@1claw/cli 0.34.7 → 0.35.0

package/dist/src/commands/publish.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish.js","sourceRoot":"","sources":["../../../src/commands/publish.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,EACH,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,SAAS,EACT,aAAa,GAChB,MAAM,cAAc,CAAC;AACtB,OAAO,EACH,WAAW,EACX,SAAS,EACT,UAAU,EACV,YAAY,EACZ,qBAAqB,GACxB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC7E,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EACH,kBAAkB,EAClB,kBAAkB,GACrB,MAAM,4BAA4B,CAAC;AAWpC,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,OAAO,CAAC,SAAS,CAAC;KAC/C,WAAW,CAAC,0DAA0D,CAAC;KACvE,MAAM,CAAC,eAAe,EAAE,0CAA0C,CAAC;KACnE,MAAM,CAAC,aAAa,EAAE,oCAAoC,CAAC;KAC3D,MAAM,CAAC,kBAAkB,EAAE,mCAAmC,CAAC;KAC/D,MAAM,CAAC,qBAAqB,EAAE,wCAAwC,CAAC;KACvE,MAAM,CAAC,kBAAkB,EAAE,sCAAsC,CAAC;KAClE,MAAM,CAAC,UAAU,EAAE,kDAAkD,CAAC;KACtE,MAAM,CAAC,KAAK,EAAE,IAAoB,EAAE,EAAE;IACnC,IAAI,CAAC;QACD,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,UAAU,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;AACL,CAAC,CAAC,CAAC;AAEP,SAAS,UAAU,CAAC,IAAoB,EAAE,YAAoB;IAC1D,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,GAAG,YAAY,SAAS,CAAC;IAC/C,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1E,IAAI,IAAI,IAAI,IAAI,KAAK,WAAW;YAAE,GAAG,GAAG,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACZ,YAAY,CACR,0BAA0B,GAAG,0DAA0D,CAC1F,CAAC;IACN,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAoB;IAC7C,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,8DAA8D;IAC9D,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC;QAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU;YAC9B,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;YAC1B,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAClC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACX,0GAA0G,CAC7G,CAAC;QACN,CAAC;QACD,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAC5C,MAAM,YAAY,GAAG,GAAG,CAAC,iBAAiB,UAAU,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC;QACnE,IAAI,CAAC;YACD,MAAM,WAAW,CAAC;gBACd,OAAO;gBACP,UAAU;gBACV,GAAG;gBACH,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;aACrE,CAAC,CAAC;YACH,YAAY,CAAC,OAAO,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,YAAY,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YACnC,MAAM,GAAG,CAAC;QACd,CAAC;QACD,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;QACnB,aAAa,CAAC,GAAG,CAAC,CAAC;QACnB,OAAO;IACX,CAAC;IAED,4DAA4D;IAC5D,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACX,2BAA2B,IAAI,CAAC,IAAI,wCAAwC,CAC/E,CAAC;IACN,CAAC;IACD,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IAElD,IAAI,WAAmB,CAAC;IAExB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,mCAAmC;QACnC,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,cAAc,KAAK,CAAC,aAAa,wBAAwB,CAAC,CAAC;QAC/E,CAAC;QACD,YAAY,CACR,yDAAyD;YACrD,6DAA6D,CACpE,CAAC;QACF,MAAM,aAAa,GAAG,GAAG,CAAC,cAAc,KAAK,CAAC,aAAa,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC;QAC1E,IAAI,CAAC;YACD,WAAW,GAAG,gBAAgB,KAAK,CAAC,aAAa,SAAS,CAAC;YAC3D,MAAM,YAAY,CAAC,KAAK,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;YACrD,aAAa,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,aAAa,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YACrC,MAAM,GAAG,CAAC;QACd,CAAC;IACL,CAAC;SAAM,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,qDAAqD;QACrD,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,IAAI,kBAAkB,CAAC;QACpD,MAAM,YAAY,GAAG,GAAG,CACpB,mCAAmC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CACjF,CAAC,KAAK,EAAE,CAAC;QACV,IAAI,CAAC;YACD,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,MAAM,gBAAgB,CAC5C,SAAS,EACT,OAAO,EACP,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CACzD,CAAC;YACF,WAAW,GAAG,QAAQ,CAAC;YACvB,YAAY,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,YAAY,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YACrC,MAAM,GAAG,CAAC;QACd,CAAC;IACL,CAAC;SAAM,CAAC;QACJ,uDAAuD;QACvD,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,KAAK,CAAC;IACnD,CAAC;IAED,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,WAAW,MAAM,GAAG,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC;IACrE,IAAI,CAAC;QACD,MAAM,SAAS,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QAClC,UAAU,CAAC,OAAO,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC/B,MAAM,GAAG,CAAC;IACd,CAAC;IAED,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;IAEnB,KAAK,CAAC,WAAW,GAAG,GAAG,CAAC;IACxB,KAAK,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7C,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAE1B,aAAa,CAAC,GAAG,CAAC,CAAC;AACvB,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,GAAW;IAC9B,MAAM,OAAO,GAAG,GAAG,CAAC,WAAW,GAAG,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC;IACjD,IAAI,CAAC;QACD,MAAM,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACzE,OAAO,CAAC,OAAO,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC7B,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,IAAI,8CAA8C,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3D,UAAU,CACN,uEAAuE,CAC1E,CAAC;QACN,CAAC;QACD,MAAM,GAAG,CAAC;IACd,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAC9B,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,YAAY,CAAC,YAAY,CAAC,CAAC;IAC3B,aAAa,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,eAAe,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IAChE,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,SAAS,CAAC,0EAA0E,CAAC,CAAC;IACtF,OAAO,CAAC,GAAG,EAAE,CAAC;AAClB,CAAC"}

package/dist/src/deploy/google-cloud/main.tf

@@ -0,0 +1,74 @@
+# Generated by `1claw deploy --google-cloud`.
+# Deploys a 1Claw agent container to Cloud Run with the agent API key stored in
+# Secret Manager and injected as an environment variable at runtime.
+terraform {
+  required_providers {
+    google = {
+      source  = "hashicorp/google"
+      version = ">= 5.0"
+    }
+  }
+}
+
+provider "google" {
+  project = var.project_id
+  region  = var.region
+}
+
+resource "google_secret_manager_secret" "agent_key" {
+  secret_id = "${var.service_name}-agent-key"
+  replication {
+    auto {}
+  }
+}
+
+resource "google_secret_manager_secret_version" "agent_key" {
+  secret      = google_secret_manager_secret.agent_key.id
+  secret_data = var.agent_api_key
+}
+
+resource "google_cloud_run_v2_service" "agent" {
+  name     = var.service_name
+  location = var.region
+
+  template {
+    containers {
+      image = var.image_tag
+
+      ports {
+        container_port = 3000
+      }
+
+      # Cloud mode: the container talks to the 1Claw API directly using the
+      # agent key injected from Secret Manager (no host daemon in the cloud).
+      env {
+        name  = "ONECLAW_LOCAL_VAULT"
+        value = "false"
+      }
+      env {
+        name  = "ONECLAW_AGENT_ID"
+        value = var.agent_id
+      }
+      env {
+        name  = "ONECLAW_CONTAINER_MODULES"
+        value = var.modules
+      }
+      env {
+        name = "ONECLAW_AGENT_API_KEY"
+        value_source {
+          secret_key_ref {
+            secret  = google_secret_manager_secret.agent_key.secret_id
+            version = "latest"
+          }
+        }
+      }
+    }
+  }
+}
+
+resource "google_cloud_run_v2_service_iam_member" "invoker" {
+  name     = google_cloud_run_v2_service.agent.name
+  location = google_cloud_run_v2_service.agent.location
+  role     = "roles/run.invoker"
+  member   = var.invoker_member
+}

package/dist/src/deploy/google-cloud/outputs.tf

@@ -0,0 +1,9 @@
+output "service_url" {
+  description = "Public URL of the deployed Cloud Run service"
+  value       = google_cloud_run_v2_service.agent.uri
+}
+
+output "service_name" {
+  description = "Cloud Run service name"
+  value       = google_cloud_run_v2_service.agent.name
+}

package/dist/src/deploy/google-cloud/variables.tf

@@ -0,0 +1,44 @@
+variable "project_id" {
+  type        = string
+  description = "Google Cloud project ID"
+}
+
+variable "region" {
+  type        = string
+  description = "Cloud Run region"
+  default     = "us-central1"
+}
+
+variable "service_name" {
+  type        = string
+  description = "Cloud Run service name"
+}
+
+variable "image_tag" {
+  type        = string
+  description = "Container image (must be in a registry, e.g. docker.io/<user>/<name>:<tag>)"
+}
+
+variable "agent_id" {
+  type        = string
+  description = "1Claw agent ID (metadata only)"
+  default     = ""
+}
+
+variable "modules" {
+  type        = string
+  description = "Comma-separated module names baked into the image"
+  default     = ""
+}
+
+variable "agent_api_key" {
+  type        = string
+  description = "1Claw agent API key (ocv_...) stored in Secret Manager"
+  sensitive   = true
+}
+
+variable "invoker_member" {
+  type        = string
+  description = "IAM member allowed to invoke the service"
+  default     = "allUsers"
+}

package/dist/src/docker/base/Dockerfile

@@ -0,0 +1,34 @@
+FROM node:20-alpine AS base
+
+RUN apk add --no-cache curl tini
+
+WORKDIR /app
+
+# Install the 1Claw MCP server (local daemon mode). Best-effort: the chat UI
+# talks to the daemon over the mounted socket directly, so the container is
+# still healthy if the registry is unreachable at build time.
+RUN npm install -g @1claw/mcp@latest || echo "WARN: @1claw/mcp install deferred to runtime"
+
+# Baked-in chat UI (single Node http server + static HTML, zero deps).
+COPY chat-ui /app/chat-ui
+
+# Startup + health scripts
+COPY entrypoint.sh /app/entrypoint.sh
+COPY healthcheck.sh /app/healthcheck.sh
+RUN chmod +x /app/entrypoint.sh /app/healthcheck.sh
+
+# Module extension point: modules drop assets under /app/modules
+RUN mkdir -p /app/modules /run/1claw
+
+ENV NODE_ENV=production
+ENV ONECLAW_LOCAL_VAULT=true
+ENV ONECLAW_DAEMON_SOCKET=/run/1claw/daemon.sock
+ENV CHAT_UI_PORT=3000
+
+EXPOSE 3000
+
+HEALTHCHECK --interval=10s --timeout=3s --start-period=5s --retries=5 \
+    CMD /app/healthcheck.sh
+
+ENTRYPOINT ["tini", "--"]
+CMD ["/app/entrypoint.sh"]

package/dist/src/docker/base/chat-ui/index.html

@@ -0,0 +1,110 @@
+<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8" />
+<meta name="viewport" content="width=device-width, initial-scale=1" />
+<title>1Claw Agent</title>
+<style>
+    :root { color-scheme: dark; }
+    * { box-sizing: border-box; }
+    body {
+        margin: 0; font-family: ui-sans-serif, system-ui, -apple-system, sans-serif;
+        background: #0b0d12; color: #e6e9ef; height: 100vh; display: flex; flex-direction: column;
+    }
+    header {
+        padding: 12px 18px; border-bottom: 1px solid #1c2230;
+        display: flex; align-items: center; gap: 12px; background: #0e1219;
+    }
+    header .dot { width: 9px; height: 9px; border-radius: 50%; background: #38d39f; box-shadow: 0 0 8px #38d39f; }
+    header h1 { font-size: 15px; margin: 0; font-weight: 600; }
+    header .meta { margin-left: auto; font-size: 12px; color: #7c869b; }
+    header .badge { background: #1c2230; padding: 2px 8px; border-radius: 999px; margin-left: 6px; }
+    #log { flex: 1; overflow-y: auto; padding: 18px; display: flex; flex-direction: column; gap: 12px; }
+    .msg { max-width: 80%; padding: 10px 14px; border-radius: 12px; white-space: pre-wrap; line-height: 1.45; font-size: 14px; }
+    .user { align-self: flex-end; background: #2563eb; color: #fff; border-bottom-right-radius: 3px; }
+    .bot { align-self: flex-start; background: #161b25; border: 1px solid #1c2230; border-bottom-left-radius: 3px; }
+    .tool { align-self: flex-start; font-size: 11px; color: #8aa0c2; margin-top: -6px; }
+    form { display: flex; gap: 8px; padding: 14px 18px; border-top: 1px solid #1c2230; background: #0e1219; }
+    input { flex: 1; background: #0b0d12; border: 1px solid #28303f; color: #e6e9ef; padding: 11px 14px; border-radius: 10px; font-size: 14px; outline: none; }
+    input:focus { border-color: #2563eb; }
+    button { background: #2563eb; color: #fff; border: none; padding: 0 18px; border-radius: 10px; font-size: 14px; cursor: pointer; font-weight: 600; }
+    button:disabled { opacity: .5; cursor: default; }
+    a { color: #6ea8fe; }
+</style>
+</head>
+<body>
+<header>
+    <span class="dot"></span>
+    <h1>1Claw Agent</h1>
+    <span class="meta" id="meta">connecting…</span>
+</header>
+<div id="log"></div>
+<form id="form">
+    <input id="input" placeholder="Type a message or /help" autocomplete="off" autofocus />
+    <button id="send" type="submit">Send</button>
+</form>
+<script>
+    const log = document.getElementById("log");
+    const form = document.getElementById("form");
+    const input = document.getElementById("input");
+    const send = document.getElementById("send");
+    const meta = document.getElementById("meta");
+
+    function add(role, text, tool) {
+        if (tool) {
+            const t = document.createElement("div");
+            t.className = "tool";
+            t.textContent = "⚙ tool: " + tool;
+            log.appendChild(t);
+        }
+        const el = document.createElement("div");
+        el.className = "msg " + (role === "user" ? "user" : "bot");
+        el.textContent = text;
+        log.appendChild(el);
+        log.scrollTop = log.scrollHeight;
+    }
+
+    async function loadInfo() {
+        try {
+            const r = await fetch("/api/info");
+            const info = await r.json();
+            const parts = [];
+            parts.push("mode=" + info.mode);
+            if (info.agentId) parts.push("agent=" + info.agentId.slice(0, 8) + "…");
+            if (info.modules && info.modules.length) parts.push("modules=" + info.modules.join(","));
+            parts.push(info.daemonReachable ? "daemon ✓" : "daemon —");
+            meta.innerHTML = parts.map((p) => '<span class="badge">' + p + "</span>").join("");
+        } catch {
+            meta.textContent = "offline";
+        }
+    }
+
+    form.addEventListener("submit", async (e) => {
+        e.preventDefault();
+        const message = input.value.trim();
+        if (!message) return;
+        add("user", message);
+        input.value = "";
+        send.disabled = true;
+        try {
+            const r = await fetch("/api/chat", {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify({ message }),
+            });
+            const data = await r.json();
+            add("bot", data.reply || "(no reply)", data.tool);
+        } catch (err) {
+            add("bot", "Error: " + err.message);
+        } finally {
+            send.disabled = false;
+            input.focus();
+        }
+    });
+
+    add("bot", "1Claw agent ready. Your credentials stay in the host daemon — this container never sees secret values. Type /help to begin.");
+    loadInfo();
+    setInterval(loadInfo, 15000);
+</script>
+</body>
+</html>

package/dist/src/docker/base/chat-ui/server.js

@@ -0,0 +1,233 @@
+#!/usr/bin/env node
+// 1Claw agent chat UI — a tiny, zero-dependency HTTP server.
+//
+// It serves a single-page chat interface and bridges browser requests to the
+// host daemon over the mounted Unix socket. Secret VALUES never transit this
+// process: the daemon injects them into outbound requests and returns only the
+// upstream response. This server only ever sees secret NAMES and metadata.
+"use strict";
+
+const http = require("node:http");
+const { readFileSync } = require("node:fs");
+const { join } = require("node:path");
+
+const PORT = parseInt(process.env.CHAT_UI_PORT || "3000", 10);
+const SOCKET = process.env.ONECLAW_DAEMON_SOCKET || "/run/1claw/daemon.sock";
+const AGENT_ID = process.env.ONECLAW_AGENT_ID || "";
+const MODULES = (process.env.ONECLAW_CONTAINER_MODULES || "")
+    .split(",")
+    .map((m) => m.trim())
+    .filter(Boolean);
+const MODE = process.env.ONECLAW_LOCAL_VAULT === "true" ? "local" : "cloud";
+
+let INDEX_HTML = "<h1>1Claw Agent Running</h1>";
+try {
+    INDEX_HTML = readFileSync(join(__dirname, "index.html"), "utf-8");
+} catch {
+    /* fall back to placeholder */
+}
+
+/** Call the host daemon over the Unix socket. */
+function daemonRequest(method, path, body) {
+    return new Promise((resolve, reject) => {
+        const payload = body ? JSON.stringify(body) : undefined;
+        const req = http.request(
+            {
+                socketPath: SOCKET,
+                path,
+                method,
+                headers: {
+                    "Content-Type": "application/json",
+                    ...(payload
+                        ? { "Content-Length": Buffer.byteLength(payload) }
+                        : {}),
+                },
+                timeout: 10000,
+            },
+            (res) => {
+                const chunks = [];
+                res.on("data", (c) => chunks.push(c));
+                res.on("end", () => {
+                    const text = Buffer.concat(chunks).toString("utf-8");
+                    let parsed = null;
+                    try {
+                        parsed = text ? JSON.parse(text) : null;
+                    } catch {
+                        parsed = { raw: text };
+                    }
+                    resolve({ status: res.statusCode || 0, body: parsed });
+                });
+            },
+        );
+        req.on("error", reject);
+        req.on("timeout", () => req.destroy(new Error("daemon timeout")));
+        if (payload) req.write(payload);
+        req.end();
+    });
+}
+
+function json(res, status, obj) {
+    const body = JSON.stringify(obj);
+    res.writeHead(status, {
+        "Content-Type": "application/json",
+        "Content-Length": Buffer.byteLength(body),
+    });
+    res.end(body);
+}
+
+function readBody(req) {
+    return new Promise((resolve, reject) => {
+        const chunks = [];
+        let size = 0;
+        req.on("data", (c) => {
+            size += c.length;
+            if (size > 1024 * 1024) {
+                reject(new Error("body too large"));
+                req.destroy();
+                return;
+            }
+            chunks.push(c);
+        });
+        req.on("end", () => resolve(Buffer.concat(chunks).toString("utf-8")));
+        req.on("error", reject);
+    });
+}
+
+async function daemonReachable() {
+    if (MODE !== "local") return false;
+    try {
+        const r = await daemonRequest("GET", "/health");
+        return r.status === 200;
+    } catch {
+        return false;
+    }
+}
+
+// A minimal, LLM-optional assistant. Demonstrates the daemon trust boundary
+// with slash commands; if an LLM provider is wired in later it replaces this.
+async function handleChat(message) {
+    const text = (message || "").trim();
+
+    if (text === "/help" || text === "") {
+        return {
+            reply:
+                "1Claw agent ready. Commands:\n" +
+                "  /secrets        — list secret names available via the daemon\n" +
+                "  /info           — show this agent's runtime info\n" +
+                "  /proxy <name> <url> — make a request with the secret injected by the daemon\n" +
+                "Secret values never enter this container.",
+            tool: null,
+        };
+    }
+
+    if (text === "/info") {
+        return {
+            reply: `Agent ${AGENT_ID || "(local)"} · mode=${MODE} · modules=${MODULES.join(", ") || "none"}`,
+            tool: "info",
+        };
+    }
+
+    if (text === "/secrets") {
+        try {
+            const r = await daemonRequest("GET", "/secrets");
+            if (r.status !== 200) {
+                return { reply: `Daemon returned ${r.status}`, tool: "list_secrets" };
+            }
+            const names = (r.body.secrets || []).map((s) => s.name);
+            return {
+                reply: names.length
+                    ? "Available secrets:\n" + names.map((n) => "  • " + n).join("\n")
+                    : "No secrets available to this agent.",
+                tool: "list_secrets",
+            };
+        } catch (err) {
+            return { reply: `Could not reach daemon: ${err.message}`, tool: "list_secrets" };
+        }
+    }
+
+    if (text.startsWith("/proxy ")) {
+        const parts = text.split(/\s+/);
+        const secretName = parts[1];
+        const url = parts[2];
+        if (!secretName || !url) {
+            return { reply: "Usage: /proxy <secret-name> <url>", tool: null };
+        }
+        try {
+            const r = await daemonRequest("POST", "/proxy", {
+                secretName,
+                url,
+                method: "GET",
+            });
+            return {
+                reply:
+                    r.status === 200
+                        ? `Proxied request (secret injected by daemon). Upstream status: ${r.body.status}`
+                        : `Daemon denied request (${r.status}): ${r.body && r.body.error}`,
+                tool: "proxy_request",
+            };
+        } catch (err) {
+            return { reply: `Proxy error: ${err.message}`, tool: "proxy_request" };
+        }
+    }
+
+    return {
+        reply:
+            "No LLM provider is configured in this container yet. " +
+            "Try /help, /secrets, /info, or /proxy. " +
+            "Wire a model via a module to enable conversational replies.",
+        tool: null,
+    };
+}
+
+const server = http.createServer(async (req, res) => {
+    const url = req.url || "/";
+    const method = req.method || "GET";
+
+    if (url === "/health") {
+        return json(res, 200, { status: "ok", agent: AGENT_ID || null, mode: MODE });
+    }
+
+    if (url === "/api/info" && method === "GET") {
+        return json(res, 200, {
+            agentId: AGENT_ID || null,
+            modules: MODULES,
+            mode: MODE,
+            daemonReachable: await daemonReachable(),
+        });
+    }
+
+    if (url === "/api/secrets" && method === "GET") {
+        try {
+            const r = await daemonRequest("GET", "/secrets");
+            return json(res, r.status, r.body || { secrets: [] });
+        } catch (err) {
+            return json(res, 502, { error: `daemon unreachable: ${err.message}` });
+        }
+    }
+
+    if (url === "/api/chat" && method === "POST") {
+        let body;
+        try {
+            body = JSON.parse((await readBody(req)) || "{}");
+        } catch {
+            return json(res, 400, { error: "invalid JSON" });
+        }
+        const result = await handleChat(body.message);
+        return json(res, 200, result);
+    }
+
+    if (url === "/" || url === "/index.html") {
+        res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
+        return res.end(INDEX_HTML);
+    }
+
+    json(res, 404, { error: "not found" });
+});
+
+server.listen(PORT, "0.0.0.0", () => {
+    console.log(`[chat-ui] listening on :${PORT} (mode=${MODE})`);
+});
+
+for (const sig of ["SIGINT", "SIGTERM"]) {
+    process.on(sig, () => server.close(() => process.exit(0)));
+}

package/dist/src/docker/base/entrypoint.sh

@@ -0,0 +1,61 @@
+#!/bin/sh
+# 1Claw agent container entrypoint.
+# Supports two modes:
+#   local  (ONECLAW_LOCAL_VAULT=true)  → credentials injected by the host daemon
+#                                         over the mounted Unix socket. The key
+#                                         NEVER enters the container.
+#   cloud  (ONECLAW_LOCAL_VAULT=false) → the agent API key is provided directly
+#                                         (e.g. via a Secret Manager mount).
+set -e
+
+CHAT_UI_PORT="${CHAT_UI_PORT:-3000}"
+
+echo "─────────────────────────────────────────────"
+echo " 1Claw agent container starting"
+echo "   Agent ID:  ${ONECLAW_AGENT_ID:-not set}"
+echo "   Modules:   ${ONECLAW_CONTAINER_MODULES:-none}"
+
+if [ "$ONECLAW_LOCAL_VAULT" = "true" ]; then
+    echo "   Mode:      local (daemon socket)"
+    echo "   Socket:    $ONECLAW_DAEMON_SOCKET"
+    if [ ! -S "$ONECLAW_DAEMON_SOCKET" ]; then
+        echo ""
+        echo "ERROR: Daemon socket not found at $ONECLAW_DAEMON_SOCKET"
+        echo ""
+        echo "The 1Claw daemon must be running on the host with the socket mounted:"
+        echo "  1claw daemon start"
+        echo "  docker run -v ~/.config/1claw/daemon.sock:/run/1claw/daemon.sock:ro ..."
+        exit 1
+    fi
+    echo "─────────────────────────────────────────────"
+    # Start the MCP server in local daemon mode (best-effort).
+    if command -v 1claw-mcp >/dev/null 2>&1; then
+        ONECLAW_LOCAL_VAULT=true 1claw-mcp --local 2>/tmp/mcp.log &
+    else
+        echo "NOTE: @1claw/mcp not installed in image; chat UI uses the daemon directly."
+    fi
+else
+    echo "   Mode:      cloud (agent API key)"
+    if [ -z "$ONECLAW_AGENT_API_KEY" ]; then
+        echo ""
+        echo "ERROR: ONECLAW_AGENT_API_KEY is not set (cloud mode)."
+        echo "Provide it via a Secret Manager mount or -e ONECLAW_AGENT_API_KEY=..."
+        exit 1
+    fi
+    echo "─────────────────────────────────────────────"
+    if command -v 1claw-mcp >/dev/null 2>&1; then
+        1claw-mcp 2>/tmp/mcp.log &
+    fi
+fi
+
+# Run module startup hooks (each module may drop an executable startup.sh).
+for hook in /app/modules/*/startup.sh; do
+    if [ -x "$hook" ]; then
+        echo "Running module hook: $hook"
+        "$hook" || echo "WARN: module hook $hook exited non-zero"
+    fi
+done
+
+# Start the chat UI (the container's health anchor) in the foreground.
+echo "Ready: http://0.0.0.0:${CHAT_UI_PORT}"
+exec node /app/chat-ui/server.js

package/dist/src/docker/base/healthcheck.sh

@@ -0,0 +1,2 @@
+#!/bin/sh
+curl -sf "http://localhost:${CHAT_UI_PORT:-3000}/health" >/dev/null || exit 1

package/dist/src/docker/compose.yaml

@@ -0,0 +1,20 @@
+# docker-compose template for a 1Claw agent container (local daemon mode).
+# Generated by `1claw eject`. The daemon must be running on the host:
+#   1claw daemon start
+services:
+  agent:
+    image: {{IMAGE}}
+    container_name: {{NAME}}
+    restart: unless-stopped
+    ports:
+      - "{{PORT}}:3000"
+    volumes:
+      # Host daemon socket — credentials are injected here; the container
+      # never receives the raw agent key.
+      - {{DAEMON_SOCKET}}:/run/1claw/daemon.sock:ro
+    environment:
+      ONECLAW_LOCAL_VAULT: "true"
+      ONECLAW_DAEMON_SOCKET: /run/1claw/daemon.sock
+      ONECLAW_AGENT_ID: "{{AGENT_ID}}"
+      ONECLAW_CONTAINER_MODULES: "{{MODULES}}"
+      CHAT_UI_PORT: "3000"

package/dist/src/docker/templates/Dockerfile.tmpl

@@ -0,0 +1,7 @@
+# Generated by `1claw init --docker` / `1claw eject`.
+# Base image provides @1claw/mcp + chat UI + entrypoint. Module layers are
+# appended below. Edit freely, then build with:
+#   docker build -t my-agent .
+FROM {{BASE_IMAGE}}
+
+{{MODULE_LAYERS}}

package/dist/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA+CpC,wBAAgB,aAAa,IAAI,OAAO,CA0EvC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAoDpC,wBAAgB,aAAa,IAAI,OAAO,CAiFvC"}

package/dist/src/index.js

@@ -26,6 +26,11 @@ import { webhookCommand } from "./commands/webhook.js";
 import { platformCommand } from "./commands/platform.js";
 import { deviceCommand } from "./commands/device.js";
 import { approvalCommand } from "./commands/approval.js";
+import { initCommand } from "./commands/init.js";
+import { publishCommand } from "./commands/publish.js";
+import { ejectCommand } from "./commands/eject.js";
+import { containersCommand } from "./commands/containers.js";
+import { deployCommand } from "./commands/deploy.js";
 import { setOutputFormat, setApiUrl } from "./config.js";
 const __dirname = dirname(fileURLToPath(import.meta.url));
 // Compiled to dist/src/index.js → ../../package.json; ts-node from src/ → ../package.json
@@ -65,6 +70,12 @@ export function createProgram() {
     program.addCommand(importCommand);
     program.addCommand(localCommand);
     program.addCommand(daemonCommand);
+    // Containerized agent runtime
+    program.addCommand(initCommand);
+    program.addCommand(publishCommand);
+    program.addCommand(ejectCommand);
+    program.addCommand(containersCommand);
+    program.addCommand(deployCommand);
     // Config
     program.addCommand(configCommand);
     // Treasury

package/dist/src/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EACH,YAAY,EACZ,aAAa,EACb,aAAa,GAChB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACH,qBAAqB,EACrB,oBAAoB,GACvB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACH,kBAAkB,EAClB,kBAAkB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAEzD,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,0FAA0F;AAC1F,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,EAAE,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAChG,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CACvB,CAAC;AACF,IAAI,CAAC,WAAW,EAAE,CAAC;IACf,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;AACvE,CAAC;AACD,MAAM,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,OAAiB,CAAC;AAE1F,MAAM,UAAU,aAAa;IACzB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC;SAC/B,OAAO,CAAC,iBAAiB,CAAC;SAC1B,WAAW,CACR,mEAAmE,CACtE,CAAC;IAEN,OAAO;IACP,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC;IAC1C,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;IACzC,OAAO,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;IACvC,OAAO,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;IACvC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IAEhC,iBAAiB;IACjB,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAC/B,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAElC,UAAU;IACV,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAEjC,UAAU;IACV,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IAEnC,WAAW;IACX,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAE/B,8BAA8B;IAC9B,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAElC,SAAS;IACT,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAElC,WAAW;IACX,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IAEpC,WAAW;IACX,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IAEnC,QAAQ;IACR,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAEjC,WAAW;IACX,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IAEpC,mBAAmB;IACnB,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IAEpC,iBAAiB;IACjB,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,oCAAoC,CAAC,CAAC;IAC/D,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,sCAAsC,CAAC,CAAC;IAE1E,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE;QAC3B,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;YAClB,eAAe,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;YACpB,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC;AACnB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EACH,YAAY,EACZ,aAAa,EACb,aAAa,GAChB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACH,qBAAqB,EACrB,oBAAoB,GACvB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACH,kBAAkB,EAClB,kBAAkB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAEzD,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,0FAA0F;AAC1F,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,EAAE,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAChG,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CACvB,CAAC;AACF,IAAI,CAAC,WAAW,EAAE,CAAC;IACf,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;AACvE,CAAC;AACD,MAAM,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,OAAiB,CAAC;AAE1F,MAAM,UAAU,aAAa;IACzB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC;SAC/B,OAAO,CAAC,iBAAiB,CAAC;SAC1B,WAAW,CACR,mEAAmE,CACtE,CAAC;IAEN,OAAO;IACP,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC;IAC1C,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;IACzC,OAAO,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;IACvC,OAAO,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;IACvC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IAEhC,iBAAiB;IACjB,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAC/B,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAElC,UAAU;IACV,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAEjC,UAAU;IACV,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IAEnC,WAAW;IACX,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAE/B,8BAA8B;IAC9B,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAElC,8BAA8B;IAC9B,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IAChC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IACnC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;IACtC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAElC,SAAS;IACT,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAElC,WAAW;IACX,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IAEpC,WAAW;IACX,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IAEnC,QAAQ;IACR,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAEjC,WAAW;IACX,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IAEpC,mBAAmB;IACnB,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IAEpC,iBAAiB;IACjB,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,oCAAoC,CAAC,CAAC;IAC/D,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,sCAAsC,CAAC,CAAC;IAE1E,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE;QAC3B,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;YAClB,eAAe,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;YACpB,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC;AACnB,CAAC"}