@claudexor/cli 1.0.1 → 2.1.2

package/dist/setup-job-support.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-job-support.d.ts","sourceRoot":"","sources":["../src/setup-job-support.ts"],"names":[],"mappings":"AAQA,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACxB,MAAM,iBAAiB,CAAC;AAIzB,OAAO,KAAK,EACV,0BAA0B,EAC1B,eAAe,EACf,uBAAuB,EACxB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAIvE,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,0BAA0B,EAAE,YAAY,CAa3E,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,0BAA0B,EACnC,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAuCjD;AAED;kFACkF;AAClF,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,cAAc,GAAG,SAAS,GAC1D,CACD,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,WAAW,KACrB,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAU3C;AAED,wBAAgB,2BAA2B,CACzC,SAAS,GAAE,MAAwB,EACnC,UAAU,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAoB,GACjD,MAAM,CAIR;AAED,wBAAgB,aAAa,CAC3B,EAAE,EAAE,MAAM,EACV,UAAU,EAAE,eAAe,EAC3B,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GACnC,OAAO,CAAC,IAAI,CAAC,CAwBf;AAED,wBAAgB,mBAAmB,CAAC,CAAC,EACnC,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAC3B,UAAU,EAAE,eAAe,EAC3B,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,CAAC,CAAC,CAgCZ;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,eAAe,GAAG,kBAAkB,GAAG,IAAI,CAOnF;AAED,wBAAgB,4BAA4B,CAC1C,GAAG,EAAE,eAAe,EACpB,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAQT;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEhD"}

package/dist/setup-job-support.js

@@ -0,0 +1,141 @@
+/**
+ * Closure-free support owners for the setup-job manager (complexity split:
+ * setup-jobs.ts is at its ratchet cap). Everything here is a pure function or
+ * a parameterized factory — no store, supervisor, or journal access.
+ */
+import { existsSync } from "node:fs";
+import { dirname, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { parseProcessGroupHandle, } from "@claudexor/core";
+import { loadConfig } from "@claudexor/config";
+import { canonicalProfileConfigDir } from "@claudexor/harness-claude";
+import { canonicalCodexProfileHome } from "@claudexor/harness-codex";
+import { noProjectRepoRoot } from "@claudexor/util";
+const NO_PROJECT_ROOT = noProjectRepoRoot();
+export const SETUP_PROFILES = {
+    codex: {
+        guideUrl: "https://developers.openai.com/codex/auth/",
+        note: "Codex native login updates the official vendor-owned CLI session. Exact subscription setup never falls back to a managed API key.",
+    },
+    claude: {
+        guideUrl: "https://code.claude.com/docs/en/authentication",
+        note: "Claude Code native login updates the official vendor-owned CLI session. Exact subscription setup never falls back to a managed API key.",
+    },
+    cursor: {
+        guideUrl: "https://docs.cursor.com/en/cli/reference/authentication",
+        note: "Cursor native CLI login is reused when available.",
+    },
+};
+/**
+ * Resolve an INV-135 profile-targeted login request to its canonical scoped
+ * config dir. Typed 400s: an unknown/disabled/secret-ref profile must refuse
+ * at create time, never open a Terminal login into the wrong store.
+ */
+export function resolveProfileBinding(harness, profileId) {
+    if (!profileId)
+        return null;
+    if (harness !== "claude" && harness !== "codex") {
+        throw Object.assign(new Error(`harness "${harness}" has no isolated config-dir login; only claude and codex support profile logins`), { status: 400 });
+    }
+    const profile = loadConfig(NO_PROJECT_ROOT).global.credential_profiles.find((entry) => entry.harness_id === harness && entry.profile_id === profileId);
+    if (!profile) {
+        throw Object.assign(new Error(`no credential profile "${profileId}" for harness "${harness}" — register it first (POST /v2/credential-profiles or \`claudexor profiles add\`)`), { status: 400 });
+    }
+    if (!profile.enabled) {
+        throw Object.assign(new Error(`credential profile "${profileId}" is disabled`), {
+            status: 400,
+        });
+    }
+    if (profile.credential_kind !== "config_dir_login") {
+        throw Object.assign(new Error(`credential profile "${profileId}" is ${profile.credential_kind}; only config_dir_login profiles use the native login flow (store its secret instead)`), { status: 400 });
+    }
+    const configDir = harness === "claude"
+        ? canonicalProfileConfigDir(profile.isolation_locator ?? "")
+        : canonicalCodexProfileHome(profile.isolation_locator ?? "");
+    return { profileId, configDir };
+}
+/** INV-135 profile verification: the registry adapter's doctor probe against
+ * the durable registry entry — the SAME truth `claudexor profiles login` uses. */
+export function profileDoctorProbe(getAdapter) {
+    return async (harness, profileId, abortSignal) => {
+        const profile = loadConfig(NO_PROJECT_ROOT).global.credential_profiles.find((entry) => entry.harness_id === harness && entry.profile_id === profileId);
+        if (!profile)
+            return null;
+        const adapter = getAdapter(harness);
+        if (!adapter?.probeCredentialProfile)
+            return null;
+        return adapter.probeCredentialProfile(profile, abortSignal);
+    };
+}
+export function resolveSetupLoginRunnerPath(moduleUrl = import.meta.url, pathExists = existsSync) {
+    const directory = dirname(fileURLToPath(moduleUrl));
+    const bundled = resolve(directory, "setup-login-runner.cjs");
+    return pathExists(bundled) ? bundled : resolve(directory, "setup-login-runner.js");
+}
+export function waitWithAbort(ms, controller, sleep) {
+    if (controller.signal.aborted)
+        return Promise.reject(controller.signal.reason);
+    return new Promise((resolveWait, rejectWait) => {
+        let settled = false;
+        const settle = (task) => {
+            if (settled)
+                return;
+            settled = true;
+            controller.signal.removeEventListener("abort", onAbort);
+            task();
+        };
+        const onAbort = () => settle(() => rejectWait(controller.signal.reason instanceof Error
+            ? controller.signal.reason
+            : new Error("setup operation aborted")));
+        controller.signal.addEventListener("abort", onAbort, { once: true });
+        sleep(ms).then(() => settle(resolveWait), (error) => settle(() => rejectWait(error)));
+    });
+}
+export function withAbortAndTimeout(operation, controller, timeoutMs, label) {
+    if (controller.signal.aborted)
+        return Promise.reject(controller.signal.reason);
+    return new Promise((resolveOperation, rejectOperation) => {
+        let settled = false;
+        const settle = (task) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            controller.signal.removeEventListener("abort", onAbort);
+            task();
+        };
+        const onAbort = () => settle(() => rejectOperation(controller.signal.reason instanceof Error
+            ? controller.signal.reason
+            : new Error(`${label} aborted`)));
+        const timer = setTimeout(() => {
+            const error = Object.assign(new Error(`${label} timed out after ${timeoutMs / 1000}s`), {
+                code: "setup_timeout",
+            });
+            controller.abort(error);
+        }, timeoutMs);
+        timer.unref();
+        controller.signal.addEventListener("abort", onAbort, { once: true });
+        operation().then((value) => settle(() => resolveOperation(value)), (error) => settle(() => rejectOperation(error)));
+    });
+}
+export function processGroupFromJob(job) {
+    if (!job.execution)
+        return null;
+    try {
+        return parseProcessGroupHandle(job.execution.processGroup);
+    }
+    catch {
+        return null;
+    }
+}
+export function stateMatchesDurableExecution(job, state) {
+    return (job.execution?.executionId === state.executionId &&
+        job.execution.commandDigest === state.commandDigest &&
+        job.execution.manifestDigest === state.manifestDigest &&
+        job.execution.observedAt === state.observedAt &&
+        JSON.stringify(job.execution.processGroup) === JSON.stringify(state.processGroup));
+}
+export function shellQuote(value) {
+    return `'${value.replaceAll("'", `'"'"'`)}'`;
+}
+//# sourceMappingURL=setup-job-support.js.map

package/dist/setup-job-support.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-job-support.js","sourceRoot":"","sources":["../src/setup-job-support.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EACL,uBAAuB,GAGxB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAMrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAGpD,MAAM,eAAe,GAAG,iBAAiB,EAAE,CAAC;AAO5C,MAAM,CAAC,MAAM,cAAc,GAAqD;IAC9E,KAAK,EAAE;QACL,QAAQ,EAAE,2CAA2C;QACrD,IAAI,EAAE,mIAAmI;KAC1I;IACD,MAAM,EAAE;QACN,QAAQ,EAAE,gDAAgD;QAC1D,IAAI,EAAE,yIAAyI;KAChJ;IACD,MAAM,EAAE;QACN,QAAQ,EAAE,yDAAyD;QACnE,IAAI,EAAE,mDAAmD;KAC1D;CACF,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAmC,EACnC,SAA6B;IAE7B,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QAChD,MAAM,MAAM,CAAC,MAAM,CACjB,IAAI,KAAK,CACP,YAAY,OAAO,kFAAkF,CACtG,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,IAAI,CACzE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,KAAK,OAAO,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,CAC1E,CAAC;IACF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,MAAM,CAAC,MAAM,CACjB,IAAI,KAAK,CACP,0BAA0B,SAAS,kBAAkB,OAAO,oFAAoF,CACjJ,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,uBAAuB,SAAS,eAAe,CAAC,EAAE;YAC9E,MAAM,EAAE,GAAG;SACZ,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,CAAC,eAAe,KAAK,kBAAkB,EAAE,CAAC;QACnD,MAAM,MAAM,CAAC,MAAM,CACjB,IAAI,KAAK,CACP,uBAAuB,SAAS,QAAQ,OAAO,CAAC,eAAe,uFAAuF,CACvJ,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GACb,OAAO,KAAK,QAAQ;QAClB,CAAC,CAAC,yBAAyB,CAAC,OAAO,CAAC,iBAAiB,IAAI,EAAE,CAAC;QAC5D,CAAC,CAAC,yBAAyB,CAAC,OAAO,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;IACjE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AAClC,CAAC;AAED;kFACkF;AAClF,MAAM,UAAU,kBAAkB,CAChC,UAA2D;IAM3D,OAAO,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE;QAC/C,MAAM,OAAO,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,IAAI,CACzE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,KAAK,OAAO,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,CAC1E,CAAC;QACF,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,CAAC,OAAO,EAAE,sBAAsB;YAAE,OAAO,IAAI,CAAC;QAClD,OAAO,OAAO,CAAC,sBAAsB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC9D,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,YAAoB,MAAM,CAAC,IAAI,CAAC,GAAG,EACnC,aAAwC,UAAU;IAElD,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,EAAE,wBAAwB,CAAC,CAAC;IAC7D,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,EAAU,EACV,UAA2B,EAC3B,KAAoC;IAEpC,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/E,OAAO,IAAI,OAAO,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,EAAE;QAC7C,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,IAAgB,EAAE,EAAE;YAClC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,UAAU,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACxD,IAAI,EAAE,CAAC;QACT,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,GAAG,EAAE,CACnB,MAAM,CAAC,GAAG,EAAE,CACV,UAAU,CACR,UAAU,CAAC,MAAM,CAAC,MAAM,YAAY,KAAK;YACvC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM;YAC1B,CAAC,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CACzC,CACF,CAAC;QACJ,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CACZ,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,EACzB,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAC3C,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,SAA2B,EAC3B,UAA2B,EAC3B,SAAiB,EACjB,KAAa;IAEb,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/E,OAAO,IAAI,OAAO,CAAC,CAAC,gBAAgB,EAAE,eAAe,EAAE,EAAE;QACvD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,IAAgB,EAAE,EAAE;YAClC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,UAAU,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACxD,IAAI,EAAE,CAAC;QACT,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,GAAG,EAAE,CACnB,MAAM,CAAC,GAAG,EAAE,CACV,eAAe,CACb,UAAU,CAAC,MAAM,CAAC,MAAM,YAAY,KAAK;YACvC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM;YAC1B,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,KAAK,UAAU,CAAC,CAClC,CACF,CAAC;QACJ,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,SAAS,GAAG,IAAI,GAAG,CAAC,EAAE;gBACtF,IAAI,EAAE,eAAe;aACtB,CAAC,CAAC;YACH,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC,EAAE,SAAS,CAAC,CAAC;QACd,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,SAAS,EAAE,CAAC,IAAI,CACd,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAChD,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAChD,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAoB;IACtD,IAAI,CAAC,GAAG,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,CAAC;QACH,OAAO,uBAAuB,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,GAAoB,EACpB,KAA4B;IAE5B,OAAO,CACL,GAAG,CAAC,SAAS,EAAE,WAAW,KAAK,KAAK,CAAC,WAAW;QAChD,GAAG,CAAC,SAAS,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa;QACnD,GAAG,CAAC,SAAS,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc;QACrD,GAAG,CAAC,SAAS,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;QAC7C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,CAClF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC;AAC/C,CAAC"}

package/dist/setup-jobs.d.ts

@@ -1,28 +1,443 @@
-import { type ControlSetupJob } from "@claudexor/schema";
-/** Native login command for a harness (null = API-key refs only). Single
- * source for both the setup-job Terminal handoff and `claudexor auth login`. */
-export declare function nativeLoginCommand(harness: string): string | null;
-/** Minimal doctor view the in-process verification needs (gateway statusAll). */
-export interface SetupDoctorStatus {
-    id: string;
-    status: string;
-    checks: {
-        id: string;
-        status: string;
-    }[];
-    reasons?: string[];
-}
+import { spawn, type ChildProcess } from "node:child_process";
+import { ProcessGroupService } from "@claudexor/core";
+import { type AuthSourceReadiness, type AuthCapabilityBinding, type AuthCapabilityReceipt, type ControlHarnessSetupHarness, type CredentialProfileStatus, type ControlSetupJob, type ControlSetupJobListFilter } from "@claudexor/schema";
+import { SetupJobStore } from "./setup-job-store.js";
 export interface SetupJobManagerOptions {
-    /** Injectable doctor probe (tests); defaults to the real gateway statusAll. */
-    statusAll?: () => Promise<SetupDoctorStatus[]>;
-    /** Override the doctor phase timeout (tests). */
-    doctorTimeoutMs?: number;
+    rootDir?: string;
+    store?: SetupJobStore;
+    probeAuthSource?: (harness: string, source: "native_session", opts: {
+        fresh: true;
+        authPreference: "subscription";
+        abortSignal: AbortSignal;
+    }) => Promise<AuthSourceReadiness | null>;
+    /** INV-135 profile jobs verify the PROFILE's scoped store, never the default
+     * native session; the doctor probe is the verification truth (same contract
+     * as `claudexor profiles login`). */
+    probeCredentialProfile?: (harness: string, profileId: string, abortSignal: AbortSignal) => Promise<CredentialProfileStatus | null>;
+    authCapabilityVerifier?: {
+        prepare(input: {
+            attemptId: string;
+            harness: string;
+            requested: "subscription";
+            requiredRoute: "vendor_native";
+            requiredSource: "native_session";
+        }): {
+            binding: AuthCapabilityBinding;
+        };
+        verify(input: {
+            binding: AuthCapabilityBinding;
+            startedAt: string;
+            abortSignal?: AbortSignal;
+        }): Promise<AuthCapabilityReceipt>;
+        cleanup(attemptId: string): void;
+    };
+    onCredentialStateMayHaveChanged?: (harness: ControlHarnessSetupHarness) => void;
+    launcherTimeoutMs?: number;
+    loginTimeoutMs?: number;
+    verifyTimeoutMs?: number;
+    capabilityTimeoutMs?: number;
+    verifyPollMs?: number;
+    monitorPollMs?: number;
+    terminationGraceMs?: number;
+    platform?: NodeJS.Platform;
+    now?: () => Date;
+    sleep?: (ms: number) => Promise<void>;
+    spawn?: typeof spawn;
+    openTerminal?: (scriptPath: string) => ChildProcess;
+    processGroups?: ProcessGroupService;
+    runnerPath?: string;
+    nodePath?: string;
 }
 export declare function createSetupJobManager(opts?: SetupJobManagerOptions): {
-    create(input: unknown): ControlSetupJob;
-    confirm(input: unknown): ControlSetupJob;
-    list(): ControlSetupJob[];
+    start: () => Promise<void>;
+    beginDrain: () => void;
+    shutdown: () => Promise<void>;
+    create(input: unknown, idempotency?: {
+        key: string;
+        client: string;
+    }): ControlSetupJob;
+    list(filter?: ControlSetupJobListFilter): ControlSetupJob[];
     status(input: unknown): ControlSetupJob;
-    cancel(input: unknown): ControlSetupJob;
+    snapshot(input: unknown): {
+        cursor: string;
+        sequence: number;
+        job: {
+            message: string;
+            harness: "cursor" | "codex" | "claude";
+            startedAt: string | null;
+            state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "queued" | "succeeded" | "timed_out" | "waiting_for_input" | "not_supported";
+            profileId: string | null;
+            command: string | null;
+            createdAt: string;
+            jobId: string;
+            phase: "completed" | "preparing" | "launching" | "awaiting_user" | "verifying" | "cancelling";
+            finishedAt: string | null;
+            action: "login";
+            guideUrl: string | null;
+            outcome?: {
+                reason: "completed" | "interrupted_unknown" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "interrupted" | "termination_unconfirmed";
+                exitCode?: number | null | undefined;
+                signal?: string | null | undefined;
+            } | undefined;
+            execution?: {
+                observedAt: string;
+                commandDigest: string;
+                executionId: string;
+                manifestDigest: string;
+                processGroup: {
+                    schemaVersion: 1;
+                    pgid: number;
+                    leader: {
+                        status: "known";
+                        source: "procfs_stat" | "proc_pidinfo";
+                        pid: number;
+                        platform: "linux" | "darwin";
+                        startToken: string;
+                        processGroupId: number;
+                    };
+                };
+                permitIssuedAt?: string | undefined;
+            } | undefined;
+            deadlineAt?: string | undefined;
+            authCapability?: {
+                attemptId: string;
+                challengeDigest: string;
+                requestDigest: string;
+                disclosure: {
+                    schemaVersion: 1;
+                    protocolVersion: 1;
+                    harness: string;
+                    requested: "auto" | "subscription" | "api_key";
+                    requiredRoute: "local" | "vendor_native" | "managed_api_key";
+                    requiredSource: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                    networkScope: "selected_harness_only";
+                    billingKnowledge: "unknown" | "proven_zero" | "subscription_entitlement" | "metered";
+                    incrementalCostKnowledge: "exact" | "unknown" | "estimated";
+                    mayConsumeQuota: boolean;
+                    generatedAt: string;
+                };
+                state: "disclosed";
+            } | {
+                attemptId: string;
+                startedAt: string;
+                challengeDigest: string;
+                requestDigest: string;
+                disclosure: {
+                    schemaVersion: 1;
+                    protocolVersion: 1;
+                    harness: string;
+                    requested: "auto" | "subscription" | "api_key";
+                    requiredRoute: "local" | "vendor_native" | "managed_api_key";
+                    requiredSource: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                    networkScope: "selected_harness_only";
+                    billingKnowledge: "unknown" | "proven_zero" | "subscription_entitlement" | "metered";
+                    incrementalCostKnowledge: "exact" | "unknown" | "estimated";
+                    mayConsumeQuota: boolean;
+                    generatedAt: string;
+                };
+                state: "running";
+            } | {
+                attemptId: string;
+                startedAt: string;
+                completedAt: string;
+                challengeDigest: string;
+                requestDigest: string;
+                disclosure: {
+                    schemaVersion: 1;
+                    protocolVersion: 1;
+                    harness: string;
+                    requested: "auto" | "subscription" | "api_key";
+                    requiredRoute: "local" | "vendor_native" | "managed_api_key";
+                    requiredSource: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                    networkScope: "selected_harness_only";
+                    billingKnowledge: "unknown" | "proven_zero" | "subscription_entitlement" | "metered";
+                    incrementalCostKnowledge: "exact" | "unknown" | "estimated";
+                    mayConsumeQuota: boolean;
+                    generatedAt: string;
+                };
+                state: "completed";
+                receipt: {
+                    availability: "unknown" | "available" | "unavailable";
+                    verification: "passed" | "failed" | "not_run";
+                    harness: string;
+                    requested: "auto" | "subscription" | "api_key";
+                    requiredRoute: "local" | "vendor_native" | "managed_api_key";
+                    requiredSource: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                    billingKnowledge: "unknown" | "proven_zero" | "subscription_entitlement" | "metered";
+                    receiptId: string;
+                    attemptId: string;
+                    effective: "local" | "vendor_native" | "managed_api_key" | null;
+                    effectiveSource: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null;
+                    selectionReason: "harness_error" | "exact_requested_route" | "adapter_unavailable" | "request_mismatch" | "route_missing" | "route_mismatch" | "source_missing" | "source_mismatch" | "adapter_error" | "missing_completion" | "response_mismatch" | "scratch_mutated" | "protocol_violation" | "adapter_identity_mismatch" | "cancelled";
+                    costKnowledge: "exact" | "unknown" | "estimated";
+                    startedAt: string;
+                    completedAt: string;
+                    challengeDigest: string;
+                    requestDigest: string;
+                    responseDigest: string;
+                    streamDigest: string;
+                    scratchBeforeDigest: string;
+                    scratchAfterDigest: string;
+                    stream: {
+                        aborted: boolean;
+                        startedEvents: number;
+                        completedEvents: number;
+                        errorEvents: number;
+                        unexpectedToolEvents: number;
+                        interactionEvents: number;
+                        sessionMismatchEvents: number;
+                        eventsAfterCompleted: number;
+                    };
+                    evidenceRefs: string[];
+                    costUsd?: number | undefined;
+                };
+            } | {
+                attemptId: string;
+                startedAt: string;
+                challengeDigest: string;
+                requestDigest: string;
+                disclosure: {
+                    schemaVersion: 1;
+                    protocolVersion: 1;
+                    harness: string;
+                    requested: "auto" | "subscription" | "api_key";
+                    requiredRoute: "local" | "vendor_native" | "managed_api_key";
+                    requiredSource: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                    networkScope: "selected_harness_only";
+                    billingKnowledge: "unknown" | "proven_zero" | "subscription_entitlement" | "metered";
+                    incrementalCostKnowledge: "exact" | "unknown" | "estimated";
+                    mayConsumeQuota: boolean;
+                    generatedAt: string;
+                };
+                state: "interrupted_unknown";
+                interruptedAt: string;
+            } | undefined;
+            authorization?: {
+                args: string[];
+                commandDigest: string;
+                executionId: string;
+                manifestDigest: string;
+                executable: {
+                    sha256: string;
+                    mode: number;
+                    realpath: string;
+                    size: number;
+                    device: string;
+                    inode: string;
+                };
+            } | undefined;
+            nativeCommand?: {
+                commandDigest: string;
+                finishedAt: string;
+                executionId: string;
+                manifestDigest: string;
+                permitIssuedAt: string | null;
+                commandStarted: boolean;
+                exitCode: number | null;
+                signal: string | null;
+                errorCode?: "permit_timeout" | "spawn_failed" | undefined;
+            } | undefined;
+            terminationReconciliation?: {
+                status: "empty";
+                observedAt: string;
+            } | undefined;
+        };
+    };
+    events(input: unknown): {
+        message: string;
+        cursor: string;
+        state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "queued" | "succeeded" | "timed_out" | "waiting_for_input" | "not_supported";
+        kind: "status";
+        time: string;
+        jobId: string;
+        previousCursor: string | null;
+        sequence: number;
+        job: {
+            message: string;
+            harness: "cursor" | "codex" | "claude";
+            startedAt: string | null;
+            state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "queued" | "succeeded" | "timed_out" | "waiting_for_input" | "not_supported";
+            profileId: string | null;
+            command: string | null;
+            createdAt: string;
+            jobId: string;
+            phase: "completed" | "preparing" | "launching" | "awaiting_user" | "verifying" | "cancelling";
+            finishedAt: string | null;
+            action: "login";
+            guideUrl: string | null;
+            outcome?: {
+                reason: "completed" | "interrupted_unknown" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "interrupted" | "termination_unconfirmed";
+                exitCode?: number | null | undefined;
+                signal?: string | null | undefined;
+            } | undefined;
+            execution?: {
+                observedAt: string;
+                commandDigest: string;
+                executionId: string;
+                manifestDigest: string;
+                processGroup: {
+                    schemaVersion: 1;
+                    pgid: number;
+                    leader: {
+                        status: "known";
+                        source: "procfs_stat" | "proc_pidinfo";
+                        pid: number;
+                        platform: "linux" | "darwin";
+                        startToken: string;
+                        processGroupId: number;
+                    };
+                };
+                permitIssuedAt?: string | undefined;
+            } | undefined;
+            deadlineAt?: string | undefined;
+            authCapability?: {
+                attemptId: string;
+                challengeDigest: string;
+                requestDigest: string;
+                disclosure: {
+                    schemaVersion: 1;
+                    protocolVersion: 1;
+                    harness: string;
+                    requested: "auto" | "subscription" | "api_key";
+                    requiredRoute: "local" | "vendor_native" | "managed_api_key";
+                    requiredSource: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                    networkScope: "selected_harness_only";
+                    billingKnowledge: "unknown" | "proven_zero" | "subscription_entitlement" | "metered";
+                    incrementalCostKnowledge: "exact" | "unknown" | "estimated";
+                    mayConsumeQuota: boolean;
+                    generatedAt: string;
+                };
+                state: "disclosed";
+            } | {
+                attemptId: string;
+                startedAt: string;
+                challengeDigest: string;
+                requestDigest: string;
+                disclosure: {
+                    schemaVersion: 1;
+                    protocolVersion: 1;
+                    harness: string;
+                    requested: "auto" | "subscription" | "api_key";
+                    requiredRoute: "local" | "vendor_native" | "managed_api_key";
+                    requiredSource: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                    networkScope: "selected_harness_only";
+                    billingKnowledge: "unknown" | "proven_zero" | "subscription_entitlement" | "metered";
+                    incrementalCostKnowledge: "exact" | "unknown" | "estimated";
+                    mayConsumeQuota: boolean;
+                    generatedAt: string;
+                };
+                state: "running";
+            } | {
+                attemptId: string;
+                startedAt: string;
+                completedAt: string;
+                challengeDigest: string;
+                requestDigest: string;
+                disclosure: {
+                    schemaVersion: 1;
+                    protocolVersion: 1;
+                    harness: string;
+                    requested: "auto" | "subscription" | "api_key";
+                    requiredRoute: "local" | "vendor_native" | "managed_api_key";
+                    requiredSource: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                    networkScope: "selected_harness_only";
+                    billingKnowledge: "unknown" | "proven_zero" | "subscription_entitlement" | "metered";
+                    incrementalCostKnowledge: "exact" | "unknown" | "estimated";
+                    mayConsumeQuota: boolean;
+                    generatedAt: string;
+                };
+                state: "completed";
+                receipt: {
+                    availability: "unknown" | "available" | "unavailable";
+                    verification: "passed" | "failed" | "not_run";
+                    harness: string;
+                    requested: "auto" | "subscription" | "api_key";
+                    requiredRoute: "local" | "vendor_native" | "managed_api_key";
+                    requiredSource: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                    billingKnowledge: "unknown" | "proven_zero" | "subscription_entitlement" | "metered";
+                    receiptId: string;
+                    attemptId: string;
+                    effective: "local" | "vendor_native" | "managed_api_key" | null;
+                    effectiveSource: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null;
+                    selectionReason: "harness_error" | "exact_requested_route" | "adapter_unavailable" | "request_mismatch" | "route_missing" | "route_mismatch" | "source_missing" | "source_mismatch" | "adapter_error" | "missing_completion" | "response_mismatch" | "scratch_mutated" | "protocol_violation" | "adapter_identity_mismatch" | "cancelled";
+                    costKnowledge: "exact" | "unknown" | "estimated";
+                    startedAt: string;
+                    completedAt: string;
+                    challengeDigest: string;
+                    requestDigest: string;
+                    responseDigest: string;
+                    streamDigest: string;
+                    scratchBeforeDigest: string;
+                    scratchAfterDigest: string;
+                    stream: {
+                        aborted: boolean;
+                        startedEvents: number;
+                        completedEvents: number;
+                        errorEvents: number;
+                        unexpectedToolEvents: number;
+                        interactionEvents: number;
+                        sessionMismatchEvents: number;
+                        eventsAfterCompleted: number;
+                    };
+                    evidenceRefs: string[];
+                    costUsd?: number | undefined;
+                };
+            } | {
+                attemptId: string;
+                startedAt: string;
+                challengeDigest: string;
+                requestDigest: string;
+                disclosure: {
+                    schemaVersion: 1;
+                    protocolVersion: 1;
+                    harness: string;
+                    requested: "auto" | "subscription" | "api_key";
+                    requiredRoute: "local" | "vendor_native" | "managed_api_key";
+                    requiredSource: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                    networkScope: "selected_harness_only";
+                    billingKnowledge: "unknown" | "proven_zero" | "subscription_entitlement" | "metered";
+                    incrementalCostKnowledge: "exact" | "unknown" | "estimated";
+                    mayConsumeQuota: boolean;
+                    generatedAt: string;
+                };
+                state: "interrupted_unknown";
+                interruptedAt: string;
+            } | undefined;
+            authorization?: {
+                args: string[];
+                commandDigest: string;
+                executionId: string;
+                manifestDigest: string;
+                executable: {
+                    sha256: string;
+                    mode: number;
+                    realpath: string;
+                    size: number;
+                    device: string;
+                    inode: string;
+                };
+            } | undefined;
+            nativeCommand?: {
+                commandDigest: string;
+                finishedAt: string;
+                executionId: string;
+                manifestDigest: string;
+                permitIssuedAt: string | null;
+                commandStarted: boolean;
+                exitCode: number | null;
+                signal: string | null;
+                errorCode?: "permit_timeout" | "spawn_failed" | undefined;
+            } | undefined;
+            terminationReconciliation?: {
+                status: "empty";
+                observedAt: string;
+            } | undefined;
+        };
+    }[];
+    cancel(input: unknown): Promise<ControlSetupJob>;
+    reconcile(input: unknown): ControlSetupJob;
+    extend(input: unknown): ControlSetupJob;
+    _store: SetupJobStore;
+    _supervisorHealth: () => import("./setup-supervisor.js").SetupSupervisorHealth;
 };
 //# sourceMappingURL=setup-jobs.d.ts.map

package/dist/setup-jobs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"setup-jobs.d.ts","sourceRoot":"","sources":["../src/setup-jobs.ts"],"names":[],"mappings":"AAOA,OAAO,EAA4C,KAAK,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAwDnG;gFACgF;AAChF,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAEjE;AAYD,iFAAiF;AACjF,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACzC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,+EAA+E;IAC/E,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAC/C,iDAAiD;IACjD,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,wBAAgB,qBAAqB,CAAC,IAAI,GAAE,sBAA2B;kBA4PrD,OAAO,GAAG,eAAe;mBAkFxB,OAAO,GAAG,eAAe;YAkBhC,eAAe,EAAE;kBAIX,OAAO,GAAG,eAAe;kBAQzB,OAAO,GAAG,eAAe;EAwB1C"}
+{"version":3,"file":"setup-jobs.d.ts","sourceRoot":"","sources":["../src/setup-jobs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAI9D,OAAO,EAEL,mBAAmB,EAGpB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,0BAA0B,EAE/B,KAAK,uBAAuB,EAE5B,KAAK,eAAe,EACpB,KAAK,yBAAyB,EAC/B,MAAM,mBAAmB,CAAC;AAe3B,OAAO,EAAuB,aAAa,EAAyB,MAAM,sBAAsB,CAAC;AAqBjG,MAAM,WAAW,sBAAsB;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,eAAe,CAAC,EAAE,CAChB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,gBAAgB,EACxB,IAAI,EAAE;QAAE,KAAK,EAAE,IAAI,CAAC;QAAC,cAAc,EAAE,cAAc,CAAC;QAAC,WAAW,EAAE,WAAW,CAAA;KAAE,KAC5E,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;IACzC;;yCAEqC;IACrC,sBAAsB,CAAC,EAAE,CACvB,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,WAAW,KACrB,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAC;IAC7C,sBAAsB,CAAC,EAAE;QACvB,OAAO,CAAC,KAAK,EAAE;YACb,SAAS,EAAE,MAAM,CAAC;YAClB,OAAO,EAAE,MAAM,CAAC;YAChB,SAAS,EAAE,cAAc,CAAC;YAC1B,aAAa,EAAE,eAAe,CAAC;YAC/B,cAAc,EAAE,gBAAgB,CAAC;SAClC,GAAG;YAAE,OAAO,EAAE,qBAAqB,CAAA;SAAE,CAAC;QACvC,MAAM,CAAC,KAAK,EAAE;YACZ,OAAO,EAAE,qBAAqB,CAAC;YAC/B,SAAS,EAAE,MAAM,CAAC;YAClB,WAAW,CAAC,EAAE,WAAW,CAAC;SAC3B,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;QACnC,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;KAClC,CAAC;IACF,+BAA+B,CAAC,EAAE,CAAC,OAAO,EAAE,0BAA0B,KAAK,IAAI,CAAC;IAChF,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,YAAY,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,YAAY,CAAC;IACpD,aAAa,CAAC,EAAE,mBAAmB,CAAC;IACpC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AACD,wBAAgB,qBAAqB,CAAC,IAAI,GAAE,sBAA2B;;sBA44B9C,IAAI;oBAGN,OAAO,CAAC,IAAI,CAAC;kBAqDlB,OAAO,gBAAgB;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,eAAe;kBAiFxE,yBAAyB,GAAG,eAAe,EAAE;kBAG7C,OAAO,GAAG,eAAe;oBAIvB,OAAO;;;;;;;;;;;;;;;;mBA+Dq6vR,CAAC;;wBAAqU,CAAC;sBAA+C,CAAC;;qBAAqE,CAAC;;;;;;;;;;;;;;;;;8BAAskB,CAAC;;sBAA+D,CAAC;0BAA4C,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAAgsJ,CAAC;;;;;;;;;;;;;;;;;;;;;;;yBAAghC,CAAC;;;;;;;;;;;;;;yBAA0Z,CAAC;;;;;;;;;yBAAyT,CAAC;;qCAAyG,CAAC;;;;;;kBA3Dhj/R,OAAO;;;;;;;;;;;;;;;;;;;;;;mBA2D6lzK,CAAC;;wBAAqU,CAAC;sBAA+C,CAAC;;qBAAqE,CAAC;;;;;;;;;;;;;;;;;8BAAskB,CAAC;;sBAA+D,CAAC;0BAA4C,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAAgsJ,CAAC;;;;;;;;;;;;;;;;;;;;;;;yBAAghC,CAAC;;;;;;;;;;;;;;yBAA0Z,CAAC;;;;;;;;;yBAAyT,CAAC;;qCAAyG,CAAC;;;;;;kBArDhuiL,OAAO,GAAG,OAAO,CAAC,eAAe,CAAC;qBAOrC,OAAO,GAAG,eAAe;kBAyB5B,OAAO,GAAG,eAAe;;;EAoB1C"}