wicked-crew 0.7.47 → 0.7.48

package/dist/editors/pack-install.js

@@ -0,0 +1,153 @@
+/**
+ * A pack install, as far as it goes before EP-C8 (DES-artifact-editor-plugins §5.2, §9.2; EP-C1).
+ *
+ * Install is human-only (§6.4) and runs garden's fail-closed gate FIRST: `pack check --json` on the
+ * pack root (schema, every editor's entry inside the pack, its hash, its size, nothing loaded from
+ * outside). Then crew reads the spec-2 manifest and lists what the operator would be asked to
+ * approve — the editors, the blocks and the pack's skills (§3.2 "Add these") — and REFUSES with 501
+ * `third_party_editors_not_available`: an unverified editor must pass the install-time conformance
+ * run (cases 1-12 against the bundle, headless Chrome) before it may be installed, and that run is
+ * EP-C8. Nothing is written. The refusal carries the check verdict and the approval list, so the
+ * operator sees exactly what will be asked once installs open.
+ */
+import { existsSync, readdirSync, readFileSync, statSync } from 'node:fs';
+import { isAbsolute, join, resolve } from 'node:path';
+import { execCapped } from '../core/exec.js';
+/** The verdict shape garden's `scripts/pack/check.py --json` prints. */
+function parseCheckOutput(stdout) {
+    try {
+        const raw = JSON.parse(stdout);
+        if (typeof raw !== 'object' || raw === null || typeof raw.ok !== 'boolean')
+            return null;
+        const findings = (list) => Array.isArray(list)
+            ? list.flatMap((f) => (typeof f === 'object' && f !== null ? [f] : []))
+            : [];
+        return { ok: raw.ok, errors: findings(raw.errors), warnings: findings(raw.warnings) };
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Garden's gate, run as a child: `python3 <garden>/scripts/pack/check.py <pack> --json --garden-root <garden>`
+ * (`python` when `python3` is not on PATH). A missing garden or an unparseable verdict is a FAILED
+ * check with the reason — never a pass.
+ */
+export function gardenPackCheck(gardenRoot) {
+    return async (packRoot) => {
+        if (gardenRoot === null) {
+            return { ok: false, errors: [{ level: 'error', code: 'garden-missing', message: 'no wicked-garden plugin found to run `pack check`' }], warnings: [] };
+        }
+        const script = join(gardenRoot, 'scripts', 'pack', 'check.py');
+        if (!existsSync(script)) {
+            return { ok: false, errors: [{ level: 'error', code: 'garden-too-old', message: `this wicked-garden has no scripts/pack/check.py (needs >= 12.40.0)` }], warnings: [] };
+        }
+        const args = [script, packRoot, '--json', '--garden-root', gardenRoot];
+        let stdout = '';
+        for (const bin of ['python3', 'python']) {
+            try {
+                const out = await execCapped(bin, args, { timeout: 60_000, windowsHide: true });
+                stdout = out.stdout;
+                break;
+            }
+            catch (err) {
+                const e = err;
+                if (e.code === 'ENOENT')
+                    continue; // no such interpreter: try the next spelling
+                // A failing check exits 1 with the JSON verdict on stdout.
+                if (typeof e.stdout === 'string' && e.stdout.trim() !== '') {
+                    stdout = e.stdout;
+                    break;
+                }
+                return { ok: false, errors: [{ level: 'error', code: 'check-failed', message: `pack check did not run: ${e.message}` }], warnings: [] };
+            }
+        }
+        const parsed = parseCheckOutput(stdout);
+        if (parsed === null) {
+            return { ok: false, errors: [{ level: 'error', code: 'check-unreadable', message: stdout === '' ? 'no python interpreter found (python3 / python)' : 'pack check printed no readable verdict' }], warnings: [] };
+        }
+        return parsed;
+    };
+}
+export class PackInstallError extends Error {
+    status;
+    check;
+    constructor(status, message, check) {
+        super(message);
+        this.status = status;
+        this.check = check;
+        this.name = 'PackInstallError';
+    }
+}
+/** What `POST /editors` reads of a pack before refusing: the approval list (§3.2). */
+export async function previewPackInstall(packRootRaw, check) {
+    if (typeof packRootRaw !== 'string' || packRootRaw.trim() === '' || !isAbsolute(packRootRaw)) {
+        throw new PackInstallError(400, '`packRoot` must be an absolute path to a directory holding wicked-pack.json');
+    }
+    const packRoot = resolve(packRootRaw);
+    let isDir = false;
+    try {
+        isDir = statSync(packRoot).isDirectory();
+    }
+    catch {
+        isDir = false;
+    }
+    if (!isDir)
+        throw new PackInstallError(404, `no directory at ${packRoot}`);
+    const manifestPath = join(packRoot, 'wicked-pack.json');
+    if (!existsSync(manifestPath))
+        throw new PackInstallError(400, `${packRoot} holds no wicked-pack.json`);
+    // Garden's gate first (fail closed): a refused manifest never gets as far as a listing.
+    const verdict = await check(packRoot);
+    if (!verdict.ok) {
+        throw new PackInstallError(422, `wicked-garden pack check refused the pack (${verdict.errors.length} error${verdict.errors.length === 1 ? '' : 's'})`, verdict);
+    }
+    let manifest;
+    try {
+        manifest = JSON.parse(readFileSync(manifestPath, 'utf8'));
+    }
+    catch (err) {
+        throw new PackInstallError(400, `wicked-pack.json is not JSON: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    const editors = Array.isArray(manifest['editors']) ? manifest['editors'] : [];
+    if (manifest['spec'] !== 2 || editors.length === 0) {
+        throw new PackInstallError(400, 'the pack declares no editors (spec 2 `editors[]`); there is nothing to install here');
+    }
+    const blocks = Array.isArray(manifest['blocks']) ? manifest['blocks'] : [];
+    const skillsDir = typeof manifest['skills_dir'] === 'string' ? manifest['skills_dir'] : 'skills';
+    let skills = [];
+    try {
+        const dir = join(packRoot, skillsDir);
+        if (statSync(dir).isDirectory())
+            skills = readdirSync(dir).filter((n) => !n.startsWith('.')).sort();
+    }
+    catch {
+        skills = [];
+    }
+    const str = (v) => (typeof v === 'string' ? v : '');
+    const strs = (v) => (Array.isArray(v) ? v.filter((x) => typeof x === 'string') : []);
+    return {
+        code: 'third_party_editors_not_available',
+        error: 'third-party editors cannot be installed yet: the install-time conformance run (DES-artifact-editor-plugins EP-C8) ' +
+            'has not shipped, and an unverified editor is never installed. The pack passed wicked-garden `pack check`; ' +
+            'this is what the install would ask you to approve.',
+        check: verdict,
+        pack: {
+            name: str(manifest['name']),
+            vendor: str(manifest['vendor']),
+            version: str(manifest['version']),
+            editors: editors.map((e) => ({
+                id: str(e['id']),
+                title: str(e['title']),
+                version: str(e['version']),
+                kinds: strs(e['kinds']),
+                permissions: Array.isArray(e['permissions'])
+                    ? e['permissions'].map((p) => ({ id: str(p['id']), why: str(p['why']) }))
+                    : [],
+            })),
+            blocks: blocks.map((b) => ({ id: str(b['id']), label: str(b['label']), produces_kind: str(b['produces_kind']), skills: strs(b['skills']) })),
+            skills,
+        },
+    };
+}
+//# sourceMappingURL=pack-install.js.map

package/dist/editors/pack-install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pack-install.js","sourceRoot":"","sources":["../../src/editors/pack-install.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGtD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAI7C,wEAAwE;AACxE,SAAS,gBAAgB,CAAC,MAAc;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAA6B,CAAC;QAC3D,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACxF,MAAM,QAAQ,GAAG,CAAC,IAAa,EAA6B,EAAE,CAC5D,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YACjB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAsC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC5G,CAAC,CAAC,EAAE,CAAC;QACT,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;IACxF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,UAAyB;IACvD,OAAO,KAAK,EAAE,QAAQ,EAAE,EAAE;QACxB,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACxB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,mDAAmD,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QACzJ,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QAC/D,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACxB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,oEAAoE,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QAC1K,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC;QACvE,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;gBAChF,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;gBACpB,MAAM;YACR,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,GAAG,GAA0E,CAAC;gBACrF,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;oBAAE,SAAS,CAAC,6CAA6C;gBAChF,2DAA2D;gBAC3D,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;oBAC3D,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;oBAClB,MAAM;gBACR,CAAC;gBACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,2BAA2B,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;YAC1I,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,gDAAgD,CAAC,CAAC,CAAC,wCAAwC,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QACnN,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAE9B;IAEA;IAHX,YACW,MAAuB,EAChC,OAAe,EACN,KAAuB;QAEhC,KAAK,CAAC,OAAO,CAAC,CAAC;QAJN,WAAM,GAAN,MAAM,CAAiB;QAEvB,UAAK,GAAL,KAAK,CAAkB;QAGhC,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAED,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,WAAmB,EAAE,KAAsB;IAClF,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7F,MAAM,IAAI,gBAAgB,CAAC,GAAG,EAAE,6EAA6E,CAAC,CAAC;IACjH,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACtC,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,GAAG,KAAK,CAAC;IAChB,CAAC;IACD,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,gBAAgB,CAAC,GAAG,EAAE,mBAAmB,QAAQ,EAAE,CAAC,CAAC;IAC3E,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IACxD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,GAAG,EAAE,GAAG,QAAQ,4BAA4B,CAAC,CAAC;IACxG,wFAAwF;IACxF,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,MAAM,IAAI,gBAAgB,CAAC,GAAG,EAAE,8CAA8C,OAAO,CAAC,MAAM,CAAC,MAAM,SAAS,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,EAAE,OAAO,CAAC,CAAC;IAClK,CAAC;IACD,IAAI,QAAiC,CAAC;IACtC,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAA4B,CAAC;IACvF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,gBAAgB,CAAC,GAAG,EAAE,iCAAiC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvH,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAE,QAAQ,CAAC,SAAS,CAAoC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClH,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,gBAAgB,CAAC,GAAG,EAAE,qFAAqF,CAAC,CAAC;IACzH,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAE,QAAQ,CAAC,QAAQ,CAAoC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/G,MAAM,SAAS,GAAG,OAAO,QAAQ,CAAC,YAAY,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACjG,IAAI,MAAM,GAAa,EAAE,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACtC,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;YAAE,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACtG,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,EAAE,CAAC;IACd,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,CAAU,EAAU,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,CAAC,CAAU,EAAY,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACrH,OAAO;QACL,IAAI,EAAE,mCAAmC;QACzC,KAAK,EACH,oHAAoH;YACpH,4GAA4G;YAC5G,oDAAoD;QACtD,KAAK,EAAE,OAAO;QACd,IAAI,EAAE;YACJ,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC3B,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC/B,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YACjC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC3B,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBAChB,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBACtB,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBAC1B,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBACvB,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;oBAC1C,CAAC,CAAE,CAAC,CAAC,aAAa,CAAoC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;oBAC7G,CAAC,CAAC,EAAE;aACP,CAAC,CAAC;YACH,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;YAC5I,MAAM;SACP;KACF,CAAC;AACJ,CAAC"}

package/dist/editors/registry.d.ts

@@ -0,0 +1,142 @@
+/**
+ * The artifact-editor registry (DES-artifact-editor-plugins §5.2, §8.6, §9.1; EP-C1).
+ *
+ * Two kinds of editor exist in the design; one exists today:
+ *
+ *  - **First-party** editors ship INSIDE studio's bundle (§8.6): `<studio dist>/editors/<id>/editor.json`
+ *    beside the ONE self-contained `index.html` entry. Crew discovers them at boot, pins each entry's
+ *    sha256 and byte size, and serves the entry through the hashed bundle route (`routes.ts`) with
+ *    the §8.2 headers. Their ids are `wicked-*` — the reserved first-party namespace every pack is
+ *    refused (garden `wicked-pack.schema.json`).
+ *  - **Third-party** editors arrive as garden packs (spec 2 `editors[]`). Their install is REFUSED
+ *    until the install-time conformance run ships (EP-C8, LATER): `pack-install.ts` still runs
+ *    garden's fail-closed `pack check` and lists what the operator would be asked to approve, then
+ *    answers 501. Nothing of a pack is ever written by this registry.
+ *
+ * Persisted state is ONE file, `<state home>/daemon-editors.json` — the enable/disable flags the
+ * operator sets in Settings → Editors (§6.4, human-only). It sits under the `daemon-` prefix both
+ * crew's state-home registry and the engine's worker fence already classify (crew#756), so no new
+ * top-level entry is introduced; a pack install (EP-C8) will need a registered `editors/` subtree in
+ * both repos first.
+ */
+import { z } from 'zod';
+import type { EditorView } from '../core/types.js';
+/** The persisted flags file, under the registered `daemon-` prefix. */
+export declare const EDITORS_STATE_FILENAME = "daemon-editors.json";
+/** Where first-party manifests live inside the studio bundle. */
+export declare const STUDIO_EDITORS_DIRNAME = "editors";
+/** The host's bundle cap (§8.5); a pack's `limits.bundleBytes` may only be lower. */
+export declare const HOST_BUNDLE_CAP_BYTES: number;
+export declare const EDITOR_PERMISSIONS: readonly ["artifact.read", "artifact.write", "selection.chip", "composer.draft", "checks.read", "checks.contribute", "sources.read", "media.read", "artifact.export", "ui.fullscreen", "network.media"];
+/** Editor ids: lowercase dash-words, ≤ 64 (garden's shape); first-party ones start with `wicked-`. */
+export declare const EDITOR_ID: RegExp;
+export declare const FIRST_PARTY_ID: RegExp;
+/** Anchored SemVer (garden's shape). */
+export declare const EDITOR_VERSION: RegExp;
+export declare const EditorManifestSchema: z.ZodObject<{
+    id: z.ZodString;
+    title: z.ZodString;
+    version: z.ZodString;
+    protocol: z.ZodArray<z.ZodNumber, "many">;
+    kinds: z.ZodArray<z.ZodString, "many">;
+    entry: z.ZodDefault<z.ZodString>;
+    sizes: z.ZodEffects<z.ZodArray<z.ZodEnum<["inline", "pane", "full"]>, "many">, ("inline" | "pane" | "full")[], ("inline" | "pane" | "full")[]>;
+    panels: z.ZodOptional<z.ZodArray<z.ZodEnum<["checks"]>, "many">>;
+    permissions: z.ZodArray<z.ZodObject<{
+        id: z.ZodEnum<["artifact.read", "artifact.write", "selection.chip", "composer.draft", "checks.read", "checks.contribute", "sources.read", "media.read", "artifact.export", "ui.fullscreen", "network.media"]>;
+        why: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        id: "artifact.read" | "artifact.write" | "selection.chip" | "composer.draft" | "checks.read" | "checks.contribute" | "sources.read" | "media.read" | "artifact.export" | "ui.fullscreen" | "network.media";
+        why: string;
+    }, {
+        id: "artifact.read" | "artifact.write" | "selection.chip" | "composer.draft" | "checks.read" | "checks.contribute" | "sources.read" | "media.read" | "artifact.export" | "ui.fullscreen" | "network.media";
+        why: string;
+    }>, "many">;
+    limits: z.ZodOptional<z.ZodObject<{
+        bundleBytes: z.ZodNumber;
+    }, "strip", z.ZodTypeAny, {
+        bundleBytes: number;
+    }, {
+        bundleBytes: number;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+    title: string;
+    version: string;
+    entry: string;
+    protocol: number[];
+    kinds: string[];
+    sizes: ("inline" | "pane" | "full")[];
+    permissions: {
+        id: "artifact.read" | "artifact.write" | "selection.chip" | "composer.draft" | "checks.read" | "checks.contribute" | "sources.read" | "media.read" | "artifact.export" | "ui.fullscreen" | "network.media";
+        why: string;
+    }[];
+    panels?: "checks"[] | undefined;
+    limits?: {
+        bundleBytes: number;
+    } | undefined;
+}, {
+    id: string;
+    title: string;
+    version: string;
+    protocol: number[];
+    kinds: string[];
+    sizes: ("inline" | "pane" | "full")[];
+    permissions: {
+        id: "artifact.read" | "artifact.write" | "selection.chip" | "composer.draft" | "checks.read" | "checks.contribute" | "sources.read" | "media.read" | "artifact.export" | "ui.fullscreen" | "network.media";
+        why: string;
+    }[];
+    entry?: string | undefined;
+    panels?: "checks"[] | undefined;
+    limits?: {
+        bundleBytes: number;
+    } | undefined;
+}>;
+export type EditorManifest = z.infer<typeof EditorManifestSchema>;
+export interface EditorRecord {
+    manifest: EditorManifest;
+    /** The full 64-hex sha256 of the entry file, pinned when the registry read it. */
+    sha256: string;
+    bytes: number;
+    /** Absolute path of the entry file. Never on the wire. */
+    entryPath: string;
+    firstParty: boolean;
+    source: 'studio-bundle';
+    enabled: boolean;
+}
+export declare function sha256Of(buf: Buffer): string;
+/**
+ * A path is served from the bundle only if it IS what it looks like: a real directory or a real
+ * file, never a link (codex r1 — a link under `editors/` could point outside the bundle and be
+ * served as first-party). `null` = fine; else the reason.
+ */
+export declare function notRealEntry(path: string, want: 'dir' | 'file'): string | null;
+/** The entry must be ONE self-contained file: nothing loaded from outside it (§5.2; the CSP would block it anyway). */
+export declare function externalReferences(html: string): string[];
+/**
+ * Read the first-party editors a studio bundle ships. A malformed manifest, a missing or oversized
+ * entry, an entry with outside references, or a non-`wicked-*` id is skipped with a reason — never
+ * served half-right.
+ */
+export declare function discoverStudioEditors(studioRoot: string, log?: (msg: string) => void): Array<Omit<EditorRecord, 'enabled'>>;
+export declare class EditorRegistry {
+    private readonly records;
+    private readonly stateFile;
+    private readonly log;
+    constructor(opts?: {
+        stateHome?: string;
+        studioRoot?: string;
+        log?: (msg: string) => void;
+    });
+    private readState;
+    private writeState;
+    /** Where the flags live (diagnostics / tests). */
+    get stateFilePath(): string;
+    list(): EditorRecord[];
+    get(id: string): EditorRecord | null;
+    /** Enable or disable (§6.4: the operator's click). Returns the record, or `null` for an unknown id. */
+    setEnabled(id: string, enabled: boolean): EditorRecord | null;
+    /** The wire view: no paths, the hashed entry URL instead. */
+    static view(r: EditorRecord): EditorView;
+}
+//# sourceMappingURL=registry.d.ts.map

package/dist/editors/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/editors/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAKH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAoB,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAGrE,uEAAuE;AACvE,eAAO,MAAM,sBAAsB,wBAAwB,CAAC;AAC5D,iEAAiE;AACjE,eAAO,MAAM,sBAAsB,YAAY,CAAC;AAChD,qFAAqF;AACrF,eAAO,MAAM,qBAAqB,QAAkB,CAAC;AAErD,eAAO,MAAM,kBAAkB,yMAYqB,CAAC;AAErD,sGAAsG;AACtG,eAAO,MAAM,SAAS,QAAgC,CAAC;AACvD,eAAO,MAAM,cAAc,QAAuC,CAAC;AACnE,wCAAwC;AACxC,eAAO,MAAM,cAAc,QAA8D,CAAC;AAG1F,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAW/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,cAAc,CAAC;IACzB,kFAAkF;IAClF,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,0DAA0D;IAC1D,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,OAAO,CAAC;IACpB,MAAM,EAAE,eAAe,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE5C;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAW9E;AAED,uHAAuH;AACvH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAWzD;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,EAClB,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAC1B,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,CA+DtC;AAOD,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAmC;IAC3D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAwB;gBAEhC,IAAI,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;KAAO;IAW/F,OAAO,CAAC,SAAS;IAWjB,OAAO,CAAC,UAAU;IAUlB,kDAAkD;IAClD,IAAI,aAAa,IAAI,MAAM,CAE1B;IAED,IAAI,IAAI,YAAY,EAAE;IAItB,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI;IAIpC,uGAAuG;IACvG,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,YAAY,GAAG,IAAI;IAS7D,6DAA6D;IAC7D,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,YAAY,GAAG,UAAU;CAmBzC"}

package/dist/editors/registry.js

@@ -0,0 +1,255 @@
+/**
+ * The artifact-editor registry (DES-artifact-editor-plugins §5.2, §8.6, §9.1; EP-C1).
+ *
+ * Two kinds of editor exist in the design; one exists today:
+ *
+ *  - **First-party** editors ship INSIDE studio's bundle (§8.6): `<studio dist>/editors/<id>/editor.json`
+ *    beside the ONE self-contained `index.html` entry. Crew discovers them at boot, pins each entry's
+ *    sha256 and byte size, and serves the entry through the hashed bundle route (`routes.ts`) with
+ *    the §8.2 headers. Their ids are `wicked-*` — the reserved first-party namespace every pack is
+ *    refused (garden `wicked-pack.schema.json`).
+ *  - **Third-party** editors arrive as garden packs (spec 2 `editors[]`). Their install is REFUSED
+ *    until the install-time conformance run ships (EP-C8, LATER): `pack-install.ts` still runs
+ *    garden's fail-closed `pack check` and lists what the operator would be asked to approve, then
+ *    answers 501. Nothing of a pack is ever written by this registry.
+ *
+ * Persisted state is ONE file, `<state home>/daemon-editors.json` — the enable/disable flags the
+ * operator sets in Settings → Editors (§6.4, human-only). It sits under the `daemon-` prefix both
+ * crew's state-home registry and the engine's worker fence already classify (crew#756), so no new
+ * top-level entry is introduced; a pack install (EP-C8) will need a registered `editors/` subtree in
+ * both repos first.
+ */
+import { createHash } from 'node:crypto';
+import { existsSync, lstatSync, mkdirSync, readdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { z } from 'zod';
+import { crewStateHome } from '../projects/state-home.js';
+/** The persisted flags file, under the registered `daemon-` prefix. */
+export const EDITORS_STATE_FILENAME = 'daemon-editors.json';
+/** Where first-party manifests live inside the studio bundle. */
+export const STUDIO_EDITORS_DIRNAME = 'editors';
+/** The host's bundle cap (§8.5); a pack's `limits.bundleBytes` may only be lower. */
+export const HOST_BUNDLE_CAP_BYTES = 5 * 1024 * 1024;
+export const EDITOR_PERMISSIONS = [
+    'artifact.read',
+    'artifact.write',
+    'selection.chip',
+    'composer.draft',
+    'checks.read',
+    'checks.contribute',
+    'sources.read',
+    'media.read',
+    'artifact.export',
+    'ui.fullscreen',
+    'network.media',
+];
+/** Editor ids: lowercase dash-words, ≤ 64 (garden's shape); first-party ones start with `wicked-`. */
+export const EDITOR_ID = /^[a-z0-9]+(?:-[a-z0-9]+)*$/u;
+export const FIRST_PARTY_ID = /^wicked-[a-z0-9]+(?:-[a-z0-9]+)*$/u;
+/** Anchored SemVer (garden's shape). */
+export const EDITOR_VERSION = /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/u;
+const KIND = /^[a-z][a-z0-9-]{1,40}$/u;
+export const EditorManifestSchema = z.object({
+    id: z.string().max(64).regex(EDITOR_ID),
+    title: z.string().min(1).regex(/\S/u),
+    version: z.string().regex(EDITOR_VERSION),
+    protocol: z.array(z.number().int().min(1)).min(1),
+    kinds: z.array(z.string().regex(KIND)).min(1),
+    entry: z.string().regex(/\.html$/u).default('index.html'),
+    sizes: z.array(z.enum(['inline', 'pane', 'full'])).refine((s) => s.includes('inline'), { message: "'inline' is required" }),
+    panels: z.array(z.enum(['checks'])).optional(),
+    permissions: z.array(z.object({ id: z.enum(EDITOR_PERMISSIONS), why: z.string().min(1) })),
+    limits: z.object({ bundleBytes: z.number().int().min(1).max(HOST_BUNDLE_CAP_BYTES) }).optional(),
+});
+export function sha256Of(buf) {
+    return createHash('sha256').update(buf).digest('hex');
+}
+/**
+ * A path is served from the bundle only if it IS what it looks like: a real directory or a real
+ * file, never a link (codex r1 — a link under `editors/` could point outside the bundle and be
+ * served as first-party). `null` = fine; else the reason.
+ */
+export function notRealEntry(path, want) {
+    let meta;
+    try {
+        meta = lstatSync(path);
+    }
+    catch {
+        return 'missing';
+    }
+    if (meta.isSymbolicLink())
+        return 'a symlink (not followed)';
+    if (want === 'dir' && !meta.isDirectory())
+        return 'not a directory';
+    if (want === 'file' && !meta.isFile())
+        return 'not a file';
+    return null;
+}
+/** The entry must be ONE self-contained file: nothing loaded from outside it (§5.2; the CSP would block it anyway). */
+export function externalReferences(html) {
+    const out = [];
+    for (const m of html.matchAll(/<(script|link|iframe)\b[^>]*\b(?:src|href)\s*=\s*["']([^"']+)["']/giu)) {
+        const tag = m[1].toLowerCase();
+        const url = m[2].trim();
+        if (tag === 'link' && !/\brel\s*=\s*["']?stylesheet/iu.test(m[0]))
+            continue;
+        if (/^(?:https?:)?\/\//iu.test(url) || /^[a-z][a-z0-9+.-]*:/iu.test(url) && !/^(?:data|blob|about):/iu.test(url)) {
+            out.push(`${tag} ${url}`);
+        }
+    }
+    return out;
+}
+/**
+ * Read the first-party editors a studio bundle ships. A malformed manifest, a missing or oversized
+ * entry, an entry with outside references, or a non-`wicked-*` id is skipped with a reason — never
+ * served half-right.
+ */
+export function discoverStudioEditors(studioRoot, log) {
+    const dir = join(studioRoot, STUDIO_EDITORS_DIRNAME);
+    if (!existsSync(dir))
+        return [];
+    const out = [];
+    for (const name of readdirSync(dir).sort()) {
+        const dirProblem = notRealEntry(join(dir, name), 'dir');
+        if (dirProblem !== null) {
+            if (dirProblem !== 'not a directory')
+                log?.(`[editors] ${name}: editor directory is ${dirProblem}; skipped`);
+            continue;
+        }
+        const manifestPath = join(dir, name, 'editor.json');
+        if (!existsSync(manifestPath))
+            continue;
+        const manifestProblem = notRealEntry(manifestPath, 'file');
+        if (manifestProblem !== null) {
+            log?.(`[editors] ${name}: editor.json is ${manifestProblem}; skipped`);
+            continue;
+        }
+        let manifest;
+        try {
+            const parsed = EditorManifestSchema.safeParse(JSON.parse(readFileSync(manifestPath, 'utf8')));
+            if (!parsed.success) {
+                log?.(`[editors] ${name}: manifest refused (${parsed.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`).join('; ')})`);
+                continue;
+            }
+            manifest = parsed.data;
+        }
+        catch (err) {
+            log?.(`[editors] ${name}: manifest unreadable (${err instanceof Error ? err.message : String(err)})`);
+            continue;
+        }
+        if (manifest.id !== name || !FIRST_PARTY_ID.test(manifest.id)) {
+            log?.(`[editors] ${name}: a studio-bundle editor must be named wicked-* and live in a directory of its id (got ${manifest.id})`);
+            continue;
+        }
+        if (manifest.entry.includes('/') || manifest.entry.includes('\\') || manifest.entry.startsWith('.')) {
+            log?.(`[editors] ${manifest.id}: entry must be a file beside the manifest (got ${manifest.entry})`);
+            continue;
+        }
+        const entryPath = join(dir, name, manifest.entry);
+        const entryProblem = notRealEntry(entryPath, 'file');
+        if (entryProblem !== null) {
+            log?.(`[editors] ${manifest.id}: entry ${manifest.entry} is ${entryProblem}; skipped`);
+            continue;
+        }
+        let buf;
+        try {
+            buf = readFileSync(entryPath);
+        }
+        catch (err) {
+            log?.(`[editors] ${manifest.id}: entry unreadable (${err instanceof Error ? err.message : String(err)})`);
+            continue;
+        }
+        const cap = manifest.limits?.bundleBytes ?? HOST_BUNDLE_CAP_BYTES;
+        if (buf.byteLength > cap) {
+            log?.(`[editors] ${manifest.id}: entry is ${buf.byteLength} bytes, over its ${cap}-byte cap`);
+            continue;
+        }
+        const outside = externalReferences(buf.toString('utf8'));
+        if (outside.length > 0) {
+            log?.(`[editors] ${manifest.id}: entry loads from outside itself (${outside.slice(0, 3).join(', ')})`);
+            continue;
+        }
+        out.push({ manifest, sha256: sha256Of(buf), bytes: buf.byteLength, entryPath, firstParty: true, source: 'studio-bundle' });
+    }
+    return out;
+}
+export class EditorRegistry {
+    records = new Map();
+    stateFile;
+    log;
+    constructor(opts = {}) {
+        this.stateFile = join(opts.stateHome ?? crewStateHome(), EDITORS_STATE_FILENAME);
+        this.log = opts.log ?? (() => undefined);
+        const state = this.readState();
+        if (opts.studioRoot !== undefined) {
+            for (const r of discoverStudioEditors(opts.studioRoot, this.log)) {
+                this.records.set(r.manifest.id, { ...r, enabled: state.enabled[r.manifest.id] ?? true });
+            }
+        }
+    }
+    readState() {
+        try {
+            const raw = JSON.parse(readFileSync(this.stateFile, 'utf8'));
+            const enabled = {};
+            for (const [k, v] of Object.entries(raw.enabled ?? {}))
+                if (typeof v === 'boolean' && EDITOR_ID.test(k))
+                    enabled[k] = v;
+            return { v: 1, enabled };
+        }
+        catch {
+            return { v: 1, enabled: {} };
+        }
+    }
+    writeState() {
+        const enabled = {};
+        for (const r of this.records.values())
+            if (!r.enabled)
+                enabled[r.manifest.id] = false;
+        const state = { v: 1, enabled };
+        mkdirSync(join(this.stateFile, '..'), { recursive: true });
+        const tmp = `${this.stateFile}.${process.pid}.tmp`;
+        writeFileSync(tmp, `${JSON.stringify(state, null, 2)}\n`, { mode: 0o600 });
+        renameSync(tmp, this.stateFile);
+    }
+    /** Where the flags live (diagnostics / tests). */
+    get stateFilePath() {
+        return this.stateFile;
+    }
+    list() {
+        return [...this.records.values()].sort((a, b) => Number(b.firstParty) - Number(a.firstParty) || a.manifest.id.localeCompare(b.manifest.id));
+    }
+    get(id) {
+        return this.records.get(id) ?? null;
+    }
+    /** Enable or disable (§6.4: the operator's click). Returns the record, or `null` for an unknown id. */
+    setEnabled(id, enabled) {
+        const r = this.records.get(id);
+        if (r === undefined)
+            return null;
+        const next = { ...r, enabled };
+        this.records.set(id, next);
+        this.writeState();
+        return next;
+    }
+    /** The wire view: no paths, the hashed entry URL instead. */
+    static view(r) {
+        const m = r.manifest;
+        return {
+            id: m.id,
+            title: m.title,
+            version: m.version,
+            protocol: [...m.protocol],
+            kinds: [...m.kinds],
+            sizes: [...m.sizes],
+            ...(m.panels !== undefined ? { panels: [...m.panels] } : {}),
+            permissions: m.permissions.map((p) => ({ id: p.id, why: p.why })),
+            sha256: r.sha256,
+            bytes: r.bytes,
+            first_party: r.firstParty,
+            enabled: r.enabled,
+            source: r.source,
+            entry_url: `/api/v1/editors/${encodeURIComponent(m.id)}/${encodeURIComponent(m.version)}/entry`,
+        };
+    }
+}
+//# sourceMappingURL=registry.js.map

package/dist/editors/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/editors/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAE1D,uEAAuE;AACvE,MAAM,CAAC,MAAM,sBAAsB,GAAG,qBAAqB,CAAC;AAC5D,iEAAiE;AACjE,MAAM,CAAC,MAAM,sBAAsB,GAAG,SAAS,CAAC;AAChD,qFAAqF;AACrF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAErD,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,eAAe;IACf,gBAAgB;IAChB,gBAAgB;IAChB,gBAAgB;IAChB,aAAa;IACb,mBAAmB;IACnB,cAAc;IACd,YAAY;IACZ,iBAAiB;IACjB,eAAe;IACf,eAAe;CACmC,CAAC;AAErD,sGAAsG;AACtG,MAAM,CAAC,MAAM,SAAS,GAAG,6BAA6B,CAAC;AACvD,MAAM,CAAC,MAAM,cAAc,GAAG,oCAAoC,CAAC;AACnE,wCAAwC;AACxC,MAAM,CAAC,MAAM,cAAc,GAAG,2DAA2D,CAAC;AAC1F,MAAM,IAAI,GAAG,yBAAyB,CAAC;AAEvC,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC;IACvC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;IACrC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC;IACzC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACjD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;IACzD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC;IAC3H,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC9C,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1F,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CACjG,CAAC,CAAC;AAeH,MAAM,UAAU,QAAQ,CAAC,GAAW;IAClC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,IAAoB;IAC7D,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,IAAI,CAAC,cAAc,EAAE;QAAE,OAAO,0BAA0B,CAAC;IAC7D,IAAI,IAAI,KAAK,KAAK,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;QAAE,OAAO,iBAAiB,CAAC;IACpE,IAAI,IAAI,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;QAAE,OAAO,YAAY,CAAC;IAC3D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,uHAAuH;AACvH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,sEAAsE,CAAC,EAAE,CAAC;QACtG,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC;QACzB,IAAI,GAAG,KAAK,MAAM,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;YAAE,SAAS;QAC7E,IAAI,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACjH,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,UAAkB,EAClB,GAA2B;IAE3B,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,sBAAsB,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,GAAG,GAAyC,EAAE,CAAC;IACrD,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3C,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;QACxD,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACxB,IAAI,UAAU,KAAK,iBAAiB;gBAAE,GAAG,EAAE,CAAC,aAAa,IAAI,yBAAyB,UAAU,WAAW,CAAC,CAAC;YAC7G,SAAS;QACX,CAAC;QACD,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;QACpD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;YAAE,SAAS;QACxC,MAAM,eAAe,GAAG,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAC3D,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;YAC7B,GAAG,EAAE,CAAC,aAAa,IAAI,oBAAoB,eAAe,WAAW,CAAC,CAAC;YACvE,SAAS;QACX,CAAC;QACD,IAAI,QAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;YAC9F,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,GAAG,EAAE,CAAC,aAAa,IAAI,uBAAuB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACjI,SAAS;YACX,CAAC;YACD,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,EAAE,CAAC,aAAa,IAAI,0BAA0B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACtG,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YAC9D,GAAG,EAAE,CAAC,aAAa,IAAI,0FAA0F,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;YACjI,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACpG,GAAG,EAAE,CAAC,aAAa,QAAQ,CAAC,EAAE,mDAAmD,QAAQ,CAAC,KAAK,GAAG,CAAC,CAAC;YACpG,SAAS;QACX,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,YAAY,GAAG,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACrD,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;YAC1B,GAAG,EAAE,CAAC,aAAa,QAAQ,CAAC,EAAE,WAAW,QAAQ,CAAC,KAAK,OAAO,YAAY,WAAW,CAAC,CAAC;YACvF,SAAS;QACX,CAAC;QACD,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,EAAE,CAAC,aAAa,QAAQ,CAAC,EAAE,uBAAuB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC1G,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,WAAW,IAAI,qBAAqB,CAAC;QAClE,IAAI,GAAG,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC;YACzB,GAAG,EAAE,CAAC,aAAa,QAAQ,CAAC,EAAE,cAAc,GAAG,CAAC,UAAU,oBAAoB,GAAG,WAAW,CAAC,CAAC;YAC9F,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACzD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,GAAG,EAAE,CAAC,aAAa,QAAQ,CAAC,EAAE,sCAAsC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACvG,SAAS;QACX,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;IAC7H,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAOD,MAAM,OAAO,cAAc;IACR,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC1C,SAAS,CAAS;IAClB,GAAG,CAAwB;IAE5C,YAAY,OAAiF,EAAE;QAC7F,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,aAAa,EAAE,EAAE,sBAAsB,CAAC,CAAC;QACjF,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC/B,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAClC,KAAK,MAAM,CAAC,IAAI,qBAAqB,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YAC3F,CAAC;QACH,CAAC;IACH,CAAC;IAEO,SAAS;QACf,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAA4B,CAAC;YACxF,MAAM,OAAO,GAA4B,EAAE,CAAC;YAC5C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;gBAAE,IAAI,OAAO,CAAC,KAAK,SAAS,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;oBAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACxH,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAC/B,CAAC;IACH,CAAC;IAEO,UAAU;QAChB,MAAM,OAAO,GAA4B,EAAE,CAAC;QAC5C,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;YAAE,IAAI,CAAC,CAAC,CAAC,OAAO;gBAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC;QACtF,MAAM,KAAK,GAAmB,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;QAChD,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;QACnD,aAAa,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3E,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAClC,CAAC;IAED,kDAAkD;IAClD,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,IAAI;QACF,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9I,CAAC;IAED,GAAG,CAAC,EAAU;QACZ,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC;IACtC,CAAC;IAED,uGAAuG;IACvG,UAAU,CAAC,EAAU,EAAE,OAAgB;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACjC,MAAM,IAAI,GAAG,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC3B,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,6DAA6D;IAC7D,MAAM,CAAC,IAAI,CAAC,CAAe;QACzB,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;QACrB,OAAO;YACL,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;YACzB,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;YACnB,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;YACnB,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YACjE,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,WAAW,EAAE,CAAC,CAAC,UAAU;YACzB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,SAAS,EAAE,mBAAmB,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ;SAChG,CAAC;IACJ,CAAC;CACF"}

package/dist/editors/routes.d.ts

@@ -0,0 +1,46 @@
+/**
+ * `/api/v1/editors` (DES-artifact-editor-plugins §6, §8.2, §9.1; EP-C1).
+ *
+ *  - `GET /editors` (operator+): the registry, as Settings → Editors renders it.
+ *  - `POST /editors {packRoot}` (HUMAN-only): garden's fail-closed gate, the approval list, then 501
+ *    `third_party_editors_not_available` — every pack editor is third-party and EP-C8 has not shipped.
+ *  - `DELETE /editors/:id` (HUMAN-only): a first-party editor ships with studio and cannot be removed
+ *    (409; disable it instead); no other editor can exist before EP-C8 (404).
+ *  - `POST /editors/:id/enabled {enabled}` (HUMAN-only): the operator's switch.
+ *  - `GET /editors/:id/grants?project=` (operator+): the engine's decided set
+ *    (`evaluate_editor_grants`: EDITOR-GRANTS ledger + EDITOR-BUILTIN posture, deny dominates), with
+ *    the token an "allow" would add. The host fetches it before `host.hello` and enforces it.
+ *  - `GET /editors/:id/:version/entry`: the bundle, with exactly the §8.2 headers. The file path comes
+ *    from the registry record — never from the URL — and the bytes are re-hashed on every serve: a
+ *    changed file answers 409 `bundle_hash_mismatch`, never the changed bundle.
+ *
+ * Human-only means `actor.kind === 'human'` (the DC `remember()` check). Under `auth=off` every
+ * same-uid caller is the local human actor — the honest limit §6.4 states; refusing a worker token
+ * is a tripwire, not a control.
+ */
+import type { FastifyInstance, FastifyReply } from 'fastify';
+import type { EditorGrantsResponse } from '../core/types.js';
+import { type PackCheckRunner } from './pack-install.js';
+import { EditorRegistry, type EditorRecord } from './registry.js';
+/** The slice of the adapter the grants route needs; every method optional so a stub never throws. */
+export interface EditorGrantsAdapter {
+    editorGrantsSupported?(): boolean;
+    evaluateEditorGrants?(request: {
+        editorId: string;
+        version: string;
+        sha256: string;
+        permissions: string[];
+        project?: string;
+        firstParty: boolean;
+    }): Promise<EditorGrantsResponse>;
+}
+export interface EditorRoutesDeps {
+    registry: EditorRegistry;
+    adapter: EditorGrantsAdapter;
+    packCheck: PackCheckRunner;
+    log?: (msg: string) => void;
+}
+export declare function registerEditorRoutes(app: FastifyInstance, deps: EditorRoutesDeps): void;
+/** Re-hash on every serve: a bundle that changed on disk is refused, never served. */
+export declare function serveBundle(record: EditorRecord, reply: FastifyReply, log?: (msg: string) => void): FastifyReply;
+//# sourceMappingURL=routes.d.ts.map

package/dist/editors/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/editors/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAkB,MAAM,SAAS,CAAC;AAI7E,OAAO,KAAK,EAAS,oBAAoB,EAAuB,MAAM,kBAAkB,CAAC;AAEzF,OAAO,EAAwC,KAAK,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAC/F,OAAO,EAA6B,cAAc,EAAgB,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AAI3G,qGAAqG;AACrG,MAAM,WAAW,mBAAmB;IAClC,qBAAqB,CAAC,IAAI,OAAO,CAAC;IAClC,oBAAoB,CAAC,CAAC,OAAO,EAAE;QAC7B,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,EAAE,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,OAAO,CAAC;KACrB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,cAAc,CAAC;IACzB,OAAO,EAAE,mBAAmB,CAAC;IAC7B,SAAS,EAAE,eAAe,CAAC;IAC3B,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,GAAG,IAAI,CA2HvF;AAED,sFAAsF;AACtF,wBAAgB,WAAW,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAAG,YAAY,CAsBhH"}