MAAM,CAAC,mBAAmB,CAAC;IACrD,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,CAAC;IAC5D,MAAM,UAAU,GAAG,QAAQ,eAAe,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACtE,OAAO,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,UAAU,EAAE,CAAC;AACrD,CAAC;AAED,gHAAgH;AAChH,MAAM,UAAU,gBAAgB,CAAC,MAAsB;IACrD,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,IAAI,wCAAwC,CAAC;IAC/E,OAAO,4DAA4D,OAAO,iBAAiB,MAAM,CAAC,MAAM,8FAA8F,CAAC;AACzM,CAAC;AAED,+EAA+E;AAE/E;;;;;GAKG;AACH,IAAI,aAAa,GAAG,KAAK,CAAC;AAE1B,qGAAqG;AACrG,MAAM,UAAU,oBAAoB;IAClC,aAAa,GAAG,KAAK,CAAC;AACxB,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,qBAAqB;IACnC,OAAO,aAAa,CAAC;AACvB,CAAC;AAUD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAc,EAAE,UAAkC,EAAE;IACnF,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;QACX,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GACV,OAAO,CAAC,WAAW,KAAK,SAAS;QAC/B,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC;QACxB,CAAC,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,KAAK,CAAC;IACf,CAAC;IACD,aAAa,GAAG,IAAI,CAAC;IACrB,MAAM,CAAC,KAAK,CAAC,WAAW,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/shellquote.js

@@ -0,0 +1,5 @@
+/** Single-quotes a value for safe, literal use in a POSIX shell command — no placeholders, no word-splitting on spaces or special characters. */
+export function shellQuote(value) {
+    return `'${value.replace(/'/g, `'\\''`)}'`;
+}
+//# sourceMappingURL=shellquote.js.map

package/dist/shellquote.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shellquote.js","sourceRoot":"","sources":["../src/shellquote.ts"],"names":[],"mappings":"AAAA,iJAAiJ;AACjJ,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AAC7C,CAAC"}

package/dist/skills.js

@@ -0,0 +1,398 @@
+/**
+ * The brand-neutral role → skill map, and the per-agent adapters that translate
+ * a role into that agent's real plugin/skill name.
+ *
+ * Skills are a QUALITY layer, never enforcement: a missing or stale skill can
+ * never let bad code ship. The engine owns and refreshes this map (via
+ * `doctor`); the user never hand-maintains a plugin list.
+ */
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { execa } from 'execa';
+/**
+ * `plan` is a distinct role, deliberately listed BEFORE `build`: turning a
+ * plain-language need into a scoped, checkable proposal is a different job from
+ * implementing one, and the fresh-eyes `review` role is a third. Keeping all
+ * three separate is what lets `start` say honestly that the Planner never
+ * builds and the Builder never re-decides the plan.
+ */
+export const ROLES = ['plan', 'ui-work', 'build', 'review', 'simplify', 'repo-upkeep'];
+export const ROLE_PURPOSE = {
+    plan: 'turning a plain-language need into a scoped, checkable proposal',
+    'ui-work': 'visual / front-end work — layout, styling, interaction',
+    build: 'implementing the change against the contract',
+    review: 'a fresh-eyes review of the finished diff',
+    simplify: 'reducing risk by simplifying the change',
+    'repo-upkeep': 'keeping docs, config and housekeeping healthy',
+};
+/**
+ * Which roles a change of this shape should lean on. Order = priority.
+ *
+ * `plan` is deliberately NOT returned here. These roles go into a BUILDER pack,
+ * and by the time one exists the planning has already happened — recommending a
+ * Planner to the builder would invite it to re-decide a plan the owner already
+ * approved. The role exists so `start`'s Planner has a name in the same
+ * vocabulary as Builder and Fresh Reviewer, not because every change needs one.
+ *
+ * `review` is NOT returned here either, for the identical reason, and it used
+ * to be. The pack this feeds is handed to the BUILDER — `commands/pack.ts`
+ * writes `skills`, and `commands/open.ts` maps them into the launch plan for
+ * the agent about to write the code — so listing the fresh-eyes role there told
+ * the builder to review its own diff. That is the one thing a review must not
+ * be, and the plugin's own `/prismatica:review` refuses it explicitly. The
+ * separation is an owner and process requirement (nothing in the trust path
+ * reads who built or reviewed anything), so the honest support Prismatica can
+ * give is to stop suggesting the collapse.
+ *
+ * The mapping itself is untouched and stays provider-neutral:
+ * `adapter.skillFor('review')` still resolves for every adapter, `doctor`
+ * still prints it, and a reviewer session still reaches it. Only the BUILDER
+ * hand-off stops naming it.
+ */
+export function recommendRoles(input) {
+    const roles = [];
+    if (input.upkeep) {
+        roles.push('repo-upkeep');
+    }
+    if (input.uiHeavy) {
+        roles.push('ui-work');
+    }
+    roles.push('build');
+    if (input.tier === 'heavy') {
+        roles.push('simplify');
+    }
+    return [...new Set(roles)];
+}
+const claudeSkills = {
+    // The bundled plugin's own Start capability. This was `null` for as long as
+    // Prismatica ran the Planner itself: no general Claude skill was a genuine
+    // match, and naming a near-miss would have been worse than saying so. Now the
+    // planning role IS a capability — `context start` exports the question and
+    // `/prismatica:start` is what answers it. Still a quality layer, never a gate.
+    plan: 'prismatica:start',
+    'ui-work': 'frontend-design',
+    build: 'feature-dev',
+    review: 'code-review',
+    simplify: 'simplify',
+    'repo-upkeep': 'claude-md-management',
+};
+const claude = {
+    agent: 'claude',
+    displayName: 'Claude Code',
+    launchCommand: 'claude',
+    builderFlags: [],
+    reviewerFlags: ['--permission-mode', 'plan'],
+    validationFlags: ['--help'],
+    modelFlags: (model) => ['--model', model],
+    effortFlags: (effort) => ['--effort', effort],
+    tuningDetectFlags: { model: ['--model'], effort: ['--effort'] },
+    skillFor: (role) => claudeSkills[role],
+};
+// Owner-supplied ids from the Codex Prismatica plugin. Only genuine role skills
+// are named; Understand and Status are workflow skills, so no Role maps to them.
+const codexSkills = {
+    plan: 'prismatica:prismatica-start',
+    'ui-work': null,
+    build: 'prismatica:prismatica-contract-work',
+    review: 'prismatica:prismatica-review',
+    simplify: null,
+    'repo-upkeep': null,
+};
+const codex = {
+    agent: 'codex',
+    displayName: 'Codex',
+    launchCommand: 'codex',
+    builderFlags: [],
+    reviewerFlags: ['--sandbox', 'read-only'],
+    // Top level, not `exec …`: the builder and reviewer launches pass `--model`
+    // and the effort override to `codex` itself, so that is the command line the
+    // probe must find them documented on.
+    validationFlags: ['--help'],
+    modelFlags: (model) => ['--model', model],
+    // Codex has no effort FLAG; effort is a configuration key. `--strict-config`
+    // is what makes that a real transport rather than a hopeful one: without it
+    // an unrecognised key is accepted and quietly ignored, so the owner would be
+    // told the effort was applied when nothing had been. Three separate argv
+    // entries, never one interpolated string — nothing here is ever shell-parsed.
+    //
+    // That is a claim about the KEY, and it is checked at LAUNCH. It is not the
+    // claim `validateProviderSelection` has to make, which is about the VALUE and
+    // has to be made before the lane is written — Codex's usage enumerates no
+    // reasoning efforts, so an explicit `--effort` is refused there rather than
+    // approved on the strength of this flag. The transport stays exactly as real.
+    effortFlags: (effort) => ['--strict-config', '-c', `model_reasoning_effort="${effort}"`],
+    tuningDetectFlags: { model: ['--model'], effort: ['--strict-config', '-c'] },
+    skillFor: (role) => codexSkills[role],
+};
+export const ADAPTERS = { claude, codex };
+/**
+ * What the printers name when a contract records no `builder`.
+ *
+ * This is a ROUTING FALLBACK, not a policy: `next`, `pack` and `start` have to
+ * print a command the owner can actually paste, and a placeholder like
+ * `prismatica open <agent>` is not one. It applies only to contracts framed
+ * before `builder` existed, or framed without `--builder`. Record a builder
+ * (at `frame`, or by running `prismatica open <agent> <id>` once) and every
+ * printer follows it instead.
+ *
+ * Nothing in the trust path reads this. The gate does not care which agent
+ * built a change, only that the diff is in scope, proven, and — above `light`
+ * tier — carries a review that is sealed, matches the head diff's patch-id,
+ * and records an explicit `approve` verdict. It does NOT check who reviewed:
+ * `reviewer` is free text, so builder/reviewer separation remains an owner and
+ * process requirement, never something enforced here. Builder and reviewer may
+ * be swapped at any time, including mid-change.
+ */
+export const DEFAULT_BUILDER = 'claude';
+export function getAdapter(agent) {
+    return ADAPTERS[agent.toLowerCase()] ?? null;
+}
+/**
+ * How long the probe may take. A provider that stalls exits with no code at
+ * all, so without a budget `open` and `review` hang with nothing printed and no
+ * lane record written. A TIMEOUT IS A DIFFERENT FACT FROM A FAILURE: a killed
+ * process reports a non-zero exit like any other, and "exited 1" sends the
+ * owner after a broken install that is not broken, so it is named rather than
+ * inferred. Printing its own usage is work a CLI does in milliseconds — the
+ * budget is generous for a cold start, not for a model.
+ */
+export const PROVIDER_VALIDATION_TIMEOUT_MS = 30_000;
+export async function defaultProviderValidationRunner(command, args, cwd, timeoutMs = PROVIDER_VALIDATION_TIMEOUT_MS) {
+    try {
+        const result = await execa(command, [...args], { cwd, reject: false, timeout: timeoutMs });
+        if (result.timedOut) {
+            return {
+                exitCode: 1,
+                output: `${command} did not print its own usage within ${Math.round(timeoutMs / 1000)}s`,
+            };
+        }
+        // Usage goes to stdout; a refusal usually goes to stderr. Read stdout FIRST,
+        // because that is the text the flag assertion below is about.
+        return {
+            exitCode: result.exitCode ?? 1,
+            output: String(result.stdout || result.stderr || '').trim(),
+        };
+    }
+    catch (error) {
+        return { exitCode: 1, output: error instanceof Error ? error.message : String(error) };
+    }
+}
+/**
+ * The values a provider's own usage ENUMERATES for one flag, or null when it
+ * enumerates none.
+ *
+ * Usage text is the only value list Prismatica will ever hold: a hard-coded one
+ * is a model catalogue, which this contract names as a non-goal and which goes
+ * stale the week it is written. So the list is read back out of the help the
+ * provider just printed — `--effort <level> Effort level … (low, medium, high,
+ * xhigh, max)` — and used to check the selection.
+ *
+ * It fails to NULL, never to a false refusal, because the cost of the two is
+ * not symmetric: a missed enumeration leaves the check exactly where it was,
+ * while an invented one refuses a launch the provider would have accepted. So
+ * the scan stops at the next flag, so one flag's parenthetical can never be
+ * read as another's; every item must be a bare token, so prose in brackets
+ * ("(default: sonnet)", "(e.g. 'opus')") is read as what it is — an example,
+ * not an enumeration; and a SINGLE bracketed word is not an enumeration either,
+ * since "(experimental)" would otherwise become an allowlist of one and refuse
+ * every real value.
+ */
+export function enumeratedValues(help, flag) {
+    const collapsed = help.replace(/\s+/gu, ' ');
+    const at = collapsed.indexOf(`${flag} <`);
+    if (at < 0)
+        return null;
+    const described = collapsed.slice(at + flag.length).split(' --')[0] ?? '';
+    const listed = /\(([^)]*)\)/u.exec(described);
+    if (!listed?.[1])
+        return null;
+    const values = listed[1].split(',').map((value) => value.trim());
+    if (values.length < 2)
+        return null;
+    return values.every((value) => /^[A-Za-z0-9][\w.-]*$/u.test(value)) ? values : null;
+}
+/**
+ * Check the exact selection against the INSTALLED provider, before any lane
+ * mutation — by asking that provider for its own usage, requiring it to
+ * document every flag this selection will be passed through, and requiring
+ * every selected VALUE that usage enumerates to be one it names.
+ *
+ * WHAT THIS DELIBERATELY IS NOT: a model turn. An earlier version sent the
+ * provider a prompt through `claude --print` / `codex exec` and read the
+ * answer, which is a real, billable inference call made by Prismatica —
+ * forbidden outright by `r-no-llm-calls` and by this contract, whatever the
+ * prompt happened to say. `src/safety/no-llm-imports.test.ts` never caught it
+ * because it looks for SDK imports, and this was a subprocess.
+ *
+ * So the claim is exactly what a non-inference probe can establish, and it is
+ * two claims, not one. First, the provider is installed, it runs, and its own
+ * help names `--model` / `--effort` / `--strict-config` as this adapter spells
+ * them — the `tuningDetectFlags` doctrine already in the codebase (`detect.ts`
+ * parses an installed CLI's own help for the exact flags it depends on, and
+ * fails closed on a missing one), which is what stops a silently-dropped dial.
+ * Second, wherever that same help ENUMERATES a dial's accepted values, the
+ * owner's selection must be one of them — so `--effort turbo` is refused here,
+ * before the lane changes, rather than at launch.
+ *
+ * WHAT A SELECTION THE PROBE CANNOT ANSWER GETS: a REFUSAL, here, before the
+ * lane changes — never a silent pass. This is the correction: the check used to
+ * read "refuse if usage enumerates the values and this is not one of them",
+ * which is no check at all for a dial whose values usage never enumerates, and
+ * both providers' models are exactly that. A real and an invented model name
+ * were probed identically and both approved, so the claim "the selection was
+ * validated" was true only of `--effort` on Claude Code and false everywhere
+ * else. It now reads "approve only what the provider's own usage NAMES".
+ *
+ * The consequence, stated rather than discovered: `--model` is refused for both
+ * providers today, and so is Codex's `--effort`, because `-c <key=value>` and
+ * `--strict-config` enumerate no values. `--strict-config` is still what makes
+ * that transport real rather than hopeful — an unrecognised KEY fails loudly
+ * instead of being ignored — but it says nothing about the VALUE, and it says
+ * it at launch, after the lane has been written. Principle 6 decides which way
+ * that falls.
+ *
+ * The alternatives are all worse and all named as non-goals: a model catalogue
+ * is stale the week it is written, and a model turn is `r-no-llm-calls`. So the
+ * answer is derived from the help output this probe just read, never from a
+ * stored per-provider claim about what is validatable — and the honest route to
+ * running a specific model is the one this file already names, which is for the
+ * owner to set it in the session they run themselves.
+ *
+ * Disposable and mutation-free by construction: an empty temporary directory
+ * that is removed afterwards, and a command whose only effect is to print.
+ */
+export async function validateProviderSelection(adapter, tuning, runner = defaultProviderValidationRunner) {
+    const temporary = fs.mkdtempSync(path.join(os.tmpdir(), 'prismatica-provider-'));
+    try {
+        const result = await runner(adapter.launchCommand, adapter.validationFlags, temporary);
+        if (result.exitCode !== 0) {
+            return { ok: false, detail: result.output.trim().slice(-800) || `exited ${result.exitCode}` };
+        }
+        const usage = `${adapter.launchCommand} ${adapter.validationFlags.join(' ')}`;
+        const missing = [
+            ...new Set(tuning.selections.flatMap((selection) => selection.detectFlags)),
+        ].filter((flag) => !result.output.includes(flag));
+        if (missing.length > 0) {
+            return { ok: false, detail: `${usage} does not document ${missing.join(', ')}` };
+        }
+        for (const selection of tuning.selections) {
+            // One enumeration is enough to answer the question, and every enumeration
+            // found must agree. Demanding one per flag would refuse Codex's effort
+            // transport for the wrong reason — `--strict-config` carries no value at
+            // all — and demanding none is the hole this replaced.
+            const enumerations = selection.detectFlags
+                .map((flag) => ({ flag, values: enumeratedValues(result.output, flag) }))
+                .filter((found) => found.values !== null);
+            if (enumerations.length === 0) {
+                return {
+                    ok: false,
+                    detail: `${usage} does not enumerate the values it accepts for --${selection.dial}, so "${selection.value}" cannot be confirmed without a model catalogue or a model turn — set it in the session you run yourself`,
+                };
+            }
+            const disagreeing = enumerations.find((found) => !found.values.includes(selection.value));
+            if (disagreeing) {
+                return {
+                    ok: false,
+                    detail: `${usage} documents ${disagreeing.flag} as one of ${disagreeing.values.join(', ')} — not "${selection.value}"`,
+                };
+            }
+        }
+        return { ok: true };
+    }
+    finally {
+        fs.rmSync(temporary, { recursive: true, force: true });
+    }
+}
+function hasTuning(tuning) {
+    return Boolean(tuning.model?.trim() || tuning.effort?.trim());
+}
+/**
+ * Turns the dials into argv for ONE provider, or refuses.
+ *
+ * Refusal is the point. An agent with no adapter is launched BARE today (see
+ * `commands/open.ts`) precisely because a guessed flag dialect is worse than
+ * none — so silently dropping a `--model` the owner asked for would be the
+ * same mistake wearing a friendlier face: the run would proceed on the default
+ * model and nothing would say so. The same holds for a dial a known provider
+ * has no transport for.
+ *
+ * Every value becomes its OWN argv element, and every caller spawns with
+ * `shell: false`, so no value the owner types is ever parsed as shell syntax.
+ */
+export function resolveTuning(agent, adapter, tuning) {
+    if (!hasTuning(tuning)) {
+        return { ok: true, args: [], selections: [] };
+    }
+    if (!adapter) {
+        return {
+            ok: false,
+            problem: `"${agent}" is not an agent Prismatica knows how to pass --model or --effort to.`,
+            why: `those flags differ per provider; ${Object.keys(ADAPTERS).join(' and ')} are the providers with an adapter, and an unknown one is launched bare rather than handed a guessed flag`,
+        };
+    }
+    const args = [];
+    const selections = [];
+    const model = tuning.model?.trim();
+    if (model) {
+        const flags = adapter.modelFlags(model);
+        if (!flags) {
+            return {
+                ok: false,
+                problem: `${adapter.displayName} has no command-line transport for --model.`,
+                why: "Prismatica passes a model through the provider's own documented flag or not at all",
+            };
+        }
+        args.push(...flags);
+        selections.push({ dial: 'model', value: model, detectFlags: adapter.tuningDetectFlags.model });
+    }
+    const effort = tuning.effort?.trim();
+    if (effort) {
+        const flags = adapter.effortFlags(effort);
+        if (!flags) {
+            return {
+                ok: false,
+                problem: `${adapter.displayName} has no command-line transport for --effort.`,
+                why: "Prismatica passes an effort setting through the provider's own documented transport or not at all",
+            };
+        }
+        args.push(...flags);
+        selections.push({
+            dial: 'effort',
+            value: effort,
+            detectFlags: adapter.tuningDetectFlags.effort,
+        });
+    }
+    return { ok: true, args, selections };
+}
+/**
+ * The launch controls the owner turned, named as they typed them.
+ *
+ * For the paths that launch NOTHING — `--copy`, `--import`, `discover` with no
+ * `--refresh` — this is the list to refuse on, which is the same doctrine
+ * `resolveTuning` applies one step later: a control that cannot reach a
+ * provider is REFUSED, never dropped. Accepting `--model` on a path where no
+ * process is ever spawned reads as "your model was honoured" when nothing read
+ * it at all, and the copy path's whole point is that the owner runs the agent
+ * themselves — where these are theirs to set.
+ *
+ * The budget belongs on this list beside the two dials: it configures the same
+ * absent process, and the three are always set and always ignored together.
+ */
+export function launchControlsRequested(controls) {
+    const named = [];
+    if (controls.tuning?.model?.trim()) {
+        named.push('--model');
+    }
+    if (controls.tuning?.effort?.trim()) {
+        named.push('--effort');
+    }
+    if (controls.agentTimeoutMs !== undefined) {
+        named.push('--agent-timeout');
+    }
+    return named;
+}
+export function mapRolesToSkills(adapter, roles) {
+    return roles.map((role) => ({ role, skill: adapter.skillFor(role) }));
+}
+//# sourceMappingURL=skills.js.map

package/dist/skills.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills.js","sourceRoot":"","sources":["../src/skills.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAG9B;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,CAAU,CAAC;AAGhG,MAAM,CAAC,MAAM,YAAY,GAAyB;IAChD,IAAI,EAAE,iEAAiE;IACvE,SAAS,EAAE,wDAAwD;IACnE,KAAK,EAAE,8CAA8C;IACrD,MAAM,EAAE,0CAA0C;IAClD,QAAQ,EAAE,yCAAyC;IACnD,aAAa,EAAE,+CAA+C;CAC/D,CAAC;AAQF;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,cAAc,CAAC,KAAqB;IAClD,MAAM,KAAK,GAAW,EAAE,CAAC;IACzB,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC5B,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxB,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpB,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7B,CAAC;AAmED,MAAM,YAAY,GAAgC;IAChD,4EAA4E;IAC5E,2EAA2E;IAC3E,8EAA8E;IAC9E,2EAA2E;IAC3E,+EAA+E;IAC/E,IAAI,EAAE,kBAAkB;IACxB,SAAS,EAAE,iBAAiB;IAC5B,KAAK,EAAE,aAAa;IACpB,MAAM,EAAE,aAAa;IACrB,QAAQ,EAAE,UAAU;IACpB,aAAa,EAAE,sBAAsB;CACtC,CAAC;AAEF,MAAM,MAAM,GAAiB;IAC3B,KAAK,EAAE,QAAQ;IACf,WAAW,EAAE,aAAa;IAC1B,aAAa,EAAE,QAAQ;IACvB,YAAY,EAAE,EAAE;IAChB,aAAa,EAAE,CAAC,mBAAmB,EAAE,MAAM,CAAC;IAC5C,eAAe,EAAE,CAAC,QAAQ,CAAC;IAC3B,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC;IACzC,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC;IAC7C,iBAAiB,EAAE,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,UAAU,CAAC,EAAE;IAC/D,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC;CACvC,CAAC;AAEF,gFAAgF;AAChF,iFAAiF;AACjF,MAAM,WAAW,GAAgC;IAC/C,IAAI,EAAE,6BAA6B;IACnC,SAAS,EAAE,IAAI;IACf,KAAK,EAAE,qCAAqC;IAC5C,MAAM,EAAE,8BAA8B;IACtC,QAAQ,EAAE,IAAI;IACd,aAAa,EAAE,IAAI;CACpB,CAAC;AAEF,MAAM,KAAK,GAAiB;IAC1B,KAAK,EAAE,OAAO;IACd,WAAW,EAAE,OAAO;IACpB,aAAa,EAAE,OAAO;IACtB,YAAY,EAAE,EAAE;IAChB,aAAa,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC;IACzC,4EAA4E;IAC5E,6EAA6E;IAC7E,sCAAsC;IACtC,eAAe,EAAE,CAAC,QAAQ,CAAC;IAC3B,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC;IACzC,6EAA6E;IAC7E,4EAA4E;IAC5E,6EAA6E;IAC7E,yEAAyE;IACzE,8EAA8E;IAC9E,EAAE;IACF,4EAA4E;IAC5E,8EAA8E;IAC9E,0EAA0E;IAC1E,4EAA4E;IAC5E,8EAA8E;IAC9E,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,iBAAiB,EAAE,IAAI,EAAE,2BAA2B,MAAM,GAAG,CAAC;IACxF,iBAAiB,EAAE,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,iBAAiB,EAAE,IAAI,CAAC,EAAE;IAC5E,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC;CACtC,CAAC;AAEF,MAAM,CAAC,MAAM,QAAQ,GAAiC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAExE;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,QAAQ,CAAC;AAExC,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAO,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,IAAI,CAAC;AAC/C,CAAC;AA0CD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,MAAM,CAAC;AAErD,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,OAAe,EACf,IAAuB,EACvB,GAAW,EACX,YAAoB,8BAA8B;IAElD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QAC3F,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,OAAO;gBACL,QAAQ,EAAE,CAAC;gBACX,MAAM,EAAE,GAAG,OAAO,uCAAuC,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG;aACzF,CAAC;QACJ,CAAC;QACD,6EAA6E;QAC7E,8DAA8D;QAC9D,OAAO;YACL,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC;YAC9B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;SAC5D,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IACzF,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,IAAY;IACzD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC7C,MAAM,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;IAC1C,IAAI,EAAE,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1E,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACjE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACtF,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAAqB,EACrB,MAAyC,EACzC,SAAmC,+BAA+B;IAElE,MAAM,SAAS,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;IACjF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;QACvF,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,UAAU,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;QAChG,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9E,MAAM,OAAO,GAAG;YACd,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;SAC5E,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAClD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,KAAK,sBAAsB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACnF,CAAC;QACD,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YAC1C,0EAA0E;YAC1E,uEAAuE;YACvE,yEAAyE;YACzE,sDAAsD;YACtD,MAAM,YAAY,GAAG,SAAS,CAAC,WAAW;iBACvC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;iBACxE,MAAM,CAAC,CAAC,KAAK,EAA+C,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC;YACzF,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC9B,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,GAAG,KAAK,mDAAmD,SAAS,CAAC,IAAI,SAAS,SAAS,CAAC,KAAK,0GAA0G;iBACpN,CAAC;YACJ,CAAC;YACD,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;YAC1F,IAAI,WAAW,EAAE,CAAC;gBAChB,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,GAAG,KAAK,cAAc,WAAW,CAAC,IAAI,cAAc,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,SAAS,CAAC,KAAK,GAAG;iBACvH,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,MAAoB;IACrC,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,aAAa,CAC3B,KAAa,EACb,OAA4B,EAC5B,MAAoB;IAEpB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IAChD,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,IAAI,KAAK,wEAAwE;YAC1F,GAAG,EAAE,oCAAoC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,2GAA2G;SACxL,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,UAAU,GAAsB,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;IACnC,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,GAAG,OAAO,CAAC,WAAW,6CAA6C;gBAC5E,GAAG,EAAE,oFAAoF;aAC1F,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;QACpB,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC,CAAC;IACjG,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;IACrC,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,GAAG,OAAO,CAAC,WAAW,8CAA8C;gBAC7E,GAAG,EAAE,mGAAmG;aACzG,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;QACpB,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,MAAM;YACb,WAAW,EAAE,OAAO,CAAC,iBAAiB,CAAC,MAAM;SAC9C,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AACxC,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAGvC;IACC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxB,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACzB,CAAC;IACD,IAAI,QAAQ,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QAC1C,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAOD,MAAM,UAAU,gBAAgB,CAAC,OAAqB,EAAE,KAAa;IACnE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AACxE,CAAC"}