dorfl 0.14.2 → 0.15.0

package/dist/dorfl-item-template.js

@@ -0,0 +1,504 @@
+/**
+ * The SPLIT CI ITEM workflows (spec `ci-agent-job-without-write-token` §2, ADR
+ * `ci-agent-job-holds-no-write-token`; task `ci-split-generate-workflows`).
+ *
+ * Every CI item runs as three jobs in a workflow run of its own:
+ *
+ *  - **lock** (write token, no agent, no repository code): classify the item
+ *    at the arbiter's current `main`, take its locks, publish trusted facts as
+ *    job outputs (`ci-lock-outputs.ts`);
+ *  - **agent** (a read-only token, `persist-credentials: false`): run the
+ *    agents and upload the handoff;
+ *  - **apply** (write token, no agent, no repository code, `if: always()`):
+ *    validate the handoff as hostile and do every write.
+ *
+ * This module generates the two files that carry that shape:
+ *
+ *  - `dorfl-item.yml` ({@link generateItemWorkflow}): the three jobs, reached
+ *    only through `workflow_call`, with NO workflow-level `concurrency`;
+ *  - `dorfl-item-dispatch.yml` ({@link generateItemDispatchWorkflow}): the thin
+ *    `workflow_dispatch` wrapper the advance tick starts once per item. It
+ *    holds the parallelism slot (`concurrency: dorfl-slot-<slot>` with
+ *    `queue: max`) and calls `dorfl-item.yml`.
+ *
+ * `intake.yml` calls `dorfl-item.yml` directly with `item: issue:<N>` under its
+ * own per-issue group (decision 10). One item per run means one artifact
+ * namespace per item (decision 1): the artifact the apply job downloads (no
+ * `run-id`) can only come from this item's agent job.
+ *
+ * The item decides the verb: `issue:<N>` runs `dorfl intake <N>`, every other
+ * namespaced id runs `dorfl advance <item> --<integrationMode>`, one line per
+ * phase (`advance --phase` routes build / tasking / tree-less itself from the
+ * lock job's `rung`).
+ */
+import { ACTION_PINS, pinnedUses } from './install-ci-action-pins.js';
+import { LOCK_OUTPUT_KEYS } from './ci-lock-outputs.js';
+import { PR_IDENTITY_SECRET_NAME, SETUP_ACTION_USES, WRITER_SETUP_ACTION_USES, providerSecretNames, providerSecretsWithBlock, } from './install-ci-core.js';
+/** The repo-relative path (under the output base) of the item workflow. */
+export const ITEM_WORKFLOW_PATH = 'workflows/dorfl-item.yml';
+/** The repo-relative path (under the output base) of the dispatch wrapper. */
+export const ITEM_DISPATCH_WORKFLOW_PATH = 'workflows/dorfl-item-dispatch.yml';
+/** The file name the advance tick dispatches (`gh workflow run <this>`). */
+export const ITEM_DISPATCH_WORKFLOW_FILE = 'dorfl-item-dispatch.yml';
+/** The `run-name` prefix of a dispatched item run (`dorfl-item <item>`). */
+export const ITEM_RUN_NAME_PREFIX = 'dorfl-item';
+/** The four one-shot gate overrides, with their `DORFL_*` env and values. */
+export const GATE_OVERRIDES = [
+    { input: 'autoBuild', env: 'DORFL_AUTO_BUILD', values: ['true', 'false'] },
+    { input: 'autoTask', env: 'DORFL_AUTO_TASK', values: ['true', 'false'] },
+    {
+        input: 'observationTriage',
+        env: 'DORFL_OBSERVATION_TRIAGE',
+        values: ['off', 'ask', 'auto'],
+    },
+    {
+        input: 'surfaceBlockers',
+        env: 'DORFL_SURFACE_BLOCKERS',
+        values: ['true', 'false'],
+    },
+];
+/**
+ * The scopes every job of `dorfl-item.yml` requests, together: what a calling
+ * job must grant (a called workflow can only narrow its caller's token).
+ */
+export const ITEM_WORKFLOW_CALLER_PERMISSIONS = `\
+      contents: write
+      issues: write
+      pull-requests: write
+      actions: read
+      checks: read`;
+/** `DISPATCH_AUTO_BUILD` for `DORFL_AUTO_BUILD`. */
+function dispatchVar(env) {
+    return env.replace(/^DORFL_/, 'DISPATCH_');
+}
+/**
+ * The gate-override step (a 6-space-indented workflow step): each of the four
+ * one-shot overrides reaches the shell through `env:` from `source` (e.g.
+ * `inputs` or `github.event.inputs`), is refused when it carries a line break or
+ * is not its enum (blank means no override), and is exported as its `DORFL_*`
+ * only when non-blank. `ifDispatch` adds the `workflow_dispatch` guard (the
+ * lifecycle tick; a schedule or push run exports nothing).
+ */
+export function gateOverridesStep(options) {
+    const envLines = GATE_OVERRIDES.map((g) => `          ${dispatchVar(g.env)}: \${{ ${options.source}.${g.input} }}`).join('\n');
+    const all = GATE_OVERRIDES.map((g) => `\${${dispatchVar(g.env)}}`).join('');
+    const enumLines = GATE_OVERRIDES.map((g) => `          case "\${${dispatchVar(g.env)}}" in ''|${g.values.join('|')}) ;; *) echo "::error::the ${g.input} override must be blank, ${g.values.join(', ')}"; exit 1 ;; esac`).join('\n');
+    const writeLines = GATE_OVERRIDES.map((g) => `          [ -n "\${${dispatchVar(g.env)}}" ] && echo "${g.env}=\${${dispatchVar(g.env)}}" >> "$GITHUB_ENV"`).join('\n');
+    const ifLine = options.ifDispatch
+        ? `\n        if: \${{ github.event_name == 'workflow_dispatch' }}`
+        : '';
+    return `\
+      - name: apply dispatch gate overrides (one-shot, this run only)
+${options.comment}${ifLine}
+        env:
+${envLines}
+        run: |
+          case "${all}" in
+            *$'\\n'*|*$'\\r'*) echo "::error::a dispatch gate override contains a line break"; exit 1 ;;
+          esac
+${enumLines}
+${writeLines}
+          true`;
+}
+/** The standard comment on the item workflow's gate-override step. */
+const ITEM_GATE_COMMENT = `\
+        # The four one-shot gate overrides of the tick (blank: none, the
+        # committed dorfl.json wins). Exported in the lock, agent AND apply jobs,
+        # because each resolves the gate family (the lock job's classification
+        # picks the rung from it). Each reaches the shell through \`env:\` as DATA,
+        # a line break or a value outside its enum is refused (the
+        # \`workflow_call\` inputs are free strings), and only a non-blank value is
+        # written to $GITHUB_ENV (an empty DORFL_* makes the env coercion throw).`;
+/**
+ * The shell that runs ONE phase of the item: `issue:<N>` is intake, every
+ * other id is `advance <item> --<integrationMode>`. `advanceExtra` and
+ * `intakeExtra` are the phase-specific arguments (quoted shell words).
+ */
+function phaseScript(options) {
+    const prelude = options.prelude ? `${options.prelude}\n` : '';
+    return `\
+          set -euo pipefail
+          case "\${WORK_ITEM}" in
+            ''|-*) echo "::error::the item must be a namespaced id (task:<slug>, spec:<slug>, obs:<slug>, issue:<N>)"; exit 1 ;;
+          esac
+          case "\${INTEGRATION_MODE}" in
+            propose|merge) ;;
+            *) echo "::error::integrationMode must be propose or merge"; exit 1 ;;
+          esac
+${prelude}          case "\${WORK_ITEM}" in
+            issue:*) dorfl intake "\${WORK_ITEM#issue:}" --phase ${options.phase}${options.intakeExtra} --arbiter origin ;;
+            *) dorfl advance "\${WORK_ITEM}" "--\${INTEGRATION_MODE}" --phase ${options.phase}${options.advanceExtra} --arbiter origin ;;
+          esac`;
+}
+/** The `workflow_call` secrets block of `dorfl-item.yml`. */
+function callSecretsBlock(config) {
+    const names = [...providerSecretNames(config), PR_IDENTITY_SECRET_NAME];
+    return names
+        .map((name) => `      ${name}:\n        required: false`)
+        .join('\n');
+}
+/**
+ * The `secrets:` a calling job passes to `dorfl-item.yml`: explicit, never
+ * `inherit`, so nothing reaches the item workflow by default. `withPrIdentity`
+ * adds {@link PR_IDENTITY_SECRET_NAME} (the advance tick; intake keeps the
+ * built-in token, as before the split).
+ */
+export function itemCallSecrets(config, withPrIdentity) {
+    const names = [
+        ...providerSecretNames(config),
+        ...(withPrIdentity ? [PR_IDENTITY_SECRET_NAME] : []),
+    ];
+    if (names.length === 0) {
+        return '';
+    }
+    return ('\n    secrets:\n' +
+        names.map((n) => `      ${n}: \${{ secrets.${n} }}`).join('\n'));
+}
+/**
+ * Generate `dorfl-item.yml`: the lock, agent and apply jobs of ONE item.
+ * Deterministic. See the module comment for the shape; every value reaches a
+ * `run:` script through `env:`.
+ */
+export function generateItemWorkflow(config) {
+    const workspace = config.installSource === 'workspace';
+    const lockOutputs = LOCK_OUTPUT_KEYS.map((k) => `      ${k}: \${{ steps.lock.outputs.${k} }}`).join('\n');
+    const gate = gateOverridesStep({
+        source: 'inputs',
+        ifDispatch: false,
+        comment: ITEM_GATE_COMMENT,
+    });
+    const workspaceHeader = workspace
+        ? `
+#
+# WORKSPACE INSTALL MODE (this repository builds dorfl from source, decision 8
+# of ADR ci-agent-job-holds-no-write-token): all three jobs build dorfl from
+# the item's base sha (the arbiter's main tip the lock job classifies
+# against). In MERGE mode this runs code an earlier agent landed on \`main\`
+# inside the WRITE jobs (lock, apply), which is the trust merge mode already
+# implies: that code is what \`main\` runs anyway.`
+        : '';
+    const lockBaseStep = workspace
+        ? `
+      - name: resolve the arbiter tip to build dorfl from (workspace mode)
+        id: base
+        # The lock phase classifies against <arbiter>/main (its baseSha), not
+        # this run's github.sha, so build dorfl from that same tip.
+        run: |
+          set -euo pipefail
+          git fetch --quiet --no-tags origin +refs/heads/main:refs/remotes/origin/main
+          echo "sha=$(git rev-parse --verify 'refs/remotes/origin/main^{commit}')" >> "$GITHUB_OUTPUT"`
+        : '';
+    const lockSetupWith = workspace
+        ? `
+        with:
+          source-ref: \${{ steps.base.outputs.sha }}`
+        : '';
+    const lockBaseCheck = workspace
+        ? `
+      - name: check dorfl was built from the base sha (workspace mode)
+        # main can move between the fetch above and the lock phase's own fetch;
+        # the agent and apply jobs build from the base sha either way.
+        env:
+          BUILT_FROM: \${{ steps.base.outputs.sha }}
+          BASE_SHA: \${{ steps.lock.outputs.baseSha }}
+        run: |
+          if [ -n "\${BASE_SHA}" ] && [ "\${BASE_SHA}" != "\${BUILT_FROM}" ]; then
+            echo "::warning::main moved during the lock job: its dorfl was built from \${BUILT_FROM}, the item's base is \${BASE_SHA} (the agent and apply jobs build from the base)."
+          fi`
+        : '';
+    return `\
+# dorfl — ONE CI ITEM as three jobs (spec ci-agent-job-without-write-token,
+# ADR ci-agent-job-holds-no-write-token). EMITTED by \`dorfl install-ci\`; the
+# human commits it. DO NOT hand-edit a copy: re-run install-ci to upgrade.
+#
+#   lock   write token, NO agent, NO repository code: classify the item at the
+#          arbiter's current main (its tip is the base), take the locks, and
+#          publish trusted facts as job outputs.
+#   agent  read-only token, persist-credentials: false: run the agents, the
+#          gate and the review, stop at the first write, upload the handoff.
+#   apply  write token, NO agent, NO repository code, if: always(): treat the
+#          handoff as HOSTILE, validate it against the lock outputs, do every
+#          write (or release / surface the item when the agent job failed).
+#
+# Reached only through \`workflow_call\`: from dorfl-item-dispatch.yml (one run
+# per advance item, holding the parallelism slot) and from intake.yml
+# (\`item: issue:<N>\`, under its per-issue group). ONE item per run: the
+# artifact namespace is this run's, so the apply job's download (no run-id)
+# can only read this item's agent job. NO workflow-level concurrency here: the
+# callers own it.
+#
+# The base is the arbiter tip, never the run's commit: a queued run may start
+# hours after its dispatch. The lock job's checkout (github.sha) only loads the
+# local composite action; dorfl fetches <arbiter>/main itself and publishes its
+# tip as \`baseSha\`, which the agent and apply jobs check out.
+#
+# Secrets: the provider key(s) reach the AGENT job only; DORFL_GH_TOKEN and the
+# write-scoped GITHUB_TOKEN reach lock and apply only. The agent job's
+# GITHUB_TOKEN is read-only (its job permissions).
+#
+# All jobs run on GitHub-hosted runners: each job needs a FRESH machine. A
+# self-hosted runner must be ephemeral (one job per machine), or files and
+# processes an agent planted survive into a later lock or apply job.${workspaceHeader}
+
+name: dorfl-item
+
+on:
+  workflow_call:
+    inputs:
+      item:
+        description: 'The namespaced item id: task:<slug>, spec:<slug>, obs:<slug>, observation:<slug> (advance) or issue:<N> (intake).'
+        required: true
+        type: string
+      integrationMode:
+        description: 'propose or merge (advance items; the lock phase refuses anything else). Intake reads its document mode from dorfl.json.'
+        required: false
+        default: 'propose'
+        type: string
+      autoBuild:
+        description: 'One-shot autoBuild override (blank: none).'
+        required: false
+        default: ''
+        type: string
+      autoTask:
+        description: 'One-shot autoTask override (blank: none).'
+        required: false
+        default: ''
+        type: string
+      observationTriage:
+        description: 'One-shot observationTriage override (blank: none).'
+        required: false
+        default: ''
+        type: string
+      surfaceBlockers:
+        description: 'One-shot surfaceBlockers override (blank: none).'
+        required: false
+        default: ''
+        type: string
+    secrets:
+${callSecretsBlock(config)}
+
+# Nothing at workflow level: each job grants its own scopes (and a caller's
+# grant caps them).
+permissions: {}
+
+jobs:
+  # ── LOCK: write token, no agent, no repository code ─────────────────────────
+  lock:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    permissions:
+      contents: write
+      issues: write
+      pull-requests: write
+    # Exactly the lock phase's facts (ci-lock-outputs.ts), written by dorfl to
+    # $GITHUB_OUTPUT. The agent and apply jobs read them back as ONE JSON value,
+    # DORFL_LOCK_OUTPUTS = toJSON(needs.lock.outputs), which dorfl re-validates.
+    outputs:
+${lockOutputs}
+    steps:
+      - uses: ${pinnedUses(ACTION_PINS.checkout)}
+        with:
+          fetch-depth: 0${lockBaseStep}
+      - uses: ${WRITER_SETUP_ACTION_USES}${lockSetupWith}
+${gate}
+      - name: lock the item (no agent, no repository code)
+        id: lock
+        # dorfl fetches <arbiter>/main, classifies the item at its tip (the
+        # base), takes the locks and writes its facts to $GITHUB_OUTPUT (among
+        # them agentTimeoutMinutes, read from dorfl.json at the base). Intake
+        # derives the origin trust from this run's event and the document mode
+        # from dorfl.json at the base.
+        env:
+          GH_TOKEN: \${{ secrets.${PR_IDENTITY_SECRET_NAME} || secrets.GITHUB_TOKEN }}
+          WORK_ITEM: \${{ inputs.item }}
+          INTEGRATION_MODE: \${{ inputs.integrationMode }}
+        run: |
+${phaseScript({ phase: 'lock', advanceExtra: '', intakeExtra: '' })}${lockBaseCheck}
+
+  # ── AGENT: read-only token, no persisted credential ────────────────────────
+  agent:
+    needs: lock
+    if: \${{ needs.lock.outputs.acquired == 'true' && needs.lock.outputs.needsAgent == 'true' }}
+    runs-on: ubuntu-latest
+    # agentDeadlineMinutes + checkpointHeadroomMinutes from dorfl.json at the
+    # base, computed by the lock job (a job output is a string: fromJSON).
+    timeout-minutes: \${{ fromJSON(needs.lock.outputs.agentTimeoutMinutes) }}
+    permissions:
+      contents: read
+      issues: read
+    steps:
+      - uses: ${pinnedUses(ACTION_PINS.checkout)}
+        with:
+          ref: \${{ needs.lock.outputs.baseSha }}
+          fetch-depth: 0
+          # Nothing in this job may hold a credential the agent could use: the
+          # read token reaches dorfl's own git per command, never .git/config.
+          persist-credentials: false
+          lfs: true
+      - uses: ${SETUP_ACTION_USES}${providerSecretsWithBlock(config)}
+      - name: enable git LFS in this checkout
+        run: git lfs install --local
+${gate}
+      - name: run the agents (stops at the first write, writes the handoff)
+        env:
+          # Read-only (this job's permissions): dorfl's fetches pass it per
+          # command and scrub it from the agent's environment.
+          GH_TOKEN: \${{ secrets.GITHUB_TOKEN }}
+          DORFL_LOCK_OUTPUTS: \${{ toJSON(needs.lock.outputs) }}
+          WORK_ITEM: \${{ inputs.item }}
+          INTEGRATION_MODE: \${{ inputs.integrationMode }}
+        # \`--watch\` streams the build agent's turns into this job log.
+        run: |
+${phaseScript({
+        phase: 'agent',
+        advanceExtra: ' --watch --handoff-out "${RUNNER_TEMP}/dorfl-handoff"',
+        intakeExtra: ' --handoff-out "${RUNNER_TEMP}/dorfl-handoff"',
+    })}
+      - name: upload the handoff
+        if: \${{ always() }}
+        uses: ${pinnedUses(ACTION_PINS.uploadArtifact)}
+        with:
+          name: \${{ needs.lock.outputs.handoffName }}
+          path: \${{ runner.temp }}/dorfl-handoff
+          retention-days: 1
+          if-no-files-found: ignore
+
+  # ── APPLY: write token, no agent, no repository code ────────────────────────
+  apply:
+    needs: [lock, agent]
+    if: \${{ always() && needs.lock.outputs.acquired == 'true' }}
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    # actions: read + checks: read tell a timed-out agent job from a cancelled
+    # one (GitHub reports both as cancelled; decision 5).
+    permissions:
+      contents: write
+      issues: write
+      pull-requests: write
+      actions: read
+      checks: read
+    steps:
+      - uses: ${pinnedUses(ACTION_PINS.checkout)}
+        with:
+          ref: \${{ needs.lock.outputs.baseSha }}
+          fetch-depth: 0
+      - uses: ${WRITER_SETUP_ACTION_USES}
+${gate}
+      - name: download the handoff (this run's own artifact)
+        # No run-id: only this run's artifacts, i.e. this item's agent job. A
+        # missing artifact is the apply phase's to judge, not a job failure.
+        if: \${{ needs.agent.result == 'success' }}
+        continue-on-error: true
+        uses: ${pinnedUses(ACTION_PINS.downloadArtifact)}
+        with:
+          name: \${{ needs.lock.outputs.handoffName }}
+          path: \${{ runner.temp }}/dorfl-handoff
+      - name: apply the item (validates the handoff as hostile, does every write)
+        env:
+          GH_TOKEN: \${{ secrets.${PR_IDENTITY_SECRET_NAME} || secrets.GITHUB_TOKEN }}
+          # The agent job's timeout check reads the Actions API with THIS token
+          # only (never DORFL_GH_TOKEN).
+          GITHUB_TOKEN: \${{ secrets.GITHUB_TOKEN }}
+          DORFL_LOCK_OUTPUTS: \${{ toJSON(needs.lock.outputs) }}
+          AGENT_RESULT: \${{ needs.agent.result }}
+          AGENT_TIMEOUT_MINUTES: \${{ needs.lock.outputs.agentTimeoutMinutes }}
+          WORK_ITEM: \${{ inputs.item }}
+          INTEGRATION_MODE: \${{ inputs.integrationMode }}
+        run: |
+${phaseScript({
+        phase: 'apply',
+        prelude: `\
+          timeout_args=()
+          if [ -n "\${AGENT_TIMEOUT_MINUTES}" ]; then
+            timeout_args=(--agent-timeout-minutes "\${AGENT_TIMEOUT_MINUTES}")
+          fi`,
+        advanceExtra: ' --agent-result "${AGENT_RESULT}" "${timeout_args[@]}" --handoff-in "${RUNNER_TEMP}/dorfl-handoff"',
+        intakeExtra: ' --agent-result "${AGENT_RESULT}" "${timeout_args[@]}" --handoff-in "${RUNNER_TEMP}/dorfl-handoff"',
+    })}
+`;
+}
+/**
+ * Generate `dorfl-item-dispatch.yml`: the `workflow_dispatch` wrapper the
+ * advance tick starts once per item (`gh workflow run`). It holds the
+ * parallelism slot and calls `dorfl-item.yml`. Deterministic.
+ */
+export function generateItemDispatchWorkflow(config) {
+    const gateInputs = GATE_OVERRIDES.map((g) => `\
+      ${g.input}:
+        description: 'One-shot override of the ${g.input} gate (${g.env}) for this item run only. Blank: no override (config wins).'
+        required: false
+        default: ''
+        type: choice
+        options:
+          - ''
+${g.values.map((v) => `          - '${v}'`).join('\n')}`).join('\n');
+    const gateWith = GATE_OVERRIDES.map((g) => `      ${g.input}: \${{ inputs.${g.input} }}`).join('\n');
+    return `\
+# dorfl — ONE ADVANCE ITEM per workflow run (spec
+# ci-agent-job-without-write-token, decision 1 of ADR
+# ci-agent-job-holds-no-write-token). EMITTED by \`dorfl install-ci\`; the human
+# commits it. DO NOT hand-edit a copy: re-run install-ci to upgrade.
+#
+# The advance-lifecycle tick's \`dispatch\` job starts one run of THIS workflow
+# per eligible item (\`gh workflow run\`); its single job calls dorfl-item.yml
+# (lock, agent, apply). A run of its own per item gives the item its own
+# artifact namespace, so no other item's agent can plant its handoff.
+#
+# PARALLELISM: each run joins the concurrency group dorfl-slot-<slot> (slot =
+# item index mod maxParallel) with \`queue: max\`, so at most maxParallel item
+# runs execute at once and the rest wait first-in-first-out, costing no runner
+# minutes. A slot holds at most 100 pending runs; beyond that GitHub cancels,
+# and the next tick re-dispatches (the item is still eligible).
+#
+# The run name \`dorfl-item <item>\` is what the tick de-duplicates on: an item
+# whose run is not completed yet is not dispatched again.
+
+name: dorfl-item-dispatch
+
+run-name: ${ITEM_RUN_NAME_PREFIX} \${{ inputs.item }}
+
+on:
+  workflow_dispatch:
+    inputs:
+      item:
+        description: 'The namespaced item id (task:<slug>, spec:<slug>, obs:<slug>, observation:<slug>).'
+        required: true
+        type: string
+      integrationMode:
+        description: 'propose: open a PR for the item; merge: land it on main (rebase + CAS push).'
+        required: true
+        default: 'propose'
+        type: choice
+        options:
+          - propose
+          - merge
+      slot:
+        description: 'The parallelism slot (the concurrency group dorfl-slot-<slot>).'
+        required: true
+        default: '0'
+        type: string
+${gateInputs}
+
+# Nothing at workflow level: the calling job grants what dorfl-item.yml needs.
+permissions: {}
+
+concurrency:
+  group: dorfl-slot-\${{ inputs.slot }}
+  cancel-in-progress: false
+  queue: max
+
+jobs:
+  item:
+    # The union of what dorfl-item.yml's jobs request (a called workflow can
+    # only narrow this): lock and apply write, apply reads the agent job's
+    # check runs.
+    permissions:
+${ITEM_WORKFLOW_CALLER_PERMISSIONS}
+    uses: ./.github/workflows/dorfl-item.yml
+    with:
+      item: \${{ inputs.item }}
+      integrationMode: \${{ inputs.integrationMode }}
+${gateWith}${itemCallSecrets(config, true)}
+`;
+}
+//# sourceMappingURL=dorfl-item-template.js.map

package/dist/dorfl-item-template.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dorfl-item-template.js","sourceRoot":"","sources":["../src/dorfl-item-template.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAC,WAAW,EAAE,UAAU,EAAC,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAC,gBAAgB,EAAC,MAAM,sBAAsB,CAAC;AAEtD,OAAO,EACN,uBAAuB,EACvB,iBAAiB,EACjB,wBAAwB,EACxB,mBAAmB,EACnB,wBAAwB,GACxB,MAAM,sBAAsB,CAAC;AAE9B,2EAA2E;AAC3E,MAAM,CAAC,MAAM,kBAAkB,GAAG,0BAA0B,CAAC;AAE7D,8EAA8E;AAC9E,MAAM,CAAC,MAAM,2BAA2B,GAAG,mCAAmC,CAAC;AAE/E,4EAA4E;AAC5E,MAAM,CAAC,MAAM,2BAA2B,GAAG,yBAAyB,CAAC;AAErE,4EAA4E;AAC5E,MAAM,CAAC,MAAM,oBAAoB,GAAG,YAAY,CAAC;AAEjD,6EAA6E;AAC7E,MAAM,CAAC,MAAM,cAAc,GAAG;IAC7B,EAAC,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,kBAAkB,EAAE,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAC;IACxE,EAAC,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAC;IACtE;QACC,KAAK,EAAE,mBAAmB;QAC1B,GAAG,EAAE,0BAA0B;QAC/B,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC;KAC9B;IACD;QACC,KAAK,EAAE,iBAAiB;QACxB,GAAG,EAAE,wBAAwB;QAC7B,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;KACzB;CACQ,CAAC;AAEX;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG;;;;;mBAK7B,CAAC;AAEpB,oDAAoD;AACpD,SAAS,WAAW,CAAC,GAAW;IAC/B,OAAO,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAIjC;IACA,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAClC,CAAC,CAAC,EAAE,EAAE,CACL,aAAa,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,KAAK,CACxE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5E,MAAM,SAAS,GAAG,cAAc,CAAC,GAAG,CACnC,CAAC,CAAC,EAAE,EAAE,CACL,sBAAsB,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC,KAAK,4BAA4B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAC9K,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CACpC,CAAC,CAAC,EAAE,EAAE,CACL,sBAAsB,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,GAAG,OAAO,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAC7G,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU;QAChC,CAAC,CAAC,gEAAgE;QAClE,CAAC,CAAC,EAAE,CAAC;IACN,OAAO;;EAEN,OAAO,CAAC,OAAO,GAAG,MAAM;;EAExB,QAAQ;;kBAEQ,GAAG;;;EAGnB,SAAS;EACT,UAAU;eACG,CAAC;AAChB,CAAC;AAED,sEAAsE;AACtE,MAAM,iBAAiB,GAAG;;;;;;;kFAOwD,CAAC;AAEnF;;;;GAIG;AACH,SAAS,WAAW,CAAC,OAKpB;IACA,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,OAAO;;;;;;;;;EASN,OAAO;mEAC0D,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,WAAW;gFACtB,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,YAAY;eACrG,CAAC;AAChB,CAAC;AAED,6DAA6D;AAC7D,SAAS,gBAAgB,CAAC,MAAwB;IACjD,MAAM,KAAK,GAAG,CAAC,GAAG,mBAAmB,CAAC,MAAM,CAAC,EAAE,uBAAuB,CAAC,CAAC;IACxE,OAAO,KAAK;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,IAAI,4BAA4B,CAAC;SACxD,IAAI,CAAC,IAAI,CAAC,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC9B,MAAwB,EACxB,cAAuB;IAEvB,MAAM,KAAK,GAAG;QACb,GAAG,mBAAmB,CAAC,MAAM,CAAC;QAC9B,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACpD,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,CAAC;IACX,CAAC;IACD,OAAO,CACN,kBAAkB;QAClB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC/D,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAwB;IAC5D,MAAM,SAAS,GAAG,MAAM,CAAC,aAAa,KAAK,WAAW,CAAC;IACvD,MAAM,WAAW,GAAG,gBAAgB,CAAC,GAAG,CACvC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,6BAA6B,CAAC,KAAK,CACpD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,MAAM,IAAI,GAAG,iBAAiB,CAAC;QAC9B,MAAM,EAAE,QAAQ;QAChB,UAAU,EAAE,KAAK;QACjB,OAAO,EAAE,iBAAiB;KAC1B,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,SAAS;QAChC,CAAC,CAAC;;;;;;;mDAO+C;QACjD,CAAC,CAAC,EAAE,CAAC;IACN,MAAM,YAAY,GAAG,SAAS;QAC7B,CAAC,CAAC;;;;;;;;uGAQmG;QACrG,CAAC,CAAC,EAAE,CAAC;IACN,MAAM,aAAa,GAAG,SAAS;QAC9B,CAAC,CAAC;;qDAEiD;QACnD,CAAC,CAAC,EAAE,CAAC;IACN,MAAM,aAAa,GAAG,SAAS;QAC9B,CAAC,CAAC;;;;;;;;;;aAUS;QACX,CAAC,CAAC,EAAE,CAAC;IACN,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sEAgC8D,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAqCnF,gBAAgB,CAAC,MAAM,CAAC;;;;;;;;;;;;;;;;;;;EAmBxB,WAAW;;gBAEG,UAAU,CAAC,WAAW,CAAC,QAAQ,CAAC;;0BAEtB,YAAY;gBACtB,wBAAwB,GAAG,aAAa;EACtD,IAAI;;;;;;;;;mCAS6B,uBAAuB;;;;EAIxD,WAAW,CAAC,EAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAC,CAAC,GAAG,aAAa;;;;;;;;;;;;;;gBAcjE,UAAU,CAAC,WAAW,CAAC,QAAQ,CAAC;;;;;;;;gBAQhC,iBAAiB,GAAG,wBAAwB,CAAC,MAAM,CAAC;;;EAGlE,IAAI;;;;;;;;;;;EAWJ,WAAW,CAAC;QACb,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,uDAAuD;QACrE,WAAW,EAAE,+CAA+C;KAC5D,CAAC;;;gBAGc,UAAU,CAAC,WAAW,CAAC,cAAc,CAAC;;;;;;;;;;;;;;;;;;;;;;gBAsBtC,UAAU,CAAC,WAAW,CAAC,QAAQ,CAAC;;;;gBAIhC,wBAAwB;EACtC,IAAI;;;;;;gBAMU,UAAU,CAAC,WAAW,CAAC,gBAAgB,CAAC;;;;;;mCAMrB,uBAAuB;;;;;;;;;;EAUxD,WAAW,CAAC;QACb,KAAK,EAAE,OAAO;QACd,OAAO,EAAE;;;;aAIG;QACZ,YAAY,EACX,oGAAoG;QACrG,WAAW,EACV,oGAAoG;KACrG,CAAC;CACD,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAAC,MAAwB;IACpE,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CACpC,CAAC,CAAC,EAAE,EAAE,CAAC;QACD,CAAC,CAAC,KAAK;iDACkC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,GAAG;;;;;;EAMrE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACtD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAClC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,KAAK,iBAAiB,CAAC,CAAC,KAAK,KAAK,CACpD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,OAAO;;;;;;;;;;;;;;;;;;;;;;YAsBI,oBAAoB;;;;;;;;;;;;;;;;;;;;;;EAsB9B,UAAU;;;;;;;;;;;;;;;;EAgBV,gCAAgC;;;;;EAKhC,QAAQ,GAAG,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC;CACzC,CAAC;AACF,CAAC"}

package/dist/env-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"env-config.d.ts","sourceRoot":"","sources":["../src/env-config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,MAAM,EAAE,aAAa,EAAC,MAAM,aAAa,CAAC;AAGvD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH;;;;GAIG;AACH,eAAO,MAAM,UAAU,QAAkB,CAAC;AAmL1C;0EAC0E;AAC1E,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,MAAM,GAAG,MAAM,CAEpD;AAED,iDAAiD;AACjD,MAAM,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;AAsDxD;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAC3B,GAAG,GAAE,MAAoB,EACzB,IAAI,GAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAsC,GAC/D,aAAa,CAwDf"}
+{"version":3,"file":"env-config.d.ts","sourceRoot":"","sources":["../src/env-config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,MAAM,EAAE,aAAa,EAAC,MAAM,aAAa,CAAC;AAGvD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH;;;;GAIG;AACH,eAAO,MAAM,UAAU,QAAkB,CAAC;AAqL1C;0EAC0E;AAC1E,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,MAAM,GAAG,MAAM,CAEpD;AAED,iDAAiD;AACjD,MAAM,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;AAsDxD;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAC3B,GAAG,GAAE,MAAoB,EACzB,IAAI,GAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAsC,GAC/D,aAAa,CAwDf"}

package/dist/env-config.js

@@ -52,12 +52,14 @@ const KEY_COERCIONS = {
     // so `DORFL_OBSERVATION_TRIAGE=off|ask|auto` works and a typo FAILS
     // LOUDLY naming the variable + the valid options.
     observationTriage: { enum: ['off', 'ask', 'auto'] },
-    // The merge-question SURFACER gate is a 3-state ENUM coercion (mirrors
-    // `observationTriage`'s shape; SEPARATE axis with a HIGHER default, spec
+    // The merge-question SURFACER gate is a 2-state ENUM coercion (a SEPARATE
+    // axis from `observationTriage` with a HIGHER default, spec
     // `land-time-reverify-and-parallel-merge-ceiling` Story 17 / task
-    // `merge-questions-gate-axis`), so `DORFL_MERGE_QUESTIONS=off|ask|auto`
-    // works and a typo FAILS LOUDLY naming the variable + the valid options.
-    mergeQuestions: { enum: ['off', 'ask', 'auto'] },
+    // `merge-questions-gate-axis`; `auto` removed by task
+    // `wire-merge-questions-into-the-advance-tick`), so
+    // `DORFL_MERGE_QUESTIONS=off|ask` works and a typo (or the retired `auto`)
+    // FAILS LOUDLY naming the variable + the valid options.
+    mergeQuestions: { enum: ['off', 'ask'] },
     // The surface-blockers gate is a BOOLEAN coercion (like `autoBuild`), so
     // `DORFL_SURFACE_BLOCKERS=true|false` works and a typo FAILS LOUDLY.
     surfaceBlockers: 'boolean',

package/dist/env-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"env-config.js","sourceRoot":"","sources":["../src/env-config.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,KAAK,EAAE,YAAY,EAAC,MAAM,YAAY,CAAC;AAE/C;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC;AAU1C;;;;;;;;;;;GAWG;AACH,MAAM,aAAa,GAAqC;IACvD,SAAS,EAAE,SAAS;IACpB,QAAQ,EAAE,SAAS;IACnB,+EAA+E;IAC/E,oEAAoE;IACpE,kDAAkD;IAClD,iBAAiB,EAAE,EAAC,IAAI,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,EAAC;IACjD,uEAAuE;IACvE,yEAAyE;IACzE,kEAAkE;IAClE,wEAAwE;IACxE,yEAAyE;IACzE,cAAc,EAAE,EAAC,IAAI,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,EAAC;IAC9C,yEAAyE;IACzE,qEAAqE;IACrE,eAAe,EAAE,SAAS;IAC1B,2EAA2E;IAC3E,4EAA4E;IAC5E,gCAAgC;IAChC,2EAA2E;IAC3E,uEAAuE;IACvE,yEAAyE;IACzE,0EAA0E;IAC1E,cAAc,EAAE,SAAS;IACzB,qDAAqD;IACrD,uEAAuE;IACvE,yEAAyE;IACzE,0EAA0E;IAC1E,cAAc,EAAE,MAAM;IACtB,WAAW,EAAE,QAAQ;IACrB,UAAU,EAAE,QAAQ;IACpB,cAAc,EAAE,QAAQ;IACxB,aAAa,EAAE,QAAQ;IACvB,WAAW,EAAE,QAAQ;IACrB,iBAAiB,EAAE,QAAQ;IAC3B,WAAW,EAAE,EAAC,IAAI,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,EAAC;IACzC,iFAAiF;IACjF,0EAA0E;IAC1E,8EAA8E;IAC9E,mFAAmF;IACnF,kBAAkB,EAAE,EAAC,IAAI,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,EAAC;IAChD,iFAAiF;IACjF,sEAAsE;IACtE,yEAAyE;IACzE,gFAAgF;IAChF,oEAAoE;IACpE,iFAAiF;IACjF,sFAAsF;IACtF,iBAAiB,EAAE,EAAC,IAAI,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,EAAC;IAC/C,4DAA4D;IAC5D,qEAAqE;IACrE,qEAAqE;IACrE,0BAA0B;IAC1B,6EAA6E;IAC7E,mEAAmE;IACnE,gEAAgE;IAChE,WAAW,EAAE,EAAC,IAAI,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,EAAC;IACzC,4DAA4D;IAC5D,wEAAwE;IACxE,2EAA2E;IAC3E,8EAA8E;IAC9E,0EAA0E;IAC1E,8EAA8E;IAC9E,4EAA4E;IAC5E,+CAA+C;IAC/C,WAAW,EAAE,EAAC,IAAI,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,EAAC;IAC1C,0EAA0E;IAC1E,wFAAwF;IACxF,yEAAyE;IACzE,kEAAkE;IAClE,4EAA4E;IAC5E,8EAA8E;IAC9E,oEAAoE;IACpE,6DAA6D;IAC7D,oBAAoB,EAAE,EAAC,IAAI,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,EAAC;IAClD,+EAA+E;IAC/E,0EAA0E;IAC1E,4EAA4E;IAC5E,2EAA2E;IAC3E,oBAAoB,EAAE,EAAC,IAAI,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,EAAC;IACnD,wEAAwE;IACxE,sEAAsE;IACtE,0EAA0E;IAC1E,oDAAoD;IACpD,IAAI,EAAE,SAAS;IACf,QAAQ,EAAE,QAAQ;IAClB,8EAA8E;IAC9E,+EAA+E;IAC/E,iFAAiF;IACjF,6EAA6E;IAC7E,uEAAuE;IACvE,6EAA6E;IAC7E,+EAA+E;IAC/E,QAAQ,EAAE,QAAQ;IAClB,KAAK,EAAE,QAAQ;IACf,UAAU,EAAE,QAAQ;IACpB,WAAW,EAAE,QAAQ;IACrB,WAAW,EAAE,QAAQ;IACrB,OAAO,EAAE,EAAC,IAAI,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAC;IAC/B,KAAK,EAAE,QAAQ;IACf,WAAW,EAAE,QAAQ;IACrB,8CAA8C;IAC9C,qEAAqE;IACrE,wEAAwE;IACxE,OAAO,EAAE,MAAM;IACf,MAAM,EAAE,MAAM;IACd,MAAM,EAAE,SAAS;IACjB,WAAW,EAAE,QAAQ;IACrB,eAAe,EAAE,QAAQ;IACzB,UAAU,EAAE,SAAS;IACrB,aAAa,EAAE,QAAQ;IACvB,eAAe,EAAE,QAAQ;IACzB,oEAAoE;IACpE,wEAAwE;IACxE,iBAAiB,EAAE,SAAS;IAC5B,wEAAwE;IACxE,mFAAmF;IACnF,4EAA4E;IAC5E,yEAAyE;IACzE,oEAAoE;IACpE,YAAY,EAAE,QAAQ;IACtB,kEAAkE;IAClE,gFAAgF;IAChF,wEAAwE;IACxE,0EAA0E;IAC1E,iEAAiE;IACjE,iEAAiE;IACjE,mBAAmB,EAAE,SAAS;IAC9B,qDAAqD;IACrD,+DAA+D;IAC/D,gFAAgF;IAChF,0EAA0E;IAC1E,6EAA6E;IAC7E,oBAAoB,EAAE,QAAQ;IAC9B,yBAAyB,EAAE,QAAQ;IACnC,kBAAkB,EAAE,QAAQ;IAC5B,+EAA+E;IAC/E,4EAA4E;IAC5E,4DAA4D;IAC5D,+EAA+E;IAC/E,qEAAqE;IACrE,0DAA0D;CAC1D,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,mBAAmB,GAAwC;IAChE,CAAC,UAAU,GAAG,4BAA4B,CAAC,EAAE,SAAS;CACtD,CAAC;AAEF;0EAC0E;AAC1E,MAAM,UAAU,UAAU,CAAC,GAAiB;IAC3C,OAAO,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;AACvC,CAAC;AAKD;;;;GAIG;AACH,SAAS,WAAW,CACnB,OAAe,EACf,GAAW,EACX,QAAkB;IAElB,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,oCAAoC;QACpC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CACd,qBAAqB,OAAO,MAAM,GAAG,KAAK;gBACzC,oBAAoB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAChD,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACZ,CAAC;IACD,QAAQ,QAAQ,EAAE,CAAC;QAClB,KAAK,QAAQ;YACZ,OAAO,GAAG,CAAC;QACZ,KAAK,SAAS;YACb,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;gBACpB,OAAO,IAAI,CAAC;YACb,CAAC;YACD,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;gBACrB,OAAO,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,KAAK,CACd,uBAAuB,OAAO,MAAM,GAAG,gCAAgC,CACvE,CAAC;QACH,KAAK,QAAQ,CAAC,CAAC,CAAC;YACf,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YACtB,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1C,MAAM,IAAI,KAAK,CACd,sBAAsB,OAAO,MAAM,GAAG,8BAA8B,CACpE,CAAC;YACH,CAAC;YACD,OAAO,CAAC,CAAC;QACV,CAAC;QACD,KAAK,MAAM;YACV,0EAA0E;YAC1E,8DAA8D;YAC9D,OAAO,GAAG;iBACR,KAAK,CAAC,GAAG,CAAC;iBACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;iBACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC5B,CAAC;AACF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAC3B,MAAc,OAAO,CAAC,GAAG,EACzB,OAAkC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;IAEjE,2EAA2E;IAC3E,8EAA8E;IAC9E,yEAAyE;IACzE,MAAM,aAAa,GAAG,GAAG,CAAC,UAAU,GAAG,UAAU,CAAC,CAAC;IACnD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,CACH,+BAA+B,UAAU,gCAAgC;YACxE,sEAAsE;YACtE,sDAAsD;YACtD,GAAG,UAAU,+BAA+B;YAC5C,CAAC,aAAa,KAAK,MAAM;gBACxB,CAAC,CAAC,6CAA6C;gBAC/C,CAAC,CAAC,EAAE,CAAC,CACP,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAkB,EAAE,CAAC;IACpC,6EAA6E;IAC7E,oEAAoE;IACpE,4EAA4E;IAC5E,uEAAuE;IACvE,4EAA4E;IAC5E,wEAAwE;IACxE,wEAAwE;IACxE,uBAAuB;IACvB,MAAM,qBAAqB,GAAkC,EAAE,CAAC;IAChE,KAAK,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACvE,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;QACzB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACvB,SAAS;QACV,CAAC;QACD,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAY,CAAC;QAC7D,IAAI,OAAO,KAAK,UAAU,GAAG,4BAA4B,EAAE,CAAC;YAC3D,qBAAqB,CAAC,SAAS,GAAG,KAAK,CAAC;QACzC,CAAC;IACF,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnD,SAAS,CAAC,cAAc,GAAG;YAC1B,SAAS,EAAE,qBAAqB,CAAC,SAAS,IAAI,KAAK;SACnD,CAAC;IACH,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAAqB,EAAE,CAAC;QAClE,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC5B,SAAS;QACV,CAAC;QACD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;QACzB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACvB,SAAS;QACV,CAAC;QACD,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QACpD,2EAA2E;QAC1E,SAAqC,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC;IACvD,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC"}
+{"version":3,"file":"env-config.js","sourceRoot":"","sources":["../src/env-config.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,KAAK,EAAE,YAAY,EAAC,MAAM,YAAY,CAAC;AAE/C;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC;AAU1C;;;;;;;;;;;GAWG;AACH,MAAM,aAAa,GAAqC;IACvD,SAAS,EAAE,SAAS;IACpB,QAAQ,EAAE,SAAS;IACnB,+EAA+E;IAC/E,oEAAoE;IACpE,kDAAkD;IAClD,iBAAiB,EAAE,EAAC,IAAI,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,EAAC;IACjD,0EAA0E;IAC1E,4DAA4D;IAC5D,kEAAkE;IAClE,sDAAsD;IACtD,oDAAoD;IACpD,2EAA2E;IAC3E,wDAAwD;IACxD,cAAc,EAAE,EAAC,IAAI,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,EAAC;IACtC,yEAAyE;IACzE,qEAAqE;IACrE,eAAe,EAAE,SAAS;IAC1B,2EAA2E;IAC3E,4EAA4E;IAC5E,gCAAgC;IAChC,2EAA2E;IAC3E,uEAAuE;IACvE,yEAAyE;IACzE,0EAA0E;IAC1E,cAAc,EAAE,SAAS;IACzB,qDAAqD;IACrD,uEAAuE;IACvE,yEAAyE;IACzE,0EAA0E;IAC1E,cAAc,EAAE,MAAM;IACtB,WAAW,EAAE,QAAQ;IACrB,UAAU,EAAE,QAAQ;IACpB,cAAc,EAAE,QAAQ;IACxB,aAAa,EAAE,QAAQ;IACvB,WAAW,EAAE,QAAQ;IACrB,iBAAiB,EAAE,QAAQ;IAC3B,WAAW,EAAE,EAAC,IAAI,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,EAAC;IACzC,iFAAiF;IACjF,0EAA0E;IAC1E,8EAA8E;IAC9E,mFAAmF;IACnF,kBAAkB,EAAE,EAAC,IAAI,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,EAAC;IAChD,iFAAiF;IACjF,sEAAsE;IACtE,yEAAyE;IACzE,gFAAgF;IAChF,oEAAoE;IACpE,iFAAiF;IACjF,sFAAsF;IACtF,iBAAiB,EAAE,EAAC,IAAI,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,EAAC;IAC/C,4DAA4D;IAC5D,qEAAqE;IACrE,qEAAqE;IACrE,0BAA0B;IAC1B,6EAA6E;IAC7E,mEAAmE;IACnE,gEAAgE;IAChE,WAAW,EAAE,EAAC,IAAI,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,EAAC;IACzC,4DAA4D;IAC5D,wEAAwE;IACxE,2EAA2E;IAC3E,8EAA8E;IAC9E,0EAA0E;IAC1E,8EAA8E;IAC9E,4EAA4E;IAC5E,+CAA+C;IAC/C,WAAW,EAAE,EAAC,IAAI,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,EAAC;IAC1C,0EAA0E;IAC1E,wFAAwF;IACxF,yEAAyE;IACzE,kEAAkE;IAClE,4EAA4E;IAC5E,8EAA8E;IAC9E,oEAAoE;IACpE,6DAA6D;IAC7D,oBAAoB,EAAE,EAAC,IAAI,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,EAAC;IAClD,+EAA+E;IAC/E,0EAA0E;IAC1E,4EAA4E;IAC5E,2EAA2E;IAC3E,oBAAoB,EAAE,EAAC,IAAI,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,EAAC;IACnD,wEAAwE;IACxE,sEAAsE;IACtE,0EAA0E;IAC1E,oDAAoD;IACpD,IAAI,EAAE,SAAS;IACf,QAAQ,EAAE,QAAQ;IAClB,8EAA8E;IAC9E,+EAA+E;IAC/E,iFAAiF;IACjF,6EAA6E;IAC7E,uEAAuE;IACvE,6EAA6E;IAC7E,+EAA+E;IAC/E,QAAQ,EAAE,QAAQ;IAClB,KAAK,EAAE,QAAQ;IACf,UAAU,EAAE,QAAQ;IACpB,WAAW,EAAE,QAAQ;IACrB,WAAW,EAAE,QAAQ;IACrB,OAAO,EAAE,EAAC,IAAI,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAC;IAC/B,KAAK,EAAE,QAAQ;IACf,WAAW,EAAE,QAAQ;IACrB,8CAA8C;IAC9C,qEAAqE;IACrE,wEAAwE;IACxE,OAAO,EAAE,MAAM;IACf,MAAM,EAAE,MAAM;IACd,MAAM,EAAE,SAAS;IACjB,WAAW,EAAE,QAAQ;IACrB,eAAe,EAAE,QAAQ;IACzB,UAAU,EAAE,SAAS;IACrB,aAAa,EAAE,QAAQ;IACvB,eAAe,EAAE,QAAQ;IACzB,oEAAoE;IACpE,wEAAwE;IACxE,iBAAiB,EAAE,SAAS;IAC5B,wEAAwE;IACxE,mFAAmF;IACnF,4EAA4E;IAC5E,yEAAyE;IACzE,oEAAoE;IACpE,YAAY,EAAE,QAAQ;IACtB,kEAAkE;IAClE,gFAAgF;IAChF,wEAAwE;IACxE,0EAA0E;IAC1E,iEAAiE;IACjE,iEAAiE;IACjE,mBAAmB,EAAE,SAAS;IAC9B,qDAAqD;IACrD,+DAA+D;IAC/D,gFAAgF;IAChF,0EAA0E;IAC1E,6EAA6E;IAC7E,oBAAoB,EAAE,QAAQ;IAC9B,yBAAyB,EAAE,QAAQ;IACnC,kBAAkB,EAAE,QAAQ;IAC5B,+EAA+E;IAC/E,4EAA4E;IAC5E,4DAA4D;IAC5D,+EAA+E;IAC/E,qEAAqE;IACrE,0DAA0D;CAC1D,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,mBAAmB,GAAwC;IAChE,CAAC,UAAU,GAAG,4BAA4B,CAAC,EAAE,SAAS;CACtD,CAAC;AAEF;0EAC0E;AAC1E,MAAM,UAAU,UAAU,CAAC,GAAiB;IAC3C,OAAO,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;AACvC,CAAC;AAKD;;;;GAIG;AACH,SAAS,WAAW,CACnB,OAAe,EACf,GAAW,EACX,QAAkB;IAElB,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,oCAAoC;QACpC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CACd,qBAAqB,OAAO,MAAM,GAAG,KAAK;gBACzC,oBAAoB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAChD,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACZ,CAAC;IACD,QAAQ,QAAQ,EAAE,CAAC;QAClB,KAAK,QAAQ;YACZ,OAAO,GAAG,CAAC;QACZ,KAAK,SAAS;YACb,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;gBACpB,OAAO,IAAI,CAAC;YACb,CAAC;YACD,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;gBACrB,OAAO,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,KAAK,CACd,uBAAuB,OAAO,MAAM,GAAG,gCAAgC,CACvE,CAAC;QACH,KAAK,QAAQ,CAAC,CAAC,CAAC;YACf,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YACtB,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1C,MAAM,IAAI,KAAK,CACd,sBAAsB,OAAO,MAAM,GAAG,8BAA8B,CACpE,CAAC;YACH,CAAC;YACD,OAAO,CAAC,CAAC;QACV,CAAC;QACD,KAAK,MAAM;YACV,0EAA0E;YAC1E,8DAA8D;YAC9D,OAAO,GAAG;iBACR,KAAK,CAAC,GAAG,CAAC;iBACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;iBACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC5B,CAAC;AACF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAC3B,MAAc,OAAO,CAAC,GAAG,EACzB,OAAkC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;IAEjE,2EAA2E;IAC3E,8EAA8E;IAC9E,yEAAyE;IACzE,MAAM,aAAa,GAAG,GAAG,CAAC,UAAU,GAAG,UAAU,CAAC,CAAC;IACnD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,CACH,+BAA+B,UAAU,gCAAgC;YACxE,sEAAsE;YACtE,sDAAsD;YACtD,GAAG,UAAU,+BAA+B;YAC5C,CAAC,aAAa,KAAK,MAAM;gBACxB,CAAC,CAAC,6CAA6C;gBAC/C,CAAC,CAAC,EAAE,CAAC,CACP,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAkB,EAAE,CAAC;IACpC,6EAA6E;IAC7E,oEAAoE;IACpE,4EAA4E;IAC5E,uEAAuE;IACvE,4EAA4E;IAC5E,wEAAwE;IACxE,wEAAwE;IACxE,uBAAuB;IACvB,MAAM,qBAAqB,GAAkC,EAAE,CAAC;IAChE,KAAK,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACvE,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;QACzB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACvB,SAAS;QACV,CAAC;QACD,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAY,CAAC;QAC7D,IAAI,OAAO,KAAK,UAAU,GAAG,4BAA4B,EAAE,CAAC;YAC3D,qBAAqB,CAAC,SAAS,GAAG,KAAK,CAAC;QACzC,CAAC;IACF,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnD,SAAS,CAAC,cAAc,GAAG;YAC1B,SAAS,EAAE,qBAAqB,CAAC,SAAS,IAAI,KAAK;SACnD,CAAC;IACH,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAAqB,EAAE,CAAC;QAClE,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC5B,SAAS;QACV,CAAC;QACD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;QACzB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACvB,SAAS;QACV,CAAC;QACD,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QACpD,2EAA2E;QAC1E,SAAqC,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC;IACvD,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC"}

package/dist/frontmatter.d.ts

@@ -137,6 +137,58 @@ export interface Frontmatter {
         testFirst: boolean | undefined;
     };
 }
+/**
+ * The read half of {@link quoteYamlScalar}, for the frontmatter readers that
+ * live outside this module (the `title:` readers in `tasking.ts` and
+ * `integration-core.ts`), so a quoted title reads back the same everywhere.
+ */
+export declare function unquoteYamlScalar(value: string): string;
+/**
+ * Raised when a runner-side renderer is handed a value it cannot write safely
+ * into frontmatter, or when the rendered document does not read back the keys
+ * the runner meant to write (task
+ * `intake-frontmatter-title-injection-strips-origin-stamp`).
+ */
+export declare class FrontmatterRenderError extends Error {
+    constructor(message: string);
+}
+/**
+ * Why `value` cannot be a one-line frontmatter scalar, or `undefined` when it
+ * can. The verdict boundaries (intake, ADR mint) use it to refuse an
+ * agent-drafted title before anything is rendered.
+ */
+export declare function singleLineScalarProblem(value: string): string | undefined;
+/**
+ * THE shared quoter for agent-supplied text a runner writes into frontmatter
+ * (task `intake-frontmatter-title-injection-strips-origin-stamp`). Returns a
+ * YAML single-quoted scalar (`'...'`, an embedded `'` doubled), which is valid
+ * YAML for every one-line string and reads back verbatim through
+ * {@link unquote} (and so {@link readFrontmatterField}). A single-quoted scalar
+ * has no escape for a line break, so a value that is not one line, or holds any
+ * control character, THROWS {@link FrontmatterRenderError}: callers must reject
+ * such a value at their verdict boundary, and this throw is the backstop.
+ */
+export declare function quoteYamlScalar(value: string): string;
+/**
+ * The post-render RE-PARSE assertion (task
+ * `intake-frontmatter-title-injection-strips-origin-stamp`). A runner renders a
+ * document, then calls this with the frontmatter values it MEANT to write;
+ * any disagreement THROWS {@link FrontmatterRenderError}, so a document whose
+ * runner-owned keys were displaced (a closed-early fence demoting the
+ * `originTrust` stamp into the body, a smuggled duplicate `slug:`) is never
+ * emitted.
+ *
+ * For each `expected` entry: a string value means the key must appear EXACTLY
+ * ONCE as a top-level key and read back (via {@link unquote}) equal to it;
+ * `undefined` means the key must be ABSENT. The typed keys that
+ * {@link parseFrontmatter} models (`slug`, `issue`, `origin`, `originTrust`,
+ * `humanOnly`, `needsAnswers`) are ALSO cross-checked through that parser, the
+ * same reader the rest of dorfl uses. With `exact`, the frontmatter may hold no
+ * top-level key outside `expected` (for a document the runner renders whole).
+ */
+export declare function assertFrontmatterFields(content: string, expected: Readonly<Record<string, string | undefined>>, options?: {
+    exact?: boolean;
+}): void;
 /**
  * Set (or clear) the top-level `needsAnswers:` frontmatter marker on a `work/`
  * markdown document, returning the new content. Used by the tasker review→edit

package/dist/frontmatter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"frontmatter.d.ts","sourceRoot":"","sources":["../src/frontmatter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,MAAM,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;AACvC,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,WAAW,CAAC;AAElD,MAAM,WAAW,WAAW;IAC3B;;;;;OAKG;IACH,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B;;;;;OAKG;IACH,WAAW,EAAE,WAAW,GAAG,SAAS,CAAC;IACrC,qDAAqD;IACrD,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB;;;;;;;;;;OAUG;IACH,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B;;;;;OAKG;IACH,SAAS,EAAE,OAAO,GAAG,SAAS,CAAC;IAC/B;;;;;OAKG;IACH,YAAY,EAAE,OAAO,GAAG,SAAS,CAAC;IAClC;;;;;;;;;;;;;;;OAeG;IACH,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,iEAAiE;IACjE,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB;;;;;OAKG;IACH,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB;;;;;;;;;;;;;;;OAeG;IACH,cAAc,EAAE;QAAC,SAAS,EAAE,OAAO,GAAG,SAAS,CAAA;KAAC,CAAC;CACjD;AA6FD;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,CAE7E;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,oBAAoB,CACnC,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,GACX,MAAM,CAqCR;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CACnC,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,GACT,MAAM,GAAG,SAAS,CAcpB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,eAAe,CAC9B,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,GAAG,aAAa,CAAC,EACnD,aAAa,EAAE,MAAM,GACnB,MAAM,CAYR;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,WAAW,CAiH7D;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,mBAAmB,CAClC,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,GAC9C;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAC,GAAG;IAAC,GAAG,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAC,GAAG,SAAS,CAQzE"}
+{"version":3,"file":"frontmatter.d.ts","sourceRoot":"","sources":["../src/frontmatter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,MAAM,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;AACvC,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,WAAW,CAAC;AAElD,MAAM,WAAW,WAAW;IAC3B;;;;;OAKG;IACH,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B;;;;;OAKG;IACH,WAAW,EAAE,WAAW,GAAG,SAAS,CAAC;IACrC,qDAAqD;IACrD,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB;;;;;;;;;;OAUG;IACH,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B;;;;;OAKG;IACH,SAAS,EAAE,OAAO,GAAG,SAAS,CAAC;IAC/B;;;;;OAKG;IACH,YAAY,EAAE,OAAO,GAAG,SAAS,CAAC;IAClC;;;;;;;;;;;;;;;OAeG;IACH,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,iEAAiE;IACjE,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB;;;;;OAKG;IACH,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB;;;;;;;;;;;;;;;OAeG;IACH,cAAc,EAAE;QAAC,SAAS,EAAE,OAAO,GAAG,SAAS,CAAA;KAAC,CAAC;CACjD;AAwCD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED;;;;;GAKG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;gBACpC,OAAO,EAAE,MAAM;CAI3B;AAUD;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAIzE;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAQrD;AAKD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,uBAAuB,CACtC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,EACtD,OAAO,GAAE;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAM,GAC7B,IAAI,CA4DN;AA6DD;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,CAE7E;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,oBAAoB,CACnC,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,GACX,MAAM,CAqCR;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CACnC,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,GACT,MAAM,GAAG,SAAS,CAcpB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,eAAe,CAC9B,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,GAAG,aAAa,CAAC,EACnD,aAAa,EAAE,MAAM,GACnB,MAAM,CAYR;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,WAAW,CAiH7D;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,mBAAmB,CAClC,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,GAC9C;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAC,GAAG;IAAC,GAAG,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAC,GAAG,SAAS,CAQzE"}