orizu 0.5.19 → 0.5.21

package/dist/skill-installer.d.ts

@@ -0,0 +1,68 @@
+export declare const SKILL_NAME = "orizu-cli";
+export declare const AGENTS_START_MARKER = "<!-- orizu-cli:start -->";
+export declare const AGENTS_END_MARKER = "<!-- orizu-cli:end -->";
+export declare const SKILL_INSTALL_TARGETS: readonly ["codex-user", "agent-user", "agents-project", "codex-project", "claude-user", "claude-project", "opencode-user", "opencode-project", "agents-md"];
+export type SkillInstallTarget = typeof SKILL_INSTALL_TARGETS[number];
+export declare const SKILL_META_FILENAME = ".orizu-skill-meta.json";
+export declare const SKILL_INSTALL_AGENTS: readonly ["claude", "codex", "opencode"];
+export type SkillInstallAgent = typeof SKILL_INSTALL_AGENTS[number];
+export type SkillInstallScope = 'global' | 'local';
+export type SkillInstallMode = 'auto' | 'link' | 'copy';
+export interface SkillInstallOptions {
+    cwd?: string;
+    homeDir?: string;
+    overwrite?: boolean;
+    dryRun?: boolean;
+    mode?: SkillInstallMode;
+    cliVersion?: string;
+}
+export interface SkillInstallResult {
+    target: SkillInstallTarget;
+    path: string;
+    action: 'created' | 'updated' | 'would-create' | 'would-update';
+    mode: 'link' | 'copy' | 'section';
+}
+export interface SkillInstallMeta {
+    name: string;
+    skillHash: string;
+    cliVersion: string | null;
+    source: SkillSourceType;
+    sourceRoot: string;
+    mode: 'copy';
+    installedAt: string;
+}
+export declare function isSafeRelativeSkillPath(rel: string): boolean;
+export declare function formatMissingSkillSourceError(paths: string[]): string;
+export type SkillSourceType = 'override' | 'packaged' | 'repo-fallback';
+export interface SkillSourceInfo {
+    name: string;
+    root: string;
+    skillMd: string;
+    source: SkillSourceType;
+}
+export declare function resolveSkillSource(): SkillSourceInfo;
+export declare function resolveSkillSourceDir(): string;
+export declare function computeSkillContentHash(root: string): string;
+export declare function getSkillInstallPath(target: SkillInstallTarget, options?: SkillInstallOptions): string;
+export declare function getTargetForAgent(agent: SkillInstallAgent, scope: SkillInstallScope): SkillInstallTarget;
+export declare function isSkillInstallAgent(value: string): value is SkillInstallAgent;
+export declare function isProjectLevelTarget(target: SkillInstallTarget): boolean;
+export declare function isStableSkillSourcePath(root: string): boolean;
+export declare function resolveEffectiveInstallMode(target: SkillInstallTarget, sourceRoot: string, mode?: SkillInstallMode): 'link' | 'copy' | 'section';
+export declare function targetNeedsOverwrite(target: SkillInstallTarget, options?: SkillInstallOptions): boolean;
+export declare function readSkillMeta(targetDir: string): SkillInstallMeta | null;
+export declare function installSkillTarget(target: SkillInstallTarget, options?: SkillInstallOptions): SkillInstallResult;
+export type SkillTargetState = 'current' | 'stale' | 'missing' | 'broken-link' | 'unmanaged';
+export interface SkillTargetStatus {
+    target: SkillInstallTarget;
+    path: string;
+    state: SkillTargetState;
+    mode: 'link' | 'copy' | 'section' | null;
+    linkTarget: string | null;
+    installedHash: string | null;
+    sourceHash: string;
+    meta: SkillInstallMeta | null;
+}
+export declare function getSkillTargetStatus(target: SkillInstallTarget, options?: SkillInstallOptions): SkillTargetStatus;
+export declare function isSkillInstallTarget(value: string): value is SkillInstallTarget;
+//# sourceMappingURL=skill-installer.d.ts.map

package/dist/skill-installer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-installer.d.ts","sourceRoot":"","sources":["../src/skill-installer.ts"],"names":[],"mappings":"AAmBA,eAAO,MAAM,UAAU,cAAc,CAAA;AACrC,eAAO,MAAM,mBAAmB,6BAA6B,CAAA;AAC7D,eAAO,MAAM,iBAAiB,2BAA2B,CAAA;AAEzD,eAAO,MAAM,qBAAqB,6JAUxB,CAAA;AAEV,MAAM,MAAM,kBAAkB,GAAG,OAAO,qBAAqB,CAAC,MAAM,CAAC,CAAA;AAErE,eAAO,MAAM,mBAAmB,2BAA2B,CAAA;AAE3D,eAAO,MAAM,oBAAoB,0CAA2C,CAAA;AAE5E,MAAM,MAAM,iBAAiB,GAAG,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAA;AAEnE,MAAM,MAAM,iBAAiB,GAAG,QAAQ,GAAG,OAAO,CAAA;AAElD,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAA;AASvD,MAAM,WAAW,mBAAmB;IAClC,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,IAAI,CAAC,EAAE,gBAAgB,CAAA;IACvB,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,kBAAkB,CAAA;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,cAAc,GAAG,cAAc,CAAA;IAC/D,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;CAClC;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,MAAM,EAAE,eAAe,CAAA;IACvB,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;CACpB;AAUD,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAE5D;AAED,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAGrE;AAED,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,UAAU,GAAG,eAAe,CAAA;AAEvE,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,eAAe,CAAA;CACxB;AAED,wBAAgB,kBAAkB,IAAI,eAAe,CA0CpD;AAED,wBAAgB,qBAAqB,IAAI,MAAM,CAE9C;AAgBD,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAc5D;AAUD,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,kBAAkB,EAC1B,OAAO,CAAC,EAAE,mBAAmB,GAC5B,MAAM,CAwCR;AAED,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,iBAAiB,EACxB,KAAK,EAAE,iBAAiB,GACvB,kBAAkB,CAQpB;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,iBAAiB,CAE7E;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAExE;AAeD,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAG7D;AAED,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,kBAAkB,EAC1B,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE,gBAAyB,GAC9B,MAAM,GAAG,MAAM,GAAG,SAAS,CAqB7B;AA4GD,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,kBAAkB,EAC1B,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAYT;AAmBD,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI,CAWxE;AAQD,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,kBAAkB,EAC1B,OAAO,CAAC,EAAE,mBAAmB,GAC5B,kBAAkB,CAqCpB;AAED,MAAM,MAAM,gBAAgB,GACxB,SAAS,GACT,OAAO,GACP,SAAS,GACT,aAAa,GACb,WAAW,CAAA;AAEf,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,kBAAkB,CAAA;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,gBAAgB,CAAA;IACvB,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,IAAI,CAAA;IACxC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,gBAAgB,GAAG,IAAI,CAAA;CAC9B;AAoCD,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,kBAAkB,EAC1B,OAAO,CAAC,EAAE,mBAAmB,GAC5B,iBAAiB,CAmDnB;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,kBAAkB,CAE/E"}

package/dist/skilled-proposer-launch.d.ts

@@ -0,0 +1,7 @@
+import type { GepaEngine } from './gepa-engine-dispatch.js';
+export interface SkilledProposerLaunch {
+    python: string;
+    environment: NodeJS.ProcessEnv;
+}
+export declare function prepareSkilledProposerLaunch(python: string, engine: GepaEngine, environment: NodeJS.ProcessEnv): SkilledProposerLaunch;
+//# sourceMappingURL=skilled-proposer-launch.d.ts.map

package/dist/skilled-proposer-launch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skilled-proposer-launch.d.ts","sourceRoot":"","sources":["../src/skilled-proposer-launch.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAa3D,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAC,UAAU,CAAA;CAC/B;AAwCD,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,UAAU,EAClB,WAAW,EAAE,MAAM,CAAC,UAAU,GAC7B,qBAAqB,CAwBvB"}

package/dist/skilled-proposer-launch.js

@@ -0,0 +1,60 @@
+import { spawnSync } from 'child_process';
+import { join } from 'path';
+import { fileURLToPath } from 'url';
+import { bundledOfficialGepaPythonPath } from './gepa-python-paths.js';
+import { sanitizeTerminalText } from './json-response.js';
+function ensureSelectedSkilledProposerVenv(python, vendoredGepaPath) {
+    const manager = fileURLToPath(new URL('../scripts/ensure-skilled-proposer-venv.mjs', import.meta.url));
+    const lock = fileURLToPath(new URL('../requirements/skilled-proposer.lock', import.meta.url));
+    // This is a regenerable workspace cache. The manager's publish key further
+    // separates interpreters, platforms, and lock revisions inside it.
+    const cacheRoot = join(process.cwd(), '.orizu', 'cache', 'skilled-proposer');
+    const result = spawnSync(process.execPath, [manager, '--python', python, '--cache-root', cacheRoot, '--lock', lock,
+        '--vendored-gepa-path', vendoredGepaPath, '--json'], {
+        env: process.env,
+        encoding: 'utf8',
+    });
+    if (result.error) {
+        throw new Error(`ALI_1505_VENV_MANAGER_FAILED: ${result.error.message}`, { cause: result.error });
+    }
+    const stdout = result.stdout || '';
+    const stderr = result.stderr || '';
+    let report;
+    try {
+        report = JSON.parse(stdout);
+    }
+    catch {
+        throw new Error(`ALI_1505_VENV_MANAGER_INVALID_REPORT: ${stderr.trim() || 'manager emitted no JSON report'}`);
+    }
+    if (result.status !== 0) {
+        throw new Error(`${report.error || 'ALI_1505_VENV_MANAGER_FAILED'}: ${report.message || 'skilled-proposer venv manager failed'}`);
+    }
+    if (!report.venv) {
+        throw new Error('ALI_1505_VENV_MANAGER_INVALID_REPORT: successful manager report omitted venv');
+    }
+    return report;
+}
+export function prepareSkilledProposerLaunch(python, engine, environment) {
+    if (engine !== 'official' || environment.ORIZU_CANDIDATE_PROPOSER !== 'skilled-proposer') {
+        return { python, environment };
+    }
+    const vendoredGepaPath = bundledOfficialGepaPythonPath();
+    if (!vendoredGepaPath) {
+        throw new Error('ALI_1505_VENDORED_GEPA_MISSING: skilled-proposer requires the vendored official GEPA source');
+    }
+    const report = ensureSelectedSkilledProposerVenv(python, vendoredGepaPath);
+    environment.ORIZU_SKILLED_PROPOSER_VENV = report.venv;
+    for (const warning of report.warnings ?? []) {
+        console.warn(`Warning [${sanitizeTerminalText(warning.code)}]: ${sanitizeTerminalText(warning.message)}`);
+    }
+    // When present, the manager's reported certificate is the same value used
+    // for pip. Only the opt-in path resolves or changes this setting.
+    if (report.sslCertFile)
+        environment.SSL_CERT_FILE = report.sslCertFile;
+    return {
+        python: process.platform === 'win32'
+            ? join(report.venv, 'Scripts', 'python.exe')
+            : join(report.venv, 'bin', 'python'),
+        environment,
+    };
+}

package/dist/smoke.d.ts

@@ -0,0 +1,102 @@
+/**
+ * Terminal-only Phase 2 smoke workflow (ALI-908).
+ *
+ * Pure, importable step logic with an injected fetcher factory. It drives the
+ * REAL Phase 2 CLI command modules (workbench-cli sessions/runs/tail/terminal)
+ * plus the RunAPI / promotion-manifest routes over HTTP. The `scripts/workbench-
+ * smoke.mjs` driver supplies a live-server fetcher from env; the unit test
+ * supplies an in-memory fake server. No process/argv/print here.
+ *
+ * The workflow proves, against server-side state only:
+ *  - create-or-attach workspace idempotency (reused on a second run),
+ *  - a session + workbench run with persisted append-only events,
+ *  - terminal-death reconnect (a fresh client re-reads every prior event),
+ *  - promotion-manifest create + apply idempotency,
+ *  - run-completion idempotency (one terminal event under a retried PATCH).
+ *
+ * Phase 2 boundaries: no OpenInspect, no hosted sandbox, no Slack/web entry,
+ * no Cloudflare Artifacts, no durable overnight jobs.
+ */
+export interface SmokeFetcher {
+    (path: string, init?: RequestInit): Promise<Response>;
+}
+export interface SmokeConfig {
+    teamSlug: string;
+    projectSlug: string;
+    workspaceSlug: string;
+    /** Optional real score-run id to reference from the eval_scored event. */
+    scoreRunId?: string | null;
+}
+export type SmokeDisposition = 'created' | 'reused' | 'verified';
+export interface SmokeStepReport {
+    index: number;
+    key: string;
+    title: string;
+    ok: boolean;
+    disposition: SmokeDisposition;
+    detail: string;
+}
+export interface SmokeStepPlan {
+    index: number;
+    key: string;
+    title: string;
+    plan: string;
+}
+export interface SmokeSummary {
+    created: string[];
+    reused: string[];
+    verified: string[];
+}
+export interface SmokeReport {
+    ok: boolean;
+    steps: SmokeStepReport[];
+    failedStep: SmokeStepReport | null;
+    summary: SmokeSummary;
+    ids: {
+        workspaceId?: string;
+        sessionId?: string;
+        runId?: string;
+        manifestId?: string;
+    };
+}
+export interface RunSmokeOptions {
+    config: SmokeConfig;
+    /** Returns a fresh, stateless HTTP client. Called for the primary flow and
+     *  again to simulate a terminal kill/reconnect. */
+    makeFetcher: () => SmokeFetcher;
+    now?: () => string;
+    onStep?: (step: SmokeStepReport) => void;
+}
+export declare const SMOKE_RUN_TITLE = "smoke: highlight-derived workflow";
+export declare const SMOKE_EVENTS: readonly [{
+    readonly eventId: "smoke-evt-1";
+    readonly eventType: "highlight_ingested";
+    readonly sequence: 2;
+    readonly payload: {
+        readonly highlightId: "hl-smoke-001";
+        readonly source: "hip";
+        readonly span: {
+            readonly start: 0;
+            readonly end: 42;
+        };
+    };
+}, {
+    readonly eventId: "smoke-evt-2";
+    readonly eventType: "eval_scored";
+    readonly sequence: 3;
+    readonly payload: {
+        readonly metricKey: "faithfulness";
+        readonly score: 0.87;
+        readonly comparable: true;
+    };
+}, {
+    readonly eventId: "smoke-evt-3";
+    readonly eventType: "notes_recorded";
+    readonly sequence: 4;
+    readonly payload: {
+        readonly note: "Highlight-derived smoke: no regression detected.";
+    };
+}];
+export declare function planSmokeSteps(_config: SmokeConfig): SmokeStepPlan[];
+export declare function runSmokeWorkflow(opts: RunSmokeOptions): Promise<SmokeReport>;
+//# sourceMappingURL=smoke.d.ts.map

package/dist/smoke.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"smoke.d.ts","sourceRoot":"","sources":["../src/smoke.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAWH,MAAM,WAAW,YAAY;IAC3B,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;CACtD;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;IACnB,aAAa,EAAE,MAAM,CAAA;IACrB,0EAA0E;IAC1E,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B;AAED,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,QAAQ,GAAG,UAAU,CAAA;AAEhE,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAA;IACb,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,EAAE,EAAE,OAAO,CAAA;IACX,WAAW,EAAE,gBAAgB,CAAA;IAC7B,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAA;IACb,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAA;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,OAAO,CAAA;IACX,KAAK,EAAE,eAAe,EAAE,CAAA;IACxB,UAAU,EAAE,eAAe,GAAG,IAAI,CAAA;IAClC,OAAO,EAAE,YAAY,CAAA;IACrB,GAAG,EAAE;QACH,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,UAAU,CAAC,EAAE,MAAM,CAAA;KACpB,CAAA;CACF;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,WAAW,CAAA;IACnB;uDACmD;IACnD,WAAW,EAAE,MAAM,YAAY,CAAA;IAC/B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,eAAe,KAAK,IAAI,CAAA;CACzC;AAED,eAAO,MAAM,eAAe,sCAAsC,CAAA;AAIlE,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmBf,CAAA;AAaV,wBAAgB,cAAc,CAAC,OAAO,EAAE,WAAW,GAAG,aAAa,EAAE,CAEpE;AAsDD,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,WAAW,CAAC,CAkKlF"}

package/dist/start-intent.d.ts

@@ -0,0 +1,12 @@
+export type StartIntentIdGenerator = () => string;
+/** A tiny immediate retry budget for outcomes where the server/provider may
+ *  have committed before the HTTP response was lost. The UUID intent makes
+ *  these retries safe; this is recovery, not general availability backoff. */
+export declare const START_RESPONSE_LOSS_MAX_RETRIES = 2;
+export declare function isAmbiguousStartResponseStatus(status: number): boolean;
+export declare function isStartIntentId(value: unknown): value is string;
+/** Mint and validate before the first network mutation. Injection keeps retry
+ *  identity tests deterministic and prevents a broken generator from sending a
+ *  malformed key that the server might treat as a non-idempotent legacy call. */
+export declare function createStartIntentId(generate?: StartIntentIdGenerator): string;
+//# sourceMappingURL=start-intent.d.ts.map

package/dist/start-intent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"start-intent.d.ts","sourceRoot":"","sources":["../src/start-intent.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,sBAAsB,GAAG,MAAM,MAAM,CAAA;AAEjD;;8EAE8E;AAC9E,eAAO,MAAM,+BAA+B,IAAI,CAAA;AAEhD,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,MAAM,GACb,OAAO,CAOT;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAE/D;AAED;;iFAEiF;AACjF,wBAAgB,mBAAmB,CACjC,QAAQ,GAAE,sBAAmC,GAC5C,MAAM,CAQR"}

package/dist/task-assignment-manifest.d.ts

@@ -0,0 +1,15 @@
+export interface ParsedAssignmentManifestEntry {
+    rowId: string;
+    assignee: string;
+}
+export interface AssignmentManifestLimits {
+    maxBytes?: number;
+    maxLines?: number;
+}
+export declare const DEFAULT_ASSIGNMENT_MANIFEST_LIMITS: {
+    readonly maxBytes: number;
+    readonly maxLines: 100000;
+};
+export declare function parseAssignmentManifestJsonl(content: string, limits?: AssignmentManifestLimits): ParsedAssignmentManifestEntry[];
+export declare function readAssignmentManifestJsonlFile(path: string, limits?: AssignmentManifestLimits): ParsedAssignmentManifestEntry[];
+//# sourceMappingURL=task-assignment-manifest.d.ts.map

package/dist/task-assignment-manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-assignment-manifest.d.ts","sourceRoot":"","sources":["../src/task-assignment-manifest.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,6BAA6B;IAC5C,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,eAAO,MAAM,kCAAkC;;;CAGrC,CAAA;AAwCV,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,MAAM,EACf,MAAM,CAAC,EAAE,wBAAwB,GAChC,6BAA6B,EAAE,CA8FjC;AAED,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,wBAAwB,GAChC,6BAA6B,EAAE,CAMjC"}

package/dist/task-create-error.d.ts

@@ -0,0 +1,18 @@
+export interface TaskCreateErrorPayload {
+    error?: string;
+    invalidAssigneeErrors?: Array<{
+        assignee?: string;
+        reason?: string;
+    }>;
+    missingRequiredFields?: string[];
+    incompatibleRowCount?: number;
+    missingRequiredFieldCounts?: Record<string, number>;
+    versionId?: string;
+    versionNum?: number;
+}
+export interface CliErrorWithStatus extends Error {
+    httpStatus?: number;
+    structuredPayload?: Record<string, unknown>;
+}
+export declare function formatTaskCreateError(response: Response): Promise<CliErrorWithStatus>;
+//# sourceMappingURL=task-create-error.d.ts.map

package/dist/task-create-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-create-error.d.ts","sourceRoot":"","sources":["../src/task-create-error.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,sBAAsB;IACrC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,qBAAqB,CAAC,EAAE,KAAK,CAAC;QAC5B,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,MAAM,CAAC,EAAE,MAAM,CAAA;KAChB,CAAC,CAAA;IACF,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAA;IAChC,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,0BAA0B,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACnD,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,kBAAmB,SAAQ,KAAK;IAC/C,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC5C;AAaD,wBAAsB,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAqF3F"}

package/dist/team-connectors-cli.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Per-team hosted-session CONNECTOR allowlist CLI (ALI-1048, CONFIG-SURFACE half):
+ *   orizu team connectors list [--team <slug>] [--json]
+ *   orizu team connectors enable <connector> [--team <slug>] [--json]
+ *   orizu team connectors disable <connector> [--team <slug>] [--json]
+ *
+ * A team explicitly approves which vault-held connectors (credentials, e.g.
+ * 'braintrust') may be INJECTED into hosted agent sessions. Default-deny: a
+ * connector is not available to hosted sessions until enabled here. Human ADMIN
+ * or CURATOR only — the server rejects agent bearers and non-admin/curator members
+ * (the definer RPC gates on is_team_admin_or_curator).
+ *
+ * DEFERRED (ALI-1031 pairing): this only manages the APPROVAL list. The actual
+ * per-session secret injection into the sandbox env is a server-side step deferred
+ * to pair with ALI-1031's provisioning (a secret cannot transit the client CLI).
+ *
+ * Pure command logic with an injected fetcher, mirroring egress-allowlist-cli.
+ */
+export type CliFetcher = (path: string, init?: RequestInit) => Promise<Response>;
+export interface TeamConnectorsCommandIo {
+    json: boolean;
+    print: (line: string) => void;
+    printErr?: (line: string) => void;
+    fetcher?: CliFetcher;
+    /** Resolve the active team slug when --team is omitted (interactive default). */
+    resolveTeamSlug?: () => Promise<string | null>;
+}
+export declare function teamConnectorsCommand(args: string[], io: TeamConnectorsCommandIo): Promise<number>;
+//# sourceMappingURL=team-connectors-cli.d.ts.map

package/dist/team-connectors-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"team-connectors-cli.d.ts","sourceRoot":"","sources":["../src/team-connectors-cli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,MAAM,MAAM,UAAU,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;AAEhF,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,OAAO,CAAA;IACb,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC7B,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IACjC,OAAO,CAAC,EAAE,UAAU,CAAA;IACpB,iFAAiF;IACjF,eAAe,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;CAC/C;AA0FD,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,uBAAuB,GAAG,OAAO,CAAC,MAAM,CAAC,CAkDxG"}

package/dist/types.d.ts

@@ -0,0 +1,39 @@
+export interface SessionServerCredentials {
+    credentialType?: 'session';
+    accessToken: string;
+    refreshToken: string;
+    expiresAt: number;
+}
+export interface PatServerCredentials {
+    credentialType: 'pat';
+    apiKey: string;
+}
+export type ServerCredentials = SessionServerCredentials | PatServerCredentials;
+export interface StoredCredentialsV1 {
+    baseUrl: string;
+    accessToken: string;
+    refreshToken: string;
+    expiresAt: number;
+}
+export interface StoredCredentialsV2 {
+    version: 2;
+    activeBaseUrl: string | null;
+    servers: Record<string, SessionServerCredentials>;
+}
+export interface StoredCredentialsV3 {
+    version: 3;
+    activeBaseUrl: string | null;
+    servers: Record<string, ServerCredentials>;
+}
+export type StoredCredentials = StoredCredentialsV1;
+export interface LoginResponse {
+    apiKey?: string;
+    accessToken?: string;
+    refreshToken?: string;
+    expiresAt?: number;
+    user: {
+        id: string;
+        email: string | null;
+    };
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,wBAAwB;IACvC,cAAc,CAAC,EAAE,SAAS,CAAA;IAC1B,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,oBAAoB;IACnC,cAAc,EAAE,KAAK,CAAA;IACrB,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,MAAM,iBAAiB,GAAG,wBAAwB,GAAG,oBAAoB,CAAA;AAE/E,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,CAAC,CAAA;IACV,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAA;CAClD;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,CAAC,CAAA;IACV,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAA;CAC3C;AAGD,MAAM,MAAM,iBAAiB,GAAG,mBAAmB,CAAA;AAEnD,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE;QACJ,EAAE,EAAE,MAAM,CAAA;QACV,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KACrB,CAAA;CACF"}

package/dist/vercel-sandbox-provider.d.ts

@@ -0,0 +1,156 @@
+/**
+ * Vercel Sandbox adapter for the Orizu SandboxProvider seam (ALI-928 / P3.5,
+ * per ADR-003 + ADR-005). Thin adapter over `@vercel/sandbox`, mirroring the
+ * Daytona adapter's shape (`createDaytonaProvider`):
+ *
+ *   - the SDK is imported LAZILY through a NON-LITERAL specifier so the CLI /
+ *     app build resolve without the package and tests never load it;
+ *   - a `loadModule` dep is injectable, so the fake-SDK unit tests exercise the
+ *     request mapping (timeout, runtime, egress pass-through, extendTimeout)
+ *     without the real package or a network.
+ *
+ * FOUNDER REQUIREMENT (locked): the sandbox `timeout` is ALWAYS set from opts
+ * (session length) — the adapter NEVER lets Vercel's 5-minute default apply.
+ * Default 60 min, hard cap 24 h.
+ *
+ * G5 (ALI-1006) owns the egress ALLOWLIST CONTENT (`egress-policy.ts` →
+ * `buildEgressPolicy`); this adapter only plumbs the `egressPolicy` option
+ * through to the Sandbox firewall (`networkPolicy`) at create. The model-key
+ * credential broker (G3/ALI-1004) is COMPOSED into that same default-deny policy
+ * by `buildEgressPolicy`: a per-domain request transform injects the model key AT
+ * THE PROXY, so the raw key never enters the sandbox (see
+ * docs/.../sandbox-secrets-policy.md §3).
+ */
+import type { SandboxProvider } from './sandbox-provider.js';
+/** Default sandbox session length when opts omit one (NEVER Vercel's 5 min). */
+export declare const VERCEL_DEFAULT_TIMEOUT_MS: number;
+/** Hard cap on a configured session length (24 h). */
+export declare const VERCEL_MAX_TIMEOUT_MS: number;
+/** Default runtime image when opts/config omit one. */
+export declare const VERCEL_DEFAULT_RUNTIME = "node24";
+/** Max create attempts when the SDK reports the image is not yet ready. */
+export declare const VERCEL_IMAGE_NOT_READY_MAX_ATTEMPTS = 6;
+/** Base backoff (ms) between image-not-ready retries (multiplied by attempt#). */
+export declare const VERCEL_IMAGE_NOT_READY_BACKOFF_MS = 5000;
+interface VercelSdkCommandFinished {
+    exitCode: number;
+    stdout(): Promise<string>;
+    stderr(): Promise<string>;
+}
+interface VercelRunCommandParams {
+    cmd: string;
+    args?: string[];
+    cwd?: string;
+    env?: Record<string, string>;
+    sudo?: boolean;
+}
+/** The @vercel/sandbox `Snapshot` surface we touch: the id getter is enough to
+ *  hand the snapshot to a later `create({ source: { type: 'snapshot', … } })`. */
+interface VercelSdkSnapshot {
+    readonly snapshotId: string;
+}
+interface VercelSdkSandbox {
+    readonly sandboxId: string;
+    runCommand(params: VercelRunCommandParams): Promise<VercelSdkCommandFinished>;
+    readFileToBuffer(file: {
+        path: string;
+        cwd?: string;
+    }): Promise<Uint8Array | Buffer | null>;
+    writeFiles(files: {
+        path: string;
+        content: string | Uint8Array;
+        mode?: number;
+    }[]): Promise<void>;
+    stop(opts?: {
+        blocking?: boolean;
+    }): Promise<unknown>;
+    extendTimeout(durationMs: number): Promise<void>;
+    updateNetworkPolicy(policy: unknown): Promise<unknown>;
+    /** Snapshot the running sandbox; STOPS it as part of the process (verified
+     *  against @vercel/sandbox@1.10.2 `Sandbox.snapshot(opts?): Promise<Snapshot>`). */
+    snapshot(opts?: {
+        expiration?: number;
+    }): Promise<VercelSdkSnapshot>;
+}
+interface VercelCreateParams {
+    timeout: number;
+    runtime?: string;
+    /** Custom VCR image ref (pre-baked runtime, ALI-1017); omitted → base runtime. */
+    image?: string;
+    /**
+     * Boot from a Vercel Sandbox SNAPSHOT (ALI-1017, zero-Docker prebaked path).
+     * VERIFIED against @vercel/sandbox@1.10.2: the create-from-snapshot param is the
+     * NESTED `source: { type: 'snapshot', snapshotId }` (NOT a flat `snapshot`), and
+     * the snapshot variant of `CreateSandboxParams` OMITS `runtime`/`source` from the
+     * base — so we never set `runtime` alongside a snapshot `source`.
+     */
+    source?: {
+        type: 'snapshot';
+        snapshotId: string;
+    };
+    resources?: {
+        vcpus: number;
+    };
+    ports?: number[];
+    networkPolicy?: unknown;
+    env?: Record<string, string>;
+    token?: string;
+    projectId?: string;
+    teamId?: string;
+}
+interface VercelSandboxCtor {
+    create(params: VercelCreateParams): Promise<VercelSdkSandbox>;
+}
+export interface VercelSdkModule {
+    Sandbox: VercelSandboxCtor;
+}
+/**
+ * Injectable dynamic-import seam: tests pass an importer that throws so the
+ * SDK-absent path is exercised deterministically, regardless of whether
+ * `@vercel/sandbox` happens to be resolvable on the host machine. Production
+ * callers never pass one — the default is a real dynamic `import()`.
+ */
+export type VercelSdkImporter = (specifier: string) => Promise<unknown>;
+export declare function loadVercelModule(importModule?: VercelSdkImporter): Promise<VercelSdkModule>;
+export interface VercelProviderConfig {
+    /** Vercel API token; default env VERCEL_TOKEN, then VERCEL_OIDC_TOKEN. */
+    token?: string;
+    /** Project id; default env VERCEL_PROJECT_ID. */
+    projectId?: string;
+    /** Team id; default env VERCEL_TEAM_ID. */
+    teamId?: string;
+    /** Default runtime image (default node24). */
+    runtime?: string;
+    /** Default custom VCR image ref (pre-baked runtime); default env
+     *  ORIZU_HOSTED_IMAGE, else undefined = base runtime (back-compat). */
+    image?: string;
+    /** Default Vercel Sandbox snapshot id (zero-Docker prebaked runtime); default
+     *  env ORIZU_HOSTED_SNAPSHOT, else undefined. Mutually exclusive with `image`;
+     *  when both resolve, the snapshot wins (see createSandbox). */
+    snapshot?: string;
+    /** Default session length (ms) when createSandbox opts omit one. */
+    defaultTimeoutMs?: number;
+    /** Hard cap on the configured session length (ms; default 24 h). */
+    maxTimeoutMs?: number;
+    /** Max create attempts while a custom image reports `image_not_ready`. */
+    imageNotReadyMaxAttempts?: number;
+    /** Base backoff (ms) between image-not-ready retries (× attempt number). */
+    imageNotReadyBackoffMs?: number;
+}
+export interface VercelProviderDeps {
+    loadModule?: () => Promise<VercelSdkModule>;
+    /** Injectable delay so the image-not-ready retry test runs without real waits. */
+    sleep?: (ms: number) => Promise<void>;
+}
+/** True when live credentials are present (used by the env-gated smoke test). */
+export declare function hasVercelCredentials(env?: NodeJS.ProcessEnv): boolean;
+/**
+ * True when an error is the SDK's "custom image is still being prepared" signal.
+ * We match on a `code` field OR the message text, so we catch the error whether
+ * the SDK surfaces it as `{ code: 'image_not_ready' }` or only in `.message`.
+ * ONLY this specific condition is retried — any other create failure propagates.
+ */
+export declare function isImageNotReadyError(error: unknown): boolean;
+export declare function createVercelProvider(config?: VercelProviderConfig, deps?: VercelProviderDeps): SandboxProvider;
+export {};
+//# sourceMappingURL=vercel-sandbox-provider.d.ts.map

package/dist/vercel-sandbox-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vercel-sandbox-provider.d.ts","sourceRoot":"","sources":["../src/vercel-sandbox-provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAKV,eAAe,EAEhB,MAAM,uBAAuB,CAAA;AAI9B,gFAAgF;AAChF,eAAO,MAAM,yBAAyB,QAAiB,CAAA;AACvD,sDAAsD;AACtD,eAAO,MAAM,qBAAqB,QAAsB,CAAA;AACxD,uDAAuD;AACvD,eAAO,MAAM,sBAAsB,WAAW,CAAA;AAO9C,2EAA2E;AAC3E,eAAO,MAAM,mCAAmC,IAAI,CAAA;AACpD,kFAAkF;AAClF,eAAO,MAAM,iCAAiC,OAAO,CAAA;AAMrD,UAAU,wBAAwB;IAChC,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;IACzB,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;CAC1B;AAED,UAAU,sBAAsB;IAC9B,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;IACf,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC5B,IAAI,CAAC,EAAE,OAAO,CAAA;CACf;AAED;kFACkF;AAClF,UAAU,iBAAiB;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B;AAED,UAAU,gBAAgB;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,UAAU,CAAC,MAAM,EAAE,sBAAsB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAA;IAC7E,gBAAgB,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,GAAG,MAAM,GAAG,IAAI,CAAC,CAAA;IAC3F,UAAU,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,GAAG,UAAU,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACjG,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACrD,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAChD,mBAAmB,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACtD;wFACoF;IACpF,QAAQ,CAAC,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAA;CACrE;AAED,UAAU,kBAAkB;IAC1B,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,kFAAkF;IAClF,KAAK,CAAC,EAAE,MAAM,CAAA;IACd;;;;;;OAMG;IACH,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,UAAU,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAA;IACjD,SAAS,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;IAC7B,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;IAChB,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,UAAU,iBAAiB;IACzB,MAAM,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;CAC9D;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,iBAAiB,CAAA;CAC3B;AAoBD;;;;;GAKG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;AAEvE,wBAAsB,gBAAgB,CACpC,YAAY,GAAE,iBAAkD,GAC/D,OAAO,CAAC,eAAe,CAAC,CAc1B;AAID,MAAM,WAAW,oBAAoB;IACnC,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,iDAAiD;IACjD,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,2CAA2C;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;2EACuE;IACvE,KAAK,CAAC,EAAE,MAAM,CAAA;IACd;;oEAEgE;IAChE,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,oEAAoE;IACpE,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,oEAAoE;IACpE,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,0EAA0E;IAC1E,wBAAwB,CAAC,EAAE,MAAM,CAAA;IACjC,4EAA4E;IAC5E,sBAAsB,CAAC,EAAE,MAAM,CAAA;CAChC;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,CAAC,EAAE,MAAM,OAAO,CAAC,eAAe,CAAC,CAAA;IAC3C,kFAAkF;IAClF,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CACtC;AAmBD,iFAAiF;AACjF,wBAAgB,oBAAoB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAGlF;AAoBD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAK5D;AAyED,wBAAgB,oBAAoB,CAClC,MAAM,GAAE,oBAAyB,EACjC,IAAI,GAAE,kBAAuB,GAC5B,eAAe,CAoEjB"}