@amsterdamdatalabs/adl-agent-control-linux-x64 0.1.35 → 0.1.37

package/packages/agent-skills/dist/deploy.d.ts

@@ -27,5 +27,12 @@ export interface DeploySkillsResult {
      */
     readonly retiredRemovals: readonly string[];
 }
+/**
+ * True when `skillDirAbs` holds exactly the asset skill's files — same
+ * relative paths, same bytes, nothing extra. Such a folder carries no user
+ * content, so deploy may adopt it (Tarun, 2026-10-01).
+ */
+export declare function folderIdenticalToAsset(skillDirAbs: string, assetDirAbs: string, sourceFiles: readonly string[]): boolean;
+export declare function removeEmptyParents(root: string, dir: string): void;
 export declare function deploySkills(options: DeploySkillsOptions): DeploySkillsResult;
 //# sourceMappingURL=deploy.d.ts.map

package/packages/agent-skills/dist/deploy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../src/deploy.ts"],"names":[],"mappings":"AA+BA,OAAO,EAAE,KAAK,aAAa,EAA+B,MAAM,cAAc,CAAC;AAI/E,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,6KAA6K;IAC7K,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC;IACjC,+JAA+J;IAC/J,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,SAAS,aAAa,EAAE,CAAC;IAC7C,8JAA8J;IAC9J,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B;;;;OAIG;IACH,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7C;AA+BD,wBAAgB,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,kBAAkB,CAiK7E"}
+{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../src/deploy.ts"],"names":[],"mappings":"AAiCA,OAAO,EAAE,KAAK,aAAa,EAA+B,MAAM,cAAc,CAAC;AAI/E,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,6KAA6K;IAC7K,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC;IACjC,+JAA+J;IAC/J,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,SAAS,aAAa,EAAE,CAAC;IAC7C,8JAA8J;IAC9J,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B;;;;OAIG;IACH,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7C;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CASxH;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAWlE;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,kBAAkB,CA2M7E"}

package/packages/agent-skills/dist/deploy.js

@@ -17,7 +17,9 @@
  * When `profile.legacyLock` names a lock the OLD repo-controls engine
  * left behind, a same-name folder it fully wrote (per legacy-lock.ts) is
  * taken over on sight rather than reported as a conflict — see
- * legacy-lock.ts for the exact ownership rule and lock rewrite.
+ * legacy-lock.ts for the exact ownership rule and lock rewrite. A legacy
+ * folder whose skill retired from assets/ is removed under the same
+ * ownership rule (never a hand-modified folder).
  *
  * Fails loud: assets/target validation, an invalid deploy profile, an
  * invalid adl-config.toml subset, or an unwritable target all throw. There
@@ -37,7 +39,7 @@ import { listSourceSkillNames } from "./skill-meta.js";
  * relative paths, same bytes, nothing extra. Such a folder carries no user
  * content, so deploy may adopt it (Tarun, 2026-10-01).
  */
-function folderIdenticalToAsset(skillDirAbs, assetDirAbs, sourceFiles) {
+export function folderIdenticalToAsset(skillDirAbs, assetDirAbs, sourceFiles) {
     let targetFiles;
     try {
         targetFiles = walkFiles(skillDirAbs);
@@ -49,7 +51,7 @@ function folderIdenticalToAsset(skillDirAbs, assetDirAbs, sourceFiles) {
         return false;
     return sourceFiles.every((file) => Buffer.compare(readFileSync(join(skillDirAbs, file)), readFileSync(join(assetDirAbs, file))) === 0);
 }
-function removeEmptyParents(root, dir) {
+export function removeEmptyParents(root, dir) {
     let current = dir;
     while (current !== root && current.startsWith(root)) {
         if (!existsSync(current)) {
@@ -91,7 +93,45 @@ export function deploySkills(options) {
     // conflict, with a reason naming what disqualified it.
     const takeoverFiles = new Set();
     const takeoverConflictReasons = new Map();
+    /** `${folder}/${skill}` in a retired folder that the legacy lock wrote and assets/ retired — removed by the retired-folder cleanup below. */
+    const legacyRetiredInRetired = new Set();
     if (legacyLock !== null) {
+        // Legacy retirement: a folder the old engine fully wrote (per the
+        // lock) whose skill no longer ships in assets/ is folded into
+        // takeoverFiles so the removal pass below deletes it — the header's
+        // "dropped from assets/ is removed" promise extended to old-engine
+        // folders. A repo-subset exclusion keeps the folder (the subset only
+        // limits what THIS deploy writes, it does not retract skills assets
+        // still ships). A folder failing the ownership check (hand-modified,
+        // extra file) is left untouched: it is becoming user-owned, the same
+        // disposition as the takeover conflict case. In retired folders there
+        // is no takeover pass: the folder is only recorded, and the
+        // retired-folder cleanup removes it under the same conditions.
+        const legacyRetired = (folder, foldIntoTakeover) => {
+            const prefix = `${folder}/`;
+            for (const skill of new Set([...legacyLock.files.keys()]
+                .filter((relPath) => relPath.startsWith(prefix))
+                .map((relPath) => relPath.slice(prefix.length).split("/", 1)[0]))) {
+                if (availableSkills.includes(skill))
+                    continue; // still shipped — selected or subset path owns it
+                const skillDirRel = `${folder}/${skill}`;
+                const skillDirAbs = join(targetRepo, skillDirRel);
+                if (!existsSync(skillDirAbs))
+                    continue;
+                if (manifest.files.some((file) => file.startsWith(`${skillDirRel}/`)))
+                    continue; // already ours
+                const check = checkLegacyOwnership(legacyLock, targetRepo, skillDirRel, skillDirAbs);
+                if (!check.owned)
+                    continue;
+                if (foldIntoTakeover) {
+                    for (const relFile of walkFiles(skillDirAbs))
+                        takeoverFiles.add(`${skillDirRel}/${relFile}`);
+                }
+                else {
+                    legacyRetiredInRetired.add(skillDirRel);
+                }
+            }
+        };
         for (const surface of profile.surfaces) {
             for (const skill of selectedSkills) {
                 const skillDirRel = `${surface.folder}/${skill}`;
@@ -109,7 +149,10 @@ export function deploySkills(options) {
                     takeoverConflictReasons.set(skillDirRel, check.reason);
                 }
             }
+            legacyRetired(surface.folder, true);
         }
+        for (const folder of retiredFolders(profile))
+            legacyRetired(folder, false);
     }
     const manifestFiles = new Set([...manifest.files, ...takeoverFiles]);
     const adopted = [];
@@ -195,8 +238,12 @@ export function deploySkills(options) {
         if (!existsSync(folderAbs))
             continue;
         for (const name of directoryNames(folderAbs)) {
-            if (!availableSkillSet.has(name))
-                continue; // not ours to manage — left byte-for-byte
+            // Ours to remove when the skill still ships in assets/ (a stale
+            // duplicate of a live skill) or the legacy lock proves the old
+            // engine wrote this copy of a now-retired skill. Anything else was
+            // never this package's to manage — left byte-for-byte.
+            if (!availableSkillSet.has(name) && !legacyRetiredInRetired.has(`${folder}/${name}`))
+                continue;
             if (!dryRun)
                 removeDirRecursive(join(folderAbs, name));
             retiredRemovals.push(`${folder}/${name}`);

package/packages/agent-skills/dist/deploy.js.map

@@ -1 +1 @@
-{"version":3,"file":"deploy.js","sourceRoot":"","sources":["../src/deploy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC3H,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC9E,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAC/F,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC7E,OAAO,EAAsB,WAAW,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC/E,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAiCvD;;;;GAIG;AACH,SAAS,sBAAsB,CAAC,WAAmB,EAAE,WAAmB,EAAE,WAA8B;IACtG,IAAI,WAA8B,CAAC;IACnC,IAAI,CAAC;QACH,WAAW,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC,CAAC,oGAAoG;IACpH,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACtH,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,EAAE,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AACzI,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,GAAW;IACnD,IAAI,OAAO,GAAG,GAAG,CAAC;IAClB,OAAO,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACzB,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;YAC3B,SAAS;QACX,CAAC;QACD,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO;QAC5C,SAAS,CAAC,OAAO,CAAC,CAAC;QACnB,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAA4B;IACvD,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;IAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC;IAEvC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,4CAA4C,SAAS,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,qCAAqC,UAAU,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,WAAW,EAAE,CAAC;IACjD,MAAM,eAAe,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IACxD,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,SAAS,EAAE,CAAC,CAAC;IAE/G,MAAM,SAAS,GAAG,qBAAqB,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IACrE,IAAI,CAAC,SAAS,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAE7D,MAAM,QAAQ,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,cAAc,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAElE,0EAA0E;IAC1E,oEAAoE;IACpE,uEAAuE;IACvE,uEAAuE;IACvE,qEAAqE;IACrE,qEAAqE;IACrE,qEAAqE;IACrE,uDAAuD;IACvD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IACxC,MAAM,uBAAuB,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1D,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACvC,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;gBACnC,MAAM,WAAW,GAAG,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC;gBACjD,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;gBAClD,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;oBAAE,SAAS;gBACvC,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,WAAW,GAAG,CAAC,CAAC;oBAAE,SAAS,CAAC,eAAe;gBAEhG,MAAM,KAAK,GAAG,oBAAoB,CAAC,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;gBACrF,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;oBAChB,KAAK,MAAM,OAAO,IAAI,SAAS,CAAC,WAAW,CAAC;wBAAE,aAAa,CAAC,GAAG,CAAC,GAAG,WAAW,IAAI,OAAO,EAAE,CAAC,CAAC;gBAC/F,CAAC;qBAAM,CAAC;oBACN,uBAAuB,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,MAAO,CAAC,CAAC;gBAC1D,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC;IACrE,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAA6B,CAAC;IAChE,KAAK,MAAM,KAAK,IAAI,cAAc;QAAE,kBAAkB,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAErG,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,SAAS,GAAoB,EAAE,CAAC;IACtC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IAEpC,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACvC,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;YACnC,MAAM,WAAW,GAAG,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC;YACjD,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;YAClD,MAAM,cAAc,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;YAC/C,IAAI,WAAW,GAAG,CAAC,GAAG,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,WAAW,GAAG,CAAC,CAAC,CAAC;YAExF,uEAAuE;YACvE,gEAAgE;YAChE,yEAAyE;YACzE,IAAI,cAAc,IAAI,CAAC,WAAW,IAAI,sBAAsB,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;gBACvI,WAAW,GAAG,IAAI,CAAC;gBACnB,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC5B,CAAC;YAED,IAAI,cAAc,IAAI,CAAC,WAAW,EAAE,CAAC;gBACnC,SAAS,CAAC,IAAI,CAAC;oBACb,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,KAAK;oBACL,MAAM,EACJ,uBAAuB,CAAC,GAAG,CAAC,WAAW,CAAC;wBACxC,mFAAmF;iBACtF,CAAC,CAAC;gBACH,SAAS,CAAC,6DAA6D;YACzE,CAAC;YAED,KAAK,MAAM,OAAO,IAAI,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC1D,MAAM,SAAS,GAAG,GAAG,WAAW,IAAI,OAAO,EAAE,CAAC;gBAC9C,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBACzB,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;gBAC9C,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;gBAC9D,IAAI,UAAU,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;oBACpH,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBAC1B,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;oBACnD,aAAa,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;gBACpC,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;QACpC,IAAI,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,SAAS;QACrC,iEAAiE;QACjE,oEAAoE;QACpE,wCAAwC;QACxC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;YAAE,SAAS;QAC5F,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,UAAU,CAAC,QAAQ,CAAC,CAAC;gBACrB,kBAAkB,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;IAED,IAAI,CAAC,MAAM;QAAE,aAAa,CAAC,UAAU,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC;IAEvD,uEAAuE;IACvE,wEAAwE;IACxE,mEAAmE;IACnE,oEAAoE;IACpE,oEAAoE;IACpE,IAAI,CAAC,MAAM,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACnC,MAAM,kBAAkB,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9G,qBAAqB,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,eAAe,GAAa,EAAE,CAAC;IACrC,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC;IACnD,KAAK,MAAM,MAAM,IAAI,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,SAAS;QAErC,KAAK,MAAM,IAAI,IAAI,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7C,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS,CAAC,0CAA0C;YACtF,IAAI,CAAC,MAAM;gBAAE,kBAAkB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;YACvD,eAAe,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC,SAAS,CAAC,IAAI,WAAW,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5E,SAAS,CAAC,SAAS,CAAC,CAAC;YACrB,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;QACvB,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE;QAC3B,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;QACvB,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACrG,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;QACvB,YAAY,EAAE,eAAe,CAAC,UAAU,CAAC;QACzC,eAAe,EAAE,eAAe,CAAC,IAAI,EAAE;KACxC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"deploy.js","sourceRoot":"","sources":["../src/deploy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC3H,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC9E,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAC/F,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC7E,OAAO,EAAsB,WAAW,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC/E,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAiCvD;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,WAAmB,EAAE,WAAmB,EAAE,WAA8B;IAC7G,IAAI,WAA8B,CAAC;IACnC,IAAI,CAAC;QACH,WAAW,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC,CAAC,oGAAoG;IACpH,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACtH,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,EAAE,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AACzI,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,GAAW;IAC1D,IAAI,OAAO,GAAG,GAAG,CAAC;IAClB,OAAO,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACzB,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;YAC3B,SAAS;QACX,CAAC;QACD,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO;QAC5C,SAAS,CAAC,OAAO,CAAC,CAAC;QACnB,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAA4B;IACvD,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;IAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC;IAEvC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,4CAA4C,SAAS,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,qCAAqC,UAAU,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,WAAW,EAAE,CAAC;IACjD,MAAM,eAAe,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IACxD,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,SAAS,EAAE,CAAC,CAAC;IAE/G,MAAM,SAAS,GAAG,qBAAqB,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IACrE,IAAI,CAAC,SAAS,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAE7D,MAAM,QAAQ,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,cAAc,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAElE,0EAA0E;IAC1E,oEAAoE;IACpE,uEAAuE;IACvE,uEAAuE;IACvE,qEAAqE;IACrE,qEAAqE;IACrE,qEAAqE;IACrE,uDAAuD;IACvD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IACxC,MAAM,uBAAuB,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1D,6IAA6I;IAC7I,MAAM,sBAAsB,GAAG,IAAI,GAAG,EAAU,CAAC;IACjD,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,kEAAkE;QAClE,8DAA8D;QAC9D,oEAAoE;QACpE,mEAAmE;QACnE,qEAAqE;QACrE,oEAAoE;QACpE,qEAAqE;QACrE,qEAAqE;QACrE,sEAAsE;QACtE,4DAA4D;QAC5D,+DAA+D;QAC/D,MAAM,aAAa,GAAG,CAAC,MAAc,EAAE,gBAAyB,EAAE,EAAE;YAClE,MAAM,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC;YAC5B,KAAK,MAAM,KAAK,IAAI,IAAI,GAAG,CACzB,CAAC,GAAG,UAAW,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;iBAC1B,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;iBAC/C,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CACpE,EAAE,CAAC;gBACF,IAAI,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC;oBAAE,SAAS,CAAC,kDAAkD;gBACjG,MAAM,WAAW,GAAG,GAAG,MAAM,IAAI,KAAK,EAAE,CAAC;gBACzC,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;gBAClD,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;oBAAE,SAAS;gBACvC,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,WAAW,GAAG,CAAC,CAAC;oBAAE,SAAS,CAAC,eAAe;gBAEhG,MAAM,KAAK,GAAG,oBAAoB,CAAC,UAAW,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;gBACtF,IAAI,CAAC,KAAK,CAAC,KAAK;oBAAE,SAAS;gBAC3B,IAAI,gBAAgB,EAAE,CAAC;oBACrB,KAAK,MAAM,OAAO,IAAI,SAAS,CAAC,WAAW,CAAC;wBAAE,aAAa,CAAC,GAAG,CAAC,GAAG,WAAW,IAAI,OAAO,EAAE,CAAC,CAAC;gBAC/F,CAAC;qBAAM,CAAC;oBACN,sBAAsB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBAC1C,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QACF,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACvC,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;gBACnC,MAAM,WAAW,GAAG,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC;gBACjD,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;gBAClD,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;oBAAE,SAAS;gBACvC,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,WAAW,GAAG,CAAC,CAAC;oBAAE,SAAS,CAAC,eAAe;gBAEhG,MAAM,KAAK,GAAG,oBAAoB,CAAC,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;gBACrF,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;oBAChB,KAAK,MAAM,OAAO,IAAI,SAAS,CAAC,WAAW,CAAC;wBAAE,aAAa,CAAC,GAAG,CAAC,GAAG,WAAW,IAAI,OAAO,EAAE,CAAC,CAAC;gBAC/F,CAAC;qBAAM,CAAC;oBACN,uBAAuB,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,MAAO,CAAC,CAAC;gBAC1D,CAAC;YACH,CAAC;YAED,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACtC,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,cAAc,CAAC,OAAO,CAAC;YAAE,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC;IACrE,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAA6B,CAAC;IAChE,KAAK,MAAM,KAAK,IAAI,cAAc;QAAE,kBAAkB,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAErG,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,SAAS,GAAoB,EAAE,CAAC;IACtC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IAEpC,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACvC,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;YACnC,MAAM,WAAW,GAAG,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC;YACjD,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;YAClD,MAAM,cAAc,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;YAC/C,IAAI,WAAW,GAAG,CAAC,GAAG,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,WAAW,GAAG,CAAC,CAAC,CAAC;YAExF,uEAAuE;YACvE,gEAAgE;YAChE,yEAAyE;YACzE,IAAI,cAAc,IAAI,CAAC,WAAW,IAAI,sBAAsB,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;gBACvI,WAAW,GAAG,IAAI,CAAC;gBACnB,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC5B,CAAC;YAED,IAAI,cAAc,IAAI,CAAC,WAAW,EAAE,CAAC;gBACnC,SAAS,CAAC,IAAI,CAAC;oBACb,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,KAAK;oBACL,MAAM,EACJ,uBAAuB,CAAC,GAAG,CAAC,WAAW,CAAC;wBACxC,mFAAmF;iBACtF,CAAC,CAAC;gBACH,SAAS,CAAC,6DAA6D;YACzE,CAAC;YAED,KAAK,MAAM,OAAO,IAAI,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC1D,MAAM,SAAS,GAAG,GAAG,WAAW,IAAI,OAAO,EAAE,CAAC;gBAC9C,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBACzB,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;gBAC9C,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;gBAC9D,IAAI,UAAU,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;oBACpH,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBAC1B,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;oBACnD,aAAa,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;gBACpC,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;QACpC,IAAI,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,SAAS;QACrC,iEAAiE;QACjE,oEAAoE;QACpE,wCAAwC;QACxC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;YAAE,SAAS;QAC5F,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,UAAU,CAAC,QAAQ,CAAC,CAAC;gBACrB,kBAAkB,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;IAED,IAAI,CAAC,MAAM;QAAE,aAAa,CAAC,UAAU,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC;IAEvD,uEAAuE;IACvE,wEAAwE;IACxE,mEAAmE;IACnE,oEAAoE;IACpE,oEAAoE;IACpE,IAAI,CAAC,MAAM,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACnC,MAAM,kBAAkB,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9G,qBAAqB,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,eAAe,GAAa,EAAE,CAAC;IACrC,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC;IACnD,KAAK,MAAM,MAAM,IAAI,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,SAAS;QAErC,KAAK,MAAM,IAAI,IAAI,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7C,gEAAgE;YAChE,+DAA+D;YAC/D,mEAAmE;YACnE,uDAAuD;YACvD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC;gBAAE,SAAS;YAC/F,IAAI,CAAC,MAAM;gBAAE,kBAAkB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;YACvD,eAAe,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC,SAAS,CAAC,IAAI,WAAW,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5E,SAAS,CAAC,SAAS,CAAC,CAAC;YACrB,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;QACvB,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE;QAC3B,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;QACvB,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACrG,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;QACvB,YAAY,EAAE,eAAe,CAAC,UAAU,CAAC;QACzC,eAAe,EAAE,eAAe,CAAC,IAAI,EAAE;KACxC,CAAC;AACJ,CAAC"}

package/packages/agent-skills/src/deploy.ts

@@ -17,7 +17,9 @@
  * When `profile.legacyLock` names a lock the OLD repo-controls engine
  * left behind, a same-name folder it fully wrote (per legacy-lock.ts) is
  * taken over on sight rather than reported as a conflict — see
- * legacy-lock.ts for the exact ownership rule and lock rewrite.
+ * legacy-lock.ts for the exact ownership rule and lock rewrite. A legacy
+ * folder whose skill retired from assets/ is removed under the same
+ * ownership rule (never a hand-modified folder).
  *
  * Fails loud: assets/target validation, an invalid deploy profile, an
  * invalid adl-config.toml subset, or an unwritable target all throw. There
@@ -69,7 +71,7 @@ export interface DeploySkillsResult {
  * relative paths, same bytes, nothing extra. Such a folder carries no user
  * content, so deploy may adopt it (Tarun, 2026-10-01).
  */
-function folderIdenticalToAsset(skillDirAbs: string, assetDirAbs: string, sourceFiles: readonly string[]): boolean {
+export function folderIdenticalToAsset(skillDirAbs: string, assetDirAbs: string, sourceFiles: readonly string[]): boolean {
   let targetFiles: readonly string[];
   try {
     targetFiles = walkFiles(skillDirAbs);
@@ -80,7 +82,7 @@ function folderIdenticalToAsset(skillDirAbs: string, assetDirAbs: string, source
   return sourceFiles.every((file) => Buffer.compare(readFileSync(join(skillDirAbs, file)), readFileSync(join(assetDirAbs, file))) === 0);
 }
 
-function removeEmptyParents(root: string, dir: string): void {
+export function removeEmptyParents(root: string, dir: string): void {
   let current = dir;
   while (current !== root && current.startsWith(root)) {
     if (!existsSync(current)) {
@@ -125,7 +127,42 @@ export function deploySkills(options: DeploySkillsOptions): DeploySkillsResult {
   // conflict, with a reason naming what disqualified it.
   const takeoverFiles = new Set<string>();
   const takeoverConflictReasons = new Map<string, string>();
+  /** `${folder}/${skill}` in a retired folder that the legacy lock wrote and assets/ retired — removed by the retired-folder cleanup below. */
+  const legacyRetiredInRetired = new Set<string>();
   if (legacyLock !== null) {
+    // Legacy retirement: a folder the old engine fully wrote (per the
+    // lock) whose skill no longer ships in assets/ is folded into
+    // takeoverFiles so the removal pass below deletes it — the header's
+    // "dropped from assets/ is removed" promise extended to old-engine
+    // folders. A repo-subset exclusion keeps the folder (the subset only
+    // limits what THIS deploy writes, it does not retract skills assets
+    // still ships). A folder failing the ownership check (hand-modified,
+    // extra file) is left untouched: it is becoming user-owned, the same
+    // disposition as the takeover conflict case. In retired folders there
+    // is no takeover pass: the folder is only recorded, and the
+    // retired-folder cleanup removes it under the same conditions.
+    const legacyRetired = (folder: string, foldIntoTakeover: boolean) => {
+      const prefix = `${folder}/`;
+      for (const skill of new Set(
+        [...legacyLock!.files.keys()]
+          .filter((relPath) => relPath.startsWith(prefix))
+          .map((relPath) => relPath.slice(prefix.length).split("/", 1)[0]!),
+      )) {
+        if (availableSkills.includes(skill)) continue; // still shipped — selected or subset path owns it
+        const skillDirRel = `${folder}/${skill}`;
+        const skillDirAbs = join(targetRepo, skillDirRel);
+        if (!existsSync(skillDirAbs)) continue;
+        if (manifest.files.some((file) => file.startsWith(`${skillDirRel}/`))) continue; // already ours
+
+        const check = checkLegacyOwnership(legacyLock!, targetRepo, skillDirRel, skillDirAbs);
+        if (!check.owned) continue;
+        if (foldIntoTakeover) {
+          for (const relFile of walkFiles(skillDirAbs)) takeoverFiles.add(`${skillDirRel}/${relFile}`);
+        } else {
+          legacyRetiredInRetired.add(skillDirRel);
+        }
+      }
+    };
     for (const surface of profile.surfaces) {
       for (const skill of selectedSkills) {
         const skillDirRel = `${surface.folder}/${skill}`;
@@ -140,7 +177,10 @@ export function deploySkills(options: DeploySkillsOptions): DeploySkillsResult {
           takeoverConflictReasons.set(skillDirRel, check.reason!);
         }
       }
+
+      legacyRetired(surface.folder, true);
     }
+    for (const folder of retiredFolders(profile)) legacyRetired(folder, false);
   }
 
   const manifestFiles = new Set([...manifest.files, ...takeoverFiles]);
@@ -234,7 +274,11 @@ export function deploySkills(options: DeploySkillsOptions): DeploySkillsResult {
     if (!existsSync(folderAbs)) continue;
 
     for (const name of directoryNames(folderAbs)) {
-      if (!availableSkillSet.has(name)) continue; // not ours to manage — left byte-for-byte
+      // Ours to remove when the skill still ships in assets/ (a stale
+      // duplicate of a live skill) or the legacy lock proves the old
+      // engine wrote this copy of a now-retired skill. Anything else was
+      // never this package's to manage — left byte-for-byte.
+      if (!availableSkillSet.has(name) && !legacyRetiredInRetired.has(`${folder}/${name}`)) continue;
       if (!dryRun) removeDirRecursive(join(folderAbs, name));
       retiredRemovals.push(`${folder}/${name}`);
     }

package/packages/azdo/scripts/probe-ado-rules.ts

@@ -95,7 +95,7 @@ const MAIN = [
   "In Planning",
   "Awaiting Approval",
   "Approved",
-  "Spec Validation",
+  "Design Validation",
   "In Implementation",
   "In Testing",
   "In Review",

package/packages/azdo/src/activity-log.ts

@@ -0,0 +1,118 @@
+/** A1 agent activity log — design: docs/research/adl-process-handover/process-design.md § Activity log. */
+import { DatabaseSync } from 'node:sqlite';
+import { mkdirSync } from 'node:fs';
+import { basename, dirname, join } from 'node:path';
+import { spawnSync } from 'node:child_process';
+import { resolveAgentIdentity } from './lib/agent-identity.ts';
+
+export interface ActivityEntry {
+  time: string;
+  surface: string;
+  agent: string;
+  repo: string;
+  note: string;
+}
+
+/** Verified child-process surface markers, first match wins; a marker is listed only with a citation to the surface's own docs. */
+const SURFACE_MARKERS: ReadonlyArray<{ readonly surface: string; readonly env: string; readonly equals?: string }> = [
+  // Claude Code spawns set CLAUDECODE=1 (code.claude.com/docs/en/env-vars, verified 2026-10-12).
+  { surface: 'claude', env: 'CLAUDECODE', equals: '1' },
+];
+
+/** The surface this process runs under: first verified marker match, else 'cli' (no marker is not an error). */
+export function resolveSurface(env: NodeJS.ProcessEnv = process.env): string {
+  for (const marker of SURFACE_MARKERS) {
+    const value = env[marker.env];
+    if (value !== undefined && (marker.equals === undefined || value === marker.equals)) {
+      return marker.surface;
+    }
+  }
+  return 'cli';
+}
+
+/** The git work-tree top level of `cwd` (or the process's own), or a loud refusal outside a work tree — the log lives at `<repo>/.adl/agent-activity.sqlite`. */
+export function repoTopLevel(cwd?: string): string {
+  const result = spawnSync('git', ['rev-parse', '--show-toplevel'], {
+    ...(cwd === undefined ? {} : { cwd }),
+    encoding: 'utf8',
+    timeout: 5000,
+  });
+  const topLevel = result.status === 0 ? result.stdout.trim() : '';
+  if (!topLevel) {
+    throw new Error(
+      'the activity log lives at <repo>/.adl/agent-activity.sqlite, and this working directory is not a git work tree',
+    );
+  }
+  return topLevel;
+}
+
+/** The ONE place the log's path is built. */
+export function activityDbPath(cwd?: string): string {
+  return join(repoTopLevel(cwd), '.adl', 'agent-activity.sqlite');
+}
+
+function openDb(cwd?: string): DatabaseSync {
+  const path = activityDbPath(cwd);
+  mkdirSync(dirname(path), { recursive: true });
+  const db = new DatabaseSync(path);
+  db.exec(
+    `CREATE TABLE IF NOT EXISTS activity (
+      id INTEGER PRIMARY KEY AUTOINCREMENT,
+      time TEXT NOT NULL,
+      surface TEXT NOT NULL,
+      agent TEXT NOT NULL,
+      repo TEXT NOT NULL,
+      note TEXT NOT NULL
+    )`,
+  );
+  return db;
+}
+
+function assertNote(note: unknown): asserts note is string {
+  if (typeof note !== 'string' || note.trim() === '') {
+    throw new Error('note must be a non-empty string');
+  }
+}
+
+/** Append one entry, filling time/surface/agent/repo; `env`/`now` keep tests hermetic. Returns the stored entry as JSON. */
+export function activityAdd(
+  note: unknown,
+  opts: { cwd?: string; env?: NodeJS.ProcessEnv; now?: Date } = {},
+): string {
+  assertNote(note);
+  const env = opts.env ?? process.env;
+  const entry: ActivityEntry = {
+    time: (opts.now ?? new Date()).toISOString(),
+    surface: resolveSurface(env),
+    agent: resolveAgentIdentity(env).agent,
+    repo: basename(repoTopLevel(opts.cwd)),
+    note,
+  };
+  const db = openDb(opts.cwd);
+  try {
+    db.prepare('INSERT INTO activity (time, surface, agent, repo, note) VALUES (?, ?, ?, ?, ?)').run(
+      entry.time,
+      entry.surface,
+      entry.agent,
+      entry.repo,
+      entry.note,
+    );
+  } finally {
+    db.close();
+  }
+  return JSON.stringify(entry, null, 2);
+}
+
+/** Every entry, oldest first (the reading order of the ledger this replaces). */
+export function activityList(opts: { cwd?: string } = {}): string {
+  const db = openDb(opts.cwd);
+  let entries: unknown[];
+  try {
+    entries = db
+      .prepare('SELECT time, surface, agent, repo, note FROM activity ORDER BY id ASC')
+      .all();
+  } finally {
+    db.close();
+  }
+  return JSON.stringify({ repo: basename(repoTopLevel(opts.cwd)), entries }, null, 2);
+}

package/packages/azdo/src/azdo-attachments.ts

@@ -0,0 +1,108 @@
+// T2 work-item attachments (board-rules.md § Attachments): Features only, frozen once attached — the one delete allowed is a mistaken upload in its own run, for a plan-r* file while every Feature item is still at or before Awaiting Approval. API facts (WIT REST 7.1): upload POSTs .../_apis/wit/attachments?fileName={name} (octet-stream, returns { id, url }); attach PATCHes the work item adding an AttachedFile relation (test/rev gives optimistic concurrency); Attachments-Delete is 7.2-preview only, so delete detaches and the stored file stays.
+import { AdoClient } from './lib/client.ts';
+
+let client: AdoClient | undefined
+
+async function getClient(): Promise<AdoClient> {
+  client ??= new AdoClient()
+  return client
+}
+
+/** Test seam: forget the cached client — see azdo-wit.ts's resetClientForTests() for why. */
+export function resetClientForTests(): void {
+  client = undefined
+}
+
+export type WorkitemAttachmentsArgs = {
+  id: number;
+  action: 'read' | 'upload' | 'delete';
+  /** upload/delete: the attachment file name. */
+  fileName?: string;
+  /** upload: the file content, sent as an octet-stream body. */
+  content?: string;
+};
+
+interface AttachmentRelation {
+  index: number;
+  name: string;
+  url: string;
+}
+
+function attachedFiles(item: any): AttachmentRelation[] {
+  return (item.relations ?? [])
+    .map((relation: any, index: number) => ({ relation, index }))
+    .filter(({ relation }: any) => relation.rel === 'AttachedFile')
+    .map(({ relation, index }: any) => ({
+      index,
+      name: relation.attributes?.name ?? relation.url,
+      url: relation.url,
+    }));
+}
+
+/** P4 reuses this upload when it attaches the mandatory plan/impl report at PR raise. */
+export async function uploadAttachment(c: AdoClient, workItemId: number, fileName: string, content: string): Promise<void> {
+  const uploaded = await c.post<any>(
+    '/wit/attachments',
+    content,
+    { fileName, 'api-version': '7.1' },
+    'application/octet-stream',
+  );
+  if (!uploaded?.url) throw new Error(`attachment upload for '${fileName}' returned no url`);
+  const item = await c.get<any>(`/wit/workitems/${workItemId}`, { 'api-version': '7.1' });
+  await c.patch<any>(
+    `/wit/workitems/${workItemId}`,
+    [
+      { op: 'test', path: '/rev', value: item.rev ?? item.fields?.['System.Rev'] },
+      { op: 'add', path: '/relations/-', value: { rel: 'AttachedFile', url: uploaded.url } },
+    ],
+    { 'api-version': '7.1' },
+    'application/json-patch+json',
+  );
+}
+
+/** The T2 guard (board-rules.md § Attachments): a plan-r* file refuses deletion once any item of its Feature has left Awaiting Approval — the plan G1 approved stays on the board. */
+async function assertPlanAttachmentDeletable(c: AdoClient, feature: any, fileName: string): Promise<void> {
+  const relationId = (url: string) => Number(/(\d+)\/?$/.exec(url)?.[1]);
+  const childIds = (feature.relations ?? [])
+    .filter((relation: any) => relation.rel === 'System.LinkTypes.Hierarchy-Forward')
+    .map((relation: any) => relationId(relation.url))
+    .filter((id: number) => Number.isInteger(id));
+  if (!childIds.length) return;
+  const children = await c.post<any>('/wit/workitemsbatch', { ids: childIds, $expand: 'all' }, { 'api-version': '7.1' });
+  const left = (children.value ?? []).find((child: any) => !['New', 'In Planning', 'Awaiting Approval'].includes(child.fields?.['System.State']));
+  if (left) {
+    throw new Error(`refusing to delete '${fileName}': an item of Feature ${feature.id} has left Awaiting Approval (item ${left.id} is at ${left.fields?.['System.State']}) — the approved plan stays on the board`);
+  }
+}
+
+export async function workitemAttachments(args: WorkitemAttachmentsArgs): Promise<string> {
+  const c = await getClient();
+  if (args.action === 'upload') {
+    if (!args.fileName) throw new Error('fileName is required for upload');
+    if (args.content === undefined || args.content === '') throw new Error('content is required for upload');
+    await uploadAttachment(c, args.id, args.fileName, args.content);
+    return JSON.stringify({ id: args.id, attached: args.fileName }, null, 2);
+  }
+  const item = await c.get<any>(`/wit/workitems/${args.id}`, { 'api-version': '7.1', $expand: 'all' });
+  const files = attachedFiles(item);
+  if (args.action === 'read') {
+    return JSON.stringify({ id: args.id, attachments: files.map(({ name, url }) => ({ name, url })) }, null, 2);
+  }
+  if (!args.fileName) throw new Error('fileName is required for delete');
+  const target = files.find((file) => file.name === args.fileName);
+  if (!target) throw new Error(`work item ${args.id} has no AttachedFile named '${args.fileName}'`);
+  if (target.name.startsWith('plan-r')) {
+    await assertPlanAttachmentDeletable(c, item, target.name);
+  }
+  // On 7.1 delete detaches: remove the relation, the stored file stays; test/rev gives the same optimistic concurrency as attach.
+  await c.patch<any>(
+    `/wit/workitems/${args.id}`,
+    [
+      { op: 'test', path: '/rev', value: item.rev ?? item.fields?.['System.Rev'] },
+      { op: 'remove', path: `/relations/${target.index}` },
+    ],
+    { 'api-version': '7.1' },
+    'application/json-patch+json',
+  );
+  return JSON.stringify({ id: args.id, deleted: target.name }, null, 2);
+}

package/packages/azdo/src/azdo-pl.ts

@@ -9,10 +9,38 @@
  * automatically) falling back to the AdoClient defaults. Nothing is
  * hardcoded here.
  *
+ * buildRun carries the second half of H1
+ * (docs/research/adl-process-handover/board-rules.md § Hooks, row
+ * `adl.build-run-role`): the hook has no network access, so it grades only
+ * what the call itself proves and names this function as the re-verifier of
+ * the caller-declared claim. Before queuing, buildRun requires ALL of:
+ *   1. `branch` present (the hook requires it too; the tool refuses on its
+ *      own, never relying on the hook alone);
+ *   2. an OPEN pull request in this repository whose source branch equals
+ *      the call's `branch` (after `refs/heads/` removal);
+ *   3. that PR raised by the CALLING agent identity — `createdBy.id`
+ *      compared against lib/graph-identity.ts's resolveAgentIdentityId, the
+ *      ONE identity-form producer in this repo;
+ *   4. the named definition is that PR's validation pipeline: a run of
+ *      definition `id` exists on the PR's merge ref (`refs/pull/<id>/merge`,
+ *      the sourceBranch ADO queues PR validation builds under — the same ref
+ *      build_list_or_get's poll hint names).
+ *   RESIDUAL APPROXIMATION (stated, not silently widened): check 4 proves
+ *   the definition IS a validation pipeline of THIS PR via a run that
+ *   already exists; a definition whose policy would queue on the PR but has
+ *   never produced a run is refused. That is sound for the re-queue use case
+ *   (an expired check implies a run that existed) but stricter than "any
+ *   policy-bound definition" — the PR resource carries no build-policy
+ *   reference (`completionOptions` names no definition), so an existing run
+ *   on the merge ref is the strongest relationship the REST API exposes.
+ *
  * Timeline model: Stage → Phase → Job → Task, chained by parentId
  * (Checkpoint records carry no user-facing state and are skipped).
  */
-import { AdoClient } from './lib/client.ts'
+import { AdoClient, resolveRepository } from './lib/client.ts'
+import { resolveAgentIdentity } from './lib/agent-identity.ts';
+import { resolveAgentIdentityId } from './lib/graph-identity.ts';
+import { pullRequestsPath } from './azdo-pr.ts'
 
 let client: AdoClient | undefined
 
@@ -21,6 +49,11 @@ async function getClient(): Promise<AdoClient> {
   return client
 }
 
+/** Test seam: forget the cached client — see azdo-pr.ts's resetClientForTests() for why. */
+export function resetClientForTests(): void {
+  client = undefined
+}
+
 /** GET a JSON payload. */
 async function getJson<T>(c: AdoClient, path: string, params?: Record<string, string>): Promise<T> {
   return c.get<T>(path, { 'api-version': '7.1', ...params });
@@ -160,13 +193,77 @@ export async function buildListOrGet(args: BuildListOrGetArgs = {}): Promise<str
 
 export type BuildRunArgs = { id: string; branch?: string };
 
+function normalizeBranchRef(ref: string): string {
+  return ref.startsWith('refs/heads/') ? ref.slice('refs/heads/'.length) : ref;
+}
+
+/**
+ * H1's azdo half — see this file's header. Queries (all read-only, all
+ * before the queue POST): the open PRs on the named source branch, the
+ * caller's own ADO identity id (Graph Subject Query → Storage Keys), and the
+ * validation runs on the PR's merge ref. Throws with the exact failed check;
+ * queues only when every check passes.
+ */
+async function assertOwnPrValidationBuild(c: AdoClient, definitionId: number, branch: string): Promise<void> {
+  const sourceBranch = normalizeBranchRef(branch.trim());
+  const repository = resolveRepository();
+  const { repositoryId } = await resolveRepositoryId(c);
+  const agent = resolveAgentIdentity().agent;
+
+  const prs = await getJson<any>(c, pullRequestsPath(repository), {
+    'searchCriteria.status': 'active',
+    'searchCriteria.sourceRefName': `refs/heads/${sourceBranch}`,
+    '$top': '100',
+  });
+  const candidates = (prs.value ?? []) as any[];
+  if (candidates.length === 0) {
+    throw new Error(
+      `build_run refused (H1): no open pull request in '${repository}' has source branch '${sourceBranch}' — ` +
+        'build_run may only re-queue the validation pipeline of your own open PR, on that PR\'s source branch',
+    );
+  }
+
+  const callerId = await resolveAgentIdentityId(agent);
+  const mine = candidates.filter((pr) => pr.createdBy?.id === callerId);
+  if (mine.length === 0) {
+    const authors = [...new Set(candidates.map((pr) => pr.createdBy?.displayName ?? 'unknown'))].join(', ');
+    throw new Error(
+      `build_run refused (H1): the open pull request on '${sourceBranch}' was raised by ${authors}, not ${agent} — ` +
+        'build_run may only re-queue the validation pipeline of a PR you raised yourself',
+    );
+  }
+
+  for (const pr of mine) {
+    const runs = await getJson<any>(c, '/build/builds', {
+      branchName: `refs/pull/${pr.pullRequestId}/merge`,
+      repositoryId,
+      repositoryType: 'TfsGit',
+      '$top': '50',
+    });
+    if ((runs.value ?? []).some((run: any) => run.definition?.id === definitionId)) {
+      return;
+    }
+  }
+  const prIds = mine.map((pr) => pr.pullRequestId).join(', ');
+  throw new Error(
+    `build_run refused (H1): build definition ${definitionId} is not a validation pipeline of your pull request(s) ${prIds} ` +
+      `(no run of it exists on refs/pull/<id>/merge) — pass the definition id of your PR's validation build, from build_list_or_get`,
+  );
+}
+
 export async function buildRun(args: BuildRunArgs): Promise<string> {
   if (!args.id) throw new Error('id is required');
   const definitionId = Number(args.id);
   if (!Number.isInteger(definitionId) || definitionId < 1) throw new Error(`id must be a positive integer definition id; got '${args.id}'`);
+  if (typeof args.branch !== 'string' || args.branch.trim() === '') {
+    throw new Error(
+      'branch is required: name the source branch of your own open PR — build_run may only re-queue that PR\'s ' +
+        'validation pipeline, on that PR\'s source branch (H1)',
+    );
+  }
   const c = await getClient()
-  const body: any = { definition: { id: definitionId } };
-  if (args.branch) body.sourceBranch = args.branch;
+  await assertOwnPrValidationBuild(c, definitionId, args.branch);
+  const body: any = { definition: { id: definitionId }, sourceBranch: args.branch };
   const build = await c.post<any>('/build/builds', body, { 'api-version': '7.1' });
   return JSON.stringify({
     id: build.id,