dorfl 0.8.0 → 0.10.0

package/dist/intake-trigger-template.js

@@ -6,9 +6,11 @@
  * STRUCTURALLY VALIDATES it, mirroring the snapshot-assertion style of
  * `advance-lifecycle-template.ts` / `advance-ci-template.ts` (the package depends on
  * NO YAML lib, so the checks are presence/shape assertions over the raw text). It
- * ALSO carries the PURE author-trust → per-outcome-flags DERIVATION
- * ({@link deriveIntakeFlags}) — CI's merge-vs-propose POLICY, the load-bearing
- * testable logic the workflow encodes at runtime.
+ * ALSO carries the PURE intake-flags DERIVATION ({@link deriveIntakeFlags}) —
+ * CI's merge-vs-propose POLICY, the load-bearing testable logic the workflow
+ * encodes at runtime. The DOCUMENT mode is the resolved `intakeIntegration`
+ * (operator/config); author-trust drives ONLY the `--origin-trust` stamp +
+ * placement, never the mode.
  *
  * SCOPE FENCE (spec Out-of-Scope): the issue→artifact TRANSFORM engine is
  * `issue-intake`'s (`intake <N>` + its four-outcome dispatch + the per-outcome
@@ -27,14 +29,23 @@
  *     (re-)evaluation; an EDITED comment is NOT a trigger (the ID-based
  *     `seen=<ids>` watermark suffices). The "post a NEW comment to signal an edit"
  *     convention is documented in the workflow so a human knows to re-trigger.
- *   - AUTHOR-TRUST → per-outcome FLAGS (Decision 1, {@link deriveIntakeFlags}): an
- *     UNTRUSTED author (`author_association` not in OWNER/MEMBER/COLLABORATOR)
- *     forces `--propose-task` REGARDLESS of the `autoBuild` gate, while
- *     `--merge-spec` stays allowed (a human still tasks a spec before anything
- *     autonomous acts — the checkpoint is intact). A TRUSTED author gets the plain
- *     gate-derived mode for both. The fully-gateless "all gates on + merge
- *     everywhere" path is a LOUD, NON-DEFAULT opt-in — the default is conservative
- *     (propose / human-in-the-loop).
+ *   - INTAKE-INTEGRATION → the file-emit MODE; AUTHOR-TRUST → PLACEMENT + the
+ *     STAMP (ADR `untrusted-origin-carries-via-stamp-not-forced-staging`; spec
+ *     `intake-integration-knob-and-specs-land-in-proposed-rename`; {@link
+ *     deriveIntakeFlags}): the intake DOCUMENT mode (merge-vs-propose for a
+ *     task/spec FILE) is the resolved `intakeIntegration ?? integration` — an
+ *     operator/config choice, a SINGLE value applied to BOTH the task and the spec
+ *     document, DECOUPLED from the autonomy gates. `autoBuild`/`autoTask` no
+ *     longer feed the document mode (they mean ONLY "may an agent act
+ *     autonomously"). Author-trust feeds exactly (1) the `--origin-trust` STAMP
+ *     (`author_association` not in OWNER/MEMBER/COLLABORATOR ⇒ `untrusted`) and
+ *     (2) — via that stamp, read by `intake`'s dispatch — which PLACEMENT default
+ *     (`untrusted*LandIn` vs `*LandIn`) the emitted document lands in. Untrusted
+ *     safety is the CARRIED stamp (it forces the BUILD transition to a code PR)
+ *     plus the placement default, NOT a forced document PR. A document therefore
+ *     merges to `main` regardless of who filed the issue OR whether the gates are
+ *     on; whether it is reviewed-as-a-PR is purely the `intakeIntegration`
+ *     operator config, not a trust or autonomy consequence.
  *   - INSERTION POINT E (the issue-thread review surface): the review verdict over
  *     intake's generated specs/tasks is surfaced into the ISSUE THREAD via the
  *     `IssueProvider.postIssueComment` seam (issue thread, by NUMBER — NOT the PR
@@ -85,38 +96,49 @@ export const TRUSTED_AUTHOR_ASSOCIATIONS = [
     'COLLABORATOR',
 ];
 /**
- * DERIVE the per-outcome merge-vs-propose flags from the gate state COMPOSED with
- * author-trust — CI's merge-vs-propose POLICY (spec "merge-vs-propose POLICY" +
- * "Composed with AUTHOR-TRUST"; task Decision 1). This is the load-bearing pure
- * logic the workflow encodes at runtime (it reads `author_association` off the
- * event payload and sets the flags accordingly):
+ * DERIVE the per-outcome file-emit modes + the origin-trust stamp — CI's intake
+ * POLICY (ADR `untrusted-origin-carries-via-stamp-not-forced-staging`; spec
+ * `intake-integration-knob-and-specs-land-in-proposed-rename` US #1/#2). This is
+ * the load-bearing pure logic the workflow encodes at runtime (it reads the
+ * resolved `intakeIntegration ?? integration` via `dorfl config --json` for the
+ * MODE, and `author_association` off the event payload for the STAMP):
  *
- *   - **SPEC** — gate-derived ONLY (author-trust does NOT bite): `--merge-spec` iff
- *     `autoTask` is OFF (a human must task the spec before anything autonomous
- *     acts on it — the human checkpoint stays AHEAD even for an untrusted author),
- *     else `--propose-spec`.
- *   - **TASK** — `--propose-task` iff (`autoBuild` ON) OR (author UNTRUSTED);
- *     `--merge-task` ONLY iff (`autoBuild` OFF AND author TRUSTED). An untrusted
- *     author can never auto-merge a task from a public-front-door issue.
+ *   - **DOCUMENT mode (spec = task)** — the resolved `intakeIntegration` value, a
+ *     SINGLE mode applied to BOTH the spec and task document: `merge` ⇒
+ *     `--merge-spec` + `--merge-task`, `propose` ⇒ `--propose-spec` +
+ *     `--propose-task`. DECOUPLED from the autonomy gates: `autoBuild`/`autoTask`
+ *     no longer bite the document mode (they mean ONLY "may an agent act
+ *     autonomously"). So a repo with `autoBuild: true`/`autoTask: true` +
+ *     `intakeIntegration` (or `integration`) `merge` MERGES intake documents to
+ *     `main` — previously impossible (the gates forced a document PR).
+ *   - **ORIGIN-TRUST stamp** — the ONLY thing author-trust drives: `untrusted`
+ *     iff the author is not trusted, else `trusted`. `intake`'s dispatch reads
+ *     this stamp to select the untrusted-side PLACEMENT default and to force the
+ *     later BUILD transition of an untrusted task to a code PR.
  *
- * So the only way to `--merge-task` is a TRUSTED author with `autoBuild` OFF —
- * and the fully-gateless "merge everything" path additionally needs `autoTask`
- * OFF; both gates off + a trusted author is the LOUD, NON-DEFAULT opt-in. The
- * conservative case (untrusted author, or any gate on) keeps a human in the loop.
+ * So author-trust changes ONLY (a) which folder the document lands in (via the
+ * stamp → `untrusted*LandIn`) and (b) the carried stamp — NEVER whether the
+ * DOCUMENT is a PR. Whether a document merges or is proposed is now purely the
+ * `intakeIntegration` operator config, independent of the gates AND of who filed
+ * the issue. The untrusted safety is the stamp (the build-time code PR) plus the
+ * placement default, not a forced document PR (the ADR's core move).
  */
 export function deriveIntakeFlags(options) {
-    const { gate, authorTrusted } = options;
-    // SPEC: gate-derived only — a human-tasks-it checkpoint stays ahead regardless
-    // of author-trust, so an untrusted author may still --merge-spec.
-    const spec = gate.autoTask ? 'propose' : 'merge';
-    // TASK: propose if the agent will auto-build it (gate ON) OR the author is
-    // untrusted; merge ONLY when both are safe (gate OFF AND author trusted).
-    const task = gate.autoBuild || !authorTrusted ? 'propose' : 'merge';
-    // ORIGIN-TRUST stamp (task `untrusted-origin-forces-build-propose`): the SAME
-    // author-trust verdict, collapsed to the wire value `intake` stamps onto the
-    // emitted artifact. Derived HERE — next to the integration flags, off the SAME
-    // `authorTrusted` input — so the stamp and the task/spec modes cannot desync.
-    // It is NOT a re-resolution of trust (CI already resolved it); it is the verdict
+    const { intakeIntegration, authorTrusted } = options;
+    // DOCUMENT mode: the resolved `intakeIntegration ?? integration` (operator/config),
+    // a SINGLE value applied to BOTH the spec and the task document. Decoupled from
+    // the autonomy gates (ADR untrusted-origin-carries-via-stamp-not-forced-staging;
+    // spec intake-integration-knob-and-specs-land-in-proposed-rename): autoBuild/
+    // autoTask no longer bite the mode, and author-trust never did. The two axes are
+    // kept only because intake's CLI takes --merge-spec/--merge-task separately.
+    const spec = intakeIntegration;
+    const task = intakeIntegration;
+    // ORIGIN-TRUST stamp — the SOLE thing author-trust drives on the wire (task
+    // `untrusted-origin-forces-build-propose`): the author-trust verdict collapsed
+    // to the value `intake` stamps onto the emitted artifact. `intake`'s dispatch
+    // reads it to (1) select the untrusted-side placement default (`untrusted*LandIn`)
+    // and (2) force the later BUILD transition of an untrusted task to a code PR. It
+    // is NOT a re-resolution of trust (CI already resolved it); it is the verdict
     // being CARRIED so it survives the spec/task merge boundary (the becomes-code
     // checkpoint is not laundered when the file lands on main).
     const originTrust = authorTrusted
@@ -147,9 +169,13 @@ export function isAuthorTrusted(authorAssociation) {
  * shape itself is config-independent.
  *
  * The per-outcome FLAGS are DERIVED AT RUNTIME by a `bash` step that mirrors
- * {@link deriveIntakeFlags}: it reads the gate env block + the event's
- * `author_association` and sets `--merge-spec`/`--propose-spec` +
- * `--merge-task`/`--propose-task` accordingly. The same rule that
+ * {@link deriveIntakeFlags}: it reads the resolved `intakeIntegration ??
+ * integration` via `dorfl config --json` to set the (config-derived) DOCUMENT
+ * mode `--merge-spec`/`--propose-spec` + `--merge-task`/`--propose-task` (a SINGLE
+ * mode applied to both), and the event's `author_association` to set ONLY the
+ * `--origin-trust` STAMP (which carries the placement + build-PR consequence). The
+ * autonomy gates (`autoBuild`/`autoTask`) are NOT read for the document mode (they
+ * mean only "may an agent act autonomously"). The same rule that
  * {@link deriveIntakeFlags} unit-tests is what the workflow executes — they cannot
  * desync because the test asserts the SHELL derivation matches the function.
  */
@@ -180,15 +206,22 @@ export function generateIntakeWorkflow(config) {
 # re-evaluation (a fresh id the watermark catches). There is NO edit-detection /
 # \`updated_at\` / body-hash tracking.
 #
-# AUTHOR-TRUST → per-outcome FLAGS (the merge-vs-propose POLICY): because ANYBODY
-# can file an issue, the merge decision composes with WHO authored it. An UNTRUSTED
-# author (\`author_association\` not OWNER/MEMBER/COLLABORATOR) forces
-# \`--propose-task\` REGARDLESS of the \`autoBuild\` gate — a task from a public
-# front-door issue can never auto-merge — while \`--merge-spec\` stays allowed (a
-# human must still task a spec before anything autonomous acts on it, so the human
-# checkpoint is intact). A TRUSTED author gets the plain gate-derived mode. The
-# fully-gateless "merge everything" path (both gates off + a trusted author) is a
-# LOUD, NON-DEFAULT opt-in; the default is conservative (propose).
+# THE DOCUMENT MODE is \`intakeIntegration\`; AUTHOR-TRUST → PLACEMENT + the STAMP:
+# the intake DOCUMENT merge-vs-propose mode is the resolved \`intakeIntegration ??
+# integration\` (an operator/config choice, a SINGLE value applied to BOTH the task
+# and spec document), DECOUPLED from the autonomy gates (spec
+# intake-integration-knob-and-specs-land-in-proposed-rename; ADR
+# untrusted-origin-carries-via-stamp-not-forced-staging). \`autoBuild\`/\`autoTask\`
+# no longer decide the document mode (they mean only "may an agent act
+# autonomously"). Because ANYBODY can file an issue, WHO authored it still matters —
+# but author-trust drives only (1) the \`--origin-trust\` STAMP on the emitted
+# document and (2), via that stamp read by \`intake\`'s dispatch, which PLACEMENT
+# default the document lands in. So an untrusted author's task DOCUMENT MERGES to
+# \`main\` just like a trusted one when \`intakeIntegration\` is \`merge\`; the
+# untrusted safety is the CARRIED stamp (it forces the later BUILD to a code PR)
+# plus the placement default, not a forced document PR. "Merge everything" is
+# \`intakeIntegration: merge\` (or \`integration: merge\`), independent of the gates
+# AND of who filed the issue — so a repo can have autonomy AND merged documents.
 #
 # CI runs IN-PLACE (the CI container IS the isolation): NO --isolated/--remote/
 # registry (laptop-only affordances). The PER-ISSUE concurrency group below
@@ -234,23 +267,25 @@ permissions:
   pull-requests: write
   issues: write
 
-env:
-  # ── The engine GATE FAMILY, surfaced as the DORFL_* env block ─────────
-  # CI is NOT a special policy surface (ADR ci-config-policy-and-gate-family §5):
-  # it runs the SAME engine gates, resolved through flag > env > per-repo > global
-  # > default. The SAME dorfl.json the laptop uses applies here; this env
-  # block is the optional CI-only override. Change behaviour by editing these
-  # values (or a GitHub repo variable / dorfl.json key) — NOT by re-running
-  # install-ci (ADR §6: install-ci is one-time).
-  #
-  # \`intake\` itself is GATE-FREE (the explicit invocation is its own
-  # authorization), so these gates do NOT block it — CI READS them to DERIVE the
-  # per-outcome merge-vs-propose flags below (the merge-vs-propose POLICY). CALM
-  # DEFAULTS: both off ⇒ the next step is a HUMAN, so the gate-derived mode is the
-  # permissive merge side; author-trust then forces propose for a task from an
-  # untrusted author.
-  DORFL_AUTO_BUILD: 'false' # gate: will an agent auto-build the emitted task next?
-  DORFL_AUTO_TASK: 'false' # gate: will an agent auto-task the emitted spec next?
+# ── The intake DOCUMENT mode is resolved FROM CONFIG, not carried here ───────
+# CI is NOT a special policy surface (ADR ci-config-policy-and-gate-family §5):
+# it runs the SAME engine config, resolved through flag > env > per-repo > global
+# > default. The SAME dorfl.json the laptop uses applies here. This workflow emits
+# NO DORFL_AUTO_BUILD / DORFL_AUTO_TASK line (ADR
+# untrusted-origin-carries-via-stamp-not-forced-staging: hardcoding them here made
+# the env layer OUTRANK the committed dorfl.json — the shadowing bug). So the env
+# layer carries NO config default; the policy step below READS the resolved intake
+# DOCUMENT mode \`intakeIntegration ?? integration\` via \`dorfl config --json\` (the
+# mechanism \`advance\` already uses), so your committed dorfl.json wins (then the
+# global config, then the built-in default \`propose\`). To land intake documents on
+# main, set \`intakeIntegration: merge\` (or \`integration: merge\`) in dorfl.json
+# (applies everywhere) — NOT by re-running install-ci (ADR §6: install-ci is
+# one-time). The autonomy gates \`autoBuild\`/\`autoTask\` are DECOUPLED from the
+# document mode (spec intake-integration-knob-and-specs-land-in-proposed-rename):
+# they gate autonomy only and are NOT read here. \`intake\` itself is GATE-FREE (the
+# explicit invocation is its own authorization); CI READS only the resolved
+# \`intakeIntegration\`/\`integration\` to DERIVE the merge-vs-propose document flags
+# below (the merge-vs-propose POLICY).
 
 jobs:
   intake:
@@ -265,16 +300,23 @@ jobs:
           fetch-depth: 0
       - uses: ./.github/actions/dorfl-setup${setupWith}
 
-      - name: derive the per-outcome merge-vs-propose flags (gate × author-trust)
+      - name: derive the intake DOCUMENT mode (intakeIntegration) + the origin-trust stamp (author-trust)
         id: policy
-        # The merge-vs-propose POLICY, executed at runtime — the SAME rule
+        # The intake POLICY, executed at runtime — the SAME rule
         # \`deriveIntakeFlags\` unit-tests (they cannot desync; the test asserts this
-        # shell matches the function):
-        #   * SPEC — gate-derived ONLY: --merge-spec iff autoTask OFF (a human
-        #            tasks it before anything autonomous acts — the checkpoint
-        #            stays ahead even for an UNTRUSTED author), else --propose-spec.
-        #   * TASK  — --propose-task iff (autoBuild ON) OR (author UNTRUSTED);
-        #            --merge-task ONLY iff (autoBuild OFF AND author TRUSTED).
+        # shell matches the function). The DOCUMENT mode is the resolved
+        # \`intakeIntegration ?? integration\` (operator/config), DECOUPLED from the
+        # autonomy gates; author-trust drives ONLY the stamp + placement (ADR
+        # untrusted-origin-carries-via-stamp-not-forced-staging; spec
+        # intake-integration-knob-and-specs-land-in-proposed-rename):
+        #   * DOCUMENT mode (spec = task) — config-derived: --merge-* iff the
+        #            resolved intakeIntegration is merge, else --propose-*. A SINGLE
+        #            value applied to BOTH the spec and task document. autoBuild/
+        #            autoTask are NOT read (they gate autonomy only).
+        #   * ORIGIN-TRUST stamp — the ONLY thing author-trust drives: --origin-trust
+        #            untrusted iff the author is not OWNER/MEMBER/COLLABORATOR, which
+        #            \`intake\`'s dispatch reads to select the untrusted PLACEMENT
+        #            default and to force the later BUILD to a code PR.
         # author_association comes from the COMMENT on an \`issue_comment\` event,
         # else the ISSUE on an \`issues\` event — read straight off the payload, no
         # extra API call.
@@ -283,37 +325,53 @@ jobs:
         run: |
           set -euo pipefail
 
-          # SPEC flag: gate-derived only (author-trust does NOT bite a spec).
-          if [ "\${DORFL_AUTO_TASK}" = "true" ]; then
-            spec_flag="--propose-spec"
-          else
+          # Read the RESOLVED intake DOCUMENT mode from the committed config via
+          # \`dorfl config --json\` (the mechanism \`advance\` already uses), NOT a
+          # hardcoded DORFL_* env (ADR
+          # untrusted-origin-carries-via-stamp-not-forced-staging: an env default
+          # would OUTRANK dorfl.json — the shadowing bug). In-place, so the
+          # resolution chain reads THIS repo's dorfl.json exactly like the laptop.
+          # \`intakeIntegration\` is OPTIONAL (unset ⇒ falls back to \`integration\`),
+          # so read \`.intakeIntegration // .integration\` in ONE jq expression — the
+          # shell twin of the \`intakeIntegration ?? integration\` the CLI applies.
+          # The autonomy gates (autoBuild/autoTask) are DECOUPLED from the document
+          # mode (spec intake-integration-knob-and-specs-land-in-proposed-rename):
+          # they gate autonomy only and are NOT read here.
+          config_json="$(dorfl config --json)"
+          intake_integration="$(echo "\${config_json}" | jq -r '.intakeIntegration // .integration')"
+
+          # DOCUMENT mode: config-derived from the single \`intakeIntegration ??
+          # integration\` value, applied to BOTH the spec and task document (US #1
+          # chose one intake knob, not a per-type split). merge ⇒ --merge-*,
+          # else --propose-*. Author-trust does NOT bite the mode (ADR
+          # untrusted-origin-carries-via-stamp-not-forced-staging): an untrusted
+          # author's DOCUMENT merges just like a trusted one; the untrusted safety
+          # is the stamp + placement below, not a document PR.
+          if [ "\${intake_integration}" = "merge" ]; then
             spec_flag="--merge-spec"
+            task_flag="--merge-task"
+          else
+            spec_flag="--propose-spec"
+            task_flag="--propose-task"
           fi
 
           # Author-trust: TRUSTED iff OWNER/MEMBER/COLLABORATOR (admin / write-
           # collaborator — the whole signal). Anything else (incl. empty) is
-          # UNTRUSTED → the conservative, human-in-the-loop path.
+          # UNTRUSTED. It drives ONLY the origin-trust stamp below (NOT the modes).
           trusted="false"
           case "\${AUTHOR_ASSOCIATION:-}" in
             OWNER|MEMBER|COLLABORATOR) trusted="true" ;;
           esac
 
-          # TASK flag: propose if the agent will auto-build it (gate ON) OR the
-          # author is untrusted; merge ONLY when both are safe.
-          if [ "\${DORFL_AUTO_BUILD}" = "true" ] || [ "\${trusted}" != "true" ]; then
-            task_flag="--propose-task"
-          else
-            task_flag="--merge-task"
-          fi
-
-          # ORIGIN-TRUST stamp (task untrusted-origin-forces-build-propose):
-          # derived from the SAME \${trusted} case above (one author-trust read,
-          # two consumers — the task/spec modes AND the stamp — so they cannot
-          # desync). \`intake\` STAMPS this onto the emitted spec/task frontmatter
-          # (origin: issue + originTrust: <value>); it does NOT re-resolve trust
-          # (that is CI's policy, passed IN). The stamp SURVIVES the merge boundary
-          # so a later auto-task/auto-build of an untrusted-origin artifact still
-          # forces a human becomes-code checkpoint (the laundering gap is closed).
+          # ORIGIN-TRUST stamp — the SOLE thing author-trust drives on the wire
+          # (task untrusted-origin-forces-build-propose). \`intake\` STAMPS this
+          # onto the emitted spec/task frontmatter (origin: issue + originTrust:
+          # <value>); its dispatch reads the stamp to (1) select the untrusted-side
+          # PLACEMENT default (\`untrusted*LandIn\`) and (2) force the later BUILD of
+          # an untrusted task to a code PR. It does NOT re-resolve trust (that is
+          # CI's policy, passed IN). The stamp SURVIVES the merge boundary so a
+          # later auto-task/auto-build of an untrusted-origin artifact still forces
+          # a human becomes-code checkpoint (the laundering gap is closed).
           if [ "\${trusted}" = "true" ]; then
             origin_trust_flag="--origin-trust=trusted"
           else
@@ -323,12 +381,15 @@ jobs:
           echo "spec_flag=\${spec_flag}" >> "\$GITHUB_OUTPUT"
           echo "task_flag=\${task_flag}" >> "\$GITHUB_OUTPUT"
           echo "origin_trust_flag=\${origin_trust_flag}" >> "\$GITHUB_OUTPUT"
-          echo "intake policy: author_association='\${AUTHOR_ASSOCIATION:-}' trusted=\${trusted} → \${spec_flag} \${task_flag} \${origin_trust_flag}"
+          echo "intake policy: intakeIntegration='\${intake_integration}' author_association='\${AUTHOR_ASSOCIATION:-}' trusted=\${trusted} → \${spec_flag} \${task_flag} \${origin_trust_flag}"
 
       - name: intake the issue (four-outcome dispatch; surfaces the review verdict into the thread)
         # In-place in this checkout (no --isolated/--remote): the CI container IS
         # the isolation. EXPLICIT \`intake <N>\`, never a bare slug. The per-outcome
-        # flags carry the merge-vs-propose POLICY derived above. \`intake\` runs the
+        # flags carry the (intakeIntegration-derived) document modes + the
+        # origin-trust stamp derived above (author-trust drives only the stamp +
+        # placement, not the document merge-vs-propose; the autonomy gates drive
+        # neither). \`intake\` runs the
         # lone-task review/edit loop and posts its findings as questions back into
         # THIS issue thread (insertion point E) through the issue-comment seam —
         # CI surfaces E by invoking intake; it adds no new review mechanism.
@@ -397,30 +458,68 @@ export function validateIntakeWorkflow(text) {
     // Trust = OWNER/MEMBER/COLLABORATOR (the whole signal).
     require('trust-owner-member-collaborator', /OWNER\|MEMBER\|COLLABORATOR|OWNER[\s\S]{0,40}MEMBER[\s\S]{0,40}COLLABORATOR/.test(text), 'author-trust must be OWNER/MEMBER/COLLABORATOR (admin / write-collaborator ' +
         '— the whole signal; Decision 1).');
-    // An untrusted author forces --propose-task; the derivation must emit both
-    // task modes (so the untrusted path can reach propose and the trusted-safe
-    // path can reach merge).
+    // The DOCUMENT mode is intakeIntegration-DERIVED (spec
+    // intake-integration-knob-and-specs-land-in-proposed-rename; the autonomy gates
+    // no longer bite it): the derivation must be able to emit both task modes
+    // (merge iff the resolved intakeIntegration is merge, else propose).
     require('derives-propose-task', /--propose-task\b/.test(operative), 'the policy derivation must be able to emit `--propose-task` (the ' +
-        'untrusted-author / autoBuild-on fallback).');
+        'intakeIntegration-propose path).');
     require('derives-merge-task', /--merge-task\b/.test(operative), 'the policy derivation must be able to emit `--merge-task` (the ' +
-        'trusted-author + autoBuild-off path).');
-    // --merge-spec stays allowed even for an untrusted author (spec checkpoint ahead).
-    require('derives-merge-spec', /--merge-spec\b/.test(operative), 'the policy derivation must be able to emit `--merge-spec` (a spec stays ' +
-        'mergeable even for an untrusted author — the human-tasks-it checkpoint).');
-    require('derives-propose-spec', /--propose-spec\b/.test(operative), 'the policy derivation must be able to emit `--propose-spec` (autoTask on).');
+        'intakeIntegration-merge path; a task DOCUMENT merges regardless of the ' +
+        'autonomy gates or author-trust).');
+    // --merge-spec is emitted when the resolved intakeIntegration is merge (the
+    // SAME single value as the task; the gates do not bite it).
+    require('derives-merge-spec', /--merge-spec\b/.test(operative), 'the policy derivation must be able to emit `--merge-spec` (the ' +
+        'intakeIntegration-merge path).');
+    require('derives-propose-spec', /--propose-spec\b/.test(operative), 'the policy derivation must be able to emit `--propose-spec` (the ' +
+        'intakeIntegration-propose path).');
     // ORIGIN-TRUST stamp (task untrusted-origin-forces-build-propose): the shell
-    // must derive `--origin-trust <trusted|untrusted>` from the SAME author-trust
-    // case it uses for the task/SPEC modes, and pass it to `intake` so the emitted
-    // artifact is stamped (the stamp + the modes cannot desync).
+    // must derive `--origin-trust <trusted|untrusted>` from the author-trust case
+    // (independent of the document mode) and pass it to `intake` so the emitted
+    // artifact is stamped (the stamp is the SOLE thing author-trust drives).
     require('derives-origin-trust-untrusted', /--origin-trust=untrusted\b/.test(operative), 'the policy derivation must emit `--origin-trust=untrusted` for a non-trusted ' +
         'author (so the emitted artifact is stamped untrusted; task ' +
         'untrusted-origin-forces-build-propose).');
     require('derives-origin-trust-trusted', /--origin-trust=trusted\b/.test(operative), 'the policy derivation must emit `--origin-trust=trusted` for a trusted author.');
     require('passes-origin-trust-to-intake', /steps\.policy\.outputs\.origin_trust_flag/.test(operative), 'the intake invocation must pass the derived `--origin-trust` flag (the ' +
         'stamp must reach `dorfl intake`).');
-    // The derivation must compose the gate env block (it READS the gates to derive).
-    require('reads-auto-build-gate', /DORFL_AUTO_BUILD\b/.test(text), 'the policy derivation must read the `DORFL_AUTO_BUILD` gate.');
-    require('reads-auto-task-gate', /DORFL_AUTO_TASK\b/.test(text), 'the policy derivation must read the `DORFL_AUTO_TASK` gate.');
+    // The derivation must read the RESOLVED intake DOCUMENT mode via `dorfl config
+    // --json` (the mechanism `advance` uses), NOT a hardcoded DORFL_* env (ADR
+    // untrusted-origin-carries-via-stamp-not-forced-staging — the shadowing bug).
+    require('reads-config-json', /dorfl config --json/.test(operative), 'the policy derivation must read the resolved config via ' +
+        '`dorfl config --json` (as `advance` does), so a committed `dorfl.json` ' +
+        'mode is honored in CI (not shadowed by a hardcoded env).');
+    // The DOCUMENT mode is the resolved `intakeIntegration ?? integration` (spec
+    // intake-integration-knob-and-specs-land-in-proposed-rename): the derivation
+    // must read `.intakeIntegration` with a `.integration` FALLBACK (the shell twin
+    // of `intakeIntegration ?? integration`), NOT the autonomy gates. Pin BOTH the
+    // key and the fallback so a regression to a gate-derived mode is caught.
+    require('reads-intake-integration', /\.intakeIntegration\b/.test(operative), 'the policy derivation must read the resolved `intakeIntegration` mode (jq ' +
+        '`.intakeIntegration` off `dorfl config --json`) for the document mode.');
+    require('intake-integration-falls-back-to-integration', /\.intakeIntegration\s*\/\/\s*\.integration/.test(operative), 'the policy derivation must fall back to `.integration` when ' +
+        '`intakeIntegration` is unset (jq `.intakeIntegration // .integration`, the ' +
+        'shell twin of `intakeIntegration ?? integration`).');
+    // The DOCUMENT mode must NOT be derived from the autonomy gates (spec
+    // intake-integration-knob-and-specs-land-in-proposed-rename: autoBuild/autoTask
+    // gate autonomy ONLY, never the document PR-mode). The mode branch must not read
+    // `.autoBuild` / `.autoTask` off the config json.
+    require('mode-not-gate-derived', !/\.auto(?:Build|Task)\b/.test(operative), 'the intake DOCUMENT mode must be derived from `intakeIntegration ?? ' +
+        'integration`, NOT the autonomy gates — the derivation must not read ' +
+        '`.autoBuild` / `.autoTask` (they gate autonomy only; spec ' +
+        'intake-integration-knob-and-specs-land-in-proposed-rename).');
+    // ANTI-REGRESSION (ADR untrusted-origin-carries-via-stamp-not-forced-staging;
+    // spec US #12): the workflow must NOT emit a `DORFL_AUTO_BUILD:` /
+    // `DORFL_AUTO_TASK:` env ASSIGNMENT. The env layer OUTRANKS per-repo config, so
+    // a hardcoded default here SHADOWS the committed `dorfl.json` gates (the bug this
+    // task fixes). Mirrors `advance-lifecycle-template.ts`'s `no-gate-env-auto-build`
+    // / `no-gate-env-auto-task`. Checked over the OPERATIVE (non-comment) lines so
+    // the header comment that NAMES these keys is not a false positive.
+    require('no-gate-env-auto-build', !/DORFL_AUTO_BUILD\s*:/.test(operative), 'the workflow must NOT emit a `DORFL_AUTO_BUILD:` env assignment (env ' +
+        'carries no defaults; the gate is resolved from per-repo config / built-in ' +
+        'default — else the env SHADOWS the committed dorfl.json).');
+    require('no-gate-env-auto-task', !/DORFL_AUTO_TASK\s*:/.test(operative), 'the workflow must NOT emit a `DORFL_AUTO_TASK:` env assignment (env ' +
+        'carries no defaults; the gate is resolved from per-repo config / built-in ' +
+        'default — else the env SHADOWS the committed dorfl.json).');
     // --- Insertion point E: the issue-thread review surface ---------------------
     // E is REUSED via `intake` (which runs the lone-task review and posts to the
     // thread). The workflow must request `issues: write` so that comment can land.

package/dist/intake-trigger-template.js.map

@@ -1 +1 @@
-{"version":3,"file":"intake-trigger-template.js","sourceRoot":"","sources":["../src/intake-trigger-template.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AAEH,OAAO,EAAC,KAAK,EAAC,MAAM,YAAY,CAAC;AAEjC,OAAO,EAAC,wBAAwB,EAAC,MAAM,sBAAsB,CAAC;AAE9D,6EAA6E;AAC7E,MAAM,CAAC,MAAM,4BAA4B,GAAG,QAAQ,CAAC;AAErD,+DAA+D;AAC/D,MAAM,CAAC,MAAM,+BAA+B,GAC3C,8IAA8I,CAAC;AAEhJ,8EAA8E;AAC9E,MAAM,CAAC,MAAM,4BAA4B,GAAG,sBAAsB,CAAC;AAEnE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,KAAK,CAAC,IAAI,SAAS,CAAC;AAE3D,iFAAiF;AAEjF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG;IAC1C,OAAO;IACP,QAAQ;IACR,cAAc;CACL,CAAC;AAwCX;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAGjC;IACA,MAAM,EAAC,IAAI,EAAE,aAAa,EAAC,GAAG,OAAO,CAAC;IACtC,+EAA+E;IAC/E,kEAAkE;IAClE,MAAM,IAAI,GAAwB,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;IACtE,2EAA2E;IAC3E,0EAA0E;IAC1E,MAAM,IAAI,GACT,IAAI,CAAC,SAAS,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;IACxD,8EAA8E;IAC9E,6EAA6E;IAC7E,+EAA+E;IAC/E,8EAA8E;IAC9E,iFAAiF;IACjF,8EAA8E;IAC9E,4DAA4D;IAC5D,MAAM,WAAW,GAA4B,aAAa;QACzD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,WAAW,CAAC;IACf,OAAO,EAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAC,CAAC;AAClC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC9B,iBAAqC;IAErC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACxB,OAAO,KAAK,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,iBAAiB,CAAC,WAAW,EAAE,CAAC;IAC9C,OAAQ,2BAAiD,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC3E,CAAC;AAED,gFAAgF;AAEhF;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAwB;IAC9D,6EAA6E;IAC7E,qEAAqE;IACrE,MAAM,SAAS,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACnD,OAAO;;;;;;;;;;;;;;;MAeF,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6CA2FmB,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6ErD,CAAC;AACF,CAAC;AAkBD;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAY;IAClD,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,MAAM,OAAO,GAAG,CAAC,EAAU,EAAE,OAAgB,EAAE,OAAe,EAAQ,EAAE;QACvE,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,QAAQ,CAAC,IAAI,CAAC,EAAC,EAAE,EAAE,OAAO,EAAC,CAAC,CAAC;QAC9B,CAAC;IACF,CAAC,CAAC;IAEF,8EAA8E;IAC9E,4EAA4E;IAC5E,0EAA0E;IAC1E,iFAAiF;IACjF,wEAAwE;IACxE,MAAM,SAAS,GAAG,IAAI;SACpB,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SACrC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,gFAAgF;IAChF,OAAO,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,IAAI,CAC9C,SAAS,CACT,EAAE,sEAAsE;QACxE,aAAa,CAAC,CAAC;IAChB,8EAA8E;IAC9E,gEAAgE;IAChE,OAAO,CAAC,8BAA8B,EAAE,sDAAsD,CAAC,IAAI,CAClG,SAAS,CACT,EAAE,4DAA4D;QAC9D,mDAAmD,CAAC,CAAC;IACtD,6EAA6E;IAC7E,sEAAsE;IACtE,OAAO,CAAC,gBAAgB,EAAE,CAAC,wBAAwB,CAAC,IAAI,CACvD,SAAS,CACT,EAAE,6EAA6E;QAC/E,0EAA0E,CAAC,CAAC;IAE7E,+EAA+E;IAC/E,OAAO,CAAC,uBAAuB,EAAE,mDAAmD,CAAC,IAAI,CACxF,IAAI,CACJ,EAAE,gEAAgE,CAAC,CAAC;IACrE,OAAO,CAAC,+BAA+B,EAAE,2DAA2D,CAAC,IAAI,CACxG,IAAI,CACJ,EAAE,0CAA0C;QAC5C,sEAAsE,CAAC,CAAC;IACzE,OAAO,CAAC,eAAe,EAAE,oDAAoD,CAAC,IAAI,CACjF,IAAI,CACJ,EAAE,yDAAyD,CAAC,CAAC;IAE9D,gFAAgF;IAChF,8EAA8E;IAC9E,gEAAgE;IAChE,OAAO,CAAC,2BAA2B,EAAE,CAAC,wDAAwD,CAAC,IAAI,CAClG,IAAI,CACJ,EAAE,wEAAwE;QAC1E,oEAAoE,CAAC,CAAC;IACvE,OAAO,CAAC,kBAAkB,EAAE,CAAC,+BAA+B,CAAC,IAAI,CAChE,SAAS,CACT,EAAE,yEAAyE,CAAC,CAAC;IAC9E,8EAA8E;IAC9E,2EAA2E;IAC3E,OAAO,CAAC,kCAAkC,EAAE,qBAAqB,CAAC,IAAI,CACrE,IAAI,CACJ,EAAE,sEAAsE;QACxE,2DAA2D,CAAC,CAAC;IAE9D,+EAA+E;IAC/E,kFAAkF;IAClF,OAAO,CAAC,0BAA0B,EAAE,oBAAoB,CAAC,IAAI,CAC5D,IAAI,CACJ,EAAE,yEAAyE;QAC3E,yEAAyE,CAAC,CAAC;IAC5E,wDAAwD;IACxD,OAAO,CAAC,iCAAiC,EAAE,6EAA6E,CAAC,IAAI,CAC5H,IAAI,CACJ,EAAE,6EAA6E;QAC/E,kCAAkC,CAAC,CAAC;IACrC,2EAA2E;IAC3E,2EAA2E;IAC3E,yBAAyB;IACzB,OAAO,CAAC,sBAAsB,EAAE,kBAAkB,CAAC,IAAI,CACtD,SAAS,CACT,EAAE,mEAAmE;QACrE,4CAA4C,CAAC,CAAC;IAC/C,OAAO,CAAC,oBAAoB,EAAE,gBAAgB,CAAC,IAAI,CAClD,SAAS,CACT,EAAE,iEAAiE;QACnE,uCAAuC,CAAC,CAAC;IAC1C,mFAAmF;IACnF,OAAO,CAAC,oBAAoB,EAAE,gBAAgB,CAAC,IAAI,CAClD,SAAS,CACT,EAAE,0EAA0E;QAC5E,0EAA0E,CAAC,CAAC;IAC7E,OAAO,CAAC,sBAAsB,EAAE,kBAAkB,CAAC,IAAI,CACtD,SAAS,CACT,EAAE,4EAA4E,CAAC,CAAC;IACjF,6EAA6E;IAC7E,8EAA8E;IAC9E,+EAA+E;IAC/E,6DAA6D;IAC7D,OAAO,CAAC,gCAAgC,EAAE,4BAA4B,CAAC,IAAI,CAC1E,SAAS,CACT,EAAE,+EAA+E;QACjF,6DAA6D;QAC7D,yCAAyC,CAAC,CAAC;IAC5C,OAAO,CAAC,8BAA8B,EAAE,0BAA0B,CAAC,IAAI,CACtE,SAAS,CACT,EAAE,gFAAgF,CAAC,CAAC;IACrF,OAAO,CAAC,+BAA+B,EAAE,2CAA2C,CAAC,IAAI,CACxF,SAAS,CACT,EAAE,yEAAyE;QAC3E,mCAAmC,CAAC,CAAC;IACtC,iFAAiF;IACjF,OAAO,CAAC,uBAAuB,EAAE,oBAAoB,CAAC,IAAI,CACzD,IAAI,CACJ,EAAE,8DAA8D,CAAC,CAAC;IACnE,OAAO,CAAC,sBAAsB,EAAE,mBAAmB,CAAC,IAAI,CACvD,IAAI,CACJ,EAAE,6DAA6D,CAAC,CAAC;IAElE,+EAA+E;IAC/E,6EAA6E;IAC7E,+EAA+E;IAC/E,OAAO,CAAC,yBAAyB,EAAE,qBAAqB,CAAC,IAAI,CAC5D,SAAS,CACT,EAAE,2EAA2E;QAC7E,+DAA+D,CAAC,CAAC;IAClE,gFAAgF;IAChF,6EAA6E;IAC7E,OAAO,CAAC,oBAAoB,EAAE,CAAC,iBAAiB,CAAC,IAAI,CACpD,SAAS,CACT,EAAE,4EAA4E;QAC9E,oEAAoE,CAAC,CAAC;IAEvE,8EAA8E;IAC9E,OAAO,CAAC,kBAAkB,EAAE,CAAC,cAAc,CAAC,IAAI,CAC/C,SAAS,CACT,EAAE,0EAA0E,CAAC,CAAC;IAC/E,OAAO,CAAC,gBAAgB,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAClD,SAAS,CACT,EAAE,gEAAgE,CAAC,CAAC;IAErE,+EAA+E;IAC/E,OAAO,CAAC,mBAAmB,EAAE,iCAAiC,CAAC,IAAI,CAClE,IAAI,CACJ,EAAE,yEAAyE,CAAC,CAAC;IAC9E,OAAO,CAAC,uBAAuB,EAAE,iEAAiE,CAAC,IAAI,CACtG,IAAI,CACJ,EAAE,yEAAyE;QAC3E,yCAAyC,CAAC,CAAC;IAE5C,+EAA+E;IAC/E,OAAO,CAAC,yBAAyB,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAChE,IAAI,CACJ,EAAE,wEAAwE;QAC1E,gEAAgE,CAAC,CAAC;IACnE,OAAO,CAAC,kCAAkC,EAAE,CAAC,uBAAuB,CAAC,IAAI,CACxE,SAAS,CACT,EAAE,+DAA+D,CAAC,CAAC;IAEpE,8EAA8E;IAC9E,OAAO,CAAC,0BAA0B,EAAE,8CAA8C,CAAC,IAAI,CACtF,IAAI,CACJ,EAAE,sDAAsD;QACxD,8DAA8D,CAAC,CAAC;IAEjE,OAAO,EAAC,EAAE,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,QAAQ,EAAC,CAAC;AAC9C,CAAC"}
+{"version":3,"file":"intake-trigger-template.js","sourceRoot":"","sources":["../src/intake-trigger-template.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmEG;AAEH,OAAO,EAAC,KAAK,EAAC,MAAM,YAAY,CAAC;AAEjC,OAAO,EAAC,wBAAwB,EAAC,MAAM,sBAAsB,CAAC;AAE9D,6EAA6E;AAC7E,MAAM,CAAC,MAAM,4BAA4B,GAAG,QAAQ,CAAC;AAErD,+DAA+D;AAC/D,MAAM,CAAC,MAAM,+BAA+B,GAC3C,8IAA8I,CAAC;AAEhJ,8EAA8E;AAC9E,MAAM,CAAC,MAAM,4BAA4B,GAAG,sBAAsB,CAAC;AAEnE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,KAAK,CAAC,IAAI,SAAS,CAAC;AAE3D,iFAAiF;AAEjF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG;IAC1C,OAAO;IACP,QAAQ;IACR,cAAc;CACL,CAAC;AAsDX;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAGjC;IACA,MAAM,EAAC,iBAAiB,EAAE,aAAa,EAAC,GAAG,OAAO,CAAC;IACnD,oFAAoF;IACpF,gFAAgF;IAChF,iFAAiF;IACjF,8EAA8E;IAC9E,iFAAiF;IACjF,6EAA6E;IAC7E,MAAM,IAAI,GAAwB,iBAAiB,CAAC;IACpD,MAAM,IAAI,GAAwB,iBAAiB,CAAC;IACpD,4EAA4E;IAC5E,+EAA+E;IAC/E,8EAA8E;IAC9E,mFAAmF;IACnF,iFAAiF;IACjF,8EAA8E;IAC9E,8EAA8E;IAC9E,4DAA4D;IAC5D,MAAM,WAAW,GAA4B,aAAa;QACzD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,WAAW,CAAC;IACf,OAAO,EAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAC,CAAC;AAClC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC9B,iBAAqC;IAErC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACxB,OAAO,KAAK,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,iBAAiB,CAAC,WAAW,EAAE,CAAC;IAC9C,OAAQ,2BAAiD,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC3E,CAAC;AAED,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAwB;IAC9D,6EAA6E;IAC7E,qEAAqE;IACrE,MAAM,SAAS,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACnD,OAAO;;;;;;;;;;;;;;;MAeF,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6CAoGmB,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuGrD,CAAC;AACF,CAAC;AAkBD;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAY;IAClD,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,MAAM,OAAO,GAAG,CAAC,EAAU,EAAE,OAAgB,EAAE,OAAe,EAAQ,EAAE;QACvE,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,QAAQ,CAAC,IAAI,CAAC,EAAC,EAAE,EAAE,OAAO,EAAC,CAAC,CAAC;QAC9B,CAAC;IACF,CAAC,CAAC;IAEF,8EAA8E;IAC9E,4EAA4E;IAC5E,0EAA0E;IAC1E,iFAAiF;IACjF,wEAAwE;IACxE,MAAM,SAAS,GAAG,IAAI;SACpB,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SACrC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,gFAAgF;IAChF,OAAO,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,IAAI,CAC9C,SAAS,CACT,EAAE,sEAAsE;QACxE,aAAa,CAAC,CAAC;IAChB,8EAA8E;IAC9E,gEAAgE;IAChE,OAAO,CAAC,8BAA8B,EAAE,sDAAsD,CAAC,IAAI,CAClG,SAAS,CACT,EAAE,4DAA4D;QAC9D,mDAAmD,CAAC,CAAC;IACtD,6EAA6E;IAC7E,sEAAsE;IACtE,OAAO,CAAC,gBAAgB,EAAE,CAAC,wBAAwB,CAAC,IAAI,CACvD,SAAS,CACT,EAAE,6EAA6E;QAC/E,0EAA0E,CAAC,CAAC;IAE7E,+EAA+E;IAC/E,OAAO,CAAC,uBAAuB,EAAE,mDAAmD,CAAC,IAAI,CACxF,IAAI,CACJ,EAAE,gEAAgE,CAAC,CAAC;IACrE,OAAO,CAAC,+BAA+B,EAAE,2DAA2D,CAAC,IAAI,CACxG,IAAI,CACJ,EAAE,0CAA0C;QAC5C,sEAAsE,CAAC,CAAC;IACzE,OAAO,CAAC,eAAe,EAAE,oDAAoD,CAAC,IAAI,CACjF,IAAI,CACJ,EAAE,yDAAyD,CAAC,CAAC;IAE9D,gFAAgF;IAChF,8EAA8E;IAC9E,gEAAgE;IAChE,OAAO,CAAC,2BAA2B,EAAE,CAAC,wDAAwD,CAAC,IAAI,CAClG,IAAI,CACJ,EAAE,wEAAwE;QAC1E,oEAAoE,CAAC,CAAC;IACvE,OAAO,CAAC,kBAAkB,EAAE,CAAC,+BAA+B,CAAC,IAAI,CAChE,SAAS,CACT,EAAE,yEAAyE,CAAC,CAAC;IAC9E,8EAA8E;IAC9E,2EAA2E;IAC3E,OAAO,CAAC,kCAAkC,EAAE,qBAAqB,CAAC,IAAI,CACrE,IAAI,CACJ,EAAE,sEAAsE;QACxE,2DAA2D,CAAC,CAAC;IAE9D,+EAA+E;IAC/E,kFAAkF;IAClF,OAAO,CAAC,0BAA0B,EAAE,oBAAoB,CAAC,IAAI,CAC5D,IAAI,CACJ,EAAE,yEAAyE;QAC3E,yEAAyE,CAAC,CAAC;IAC5E,wDAAwD;IACxD,OAAO,CAAC,iCAAiC,EAAE,6EAA6E,CAAC,IAAI,CAC5H,IAAI,CACJ,EAAE,6EAA6E;QAC/E,kCAAkC,CAAC,CAAC;IACrC,uDAAuD;IACvD,gFAAgF;IAChF,0EAA0E;IAC1E,qEAAqE;IACrE,OAAO,CAAC,sBAAsB,EAAE,kBAAkB,CAAC,IAAI,CACtD,SAAS,CACT,EAAE,mEAAmE;QACrE,kCAAkC,CAAC,CAAC;IACrC,OAAO,CAAC,oBAAoB,EAAE,gBAAgB,CAAC,IAAI,CAClD,SAAS,CACT,EAAE,iEAAiE;QACnE,yEAAyE;QACzE,kCAAkC,CAAC,CAAC;IACrC,4EAA4E;IAC5E,4DAA4D;IAC5D,OAAO,CAAC,oBAAoB,EAAE,gBAAgB,CAAC,IAAI,CAClD,SAAS,CACT,EAAE,iEAAiE;QACnE,gCAAgC,CAAC,CAAC;IACnC,OAAO,CAAC,sBAAsB,EAAE,kBAAkB,CAAC,IAAI,CACtD,SAAS,CACT,EAAE,mEAAmE;QACrE,kCAAkC,CAAC,CAAC;IACrC,6EAA6E;IAC7E,8EAA8E;IAC9E,4EAA4E;IAC5E,yEAAyE;IACzE,OAAO,CAAC,gCAAgC,EAAE,4BAA4B,CAAC,IAAI,CAC1E,SAAS,CACT,EAAE,+EAA+E;QACjF,6DAA6D;QAC7D,yCAAyC,CAAC,CAAC;IAC5C,OAAO,CAAC,8BAA8B,EAAE,0BAA0B,CAAC,IAAI,CACtE,SAAS,CACT,EAAE,gFAAgF,CAAC,CAAC;IACrF,OAAO,CAAC,+BAA+B,EAAE,2CAA2C,CAAC,IAAI,CACxF,SAAS,CACT,EAAE,yEAAyE;QAC3E,mCAAmC,CAAC,CAAC;IACtC,+EAA+E;IAC/E,2EAA2E;IAC3E,8EAA8E;IAC9E,OAAO,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,IAAI,CACtD,SAAS,CACT,EAAE,0DAA0D;QAC5D,yEAAyE;QACzE,0DAA0D,CAAC,CAAC;IAC7D,6EAA6E;IAC7E,6EAA6E;IAC7E,gFAAgF;IAChF,+EAA+E;IAC/E,yEAAyE;IACzE,OAAO,CAAC,0BAA0B,EAAE,uBAAuB,CAAC,IAAI,CAC/D,SAAS,CACT,EAAE,4EAA4E;QAC9E,wEAAwE,CAAC,CAAC;IAC3E,OAAO,CAAC,8CAA8C,EAAE,4CAA4C,CAAC,IAAI,CACxG,SAAS,CACT,EAAE,8DAA8D;QAChE,6EAA6E;QAC7E,oDAAoD,CAAC,CAAC;IACvD,sEAAsE;IACtE,gFAAgF;IAChF,iFAAiF;IACjF,kDAAkD;IAClD,OAAO,CAAC,uBAAuB,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAC9D,SAAS,CACT,EAAE,sEAAsE;QACxE,sEAAsE;QACtE,4DAA4D;QAC5D,6DAA6D,CAAC,CAAC;IAChE,8EAA8E;IAC9E,mEAAmE;IACnE,gFAAgF;IAChF,kFAAkF;IAClF,kFAAkF;IAClF,+EAA+E;IAC/E,oEAAoE;IACpE,OAAO,CAAC,wBAAwB,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAC7D,SAAS,CACT,EAAE,uEAAuE;QACzE,4EAA4E;QAC5E,2DAA2D,CAAC,CAAC;IAC9D,OAAO,CAAC,uBAAuB,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAC3D,SAAS,CACT,EAAE,sEAAsE;QACxE,4EAA4E;QAC5E,2DAA2D,CAAC,CAAC;IAE9D,+EAA+E;IAC/E,6EAA6E;IAC7E,+EAA+E;IAC/E,OAAO,CAAC,yBAAyB,EAAE,qBAAqB,CAAC,IAAI,CAC5D,SAAS,CACT,EAAE,2EAA2E;QAC7E,+DAA+D,CAAC,CAAC;IAClE,gFAAgF;IAChF,6EAA6E;IAC7E,OAAO,CAAC,oBAAoB,EAAE,CAAC,iBAAiB,CAAC,IAAI,CACpD,SAAS,CACT,EAAE,4EAA4E;QAC9E,oEAAoE,CAAC,CAAC;IAEvE,8EAA8E;IAC9E,OAAO,CAAC,kBAAkB,EAAE,CAAC,cAAc,CAAC,IAAI,CAC/C,SAAS,CACT,EAAE,0EAA0E,CAAC,CAAC;IAC/E,OAAO,CAAC,gBAAgB,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAClD,SAAS,CACT,EAAE,gEAAgE,CAAC,CAAC;IAErE,+EAA+E;IAC/E,OAAO,CAAC,mBAAmB,EAAE,iCAAiC,CAAC,IAAI,CAClE,IAAI,CACJ,EAAE,yEAAyE,CAAC,CAAC;IAC9E,OAAO,CAAC,uBAAuB,EAAE,iEAAiE,CAAC,IAAI,CACtG,IAAI,CACJ,EAAE,yEAAyE;QAC3E,yCAAyC,CAAC,CAAC;IAE5C,+EAA+E;IAC/E,OAAO,CAAC,yBAAyB,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAChE,IAAI,CACJ,EAAE,wEAAwE;QAC1E,gEAAgE,CAAC,CAAC;IACnE,OAAO,CAAC,kCAAkC,EAAE,CAAC,uBAAuB,CAAC,IAAI,CACxE,SAAS,CACT,EAAE,+DAA+D,CAAC,CAAC;IAEpE,8EAA8E;IAC9E,OAAO,CAAC,0BAA0B,EAAE,8CAA8C,CAAC,IAAI,CACtF,IAAI,CACJ,EAAE,sDAAsD;QACxD,8DAA8D,CAAC,CAAC;IAEjE,OAAO,EAAC,EAAE,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,QAAQ,EAAC,CAAC;AAC9C,CAAC"}

package/dist/intake.d.ts

@@ -1,5 +1,5 @@
 import type { IntegrateResult, ReviewProvider } from './integrator.js';
-import type { IntegrationMode, SpecsLandIn } from './config.js';
+import type { IntegrationMode, SpecsLandIn, TasksLandIn } from './config.js';
 import type { OriginTrust } from './frontmatter.js';
 import { type Identity } from './identity.js';
 import { type Harness } from './harness.js';
@@ -226,11 +226,47 @@ export interface PerformIntakeOptions {
      * the PR opens normally.
      */
     noPR?: boolean;
+    /**
+     * **The per-repo TASK-PLACEMENT default, passed IN** (spec
+     * `untrusted-origin-carries-via-stamp-intake-placement-symmetry-and-ci-gate-resolution`
+     * US #2, governing ADR `untrusted-origin-carries-via-stamp-not-forced-staging`).
+     * The resolved per-repo default landing for `intake`-authored TASKS emitted
+     * DIRECTLY from an issue (`backlog` = staging; `ready` = the agent pool), fed
+     * as the CONFIGURED-DEFAULT rung into the shared placement resolver
+     * (`src/placement.ts`) via the SAME task slots + `landingToSide` mapping the
+     * tasker (`tasking.ts`) uses — so the intake TASK emit reaches PARITY with the
+     * intake SPEC emit (both route through the resolver, both stamp origin-trust).
+     * Unset ⇒ the resolver's built-in floor applies (`staging` = `tasks/backlog/`,
+     * the conservative landing). The TASK twin of {@link specsLandIn}.
+     */
+    tasksLandIn?: TasksLandIn;
+    /**
+     * **The per-repo UNTRUSTED-side TASK-PLACEMENT default, passed IN** (spec
+     * `untrusted-origin-carries-via-stamp-intake-placement-symmetry-and-ci-gate-resolution`
+     * US #5, governing ADR `untrusted-origin-carries-via-stamp-not-forced-staging`).
+     * The TWIN of {@link tasksLandIn} selected when the intake stamp is
+     * `originTrust: untrusted`: {@link dispatchTask} reads the stamp and feeds THIS
+     * default (rather than {@link tasksLandIn}) as the configured-default rung of
+     * the shared placement resolver. The resolver no longer has an
+     * untrusted-forces-staging rung; DEFAULTS to staging (`backlog`), opt-in
+     * `ready` (safety then via the task's carried stamp, not the folder). The TASK
+     * twin of {@link untrustedSpecsLandIn}; the SAME knob the tasker consults for
+     * an untrusted-origin spec's downstream tasks (one policy, both call sites).
+     */
+    untrustedTasksLandIn?: TasksLandIn;
+    /**
+     * **The OPERATOR's EXPLICIT task-placement override** (the TOP precedence
+     * rung). When set, the runner-deterministic resolver lands the emitted task
+     * HERE regardless of {@link tasksLandIn} / {@link untrustedTasksLandIn} — the
+     * TASK twin of {@link explicitSpecsLandIn}. Set ONLY when the operator typed
+     * the explicit placement flag; never when the value came from config.
+     */
+    explicitTasksLandIn?: TasksLandIn;
     /**
      * **The per-repo SPEC-PLACEMENT default, passed IN** (spec
      * `staging-pool-position-gate-and-trust-model` US #2/#5, task
      * `pre-prd-staging-pool-split-and-untrusted-prd-placement`). The resolved
-     * per-repo default landing for `intake`-authored prds (`pre-proposed` =
+     * per-repo default landing for `intake`-authored prds (`proposed` =
      * staging; `ready` = the auto-tasking pool), fed as the CONFIGURED-DEFAULT rung
      * into the shared placement resolver (`src/placement.ts`). The resolver
      * overlays an EXPLICIT operator flag ({@link explicitSpecsLandIn}, top) and
@@ -240,11 +276,24 @@ export interface PerformIntakeOptions {
      * path — one resolver, two lifecycles.
      */
     specsLandIn?: SpecsLandIn;
+    /**
+     * **The per-repo UNTRUSTED-side SPEC-PLACEMENT default, passed IN** (spec
+     * `untrusted-origin-carries-via-stamp-intake-placement-symmetry-and-ci-gate-resolution`
+     * US #7, governing ADR
+     * `untrusted-origin-carries-via-stamp-not-forced-staging`). The TWIN of
+     * {@link specsLandIn} selected when the intake stamp is
+     * `originTrust: untrusted`: the spec dispatch reads the stamp and feeds THIS
+     * default (rather than {@link specsLandIn}) as the configured-default rung of
+     * the shared placement resolver. The resolver no longer has an
+     * untrusted-forces-staging rung; DEFAULTS to staging (`proposed`), opt-in
+     * `ready` (safety then via the tasks' carried stamp, not the folder).
+     */
+    untrustedSpecsLandIn?: SpecsLandIn;
     /**
      * **The OPERATOR's EXPLICIT spec-placement override** (the TOP precedence
      * rung). When set, the runner-deterministic resolver lands the spec HERE
-     * regardless of `originTrust` or {@link specsLandIn} — the positional
-     * analogue of `explicitMerge` overriding the untrusted-origin
+     * regardless of {@link specsLandIn} / {@link untrustedSpecsLandIn} — the
+     * positional analogue of `explicitMerge` overriding the untrusted-origin
      * build-propose rule ("the operator is present; CLI always wins, no
      * special force-key"). Set ONLY when the operator typed
      * `--specs-land-in <where>`; never when the value came from config.

package/dist/intake.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"intake.d.ts","sourceRoot":"","sources":["../src/intake.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAC,eAAe,EAAE,cAAc,EAAC,MAAM,iBAAiB,CAAC;AAErE,OAAO,KAAK,EAAC,eAAe,EAAE,WAAW,EAAC,MAAM,aAAa,CAAC;AAC9D,OAAO,KAAK,EAAC,WAAW,EAAC,MAAM,kBAAkB,CAAC;AAMlD,OAAO,EAGN,KAAK,QAAQ,EACb,MAAM,eAAe,CAAC;AACvB,OAAO,EAAc,KAAK,OAAO,EAAC,MAAM,cAAc,CAAC;AAGvD,OAAO,EAGN,KAAK,KAAK,EACV,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACN,kBAAkB,EAGlB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,MAAM,qBAAqB,CAAC;AAM7B,OAAO,EAAe,KAAK,oBAAoB,EAAC,MAAM,oBAAoB,CAAC;AAG3E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH;;;;;;;GAOG;AACH,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE/D;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC7B,oDAAoD;IACpD,OAAO,EAAE,aAAa,CAAC;IACvB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oDAAoD;IACpD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oDAAoD;IACpD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,mDAAmD;AACnD,MAAM,MAAM,gBAAgB,GACzB,QAAQ,GACR,OAAO,GACP,cAAc,GACd,SAAS,GACT,cAAc,GACd,kBAAkB,GAClB,QAAQ,GACR,aAAa,GACb,cAAc,GACd,OAAO,GACP,aAAa,CAAC;AAEjB,MAAM,WAAW,YAAY;IAC5B,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACpB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,+DAA+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yEAAyE;IACzE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0EAA0E;IAC1E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;OAIG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,wDAAwD;IACxD,OAAO,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,KAAK,CAAC;IACb,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACxB,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;AAE7B,MAAM,WAAW,oBAAoB;IACpC,iDAAiD;IACjD,WAAW,EAAE,MAAM,CAAC;IACpB,qDAAqD;IACrD,GAAG,EAAE,MAAM,CAAC;IACZ,4DAA4D;IAC5D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B;;;OAGG;IACH,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB;;;;;;;;;;OAUG;IACH,UAAU,CAAC,EAAE,kBAAkB,CAAC;IAChC,0FAA0F;IAC1F,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2DAA2D;IAC3D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;;OASG;IACH,WAAW,CAAC,EAAE,sBAAsB,CAAC;IACrC;;;;;;;;;;;;OAYG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;;;OAKG;IACH,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;;;;;;;;;;;;OAYG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;;;;;;OAQG;IACH,mBAAmB,CAAC,EAAE,WAAW,CAAC;IAClC;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,cAAc,CAAC;IAClC;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB;;;;;;;;;;;OAWG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gFAAgF;IAChF,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,8CAA8C;IAC9C,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACjC;AAID;;;;;;;;;;GAUG;AACH,eAAO,MAAM,gBAAgB,QAAkC,CAAC;AA+BhE;;;;;;GAMG;AACH,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,MAAM,CAAC;AAIjD;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,sBAAsB;IACtC,qFAAqF;IACrF,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,iDAAiD;IACjD,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,6EAA6E;IAC7E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,+EAA+E;IAC/E,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,6EAA6E;IAC7E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,+EAA+E;IAC/E,WAAW,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,qFAAqF;AACrF,MAAM,WAAW,sBAAsB;IACtC,gDAAgD;IAChD,IAAI,EAAE,eAAe,CAAC;IACtB;;;;OAIG;IACH,IAAI,EAAE,eAAe,CAAC;CACtB;AA4BD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,6BAA6B,CAC5C,KAAK,EAAE,sBAAsB,EAC7B,WAAW,GAAE,eAAqC,GAChD,sBAAsB,CA0BxB;AAED;;;;;GAKG;AACH,wBAAsB,aAAa,CAClC,OAAO,EAAE,oBAAoB,GAC3B,OAAO,CAAC,YAAY,CAAC,CA2KvB;AAywBD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,8BAA8B,CAAC,MAAM,EAAE;IACtD,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,eAAe,GAAG,SAAS,CAAC;IACzC,IAAI,EAAE,MAAM,EAAE,CAAC;CACf,GAAG,MAAM,CAkBT;AAqGD;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;CAC1B,GAAG,MAAM,CA+BT;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,OAAO,GAAG,SAAS,CAAC;IAC/B,YAAY,EAAE,OAAO,GAAG,SAAS,CAAC;IAClC;;;;;OAKG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;CAC1B,GAAG,MAAM,CAyCT;AAuGD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,CAkEhE;AAqBD;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,GAAG,aAAa,CAAC;AAElD;;;;;;GAMG;AACH,MAAM,MAAM,qBAAqB,GAAG,aAAa,CAAC;AAElD,gFAAgF;AAChF,MAAM,WAAW,uBAAuB;IACvC,4DAA4D;IAC5D,IAAI,EAAE,MAAM,CAAC;IACb,0EAA0E;IAC1E,WAAW,EAAE,MAAM,CAAC;IACpB,6DAA6D;IAC7D,KAAK,EAAE,MAAM,CAAC;IACd,uFAAuF;IACvF,IAAI,EAAE,MAAM,CAAC;IACb,oFAAoF;IACpF,KAAK,EAAE,MAAM,CAAC;IACd,qDAAqD;IACrD,GAAG,EAAE,MAAM,CAAC;IACZ,+CAA+C;IAC/C,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACxB;AAED;;;;;GAKG;AACH,MAAM,MAAM,kBAAkB,GAAG,CAChC,KAAK,EAAE,uBAAuB,KAC1B,OAAO,CAAC,qBAAqB,CAAC,CAAC;AAuMpC,uEAAuE;AACvE,MAAM,WAAW,gCAAgC;IAChD,sEAAsE;IACtE,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+DAA+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CACxC,OAAO,GAAE,gCAAqC,GAC5C,kBAAkB,CA0BpB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,yBAAyB,CACxC,KAAK,EAAE,uBAAuB,GAC5B,MAAM,CAsDR;AAED;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,2BAAqB,CAAC;AAE7D;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,uBAAuB,CACtC,KAAK,EAAE,KAAK,EACZ,QAAQ,EAAE,YAAY,EAAE,EACxB,MAAM,CAAC,EAAE,oBAAoB,GAC3B,MAAM,CA4HR"}
+{"version":3,"file":"intake.d.ts","sourceRoot":"","sources":["../src/intake.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAC,eAAe,EAAE,cAAc,EAAC,MAAM,iBAAiB,CAAC;AAErE,OAAO,KAAK,EAAC,eAAe,EAAE,WAAW,EAAE,WAAW,EAAC,MAAM,aAAa,CAAC;AAC3E,OAAO,KAAK,EAAC,WAAW,EAAC,MAAM,kBAAkB,CAAC;AAOlD,OAAO,EAGN,KAAK,QAAQ,EACb,MAAM,eAAe,CAAC;AACvB,OAAO,EAAc,KAAK,OAAO,EAAC,MAAM,cAAc,CAAC;AAGvD,OAAO,EAGN,KAAK,KAAK,EACV,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACN,kBAAkB,EAGlB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,MAAM,qBAAqB,CAAC;AAM7B,OAAO,EAAe,KAAK,oBAAoB,EAAC,MAAM,oBAAoB,CAAC;AAG3E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH;;;;;;;GAOG;AACH,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE/D;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC7B,oDAAoD;IACpD,OAAO,EAAE,aAAa,CAAC;IACvB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oDAAoD;IACpD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oDAAoD;IACpD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,mDAAmD;AACnD,MAAM,MAAM,gBAAgB,GACzB,QAAQ,GACR,OAAO,GACP,cAAc,GACd,SAAS,GACT,cAAc,GACd,kBAAkB,GAClB,QAAQ,GACR,aAAa,GACb,cAAc,GACd,OAAO,GACP,aAAa,CAAC;AAEjB,MAAM,WAAW,YAAY;IAC5B,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACpB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,+DAA+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yEAAyE;IACzE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0EAA0E;IAC1E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;OAIG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,wDAAwD;IACxD,OAAO,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,KAAK,CAAC;IACb,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACxB,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;AAE7B,MAAM,WAAW,oBAAoB;IACpC,iDAAiD;IACjD,WAAW,EAAE,MAAM,CAAC;IACpB,qDAAqD;IACrD,GAAG,EAAE,MAAM,CAAC;IACZ,4DAA4D;IAC5D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B;;;OAGG;IACH,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB;;;;;;;;;;OAUG;IACH,UAAU,CAAC,EAAE,kBAAkB,CAAC;IAChC,0FAA0F;IAC1F,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2DAA2D;IAC3D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;;OASG;IACH,WAAW,CAAC,EAAE,sBAAsB,CAAC;IACrC;;;;;;;;;;;;OAYG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;;;OAKG;IACH,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;;;;;;;;;;;;OAYG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;;;;;;;;;;OAYG;IACH,oBAAoB,CAAC,EAAE,WAAW,CAAC;IACnC;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,WAAW,CAAC;IAClC;;;;;;;;;;;;OAYG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;;;;;;;;;OAWG;IACH,oBAAoB,CAAC,EAAE,WAAW,CAAC;IACnC;;;;;;;;OAQG;IACH,mBAAmB,CAAC,EAAE,WAAW,CAAC;IAClC;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,cAAc,CAAC;IAClC;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB;;;;;;;;;;;OAWG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gFAAgF;IAChF,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,8CAA8C;IAC9C,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACjC;AAID;;;;;;;;;;GAUG;AACH,eAAO,MAAM,gBAAgB,QAAkC,CAAC;AA+BhE;;;;;;GAMG;AACH,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,MAAM,CAAC;AAIjD;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,sBAAsB;IACtC,qFAAqF;IACrF,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,iDAAiD;IACjD,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,6EAA6E;IAC7E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,+EAA+E;IAC/E,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,6EAA6E;IAC7E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,+EAA+E;IAC/E,WAAW,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,qFAAqF;AACrF,MAAM,WAAW,sBAAsB;IACtC,gDAAgD;IAChD,IAAI,EAAE,eAAe,CAAC;IACtB;;;;OAIG;IACH,IAAI,EAAE,eAAe,CAAC;CACtB;AA4BD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,6BAA6B,CAC5C,KAAK,EAAE,sBAAsB,EAC7B,WAAW,GAAE,eAAqC,GAChD,sBAAsB,CA0BxB;AAED;;;;;GAKG;AACH,wBAAsB,aAAa,CAClC,OAAO,EAAE,oBAAoB,GAC3B,OAAO,CAAC,YAAY,CAAC,CA2KvB;AA60BD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,8BAA8B,CAAC,MAAM,EAAE;IACtD,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,eAAe,GAAG,SAAS,CAAC;IACzC,IAAI,EAAE,MAAM,EAAE,CAAC;CACf,GAAG,MAAM,CAkBT;AAqGD;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;CAC1B,GAAG,MAAM,CA+BT;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,OAAO,GAAG,SAAS,CAAC;IAC/B,YAAY,EAAE,OAAO,GAAG,SAAS,CAAC;IAClC;;;;;OAKG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;CAC1B,GAAG,MAAM,CAyCT;AAuGD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,CAkEhE;AAqBD;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,GAAG,aAAa,CAAC;AAElD;;;;;;GAMG;AACH,MAAM,MAAM,qBAAqB,GAAG,aAAa,CAAC;AAElD,gFAAgF;AAChF,MAAM,WAAW,uBAAuB;IACvC,4DAA4D;IAC5D,IAAI,EAAE,MAAM,CAAC;IACb,0EAA0E;IAC1E,WAAW,EAAE,MAAM,CAAC;IACpB,6DAA6D;IAC7D,KAAK,EAAE,MAAM,CAAC;IACd,uFAAuF;IACvF,IAAI,EAAE,MAAM,CAAC;IACb,oFAAoF;IACpF,KAAK,EAAE,MAAM,CAAC;IACd,qDAAqD;IACrD,GAAG,EAAE,MAAM,CAAC;IACZ,+CAA+C;IAC/C,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACxB;AAED;;;;;GAKG;AACH,MAAM,MAAM,kBAAkB,GAAG,CAChC,KAAK,EAAE,uBAAuB,KAC1B,OAAO,CAAC,qBAAqB,CAAC,CAAC;AAuMpC,uEAAuE;AACvE,MAAM,WAAW,gCAAgC;IAChD,sEAAsE;IACtE,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+DAA+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CACxC,OAAO,GAAE,gCAAqC,GAC5C,kBAAkB,CA0BpB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,yBAAyB,CACxC,KAAK,EAAE,uBAAuB,GAC5B,MAAM,CAsDR;AAED;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,2BAAqB,CAAC;AAE7D;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,uBAAuB,CACtC,KAAK,EAAE,KAAK,EACZ,QAAQ,EAAE,YAAY,EAAE,EACxB,MAAM,CAAC,EAAE,oBAAoB,GAC3B,MAAM,CA4HR"}