@cello-protocol/cli 0.0.44 → 0.0.45

package/dist/cli-args.js

@@ -1,133 +1,78 @@
 /**
- * M8B riders F1/F2 — CLI argument handling, extracted from src/bin/cello.ts so the
+ * CLI argument handling — validation that runs BEFORE dispatch, kept out of src/bin/cello.ts so the
  * usage surface is testable without spawning the binary.
  *
- * F1: USAGE lists EVERY dispatchable command (refresh and receipts were missing).
- * F2: every subcommand answers --help/-h, and an unrecognized flag is REJECTED
- *     instead of being coerced into a positional argument (previously
- *     `cello register --help` tried to register an agent literally named "--help").
+ * M8B riders F1/F2 (原): USAGE lists EVERY dispatchable command; every subcommand answers --help/-h;
+ * an unrecognized flag is REJECTED rather than coerced into a positional (previously
+ * `cello register --help` tried to register an agent literally named "--help").
+ *
+ * DOD-CLI-PARITY-1 Phase 0: this module no longer OWNS the command list, the help text, or the flag
+ * table — it DERIVES all three from the registry (registry.ts), the single source of truth. That is
+ * what makes drift between dispatch, `cello --help`, and `cello <cmd> --help` structurally
+ * impossible rather than merely discouraged.
+ */
+import { COMMANDS, commandNames, findCommand, flagsFor, renderCommandsTable } from "./registry.js";
+// Re-exported for the dispatch layer and existing callers (its home is arg-parse.ts, which both
+// this module and the registry depend on — see the import-cycle note there).
+export { splitAgentFlag } from "./arg-parse.js";
+/** Every dispatchable command — derived, so it cannot fall out of step with the registry. */
+export const KNOWN_COMMANDS = new Set(commandNames());
+/**
+ * The top-level `cello --help`.
+ *
+ * CC-7 (P2-5 / DOD-ONBOARD-HELP-1): opens with what CELLO is + the onboarding path a first-time
+ * user needs. DOD-CLI-PARITY-1 §7 closes the remaining gap — the command list is now a DESCRIBED
+ * table rendered from each registry entry's `summary` (it used to be a single pipe-delimited blob
+ * with no per-command descriptions). Arguments stay in per-command `--help`.
  */
-import { MONIKER_RE } from "@cello-protocol/protocol-types";
-export const KNOWN_COMMANDS = new Set([
-    "login",
-    "logout",
-    "status",
-    "register",
-    "create-agent",
-    "remove-agent",
-    "refresh",
-    "receipts",
-    "sessions",
-    "contact",
-    "settings",
-    "moniker",
-    "telegram",
-    "install",
-]);
-// CC-7 (P2-5 / DOD-ONBOARD-HELP-1): the top level opens with what CELLO is + the onboarding path a
-// first-time user needs, then the command list. (Per-command `cello <cmd> --help` was already good.)
 export const USAGE = "CELLO — a peer-to-peer identity & trust layer for agent-to-agent communication.\n" +
     "\n" +
     "First-time setup:  cello login  →  cello create-agent <name>  →  cello register <name> <token>  →  cello status\n" +
     "  (get <token> from the CELLO Operations Agent on Telegram; 'cello login' starts the local daemon.)\n" +
     "\n" +
-    "Usage: cello <login|logout|status|register|create-agent|remove-agent|refresh|receipts|sessions|contact|settings|moniker|telegram|install>\n" +
-    "Run 'cello <command> --help' for details on any command.";
-/** Per-command usage lines (the same text the commands print on bad input). */
-const COMMAND_HELP = {
-    login: "Usage: cello login  — start the daemon (or connect to an existing one).",
-    logout: "Usage: cello logout  — send shutdown to the running daemon.",
-    status: "Usage: cello status  — query the daemon and print the structured status JSON.",
-    register: "Usage: cello register <agent> <pre-auth-token>  — register a LOCAL agent with the directory.\n" +
-        "  The two-step onboarding: (1) 'cello create-agent <name>' makes the local identity; (2) 'cello register <name> <token>' registers it with the directory.\n" +
-        "  The token is a single-use pre-authorization ticket from the CELLO Operations Agent on Telegram, format 'CELLO-' + 33 characters, valid 24h.\n" +
-        "  Example:  cello register alice CELLO-3xY7...\n" +
-        "  Env-var form (avoids retyping):  CELLO_PREAUTH_TOKEN=CELLO-3xY7... cello register alice\n" +
-        "  Quoting is only needed if a value contains spaces (agent names and tokens never do).",
-    "create-agent": "Usage: cello create-agent <name>  — create a new LOCAL agent identity (does not touch the directory).\n" +
-        // MONIKER-0 AC2: the regex text is DERIVED from the shared constant, never hand-typed.
-        `  Name rule: 1–64 characters, letters/digits/'-'/'_' only, no spaces (regex ${MONIKER_RE.source}).\n` +
-        "  Next step: 'cello register <name> <pre-auth-token>' to register it with the directory.",
-    "remove-agent": "Usage: cello remove-agent <name>  — retires a local agent (one-way) and frees its name.",
-    refresh: "Usage: cello refresh <name>  — proactively refresh the agent's threshold shares (new epoch).",
-    receipts: "Usage: cello receipts <name>  — list the agent's stored relay ordering receipts.",
-    sessions: "Usage: cello sessions [--open|--closed|--failed|--all] [--limit N]  — list session history (defaults to open).",
-    contact: "Usage: cello contact add <pubkey> [--agent <name>] | cello contact remove <pubkey> [--agent <name>] | cello contact list [--agent <name>] | cello contact tier <pubkey> <0..4> [--agent <name>]\n" +
-        "  Per-agent contact whitelist (M8C-CONTACT-1). --agent defaults to the current/sole-online agent.\n" +
-        "  Contacts are added automatically too: initiating a session to X, or accepting X's inbound request, adds X.\n" +
-        "  Example:  cello contact list --agent alice",
-    settings: "Usage: cello settings get [key] [--agent <name>] | cello settings set <key> <value> [--agent <name>]\n" +
-        "  Per-agent reachability policy (DOD-SETTINGS-1). Keys: bounds.<tier>.max_sessions, bounds.<tier>.max_bytes\n" +
-        "  (tier = unknown|known|whitelisted|vip; a finite positive integer), away.default, away.tier.<tier> (away text).\n" +
-        "  An unset key uses the built-in default. Example:  cello settings set bounds.known.max_sessions 8 --agent alice",
-    moniker: "Usage: cello moniker set <name> [--agent <agent>] | cello moniker clear [--agent <agent>]\n" +
-        "  The agent's OUTBOUND name — what a counterparty's doorbell shows (MONIKER-1). Defaults to the agent name; 'set' stores an override, 'clear' restores the default.\n" +
-        // MONIKER-0 AC2: the regex text is DERIVED from the shared constant, never hand-typed.
-        `  Name rule: 1–64 characters, letters/digits/'-'/'_' only, no spaces (regex ${MONIKER_RE.source}).\n` +
-        "  Local-only: never sent to the directory; the receiver treats it as an unverified hint (like caller ID).\n" +
-        "  Example:  cello moniker set Wonderland_Alice --agent alice",
-    telegram: "Usage: cello telegram set-token <bot_token> <allowlisted_chat_id>  — configure the daemon-owned Telegram doorbell (M8C-TGDOOR-1).\n" +
-        "  Starts a single long-lived poller immediately; the operator chat given is the ONLY one that ever receives doorbell events.",
-    install: "Usage: cello install hermes --agent <name> [--hermes-home <path>]  — wire the local CELLO daemon into a Hermes Agent installation.\n" +
-        "  Scaffolds the CELLO platform-adapter plugin into the Hermes home (default ~/.hermes), binds CELLO_AGENT_NAME in its .env,\n" +
-        "  and registers via 'hermes plugins enable cello' + 'hermes mcp add cello'. Idempotent — re-run to upgrade.\n" +
-        "  After installing, restart the gateway: hermes gateway restart",
-};
+    "Usage: cello <command> [args]\n" +
+    "\n" +
+    renderCommandsTable() +
+    "\n" +
+    "\n" +
+    "Run 'cello <command> --help' for details on any command.\n" +
+    // Scoped deliberately: only the parity commands (jsonOut) honor the full §3 contract — JSON on
+    // stdout, structured error on stderr. The older commands (login, register, …) still print human
+    // text, and their failures go to stdout. Claiming the contract for EVERY command would be a
+    // promise the binary does not keep, made to precisely the reader who would script against it.
+    "The session and agent commands (agents, use-agent, initiate, send, receive, close, …) print JSON\n" +
+    "and exit non-zero on failure, so any bash-capable agent can drive CELLO with no MCP dependency.";
+/** Per-command help — the registry entry's own text, verbatim. */
 export function helpForCommand(command) {
-    return COMMAND_HELP[command] ?? USAGE;
+    return findCommand(command)?.help ?? USAGE;
 }
-/** Flags each command recognizes. `--limit` consumes the following value. */
-const COMMAND_FLAGS = {
-    sessions: new Set(["--open", "--closed", "--failed", "--all", "--limit"]),
-    contact: new Set(["--agent"]),
-    settings: new Set(["--agent"]),
-    moniker: new Set(["--agent"]),
-    install: new Set(["--agent", "--hermes-home"]),
-};
 /**
  * F2: validate a subcommand's arguments BEFORE dispatch.
  *  - --help / -h ANYWHERE → help. This is a dedicated pre-scan so help wins even when it
- *    follows an unknown flag or sits where --limit would consume its value — asking for
+ *    follows an unknown flag or sits where a value-consuming flag would swallow it — asking for
  *    help must never be masked by another argument error.
  *  - any other dash-prefixed token the command does not recognize → unknown_flag
  *    (never silently coerced into a positional).
+ *  - after a POSIX `--` terminator, everything is a positional VALUE, verbatim.
  */
-/**
- * Split a subcommand's argv into the `--agent <name>` flag and the remaining positionals.
- * Extracted (MONIKER-1 review Finding 1) because the old inline filter used
- * `i === agentIdx + 1` unguarded: with --agent ABSENT, agentIdx is -1 and the predicate
- * silently dropped positional index 0 — `cello moniker set Bob` / `cello contact list`
- * printed usage instead of dispatching. The flag's value is excluded ONLY when the flag exists.
- */
-export function splitAgentFlag(args) {
-    // POSIX `--` end-of-flags terminator (review F1): everything after the first `--` is a positional
-    // VALUE, verbatim — so a value that starts with `-` (a negative number, or an away text like
-    // "- back Monday") can be passed. --agent is recognized only BEFORE the terminator.
-    const ddIdx = args.indexOf("--");
-    const flagScan = ddIdx === -1 ? args : args.slice(0, ddIdx);
-    const afterTerminator = ddIdx === -1 ? [] : args.slice(ddIdx + 1);
-    const agentIdx = flagScan.indexOf("--agent");
-    const agent = agentIdx !== -1 ? flagScan[agentIdx + 1] : undefined;
-    const positional = flagScan
-        .filter((a, i) => !(a === "--agent" || (agentIdx !== -1 && i === agentIdx + 1)))
-        .concat(afterTerminator);
-    return { agent, positional };
-}
 export function checkArgs(command, args) {
     if (args.some((a) => a === "--help" || a === "-h"))
         return { kind: "help" };
-    const known = COMMAND_FLAGS[command] ?? new Set();
+    const known = flagsFor(command);
     for (let i = 0; i < args.length; i++) {
         const arg = args[i];
         if (arg === "--")
-            break; // POSIX end-of-flags — everything after is a positional value (review F1)
+            break; // POSIX end-of-flags — everything after is a positional value
         if (arg.startsWith("-")) {
-            if (!known.has(arg))
+            const spec = known.get(arg);
+            if (!spec)
                 return { kind: "unknown_flag", flag: arg };
-            if (arg === "--limit")
-                i++; // consumes its value
+            if (spec.consumesValue)
+                i++; // its value is not itself a flag
         }
     }
     return { kind: "ok" };
 }
+/** The registry, re-exported for callers that want to enumerate commands (e.g. the dispatcher). */
+export { COMMANDS };
 //# sourceMappingURL=cli-args.js.map

package/dist/cli-args.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli-args.js","sourceRoot":"","sources":["../src/cli-args.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAE5D,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IACpC,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,cAAc;IACd,cAAc;IACd,SAAS;IACT,UAAU;IACV,UAAU;IACV,SAAS;IACT,UAAU;IACV,SAAS;IACT,UAAU;IACV,SAAS;CACD,CAAC,CAAC;AAIZ,mGAAmG;AACnG,qGAAqG;AACrG,MAAM,CAAC,MAAM,KAAK,GAChB,mFAAmF;IACnF,IAAI;IACJ,mHAAmH;IACnH,uGAAuG;IACvG,IAAI;IACJ,6IAA6I;IAC7I,0DAA0D,CAAC;AAE7D,+EAA+E;AAC/E,MAAM,YAAY,GAA2B;IAC3C,KAAK,EAAE,yEAAyE;IAChF,MAAM,EAAE,6DAA6D;IACrE,MAAM,EAAE,+EAA+E;IACvF,QAAQ,EACN,gGAAgG;QAChG,6JAA6J;QAC7J,iJAAiJ;QACjJ,kDAAkD;QAClD,6FAA6F;QAC7F,wFAAwF;IAC1F,cAAc,EACZ,yGAAyG;QACzG,uFAAuF;QACvF,+EAA+E,UAAU,CAAC,MAAM,MAAM;QACtG,0FAA0F;IAC5F,cAAc,EAAE,yFAAyF;IACzG,OAAO,EAAE,8FAA8F;IACvG,QAAQ,EAAE,kFAAkF;IAC5F,QAAQ,EACN,gHAAgH;IAClH,OAAO,EACL,mMAAmM;QACnM,qGAAqG;QACrG,gHAAgH;QAChH,8CAA8C;IAChD,QAAQ,EACN,wGAAwG;QACxG,+GAA+G;QAC/G,oHAAoH;QACpH,kHAAkH;IACpH,OAAO,EACL,6FAA6F;QAC7F,uKAAuK;QACvK,uFAAuF;QACvF,+EAA+E,UAAU,CAAC,MAAM,MAAM;QACtG,6GAA6G;QAC7G,8DAA8D;IAChE,QAAQ,EACN,qIAAqI;QACrI,8HAA8H;IAChI,OAAO,EACL,sIAAsI;QACtI,+HAA+H;QAC/H,+GAA+G;QAC/G,iEAAiE;CACpE,CAAC;AAEF,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,OAAO,YAAY,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC;AACxC,CAAC;AAED,6EAA6E;AAC7E,MAAM,aAAa,GAAwC;IACzD,QAAQ,EAAE,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IACzE,OAAO,EAAE,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;IAC7B,QAAQ,EAAE,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;IAC9B,OAAO,EAAE,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;IAC7B,OAAO,EAAE,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;CAC/C,CAAC;AAOF;;;;;;;GAOG;AACH;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,IAAc;IAC3C,kGAAkG;IAClG,6FAA6F;IAC7F,oFAAoF;IACpF,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC5D,MAAM,eAAe,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,MAAM,UAAU,GAAG,QAAQ;SACxB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,QAAQ,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC;SAC/E,MAAM,CAAC,eAAe,CAAC,CAAC;IAC3B,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,OAAe,EAAE,IAAc;IACvD,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC5E,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;IAC1D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,IAAI;YAAE,MAAM,CAAC,0EAA0E;QACnG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YAChE,IAAI,GAAG,KAAK,SAAS;gBAAE,CAAC,EAAE,CAAC,CAAC,qBAAqB;QACnD,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC"}
+{"version":3,"file":"cli-args.js","sourceRoot":"","sources":["../src/cli-args.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAEnG,gGAAgG;AAChG,6EAA6E;AAC7E,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEhD,6FAA6F;AAC7F,MAAM,CAAC,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC;AAI3E;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,KAAK,GAChB,mFAAmF;IACnF,IAAI;IACJ,mHAAmH;IACnH,uGAAuG;IACvG,IAAI;IACJ,iCAAiC;IACjC,IAAI;IACJ,mBAAmB,EAAE;IACrB,IAAI;IACJ,IAAI;IACJ,4DAA4D;IAC5D,+FAA+F;IAC/F,gGAAgG;IAChG,4FAA4F;IAC5F,8FAA8F;IAC9F,oGAAoG;IACpG,iGAAiG,CAAC;AAEpG,kEAAkE;AAClE,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,OAAO,WAAW,CAAC,OAAO,CAAC,EAAE,IAAI,IAAI,KAAK,CAAC;AAC7C,CAAC;AAOD;;;;;;;;GAQG;AACH,MAAM,UAAU,SAAS,CAAC,OAAe,EAAE,IAAc;IACvD,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC5E,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,IAAI;YAAE,MAAM,CAAC,8DAA8D;QACvF,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,CAAC,IAAI;gBAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YACtD,IAAI,IAAI,CAAC,aAAa;gBAAE,CAAC,EAAE,CAAC,CAAC,iCAAiC;QAChE,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC;AAED,mGAAmG;AACnG,OAAO,EAAE,QAAQ,EAAE,CAAC"}

package/dist/json-out.d.ts

@@ -0,0 +1,41 @@
+/**
+ * DOD-CLI-PARITY-1 §3 — the bash-adapter contract.
+ *
+ * This is what makes `cello` a real programmatic interface rather than a human-only UI: any
+ * bash-capable agent can drive a CELLO node with `cello <cmd> | jq` + `$?`, with no MCP dependency.
+ *
+ * The contract, applied identically by every parity command:
+ *  - stdout = the daemon's IPC response as JSON, one object per invocation (compact by default —
+ *    scripts and agents are the first-class consumer; `--pretty` for humans).
+ *  - exit 0 when the response is ok:true; non-zero otherwise.
+ *  - a FAILED response goes to stderr, VERBATIM — every field the daemon sent (reason, guidance,
+ *    and extras like the read-before-write cursor) survives untouched, and stdout stays EMPTY so a
+ *    piping script can never mistake an error body for a result.
+ *
+ * The verbatim rule is the DOD-SENDRAW-1 / DOD-LOGOUT-WAIT-1 lesson at the CLI surface: report the
+ * outcome, never the intent. A command that reports success for a failed IPC call is a lie, and
+ * absence of ok:true is NOT evidence of success — an unrecognized shape fails loud rather than
+ * being optimistically passed off as a result.
+ */
+export interface EmittedOutput {
+    stdout: string;
+    stderr: string;
+    exitCode: number;
+}
+export interface EmitOptions {
+    /** Human-readable indented JSON. JSON stays the default so scripts come first. */
+    pretty?: boolean;
+}
+/**
+ * Turn a daemon IPC response into the (stdout, stderr, exitCode) triple the contract demands.
+ * The response is passed through UNMODIFIED in both directions — this function decides the stream
+ * and the exit code, and is never allowed to rewrite, summarize, or invent the body.
+ */
+export declare function emitIpcResult(result: Record<string, unknown>, opts?: EmitOptions): EmittedOutput;
+/**
+ * A transport/daemon-level failure (socket unreachable, daemon not running, thrown error) — still
+ * a structured, machine-parseable JSON error on stderr, so a bash agent branches on the same shape
+ * whether the daemon rejected the call or never received it.
+ */
+export declare function emitTransportError(reason: string, guidance: string, opts?: EmitOptions): EmittedOutput;
+//# sourceMappingURL=json-out.d.ts.map

package/dist/json-out.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-out.d.ts","sourceRoot":"","sources":["../src/json-out.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,kFAAkF;IAClF,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAMD;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,IAAI,GAAE,WAAgB,GACrB,aAAa,CAmBf;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,GAAE,WAAgB,GAAG,aAAa,CAM1G"}

package/dist/json-out.js

@@ -0,0 +1,60 @@
+/**
+ * DOD-CLI-PARITY-1 §3 — the bash-adapter contract.
+ *
+ * This is what makes `cello` a real programmatic interface rather than a human-only UI: any
+ * bash-capable agent can drive a CELLO node with `cello <cmd> | jq` + `$?`, with no MCP dependency.
+ *
+ * The contract, applied identically by every parity command:
+ *  - stdout = the daemon's IPC response as JSON, one object per invocation (compact by default —
+ *    scripts and agents are the first-class consumer; `--pretty` for humans).
+ *  - exit 0 when the response is ok:true; non-zero otherwise.
+ *  - a FAILED response goes to stderr, VERBATIM — every field the daemon sent (reason, guidance,
+ *    and extras like the read-before-write cursor) survives untouched, and stdout stays EMPTY so a
+ *    piping script can never mistake an error body for a result.
+ *
+ * The verbatim rule is the DOD-SENDRAW-1 / DOD-LOGOUT-WAIT-1 lesson at the CLI surface: report the
+ * outcome, never the intent. A command that reports success for a failed IPC call is a lie, and
+ * absence of ok:true is NOT evidence of success — an unrecognized shape fails loud rather than
+ * being optimistically passed off as a result.
+ */
+function render(value, pretty) {
+    return pretty ? JSON.stringify(value, null, 2) : JSON.stringify(value);
+}
+/**
+ * Turn a daemon IPC response into the (stdout, stderr, exitCode) triple the contract demands.
+ * The response is passed through UNMODIFIED in both directions — this function decides the stream
+ * and the exit code, and is never allowed to rewrite, summarize, or invent the body.
+ */
+export function emitIpcResult(result, opts = {}) {
+    // The exit code keys on `ok === false`, not on `ok === true`, because the daemon has TWO response
+    // conventions and only one of them carries `ok`:
+    //   (a) ok-bearing  — { ok: true, … } / { ok: false, reason, guidance }
+    //   (b) payload-only — a bare result with NO `ok` at all: cello_list_agents returns { agents: [] },
+    //       cello_await_session returns { type: "timeout" | … }. (Verified against daemon.ts, not
+    //       assumed.)
+    // `ok: false` is the daemon's ONE failure convention; a genuine transport/daemon failure THROWS
+    // and is handled by the caller as a transport error. So a payload without `ok` is a result, and
+    // routing it to stderr (as an earlier draft of this contract did) would report working commands
+    // as broken — `cello agents` would exit 1 on success.
+    //
+    // This does NOT weaken the no-fabricated-success rule: we never synthesize an ok:true, never
+    // rewrite a body, and never swallow an ok:false. We report exactly what the daemon said.
+    const failed = result.ok === false;
+    if (failed) {
+        return { stdout: "", stderr: render(result, opts.pretty), exitCode: 1 };
+    }
+    return { stdout: render(result, opts.pretty), stderr: "", exitCode: 0 };
+}
+/**
+ * A transport/daemon-level failure (socket unreachable, daemon not running, thrown error) — still
+ * a structured, machine-parseable JSON error on stderr, so a bash agent branches on the same shape
+ * whether the daemon rejected the call or never received it.
+ */
+export function emitTransportError(reason, guidance, opts = {}) {
+    return {
+        stdout: "",
+        stderr: render({ ok: false, reason, guidance }, opts.pretty),
+        exitCode: 1,
+    };
+}
+//# sourceMappingURL=json-out.js.map

package/dist/json-out.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-out.js","sourceRoot":"","sources":["../src/json-out.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAaH,SAAS,MAAM,CAAC,KAAc,EAAE,MAA2B;IACzD,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AACzE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,MAA+B,EAC/B,OAAoB,EAAE;IAEtB,kGAAkG;IAClG,iDAAiD;IACjD,wEAAwE;IACxE,oGAAoG;IACpG,8FAA8F;IAC9F,kBAAkB;IAClB,gGAAgG;IAChG,gGAAgG;IAChG,gGAAgG;IAChG,sDAAsD;IACtD,EAAE;IACF,6FAA6F;IAC7F,yFAAyF;IACzF,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,KAAK,KAAK,CAAC;IACnC,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IAC1E,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AAC1E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAc,EAAE,QAAgB,EAAE,OAAoB,EAAE;IACzF,OAAO;QACL,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC;QAC5D,QAAQ,EAAE,CAAC;KACZ,CAAC;AACJ,CAAC"}

package/dist/parity-commands.d.ts

@@ -0,0 +1,161 @@
+/**
+ * DOD-CLI-PARITY-1 Phases 1-2 — every daemon capability that was MCP-only, reachable from `cello`.
+ *
+ * Bash is the universal agent adapter: with these commands any bash-capable agent (not just Claude
+ * Code or Hermes) operates a CELLO node — connect, send, receive, seal — with no MCP dependency.
+ *
+ * Each command is a THIN PASS-THROUGH: parse args → call the SAME daemon IPC handler the
+ * corresponding cello_* MCP tool calls → emit the response under the §3 contract (json-out.ts).
+ * No daemon changes, no second IPC client, no logic that the daemon owns (validation, tier bounds,
+ * agent_id resolution) is duplicated here — the CLI surfaces the daemon's verdict, verbatim.
+ *
+ * ── The per-invocation current-agent problem (why `use-agent` persists) ──────────────────────
+ * The daemon's "current agent" is PER-CONNECTION state. The MCP shim holds one long-lived socket,
+ * so `cello_use_agent` sticks for the whole session. The CLI is the opposite: a fresh process and a
+ * fresh connection per invocation, torn down microseconds later. A naive `cello use-agent alice`
+ * pass-through would therefore set state on a dying socket and report ok:true while changing NOTHING
+ * for the next command — a fabricated success of exactly the kind §3 forbids.
+ *
+ * So the selection is DURABLE: `use-agent` calls the real handler (which validates the agent and
+ * auto-starts it — AUTOSTART-1) and, only if the daemon says ok, persists the name. Every
+ * agent-scoped command then REPLAYS `cello_use_agent` on its new connection before dispatching.
+ * That is not a parallel path — it is the same replay the MCP proxy performs after a reconnect
+ * (ipc-proxy.ts invariant 1), reusing the existing handler.
+ *
+ * Agent resolution, in order: explicit `--agent` > the persisted selection > (omitted, so the
+ * daemon applies its own sole-online-agent fallback, and stays ambiguous → no_current_agent when
+ * two or more are online). If a replay FAILS, the command STOPS and surfaces that error — it never
+ * shrugs and lets the daemon's fallback quietly run the work as a different agent.
+ */
+import { type EmittedOutput, type EmitOptions } from "./json-out.js";
+export type CliOutput = EmittedOutput;
+/** Options every parity command accepts. */
+export interface ParityOptions extends EmitOptions {
+    /** `--agent <name>` — overrides the persisted selection for this invocation only. */
+    agent?: string;
+}
+/**
+ * The persisted agent selection, or undefined if none was ever made.
+ *
+ * ENOENT — never selected — is the ONLY swallowed error (review F4). A blanket catch here would let
+ * an unreadable file (EACCES, EISDIR, a corrupt mount) read as "no selection", after which the
+ * daemon's sole-online fallback would quietly run the command as whatever agent happens to be up:
+ * the operator's selection silently replaced by a different identity, exit 0. Anything that is not
+ * "the file isn't there" is a real failure and is thrown.
+ */
+export declare function readCurrentAgent(celloDir: string): Promise<string | undefined>;
+/**
+ * The ONE place a CLI command's daemon IPC method is named (review T2).
+ *
+ * The registry's `ipcMethod` field is set FROM this map, and every function below dispatches FROM
+ * this map — so the field that DoD §9's parity test audits is, by construction, the literal that is
+ * actually sent. Previously the two were independent strings: the registry could say
+ * `cello_contact_set_moniker` while the code called `cello_contact_set_away`, and the audit — which
+ * only read the metadata — would happily pass. A comment-in-a-field is not a guarantee; this is.
+ */
+export declare const IPC_METHODS: {
+    readonly agents: "cello_list_agents";
+    readonly "start-agent": "cello_start_agent";
+    readonly "stop-agent": "cello_stop_agent";
+    readonly "use-agent": "cello_use_agent";
+    readonly inbox: "cello_check_notifications";
+    readonly transcript: "cello_get_transcript";
+    readonly "sealed-receipt": "cello_get_sealed_receipt";
+    readonly initiate: "cello_initiate_session";
+    readonly send: "cello_send";
+    readonly receive: "cello_receive";
+    readonly "receive-session": "cello_receive_session";
+    readonly close: "cello_close_session";
+    readonly "await-session": "cello_await_session";
+    readonly "contact-add": "cello_contact_add";
+    readonly "contact-remove": "cello_contact_remove";
+    readonly "contact-list": "cello_contact_list";
+    readonly "contact-set-tier": "cello_contact_set_tier";
+    readonly "contact-set-away": "cello_contact_set_away";
+    readonly "contact-set-moniker": "cello_contact_set_moniker";
+};
+/** `cello agents` → cello_list_agents. Daemon-wide, not agent-scoped. */
+export declare function listAgents(celloDir: string, opts: ParityOptions): Promise<CliOutput>;
+/** `cello start-agent <name>` → cello_start_agent. Brings an agent online WITHOUT claiming current. */
+export declare function startAgent(celloDir: string, name: string, opts: ParityOptions): Promise<CliOutput>;
+/**
+ * `cello stop-agent <name>` → cello_stop_agent.
+ *
+ * Also CLEARS the persisted selection when it names this agent (review F1). The daemon clears a
+ * stopped agent from every connection's current-agent state; the CLI's durable mirror of that state
+ * must follow, or the next command would try to act as an agent the operator just stopped.
+ */
+export declare function stopAgent(celloDir: string, name: string, opts: ParityOptions): Promise<CliOutput>;
+/**
+ * `cello use-agent <name>` → cello_use_agent, and — only if the daemon accepts it — persists the
+ * selection so it survives this process. The handler auto-starts the agent if offline (AUTOSTART-1).
+ * A rejected selection is NEVER written: a later command must not silently act as an agent the
+ * daemon refused.
+ */
+export declare function useAgent(celloDir: string, name: string, opts: ParityOptions): Promise<CliOutput>;
+/** `cello inbox [--scope current|all]` → cello_check_notifications (the push-loss reconciler). */
+export declare function inbox(celloDir: string, opts: ParityOptions & {
+    scope?: "current" | "all";
+}): Promise<CliOutput>;
+/** `cello transcript <session-id>` → cello_get_transcript (durable, survives a daemon restart). */
+export declare function transcript(celloDir: string, sessionId: string, opts: ParityOptions): Promise<CliOutput>;
+/**
+ * `cello sealed-receipt <session-id>` → cello_get_sealed_receipt.
+ *
+ * NOT in the brief's mapping table, which listed cello_get_sealed_receipt as "already covered by
+ * `receipts`". It is not: `cello receipts <name>` calls cello_get_relay_receipts — a DIFFERENT
+ * handler (relay ordering receipts). The notarized bilateral SEAL receipt — the artifact the whole
+ * close ceremony exists to produce, and the one an arbitrator reads — had no CLI surface at all.
+ * Added under the standing rule: a real, non-stub handler with no CLI command gets one.
+ */
+export declare function sealedReceipt(celloDir: string, sessionId: string, opts: ParityOptions): Promise<CliOutput>;
+/** `cello contact add <pubkey>` → cello_contact_add. */
+export declare function contactAdd(celloDir: string, pubkey: string, opts: ParityOptions): Promise<CliOutput>;
+/** `cello contact remove <pubkey>` → cello_contact_remove. */
+export declare function contactRemove(celloDir: string, pubkey: string, opts: ParityOptions): Promise<CliOutput>;
+/** `cello contact list` → cello_contact_list. */
+export declare function contactList(celloDir: string, opts: ParityOptions): Promise<CliOutput>;
+/** `cello contact set-tier <pubkey> <tier>` → cello_contact_set_tier. */
+export declare function contactSetTier(celloDir: string, pubkey: string, tier: number, opts: ParityOptions): Promise<CliOutput>;
+/** `cello contact set-away <pubkey> <message>` → cello_contact_set_away (empty message clears it). */
+export declare function contactSetAway(celloDir: string, pubkey: string, message: string | null, opts: ParityOptions): Promise<CliOutput>;
+/** `cello contact set-moniker <pubkey> <moniker>` → cello_contact_set_moniker (per-CONTACT pet name). */
+export declare function contactSetMoniker(celloDir: string, pubkey: string, moniker: string | null, opts: ParityOptions): Promise<CliOutput>;
+/** `cello initiate <target-pubkey>` → cello_initiate_session. Prints the session_id. */
+export declare function initiate(celloDir: string, targetPubkey: string, opts: ParityOptions): Promise<CliOutput>;
+/**
+ * `cello send <session-id> <message>` → cello_send.
+ *
+ * Honors read-before-write exactly as the MCP tool does: if the daemon returns session_not_current
+ * (with its cursor), that verdict is surfaced VERBATIM and the command exits non-zero. It is never
+ * auto-fixed by silently reading the transcript first — the operator/agent must catch up explicitly,
+ * because a send that "worked" after a hidden read is a send whose ordering guarantees are a fiction.
+ */
+export declare function send(celloDir: string, sessionId: string, content: string, opts: ParityOptions & {
+    governanceDecisions?: Record<string, string>;
+}): Promise<CliOutput>;
+/**
+ * `cello receive <session-id> [--since-seq N] [--timeout-ms N]` → cello_receive.
+ * Mirrors the MCP semantics exactly: with since_seq it is a stateless catch-up BATCH (no replay
+ * race, timeout ignored); without it, it BLOCKS for the next live message until timeout_ms.
+ */
+export declare function receive(celloDir: string, sessionId: string, opts: ParityOptions & {
+    sinceSeq?: number;
+    timeoutMs?: number;
+}): Promise<CliOutput>;
+/** `cello receive-session <session-id> [--timeout-ms N]` → cello_receive_session. */
+export declare function receiveSession(celloDir: string, sessionId: string, opts: ParityOptions & {
+    timeoutMs?: number;
+}): Promise<CliOutput>;
+/**
+ * `cello close <session-id> [--force]` → cello_close_session. Normally triggers the bilateral seal
+ * ceremony. --force is passed ONLY when asked for (mirroring the shim), since it forfeits the seal.
+ */
+export declare function closeSession(celloDir: string, sessionId: string, opts: ParityOptions & {
+    force?: boolean;
+}): Promise<CliOutput>;
+/** `cello await-session [--timeout-ms N]` → cello_await_session. Blocks for an inbound doorbell. */
+export declare function awaitSession(celloDir: string, opts: ParityOptions & {
+    timeoutMs?: number;
+}): Promise<CliOutput>;
+//# sourceMappingURL=parity-commands.d.ts.map

package/dist/parity-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parity-commands.d.ts","sourceRoot":"","sources":["../src/parity-commands.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAKH,OAAO,EAAqC,KAAK,aAAa,EAAE,KAAK,WAAW,EAAE,MAAM,eAAe,CAAC;AAExG,MAAM,MAAM,SAAS,GAAG,aAAa,CAAC;AAEtC,4CAA4C;AAC5C,MAAM,WAAW,aAAc,SAAQ,WAAW;IAChD,qFAAqF;IACrF,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAOD;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAQpF;AAkJD;;;;;;;;GAQG;AACH,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;CAoBd,CAAC;AAIX,yEAAyE;AACzE,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,SAAS,CAAC,CAEpF;AAED,uGAAuG;AACvG,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,SAAS,CAAC,CAElG;AAED;;;;;;GAMG;AACH,wBAAsB,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,SAAS,CAAC,CAMvG;AAED;;;;;GAKG;AACH,wBAAsB,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,SAAS,CAAC,CAItG;AAED,kGAAkG;AAClG,wBAAgB,KAAK,CACnB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,aAAa,GAAG;IAAE,KAAK,CAAC,EAAE,SAAS,GAAG,KAAK,CAAA;CAAE,GAClD,OAAO,CAAC,SAAS,CAAC,CAEpB;AAED,mGAAmG;AACnG,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,SAAS,CAAC,CAEvG;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,SAAS,CAAC,CAE1G;AASD,wDAAwD;AACxD,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,SAAS,CAAC,CAEpG;AAED,8DAA8D;AAC9D,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,SAAS,CAAC,CAEvG;AAED,iDAAiD;AACjD,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,SAAS,CAAC,CAErF;AAED,yEAAyE;AACzE,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,SAAS,CAAC,CAEtH;AAED,sGAAsG;AACtG,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,SAAS,CAAC,CAEhI;AAED,yGAAyG;AACzG,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,SAAS,CAAC,CAEnI;AAID,wFAAwF;AACxF,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,SAAS,CAAC,CAExG;AAED;;;;;;;GAOG;AACH,wBAAgB,IAAI,CAClB,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,aAAa,GAAG;IAAE,mBAAmB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GACrE,OAAO,CAAC,SAAS,CAAC,CAOpB;AAED;;;;GAIG;AACH,wBAAgB,OAAO,CACrB,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,aAAa,GAAG;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9D,OAAO,CAAC,SAAS,CAAC,CAOpB;AAED,qFAAqF;AACrF,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,aAAa,GAAG;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3C,OAAO,CAAC,SAAS,CAAC,CAOpB;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,aAAa,GAAG;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GACxC,OAAO,CAAC,SAAS,CAAC,CAGpB;AAED,oGAAoG;AACpG,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,aAAa,GAAG;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3C,OAAO,CAAC,SAAS,CAAC,CAEpB"}