orizu 0.5.19 → 0.5.21

package/dist/prompt-label-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-label-cli.d.ts","sourceRoot":"","sources":["../src/prompt-label-cli.ts"],"names":[],"mappings":"AAGA,UAAU,qBAAqB;IAC7B,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAA;IACvC,gBAAgB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAA;IAClD,IAAI,EAAE,OAAO,CAAA;IACb,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;IACnD,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAA;IAClC,kBAAkB,EAAE,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;CAChE;AAYD,wBAAsB,cAAc,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAgClF"}

package/dist/prompt-label-cli.js

@@ -0,0 +1,29 @@
+import { authedFetch } from './http.js';
+import { parseJsonResponse, sanitizeTerminalText } from './json-response.js';
+export async function setPromptLabel(context) {
+    const promptName = context.getPositionalArg(3);
+    const label = context.getPositionalArg(4);
+    const project = context.getArg('--project') || await context.resolveProjectSlug(null);
+    const promptVersionId = context.getArg('--version');
+    if (!promptName || !label || !promptVersionId) {
+        throw new Error('Usage: orizu prompts labels set <prompt-name> <label> --version <prompt-version-id> [--project <team/project>] [--json]');
+    }
+    const response = await authedFetch(`/api/cli/prompts/labels?project=${encodeURIComponent(project)}`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ promptName, label, promptVersionId }),
+    });
+    if (!response.ok) {
+        throw new Error(`Failed to set prompt label: ${await response.text()}`);
+    }
+    const data = await parseJsonResponse(response, 'Prompt label set');
+    if (context.json) {
+        context.printJson(data);
+        return;
+    }
+    context.printLine(`Moved ${sanitizeTerminalText(label)} to ${sanitizeTerminalText(promptVersionId)}`);
+    if (data.owner) {
+        context.printLine(`Owner: ${sanitizeTerminalText(promptName)} (${sanitizeTerminalText(data.prompt_id)}) -> ` +
+            `${sanitizeTerminalText(data.owner.instructionSetSlug)} / ${sanitizeTerminalText(data.owner.componentKey)}`);
+    }
+}

package/dist/prompt-length-wire.d.ts

@@ -0,0 +1,28 @@
+export declare const CLI_LENGTH_STATS_FIELDS: readonly ["tokens", "lines", "chars", "words"];
+export declare const CLI_LENGTH_DELTA_SPLIT_UNAVAILABLE_REASONS: readonly ["diff_degraded_size_limit", "diff_degraded_cell_limit"];
+export declare const CLI_LENGTH_MEASUREMENT_UNAVAILABLE_REASONS: readonly ["length_measurement_size_limit", "length_measurement_failed", "body_resolution_failed", "measurement_cap_exceeded", "enrichment_failed", "bodies_unavailable_event_cap"];
+export type CliLengthStatsField = typeof CLI_LENGTH_STATS_FIELDS[number];
+export type CliLengthDeltaSplitUnavailableReason = typeof CLI_LENGTH_DELTA_SPLIT_UNAVAILABLE_REASONS[number];
+export type CliLengthMeasurementUnavailableReason = typeof CLI_LENGTH_MEASUREMENT_UNAVAILABLE_REASONS[number];
+export interface CliLengthStats {
+    tokens: number;
+    lines: number;
+    chars: number;
+    words: number;
+}
+export interface CliLengthStatsPair {
+    from: CliLengthStats | null;
+    to: CliLengthStats | null;
+    fromUnavailableReason?: CliLengthMeasurementUnavailableReason;
+    toUnavailableReason?: CliLengthMeasurementUnavailableReason;
+}
+export interface CliLengthMetricDelta {
+    removed: number | null;
+    added: number | null;
+    net: number;
+}
+export interface CliLengthDelta extends Record<CliLengthStatsField, CliLengthMetricDelta> {
+    splitUnavailableReason: CliLengthDeltaSplitUnavailableReason | null;
+}
+export declare function formatFiniteLengthCount(value: unknown, signed?: boolean): string | null;
+//# sourceMappingURL=prompt-length-wire.d.ts.map

package/dist/prompt-length-wire.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-length-wire.d.ts","sourceRoot":"","sources":["../src/prompt-length-wire.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,uBAAuB,gDAK1B,CAAA;AAEV,eAAO,MAAM,0CAA0C,mEAG7C,CAAA;AACV,eAAO,MAAM,0CAA0C,oLAO7C,CAAA;AAEV,MAAM,MAAM,mBAAmB,GAAG,OAAO,uBAAuB,CAAC,MAAM,CAAC,CAAA;AACxE,MAAM,MAAM,oCAAoC,GAC9C,OAAO,0CAA0C,CAAC,MAAM,CAAC,CAAA;AAC3D,MAAM,MAAM,qCAAqC,GAC/C,OAAO,0CAA0C,CAAC,MAAM,CAAC,CAAA;AAE3D,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,cAAc,GAAG,IAAI,CAAA;IAC3B,EAAE,EAAE,cAAc,GAAG,IAAI,CAAA;IACzB,qBAAqB,CAAC,EAAE,qCAAqC,CAAA;IAC7D,mBAAmB,CAAC,EAAE,qCAAqC,CAAA;CAC5D;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,GAAG,EAAE,MAAM,CAAA;CACZ;AAED,MAAM,WAAW,cAAe,SAAQ,MAAM,CAC5C,mBAAmB,EACnB,oBAAoB,CACrB;IACC,sBAAsB,EAAE,oCAAoC,GAAG,IAAI,CAAA;CACpE;AAED,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,OAAO,EACd,MAAM,UAAQ,GACb,MAAM,GAAG,IAAI,CAQf"}

package/dist/prompt-length-wire.js

@@ -19,9 +19,9 @@ export const CLI_LENGTH_MEASUREMENT_UNAVAILABLE_REASONS = [
 export function formatFiniteLengthCount(value, signed = false) {
     if (typeof value !== 'number' || !Number.isFinite(value))
         return null;
-    const formatted = Math.abs(value).toLocaleString('en-US');
     if (!signed)
-        return formatted;
+        return value.toLocaleString('en-US');
+    const formatted = Math.abs(value).toLocaleString('en-US');
     if (value > 0)
         return `+${formatted}`;
     if (value < 0)

package/dist/prompt-report-cli.d.ts

@@ -0,0 +1,10 @@
+export interface PromptReportCliContext {
+    resolveProjectSlug: (project: string | null) => Promise<string>;
+    json: boolean;
+    printJson: (payload: Record<string, unknown>) => void;
+    printLine: (message?: string) => void;
+    fetcher?: (path: string, init?: RequestInit) => Promise<Response>;
+}
+export declare function promptReportCommand(args: readonly string[], context: PromptReportCliContext): Promise<void>;
+export declare function promptPushErrorMessage(response: Response, kind: 'prompt' | 'judge', hasReport: boolean): Promise<string>;
+//# sourceMappingURL=prompt-report-cli.d.ts.map

package/dist/prompt-report-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-report-cli.d.ts","sourceRoot":"","sources":["../src/prompt-report-cli.ts"],"names":[],"mappings":"AAoBA,MAAM,WAAW,sBAAsB;IACrC,kBAAkB,EAAE,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;IAC/D,IAAI,EAAE,OAAO,CAAA;IACb,SAAS,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;IACrD,SAAS,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;IACrC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;CAClE;AAiBD,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,EAAE,sBAAsB,iBA0EhC;AAED,wBAAsB,sBAAsB,CAC1C,QAAQ,EAAE,QAAQ,EAClB,IAAI,EAAE,QAAQ,GAAG,OAAO,EACxB,SAAS,EAAE,OAAO,GACjB,OAAO,CAAC,MAAM,CAAC,CASjB"}

package/dist/prompt-report-cli.js

@@ -27,7 +27,7 @@ export async function promptReportCommand(args, context) {
         rejectDashPrefixedOptionValue(name, value);
     }
     if (!prompt) {
-        throw new Error('Usage: orizu prompts report set --prompt <id-or-name> --project <team/project> ' +
+        throw new Error('Usage: orizu prompts report set --prompt <id-or-name> [--project <team/project>] ' +
             '(--version <n> | --version-id <id>) ' +
             '(--report <markdown|@file> | --report-file <path>) [--json]');
     }
@@ -39,7 +39,7 @@ export async function promptReportCommand(args, context) {
     }
     const report = readMarkdownReportInput(args, 'Prompt');
     if (!report) {
-        throw new Error('Usage: orizu prompts report set --prompt <id-or-name> --project <team/project> ' +
+        throw new Error('Usage: orizu prompts report set --prompt <id-or-name> [--project <team/project>] ' +
             '(--version <n> | --version-id <id>) ' +
             '(--report <markdown|@file> | --report-file <path>) [--json]');
     }

package/dist/prompt-summary-table.d.ts

@@ -0,0 +1,15 @@
+import { type CliLengthStats } from './prompt-length-wire.js';
+interface PromptSummaryRow {
+    id: string;
+    name: string;
+    role: string;
+    status?: string;
+    lengthStats?: CliLengthStats | null;
+    owner?: {
+        instructionSetSlug: string;
+        componentKey: string;
+    } | null;
+}
+export declare function printPromptSummaryTable(items: PromptSummaryRow[], emptyMessage: string, printLine: (line: string) => void): void;
+export {};
+//# sourceMappingURL=prompt-summary-table.d.ts.map

package/dist/prompt-summary-table.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-summary-table.d.ts","sourceRoot":"","sources":["../src/prompt-summary-table.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,cAAc,EACpB,MAAM,yBAAyB,CAAA;AAEhC,UAAU,gBAAgB;IACxB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,WAAW,CAAC,EAAE,cAAc,GAAG,IAAI,CAAA;IACnC,KAAK,CAAC,EAAE;QACN,kBAAkB,EAAE,MAAM,CAAA;QAC1B,YAAY,EAAE,MAAM,CAAA;KACrB,GAAG,IAAI,CAAA;CACT;AAED,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,gBAAgB,EAAE,EACzB,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,QA+ClC"}

package/dist/prompt-summary-table.js

@@ -34,4 +34,10 @@ export function printPromptSummaryTable(items, emptyMessage, printLine) {
     rows.forEach(row => {
         printLine(keys.map((key, index) => row[key].padEnd(widths[index])).join('  '));
     });
+    items.forEach(item => {
+        if (item.owner) {
+            printLine(`Owner: ${sanitizeTerminalText(item.name)} (${sanitizeTerminalText(item.id)}) -> ` +
+                `${sanitizeTerminalText(item.owner.instructionSetSlug)} / ${sanitizeTerminalText(item.owner.componentKey)}`);
+        }
+    });
 }

package/dist/registration-tag-warning.d.ts

@@ -0,0 +1,32 @@
+/**
+ * ADR-009 amendment / ALI-1157 (Codex P2 finding 5): a shared, human-readable
+ * warning for a registration-tag failure on a draft push.
+ *
+ * "Registration is publication": every draft writer plants a permanent
+ * `orizu/registered/<kind>/<versionId>` tag at the row's pinned commit. That
+ * tag is BEST-EFFORT — the row + commit pin are already durable, so a tag that
+ * fails to plant never fails the push (exit stays 0). But the failure used to
+ * be visible only under `--json`; normal output printed unconditional success.
+ * This surfaces it as a one-line warning the push commands append to their
+ * success message.
+ *
+ * Codex round-2 finding 4: the warning must NOT promise automatic retry — no
+ * reconciler exists yet (it is a tracked follow-up). It states the version is
+ * registered and the tag can be re-planted on the next registration or by hand.
+ *
+ * A tag "failed to plant" when `registration_tag.planted === false` (the tag
+ * already exists at a DIFFERENT commit — never moved — or the transport/pin
+ * lookup failed). `planted === true` (freshly created OR idempotent replay)
+ * and a missing field (older server / no tag attempted) produce no warning.
+ */
+/**
+ * A one-line warning for a failed registration tag on a draft-push response
+ * body, or null when the tag planted (or none was attempted).
+ */
+export declare function registrationTagWarning(data: Record<string, unknown>): string | null;
+/**
+ * Append the registration-tag warning (if any) to a push success message,
+ * keeping it a single trailing line. Exit stays 0 — registration succeeded.
+ */
+export declare function appendRegistrationTagWarning(message: string, data: Record<string, unknown>): string;
+//# sourceMappingURL=registration-tag-warning.d.ts.map

package/dist/registration-tag-warning.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registration-tag-warning.d.ts","sourceRoot":"","sources":["../src/registration-tag-warning.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAYH;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,GAAG,IAAI,CAYnF;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAGnG"}

package/dist/report-comments-cli.d.ts

@@ -0,0 +1,16 @@
+export interface ReportCommentsCliContext {
+    getArg: (name: string) => string | null;
+    getPositionalArg: (index: number) => string | null;
+    rejectDashPrefixedOptionValue: (name: string, value: string | null) => void;
+    resolveProjectSlug: (preferredProject: string | null) => Promise<string>;
+    readSourceFile: (pathArg: string) => string;
+    authedFetch: (path: string, init?: RequestInit) => Promise<Response>;
+    parseJsonResponse: <T>(response: Response, context: string) => Promise<T>;
+    hasJsonFlag: () => boolean;
+    printJson: (value: Record<string, unknown>) => void;
+    printLine: (message?: string) => void;
+    sanitizeTerminalText: (value: unknown) => string;
+}
+export declare function reportCommentsCommand(action: string | undefined, ctx: ReportCommentsCliContext): Promise<void>;
+export declare function throwDeprecatedPromptCommentsCommand(): never;
+//# sourceMappingURL=report-comments-cli.d.ts.map

package/dist/report-comments-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"report-comments-cli.d.ts","sourceRoot":"","sources":["../src/report-comments-cli.ts"],"names":[],"mappings":"AA6FA,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAA;IACvC,gBAAgB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAA;IAClD,6BAA6B,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAA;IAC3E,kBAAkB,EAAE,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;IACxE,cAAc,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,CAAA;IAC3C,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;IACpE,iBAAiB,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,CAAA;IACzE,WAAW,EAAE,MAAM,OAAO,CAAA;IAC1B,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;IACnD,SAAS,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;IACrC,oBAAoB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAA;CACjD;AA6YD,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,GAAG,EAAE,wBAAwB,iBAqB9B;AAED,wBAAgB,oCAAoC,IAAI,KAAK,CAI5D"}

package/dist/report-markdown-blankness.d.ts

@@ -0,0 +1,2 @@
+export declare function hasCanonicalReportMarkdownContent(markdown: string): boolean;
+//# sourceMappingURL=report-markdown-blankness.d.ts.map

package/dist/report-markdown-blankness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"report-markdown-blankness.d.ts","sourceRoot":"","sources":["../src/report-markdown-blankness.ts"],"names":[],"mappings":"AAGA,wBAAgB,iCAAiC,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAE3E"}

package/dist/report-markdown-blankness.js

@@ -0,0 +1,6 @@
+// JavaScript's \s is broader than the database locale's POSIX [:space:]
+// predicate. These four code points are content in the measured PostgreSQL
+// boundary, so retain them explicitly when validating CLI report input.
+export function hasCanonicalReportMarkdownContent(markdown) {
+    return /(?:[^\s]|[\u00a0\u2007\u202f\ufeff])/u.test(markdown);
+}

package/dist/report-replacement-warning.d.ts

@@ -0,0 +1,17 @@
+/**
+ * ALI-1452: a shared, human-readable warning for a replaced prompt-version
+ * report on a push/draft response.
+ *
+ * Re-pushing an unchanged prompt with a report deliberately replaces the
+ * version's existing report (reports are correctable; versions are immutable).
+ * The server discloses that replacement as `report_replaced:
+ * { source_name, updated_at } | null`; this turns a non-null disclosure into
+ * the stderr warning line the push commands print. JSON mode prints nothing —
+ * the payload already carries `report_replaced`.
+ */
+/**
+ * A one-line warning when a push response discloses that it replaced an
+ * existing report, or null when nothing was replaced (or no report was sent).
+ */
+export declare function reportReplacementWarning(data: Record<string, unknown>): string | null;
+//# sourceMappingURL=report-replacement-warning.d.ts.map

package/dist/report-replacement-warning.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"report-replacement-warning.d.ts","sourceRoot":"","sources":["../src/report-replacement-warning.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAMH;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,GAAG,IAAI,CAcrF"}

package/dist/report-replacement-warning.js

@@ -0,0 +1,31 @@
+/**
+ * ALI-1452: a shared, human-readable warning for a replaced prompt-version
+ * report on a push/draft response.
+ *
+ * Re-pushing an unchanged prompt with a report deliberately replaces the
+ * version's existing report (reports are correctable; versions are immutable).
+ * The server discloses that replacement as `report_replaced:
+ * { source_name, updated_at } | null`; this turns a non-null disclosure into
+ * the stderr warning line the push commands print. JSON mode prints nothing —
+ * the payload already carries `report_replaced`.
+ */
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+/**
+ * A one-line warning when a push response discloses that it replaced an
+ * existing report, or null when nothing was replaced (or no report was sent).
+ */
+export function reportReplacementWarning(data) {
+    const replaced = data.report_replaced;
+    if (!isRecord(replaced))
+        return null;
+    const sourceName = typeof replaced.source_name === 'string'
+        ? replaced.source_name
+        : 'unknown source';
+    const updatedAt = typeof replaced.updated_at === 'string'
+        ? replaced.updated_at
+        : 'unknown time';
+    return ('Warning: replaced the existing report for this version ' +
+        `(${sourceName}, last updated ${updatedAt})`);
+}

package/dist/repository-backup-core.d.ts

@@ -0,0 +1,225 @@
+import { type ReadStream } from 'node:fs';
+import { type RecoveryCredentialHelperInvocation } from './git-recovery-environment.js';
+import { type FrozenRepositoryDatabasePin, type RepositoryBackupAdmissionEnvelopeVersion, type RepositoryRecoveryManifest, type RepositoryRecoveryRef, type RepositoryRefBindingMode } from './repository-recovery-manifest.js';
+export interface RepositoryBackupLimits {
+    maxRefs: number;
+    maxObjects: number;
+    maxObjectBytes: number;
+    maxSingleObjectBytes: number;
+    maxCommits: number;
+    maxTreeEntries: number;
+    maxDatabasePins: number;
+    maxQuarantineBytes: number;
+    maxManifestBytes: number;
+    maxBundleBytes: number;
+    maxGitOutputBytes: number;
+    maxGitInputBytes: number;
+    /**
+     * Hard memory ceiling requested for the complete isolated job, not merely
+     * the Node.js heap or one Git child.
+     */
+    maxMemoryBytes: number;
+    /**
+     * Hard task ceiling requested for the complete job process tree. Production
+     * boundaries count threads as tasks so Git cannot bypass it with workers.
+     */
+    maxProcessCount: number;
+    commandTimeoutMs: number;
+    overallTimeoutMs: number;
+}
+export declare const MAX_REPOSITORY_BACKUP_MEMORY_BYTES: number;
+export declare const MAX_REPOSITORY_BACKUP_PROCESS_COUNT = 64;
+export declare const DEFAULT_REPOSITORY_BACKUP_LIMITS: Readonly<RepositoryBackupLimits>;
+export interface RepositoryRefAdvertisement {
+    headTarget: string | null;
+    headObjectId: string | null;
+    refs: RepositoryRecoveryRef[];
+    peeledRefs: RepositoryRecoveryRef[];
+}
+export interface CloudflareArtifactsRepositoryTarget {
+    accountId: string;
+    namespace: string;
+    repository: string;
+}
+export interface RepositoryBackupExecutionBoundaryRequest {
+    /**
+     * The hard quota that must apply to the complete job filesystem, including
+     * source quarantine, bundle, manifest, and independent restore quarantine.
+     */
+    quotaBytes: number;
+    /**
+     * Hard total-memory ceiling for the job and all descendants. This must be
+     * independently enforced by the execution platform, not by a heap flag.
+     */
+    maxMemoryBytes: number;
+    /**
+     * Hard process/thread-task ceiling for the job and all descendants.
+     */
+    maxProcessCount: number;
+    purpose: 'create-and-verify' | 'verify-existing';
+    /**
+     * Hard wall for the complete filesystem-scoped operation. Production
+     * boundaries must terminate the job process and all descendants when this
+     * expires; an in-process AbortSignal alone is not an isolation boundary.
+     */
+    timeoutMs: number;
+}
+export interface RepositoryBackupExecutionFilesystem {
+    /** Empty, absolute filesystem root dedicated to exactly this job. */
+    rootPath: string;
+    quotaBytes: number;
+    maxMemoryBytes: number;
+    maxProcessCount: number;
+    isolation: 'per-job';
+    /**
+     * `hard` means the execution platform enforces quota independently of this
+     * process (for example, a sandbox volume/filesystem quota). The test-only
+     * mode is accepted only for explicit local fixtures.
+     */
+    quotaEnforcement: 'hard' | 'test-only-unenforced';
+    /**
+     * These attest that the boundary applied the requested limits to the whole
+     * job process tree before invoking the operation.
+     */
+    memoryEnforcement: 'hard' | 'test-only-unenforced';
+    processCountEnforcement: 'hard' | 'test-only-unenforced';
+}
+/**
+ * Production execution boundary. Implementations must provision a new,
+ * isolated filesystem with the exact requested hard quota, invoke `operation`
+ * exactly once, wait for it to settle, then destroy the filesystem. Merely
+ * pointing at a shared host temp directory does not satisfy this contract.
+ */
+export interface RepositoryBackupExecutionBoundary {
+    withJobFilesystem<T>(request: RepositoryBackupExecutionBoundaryRequest, operation: (filesystem: RepositoryBackupExecutionFilesystem) => Promise<T>): Promise<T>;
+}
+export interface PathBackedRepositoryBackupArtifact {
+    /**
+     * Valid only for the duration of consumeVerifiedArtifacts. Callers should
+     * stream it and must not retain the path after the callback resolves.
+     */
+    path: string;
+    byteCount: number;
+    sha256: string;
+    openStream(): ReadStream;
+}
+export interface VerifiedRepositoryBackupArtifacts {
+    manifest: PathBackedRepositoryBackupArtifact;
+    bundle: PathBackedRepositoryBackupArtifact;
+}
+export interface RepositoryBackupDeadline {
+    /**
+     * Aborts at the same absolute deadline as the complete backup operation.
+     * Streaming implementations must pass this signal to every provider read,
+     * upload, and checksum/readback request.
+     */
+    signal: AbortSignal;
+    deadlineMs: number;
+}
+/**
+ * Deterministic scheduler seam for local recovery fixtures. Production
+ * callers always use the platform timer and cannot override the overall wall.
+ */
+export interface RepositoryBackupTestDeadlineScheduler {
+    schedule(callback: () => void, delayMs: number): unknown;
+    cancel(handle: unknown): void;
+}
+export interface RepositoryBackupArtifactDestinations {
+    /**
+     * Create both files without following links and finish all writes before
+     * returning. Production implementations stream downloads into these paths.
+     */
+    manifestPath: string;
+    bundlePath: string;
+}
+export interface CreateVerifiedRepositoryBackupInput<TArtifactResult = unknown> {
+    /**
+     * Immutable admission policy frozen by the backup job. A new limit set
+     * receives a new version; an existing version is never reinterpreted.
+     */
+    admissionEnvelopeVersion: RepositoryBackupAdmissionEnvelopeVersion;
+    /**
+     * Secret-free remote locator. Production authentication is supplied only by
+     * the trusted backup worker's command-scoped exact-path helper below.
+     */
+    remoteUrl: string;
+    /**
+     * Exact provider identity frozen by the backup job. Every production remote
+     * is reconstructed from this tuple and compared byte-for-byte before Git is
+     * spawned, so an attacker-controlled locator cannot redirect the
+     * operation-scoped credential helper to another origin or repository.
+     */
+    cloudflareArtifactsTarget?: CloudflareArtifactsRepositoryTarget;
+    /**
+     * Test-only/local-rehearsal escape hatch. Production callers accept HTTPS
+     * only. `file://` is never inferred from an ambient Git config.
+     */
+    allowLocalRemote?: boolean;
+    /**
+     * Optional trusted executable invocation; arguments may identify an opaque
+     * operation but must never contain a token/password. The helper obtains a
+     * one-use credential when Git asks and store/erase remain no-ops.
+     */
+    credentialHelper?: RecoveryCredentialHelperInvocation;
+    requiredRef: string;
+    /**
+     * Exact is required for immutable publication/bootstrap/recovery refs.
+     * Reachability keeps a frozen historical merge/scheduled commit executable
+     * after its provenance branch advances.
+     */
+    requiredRefBindingMode?: RepositoryRefBindingMode;
+    requiredCommitSha: string;
+    databasePins: readonly FrozenRepositoryDatabasePin[];
+    limits?: Partial<RepositoryBackupLimits>;
+    executionBoundary: RepositoryBackupExecutionBoundary;
+    /**
+     * Test-only scheduler for deterministic deadline tests. It is rejected
+     * unless the remote is an explicit local fixture and the execution boundary
+     * attests that every resource limit is test-only and unenforced.
+     */
+    testDeadlineScheduler?: RepositoryBackupTestDeadlineScheduler;
+    /**
+     * Runs only after source-side and independent restore verification. Stream
+     * both path-backed artifacts to durable storage before returning; the
+     * execution boundary destroys every path after this callback settles.
+     */
+    consumeVerifiedArtifacts: (artifacts: VerifiedRepositoryBackupArtifacts, deadline: RepositoryBackupDeadline) => Promise<TArtifactResult>;
+}
+export interface VerifiedRepositoryBackup<TArtifactResult = unknown> {
+    manifest: RepositoryRecoveryManifest;
+    /**
+     * Plaintext artifact hashes. Storage code must verify the uploaded
+     * FULL_OBJECT checksum and separately record exact object version, KMS key,
+     * and retention evidence. Neither value is a ciphertext hash.
+     */
+    manifestSha256: string;
+    bundleSha256: string;
+    manifestByteCount: number;
+    bundleByteCount: number;
+    artifactResult: TArtifactResult;
+    advertisementBefore: RepositoryRefAdvertisement;
+    advertisementAfter: RepositoryRefAdvertisement;
+}
+export interface VerifyRepositoryBackupBundleInput {
+    /**
+     * Exact version frozen by the backup attempt. It must match the persisted
+     * manifest before any restored evidence is accepted.
+     */
+    admissionEnvelopeVersion: RepositoryBackupAdmissionEnvelopeVersion;
+    limits?: Partial<RepositoryBackupLimits> | RepositoryBackupLimits;
+    executionBoundary: RepositoryBackupExecutionBoundary;
+    /**
+     * Stream existing artifacts into the exact fresh paths supplied by the
+     * verifier. This avoids accepting or copying a multi-gigabyte Buffer.
+     */
+    stageArtifacts: (destinations: RepositoryBackupArtifactDestinations, deadline: RepositoryBackupDeadline) => Promise<void>;
+}
+export interface RepositoryBackupVerificationReceipt {
+    refsVerified: number;
+    objectsVerified: number;
+    databasePinsVerified: number;
+}
+export declare function assertStableRepositoryRefAdvertisement(before: RepositoryRefAdvertisement, after: RepositoryRefAdvertisement): void;
+export declare function verifyRepositoryBackupBundle(input: VerifyRepositoryBackupBundleInput): Promise<RepositoryBackupVerificationReceipt>;
+export declare function createVerifiedRepositoryBackup<TArtifactResult>(input: CreateVerifiedRepositoryBackupInput<TArtifactResult>): Promise<VerifiedRepositoryBackup<TArtifactResult>>;
+//# sourceMappingURL=repository-backup-core.d.ts.map

package/dist/repository-backup-core.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository-backup-core.d.ts","sourceRoot":"","sources":["../src/repository-backup-core.ts"],"names":[],"mappings":"AAEA,OAAO,EAAoB,KAAK,UAAU,EAAE,MAAM,SAAS,CAAA;AAY3D,OAAO,EAEL,KAAK,kCAAkC,EACxC,MAAM,+BAA+B,CAAA;AACtC,OAAO,EAML,KAAK,2BAA2B,EAEhC,KAAK,wCAAwC,EAC7C,KAAK,0BAA0B,EAE/B,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAI9B,MAAM,mCAAmC,CAAA;AAE1C,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,cAAc,EAAE,MAAM,CAAA;IACtB,oBAAoB,EAAE,MAAM,CAAA;IAC5B,UAAU,EAAE,MAAM,CAAA;IAClB,cAAc,EAAE,MAAM,CAAA;IACtB,eAAe,EAAE,MAAM,CAAA;IACvB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,gBAAgB,EAAE,MAAM,CAAA;IACxB,cAAc,EAAE,MAAM,CAAA;IACtB,iBAAiB,EAAE,MAAM,CAAA;IACzB,gBAAgB,EAAE,MAAM,CAAA;IACxB;;;OAGG;IACH,cAAc,EAAE,MAAM,CAAA;IACtB;;;OAGG;IACH,eAAe,EAAE,MAAM,CAAA;IACvB,gBAAgB,EAAE,MAAM,CAAA;IACxB,gBAAgB,EAAE,MAAM,CAAA;CACzB;AAED,eAAO,MAAM,kCAAkC,QACvB,CAAA;AACxB,eAAO,MAAM,mCAAmC,KAAK,CAAA;AAErD,eAAO,MAAM,gCAAgC,EAAE,QAAQ,CAAC,sBAAsB,CAoB1E,CAAA;AAEJ,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,IAAI,EAAE,qBAAqB,EAAE,CAAA;IAC7B,UAAU,EAAE,qBAAqB,EAAE,CAAA;CACpC;AAED,MAAM,WAAW,mCAAmC;IAClD,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,wCAAwC;IACvD;;;OAGG;IACH,UAAU,EAAE,MAAM,CAAA;IAClB;;;OAGG;IACH,cAAc,EAAE,MAAM,CAAA;IACtB;;OAEG;IACH,eAAe,EAAE,MAAM,CAAA;IACvB,OAAO,EAAE,mBAAmB,GAAG,iBAAiB,CAAA;IAChD;;;;OAIG;IACH,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,mCAAmC;IAClD,qEAAqE;IACrE,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,cAAc,EAAE,MAAM,CAAA;IACtB,eAAe,EAAE,MAAM,CAAA;IACvB,SAAS,EAAE,SAAS,CAAA;IACpB;;;;OAIG;IACH,gBAAgB,EAAE,MAAM,GAAG,sBAAsB,CAAA;IACjD;;;OAGG;IACH,iBAAiB,EAAE,MAAM,GAAG,sBAAsB,CAAA;IAClD,uBAAuB,EAAE,MAAM,GAAG,sBAAsB,CAAA;CACzD;AAED;;;;;GAKG;AACH,MAAM,WAAW,iCAAiC;IAChD,iBAAiB,CAAC,CAAC,EACjB,OAAO,EAAE,wCAAwC,EACjD,SAAS,EAAE,CACT,UAAU,EAAE,mCAAmC,KAC5C,OAAO,CAAC,CAAC,CAAC,GACd,OAAO,CAAC,CAAC,CAAC,CAAA;CACd;AAED,MAAM,WAAW,kCAAkC;IACjD;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,IAAI,UAAU,CAAA;CACzB;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,EAAE,kCAAkC,CAAA;IAC5C,MAAM,EAAE,kCAAkC,CAAA;CAC3C;AAED,MAAM,WAAW,wBAAwB;IACvC;;;;OAIG;IACH,MAAM,EAAE,WAAW,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAA;IACxD,MAAM,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAAA;CAC9B;AAED,MAAM,WAAW,oCAAoC;IACnD;;;OAGG;IACH,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,mCAAmC,CAClD,eAAe,GAAG,OAAO;IAEzB;;;OAGG;IACH,wBAAwB,EAAE,wCAAwC,CAAA;IAClE;;;OAGG;IACH,SAAS,EAAE,MAAM,CAAA;IACjB;;;;;OAKG;IACH,yBAAyB,CAAC,EAAE,mCAAmC,CAAA;IAC/D;;;OAGG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,kCAAkC,CAAA;IACrD,WAAW,EAAE,MAAM,CAAA;IACnB;;;;OAIG;IACH,sBAAsB,CAAC,EAAE,wBAAwB,CAAA;IACjD,iBAAiB,EAAE,MAAM,CAAA;IACzB,YAAY,EAAE,SAAS,2BAA2B,EAAE,CAAA;IACpD,MAAM,CAAC,EAAE,OAAO,CAAC,sBAAsB,CAAC,CAAA;IACxC,iBAAiB,EAAE,iCAAiC,CAAA;IACpD;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,qCAAqC,CAAA;IAC7D;;;;OAIG;IACH,wBAAwB,EAAE,CACxB,SAAS,EAAE,iCAAiC,EAC5C,QAAQ,EAAE,wBAAwB,KAC/B,OAAO,CAAC,eAAe,CAAC,CAAA;CAC9B;AAED,MAAM,WAAW,wBAAwB,CAAC,eAAe,GAAG,OAAO;IACjE,QAAQ,EAAE,0BAA0B,CAAA;IACpC;;;;OAIG;IACH,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,MAAM,CAAA;IACpB,iBAAiB,EAAE,MAAM,CAAA;IACzB,eAAe,EAAE,MAAM,CAAA;IACvB,cAAc,EAAE,eAAe,CAAA;IAC/B,mBAAmB,EAAE,0BAA0B,CAAA;IAC/C,kBAAkB,EAAE,0BAA0B,CAAA;CAC/C;AAED,MAAM,WAAW,iCAAiC;IAChD;;;OAGG;IACH,wBAAwB,EAAE,wCAAwC,CAAA;IAClE,MAAM,CAAC,EAAE,OAAO,CAAC,sBAAsB,CAAC,GAAG,sBAAsB,CAAA;IACjE,iBAAiB,EAAE,iCAAiC,CAAA;IACpD;;;OAGG;IACH,cAAc,EAAE,CACd,YAAY,EAAE,oCAAoC,EAClD,QAAQ,EAAE,wBAAwB,KAC/B,OAAO,CAAC,IAAI,CAAC,CAAA;CACnB;AAED,MAAM,WAAW,mCAAmC;IAClD,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;IACvB,oBAAoB,EAAE,MAAM,CAAA;CAC7B;AAw1BD,wBAAgB,sCAAsC,CACpD,MAAM,EAAE,0BAA0B,EAClC,KAAK,EAAE,0BAA0B,GAChC,IAAI,CAIN;AAu8BD,wBAAsB,4BAA4B,CAChD,KAAK,EAAE,iCAAiC,GACvC,OAAO,CAAC,mCAAmC,CAAC,CA8C9C;AAED,wBAAsB,8BAA8B,CAAC,eAAe,EAClE,KAAK,EAAE,mCAAmC,CAAC,eAAe,CAAC,GAC1D,OAAO,CAAC,wBAAwB,CAAC,eAAe,CAAC,CAAC,CA+VpD"}

package/dist/repository-recovery-manifest.d.ts

@@ -0,0 +1,83 @@
+export declare const REPOSITORY_RECOVERY_MANIFEST_KIND: "orizu.repository-recovery-manifest";
+export declare const REPOSITORY_RECOVERY_MANIFEST_VERSION: 1;
+export declare const REPOSITORY_BACKUP_ADMISSION_ENVELOPE_VERSION: 1;
+export type RepositoryBackupAdmissionEnvelopeVersion = typeof REPOSITORY_BACKUP_ADMISSION_ENVELOPE_VERSION;
+export type GitObjectType = 'blob' | 'commit' | 'tag' | 'tree';
+export interface RepositoryRecoveryRef {
+    name: string;
+    objectId: string;
+}
+export interface RepositoryRecoveryObject {
+    objectId: string;
+    type: GitObjectType;
+    size: number;
+}
+export type RepositoryRefBindingMode = 'exact' | 'reachability';
+export type RepositoryDatabasePinRefBindingMode = RepositoryRefBindingMode;
+export type RepositoryDatabasePinPathObjectType = 'blob' | 'tree';
+export interface FrozenRepositoryDatabasePin {
+    pinId: string;
+    kind: string;
+    commitSha: string;
+    /** Frozen provenance ref. Reachability mode does not imply it is still at commitSha. */
+    ref: string;
+    /** Whether the provenance ref tip itself is frozen or only commit reachability is. */
+    refBindingMode: RepositoryDatabasePinRefBindingMode;
+    path?: string;
+    pathObjectType?: RepositoryDatabasePinPathObjectType;
+    pathObjectId?: string;
+    /** Optional byte-level proof for blob pins; tree identity is the Git object ID. */
+    contentSha256?: string;
+}
+export interface RepositoryRecoveryManifestInput {
+    admissionEnvelopeVersion: RepositoryBackupAdmissionEnvelopeVersion;
+    objectFormat: 'sha1';
+    headTarget: string | null;
+    headObjectId: string | null;
+    requiredRef: string;
+    requiredRefBindingMode: RepositoryRefBindingMode;
+    requiredCommitSha: string;
+    refs: readonly RepositoryRecoveryRef[];
+    objects: readonly RepositoryRecoveryObject[];
+    databasePins: readonly FrozenRepositoryDatabasePin[];
+}
+export interface RepositoryRecoveryManifest {
+    kind: typeof REPOSITORY_RECOVERY_MANIFEST_KIND;
+    version: typeof REPOSITORY_RECOVERY_MANIFEST_VERSION;
+    admissionEnvelopeVersion: RepositoryBackupAdmissionEnvelopeVersion;
+    objectFormat: 'sha1';
+    headTarget: string | null;
+    headObjectId: string | null;
+    requiredRef: string;
+    requiredRefBindingMode: RepositoryRefBindingMode;
+    requiredCommitSha: string;
+    refs: RepositoryRecoveryRef[];
+    objects: RepositoryRecoveryObject[];
+    databasePins: FrozenRepositoryDatabasePin[];
+    totals: {
+        refCount: number;
+        objectCount: number;
+        objectBytes: number;
+        databasePinCount: number;
+    };
+}
+export declare function assertSha1ObjectId(value: string, label?: string): void;
+export declare function assertSha256(value: string, label?: string): void;
+/**
+ * A deliberately explicit subset of `git check-ref-format`. Recovery accepts
+ * every ordinary `refs/*` namespace, but never pseudo refs or replace refs:
+ * importing `refs/replace/*` would change object resolution during verification.
+ */
+export declare function assertRecoveryRefName(value: string, label?: string): void;
+export declare function assertSafeRecoveryPath(value: string, label?: string): void;
+export declare function canonicalizeRepositoryRecoveryManifest(input: RepositoryRecoveryManifestInput): RepositoryRecoveryManifest;
+export declare function serializeRepositoryRecoveryManifest(manifest: RepositoryRecoveryManifest): Buffer;
+/**
+ * Parse persisted evidence without silently upgrading, normalizing, or
+ * discarding fields. The byte comparison rejects duplicate JSON keys,
+ * unexpected fields, changed totals, non-canonical ordering/whitespace, and
+ * any future manifest version this runtime does not explicitly understand.
+ */
+export declare function parseRepositoryRecoveryManifestBytes(bytes: Uint8Array): RepositoryRecoveryManifest;
+export declare function sha256Hex(bytes: Uint8Array): string;
+//# sourceMappingURL=repository-recovery-manifest.d.ts.map

package/dist/repository-recovery-manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository-recovery-manifest.d.ts","sourceRoot":"","sources":["../src/repository-recovery-manifest.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,iCAAiC,EAC5C,oCAA6C,CAAA;AAC/C,eAAO,MAAM,oCAAoC,EAAG,CAAU,CAAA;AAC9D,eAAO,MAAM,4CAA4C,EAAG,CAAU,CAAA;AAEtE,MAAM,MAAM,wCAAwC,GAClD,OAAO,4CAA4C,CAAA;AAErD,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAA;AAE9D,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,aAAa,CAAA;IACnB,IAAI,EAAE,MAAM,CAAA;CACb;AAED,MAAM,MAAM,wBAAwB,GAChC,OAAO,GACP,cAAc,CAAA;AAClB,MAAM,MAAM,mCAAmC,GAC7C,wBAAwB,CAAA;AAC1B,MAAM,MAAM,mCAAmC,GAAG,MAAM,GAAG,MAAM,CAAA;AAEjE,MAAM,WAAW,2BAA2B;IAC1C,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,wFAAwF;IACxF,GAAG,EAAE,MAAM,CAAA;IACX,sFAAsF;IACtF,cAAc,EAAE,mCAAmC,CAAA;IACnD,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,cAAc,CAAC,EAAE,mCAAmC,CAAA;IACpD,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,mFAAmF;IACnF,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,+BAA+B;IAC9C,wBAAwB,EAAE,wCAAwC,CAAA;IAClE,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,WAAW,EAAE,MAAM,CAAA;IACnB,sBAAsB,EAAE,wBAAwB,CAAA;IAChD,iBAAiB,EAAE,MAAM,CAAA;IACzB,IAAI,EAAE,SAAS,qBAAqB,EAAE,CAAA;IACtC,OAAO,EAAE,SAAS,wBAAwB,EAAE,CAAA;IAC5C,YAAY,EAAE,SAAS,2BAA2B,EAAE,CAAA;CACrD;AAED,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,OAAO,iCAAiC,CAAA;IAC9C,OAAO,EAAE,OAAO,oCAAoC,CAAA;IACpD,wBAAwB,EAAE,wCAAwC,CAAA;IAClE,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,WAAW,EAAE,MAAM,CAAA;IACnB,sBAAsB,EAAE,wBAAwB,CAAA;IAChD,iBAAiB,EAAE,MAAM,CAAA;IACzB,IAAI,EAAE,qBAAqB,EAAE,CAAA;IAC7B,OAAO,EAAE,wBAAwB,EAAE,CAAA;IACnC,YAAY,EAAE,2BAA2B,EAAE,CAAA;IAC3C,MAAM,EAAE;QACN,QAAQ,EAAE,MAAM,CAAA;QAChB,WAAW,EAAE,MAAM,CAAA;QACnB,WAAW,EAAE,MAAM,CAAA;QACnB,gBAAgB,EAAE,MAAM,CAAA;KACzB,CAAA;CACF;AA0BD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,SAAkB,GAAG,IAAI,CAI/E;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,SAAmB,GAAG,IAAI,CAI1E;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,SAAY,GAAG,IAAI,CA+B5E;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,SAAoB,GAAG,IAAI,CAwBrF;AAqGD,wBAAgB,sCAAsC,CACpD,KAAK,EAAE,+BAA+B,GACrC,0BAA0B,CA4J5B;AAgBD,wBAAgB,mCAAmC,CACjD,QAAQ,EAAE,0BAA0B,GACnC,MAAM,CAGR;AAED;;;;;GAKG;AACH,wBAAgB,oCAAoC,CAClD,KAAK,EAAE,UAAU,GAChB,0BAA0B,CAiD5B;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAEnD"}