orizu 0.5.44 → 0.5.46

package/dist/account-directory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"account-directory.d.ts","sourceRoot":"","sources":["../src/account-directory.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,KAAK,2BAA2B,EAAe,MAAM,WAAW,CAAA;AAEzE,UAAU,IAAI;IACZ,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;CACb;AAED,UAAU,OAAO;IACf,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;CACb;AAED,UAAU,IAAI;IACZ,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,UAAU,UAAU;IAClB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,iBAAiB,EAAE,MAAM,CAAA;IACzB,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B;AAED,UAAU,cAAc;IACtB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B;AAED,UAAU,gBAAgB;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAUD,UAAU,iBAAiB;IACzB,IAAI,EAAE;QACJ,EAAE,EAAE,MAAM,CAAA;QACV,KAAK,EAAE,MAAM,CAAA;QACb,MAAM,EAAE,MAAM,CAAA;QACd,SAAS,EAAE,MAAM,CAAA;QACjB,QAAQ,EAAE,MAAM,CAAA;QAChB,QAAQ,EAAE,MAAM,CAAA;QAChB,WAAW,EAAE,MAAM,CAAA;QACnB,WAAW,EAAE,MAAM,CAAA;QACnB,eAAe,EAAE,MAAM,CAAA;QACvB,yBAAyB,EAAE,MAAM,CAAA;QACjC,wBAAwB,EAAE,MAAM,CAAA;QAChC,MAAM,EAAE;YACN,SAAS,EAAE,MAAM,CAAA;YACjB,UAAU,EAAE,MAAM,CAAA;YAClB,OAAO,EAAE,MAAM,CAAA;YACf,OAAO,EAAE,MAAM,CAAA;SAChB,CAAA;QACD,kBAAkB,EAAE,MAAM,CAAA;QAC1B,SAAS,EAAE,KAAK,CAAC;YACf,UAAU,EAAE,MAAM,CAAA;YAClB,KAAK,EAAE,MAAM,CAAA;YACb,SAAS,EAAE,MAAM,CAAA;YACjB,UAAU,EAAE,MAAM,CAAA;YAClB,OAAO,EAAE,MAAM,CAAA;YACf,OAAO,EAAE,MAAM,CAAA;YACf,KAAK,EAAE,MAAM,CAAA;SACd,CAAC,CAAA;KACH,CAAA;CACF;AAED,QAAA,MAAM,yBAAyB;;;;;;;;;;;;;CAarB,CAAA;AA2CV,KAAK,oBAAoB,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAA;AAChE,iBAAe,UAAU,CAAC,OAAO,GAAE,oBAAkC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAOtF;AAED,iBAAe,aAAa,CAC1B,QAAQ,CAAC,EAAE,MAAM,EACjB,OAAO,GAAE,oBAAkC,GAC1C,OAAO,CAAC,OAAO,EAAE,CAAC,CASpB;AAED,iBAAe,UAAU,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,SAAW,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAY9E;AAED,iBAAe,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAW,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAUlF;AAED,iBAAe,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAW,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAU1F;AAYD,iBAAe,kBAAkB,CAC/B,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,oBAAkC,GAC1C,OAAO,CAAC,IAAI,CAAC,CAGf;AAED,iBAAe,qBAAqB,CAClC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,oBAAkC,GAC1C,OAAO,CAAC,OAAO,CAAC,CA6BlB;AAED,iBAAe,uBAAuB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAmElF;AAED,iBAAe,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAG5E;AAED,iBAAe,yBAAyB,IAAI,OAAO,CAAC,MAAM,CAAC,CAwB1D;AAED,iBAAe,wBAAwB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAkB9G;AAED,iBAAe,0BAA0B,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAmB9F;AA2FD,iBAAS,sBAAsB,CAAC,IAAI,EAAE,iBAAiB,QAiBtD;AAED,iBAAe,SAAS,kBAOvB;AAiBD,iBAAe,UAAU,kBAsBxB;AAED,iBAAe,YAAY,kBAS1B;AAED,iBAAe,aAAa,kBAyB3B;AAED,iBAAe,eAAe,kBAQ7B;AAED,iBAAe,aAAa,kBAqB3B;AAED,iBAAe,gBAAgB,kBAc9B;AAED,iBAAe,oBAAoB,kBAoBlC;AAED,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,UAAU,EACV,SAAS,EACT,kBAAkB,EAClB,UAAU,EACV,aAAa,EACb,qBAAqB,EACrB,wBAAwB,EACxB,sBAAsB,EACtB,yBAAyB,EACzB,0BAA0B,EAC1B,yBAAyB,EACzB,SAAS,EACT,UAAU,EACV,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,oBAAoB,EACpB,YAAY,EACZ,aAAa,EACb,uBAAuB,GACxB,CAAA;AAED,YAAY,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,CAAA"}
+{"version":3,"file":"account-directory.d.ts","sourceRoot":"","sources":["../src/account-directory.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,KAAK,2BAA2B,EAAe,MAAM,WAAW,CAAA;AAEzE,UAAU,IAAI;IACZ,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;CACb;AAED,UAAU,OAAO;IACf,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;CACb;AAED,UAAU,IAAI;IACZ,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,UAAU,UAAU;IAClB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,iBAAiB,EAAE,MAAM,CAAA;IACzB,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B;AAED,UAAU,cAAc;IACtB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B;AAED,UAAU,gBAAgB;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAUD,UAAU,iBAAiB;IACzB,IAAI,EAAE;QACJ,EAAE,EAAE,MAAM,CAAA;QACV,KAAK,EAAE,MAAM,CAAA;QACb,MAAM,EAAE,MAAM,CAAA;QACd,SAAS,EAAE,MAAM,CAAA;QACjB,QAAQ,EAAE,MAAM,CAAA;QAChB,QAAQ,EAAE,MAAM,CAAA;QAChB,WAAW,EAAE,MAAM,CAAA;QACnB,WAAW,EAAE,MAAM,CAAA;QACnB,eAAe,EAAE,MAAM,CAAA;QACvB,yBAAyB,EAAE,MAAM,CAAA;QACjC,wBAAwB,EAAE,MAAM,CAAA;QAChC,MAAM,EAAE;YACN,SAAS,EAAE,MAAM,CAAA;YACjB,UAAU,EAAE,MAAM,CAAA;YAClB,OAAO,EAAE,MAAM,CAAA;YACf,OAAO,EAAE,MAAM,CAAA;SAChB,CAAA;QACD,kBAAkB,EAAE,MAAM,CAAA;QAC1B,SAAS,EAAE,KAAK,CAAC;YACf,UAAU,EAAE,MAAM,CAAA;YAClB,KAAK,EAAE,MAAM,CAAA;YACb,SAAS,EAAE,MAAM,CAAA;YACjB,UAAU,EAAE,MAAM,CAAA;YAClB,OAAO,EAAE,MAAM,CAAA;YACf,OAAO,EAAE,MAAM,CAAA;YACf,KAAK,EAAE,MAAM,CAAA;SACd,CAAC,CAAA;KACH,CAAA;CACF;AAED,QAAA,MAAM,yBAAyB;;;;;;;;;;;;;CAarB,CAAA;AA2CV,KAAK,oBAAoB,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAA;AAChE,iBAAe,UAAU,CAAC,OAAO,GAAE,oBAAkC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAOtF;AAED,iBAAe,aAAa,CAC1B,QAAQ,CAAC,EAAE,MAAM,EACjB,OAAO,GAAE,oBAAkC,GAC1C,OAAO,CAAC,OAAO,EAAE,CAAC,CASpB;AAED,iBAAe,UAAU,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,SAAW,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAY9E;AAED,iBAAe,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAW,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAUlF;AAED,iBAAe,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAW,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAU1F;AAYD,iBAAe,kBAAkB,CAC/B,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,oBAAkC,GAC1C,OAAO,CAAC,IAAI,CAAC,CAGf;AAED,iBAAe,qBAAqB,CAClC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,oBAAkC,GAC1C,OAAO,CAAC,OAAO,CAAC,CA6BlB;AAED,iBAAe,uBAAuB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAmElF;AAED,iBAAe,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAG5E;AAED,iBAAe,yBAAyB,IAAI,OAAO,CAAC,MAAM,CAAC,CAwB1D;AAED,iBAAe,wBAAwB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAkB9G;AAED,iBAAe,0BAA0B,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAmB9F;AA2FD,iBAAS,sBAAsB,CAAC,IAAI,EAAE,iBAAiB,QAiBtD;AAED,iBAAe,SAAS,kBAOvB;AAiBD,iBAAe,UAAU,kBAsBxB;AAED,iBAAe,YAAY,kBAS1B;AAED,iBAAe,aAAa,kBAyB3B;AAED,iBAAe,eAAe,kBAQ7B;AAED,iBAAe,aAAa,kBAc3B;AAED,iBAAe,gBAAgB,kBAc9B;AAED,iBAAe,oBAAoB,kBAoBlC;AAED,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,UAAU,EACV,SAAS,EACT,kBAAkB,EAClB,UAAU,EACV,aAAa,EACb,qBAAqB,EACrB,wBAAwB,EACxB,sBAAsB,EACtB,yBAAyB,EACzB,0BAA0B,EAC1B,yBAAyB,EACzB,SAAS,EACT,UAAU,EACV,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,oBAAoB,EACpB,YAAY,EACZ,aAAa,EACb,uBAAuB,GACxB,CAAA;AAED,YAAY,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,CAAA"}

package/dist/account-directory.js

@@ -357,20 +357,13 @@ async function addTeamMember() {
     if (!email) {
         throw new Error('Usage: orizu teams members add --email <email> [--team <teamSlug>]');
     }
-    const response = await authedFetch(`/api/cli/teams/${encodeURIComponent(teamSlug)}/members`, {
-        method: 'POST',
-        headers: { 'Content-Type': 'application/json' },
-        body: JSON.stringify({ email }),
-    });
-    if (!response.ok) {
-        throw new Error(`Failed to add team member: ${await response.text()}`);
-    }
-    const data = await parseJsonResponse(response, 'Team member add');
+    const { addTeamMemberWithDeadline } = await import('./team-member-add-workflow.js');
+    const member = await addTeamMemberWithDeadline(teamSlug, email, authedFetch);
     if (hasJsonFlag()) {
-        printJson({ member: data.member });
+        printJson({ member });
         return;
     }
-    printLine(`Added team member ${sanitizeTerminalText(data.member.email)} (${sanitizeTerminalText(data.member.id)})`);
+    printLine(`Added team member ${sanitizeTerminalText(member.email)} (${sanitizeTerminalText(member.id)})`);
 }
 async function removeTeamMember() {
     const teamSlug = await resolveTeamSlug(getArg('--team'));

package/dist/hosted-boot.d.ts

@@ -160,6 +160,9 @@ export interface ResolvedSession {
     agentSessionId: string | null;
     seedOrigin: 'team' | 'session';
     projectId: string | null;
+    /** The session's own project's slug and name (ORI-2609), when the server sends them. */
+    projectSlug: string | null;
+    projectName: string | null;
     /** Session lifetime in minutes (from client_info), if the coordinator recorded
      *  it — used to derive the per-prompt max-duration cap (ALI-1061). */
     durationMinutes: number | null;

package/dist/hosted-boot.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hosted-boot.d.ts","sourceRoot":"","sources":["../src/hosted-boot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAmBH,OAAO,EAML,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EAEtB,MAAM,kBAAkB,CAAA;AAKzB,OAAO,EAAyB,KAAK,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAExF,MAAM,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;AAW9E,eAAO,MAAM,sBAAsB,uHAMzB,CAAA;AAEV,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,MAAM,CAAA;IACrB;wEACoE;IACpE,aAAa,EAAE,MAAM,CAAA;IACrB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,gFAAgF;IAChF,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB;wCACoC;IACpC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,2EAA2E;IAC3E,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;CACjC;AAED;iFACiF;AACjF,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACtC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,aAAa,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CA8BvE;AAED;0EAC0E;AAC1E,wBAAgB,mBAAmB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAKjE;AASD,eAAO,MAAM,8BAA8B,QAAa,CAAA;AAmBxD;iFACiF;AACjF,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAM3E;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE;IACzC,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB;;+EAE2E;IAC3E,MAAM,EAAE,OAAO,GAAG,QAAQ,GAAG,UAAU,GAAG,aAAa,CAAA;IACvD,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,SAAS,EAAE,SAAS,CAAA;IACpB,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAC7B,GAAG,OAAO,CAAC,IAAI,CAAC,CAehB;AAgED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAA;IACb,sEAAsE;IACtE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B;AAED,MAAM,WAAW,sBAAsB;IACrC,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,SAAS,CAAA;IACpB,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,4DAA4D;IAC5D,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACrC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAC7B;AAED;;;;;;;GAOG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC,YAAY,CAAC,CAgCzF;AAID,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,UAAU,EAAE,kBAAkB,EAAE,CAAA;IAChC,aAAa,EAAE,MAAM,EAAE,CAAA;CACxB;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE;IACzC,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,SAAS,CAAA;CACrB,GAAG,OAAO,CAAC,SAAS,CAAC,CAsBrB;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,MAAM,EAAE,CAmBnG;AAID,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,eAAe,EAAE,MAAM,CAAA;IACvB,gBAAgB,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;CAClE;AAQD,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,WAAW,EAAE,iBAAiB,GAAG,IAAI,CAAA;IACrC,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAA;IACtC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,UAAU,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB;0EACsE;IACtE,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,6DAA6D;IAC7D,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB;AA0BD;4EAC4E;AAC5E,wBAAsB,cAAc,CAAC,IAAI,EAAE;IACzC,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,SAAS,CAAA;IACpB,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB,GAAG,OAAO,CAAC,eAAe,CAAC,CAmE3B;AAED,eAAO,MAAM,8BAA8B,OAAQ,CAAA;AAEnD;6EAC6E;AAC7E,wBAAsB,4BAA4B,CAChD,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,EACpC,MAAM,SAAiC,GACtC,OAAO,CAAC,IAAI,CAAC,CAEf;AAqCD,8EAA8E;AAC9E,wBAAgB,wBAAwB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAKtE;AAED;;;0EAG0E;AAC1E,wBAAsB,2BAA2B,CAAC,IAAI,EAAE;IACtD,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;IACb,aAAa,EAAE,MAAM,CAAA;IACrB,SAAS,EAAE,SAAS,CAAA;IACpB,MAAM,EAAE,WAAW,CAAA;IACnB,WAAW,EAAE,MAAM,IAAI,CAAA;IACvB,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;IACxC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAA;IACnC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACrC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;iFAC6E;IAC7E,IAAI,CAAC,EAAE,IAAI,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAA;CAC5C,GAAG,OAAO,CAAC,IAAI,CAAC,CA0ChB;AAED;uDACuD;AACvD,wBAAsB,SAAS,CAAC,IAAI,EAAE;IACpC,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,SAAS,CAAA;IACpB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC,MAAM,CAAC,CAclB;AAED;oEACoE;AACpE,wBAAsB,iBAAiB,CAAC,IAAI,EAAE;IAC5C,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,SAAS,CAAA;IACpB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACrC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B,GAAG,OAAO,CAAC,IAAI,CAAC,CAuBhB;AAED;;;4CAG4C;AAC5C,wBAAsB,iBAAiB,CAAC,IAAI,EAAE;IAC5C,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,SAAS,CAAA;CACrB,GAAG,OAAO,CAAC,MAAM,CAAC,CAYlB;AAED;2EAC2E;AAC3E,wBAAsB,WAAW,CAAC,IAAI,EAAE;IACtC,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,SAAS,CAAA;CACrB,GAAG,OAAO,CAAC;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAwCtD;AAID,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;CACf;AACD,MAAM,MAAM,QAAQ,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,KAAK,cAAc,CAAA;AAoE/F,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAInD;AAQD,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,aAAa,CAAA;IAClB,sEAAsE;IACtE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;IAC/C,2EAA2E;IAC3E,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,IAAI,CAAC,EAAE,QAAQ,CAAA;IACf,yEAAyE;IACzE,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAA;IACpD;yEACqE;IACrE,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAA;IACnC,+DAA+D;IAC/D,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC/B,kEAAkE;IAClE,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE;QAChB,OAAO,EAAE,iBAAiB,CAAA;QAC1B,UAAU,EAAE,MAAM,CAAA;QAClB,cAAc,EAAE,MAAM,MAAM,CAAA;QAC5B;gFACwE;QACxE,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAA;KACrC,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAC/B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC5B,gEAAgE;IAChE,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACrC;oEACgE;IAChE,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAA;CACjE;AAID,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,OAAO,CAAA;IACX,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CACrB;AAED;;;;;GAKG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAWzF;AAusBD,UAAU,oBAAoB;IAC5B,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC1B;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,MAAM,CAAA;IACrB,SAAS,EAAE,SAAS,CAAA;IACpB,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAA;IACnD,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,GAAG,EAAE,MAAM,MAAM,CAAA;IACjB,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC3B,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,OAAO,EAAE,MAAM,KAAK,UAAU,CAAC,OAAO,UAAU,CAAC,CAAA;IACnF,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB,GAAG,oBAAoB,CAwDvB;AAID,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC7B,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IACjC,IAAI,CAAC,EAAE,OAAO,CAAA;CACf;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CAAC,EAAE,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CA0ChF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,EAAE;IAC5C,GAAG,EAAE,aAAa,CAAA;IAClB,GAAG,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;IAC7C,MAAM,EAAE,MAAM,CAAA;IACd,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC3B,MAAM,CAAC,EAAE,QAAQ,GAAG,aAAa,CAAA;IACjC,uEAAuE;IACvE,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACrC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B,GAAG,OAAO,CAAC,IAAI,CAAC,CAoEhB"}
+{"version":3,"file":"hosted-boot.d.ts","sourceRoot":"","sources":["../src/hosted-boot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAmBH,OAAO,EAML,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EAEtB,MAAM,kBAAkB,CAAA;AAMzB,OAAO,EAAyB,KAAK,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAExF,MAAM,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;AAW9E,eAAO,MAAM,sBAAsB,uHAMzB,CAAA;AAEV,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,MAAM,CAAA;IACrB;wEACoE;IACpE,aAAa,EAAE,MAAM,CAAA;IACrB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,gFAAgF;IAChF,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB;wCACoC;IACpC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,2EAA2E;IAC3E,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;CACjC;AAED;iFACiF;AACjF,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACtC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,aAAa,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CA8BvE;AAED;0EAC0E;AAC1E,wBAAgB,mBAAmB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAKjE;AASD,eAAO,MAAM,8BAA8B,QAAa,CAAA;AAmBxD;iFACiF;AACjF,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAM3E;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE;IACzC,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB;;+EAE2E;IAC3E,MAAM,EAAE,OAAO,GAAG,QAAQ,GAAG,UAAU,GAAG,aAAa,CAAA;IACvD,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,SAAS,EAAE,SAAS,CAAA;IACpB,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAC7B,GAAG,OAAO,CAAC,IAAI,CAAC,CAehB;AAgED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAA;IACb,sEAAsE;IACtE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B;AAED,MAAM,WAAW,sBAAsB;IACrC,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,SAAS,CAAA;IACpB,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,4DAA4D;IAC5D,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACrC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAC7B;AAED;;;;;;;GAOG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC,YAAY,CAAC,CAgCzF;AAID,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,UAAU,EAAE,kBAAkB,EAAE,CAAA;IAChC,aAAa,EAAE,MAAM,EAAE,CAAA;CACxB;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE;IACzC,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,SAAS,CAAA;CACrB,GAAG,OAAO,CAAC,SAAS,CAAC,CAsBrB;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,MAAM,EAAE,CAmBnG;AAID,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,eAAe,EAAE,MAAM,CAAA;IACvB,gBAAgB,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;CAClE;AAQD,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,WAAW,EAAE,iBAAiB,GAAG,IAAI,CAAA;IACrC,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAA;IACtC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,UAAU,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,wFAAwF;IACxF,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B;0EACsE;IACtE,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,6DAA6D;IAC7D,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB;AA0BD;4EAC4E;AAC5E,wBAAsB,cAAc,CAAC,IAAI,EAAE;IACzC,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,SAAS,CAAA;IACpB,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB,GAAG,OAAO,CAAC,eAAe,CAAC,CAqE3B;AAED,eAAO,MAAM,8BAA8B,OAAQ,CAAA;AAEnD;6EAC6E;AAC7E,wBAAsB,4BAA4B,CAChD,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,EACpC,MAAM,SAAiC,GACtC,OAAO,CAAC,IAAI,CAAC,CAEf;AAqCD,8EAA8E;AAC9E,wBAAgB,wBAAwB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAKtE;AAED;;;0EAG0E;AAC1E,wBAAsB,2BAA2B,CAAC,IAAI,EAAE;IACtD,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;IACb,aAAa,EAAE,MAAM,CAAA;IACrB,SAAS,EAAE,SAAS,CAAA;IACpB,MAAM,EAAE,WAAW,CAAA;IACnB,WAAW,EAAE,MAAM,IAAI,CAAA;IACvB,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;IACxC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAA;IACnC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACrC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;iFAC6E;IAC7E,IAAI,CAAC,EAAE,IAAI,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAA;CAC5C,GAAG,OAAO,CAAC,IAAI,CAAC,CA0ChB;AAED;uDACuD;AACvD,wBAAsB,SAAS,CAAC,IAAI,EAAE;IACpC,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,SAAS,CAAA;IACpB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC,MAAM,CAAC,CAclB;AAED;oEACoE;AACpE,wBAAsB,iBAAiB,CAAC,IAAI,EAAE;IAC5C,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,SAAS,CAAA;IACpB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACrC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B,GAAG,OAAO,CAAC,IAAI,CAAC,CAuBhB;AAED;;;4CAG4C;AAC5C,wBAAsB,iBAAiB,CAAC,IAAI,EAAE;IAC5C,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,SAAS,CAAA;CACrB,GAAG,OAAO,CAAC,MAAM,CAAC,CAYlB;AAED;2EAC2E;AAC3E,wBAAsB,WAAW,CAAC,IAAI,EAAE;IACtC,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,SAAS,CAAA;CACrB,GAAG,OAAO,CAAC;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAwCtD;AAID,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;CACf;AACD,MAAM,MAAM,QAAQ,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,KAAK,cAAc,CAAA;AAoE/F,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAInD;AAQD,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,aAAa,CAAA;IAClB,sEAAsE;IACtE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;IAC/C,2EAA2E;IAC3E,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,IAAI,CAAC,EAAE,QAAQ,CAAA;IACf,yEAAyE;IACzE,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAA;IACpD;yEACqE;IACrE,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAA;IACnC,+DAA+D;IAC/D,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC/B,kEAAkE;IAClE,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE;QAChB,OAAO,EAAE,iBAAiB,CAAA;QAC1B,UAAU,EAAE,MAAM,CAAA;QAClB,cAAc,EAAE,MAAM,MAAM,CAAA;QAC5B;gFACwE;QACxE,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAA;KACrC,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAC/B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC5B,gEAAgE;IAChE,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACrC;oEACgE;IAChE,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAA;CACjE;AAID,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,OAAO,CAAA;IACX,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CACrB;AAED;;;;;GAKG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAWzF;AAmtBD,UAAU,oBAAoB;IAC5B,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC1B;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,MAAM,CAAA;IACrB,SAAS,EAAE,SAAS,CAAA;IACpB,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAA;IACnD,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,GAAG,EAAE,MAAM,MAAM,CAAA;IACjB,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC3B,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,OAAO,EAAE,MAAM,KAAK,UAAU,CAAC,OAAO,UAAU,CAAC,CAAA;IACnF,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB,GAAG,oBAAoB,CAwDvB;AAID,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC7B,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IACjC,IAAI,CAAC,EAAE,OAAO,CAAA;CACf;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CAAC,EAAE,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CA0ChF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,EAAE;IAC5C,GAAG,EAAE,aAAa,CAAA;IAClB,GAAG,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;IAC7C,MAAM,EAAE,MAAM,CAAA;IACd,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC3B,MAAM,CAAC,EAAE,QAAQ,GAAG,aAAa,CAAA;IACjC,uEAAuE;IACvE,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACrC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B,GAAG,OAAO,CAAC,IAAI,CAAC,CAoEhB"}

package/dist/hosted-boot.js

@@ -39,6 +39,7 @@ import { INJECTED_ENV_VARS_ENV, closeHostedLoopSession, runHostedLoop, runHosted
 import { DEFAULT_EGRESS_CANARY_HOST, DEFAULT_HOSTED_MODEL } from './hosted-loop-lifecycle.js';
 import { composeHostedAnswerPrompt } from './hosted-question.js';
 import { resumeRunEventSink } from './hosted-run-event-sink.js';
+import { seedProjectFolder } from './hosted-project-folder-seed.js';
 import { stageOrizuSkill } from './hosted-skill-staging.js';
 import { openHostedLiveChannel } from './hosted-live-channel.js';
 /** Non-secret placeholder model key (firewall brokers the real org key on
@@ -381,6 +382,8 @@ export async function resolveSession(opts) {
         // A server with copying switched off omits seedOrigin; no source is bound.
         seedOrigin: session.seedOrigin === 'session' ? 'session' : 'team',
         projectId: asString(session.projectId),
+        projectSlug: asString(session.projectSlug),
+        projectName: asString(session.projectName),
     };
 }
 export const HOSTED_SESSION_DEFAULT_POLL_MS = 5_000;
@@ -1052,6 +1055,17 @@ const c = JSON.parse(fs.readFileSync(process.argv[2], 'utf8'));
     exec('git', ['-C', workspaceDir, 'config', 'user.email', AGENT_GIT_IDENTITY.email]);
     if (!wokenDisk && !sessionCopyFilled)
         log(`cloned ${session.repoBranch}`);
+    // 5a — ORI-2609: the team copy holds only the projects the team seed knew
+    // about. Write this session's project folder if it is missing, before the
+    // agent starts. Never fails the boot. A woken disk is the agent's own saved
+    // state, so a folder it removed there is not put back.
+    log(wokenDisk
+        ? 'project folder left as the woken disk has it'
+        : seedProjectFolder({
+            workTree: workspaceDir,
+            project: { id: session.projectId, slug: session.projectSlug, name: session.projectName },
+            exec: (cmd, args) => exec(cmd, args),
+        }));
     // 5b — Stage the orizu skill into the cloned repo so the agent discovers the
     // Orizu workflows (ALI-1059). SHARED with the operator path via `stageOrizuSkill`
     // (one resolution chain + the harvest-safe .git/info/exclude append). Non-fatal:

package/dist/hosted-project-folder-seed.d.ts

@@ -0,0 +1,18 @@
+export interface ProjectFolderSeedProject {
+    id: string | null;
+    slug: string | null;
+    name: string | null;
+}
+type SeedExec = (cmd: string, args: string[]) => {
+    status: number;
+    stdout: string;
+    stderr: string;
+};
+/** Returns the one line the boot logs. */
+export declare function seedProjectFolder(input: {
+    workTree: string;
+    project: ProjectFolderSeedProject;
+    exec: SeedExec;
+}): string;
+export {};
+//# sourceMappingURL=hosted-project-folder-seed.d.ts.map

package/dist/hosted-project-folder-seed.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted-project-folder-seed.d.ts","sourceRoot":"","sources":["../src/hosted-project-folder-seed.ts"],"names":[],"mappings":"AAqBA,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAA;IACjB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CACpB;AAED,KAAK,QAAQ,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAgBnG,0CAA0C;AAC1C,wBAAgB,iBAAiB,CAAC,KAAK,EAAE;IACvC,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,wBAAwB,CAAA;IACjC,IAAI,EAAE,QAAQ,CAAA;CACf,GAAG,MAAM,CA8CT"}

package/dist/hosted-project-folder-seed.js

@@ -0,0 +1,78 @@
+/**
+ * ORI-2609: every project of an approved team shares the team's repository,
+ * but the team seed wrote only the first project's folder. A hosted session
+ * for another project writes that project's folder into its own checkout at
+ * boot, exactly as the team seed would have, and commits it locally. The
+ * session's normal save carries the commit; nothing is pushed here.
+ *
+ * A folder that is already there, whole or partial, is never touched, so a
+ * second session never duplicates or overwrites one. Never throws: a seed
+ * failure is reported for the boot to log, and the session still starts.
+ */
+import { existsSync, lstatSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { buildSeedContractFiles, SEED_COMMIT_AUTHOR_EMAIL, SEED_COMMIT_AUTHOR_NAME, SEED_COMMIT_DATE, } from './workspace-bootstrap-seed.js';
+// One plain folder name: no separators, no traversal, no leading dot or dash.
+const SAFE_PROJECT_SLUG = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
+function readTeamFacts(workTree) {
+    // The team manifest the team seed wrote is the source of the team facts, so
+    // the new project's manifest agrees with the repository it lands in.
+    const manifest = JSON.parse(readFileSync(join(workTree, 'orizu.team.json'), 'utf8'));
+    if (typeof manifest.slug !== 'string' || manifest.slug.length === 0) {
+        throw new Error('orizu.team.json carries no team slug');
+    }
+    // The team id does not appear in project files; it is passed for completeness.
+    return { id: typeof manifest.teamId === 'string' ? manifest.teamId : '', slug: manifest.slug };
+}
+/** Returns the one line the boot logs. */
+export function seedProjectFolder(input) {
+    const { workTree, project, exec } = input;
+    if (!project.id)
+        return 'project folder skipped: the session names no project';
+    // Without the slug there is no folder name; the server leaves it out when it
+    // could not read the project.
+    if (!project.slug)
+        return 'project folder skipped: the server sent no project slug';
+    try {
+        const slug = project.slug;
+        if (!SAFE_PROJECT_SLUG.test(slug))
+            throw new Error('the project slug is not a plain folder name');
+        const folder = `projects/${slug}`;
+        const projectsDir = join(workTree, 'projects');
+        if (existsSync(projectsDir) && !lstatSync(projectsDir).isDirectory()) {
+            throw new Error('projects/ is not a folder');
+        }
+        if (existsSync(join(workTree, folder)))
+            return `project folder ${folder}/ already present`;
+        // Byte-for-byte the files the team seed writes for this project.
+        const files = buildSeedContractFiles({
+            team: readTeamFacts(workTree),
+            projects: [{ id: project.id, slug, name: project.name }],
+        }).filter(file => file.path.startsWith(`${folder}/`));
+        for (const file of files) {
+            const target = join(workTree, file.path);
+            mkdirSync(dirname(target), { recursive: true });
+            writeFileSync(target, file.bytes, { mode: 0o644 });
+        }
+        // No hook the checkout's config names runs inside the boot (as in harvest).
+        // The exec seam takes no `env` option, so `env` pins the commit dates.
+        const git = (step, ...args) => {
+            const result = exec('env', [
+                `GIT_AUTHOR_DATE=${SEED_COMMIT_DATE}`, `GIT_COMMITTER_DATE=${SEED_COMMIT_DATE}`,
+                'git', '-C', workTree, '-c', 'core.hooksPath=/dev/null', '-c', 'core.fsmonitor=false', ...args,
+            ]);
+            if (result.status !== 0)
+                throw new Error(`git ${step} failed: ${(result.stderr || result.stdout).trim()}`);
+        };
+        git('add', 'add', '--', folder);
+        // Paths after `--` commit only this folder, whatever else is staged. A fixed
+        // author, committer and date make every session that starts from the same
+        // team head produce the same commit, so two sessions' publishes share it
+        // rather than conflict on files neither of them touched.
+        git('commit', '-c', 'commit.gpgsign=false', '-c', `user.name=${SEED_COMMIT_AUTHOR_NAME}`, '-c', `user.email=${SEED_COMMIT_AUTHOR_EMAIL}`, 'commit', '--quiet', '--no-verify', '-m', `Add the ${slug} project folder`, '--', folder);
+        return `project folder ${folder}/ seeded`;
+    }
+    catch (error) {
+        return `project folder seed failed: ${error instanceof Error ? error.message : String(error)}`;
+    }
+}

package/dist/secret-redaction.d.ts

@@ -28,6 +28,20 @@
  * event payload can be passed through before it is sent to the RunAPI.
  */
 export declare const REDACTION_PLACEHOLDER = "[redacted]";
+/**
+ * The shape pass alone, for servers that hold no secret values: the web app
+ * and the session coordinator scrub agent text with it before it reaches a
+ * browser (ORI-1905). One list of shapes for the CLI and both servers.
+ */
+export declare function redactSecretShapes(input: string): string;
+/**
+ * For reply text shown as it is written: each snapshot is the reply so far, so
+ * one can end part-way through a token, before it is long enough for its shape
+ * to match. Such a tail is redacted too. The saved read shows a reply's last
+ * snapshot, so a finished reply that really ends in a bare `sk-` loses those
+ * characters there as well.
+ */
+export declare function redactStreamedTextShapes(input: string): string;
 export interface RedactOptions {
     /** Verbatim secret values to strip wherever they appear (bearer, tokens). */
     secrets?: readonly string[];

package/dist/secret-redaction.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"secret-redaction.d.ts","sourceRoot":"","sources":["../src/secret-redaction.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,eAAO,MAAM,qBAAqB,eAAe,CAAA;AAgDjD,MAAM,WAAW,aAAa;IAC5B,6EAA6E;IAC7E,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAC5B;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,GAAE,aAAkB,GAAG,CAAC,CAGzE;AAmBD;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAQjF"}
+{"version":3,"file":"secret-redaction.d.ts","sourceRoot":"","sources":["../src/secret-redaction.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,eAAO,MAAM,qBAAqB,eAAe,CAAA;AAgDjD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAExD;AAUD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAI9D;AAED,MAAM,WAAW,aAAa;IAC5B,6EAA6E;IAC7E,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAC5B;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,GAAE,aAAkB,GAAG,CAAC,CAGzE;AAmBD;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAQjF"}

package/dist/secret-redaction.js

@@ -70,6 +70,31 @@ function redactString(input, secrets) {
     }
     return out;
 }
+/**
+ * The shape pass alone, for servers that hold no secret values: the web app
+ * and the session coordinator scrub agent text with it before it reaches a
+ * browser (ORI-1905). One list of shapes for the CLI and both servers.
+ */
+export function redactSecretShapes(input) {
+    return redactString(input, []);
+}
+// A known credential prefix at the end of the text, followed by fewer
+// characters than its shape above needs: the start of a token still being
+// written. Each run is bounded, so the scan stays linear in the text, and a
+// longer run that is not a token (a path, a word) is left alone. `Bearer` only
+// counts in an Authorization header, so prose like "a Bearer token" keeps its
+// last word.
+const OPEN_TOKEN_AT_END = /(?:\bgithub_pat_[A-Za-z0-9_]{0,19}|\bgh[posur]_[A-Za-z0-9_]{0,19}|\borizu_(?:agent|pat)_[A-Za-z0-9_-]{0,9}|\bsk-[A-Za-z0-9_-]{0,19}|\b(authorization:\s*bearer)\s+[A-Za-z0-9._~+/-]{0,15})$/i;
+/**
+ * For reply text shown as it is written: each snapshot is the reply so far, so
+ * one can end part-way through a token, before it is long enough for its shape
+ * to match. Such a tail is redacted too. The saved read shows a reply's last
+ * snapshot, so a finished reply that really ends in a bare `sk-` loses those
+ * characters there as well.
+ */
+export function redactStreamedTextShapes(input) {
+    return redactSecretShapes(input).replace(OPEN_TOKEN_AT_END, (_match, header) => header ? `${header} ${REDACTION_PLACEHOLDER}` : REDACTION_PLACEHOLDER);
+}
 /**
  * Deep-redact a JSON-ish value. Strings are scrubbed; arrays/objects are walked;
  * everything else is returned as-is. Object KEYS are never treated as secrets

package/dist/skilled-proposer-launch.d.ts

@@ -23,6 +23,11 @@ export interface SkilledProposerChildOutput {
     stdout: (chunk: string) => void;
     stderr: (chunk: string) => void;
 }
+/**
+ * Run the optimizer, passing a stop signal on to it. On a stop signal the CLI
+ * waits until the optimizer exits (capped at CHILD_STOP_WAIT_MS, then kills
+ * it) and then ends by that same signal.
+ */
 export declare function spawnSkilledProposerChild(command: string, args: string[], engine: GepaEngine, environment: NodeJS.ProcessEnv, onSpawn?: () => Promise<void>, output?: SkilledProposerChildOutput): Promise<{
     status: number | null;
     error?: Error;

package/dist/skilled-proposer-launch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"skilled-proposer-launch.d.ts","sourceRoot":"","sources":["../src/skilled-proposer-launch.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAO3D,UAAU,yBAAyB;IACjC,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,iBAAiB,EAAE,MAAM,EAAE,CAAA;IAC3B,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAClD,oBAAoB,EAAE,OAAO,CAAA;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,aAAa,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;IAC9B,eAAe,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;CAClC;AACD,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAC,UAAU,CAAA;IAC9B,MAAM,CAAC,EAAE,yBAAyB,CAAA;CACnC;AAED,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAA;IAC/B,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAA;CAChC;AAiBD,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,UAAU,EACnF,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,EAC7B,MAAM,CAAC,EAAE,0BAA0B;;;GA4DpC;AAwCD,UAAU,aAAa;IAAG,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAA;CAAE;AAQ9F,wBAAgB,0BAA0B,CAAC,EAAE,EAAE,aAAa,EAAE,MAAM,UAAQ,GAAG,MAAM,CAepF;AAED,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,UAAU,EAClB,WAAW,EAAE,MAAM,CAAC,UAAU,GAC7B,qBAAqB,CAyBvB"}
+{"version":3,"file":"skilled-proposer-launch.d.ts","sourceRoot":"","sources":["../src/skilled-proposer-launch.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAO3D,UAAU,yBAAyB;IACjC,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,iBAAiB,EAAE,MAAM,EAAE,CAAA;IAC3B,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAClD,oBAAoB,EAAE,OAAO,CAAA;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,aAAa,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;IAC9B,eAAe,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;CAClC;AACD,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAC,UAAU,CAAA;IAC9B,MAAM,CAAC,EAAE,yBAAyB,CAAA;CACnC;AAED,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAA;IAC/B,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAA;CAChC;AAsBD;;;;GAIG;AACH,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,UAAU,EACnF,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,EAC7B,MAAM,CAAC,EAAE,0BAA0B;YA0CX,MAAM,GAAG,IAAI;YAAU,KAAK;GAkDrD;AAwCD,UAAU,aAAa;IAAG,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAA;CAAE;AAQ9F,wBAAgB,0BAA0B,CAAC,EAAE,EAAE,aAAa,EAAE,MAAM,UAAQ,GAAG,MAAM,CAepF;AAED,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,UAAU,EAClB,WAAW,EAAE,MAAM,CAAC,UAAU,GAC7B,qBAAqB,CAyBvB"}

package/dist/skilled-proposer-launch.js

@@ -23,70 +23,128 @@ function materializeConfigPayload(engine, environment) {
     }
     return () => rmSync(root, { recursive: true, force: true });
 }
+const STOP_SIGNALS = ['SIGINT', 'SIGTERM', 'SIGHUP', 'SIGQUIT'];
+// The optimizer marks its run stopped before exiting (at most 10 s for the
+// status write); past this it is killed so nothing is left running (ORI-2402).
+const CHILD_STOP_WAIT_MS = 15_000;
+/**
+ * Run the optimizer, passing a stop signal on to it. On a stop signal the CLI
+ * waits until the optimizer exits (capped at CHILD_STOP_WAIT_MS, then kills
+ * it) and then ends by that same signal.
+ */
 export async function spawnSkilledProposerChild(command, args, engine, environment, onSpawn, output) {
     const childEnvironment = { ...environment };
-    const shouldMaterialize = engine === 'official'
-        && childEnvironment.ORIZU_CANDIDATE_PROPOSER === 'skilled-proposer'
-        && childEnvironment.ORIZU_SKILLED_PROPOSER_CONFIG !== undefined;
-    if (!shouldMaterialize)
-        return spawnSync(command, args, { stdio: 'inherit', env: childEnvironment });
     let child;
     let cleanup = () => { };
-    const signals = ['SIGINT', 'SIGTERM', 'SIGHUP', 'SIGQUIT'];
-    const handlers = signals.map(signal => ({
-        signal,
-        handle: () => {
+    let stopSignal;
+    // On the terminal path the optimizer leads its own process group, so a stop
+    // also reaches its runners, which may run in worker threads it can't stop.
+    let childGroup;
+    const forward = (signal) => {
+        if (childGroup) {
             try {
-                cleanup();
+                process.kill(-childGroup, signal);
+                return;
             }
-            finally {
-                try {
-                    child?.kill(signal);
-                }
-                finally {
-                    for (const entry of handlers)
-                        process.off(entry.signal, entry.handle);
-                    process.kill(process.pid, signal);
-                }
+            catch { /* group already gone */ }
+        }
+        try {
+            child?.kill(signal);
+        }
+        catch { /* already exited */ }
+    };
+    let giveUp;
+    const removeHandlers = () => { for (const entry of handlers)
+        process.off(entry.signal, entry.handle); };
+    const endBySignal = (signal) => {
+        if (giveUp)
+            clearTimeout(giveUp);
+        removeHandlers();
+        cleanup();
+        // With our handlers gone, the signal's default action ends the process.
+        process.kill(process.pid, signal);
+        return new Promise(() => { });
+    };
+    const handlers = STOP_SIGNALS.map(signal => ({
+        signal,
+        handle: () => {
+            if (!child) {
+                void endBySignal(signal);
+                return;
             }
+            forward(signal);
+            if (stopSignal)
+                return;
+            stopSignal = signal;
+            // The child read the private payload at start and a stopping run
+            // proposes nothing, so it goes now rather than when the child exits.
+            cleanup();
+            giveUp = setTimeout(() => forward('SIGKILL'), CHILD_STOP_WAIT_MS);
         },
     }));
     for (const entry of handlers)
-        process.once(entry.signal, entry.handle);
+        process.on(entry.signal, entry.handle);
     try {
         cleanup = materializeConfigPayload(engine, childEnvironment) ?? cleanup;
         await new Promise(resolve => setImmediate(resolve));
+        let result;
         if (output) {
-            return await runPipedChild(command, args, childEnvironment, async () => { await onSpawn?.(); }, output, spawnedChild => { child = spawnedChild; });
-        }
-        const spawnedChild = spawn(command, args, {
-            stdio: 'inherit',
-            env: childEnvironment,
-        });
-        child = spawnedChild;
-        const spawned = new Promise((resolve, reject) => {
-            spawnedChild.once('spawn', resolve);
-            spawnedChild.once('error', reject);
-        });
-        const closed = new Promise(resolve => {
-            let error;
-            spawnedChild.once('error', cause => { error = cause; });
-            spawnedChild.once('close', status => resolve(error ? { status, error } : { status }));
-        });
-        await spawned;
-        try {
-            await onSpawn?.();
+            result = await runPipedChild(command, args, childEnvironment, async () => { await onSpawn?.(); }, output, spawnedChild => { child = spawnedChild; });
         }
-        catch (error) {
-            spawnedChild.kill('SIGTERM');
-            await closed;
-            throw error;
+        else {
+            // stdin is not passed on: a process outside the terminal's foreground
+            // group that read the terminal would be stopped by it.
+            // Outside the CLI's group, the optimizer would outlive a SIGKILL of the
+            // CLI; it watches for that and stops itself.
+            const spawnedChild = spawn(command, args, {
+                stdio: ['ignore', 'inherit', 'inherit'],
+                env: { ...childEnvironment, ORIZU_STOP_WITH_PARENT: '1' },
+                detached: true,
+            });
+            child = spawnedChild;
+            childGroup = spawnedChild.pid;
+            const spawned = new Promise((resolve, reject) => {
+                spawnedChild.once('spawn', resolve);
+                spawnedChild.once('error', reject);
+            });
+            const closed = new Promise(resolve => {
+                let error;
+                spawnedChild.once('error', cause => { error = cause; });
+                spawnedChild.once('close', status => resolve(error ? { status, error } : { status }));
+            });
+            // A launch failure (e.g. ENOENT) is returned, not thrown, so callers
+            // name the engine as they did with spawnSync.
+            try {
+                await spawned;
+            }
+            catch (error) {
+                return { status: null, error: error };
+            }
+            try {
+                await onSpawn?.();
+            }
+            catch (error) {
+                spawnedChild.kill('SIGTERM');
+                await closed;
+                throw error;
+            }
+            result = await closed;
+            // A runner that ignored the stop must not outlive the optimizer.
+            if (stopSignal) {
+                try {
+                    process.kill(-spawnedChild.pid, 'SIGKILL');
+                }
+                catch { /* group already gone */ }
+            }
         }
-        return await closed;
+        if (stopSignal)
+            return await endBySignal(stopSignal);
+        return result;
     }
     finally {
-        for (const entry of handlers)
-            process.off(entry.signal, entry.handle);
+        if (giveUp)
+            clearTimeout(giveUp);
+        removeHandlers();
         cleanup();
     }
 }

package/dist/team-member-add-workflow.d.ts

@@ -0,0 +1,15 @@
+import { Schema } from 'effect';
+declare const AddReply: Schema.Struct<{
+    readonly member: Schema.Struct<{
+        readonly id: Schema.NonEmptyString;
+        readonly email: Schema.String;
+    }>;
+}>;
+/** The member as the server sent it; `--json` prints every field it has. */
+export type AddedMember = typeof AddReply.Type['member'] & Readonly<Record<string, unknown>>;
+/** Sends one request; calls `onRequestStart` just before anything goes out. */
+export type TeamMemberAddRequest = (path: string, init: RequestInit, onRequestStart?: () => void) => Promise<Response>;
+/** `orizu teams members add`: the invited member, or an error saying whether the invite may be saved. */
+export declare function addTeamMemberWithDeadline(teamSlug: string, email: string, request: TeamMemberAddRequest): Promise<AddedMember>;
+export {};
+//# sourceMappingURL=team-member-add-workflow.d.ts.map

package/dist/team-member-add-workflow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"team-member-add-workflow.d.ts","sourceRoot":"","sources":["../src/team-member-add-workflow.ts"],"names":[],"mappings":"AAAA,OAAO,EAA+B,MAAM,EAAE,MAAM,QAAQ,CAAA;AAmB5D,QAAA,MAAM,QAAQ;;;;;EAKZ,CAAA;AAEF,4EAA4E;AAC5E,MAAM,MAAM,WAAW,GAAG,OAAO,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;AAE5F,+EAA+E;AAC/E,MAAM,MAAM,oBAAoB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,CAAC,EAAE,MAAM,IAAI,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;AA2EtH,yGAAyG;AACzG,wBAAsB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,WAAW,CAAC,CAMpI"}

package/dist/team-member-add-workflow.js

@@ -0,0 +1,111 @@
+import { Cause, Effect, Exit, Result, Schema } from 'effect';
+import { datasetTransferTimeoutMs } from './dataset-transfer-policy.js';
+import { extractErrorMessage } from './error-response.js';
+import { sanitizeTerminalText } from './json-response.js';
+import { appErrorOf, unreachedCode } from './request-outcome.js';
+// Loaded only through `await import(...)`, like the dataset workflows.
+const FAILED = 'Failed to add team member';
+// What the route says when it cannot tell whether the invite was saved (ORI-2383 slice A).
+const SERVER_MAY_BE_SAVED = 'Invite may already be saved. Refresh the member list before inviting again.';
+// The route saves the address trimmed and lowercased, so the check names that address.
+const mayBeInvited = (teamSlug, email) => {
+    const saved = sanitizeTerminalText(email.trim().toLowerCase());
+    return `${saved} may already be invited: run \`orizu teams members list --team ${teamSlug}\` and look for ${saved}. If they are listed, they were invited; don't invite them again.`;
+};
+const AddReply = Schema.Struct({
+    member: Schema.Struct({
+        id: Schema.NonEmptyString,
+        email: Schema.String,
+    }),
+});
+// The invite may be saved when the server says so, when the reply was lost,
+// late or unreadable after the request was sent, when a 5xx did not come from
+// the app (a gateway giving up while the app kept working), or when the reply
+// has no member. Any other error reply is a clear refusal.
+class TeamMemberAddFailure extends Error {
+    mayBeSaved;
+    _tag = 'TeamMemberAddFailure';
+    constructor(message, mayBeSaved) {
+        super(message);
+        this.mayBeSaved = mayBeSaved;
+    }
+}
+// One request, never retried: a retry after a saved invite is refused as
+// "already a member", which hides that the first one worked.
+function memberAdd(teamSlug, email, request, timeoutMs) {
+    return Effect.suspend(() => {
+        let sent = false;
+        let timedOut = false;
+        return Effect.tryPromise({
+            try: async (signal) => {
+                const controller = new AbortController();
+                const abort = () => controller.abort();
+                const timer = setTimeout(() => { timedOut = true; controller.abort(); }, timeoutMs);
+                if (signal.aborted)
+                    abort();
+                else
+                    signal.addEventListener('abort', abort, { once: true });
+                try {
+                    const response = await request(`/api/cli/teams/${encodeURIComponent(teamSlug)}/members`, {
+                        method: 'POST',
+                        headers: { 'Content-Type': 'application/json' },
+                        body: JSON.stringify({ email }),
+                        signal: controller.signal,
+                    }, () => { sent = true; });
+                    if (!response.ok) {
+                        const appError = await appErrorOf(response.clone());
+                        const detail = await extractErrorMessage(response);
+                        if (appError === SERVER_MAY_BE_SAVED)
+                            throw new TeamMemberAddFailure(appError, true);
+                        if (response.status < 400 || (response.status >= 500 && appError === null)) {
+                            throw new TeamMemberAddFailure(`Member add got no clear answer (status ${response.status}).`, true);
+                        }
+                        // The route's own failures already say what failed.
+                        throw new TeamMemberAddFailure(detail.startsWith('Failed to ') ? detail : `${FAILED}: ${detail}`, false);
+                    }
+                    // Reading the body can still fail or stall; that stays under the deadline.
+                    const body = await response.text();
+                    let data;
+                    try {
+                        data = JSON.parse(body);
+                    }
+                    catch {
+                        data = undefined;
+                    }
+                    if (Result.isFailure(Schema.decodeUnknownResult(AddReply)(data))) {
+                        throw new TeamMemberAddFailure(`Member add returned an unexpected response (status ${response.status}).`, true);
+                    }
+                    // Decoding keeps only the named fields; the reply's member is returned whole.
+                    return data.member;
+                }
+                finally {
+                    clearTimeout(timer);
+                    signal.removeEventListener('abort', abort);
+                    controller.abort();
+                }
+            },
+            catch: cause => {
+                if (cause instanceof TeamMemberAddFailure)
+                    return cause;
+                if (timedOut)
+                    return new TeamMemberAddFailure('Member add exceeded its deadline.', sent);
+                const unreached = unreachedCode(cause);
+                if (unreached)
+                    return new TeamMemberAddFailure(`${FAILED}: could not reach the server (${unreached}).`, false);
+                const message = cause instanceof Error ? cause.message : String(cause);
+                if (!sent || message.startsWith('ORIZU_AUTH_CONTEXT_CHANGED:'))
+                    return new TeamMemberAddFailure(message, false);
+                // Also reached when a sign-in refresh fails after a 401: still told to
+                // check, so say only that the invite did not finish.
+                return new TeamMemberAddFailure(`Member add did not finish: ${message}`, true);
+            },
+        });
+    });
+}
+/** `orizu teams members add`: the invited member, or an error saying whether the invite may be saved. */
+export async function addTeamMemberWithDeadline(teamSlug, email, request) {
+    const exit = await Effect.runPromiseExit(memberAdd(teamSlug, email, request, datasetTransferTimeoutMs()).pipe(Effect.mapError(failure => new Error(failure.mayBeSaved ? `${failure.message}\n${mayBeInvited(teamSlug, email)}` : failure.message))));
+    if (Exit.isSuccess(exit))
+        return exit.value;
+    throw Cause.squash(exit.cause);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "orizu",
-  "version": "0.5.44",
+  "version": "0.5.46",
   "private": false,
   "type": "module",
   "main": "./dist/index.js",

package/src/account-directory.ts

@@ -634,20 +634,13 @@ async function addTeamMember() {
     throw new Error('Usage: orizu teams members add --email <email> [--team <teamSlug>]')
   }
 
-  const response = await authedFetch(`/api/cli/teams/${encodeURIComponent(teamSlug)}/members`, {
-    method: 'POST',
-    headers: { 'Content-Type': 'application/json' },
-    body: JSON.stringify({ email }),
-  })
-  if (!response.ok) {
-    throw new Error(`Failed to add team member: ${await response.text()}`)
-  }
-  const data = await parseJsonResponse<{ member: TeamMember }>(response, 'Team member add')
+  const { addTeamMemberWithDeadline } = await import('./team-member-add-workflow.js')
+  const member = await addTeamMemberWithDeadline(teamSlug, email, authedFetch)
   if (hasJsonFlag()) {
-    printJson({ member: data.member })
+    printJson({ member })
     return
   }
-  printLine(`Added team member ${sanitizeTerminalText(data.member.email)} (${sanitizeTerminalText(data.member.id)})`)
+  printLine(`Added team member ${sanitizeTerminalText(member.email)} (${sanitizeTerminalText(member.id)})`)
 }
 
 async function removeTeamMember() {

package/src/hosted-boot.ts

@@ -60,6 +60,7 @@ import {
 import { DEFAULT_EGRESS_CANARY_HOST, DEFAULT_HOSTED_MODEL } from './hosted-loop-lifecycle.js'
 import { composeHostedAnswerPrompt } from './hosted-question.js'
 import { resumeRunEventSink } from './hosted-run-event-sink.js'
+import { seedProjectFolder } from './hosted-project-folder-seed.js'
 import { stageOrizuSkill } from './hosted-skill-staging.js'
 import { openHostedLiveChannel, type HostedLiveChannel } from './hosted-live-channel.js'
 
@@ -441,6 +442,9 @@ export interface ResolvedSession {
   agentSessionId: string | null
   seedOrigin: 'team' | 'session'
   projectId: string | null
+  /** The session's own project's slug and name (ORI-2609), when the server sends them. */
+  projectSlug: string | null
+  projectName: string | null
   /** Session lifetime in minutes (from client_info), if the coordinator recorded
    *  it — used to derive the per-prompt max-duration cap (ALI-1061). */
   durationMinutes: number | null
@@ -547,6 +551,8 @@ export async function resolveSession(opts: {
     // A server with copying switched off omits seedOrigin; no source is bound.
     seedOrigin: session.seedOrigin === 'session' ? 'session' : 'team',
     projectId: asString(session.projectId),
+    projectSlug: asString(session.projectSlug),
+    projectName: asString(session.projectName),
   }
 }
 
@@ -1342,6 +1348,18 @@ const c = JSON.parse(fs.readFileSync(process.argv[2], 'utf8'));
   exec('git', ['-C', workspaceDir, 'config', 'user.email', AGENT_GIT_IDENTITY.email])
   if (!wokenDisk && !sessionCopyFilled) log(`cloned ${session.repoBranch}`)
 
+  // 5a — ORI-2609: the team copy holds only the projects the team seed knew
+  // about. Write this session's project folder if it is missing, before the
+  // agent starts. Never fails the boot. A woken disk is the agent's own saved
+  // state, so a folder it removed there is not put back.
+  log(wokenDisk
+    ? 'project folder left as the woken disk has it'
+    : seedProjectFolder({
+      workTree: workspaceDir,
+      project: { id: session.projectId, slug: session.projectSlug, name: session.projectName },
+      exec: (cmd, args) => exec(cmd, args),
+    }))
+
   // 5b — Stage the orizu skill into the cloned repo so the agent discovers the
   // Orizu workflows (ALI-1059). SHARED with the operator path via `stageOrizuSkill`
   // (one resolution chain + the harvest-safe .git/info/exclude append). Non-fatal:

package/src/hosted-project-folder-seed.ts

@@ -0,0 +1,95 @@
+/**
+ * ORI-2609: every project of an approved team shares the team's repository,
+ * but the team seed wrote only the first project's folder. A hosted session
+ * for another project writes that project's folder into its own checkout at
+ * boot, exactly as the team seed would have, and commits it locally. The
+ * session's normal save carries the commit; nothing is pushed here.
+ *
+ * A folder that is already there, whole or partial, is never touched, so a
+ * second session never duplicates or overwrites one. Never throws: a seed
+ * failure is reported for the boot to log, and the session still starts.
+ */
+import { existsSync, lstatSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs'
+import { dirname, join } from 'node:path'
+
+import {
+  buildSeedContractFiles,
+  SEED_COMMIT_AUTHOR_EMAIL,
+  SEED_COMMIT_AUTHOR_NAME,
+  SEED_COMMIT_DATE,
+} from './workspace-bootstrap-seed.js'
+
+export interface ProjectFolderSeedProject {
+  id: string | null
+  slug: string | null
+  name: string | null
+}
+
+type SeedExec = (cmd: string, args: string[]) => { status: number; stdout: string; stderr: string }
+
+// One plain folder name: no separators, no traversal, no leading dot or dash.
+const SAFE_PROJECT_SLUG = /^[A-Za-z0-9][A-Za-z0-9._-]*$/
+
+function readTeamFacts(workTree: string): { id: string; slug: string } {
+  // The team manifest the team seed wrote is the source of the team facts, so
+  // the new project's manifest agrees with the repository it lands in.
+  const manifest = JSON.parse(readFileSync(join(workTree, 'orizu.team.json'), 'utf8')) as Record<string, unknown>
+  if (typeof manifest.slug !== 'string' || manifest.slug.length === 0) {
+    throw new Error('orizu.team.json carries no team slug')
+  }
+  // The team id does not appear in project files; it is passed for completeness.
+  return { id: typeof manifest.teamId === 'string' ? manifest.teamId : '', slug: manifest.slug }
+}
+
+/** Returns the one line the boot logs. */
+export function seedProjectFolder(input: {
+  workTree: string
+  project: ProjectFolderSeedProject
+  exec: SeedExec
+}): string {
+  const { workTree, project, exec } = input
+  if (!project.id) return 'project folder skipped: the session names no project'
+  // Without the slug there is no folder name; the server leaves it out when it
+  // could not read the project.
+  if (!project.slug) return 'project folder skipped: the server sent no project slug'
+  try {
+    const slug = project.slug
+    if (!SAFE_PROJECT_SLUG.test(slug)) throw new Error('the project slug is not a plain folder name')
+    const folder = `projects/${slug}`
+    const projectsDir = join(workTree, 'projects')
+    if (existsSync(projectsDir) && !lstatSync(projectsDir).isDirectory()) {
+      throw new Error('projects/ is not a folder')
+    }
+    if (existsSync(join(workTree, folder))) return `project folder ${folder}/ already present`
+
+    // Byte-for-byte the files the team seed writes for this project.
+    const files = buildSeedContractFiles({
+      team: readTeamFacts(workTree),
+      projects: [{ id: project.id, slug, name: project.name }],
+    }).filter(file => file.path.startsWith(`${folder}/`))
+    for (const file of files) {
+      const target = join(workTree, file.path)
+      mkdirSync(dirname(target), { recursive: true })
+      writeFileSync(target, file.bytes, { mode: 0o644 })
+    }
+    // No hook the checkout's config names runs inside the boot (as in harvest).
+    // The exec seam takes no `env` option, so `env` pins the commit dates.
+    const git = (step: string, ...args: string[]) => {
+      const result = exec('env', [
+        `GIT_AUTHOR_DATE=${SEED_COMMIT_DATE}`, `GIT_COMMITTER_DATE=${SEED_COMMIT_DATE}`,
+        'git', '-C', workTree, '-c', 'core.hooksPath=/dev/null', '-c', 'core.fsmonitor=false', ...args,
+      ])
+      if (result.status !== 0) throw new Error(`git ${step} failed: ${(result.stderr || result.stdout).trim()}`)
+    }
+    git('add', 'add', '--', folder)
+    // Paths after `--` commit only this folder, whatever else is staged. A fixed
+    // author, committer and date make every session that starts from the same
+    // team head produce the same commit, so two sessions' publishes share it
+    // rather than conflict on files neither of them touched.
+    git('commit', '-c', 'commit.gpgsign=false', '-c', `user.name=${SEED_COMMIT_AUTHOR_NAME}`, '-c', `user.email=${SEED_COMMIT_AUTHOR_EMAIL}`,
+      'commit', '--quiet', '--no-verify', '-m', `Add the ${slug} project folder`, '--', folder)
+    return `project folder ${folder}/ seeded`
+  } catch (error) {
+    return `project folder seed failed: ${error instanceof Error ? error.message : String(error)}`
+  }
+}

package/src/secret-redaction.ts

@@ -76,6 +76,36 @@ function redactString(input: string, secrets: readonly string[]): string {
   return out
 }
 
+/**
+ * The shape pass alone, for servers that hold no secret values: the web app
+ * and the session coordinator scrub agent text with it before it reaches a
+ * browser (ORI-1905). One list of shapes for the CLI and both servers.
+ */
+export function redactSecretShapes(input: string): string {
+  return redactString(input, [])
+}
+
+// A known credential prefix at the end of the text, followed by fewer
+// characters than its shape above needs: the start of a token still being
+// written. Each run is bounded, so the scan stays linear in the text, and a
+// longer run that is not a token (a path, a word) is left alone. `Bearer` only
+// counts in an Authorization header, so prose like "a Bearer token" keeps its
+// last word.
+const OPEN_TOKEN_AT_END = /(?:\bgithub_pat_[A-Za-z0-9_]{0,19}|\bgh[posur]_[A-Za-z0-9_]{0,19}|\borizu_(?:agent|pat)_[A-Za-z0-9_-]{0,9}|\bsk-[A-Za-z0-9_-]{0,19}|\b(authorization:\s*bearer)\s+[A-Za-z0-9._~+/-]{0,15})$/i
+
+/**
+ * For reply text shown as it is written: each snapshot is the reply so far, so
+ * one can end part-way through a token, before it is long enough for its shape
+ * to match. Such a tail is redacted too. The saved read shows a reply's last
+ * snapshot, so a finished reply that really ends in a bare `sk-` loses those
+ * characters there as well.
+ */
+export function redactStreamedTextShapes(input: string): string {
+  return redactSecretShapes(input).replace(OPEN_TOKEN_AT_END, (_match, header?: string) =>
+    header ? `${header} ${REDACTION_PLACEHOLDER}` : REDACTION_PLACEHOLDER
+  )
+}
+
 export interface RedactOptions {
   /** Verbatim secret values to strip wherever they appear (bearer, tokens). */
   secrets?: readonly string[]

package/src/skilled-proposer-launch.ts

@@ -49,39 +49,64 @@ function materializeConfigPayload(engine: GepaEngine, environment: NodeJS.Proces
   return () => rmSync(root, { recursive: true, force: true })
 }
 
+const STOP_SIGNALS = ['SIGINT', 'SIGTERM', 'SIGHUP', 'SIGQUIT'] as const
+// The optimizer marks its run stopped before exiting (at most 10 s for the
+// status write); past this it is killed so nothing is left running (ORI-2402).
+const CHILD_STOP_WAIT_MS = 15_000
+
+/**
+ * Run the optimizer, passing a stop signal on to it. On a stop signal the CLI
+ * waits until the optimizer exits (capped at CHILD_STOP_WAIT_MS, then kills
+ * it) and then ends by that same signal.
+ */
 export async function spawnSkilledProposerChild(
   command: string, args: string[], engine: GepaEngine, environment: NodeJS.ProcessEnv,
   onSpawn?: () => Promise<void>,
   output?: SkilledProposerChildOutput,
 ) {
   const childEnvironment = { ...environment }
-  const shouldMaterialize = engine === 'official'
-    && childEnvironment.ORIZU_CANDIDATE_PROPOSER === 'skilled-proposer'
-    && childEnvironment.ORIZU_SKILLED_PROPOSER_CONFIG !== undefined
-  if (!shouldMaterialize) return spawnSync(command, args, { stdio: 'inherit', env: childEnvironment })
-
   let child: ReturnType<typeof spawn> | PipedChild | undefined
   let cleanup = () => {}
-  const signals = ['SIGINT', 'SIGTERM', 'SIGHUP', 'SIGQUIT'] as const
-  const handlers = signals.map(signal => ({
+  let stopSignal: NodeJS.Signals | undefined
+  // On the terminal path the optimizer leads its own process group, so a stop
+  // also reaches its runners, which may run in worker threads it can't stop.
+  let childGroup: number | undefined
+  const forward = (signal: NodeJS.Signals) => {
+    if (childGroup) {
+      try { process.kill(-childGroup, signal); return } catch { /* group already gone */ }
+    }
+    try { child?.kill(signal) } catch { /* already exited */ }
+  }
+  let giveUp: ReturnType<typeof setTimeout> | undefined
+  const removeHandlers = () => { for (const entry of handlers) process.off(entry.signal, entry.handle) }
+  const endBySignal = (signal: NodeJS.Signals): Promise<never> => {
+    if (giveUp) clearTimeout(giveUp)
+    removeHandlers()
+    cleanup()
+    // With our handlers gone, the signal's default action ends the process.
+    process.kill(process.pid, signal)
+    return new Promise<never>(() => {})
+  }
+  const handlers = STOP_SIGNALS.map(signal => ({
     signal,
     handle: () => {
-      try { cleanup() }
-      finally {
-        try { child?.kill(signal) }
-        finally {
-          for (const entry of handlers) process.off(entry.signal, entry.handle)
-          process.kill(process.pid, signal)
-        }
-      }
+      if (!child) { void endBySignal(signal); return }
+      forward(signal)
+      if (stopSignal) return
+      stopSignal = signal
+      // The child read the private payload at start and a stopping run
+      // proposes nothing, so it goes now rather than when the child exits.
+      cleanup()
+      giveUp = setTimeout(() => forward('SIGKILL'), CHILD_STOP_WAIT_MS)
     },
   }))
-  for (const entry of handlers) process.once(entry.signal, entry.handle)
+  for (const entry of handlers) process.on(entry.signal, entry.handle)
   try {
     cleanup = materializeConfigPayload(engine, childEnvironment) ?? cleanup
     await new Promise<void>(resolve => setImmediate(resolve))
+    let result: { status: number | null, error?: Error }
     if (output) {
-      return await runPipedChild(
+      result = await runPipedChild(
         command,
         args,
         childEnvironment,
@@ -89,27 +114,44 @@ export async function spawnSkilledProposerChild(
         output,
         spawnedChild => { child = spawnedChild }
       )
+    } else {
+      // stdin is not passed on: a process outside the terminal's foreground
+      // group that read the terminal would be stopped by it.
+      // Outside the CLI's group, the optimizer would outlive a SIGKILL of the
+      // CLI; it watches for that and stops itself.
+      const spawnedChild = spawn(command, args, {
+        stdio: ['ignore', 'inherit', 'inherit'],
+        env: { ...childEnvironment, ORIZU_STOP_WITH_PARENT: '1' },
+        detached: true,
+      })
+      child = spawnedChild
+      childGroup = spawnedChild.pid
+      const spawned = new Promise<void>((resolve, reject) => {
+        spawnedChild.once('spawn', resolve)
+        spawnedChild.once('error', reject)
+      })
+      const closed = new Promise<{ status: number | null, error?: Error }>(resolve => {
+        let error: Error | undefined
+        spawnedChild.once('error', cause => { error = cause })
+        spawnedChild.once('close', status => resolve(error ? { status, error } : { status }))
+      })
+      // A launch failure (e.g. ENOENT) is returned, not thrown, so callers
+      // name the engine as they did with spawnSync.
+      try { await spawned }
+      catch (error) { return { status: null, error: error as Error } }
+      try { await onSpawn?.() }
+      catch (error) { spawnedChild.kill('SIGTERM'); await closed; throw error }
+      result = await closed
+      // A runner that ignored the stop must not outlive the optimizer.
+      if (stopSignal) {
+        try { process.kill(-spawnedChild.pid!, 'SIGKILL') } catch { /* group already gone */ }
+      }
     }
-    const spawnedChild = spawn(command, args, {
-      stdio: 'inherit',
-      env: childEnvironment,
-    })
-    child = spawnedChild
-    const spawned = new Promise<void>((resolve, reject) => {
-      spawnedChild.once('spawn', resolve)
-      spawnedChild.once('error', reject)
-    })
-    const closed = new Promise<{ status: number | null, error?: Error }>(resolve => {
-      let error: Error | undefined
-      spawnedChild.once('error', cause => { error = cause })
-      spawnedChild.once('close', status => resolve(error ? { status, error } : { status }))
-    })
-    await spawned
-    try { await onSpawn?.() }
-    catch (error) { spawnedChild.kill('SIGTERM'); await closed; throw error }
-    return await closed
+    if (stopSignal) return await endBySignal(stopSignal)
+    return result
   } finally {
-    for (const entry of handlers) process.off(entry.signal, entry.handle)
+    if (giveUp) clearTimeout(giveUp)
+    removeHandlers()
     cleanup()
   }
 }

package/src/team-member-add-workflow.ts

@@ -0,0 +1,113 @@
+import { Cause, Effect, Exit, Result, Schema } from 'effect'
+
+import { datasetTransferTimeoutMs } from './dataset-transfer-policy.js'
+import { extractErrorMessage } from './error-response.js'
+import { sanitizeTerminalText } from './json-response.js'
+import { appErrorOf, unreachedCode } from './request-outcome.js'
+
+// Loaded only through `await import(...)`, like the dataset workflows.
+
+const FAILED = 'Failed to add team member'
+// What the route says when it cannot tell whether the invite was saved (ORI-2383 slice A).
+const SERVER_MAY_BE_SAVED = 'Invite may already be saved. Refresh the member list before inviting again.'
+
+// The route saves the address trimmed and lowercased, so the check names that address.
+const mayBeInvited = (teamSlug: string, email: string) => {
+  const saved = sanitizeTerminalText(email.trim().toLowerCase())
+  return `${saved} may already be invited: run \`orizu teams members list --team ${teamSlug}\` and look for ${saved}. If they are listed, they were invited; don't invite them again.`
+}
+
+const AddReply = Schema.Struct({
+  member: Schema.Struct({
+    id: Schema.NonEmptyString,
+    email: Schema.String,
+  }),
+})
+
+/** The member as the server sent it; `--json` prints every field it has. */
+export type AddedMember = typeof AddReply.Type['member'] & Readonly<Record<string, unknown>>
+
+/** Sends one request; calls `onRequestStart` just before anything goes out. */
+export type TeamMemberAddRequest = (path: string, init: RequestInit, onRequestStart?: () => void) => Promise<Response>
+
+// The invite may be saved when the server says so, when the reply was lost,
+// late or unreadable after the request was sent, when a 5xx did not come from
+// the app (a gateway giving up while the app kept working), or when the reply
+// has no member. Any other error reply is a clear refusal.
+class TeamMemberAddFailure extends Error {
+  readonly _tag = 'TeamMemberAddFailure'
+  constructor(message: string, readonly mayBeSaved: boolean) { super(message) }
+}
+
+// One request, never retried: a retry after a saved invite is refused as
+// "already a member", which hides that the first one worked.
+function memberAdd(teamSlug: string, email: string, request: TeamMemberAddRequest, timeoutMs: number): Effect.Effect<AddedMember, TeamMemberAddFailure> {
+  return Effect.suspend(() => {
+    let sent = false
+    let timedOut = false
+    return Effect.tryPromise({
+      try: async signal => {
+        const controller = new AbortController()
+        const abort = () => controller.abort()
+        const timer = setTimeout(() => { timedOut = true; controller.abort() }, timeoutMs)
+        if (signal.aborted) abort()
+        else signal.addEventListener('abort', abort, { once: true })
+        try {
+          const response = await request(`/api/cli/teams/${encodeURIComponent(teamSlug)}/members`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ email }),
+            signal: controller.signal,
+          }, () => { sent = true })
+          if (!response.ok) {
+            const appError = await appErrorOf(response.clone())
+            const detail = await extractErrorMessage(response)
+            if (appError === SERVER_MAY_BE_SAVED) throw new TeamMemberAddFailure(appError, true)
+            if (response.status < 400 || (response.status >= 500 && appError === null)) {
+              throw new TeamMemberAddFailure(`Member add got no clear answer (status ${response.status}).`, true)
+            }
+            // The route's own failures already say what failed.
+            throw new TeamMemberAddFailure(detail.startsWith('Failed to ') ? detail : `${FAILED}: ${detail}`, false)
+          }
+          // Reading the body can still fail or stall; that stays under the deadline.
+          const body = await response.text()
+          let data: unknown
+          try {
+            data = JSON.parse(body)
+          } catch {
+            data = undefined
+          }
+          if (Result.isFailure(Schema.decodeUnknownResult(AddReply)(data))) {
+            throw new TeamMemberAddFailure(`Member add returned an unexpected response (status ${response.status}).`, true)
+          }
+          // Decoding keeps only the named fields; the reply's member is returned whole.
+          return (data as { member: AddedMember }).member
+        } finally {
+          clearTimeout(timer)
+          signal.removeEventListener('abort', abort)
+          controller.abort()
+        }
+      },
+      catch: cause => {
+        if (cause instanceof TeamMemberAddFailure) return cause
+        if (timedOut) return new TeamMemberAddFailure('Member add exceeded its deadline.', sent)
+        const unreached = unreachedCode(cause)
+        if (unreached) return new TeamMemberAddFailure(`${FAILED}: could not reach the server (${unreached}).`, false)
+        const message = cause instanceof Error ? cause.message : String(cause)
+        if (!sent || message.startsWith('ORIZU_AUTH_CONTEXT_CHANGED:')) return new TeamMemberAddFailure(message, false)
+        // Also reached when a sign-in refresh fails after a 401: still told to
+        // check, so say only that the invite did not finish.
+        return new TeamMemberAddFailure(`Member add did not finish: ${message}`, true)
+      },
+    })
+  })
+}
+
+/** `orizu teams members add`: the invited member, or an error saying whether the invite may be saved. */
+export async function addTeamMemberWithDeadline(teamSlug: string, email: string, request: TeamMemberAddRequest): Promise<AddedMember> {
+  const exit = await Effect.runPromiseExit(memberAdd(teamSlug, email, request, datasetTransferTimeoutMs()).pipe(
+    Effect.mapError(failure => new Error(failure.mayBeSaved ? `${failure.message}\n${mayBeInvited(teamSlug, email)}` : failure.message)),
+  ))
+  if (Exit.isSuccess(exit)) return exit.value
+  throw Cause.squash(exit.cause)
+}

package/vendor/orizu-gepa/src/orizu_gepa_connector/runtime.py

@@ -4,6 +4,11 @@ from __future__ import annotations
 
 import json
 import os
+import signal
+import sys
+import threading
+import time
+from contextlib import contextmanager
 from pathlib import Path
 from typing import Any
 from uuid import uuid4
@@ -431,7 +436,120 @@ def _result_summary(*, run_id: str, best_id: str, best_score: float, seed_score:
     }
 
 
+_STOP_SIGNALS = (signal.SIGINT, signal.SIGTERM, signal.SIGHUP, signal.SIGQUIT)
+# One Ctrl-C reaches the optimizer twice: from the terminal and again from the
+# CLI that passes it on. A repeat this soon after the first is the same press.
+_REPEAT_WINDOW_SECONDS = 1.0
+_STATUS_WRITE_SECONDS = 10.0
+
+
+class RunInterrupted(BaseException):
+    """A stop signal (Ctrl-C, SIGTERM, a closed terminal) reached the run."""
+
+    def __init__(self, signal_name: str, signum: int) -> None:
+        super().__init__(signal_name)
+        self.signal_name = signal_name
+        self.signum = signum
+
+
+def _end_by_signal(signum: int) -> None:
+    """Exit the way an unhandled signal would, so callers see 128 + its number."""
+    sys.stdout.flush()
+    sys.stderr.flush()
+    signal.signal(signum, signal.SIG_DFL)
+    os.kill(os.getpid(), signum)
+
+
+@contextmanager
+def interrupt_signals():
+    """Turn the first stop signal into ``RunInterrupted``; a later one ends at once."""
+    first_at: list[float] = []
+
+    def handle(signum: int, _frame: Any) -> None:
+        if not first_at:
+            first_at.append(time.monotonic())
+            if os.getpgrp() == os.getpid():
+                # Runners may run in worker threads, which this interrupt does
+                # not reach; when we lead the process group, stop them too.
+                # Our own copy of the signal falls in the repeat window.
+                try:
+                    os.killpg(os.getpgrp(), signum)
+                except OSError:
+                    pass
+            raise RunInterrupted(signal.Signals(signum).name, signum)
+        if time.monotonic() - first_at[0] < _REPEAT_WINDOW_SECONDS:
+            return
+        _end_by_signal(signum)
+
+    previous = {signum: signal.getsignal(signum) for signum in _STOP_SIGNALS}
+    for signum in _STOP_SIGNALS:
+        signal.signal(signum, handle)
+    try:
+        yield
+    finally:
+        for signum, handler in previous.items():
+            signal.signal(signum, handler)
+
+
+def _stop_when_parent_exits() -> None:
+    """Stop like SIGTERM once the CLI that started us is gone (e.g. SIGKILLed).
+
+    The CLI puts the optimizer in its own process group, so a signal sent to
+    the CLI's group no longer reaches it; without this it would keep running.
+    """
+    parent = os.getppid()
+
+    def watch() -> None:
+        while os.getppid() == parent:
+            time.sleep(0.5)
+        os.kill(os.getpid(), signal.SIGTERM)
+
+    threading.Thread(target=watch, daemon=True).start()
+
+
+def _mark_interrupted_run(client: OrizuClient, run_id: str, signal_name: str) -> None:
+    """Mark a stopped local run cancelled once, waiting at most 10 s; never retry."""
+    outcome: list[BaseException | None] = []
+
+    def write() -> None:
+        try:
+            client.update_run(run_id, status="cancelled",
+                              metadata={"stop_reason": "interrupted", "signal": signal_name})
+            outcome.append(None)
+        except BaseException as error:  # reported below; the run still stops
+            outcome.append(error)
+
+    writer = threading.Thread(target=write, daemon=True)
+    writer.start()
+    writer.join(_STATUS_WRITE_SECONDS)
+    if not outcome or outcome[0] is not None:
+        print(
+            f"Run {run_id} may still show as running: run "
+            f"`orizu optimizations cancel {run_id}` to mark it stopped.",
+            file=sys.stderr, flush=True,
+        )
+
+
 def run_from_environment() -> dict[str, Any]:
+    """Run official GEPA; a stopped local run is marked cancelled (ORI-2402).
+
+    A hosted run's final status belongs to its coordinator, which records it
+    before stopping the sandbox, so a hosted run writes no status here.
+    """
+    started: dict[str, Any] = {}
+    with interrupt_signals():
+        if os.environ.get("ORIZU_STOP_WITH_PARENT") == "1":
+            _stop_when_parent_exits()
+        try:
+            return _run_from_environment(started)
+        except RunInterrupted as interrupt:
+            if started.get("run_id") and not started.get("hosted"):
+                _mark_interrupted_run(started["client"], started["run_id"], interrupt.signal_name)
+            _end_by_signal(interrupt.signum)
+            raise
+
+
+def _run_from_environment(started: dict[str, Any]) -> dict[str, Any]:
     """Run official GEPA over the verified legacy runner subprocess contract.
 
     ALI-1502 supplies these variables after verifying runner bytes. Scorer
@@ -542,6 +660,7 @@ def run_from_environment() -> dict[str, Any]:
         model_config_settings_version_id=instruction_set.get("model_config_settings_version_id") if isinstance(instruction_set, dict) else None,
         runner_version_id=prompt_context.runner_version_id,
     )
+    started.update(client=client, run_id=run_id, hosted=hosted_run_id is not None)
     print(json.dumps({"optimization_run_id": run_id}), flush=True)
     # The frozen sink treats ``None`` as no local artifact writer.  Keep that
     # legacy behavior rather than maintaining a connector-local no-op logger.
@@ -728,6 +847,9 @@ def run_from_environment() -> dict[str, Any]:
                     total_tokens_out=int(getattr(reflection_lm, "total_tokens_out", 0)),
                     total_tokens=int(getattr(reflection_lm, "total_tokens", 0)),
                 )
+        # From here the run has its own final status; a stop must not
+        # overwrite it with "cancelled".
+        started.pop("run_id", None)
         if budget_exhausted:
             if hosted_run_id is None:
                 client.update_run(
@@ -764,6 +886,7 @@ def run_from_environment() -> dict[str, Any]:
             temporary_result_path.replace(result_path)
         return summary
     except Exception as error:
+        started.pop("run_id", None)
         if sink.failed:
             sink.retry_failed_status()
         elif hosted_run_id is None: