@open-agent-toolkit/cli 0.2.65 → 0.2.67

package/dist/commands/docs/index-generate/index.js

@@ -94,6 +94,28 @@ function isInside(parent, candidate) {
  * dangling-link hops resolved below.
  */
 const MAX_SYMLINK_HOPS = 32;
+/**
+ * The hop-cap refusal, addressed to whoever owns the offending path.
+ *
+ * A derived docs directory is unusable path *configuration*, so it takes
+ * `CONFIGURATION_EXIT_CODE` and the `documentation.root` repair, exactly like
+ * `missingRootError` and the "not a directory" refusal. An explicitly supplied
+ * path stays an actionable flag error.
+ */
+function hopCapError(context) {
+    const preamble = `Refusing to resolve ${context.origin}: its symlink chain exceeds ` +
+        `${MAX_SYMLINK_HOPS} hops. `;
+    if (context.role.kind === 'docs-dir') {
+        if (context.role.derived) {
+            return new CliError(`${preamble}The docs directory is derived from \`documentation.root\` ` +
+                'in .oat/config.json. Repair it with ' +
+                '`oat config set documentation.root <path>`, or pass --docs-dir with a ' +
+                'path that is not a deep symlink chain.', CONFIGURATION_EXIT_CODE);
+        }
+        return new CliError(`${preamble}Pass --docs-dir with a path that is not a deep symlink chain.`, REFUSAL_EXIT_CODE);
+    }
+    return new CliError(`${preamble}Pass --output with a path that is not a deep symlink chain.`, REFUSAL_EXIT_CODE);
+}
 /**
  * Absolute path with symlinks resolved, so a symlinked parent cannot smuggle a
  * write into a protected tree past the lexical containment checks.
@@ -105,7 +127,7 @@ const MAX_SYMLINK_HOPS = 32;
  * relative link destination is joined to the parent's *real* location rather
  * than its lexical spelling.
  */
-async function canonicalize(target, deps, linkHops = 0) {
+async function canonicalize(target, deps, context, linkHops = 0) {
     const absolute = resolve(target);
     try {
         return await deps.realpath(absolute);
@@ -120,7 +142,7 @@ async function canonicalize(target, deps, linkHops = 0) {
     if (parent === absolute) {
         return absolute;
     }
-    const canonicalParent = await canonicalize(parent, deps, linkHops);
+    const canonicalParent = await canonicalize(parent, deps, context, linkHops);
     const candidate = join(canonicalParent, basename(absolute));
     const linkTarget = await deps.readLinkIfSymlink(candidate);
     if (linkTarget === null) {
@@ -128,10 +150,9 @@ async function canonicalize(target, deps, linkHops = 0) {
     }
     if (linkHops >= MAX_SYMLINK_HOPS) {
         // Fail closed: falling through would hand the writer an unresolved link.
-        throw new CliError(`Refusing to resolve ${target}: its symlink chain exceeds ${MAX_SYMLINK_HOPS} hops. ` +
-            'Pass --output with a path that is not a deep symlink chain.', REFUSAL_EXIT_CODE);
+        throw hopCapError(context);
     }
-    return canonicalize(resolve(canonicalParent, linkTarget), deps, linkHops + 1);
+    return canonicalize(resolve(canonicalParent, linkTarget), deps, context, linkHops + 1);
 }
 function trimmed(value) {
     const trimmedValue = value?.trim();
@@ -229,9 +250,9 @@ async function resolveIndexGeneratePaths(context, options, deps) {
     };
 }
 /** `canonicalize`, but an unresolvable path yields null instead of throwing. */
-async function canonicalizeOrNull(target, deps) {
+async function canonicalizeOrNull(target, deps, role) {
     try {
-        return await canonicalize(target, deps);
+        return await canonicalize(target, deps, { role, origin: target });
     }
     catch {
         return null;
@@ -242,20 +263,34 @@ async function canonicalizeIndexGeneratePaths(resolved, deps) {
     const lexicalDocumentationConfig = documentationConfigValue
         ? resolve(resolved.repoRoot, documentationConfigValue)
         : null;
+    // Resolution order is load-bearing: the docs directory is canonicalized
+    // first, and the safety checks below compare against its canonical form.
     return {
-        docsDir: await canonicalize(resolved.docsDir, deps),
-        outputPath: await canonicalize(resolved.outputPath, deps),
+        docsDir: await canonicalize(resolved.docsDir, deps, {
+            role: {
+                kind: 'docs-dir',
+                derived: resolved.docsDirSource !== 'flag',
+            },
+            origin: resolved.docsDir,
+        }),
+        outputPath: await canonicalize(resolved.outputPath, deps, {
+            role: { kind: 'output' },
+            origin: resolved.outputPath,
+        }),
         // An unusable configured root only makes the config write ineligible; it
         // must not fail a run whose paths were both supplied explicitly.
         configuredRoot: resolved.configuredRoot
-            ? await canonicalizeOrNull(resolved.configuredRoot, deps)
+            ? await canonicalizeOrNull(resolved.configuredRoot, deps, {
+                kind: 'other',
+            })
             : null,
         lexicalDocumentationConfig,
         // Falling back to the lexical path keeps the refusal guard intact when the
         // configured tool config cannot be canonicalized.
         documentationConfig: lexicalDocumentationConfig
-            ? ((await canonicalizeOrNull(lexicalDocumentationConfig, deps)) ??
-                lexicalDocumentationConfig)
+            ? ((await canonicalizeOrNull(lexicalDocumentationConfig, deps, {
+                kind: 'other',
+            })) ?? lexicalDocumentationConfig)
             : null,
     };
 }
@@ -364,11 +399,32 @@ async function runIndexGenerate(context, options, deps) {
             entriesGenerated: entries.length,
             docsDir,
             docsDirSource: resolved.docsDirSource,
+            // Exactly the list handed to `deps.generateIndex` above, so a missing
+            // page can be attributed without re-deriving the merge.
+            excludes: resolved.excludes,
             outputPath,
         });
         return;
     }
     context.logger.info(`Generated index with ${entries.length} entries from ${docsDir} → ${outputPath}`);
+    // A bare `0 entries` reads identically for an empty tree, a wrong
+    // `--docs-dir`, and exclusions that swallowed everything. Say which of those
+    // the operator should look at. This reports; it never changes the exit code
+    // or the written file.
+    //
+    // The wording is deliberately observational. This function sees indexed
+    // entries, never pattern matches, so it cannot know an exclusion actually
+    // matched anything: an empty tree with a pattern that matched nothing lands
+    // here too, and blaming the exclusions outright would be false in exactly
+    // that case.
+    if (entries.length === 0) {
+        context.logger.info(resolved.excludes.length > 0
+            ? `No pages were indexed, with ${resolved.excludes.length} exclusion ` +
+                `pattern${resolved.excludes.length === 1 ? '' : 's'} active ` +
+                `(${resolved.excludes.join(', ')}). Check whether ` +
+                '`documentation.excludes` or --exclude is hiding the pages you expect.'
+            : `No pages were indexed: ${docsDir} contained no indexable pages.`);
+    }
 }
 async function runIndexGenerateCommand(context, options, dependencies) {
     try {

package/dist/commands/docs/init/index.d.ts

@@ -21,6 +21,17 @@ interface DocsInitDependencies {
     readOatConfig: (repoRoot: string) => Promise<OatConfig>;
     confirmAction: (message: string, ctx: PromptContext) => Promise<boolean>;
 }
+/**
+ * The AGENTS.md `## Documentation` section for a freshly scaffolded app.
+ *
+ * Each bullet names the file that owns one role, matching what
+ * `buildDocumentationConfig` seeds into `documentation.*`. A Fumadocs app has
+ * two index files -- the authored source page under `docs/` and the app-root
+ * manifest `oat docs generate-index` writes -- and `documentation.index` names
+ * the second, so a single "Index file" bullet pointing at the first documented
+ * a file the config does not name. MkDocs has no generated manifest: its
+ * `documentation.index` is the nav YAML the Config bullet already names.
+ */
 export declare function buildDocsSectionBody(options: DocsInitResolvedOptions): string;
 export declare function createDocsInitCommand(overrides?: Partial<DocsInitDependencies>): Command;
 export {};

package/dist/commands/docs/init/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/commands/docs/init/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,KAAK,mBAAmB,EAIzB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAGL,KAAK,aAAa,EAClB,KAAK,YAAY,EAElB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EACL,KAAK,SAAS,EAGf,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,OAAO,EAAU,MAAM,WAAW,CAAC;AAG5C,OAAO,EAIL,KAAK,uBAAuB,EAK7B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAEL,KAAK,sBAAsB,EAC5B,MAAM,gBAAgB,CAAC;AAexB,UAAU,uBAAuB;IAC/B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,sBAAsB,CAAC;CAC1C;AAED,UAAU,oBAAoB;IAC5B,mBAAmB,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,cAAc,CAAC;IAChE,iBAAiB,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACzC,eAAe,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,GAAG,gBAAgB,CAAC,CAAC;IAC9E,gBAAgB,EAAE,CAChB,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,GAAG,EAAE,aAAa,KACf,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC5B,eAAe,EAAE,CAAC,CAAC,SAAS,MAAM,EAChC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,EAC1B,GAAG,EAAE,aAAa,KACf,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACvB,WAAW,EAAE,CACX,OAAO,EAAE,cAAc,EACvB,OAAO,EAAE,uBAAuB,EAChC,UAAU,EAAE,MAAM,KACf,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAC;IAC7C,qBAAqB,EAAE,CACrB,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,KACT,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAClC,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IACxD,aAAa,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,aAAa,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1E;AAqGD,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,uBAAuB,GAAG,MAAM,CAc7E;AA6JD,wBAAgB,qBAAqB,CACnC,SAAS,GAAE,OAAO,CAAC,oBAAoB,CAAM,GAC5C,OAAO,CA6CT"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/commands/docs/init/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,KAAK,mBAAmB,EAIzB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAGL,KAAK,aAAa,EAClB,KAAK,YAAY,EAElB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EACL,KAAK,SAAS,EAGf,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,OAAO,EAAU,MAAM,WAAW,CAAC;AAG5C,OAAO,EAIL,KAAK,uBAAuB,EAK7B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAEL,KAAK,sBAAsB,EAC5B,MAAM,gBAAgB,CAAC;AAexB,UAAU,uBAAuB;IAC/B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,sBAAsB,CAAC;CAC1C;AAED,UAAU,oBAAoB;IAC5B,mBAAmB,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,cAAc,CAAC;IAChE,iBAAiB,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACzC,eAAe,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,GAAG,gBAAgB,CAAC,CAAC;IAC9E,gBAAgB,EAAE,CAChB,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,GAAG,EAAE,aAAa,KACf,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC5B,eAAe,EAAE,CAAC,CAAC,SAAS,MAAM,EAChC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,EAC1B,GAAG,EAAE,aAAa,KACf,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACvB,WAAW,EAAE,CACX,OAAO,EAAE,cAAc,EACvB,OAAO,EAAE,uBAAuB,EAChC,UAAU,EAAE,MAAM,KACf,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAC;IAC7C,qBAAqB,EAAE,CACrB,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,KACT,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAClC,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IACxD,aAAa,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,aAAa,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1E;AAqGD;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,uBAAuB,GAAG,MAAM,CAuB7E;AA6JD,wBAAgB,qBAAqB,CACnC,SAAS,GAAE,OAAO,CAAC,oBAAoB,CAAM,GAC5C,OAAO,CA6CT"}

package/dist/commands/docs/init/index.js

@@ -1,3 +1,4 @@
+import { join } from 'node:path';
 import { buildCommandContext, } from '../../../app/command-context.js';
 import { formatAgentsMdGuidanceResult, formatAgentsMdMutationFailure, upsertAgentsMdSection, } from '../../shared/agents-md.js';
 import { confirmAction, inputWithDefault, selectWithAbort, } from '../../shared/shared.prompts.js';
@@ -90,14 +91,31 @@ const FRAMEWORK_LABELS = {
     fumadocs: 'Fumadocs (Next.js + MDX)',
     mkdocs: 'MkDocs (Python)',
 };
+/**
+ * The AGENTS.md `## Documentation` section for a freshly scaffolded app.
+ *
+ * Each bullet names the file that owns one role, matching what
+ * `buildDocumentationConfig` seeds into `documentation.*`. A Fumadocs app has
+ * two index files -- the authored source page under `docs/` and the app-root
+ * manifest `oat docs generate-index` writes -- and `documentation.index` names
+ * the second, so a single "Index file" bullet pointing at the first documented
+ * a file the config does not name. MkDocs has no generated manifest: its
+ * `documentation.index` is the nav YAML the Config bullet already names.
+ */
 export function buildDocsSectionBody(options) {
     const lines = [
         '## Documentation',
         '',
         `- **Docs root:** \`${options.targetDir}\``,
         `- **Framework:** ${FRAMEWORK_LABELS[options.framework]}`,
-        `- **Index file:** \`${options.targetDir}/docs/index.md\``,
+        `- **Docs source index:** \`${options.targetDir}/docs/index.md\``,
     ];
+    if (options.framework === 'fumadocs') {
+        // Derived exactly like the `documentation.index` seed in `./scaffold`, so
+        // the printed path and the recorded path cannot drift apart.
+        lines.push(`- **Generated index:** \`${join(options.targetDir, 'index.md')}\` — ` +
+            'regenerated by `oat docs generate-index`; do not hand-edit.');
+    }
     if (options.framework === 'mkdocs') {
         lines.push(`- **Config:** \`${options.targetDir}/mkdocs.yml\``);
     }

package/dist/commands/gate/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/gate/index.ts"],"names":[],"mappings":"AAaA,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,gBAAgB,EAKhB,KAAK,qBAAqB,EAE3B,MAAM,8BAA8B,CAAC;AAYtC,OAAO,EAWL,KAAK,UAAU,EAIf,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,UAAU,EAEhB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAOL,KAAK,cAAc,EACpB,MAAM,iBAAiB,CAAC;AAWzB,OAAO,EAEL,KAAK,WAAW,EACjB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EAExB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,OAAO,EACL,uBAAuB,EAExB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EACpB,oBAAoB,EACpB,wBAAwB,EAEzB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACtB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,sBAAsB,EAIvB,MAAM,kBAAkB,CAAC;AAG1B,UAAU,uBAAuB;IAC/B,mBAAmB,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,cAAc,CAAC;IAChE,kBAAkB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IACxD,cAAc,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE,kBAAkB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IAClE,mBAAmB,EAAE,CACnB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,cAAc,KACnB,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,cAAc,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/D,eAAe,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9E,sBAAsB,EAAE,CACtB,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,EACrB,GAAG,EAAE,MAAM,CAAC,UAAU,KACnB,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7B,uBAAuB,EAAE,OAAO,uBAAuB,CAAC;IACxD,wBAAwB,EAAE,OAAO,wBAAwB,CAAC;IAC1D,oBAAoB,EAAE,OAAO,oBAAoB,CAAC;IAClD,wBAAwB,EAAE,OAAO,wBAAwB,CAAC;IAC1D,oBAAoB,EAAE,OAAO,oBAAoB,CAAC;IAClD,UAAU,EAAE,CACV,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,EAAE,iBAAiB,KACvB,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC/B,sBAAsB,EAAE,OAAO,sBAAsB,CAAC;IACtD,gBAAgB,EAAE,OAAO,gBAAgB,CAAC;IAC1C,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC;IAC9B,kBAAkB,EAAE,CAClB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,aAAa,EACrB,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,KAC5B,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB,mBAAmB,EAAE,CACnB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,KAC5B,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,0BAA0B,EAAE,CAC1B,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,qBAAqB,EAC9B,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,KAC5B,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,eAAe,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAC5C;AAuDD,KAAK,iBAAiB,GAClB,KAAK,GACL,QAAQ,GACR,QAAQ,GACR,KAAK,GACL,eAAe,GACf,SAAS,CAAC;AAOd,UAAU,aAAa;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,iBAAiB,CAAC;CACjC;AAcD,KAAK,kBAAkB,GAAG,aAAa,GAAG,cAAc,GAAG,MAAM,CAAC;AAClE,KAAK,qBAAqB,GACtB,kBAAkB,GAClB,4BAA4B,GAC5B,2CAA2C,GAC3C,kBAAkB,CAAC;AA4CvB,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,UAAU,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,WAAW,CAAC;IACpB,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAClC,uBAAuB,CAAC,EAAE,OAAO,CAAC;CACnC;AAED,UAAU,oBAAoB;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,kBAAkB,CAAC;IAC/B,UAAU,EAAE,kBAAkB,CAAC;IAC/B,MAAM,EAAE,WAAW,CAAC;IACpB,aAAa,EAAE,WAAW,EAAE,CAAC;IAC7B,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,kBAAkB,EAAE,OAAO,CAAC;IAC5B,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,mBAAmB,GAAG,aAAa,GAAG,SAAS,CAAC;CAC5E;AAED,UAAU,qBAAqB;IAC7B,KAAK,EAAE,kBAAkB,CAAC;IAC1B,QAAQ,EAAE,qBAAqB,CAAC;IAChC,QAAQ,EAAE;QACR,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,kBAAkB,CAAC;QAC/B,UAAU,EAAE,kBAAkB,CAAC;QAC/B,MAAM,EAAE,WAAW,CAAC;QACpB,MAAM,EAAE,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QACvC,aAAa,EAAE,WAAW,EAAE,CAAC;QAC7B,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;QAC9B,sBAAsB,CAAC,EAAE,MAAM,CAAC;KACjC,CAAC;IACF,QAAQ,EAAE;QACR,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,WAAW,CAAC;QACpB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAk2CD,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,EAC9C,cAAc,EAAE,MAAM,EACtB,KAAK,EAAE,kBAAkB,EACzB,gBAAgB,CAAC,EAAE,oBAAoB,GACtC,kBAAkB,GAAG,IAAI,CAS3B;AA4xFD,wBAAgB,iBAAiB,CAC/B,SAAS,GAAE,OAAO,CAAC,uBAAuB,CAAM,GAC/C,OAAO,CAsOT"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/gate/index.ts"],"names":[],"mappings":"AAaA,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,gBAAgB,EAKhB,KAAK,qBAAqB,EAE3B,MAAM,8BAA8B,CAAC;AAYtC,OAAO,EAWL,KAAK,UAAU,EAIf,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,UAAU,EAEhB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAOL,KAAK,cAAc,EACpB,MAAM,iBAAiB,CAAC;AAWzB,OAAO,EAEL,KAAK,WAAW,EACjB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EAExB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,OAAO,EACL,uBAAuB,EAExB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EACpB,oBAAoB,EACpB,wBAAwB,EAEzB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACtB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,sBAAsB,EAIvB,MAAM,kBAAkB,CAAC;AAG1B,UAAU,uBAAuB;IAC/B,mBAAmB,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,cAAc,CAAC;IAChE,kBAAkB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IACxD,cAAc,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE,kBAAkB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IAClE,mBAAmB,EAAE,CACnB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,cAAc,KACnB,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,cAAc,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/D,eAAe,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9E,sBAAsB,EAAE,CACtB,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,EACrB,GAAG,EAAE,MAAM,CAAC,UAAU,KACnB,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7B,uBAAuB,EAAE,OAAO,uBAAuB,CAAC;IACxD,wBAAwB,EAAE,OAAO,wBAAwB,CAAC;IAC1D,oBAAoB,EAAE,OAAO,oBAAoB,CAAC;IAClD,wBAAwB,EAAE,OAAO,wBAAwB,CAAC;IAC1D,oBAAoB,EAAE,OAAO,oBAAoB,CAAC;IAClD,UAAU,EAAE,CACV,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,EAAE,iBAAiB,KACvB,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC/B,sBAAsB,EAAE,OAAO,sBAAsB,CAAC;IACtD,gBAAgB,EAAE,OAAO,gBAAgB,CAAC;IAC1C,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC;IAC9B,kBAAkB,EAAE,CAClB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,aAAa,EACrB,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,KAC5B,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB,mBAAmB,EAAE,CACnB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,KAC5B,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,0BAA0B,EAAE,CAC1B,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,qBAAqB,EAC9B,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,KAC5B,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,eAAe,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAC5C;AAuDD,KAAK,iBAAiB,GAClB,KAAK,GACL,QAAQ,GACR,QAAQ,GACR,KAAK,GACL,eAAe,GACf,SAAS,CAAC;AAOd,UAAU,aAAa;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,iBAAiB,CAAC;CACjC;AAcD,KAAK,kBAAkB,GAAG,aAAa,GAAG,cAAc,GAAG,MAAM,CAAC;AAClE,KAAK,qBAAqB,GACtB,kBAAkB,GAClB,4BAA4B,GAC5B,2CAA2C,GAC3C,kBAAkB,CAAC;AA4CvB,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,UAAU,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,WAAW,CAAC;IACpB,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAClC,uBAAuB,CAAC,EAAE,OAAO,CAAC;CACnC;AAED,UAAU,oBAAoB;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,kBAAkB,CAAC;IAC/B,UAAU,EAAE,kBAAkB,CAAC;IAC/B,MAAM,EAAE,WAAW,CAAC;IACpB,aAAa,EAAE,WAAW,EAAE,CAAC;IAC7B,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,kBAAkB,EAAE,OAAO,CAAC;IAC5B,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,mBAAmB,GAAG,aAAa,GAAG,SAAS,CAAC;CAC5E;AAED,UAAU,qBAAqB;IAC7B,KAAK,EAAE,kBAAkB,CAAC;IAC1B,QAAQ,EAAE,qBAAqB,CAAC;IAChC,QAAQ,EAAE;QACR,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,kBAAkB,CAAC;QAC/B,UAAU,EAAE,kBAAkB,CAAC;QAC/B,MAAM,EAAE,WAAW,CAAC;QACpB,MAAM,EAAE,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QACvC,aAAa,EAAE,WAAW,EAAE,CAAC;QAC7B,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;QAC9B,sBAAsB,CAAC,EAAE,MAAM,CAAC;KACjC,CAAC;IACF,QAAQ,EAAE;QACR,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,WAAW,CAAC;QACpB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAs2CD,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,EAC9C,cAAc,EAAE,MAAM,EACtB,KAAK,EAAE,kBAAkB,EACzB,gBAAgB,CAAC,EAAE,oBAAoB,GACtC,kBAAkB,GAAG,IAAI,CAS3B;AA+xFD,wBAAgB,iBAAiB,CAC/B,SAAS,GAAE,OAAO,CAAC,uBAAuB,CAAM,GAC/C,OAAO,CAsOT"}

package/dist/commands/gate/index.js

@@ -9,6 +9,7 @@ import { getFrontmatterBlock, parseFrontmatterScalarFields, parseGeneratedTime,
 import { readGlobalOptions } from '../shared/shared.utils.js';
 import { parseJsonConfig } from '../../config/json.js';
 import { BUILTIN_EXEC_TARGETS, MAX_GATE_TIMEOUT_MS, MIN_GATE_TIMEOUT_MS, isValidGateTimeoutMs, readOatConfig, readOatLocalConfig, readUserConfig, writeOatConfig, writeOatLocalConfig, writeUserConfig, } from '../../config/oat-config.js';
+import { getOwnKey } from '../../config/own-keys.js';
 import { resolveEffectiveConfig, resolveExecTargetViews, resolveExecTargets, resolveGate, resolveGateWithSource, } from '../../config/resolve.js';
 import { dirExists, fileExists } from '../../fs/io.js';
 import { normalizeToPosixPath, resolveProjectRoot, validateRealPathWithinScope, } from '../../fs/paths.js';
@@ -634,7 +635,11 @@ function unsetSkillGate(config, skillName) {
 }
 function setExecTarget(config, targetId, target) {
     return updateWorkflowGates(config, (gates) => {
-        const existing = gates.execTargets?.[targetId];
+        // `targetId` comes from `oat gate target set <id>`. Without the own-key
+        // guard, an id of `__proto__` reads `Object.prototype`, which is truthy,
+        // so this takes the merge branch and silently omits the `priority: 0`
+        // default the create branch applies.
+        const existing = getOwnKey(gates.execTargets ?? {}, targetId);
         const value = target === null
             ? target
             : existing === null || existing === undefined
@@ -1034,7 +1039,10 @@ async function selectAvailableExecTarget(registry, currentRuntime, avoid, produc
 async function resolveSelectedExecTarget(targets, options, producerIdentity, context, dependencies) {
     const explicitTarget = options.target?.trim();
     if (explicitTarget) {
-        const target = targets[explicitTarget];
+        // `--target <id>` is a free-form user string. Without the own-key read an
+        // id of `__proto__` or `constructor` returns a truthy inherited member and
+        // slips past the unknown-target rejection below.
+        const target = getOwnKey(targets, explicitTarget);
         if (!target) {
             throw new Error(`Unknown exec target "${explicitTarget}".`);
         }

package/dist/commands/instructions/instructions.utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"instructions.utils.d.ts","sourceRoot":"","sources":["../../../src/commands/instructions/instructions.utils.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EACV,uBAAuB,EACvB,uBAAuB,EACvB,gBAAgB,EAChB,uBAAuB,EACvB,gBAAgB,EAChB,4BAA4B,EAC5B,uBAAuB,EACvB,4BAA4B,EAE5B,mBAAmB,EACpB,MAAM,sBAAsB,CAAC;AAE9B,eAAO,MAAM,uBAAuB,iBAAiB,CAAC;AACtD,eAAO,MAAM,iCAAiC,EAAE,uBACrC,CAAC;AAcZ,UAAU,4BAA4B;IACpC,IAAI,EAAE,gBAAgB,CAAC;IACvB,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B,OAAO,EAAE,uBAAuB,EAAE,CAAC;IACnC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC;IAClC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B;AAiCD,wBAAgB,8BAA8B,CAC5C,QAAQ,CAAC,EAAE,uBAAuB,GACjC,uBAAuB,CAEzB;AA2ED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,sBAAsB,CACpC,aAAa,GAAE,SAAS,MAAM,EAAO,GACpC,MAAM,EAAE,CAyBV;AAsDD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAsB,iCAAiC,CACrD,QAAQ,EAAE,MAAM,EAChB,SAAS,GAAE,OAAO,CAAC,4BAA4B,CAAM,GACpD,OAAO,CAAC,4BAA4B,CAAC,CAuEvC;AAgID,wBAAsB,oBAAoB,CACxC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,uBAA4B,EACrC,SAAS,GAAE,OAAO,CAAC,4BAA4B,CAAM,GACpD,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAkO7B;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,gBAAgB,EAAE,EAC3B,OAAO,EAAE,uBAAuB,EAAE,GACjC,mBAAmB,CAoBrB;AAgBD,wBAAgB,wBAAwB,CAAC,EACvC,IAAI,EACJ,OAAO,EACP,OAAO,EACP,aAAa,EACb,sBAAsB,EACtB,iBAAiB,GAClB,EAAE,4BAA4B,GAAG,uBAAuB,CAgCxD;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,uBAAuB,EAChC,QAAQ,CAAC,EAAE,MAAM,GAChB,MAAM,CAmCR"}
+{"version":3,"file":"instructions.utils.d.ts","sourceRoot":"","sources":["../../../src/commands/instructions/instructions.utils.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EACV,uBAAuB,EACvB,uBAAuB,EACvB,gBAAgB,EAChB,uBAAuB,EACvB,gBAAgB,EAChB,4BAA4B,EAC5B,uBAAuB,EACvB,4BAA4B,EAE5B,mBAAmB,EACpB,MAAM,sBAAsB,CAAC;AAE9B,eAAO,MAAM,uBAAuB,iBAAiB,CAAC;AACtD,eAAO,MAAM,iCAAiC,EAAE,uBACrC,CAAC;AAcZ,UAAU,4BAA4B;IACpC,IAAI,EAAE,gBAAgB,CAAC;IACvB,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B,OAAO,EAAE,uBAAuB,EAAE,CAAC;IACnC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC;IAClC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B;AAiCD,wBAAgB,8BAA8B,CAC5C,QAAQ,CAAC,EAAE,uBAAuB,GACjC,uBAAuB,CAEzB;AA2ED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,sBAAsB,CACpC,aAAa,GAAE,SAAS,MAAM,EAAO,GACpC,MAAM,EAAE,CAyBV;AA0FD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAsB,iCAAiC,CACrD,QAAQ,EAAE,MAAM,EAChB,SAAS,GAAE,OAAO,CAAC,4BAA4B,CAAM,GACpD,OAAO,CAAC,4BAA4B,CAAC,CAgGvC;AAgID,wBAAsB,oBAAoB,CACxC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,uBAA4B,EACrC,SAAS,GAAE,OAAO,CAAC,4BAA4B,CAAM,GACpD,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAkO7B;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,gBAAgB,EAAE,EAC3B,OAAO,EAAE,uBAAuB,EAAE,GACjC,mBAAmB,CAoBrB;AAgBD,wBAAgB,wBAAwB,CAAC,EACvC,IAAI,EACJ,OAAO,EACP,OAAO,EACP,aAAa,EACb,sBAAsB,EACtB,iBAAiB,GAClB,EAAE,4BAA4B,GAAG,uBAAuB,CAgCxD;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,uBAAuB,EAChC,QAAQ,CAAC,EAAE,MAAM,GAChB,MAAM,CAmCR"}

package/dist/commands/instructions/instructions.utils.js

@@ -142,7 +142,7 @@ export function normalizeExcludedPaths(excludedPaths = []) {
 const UNEXCLUDABLE_PATHS = new Set([...ROOT_EXCLUDED_DIRECTORY_CARVE_INS].map(([directory, carveIn]) => `${directory}/${carveIn}`));
 /**
  * Whether `relativePath` names a real directory whose on-disk spelling matches
- * exactly.
+ * exactly, and when it does not, where it actually leads.
  *
  * The case check is the point. On a case-insensitive filesystem (APFS, NTFS) a
  * plain existence test accepts `Apps/Docsapp/docs` for a directory really named
@@ -150,24 +150,44 @@ const UNEXCLUDABLE_PATHS = new Set([...ROOT_EXCLUDED_DIRECTORY_CARVE_INS].map(([
  * which always yields the true on-disk case. The exclusion would then be
  * reported as applied while matching nothing — issue #238 recurring silently on
  * the default developer platform. Resolving through `realpath` and comparing
- * the result to the requested spelling catches that, and returns false for a
- * path that does not exist at all.
+ * the result to the requested spelling catches that, and reports a path that
+ * does not exist at all as `absent`.
  *
  * `repoRoot` is realpath'd too, so a symlinked checkout (`/tmp` on macOS) does
  * not make every entry look like a mismatch.
+ *
+ * `caseOnly` is derived from the resolved path rather than from the platform: a
+ * case-insensitive host is not the only way to land on a differing spelling,
+ * and a platform check would attach the case-sensitivity hint to symlinks,
+ * where it is false.
  */
-async function isCaseExactDirectory(dependencies, repoRoot, relativePath) {
+async function probeExclusionDirectory(dependencies, repoRoot, relativePath) {
     try {
         const realRoot = await dependencies.realpath(repoRoot);
         const candidate = join(realRoot, relativePath);
         if (!(await directoryExists(dependencies, candidate))) {
-            return false;
+            return { kind: 'absent' };
         }
         const realCandidate = await dependencies.realpath(candidate);
-        return toPosixPath(relative(realRoot, realCandidate)) === relativePath;
+        const resolved = toPosixPath(relative(realRoot, realCandidate));
+        if (resolved === relativePath) {
+            return { kind: 'exact' };
+        }
+        // A target outside the repository reads as a plain absolute path; a `../`
+        // chain relative to a root the operator never typed would be worse than no
+        // target at all. An empty `resolved` means the entry landed on the
+        // repository root itself, which is equally unhelpful as a relative path.
+        const resolvedInsideRepository = resolved.length > 0 && resolved !== '..' && !resolved.startsWith('../');
+        return {
+            kind: 'resolved-elsewhere',
+            resolvedPath: resolvedInsideRepository
+                ? resolved
+                : toPosixPath(realCandidate),
+            caseOnly: resolved.toLowerCase() === relativePath.toLowerCase(),
+        };
     }
     catch {
-        return false;
+        return { kind: 'absent' };
     }
 }
 /**
@@ -244,11 +264,24 @@ export async function resolveInstructionPointerExcludes(repoRoot, overrides = {}
             warnings.push(`${source} entry ${JSON.stringify(normalizedPath)} has no effect: ${normalizedPath} is always scanned.`);
             continue;
         }
-        if (!(await isCaseExactDirectory(dependencies, repoRoot, normalizedPath))) {
+        const probe = await probeExclusionDirectory(dependencies, repoRoot, normalizedPath);
+        if (probe.kind === 'exact') {
+            effective.push(normalizedPath);
+            continue;
+        }
+        if (probe.kind === 'absent') {
             warnings.push(`${source} entry ${JSON.stringify(normalizedPath)} matches no directory in this repository (matching is case-sensitive), so it excludes nothing.`);
             continue;
         }
-        effective.push(normalizedPath);
+        // Stated, not left implied by elimination, and without a catch-all
+        // `default` that would silently absorb a future variant: this annotation
+        // stops compiling the moment `ExclusionDirectoryProbe` grows a variant with
+        // no branch above — including one that happens to carry the same fields and
+        // would otherwise inherit a message written for a different situation.
+        const resolvedElsewhere = probe;
+        warnings.push(resolvedElsewhere.caseOnly
+            ? `${source} entry ${JSON.stringify(normalizedPath)} matches no directory in this repository (matching is case-sensitive; the directory on disk is ${JSON.stringify(resolvedElsewhere.resolvedPath)}), so it excludes nothing.`
+            : `${source} entry ${JSON.stringify(normalizedPath)} resolves to ${JSON.stringify(resolvedElsewhere.resolvedPath)}, not to itself, so the scan never matches it and it excludes nothing. Point the entry at the resolved directory, or remove the symlink.`);
     }
     return { configured, effective, warnings };
 }

package/dist/commands/internal/validate-skill-version-bumps.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validate-skill-version-bumps.d.ts","sourceRoot":"","sources":["../../../src/commands/internal/validate-skill-version-bumps.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAEL,KAAK,uCAAuC,EAC5C,KAAK,sCAAsC,EAC5C,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,UAAU,qCAAqC;IAC7C,mBAAmB,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,cAAc,CAAC;IAChE,gCAAgC,EAAE,CAChC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,uCAAuC,KAC7C,OAAO,CAAC,sCAAsC,CAAC,CAAC;CACtD;AA8ED,wBAAgB,sCAAsC,CACpD,SAAS,GAAE,OAAO,CAAC,qCAAqC,CAAM,GAC7D,OAAO,CAyBT"}
+{"version":3,"file":"validate-skill-version-bumps.d.ts","sourceRoot":"","sources":["../../../src/commands/internal/validate-skill-version-bumps.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAEL,KAAK,uCAAuC,EAC5C,KAAK,sCAAsC,EAC5C,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,UAAU,qCAAqC;IAC7C,mBAAmB,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,cAAc,CAAC;IAChE,gCAAgC,EAAE,CAChC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,uCAAuC,KAC7C,OAAO,CAAC,sCAAsC,CAAC,CAAC;CACtD;AAgFD,wBAAgB,sCAAsC,CACpD,SAAS,GAAE,OAAO,CAAC,qCAAqC,CAAM,GAC7D,OAAO,CAyBT"}

package/dist/commands/internal/validate-skill-version-bumps.js

@@ -16,7 +16,7 @@ function reportFindings(context, baseRef, result) {
         });
         return;
     }
-    context.logger.error('Canonical skill version validation failed:\n');
+    context.logger.error('Canonical skill and agent role version validation failed:\n');
     for (const finding of result.findings) {
         context.logger.error(`- ${finding.file}: ${finding.message}`);
     }
@@ -40,10 +40,10 @@ async function runValidateSkillVersionBumps(context, options, dependencies) {
         }
         else {
             if (result.validatedSkillCount === 0) {
-                context.logger.info(`OK: 0 canonical skills changed relative to ${options.baseRef} - nothing to validate`);
+                context.logger.info(`OK: 0 canonical skills or agent roles changed relative to ${options.baseRef} - nothing to validate`);
             }
             else {
-                context.logger.info(`OK: validated ${result.validatedSkillCount} changed canonical skill version bump checks against ${options.baseRef}`);
+                context.logger.info(`OK: validated ${result.validatedSkillCount} changed canonical skill and agent role version bump checks against ${options.baseRef}`);
             }
         }
         process.exitCode = 0;
@@ -65,8 +65,8 @@ export function createValidateSkillVersionBumpsCommand(overrides = {}) {
         ...overrides,
     };
     return new Command('validate-skill-version-bumps')
-        .description('Validate that changed canonical skills bump version relative to a git base ref')
-        .requiredOption('--base-ref <ref>', 'Git ref used as the comparison base for changed canonical skills')
+        .description('Validate that changed canonical skills and agent roles bump version relative to a git base ref')
+        .requiredOption('--base-ref <ref>', 'Git ref used as the comparison base for changed canonical skills and agent roles')
         .action(async (options, command) => {
         const context = dependencies.buildCommandContext(readGlobalOptions(command));
         await runValidateSkillVersionBumps(context, options, dependencies);

package/dist/commands/pjm/doctor.d.ts

@@ -1,8 +1,10 @@
 import type { DoctorCheck } from '../../ui/output.js';
 import { type PjmAdoption } from './adoption.js';
+import { type RemoteDoctorInput } from './remote/doctor.js';
 export interface PjmDoctorOptions {
     projectRoot?: string;
     adoption?: PjmAdoption;
+    remote?: RemoteDoctorInput;
 }
 export declare function runPjmDoctorChecks(repoRoot: string, options?: PjmDoctorOptions): Promise<DoctorCheck[]>;
 //# sourceMappingURL=doctor.d.ts.map

package/dist/commands/pjm/doctor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../../src/commands/pjm/doctor.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,OAAO,EAAsB,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AA4MlE,MAAM,WAAW,gBAAgB;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,WAAW,CAAC;CACxB;AAED,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,WAAW,EAAE,CAAC,CA2UxB"}
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../../src/commands/pjm/doctor.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,OAAO,EAAsB,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AAElE,OAAO,EAAyB,KAAK,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AA8MhF,MAAM,WAAW,gBAAgB;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,WAAW,CAAC;IACvB,MAAM,CAAC,EAAE,iBAAiB,CAAC;CAC5B;AAED,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,WAAW,EAAE,CAAC,CAmVxB"}

package/dist/commands/pjm/doctor.js

@@ -1,9 +1,15 @@
+import { execFile as execFileCallback } from 'node:child_process';
 import { access, readdir, readFile } from 'node:fs/promises';
-import { basename, dirname, join } from 'node:path';
+import { basename, dirname, isAbsolute, join, resolve } from 'node:path';
+import { promisify } from 'node:util';
 import { BACKLOG_ITEM_STATUSES, extractBacklogStatus, isTerminalBacklogStatus, isValidBacklogStatus, } from '../backlog/shared/item-status.js';
 import { getFrontmatterBlock } from '../shared/frontmatter.js';
+import { parseJsonConfig } from '../../config/json.js';
 import { resolvePjmAdoption } from './adoption.js';
 import { CANONICAL_REPO_REFERENCE_PATHS } from './init.js';
+import { runRemoteDoctorChecks } from './remote/doctor.js';
+import { resolveRemoteStorageLocations } from './remote/storage-locator.js';
+const execFileAsync = promisify(execFileCallback);
 const ALLOWED_TOP_LEVEL_DIRECTORIES = new Set([
     'pjm',
     'reference',
@@ -435,5 +441,69 @@ export async function runPjmDoctorChecks(repoRoot, options = {}) {
             ? undefined
             : 'Run `oat backlog archive <id>` to archive each completed item still under items/.',
     });
+    const defaultRemote = await resolveDefaultRemoteDoctorInput(projectRoot, repoRoot);
+    checks.push(...(await runRemoteDoctorChecks(options.remote ?? defaultRemote)));
     return checks;
 }
+async function resolveDefaultRemoteDoctorInput(projectRoot, pjmRepoRoot) {
+    const rawConfig = await readRawRemoteConfig(projectRoot);
+    const stateStorage = isRecord(rawConfig) &&
+        isRecord(rawConfig.storage) &&
+        rawConfig.storage.state === 'shared'
+        ? 'shared'
+        : 'local';
+    try {
+        const [{ stdout: commonDirOutput }, { stdout: originOutput }] = await Promise.all([
+            execFileAsync('git', ['rev-parse', '--git-common-dir'], {
+                cwd: projectRoot,
+            }),
+            execFileAsync('git', ['config', '--get', 'remote.origin.url'], {
+                cwd: projectRoot,
+            }).catch(() => ({ stdout: '' })),
+        ]);
+        const commonDir = commonDirOutput.trim();
+        const gitCommonDir = isAbsolute(commonDir)
+            ? commonDir
+            : resolve(projectRoot, commonDir);
+        const repositoryIdentity = originOutput.trim() || `local-repository:${resolve(projectRoot)}`;
+        const locations = resolveRemoteStorageLocations({
+            repoRoot: projectRoot,
+            gitCommonDir,
+            repositoryIdentity,
+            stateStorage,
+            target: { kind: 'backlog', scope: 'shared', path: null },
+        });
+        return {
+            portableBindingsDir: locations.portable.bindingsDir,
+            operationalBindingsDir: locations.operational.bindingsDir,
+            operationsDir: locations.operational.operationsDir,
+            policy: rawConfig,
+        };
+    }
+    catch {
+        const fallbackRoot = join(pjmRepoRoot, 'pjm', 'remote');
+        return {
+            portableBindingsDir: join(fallbackRoot, 'bindings'),
+            operationalBindingsDir: join(fallbackRoot, 'state', 'bindings'),
+            operationsDir: join(fallbackRoot, 'state', 'operations'),
+            policy: rawConfig,
+        };
+    }
+}
+async function readRawRemoteConfig(projectRoot) {
+    const content = await readIfExists(join(projectRoot, '.oat', 'config.json'));
+    if (!content)
+        return undefined;
+    try {
+        const config = parseJsonConfig(content, join(projectRoot, '.oat', 'config.json'));
+        if (!isRecord(config) || !isRecord(config.pjm))
+            return undefined;
+        return config.pjm.remote;
+    }
+    catch {
+        return undefined;
+    }
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}

package/dist/commands/pjm/index.d.ts

@@ -6,6 +6,7 @@ import { resolvePjmAdoption } from './adoption.js';
 import { runPjmDoctorChecks } from './doctor.js';
 import { initializeRepoReference } from './init.js';
 import { migratePjmRepo, readPjmMigrationPrompt } from './migrate.js';
+import { createPjmRemoteCommand } from './remote/index.js';
 interface PjmCommandDependencies {
     buildCommandContext: typeof buildCommandContext;
     resolveProjectRoot: typeof resolveProjectRoot;
@@ -15,6 +16,7 @@ interface PjmCommandDependencies {
     runPjmDoctorChecks: typeof runPjmDoctorChecks;
     migratePjmRepo: typeof migratePjmRepo;
     readPjmMigrationPrompt: typeof readPjmMigrationPrompt;
+    createPjmRemoteCommand: typeof createPjmRemoteCommand;
 }
 export declare function createPjmCommand(overrides?: Partial<PjmCommandDependencies>): Command;
 export {};

package/dist/commands/pjm/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/pjm/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAuB,MAAM,sBAAsB,CAAC;AAGhF,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAE/C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,EAAE,uBAAuB,EAA0B,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AAiBnE,UAAU,sBAAsB;IAC9B,mBAAmB,EAAE,OAAO,mBAAmB,CAAC;IAChD,kBAAkB,EAAE,OAAO,kBAAkB,CAAC;IAC9C,iBAAiB,EAAE,OAAO,iBAAiB,CAAC;IAC5C,kBAAkB,EAAE,OAAO,kBAAkB,CAAC;IAC9C,uBAAuB,EAAE,OAAO,uBAAuB,CAAC;IACxD,kBAAkB,EAAE,OAAO,kBAAkB,CAAC;IAC9C,cAAc,EAAE,OAAO,cAAc,CAAC;IACtC,sBAAsB,EAAE,OAAO,sBAAsB,CAAC;CACvD;AA6FD,wBAAgB,gBAAgB,CAC9B,SAAS,GAAE,OAAO,CAAC,sBAAsB,CAAM,GAC9C,OAAO,CAyLT"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/pjm/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAuB,MAAM,sBAAsB,CAAC;AAGhF,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAE/C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,EAAE,uBAAuB,EAA0B,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAiBxD,UAAU,sBAAsB;IAC9B,mBAAmB,EAAE,OAAO,mBAAmB,CAAC;IAChD,kBAAkB,EAAE,OAAO,kBAAkB,CAAC;IAC9C,iBAAiB,EAAE,OAAO,iBAAiB,CAAC;IAC5C,kBAAkB,EAAE,OAAO,kBAAkB,CAAC;IAC9C,uBAAuB,EAAE,OAAO,uBAAuB,CAAC;IACxD,kBAAkB,EAAE,OAAO,kBAAkB,CAAC;IAC9C,cAAc,EAAE,OAAO,cAAc,CAAC;IACtC,sBAAsB,EAAE,OAAO,sBAAsB,CAAC;IACtD,sBAAsB,EAAE,OAAO,sBAAsB,CAAC;CACvD;AA8FD,wBAAgB,gBAAgB,CAC9B,SAAS,GAAE,OAAO,CAAC,sBAAsB,CAAM,GAC9C,OAAO,CA0LT"}

package/dist/commands/pjm/index.js

@@ -10,6 +10,7 @@ import { resolvePjmAdoption } from './adoption.js';
 import { runPjmDoctorChecks } from './doctor.js';
 import { initializeRepoReference, INSTRUCTIONS_SYNC_HINT } from './init.js';
 import { migratePjmRepo, readPjmMigrationPrompt } from './migrate.js';
+import { createPjmRemoteCommand } from './remote/index.js';
 const DEFAULT_DEPENDENCIES = {
     buildCommandContext,
     resolveProjectRoot,
@@ -19,6 +20,7 @@ const DEFAULT_DEPENDENCIES = {
     runPjmDoctorChecks,
     migratePjmRepo,
     readPjmMigrationPrompt,
+    createPjmRemoteCommand,
 };
 async function resolveRepoRoot(context, projectRoot, configuredRoot) {
     if (configuredRoot) {
@@ -86,6 +88,7 @@ export function createPjmCommand(overrides = {}) {
         ...overrides,
     };
     const cmd = new Command('pjm').description('Manage project-management repo reference docs');
+    cmd.addCommand(dependencies.createPjmRemoteCommand());
     cmd
         .command('init')
         .description('Scaffold the canonical PJM repo reference surface')

package/dist/commands/pjm/remote/__integration__/lifecycle-harness.d.ts

@@ -0,0 +1,60 @@
+import { type ExternalActionEnvelope } from '../external-action.js';
+import { type OutboundProjection } from '../outbound-projection-safety.js';
+export type CrashPoint = 'after-planned' | 'after-attempt-started' | 'after-observation' | 'after-metadata' | 'after-state' | 'after-snapshot' | 'after-baseline' | 'after-association' | 'after-terminal' | null;
+export interface HarnessOperation {
+    operationId: string;
+    bindingId: string;
+    state: 'planned' | 'attempt-started' | 'verification-pending' | 'materializing' | 'verified' | 'uncertain' | 'blocked';
+    previewDigest: string;
+    approvalDigest: string;
+    capabilityEvidenceDigest: string;
+    action: ExternalActionEnvelope | null;
+    observationDigest: string | null;
+    materializationSteps: string[];
+}
+export declare class FakeLifecycleStore {
+    readonly operations: Map<string, HarnessOperation>;
+}
+export declare class GenericHostExecutor {
+    readonly result: {
+        classification: 'committed' | 'unknown';
+        observationDigest: string;
+    };
+    calls: number;
+    constructor(result?: {
+        classification: 'committed' | 'unknown';
+        observationDigest: string;
+    });
+    execute(_action: ExternalActionEnvelope): Promise<{
+        classification: 'committed' | 'unknown';
+        observationDigest: string;
+    }>;
+}
+export interface LifecycleHarnessOptions {
+    store?: FakeLifecycleStore;
+    executor?: GenericHostExecutor;
+    now?: () => string;
+    id?: () => string;
+    readback?: () => Promise<OutboundProjection>;
+}
+export declare class LifecycleHarness {
+    readonly store: FakeLifecycleStore;
+    readonly executor: GenericHostExecutor;
+    readonly now: () => string;
+    readonly id: () => string;
+    readonly readback: () => Promise<OutboundProjection>;
+    constructor(options?: LifecycleHarnessOptions);
+    publish(input: {
+        operationId?: string;
+        bindingId: string;
+        provider: 'github' | 'linear' | 'jira';
+        context: Record<string, string>;
+        projection: OutboundProjection;
+        previewDigest: string;
+        approvalDigest: string;
+        capabilityEvidenceDigest: string;
+        crashAt?: CrashPoint;
+    }): Promise<HarnessOperation>;
+    private crash;
+}
+//# sourceMappingURL=lifecycle-harness.d.ts.map

package/dist/commands/pjm/remote/__integration__/lifecycle-harness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle-harness.d.ts","sourceRoot":"","sources":["../../../../../src/commands/pjm/remote/__integration__/lifecycle-harness.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,sBAAsB,EAC5B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,+BAA+B,CAAC;AAEvC,MAAM,MAAM,UAAU,GAClB,eAAe,GACf,uBAAuB,GACvB,mBAAmB,GACnB,gBAAgB,GAChB,aAAa,GACb,gBAAgB,GAChB,gBAAgB,GAChB,mBAAmB,GACnB,gBAAgB,GAChB,IAAI,CAAC;AAET,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EACD,SAAS,GACT,iBAAiB,GACjB,sBAAsB,GACtB,eAAe,GACf,UAAU,GACV,WAAW,GACX,SAAS,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,wBAAwB,EAAE,MAAM,CAAC;IACjC,MAAM,EAAE,sBAAsB,GAAG,IAAI,CAAC;IACtC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,oBAAoB,EAAE,MAAM,EAAE,CAAC;CAChC;AAED,qBAAa,kBAAkB;IAC7B,QAAQ,CAAC,UAAU,gCAAuC;CAC3D;AAED,qBAAa,mBAAmB;IAG5B,QAAQ,CAAC,MAAM,EAAE;QACf,cAAc,EAAE,WAAW,GAAG,SAAS,CAAC;QACxC,iBAAiB,EAAE,MAAM,CAAC;KAC3B;IALH,KAAK,SAAK;IACV,YACW,MAAM,GAAE;QACf,cAAc,EAAE,WAAW,GAAG,SAAS,CAAC;QACxC,iBAAiB,EAAE,MAAM,CAAC;KAI3B,EACC;IAEE,OAAO,CAAC,OAAO,EAAE,sBAAsB;wBARzB,WAAW,GAAG,SAAS;2BACpB,MAAM;OAU5B;CACF;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,CAAC,EAAE,kBAAkB,CAAC;IAC3B,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAC/B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,EAAE,CAAC,EAAE,MAAM,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,OAAO,CAAC,kBAAkB,CAAC,CAAC;CAC9C;AAED,qBAAa,gBAAgB;IAC3B,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;IACnC,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;IACvC,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAErD,YAAY,OAAO,GAAE,uBAA4B,EAOhD;IAEK,OAAO,CAAC,KAAK,EAAE;QACnB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;QACvC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChC,UAAU,EAAE,kBAAkB,CAAC;QAC/B,aAAa,EAAE,MAAM,CAAC;QACtB,cAAc,EAAE,MAAM,CAAC;QACvB,wBAAwB,EAAE,MAAM,CAAC;QACjC,OAAO,CAAC,EAAE,UAAU,CAAC;KACtB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAuH5B;IAED,OAAO,CAAC,KAAK;CAGd"}