@openrig/cli 0.5.0 → 0.5.1

package/node_modules/@openrig/daemon/dist/domain/bundle-skills-router.d.ts

@@ -0,0 +1,62 @@
+/**
+ * Bundle skills router (Item 6 / slice-05 Checkpoint 7.2).
+ *
+ * Pure function. Copies skill files declared in a bundle manifest's skills[]
+ * block from the bundle's extracted tree to the operator skills library.
+ * No daemon dependencies — fully unit-testable via FsOps injection.
+ *
+ * Safety: each declared skill path is treated as untrusted manifest content;
+ * the helper rejects paths that escape the bundle tree (path containment
+ * check mirrors the bundle-source-resolver pattern). The output target
+ * directory is created via mkdirp.
+ *
+ * Honest-scoping: missing source files surface as warnings in the result
+ * (NOT thrown errors) so the install lifecycle can continue with what's
+ * available. Same for absent skills library: caller decides to skip-or-fail.
+ *
+ * /install handler integration lands at Checkpoint 7.3.
+ */
+/** Filesystem injection point — real impl wraps node:fs. Tests substitute in-memory. */
+export interface SkillsRouterFsOps {
+    exists: (path: string) => boolean;
+    readFile: (path: string) => string;
+    writeFile: (path: string, content: string) => void;
+    mkdirp: (path: string) => void;
+}
+/** Inputs to routeSkills. */
+export interface RouteSkillsInput {
+    /** Absolute path to the bundle's extracted root (tmp dir from unpack). */
+    bundleRoot: string;
+    /** Relative skill paths declared in the manifest's skills[] block. */
+    declaredSkills: string[];
+    /** Absolute path to the operator skills library (default ~/.openrig/skills). */
+    targetSkillsDir: string;
+}
+/** One routed skill (or one rejection). */
+export interface RoutedSkillRecord {
+    /** Declared path from manifest.skills[]. */
+    declaredPath: string;
+    /** "routed" = copied successfully; "missing" = source not in bundle;
+     * "unsafe" = escapes bundle workspace; "no_library" = target dir not
+     * present and caller did not request creation (reserved for future
+     * library-reachability mode). */
+    status: "routed" | "missing" | "unsafe";
+    /** Where the skill landed in the target library (absolute path), if routed. */
+    installedAt?: string;
+    /** Human-readable detail (3-part error shape input for caller). */
+    detail?: string;
+}
+/** Aggregate routing result. */
+export interface RouteSkillsResult {
+    records: RoutedSkillRecord[];
+    routedCount: number;
+    rejectedCount: number;
+}
+/**
+ * Route each declared skill from the bundle tree to the operator skills
+ * library. Per-skill safety: resolved source path must stay inside bundleRoot;
+ * skipped if missing from bundle. Caller writes the install audit record
+ * (Item 4 chain) using the records returned here.
+ */
+export declare function routeSkills(input: RouteSkillsInput, fs: SkillsRouterFsOps): RouteSkillsResult;
+//# sourceMappingURL=bundle-skills-router.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/bundle-skills-router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle-skills-router.d.ts","sourceRoot":"","sources":["../../src/domain/bundle-skills-router.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,wFAAwF;AACxF,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IAClC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IACnC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACnD,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAChC;AAED,6BAA6B;AAC7B,MAAM,WAAW,gBAAgB;IAC/B,0EAA0E;IAC1E,UAAU,EAAE,MAAM,CAAC;IACnB,sEAAsE;IACtE,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,gFAAgF;IAChF,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,2CAA2C;AAC3C,MAAM,WAAW,iBAAiB;IAChC,4CAA4C;IAC5C,YAAY,EAAE,MAAM,CAAC;IACrB;;;qCAGiC;IACjC,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;IACxC,+EAA+E;IAC/E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mEAAmE;IACnE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,gCAAgC;AAChC,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,gBAAgB,EAAE,EAAE,EAAE,iBAAiB,GAAG,iBAAiB,CAiE7F"}

package/node_modules/@openrig/daemon/dist/domain/bundle-skills-router.js

@@ -0,0 +1,90 @@
+/**
+ * Bundle skills router (Item 6 / slice-05 Checkpoint 7.2).
+ *
+ * Pure function. Copies skill files declared in a bundle manifest's skills[]
+ * block from the bundle's extracted tree to the operator skills library.
+ * No daemon dependencies — fully unit-testable via FsOps injection.
+ *
+ * Safety: each declared skill path is treated as untrusted manifest content;
+ * the helper rejects paths that escape the bundle tree (path containment
+ * check mirrors the bundle-source-resolver pattern). The output target
+ * directory is created via mkdirp.
+ *
+ * Honest-scoping: missing source files surface as warnings in the result
+ * (NOT thrown errors) so the install lifecycle can continue with what's
+ * available. Same for absent skills library: caller decides to skip-or-fail.
+ *
+ * /install handler integration lands at Checkpoint 7.3.
+ */
+import nodePath from "node:path";
+/**
+ * Route each declared skill from the bundle tree to the operator skills
+ * library. Per-skill safety: resolved source path must stay inside bundleRoot;
+ * skipped if missing from bundle. Caller writes the install audit record
+ * (Item 4 chain) using the records returned here.
+ */
+export function routeSkills(input, fs) {
+    const records = [];
+    const bundleRootResolved = nodePath.resolve(input.bundleRoot);
+    const targetRootResolved = nodePath.resolve(input.targetSkillsDir);
+    fs.mkdirp(input.targetSkillsDir);
+    for (const declared of input.declaredSkills) {
+        const sourceAbs = nodePath.resolve(input.bundleRoot, declared);
+        // Defense-in-depth path-containment on SOURCE (mirrors bundle-source-
+        // resolver pattern; the manifest validator already rejects unsafe paths
+        // via isRelativeSafePath but we re-check here in case the input bypassed
+        // validation upstream).
+        if (sourceAbs !== bundleRootResolved && !sourceAbs.startsWith(bundleRootResolved + nodePath.sep)) {
+            records.push({
+                declaredPath: declared,
+                status: "unsafe",
+                detail: `skill path '${declared}' escapes bundle workspace; rejected`,
+            });
+            continue;
+        }
+        if (!fs.exists(sourceAbs)) {
+            records.push({
+                declaredPath: declared,
+                status: "missing",
+                detail: `skill source '${declared}' not present in bundle; skipped`,
+            });
+            continue;
+        }
+        // Target path mirrors the declared path under the target skills directory.
+        // Operator's skill library inherits the bundle's directory layout for the
+        // declared skills (e.g., skills/foo/SKILL.md → <target>/foo/SKILL.md);
+        // strip the leading "skills/" prefix if present so the target dir is the
+        // root of the operator's skill tree.
+        const declaredTrimmed = declared.startsWith("skills/") ? declared.slice("skills/".length) : declared;
+        const targetAbs = nodePath.resolve(input.targetSkillsDir, declaredTrimmed);
+        // Defense-in-depth path-containment on TARGET (B1 repair on
+        // qitem-20260518215234-f84fff45). The leading "skills/" strip can promote
+        // a relative segment that looks safe under bundleRoot (e.g.
+        // "skills/../outside/SKILL.md" passes source-containment because the bundle
+        // tree may contain "outside/SKILL.md", but stripping yields
+        // "../outside/SKILL.md" which would escape targetSkillsDir). Reject if the
+        // target resolves outside the target library. Banked lesson:
+        // feedback_pre_existing_trust_boundary_reuse_canonical_helper — contain
+        // BOTH source and target when handling untrusted path input.
+        if (targetAbs !== targetRootResolved && !targetAbs.startsWith(targetRootResolved + nodePath.sep)) {
+            records.push({
+                declaredPath: declared,
+                status: "unsafe",
+                detail: `skill target path for '${declared}' escapes target skills library; rejected`,
+            });
+            continue;
+        }
+        fs.mkdirp(nodePath.dirname(targetAbs));
+        const content = fs.readFile(sourceAbs);
+        fs.writeFile(targetAbs, content);
+        records.push({
+            declaredPath: declared,
+            status: "routed",
+            installedAt: targetAbs,
+        });
+    }
+    const routedCount = records.filter((r) => r.status === "routed").length;
+    const rejectedCount = records.length - routedCount;
+    return { records, routedCount, rejectedCount };
+}
+//# sourceMappingURL=bundle-skills-router.js.map

package/node_modules/@openrig/daemon/dist/domain/bundle-skills-router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle-skills-router.js","sourceRoot":"","sources":["../../src/domain/bundle-skills-router.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,QAAQ,MAAM,WAAW,CAAC;AA0CjC;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,KAAuB,EAAE,EAAqB;IACxE,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,MAAM,kBAAkB,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC9D,MAAM,kBAAkB,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IACnE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IAEjC,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QAC5C,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC/D,sEAAsE;QACtE,wEAAwE;QACxE,yEAAyE;QACzE,wBAAwB;QACxB,IAAI,SAAS,KAAK,kBAAkB,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,kBAAkB,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACjG,OAAO,CAAC,IAAI,CAAC;gBACX,YAAY,EAAE,QAAQ;gBACtB,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE,eAAe,QAAQ,sCAAsC;aACtE,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,IAAI,CAAC;gBACX,YAAY,EAAE,QAAQ;gBACtB,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,iBAAiB,QAAQ,kCAAkC;aACpE,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,2EAA2E;QAC3E,0EAA0E;QAC1E,uEAAuE;QACvE,yEAAyE;QACzE,qCAAqC;QACrC,MAAM,eAAe,GAAG,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QACrG,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;QAC3E,4DAA4D;QAC5D,0EAA0E;QAC1E,4DAA4D;QAC5D,4EAA4E;QAC5E,4DAA4D;QAC5D,2EAA2E;QAC3E,6DAA6D;QAC7D,wEAAwE;QACxE,6DAA6D;QAC7D,IAAI,SAAS,KAAK,kBAAkB,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,kBAAkB,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACjG,OAAO,CAAC,IAAI,CAAC;gBACX,YAAY,EAAE,QAAQ;gBACtB,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE,0BAA0B,QAAQ,2CAA2C;aACtF,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACvC,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACjC,OAAO,CAAC,IAAI,CAAC;YACX,YAAY,EAAE,QAAQ;YACtB,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,SAAS;SACvB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;IACxE,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,GAAG,WAAW,CAAC;IACnD,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC;AACjD,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/bundle-source-resolver.d.ts

@@ -0,0 +1,44 @@
+import { type LegacyBundleManifest as BundleManifest } from "./bundle-types.js";
+import type { ResolvedPackage, FsOps } from "./package-resolver.js";
+/** Result of resolving a bundle for bootstrap consumption */
+export interface BundleResolvedSource {
+    specPath: string;
+    resolvedPackages: ResolvedPackage[];
+    /** Map from original ref (as it appears in rig spec package_refs) to resolved package */
+    packageRefMap: Record<string, ResolvedPackage>;
+    manifest: BundleManifest;
+    tempDir: string;
+}
+/**
+ * Resolves a .rigbundle archive into bootstrap-compatible sources.
+ * Extracts, verifies, parses manifest, maps vendored packages.
+ */
+export declare class LegacyBundleSourceResolver {
+    private fsOps;
+    constructor(deps: {
+        fsOps: FsOps;
+    });
+    /**
+     * Resolve a bundle archive into bootstrap-compatible sources.
+     * Caller must call cleanup(tempDir) after use.
+     */
+    resolve(bundlePath: string): Promise<BundleResolvedSource>;
+    /** Remove the temp extraction directory. */
+    cleanup(tempDir: string): void;
+}
+import { type PodBundleManifest } from "./bundle-types.js";
+/** Result of resolving a pod-aware bundle */
+export interface PodBundleResolvedSource {
+    specPath: string;
+    manifest: PodBundleManifest;
+    tempDir: string;
+}
+/**
+ * Resolves a pod-aware .rigbundle archive (schemaVersion 2).
+ * Extracts, verifies manifest shape, returns paths for downstream resolution.
+ */
+export declare class PodBundleSourceResolver {
+    resolve(bundlePath: string): Promise<PodBundleResolvedSource>;
+    cleanup(tempDir: string): void;
+}
+//# sourceMappingURL=bundle-source-resolver.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/bundle-source-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle-source-resolver.d.ts","sourceRoot":"","sources":["../../src/domain/bundle-source-resolver.ts"],"names":[],"mappings":"AAKA,OAAO,EAAsK,KAAK,oBAAoB,IAAI,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEpP,OAAO,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAEpE,6DAA6D;AAC7D,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,eAAe,EAAE,CAAC;IACpC,yFAAyF;IACzF,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC/C,QAAQ,EAAE,cAAc,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AAEH,qBAAa,0BAA0B;IACrC,OAAO,CAAC,KAAK,CAAQ;gBAET,IAAI,EAAE;QAAE,KAAK,EAAE,KAAK,CAAA;KAAE;IAIlC;;;OAGG;IACG,OAAO,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAuEhE,4CAA4C;IAC5C,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;CAO/B;AAID,OAAO,EAAqD,KAAK,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAE9G,6CAA6C;AAC7C,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,qBAAa,uBAAuB;IAC5B,OAAO,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAwDnE,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;CAO/B"}

package/node_modules/@openrig/daemon/dist/domain/bundle-source-resolver.js

@@ -0,0 +1,158 @@
+import os from "node:os";
+import fs from "node:fs";
+import nodePath from "node:path";
+import { unpack } from "./bundle-archive.js";
+// TODO: AS-T12 — migrate to pod-aware bundle types
+import { parseLegacyBundleManifest as parseBundleManifest, validateLegacyBundleManifest as validateBundleManifest, normalizeLegacyBundleManifest as normalizeBundleManifest } from "./bundle-types.js";
+import { resolvePackage } from "./package-resolve-helper.js";
+/**
+ * Resolves a .rigbundle archive into bootstrap-compatible sources.
+ * Extracts, verifies, parses manifest, maps vendored packages.
+ */
+// TODO: AS-T12 — migrate to pod-aware bundle source resolver
+export class LegacyBundleSourceResolver {
+    fsOps;
+    constructor(deps) {
+        this.fsOps = deps.fsOps;
+    }
+    /**
+     * Resolve a bundle archive into bootstrap-compatible sources.
+     * Caller must call cleanup(tempDir) after use.
+     */
+    async resolve(bundlePath) {
+        const tempDir = fs.mkdtempSync(nodePath.join(os.tmpdir(), "rigbundle-"));
+        try {
+            // Extract + verify (archive digest + content integrity)
+            await unpack(bundlePath, tempDir);
+            // Parse bundle manifest
+            const manifestPath = nodePath.join(tempDir, "bundle.yaml");
+            if (!fs.existsSync(manifestPath)) {
+                throw new Error("Extracted bundle missing bundle.yaml");
+            }
+            const manifestYaml = fs.readFileSync(manifestPath, "utf-8");
+            const raw = parseBundleManifest(manifestYaml);
+            // Validate manifest (path safety via isRelativeSafePath in validateBundleManifest)
+            const validation = validateBundleManifest(raw, { requireIntegrity: false });
+            if (!validation.valid) {
+                throw new Error(`Invalid bundle manifest: ${validation.errors.join("; ")}`);
+            }
+            const manifest = normalizeBundleManifest(raw);
+            // Locate rig spec — ensure resolved path stays within tempDir
+            const specPath = nodePath.resolve(tempDir, manifest.rigSpec);
+            if (!specPath.startsWith(nodePath.resolve(tempDir))) {
+                throw new Error(`Rig spec path '${manifest.rigSpec}' escapes bundle workspace`);
+            }
+            if (!fs.existsSync(specPath)) {
+                throw new Error(`Rig spec '${manifest.rigSpec}' not found in bundle`);
+            }
+            // Resolve vendored packages
+            const resolvedPackages = [];
+            const packageRefMap = {};
+            for (const entry of manifest.packages) {
+                // Ensure package path stays within tempDir
+                const vendoredDir = nodePath.resolve(tempDir, entry.path);
+                if (!vendoredDir.startsWith(nodePath.resolve(tempDir))) {
+                    throw new Error(`Package path '${entry.path}' escapes bundle workspace`);
+                }
+                const result = resolvePackage(vendoredDir, undefined, this.fsOps);
+                if (!result.ok) {
+                    const errMsg = result.kind === "validation" ? result.errors.join("; ") : result.error;
+                    throw new Error(`Failed to resolve vendored package '${entry.name}': ${errMsg}`);
+                }
+                resolvedPackages.push(result.resolved);
+                // Map all original refs to this resolved package
+                packageRefMap[entry.originalSource] = result.resolved;
+                if (entry.originalSources) {
+                    for (const src of entry.originalSources) {
+                        packageRefMap[src] = result.resolved;
+                    }
+                }
+                // Also map by vendored path (for local resolution)
+                packageRefMap[entry.path] = result.resolved;
+                packageRefMap[`./${entry.path}`] = result.resolved;
+            }
+            return { specPath, resolvedPackages, packageRefMap, manifest, tempDir };
+        }
+        catch (err) {
+            // Clean up on failure
+            this.cleanup(tempDir);
+            throw err;
+        }
+    }
+    /** Remove the temp extraction directory. */
+    cleanup(tempDir) {
+        try {
+            fs.rmSync(tempDir, { recursive: true, force: true });
+        }
+        catch {
+            // Best-effort cleanup
+        }
+    }
+}
+// -- Pod-aware bundle source resolver (AgentSpec reboot) --
+import { parsePodBundleManifest, validatePodBundleManifest } from "./bundle-types.js";
+/**
+ * Resolves a pod-aware .rigbundle archive (schemaVersion 2).
+ * Extracts, verifies manifest shape, returns paths for downstream resolution.
+ */
+export class PodBundleSourceResolver {
+    async resolve(bundlePath) {
+        const tempDir = fs.mkdtempSync(nodePath.join(os.tmpdir(), "podbundle-"));
+        try {
+            // Safe unpack with digest/symlink/integrity verification
+            await unpack(bundlePath, tempDir);
+            const manifestPath = nodePath.join(tempDir, "bundle.yaml");
+            if (!fs.existsSync(manifestPath)) {
+                throw new Error("Bundle missing bundle.yaml manifest");
+            }
+            const raw = parsePodBundleManifest(fs.readFileSync(manifestPath, "utf-8"));
+            const validation = validatePodBundleManifest(raw);
+            if (!validation.valid) {
+                throw new Error(`Invalid pod bundle manifest: ${validation.errors.join("; ")}`);
+            }
+            const m = raw;
+            const manifest = {
+                schemaVersion: 2,
+                name: m["name"],
+                version: m["version"],
+                createdAt: m["created_at"],
+                rigSpec: m["rig_spec"],
+                agents: m["agents"].map((a) => ({
+                    name: a["name"],
+                    version: a["version"],
+                    path: a["path"],
+                    originalRef: a["original_ref"] ?? "",
+                    hash: a["hash"],
+                    importEntries: Array.isArray(a["import_entries"])
+                        ? a["import_entries"].map((ie) => ({
+                            name: ie["name"],
+                            version: ie["version"],
+                            path: ie["path"],
+                            originalRef: ie["original_ref"] ?? "",
+                            hash: ie["hash"],
+                        }))
+                        : [],
+                })),
+                cultureFile: m["culture_file"],
+            };
+            const specPath = nodePath.join(tempDir, manifest.rigSpec);
+            if (!fs.existsSync(specPath)) {
+                throw new Error(`Bundle missing rig spec at ${manifest.rigSpec}`);
+            }
+            return { specPath, manifest, tempDir };
+        }
+        catch (err) {
+            this.cleanup(tempDir);
+            throw err;
+        }
+    }
+    cleanup(tempDir) {
+        try {
+            fs.rmSync(tempDir, { recursive: true, force: true });
+        }
+        catch {
+            // Best-effort cleanup
+        }
+    }
+}
+//# sourceMappingURL=bundle-source-resolver.js.map

package/node_modules/@openrig/daemon/dist/domain/bundle-source-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle-source-resolver.js","sourceRoot":"","sources":["../../src/domain/bundle-source-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,QAAQ,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,mDAAmD;AACnD,OAAO,EAAE,yBAAyB,IAAI,mBAAmB,EAAE,4BAA4B,IAAI,sBAAsB,EAAE,6BAA6B,IAAI,uBAAuB,EAA+C,MAAM,mBAAmB,CAAC;AACpP,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAa7D;;;GAGG;AACH,6DAA6D;AAC7D,MAAM,OAAO,0BAA0B;IAC7B,KAAK,CAAQ;IAErB,YAAY,IAAsB;QAChC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IAC1B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO,CAAC,UAAkB;QAC9B,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC;QAEzE,IAAI,CAAC;YACH,wDAAwD;YACxD,MAAM,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAElC,wBAAwB;YACxB,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YAC3D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC1D,CAAC;YACD,MAAM,YAAY,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;YAC5D,MAAM,GAAG,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;YAE9C,mFAAmF;YACnF,MAAM,UAAU,GAAG,sBAAsB,CAAC,GAAG,EAAE,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5E,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,4BAA4B,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC9E,CAAC;YAED,MAAM,QAAQ,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;YAE9C,8DAA8D;YAC9D,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC7D,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBACpD,MAAM,IAAI,KAAK,CAAC,kBAAkB,QAAQ,CAAC,OAAO,4BAA4B,CAAC,CAAC;YAClF,CAAC;YACD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,KAAK,CAAC,aAAa,QAAQ,CAAC,OAAO,uBAAuB,CAAC,CAAC;YACxE,CAAC;YAED,4BAA4B;YAC5B,MAAM,gBAAgB,GAAsB,EAAE,CAAC;YAC/C,MAAM,aAAa,GAAoC,EAAE,CAAC;YAE1D,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACtC,2CAA2C;gBAC3C,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC1D,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;oBACvD,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,CAAC,IAAI,4BAA4B,CAAC,CAAC;gBAC3E,CAAC;gBACD,MAAM,MAAM,GAAG,cAAc,CAAC,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;gBAElE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;oBACf,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;oBACtF,MAAM,IAAI,KAAK,CAAC,uCAAuC,KAAK,CAAC,IAAI,MAAM,MAAM,EAAE,CAAC,CAAC;gBACnF,CAAC;gBAED,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAEvC,iDAAiD;gBACjD,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC;gBACtD,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;oBAC1B,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;wBACxC,aAAa,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC;oBACvC,CAAC;gBACH,CAAC;gBACD,mDAAmD;gBACnD,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC;gBAC5C,aAAa,CAAC,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC;YACrD,CAAC;YAED,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,aAAa,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAC1E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,sBAAsB;YACtB,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,4CAA4C;IAC5C,OAAO,CAAC,OAAe;QACrB,IAAI,CAAC;YACH,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;QACxB,CAAC;IACH,CAAC;CACF;AAED,4DAA4D;AAE5D,OAAO,EAAE,sBAAsB,EAAE,yBAAyB,EAA0B,MAAM,mBAAmB,CAAC;AAS9G;;;GAGG;AACH,MAAM,OAAO,uBAAuB;IAClC,KAAK,CAAC,OAAO,CAAC,UAAkB;QAC9B,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC;QAEzE,IAAI,CAAC;YACH,yDAAyD;YACzD,MAAM,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAElC,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YAC3D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;YACzD,CAAC;YAED,MAAM,GAAG,GAAG,sBAAsB,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;YAC3E,MAAM,UAAU,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC;YAClD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,gCAAgC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAClF,CAAC;YAED,MAAM,CAAC,GAAG,GAA8B,CAAC;YACzC,MAAM,QAAQ,GAAsB;gBAClC,aAAa,EAAE,CAAC;gBAChB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAW;gBACzB,OAAO,EAAE,CAAC,CAAC,SAAS,CAAW;gBAC/B,SAAS,EAAE,CAAC,CAAC,YAAY,CAAW;gBACpC,OAAO,EAAE,CAAC,CAAC,UAAU,CAAW;gBAChC,MAAM,EAAG,CAAC,CAAC,QAAQ,CAAoC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAClE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAW;oBACzB,OAAO,EAAE,CAAC,CAAC,SAAS,CAAW;oBAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,CAAW;oBACzB,WAAW,EAAG,CAAC,CAAC,cAAc,CAAY,IAAI,EAAE;oBAChD,IAAI,EAAE,CAAC,CAAC,MAAM,CAAW;oBACzB,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;wBAC/C,CAAC,CAAE,CAAC,CAAC,gBAAgB,CAAoC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;4BACnE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAW;4BAC1B,OAAO,EAAE,EAAE,CAAC,SAAS,CAAW;4BAChC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAW;4BAC1B,WAAW,EAAG,EAAE,CAAC,cAAc,CAAY,IAAI,EAAE;4BACjD,IAAI,EAAE,EAAE,CAAC,MAAM,CAAW;yBAC3B,CAAC,CAAC;wBACL,CAAC,CAAC,EAAE;iBACP,CAAC,CAAC;gBACH,WAAW,EAAE,CAAC,CAAC,cAAc,CAAuB;aACrD,CAAC;YAEF,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC1D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,KAAK,CAAC,8BAA8B,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;YACpE,CAAC;YAED,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,OAAO,CAAC,OAAe;QACrB,IAAI,CAAC;YACH,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;QACxB,CAAC;IACH,CAAC;CACF"}

package/node_modules/@openrig/daemon/dist/domain/bundle-types.d.ts

@@ -0,0 +1,184 @@
+/**
+ * Provenance block — attribution metadata for a bundle artifact. All fields
+ * optional for backward compat; bundles without provenance install unchanged.
+ * Captured by the bundle-assembler at create time; surfaced in inspect output
+ * and audit-trail records. Not cryptographically signed at this stage.
+ */
+export interface BundleProvenance {
+    /** ISO timestamp; mirrors root createdAt at create time. */
+    createdAt?: string;
+    /** os.hostname() of the host that ran rig bundle create. */
+    sourceHost?: string;
+    /** Canonical session name of the creator (e.g. velocity-driver@openrig-velocity). */
+    authorSession?: string;
+    /** ULID of the source rig, if creating from a live rig. */
+    sourceRigId?: string;
+    /** Name of the source rig, if creating from a live rig. */
+    sourceRigName?: string;
+    /** Daemon version at create time (e.g. 0.3.2). */
+    daemonVersion?: string;
+    /** CLI version at create time (e.g. 0.3.2). */
+    cliVersion?: string;
+    /** Operator-authored notes from the --notes flag on rig bundle create. */
+    notes?: string;
+}
+/**
+ * Cross-primitive bundling — Item 6 / slice-05 Checkpoint 7.1.
+ *
+ * Manifest may optionally declare typed sibling primitives the bundle should
+ * route to their respective libraries on install. v0 ships the `skills` kind
+ * (Checkpoint 7.1). Plugins + workflow_specs + context_packs + agent_images
+ * land additively in subsequent checkpoints as their libraries are reachable.
+ *
+ * PRD §Item 6: bundles list these alongside the existing rig + agents +
+ * packages fields (no `contents:` re-grouping — that would be a schema
+ * reorg violating the no-bump constraint). Each kind is an optional top-
+ * level field; missing kinds keep backward compat.
+ */
+/**
+ * Plugin reference — Item 6 / slice-05 Checkpoint 7.3b. Bundle manifest may
+ * declare plugin references the bundle includes (in HYBRID mode the bundle
+ * REFERENCES the existing 0.3.1 plugin rather than forking its content; per
+ * orch-ratified decision doc).
+ */
+export interface BundlePluginReference {
+    /** Plugin id (matches the plugin primitive's id surface). */
+    id: string;
+    /** Where to resolve the plugin from. v0 supports local-path source. */
+    source: {
+        kind: "local";
+        path: string;
+    };
+}
+/**
+ * Compatibility block — operator-declared install-time requirements for a
+ * bundle artifact. All fields optional; missing block keeps backward compat
+ * (bundles install unchanged). Install-time version check (Item 2 Checkpoint
+ * 3.3) consults this block before bootstrap delegation; --skip-version-check
+ * is the operator-explicit override.
+ */
+export interface BundleCompatibility {
+    /** Minimum daemon version required to install this bundle (semver string). */
+    minDaemonVersion?: string;
+    /** Minimum CLI version required to install this bundle (semver string). */
+    minCliVersion?: string;
+    /** Schema version reaffirmed; mirrors root schemaVersion when set. */
+    schemaVersion?: number;
+}
+/**
+ * Normalize raw snake_case compatibility to typed camelCase BundleCompatibility.
+ * Returns undefined when absent or empty. Exported alongside the provenance
+ * normalizer so the v2 inspect-route projection can produce a single
+ * camelCase shape for both manifest schemas.
+ */
+export declare function normalizeCompatibilityBlock(raw: unknown): BundleCompatibility | undefined;
+/**
+ * Normalize raw snake_case provenance (as parsed from YAML or received from
+ * a request body) to typed camelCase BundleProvenance. Returns undefined when
+ * absent or empty. Exported so both the v1 normalizer pipeline and the v2
+ * inspect-route projection produce identical camelCase shapes — the
+ * /api/bundles/inspect contract is one shape regardless of schema version.
+ */
+export declare function normalizeProvenanceBlock(raw: unknown): BundleProvenance | undefined;
+export interface PodBundleAgentImportEntry {
+    name: string;
+    version: string;
+    path: string;
+    originalRef: string;
+    hash: string;
+}
+export interface PodBundleAgentEntry {
+    name: string;
+    version: string;
+    path: string;
+    originalRef: string;
+    hash: string;
+    importEntries: PodBundleAgentImportEntry[];
+}
+export interface PodBundleManifest {
+    schemaVersion: 2;
+    name: string;
+    version: string;
+    createdAt: string;
+    rigSpec: string;
+    agents: PodBundleAgentEntry[];
+    cultureFile?: string;
+    integrity?: BundleIntegrity;
+    provenance?: BundleProvenance;
+    compatibility?: BundleCompatibility;
+    /** Item 6 cross-primitive bundling: skill paths to route to the operator skills library on install. */
+    skills?: string[];
+    /** Item 6 cross-primitive bundling: plugin references to install via the plugin primitive (HYBRID-mode bundles reference existing plugins rather than forking content). */
+    plugins?: BundlePluginReference[];
+    /** Item 6 cross-primitive bundling: workflow spec YAML paths to route to the operator workflow-specs library on install (Checkpoint 7.3e). */
+    workflowSpecs?: string[];
+    /** Item 6 cross-primitive bundling: paths to context-pack manifest.yaml files; router copies the parent dir to the operator context-packs library on install (Checkpoint 7.3f). */
+    contextPacks?: string[];
+    /** Item 6 cross-primitive bundling: paths to agent-image DIRECTORIES (per PRD §Item 6 line 197); router copies the declared directory to the operator agent-images library on install. Consumer requires manifest.yaml inside each image dir. (Checkpoint 7.3g) */
+    agentImages?: string[];
+}
+export declare function validatePodBundleManifest(raw: unknown): {
+    valid: boolean;
+    errors: string[];
+};
+export declare function serializePodBundleManifest(manifest: PodBundleManifest): string;
+export declare function parsePodBundleManifest(yaml: string): unknown;
+/** A package entry in the legacy bundle manifest */
+export interface LegacyBundlePackageEntry {
+    name: string;
+    version: string;
+    path: string;
+    originalSource: string;
+    /** All original source refs when deduped from multiple inputs */
+    originalSources?: string[];
+}
+/** Integrity section with per-file checksums */
+export interface BundleIntegrity {
+    algorithm: "sha256";
+    files: Record<string, string>;
+}
+/** The bundle.yaml manifest */
+export interface LegacyBundleManifest {
+    schemaVersion: number;
+    name: string;
+    version: string;
+    createdAt: string;
+    rigSpec: string;
+    packages: LegacyBundlePackageEntry[];
+    integrity?: BundleIntegrity;
+    provenance?: BundleProvenance;
+    compatibility?: BundleCompatibility;
+    /** Item 6 cross-primitive bundling: skill paths to route to the operator skills library on install. */
+    skills?: string[];
+    /** Item 6 cross-primitive bundling: plugin references to install via the plugin primitive (HYBRID-mode bundles reference existing plugins rather than forking content). */
+    plugins?: BundlePluginReference[];
+    /** Item 6 cross-primitive bundling: workflow spec YAML paths to route to the operator workflow-specs library on install (Checkpoint 7.3e). */
+    workflowSpecs?: string[];
+    /** Item 6 cross-primitive bundling: paths to context-pack manifest.yaml files; router copies the parent dir to the operator context-packs library on install (Checkpoint 7.3f). */
+    contextPacks?: string[];
+    /** Item 6 cross-primitive bundling: paths to agent-image DIRECTORIES (per PRD §Item 6 line 197); router copies the declared directory to the operator agent-images library on install. Consumer requires manifest.yaml inside each image dir. (Checkpoint 7.3g) */
+    agentImages?: string[];
+}
+/** Validation options */
+interface ValidateOptions {
+    requireIntegrity?: boolean;
+}
+/**
+ * Check if a path is a safe archive-relative path.
+ * Rejects: absolute paths, ../ traversal, backslashes, dot segments (./, bare .),
+ * empty segments (//), empty string.
+ */
+export declare function isRelativeSafePath(p: string): boolean;
+/** Validate a raw parsed bundle manifest */
+export declare function validateLegacyBundleManifest(raw: unknown, opts?: ValidateOptions): {
+    valid: boolean;
+    errors: string[];
+};
+/** Parse bundle.yaml YAML string to unknown */
+export declare function parseLegacyBundleManifest(yaml: string): unknown;
+/** Normalize raw parsed manifest to typed LegacyBundleManifest */
+export declare function normalizeLegacyBundleManifest(raw: unknown): LegacyBundleManifest;
+/** Serialize a LegacyBundleManifest to YAML */
+export declare function serializeLegacyBundleManifest(manifest: LegacyBundleManifest): string;
+export {};
+//# sourceMappingURL=bundle-types.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/bundle-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle-types.d.ts","sourceRoot":"","sources":["../../src/domain/bundle-types.ts"],"names":[],"mappings":"AAIA;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,4DAA4D;IAC5D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4DAA4D;IAC5D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qFAAqF;IACrF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,2DAA2D;IAC3D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2DAA2D;IAC3D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kDAAkD;IAClD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,+CAA+C;IAC/C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AA0CD;;;;;;;;;;;;GAYG;AAEH;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC,6DAA6D;IAC7D,EAAE,EAAE,MAAM,CAAC;IACX,uEAAuE;IACvE,MAAM,EAAE;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CACzC;AAoLD;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAClC,8EAA8E;IAC9E,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,2EAA2E;IAC3E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sEAAsE;IACtE,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AA8BD;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,OAAO,GAAG,mBAAmB,GAAG,SAAS,CAQzF;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,OAAO,GAAG,gBAAgB,GAAG,SAAS,CAanF;AAID,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,yBAAyB,EAAE,CAAC;CAC5C;AAED,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,CAAC,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,aAAa,CAAC,EAAE,mBAAmB,CAAC;IACpC,uGAAuG;IACvG,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,2KAA2K;IAC3K,OAAO,CAAC,EAAE,qBAAqB,EAAE,CAAC;IAClC,8IAA8I;IAC9I,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,mLAAmL;IACnL,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,mQAAmQ;IACnQ,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,OAAO,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAiC5F;AAED,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,iBAAiB,GAAG,MAAM,CAgC9E;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE5D;AAKD,oDAAoD;AACpD,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,iEAAiE;IACjE,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED,gDAAgD;AAChD,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,QAAQ,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B;AAED,+BAA+B;AAC/B,MAAM,WAAW,oBAAoB;IACnC,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,wBAAwB,EAAE,CAAC;IACrC,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,aAAa,CAAC,EAAE,mBAAmB,CAAC;IACpC,uGAAuG;IACvG,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,2KAA2K;IAC3K,OAAO,CAAC,EAAE,qBAAqB,EAAE,CAAC;IAClC,8IAA8I;IAC9I,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,mLAAmL;IACnL,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,mQAAmQ;IACnQ,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,yBAAyB;AACzB,UAAU,eAAe;IACvB,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CASrD;AAED,4CAA4C;AAC5C,wBAAgB,4BAA4B,CAC1C,GAAG,EAAE,OAAO,EACZ,IAAI,CAAC,EAAE,eAAe,GACrB;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAwEtC;AAED,+CAA+C;AAC/C,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE/D;AAED,kEAAkE;AAClE,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,OAAO,GAAG,oBAAoB,CAsDhF;AAED,+CAA+C;AAC/C,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,oBAAoB,GAAG,MAAM,CAkCpF"}