@productbrain/cli 0.1.0-beta.43 → 0.1.0-beta.4305

package/dist/lib/workspace-probe.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workspace-probe.d.ts","sourceRoot":"","sources":["../../src/lib/workspace-probe.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH;;;GAGG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAuB5F"}
+{"version":3,"file":"workspace-probe.d.ts","sourceRoot":"","sources":["../../src/lib/workspace-probe.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH;;;;;;GAMG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAQ5F"}

package/dist/lib/workspace-probe.js

@@ -5,26 +5,20 @@
  * Design: lightweight orient call to detect workspace reachability. Returns structured
  * workspace info on success, null on any failure (network, auth, offline).
  */
-import { mcpCall } from './client.js';
+import { kernelCall } from './client.js';
 /**
  * Attempt to detect workspace connectivity via a lightweight API call.
  * Returns workspace info on success, null on any failure.
+ *
+ * Uses resolveWorkspace (registered in http.ts) rather than orient, which is
+ * not exposed on the HTTP gateway — orient is MCP-server-only.
  */
 export async function probeWorkspace() {
     try {
-        const result = await mcpCall('orient', { brief: true });
-        const name = result?.workspace?.name || 'unknown';
-        // Sum entry counts from orient sections if available
-        let entryCount;
-        if (result?.sections) {
-            entryCount = result.sections.reduce((sum, s) => {
-                if (s.counts) {
-                    return sum + Object.values(s.counts).reduce((a, b) => a + (b || 0), 0);
-                }
-                return sum;
-            }, 0);
-        }
-        return { name, entryCount };
+        const result = await kernelCall('resolveWorkspace', {});
+        if (!result)
+            return null;
+        return { name: result.name || 'unknown' };
     }
     catch {
         return null;

package/dist/lib/workspace-probe.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspace-probe.js","sourceRoot":"","sources":["../../src/lib/workspace-probe.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAEtC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAIzB,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAE9B,MAAM,IAAI,GAAG,MAAM,EAAE,SAAS,EAAE,IAAI,IAAI,SAAS,CAAC;QAClD,qDAAqD;QACrD,IAAI,UAA8B,CAAC;QACnC,IAAI,MAAM,EAAE,QAAQ,EAAE,CAAC;YACrB,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;gBAC7C,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;oBACb,OAAO,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBACzE,CAAC;gBACD,OAAO,GAAG,CAAC;YACb,CAAC,EAAE,CAAC,CAAC,CAAC;QACR,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"workspace-probe.js","sourceRoot":"","sources":["../../src/lib/workspace-probe.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAA0C,kBAAkB,EAAE,EAAE,CAAC,CAAC;QACjG,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/lib/workspaceNotice.d.ts

@@ -0,0 +1,59 @@
+/**
+ * WP-1 — Loud workspace identity on every Chain write.
+ *
+ * Running `pb` from a directory with no repo pin (e.g. `~/`) silently resolves the
+ * GLOBAL profile and writes to whichever Chain that points at — proven live: captures
+ * meant for one workspace landed on another. This module makes every Chain write NAME
+ * its target workspace on stderr, and qualifies the line LOUDLY when the binding is an
+ * unpinned fallback (`global`/`default` — no repo pin) so a wrong-Chain write is never
+ * silent. An explicit binding (`local`/`env`) gets a plain, non-alarming line.
+ *
+ * Label source — the PROFILE SLUG only, via `resolveEffectiveProfile()`.
+ * Deliberately NOT a workspace-name probe: `resolveEffectiveProfile()` reports the
+ * *configured* pin even when it dangles (TEN-2163), while a probe resolves what
+ * `resolveConfig()` actually binds. On a dangling local pin the two DISAGREE — the
+ * profile says `source='local'` (a plain, reassuring line) while the probe returns the
+ * GLOBAL workspace the write really drifts to. That would print a non-alarming line over
+ * the exact silent-drift this notice exists to expose. One resolution path means the
+ * label and its qualifier can never contradict — and there is no per-write network
+ * round-trip in front of the write.
+ *
+ * Output contract — identical to capture.ts's grounding banner (the JSON-safety pattern):
+ *  - The notice is HUMAN-ONLY: written to STDERR, gated by the combined `json` flag.
+ *  - In `--json` mode it is suppressed entirely, so strict-JSON stdout stays
+ *    byte-for-byte unchanged (machine consumers never see it). The gate is the `json`
+ *    flag alone — not `--quiet`: a quiet human run still names its target Chain.
+ *
+ * SSOT: one pure formatter + one thin emitter, called from all four write commands —
+ * no per-command copy-paste.
+ */
+import { type EffectiveProfileSource } from './config.js';
+/** Inputs to the pure notice formatter. */
+export interface WriteTargetNoticeInput {
+    /** Effective profile name (the configured pin / identity), or null when unconfigured. */
+    profile: string | null;
+    /** Where that profile came from — see resolveEffectiveProfile(). */
+    source: EffectiveProfileSource;
+}
+/**
+ * Build the one-line target-workspace notice — or null when there is nothing to say.
+ *
+ *  - `none`               → null (not configured: nothing to name, stay silent).
+ *  - `global` / `default` → qualified + hint (no repo pin → an unpinned fallback binding).
+ *  - `local` / `env`      → plain (an explicit, intentional binding).
+ *
+ * Pure: no IO. The display label is the profile slug — a single resolution path, so the
+ * label and the qualifier can never contradict each other.
+ */
+export declare function formatWriteTargetNotice({ profile, source }: WriteTargetNoticeInput): string | null;
+/**
+ * Resolve identity and write the target notice to STDERR — gated by the combined `json`
+ * flag. Pass the SAME value the command computed (e.g. `isJsonMode() || options.json ===
+ * true`) so `--json` stdout stays byte-for-byte unchanged.
+ *
+ * Never throws and does no network IO: a wrong/unreadable config degrades to silence, and
+ * the label comes from `resolveEffectiveProfile()` alone — only fast local config reads
+ * (no probe) in front of the write. It is safe to call immediately before any Chain write.
+ */
+export declare function emitWriteTargetNotice(json: boolean): Promise<void>;
+//# sourceMappingURL=workspaceNotice.d.ts.map

package/dist/lib/workspaceNotice.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceNotice.d.ts","sourceRoot":"","sources":["../../src/lib/workspaceNotice.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAA2B,KAAK,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAEnF,2CAA2C;AAC3C,MAAM,WAAW,sBAAsB;IACrC,yFAAyF;IACzF,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,oEAAoE;IACpE,MAAM,EAAE,sBAAsB,CAAC;CAChC;AAED;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,sBAAsB,GAAG,MAAM,GAAG,IAAI,CAQlG;AAED;;;;;;;;GAQG;AACH,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAcxE"}

package/dist/lib/workspaceNotice.js

@@ -0,0 +1,77 @@
+/**
+ * WP-1 — Loud workspace identity on every Chain write.
+ *
+ * Running `pb` from a directory with no repo pin (e.g. `~/`) silently resolves the
+ * GLOBAL profile and writes to whichever Chain that points at — proven live: captures
+ * meant for one workspace landed on another. This module makes every Chain write NAME
+ * its target workspace on stderr, and qualifies the line LOUDLY when the binding is an
+ * unpinned fallback (`global`/`default` — no repo pin) so a wrong-Chain write is never
+ * silent. An explicit binding (`local`/`env`) gets a plain, non-alarming line.
+ *
+ * Label source — the PROFILE SLUG only, via `resolveEffectiveProfile()`.
+ * Deliberately NOT a workspace-name probe: `resolveEffectiveProfile()` reports the
+ * *configured* pin even when it dangles (TEN-2163), while a probe resolves what
+ * `resolveConfig()` actually binds. On a dangling local pin the two DISAGREE — the
+ * profile says `source='local'` (a plain, reassuring line) while the probe returns the
+ * GLOBAL workspace the write really drifts to. That would print a non-alarming line over
+ * the exact silent-drift this notice exists to expose. One resolution path means the
+ * label and its qualifier can never contradict — and there is no per-write network
+ * round-trip in front of the write.
+ *
+ * Output contract — identical to capture.ts's grounding banner (the JSON-safety pattern):
+ *  - The notice is HUMAN-ONLY: written to STDERR, gated by the combined `json` flag.
+ *  - In `--json` mode it is suppressed entirely, so strict-JSON stdout stays
+ *    byte-for-byte unchanged (machine consumers never see it). The gate is the `json`
+ *    flag alone — not `--quiet`: a quiet human run still names its target Chain.
+ *
+ * SSOT: one pure formatter + one thin emitter, called from all four write commands —
+ * no per-command copy-paste.
+ */
+import { resolveEffectiveProfile } from './config.js';
+/**
+ * Build the one-line target-workspace notice — or null when there is nothing to say.
+ *
+ *  - `none`               → null (not configured: nothing to name, stay silent).
+ *  - `global` / `default` → qualified + hint (no repo pin → an unpinned fallback binding).
+ *  - `local` / `env`      → plain (an explicit, intentional binding).
+ *
+ * Pure: no IO. The display label is the profile slug — a single resolution path, so the
+ * label and the qualifier can never contradict each other.
+ */
+export function formatWriteTargetNotice({ profile, source }) {
+    if (source === 'none')
+        return null;
+    const name = profile?.trim() || 'unknown';
+    if (source === 'global' || source === 'default') {
+        return `→ ${name} (global default — run from your project dir to use its workspace)`;
+    }
+    // 'local' | 'env' — an explicit, intentional binding.
+    return `→ ${name}`;
+}
+/**
+ * Resolve identity and write the target notice to STDERR — gated by the combined `json`
+ * flag. Pass the SAME value the command computed (e.g. `isJsonMode() || options.json ===
+ * true`) so `--json` stdout stays byte-for-byte unchanged.
+ *
+ * Never throws and does no network IO: a wrong/unreadable config degrades to silence, and
+ * the label comes from `resolveEffectiveProfile()` alone — only fast local config reads
+ * (no probe) in front of the write. It is safe to call immediately before any Chain write.
+ */
+export async function emitWriteTargetNotice(json) {
+    if (json)
+        return; // strict-JSON stdout stays byte-for-byte unchanged.
+    let profile = null;
+    let source = 'none';
+    try {
+        ({ profile, source } = resolveEffectiveProfile());
+    }
+    catch {
+        return; // unreadable/racing config — say nothing rather than crash a write.
+    }
+    if (source === 'none')
+        return; // not configured — nothing to name.
+    const notice = formatWriteTargetNotice({ profile, source });
+    if (notice)
+        process.stderr.write(notice + '\n');
+}
+//# sourceMappingURL=workspaceNotice.js.map

package/dist/lib/workspaceNotice.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceNotice.js","sourceRoot":"","sources":["../../src/lib/workspaceNotice.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,uBAAuB,EAA+B,MAAM,aAAa,CAAC;AAUnF;;;;;;;;;GASG;AACH,MAAM,UAAU,uBAAuB,CAAC,EAAE,OAAO,EAAE,MAAM,EAA0B;IACjF,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,IAAI,GAAG,OAAO,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAC1C,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAChD,OAAO,KAAK,IAAI,oEAAoE,CAAC;IACvF,CAAC;IACD,sDAAsD;IACtD,OAAO,KAAK,IAAI,EAAE,CAAC;AACrB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAa;IACvD,IAAI,IAAI;QAAE,OAAO,CAAC,oDAAoD;IAEtE,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,IAAI,MAAM,GAA2B,MAAM,CAAC;IAC5C,IAAI,CAAC;QACH,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,uBAAuB,EAAE,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,oEAAoE;IAC9E,CAAC;IACD,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,CAAC,oCAAoC;IAEnE,MAAM,MAAM,GAAG,uBAAuB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5D,IAAI,MAAM;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;AAClD,CAAC"}

package/dist/lib/workspaceVocabCache.d.ts

@@ -0,0 +1,60 @@
+/**
+ * 5-minute TTL cache for workspace vocabulary context (WP-436 S2).
+ *
+ * Purpose (R2 mitigation): the CLI resolves vocabulary labels on every invocation.
+ * Without a cache, each `pb orient` / `pb get` / `pb capture` would call
+ * `chain.getVocabulary` — adding a Convex round-trip overhead and risking
+ * handshake-time staleness. A 5-min TTL short-circuits repeat calls within
+ * a typical session while staying fresh enough that label changes land quickly.
+ *
+ * PAT-230: the cache holds WorkspaceVocabCtx (pure data, no Convex imports here).
+ * DEC-1021: only Axis 2 (collectionLabels) lives here; Axis 1 (displayNames) is untouched.
+ *
+ * S4 note: when Cortex UI builds its `vocabularyStore`, it should mirror this
+ * contract — a keyed map by workspaceId with an expiresAt field (Cortex has
+ * direct access to workspaceId; the CLI uses apiKey as a 1:1 surrogate, since
+ * the HTTP gateway server-side injects workspaceId from authResult per
+ * convex/http.ts:675).
+ */
+import type { WorkspaceVocabCtx } from './canonicalRefs.js';
+/**
+ * Get a cached WorkspaceVocabCtx by cacheKey, or null if expired/missing.
+ * Prints a staleness warning when the entry is older than STALE_WARN_MS.
+ */
+export declare function getCachedVocabCtx(cacheKey: string): WorkspaceVocabCtx | null;
+/**
+ * Store a WorkspaceVocabCtx under cacheKey with a 5-min TTL.
+ */
+export declare function setCachedVocabCtx(cacheKey: string, ctx: WorkspaceVocabCtx): void;
+/**
+ * Explicitly invalidate a cached vocab context by cacheKey.
+ * Call this when `updateCollectionLabels` mutation succeeds (e.g. after `pb handshake`).
+ */
+export declare function invalidateVocabCtx(cacheKey: string): void;
+/**
+ * Clear all cached entries (useful for testing or `pb handshake --refresh`).
+ */
+export declare function clearVocabCache(): void;
+/**
+ * Get the cached vocab context, or fetch it via the provided async fetcher on cache miss.
+ *
+ * Usage pattern at CLI command sites:
+ * ```ts
+ * const vocabCtx = await getOrFetchVocabCtx(config.apiKey, async () => {
+ *   type VocabResult = { collectionLabels?: Record<string, unknown> };
+ *   const vocab = await kernelCall<VocabResult>('chain.getVocabulary', {});
+ *   return vocab?.collectionLabels
+ *     ? { collectionLabels: vocab.collectionLabels as WorkspaceVocabCtx['collectionLabels'] }
+ *     : null;
+ * });
+ * ```
+ *
+ * - `cacheKey`: use the API key as a surrogate for cacheKey (1:1 mapping at CLI layer).
+ * - `fetcher`: async function that resolves the vocab ctx; returns null on failure to signal
+ *   "don't cache, fall back to resolver literal". Fetcher errors are swallowed — vocabulary
+ *   labels are advisory (PAT-230 / fail-open principle).
+ *
+ * Returns WorkspaceVocabCtx on cache hit or successful fetch; undefined on error/null fetcher result.
+ */
+export declare function getOrFetchVocabCtx(cacheKey: string, fetcher: () => Promise<WorkspaceVocabCtx | null>): Promise<WorkspaceVocabCtx | undefined>;
+//# sourceMappingURL=workspaceVocabCache.d.ts.map

package/dist/lib/workspaceVocabCache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceVocabCache.d.ts","sourceRoot":"","sources":["../../src/lib/workspaceVocabCache.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAc5D;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,CAe5E;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,iBAAiB,GAAG,IAAI,CAEhF;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAEzD;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,IAAI,CAEtC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,GAC/C,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAcxC"}

package/dist/lib/workspaceVocabCache.js

@@ -0,0 +1,98 @@
+/**
+ * 5-minute TTL cache for workspace vocabulary context (WP-436 S2).
+ *
+ * Purpose (R2 mitigation): the CLI resolves vocabulary labels on every invocation.
+ * Without a cache, each `pb orient` / `pb get` / `pb capture` would call
+ * `chain.getVocabulary` — adding a Convex round-trip overhead and risking
+ * handshake-time staleness. A 5-min TTL short-circuits repeat calls within
+ * a typical session while staying fresh enough that label changes land quickly.
+ *
+ * PAT-230: the cache holds WorkspaceVocabCtx (pure data, no Convex imports here).
+ * DEC-1021: only Axis 2 (collectionLabels) lives here; Axis 1 (displayNames) is untouched.
+ *
+ * S4 note: when Cortex UI builds its `vocabularyStore`, it should mirror this
+ * contract — a keyed map by workspaceId with an expiresAt field (Cortex has
+ * direct access to workspaceId; the CLI uses apiKey as a 1:1 surrogate, since
+ * the HTTP gateway server-side injects workspaceId from authResult per
+ * convex/http.ts:675).
+ */
+const TTL_MS = 5 * 60 * 1000; // 5 minutes
+const STALE_WARN_MS = 4 * 60 * 1000; // warn after 4 minutes (1 minute before expiry)
+/** In-memory cache: cacheKey (CLI: apiKey; Cortex would use workspaceId) → CacheEntry. */
+const cache = new Map();
+/**
+ * Get a cached WorkspaceVocabCtx by cacheKey, or null if expired/missing.
+ * Prints a staleness warning when the entry is older than STALE_WARN_MS.
+ */
+export function getCachedVocabCtx(cacheKey) {
+    const entry = cache.get(cacheKey);
+    if (!entry)
+        return null;
+    const now = Date.now();
+    if (now >= entry.expiresAt) {
+        cache.delete(cacheKey);
+        return null;
+    }
+    if (now - (entry.expiresAt - TTL_MS) >= STALE_WARN_MS) {
+        // Staleness hint: labels were fetched > 4 min ago, will refresh within 1 min.
+        process.stderr.write(`[pb] Workspace vocabulary context is almost stale — will refresh on next invocation.\n`);
+    }
+    return entry.ctx;
+}
+/**
+ * Store a WorkspaceVocabCtx under cacheKey with a 5-min TTL.
+ */
+export function setCachedVocabCtx(cacheKey, ctx) {
+    cache.set(cacheKey, { ctx, expiresAt: Date.now() + TTL_MS });
+}
+/**
+ * Explicitly invalidate a cached vocab context by cacheKey.
+ * Call this when `updateCollectionLabels` mutation succeeds (e.g. after `pb handshake`).
+ */
+export function invalidateVocabCtx(cacheKey) {
+    cache.delete(cacheKey);
+}
+/**
+ * Clear all cached entries (useful for testing or `pb handshake --refresh`).
+ */
+export function clearVocabCache() {
+    cache.clear();
+}
+/**
+ * Get the cached vocab context, or fetch it via the provided async fetcher on cache miss.
+ *
+ * Usage pattern at CLI command sites:
+ * ```ts
+ * const vocabCtx = await getOrFetchVocabCtx(config.apiKey, async () => {
+ *   type VocabResult = { collectionLabels?: Record<string, unknown> };
+ *   const vocab = await kernelCall<VocabResult>('chain.getVocabulary', {});
+ *   return vocab?.collectionLabels
+ *     ? { collectionLabels: vocab.collectionLabels as WorkspaceVocabCtx['collectionLabels'] }
+ *     : null;
+ * });
+ * ```
+ *
+ * - `cacheKey`: use the API key as a surrogate for cacheKey (1:1 mapping at CLI layer).
+ * - `fetcher`: async function that resolves the vocab ctx; returns null on failure to signal
+ *   "don't cache, fall back to resolver literal". Fetcher errors are swallowed — vocabulary
+ *   labels are advisory (PAT-230 / fail-open principle).
+ *
+ * Returns WorkspaceVocabCtx on cache hit or successful fetch; undefined on error/null fetcher result.
+ */
+export async function getOrFetchVocabCtx(cacheKey, fetcher) {
+    const cached = getCachedVocabCtx(cacheKey);
+    if (cached)
+        return cached;
+    try {
+        const ctx = await fetcher();
+        if (ctx) {
+            setCachedVocabCtx(cacheKey, ctx);
+            return ctx;
+        }
+    }
+    catch {
+        // fail-open — vocabulary labels are advisory, never block the command
+    }
+    return undefined;
+}
+//# sourceMappingURL=workspaceVocabCache.js.map

package/dist/lib/workspaceVocabCache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceVocabCache.js","sourceRoot":"","sources":["../../src/lib/workspaceVocabCache.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAUH,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,YAAY;AAC1C,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,gDAAgD;AAErF,0FAA0F;AAC1F,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;AAE5C;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,GAAG,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QAC3B,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,GAAG,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;QACtD,8EAA8E;QAC9E,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,wFAAwF,CACzF,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,GAAG,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,GAAsB;IACxE,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAgB;IACjD,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe;IAC7B,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,QAAgB,EAChB,OAAgD;IAEhD,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,EAAE,CAAC;QAC5B,IAAI,GAAG,EAAE,CAAC;YACR,iBAAiB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YACjC,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;IACxE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/scoreboard/diagnose.d.ts

@@ -0,0 +1,226 @@
+/**
+ * SYNCED from packages/scoreboard-core/src/index.ts — DO NOT EDIT HERE.
+ * Canonical SSOT for the flywheel scoreboard diagnosis (consumed by BOTH the published
+ * `pb` CLI and the Cortex page). The CLI cannot import the workspace package at publish time
+ * (tsc, no bundler), so it carries this committed copy. Edit the source, then run:
+ *   node scripts/sync-scoreboard-core.mjs
+ * A content-hash drift gate (scripts/check-mcp-lib-drift.mjs) fails CI if this drifts.
+ */
+/** A metric's diagnosis status. */
+export type DiagnosisStatus = 'ok' | 'degraded' | 'awaiting' | 'unmeasured';
+export interface MetricDiagnosis {
+    /** The metric id (M1..M5) + a short human label. */
+    metric: string;
+    label: string;
+    status: DiagnosisStatus;
+    /** The raw reading, ALWAYS shown — never replaced by a verdict. */
+    reading: string;
+    /** Named cause of a degraded/awaiting/unmeasured reading (or the steady-state note). */
+    cause: string;
+    /** The concrete next action that closes the loop (empty string when status === 'ok'). */
+    nextAction: string;
+}
+export interface M1Payload {
+    mix: {
+        audited: number;
+        draft: number;
+        noDomain: number;
+        total: number;
+    };
+    noDomainShare: number | null;
+    auditedShare: number | null;
+    draftShare: number | null;
+    windowMs: number;
+    servedRowCount: number;
+    /** TEN-2449: rows rendered but outside M1's covered serve (`orient/cli/brief`). Optional so an
+     *  older payload fails SOFT; when >0 with an empty mix, say so instead of "drive a serve". */
+    excludedOutOfCoverage?: number;
+}
+export interface M2Payload {
+    divergentBuckets: number;
+    fullParity: boolean;
+    task: string | null;
+}
+export interface M3Payload {
+    capturedCount: number;
+    everRatifiedCount: number;
+    inSessionRatifiedCount: number;
+    everRatifiedRate: number | null;
+    inSessionRatifiedRate: number | null;
+    sessionWindow: number;
+    sessionsConsidered: number;
+}
+export interface MaterializationPayload {
+    latestMaterializedAt: number | null;
+    materializationAgeMs: number | null;
+    now: number;
+}
+/**
+ * WP-487 Slice 2 (FEAT-1374): the organic rework meter, filling the reserved M4 slot. Mirrors
+ * `convex/scoreboard/aggregates.ts`'s `M4Result` structurally (not imported — packages/* has no
+ * import path into convex/, same convention as the other *Payload shapes above).
+ */
+export interface M4Payload {
+    reworkJoinWindowMs: number;
+    lookbackWindowMs: number;
+    now: number;
+    servedCount: number;
+    unattributableServedCount: number;
+    pendingObservationCount: number;
+    decidedCount: number;
+    firstTimeGoodCount: number;
+    reworkedCount: number;
+    firstTimeGoodShare: number | null;
+    signalCount: number;
+    joinedSignalCount: number;
+    unjoinedSignalCount: number;
+    falseAttributionRate: number | null;
+    byClassification: {
+        revision: number;
+        ci_review_correction: number;
+        user_override: number;
+    };
+    ciReviewCorrectionAttribution: {
+        attributable: number;
+        notAttributable: number;
+        unspecified: number;
+    };
+    cohort: {
+        workspaceId: string;
+        taskProvidedCount: number;
+        taskAbsentCount: number;
+    };
+}
+/** WP-499 Slice B (TEN-2743, §2.5): advisories/verdicts/detection-coverage/override-rate.
+ *  Mirrors aggregates.ts's CoherenceResult structurally (DEC-1282: no thresholds baked in). */
+export interface CoherencePayload {
+    openConflictCount: number;
+    openConflictsTruncated: boolean;
+    reviewed: number;
+    real: number;
+    falseAlarm: number;
+    /** PR #422 (P2): reviewed/real/falseAlarm/humanBar above are a SAMPLE when true — never present as complete. */
+    reviewedTruncated: boolean;
+    humanBar: {
+        meets: boolean;
+        lowerBound: number | null;
+        reviewed: number;
+    };
+    /** Review fix (PR #528 P1): OBSERVED precision (real/reviewed) — distinct from
+     *  humanBar.lowerBound (the Wilson bound on the same ratio). Optional: predates C2. */
+    precision?: number | null;
+    /** C2 (WP-468), all OPTIONAL (an older deployment predates every field below, PR #528 P1 —
+     *  never dereference unguarded). Actionable queue, verdicted-open (`real`, staying open),
+     *  snoozed sub-count (each with its own truncation flag), total open, dial (scope-doc F10). */
+    openUnverdicted?: number;
+    openUnverdictedTruncated?: boolean;
+    /** Third totalOpen partition: currently-snoozed unverdicted rows (see coherenceDial.ts). */
+    snoozedUnverdicted?: number;
+    verdictedOpenCount?: number;
+    verdictedOpenTruncated?: boolean;
+    snoozedCount?: number;
+    snoozedCountTruncated?: boolean;
+    totalOpen?: number;
+    totalOpenTruncated?: boolean;
+    totalOpenAlarm?: boolean;
+    dial?: {
+        br170Graduated: boolean;
+        br170GraduatedPinned: boolean;
+        coherencyMode: string;
+    };
+    /** C1 (WP-468/FEAT-1408), optional (predates this slice). Actionable publish-origin rows
+     *  against their own 10-row cap — the at-cap disclosure. */
+    publishOriginOpen?: number;
+    publishOriginAtCap?: boolean;
+    publishOriginTruncated?: boolean;
+    detectionCoverage: {
+        bySurface: Record<string, Record<string, number>>;
+        scanned: number;
+        truncated: boolean;
+    };
+    contradictionOverrideRate: {
+        overrides: number;
+        heldBlocks: number;
+        rate: number | null;
+        truncated: boolean;
+    };
+}
+export interface ScoreboardPayload {
+    workspaceId: string;
+    generatedAt: number;
+    m1: M1Payload;
+    m2: M2Payload;
+    m3: M3Payload;
+    m4: M4Payload;
+    materialization: MaterializationPayload;
+    coherence: CoherencePayload;
+}
+/**
+ * The CLI-computed M5 local-pull drift (A5). Produced by computeLocalDrift() (NOT the data layer
+ * — DEC-1284). `null` fields mean local/server data was unavailable; fails soft to `awaiting`.
+ */
+export interface LocalDriftM5 {
+    localProjectionMtime: number | null;
+    serverMaterializedAt: number | null;
+    localLagMs: number | null;
+    localAgeMs: number | null;
+    unavailableReason?: string;
+}
+/**
+ * M1 — retrieval truth-state mix. The no-domain-share flip (INS-1775 floor) is UNPINNED — `awaiting`
+ * whenever there is data (never invent the 50% floor); `unmeasured` with zero serves.
+ */
+export declare function diagnoseM1(m1: M1Payload): MetricDiagnosis;
+/**
+ * M2 — ranking agreement. A clean structural signal: post-unify full parity (0 divergent buckets)
+ * is the EXPECTED steady state (`ok`); non-zero divergence is the regression signal (`degraded`) —
+ * exact, no number to pin.
+ */
+export declare function diagnoseM2(m2: M2Payload): MetricDiagnosis;
+/**
+ * M3 — draft-to-SSOT rate. The in-session-ratify floor (ASM-45 rolling-20 window) is PINNED
+ * per DEC-1513 (`M3_IN_SESSION_FLOOR`) — a determinable reading renders a real `ok`/`degraded`
+ * verdict. Zero captures → `unmeasured`. An undeterminable rate (null) fails soft to `awaiting`.
+ */
+export declare function diagnoseM3(m3: M3Payload): MetricDiagnosis;
+/**
+ * M4 — organic rework meter (WP-487 Slice 2, FEAT-1374). Joins served governance against
+ * later-reported rework signals in a frozen 72h window (TEN-2728); RAW distribution + a
+ * false-attribution counter, never a verdict (DEC-1282) and never causality (association only).
+ * `unmeasured` with nothing served; `awaiting` otherwise (no floor pinned yet).
+ */
+export declare function diagnoseM4(m4: M4Payload): MetricDiagnosis;
+/**
+ * M5 — projection staleness, computed as LOCAL-PULL drift at the CLI (DEC-1284). The staleness-age
+ * floor is PINNED per DEC-1513 (`M5_LOCAL_AGE_FLOOR_DAYS`) — a determinable reading renders a real
+ * `ok`/`degraded` verdict. Unavailable local/server data → `unmeasured` with the reason, fail-soft.
+ */
+export declare function diagnoseM5(m5: LocalDriftM5): MetricDiagnosis;
+/**
+ * M5 (server view) — the Cortex page has NO local filesystem, so it cannot compute the spec's
+ * local-pull drift (DEC-1284). It reads only the server-side projection-generation building block
+ * (`materialization.latestMaterializedAt` / age) — adding NO new truth (spec §2d). Deliberately a
+ * DIFFERENT, HONEST framing from `diagnoseM5`: SERVER-generation age, never local-pull staleness.
+ * The staleness-age floor is PINNED per DEC-1513 (`M5_SERVER_AGE_FLOOR_DAYS`); `unmeasured` when
+ * the workspace has never materialized.
+ */
+export declare function diagnoseM5FromServer(materialization: MaterializationPayload): MetricDiagnosis;
+/** The STANDING coaching/moat-quality `unmeasured` line (TEN-2377) — a permanent honesty marker
+ *  so four green tiles are never read as "the moat is healthy". */
+export declare function diagnoseCoachingMoat(): MetricDiagnosis;
+/** The full diagnosis bundle the CLI renders + emits in --json. */
+export interface ScoreboardDiagnosis {
+    m1: MetricDiagnosis;
+    m2: MetricDiagnosis;
+    m3: MetricDiagnosis;
+    m4: MetricDiagnosis;
+    m5: MetricDiagnosis;
+    /** Standing honesty marker — coaching/moat quality is unmeasured. */
+    moat: MetricDiagnosis;
+}
+/** diagnose — data-layer payload + CLI-computed M5 local-drift → per-metric diagnoses. Pure. */
+export declare function diagnose(payload: ScoreboardPayload, m5: LocalDriftM5): ScoreboardDiagnosis;
+/** diagnoseFromServer — Cortex has NO local fs, so M5 uses `diagnoseM5FromServer`'s
+ *  server-generation-age view instead of local-pull drift. Otherwise identical to `diagnose`. */
+export declare function diagnoseFromServer(payload: ScoreboardPayload): ScoreboardDiagnosis;
+//# sourceMappingURL=diagnose.d.ts.map

package/dist/scoreboard/diagnose.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnose.d.ts","sourceRoot":"","sources":["../../src/scoreboard/diagnose.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AA0CH,mCAAmC;AACnC,MAAM,MAAM,eAAe,GAAG,IAAI,GAAG,UAAU,GAAG,UAAU,GAAG,YAAY,CAAC;AAE5E,MAAM,WAAW,eAAe;IAC9B,oDAAoD;IACpD,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,eAAe,CAAC;IACxB,mEAAmE;IACnE,OAAO,EAAE,MAAM,CAAC;IAChB,wFAAwF;IACxF,KAAK,EAAE,MAAM,CAAC;IACd,yFAAyF;IACzF,UAAU,EAAE,MAAM,CAAC;CACpB;AAMD,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACzE,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB;kGAC8F;IAC9F,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,SAAS;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,OAAO,CAAC;IACpB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB;AAED,MAAM,WAAW,SAAS;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,sBAAsB;IACrC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,yBAAyB,EAAE,MAAM,CAAC;IAClC,uBAAuB,EAAE,MAAM,CAAC;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,gBAAgB,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,oBAAoB,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5F,6BAA6B,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IACtG,MAAM,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,iBAAiB,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,CAAC;CACrF;AAED;+FAC+F;AAC/F,MAAM,WAAW,gBAAgB;IAC/B,iBAAiB,EAAE,MAAM,CAAC;IAAC,sBAAsB,EAAE,OAAO,CAAC;IAC3D,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IACnD,gHAAgH;IAChH,iBAAiB,EAAE,OAAO,CAAC;IAC3B,QAAQ,EAAE;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1E;2FACuF;IACvF,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B;;mGAE+F;IAC/F,eAAe,CAAC,EAAE,MAAM,CAAC;IAAC,wBAAwB,CAAC,EAAE,OAAO,CAAC;IAC7D,4FAA4F;IAC5F,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAAC,sBAAsB,CAAC,EAAE,OAAO,CAAC;IAC9D,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IACvD,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAC3E,IAAI,CAAC,EAAE;QAAE,cAAc,EAAE,OAAO,CAAC;QAAC,oBAAoB,EAAE,OAAO,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;IACzF;gEAC4D;IAC5D,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAAC,sBAAsB,CAAC,EAAE,OAAO,CAAC;IAC3F,iBAAiB,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC;IAC9G,yBAAyB,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC;CAC/G;AAED,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,EAAE,EAAE,SAAS,CAAC;IACd,EAAE,EAAE,SAAS,CAAC;IACd,EAAE,EAAE,SAAS,CAAC;IACd,EAAE,EAAE,SAAS,CAAC;IACd,eAAe,EAAE,sBAAsB,CAAC;IACxC,SAAS,EAAE,gBAAgB,CAAC;CAC7B;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AA8BD;;;GAGG;AACH,wBAAgB,UAAU,CAAC,EAAE,EAAE,SAAS,GAAG,eAAe,CA6BzD;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,EAAE,EAAE,SAAS,GAAG,eAAe,CAsBzD;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,EAAE,EAAE,SAAS,GAAG,eAAe,CAoCzD;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,EAAE,EAAE,SAAS,GAAG,eAAe,CA2BzD;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,EAAE,EAAE,YAAY,GAAG,eAAe,CAiD5D;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,eAAe,EAAE,sBAAsB,GAAG,eAAe,CAoC7F;AAED;mEACmE;AACnE,wBAAgB,oBAAoB,IAAI,eAAe,CAUtD;AAED,mEAAmE;AACnE,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,eAAe,CAAC;IACpB,EAAE,EAAE,eAAe,CAAC;IACpB,EAAE,EAAE,eAAe,CAAC;IACpB,EAAE,EAAE,eAAe,CAAC;IACpB,EAAE,EAAE,eAAe,CAAC;IACpB,qEAAqE;IACrE,IAAI,EAAE,eAAe,CAAC;CACvB;AAED,gGAAgG;AAChG,wBAAgB,QAAQ,CAAC,OAAO,EAAE,iBAAiB,EAAE,EAAE,EAAE,YAAY,GAAG,mBAAmB,CAS1F;AAED;iGACiG;AACjG,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,iBAAiB,GAAG,mBAAmB,CASlF"}