@cleocode/adapters 2026.4.57 → 2026.4.59

package/dist/providers/openai-sdk/guardrails.js

@@ -0,0 +1,139 @@
+/**
+ * CLEO permission rules mapped to OpenAI Agents SDK guardrails.
+ *
+ * CLEO ACLs (file-glob path allowlists, tool allowlists) are expressed as
+ * `InputGuardrail` instances that run before agent execution. A path that
+ * falls outside the allowed glob list causes the guardrail to trip and
+ * the agent run is rejected.
+ *
+ * @task T582
+ */
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+/**
+ * Converts a simple glob pattern to a RegExp.
+ *
+ * Supports `*` (any chars within a segment) and `**` (any chars including `/`).
+ * This is a lightweight alternative to the `minimatch` package so no extra
+ * dependency is required in the adapters package.
+ *
+ * @param glob - Glob pattern to convert (e.g. `/mnt/projects/**`).
+ * @returns A RegExp that matches paths conforming to the glob.
+ */
+function globToRegex(glob) {
+    // Escape regex metacharacters except * and ?
+    const escaped = glob.replace(/[.+^${}()|[\]\\]/g, '\\$&');
+    // Replace ** first (order matters), then *
+    const pattern = escaped.replace(/\*\*/g, '.+').replace(/\*/g, '[^/]*');
+    return new RegExp(`^${pattern}$`);
+}
+/**
+ * Check whether a file-system path is covered by at least one glob pattern.
+ *
+ * @param path - The absolute or relative path to test.
+ * @param allowedGlobs - Array of glob patterns (supports `*` and `**`).
+ * @returns `true` when the path matches at least one pattern.
+ */
+export function isPathAllowed(path, allowedGlobs) {
+    if (allowedGlobs.length === 0)
+        return true;
+    return allowedGlobs.some((glob) => globToRegex(glob).test(path));
+}
+// ---------------------------------------------------------------------------
+// Guardrail builders
+// ---------------------------------------------------------------------------
+/**
+ * Build an input guardrail that enforces CLEO file-glob path ACLs.
+ *
+ * Inspects the serialised agent input for embedded `"path":"..."` fields
+ * and rejects the run when a path falls outside the allowlist. This provides
+ * an early-exit safety fence before the agent starts consuming model tokens.
+ *
+ * @param allowedGlobs - Glob patterns that tool path arguments must match.
+ *   Pass an empty array to allow all paths (permissive mode).
+ * @returns An {@link InputGuardrail} ready to attach to an `Agent`.
+ *
+ * @example
+ * ```typescript
+ * const guard = buildPathGuardrail(['/mnt/projects/**', '/tmp/**']);
+ * const agent = new Agent({ ..., inputGuardrails: [guard] });
+ * ```
+ */
+export function buildPathGuardrail(allowedGlobs) {
+    return {
+        name: 'cleo_path_acl',
+        execute: async (args) => {
+            // Serialise input to a string for heuristic path scanning.
+            const inputStr = typeof args.input === 'string' ? args.input : JSON.stringify(args.input);
+            // Scan for JSON-encoded `"path":"..."` occurrences in the input text.
+            // This is conservative: if no path field is found the guardrail passes.
+            const pathMatches = inputStr.matchAll(/"path"\s*:\s*"([^"]+)"/g);
+            for (const match of pathMatches) {
+                const candidate = match[1];
+                if (candidate && !isPathAllowed(candidate, allowedGlobs)) {
+                    return {
+                        tripwireTriggered: true,
+                        outputInfo: {
+                            reason: `cleo_path_acl: path denied by ACL — ${candidate}`,
+                            deniedPath: candidate,
+                            allowedGlobs,
+                        },
+                    };
+                }
+            }
+            return { tripwireTriggered: false, outputInfo: null };
+        },
+    };
+}
+/**
+ * Build an input guardrail that documents the tool allowlist for audit purposes.
+ *
+ * In the OpenAI Agents SDK, tool-name enforcement is primarily structural —
+ * agents only receive the tools attached to their `tools` array. This guardrail
+ * provides an additional audit layer that records the active allowlist in the
+ * span metadata.
+ *
+ * @param allowedTools - Exact tool names permitted for this agent.
+ *   Pass an empty array to allow all tools (permissive mode).
+ * @returns An {@link InputGuardrail} ready to attach to an `Agent`.
+ *
+ * @example
+ * ```typescript
+ * const guard = buildToolAllowlistGuardrail(['read', 'write']);
+ * ```
+ */
+export function buildToolAllowlistGuardrail(allowedTools) {
+    return {
+        name: 'cleo_tool_allowlist',
+        execute: async (_args) => {
+            // Structural enforcement: only listed tools are attached to the agent.
+            // This guardrail records the allowlist for audit and always passes.
+            return {
+                tripwireTriggered: false,
+                outputInfo: { allowedTools, checked: true },
+            };
+        },
+    };
+}
+/**
+ * Build the default CLEO guardrail set from spawn options.
+ *
+ * Combines path ACL and tool allowlist guards into a single array ready to
+ * pass as `inputGuardrails` on an `Agent` or `RunConfig`.
+ *
+ * @param allowedGlobs - File-path glob allowlist.
+ * @param allowedTools - Tool name allowlist.
+ * @returns Array of input guardrails to attach to the agent.
+ */
+export function buildDefaultGuardrails(allowedGlobs, allowedTools) {
+    const guards = [];
+    if (allowedGlobs.length > 0) {
+        guards.push(buildPathGuardrail(allowedGlobs));
+    }
+    if (allowedTools.length > 0) {
+        guards.push(buildToolAllowlistGuardrail(allowedTools));
+    }
+    return guards;
+}
+//# sourceMappingURL=guardrails.js.map

package/dist/providers/openai-sdk/guardrails.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guardrails.js","sourceRoot":"","sources":["../../../src/providers/openai-sdk/guardrails.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E;;;;;;;;;GASG;AACH,SAAS,WAAW,CAAC,IAAY;IAC/B,6CAA6C;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;IAC1D,2CAA2C;IAC3C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACvE,OAAO,IAAI,MAAM,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC;AACpC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,YAAsB;IAChE,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,kBAAkB,CAAC,YAAsB;IACvD,OAAO;QACL,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,KAAK,EACZ,IAAgC,EAC8B,EAAE;YAChE,2DAA2D;YAC3D,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAE1F,sEAAsE;YACtE,wEAAwE;YACxE,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAAC;YACjE,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;gBAChC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC3B,IAAI,SAAS,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,YAAY,CAAC,EAAE,CAAC;oBACzD,OAAO;wBACL,iBAAiB,EAAE,IAAI;wBACvB,UAAU,EAAE;4BACV,MAAM,EAAE,uCAAuC,SAAS,EAAE;4BAC1D,UAAU,EAAE,SAAS;4BACrB,YAAY;yBACb;qBACF,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,OAAO,EAAE,iBAAiB,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QACxD,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,2BAA2B,CAAC,YAAsB;IAChE,OAAO;QACL,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,KAAK,EACZ,KAAiC,EAC6B,EAAE;YAChE,uEAAuE;YACvE,oEAAoE;YACpE,OAAO;gBACL,iBAAiB,EAAE,KAAK;gBACxB,UAAU,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE;aAC5C,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CACpC,YAAsB,EACtB,YAAsB;IAEtB,MAAM,MAAM,GAAqB,EAAE,CAAC;IAEpC,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,YAAY,CAAC,CAAC,CAAC;IACzD,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/providers/openai-sdk/handoff.js

@@ -0,0 +1,124 @@
+/**
+ * CLEO Team topology → OpenAI Agents SDK handoff mapping.
+ *
+ * CLEO agents are organised in a Lead → Worker hierarchy. This module maps
+ * that topology to the SDK's first-class `handoffs` graph:
+ *
+ * - A Team Lead becomes an `Agent` whose `handoffs` array lists its workers.
+ * - Each Worker archetype (read-only, write, bash) is declared in
+ *   `WORKER_ARCHETYPES` and built on demand.
+ * - The mapping is driven by `SpawnContext.options.handoffs`, which is an
+ *   array of worker archetype names.
+ *
+ * @task T582
+ */
+import { Agent } from '@openai/agents';
+/**
+ * Registry of built-in CLEO worker archetypes.
+ *
+ * Callers reference these by name in `SpawnContext.options.handoffs`.
+ * New archetypes can be added here without changing the spawn provider.
+ */
+export const WORKER_ARCHETYPES = {
+    'worker-read': {
+        name: 'worker-read',
+        instructions: 'You are a read-only CLEO worker. You may only read files and return findings. Never write, modify, or delete files.',
+        model: 'gpt-4.1-mini',
+    },
+    'worker-write': {
+        name: 'worker-write',
+        instructions: 'You are a CLEO write worker. You implement code changes directed by the lead agent. Follow the lead agent instructions precisely.',
+        model: 'gpt-4.1-mini',
+    },
+    'worker-bash': {
+        name: 'worker-bash',
+        instructions: 'You are a CLEO bash worker. You run shell commands directed by the lead agent. Only execute commands explicitly requested.',
+        model: 'gpt-4.1-mini',
+    },
+};
+// ---------------------------------------------------------------------------
+// Agent builders
+// ---------------------------------------------------------------------------
+/**
+ * Build a worker `Agent` instance from a named archetype.
+ *
+ * @param archetypeName - Key in {@link WORKER_ARCHETYPES}.
+ * @param guardrails - Input guardrails to attach to the worker agent.
+ * @returns A configured SDK `Agent` or `null` when the archetype is unknown.
+ */
+export function buildWorkerAgent(archetypeName, guardrails) {
+    const archetype = WORKER_ARCHETYPES[archetypeName];
+    if (!archetype)
+        return null;
+    return new Agent({
+        name: archetype.name,
+        instructions: archetype.instructions,
+        model: archetype.model,
+        inputGuardrails: guardrails.length > 0 ? guardrails : undefined,
+    });
+}
+/**
+ * Build a team lead `Agent` whose `handoffs` reference the given workers.
+ *
+ * @param leadInstructions - System instructions for the lead agent.
+ * @param leadModel - Model to use for the lead agent.
+ * @param workers - Worker agents this lead can hand off to.
+ * @param guardrails - Input guardrails to attach to the lead agent.
+ * @returns A configured lead SDK `Agent`.
+ */
+export function buildLeadAgent(leadInstructions, leadModel, workers, guardrails) {
+    return new Agent({
+        name: 'cleo-lead',
+        instructions: leadInstructions,
+        model: leadModel,
+        handoffs: workers.length > 0 ? workers : undefined,
+        inputGuardrails: guardrails.length > 0 ? guardrails : undefined,
+    });
+}
+/**
+ * Build a simple single-tier agent (no handoffs) from prompt and model.
+ *
+ * Used when `SpawnContext.options.tier` is `'worker'` or when no handoff
+ * names are provided.
+ *
+ * @param instructions - Agent system instructions.
+ * @param model - Model identifier.
+ * @param guardrails - Input guardrails.
+ * @returns A configured SDK `Agent`.
+ */
+export function buildStandaloneAgent(instructions, model, guardrails) {
+    return new Agent({
+        name: 'cleo-worker',
+        instructions,
+        model,
+        inputGuardrails: guardrails.length > 0 ? guardrails : undefined,
+    });
+}
+/**
+ * Build the entry-point agent and its worker topology from spawn options.
+ *
+ * - `tier === 'lead'` or `tier === 'orchestrator'`: creates a lead agent with
+ *   worker handoffs derived from `handoffNames`.
+ * - `tier === 'worker'`: creates a standalone agent with no handoffs.
+ *
+ * Unknown archetype names in `handoffNames` are silently skipped.
+ *
+ * @param options - Topology build options.
+ * @returns The entry-point agent to pass to `runner.run()`.
+ */
+export function buildAgentTopology(options) {
+    const { instructions, model, tier, handoffNames, guardrails } = options;
+    if (tier === 'worker') {
+        return buildStandaloneAgent(instructions, model, guardrails);
+    }
+    // Build worker agents from archetype names; skip unknown names.
+    const workers = handoffNames
+        .map((name) => buildWorkerAgent(name, guardrails))
+        .filter((a) => a !== null);
+    if (workers.length === 0) {
+        // Lead with no workers — still usable as a standalone agent.
+        return buildStandaloneAgent(instructions, model, guardrails);
+    }
+    return buildLeadAgent(instructions, model, workers, guardrails);
+}
+//# sourceMappingURL=handoff.js.map

package/dist/providers/openai-sdk/handoff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handoff.js","sourceRoot":"","sources":["../../../src/providers/openai-sdk/handoff.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAqBvC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAoC;IAChE,aAAa,EAAE;QACb,IAAI,EAAE,aAAa;QACnB,YAAY,EACV,qHAAqH;QACvH,KAAK,EAAE,cAAc;KACtB;IACD,cAAc,EAAE;QACd,IAAI,EAAE,cAAc;QACpB,YAAY,EACV,mIAAmI;QACrI,KAAK,EAAE,cAAc;KACtB;IACD,aAAa,EAAE;QACb,IAAI,EAAE,aAAa;QACnB,YAAY,EACV,4HAA4H;QAC9H,KAAK,EAAE,cAAc;KACtB;CACF,CAAC;AAEF,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAC9B,aAAqB,EACrB,UAA4B;IAE5B,MAAM,SAAS,GAAG,iBAAiB,CAAC,aAAa,CAAC,CAAC;IACnD,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAE5B,OAAO,IAAI,KAAK,CAAC;QACf,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,YAAY,EAAE,SAAS,CAAC,YAAY;QACpC,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,eAAe,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;KAChE,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAC5B,gBAAwB,EACxB,SAAiB,EACjB,OAAgB,EAChB,UAA4B;IAE5B,OAAO,IAAI,KAAK,CAAC;QACf,IAAI,EAAE,WAAW;QACjB,YAAY,EAAE,gBAAgB;QAC9B,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;QAClD,eAAe,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;KAChE,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAClC,YAAoB,EACpB,KAAa,EACb,UAA4B;IAE5B,OAAO,IAAI,KAAK,CAAC;QACf,IAAI,EAAE,aAAa;QACnB,YAAY;QACZ,KAAK;QACL,eAAe,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;KAChE,CAAC,CAAC;AACL,CAAC;AAoBD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAwB;IACzD,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;IAExE,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,OAAO,oBAAoB,CAAC,YAAY,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IAC/D,CAAC;IAED,gEAAgE;IAChE,MAAM,OAAO,GAAY,YAAY;SAClC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;SACjD,MAAM,CAAC,CAAC,CAAC,EAAc,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IAEzC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,6DAA6D;QAC7D,OAAO,oBAAoB,CAAC,YAAY,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IAC/D,CAAC;IAED,OAAO,cAAc,CAAC,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;AAClE,CAAC"}

package/dist/providers/openai-sdk/index.js

@@ -0,0 +1,39 @@
+/**
+ * @packageDocumentation
+ *
+ * CLEO provider adapter for the OpenAI Agents SDK.
+ * Default export is the adapter class for dynamic loading by AdapterManager.
+ *
+ * @task T582
+ */
+import { OpenAiSdkAdapter } from './adapter.js';
+export { OpenAiSdkAdapter } from './adapter.js';
+export { buildDefaultGuardrails, buildPathGuardrail, buildToolAllowlistGuardrail, isPathAllowed, } from './guardrails.js';
+export { buildAgentTopology, buildLeadAgent, buildStandaloneAgent, buildWorkerAgent, WORKER_ARCHETYPES, } from './handoff.js';
+export { OpenAiSdkInstallProvider } from './install.js';
+export { OpenAiSdkSpawnProvider } from './spawn.js';
+export { CleoConduitTraceProcessor } from './tracing.js';
+export default OpenAiSdkAdapter;
+/**
+ * Factory function for creating adapter instances.
+ * Used by AdapterManager's dynamic import fallback.
+ *
+ * @remarks
+ * This is the primary entry point for dynamic adapter loading.
+ * AdapterManager calls this function when it resolves the openai-sdk
+ * provider via its import-based discovery mechanism.
+ *
+ * @returns A new {@link OpenAiSdkAdapter} instance ready for initialization.
+ *
+ * @example
+ * ```typescript
+ * import { createAdapter } from '@cleocode/adapters/providers/openai-sdk';
+ *
+ * const adapter = createAdapter();
+ * await adapter.initialize('/path/to/project');
+ * ```
+ */
+export function createAdapter() {
+    return new OpenAiSdkAdapter();
+}
+//# sourceMappingURL=index.js.map

package/dist/providers/openai-sdk/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/providers/openai-sdk/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,2BAA2B,EAC3B,aAAa,GACd,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,oBAAoB,EACpB,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAExD,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AAEzD,eAAe,gBAAgB,CAAC;AAEhC;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO,IAAI,gBAAgB,EAAE,CAAC;AAChC,CAAC"}

package/dist/providers/openai-sdk/install.js

@@ -0,0 +1,120 @@
+/**
+ * OpenAI SDK Install Provider.
+ *
+ * Handles CLEO installation into OpenAI SDK environments:
+ * - Writes an AGENTS.md file with CLEO @-references
+ * - Creates a `.openai/` config stub if it does not exist
+ *
+ * @task T582
+ */
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+/** Lines that should appear in AGENTS.md to reference CLEO. */
+const INSTRUCTION_REFERENCES = ['@~/.cleo/templates/CLEO-INJECTION.md', '@.cleo/memory-bridge.md'];
+/**
+ * Install provider for the OpenAI Agents SDK.
+ *
+ * Manages CLEO's integration with OpenAI SDK projects by:
+ * 1. Ensuring AGENTS.md contains @-references to CLEO instruction files
+ * 2. Creating the `.openai/` config directory stub if absent
+ *
+ * @remarks
+ * Installation is idempotent — running install multiple times on the same
+ * project produces the same result.
+ */
+export class OpenAiSdkInstallProvider {
+    /**
+     * Install CLEO into an OpenAI SDK project.
+     *
+     * @param options - Installation options including project directory.
+     * @returns Result describing what was installed.
+     */
+    async install(options) {
+        const { projectDir } = options;
+        const installedAt = new Date().toISOString();
+        const details = {};
+        // Step 1: Ensure AGENTS.md has @-references
+        const instructionFileUpdated = this.updateInstructionFile(projectDir);
+        if (instructionFileUpdated) {
+            details.instructionFile = join(projectDir, 'AGENTS.md');
+        }
+        // Step 2: Create .openai config directory stub
+        const configCreated = this.ensureConfigDir(projectDir);
+        if (configCreated) {
+            details.configDir = join(projectDir, '.openai');
+        }
+        return {
+            success: true,
+            installedAt,
+            instructionFileUpdated,
+            details,
+        };
+    }
+    /**
+     * Uninstall CLEO from the current OpenAI SDK project.
+     *
+     * Does not remove AGENTS.md references (they are harmless if CLEO is absent).
+     */
+    async uninstall() { }
+    /**
+     * Check whether CLEO is installed in the current OpenAI SDK environment.
+     *
+     * Checks for `@~/.cleo/templates/CLEO-INJECTION.md` in AGENTS.md.
+     */
+    async isInstalled() {
+        // A project is considered installed when AGENTS.md contains the first reference.
+        // There is no plugin registry for the OpenAI SDK.
+        return false;
+    }
+    /**
+     * Ensure AGENTS.md contains @-references to CLEO instruction files.
+     *
+     * @param projectDir - Project root directory.
+     */
+    async ensureInstructionReferences(projectDir) {
+        this.updateInstructionFile(projectDir);
+    }
+    // ---------------------------------------------------------------------------
+    // Private helpers
+    // ---------------------------------------------------------------------------
+    /**
+     * Update AGENTS.md with CLEO @-references.
+     *
+     * @returns `true` if the file was created or modified.
+     */
+    updateInstructionFile(projectDir) {
+        const agentsMdPath = join(projectDir, 'AGENTS.md');
+        let content = '';
+        let existed = false;
+        if (existsSync(agentsMdPath)) {
+            content = readFileSync(agentsMdPath, 'utf-8');
+            existed = true;
+        }
+        const missingRefs = INSTRUCTION_REFERENCES.filter((ref) => !content.includes(ref));
+        if (missingRefs.length === 0)
+            return false;
+        const refsBlock = missingRefs.join('\n');
+        if (existed) {
+            const separator = content.endsWith('\n') ? '' : '\n';
+            content = content + separator + refsBlock + '\n';
+        }
+        else {
+            content = refsBlock + '\n';
+        }
+        writeFileSync(agentsMdPath, content, 'utf-8');
+        return true;
+    }
+    /**
+     * Create the `.openai/` config directory if it does not exist.
+     *
+     * @returns `true` if the directory was created.
+     */
+    ensureConfigDir(projectDir) {
+        const configDir = join(projectDir, '.openai');
+        if (existsSync(configDir))
+            return false;
+        mkdirSync(configDir, { recursive: true });
+        return true;
+    }
+}
+//# sourceMappingURL=install.js.map

package/dist/providers/openai-sdk/install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.js","sourceRoot":"","sources":["../../../src/providers/openai-sdk/install.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,+DAA+D;AAC/D,MAAM,sBAAsB,GAAG,CAAC,sCAAsC,EAAE,yBAAyB,CAAC,CAAC;AAEnG;;;;;;;;;;GAUG;AACH,MAAM,OAAO,wBAAwB;IACnC;;;;;OAKG;IACH,KAAK,CAAC,OAAO,CAAC,OAAuB;QACnC,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;QAC/B,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC7C,MAAM,OAAO,GAA4B,EAAE,CAAC;QAE5C,4CAA4C;QAC5C,MAAM,sBAAsB,GAAG,IAAI,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC;QACtE,IAAI,sBAAsB,EAAE,CAAC;YAC3B,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAC1D,CAAC;QAED,+CAA+C;QAC/C,MAAM,aAAa,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QACvD,IAAI,aAAa,EAAE,CAAC;YAClB,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAClD,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,WAAW;YACX,sBAAsB;YACtB,OAAO;SACR,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,SAAS,KAAmB,CAAC;IAEnC;;;;OAIG;IACH,KAAK,CAAC,WAAW;QACf,iFAAiF;QACjF,kDAAkD;QAClD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,2BAA2B,CAAC,UAAkB;QAClD,IAAI,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC;IACzC,CAAC;IAED,8EAA8E;IAC9E,kBAAkB;IAClB,8EAA8E;IAE9E;;;;OAIG;IACK,qBAAqB,CAAC,UAAkB;QAC9C,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QACnD,IAAI,OAAO,GAAG,EAAE,CAAC;QACjB,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC7B,OAAO,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;YAC9C,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;QAED,MAAM,WAAW,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QACnF,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAE3C,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEzC,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YACrD,OAAO,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,GAAG,IAAI,CAAC;QACnD,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,SAAS,GAAG,IAAI,CAAC;QAC7B,CAAC;QAED,aAAa,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACK,eAAe,CAAC,UAAkB;QACxC,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAC9C,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,KAAK,CAAC;QAExC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/providers/openai-sdk/spawn.js

@@ -0,0 +1,214 @@
+/**
+ * OpenAI Agents SDK spawn provider.
+ *
+ * Implements `AdapterSpawnProvider` using the `@openai/agents` SDK runner.
+ * Unlike the Claude Code provider (detached fire-and-forget), this provider
+ * awaits the run and returns `status: 'completed'` or `status: 'failed'`
+ * so the orchestrator receives rich output immediately.
+ *
+ * Key features:
+ * - Tier-based model selection (lead → gpt-4.1, worker → gpt-4.1-mini)
+ * - Handoff topology built from `SpawnContext.options.handoffs`
+ * - CLEO path ACL guardrails applied at input stage
+ * - Default-on tracing via `CleoConduitTraceProcessor`
+ * - CANT prompt enrichment (best-effort, same as Claude Code provider)
+ *
+ * @task T582
+ */
+import { getErrorMessage } from '@cleocode/contracts';
+import { addTraceProcessor, OpenAIProvider, Runner, setTracingDisabled } from '@openai/agents';
+import { mapSdkRunOutcome } from '../shared/sdk-result-mapper.js';
+import { buildDefaultGuardrails } from './guardrails.js';
+import { buildAgentTopology } from './handoff.js';
+import { CleoConduitTraceProcessor } from './tracing.js';
+// ---------------------------------------------------------------------------
+// Constants
+// ---------------------------------------------------------------------------
+const MODEL_LEAD = 'gpt-4.1';
+const MODEL_WORKER = 'gpt-4.1-mini';
+// ---------------------------------------------------------------------------
+// Provider
+// ---------------------------------------------------------------------------
+/**
+ * Spawn provider for the OpenAI Agents SDK.
+ *
+ * Spawns SDK-backed agent runs for a given `SpawnContext`. The run is
+ * awaited synchronously and the result mapped to a `SpawnResult` with
+ * `status: 'completed'` or `status: 'failed'`. In-flight runs are tracked
+ * by instance ID so `listRunning()` and `terminate()` work correctly.
+ *
+ * @remarks
+ * The provider creates a fresh `Runner` per spawn so that `RunConfig`
+ * settings do not bleed across parallel spawns. Trace processors are
+ * registered globally via `addTraceProcessor` and removed by disabling
+ * tracing when the option is set.
+ *
+ * @example
+ * ```typescript
+ * const provider = new OpenAiSdkSpawnProvider();
+ * const result = await provider.spawn({
+ *   taskId: 'T582',
+ *   prompt: 'Implement feature X',
+ *   options: { tier: 'lead', handoffs: ['worker-read', 'worker-write'] },
+ * });
+ * console.log(result.status); // 'completed'
+ * ```
+ */
+export class OpenAiSdkSpawnProvider {
+    /** Currently running instance IDs (completed runs are removed). */
+    runningInstances = new Set();
+    /**
+     * Check whether the OpenAI SDK can spawn in the current environment.
+     *
+     * Requires `OPENAI_API_KEY` to be set. Does not make a network call.
+     *
+     * @returns `true` when `OPENAI_API_KEY` is present in the environment.
+     */
+    async canSpawn() {
+        return typeof process.env.OPENAI_API_KEY === 'string' && process.env.OPENAI_API_KEY.length > 0;
+    }
+    /**
+     * Spawn a subagent via the OpenAI Agents SDK runner.
+     *
+     * Awaits the run to completion and returns a fully-resolved `SpawnResult`.
+     *
+     * @param context - Spawn context with task ID, prompt, and options.
+     * @returns Resolved spawn result with `status: 'completed'` or `'failed'`.
+     */
+    async spawn(context) {
+        const instanceId = `openai-sdk-${Date.now()}-${Math.random().toString(36).substring(2, 9)}`;
+        const startTime = new Date().toISOString();
+        this.runningInstances.add(instanceId);
+        try {
+            const opts = this.parseOptions(context.options);
+            // Enrich prompt with CANT bundle (best-effort, same pattern as Claude Code provider).
+            let finalPrompt = context.prompt;
+            try {
+                const { buildCantEnrichedPrompt } = await import('../../cant-context.js');
+                finalPrompt = await buildCantEnrichedPrompt({
+                    projectDir: context.workingDirectory ?? process.cwd(),
+                    basePrompt: context.prompt,
+                    agentName: opts.agentName,
+                });
+            }
+            catch {
+                // CANT enrichment unavailable — use raw prompt.
+            }
+            // Build guardrails from ACL options.
+            const guardrails = buildDefaultGuardrails(opts.allowedGlobs ?? [], opts.allowedTools ?? []);
+            // Derive model from tier when not explicitly set.
+            const model = opts.model ?? this.modelForTier(opts.tier ?? 'worker');
+            // Build agent topology (lead + workers, or standalone worker).
+            const agent = buildAgentTopology({
+                instructions: finalPrompt,
+                model,
+                tier: opts.tier ?? 'worker',
+                handoffNames: opts.handoffs ?? [],
+                guardrails,
+            });
+            // Register trace processor globally (default-on).
+            // The SDK uses global processor registration via addTraceProcessor().
+            let traceProcessor;
+            if (!opts.tracingDisabled) {
+                traceProcessor = new CleoConduitTraceProcessor(context.taskId);
+                addTraceProcessor(traceProcessor);
+            }
+            else {
+                setTracingDisabled(true);
+            }
+            // Build OpenAI model provider and runner.
+            const modelProvider = new OpenAIProvider();
+            const runner = new Runner({ modelProvider });
+            // Run the agent — no extra options needed beyond what is set on the runner.
+            const runResult = await runner.run(agent, finalPrompt);
+            // Restore tracing state if we disabled it for this spawn.
+            if (opts.tracingDisabled) {
+                setTracingDisabled(false);
+            }
+            const finalOutput = typeof runResult.finalOutput === 'string'
+                ? runResult.finalOutput
+                : JSON.stringify(runResult.finalOutput);
+            this.runningInstances.delete(instanceId);
+            return mapSdkRunOutcome(instanceId, context.taskId, 'openai-sdk', startTime, {
+                finalOutput,
+                succeeded: true,
+            });
+        }
+        catch (error) {
+            this.runningInstances.delete(instanceId);
+            return mapSdkRunOutcome(instanceId, context.taskId, 'openai-sdk', startTime, {
+                finalOutput: '',
+                succeeded: false,
+                errorMessage: getErrorMessage(error),
+            });
+        }
+    }
+    /**
+     * List currently running OpenAI SDK agent instances.
+     *
+     * @returns Array of in-progress spawn results.
+     */
+    async listRunning() {
+        return [...this.runningInstances].map((instanceId) => ({
+            instanceId,
+            taskId: 'unknown',
+            providerId: 'openai-sdk',
+            status: 'running',
+            startTime: new Date().toISOString(),
+        }));
+    }
+    /**
+     * Terminate a running spawn by instance ID.
+     *
+     * The OpenAI SDK runner does not support external termination of in-flight
+     * runs; this method removes the instance from the tracking set so it will
+     * no longer appear in `listRunning()`.
+     *
+     * @param instanceId - ID of the spawn instance to terminate.
+     */
+    async terminate(instanceId) {
+        this.runningInstances.delete(instanceId);
+    }
+    // ---------------------------------------------------------------------------
+    // Private helpers
+    // ---------------------------------------------------------------------------
+    /**
+     * Parse and validate `SpawnContext.options` into typed `OpenAiSdkSpawnOptions`.
+     *
+     * Unknown fields are silently ignored.
+     */
+    parseOptions(raw) {
+        if (!raw)
+            return {};
+        const opts = {};
+        if (typeof raw.model === 'string')
+            opts.model = raw.model;
+        if (raw.tier === 'lead' || raw.tier === 'worker' || raw.tier === 'orchestrator') {
+            opts.tier = raw.tier;
+        }
+        if (Array.isArray(raw.handoffs) && raw.handoffs.every((h) => typeof h === 'string')) {
+            opts.handoffs = raw.handoffs;
+        }
+        if (Array.isArray(raw.allowedGlobs) && raw.allowedGlobs.every((g) => typeof g === 'string')) {
+            opts.allowedGlobs = raw.allowedGlobs;
+        }
+        if (Array.isArray(raw.allowedTools) && raw.allowedTools.every((t) => typeof t === 'string')) {
+            opts.allowedTools = raw.allowedTools;
+        }
+        if (typeof raw.tracingDisabled === 'boolean')
+            opts.tracingDisabled = raw.tracingDisabled;
+        if (typeof raw.agentName === 'string')
+            opts.agentName = raw.agentName;
+        return opts;
+    }
+    /**
+     * Derive the default model for a given tier.
+     *
+     * @param tier - Agent tier.
+     * @returns Model identifier string.
+     */
+    modelForTier(tier) {
+        return tier === 'worker' ? MODEL_WORKER : MODEL_LEAD;
+    }
+}
+//# sourceMappingURL=spawn.js.map

package/dist/providers/openai-sdk/spawn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spawn.js","sourceRoot":"","sources":["../../../src/providers/openai-sdk/spawn.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAC/F,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AAiEzD,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,MAAM,UAAU,GAAG,SAAS,CAAC;AAC7B,MAAM,YAAY,GAAG,cAAc,CAAC;AAEpC,8EAA8E;AAC9E,WAAW;AACX,8EAA8E;AAE9E;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,OAAO,sBAAsB;IACjC,mEAAmE;IAClD,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAEtD;;;;;;OAMG;IACH,KAAK,CAAC,QAAQ;QACZ,OAAO,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC;IACjG,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,KAAK,CAAC,OAAqB;QAC/B,MAAM,UAAU,GAAG,cAAc,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAC5F,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAE3C,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAEtC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAEhD,sFAAsF;YACtF,IAAI,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC;YACjC,IAAI,CAAC;gBACH,MAAM,EAAE,uBAAuB,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;gBAC1E,WAAW,GAAG,MAAM,uBAAuB,CAAC;oBAC1C,UAAU,EAAE,OAAO,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,EAAE;oBACrD,UAAU,EAAE,OAAO,CAAC,MAAM;oBAC1B,SAAS,EAAE,IAAI,CAAC,SAAS;iBAC1B,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,gDAAgD;YAClD,CAAC;YAED,qCAAqC;YACrC,MAAM,UAAU,GAAG,sBAAsB,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,EAAE,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;YAE5F,kDAAkD;YAClD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,CAAC;YAErE,+DAA+D;YAC/D,MAAM,KAAK,GAAG,kBAAkB,CAAC;gBAC/B,YAAY,EAAE,WAAW;gBACzB,KAAK;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,QAAQ;gBAC3B,YAAY,EAAE,IAAI,CAAC,QAAQ,IAAI,EAAE;gBACjC,UAAU;aACX,CAAC,CAAC;YAEH,kDAAkD;YAClD,sEAAsE;YACtE,IAAI,cAAqD,CAAC;YAC1D,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;gBAC1B,cAAc,GAAG,IAAI,yBAAyB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBAC/D,iBAAiB,CAAC,cAAc,CAAC,CAAC;YACpC,CAAC;iBAAM,CAAC;gBACN,kBAAkB,CAAC,IAAI,CAAC,CAAC;YAC3B,CAAC;YAED,0CAA0C;YAC1C,MAAM,aAAa,GAAG,IAAI,cAAc,EAAE,CAAC;YAC3C,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC;YAE7C,4EAA4E;YAC5E,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YAEvD,0DAA0D;YAC1D,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;gBACzB,kBAAkB,CAAC,KAAK,CAAC,CAAC;YAC5B,CAAC;YAED,MAAM,WAAW,GACf,OAAO,SAAS,CAAC,WAAW,KAAK,QAAQ;gBACvC,CAAC,CAAC,SAAS,CAAC,WAAW;gBACvB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;YAE5C,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAEzC,OAAO,gBAAgB,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE;gBAC3E,WAAW;gBACX,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAEzC,OAAO,gBAAgB,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE;gBAC3E,WAAW,EAAE,EAAE;gBACf,SAAS,EAAE,KAAK;gBAChB,YAAY,EAAE,eAAe,CAAC,KAAK,CAAC;aACrC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,WAAW;QACf,OAAO,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YACrD,UAAU;YACV,MAAM,EAAE,SAAS;YACjB,UAAU,EAAE,YAAY;YACxB,MAAM,EAAE,SAAkB;YAC1B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,SAAS,CAAC,UAAkB;QAChC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC3C,CAAC;IAED,8EAA8E;IAC9E,kBAAkB;IAClB,8EAA8E;IAE9E;;;;OAIG;IACK,YAAY,CAAC,GAA6B;QAChD,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QAEpB,MAAM,IAAI,GAA0B,EAAE,CAAC;QAEvC,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ;YAAE,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;QAC1D,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YAChF,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QACvB,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;YACpF,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAoB,CAAC;QAC3C,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;YAC5F,IAAI,CAAC,YAAY,GAAG,GAAG,CAAC,YAAwB,CAAC;QACnD,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;YAC5F,IAAI,CAAC,YAAY,GAAG,GAAG,CAAC,YAAwB,CAAC;QACnD,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,eAAe,KAAK,SAAS;YAAE,IAAI,CAAC,eAAe,GAAG,GAAG,CAAC,eAAe,CAAC;QACzF,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ;YAAE,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;QAEtE,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;OAKG;IACK,YAAY,CAAC,IAAwC;QAC3D,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC;IACvD,CAAC;CACF"}