@cleocode/core 2026.6.13 → 2026.6.15

package/dist/gateway-client/generated/types.gen.js

@@ -0,0 +1,3 @@
+// This file is auto-generated by @hey-api/openapi-ts
+export {};
+//# sourceMappingURL=types.gen.js.map

package/dist/gateway-client/generated/types.gen.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.gen.js","sourceRoot":"","sources":["../../../src/gateway-client/generated/types.gen.ts"],"names":[],"mappings":"AAAA,qDAAqD"}

package/dist/gateway-client/index.d.ts

@@ -0,0 +1,27 @@
+/**
+ * `@cleocode/core/gateway-client` — the single, shared, typed SDK client over
+ * the CLEO `/v1` REST gateway.
+ *
+ * North-Star ratified decision: `@cleocode/core` IS the SDK — there is no
+ * separate `@cleocode/sdk` package. This subpath is the public surface of the
+ * generated client. CLI, TUI, and Studio all import {@link createCleoClient}
+ * from here so they share ONE client off ONE OpenAPI projection of the
+ * operations registry.
+ *
+ * The bulk of this module (per-operation request/response types, the inlined
+ * fetch client, the flat SDK functions) is generated under `./generated/` by
+ * `pnpm --filter @cleocode/core run gen:sdk` from the OpenAPI 3.1 document that
+ * {@link generateOpenApi} projects. Only {@link createCleoClient} (and its
+ * types) is hand-written.
+ *
+ * @packageDocumentation
+ * @module @cleocode/core/gateway-client
+ *
+ * @task T11920 — M5/AC2
+ * @epic T11769 — E-API-STANDARD-FOUNDATION
+ * @saga T10400
+ */
+export { type BoundMethod, type BoundNamespace, CLEO_CLIENT_NAMESPACES, type CleoClient, type CleoClientOptions, createCleoClient, } from './client.js';
+export type { Client, ClientOptions, Config, Options, RequestResult, } from './generated/client/index.js';
+export type * from './generated/types.gen.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/gateway-client/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/gateway-client/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,sBAAsB,EACtB,KAAK,UAAU,EACf,KAAK,iBAAiB,EACtB,gBAAgB,GACjB,MAAM,aAAa,CAAC;AAGrB,YAAY,EACV,MAAM,EACN,aAAa,EACb,MAAM,EACN,OAAO,EACP,aAAa,GACd,MAAM,6BAA6B,CAAC;AAGrC,mBAAmB,0BAA0B,CAAC"}

package/dist/gateway-client/index.js

@@ -0,0 +1,25 @@
+/**
+ * `@cleocode/core/gateway-client` — the single, shared, typed SDK client over
+ * the CLEO `/v1` REST gateway.
+ *
+ * North-Star ratified decision: `@cleocode/core` IS the SDK — there is no
+ * separate `@cleocode/sdk` package. This subpath is the public surface of the
+ * generated client. CLI, TUI, and Studio all import {@link createCleoClient}
+ * from here so they share ONE client off ONE OpenAPI projection of the
+ * operations registry.
+ *
+ * The bulk of this module (per-operation request/response types, the inlined
+ * fetch client, the flat SDK functions) is generated under `./generated/` by
+ * `pnpm --filter @cleocode/core run gen:sdk` from the OpenAPI 3.1 document that
+ * {@link generateOpenApi} projects. Only {@link createCleoClient} (and its
+ * types) is hand-written.
+ *
+ * @packageDocumentation
+ * @module @cleocode/core/gateway-client
+ *
+ * @task T11920 — M5/AC2
+ * @epic T11769 — E-API-STANDARD-FOUNDATION
+ * @saga T10400
+ */
+export { CLEO_CLIENT_NAMESPACES, createCleoClient, } from './client.js';
+//# sourceMappingURL=index.js.map

package/dist/gateway-client/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/gateway-client/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAGL,sBAAsB,EAGtB,gBAAgB,GACjB,MAAM,aAAa,CAAC"}

package/dist/gc/cleanup.d.ts

@@ -49,7 +49,11 @@ export interface CleanupResult {
     removed: number;
     /** Absolute paths that were removed (or would be removed). */
     removedPaths: string[];
-    /** Entries that were skipped (dry-run). */
+    /** Number of worktrees quarantined (dirty/unpushed — preserved, not deleted). */
+    quarantined: number;
+    /** Absolute paths that were quarantined (tar archives placed in quarantine dir). */
+    quarantinedPaths: string[];
+    /** Entries that were skipped (dry-run or preserved). */
     skipped: number;
     /** Errors encountered during removal (non-fatal). */
     errors: Array<{
@@ -58,6 +62,11 @@ export interface CleanupResult {
     }>;
     /** Whether this was a dry run. */
     dryRun: boolean;
+    /**
+     * True when pruning was skipped entirely because the preserve set was empty
+     * while worktrees exist (fail-closed guard, T11996).
+     */
+    skippedFailClosed?: boolean;
 }
 /**
  * Options for `pruneOrphanWorktrees`.
@@ -132,18 +141,24 @@ export interface OrphanEntry {
  * Prune orphaned agent worktree directories.
  *
  * Scans `worktreesRoot` (or `worktreesRoot/<projectHash>`) for directories
- * whose names are NOT in `activeTaskIds` and removes them. Uses `rmSync`
- * directly because the worktrees at this point are only filesystem artefacts
- * — the agent has already merged its work via `completeAgentWorktreeViaMerge`.
- * Git worktree de-registration is attempted with `git worktree prune` at the
- * level of the caller (cleo gc or cleo doctor does not need a git root here;
- * individual worktrees have their own `.git` file redirects which become stale
- * and are cleaned up by `git worktree prune` in the primary repo).
+ * whose names are NOT in `activeTaskIds` and removes them.
+ *
+ * Safety invariants (T11996):
+ * - Fail-closed: if `activeTaskIds` is empty AND worktrees exist, skip pruning
+ *   entirely and return `skippedFailClosed: true`. This prevents mass-deletion
+ *   when the task store is unavailable or freshly initialised.
+ * - Dirty guard: worktrees with uncommitted changes are quarantined (packed
+ *   into `.tar.gz` in `<worktreesRoot>/../quarantine/worktrees/`) instead of
+ *   deleted. The original directory is left on disk.
+ * - Unpushed guard: worktrees whose branch has commits not reachable from any
+ *   remote ref are quarantined, not deleted.
+ * - A worktree that is both dirty AND has unpushed commits is quarantined once.
  *
  * @param options - See `PruneOrphanWorktreesOptions`.
  * @returns Cleanup result.
  *
  * @task T9043
+ * @task T11996
  */
 export declare function pruneOrphanWorktrees(options: PruneOrphanWorktreesOptions): CleanupResult;
 /**

package/dist/gc/cleanup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cleanup.d.ts","sourceRoot":"","sources":["../../src/gc/cleanup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAkBH;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,EAAE,SAAS,MAAM,EAqCtC,CAAC;AAEX;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB,QAAqB,CAAC;AAM1D;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,uEAAuE;IACvE,OAAO,EAAE,MAAM,CAAC;IAChB,8DAA8D;IAC9D,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,2CAA2C;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChD,kCAAkC;IAClC,MAAM,EAAE,OAAO,CAAC;CACjB;AAED;;;;GAIG;AACH,MAAM,WAAW,2BAA2B;IAC1C;;;OAGG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3B;;;;OAIG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAC;IACb,6DAA6D;IAC7D,KAAK,EAAE,MAAM,CAAC;IACd,0CAA0C;IAC1C,QAAQ,EAAE,MAAM,CAAC;CAClB;AA4BD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,2BAA2B,GAAG,aAAa,CA4ExF;AAMD;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,GAAE,0BAA+B,GAAG,aAAa,CAsD3F;AAMD;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,GAAE,MAAgC,EAC1C,OAAO,GAAE,MAAiB,GACzB,WAAW,EAAE,CA4Bf;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CACjC,aAAa,EAAE,MAAM,EACrB,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,EAC1B,WAAW,CAAC,EAAE,MAAM,GACnB,WAAW,EAAE,CAkDf"}
+{"version":3,"file":"cleanup.d.ts","sourceRoot":"","sources":["../../src/gc/cleanup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAmBH;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,EAAE,SAAS,MAAM,EAqCtC,CAAC;AAEX;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB,QAAqB,CAAC;AAM1D;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,uEAAuE;IACvE,OAAO,EAAE,MAAM,CAAC;IAChB,8DAA8D;IAC9D,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,iFAAiF;IACjF,WAAW,EAAE,MAAM,CAAC;IACpB,oFAAoF;IACpF,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,wDAAwD;IACxD,OAAO,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChD,kCAAkC;IAClC,MAAM,EAAE,OAAO,CAAC;IAChB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED;;;;GAIG;AACH,MAAM,WAAW,2BAA2B;IAC1C;;;OAGG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3B;;;;OAIG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAC;IACb,6DAA6D;IAC7D,KAAK,EAAE,MAAM,CAAC;IACd,0CAA0C;IAC1C,QAAQ,EAAE,MAAM,CAAC;CAClB;AAwMD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,2BAA2B,GAAG,aAAa,CAwKxF;AAMD;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,GAAE,0BAA+B,GAAG,aAAa,CAsE3F;AAMD;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,GAAE,MAAgC,EAC1C,OAAO,GAAE,MAAiB,GACzB,WAAW,EAAE,CA4Bf;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CACjC,aAAa,EAAE,MAAM,EACrB,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,EAC1B,WAAW,CAAC,EAAE,MAAM,GACnB,WAAW,EAAE,CAkDf"}

package/dist/gc/cleanup.js

@@ -22,7 +22,8 @@
  *
  * @task T9043
  */
-import { existsSync, readdirSync, rmSync, statSync } from 'node:fs';
+import { execFileSync } from 'node:child_process';
+import { appendFileSync, existsSync, mkdirSync, readdirSync, rmSync, statSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
 // ---------------------------------------------------------------------------
@@ -114,30 +115,200 @@ function formatAge(ms) {
 // ---------------------------------------------------------------------------
 // Public API — worktree pruning
 // ---------------------------------------------------------------------------
+/**
+ * Check whether a worktree has uncommitted changes (dirty state).
+ *
+ * Runs `git status --porcelain` inside the worktree. A non-empty output means
+ * there are staged or unstaged changes (including untracked files via `-uall`).
+ * Returns `false` when git is unavailable or the directory is not a valid git
+ * worktree — treat as clean so we never block cleanup due to a git error.
+ *
+ * @param worktreePath - Absolute path to the worktree directory.
+ * @returns `true` when uncommitted changes are present; `false` otherwise.
+ *
+ * @task T11996
+ * @internal
+ */
+function isWorktreeDirty(worktreePath) {
+    try {
+        const out = execFileSync('git', ['-C', worktreePath, 'status', '--porcelain', '-uall'], {
+            encoding: 'utf-8',
+            stdio: ['pipe', 'pipe', 'pipe'],
+            timeout: 10_000,
+        });
+        return out.trim().length > 0;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Check whether a worktree has commits that have not been pushed to any remote.
+ *
+ * Two cases are detected:
+ * (a) Branches with a configured upstream: commits ahead of `@{upstream}`.
+ * (b) Branches with NO upstream (never pushed): any commits on the branch that
+ *     are not reachable from any remote-tracking ref.
+ * (c) Detached HEAD: commits not reachable from any remote-tracking ref.
+ *
+ * Returns `false` when git is unavailable or the worktree has no commits.
+ *
+ * @param worktreePath - Absolute path to the worktree directory.
+ * @returns `true` when unpushed commits exist; `false` otherwise.
+ *
+ * @task T11996
+ * @internal
+ */
+function hasUnpushedCommits(worktreePath) {
+    // Case (a): branch has a tracking upstream — check ahead count
+    try {
+        const aheadStr = execFileSync('git', ['-C', worktreePath, 'rev-list', '--count', '@{upstream}..HEAD'], {
+            encoding: 'utf-8',
+            stdio: ['pipe', 'pipe', 'pipe'],
+            timeout: 10_000,
+        }).trim();
+        const aheadCount = Number.parseInt(aheadStr, 10);
+        if (!Number.isNaN(aheadCount) && aheadCount > 0)
+            return true;
+        // Upstream exists and no unpushed commits
+        return false;
+    }
+    catch {
+        // No upstream configured — fall through to case (b)/(c)
+    }
+    // Case (b)/(c): no upstream — check if HEAD is reachable from any remote ref
+    try {
+        // List all remote-tracking refs
+        const remoteRefsOut = execFileSync('git', ['-C', worktreePath, 'for-each-ref', '--format=%(refname)', 'refs/remotes/'], {
+            encoding: 'utf-8',
+            stdio: ['pipe', 'pipe', 'pipe'],
+            timeout: 10_000,
+        }).trim();
+        const remoteRefs = remoteRefsOut.split('\n').filter(Boolean);
+        if (remoteRefs.length === 0) {
+            // No remotes at all — any commit is effectively "unpushed"
+            try {
+                const headOut = execFileSync('git', ['-C', worktreePath, 'rev-parse', 'HEAD'], {
+                    encoding: 'utf-8',
+                    stdio: ['pipe', 'pipe', 'pipe'],
+                    timeout: 5_000,
+                }).trim();
+                return headOut.length > 0;
+            }
+            catch {
+                return false;
+            }
+        }
+        // Check whether HEAD is reachable from the union of all remote refs
+        const args = ['-C', worktreePath, 'rev-list', '--count', 'HEAD', '--not', ...remoteRefs];
+        const countOut = execFileSync('git', args, {
+            encoding: 'utf-8',
+            stdio: ['pipe', 'pipe', 'pipe'],
+            timeout: 15_000,
+        }).trim();
+        const count = Number.parseInt(countOut, 10);
+        return !Number.isNaN(count) && count > 0;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Quarantine a dirty or unpushed worktree by packing it into a `.tar.gz`
+ * archive under `<worktreesRoot>/../quarantine/worktrees/`. The original
+ * directory is left intact.
+ *
+ * Writes an audit JSONL entry to `<worktreesRoot>/../quarantine/audit.jsonl`.
+ *
+ * @param worktreePath - Absolute path to the worktree directory to archive.
+ * @param taskId - Task ID for the entry name.
+ * @param quarantineDir - Absolute path to the quarantine root directory.
+ * @param reason - Human-readable reason (e.g. `'dirty'`, `'unpushed'`).
+ * @returns Absolute path to the created archive, or `null` on failure.
+ *
+ * @task T11996
+ * @internal
+ */
+function quarantineWorktreeDir(worktreePath, taskId, quarantineDir, reason) {
+    try {
+        mkdirSync(quarantineDir, { recursive: true });
+        const ts = new Date().toISOString().replace(/[:.]/g, '-');
+        const archiveName = `${taskId}-${ts}.tar.gz`;
+        const archivePath = join(quarantineDir, archiveName);
+        // Use tar with --exclude to capture untracked AND ignored files.
+        // We deliberately do NOT exclude anything here: the quarantine must be a
+        // complete snapshot including .env, build artifacts, etc. (T11996 AC).
+        execFileSync('tar', [
+            '-czf',
+            archivePath,
+            // Dereference symlinks so the archive is self-contained.
+            '--dereference',
+            // Use the parent directory as CWD so the archive root is `<taskId>/`.
+            '-C',
+            join(worktreePath, '..'),
+            taskId,
+        ], {
+            stdio: ['pipe', 'pipe', 'pipe'],
+            timeout: 120_000,
+        });
+        // Write audit entry
+        const auditPath = join(quarantineDir, 'audit.jsonl');
+        const entry = JSON.stringify({
+            ts: new Date().toISOString(),
+            action: 'quarantine',
+            worktreePath,
+            taskId,
+            archivePath,
+            reason,
+            agentId: process.env['CLEO_AGENT_ID'] ?? 'cleo',
+        });
+        appendFileSync(auditPath, `${entry}\n`, { encoding: 'utf-8' });
+        return archivePath;
+    }
+    catch {
+        return null;
+    }
+}
 /**
  * Prune orphaned agent worktree directories.
  *
  * Scans `worktreesRoot` (or `worktreesRoot/<projectHash>`) for directories
- * whose names are NOT in `activeTaskIds` and removes them. Uses `rmSync`
- * directly because the worktrees at this point are only filesystem artefacts
- * — the agent has already merged its work via `completeAgentWorktreeViaMerge`.
- * Git worktree de-registration is attempted with `git worktree prune` at the
- * level of the caller (cleo gc or cleo doctor does not need a git root here;
- * individual worktrees have their own `.git` file redirects which become stale
- * and are cleaned up by `git worktree prune` in the primary repo).
+ * whose names are NOT in `activeTaskIds` and removes them.
+ *
+ * Safety invariants (T11996):
+ * - Fail-closed: if `activeTaskIds` is empty AND worktrees exist, skip pruning
+ *   entirely and return `skippedFailClosed: true`. This prevents mass-deletion
+ *   when the task store is unavailable or freshly initialised.
+ * - Dirty guard: worktrees with uncommitted changes are quarantined (packed
+ *   into `.tar.gz` in `<worktreesRoot>/../quarantine/worktrees/`) instead of
+ *   deleted. The original directory is left on disk.
+ * - Unpushed guard: worktrees whose branch has commits not reachable from any
+ *   remote ref are quarantined, not deleted.
+ * - A worktree that is both dirty AND has unpushed commits is quarantined once.
  *
  * @param options - See `PruneOrphanWorktreesOptions`.
  * @returns Cleanup result.
  *
  * @task T9043
+ * @task T11996
  */
 export function pruneOrphanWorktrees(options) {
     const { worktreesRoot, projectHash, activeTaskIds, dryRun = false } = options;
     const removed = [];
+    const quarantined = [];
     const errors = [];
     let skipped = 0;
+    let skippedFailClosed = false;
     if (!existsSync(worktreesRoot)) {
-        return { removed: 0, removedPaths: [], skipped, errors, dryRun };
+        return {
+            removed: 0,
+            removedPaths: [],
+            quarantined: 0,
+            quarantinedPaths: [],
+            skipped,
+            errors,
+            dryRun,
+        };
     }
     // Determine which per-project directories to scan.
     let projectDirs;
@@ -151,7 +322,15 @@ export function pruneOrphanWorktrees(options) {
             entries = readdirSync(worktreesRoot);
         }
         catch {
-            return { removed: 0, removedPaths: [], skipped, errors, dryRun };
+            return {
+                removed: 0,
+                removedPaths: [],
+                quarantined: 0,
+                quarantinedPaths: [],
+                skipped: 0,
+                errors,
+                dryRun,
+            };
         }
         projectDirs = entries
             .map((e) => join(worktreesRoot, e))
@@ -172,6 +351,41 @@ export function pruneOrphanWorktrees(options) {
         catch {
             continue;
         }
+        // T11996 Fail-closed: if preserve set is empty AND worktrees exist, skip
+        // this project entirely to prevent mass-deletion when the task store is
+        // unreadable or the DB is freshly initialised. Write an audit warning.
+        const existingWorktrees = taskEntries.filter((e) => {
+            try {
+                return statSync(join(projectDir, e)).isDirectory();
+            }
+            catch {
+                return false;
+            }
+        });
+        if (activeTaskIds.size === 0 && existingWorktrees.length > 0) {
+            // Write a structured audit warning to the quarantine audit log so the
+            // operator can investigate. ZERO desktop output per binding amendment 6.
+            try {
+                const quarantineDir = join(worktreesRoot, '..', 'quarantine', 'worktrees');
+                mkdirSync(quarantineDir, { recursive: true });
+                const auditPath = join(quarantineDir, '..', 'audit.jsonl');
+                const entry = JSON.stringify({
+                    ts: new Date().toISOString(),
+                    action: 'prune-skip-fail-closed',
+                    projectDir,
+                    existingWorktreeCount: existingWorktrees.length,
+                    reason: 'preserve set empty while worktrees exist — skipping to prevent mass-deletion (T11996 fail-closed)',
+                    agentId: process.env['CLEO_AGENT_ID'] ?? 'cleo',
+                });
+                appendFileSync(auditPath, `${entry}\n`, { encoding: 'utf-8' });
+            }
+            catch {
+                // audit is best-effort
+            }
+            skipped += existingWorktrees.length;
+            skippedFailClosed = true;
+            continue;
+        }
         for (const taskId of taskEntries) {
             if (activeTaskIds.has(taskId)) {
                 skipped++;
@@ -188,24 +402,59 @@ export function pruneOrphanWorktrees(options) {
                 skipped++;
                 continue;
             }
-            if (dryRun) {
-                removed.push(worktreePath);
+            // T11996: Check dirty/unpushed state before any destructive action.
+            // Evaluate dirty first; only run unpushed check if clean (short-circuit).
+            const dirty = isWorktreeDirty(worktreePath);
+            const unpushed = dirty ? false : hasUnpushedCommits(worktreePath);
+            const shouldQuarantine = dirty || unpushed;
+            const quarantineReason = dirty ? 'dirty' : 'unpushed';
+            if (shouldQuarantine) {
+                if (dryRun) {
+                    quarantined.push(worktreePath);
+                }
+                else {
+                    const quarantineBase = join(worktreesRoot, '..', 'quarantine', 'worktrees');
+                    const archivePath = quarantineWorktreeDir(worktreePath, taskId, quarantineBase, quarantineReason);
+                    if (archivePath !== null) {
+                        quarantined.push(worktreePath);
+                    }
+                    else {
+                        errors.push({
+                            path: worktreePath,
+                            reason: 'quarantine tar failed — worktree preserved (T11996)',
+                        });
+                    }
+                }
             }
             else {
-                try {
-                    rmSync(worktreePath, { recursive: true, force: true });
+                if (dryRun) {
                     removed.push(worktreePath);
                 }
-                catch (err) {
-                    errors.push({
-                        path: worktreePath,
-                        reason: err instanceof Error ? err.message : String(err),
-                    });
+                else {
+                    try {
+                        rmSync(worktreePath, { recursive: true, force: true });
+                        removed.push(worktreePath);
+                    }
+                    catch (err) {
+                        errors.push({
+                            path: worktreePath,
+                            reason: err instanceof Error ? err.message : String(err),
+                        });
+                    }
                 }
             }
         }
     }
-    return { removed: removed.length, removedPaths: removed, skipped, errors, dryRun };
+    return {
+        removed: removed.length,
+        removedPaths: removed,
+        quarantined: quarantined.length,
+        quarantinedPaths: quarantined,
+        skipped,
+        errors,
+        dryRun,
+        ...(skippedFailClosed ? { skippedFailClosed: true } : {}),
+    };
 }
 // ---------------------------------------------------------------------------
 // Public API — temp dir pruning
@@ -234,7 +483,15 @@ export function pruneOrphanTempDirs(options = {}) {
         entries = readdirSync(tempDir, { withFileTypes: true });
     }
     catch {
-        return { removed: 0, removedPaths: [], skipped, errors, dryRun };
+        return {
+            removed: 0,
+            removedPaths: [],
+            quarantined: 0,
+            quarantinedPaths: [],
+            skipped,
+            errors,
+            dryRun,
+        };
     }
     for (const entry of entries) {
         if (!entry.isDirectory())
@@ -273,7 +530,15 @@ export function pruneOrphanTempDirs(options = {}) {
             }
         }
     }
-    return { removed: removed.length, removedPaths: removed, skipped, errors, dryRun };
+    return {
+        removed: removed.length,
+        removedPaths: removed,
+        quarantined: 0,
+        quarantinedPaths: [],
+        skipped,
+        errors,
+        dryRun,
+    };
 }
 // ---------------------------------------------------------------------------
 // Public API — audit (read-only, for cleo doctor)

package/dist/gc/cleanup.js.map

@@ -1 +1 @@
-{"version":3,"file":"cleanup.js","sourceRoot":"","sources":["../../src/gc/cleanup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAGH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACpE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,8EAA8E;AAC9E,uCAAuC;AACvC,EAAE;AACF,6CAA6C;AAC7C,0EAA0E;AAC1E,yCAAyC;AACzC,0CAA0C;AAC1C,EAAE;AACF,yEAAyE;AACzE,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAsB;IACnD,iCAAiC;IACjC,uBAAuB,EAAE,8BAA8B;IACvD,cAAc,EAAE,2CAA2C;IAC3D,YAAY,EAAE,yCAAyC;IACvD,uDAAuD;IACvD,gBAAgB;IAChB,gBAAgB;IAChB,YAAY;IACZ,sBAAsB;IACtB,sBAAsB;IACtB,sBAAsB;IACtB,sBAAsB;IACtB,wBAAwB;IACxB,UAAU;IACV,qBAAqB;IACrB,wBAAwB;IACxB,oBAAoB;IACpB,sBAAsB;IACtB,sBAAsB;IACtB,wBAAwB;IACxB,iBAAiB;IACjB,gBAAgB;IAChB,oBAAoB;IACpB,oBAAoB;IACpB,uBAAuB;IACvB,aAAa;IACb,mBAAmB;IACnB,YAAY;IACZ,sBAAsB;IACtB,YAAY;IACZ,wBAAwB;IACxB,wBAAwB;IACxB,mBAAmB;IACnB,mBAAmB;IACnB,oBAAoB;IACpB,mBAAmB;CACX,CAAC;AAEX;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,UAAU;AAgGrE,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E;;;;;GAKG;AACH,SAAS,SAAS,CAAC,EAAU;IAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;IAEpC,IAAI,IAAI,GAAG,CAAC;QAAE,OAAO,GAAG,IAAI,KAAK,KAAK,GAAG,EAAE,GAAG,CAAC;IAC/C,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,GAAG,KAAK,KAAK,OAAO,GAAG,EAAE,GAAG,CAAC;IACnD,IAAI,OAAO,GAAG,CAAC;QAAE,OAAO,GAAG,OAAO,GAAG,CAAC;IACtC,OAAO,GAAG,OAAO,GAAG,CAAC;AACvB,CAAC;AAED,8EAA8E;AAC9E,gCAAgC;AAChC,8EAA8E;AAE9E;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAoC;IACvE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;IAE9E,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,MAAM,GAA4C,EAAE,CAAC;IAC3D,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAC/B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACnE,CAAC;IAED,mDAAmD;IACnD,IAAI,WAAqB,CAAC;IAC1B,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;QACnD,WAAW,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,CAAC;SAAM,CAAC;QACN,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QACnE,CAAC;QACD,WAAW,GAAG,OAAO;aAClB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;aAClC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YACZ,IAAI,CAAC;gBACH,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YACnC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,IAAI,WAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,WAAW,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QAED,KAAK,MAAM,MAAM,IAAI,WAAW,EAAE,CAAC;YACjC,IAAI,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC9B,OAAO,EAAE,CAAC;gBACV,SAAS;YACX,CAAC;YAED,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YAC9C,IAAI,CAAC;gBACH,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;oBAC1C,OAAO,EAAE,CAAC;oBACV,SAAS;gBACX,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,CAAC;gBACV,SAAS;YACX,CAAC;YAED,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC7B,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC;oBACH,MAAM,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;oBACvD,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBAC7B,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,YAAY;wBAClB,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;qBACzD,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACrF,CAAC;AAED,8EAA8E;AAC9E,gCAAgC;AAChC,8EAA8E;AAE9E;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAAsC,EAAE;IAC1E,MAAM,EAAE,QAAQ,GAAG,uBAAuB,EAAE,OAAO,GAAG,MAAM,EAAE,EAAE,MAAM,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;IAE3F,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,MAAM,GAA4C,EAAE,CAAC;IAC3D,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEvB,IAAI,OAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAqB,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACnE,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;YAAE,SAAS;QAEnC,MAAM,aAAa,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QACzF,IAAI,CAAC,aAAa;YAAE,SAAS;QAE7B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAE3C,2DAA2D;QAC3D,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC9B,KAAK,GAAG,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;YACV,SAAS;QACX,CAAC;QAED,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;YACrB,OAAO,EAAE,CAAC;YACV,SAAS;QACX,CAAC;QAED,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC;gBACH,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACnD,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACzB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,QAAQ;oBACd,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;iBACzD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACrF,CAAC;AAED,8EAA8E;AAC9E,kDAAkD;AAClD,8EAA8E;AAE9E;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB,CAChC,WAAmB,uBAAuB,EAC1C,UAAkB,MAAM,EAAE;IAE1B,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEvB,IAAI,OAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAqB,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;YAAE,SAAS;QACnC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YAAE,SAAS;QAExE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC9B,MAAM,KAAK,GAAG,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC;YAC/B,IAAI,KAAK,IAAI,QAAQ,EAAE,CAAC;gBACtB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB,CACjC,aAAqB,EACrB,aAA0B,EAC1B,WAAoB;IAEpB,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEvB,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC;QAAE,OAAO,OAAO,CAAC;IAE/C,IAAI,WAAqB,CAAC;IAC1B,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;QACnD,WAAW,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,WAAW,GAAG,WAAW,CAAC,aAAa,CAAC;iBACrC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;iBAClC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;gBACZ,IAAI,CAAC;oBACH,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;gBACnC,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC,CAAC,CAAC;QACP,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;IAED,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,IAAI,WAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,WAAW,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QAED,KAAK,MAAM,MAAM,IAAI,WAAW,EAAE,CAAC;YACjC,IAAI,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,SAAS;YAExC,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YAC9C,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;gBAClC,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE;oBAAE,SAAS;gBAChC,MAAM,KAAK,GAAG,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC;gBAC/B,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC1E,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;YACT,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAC9D,CAAC"}
+{"version":3,"file":"cleanup.js","sourceRoot":"","sources":["../../src/gc/cleanup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/F,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,8EAA8E;AAC9E,uCAAuC;AACvC,EAAE;AACF,6CAA6C;AAC7C,0EAA0E;AAC1E,yCAAyC;AACzC,0CAA0C;AAC1C,EAAE;AACF,yEAAyE;AACzE,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAsB;IACnD,iCAAiC;IACjC,uBAAuB,EAAE,8BAA8B;IACvD,cAAc,EAAE,2CAA2C;IAC3D,YAAY,EAAE,yCAAyC;IACvD,uDAAuD;IACvD,gBAAgB;IAChB,gBAAgB;IAChB,YAAY;IACZ,sBAAsB;IACtB,sBAAsB;IACtB,sBAAsB;IACtB,sBAAsB;IACtB,wBAAwB;IACxB,UAAU;IACV,qBAAqB;IACrB,wBAAwB;IACxB,oBAAoB;IACpB,sBAAsB;IACtB,sBAAsB;IACtB,wBAAwB;IACxB,iBAAiB;IACjB,gBAAgB;IAChB,oBAAoB;IACpB,oBAAoB;IACpB,uBAAuB;IACvB,aAAa;IACb,mBAAmB;IACnB,YAAY;IACZ,sBAAsB;IACtB,YAAY;IACZ,wBAAwB;IACxB,wBAAwB;IACxB,mBAAmB;IACnB,mBAAmB;IACnB,oBAAoB;IACpB,mBAAmB;CACX,CAAC;AAEX;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,UAAU;AAyGrE,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E;;;;;GAKG;AACH,SAAS,SAAS,CAAC,EAAU;IAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;IAEpC,IAAI,IAAI,GAAG,CAAC;QAAE,OAAO,GAAG,IAAI,KAAK,KAAK,GAAG,EAAE,GAAG,CAAC;IAC/C,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,GAAG,KAAK,KAAK,OAAO,GAAG,EAAE,GAAG,CAAC;IACnD,IAAI,OAAO,GAAG,CAAC;QAAE,OAAO,GAAG,OAAO,GAAG,CAAC;IACtC,OAAO,GAAG,OAAO,GAAG,CAAC;AACvB,CAAC;AAED,8EAA8E;AAC9E,gCAAgC;AAChC,8EAA8E;AAE9E;;;;;;;;;;;;;GAaG;AACH,SAAS,eAAe,CAAC,YAAoB;IAC3C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,OAAO,CAAC,EAAE;YACtF,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YAC/B,OAAO,EAAE,MAAM;SAChB,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,kBAAkB,CAAC,YAAoB;IAC9C,+DAA+D;IAC/D,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,YAAY,CAC3B,KAAK,EACL,CAAC,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,mBAAmB,CAAC,EAChE;YACE,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YAC/B,OAAO,EAAE,MAAM;SAChB,CACF,CAAC,IAAI,EAAE,CAAC;QACT,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7D,0CAA0C;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,wDAAwD;IAC1D,CAAC;IAED,6EAA6E;IAC7E,IAAI,CAAC;QACH,gCAAgC;QAChC,MAAM,aAAa,GAAG,YAAY,CAChC,KAAK,EACL,CAAC,IAAI,EAAE,YAAY,EAAE,cAAc,EAAE,qBAAqB,EAAE,eAAe,CAAC,EAC5E;YACE,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YAC/B,OAAO,EAAE,MAAM;SAChB,CACF,CAAC,IAAI,EAAE,CAAC;QACT,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7D,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,2DAA2D;YAC3D,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE;oBAC7E,QAAQ,EAAE,OAAO;oBACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;oBAC/B,OAAO,EAAE,KAAK;iBACf,CAAC,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,oEAAoE;QACpE,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,UAAU,CAAC,CAAC;QACzF,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE;YACzC,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YAC/B,OAAO,EAAE,MAAM;SAChB,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC5C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAS,qBAAqB,CAC5B,YAAoB,EACpB,MAAc,EACd,aAAqB,EACrB,MAAc;IAEd,IAAI,CAAC;QACH,SAAS,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC1D,MAAM,WAAW,GAAG,GAAG,MAAM,IAAI,EAAE,SAAS,CAAC;QAC7C,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;QAErD,iEAAiE;QACjE,yEAAyE;QACzE,uEAAuE;QACvE,YAAY,CACV,KAAK,EACL;YACE,MAAM;YACN,WAAW;YACX,yDAAyD;YACzD,eAAe;YACf,sEAAsE;YACtE,IAAI;YACJ,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC;YACxB,MAAM;SACP,EACD;YACE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YAC/B,OAAO,EAAE,OAAO;SACjB,CACF,CAAC;QAEF,oBAAoB;QACpB,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;QACrD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC;YAC3B,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,MAAM,EAAE,YAAY;YACpB,YAAY;YACZ,MAAM;YACN,WAAW;YACX,MAAM;YACN,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,MAAM;SAChD,CAAC,CAAC;QACH,cAAc,CAAC,SAAS,EAAE,GAAG,KAAK,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QAE/D,OAAO,WAAW,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAoC;IACvE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;IAE9E,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,MAAM,MAAM,GAA4C,EAAE,CAAC;IAC3D,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAE9B,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAC/B,OAAO;YACL,OAAO,EAAE,CAAC;YACV,YAAY,EAAE,EAAE;YAChB,WAAW,EAAE,CAAC;YACd,gBAAgB,EAAE,EAAE;YACpB,OAAO;YACP,MAAM;YACN,MAAM;SACP,CAAC;IACJ,CAAC;IAED,mDAAmD;IACnD,IAAI,WAAqB,CAAC;IAC1B,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;QACnD,WAAW,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,CAAC;SAAM,CAAC;QACN,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,OAAO,EAAE,CAAC;gBACV,YAAY,EAAE,EAAE;gBAChB,WAAW,EAAE,CAAC;gBACd,gBAAgB,EAAE,EAAE;gBACpB,OAAO,EAAE,CAAC;gBACV,MAAM;gBACN,MAAM;aACP,CAAC;QACJ,CAAC;QACD,WAAW,GAAG,OAAO;aAClB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;aAClC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YACZ,IAAI,CAAC;gBACH,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YACnC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,IAAI,WAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,WAAW,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QAED,yEAAyE;QACzE,wEAAwE;QACxE,uEAAuE;QACvE,MAAM,iBAAiB,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YACjD,IAAI,CAAC;gBACH,OAAO,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YACrD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,aAAa,CAAC,IAAI,KAAK,CAAC,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7D,sEAAsE;YACtE,yEAAyE;YACzE,IAAI,CAAC;gBACH,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;gBAC3E,SAAS,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;gBAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC;oBAC3B,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBAC5B,MAAM,EAAE,wBAAwB;oBAChC,UAAU;oBACV,qBAAqB,EAAE,iBAAiB,CAAC,MAAM;oBAC/C,MAAM,EACJ,mGAAmG;oBACrG,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,MAAM;iBAChD,CAAC,CAAC;gBACH,cAAc,CAAC,SAAS,EAAE,GAAG,KAAK,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YACjE,CAAC;YAAC,MAAM,CAAC;gBACP,uBAAuB;YACzB,CAAC;YACD,OAAO,IAAI,iBAAiB,CAAC,MAAM,CAAC;YACpC,iBAAiB,GAAG,IAAI,CAAC;YACzB,SAAS;QACX,CAAC;QAED,KAAK,MAAM,MAAM,IAAI,WAAW,EAAE,CAAC;YACjC,IAAI,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC9B,OAAO,EAAE,CAAC;gBACV,SAAS;YACX,CAAC;YAED,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YAC9C,IAAI,CAAC;gBACH,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;oBAC1C,OAAO,EAAE,CAAC;oBACV,SAAS;gBACX,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,CAAC;gBACV,SAAS;YACX,CAAC;YAED,oEAAoE;YACpE,0EAA0E;YAC1E,MAAM,KAAK,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;YAC5C,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;YAClE,MAAM,gBAAgB,GAAG,KAAK,IAAI,QAAQ,CAAC;YAC3C,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;YAEtD,IAAI,gBAAgB,EAAE,CAAC;gBACrB,IAAI,MAAM,EAAE,CAAC;oBACX,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBACjC,CAAC;qBAAM,CAAC;oBACN,MAAM,cAAc,GAAG,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;oBAC5E,MAAM,WAAW,GAAG,qBAAqB,CACvC,YAAY,EACZ,MAAM,EACN,cAAc,EACd,gBAAgB,CACjB,CAAC;oBACF,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;wBACzB,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;oBACjC,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,IAAI,CAAC;4BACV,IAAI,EAAE,YAAY;4BAClB,MAAM,EAAE,qDAAqD;yBAC9D,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,MAAM,EAAE,CAAC;oBACX,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBAC7B,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC;wBACH,MAAM,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;wBACvD,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;oBAC7B,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,MAAM,CAAC,IAAI,CAAC;4BACV,IAAI,EAAE,YAAY;4BAClB,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;yBACzD,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,MAAM;QACvB,YAAY,EAAE,OAAO;QACrB,WAAW,EAAE,WAAW,CAAC,MAAM;QAC/B,gBAAgB,EAAE,WAAW;QAC7B,OAAO;QACP,MAAM;QACN,MAAM;QACN,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,gCAAgC;AAChC,8EAA8E;AAE9E;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAAsC,EAAE;IAC1E,MAAM,EAAE,QAAQ,GAAG,uBAAuB,EAAE,OAAO,GAAG,MAAM,EAAE,EAAE,MAAM,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;IAE3F,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,MAAM,GAA4C,EAAE,CAAC;IAC3D,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEvB,IAAI,OAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAqB,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,OAAO,EAAE,CAAC;YACV,YAAY,EAAE,EAAE;YAChB,WAAW,EAAE,CAAC;YACd,gBAAgB,EAAE,EAAE;YACpB,OAAO;YACP,MAAM;YACN,MAAM;SACP,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;YAAE,SAAS;QAEnC,MAAM,aAAa,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QACzF,IAAI,CAAC,aAAa;YAAE,SAAS;QAE7B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAE3C,2DAA2D;QAC3D,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC9B,KAAK,GAAG,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;YACV,SAAS;QACX,CAAC;QAED,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;YACrB,OAAO,EAAE,CAAC;YACV,SAAS;QACX,CAAC;QAED,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC;gBACH,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACnD,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACzB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,QAAQ;oBACd,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;iBACzD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,MAAM;QACvB,YAAY,EAAE,OAAO;QACrB,WAAW,EAAE,CAAC;QACd,gBAAgB,EAAE,EAAE;QACpB,OAAO;QACP,MAAM;QACN,MAAM;KACP,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,kDAAkD;AAClD,8EAA8E;AAE9E;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB,CAChC,WAAmB,uBAAuB,EAC1C,UAAkB,MAAM,EAAE;IAE1B,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEvB,IAAI,OAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAqB,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;YAAE,SAAS;QACnC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YAAE,SAAS;QAExE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC9B,MAAM,KAAK,GAAG,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC;YAC/B,IAAI,KAAK,IAAI,QAAQ,EAAE,CAAC;gBACtB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB,CACjC,aAAqB,EACrB,aAA0B,EAC1B,WAAoB;IAEpB,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEvB,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC;QAAE,OAAO,OAAO,CAAC;IAE/C,IAAI,WAAqB,CAAC;IAC1B,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;QACnD,WAAW,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,WAAW,GAAG,WAAW,CAAC,aAAa,CAAC;iBACrC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;iBAClC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;gBACZ,IAAI,CAAC;oBACH,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;gBACnC,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC,CAAC,CAAC;QACP,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;IAED,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,IAAI,WAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,WAAW,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QAED,KAAK,MAAM,MAAM,IAAI,WAAW,EAAE,CAAC;YACjC,IAAI,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,SAAS;YAExC,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YAC9C,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;gBAClC,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE;oBAAE,SAAS;gBAChC,MAAM,KAAK,GAAG,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC;gBAC/B,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC1E,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;YACT,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAC9D,CAAC"}

package/dist/index.d.ts

@@ -25,6 +25,7 @@ export * as adrs from './adrs/index.js';
 export * as agents from './agents/index.js';
 export * as caamp from './caamp/index.js';
 export * as changesets from './changesets/index.js';
+export * as checkGates from './check/index.js';
 export * as code from './code/index.js';
 export * as codebaseMap from './codebase-map/index.js';
 export * as compliance from './compliance/index.js';
@@ -101,7 +102,13 @@ export { runDoctorAdopt } from './skills/doctor-adopt.js';
 export { AgentsSkillsRealDirError, type DoctorBridgeOptions, type DoctorBridgeResult, runDoctorBridge, } from './skills/doctor-bridge.js';
 export { createDataAccessor, getAccessor, getTaskAccessor, } from './store/data-accessor.js';
 export { type CleoDbSnapshotHandle, type CleoDbSnapshotOptions, openCleoDbSnapshot, } from './store/open-cleo-db.js';
+export type { AgentServiceGrantRow, NewAgentServiceGrantRow, NewServiceConfigRow, NewServiceConnectionRow, ServiceConfigRow, ServiceConnectionRow, ServiceConnectionStatus, } from './store/schema/cleo-global/services.js';
 export type { NewSkillRow, SkillRow, SkillSourceType } from './store/schema/skills-schema.js';
+export { type ConnectServiceParams, connectService, type DecryptedConnection, type DeleteConnectionResult, deleteConnectionCascade, getConnection, grantAgentAccess, listConnections, loadDecryptedTokenBlob, openServiceVaultAtPath, type ResolveServiceParams, resolveSealedConnection, revokeConnection, type ServiceConnectionView, type ServiceTokenBlob, type ServiceVaultDeps, updateConnectionTokens, } from './store/service-connections-accessor.js';
+export { matchServiceHost, matchServiceUrl, type ServiceHostMatch, } from './store/service-host-matcher.js';
+export { type InjectedRequest, type InjectionDiagnostic, type InjectionResult, type InjectServiceCredentialsParams, injectionRulesForStrategy, injectServiceCredentials, type OutboundRequest, } from './store/service-injection.js';
+export { type BuildAuthUrlOptions, type BuildAuthUrlResult, buildAuthUrl, type ExchangeCodeOptions, type ExchangeCodeResult, exchangeCode, type FetchLike, type RefreshAccessTokenOptions, type RefreshClientCredentials, type RefreshVariantSecrets, refreshAccessToken, resolveProviderDef, type SelfHealOptions, type SelfHealResult, type ServiceOAuthDeps, selfHealConnection, } from './store/service-oauth.js';
+export { evaluateServiceAccess, parseSessionPolicy, type ServiceGrant, type SessionPolicy, type SessionRateLimit, type TrustDecision, type TrustDenyReason, type TrustEvalContext, } from './store/service-trust-gate.js';
 export { getSkillRow, listSkillsBySource, openSkillsDb, upsertSkillRow, } from './store/skills-db.js';
 export { applyPerfPragmas, type PerfPragmaOptions, } from './store/sqlite-pragmas.js';
 export { appendContractViolation, CONTRACT_VIOLATIONS_FILE, queryAudit } from './audit.js';
@@ -183,6 +190,8 @@ export { getPipelineStageOrder, isPipelineTransitionForward, isTerminalPipelineS
 export { type AppendSeverityAttestationOptions, appendSignedSeverityAttestation, canonicalAttestationJson, LEGACY_BUG_SEVERITY_AUDIT_FILE, loadOwnerPubkeys, SEVERITY_ATTESTATION_AUDIT_FILE, type SeverityAttestation, } from './tasks/severity-attestation.js';
 export { showTask } from './tasks/show.js';
 export { updateTask } from './tasks/update.js';
+export { DefaultVariableResolver, defaultResolver as defaultVariableResolver, } from './agents/variable-substitution.js';
+export { ConfigDomainHandler, type ConfigGetResult, type ConfigListResult, type ConfigUnsetResult, type ConfigValidateResult, configDomainHandler, } from './dispatch/config-domain-handler.js';
 export { defineEnsuresSchema, type EnsuresSchemaSpec, getEnsuresSchema, listEnsuresSchemaNames, } from './dispatch/contracts/ensures-schema.js';
 export { getInputContract, INPUT_CONTRACTS } from './dispatch/contracts/input-contracts.js';
 export { getOutputContract, OUTPUT_CONTRACTS } from './dispatch/contracts/output-contracts.js';
@@ -194,6 +203,7 @@ export { attachSuggestedNext, buildTasksAddBatchSuggestedNext, buildTasksAddSugg
 export { validateOperationInput } from './dispatch/validation.js';
 export type { ClassifyOptions, ClassifyResult, GrillTrigger, ReadinessResult, ReadinessSignals, ReadinessVerdict, } from './orchestration/index.js';
 export { classifyReadiness, classifyTask, } from './orchestration/index.js';
+export { type GenerateOpenApiOptions, generateOpenApi, type OpenApiDocument, type OpenApiInfo, type OpenApiMediaType, type OpenApiOperation, type OpenApiPathItem, type OpenApiRequestBody, type OpenApiResponse, } from './runtime/openapi/index.js';
 export { mergeConfigJson, WIZARD_SECTION_IDS } from './setup/config-json-merge.js';
 export { CLEO_ENC_MAGIC, detectEncryption, ENC_MIN_LENGTH, ENC_VERSION_OFFSET, ENC_VERSION_SUPPORTED, extractManifestFromTar, fmtBytes, verifyManifestHash, } from './store/backup-inspect.js';
 export type { ParsedResolution, RestoreConflictFilename, } from './store/restore-conflict-parser.js';