@openagt/dashboard 0.0.0-stage → 0.8.0

package/dist/relay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay.js","sourceRoot":"","sources":["../src/relay.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAA;AAEhG,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAA;AAEpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAA;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAA;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAA;AAwE/D,MAAM,QAAQ,GAAG,yBAAyB,CAAA;AAE1C,qDAAqD;AACrD,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAqB,EAAE;IACtD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,SAAS,CAAA;IACnC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAA;IAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,IAAI,GAAG,GAAG,IAAI,CAAA;IAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,GAAG,CAAA;IACnC,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,CAAC,MAAM,sBAAsB,EAAE,CAAC,CAAA;IAChF,+EAA+E;IAC/E,yEAAyE;IACzE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAe,CAAA;IAEnC,MAAM,GAAG,GAAG,CAAC,EAAU,EAAO,EAAE;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC7B,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YACf,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAA,CAAC,oCAAoC;YAC3D,OAAO,QAAQ,CAAA;QACjB,CAAC;QACD,6EAA6E;QAC7E,OAAO,IAAI,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAA;YACvC,IAAI,MAAM,KAAK,SAAS;gBAAE,MAAK;YAC/B,IAAI,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAA,CAAC,iDAAiD;YAClF,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QACrB,CAAC;QACD,MAAM,CAAC,GAAQ,EAAE,MAAM,EAAE,IAAI,WAAW,EAAkB,EAAE,CAAA;QAC5D,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;QACf,OAAO,CAAC,CAAA;IACV,CAAC,CAAA;IAED,uFAAuF;IACvF,sFAAsF;IACtF,oFAAoF;IACpF,qEAAqE;IACrE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,EAAE,QAAQ,EAAE,qBAAqB,EAAE,EAAE,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;IAC7G,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAA;IAExG,OAAO,IAAI,OAAO,CAAQ,CAAC,cAAc,EAAE,aAAa,EAAE,EAAE;QAC1D,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;QACnC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;YAC7B,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;YAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAiB,CAAA;YAC/C,MAAM,GAAG,GAAG,UAAU,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAA;YAC5C,cAAc,CAAC;gBACb,GAAG;gBACH,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,GAAG,SAAS,kBAAkB,CAAC,EAAE,CAAC,EAAE;gBACxD,MAAM,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;gBACjD,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC9B,KAAK,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC;aACtC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC;AASD,SAAS,MAAM,CAAC,GAAoB,EAAE,GAAmB,EAAE,GAAc;IACvE,+FAA+F;IAC/F,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,CAAA;IACrC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAA;QACpD,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;QACtB,OAAM;IACR,CAAC;IACD,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;QAC5B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAA;QACpD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACb,OAAM;IACR,CAAC;IACD,oFAAoF;IACpF,IAAI,QAAQ,KAAK,YAAY,IAAI,QAAQ,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QACpE,KAAK,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;QAC3B,OAAM;IACR,CAAC;IACD,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACjC,IAAI,CAAC,EAAE,CAAC;QACN,6FAA6F;QAC7F,IAAI,EAAU,CAAA;QACd,IAAI,CAAC;YACH,EAAE,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAA;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAA;YACpD,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;YACtB,OAAM;QACR,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QACvB,yFAAyF;QACzF,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YACxB,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC1B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;gBACnE,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAA;gBAC7B,OAAM;YACR,CAAC;YACD,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAA;YAC9C,OAAM;QACR,CAAC;QACD,qFAAqF;QACrF,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,SAAS,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;QACnE,GAAG,CAAC,GAAG,EAAE,CAAA;QACT,OAAM;IACR,CAAC;IACD,uFAAuF;IACvF,IAAI,GAAG,CAAC,eAAe,EAAE,CAAC;QACxB,KAAK,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,eAAe,CAAC,CAAA;QACrD,OAAM;IACR,CAAC;IACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAA;IACpD,GAAG,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAA;AACvC,CAAC;AAED,0FAA0F;AAC1F,SAAS,UAAU,CAAC,GAAoB,EAAE,GAAmB,EAAE,CAAM,EAAE,OAAe;IACpF,uFAAuF;IACvF,sFAAsF;IACtF,iDAAiD;IACjD,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,IAAI,MAAM,GAAG,KAAK,CAAA;IAClB,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QAC/B,IAAI,MAAM;YAAE,OAAM;QAClB,KAAK,IAAI,KAAK,CAAC,MAAM,CAAA;QACrB,IAAI,KAAK,GAAG,OAAO,EAAE,CAAC;YACpB,MAAM,GAAG,IAAI,CAAA;YACb,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAA;YACpD,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAA;YAC5B,GAAG,CAAC,OAAO,EAAE,CAAA;YACb,OAAM;QACR,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACpB,CAAC,CAAC,CAAA;IACF,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;QACjB,IAAI,MAAM;YAAE,OAAM;QAClB,IAAI,MAAe,CAAA;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAA;YACpD,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;YACvB,OAAM;QACR,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAqB,CAAA;QAC9E,KAAK,MAAM,KAAK,IAAI,MAAM;YAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAChD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAA;QAC1D,GAAG,CAAC,GAAG,CAAC,yBAAyB,MAAM,CAAC,MAAM,GAAG,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,MAAc,EAAE,IAAsB;IACxD,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE;QAAE,MAAM,CAAC,KAAK,EAAE,CAAA,CAAC,uCAAuC;IAC9F,IAAI,CAAC,KAAK,EAAE,CAAA;IACZ,OAAO,IAAI,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,cAAc,EAAE,CAAC,CAAC,CAAA;AAC5E,CAAC;AAYD;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,KAAa,EACb,OAAgC,EAChC,SAAS,GAAG,MAAM;IAElB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IACvC,MAAM,IAAI,GAAG,GAAG,MAAM,MAAM,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAA;IACvD,IAAI,KAAK,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAA;IAC5C,OAAO;QACL,iFAAiF;QACjF,GAAG,EAAE,GAAG,MAAM,SAAS,kBAAkB,CAAC,KAAK,CAAC,EAAE;QAClD,OAAO,CAAC,KAAK;YACX,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;gBAC5B,IAAI,CAAC;oBACH,yEAAyE;oBACzE,wDAAwD;oBACxD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,UAAU,EAAE;wBACzC,MAAM,EAAE,MAAM;wBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;wBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;wBAC3B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;qBACvC,CAAC,CAAA;oBACF,0EAA0E;oBAC1E,6EAA6E;oBAC7E,IAAI,CAAC,GAAG,CAAC,EAAE;wBAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,CAAC,CAAA;gBAC1F,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,EAAE,CAAC,GAAG,CAAC,CAAA;gBAChB,CAAC;YACH,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,KAAK;YACH,OAAO,KAAK,CAAA;QACd,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/repos-directory.d.ts

@@ -0,0 +1,19 @@
+import { type NodeFs } from './node-fs.js';
+/**
+ * The repos-directory helper (#1123): find the git repos directly inside a directory the user
+ * pointed The Framework at, so the daemon can auto-register them when the opt-in is on.
+ *
+ * The fs is a seam so this is unit-testable without touching disk, matching the rest of the package.
+ */
+/** The narrow fs the scan needs: list a directory and test its entries. {@link nodeFs} satisfies it. */
+export type ReposDirectoryFs = Pick<NodeFs, 'readdir' | 'isDirectory' | 'exists'>;
+/**
+ * The immediate subdirectories of `dir` that are git repos: a child directory holding a `.git`
+ * (a directory in a normal clone, a file in a worktree or submodule). Returns absolute paths, sorted.
+ *
+ * Only one level deep on purpose (#1123): the auto-grant's blast radius is "this directory of repos",
+ * not the whole tree beneath it. A missing `dir` yields `[]` (readdir already swallows that), so it
+ * never throws on boot.
+ */
+export declare function listReposInDirectory(dir: string, fs?: ReposDirectoryFs): Promise<string[]>;
+//# sourceMappingURL=repos-directory.d.ts.map

package/dist/repos-directory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repos-directory.d.ts","sourceRoot":"","sources":["../src/repos-directory.ts"],"names":[],"mappings":"AACA,OAAO,EAAU,KAAK,MAAM,EAAE,MAAM,cAAc,CAAA;AAElD;;;;;GAKG;AAEH,wGAAwG;AACxG,MAAM,MAAM,gBAAgB,GAAG,IAAI,CAAC,MAAM,EAAE,SAAS,GAAG,aAAa,GAAG,QAAQ,CAAC,CAAA;AAEjF;;;;;;;GAOG;AACH,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,GAAE,gBAA2B,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAS1G"}

package/dist/repos-directory.js

@@ -0,0 +1,23 @@
+import { join } from 'node:path';
+import { nodeFs } from './node-fs.js';
+/**
+ * The immediate subdirectories of `dir` that are git repos: a child directory holding a `.git`
+ * (a directory in a normal clone, a file in a worktree or submodule). Returns absolute paths, sorted.
+ *
+ * Only one level deep on purpose (#1123): the auto-grant's blast radius is "this directory of repos",
+ * not the whole tree beneath it. A missing `dir` yields `[]` (readdir already swallows that), so it
+ * never throws on boot.
+ */
+export async function listReposInDirectory(dir, fs = nodeFs()) {
+    const repos = [];
+    for (const name of (await fs.readdir(dir)).sort()) {
+        const child = join(dir, name);
+        if (!(await fs.isDirectory(child)))
+            continue;
+        const git = join(child, '.git');
+        if ((await fs.exists(git)) || (await fs.isDirectory(git)))
+            repos.push(child);
+    }
+    return repos;
+}
+//# sourceMappingURL=repos-directory.js.map

package/dist/repos-directory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repos-directory.js","sourceRoot":"","sources":["../src/repos-directory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,MAAM,EAAe,MAAM,cAAc,CAAA;AAYlD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,GAAW,EAAE,KAAuB,MAAM,EAAE;IACrF,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QAC7B,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAAE,SAAQ;QAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QAC/B,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC9E,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC"}

package/dist/request-path.d.ts

@@ -0,0 +1,10 @@
+import type { IncomingMessage } from 'node:http';
+/**
+ * A request's pathname, parsed defensively (#938). Node hands the request target through
+ * verbatim, including absolute-form targets a proxy client may send (`GET http://[ ...`),
+ * and `new URL` throws on those synchronously inside the request handler — an uncaught
+ * exception that takes the whole daemon down. `undefined` means "no parseable path":
+ * answer 400 (or serve the fallback), never throw.
+ */
+export declare function requestPathname(req: IncomingMessage): string | undefined;
+//# sourceMappingURL=request-path.d.ts.map

package/dist/request-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-path.d.ts","sourceRoot":"","sources":["../src/request-path.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAEhD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,eAAe,GAAG,MAAM,GAAG,SAAS,CAMxE"}

package/dist/request-path.js

@@ -0,0 +1,16 @@
+/**
+ * A request's pathname, parsed defensively (#938). Node hands the request target through
+ * verbatim, including absolute-form targets a proxy client may send (`GET http://[ ...`),
+ * and `new URL` throws on those synchronously inside the request handler — an uncaught
+ * exception that takes the whole daemon down. `undefined` means "no parseable path":
+ * answer 400 (or serve the fallback), never throw.
+ */
+export function requestPathname(req) {
+    try {
+        return new URL(req.url ?? '/', 'http://localhost').pathname;
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=request-path.js.map

package/dist/request-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-path.js","sourceRoot":"","sources":["../src/request-path.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,GAAoB;IAClD,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAA;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC"}

package/dist/retired-project-settings.d.ts

@@ -0,0 +1,43 @@
+import { type HandoffLevel } from './handoff-level.js';
+import { type RegistryFs } from './registry.js';
+/** One project that had a block, as the notice needs to talk about it. */
+export interface RetiredProjectSettings {
+    /** The repo the block was about. Its path, because a project id names nothing to a reader. */
+    path: string;
+    /** The keys the block held, in file order — so the notice can say what stopped applying. */
+    keys: string[];
+    /** Whether the block set how far this repo publishes, in any spelling. See {@link PUBLISH_KEYS}. */
+    publishes: boolean;
+    /**
+     * The publish rung the block set, when it set one this can name. Absent for a block written
+     * before the ladder, which the reader restates by hand — `publishes` is what says to.
+     */
+    handoff?: HandoffLevel;
+}
+/**
+ * The retired blocks in the registry file, or `[]` when there are none (which is everyone who
+ * never used the tier, and everyone whose file has been written once since).
+ *
+ * Reads the raw file rather than going through `readRegistry`, which drops the block on the way in
+ * — that is the point of the removal, and it is what leaves this the only reader.
+ */
+export declare function readRetiredProjectSettings(fs?: RegistryFs, env?: NodeJS.ProcessEnv): Promise<RetiredProjectSettings[]>;
+/** Read the blocks and hold them for this process. Called once, first thing, by the daemon. */
+export declare function captureRetiredProjectSettings(fs?: RegistryFs, env?: NodeJS.ProcessEnv): Promise<readonly RetiredProjectSettings[]>;
+/** What the boot read found. Empty until {@link captureRetiredProjectSettings} has run. */
+export declare function retiredProjectSettings(): readonly RetiredProjectSettings[];
+/**
+ * What a repo's row has to say, as both surfaces say it.
+ *
+ * A block that set publishing gets the line to write and what happens without it, because that is
+ * the direction that acts outward on its own. Everything else is told what applies instead, which
+ * is true only for a block that did *not* set publishing — hence the flag rather than the rung.
+ */
+export declare function retiredProjectAdvice(project: RetiredProjectSettings): string;
+/**
+ * The notice as the daemon's log prints it: one line naming the tier, then one per project.
+ *
+ * Empty for an empty list, so the caller prints nothing rather than a heading over nothing.
+ */
+export declare function retiredProjectSettingsNotice(retired: readonly RetiredProjectSettings[]): string[];
+//# sourceMappingURL=retired-project-settings.d.ts.map

package/dist/retired-project-settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retired-project-settings.d.ts","sourceRoot":"","sources":["../src/retired-project-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACtE,OAAO,EAAgC,KAAK,UAAU,EAAE,MAAM,eAAe,CAAA;AA+B7E,0EAA0E;AAC1E,MAAM,WAAW,sBAAsB;IACrC,8FAA8F;IAC9F,IAAI,EAAE,MAAM,CAAA;IACZ,4FAA4F;IAC5F,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,oGAAoG;IACpG,SAAS,EAAE,OAAO,CAAA;IAClB;;;OAGG;IACH,OAAO,CAAC,EAAE,YAAY,CAAA;CACvB;AAED;;;;;;GAMG;AACH,wBAAsB,0BAA0B,CAC9C,EAAE,GAAE,UAA6B,EACjC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAmCnC;AAYD,+FAA+F;AAC/F,wBAAsB,6BAA6B,CACjD,EAAE,CAAC,EAAE,UAAU,EACf,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAAC,SAAS,sBAAsB,EAAE,CAAC,CAG5C;AAED,2FAA2F;AAC3F,wBAAgB,sBAAsB,IAAI,SAAS,sBAAsB,EAAE,CAE1E;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,sBAAsB,GAAG,MAAM,CAI5E;AAED;;;;GAIG;AACH,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,SAAS,sBAAsB,EAAE,GAAG,MAAM,EAAE,CASjG"}

package/dist/retired-project-settings.js

@@ -0,0 +1,125 @@
+import { isHandoffLevel } from './handoff-level.js';
+import { nodeRegistryFs, registryPath } from './registry.js';
+/**
+ * The one-time notice for the per-project preference tier B5 deleted (#840).
+ *
+ * Every other retirement on that branch is silent by design — a renamed key is an unknown key, and
+ * an unknown key is dropped. This one is not silent, because dropping it moves in the *permissive*
+ * direction and the permissive thing is an outward action under the user's name: a repo they had
+ * set to "don't publish" falls through to the user-level default, which pushes the branch and opens
+ * a pull request. A setting that quietly stops applying is a bug report; a setting that quietly
+ * starts publishing is a pull request on someone else's repo.
+ *
+ * It is a report, not a migration: nothing here is honoured, carried, or written back. It names
+ * what the file holds and the line that replaces it, and the block goes on being ignored.
+ */
+/** The retired block's key in the registry file. Read to report it; never written. */
+const RETIRED_KEY = 'projectPreferences';
+/**
+ * Every spelling a block could say "how far this repo publishes" in: the rung, and the three
+ * booleans it replaced.
+ *
+ * Named rather than interpreted. A block written before the ladder cannot be turned back into a
+ * rung without the mapping this branch deleted, and resurrecting it here would be the migration
+ * code the deletion was about. What the notice needs is only whether this repo's publishing was
+ * set here at all, because that decides whether the row warns or reassures — and a row that
+ * reassures about a repo whose block said "don't publish" is the failure this exists to prevent.
+ */
+const PUBLISH_KEYS = ['handoff', 'autoPushBranch', 'autoOpenPr', 'autoMerge'];
+/**
+ * The retired blocks in the registry file, or `[]` when there are none (which is everyone who
+ * never used the tier, and everyone whose file has been written once since).
+ *
+ * Reads the raw file rather than going through `readRegistry`, which drops the block on the way in
+ * — that is the point of the removal, and it is what leaves this the only reader.
+ */
+export async function readRetiredProjectSettings(fs = nodeRegistryFs(), env = process.env) {
+    let parsed;
+    try {
+        parsed = JSON.parse(await fs.read(registryPath(env)));
+    }
+    catch {
+        return []; // missing or malformed: the same nothing readRegistry answers
+    }
+    if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed))
+        return [];
+    const stored = parsed[RETIRED_KEY];
+    if (typeof stored !== 'object' || stored === null || Array.isArray(stored))
+        return [];
+    // The project list is the same file's, so an id resolves to the path the user knows it by.
+    const projects = parsed.projects;
+    const paths = new Map();
+    if (Array.isArray(projects)) {
+        for (const project of projects) {
+            const record = project;
+            if (typeof record?.id === 'string' && typeof record.path === 'string')
+                paths.set(record.id, record.path);
+        }
+    }
+    const retired = [];
+    for (const [projectId, block] of Object.entries(stored)) {
+        if (typeof block !== 'object' || block === null || Array.isArray(block))
+            continue;
+        const keys = Object.keys(block);
+        if (!keys.length)
+            continue;
+        const handoff = block['handoff'];
+        retired.push({
+            // A project since removed from the registry still had settings; name it by the id rather
+            // than dropping it, since the point is that nothing stopped applying silently.
+            path: paths.get(projectId) ?? projectId,
+            keys,
+            publishes: keys.some(key => PUBLISH_KEYS.includes(key)),
+            ...(isHandoffLevel(handoff) ? { handoff } : {}),
+        });
+    }
+    return retired;
+}
+/**
+ * The boot snapshot, and why there is one.
+ *
+ * `writeRegistry` rewrites the file from the fields it knows, so the first preference write of a
+ * session erases the block this notice is about. A notice raised lazily — at the first publish,
+ * say — would race that erasure and lose, so the read happens once at boot, ahead of every write
+ * path, and the dashboard is served from what it found.
+ */
+let captured = [];
+/** Read the blocks and hold them for this process. Called once, first thing, by the daemon. */
+export async function captureRetiredProjectSettings(fs, env = process.env) {
+    captured = await readRetiredProjectSettings(fs, env).catch(() => []);
+    return captured;
+}
+/** What the boot read found. Empty until {@link captureRetiredProjectSettings} has run. */
+export function retiredProjectSettings() {
+    return captured;
+}
+/**
+ * What a repo's row has to say, as both surfaces say it.
+ *
+ * A block that set publishing gets the line to write and what happens without it, because that is
+ * the direction that acts outward on its own. Everything else is told what applies instead, which
+ * is true only for a block that did *not* set publishing — hence the flag rather than the rung.
+ */
+export function retiredProjectAdvice(project) {
+    if (!project.publishes)
+        return 'Your own settings apply to it now.';
+    const rung = project.handoff ?? 'local | push | pr | merge';
+    return `Add \`handoff: ${rung}\` to its the-framework.yml — without it, agents there push their branch and open a pull request.`;
+}
+/**
+ * The notice as the daemon's log prints it: one line naming the tier, then one per project.
+ *
+ * Empty for an empty list, so the caller prints nothing rather than a heading over nothing.
+ */
+export function retiredProjectSettingsNotice(retired) {
+    if (!retired.length)
+        return [];
+    const lines = [
+        `[framework] per-project settings are no longer read — a repo's settings live in its own the-framework.yml.`,
+    ];
+    for (const project of retired) {
+        lines.push(`[framework]   ${project.path} had ${project.keys.join(', ')}. ${retiredProjectAdvice(project)}`);
+    }
+    return lines;
+}
+//# sourceMappingURL=retired-project-settings.js.map

package/dist/retired-project-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retired-project-settings.js","sourceRoot":"","sources":["../src/retired-project-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAqB,MAAM,oBAAoB,CAAA;AACtE,OAAO,EAAE,cAAc,EAAE,YAAY,EAAmB,MAAM,eAAe,CAAA;AAE7E;;;;;;;;;;;;GAYG;AAEH,sFAAsF;AACtF,MAAM,WAAW,GAAG,oBAAoB,CAAA;AAExC;;;;;;;;;GASG;AACH,MAAM,YAAY,GAAG,CAAC,SAAS,EAAE,gBAAgB,EAAE,YAAY,EAAE,WAAW,CAAC,CAAA;AAiB7E;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,KAAiB,cAAc,EAAE,EACjC,MAAyB,OAAO,CAAC,GAAG;IAEpC,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA,CAAC,8DAA8D;IAC1E,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAA;IACrF,MAAM,MAAM,GAAI,MAAkC,CAAC,WAAW,CAAC,CAAA;IAC/D,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAA;IACrF,2FAA2F;IAC3F,MAAM,QAAQ,GAAI,MAAiC,CAAC,QAAQ,CAAA;IAC5D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAA;IACvC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,OAA2C,CAAA;YAC1D,IAAI,OAAO,MAAM,EAAE,EAAE,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;gBAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,CAAA;QAC1G,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAA6B,EAAE,CAAA;IAC5C,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAiC,CAAC,EAAE,CAAC;QACnF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,SAAQ;QACjF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAA;QAC1D,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,SAAQ;QAC1B,MAAM,OAAO,GAAI,KAAiC,CAAC,SAAS,CAAC,CAAA;QAC7D,OAAO,CAAC,IAAI,CAAC;YACX,yFAAyF;YACzF,+EAA+E;YAC/E,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,SAAS;YACvC,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACvD,GAAG,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChD,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,IAAI,QAAQ,GAAsC,EAAE,CAAA;AAEpD,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,EAAe,EACf,MAAyB,OAAO,CAAC,GAAG;IAEpC,QAAQ,GAAG,MAAM,0BAA0B,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;IACpE,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,sBAAsB;IACpC,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAA+B;IAClE,IAAI,CAAC,OAAO,CAAC,SAAS;QAAE,OAAO,oCAAoC,CAAA;IACnE,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,IAAI,2BAA2B,CAAA;IAC3D,OAAO,kBAAkB,IAAI,mGAAmG,CAAA;AAClI,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAAC,OAA0C;IACrF,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,EAAE,CAAA;IAC9B,MAAM,KAAK,GAAG;QACZ,4GAA4G;KAC7G,CAAA;IACD,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,iBAAiB,OAAO,CAAC,IAAI,QAAQ,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAC9G,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC"}

package/dist/routine-locks.d.ts

@@ -0,0 +1,53 @@
+import { type BranchFileFs, type CommitMessage, type FileBranchWrite } from '@gemstack/agent-data';
+/** How long a lock stands before whoever finds it may take it over: four hours, no heartbeat. */
+export declare const ROUTINE_LOCK_TTL_MS: number;
+/** The lock file for a routine, relative to the data branch root: `routines/triage-quick.lock.md`. */
+export declare function routineLockPath(name: string): string;
+/** Who holds a lock: the machine that minted it, and when. */
+export interface RoutineLockHolder {
+    host: string;
+    /** ISO timestamp. */
+    since: string;
+}
+/** What a lock file holds: the claiming machine and the mint time, one line each. */
+export declare function routineLockContent(holder: RoutineLockHolder): string;
+/** The holder a lock file names, or undefined for content that is not a lock. */
+export declare function routineLockHolder(md: string): RoutineLockHolder | undefined;
+/** Injectable seams so every operation is unit-testable off disk and git. */
+export interface RoutineLockDeps extends Partial<BranchFileFs> {
+    /** The data branch's write funnel (default the persistent checkout's cycle); a test's fake stands in. */
+    funnel?: (root: string, message: CommitMessage, op: (dir: string) => Promise<void>) => Promise<FileBranchWrite>;
+    log?: (message: string) => void;
+    /** The machine claiming the lock (default this host's name). */
+    host?: string;
+    now?: () => number;
+}
+/** What acquiring did: ours now, or standing down with the holder named, or the write failed. */
+export type AcquireRoutineLockResult = {
+    ok: true;
+} | {
+    ok: false;
+    reason: string;
+};
+/**
+ * Take the lock for `name` on the data branch, in one funneled cycle. An alive lock stands the
+ * caller down naming its holder; an expired one is taken over in the same commit. The funnel
+ * re-runs the op when a push loses a race, so a lock another machine minted meanwhile is found,
+ * not overwritten — and this machine's own lock seen again on the re-run is still ours.
+ *
+ * Never throws: this runs on a background tick with nothing to catch it.
+ */
+export declare function acquireRoutineLock(cwd: string, name: string, deps?: RoutineLockDeps): Promise<AcquireRoutineLockResult>;
+/**
+ * Drop this machine's lock on `name`; a lock naming another machine is left alone. `true` when
+ * the lock is dealt with (freed, absent, or someone else's), `false` when the release could not
+ * commit, so the caller can retry.
+ */
+export declare function releaseRoutineLock(cwd: string, name: string, deps?: RoutineLockDeps): Promise<boolean>;
+/**
+ * On boot (#1659): drop every lock this machine holds whose run is gone. The daemon that minted
+ * them is not the one booting, so nothing in memory will release them; `stillRunning` says
+ * whether a run of this machine's started since the lock was minted is still going.
+ */
+export declare function releaseDeadRoutineLocks(cwd: string, stillRunning: (since: string) => boolean, deps?: RoutineLockDeps): Promise<string[]>;
+//# sourceMappingURL=routine-locks.d.ts.map

package/dist/routine-locks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routine-locks.d.ts","sourceRoot":"","sources":["../src/routine-locks.ts"],"names":[],"mappings":"AAEA,OAAO,EAAiD,KAAK,YAAY,EAAE,KAAK,aAAa,EAAE,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAoBjJ,iGAAiG;AACjG,eAAO,MAAM,mBAAmB,QAAqB,CAAA;AAErD,sGAAsG;AACtG,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,8DAA8D;AAC9D,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAA;IACZ,qBAAqB;IACrB,KAAK,EAAE,MAAM,CAAA;CACd;AAED,qFAAqF;AACrF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CAEpE;AAED,iFAAiF;AACjF,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAI3E;AAED,6EAA6E;AAC7E,MAAM,WAAW,eAAgB,SAAQ,OAAO,CAAC,YAAY,CAAC;IAC5D,yGAAyG;IACzG,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,eAAe,CAAC,CAAA;IAC/G,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;IAC/B,gEAAgE;IAChE,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CACnB;AAsBD,iGAAiG;AACjG,MAAM,MAAM,wBAAwB,GAChC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GACZ;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAEjC;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,eAAoB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAyBjI;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,eAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,CAWhH;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,EACxC,IAAI,GAAE,eAAoB,GACzB,OAAO,CAAC,MAAM,EAAE,CAAC,CAmBnB"}

package/dist/routine-locks.js

@@ -0,0 +1,125 @@
+import { hostname } from 'node:os';
+import { join } from 'node:path';
+import { DATA_BRANCH, nodeBranchFileFs, withFileBranch } from '@gemstack/agent-data';
+// The "one triage at a time" guard (#1659): a `routines/<name>.lock.md` on the data branch.
+//
+// The pinned branch (#1293) was this guard before, and stopped being one: since #1644 a triage
+// commits nothing on its branch, so the branch never reaches origin and guards nothing across
+// machines, and locally it was a name the *agent* checked from its prompt — every false abort
+// spent a started agent. The lock is the ticket claim (#1420) applied to a routine: minted by the
+// sweep through the data branch's write funnel before the run starts, so the daemon decides and no
+// agent is started to find out, and read by every machine that shares `agent-data`.
+//
+// Release is the daemon's, not a PR's: a triage never opens one. The daemon that minted a lock
+// drops it when the run ends, whatever the ending, and on boot for any it holds whose run is
+// gone — so a crash on this machine frees the routine at once. A lock another machine left
+// behind counts as dead after {@link ROUTINE_LOCK_TTL_MS}, fixed: a triage over hundreds of
+// tickets can take hours, and a heartbeat would cost code and `agent-data` churn.
+/** Where routine state lives on the data branch, beside the skills' files; only the lock files, for now (#1660). */
+const ROUTINES_DIR = 'routines';
+/** How long a lock stands before whoever finds it may take it over: four hours, no heartbeat. */
+export const ROUTINE_LOCK_TTL_MS = 4 * 60 * 60 * 1000;
+/** The lock file for a routine, relative to the data branch root: `routines/triage-quick.lock.md`. */
+export function routineLockPath(name) {
+    return `${ROUTINES_DIR}/${name}.lock.md`;
+}
+/** What a lock file holds: the claiming machine and the mint time, one line each. */
+export function routineLockContent(holder) {
+    return `CLAIMED: ${holder.host}\nSINCE: ${holder.since}\n`;
+}
+/** The holder a lock file names, or undefined for content that is not a lock. */
+export function routineLockHolder(md) {
+    const host = /^CLAIMED:[ \t]*(.+)$/m.exec(md)?.[1]?.trim();
+    const since = /^SINCE:[ \t]*(.+)$/m.exec(md)?.[1]?.trim();
+    return host && since ? { host, since } : undefined;
+}
+function resolve(deps) {
+    const fs = nodeBranchFileFs();
+    return {
+        read: deps.read ?? fs.read,
+        write: deps.write ?? fs.write,
+        remove: deps.remove ?? fs.remove,
+        list: deps.list ?? fs.list,
+        funnel: deps.funnel ?? ((root, message, op) => withFileBranch(root, DATA_BRANCH, message, op)),
+        log: deps.log ?? (() => { }),
+        host: deps.host ?? hostname(),
+        now: deps.now ?? (() => Date.now()),
+    };
+}
+/** Whether a lock is past its fixed expiry, as of `now`. An unparseable mint time counts as expired. */
+function routineLockExpired(holder, now) {
+    const since = Date.parse(holder.since);
+    return !Number.isFinite(since) || now - since >= ROUTINE_LOCK_TTL_MS;
+}
+/**
+ * Take the lock for `name` on the data branch, in one funneled cycle. An alive lock stands the
+ * caller down naming its holder; an expired one is taken over in the same commit. The funnel
+ * re-runs the op when a push loses a race, so a lock another machine minted meanwhile is found,
+ * not overwritten — and this machine's own lock seen again on the re-run is still ours.
+ *
+ * Never throws: this runs on a background tick with nothing to catch it.
+ */
+export async function acquireRoutineLock(cwd, name, deps = {}) {
+    const r = resolve(deps);
+    const mine = { host: r.host, since: new Date(r.now()).toISOString() };
+    let held;
+    const result = await r.funnel(cwd, `[The Framework] lock the ${name} routine`, async (dataDir) => {
+        held = undefined;
+        const path = join(dataDir, routineLockPath(name));
+        const holder = routineLockHolder(await r.read(path).catch(() => ''));
+        // This call's own claim, seen again when the funnel re-runs the op: still ours. Any other
+        // alive lock — another machine's, or this machine's from a run still going — stands us down.
+        if (holder?.host === mine.host && holder.since === mine.since)
+            return;
+        if (holder && !routineLockExpired(holder, r.now())) {
+            held = holder;
+            return;
+        }
+        await r.write(path, routineLockContent(mine));
+    });
+    if (held)
+        return { ok: false, reason: `${name} is already running on ${held.host} (since ${held.since})` };
+    if (!result.ok && !result.committed)
+        return { ok: false, reason: `the ${name} lock could not be committed (${result.error})` };
+    if (!result.ok)
+        r.log(`[framework] routine locks: the ${name} lock could not be pushed, so other machines cannot see it`);
+    return { ok: true };
+}
+/**
+ * Drop this machine's lock on `name`; a lock naming another machine is left alone. `true` when
+ * the lock is dealt with (freed, absent, or someone else's), `false` when the release could not
+ * commit, so the caller can retry.
+ */
+export async function releaseRoutineLock(cwd, name, deps = {}) {
+    const r = resolve(deps);
+    const result = await r.funnel(cwd, `[The Framework] release the ${name} routine`, async (dataDir) => {
+        const path = join(dataDir, routineLockPath(name));
+        if (routineLockHolder(await r.read(path).catch(() => ''))?.host === r.host)
+            await r.remove(path);
+    });
+    return result.ok || result.committed;
+}
+/**
+ * On boot (#1659): drop every lock this machine holds whose run is gone. The daemon that minted
+ * them is not the one booting, so nothing in memory will release them; `stillRunning` says
+ * whether a run of this machine's started since the lock was minted is still going.
+ */
+export async function releaseDeadRoutineLocks(cwd, stillRunning, deps = {}) {
+    const r = resolve(deps);
+    let released = [];
+    const result = await r.funnel(cwd, () => `[The Framework] release ${released.length} routine lock${released.length === 1 ? '' : 's'} left by a previous daemon`, async (dataDir) => {
+        released = [];
+        for (const file of await r.list(join(dataDir, ROUTINES_DIR))) {
+            const name = /^(.+)\.lock\.md$/.exec(file)?.[1];
+            if (!name)
+                continue;
+            const holder = routineLockHolder(await r.read(join(dataDir, ROUTINES_DIR, file)).catch(() => ''));
+            if (holder?.host !== r.host || stillRunning(holder.since))
+                continue;
+            await r.remove(join(dataDir, ROUTINES_DIR, file));
+            released.push(name);
+        }
+    });
+    return result.ok || result.committed ? released : [];
+}
+//# sourceMappingURL=routine-locks.js.map

package/dist/routine-locks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routine-locks.js","sourceRoot":"","sources":["../src/routine-locks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,cAAc,EAA+D,MAAM,sBAAsB,CAAA;AAEjJ,4FAA4F;AAC5F,EAAE;AACF,+FAA+F;AAC/F,8FAA8F;AAC9F,8FAA8F;AAC9F,kGAAkG;AAClG,mGAAmG;AACnG,oFAAoF;AACpF,EAAE;AACF,+FAA+F;AAC/F,6FAA6F;AAC7F,2FAA2F;AAC3F,4FAA4F;AAC5F,kFAAkF;AAElF,oHAAoH;AACpH,MAAM,YAAY,GAAG,UAAU,CAAA;AAE/B,iGAAiG;AACjG,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAErD,sGAAsG;AACtG,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,GAAG,YAAY,IAAI,IAAI,UAAU,CAAA;AAC1C,CAAC;AASD,qFAAqF;AACrF,MAAM,UAAU,kBAAkB,CAAC,MAAyB;IAC1D,OAAO,YAAY,MAAM,CAAC,IAAI,YAAY,MAAM,CAAC,KAAK,IAAI,CAAA;AAC5D,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,iBAAiB,CAAC,EAAU;IAC1C,MAAM,IAAI,GAAG,uBAAuB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAA;IAC1D,MAAM,KAAK,GAAG,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAA;IACzD,OAAO,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;AACpD,CAAC;AAYD,SAAS,OAAO,CAAC,IAAqB;IACpC,MAAM,EAAE,GAAG,gBAAgB,EAAE,CAAA;IAC7B,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI;QAC1B,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,KAAK;QAC7B,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,MAAM;QAChC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI;QAC1B,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,IAAY,EAAE,OAAsB,EAAE,EAAkC,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACrJ,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC;QAC3B,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,QAAQ,EAAE;QAC7B,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;KACpC,CAAA;AACH,CAAC;AAED,wGAAwG;AACxG,SAAS,kBAAkB,CAAC,MAAyB,EAAE,GAAW;IAChE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACtC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,GAAG,GAAG,KAAK,IAAI,mBAAmB,CAAA;AACtE,CAAC;AAOD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAW,EAAE,IAAY,EAAE,IAAI,GAAoB,EAAE;IAC5F,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACvB,MAAM,IAAI,GAAsB,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAA;IACxF,IAAI,IAAmC,CAAA;IACvC,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,MAAM,CAC3B,GAAG,EACH,4BAA4B,IAAI,UAAU,EAC1C,KAAK,EAAC,OAAO,EAAC,EAAE;QACd,IAAI,GAAG,SAAS,CAAA;QAChB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC,CAAA;QACjD,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;QACpE,0FAA0F;QAC1F,6FAA6F;QAC7F,IAAI,MAAM,EAAE,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;YAAE,OAAM;QACrE,IAAI,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;YACnD,IAAI,GAAG,MAAM,CAAA;YACb,OAAM;QACR,CAAC;QACD,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAA;IAC/C,CAAC,CACF,CAAA;IACD,IAAI,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,0BAA0B,IAAI,CAAC,IAAI,WAAW,IAAI,CAAC,KAAK,GAAG,EAAE,CAAA;IAC1G,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,IAAI,iCAAiC,MAAM,CAAC,KAAK,GAAG,EAAE,CAAA;IAC9H,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,CAAC,CAAC,GAAG,CAAC,kCAAkC,IAAI,4DAA4D,CAAC,CAAA;IACzH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;AACrB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAW,EAAE,IAAY,EAAE,IAAI,GAAoB,EAAE;IAC5F,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACvB,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,MAAM,CAC3B,GAAG,EACH,+BAA+B,IAAI,UAAU,EAC7C,KAAK,EAAC,OAAO,EAAC,EAAE;QACd,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC,CAAA;QACjD,IAAI,iBAAiB,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,KAAK,CAAC,CAAC,IAAI;YAAE,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAClG,CAAC,CACF,CAAA;IACD,OAAO,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,SAAS,CAAA;AACtC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,GAAW,EACX,YAAwC,EACxC,IAAI,GAAoB,EAAE;IAE1B,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACvB,IAAI,QAAQ,GAAa,EAAE,CAAA;IAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,MAAM,CAC3B,GAAG,EACH,GAAG,EAAE,CAAC,2BAA2B,QAAQ,CAAC,MAAM,gBAAgB,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,4BAA4B,EAC5H,KAAK,EAAC,OAAO,EAAC,EAAE;QACd,QAAQ,GAAG,EAAE,CAAA;QACb,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;YAC/C,IAAI,CAAC,IAAI;gBAAE,SAAQ;YACnB,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;YACjG,IAAI,MAAM,EAAE,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC;gBAAE,SAAQ;YACnE,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC,CAAA;YACjD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACrB,CAAC;IACH,CAAC,CACF,CAAA;IACD,OAAO,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAA;AACtD,CAAC"}

package/dist/run-driver.d.ts

@@ -0,0 +1,26 @@
+import { type CreateDriverOptions } from './agent.js';
+import { type ActionsDriverOptions, type CloudDriverOptions, type Driver } from './driver/index.js';
+/**
+ * Build the {@link Driver} for a run's *target* (#1050): where the turn runs, on top of the agent
+ * axis {@link createDriver} owns. `actions` returns an {@link ActionsDriver} (#934) built from the
+ * resolved owner/repo/token; `web` returns a {@link CloudDriver} (#610), which hands the task to a
+ * Claude Code cloud session; anything else falls through to the local agent driver — byte-identical
+ * to today.
+ *
+ * Kept off {@link createDriver} on purpose: ActionsDriver's owner/repo/token do not fit
+ * {@link CreateDriverOptions}, and folding them in would push GitHub config onto every local run.
+ */
+export interface CreateRunDriverOptions extends CreateDriverOptions {
+    /**
+     * Where the run executes: `local` (this device, the default), `actions` (a GitHub Actions
+     * runner, #1050) or `web` (a Claude Code cloud session, #610).
+     */
+    target?: 'local' | 'actions' | 'web';
+    /** The Actions runner config, required when {@link target} is `actions`. */
+    actionsConfig?: ActionsDriverOptions;
+    /** The cloud-session config used when {@link target} is `web`. Every field has a default. */
+    cloudConfig?: CloudDriverOptions;
+}
+/** The one place a run path turns `--run-on` into a real driver. */
+export declare function createRunDriver(opts: CreateRunDriverOptions): Driver;
+//# sourceMappingURL=run-driver.d.ts.map

package/dist/run-driver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-driver.d.ts","sourceRoot":"","sources":["../src/run-driver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,mBAAmB,EAAE,MAAM,YAAY,CAAA;AACnE,OAAO,EAA8B,KAAK,oBAAoB,EAAE,KAAK,kBAAkB,EAAE,KAAK,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAE/H;;;;;;;;;GASG;AACH,MAAM,WAAW,sBAAuB,SAAQ,mBAAmB;IACjE;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,GAAG,KAAK,CAAA;IACpC,4EAA4E;IAC5E,aAAa,CAAC,EAAE,oBAAoB,CAAA;IACpC,6FAA6F;IAC7F,WAAW,CAAC,EAAE,kBAAkB,CAAA;CACjC;AAED,oEAAoE;AACpE,wBAAgB,eAAe,CAAC,IAAI,EAAE,sBAAsB,GAAG,MAAM,CAWpE"}

package/dist/run-driver.js

@@ -0,0 +1,17 @@
+import { createDriver } from './agent.js';
+import { ActionsDriver, CloudDriver } from './driver/index.js';
+/** The one place a run path turns `--run-on` into a real driver. */
+export function createRunDriver(opts) {
+    if (opts.target === 'actions') {
+        if (!opts.actionsConfig) {
+            throw new Error('run target "actions" needs the repo owner/repo and a GitHub token; set a GitHub origin remote and GH_TOKEN');
+        }
+        return new ActionsDriver(opts.actionsConfig);
+    }
+    // `web` needs no configuration of ours: the CLI already holds the account it signs the
+    // cloud session in with, the same auth the local driver runs on.
+    if (opts.target === 'web')
+        return new CloudDriver(opts.cloudConfig ?? {});
+    return createDriver(opts);
+}
+//# sourceMappingURL=run-driver.js.map

package/dist/run-driver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-driver.js","sourceRoot":"","sources":["../src/run-driver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAA4B,MAAM,YAAY,CAAA;AACnE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAmE,MAAM,mBAAmB,CAAA;AAwB/H,oEAAoE;AACpE,MAAM,UAAU,eAAe,CAAC,IAA4B;IAC1D,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,4GAA4G,CAAC,CAAA;QAC/H,CAAC;QACD,OAAO,IAAI,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;IAC9C,CAAC;IACD,uFAAuF;IACvF,iEAAiE;IACjE,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK;QAAE,OAAO,IAAI,WAAW,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAA;IACzE,OAAO,YAAY,CAAC,IAAI,CAAC,CAAA;AAC3B,CAAC"}

package/dist/run-locks.d.ts

@@ -0,0 +1,3 @@
+/** Run `fn` once every earlier holder of `checkout`'s lock has settled. */
+export declare function withRunLock<T>(checkout: string, fn: () => Promise<T>): Promise<T>;
+//# sourceMappingURL=run-locks.d.ts.map

package/dist/run-locks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-locks.d.ts","sourceRoot":"","sources":["../src/run-locks.ts"],"names":[],"mappings":"AAuBA,2EAA2E;AAC3E,wBAAsB,WAAW,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAgBvF"}

package/dist/run-locks.js

@@ -0,0 +1,39 @@
+import { resolve } from 'node:path';
+/**
+ * Serialize everything that mutates one run's checkout.
+ *
+ * A run's meta flips to `done` the moment its child writes it — a beat before the daemon's
+ * teardown archives the history, commits the bookkeeping to the run branch, and retires the
+ * worktree. Every run-addressed action a user can fire off that fresh `done` (Push / Open PR's
+ * commit step, Remove/Delete of the checkout, a Resume that reuses it) used to run its own git
+ * against the same checkout teardown was committing in: the loser reported "could not commit the
+ * work this session left uncommitted", and a teardown that lost kept a worktree it should have
+ * removed. Both actors live in the daemon process by design (the dashboard's RPCs are served
+ * in-process, and only the daemon writes to the project checkout), so an in-process lock is the
+ * whole fix — there is no second process to coordinate with.
+ *
+ * Keyed by the checkout path, resolved: teardown and the actions all name the same worktree, so
+ * they contend on one key; actions against a run whose worktree is already gone key on the
+ * project root, where nothing contends. A waiter chains on the predecessor's *settlement* — a
+ * failed teardown must not skip the push waiting behind it — and each caller still gets its own
+ * outcome (or failure) back untouched.
+ */
+const chains = new Map();
+/** Run `fn` once every earlier holder of `checkout`'s lock has settled. */
+export async function withRunLock(checkout, fn) {
+    const key = resolve(checkout);
+    const prev = chains.get(key) ?? Promise.resolve();
+    const run = prev.then(fn, fn);
+    // What the next waiter chains on: settlement, never rejection — one failed holder must not
+    // poison every later acquisition of the same key.
+    const settled = run.then(() => { }, () => { });
+    chains.set(key, settled);
+    try {
+        return await run;
+    }
+    finally {
+        if (chains.get(key) === settled)
+            chains.delete(key);
+    }
+}
+//# sourceMappingURL=run-locks.js.map

package/dist/run-locks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-locks.js","sourceRoot":"","sources":["../src/run-locks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAEnC;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,MAAM,GAAG,IAAI,GAAG,EAA4B,CAAA;AAElD,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,WAAW,CAAI,QAAgB,EAAE,EAAoB;IACzE,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAA;IACjD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;IAC7B,2FAA2F;IAC3F,kDAAkD;IAClD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CACtB,GAAG,EAAE,GAAE,CAAC,EACR,GAAG,EAAE,GAAE,CAAC,CACT,CAAA;IACD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IACxB,IAAI,CAAC;QACH,OAAO,MAAM,GAAG,CAAA;IAClB,CAAC;YAAS,CAAC;QACT,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,OAAO;YAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IACrD,CAAC;AACH,CAAC"}