@ashlr/hub 2.2.0

package/dist/cli/plugins.js

@@ -0,0 +1,394 @@
+/**
+ * cli/plugins.ts — `ashlr plugins list|info|enable|disable` + `ashlr x <name>` (M33).
+ *
+ * Trust posture (CONTRACT-M33 / docs/PLUGINS.md):
+ *   - `list` / `info` are DISCOVERY ONLY — they read manifest.json files and
+ *     NEVER import plugin code.
+ *   - `enable` is the consent gate: shows declared capabilities + a trust
+ *     warning, requires interactive confirmation (or --yes), and pins the
+ *     entry file's sha256 into ~/.ashlr/config.json (tamper evidence).
+ *   - `disable` removes the name from plugins.enabled (pin kept for re-enable).
+ *   - `ashlr x <name> [...]` runs an enabled plugin's command through the
+ *     wrapped (audited, exit-code-safe) runner.
+ *
+ * Exit codes: 0 success · 1 runtime error · 2 bad usage.
+ */
+import { createInterface } from 'node:readline';
+import { join, basename } from 'node:path';
+import { loadConfig, saveConfig } from '../core/config.js';
+import { makeColors, isTty, pad } from './ui.js';
+const c = makeColors(isTty());
+async function importRegistry() {
+    return import('../core/plugins/registry.js');
+}
+async function importIntegrity() {
+    return import('../core/plugins/integrity.js');
+}
+function printPluginsHelp() {
+    console.log('');
+    console.log(c.bold('  ashlr plugins') + c.dim(' — manage the plugin layer (default-off)'));
+    console.log('');
+    console.log(`    ${c.cyan('ashlr plugins init <name> [--capability k]')} ${c.dim('scaffold a working plugin skeleton')}`);
+    console.log(`    ${c.cyan('ashlr plugins list [--json]')}        ${c.dim('discover plugins (manifests only — runs NO plugin code)')}`);
+    console.log(`    ${c.cyan('ashlr plugins info <name>')}          ${c.dim('manifest detail for one plugin')}`);
+    console.log(`    ${c.cyan('ashlr plugins enable <name> [--yes]')} ${c.dim('consent gate: confirm + integrity-pin + enable')}`);
+    console.log(`    ${c.cyan('ashlr plugins disable <name>')}       ${c.dim('remove from plugins.enabled')}`);
+    console.log(`    ${c.cyan('ashlr x <name> [args...]')}           ${c.dim("run an enabled plugin's command")}`);
+    console.log('');
+    console.log('  ' + c.dim('Plugins live in ~/.ashlr/plugins/<name>/ — see docs/PLUGINS.md for the trust model.'));
+    console.log('');
+}
+/** y/N prompt (TTY only; non-TTY refuses unless --yes). */
+function promptConfirm(question) {
+    return new Promise((resolve) => {
+        const rl = createInterface({ input: process.stdin, output: process.stderr });
+        rl.question(`${question} [y/N] `, (answer) => {
+            rl.close();
+            resolve(/^y(es)?$/i.test(answer.trim()));
+        });
+    });
+}
+async function cmdPluginsList(jsonMode) {
+    const { discoverPlugins } = await importRegistry();
+    const cfg = loadConfig();
+    const enabled = new Set(cfg.plugins?.enabled ?? []);
+    const found = discoverPlugins();
+    if (jsonMode) {
+        process.stdout.write(JSON.stringify(found.map((p) => ({
+            dir: p.dir,
+            name: p.manifest?.name ?? basename(p.dir),
+            ok: p.ok,
+            reason: p.reason,
+            enabled: p.manifest ? enabled.has(p.manifest.name) : false,
+            capabilities: p.manifest?.capabilities ?? [],
+            version: p.manifest?.version,
+        })), null, 2) + '\n');
+        return 0;
+    }
+    console.log('');
+    console.log(c.bold('  ashlr plugins') + c.dim(`  — ${found.length} discovered (discovery never runs plugin code)`));
+    console.log('');
+    if (found.length === 0) {
+        console.log(c.dim('  none — drop a plugin under ~/.ashlr/plugins/<name>/ (see docs/PLUGINS.md)'));
+        console.log('');
+        return 0;
+    }
+    for (const p of found) {
+        const name = p.manifest?.name ?? basename(p.dir);
+        const state = !p.ok
+            ? c.red(`invalid (${p.reason ?? 'bad manifest'})`)
+            : enabled.has(name)
+                ? c.green('enabled')
+                : c.dim('disabled');
+        const caps = p.manifest?.capabilities.join(',') ?? '—';
+        console.log(`    ${c.cyan(pad(name, 24))}  ${pad(state, 24)}  ${c.dim(`[${caps}] v${p.manifest?.version ?? '?'}`)}`);
+    }
+    console.log('');
+    console.log(c.dim('  enable with: ashlr plugins enable <name>'));
+    console.log('');
+    return 0;
+}
+async function cmdPluginsInfo(name, jsonMode) {
+    if (!name) {
+        process.stderr.write('error: usage: ashlr plugins info <name>\n');
+        return 2;
+    }
+    const { discoverPlugins } = await importRegistry();
+    const found = discoverPlugins().find((p) => p.manifest?.name === name || basename(p.dir) === name);
+    if (!found) {
+        process.stderr.write(`error: plugin not found under ~/.ashlr/plugins/: ${name}\n`);
+        return 1;
+    }
+    if (jsonMode) {
+        process.stdout.write(JSON.stringify(found, null, 2) + '\n');
+        return 0;
+    }
+    const cfg = loadConfig();
+    console.log('');
+    console.log(c.bold(`  ${name}`) + (found.ok ? '' : c.red('  (invalid manifest)')));
+    if (found.manifest) {
+        console.log(`    version       ${c.cyan(found.manifest.version)}`);
+        console.log(`    apiVersion    ${c.cyan(found.manifest.apiVersion)}`);
+        console.log(`    capabilities  ${c.cyan(found.manifest.capabilities.join(', ') || '(none)')}`);
+        console.log(`    entry         ${c.dim(join(found.dir, found.manifest.entry))}`);
+        if (found.manifest.description)
+            console.log(`    description   ${found.manifest.description}`);
+        console.log(`    enabled       ${(cfg.plugins?.enabled ?? []).includes(name) ? c.green('yes') : c.dim('no')}`);
+        console.log(`    integrity     ${cfg.plugins?.integrity?.[name] ? c.green('pinned') : c.dim('not pinned')}`);
+    }
+    else if (found.reason) {
+        console.log(`    ${c.red(found.reason)}`);
+    }
+    console.log('');
+    return 0;
+}
+async function cmdPluginsEnable(name, yes, jsonMode) {
+    if (!name) {
+        process.stderr.write('error: usage: ashlr plugins enable <name> [--yes]\n');
+        return 2;
+    }
+    const { discoverPlugins } = await importRegistry();
+    const { hashEntry } = await importIntegrity();
+    const found = discoverPlugins().find((p) => p.manifest?.name === name);
+    if (!found?.ok || !found.manifest) {
+        process.stderr.write(`error: no valid plugin named "${name}" under ~/.ashlr/plugins/` +
+            (found?.reason ? ` (${found.reason})` : '') + '\n');
+        return 1;
+    }
+    // ── The consent gate ──────────────────────────────────────────────────────
+    if (!yes) {
+        if (!isTty()) {
+            process.stderr.write('error: enabling a plugin requires confirmation — re-run with --yes in non-TTY contexts.\n');
+            return 1;
+        }
+        console.log('');
+        console.log(c.bold(`  Enable plugin "${name}" v${found.manifest.version}?`));
+        console.log(`    capabilities: ${c.cyan(found.manifest.capabilities.join(', ') || '(none)')}`);
+        console.log('');
+        console.log(c.yellow('  ⚠ An enabled plugin runs IN-PROCESS with the same OS privileges as ashlr.'));
+        console.log(c.yellow('    Only enable plugins whose source you have read or whose author you trust.'));
+        console.log('');
+        const confirmed = await promptConfirm('  Enable?');
+        if (!confirmed) {
+            console.log(c.dim('  Aborted — plugin remains disabled.'));
+            return 0;
+        }
+    }
+    // ── Integrity pin + config write ─────────────────────────────────────────
+    const entryPath = join(found.dir, found.manifest.entry);
+    const hash = hashEntry(entryPath);
+    if (!hash) {
+        process.stderr.write(`error: could not hash entry file ${entryPath} — does it exist?\n`);
+        return 1;
+    }
+    const cfg = loadConfig();
+    const plugins = cfg.plugins ?? { enabled: [], settings: {}, integrity: {} };
+    if (!plugins.enabled.includes(name))
+        plugins.enabled.push(name);
+    plugins.integrity[name] = hash;
+    cfg.plugins = plugins;
+    saveConfig(cfg);
+    if (jsonMode) {
+        process.stdout.write(JSON.stringify({ enabled: true, name, integrity: hash }, null, 2) + '\n');
+    }
+    else {
+        console.log(c.green(`  ✓ enabled ${name}`) + c.dim(` (entry pinned ${hash.slice(0, 18)}…)`));
+        console.log('');
+    }
+    return 0;
+}
+async function cmdPluginsDisable(name, jsonMode) {
+    if (!name) {
+        process.stderr.write('error: usage: ashlr plugins disable <name>\n');
+        return 2;
+    }
+    const cfg = loadConfig();
+    const enabled = cfg.plugins?.enabled ?? [];
+    if (!enabled.includes(name)) {
+        process.stderr.write(`error: plugin "${name}" is not enabled\n`);
+        return 1;
+    }
+    cfg.plugins = {
+        enabled: enabled.filter((n) => n !== name),
+        settings: cfg.plugins?.settings ?? {},
+        integrity: cfg.plugins?.integrity ?? {},
+    };
+    saveConfig(cfg);
+    if (jsonMode) {
+        process.stdout.write(JSON.stringify({ enabled: false, name }, null, 2) + '\n');
+    }
+    else {
+        console.log(c.green(`  ✓ disabled ${name}`));
+    }
+    return 0;
+}
+// ---------------------------------------------------------------------------
+// plugins init — scaffold a working plugin skeleton
+// ---------------------------------------------------------------------------
+const INIT_CAPABILITIES = ['scanner', 'template', 'provider', 'command'];
+/** Entry-file skeleton per capability (plain ESM; works without a build step). */
+function initEntrySource(name, capability) {
+    const header = `// ${name} — an ashlr plugin (capability: ${capability}).\n` +
+        `// Typed authoring: npm i -D @ashlr/hub, then import { definePlugin } from '@ashlr/hub/plugin'.\n` +
+        `// Docs + trust model: docs/PLUGINS.md in the ashlr-hub repo.\n\n`;
+    switch (capability) {
+        case 'scanner':
+            return header + `export default {
+  activate(host) {
+    host.log('activated');
+    return {
+      scanners: [{
+        id: 'example',
+        // Return WorkItem-shaped objects. The hub wraps this: 15s timeout,
+        // 100-item cap, value/effort clamped 1..5, score recomputed,
+        // title/detail secret-scrubbed, ids namespaced.
+        async scan(repo) {
+          return [{
+            id: 'demo', repo, source: 'plugin',
+            title: 'Example finding from ${name}',
+            detail: 'Replace scan() with real discovery logic.',
+            value: 3, effort: 2, score: 0, tags: [], ts: new Date().toISOString(),
+          }];
+        },
+      }],
+    };
+  },
+};\n`;
+        case 'template':
+            return header + `export default {
+  activate() {
+    return {
+      templates: [{
+        id: 'starter', // exposed as '${name}:starter' in \`ashlr new --list\`
+        title: 'Example starter',
+        description: 'Scaffolded by the ${name} plugin.',
+        files: ({ name: projectName }) => [
+          { path: 'README.md', content: '# ' + projectName + '\\n' },
+        ],
+      }],
+    };
+  },
+};\n`;
+        case 'provider':
+            return header + `export default {
+  activate() {
+    return {
+      providers: [{
+        id: '${name}-model',
+        tier: 'local', // 'cloud' providers require --allow-cloud + envKeys presence
+        async probe() { return { up: false }; },
+        async createClient({ model }) {
+          return {
+            id: '${name}-model', supportsTools: false,
+            async chat(messages) {
+              return { text: 'not implemented', toolCalls: [], usage: { tokensIn: 0, tokensOut: 0 } };
+            },
+          };
+        },
+      }],
+    };
+  },
+};\n`;
+        case 'command':
+            return header + `export default {
+  activate() {
+    return {
+      commands: [{
+        name: 'hello', // invoked as: ashlr x hello
+        description: 'Example command from ${name}',
+        async run(args, host) {
+          host.log('hello ' + (args[0] ?? 'world'));
+          return 0;
+        },
+      }],
+    };
+  },
+};\n`;
+    }
+}
+async function cmdPluginsInit(args, jsonMode) {
+    const name = args.find((a) => !a.startsWith('--'));
+    const capIdx = args.indexOf('--capability');
+    const capability = (capIdx !== -1 ? args[capIdx + 1] : 'scanner');
+    if (!name) {
+        process.stderr.write('error: usage: ashlr plugins init <name> [--capability scanner|template|provider|command]\n');
+        return 2;
+    }
+    if (!/^[a-z][a-z0-9-]{0,39}$/.test(name)) {
+        process.stderr.write(`error: plugin name must match ^[a-z][a-z0-9-]{0,39}$ — got "${name}"\n`);
+        return 2;
+    }
+    if (!INIT_CAPABILITIES.includes(capability)) {
+        process.stderr.write(`error: --capability must be one of: ${INIT_CAPABILITIES.join(', ')}\n`);
+        return 2;
+    }
+    const { homedir } = await import('node:os');
+    const { mkdirSync, writeFileSync, existsSync } = await import('node:fs');
+    const dir = join(homedir(), '.ashlr', 'plugins', name);
+    if (existsSync(join(dir, 'manifest.json'))) {
+        process.stderr.write(`error: ${dir} already has a manifest.json — refusing to overwrite\n`);
+        return 1;
+    }
+    mkdirSync(dir, { recursive: true });
+    writeFileSync(join(dir, 'manifest.json'), JSON.stringify({
+        name,
+        version: '0.1.0',
+        apiVersion: '^1.0.0',
+        description: `An ashlr ${capability} plugin.`,
+        entry: './index.mjs',
+        capabilities: [capability],
+    }, null, 2) + '\n');
+    writeFileSync(join(dir, 'index.mjs'), initEntrySource(name, capability));
+    if (jsonMode) {
+        process.stdout.write(JSON.stringify({ created: true, name, capability, dir }, null, 2) + '\n');
+    }
+    else {
+        console.log('');
+        console.log(c.green(`  ✓ scaffolded ${name}`) + c.dim(` (${capability}) at ${dir}`));
+        console.log('');
+        console.log('  Next steps:');
+        console.log(`    1. Edit ${c.cyan(join(dir, 'index.mjs'))}`);
+        console.log(`    2. ${c.cyan(`ashlr plugins enable ${name}`)}   ${c.dim('(confirm + integrity pin)')}`);
+        if (capability === 'scanner')
+            console.log(`    3. ${c.cyan('ashlr backlog refresh')}        ${c.dim('items appear tagged [plugin]')}`);
+        if (capability === 'command')
+            console.log(`    3. ${c.cyan('ashlr x hello')}`);
+        if (capability === 'template')
+            console.log(`    3. ${c.cyan('ashlr new --list')}             ${c.dim(`shows ${name}:starter`)}`);
+        console.log('');
+    }
+    return 0;
+}
+export async function cmdPlugins(args) {
+    const sub = args[0];
+    const jsonMode = args.includes('--json');
+    const yes = args.includes('--yes');
+    if (!sub || sub === '--help' || sub === '-h' || sub === 'help') {
+        printPluginsHelp();
+        return 0;
+    }
+    if (sub === 'list')
+        return cmdPluginsList(jsonMode);
+    if (sub === 'info')
+        return cmdPluginsInfo(args[1], jsonMode);
+    if (sub === 'init')
+        return cmdPluginsInit(args.slice(1), jsonMode);
+    if (sub === 'enable')
+        return cmdPluginsEnable(args[1], yes, jsonMode);
+    if (sub === 'disable')
+        return cmdPluginsDisable(args[1], jsonMode);
+    process.stderr.write(`error: unknown plugins subcommand: ${sub}\n`);
+    printPluginsHelp();
+    return 2;
+}
+/**
+ * `ashlr x <name> [args...]` — run an enabled plugin's command (wrapped:
+ * audited invocation + exit code; builtin shadowing rejected at load).
+ */
+export async function cmdX(args) {
+    const name = args[0];
+    if (!name || name === '--help' || name === '-h' || name === 'help') {
+        console.log('');
+        console.log(c.bold('  ashlr x') + c.dim(" — run an enabled plugin's command"));
+        console.log(`    ${c.cyan('ashlr x <name> [args...]')}`);
+        console.log('  ' + c.dim('Available commands come from enabled plugins — see `ashlr plugins list`.'));
+        console.log('');
+        return name ? 0 : 2;
+    }
+    const { loadEnabledPlugins } = await importRegistry();
+    const { buildHostApi } = await import('../core/plugins/host-api.js');
+    const { wrapCommand } = await import('../core/plugins/wrappers.js');
+    const cfg = loadConfig();
+    for (const p of await loadEnabledPlugins(cfg)) {
+        const command = (p.contributions.commands ?? []).find((cmd) => cmd.name === name);
+        if (command) {
+            // The wrapper audits the invocation + exit code and never throws.
+            const host = buildHostApi(p.manifest, cfg);
+            return wrapCommand(p.name, command).run(args.slice(1), host);
+        }
+    }
+    process.stderr.write(`error: no enabled plugin provides the command "${name}". ` +
+        'Run `ashlr plugins list` to see enabled plugins.\n');
+    return 1;
+}
+//# sourceMappingURL=plugins.js.map

package/dist/cli/plugins.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugins.js","sourceRoot":"","sources":["../../src/cli/plugins.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,SAAS,CAAC;AAEjD,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;AAE9B,KAAK,UAAU,cAAc;IAC3B,OAAO,MAAM,CAAC,6BAA6B,CAAC,CAAC;AAC/C,CAAC;AAED,KAAK,UAAU,eAAe;IAC5B,OAAO,MAAM,CAAC,8BAA8B,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,gBAAgB;IACvB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC,CAAC;IAC3F,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,4CAA4C,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,oCAAoC,CAAC,EAAE,CAAC,CAAC;IAC1H,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,yDAAyD,CAAC,EAAE,CAAC,CAAC;IACvI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,gCAAgC,CAAC,EAAE,CAAC,CAAC;IAC9G,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,qCAAqC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gDAAgD,CAAC,EAAE,CAAC,CAAC;IAC/H,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,6BAA6B,CAAC,EAAE,CAAC,CAAC;IAC3G,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,iCAAiC,CAAC,EAAE,CAAC,CAAC;IAC/G,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,qFAAqF,CAAC,CAAC,CAAC;IACjH,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,2DAA2D;AAC3D,SAAS,aAAa,CAAC,QAAgB;IACrC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7E,EAAE,CAAC,QAAQ,CAAC,GAAG,QAAQ,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE;YAC3C,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,QAAiB;IAC7C,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,cAAc,EAAE,CAAC;IACnD,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAEhC,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CACZ,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAChB,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,IAAI,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC;YACzC,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK;YAC1D,YAAY,EAAE,CAAC,CAAC,QAAQ,EAAE,YAAY,IAAI,EAAE;YAC5C,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,OAAO;SAC7B,CAAC,CAAC,EACH,IAAI,EACJ,CAAC,CACF,GAAG,IAAI,CACT,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,MAAM,gDAAgD,CAAC,CAAC,CAAC;IACpH,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,6EAA6E,CAAC,CAAC,CAAC;QAClG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,IAAI,IAAI,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE;YACjB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,MAAM,IAAI,cAAc,GAAG,CAAC;YAClD,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;gBACjB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC;gBACpB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACxB,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC,QAAQ,EAAE,OAAO,IAAI,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IACvH,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,CAAC;AACX,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAAwB,EAAE,QAAiB;IACvE,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAClE,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,cAAc,EAAE,CAAC;IACnD,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,KAAK,IAAI,IAAI,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC;IACnG,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oDAAoD,IAAI,IAAI,CAAC,CAAC;QACnF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAC5D,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;IACnF,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACnE,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACtE,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC/F,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QACjF,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW;YAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;QAC/F,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/G,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IAC/G,CAAC;SAAM,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,CAAC;AACX,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAwB,EAAE,GAAY,EAAE,QAAiB;IACvF,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;QAC5E,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,cAAc,EAAE,CAAC;IACnD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;IAE9C,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC;IACvE,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QAClC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,IAAI,2BAA2B;YACnF,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QACtD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,6EAA6E;IAC7E,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2FAA2F,CAAC,CAAC;YAClH,OAAO,CAAC,CAAC;QACX,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,IAAI,MAAM,KAAK,CAAC,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;QAC7E,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC/F,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,6EAA6E,CAAC,CAAC,CAAC;QACrG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,+EAA+E,CAAC,CAAC,CAAC;QACvG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,WAAW,CAAC,CAAC;QACnD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC,CAAC;YAC3D,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,SAAS,qBAAqB,CAAC,CAAC;QACzF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC5E,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChE,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC/B,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;IACtB,UAAU,CAAC,GAAG,CAAC,CAAC;IAEhB,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACjG,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7F,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,IAAwB,EAAE,QAAiB;IAC1E,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QACrE,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,IAAI,oBAAoB,CAAC,CAAC;QACjE,OAAO,CAAC,CAAC;IACX,CAAC;IACD,GAAG,CAAC,OAAO,GAAG;QACZ,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;QAC1C,QAAQ,EAAE,GAAG,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE;QACrC,SAAS,EAAE,GAAG,CAAC,OAAO,EAAE,SAAS,IAAI,EAAE;KACxC,CAAC;IACF,UAAU,CAAC,GAAG,CAAC,CAAC;IAChB,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACjF,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,8EAA8E;AAC9E,oDAAoD;AACpD,8EAA8E;AAE9E,MAAM,iBAAiB,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,CAAU,CAAC;AAGlF,kFAAkF;AAClF,SAAS,eAAe,CAAC,IAAY,EAAE,UAA0B;IAC/D,MAAM,MAAM,GACV,MAAM,IAAI,mCAAmC,UAAU,MAAM;QAC7D,mGAAmG;QACnG,mEAAmE,CAAC;IACtE,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,SAAS;YACZ,OAAO,MAAM,GAAG;;;;;;;;;;;;2CAYqB,IAAI;;;;;;;;KAQ1C,CAAC;QACF,KAAK,UAAU;YACb,OAAO,MAAM,GAAG;;;;wCAIkB,IAAI;;0CAEF,IAAI;;;;;;;KAOzC,CAAC;QACF,KAAK,UAAU;YACb,OAAO,MAAM,GAAG;;;;eAIP,IAAI;;;;;mBAKA,IAAI;;;;;;;;;KASlB,CAAC;QACF,KAAK,SAAS;YACZ,OAAO,MAAM,GAAG;;;;;6CAKuB,IAAI;;;;;;;;KAQ5C,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAAc,EAAE,QAAiB;IAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAmB,CAAC;IAEpF,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4FAA4F,CAAC,CAAC;QACnH,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+DAA+D,IAAI,KAAK,CAAC,CAAC;QAC/F,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9F,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IAC5C,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IACzE,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IACvD,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC,EAAE,CAAC;QAC3C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG,wDAAwD,CAAC,CAAC;QAC5F,OAAO,CAAC,CAAC;IACX,CAAC;IACD,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,aAAa,CACX,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,EAC1B,IAAI,CAAC,SAAS,CACZ;QACE,IAAI;QACJ,OAAO,EAAE,OAAO;QAChB,UAAU,EAAE,QAAQ;QACpB,WAAW,EAAE,YAAY,UAAU,UAAU;QAC7C,KAAK,EAAE,aAAa;QACpB,YAAY,EAAE,CAAC,UAAU,CAAC;KAC3B,EACD,IAAI,EACJ,CAAC,CACF,GAAG,IAAI,CACT,CAAC;IACF,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;IAEzE,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACjG,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,UAAU,QAAQ,GAAG,EAAE,CAAC,CAAC,CAAC;QACrF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,wBAAwB,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,2BAA2B,CAAC,EAAE,CAAC,CAAC;QACxG,IAAI,UAAU,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,8BAA8B,CAAC,EAAE,CAAC,CAAC;QACvI,IAAI,UAAU,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QAC/E,IAAI,UAAU,KAAK,UAAU;YAAE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,SAAS,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QACjI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAc;IAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAEnC,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QAC/D,gBAAgB,EAAE,CAAC;QACnB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,GAAG,KAAK,MAAM;QAAE,OAAO,cAAc,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,GAAG,KAAK,MAAM;QAAE,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC7D,IAAI,GAAG,KAAK,MAAM;QAAE,OAAO,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IACnE,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IACtE,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAEnE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,GAAG,IAAI,CAAC,CAAC;IACpE,gBAAgB,EAAE,CAAC;IACnB,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,IAAc;IACvC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACrB,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACnE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC,CAAC;QAC/E,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,0EAA0E,CAAC,CAAC,CAAC;QACtG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtB,CAAC;IAED,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,cAAc,EAAE,CAAC;IACtD,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAC;IACrE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAC;IACpE,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IAEzB,KAAK,MAAM,CAAC,IAAI,MAAM,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAClF,IAAI,OAAO,EAAE,CAAC;YACZ,kEAAkE;YAClE,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YAC3C,OAAO,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,kDAAkD,IAAI,KAAK;QAC3D,oDAAoD,CACrD,CAAC;IACF,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/cli/preflight.d.ts

@@ -0,0 +1,29 @@
+/**
+ * CLI handler for `ashlr preflight` — a READ-ONLY first-activation readiness
+ * check. See docs/contracts/CONTRACT-H7.md (BUILD ITEM 1).
+ *
+ * Prints `ready=true|false` plus a blockers[] / warnings[] list, computed from
+ * the SHARED read-only readiness model (src/core/readiness.ts → buildReadiness).
+ * Mutates NOTHING and makes NO new outward call (probeEndpoint is the same local
+ * model GET `ashlr doctor` already performs). Exit code 0 when ready, 1 when
+ * blocked.
+ *
+ * Flags:
+ *   --json   Emit the ReadinessReport as JSON on stdout (no color).
+ *   --help   Show usage.
+ *
+ * Wiring: BUILD/INTEGRATION adds the `case 'preflight'` dispatcher arm + a
+ * `loadPreflightCmd` lazy loader in src/cli/index.ts (mirroring loadVerifySafetyCmd)
+ * + a cmdHelp entry. This file does NOT touch the dispatcher.
+ *
+ * Exit codes: 0 ready, 1 blocked (a hard blocker present), 2 bad usage.
+ */
+/**
+ * `ashlr preflight [--json]` — READ-ONLY readiness check.
+ *
+ * Loads the config, builds the shared readiness report (which mutates nothing
+ * besides a self-cleaning ~/.ashlr writeable sentinel), then prints either the
+ * JSON report (--json) or a grouped human-readable summary. Returns 0 when
+ * ready, 1 when a hard blocker is present, 2 on bad usage.
+ */
+export declare function cmdPreflight(args: string[]): Promise<number>;

package/dist/cli/preflight.js

@@ -0,0 +1,131 @@
+/**
+ * CLI handler for `ashlr preflight` — a READ-ONLY first-activation readiness
+ * check. See docs/contracts/CONTRACT-H7.md (BUILD ITEM 1).
+ *
+ * Prints `ready=true|false` plus a blockers[] / warnings[] list, computed from
+ * the SHARED read-only readiness model (src/core/readiness.ts → buildReadiness).
+ * Mutates NOTHING and makes NO new outward call (probeEndpoint is the same local
+ * model GET `ashlr doctor` already performs). Exit code 0 when ready, 1 when
+ * blocked.
+ *
+ * Flags:
+ *   --json   Emit the ReadinessReport as JSON on stdout (no color).
+ *   --help   Show usage.
+ *
+ * Wiring: BUILD/INTEGRATION adds the `case 'preflight'` dispatcher arm + a
+ * `loadPreflightCmd` lazy loader in src/cli/index.ts (mirroring loadVerifySafetyCmd)
+ * + a cmdHelp entry. This file does NOT touch the dispatcher.
+ *
+ * Exit codes: 0 ready, 1 blocked (a hard blocker present), 2 bad usage.
+ */
+import { loadConfig } from '../core/config.js';
+import { buildReadiness } from '../core/readiness.js';
+import { pad, makeColors, isTty } from './ui.js';
+function parsePreflightArgs(args) {
+    let json = false;
+    let help = false;
+    let error;
+    for (const a of args) {
+        if (a === undefined)
+            continue;
+        if (a === '--help' || a === '-h') {
+            help = true;
+        }
+        else if (a === '--json') {
+            json = true;
+        }
+        else {
+            error = `Unknown argument: ${a}`;
+            break;
+        }
+    }
+    return { json, help, error };
+}
+// ─── Help ─────────────────────────────────────────────────────────────────────
+function printHelp() {
+    const tty = isTty();
+    const { bold, cyan, dim, gray } = makeColors(tty);
+    const out = (s = '') => process.stdout.write(s + '\n');
+    out('');
+    out(bold('  ashlr preflight') + dim(' — read-only first-activation readiness check'));
+    out('');
+    out('  ' + bold('Usage:'));
+    out(`    ${cyan('ashlr preflight')} [--json]`);
+    out('');
+    out('  ' + bold('Options:'));
+    const opts = [
+        ['--json', 'Emit the ReadinessReport as JSON (no color) instead of human-readable output.'],
+        ['--help', 'Show this help.'],
+    ];
+    const w = Math.max(...opts.map(([f]) => f.length));
+    for (const [flag, desc] of opts)
+        out(`    ${cyan(pad(flag, w))}  ${desc}`);
+    out('');
+    out('  ' + gray('READ-ONLY: reports model reachability, enrollment count, kill-switch state,'));
+    out('  ' + gray('daemon health, ~/.ashlr writeability, sandbox health, git + phantom presence.'));
+    out('  ' + gray('Mutates nothing. Exit 0 when ready, 1 when a hard blocker is present.'));
+    out('');
+}
+// ─── Human-readable render ─────────────────────────────────────────────────────
+/**
+ * Human-readable render of a ReadinessReport: a `ready=true|false` headline,
+ * then grouped blockers → warnings → info sections (colorized when on a TTY).
+ */
+function printReadiness(report) {
+    const tty = isTty();
+    const { bold, dim, red, green, yellow, cyan, gray } = makeColors(tty);
+    const out = (s = '') => process.stdout.write(s + '\n');
+    out('');
+    const headline = report.ready
+        ? green(bold('  ready=true')) + dim('  — first activation is safe to proceed')
+        : red(bold('  ready=false')) + dim('  — resolve the blocker(s) below first');
+    out(headline);
+    out('');
+    const section = (title, findings, marker, color) => {
+        if (findings.length === 0)
+            return;
+        out('  ' + bold(title));
+        for (const f of findings) {
+            out(`    ${color(marker)} ${f.detail}`);
+            if (f.fix)
+                out(`        ${gray('→ ' + f.fix)}`);
+        }
+        out('');
+    };
+    section('Blockers', report.blockers, '✗', red);
+    section('Warnings', report.warnings, '!', yellow);
+    section('OK', report.info, '✓', green);
+    out('  ' + gray('Review proposals with ') + cyan('ashlr inbox') + gray('; safely activate with ') + cyan('ashlr onboard') + gray('.'));
+    out('');
+}
+// ─── Main export ─────────────────────────────────────────────────────────────
+/**
+ * `ashlr preflight [--json]` — READ-ONLY readiness check.
+ *
+ * Loads the config, builds the shared readiness report (which mutates nothing
+ * besides a self-cleaning ~/.ashlr writeable sentinel), then prints either the
+ * JSON report (--json) or a grouped human-readable summary. Returns 0 when
+ * ready, 1 when a hard blocker is present, 2 on bad usage.
+ */
+export async function cmdPreflight(args) {
+    const parsed = parsePreflightArgs(args);
+    if (parsed.help) {
+        printHelp();
+        return 0;
+    }
+    if (parsed.error) {
+        process.stderr.write('error: ' + parsed.error + '\n');
+        process.stderr.write('Run `ashlr preflight --help` for usage.\n');
+        return 2;
+    }
+    const cfg = loadConfig();
+    const report = await buildReadiness(cfg);
+    if (parsed.json) {
+        process.stdout.write(JSON.stringify(report) + '\n');
+    }
+    else {
+        printReadiness(report);
+    }
+    return report.ready ? 0 : 1;
+}
+//# sourceMappingURL=preflight.js.map

package/dist/cli/preflight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preflight.js","sourceRoot":"","sources":["../../src/cli/preflight.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAUjD,SAAS,kBAAkB,CAAC,IAAc;IACxC,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,IAAI,KAAyB,CAAC;IAE9B,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,KAAK,SAAS;YAAE,SAAS;QAC9B,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACjC,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;aAAM,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1B,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;aAAM,CAAC;YACN,KAAK,GAAG,qBAAqB,CAAC,EAAE,CAAC;YACjC,MAAM;QACR,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC/B,CAAC;AAED,iFAAiF;AAEjF,SAAS,SAAS;IAChB,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;IACpB,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAEvD,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,GAAG,CAAC,+CAA+C,CAAC,CAAC,CAAC;IACtF,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3B,GAAG,CAAC,OAAO,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAC/C,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAuB;QAC/B,CAAC,QAAQ,EAAE,+EAA+E,CAAC;QAC3F,CAAC,QAAQ,EAAE,iBAAiB,CAAC;KAC9B,CAAC;IACF,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACnD,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI;QAAE,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAC3E,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,6EAA6E,CAAC,CAAC,CAAC;IAChG,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,+EAA+E,CAAC,CAAC,CAAC;IAClG,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,uEAAuE,CAAC,CAAC,CAAC;IAC1F,GAAG,CAAC,EAAE,CAAC,CAAC;AACV,CAAC;AAED,kFAAkF;AAElF;;;GAGG;AACH,SAAS,cAAc,CAAC,MAAuB;IAC7C,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;IACpB,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IACtE,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAEvD,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK;QAC3B,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,GAAG,GAAG,CAAC,yCAAyC,CAAC;QAC9E,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,GAAG,GAAG,CAAC,wCAAwC,CAAC,CAAC;IAC/E,GAAG,CAAC,QAAQ,CAAC,CAAC;IACd,GAAG,CAAC,EAAE,CAAC,CAAC;IAER,MAAM,OAAO,GAAG,CACd,KAAa,EACb,QAA4B,EAC5B,MAAc,EACd,KAA4B,EACtB,EAAE;QACR,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAClC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACxB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,GAAG,CAAC,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YACxC,IAAI,CAAC,CAAC,GAAG;gBAAE,GAAG,CAAC,WAAW,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,GAAG,CAAC,EAAE,CAAC,CAAC;IACV,CAAC,CAAC;IAEF,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC/C,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAClD,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IAEvC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,wBAAwB,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,yBAAyB,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACvI,GAAG,CAAC,EAAE,CAAC,CAAC;AACV,CAAC;AAED,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAc;IAC/C,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAExC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,SAAS,EAAE,CAAC;QACZ,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,GAAG,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;QACtD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAClE,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;IAEzC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;IACtD,CAAC;SAAM,CAAC;QACN,cAAc,CAAC,MAAM,CAAC,CAAC;IACzB,CAAC;IAED,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9B,CAAC"}

package/dist/cli/pulse.d.ts

@@ -0,0 +1,26 @@
+/**
+ * `ashlr pulse` — rich local observability dashboard.
+ *
+ * Flags:
+ *   --json                  machine-readable ActivityRollup
+ *   --window 1d|7d|30d      window (default 7d)
+ *   --project <name>        restrict to a single project
+ *
+ * Renders: window summary (totals + cost), by-project table, top models,
+ * budget status (warn/over highlighted). Honors privacy guardrails — prints
+ * only aggregate metadata, never content. Returns process exit code.
+ *
+ * Uses lazy imports so the command degrades gracefully before M5 core modules
+ * are built, matching the M3/M4 lazy-import pattern.
+ */
+/**
+ * `ashlr pulse` — rich local observability dashboard.
+ *
+ * Flags:
+ *   --json                  machine-readable ActivityRollup
+ *   --window 1d|7d|30d      window (default 7d)
+ *   --project <name>        restrict to a single project
+ *
+ * Returns process exit code: 0 = ok/warn, 1 = budget over.
+ */
+export declare function cmdPulse(args: string[]): Promise<number>;