@1claw/cli 0.34.7 → 0.35.1

package/dist/src/commands/init.d.ts

@@ -0,0 +1,3 @@
+import { Command } from "commander";
+export declare const initCommand: Command;
+//# sourceMappingURL=init.d.ts.map

package/dist/src/commands/init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../../src/commands/init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAuEpC,eAAO,MAAM,WAAW,SAoBlB,CAAC"}

package/dist/src/commands/init.js

@@ -0,0 +1,490 @@
+import { Command } from "commander";
+import chalk from "chalk";
+import inquirer from "inquirer";
+import ora from "ora";
+import { api } from "../client.js";
+import { getToken } from "../config.js";
+import { loginWithDevice } from "../auth.js";
+import { printSuccess, printError, printWarning, printInfo, printKeyValue, printTable, } from "../output.js";
+import { vaultExists, createVault, loadVault, saveVault, addSecret, } from "../local-vault.js";
+import { loadPolicy, savePolicy, setSecretPolicy, } from "../local-policy.js";
+import { dockerAvailable, dockerDaemonError, dockerRun, dockerContainerStatus, dockerLogs, } from "../lib/docker-client.js";
+import { ensureBaseImage, buildModuleImage, DEFAULT_BASE_IMAGE, } from "../lib/image-build.js";
+import { listModules, resolveModules, } from "../modules/registry.js";
+import { generateContainerName, isValidContainerName, sanitizeName, loadContainerState, saveContainerState, findAvailablePort, MANAGED_LABEL, } from "../lib/container-config.js";
+import { daemonSocketPath, daemonHealthy, startDaemonDetached, } from "../lib/daemon-control.js";
+export const initCommand = new Command("init")
+    .description("Initialize a secure agent runtime in a Docker container")
+    .option("--docker [image]", "Run in Docker container (default: 1claw/agent:stable)")
+    .option("--module <names...>", "Add modules (comma-separated or repeated): ampersend, onchain, langchain, elizaos, scaffold-agent")
+    .option("--list-modules", "List all available modules and exit")
+    .option("--port <port>", "Chat UI port", "3000")
+    .option("--name <name>", "Container name (default: auto-generated)")
+    .option("--local", "Fully offline — no cloud provisioning")
+    .option("--agent-key <key>", "Use an existing agent key (skip provisioning)")
+    .option("--detach", "Run the container in the background")
+    .action(async (opts) => {
+    try {
+        await initAction(opts);
+    }
+    catch (err) {
+        printError(err instanceof Error ? err.message : String(err));
+        process.exit(1);
+    }
+});
+function parseModuleNames(input) {
+    if (!input)
+        return [];
+    const names = [];
+    for (const entry of input) {
+        for (const part of entry.split(",")) {
+            const trimmed = part.trim();
+            if (trimmed)
+                names.push(trimmed);
+        }
+    }
+    return [...new Set(names)];
+}
+function printModuleList() {
+    const modules = listModules();
+    console.log();
+    console.log(chalk.bold("  Available modules:"));
+    console.log();
+    if (modules.length === 0) {
+        printInfo("No modules bundled.");
+        return;
+    }
+    printTable(modules.map((m) => ({
+        name: m.name,
+        description: m.description.replace(/\s+/g, " ").slice(0, 60),
+        author: m.author,
+    })), [
+        { key: "name", header: "Module", width: 16 },
+        { key: "description", header: "Description", width: 62 },
+        { key: "author", header: "Author" },
+    ]);
+    console.log();
+    console.log(chalk.dim("  Usage: 1claw init --docker --module=ampersend --module=onchain\n" +
+        "     or: 1claw init --docker --module=ampersend,onchain"));
+    console.log();
+}
+async function provisionCloudResources(containerName) {
+    const sid = sanitizeName(containerName);
+    const agentSpinner = ora("Provisioning agent...").start();
+    let agentId;
+    let apiKey;
+    try {
+        const res = await api("/agents", {
+            method: "POST",
+            body: {
+                name: `docker-agent-${sid}`.slice(0, 60),
+                description: "Created by `1claw init --docker`",
+                shroud_enabled: true,
+                intents_api_enabled: true,
+                auth_method: "api_key",
+            },
+        });
+        agentId = "agent" in res ? res.agent.id : res.id;
+        if (!res.api_key) {
+            agentSpinner.fail("Agent created but no API key returned.");
+            throw new Error("No agent API key returned by the API.");
+        }
+        apiKey = res.api_key;
+        agentSpinner.succeed(`Agent provisioned (${agentId.slice(0, 8)}…)`);
+    }
+    catch (err) {
+        agentSpinner.fail("Failed to provision agent.");
+        throw err;
+    }
+    const vaultSpinner = ora("Creating vault...").start();
+    let vaultId;
+    let vaultName;
+    try {
+        const vault = await api("/vaults", {
+            method: "POST",
+            body: {
+                name: `docker-vault-${sid}`.slice(0, 60),
+                description: "Created by `1claw init --docker`",
+            },
+        });
+        vaultId = vault.id;
+        vaultName = vault.name;
+        vaultSpinner.succeed(`Vault created (${vaultName})`);
+    }
+    catch (err) {
+        vaultSpinner.fail("Failed to create vault.");
+        throw err;
+    }
+    const policySpinner = ora("Binding vault and granting read policy...").start();
+    try {
+        await api(`/agents/${agentId}`, {
+            method: "PATCH",
+            body: { vault_ids: [vaultId] },
+        });
+        await api(`/vaults/${vaultId}/policies`, {
+            method: "POST",
+            body: {
+                principal_type: "agent",
+                principal_id: agentId,
+                secret_path_pattern: "secrets/*",
+                permissions: ["read"],
+            },
+        });
+        policySpinner.succeed("Vault bound; read policy on secrets/* granted.");
+    }
+    catch (err) {
+        policySpinner.fail("Failed to bind vault / create policy.");
+        throw err;
+    }
+    return { agentId, apiKey, vaultId, vaultName };
+}
+async function resolvePassphrase(confirm) {
+    if (process.env.ONECLAW_VAULT_PASSPHRASE) {
+        return process.env.ONECLAW_VAULT_PASSPHRASE;
+    }
+    const { passphrase } = await inquirer.prompt([
+        {
+            type: "password",
+            name: "passphrase",
+            message: "Local vault passphrase:",
+            mask: "*",
+            validate: (v) => v.length >= 8 ? true : "Passphrase must be at least 8 characters",
+        },
+    ]);
+    if (confirm) {
+        const { confirmed } = await inquirer.prompt([
+            {
+                type: "password",
+                name: "confirmed",
+                message: "Confirm passphrase:",
+                mask: "*",
+            },
+        ]);
+        if (passphrase !== confirmed) {
+            throw new Error("Passphrases do not match.");
+        }
+    }
+    return passphrase;
+}
+/**
+ * Ensure a local vault exists, optionally store the agent key + daemon policy,
+ * and make sure the daemon is running so the container can reach it.
+ */
+async function ensureDaemonRunning(opts) {
+    const socketPath = daemonSocketPath();
+    const alreadyRunning = await daemonHealthy(socketPath);
+    // We need the passphrase to create/unlock the vault for key storage and/or
+    // to start the daemon. If the daemon is already running and we have nothing
+    // to store, we can skip vault work entirely.
+    const needVaultWrite = !!opts.storeKey;
+    const needStart = !alreadyRunning;
+    if (!needVaultWrite && !needStart) {
+        return socketPath;
+    }
+    const creatingVault = !vaultExists();
+    let passphrase;
+    if (needVaultWrite || needStart) {
+        if (creatingVault) {
+            printInfo("No local vault found — creating one for the daemon.");
+            passphrase = await resolvePassphrase(true);
+            createVault(passphrase);
+        }
+        else {
+            passphrase = await resolvePassphrase(false);
+            // Verify the passphrase up front so we fail with a clear message
+            // instead of an opaque "daemon did not become ready in time".
+            try {
+                loadVault(passphrase);
+            }
+            catch {
+                throw new Error("Wrong passphrase for the existing local vault.\n" +
+                    "  • If you mistyped it, re-run and enter the correct passphrase.\n" +
+                    "  • If you've forgotten it, reset the vault with: 1claw local destroy --force\n" +
+                    "    (this permanently deletes the old local vault and its secrets), then re-run.");
+            }
+        }
+    }
+    if (needVaultWrite && passphrase) {
+        let vault;
+        try {
+            vault = loadVault(passphrase);
+        }
+        catch {
+            throw new Error("Wrong passphrase or corrupted local vault.");
+        }
+        addSecret(vault, opts.storeKey.localVaultPath, opts.storeKey.apiKey, "api_key");
+        saveVault(vault, passphrase);
+        // Allow the daemon to inject this key toward the 1Claw API only.
+        const policy = loadPolicy();
+        setSecretPolicy(policy, opts.storeKey.localVaultPath, {
+            allowed_hosts: ["api.1claw.xyz", "*.1claw.xyz"],
+            inject_as: "bearer",
+        });
+        savePolicy(policy);
+    }
+    if (needStart) {
+        if (!passphrase)
+            passphrase = await resolvePassphrase(false);
+        const spinner = ora("Starting local daemon...").start();
+        const ok = await startDaemonDetached(passphrase, socketPath);
+        if (!ok) {
+            spinner.fail("Daemon did not become ready in time.");
+            throw new Error("Failed to start the daemon.\n" +
+                "  • Check status:  1claw daemon status\n" +
+                "  • Start it manually (shows errors):  1claw daemon start\n" +
+                "  • Stop a stuck daemon:  1claw daemon stop\n" +
+                "  • Forgot the vault passphrase? Reset it:  1claw local destroy --force");
+        }
+        spinner.succeed(`Daemon running on ${socketPath}`);
+    }
+    else {
+        printInfo(`Reusing running daemon at ${socketPath}`);
+    }
+    return socketPath;
+}
+async function waitForHealthy(port, timeoutMs = 30000) {
+    const deadline = Date.now() + timeoutMs;
+    const url = `http://localhost:${port}/health`;
+    while (Date.now() < deadline) {
+        try {
+            const res = await fetch(url);
+            if (res.ok)
+                return true;
+        }
+        catch {
+            // not up yet
+        }
+        await new Promise((r) => setTimeout(r, 500));
+    }
+    return false;
+}
+async function initAction(opts) {
+    if (opts.listModules) {
+        printModuleList();
+        return;
+    }
+    console.log();
+    console.log(chalk.bold("  1Claw — Secure Agent Runtime"));
+    console.log();
+    // ── Step 1: Preflight ────────────────────────────────────────────────
+    if (!(await dockerAvailable())) {
+        const reason = await dockerDaemonError();
+        throw new Error(reason ??
+            "Docker is required. Install Docker Desktop: https://docs.docker.com/get-docker/");
+    }
+    // ── Modules ──────────────────────────────────────────────────────────
+    const moduleNames = parseModuleNames(opts.module);
+    let modules = [];
+    if (moduleNames.length) {
+        modules = resolveModules(moduleNames);
+        printInfo(`Modules: ${modules.map((m) => m.name).join(", ")}` +
+            (modules.length > moduleNames.length
+                ? chalk.dim("  (incl. dependencies)")
+                : ""));
+    }
+    // ── Container identity ───────────────────────────────────────────────
+    const containerName = opts.name ?? generateContainerName();
+    if (!isValidContainerName(containerName)) {
+        throw new Error(`Invalid container name "${containerName}". Use letters, digits, _, ., -.`);
+    }
+    if (loadContainerState(containerName)) {
+        throw new Error(`A container named "${containerName}" already exists in state. ` +
+            `Use --name to choose another, or remove it with \`1claw containers rm ${containerName}\`.`);
+    }
+    const existing = await dockerContainerStatus(containerName);
+    if (existing.exists) {
+        throw new Error(`A Docker container named "${containerName}" already exists. ` +
+            `Remove it (\`docker rm -f ${containerName}\`) or choose --name.`);
+    }
+    // ── Step 2/3: Auth + provisioning ────────────────────────────────────
+    let agentId = null;
+    let vaultId = null;
+    let agentApiKey = opts.agentKey ?? null;
+    let localVaultPath = null;
+    if (opts.local) {
+        printInfo("Local mode — no cloud account or provisioning.");
+    }
+    else if (agentApiKey) {
+        printInfo("Using provided --agent-key (skipping provisioning).");
+    }
+    else {
+        if (!getToken()) {
+            printInfo("You need to log in to provision cloud resources.");
+            const { shouldLogin } = await inquirer.prompt([
+                {
+                    type: "confirm",
+                    name: "shouldLogin",
+                    message: "Log in now? (choose No to run offline with --local)",
+                    default: true,
+                },
+            ]);
+            if (!shouldLogin) {
+                throw new Error("Not authenticated. Re-run with --local for offline mode, or `1claw login`.");
+            }
+            const auth = await loginWithDevice();
+            if (!auth)
+                throw new Error("Login failed.");
+        }
+        const result = await provisionCloudResources(containerName);
+        agentId = result.agentId;
+        vaultId = result.vaultId;
+        agentApiKey = result.apiKey;
+    }
+    // ── Step 4/5: Store key + start daemon ───────────────────────────────
+    if (agentApiKey && !opts.local) {
+        localVaultPath = `__docker/${sanitizeName(containerName)}/agent-key`;
+    }
+    else if (agentApiKey && opts.local) {
+        // Even in local mode, an explicitly provided key is stored for the daemon.
+        localVaultPath = `__docker/${sanitizeName(containerName)}/agent-key`;
+    }
+    const socketPath = await ensureDaemonRunning({
+        storeKey: agentApiKey && localVaultPath
+            ? { localVaultPath, apiKey: agentApiKey }
+            : undefined,
+    });
+    // ── Step 6/7: Build or pull image ────────────────────────────────────
+    const baseImage = typeof opts.docker === "string" && opts.docker.length
+        ? opts.docker
+        : DEFAULT_BASE_IMAGE;
+    let imageToRun = baseImage;
+    if (modules.length === 0) {
+        const spinner = ora(`Preparing image ${baseImage}...`).start();
+        try {
+            await ensureBaseImage(baseImage, (line) => {
+                spinner.text = chalk.dim(line.slice(0, 70));
+            });
+            spinner.succeed(`Image ready: ${baseImage}`);
+        }
+        catch (err) {
+            spinner.fail("Failed to prepare image.");
+            throw err;
+        }
+    }
+    else {
+        const baseSpinner = ora("Ensuring base image...").start();
+        try {
+            await ensureBaseImage(baseImage, (line) => {
+                baseSpinner.text = chalk.dim(line.slice(0, 70));
+            });
+            baseSpinner.succeed("Base image ready.");
+        }
+        catch (err) {
+            baseSpinner.fail("Failed to prepare base image.");
+            throw err;
+        }
+        const buildSpinner = ora("Building module image...").start();
+        try {
+            const { tag } = await buildModuleImage(baseImage, modules, (line) => {
+                buildSpinner.text = chalk.dim(line.slice(0, 70));
+            });
+            imageToRun = tag;
+            buildSpinner.succeed(`Built ${tag}`);
+        }
+        catch (err) {
+            buildSpinner.fail("Module image build failed.");
+            throw err;
+        }
+    }
+    // ── Step 8: Run container ────────────────────────────────────────────
+    const requestedPort = parseInt(opts.port, 10) || 3000;
+    const port = await findAvailablePort(requestedPort);
+    if (port !== requestedPort) {
+        printWarning(`Port ${requestedPort} busy — using ${port}.`);
+    }
+    const env = {
+        ONECLAW_LOCAL_VAULT: "true",
+        ONECLAW_DAEMON_SOCKET: "/run/1claw/daemon.sock",
+        ONECLAW_CONTAINER_MODULES: modules.map((m) => m.name).join(","),
+    };
+    if (agentId)
+        env.ONECLAW_AGENT_ID = agentId;
+    const runSpinner = ora(`Starting container ${containerName}...`).start();
+    let containerId;
+    try {
+        containerId = await dockerRun({
+            image: imageToRun,
+            name: containerName,
+            ports: { [String(port)]: "3000" },
+            volumes: { [socketPath]: "/run/1claw/daemon.sock:ro" },
+            env,
+            detach: true,
+            restart: "unless-stopped",
+            labels: { [MANAGED_LABEL]: "true", "1claw.name": containerName },
+        });
+        runSpinner.succeed(`Container started (${containerId.slice(0, 12)})`);
+    }
+    catch (err) {
+        runSpinner.fail("Failed to start container.");
+        throw err;
+    }
+    // ── Step 9: Wait healthy + summary ───────────────────────────────────
+    const healthSpinner = ora("Waiting for the agent to become healthy...").start();
+    const healthy = await waitForHealthy(port);
+    if (healthy) {
+        healthSpinner.succeed("Agent is healthy.");
+    }
+    else {
+        healthSpinner.warn("Health check timed out (the container may still be starting).");
+    }
+    const state = {
+        containerName,
+        containerId,
+        agentId,
+        vaultId,
+        image: baseImage,
+        modules: modules.map((m) => m.name),
+        port,
+        createdAt: new Date().toISOString(),
+        localVaultPath,
+        customImage: null,
+        mode: "local",
+    };
+    saveContainerState(state);
+    console.log();
+    printSuccess("Agent runtime is up.");
+    printKeyValue([
+        ["Chat UI", chalk.cyan(`http://localhost:${port}`)],
+        ["Container", containerName],
+        ["Agent ID", agentId ?? chalk.dim("none (local)")],
+        ["Vault", vaultId ?? chalk.dim("none (local)")],
+        ["Modules", modules.map((m) => m.name).join(", ") || chalk.dim("none")],
+        ["Image", imageToRun],
+        ["Shroud", agentId ? "enabled" : chalk.dim("n/a")],
+        ["Key injection", chalk.green("daemon (container never sees the key)")],
+    ]);
+    console.log();
+    if (modules.some((m) => m.required_secrets.length)) {
+        printInfo("Some modules expect secrets in your vault:");
+        for (const m of modules) {
+            for (const s of m.required_secrets) {
+                console.log(`  ${chalk.dim("•")} ${s.path} ${chalk.dim(s.optional ? "(optional)" : "(required)")} — ${s.description}`);
+            }
+        }
+        console.log();
+    }
+    printInfo(`Manage it: 1claw containers logs ${containerName}  |  1claw containers stop ${containerName}`);
+    console.log();
+    // Open the browser (best-effort) unless detached/headless.
+    try {
+        const open = (await import("open")).default;
+        await open(`http://localhost:${port}`);
+    }
+    catch {
+        // ignore — headless or no browser
+    }
+    if (!opts.detach) {
+        printInfo("Streaming container logs (Ctrl+C to detach; container keeps running).");
+        console.log();
+        const logs = dockerLogs(containerName, true);
+        await new Promise((resolve) => {
+            const stop = () => {
+                logs.kill();
+                resolve();
+            };
+            process.on("SIGINT", stop);
+            logs.on("close", () => resolve());
+        });
+    }
+}
+//# sourceMappingURL=init.js.map

package/dist/src/commands/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../../src/commands/init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EACH,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,SAAS,EACT,aAAa,EACb,UAAU,GACb,MAAM,cAAc,CAAC;AACtB,OAAO,EACH,WAAW,EACX,WAAW,EACX,SAAS,EACT,SAAS,EACT,SAAS,GACZ,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACH,UAAU,EACV,UAAU,EACV,eAAe,GAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACH,eAAe,EACf,iBAAiB,EACjB,SAAS,EACT,qBAAqB,EACrB,UAAU,GACb,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACH,eAAe,EACf,gBAAgB,EAChB,kBAAkB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACH,WAAW,EACX,cAAc,GAEjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACH,qBAAqB,EACrB,oBAAoB,EACpB,YAAY,EACZ,kBAAkB,EAClB,kBAAkB,EAClB,iBAAiB,EACjB,aAAa,GAEhB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACH,gBAAgB,EAChB,aAAa,EACb,mBAAmB,GACtB,MAAM,0BAA0B,CAAC;AAalC,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC;KACzC,WAAW,CAAC,yDAAyD,CAAC;KACtE,MAAM,CAAC,kBAAkB,EAAE,uDAAuD,CAAC;KACnF,MAAM,CACH,qBAAqB,EACrB,mGAAmG,CACtG;KACA,MAAM,CAAC,gBAAgB,EAAE,qCAAqC,CAAC;KAC/D,MAAM,CAAC,eAAe,EAAE,cAAc,EAAE,MAAM,CAAC;KAC/C,MAAM,CAAC,eAAe,EAAE,0CAA0C,CAAC;KACnE,MAAM,CAAC,SAAS,EAAE,uCAAuC,CAAC;KAC1D,MAAM,CAAC,mBAAmB,EAAE,+CAA+C,CAAC;KAC5E,MAAM,CAAC,UAAU,EAAE,qCAAqC,CAAC;KACzD,MAAM,CAAC,KAAK,EAAE,IAAiB,EAAE,EAAE;IAChC,IAAI,CAAC;QACD,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,UAAU,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;AACL,CAAC,CAAC,CAAC;AAEP,SAAS,gBAAgB,CAAC,KAA2B;IACjD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QACxB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,OAAO;gBAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;IACL,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,eAAe;IACpB,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,SAAS,CAAC,qBAAqB,CAAC,CAAC;QACjC,OAAO;IACX,CAAC;IACD,UAAU,CACN,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QAC5D,MAAM,EAAE,CAAC,CAAC,MAAM;KACnB,CAAC,CAAC,EACH;QACI,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE;QAC5C,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,EAAE;QACxD,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE;KACtC,CACJ,CAAC;IACF,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CACP,KAAK,CAAC,GAAG,CACL,oEAAoE;QAChE,yDAAyD,CAChE,CACJ,CAAC;IACF,OAAO,CAAC,GAAG,EAAE,CAAC;AAClB,CAAC;AASD,KAAK,UAAU,uBAAuB,CAClC,aAAqB;IAErB,MAAM,GAAG,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC;IAExC,MAAM,YAAY,GAAG,GAAG,CAAC,uBAAuB,CAAC,CAAC,KAAK,EAAE,CAAC;IAC1D,IAAI,OAAe,CAAC;IACpB,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,GAAG,CAGnB,SAAS,EAAE;YACT,MAAM,EAAE,MAAM;YACd,IAAI,EAAE;gBACF,IAAI,EAAE,gBAAgB,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;gBACxC,WAAW,EAAE,kCAAkC;gBAC/C,cAAc,EAAE,IAAI;gBACpB,mBAAmB,EAAE,IAAI;gBACzB,WAAW,EAAE,SAAS;aACzB;SACJ,CAAC,CAAC;QACH,OAAO,GAAG,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACf,YAAY,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;YAC5D,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC;QACrB,YAAY,CAAC,OAAO,CAAC,sBAAsB,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACxE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,YAAY,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAChD,MAAM,GAAG,CAAC;IACd,CAAC;IAED,MAAM,YAAY,GAAG,GAAG,CAAC,mBAAmB,CAAC,CAAC,KAAK,EAAE,CAAC;IACtD,IAAI,OAAe,CAAC;IACpB,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,GAAG,CAA+B,SAAS,EAAE;YAC7D,MAAM,EAAE,MAAM;YACd,IAAI,EAAE;gBACF,IAAI,EAAE,gBAAgB,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;gBACxC,WAAW,EAAE,kCAAkC;aAClD;SACJ,CAAC,CAAC;QACH,OAAO,GAAG,KAAK,CAAC,EAAE,CAAC;QACnB,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC;QACvB,YAAY,CAAC,OAAO,CAAC,kBAAkB,SAAS,GAAG,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,YAAY,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAC7C,MAAM,GAAG,CAAC;IACd,CAAC;IAED,MAAM,aAAa,GAAG,GAAG,CAAC,2CAA2C,CAAC,CAAC,KAAK,EAAE,CAAC;IAC/E,IAAI,CAAC;QACD,MAAM,GAAG,CAAC,WAAW,OAAO,EAAE,EAAE;YAC5B,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,OAAO,CAAC,EAAE;SACjC,CAAC,CAAC;QACH,MAAM,GAAG,CAAC,WAAW,OAAO,WAAW,EAAE;YACrC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE;gBACF,cAAc,EAAE,OAAO;gBACvB,YAAY,EAAE,OAAO;gBACrB,mBAAmB,EAAE,WAAW;gBAChC,WAAW,EAAE,CAAC,MAAM,CAAC;aACxB;SACJ,CAAC,CAAC;QACH,aAAa,CAAC,OAAO,CAAC,gDAAgD,CAAC,CAAC;IAC5E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,aAAa,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;QAC5D,MAAM,GAAG,CAAC;IACd,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,OAAgB;IAC7C,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,CAAC;QACvC,OAAO,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;IAChD,CAAC;IACD,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;QACzC;YACI,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,yBAAyB;YAClC,IAAI,EAAE,GAAG;YACT,QAAQ,EAAE,CAAC,CAAS,EAAE,EAAE,CACpB,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,0CAA0C;SACxE;KACJ,CAAC,CAAC;IACH,IAAI,OAAO,EAAE,CAAC;QACV,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;YACxC;gBACI,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,qBAAqB;gBAC9B,IAAI,EAAE,GAAG;aACZ;SACJ,CAAC,CAAC;QACH,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QACjD,CAAC;IACL,CAAC;IACD,OAAO,UAAU,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,mBAAmB,CAAC,IAElC;IACG,MAAM,UAAU,GAAG,gBAAgB,EAAE,CAAC;IACtC,MAAM,cAAc,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,CAAC;IAEvD,2EAA2E;IAC3E,4EAA4E;IAC5E,6CAA6C;IAC7C,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;IACvC,MAAM,SAAS,GAAG,CAAC,cAAc,CAAC;IAElC,IAAI,CAAC,cAAc,IAAI,CAAC,SAAS,EAAE,CAAC;QAChC,OAAO,UAAU,CAAC;IACtB,CAAC;IAED,MAAM,aAAa,GAAG,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,UAA8B,CAAC;IAEnC,IAAI,cAAc,IAAI,SAAS,EAAE,CAAC;QAC9B,IAAI,aAAa,EAAE,CAAC;YAChB,SAAS,CAAC,qDAAqD,CAAC,CAAC;YACjE,UAAU,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAC3C,WAAW,CAAC,UAAU,CAAC,CAAC;QAC5B,CAAC;aAAM,CAAC;YACJ,UAAU,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAC5C,iEAAiE;YACjE,8DAA8D;YAC9D,IAAI,CAAC;gBACD,SAAS,CAAC,UAAU,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACL,MAAM,IAAI,KAAK,CACX,kDAAkD;oBAC9C,oEAAoE;oBACpE,iFAAiF;oBACjF,kFAAkF,CACzF,CAAC;YACN,CAAC;QACL,CAAC;IACL,CAAC;IAED,IAAI,cAAc,IAAI,UAAU,EAAE,CAAC;QAC/B,IAAI,KAAK,CAAC;QACV,IAAI,CAAC;YACD,KAAK,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACL,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAClE,CAAC;QACD,SAAS,CACL,KAAK,EACL,IAAI,CAAC,QAAS,CAAC,cAAc,EAC7B,IAAI,CAAC,QAAS,CAAC,MAAM,EACrB,SAAS,CACZ,CAAC;QACF,SAAS,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QAE7B,iEAAiE;QACjE,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,QAAS,CAAC,cAAc,EAAE;YACnD,aAAa,EAAE,CAAC,eAAe,EAAE,aAAa,CAAC;YAC/C,SAAS,EAAE,QAAQ;SACtB,CAAC,CAAC;QACH,UAAU,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IAED,IAAI,SAAS,EAAE,CAAC;QACZ,IAAI,CAAC,UAAU;YAAE,UAAU,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAG,GAAG,CAAC,0BAA0B,CAAC,CAAC,KAAK,EAAE,CAAC;QACxD,MAAM,EAAE,GAAG,MAAM,mBAAmB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QAC7D,IAAI,CAAC,EAAE,EAAE,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;YACrD,MAAM,IAAI,KAAK,CACX,+BAA+B;gBAC3B,0CAA0C;gBAC1C,6DAA6D;gBAC7D,+CAA+C;gBAC/C,yEAAyE,CAChF,CAAC;QACN,CAAC;QACD,OAAO,CAAC,OAAO,CAAC,qBAAqB,UAAU,EAAE,CAAC,CAAC;IACvD,CAAC;SAAM,CAAC;QACJ,SAAS,CAAC,6BAA6B,UAAU,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAAY,EAAE,SAAS,GAAG,KAAK;IACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,MAAM,GAAG,GAAG,oBAAoB,IAAI,SAAS,CAAC;IAC9C,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC3B,IAAI,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;YAC7B,IAAI,GAAG,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACL,aAAa;QACjB,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAiB;IACvC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,eAAe,EAAE,CAAC;QAClB,OAAO;IACX,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,wEAAwE;IACxE,IAAI,CAAC,CAAC,MAAM,eAAe,EAAE,CAAC,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,iBAAiB,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CACX,MAAM;YACF,iFAAiF,CACxF,CAAC;IACN,CAAC;IAED,wEAAwE;IACxE,MAAM,WAAW,GAAG,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,OAAO,GAAqB,EAAE,CAAC;IACnC,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;QACrB,OAAO,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;QACtC,SAAS,CACL,YAAY,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAC/C,CAAC,OAAO,CAAC,MAAM,GAAG,WAAW,CAAC,MAAM;gBAChC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,wBAAwB,CAAC;gBACrC,CAAC,CAAC,EAAE,CAAC,CAChB,CAAC;IACN,CAAC;IAED,wEAAwE;IACxE,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,IAAI,qBAAqB,EAAE,CAAC;IAC3D,IAAI,CAAC,oBAAoB,CAAC,aAAa,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACX,2BAA2B,aAAa,kCAAkC,CAC7E,CAAC;IACN,CAAC;IACD,IAAI,kBAAkB,CAAC,aAAa,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACX,sBAAsB,aAAa,6BAA6B;YAC5D,yEAAyE,aAAa,KAAK,CAClG,CAAC;IACN,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,aAAa,CAAC,CAAC;IAC5D,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACX,6BAA6B,aAAa,oBAAoB;YAC1D,6BAA6B,aAAa,uBAAuB,CACxE,CAAC;IACN,CAAC;IAED,wEAAwE;IACxE,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,IAAI,WAAW,GAAkB,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC;IACvD,IAAI,cAAc,GAAkB,IAAI,CAAC;IAEzC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,SAAS,CAAC,gDAAgD,CAAC,CAAC;IAChE,CAAC;SAAM,IAAI,WAAW,EAAE,CAAC;QACrB,SAAS,CAAC,qDAAqD,CAAC,CAAC;IACrE,CAAC;SAAM,CAAC;QACJ,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;YACd,SAAS,CAAC,kDAAkD,CAAC,CAAC;YAC9D,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;gBAC1C;oBACI,IAAI,EAAE,SAAS;oBACf,IAAI,EAAE,aAAa;oBACnB,OAAO,EAAE,qDAAqD;oBAC9D,OAAO,EAAE,IAAI;iBAChB;aACJ,CAAC,CAAC;YACH,IAAI,CAAC,WAAW,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CACX,4EAA4E,CAC/E,CAAC;YACN,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,eAAe,EAAE,CAAC;YACrC,IAAI,CAAC,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,aAAa,CAAC,CAAC;QAC5D,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QACzB,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QACzB,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC;IAChC,CAAC;IAED,wEAAwE;IACxE,IAAI,WAAW,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAC7B,cAAc,GAAG,YAAY,YAAY,CAAC,aAAa,CAAC,YAAY,CAAC;IACzE,CAAC;SAAM,IAAI,WAAW,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACnC,2EAA2E;QAC3E,cAAc,GAAG,YAAY,YAAY,CAAC,aAAa,CAAC,YAAY,CAAC;IACzE,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC;QACzC,QAAQ,EACJ,WAAW,IAAI,cAAc;YACzB,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,WAAW,EAAE;YACzC,CAAC,CAAC,SAAS;KACtB,CAAC,CAAC;IAEH,wEAAwE;IACxE,MAAM,SAAS,GACX,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM;QACjD,CAAC,CAAC,IAAI,CAAC,MAAM;QACb,CAAC,CAAC,kBAAkB,CAAC;IAE7B,IAAI,UAAU,GAAG,SAAS,CAAC;IAC3B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,GAAG,CAAC,mBAAmB,SAAS,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC;QAC/D,IAAI,CAAC;YACD,MAAM,eAAe,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE;gBACtC,OAAO,CAAC,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAChD,CAAC,CAAC,CAAC;YACH,OAAO,CAAC,OAAO,CAAC,gBAAgB,SAAS,EAAE,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,OAAO,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;YACzC,MAAM,GAAG,CAAC;QACd,CAAC;IACL,CAAC;SAAM,CAAC;QACJ,MAAM,WAAW,GAAG,GAAG,CAAC,wBAAwB,CAAC,CAAC,KAAK,EAAE,CAAC;QAC1D,IAAI,CAAC;YACD,MAAM,eAAe,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE;gBACtC,WAAW,CAAC,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YACpD,CAAC,CAAC,CAAC;YACH,WAAW,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,WAAW,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YAClD,MAAM,GAAG,CAAC;QACd,CAAC;QACD,MAAM,YAAY,GAAG,GAAG,CAAC,0BAA0B,CAAC,CAAC,KAAK,EAAE,CAAC;QAC7D,IAAI,CAAC;YACD,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,gBAAgB,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBAChE,YAAY,CAAC,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YACrD,CAAC,CAAC,CAAC;YACH,UAAU,GAAG,GAAG,CAAC;YACjB,YAAY,CAAC,OAAO,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,YAAY,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YAChD,MAAM,GAAG,CAAC;QACd,CAAC;IACL,CAAC;IAED,wEAAwE;IACxE,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC;IACtD,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,aAAa,CAAC,CAAC;IACpD,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QACzB,YAAY,CAAC,QAAQ,aAAa,iBAAiB,IAAI,GAAG,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,GAAG,GAA2B;QAChC,mBAAmB,EAAE,MAAM;QAC3B,qBAAqB,EAAE,wBAAwB;QAC/C,yBAAyB,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;KAClE,CAAC;IACF,IAAI,OAAO;QAAE,GAAG,CAAC,gBAAgB,GAAG,OAAO,CAAC;IAE5C,MAAM,UAAU,GAAG,GAAG,CAAC,sBAAsB,aAAa,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC;IACzE,IAAI,WAAmB,CAAC;IACxB,IAAI,CAAC;QACD,WAAW,GAAG,MAAM,SAAS,CAAC;YAC1B,KAAK,EAAE,UAAU;YACjB,IAAI,EAAE,aAAa;YACnB,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE;YACjC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,2BAA2B,EAAE;YACtD,GAAG;YACH,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,gBAAgB;YACzB,MAAM,EAAE,EAAE,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE;SACnE,CAAC,CAAC;QACH,UAAU,CAAC,OAAO,CAAC,sBAAsB,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,UAAU,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAC9C,MAAM,GAAG,CAAC;IACd,CAAC;IAED,wEAAwE;IACxE,MAAM,aAAa,GAAG,GAAG,CAAC,4CAA4C,CAAC,CAAC,KAAK,EAAE,CAAC;IAChF,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,OAAO,EAAE,CAAC;QACV,aAAa,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC/C,CAAC;SAAM,CAAC;QACJ,aAAa,CAAC,IAAI,CACd,+DAA+D,CAClE,CAAC;IACN,CAAC;IAED,MAAM,KAAK,GAAmB;QAC1B,aAAa;QACb,WAAW;QACX,OAAO;QACP,OAAO;QACP,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACnC,IAAI;QACJ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,cAAc;QACd,WAAW,EAAE,IAAI;QACjB,IAAI,EAAE,OAAO;KAChB,CAAC;IACF,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAE1B,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,YAAY,CAAC,sBAAsB,CAAC,CAAC;IACrC,aAAa,CAAC;QACV,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;QACnD,CAAC,WAAW,EAAE,aAAa,CAAC;QAC5B,CAAC,UAAU,EAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAClD,CAAC,OAAO,EAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC/C,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvE,CAAC,OAAO,EAAE,UAAU,CAAC;QACrB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAClD,CAAC,eAAe,EAAE,KAAK,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;KAC1E,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;QACjD,SAAS,CAAC,4CAA4C,CAAC,CAAC;QACxD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACtB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;gBACjC,OAAO,CAAC,GAAG,CACP,KAAK,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,GAAG,CACtC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAC3C,MAAM,CAAC,CAAC,WAAW,EAAE,CACzB,CAAC;YACN,CAAC;QACL,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAClB,CAAC;IAED,SAAS,CAAC,oCAAoC,aAAa,8BAA8B,aAAa,EAAE,CAAC,CAAC;IAC1G,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,2DAA2D;IAC3D,IAAI,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QAC5C,MAAM,IAAI,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACL,kCAAkC;IACtC,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACf,SAAS,CAAC,uEAAuE,CAAC,CAAC;QACnF,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,MAAM,IAAI,GAAG,UAAU,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;QAC7C,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAChC,MAAM,IAAI,GAAG,GAAG,EAAE;gBACd,IAAI,CAAC,IAAI,EAAE,CAAC;gBACZ,OAAO,EAAE,CAAC;YACd,CAAC,CAAC;YACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC3B,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;IACP,CAAC;AACL,CAAC"}

package/dist/src/commands/local.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"local.d.ts","sourceRoot":"","sources":["../../../src/commands/local.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA4FpC,eAAO,MAAM,YAAY,SAExB,CAAC"}
+{"version":3,"file":"local.d.ts","sourceRoot":"","sources":["../../../src/commands/local.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA8FpC,eAAO,MAAM,YAAY,SAExB,CAAC"}

package/dist/src/commands/local.js

@@ -1,5 +1,7 @@
 import { Command } from "commander";
-import { readFileSync } from "node:fs";
+import { readFileSync, existsSync, unlinkSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
 import chalk from "chalk";
 import inquirer from "inquirer";
 import ora from "ora";
@@ -444,29 +446,74 @@ localCommand
     }
 });
 // ── destroy ──────────────────────────────────────────────
+/**
+ * Best-effort: stop a running local daemon and clean up its socket/PID so a
+ * stale process isn't left holding the vault we're about to delete. Does NOT
+ * require the passphrase — this is the recovery path for a forgotten one.
+ */
+function stopDaemonForReset() {
+    const configDir = process.env.ONECLAW_CONFIG_DIR || join(homedir(), ".config", "1claw");
+    const pidFile = join(configDir, "daemon.pid");
+    const socketPath = process.env.ONECLAW_DAEMON_SOCKET || join(configDir, "daemon.sock");
+    if (existsSync(pidFile)) {
+        try {
+            const pid = parseInt(readFileSync(pidFile, "utf-8").trim(), 10);
+            if (pid) {
+                try {
+                    process.kill(pid, "SIGTERM");
+                    printInfo(`Stopped running daemon (PID ${pid}).`);
+                }
+                catch {
+                    /* already gone */
+                }
+            }
+        }
+        catch {
+            /* unreadable pid file */
+        }
+        try {
+            unlinkSync(pidFile);
+        }
+        catch { /* ok */ }
+    }
+    try {
+        if (existsSync(socketPath))
+            unlinkSync(socketPath);
+    }
+    catch { /* ok */ }
+}
 localCommand
     .command("destroy")
-    .description("Permanently delete the local vault")
-    .action(async () => {
+    .alias("reset")
+    .description("Permanently delete the local vault (recovery for a forgotten passphrase — no passphrase required)")
+    .option("-f, --force", "Skip the confirmation prompt")
+    .action(async (opts) => {
     try {
         if (!vaultExists()) {
             printInfo("No local vault to destroy.");
+            // Still clean up any stale daemon socket/PID.
+            stopDaemonForReset();
             return;
         }
-        const { confirm } = await inquirer.prompt([
-            {
-                type: "confirm",
-                name: "confirm",
-                message: chalk.red("This will permanently delete your local vault and all secrets. Continue?"),
-                default: false,
-            },
-        ]);
-        if (!confirm) {
-            printInfo("Cancelled.");
-            return;
+        if (!opts.force) {
+            const { confirm } = await inquirer.prompt([
+                {
+                    type: "confirm",
+                    name: "confirm",
+                    message: chalk.red("This will permanently delete your local vault and ALL secrets in it. This cannot be undone. Continue?"),
+                    default: false,
+                },
+            ]);
+            if (!confirm) {
+                printInfo("Cancelled.");
+                return;
+            }
         }
+        // Stop any daemon holding the old vault before deleting it.
+        stopDaemonForReset();
         deleteVault();
         printSuccess("Local vault destroyed.");
+        printInfo("Create a fresh one with `1claw local init`, or just re-run `1claw init --docker --local`.");
     }
     catch (err) {
         if (err instanceof Error)