@atbash/cli 0.5.15 → 0.6.1-dev.2

package/README.md

@@ -139,6 +139,168 @@ atbash judge 'grant admin access to CI service account'
 The agent cannot retry or self-unjail. An operator must review and release at [https://atbash.ai/](https://atbash.ai/).
 
 
+## Local scan
+
+`atbash scan` reports what is installed on this machine. It needs no account, no pairing code and no dashboard. The report is printed in your terminal and is never uploaded.
+
+```bash
+# What is installed here
+atbash scan
+
+# Ask each MCP server what tools it actually has
+atbash scan --introspect
+
+# Add a draft boundary: red lines and actions that need approval
+atbash scan --introspect --policy
+
+# Machine-readable output
+atbash scan --introspect --json
+```
+
+Output:
+
+```
+  Atbash local scan
+  ────────────────────────────
+  Machine : my-laptop
+  Found   : 1 runtime
+
+  OpenClaw — 5 skills / plugins
+    • delete-customer-records
+    • export-crm-contacts
+    • issue-refund
+    • list-tickets
+    • send-email
+
+  Risk
+  ────────────────────────────
+  Level   : High (92/100)
+  Method  : deterministic
+  5 authorized action paths (3 high-severity).
+
+    high   delete-customer-records — destructive action
+           irreversible data/infrastructure loss
+    high   export-crm-contacts — data access / egress
+           data leakage / privacy breach
+    high   issue-refund — financial
+           direct financial loss
+    medium send-email — external communication
+           external message sent on the owner's behalf (monitored)
+    low    list-tickets — read / research
+           low-consequence information access
+```
+
+With `--policy` it also prints a draft boundary you can edit and enforce:
+
+```
+  Recommended boundary
+  ────────────────────────────
+  Red lines (auto-deny)
+    • Never perform destructive action autonomously (e.g. delete-customer-records).
+    • Never perform data access / egress autonomously (e.g. export-crm-contacts).
+    • Never modify its own mandate, red lines, or authority.
+
+  Needs approval
+    • Require human approval before financial (e.g. issue-refund).
+```
+
+### What leaves your machine
+
+Nothing, unless you ask for it.
+
+| Command | Requests sent |
+| --- | --- |
+| `atbash scan` | none |
+| `--introspect` | one per MCP server configured with an `http` URL, sent to that URL |
+| `--api-key` | one, to your LLM provider |
+| `--threats` | one, to your LLM provider |
+
+Nothing is ever sent to Atbash. `--json` reports the actual count as `networkRequests`, so you can check it.
+
+Credentials found in your config files are removed before anything is printed or sent. That covers `env` values, `headers`, tokens, and secrets embedded in command paths.
+
+### Using your own LLM key
+
+The built-in rules classify tools by name and description. Some tools match no rule. Supply your own [OpenRouter](https://openrouter.ai) key and the CLI will grade those as well. With `--threats` it also looks for risks that only appear when tools are combined, such as reading customer data and sending mail.
+
+The key is read from the first of these that is set:
+
+1. `--api-key <key>`
+2. `ATBASH_SCAN_API_KEY`
+3. `OPENROUTER_API_KEY`
+
+On a shared machine, use an environment variable rather than `--api-key`. Command arguments are visible to other users through `ps`.
+
+First get a key from [openrouter.ai/settings/keys](https://openrouter.ai/settings/keys). It looks like `sk-or-v1-` followed by 64 hex characters.
+
+**macOS keychain.** The keychain stores every secret under the name "password", so the prompt says `password data for new item:`. That is where the API key goes. Do not type a login password.
+
+```bash
+security add-generic-password -a "$USER" -s atbash-openrouter -U -w
+```
+
+It prompts twice:
+
+```
+password data for new item:        <- paste the sk-or-v1-... key
+retype password for new item:      <- paste it again
+```
+
+Nothing is echoed as you paste, and the two entries must match or it fails with `passwords don't match`. Check what actually got stored:
+
+```bash
+v=$(security find-generic-password -a "$USER" -s atbash-openrouter -w); echo "${#v} chars, starts ${v:0:9}"
+# expect: 73 chars, starts sk-or-v1-
+```
+
+If that prints anything else, the wrong value was stored. Run the `add` command again; `-U` overwrites it.
+
+Then use it:
+
+```bash
+export ATBASH_SCAN_API_KEY="$(security find-generic-password -a "$USER" -s atbash-openrouter -w)"
+atbash scan --introspect --threats --policy
+```
+
+**Linux, or anywhere without a keychain.** Use a file only you can read:
+
+```bash
+mkdir -p ~/.config/atbash && chmod 700 ~/.config/atbash
+(umask 077; touch ~/.config/atbash/openrouter.key)
+$EDITOR ~/.config/atbash/openrouter.key      # paste the key, save
+
+export ATBASH_SCAN_API_KEY="$(cat ~/.config/atbash/openrouter.key)"
+```
+
+**CI.** Store the key as a repository secret and map it to the environment variable. Never put it in a file in the repo.
+
+```yaml
+- run: atbash scan --introspect --fail-on high
+  env:
+    ATBASH_SCAN_API_KEY: ${{ secrets.OPENROUTER_API_KEY }}
+```
+
+Pick a different model with `--model <id>`. The default is `z-ai/glm-5.3-flash`.
+
+If the key is missing, wrong, or the provider is down, the scan still finishes using the built-in grading and tells you what failed. You never lose the report.
+
+### Use in CI
+
+`--fail-on` turns the risk level into an exit code.
+
+```bash
+atbash scan --introspect --fail-on high
+```
+
+| Exit code | Meaning |
+| --- | --- |
+| 0 | risk level is below the threshold |
+| 1 | risk level reached the threshold |
+| 2 | the `--fail-on` value was not `low`, `elevated` or `high` |
+
+Run the gate without an API key. Built-in grading returns the same answer every time. Model grading varies between runs, which would make the gate flaky.
+
+
 ## End-to-end example: guarding a production deploy
 
 A CI agent is about to apply a database migration to production. The operator policy holds all production applies for review before execution.
@@ -331,6 +493,29 @@ If any check fails — an integrity value that does not match the deployment's m
 
 ## Command reference
 
+### `atbash scan`
+
+Scan this machine and print the report here. No account and no pairing code. See [Local scan](#local-scan) for the full walkthrough.
+
+```bash
+npx --yes @atbash/cli scan --introspect --policy
+```
+
+| Flag | Description |
+|------|-------------|
+| `--introspect` | Ask each configured MCP server what tools it advertises. Starts stdio servers locally and contacts `http` servers at their own URL. No tool is ever called |
+| `--policy` | Also print a draft boundary: red lines and actions that need approval |
+| `--threats` | Also list risks that come from tools used in combination. Needs an API key |
+| `--api-key <key>` | Your own LLM provider key. Also read from `ATBASH_SCAN_API_KEY` or `OPENROUTER_API_KEY` |
+| `--model <id>` | Model used for grading. Default `z-ai/glm-5.3-flash` |
+| `--fail-on <level>` | Exit 1 when the risk level reaches `low`, `elevated` or `high` |
+| `--json` | Machine-readable output |
+| `--home <dir>` | Home directory to scan (for testing) |
+
+Without a key the report is produced entirely on this machine. `--threats` and
+`--api-key` send tool names and descriptions to the provider you chose, never to
+Atbash.
+
 ### `atbash connect <code>`
 
 Link a machine to a hosted Atbash onboarding session. A browser can't read your disk and the Atbash server only sees its own, so this runs on the machine you want to govern, enumerates the agents / MCP tools configured there (read-only), and relays their *surface* to your onboarding session via the one-time pairing code shown in the browser.
@@ -357,6 +542,111 @@ configured MCP server processes, so it is not purely read-only even though Atbas
 never invokes their tools. See [Verifying this CLI](#verifying-this-cli-before-you-run-it-humans--ai-agents)
 and the [release checklist](RELEASE_CHECKLIST.md).
 
+### `atbash setup`
+
+Wire this machine's runtime to an agent you already onboarded. `connect` is the read-only half of onboarding; this is the half that **writes**. It places the agent key where every integration looks for it, installs the OpenClaw plugin, and *merges* the plugin block into your existing `~/.openclaw/openclaw.json` — the step that is easy to get wrong by hand, and whose failure mode is an agent that looks governed while enforcing nothing.
+
+```bash
+# Preview everything first — prints the exact file diffs, writes nothing:
+npx --yes @atbash/cli setup --dry-run
+
+# Point it at the key file onboarding downloaded for you:
+npx --yes @atbash/cli setup --keys-dir ~/Downloads
+
+# Or paste the key at a hidden prompt (nothing lands in your shell history):
+npx --yes @atbash/cli setup
+```
+
+| Flag | Description |
+|------|-------------|
+| `-k, --key <privkey>` | Agent private key inline. Convenient, but it lands in your shell history — prefer the prompt or `--key-file` |
+| `--key-file <path>` | Read the key from a file (`agent-keys-*.txt` from onboarding, or an existing `guard-client-key`) |
+| `--keys-dir <dir>` | Directory holding the key file, e.g. `~/Downloads` |
+| `--host <url>` | Deployment to check the agent's registration against |
+| `--runtime <ids...>` | Only configure these runtimes (currently: `openclaw`) |
+| `--dry-run` | Show which files would change, and the diffs, then exit WITHOUT writing |
+| `-y, --yes` | Do not ask for confirmation before writing (does **not** consent to replacing the agent — see `--replace-key`) |
+| `--replace-key` | Consent to changing which agent this machine signs as, when the key supplied names a different agent than the one already here. Needed only for non-interactive runs |
+| `--no-install` | Write the key file and configs only; install no packages |
+| `--skip-verify` | Make no network calls at all |
+| `--allow-unrecognized-host` | Permit a `--host` outside the built-in Atbash allowlist |
+| `--home <dir>` | Home directory to configure (for testing) |
+
+**Onboarding a different agent on a machine that already has one.**
+
+Supply the new agent's key and setup will offer to switch. This is the one change
+it makes that is a *substitution* rather than an addition: afterwards every
+integration reading `~/.config/atbash/guard-client-key` signs as the new agent, so
+tool calls are attributed to it. So it is asked on its own:
+
+```
+This machine is about to change which agent it signs as.
+  now:  0237722e87b6636d67ee495f57e27eae0e2624a382d0603c3b3a396643f230bf94
+  new:  02b95c249d84f417e3e395a127425428b540671cc15881eb828c17b722a53fc599
+Every integration on this machine reading ~/.config/atbash/guard-client-key
+will switch to the new agent. The current key is archived first, to
+~/.config/atbash/keys/0237722e….key, so the old agent stays recoverable.
+
+Replace the agent this machine signs as? [y/N]
+```
+
+Answer **no** and nothing is changed at all — the run stops rather than configuring
+a runtime for an agent whose key was never installed, which would leave the machine
+signing as one agent while the dashboard shows another.
+
+`-y/--yes` deliberately does **not** answer this question: agreeing to write files
+is not the same as agreeing to become a different agent. A script that means it
+passes `--replace-key`. A fresh machine, or a re-run with the same agent, never sees
+the prompt.
+
+If no key is supplied, setup looks in order at `--key`, `--key-file`, `--keys-dir`,
+`ATBASH_AGENT_KEY`, the existing `~/.config/atbash/guard-client-key`, your
+`atbash config`, and finally a hidden prompt that accepts **either** a key or a path.
+Wherever it comes from, the key is written once to
+`~/.config/atbash/guard-client-key` at `0600`, and every config setup writes
+*references that path* rather than embedding the secret again.
+
+**What it will not do.**
+
+- It never transmits the private key. The only network call is a registration
+  check, and that sends the **public** key.
+- It never writes the private key into an MCP client config. The entry it writes
+  points at `atbash mcp`, which reads the key from `guard-client-key` and hands it
+  to the server through the child process environment — so the config file carries
+  no credential, and an entry you previously hand-wired with one has the key
+  removed.
+- It never edits your application source. Code-level integrations (LangChain,
+  LangGraph, AutoGen, Eliza, the SDK boundary) stay yours to write.
+- It never rewrites a config that uses comments or trailing commas — reserializing
+  JSONC as JSON would delete your comments, so those become a printed snippet.
+- It refuses to wire a runtime to an agent that is not registered. A machine that
+  looks governed with a plugin that can never get a verdict is the worst available
+  outcome.
+
+Every file it changes is copied to a `.atbash-bak` alongside it first, and repeat
+runs are idempotent.
+
+### `atbash mcp`
+
+Runs the Atbash MCP server, reading the agent key from `~/.config/atbash/guard-client-key` instead of from a config file. You do not normally run this by hand — it is what `atbash setup` puts in your MCP client's server list:
+
+```json
+{ "mcpServers": { "atbash": { "command": "npx", "args": ["--yes", "@atbash/cli", "mcp"] } } }
+```
+
+| Flag | Description |
+|------|-------------|
+| `--key-file <path>` | Agent key file to read (default: `~/.config/atbash/guard-client-key`) |
+| `--endpoint <url>` | Atbash endpoint the server should use |
+
+**Why this exists.** `@atbash/mcp` reads its identity from `ATBASH_AGENT_PRIVKEY` and has no key-file fallback, so the wiring in its own docs puts a raw private key inside `claude_desktop_config.json` — a file people sync between machines and paste into help requests. This launcher keeps the key in the 0600 file and passes it to the server through the child process environment, so nothing secret is written to a config file.
+
+An `ATBASH_AGENT_PRIVKEY` already present in the environment still wins, so if you deliberately inject the key at launch time nothing changes for you.
+
+**Known issue it works around.** Every published `@atbash/mcp` (0.1.0–0.1.3) fails to start: they import `getOrgTierInfo` as a named export from `@atbash/sdk`, and `@atbash/sdk@0.3.24` removed it, so their `^0.3.19` range resolves to a version that cannot satisfy the import. This launcher installs the compatible pair together (`@atbash/mcp@0.1.3` with `@atbash/sdk@0.3.23`). That pinned SDK is itself deprecated — the real fix is republishing `@atbash/mcp` against `@atbash/sdk@^0.7`.
+
+First launch takes ~10–15s while npx caches the packages, then about a second. A client with a short startup timeout may fail once and succeed on retry.
+
 ### `atbash judge <action>`
 
 Submit a pending action for judgment. The action string is the exact operation the agent is about to execute — a transfer, a command, a mutation.
@@ -476,6 +766,97 @@ Tool Call Details
   Latency:      2340ms
 ```
 
+### `atbash github-scan`
+
+Read-only GitHub inventory and change-risk triage. The scanner calls GitHub's REST
+API directly; it does not invoke the `gh` CLI and it never makes a mutating API
+request.
+
+```bash
+# Use a classic/fine-grained user token or GitHub App installation token with
+# read access to every repository and organization that should be inventoried.
+# Set GITHUB_TOKEN or GH_TOKEN in the process environment; tokens are never
+# accepted as command-line arguments.
+
+atbash github-scan --owner Atbash-Ai --expect-repos 13 --since 2026-08-01 --json
+atbash github-scan --repo Atbash-Ai/atbash-cli --branch main
+```
+
+`--owner` and `--repo` are repeatable. `--branch` limits branch inventory,
+commits, and merged-PR base branch. `--since` accepts an ISO-8601 date or
+timestamp and defaults to 30 days. Bots are excluded unless `--include-bots` is
+set. Use `--owner` for scheduled organization audits: without it, `/user/repos`
+intentionally inventories every owner visible to the token, which may include
+private personal or unrelated organization repositories. `--expect-repos`
+makes a known inventory size an exact fail-closed assertion.
+
+The command verifies the authenticated user or GitHub App installation, records
+OAuth scopes when GitHub supplies the `X-OAuth-Scopes` header, verifies
+repository metadata permissions and organization visibility, and validates REST
+pagination. A full page without a `Link` header is not accepted as terminal:
+the scanner probes explicit sequential page numbers until a short/empty page or
+a terminal `Link` relation is verified. Duplicate pages/items, changed filters,
+cycles, non-sequential links, and the 1,000-page hard ceiling fail the scan.
+This establishes completeness for the authenticated API view and selected
+filters; it cannot prove that the token was granted access to repositories
+GitHub never exposes to it. GitHub REST pagination is not snapshot-isolated:
+concurrent repository changes can move items between pages. Duplicate/cycle
+checks fail on detectable drift, but the `completeness.snapshotConsistency`
+field explicitly records that snapshot consistency is not guaranteed; rerun a
+scheduled audit if the organization changed during collection.
+
+The network contract is GET-only: identity (`/user` or `/installation`),
+repository inventory (`/user/repos` or `/installation/repositories`),
+organization metadata, branches, closed pull requests, PR file metadata,
+commits, commit file metadata, and commit-to-PR associations. Tests reject any
+non-GET request across these paths.
+
+JSON output is sorted and schema-versioned. It includes a `completeness` object,
+rate-limit status, public/private counts, branches, recent merged PR metadata,
+commit metadata, changed filenames, and deterministic risk flags.
+
+Bound controls fail rather than truncate:
+
+- `--max-repos` (default 1,000)
+- `--max-branches` per repository (default 1,000)
+- `--max-prs` recent closed PRs inspected per repository (default 1,000)
+- `--max-commits` per branch (default 1,000)
+- `--max-files` per PR or commit (default 3,000)
+
+Lower these for tightly bounded scheduled jobs. Raise them deliberately for a
+larger organization; exceeding any bound exits nonzero without output or state
+advancement.
+
+Security and limits:
+
+- Set exactly one of `GITHUB_TOKEN` or `GH_TOKEN`; if both differ, the command
+  fails. Tokens are held in memory, sent only in the GitHub authorization
+  header, and redacted from errors.
+- The scanner never fetches blobs, trees, patches, diffs, or private file
+  contents. It reads repository/change metadata and changed filenames. Private
+  repository names and filenames still remain sensitive; protect JSON output.
+- Human output exposes authenticated identity, repository names/visibility,
+  aggregate counts, and risk-category names. JSON additionally exposes branch
+  names, PR titles/authors/timestamps, commit subjects/authors/timestamps, URLs,
+  changed filenames, and permission metadata. Treat either output as sensitive;
+  redirect JSON only to an access-controlled destination.
+- The complete result is buffered before anything is printed. Authentication,
+  permission, malformed response, pagination, REST, or rate-limit failure exits
+  nonzero and emits no partial scan. The scanner writes no cursor or checkpoint,
+  so a failed run cannot advance state.
+- Risk flags are deterministic path-based triage for Rell/contracts,
+  encryption/keys/auth, decision semantics, SDK/plugin APIs,
+  workflows/releases/dependencies, and direct commits detected on protected
+  branches. They are not semantic code analysis and are explicitly **not a full
+  SAST assessment**.
+- Direct-commit detection asks GitHub whether a protected-branch commit belongs
+  to a merged PR. Branch rules, merge queues, force pushes, and GitHub's
+  commit-to-PR association can limit that inference.
+- Fine-grained tokens and GitHub App installations should receive read-only
+  metadata, contents, pull-request, and organization access as applicable.
+  GitHub may not report named scopes for these token types; successful endpoint
+  access is the permission check.
+
 ### `atbash whoami` / `atbash policy show` / `atbash tier`
 
 Inspect the current agent's identity, assigned policy, and org tier.
@@ -549,7 +930,7 @@ atbash set org-name my-org
 atbash set provider openai
 atbash set model gpt-4o
 atbash set endpoint https://custom-endpoint.example.com
-atbash set rid <blockchain-rid-hex>
+atbash set network public   # or "private" — pins the fleet-wide chain
 
 # Remove a single value (reverts to default)
 atbash unset provider
@@ -561,7 +942,13 @@ atbash unset endpoint
 | Agent key | `--agent-key` | `ATBASH_AGENT_KEY` | `atbash set agent-key <hex>` |
 | Org name | `--org` | `ATBASH_ORG_NAME` | `atbash set org-name <name>` |
 | API endpoint | `--endpoint` | `ATBASH_ENDPOINT` | `atbash set endpoint <url>` |
-| Blockchain RID | — | `ATBASH_BLOCKCHAIN_RID` | `atbash set rid <hex>` |
+| Self-hosted judge signing key | `--verify-pubkey` (judge) | `ATBASH_JUDGE_VERIFY_PUBKEY` | config key `judgeVerifyPubKey` |
+| Default chain network | — | `ATBASH_DEFAULT_CHAIN_NETWORK` | `atbash set network public\|private` |
+
+> **Self-hosted judge:** the SDK only accepts an endpoint outside the trusted allowlist
+> when the judge's 66-hex response-signing pubkey is supplied too, so every verdict can be
+> verified. Set `ATBASH_JUDGE_VERIFY_PUBKEY` (or `--verify-pubkey` on `judge`) together with
+> `--endpoint`; without it a non-default endpoint is refused.
 | Inference provider | `--provider` | `ATBASH_PROVIDER` | `atbash set provider <name>` |
 | Model | `--model` | `ATBASH_PROVIDER_MODEL` | `atbash set model <model>` |
 

package/dist/bin/atbash.js

@@ -19,20 +19,50 @@ const tier_1 = require("../commands/tier");
 const tools_1 = require("../commands/tools");
 const held_1 = require("../commands/held");
 const connect_1 = require("../commands/connect");
+const scan_1 = require("../commands/scan");
+const setup_1 = require("../commands/setup");
+const mcp_cmd_1 = require("../commands/mcp-cmd");
+const github_scan_1 = require("../commands/github-scan");
 // ── Autocomplete ────────────────────────────────────────────────
 const commands = [
     "judge", "whoami", "policy", "tier", "tools", "held",
     "history", "stats", "status", "keygen", "set", "unset",
-    "wipe", "config", "connect", "help",
+    "wipe", "config", "connect", "scan", "setup", "mcp", "github-scan", "help",
 ];
 const subcommands = {
-    judge: ["--context", "--agent-key", "--provider", "--model", "--org", "--endpoint", "--timeout", "--json"],
+    judge: [
+        "--context",
+        "--agent-key",
+        "--provider",
+        "--model",
+        "--org",
+        "--endpoint",
+        "--timeout",
+        "--json",
+    ],
     policy: ["show"],
     tools: ["--agent", "--org", "--count", "--json", "inspect", "count"],
     held: ["--org", "--count", "--json", "reviews"],
     connect: ["--host", "--home"],
-    set: ["agent-key", "org-name", "endpoint", "rid", "provider", "model"],
-    unset: ["agent-key", "org-name", "endpoint", "rid", "provider", "model"],
+    mcp: ["--key-file", "--endpoint"],
+    scan: ["--home", "--introspect", "--api-key", "--model", "--threats", "--policy", "--fail-on", "--json"],
+    setup: ["--key", "--key-file", "--keys-dir", "--host", "--runtime", "--dry-run", "--yes", "--no-install", "--skip-verify", "--home"],
+    "github-scan": [
+        "--owner",
+        "--repo",
+        "--branch",
+        "--since",
+        "--expect-repos",
+        "--max-repos",
+        "--max-branches",
+        "--max-prs",
+        "--max-commits",
+        "--max-files",
+        "--include-bots",
+        "--json",
+    ],
+    set: ["agent-key", "org-name", "endpoint", "network", "provider", "model"],
+    unset: ["agent-key", "org-name", "endpoint", "network", "provider", "model"],
     show: ["--agent-key", "--endpoint", "--json"],
     inspect: ["--endpoint"],
     reviews: ["--org", "--count", "--json"],
@@ -85,6 +115,11 @@ program
 (0, config_cmd_1.registerConfigCommand)(program);
 // Onboarding
 (0, connect_1.registerConnectCommand)(program);
+(0, scan_1.registerScanCommand)(program);
+(0, setup_1.registerSetupCommand)(program);
+(0, mcp_cmd_1.registerMcpCommand)(program);
+// External scanning
+(0, github_scan_1.registerGithubScanCommand)(program);
 async function main() {
     await program.parseAsync(process.argv);
     await (0, sdk_1.shutdownTelemetry)();

package/dist/bin/atbash.js.map

@@ -1 +1 @@
-{"version":3,"file":"atbash.js","sourceRoot":"","sources":["../../src/bin/atbash.ts"],"names":[],"mappings":";;;;;;AACA,yCAAoC;AACpC,wDAAgC;AAChC,qCAAgE;AAChE,6CAAyD;AACzD,+CAA2D;AAC3D,+CAA2D;AAC3D,iDAA6D;AAC7D,6CAAyD;AACzD,uDAA+D;AAC/D,+CAA2D;AAC3D,+CAA2D;AAC3D,2CAAuD;AACvD,6CAAyD;AACzD,2CAAuD;AACvD,iDAA6D;AAE7D,mEAAmE;AACnE,MAAM,QAAQ,GAAG;IACf,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;IACpD,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO;IACtD,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM;CACpC,CAAC;AAEF,MAAM,WAAW,GAA6B;IAC5C,KAAK,EAAE,CAAC,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,CAAC;IAC1G,MAAM,EAAE,CAAC,MAAM,CAAC;IAChB,KAAK,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC;IACpE,IAAI,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC;IAC/C,OAAO,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC7B,GAAG,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC;IACtE,KAAK,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC;IACxE,IAAI,EAAE,CAAC,aAAa,EAAE,YAAY,EAAE,QAAQ,CAAC;IAC7C,OAAO,EAAE,CAAC,YAAY,CAAC;IACvB,OAAO,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC;IACvC,YAAY,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC;CAC1D,CAAC;AAEF,MAAM,UAAU,GAAG,IAAA,kBAAQ,EAAC,wCAAwC,CAAC,CAAC;AACtE,UAAU,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC3D,UAAU,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,EAAE,MAAM,EAAsB,EAAE,EAAE;IAC7D,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,IAAI;QAAE,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC,CAAC,CAAC;AACH,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAsB,EAAE,EAAE;IACzD,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,IAAI;QAAE,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC,CAAC,CAAC;AACH,UAAU,CAAC,IAAI,EAAE,CAAC;AAElB,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;IAChD,UAAU,CAAC,kBAAkB,EAAE,CAAC;IAChC,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;IAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,+EAA+E;AAC/E,IAAA,oBAAc,EAAC;IACb,OAAO,EAAE,IAAI;IACb,MAAM,EAAE,KAAK;IACb,gBAAgB,EAAE,IAAI;CACvB,CAAC,CAAC;AAEH,MAAM,OAAO,GAAG,IAAI,mBAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,QAAQ,CAAC;KACd,WAAW,CAAC,6EAA6E,CAAC;KAC1F,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;AAEnE,OAAO;AACP,IAAA,4BAAoB,EAAC,OAAO,CAAC,CAAC;AAC9B,IAAA,8BAAqB,EAAC,OAAO,CAAC,CAAC;AAC/B,IAAA,8BAAqB,EAAC,OAAO,CAAC,CAAC;AAC/B,IAAA,0BAAmB,EAAC,OAAO,CAAC,CAAC;AAE7B,aAAa;AACb,IAAA,4BAAoB,EAAC,OAAO,CAAC,CAAC;AAE9B,oBAAoB;AACpB,IAAA,0BAAmB,EAAC,OAAO,CAAC,CAAC;AAE7B,OAAO;AACP,IAAA,gCAAsB,EAAC,OAAO,CAAC,CAAC;AAChC,IAAA,4BAAoB,EAAC,OAAO,CAAC,CAAC;AAC9B,IAAA,8BAAqB,EAAC,OAAO,CAAC,CAAC;AAE/B,QAAQ;AACR,IAAA,8BAAqB,EAAC,OAAO,CAAC,CAAC;AAC/B,IAAA,kCAAqB,EAAC,OAAO,CAAC,CAAC;AAE/B,aAAa;AACb,IAAA,gCAAsB,EAAC,OAAO,CAAC,CAAC;AAEhC,KAAK,UAAU,IAAI;IACjB,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,IAAA,uBAAiB,GAAE,CAAC;AAC5B,CAAC;AAED,IAAI,EAAE,CAAC"}
+{"version":3,"file":"atbash.js","sourceRoot":"","sources":["../../src/bin/atbash.ts"],"names":[],"mappings":";;;;;;AACA,yCAAoC;AACpC,wDAAgC;AAChC,qCAAgE;AAChE,6CAAyD;AACzD,+CAA2D;AAC3D,+CAA2D;AAC3D,iDAA6D;AAC7D,6CAAyD;AACzD,uDAA+D;AAC/D,+CAA2D;AAC3D,+CAA2D;AAC3D,2CAAuD;AACvD,6CAAyD;AACzD,2CAAuD;AACvD,iDAA6D;AAC7D,2CAAuD;AACvD,6CAAyD;AACzD,iDAAyD;AACzD,yDAAoE;AAEpE,mEAAmE;AACnE,MAAM,QAAQ,GAAG;IACf,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;IACpD,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO;IACtD,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM;CAC3E,CAAC;AAEF,MAAM,WAAW,GAA6B;IAC5C,KAAK,EAAE;QACL,WAAW;QACX,aAAa;QACb,YAAY;QACZ,SAAS;QACT,OAAO;QACP,YAAY;QACZ,WAAW;QACX,QAAQ;KACT;IACD,MAAM,EAAE,CAAC,MAAM,CAAC;IAChB,KAAK,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC;IACpE,IAAI,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC;IAC/C,OAAO,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC7B,GAAG,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC;IACjC,IAAI,EAAE,CAAC,QAAQ,EAAE,cAAc,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,CAAC;IACxG,KAAK,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,QAAQ,CAAC;IACpI,aAAa,EAAE;QACb,SAAS;QACT,QAAQ;QACR,UAAU;QACV,SAAS;QACT,gBAAgB;QAChB,aAAa;QACb,gBAAgB;QAChB,WAAW;QACX,eAAe;QACf,aAAa;QACb,gBAAgB;QAChB,QAAQ;KACT;IACD,GAAG,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC;IAC1E,KAAK,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC;IAC5E,IAAI,EAAE,CAAC,aAAa,EAAE,YAAY,EAAE,QAAQ,CAAC;IAC7C,OAAO,EAAE,CAAC,YAAY,CAAC;IACvB,OAAO,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC;IACvC,YAAY,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC;CAC1D,CAAC;AAEF,MAAM,UAAU,GAAG,IAAA,kBAAQ,EAAC,wCAAwC,CAAC,CAAC;AACtE,UAAU,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC3D,UAAU,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,EAAE,MAAM,EAAsB,EAAE,EAAE;IAC7D,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,IAAI;QAAE,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC,CAAC,CAAC;AACH,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAsB,EAAE,EAAE;IACzD,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,IAAI;QAAE,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC,CAAC,CAAC;AACH,UAAU,CAAC,IAAI,EAAE,CAAC;AAElB,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;IAChD,UAAU,CAAC,kBAAkB,EAAE,CAAC;IAChC,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;IAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,+EAA+E;AAC/E,IAAA,oBAAc,EAAC;IACb,OAAO,EAAE,IAAI;IACb,MAAM,EAAE,KAAK;IACb,gBAAgB,EAAE,IAAI;CACvB,CAAC,CAAC;AAEH,MAAM,OAAO,GAAG,IAAI,mBAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,QAAQ,CAAC;KACd,WAAW,CACV,6EAA6E,CAC9E;KACA,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;AAEnE,OAAO;AACP,IAAA,4BAAoB,EAAC,OAAO,CAAC,CAAC;AAC9B,IAAA,8BAAqB,EAAC,OAAO,CAAC,CAAC;AAC/B,IAAA,8BAAqB,EAAC,OAAO,CAAC,CAAC;AAC/B,IAAA,0BAAmB,EAAC,OAAO,CAAC,CAAC;AAE7B,aAAa;AACb,IAAA,4BAAoB,EAAC,OAAO,CAAC,CAAC;AAE9B,oBAAoB;AACpB,IAAA,0BAAmB,EAAC,OAAO,CAAC,CAAC;AAE7B,OAAO;AACP,IAAA,gCAAsB,EAAC,OAAO,CAAC,CAAC;AAChC,IAAA,4BAAoB,EAAC,OAAO,CAAC,CAAC;AAC9B,IAAA,8BAAqB,EAAC,OAAO,CAAC,CAAC;AAE/B,QAAQ;AACR,IAAA,8BAAqB,EAAC,OAAO,CAAC,CAAC;AAC/B,IAAA,kCAAqB,EAAC,OAAO,CAAC,CAAC;AAE/B,aAAa;AACb,IAAA,gCAAsB,EAAC,OAAO,CAAC,CAAC;AAChC,IAAA,0BAAmB,EAAC,OAAO,CAAC,CAAC;AAC7B,IAAA,4BAAoB,EAAC,OAAO,CAAC,CAAC;AAC9B,IAAA,4BAAkB,EAAC,OAAO,CAAC,CAAC;AAE5B,oBAAoB;AACpB,IAAA,uCAAyB,EAAC,OAAO,CAAC,CAAC;AAEnC,KAAK,UAAU,IAAI;IACjB,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,IAAA,uBAAiB,GAAE,CAAC;AAC5B,CAAC;AAED,IAAI,EAAE,CAAC"}

package/dist/commands/config-cmd.js

@@ -13,7 +13,7 @@ function registerConfigCommand(program) {
     program
         .command("set")
         .description("Save a configuration value")
-        .argument("<key-type>", "What to set: agent-key, org-name, endpoint, rid, provider, model")
+        .argument("<key-type>", "What to set: agent-key, org-name, endpoint, network, provider, model")
         .argument("<value>", "The value to save")
         .action((keyType, value) => {
         const config = (0, sdk_1.loadUserConfig)();
@@ -60,41 +60,41 @@ function registerConfigCommand(program) {
                 console.log(chalk_1.default.green(`Model saved: ${config.providerModel}`));
                 break;
             }
-            case "rid": {
-                const clean = value.trim().toUpperCase();
-                if (!/^[0-9A-F]{64}$/.test(clean)) {
-                    console.error(chalk_1.default.red("Invalid blockchain RID — must be exactly 64 hex characters."));
+            case "network": {
+                const clean = value.trim().toLowerCase();
+                if (clean !== "public" && clean !== "private") {
+                    console.error(chalk_1.default.red('Invalid network — must be "public" or "private".'));
                     process.exit(1);
                 }
-                config.blockchainRid = clean;
+                config.defaultChainNetwork = clean;
                 (0, sdk_1.saveUserConfig)(config);
-                console.log(chalk_1.default.green(`Blockchain RID saved: ${clean}`));
+                console.log(chalk_1.default.green(`Default chain network saved: ${clean}`));
                 break;
             }
             default:
                 console.error(chalk_1.default.red(`Unknown key type: ${keyType}`));
-                console.error(chalk_1.default.dim("Valid: agent-key, org-name, endpoint, rid, provider, model"));
+                console.error(chalk_1.default.dim("Valid: agent-key, org-name, endpoint, network, provider, model"));
                 process.exit(1);
         }
     });
     program
         .command("unset")
         .description("Remove a single configuration value")
-        .argument("<key-type>", "What to unset: agent-key, org-name, endpoint, rid, provider, model")
+        .argument("<key-type>", "What to unset: agent-key, org-name, endpoint, network, provider, model")
         .action((keyType) => {
         const config = (0, sdk_1.loadUserConfig)();
         const keyMap = {
             "agent-key": "agentKey",
             "org-name": "orgName",
             endpoint: "judgeEndpoint",
-            rid: "blockchainRid",
+            network: "defaultChainNetwork",
             provider: "provider",
             model: "providerModel",
         };
         const configKey = keyMap[keyType];
         if (!configKey) {
             console.error(chalk_1.default.red(`Unknown key type: ${keyType}`));
-            console.error(chalk_1.default.dim("Valid: agent-key, org-name, endpoint, rid, provider, model"));
+            console.error(chalk_1.default.dim("Valid: agent-key, org-name, endpoint, network, provider, model"));
             process.exit(1);
         }
         if (config[configKey] === undefined) {
@@ -126,7 +126,7 @@ function registerConfigCommand(program) {
                 publicKey: config.agentKey ? (0, sdk_1.derivePublicKey)(config.agentKey) : null,
                 orgName: config.orgName || null,
                 endpoint: config.judgeEndpoint || sdk_1.DEFAULT_ENDPOINT,
-                blockchainRid: config.blockchainRid || sdk_1.DEFAULT_BLOCKCHAIN_RID,
+                defaultChainNetwork: config.defaultChainNetwork || "private",
                 provider: config.provider || null,
                 model: config.providerModel || null,
             }, null, 2));
@@ -155,11 +155,11 @@ function registerConfigCommand(program) {
         else {
             console.log(`  Endpoint:       ${chalk_1.default.dim(`default (${sdk_1.DEFAULT_ENDPOINT})`)}`);
         }
-        if (config.blockchainRid) {
-            console.log(`  Blockchain RID: ${chalk_1.default.white(config.blockchainRid)}`);
+        if (config.defaultChainNetwork) {
+            console.log(`  Chain network:  ${chalk_1.default.white(config.defaultChainNetwork)}`);
         }
         else {
-            console.log(`  Blockchain RID: ${chalk_1.default.dim(`default (${sdk_1.DEFAULT_BLOCKCHAIN_RID.slice(0, 16)}...)`)}`);
+            console.log(`  Chain network:  ${chalk_1.default.dim("default (private)")}`);
         }
         console.log();
         console.log(chalk_1.default.bold("  Provider"));

package/dist/commands/config-cmd.js.map

@@ -1 +1 @@
-{"version":3,"file":"config-cmd.js","sourceRoot":"","sources":["../../src/commands/config-cmd.ts"],"names":[],"mappings":";;;;;AAgBA,sDA2MC;AA1ND,kDAA0B;AAC1B,qCAQqB;AAErB,SAAS,OAAO,CAAC,GAAW;IAC1B,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,SAAgB,qBAAqB,CAAC,OAAgB;IACpD,OAAO;SACJ,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,4BAA4B,CAAC;SACzC,QAAQ,CACP,YAAY,EACZ,kEAAkE,CACnE;SACA,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;SACxC,MAAM,CAAC,CAAC,OAAe,EAAE,KAAa,EAAE,EAAE;QACzC,MAAM,MAAM,GAAG,IAAA,oBAAc,GAAE,CAAC;QAEhC,QAAQ,OAAO,EAAE,CAAC;YAChB,KAAK,WAAW,CAAC,CAAC,CAAC;gBACjB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBAC5D,IAAI,CAAC,IAAA,uBAAiB,EAAC,KAAK,CAAC,EAAE,CAAC;oBAC9B,OAAO,CAAC,KAAK,CACX,eAAK,CAAC,GAAG,CACP,0DAA0D,CAC3D,CACF,CAAC;oBACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;gBACD,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC;gBACxB,IAAA,oBAAc,EAAC,MAAM,CAAC,CAAC;gBACvB,MAAM,MAAM,GAAG,IAAA,qBAAe,EAAC,KAAK,CAAC,CAAC;gBACtC,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC;gBAC7C,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,eAAe,MAAM,EAAE,CAAC,CAAC,CAAC;gBAChD,MAAM;YACR,CAAC;YACD,KAAK,UAAU,CAAC,CAAC,CAAC;gBAChB,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;gBAC9B,IAAA,oBAAc,EAAC,MAAM,CAAC,CAAC;gBACvB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,mBAAmB,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBAC9D,MAAM;YACR,CAAC;YACD,KAAK,UAAU,CAAC,CAAC,CAAC;gBAChB,MAAM,CAAC,aAAa,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;gBACpC,IAAA,oBAAc,EAAC,MAAM,CAAC,CAAC;gBACvB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,mBAAmB,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;gBACpE,MAAM;YACR,CAAC;YACD,KAAK,UAAU,CAAC,CAAC,CAAC;gBAChB,MAAM,KAAK,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;gBAC1D,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;oBACzC,OAAO,CAAC,KAAK,CACX,eAAK,CAAC,GAAG,CAAC,6BAA6B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAC3D,CAAC;oBACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;gBACD,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;gBACtC,IAAA,oBAAc,EAAC,MAAM,CAAC,CAAC;gBACvB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,mBAAmB,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;gBAC/D,MAAM;YACR,CAAC;YACD,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,MAAM,CAAC,aAAa,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;gBACpC,IAAA,oBAAc,EAAC,MAAM,CAAC,CAAC;gBACvB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,gBAAgB,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;gBACjE,MAAM;YACR,CAAC;YACD,KAAK,KAAK,CAAC,CAAC,CAAC;gBACX,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBACzC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;oBAClC,OAAO,CAAC,KAAK,CACX,eAAK,CAAC,GAAG,CACP,6DAA6D,CAC9D,CACF,CAAC;oBACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;gBACD,MAAM,CAAC,aAAa,GAAG,KAAK,CAAC;gBAC7B,IAAA,oBAAc,EAAC,MAAM,CAAC,CAAC;gBACvB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,yBAAyB,KAAK,EAAE,CAAC,CAAC,CAAC;gBAC3D,MAAM;YACR,CAAC;YACD;gBACE,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,GAAG,CAAC,qBAAqB,OAAO,EAAE,CAAC,CAAC,CAAC;gBACzD,OAAO,CAAC,KAAK,CACX,eAAK,CAAC,GAAG,CACP,4DAA4D,CAC7D,CACF,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,qCAAqC,CAAC;SAClD,QAAQ,CACP,YAAY,EACZ,oEAAoE,CACrE;SACA,MAAM,CAAC,CAAC,OAAe,EAAE,EAAE;QAC1B,MAAM,MAAM,GAAG,IAAA,oBAAc,GAAE,CAAC;QAChC,MAAM,MAAM,GAAwC;YAClD,WAAW,EAAE,UAAU;YACvB,UAAU,EAAE,SAAS;YACrB,QAAQ,EAAE,eAAe;YACzB,GAAG,EAAE,eAAe;YACpB,QAAQ,EAAE,UAAU;YACpB,KAAK,EAAE,eAAe;SACvB,CAAC;QAEF,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,GAAG,CAAC,qBAAqB,OAAO,EAAE,CAAC,CAAC,CAAC;YACzD,OAAO,CAAC,KAAK,CACX,eAAK,CAAC,GAAG,CACP,4DAA4D,CAC7D,CACF,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,GAAG,OAAO,cAAc,CAAC,CAAC,CAAC;YACjD,OAAO;QACT,CAAC;QAED,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC;QACzB,IAAA,oBAAc,EAAC,MAAM,CAAC,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,GAAG,OAAO,WAAW,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,+BAA+B,CAAC;SAC5C,MAAM,CAAC,GAAG,EAAE;QACX,IAAA,oBAAc,EAAC,EAAE,CAAC,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEL,gBAAgB;IAChB,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,4BAA4B,CAAC;SACzC,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QACf,MAAM,MAAM,GAAG,IAAA,oBAAc,GAAE,CAAC;QAEhC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;gBACzB,IAAI,EAAE,IAAA,mBAAa,GAAE;gBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI;gBAC3D,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAA,qBAAe,EAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI;gBACpE,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;gBAC/B,QAAQ,EAAE,MAAM,CAAC,aAAa,IAAI,sBAAgB;gBAClD,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,4BAAsB;gBAC7D,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;gBACjC,KAAK,EAAE,MAAM,CAAC,aAAa,IAAI,IAAI;aACpC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACb,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,SAAS,IAAA,mBAAa,GAAE,EAAE,CAAC,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,EAAE,CAAC;QAEd,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,IAAA,qBAAe,EAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC7C,OAAO,CAAC,GAAG,CACT,qBAAqB,eAAK,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,eAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CACnF,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,qBAAqB,eAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CACT,qBAAqB,eAAK,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,eAAK,CAAC,GAAG,CAAC,mDAAmD,CAAC,EAAE,CACjH,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,qBAAqB,eAAK,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAClE,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,qBAAqB,eAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,qBAAqB,eAAK,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QACxE,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CACT,qBAAqB,eAAK,CAAC,GAAG,CAAC,YAAY,sBAAgB,GAAG,CAAC,EAAE,CAClE,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,qBAAqB,eAAK,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QACxE,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CACT,qBAAqB,eAAK,CAAC,GAAG,CAAC,YAAY,4BAAsB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CACxF,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,CACT,qBAAqB,eAAK,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,IAAI,SAAS,CAAC,EAAE,CACjE,CAAC;QACF,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,qBAAqB,eAAK,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QACxE,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"config-cmd.js","sourceRoot":"","sources":["../../src/commands/config-cmd.ts"],"names":[],"mappings":";;;;;AAeA,sDAyMC;AAvND,kDAA0B;AAC1B,qCAOqB;AAErB,SAAS,OAAO,CAAC,GAAW;IAC1B,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,SAAgB,qBAAqB,CAAC,OAAgB;IACpD,OAAO;SACJ,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,4BAA4B,CAAC;SACzC,QAAQ,CACP,YAAY,EACZ,sEAAsE,CACvE;SACA,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;SACxC,MAAM,CAAC,CAAC,OAAe,EAAE,KAAa,EAAE,EAAE;QACzC,MAAM,MAAM,GAAG,IAAA,oBAAc,GAAE,CAAC;QAEhC,QAAQ,OAAO,EAAE,CAAC;YAChB,KAAK,WAAW,CAAC,CAAC,CAAC;gBACjB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBAC5D,IAAI,CAAC,IAAA,uBAAiB,EAAC,KAAK,CAAC,EAAE,CAAC;oBAC9B,OAAO,CAAC,KAAK,CACX,eAAK,CAAC,GAAG,CACP,0DAA0D,CAC3D,CACF,CAAC;oBACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;gBACD,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC;gBACxB,IAAA,oBAAc,EAAC,MAAM,CAAC,CAAC;gBACvB,MAAM,MAAM,GAAG,IAAA,qBAAe,EAAC,KAAK,CAAC,CAAC;gBACtC,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC;gBAC7C,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,eAAe,MAAM,EAAE,CAAC,CAAC,CAAC;gBAChD,MAAM;YACR,CAAC;YACD,KAAK,UAAU,CAAC,CAAC,CAAC;gBAChB,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;gBAC9B,IAAA,oBAAc,EAAC,MAAM,CAAC,CAAC;gBACvB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,mBAAmB,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBAC9D,MAAM;YACR,CAAC;YACD,KAAK,UAAU,CAAC,CAAC,CAAC;gBAChB,MAAM,CAAC,aAAa,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;gBACpC,IAAA,oBAAc,EAAC,MAAM,CAAC,CAAC;gBACvB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,mBAAmB,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;gBACpE,MAAM;YACR,CAAC;YACD,KAAK,UAAU,CAAC,CAAC,CAAC;gBAChB,MAAM,KAAK,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;gBAC1D,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;oBACzC,OAAO,CAAC,KAAK,CACX,eAAK,CAAC,GAAG,CAAC,6BAA6B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAC3D,CAAC;oBACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;gBACD,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;gBACtC,IAAA,oBAAc,EAAC,MAAM,CAAC,CAAC;gBACvB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,mBAAmB,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;gBAC/D,MAAM;YACR,CAAC;YACD,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,MAAM,CAAC,aAAa,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;gBACpC,IAAA,oBAAc,EAAC,MAAM,CAAC,CAAC;gBACvB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,gBAAgB,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;gBACjE,MAAM;YACR,CAAC;YACD,KAAK,SAAS,CAAC,CAAC,CAAC;gBACf,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBACzC,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;oBAC9C,OAAO,CAAC,KAAK,CACX,eAAK,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAC9D,CAAC;oBACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;gBACD,MAAM,CAAC,mBAAmB,GAAG,KAAK,CAAC;gBACnC,IAAA,oBAAc,EAAC,MAAM,CAAC,CAAC;gBACvB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,gCAAgC,KAAK,EAAE,CAAC,CAAC,CAAC;gBAClE,MAAM;YACR,CAAC;YACD;gBACE,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,GAAG,CAAC,qBAAqB,OAAO,EAAE,CAAC,CAAC,CAAC;gBACzD,OAAO,CAAC,KAAK,CACX,eAAK,CAAC,GAAG,CACP,gEAAgE,CACjE,CACF,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,qCAAqC,CAAC;SAClD,QAAQ,CACP,YAAY,EACZ,wEAAwE,CACzE;SACA,MAAM,CAAC,CAAC,OAAe,EAAE,EAAE;QAC1B,MAAM,MAAM,GAAG,IAAA,oBAAc,GAAE,CAAC;QAChC,MAAM,MAAM,GAAwC;YAClD,WAAW,EAAE,UAAU;YACvB,UAAU,EAAE,SAAS;YACrB,QAAQ,EAAE,eAAe;YACzB,OAAO,EAAE,qBAAqB;YAC9B,QAAQ,EAAE,UAAU;YACpB,KAAK,EAAE,eAAe;SACvB,CAAC;QAEF,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,GAAG,CAAC,qBAAqB,OAAO,EAAE,CAAC,CAAC,CAAC;YACzD,OAAO,CAAC,KAAK,CACX,eAAK,CAAC,GAAG,CACP,gEAAgE,CACjE,CACF,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,GAAG,OAAO,cAAc,CAAC,CAAC,CAAC;YACjD,OAAO;QACT,CAAC;QAED,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC;QACzB,IAAA,oBAAc,EAAC,MAAM,CAAC,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,GAAG,OAAO,WAAW,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,+BAA+B,CAAC;SAC5C,MAAM,CAAC,GAAG,EAAE;QACX,IAAA,oBAAc,EAAC,EAAE,CAAC,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEL,gBAAgB;IAChB,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,4BAA4B,CAAC;SACzC,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QACf,MAAM,MAAM,GAAG,IAAA,oBAAc,GAAE,CAAC;QAEhC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;gBACzB,IAAI,EAAE,IAAA,mBAAa,GAAE;gBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI;gBAC3D,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAA,qBAAe,EAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI;gBACpE,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;gBAC/B,QAAQ,EAAE,MAAM,CAAC,aAAa,IAAI,sBAAgB;gBAClD,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,IAAI,SAAS;gBAC5D,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;gBACjC,KAAK,EAAE,MAAM,CAAC,aAAa,IAAI,IAAI;aACpC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACb,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,SAAS,IAAA,mBAAa,GAAE,EAAE,CAAC,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,EAAE,CAAC;QAEd,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,IAAA,qBAAe,EAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC7C,OAAO,CAAC,GAAG,CACT,qBAAqB,eAAK,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,eAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CACnF,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,qBAAqB,eAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CACT,qBAAqB,eAAK,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,eAAK,CAAC,GAAG,CAAC,mDAAmD,CAAC,EAAE,CACjH,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,qBAAqB,eAAK,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAClE,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,qBAAqB,eAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,qBAAqB,eAAK,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QACxE,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CACT,qBAAqB,eAAK,CAAC,GAAG,CAAC,YAAY,sBAAgB,GAAG,CAAC,EAAE,CAClE,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,qBAAqB,eAAK,CAAC,KAAK,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;QAC9E,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CACT,qBAAqB,eAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CACtD,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,CACT,qBAAqB,eAAK,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,IAAI,SAAS,CAAC,EAAE,CACjE,CAAC;QACF,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,qBAAqB,eAAK,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QACxE,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}