@aligndottech/cli 0.49.0 → 0.50.0

package/dist/lib/share/pending.d.ts

@@ -0,0 +1,48 @@
+import type { SharePayload } from './payload.js';
+export declare const PENDING_TTL_MS: number;
+export interface PendingShare {
+    code: string;
+    expiresAt: string;
+    agentId: string;
+    envName: string;
+    /** Hash over every payload hash, in order. */
+    hash: string;
+    localIds: string[];
+    /** The exact text previewed, so the confirmation re-renders what the agent's person was shown. */
+    preview: string;
+}
+/** Where a share goes: the workspace AND the gateway, so a code cannot be used after either changed. */
+export interface Binding {
+    tenantId: string;
+    gatewayUrl: string;
+}
+export declare function combinedHash(payloads: readonly SharePayload[], to: Binding): string;
+/**
+ * Issue a code. A live code for the SAME payload and destination is returned as it is (re-asking must not
+ * invalidate the one the person may already be typing); any other earlier code that names one of the same
+ * decisions is invalidated.
+ */
+export declare function issueCode(payloads: readonly SharePayload[], meta: {
+    agentId: string;
+    envName: string;
+    preview: string;
+    to: Binding;
+}, now?: Date): string | null;
+export type CodeCheck = {
+    ok: true;
+    pending: PendingShare;
+} | {
+    ok: false;
+    reason: 'malformed' | 'unknown' | 'expired';
+};
+/** Read a code without using it. An expired file is removed. */
+export declare function lookupCode(code: string, now?: Date): CodeCheck;
+/**
+ * Single use, and atomic: the file is RENAMED to a name only this call owns, and only the caller whose
+ * rename succeeded wins. Two racers cannot both pass an exists-then-delete check.
+ */
+export declare function consumeCode(code: string): boolean;
+export declare const PENDING_MAX_AGE_MS: number;
+/** Remove code files (and abandoned `.used` files) older than a day. Returns how many. Touches only its own directory. */
+export declare function sweepPending(now?: Date): number;
+//# sourceMappingURL=pending.d.ts.map

package/dist/lib/share/pending.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending.d.ts","sourceRoot":"","sources":["../../../src/lib/share/pending.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD,eAAO,MAAM,cAAc,QAAiB,CAAC;AAG7C,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,8CAA8C;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,kGAAkG;IAClG,OAAO,EAAE,MAAM,CAAC;CACjB;AAaD,wGAAwG;AACxG,MAAM,WAAW,OAAO;IAAG,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE;AAEjE,wBAAgB,YAAY,CAAC,QAAQ,EAAE,SAAS,YAAY,EAAE,EAAE,EAAE,EAAE,OAAO,GAAG,MAAM,CAEnF;AAMD;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,QAAQ,EAAE,SAAS,YAAY,EAAE,EAAE,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,OAAO,CAAA;CAAE,EAAE,GAAG,OAAa,GAAG,MAAM,GAAG,IAAI,CAmBtK;AAED,MAAM,MAAM,SAAS,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,YAAY,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,SAAS,CAAA;CAAE,CAAC;AAEzH,gEAAgE;AAChE,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAa,GAAG,SAAS,CASpE;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CASjD;AAED,eAAO,MAAM,kBAAkB,QAAsB,CAAC;AAEtD,0HAA0H;AAC1H,wBAAgB,YAAY,CAAC,GAAG,OAAa,GAAG,MAAM,CAYrD"}

package/dist/lib/share/pending.js

@@ -0,0 +1,130 @@
+/**
+ * L9: confirmation codes for a share an agent started (Decision 17, stage 1).
+ *
+ * `align_share` builds the preview, stores the exact payloads here under a short code, and returns
+ * the code. It never sends. A person completes it with `align share --confirm <code>` at a terminal.
+ * A code is single use, expires after 10 minutes, is bound to the payload hash (a changed local row
+ * is refused), and a new code for the same decisions invalidates the old one.
+ *
+ * Files live in `<state home>/align-cli/pending-shares/`, mode 0600 (they hold decision text), in a
+ * directory that is ours and private (alignStateDir's lstat checks refuse a planted link).
+ */
+import { randomBytes } from 'node:crypto';
+import fs from 'node:fs';
+import path from 'node:path';
+import { alignStateDir } from '../backfill-state.js';
+export const PENDING_TTL_MS = 10 * 60 * 1000;
+const CODE_RE = /^[a-z2-7]{10}$/;
+function dirOf() {
+    const base = alignStateDir();
+    if (base === null)
+        return null;
+    const dir = path.join(base, 'pending-shares');
+    try {
+        fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+        const st = fs.lstatSync(dir);
+        return st.isDirectory() && !st.isSymbolicLink() ? dir : null;
+    }
+    catch {
+        return null;
+    }
+}
+export function combinedHash(payloads, to) {
+    return [`to:${to.tenantId}@${to.gatewayUrl}`, ...payloads.map((p) => p.hash)].join('|');
+}
+function read(file) {
+    try {
+        return JSON.parse(fs.readFileSync(file, 'utf8'));
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Issue a code. A live code for the SAME payload and destination is returned as it is (re-asking must not
+ * invalidate the one the person may already be typing); any other earlier code that names one of the same
+ * decisions is invalidated.
+ */
+export function issueCode(payloads, meta, now = new Date()) {
+    const dir = dirOf();
+    if (dir === null)
+        return null;
+    const ids = payloads.map((p) => p.localId);
+    const hash = combinedHash(payloads, meta.to);
+    for (const f of fs.readdirSync(dir)) {
+        const old = read(path.join(dir, f));
+        if (!old || !old.localIds.some((i) => ids.includes(i)))
+            continue;
+        if (old.hash === hash && old.envName === meta.envName && Date.parse(old.expiresAt) > now.getTime())
+            return old.code;
+        fs.rmSync(path.join(dir, f), { force: true });
+    }
+    const alphabet = 'abcdefghijklmnopqrstuvwxyz234567';
+    const code = Array.from(randomBytes(10), (b) => alphabet[b % 32]).join('');
+    const rec = {
+        code, expiresAt: new Date(now.getTime() + PENDING_TTL_MS).toISOString(), agentId: meta.agentId, envName: meta.envName,
+        hash, localIds: ids, preview: meta.preview,
+    };
+    fs.writeFileSync(path.join(dir, `${code}.json`), JSON.stringify(rec), { mode: 0o600 });
+    return code;
+}
+/** Read a code without using it. An expired file is removed. */
+export function lookupCode(code, now = new Date()) {
+    if (!CODE_RE.test(code))
+        return { ok: false, reason: 'malformed' }; // never builds a path from free text
+    const dir = dirOf();
+    if (dir === null)
+        return { ok: false, reason: 'unknown' };
+    const file = path.join(dir, `${code}.json`);
+    const rec = read(file);
+    if (!rec)
+        return { ok: false, reason: 'unknown' };
+    if (Date.parse(rec.expiresAt) <= now.getTime()) {
+        fs.rmSync(file, { force: true });
+        return { ok: false, reason: 'expired' };
+    }
+    return { ok: true, pending: rec };
+}
+/**
+ * Single use, and atomic: the file is RENAMED to a name only this call owns, and only the caller whose
+ * rename succeeded wins. Two racers cannot both pass an exists-then-delete check.
+ */
+export function consumeCode(code) {
+    if (!CODE_RE.test(code))
+        return false;
+    const dir = dirOf();
+    if (dir === null)
+        return false;
+    const file = path.join(dir, `${code}.json`);
+    const mine = path.join(dir, `${code}.${process.pid}.${randomBytes(4).toString('hex')}.used`);
+    try {
+        fs.renameSync(file, mine);
+    }
+    catch {
+        return false;
+    }
+    fs.rmSync(mine, { force: true });
+    return true;
+}
+export const PENDING_MAX_AGE_MS = 24 * 60 * 60 * 1000;
+/** Remove code files (and abandoned `.used` files) older than a day. Returns how many. Touches only its own directory. */
+export function sweepPending(now = new Date()) {
+    const dir = dirOf();
+    if (dir === null)
+        return 0;
+    let n = 0;
+    for (const f of fs.readdirSync(dir)) {
+        if (!/\.(json|used)$/.test(f))
+            continue;
+        const file = path.join(dir, f);
+        try {
+            if (now.getTime() - fs.statSync(file).mtimeMs > PENDING_MAX_AGE_MS) {
+                fs.rmSync(file, { force: true });
+                n += 1;
+            }
+        }
+        catch { /* gone already */ }
+    }
+    return n;
+}
+//# sourceMappingURL=pending.js.map

package/dist/lib/share/pending.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending.js","sourceRoot":"","sources":["../../../src/lib/share/pending.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAGrD,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC7C,MAAM,OAAO,GAAG,gBAAgB,CAAC;AAcjC,SAAS,KAAK;IACZ,MAAM,IAAI,GAAG,aAAa,EAAE,CAAC;IAC7B,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAC9C,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC7B,OAAO,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC;AAKD,MAAM,UAAU,YAAY,CAAC,QAAiC,EAAE,EAAW;IACzE,OAAO,CAAC,MAAM,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,UAAU,EAAE,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC1F,CAAC;AAED,SAAS,IAAI,CAAC,IAAY;IACxB,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAiB,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAClG,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,QAAiC,EAAE,IAAwE,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE;IACrJ,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;IACpB,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7C,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAAE,SAAS;QACjE,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,OAAO,EAAE;YAAE,OAAO,GAAG,CAAC,IAAI,CAAC;QACpH,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,QAAQ,GAAG,kCAAkC,CAAC;IACpD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3E,MAAM,GAAG,GAAiB;QACxB,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,cAAc,CAAC,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO;QACrH,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO;KAC3C,CAAC;IACF,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvF,OAAO,IAAI,CAAC;AACd,CAAC;AAID,gEAAgE;AAChE,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE;IACvD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,qCAAqC;IACzG,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;IACpB,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAClD,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;QAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAAC,CAAC;IAC9H,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;IACpB,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7F,IAAI,CAAC;QAAC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;IAC1D,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEtD,0HAA0H;AAC1H,MAAM,UAAU,YAAY,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE;IAC3C,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;IACpB,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,CAAC,CAAC;IAC3B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,SAAS;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC/B,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,GAAG,kBAAkB,EAAE,CAAC;gBAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAAC,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;QACnH,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/lib/share/preview.d.ts

@@ -0,0 +1,18 @@
+import type { SharePayload } from './payload.js';
+export interface Destination {
+    /** The workspace name from the token's tenant. */
+    workspace: string;
+    env: string;
+    /** The signed-in account. */
+    email: string;
+    /** The gateway URL, present only when it is not the environment's default (an ALIGN_GATEWAY_URL override). */
+    gateway?: string;
+}
+export interface PreviewOptions {
+    /** Local ids this machine shared before: the preview says it is an update. */
+    updates?: ReadonlySet<string>;
+    /** Local ids an old `align push` sent without a workspace: a second share may make a second copy. */
+    legacy?: ReadonlySet<string>;
+}
+export declare function renderPreview(payloads: readonly SharePayload[], dest: Destination, opts?: PreviewOptions): string;
+//# sourceMappingURL=preview.d.ts.map

package/dist/lib/share/preview.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview.d.ts","sourceRoot":"","sources":["../../../src/lib/share/preview.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAa,YAAY,EAAkB,MAAM,cAAc,CAAC;AAE5E,MAAM,WAAW,WAAW;IAC1B,kDAAkD;IAClD,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,6BAA6B;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,8GAA8G;IAC9G,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,8EAA8E;IAC9E,OAAO,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC9B,qGAAqG;IACrG,MAAM,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAC9B;AA4BD,wBAAgB,aAAa,CAAC,QAAQ,EAAE,SAAS,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,GAAE,cAAmB,GAAG,MAAM,CAiCrH"}

package/dist/lib/share/preview.js

@@ -0,0 +1,72 @@
+/**
+ * L9: the text a person reads before anything leaves the machine. Plain text with no colour, so the
+ * CLI prints it, the confirmation prompt re-renders it from the stored payload, and `align_share`
+ * returns the SAME string to the agent. It is rendered from the payload objects `buildSharePayload`
+ * made, which are the objects that are sent: it cannot show one thing and send another.
+ *
+ * Judgements an agent relayed are listed under their own heading, so the person sees them before
+ * they leave. What stays local is named, so a missing verdict is a visible choice and not a surprise.
+ */
+import { visible } from './visible.js';
+const day = (iso) => iso.slice(0, 10);
+const quoted = (t) => (t ? `"${visible(t)}"` : 'another decision');
+function describe(s) {
+    const w = s.wire;
+    const when = day(w.judged_at);
+    switch (w.kind) {
+        case 'ratify': return `ratified by you (${when})`;
+        case 'conflict_verdict':
+            return `${w.value === 'false_positive' ? 'not a real conflict' : 'a real conflict'} with ${quoted(s.counterpartTitle)} (${when})`;
+        case 'check_verdict': return `check hit judged ${w.value === 'false_positive' ? 'a false alarm' : 'real'} (${when})`;
+        case 'supersede': return `replaces ${quoted(s.counterpartTitle)} (${when})`;
+        case 'not_a_decision': return `marked as not a decision (${when})`;
+        case 'note': return `note: "${visible(w.note ?? '')}" (${when})`;
+    }
+}
+function leftLocalLine(l) {
+    const noun = l.kind === 'conflict_verdict' ? 'conflict verdict' : l.kind === 'supersede' ? 'replaced mark' : l.kind.replace(/_/g, ' ');
+    return l.why === 'counterpart_not_shared'
+        ? `a ${noun} about ${quoted(l.counterpartTitle)}: that decision is not on your team graph`
+        : `an older ${noun}: a decision carries at most 50 judgements`;
+}
+const indent = (text, pad) => visible(text, { keepNewline: true }).split('\n').map((l) => `${pad}${l}`).join('\n');
+export function renderPreview(payloads, dest, opts = {}) {
+    const lines = [
+        `You are about to share ${payloads.length} decision${payloads.length === 1 ? '' : 's'} with your team.`,
+        '',
+    ];
+    payloads.forEach((p, i) => {
+        const ownJudgements = p.shown.filter((s) => s.via === 'cli');
+        const viaAgent = p.shown.filter((s) => s.via === 'mcp');
+        lines.push(`${i + 1}. ${visible(p.item.title)}${opts.updates?.has(p.localId) ? '  (update: you shared this before)' : ''}`);
+        lines.push(indent(p.item.raw_text, '   '));
+        lines.push(`   Source: ${visible(p.item.source_url)} (${visible(p.item.platform)})`);
+        if (!/^https?:\/\//i.test(p.item.source_url))
+            lines.push('   That source is a path or id on your machine, not a link your team can open.');
+        if (p.item.created_at)
+            lines.push(`   Decided: ${visible(p.item.created_at)}`);
+        if (opts.legacy?.has(p.localId)) {
+            lines.push(`   This was pushed before Align tracked shares, so sharing again may create a second copy. Retract the old one: align share --retract ${p.localId}`);
+        }
+        if (ownJudgements.length) {
+            lines.push('   Goes with it:');
+            for (const s of ownJudgements)
+                lines.push(`     - ${describe(s)}`);
+        }
+        for (const agent of [...new Set(viaAgent.map((s) => s.agentId ?? 'unknown'))]) {
+            lines.push(`   Recorded by your agent (${visible(agent)}):`);
+            for (const s of viaAgent.filter((x) => (x.agentId ?? 'unknown') === agent))
+                lines.push(`     - ${describe(s)}`);
+        }
+        if (p.leftLocal.length) {
+            lines.push('   Stays on this machine:');
+            for (const l of p.leftLocal)
+                lines.push(`     - ${leftLocalLine(l)}`);
+        }
+        lines.push('');
+    });
+    // The destination is the LAST thing printed, directly above the question, so it is what is read last.
+    lines.push('Nothing is sent until you say yes.', `To: ${visible(dest.workspace)} (${visible(dest.env)}) as ${visible(dest.email)}${dest.gateway ? `, via ${visible(dest.gateway)} (not the default for ${visible(dest.env)})` : ''}`);
+    return lines.join('\n');
+}
+//# sourceMappingURL=preview.js.map

package/dist/lib/share/preview.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview.js","sourceRoot":"","sources":["../../../src/lib/share/preview.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAoBvC,MAAM,GAAG,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACtD,MAAM,MAAM,GAAG,CAAC,CAAgB,EAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;AAE1F,SAAS,QAAQ,CAAC,CAAiB;IACjC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;IACjB,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC9B,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QACf,KAAK,QAAQ,CAAC,CAAC,OAAO,oBAAoB,IAAI,GAAG,CAAC;QAClD,KAAK,kBAAkB;YACrB,OAAO,GAAG,CAAC,CAAC,KAAK,KAAK,gBAAgB,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,iBAAiB,SAAS,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,IAAI,GAAG,CAAC;QACpI,KAAK,eAAe,CAAC,CAAC,OAAO,oBAAoB,CAAC,CAAC,KAAK,KAAK,gBAAgB,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,GAAG,CAAC;QACrH,KAAK,WAAW,CAAC,CAAC,OAAO,YAAY,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,IAAI,GAAG,CAAC;QAC5E,KAAK,gBAAgB,CAAC,CAAC,OAAO,6BAA6B,IAAI,GAAG,CAAC;QACnE,KAAK,MAAM,CAAC,CAAC,OAAO,UAAU,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,MAAM,IAAI,GAAG,CAAC;IACnE,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,CAAY;IACjC,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACvI,OAAO,CAAC,CAAC,GAAG,KAAK,wBAAwB;QACvC,CAAC,CAAC,KAAK,IAAI,UAAU,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,2CAA2C;QAC1F,CAAC,CAAC,YAAY,IAAI,4CAA4C,CAAC;AACnE,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,GAAW,EAAU,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAE3I,MAAM,UAAU,aAAa,CAAC,QAAiC,EAAE,IAAiB,EAAE,OAAuB,EAAE;IAC3G,MAAM,KAAK,GAAa;QACtB,0BAA0B,QAAQ,CAAC,MAAM,YAAY,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,kBAAkB;QACvG,EAAE;KACH,CAAC;IACF,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACxB,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,oCAAoC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5H,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;QAC3C,KAAK,CAAC,IAAI,CAAC,cAAc,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACrF,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,gFAAgF,CAAC,CAAC;QAC3I,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU;YAAE,KAAK,CAAC,IAAI,CAAC,eAAe,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAC/E,IAAI,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,KAAK,CAAC,IAAI,CAAC,yIAA2I,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACrK,CAAC;QACD,IAAI,aAAa,CAAC,MAAM,EAAE,CAAC;YACzB,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YAC/B,KAAK,MAAM,CAAC,IAAI,aAAa;gBAAE,KAAK,CAAC,IAAI,CAAC,UAAU,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9E,KAAK,CAAC,IAAI,CAAC,8BAA8B,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7D,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,SAAS,CAAC,KAAK,KAAK,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,UAAU,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAClH,CAAC;QACD,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;YACxC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS;gBAAE,KAAK,CAAC,IAAI,CAAC,UAAU,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC,CAAC,CAAC;IACH,sGAAsG;IACtG,KAAK,CAAC,IAAI,CAAC,oCAAoC,EAAE,OAAO,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,yBAAyB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACtO,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/lib/share/run.d.ts

@@ -0,0 +1,115 @@
+/**
+ * L9: the share flow with no I/O of its own beyond the injected client: select, build, scan, price
+ * the preview, send, read the answer, record the ledger. `align share`, `align share --confirm` and
+ * `align_share` all call it, so the three cannot disagree about what a share is.
+ *
+ * Order, and why: the secret scan runs on the payload that will be SENT (a refusal names the decision,
+ * the field and the placeholder, never the match); an item already shared with an unchanged payload
+ * is "already shared" and makes no call; only then is anything previewed. Nothing here sends without
+ * the caller having passed `send`, and `prepare` never calls the network except `whoami` (a read).
+ */
+import { type Judge } from '../curation/judgements-db.js';
+import { type DecisionRow } from '../local-db.js';
+import { type Promotion } from './ledger.js';
+import { type SharePayload } from './payload.js';
+import { type Destination } from './preview.js';
+import { type SecretFinding } from './secret-scan.js';
+import { type BatchResponse, type ItemOutcome } from './wire.js';
+export interface TeamDecision {
+    title?: string;
+    summary?: string;
+    /** The decision's AI payload: the server's team-text hash also covers its statements, Gherkin and acceptance criteria. */
+    decision_json?: {
+        ai?: {
+            decisions?: unknown;
+            gherkin?: unknown;
+            acceptance_criteria?: unknown;
+        };
+    } | null;
+}
+export interface ShareClient {
+    whoami(): Promise<{
+        user: {
+            email: string;
+        };
+        tenant: {
+            id: string;
+            name: string;
+        };
+    }>;
+    shareBatch(items: Array<Record<string, unknown>>): Promise<BatchResponse>;
+    getDecision(id: string): Promise<TeamDecision>;
+    archiveDecision(id: string): Promise<void>;
+}
+export interface ShareContext {
+    dbPath: string;
+    envName: string;
+    client: ShareClient;
+    judge: Judge;
+    /** This install's private share salt (see salt.ts): never sent anywhere, not the telemetry install id. */
+    salt: string;
+    /** Where the share goes. Shown whenever it is not the environment's default, and bound into a confirmation code. */
+    gatewayUrl: string;
+    /** The default gateway URL for this environment, to tell an override from the norm. */
+    defaultGatewayUrl: string;
+}
+export declare class ShareError extends Error {
+    readonly exitCode: number;
+    constructor(message: string, exitCode?: number);
+}
+export interface Prepared {
+    payloads: SharePayload[];
+    dest: Destination;
+    tenantId: string;
+    gatewayUrl: string;
+    /** What this machine knew of each payload before: its ledger row, if any (live or retracted). */
+    priors: Map<string, Promotion | null>;
+    /** Decisions whose payload is unchanged since the last share: nothing to send. */
+    already: Array<{
+        localId: string;
+        title: string;
+        remoteId: string;
+    }>;
+    secrets: Array<SecretFinding & {
+        localId: string;
+    }>;
+    preview: string;
+}
+/** Batches of at most this many items: 10 x the gateway's 50 judgements per item stays under its 500 per request. */
+export declare const SHARE_BATCH_ITEMS = 10;
+export declare function ratifiedRows(dbPath: string, opts?: {
+    owner?: string;
+    sinceIso?: string;
+}): DecisionRow[];
+export declare function prepare(ctx: ShareContext, ids: string[]): Promise<Prepared>;
+/** The refusal text: where, which kind, never the value. */
+export declare function secretRefusal(secrets: Prepared['secrets']): string;
+export type RowResult = {
+    localId: string;
+    title: string;
+    outcome: ItemOutcome;
+    judgementFailures: Array<{
+        index: number;
+        error: string;
+    }>;
+    /** Things the person must know that are not failures (an older gateway, a share treated as not yours to retract). */
+    warnings: string[];
+};
+export interface SendHooks {
+    /** A matched share whose ratify/supersede wait on the team's text: show it, return whether the person agrees. */
+    confirmTeamText?: (info: {
+        localId: string;
+        title: string;
+        team: TeamDecision;
+    }) => Promise<boolean>;
+}
+export declare function send(ctx: ShareContext, prep: Prepared, hooks?: SendHooks): Promise<RowResult[]>;
+/** Every field the server's team-text hash covers, so what the person confirms is what the hash pins. */
+export declare function renderTeamText(team: TeamDecision): string;
+export declare function renderResults(rows: readonly RowResult[]): string;
+export interface RetractResult {
+    ok: boolean;
+    message: string;
+}
+export declare function retract(ctx: ShareContext, localId: string): Promise<RetractResult>;
+//# sourceMappingURL=run.d.ts.map

package/dist/lib/share/run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../../src/lib/share/run.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAkB,KAAK,KAAK,EAAkB,MAAM,8BAA8B,CAAC;AAC1F,OAAO,EAAiB,KAAK,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACjE,OAAO,EAAgF,KAAK,SAAS,EAA0D,MAAM,aAAa,CAAC;AAEnL,OAAO,EAAmC,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC;AAClF,OAAO,EAAE,KAAK,WAAW,EAAiB,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAiD,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACrG,OAAO,EAAE,KAAK,aAAa,EAAoB,KAAK,WAAW,EAAsC,MAAM,WAAW,CAAC;AAEvH,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0HAA0H;IAC1H,aAAa,CAAC,EAAE;QAAE,EAAE,CAAC,EAAE;YAAE,SAAS,CAAC,EAAE,OAAO,CAAC;YAAC,OAAO,CAAC,EAAE,OAAO,CAAC;YAAC,mBAAmB,CAAC,EAAE,OAAO,CAAA;SAAE,CAAA;KAAE,GAAG,IAAI,CAAC;CAC3G;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,IAAI,OAAO,CAAC;QAAE,IAAI,EAAE;YAAE,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,MAAM,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC,CAAC;IACrF,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC1E,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC/C,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5C;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,EAAE,KAAK,CAAC;IACb,0GAA0G;IAC1G,IAAI,EAAE,MAAM,CAAC;IACb,oHAAoH;IACpH,UAAU,EAAE,MAAM,CAAC;IACnB,uFAAuF;IACvF,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,qBAAa,UAAW,SAAQ,KAAK;IACN,QAAQ,CAAC,QAAQ;gBAAlC,OAAO,EAAE,MAAM,EAAW,QAAQ,SAAI;CACnD;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,IAAI,EAAE,WAAW,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,iGAAiG;IACjG,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAAC,CAAC;IACtC,kFAAkF;IAClF,OAAO,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrE,OAAO,EAAE,KAAK,CAAC,aAAa,GAAG;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpD,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,qHAAqH;AACrH,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAEpC,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,WAAW,EAAE,CAO5G;AAED,wBAAsB,OAAO,CAAC,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,CAgEjF;AAED,4DAA4D;AAC5D,wBAAgB,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,SAAS,CAAC,GAAG,MAAM,CAGlE;AAED,MAAM,MAAM,SAAS,GAAG;IACtB,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,WAAW,CAAC;IACrD,iBAAiB,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3D,qHAAqH;IACrH,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB,CAAC;AAEF,MAAM,WAAW,SAAS;IACxB,iHAAiH;IACjH,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,YAAY,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACtG;AAyCD,wBAAsB,IAAI,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,GAAE,SAAc,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAsDzG;AAED,yGAAyG;AACzG,wBAAgB,cAAc,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,CAQzD;AASD,wBAAgB,aAAa,CAAC,IAAI,EAAE,SAAS,SAAS,EAAE,GAAG,MAAM,CAmBhE;AAED,MAAM,WAAW,aAAa;IAAG,EAAE,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAE/D,wBAAsB,OAAO,CAAC,GAAG,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAaxF"}