@provos/ironcurtain 0.11.0 → 0.13.0

package/dist/config/paths.d.ts

@@ -56,6 +56,25 @@ export declare function getSessionLogPath(sessionId: string): string;
  *   {home}/sessions/{sessionId}/llm-interactions.jsonl
  */
 export declare function getSessionLlmLogPath(sessionId: string): string;
+/**
+ * Returns the trajectory-capture directory for a single-session
+ * standalone run:
+ *   {home}/sessions/{sessionId}/captures/
+ *
+ * Holds `{sessionId}.jsonl` and `manifest.jsonl` per
+ * docs/designs/mitm-token-trajectory-capture.md §7.
+ */
+export declare function getSessionCapturesDir(sessionId: string): string;
+/**
+ * Returns the JSONL file path for a single session's captured
+ * exchanges within `capturesDir`. Filename is `{sessionId}.jsonl`.
+ */
+export declare function getSessionCaptureFile(capturesDir: string, sessionId: string): string;
+/**
+ * Returns the manifest path within a captures directory:
+ *   {capturesDir}/manifest.jsonl
+ */
+export declare function getCaptureManifestFile(capturesDir: string): string;
 /**
  * Returns the auto-approver LLM interaction log path for a given session:
  *   {home}/sessions/{sessionId}/auto-approve-llm.jsonl
@@ -266,6 +285,15 @@ export declare function getBundleBundleDir(workflowId: string, bundleId: BundleI
  * per-re-entry slices by scanning.
  */
 export declare function getBundleAuditLogPath(workflowId: string, bundleId: BundleId): string;
+/**
+ * Returns the trajectory-capture directory for a workflow bundle:
+ *   {home}/workflow-runs/{workflowId}/containers/{bundleId}/captures/
+ *
+ * Sits alongside the bundle's audit log; holds one `{sessionId}.jsonl`
+ * per state visit plus a shared `manifest.jsonl`. See
+ * docs/designs/mitm-token-trajectory-capture.md §7.
+ */
+export declare function getBundleCapturesDir(workflowId: string, bundleId: BundleId): string;
 /**
  * Returns the per-bundle states root:
  *   {home}/workflow-runs/{workflowId}/containers/{bundleId}/states/
@@ -283,13 +311,27 @@ export declare function getBundleStatesDir(workflowId: string, bundleId: BundleI
  */
 export declare function getInvocationDir(workflowId: string, bundleId: BundleId, stateSlug: string): string;
 /**
- * Picks the next available `{stateId}.{N}` slug in `statesDir`. Returns
- * `${stateId}.1` when no matching dir exists; otherwise the max existing
- * N plus 1. Used so every state entry (true logical re-visits AND resume
- * legs of a single visit) gets its own forensic dir — `session.log` and
+ * Picks the next available `{prefix}.{N}` slug in `statesDir`, where `prefix` is
+ * `stateId` or — when a fan-out `laneId` is supplied — `{stateId}_lane_{laneId}`.
+ * Returns `{prefix}.1` when no matching dir exists; otherwise the max existing
+ * N plus 1. Used so every state entry (true logical re-visits AND resume legs of
+ * a single visit) gets its own forensic dir — `session.log` and
  * `session-metadata.json` no longer interleave across resume attempts.
- */
-export declare function nextStateSlug(statesDir: string, stateId: string): string;
+ *
+ * The `laneId` parameter is the fix for the fan-out artifact-dir collision: N
+ * same-state lanes run concurrently and, sharing one `stateId`, the check-then-act
+ * `{stateId}.{N}` computation races and clobbers each other's diagnostics. Keying
+ * the prefix on `lane.id` gives each lane its own `{stateId}_lane_{id}.{N}`
+ * namespace so per-lane `session.log` / `session-metadata.json` never collide.
+ *
+ * `laneId`, when supplied, MUST be a non-negative integer (the orchestrator
+ * assigns it as a fan-out loop index). It is interpolated into a directory-name
+ * prefix, so this is enforced as defense-in-depth on a path component: a
+ * non-integer or negative value throws (it would indicate an internal bug). A
+ * valid `laneId` renders as `_lane_<digits>`, which is path-safe and still
+ * passes the slug check.
+ */
+export declare function nextStateSlug(statesDir: string, stateId: string, laneId?: number): string;
 /**
  * Returns the coordinator control socket path for a bundle:
  *   {home}/run/{bundleId[0:12]}/ctrl.sock

package/dist/config/paths.js

@@ -134,6 +134,32 @@ export function getSessionLogPath(sessionId) {
 export function getSessionLlmLogPath(sessionId) {
     return resolve(getSessionDir(sessionId), 'llm-interactions.jsonl');
 }
+/**
+ * Returns the trajectory-capture directory for a single-session
+ * standalone run:
+ *   {home}/sessions/{sessionId}/captures/
+ *
+ * Holds `{sessionId}.jsonl` and `manifest.jsonl` per
+ * docs/designs/mitm-token-trajectory-capture.md §7.
+ */
+export function getSessionCapturesDir(sessionId) {
+    return resolve(getSessionDir(sessionId), 'captures');
+}
+/**
+ * Returns the JSONL file path for a single session's captured
+ * exchanges within `capturesDir`. Filename is `{sessionId}.jsonl`.
+ */
+export function getSessionCaptureFile(capturesDir, sessionId) {
+    assertPathSafeSlug('session ID', sessionId);
+    return resolve(capturesDir, `${sessionId}.jsonl`);
+}
+/**
+ * Returns the manifest path within a captures directory:
+ *   {capturesDir}/manifest.jsonl
+ */
+export function getCaptureManifestFile(capturesDir) {
+    return resolve(capturesDir, 'manifest.jsonl');
+}
 /**
  * Returns the auto-approver LLM interaction log path for a given session:
  *   {home}/sessions/{sessionId}/auto-approve-llm.jsonl
@@ -470,6 +496,17 @@ export function getBundleBundleDir(workflowId, bundleId) {
 export function getBundleAuditLogPath(workflowId, bundleId) {
     return resolve(getBundleDir(workflowId, bundleId), 'audit.jsonl');
 }
+/**
+ * Returns the trajectory-capture directory for a workflow bundle:
+ *   {home}/workflow-runs/{workflowId}/containers/{bundleId}/captures/
+ *
+ * Sits alongside the bundle's audit log; holds one `{sessionId}.jsonl`
+ * per state visit plus a shared `manifest.jsonl`. See
+ * docs/designs/mitm-token-trajectory-capture.md §7.
+ */
+export function getBundleCapturesDir(workflowId, bundleId) {
+    return resolve(getBundleDir(workflowId, bundleId), 'captures');
+}
 /**
  * Returns the per-bundle states root:
  *   {home}/workflow-runs/{workflowId}/containers/{bundleId}/states/
@@ -492,17 +529,35 @@ export function getInvocationDir(workflowId, bundleId, stateSlug) {
     return resolve(getBundleStatesDir(workflowId, bundleId), stateSlug);
 }
 /**
- * Picks the next available `{stateId}.{N}` slug in `statesDir`. Returns
- * `${stateId}.1` when no matching dir exists; otherwise the max existing
- * N plus 1. Used so every state entry (true logical re-visits AND resume
- * legs of a single visit) gets its own forensic dir — `session.log` and
+ * Picks the next available `{prefix}.{N}` slug in `statesDir`, where `prefix` is
+ * `stateId` or — when a fan-out `laneId` is supplied — `{stateId}_lane_{laneId}`.
+ * Returns `{prefix}.1` when no matching dir exists; otherwise the max existing
+ * N plus 1. Used so every state entry (true logical re-visits AND resume legs of
+ * a single visit) gets its own forensic dir — `session.log` and
  * `session-metadata.json` no longer interleave across resume attempts.
- */
-export function nextStateSlug(statesDir, stateId) {
+ *
+ * The `laneId` parameter is the fix for the fan-out artifact-dir collision: N
+ * same-state lanes run concurrently and, sharing one `stateId`, the check-then-act
+ * `{stateId}.{N}` computation races and clobbers each other's diagnostics. Keying
+ * the prefix on `lane.id` gives each lane its own `{stateId}_lane_{id}.{N}`
+ * namespace so per-lane `session.log` / `session-metadata.json` never collide.
+ *
+ * `laneId`, when supplied, MUST be a non-negative integer (the orchestrator
+ * assigns it as a fan-out loop index). It is interpolated into a directory-name
+ * prefix, so this is enforced as defense-in-depth on a path component: a
+ * non-integer or negative value throws (it would indicate an internal bug). A
+ * valid `laneId` renders as `_lane_<digits>`, which is path-safe and still
+ * passes the slug check.
+ */
+export function nextStateSlug(statesDir, stateId, laneId) {
     assertPathSafeSlug('state ID', stateId);
+    if (laneId !== undefined && (!Number.isInteger(laneId) || laneId < 0)) {
+        throw new Error(`nextStateSlug: laneId must be a non-negative integer, got ${laneId}`);
+    }
+    const prefixBase = laneId === undefined ? stateId : `${stateId}_lane_${laneId}`;
     let max = 0;
     if (existsSync(statesDir)) {
-        const prefix = `${stateId}.`;
+        const prefix = `${prefixBase}.`;
         for (const entry of readdirSync(statesDir, { withFileTypes: true })) {
             if (!entry.isDirectory() || !entry.name.startsWith(prefix))
                 continue;
@@ -516,7 +571,7 @@ export function nextStateSlug(statesDir, stateId) {
                 max = n;
         }
     }
-    return `${stateId}.${max + 1}`;
+    return `${prefixBase}.${max + 1}`;
 }
 const DECIMAL_SUFFIX_RE = /^(?:0|[1-9]\d*)$/;
 /**

package/dist/config/paths.js.map

@@ -1 +1 @@
-{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/config/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD;;;;;;;;;;;;GAYG;AACH,MAAM,eAAe,GAAG,EAAE,CAAC;AAE3B;;;;;;;GAOG;AACH,SAAS,YAAY,CAAC,QAA2B;IAC/C,OAAO,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE1D;;;GAGG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC;AAC5E,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc;IAC5B,OAAO,OAAO,CAAC,kBAAkB,EAAE,EAAE,UAAU,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AAE7C,SAAS,kBAAkB,CAAC,IAAY,EAAE,KAAa;IACrD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,aAAa,CAAC;AAClD,MAAM,CAAC,MAAM,yBAAyB,GAAG,uBAAuB,CAAC;AACjE,MAAM,CAAC,MAAM,sBAAsB,GAAG,oBAAoB,CAAC;AAE3D;;;;;GAKG;AACH,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,KAAK,EAAE,CAAC,CAAC;IACxE,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,kBAAkB,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,SAAiB;IAC7C,kBAAkB,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAC5C,OAAO,OAAO,CAAC,cAAc,EAAE,EAAE,SAAS,CAAC,CAAC;AAC9C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,SAAiB;IACpD,OAAO,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,SAAiB;IACvD,OAAO,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC,CAAC;AAC1D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,SAAiB;IACtD,OAAO,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,yBAAyB,CAAC,CAAC;AACtE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,SAAiB;IACtD,OAAO,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC,CAAC;AAC1D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,4BAA4B,CAAC,SAAiB;IAC5D,OAAO,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,oBAAoB,CAAC,CAAC;AACjE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAiB;IACjD,OAAO,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,oBAAoB,CAAC,CAAC;AACjE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,SAAiB;IACpD,OAAO,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,wBAAwB,CAAC,CAAC;AACrE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,+BAA+B,CAAC,SAAiB;IAC/D,OAAO,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,wBAAwB,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,SAAiB;IACpD,OAAO,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,SAAiB;IACnD,OAAO,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,sBAAsB,CAAC,CAAC;AACnE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,OAAO,CAAC,kBAAkB,EAAE,EAAE,cAAc,CAAC,CAAC;AACvD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,OAAO,CAAC,kBAAkB,EAAE,EAAE,0BAA0B,CAAC,CAAC;AACnE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,OAAO,CAAC,kBAAkB,EAAE,EAAE,aAAa,CAAC,CAAC;AACtD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU;IACxB,OAAO,OAAO,CAAC,kBAAkB,EAAE,EAAE,MAAM,CAAC,CAAC;AAC/C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,kBAAkB,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;IAC5C,OAAO,OAAO,CAAC,UAAU,EAAE,EAAE,GAAG,IAAI,MAAM,CAAC,CAAC;AAC9C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB;IACrC,OAAO,OAAO,CAAC,kBAAkB,EAAE,EAAE,sBAAsB,CAAC,CAAC;AAC/D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,2BAA2B;IACzC,OAAO,OAAO,CAAC,kBAAkB,EAAE,EAAE,iBAAiB,CAAC,CAAC;AAC1D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B;IACzC,OAAO,OAAO,CAAC,SAAS,EAAE,2BAA2B,CAAC,CAAC;AACzD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,OAAO,CAAC,kBAAkB,EAAE,EAAE,WAAW,CAAC,CAAC;AACpD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO,OAAO,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,OAAO,CAAC,SAAS,CAAC,CAAC;AAC5B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB;IACtC,MAAM,QAAQ,GAAG,uBAAuB,EAAE,CAAC;IAC3C,MAAM,YAAY,GAAG,2BAA2B,EAAE,CAAC;IACnD,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,OAAO,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,OAAO,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,eAAuB;IAC1D,MAAM,YAAY,GAAG,2BAA2B,EAAE,CAAC;IACnD,MAAM,QAAQ,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,eAAe,CAAC;IAC3E,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,sCAAsC,YAAY,QAAQ,eAAe,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAE7C,MAAM,QAAQ,GAAG,uBAAuB,EAAE,CAAC;IAC3C,MAAM,gBAAgB,GAAG,2BAA2B,EAAE,CAAC;IACvD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,sCAAsC,QAAQ,QAAQ,gBAAgB,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,MAAM,IAAI,GAAG,wBAAwB,EAAE,CAAC;IACxC,OAAO,GAAG,IAAI,OAAO,IAAI,EAAE,CAAC;AAC9B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAAgB;IACtD,MAAM,IAAI,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC5C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,OAAO,CAAC,kBAAkB,EAAE,EAAE,WAAW,CAAC,CAAC;AACpD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB;IAC9B,OAAO,OAAO,CAAC,kBAAkB,EAAE,EAAE,QAAQ,CAAC,CAAC;AACjD,CAAC;AAED,8EAA8E;AAC9E,cAAc;AACd,8EAA8E;AAE9E;;;GAGG;AACH,SAAS,kBAAkB,CAAC,UAAkB;IAC5C,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,wBAAwB,UAAU,EAAE,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW;IACzB,OAAO,OAAO,CAAC,kBAAkB,EAAE,EAAE,OAAO,CAAC,CAAC;AAChD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAkB;IAClD,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC/B,OAAO,OAAO,CAAC,WAAW,EAAE,EAAE,GAAG,UAAU,OAAO,CAAC,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,UAAkB;IACxD,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC/B,OAAO,OAAO,CAAC,WAAW,EAAE,EAAE,GAAG,UAAU,mBAAmB,CAAC,CAAC;AAClE,CAAC;AAED,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,OAAO,CAAC,kBAAkB,EAAE,EAAE,aAAa,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,OAAO,CAAC,kBAAkB,EAAE,EAAE,aAAa,CAAC,CAAC;AACtD,CAAC;AAED,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E;;GAEG;AACH,MAAM,UAAU,UAAU;IACxB,OAAO,OAAO,CAAC,kBAAkB,EAAE,EAAE,MAAM,CAAC,CAAC;AAC/C,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,mBAAmB,KAAK,EAAE,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,aAAa,CAAC,KAAK,CAAC,CAAC;IACrB,OAAO,OAAO,CAAC,UAAU,EAAE,EAAE,KAAK,CAAC,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,OAAO,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,CAAC;AAChD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,OAAO,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,CAAC;AAChD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,OAAO,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;AAC3C,CAAC;AAED,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E;;GAEG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,OAAO,CAAC,kBAAkB,EAAE,EAAE,eAAe,CAAC,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAkB;IAClD,kBAAkB,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IAC9C,OAAO,OAAO,CAAC,kBAAkB,EAAE,EAAE,UAAU,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,wBAAwB,CAAC,UAAkB;IACzD,OAAO,OAAO,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,YAAY,CAAC,CAAC;AAC9D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,UAAkB,EAAE,QAAkB;IACjE,kBAAkB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC1C,OAAO,OAAO,CAAC,wBAAwB,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,CAAC;AACjE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,UAAkB,EAAE,QAAkB;IACvE,OAAO,OAAO,CAAC,YAAY,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC;AAC/D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,UAAkB,EAAE,QAAkB;IAC1E,OAAO,OAAO,CAAC,YAAY,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,aAAa,CAAC,CAAC;AACpE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,UAAkB,EAAE,QAAkB;IACvE,OAAO,OAAO,CAAC,YAAY,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC;AAC/D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAkB,EAAE,QAAkB,EAAE,SAAiB;IACxF,eAAe,CAAC,SAAS,CAAC,CAAC;IAC3B,OAAO,OAAO,CAAC,kBAAkB,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC;AACtE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,SAAiB,EAAE,OAAe;IAC9D,kBAAkB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACxC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC;QAC7B,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACpE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,SAAS;YACrE,gEAAgE;YAChE,wDAAwD;YACxD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC/C,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC;gBAAE,SAAS;YAC9C,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;YACzB,IAAI,CAAC,GAAG,GAAG;gBAAE,GAAG,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,OAAO,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AAE7C;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,0BAA0B,CAAC,QAAkB;IAC3D,OAAO,OAAO,CAAC,oBAAoB,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAC,CAAC;AAC9D,CAAC;AAED,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,EAAE;AACF,wEAAwE;AACxE,sEAAsE;AACtE,qEAAqE;AACrE,mEAAmE;AACnE,+DAA+D;AAC/D,yEAAyE;AACzE,EAAE;AACF,8BAA8B;AAC9B,mEAAmE;AACnE,0EAA0E;AAC1E,uEAAuE;AACvE,mEAAmE;AACnE,sEAAsE;AACtE,sEAAsE;AAEtE;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAkB;IACrD,kBAAkB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC1C,OAAO,OAAO,CAAC,kBAAkB,EAAE,EAAE,KAAK,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;AACtE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAkB;IACpD,OAAO,OAAO,CAAC,oBAAoB,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAkB;IACrD,OAAO,OAAO,CAAC,oBAAoB,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;AACzD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CAAC,QAAkB;IACzD,OAAO,OAAO,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC,CAAC;AAC9D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,4BAA4B,CAAC,QAAkB;IAC7D,OAAO,OAAO,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,iBAAiB,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,8BAA8B,CAAC,QAAkB;IAC/D,OAAO,OAAO,CAAC,oBAAoB,CAAC,QAAQ,CAAC,EAAE,mBAAmB,CAAC,CAAC;AACtE,CAAC"}
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/config/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD;;;;;;;;;;;;GAYG;AACH,MAAM,eAAe,GAAG,EAAE,CAAC;AAE3B;;;;;;;GAOG;AACH,SAAS,YAAY,CAAC,QAA2B;IAC/C,OAAO,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE1D;;;GAGG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC;AAC5E,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc;IAC5B,OAAO,OAAO,CAAC,kBAAkB,EAAE,EAAE,UAAU,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AAE7C,SAAS,kBAAkB,CAAC,IAAY,EAAE,KAAa;IACrD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,aAAa,CAAC;AAClD,MAAM,CAAC,MAAM,yBAAyB,GAAG,uBAAuB,CAAC;AACjE,MAAM,CAAC,MAAM,sBAAsB,GAAG,oBAAoB,CAAC;AAE3D;;;;;GAKG;AACH,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,KAAK,EAAE,CAAC,CAAC;IACxE,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,kBAAkB,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,SAAiB;IAC7C,kBAAkB,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAC5C,OAAO,OAAO,CAAC,cAAc,EAAE,EAAE,SAAS,CAAC,CAAC;AAC9C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,SAAiB;IACpD,OAAO,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,SAAiB;IACvD,OAAO,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC,CAAC;AAC1D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,SAAiB;IACtD,OAAO,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,yBAAyB,CAAC,CAAC;AACtE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,SAAiB;IACtD,OAAO,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC,CAAC;AAC1D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,4BAA4B,CAAC,SAAiB;IAC5D,OAAO,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,oBAAoB,CAAC,CAAC;AACjE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAiB;IACjD,OAAO,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,oBAAoB,CAAC,CAAC;AACjE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,SAAiB;IACpD,OAAO,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,wBAAwB,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,SAAiB;IACrD,OAAO,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC,CAAC;AACvD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,WAAmB,EAAE,SAAiB;IAC1E,kBAAkB,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAC5C,OAAO,OAAO,CAAC,WAAW,EAAE,GAAG,SAAS,QAAQ,CAAC,CAAC;AACpD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,WAAmB;IACxD,OAAO,OAAO,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;AAChD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,+BAA+B,CAAC,SAAiB;IAC/D,OAAO,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,wBAAwB,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,SAAiB;IACpD,OAAO,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,SAAiB;IACnD,OAAO,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,sBAAsB,CAAC,CAAC;AACnE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,OAAO,CAAC,kBAAkB,EAAE,EAAE,cAAc,CAAC,CAAC;AACvD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,OAAO,CAAC,kBAAkB,EAAE,EAAE,0BAA0B,CAAC,CAAC;AACnE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,OAAO,CAAC,kBAAkB,EAAE,EAAE,aAAa,CAAC,CAAC;AACtD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU;IACxB,OAAO,OAAO,CAAC,kBAAkB,EAAE,EAAE,MAAM,CAAC,CAAC;AAC/C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,kBAAkB,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;IAC5C,OAAO,OAAO,CAAC,UAAU,EAAE,EAAE,GAAG,IAAI,MAAM,CAAC,CAAC;AAC9C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB;IACrC,OAAO,OAAO,CAAC,kBAAkB,EAAE,EAAE,sBAAsB,CAAC,CAAC;AAC/D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,2BAA2B;IACzC,OAAO,OAAO,CAAC,kBAAkB,EAAE,EAAE,iBAAiB,CAAC,CAAC;AAC1D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B;IACzC,OAAO,OAAO,CAAC,SAAS,EAAE,2BAA2B,CAAC,CAAC;AACzD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,OAAO,CAAC,kBAAkB,EAAE,EAAE,WAAW,CAAC,CAAC;AACpD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO,OAAO,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,OAAO,CAAC,SAAS,CAAC,CAAC;AAC5B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB;IACtC,MAAM,QAAQ,GAAG,uBAAuB,EAAE,CAAC;IAC3C,MAAM,YAAY,GAAG,2BAA2B,EAAE,CAAC;IACnD,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,OAAO,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,OAAO,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,eAAuB;IAC1D,MAAM,YAAY,GAAG,2BAA2B,EAAE,CAAC;IACnD,MAAM,QAAQ,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,eAAe,CAAC;IAC3E,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,sCAAsC,YAAY,QAAQ,eAAe,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAE7C,MAAM,QAAQ,GAAG,uBAAuB,EAAE,CAAC;IAC3C,MAAM,gBAAgB,GAAG,2BAA2B,EAAE,CAAC;IACvD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,sCAAsC,QAAQ,QAAQ,gBAAgB,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,MAAM,IAAI,GAAG,wBAAwB,EAAE,CAAC;IACxC,OAAO,GAAG,IAAI,OAAO,IAAI,EAAE,CAAC;AAC9B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAAgB;IACtD,MAAM,IAAI,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC5C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,OAAO,CAAC,kBAAkB,EAAE,EAAE,WAAW,CAAC,CAAC;AACpD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB;IAC9B,OAAO,OAAO,CAAC,kBAAkB,EAAE,EAAE,QAAQ,CAAC,CAAC;AACjD,CAAC;AAED,8EAA8E;AAC9E,cAAc;AACd,8EAA8E;AAE9E;;;GAGG;AACH,SAAS,kBAAkB,CAAC,UAAkB;IAC5C,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,wBAAwB,UAAU,EAAE,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW;IACzB,OAAO,OAAO,CAAC,kBAAkB,EAAE,EAAE,OAAO,CAAC,CAAC;AAChD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAkB;IAClD,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC/B,OAAO,OAAO,CAAC,WAAW,EAAE,EAAE,GAAG,UAAU,OAAO,CAAC,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,UAAkB;IACxD,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC/B,OAAO,OAAO,CAAC,WAAW,EAAE,EAAE,GAAG,UAAU,mBAAmB,CAAC,CAAC;AAClE,CAAC;AAED,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,OAAO,CAAC,kBAAkB,EAAE,EAAE,aAAa,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,OAAO,CAAC,kBAAkB,EAAE,EAAE,aAAa,CAAC,CAAC;AACtD,CAAC;AAED,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E;;GAEG;AACH,MAAM,UAAU,UAAU;IACxB,OAAO,OAAO,CAAC,kBAAkB,EAAE,EAAE,MAAM,CAAC,CAAC;AAC/C,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,mBAAmB,KAAK,EAAE,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,aAAa,CAAC,KAAK,CAAC,CAAC;IACrB,OAAO,OAAO,CAAC,UAAU,EAAE,EAAE,KAAK,CAAC,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,OAAO,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,CAAC;AAChD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,OAAO,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,CAAC;AAChD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,OAAO,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;AAC3C,CAAC;AAED,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E;;GAEG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,OAAO,CAAC,kBAAkB,EAAE,EAAE,eAAe,CAAC,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAkB;IAClD,kBAAkB,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IAC9C,OAAO,OAAO,CAAC,kBAAkB,EAAE,EAAE,UAAU,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,wBAAwB,CAAC,UAAkB;IACzD,OAAO,OAAO,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,YAAY,CAAC,CAAC;AAC9D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,UAAkB,EAAE,QAAkB;IACjE,kBAAkB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC1C,OAAO,OAAO,CAAC,wBAAwB,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,CAAC;AACjE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,UAAkB,EAAE,QAAkB;IACvE,OAAO,OAAO,CAAC,YAAY,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC;AAC/D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,UAAkB,EAAE,QAAkB;IAC1E,OAAO,OAAO,CAAC,YAAY,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,aAAa,CAAC,CAAC;AACpE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,UAAkB,EAAE,QAAkB;IACzE,OAAO,OAAO,CAAC,YAAY,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,UAAU,CAAC,CAAC;AACjE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,UAAkB,EAAE,QAAkB;IACvE,OAAO,OAAO,CAAC,YAAY,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC;AAC/D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAkB,EAAE,QAAkB,EAAE,SAAiB;IACxF,eAAe,CAAC,SAAS,CAAC,CAAC;IAC3B,OAAO,OAAO,CAAC,kBAAkB,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC;AACtE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,aAAa,CAAC,SAAiB,EAAE,OAAe,EAAE,MAAe;IAC/E,kBAAkB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACxC,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,6DAA6D,MAAM,EAAE,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,SAAS,MAAM,EAAE,CAAC;IAChF,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,GAAG,UAAU,GAAG,CAAC;QAChC,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACpE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,SAAS;YACrE,gEAAgE;YAChE,wDAAwD;YACxD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC/C,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC;gBAAE,SAAS;YAC9C,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;YACzB,IAAI,CAAC,GAAG,GAAG;gBAAE,GAAG,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,UAAU,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;AACpC,CAAC;AAED,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AAE7C;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,0BAA0B,CAAC,QAAkB;IAC3D,OAAO,OAAO,CAAC,oBAAoB,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAC,CAAC;AAC9D,CAAC;AAED,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,EAAE;AACF,wEAAwE;AACxE,sEAAsE;AACtE,qEAAqE;AACrE,mEAAmE;AACnE,+DAA+D;AAC/D,yEAAyE;AACzE,EAAE;AACF,8BAA8B;AAC9B,mEAAmE;AACnE,0EAA0E;AAC1E,uEAAuE;AACvE,mEAAmE;AACnE,sEAAsE;AACtE,sEAAsE;AAEtE;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAkB;IACrD,kBAAkB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC1C,OAAO,OAAO,CAAC,kBAAkB,EAAE,EAAE,KAAK,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;AACtE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAkB;IACpD,OAAO,OAAO,CAAC,oBAAoB,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAkB;IACrD,OAAO,OAAO,CAAC,oBAAoB,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;AACzD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CAAC,QAAkB;IACzD,OAAO,OAAO,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC,CAAC;AAC9D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,4BAA4B,CAAC,QAAkB;IAC7D,OAAO,OAAO,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,iBAAiB,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,8BAA8B,CAAC,QAAkB;IAC/D,OAAO,OAAO,CAAC,oBAAoB,CAAC,QAAQ,CAAC,EAAE,mBAAmB,CAAC,CAAC;AACtE,CAAC"}

package/dist/config/types.d.ts

@@ -113,6 +113,14 @@ export interface IronCurtainConfig {
     dockerAuth?: {
         readonly kind: DockerAuthKind;
     };
+    /**
+     * The resolved provider profile active for this session. Stamped as the
+     * FIRST step of prepareDockerInfrastructure() (before auth detection), from
+     * the resolved modelProviders registry + the per-session providerProfileName.
+     * When absent or `type: 'native'`, OpenRouter routing is not installed
+     * (byte-identical to today). See docs/designs/openrouter-integration.md §9.
+     */
+    activeProviderProfile?: import('./user-config.js').ResolvedProviderProfile;
     /**
      * Whether this is a PTY session. When true, the proxy requires
      * trusted input source ("mux-trusted-input") for auto-approval.

package/dist/config/user-config.d.ts

@@ -31,13 +31,18 @@ export declare const USER_CONFIG_DEFAULTS: {
     readonly auditRedaction: {
         readonly enabled: true;
     };
-    readonly preferredMode: "docker";
+    readonly preferredMode: "container";
     readonly dockerResources: {
         /** Memory ceiling in MB; null means "do not pass --memory". */
         readonly memoryMb: 8192;
         /** CPU ceiling (fractional ok); null means "do not pass --cpus". */
         readonly cpus: 4;
     };
+    readonly snapshot: {
+        readonly enabled: true;
+        readonly maxAgeDays: 7;
+        readonly sweepIntervalHours: 24;
+    };
 };
 export declare const ESCALATION_TIMEOUT_MIN = 30;
 export declare const ESCALATION_TIMEOUT_MAX = 600;
@@ -66,10 +71,40 @@ export declare const WEB_SEARCH_PROVIDER_URLS: Readonly<Record<WebSearchProvider
 export declare const GOOSE_PROVIDERS: readonly ["anthropic", "openai", "google"];
 /** Goose provider — structurally identical to ProviderId from model-provider.ts. */
 export type GooseProvider = (typeof GOOSE_PROVIDERS)[number];
-export declare const DOCKER_AGENTS: readonly ["claude-code", "goose"];
+export declare const DOCKER_AGENTS: readonly ["claude-code", "goose", "codex"];
 export type DockerAgent = (typeof DOCKER_AGENTS)[number];
-export declare const SESSION_MODES: readonly ["docker", "builtin"];
+export declare const SESSION_MODES: readonly ["container", "builtin"];
 export type SessionModeKind = (typeof SESSION_MODES)[number];
+/**
+ * Container runtime backend for Container mode sessions. 'auto'
+ * prefers the Apple container runtime when its preflight passes
+ * (Apple silicon, macOS 26+, container CLI >= 1.0 with services
+ * running) and falls back to Docker otherwise. The
+ * IRONCURTAIN_CONTAINER_RUNTIME env var overrides this setting.
+ * See docs/designs/apple-container-runtime.md.
+ */
+export declare const CONTAINER_RUNTIMES: readonly ["auto", "docker", "apple-container"];
+export type ContainerRuntimeSetting = (typeof CONTAINER_RUNTIMES)[number];
+/** OpenRouter host (single host serving all three agent wire formats). */
+export declare const OPENROUTER_HOST = "openrouter.ai";
+/** Claude Code `ANTHROPIC_BASE_URL` when routing through OpenRouter. */
+export declare const OPENROUTER_BASE_URL = "https://openrouter.ai/api";
+/** Codex/Goose `base_url` when routing through OpenRouter. */
+export declare const OPENROUTER_API_V1 = "https://openrouter.ai/api/v1";
+/** Default GLM slug used when no per-agent / glob mapping resolves (D2). */
+export declare const DEFAULT_GLM_SLUG = "z-ai/glm-5.2";
+/** The implicit, always-present profile name. Reserved: users may not define it. */
+export declare const NATIVE_PROFILE_NAME = "native";
+/**
+ * Out-of-box glob→slug mapping applied when an openrouter profile omits
+ * `modelMap`. Maps the canonical Anthropic tiers to GLM (D3 quickstart). An
+ * explicit `modelMap: []` is preserved and disables glob mapping (per-agent
+ * only mode).
+ */
+export declare const DEFAULT_MODEL_MAP: readonly {
+    readonly match: string;
+    readonly model: string;
+}[];
 export declare const userConfigSchema: z.ZodObject<{
     agentModelId: z.ZodOptional<z.ZodType<string, unknown, z.core.$ZodTypeInternals<string, unknown>>>;
     policyModelId: z.ZodOptional<z.ZodType<string, unknown, z.core.$ZodTypeInternals<string, unknown>>>;
@@ -117,6 +152,30 @@ export declare const userConfigSchema: z.ZodObject<{
             apiKey: z.ZodString;
         }, z.core.$strip>>;
     }, z.core.$strip>>;
+    modelProviders: z.ZodOptional<z.ZodObject<{
+        default: z.ZodOptional<z.ZodString>;
+        profiles: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"native">;
+        }, z.core.$strip>, z.ZodObject<{
+            type: z.ZodLiteral<"openrouter">;
+            apiKey: z.ZodOptional<z.ZodString>;
+            modelMap: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                match: z.ZodString;
+                model: z.ZodString;
+            }, z.core.$strip>>>;
+            perAgent: z.ZodOptional<z.ZodObject<{
+                'claude-code': z.ZodOptional<z.ZodString>;
+                goose: z.ZodOptional<z.ZodString>;
+                codex: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+            providerPreference: z.ZodOptional<z.ZodObject<{
+                order: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                only: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                allowFallbacks: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip>>;
+            sessionAffinity: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>], "type">>>;
+    }, z.core.$strip>>;
     serverCredentials: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodString>>>;
     signal: z.ZodOptional<z.ZodObject<{
         botNumber: z.ZodOptional<z.ZodString>;
@@ -143,10 +202,16 @@ export declare const userConfigSchema: z.ZodObject<{
     preferredDockerAgent: z.ZodOptional<z.ZodEnum<{
         "claude-code": "claude-code";
         goose: "goose";
+        codex: "codex";
     }>>;
-    preferredMode: z.ZodOptional<z.ZodEnum<{
-        docker: "docker";
+    preferredMode: z.ZodOptional<z.ZodPreprocess<z.ZodEnum<{
+        container: "container";
         builtin: "builtin";
+    }>>>;
+    containerRuntime: z.ZodOptional<z.ZodEnum<{
+        docker: "docker";
+        auto: "auto";
+        "apple-container": "apple-container";
     }>>;
     packageInstall: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodOptional<z.ZodBoolean>;
@@ -158,6 +223,14 @@ export declare const userConfigSchema: z.ZodObject<{
         memoryMb: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         cpus: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
     }, z.core.$strip>>;
+    capture: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
+    snapshot: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        maxAgeDays: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        sweepIntervalHours: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 /** Parsed config from ~/.ironcurtain/config.json. All fields optional. */
 export type UserConfig = z.infer<typeof userConfigSchema>;
@@ -215,6 +288,11 @@ export interface ResolvedDockerResourcesConfig {
     readonly memoryMb: number | null;
     readonly cpus: number | null;
 }
+export interface ResolvedSnapshotConfig {
+    readonly enabled: boolean;
+    readonly maxAgeDays: number | null;
+    readonly sweepIntervalHours: number;
+}
 /** Resolved web search config with all fields present. */
 export interface ResolvedWebSearchConfig {
     readonly provider: WebSearchProvider | null;
@@ -228,6 +306,48 @@ export interface ResolvedWebSearchConfig {
         readonly apiKey: string;
     } | null;
 }
+/**
+ * Resolved openrouter profile = v2's ResolvedOpenRouterConfig fields, minus
+ * `enabled` (enablement is now "the active profile's type is openrouter").
+ * See docs/designs/openrouter-integration.md §6.
+ */
+export interface ResolvedOpenRouterProfile {
+    readonly type: 'openrouter';
+    /** '' when unset (neither OPENROUTER_API_KEY env nor profile.apiKey). */
+    readonly apiKey: string;
+    readonly modelMap: readonly {
+        readonly match: string;
+        readonly model: string;
+    }[];
+    /**
+     * True iff the on-disk profile OMITTED `modelMap` (so `modelMap` above holds
+     * the materialized `DEFAULT_MODEL_MAP`). Serializers use this to re-persist an
+     * omitted map — preserving "track the defaults" intent across edit round-trips.
+     * An explicit `modelMap: []` (per-agent-only mode) is `false`, not default.
+     */
+    readonly usesDefaultMap: boolean;
+    readonly perAgent: Readonly<Record<DockerAgent, string | undefined>>;
+    readonly providerPreference: {
+        readonly order?: readonly string[];
+        readonly only?: readonly string[];
+        readonly allowFallbacks?: boolean;
+    } | undefined;
+    readonly sessionAffinity: boolean;
+}
+/** Resolved native profile: today's canonical routing. No fields. */
+export interface ResolvedNativeProfile {
+    readonly type: 'native';
+}
+/** The resolved active profile the whole OpenRouter feature reads (§7–§11). */
+export type ResolvedProviderProfile = ResolvedNativeProfile | ResolvedOpenRouterProfile;
+/**
+ * Resolved provider-profile registry. `profiles` ALWAYS includes the implicit
+ * `native` profile; `default` is a resolved name ('native' when unset).
+ */
+export interface ResolvedModelProvidersConfig {
+    readonly default: string;
+    readonly profiles: Readonly<Record<string, ResolvedProviderProfile>>;
+}
 /** Validated, defaults-applied configuration. All fields present. */
 export interface ResolvedUserConfig {
     readonly agentModelId: string;
@@ -246,6 +366,12 @@ export interface ResolvedUserConfig {
     readonly auditRedaction: ResolvedAuditRedactionConfig;
     readonly memory: ResolvedMemoryConfig;
     readonly webSearch: ResolvedWebSearchConfig;
+    /**
+     * OpenRouter provider-profile registry. The `profiles` record always
+     * includes the implicit `native` profile; `default` is 'native' when unset.
+     * See docs/designs/openrouter-integration.md §6.
+     */
+    readonly modelProviders: ResolvedModelProvidersConfig;
     readonly serverCredentials: Readonly<Record<string, Readonly<Record<string, string>>>>;
     /** Signal transport config. Null when Signal is not set up. */
     readonly signal: import('../signal/signal-config.js').ResolvedSignalConfig | null;
@@ -255,12 +381,25 @@ export interface ResolvedUserConfig {
     readonly gooseModel: string;
     /** Preferred Docker agent for auto-detection. */
     readonly preferredDockerAgent: DockerAgent;
-    /** Preferred session mode: 'docker' (default) or 'builtin'. */
+    /** Preferred session mode: 'container' (default) or 'builtin'. */
     readonly preferredMode: SessionModeKind;
+    /** Container runtime backend: 'auto' (default), 'docker', or 'apple-container'. */
+    readonly containerRuntime: ContainerRuntimeSetting;
     /** Package installation proxy configuration. */
     readonly packageInstall: ResolvedPackageInstallConfig;
     /** Docker container resource ceilings (pre-clamp). */
     readonly dockerResources: ResolvedDockerResourcesConfig;
+    /** Workflow container snapshot retention and global enablement. */
+    readonly snapshot: ResolvedSnapshotConfig;
+    /**
+     * Trajectory-capture config. Optional — absent from
+     * USER_CONFIG_DEFAULTS so the `?? false` at the session-factory
+     * resolution point is authoritative. See
+     * docs/designs/mitm-token-trajectory-capture.md §10.
+     */
+    readonly capture?: {
+        readonly enabled: boolean;
+    };
 }
 /**
  * Loads user configuration from ~/.ironcurtain/config.json.
@@ -280,6 +419,40 @@ export interface ResolvedUserConfig {
 export declare function loadUserConfig(options?: {
     readOnly?: boolean;
 }): ResolvedUserConfig;
+/**
+ * Resolves the active provider profile for a session from an optional
+ * per-session `providerProfileName`. Resolution order (§6): explicit name →
+ * `modelProviders.default` (already 'native' when unset) → the resolved
+ * profile. Throws a clear error listing the available profiles when the name
+ * is not a key of the resolved `profiles` record (guards `--provider-profile`
+ * typos and stale scripts). Pure — testable without infra.
+ */
+export declare function resolveActiveProfile(modelProviders: ResolvedModelProvidersConfig, providerProfileName?: string): ResolvedProviderProfile;
+/**
+ * Masks an API key for display / the wire (`sk-...xyz`, `***` for short keys,
+ * `none` when absent). The mask FORMAT is a load-bearing contract: the web-ui
+ * dispatch compares an incoming wire value against `maskApiKey(currentKey)` to
+ * implement the "leave-masked-to-keep" round-trip, and the frontend depends on
+ * the same shape. Defined here (a dependency-light leaf) so both the interactive
+ * CLI editor and the daemon WS dispatch share ONE definition without either
+ * pulling in the other's imports (e.g. `@clack/prompts`).
+ */
+export declare function maskApiKey(key: string | undefined | null): string;
+/**
+ * Deep-clones a provider preference into a fresh mutable object, copying the
+ * `order`/`only` arrays so callers can't alias the source. Shared by the config
+ * editor and the web-ui dispatch, which convert between the resolved, DTO, and
+ * input shapes with an identical field copy.
+ */
+export declare function cloneProviderPreference(pref: {
+    readonly order?: readonly string[];
+    readonly only?: readonly string[];
+    readonly allowFallbacks?: boolean;
+}): {
+    order?: string[];
+    only?: string[];
+    allowFallbacks?: boolean;
+};
 /**
  * Validates a model ID string for use in text prompt validators.
  * Returns undefined on success, or an error message string on failure.