@zaip-ai/cli 6.3.0 → 7.6.0

package/dist/services/stack-terraform.js

@@ -27,7 +27,7 @@ export async function prepareStackTerraform(root, log, platform = process.platfo
         log(`${message}\n`);
         return { status: "reused", path: system, message };
     }
-    const directory = join(root, ".local/terraform", `v${TERRAFORM_VERSION}-${platform}-${arch}`);
+    const directory = join(root, ".local/cache/terraform", `v${TERRAFORM_VERSION}-${platform}-${arch}`);
     const executableName = platform === "win32" ? "terraform.exe" : "terraform";
     const binary = join(directory, executableName);
     const receipt = join(directory, "verified.json");
@@ -49,7 +49,7 @@ export async function prepareStackTerraform(root, log, platform = process.platfo
         const existing = await verifiedTerraform(binary, checksum);
         if (existing !== null) {
             await exposeTerraform(binary, shim, existing);
-            const message = `Terraform ${TERRAFORM_VERSION} local reutilizado em .local/terraform.`;
+            const message = `Terraform ${TERRAFORM_VERSION} local reutilizado em .local/cache/terraform.`;
             log(`${message}\n`);
             return { status: "reused", path: binary, message };
         }
@@ -84,7 +84,7 @@ export async function prepareStackTerraform(root, log, platform = process.platfo
     finally {
         await rm(installLock, { recursive: true, force: false });
     }
-    const message = `Terraform ${TERRAFORM_VERSION} instalado localmente em .local/terraform.`;
+    const message = `Terraform ${TERRAFORM_VERSION} instalado localmente em .local/cache/terraform.`;
     log(`${message}\n`);
     return { status: "installed", path: binary, message };
 }
@@ -129,7 +129,7 @@ export async function terraformDiagnostic(root) {
             path: system,
             message: `Terraform ${TERRAFORM_VERSION} do sistema está válido.`,
         };
-    const binary = join(root, ".local/terraform", `v${TERRAFORM_VERSION}-${platform}-${arch}`, platform === "win32" ? "terraform.exe" : "terraform");
+    const binary = join(root, ".local/cache/terraform", `v${TERRAFORM_VERSION}-${platform}-${arch}`, platform === "win32" ? "terraform.exe" : "terraform");
     if ((await verifiedTerraform(binary, checksum)) === null)
         return {
             status: "not_applicable",
@@ -139,7 +139,7 @@ export async function terraformDiagnostic(root) {
     return {
         status: "reused",
         path: binary,
-        message: `Terraform ${TERRAFORM_VERSION} válido em .local/terraform.`,
+        message: `Terraform ${TERRAFORM_VERSION} válido em .local/cache/terraform.`,
     };
 }
 async function exposeTerraform(binary, shim, binarySha256) {

package/dist/services/stack-terraform.js.map

@@ -1 +1 @@
-{"version":3,"file":"stack-terraform.js","sourceRoot":"","sources":["../../src/services/stack-terraform.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,KAAK,EACL,QAAQ,EACR,IAAI,EACJ,KAAK,EACL,QAAQ,EACR,MAAM,EACN,EAAE,EACF,IAAI,EACJ,SAAS,GACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAEjE,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AACjC,MAAM,CAAC,MAAM,iBAAiB,GAAG,QAAQ,CAAC;AAC1C,MAAM,gBAAgB,GAA2B;IAC/C,WAAW,EAAE,kEAAkE;IAC/E,aAAa,EAAE,kEAAkE;IACjF,YAAY,EAAE,kEAAkE;IAChF,cAAc,EAAE,kEAAkE;IAClF,WAAW,EAAE,kEAAkE;IAC/E,aAAa,EAAE,kEAAkE;CAClF,CAAC;AAQF,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAY,EACZ,GAA8B,EAC9B,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAC3B,IAAI,GAAG,OAAO,CAAC,IAAI;IAEnB,MAAM,GAAG,GAAG,GAAG,QAAQ,IAAI,IAAI,EAAE,CAAC;IAClC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,QAAQ,KAAK,SAAS;QACxB,MAAM,IAAI,KAAK,CACb,aAAa,iBAAiB,0CAA0C,QAAQ,IAAI,IAAI,GAAG,CAC5F,CAAC;IACJ,MAAM,MAAM,GAAG,MAAM,yBAAyB,EAAE,CAAC;IACjD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,MAAM,OAAO,GAAG,aAAa,iBAAiB,0BAA0B,CAAC;QACzE,GAAG,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;QACpB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IACrD,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,kBAAkB,EAAE,IAAI,iBAAiB,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAC;IAC9F,MAAM,cAAc,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC;IAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,mBAAmB,EAAE,cAAc,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACjD,MAAM,gBAAgB,GAAG,GAAG,OAAO,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACzD,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IACrD,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,qBAAqB,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACzE,qBAAqB,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC1E,qBAAqB,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACvE,qBAAqB,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC5E,qBAAqB,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACnF,qBAAqB,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;KAC/E,CAAC,CAAC;IACH,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,2BAA2B,CAAC,WAAW,CAAC,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC3D,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,MAAM,eAAe,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC9C,MAAM,OAAO,GAAG,aAAa,iBAAiB,yCAAyC,CAAC;YACxF,GAAG,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;YACpB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QACrD,CAAC;QACD,MAAM,8BAA8B,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAC5B,4CAA4C,iBAAiB,cAAc,iBAAiB,IAAI,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,IAAI,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,MAAM,CACxL,CAAC;QACF,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,QAAQ;YAC9B,MAAM,IAAI,KAAK,CACb,+EAA+E,CAChF,CAAC;QACJ,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QAC3D,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,SAAS,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACvD,MAAM,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAChC,IAAI,QAAQ,KAAK,OAAO;gBAAE,MAAM,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACrD,MAAM,QAAQ,GAAG,CACf,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CACjF,CAAC,MAAM,CAAC;YACT,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,iBAAiB,KAAK,iBAAiB;gBAC/D,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;YACrF,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;YACxC,MAAM,SAAS,CACb,gBAAgB,EAChB,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,QAAQ,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,IAAI,EAC5G,EAAE,IAAI,EAAE,IAAI,EAAE,CACf,CAAC;YACF,MAAM,MAAM,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;YACxC,MAAM,eAAe,CAAC,MAAM,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,CAAC,GAAG,CAAC;gBAChB,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;gBAC9B,EAAE,CAAC,gBAAgB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;gBACrC,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;gBAC5B,EAAE,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;aAC5B,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,OAAO,GAAG,aAAa,iBAAiB,4CAA4C,CAAC;IAC3F,GAAG,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;IACpB,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACxD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,IAAY;IAC5D,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,8BAA8B,CAAC,MAAc,EAAE,OAAe;IAC3E,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,oEAAoE,IAAI,EAAE,CAAC,CAAC;QAC9F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,SAAS;YACjE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAY;IACpD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAC;IACzD,IAAI,QAAQ,KAAK,SAAS;QACxB,OAAO;YACL,MAAM,EAAE,gBAAgB;YACxB,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,aAAa,iBAAiB,0CAA0C,QAAQ,IAAI,IAAI,GAAG;SACrG,CAAC;IACJ,MAAM,MAAM,GAAG,MAAM,yBAAyB,EAAE,CAAC;IACjD,IAAI,MAAM,KAAK,IAAI;QACjB,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,aAAa,iBAAiB,0BAA0B;SAClE,CAAC;IACJ,MAAM,MAAM,GAAG,IAAI,CACjB,IAAI,EACJ,kBAAkB,EAClB,IAAI,iBAAiB,IAAI,QAAQ,IAAI,IAAI,EAAE,EAC3C,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW,CACrD,CAAC;IACF,IAAI,CAAC,MAAM,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,KAAK,IAAI;QACtD,OAAO;YACL,MAAM,EAAE,gBAAgB;YACxB,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,aAAa,iBAAiB,uBAAuB;SAC/D,CAAC;IACJ,OAAO;QACL,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,aAAa,iBAAiB,8BAA8B;KACtE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,MAAc,EAAE,IAAY,EAAE,YAAoB;IAC/E,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAA4B,EAAE,EAAE,CAC1E,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;IACF,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,YAAY;YAAE,OAAO;QAC7C,MAAM,IAAI,KAAK,CACb,+EAA+E,CAChF,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO;YAAE,MAAM,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;;YAC/E,MAAM,KAAK,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,MAAc,EAAE,aAAqB;IACpE,IAAI,CAAC;QACH,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACjD,QAAQ,CAAC,MAAM,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC;YACZ,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC;SACzD,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,IACE,CAAC,IAAI,CAAC,MAAM,EAAE;YACd,MAAM,EAAE,OAAO,KAAK,iBAAiB;YACrC,MAAM,EAAE,cAAc,KAAK,aAAa;YACxC,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ;YACxC,MAAM,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC,aAAa;YAExC,OAAO,IAAI,CAAC;QACd,OAAO,MAAM,CAAC,aAAa,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,yBAAyB;IACtC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,CACb,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CACtF,CAAC,MAAM,CAAC;QACT,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,iBAAiB,KAAK,iBAAiB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAW;IACjC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/F,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;QAChC,MAAM,IAAI,KAAK,CAAC,8CAA8C,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACnF,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;QACxC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;QACtB,IAAI,KAAK,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI;YAC3B,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,YAAoB;IAClE,MAAM,IAAI,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;IAChD,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;IACpD,IAAI,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,MAAM,GAAG,WAAW,CAAC;IACxC,IAAI,UAAU,GAAG,OAAO,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAChF,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,MAAM,GAAG,EAAE,GAAG,UAAU,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,UAAU;YACzE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QACjD,MAAM,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QAC/C,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QACrD,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QACtD,MAAM,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QACxD,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,MAAM,GAAG,EAAE,GAAG,UAAU,GAAG,WAAW,GAAG,aAAa,CAAC;QACpE,IAAI,IAAI,GAAG,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACtE,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,EAAE,EAAE,MAAM,GAAG,EAAE,GAAG,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACtF,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;YAC1B,IAAI,WAAW,GAAG,EAAE,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC,KAAK,UAAU;gBACvF,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YACjD,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC;YACzD,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC;YAC1D,MAAM,eAAe,GAAG,OAAO,CAAC,YAAY,CAAC,WAAW,GAAG,EAAE,CAAC,CAAC;YAC/D,MAAM,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC,WAAW,GAAG,EAAE,CAAC,CAAC;YAChE,MAAM,SAAS,GAAG,OAAO;iBACtB,QAAQ,CAAC,WAAW,GAAG,EAAE,EAAE,WAAW,GAAG,EAAE,GAAG,eAAe,CAAC;iBAC9D,QAAQ,CAAC,MAAM,CAAC,CAAC;YACpB,MAAM,KAAK,GAAG,WAAW,GAAG,EAAE,GAAG,eAAe,GAAG,gBAAgB,CAAC;YACpE,MAAM,GAAG,GAAG,KAAK,GAAG,cAAc,CAAC;YACnC,IACE,SAAS,KAAK,YAAY;gBAC1B,UAAU,KAAK,KAAK;gBACpB,WAAW,KAAK,MAAM;gBACtB,GAAG,GAAG,OAAO,CAAC,MAAM;gBACpB,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,CAAC;gBAE9B,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YACjD,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC7C,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;YACpE,IAAI,UAAU,CAAC,MAAM,KAAK,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YAC/E,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,cAAc,YAAY,8BAA8B,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAe;IAC5C,6EAA6E;IAC7E,KACE,IAAI,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,EAAE,EAChC,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,EAC9C,MAAM,IAAI,CAAC,EACX,CAAC;QACD,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,UAAU,EAAE,CAAC;YAChD,MAAM,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;YACxD,IAAI,MAAM,GAAG,EAAE,GAAG,aAAa,KAAK,OAAO,CAAC,MAAM;gBAAE,OAAO,MAAM,CAAC;QACpE,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC"}
+{"version":3,"file":"stack-terraform.js","sourceRoot":"","sources":["../../src/services/stack-terraform.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,KAAK,EACL,QAAQ,EACR,IAAI,EACJ,KAAK,EACL,QAAQ,EACR,MAAM,EACN,EAAE,EACF,IAAI,EACJ,SAAS,GACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAEjE,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AACjC,MAAM,CAAC,MAAM,iBAAiB,GAAG,QAAQ,CAAC;AAC1C,MAAM,gBAAgB,GAA2B;IAC/C,WAAW,EAAE,kEAAkE;IAC/E,aAAa,EAAE,kEAAkE;IACjF,YAAY,EAAE,kEAAkE;IAChF,cAAc,EAAE,kEAAkE;IAClF,WAAW,EAAE,kEAAkE;IAC/E,aAAa,EAAE,kEAAkE;CAClF,CAAC;AAQF,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAY,EACZ,GAA8B,EAC9B,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAC3B,IAAI,GAAG,OAAO,CAAC,IAAI;IAEnB,MAAM,GAAG,GAAG,GAAG,QAAQ,IAAI,IAAI,EAAE,CAAC;IAClC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,QAAQ,KAAK,SAAS;QACxB,MAAM,IAAI,KAAK,CACb,aAAa,iBAAiB,0CAA0C,QAAQ,IAAI,IAAI,GAAG,CAC5F,CAAC;IACJ,MAAM,MAAM,GAAG,MAAM,yBAAyB,EAAE,CAAC;IACjD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,MAAM,OAAO,GAAG,aAAa,iBAAiB,0BAA0B,CAAC;QACzE,GAAG,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;QACpB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IACrD,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CACpB,IAAI,EACJ,wBAAwB,EACxB,IAAI,iBAAiB,IAAI,QAAQ,IAAI,IAAI,EAAE,CAC5C,CAAC;IACF,MAAM,cAAc,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC;IAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,mBAAmB,EAAE,cAAc,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACjD,MAAM,gBAAgB,GAAG,GAAG,OAAO,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACzD,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IACrD,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,qBAAqB,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACzE,qBAAqB,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC1E,qBAAqB,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACvE,qBAAqB,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC5E,qBAAqB,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACnF,qBAAqB,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;KAC/E,CAAC,CAAC;IACH,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,2BAA2B,CAAC,WAAW,CAAC,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC3D,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,MAAM,eAAe,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC9C,MAAM,OAAO,GAAG,aAAa,iBAAiB,+CAA+C,CAAC;YAC9F,GAAG,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;YACpB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QACrD,CAAC;QACD,MAAM,8BAA8B,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAC5B,4CAA4C,iBAAiB,cAAc,iBAAiB,IAAI,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,IAAI,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,MAAM,CACxL,CAAC;QACF,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,QAAQ;YAC9B,MAAM,IAAI,KAAK,CACb,+EAA+E,CAChF,CAAC;QACJ,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QAC3D,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,SAAS,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACvD,MAAM,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAChC,IAAI,QAAQ,KAAK,OAAO;gBAAE,MAAM,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACrD,MAAM,QAAQ,GAAG,CACf,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CACjF,CAAC,MAAM,CAAC;YACT,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,iBAAiB,KAAK,iBAAiB;gBAC/D,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;YACrF,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;YACxC,MAAM,SAAS,CACb,gBAAgB,EAChB,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,QAAQ,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,IAAI,EAC5G,EAAE,IAAI,EAAE,IAAI,EAAE,CACf,CAAC;YACF,MAAM,MAAM,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;YACxC,MAAM,eAAe,CAAC,MAAM,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,CAAC,GAAG,CAAC;gBAChB,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;gBAC9B,EAAE,CAAC,gBAAgB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;gBACrC,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;gBAC5B,EAAE,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;aAC5B,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,OAAO,GAAG,aAAa,iBAAiB,kDAAkD,CAAC;IACjG,GAAG,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;IACpB,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACxD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,IAAY;IAC5D,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,8BAA8B,CAAC,MAAc,EAAE,OAAe;IAC3E,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,oEAAoE,IAAI,EAAE,CAAC,CAAC;QAC9F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,SAAS;YACjE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAY;IACpD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAC;IACzD,IAAI,QAAQ,KAAK,SAAS;QACxB,OAAO;YACL,MAAM,EAAE,gBAAgB;YACxB,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,aAAa,iBAAiB,0CAA0C,QAAQ,IAAI,IAAI,GAAG;SACrG,CAAC;IACJ,MAAM,MAAM,GAAG,MAAM,yBAAyB,EAAE,CAAC;IACjD,IAAI,MAAM,KAAK,IAAI;QACjB,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,aAAa,iBAAiB,0BAA0B;SAClE,CAAC;IACJ,MAAM,MAAM,GAAG,IAAI,CACjB,IAAI,EACJ,wBAAwB,EACxB,IAAI,iBAAiB,IAAI,QAAQ,IAAI,IAAI,EAAE,EAC3C,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW,CACrD,CAAC;IACF,IAAI,CAAC,MAAM,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,KAAK,IAAI;QACtD,OAAO;YACL,MAAM,EAAE,gBAAgB;YACxB,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,aAAa,iBAAiB,uBAAuB;SAC/D,CAAC;IACJ,OAAO;QACL,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,aAAa,iBAAiB,oCAAoC;KAC5E,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,MAAc,EAAE,IAAY,EAAE,YAAoB;IAC/E,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAA4B,EAAE,EAAE,CAC1E,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;IACF,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,YAAY;YAAE,OAAO;QAC7C,MAAM,IAAI,KAAK,CACb,+EAA+E,CAChF,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO;YAAE,MAAM,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;;YAC/E,MAAM,KAAK,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,MAAc,EAAE,aAAqB;IACpE,IAAI,CAAC;QACH,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACjD,QAAQ,CAAC,MAAM,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC;YACZ,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC;SACzD,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,IACE,CAAC,IAAI,CAAC,MAAM,EAAE;YACd,MAAM,EAAE,OAAO,KAAK,iBAAiB;YACrC,MAAM,EAAE,cAAc,KAAK,aAAa;YACxC,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ;YACxC,MAAM,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC,aAAa;YAExC,OAAO,IAAI,CAAC;QACd,OAAO,MAAM,CAAC,aAAa,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,yBAAyB;IACtC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,CACb,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CACtF,CAAC,MAAM,CAAC;QACT,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,iBAAiB,KAAK,iBAAiB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAW;IACjC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/F,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;QAChC,MAAM,IAAI,KAAK,CAAC,8CAA8C,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACnF,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;QACxC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;QACtB,IAAI,KAAK,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI;YAC3B,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,YAAoB;IAClE,MAAM,IAAI,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;IAChD,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;IACpD,IAAI,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,MAAM,GAAG,WAAW,CAAC;IACxC,IAAI,UAAU,GAAG,OAAO,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAChF,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,MAAM,GAAG,EAAE,GAAG,UAAU,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,UAAU;YACzE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QACjD,MAAM,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QAC/C,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QACrD,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QACtD,MAAM,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QACxD,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,MAAM,GAAG,EAAE,GAAG,UAAU,GAAG,WAAW,GAAG,aAAa,CAAC;QACpE,IAAI,IAAI,GAAG,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACtE,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,EAAE,EAAE,MAAM,GAAG,EAAE,GAAG,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACtF,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;YAC1B,IAAI,WAAW,GAAG,EAAE,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC,KAAK,UAAU;gBACvF,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YACjD,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC;YACzD,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC;YAC1D,MAAM,eAAe,GAAG,OAAO,CAAC,YAAY,CAAC,WAAW,GAAG,EAAE,CAAC,CAAC;YAC/D,MAAM,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC,WAAW,GAAG,EAAE,CAAC,CAAC;YAChE,MAAM,SAAS,GAAG,OAAO;iBACtB,QAAQ,CAAC,WAAW,GAAG,EAAE,EAAE,WAAW,GAAG,EAAE,GAAG,eAAe,CAAC;iBAC9D,QAAQ,CAAC,MAAM,CAAC,CAAC;YACpB,MAAM,KAAK,GAAG,WAAW,GAAG,EAAE,GAAG,eAAe,GAAG,gBAAgB,CAAC;YACpE,MAAM,GAAG,GAAG,KAAK,GAAG,cAAc,CAAC;YACnC,IACE,SAAS,KAAK,YAAY;gBAC1B,UAAU,KAAK,KAAK;gBACpB,WAAW,KAAK,MAAM;gBACtB,GAAG,GAAG,OAAO,CAAC,MAAM;gBACpB,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,CAAC;gBAE9B,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YACjD,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC7C,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;YACpE,IAAI,UAAU,CAAC,MAAM,KAAK,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YAC/E,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,cAAc,YAAY,8BAA8B,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAe;IAC5C,6EAA6E;IAC7E,KACE,IAAI,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,EAAE,EAChC,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,EAC9C,MAAM,IAAI,CAAC,EACX,CAAC;QACD,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,UAAU,EAAE,CAAC;YAChD,MAAM,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;YACxD,IAAI,MAAM,GAAG,EAAE,GAAG,aAAa,KAAK,OAAO,CAAC,MAAM;gBAAE,OAAO,MAAM,CAAC;QACpE,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC"}

package/dist/services/template-packed-path.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=template-packed-path.test.d.ts.map

package/dist/services/template-packed-path.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"template-packed-path.test.d.ts","sourceRoot":"","sources":["../../src/services/template-packed-path.test.ts"],"names":[],"mappings":""}

package/dist/services/template-packed-path.test.js

@@ -0,0 +1,30 @@
+import { mkdir, mkdtemp, rm, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { dirname, join, resolve } from "node:path";
+import { expect, it, onTestFinished } from "vitest";
+import { digestRuntimeFiles, loadTemplate, sha256 } from "./template-manifest.js";
+it("loads a packed nested .gitignore from its explicit safe storage path", async () => {
+    const root = await mkdtemp(join(tmpdir(), "zaip-packed-gitignore-"));
+    onTestFinished(() => rm(root, { recursive: true, force: true }));
+    const path = ".agents/dashboard/packages/local-runtime/.gitignore";
+    const sourcePath = ".agents/dashboard/packages/local-runtime/gitignore.template";
+    const packedPath = resolve(root, sourcePath);
+    const expected = "node_modules\n";
+    await mkdir(dirname(packedPath), { recursive: true });
+    await writeFile(packedPath, expected, "utf8");
+    await writeFile(resolve(root, "template-manifest.json"), JSON.stringify({
+        schemaVersion: 1,
+        templateVersion: "1.0.0",
+        minimumCliVersion: "1.0.0",
+        source: "test",
+        sourceFilesSha256: sha256("source"),
+        runtimeFilesSha256: digestRuntimeFiles([]),
+        files: [{ path, sha256: sha256(expected), sourcePath }],
+    }), "utf8");
+    await expect(loadTemplate(root, "6.5.0")).resolves.toMatchObject({
+        files: [expect.objectContaining({ path, content: expected })],
+    });
+    await writeFile(packedPath, "tampered\n", "utf8");
+    await expect(loadTemplate(root, "6.5.0")).rejects.toThrow(`Template integrity check failed for ${path}`);
+});
+//# sourceMappingURL=template-packed-path.test.js.map

package/dist/services/template-packed-path.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"template-packed-path.test.js","sourceRoot":"","sources":["../../src/services/template-packed-path.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,cAAc,EAAE,MAAM,QAAQ,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAElF,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;IACpF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,wBAAwB,CAAC,CAAC,CAAC;IACrE,cAAc,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,qDAAqD,CAAC;IACnE,MAAM,UAAU,GAAG,6DAA6D,CAAC;IACjF,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,gBAAgB,CAAC;IAClC,MAAM,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,SAAS,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9C,MAAM,SAAS,CACb,OAAO,CAAC,IAAI,EAAE,wBAAwB,CAAC,EACvC,IAAI,CAAC,SAAS,CAAC;QACb,aAAa,EAAE,CAAC;QAChB,eAAe,EAAE,OAAO;QACxB,iBAAiB,EAAE,OAAO;QAC1B,MAAM,EAAE,MAAM;QACd,iBAAiB,EAAE,MAAM,CAAC,QAAQ,CAAC;QACnC,kBAAkB,EAAE,kBAAkB,CAAC,EAAE,CAAC;QAC1C,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC;KACxD,CAAC,EACF,MAAM,CACP,CAAC;IAEF,MAAM,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC;QAC/D,KAAK,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;KAC9D,CAAC,CAAC;IAEH,MAAM,SAAS,CAAC,UAAU,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;IAClD,MAAM,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACvD,uCAAuC,IAAI,EAAE,CAC9C,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/types.d.ts

@@ -1,4 +1,5 @@
 import type { Readable, Writable } from "node:stream";
+import type { CodexHostDiagnostic } from "./services/codex-host-diagnostic.js";
 import type { GitRunner } from "./services/github-setup-status.js";
 import type { PackageRunner } from "./services/stack-package-manager.js";
 export interface InitOptions {
@@ -9,6 +10,8 @@ export interface InitOptions {
     dryRun?: boolean;
     verbose?: boolean;
     profile?: "full" | "dev-lite" | "lite";
+    /** Explicitly enables Claude adapters in addition to the existing client selection. */
+    claude?: boolean;
     templateDirectory?: string;
     now?: Date;
     confirmForce?: (message: string) => Promise<boolean>;
@@ -30,7 +33,10 @@ export interface InitResult {
     backupPath: string | null;
     dryRun: boolean;
     applied: boolean;
+    forceRequested?: boolean;
+    conflictReasons?: Readonly<Record<string, string>>;
     warnings?: readonly string[];
+    codexHost?: CodexHostDiagnostic;
     globalCodexConfig?: {
         path: string;
         sourcePath: string;
@@ -53,5 +59,7 @@ export interface CliRuntime {
     now?: () => Date;
     /** Injectable local Git inspection for deterministic CLI onboarding tests. */
     githubSetupRunner?: GitRunner;
+    /** Isolated user-config directory for tests; never infers hook approval or loaded agents. */
+    codexHome?: string;
 }
 //# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AACnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAEzE,MAAM,WAAW,WAAW;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM,CAAC;IACvC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACrD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qEAAqE;IACrE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4FAA4F;IAC5F,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,0EAA0E;IAC1E,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,OAAO,CAAC;IACtB,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,iBAAiB,CAAC,EAAE;QAClB,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,OAAO,CAAC;QACnB,mBAAmB,EAAE,MAAM,CAAC;QAC5B,oBAAoB,EAAE,MAAM,CAAC;QAC7B,iBAAiB,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC;QAChD,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;KACtB,CAAC;CACH;AAED,MAAM,WAAW,UAAU;IACzB,2EAA2E;IAC3E,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,8EAA8E;IAC9E,iBAAiB,CAAC,EAAE,SAAS,CAAC;CAC/B"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC/E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AACnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAEzE,MAAM,WAAW,WAAW;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM,CAAC;IACvC,uFAAuF;IACvF,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACrD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qEAAqE;IACrE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4FAA4F;IAC5F,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,0EAA0E;IAC1E,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,OAAO,CAAC;IACtB,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,eAAe,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,SAAS,CAAC,EAAE,mBAAmB,CAAC;IAChC,iBAAiB,CAAC,EAAE;QAClB,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,OAAO,CAAC;QACnB,mBAAmB,EAAE,MAAM,CAAC;QAC5B,oBAAoB,EAAE,MAAM,CAAC;QAC7B,iBAAiB,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC;QAChD,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;KACtB,CAAC;CACH;AAED,MAAM,WAAW,UAAU;IACzB,2EAA2E;IAC3E,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,8EAA8E;IAC9E,iBAAiB,CAAC,EAAE,SAAS,CAAC;IAC9B,6FAA6F;IAC7F,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zaip-ai/cli",
-  "version": "6.3.0",
+  "version": "7.6.0",
   "description": "CLI oficial para instalar e configurar o ZAIP-AIOS em qualquer repositório",
   "type": "module",
   "license": "SEE LICENSE IN LICENSE",
@@ -40,6 +40,7 @@
   },
   "dependencies": {
     "commander": "14.0.2",
+    "smol-toml": "1.9.0",
     "yaml": "2.9.0"
   }
 }

package/templates/.agents/README-ENG.md

@@ -1,5 +1,7 @@
 # ZAIP-AIOS (6 Squads + 23 Agents)
 
+The default backend credential store is **self-hosted Infisical**. The [skill and guides](skills/zaip-skill-infisical/SKILL.md) cover Docker Compose installation preparation, machine identities, create-only credential creation/import, existing credential use, and backup/restore. The runner delivers values only to the authorized process without returning them to the agent. The free core does not automatically include Enterprise features; infrastructure and backups have separate costs. Initialization configures the default without installing services or accessing secrets.
+
 English | [Português](README.md)
 
 > **Bilingual maintenance / manutenção bilíngue:** `README.md` is the primary Portuguese source; keep this `README-ENG.md` as its corresponding English translation whenever either document is updated.
@@ -210,7 +212,7 @@ The choice is saved in the project and honored by later upgrades. To enable deve
 | SQLite | Local Dashboard database | Built into Node.js; varies by runtime |
 | Terraform CLI | Infrastructure provisioning; only in the `full` profile | 1.16.1 for managed installation |
 
-The command installs the latest public ZAIP-AIOS version, prepares missing dependencies for the selected profile, and preserves existing package versions. Source changes reach `@latest` only after publication to npm. Installation includes the Dashboard, Rules, skills, and Codex/Claude configuration. Run the same command again to update managed files without deleting history.
+The command installs the latest public ZAIP-AIOS version, prepares missing dependencies for the selected profile, and preserves existing package versions. Source changes reach `@latest` only after publication to npm. Installation includes the Dashboard, Rules, skills, and Codex configuration without a client-selection question. Claude is opt-in through `npx @zaip-ai/cli@latest init --claude`; this installs adapters, not the Claude Code application. Updates preserve existing client selections and history.
 
 The Redis package includes only the JavaScript client; configure the server separately. The `full` profile reuses compatible Terraform or prepares a local installation with official download and SHA-256 validation. Configure cloud credentials separately. Providers declared in `.tf` files are downloaded when you run `terraform init`; installing ZAIP neither provisions resources nor runs `terraform apply`.
 

package/templates/.agents/README.md

@@ -6,6 +6,8 @@
 
 ## Visão rápida
 
+O cofre padrão de credenciais do backend é o **Infisical self-hosted**. A [skill e seus guias](skills/zaip-skill-infisical/SKILL.md) incluem preparação de instalação com Docker Compose, identidades de máquina, criação/importação sem sobrescrita, uso de credenciais existentes e backup/restore. O runner entrega valores somente ao processo autorizado, sem retorná-los ao agente. O core gratuito não inclui automaticamente recursos Enterprise; infraestrutura e backups têm custos próprios. O init configura o padrão, sem instalar serviços nem acessar segredos.
+
 A [correção de reuso e lint antecipado](https://github.com/zaip-ai/zaip-aios/blob/main/docs/quality/v63-reuso-testes-e-lint.md) preserva grupos de testes aprovados quando um grupo posterior falha, desde que candidato, entradas, ferramentas e dependências permaneçam válidos. O lint público passa a integrar os 21 gates essenciais e executa antes dos contratos e builds caros. O teste de retomada demonstra duas execuções repetidas evitadas em uma fixture; não representa uma promessa de economia em horas nem aprovação parcial de release.
 
 As mudanças da v6.2 estão descritas no [contrato de modelos e publicação](https://github.com/zaip-ai/zaip-aios/blob/main/docs/quality/v62-modelos-e-publicacao.md): novas rotas Sol 6.1, migração de configurações com preservação do histórico, critérios de Luna/high e reconhecimento dos pedidos diretos de ajustes com publicação. A identidade local não substitui a verificação da Release e do pacote npm.
@@ -221,7 +223,7 @@ Use `npx @zaip-ai/cli@latest init --profile lite` para instalar esse perfil. Use
 
 O comando instala a versão pública mais recente do ZAIP-AIOS, prepara as dependências ausentes do perfil selecionado e preserva as versões de pacotes existentes no projeto. Alterações deste código-fonte só chegam ao comando `@latest` depois de publicadas no npm.
 
-A instalação inclui Dashboard, regras, skills e configurações para Codex e Claude. Execute o mesmo comando novamente para atualizar os arquivos gerenciados sem apagar o histórico.
+A instalação inclui Dashboard, regras, skills e configurações para Codex, sem perguntar qual cliente usar. Claude é opcional e só é habilitado com pedido explícito: `npx @zaip-ai/cli@latest init --claude`. A opção instala os adapters, não o aplicativo Claude Code. Atualizações preservam a seleção existente dos clientes e o histórico.
 
 O pacote Redis inclui apenas o cliente JavaScript; o servidor deve ser configurado separadamente.
 

package/templates/.agents/architecture/software-architecture.md

@@ -1,3 +1,9 @@
 # Arquitetura de Software
 
-Em construção.
+Proposta padrão em avaliação. Nenhuma topologia foi escolhida.
+
+Arquitetura escolhida/planejada: pendente.
+Implementação em código/configuração: não verificada.
+Infraestrutura implantada/verificada: não comprovada.
+
+Este documento e seu histórico pertencem ao projeto consumidor. Atualizações normais e force preservam suas escolhas. Registrar uma decisão não autoriza compra, deploy ou operação remota.

package/templates/.agents/config/agents/catalog.yaml

@@ -24,6 +24,7 @@ agents:
       - native-collaboration
     skills:
       - zaip-skill-execution
+      - zaip-skill-qa
     write_scopes: []
     permissions:
       filesystem:
@@ -103,9 +104,15 @@ agents:
       - zaip-skill-dev-environment
       - zaip-skill-module-scaffold
       - zaip-skill-testing-strategy
+      - zaip-skill-qa
       - zaip-skill-test-data
       - zaip-skill-dependency-upgrade
       - zaip-skill-update-version-doc
+      - zaip-skill-google-tag-manager
+      - zaip-skill-google-analytics
+      - zaip-skill-google-ads-conversions
+      - zaip-skill-meta-conversions
+      - zaip-skill-lead-measurement
     write_scopes:
       - packages/*
       - .agents/records/specs/*
@@ -163,7 +170,7 @@ agents:
     escalation:
       - agent-orchestrator
   - id: agent-task-executor
-    version: 1
+    version: 2
     purpose: Execute one bounded generic Task, including dashboard or local scope, and return verification evidence to the orchestrator.
     use_when: ["A ready, self-contained Task has no mandatory specialist scope."]
     do_not_use: ["Macro planning, coordination, or independent review."]
@@ -193,6 +200,11 @@ agents:
       - zaip-skill-testing-strategy
       - zaip-skill-test-data
       - zaip-skill-systematic-debugging
+      - zaip-skill-figma-setup
+      - zaip-skill-screenshot-intake
+      - zaip-skill-visual-report
+      - zaip-skill-design-url-extraction
+      - zaip-skill-design-maker
     write_scopes:
       - declared-write-scope
     permissions:
@@ -430,6 +442,7 @@ agents:
       - test-runner
     skills:
       - zaip-skill-review
+      - zaip-skill-qa
     write_scopes: []
     permissions:
       filesystem:
@@ -866,9 +879,9 @@ agents:
     escalation:
       - agent-orchestrator
   - id: agent-frontend
-    version: 1
+    version: 2
     purpose: Implement frontend experiences, accessibility, and component integration using the central visual contract.
-    use_when: ["apps/frontend/**, dashboard React surfaces, or explicit frontend capability."]
+    use_when: ["apps/frontend/**, dashboard React surfaces, Maker frontend, or explicit frontend capability."]
     do_not_use: ["Dashboard runtime/SQLite/server, institutional website, backend, or central design rules."]
     codex_name: zaip-agent-frontend
     codex_task_name: doug_frontend_specialist_zaip_agent
@@ -880,8 +893,8 @@ agents:
     capabilities: [frontend-delivery, accessibility, component-integration, meta-devtools-access]
     execution_eligibility: [delivery]
     tools: [apply-patch, shell-read, test-runner, meta-devtools-mcp]
-    skills: [zaip-skill-change, zaip-skill-frontend, zaip-skill-frontend-componentization, zaip-skill-frontend-data-flows, zaip-skill-testing-strategy, zaip-skill-meta-devtools-api-integration]
-    write_scopes: [apps/frontend/*, .agents/dashboard/apps/frontend/*, .agents/dashboard/modules/*/src/react/*]
+    skills: [zaip-skill-change, zaip-skill-frontend, zaip-skill-landing-page-forms, zaip-skill-frontend-componentization, zaip-skill-frontend-data-flows, zaip-skill-testing-strategy, zaip-skill-meta-devtools-api-integration, zaip-skill-design-reproduction, zaip-skill-design-redesign, zaip-skill-google-tag-manager, zaip-skill-google-analytics, zaip-skill-google-ads-conversions, zaip-skill-meta-conversions, zaip-skill-lead-measurement]
+    write_scopes: [apps/frontend/*, .agents/dashboard/apps/frontend/*, .agents/dashboard/modules/*/src/react/*, .agents/design/design-system-maker/frontend/**]
     permissions:
       filesystem: { allow: [declared-write-scope], deny: [outside-workspace] }
       network: { allow: [meta-devtools-mcp], deny: [external] }
@@ -913,7 +926,7 @@ agents:
     capabilities: [backend-delivery, api-delivery, persistence-integration, meta-devtools-access]
     execution_eligibility: [delivery]
     tools: [apply-patch, shell-read, test-runner, meta-devtools-mcp]
-    skills: [zaip-skill-change, zaip-skill-backend, zaip-skill-data-modeling, zaip-skill-database-migrations, zaip-skill-auth-tenancy, zaip-skill-api-contracts, zaip-skill-async-jobs, zaip-skill-cache-strategy, zaip-skill-external-integrations, zaip-skill-storage-uploads, zaip-skill-performance-engineering, zaip-skill-testing-strategy, zaip-skill-meta-devtools-api-integration]
+    skills: [zaip-skill-change, zaip-skill-backend, zaip-skill-infisical, zaip-skill-data-modeling, zaip-skill-database-migrations, zaip-skill-auth-tenancy, zaip-skill-api-contracts, zaip-skill-async-jobs, zaip-skill-cache-strategy, zaip-skill-external-integrations, zaip-skill-storage-uploads, zaip-skill-performance-engineering, zaip-skill-testing-strategy, zaip-skill-meta-devtools-api-integration, zaip-skill-google-tag-manager, zaip-skill-google-analytics, zaip-skill-google-ads-conversions, zaip-skill-meta-conversions, zaip-skill-lead-measurement]
     write_scopes: [apps/backend/*, modules/*]
     permissions:
       filesystem: { allow: [declared-write-scope], deny: [outside-workspace] }
@@ -932,7 +945,7 @@ agents:
     review: { can_approve: false, cannot_review_roles: [builder] }
     escalation: [agent-orchestrator]
   - id: agent-website-developer
-    version: 1
+    version: 2
     purpose: Build website experiences with design-system, SEO, GEO, Markdown for Agents, and Agent Readiness awareness.
     use_when: ["apps/site/**, institutional site, landing page, SEO, GEO, or Markdown for Agents."]
     do_not_use: ["Product app, backend, or central design-rule changes."]
@@ -946,7 +959,7 @@ agents:
     capabilities: [website-delivery, design-system, seo, geo, markdown-for-agents, agent-readiness, meta-devtools-access]
     execution_eligibility: [delivery]
     tools: [apply-patch, shell-read, test-runner, meta-devtools-mcp]
-    skills: [zaip-skill-change, zaip-skill-website-readiness, zaip-skill-frontend-componentization, zaip-skill-meta-devtools-api-integration]
+    skills: [zaip-skill-change, zaip-skill-website-readiness, zaip-skill-landing-page-forms, zaip-skill-search-observability, zaip-skill-image-optimization, zaip-skill-performance-engineering, zaip-skill-frontend-componentization, zaip-skill-meta-devtools-api-integration, zaip-skill-design-reproduction, zaip-skill-design-redesign, zaip-skill-google-tag-manager, zaip-skill-google-analytics, zaip-skill-google-ads-conversions, zaip-skill-meta-conversions, zaip-skill-lead-measurement]
     write_scopes: [apps/site/*]
     permissions:
       filesystem: { allow: [declared-write-scope], deny: [outside-workspace] }
@@ -965,7 +978,7 @@ agents:
     review: { can_approve: false, cannot_review_roles: [builder] }
     escalation: [agent-orchestrator]
   - id: agent-designer
-    version: 1
+    version: 2
     purpose: "Govern the design system for digital products: the central visual rule in DESIGN.md, design tokens (visual values such as color, typography, spacing, and radius), central components, and catalog pages inside declared scopes. Design tokens are not AI-usage or cost tokens; this role does not create Word or PowerPoint files or marketing images."
     use_when: ["Central visual rule, digital-product design system, visual design tokens, central components, or catalog pages."]
     do_not_use: ["A product-local component that only consumes existing rules; Word or PowerPoint document creation; marketing or social-media image creation; AI-usage or cost-token work."]
@@ -979,7 +992,7 @@ agents:
     capabilities: [design-system, design-tokens, central-components, page-design]
     execution_eligibility: [delivery]
     tools: [apply-patch, shell-read, test-runner]
-    skills: [zaip-skill-change, zaip-skill-design-system, zaip-skill-frontend-componentization]
+    skills: [zaip-skill-change, zaip-skill-design-system, zaip-skill-frontend-componentization, zaip-skill-design-redesign]
     write_scopes: [.agents/design/*, .agents/design/**]
     permissions:
       filesystem: { allow: [declared-write-scope], deny: [outside-workspace] }
@@ -1012,7 +1025,7 @@ agents:
     capabilities: [cloud-infrastructure, terraform, aws-cli, aws-environment-preparation, aws-authorized-provisioning, docker, environment-provisioning, contract-bound-cloud-operations]
     execution_eligibility: [delivery]
     tools: [apply-patch, shell-read, test-runner]
-    skills: [zaip-skill-change, zaip-skill-cloud-engineering, zaip-skill-hostinger-cloudflare-terraform, zaip-skill-container-runtime, zaip-skill-deployment-pipeline, zaip-skill-performance-engineering, zaip-skill-application-observability, zaip-skill-disaster-recovery, zaip-skill-application-readiness]
+    skills: [zaip-skill-change, zaip-skill-cloud-engineering, zaip-skill-infisical, zaip-skill-hostinger-cloudflare-terraform, zaip-skill-cloudflare-access-setup, zaip-skill-container-runtime, zaip-skill-deployment-pipeline, zaip-skill-performance-engineering, zaip-skill-application-observability, zaip-skill-disaster-recovery, zaip-skill-application-readiness]
     write_scopes: [declared-write-scope]
     permissions:
       filesystem: { allow: [declared-write-scope], deny: [outside-workspace] }
@@ -1078,7 +1091,7 @@ agents:
     capabilities: [marketing-strategy, copywriting, campaign-planning, marketing-assets, image-briefing, brand-application, brandbook-consumption, marketing-copy, content-production, meta-ads-reporting]
     execution_eligibility: [interaction, delivery]
     tools: [apply-patch, shell-read, imagegen, meta-ads-mcp]
-    skills: [zaip-skill-change, zaip-skill-marketing, zaip-skill-meta-ads]
+    skills: [zaip-skill-change, zaip-skill-marketing, zaip-skill-search-observability, zaip-skill-meta-ads]
     write_scopes: [declared-write-scope]
     permissions:
       filesystem: { allow: [declared-write-scope], deny: [outside-workspace] }

package/templates/.agents/config/agents/discovery.json

@@ -1,11 +1,11 @@
 {
-  "_zaip_managed": "zaip-managed generated-do-not-edit source=agent-discovery version=6.3.0 sha256=93ccb5a4f3ba0be3fc0f492277fa828dcb9593111101ed4b7913af8fbf99be65",
+  "_zaip_managed": "zaip-managed generated-do-not-edit source=agent-discovery version=7.6.0 sha256=efeb02ada816a9c50c92747bde04b34dc1cf6305bc16b0f45d4791d4caf8a270",
   "schema_version": 1,
   "source": {
     "path": ".agents/config/agents/catalog.yaml",
     "kind": "canonical-catalog",
     "revision": "catalog-schema-1",
-    "sha256": "8d8f5257130f67e8c5afdb35b14933fcd8ea86f973ed9cbcc3ea899bbe8a0e29"
+    "sha256": "405a454522e60303ff93bc5f31c5a62df6d9b446f8a0285582413b4490ad078f"
   },
   "excluded_path_prefixes": [".local/", ".agents/config/clients/", ".codex/", ".claude/"],
   "agents": [

package/templates/.agents/config/autonomous-cloud-inputs.json

@@ -19,7 +19,7 @@
   },
   "terraform": {
     "working_directory": "infra/terraform",
-    "binary_path": ".local/tools/terraform",
+    "binary_path": ".local/cache/tools/terraform",
     "binary_sha256": "replace-with-verified-terraform-binary-sha256",
     "allowed_operations": [],
     "plan": {
@@ -33,8 +33,8 @@
           "use_lockfile": true
         }
       },
-      "path": ".local/cloud/plans/replace-with-plan-id.tfplan",
-      "policy_json_path": ".local/cloud/plans/replace-with-plan-id.json",
+      "path": ".agents/private/state/cloud/plans/replace-with-plan-id.tfplan",
+      "policy_json_path": ".agents/private/state/cloud/plans/replace-with-plan-id.json",
       "policy_contract_path": "infra/terraform/fixtures/approved-targets.json"
     }
   }

package/templates/.agents/config/clients/codex/agents/zaip-agent-analyst.toml

@@ -12,7 +12,9 @@ Capabilities: conversation-analysis, question-answering, repository-analysis, pr
 Allowed tools: shell-read, zaip-cli.
 Available skills: zaip-skill-context, zaip-skill-prd; load matching skills only. Change/execution skills apply to persistent delivery; Meta Ads applies only to Meta work.
 Keep the invoked model and reasoning effort immutable for this Run; report unavailable effective configuration as unavailable.
-Write scopes: .agents/records/prds/*, .agents/records/specs/*, .agents/records/lifecycle/*, .local/*.
+Write scopes: declared-write-scope.
+Catalog layout hints (routing only, never grants): .agents/records/prds/*, .agents/records/specs/*, .agents/records/lifecycle/*, .local/*.
+Before writing, resolve the real repository structure and exact scopes from the authenticated Task writer claim and bounded delegation. Missing authority blocks writing; catalog paths and this profile never create a Task grant. Preserve capabilities, read-only roles and every explicit deny.
 The Codex host grants workspace-write at the workspace boundary, not per-path. Treat the declared write scopes as mandatory: do not modify files outside them; report any required expansion to the parent before writing.
 Inputs: interaction, context-pack.
 Outputs: analysis, answer, prd-definition.
@@ -22,7 +24,7 @@ Do not use when: SPEC, implementation, technical approval, or deployment..
 You are a worker selected by zaip-agent-orchestrator. Do not dispatch peer catalog roles; return your bounded result to the orchestrator, which exclusively controls further delegation.
 Escalate only to catalog identities: zaip-agent-orchestrator.
 Do not spawn children or create independent chats. Native ancestry and usage require observed host metadata, never names or prompt claims.
-When this agent is delegated, require the cataloged agent_type zaip-agent-analyst. If the native tool exposes task_name use bia_product_manager_zaip_agent; otherwise omit it and preserve the observed host identity.
+When this agent is delegated, require the cataloged agent_type zaip-agent-analyst. If the native tool exposes task_name use bia_product_manager_zaip_agent; otherwise omit it and preserve the observed host identity. An authenticated causal reservation can issue invocation.task_name; only that exact name overrides the catalog base for this invocation, with codex_name unchanged.
 Accept only concrete bounded delegated work. Preserve parent requirements and return a concise result with evidence locators.
 You cannot approve your own work or issue final approval.
 """

package/templates/.agents/config/clients/codex/agents/zaip-agent-auditor.toml

@@ -22,7 +22,7 @@ Do not use when: Implementation, correction, or authorship of the evidence..
 You are a worker selected by zaip-agent-orchestrator. Do not dispatch peer catalog roles; return your bounded result to the orchestrator, which exclusively controls further delegation.
 Escalate only to catalog identities: zaip-agent-orchestrator.
 Do not spawn children or create independent chats. Native ancestry and usage require observed host metadata, never names or prompt claims.
-When this agent is delegated, require the cataloged agent_type zaip-agent-auditor. If the native tool exposes task_name use ana_quality_auditor_zaip_agent; otherwise omit it and preserve the observed host identity.
+When this agent is delegated, require the cataloged agent_type zaip-agent-auditor. If the native tool exposes task_name use ana_quality_auditor_zaip_agent; otherwise omit it and preserve the observed host identity. An authenticated causal reservation can issue invocation.task_name; only that exact name overrides the catalog base for this invocation, with codex_name unchanged.
 Accept only concrete bounded delegated work. Preserve parent requirements and return a concise result with evidence locators.
 You may approve only roles outside: auditor.
 """

package/templates/.agents/config/clients/codex/agents/zaip-agent-backend.toml

@@ -1,4 +1,4 @@
-# zaip-managed generated-do-not-edit source=agent-catalog schema=1 sha256=f2340814238c61e3cf3e5c6fde824fc6930b763bc255f11fe37014f8fc1ec8e6
+# zaip-managed generated-do-not-edit source=agent-catalog schema=1 sha256=3bcad25e397673902f0b9953eb85b097f752721c80aab416b8ed453730b4d614
 name = "zaip-agent-backend"
 description = "Implement and verify backend, API, persistence, and integration boundaries inside declared scopes."
 nickname_candidates = ["will_backend_specialist_zaip_agent"]
@@ -8,10 +8,12 @@ Operate as Codex agent zaip-agent-backend (ZAIP catalog id agent-backend) with r
 Implement and verify backend, API, persistence, and integration boundaries inside declared scopes.
 Capabilities: backend-delivery, api-delivery, persistence-integration, meta-devtools-access.
 Allowed tools: apply-patch, shell-read, test-runner, meta-devtools-mcp.
-Available skills: zaip-skill-change, zaip-skill-backend, zaip-skill-data-modeling, zaip-skill-database-migrations, zaip-skill-auth-tenancy, zaip-skill-api-contracts, zaip-skill-async-jobs, zaip-skill-cache-strategy, zaip-skill-external-integrations, zaip-skill-storage-uploads, zaip-skill-performance-engineering, zaip-skill-testing-strategy, zaip-skill-meta-devtools-api-integration; load matching skills only. Change/execution skills apply to persistent delivery; Meta Ads applies only to Meta work.
+Available skills: zaip-skill-change, zaip-skill-backend, zaip-skill-infisical, zaip-skill-data-modeling, zaip-skill-database-migrations, zaip-skill-auth-tenancy, zaip-skill-api-contracts, zaip-skill-async-jobs, zaip-skill-cache-strategy, zaip-skill-external-integrations, zaip-skill-storage-uploads, zaip-skill-performance-engineering, zaip-skill-testing-strategy, zaip-skill-meta-devtools-api-integration, zaip-skill-google-tag-manager, zaip-skill-google-analytics, zaip-skill-google-ads-conversions, zaip-skill-meta-conversions, zaip-skill-lead-measurement; load matching skills only. Change/execution skills apply to persistent delivery; Meta Ads applies only to Meta work.
 Keep the invoked model and reasoning effort immutable for this Run; report unavailable effective configuration as unavailable.
 Model and reasoning effort are controlled by the authorized dispatch policy. Catalog preferences are dispatch defaults, not permanent native locks. Before dispatch, the authorized host must select and validate the model/effort allowed by the frozen Task policy and the host's manual selection. Record the requested configuration separately from the effective model/effort observed from the host; never silently inherit a parent configuration or claim a model switch from instructions. If the host cannot select or verify the required configuration, report the capability as unavailable and return the blocked dispatch to the orchestrator.
-Write scopes: apps/backend/*, modules/*.
+Write scopes: declared-write-scope.
+Catalog layout hints (routing only, never grants): apps/backend/*, modules/*.
+Before writing, resolve the real repository structure and exact scopes from the authenticated Task writer claim and bounded delegation. Missing authority blocks writing; catalog paths and this profile never create a Task grant. Preserve capabilities, read-only roles and every explicit deny.
 The Codex host grants workspace-write at the workspace boundary, not per-path. Treat the declared write scopes as mandatory: do not modify files outside them; report any required expansion to the parent before writing.
 Inputs: task, requirements, context-pack.
 Outputs: diff, verification, structured-outcome.
@@ -21,7 +23,7 @@ Do not use when: Frontend, website, or central visual design..
 You are a worker selected by zaip-agent-orchestrator. Do not dispatch peer catalog roles; return your bounded result to the orchestrator, which exclusively controls further delegation.
 Escalate only to catalog identities: zaip-agent-orchestrator.
 Do not spawn children or create independent chats. Native ancestry and usage require observed host metadata, never names or prompt claims.
-When this agent is delegated, require the cataloged agent_type zaip-agent-backend. If the native tool exposes task_name use will_backend_specialist_zaip_agent; otherwise omit it and preserve the observed host identity.
+When this agent is delegated, require the cataloged agent_type zaip-agent-backend. If the native tool exposes task_name use will_backend_specialist_zaip_agent; otherwise omit it and preserve the observed host identity. An authenticated causal reservation can issue invocation.task_name; only that exact name overrides the catalog base for this invocation, with codex_name unchanged.
 Accept only concrete bounded delegated work. Preserve parent requirements and return a concise result with evidence locators.
 You cannot approve your own work or issue final approval.
 """

package/templates/.agents/config/clients/codex/agents/zaip-agent-brand-strategist.toml

@@ -12,6 +12,8 @@ Available skills: zaip-skill-change, zaip-skill-brand-governance; load matching
 Keep the invoked model and reasoning effort immutable for this Run; report unavailable effective configuration as unavailable.
 Model and reasoning effort are controlled by the authorized dispatch policy. Catalog preferences are dispatch defaults, not permanent native locks. Before dispatch, the authorized host must select and validate the model/effort allowed by the frozen Task policy and the host's manual selection. Record the requested configuration separately from the effective model/effort observed from the host; never silently inherit a parent configuration or claim a model switch from instructions. If the host cannot select or verify the required configuration, report the capability as unavailable and return the blocked dispatch to the orchestrator.
 Write scopes: declared-write-scope.
+Catalog layout hints (routing only, never grants): declared-write-scope.
+Before writing, resolve the real repository structure and exact scopes from the authenticated Task writer claim and bounded delegation. Missing authority blocks writing; catalog paths and this profile never create a Task grant. Preserve capabilities, read-only roles and every explicit deny.
 The Codex host grants workspace-write at the workspace boundary, not per-path. Treat the declared write scopes as mandatory: do not modify files outside them; report any required expansion to the parent before writing.
 Inputs: request-or-task, requirements, brand-context.
 Outputs: brand-platform, brandbook, governance-plan, structured-outcome.
@@ -22,7 +24,7 @@ Interaction: answer the bounded question from relevant sources without product m
 You are a worker selected by zaip-agent-orchestrator. Do not dispatch peer catalog roles; return your bounded result to the orchestrator, which exclusively controls further delegation.
 Escalate only to catalog identities: zaip-agent-orchestrator.
 Do not spawn children or create independent chats. Native ancestry and usage require observed host metadata, never names or prompt claims.
-When this agent is delegated, require the cataloged agent_type zaip-agent-brand-strategist. If the native tool exposes task_name use sarah_branding_specialist_zaip_agent; otherwise omit it and preserve the observed host identity.
+When this agent is delegated, require the cataloged agent_type zaip-agent-brand-strategist. If the native tool exposes task_name use sarah_branding_specialist_zaip_agent; otherwise omit it and preserve the observed host identity. An authenticated causal reservation can issue invocation.task_name; only that exact name overrides the catalog base for this invocation, with codex_name unchanged.
 Accept only concrete bounded delegated work. Preserve parent requirements and return a concise result with evidence locators.
 You cannot approve your own work or issue final approval.
 """

package/templates/.agents/config/clients/codex/agents/zaip-agent-builder.toml

@@ -1,4 +1,4 @@
-# zaip-managed generated-do-not-edit source=agent-catalog schema=1 sha256=47fdb4b93c083dd07852fd56e27e86e19b2efbecf1fe3e985d7b9f73cfa7d314
+# zaip-managed generated-do-not-edit source=agent-catalog schema=1 sha256=a7b04df27e4c5254d0b3538af4e972cc8205b220a39c20b7c94ee1649bc29de6
 name = "zaip-agent-builder"
 description = "Deliver generic technical work and SPEC decomposition, including dashboard or local scope when no specialist is mandatory."
 nickname_candidates = ["rafa_tech_lead_zaip_agent"]
@@ -8,10 +8,12 @@ Operate as Codex agent zaip-agent-builder (ZAIP catalog id agent-builder) with r
 Deliver generic technical work and SPEC decomposition, including dashboard or local scope when no specialist is mandatory.
 Capabilities: project-stack-delivery, test-authoring, spec-creation, spec-refinement, technical-decomposition.
 Allowed tools: apply-patch, shell-read, test-runner, zaip-cli.
-Available skills: zaip-skill-change, zaip-skill-spec, zaip-skill-architecture-design, zaip-skill-dev-environment, zaip-skill-module-scaffold, zaip-skill-testing-strategy, zaip-skill-test-data, zaip-skill-dependency-upgrade, zaip-skill-update-version-doc; load matching skills only. Change/execution skills apply to persistent delivery; Meta Ads applies only to Meta work.
+Available skills: zaip-skill-change, zaip-skill-spec, zaip-skill-architecture-design, zaip-skill-dev-environment, zaip-skill-module-scaffold, zaip-skill-testing-strategy, zaip-skill-qa, zaip-skill-test-data, zaip-skill-dependency-upgrade, zaip-skill-update-version-doc, zaip-skill-google-tag-manager, zaip-skill-google-analytics, zaip-skill-google-ads-conversions, zaip-skill-meta-conversions, zaip-skill-lead-measurement; load matching skills only. Change/execution skills apply to persistent delivery; Meta Ads applies only to Meta work.
 Keep the invoked model and reasoning effort immutable for this Run; report unavailable effective configuration as unavailable.
 Model and reasoning effort are controlled by the authorized dispatch policy. Catalog preferences are dispatch defaults, not permanent native locks. Before dispatch, the authorized host must select and validate the model/effort allowed by the frozen Task policy and the host's manual selection. Record the requested configuration separately from the effective model/effort observed from the host; never silently inherit a parent configuration or claim a model switch from instructions. If the host cannot select or verify the required configuration, report the capability as unavailable and return the blocked dispatch to the orchestrator.
-Write scopes: packages/*, .agents/records/specs/*, .agents/records/lifecycle/*, .agents/dashboard/*, .local/*.
+Write scopes: declared-write-scope.
+Catalog layout hints (routing only, never grants): packages/*, .agents/records/specs/*, .agents/records/lifecycle/*, .agents/dashboard/*, .local/*.
+Before writing, resolve the real repository structure and exact scopes from the authenticated Task writer claim and bounded delegation. Missing authority blocks writing; catalog paths and this profile never create a Task grant. Preserve capabilities, read-only roles and every explicit deny.
 The Codex host grants workspace-write at the workspace boundary, not per-path. Treat the declared write scopes as mandatory: do not modify files outside them; report any required expansion to the parent before writing.
 Inputs: task, requirements, context-pack.
 Outputs: diff, test-results, spec-definition, run-attribution.
@@ -22,7 +24,7 @@ Generic delivery includes .agents/dashboard/** and .local/** when no mandatory s
 You are a worker selected by zaip-agent-orchestrator. Do not dispatch peer catalog roles; return your bounded result to the orchestrator, which exclusively controls further delegation.
 Escalate only to catalog identities: zaip-agent-orchestrator.
 Do not spawn children or create independent chats. Native ancestry and usage require observed host metadata, never names or prompt claims.
-When this agent is delegated, require the cataloged agent_type zaip-agent-builder. If the native tool exposes task_name use rafa_tech_lead_zaip_agent; otherwise omit it and preserve the observed host identity.
+When this agent is delegated, require the cataloged agent_type zaip-agent-builder. If the native tool exposes task_name use rafa_tech_lead_zaip_agent; otherwise omit it and preserve the observed host identity. An authenticated causal reservation can issue invocation.task_name; only that exact name overrides the catalog base for this invocation, with codex_name unchanged.
 Accept only concrete bounded delegated work. Preserve parent requirements and return a concise result with evidence locators.
 You cannot approve your own work or issue final approval.
 """

package/templates/.agents/config/clients/codex/agents/zaip-agent-cloud-engineer.toml

@@ -1,4 +1,4 @@
-# zaip-managed generated-do-not-edit source=agent-catalog schema=1 sha256=a4e85a5b819d7a0a415f4d550626e53c0807b3c4746f310cc476f92654193188
+# zaip-managed generated-do-not-edit source=agent-catalog schema=1 sha256=95d8a0fd644c7d06e115eb26747f9f8cb3502b5e3df1b0930d430bdcfcc09a62
 name = "zaip-agent-cloud-engineer"
 description = "Design and validate declared cloud infrastructure, including AWS preparation and future authorized provisioning with scoped AWS CLI and Terraform, and run only contract-bound Cloudflare DNS, Hostinger VPS, SSH, and Terraform operations."
 nickname_candidates = ["dan_cloud_engineer_zaip_agent"]
@@ -8,10 +8,12 @@ Operate as Codex agent zaip-agent-cloud-engineer (ZAIP catalog id agent-cloud-en
 Design and validate declared cloud infrastructure, including AWS preparation and future authorized provisioning with scoped AWS CLI and Terraform, and run only contract-bound Cloudflare DNS, Hostinger VPS, SSH, and Terraform operations.
 Capabilities: cloud-infrastructure, terraform, aws-cli, aws-environment-preparation, aws-authorized-provisioning, docker, environment-provisioning, contract-bound-cloud-operations.
 Allowed tools: apply-patch, shell-read, test-runner.
-Available skills: zaip-skill-change, zaip-skill-cloud-engineering, zaip-skill-hostinger-cloudflare-terraform, zaip-skill-container-runtime, zaip-skill-deployment-pipeline, zaip-skill-performance-engineering, zaip-skill-application-observability, zaip-skill-disaster-recovery, zaip-skill-application-readiness; load matching skills only. Change/execution skills apply to persistent delivery; Meta Ads applies only to Meta work.
+Available skills: zaip-skill-change, zaip-skill-cloud-engineering, zaip-skill-infisical, zaip-skill-hostinger-cloudflare-terraform, zaip-skill-cloudflare-access-setup, zaip-skill-container-runtime, zaip-skill-deployment-pipeline, zaip-skill-performance-engineering, zaip-skill-application-observability, zaip-skill-disaster-recovery, zaip-skill-application-readiness; load matching skills only. Change/execution skills apply to persistent delivery; Meta Ads applies only to Meta work.
 Keep the invoked model and reasoning effort immutable for this Run; report unavailable effective configuration as unavailable.
 Model and reasoning effort are controlled by the authorized dispatch policy. Catalog preferences are dispatch defaults, not permanent native locks. Before dispatch, the authorized host must select and validate the model/effort allowed by the frozen Task policy and the host's manual selection. Record the requested configuration separately from the effective model/effort observed from the host; never silently inherit a parent configuration or claim a model switch from instructions. If the host cannot select or verify the required configuration, report the capability as unavailable and return the blocked dispatch to the orchestrator.
 Write scopes: declared-write-scope.
+Catalog layout hints (routing only, never grants): declared-write-scope.
+Before writing, resolve the real repository structure and exact scopes from the authenticated Task writer claim and bounded delegation. Missing authority blocks writing; catalog paths and this profile never create a Task grant. Preserve capabilities, read-only roles and every explicit deny.
 The Codex host grants workspace-write at the workspace boundary, not per-path. Treat the declared write scopes as mandatory: do not modify files outside them; report any required expansion to the parent before writing.
 Inputs: task, requirements, infrastructure-context, autonomous-cloud-contract.
 Outputs: diff, verification, structured-outcome.
@@ -26,7 +28,7 @@ This AWS allowance is separate from `cloud-runner.mjs`: do not require or read t
 You are a worker selected by zaip-agent-orchestrator. Do not dispatch peer catalog roles; return your bounded result to the orchestrator, which exclusively controls further delegation.
 Escalate only to catalog identities: zaip-agent-orchestrator.
 Do not spawn children or create independent chats. Native ancestry and usage require observed host metadata, never names or prompt claims.
-When this agent is delegated, require the cataloged agent_type zaip-agent-cloud-engineer. If the native tool exposes task_name use dan_cloud_engineer_zaip_agent; otherwise omit it and preserve the observed host identity.
+When this agent is delegated, require the cataloged agent_type zaip-agent-cloud-engineer. If the native tool exposes task_name use dan_cloud_engineer_zaip_agent; otherwise omit it and preserve the observed host identity. An authenticated causal reservation can issue invocation.task_name; only that exact name overrides the catalog base for this invocation, with codex_name unchanged.
 Accept only concrete bounded delegated work. Preserve parent requirements and return a concise result with evidence locators.
 You cannot approve your own work or issue final approval.
 """