@cleocode/core 2026.5.133 → 2026.6.0

package/scripts/install-supervisor-binary.mjs

@@ -1,229 +1,78 @@
 #!/usr/bin/env node
 /**
- * Postinstall picker for the cleo-supervisor native binary
- * (T11340 — SG-RUNTIME-UNIFICATION R1, Distribution Pattern P2/P1).
+ * Postinstall picker entrypoint for CLEO-managed native binaries
+ * (T11340 — SG-RUNTIME-UNIFICATION R1; extended T11580 — R10-L1).
  *
- * Resolution + verification flow:
+ * Historically this script resolved ONLY the `cleo-supervisor` executable. As
+ * of R10-L1 (T11580) it drives the SAME picker over BOTH CLEO-managed native
+ * binaries — `cleo-supervisor` and `worktree-napi` — via the shared
+ * {@link pickBinary} module. The resolution + verification flow (P2 download +
+ * sha256 fail-closed + `CLEO_NAPI_BINARY_MIRROR` override + idempotent cache
+ * reuse + P1 bundled fallback) is identical for both; only the manifest,
+ * fallback path, and cache filename differ per binary.
  *
- *   1. Resolve the platform triple from `process.platform` + `process.arch` +
- *      libc (gnu/musl on Linux). Supported: linux-x64-gnu, linux-arm64-gnu,
- *      darwin-x64, darwin-arm64, win32-x64-msvc.
- *   2. Read the sha256 manifest CHECKED INTO this package (P2 — pinned at
- *      publish time, never fetched). The manifest pins the GitHub Release
- *      base URL + per-triple sha256 + filename.
- *   3. If the binary is already cached + sha256-valid, reuse it (idempotent).
- *   4. Otherwise download `<baseUrl>/<file>` (base URL overridable via
- *      `CLEO_NAPI_BINARY_MIRROR`), verify sha256 against the manifest
- *      (FAIL CLOSED on mismatch), write atomically (tmp-then-rename), chmod +x.
- *   5. P1 fallback: when the download is unavailable (offline, `--ignore-scripts`
- *      so this never ran, or a mirror outage) AND the bundled
- *      `binaries/fallback/cleo-supervisor` matches the host triple
- *      (linux-x64-gnu), use it.
+ * The package `postinstall` invokes this once. Each binary is resolved
+ * independently and best-effort — a failure of one never blocks the other, and
+ * neither ever fails `npm install` (graceful degrade; the dependent feature is
+ * resolved on first use).
  *
- * postinstall MUST NOT fail the install — a missing supervisor binary degrades
- * gracefully (the daemon feature is unavailable until the binary is resolved on
- * first use). This script therefore exits 0 even on download failure, logging a
- * diagnostic. The fail-closed sha256 check applies to the BYTES (a tampered
- * download is rejected); it does not abort `npm install`.
+ * Standalone binary specs:
+ *
+ *   - `cleo-supervisor`: a single executable per triple, cached as
+ *     `cleo-supervisor<ext>` and chmod +x.
+ *   - `worktree-napi`: a napi-rs `.node` addon, cached as
+ *     `worktree-napi.<triple>.node` (no exec bit needed — it is `require()`d).
  *
  * @task T11340
+ * @task T11580
  */
 
-import { createHash } from 'node:crypto';
-import {
-  chmodSync,
-  copyFileSync,
-  existsSync,
-  mkdirSync,
-  readFileSync,
-  renameSync,
-  rmSync,
-  writeFileSync,
-} from 'node:fs';
-import { homedir, platform as osPlatform } from 'node:os';
 import { dirname, join } from 'node:path';
 import { fileURLToPath } from 'node:url';
+import { pickBinary } from './napi-binary-picker.mjs';
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
 
 /** Package root: packages/core (scripts/ is a direct child). */
 const PKG_ROOT = join(__dirname, '..');
 
-/** Path to the sha256 manifest checked into the tarball (P2). */
-const MANIFEST_PATH = join(PKG_ROOT, 'binaries', 'cleo-supervisor-manifest.json');
-
-/** Bundled P1 fallback binary (linux-x64-gnu only). */
-const FALLBACK_BIN = join(PKG_ROOT, 'binaries', 'fallback', 'cleo-supervisor');
-
-/** The single triple the P1 fallback binary targets. */
-const FALLBACK_TRIPLE = 'linux-x64-gnu';
-
-/**
- * Resolve the platform triple for the current host.
- *
- * @returns {{ triple: string; ext: string } | null} Triple + binary extension,
- *   or null if the host platform/arch is unsupported.
- */
-function resolveTriple() {
-  const p = process.platform;
-  const a = process.arch;
-  if (p === 'linux' && a === 'x64') return { triple: 'linux-x64-gnu', ext: '' };
-  if (p === 'linux' && a === 'arm64') return { triple: 'linux-arm64-gnu', ext: '' };
-  if (p === 'darwin' && a === 'x64') return { triple: 'darwin-x64', ext: '' };
-  if (p === 'darwin' && a === 'arm64') return { triple: 'darwin-arm64', ext: '' };
-  if (p === 'win32' && a === 'x64') return { triple: 'win32-x64-msvc', ext: '.exe' };
-  return null;
-}
+/** Directory holding the checked-in manifests + bundled P1 fallbacks. */
+const BINARIES_DIR = join(PKG_ROOT, 'binaries');
 
 /**
- * Detect whether the Linux host uses musl libc (Alpine et al.). The published
- * Linux binaries are gnu-only; a musl host has no matching prebuild and falls
- * through to the descriptive "unsupported" path.
- *
- * @returns {boolean} True when the host appears to be musl-based.
+ * The CLEO-managed native binaries resolved at postinstall. Each entry is a
+ * {@link import('./napi-binary-picker.mjs').BinarySpec}.
  */
-function isMuslLinux() {
-  if (osPlatform() !== 'linux') return false;
-  try {
-    // The simplest robust signal available without spawning: the ldd report
-    // embedded in process.report (Node exposes glibc/musl there on Linux).
-    const report =
-      typeof process.report?.getReport === 'function' ? process.report.getReport() : null;
-    const glibc = report?.header?.glibcVersionRuntime;
-    // glibcVersionRuntime present => glibc; absent on musl.
-    return !glibc;
-  } catch {
-    return false;
-  }
-}
-
-/** Compute the sha256 hex digest of a buffer. */
-function sha256(buf) {
-  return createHash('sha256').update(buf).digest('hex');
-}
-
-/** Cache directory for the resolved binary: `<cache>/cleo/napi-bin/<version>/`. */
-function cacheDir(version) {
-  // Mirror env-paths('cleo', {suffix:''}).cache without importing @cleocode/paths
-  // (this script runs in postinstall where workspace deps may not be linked yet).
-  const p = process.platform;
-  if (p === 'win32') {
-    const local = process.env.LOCALAPPDATA ?? join(homedir(), 'AppData', 'Local');
-    return join(local, 'cleo', 'Cache', 'napi-bin', version);
-  }
-  if (p === 'darwin') {
-    return join(homedir(), 'Library', 'Caches', 'cleo', 'napi-bin', version);
-  }
-  const xdg = process.env.XDG_CACHE_HOME;
-  const base = xdg && xdg.startsWith('/') ? xdg : join(homedir(), '.cache');
-  return join(base, 'cleo', 'napi-bin', version);
-}
-
-/** Write `buf` to `dest` atomically (tmp-then-rename) and chmod +x. */
-function writeBinaryAtomic(dest, buf) {
-  mkdirSync(dirname(dest), { recursive: true });
-  const tmp = `${dest}.${process.pid}.tmp`;
-  writeFileSync(tmp, buf);
-  chmodSync(tmp, 0o755);
-  renameSync(tmp, dest);
-}
-
-/** Use the bundled P1 fallback if it matches the host triple. */
-function tryFallback(triple, dest) {
-  if (triple !== FALLBACK_TRIPLE || !existsSync(FALLBACK_BIN)) return false;
-  try {
-    mkdirSync(dirname(dest), { recursive: true });
-    const tmp = `${dest}.${process.pid}.fallback.tmp`;
-    copyFileSync(FALLBACK_BIN, tmp);
-    chmodSync(tmp, 0o755);
-    renameSync(tmp, dest);
-    console.log(`[cleo-supervisor] using bundled P1 fallback for ${triple}`);
-    return true;
-  } catch (err) {
-    console.warn(`[cleo-supervisor] fallback copy failed: ${err?.message ?? err}`);
-    return false;
-  }
-}
+const BINARY_SPECS = [
+  {
+    label: 'cleo-supervisor',
+    manifestPath: join(BINARIES_DIR, 'cleo-supervisor-manifest.json'),
+    fallbackPath: join(BINARIES_DIR, 'fallback', 'cleo-supervisor'),
+    executable: true,
+    cachedName: (_triple, ext) => `cleo-supervisor${ext}`,
+  },
+  {
+    label: 'worktree-napi',
+    manifestPath: join(BINARIES_DIR, 'worktree-napi-manifest.json'),
+    fallbackPath: join(BINARIES_DIR, 'fallback', 'worktree-napi.linux-x64-gnu.node'),
+    executable: false,
+    cachedName: (triple) => `worktree-napi.${triple}.node`,
+  },
+];
 
 async function main() {
-  const resolved = resolveTriple();
-  if (!resolved) {
-    console.warn(
-      `[cleo-supervisor] no prebuilt binary for ${process.platform}/${process.arch}` +
-        (isMuslLinux() ? ' (musl libc — only gnu Linux prebuilds are published)' : '') +
-        ' — daemon features will be unavailable.',
-    );
-    return; // graceful: do not fail install
-  }
-  const { triple, ext } = resolved;
-
-  if (!existsSync(MANIFEST_PATH)) {
-    console.warn(
-      `[cleo-supervisor] manifest missing at ${MANIFEST_PATH} — skipping binary install` +
-        ' (development checkout or --ignore-scripts publish).',
-    );
-    return;
-  }
-
-  /** @type {{version:string; baseUrl:string; binaries:Record<string,{file:string; sha256:string; size:number}>}} */
-  const manifest = JSON.parse(readFileSync(MANIFEST_PATH, 'utf8'));
-  const entry = manifest.binaries?.[triple];
-  if (!entry) {
-    console.warn(`[cleo-supervisor] manifest has no entry for ${triple} — skipping.`);
-    return;
-  }
-
-  const dest = join(cacheDir(manifest.version), `cleo-supervisor${ext}`);
-
-  // Idempotent: reuse a cached binary that already matches the pinned sha256.
-  if (existsSync(dest)) {
-    try {
-      if (sha256(readFileSync(dest)) === entry.sha256) {
-        console.log(`[cleo-supervisor] cached binary OK at ${dest}`);
-        return;
-      }
-    } catch {
-      // fall through to re-download
-    }
-  }
-
-  // CLEO_NAPI_BINARY_MIRROR overrides the download base URL (corporate proxies).
-  const mirror = process.env.CLEO_NAPI_BINARY_MIRROR?.replace(/\/+$/, '');
-  const base = mirror ?? manifest.baseUrl;
-  const url = `${base}/${entry.file}`;
-
-  try {
-    const res = await fetch(url);
-    if (!res.ok) {
-      throw new Error(`HTTP ${res.status} for ${url}`);
-    }
-    const buf = Buffer.from(await res.arrayBuffer());
-    const digest = sha256(buf);
-    if (digest !== entry.sha256) {
-      // FAIL CLOSED on the bytes — never install a tampered binary.
-      throw new Error(
-        `sha256 mismatch for ${triple}: expected ${entry.sha256}, got ${digest} — refusing to install`,
-      );
-    }
-    writeBinaryAtomic(dest, buf);
-    console.log(`[cleo-supervisor] installed ${triple} -> ${dest} (sha256 verified)`);
-  } catch (err) {
-    console.warn(`[cleo-supervisor] download failed: ${err?.message ?? err}`);
-    if (tryFallback(triple, dest)) return;
-    // Clean a partial cache entry, then degrade gracefully.
-    try {
-      rmSync(dest, { force: true });
-    } catch {
-      /* ignore */
-    }
-    console.warn(
-      `[cleo-supervisor] binary unavailable for ${triple}; daemon features deferred until first use.`,
-    );
-  }
+  // Resolve each binary independently — one failure must not block the other.
+  await Promise.all(
+    BINARY_SPECS.map((spec) =>
+      pickBinary(spec).catch((err) => {
+        console.warn(`[${spec.label}] picker error (non-fatal): ${err?.message ?? err}`);
+      }),
+    ),
+  );
 }
 
 main().catch((err) => {
   // postinstall must never break `npm install`.
-  console.warn(`[cleo-supervisor] postinstall picker error (non-fatal): ${err?.message ?? err}`);
+  console.warn(`[cleo-napi] postinstall picker error (non-fatal): ${err?.message ?? err}`);
   process.exit(0);
 });

package/scripts/napi-binary-picker.mjs

@@ -0,0 +1,267 @@
+#!/usr/bin/env node
+/**
+ * Shared postinstall picker for CLEO-managed native binaries
+ * (T11580 — R10-L1 · SG-PACKAGE-ARCH; generalizes the T11340 supervisor picker).
+ *
+ * Two binaries flow through this single picker:
+ *
+ *   - `cleo-supervisor` — the standalone process supervisor executable
+ *     (`crates/cleo-supervisor`). A single exec per triple.
+ *   - `worktree-napi`    — the napi-rs Node-API addon (`crates/worktree-napi`)
+ *     consumed by `@cleocode/worktree`. The host-triple `.node` is cached so the
+ *     worktree loader resolves a core-managed path instead of bundling all four
+ *     `.node` files in the `@cleocode/worktree` tarball.
+ *
+ * Both follow Distribution Pattern P2 (primary) + P1 (fallback):
+ *
+ *   1. Resolve the platform triple from `process.platform` + `process.arch` +
+ *      libc (gnu/musl on Linux).
+ *   2. Read the sha256 manifest CHECKED INTO this package (P2 — pinned at
+ *      publish time, never fetched). The manifest pins the GitHub Release base
+ *      URL + per-triple sha256 + filename.
+ *   3. If the binary is already cached + sha256-valid, reuse it (idempotent).
+ *   4. Otherwise download `<baseUrl>/<file>` (base URL overridable via
+ *      `CLEO_NAPI_BINARY_MIRROR`), verify sha256 against the manifest
+ *      (FAIL CLOSED on mismatch), write atomically (tmp-then-rename), chmod +x
+ *      for executables.
+ *   5. P1 fallback: when the download is unavailable (offline, `--ignore-scripts`
+ *      so this never ran, or a mirror outage) AND the bundled
+ *      `binaries/fallback/<fallbackFile>` matches the host triple
+ *      (linux-x64-gnu), use it.
+ *
+ * postinstall MUST NOT fail the install — a missing binary degrades gracefully
+ * (the dependent feature is resolved on first use). Callers therefore exit 0
+ * even on download failure, logging a diagnostic. The fail-closed sha256 check
+ * applies to the BYTES (a tampered download is rejected); it does not abort
+ * `npm install`.
+ *
+ * @task T11580
+ */
+
+import { createHash } from 'node:crypto';
+import {
+  chmodSync,
+  copyFileSync,
+  existsSync,
+  mkdirSync,
+  readFileSync,
+  renameSync,
+  rmSync,
+  writeFileSync,
+} from 'node:fs';
+import { homedir, platform as osPlatform } from 'node:os';
+import { dirname, join } from 'node:path';
+
+/** The single triple every P1 fallback binary targets. */
+export const FALLBACK_TRIPLE = 'linux-x64-gnu';
+
+/**
+ * Resolve the platform triple for the current host.
+ *
+ * @returns {{ triple: string; ext: string } | null} Triple + executable
+ *   extension (`.exe` on Windows, `''` elsewhere), or null if the host
+ *   platform/arch is unsupported. `ext` only applies to standalone
+ *   executables; napi `.node` addons ignore it.
+ */
+export function resolveTriple() {
+  const p = process.platform;
+  const a = process.arch;
+  if (p === 'linux' && a === 'x64') return { triple: 'linux-x64-gnu', ext: '' };
+  if (p === 'linux' && a === 'arm64') return { triple: 'linux-arm64-gnu', ext: '' };
+  if (p === 'darwin' && a === 'x64') return { triple: 'darwin-x64', ext: '' };
+  if (p === 'darwin' && a === 'arm64') return { triple: 'darwin-arm64', ext: '' };
+  if (p === 'win32' && a === 'x64') return { triple: 'win32-x64-msvc', ext: '.exe' };
+  return null;
+}
+
+/**
+ * Detect whether the Linux host uses musl libc (Alpine et al.). The published
+ * Linux binaries are gnu-only; a musl host has no matching prebuild and falls
+ * through to the descriptive "unsupported" path.
+ *
+ * @returns {boolean} True when the host appears to be musl-based.
+ */
+export function isMuslLinux() {
+  if (osPlatform() !== 'linux') return false;
+  try {
+    // The simplest robust signal available without spawning: the ldd report
+    // embedded in process.report (Node exposes glibc/musl there on Linux).
+    const report =
+      typeof process.report?.getReport === 'function' ? process.report.getReport() : null;
+    const glibc = report?.header?.glibcVersionRuntime;
+    // glibcVersionRuntime present => glibc; absent on musl.
+    return !glibc;
+  } catch {
+    return false;
+  }
+}
+
+/** Compute the sha256 hex digest of a buffer. */
+export function sha256(buf) {
+  return createHash('sha256').update(buf).digest('hex');
+}
+
+/**
+ * Cache directory for resolved native binaries:
+ * `<cache>/cleo/napi-bin/<version>/`.
+ *
+ * Mirrors `env-paths('cleo', {suffix:''}).cache` without importing
+ * `@cleocode/paths` (this runs in postinstall where workspace deps may not be
+ * linked yet).
+ *
+ * @param {string} version - The manifest version segment.
+ * @returns {string} Absolute cache directory path.
+ */
+export function cacheDir(version) {
+  const p = process.platform;
+  if (p === 'win32') {
+    const local = process.env.LOCALAPPDATA ?? join(homedir(), 'AppData', 'Local');
+    return join(local, 'cleo', 'Cache', 'napi-bin', version);
+  }
+  if (p === 'darwin') {
+    return join(homedir(), 'Library', 'Caches', 'cleo', 'napi-bin', version);
+  }
+  const xdg = process.env.XDG_CACHE_HOME;
+  const base = xdg && xdg.startsWith('/') ? xdg : join(homedir(), '.cache');
+  return join(base, 'cleo', 'napi-bin', version);
+}
+
+/**
+ * Write `buf` to `dest` atomically (tmp-then-rename). Executables are chmod'd
+ * +x; napi `.node` addons are loaded by `require()` and need no exec bit.
+ *
+ * @param {string} dest - Destination path.
+ * @param {Buffer} buf - Bytes to write.
+ * @param {boolean} executable - Whether to chmod 0o755.
+ */
+function writeBinaryAtomic(dest, buf, executable) {
+  mkdirSync(dirname(dest), { recursive: true });
+  const tmp = `${dest}.${process.pid}.tmp`;
+  writeFileSync(tmp, buf);
+  if (executable) chmodSync(tmp, 0o755);
+  renameSync(tmp, dest);
+}
+
+/**
+ * Copy the bundled P1 fallback into the cache if it matches the host triple.
+ *
+ * @param {object} spec - The binary spec (see {@link pickBinary}).
+ * @param {string} triple - The resolved host triple.
+ * @param {string} dest - Cache destination path.
+ * @returns {boolean} True when the fallback was used.
+ */
+function tryFallback(spec, triple, dest) {
+  if (triple !== FALLBACK_TRIPLE || !existsSync(spec.fallbackPath)) return false;
+  try {
+    mkdirSync(dirname(dest), { recursive: true });
+    const tmp = `${dest}.${process.pid}.fallback.tmp`;
+    copyFileSync(spec.fallbackPath, tmp);
+    if (spec.executable) chmodSync(tmp, 0o755);
+    renameSync(tmp, dest);
+    console.log(`[${spec.label}] using bundled P1 fallback for ${triple}`);
+    return true;
+  } catch (err) {
+    console.warn(`[${spec.label}] fallback copy failed: ${err?.message ?? err}`);
+    return false;
+  }
+}
+
+/**
+ * @typedef {object} BinarySpec
+ * @property {string} label - Diagnostic label, e.g. `cleo-supervisor`.
+ * @property {string} manifestPath - Absolute path to the checked-in sha256
+ *   manifest (P2).
+ * @property {string} fallbackPath - Absolute path to the bundled P1 fallback
+ *   binary (linux-x64-gnu).
+ * @property {boolean} executable - Whether the resolved binary is a standalone
+ *   executable (`true` → chmod +x) or a napi `.node` addon (`false`).
+ * @property {(triple: string, ext: string) => string} cachedName - The basename
+ *   the binary is cached under in `<cache>/napi-bin/<version>/`. Supervisor uses
+ *   `cleo-supervisor<ext>`; worktree-napi uses `worktree-napi.<triple>.node`.
+ */
+
+/**
+ * Resolve a single CLEO-managed native binary into the shared cache following
+ * Distribution Pattern P2 (download + sha256) with a P1 (bundled fallback) safety
+ * net. Never throws to the caller for install-failure conditions — degrades
+ * gracefully and logs.
+ *
+ * @param {BinarySpec} spec - The per-binary distribution spec.
+ * @returns {Promise<void>}
+ */
+export async function pickBinary(spec) {
+  const resolved = resolveTriple();
+  if (!resolved) {
+    console.warn(
+      `[${spec.label}] no prebuilt binary for ${process.platform}/${process.arch}` +
+        (isMuslLinux() ? ' (musl libc — only gnu Linux prebuilds are published)' : '') +
+        ' — feature unavailable until resolved on first use.',
+    );
+    return; // graceful: do not fail install
+  }
+  const { triple, ext } = resolved;
+
+  if (!existsSync(spec.manifestPath)) {
+    console.warn(
+      `[${spec.label}] manifest missing at ${spec.manifestPath} — skipping binary install` +
+        ' (development checkout or --ignore-scripts publish).',
+    );
+    return;
+  }
+
+  /** @type {{version:string; baseUrl:string; binaries:Record<string,{file:string; sha256:string; size:number}>}} */
+  const manifest = JSON.parse(readFileSync(spec.manifestPath, 'utf8'));
+  const entry = manifest.binaries?.[triple];
+  if (!entry) {
+    console.warn(`[${spec.label}] manifest has no entry for ${triple} — skipping.`);
+    return;
+  }
+
+  const dest = join(cacheDir(manifest.version), spec.cachedName(triple, ext));
+
+  // Idempotent: reuse a cached binary that already matches the pinned sha256.
+  if (existsSync(dest)) {
+    try {
+      if (sha256(readFileSync(dest)) === entry.sha256) {
+        console.log(`[${spec.label}] cached binary OK at ${dest}`);
+        return;
+      }
+    } catch {
+      // fall through to re-download
+    }
+  }
+
+  // CLEO_NAPI_BINARY_MIRROR overrides the download base URL (corporate proxies).
+  const mirror = process.env.CLEO_NAPI_BINARY_MIRROR?.replace(/\/+$/, '');
+  const base = mirror ?? manifest.baseUrl;
+  const url = `${base}/${entry.file}`;
+
+  try {
+    const res = await fetch(url);
+    if (!res.ok) {
+      throw new Error(`HTTP ${res.status} for ${url}`);
+    }
+    const buf = Buffer.from(await res.arrayBuffer());
+    const digest = sha256(buf);
+    if (digest !== entry.sha256) {
+      // FAIL CLOSED on the bytes — never install a tampered binary.
+      throw new Error(
+        `sha256 mismatch for ${triple}: expected ${entry.sha256}, got ${digest} — refusing to install`,
+      );
+    }
+    writeBinaryAtomic(dest, buf, spec.executable);
+    console.log(`[${spec.label}] installed ${triple} -> ${dest} (sha256 verified)`);
+  } catch (err) {
+    console.warn(`[${spec.label}] download failed: ${err?.message ?? err}`);
+    if (tryFallback(spec, triple, dest)) return;
+    // Clean a partial cache entry, then degrade gracefully.
+    try {
+      rmSync(dest, { force: true });
+    } catch {
+      /* ignore */
+    }
+    console.warn(
+      `[${spec.label}] binary unavailable for ${triple}; feature deferred until first use.`,
+    );
+  }
+}

package/dist/agents/agent-registry.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"agent-registry.d.ts","sourceRoot":"","sources":["../../src/agents/agent-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,SAAS,EAEf,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAEL,KAAK,qBAAqB,EAE3B,MAAM,yBAAyB,CAAC;AAOjC;;;GAGG;AACH,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAMrC;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,yBAAyB;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,iCAAiC;IACjC,SAAS,EAAE,SAAS,CAAC;IACrB,mCAAmC;IACnC,MAAM,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACnC,wDAAwD;IACxD,WAAW,EAAE,MAAM,CAAC;IACpB,uEAAuE;IACvE,iBAAiB,EAAE,MAAM,CAAC;IAC1B,uEAAuE;IACvE,WAAW,EAAE,MAAM,CAAC;IACpB,+CAA+C;IAC/C,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,kCAAkC;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,QAAQ,EAAE,MAAM,CAAC;IACjB,+CAA+C;IAC/C,OAAO,EAAE,qBAAqB,CAAC;IAC/B,8DAA8D;IAC9D,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,gDAAgD;IAChD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6CAA6C;IAC7C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6CAA6C;IAC7C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oDAAoD;IACpD,SAAS,CAAC,EAAE,WAAW,GAAG,WAAW,GAAG,SAAS,CAAC;CACnD;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,MAAM,EACf,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CA+C/B;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAsB,mBAAmB,CACvC,SAAS,CAAC,EAAE,SAAS,EACrB,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC,aAAa,EAAE,CAAC,CAc1B;AAiBD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAsB,uBAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAkB9F;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,MAAM,EACf,eAAe,EAAE,MAAM,EAAE,EACzB,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAwB1B;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,uBAAuB,EAChC,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAyBxB"}

package/dist/agents/agent-registry.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"agent-registry.js","sourceRoot":"","sources":["../../src/agents/agent-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAGL,cAAc,GACf,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAGL,oBAAoB,GACrB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEnD,+EAA+E;AAC/E,YAAY;AACZ,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAgDrC,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAe,EACf,GAAY;IAEZ,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IAE5B,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IAEjG,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,qCAAqC;IACrC,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC;IAC5E,IAAI,UAAU,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,KAAK,CAAC,EAAE;YACjB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,WAAW,EAAE,CAAC;YACd,iBAAiB,EAAE,CAAC;YACpB,WAAW,EAAE,mBAAmB;YAChC,SAAS,EAAE,KAAK;SACjB,CAAC;IACJ,CAAC;IAED,+DAA+D;IAC/D,MAAM,QAAQ,GAAG,MAAM,EAAE;SACtB,MAAM,CAAC,EAAE,EAAE,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC;SACjC,IAAI,CAAC,cAAc,CAAC;SACpB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,cAAc,CAAC,aAAa,EAAE,OAAO,CAAC,EACzC,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CACxE,CACF;SACA,GAAG,EAAE,CAAC;IAET,uEAAuE;IACvE,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,MAAM,WAAW,GAAG,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC/C,MAAM,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,mBAAmB,GAAG,WAAW,CAAC,CAAC;IAEzE,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,EAAE;QACjB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,WAAW;QACX,iBAAiB;QACjB,WAAW,EAAE,mBAAmB;QAChC,SAAS,EAAE,iBAAiB,GAAG,CAAC;KACjC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,SAAqB,EACrB,GAAY;IAEZ,MAAM,OAAO,GAA6C,SAAS;QACjE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,CAA0B,EAAE,SAAS,EAAE;QACpE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,CAA0B,EAAE,CAAC;IAE5D,MAAM,YAAY,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAE5D,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,GAAG,CAClC,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAC7D,CAAC;IAEF,OAAO,UAAU;SACd,MAAM,CAAC,CAAC,CAAC,EAAsB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;SAC7C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB,GAAG,CAAC,CAAC,iBAAiB,CAAC,CAAC;AAC/D,CAAC;AAiBD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAAe,EAAE,GAAY;IACzE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,MAAM,EAAE;SACnB,MAAM,CAAC,EAAE,YAAY,EAAE,cAAc,CAAC,YAAY,EAAE,CAAC;SACrD,IAAI,CAAC,cAAc,CAAC;SACpB,KAAK,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;SACrC,GAAG,EAAE,CAAC;IAET,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IAEtB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,IAAI,IAAI,CAAkB,CAAC;QACrE,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC;QACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,OAAe,EACf,eAAyB,EACzB,GAAY;IAEZ,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,MAAM,EAAE;SACnB,MAAM,CAAC,EAAE,YAAY,EAAE,cAAc,CAAC,YAAY,EAAE,CAAC;SACrD,IAAI,CAAC,cAAc,CAAC;SACpB,KAAK,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;SACrC,GAAG,EAAE,CAAC;IAET,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,IAAI,QAAQ,GAAkB,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,IAAI,IAAI,CAAkB,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,uDAAuD;IACzD,CAAC;IAED,MAAM,OAAO,GAAkB,EAAE,GAAG,QAAQ,EAAE,eAAe,EAAE,CAAC;IAChE,MAAM,EAAE;SACL,MAAM,CAAC,cAAc,CAAC;SACtB,GAAG,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;SAC9C,KAAK,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;IAEzC,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAe,EACf,OAAgC,EAChC,GAAY;IAEZ,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,MAAM,EAAE;SACnB,MAAM,CAAC,EAAE,SAAS,EAAE,cAAc,CAAC,SAAS,EAAE,SAAS,EAAE,cAAc,CAAC,SAAS,EAAE,CAAC;SACpF,IAAI,CAAC,cAAc,CAAC;SACpB,KAAK,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;SACrC,GAAG,EAAE,CAAC;IAET,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,MAAM,KAAK,GAAwB;QACjC,OAAO;QACP,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,IAAI,SAAS;QAC5D,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC;IAEF,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACxD,OAAO,QAAQ,EAAE,EAAE,IAAI,IAAI,CAAC;AAC9B,CAAC"}

package/dist/store/data-safety.d.ts

@@ -1,92 +0,0 @@
-/**
- * Data Safety Module - Critical protection layer for CLEO data operations.
- *
- * Implements:
- * - Write verification (verify data was actually persisted)
- * - Collision detection (prevent duplicate task IDs)
- * - Sequence validation (ensure sequence counter matches database)
- * - Auto-checkpoint integration (git commit after writes)
- *
- * @task T4739
- * @epic T4732
- */
-import type { Session, Task } from '@cleocode/contracts';
-/** Safety configuration options. */
-export interface SafetyConfig {
-    /** Enable write verification (default: true) */
-    verifyWrites: boolean;
-    /** Enable collision detection (default: true) */
-    detectCollisions: boolean;
-    /** Enable sequence validation (default: true) */
-    validateSequence: boolean;
-    /** Enable auto-checkpoint (default: true) */
-    autoCheckpoint: boolean;
-    /** Throw on safety violations (default: true) */
-    strictMode: boolean;
-}
-/** Safety violation error. */
-export declare class SafetyError extends Error {
-    code: string;
-    details?: Record<string, unknown> | undefined;
-    constructor(message: string, code: string, details?: Record<string, unknown> | undefined);
-}
-/**
- * Check if a task ID already exists (collision detection).
- * @throws SafetyError if task exists and strict mode is enabled
- */
-export declare function checkTaskExists(taskId: string, cwd?: string, config?: Partial<SafetyConfig>): Promise<boolean>;
-/**
- * Verify a task was actually written to the database.
- * @throws SafetyError if verification fails
- */
-export declare function verifyTaskWrite(taskId: string, expectedData?: Partial<Task>, cwd?: string, config?: Partial<SafetyConfig>): Promise<boolean>;
-/**
- * Validate and repair sequence if necessary.
- * @returns true if sequence was valid or successfully repaired
- */
-export declare function validateAndRepairSequence(cwd?: string, config?: Partial<SafetyConfig>): Promise<{
-    valid: boolean;
-    repaired: boolean;
-    oldCounter?: number;
-    newCounter?: number;
-}>;
-/**
- * Trigger auto-checkpoint after successful write.
- */
-export declare function triggerCheckpoint(context: string, cwd?: string, config?: Partial<SafetyConfig>): Promise<void>;
-/**
- * Safely create a task with all safety mechanisms.
- * Wraps the actual createTask operation.
- */
-export declare function safeCreateTask(createFn: () => Promise<Task>, task: Task, cwd?: string, config?: Partial<SafetyConfig>): Promise<Task>;
-/**
- * Safely update a task with all safety mechanisms.
- */
-export declare function safeUpdateTask(updateFn: () => Promise<Task | null>, taskId: string, _updates: Partial<Task>, cwd?: string, config?: Partial<SafetyConfig>): Promise<Task | null>;
-/**
- * Safely delete a task with all safety mechanisms.
- */
-export declare function safeDeleteTask(deleteFn: () => Promise<boolean>, taskId: string, cwd?: string, config?: Partial<SafetyConfig>): Promise<boolean>;
-/**
- * Verify session write.
- */
-export declare function verifySessionWrite(sessionId: string, cwd?: string, config?: Partial<SafetyConfig>): Promise<boolean>;
-/**
- * Safely create a session with all safety mechanisms.
- */
-export declare function safeCreateSession(createFn: () => Promise<Session>, session: Session, cwd?: string, config?: Partial<SafetyConfig>): Promise<Session>;
-/**
- * Force a checkpoint before destructive operations.
- * Use this before migrations, bulk updates, etc.
- */
-export declare function forceCheckpointBeforeOperation(operation: string, cwd?: string): Promise<void>;
-/**
- * Run comprehensive data integrity check.
- * Reports all issues found.
- */
-export declare function runDataIntegrityCheck(cwd?: string): Promise<{
-    passed: boolean;
-    issues: string[];
-    repairs: string[];
-}>;
-//# sourceMappingURL=data-safety.d.ts.map

package/dist/store/data-safety.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"data-safety.d.ts","sourceRoot":"","sources":["../../src/store/data-safety.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAWzD,oCAAoC;AACpC,MAAM,WAAW,YAAY;IAC3B,gDAAgD;IAChD,YAAY,EAAE,OAAO,CAAC;IACtB,iDAAiD;IACjD,gBAAgB,EAAE,OAAO,CAAC;IAC1B,iDAAiD;IACjD,gBAAgB,EAAE,OAAO,CAAC;IAC1B,6CAA6C;IAC7C,cAAc,EAAE,OAAO,CAAC;IACxB,iDAAiD;IACjD,UAAU,EAAE,OAAO,CAAC;CACrB;AAUD,8BAA8B;AAC9B,qBAAa,WAAY,SAAQ,KAAK;IAG3B,IAAI,EAAE,MAAM;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAFxC,OAAO,EAAE,MAAM,EACR,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAA;CAK3C;AAED;;;GAGG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,MAAM,EACd,GAAG,CAAC,EAAE,MAAM,EACZ,MAAM,GAAE,OAAO,CAAC,YAAY,CAAM,GACjC,OAAO,CAAC,OAAO,CAAC,CAmBlB;AAED;;;GAGG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,MAAM,EACd,YAAY,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,EAC5B,GAAG,CAAC,EAAE,MAAM,EACZ,MAAM,GAAE,OAAO,CAAC,YAAY,CAAM,GACjC,OAAO,CAAC,OAAO,CAAC,CAqClB;AAED;;;GAGG;AACH,wBAAsB,yBAAyB,CAC7C,GAAG,CAAC,EAAE,MAAM,EACZ,MAAM,GAAE,OAAO,CAAC,YAAY,CAAM,GACjC,OAAO,CAAC;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAwC1F;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,MAAM,EACf,GAAG,CAAC,EAAE,MAAM,EACZ,MAAM,GAAE,OAAO,CAAC,YAAY,CAAM,GACjC,OAAO,CAAC,IAAI,CAAC,CAaf;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAClC,QAAQ,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,EAC7B,IAAI,EAAE,IAAI,EACV,GAAG,CAAC,EAAE,MAAM,EACZ,MAAM,GAAE,OAAO,CAAC,YAAY,CAAM,GACjC,OAAO,CAAC,IAAI,CAAC,CAsBf;AAED;;GAEG;AACH,wBAAsB,cAAc,CAClC,QAAQ,EAAE,MAAM,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,EACpC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,EACvB,GAAG,CAAC,EAAE,MAAM,EACZ,MAAM,GAAE,OAAO,CAAC,YAAY,CAAM,GACjC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CActB;AAED;;GAEG;AACH,wBAAsB,cAAc,CAClC,QAAQ,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,EAChC,MAAM,EAAE,MAAM,EACd,GAAG,CAAC,EAAE,MAAM,EACZ,MAAM,GAAE,OAAO,CAAC,YAAY,CAAM,GACjC,OAAO,CAAC,OAAO,CAAC,CAclB;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CACtC,SAAS,EAAE,MAAM,EACjB,GAAG,CAAC,EAAE,MAAM,EACZ,MAAM,GAAE,OAAO,CAAC,YAAY,CAAM,GACjC,OAAO,CAAC,OAAO,CAAC,CAwBlB;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,EAChC,OAAO,EAAE,OAAO,EAChB,GAAG,CAAC,EAAE,MAAM,EACZ,MAAM,GAAE,OAAO,CAAC,YAAY,CAAM,GACjC,OAAO,CAAC,OAAO,CAAC,CAiBlB;AAED;;;GAGG;AACH,wBAAsB,8BAA8B,CAClD,SAAS,EAAE,MAAM,EACjB,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC,IAAI,CAAC,CAWf;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IACjE,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB,CAAC,CAiCD"}