@vibesdotdev/forge 0.0.0-stage → 1.0.0-rc.4

package/dist/cli/commands/forge.push.command.impl.js

@@ -0,0 +1,467 @@
+import { createCLIActionLifetime } from '@vibesdotdev/cli/providers';
+/** Secure explicit write path: canonical SSH push plus exact-ref verification. */
+import { CapabilityError, composeChildEnv, requireRuntimeCwd } from '@vibesdotdev/kernel';
+import { gitChildInheritEnv } from '@vibesdotdev/git-operations/core';
+import { sendForgeRequest } from "../lib/transport.js";
+import { resolveRepositoryId } from "../lib/repo-ref.js";
+import { commandUI, failWith, printInfo, printJson, printSuccess, wantsJson } from "../lib/output.js";
+import { selectCloneTransport, requireCredentialFreeCloneUrl } from "./forge.clone-url.command.impl.js";
+// Cloudflare Container provisioning has reached 12 minutes in production.
+// Keep one Git attempt above that cold-start envelope.
+const PUSH_RPC_TIMEOUT_MS = 20 * 60_000;
+export function credentialFreeUrl(value) {
+    const url = new URL(value);
+    if (url.protocol !== 'ssh:' ||
+        url.username !== 'git' ||
+        url.password ||
+        url.hostname !== 'git.vibes.dev' ||
+        url.port ||
+        url.search ||
+        url.hash) {
+        throw new Error('Forge push only accepts canonical ssh://git@git.vibes.dev repository URLs');
+    }
+    const segments = url.pathname
+        .replace(/^\//, '')
+        .replace(/\.git$/, '')
+        .split('/');
+    if (segments.length !== 2 ||
+        !/^~?[A-Za-z0-9._-]+$/.test(segments[0] ?? '') ||
+        !/^[A-Za-z0-9._-]+$/.test(segments[1] ?? '')) {
+        throw new Error('Forge push requires a canonical owner/repository Git path');
+    }
+    return url.toString();
+}
+function hasControlOrWhitespace(value) {
+    for (let i = 0; i < value.length; i++) {
+        const code = value.charCodeAt(i);
+        if (code <= 0x1f || code === 0x7f || code === 0x20 || code === 0x09 || code === 0x0a || code === 0x0d) {
+            return true;
+        }
+    }
+    return false;
+}
+export function refspecParts(value) {
+    // A leading `+` is git's inline force marker. It stays rejected here so the
+    // refspec grammar has exactly one meaning, but the error has to name the
+    // supported route or the user is just stuck: `+branch` is what a git-fluent
+    // caller reaches for first, and "Unsupported refspec" alone reads as
+    // "force is impossible" rather than "spell it as a flag".
+    if (value?.startsWith('+')) {
+        throw new Error(`Unsupported refspec: ${value} — use --force instead of a leading '+' (e.g. vibes forge push <repo> ${value.slice(1)} --force)`);
+    }
+    if (!value || /^[+-]/.test(value) || hasControlOrWhitespace(value)) {
+        throw new Error(`Unsupported refspec: ${value}`);
+    }
+    const [source, destination = value] = value.split(':', 2);
+    if (!source || !destination || value.split(':').length > 2)
+        throw new Error(`Unsupported refspec: ${value}`);
+    if (destination.startsWith('refs/') && !destination.startsWith('refs/heads/')) {
+        throw new Error(`Unsupported refspec: ${value}`);
+    }
+    const normalized = destination.startsWith('refs/heads/')
+        ? destination
+        : `refs/heads/${destination}`;
+    if (!/^refs\/heads\/[A-Za-z0-9._/-]+$/.test(normalized) ||
+        normalized.includes('..') ||
+        normalized.endsWith('/')) {
+        throw new Error(`Unsupported refspec: ${value}`);
+    }
+    return { source, destination: normalized };
+}
+/**
+ * A git child's whole environment (rc02-rc03 C15): the kernel's composition
+ * over the handed runtime — its base set (search path, home, locale, temp),
+ * its path roots, and the host names the one git declaration names
+ * (`gitChildInheritEnv`: the SSH agent and SSH command selectors, the
+ * repository-discovery ceiling, and any config passed through git's own
+ * `GIT_CONFIG_COUNT`/`GIT_CONFIG_KEY_n`/`GIT_CONFIG_VALUE_n` protocol).
+ * Nothing else from the host reaches the child.
+ */
+export function gitChildEnvironment(runtime) {
+    return composeChildEnv(runtime, { inheritEnv: gitChildInheritEnv(runtime.getEnvSnapshot()) });
+}
+/**
+ * A git runner over the host's `runtime/execution`: the child gets only
+ * {@link gitChildEnvironment} (`envMode: 'replace'`), and a timeout or abort
+ * kills its whole process tree (`killTree`), which the execution owner enforces.
+ */
+export function createGitRunner(execution, env) {
+    return async (cwd, args, _token = '', options = {}) => {
+        const executeOptions = {
+            command: 'git',
+            args: ['-C', cwd, ...args],
+            env,
+            envMode: 'replace',
+            killTree: true
+        };
+        if (options.timeoutMs && options.timeoutMs > 0)
+            executeOptions.timeout = options.timeoutMs;
+        if (options.signal)
+            executeOptions.signal = options.signal;
+        const result = await execution.execute(executeOptions);
+        return {
+            code: result.exitCode ?? 1,
+            stdout: result.stdout,
+            stderr: result.stderr,
+            timedOut: result.timedOut
+        };
+    };
+}
+/** The host's enabled `runtime/execution`, or a typed failure. */
+async function requireExecution(runtime) {
+    // SAFETY: Querying the enabled runtime/execution provider returns the provider contract if resolved.
+    const execution = (await runtime.query('runtime/execution').enabled().resolve());
+    if (!execution) {
+        throw new CapabilityError('This host has no enabled runtime/execution provider.', 'UNAVAILABLE', {
+            reason: 'execution-unavailable',
+            retryable: false
+        });
+    }
+    return execution;
+}
+export function redacted(value, token) {
+    if (!token)
+        return value.trim();
+    const basicCredential = Buffer.from(`vibes-deploy:${token}`).toString('base64');
+    return value.split(token).join('[REDACTED]').split(basicCredential).join('[REDACTED]').trim();
+}
+function isTransientGitFailure(result) {
+    if (result.timedOut)
+        return true;
+    const text = `${result.stderr}\n${result.stdout}`.toLowerCase();
+    return /http 5\d\d|rpc failed|remote end hung up|sideband|early eof|connection reset|could not read from remote|unexpected disconnect|ssl_read|timed out|\b50[0234]\b/.test(text);
+}
+/** A rejection that retrying cannot fix, and that has a specific remedy. */
+export function nonFastForwardGuidance(result, forced) {
+    const text = `${result.stderr}\n${result.stdout}`;
+    if (/stale info/i.test(text)) {
+        return ('the remote ref moved while this push was being prepared, so the force was refused ' +
+            '(--force-with-lease). Someone else pushed. Re-read the remote and rebase onto it before forcing again; ' +
+            'retrying blind would discard their commits.');
+    }
+    if (/\bnon-fast-forward\b|fetch first|updates were rejected/i.test(text)) {
+        return forced
+            ? 'the remote rejected a non-fast-forward update. A branch policy on this ref most likely forbids force pushes.'
+            : 'this is a non-fast-forward update (the branch was rebased, amended, or squashed). ' +
+                'Re-run with --force to replace the remote ref, which is lease-protected and refuses if anyone else pushed in the meantime.';
+    }
+    return null;
+}
+/**
+ * Perform one SSH push and prove the exact destination SHA. Forge does not mint
+ * an HTTPS credential or install a credential helper for this command.
+ * First-party push uses the published SSH clone transport, never repo.cloneUrl.
+ */
+export async function resolveForgePushCloneUrl(repositoryId, send) {
+    const response = await send({
+        method: 'GET',
+        path: `/api/repositories/${encodeURIComponent(repositoryId)}/clone-url`,
+        query: { credential: 'omit' }
+    });
+    if (!response.ok)
+        throw new Error(response.message);
+    const published = requireCredentialFreeCloneUrl(response.data.result);
+    const selected = selectCloneTransport(published.cloneUrls, 'ssh');
+    return credentialFreeUrl(selected.cloneUrl);
+}
+export function remoteUrlMatchesCloneUrl(remoteUrl, cloneUrl) {
+    const normalize = (value) => value.replace(/\.git$/, '');
+    return normalize(remoteUrl) === normalize(cloneUrl);
+}
+export function selectCheckoutForCloneUrl(cloneUrl, candidates, readForgeRemoteUrl) {
+    for (const cwd of candidates) {
+        const remoteUrl = readForgeRemoteUrl(cwd);
+        if (remoteUrl && remoteUrlMatchesCloneUrl(remoteUrl, cloneUrl))
+            return cwd;
+    }
+    return null;
+}
+/**
+ * Current SHA of a remote ref, or '' when the ref does not exist yet.
+ *
+ * Distinguishing "absent" from "unreadable" matters for the lease: an absent
+ * destination makes a force meaningless (creating a ref is a fast-forward), so
+ * the caller sends an ordinary push. An unreadable one must NOT be treated as
+ * absent — that would turn a network blip into an unguarded overwrite.
+ */
+async function readRemoteRefSha(authenticatedGit, cwd, cloneUrl, ref, options) {
+    const remote = await authenticatedGit(cwd, ['-c', 'protocol.version=0', 'ls-remote', '--', cloneUrl, ref], '', options);
+    if (remote.code !== 0) {
+        throw new Error(`could not read the remote ref before forcing: ${(remote.stderr || remote.stdout).trim()}`);
+    }
+    return remote.stdout.trim().split(/\s+/)[0] ?? '';
+}
+function throwIfPushAborted(signal) {
+    if (!signal?.aborted)
+        return;
+    throw signal.reason instanceof Error ? signal.reason : new Error('Forge push interrupted');
+}
+export async function securePush(request, overrides = {}) {
+    const send = overrides.send ??
+        ((spec) => sendForgeRequest(request.runtime, spec, undefined, { originOverride: request.origin }));
+    const resolveRepo = overrides.resolveRepo ??
+        ((repo) => resolveRepositoryId(request.runtime, repo, undefined, undefined, {
+            originOverride: request.origin
+        }));
+    // Both runners are the host's git over `runtime/execution` unless injected.
+    const hostGit = overrides.localGit && overrides.authenticatedGit
+        ? null
+        : createGitRunner(await requireExecution(request.runtime), gitChildEnvironment(request.runtime));
+    const localGit = overrides.localGit ?? hostGit;
+    const authenticatedGit = overrides.authenticatedGit ?? hostGit;
+    const listWorkspaceCheckouts = overrides.listWorkspaceCheckouts ??
+        (async (workspaceRoot) => {
+            const { workspaceCheckoutCandidates } = await import("./forge.push.workspace-checkouts.impl.consumer.js");
+            return workspaceCheckoutCandidates(workspaceRoot, request.runtime);
+        });
+    const progress = request.onProgress ?? (() => undefined);
+    const pushTimeoutMs = overrides.pushTimeoutMs ?? PUSH_RPC_TIMEOUT_MS;
+    throwIfPushAborted(request.signal);
+    progress('Resolving local source and canonical repository');
+    const refs = refspecParts(request.refspec);
+    const repositoryId = await resolveRepo(request.repo);
+    const cloneUrl = await resolveForgePushCloneUrl(repositoryId, send);
+    let cwd = request.cwd;
+    const cwdRemote = await localGit(cwd, ['config', '--get', 'remote.forge.url']);
+    const cwdRemoteUrl = cwdRemote.code === 0 ? cwdRemote.stdout.trim() : '';
+    if (cwdRemoteUrl && !remoteUrlMatchesCloneUrl(cwdRemoteUrl, cloneUrl)) {
+        const workspaceRoot = await request.runtime.context('runtime/workspace-path');
+        let matched = null;
+        for (const candidate of await listWorkspaceCheckouts(workspaceRoot)) {
+            const remote = await localGit(candidate, ['config', '--get', 'remote.forge.url']);
+            if (remote.code === 0 && remoteUrlMatchesCloneUrl(remote.stdout.trim(), cloneUrl)) {
+                matched = candidate;
+                break;
+            }
+        }
+        if (!matched) {
+            throw new Error(`Local checkout ${cwd} has forge remote ${cwdRemoteUrl}, not ${cloneUrl}. Run from the matching checkout.`);
+        }
+        cwd = matched;
+    }
+    const local = await localGit(cwd, ['rev-parse', '--verify', refs.source]);
+    if (local.code !== 0)
+        throw new Error(`could not resolve local source ${refs.source}`);
+    const localSha = local.stdout.trim();
+    if (!/^[0-9a-f]{40,64}$/i.test(localSha)) {
+        throw new Error(`local source ${refs.source} did not resolve to a commit SHA`);
+    }
+    let replacedSha = '';
+    // The lease is decided once, from the state observed before the push.
+    let leaseArgs = [];
+    const pinnedLease = request.expectedRemoteSha?.trim() || '';
+    let observedLease = '';
+    if (request.force) {
+        const observed = pinnedLease ||
+            (await readRemoteRefSha(authenticatedGit, cwd, cloneUrl, refs.destination, {
+                timeoutMs: pushTimeoutMs,
+                signal: request.signal
+            }));
+        observedLease = observed;
+        throwIfPushAborted(request.signal);
+        if (observed) {
+            // Nothing to force when the local commit already contains the
+            // remote tip: that push is a fast-forward and needs no lease.
+            // `replacedSha` is assigned only on the forcing branch — reporting
+            // `forcedFrom` for a fast-forward would tell the caller history was
+            // rewritten when nothing was discarded.
+            const contains = await localGit(cwd, ['merge-base', '--is-ancestor', observed, localSha]);
+            if (contains.code !== 0) {
+                replacedSha = observed;
+                leaseArgs = ['--force-with-lease=' + refs.destination + ':' + observed];
+            }
+        }
+    }
+    // One push, then one exact-ref read. Nothing here retries or sleeps: a
+    // transient failure is a typed outcome for the caller's own retry policy
+    // (Workers owns retry). A force the caller did not pin is never blindly
+    // retryable: a re-run would read the remote again and could adopt a
+    // competitor's commit as its lease, so the outcome carries the lease this
+    // attempt observed for the retry to pin.
+    const retry = forcedPushRetry(Boolean(request.force), pinnedLease, observedLease);
+    progress(leaseArgs.length > 0
+        ? `Force-updating ${refs.destination} from ${replacedSha.slice(0, 12)} to ${localSha.slice(0, 12)}`
+        : `Uploading ${refs.source} to ${refs.destination}`);
+    const pushed = await authenticatedGit(cwd, ['push', '--porcelain', '--no-thin', ...leaseArgs, '--', cloneUrl, request.refspec], '', { timeoutMs: pushTimeoutMs, signal: request.signal });
+    throwIfPushAborted(request.signal);
+    progress('Verifying the exact remote commit');
+    const remote = await authenticatedGit(cwd, ['-c', 'protocol.version=0', 'ls-remote', '--', cloneUrl, refs.destination], '', { timeoutMs: pushTimeoutMs, signal: request.signal });
+    throwIfPushAborted(request.signal);
+    const remoteSha = remote.code === 0 ? (remote.stdout.trim().split(/\s+/)[0] ?? '') : '';
+    if (remote.code !== 0 && !isTransientGitFailure(remote)) {
+        throw new Error(`could not verify remote ref: ${(remote.stderr || remote.stdout).trim()}`);
+    }
+    // The exact commit is on the remote: it landed, even if the push RPC
+    // reported an ambiguous failure.
+    if (remote.code === 0 && remoteSha === localSha) {
+        const result = {
+            repositoryId,
+            ref: refs.destination,
+            sha: localSha,
+            verified: true
+        };
+        if (replacedSha && replacedSha !== localSha)
+            result.forcedFrom = replacedSha;
+        return result;
+    }
+    if (pushed.code === 0) {
+        if (remote.code !== 0) {
+            throw new CapabilityError(`could not verify remote ref: ${redacted(remote.stderr || remote.stdout, '')}`, 'UNAVAILABLE', { reason: 'remote-verification-unavailable', ...retry() });
+        }
+        throw new CapabilityError(`remote verification failed: expected ${localSha}, received ${remoteSha || 'no ref'}`, 'UNAVAILABLE', {
+            reason: 'remote-verification-stale',
+            ...retry('Re-run the push: an up-to-date ref is a no-op, and the check reads the remote again.')
+        });
+    }
+    const failure = (pushed.stderr || pushed.stdout || 'push RPC timed out').trim();
+    // A rejected update is a verdict, not a blip.
+    const guidance = nonFastForwardGuidance(pushed, Boolean(request.force));
+    if (guidance)
+        throw new Error(`git push rejected: ${guidance}`);
+    if (isTransientGitFailure(pushed)) {
+        throw new CapabilityError(`git push failed: ${failure}`, 'UNAVAILABLE', {
+            reason: 'push-transient',
+            ...retry()
+        });
+    }
+    throw new Error(`git push failed: ${failure}`);
+}
+/**
+ * How a failed push may be retried. An unforced push, or a force whose lease
+ * the caller pinned, is retryable as is: the same request carries the same
+ * guard. A force whose lease this attempt observed is not: the retry must pin
+ * that lease (`--force-with-lease <sha>`), which the details and hint name.
+ */
+export function forcedPushRetry(forced, pinnedLease, observedLease) {
+    return (hint) => {
+        if (!forced) {
+            const result = { retryable: true };
+            if (hint)
+                result.recoveryHint = hint;
+            return result;
+        }
+        if (pinnedLease) {
+            const result = {
+                retryable: true,
+                details: { lease: pinnedLease, leasePinned: true }
+            };
+            if (hint)
+                result.recoveryHint = hint;
+            return result;
+        }
+        return {
+            retryable: false,
+            details: { lease: observedLease || null, leasePinned: false },
+            recoveryHint: observedLease
+                ? `Re-run with --force-with-lease ${observedLease} to keep this attempt's lease; a plain --force reads the remote again and could replace a commit pushed since.`
+                : 'Re-run without --force: the ref did not exist, so a plain push creates it and refuses if someone else created it since.'
+        };
+    };
+}
+export async function withGuaranteedRevocation(action, revoke) {
+    const actionOutcome = await (async () => {
+        try {
+            return { ok: true, value: await action() };
+        }
+        catch (error) {
+            return { ok: false, error };
+        }
+    })();
+    const revokeOutcome = await (async () => {
+        try {
+            await revoke();
+            return { ok: true };
+        }
+        catch (error) {
+            return { ok: false, error };
+        }
+    })();
+    if (!actionOutcome.ok && !revokeOutcome.ok) {
+        const actionMessage = actionOutcome.error instanceof Error ? actionOutcome.error.message : String(actionOutcome.error);
+        const revocationMessage = revokeOutcome.error instanceof Error ? revokeOutcome.error.message : String(revokeOutcome.error);
+        throw new AggregateError([actionOutcome.error, revokeOutcome.error], `Forge operation failed: ${actionMessage}; ephemeral credential revocation also failed: ${revocationMessage}; ` +
+            'the credential may remain active');
+    }
+    if (!actionOutcome.ok) {
+        throw actionOutcome.error;
+    }
+    if (!revokeOutcome.ok) {
+        throw revokeOutcome.error;
+    }
+    return actionOutcome.value;
+}
+function isString(value) {
+    return typeof value === 'string';
+}
+export async function execute(args, opts, context) {
+    const { runtime } = context;
+    const ui = commandUI(context);
+    const repoRef = isString(args.repo) ? args.repo.trim() : '';
+    const refspec = isString(args.refspec) && args.refspec.trim()
+        ? args.refspec.trim()
+        : 'HEAD:refs/heads/main';
+    if (!repoRef) {
+        failWith(ui, 'Usage: vibes forge push <repo> [refspec]', opts);
+        return;
+    }
+    const interrupt = new AbortController();
+    const lifetime = await createCLIActionLifetime(runtime, (reason) => {
+        if (!interrupt.signal.aborted) {
+            interrupt.abort(new Error(`Forge push interrupted by ${reason}`));
+        }
+    });
+    lifetime.bindProcessSignals();
+    const outcome = await (async () => {
+        try {
+            const expectedRemoteSha = isString(opts.forceWithLease) ? opts.forceWithLease.trim() : '';
+            if (expectedRemoteSha && !/^[0-9a-f]{7,64}$/i.test(expectedRemoteSha)) {
+                return {
+                    ok: false,
+                    validationError: `--force-with-lease expects a commit SHA, received: ${expectedRemoteSha}`
+                };
+            }
+            const result = await securePush({
+                cwd: requireRuntimeCwd(runtime),
+                runtime,
+                repo: repoRef,
+                refspec,
+                // A lease value implies the force; demanding both flags would be a
+                // papercut with no safety benefit.
+                force: Boolean(opts.force) || expectedRemoteSha.length > 0,
+                expectedRemoteSha: expectedRemoteSha || undefined,
+                signal: interrupt.signal,
+                onProgress: wantsJson(opts) ? undefined : (message) => printInfo(ui, `[forge push] ${message}`)
+            });
+            return { ok: true, result };
+        }
+        catch (error) {
+            return { ok: false, error };
+        }
+    })();
+    try {
+        if (!outcome.ok) {
+            if ('validationError' in outcome && isString(outcome.validationError)) {
+                failWith(ui, outcome.validationError, opts);
+                return;
+            }
+            failWith(ui, outcome.error instanceof Error ? outcome.error.message : String(outcome.error), opts);
+            return;
+        }
+        const { result } = outcome;
+        if (wantsJson(opts)) {
+            printJson(ui, result);
+        }
+        else if (result.forcedFrom) {
+            printSuccess(ui, `Force-pushed and verified ${repoRef} ${result.ref} at ${result.sha.slice(0, 12)} (replaced ${result.forcedFrom.slice(0, 12)})`);
+        }
+        else {
+            printSuccess(ui, `Pushed and verified ${repoRef} ${result.ref} at ${result.sha.slice(0, 12)}`);
+        }
+    }
+    finally {
+        await lifetime.request('action-complete');
+        await lifetime.wait();
+    }
+}
+export default { execute };
+//# sourceMappingURL=forge.push.command.impl.js.map

package/dist/cli/commands/forge.push.command.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forge.push.command.impl.js","sourceRoot":"","sources":["../../../src/cli/commands/forge.push.command.impl.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAErE,kFAAkF;AAClF,OAAO,EACN,eAAe,EACf,eAAe,EACf,iBAAiB,EAGjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAEtE,OAAO,EAAE,gBAAgB,EAA6C,MAAM,qBAAqB,CAAC;AAClG,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EACN,SAAS,EACT,QAAQ,EACR,SAAS,EACT,SAAS,EACT,YAAY,EACZ,SAAS,EACT,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,oBAAoB,EAAE,6BAA6B,EAAE,MAAM,mCAAmC,CAAC;AAExG,0EAA0E;AAC1E,uDAAuD;AACvD,MAAM,mBAAmB,GAAG,EAAE,GAAG,MAAM,CAAC;AAsBxC,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC9C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,IACC,GAAG,CAAC,QAAQ,KAAK,MAAM;QACvB,GAAG,CAAC,QAAQ,KAAK,KAAK;QACtB,GAAG,CAAC,QAAQ;QACZ,GAAG,CAAC,QAAQ,KAAK,eAAe;QAChC,GAAG,CAAC,IAAI;QACR,GAAG,CAAC,MAAM;QACV,GAAG,CAAC,IAAI,EACP,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ;SAC3B,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;SAClB,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;SACrB,KAAK,CAAC,GAAG,CAAC,CAAC;IACb,IACC,QAAQ,CAAC,MAAM,KAAK,CAAC;QACrB,CAAC,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,CAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAC3C,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACvB,CAAC;AAOD,SAAS,sBAAsB,CAAC,KAAa;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACvG,OAAO,IAAI,CAAC;QACb,CAAC;IACF,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAa;IACzC,4EAA4E;IAC5E,yEAAyE;IACzE,4EAA4E;IAC5E,qEAAqE;IACrE,0DAA0D;IAC1D,IAAI,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACd,wBAAwB,KAAK,yEAAyE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAC/H,CAAC;IACH,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,sBAAsB,CAAC,KAAK,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,CAAC,MAAM,EAAE,WAAW,GAAG,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,EAAE,CAAC,CAAC;IAClD,IAAI,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,UAAU,GAAG,WAAW,CAAC,UAAU,CAAC,aAAa,CAAC;QACvD,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,cAAc,WAAW,EAAE,CAAC;IAC/B,IACC,CAAC,iCAAiC,CAAC,IAAI,CAAC,UAAU,CAAC;QACnD,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;QACzB,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EACvB,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;AAC5C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAwB;IAC3D,OAAO,eAAe,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,kBAAkB,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,EAAE,CAAC,CAAC;AAC/F,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC9B,SAA4C,EAC5C,GAA2B;IAE3B,OAAO,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,GAAG,EAAE,EAAE,OAAO,GAAG,EAAE,EAAE,EAAE;QACrD,MAAM,cAAc,GAAmB;YACtC,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;YAC1B,GAAG;YACH,OAAO,EAAE,SAAS;YAClB,QAAQ,EAAE,IAAI;SACd,CAAC;QACF,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,GAAG,CAAC;YAAE,cAAc,CAAC,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC;QAC3F,IAAI,OAAO,CAAC,MAAM;YAAE,cAAc,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC3D,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACvD,OAAO;YACN,IAAI,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC;YAC1B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;SACzB,CAAC;IACH,CAAC,CAAC;AACH,CAAC;AAQD,kEAAkE;AAClE,KAAK,UAAU,gBAAgB,CAAC,OAA0B;IACzD,qGAAqG;IACrG,MAAM,SAAS,GAAG,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,CAEnE,CAAC;IACb,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,MAAM,IAAI,eAAe,CAAC,sDAAsD,EAAE,aAAa,EAAE;YAChG,MAAM,EAAE,uBAAuB;YAC/B,SAAS,EAAE,KAAK;SAChB,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAa,EAAE,KAAa;IACpD,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;IAChC,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAChF,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC;AAC/F,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAoB;IAClD,IAAI,MAAM,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC;IAChE,OAAO,+JAA+J,CAAC,IAAI,CAC1K,IAAI,CACJ,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,sBAAsB,CAAC,MAAoB,EAAE,MAAe;IAC3E,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;IAClD,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,OAAO,CACN,oFAAoF;YACpF,yGAAyG;YACzG,6CAA6C,CAC7C,CAAC;IACH,CAAC;IACD,IAAI,yDAAyD,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1E,OAAO,MAAM;YACZ,CAAC,CAAC,8GAA8G;YAChH,CAAC,CAAC,oFAAoF;gBACrF,4HAA4H,CAAC;IAChI,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AA8DD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC7C,YAAoB,EACpB,IAAc;IAEd,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAmB;QAC7C,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,qBAAqB,kBAAkB,CAAC,YAAY,CAAC,YAAY;QACvE,KAAK,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE;KAC7B,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,6BAA6B,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,oBAAoB,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAClE,OAAO,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,SAAiB,EAAE,QAAgB;IAC3E,MAAM,SAAS,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACjE,OAAO,SAAS,CAAC,SAAS,CAAC,KAAK,SAAS,CAAC,QAAQ,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,yBAAyB,CACxC,QAAgB,EAChB,UAAoB,EACpB,kBAAkD;IAElD,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,SAAS,IAAI,wBAAwB,CAAC,SAAS,EAAE,QAAQ,CAAC;YAAE,OAAO,GAAG,CAAC;IAC5E,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,gBAAgB,CAC9B,gBAA2B,EAC3B,GAAW,EACX,QAAgB,EAChB,GAAW,EACX,OAAsB;IAEtB,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACpC,GAAG,EACH,CAAC,IAAI,EAAE,oBAAoB,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,EAC9D,EAAE,EACF,OAAO,CACP,CAAC;IACF,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACd,iDAAiD,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAC1F,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACnD,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAoB;IAC/C,IAAI,CAAC,MAAM,EAAE,OAAO;QAAE,OAAO;IAC7B,MAAM,MAAM,CAAC,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;AAC5F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC/B,OAA0B,EAC1B,YAAqC,EAAE;IAEvC,MAAM,IAAI,GACT,SAAS,CAAC,IAAI;QACd,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,cAAc,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACpG,MAAM,WAAW,GAChB,SAAS,CAAC,WAAW;QACrB,CAAC,CAAC,IAAI,EAAE,EAAE,CACT,mBAAmB,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE;YAChE,cAAc,EAAE,OAAO,CAAC,MAAM;SAC9B,CAAC,CAAC,CAAC;IACN,4EAA4E;IAC5E,MAAM,OAAO,GACZ,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,gBAAgB;QAC/C,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,eAAe,CACf,MAAM,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,EACvC,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,CACpC,CAAC;IACL,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,IAAI,OAAQ,CAAC;IAChD,MAAM,gBAAgB,GAAG,SAAS,CAAC,gBAAgB,IAAI,OAAQ,CAAC;IAChE,MAAM,sBAAsB,GAC3B,SAAS,CAAC,sBAAsB;QAChC,CAAC,KAAK,EAAE,aAAqB,EAAE,EAAE;YAChC,MAAM,EAAE,2BAA2B,EAAE,GAAG,MAAM,MAAM,CACnD,mDAAmD,CACnD,CAAC;YACF,OAAO,2BAA2B,CAAC,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;IACJ,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACzD,MAAM,aAAa,GAAG,SAAS,CAAC,aAAa,IAAI,mBAAmB,CAAC;IAErE,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACnC,QAAQ,CAAC,iDAAiD,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,YAAY,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IACpE,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACtB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAC/E,MAAM,YAAY,GAAG,SAAS,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,IAAI,YAAY,IAAI,CAAC,wBAAwB,CAAC,YAAY,EAAE,QAAQ,CAAC,EAAE,CAAC;QACvE,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAS,wBAAwB,CAAC,CAAC;QACtF,IAAI,OAAO,GAAkB,IAAI,CAAC;QAClC,KAAK,MAAM,SAAS,IAAI,MAAM,sBAAsB,CAAC,aAAa,CAAC,EAAE,CAAC;YACrE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC;YAClF,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,wBAAwB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACnF,OAAO,GAAG,SAAS,CAAC;gBACpB,MAAM;YACP,CAAC;QACF,CAAC;QACD,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CACd,kBAAkB,GAAG,qBAAqB,YAAY,SAAS,QAAQ,mCAAmC,CAC1G,CAAC;QACH,CAAC;QACD,GAAG,GAAG,OAAO,CAAC;IACf,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1E,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACvF,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACrC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,CAAC,MAAM,kCAAkC,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,sEAAsE;IACtE,IAAI,SAAS,GAAa,EAAE,CAAC;IAC7B,MAAM,WAAW,GAAG,OAAO,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC5D,IAAI,aAAa,GAAG,EAAE,CAAC;IACvB,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,QAAQ,GACb,WAAW;YACX,CAAC,MAAM,gBAAgB,CAAC,gBAAgB,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,WAAW,EAAE;gBAC1E,SAAS,EAAE,aAAa;gBACxB,MAAM,EAAE,OAAO,CAAC,MAAM;aACtB,CAAC,CAAC,CAAC;QACL,aAAa,GAAG,QAAQ,CAAC;QACzB,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,QAAQ,EAAE,CAAC;YACd,8DAA8D;YAC9D,8DAA8D;YAC9D,mEAAmE;YACnE,oEAAoE;YACpE,wCAAwC;YACxC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,YAAY,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC1F,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACzB,WAAW,GAAG,QAAQ,CAAC;gBACvB,SAAS,GAAG,CAAC,qBAAqB,GAAG,IAAI,CAAC,WAAW,GAAG,GAAG,GAAG,QAAQ,CAAC,CAAC;YACzE,CAAC;QACF,CAAC;IACF,CAAC;IACD,uEAAuE;IACvE,yEAAyE;IACzE,wEAAwE;IACxE,oEAAoE;IACpE,0EAA0E;IAC1E,yCAAyC;IACzC,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;IAClF,QAAQ,CACP,SAAS,CAAC,MAAM,GAAG,CAAC;QACnB,CAAC,CAAC,kBAAkB,IAAI,CAAC,WAAW,SAAS,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;QACnG,CAAC,CAAC,aAAa,IAAI,CAAC,MAAM,OAAO,IAAI,CAAC,WAAW,EAAE,CACpD,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACpC,GAAG,EACH,CAAC,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,GAAG,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,EACnF,EAAE,EACF,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CACpD,CAAC;IACF,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAEnC,QAAQ,CAAC,mCAAmC,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACpC,GAAG,EACH,CAAC,IAAI,EAAE,oBAAoB,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,EAC3E,EAAE,EACF,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CACpD,CAAC;IACF,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,qEAAqE;IACrE,iCAAiC;IACjC,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QACjD,MAAM,MAAM,GAAqB;YAChC,YAAY;YACZ,GAAG,EAAE,IAAI,CAAC,WAAW;YACrB,GAAG,EAAE,QAAQ;YACb,QAAQ,EAAE,IAAI;SACd,CAAC;QACF,IAAI,WAAW,IAAI,WAAW,KAAK,QAAQ;YAAE,MAAM,CAAC,UAAU,GAAG,WAAW,CAAC;QAC7E,OAAO,MAAM,CAAC;IACf,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACvB,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,eAAe,CACxB,gCAAgC,QAAQ,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,EAC9E,aAAa,EACb,EAAE,MAAM,EAAE,iCAAiC,EAAE,GAAG,KAAK,EAAE,EAAE,CACzD,CAAC;QACH,CAAC;QACD,MAAM,IAAI,eAAe,CACxB,wCAAwC,QAAQ,cAAc,SAAS,IAAI,QAAQ,EAAE,EACrF,aAAa,EACb;YACC,MAAM,EAAE,2BAA2B;YACnC,GAAG,KAAK,CAAC,sFAAsF,CAAC;SAChG,CACD,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,IAAI,oBAAoB,CAAC,CAAC,IAAI,EAAE,CAAC;IAChF,8CAA8C;IAC9C,MAAM,QAAQ,GAAG,sBAAsB,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACxE,IAAI,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,QAAQ,EAAE,CAAC,CAAC;IAChE,IAAI,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,eAAe,CAAC,oBAAoB,OAAO,EAAE,EAAE,aAAa,EAAE;YACvE,MAAM,EAAE,gBAAgB;YACxB,GAAG,KAAK,EAAE;SACV,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;AAChD,CAAC;AAQD;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC9B,MAAe,EACf,WAAmB,EACnB,aAAqB;IAErB,OAAO,CAAC,IAAI,EAAE,EAAE;QACf,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,MAAM,MAAM,GAA0B,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;YAC1D,IAAI,IAAI;gBAAE,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC;YACrC,OAAO,MAAM,CAAC;QACf,CAAC;QACD,IAAI,WAAW,EAAE,CAAC;YACjB,MAAM,MAAM,GAA0B;gBACrC,SAAS,EAAE,IAAI;gBACf,OAAO,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE;aAClD,CAAC;YACF,IAAI,IAAI;gBAAE,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC;YACrC,OAAO,MAAM,CAAC;QACf,CAAC;QACD,OAAO;YACN,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,EAAE,KAAK,EAAE,aAAa,IAAI,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE;YAC7D,YAAY,EAAE,aAAa;gBAC1B,CAAC,CAAC,kCAAkC,aAAa,gHAAgH;gBACjK,CAAC,CAAC,yHAAyH;SAC5H,CAAC;IACH,CAAC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC7C,MAAwB,EACxB,MAA2B;IAE3B,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE;QACvC,IAAI,CAAC;YACJ,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,KAAK,EAAE,MAAM,MAAM,EAAE,EAAE,CAAC;QACrD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,EAAE,EAAE,EAAE,KAAc,EAAE,KAAK,EAAE,CAAC;QACtC,CAAC;IACF,CAAC,CAAC,EAAE,CAAC;IACL,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE;QACvC,IAAI,CAAC;YACJ,MAAM,MAAM,EAAE,CAAC;YACf,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,EAAE,EAAE,EAAE,KAAc,EAAE,KAAK,EAAE,CAAC;QACtC,CAAC;IACF,CAAC,CAAC,EAAE,CAAC;IAEL,IAAI,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;QAC5C,MAAM,aAAa,GAClB,aAAa,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAClG,MAAM,iBAAiB,GACtB,aAAa,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAClG,MAAM,IAAI,cAAc,CACvB,CAAC,aAAa,CAAC,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,EAC1C,2BAA2B,aAAa,kDAAkD,iBAAiB,IAAI;YAC9G,kCAAkC,CACnC,CAAC;IACH,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;QACvB,MAAM,aAAa,CAAC,KAAK,CAAC;IAC3B,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;QACvB,MAAM,aAAa,CAAC,KAAK,CAAC;IAC3B,CAAC;IACD,OAAO,aAAa,CAAC,KAAK,CAAC;AAC5B,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAC5B,IAAgB,EAChB,IAAgB,EAChB,OAAuB;IAEvB,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAC5B,MAAM,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC9B,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,MAAM,OAAO,GACZ,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;QAC5C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;QACrB,CAAC,CAAC,sBAAsB,CAAC;IAC3B,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,QAAQ,CAAC,EAAE,EAAE,0CAA0C,EAAE,IAAI,CAAC,CAAC;QAC/D,OAAO;IACR,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,eAAe,EAAE,CAAC;IACxC,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE;QAClE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC/B,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,6BAA6B,MAAM,EAAE,CAAC,CAAC,CAAC;QACnE,CAAC;IACF,CAAC,CAAC,CAAC;IACH,QAAQ,CAAC,kBAAkB,EAAE,CAAC;IAE9B,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE;QACjC,IAAI,CAAC;YACJ,MAAM,iBAAiB,GACtB,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,IAAI,iBAAiB,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBACvE,OAAO;oBACN,EAAE,EAAE,KAAc;oBAClB,eAAe,EAAE,sDAAsD,iBAAiB,EAAE;iBAC1F,CAAC;YACH,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC;gBAC/B,GAAG,EAAE,iBAAiB,CAAC,OAAO,CAAC;gBAC/B,OAAO;gBACP,IAAI,EAAE,OAAO;gBACb,OAAO;gBACP,mEAAmE;gBACnE,mCAAmC;gBACnC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC;gBAC1D,iBAAiB,EAAE,iBAAiB,IAAI,SAAS;gBACjD,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,gBAAgB,OAAO,EAAE,CAAC;aAC/F,CAAC,CAAC;YACH,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,MAAM,EAAE,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,EAAE,EAAE,EAAE,KAAc,EAAE,KAAK,EAAE,CAAC;QACtC,CAAC;IACF,CAAC,CAAC,EAAE,CAAC;IAEL,IAAI,CAAC;QACJ,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YACjB,IAAI,iBAAiB,IAAI,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;gBACvE,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;gBAC5C,OAAO;YACR,CAAC;YACD,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;YACnG,OAAO;QACR,CAAC;QAED,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAC3B,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,SAAS,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACvB,CAAC;aAAM,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YAC9B,YAAY,CACX,EAAE,EACF,6BAA6B,OAAO,IAAI,MAAM,CAAC,GAAG,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAC/H,CAAC;QACH,CAAC;aAAM,CAAC;YACP,YAAY,CAAC,EAAE,EAAE,uBAAuB,OAAO,IAAI,MAAM,CAAC,GAAG,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAChG,CAAC;IACF,CAAC;YAAS,CAAC;QACV,MAAM,QAAQ,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC1C,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;AACF,CAAC;AAED,eAAe,EAAE,OAAO,EAAE,CAAC"}

package/dist/cli/commands/forge.push.workspace-checkouts.impl.consumer.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Workspace checkout candidates for forge push — consumer-host module.
+ *
+ * Loaded lazily by forge.push.command.impl.ts so the universal ./cli closure
+ * stays free of direct filesystem imports (FS belongs to the host surface).
+ *
+ * The candidates are the bound workspace itself plus every checkout its
+ * repository-collection manifest declares (the Config owner's
+ * `config/repositories.json` schema and checkout derivation). Nothing globs
+ * `repos/*`: a checkout the manifest does not declare is not a candidate.
+ */
+import { type RuntimeRef } from '@vibesdotdev/kernel';
+export declare function workspaceCheckoutCandidates(workspaceRoot: string, runtime: RuntimeRef): Promise<string[]>;
+//# sourceMappingURL=forge.push.workspace-checkouts.impl.consumer.d.ts.map

package/dist/cli/commands/forge.push.workspace-checkouts.impl.consumer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forge.push.workspace-checkouts.impl.consumer.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/forge.push.workspace-checkouts.impl.consumer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAmB,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AASvE,wBAAsB,2BAA2B,CAChD,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,UAAU,GACjB,OAAO,CAAC,MAAM,EAAE,CAAC,CAiCnB"}

package/dist/cli/commands/forge.push.workspace-checkouts.impl.consumer.js

@@ -0,0 +1,52 @@
+/**
+ * Workspace checkout candidates for forge push — consumer-host module.
+ *
+ * Loaded lazily by forge.push.command.impl.ts so the universal ./cli closure
+ * stays free of direct filesystem imports (FS belongs to the host surface).
+ *
+ * The candidates are the bound workspace itself plus every checkout its
+ * repository-collection manifest declares (the Config owner's
+ * `config/repositories.json` schema and checkout derivation). Nothing globs
+ * `repos/*`: a checkout the manifest does not declare is not a candidate.
+ */
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { resolveFileSystemAdapter, join } from '@vibesdotdev/filesystem';
+import { getRuntimePath } from '@vibesdotdev/paths';
+import { REPOSITORY_COLLECTION_MANIFEST_PATH, RepositoryCollectionManifestSchema, checkoutPathsFromManifest } from '@vibesdotdev/config/repository-collection';
+export async function workspaceCheckoutCandidates(workspaceRoot, runtime) {
+    const fs = await resolveFileSystemAdapter(runtime);
+    const pathOutcome = await (async () => {
+        try {
+            return { ok: true, path: await getRuntimePath(runtime) };
+        }
+        catch (error) {
+            return { ok: false, error };
+        }
+    })();
+    const pathJoin = pathOutcome.ok ? pathOutcome.path.join : join;
+    const manifestPath = pathJoin(workspaceRoot, REPOSITORY_COLLECTION_MANIFEST_PATH);
+    if (!(await fs.exists(manifestPath))) {
+        return [workspaceRoot];
+    }
+    const content = await fs.readFile(manifestPath, 'utf8');
+    const text = content instanceof Uint8Array ? new TextDecoder().decode(content) : content;
+    let parsed;
+    try {
+        parsed = JSON.parse(text);
+    }
+    catch (cause) {
+        throw new CapabilityError(`${manifestPath} is not valid JSON.`, 'INTERNAL', {
+            reason: 'data-corrupt',
+            cause
+        });
+    }
+    const manifest = RepositoryCollectionManifestSchema.safeParse(parsed);
+    if (!manifest.success) {
+        throw new CapabilityError(`${manifestPath} is not a repository-collection manifest.`, 'INVALID_INPUT', {
+            reason: 'manifest-invalid',
+            details: { issues: manifest.error.issues.map((issue) => issue.message) }
+        });
+    }
+    return [workspaceRoot, ...checkoutPathsFromManifest(manifest.data).map((p) => pathJoin(workspaceRoot, p))];
+}
+//# sourceMappingURL=forge.push.workspace-checkouts.impl.consumer.js.map

package/dist/cli/commands/forge.push.workspace-checkouts.impl.consumer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forge.push.workspace-checkouts.impl.consumer.js","sourceRoot":"","sources":["../../../src/cli/commands/forge.push.workspace-checkouts.impl.consumer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,eAAe,EAAmB,MAAM,qBAAqB,CAAC;AACvE,OAAO,EAAE,wBAAwB,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EACN,mCAAmC,EACnC,kCAAkC,EAClC,yBAAyB,EACzB,MAAM,2CAA2C,CAAC;AAEnD,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAChD,aAAqB,EACrB,OAAmB;IAEnB,MAAM,EAAE,GAAG,MAAM,wBAAwB,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE;QACrC,IAAI,CAAC;YACJ,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;QACnE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,EAAE,EAAE,EAAE,KAAc,EAAE,KAAK,EAAE,CAAC;QACtC,CAAC;IACF,CAAC,CAAC,EAAE,CAAC;IACL,MAAM,QAAQ,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/D,MAAM,YAAY,GAAG,QAAQ,CAAC,aAAa,EAAE,mCAAmC,CAAC,CAAC;IAClF,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QACtC,OAAO,CAAC,aAAa,CAAC,CAAC;IACxB,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,OAAO,YAAY,UAAU,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACzF,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,eAAe,CAAC,GAAG,YAAY,qBAAqB,EAAE,UAAU,EAAE;YAC3E,MAAM,EAAE,cAAc;YACtB,KAAK;SACL,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,kCAAkC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACtE,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACvB,MAAM,IAAI,eAAe,CAAC,GAAG,YAAY,2CAA2C,EAAE,eAAe,EAAE;YACtG,MAAM,EAAE,kBAAkB;YAC1B,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE;SACxE,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,aAAa,EAAE,GAAG,yBAAyB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5G,CAAC"}

package/dist/cli/commands/forge.remote.bootstrap.command.descriptor.d.ts

@@ -0,0 +1,34 @@
+export declare const remoteBootstrapCommandDescriptor: {
+    readonly kind: "cli/command";
+    readonly id: "forge.remote.bootstrap";
+    readonly name: "bootstrap";
+    readonly description: "Idempotently configure a local checkout for canonical Forge fetch and scoped push";
+    readonly group: "forge.remote";
+    readonly arguments: [{
+        readonly name: "repo";
+        readonly description: "Repository id, <owner>/<name>, or bare name";
+        readonly required: true;
+    }];
+    readonly options: [{
+        readonly flags: "--cwd <path>";
+        readonly description: "Git work tree to configure (default: current directory)";
+    }, {
+        readonly flags: "--remote <name>";
+        readonly description: "Remote name to create or update (default: forge)";
+    }];
+    readonly surfaces: ["cli"];
+    readonly hardware: readonly ["consumer"];
+    readonly enabled: true;
+    readonly order: 10;
+    readonly examples: [{
+        readonly command: "vibes forge remote bootstrap my-app";
+        readonly description: "Configure the current checkout for secure Forge fetch and push";
+        readonly expectExit: 0;
+    }, {
+        readonly command: "vibes forge remote bootstrap my-app --cwd ./my-app --remote forge";
+        readonly description: "Bootstrap a named remote in a fresh checkout";
+        readonly expectExit: 0;
+    }];
+};
+export default remoteBootstrapCommandDescriptor;
+//# sourceMappingURL=forge.remote.bootstrap.command.descriptor.d.ts.map

package/dist/cli/commands/forge.remote.bootstrap.command.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forge.remote.bootstrap.command.descriptor.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/forge.remote.bootstrap.command.descriptor.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmC3C,CAAC;AAEH,eAAe,gCAAgC,CAAC"}

package/dist/cli/commands/forge.remote.bootstrap.command.descriptor.js

@@ -0,0 +1,39 @@
+import { createRuntimeAsset } from '@vibesdotdev/kernel';
+export const remoteBootstrapCommandDescriptor = createRuntimeAsset({
+    kind: 'cli/command',
+    id: 'forge.remote.bootstrap',
+    name: 'bootstrap',
+    description: 'Idempotently configure a local checkout for canonical Forge fetch and scoped push',
+    group: 'forge.remote',
+    arguments: [
+        { name: 'repo', description: 'Repository id, <owner>/<name>, or bare name', required: true }
+    ],
+    options: [
+        {
+            flags: '--cwd <path>',
+            description: 'Git work tree to configure (default: current directory)'
+        },
+        {
+            flags: '--remote <name>',
+            description: 'Remote name to create or update (default: forge)'
+        }
+    ],
+    surfaces: ['cli'],
+    hardware: ['consumer'],
+    enabled: true,
+    order: 10,
+    examples: [
+        {
+            command: 'vibes forge remote bootstrap my-app',
+            description: 'Configure the current checkout for secure Forge fetch and push',
+            expectExit: 0
+        },
+        {
+            command: 'vibes forge remote bootstrap my-app --cwd ./my-app --remote forge',
+            description: 'Bootstrap a named remote in a fresh checkout',
+            expectExit: 0
+        }
+    ]
+});
+export default remoteBootstrapCommandDescriptor;
+//# sourceMappingURL=forge.remote.bootstrap.command.descriptor.js.map