@clipboard-health/groundcrew 4.0.3 → 4.1.0

package/README.md

@@ -143,7 +143,7 @@ Resolution order: `GROUNDCREW_CONFIG` → cosmiconfig project-walk from cwd (any
 | `models.definitions.<name>.cmd`         | —                   | Shell command launched for the model. Runs in the worktree through the resolved `local.runner`. `{{worktree}}` is replaced before launch; `{{sandbox}}` expands to the sbx sandbox name under the sdx runner and an empty string otherwise.                                                                                                                             |
 | `models.definitions.<name>.color`       | —                   | Color for the workspace status pill (cmux only; tmux silently drops it).                                                                                                                                                                                                                                                                                                |
 | `models.definitions.<name>.usage`       | optional            | If set, codexbar usage is fetched for this model and gated by `sessionLimitPercentage`. Falls back to default when unset, with gating enabled for known models. When `usage.codexbar.source` is omitted, groundcrew uses `oauth` for Codex/Claude on macOS, `auto` for other macOS providers, and `cli` elsewhere. Set to `{ disabled: true }` to disable usage gating. |
-| `models.definitions.<name>.sandbox`     | optional            | Docker Sandboxes binding for the model. Required at launch when `local.runner` resolves to `sdx`. Fields: `agent` (required sbx agent name), `template`, `kits`, `setupCommand` (override for the inside-sandbox setup script).                                                                                                                                         |
+| `models.definitions.<name>.sandbox`     | optional            | Docker Sandboxes binding for the model. Required at launch when `local.runner` resolves to `sdx`. Fields: `agent` (required sbx agent name) and `setupCommand` (override for the inside-sandbox setup script). Groundcrew assumes the `groundcrew-<agent>` sandbox already exists.                                                                                      |
 | `models.definitions.<name>.disabled`    | optional            | When set to exactly `true`, drops the named shipped default (`claude` or `codex`). Doctor skips probing it; `agent-<name>` labels fall back to `models.default` with a warning.                                                                                                                                                                                         |
 | `prompts.initial`                       | unattended template | First message sent to the agent. Placeholders: `{{ticket}}`, `{{worktree}}`, `{{title}}`, `{{description}}`. Override this from `crew.config.ts` for team-specific statuses, tools, plugins, or review loops.                                                                                                                                                           |
 | `workspaceKind`                         | `"auto"`            | Terminal session manager. `"auto"` picks `cmux` when on PATH, else `tmux`. Set to `"cmux"` or `"tmux"` to fail loudly when the chosen backend is missing.                                                                                                                                                                                                               |
@@ -188,9 +188,17 @@ Watch `${XDG_CACHE_HOME:-$HOME/.cache}/clearance/clearance.log` for `DENY` lines
 <details>
 <summary>Docker Sandboxes (sdx) setup</summary>
 
-Each model that runs under `sdx` needs a `sandbox: { agent: "<sbx-agent>" }` block in `crew.config.ts`. Groundcrew names sandboxes `groundcrew-<agent>` (e.g. `groundcrew-claude`) and reuses one sandbox per agent across repos and tickets. First-time agent auth happens inside the sandbox the first time it launches. To bootstrap manually instead, run `sbx create --name groundcrew-<agent> <agent> <projectDir>` once.
+Each model that runs under `sdx` needs a `sandbox: { agent: "<sbx-agent>" }` block in `crew.config.ts`. Groundcrew addresses the sandbox as `groundcrew-<agent>` (e.g. `groundcrew-claude`) and reuses one existing sandbox per agent across repos and tickets.
 
-Groundcrew auto-creates sandboxes when missing but never deletes them — they persist across tickets and `crew cleanup`. Auth state lives inside the sandbox, so deleting it forces a re-login. Manage with `sbx ls` / `sbx rm`.
+First-time setup is manual:
+
+```bash
+sbx create --name groundcrew-claude claude <projectDir>
+sbx exec -it groundcrew-claude claude auth login
+sbx exec -it groundcrew-claude gh auth login
+```
+
+Replace `claude` with the sbx agent for the model and `<projectDir>` with `workspace.projectDir` from `crew.config.ts`. Manage lifecycle and auth with `sbx` directly (`sbx ls`, `sbx exec`, `sbx rm`). Groundcrew does not create, authenticate, regenerate, list, or remove sandboxes.
 
 </details>
 
@@ -238,7 +246,7 @@ In Progress (state.type=started) — Multi-event extractor: year inference can p
 
 ### `crew start <TICKET>`
 
-Provisions and launches one ticket immediately, bypassing orchestrator eligibility. Use it to dispatch a specific ticket on demand — including unlabeled tickets that `crew run` ignores. (Replaces the deprecated `crew run --ticket <TICKET>`.)
+Launches one ticket immediately, bypassing orchestrator eligibility. Use it to dispatch a specific ticket on demand — including unlabeled tickets that `crew run` ignores. (Replaces the deprecated `crew run --ticket <TICKET>`.)
 
 ```bash
 crew start HRD-442

package/crew.config.example.ts

@@ -73,24 +73,11 @@ export default {
   // // macOS when you need an agent to use Docker safely.
   // local: { runner: "auto" },
   //
-  // // Additional auth recipes for `crew sandbox auth <model> <tool>`. The
-  // // shipped recipes (claude/codex/cursor agents + github tool) are merged
-  // // with whatever you declare here; your recipe wins on key collision.
-  // // Describe each tool's in-sandbox login + status commands and a regex
-  // // that matches its logged-in output. Omit `kind` for cross-cutting
-  // // tools that should appear in every sandbox's picker; set
-  // // `kind: "agent"` to scope a recipe to a single sbx agent.
-  // sandbox: {
-  //   authRecipes: {
-  //     gcloud: {
-  //       displayName: "gcloud",
-  //       binary: "gcloud",
-  //       loginArgs: ["auth", "login", "--no-launch-browser"],
-  //       statusArgs: ["auth", "list", "--filter=status:ACTIVE", "--format=value(account)"],
-  //       authenticatedPattern: /@/,
-  //     },
-  //   },
-  // },
+  // // Groundcrew does not create or authenticate sdx sandboxes. For an sdx
+  // // model, create the matching sandbox yourself before first launch:
+  // //   sbx create --name groundcrew-claude claude ~/dev/groundcrew
+  // //   sbx exec -it groundcrew-claude claude auth login
+  // //   sbx exec -it groundcrew-claude gh auth login
   //
   // prompts: {
   //   // Keep personal workflow instructions next to this config, for example

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAwQA,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsCvD"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAuQA,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA4CvD"}

package/dist/cli.js

@@ -5,7 +5,6 @@ import { initConfigCli } from "./commands/init.js";
 import { interruptWorkspaceCli } from "./commands/interruptWorkspace.js";
 import { orchestrate } from "./commands/orchestrator.js";
 import { resumeWorkspaceCli } from "./commands/resumeWorkspace.js";
-import { sandboxCli } from "./commands/sandbox/index.js";
 import { setupReposCli } from "./commands/setupRepos.js";
 import { setupWorkspaceCli } from "./commands/setupWorkspace.js";
 import { statusCli } from "./commands/status.js";
@@ -14,6 +13,11 @@ import { computeUpgradeNudge, defaultUpgradeCheckCachePath, fetchLatestVersion,
 import { errorMessage, parseDryRunPositionals, readEnvironmentVariable, readTicketArgument, writeError, writeOutput, } from "./lib/util.js";
 const NUDGE_TTL_MS = 6 * 60 * 60 * 1000;
 const NUDGE_FETCH_TIMEOUT_MS = 1000;
+const REMOVED_SANDBOX_COMMAND_MESSAGE = [
+    "`crew sandbox` is no longer supported.",
+    "Groundcrew now launches agents inside existing sbx sandboxes but does not list, create, regenerate, authenticate, or remove them.",
+    "Use the manual `sbx` workflow in README.md#docker-sandboxes-sdx-setup, then keep `models.definitions.<model>.sandbox.agent` in crew.config.ts so launches can address the existing sandbox.",
+].join("\n");
 const requireFromCli = createRequire(import.meta.url);
 /**
  * Prints a deprecation warning to stderr naming the canonical command and that
@@ -132,7 +136,7 @@ const SUBCOMMANDS = {
         invoke: runCli,
     },
     start: {
-        summary: "Provision and launch one ticket immediately, bypassing eligibility",
+        summary: "Launch one ticket immediately, bypassing eligibility",
         usage: "<ticket> [--dry-run]",
         invoke: startCli,
     },
@@ -170,11 +174,6 @@ const SUBCOMMANDS = {
         usage: "<ticket>",
         invoke: resumeWorkspaceCli,
     },
-    sandbox: {
-        summary: "Manage Docker Sandboxes (sbx) for configured models",
-        usage: "<list|ensure|regenerate|auth|rm> [...args]",
-        invoke: sandboxCli,
-    },
     setup: {
         summary: "Project-level setup commands (currently: repos)",
         usage: "repos [--dry-run] [<repo>...]",
@@ -224,6 +223,11 @@ export async function run(argv) {
         writeOutput(packageVersion());
         return;
     }
+    if (subcommand === "sandbox") {
+        writeError(REMOVED_SANDBOX_COMMAND_MESSAGE);
+        process.exitCode = 1;
+        return;
+    }
     const command = SUBCOMMANDS[subcommand];
     if (!command) {
         writeError(`Unknown command: ${subcommand}\n`);

package/dist/commands/resumeWorkspace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resumeWorkspace.d.ts","sourceRoot":"","sources":["../../src/commands/resumeWorkspace.ts"],"names":[],"mappings":"AACA,OAAO,EAAc,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAcnE,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;CAChB;AA6HD,wBAAsB,eAAe,CACnC,MAAM,EAAE,cAAc,EACtB,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,IAAI,CAAC,CA6Df;AAED,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAGtE"}
+{"version":3,"file":"resumeWorkspace.d.ts","sourceRoot":"","sources":["../../src/commands/resumeWorkspace.ts"],"names":[],"mappings":"AACA,OAAO,EAAc,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAcnE,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;CAChB;AA6HD,wBAAsB,eAAe,CACnC,MAAM,EAAE,cAAc,EACtB,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,IAAI,CAAC,CA4Df;AAED,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAGtE"}

package/dist/commands/resumeWorkspace.js

@@ -1,6 +1,6 @@
 import { fetchResolvedIssue } from "../lib/boardSource.js";
 import { loadConfig } from "../lib/config.js";
-import { ensureAgentSandbox, openAgentWorkspace, prepareAgentLaunch } from "../lib/agentLaunch.js";
+import { openAgentWorkspace, prepareAgentLaunch } from "../lib/agentLaunch.js";
 import { buildLaunchCommand } from "../lib/launchCommand.js";
 import { readRunState, recordRunState } from "../lib/runState.js";
 import { removeStagedPrompt, stageBuildSecrets, stagePromptText, stageWorkspaceLaunchCommand, } from "../lib/stagedLaunch.js";
@@ -117,7 +117,6 @@ export async function resumeWorkspace(config, options) {
         text: renderResumePrompt(context),
     });
     const secretsFile = stageBuildSecrets(stagedPrompt.directory);
-    await ensureAgentSandbox({ config, definition, sandboxName });
     const launchCommand = buildLaunchCommand({
         definition,
         promptFile: stagedPrompt.file,

package/dist/commands/setupWorkspace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"setupWorkspace.d.ts","sourceRoot":"","sources":["../../src/commands/setupWorkspace.ts"],"names":[],"mappings":"AAEA,OAAO,EAAc,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAenE,UAAU,aAAa;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB;AAWD,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,wEAAwE;IACxE,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAqBD,wBAAsB,cAAc,CAClC,MAAM,EAAE,cAAc,EACtB,OAAO,EAAE,qBAAqB,EAC9B,UAAU,GAAE,wBAA6B,GACxC,OAAO,CAAC,IAAI,CAAC,CA6Gf;AAwHD,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GACjC,OAAO,CAAC,IAAI,CAAC,CAoBf"}
+{"version":3,"file":"setupWorkspace.d.ts","sourceRoot":"","sources":["../../src/commands/setupWorkspace.ts"],"names":[],"mappings":"AAEA,OAAO,EAAc,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAenE,UAAU,aAAa;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB;AAWD,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,wEAAwE;IACxE,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAqBD,wBAAsB,cAAc,CAClC,MAAM,EAAE,cAAc,EACtB,OAAO,EAAE,qBAAqB,EAC9B,UAAU,GAAE,wBAA6B,GACxC,OAAO,CAAC,IAAI,CAAC,CAsGf;AAwHD,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GACjC,OAAO,CAAC,IAAI,CAAC,CAoBf"}

package/dist/commands/setupWorkspace.js

@@ -1,7 +1,7 @@
 import { rmSync } from "node:fs";
 import { fetchResolvedIssue } from "../lib/boardSource.js";
 import { loadConfig } from "../lib/config.js";
-import { ensureAgentSandbox, openAgentWorkspace, prepareAgentLaunch } from "../lib/agentLaunch.js";
+import { openAgentWorkspace, prepareAgentLaunch } from "../lib/agentLaunch.js";
 import { buildLaunchCommand } from "../lib/launchCommand.js";
 import { createLinearIssueStatusUpdater } from "../lib/linearIssueStatus.js";
 import { recordRunState } from "../lib/runState.js";
@@ -80,12 +80,6 @@ export async function setupWorkspace(config, options, runOptions = {}) {
         const stagedPrompt = stagePrompt({ config, ticket, ticketDetails, worktreeName });
         promptDir = stagedPrompt.directory;
         const secretsFile = stageBuildSecrets(promptDir);
-        await ensureAgentSandbox({
-            config,
-            definition,
-            sandboxName,
-            ...(signal === undefined ? {} : { signal }),
-        });
         const launchCommand = buildLaunchCommand({
             definition,
             promptFile: stagedPrompt.file,

package/dist/lib/agentLaunch.d.ts

@@ -10,12 +10,6 @@ export declare function prepareAgentLaunch(input: {
     purpose: "runs" | "resumes";
     signal?: AbortSignal;
 }): Promise<PreparedAgentLaunch>;
-export declare function ensureAgentSandbox(input: {
-    config: ResolvedConfig;
-    definition: ModelDefinition;
-    sandboxName: string | undefined;
-    signal?: AbortSignal;
-}): Promise<void>;
 export declare function openAgentWorkspace(input: {
     config: ResolvedConfig;
     name: string;

package/dist/lib/agentLaunch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agentLaunch.d.ts","sourceRoot":"","sources":["../../src/lib/agentLaunch.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAOhF,UAAU,mBAAmB;IAC3B,MAAM,EAAE,WAAW,CAAC;IACpB,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;CACjC;AAED,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,MAAM,EAAE,cAAc,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,eAAe,CAAC;IAC5B,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA6B/B;AAED,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,MAAM,EAAE,cAAc,CAAC;IACvB,UAAU,EAAE,eAAe,CAAC;IAC5B,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GAAG,OAAO,CAAC,IAAI,CAAC,CAYhB;AAED,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,MAAM,EAAE,cAAc,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GAAG,OAAO,CAAC,IAAI,CAAC,CAUhB"}
+{"version":3,"file":"agentLaunch.d.ts","sourceRoot":"","sources":["../../src/lib/agentLaunch.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAOhF,UAAU,mBAAmB;IAC3B,MAAM,EAAE,WAAW,CAAC;IACpB,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;CACjC;AAED,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,MAAM,EAAE,cAAc,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,eAAe,CAAC;IAC5B,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA6B/B;AAED,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,MAAM,EAAE,cAAc,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GAAG,OAAO,CAAC,IAAI,CAAC,CAUhB"}

package/dist/lib/agentLaunch.js

@@ -1,8 +1,7 @@
-import { resolve } from "node:path";
 import { ensureClearance } from "@clipboard-health/clearance";
-import { ensureSandbox, sandboxNameFor } from "./dockerSandbox.js";
 import { detectHostCapabilities } from "./host.js";
 import { assertLocalRunnerRequirements, resolveLocalRunner } from "./localRunner.js";
+import { sandboxNameFor } from "./sandboxName.js";
 import { log, sleep } from "./util.js";
 import { workspaces } from "./workspaces.js";
 export async function prepareAgentLaunch(input) {
@@ -31,16 +30,6 @@ export async function prepareAgentLaunch(input) {
         : undefined;
     return { runner, sandboxName };
 }
-export async function ensureAgentSandbox(input) {
-    if (input.sandboxName !== undefined && input.definition.sandbox !== undefined) {
-        await ensureSandbox({
-            sandboxName: input.sandboxName,
-            sandbox: input.definition.sandbox,
-            mountPath: resolve(input.config.workspace.projectDir),
-            gitDefaults: input.config.sandbox.gitDefaults,
-        }, input.signal);
-    }
-}
 export async function openAgentWorkspace(input) {
     const spec = {
         name: input.name,

package/dist/lib/cmuxAdapter.d.ts

@@ -0,0 +1,8 @@
+/**
+ * cmux Workspace backend. cmux is the macOS TUI; workspaces surface in its
+ * own app, so `accessHint` has nothing concise to emit. cmux can paint a
+ * per-workspace status pill, which `open` applies best-effort.
+ */
+import { type Adapter } from "./workspaceAdapter.ts";
+export declare const cmuxAdapter: Adapter;
+//# sourceMappingURL=cmuxAdapter.d.ts.map

package/dist/lib/cmuxAdapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cmuxAdapter.d.ts","sourceRoot":"","sources":["../../src/lib/cmuxAdapter.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,KAAK,OAAO,EAIb,MAAM,uBAAuB,CAAC;AAG/B,eAAO,MAAM,WAAW,EAAE,OA6EzB,CAAC"}

package/dist/lib/cmuxAdapter.js

@@ -0,0 +1,163 @@
+/**
+ * cmux Workspace backend. cmux is the macOS TUI; workspaces surface in its
+ * own app, so `accessHint` has nothing concise to emit. cmux can paint a
+ * per-workspace status pill, which `open` applies best-effort.
+ */
+import { isSignalAborted, runWorkspaceCommand, } from "./workspaceAdapter.js";
+import { errorMessage, log } from "./util.js";
+export const cmuxAdapter = {
+    async open(spec, signal) {
+        const output = await runWorkspaceCommand("cmux", [
+            "--json",
+            "new-workspace",
+            "--name",
+            spec.name,
+            "--cwd",
+            spec.cwd,
+            "--command",
+            spec.command,
+        ], signal);
+        const workspaceId = extractCmuxOpenId(output);
+        if (workspaceId === undefined) {
+            log(`cmux new-workspace returned unrecognized output for ${spec.name}; if a workspace was created, run \`cmux close-workspace\` manually.`);
+            throw new Error(`Unexpected cmux output: ${output}`);
+        }
+        if (spec.status !== undefined) {
+            try {
+                await applyCmuxStatus(workspaceId, spec.status, signal);
+            }
+            catch (error) {
+                // Status pills are best-effort. cmux v2+ dropped `set-status` entirely,
+                // so swallow that specific gap silently; surface anything else so a real
+                // regression doesn't hide behind the same swallow.
+                if (!isCmuxSetStatusUnsupported(error)) {
+                    log(`cmux set-status failed for ${spec.name} (continuing): ${errorMessage(error)}`);
+                }
+            }
+        }
+    },
+    async list(signal) {
+        const raw = await listCmuxRaw(signal);
+        return raw?.map((ws) => ({ name: ws.title }));
+    },
+    async close(name, signal) {
+        const raw = await listCmuxRaw(signal);
+        if (raw === undefined) {
+            // cmux v2 `workspace.close` rejects titles, so forwarding `name`
+            // would always fail. The list failure has already been logged by
+            // `listCmuxRaw`; bail rather than guarantee a downstream error.
+            log(`cmux close-workspace skipped for ${name}: list-workspaces failed, no usable id`);
+            return { kind: "unavailable" };
+        }
+        const match = raw.find((ws) => ws.title === name);
+        if (match === undefined) {
+            return { kind: "missing" };
+        }
+        try {
+            await closeCmuxWorkspace(match.id, signal);
+            return { kind: "closed" };
+        }
+        catch (error) {
+            if (isSignalAborted(signal)) {
+                throw error;
+            }
+            const remaining = await listCmuxRaw(signal);
+            if (remaining === undefined) {
+                return { kind: "unavailable", error };
+            }
+            const isStillPresent = remaining.some((ws) => ws.title === name);
+            if (!isStillPresent) {
+                return { kind: "closed" };
+            }
+            throw error;
+        }
+    },
+    accessHint(_name) {
+        // cmux is a TUI; users surface workspaces by launching the cmux app,
+        // not a shell command. No useful hint to emit.
+        // oxlint-disable-next-line unicorn/no-useless-undefined -- explicit signal that the backend has no hint
+        return undefined;
+    },
+};
+function parseCmuxList(output) {
+    // oxlint-disable-next-line typescript/no-unsafe-type-assertion -- cmux --json list-workspaces always emits this shape
+    const parsed = JSON.parse(output);
+    const items = [];
+    /* v8 ignore next @preserve -- cmux always emits a workspaces field; default keeps the loop safe */
+    for (const ws of parsed.workspaces ?? []) {
+        if (typeof ws.title !== "string" || ws.title.length === 0) {
+            continue;
+        }
+        const id = pickCmuxId(ws);
+        if (id === undefined) {
+            log(`cmux list-workspaces returned workspace "${ws.title}" without a usable id or ref; skipping`);
+            continue;
+        }
+        items.push({ title: ws.title, id });
+    }
+    return items;
+}
+/**
+ * The stable workspace handle cmux v2 expects in JSON-RPC params. Prefer
+ * the UUID; fall back to the legacy `workspace:N` short ref when older
+ * cmux builds don't surface it. Returns `undefined` when neither is
+ * available — cmux v2 `workspace.close` rejects titles, so we must never
+ * forward `title` as a workspace handle.
+ */
+function pickCmuxId(ws) {
+    if (typeof ws.id === "string" && ws.id.length > 0) {
+        return ws.id;
+    }
+    if (typeof ws.ref === "string" && ws.ref.length > 0) {
+        return ws.ref;
+    }
+    return undefined;
+}
+async function listCmuxRaw(signal) {
+    try {
+        return parseCmuxList(await runWorkspaceCommand("cmux", ["--json", "list-workspaces"], signal));
+    }
+    catch (error) {
+        if (isSignalAborted(signal)) {
+            throw error;
+        }
+        log(`cmux list-workspaces failed: ${errorMessage(error)}`);
+        return undefined;
+    }
+}
+function extractCmuxOpenId(output) {
+    try {
+        // oxlint-disable-next-line typescript/no-unsafe-type-assertion -- cmux --json prints a workspace_id/ref object
+        const parsed = JSON.parse(output);
+        const uuid = parsed.workspace_id ?? parsed.id ?? "";
+        if (uuid.length > 0) {
+            return uuid;
+        }
+        const ref = parsed.workspace_ref ?? parsed.ref ?? "";
+        if (ref.length > 0) {
+            return ref;
+        }
+    }
+    catch {
+        /* not JSON; fall through to regex */
+    }
+    const match = /workspace:\d+/.exec(output);
+    return match ? match[0] : undefined;
+}
+async function applyCmuxStatus(workspaceId, status, signal) {
+    const arguments_ = ["set-status", "model", status.text];
+    if (status.icon !== undefined) {
+        arguments_.push("--icon", status.icon);
+    }
+    if (status.color !== undefined) {
+        arguments_.push("--color", status.color);
+    }
+    arguments_.push("--workspace", workspaceId);
+    await runWorkspaceCommand("cmux", arguments_, signal);
+}
+async function closeCmuxWorkspace(workspaceId, signal) {
+    await runWorkspaceCommand("cmux", ["close-workspace", "--workspace", workspaceId], signal);
+}
+function isCmuxSetStatusUnsupported(error) {
+    return errorMessage(error).includes('unknown command "set-status"');
+}

package/dist/lib/config.d.ts

@@ -41,16 +41,12 @@ export type LocalRunnerSetting = LocalRunner | "auto";
 export declare const LOCAL_RUNNER_SETTINGS: readonly LocalRunnerSetting[];
 /**
  * Per-model Docker Sandboxes (sdx) binding. Required at launch when
- * `local.runner` resolves to `sdx` so groundcrew knows which sbx agent
- * to address and how to seed the sandbox.
+ * `local.runner` resolves to `sdx` so groundcrew knows which existing
+ * sbx sandbox to address.
  */
 export interface SandboxDefinition {
     /** sbx agent name (e.g. "claude", "codex"). */
     agent: string;
-    /** Optional `sbx run --template` value. */
-    template?: string;
-    /** Optional `sbx run --kit` values (each passed as a separate flag). */
-    kits?: string[];
     /**
      * Setup command run **inside** the sandbox before the agent exec.
      * Defaults to the shared `.groundcrew/setup.sh --deps-only` convention
@@ -58,42 +54,6 @@ export interface SandboxDefinition {
      */
     setupCommand?: string;
 }
-/**
- * Recipe used by `crew sandbox auth <model>` to drive an interactive
- * login flow inside a sbx sandbox and then verify it. The flow is
- * picker-driven — no positional `<tool>` argument; the picker lists
- * every recipe visible to the current sandbox.
- *
- * `binary` defaults to the recipe key (typically the agent or CLI name).
- * `authenticatedPattern` matches against combined stdout+stderr from
- * `statusArgs` — exit code alone isn't reliable because some CLIs
- * report "not logged in" while still exiting 0.
- * `kind` controls visibility in the interactive picker: `"agent"`
- * recipes are scoped to a specific sbx agent and only appear when you
- * `auth` against that agent's sandbox; `"tool"` recipes (default)
- * appear in every sandbox's picker because they're cross-cutting
- * (github, npm, gcloud, …). Defaults to `"tool"` when omitted.
- *
- * Ship-side recipes for `claude`, `codex`, and `cursor` live in
- * `src/commands/sandbox/auth.ts`; users register additional tools
- * under `sandbox.authRecipes` in their config.
- */
-export interface AuthRecipe {
-    displayName: string;
-    binary?: string;
-    loginArgs: readonly string[];
-    statusArgs: readonly string[];
-    authenticatedPattern: RegExp;
-    kind?: "agent" | "tool";
-    /**
-     * Environment variables passed to `sbx exec` for both the login and
-     * status calls. Use this for CLIs whose default flow assumes a
-     * browser or other host-only feature — e.g. cursor-agent wants
-     * `NO_OPEN_BROWSER=1` to print a device code instead of trying to
-     * launch a browser inside the sandbox.
-     */
-    env?: Record<string, string>;
-}
 export interface ModelDefinition {
     /**
      * Shell command launched for the model. Wrapped with Safehouse/clearance
@@ -201,32 +161,6 @@ export interface Config {
     local?: {
         runner?: LocalRunnerSetting;
     };
-    /**
-     * Sandbox-wide settings. `authRecipes` lets users register additional
-     * tools (github, npm, gcloud, …) for `crew sandbox auth <model>` to
-     * authenticate inside the sandbox. The auth flow is picker-driven —
-     * registered recipes show up in the picker alongside the shipped ones,
-     * and a user recipe under the same key (e.g. "claude") overrides the
-     * shipped one.
-     */
-    sandbox?: {
-        authRecipes?: Record<string, AuthRecipe>;
-        /**
-         * When true (default), every `crew sandbox ensure` / `auth` run applies
-         * a small set of git defaults inside the sandbox so robot commits push
-         * over `gh`-managed HTTPS regardless of how the user cloned the repo:
-         *
-         *   - disable GPG signing for commits and tags
-         *   - rewrite `git@github.com:` and `ssh://git@github.com/` URLs to
-         *     `https://github.com/` so push uses gh's credential helper
-         *   - after a successful `github` auth recipe login, run
-         *     `gh auth setup-git` inside the sandbox
-         *
-         * Set `false` to skip both the git-config block and the post-login
-         * `gh auth setup-git` step.
-         */
-        gitDefaults?: boolean;
-    };
     logging?: {
         /**
          * Append-mode log file destination. `log()` and `logEvent()` tee here
@@ -281,14 +215,6 @@ export interface ResolvedConfig {
     local: {
         runner: LocalRunnerSetting;
     };
-    /**
-     * Sandbox-wide settings. Always present after defaults; `authRecipes`
-     * is `{}` when the user provides none.
-     */
-    sandbox: {
-        authRecipes: Record<string, AuthRecipe>;
-        gitDefaults: boolean;
-    };
     logging: {
         file: string;
     };

package/dist/lib/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAIrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEvD;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GAAG,mBAAmB,GAAG,kBAAkB,CAAC;AAEpE;;;;;GAKG;AACH,eAAO,MAAM,eAAe,QAAQ,CAAC;AAErC;;;;;;GAMG;AACH,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAE5D,eAAO,MAAM,uBAAuB,EAAE,SAAS,oBAAoB,EAIzD,CAAC;AAEX;;;;;;GAMG;AACH,MAAM,MAAM,WAAW,GAAG,WAAW,GAAG,KAAK,GAAG,MAAM,CAAC;AAEvD;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,GAAG,WAAW,GAAG,MAAM,CAAC;AAEtD,eAAO,MAAM,qBAAqB,EAAE,SAAS,kBAAkB,EAKrD,CAAC;AAEX;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,+CAA+C;IAC/C,KAAK,EAAE,MAAM,CAAC;IACd,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wEAAwE;IACxE,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,IAAI,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACxB;;;;;;OAMG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AAED,MAAM,WAAW,eAAe;IAC9B;;;;;;;OAOG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE;QACN,QAAQ,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACjD,CAAC;IACF;;;;OAIG;IACH,OAAO,CAAC,EAAE,iBAAiB,CAAC;CAC7B;AAED;;;;;;;;;GASG;AACH,KAAK,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG;IAAE,QAAQ,EAAE,IAAI,CAAA;CAAE,CAAC;AAC/D,KAAK,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,GAAG;IAC1E,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,QAAQ,CAAC,EAAE,KAAK,CAAC;CAClB,CAAC;AACF,UAAU,2BAA2B;IACnC,QAAQ,EAAE,IAAI,CAAC;CAChB;AACD,KAAK,mBAAmB,GAAG,0BAA0B,GAAG,2BAA2B,CAAC;AAEpF;;;;;;;;;GASG;AACH,MAAM,WAAW,MAAM;IACrB;;;;;;;;;OASG;IACH,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;IACzB,GAAG,CAAC,EAAE;QACJ,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,SAAS,EAAE;QACT,UAAU,EAAE,MAAM,CAAC;QACnB,iBAAiB,EAAE,MAAM,EAAE,CAAC;KAC7B,CAAC;IACF,YAAY,CAAC,EAAE;QACb,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,wBAAwB,CAAC,EAAE,MAAM,CAAC;QAClC,sBAAsB,CAAC,EAAE,MAAM,CAAC;KACjC,CAAC;IACF,MAAM,CAAC,EAAE;QACP,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB;;;;;WAKG;QACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;KACnD,CAAC;IACF,OAAO,CAAC,EAAE;QACR,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF;;;;OAIG;IACH,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC;;;;OAIG;IACH,KAAK,CAAC,EAAE;QACN,MAAM,CAAC,EAAE,kBAAkB,CAAC;KAC7B,CAAC;IACF;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE;QACR,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACzC;;;;;;;;;;;;;WAaG;QACH,WAAW,CAAC,EAAE,OAAO,CAAC;KACvB,CAAC;IACF,OAAO,CAAC,EAAE;QACR;;;;;WAKG;QACH,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;;OAKG;IACH,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,GAAG,EAAE;QACH,MAAM,EAAE,MAAM,CAAC;QACf,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,SAAS,EAAE;QACT,UAAU,EAAE,MAAM,CAAC;QACnB,iBAAiB,EAAE,MAAM,EAAE,CAAC;KAC7B,CAAC;IACF,YAAY,EAAE;QACZ,iBAAiB,EAAE,MAAM,CAAC;QAC1B,wBAAwB,EAAE,MAAM,CAAC;QACjC,sBAAsB,EAAE,MAAM,CAAC;KAChC,CAAC;IACF,MAAM,EAAE;QACN,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;KAC9C,CAAC;IACF,OAAO,EAAE;QACP,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF;;;OAGG;IACH,aAAa,EAAE,oBAAoB,CAAC;IACpC;;;;OAIG;IACH,KAAK,EAAE;QACL,MAAM,EAAE,kBAAkB,CAAC;KAC5B,CAAC;IACF;;;OAGG;IACH,OAAO,EAAE;QACP,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACxC,WAAW,EAAE,OAAO,CAAC;KACtB,CAAC;IACF,OAAO,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;CACH;AA0OD;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,EACtC,IAAI,EAAE,MAAM,GACX,OAAO,CAKT;AA+cD,wBAAsB,UAAU,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAwBpE"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAIrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEvD;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GAAG,mBAAmB,GAAG,kBAAkB,CAAC;AAEpE;;;;;GAKG;AACH,eAAO,MAAM,eAAe,QAAQ,CAAC;AAErC;;;;;;GAMG;AACH,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAE5D,eAAO,MAAM,uBAAuB,EAAE,SAAS,oBAAoB,EAIzD,CAAC;AAEX;;;;;;GAMG;AACH,MAAM,MAAM,WAAW,GAAG,WAAW,GAAG,KAAK,GAAG,MAAM,CAAC;AAEvD;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,GAAG,WAAW,GAAG,MAAM,CAAC;AAEtD,eAAO,MAAM,qBAAqB,EAAE,SAAS,kBAAkB,EAKrD,CAAC;AAEX;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,+CAA+C;IAC/C,KAAK,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,eAAe;IAC9B;;;;;;;OAOG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE;QACN,QAAQ,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACjD,CAAC;IACF;;;;OAIG;IACH,OAAO,CAAC,EAAE,iBAAiB,CAAC;CAC7B;AAED;;;;;;;;;GASG;AACH,KAAK,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG;IAAE,QAAQ,EAAE,IAAI,CAAA;CAAE,CAAC;AAC/D,KAAK,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,GAAG;IAC1E,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,QAAQ,CAAC,EAAE,KAAK,CAAC;CAClB,CAAC;AACF,UAAU,2BAA2B;IACnC,QAAQ,EAAE,IAAI,CAAC;CAChB;AACD,KAAK,mBAAmB,GAAG,0BAA0B,GAAG,2BAA2B,CAAC;AAEpF;;;;;;;;;GASG;AACH,MAAM,WAAW,MAAM;IACrB;;;;;;;;;OASG;IACH,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;IACzB,GAAG,CAAC,EAAE;QACJ,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,SAAS,EAAE;QACT,UAAU,EAAE,MAAM,CAAC;QACnB,iBAAiB,EAAE,MAAM,EAAE,CAAC;KAC7B,CAAC;IACF,YAAY,CAAC,EAAE;QACb,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,wBAAwB,CAAC,EAAE,MAAM,CAAC;QAClC,sBAAsB,CAAC,EAAE,MAAM,CAAC;KACjC,CAAC;IACF,MAAM,CAAC,EAAE;QACP,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB;;;;;WAKG;QACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;KACnD,CAAC;IACF,OAAO,CAAC,EAAE;QACR,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF;;;;OAIG;IACH,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC;;;;OAIG;IACH,KAAK,CAAC,EAAE;QACN,MAAM,CAAC,EAAE,kBAAkB,CAAC;KAC7B,CAAC;IACF,OAAO,CAAC,EAAE;QACR;;;;;WAKG;QACH,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;;OAKG;IACH,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,GAAG,EAAE;QACH,MAAM,EAAE,MAAM,CAAC;QACf,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,SAAS,EAAE;QACT,UAAU,EAAE,MAAM,CAAC;QACnB,iBAAiB,EAAE,MAAM,EAAE,CAAC;KAC7B,CAAC;IACF,YAAY,EAAE;QACZ,iBAAiB,EAAE,MAAM,CAAC;QAC1B,wBAAwB,EAAE,MAAM,CAAC;QACjC,sBAAsB,EAAE,MAAM,CAAC;KAChC,CAAC;IACF,MAAM,EAAE;QACN,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;KAC9C,CAAC;IACF,OAAO,EAAE;QACP,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF;;;OAGG;IACH,aAAa,EAAE,oBAAoB,CAAC;IACpC;;;;OAIG;IACH,KAAK,EAAE;QACL,MAAM,EAAE,kBAAkB,CAAC;KAC5B,CAAC;IACF,OAAO,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;CACH;AA4ND;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,EACtC,IAAI,EAAE,MAAM,GACX,OAAO,CAKT;AA+ZD,wBAAsB,UAAU,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAwBpE"}