@cat-factory/contracts 0.6.0

package/dist/runners.d.ts

@@ -0,0 +1,387 @@
+import * as v from 'valibot';
+/** A credential reference by logical key (shared shape with the env manifest). */
+export declare const runnerPoolSecretRefSchema: v.ObjectSchema<{
+    readonly key: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 64, undefined>]>;
+}, undefined>;
+export type RunnerPoolSecretRef = v.InferOutput<typeof runnerPoolSecretRefSchema>;
+/** How the worker authenticates to the org's pool scheduler API. */
+export declare const runnerPoolAuthSchemeSchema: v.VariantSchema<"type", [v.ObjectSchema<{
+    readonly type: v.LiteralSchema<"none", undefined>;
+}, undefined>, v.ObjectSchema<{
+    readonly type: v.LiteralSchema<"api_key", undefined>;
+    readonly headerName: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>]>;
+    readonly secretRef: v.ObjectSchema<{
+        readonly key: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 64, undefined>]>;
+    }, undefined>;
+    readonly valuePrefix: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+}, undefined>, v.ObjectSchema<{
+    readonly type: v.LiteralSchema<"bearer", undefined>;
+    readonly secretRef: v.ObjectSchema<{
+        readonly key: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 64, undefined>]>;
+    }, undefined>;
+}, undefined>, v.ObjectSchema<{
+    readonly type: v.LiteralSchema<"basic", undefined>;
+    readonly usernameSecretRef: v.ObjectSchema<{
+        readonly key: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 64, undefined>]>;
+    }, undefined>;
+    readonly passwordSecretRef: v.ObjectSchema<{
+        readonly key: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 64, undefined>]>;
+    }, undefined>;
+}, undefined>, v.ObjectSchema<{
+    readonly type: v.LiteralSchema<"oauth2_client_credentials", undefined>;
+    readonly tokenUrl: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 2000, undefined>]>;
+    readonly clientIdSecretRef: v.ObjectSchema<{
+        readonly key: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 64, undefined>]>;
+    }, undefined>;
+    readonly clientSecretSecretRef: v.ObjectSchema<{
+        readonly key: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 64, undefined>]>;
+    }, undefined>;
+    readonly scope: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+    readonly audience: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+}, undefined>, v.ObjectSchema<{
+    readonly type: v.LiteralSchema<"custom_headers", undefined>;
+    readonly headers: v.ArraySchema<v.ObjectSchema<{
+        readonly name: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>]>;
+        readonly secretRef: v.ObjectSchema<{
+            readonly key: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 64, undefined>]>;
+        }, undefined>;
+    }, undefined>, undefined>;
+}, undefined>], undefined>;
+export type RunnerPoolAuthScheme = v.InferOutput<typeof runnerPoolAuthSchemeSchema>;
+/**
+ * One HTTP call against the pool scheduler API. Generic: any method, a path
+ * appended to the manifest `baseUrl`, optional query/headers and a body, all
+ * supporting `{{var}}` interpolation. Variables come from a bounded namespace:
+ * `{{input.jobId}}` (the cat-factory execution id the pool is keyed on) and
+ * `{{input.job}}` (the full harness job spec as a JSON string — embed it raw to
+ * forward the job verbatim, e.g. `{"payload":{{input.job}}}`).
+ */
+export declare const runnerPoolRequestTemplateSchema: v.ObjectSchema<{
+    readonly method: v.PicklistSchema<["GET", "POST", "PUT", "PATCH", "DELETE"], undefined>;
+    readonly pathTemplate: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MaxLengthAction<string, 2000, undefined>]>;
+    readonly query: v.OptionalSchema<v.ArraySchema<v.ObjectSchema<{
+        readonly key: v.StringSchema<undefined>;
+        readonly value: v.StringSchema<undefined>;
+    }, undefined>, undefined>, undefined>;
+    readonly headers: v.OptionalSchema<v.ArraySchema<v.ObjectSchema<{
+        readonly name: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>]>;
+        readonly value: v.StringSchema<undefined>;
+    }, undefined>, undefined>, undefined>;
+    readonly bodyTemplate: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+    readonly timeoutMs: v.OptionalSchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, 60000, undefined>]>, undefined>;
+}, undefined>;
+export type RunnerPoolRequestTemplate = v.InferOutput<typeof runnerPoolRequestTemplateSchema>;
+/** The harness job lifecycle states the worker drives a job through. */
+export declare const runnerJobStateSchema: v.PicklistSchema<["running", "done", "failed"], undefined>;
+export type RunnerJobState = v.InferOutput<typeof runnerJobStateSchema>;
+/**
+ * Maps the pool scheduler's arbitrary status response onto the canonical job
+ * view via dot-path field extraction. `statusMap` translates the scheduler's own
+ * status strings onto the harness states; the result/progress/error paths pull
+ * the work product out of whatever envelope the scheduler returns.
+ */
+export declare const runnerPoolResponseMappingSchema: v.ObjectSchema<{
+    /** Dot-path to the scheduler's status string (e.g. `state`, `data.phase`). */
+    readonly statusPath: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+    /** Translate scheduler status strings → harness states. */
+    readonly statusMap: v.OptionalSchema<v.ArraySchema<v.ObjectSchema<{
+        readonly from: v.StringSchema<undefined>;
+        readonly to: v.PicklistSchema<["running", "done", "failed"], undefined>;
+    }, undefined>, undefined>, undefined>;
+    /** Dot-paths to live subtask counts, surfaced as "N/M done" progress. */
+    readonly progressCompletedPath: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+    readonly progressInProgressPath: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+    readonly progressTotalPath: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+    /** Dot-paths to the finished work product. */
+    readonly prUrlPath: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+    readonly branchPath: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+    readonly summaryPath: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+    /**
+     * Dot-path to the WHOLE structured result object the harness records (the
+     * harness `result`: `{ prUrl, branch, summary, service, spec, assessment, report,
+     * defaultBranch, pushed, resolved, usage }`). A pool that proxies the cat-factory
+     * executor-harness verbatim should set this so EVERY structured product — the
+     * blueprint tree, the spec doc, the merge assessment, the test report, the bootstrap
+     * default branch — is forwarded, not just the PR url/branch/summary scalars. Known
+     * fields are coerced by type; unknown ones are ignored. The individual scalar paths
+     * above still apply (and override) for schedulers that surface them out-of-envelope.
+     */
+    readonly resultPath: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+    /** Dot-path to a job-level error message (a failed job, or a structured error). */
+    readonly errorPath: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+}, undefined>;
+export type RunnerPoolResponseMapping = v.InferOutput<typeof runnerPoolResponseMappingSchema>;
+/** The full declarative description of an org's runner-pool scheduler API. */
+export declare const runnerPoolManifestSchema: v.ObjectSchema<{
+    readonly providerId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 64, undefined>]>;
+    readonly label: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 120, undefined>]>;
+    /** Scheduler API root; dispatch/poll/release paths are appended to it. */
+    readonly baseUrl: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 2000, undefined>]>;
+    readonly auth: v.VariantSchema<"type", [v.ObjectSchema<{
+        readonly type: v.LiteralSchema<"none", undefined>;
+    }, undefined>, v.ObjectSchema<{
+        readonly type: v.LiteralSchema<"api_key", undefined>;
+        readonly headerName: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>]>;
+        readonly secretRef: v.ObjectSchema<{
+            readonly key: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 64, undefined>]>;
+        }, undefined>;
+        readonly valuePrefix: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+    }, undefined>, v.ObjectSchema<{
+        readonly type: v.LiteralSchema<"bearer", undefined>;
+        readonly secretRef: v.ObjectSchema<{
+            readonly key: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 64, undefined>]>;
+        }, undefined>;
+    }, undefined>, v.ObjectSchema<{
+        readonly type: v.LiteralSchema<"basic", undefined>;
+        readonly usernameSecretRef: v.ObjectSchema<{
+            readonly key: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 64, undefined>]>;
+        }, undefined>;
+        readonly passwordSecretRef: v.ObjectSchema<{
+            readonly key: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 64, undefined>]>;
+        }, undefined>;
+    }, undefined>, v.ObjectSchema<{
+        readonly type: v.LiteralSchema<"oauth2_client_credentials", undefined>;
+        readonly tokenUrl: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 2000, undefined>]>;
+        readonly clientIdSecretRef: v.ObjectSchema<{
+            readonly key: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 64, undefined>]>;
+        }, undefined>;
+        readonly clientSecretSecretRef: v.ObjectSchema<{
+            readonly key: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 64, undefined>]>;
+        }, undefined>;
+        readonly scope: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+        readonly audience: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+    }, undefined>, v.ObjectSchema<{
+        readonly type: v.LiteralSchema<"custom_headers", undefined>;
+        readonly headers: v.ArraySchema<v.ObjectSchema<{
+            readonly name: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>]>;
+            readonly secretRef: v.ObjectSchema<{
+                readonly key: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 64, undefined>]>;
+            }, undefined>;
+        }, undefined>, undefined>;
+    }, undefined>], undefined>;
+    /** Starts a job on the pool (analogous to the harness `POST /run`). */
+    readonly dispatch: v.ObjectSchema<{
+        readonly method: v.PicklistSchema<["GET", "POST", "PUT", "PATCH", "DELETE"], undefined>;
+        readonly pathTemplate: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MaxLengthAction<string, 2000, undefined>]>;
+        readonly query: v.OptionalSchema<v.ArraySchema<v.ObjectSchema<{
+            readonly key: v.StringSchema<undefined>;
+            readonly value: v.StringSchema<undefined>;
+        }, undefined>, undefined>, undefined>;
+        readonly headers: v.OptionalSchema<v.ArraySchema<v.ObjectSchema<{
+            readonly name: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>]>;
+            readonly value: v.StringSchema<undefined>;
+        }, undefined>, undefined>, undefined>;
+        readonly bodyTemplate: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+        readonly timeoutMs: v.OptionalSchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, 60000, undefined>]>, undefined>;
+    }, undefined>;
+    /** Reads a job's status (analogous to the harness `GET /jobs/{id}`). */
+    readonly poll: v.ObjectSchema<{
+        readonly method: v.PicklistSchema<["GET", "POST", "PUT", "PATCH", "DELETE"], undefined>;
+        readonly pathTemplate: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MaxLengthAction<string, 2000, undefined>]>;
+        readonly query: v.OptionalSchema<v.ArraySchema<v.ObjectSchema<{
+            readonly key: v.StringSchema<undefined>;
+            readonly value: v.StringSchema<undefined>;
+        }, undefined>, undefined>, undefined>;
+        readonly headers: v.OptionalSchema<v.ArraySchema<v.ObjectSchema<{
+            readonly name: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>]>;
+            readonly value: v.StringSchema<undefined>;
+        }, undefined>, undefined>, undefined>;
+        readonly bodyTemplate: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+        readonly timeoutMs: v.OptionalSchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, 60000, undefined>]>, undefined>;
+    }, undefined>;
+    /** Optional: frees the runner/job once the worker is done with it. */
+    readonly release: v.OptionalSchema<v.ObjectSchema<{
+        readonly method: v.PicklistSchema<["GET", "POST", "PUT", "PATCH", "DELETE"], undefined>;
+        readonly pathTemplate: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MaxLengthAction<string, 2000, undefined>]>;
+        readonly query: v.OptionalSchema<v.ArraySchema<v.ObjectSchema<{
+            readonly key: v.StringSchema<undefined>;
+            readonly value: v.StringSchema<undefined>;
+        }, undefined>, undefined>, undefined>;
+        readonly headers: v.OptionalSchema<v.ArraySchema<v.ObjectSchema<{
+            readonly name: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>]>;
+            readonly value: v.StringSchema<undefined>;
+        }, undefined>, undefined>, undefined>;
+        readonly bodyTemplate: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+        readonly timeoutMs: v.OptionalSchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, 60000, undefined>]>, undefined>;
+    }, undefined>, undefined>;
+    readonly response: v.ObjectSchema<{
+        /** Dot-path to the scheduler's status string (e.g. `state`, `data.phase`). */
+        readonly statusPath: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+        /** Translate scheduler status strings → harness states. */
+        readonly statusMap: v.OptionalSchema<v.ArraySchema<v.ObjectSchema<{
+            readonly from: v.StringSchema<undefined>;
+            readonly to: v.PicklistSchema<["running", "done", "failed"], undefined>;
+        }, undefined>, undefined>, undefined>;
+        /** Dot-paths to live subtask counts, surfaced as "N/M done" progress. */
+        readonly progressCompletedPath: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+        readonly progressInProgressPath: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+        readonly progressTotalPath: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+        /** Dot-paths to the finished work product. */
+        readonly prUrlPath: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+        readonly branchPath: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+        readonly summaryPath: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+        /**
+         * Dot-path to the WHOLE structured result object the harness records (the
+         * harness `result`: `{ prUrl, branch, summary, service, spec, assessment, report,
+         * defaultBranch, pushed, resolved, usage }`). A pool that proxies the cat-factory
+         * executor-harness verbatim should set this so EVERY structured product — the
+         * blueprint tree, the spec doc, the merge assessment, the test report, the bootstrap
+         * default branch — is forwarded, not just the PR url/branch/summary scalars. Known
+         * fields are coerced by type; unknown ones are ignored. The individual scalar paths
+         * above still apply (and override) for schedulers that surface them out-of-envelope.
+         */
+        readonly resultPath: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+        /** Dot-path to a job-level error message (a failed job, or a structured error). */
+        readonly errorPath: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+    }, undefined>;
+}, undefined>;
+export type RunnerPoolManifest = v.InferOutput<typeof runnerPoolManifestSchema>;
+/** A workspace's pool binding, as exposed to clients (never secret values). */
+export declare const runnerPoolConnectionSchema: v.ObjectSchema<{
+    readonly providerId: v.StringSchema<undefined>;
+    readonly label: v.StringSchema<undefined>;
+    readonly baseUrl: v.StringSchema<undefined>;
+    readonly connectedAt: v.NumberSchema<undefined>;
+    /** Which secret keys are set (names only), so the UI can show completeness. */
+    readonly secretKeys: v.ArraySchema<v.StringSchema<undefined>, undefined>;
+}, undefined>;
+export type RunnerPoolConnection = v.InferOutput<typeof runnerPoolConnectionSchema>;
+/**
+ * Register (or replace) a workspace's runner pool. The org supplies the actual
+ * per-tenant scheduler-API secret values here (write-only); they are encrypted
+ * and stored in D1 and never returned. Every `secretRef.key` in the manifest
+ * must have a matching entry in `secrets`.
+ */
+export declare const registerRunnerPoolSchema: v.ObjectSchema<{
+    readonly manifest: v.ObjectSchema<{
+        readonly providerId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 64, undefined>]>;
+        readonly label: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 120, undefined>]>;
+        /** Scheduler API root; dispatch/poll/release paths are appended to it. */
+        readonly baseUrl: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 2000, undefined>]>;
+        readonly auth: v.VariantSchema<"type", [v.ObjectSchema<{
+            readonly type: v.LiteralSchema<"none", undefined>;
+        }, undefined>, v.ObjectSchema<{
+            readonly type: v.LiteralSchema<"api_key", undefined>;
+            readonly headerName: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>]>;
+            readonly secretRef: v.ObjectSchema<{
+                readonly key: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 64, undefined>]>;
+            }, undefined>;
+            readonly valuePrefix: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+        }, undefined>, v.ObjectSchema<{
+            readonly type: v.LiteralSchema<"bearer", undefined>;
+            readonly secretRef: v.ObjectSchema<{
+                readonly key: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 64, undefined>]>;
+            }, undefined>;
+        }, undefined>, v.ObjectSchema<{
+            readonly type: v.LiteralSchema<"basic", undefined>;
+            readonly usernameSecretRef: v.ObjectSchema<{
+                readonly key: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 64, undefined>]>;
+            }, undefined>;
+            readonly passwordSecretRef: v.ObjectSchema<{
+                readonly key: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 64, undefined>]>;
+            }, undefined>;
+        }, undefined>, v.ObjectSchema<{
+            readonly type: v.LiteralSchema<"oauth2_client_credentials", undefined>;
+            readonly tokenUrl: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 2000, undefined>]>;
+            readonly clientIdSecretRef: v.ObjectSchema<{
+                readonly key: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 64, undefined>]>;
+            }, undefined>;
+            readonly clientSecretSecretRef: v.ObjectSchema<{
+                readonly key: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 64, undefined>]>;
+            }, undefined>;
+            readonly scope: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+            readonly audience: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+        }, undefined>, v.ObjectSchema<{
+            readonly type: v.LiteralSchema<"custom_headers", undefined>;
+            readonly headers: v.ArraySchema<v.ObjectSchema<{
+                readonly name: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>]>;
+                readonly secretRef: v.ObjectSchema<{
+                    readonly key: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 64, undefined>]>;
+                }, undefined>;
+            }, undefined>, undefined>;
+        }, undefined>], undefined>;
+        /** Starts a job on the pool (analogous to the harness `POST /run`). */
+        readonly dispatch: v.ObjectSchema<{
+            readonly method: v.PicklistSchema<["GET", "POST", "PUT", "PATCH", "DELETE"], undefined>;
+            readonly pathTemplate: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MaxLengthAction<string, 2000, undefined>]>;
+            readonly query: v.OptionalSchema<v.ArraySchema<v.ObjectSchema<{
+                readonly key: v.StringSchema<undefined>;
+                readonly value: v.StringSchema<undefined>;
+            }, undefined>, undefined>, undefined>;
+            readonly headers: v.OptionalSchema<v.ArraySchema<v.ObjectSchema<{
+                readonly name: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>]>;
+                readonly value: v.StringSchema<undefined>;
+            }, undefined>, undefined>, undefined>;
+            readonly bodyTemplate: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+            readonly timeoutMs: v.OptionalSchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, 60000, undefined>]>, undefined>;
+        }, undefined>;
+        /** Reads a job's status (analogous to the harness `GET /jobs/{id}`). */
+        readonly poll: v.ObjectSchema<{
+            readonly method: v.PicklistSchema<["GET", "POST", "PUT", "PATCH", "DELETE"], undefined>;
+            readonly pathTemplate: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MaxLengthAction<string, 2000, undefined>]>;
+            readonly query: v.OptionalSchema<v.ArraySchema<v.ObjectSchema<{
+                readonly key: v.StringSchema<undefined>;
+                readonly value: v.StringSchema<undefined>;
+            }, undefined>, undefined>, undefined>;
+            readonly headers: v.OptionalSchema<v.ArraySchema<v.ObjectSchema<{
+                readonly name: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>]>;
+                readonly value: v.StringSchema<undefined>;
+            }, undefined>, undefined>, undefined>;
+            readonly bodyTemplate: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+            readonly timeoutMs: v.OptionalSchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, 60000, undefined>]>, undefined>;
+        }, undefined>;
+        /** Optional: frees the runner/job once the worker is done with it. */
+        readonly release: v.OptionalSchema<v.ObjectSchema<{
+            readonly method: v.PicklistSchema<["GET", "POST", "PUT", "PATCH", "DELETE"], undefined>;
+            readonly pathTemplate: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MaxLengthAction<string, 2000, undefined>]>;
+            readonly query: v.OptionalSchema<v.ArraySchema<v.ObjectSchema<{
+                readonly key: v.StringSchema<undefined>;
+                readonly value: v.StringSchema<undefined>;
+            }, undefined>, undefined>, undefined>;
+            readonly headers: v.OptionalSchema<v.ArraySchema<v.ObjectSchema<{
+                readonly name: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>]>;
+                readonly value: v.StringSchema<undefined>;
+            }, undefined>, undefined>, undefined>;
+            readonly bodyTemplate: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+            readonly timeoutMs: v.OptionalSchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, 60000, undefined>]>, undefined>;
+        }, undefined>, undefined>;
+        readonly response: v.ObjectSchema<{
+            /** Dot-path to the scheduler's status string (e.g. `state`, `data.phase`). */
+            readonly statusPath: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+            /** Translate scheduler status strings → harness states. */
+            readonly statusMap: v.OptionalSchema<v.ArraySchema<v.ObjectSchema<{
+                readonly from: v.StringSchema<undefined>;
+                readonly to: v.PicklistSchema<["running", "done", "failed"], undefined>;
+            }, undefined>, undefined>, undefined>;
+            /** Dot-paths to live subtask counts, surfaced as "N/M done" progress. */
+            readonly progressCompletedPath: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+            readonly progressInProgressPath: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+            readonly progressTotalPath: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+            /** Dot-paths to the finished work product. */
+            readonly prUrlPath: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+            readonly branchPath: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+            readonly summaryPath: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+            /**
+             * Dot-path to the WHOLE structured result object the harness records (the
+             * harness `result`: `{ prUrl, branch, summary, service, spec, assessment, report,
+             * defaultBranch, pushed, resolved, usage }`). A pool that proxies the cat-factory
+             * executor-harness verbatim should set this so EVERY structured product — the
+             * blueprint tree, the spec doc, the merge assessment, the test report, the bootstrap
+             * default branch — is forwarded, not just the PR url/branch/summary scalars. Known
+             * fields are coerced by type; unknown ones are ignored. The individual scalar paths
+             * above still apply (and override) for schedulers that surface them out-of-envelope.
+             */
+            readonly resultPath: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+            /** Dot-path to a job-level error message (a failed job, or a structured error). */
+            readonly errorPath: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+        }, undefined>;
+    }, undefined>;
+    readonly secrets: v.RecordSchema<v.StringSchema<undefined>, v.StringSchema<undefined>, undefined>;
+}, undefined>;
+export type RegisterRunnerPoolInput = v.InferOutput<typeof registerRunnerPoolSchema>;
+/** Rotate/replace the per-tenant secret bundle without re-sending the manifest. */
+export declare const updateRunnerPoolSecretsSchema: v.ObjectSchema<{
+    readonly secrets: v.RecordSchema<v.StringSchema<undefined>, v.StringSchema<undefined>, undefined>;
+}, undefined>;
+export type UpdateRunnerPoolSecretsInput = v.InferOutput<typeof updateRunnerPoolSecretsSchema>;
+//# sourceMappingURL=runners.d.ts.map

package/dist/runners.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runners.d.ts","sourceRoot":"","sources":["../src/runners.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAmC5B,kFAAkF;AAClF,eAAO,MAAM,yBAAyB;;aAA6B,CAAA;AACnE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,yBAAyB,CAAC,CAAA;AAEjF,oEAAoE;AACpE,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;0BAA8B,CAAA;AACrE,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,0BAA0B,CAAC,CAAA;AAEnF;;;;;;;GAOG;AACH,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;aAAmC,CAAA;AAC/E,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,+BAA+B,CAAC,CAAA;AAE7F,wEAAwE;AACxE,eAAO,MAAM,oBAAoB,4DAA4C,CAAA;AAC7E,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,oBAAoB,CAAC,CAAA;AAEvE;;;;;GAKG;AACH,eAAO,MAAM,+BAA+B;IAC1C,8EAA8E;;IAE9E,2DAA2D;;;;;IAE3D,yEAAyE;;;;IAIzE,8CAA8C;;;;IAI9C;;;;;;;;;OASG;;IAEH,mFAAmF;;aAEnF,CAAA;AACF,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,+BAA+B,CAAC,CAAA;AAE7F,8EAA8E;AAC9E,eAAO,MAAM,wBAAwB;;;IAGnC,0EAA0E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAG1E,uEAAuE;;;;;;;;;;;;;;;IAEvE,wEAAwE;;;;;;;;;;;;;;;IAExE,sEAAsE;;;;;;;;;;;;;;;;QAvCtE,8EAA8E;;QAE9E,2DAA2D;;;;;QAE3D,yEAAyE;;;;QAIzE,8CAA8C;;;;QAI9C;;;;;;;;;WASG;;QAEH,mFAAmF;;;aAmBnF,CAAA;AACF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,wBAAwB,CAAC,CAAA;AAE/E,+EAA+E;AAC/E,eAAO,MAAM,0BAA0B;;;;;IAKrC,+EAA+E;;aAE/E,CAAA;AACF,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,0BAA0B,CAAC,CAAA;AAInF;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB;;;;QAhCnC,0EAA0E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAG1E,uEAAuE;;;;;;;;;;;;;;;QAEvE,wEAAwE;;;;;;;;;;;;;;;QAExE,sEAAsE;;;;;;;;;;;;;;;;YAvCtE,8EAA8E;;YAE9E,2DAA2D;;;;;YAE3D,yEAAyE;;;;YAIzE,8CAA8C;;;;YAI9C;;;;;;;;;eASG;;YAEH,mFAAmF;;;;;aA4CnF,CAAA;AACF,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,wBAAwB,CAAC,CAAA;AAEpF,mFAAmF;AACnF,eAAO,MAAM,6BAA6B;;aAExC,CAAA;AACF,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,6BAA6B,CAAC,CAAA"}

package/dist/runners.js

@@ -0,0 +1,117 @@
+import * as v from 'valibot';
+import { environmentAuthSchemeSchema, environmentRequestTemplateSchema, environmentSecretRefSchema, } from './environments.js';
+// ---------------------------------------------------------------------------
+// Self-hosted runner-pool wire contracts ("bring your own infra").
+//
+// By default the repo-operating coding jobs run in per-run Cloudflare Containers.
+// An organization can instead point cat-factory at its OWN container/runner pool
+// (k8s, Nomad, an internal scheduler) running the standard executor-harness
+// image. The harness job protocol is fixed (`POST /jobs` with the kind in the body
+// → `GET /jobs/{id}`); what is org-specific is the *scheduler in front of the pool*
+// — how a job is assigned to a runner and how its status is read back.
+//
+// So, exactly like the ephemeral-environment provider (ADR 0003), an org
+// describes its pool scheduler declaratively: a manifest of HTTP request
+// templates for `dispatch` / `poll` / (optional) `release`, the auth scheme for
+// calling it, and a dot-path mapping from that scheduler's (arbitrary) response
+// onto the canonical harness job view. One generic adapter in the worker
+// interprets any manifest — no per-org code.
+//
+// The generic auth / request-template / secret-ref shapes are shared with the
+// environment manifest (they are not environment-specific); we reuse them here
+// rather than redefining them.
+//
+// Secret handling mirrors environments: the manifest references the pool-API
+// credentials by *logical key* only; the values are supplied at registration,
+// stored encrypted-at-rest in D1, and resolved in-memory at call time. The
+// per-job GitHub + LLM-proxy tokens travel in the dispatch payload (the runner
+// needs them) but are never logged.
+// ---------------------------------------------------------------------------
+/** A credential reference by logical key (shared shape with the env manifest). */
+export const runnerPoolSecretRefSchema = environmentSecretRefSchema;
+/** How the worker authenticates to the org's pool scheduler API. */
+export const runnerPoolAuthSchemeSchema = environmentAuthSchemeSchema;
+/**
+ * One HTTP call against the pool scheduler API. Generic: any method, a path
+ * appended to the manifest `baseUrl`, optional query/headers and a body, all
+ * supporting `{{var}}` interpolation. Variables come from a bounded namespace:
+ * `{{input.jobId}}` (the cat-factory execution id the pool is keyed on) and
+ * `{{input.job}}` (the full harness job spec as a JSON string — embed it raw to
+ * forward the job verbatim, e.g. `{"payload":{{input.job}}}`).
+ */
+export const runnerPoolRequestTemplateSchema = environmentRequestTemplateSchema;
+/** The harness job lifecycle states the worker drives a job through. */
+export const runnerJobStateSchema = v.picklist(['running', 'done', 'failed']);
+/**
+ * Maps the pool scheduler's arbitrary status response onto the canonical job
+ * view via dot-path field extraction. `statusMap` translates the scheduler's own
+ * status strings onto the harness states; the result/progress/error paths pull
+ * the work product out of whatever envelope the scheduler returns.
+ */
+export const runnerPoolResponseMappingSchema = v.object({
+    /** Dot-path to the scheduler's status string (e.g. `state`, `data.phase`). */
+    statusPath: v.optional(v.string()),
+    /** Translate scheduler status strings → harness states. */
+    statusMap: v.optional(v.array(v.object({ from: v.string(), to: runnerJobStateSchema }))),
+    /** Dot-paths to live subtask counts, surfaced as "N/M done" progress. */
+    progressCompletedPath: v.optional(v.string()),
+    progressInProgressPath: v.optional(v.string()),
+    progressTotalPath: v.optional(v.string()),
+    /** Dot-paths to the finished work product. */
+    prUrlPath: v.optional(v.string()),
+    branchPath: v.optional(v.string()),
+    summaryPath: v.optional(v.string()),
+    /**
+     * Dot-path to the WHOLE structured result object the harness records (the
+     * harness `result`: `{ prUrl, branch, summary, service, spec, assessment, report,
+     * defaultBranch, pushed, resolved, usage }`). A pool that proxies the cat-factory
+     * executor-harness verbatim should set this so EVERY structured product — the
+     * blueprint tree, the spec doc, the merge assessment, the test report, the bootstrap
+     * default branch — is forwarded, not just the PR url/branch/summary scalars. Known
+     * fields are coerced by type; unknown ones are ignored. The individual scalar paths
+     * above still apply (and override) for schedulers that surface them out-of-envelope.
+     */
+    resultPath: v.optional(v.string()),
+    /** Dot-path to a job-level error message (a failed job, or a structured error). */
+    errorPath: v.optional(v.string()),
+});
+/** The full declarative description of an org's runner-pool scheduler API. */
+export const runnerPoolManifestSchema = v.object({
+    providerId: v.pipe(v.string(), v.regex(/^[a-z0-9-]+$/), v.minLength(1), v.maxLength(64)),
+    label: v.pipe(v.string(), v.trim(), v.minLength(1), v.maxLength(120)),
+    /** Scheduler API root; dispatch/poll/release paths are appended to it. */
+    baseUrl: v.pipe(v.string(), v.trim(), v.minLength(1), v.maxLength(2000)),
+    auth: runnerPoolAuthSchemeSchema,
+    /** Starts a job on the pool (analogous to the harness `POST /run`). */
+    dispatch: runnerPoolRequestTemplateSchema,
+    /** Reads a job's status (analogous to the harness `GET /jobs/{id}`). */
+    poll: runnerPoolRequestTemplateSchema,
+    /** Optional: frees the runner/job once the worker is done with it. */
+    release: v.optional(runnerPoolRequestTemplateSchema),
+    response: runnerPoolResponseMappingSchema,
+});
+/** A workspace's pool binding, as exposed to clients (never secret values). */
+export const runnerPoolConnectionSchema = v.object({
+    providerId: v.string(),
+    label: v.string(),
+    baseUrl: v.string(),
+    connectedAt: v.number(),
+    /** Which secret keys are set (names only), so the UI can show completeness. */
+    secretKeys: v.array(v.string()),
+});
+// ---- Request bodies -------------------------------------------------------
+/**
+ * Register (or replace) a workspace's runner pool. The org supplies the actual
+ * per-tenant scheduler-API secret values here (write-only); they are encrypted
+ * and stored in D1 and never returned. Every `secretRef.key` in the manifest
+ * must have a matching entry in `secrets`.
+ */
+export const registerRunnerPoolSchema = v.object({
+    manifest: runnerPoolManifestSchema,
+    secrets: v.record(v.string(), v.string()),
+});
+/** Rotate/replace the per-tenant secret bundle without re-sending the manifest. */
+export const updateRunnerPoolSecretsSchema = v.object({
+    secrets: v.record(v.string(), v.string()),
+});
+//# sourceMappingURL=runners.js.map

package/dist/runners.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runners.js","sourceRoot":"","sources":["../src/runners.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAC5B,OAAO,EACL,2BAA2B,EAC3B,gCAAgC,EAChC,0BAA0B,GAC3B,MAAM,mBAAmB,CAAA;AAE1B,8EAA8E;AAC9E,mEAAmE;AACnE,EAAE;AACF,kFAAkF;AAClF,iFAAiF;AACjF,4EAA4E;AAC5E,mFAAmF;AACnF,oFAAoF;AACpF,uEAAuE;AACvE,EAAE;AACF,yEAAyE;AACzE,yEAAyE;AACzE,gFAAgF;AAChF,gFAAgF;AAChF,yEAAyE;AACzE,6CAA6C;AAC7C,EAAE;AACF,8EAA8E;AAC9E,+EAA+E;AAC/E,+BAA+B;AAC/B,EAAE;AACF,6EAA6E;AAC7E,8EAA8E;AAC9E,2EAA2E;AAC3E,+EAA+E;AAC/E,oCAAoC;AACpC,8EAA8E;AAE9E,kFAAkF;AAClF,MAAM,CAAC,MAAM,yBAAyB,GAAG,0BAA0B,CAAA;AAGnE,oEAAoE;AACpE,MAAM,CAAC,MAAM,0BAA0B,GAAG,2BAA2B,CAAA;AAGrE;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,gCAAgC,CAAA;AAG/E,wEAAwE;AACxE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAA;AAG7E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,8EAA8E;IAC9E,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAClC,2DAA2D;IAC3D,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC;IACxF,yEAAyE;IACzE,qBAAqB,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC7C,sBAAsB,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC9C,iBAAiB,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACzC,8CAA8C;IAC9C,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACjC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAClC,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACnC;;;;;;;;;OASG;IACH,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAClC,mFAAmF;IACnF,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAClC,CAAC,CAAA;AAGF,8EAA8E;AAC9E,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACxF,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACrE,0EAA0E;IAC1E,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACxE,IAAI,EAAE,0BAA0B;IAChC,uEAAuE;IACvE,QAAQ,EAAE,+BAA+B;IACzC,wEAAwE;IACxE,IAAI,EAAE,+BAA+B;IACrC,sEAAsE;IACtE,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IACpD,QAAQ,EAAE,+BAA+B;CAC1C,CAAC,CAAA;AAGF,+EAA+E;AAC/E,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,+EAA+E;IAC/E,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAChC,CAAC,CAAA;AAGF,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,QAAQ,EAAE,wBAAwB;IAClC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;CAC1C,CAAC,CAAA;AAGF,mFAAmF;AACnF,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;CAC1C,CAAC,CAAA"}