@sensigo/realm-cli 0.40.0 → 0.41.0

package/dist/commands/validate.js

@@ -9,9 +9,9 @@ import { Command } from 'commander';
 import { dirname, join, resolve } from 'node:path';
 import { readFileSync } from 'node:fs';
 import { load } from 'js-yaml';
-import { loadWorkflowFromStringWithDiagnostics, loadWorkflowFromFileWithDiagnostics, findTrustRoot, WorkflowError, shouldEnforceTimeout, DEFAULT_EXECUTION_TIMEOUT_SECONDS, resolveSeverity, assessStructuredOutputEligibility, renderIneligibleMessage, } from '@sensigo/realm';
+import { loadWorkflowFromStringWithDiagnostics, loadWorkflowFromFileWithDiagnostics, findTrustRoot, WorkflowError, shouldEnforceTimeout, DEFAULT_EXECUTION_TIMEOUT_SECONDS, resolveSeverity, renderLoaderWarning, assessStructuredOutputEligibility, renderIneligibleMessage, JsonWorkflowStore, RUNTIME_ONLY_WORKFLOW_KEYS, VERSION, } from '@sensigo/realm';
 import { loadProjectExtensions, checkForOrphanedManifests, } from '../extensions/load-project-extensions.js';
-import { renderLoadFailure, printLoaderWarnings, rejectOnErrorSeverity, failsStrict, } from '../lib/loader-warnings.js';
+import { renderLoadFailure, renderEscalationLine, printLoaderWarnings, rejectOnErrorSeverity, failsStrict, wrapSentinelWarnings, } from '../lib/loader-warnings.js';
 /**
  * Advisory (issue A3, never rejects): an auto step declaring `retry:` but no `timeout_seconds`
  * has EVERY attempt bounded by the generous DEFAULT_EXECUTION_TIMEOUT_SECONDS default — a hung
@@ -27,7 +27,8 @@ import { renderLoadFailure, printLoaderWarnings, rejectOnErrorSeverity, failsStr
  * fires). The message is worded to cover both axes without requiring the reader to already know
  * about the cap.
  */
-function findRetryWithoutExplicitTimeout(definition) {
+/** @internal Exported for testing only. */
+export function findRetryWithoutExplicitTimeout(definition) {
     const warnings = [];
     for (const [stepName, step] of Object.entries(definition.steps)) {
         if (shouldEnforceTimeout(step) &&
@@ -38,7 +39,7 @@ function findRetryWithoutExplicitTimeout(definition) {
                 severity: resolveSeverity('RETRY_NO_TIMEOUT'),
                 scope: 'step',
                 step: stepName,
-                message: `⚠  Step '${stepName}': declares 'retry' but no 'timeout_seconds' — each attempt is ` +
+                message: `Step '${stepName}': declares 'retry' but no 'timeout_seconds' — each attempt is ` +
                     `bounded by the default execution timeout (${DEFAULT_EXECUTION_TIMEOUT_SECONDS}s), and ` +
                     `(absent an explicit 'retry.total_timeout_seconds') the step's overall retry budget ` +
                     `defaults to that same per-attempt bound compounded across every attempt plus backoffs. ` +
@@ -49,15 +50,6 @@ function findRetryWithoutExplicitTimeout(definition) {
     }
     return warnings;
 }
-/** Wraps loadProjectExtensions' sentinel-credential warnings as LoaderWarning (issue #169). */
-function wrapSentinelWarnings(sentinelWarnings) {
-    return (sentinelWarnings ?? []).map((message) => ({
-        code: 'EXTENSION_SENTINEL',
-        severity: resolveSeverity('EXTENSION_SENTINEL'),
-        scope: 'workflow',
-        message: `⚠  ${message}`,
-    }));
-}
 /**
  * The single success-path printer BOTH validation branches (extension-free and file-based)
  * share: prints every accumulated warning, then the summary line. Under `--strict`, a non-empty
@@ -67,9 +59,10 @@ function wrapSentinelWarnings(sentinelWarnings) {
  */
 function printValidationOutcome(definition, warnings, strict) {
     printLoaderWarnings(warnings);
-    const base = `Valid: ${definition.id} v${definition.version} (${Object.keys(definition.steps).length} steps)`;
+    const stepCount = Object.keys(definition.steps).length;
+    const base = `Valid: ${definition.id} v${definition.version} (${stepCount} ${stepCount === 1 ? 'step' : 'steps'})`;
     if (strict && failsStrict(warnings)) {
-        console.log(`${base} — ${warnings.length} warning(s); failing due to --strict`);
+        console.log(`${base} — ${warnings.length} ${warnings.length === 1 ? 'warning' : 'warnings'}; failing due to --strict`);
         return true;
     }
     console.log(base);
@@ -90,16 +83,34 @@ function findReasoningLikeTopLevelProperty(schema) {
     return Object.keys(properties).find((name) => REASONING_LIKE_PROPERTY.test(name));
 }
 /**
- * issue #236 (Deliverable 7) — the adoption-without-default-ON nudge. Prints, per
- * `execution: 'agent'` step with an effective schema, the migration DELTA on its OWN INFO
- * channel: structurally NOT a LoaderWarning (plain `console.log`, never routed through
- * `printLoaderWarnings`/the warnings accumulator/`--strict` — that stays a hard zero-diff rail on
- * `loader-warnings.ts`, since ANY new WarningCode there would auto-fail `validate --strict`).
- * Opted-in steps ALSO print here (their own caveats) — the same channel, per design [Rv3]. Never
- * printed for an ineligible-and-opted-in step: the LOADER already rejected that combination at
- * load time, so this function structurally never observes it.
+ * issue #236 (Deliverable 7) — the adoption nudge, on validate's own INFO channel. Structurally
+ * NOT a LoaderWarning (plain `console.log`, never routed through `printLoaderWarnings`/the
+ * warnings accumulator/`--strict` — that stays a hard zero-diff rail on `loader-warnings.ts`,
+ * since ANY new WarningCode there would auto-fail `validate --strict`).
+ *
+ * issue #422 reshaped the FORM, not the purpose. It used to print one line per caveat per step,
+ * which on a green validate of a file that never mentions structured_output meant fourteen lines
+ * (examples/06) or nine (examples/02) of advice nobody asked for. The field's converged answer for
+ * adoption discovery on a clean run is one aggregate line plus a named detail command plus a
+ * durable silencer — npm fund, cargo's future-incompat report, npm audit; no surveyed tool prints
+ * per-item adoption advice on a green run, and npm's RFC 0017 explicitly rejected demoting the
+ * class behind a flag instead. So: a summary by default, the full per-step detail behind
+ * `--explain`, and `REALM_NO_NUDGE=1` to silence.
+ *
+ * THE POLICY THAT DECIDES WHICH STEPS ARE LOUD (rustc's attach-to-the-diagnostic rule, made
+ * written policy here): advice about config the author DECLARED is a diagnostic and always prints;
+ * advice about config they COULD adopt is one line. So an opted-in step's caveats print
+ * unconditionally — `--explain` does not gate them and `REALM_NO_NUDGE` does not silence them —
+ * while a not-opted-in step's detail is exactly what moves behind the flag.
+ *
+ * Never printed for an ineligible-and-opted-in step: the LOADER already rejected that combination
+ * at load time, so this function structurally never observes it.
  */
-function printStructuredOutputNudge(definition) {
+function printStructuredOutputNudge(definition, opts) {
+    // Not-opted-in steps whose detail either renders (--explain) or feeds the summary counts.
+    const ready = []; // eligible | eligible_with_caveats
+    const withCaveats = []; // the subset of `ready` carrying >=1 caveat
+    const oneAway = []; // ineligible
     for (const [stepName, step] of Object.entries(definition.steps)) {
         if (step.execution !== 'agent')
             continue;
@@ -113,35 +124,121 @@ function printStructuredOutputNudge(definition) {
             ...(step.tools !== undefined ? { tools: step.tools } : {}),
         });
         const reasoningProp = findReasoningLikeTopLevelProperty(effectiveSchema);
+        // An opted-in step's advice is about DECLARED config: a diagnostic, printed here and now
+        // whatever the flags say. It is also EXCLUDED from the summary's census entirely — its
+        // surface is this branch, never the aggregate line.
+        if (optedIn) {
+            if (verdict.verdict !== 'eligible_with_caveats')
+                continue;
+            for (const caveat of verdict.caveats) {
+                console.log(`ℹ Step '${stepName}': structured_output caveat — ${caveat.remediation}`);
+            }
+            printReasoningAnnotation(stepName, reasoningProp);
+            continue;
+        }
         if (verdict.verdict === 'ineligible') {
-            // Opted-in + ineligible is unreachable (the loader already rejected it) — this is always
-            // the "here's what you're one step short of" migration nudge for a NOT-opted-in step.
-            console.log(`ℹ Step '${stepName}': structured_output: strict — one line short: ` +
-                `${renderIneligibleMessage(verdict.reasons)}`);
+            oneAway.push(stepName);
+            if (opts.explain) {
+                console.log(`ℹ Step '${stepName}': structured_output: strict — one line short: ` +
+                    `${renderIneligibleMessage(verdict.reasons)}`);
+            }
             continue;
         }
+        ready.push(stepName);
         if (verdict.verdict === 'eligible_with_caveats') {
-            const prefix = optedIn
-                ? `ℹ Step '${stepName}': structured_output caveat`
-                : `ℹ Step '${stepName}': eligible for structured_output: strict, with caveat`;
-            for (const caveat of verdict.caveats) {
-                console.log(`${prefix} — ${caveat.remediation}`);
-            }
-            if (reasoningProp !== undefined) {
-                console.log(`ℹ Step '${stepName}': the optional '${reasoningProp}' property looks like a ` +
-                    `reasoning field — see the optional_emission caveat above (position matters: with ` +
-                    `default thinking there is no regression; on non-thinking configurations prefer ` +
-                    `'required' + first property order — see docs/reference/yaml-schema.md).`);
+            // `eligible_with_caveats` with zero caveats is unconstructible — the assessor mints that
+            // verdict only when it has at least one — so the verdict IS the caveated subset.
+            withCaveats.push(stepName);
+            if (opts.explain) {
+                for (const caveat of verdict.caveats) {
+                    console.log(`ℹ Step '${stepName}': eligible for structured_output: strict, with caveat — ` +
+                        `${caveat.remediation}`);
+                }
+                printReasoningAnnotation(stepName, reasoningProp);
             }
             continue;
         }
         // eligible, zero caveats — NEVER printed bare (census: this is a rare, fully-required
         // schema). Always paired with the concrete next step.
-        if (!optedIn) {
+        if (opts.explain) {
             console.log(`ℹ Step '${stepName}': eligible for structured_output: strict — add ` +
                 `'structured_output: strict' to opt in.`);
         }
     }
+    // `--explain` REPLACES the summary with the detail above — an explicit ask for detail should
+    // not also get the pointer telling you how to ask for it.
+    if (opts.explain)
+        return;
+    // Read at call time, never captured at module scope (the #285 class). An explicit `--explain`
+    // beats a standing preference, which is why this check sits below the return above.
+    if (process.env['REALM_NO_NUDGE'] === '1')
+        return;
+    const line = renderNudgeSummary(ready.length, withCaveats.length, oneAway.length);
+    if (line !== undefined)
+        console.log(line);
+}
+/** The reasoning-position annotation, printed beside a caveat list wherever one renders. */
+function printReasoningAnnotation(stepName, reasoningProp) {
+    if (reasoningProp === undefined)
+        return;
+    console.log(`ℹ Step '${stepName}': the optional '${reasoningProp}' property looks like a ` +
+        `reasoning field — see the optional_emission caveat above (position matters: with ` +
+        `default thinking there is no regression; on non-thinking configurations prefer ` +
+        `'required' + first property order — see docs/reference/yaml-schema.md).`);
+}
+/**
+ * The one graded summary line (issue #422), or `undefined` when there is nothing to say.
+ *
+ * The tail teaches BOTH escape routes in the one line it gets — the detail command (npm's
+ * "Run `npm fund` for details", cargo's named report command) fused with the silencer (git's
+ * squelch-teaching advice hints). A reader who wants more and a reader who wants less are both
+ * served without a second line.
+ *
+ * Each clause pluralizes on its OWN count, and a zero-valued clause is omitted rather than
+ * rendered as a zero. The caveats parenthetical and the one-change-away clause are independent:
+ * gating the second on the first would silently drop it for a file whose ready steps are all
+ * caveat-free.
+ */
+function renderNudgeSummary(ready, withCaveats, oneAway) {
+    if (ready === 0 && oneAway === 0)
+        return undefined;
+    const steps = (n) => (n === 1 ? 'step' : 'steps');
+    const tail = ` — run 'realm workflow validate --explain' for detail (REALM_NO_NUDGE=1 to silence).`;
+    if (ready === 0) {
+        return `ℹ ${oneAway} ${steps(oneAway)} one change away from structured_output: strict${tail}`;
+    }
+    let line = `ℹ ${ready} ${steps(ready)} ready for structured_output: strict`;
+    if (withCaveats > 0)
+        line += ` (${withCaveats} with caveats)`;
+    if (oneAway > 0)
+        line += `, ${oneAway} ${steps(oneAway)} one change away`;
+    return line + tail;
+}
+/**
+ * The ONE place a load failure is rendered on this command (issue #445).
+ *
+ * WorkflowError means the workflow is invalid: print the warnings it carried (#424), render the
+ * message, exit 1. Anything else is an internal bug and is RETHROWN — the #123 doctrine, pinned
+ * by validate-internal-error.test.ts's "genuine-bug-still-loud" cell: a real crash must never be
+ * relabelled `Invalid:`, because that tells an author their file is wrong when realm is.
+ *
+ * The extensions arm used to render ANY error as `Invalid:`, so it violated that doctrine in two
+ * directions at once — an internal bug was swallowed, and a user's broken extension module was
+ * blamed on their workflow. Both arms route here now, and extension loading has its own catch
+ * with its own sentence, so the two populations stay separate.
+ *
+ * SCOPE, deliberate: watch/register/test/agent keep their own catches (#425's recorded
+ * exclusion). If a second surface ever adopts this, move it to lib/loader-warnings.ts — one
+ * caller does not earn a shared home.
+ */
+function exitOnLoadFailure(err) {
+    if (err instanceof WorkflowError) {
+        if (err.warnings !== undefined)
+            printLoaderWarnings(err.warnings);
+        console.error(renderLoadFailure(err));
+        process.exit(1);
+    }
+    throw err;
 }
 /**
  * The issue #170 boundary-reject, LIVE since the flip: a workflow carrying an unrecognised
@@ -153,7 +250,15 @@ function rejectIfPolicyEscalates(warnings) {
     if (!rejectOnErrorSeverity(warnings))
         return false;
     printLoaderWarnings(warnings);
-    console.error(`Invalid: ${warnings.length} warning(s) present, and at least one is escalated to an error by policy.`);
+    // issue #425: name WHICH warnings escalated. "at least one is escalated" left an author with
+    // three warnings above and no way to tell which of them was the refusal — the counts are the
+    // aggregate this line adds, so it is the line that has to say.
+    //
+    // register and watch print the same line since issue #451 (watch adds its timestamp and a
+    // `— refusing to register.` tail, because it does not exit); it lives in lib/loader-warnings.ts
+    // for that reason. On all three surfaces printLoaderWarnings' `— REFUSED below` substitution
+    // already marks each refused warning one line above.
+    console.error(renderEscalationLine(warnings));
     return true;
 }
 /** Pre-scan: does the YAML carry a top-level `extensions` key? (Parse errors → false; the
@@ -170,16 +275,121 @@ function hasTopLevelExtensions(content) {
         return false;
     }
 }
+/**
+ * `validate --registered <id>` — audit the STORED copy of a workflow (issue #427).
+ *
+ * The mechanism is kubectl's server-side dry-run shape: strip the keys the loader stamps, feed
+ * the rest back through the REAL loader, report what it says. Zero rules are duplicated here, so
+ * this surface cannot drift from what `register` would accept tomorrow.
+ *
+ * What it audits is the INSTALLED loader — the same limitation kubectl documents. The
+ * pre-upgrade journey is therefore: upgrade the CLI first, THEN audit. That is safe precisely
+ * because grandfathering holds for the copies it applies to: a CURRENT-SCHEMA registered copy
+ * keeps running under the rules it was registered with, so upgrading the CLI to look does not
+ * change what your runs do. A legacy (schema_version-less or older) copy is a different case
+ * entirely — see the legacy arm below: it is not grandfathered, it is already unreachable.
+ */
+async function validateRegistered(id, strict) {
+    const store = new JsonWorkflowStore();
+    let stored;
+    try {
+        stored = await store.get(id);
+    }
+    catch (err) {
+        if (err instanceof WorkflowError && err.code === 'STATE_WORKFLOW_NOT_FOUND') {
+            console.error(`Error: ${err.message}`);
+            console.error('Registered workflows: realm workflow list');
+            process.exit(1);
+        }
+        if (err instanceof WorkflowError && err.code === 'STATE_LEGACY_FORMAT') {
+            // ONE clause only. There is no schema_version to name — nothing parsed far enough to read
+            // one — and the grandfathering sentence would be FALSE for this cohort: every runtime
+            // consumer resolves through this same get() gate (start_run, execute_step, append_trace,
+            // get_workflow_protocol, submit_human_response, replay), so a legacy entry cannot run at
+            // all. It is not grandfathered; it is unreachable.
+            console.log(`Auditing the registered copy of '${id}' with realm ${VERSION}'s loader.`);
+            // The store's own message carries the remedy; the loader would say `Missing required
+            // field: 'steps'` here, which is true of the shape and useless about the cause.
+            console.error(renderLoadFailure(err));
+            process.exit(1);
+        }
+        if (!(err instanceof WorkflowError)) {
+            // get()'s try wraps ONLY the read — JSON.parse sits outside it, so a corrupt stored file
+            // arrives here as a bare SyntaxError with no code (executed).
+            console.error(`Error: the registered copy of '${id}' is not parseable JSON: ${err instanceof Error ? err.message : String(err)}`);
+            console.error('Registered workflows: realm workflow list');
+            process.exit(1);
+        }
+        throw err; // #123: an unexpected WorkflowError is a bug, and bugs stay loud.
+    }
+    console.log(`Auditing the registered copy of '${id}' (schema_version ${String(stored.schema_version)}) ` +
+        `with realm ${VERSION}'s loader.`);
+    console.log('Registered copies stay grandfathered at runtime — this reports what re-registration today would say.');
+    const clone = { ...stored };
+    for (const key of RUNTIME_ONLY_WORKFLOW_KEYS)
+        delete clone[key];
+    const declaresProfile = Object.values(stored.steps ?? {}).some((step) => step.agent_profile !== undefined);
+    if (clone['extensions'] !== undefined || declaresProfile) {
+        console.log('Extensions/profiles declared — module resolution, config_schema checks, and agent-profile ' +
+            'file resolution need the source tree and are not audited here; structural rules only.');
+    }
+    // MUST delete: the from-string loader hard-throws on an `extensions` key (allowExtensions:
+    // false) with "Register this workflow from its YAML file" — maximally misleading here, where
+    // the workflow IS registered and the operator asked about the stored copy. The honesty line
+    // above is what carries the real limitation.
+    delete clone['extensions'];
+    let definition;
+    let loaderWarnings;
+    try {
+        ({ definition, warnings: loaderWarnings } = loadWorkflowFromStringWithDiagnostics(JSON.stringify(clone)));
+    }
+    catch (err) {
+        exitOnLoadFailure(err);
+    }
+    // The extension-free arm's tail, minus the orphan-manifest check (there is no source tree to
+    // have one) and minus the adoption nudge (a stored copy is not where you edit; `--explain` is
+    // therefore inert in this mode, deliberately — no machinery for it).
+    const accumulated = [...loaderWarnings, ...findRetryWithoutExplicitTimeout(definition)];
+    if (rejectIfPolicyEscalates(accumulated)) {
+        process.exit(1);
+    }
+    const strictFailed = printValidationOutcome(definition, accumulated, strict);
+    if (strictFailed) {
+        process.exit(1);
+    }
+}
 export const validateCommand = new Command('validate')
-    .argument('<path>', 'Path to workflow directory or workflow.yaml file')
+    .argument('[path]', 'Path to workflow directory or workflow.yaml file')
+    .option('--registered <id>', 'Audit the STORED copy of a registered workflow instead of a file (issue #427)')
     .option('--extensions-module <path>', "Extensions module that REPLACES the workflow's declared 'extensions' modules (repair/override)")
     .option('--strict', 'Exit non-zero if any loader warning is present (unknown keys, retry-without-timeout, sentinel credentials — issue #169)')
+    .option('--explain', 'Print the full per-step structured_output adoption detail instead of the one-line summary the default run prints (issue #422)')
     .description('Validate a workflow YAML file')
     .action(async (inputPath, opts) => {
+    const strict = opts.strict === true;
+    const explain = opts.explain === true;
+    // Exactly-one, checked FIRST and load-bearing: commander parses a `[path]` positional and
+    // a `--registered <id>` option happily together and enforces nothing between them
+    // (executed — both arrive). The flag is `--registered <id>` rather than an auto-detecting
+    // positional deliberately: nothing can reliably tell an id from a path, and guessing wrong
+    // means auditing something the operator did not name.
+    if (inputPath === undefined && opts.registered === undefined) {
+        console.error('Error: provide a workflow path, or --registered <id> to audit a stored definition.');
+        process.exit(1);
+        return;
+    }
+    if (inputPath !== undefined && opts.registered !== undefined) {
+        console.error('Error: --registered audits the stored copy — it cannot be combined with a path.');
+        process.exit(1);
+        return;
+    }
+    if (opts.registered !== undefined) {
+        await validateRegistered(opts.registered, strict);
+        return;
+    }
     const filePath = inputPath.endsWith('.yaml') || inputPath.endsWith('.yml')
         ? inputPath
         : join(inputPath, 'workflow.yaml');
-    const strict = opts.strict === true;
     let content;
     try {
         content = readFileSync(filePath, 'utf8');
@@ -196,68 +406,130 @@ export const validateCommand = new Command('validate')
         // source_dir/trust_root, so resolve the same trust root the file-based path would
         // (findTrustRoot walks package.json/.git from the workflow dir) and run the guard
         // structural-first — after the workflow parses, before the `Valid:` print. It throws
-        // WorkflowError, which the catch below renders as `Invalid:` + exit(1). resolve()
+        // WorkflowError, which exitOnLoadFailure renders as `Invalid:` + exit(1) — this arm's
+        // guard call is DIRECT, which is why it keeps that sentence while an extensions-declaring
+        // load surfaces the same guard as `Error loading extensions:` (issue #445). resolve()
         // before dirname so a relative `workflow.yaml` doesn't collapse the walk to '.'.
+        let definition;
+        let loaderWarnings;
+        try {
+            ({ definition, warnings: loaderWarnings } =
+                loadWorkflowFromStringWithDiagnostics(content));
+        }
+        catch (err) {
+            exitOnLoadFailure(err);
+        }
+        // Its own try (issue #463): each try owns one failure population — the #445 doctrine. A
+        // load failure above has nothing to print but itself; the guard below fails AFTER the
+        // workflow parsed, with its warnings in hand.
         try {
-            const { definition, warnings: loaderWarnings } = loadWorkflowFromStringWithDiagnostics(content);
             const workflowDir = dirname(resolve(filePath));
             checkForOrphanedManifests(workflowDir, findTrustRoot(workflowDir));
-            const accumulated = [...loaderWarnings, ...findRetryWithoutExplicitTimeout(definition)];
-            if (rejectIfPolicyEscalates(accumulated)) {
-                process.exit(1);
-            }
-            const strictFailed = printValidationOutcome(definition, accumulated, strict);
-            // issue #236: the nudge's own INFO channel — never affects the exit code below.
-            printStructuredOutputNudge(definition);
-            if (strictFailed) {
-                process.exit(1);
-            }
         }
         catch (err) {
-            if (err instanceof WorkflowError) {
-                console.error(renderLoadFailure(err.message));
-                process.exit(1);
+            // The workflow's own warnings before the refusal — the same set the success path counts,
+            // so nothing the author would otherwise see only on the NEXT run is withheld. Plain
+            // render: the escalation gate has not run, so printLoaderWarnings' `— REFUSED below`
+            // would name the wrong cause (test.ts's render comment, #450's reasoning). Unconditional:
+            // on the #123 non-WorkflowError rethrow population the warnings print before the loud
+            // crash — true statements either way. exitOnLoadFailure cannot print them twice: the
+            // orphan WorkflowError is minted bare in the CLI (load-project-extensions.ts), and the
+            // core `warnings` slot is set only by attachLoaderWarnings inside the core loader, which
+            // this throw never transits — which is exactly why this arm swallowed them until now.
+            for (const w of [...loaderWarnings, ...findRetryWithoutExplicitTimeout(definition)]) {
+                console.warn(renderLoaderWarning(w));
             }
-            throw err;
+            exitOnLoadFailure(err);
+        }
+        // Reporting, deliberately OUTSIDE the try (issue #445): these lines only run once the
+        // load succeeded, and their own `process.exit` calls have no business passing through a
+        // catch that exists to classify LOAD failures. Production-neutral — the exits still exit.
+        const accumulated = [...loaderWarnings, ...findRetryWithoutExplicitTimeout(definition)];
+        if (rejectIfPolicyEscalates(accumulated)) {
+            process.exit(1);
+        }
+        const strictFailed = printValidationOutcome(definition, accumulated, strict);
+        // issue #236: the nudge's own INFO channel — never affects the exit code below.
+        printStructuredOutputNudge(definition, { explain });
+        if (strictFailed) {
+            process.exit(1);
         }
         return;
     }
     // Extensions declared (or an override supplied): file-based two-pass validation.
+    //
+    // THREE tries, not one (issue #445). The old single catch spanned five concerns and
+    // rendered every one of them `Invalid: …` — including a user's unresolvable extension
+    // module, and including internal bugs. Each try now owns one failure population, and the
+    // reporting tail sits outside all of them.
+    let definition;
+    let pass1Warnings;
     try {
         // Pass 1: structural validation + extension resolution metadata (source_dir/trust_root).
         // The universal, registry-independent structural load — its warnings are what we count.
-        const { definition, warnings: pass1Warnings } = loadWorkflowFromFileWithDiagnostics(filePath);
-        const { registry, manifest, sentinelWarnings } = await loadProjectExtensions(definition, {
+        ({ definition, warnings: pass1Warnings } = loadWorkflowFromFileWithDiagnostics(filePath));
+    }
+    catch (err) {
+        exitOnLoadFailure(err);
+    }
+    let registry;
+    let manifest;
+    let sentinelWarnings;
+    try {
+        ({ registry, manifest, sentinelWarnings } = await loadProjectExtensions(definition, {
             ...(opts.extensionsModule !== undefined ? { overrideModule: opts.extensionsModule } : {}),
             secretMode: 'sentinel',
-        });
+        }));
+    }
+    catch (err) {
+        // issue #445 — a DIFFERENT population, and it gets its own sentence. Everything
+        // loadProjectExtensions throws is extension or deployment territory: an unresolvable
+        // module path, a failed import, a module whose default export is the wrong shape, a
+        // malformed `realm.yaml`, and the #123 orphaned-manifest refusal. None of those makes
+        // the WORKFLOW invalid, and calling them `Invalid:` sent an author to the wrong file.
+        // The sentence is `realm run`'s, verbatim (run.ts) — the sibling surface renders this
+        // identical failure class exactly so.
+        //
+        // issue #463 — the workflow's own warnings first: pass-1's plus the retry advisory, the
+        // same set the success path counts minus the sentinel wraps, which come from the load that
+        // just failed — there is nothing to wrap. Plain render (test.ts's render comment, #450's
+        // reasoning): the escalation gate has not run, so printLoaderWarnings' `— REFUSED below`
+        // would name the wrong cause.
+        for (const w of [...pass1Warnings, ...findRetryWithoutExplicitTimeout(definition)]) {
+            console.warn(renderLoaderWarning(w));
+        }
+        console.error(`Error loading extensions: ${err instanceof Error ? err.message : String(err)}`);
+        process.exit(1);
+    }
+    try {
         // Pass 2: step config validated against each resolved adapter's config_schema. Same
         // content as pass 1, registry only adds config_schema checks — its warnings are proven
         // identical to pass 1's, so they are deliberately discarded here (not collected) to avoid
         // double-counting the same unknown key twice.
         loadWorkflowFromFileWithDiagnostics(filePath, registry);
-        const accumulated = [
-            ...pass1Warnings,
-            ...findRetryWithoutExplicitTimeout(definition),
-            ...wrapSentinelWarnings(sentinelWarnings),
-        ];
-        if (rejectIfPolicyEscalates(accumulated)) {
-            process.exit(1);
-        }
-        const strictFailed = printValidationOutcome(definition, accumulated, strict);
-        // issue #236: the nudge's own INFO channel — never affects the exit code below.
-        printStructuredOutputNudge(definition);
-        if (manifest.modules.length > 0) {
-            console.log(`Extensions: ${manifest.modules.map((m) => m.declared).join(', ')} ` +
-                `(adapters: ${manifest.adapters.length}, handlers: ${manifest.handlers.length}, ` +
-                `processors: ${manifest.processors.length})`);
-        }
-        if (strictFailed) {
-            process.exit(1);
-        }
     }
     catch (err) {
-        console.error(renderLoadFailure(err instanceof Error ? err.message : String(err)));
+        exitOnLoadFailure(err);
+    }
+    const accumulated = [
+        ...pass1Warnings,
+        ...findRetryWithoutExplicitTimeout(definition),
+        ...wrapSentinelWarnings(sentinelWarnings),
+    ];
+    if (rejectIfPolicyEscalates(accumulated)) {
+        process.exit(1);
+    }
+    const strictFailed = printValidationOutcome(definition, accumulated, strict);
+    if (manifest.modules.length > 0) {
+        console.log(`Extensions: ${manifest.modules.map((m) => m.declared).join(', ')} ` +
+            `(adapters: ${manifest.adapters.length}, handlers: ${manifest.handlers.length}, ` +
+            `processors: ${manifest.processors.length})`);
+    }
+    // issue #236: the nudge's own INFO channel — never affects the exit code below.
+    // issue #422: genuinely end-of-report, BELOW the Extensions block — the summary is a
+    // pointer at what you could do next, not part of what was just validated.
+    printStructuredOutputNudge(definition, { explain });
+    if (strictFailed) {
         process.exit(1);
     }
 });

package/dist/commands/validate.js.map

@@ -1 +1 @@
-{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../src/commands/validate.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,EAAE;AACF,yFAAyF;AACzF,qFAAqF;AACrF,uFAAuF;AACvF,wFAAwF;AACxF,4EAA4E;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAC/B,OAAO,EACL,qCAAqC,EACrC,mCAAmC,EACnC,aAAa,EACb,aAAa,EACb,oBAAoB,EACpB,iCAAiC,EACjC,eAAe,EACf,iCAAiC,EACjC,uBAAuB,GAExB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,qBAAqB,EACrB,yBAAyB,GAC1B,MAAM,0CAA0C,CAAC;AAClD,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,qBAAqB,EACrB,WAAW,GACZ,MAAM,2BAA2B,CAAC;AAEnC;;;;;;;;;;;;;;GAcG;AACH,SAAS,+BAA+B,CAAC,UAA8B;IACrE,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,IACE,oBAAoB,CAAC,IAAI,CAAC;YAC1B,IAAI,CAAC,KAAK,KAAK,SAAS;YACxB,IAAI,CAAC,eAAe,KAAK,SAAS,EAClC,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,kBAAkB;gBACxB,QAAQ,EAAE,eAAe,CAAC,kBAAkB,CAAC;gBAC7C,KAAK,EAAE,MAAM;gBACb,IAAI,EAAE,QAAQ;gBACd,OAAO,EACL,YAAY,QAAQ,iEAAiE;oBACrF,6CAA6C,iCAAiC,UAAU;oBACxF,qFAAqF;oBACrF,yFAAyF;oBACzF,wFAAwF;oBACxF,0EAA0E;aAC7E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,+FAA+F;AAC/F,SAAS,oBAAoB,CAAC,gBAAsC;IAClE,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAChD,IAAI,EAAE,oBAA6B;QACnC,QAAQ,EAAE,eAAe,CAAC,oBAAoB,CAAC;QAC/C,KAAK,EAAE,UAAmB;QAC1B,OAAO,EAAE,MAAM,OAAO,EAAE;KACzB,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;;;;GAMG;AACH,SAAS,sBAAsB,CAC7B,UAA8B,EAC9B,QAAyB,EACzB,MAAe;IAEf,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,UAAU,UAAU,CAAC,EAAE,KAAK,UAAU,CAAC,OAAO,KAAK,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,SAAS,CAAC;IAC9G,IAAI,MAAM,IAAI,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,MAAM,QAAQ,CAAC,MAAM,sCAAsC,CAAC,CAAC;QAChF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClB,IAAI,UAAU,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,KAAK,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;4EAC4E;AAC5E,MAAM,uBAAuB,GAAG,wCAAwC,CAAC;AAEzE,SAAS,iCAAiC,CAAC,MAAe;IACxD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACpE,MAAM,UAAU,GAAI,MAAkC,CAAC,YAAY,CAAC,CAAC;IACrE,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5E,OAAO,MAAM,CAAC,IAAI,CAAC,UAAqC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACtE,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CACnC,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,0BAA0B,CAAC,UAA8B;IAChE,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,IAAI,IAAI,CAAC,SAAS,KAAK,OAAO;YAAE,SAAS;QACzC,MAAM,eAAe,GAAG,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,YAAY,CAAC;QAChE,IAAI,eAAe,KAAK,SAAS;YAAE,SAAS,CAAC,2CAA2C;QAExF,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,KAAK,QAAQ,CAAC;QACpD,MAAM,OAAO,GAAG,iCAAiC,CAAC;YAChD,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClF,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3D,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,iCAAiC,CAAC,eAAe,CAAC,CAAC;QAEzE,IAAI,OAAO,CAAC,OAAO,KAAK,YAAY,EAAE,CAAC;YACrC,yFAAyF;YACzF,sFAAsF;YACtF,OAAO,CAAC,GAAG,CACT,WAAW,QAAQ,iDAAiD;gBAClE,GAAG,uBAAuB,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAChD,CAAC;YACF,SAAS;QACX,CAAC;QAED,IAAI,OAAO,CAAC,OAAO,KAAK,uBAAuB,EAAE,CAAC;YAChD,MAAM,MAAM,GAAG,OAAO;gBACpB,CAAC,CAAC,WAAW,QAAQ,6BAA6B;gBAClD,CAAC,CAAC,WAAW,QAAQ,wDAAwD,CAAC;YAChF,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACrC,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YACnD,CAAC;YACD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;gBAChC,OAAO,CAAC,GAAG,CACT,WAAW,QAAQ,oBAAoB,aAAa,0BAA0B;oBAC5E,mFAAmF;oBACnF,iFAAiF;oBACjF,yEAAyE,CAC5E,CAAC;YACJ,CAAC;YACD,SAAS;QACX,CAAC;QAED,sFAAsF;QACtF,sDAAsD;QACtD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CACT,WAAW,QAAQ,kDAAkD;gBACnE,wCAAwC,CAC3C,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,uBAAuB,CAAC,QAAyB;IACxD,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IACnD,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAC9B,OAAO,CAAC,KAAK,CACX,YAAY,QAAQ,CAAC,MAAM,2EAA2E,CACvG,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC;AAED;uEACuE;AACvE,SAAS,qBAAqB,CAAC,OAAe;IAC5C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1B,OAAO,CACL,OAAO,GAAG,KAAK,QAAQ;YACvB,GAAG,KAAK,IAAI;YACZ,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;YACnB,YAAY,IAAK,GAA+B,CACjD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,OAAO,CAAC,UAAU,CAAC;KACnD,QAAQ,CAAC,QAAQ,EAAE,kDAAkD,CAAC;KACtE,MAAM,CACL,4BAA4B,EAC5B,gGAAgG,CACjG;KACA,MAAM,CACL,UAAU,EACV,yHAAyH,CAC1H;KACA,WAAW,CAAC,+BAA+B,CAAC;KAC5C,MAAM,CAAC,KAAK,EAAE,SAAiB,EAAE,IAAqD,EAAE,EAAE;IACzF,MAAM,QAAQ,GACZ,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;QACvD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC;IAEpC,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO,CAAC,KAAK,CAAC,UAAU,OAAO,EAAE,CAAC,CAAC;QACnC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QAC3E,gFAAgF;QAChF,4EAA4E;QAC5E,kFAAkF;QAClF,kFAAkF;QAClF,qFAAqF;QACrF,kFAAkF;QAClF,iFAAiF;QACjF,IAAI,CAAC;YACH,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,GAC5C,qCAAqC,CAAC,OAAO,CAAC,CAAC;YACjD,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC/C,yBAAyB,CAAC,WAAW,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC;YAEnE,MAAM,WAAW,GAAG,CAAC,GAAG,cAAc,EAAE,GAAG,+BAA+B,CAAC,UAAU,CAAC,CAAC,CAAC;YACxF,IAAI,uBAAuB,CAAC,WAAW,CAAC,EAAE,CAAC;gBACzC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,MAAM,YAAY,GAAG,sBAAsB,CAAC,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;YAC7E,gFAAgF;YAChF,0BAA0B,CAAC,UAAU,CAAC,CAAC;YACvC,IAAI,YAAY,EAAE,CAAC;gBACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;gBACjC,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC9C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,OAAO;IACT,CAAC;IAED,iFAAiF;IACjF,IAAI,CAAC;QACH,yFAAyF;QACzF,wFAAwF;QACxF,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,mCAAmC,CAAC,QAAQ,CAAC,CAAC;QAC9F,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,gBAAgB,EAAE,GAAG,MAAM,qBAAqB,CAAC,UAAU,EAAE;YACvF,GAAG,CAAC,IAAI,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzF,UAAU,EAAE,UAAU;SACvB,CAAC,CAAC;QACH,oFAAoF;QACpF,uFAAuF;QACvF,0FAA0F;QAC1F,8CAA8C;QAC9C,mCAAmC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAExD,MAAM,WAAW,GAAG;YAClB,GAAG,aAAa;YAChB,GAAG,+BAA+B,CAAC,UAAU,CAAC;YAC9C,GAAG,oBAAoB,CAAC,gBAAgB,CAAC;SAC1C,CAAC;QACF,IAAI,uBAAuB,CAAC,WAAW,CAAC,EAAE,CAAC;YACzC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,YAAY,GAAG,sBAAsB,CAAC,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;QAC7E,gFAAgF;QAChF,0BAA0B,CAAC,UAAU,CAAC,CAAC;QACvC,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,GAAG,CACT,eAAe,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;gBAClE,cAAc,QAAQ,CAAC,QAAQ,CAAC,MAAM,eAAe,QAAQ,CAAC,QAAQ,CAAC,MAAM,IAAI;gBACjF,eAAe,QAAQ,CAAC,UAAU,CAAC,MAAM,GAAG,CAC/C,CAAC;QACJ,CAAC;QACD,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC"}
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../src/commands/validate.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,EAAE;AACF,yFAAyF;AACzF,qFAAqF;AACrF,uFAAuF;AACvF,wFAAwF;AACxF,4EAA4E;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAC/B,OAAO,EACL,qCAAqC,EACrC,mCAAmC,EACnC,aAAa,EACb,aAAa,EACb,oBAAoB,EACpB,iCAAiC,EACjC,eAAe,EACf,mBAAmB,EACnB,iCAAiC,EACjC,uBAAuB,EACvB,iBAAiB,EACjB,0BAA0B,EAC1B,OAAO,GAER,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,qBAAqB,EACrB,yBAAyB,GAC1B,MAAM,0CAA0C,CAAC;AAClD,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,EACrB,WAAW,EACX,oBAAoB,GACrB,MAAM,2BAA2B,CAAC;AAEnC;;;;;;;;;;;;;;GAcG;AACH,2CAA2C;AAC3C,MAAM,UAAU,+BAA+B,CAAC,UAA8B;IAC5E,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,IACE,oBAAoB,CAAC,IAAI,CAAC;YAC1B,IAAI,CAAC,KAAK,KAAK,SAAS;YACxB,IAAI,CAAC,eAAe,KAAK,SAAS,EAClC,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,kBAAkB;gBACxB,QAAQ,EAAE,eAAe,CAAC,kBAAkB,CAAC;gBAC7C,KAAK,EAAE,MAAM;gBACb,IAAI,EAAE,QAAQ;gBACd,OAAO,EACL,SAAS,QAAQ,iEAAiE;oBAClF,6CAA6C,iCAAiC,UAAU;oBACxF,qFAAqF;oBACrF,yFAAyF;oBACzF,wFAAwF;oBACxF,0EAA0E;aAC7E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,sBAAsB,CAC7B,UAA8B,EAC9B,QAAyB,EACzB,MAAe;IAEf,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAC9B,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;IACvD,MAAM,IAAI,GAAG,UAAU,UAAU,CAAC,EAAE,KAAK,UAAU,CAAC,OAAO,KAAK,SAAS,IAAI,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC;IACnH,IAAI,MAAM,IAAI,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpC,OAAO,CAAC,GAAG,CACT,GAAG,IAAI,MAAM,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,2BAA2B,CAC1G,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClB,IAAI,UAAU,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,KAAK,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;4EAC4E;AAC5E,MAAM,uBAAuB,GAAG,wCAAwC,CAAC;AAEzE,SAAS,iCAAiC,CAAC,MAAe;IACxD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACpE,MAAM,UAAU,GAAI,MAAkC,CAAC,YAAY,CAAC,CAAC;IACrE,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5E,OAAO,MAAM,CAAC,IAAI,CAAC,UAAqC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACtE,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CACnC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,SAAS,0BAA0B,CACjC,UAA8B,EAC9B,IAA0B;IAE1B,0FAA0F;IAC1F,MAAM,KAAK,GAAa,EAAE,CAAC,CAAC,mCAAmC;IAC/D,MAAM,WAAW,GAAa,EAAE,CAAC,CAAC,4CAA4C;IAC9E,MAAM,OAAO,GAAa,EAAE,CAAC,CAAC,aAAa;IAE3C,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,IAAI,IAAI,CAAC,SAAS,KAAK,OAAO;YAAE,SAAS;QACzC,MAAM,eAAe,GAAG,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,YAAY,CAAC;QAChE,IAAI,eAAe,KAAK,SAAS;YAAE,SAAS,CAAC,2CAA2C;QAExF,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,KAAK,QAAQ,CAAC;QACpD,MAAM,OAAO,GAAG,iCAAiC,CAAC;YAChD,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClF,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3D,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,iCAAiC,CAAC,eAAe,CAAC,CAAC;QAEzE,yFAAyF;QACzF,uFAAuF;QACvF,oDAAoD;QACpD,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,OAAO,CAAC,OAAO,KAAK,uBAAuB;gBAAE,SAAS;YAC1D,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACrC,OAAO,CAAC,GAAG,CAAC,WAAW,QAAQ,iCAAiC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YACxF,CAAC;YACD,wBAAwB,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YAClD,SAAS;QACX,CAAC;QAED,IAAI,OAAO,CAAC,OAAO,KAAK,YAAY,EAAE,CAAC;YACrC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjB,OAAO,CAAC,GAAG,CACT,WAAW,QAAQ,iDAAiD;oBAClE,GAAG,uBAAuB,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAChD,CAAC;YACJ,CAAC;YACD,SAAS;QACX,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrB,IAAI,OAAO,CAAC,OAAO,KAAK,uBAAuB,EAAE,CAAC;YAChD,yFAAyF;YACzF,iFAAiF;YACjF,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC3B,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjB,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;oBACrC,OAAO,CAAC,GAAG,CACT,WAAW,QAAQ,2DAA2D;wBAC5E,GAAG,MAAM,CAAC,WAAW,EAAE,CAC1B,CAAC;gBACJ,CAAC;gBACD,wBAAwB,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YACpD,CAAC;YACD,SAAS;QACX,CAAC;QAED,sFAAsF;QACtF,sDAAsD;QACtD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CACT,WAAW,QAAQ,kDAAkD;gBACnE,wCAAwC,CAC3C,CAAC;QACJ,CAAC;IACH,CAAC;IAED,6FAA6F;IAC7F,0DAA0D;IAC1D,IAAI,IAAI,CAAC,OAAO;QAAE,OAAO;IACzB,8FAA8F;IAC9F,oFAAoF;IACpF,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,GAAG;QAAE,OAAO;IAElD,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAClF,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC5C,CAAC;AAED,4FAA4F;AAC5F,SAAS,wBAAwB,CAAC,QAAgB,EAAE,aAAiC;IACnF,IAAI,aAAa,KAAK,SAAS;QAAE,OAAO;IACxC,OAAO,CAAC,GAAG,CACT,WAAW,QAAQ,oBAAoB,aAAa,0BAA0B;QAC5E,mFAAmF;QACnF,iFAAiF;QACjF,yEAAyE,CAC5E,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,kBAAkB,CACzB,KAAa,EACb,WAAmB,EACnB,OAAe;IAEf,IAAI,KAAK,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACnD,MAAM,KAAK,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,sFAAsF,CAAC;IAEpG,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QAChB,OAAO,KAAK,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,kDAAkD,IAAI,EAAE,CAAC;IAChG,CAAC;IAED,IAAI,IAAI,GAAG,KAAK,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,sCAAsC,CAAC;IAC5E,IAAI,WAAW,GAAG,CAAC;QAAE,IAAI,IAAI,KAAK,WAAW,gBAAgB,CAAC;IAC9D,IAAI,OAAO,GAAG,CAAC;QAAE,IAAI,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC;IAC1E,OAAO,IAAI,GAAG,IAAI,CAAC;AACrB,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,iBAAiB,CAAC,GAAY;IACrC,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;QACjC,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS;YAAE,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClE,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;QACtC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,GAAG,CAAC;AACZ,CAAC;AAED;;;;;GAKG;AACH,SAAS,uBAAuB,CAAC,QAAyB;IACxD,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IACnD,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAC9B,6FAA6F;IAC7F,6FAA6F;IAC7F,+DAA+D;IAC/D,EAAE;IACF,0FAA0F;IAC1F,gGAAgG;IAChG,6FAA6F;IAC7F,qDAAqD;IACrD,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9C,OAAO,IAAI,CAAC;AACd,CAAC;AAED;uEACuE;AACvE,SAAS,qBAAqB,CAAC,OAAe;IAC5C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1B,OAAO,CACL,OAAO,GAAG,KAAK,QAAQ;YACvB,GAAG,KAAK,IAAI;YACZ,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;YACnB,YAAY,IAAK,GAA+B,CACjD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,KAAK,UAAU,kBAAkB,CAAC,EAAU,EAAE,MAAe;IAC3D,MAAM,KAAK,GAAG,IAAI,iBAAiB,EAAE,CAAC;IAEtC,IAAI,MAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,IAAI,KAAK,0BAA0B,EAAE,CAAC;YAC5E,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACvC,OAAO,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,IAAI,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;YACvE,0FAA0F;YAC1F,sFAAsF;YACtF,yFAAyF;YACzF,yFAAyF;YACzF,mDAAmD;YACnD,OAAO,CAAC,GAAG,CAAC,oCAAoC,EAAE,gBAAgB,OAAO,YAAY,CAAC,CAAC;YACvF,qFAAqF;YACrF,gFAAgF;YAChF,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;YACtC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,IAAI,CAAC,CAAC,GAAG,YAAY,aAAa,CAAC,EAAE,CAAC;YACpC,yFAAyF;YACzF,8DAA8D;YAC9D,OAAO,CAAC,KAAK,CACX,kCAAkC,EAAE,4BAClC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;YACF,OAAO,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,GAAG,CAAC,CAAC,kEAAkE;IAC/E,CAAC;IAED,OAAO,CAAC,GAAG,CACT,oCAAoC,EAAE,qBAAqB,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI;QAC1F,cAAc,OAAO,YAAY,CACpC,CAAC;IACF,OAAO,CAAC,GAAG,CACT,sGAAsG,CACvG,CAAC;IAEF,MAAM,KAAK,GAAG,EAAE,GAAG,MAAM,EAA6B,CAAC;IACvD,KAAK,MAAM,GAAG,IAAI,0BAA0B;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC;IAEhE,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAC5D,CAAC,IAAI,EAAE,EAAE,CAAE,IAAoC,CAAC,aAAa,KAAK,SAAS,CAC5E,CAAC;IACF,IAAI,KAAK,CAAC,YAAY,CAAC,KAAK,SAAS,IAAI,eAAe,EAAE,CAAC;QACzD,OAAO,CAAC,GAAG,CACT,4FAA4F;YAC1F,uFAAuF,CAC1F,CAAC;IACJ,CAAC;IACD,2FAA2F;IAC3F,6FAA6F;IAC7F,4FAA4F;IAC5F,6CAA6C;IAC7C,OAAO,KAAK,CAAC,YAAY,CAAC,CAAC;IAE3B,IAAI,UAA8B,CAAC;IACnC,IAAI,cAA+B,CAAC;IACpC,IAAI,CAAC;QACH,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,GAAG,qCAAqC,CAC/E,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CACtB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAED,6FAA6F;IAC7F,8FAA8F;IAC9F,qEAAqE;IACrE,MAAM,WAAW,GAAG,CAAC,GAAG,cAAc,EAAE,GAAG,+BAA+B,CAAC,UAAU,CAAC,CAAC,CAAC;IACxF,IAAI,uBAAuB,CAAC,WAAW,CAAC,EAAE,CAAC;QACzC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,YAAY,GAAG,sBAAsB,CAAC,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IAC7E,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,OAAO,CAAC,UAAU,CAAC;KACnD,QAAQ,CAAC,QAAQ,EAAE,kDAAkD,CAAC;KACtE,MAAM,CACL,mBAAmB,EACnB,+EAA+E,CAChF;KACA,MAAM,CACL,4BAA4B,EAC5B,gGAAgG,CACjG;KACA,MAAM,CACL,UAAU,EACV,yHAAyH,CAC1H;KACA,MAAM,CACL,WAAW,EACX,+HAA+H,CAChI;KACA,WAAW,CAAC,+BAA+B,CAAC;KAC5C,MAAM,CACL,KAAK,EACH,SAA6B,EAC7B,IAKC,EACD,EAAE;IACF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC;IACpC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC;IAEtC,0FAA0F;IAC1F,kFAAkF;IAClF,0FAA0F;IAC1F,2FAA2F;IAC3F,sDAAsD;IACtD,IAAI,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7D,OAAO,CAAC,KAAK,CACX,oFAAoF,CACrF,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IACD,IAAI,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7D,OAAO,CAAC,KAAK,CACX,iFAAiF,CAClF,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,kBAAkB,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAClD,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GACZ,SAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,SAAU,CAAC,QAAQ,CAAC,MAAM,CAAC;QACzD,CAAC,CAAC,SAAU;QACZ,CAAC,CAAC,IAAI,CAAC,SAAU,EAAE,eAAe,CAAC,CAAC;IAExC,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO,CAAC,KAAK,CAAC,UAAU,OAAO,EAAE,CAAC,CAAC;QACnC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QAC3E,gFAAgF;QAChF,4EAA4E;QAC5E,kFAAkF;QAClF,kFAAkF;QAClF,qFAAqF;QACrF,sFAAsF;QACtF,0FAA0F;QAC1F,sFAAsF;QACtF,iFAAiF;QACjF,IAAI,UAA8B,CAAC;QACnC,IAAI,cAA+B,CAAC;QACpC,IAAI,CAAC;YACH,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE;gBACvC,qCAAqC,CAAC,OAAO,CAAC,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QACD,wFAAwF;QACxF,sFAAsF;QACtF,8CAA8C;QAC9C,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC/C,yBAAyB,CAAC,WAAW,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,yFAAyF;YACzF,oFAAoF;YACpF,qFAAqF;YACrF,0FAA0F;YAC1F,sFAAsF;YACtF,qFAAqF;YACrF,uFAAuF;YACvF,yFAAyF;YACzF,sFAAsF;YACtF,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,cAAc,EAAE,GAAG,+BAA+B,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;gBACpF,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;YACvC,CAAC;YACD,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QAED,sFAAsF;QACtF,wFAAwF;QACxF,0FAA0F;QAC1F,MAAM,WAAW,GAAG,CAAC,GAAG,cAAc,EAAE,GAAG,+BAA+B,CAAC,UAAU,CAAC,CAAC,CAAC;QACxF,IAAI,uBAAuB,CAAC,WAAW,CAAC,EAAE,CAAC;YACzC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,YAAY,GAAG,sBAAsB,CAAC,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;QAC7E,gFAAgF;QAChF,0BAA0B,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACpD,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO;IACT,CAAC;IAED,iFAAiF;IACjF,EAAE;IACF,oFAAoF;IACpF,sFAAsF;IACtF,yFAAyF;IACzF,2CAA2C;IAC3C,IAAI,UAA8B,CAAC;IACnC,IAAI,aAA8B,CAAC;IACnC,IAAI,CAAC;QACH,yFAAyF;QACzF,wFAAwF;QACxF,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,mCAAmC,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC5F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAED,IAAI,QAA2B,CAAC;IAChC,IAAI,QAAuE,CAAC;IAC5E,IAAI,gBAAsC,CAAC;IAC3C,IAAI,CAAC;QACH,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,gBAAgB,EAAE,GAAG,MAAM,qBAAqB,CAAC,UAAU,EAAE;YAClF,GAAG,CAAC,IAAI,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzF,UAAU,EAAE,UAAU;SACvB,CAAC,CAAC,CAAC;IACN,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,gFAAgF;QAChF,qFAAqF;QACrF,oFAAoF;QACpF,sFAAsF;QACtF,sFAAsF;QACtF,sFAAsF;QACtF,sCAAsC;QACtC,EAAE;QACF,wFAAwF;QACxF,2FAA2F;QAC3F,yFAAyF;QACzF,yFAAyF;QACzF,8BAA8B;QAC9B,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,aAAa,EAAE,GAAG,+BAA+B,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YACnF,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,CAAC,KAAK,CACX,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAChF,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,CAAC;QACH,oFAAoF;QACpF,uFAAuF;QACvF,0FAA0F;QAC1F,8CAA8C;QAC9C,mCAAmC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,WAAW,GAAG;QAClB,GAAG,aAAa;QAChB,GAAG,+BAA+B,CAAC,UAAU,CAAC;QAC9C,GAAG,oBAAoB,CAAC,gBAAgB,CAAC;KAC1C,CAAC;IACF,IAAI,uBAAuB,CAAC,WAAW,CAAC,EAAE,CAAC;QACzC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,YAAY,GAAG,sBAAsB,CAAC,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IAC7E,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,OAAO,CAAC,GAAG,CACT,eAAe,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YAClE,cAAc,QAAQ,CAAC,QAAQ,CAAC,MAAM,eAAe,QAAQ,CAAC,QAAQ,CAAC,MAAM,IAAI;YACjF,eAAe,QAAQ,CAAC,UAAU,CAAC,MAAM,GAAG,CAC/C,CAAC;IACJ,CAAC;IACD,gFAAgF;IAChF,qFAAqF;IACrF,0EAA0E;IAC1E,0BAA0B,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IACpD,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CACF,CAAC"}

package/dist/commands/watch.d.ts

@@ -1,5 +1,24 @@
 import { Command } from 'commander';
 import type { WorkflowRegistrar } from '@sensigo/realm';
+/**
+ * A trailing-edge coalescer: every `trigger()` (re)arms one timer, so a burst of calls inside the
+ * window produces exactly one `fn()` at the end of it (issue #449).
+ *
+ * WHAT ACTUALLY BURSTS, precisely — the YAML watcher is not the reason. On this platform the
+ * basename filter already reduces an atomic save to ONE passing event. The burst is the
+ * profiles watcher, which has no filter: creating a file there emits `rename` + `change`, two
+ * events, probe-proven. Cross-platform event shapes vary besides, so one instance is shared by
+ * both watchers rather than reasoned about per-watcher.
+ *
+ * `cancel()` exists because an abort must not leave a pending timer: it would fire after the
+ * watch resolved, re-registering into a store whose owner has moved on. Idempotent.
+ *
+ * @internal Exported for testing only.
+ */
+export declare function makeCoalescedTrigger(fn: () => void, delayMs: number): {
+    trigger(): void;
+    cancel(): void;
+};
 /**
  * Watches a workflow YAML file and re-registers it into the given store on every change.
  * Also watches the profiles directory alongside the YAML — any file change there triggers
@@ -7,6 +26,17 @@ import type { WorkflowRegistrar } from '@sensigo/realm';
  * Performs an initial registration before entering the watch loop.
  * Resolves when the watcher is closed (e.g. when the AbortSignal fires).
  *
+ * Three mechanics worth knowing (issue #449):
+ * - The YAML watch is on the file's DIRECTORY, filtered by basename — a file watch dies with the
+ *   inode an atomic save renames away.
+ * - Both watchers are persistent, so they hold the process open; Ctrl+C is what stops it.
+ * - Each save's event burst is coalesced into one re-registration on a 100ms trailing edge.
+ *
+ * RESTART REQUIRED for three things, all read once at startup and never re-read: the extension
+ * modules (ESM cache, note below), a `profiles/` directory created after the watch began, and a
+ * `profiles_dir:` value edited mid-watch — an edit to that key keeps watching the OLD directory
+ * until you restart. No late-mount machinery; watch-before-create is a separate feature.
+ *
  * @param filePath    Path to the workflow YAML file.
  * @param store       The workflow registrar to register into — injected, never instantiated here.
  * @param signal      Optional AbortSignal; when aborted the watcher stops and the promise resolves.