@claudexor/orchestrator 3.2.0 → 3.3.7-rc.0

package/dist/delegatedHome.d.ts

@@ -0,0 +1,156 @@
+import type { ConfinementHost } from "@claudexor/core";
+import type { AccessProfile, HarnessConfinement, WorkspaceEnvelope } from "@claudexor/schema";
+import type { WorkspaceManager } from "@claudexor/workspace";
+/** What one attempt's harness HOME actually resolved to, and whether it is scoped. */
+export interface ScopedHarnessHome {
+    /** Env patch to spread onto the harness spec; absent when the attempt inherits the operator's env. */
+    env?: Record<string, string>;
+    /** Applied fact, recorded on the attempt so the caller can verify rather than trust. */
+    isolated: boolean;
+    /** The scoped home directory, or null when the attempt inherits the operator's. */
+    homeDir: string | null;
+    /** The APPLIED OS boundary, or null when this attempt runs without one. */
+    confinement: HarnessConfinement | null;
+    /**
+     * Why this attempt got NO boundary, when it asked for one and the host had
+     * none. Null both when a boundary WAS applied and when none was ever asked
+     * for — an ordinary run is not "unconfined", it is out of scope, and the
+     * terminal gate below depends on being able to tell those apart.
+     */
+    confinementUnavailableReason: string | null;
+}
+/** Access profiles under which the harness can modify the filesystem. */
+export declare function isMutatingAccess(access: AccessProfile): boolean;
+/**
+ * Whether this run's lanes should be told to stand their own sandbox down.
+ *
+ * Only a delegated run asks for an engine-provided boundary, and only a host
+ * that can actually provide one earns the trade. Telling a harness to drop its
+ * native sandbox where Claudexor will NOT replace it is a pure loss — strictly
+ * worse than never having asked — so the two conditions are one expression
+ * rather than a flag the caller passes and a check nobody makes.
+ */
+export declare function externallyConfinedLane(delegated: boolean, host?: ConfinementHost): boolean;
+/** Roots the confinement is drawn against; overridable so tests never touch the real home. */
+export interface ConfinementRoots {
+    operatorHome: string;
+    runtimeRoot: string;
+    nativeStateRoot: string;
+}
+export declare function defaultConfinementRoots(): ConfinementRoots;
+/**
+ * Decide the harness HOME and the OS boundary one attempt runs under.
+ *
+ * Unchanged for ordinary runs: an ISOLATED envelope gets the envelope's scoped
+ * home, while an IN-PLACE attempt deliberately inherits the operator's native
+ * environment so a harness whose native session store hangs off `$HOME` can
+ * resume its vendor conversation.
+ *
+ * A DELEGATED run (`execution.delegated`) is scoped either way, and that is a
+ * BEHAVIORAL CHANGE against that deliberate design — live + agent is exactly
+ * the configuration a delegated mutating subagent uses. It is taken knowingly:
+ * the caller is a machine orchestrator that owns the workspace, and the
+ * operator's real `$HOME` holds material no delegated harness may read, above
+ * all `~/.claudexor/v3/daemon/token`, which grants the entire control API.
+ *
+ * THE SCOPED HOME IS NOT THE BOUNDARY. It redirects `~`-relative lookups and
+ * nothing more; the token above is one absolute path away, and a live probe
+ * read it out of an ordinary `workspace_write` agent run. So a delegated
+ * MUTATING attempt additionally gets an OS-ENFORCED boundary
+ * (`applyConfinement`), verified against a path it denies before the harness is
+ * spawned. A delegated READ-ONLY attempt keeps the harness's own read-only
+ * enforcement instead: confinement stands that enforcement down (macOS refuses
+ * nested sandboxes), which would be a net loss where there is no shell to
+ * confine.
+ *
+ * WHERE THE HOST HAS NO BOUNDARY the attempt still runs, and says so: the
+ * reason travels onto the attempt record, into the child's prompt and into the
+ * caller's result. A delegated run that refused on every platform Claudexor has
+ * not implemented a mechanism for would be a macOS-only feature wearing a
+ * general name.
+ *
+ * THE COST of the scoped home, stated plainly: an in-place delegated attempt
+ * CANNOT resume a native vendor session whose store lives under the real `$HOME`
+ * — cursor (`~/.cursor`) and opencode (XDG data under `$HOME`) lose resume.
+ * codex and claude keep it: their native session stores are Claudexor-owned
+ * directories that the adapter re-points on top of this env and that the
+ * confinement carves back out, and the macOS login Keychain is reached through
+ * the declared scoped-home bridge (INV-067), so subscription auth is unaffected.
+ *
+ * Never degrades silently: a delegated attempt whose scoped home is not on disk,
+ * or whose boundary cannot be applied and proven, refuses.
+ */
+export declare function scopedHarnessHome(wsm: WorkspaceManager, envelope: WorkspaceEnvelope, inPlaceEnvelope: boolean, delegated: boolean, access?: AccessProfile, roots?: ConfinementRoots, host?: ConfinementHost): ScopedHarnessHome;
+/**
+ * What the CHILD is told, when it is running without an OS boundary.
+ *
+ * Second of the three places the absence is disclosed (the attempt record and
+ * the caller's result are the other two). A model that believes it is sandboxed
+ * when it is not is the one reader whose behaviour actually changes on this
+ * fact, so it is stated to the model in plain words rather than left in an
+ * artifact it never reads.
+ */
+export declare function confinementNotice(home: ScopedHarnessHome | null | undefined): string | null;
+/**
+ * What an attempt's harness process ACTUALLY ran under.
+ *
+ * One shape, written by the success path and the failure path alike. An attempt
+ * that spawned a harness and then died still ran a process, and the caller of a
+ * delegated run still needs to know what that process could reach — "it failed"
+ * is not an answer to "was it confined".
+ */
+export interface AppliedAttemptFacts {
+    harness_home_isolated: boolean;
+    harness_home_dir: string | null;
+    access_applied: AccessProfile;
+    credential_profile_applied: string | null;
+    /**
+     * OPAQUE mechanism label, never a platform and never a promise: it is written
+     * only together with the path below, which is the proof it was enforced.
+     */
+    confinement_mechanism: string | null;
+    confinement_profile_digest: string | null;
+    confinement_verified_denied_path: string | null;
+    /**
+     * Why this attempt ran with NO boundary. This is the field that makes an
+     * honestly unconfined attempt DIFFERENT from an attempt whose evidence is
+     * simply missing — the first is auditable, the second is not.
+     */
+    confinement_unavailable_reason: string | null;
+}
+/**
+ * `home` is nullable on purpose: an attempt that died BEFORE its home was
+ * decided still writes the block, with every field null. A record that omits
+ * the fields entirely is indistinguishable from one written by an engine that
+ * never had them, which is the ambiguity the terminal check exists to close.
+ */
+export declare function appliedAttemptFacts(home: ScopedHarnessHome | null | undefined, access: AccessProfile, credentialProfileId: string | null): AppliedAttemptFacts;
+/**
+ * Whether an attempt's record is auditable for a delegated MUTATING run.
+ *
+ * The distinction this predicate exists to draw: evidence that is MISSING is
+ * still a reason to refuse — an attempt that cannot say what it ran under is
+ * indistinguishable from one that ran unconfined behind a green terminal.
+ * Evidence that honestly says "no boundary here, and here is why" is COMPLETE;
+ * the absence of a boundary is a fact about the host, not a gap in the record,
+ * and refusing on it would make a delegated mutating run impossible wherever
+ * Claudexor has not implemented a mechanism.
+ *
+ * A named mechanism is a claim, and only `verified_denied_path` discharges it —
+ * so a record carrying the name without the proof is NOT complete, and neither
+ * is one that claims a boundary and a reason for its absence at the same time.
+ */
+export declare function appliedEvidenceComplete(facts: AppliedAttemptFacts | null | undefined): boolean;
+/**
+ * The terminal gate, shared by every lane that assembles attempts.
+ *
+ * A delegated MUTATING run may only reach a terminal when EVERY attempt it ran
+ * can state what it ran under. One lane checking and its twin not is how a
+ * mutating child ends up unconfined behind a green run, so the rule lives here
+ * and both callers spend it.
+ */
+export declare function assertDelegatedEvidence(delegated: boolean, access: AccessProfile, attempts: readonly {
+    attemptId: string;
+    applied?: AppliedAttemptFacts;
+}[]): void;
+//# sourceMappingURL=delegatedHome.d.ts.map

package/dist/delegatedHome.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegatedHome.d.ts","sourceRoot":"","sources":["../src/delegatedHome.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAOvD,OAAO,KAAK,EAAE,aAAa,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAG9F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,sFAAsF;AACtF,MAAM,WAAW,iBAAiB;IAChC,sGAAsG;IACtG,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,wFAAwF;IACxF,QAAQ,EAAE,OAAO,CAAC;IAClB,mFAAmF;IACnF,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,2EAA2E;IAC3E,WAAW,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACvC;;;;;OAKG;IACH,4BAA4B,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7C;AAED,yEAAyE;AACzE,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAE/D;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,eAAe,GAAG,OAAO,CAE1F;AAED,8FAA8F;AAC9F,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,wBAAgB,uBAAuB,IAAI,gBAAgB,CAM1D;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,gBAAgB,EACrB,QAAQ,EAAE,iBAAiB,EAC3B,eAAe,EAAE,OAAO,EACxB,SAAS,EAAE,OAAO,EAClB,MAAM,GAAE,aAAiC,EACzC,KAAK,GAAE,gBAA4C,EACnD,IAAI,CAAC,EAAE,eAAe,GACrB,iBAAiB,CAoCnB;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,iBAAiB,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAU3F;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,mBAAmB;IAClC,qBAAqB,EAAE,OAAO,CAAC;IAC/B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,cAAc,EAAE,aAAa,CAAC;IAC9B,0BAA0B,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C;;;OAGG;IACH,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,0BAA0B,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,gCAAgC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChD;;;;OAIG;IACH,8BAA8B,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/C;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,iBAAiB,GAAG,IAAI,GAAG,SAAS,EAC1C,MAAM,EAAE,aAAa,EACrB,mBAAmB,EAAE,MAAM,GAAG,IAAI,GACjC,mBAAmB,CAWrB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,mBAAmB,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAM9F;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,OAAO,EAClB,MAAM,EAAE,aAAa,EACrB,QAAQ,EAAE,SAAS;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,mBAAmB,CAAA;CAAE,EAAE,GACxE,IAAI,CAON"}

package/dist/delegatedHome.js

@@ -0,0 +1,179 @@
+import { existsSync } from "node:fs";
+import { applyConfinement, confinementBoundaryAvailable, DelegatedEvidenceIncompleteError, DelegatedHomeUnavailableError, } from "@claudexor/core";
+import { confinementBoundaryProven } from "@claudexor/schema";
+import { claudexorOwnedRoot, nativeHarnessStateRoot, userHomeDir } from "@claudexor/util";
+/** Access profiles under which the harness can modify the filesystem. */
+export function isMutatingAccess(access) {
+    return access !== "readonly";
+}
+/**
+ * Whether this run's lanes should be told to stand their own sandbox down.
+ *
+ * Only a delegated run asks for an engine-provided boundary, and only a host
+ * that can actually provide one earns the trade. Telling a harness to drop its
+ * native sandbox where Claudexor will NOT replace it is a pure loss — strictly
+ * worse than never having asked — so the two conditions are one expression
+ * rather than a flag the caller passes and a check nobody makes.
+ */
+export function externallyConfinedLane(delegated, host) {
+    return delegated && confinementBoundaryAvailable(host).available;
+}
+export function defaultConfinementRoots() {
+    return {
+        operatorHome: userHomeDir(),
+        runtimeRoot: claudexorOwnedRoot(),
+        nativeStateRoot: nativeHarnessStateRoot(),
+    };
+}
+/**
+ * Decide the harness HOME and the OS boundary one attempt runs under.
+ *
+ * Unchanged for ordinary runs: an ISOLATED envelope gets the envelope's scoped
+ * home, while an IN-PLACE attempt deliberately inherits the operator's native
+ * environment so a harness whose native session store hangs off `$HOME` can
+ * resume its vendor conversation.
+ *
+ * A DELEGATED run (`execution.delegated`) is scoped either way, and that is a
+ * BEHAVIORAL CHANGE against that deliberate design — live + agent is exactly
+ * the configuration a delegated mutating subagent uses. It is taken knowingly:
+ * the caller is a machine orchestrator that owns the workspace, and the
+ * operator's real `$HOME` holds material no delegated harness may read, above
+ * all `~/.claudexor/v3/daemon/token`, which grants the entire control API.
+ *
+ * THE SCOPED HOME IS NOT THE BOUNDARY. It redirects `~`-relative lookups and
+ * nothing more; the token above is one absolute path away, and a live probe
+ * read it out of an ordinary `workspace_write` agent run. So a delegated
+ * MUTATING attempt additionally gets an OS-ENFORCED boundary
+ * (`applyConfinement`), verified against a path it denies before the harness is
+ * spawned. A delegated READ-ONLY attempt keeps the harness's own read-only
+ * enforcement instead: confinement stands that enforcement down (macOS refuses
+ * nested sandboxes), which would be a net loss where there is no shell to
+ * confine.
+ *
+ * WHERE THE HOST HAS NO BOUNDARY the attempt still runs, and says so: the
+ * reason travels onto the attempt record, into the child's prompt and into the
+ * caller's result. A delegated run that refused on every platform Claudexor has
+ * not implemented a mechanism for would be a macOS-only feature wearing a
+ * general name.
+ *
+ * THE COST of the scoped home, stated plainly: an in-place delegated attempt
+ * CANNOT resume a native vendor session whose store lives under the real `$HOME`
+ * — cursor (`~/.cursor`) and opencode (XDG data under `$HOME`) lose resume.
+ * codex and claude keep it: their native session stores are Claudexor-owned
+ * directories that the adapter re-points on top of this env and that the
+ * confinement carves back out, and the macOS login Keychain is reached through
+ * the declared scoped-home bridge (INV-067), so subscription auth is unaffected.
+ *
+ * Never degrades silently: a delegated attempt whose scoped home is not on disk,
+ * or whose boundary cannot be applied and proven, refuses.
+ */
+export function scopedHarnessHome(wsm, envelope, inPlaceEnvelope, delegated, access = "workspace_write", roots = defaultConfinementRoots(), host) {
+    if (inPlaceEnvelope && !delegated) {
+        return {
+            isolated: false,
+            homeDir: null,
+            confinement: null,
+            confinementUnavailableReason: null,
+        };
+    }
+    const env = wsm.envFor(envelope);
+    const homeDir = env["HOME"];
+    if (delegated && (!homeDir || !existsSync(homeDir))) {
+        throw new DelegatedHomeUnavailableError(`delegated run cannot be confined: the scoped harness home for attempt ${envelope.attempt_id} is missing (${homeDir || "unset"})`);
+    }
+    const outcome = delegated && isMutatingAccess(access)
+        ? applyConfinement({
+            operatorHome: roots.operatorHome,
+            runtimeRoot: roots.runtimeRoot,
+            nativeStateRoot: roots.nativeStateRoot,
+            scopedHome: homeDir,
+            worktree: envelope.worktree_path,
+        }, host)
+        : { confinement: null, unavailableReason: null };
+    return {
+        env,
+        isolated: true,
+        homeDir: homeDir ?? null,
+        confinement: outcome.confinement,
+        confinementUnavailableReason: outcome.unavailableReason,
+    };
+}
+/**
+ * What the CHILD is told, when it is running without an OS boundary.
+ *
+ * Second of the three places the absence is disclosed (the attempt record and
+ * the caller's result are the other two). A model that believes it is sandboxed
+ * when it is not is the one reader whose behaviour actually changes on this
+ * fact, so it is stated to the model in plain words rather than left in an
+ * artifact it never reads.
+ */
+export function confinementNotice(home) {
+    const reason = home?.confinementUnavailableReason;
+    if (!reason)
+        return null;
+    return [
+        "Engine disclosure — NO OS-ENFORCED BOUNDARY: this delegated run was asked to put your",
+        `process inside a kernel-enforced filesystem boundary and could not: ${reason}.`,
+        "Nothing outside this notice stops you from reading or writing any path this user account",
+        "can reach. Confine yourself to the worktree you were given and the HOME you were given,",
+        "and do not read the operator's credential stores or Claudexor's own runtime directory.",
+    ].join("\n");
+}
+/**
+ * `home` is nullable on purpose: an attempt that died BEFORE its home was
+ * decided still writes the block, with every field null. A record that omits
+ * the fields entirely is indistinguishable from one written by an engine that
+ * never had them, which is the ambiguity the terminal check exists to close.
+ */
+export function appliedAttemptFacts(home, access, credentialProfileId) {
+    return {
+        harness_home_isolated: home?.isolated ?? false,
+        harness_home_dir: home?.homeDir ?? null,
+        access_applied: access,
+        credential_profile_applied: credentialProfileId,
+        confinement_mechanism: home?.confinement?.mechanism ?? null,
+        confinement_profile_digest: home?.confinement?.profile_digest ?? null,
+        confinement_verified_denied_path: home?.confinement?.verified_denied_path ?? null,
+        confinement_unavailable_reason: home?.confinementUnavailableReason ?? null,
+    };
+}
+/**
+ * Whether an attempt's record is auditable for a delegated MUTATING run.
+ *
+ * The distinction this predicate exists to draw: evidence that is MISSING is
+ * still a reason to refuse — an attempt that cannot say what it ran under is
+ * indistinguishable from one that ran unconfined behind a green terminal.
+ * Evidence that honestly says "no boundary here, and here is why" is COMPLETE;
+ * the absence of a boundary is a fact about the host, not a gap in the record,
+ * and refusing on it would make a delegated mutating run impossible wherever
+ * Claudexor has not implemented a mechanism.
+ *
+ * A named mechanism is a claim, and only `verified_denied_path` discharges it —
+ * so a record carrying the name without the proof is NOT complete, and neither
+ * is one that claims a boundary and a reason for its absence at the same time.
+ */
+export function appliedEvidenceComplete(facts) {
+    if (!facts || !facts.harness_home_isolated || !facts.harness_home_dir)
+        return false;
+    if (facts.confinement_mechanism) {
+        return confinementBoundaryProven(facts) && !facts.confinement_unavailable_reason;
+    }
+    return Boolean(facts.confinement_unavailable_reason);
+}
+/**
+ * The terminal gate, shared by every lane that assembles attempts.
+ *
+ * A delegated MUTATING run may only reach a terminal when EVERY attempt it ran
+ * can state what it ran under. One lane checking and its twin not is how a
+ * mutating child ends up unconfined behind a green run, so the rule lives here
+ * and both callers spend it.
+ */
+export function assertDelegatedEvidence(delegated, access, attempts) {
+    if (!delegated || !isMutatingAccess(access))
+        return;
+    const unauditable = attempts.filter((attempt) => !appliedEvidenceComplete(attempt.applied));
+    if (unauditable.length === 0)
+        return;
+    throw new DelegatedEvidenceIncompleteError(`delegated mutating run cannot terminalize: ${unauditable.length} attempt(s) state neither a proven confinement nor a reason there was none (${unauditable.map((attempt) => attempt.attemptId).join(", ")})`);
+}
+//# sourceMappingURL=delegatedHome.js.map

package/dist/delegatedHome.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegatedHome.js","sourceRoot":"","sources":["../src/delegatedHome.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EACL,gBAAgB,EAChB,4BAA4B,EAC5B,gCAAgC,EAChC,6BAA6B,GAC9B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAsB1F,yEAAyE;AACzE,MAAM,UAAU,gBAAgB,CAAC,MAAqB;IACpD,OAAO,MAAM,KAAK,UAAU,CAAC;AAC/B,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CAAC,SAAkB,EAAE,IAAsB;IAC/E,OAAO,SAAS,IAAI,4BAA4B,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC;AACnE,CAAC;AASD,MAAM,UAAU,uBAAuB;IACrC,OAAO;QACL,YAAY,EAAE,WAAW,EAAE;QAC3B,WAAW,EAAE,kBAAkB,EAAE;QACjC,eAAe,EAAE,sBAAsB,EAAE;KAC1C,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAqB,EACrB,QAA2B,EAC3B,eAAwB,EACxB,SAAkB,EAClB,MAAM,GAAkB,iBAAiB,EACzC,KAAK,GAAqB,uBAAuB,EAAE,EACnD,IAAsB;IAEtB,IAAI,eAAe,IAAI,CAAC,SAAS,EAAE,CAAC;QAClC,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,IAAI;YACjB,4BAA4B,EAAE,IAAI;SACnC,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5B,IAAI,SAAS,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,6BAA6B,CACrC,yEAAyE,QAAQ,CAAC,UAAU,gBAAgB,OAAO,IAAI,OAAO,GAAG,CAClI,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GACX,SAAS,IAAI,gBAAgB,CAAC,MAAM,CAAC;QACnC,CAAC,CAAC,gBAAgB,CACd;YACE,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,UAAU,EAAE,OAAiB;YAC7B,QAAQ,EAAE,QAAQ,CAAC,aAAa;SACjC,EACD,IAAI,CACL;QACH,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC;IACrD,OAAO;QACL,GAAG;QACH,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,OAAO,IAAI,IAAI;QACxB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,4BAA4B,EAAE,OAAO,CAAC,iBAAiB;KACxD,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAA0C;IAC1E,MAAM,MAAM,GAAG,IAAI,EAAE,4BAA4B,CAAC;IAClD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO;QACL,uFAAuF;QACvF,uEAAuE,MAAM,GAAG;QAChF,0FAA0F;QAC1F,yFAAyF;QACzF,wFAAwF;KACzF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AA8BD;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,IAA0C,EAC1C,MAAqB,EACrB,mBAAkC;IAElC,OAAO;QACL,qBAAqB,EAAE,IAAI,EAAE,QAAQ,IAAI,KAAK;QAC9C,gBAAgB,EAAE,IAAI,EAAE,OAAO,IAAI,IAAI;QACvC,cAAc,EAAE,MAAM;QACtB,0BAA0B,EAAE,mBAAmB;QAC/C,qBAAqB,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,IAAI,IAAI;QAC3D,0BAA0B,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,IAAI,IAAI;QACrE,gCAAgC,EAAE,IAAI,EAAE,WAAW,EAAE,oBAAoB,IAAI,IAAI;QACjF,8BAA8B,EAAE,IAAI,EAAE,4BAA4B,IAAI,IAAI;KAC3E,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAA6C;IACnF,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,qBAAqB,IAAI,CAAC,KAAK,CAAC,gBAAgB;QAAE,OAAO,KAAK,CAAC;IACpF,IAAI,KAAK,CAAC,qBAAqB,EAAE,CAAC;QAChC,OAAO,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,8BAA8B,CAAC;IACnF,CAAC;IACD,OAAO,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;AACvD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CACrC,SAAkB,EAClB,MAAqB,EACrB,QAAyE;IAEzE,IAAI,CAAC,SAAS,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;QAAE,OAAO;IACpD,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,uBAAuB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5F,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACrC,MAAM,IAAI,gCAAgC,CACxC,8CAA8C,WAAW,CAAC,MAAM,+EAA+E,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC7M,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -2,5 +2,5 @@ export * from "./orchestrator.js";
 export * from "./requestRequirements.js";
 export * from "./delegationBudgetAuthority.js";
 export * from "./routing-failure.js";
-export { defaultCredentialRoute, effectiveAuthPreference, nextUpIdentity, probeCredentialProfileStatus, profileStatusAdmits, } from "./credential-profiles.js";
+export { defaultCredentialRoute, effectiveAuthPreference, nextUpIdentity, probeCredentialProfileStatus, profileStatusAdmits, vendorVerifiedProfileStatus, } from "./credential-profiles.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,0BAA0B,CAAC;AACzC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,sBAAsB,CAAC;AACrC,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,cAAc,EACd,4BAA4B,EAC5B,mBAAmB,GACpB,MAAM,0BAA0B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,0BAA0B,CAAC;AACzC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,sBAAsB,CAAC;AACrC,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,cAAc,EACd,4BAA4B,EAC5B,mBAAmB,EACnB,2BAA2B,GAC5B,MAAM,0BAA0B,CAAC"}

package/dist/index.js

@@ -2,5 +2,5 @@ export * from "./orchestrator.js";
 export * from "./requestRequirements.js";
 export * from "./delegationBudgetAuthority.js";
 export * from "./routing-failure.js";
-export { defaultCredentialRoute, effectiveAuthPreference, nextUpIdentity, probeCredentialProfileStatus, profileStatusAdmits, } from "./credential-profiles.js";
+export { defaultCredentialRoute, effectiveAuthPreference, nextUpIdentity, probeCredentialProfileStatus, profileStatusAdmits, vendorVerifiedProfileStatus, } from "./credential-profiles.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,0BAA0B,CAAC;AACzC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,sBAAsB,CAAC;AACrC,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,cAAc,EACd,4BAA4B,EAC5B,mBAAmB,GACpB,MAAM,0BAA0B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,0BAA0B,CAAC;AACzC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,sBAAsB,CAAC;AACrC,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,cAAc,EACd,4BAA4B,EAC5B,mBAAmB,EACnB,2BAA2B,GAC5B,MAAM,0BAA0B,CAAC"}

package/dist/orchestrator.d.ts

@@ -1,4 +1,4 @@
-import type { AccessProfile, Attachment, ControlReviewerPanelEntry, EffortHint, HarnessCapabilities, KnownModelEntry, ExternalContextPolicy, HarnessEvent, InteractionHandlerResult, InteractionRequest, ModeKind, PaidBudget, QuotaSnapshot, RoutingGoal, ProtectedPathApproval, RequestRequirementResolution, RunEvent, RunLifecycle, RunOutcomeFacts, TestCommandInvocation, ProviderFamily, ImplementationTransport, WebPolicySupport } from "@claudexor/schema";
+import type { AccessProfile, Attachment, ControlReviewerPanelEntry, EffortHint, HarnessCapabilities, KnownModelEntry, ExternalContextPolicy, HarnessEvent, InteractionHandlerResult, InteractionRequest, ModeKind, PaidBudget, QuotaAbsence, QuotaSnapshot, RoutingGoal, ProtectedPathApproval, RequestRequirementResolution, RunEvent, RunLifecycle, RunOutcomeFacts, TestCommandInvocation, ProviderFamily, ImplementationTransport, WebPolicySupport } from "@claudexor/schema";
 import { type PlannerAttemptArgs, type PlannerAttemptOutcome } from "./plannerAttempt.js";
 export type { PlannerAttemptArgs, PlannerAttemptOutcome } from "./plannerAttempt.js";
 import { type ExtraMcpServer } from "@claudexor/schema";
@@ -19,6 +19,10 @@ export interface OrchestratorDeps {
     routingGoal?: RoutingGoal;
     /** Durable global quota projection, injected by the daemon boundary. */
     quotaSnapshots?: () => readonly QuotaSnapshot[];
+    /** The same projection's typed ABSENCES — the half that carries
+     * `auth_revoked`, i.e. the vendor's own rejection of a profile's credential.
+     * Without it, admission can only read the local login store. */
+    quotaAbsences?: () => readonly QuotaAbsence[];
     /** Persist typed live quota/cooldown events into that same projection. */
     quotaEventSink?: (harnessId: string, event: HarnessEvent) => void;
     /** Ordered explicit reviewer panel. Unlike legacy per-family overrides this
@@ -223,6 +227,13 @@ export interface RunInput {
      * is the deliverable. Only honored by convergence modes.
      */
     inPlace?: boolean;
+    /**
+     * `execution.delegated`: this run is driven by an EXTERNAL orchestrator that
+     * owns the workspace. Every attempt is then confined to a scoped harness HOME
+     * even in-place, trading native-session resume for confinement (see
+     * `scopedHarnessHome`), and refusing rather than degrading when it cannot be.
+     */
+    delegated?: boolean;
     /**
      * Per-run globs no candidate may touch (create/modify/delete/rename). Unlike
      * project protected paths, these produce a deny-path violation; both require
@@ -421,8 +432,14 @@ export declare class Orchestrator {
      * metric. null = no profile selected or it does not resolve here. */
     private profileAuthRoute;
     private profilePolicy;
+    /** The quota poller's authenticated vendor evidence for THIS decision epoch,
+     * read once so every profile in the epoch is judged against one observation
+     * set. This is what makes profile readiness at admission mean the same thing
+     * it means on the Accounts card (INV-135 honesty). */
+    private vendorQuotaObservations;
     /** Fresh profile readiness for one rotation decision epoch. Accounts uses
-     * the same probe wrapper + admission predicate when projecting next_up. */
+     * the same probe wrapper + vendor overlay + admission predicate when
+     * projecting next_up. */
     private readyProfileIdsForRotation;
     private preflightProfile;
     /**
@@ -518,6 +535,14 @@ export declare class Orchestrator {
      * a non-thread run. Never throws: continuity failure degrades to no packet.
      */
     private resolveContinuity;
+    /**
+     * The ONE place an attempt's HOME and OS boundary are decided.
+     *
+     * Called by every caller of `runCandidateInEnvelope` INSIDE that caller's
+     * try, so a delegated refusal is caught by the same catch that writes the
+     * attempt record, and so the decided home is in scope there.
+     */
+    private harnessHomeFor;
     private runCandidateInEnvelope;
     private interactionChannelFor;
     /**

package/dist/orchestrator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"orchestrator.d.ts","sourceRoot":"","sources":["../src/orchestrator.ts"],"names":[],"mappings":"AAqCA,OAAO,KAAK,EACV,aAAa,EAKb,UAAU,EACV,yBAAyB,EACzB,UAAU,EACV,mBAAmB,EACnB,eAAe,EACf,qBAAqB,EACrB,YAAY,EAEZ,wBAAwB,EACxB,kBAAkB,EAClB,QAAQ,EACR,UAAU,EACV,aAAa,EACb,WAAW,EACX,qBAAqB,EAErB,4BAA4B,EAE5B,QAAQ,EACR,YAAY,EACZ,eAAe,EAEf,qBAAqB,EACrB,cAAc,EAGd,uBAAuB,EAEvB,gBAAgB,EAEjB,MAAM,mBAAmB,CAAC;AAO3B,OAAO,EAEL,KAAK,kBAAkB,EAEvB,KAAK,qBAAqB,EAC3B,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AACrF,OAAO,EAEL,KAAK,cAAc,EASpB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAsB,MAAM,iBAAiB,CAAC;AAa3F,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAG3E,OAAO,EAAE,4BAA4B,EAAE,MAAM,sBAAsB,CAAC;AA8CpE,OAAO,EAEL,KAAK,0BAA0B,EAGhC,MAAM,iBAAiB,CAAC;AAMzB,OAAO,EAAiB,KAAK,eAAe,EAAE,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAgD7F,OAAO,EAQL,KAAK,yBAAyB,EAC/B,MAAM,sBAAsB,CAAC;AAQ9B,OAAO,EAEL,KAAK,YAAY,EAOlB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,KAAK,aAAa,EAAuC,MAAM,sBAAsB,CAAC;AA8B/F,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,eAAe,CAAC;IAC1B,wDAAwD;IACxD,yBAAyB,CAAC,EAAE,yBAAyB,CAAC;IACtD,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC;IAC3B,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,wEAAwE;IACxE,cAAc,CAAC,EAAE,MAAM,SAAS,aAAa,EAAE,CAAC;IAChD,0EAA0E;IAC1E,cAAc,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,KAAK,IAAI,CAAC;IAClE;;2DAEuD;IACvD,aAAa,CAAC,EAAE,yBAAyB,EAAE,CAAC;IAC5C;;;OAGG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;IACzD,2FAA2F;IAC3F,eAAe,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC,CAAC;CAC/D;AAED;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,mEAAmE;IACnE,MAAM,EAAE,MAAM,CAAC;IACf,yEAAyE;IACzE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,uEAAuE;IACvE,UAAU,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IACxE,4EAA4E;IAC5E,eAAe,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACvF;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;kFAC8E;IAC9E,wBAAwB,CAAC,EAAE,yBAAyB,GAAG,IAAI,CAAC;IAC5D,MAAM,EAAE,MAAM,CAAC;IACf;;mDAE+C;IAC/C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,4EAA4E;IAC5E,WAAW,CAAC,EAAE,UAAU,EAAE,CAAC;IAC3B;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,WAAW,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;iCAC6B;IAC7B,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,mFAAmF;IACnF,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,mEAAmE;IACnE,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;qDAEiD;IACjD,OAAO,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1D,sEAAsE;IACtE,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;2CAEuC;IACvC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;0DAGsD;IACtD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,oEAAoE;IACpE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,6DAA6D;IAC7D,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,kEAAkE;IAClE,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC;6DACyD;IACzD,yBAAyB,CAAC,EAAE,MAAM,IAAI,CAAC;IACvC,0EAA0E;IAC1E,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC;;;;kEAI8D;IAC9D,cAAc,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IACvC,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,sFAAsF;IACtF,KAAK,CAAC,EAAE,qBAAqB,EAAE,CAAC;IAChC,0EAA0E;IAC1E,sBAAsB,CAAC,EAAE,qBAAqB,EAAE,CAAC;IACjD,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,kGAAkG;IAClG,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,2EAA2E;IAC3E,GAAG,CAAC,EAAE,qBAAqB,CAAC;IAC5B,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IAC9C;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;qFACiF;IACjF,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,6EAA6E;IAC7E,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB;;;2EAGuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACrC,0FAA0F;IAC1F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6EAA6E;IAC7E,cAAc,CAAC,EAAE,cAAc,GAAG,SAAS,GAAG,MAAM,CAAC;IACrD;gFAC4E;IAC5E,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IACjF,sFAAsF;IACtF;4EACwE;IACxE,iBAAiB,CAAC,EAAE,CAClB,SAAS,EAAE,MAAM,EACjB,eAAe,EAAE,MAAM,EACvB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,EAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,KACtB,IAAI,CAAC;IACV;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,uBAAuB,CAAC;IAC3C;+EAC2E;IAC3E,oBAAoB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,0BAA0B,KAAK,IAAI,CAAC;IACxF,kFAAkF;IAClF,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,CAAC;IACpC,gFAAgF;IAChF,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,CAAC;IAC3C,oFAAoF;IACpF,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,CAAC;IAC/C,iFAAiF;IACjF,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IAC/E;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,yBAAyB,KAAK,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACtF,mFAAmF;IACnF,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,uEAAuE;IACvE,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;;;;;OAQG;IACH,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC9C;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,yEAAyE;AACzE,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,kBAAkB,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,QAAQ,CAAC;IACf,6DAA6D;IAC7D,SAAS,EAAE,YAAY,CAAC;IACxB,kEAAkE;IAClE,KAAK,EAAE,eAAe,CAAC;IACvB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACvE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;gFAC4E;IAC5E,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB;;gCAE4B;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,sFAAsF;AACtF,UAAU,oBAAoB;IAC5B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;IAC1B,GAAG,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAClC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,mFAAmF;AACnF,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,cAAc,CAAC;IACxB,aAAa,EAAE,aAAa,CAAC;IAC7B,UAAU,EAAE,gBAAgB,CAAC;IAC7B,cAAc,EAAE,cAAc,CAAC;IAC/B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,kBAAkB,EAAE,4BAA4B,CAAC;IACjD;0CACsC;IACtC,eAAe,EAAE,4BAA4B,CAAC;IAC9C,mDAAmD;IACnD,qBAAqB,EAAE,4BAA4B,CAAC;IACpD;4FACwF;IACxF,YAAY,EAAE,SAAS,UAAU,EAAE,CAAC;IACpC,gFAAgF;IAChF,WAAW,EAAE,SAAS,eAAe,EAAE,CAAC;IACxC;qFACiF;IACjF,iBAAiB,EAAE,eAAe,GAAG,SAAS,GAAG,IAAI,CAAC;IACtD;gFAC4E;IAC5E,kBAAkB,EAAE,OAAO,CAAC;IAC5B;oCACgC;IAChC,mBAAmB,EAAE,OAAO,CAAC;IAC7B;+EAC2E;IAC3E,wBAAwB,EAAE,OAAO,CAAC;IAClC;;6CAEyC;IACzC,mBAAmB,EAAE,mBAAmB,CAAC,uBAAuB,CAAC,CAAC;IAClE;;2BAEuB;IACvB,uBAAuB,EAAE,mBAAmB,CAAC,2BAA2B,CAAC,CAAC;IAC1E;;qEAEiE;IACjE,oBAAoB,EAAE,OAAO,CAAC;IAC9B;;;0DAGsD;IACtD,8BAA8B,EAAE,OAAO,CAAC;IACxC,uBAAuB,EAAE,uBAAuB,CAAC;IACjD,QAAQ,EAAE,oBAAoB,GAAG,IAAI,CAAC;CACvC;AAQD,qBAAa,YAAY;IAaX,OAAO,CAAC,QAAQ,CAAC,IAAI;IAZjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiB;IACzC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAqC;IACzE;;;qFAGiF;IACjF,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAA4C;IAClF;;kDAE8C;IAC9C,MAAM,CAAC,QAAQ,CAAC,sBAAsB,QAAQ;IAE9C,YAA6B,IAAI,EAAE,gBAAgB,EAElD;IAED,2EAA2E;IACrE,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAOlE;IAEK,GAAG,CAAC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAiJtD;YAEa,gBAAgB;IAqB9B;;;;;;OAMG;YACW,6BAA6B;YAsD7B,4BAA4B;IAgB1C,OAAO,CAAC,wBAAwB;IAahC,OAAO,CAAC,aAAa;IAOrB,oGAAoG;IACpG,OAAO,CAAC,eAAe;IAIvB;;;;OAIG;IACH;wFACoF;IACpF,wDAAwD;IACxD,OAAO,CAAC,gBAAgB;IAIxB;6EACyE;IACzE,OAAO,CAAC,sBAAsB;IAM9B,OAAO,CAAC,UAAU;YAIJ,iBAAiB;IAqB/B;;;;;;;;OAQG;IACH,OAAO,CAAC,cAAc;IAWtB;;;;;OAKG;IACH,OAAO,CAAC,kBAAkB;IAI1B;;8EAE0E;IAC1E,OAAO,CAAC,yBAAyB;IAMjC,OAAO,CAAC,wBAAwB;IAqBhC;;;;yEAIqE;IACrE,OAAO,CAAC,gBAAgB;IAUxB,OAAO,CAAC,aAAa;IAKrB;+EAC2E;YAC7D,0BAA0B;YA8B1B,gBAAgB;IAiD9B;;;;;OAKG;IACH,OAAO,CAAC,eAAe;YAQT,wBAAwB;IA+btC;;;;OAIG;IACH,OAAO,CAAC,SAAS;IAmIjB;;;;;;;;OAQG;IACH,OAAO,CAAC,oBAAoB;IAyB5B;;;;;;OAMG;YACW,kBAAkB;IA0ChC;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IAQxB,OAAO,CAAC,kBAAkB;IAmB1B,gGAAgG;IAChG,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,MAAM;IAId,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,aAAa;IAOrB;;;;OAIG;IACH;;;;;;;;;OASG;IACH;;;;6DAIyD;IACzD,OAAO,CAAC,iBAAiB;IAsCzB,OAAO,CAAC,gBAAgB;IA0CxB;;;;;;OAMG;IACH,OAAO,CAAC,qBAAqB;IAc7B;;;;;;OAMG;IACH,OAAO,CAAC,iBAAiB;IAezB,OAAO,CAAC,cAAc;IAuEtB;;;;;;;;OAQG;YACW,iBAAiB;YA4GjB,sBAAsB;IA8hBpC,OAAO,CAAC,qBAAqB;IAwB7B;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,wBAAwB;YAiBlB,OAAO;IA28CrB,oGAAoG;IACpG,OAAO,CAAC,iBAAiB;IA+BzB,uGAAuG;IAEvG;;;;;;;;OAQG;IACH,OAAO,CAAC,YAAY;YAaN,UAAU;IAsKxB,OAAO,CAAC,wBAAwB;IAWhC,OAAO,CAAC,qBAAqB;IAU7B,OAAO,CAAC,wBAAwB;IAShC,OAAO,CAAC,2BAA2B;YAoBrB,cAAc;IA0gC5B,2EAA2E;IAC3E,OAAO,CAAC,kBAAkB;IAyE1B,sFAAsF;IAChF,iBAAiB,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAEhF;YACa,OAAO;IAoWrB;;6EAEyE;IACzE,OAAO,CAAC,WAAW;IAmBnB,sFAAsF;YACxE,MAAM;IAkBpB;gDAC4C;YAC9B,WAAW;IAmBzB,OAAO,CAAC,sBAAsB;IAM9B,OAAO,CAAC,qBAAqB;IAW7B;;;;;;OAMG;IACH,OAAO,CAAC,mBAAmB;YA+Db,iBAAiB;CA+yChC"}
+{"version":3,"file":"orchestrator.d.ts","sourceRoot":"","sources":["../src/orchestrator.ts"],"names":[],"mappings":"AAgDA,OAAO,KAAK,EACV,aAAa,EAKb,UAAU,EACV,yBAAyB,EACzB,UAAU,EACV,mBAAmB,EACnB,eAAe,EACf,qBAAqB,EACrB,YAAY,EAEZ,wBAAwB,EACxB,kBAAkB,EAClB,QAAQ,EACR,UAAU,EACV,YAAY,EACZ,aAAa,EACb,WAAW,EACX,qBAAqB,EAErB,4BAA4B,EAE5B,QAAQ,EACR,YAAY,EACZ,eAAe,EAEf,qBAAqB,EACrB,cAAc,EAGd,uBAAuB,EAEvB,gBAAgB,EAEjB,MAAM,mBAAmB,CAAC;AAO3B,OAAO,EAEL,KAAK,kBAAkB,EAEvB,KAAK,qBAAqB,EAC3B,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AACrF,OAAO,EAEL,KAAK,cAAc,EASpB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAsB,MAAM,iBAAiB,CAAC;AAa3F,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAG3E,OAAO,EAAE,4BAA4B,EAAE,MAAM,sBAAsB,CAAC;AA+CpE,OAAO,EAEL,KAAK,0BAA0B,EAGhC,MAAM,iBAAiB,CAAC;AAMzB,OAAO,EAAiB,KAAK,eAAe,EAAE,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAgD7F,OAAO,EAQL,KAAK,yBAAyB,EAC/B,MAAM,sBAAsB,CAAC;AAQ9B,OAAO,EAEL,KAAK,YAAY,EAOlB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,KAAK,aAAa,EAAuC,MAAM,sBAAsB,CAAC;AA8B/F,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,eAAe,CAAC;IAC1B,wDAAwD;IACxD,yBAAyB,CAAC,EAAE,yBAAyB,CAAC;IACtD,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC;IAC3B,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,wEAAwE;IACxE,cAAc,CAAC,EAAE,MAAM,SAAS,aAAa,EAAE,CAAC;IAChD;;oEAEgE;IAChE,aAAa,CAAC,EAAE,MAAM,SAAS,YAAY,EAAE,CAAC;IAC9C,0EAA0E;IAC1E,cAAc,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,KAAK,IAAI,CAAC;IAClE;;2DAEuD;IACvD,aAAa,CAAC,EAAE,yBAAyB,EAAE,CAAC;IAC5C;;;OAGG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;IACzD,2FAA2F;IAC3F,eAAe,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC,CAAC;CAC/D;AAED;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,mEAAmE;IACnE,MAAM,EAAE,MAAM,CAAC;IACf,yEAAyE;IACzE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,uEAAuE;IACvE,UAAU,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IACxE,4EAA4E;IAC5E,eAAe,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACvF;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;kFAC8E;IAC9E,wBAAwB,CAAC,EAAE,yBAAyB,GAAG,IAAI,CAAC;IAC5D,MAAM,EAAE,MAAM,CAAC;IACf;;mDAE+C;IAC/C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,4EAA4E;IAC5E,WAAW,CAAC,EAAE,UAAU,EAAE,CAAC;IAC3B;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,WAAW,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;iCAC6B;IAC7B,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,mFAAmF;IACnF,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,mEAAmE;IACnE,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;qDAEiD;IACjD,OAAO,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1D,sEAAsE;IACtE,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;2CAEuC;IACvC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;0DAGsD;IACtD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,oEAAoE;IACpE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,6DAA6D;IAC7D,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,kEAAkE;IAClE,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC;6DACyD;IACzD,yBAAyB,CAAC,EAAE,MAAM,IAAI,CAAC;IACvC,0EAA0E;IAC1E,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC;;;;kEAI8D;IAC9D,cAAc,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IACvC,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,sFAAsF;IACtF,KAAK,CAAC,EAAE,qBAAqB,EAAE,CAAC;IAChC,0EAA0E;IAC1E,sBAAsB,CAAC,EAAE,qBAAqB,EAAE,CAAC;IACjD,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,kGAAkG;IAClG,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,2EAA2E;IAC3E,GAAG,CAAC,EAAE,qBAAqB,CAAC;IAC5B,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IAC9C;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;qFACiF;IACjF,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,6EAA6E;IAC7E,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB;;;2EAGuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACrC,0FAA0F;IAC1F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6EAA6E;IAC7E,cAAc,CAAC,EAAE,cAAc,GAAG,SAAS,GAAG,MAAM,CAAC;IACrD;gFAC4E;IAC5E,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IACjF,sFAAsF;IACtF;4EACwE;IACxE,iBAAiB,CAAC,EAAE,CAClB,SAAS,EAAE,MAAM,EACjB,eAAe,EAAE,MAAM,EACvB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,EAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,KACtB,IAAI,CAAC;IACV;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,uBAAuB,CAAC;IAC3C;+EAC2E;IAC3E,oBAAoB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,0BAA0B,KAAK,IAAI,CAAC;IACxF,kFAAkF;IAClF,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,CAAC;IACpC,gFAAgF;IAChF,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,CAAC;IAC3C,oFAAoF;IACpF,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,CAAC;IAC/C,iFAAiF;IACjF,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IAC/E;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,yBAAyB,KAAK,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACtF,mFAAmF;IACnF,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,uEAAuE;IACvE,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;;;;;OAQG;IACH,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC9C;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,yEAAyE;AACzE,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,kBAAkB,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,QAAQ,CAAC;IACf,6DAA6D;IAC7D,SAAS,EAAE,YAAY,CAAC;IACxB,kEAAkE;IAClE,KAAK,EAAE,eAAe,CAAC;IACvB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACvE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;gFAC4E;IAC5E,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB;;gCAE4B;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,sFAAsF;AACtF,UAAU,oBAAoB;IAC5B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;IAC1B,GAAG,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAClC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,mFAAmF;AACnF,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,cAAc,CAAC;IACxB,aAAa,EAAE,aAAa,CAAC;IAC7B,UAAU,EAAE,gBAAgB,CAAC;IAC7B,cAAc,EAAE,cAAc,CAAC;IAC/B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,kBAAkB,EAAE,4BAA4B,CAAC;IACjD;0CACsC;IACtC,eAAe,EAAE,4BAA4B,CAAC;IAC9C,mDAAmD;IACnD,qBAAqB,EAAE,4BAA4B,CAAC;IACpD;4FACwF;IACxF,YAAY,EAAE,SAAS,UAAU,EAAE,CAAC;IACpC,gFAAgF;IAChF,WAAW,EAAE,SAAS,eAAe,EAAE,CAAC;IACxC;qFACiF;IACjF,iBAAiB,EAAE,eAAe,GAAG,SAAS,GAAG,IAAI,CAAC;IACtD;gFAC4E;IAC5E,kBAAkB,EAAE,OAAO,CAAC;IAC5B;oCACgC;IAChC,mBAAmB,EAAE,OAAO,CAAC;IAC7B;+EAC2E;IAC3E,wBAAwB,EAAE,OAAO,CAAC;IAClC;;6CAEyC;IACzC,mBAAmB,EAAE,mBAAmB,CAAC,uBAAuB,CAAC,CAAC;IAClE;;2BAEuB;IACvB,uBAAuB,EAAE,mBAAmB,CAAC,2BAA2B,CAAC,CAAC;IAC1E;;qEAEiE;IACjE,oBAAoB,EAAE,OAAO,CAAC;IAC9B;;;0DAGsD;IACtD,8BAA8B,EAAE,OAAO,CAAC;IACxC,uBAAuB,EAAE,uBAAuB,CAAC;IACjD,QAAQ,EAAE,oBAAoB,GAAG,IAAI,CAAC;CACvC;AAQD,qBAAa,YAAY;IAaX,OAAO,CAAC,QAAQ,CAAC,IAAI;IAZjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiB;IACzC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAqC;IACzE;;;qFAGiF;IACjF,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAA4C;IAClF;;kDAE8C;IAC9C,MAAM,CAAC,QAAQ,CAAC,sBAAsB,QAAQ;IAE9C,YAA6B,IAAI,EAAE,gBAAgB,EAElD;IAED,2EAA2E;IACrE,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAOlE;IAEK,GAAG,CAAC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAiJtD;YAEa,gBAAgB;IAqB9B;;;;;;OAMG;YACW,6BAA6B;YAsD7B,4BAA4B;IAgB1C,OAAO,CAAC,wBAAwB;IAahC,OAAO,CAAC,aAAa;IAOrB,oGAAoG;IACpG,OAAO,CAAC,eAAe;IAIvB;;;;OAIG;IACH;wFACoF;IACpF,wDAAwD;IACxD,OAAO,CAAC,gBAAgB;IAIxB;6EACyE;IACzE,OAAO,CAAC,sBAAsB;IAM9B,OAAO,CAAC,UAAU;YAIJ,iBAAiB;IAqB/B;;;;;;;;OAQG;IACH,OAAO,CAAC,cAAc;IAWtB;;;;;OAKG;IACH,OAAO,CAAC,kBAAkB;IAI1B;;8EAE0E;IAC1E,OAAO,CAAC,yBAAyB;IAMjC,OAAO,CAAC,wBAAwB;IAqBhC;;;;yEAIqE;IACrE,OAAO,CAAC,gBAAgB;IAUxB,OAAO,CAAC,aAAa;IAKrB;;;0DAGsD;IACtD,OAAO,CAAC,uBAAuB;IAO/B;;6BAEyB;YACX,0BAA0B;YAoC1B,gBAAgB;IAiD9B;;;;;OAKG;IACH,OAAO,CAAC,eAAe;YAQT,wBAAwB;IAwctC;;;;OAIG;IACH,OAAO,CAAC,SAAS;IAmIjB;;;;;;;;OAQG;IACH,OAAO,CAAC,oBAAoB;IAyB5B;;;;;;OAMG;YACW,kBAAkB;IA0ChC;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IAQxB,OAAO,CAAC,kBAAkB;IAmB1B,gGAAgG;IAChG,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,MAAM;IAId,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,aAAa;IAOrB;;;;OAIG;IACH;;;;;;;;;OASG;IACH;;;;6DAIyD;IACzD,OAAO,CAAC,iBAAiB;IAsCzB,OAAO,CAAC,gBAAgB;IA0CxB;;;;;;OAMG;IACH,OAAO,CAAC,qBAAqB;IAc7B;;;;;;OAMG;IACH,OAAO,CAAC,iBAAiB;IAezB,OAAO,CAAC,cAAc;IAuEtB;;;;;;;;OAQG;YACW,iBAAiB;IA4G/B;;;;;;OAMG;IACH,OAAO,CAAC,cAAc;YAgBR,sBAAsB;IAsjBpC,OAAO,CAAC,qBAAqB;IAwB7B;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,wBAAwB;YAiBlB,OAAO;IAo/CrB,oGAAoG;IACpG,OAAO,CAAC,iBAAiB;IA+BzB,uGAAuG;IAEvG;;;;;;;;OAQG;IACH,OAAO,CAAC,YAAY;YAaN,UAAU;IAsKxB,OAAO,CAAC,wBAAwB;IAWhC,OAAO,CAAC,qBAAqB;IAU7B,OAAO,CAAC,wBAAwB;IAShC,OAAO,CAAC,2BAA2B;YAoBrB,cAAc;IAkiC5B,2EAA2E;IAC3E,OAAO,CAAC,kBAAkB;IAyE1B,sFAAsF;IAChF,iBAAiB,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAEhF;YACa,OAAO;IAoWrB;;6EAEyE;IACzE,OAAO,CAAC,WAAW;IAmBnB,sFAAsF;YACxE,MAAM;IAkBpB;gDAC4C;YAC9B,WAAW;IAmBzB,OAAO,CAAC,sBAAsB;IAM9B,OAAO,CAAC,qBAAqB;IAW7B;;;;;;OAMG;IACH,OAAO,CAAC,mBAAmB;YA+Db,iBAAiB;CA+yChC"}