@intutic/cli 1.9.0 → 1.10.1

package/dist/lib/envInjector.js.map

@@ -1 +1 @@
-{"version":3,"file":"envInjector.js","sourceRoot":"","sources":["../../src/lib/envInjector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAC7C,OAAO,EAAE,MAAQ,SAAS,CAAA;AAC1B,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,MAAQ,SAAS,CAAA;AAC1B,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAE9C,MAAM,MAAM,GAAG,YAAY,CAAC,aAAa,CAAC,CAAA;AAE1C,MAAM,QAAQ,GAAG,CAAC,oBAAoB,EAAE,iBAAiB,CAAU,CAAA;AASnE,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAClD,YAAY,QAAgB;QAC1B,KAAK,CAAC,6CAA6C,QAAQ,EAAE,CAAC,CAAA;QAC9D,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAA;IACzC,CAAC;CACF;AAED,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAC/C,YAAY,IAAY;QACtB,KAAK,CAAC,8CAA8C,IAAI,+BAA+B,CAAC,CAAA;QACxF,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAA;IACtC,CAAC;CACF;AAED,SAAS,kBAAkB,CAAC,GAAW;IACrC,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;AACnG,CAAC;AAED,SAAS,WAAW,CAAC,GAAW,EAAE,KAAa;IAC7C,QAAQ,CAAC,oBAAoB,GAAG,KAAK,kBAAkB,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;AACvF,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,CAAC;QAAC,QAAQ,CAAC,sBAAsB,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;AAC3E,CAAC;AAED,SAAS,eAAe,CAAC,GAAW,EAAE,KAAa;IACjD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAA;IACjD,MAAM,MAAM,GAAG,iBAAiB,GAAG,EAAE,CAAA;IACrC,MAAM,IAAI,GAAK,UAAU,GAAG,KAAK,kBAAkB,CAAC,KAAK,CAAC,KAAK,MAAM,EAAE,CAAA;IAEvE,IAAI,OAAO,GAAG,EAAE,CAAA;IAChB,IAAI,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IAE1D,qCAAqC;IACrC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;IAClE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAChB,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;AACpE,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAA;IACjD,MAAM,MAAM,GAAG,iBAAiB,GAAG,EAAE,CAAA;IACrC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAChF,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,QAAQ,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAC5D,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;AACZ,CAAC;AAED,SAAS,aAAa,CAAC,GAAW,EAAE,KAAa;IAC/C,QAAQ,CAAC,QAAQ,GAAG,KAAK,kBAAkB,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;AAC3E,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,CAAC;QAAC,QAAQ,CAAC,mCAAmC,GAAG,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;AAC3F,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,QAAgB;IACzD,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAA;IAC9B,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,0BAA0B,CAAC,CAAA;IAE/D,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,KAAK,MAAM,GAAG,IAAI,QAAQ;YAAE,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;QACtD,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,iCAAiC,CAAC,CAAA;QAC5E,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,GAAG,QAAQ,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAA;IACvF,CAAC;IAED,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,sDAAsD;QACtD,IAAI,KAAK,GAAsB,MAAM,CAAA;QACrC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,kBAAkB,CAAA;YACjC,mDAAmD;YACnD,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;YACxC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;gBAC3B,IAAI,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;gBAC7C,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBAC9E,OAAO,IAAI,KAAK,GAAG,KAAK,kBAAkB,CAAC,QAAQ,CAAC,GAAG,CAAA;gBACvD,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YAClE,CAAC;YACD,KAAK,GAAG,QAAQ,CAAA;YAChB,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,uCAAuC,CAAC,CAAA;QACpF,CAAC;QAAC,MAAM,CAAC;YACP,sCAAsC;YACtC,KAAK,MAAM,GAAG,IAAI,QAAQ;gBAAE,eAAe,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;YAC1D,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,8BAA8B,CAAC,CAAA;QAC3E,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,GAAG,QAAQ,CAAC,EAAE,MAAM,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;IAChH,CAAC;IAED,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,KAAK,MAAM,GAAG,IAAI,QAAQ;YAAE,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;QACxD,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,8BAA8B,CAAC,CAAA;QACzE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,GAAG,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;IACzE,CAAC;IAED,MAAM,IAAI,yBAAyB,CAAC,QAAQ,CAAC,CAAA;AAC/C,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAA;IAC9B,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,0BAA0B,CAAC,CAAA;IAErD,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,KAAK,MAAM,GAAG,IAAI,QAAQ;YAAE,WAAW,CAAC,GAAG,CAAC,CAAA;QAC5C,OAAM;IACR,CAAC;IACD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,KAAK,MAAM,GAAG,IAAI,QAAQ;YAAE,eAAe,CAAC,GAAG,CAAC,CAAA;QAChD,OAAM;IACR,CAAC;IACD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,KAAK,MAAM,GAAG,IAAI,QAAQ;YAAE,aAAa,CAAC,GAAG,CAAC,CAAA;QAC9C,OAAM;IACR,CAAC;IACD,MAAM,IAAI,yBAAyB,CAAC,QAAQ,CAAC,CAAA;AAC/C,CAAC"}
+{"version":3,"file":"envInjector.js","sourceRoot":"","sources":["../../src/lib/envInjector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAC7C,OAAO,EAAE,MAAQ,SAAS,CAAA;AAC1B,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,MAAQ,SAAS,CAAA;AAC1B,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAE9C,MAAM,MAAM,GAAG,YAAY,CAAC,aAAa,CAAC,CAAA;AAE1C,MAAM,QAAQ,GAAG,CAAC,oBAAoB,EAAE,iBAAiB,CAAU,CAAA;AASnE,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAClD,YAAY,QAAgB;QAC1B,KAAK,CAAC,6CAA6C,QAAQ,EAAE,CAAC,CAAA;QAC9D,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAA;IACzC,CAAC;CACF;AAED,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAC/C,YAAY,IAAY;QACtB,KAAK,CAAC,8CAA8C,IAAI,+BAA+B,CAAC,CAAA;QACxF,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAA;IACtC,CAAC;CACF;AAED,SAAS,kBAAkB,CAAC,GAAW;IACrC,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;AACnG,CAAC;AAED,SAAS,WAAW,CAAC,GAAW,EAAE,KAAa;IAC7C,QAAQ,CAAC,oBAAoB,GAAG,KAAK,kBAAkB,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;AACvF,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,CAAC;QACH,QAAQ,CAAC,sBAAsB,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,8EAA8E;QAC9E,8EAA8E;QAC9E,6EAA6E;IAC/E,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,GAAW,EAAE,KAAa;IACjD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAA;IACjD,MAAM,MAAM,GAAG,iBAAiB,GAAG,EAAE,CAAA;IACrC,MAAM,IAAI,GAAK,UAAU,GAAG,KAAK,kBAAkB,CAAC,KAAK,CAAC,KAAK,MAAM,EAAE,CAAA;IAEvE,IAAI,OAAO,GAAG,EAAE,CAAA;IAChB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,+EAA+E;QAC/E,gCAAgC;QAChC,0EAA0E;QAC1E,+EAA+E;QAC/E,+EAA+E;QAC/E,wEAAwE;IAC1E,CAAC;IAED,qCAAqC;IACrC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;IAClE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAChB,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;AACpE,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAA;IACjD,MAAM,MAAM,GAAG,iBAAiB,GAAG,EAAE,CAAA;IACrC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAChF,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,QAAQ,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,gFAAgF;QAChF,gFAAgF;QAChF,2EAA2E;IAC7E,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,GAAW,EAAE,KAAa;IAC/C,QAAQ,CAAC,QAAQ,GAAG,KAAK,kBAAkB,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;AAC3E,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,CAAC;QACH,QAAQ,CAAC,mCAAmC,GAAG,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,iFAAiF;QACjF,gFAAgF;IAClF,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,QAAgB;IACzD,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAA;IAC9B,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,0BAA0B,CAAC,CAAA;IAE/D,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,KAAK,MAAM,GAAG,IAAI,QAAQ;YAAE,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;QACtD,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,iCAAiC,CAAC,CAAA;QAC5E,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,GAAG,QAAQ,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAA;IACvF,CAAC;IAED,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,sDAAsD;QACtD,IAAI,KAAK,GAAsB,MAAM,CAAA;QACrC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,kBAAkB,CAAA;YACjC,mDAAmD;YACnD,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;YACxC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;gBAC3B,IAAI,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;gBAC7C,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBAC9E,OAAO,IAAI,KAAK,GAAG,KAAK,kBAAkB,CAAC,QAAQ,CAAC,GAAG,CAAA;gBACvD,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YAClE,CAAC;YACD,KAAK,GAAG,QAAQ,CAAA;YAChB,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,uCAAuC,CAAC,CAAA;QACpF,CAAC;QAAC,MAAM,CAAC;YACP,sCAAsC;YACtC,KAAK,MAAM,GAAG,IAAI,QAAQ;gBAAE,eAAe,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;YAC1D,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,8BAA8B,CAAC,CAAA;QAC3E,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,GAAG,QAAQ,CAAC,EAAE,MAAM,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;IAChH,CAAC;IAED,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,KAAK,MAAM,GAAG,IAAI,QAAQ;YAAE,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;QACxD,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,8BAA8B,CAAC,CAAA;QACzE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,GAAG,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;IACzE,CAAC;IAED,MAAM,IAAI,yBAAyB,CAAC,QAAQ,CAAC,CAAA;AAC/C,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAA;IAC9B,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,0BAA0B,CAAC,CAAA;IAErD,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,KAAK,MAAM,GAAG,IAAI,QAAQ;YAAE,WAAW,CAAC,GAAG,CAAC,CAAA;QAC5C,OAAM;IACR,CAAC;IACD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,KAAK,MAAM,GAAG,IAAI,QAAQ;YAAE,eAAe,CAAC,GAAG,CAAC,CAAA;QAChD,OAAM;IACR,CAAC;IACD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,KAAK,MAAM,GAAG,IAAI,QAAQ;YAAE,aAAa,CAAC,GAAG,CAAC,CAAA;QAC9C,OAAM;IACR,CAAC;IACD,MAAM,IAAI,yBAAyB,CAAC,QAAQ,CAAC,CAAA;AAC/C,CAAC"}

package/dist/lib/gitHooks.d.ts

@@ -10,10 +10,15 @@
  * @module
  */
 /**
- * Installs post-commit and post-checkout hooks into `.git/hooks/`.
+ * Installs post-commit, post-checkout, pre-commit, and post-merge hooks into
+ * `.git/hooks/`.
  *
  * @param workspaceRoot - Workspace root directory.
- * @returns Promise<boolean> - True if successfully installed, false otherwise.
+ * @returns Promise<boolean> - True if installation ran without error, even
+ *   when one or more individual hooks were left untouched because a foreign
+ *   hook already occupied that path (see `writeHookIfOursOrAbsent`) — that is
+ *   correct, deliberate behavior, not a failure. `false` only when this is
+ *   not a Git repository or a filesystem error prevented writing.
  */
 export declare function installGitHooks(workspaceRoot: string): Promise<boolean>;
 //# sourceMappingURL=gitHooks.d.ts.map

package/dist/lib/gitHooks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gitHooks.d.ts","sourceRoot":"","sources":["../../src/lib/gitHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAcH;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAiC7E"}
+{"version":3,"file":"gitHooks.d.ts","sourceRoot":"","sources":["../../src/lib/gitHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AA8IH;;;;;;;;;;GAUG;AACH,wBAAsB,eAAe,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAkG7E"}

package/dist/lib/gitHooks.js

@@ -11,19 +11,141 @@
  */
 import * as node_fs from 'node:fs/promises';
 import * as node_path from 'node:path';
+import { secretPatternAlternation } from '@intutic/shared-types';
 import { log } from './logger.js';
-const HOOK_CONTENT = `
+/** Marker line identifying a post-commit/post-checkout hook as ours — the overwrite guard. */
+const GIT_CONTEXT_MARKER = '# Intutic Git Context Sync Hook';
+/** Marker line identifying a pre-commit hook as ours — the overwrite guard. */
+const PRE_COMMIT_MARKER = '# Intutic Pre-Commit Secret Scan';
+/** Marker line identifying a post-merge hook as ours — same overwrite guard as pre-commit. */
+const POST_MERGE_MARKER = '# Intutic Post-Merge Decisions Log Refresh';
+/**
+ * Git-context tracking hook content, shared by post-commit and post-checkout
+ * (TD-351): both fire the same best-effort branch/commit sync, backgrounded
+ * and output-suppressed so it never adds latency to the Git command that
+ * triggered it.
+ */
+function gitContextSyncContent() {
+    return `
 #!/bin/sh
-# Intutic Git Context Sync Hook
+${GIT_CONTEXT_MARKER}
 if command -v intutic >/dev/null 2>&1; then
   intutic sync-context --git --branch "$(git branch --show-current)" --commit "$(git rev-parse HEAD)" >/dev/null 2>&1 &
 fi
-`.trim();
+`.trim() + '\n';
+}
+/**
+ * Optional post-merge hook: refreshes the governed decisions log
+ * (`.intutic/DECISIONS.md` + the bounded section in the `claude-code`
+ * harness config) right after a merge, rather than leaving a developer
+ * waiting for the daemon's next ~30s poll. `decisions-log-refresh` itself
+ * no-ops (and never errors the shell) when `decisionsLogEnabled` is off or
+ * the developer isn't authenticated — see `decisionsLogRefresh.ts`.
+ *
+ * Backgrounded and output-suppressed, same shape as `gitContextSyncContent`
+ * above — a governance context refresh must never add latency to `git merge`.
+ */
+function postMergeContent() {
+    return `
+#!/bin/sh
+${POST_MERGE_MARKER}
+if command -v intutic >/dev/null 2>&1; then
+  intutic decisions-log-refresh >/dev/null 2>&1 &
+fi
+`.trim() + '\n';
+}
+/**
+ * The last line before a secret enters git history.
+ *
+ * The hook gate refuses a Write whose content carries a credential value, and
+ * the proxy's DLP covers the LLM traffic — but a secret can reach the working
+ * tree by other roads (a human paste, an unproxied tool, a generator script).
+ * Until now the repo's history had no gate at all: the CLI installed
+ * post-commit and post-checkout tracking hooks only, so the commit — the step
+ * GitGuardian's 28M-leaked-secrets figure is measured at — was uninspected.
+ *
+ * Scans only ADDED lines of the staged diff, with the same
+ * `SECRET_VALUE_PATTERNS` the hook gate enforces (one source, in
+ * shared-types — two hand-kept copies of "what is a credential" is how the
+ * gate and the hook would drift). Refuses with the offending file:line and
+ * names the escape hatch: `git commit --no-verify` is deliberate, auditable
+ * in shell history, and better than teaching people to delete the hook.
+ */
+function preCommitContent() {
+    return `
+#!/bin/sh
+${PRE_COMMIT_MARKER}
+# Refuses a commit whose STAGED ADDITIONS carry a credential-shaped value.
+# Same patterns the Intutic hook gate enforces (see @intutic/shared-types
+# secretPatterns.ts — the single source both consumers compile).
+findings="$(git diff --cached -U0 --no-color | grep -E '^\\+' | grep -vE '^\\+\\+\\+' | grep -nE '${secretPatternAlternation()}' || true)"
+if [ -n "$findings" ]; then
+  echo "[Intutic] Commit refused: staged changes add credential-shaped content:" >&2
+  echo "$findings" | head -10 >&2
+  echo "" >&2
+  echo "Remove the secret and reference it from the environment instead." >&2
+  echo "If this is a false positive, commit with: git commit --no-verify" >&2
+  exit 1
+fi
+
+# TD-358: warn-only skill-content scan of staged skill-surface additions
+# (.agents/skills/**, .claude/skills/**). Advisory only — this NEVER
+# refuses the commit, unlike the secret scan above. See skillScan.ts's
+# module doc comment for why: the pattern table's false-positive rate
+# against real, benign skill markdown has not been measured yet, so nothing
+# here may borrow the secret scan's refusal authority until it has earned
+# it the same way. If the secret scan above already refused, this line is
+# never reached — that check's exit 1 is untouched.
+if command -v intutic >/dev/null 2>&1; then
+  intutic skill scan-staged || true
+fi
+exit 0
+`.trimStart();
+}
+/**
+ * Writes one hook file at `<hooksDir>/<name>` unless a foreign (non-Intutic)
+ * hook already occupies that path — the shared never-clobber-a-foreign-hook,
+ * marker-based-idempotent-rerun behavior every hook `installGitHooks` manages
+ * now follows (TD-351; previously only pre-commit and post-merge had it).
+ *
+ * Reads the existing file first: absent, or already carrying `marker` (a
+ * previous install of this same hook, safe to overwrite with the current
+ * content — this is what makes a re-run idempotent), writes `content` and
+ * marks it executable. Anything else is a hook this codebase did not write —
+ * left standing untouched, with `warnMessage` logged so the operator knows
+ * why the hook they expected is missing.
+ *
+ * @returns `true` if the hook was (re-)written, `false` if a foreign hook was
+ *   left in place. Both are legitimate outcomes, not failures — the caller
+ *   decides what "success" means for its own summary log line.
+ */
+async function writeHookIfOursOrAbsent(hooksDir, name, content, marker, warnMessage) {
+    const hookPath = node_path.join(hooksDir, name);
+    let existing;
+    try {
+        existing = await node_fs.readFile(hookPath, 'utf-8');
+    }
+    catch {
+        existing = null;
+    }
+    if (existing === null || existing.includes(marker)) {
+        await node_fs.writeFile(hookPath, content, { encoding: 'utf-8', mode: 0o755 });
+        await node_fs.chmod(hookPath, 0o755);
+        return true;
+    }
+    log.warn(warnMessage);
+    return false;
+}
 /**
- * Installs post-commit and post-checkout hooks into `.git/hooks/`.
+ * Installs post-commit, post-checkout, pre-commit, and post-merge hooks into
+ * `.git/hooks/`.
  *
  * @param workspaceRoot - Workspace root directory.
- * @returns Promise<boolean> - True if successfully installed, false otherwise.
+ * @returns Promise<boolean> - True if installation ran without error, even
+ *   when one or more individual hooks were left untouched because a foreign
+ *   hook already occupied that path (see `writeHookIfOursOrAbsent`) — that is
+ *   correct, deliberate behavior, not a failure. `false` only when this is
+ *   not a Git repository or a filesystem error prevented writing.
  */
 export async function installGitHooks(workspaceRoot) {
     const gitDir = node_path.join(workspaceRoot, '.git');
@@ -40,14 +162,59 @@ export async function installGitHooks(workspaceRoot) {
     const hooksDir = node_path.join(gitDir, 'hooks');
     try {
         await node_fs.mkdir(hooksDir, { recursive: true });
-        const postCommitPath = node_path.join(hooksDir, 'post-commit');
-        const postCheckoutPath = node_path.join(hooksDir, 'post-checkout');
-        await node_fs.writeFile(postCommitPath, HOOK_CONTENT + '\n', { encoding: 'utf-8', mode: 0o755 });
-        await node_fs.writeFile(postCheckoutPath, HOOK_CONTENT + '\n', { encoding: 'utf-8', mode: 0o755 });
-        // Double check execute permissions
-        await node_fs.chmod(postCommitPath, 0o755);
-        await node_fs.chmod(postCheckoutPath, 0o755);
-        log.info('Successfully installed Git sync hooks (post-commit, post-checkout)');
+        // Git-context tracking hooks (post-commit, post-checkout). Marker-
+        // disciplined the same way pre-commit and post-merge are below (TD-351):
+        // never clobber a hook that isn't ours. Until this fix these two
+        // overwrote whatever was already at their paths unconditionally — a
+        // team's own post-commit/post-checkout script (a notification hook, a
+        // submodule sync script) was silently replaced on install. Now a foreign
+        // hook is left standing, and the operator is told so.
+        const postCommitInstalled = await writeHookIfOursOrAbsent(hooksDir, 'post-commit', gitContextSyncContent(), GIT_CONTEXT_MARKER, "A post-commit hook already exists and is not Intutic's — left untouched. " +
+            'Branch/commit context will not sync automatically on commit; run ' +
+            '`intutic sync-context` manually as a workaround, or add Intutic\'s sync call to your own hook.');
+        const postCheckoutInstalled = await writeHookIfOursOrAbsent(hooksDir, 'post-checkout', gitContextSyncContent(), GIT_CONTEXT_MARKER, "A post-checkout hook already exists and is not Intutic's — left untouched. " +
+            'Branch/commit context will not sync automatically on checkout; run ' +
+            '`intutic sync-context` manually as a workaround, or add Intutic\'s sync call to your own hook.');
+        // Pre-commit secret scan. Unlike the two tracking hooks above, this one
+        // must NOT clobber blindly: pre-commit is where husky/lint-staged and
+        // hand-written hooks live, and silently replacing a team's hook to
+        // install ours is the exact overreach that gets governance tooling
+        // uninstalled. Ours is only written over an absent hook or a prior copy
+        // of itself (identified by marker); anything else is left standing and
+        // said so.
+        const preCommitInstalled = await writeHookIfOursOrAbsent(hooksDir, 'pre-commit', preCommitContent(), PRE_COMMIT_MARKER, "A pre-commit hook already exists and is not Intutic's — left untouched. " +
+            'The staged-diff secret scan is NOT installed; add it to your existing hook ' +
+            'if you want commit-time scanning.');
+        // Optional post-merge hook (governed decisions log refresh). Marker-
+        // disciplined the same way pre-commit is above — never clobber a
+        // post-merge hook that isn't ours. Post-commit/post-checkout above now
+        // follow this exact same pattern too (TD-351 — previously they did not:
+        // they unconditionally overwrote whatever was already at those paths,
+        // noted as a latent overreach rather than fixed alongside this hook's
+        // original addition, since changing existing-install behavior needed its
+        // own review).
+        const postMergeInstalled = await writeHookIfOursOrAbsent(hooksDir, 'post-merge', postMergeContent(), POST_MERGE_MARKER, "A post-merge hook already exists and is not Intutic's — left untouched. " +
+            'The governed decisions log will still refresh on the daemon\'s normal poll cycle; run ' +
+            '`intutic sync-context` manually as a workaround if you need it sooner.');
+        // Summary log line, kept honest: only name a hook as installed if it
+        // actually was. A hook skipped because a foreign hook already exists at
+        // that path already got its own `log.warn` above — this line must never
+        // paper over that with a blanket "success".
+        const installed = [];
+        if (postCommitInstalled)
+            installed.push('post-commit');
+        if (postCheckoutInstalled)
+            installed.push('post-checkout');
+        if (preCommitInstalled)
+            installed.push('pre-commit secret scan');
+        if (postMergeInstalled)
+            installed.push('post-merge decisions log refresh');
+        if (installed.length > 0) {
+            log.info(`Successfully installed Git hooks (${installed.join(', ')})`);
+        }
+        else {
+            log.info('No Git hooks installed — every target hook already exists and is not Intutic\'s');
+        }
         return true;
     }
     catch (err) {

package/dist/lib/gitHooks.js.map

@@ -1 +1 @@
-{"version":3,"file":"gitHooks.js","sourceRoot":"","sources":["../../src/lib/gitHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,OAAO,MAAM,kBAAkB,CAAA;AAC3C,OAAO,KAAK,SAAS,MAAM,WAAW,CAAA;AACtC,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAA;AAEjC,MAAM,YAAY,GAAG;;;;;;CAMpB,CAAC,IAAI,EAAE,CAAA;AAER;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,aAAqB;IACzD,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAA;IAEpD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACvC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,+CAA+C;QAC/C,OAAO,KAAK,CAAA;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAChD,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAElD,MAAM,cAAc,GAAG,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAA;QAC9D,MAAM,gBAAgB,GAAG,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAA;QAElE,MAAM,OAAO,CAAC,SAAS,CAAC,cAAc,EAAE,YAAY,GAAG,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QAChG,MAAM,OAAO,CAAC,SAAS,CAAC,gBAAgB,EAAE,YAAY,GAAG,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QAElG,mCAAmC;QACnC,MAAM,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAA;QAC1C,MAAM,OAAO,CAAC,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAA;QAE5C,GAAG,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAA;QAC9E,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,8BAA8B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC1F,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"gitHooks.js","sourceRoot":"","sources":["../../src/lib/gitHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,OAAO,MAAM,kBAAkB,CAAA;AAC3C,OAAO,KAAK,SAAS,MAAM,WAAW,CAAA;AACtC,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAA;AAChE,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAA;AAEjC,8FAA8F;AAC9F,MAAM,kBAAkB,GAAG,iCAAiC,CAAA;AAE5D,+EAA+E;AAC/E,MAAM,iBAAiB,GAAG,kCAAkC,CAAA;AAE5D,8FAA8F;AAC9F,MAAM,iBAAiB,GAAG,4CAA4C,CAAA;AAEtE;;;;;GAKG;AACH,SAAS,qBAAqB;IAC5B,OAAO;;EAEP,kBAAkB;;;;CAInB,CAAC,IAAI,EAAE,GAAG,IAAI,CAAA;AACf,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,gBAAgB;IACvB,OAAO;;EAEP,iBAAiB;;;;CAIlB,CAAC,IAAI,EAAE,GAAG,IAAI,CAAA;AACf,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,gBAAgB;IACvB,OAAO;;EAEP,iBAAiB;;;;oGAIiF,wBAAwB,EAAE;;;;;;;;;;;;;;;;;;;;;;CAsB7H,CAAC,SAAS,EAAE,CAAA;AACb,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,KAAK,UAAU,uBAAuB,CACpC,QAAgB,EAChB,IAAY,EACZ,OAAe,EACf,MAAc,EACd,WAAmB;IAEnB,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;IAC/C,IAAI,QAAuB,CAAA;IAC3B,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,GAAG,IAAI,CAAA;IACjB,CAAC;IACD,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,MAAM,OAAO,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QAC9E,MAAM,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;QACpC,OAAO,IAAI,CAAA;IACb,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IACrB,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,aAAqB;IACzD,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAA;IAEpD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACvC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,+CAA+C;QAC/C,OAAO,KAAK,CAAA;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAChD,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAElD,mEAAmE;QACnE,yEAAyE;QACzE,iEAAiE;QACjE,oEAAoE;QACpE,sEAAsE;QACtE,yEAAyE;QACzE,sDAAsD;QACtD,MAAM,mBAAmB,GAAG,MAAM,uBAAuB,CACvD,QAAQ,EACR,aAAa,EACb,qBAAqB,EAAE,EACvB,kBAAkB,EAClB,2EAA2E;YACzE,mEAAmE;YACnE,gGAAgG,CACnG,CAAA;QACD,MAAM,qBAAqB,GAAG,MAAM,uBAAuB,CACzD,QAAQ,EACR,eAAe,EACf,qBAAqB,EAAE,EACvB,kBAAkB,EAClB,6EAA6E;YAC3E,qEAAqE;YACrE,gGAAgG,CACnG,CAAA;QAED,wEAAwE;QACxE,sEAAsE;QACtE,mEAAmE;QACnE,mEAAmE;QACnE,wEAAwE;QACxE,uEAAuE;QACvE,WAAW;QACX,MAAM,kBAAkB,GAAG,MAAM,uBAAuB,CACtD,QAAQ,EACR,YAAY,EACZ,gBAAgB,EAAE,EAClB,iBAAiB,EACjB,0EAA0E;YACxE,6EAA6E;YAC7E,mCAAmC,CACtC,CAAA;QAED,qEAAqE;QACrE,iEAAiE;QACjE,uEAAuE;QACvE,wEAAwE;QACxE,sEAAsE;QACtE,sEAAsE;QACtE,yEAAyE;QACzE,eAAe;QACf,MAAM,kBAAkB,GAAG,MAAM,uBAAuB,CACtD,QAAQ,EACR,YAAY,EACZ,gBAAgB,EAAE,EAClB,iBAAiB,EACjB,0EAA0E;YACxE,wFAAwF;YACxF,wEAAwE,CAC3E,CAAA;QAED,qEAAqE;QACrE,wEAAwE;QACxE,wEAAwE;QACxE,4CAA4C;QAC5C,MAAM,SAAS,GAAa,EAAE,CAAA;QAC9B,IAAI,mBAAmB;YAAE,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;QACtD,IAAI,qBAAqB;YAAE,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;QAC1D,IAAI,kBAAkB;YAAE,SAAS,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAA;QAChE,IAAI,kBAAkB;YAAE,SAAS,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAA;QAC1E,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,GAAG,CAAC,IAAI,CAAC,qCAAqC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACxE,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,IAAI,CAAC,iFAAiF,CAAC,CAAA;QAC7F,CAAC;QAED,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,8BAA8B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC1F,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC"}

package/dist/lib/gracefulShutdown.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Shutdown that actually ends the process (TD-484).
+ *
+ * `intutic connect` trapped SIGTERM, logged "Shutting down", aborted its poll
+ * loop, and then stayed alive: a daemon asked to stop kept polling its control
+ * plane for four and a half hours, through two stops. Aborting a loop is a
+ * request; nothing enforced it. An await that never settles, or a child whose
+ * pipes stay open, is enough to keep the event loop — and the process — alive.
+ *
+ * Two rules, both enforced by timers that are `unref`'d so they never keep a
+ * process alive themselves, only end one that something else is holding open:
+ *
+ *   1. a child told to stop is killed if it has not exited after a grace period;
+ *   2. the process exits after a deadline whether or not cleanup finished, and
+ *      at once on a second signal.
+ *
+ * @module
+ */
+import type { ChildProcess } from 'node:child_process';
+export declare const CHILD_GRACE_MS = 3000;
+export declare const EXIT_DEADLINE_MS = 8000;
+/** SIGTERM now, SIGKILL after `graceMs` if the child is still running. */
+export declare function terminateChild(child: ChildProcess, graceMs?: number): void;
+export interface ShutdownHandlerOptions {
+    /** Starts the graceful path: abort loops, stop children. Runs once. */
+    onShutdown: () => void;
+    deadlineMs?: number;
+    /** Injectable for tests. */
+    exit?: (code: number) => void;
+}
+/**
+ * Returns a signal handler. First call: run `onShutdown` and arm the exit
+ * deadline. Any later call: exit immediately — a second Ctrl-C or a second
+ * `kill` means "now", and the first one evidently was not enough.
+ */
+export declare function createShutdownHandler(opts: ShutdownHandlerOptions): () => void;
+//# sourceMappingURL=gracefulShutdown.d.ts.map

package/dist/lib/gracefulShutdown.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gracefulShutdown.d.ts","sourceRoot":"","sources":["../../src/lib/gracefulShutdown.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAEtD,eAAO,MAAM,cAAc,OAAQ,CAAA;AACnC,eAAO,MAAM,gBAAgB,OAAQ,CAAA;AAErC,0EAA0E;AAC1E,wBAAgB,cAAc,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,SAAiB,GAAG,IAAI,CAQlF;AAED,MAAM,WAAW,sBAAsB;IACrC,uEAAuE;IACvE,UAAU,EAAE,MAAM,IAAI,CAAA;IACtB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,4BAA4B;IAC5B,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAC9B;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,sBAAsB,GAAG,MAAM,IAAI,CAiB9E"}

package/dist/lib/gracefulShutdown.js

@@ -0,0 +1,57 @@
+/**
+ * Shutdown that actually ends the process (TD-484).
+ *
+ * `intutic connect` trapped SIGTERM, logged "Shutting down", aborted its poll
+ * loop, and then stayed alive: a daemon asked to stop kept polling its control
+ * plane for four and a half hours, through two stops. Aborting a loop is a
+ * request; nothing enforced it. An await that never settles, or a child whose
+ * pipes stay open, is enough to keep the event loop — and the process — alive.
+ *
+ * Two rules, both enforced by timers that are `unref`'d so they never keep a
+ * process alive themselves, only end one that something else is holding open:
+ *
+ *   1. a child told to stop is killed if it has not exited after a grace period;
+ *   2. the process exits after a deadline whether or not cleanup finished, and
+ *      at once on a second signal.
+ *
+ * @module
+ */
+export const CHILD_GRACE_MS = 3_000;
+export const EXIT_DEADLINE_MS = 8_000;
+/** SIGTERM now, SIGKILL after `graceMs` if the child is still running. */
+export function terminateChild(child, graceMs = CHILD_GRACE_MS) {
+    if (child.exitCode !== null || child.signalCode !== null)
+        return;
+    child.kill('SIGTERM');
+    const timer = setTimeout(() => {
+        if (child.exitCode === null && child.signalCode === null)
+            child.kill('SIGKILL');
+    }, graceMs);
+    timer.unref();
+    child.once('exit', () => clearTimeout(timer));
+}
+/**
+ * Returns a signal handler. First call: run `onShutdown` and arm the exit
+ * deadline. Any later call: exit immediately — a second Ctrl-C or a second
+ * `kill` means "now", and the first one evidently was not enough.
+ */
+export function createShutdownHandler(opts) {
+    const exit = opts.exit ?? ((code) => process.exit(code));
+    let started = false;
+    return () => {
+        if (started) {
+            exit(1);
+            return;
+        }
+        started = true;
+        const timer = setTimeout(() => exit(0), opts.deadlineMs ?? EXIT_DEADLINE_MS);
+        timer.unref();
+        try {
+            opts.onShutdown();
+        }
+        catch {
+            exit(1);
+        }
+    };
+}
+//# sourceMappingURL=gracefulShutdown.js.map

package/dist/lib/gracefulShutdown.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gracefulShutdown.js","sourceRoot":"","sources":["../../src/lib/gracefulShutdown.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,CAAA;AACnC,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,CAAA;AAErC,0EAA0E;AAC1E,MAAM,UAAU,cAAc,CAAC,KAAmB,EAAE,OAAO,GAAG,cAAc;IAC1E,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI;QAAE,OAAM;IAChE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACrB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;QAC5B,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACjF,CAAC,EAAE,OAAO,CAAC,CAAA;IACX,KAAK,CAAC,KAAK,EAAE,CAAA;IACb,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAA;AAC/C,CAAC;AAUD;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAA4B;IAChE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;IAChE,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,OAAO,GAAG,EAAE;QACV,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,CAAC,CAAC,CAAA;YACP,OAAM;QACR,CAAC;QACD,OAAO,GAAG,IAAI,CAAA;QACd,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,UAAU,IAAI,gBAAgB,CAAC,CAAA;QAC5E,KAAK,CAAC,KAAK,EAAE,CAAA;QACb,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,EAAE,CAAA;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,CAAC,CAAC,CAAA;QACT,CAAC;IACH,CAAC,CAAA;AACH,CAAC"}

package/dist/lib/graphIdentity.d.ts

@@ -0,0 +1,80 @@
+/**
+ * Graph identity for spawned agents.
+ *
+ * A multi-agent run is a graph: a lead agent spawns workers, workers spawn their
+ * own. The proxy can only reason about that shape — fan-out, recursion depth,
+ * orphaned children, fleet spend — if each request says which node it came from.
+ * Nothing set that. `identity_from_headers` read W3C `baggage` and `x-intutic-*`
+ * headers that only its own tests ever wrote, so `graph_id` always fell back to
+ * `session_id`, and the gate at `proxy.rs` (`node.graph_id == session_id` → "a
+ * graph of one") made the whole membership and spend block unreachable.
+ *
+ * # Why environment variables, and why a path prefix
+ *
+ * A spawned agent is a child *process*, and the one thing a child process
+ * inherits for free is the environment. So identity lives in env vars, and each
+ * `intutic exec` derives its own position from what it inherited: same graph, new
+ * node, parent = whoever spawned me, depth + 1. Nesting `intutic exec` inside an
+ * agent is precisely the "an agent spawned an agent" event, so no harness needs
+ * to cooperate for the shape to be recorded.
+ *
+ * Getting that identity onto the wire is the harder half. Env vars are not HTTP
+ * headers, and almost no harness lets you add headers — Claude Code has
+ * `ANTHROPIC_CUSTOM_HEADERS` and the rest of the ecosystem has nothing. What they
+ * all accept is a base URL, which they append their own path to. So identity
+ * rides in the base URL as `/_i/{graph}/{node}/{parent}/{depth}`, which the proxy
+ * strips before anything else looks at the path.
+ *
+ * # Trust
+ *
+ * Client-supplied and unverifiable, exactly like the headers it complements. It
+ * describes shape for observability and self-consistency, and is never an input
+ * to authorisation. The proxy clamps depth so a caller cannot fake a recursion
+ * breach.
+ *
+ * @module
+ */
+/** Set on every process under a governed run; absent means this is the root. */
+export declare const ENV_GRAPH_ID = "INTUTIC_GRAPH_ID";
+export declare const ENV_NODE_ID = "INTUTIC_NODE_ID";
+export declare const ENV_PARENT_ID = "INTUTIC_PARENT_ID";
+export declare const ENV_DEPTH = "INTUTIC_DEPTH";
+export interface GraphIdentity {
+    graphId: string;
+    nodeId: string;
+    /** Empty for a root node. */
+    parentId: string;
+    depth: number;
+}
+/**
+ * Work out this process's position from the environment it inherited.
+ *
+ * With no inherited identity this process is a root: it starts a new graph and is
+ * its own first node. With one, it is a child of whatever spawned it.
+ */
+export declare function deriveIdentity(env?: NodeJS.ProcessEnv): GraphIdentity;
+/**
+ * The env a child process should inherit.
+ *
+ * Merged into the child's environment so that if it in turn runs `intutic exec`,
+ * `deriveIdentity` sees this node as its parent and the chain continues without
+ * anyone tracking it centrally.
+ */
+export declare function identityEnv(identity: GraphIdentity): Record<string, string>;
+/**
+ * The base-URL prefix carrying this identity.
+ *
+ * Appended to the proxy host so every harness sends it without knowing it exists:
+ * they concatenate their own path onto the base URL, and the proxy strips the
+ * prefix back off before routing.
+ */
+export declare function identityPathPrefix(identity: GraphIdentity): string;
+/**
+ * Headers for harnesses that can send them.
+ *
+ * Redundant with the path prefix and deliberately so — the proxy prefers headers,
+ * and a harness with real OpenTelemetry instrumentation will already be emitting
+ * `baggage` that supersedes both.
+ */
+export declare function identityHeaders(identity: GraphIdentity): Record<string, string>;
+//# sourceMappingURL=graphIdentity.d.ts.map

package/dist/lib/graphIdentity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"graphIdentity.d.ts","sourceRoot":"","sources":["../../src/lib/graphIdentity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAIH,gFAAgF;AAChF,eAAO,MAAM,YAAY,qBAAqB,CAAA;AAC9C,eAAO,MAAM,WAAW,oBAAoB,CAAA;AAC5C,eAAO,MAAM,aAAa,sBAAsB,CAAA;AAChD,eAAO,MAAM,SAAS,kBAAkB,CAAA;AAaxC,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,6BAA6B;IAC7B,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;CACd;AAOD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,aAAa,CAmBlF;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAO3E;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,CAGlE;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAO/E"}

package/dist/lib/graphIdentity.js

@@ -0,0 +1,120 @@
+/**
+ * Graph identity for spawned agents.
+ *
+ * A multi-agent run is a graph: a lead agent spawns workers, workers spawn their
+ * own. The proxy can only reason about that shape — fan-out, recursion depth,
+ * orphaned children, fleet spend — if each request says which node it came from.
+ * Nothing set that. `identity_from_headers` read W3C `baggage` and `x-intutic-*`
+ * headers that only its own tests ever wrote, so `graph_id` always fell back to
+ * `session_id`, and the gate at `proxy.rs` (`node.graph_id == session_id` → "a
+ * graph of one") made the whole membership and spend block unreachable.
+ *
+ * # Why environment variables, and why a path prefix
+ *
+ * A spawned agent is a child *process*, and the one thing a child process
+ * inherits for free is the environment. So identity lives in env vars, and each
+ * `intutic exec` derives its own position from what it inherited: same graph, new
+ * node, parent = whoever spawned me, depth + 1. Nesting `intutic exec` inside an
+ * agent is precisely the "an agent spawned an agent" event, so no harness needs
+ * to cooperate for the shape to be recorded.
+ *
+ * Getting that identity onto the wire is the harder half. Env vars are not HTTP
+ * headers, and almost no harness lets you add headers — Claude Code has
+ * `ANTHROPIC_CUSTOM_HEADERS` and the rest of the ecosystem has nothing. What they
+ * all accept is a base URL, which they append their own path to. So identity
+ * rides in the base URL as `/_i/{graph}/{node}/{parent}/{depth}`, which the proxy
+ * strips before anything else looks at the path.
+ *
+ * # Trust
+ *
+ * Client-supplied and unverifiable, exactly like the headers it complements. It
+ * describes shape for observability and self-consistency, and is never an input
+ * to authorisation. The proxy clamps depth so a caller cannot fake a recursion
+ * breach.
+ *
+ * @module
+ */
+import { randomBytes } from 'node:crypto';
+/** Set on every process under a governed run; absent means this is the root. */
+export const ENV_GRAPH_ID = 'INTUTIC_GRAPH_ID';
+export const ENV_NODE_ID = 'INTUTIC_NODE_ID';
+export const ENV_PARENT_ID = 'INTUTIC_PARENT_ID';
+export const ENV_DEPTH = 'INTUTIC_DEPTH';
+/** Stands in for "no parent" — an empty path segment would collapse. */
+const EMPTY_SEGMENT = '-';
+/**
+ * Depth beyond which we stop counting.
+ *
+ * Matches the proxy's clamp. A graph this deep is a runaway, which is a thing to
+ * detect rather than a number to keep incrementing.
+ */
+const MAX_DEPTH = 1024;
+/** Short, URL-safe, and readable in a log line. */
+function newIdentifier(prefix) {
+    return `${prefix}${randomBytes(8).toString('hex')}`;
+}
+/**
+ * Work out this process's position from the environment it inherited.
+ *
+ * With no inherited identity this process is a root: it starts a new graph and is
+ * its own first node. With one, it is a child of whatever spawned it.
+ */
+export function deriveIdentity(env = process.env) {
+    const inheritedGraph = env[ENV_GRAPH_ID];
+    const inheritedNode = env[ENV_NODE_ID];
+    if (!inheritedGraph || !inheritedNode) {
+        const graphId = newIdentifier('g_');
+        return { graphId, nodeId: newIdentifier('n_'), parentId: '', depth: 0 };
+    }
+    const inheritedDepth = Number.parseInt(env[ENV_DEPTH] ?? '0', 10);
+    const depth = Number.isFinite(inheritedDepth) ? Math.max(0, inheritedDepth) : 0;
+    return {
+        graphId: inheritedGraph,
+        nodeId: newIdentifier('n_'),
+        // The process that spawned us is our parent, by definition.
+        parentId: inheritedNode,
+        depth: Math.min(depth + 1, MAX_DEPTH),
+    };
+}
+/**
+ * The env a child process should inherit.
+ *
+ * Merged into the child's environment so that if it in turn runs `intutic exec`,
+ * `deriveIdentity` sees this node as its parent and the chain continues without
+ * anyone tracking it centrally.
+ */
+export function identityEnv(identity) {
+    return {
+        [ENV_GRAPH_ID]: identity.graphId,
+        [ENV_NODE_ID]: identity.nodeId,
+        [ENV_PARENT_ID]: identity.parentId,
+        [ENV_DEPTH]: String(identity.depth),
+    };
+}
+/**
+ * The base-URL prefix carrying this identity.
+ *
+ * Appended to the proxy host so every harness sends it without knowing it exists:
+ * they concatenate their own path onto the base URL, and the proxy strips the
+ * prefix back off before routing.
+ */
+export function identityPathPrefix(identity) {
+    const seg = (value) => (value === '' ? EMPTY_SEGMENT : encodeURIComponent(value));
+    return `/_i/${seg(identity.graphId)}/${seg(identity.nodeId)}/${seg(identity.parentId)}/${identity.depth}`;
+}
+/**
+ * Headers for harnesses that can send them.
+ *
+ * Redundant with the path prefix and deliberately so — the proxy prefers headers,
+ * and a harness with real OpenTelemetry instrumentation will already be emitting
+ * `baggage` that supersedes both.
+ */
+export function identityHeaders(identity) {
+    return {
+        'X-Intutic-Graph-Id': identity.graphId,
+        'X-Intutic-Node-Id': identity.nodeId,
+        'X-Intutic-Parent-Session': identity.parentId,
+        'X-Intutic-Depth': String(identity.depth),
+    };
+}
+//# sourceMappingURL=graphIdentity.js.map

package/dist/lib/graphIdentity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graphIdentity.js","sourceRoot":"","sources":["../../src/lib/graphIdentity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAEzC,gFAAgF;AAChF,MAAM,CAAC,MAAM,YAAY,GAAG,kBAAkB,CAAA;AAC9C,MAAM,CAAC,MAAM,WAAW,GAAG,iBAAiB,CAAA;AAC5C,MAAM,CAAC,MAAM,aAAa,GAAG,mBAAmB,CAAA;AAChD,MAAM,CAAC,MAAM,SAAS,GAAG,eAAe,CAAA;AAExC,wEAAwE;AACxE,MAAM,aAAa,GAAG,GAAG,CAAA;AAEzB;;;;;GAKG;AACH,MAAM,SAAS,GAAG,IAAI,CAAA;AAUtB,mDAAmD;AACnD,SAAS,aAAa,CAAC,MAAc;IACnC,OAAO,GAAG,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAA;AACrD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,MAAyB,OAAO,CAAC,GAAG;IACjE,MAAM,cAAc,GAAG,GAAG,CAAC,YAAY,CAAC,CAAA;IACxC,MAAM,aAAa,GAAG,GAAG,CAAC,WAAW,CAAC,CAAA;IAEtC,IAAI,CAAC,cAAc,IAAI,CAAC,aAAa,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;QACnC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAA;IACzE,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAA;IACjE,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAE/E,OAAO;QACL,OAAO,EAAE,cAAc;QACvB,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC;QAC3B,4DAA4D;QAC5D,QAAQ,EAAE,aAAa;QACvB,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,EAAE,SAAS,CAAC;KACtC,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,QAAuB;IACjD,OAAO;QACL,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC,OAAO;QAChC,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM;QAC9B,CAAC,aAAa,CAAC,EAAE,QAAQ,CAAC,QAAQ;QAClC,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;KACpC,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAuB;IACxD,MAAM,GAAG,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAA;IACzF,OAAO,OAAO,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAA;AAC3G,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,QAAuB;IACrD,OAAO;QACL,oBAAoB,EAAE,QAAQ,CAAC,OAAO;QACtC,mBAAmB,EAAE,QAAQ,CAAC,MAAM;QACpC,0BAA0B,EAAE,QAAQ,CAAC,QAAQ;QAC7C,iBAAiB,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;KAC1C,CAAA;AACH,CAAC"}