@openrig/cli 0.3.1 → 0.3.2

package/daemon/dist/domain/rig-policy/rig-policy-defaults.js

@@ -0,0 +1,96 @@
+// Slice 09 — recommended per-mode defaults + per-mode default scope.
+//
+// Component 3 — Recommended Per-Mode Defaults (the 6×7 matrix).
+// Component 4 — Recommended Default Scopes Per Mode.
+//
+// "RECOMMENDED, operator-overridable per field" — these are the
+// fall-back values the CLI / HTTP set route applies when the operator
+// invokes a bare mode (e.g., `rig policy set debug`) without
+// specifying individual fields. Operator-supplied per-field overrides
+// merge over the defaults.
+export const RECOMMENDED_MODE_DEFAULTS = {
+    sleep: {
+        autonomy_scope: "pre_approved_only",
+        heartbeat_cadence: "sparse",
+        inspection_depth: "normal",
+        update_detail: "compact",
+        escalation_threshold: "blocker_only",
+        concurrency_limit: "serial",
+        permission_prompt_posture: "batch_for_human",
+    },
+    desk: {
+        autonomy_scope: "full_autonomy_within_workstream",
+        heartbeat_cadence: "normal",
+        inspection_depth: "normal",
+        update_detail: "normal",
+        escalation_threshold: "normal",
+        concurrency_limit: "unlimited", // "normal" in the convention table; v0 maps "normal" concurrency to unlimited (the existing OpenRig default — agents fan out per workstream-mode discipline)
+        permission_prompt_posture: "normal",
+    },
+    mobile: {
+        autonomy_scope: "bounded_continuation",
+        heartbeat_cadence: "normal",
+        inspection_depth: "surface",
+        update_detail: "compact",
+        escalation_threshold: "low",
+        concurrency_limit: "unlimited",
+        permission_prompt_posture: "batch_for_human",
+    },
+    away: {
+        autonomy_scope: "pre_approved_only",
+        heartbeat_cadence: "sparse",
+        inspection_depth: "normal",
+        update_detail: "compact",
+        escalation_threshold: "blocker_only",
+        concurrency_limit: "serial",
+        permission_prompt_posture: "batch_for_human",
+    },
+    focus: {
+        autonomy_scope: "full_autonomy_within_workstream",
+        heartbeat_cadence: "normal",
+        inspection_depth: "normal",
+        update_detail: "compact",
+        escalation_threshold: "blocker_only",
+        concurrency_limit: "unlimited",
+        permission_prompt_posture: "batch_for_human",
+    },
+    debug: {
+        autonomy_scope: "bounded_continuation",
+        heartbeat_cadence: "fast",
+        inspection_depth: "forensic",
+        update_detail: "verbose",
+        escalation_threshold: "low",
+        concurrency_limit: "serial",
+        permission_prompt_posture: "normal",
+    },
+};
+/**
+ * Component 4 — Recommended Default Scopes Per Mode.
+ *
+ * Used during restate-and-confirm: when the operator's invocation
+ * omits an explicit scope, the agent restates with this recommendation
+ * and awaits confirmation/correction. The operator's confirmation is
+ * authoritative.
+ */
+export const RECOMMENDED_DEFAULT_SCOPE = {
+    sleep: "global_host",
+    away: "global_host",
+    desk: "global_host",
+    mobile: "global_host",
+    focus: "workstream",
+    debug: "qitem",
+};
+/**
+ * Conservative default for `expiry_or_stale_rule`. Per convention Q3,
+ * the numeric threshold is deferred to a Mode 2 helper slice;
+ * `re_confirm_on_long_gap` is the rule kind selected here as the
+ * safest default (it prompts re-confirmation rather than silent
+ * continuation when the operator has been away for an extended
+ * period).
+ *
+ * Operators may override per-binding via the `expiry_or_stale_rule`
+ * field of the OperatorContextModeRecord; v0 does not auto-tune the
+ * threshold.
+ */
+export const DEFAULT_STALE_RULE = "re_confirm_on_long_gap";
+//# sourceMappingURL=rig-policy-defaults.js.map

package/daemon/dist/domain/rig-policy/rig-policy-defaults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rig-policy-defaults.js","sourceRoot":"","sources":["../../../src/domain/rig-policy/rig-policy-defaults.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,EAAE;AACF,gEAAgE;AAChE,qDAAqD;AACrD,EAAE;AACF,gEAAgE;AAChE,sEAAsE;AACtE,6DAA6D;AAC7D,sEAAsE;AACtE,2BAA2B;AAsC3B,MAAM,CAAC,MAAM,yBAAyB,GAAyD;IAC7F,KAAK,EAAE;QACL,cAAc,EAAE,mBAAmB;QACnC,iBAAiB,EAAE,QAAQ;QAC3B,gBAAgB,EAAE,QAAQ;QAC1B,aAAa,EAAE,SAAS;QACxB,oBAAoB,EAAE,cAAc;QACpC,iBAAiB,EAAE,QAAQ;QAC3B,yBAAyB,EAAE,iBAAiB;KAC7C;IACD,IAAI,EAAE;QACJ,cAAc,EAAE,iCAAiC;QACjD,iBAAiB,EAAE,QAAQ;QAC3B,gBAAgB,EAAE,QAAQ;QAC1B,aAAa,EAAE,QAAQ;QACvB,oBAAoB,EAAE,QAAQ;QAC9B,iBAAiB,EAAE,WAAW,EAAE,6JAA6J;QAC7L,yBAAyB,EAAE,QAAQ;KACpC;IACD,MAAM,EAAE;QACN,cAAc,EAAE,sBAAsB;QACtC,iBAAiB,EAAE,QAAQ;QAC3B,gBAAgB,EAAE,SAAS;QAC3B,aAAa,EAAE,SAAS;QACxB,oBAAoB,EAAE,KAAK;QAC3B,iBAAiB,EAAE,WAAW;QAC9B,yBAAyB,EAAE,iBAAiB;KAC7C;IACD,IAAI,EAAE;QACJ,cAAc,EAAE,mBAAmB;QACnC,iBAAiB,EAAE,QAAQ;QAC3B,gBAAgB,EAAE,QAAQ;QAC1B,aAAa,EAAE,SAAS;QACxB,oBAAoB,EAAE,cAAc;QACpC,iBAAiB,EAAE,QAAQ;QAC3B,yBAAyB,EAAE,iBAAiB;KAC7C;IACD,KAAK,EAAE;QACL,cAAc,EAAE,iCAAiC;QACjD,iBAAiB,EAAE,QAAQ;QAC3B,gBAAgB,EAAE,QAAQ;QAC1B,aAAa,EAAE,SAAS;QACxB,oBAAoB,EAAE,cAAc;QACpC,iBAAiB,EAAE,WAAW;QAC9B,yBAAyB,EAAE,iBAAiB;KAC7C;IACD,KAAK,EAAE;QACL,cAAc,EAAE,sBAAsB;QACtC,iBAAiB,EAAE,MAAM;QACzB,gBAAgB,EAAE,UAAU;QAC5B,aAAa,EAAE,SAAS;QACxB,oBAAoB,EAAE,KAAK;QAC3B,iBAAiB,EAAE,QAAQ;QAC3B,yBAAyB,EAAE,QAAQ;KACpC;CACF,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAsD;IAC1F,KAAK,EAAE,aAAa;IACpB,IAAI,EAAE,aAAa;IACnB,IAAI,EAAE,aAAa;IACnB,MAAM,EAAE,aAAa;IACrB,KAAK,EAAE,YAAY;IACnB,KAAK,EAAE,OAAO;CACf,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA6B,wBAAwB,CAAC"}

package/daemon/dist/domain/rig-policy/rig-policy-store.d.ts

@@ -0,0 +1,46 @@
+import type Database from "better-sqlite3";
+import { type EffectiveOperatorContextMode, type OperatorContextModeBinding, type OperatorContextReadContext, type OperatorContextScope } from "./rig-policy-types.js";
+export interface SetBindingResult {
+    ok: true;
+    binding: OperatorContextModeBinding;
+}
+export interface SetBindingError {
+    ok: false;
+    errors: string[];
+}
+export interface RigPolicyStoreOpts {
+    /** Override the clock for tests; defaults to new Date(). */
+    now?: () => Date;
+}
+export declare class RigPolicyStore {
+    private readonly db;
+    private readonly now;
+    constructor(db: Database.Database, opts?: RigPolicyStoreOpts);
+    /**
+     * Operator-only set. Validates the candidate record + the
+     * scope/qualifier shape, then upserts. Returns the typed binding
+     * on success.
+     *
+     * scope == 'global_host' REQUIRES qualifier === null;
+     * scope != 'global_host' REQUIRES a non-empty qualifier string.
+     * Both are operator/host invariants — the route validates and
+     * the store rejects on disagreement.
+     */
+    setBinding(scope: OperatorContextScope, qualifier: string | null, mode: unknown, candidateRecord: unknown): SetBindingResult | SetBindingError;
+    getBinding(scope: OperatorContextScope, qualifier: string | null): OperatorContextModeBinding | null;
+    listBindings(): OperatorContextModeBinding[];
+    deleteBinding(scope: OperatorContextScope, qualifier: string | null): boolean;
+    /**
+     * Resolve the most-specific applicable binding for a read context.
+     * Returns null when no binding matches — callers MUST treat null as
+     * `unknown_posture` per convention §Q6 (do NOT default to `desk`).
+     *
+     * Specificity ranks (qitem > workstream > rig > global_host) are
+     * defined in rig-policy-types.SCOPE_SPECIFICITY. For each scope the
+     * resolver picks the binding whose qualifier matches the read
+     * context. Among multiple matching bindings, the most-specific
+     * scope wins.
+     */
+    resolveEffective(ctx: OperatorContextReadContext): EffectiveOperatorContextMode | null;
+}
+//# sourceMappingURL=rig-policy-store.d.ts.map

package/daemon/dist/domain/rig-policy/rig-policy-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rig-policy-store.d.ts","sourceRoot":"","sources":["../../../src/domain/rig-policy/rig-policy-store.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EACL,KAAK,4BAA4B,EAEjC,KAAK,0BAA0B,EAE/B,KAAK,0BAA0B,EAC/B,KAAK,oBAAoB,EAE1B,MAAM,uBAAuB,CAAC;AA4B/B,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,IAAI,CAAC;IACT,OAAO,EAAE,0BAA0B,CAAC;CACrC;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,4DAA4D;IAC5D,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAoB;IACvC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAa;gBAErB,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,kBAAkB;IAK5D;;;;;;;;;OASG;IACH,UAAU,CACR,KAAK,EAAE,oBAAoB,EAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,IAAI,EAAE,OAAO,EACb,eAAe,EAAE,OAAO,GACvB,gBAAgB,GAAG,eAAe;IAsDrC,UAAU,CACR,KAAK,EAAE,oBAAoB,EAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,GACvB,0BAA0B,GAAG,IAAI;IASpC,YAAY,IAAI,0BAA0B,EAAE;IAS5C,aAAa,CAAC,KAAK,EAAE,oBAAoB,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO;IAO7E;;;;;;;;;;OAUG;IACH,gBAAgB,CAAC,GAAG,EAAE,0BAA0B,GAAG,4BAA4B,GAAG,IAAI;CA4BvF"}

package/daemon/dist/domain/rig-policy/rig-policy-store.js

@@ -0,0 +1,171 @@
+// Slice 09 — daemon-persisted typed primitive (SQLite-backed).
+//
+// Follows the workspace-primitive precedent: structured table,
+// JSON column for the 10-field record (validator owns integrity at
+// write time). NO parallel/forked store (HG-5).
+//
+// The store exposes:
+//   - setBinding(scope, qualifier, mode, record)  → upserts a row
+//                                                    (mode is binding-level
+//                                                    Component-2 identity;
+//                                                    record is the frozen
+//                                                    10-field Component-3
+//                                                    settings)
+//   - getBinding(scope, qualifier)                → reads one row
+//   - listBindings()                              → all rows (for show)
+//   - resolveEffective(readContext)               → most-specific binding
+//   - deleteBinding(scope, qualifier)             → unset
+//
+// Update authority is operator-only: setBinding hard-codes
+// `set_by = 'operator'`. The HTTP route + CLI are the only authoring
+// surfaces; agent code paths read but never write. (HG-4)
+//
+// HG-SAFE preserved here: this store NEVER writes to permission
+// allowlists / runtime configs / auth / tmux / lifecycle. It writes
+// to ONE table (operator_context_mode_bindings) and reads JSON. A
+// future contributor cannot widen permission authority via this
+// service because the surface area is the bindings table only.
+import { SCOPE_SPECIFICITY, } from "./rig-policy-types.js";
+import { validateModeName, validateRecord } from "./rig-policy-validator.js";
+function rowToBinding(row) {
+    return {
+        id: row.id,
+        mode: row.mode,
+        record: JSON.parse(row.record_json),
+        qualifier: row.qualifier,
+        setAt: row.set_at,
+        setBy: "operator",
+    };
+}
+function bindingId(scope, qualifier) {
+    return `${scope}:${qualifier ?? "host"}`;
+}
+export class RigPolicyStore {
+    db;
+    now;
+    constructor(db, opts) {
+        this.db = db;
+        this.now = opts?.now ?? (() => new Date());
+    }
+    /**
+     * Operator-only set. Validates the candidate record + the
+     * scope/qualifier shape, then upserts. Returns the typed binding
+     * on success.
+     *
+     * scope == 'global_host' REQUIRES qualifier === null;
+     * scope != 'global_host' REQUIRES a non-empty qualifier string.
+     * Both are operator/host invariants — the route validates and
+     * the store rejects on disagreement.
+     */
+    setBinding(scope, qualifier, mode, candidateRecord) {
+        const errors = [];
+        if (scope === "global_host" && qualifier !== null) {
+            errors.push(`Global-host bindings cannot carry a qualifier (got ${JSON.stringify(qualifier)}). Pass null for the global_host scope.`);
+        }
+        if (scope !== "global_host" && (typeof qualifier !== "string" || qualifier.length === 0)) {
+            errors.push(`${scope} bindings require a qualifier (rigId / workstreamId / qitemId). Got ${JSON.stringify(qualifier)}.`);
+        }
+        const modeCheck = validateModeName(mode);
+        if (!modeCheck.ok)
+            errors.push(modeCheck.error);
+        const validation = validateRecord(candidateRecord);
+        if (!validation.ok)
+            errors.push(...validation.errors);
+        if (errors.length > 0 || !modeCheck.ok || !validation.ok) {
+            return { ok: false, errors };
+        }
+        const record = validation.record;
+        if (record.scope !== scope) {
+            return {
+                ok: false,
+                errors: [
+                    `Record scope mismatch: binding scope is "${scope}" but record.scope is "${record.scope}". The record's scope field MUST agree with the binding scope.`,
+                ],
+            };
+        }
+        const id = bindingId(scope, qualifier);
+        const setAt = this.now().toISOString();
+        this.db.prepare(`
+      INSERT INTO operator_context_mode_bindings (id, scope, qualifier, mode, record_json, set_at, set_by)
+      VALUES (?, ?, ?, ?, ?, ?, 'operator')
+      ON CONFLICT(id) DO UPDATE SET
+        mode = excluded.mode,
+        record_json = excluded.record_json,
+        set_at = excluded.set_at
+    `).run(id, scope, qualifier, modeCheck.mode, JSON.stringify(record), setAt);
+        return {
+            ok: true,
+            binding: {
+                id,
+                mode: modeCheck.mode,
+                record,
+                qualifier,
+                setAt,
+                setBy: "operator",
+            },
+        };
+    }
+    getBinding(scope, qualifier) {
+        const row = this.db.prepare(`
+      SELECT id, scope, qualifier, mode, record_json, set_at, set_by
+      FROM operator_context_mode_bindings
+      WHERE id = ?
+    `).get(bindingId(scope, qualifier));
+        return row ? rowToBinding(row) : null;
+    }
+    listBindings() {
+        const rows = this.db.prepare(`
+      SELECT id, scope, qualifier, mode, record_json, set_at, set_by
+      FROM operator_context_mode_bindings
+      ORDER BY scope, qualifier NULLS FIRST, id
+    `).all();
+        return rows.map(rowToBinding);
+    }
+    deleteBinding(scope, qualifier) {
+        const info = this.db.prepare(`
+      DELETE FROM operator_context_mode_bindings WHERE id = ?
+    `).run(bindingId(scope, qualifier));
+        return info.changes > 0;
+    }
+    /**
+     * Resolve the most-specific applicable binding for a read context.
+     * Returns null when no binding matches — callers MUST treat null as
+     * `unknown_posture` per convention §Q6 (do NOT default to `desk`).
+     *
+     * Specificity ranks (qitem > workstream > rig > global_host) are
+     * defined in rig-policy-types.SCOPE_SPECIFICITY. For each scope the
+     * resolver picks the binding whose qualifier matches the read
+     * context. Among multiple matching bindings, the most-specific
+     * scope wins.
+     */
+    resolveEffective(ctx) {
+        const candidates = [];
+        if (ctx.qitemId) {
+            const b = this.getBinding("qitem", ctx.qitemId);
+            if (b)
+                candidates.push(b);
+        }
+        if (ctx.workstreamId) {
+            const b = this.getBinding("workstream", ctx.workstreamId);
+            if (b)
+                candidates.push(b);
+        }
+        if (ctx.rigId) {
+            const b = this.getBinding("rig", ctx.rigId);
+            if (b)
+                candidates.push(b);
+        }
+        const host = this.getBinding("global_host", null);
+        if (host)
+            candidates.push(host);
+        if (candidates.length === 0)
+            return null;
+        candidates.sort((a, b) => SCOPE_SPECIFICITY[b.record.scope] - SCOPE_SPECIFICITY[a.record.scope]);
+        const winner = candidates[0];
+        return {
+            binding: winner,
+            resolvedScope: winner.record.scope,
+        };
+    }
+}
+//# sourceMappingURL=rig-policy-store.js.map

package/daemon/dist/domain/rig-policy/rig-policy-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rig-policy-store.js","sourceRoot":"","sources":["../../../src/domain/rig-policy/rig-policy-store.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,EAAE;AACF,+DAA+D;AAC/D,mEAAmE;AACnE,gDAAgD;AAChD,EAAE;AACF,qBAAqB;AACrB,kEAAkE;AAClE,4EAA4E;AAC5E,2EAA2E;AAC3E,0EAA0E;AAC1E,0EAA0E;AAC1E,+DAA+D;AAC/D,kEAAkE;AAClE,wEAAwE;AACxE,0EAA0E;AAC1E,0DAA0D;AAC1D,EAAE;AACF,2DAA2D;AAC3D,qEAAqE;AACrE,0DAA0D;AAC1D,EAAE;AACF,gEAAgE;AAChE,oEAAoE;AACpE,kEAAkE;AAClE,gEAAgE;AAChE,+DAA+D;AAG/D,OAAO,EAOL,iBAAiB,GAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAY7E,SAAS,YAAY,CAAC,GAAe;IACnC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAA8B;QAChE,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,KAAK,EAAE,GAAG,CAAC,MAAM;QACjB,KAAK,EAAE,UAAU;KAClB,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,KAA2B,EAAE,SAAwB;IACtE,OAAO,GAAG,KAAK,IAAI,SAAS,IAAI,MAAM,EAAE,CAAC;AAC3C,CAAC;AAiBD,MAAM,OAAO,cAAc;IACR,EAAE,CAAoB;IACtB,GAAG,CAAa;IAEjC,YAAY,EAAqB,EAAE,IAAyB;QAC1D,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,GAAG,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED;;;;;;;;;OASG;IACH,UAAU,CACR,KAA2B,EAC3B,SAAwB,EACxB,IAAa,EACb,eAAwB;QAExB,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,KAAK,KAAK,aAAa,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YAClD,MAAM,CAAC,IAAI,CACT,sDAAsD,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,yCAAyC,CACzH,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,KAAK,aAAa,IAAI,CAAC,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;YACzF,MAAM,CAAC,IAAI,CACT,GAAG,KAAK,uEAAuE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,CAC5G,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,SAAS,CAAC,EAAE;YAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,UAAU,GAAG,cAAc,CAAC,eAAe,CAAC,CAAC;QACnD,IAAI,CAAC,UAAU,CAAC,EAAE;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACzD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAC/B,CAAC;QAED,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QACjC,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;YAC3B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE;oBACN,4CAA4C,KAAK,0BAA0B,MAAM,CAAC,KAAK,gEAAgE;iBACxJ;aACF,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,GAAG,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;QACvC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;;;KAOf,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;QAE5E,OAAO;YACL,EAAE,EAAE,IAAI;YACR,OAAO,EAAE;gBACP,EAAE;gBACF,IAAI,EAAE,SAAS,CAAC,IAAI;gBACpB,MAAM;gBACN,SAAS;gBACT,KAAK;gBACL,KAAK,EAAE,UAAU;aAClB;SACF,CAAC;IACJ,CAAC;IAED,UAAU,CACR,KAA2B,EAC3B,SAAwB;QAExB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;KAI3B,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,CAA2B,CAAC;QAC9D,OAAO,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,CAAC;IAED,YAAY;QACV,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;KAI5B,CAAC,CAAC,GAAG,EAAkB,CAAC;QACzB,OAAO,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAChC,CAAC;IAED,aAAa,CAAC,KAA2B,EAAE,SAAwB;QACjE,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;KAE5B,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;IAC1B,CAAC;IAED;;;;;;;;;;OAUG;IACH,gBAAgB,CAAC,GAA+B;QAC9C,MAAM,UAAU,GAAiC,EAAE,CAAC;QACpD,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAChB,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YAChD,IAAI,CAAC;gBAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;YACrB,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;YAC1D,IAAI,CAAC;gBAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YACd,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;YAC5C,IAAI,CAAC;gBAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;QAClD,IAAI,IAAI;YAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEhC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAEzC,UAAU,CAAC,IAAI,CACb,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAChF,CAAC;QACF,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAE,CAAC;QAC9B,OAAO;YACL,OAAO,EAAE,MAAM;YACf,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK;SACnC,CAAC;IACJ,CAAC;CACF"}

package/daemon/dist/domain/rig-policy/rig-policy-types.d.ts

@@ -0,0 +1,145 @@
+/**
+ * Component 2 — six reserved mode names. Lowercase single English
+ * words; synonyms and numeric aliases (`L0`–`L3`, `operator:L<n>`)
+ * are explicitly forbidden by the convention. The L0–L3 collision
+ * warning at `conventions/operator-context-mode-system/README.md`
+ * §"L0–L3 Collision Warning" is load-bearing.
+ */
+export type OperatorContextMode = "sleep" | "desk" | "mobile" | "away" | "focus" | "debug";
+export declare const OPERATOR_CONTEXT_MODES: readonly ["sleep", "desk", "mobile", "away", "focus", "debug"];
+/**
+ * Component 4 — four scopes. More-specific overrides less-specific
+ * when multiple modes coexist (Scope hierarchy: qitem > workstream >
+ * rig > global_host).
+ */
+export type OperatorContextScope = "global_host" | "rig" | "workstream" | "qitem";
+export declare const OPERATOR_CONTEXT_SCOPES: readonly ["global_host", "rig", "workstream", "qitem"];
+/**
+ * Scope specificity ranks; higher number = more specific. Used by the
+ * store's effective-mode resolver. NOT operator-facing.
+ */
+export declare const SCOPE_SPECIFICITY: Record<OperatorContextScope, number>;
+export type AutonomyScope = "pre_approved_only" | "bounded_continuation" | "full_autonomy_within_workstream" | "full_autonomy";
+export type HeartbeatCadence = "sparse" | "normal" | "fast";
+export type InspectionDepth = "surface" | "normal" | "forensic";
+export type UpdateDetail = "compact" | "normal" | "verbose";
+export type EscalationThreshold = "low" | "normal" | "high" | "blocker_only";
+/**
+ * Component 3 — concurrency_limit. Suggested values include the enum
+ * forms below + structured integer values (1..N). v0 ships the enum
+ * subset for simplicity; an integer specialization can graduate via
+ * Mode 1.5 amendment when fixture-backed evidence appears.
+ */
+export type ConcurrencyLimit = "serial" | "2" | "4" | "unlimited";
+/**
+ * Component 6 — Safety Policy load-bearing rule:
+ *   `permission_prompt_posture` MUST NOT include auto-accept in v0 or
+ *   any descendant. The safe values are exactly these three.
+ *
+ * The enum is STRUCTURALLY closed: no auto-accept literal exists in
+ * the union. A contributor cannot "set permissionPromptPosture =
+ * 'auto_accept'" because the literal isn't a member; TypeScript
+ * rejects at compile time. The validator additionally rejects any
+ * non-member string at runtime (defense-in-depth for inputs that
+ * bypass typing — JSON file, env var, etc).
+ *
+ * If a future amendment proposes auto-accept, it MUST first amend
+ * the permission-posture canon at
+ * `conventions/permission-posture/README.md` AND the FROZEN
+ * operator-context-mode safety policy. This slice and its
+ * descendants reject auto-accept independently of any caller intent.
+ */
+export type PermissionPromptPosture = "normal" | "batch_for_human" | "do_not_prompt_unless_blocked";
+export declare const SAFE_PERMISSION_PROMPT_POSTURES: readonly ["normal", "batch_for_human", "do_not_prompt_unless_blocked"];
+/**
+ * Component 4 — citation source. Free-text in v0 (operator may cite
+ * `current-mode.md`, a qitem id, a chatroom topic, or a convention-only
+ * declaration). Structured citations are a Mode 1.5 amendment per
+ * the convention.
+ */
+export type EvidenceCitation = string;
+/**
+ * Component 4 — expiry_or_stale_rule. v0 declares the field with a
+ * conservative default ("re_confirm_on_long_gap"); the numeric
+ * threshold is deferred per convention Q3 to a Mode 2 helper slice.
+ * The rule values below enumerate the supported re-confirmation
+ * triggers. NO silent-switch value exists — drift is always a
+ * question, never an auto-mode-change.
+ */
+export type ExpiryOrStaleRule = "none" | "re_confirm_on_long_gap" | "re_confirm_on_day_boundary" | "re_confirm_on_observed_conflict";
+export declare const STALE_RULES: readonly ["none", "re_confirm_on_long_gap", "re_confirm_on_day_boundary", "re_confirm_on_observed_conflict"];
+/**
+ * Component 3 — the 10-field SETTINGS schema. ALL fields are required
+ * by the validator; none may be merged or dropped. Reviewer field-set
+ * integrity check (HG-2).
+ *
+ * **`mode` is NOT in this record.** Mode is the binding's identity
+ * (Component 2 — the name of the named bundle); the record parameterizes
+ * how that named mode shapes ergonomics. The binding wrapper
+ * (OperatorContextModeBinding) carries `mode` at the top level so the
+ * frozen 10-field settings record stays exactly 10 fields, as declared
+ * by the convention's §Component 3 table.
+ */
+export interface OperatorContextModeRecord {
+    autonomy_scope: AutonomyScope;
+    heartbeat_cadence: HeartbeatCadence;
+    inspection_depth: InspectionDepth;
+    update_detail: UpdateDetail;
+    escalation_threshold: EscalationThreshold;
+    concurrency_limit: ConcurrencyLimit;
+    permission_prompt_posture: PermissionPromptPosture;
+    scope: OperatorContextScope;
+    expiry_or_stale_rule: ExpiryOrStaleRule;
+    evidence_citation: EvidenceCitation;
+}
+/**
+ * A scoped binding of a mode to a target context. The store keys rows
+ * by (scope, qualifier) so the same scope can hold many bindings
+ * (e.g., multiple rig-scoped modes), and the effective-mode resolver
+ * picks the right one for the (rig, workstream, qitem) read context.
+ *
+ * - `global_host` bindings have a null qualifier.
+ * - `rig` bindings carry the rig id as qualifier.
+ * - `workstream` bindings carry the workstream id as qualifier.
+ * - `qitem` bindings carry the qitem id as qualifier.
+ */
+export interface OperatorContextModeBinding {
+    /** Stable identifier — `${scope}:${qualifier ?? "host"}` v0. */
+    id: string;
+    /** Component 2 — the named mode this binding selects. Lives at the
+     *  binding (not in the 10-field settings record) so the frozen
+     *  Component-3 record stays exactly 10 fields. */
+    mode: OperatorContextMode;
+    record: OperatorContextModeRecord;
+    /** Qualifier value (rigId, workstreamId, qitemId) — null when scope is global_host. */
+    qualifier: string | null;
+    /** ISO timestamp of last set. Used by drift-rule consumers. */
+    setAt: string;
+    /** Who set it. Operator-only by contract — see update authority. */
+    setBy: "operator";
+}
+/**
+ * The effective-mode read result. The resolver returns the most
+ * specific binding for a (rig?, workstream?, qitem?) context, or
+ * `null` when no binding exists at any matching scope.
+ *
+ * Per convention §"Q6 — Absent mode is unknown_posture, NOT desk":
+ * callers MUST treat a null effective mode as `unknown_posture` and
+ * re-confirm to a real mode explicitly. The resolver does NOT default
+ * to `desk` and never invents a binding.
+ */
+export interface EffectiveOperatorContextMode {
+    binding: OperatorContextModeBinding;
+    /** Why this binding won (which scope; for debug + UI surfacing). */
+    resolvedScope: OperatorContextScope;
+}
+/**
+ * Read context for the resolver. All fields optional; the resolver
+ * picks the most-specific applicable binding.
+ */
+export interface OperatorContextReadContext {
+    rigId?: string;
+    workstreamId?: string;
+    qitemId?: string;
+}
+//# sourceMappingURL=rig-policy-types.d.ts.map

package/daemon/dist/domain/rig-policy/rig-policy-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rig-policy-types.d.ts","sourceRoot":"","sources":["../../../src/domain/rig-policy/rig-policy-types.ts"],"names":[],"mappings":"AAiBA;;;;;;GAMG;AACH,MAAM,MAAM,mBAAmB,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;AAE3F,eAAO,MAAM,sBAAsB,gEAOgB,CAAC;AAEpD;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG,aAAa,GAAG,KAAK,GAAG,YAAY,GAAG,OAAO,CAAC;AAElF,eAAO,MAAM,uBAAuB,wDAKgB,CAAC;AAErD;;;GAGG;AACH,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,oBAAoB,EAAE,MAAM,CAKlE,CAAC;AAIF,MAAM,MAAM,aAAa,GACrB,mBAAmB,GACnB,sBAAsB,GACtB,iCAAiC,GACjC,eAAe,CAAC;AAEpB,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;AAE5D,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,QAAQ,GAAG,UAAU,CAAC;AAEhE,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE5D,MAAM,MAAM,mBAAmB,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,cAAc,CAAC;AAE7E;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,GAAG,GAAG,GAAG,GAAG,WAAW,CAAC;AAElE;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,MAAM,uBAAuB,GAC/B,QAAQ,GACR,iBAAiB,GACjB,8BAA8B,CAAC;AAEnC,eAAO,MAAM,+BAA+B,wEAIW,CAAC;AAExD;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEtC;;;;;;;GAOG;AACH,MAAM,MAAM,iBAAiB,GACzB,MAAM,GACN,wBAAwB,GACxB,4BAA4B,GAC5B,iCAAiC,CAAC;AAEtC,eAAO,MAAM,WAAW,8GAKyB,CAAC;AAElD;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,yBAAyB;IACxC,cAAc,EAAE,aAAa,CAAC;IAC9B,iBAAiB,EAAE,gBAAgB,CAAC;IACpC,gBAAgB,EAAE,eAAe,CAAC;IAClC,aAAa,EAAE,YAAY,CAAC;IAC5B,oBAAoB,EAAE,mBAAmB,CAAC;IAC1C,iBAAiB,EAAE,gBAAgB,CAAC;IACpC,yBAAyB,EAAE,uBAAuB,CAAC;IACnD,KAAK,EAAE,oBAAoB,CAAC;IAC5B,oBAAoB,EAAE,iBAAiB,CAAC;IACxC,iBAAiB,EAAE,gBAAgB,CAAC;CACrC;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,0BAA0B;IACzC,gEAAgE;IAChE,EAAE,EAAE,MAAM,CAAC;IACX;;sDAEkD;IAClD,IAAI,EAAE,mBAAmB,CAAC;IAC1B,MAAM,EAAE,yBAAyB,CAAC;IAClC,uFAAuF;IACvF,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,+DAA+D;IAC/D,KAAK,EAAE,MAAM,CAAC;IACd,oEAAoE;IACpE,KAAK,EAAE,UAAU,CAAC;CACnB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,4BAA4B;IAC3C,OAAO,EAAE,0BAA0B,CAAC;IACpC,oEAAoE;IACpE,aAAa,EAAE,oBAAoB,CAAC;CACrC;AAED;;;GAGG;AACH,MAAM,WAAW,0BAA0B;IACzC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB"}

package/daemon/dist/domain/rig-policy/rig-policy-types.js

@@ -0,0 +1,52 @@
+// Slice 09 — Rig Policy Primitive (OPR.0.3.2.9).
+//
+// Typed graduation of the operator-context-mode-system v0 doctrine. The
+// convention at conventions/operator-context-mode-system/README.md is
+// the FROZEN spec; types below mirror it as closed enums + a 10-field
+// schema. None of these fields may be silently merged or dropped — the
+// validator enforces field-set integrity.
+//
+// GATE-ZERO (HG-SAFE): this primitive is permission-ADJACENT but NEVER
+// permission-modifying. `permission_prompt_posture` is a descriptive
+// operator-set ergonomic hint. The enum below is STRUCTURALLY
+// incapable of expressing auto-accept: there is no auto-accept member
+// in the union, and the validator further rejects unknown values. Any
+// future contributor who tries to add an auto-accept value here MUST
+// also amend the permission-posture convention + safety policy in the
+// FROZEN contract — review will reject otherwise.
+export const OPERATOR_CONTEXT_MODES = [
+    "sleep",
+    "desk",
+    "mobile",
+    "away",
+    "focus",
+    "debug",
+];
+export const OPERATOR_CONTEXT_SCOPES = [
+    "global_host",
+    "rig",
+    "workstream",
+    "qitem",
+];
+/**
+ * Scope specificity ranks; higher number = more specific. Used by the
+ * store's effective-mode resolver. NOT operator-facing.
+ */
+export const SCOPE_SPECIFICITY = {
+    global_host: 0,
+    rig: 1,
+    workstream: 2,
+    qitem: 3,
+};
+export const SAFE_PERMISSION_PROMPT_POSTURES = [
+    "normal",
+    "batch_for_human",
+    "do_not_prompt_unless_blocked",
+];
+export const STALE_RULES = [
+    "none",
+    "re_confirm_on_long_gap",
+    "re_confirm_on_day_boundary",
+    "re_confirm_on_observed_conflict",
+];
+//# sourceMappingURL=rig-policy-types.js.map

package/daemon/dist/domain/rig-policy/rig-policy-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rig-policy-types.js","sourceRoot":"","sources":["../../../src/domain/rig-policy/rig-policy-types.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD,EAAE;AACF,wEAAwE;AACxE,sEAAsE;AACtE,sEAAsE;AACtE,uEAAuE;AACvE,0CAA0C;AAC1C,EAAE;AACF,uEAAuE;AACvE,qEAAqE;AACrE,8DAA8D;AAC9D,sEAAsE;AACtE,sEAAsE;AACtE,qEAAqE;AACrE,sEAAsE;AACtE,kDAAkD;AAWlD,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,OAAO;IACP,MAAM;IACN,QAAQ;IACR,MAAM;IACN,OAAO;IACP,OAAO;CAC0C,CAAC;AASpD,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,aAAa;IACb,KAAK;IACL,YAAY;IACZ,OAAO;CAC2C,CAAC;AAErD;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAyC;IACrE,WAAW,EAAE,CAAC;IACd,GAAG,EAAE,CAAC;IACN,UAAU,EAAE,CAAC;IACb,KAAK,EAAE,CAAC;CACT,CAAC;AAiDF,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,QAAQ;IACR,iBAAiB;IACjB,8BAA8B;CACuB,CAAC;AAwBxD,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,MAAM;IACN,wBAAwB;IACxB,4BAA4B;IAC5B,iCAAiC;CACc,CAAC"}

package/daemon/dist/domain/rig-policy/rig-policy-validator.d.ts

@@ -0,0 +1,58 @@
+import { type OperatorContextMode, type OperatorContextModeRecord } from "./rig-policy-types.js";
+/**
+ * The 10 required fields of an OperatorContextModeRecord. Used by
+ * validateRecord to enumerate field-set integrity (HG-2) — both
+ * presence and exhaustiveness.
+ *
+ * NOTE: `mode` is NOT in this list. Mode is the binding selector
+ * (Component 2 vocabulary), not part of the Component-3 settings
+ * record. The store/route validate mode separately at the binding
+ * boundary; this validator enforces only the 10 Component-3 fields.
+ */
+export declare const REQUIRED_RECORD_FIELDS: readonly (keyof OperatorContextModeRecord)[];
+export interface ValidationOk {
+    ok: true;
+    record: OperatorContextModeRecord;
+}
+export interface ValidationError {
+    ok: false;
+    errors: string[];
+}
+export type ValidationResult = ValidationOk | ValidationError;
+/**
+ * Validate a candidate record against the FROZEN contract. Returns
+ * the typed record on success OR a list of 3-part error messages on
+ * failure (one per offending field; report all at once so an
+ * operator doesn't have to retry per error).
+ *
+ * Strict: any field outside REQUIRED_RECORD_FIELDS is rejected
+ * (HG-2 — field-set integrity; "no merged/dropped fields").
+ */
+export declare function validateRecord(raw: unknown): ValidationResult;
+/**
+ * Validate an operator-supplied mode name. Mode lives outside the
+ * 10-field record (Component 2 vocabulary, not Component 3 settings).
+ * The route + store call this at the binding boundary; the
+ * disambiguator below (for invocation parsing) is separate.
+ */
+export declare function validateModeName(raw: unknown): {
+    ok: true;
+    mode: OperatorContextMode;
+} | {
+    ok: false;
+    error: string;
+};
+/**
+ * Disambiguate operator-supplied mode input. Per convention §Component 4
+ * "Bare-Word Disambiguation":
+ *
+ * - A bare word that is one of the six reserved modes → invocation
+ * - An explicit `mode:` prefix → invocation
+ * - A word embedded in a sentence → NOT invocation (caller treats as topic)
+ *
+ * Returns the canonical mode name when the input is unambiguously an
+ * invocation; null otherwise. Caller emits a clarification question
+ * for null+bare-multi-word inputs (per convention "ask once").
+ */
+export declare function disambiguateModeInvocation(rawInput: string): OperatorContextMode | null;
+//# sourceMappingURL=rig-policy-validator.d.ts.map

package/daemon/dist/domain/rig-policy/rig-policy-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rig-policy-validator.d.ts","sourceRoot":"","sources":["../../../src/domain/rig-policy/rig-policy-validator.ts"],"names":[],"mappings":"AAgBA,OAAO,EAOL,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAQ/B,MAAM,uBAAuB,CAAC;AAwB/B;;;;;;;;;GASG;AACH,eAAO,MAAM,sBAAsB,EAAE,SAAS,CAAC,MAAM,yBAAyB,CAAC,EAW9E,CAAC;AAEF,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,yBAAyB,CAAC;CACnC;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,MAAM,gBAAgB,GAAG,YAAY,GAAG,eAAe,CAAC;AAuC9D;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,gBAAgB,CAgK7D;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,OAAO,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,mBAAmB,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAQrH;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI,CAyBvF"}