wunderland 0.72.2 → 0.81.0

package/dist/runtime/tools/ToolStreamProcessor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ToolStreamProcessor.d.ts","sourceRoot":"","sources":["../../../src/runtime/tools/ToolStreamProcessor.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAC3E,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,8CAA8C,CAAC;AAC/F,OAAO,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAgCzE;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,yBAAyB;IACxC,6EAA6E;IAC7E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kEAAkE;IAClE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,wDAAwD;IACxD,KAAK,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACzC,4DAA4D;IAC5D,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACnC,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1C,4EAA4E;IAC5E,WAAW,CAAC,EAAE,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACnD,mEAAmE;IACnE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,kEAAkE;IAClE,SAAS,EAAE,MAAM,CAAC;IAClB,8DAA8D;IAC9D,0BAA0B,EAAE,OAAO,CAAC;IACpC,uDAAuD;IACvD,gBAAgB,CAAC,EAAE,yBAAyB,CAAC;IAC7C,oEAAoE;IACpE,aAAa,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACvF,mFAAmF;IACnF,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE;QACrB,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,KAAK,CAAC;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,cAAc,EAAE,OAAO,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAAE,CAAC,CAAC;KAChG,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACvB,wEAAwE;IACxE,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACzE,kEAAkE;IAClE,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE;QACpB,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9B,OAAO,EAAE,OAAO,CAAC;QACjB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;KACpB,KAAK,IAAI,CAAC;IACX,sEAAsE;IACtE,oBAAoB,CAAC,EAAE,0BAA0B,CAAC;IAClD,gDAAgD;IAChD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAC7B,uEAAuE;IACvE,UAAU,CAAC,EAAE,CAAC,YAAY,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,KAAK,IAAI,CAAC;IACrE,8DAA8D;IAC9D,SAAS,CAAC,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3C,+DAA+D;IAC/D,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC;;;;OAIG;IACH,eAAe,CAAC,EAAE,WAAW,GAAG,aAAa,CAAC;IAC9C,gFAAgF;IAChF,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,2DAA2D;IAC3D,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,0DAA0D;IAC1D,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE;QACtB,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,KAAK,IAAI,CAAC;IACX;;;;;;;;;;OAUG;IACH,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAID;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8EG;AACH,wBAAuB,qBAAqB,CAC1C,IAAI,EAAE,yBAAyB,GAC9B,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CA0V3C"}

package/dist/runtime/tools/ToolStreamProcessor.js

@@ -0,0 +1,410 @@
+// @ts-nocheck
+/**
+ * @fileoverview Streaming tool-call parsing and SSE chunk assembly.
+ *
+ * Extracted from `tool-calling.ts` to isolate the streaming-specific
+ * logic (SSE line iteration, token yielding, multi-round streaming loop)
+ * from the non-streaming tool-calling loop and the shared authorization
+ * layer.
+ *
+ * The main export is {@link streamToolCallingTurn}, an async generator
+ * that yields individual text tokens as they arrive from the LLM streaming
+ * API, enabling real-time TTS playback.
+ *
+ * @module wunderland/runtime/ToolStreamProcessor
+ */
+import { getBooleanProp, getStringProp, normalizeToolFailureMode, maybeConfigureGuardrailsForAgent, getSecurityPipeline, createAuthorizationManager, streamingOpenaiChatWithTools, parseProviderId, buildStrictToolNameError, shouldLogRewrite, } from './tool-helpers.js';
+import { buildToolDefsFromMapping, buildToolFunctionNameMapping, formatToolNameRewriteSummary, resolveStrictToolNames, resolveToolMapKeyFromFunctionName, sanitizeToolDefsForProvider, } from './tool-function-names.js';
+import { wrapStreamingLLMAsGenerator } from '../execution/llm-stream-adapter.js';
+import { runToolCallingTurn } from './tool-calling.js';
+import { authorizeToolCall, executeWithGuardrails, buildToolResultPayload, } from './ToolApprovalHandler.js';
+// ── Streaming variant ──────────────────────────────────────────────────────
+/**
+ * Streaming variant of `runToolCallingTurn`.
+ *
+ * Yields individual text tokens as they arrive from the LLM streaming API,
+ * enabling real-time TTS playback (~500ms first-token latency instead of
+ * waiting for the full LLM response). Tool-call rounds are handled
+ * identically to the non-streaming variant: tool execution blocks, then
+ * the next LLM round resumes streaming.
+ *
+ * ## Multi-round streaming + blocking tool execution
+ *
+ * The outer loop runs up to `opts.maxRounds` LLM round-trips:
+ *
+ * 1. **Stream phase** -- Send the conversation to the LLM with
+ *    `stream: true` and yield text tokens as they arrive via SSE. Tool-call
+ *    fragments are accumulated silently by `wrapStreamingLLMAsGenerator`.
+ * 2. **Tool phase** (blocking) -- If the model's `finish_reason` is
+ *    `'tool_calls'`, execute each requested tool synchronously. Tool
+ *    results are appended to `opts.messages` as `role: 'tool'` messages.
+ * 3. **Next round** -- Loop back to step 1 with the updated conversation
+ *    history, allowing the model to incorporate tool results and stream
+ *    more text or request additional tools.
+ *
+ * The generator terminates when the model finishes with text only
+ * (`finish_reason: 'stop'`), the abort signal fires, or the round limit
+ * is reached.
+ *
+ * ## AbortSignal integration
+ *
+ * The optional `opts.signal` is wired through three layers:
+ * - **Outer loop**: checked at the start of each round and after tool execution.
+ * - **SSE fetch**: passed to `fetch()` so the HTTP connection is torn down
+ *   immediately on abort, stopping token generation at the provider.
+ * - **Token iteration**: checked between each yielded token so the generator
+ *   exits promptly after abort.
+ *
+ * This triple-layer cancellation ensures that voice pipeline barge-in stops
+ * the LLM within one event-loop tick of the abort signal.
+ *
+ * ## Provider fallback
+ *
+ * For providers that do not support SSE streaming (Ollama, Anthropic via
+ * the Messages API), this automatically falls back to the non-streaming
+ * `runToolCallingTurn` and post-splits the complete response into
+ * word-boundary chunks so the caller still receives an incremental token
+ * stream.
+ *
+ * @param opts - Configuration for the streaming tool-calling turn.
+ * @yields Individual text token strings (typically 1-4 words each).
+ * @returns The full accumulated reply text after all rounds complete.
+ *
+ * @example
+ * ```ts
+ * const controller = new AbortController();
+ * const gen = streamToolCallingTurn({
+ *   providerId: 'openai',
+ *   apiKey: process.env.OPENAI_API_KEY!,
+ *   model: 'gpt-4o-mini',
+ *   messages: [{ role: 'user', content: 'Hello' }],
+ *   toolMap: myToolMap,
+ *   toolContext: {},
+ *   maxRounds: 8,
+ *   dangerouslySkipPermissions: true,
+ *   askPermission: async () => true,
+ *   signal: controller.signal,
+ * });
+ *
+ * let result = await gen.next();
+ * while (!result.done) {
+ *   ttsEngine.feed(result.value); // stream to TTS immediately
+ *   result = await gen.next();
+ * }
+ * const fullReply = result.value;
+ * ```
+ *
+ * @see {@link runToolCallingTurn} for the non-streaming variant.
+ * @see {@link wrapStreamingLLMAsGenerator} for the SSE-to-generator adapter.
+ * @see {@link streamingOpenaiChatWithTools} for the HTTP streaming layer.
+ */
+export async function* streamToolCallingTurn(opts) {
+    // Determine whether we can use true streaming for this provider.
+    const providerIdRaw = typeof opts.providerId === 'string' ? opts.providerId.trim() : '';
+    const providerIdParsed = parseProviderId(providerIdRaw);
+    const providerId = providerIdParsed ?? 'openai';
+    // Only OpenAI-compatible endpoints support SSE streaming in our stack.
+    // Ollama, Anthropic, and Gemini use different protocols — fall back to
+    // non-streaming with post-split chunking for those providers.
+    const canStream = providerId === 'openai' || providerId === 'openrouter';
+    if (!canStream) {
+        // Fallback: run the blocking variant, then post-split into word chunks.
+        const fullReply = await runToolCallingTurn({
+            ...opts,
+            // Strip the signal — runToolCallingTurn does not support it.
+        });
+        if (fullReply) {
+            const chunks = fullReply.match(/\S+\s*/g) ?? [fullReply];
+            for (const chunk of chunks) {
+                if (opts.signal?.aborted)
+                    break;
+                yield chunk;
+            }
+        }
+        return fullReply;
+    }
+    // --- True streaming path (OpenAI / OpenRouter) ---
+    const rounds = opts.maxRounds > 0 ? opts.maxRounds : 8;
+    const strictToolNames = resolveStrictToolNames(opts.strictToolNames ?? getBooleanProp(opts.toolContext, 'strictToolNames'));
+    const loggedRewriteEvents = new Set();
+    const shouldWrapToolOutputs = (() => {
+        const v = getBooleanProp(opts.toolContext, 'wrapToolOutputs');
+        return typeof v === 'boolean' ? v : true;
+    })();
+    const toolFailureMode = normalizeToolFailureMode(opts.toolFailureMode ?? getStringProp(opts.toolContext, 'toolFailureMode'), 'fail_open');
+    const failClosedOnToolFailure = toolFailureMode === 'fail_closed';
+    // Ensure folder-level sandboxing is always configured.
+    try {
+        maybeConfigureGuardrailsForAgent(opts.toolContext);
+    }
+    catch { /* non-fatal */ }
+    // Content security pipeline (pre-LLM input check).
+    const contentPipeline = getSecurityPipeline();
+    if (contentPipeline) {
+        try {
+            const lastMsg = opts.messages[opts.messages.length - 1];
+            const userText = lastMsg?.role === 'user' && typeof lastMsg.content === 'string'
+                ? lastMsg.content
+                : undefined;
+            if (userText) {
+                contentPipeline.reset();
+                const inputResult = await contentPipeline.evaluateInput({
+                    input: { textInput: userText },
+                });
+                if (inputResult?.action === 'block') {
+                    const blockReason = inputResult.metadata?.reason ??
+                        inputResult.metadata?.explanation ??
+                        'Input blocked by security pipeline.';
+                    const blockMsg = `I'm unable to process that request. ${blockReason}`;
+                    opts.messages.push({ role: 'assistant', content: blockMsg });
+                    yield blockMsg;
+                    return blockMsg;
+                }
+            }
+        }
+        catch { /* non-fatal */ }
+    }
+    const authManager = opts.authorizationManager ?? createAuthorizationManager({
+        dangerouslySkipPermissions: opts.dangerouslySkipPermissions,
+        stepUpAuthConfig: opts.stepUpAuthConfig,
+        askPermission: opts.askPermission,
+    });
+    let fullText = '';
+    /**
+     * Performs one LLM round with streaming, yielding text tokens as they
+     * arrive. Returns the collected tool calls (empty if the model finished
+     * with text only) and the finish reason.
+     */
+    async function* streamOneRound(toolDefs, signal) {
+        let sseLines;
+        try {
+            sseLines = await streamingOpenaiChatWithTools({
+                apiKey: opts.apiKey,
+                model: opts.model,
+                messages: opts.messages,
+                tools: toolDefs,
+                temperature: 0.2,
+                maxTokens: 1400,
+                baseUrl: opts.baseUrl,
+                fallback: opts.fallback,
+                onFallback: (primaryError, providerName) => {
+                    opts.onFallback?.(primaryError, providerName);
+                },
+                getApiKey: opts.getApiKey,
+                signal,
+            });
+        }
+        catch (err) {
+            // If aborted, return empty result gracefully.
+            if (err instanceof DOMException && err.name === 'AbortError') {
+                return { toolCalls: [], finishReason: 'abort' };
+            }
+            throw err;
+        }
+        const gen = wrapStreamingLLMAsGenerator(sseLines);
+        let iterResult = await gen.next();
+        while (!iterResult.done) {
+            const chunk = iterResult.value;
+            if (chunk.type === 'text_delta' && chunk.content) {
+                yield chunk.content;
+            }
+            // tool_call_request chunks are handled after the loop via the return value.
+            iterResult = await gen.next();
+        }
+        return iterResult.value;
+    }
+    // --- Main multi-round loop ---
+    for (let round = 0; round < rounds; round++) {
+        if (opts.signal?.aborted)
+            break;
+        // Build tool name mapping and defs for this round.
+        const nameMapping = buildToolFunctionNameMapping(opts.toolMap);
+        if (nameMapping.rewrites.length > 0) {
+            const summary = formatToolNameRewriteSummary(nameMapping.rewrites);
+            if (strictToolNames) {
+                throw buildStrictToolNameError('[stream-tool-calling]', summary);
+            }
+            const eventKey = `mapping:${summary}`;
+            if (shouldLogRewrite(loggedRewriteEvents, eventKey)) {
+                console.warn(`[stream-tool-calling] Sanitized tool map function names: ${summary}`);
+            }
+        }
+        const rawToolDefs = opts.getToolDefs
+            ? opts.getToolDefs()
+            : opts.toolDefs ?? buildToolDefsFromMapping(opts.toolMap, nameMapping);
+        const sanitizedDefs = sanitizeToolDefsForProvider(rawToolDefs);
+        if (sanitizedDefs.rewrites.length > 0 && strictToolNames) {
+            const summary = formatToolNameRewriteSummary(sanitizedDefs.rewrites.map((r) => ({
+                sourceName: r.originalName,
+                rewrittenName: r.sanitizedName,
+                reason: r.reason,
+            })));
+            throw buildStrictToolNameError('[stream-tool-calling]', summary);
+        }
+        const toolDefs = sanitizedDefs.toolDefs;
+        // Stream the LLM response, yielding tokens as they arrive.
+        let roundText = '';
+        const roundGen = streamOneRound(toolDefs, opts.signal);
+        let roundResult = await roundGen.next();
+        while (!roundResult.done) {
+            const token = roundResult.value;
+            roundText += token;
+            fullText += token;
+            yield token;
+            roundResult = await roundGen.next();
+        }
+        const { toolCalls, finishReason } = roundResult.value;
+        if (opts.signal?.aborted)
+            break;
+        // No tool calls — model is done generating text.
+        if (toolCalls.length === 0 || finishReason === 'stop' || finishReason === 'abort') {
+            // Strip think tags.
+            let content = fullText.trim();
+            content = content.replace(/<think>[\s\S]*?<\/think>\s*/g, '').trim();
+            content = content.replace(/\*{0,2}<think>[\s\S]*?<\/think>\*{0,2}\s*/g, '').trim();
+            // Content security (post-LLM output check).
+            if (contentPipeline && content) {
+                try {
+                    const outputResult = await contentPipeline.evaluateOutput({
+                        chunk: { finalResponseText: content },
+                    });
+                    if (outputResult?.action === 'block') {
+                        const safeMsg = 'I generated a response but it was blocked by the security pipeline. Please try rephrasing your request.';
+                        opts.messages.push({ role: 'assistant', content: safeMsg });
+                        return safeMsg;
+                    }
+                }
+                catch { /* non-fatal */ }
+            }
+            opts.messages.push({ role: 'assistant', content: content || '(no content)' });
+            return content || '';
+        }
+        // --- Tool calls: push assistant message, execute tools, loop ---
+        const rawToolCallMessages = toolCalls.map((tc) => ({
+            id: tc.id,
+            type: 'function',
+            function: {
+                name: tc.name,
+                arguments: JSON.stringify(tc.arguments),
+            },
+        }));
+        opts.messages.push({
+            role: 'assistant',
+            content: roundText || null,
+            tool_calls: rawToolCallMessages,
+        });
+        // Execute each tool call (blocking — tool execution is not streamed).
+        let earlyReturn = null;
+        for (const tc of toolCalls) {
+            if (opts.signal?.aborted)
+                break;
+            const resolvedToolKey = resolveToolMapKeyFromFunctionName({
+                functionName: tc.name,
+                toolMap: opts.toolMap,
+                mapping: nameMapping,
+                sanitizedAliasByName: sanitizedDefs.aliasBySanitizedName,
+            });
+            const tool = resolvedToolKey ? opts.toolMap.get(resolvedToolKey) : undefined;
+            if (!tool) {
+                opts.messages.push({
+                    role: 'tool',
+                    tool_call_id: tc.id,
+                    content: JSON.stringify({ error: `Tool not found: ${tc.name}` }),
+                });
+                if (failClosedOnToolFailure) {
+                    earlyReturn = `[tool_failure_mode=fail_closed] Tool not found: ${tc.name}.`;
+                    break;
+                }
+                continue;
+            }
+            const toolName = tool.name || resolvedToolKey || tc.name;
+            const args = tc.arguments;
+            if (opts.onToolCall) {
+                try {
+                    opts.onToolCall(tool, args);
+                }
+                catch { /* ignore */ }
+            }
+            // Step-up authorization (delegated to ToolApprovalHandler).
+            const authResult = await authorizeToolCall({
+                tool,
+                toolName,
+                args,
+                callId: tc.id,
+                authManager,
+                toolContext: opts.toolContext,
+                dangerouslySkipPermissions: opts.dangerouslySkipPermissions,
+                askPermission: opts.askPermission,
+                shouldWrapToolOutputs,
+                failClosedOnToolFailure,
+                messages: opts.messages,
+            });
+            if (!authResult.authorized) {
+                if (authResult.earlyReturn) {
+                    earlyReturn = authResult.earlyReturn;
+                    break;
+                }
+                continue;
+            }
+            // Execute the tool with guardrails (delegated to ToolApprovalHandler).
+            const callToolContext = opts.onToolProgress
+                ? { ...opts.toolContext, onToolProgress: (info) => {
+                        try {
+                            opts.onToolProgress({ toolName, ...info });
+                        }
+                        catch { /* ignore */ }
+                    } }
+                : opts.toolContext;
+            const start = Date.now();
+            let result;
+            try {
+                result = await executeWithGuardrails({
+                    tool,
+                    toolName,
+                    resolvedToolKey: resolvedToolKey || tool.name,
+                    args,
+                    callId: tc.id,
+                    toolContext: opts.toolContext,
+                    callToolContext,
+                    hitlApproved: authResult.hitlApproved,
+                    dangerouslySkipPermissions: opts.dangerouslySkipPermissions,
+                    askPermission: opts.askPermission,
+                });
+            }
+            catch (err) {
+                const errMsg = err instanceof Error ? err.message : String(err);
+                result = { success: false, error: `Tool threw: ${errMsg}` };
+            }
+            const durationMs = Math.max(0, Date.now() - start);
+            if (opts.onToolResult) {
+                try {
+                    opts.onToolResult({
+                        toolName,
+                        args,
+                        success: result?.success === true,
+                        error: result?.success ? undefined : (result?.error || 'Tool failed'),
+                        output: result?.success ? result.output : undefined,
+                        durationMs,
+                    });
+                }
+                catch { /* ignore */ }
+            }
+            const content = buildToolResultPayload(result, toolName, tc.id, opts.toolMap, shouldWrapToolOutputs, false);
+            opts.messages.push({ role: 'tool', tool_call_id: tc.id, content });
+            if (!result?.success && failClosedOnToolFailure) {
+                earlyReturn = `[tool_failure_mode=fail_closed] Tool ${toolName} failed: ${result?.error || 'Tool failed'}`;
+                break;
+            }
+        }
+        if (earlyReturn !== null) {
+            opts.messages.push({ role: 'assistant', content: earlyReturn });
+            return earlyReturn;
+        }
+        // Reset per-round text — the next round's text delta will accumulate freshly.
+        roundText = '';
+        // Continue to the next round (tool results are now in messages).
+    }
+    // Exceeded max rounds without a natural stop.
+    return fullText || '';
+}
+//# sourceMappingURL=ToolStreamProcessor.js.map

package/dist/runtime/tools/ToolStreamProcessor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ToolStreamProcessor.js","sourceRoot":"","sources":["../../../src/runtime/tools/ToolStreamProcessor.ts"],"names":[],"mappings":"AAAA,cAAc;AACd;;;;;;;;;;;;;GAaG;AAKH,OAAO,EACL,cAAc,EACd,aAAa,EACb,wBAAwB,EACxB,gCAAgC,EAChC,mBAAmB,EACnB,0BAA0B,EAC1B,4BAA4B,EAC5B,eAAe,EACf,wBAAwB,EACxB,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,wBAAwB,EACxB,4BAA4B,EAC5B,4BAA4B,EAC5B,sBAAsB,EACtB,iCAAiC,EACjC,2BAA2B,GAC5B,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AACjF,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,0BAA0B,CAAC;AAuGlC,8EAA8E;AAE9E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8EG;AACH,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,qBAAqB,CAC1C,IAA+B;IAE/B,iEAAiE;IACjE,MAAM,aAAa,GAAG,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,MAAM,gBAAgB,GAAG,eAAe,CAAC,aAAa,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,gBAAgB,IAAI,QAAQ,CAAC;IAEhD,uEAAuE;IACvE,uEAAuE;IACvE,8DAA8D;IAC9D,MAAM,SAAS,GAAG,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,YAAY,CAAC;IAEzE,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,wEAAwE;QACxE,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC;YACzC,GAAG,IAAI;YACP,6DAA6D;SAC9D,CAAC,CAAC;QACH,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACzD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO;oBAAE,MAAM;gBAChC,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,oDAAoD;IAEpD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,MAAM,eAAe,GAAG,sBAAsB,CAC5C,IAAI,CAAC,eAAe,IAAI,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAC5E,CAAC;IACF,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAU,CAAC;IAE9C,MAAM,qBAAqB,GAAG,CAAC,GAAG,EAAE;QAClC,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;QAC9D,OAAO,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3C,CAAC,CAAC,EAAE,CAAC;IACL,MAAM,eAAe,GAAG,wBAAwB,CAC9C,IAAI,CAAC,eAAe,IAAI,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAC1E,WAAW,CACZ,CAAC;IACF,MAAM,uBAAuB,GAAG,eAAe,KAAK,aAAa,CAAC;IAElE,uDAAuD;IACvD,IAAI,CAAC;QAAC,gCAAgC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;IAErF,mDAAmD;IACnD,MAAM,eAAe,GAAG,mBAAmB,EAAE,CAAC;IAC9C,IAAI,eAAe,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACxD,MAAM,QAAQ,GACZ,OAAO,EAAE,IAAI,KAAK,MAAM,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ;gBAC7D,CAAC,CAAC,OAAO,CAAC,OAAO;gBACjB,CAAC,CAAC,SAAS,CAAC;YAChB,IAAI,QAAQ,EAAE,CAAC;gBACb,eAAe,CAAC,KAAK,EAAE,CAAC;gBACxB,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,aAAa,CAAC;oBACtD,KAAK,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE;iBACxB,CAAC,CAAC;gBACV,IAAI,WAAW,EAAE,MAAM,KAAK,OAAO,EAAE,CAAC;oBACpC,MAAM,WAAW,GACf,WAAW,CAAC,QAAQ,EAAE,MAAM;wBAC5B,WAAW,CAAC,QAAQ,EAAE,WAAW;wBACjC,qCAAqC,CAAC;oBACxC,MAAM,QAAQ,GAAG,uCAAuC,WAAW,EAAE,CAAC;oBACtE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;oBAC7D,MAAM,QAAQ,CAAC;oBACf,OAAO,QAAQ,CAAC;gBAClB,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,oBAAoB,IAAI,0BAA0B,CAAC;QAC1E,0BAA0B,EAAE,IAAI,CAAC,0BAA0B;QAC3D,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,aAAa,EAAE,IAAI,CAAC,aAAa;KAClC,CAAC,CAAC;IAEH,IAAI,QAAQ,GAAG,EAAE,CAAC;IAElB;;;;OAIG;IACH,KAAK,SAAS,CAAC,CAAC,cAAc,CAC5B,QAAwC,EACxC,MAA+B;QAE/B,IAAI,QAA+B,CAAC;QACpC,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,4BAA4B,CAAC;gBAC5C,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,KAAK,EAAE,QAAQ;gBACf,WAAW,EAAE,GAAG;gBAChB,SAAS,EAAE,IAAI;gBACf,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,UAAU,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,EAAE;oBACzC,IAAI,CAAC,UAAU,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;gBAChD,CAAC;gBACD,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,MAAM;aACP,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,8CAA8C;YAC9C,IAAI,GAAG,YAAY,YAAY,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC7D,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;YAClD,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,MAAM,GAAG,GAAG,2BAA2B,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,UAAU,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAClC,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;YAC/B,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBACjD,MAAM,KAAK,CAAC,OAAO,CAAC;YACtB,CAAC;YACD,4EAA4E;YAC5E,UAAU,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAChC,CAAC;QACD,OAAO,UAAU,CAAC,KAAK,CAAC;IAC1B,CAAC;IAED,gCAAgC;IAChC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5C,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO;YAAE,MAAM;QAEhC,mDAAmD;QACnD,MAAM,WAAW,GAAG,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/D,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,MAAM,OAAO,GAAG,4BAA4B,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;YACnE,IAAI,eAAe,EAAE,CAAC;gBACpB,MAAM,wBAAwB,CAAC,uBAAuB,EAAE,OAAO,CAAC,CAAC;YACnE,CAAC;YACD,MAAM,QAAQ,GAAG,WAAW,OAAO,EAAE,CAAC;YACtC,IAAI,gBAAgB,CAAC,mBAAmB,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACpD,OAAO,CAAC,IAAI,CAAC,4DAA4D,OAAO,EAAE,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW;YAClC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE;YACpB,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,wBAAwB,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACzE,MAAM,aAAa,GAAG,2BAA2B,CAAC,WAAW,CAAC,CAAC;QAC/D,IAAI,aAAa,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,eAAe,EAAE,CAAC;YACzD,MAAM,OAAO,GAAG,4BAA4B,CAC1C,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACjC,UAAU,EAAE,CAAC,CAAC,YAAY;gBAC1B,aAAa,EAAE,CAAC,CAAC,aAAa;gBAC9B,MAAM,EAAE,CAAC,CAAC,MAAM;aACjB,CAAC,CAAC,CACJ,CAAC;YACF,MAAM,wBAAwB,CAAC,uBAAuB,EAAE,OAAO,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC;QAExC,2DAA2D;QAC3D,IAAI,SAAS,GAAG,EAAE,CAAC;QACnB,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,WAAW,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACxC,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC;YAChC,SAAS,IAAI,KAAK,CAAC;YACnB,QAAQ,IAAI,KAAK,CAAC;YAClB,MAAM,KAAK,CAAC;YACZ,WAAW,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtC,CAAC;QACD,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC;QAEtD,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO;YAAE,MAAM;QAEhC,iDAAiD;QACjD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,YAAY,KAAK,MAAM,IAAI,YAAY,KAAK,OAAO,EAAE,CAAC;YAClF,oBAAoB;YACpB,IAAI,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC9B,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,8BAA8B,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACrE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAEnF,4CAA4C;YAC5C,IAAI,eAAe,IAAI,OAAO,EAAE,CAAC;gBAC/B,IAAI,CAAC;oBACH,MAAM,YAAY,GAAG,MAAM,eAAe,CAAC,cAAc,CAAC;wBACxD,KAAK,EAAE,EAAE,iBAAiB,EAAE,OAAO,EAAE;qBAC/B,CAAC,CAAC;oBACV,IAAI,YAAY,EAAE,MAAM,KAAK,OAAO,EAAE,CAAC;wBACrC,MAAM,OAAO,GACX,yGAAyG,CAAC;wBAC5G,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;wBAC5D,OAAO,OAAO,CAAC;oBACjB,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;YAC7B,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,CAAC,CAAC;YAC9E,OAAO,OAAO,IAAI,EAAE,CAAC;QACvB,CAAC;QAED,kEAAkE;QAClE,MAAM,mBAAmB,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACjD,EAAE,EAAE,EAAE,CAAC,EAAE;YACT,IAAI,EAAE,UAAmB;YACzB,QAAQ,EAAE;gBACR,IAAI,EAAE,EAAE,CAAC,IAAI;gBACb,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC;aACxC;SACF,CAAC,CAAC,CAAC;QAEJ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YACjB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,SAAS,IAAI,IAAI;YAC1B,UAAU,EAAE,mBAAmB;SAChC,CAAC,CAAC;QAEH,sEAAsE;QACtE,IAAI,WAAW,GAAkB,IAAI,CAAC;QACtC,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO;gBAAE,MAAM;YAEhC,MAAM,eAAe,GAAG,iCAAiC,CAAC;gBACxD,YAAY,EAAE,EAAE,CAAC,IAAI;gBACrB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,OAAO,EAAE,WAAW;gBACpB,oBAAoB,EAAE,aAAa,CAAC,oBAAoB;aACzD,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAE7E,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACjB,IAAI,EAAE,MAAM;oBACZ,YAAY,EAAE,EAAE,CAAC,EAAE;oBACnB,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;iBACjE,CAAC,CAAC;gBACH,IAAI,uBAAuB,EAAE,CAAC;oBAC5B,WAAW,GAAG,mDAAmD,EAAE,CAAC,IAAI,GAAG,CAAC;oBAC5E,MAAM;gBACR,CAAC;gBACD,SAAS;YACX,CAAC;YAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,IAAI,eAAe,IAAI,EAAE,CAAC,IAAI,CAAC;YACzD,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC;YAE1B,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACpB,IAAI,CAAC;oBAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YAC7D,CAAC;YAED,4DAA4D;YAC5D,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC;gBACzC,IAAI;gBACJ,QAAQ;gBACR,IAAI;gBACJ,MAAM,EAAE,EAAE,CAAC,EAAE;gBACb,WAAW;gBACX,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,0BAA0B,EAAE,IAAI,CAAC,0BAA0B;gBAC3D,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,qBAAqB;gBACrB,uBAAuB;gBACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACxB,CAAC,CAAC;YAEH,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;gBAC3B,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;oBAC3B,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;oBACrC,MAAM;gBACR,CAAC;gBACD,SAAS;YACX,CAAC;YAED,uEAAuE;YACvE,MAAM,eAAe,GAA4B,IAAI,CAAC,cAAc;gBAClE,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,cAAc,EAAE,CAAC,IAA2D,EAAE,EAAE;wBACrG,IAAI,CAAC;4BAAC,IAAI,CAAC,cAAe,CAAC,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;wBAAC,CAAC;wBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;oBAC7E,CAAC,EAAE;gBACL,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;YAErB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACzB,IAAI,MAA8D,CAAC;YACnE,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,qBAAqB,CAAC;oBACnC,IAAI;oBACJ,QAAQ;oBACR,eAAe,EAAE,eAAe,IAAI,IAAI,CAAC,IAAI;oBAC7C,IAAI;oBACJ,MAAM,EAAE,EAAE,CAAC,EAAE;oBACb,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,eAAe;oBACf,YAAY,EAAE,UAAU,CAAC,YAAY;oBACrC,0BAA0B,EAAE,IAAI,CAAC,0BAA0B;oBAC3D,aAAa,EAAE,IAAI,CAAC,aAAa;iBAClC,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAChE,MAAM,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,MAAM,EAAE,EAAE,CAAC;YAC9D,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;YACnD,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBACtB,IAAI,CAAC;oBACH,IAAI,CAAC,YAAY,CAAC;wBAChB,QAAQ;wBACR,IAAI;wBACJ,OAAO,EAAE,MAAM,EAAE,OAAO,KAAK,IAAI;wBACjC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,IAAI,aAAa,CAAC;wBACrE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;wBACnD,UAAU;qBACX,CAAC,CAAC;gBACL,CAAC;gBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YAC1B,CAAC;YAED,MAAM,OAAO,GAAG,sBAAsB,CACpC,MAAM,EACN,QAAQ,EACR,EAAE,CAAC,EAAE,EACL,IAAI,CAAC,OAAO,EACZ,qBAAqB,EACrB,KAAK,CACN,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAEnE,IAAI,CAAC,MAAM,EAAE,OAAO,IAAI,uBAAuB,EAAE,CAAC;gBAChD,WAAW,GAAG,wCAAwC,QAAQ,YAAY,MAAM,EAAE,KAAK,IAAI,aAAa,EAAE,CAAC;gBAC3G,MAAM;YACR,CAAC;QACH,CAAC;QAED,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACzB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;YAChE,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,8EAA8E;QAC9E,SAAS,GAAG,EAAE,CAAC;QACf,iEAAiE;IACnE,CAAC;IAED,8CAA8C;IAC9C,OAAO,QAAQ,IAAI,EAAE,CAAC;AACxB,CAAC"}

package/dist/runtime/tools/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime/tools/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,0BAA0B,CAAC;AACzC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,0BAA0B,CAAC"}

package/dist/runtime/tools/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/runtime/tools/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,0BAA0B,CAAC;AACzC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,0BAA0B,CAAC"}

package/dist/runtime/tools/ollama-options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ollama-options.d.ts","sourceRoot":"","sources":["../../../src/runtime/tools/ollama-options.ts"],"names":[],"mappings":"AACA,MAAM,MAAM,mBAAmB,GAAG;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,wBAAgB,yBAAyB,CACvC,MAAM,CAAC,EAAE,mBAAmB,GAC3B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAYrC"}

package/dist/runtime/tools/ollama-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ollama-options.js","sourceRoot":"","sources":["../../../src/runtime/tools/ollama-options.ts"],"names":[],"mappings":"AAMA,MAAM,UAAU,yBAAyB,CACvC,MAA4B;IAE5B,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAE9B,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7F,OAAO,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;IACrC,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACxE,OAAO,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;IACrC,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/D,CAAC"}

package/dist/runtime/tools/policy.d.ts

@@ -0,0 +1,98 @@
+/**
+ * @fileoverview Runtime policy helpers for Wunderland.
+ *
+ * Normalizes agent.config.json policy fields (tier/permissions/modes) and
+ * filters tool exposure accordingly.
+ *
+ * This is intentionally conservative: permission sets and tool access profiles
+ * are enforced even in autonomous mode. "Autonomous" only affects approvals,
+ * not what the agent is allowed to do.
+ */
+import { type GranularPermissions, type PermissionSetName, type SecurityTierName } from '../../security/SecurityTiers.js';
+import { type ToolAccessProfileName } from '../../autonomy/social/ToolAccessProfiles.js';
+import type { FolderPermissionConfig } from '../../security/FolderPermissions.js';
+import type { ToolInstance } from './tool-calling.js';
+export type ExecutionMode = 'autonomous' | 'human-all' | 'human-dangerous';
+/**
+ * Resolved guardrail pack overrides from `agent.config.json` `security.guardrailPacks`.
+ * Each key toggles a specific guardrail extension pack on/off, overriding tier defaults.
+ */
+export interface GuardrailPackOverrides {
+    /** Four-tier PII detection and redaction. */
+    piiRedaction?: boolean;
+    /** ML-based toxicity, injection, and jailbreak detection. */
+    mlClassifiers?: boolean;
+    /** Embedding-based topic enforcement + drift detection. */
+    topicality?: boolean;
+    /** OWASP Top 10 code safety scanning. */
+    codeSafety?: boolean;
+    /** RAG-grounded hallucination detection via NLI. */
+    groundingGuard?: boolean;
+}
+/**
+ * Fully normalized runtime policy resolved from agent config + CLI flags.
+ *
+ * This structure is passed to every runtime subsystem (tool filtering,
+ * authorization, system prompt building, guardrails) so they all use a
+ * single, consistent set of resolved values.
+ */
+export type NormalizedRuntimePolicy = {
+    securityTier: SecurityTierName;
+    permissionSet: PermissionSetName;
+    toolAccessProfile: ToolAccessProfileName;
+    executionMode: ExecutionMode;
+    wrapToolOutputs: boolean;
+    folderPermissions?: FolderPermissionConfig;
+    /**
+     * Per-agent guardrail pack overrides (from `security.guardrailPacks`).
+     * When present, merged on top of the tier's default pack config.
+     */
+    guardrailPackOverrides?: GuardrailPackOverrides;
+    /**
+     * When `true`, all guardrail extension packs are disabled.
+     * Equivalent to `--no-guardrails` CLI flag.
+     */
+    disableGuardrailPacks?: boolean;
+    /**
+     * Explicit list of pack short-names to enable (overrides tier defaults).
+     * Equivalent to `--guardrails=pii,code-safety` CLI flag.
+     */
+    enableOnlyGuardrailPacks?: string[];
+};
+export declare function normalizeSecurityTier(raw: unknown): SecurityTierName;
+export declare function normalizePermissionSet(raw: unknown, tier: SecurityTierName): PermissionSetName;
+export declare function normalizeExecutionMode(raw: unknown, tier: SecurityTierName): ExecutionMode;
+export declare function normalizeToolAccessProfile(raw: unknown): ToolAccessProfileName;
+export declare function normalizeWrapToolOutputs(raw: unknown, tier: SecurityTierName): boolean;
+export declare function normalizeFolderPermissions(raw: unknown): FolderPermissionConfig | undefined;
+/**
+ * Extracts guardrail pack overrides from `security.guardrailPacks` in agent config.
+ *
+ * @param raw - The `security.guardrailPacks` value from agent.config.json.
+ * @returns Normalized overrides, or `undefined` if none specified.
+ */
+export declare function normalizeGuardrailPackOverrides(raw: unknown): GuardrailPackOverrides | undefined;
+/**
+ * Normalizes the full runtime policy from agent config (merged with CLI overrides).
+ *
+ * This is the single source of truth for all runtime security decisions.
+ * CLI flags like `--security-tier`, `--no-guardrails`, and `--guardrails=...`
+ * should be merged into the `agentConfig` object before calling this function.
+ *
+ * @param agentConfig - Merged agent config object (config file + CLI overrides).
+ * @returns Fully normalized runtime policy.
+ */
+export declare function normalizeRuntimePolicy(agentConfig: any): NormalizedRuntimePolicy;
+export declare function getPermissionsForSet(name: PermissionSetName): GranularPermissions;
+export declare function filterToolMapByPolicy(opts: {
+    toolMap: Map<string, ToolInstance>;
+    toolAccessProfile: ToolAccessProfileName;
+    permissions: GranularPermissions;
+}): {
+    toolMap: Map<string, ToolInstance>;
+    dropped: Array<{
+        tool: string;
+        reason: string;
+    }>;
+};
+//# sourceMappingURL=policy.d.ts.map

package/dist/runtime/tools/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../../src/runtime/tools/policy.ts"],"names":[],"mappings":"AACA;;;;;;;;;GASG;AAEH,OAAO,EAGL,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACtB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAKL,KAAK,qBAAqB,EAC3B,MAAM,6CAA6C,CAAC;AACrD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD,MAAM,MAAM,aAAa,GAAG,YAAY,GAAG,WAAW,GAAG,iBAAiB,CAAC;AAE3E;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,6CAA6C;IAC7C,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,6DAA6D;IAC7D,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,2DAA2D;IAC3D,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,yCAAyC;IACzC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,oDAAoD;IACpD,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED;;;;;;GAMG;AACH,MAAM,MAAM,uBAAuB,GAAG;IACpC,YAAY,EAAE,gBAAgB,CAAC;IAC/B,aAAa,EAAE,iBAAiB,CAAC;IACjC,iBAAiB,EAAE,qBAAqB,CAAC;IACzC,aAAa,EAAE,aAAa,CAAC;IAC7B,eAAe,EAAE,OAAO,CAAC;IACzB,iBAAiB,CAAC,EAAE,sBAAsB,CAAC;IAC3C;;;OAGG;IACH,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;IAChD;;;OAGG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC;;;OAGG;IACH,wBAAwB,CAAC,EAAE,MAAM,EAAE,CAAC;CACrC,CAAC;AAEF,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,GAAG,gBAAgB,CAIpE;AAED,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,gBAAgB,GACrB,iBAAiB,CAKnB;AAED,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,gBAAgB,GACrB,aAAa,CAQf;AAED,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,OAAO,GAAG,qBAAqB,CAI9E;AAED,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAItF;AAED,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,OAAO,GAAG,sBAAsB,GAAG,SAAS,CAG3F;AAED;;;;;GAKG;AACH,wBAAgB,+BAA+B,CAAC,GAAG,EAAE,OAAO,GAAG,sBAAsB,GAAG,SAAS,CAYhG;AAED;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,GAAG,GAAG,uBAAuB,CA2BhF;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,iBAAiB,GAAG,mBAAmB,CAOjF;AA8CD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE;IAC1C,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACnC,iBAAiB,EAAE,qBAAqB,CAAC;IACzC,WAAW,EAAE,mBAAmB,CAAC;CAClC,GAAG;IAAE,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAAC,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,CAuF3F"}