@claudexor/cli 3.5.0 → 3.8.0

package/dist/setup-login-capability.d.ts

@@ -0,0 +1,37 @@
+import type { HarnessAdapter } from "@claudexor/core";
+import type { ControlSetupJobTransport, SetupLoginCapability, SetupTerminalTransportErrorCode } from "@claudexor/schema";
+import { type CodexLoginFlow, type NativeLoginSpec } from "./native-login.js";
+import { type TerminalTransportBackend, type TerminalTransportResolution } from "./setup-login-pty.js";
+export type SetupLoginCapabilityStatus = "ready" | "manifest_unsupported" | "vendor_binary_unavailable" | "terminal_transport_unavailable" | "terminal_transport_unsupported" | "terminal_transport_probe_failed";
+export interface SetupLoginCapabilityProjection {
+    status: SetupLoginCapabilityStatus;
+    backend: "direct" | TerminalTransportBackend | null;
+    capability: SetupLoginCapability | null;
+    detail: string;
+    errorCode?: Exclude<SetupTerminalTransportErrorCode, "terminal_transport_failed">;
+}
+type ResolveTerminalTransport = (childBinary: string, childArgs: readonly string[]) => Promise<TerminalTransportResolution>;
+export interface SetupLoginCapabilityOptions {
+    transport?: ControlSetupJobTransport;
+    loginFlow?: CodexLoginFlow;
+    getAdapter?: (harness: string) => HarnessAdapter | undefined;
+    resolveLoginSpec?: (harness: string, loginFlow?: CodexLoginFlow) => NativeLoginSpec | null;
+    resolveTerminalTransport?: ResolveTerminalTransport;
+}
+/**
+ * One effective setup-login projector for status, catalog, and create
+ * admission. Static manifest input is consulted without vendor discovery;
+ * exact vendor binary readiness comes from nativeLoginSpec; terminal stdin
+ * alone reaches the shared bounded PTY/ConPTY resolver.
+ */
+export declare function projectSetupLoginCapability(harness: string, options?: SetupLoginCapabilityOptions): Promise<SetupLoginCapabilityProjection>;
+/** Thin public wire: current producers always emit this null/object value. */
+export declare function effectiveSetupLoginCapability(harness: string, options?: Omit<SetupLoginCapabilityOptions, "transport">): Promise<SetupLoginCapability | null>;
+/**
+ * Map only pre-job daemon terminal failures into the frozen request-problem
+ * contract. Manifest/vendor misses remain the manager's existing durable
+ * not-supported result; client_pty projections are ready and never enter here.
+ */
+export declare function assertSetupLoginAdmission(projection: SetupLoginCapabilityProjection): void;
+export {};
+//# sourceMappingURL=setup-login-capability.d.ts.map

package/dist/setup-login-capability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-login-capability.d.ts","sourceRoot":"","sources":["../src/setup-login-capability.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,KAAK,EACV,wBAAwB,EACxB,oBAAoB,EACpB,+BAA+B,EAChC,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAmB,KAAK,cAAc,EAAE,KAAK,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAC/F,OAAO,EAEL,KAAK,wBAAwB,EAC7B,KAAK,2BAA2B,EACjC,MAAM,sBAAsB,CAAC;AAE9B,MAAM,MAAM,0BAA0B,GAClC,OAAO,GACP,sBAAsB,GACtB,2BAA2B,GAC3B,gCAAgC,GAChC,gCAAgC,GAChC,iCAAiC,CAAC;AAEtC,MAAM,WAAW,8BAA8B;IAC7C,MAAM,EAAE,0BAA0B,CAAC;IACnC,OAAO,EAAE,QAAQ,GAAG,wBAAwB,GAAG,IAAI,CAAC;IACpD,UAAU,EAAE,oBAAoB,GAAG,IAAI,CAAC;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,OAAO,CAAC,+BAA+B,EAAE,2BAA2B,CAAC,CAAC;CACnF;AAED,KAAK,wBAAwB,GAAG,CAC9B,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,SAAS,MAAM,EAAE,KACzB,OAAO,CAAC,2BAA2B,CAAC,CAAC;AAE1C,MAAM,WAAW,2BAA2B;IAC1C,SAAS,CAAC,EAAE,wBAAwB,CAAC;IACrC,SAAS,CAAC,EAAE,cAAc,CAAC;IAC3B,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,cAAc,GAAG,SAAS,CAAC;IAC7D,gBAAgB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,cAAc,KAAK,eAAe,GAAG,IAAI,CAAC;IAC3F,wBAAwB,CAAC,EAAE,wBAAwB,CAAC;CACrD;AAKD;;;;;GAKG;AACH,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,2BAAgC,GACxC,OAAO,CAAC,8BAA8B,CAAC,CAiEzC;AAED,8EAA8E;AAC9E,wBAAsB,6BAA6B,CACjD,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,IAAI,CAAC,2BAA2B,EAAE,WAAW,CAAM,GAC3D,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAGtC;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,8BAA8B,GAAG,IAAI,CAe1F"}

package/dist/setup-login-capability.js

@@ -0,0 +1,96 @@
+import { buildRegistry } from "./registry.js";
+import { nativeLoginSpec } from "./native-login.js";
+import { resolvePtyWrappedCommand, } from "./setup-login-pty.js";
+const EXTERNAL_TERMINAL = { mode: "external_terminal" };
+const IN_APP = { mode: "in_app" };
+/**
+ * One effective setup-login projector for status, catalog, and create
+ * admission. Static manifest input is consulted without vendor discovery;
+ * exact vendor binary readiness comes from nativeLoginSpec; terminal stdin
+ * alone reaches the shared bounded PTY/ConPTY resolver.
+ */
+export async function projectSetupLoginCapability(harness, options = {}) {
+    const getAdapter = options.getAdapter ?? ((id) => buildRegistry({ includeFakes: false }).get(id));
+    const declaration = getAdapter(harness)?.capabilityProfile?.auth.managed_login;
+    if (!declaration) {
+        return {
+            status: "manifest_unsupported",
+            backend: null,
+            capability: null,
+            detail: "the harness declares no managed subscription login",
+        };
+    }
+    const resolveLogin = options.resolveLoginSpec ??
+        ((id, flow) => nativeLoginSpec(id, undefined, flow));
+    const spec = resolveLogin(harness, options.loginFlow);
+    if (!spec) {
+        return {
+            status: "vendor_binary_unavailable",
+            backend: null,
+            capability: null,
+            detail: "the managed vendor login command is unavailable on this host",
+        };
+    }
+    // client_pty is the explicit external-terminal fallback. It still requires
+    // an exact vendor command, but never asks the daemon to prove a PTY backend.
+    if (options.transport === "client_pty") {
+        return {
+            status: "ready",
+            backend: null,
+            capability: EXTERNAL_TERMINAL,
+            detail: "the exact vendor login command is ready for external-terminal attachment",
+        };
+    }
+    if (declaration.stdin !== "terminal") {
+        return {
+            status: "ready",
+            backend: "direct",
+            capability: IN_APP,
+            detail: "the exact vendor login command is ready for daemon-hosted input",
+        };
+    }
+    const resolution = await (options.resolveTerminalTransport ?? resolvePtyWrappedCommand)(spec.binary, spec.args);
+    if (resolution.status === "ready") {
+        return {
+            status: "ready",
+            backend: resolution.backend,
+            capability: IN_APP,
+            detail: "the daemon terminal transport passed its bounded capability probe",
+        };
+    }
+    return {
+        status: `terminal_transport_${resolution.status}`,
+        backend: resolution.backend,
+        capability: EXTERNAL_TERMINAL,
+        detail: resolution.detail,
+        errorCode: resolution.errorCode,
+    };
+}
+/** Thin public wire: current producers always emit this null/object value. */
+export async function effectiveSetupLoginCapability(harness, options = {}) {
+    return (await projectSetupLoginCapability(harness, { ...options, transport: "daemon" }))
+        .capability;
+}
+/**
+ * Map only pre-job daemon terminal failures into the frozen request-problem
+ * contract. Manifest/vendor misses remain the manager's existing durable
+ * not-supported result; client_pty projections are ready and never enter here.
+ */
+export function assertSetupLoginAdmission(projection) {
+    if (!projection.errorCode)
+        return;
+    const probeFailed = projection.errorCode === "terminal_transport_probe_failed";
+    const fieldMessage = probeFailed
+        ? "Daemon-hosted terminal transport could not be verified; retry setup login or use the external terminal flow."
+        : "Daemon-hosted terminal transport is unavailable; use the external terminal flow.";
+    throw Object.assign(new Error(projection.detail), {
+        status: probeFailed ? 503 : 409,
+        code: projection.errorCode,
+        retryable: probeFailed,
+        fieldErrors: { "/transport": [fieldMessage] },
+        requiredActions: probeFailed
+            ? ["retry_setup_login", "use_external_terminal"]
+            : ["use_external_terminal"],
+    });
+}
+//# sourceMappingURL=setup-login-capability.js.map

package/dist/setup-login-capability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-login-capability.js","sourceRoot":"","sources":["../src/setup-login-capability.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,eAAe,EAA6C,MAAM,mBAAmB,CAAC;AAC/F,OAAO,EACL,wBAAwB,GAGzB,MAAM,sBAAsB,CAAC;AA+B9B,MAAM,iBAAiB,GAAyB,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC;AAC9E,MAAM,MAAM,GAAyB,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAExD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,OAAe,EACf,OAAO,GAAgC,EAAE;IAEzC,MAAM,UAAU,GACd,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,aAAa,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACzF,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,aAAa,CAAC;IAC/E,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO;YACL,MAAM,EAAE,sBAAsB;YAC9B,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,oDAAoD;SAC7D,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAChB,OAAO,CAAC,gBAAgB;QACxB,CAAC,CAAC,EAAU,EAAE,IAAqB,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;IAChF,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;YACL,MAAM,EAAE,2BAA2B;YACnC,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,8DAA8D;SACvE,CAAC;IACJ,CAAC;IAED,2EAA2E;IAC3E,6EAA6E;IAC7E,IAAI,OAAO,CAAC,SAAS,KAAK,YAAY,EAAE,CAAC;QACvC,OAAO;YACL,MAAM,EAAE,OAAO;YACf,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,iBAAiB;YAC7B,MAAM,EAAE,0EAA0E;SACnF,CAAC;IACJ,CAAC;IAED,IAAI,WAAW,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QACrC,OAAO;YACL,MAAM,EAAE,OAAO;YACf,OAAO,EAAE,QAAQ;YACjB,UAAU,EAAE,MAAM;YAClB,MAAM,EAAE,iEAAiE;SAC1E,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,wBAAwB,IAAI,wBAAwB,CAAC,CACrF,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,IAAI,CACV,CAAC;IACF,IAAI,UAAU,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAClC,OAAO;YACL,MAAM,EAAE,OAAO;YACf,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,UAAU,EAAE,MAAM;YAClB,MAAM,EAAE,mEAAmE;SAC5E,CAAC;IACJ,CAAC;IACD,OAAO;QACL,MAAM,EAAE,sBAAsB,UAAU,CAAC,MAAM,EAAE;QACjD,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,UAAU,EAAE,iBAAiB;QAC7B,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,SAAS,EAAE,UAAU,CAAC,SAAS;KAChC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,OAAe,EACf,OAAO,GAAmD,EAAE;IAE5D,OAAO,CAAC,MAAM,2BAA2B,CAAC,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;SACrF,UAAU,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,UAA0C;IAClF,IAAI,CAAC,UAAU,CAAC,SAAS;QAAE,OAAO;IAClC,MAAM,WAAW,GAAG,UAAU,CAAC,SAAS,KAAK,iCAAiC,CAAC;IAC/E,MAAM,YAAY,GAAG,WAAW;QAC9B,CAAC,CAAC,8GAA8G;QAChH,CAAC,CAAC,kFAAkF,CAAC;IACvF,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE;QAChD,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;QAC/B,IAAI,EAAE,UAAU,CAAC,SAAS;QAC1B,SAAS,EAAE,WAAW;QACtB,WAAW,EAAE,EAAE,YAAY,EAAE,CAAC,YAAY,CAAC,EAAE;QAC7C,eAAe,EAAE,WAAW;YAC1B,CAAC,CAAC,CAAC,mBAAmB,EAAE,uBAAuB,CAAC;YAChD,CAAC,CAAC,CAAC,uBAAuB,CAAC;KAC9B,CAAC,CAAC;AACL,CAAC"}

package/dist/setup-login-io.d.ts

@@ -27,7 +27,10 @@ export declare function watchLoginInput(manifest: SetupLoginManifest, child: Chi
  * (ptyStdin) is ECHOED by the terminal line discipline, so the pasted code
  * comes straight back out on the tee'd output — the tail must forget it
  * before any failure receipt is written (INV-062). */
-onDelivered?: (value: string) => void): () => void;
+options?: {
+    onDelivered?: (value: string) => void;
+    windowsConpty?: boolean;
+}): () => void;
 /** Ring buffer of the last OUTPUT_TAIL_BYTES of tee'd vendor output. */
 export declare function createTailBuffer(): {
     push(chunk: Buffer): void;

package/dist/setup-login-io.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"setup-login-io.d.ts","sourceRoot":"","sources":["../src/setup-login-io.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD,OAAO,EAGL,KAAK,kBAAkB,EACxB,MAAM,2BAA2B,CAAC;AAEnC,eAAO,MAAM,iBAAiB,OAAO,CAAC;AAEtC;;;;;;;GAOG;AAEH,eAAO,MAAM,cAAc,QACgD,CAAC;AAE5E,eAAO,MAAM,aAAa,QAAwC,CAAC;AAInE;;;0DAG0D;AAC1D,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,kBAAkB,EAC5B,KAAK,EAAE,YAAY,EACnB,GAAG,EAAE,MAAM,IAAI;AACf;;;sDAGsD;AACtD,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,GACpC,MAAM,IAAI,CA4BZ;AAED,wEAAwE;AACxE,wBAAgB,gBAAgB,IAAI;IAClC,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,IAAI,IAAI,MAAM,CAAC;IACf,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B,CA4CA;AAMD;;;gBAGgB;AAChB,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,UAAQ,GAAG,MAAM,CAqBnE"}
+{"version":3,"file":"setup-login-io.d.ts","sourceRoot":"","sources":["../src/setup-login-io.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD,OAAO,EAGL,KAAK,kBAAkB,EACxB,MAAM,2BAA2B,CAAC;AAEnC,eAAO,MAAM,iBAAiB,OAAO,CAAC;AAEtC;;;;;;;GAOG;AAEH,eAAO,MAAM,cAAc,QACgD,CAAC;AAE5E,eAAO,MAAM,aAAa,QAAwC,CAAC;AAInE;;;0DAG0D;AAC1D,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,kBAAkB,EAC5B,KAAK,EAAE,YAAY,EACnB,GAAG,EAAE,MAAM,IAAI;AACf;;;sDAGsD;AACtD,OAAO,GAAE;IACP,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACtC,aAAa,CAAC,EAAE,OAAO,CAAC;CACpB,GACL,MAAM,IAAI,CAmCZ;AAcD,wEAAwE;AACxE,wBAAgB,gBAAgB,IAAI;IAClC,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,IAAI,IAAI,MAAM,CAAC;IACf,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B,CA4CA;AAMD;;;gBAGgB;AAChB,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,UAAQ,GAAG,MAAM,CAqBnE"}

package/dist/setup-login-io.js

@@ -23,7 +23,7 @@ export function watchLoginInput(manifest, child, now,
  * (ptyStdin) is ECHOED by the terminal line discipline, so the pasted code
  * comes straight back out on the tee'd output — the tail must forget it
  * before any failure receipt is written (INV-062). */
-onDelivered) {
+options = {}) {
     let delivered = false;
     const timer = setInterval(() => {
         if (delivered || !manifest.inputPath || !child.stdin || child.stdin.destroyed)
@@ -32,9 +32,18 @@ onDelivered) {
         if (!input)
             return;
         delivered = true;
-        onDelivered?.(input.value);
+        options.onDelivered?.(input.value);
         try {
-            child.stdin.write(`${input.value}\n`);
+            if (options.windowsConpty) {
+                // Server-era ConPTY parsers have shipped bugs around chunked Win32
+                // input-mode sequences. Keep each complete KEY_EVENT_RECORD in its
+                // own pipe write instead of presenting one concatenated CSI stream.
+                for (const record of encodeWindowsConptyLine(input.value))
+                    child.stdin.write(record);
+            }
+            else {
+                child.stdin.write(`${input.value}\n`);
+            }
             // The secret has been handed to the vendor; what stays on disk is a
             // non-secret consumed marker, so the one-shot conflict check still
             // refuses a second submission while the code itself stops existing.
@@ -55,6 +64,16 @@ onDelivered) {
     void now;
     return () => clearInterval(timer);
 }
+function encodeWindowsConptyLine(value) {
+    const keyRecord = (virtualKey, scanCode, codeUnit, keyDown) => `\u001b[${virtualKey};${scanCode};${codeUnit};${keyDown};0;1_`;
+    const records = [];
+    for (let index = 0; index < value.length; index += 1) {
+        const codeUnit = value.charCodeAt(index);
+        records.push(keyRecord(231, 0, codeUnit, 1), keyRecord(231, 0, codeUnit, 0));
+    }
+    records.push(keyRecord(13, 28, 13, 1), keyRecord(13, 28, 13, 0));
+    return records;
+}
 /** Ring buffer of the last OUTPUT_TAIL_BYTES of tee'd vendor output. */
 export function createTailBuffer() {
     // Byte-accurate ring: keep the final OUTPUT_TAIL_BYTES RAW bytes, decode

package/dist/setup-login-io.js.map

@@ -1 +1 @@
-{"version":3,"file":"setup-login-io.js","sourceRoot":"","sources":["../src/setup-login-io.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EACL,iBAAiB,EACjB,oBAAoB,GAErB,MAAM,2BAA2B,CAAC;AAEnC,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAEtC;;;;;;;GAOG;AACH,4CAA4C;AAC5C,MAAM,CAAC,MAAM,cAAc,GACzB,yEAAyE,CAAC;AAC5E,4CAA4C;AAC5C,MAAM,CAAC,MAAM,aAAa,GAAG,qCAAqC,CAAC;AAEnE,MAAM,aAAa,GAAG,GAAG,CAAC;AAE1B;;;0DAG0D;AAC1D,MAAM,UAAU,eAAe,CAC7B,QAA4B,EAC5B,KAAmB,EACnB,GAAe;AACf;;;sDAGsD;AACtD,WAAqC;IAErC,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;QAC7B,IAAI,SAAS,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,SAAS;YAAE,OAAO;QACtF,MAAM,KAAK,GAAG,oBAAoB,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC7F,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,SAAS,GAAG,IAAI,CAAC;QACjB,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,CAAC;YACH,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;YACtC,oEAAoE;YACpE,mEAAmE;YACnE,oEAAoE;YACpE,iBAAiB,CAAC,QAAQ,CAAC,SAAS,EAAE;gBACpC,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,QAAQ,EAAE,IAAI;gBACd,WAAW,EAAE,KAAK,CAAC,WAAW;aAC/B,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,mEAAmE;YACnE,4BAA4B;QAC9B,CAAC;IACH,CAAC,EAAE,aAAa,CAAC,CAAC;IAClB,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAChB,KAAK,GAAG,CAAC;IACT,OAAO,GAAG,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;AACpC,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,gBAAgB;IAK9B,yEAAyE;IACzE,2EAA2E;IAC3E,6BAA6B;IAC7B,IAAI,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,wEAAwE;IACxE,iEAAiE;IACjE,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,yEAAyE;IACzE,2EAA2E;IAC3E,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,OAAO;QACL,MAAM,CAAC,KAAK;YACV,wEAAwE;YACxE,yEAAyE;YACzE,+CAA+C;YAC/C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC5B,IAAI,OAAO;oBAAE,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;QACD,IAAI,CAAC,KAAK;YACR,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;YAC9C,IAAI,QAAQ,CAAC,MAAM,GAAG,iBAAiB;gBAAE,UAAU,GAAG,IAAI,CAAC;YAC3D,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI;YACF,oEAAoE;YACpE,kEAAkE;YAClE,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,OAAO,KAAK,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAE,GAAG,WAAW,CAAC,KAAK,WAAW;gBAAE,KAAK,IAAI,CAAC,CAAC;YACvF,wEAAwE;YACxE,sEAAsE;YACtE,wEAAwE;YACxE,sEAAsE;YACtE,IAAI,IAAI,GAAG,IAAI;iBACZ,QAAQ,CAAC,KAAK,CAAC;iBACf,QAAQ,CAAC,MAAM,CAAC;iBAChB,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;iBAC3B,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;YAC9B,KAAK,MAAM,KAAK,IAAI,SAAS;gBAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC3E,OAAO,WAAW,CAAC,IAAI,EAAE,UAAU,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;QACpD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,0EAA0E;AAC1E,MAAM,YAAY,GAAG,wCAAwC,CAAC;AAE9D;;;gBAGgB;AAChB,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,SAAS,GAAG,KAAK;IACzD,MAAM,KAAK,GAAG,IAAI;SACf,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;SAC3B,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;SAC1B,OAAO,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IAC1C,yEAAyE;IACzE,0EAA0E;IAC1E,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACtC,kEAAkE;IAClE,qEAAqE;IACrE,4EAA4E;IAC5E,wEAAwE;IACxE,oEAAoE;IACpE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,iBAAiB,CAAC;IAC1D,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,iBAAiB,CAAC,CAAC,CAAC;IAC3E,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,KAAK,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAE,GAAG,WAAW,CAAC,KAAK,WAAW;QAAE,KAAK,IAAI,CAAC,CAAC;IACvF,IAAI,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,GAAG;QAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC/C,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;AACxB,CAAC"}
+{"version":3,"file":"setup-login-io.js","sourceRoot":"","sources":["../src/setup-login-io.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EACL,iBAAiB,EACjB,oBAAoB,GAErB,MAAM,2BAA2B,CAAC;AAEnC,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAEtC;;;;;;;GAOG;AACH,4CAA4C;AAC5C,MAAM,CAAC,MAAM,cAAc,GACzB,yEAAyE,CAAC;AAC5E,4CAA4C;AAC5C,MAAM,CAAC,MAAM,aAAa,GAAG,qCAAqC,CAAC;AAEnE,MAAM,aAAa,GAAG,GAAG,CAAC;AAE1B;;;0DAG0D;AAC1D,MAAM,UAAU,eAAe,CAC7B,QAA4B,EAC5B,KAAmB,EACnB,GAAe;AACf;;;sDAGsD;AACtD,OAAO,GAGH,EAAE;IAEN,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;QAC7B,IAAI,SAAS,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,SAAS;YAAE,OAAO;QACtF,MAAM,KAAK,GAAG,oBAAoB,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC7F,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,SAAS,GAAG,IAAI,CAAC;QACjB,OAAO,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,CAAC;YACH,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;gBAC1B,mEAAmE;gBACnE,mEAAmE;gBACnE,oEAAoE;gBACpE,KAAK,MAAM,MAAM,IAAI,uBAAuB,CAAC,KAAK,CAAC,KAAK,CAAC;oBAAE,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACvF,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;YACxC,CAAC;YACD,oEAAoE;YACpE,mEAAmE;YACnE,oEAAoE;YACpE,iBAAiB,CAAC,QAAQ,CAAC,SAAS,EAAE;gBACpC,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,QAAQ,EAAE,IAAI;gBACd,WAAW,EAAE,KAAK,CAAC,WAAW;aAC/B,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,mEAAmE;YACnE,4BAA4B;QAC9B,CAAC;IACH,CAAC,EAAE,aAAa,CAAC,CAAC;IAClB,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAChB,KAAK,GAAG,CAAC;IACT,OAAO,GAAG,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAa;IAC5C,MAAM,SAAS,GAAG,CAAC,UAAkB,EAAE,QAAgB,EAAE,QAAgB,EAAE,OAAc,EAAE,EAAE,CAC3F,UAAU,UAAU,IAAI,QAAQ,IAAI,QAAQ,IAAI,OAAO,OAAO,CAAC;IACjE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACzC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACjE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,gBAAgB;IAK9B,yEAAyE;IACzE,2EAA2E;IAC3E,6BAA6B;IAC7B,IAAI,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,wEAAwE;IACxE,iEAAiE;IACjE,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,yEAAyE;IACzE,2EAA2E;IAC3E,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,OAAO;QACL,MAAM,CAAC,KAAK;YACV,wEAAwE;YACxE,yEAAyE;YACzE,+CAA+C;YAC/C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC5B,IAAI,OAAO;oBAAE,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;QACD,IAAI,CAAC,KAAK;YACR,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;YAC9C,IAAI,QAAQ,CAAC,MAAM,GAAG,iBAAiB;gBAAE,UAAU,GAAG,IAAI,CAAC;YAC3D,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI;YACF,oEAAoE;YACpE,kEAAkE;YAClE,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,OAAO,KAAK,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAE,GAAG,WAAW,CAAC,KAAK,WAAW;gBAAE,KAAK,IAAI,CAAC,CAAC;YACvF,wEAAwE;YACxE,sEAAsE;YACtE,wEAAwE;YACxE,sEAAsE;YACtE,IAAI,IAAI,GAAG,IAAI;iBACZ,QAAQ,CAAC,KAAK,CAAC;iBACf,QAAQ,CAAC,MAAM,CAAC;iBAChB,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;iBAC3B,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;YAC9B,KAAK,MAAM,KAAK,IAAI,SAAS;gBAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC3E,OAAO,WAAW,CAAC,IAAI,EAAE,UAAU,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;QACpD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,0EAA0E;AAC1E,MAAM,YAAY,GAAG,wCAAwC,CAAC;AAE9D;;;gBAGgB;AAChB,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,SAAS,GAAG,KAAK;IACzD,MAAM,KAAK,GAAG,IAAI;SACf,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;SAC3B,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;SAC1B,OAAO,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IAC1C,yEAAyE;IACzE,0EAA0E;IAC1E,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACtC,kEAAkE;IAClE,qEAAqE;IACrE,4EAA4E;IAC5E,wEAAwE;IACxE,oEAAoE;IACpE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,iBAAiB,CAAC;IAC1D,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,iBAAiB,CAAC,CAAC,CAAC;IAC3E,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,KAAK,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAE,GAAG,WAAW,CAAC,KAAK,WAAW;QAAE,KAAK,IAAI,CAAC,CAAC;IACvF,IAAI,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,GAAG;QAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC/C,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;AACxB,CAAC"}

package/dist/setup-login-pty.d.ts

@@ -1,27 +1,69 @@
-/** Refusal when this host has no way to give a login a terminal. */
-export declare const PTY_UNAVAILABLE = "this sign-in needs a terminal on stdin and no terminal helper (expect, script) is available here; run the CLI login instead";
-/** Refusal when the sealed command cannot be carried to the helper verbatim. */
-export declare const PTY_UNQUOTABLE = "this sign-in command contains characters the terminal helper cannot carry unchanged; run the CLI login instead";
+import type { SetupTerminalTransportErrorCode } from "@claudexor/schema";
+export declare const CONPTY_HELPER_PROTOCOL = "claudexor-conpty-helper-v1";
+export declare const CONPTY_HELPER_ARCHITECTURE = "x64";
+export type TerminalTransportBackend = "expect" | "script" | "windows_conpty";
+type TerminalTransportSafeFailure = {
+    status: "unavailable";
+    backend: TerminalTransportBackend | null;
+    errorCode: Extract<SetupTerminalTransportErrorCode, "terminal_transport_unavailable">;
+    detail: string;
+} | {
+    status: "unsupported";
+    backend: TerminalTransportBackend;
+    errorCode: Extract<SetupTerminalTransportErrorCode, "terminal_transport_unsupported">;
+    detail: string;
+} | {
+    status: "probe_failed";
+    backend: TerminalTransportBackend;
+    errorCode: Extract<SetupTerminalTransportErrorCode, "terminal_transport_probe_failed">;
+    detail: string;
+};
+export type TerminalTransportResolution = {
+    status: "ready";
+    backend: TerminalTransportBackend;
+    command: {
+        binary: string;
+        args: string[];
+    };
+    /** ConPTY reserves helper stderr for bounded control frames. POSIX
+     * wrappers still carry vendor diagnostics there and must be teed. */
+    helperControlStderr: boolean;
+}
+/** Closed safe failures: detail never includes helper paths, child argv,
+ * environment, helper control numbers, or terminal output. */
+ | TerminalTransportSafeFailure;
+type ExecutableInspection = "missing" | "regular_executable" | "invalid";
+type ConptyProbeResult = "ready" | "unsupported" | "failed";
+export interface TerminalTransportResolverOptions {
+    platform?: NodeJS.Platform;
+    helperPath?: string;
+    inspectExecutable?: (path: string) => Promise<ExecutableInspection>;
+    probeConpty?: (path: string) => Promise<ConptyProbeResult>;
+    expectPath?: string;
+    scriptPath?: string;
+}
 /**
- * Wrap a login command that needs a real terminal on stdin.
+ * Resolve and wrap a login command that needs a real terminal on stdin.
  *
- * Proven by experiment on this platform pair (2026-08-16): BSD `script(1)`
- * calls `tcgetattr` on its OWN stdin and dies with "Operation not supported"
- * the moment that stdin is a pipe, which is exactly how a daemon-hosted runner
- * spawns it — so macOS cannot use it. `expect(1)`, which ships with macOS,
- * allocates the pty itself and relays plain pipes, and util-linux `script`
- * accepts non-tty stdio where `expect` is usually not installed. Probing for
- * the tool rather than branching on the platform therefore lands on the one
- * that works on both, with a typed refusal when neither exists.
- *
- * The command is passed to Tcl brace-quoted; a word containing a brace or a
- * backslash is REFUSED rather than escaped, because a mis-escaped word would
- * become a different command than the manifest digest sealed.
+ * This is the single host-capability and spawn-spec owner used by setup
+ * admission, status projection, and the worker immediately before spawn. A
+ * Windows helper is never reported ready from file presence: its bounded
+ * `--probe` must create and close an HPCON and return the exact protocol marker.
  */
-export declare function ptyWrappedCommand(binary: string, args: string[], exists?: (path: string) => boolean): {
-    binary: string;
-    args: string[];
-} | {
-    refusal: string;
+export declare function resolvePtyWrappedCommand(childBinary: string, childArgs: readonly string[], options?: TerminalTransportResolverOptions): Promise<TerminalTransportResolution>;
+export interface ConptyControlState {
+    started: boolean;
+    childPid: number | null;
+    error: {
+        phase: number;
+        code: number;
+    } | null;
+    malformed: boolean;
+}
+/** Bounded parser for helper-only stderr. It never returns raw bytes. */
+export declare function createConptyControlParser(limit?: number): {
+    push(chunk: Buffer): void;
+    finish(): ConptyControlState;
 };
+export {};
 //# sourceMappingURL=setup-login-pty.d.ts.map

package/dist/setup-login-pty.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"setup-login-pty.d.ts","sourceRoot":"","sources":["../src/setup-login-pty.ts"],"names":[],"mappings":"AAEA,oEAAoE;AACpE,eAAO,MAAM,eAAe,gIACmG,CAAC;AAEhI,gFAAgF;AAChF,eAAO,MAAM,cAAc,mHACuF,CAAC;AAEnH;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EAAE,EACd,MAAM,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAoB,GAC7C;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAkC1D"}
+{"version":3,"file":"setup-login-pty.d.ts","sourceRoot":"","sources":["../src/setup-login-pty.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,mBAAmB,CAAC;AAEzE,eAAO,MAAM,sBAAsB,+BAA+B,CAAC;AACnE,eAAO,MAAM,0BAA0B,QAAQ,CAAC;AAEhD,MAAM,MAAM,wBAAwB,GAAG,QAAQ,GAAG,QAAQ,GAAG,gBAAgB,CAAC;AAE9E,KAAK,4BAA4B,GAC7B;IACE,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,EAAE,wBAAwB,GAAG,IAAI,CAAC;IACzC,SAAS,EAAE,OAAO,CAAC,+BAA+B,EAAE,gCAAgC,CAAC,CAAC;IACtF,MAAM,EAAE,MAAM,CAAC;CAChB,GACD;IACE,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,EAAE,wBAAwB,CAAC;IAClC,SAAS,EAAE,OAAO,CAAC,+BAA+B,EAAE,gCAAgC,CAAC,CAAC;IACtF,MAAM,EAAE,MAAM,CAAC;CAChB,GACD;IACE,MAAM,EAAE,cAAc,CAAC;IACvB,OAAO,EAAE,wBAAwB,CAAC;IAClC,SAAS,EAAE,OAAO,CAAC,+BAA+B,EAAE,iCAAiC,CAAC,CAAC;IACvF,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEN,MAAM,MAAM,2BAA2B,GACnC;IACE,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,wBAAwB,CAAC;IAClC,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC5C;yEACqE;IACrE,mBAAmB,EAAE,OAAO,CAAC;CAC9B;AACH;8DAC8D;GAC5D,4BAA4B,CAAC;AAEjC,KAAK,oBAAoB,GAAG,SAAS,GAAG,oBAAoB,GAAG,SAAS,CAAC;AACzE,KAAK,iBAAiB,GAAG,OAAO,GAAG,aAAa,GAAG,QAAQ,CAAC;AAE5D,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACpE,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC3D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAQD;;;;;;;GAOG;AACH,wBAAsB,wBAAwB,CAC5C,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,SAAS,MAAM,EAAE,EAC5B,OAAO,GAAE,gCAAqC,GAC7C,OAAO,CAAC,2BAA2B,CAAC,CAqFtC;AA0ID,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC9C,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,yEAAyE;AACzE,wBAAgB,yBAAyB,CAAC,KAAK,SAAQ,GAAG;IACxD,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,IAAI,kBAAkB,CAAC;CAC9B,CA+DA"}