@viewportai/daemon 0.20.1 → 0.22.0

package/dist/workflows/workflow-authority-contract.js

@@ -0,0 +1,366 @@
+import path from 'node:path';
+export function workflowAuthorityContract(run) {
+    return run.workflowAuthorityContract && typeof run.workflowAuthorityContract === 'object'
+        ? run.workflowAuthorityContract
+        : null;
+}
+export function workflowAuthorityContractDigest(run) {
+    const contract = workflowAuthorityContract(run);
+    return stringValue(contract?.['digest']) ?? stringValue(contract?.['contract_digest']) ?? null;
+}
+export function allowedRepositories(run) {
+    const contract = workflowAuthorityContract(run);
+    return stringArray(readPath(contract, ['repos', 'allowed']))
+        .map(normalizeRepository)
+        .filter(Boolean);
+}
+export function workflowActionAuthorityDenial(run, nodeId, node, actionInput) {
+    const contract = workflowAuthorityContract(run);
+    if (!contract)
+        return null;
+    const sideEffects = allowedSideEffects(contract);
+    if (sideEffects.length > 0) {
+        const provider = normalizeToken(node.adapter);
+        const action = normalizeAction(node.action);
+        const allowed = sideEffects.some((entry) => {
+            if (entry.provider !== provider)
+                return false;
+            return entry.actions.length === 0 || entry.actions.includes(action);
+        });
+        if (!allowed) {
+            return {
+                schema: 'viewport.workflow_authority_denial/v1',
+                reason: 'provider_action_not_allowed',
+                runId: run.id,
+                nodeId,
+                provider: node.adapter,
+                action: node.action,
+                detail: `Workflow authority contract does not allow ${node.adapter}.${node.action}.`,
+                contractDigest: workflowAuthorityContractDigest(run),
+                allowed: sideEffects.flatMap((entry) => entry.actions.length > 0
+                    ? entry.actions.map((actionName) => `${entry.provider}.${actionName}`)
+                    : [entry.provider]),
+            };
+        }
+    }
+    const repository = actionRepository(node, actionInput);
+    const repositories = allowedRepositories(run);
+    if (repository && repositories.length > 0 && !repositories.includes(repository)) {
+        return {
+            schema: 'viewport.workflow_authority_denial/v1',
+            reason: 'repository_not_allowed',
+            runId: run.id,
+            nodeId,
+            provider: node.adapter,
+            action: node.action,
+            repository,
+            detail: `Workflow authority contract does not allow repository ${repository}.`,
+            contractDigest: workflowAuthorityContractDigest(run),
+            allowed: repositories,
+        };
+    }
+    return null;
+}
+export function contextAuthorityDenial(run, nodeId, provider, mode = 'read') {
+    const contract = workflowAuthorityContract(run);
+    if (!contract)
+        return null;
+    const allowed = allowedContextRefs(contract, mode);
+    if (allowed.length === 0)
+        return null;
+    const providerRefs = contextProviderRefs(provider);
+    if (providerRefs.some((ref) => allowed.includes(ref)))
+        return null;
+    return {
+        schema: 'viewport.workflow_authority_denial/v1',
+        reason: 'context_source_not_allowed',
+        runId: run.id,
+        nodeId,
+        contextSource: provider.id,
+        detail: `Workflow authority contract does not allow context source ${provider.id} for ${mode}.`,
+        contractDigest: workflowAuthorityContractDigest(run),
+        allowed,
+    };
+}
+export function shellAuthorityDenial(run, nodeId, renderedCommand, cwd, options = {}) {
+    const contract = workflowAuthorityContract(run);
+    if (!contract)
+        return null;
+    const shellPolicy = shellExecutionPolicy(contract);
+    if (shellPolicy !== 'constrained') {
+        const reason = shellPolicy === 'disabled' ? 'shell_disabled_by_policy' : 'shell_policy_required';
+        return {
+            schema: 'viewport.workflow_authority_denial/v1',
+            reason,
+            runId: run.id,
+            nodeId,
+            command: redactedCommand(renderedCommand),
+            detail: reason === 'shell_disabled_by_policy'
+                ? 'Shell execution is disabled by the workflow authority contract.'
+                : 'Shell execution under a workflow authority contract requires an explicit constrained shell policy.',
+            contractDigest: workflowAuthorityContractDigest(run),
+        };
+    }
+    if (options.executorKind === 'shell' && !legacyShellCommandAllowed(contract)) {
+        return {
+            schema: 'viewport.workflow_authority_denial/v1',
+            reason: 'shell_legacy_command_not_allowed',
+            runId: run.id,
+            nodeId,
+            command: redactedCommand(renderedCommand),
+            detail: 'Legacy shell command execution uses sh -lc and must be explicitly allowed by shell.allow_legacy_command. Prefer argv for worker-managed shell/test primitives.',
+            contractDigest: workflowAuthorityContractDigest(run),
+        };
+    }
+    if (!isPathWithin(cwd, run.directoryPath)) {
+        return {
+            schema: 'viewport.workflow_authority_denial/v1',
+            reason: 'shell_cwd_outside_worktree',
+            runId: run.id,
+            nodeId,
+            command: redactedCommand(renderedCommand),
+            detail: 'Shell node cwd is outside the run worktree. Use an in-worktree cwd or an explicit first-class checkout/worktree step.',
+            contractDigest: workflowAuthorityContractDigest(run),
+        };
+    }
+    const sideEffects = allowedSideEffects(contract);
+    const sideEffectPolicyPresent = Array.isArray(readPath(contract, ['side_effects', 'allowed']));
+    const forbiddenSideEffects = shellProviderSideEffects(renderedCommand).filter((effect) => {
+        if (!sideEffectPolicyPresent)
+            return false;
+        return !sideEffects.some((allowed) => {
+            if (allowed.provider !== effect.provider)
+                return false;
+            return allowed.actions.length === 0 || allowed.actions.includes(effect.action);
+        });
+    });
+    const forbidden = forbiddenSideEffects[0];
+    if (forbidden) {
+        return {
+            schema: 'viewport.workflow_authority_denial/v1',
+            reason: 'shell_provider_side_effect_not_allowed',
+            runId: run.id,
+            nodeId,
+            provider: forbidden.provider,
+            action: forbidden.action,
+            command: redactedCommand(renderedCommand),
+            detail: `Shell command attempts ${forbidden.provider}.${forbidden.action}, which is outside workflow side-effect authority.`,
+            contractDigest: workflowAuthorityContractDigest(run),
+            allowed: sideEffects.flatMap((entry) => entry.actions.length > 0
+                ? entry.actions.map((actionName) => `${entry.provider}.${actionName}`)
+                : [entry.provider]),
+        };
+    }
+    const repositories = allowedRepositories(run);
+    if (repositories.length === 0)
+        return null;
+    const requested = shellRepositoryRefs(renderedCommand);
+    const denied = requested.find((repo) => !repositories.includes(repo));
+    if (denied) {
+        return {
+            schema: 'viewport.workflow_authority_denial/v1',
+            reason: 'shell_repository_not_allowed',
+            runId: run.id,
+            nodeId,
+            repository: denied,
+            command: redactedCommand(renderedCommand),
+            detail: `Shell command references repository ${denied}, which is outside workflow repo authority.`,
+            contractDigest: workflowAuthorityContractDigest(run),
+            allowed: repositories,
+        };
+    }
+    return null;
+}
+function shellExecutionPolicy(contract) {
+    const nested = readPath(contract, ['shell', 'policy']);
+    if (typeof nested === 'string' && nested.trim() !== '')
+        return normalizeToken(nested);
+    const flat = readPath(contract, ['shell_policy']);
+    if (typeof flat === 'string' && flat.trim() !== '')
+        return normalizeToken(flat);
+    return null;
+}
+function legacyShellCommandAllowed(contract) {
+    const nested = readPath(contract, ['shell', 'allow_legacy_command']);
+    if (typeof nested === 'boolean')
+        return nested;
+    const flat = readPath(contract, ['shell_allow_legacy_command']);
+    if (typeof flat === 'boolean')
+        return flat;
+    return false;
+}
+function allowedSideEffects(contract) {
+    const entries = arrayValue(readPath(contract, ['side_effects', 'allowed']));
+    return entries
+        .map((entry) => {
+        if (typeof entry === 'string') {
+            const [provider, action] = entry.split('.', 2);
+            return provider
+                ? { provider: normalizeToken(provider), actions: action ? [normalizeAction(action)] : [] }
+                : null;
+        }
+        if (!entry || typeof entry !== 'object' || Array.isArray(entry))
+            return null;
+        const record = entry;
+        const provider = normalizeToken(stringValue(record['provider']) ?? stringValue(record['adapter']) ?? '');
+        if (!provider)
+            return null;
+        const action = stringValue(record['action']);
+        const actions = stringArray(record['actions']);
+        return {
+            provider,
+            actions: [...(action ? [action] : []), ...actions].map(normalizeAction).filter(Boolean),
+        };
+    })
+        .filter((entry) => entry !== null);
+}
+function allowedContextRefs(contract, mode) {
+    const candidates = mode === 'read'
+        ? arrayValue(readPath(contract, ['context_sources', 'read']))
+        : arrayValue(readPath(contract, ['context_sources', 'update_targets']));
+    return candidates.flatMap(contextRefCandidates).map(normalizeContextRef).filter(Boolean);
+}
+function contextRefCandidates(value) {
+    if (typeof value === 'string')
+        return [value];
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return [];
+    const record = value;
+    return [
+        record['id'],
+        record['ref'],
+        record['source_ref'],
+        record['sourceRef'],
+        record['external_ref'],
+        record['externalRef'],
+        record['context_source_id'],
+        record['contextSourceId'],
+        record['provider_id'],
+        record['providerId'],
+        record['url'],
+        record['source_url'],
+        record['sourceUrl'],
+    ].flatMap((entry) => (typeof entry === 'string' ? [entry] : []));
+}
+function contextProviderRefs(provider) {
+    return [
+        provider.id,
+        provider.vault,
+        provider.ref,
+        provider.repo,
+        provider.remote,
+        provider.sourceConfigPath,
+        `context://${provider.id}`,
+        provider.vault ? `context://${provider.vault}` : undefined,
+        provider.vault ? `context://vault/${provider.vault}` : undefined,
+        `context_vault:${provider.id}`,
+        provider.vault ? `context_vault:${provider.vault}` : undefined,
+        `provider://${provider.id}`,
+        provider.vault ? `provider://${provider.vault}` : undefined,
+        provider.repo ? `git://${normalizeRepository(provider.repo)}` : undefined,
+    ]
+        .filter((entry) => typeof entry === 'string' && entry.trim() !== '')
+        .flatMap((entry) => [entry, entry.replace(/\.git$/, '')])
+        .map(normalizeContextRef)
+        .filter(Boolean);
+}
+function actionRepository(node, input) {
+    if (node.adapter !== 'github')
+        return null;
+    const repository = stringValue(input['repository']) ??
+        stringValue(input['repo_full_name']) ??
+        stringValue(input['repoFullName']) ??
+        stringValue(input['repo_name']);
+    if (repository)
+        return normalizeRepository(repository);
+    const owner = stringValue(input['owner']);
+    const repo = stringValue(input['repo']);
+    return owner && repo ? normalizeRepository(`${owner}/${repo}`) : null;
+}
+function shellProviderSideEffects(command) {
+    const normalized = command.toLowerCase();
+    const effects = [];
+    if (/\bgh\s+pr\s+create\b/.test(normalized)) {
+        effects.push({ provider: 'github', action: 'create-pr' });
+    }
+    if (/\bgit\s+push\b/.test(normalized)) {
+        effects.push({ provider: 'github', action: 'push-branch' });
+    }
+    if (/\bcurl\b/.test(normalized) && /api\.github\.com\/repos\//.test(normalized)) {
+        effects.push({ provider: 'github', action: 'api-request' });
+    }
+    if (/\bcurl\b/.test(normalized) && /slack\.com\/api\/chat\.postmessage/.test(normalized)) {
+        effects.push({ provider: 'slack', action: 'post-message' });
+    }
+    return effects;
+}
+function shellRepositoryRefs(command) {
+    const repos = new Set();
+    const patterns = [
+        /git@github\.com:([A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+)(?:\.git)?/gi,
+        /https:\/\/github\.com\/([A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+)(?:\.git)?/gi,
+        /api\.github\.com\/repos\/([A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+)/gi,
+        /(?:--repo|-R)\s+([A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+)/gi,
+        /\bgh\s+repo\s+clone\s+([A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+)/gi,
+    ];
+    for (const pattern of patterns) {
+        for (const match of command.matchAll(pattern)) {
+            const repo = normalizeRepository(match[1]);
+            if (repo)
+                repos.add(repo);
+        }
+    }
+    return [...repos];
+}
+function isPathWithin(candidate, root) {
+    const relative = path.relative(path.resolve(root), path.resolve(candidate));
+    return relative === '' || (!relative.startsWith('..') && !path.isAbsolute(relative));
+}
+function redactedCommand(command) {
+    return command
+        .replace(/(gh[ps]_[A-Za-z0-9_]+)/g, '[redacted-token]')
+        .replace(/(xox[baprs]-[A-Za-z0-9-]+)/g, '[redacted-token]')
+        .slice(0, 500);
+}
+function normalizeRepository(value) {
+    if (!value)
+        return '';
+    return value
+        .trim()
+        .replace(/^https:\/\/github\.com\//i, '')
+        .replace(/^git@github\.com:/i, '')
+        .replace(/^github\.com\//i, '')
+        .replace(/\.git$/i, '')
+        .toLowerCase();
+}
+function normalizeContextRef(value) {
+    return value
+        .trim()
+        .replace(/\.git$/i, '')
+        .toLowerCase();
+}
+function normalizeToken(value) {
+    return value.trim().toLowerCase().replace(/_/g, '-');
+}
+function normalizeAction(value) {
+    return normalizeToken(value).replace(/^chat\./, 'chat-');
+}
+function readPath(value, path) {
+    let current = value;
+    for (const segment of path) {
+        if (!current || typeof current !== 'object' || Array.isArray(current))
+            return undefined;
+        current = current[segment];
+    }
+    return current;
+}
+function stringArray(value) {
+    return arrayValue(value).filter((entry) => typeof entry === 'string');
+}
+function arrayValue(value) {
+    return Array.isArray(value) ? value : [];
+}
+function stringValue(value) {
+    return typeof value === 'string' && value.trim() !== '' ? value.trim() : undefined;
+}
+//# sourceMappingURL=workflow-authority-contract.js.map

package/dist/workflows/workflow-authority-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-authority-contract.js","sourceRoot":"","sources":["../../src/workflows/workflow-authority-contract.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAsC7B,MAAM,UAAU,yBAAyB,CAAC,GAAsB;IAC9D,OAAO,GAAG,CAAC,yBAAyB,IAAI,OAAO,GAAG,CAAC,yBAAyB,KAAK,QAAQ;QACvF,CAAC,CAAC,GAAG,CAAC,yBAAyB;QAC/B,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,GAAsB;IACpE,MAAM,QAAQ,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC;IAChD,OAAO,WAAW,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,WAAW,CAAC,QAAQ,EAAE,CAAC,iBAAiB,CAAC,CAAC,IAAI,IAAI,CAAC;AACjG,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAsB;IACxD,MAAM,QAAQ,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC;IAChD,OAAO,WAAW,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;SACzD,GAAG,CAAC,mBAAmB,CAAC;SACxB,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,GAAsB,EACtB,MAAc,EACd,IAAwB,EACxB,WAA+C;IAE/C,MAAM,QAAQ,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE3B,MAAM,WAAW,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACjD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;YACzC,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAC;YAC9C,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,MAAM,EAAE,uCAAuC;gBAC/C,MAAM,EAAE,6BAA6B;gBACrC,KAAK,EAAE,GAAG,CAAC,EAAE;gBACb,MAAM;gBACN,QAAQ,EAAE,IAAI,CAAC,OAAO;gBACtB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,MAAM,EAAE,8CAA8C,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,GAAG;gBACpF,cAAc,EAAE,+BAA+B,CAAC,GAAG,CAAC;gBACpD,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACrC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;oBACtB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,IAAI,UAAU,EAAE,CAAC;oBACtE,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CACrB;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACvD,MAAM,YAAY,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,UAAU,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAChF,OAAO;YACL,MAAM,EAAE,uCAAuC;YAC/C,MAAM,EAAE,wBAAwB;YAChC,KAAK,EAAE,GAAG,CAAC,EAAE;YACb,MAAM;YACN,QAAQ,EAAE,IAAI,CAAC,OAAO;YACtB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,UAAU;YACV,MAAM,EAAE,yDAAyD,UAAU,GAAG;YAC9E,cAAc,EAAE,+BAA+B,CAAC,GAAG,CAAC;YACpD,OAAO,EAAE,YAAY;SACtB,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,GAAsB,EACtB,MAAc,EACd,QAAwC,EACxC,OAAiC,MAAM;IAEvC,MAAM,QAAQ,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE3B,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACnD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtC,MAAM,YAAY,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACnD,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAEnE,OAAO;QACL,MAAM,EAAE,uCAAuC;QAC/C,MAAM,EAAE,4BAA4B;QACpC,KAAK,EAAE,GAAG,CAAC,EAAE;QACb,MAAM;QACN,aAAa,EAAE,QAAQ,CAAC,EAAE;QAC1B,MAAM,EAAE,6DAA6D,QAAQ,CAAC,EAAE,QAAQ,IAAI,GAAG;QAC/F,cAAc,EAAE,+BAA+B,CAAC,GAAG,CAAC;QACpD,OAAO;KACR,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,GAAsB,EACtB,MAAc,EACd,eAAuB,EACvB,GAAW,EACX,UAAqC,EAAE;IAEvC,MAAM,QAAQ,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE3B,MAAM,WAAW,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IACnD,IAAI,WAAW,KAAK,aAAa,EAAE,CAAC;QAClC,MAAM,MAAM,GACV,WAAW,KAAK,UAAU,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,uBAAuB,CAAC;QAEpF,OAAO;YACL,MAAM,EAAE,uCAAuC;YAC/C,MAAM;YACN,KAAK,EAAE,GAAG,CAAC,EAAE;YACb,MAAM;YACN,OAAO,EAAE,eAAe,CAAC,eAAe,CAAC;YACzC,MAAM,EACJ,MAAM,KAAK,0BAA0B;gBACnC,CAAC,CAAC,iEAAiE;gBACnE,CAAC,CAAC,oGAAoG;YAC1G,cAAc,EAAE,+BAA+B,CAAC,GAAG,CAAC;SACrD,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,YAAY,KAAK,OAAO,IAAI,CAAC,yBAAyB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7E,OAAO;YACL,MAAM,EAAE,uCAAuC;YAC/C,MAAM,EAAE,kCAAkC;YAC1C,KAAK,EAAE,GAAG,CAAC,EAAE;YACb,MAAM;YACN,OAAO,EAAE,eAAe,CAAC,eAAe,CAAC;YACzC,MAAM,EACJ,gKAAgK;YAClK,cAAc,EAAE,+BAA+B,CAAC,GAAG,CAAC;SACrD,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;QAC1C,OAAO;YACL,MAAM,EAAE,uCAAuC;YAC/C,MAAM,EAAE,4BAA4B;YACpC,KAAK,EAAE,GAAG,CAAC,EAAE;YACb,MAAM;YACN,OAAO,EAAE,eAAe,CAAC,eAAe,CAAC;YACzC,MAAM,EACJ,uHAAuH;YACzH,cAAc,EAAE,+BAA+B,CAAC,GAAG,CAAC;SACrD,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACjD,MAAM,uBAAuB,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IAC/F,MAAM,oBAAoB,GAAG,wBAAwB,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE;QACvF,IAAI,CAAC,uBAAuB;YAAE,OAAO,KAAK,CAAC;QAC3C,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;YACnC,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;gBAAE,OAAO,KAAK,CAAC;YACvD,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACjF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC;IAC1C,IAAI,SAAS,EAAE,CAAC;QACd,OAAO;YACL,MAAM,EAAE,uCAAuC;YAC/C,MAAM,EAAE,wCAAwC;YAChD,KAAK,EAAE,GAAG,CAAC,EAAE;YACb,MAAM;YACN,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,OAAO,EAAE,eAAe,CAAC,eAAe,CAAC;YACzC,MAAM,EAAE,0BAA0B,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,MAAM,oDAAoD;YAC5H,cAAc,EAAE,+BAA+B,CAAC,GAAG,CAAC;YACpD,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACrC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;gBACtB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,IAAI,UAAU,EAAE,CAAC;gBACtE,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CACrB;SACF,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAE3C,MAAM,SAAS,GAAG,mBAAmB,CAAC,eAAe,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE,IAAI,MAAM,EAAE,CAAC;QACX,OAAO;YACL,MAAM,EAAE,uCAAuC;YAC/C,MAAM,EAAE,8BAA8B;YACtC,KAAK,EAAE,GAAG,CAAC,EAAE;YACb,MAAM;YACN,UAAU,EAAE,MAAM;YAClB,OAAO,EAAE,eAAe,CAAC,eAAe,CAAC;YACzC,MAAM,EAAE,uCAAuC,MAAM,6CAA6C;YAClG,cAAc,EAAE,+BAA+B,CAAC,GAAG,CAAC;YACpD,OAAO,EAAE,YAAY;SACtB,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAiC;IAC7D,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IACvD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC;IAEtF,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;IAClD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC;IAEhF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,yBAAyB,CAAC,QAAiC;IAClE,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC,CAAC;IACrE,IAAI,OAAO,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IAE/C,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,4BAA4B,CAAC,CAAC,CAAC;IAChE,IAAI,OAAO,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAE3C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAiC;IAC3D,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IAC5E,OAAO,OAAO;SACX,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACb,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAC/C,OAAO,QAAQ;gBACb,CAAC,CAAC,EAAE,QAAQ,EAAE,cAAc,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC1F,CAAC,CAAC,IAAI,CAAC;QACX,CAAC;QACD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7E,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,MAAM,QAAQ,GAAG,cAAc,CAC7B,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CACxE,CAAC;QACF,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC3B,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QAC/C,OAAO;YACL,QAAQ;YACR,OAAO,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;SACxF,CAAC;IACJ,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,KAAK,EAA8B,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,kBAAkB,CACzB,QAAiC,EACjC,IAA8B;IAE9B,MAAM,UAAU,GACd,IAAI,KAAK,MAAM;QACb,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC;QAC7D,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAE5E,OAAO,UAAU,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC3F,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC3E,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,OAAO;QACL,MAAM,CAAC,IAAI,CAAC;QACZ,MAAM,CAAC,KAAK,CAAC;QACb,MAAM,CAAC,YAAY,CAAC;QACpB,MAAM,CAAC,WAAW,CAAC;QACnB,MAAM,CAAC,cAAc,CAAC;QACtB,MAAM,CAAC,aAAa,CAAC;QACrB,MAAM,CAAC,mBAAmB,CAAC;QAC3B,MAAM,CAAC,iBAAiB,CAAC;QACzB,MAAM,CAAC,aAAa,CAAC;QACrB,MAAM,CAAC,YAAY,CAAC;QACpB,MAAM,CAAC,KAAK,CAAC;QACb,MAAM,CAAC,YAAY,CAAC;QACpB,MAAM,CAAC,WAAW,CAAC;KACpB,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAwC;IACnE,OAAO;QACL,QAAQ,CAAC,EAAE;QACX,QAAQ,CAAC,KAAK;QACd,QAAQ,CAAC,GAAG;QACZ,QAAQ,CAAC,IAAI;QACb,QAAQ,CAAC,MAAM;QACf,QAAQ,CAAC,gBAAgB;QACzB,aAAa,QAAQ,CAAC,EAAE,EAAE;QAC1B,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS;QAC1D,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,mBAAmB,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS;QAChE,iBAAiB,QAAQ,CAAC,EAAE,EAAE;QAC9B,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,iBAAiB,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS;QAC9D,cAAc,QAAQ,CAAC,EAAE,EAAE;QAC3B,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS;QAC3D,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,mBAAmB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;KAC1E;SACE,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;SACpF,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;SACxD,GAAG,CAAC,mBAAmB,CAAC;SACxB,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,gBAAgB,CACvB,IAAwB,EACxB,KAAyC;IAEzC,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,UAAU,GACd,WAAW,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAChC,WAAW,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACpC,WAAW,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAClC,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;IAClC,IAAI,UAAU;QAAE,OAAO,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAEvD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACxC,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACxE,CAAC;AAED,SAAS,wBAAwB,CAAC,OAAe;IAC/C,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACzC,MAAM,OAAO,GAAgD,EAAE,CAAC;IAChE,IAAI,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5C,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACtC,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,2BAA2B,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAChF,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,oCAAoC,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACzF,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAe;IAC1C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,QAAQ,GAAG;QACf,gEAAgE;QAChE,uEAAuE;QACvE,+DAA+D;QAC/D,sDAAsD;QACtD,4DAA4D;KAC7D,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3C,IAAI,IAAI;gBAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,SAAS,YAAY,CAAC,SAAiB,EAAE,IAAY;IACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5E,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,OAAO,OAAO;SACX,OAAO,CAAC,yBAAyB,EAAE,kBAAkB,CAAC;SACtD,OAAO,CAAC,6BAA6B,EAAE,kBAAkB,CAAC;SAC1D,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACnB,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAyB;IACpD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,OAAO,KAAK;SACT,IAAI,EAAE;SACN,OAAO,CAAC,2BAA2B,EAAE,EAAE,CAAC;SACxC,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC;SACjC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC;SAC9B,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;SACtB,WAAW,EAAE,CAAC;AACnB,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,OAAO,KAAK;SACT,IAAI,EAAE;SACN,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;SACtB,WAAW,EAAE,CAAC;AACnB,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,IAAc;IAC9C,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;QAC3B,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,OAAO,SAAS,CAAC;QACxF,OAAO,GAAI,OAAmC,CAAC,OAAO,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;AACzF,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACrF,CAAC"}

package/dist/workflows/workflow-executor-schema.d.ts

@@ -16,6 +16,7 @@ export declare const ExecutorRequirementSchema: z.ZodObject<{
     }>>;
     capabilities: z.ZodOptional<z.ZodArray<z.ZodEnum<{
         shell: "shell";
+        secrets: "secrets";
         resume: "resume";
         "agent.prompt": "agent.prompt";
         artifacts: "artifacts";
@@ -23,7 +24,6 @@ export declare const ExecutorRequirementSchema: z.ZodObject<{
         "files.read": "files.read";
         "files.write": "files.write";
         "network.egress": "network.egress";
-        secrets: "secrets";
         worktree: "worktree";
     }>>>;
 }, z.core.$strict>;

package/dist/workflows/workflow-production-schema.d.ts

@@ -35,15 +35,10 @@ export declare const WorkflowRunnerRequirementSchema: z.ZodObject<{
         paired_daemon: "paired_daemon";
         self_hosted_runner: "self_hosted_runner";
     }>>;
-    target: z.ZodOptional<z.ZodEnum<{
-        local_private: "local_private";
-        local_sandbox: "local_sandbox";
-        managed: "managed";
-        self_hosted: "self_hosted";
-        ci: "ci";
-    }>>;
+    target: z.ZodOptional<z.ZodString>;
     capabilities: z.ZodOptional<z.ZodArray<z.ZodEnum<{
         shell: "shell";
+        secrets: "secrets";
         resume: "resume";
         "agent.prompt": "agent.prompt";
         artifacts: "artifacts";
@@ -51,7 +46,6 @@ export declare const WorkflowRunnerRequirementSchema: z.ZodObject<{
         "files.read": "files.read";
         "files.write": "files.write";
         "network.egress": "network.egress";
-        secrets: "secrets";
         worktree: "worktree";
     }>>>;
     labels: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -71,21 +65,79 @@ export declare const WorkflowPolicyDefinitionSchema: z.ZodObject<{
         requireApproval: z.ZodOptional<z.ZodBoolean>;
         allowedAdapters: z.ZodOptional<z.ZodArray<z.ZodString>>;
     }, z.core.$strict>>;
+    budget: z.ZodOptional<z.ZodObject<{
+        maxTokens: z.ZodOptional<z.ZodNumber>;
+        tokens: z.ZodOptional<z.ZodNumber>;
+        maxCostUsd: z.ZodOptional<z.ZodNumber>;
+        usd: z.ZodOptional<z.ZodNumber>;
+        approvalThresholds: z.ZodOptional<z.ZodObject<{
+            tokens: z.ZodOptional<z.ZodNumber>;
+            costUsd: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
     maxDurationSeconds: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strict>;
 export declare const WorkflowNotificationDefinitionSchema: z.ZodObject<{
-    inbox: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+    inbox: z.ZodOptional<z.ZodUnion<readonly [z.ZodArray<z.ZodEnum<{
         approval_requested: "approval_requested";
         run_failed: "run_failed";
         runner_offline: "runner_offline";
         action_failed: "action_failed";
-    }>>>;
+    }>>, z.ZodObject<{
+        slack: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodOptional<z.ZodBoolean>;
+            credential_ref: z.ZodOptional<z.ZodString>;
+            credential: z.ZodOptional<z.ZodString>;
+            delivery: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
+                source_thread: "source_thread";
+                dm_assignee: "dm_assignee";
+                dm_requester: "dm_requester";
+                channel: "channel";
+            }>, z.ZodArray<z.ZodEnum<{
+                source_thread: "source_thread";
+                dm_assignee: "dm_assignee";
+                dm_requester: "dm_requester";
+                channel: "channel";
+            }>>]>>;
+            events: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            channel: z.ZodOptional<z.ZodString>;
+            template: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>]>>;
     email: z.ZodOptional<z.ZodArray<z.ZodEnum<{
         approval_requested: "approval_requested";
         run_failed: "run_failed";
         run_completed: "run_completed";
     }>>>;
     webhook: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    sourceAccepted: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        provider: z.ZodOptional<z.ZodString>;
+        credential_ref: z.ZodOptional<z.ZodString>;
+        credential: z.ZodOptional<z.ZodString>;
+        delivery: z.ZodOptional<z.ZodEnum<{
+            source_thread: "source_thread";
+            dm_requester: "dm_requester";
+            channel: "channel";
+        }>>;
+        mode: z.ZodOptional<z.ZodEnum<{
+            source_thread: "source_thread";
+            dm_requester: "dm_requester";
+            channel: "channel";
+        }>>;
+        channel: z.ZodOptional<z.ZodString>;
+        thread_ts: z.ZodOptional<z.ZodString>;
+        user_id: z.ZodOptional<z.ZodString>;
+        template: z.ZodOptional<z.ZodString>;
+        onFailure: z.ZodOptional<z.ZodEnum<{
+            continue: "continue";
+            fail_run: "fail_run";
+        }>>;
+        failurePolicy: z.ZodOptional<z.ZodEnum<{
+            continue: "continue";
+            fail_run: "fail_run";
+        }>>;
+    }, z.core.$strict>]>>;
 }, z.core.$strict>;
 export declare const WorkflowDataCaptureDefinitionSchema: z.ZodObject<{
     logs: z.ZodOptional<z.ZodEnum<{

package/dist/workflows/workflow-production-schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workflow-production-schema.d.ts","sourceRoot":"","sources":["../../src/workflows/workflow-production-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4BAqC1C,CAAC;AAEH,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAwBjC,CAAC;AAEZ,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;kBAyBhC,CAAC;AAEZ,eAAO,MAAM,oCAAoC;;;;;;;;;;;;;kBAQtC,CAAC;AAEZ,eAAO,MAAM,mCAAmC;;;;;;;;;kBAOrC,CAAC"}
+{"version":3,"file":"workflow-production-schema.d.ts","sourceRoot":"","sources":["../../src/workflows/workflow-production-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4BAqC1C,CAAC;AAEH,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;kBAwBjC,CAAC;AAEZ,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;kBAyChC,CAAC;AAoDZ,eAAO,MAAM,oCAAoC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAOtC,CAAC;AAEZ,eAAO,MAAM,mCAAmC;;;;;;;;;kBAOrC,CAAC"}

package/dist/workflows/workflow-production-schema.js

@@ -41,7 +41,7 @@ export const WorkflowTriggerDefinitionSchema = z.discriminatedUnion('type', [
 export const WorkflowRunnerRequirementSchema = z
     .object({
     kind: z.enum(['paired_daemon', 'self_hosted_runner']).optional(),
-    target: z.enum(['local_private', 'local_sandbox', 'managed', 'self_hosted', 'ci']).optional(),
+    target: identifierSchema.optional(),
     capabilities: z
         .array(z.enum([
         'agent.prompt',
@@ -84,16 +84,75 @@ export const WorkflowPolicyDefinitionSchema = z
     })
         .strict()
         .optional(),
+    budget: z
+        .object({
+        maxTokens: z.number().int().positive().optional(),
+        tokens: z.number().int().positive().optional(),
+        maxCostUsd: z.number().positive().optional(),
+        usd: z.number().positive().optional(),
+        approvalThresholds: z
+            .object({
+            tokens: z.number().int().positive().optional(),
+            costUsd: z.number().positive().optional(),
+        })
+            .strict()
+            .optional(),
+    })
+        .strict()
+        .optional(),
     maxDurationSeconds: z.number().int().positive().max(604_800).optional(),
 })
     .strict();
-export const WorkflowNotificationDefinitionSchema = z
+const LegacyInboxNotificationSchema = z.array(z.enum(['approval_requested', 'run_failed', 'runner_offline', 'action_failed']));
+const SlackInboxNotificationSchema = z
     .object({
-    inbox: z
-        .array(z.enum(['approval_requested', 'run_failed', 'runner_offline', 'action_failed']))
+    enabled: z.boolean().optional(),
+    credential_ref: z.string().trim().min(1).optional(),
+    credential: z.string().trim().min(1).optional(),
+    delivery: z
+        .union([
+        z.enum(['source_thread', 'dm_assignee', 'dm_requester', 'channel']),
+        z.array(z.enum(['source_thread', 'dm_assignee', 'dm_requester', 'channel'])),
+    ])
         .optional(),
+    events: z.array(z.string().trim().min(1)).optional(),
+    channel: z.string().trim().min(1).optional(),
+    template: z.string().trim().min(1).optional(),
+})
+    .strict();
+const InboxNotificationSchema = z.union([
+    LegacyInboxNotificationSchema,
+    z
+        .object({
+        slack: SlackInboxNotificationSchema.optional(),
+    })
+        .strict(),
+]);
+const SourceAcceptedNotificationSchema = z.union([
+    z.boolean(),
+    z
+        .object({
+        enabled: z.boolean().optional(),
+        provider: z.string().trim().min(1).optional(),
+        credential_ref: z.string().trim().min(1).optional(),
+        credential: z.string().trim().min(1).optional(),
+        delivery: z.enum(['source_thread', 'channel', 'dm_requester']).optional(),
+        mode: z.enum(['source_thread', 'channel', 'dm_requester']).optional(),
+        channel: z.string().trim().min(1).optional(),
+        thread_ts: z.string().trim().min(1).optional(),
+        user_id: z.string().trim().min(1).optional(),
+        template: z.string().trim().min(1).optional(),
+        onFailure: z.enum(['continue', 'fail_run']).optional(),
+        failurePolicy: z.enum(['continue', 'fail_run']).optional(),
+    })
+        .strict(),
+]);
+export const WorkflowNotificationDefinitionSchema = z
+    .object({
+    inbox: InboxNotificationSchema.optional(),
     email: z.array(z.enum(['approval_requested', 'run_failed', 'run_completed'])).optional(),
     webhook: z.array(z.string().trim().min(1)).optional(),
+    sourceAccepted: SourceAcceptedNotificationSchema.optional(),
 })
     .strict();
 export const WorkflowDataCaptureDefinitionSchema = z

package/dist/workflows/workflow-production-schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"workflow-production-schema.js","sourceRoot":"","sources":["../../src/workflows/workflow-production-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAEjF,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC1E,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC1C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAClC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,QAAQ,EAAE;KAC1D,CAAC;SACD,MAAM,EAAE;IACX,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;QAC1B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC1C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC7C,KAAK,EAAE,gBAAgB,CAAC,QAAQ,EAAE;QAClC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QACxD,SAAS,EAAE,CAAC;aACT,MAAM,CAAC;YACN,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC;YAClC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAChC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;YACpD,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;SACrE,CAAC;aACD,MAAM,EAAE;aACR,QAAQ,EAAE;QACb,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KACrE,CAAC;SACD,MAAM,EAAE;IACX,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC1C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC7C,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAC,CAAC,QAAQ,EAAE;KAC1E,CAAC;SACD,MAAM,EAAE;CACZ,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC;KAC7C,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,oBAAoB,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,eAAe,EAAE,SAAS,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC7F,YAAY,EAAE,CAAC;SACZ,KAAK,CACJ,CAAC,CAAC,IAAI,CAAC;QACL,cAAc;QACd,WAAW;QACX,QAAQ;QACR,YAAY;QACZ,aAAa;QACb,gBAAgB;QAChB,QAAQ;QACR,SAAS;QACT,OAAO;QACP,UAAU;KACX,CAAC,CACH;SACA,QAAQ,EAAE;IACb,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE;IAC5C,OAAO,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACpC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;CACjE,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC;KAC5C,MAAM,CAAC;IACN,GAAG,EAAE,CAAC;SACH,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QACrD,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KAC5C,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb,OAAO,EAAE,CAAC;SACP,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QACrD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;KACzD,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb,WAAW,EAAE,CAAC;SACX,MAAM,CAAC;QACN,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QACvC,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE;KACtD,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE;CACxE,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC;KAClD,MAAM,CAAC;IACN,KAAK,EAAE,CAAC;SACL,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,oBAAoB,EAAE,YAAY,EAAE,gBAAgB,EAAE,eAAe,CAAC,CAAC,CAAC;SACtF,QAAQ,EAAE;IACb,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,oBAAoB,EAAE,YAAY,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxF,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACtD,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC;KACjD,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnD,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjC,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACvC,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACxC,CAAC;KACD,MAAM,EAAE,CAAC"}
+{"version":3,"file":"workflow-production-schema.js","sourceRoot":"","sources":["../../src/workflows/workflow-production-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAEjF,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC1E,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC1C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAClC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,QAAQ,EAAE;KAC1D,CAAC;SACD,MAAM,EAAE;IACX,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;QAC1B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC1C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC7C,KAAK,EAAE,gBAAgB,CAAC,QAAQ,EAAE;QAClC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QACxD,SAAS,EAAE,CAAC;aACT,MAAM,CAAC;YACN,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC;YAClC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAChC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;YACpD,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;SACrE,CAAC;aACD,MAAM,EAAE;aACR,QAAQ,EAAE;QACb,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KACrE,CAAC;SACD,MAAM,EAAE;IACX,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC1C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC7C,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAC,CAAC,QAAQ,EAAE;KAC1E,CAAC;SACD,MAAM,EAAE;CACZ,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC;KAC7C,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,oBAAoB,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChE,MAAM,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACnC,YAAY,EAAE,CAAC;SACZ,KAAK,CACJ,CAAC,CAAC,IAAI,CAAC;QACL,cAAc;QACd,WAAW;QACX,QAAQ;QACR,YAAY;QACZ,aAAa;QACb,gBAAgB;QAChB,QAAQ;QACR,SAAS;QACT,OAAO;QACP,UAAU;KACX,CAAC,CACH;SACA,QAAQ,EAAE;IACb,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE;IAC5C,OAAO,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACpC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;CACjE,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC;KAC5C,MAAM,CAAC;IACN,GAAG,EAAE,CAAC;SACH,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QACrD,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KAC5C,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb,OAAO,EAAE,CAAC;SACP,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QACrD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;KACzD,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb,WAAW,EAAE,CAAC;SACX,MAAM,CAAC;QACN,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QACvC,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE;KACtD,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb,MAAM,EAAE,CAAC;SACN,MAAM,CAAC;QACN,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QACjD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QAC9C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QAC5C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QACrC,kBAAkB,EAAE,CAAC;aAClB,MAAM,CAAC;YACN,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;YAC9C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;SAC1C,CAAC;aACD,MAAM,EAAE;aACR,QAAQ,EAAE;KACd,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE;CACxE,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAC3C,CAAC,CAAC,IAAI,CAAC,CAAC,oBAAoB,EAAE,YAAY,EAAE,gBAAgB,EAAE,eAAe,CAAC,CAAC,CAChF,CAAC;AAEF,MAAM,4BAA4B,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/C,QAAQ,EAAE,CAAC;SACR,KAAK,CAAC;QACL,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,aAAa,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;QACnE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,aAAa,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC;KAC7E,CAAC;SACD,QAAQ,EAAE;IACb,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC5C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC9C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC;IACtC,6BAA6B;IAC7B,CAAC;SACE,MAAM,CAAC;QACN,KAAK,EAAE,4BAA4B,CAAC,QAAQ,EAAE;KAC/C,CAAC;SACD,MAAM,EAAE;CACZ,CAAC,CAAC;AAEH,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CAAC;IAC/C,CAAC,CAAC,OAAO,EAAE;IACX,CAAC;SACE,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC7C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QACnD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC/C,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,EAAE;QACzE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,EAAE;QACrE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC5C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC9C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC5C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC7C,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE;QACtD,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE;KAC3D,CAAC;SACD,MAAM,EAAE;CACZ,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC;KAClD,MAAM,CAAC;IACN,KAAK,EAAE,uBAAuB,CAAC,QAAQ,EAAE;IACzC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,oBAAoB,EAAE,YAAY,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxF,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrD,cAAc,EAAE,gCAAgC,CAAC,QAAQ,EAAE;CAC5D,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC;KACjD,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnD,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjC,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACvC,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACxC,CAAC;KACD,MAAM,EAAE,CAAC"}