@cleocode/contracts 2026.5.129 → 2026.5.131

package/dist/exit-codes.d.ts

@@ -281,7 +281,7 @@ export declare const E_WORKFLOW_NOT_FOUND: "E_WORKFLOW_NOT_FOUND";
  * retry. Emitted by {@link withWriteRetry} (in `@cleocode/core`'s
  * `store/with-retry.ts`) when a SQLite write transaction fails 4 consecutive
  * attempts with `SQLITE_BUSY: database is locked` despite the engine-level
- * `busy_timeout=5000ms` pragma.
+ * `busy_timeout=30000ms` pragma.
  *
  * **Recovery**: retry the operation after a brief delay (the contended writer
  * usually commits within 1-2 seconds). If the error reoccurs reliably, suspect

package/dist/exit-codes.js

@@ -309,7 +309,7 @@ export const E_WORKFLOW_NOT_FOUND = 'E_WORKFLOW_NOT_FOUND';
  * retry. Emitted by {@link withWriteRetry} (in `@cleocode/core`'s
  * `store/with-retry.ts`) when a SQLite write transaction fails 4 consecutive
  * attempts with `SQLITE_BUSY: database is locked` despite the engine-level
- * `busy_timeout=5000ms` pragma.
+ * `busy_timeout=30000ms` pragma.
  *
  * **Recovery**: retry the operation after a brief delay (the contended writer
  * usually commits within 1-2 seconds). If the error reoccurs reliably, suspect

package/dist/gateway/rpc/__tests__/freeze.test.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Schema-drift guard for the FROZEN `gateway/rpc` v1.0 contract (T11449 AC).
+ *
+ * Pins the v1.0 protocol version, the exact `direction` discriminator set, and
+ * the protocol-level transport error codes. If a future change adds, removes,
+ * or renames a direction/error code without bumping to a new contract revision,
+ * these assertions fail — forcing an explicit, reviewed decision rather than
+ * silent drift that would break the CLI-RPC adapter and its clients.
+ *
+ * Also asserts the NDJSON frame round-trips through the Zod schemas, proving
+ * the framing discipline borrowed from `supervisor-ipc` (versioned, correlated
+ * envelope discriminated by `direction`, one frame per line) holds for the
+ * gateway-dispatch payload.
+ *
+ * @task T11449
+ * @epic T11254
+ * @saga T11243
+ */
+export {};
+//# sourceMappingURL=freeze.test.d.ts.map

package/dist/gateway/rpc/__tests__/freeze.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"freeze.test.d.ts","sourceRoot":"","sources":["../../../../src/gateway/rpc/__tests__/freeze.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG"}

package/dist/gateway/rpc/__tests__/freeze.test.js

@@ -0,0 +1,122 @@
+/**
+ * Schema-drift guard for the FROZEN `gateway/rpc` v1.0 contract (T11449 AC).
+ *
+ * Pins the v1.0 protocol version, the exact `direction` discriminator set, and
+ * the protocol-level transport error codes. If a future change adds, removes,
+ * or renames a direction/error code without bumping to a new contract revision,
+ * these assertions fail — forcing an explicit, reviewed decision rather than
+ * silent drift that would break the CLI-RPC adapter and its clients.
+ *
+ * Also asserts the NDJSON frame round-trips through the Zod schemas, proving
+ * the framing discipline borrowed from `supervisor-ipc` (versioned, correlated
+ * envelope discriminated by `direction`, one frame per line) holds for the
+ * gateway-dispatch payload.
+ *
+ * @task T11449
+ * @epic T11254
+ * @saga T11243
+ */
+import { describe, expect, it } from 'vitest';
+import { GATEWAY_RPC_CHANNEL_BASENAME, GATEWAY_RPC_DIRECTIONS, GATEWAY_RPC_ERROR_CODES, GATEWAY_RPC_PROTOCOL_VERSION, GatewayRpcFrameSchema, isFrozenGatewayRpcVersion, } from '../index.js';
+describe('gateway/rpc v1.0 freeze guard (T11449)', () => {
+    it('pins the frozen protocol version', () => {
+        expect(GATEWAY_RPC_PROTOCOL_VERSION).toBe('1.0.0');
+    });
+    it('pins the default channel basename', () => {
+        expect(GATEWAY_RPC_CHANNEL_BASENAME).toBe('cleo-gateway-rpc');
+    });
+    it('pins the EXACT frozen direction set', () => {
+        expect([...GATEWAY_RPC_DIRECTIONS]).toEqual(['request', 'response', 'error']);
+    });
+    it('pins the EXACT frozen protocol-level error-code set', () => {
+        expect([...GATEWAY_RPC_ERROR_CODES]).toEqual([
+            'E_RPC_PARSE',
+            'E_RPC_BAD_VERSION',
+            'E_RPC_BAD_FRAME',
+            'E_RPC_INTERNAL',
+        ]);
+    });
+    it('isFrozenGatewayRpcVersion accepts only the frozen version', () => {
+        expect(isFrozenGatewayRpcVersion('1.0.0')).toBe(true);
+        expect(isFrozenGatewayRpcVersion('2.0.0')).toBe(false);
+        expect(isFrozenGatewayRpcVersion('0.9.0')).toBe(false);
+    });
+});
+describe('gateway/rpc v1.0 NDJSON frame round-trip', () => {
+    it('parses a request frame wrapping a source:rpc DispatchRequest', () => {
+        const wire = {
+            protocol_version: '1.0.0',
+            id: 'abc',
+            direction: 'request',
+            request: {
+                gateway: 'query',
+                domain: 'tasks',
+                operation: 'show',
+                params: { id: 'T1' },
+                source: 'rpc',
+                requestId: 'abc',
+            },
+        };
+        const parsed = GatewayRpcFrameSchema.safeParse(wire);
+        expect(parsed.success).toBe(true);
+        if (parsed.success && parsed.data.direction === 'request') {
+            expect(parsed.data.request.source).toBe('rpc');
+            expect(parsed.data.request.operation).toBe('show');
+        }
+    });
+    it('parses a response frame wrapping a LAFS DispatchResponse', () => {
+        const wire = {
+            protocol_version: '1.0.0',
+            id: 'abc',
+            direction: 'response',
+            response: {
+                meta: {
+                    gateway: 'query',
+                    domain: 'tasks',
+                    operation: 'show',
+                    timestamp: '2026-05-31T00:00:00.000Z',
+                    duration_ms: 1,
+                    source: 'rpc',
+                    requestId: 'abc',
+                },
+                success: true,
+                data: { id: 'T1' },
+            },
+        };
+        expect(GatewayRpcFrameSchema.safeParse(wire).success).toBe(true);
+    });
+    it('parses a protocol-level error frame', () => {
+        const wire = {
+            protocol_version: '1.0.0',
+            id: '0',
+            direction: 'error',
+            error: { code: 'E_RPC_BAD_VERSION', message: 'unsupported protocol version' },
+        };
+        expect(GatewayRpcFrameSchema.safeParse(wire).success).toBe(true);
+    });
+    it('rejects an unknown direction (proves the union is closed)', () => {
+        const wire = {
+            protocol_version: '1.0.0',
+            id: 'abc',
+            direction: 'teleport',
+            request: {},
+        };
+        expect(GatewayRpcFrameSchema.safeParse(wire).success).toBe(false);
+    });
+    it('rejects a request frame whose source is NOT rpc-shaped enum member', () => {
+        const wire = {
+            protocol_version: '1.0.0',
+            id: 'abc',
+            direction: 'request',
+            request: {
+                gateway: 'query',
+                domain: 'tasks',
+                operation: 'show',
+                source: 'carrier-pigeon',
+                requestId: 'abc',
+            },
+        };
+        expect(GatewayRpcFrameSchema.safeParse(wire).success).toBe(false);
+    });
+});
+//# sourceMappingURL=freeze.test.js.map

package/dist/gateway/rpc/__tests__/freeze.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"freeze.test.js","sourceRoot":"","sources":["../../../../src/gateway/rpc/__tests__/freeze.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,4BAA4B,EAC5B,sBAAsB,EACtB,uBAAuB,EACvB,4BAA4B,EAC5B,qBAAqB,EACrB,yBAAyB,GAC1B,MAAM,aAAa,CAAC;AAErB,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;IACtD,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,4BAA4B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,CAAC,4BAA4B,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,CAAC,GAAG,sBAAsB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,CAAC,CAAC,GAAG,uBAAuB,CAAC,CAAC,CAAC,OAAO,CAAC;YAC3C,aAAa;YACb,mBAAmB;YACnB,iBAAiB;YACjB,gBAAgB;SACjB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvD,MAAM,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,0CAA0C,EAAE,GAAG,EAAE;IACxD,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,IAAI,GAAG;YACX,gBAAgB,EAAE,OAAO;YACzB,EAAE,EAAE,KAAK;YACT,SAAS,EAAE,SAAS;YACpB,OAAO,EAAE;gBACP,OAAO,EAAE,OAAO;gBAChB,MAAM,EAAE,OAAO;gBACf,SAAS,EAAE,MAAM;gBACjB,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;gBACpB,MAAM,EAAE,KAAK;gBACb,SAAS,EAAE,KAAK;aACjB;SACF,CAAC;QACF,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACrD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAC1D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC/C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,IAAI,GAAG;YACX,gBAAgB,EAAE,OAAO;YACzB,EAAE,EAAE,KAAK;YACT,SAAS,EAAE,UAAU;YACrB,QAAQ,EAAE;gBACR,IAAI,EAAE;oBACJ,OAAO,EAAE,OAAO;oBAChB,MAAM,EAAE,OAAO;oBACf,SAAS,EAAE,MAAM;oBACjB,SAAS,EAAE,0BAA0B;oBACrC,WAAW,EAAE,CAAC;oBACd,MAAM,EAAE,KAAK;oBACb,SAAS,EAAE,KAAK;iBACjB;gBACD,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;aACnB;SACF,CAAC;QACF,MAAM,CAAC,qBAAqB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,IAAI,GAAG;YACX,gBAAgB,EAAE,OAAO;YACzB,EAAE,EAAE,GAAG;YACP,SAAS,EAAE,OAAO;YAClB,KAAK,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,8BAA8B,EAAE;SAC9E,CAAC;QACF,MAAM,CAAC,qBAAqB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,IAAI,GAAG;YACX,gBAAgB,EAAE,OAAO;YACzB,EAAE,EAAE,KAAK;YACT,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,EAAE;SACZ,CAAC;QACF,MAAM,CAAC,qBAAqB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,IAAI,GAAG;YACX,gBAAgB,EAAE,OAAO;YACzB,EAAE,EAAE,KAAK;YACT,SAAS,EAAE,SAAS;YACpB,OAAO,EAAE;gBACP,OAAO,EAAE,OAAO;gBAChB,MAAM,EAAE,OAAO;gBACf,SAAS,EAAE,MAAM;gBACjB,MAAM,EAAE,gBAAgB;gBACxB,SAAS,EAAE,KAAK;aACjB;SACF,CAAC;QACF,MAAM,CAAC,qBAAqB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/gateway/rpc/index.d.ts

@@ -0,0 +1,23 @@
+/**
+ * `gateway/rpc` v1.0 — FROZEN CLI-RPC NDJSON contract barrel.
+ *
+ * Re-exports the version constants and Zod frame schemas + inferred types for
+ * the CLI-RPC transport (`@cleocode/runtime/gateway/rpc`): a long-lived
+ * unix-socket RPC server that decodes NDJSON {@link GatewayRpcFrame}s into a
+ * `source: 'rpc'` gateway request and routes them through the gateway handler.
+ *
+ * Mirrors the `supervisor-ipc` contract structure (version.ts + messages.ts +
+ * this barrel + a freeze guard test) but carries gateway dispatch traffic, not
+ * supervisor process-control messages. The request/response PAYLOADS are owned
+ * by `@cleocode/contracts/gateway` (R3-T2 · T11446) and re-validated here at
+ * the untrusted RPC boundary.
+ *
+ * @task T11449
+ * @epic T11254
+ * @saga T11243
+ * @packageDocumentation
+ */
+export type { GatewayRpcDirection, GatewayRpcError, GatewayRpcErrorCode, GatewayRpcErrorFrame, GatewayRpcFrame, GatewayRpcRequestFrame, GatewayRpcResponseFrame, } from './messages.js';
+export { GATEWAY_RPC_DIRECTIONS, GATEWAY_RPC_ERROR_CODES, GatewayRpcErrorFrameSchema, GatewayRpcErrorSchema, GatewayRpcFrameSchema, GatewayRpcRequestFrameSchema, GatewayRpcResponseFrameSchema, isFrozenGatewayRpcVersion, } from './messages.js';
+export { GATEWAY_RPC_CHANNEL_BASENAME, GATEWAY_RPC_PROTOCOL_VERSION, } from './version.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/gateway/rpc/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/gateway/rpc/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,YAAY,EACV,mBAAmB,EACnB,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EACpB,eAAe,EACf,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,0BAA0B,EAC1B,qBAAqB,EACrB,qBAAqB,EACrB,4BAA4B,EAC5B,6BAA6B,EAC7B,yBAAyB,GAC1B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,4BAA4B,EAC5B,4BAA4B,GAC7B,MAAM,cAAc,CAAC"}

package/dist/gateway/rpc/index.js

@@ -0,0 +1,22 @@
+/**
+ * `gateway/rpc` v1.0 — FROZEN CLI-RPC NDJSON contract barrel.
+ *
+ * Re-exports the version constants and Zod frame schemas + inferred types for
+ * the CLI-RPC transport (`@cleocode/runtime/gateway/rpc`): a long-lived
+ * unix-socket RPC server that decodes NDJSON {@link GatewayRpcFrame}s into a
+ * `source: 'rpc'` gateway request and routes them through the gateway handler.
+ *
+ * Mirrors the `supervisor-ipc` contract structure (version.ts + messages.ts +
+ * this barrel + a freeze guard test) but carries gateway dispatch traffic, not
+ * supervisor process-control messages. The request/response PAYLOADS are owned
+ * by `@cleocode/contracts/gateway` (R3-T2 · T11446) and re-validated here at
+ * the untrusted RPC boundary.
+ *
+ * @task T11449
+ * @epic T11254
+ * @saga T11243
+ * @packageDocumentation
+ */
+export { GATEWAY_RPC_DIRECTIONS, GATEWAY_RPC_ERROR_CODES, GatewayRpcErrorFrameSchema, GatewayRpcErrorSchema, GatewayRpcFrameSchema, GatewayRpcRequestFrameSchema, GatewayRpcResponseFrameSchema, isFrozenGatewayRpcVersion, } from './messages.js';
+export { GATEWAY_RPC_CHANNEL_BASENAME, GATEWAY_RPC_PROTOCOL_VERSION, } from './version.js';
+//# sourceMappingURL=index.js.map

package/dist/gateway/rpc/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/gateway/rpc/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAWH,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,0BAA0B,EAC1B,qBAAqB,EACrB,qBAAqB,EACrB,4BAA4B,EAC5B,6BAA6B,EAC7B,yBAAyB,GAC1B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,4BAA4B,EAC5B,4BAA4B,GAC7B,MAAM,cAAc,CAAC"}

package/dist/gateway/rpc/messages.d.ts

@@ -0,0 +1,263 @@
+/**
+ * `gateway/rpc` v1.0 — FROZEN NDJSON message contract (Zod schemas).
+ *
+ * The CLI-RPC transport carries gateway dispatch traffic over a long-lived
+ * unix-domain socket. The wire format is newline-delimited JSON (NDJSON): one
+ * {@link GatewayRpcFrame} per line — exactly the framing discipline used by the
+ * FROZEN `supervisor-ipc` v1.0 contract, REUSED here (not edited): a versioned,
+ * correlation-id'd envelope discriminated by `direction`.
+ *
+ * The difference from supervisor-ipc is the PAYLOAD: this contract wraps the
+ * frozen gateway shapes ({@link dispatchRequestSchema} /
+ * {@link dispatchResponseSchema} from `@cleocode/contracts/gateway`) rather
+ * than supervisor process-control messages. So:
+ *
+ * ```jsonc
+ * // request frame (client → server)
+ * { "protocol_version": "1.0.0", "id": "abc", "direction": "request",
+ *   "request": { "gateway": "query", "domain": "tasks", "operation": "show",
+ *                "params": { "id": "T1" }, "source": "rpc",
+ *                "requestId": "abc" } }
+ * // response frame (server → client)
+ * { "protocol_version": "1.0.0", "id": "abc", "direction": "response",
+ *   "response": { "success": true, "data": {…}, "meta": {…} } }
+ * // error frame (server → client) — protocol-level (bad version / parse / unknown)
+ * { "protocol_version": "1.0.0", "id": "abc", "direction": "error",
+ *   "error": { "code": "E_RPC_BAD_VERSION", "message": "…" } }
+ * ```
+ *
+ * FROZEN v1.0: the {@link GATEWAY_RPC_DIRECTIONS} set is pinned by the drift
+ * guard (`__tests__/freeze.test.ts`). Do not add/rename/remove directions in
+ * place — bump to a new versioned directory instead. The request/response
+ * PAYLOADS are owned by the gateway contract (R3-T2 · T11446) and re-validated
+ * here so an untrusted RPC boundary cannot inject a malformed dispatch request.
+ *
+ * @task T11449
+ * @epic T11254
+ * @saga T11243
+ * @packageDocumentation
+ */
+import { z } from 'zod';
+import { GATEWAY_RPC_PROTOCOL_VERSION } from './version.js';
+/**
+ * A protocol-level (transport) error returned when a frame cannot even reach
+ * the gateway: malformed JSON, a wrong `protocol_version`, or a frame the
+ * server cannot route. Distinct from a {@link dispatchResponseSchema} `error`
+ * field, which is a DOMAIN error produced by the handler itself.
+ */
+export declare const GatewayRpcErrorSchema: z.ZodObject<{
+    code: z.ZodString;
+    message: z.ZodString;
+}, z.core.$strict>;
+/** Protocol-level RPC error payload (inferred from {@link GatewayRpcErrorSchema}). */
+export type GatewayRpcError = z.infer<typeof GatewayRpcErrorSchema>;
+/**
+ * A client → server request frame: a versioned, correlated wrapper around a
+ * single frozen {@link dispatchRequestSchema}. The `direction` discriminator +
+ * flattened `request` payload mirror the supervisor-ipc envelope shape.
+ */
+export declare const GatewayRpcRequestFrameSchema: z.ZodObject<{
+    protocol_version: z.ZodString;
+    id: z.ZodString;
+    direction: z.ZodLiteral<"request">;
+    request: z.ZodObject<{
+        gateway: z.ZodCustom<import("../../gateway.js").Gateway, import("../../gateway.js").Gateway>;
+        domain: z.ZodString;
+        operation: z.ZodString;
+        params: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        source: z.ZodEnum<{
+            http: "http";
+            cli: "cli";
+            mcp: "mcp";
+            rpc: "rpc";
+        }>;
+        requestId: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
+        originSessionId: z.ZodOptional<z.ZodString>;
+        executionSessionId: z.ZodOptional<z.ZodString>;
+        _fields: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        _mvi: z.ZodOptional<z.ZodCustom<import("@cleocode/lafs").MVILevel, import("@cleocode/lafs").MVILevel>>;
+    }, z.core.$strip>;
+}, z.core.$strict>;
+/** Request frame (inferred from {@link GatewayRpcRequestFrameSchema}). */
+export type GatewayRpcRequestFrame = z.infer<typeof GatewayRpcRequestFrameSchema>;
+/**
+ * A server → client response frame: a versioned, correlated wrapper around a
+ * single frozen {@link dispatchResponseSchema} (the LAFS envelope the handler
+ * produced).
+ */
+export declare const GatewayRpcResponseFrameSchema: z.ZodObject<{
+    protocol_version: z.ZodString;
+    id: z.ZodString;
+    direction: z.ZodLiteral<"response">;
+    response: z.ZodObject<{
+        meta: z.ZodObject<{
+            gateway: z.ZodCustom<import("../../gateway.js").Gateway, import("../../gateway.js").Gateway>;
+            domain: z.ZodString;
+            operation: z.ZodString;
+            timestamp: z.ZodString;
+            duration_ms: z.ZodNumber;
+            source: z.ZodEnum<{
+                http: "http";
+                cli: "cli";
+                mcp: "mcp";
+                rpc: "rpc";
+            }>;
+            requestId: z.ZodString;
+            rateLimit: z.ZodOptional<z.ZodObject<{
+                limit: z.ZodNumber;
+                remaining: z.ZodNumber;
+                resetMs: z.ZodNumber;
+                category: z.ZodString;
+            }, z.core.$strip>>;
+            sessionId: z.ZodOptional<z.ZodString>;
+            originSessionId: z.ZodOptional<z.ZodString>;
+            executionSessionId: z.ZodOptional<z.ZodString>;
+            version: z.ZodOptional<z.ZodString>;
+        }, z.core.$catchall<z.ZodUnknown>>;
+        success: z.ZodBoolean;
+        data: z.ZodOptional<z.ZodUnknown>;
+        page: z.ZodOptional<z.ZodCustom<import("@cleocode/lafs").LAFSPage, import("@cleocode/lafs").LAFSPage>>;
+        partial: z.ZodOptional<z.ZodBoolean>;
+        error: z.ZodOptional<z.ZodObject<{
+            code: z.ZodString;
+            exitCode: z.ZodOptional<z.ZodNumber>;
+            message: z.ZodString;
+            details: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+            fix: z.ZodOptional<z.ZodString>;
+            alternatives: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                action: z.ZodString;
+                command: z.ZodString;
+            }, z.core.$strip>>>;
+            problemDetails: z.ZodOptional<z.ZodCustom<import("../../engine-result.js").ProblemDetails, import("../../engine-result.js").ProblemDetails>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>;
+}, z.core.$strict>;
+/** Response frame (inferred from {@link GatewayRpcResponseFrameSchema}). */
+export type GatewayRpcResponseFrame = z.infer<typeof GatewayRpcResponseFrameSchema>;
+/**
+ * A server → client protocol-level error frame, emitted when a request frame
+ * cannot be decoded or routed. Correlation `id` is best-effort (`'0'` when the
+ * frame was so malformed the id could not be recovered).
+ */
+export declare const GatewayRpcErrorFrameSchema: z.ZodObject<{
+    protocol_version: z.ZodString;
+    id: z.ZodString;
+    direction: z.ZodLiteral<"error">;
+    error: z.ZodObject<{
+        code: z.ZodString;
+        message: z.ZodString;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+/** Error frame (inferred from {@link GatewayRpcErrorFrameSchema}). */
+export type GatewayRpcErrorFrame = z.infer<typeof GatewayRpcErrorFrameSchema>;
+/**
+ * The top-level RPC frame: a versioned, correlated wrapper that is a request,
+ * a response, or a protocol-level error, discriminated by `direction`. One
+ * frame per NDJSON line.
+ */
+export declare const GatewayRpcFrameSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    protocol_version: z.ZodString;
+    id: z.ZodString;
+    direction: z.ZodLiteral<"request">;
+    request: z.ZodObject<{
+        gateway: z.ZodCustom<import("../../gateway.js").Gateway, import("../../gateway.js").Gateway>;
+        domain: z.ZodString;
+        operation: z.ZodString;
+        params: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        source: z.ZodEnum<{
+            http: "http";
+            cli: "cli";
+            mcp: "mcp";
+            rpc: "rpc";
+        }>;
+        requestId: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
+        originSessionId: z.ZodOptional<z.ZodString>;
+        executionSessionId: z.ZodOptional<z.ZodString>;
+        _fields: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        _mvi: z.ZodOptional<z.ZodCustom<import("@cleocode/lafs").MVILevel, import("@cleocode/lafs").MVILevel>>;
+    }, z.core.$strip>;
+}, z.core.$strict>, z.ZodObject<{
+    protocol_version: z.ZodString;
+    id: z.ZodString;
+    direction: z.ZodLiteral<"response">;
+    response: z.ZodObject<{
+        meta: z.ZodObject<{
+            gateway: z.ZodCustom<import("../../gateway.js").Gateway, import("../../gateway.js").Gateway>;
+            domain: z.ZodString;
+            operation: z.ZodString;
+            timestamp: z.ZodString;
+            duration_ms: z.ZodNumber;
+            source: z.ZodEnum<{
+                http: "http";
+                cli: "cli";
+                mcp: "mcp";
+                rpc: "rpc";
+            }>;
+            requestId: z.ZodString;
+            rateLimit: z.ZodOptional<z.ZodObject<{
+                limit: z.ZodNumber;
+                remaining: z.ZodNumber;
+                resetMs: z.ZodNumber;
+                category: z.ZodString;
+            }, z.core.$strip>>;
+            sessionId: z.ZodOptional<z.ZodString>;
+            originSessionId: z.ZodOptional<z.ZodString>;
+            executionSessionId: z.ZodOptional<z.ZodString>;
+            version: z.ZodOptional<z.ZodString>;
+        }, z.core.$catchall<z.ZodUnknown>>;
+        success: z.ZodBoolean;
+        data: z.ZodOptional<z.ZodUnknown>;
+        page: z.ZodOptional<z.ZodCustom<import("@cleocode/lafs").LAFSPage, import("@cleocode/lafs").LAFSPage>>;
+        partial: z.ZodOptional<z.ZodBoolean>;
+        error: z.ZodOptional<z.ZodObject<{
+            code: z.ZodString;
+            exitCode: z.ZodOptional<z.ZodNumber>;
+            message: z.ZodString;
+            details: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+            fix: z.ZodOptional<z.ZodString>;
+            alternatives: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                action: z.ZodString;
+                command: z.ZodString;
+            }, z.core.$strip>>>;
+            problemDetails: z.ZodOptional<z.ZodCustom<import("../../engine-result.js").ProblemDetails, import("../../engine-result.js").ProblemDetails>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>;
+}, z.core.$strict>, z.ZodObject<{
+    protocol_version: z.ZodString;
+    id: z.ZodString;
+    direction: z.ZodLiteral<"error">;
+    error: z.ZodObject<{
+        code: z.ZodString;
+        message: z.ZodString;
+    }, z.core.$strict>;
+}, z.core.$strict>], "direction">;
+/** Any RPC frame (inferred from {@link GatewayRpcFrameSchema}). */
+export type GatewayRpcFrame = z.infer<typeof GatewayRpcFrameSchema>;
+/**
+ * The FROZEN v1.0 `direction` discriminator values. The drift guard
+ * (`__tests__/freeze.test.ts`) pins this tuple; any addition/removal is a
+ * contract-breaking change requiring a new versioned directory.
+ */
+export declare const GATEWAY_RPC_DIRECTIONS: readonly ["request", "response", "error"];
+/** A single frozen RPC frame direction. */
+export type GatewayRpcDirection = (typeof GATEWAY_RPC_DIRECTIONS)[number];
+/**
+ * The FROZEN v1.0 protocol-level transport error codes the adapter emits in an
+ * {@link GatewayRpcErrorFrameSchema}. Pinned by the drift guard.
+ */
+export declare const GATEWAY_RPC_ERROR_CODES: readonly ["E_RPC_PARSE", "E_RPC_BAD_VERSION", "E_RPC_BAD_FRAME", "E_RPC_INTERNAL"];
+/** A single frozen RPC protocol-level error code. */
+export type GatewayRpcErrorCode = (typeof GATEWAY_RPC_ERROR_CODES)[number];
+/**
+ * Type guard: is `v` the frozen RPC protocol version this contract pins?
+ *
+ * Used by the adapter's version-negotiation step to reject mismatched frames
+ * with an `E_RPC_BAD_VERSION` error frame before any gateway routing.
+ *
+ * @param v - The candidate `protocol_version` string from an inbound frame.
+ * @returns `true` iff `v` equals {@link GATEWAY_RPC_PROTOCOL_VERSION}.
+ */
+export declare function isFrozenGatewayRpcVersion(v: string): v is typeof GATEWAY_RPC_PROTOCOL_VERSION;
+//# sourceMappingURL=messages.d.ts.map

package/dist/gateway/rpc/messages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"messages.d.ts","sourceRoot":"","sources":["../../../src/gateway/rpc/messages.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAC;AAI5D;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB;;;kBAOvB,CAAC;AAEZ,sFAAsF;AACtF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAIpE;;;;GAIG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;kBAW9B,CAAC;AAEZ,0EAA0E;AAC1E,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAIlF;;;;GAIG;AACH,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAW/B,CAAC;AAEZ,4EAA4E;AAC5E,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAIpF;;;;GAIG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;kBAW5B,CAAC;AAEZ,sEAAsE;AACtE,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAI9E;;;;GAIG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iCAIhC,CAAC;AAEH,mEAAmE;AACnE,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAIpE;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,2CAA4C,CAAC;AAEhF,2CAA2C;AAC3C,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1E;;;GAGG;AACH,eAAO,MAAM,uBAAuB,oFAK1B,CAAC;AAEX,qDAAqD;AACrD,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3E;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,IAAI,OAAO,4BAA4B,CAE7F"}

package/dist/gateway/rpc/messages.js

@@ -0,0 +1,152 @@
+/**
+ * `gateway/rpc` v1.0 — FROZEN NDJSON message contract (Zod schemas).
+ *
+ * The CLI-RPC transport carries gateway dispatch traffic over a long-lived
+ * unix-domain socket. The wire format is newline-delimited JSON (NDJSON): one
+ * {@link GatewayRpcFrame} per line — exactly the framing discipline used by the
+ * FROZEN `supervisor-ipc` v1.0 contract, REUSED here (not edited): a versioned,
+ * correlation-id'd envelope discriminated by `direction`.
+ *
+ * The difference from supervisor-ipc is the PAYLOAD: this contract wraps the
+ * frozen gateway shapes ({@link dispatchRequestSchema} /
+ * {@link dispatchResponseSchema} from `@cleocode/contracts/gateway`) rather
+ * than supervisor process-control messages. So:
+ *
+ * ```jsonc
+ * // request frame (client → server)
+ * { "protocol_version": "1.0.0", "id": "abc", "direction": "request",
+ *   "request": { "gateway": "query", "domain": "tasks", "operation": "show",
+ *                "params": { "id": "T1" }, "source": "rpc",
+ *                "requestId": "abc" } }
+ * // response frame (server → client)
+ * { "protocol_version": "1.0.0", "id": "abc", "direction": "response",
+ *   "response": { "success": true, "data": {…}, "meta": {…} } }
+ * // error frame (server → client) — protocol-level (bad version / parse / unknown)
+ * { "protocol_version": "1.0.0", "id": "abc", "direction": "error",
+ *   "error": { "code": "E_RPC_BAD_VERSION", "message": "…" } }
+ * ```
+ *
+ * FROZEN v1.0: the {@link GATEWAY_RPC_DIRECTIONS} set is pinned by the drift
+ * guard (`__tests__/freeze.test.ts`). Do not add/rename/remove directions in
+ * place — bump to a new versioned directory instead. The request/response
+ * PAYLOADS are owned by the gateway contract (R3-T2 · T11446) and re-validated
+ * here so an untrusted RPC boundary cannot inject a malformed dispatch request.
+ *
+ * @task T11449
+ * @epic T11254
+ * @saga T11243
+ * @packageDocumentation
+ */
+import { z } from 'zod';
+import { dispatchRequestSchema, dispatchResponseSchema } from '../../gateway.js';
+import { GATEWAY_RPC_PROTOCOL_VERSION } from './version.js';
+// ─── Protocol-level error payload ──────────────────────────────────────────────
+/**
+ * A protocol-level (transport) error returned when a frame cannot even reach
+ * the gateway: malformed JSON, a wrong `protocol_version`, or a frame the
+ * server cannot route. Distinct from a {@link dispatchResponseSchema} `error`
+ * field, which is a DOMAIN error produced by the handler itself.
+ */
+export const GatewayRpcErrorSchema = z
+    .object({
+    /** Machine-readable transport error code (e.g. `E_RPC_BAD_VERSION`). */
+    code: z.string().min(1),
+    /** Human-readable error message. */
+    message: z.string(),
+})
+    .strict();
+// ─── Request frame (client → server) ───────────────────────────────────────────
+/**
+ * A client → server request frame: a versioned, correlated wrapper around a
+ * single frozen {@link dispatchRequestSchema}. The `direction` discriminator +
+ * flattened `request` payload mirror the supervisor-ipc envelope shape.
+ */
+export const GatewayRpcRequestFrameSchema = z
+    .object({
+    /** Frozen protocol version; rejected if it differs from the server's. */
+    protocol_version: z.string(),
+    /** Correlation id echoed back on the matching response/error frame. */
+    id: z.string().min(1),
+    /** Direction discriminator. */
+    direction: z.literal('request'),
+    /** The gateway dispatch request (re-validated at the untrusted boundary). */
+    request: dispatchRequestSchema,
+})
+    .strict();
+// ─── Response frame (server → client) ──────────────────────────────────────────
+/**
+ * A server → client response frame: a versioned, correlated wrapper around a
+ * single frozen {@link dispatchResponseSchema} (the LAFS envelope the handler
+ * produced).
+ */
+export const GatewayRpcResponseFrameSchema = z
+    .object({
+    /** Frozen protocol version. */
+    protocol_version: z.string(),
+    /** Correlation id echoed from the originating request. */
+    id: z.string().min(1),
+    /** Direction discriminator. */
+    direction: z.literal('response'),
+    /** The gateway dispatch response (LAFS envelope). */
+    response: dispatchResponseSchema,
+})
+    .strict();
+// ─── Error frame (server → client) ─────────────────────────────────────────────
+/**
+ * A server → client protocol-level error frame, emitted when a request frame
+ * cannot be decoded or routed. Correlation `id` is best-effort (`'0'` when the
+ * frame was so malformed the id could not be recovered).
+ */
+export const GatewayRpcErrorFrameSchema = z
+    .object({
+    /** Frozen protocol version. */
+    protocol_version: z.string(),
+    /** Correlation id (best-effort; `'0'` when unrecoverable). */
+    id: z.string().min(1),
+    /** Direction discriminator. */
+    direction: z.literal('error'),
+    /** The protocol-level error. */
+    error: GatewayRpcErrorSchema,
+})
+    .strict();
+// ─── Top-level frame union ─────────────────────────────────────────────────────
+/**
+ * The top-level RPC frame: a versioned, correlated wrapper that is a request,
+ * a response, or a protocol-level error, discriminated by `direction`. One
+ * frame per NDJSON line.
+ */
+export const GatewayRpcFrameSchema = z.discriminatedUnion('direction', [
+    GatewayRpcRequestFrameSchema,
+    GatewayRpcResponseFrameSchema,
+    GatewayRpcErrorFrameSchema,
+]);
+// ─── Frozen direction-set guard ────────────────────────────────────────────────
+/**
+ * The FROZEN v1.0 `direction` discriminator values. The drift guard
+ * (`__tests__/freeze.test.ts`) pins this tuple; any addition/removal is a
+ * contract-breaking change requiring a new versioned directory.
+ */
+export const GATEWAY_RPC_DIRECTIONS = ['request', 'response', 'error'];
+/**
+ * The FROZEN v1.0 protocol-level transport error codes the adapter emits in an
+ * {@link GatewayRpcErrorFrameSchema}. Pinned by the drift guard.
+ */
+export const GATEWAY_RPC_ERROR_CODES = [
+    'E_RPC_PARSE',
+    'E_RPC_BAD_VERSION',
+    'E_RPC_BAD_FRAME',
+    'E_RPC_INTERNAL',
+];
+/**
+ * Type guard: is `v` the frozen RPC protocol version this contract pins?
+ *
+ * Used by the adapter's version-negotiation step to reject mismatched frames
+ * with an `E_RPC_BAD_VERSION` error frame before any gateway routing.
+ *
+ * @param v - The candidate `protocol_version` string from an inbound frame.
+ * @returns `true` iff `v` equals {@link GATEWAY_RPC_PROTOCOL_VERSION}.
+ */
+export function isFrozenGatewayRpcVersion(v) {
+    return v === GATEWAY_RPC_PROTOCOL_VERSION;
+}
+//# sourceMappingURL=messages.js.map

package/dist/gateway/rpc/messages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"messages.js","sourceRoot":"","sources":["../../../src/gateway/rpc/messages.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AACjF,OAAO,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAC;AAE5D,kFAAkF;AAElF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,wEAAwE;IACxE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,oCAAoC;IACpC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CACpB,CAAC;KACD,MAAM,EAAE,CAAC;AAKZ,kFAAkF;AAElF;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC;KAC1C,MAAM,CAAC;IACN,yEAAyE;IACzE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC5B,uEAAuE;IACvE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,+BAA+B;IAC/B,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC/B,6EAA6E;IAC7E,OAAO,EAAE,qBAAqB;CAC/B,CAAC;KACD,MAAM,EAAE,CAAC;AAKZ,kFAAkF;AAElF;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC;KAC3C,MAAM,CAAC;IACN,+BAA+B;IAC/B,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC5B,0DAA0D;IAC1D,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,+BAA+B;IAC/B,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IAChC,qDAAqD;IACrD,QAAQ,EAAE,sBAAsB;CACjC,CAAC;KACD,MAAM,EAAE,CAAC;AAKZ,kFAAkF;AAElF;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC;KACxC,MAAM,CAAC;IACN,+BAA+B;IAC/B,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC5B,8DAA8D;IAC9D,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,+BAA+B;IAC/B,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IAC7B,gCAAgC;IAChC,KAAK,EAAE,qBAAqB;CAC7B,CAAC;KACD,MAAM,EAAE,CAAC;AAKZ,kFAAkF;AAElF;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,kBAAkB,CAAC,WAAW,EAAE;IACrE,4BAA4B;IAC5B,6BAA6B;IAC7B,0BAA0B;CAC3B,CAAC,CAAC;AAKH,kFAAkF;AAElF;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAU,CAAC;AAKhF;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,aAAa;IACb,mBAAmB;IACnB,iBAAiB;IACjB,gBAAgB;CACR,CAAC;AAKX;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CAAC,CAAS;IACjD,OAAO,CAAC,KAAK,4BAA4B,CAAC;AAC5C,CAAC"}