@claudexor/cli 3.5.0 → 3.8.0

package/dist/control-services.js

@@ -1,29 +1,30 @@
 /** Bind typed control operations to daemon stores and engine entrypoints. */
-import { existsSync, mkdirSync, realpathSync, rmSync } from "node:fs";
-import { join, sep } from "node:path";
-import { loadConfig, updateGlobalConfig } from "@claudexor/config";
+import { mkdirSync, realpathSync } from "node:fs";
+import { loadConfig } from "@claudexor/config";
 import { listTrustService, updateTrustService } from "./trust-services.js";
 import { SecretStore, isManagedSecretName } from "@claudexor/secrets";
-import { probeGitCapability, purgeProfileLanes, purgeThreadLanes, purgeThreadWorktree, } from "@claudexor/workspace";
-import { claudexorOwnedRoot, noProjectRepoRoot } from "@claudexor/util";
-import { ControlCredentialProfileCreateRequest, ControlSettingsUpdateRequest, RunScope, TERMINAL_LIFECYCLES, } from "@claudexor/schema";
+import { probeGitCapability, purgeThreadLanes, purgeThreadWorktree } from "@claudexor/workspace";
+import { noProjectRepoRoot } from "@claudexor/util";
+import { ControlAccountsMigrationRollbackRequest, ControlCredentialProfileCreateRequest, ControlSettingsUpdateRequest, RunScope, TERMINAL_LIFECYCLES, } from "@claudexor/schema";
+import { rollbackAccountsUnifiedMigration } from "./accounts-unified-migration.js";
+import { credentialProfileMutations } from "./credential-profile-mutations.js";
 import { quotaControlServices } from "./quota-services.js";
-import { registerConfigDirProfile, removeProfileFromRegistry } from "./profile-registration.js";
-import { StatusProjectionCache, globalConfigVersion, invalidateStatusProjections, } from "./status-projection-cache.js";
+import { registerConfigDirProfile } from "./profile-registration.js";
+import { StatusProjectionCache, globalConfigVersion } from "./status-projection-cache.js";
 import { vendorVerifiedProfileStatus } from "@claudexor/orchestrator";
 import { profileDoctorStatus } from "./accounts-projection.js";
 import { createRetentionRunner } from "./retention-service.js";
-import { canonicalIsolationLocator, invalidateDoctorCache, normalizeThroughExistingAncestor, } from "@claudexor/core";
 import { buildGateway, harnessModels } from "./registry.js";
 import { createCredentialProfilesService, projectHarnessStatuses, } from "./accounts-services.js";
 import { buildAgentCapabilityCatalog } from "./capabilities.js";
 import { commitSettingsUpdate, settingsSnapshot } from "./settings-service.js";
-import { activeProfileLoginJob } from "./setup-job-support.js";
-import { canonicalProfileLoginDir, isConfigDirLoginHarness } from "./config-dir-login-harnesses.js";
+import { bustCredentialStatusCaches, } from "./credential-status-invalidation.js";
+import { activeProfileLoginJob, preflightSetupJobCreateRequest } from "./setup-job-support.js";
+import { assertSetupLoginAdmission, projectSetupLoginCapability, } from "./setup-login-capability.js";
 import { createRunRequirementsPreflight } from "./request-preflight.js";
 import { threadRunStartRequiresGit } from "./thread-execution-workspace.js";
 import { applyThreadDiff } from "./thread-delivery.js";
-import { assertCredentialProfileCompatibility, assertCredentialProfileRegistered, } from "./profile-compatibility.js";
+import { assertCredentialProfileCompatibility } from "./profile-compatibility.js";
 import { remoteFilesystemServices } from "./remote-filesystem.js";
 import { projectRunApplicability } from "./run-applicability.js";
 import { threadTurnServices } from "./thread-turn-services.js";
@@ -63,11 +64,7 @@ resources, quotaRegistry, daemonJobs) {
     const harnessesPollCache = new StatusProjectionCache({
         versionOf: globalConfigVersion,
     });
-    const bustStatusCaches = () => {
-        invalidateDoctorCache();
-        invalidateStatusProjections();
-        quotaRegistry().noteCredentialChange();
-    };
+    const bustStatusCaches = (subject) => bustCredentialStatusCaches(quotaRegistry, subject);
     const journalPartition = (partition) => partition === "global" ? journalManager : threads.journal(partition);
     const setupJobs = () => {
         try {
@@ -225,10 +222,20 @@ resources, quotaRegistry, daemonJobs) {
         authReadiness: async (input) => authReadiness.refresh(input.harnessId, input.request),
         agentCapabilities: async () => buildAgentCapabilityCatalog(),
         runApplicability: async (input) => projectRunApplicability(input.repoRoot),
-        createSetupJob: async (input) => setupJobs().create(input.request, {
-            key: input.idempotencyKey,
-            client: input.clientId,
-        }),
+        createSetupJob: async (input) => {
+            // No helper/vendor probe and no bootstrap/durable mutation can precede
+            // request, named-profile, required-profile, and D13 validation.
+            const request = preflightSetupJobCreateRequest(input.request);
+            const capability = await projectSetupLoginCapability(request.harness, {
+                transport: request.transport,
+                loginFlow: request.loginFlow,
+            });
+            assertSetupLoginAdmission(capability);
+            return setupJobs().create(request, {
+                key: input.idempotencyKey,
+                client: input.clientId,
+            });
+        },
         listSetupJobs: async (input) => {
             const jobs = setupJobs();
             return { jobs: jobs.list(input) };
@@ -259,105 +266,30 @@ resources, quotaRegistry, daemonJobs) {
         ...quotaControlServices(quotaRegistry),
         // INV-135: durable registry + live doctor projection, one probe per
         // profile; adapters without profile support report honest unknown.
-        credentialProfiles: createCredentialProfilesService(quotaRegistry),
-        // PATCH /credential-profiles/:harness/:id — the Enabled toggle of the
-        // accounts symmetry (INV-135). Flips the profile's durable `enabled` in the
-        // registry (one locked write) and returns the refreshed doctor projection.
-        updateCredentialProfile: async (input) => {
-            const p = (input ?? {});
-            const harnessId = typeof p["harnessId"] === "string" ? p["harnessId"] : "";
-            const profileId = typeof p["profileId"] === "string" ? p["profileId"] : "";
-            const enabled = typeof p["enabled"] === "boolean" ? p["enabled"] : undefined;
-            if (!harnessId || !profileId || enabled === undefined) {
-                throw Object.assign(new Error("harnessId, profileId and enabled are required"), {
-                    status: 400,
-                });
-            }
-            assertCredentialProfileRegistered(loadConfig(NO_PROJECT_ROOT).global.credential_profiles, harnessId, profileId);
-            let updated;
-            updateGlobalConfig((config) => ({
-                ...config,
-                credential_profiles: config.credential_profiles.map((profile) => {
-                    if (profile.harness_id !== harnessId || profile.profile_id !== profileId)
-                        return profile;
-                    updated = { ...profile, enabled };
-                    return updated;
-                }),
-            }));
-            if (!updated) {
-                throw Object.assign(new Error("profile update did not persist"), { status: 500 });
-            }
-            bustStatusCaches();
-            return {
-                profile: updated,
-                // Same vendor overlay the listing applies: a single-profile response
-                // must not re-declare a revoked credential `passed` (INV-135 honesty).
-                status: vendorVerifiedProfileStatus(await profileDoctorStatus(updated), quotaRegistry().read()),
-            };
-        },
-        // INV-135 deletion: registry first; scoped material cleanup is fenced and disclosed.
-        deleteCredentialProfile: async (input) => {
-            const p = (input ?? {});
-            const harnessId = typeof p["harnessId"] === "string" ? p["harnessId"] : "";
-            const profileId = typeof p["profileId"] === "string" ? p["profileId"] : "";
-            if (!harnessId || !profileId) {
-                throw Object.assign(new Error("harnessId and profileId are required"), { status: 400 });
-            }
-            const activeLogin = activeProfileLoginJob(setupJobs, harnessId, profileId);
-            if (activeLogin) {
-                throw Object.assign(new Error(`a login for this account is in progress (${activeLogin.jobId}); cancel it before removing the account`), { status: 409 });
-            }
-            assertCredentialProfileRegistered(loadConfig(NO_PROJECT_ROOT).global.credential_profiles, harnessId, profileId);
-            threads.invalidateCredentialProfile(harnessId, profileId);
-            // INV-034 lifecycle owner (b): the deleted account's durable per-lane
-            // read-only homes must not survive to be resumed. Sweep them across every
-            // project a live thread anchors to (plus the no-project partition).
-            const laneRoots = new Set([NO_PROJECT_ROOT]);
-            for (const thread of threads.listThreads()) {
-                if (thread.repo?.root)
-                    laneRoots.add(thread.repo.root);
-            }
-            for (const root of laneRoots)
-                purgeProfileLanes(root, harnessId, profileId);
-            quotaRegistry().removeSubject(harnessId, profileId);
-            const entry = removeProfileFromRegistry(harnessId, profileId);
-            let credentialCleanup = "none";
-            const cleanupWarnings = [];
-            try {
-                if (entry.credential_kind === "config_dir_login" && entry.isolation_locator) {
-                    // Each member resolves through its OWN canonicalizer (the ladder
-                    // this used to hand-write let cursor and agy fall through to the
-                    // generic one, so a member whose canonicalizer adds a rule — claude
-                    // already refuses the default native dir — would silently delete
-                    // against a different path than its login wrote to).
-                    const dir = isConfigDirLoginHarness(harnessId)
-                        ? canonicalProfileLoginDir(harnessId, entry.isolation_locator)
-                        : canonicalIsolationLocator(entry.isolation_locator, "credential profile dir");
-                    // Recursive deletion is fenced to a strict descendant of the profiles tree.
-                    const profilesRoot = normalizeThroughExistingAncestor(join(claudexorOwnedRoot(), "profiles"));
-                    if (!dir.startsWith(profilesRoot + sep)) {
-                        throw new Error(`refusing to delete "${dir}": not inside the profiles tree ${profilesRoot}`);
-                    }
-                    if (existsSync(dir)) {
-                        rmSync(dir, { recursive: true, force: true });
-                        credentialCleanup = "config_dir_removed";
-                    }
-                }
-                else if (entry.secret_ref) {
-                    secretStore.delete(entry.secret_ref);
-                    credentialCleanup = "secret_deleted";
-                }
-            }
-            catch (err) {
-                cleanupWarnings.push(`registry entry removed, but credential cleanup failed: ${err instanceof Error ? err.message : String(err)}`);
-            }
+        // The pool-authority read (GET /v2/account-pools) shares the same cached
+        // projection so the listing and the pool verdict cannot disagree.
+        ...createCredentialProfilesService(quotaRegistry),
+        // PATCH + DELETE /credential-profiles/:harness/:id — the Enabled toggle
+        // (with the migrated row's native_credentials_enabled downgrade mirror)
+        // and the provable D-U4 removal, owned by credential-profile-mutations.ts.
+        ...credentialProfileMutations({
+            threads,
+            quotaRegistry,
+            secretStore,
+            bustStatusCaches,
+            activeLoginJob: (harnessId, profileId) => activeProfileLoginJob(setupJobs, harnessId, profileId),
+        }),
+        // POST /accounts-migration/rollback — the supported downgrade path's
+        // first step (unified account model): surgically reverses the startup
+        // migration (sessions/checkpoints/lane homes back to the engine-default
+        // keys, the auto-registered row out of the registry, its enabled state
+        // back onto the native_credentials_enabled mirror). Run BEFORE installing
+        // an engine whose canonicalizers refuse the native locator.
+        rollbackAccountsMigration: async (input) => {
+            const request = ControlAccountsMigrationRollbackRequest.parse(input ?? {});
+            const rolledBack = rollbackAccountsUnifiedMigration({ threads, quota: quotaRegistry() }, request.harnessId);
             bustStatusCaches();
-            return {
-                profile: entry,
-                removed: true,
-                credentialCleanup,
-                ...(cleanupWarnings.length > 0 ? { cleanupWarning: cleanupWarnings.join("; ") } : {}),
-            };
+            return { rolledBack };
         },
         // POST /credential-profiles: the SAME ONE registration owner the CLI's
         // `profiles add` uses (profile-registration.ts) — never a second write
@@ -370,7 +302,7 @@ resources, quotaRegistry, daemonJobs) {
                 profileId: request.profileId,
                 displayName: request.displayName,
             });
-            bustStatusCaches();
+            bustStatusCaches({ harnessId: request.harnessId, profileId: request.profileId });
             return {
                 profile,
                 status: vendorVerifiedProfileStatus(await profileDoctorStatus(profile), quotaRegistry().read()),
@@ -405,7 +337,7 @@ resources, quotaRegistry, daemonJobs) {
                 throw Object.assign(new Error(`secret name must be a managed name or managed:profile slot, got "${name}"`), { status: 400 });
             }
             const backend = secretStore.set(name, value);
-            bustStatusCaches();
+            bustStatusCaches({ secretName: name });
             return {
                 name,
                 backend,
@@ -415,7 +347,7 @@ resources, quotaRegistry, daemonJobs) {
         },
         deleteSecret: async (name) => {
             secretStore.delete(name);
-            bustStatusCaches();
+            bustStatusCaches({ secretName: name });
             return { name, deleted: true };
         },
     };

package/dist/control-services.js.map

@@ -1 +1 @@
-{"version":3,"file":"control-services.js","sourceRoot":"","sources":["../src/control-services.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACtE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAUtC,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACtE,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACxE,OAAO,EAEL,qCAAqC,EAErC,4BAA4B,EAE5B,QAAQ,EACR,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAChG,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,2BAA2B,GAC5B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,gCAAgC,GACjC,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EACL,+BAA+B,EAC/B,sBAAsB,GAEvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAG/E,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAEpG,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AACxE,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAC5E,OAAO,EAAE,eAAe,EAA2B,MAAM,sBAAsB,CAAC;AAChF,OAAO,EACL,oCAAoC,EACpC,iCAAiC,GAClC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,MAAM,eAAe,GAAG,iBAAiB,EAAE,CAAC;AAG5C;;;;;;;GAOG;AACH,SAAS,oBAAoB,CAAC,GAAyC;IACrE,MAAM,KAAK,GAAI,GAAG,CAAC,MAAiD,EAAE,KAAK,CAAC;IAC5E,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACpF,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;QACd,MAAM,MAAM,CAAC,MAAM,CACjB,IAAI,KAAK,CAAC,0CAA0C,GAAG,CAAC,KAAK,+BAA+B,CAAC,EAC7F,EAAE,IAAI,EAAE,6BAA6B,EAAE,MAAM,EAAE,GAAG,EAAE,CACrD,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,YAAiC,EACjC,QAA4B,EAC5B,OAA0B,EAC1B,YAA0B,EAC1B,cAA8B,EAC9B,aAAmC;AACnC;uEACuE;AACvE,SAA8B,EAC9B,aAAkC,EAClC,UAEC;IAED,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;IACtC,MAAM,aAAa,GAAG,KAAK,EAAE,KAAwB,EAAE,EAAE;QACvD,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACxC,YAAY,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,IAAI,KAAK,EAAE,CAAC,CAAC,SAAS,CACpE,EAAE,GAAG,EAAE,eAAe,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,IAAI,KAAK,EAAE,EACtD,KAAK,EAAE,UAAU,CAClB;YACD,kBAAkB,EAAE;SACrB,CAAC,CAAC;QACH,uEAAuE;QACvE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAC;IACpE,CAAC,CAAC;IACF,+FAA+F;IAC/F,MAAM,kBAAkB,GAAG,IAAI,qBAAqB,CAA4C;QAC9F,SAAS,EAAE,mBAAmB;KAC/B,CAAC,CAAC;IACH,MAAM,gBAAgB,GAAG,GAAG,EAAE;QAC5B,qBAAqB,EAAE,CAAC;QACxB,2BAA2B,EAAE,CAAC;QAC9B,aAAa,EAAE,CAAC,oBAAoB,EAAE,CAAC;IACzC,CAAC,CAAC;IACF,MAAM,gBAAgB,GAAG,CAAC,SAAiB,EAAkB,EAAE,CAC7D,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACvE,MAAM,SAAS,GAAG,GAAoB,EAAE;QACtC,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,OAAO,EAAE,CAAC;QAChC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IACE,KAAK;gBACL,OAAO,KAAK,KAAK,QAAQ;gBACzB,MAAM,IAAI,KAAK;gBACf,CAAE,KAA2B,CAAC,IAAI,KAAK,2BAA2B;oBAC/D,KAA2B,CAAC,IAAI,KAAK,0BAA0B,CAAC,EACnE,CAAC;gBACD,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,YAAY,EAAE,cAAc,CAAC,OAAO,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC;YAChF,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IACF,SAAS,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,MAAM,aAAa,GAAmC;QACpD,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;KAC7C,CAAC;IACF,MAAM,mBAAmB,GAAG,CAAC,OAA+B,EAAW,EAAE;QACvE,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC;QACrF,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAClF,OAAO,yBAAyB,CAC9B,OAAO,EACP,MAAM,EACN,UAAU,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,eAAe,CACrD,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,wBAAwB,GAAG,8BAA8B,CAAC,aAAa,EAAE,eAAe,EAAE;QAC9F,WAAW,EAAE,mBAAmB;KACjC,CAAC,CAAC;IACH,MAAM,8BAA8B,GAAG,8BAA8B,CACnE,aAAa,EACb,eAAe,EACf,EAAE,WAAW,EAAE,mBAAmB,EAAE,EACpC,EAAE,GAAG,EAAE,aAAa,EAAE,CACvB,CAAC;IACF,OAAO;QACL,wBAAwB;QACxB,8BAA8B;QAC9B,YAAY,EAAE,KAAK,EAAE,KAAc,EAAE,cAAsB,EAAE,EAAE,CAC7D,SAAS,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,cAAc,CAAC;QAC3C,WAAW,EAAE,KAAK,EAAE,QAAgB,EAAE,MAAiC,EAAE,EAAE,CACzE,SAAS,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC;QACrC,YAAY,EAAE,KAAK,EAAE,QAAgB,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;QACtE,YAAY,EAAE,KAAK,EAAE,QAAgB,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;QACtE,cAAc,EAAE,KAAK,EACnB,QAAgB,EAChB,cAAkC,EAClC,cAAsB,EACtB,EAAE,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,cAAc,EAAE,cAAc,CAAC;QACnE,iBAAiB,EAAE,KAAK,EAAE,IAA6B,EAAE,EAAE;YACzD,SAAS,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QACD,YAAY,EAAE,qBAAqB,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;QACtE,oEAAoE;QACpE,8EAA8E;QAC9E,YAAY,EAAE,KAAK,IAAI,EAAE;YACvB,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;YACzB,OAAO;gBACL,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAc;aAC5F,CAAC;QACJ,CAAC;QACD,0EAA0E;QAC1E,2EAA2E;QAC3E,GAAG,wBAAwB,CAAC,QAAQ,CAAC;QACrC,eAAe,EAAE,KAAK,EAAE,KAA8C,EAAE,EAAE;YACxE,MAAM,OAAO,GAAG,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YAC/C,OAAO,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;QACpE,CAAC;QACD,aAAa,EAAE,KAAK,EAAE,EAAU,EAAE,IAAY,EAAE,EAAE;YAChD,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAChD,OAAO,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;QACpE,CAAC;QACD,6EAA6E;QAC7E,2EAA2E;QAC3E,2EAA2E;QAC3E,6EAA6E;QAC7E,uDAAuD;QACvD,aAAa,EAAE,KAAK,EAAE,EAAU,EAAE,EAAE;YAClC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;YACzC,KAAK,MAAM,GAAG,IAAI,MAAM,UAAU,EAAE,EAAE,CAAC;gBACrC,IAAK,mBAA2C,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC;oBAAE,SAAS;gBAC1E,MAAM,IAAI,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;gBACvC,IAAI,IAAI,KAAK,IAAI;oBAAE,SAAS;gBAC5B,IAAI,CAAC;oBACH,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;gBACzC,CAAC;gBAAC,MAAM,CAAC;oBACP,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC3B,CAAC;YACH,CAAC;YACD,OAAO,OAAO,CAAC,aAAa,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;QACnD,CAAC;QACD,YAAY,EAAE,KAAK,EAAE,KAAc,EAAE,EAAE;YACrC,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE,CAAqD,CAAC;YAClF,oCAAoC,CAClC,OAAO,CAAC,mBAAmB,EAC3B,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,iBAAiB,IAAI,EAAE,EAC/B,UAAU,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,mBAAmB,CACvD,CAAC;YACF,OAAO,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACvC,CAAC;QACD,WAAW,EAAE,KAAK,IAAI,EAAE;YACtB,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;YACnE,OAAO,EAAE,OAAO,EAAE,IAAiB,EAAE,QAAQ,EAAE,QAAqB,EAAE,CAAC;QACzE,CAAC;QACD,GAAG,kBAAkB,CAAC,OAAO,EAAE,aAAa,CAAC;QAC7C,YAAY,EAAE,KAAK,EACjB,EAAU,EACV,KAOC,EACD,EAAE;YACF,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACtC,IAAI,CAAC,OAAO;gBAAE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,EAAE,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACvF,MAAM,SAAS,GACb,KAAK,CAAC,mBAAmB,KAAK,SAAS;gBACrC,CAAC,CAAC,OAAO,CAAC,qBAAqB;gBAC/B,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC;YAChC,MAAM,IAAI,GAAG,KAAK,CAAC,iBAAiB,IAAI,OAAO,CAAC,kBAAkB,CAAC;YACnE,MAAM,OAAO,GACX,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;YACtF,IACE,KAAK,CAAC,mBAAmB,KAAK,SAAS;gBACvC,KAAK,CAAC,cAAc,KAAK,SAAS;gBAClC,KAAK,CAAC,iBAAiB,KAAK,SAAS,EACrC,CAAC;gBACD,oCAAoC,CAClC,SAAS,EACT,OAAO,EACP,IAAI,EACJ,UAAU,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,mBAAmB,CACvD,CAAC;YACJ,CAAC;YACD,OAAO,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE;gBAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,KAAK,EAAE,KAAK,CAAC,KAAY;gBACzB,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;gBAC9C,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;gBAC1C,oEAAoE;gBACpE,yEAAyE;gBACzE,sEAAsE;gBACtE,sEAAsE;gBACtE,gEAAgE;gBAChE,MAAM,EAAE,KAAK,CAAC,MAAa;aAC5B,CAAC,CAAC;QACL,CAAC;QACD,WAAW,EAAE,KAAK,EAAE,EAAU,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAC1D,aAAa,EAAE,KAAK,EAAE,EAAU,EAAE,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QAC9D,WAAW,EAAE,KAAK,EAAE,EAAU,EAAE,EAAE;YAChC,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACrC,IAAI,CAAC,MAAM;gBAAE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,EAAE,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACtF,uEAAuE;YACvE,uEAAuE;YACvE,wDAAwD;YACxD,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YACvC,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBACxD,MAAM,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAClD,CAAC;YACD,sEAAsE;YACtE,0EAA0E;YAC1E,iCAAiC;YACjC,gBAAgB,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,eAAe,EAAE,EAAE,CAAC,CAAC;YAC3D,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,WAAW,EAAE,KAAK,EAAE,EAAU,EAAE,IAAwB,EAAE,EAAE,CAAC,eAAe,CAAC,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC;QAC/F,SAAS,EAAE,gBAAgB;QAC3B,WAAW,EAAE,kBAAkB;QAC/B,mBAAmB,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,YAAY,CAAC,aAAa,CAAC,KAAK,CAAC;QACzE,iBAAiB,EAAE,CAAC,KAAa,EAAE,aAAqB,EAAE,OAAgB,EAAE,EAAE,CAC5E,YAAY,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,EAAE,OAAO,CAAC;QACpD,gBAAgB,EAAE,CAAC,KAAa,EAAE,MAAe,EAAE,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC;QAC7F,iCAAiC,EAAE,CACjC,KAAa,EACb,MAAe,EACf,WAA8D,EAC9D,EAAE,CAAC,OAAO,CAAC,iCAAiC,CAAC,MAAM,EAAE,KAAK,EAAE,WAAW,CAAC;QAC1E,sBAAsB,EAAE,CACtB,KAAa,EACb,MAAe,EACf,QAA+C,EAC/C,WAA+D,EAC/D,EAAE,CAAC,OAAO,CAAC,sBAAsB,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,QAAQ,EAAE,EAAE,WAAW,CAAC;QAChF,aAAa,EAAE,KAAK,EAClB,MAAe,EACf,KAA2E,EAC3E,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC;QACzC,gBAAgB,EAAE,KAAK,EAAE,EAAU,EAAE,MAAe,EAAE,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,EAAE,MAAM,CAAC;QAC7F,YAAY,EAAE,KAAK,EAAE,EAAU,EAAE,KAAc,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC;QACnF,SAAS,EAAE,KAAK,EAAE,KAAwB,EAAE,EAAE,CAC5C,CAAC,KAAK,EAAE,YAAY,IAAI,CAAC,KAAK,EAAE,KAAK,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM;YACjE,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,aAAa,EAAE,CAAC;YAChD,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC;QAC1B,aAAa,EAAE,KAAK,EAAE,KAAiE,EAAE,EAAE,CACzF,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,eAAe,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC;QACpE,aAAa,EAAE,KAAK,EAAE,KAA8C,EAAE,EAAE,CACtE,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC;QACvD,iBAAiB,EAAE,KAAK,IAAI,EAAE,CAAC,2BAA2B,EAAE;QAC5D,gBAAgB,EAAE,KAAK,EAAE,KAA2B,EAAE,EAAE,CACtD,uBAAuB,CAAC,KAAK,CAAC,QAAQ,CAAC;QACzC,cAAc,EAAE,KAAK,EAAE,KAAqE,EAAE,EAAE,CAC9F,SAAS,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE;YAChC,GAAG,EAAE,KAAK,CAAC,cAAc;YACzB,MAAM,EAAE,KAAK,CAAC,QAAQ;SACvB,CAAC;QACJ,aAAa,EAAE,KAAK,EAAE,KAAe,EAAE,EAAE;YACvC,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;YACzB,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,KAAwC,CAAC,EAAE,CAAC;QACvE,CAAC;QACD,cAAc,EAAE,KAAK,EAAE,KAAc,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC;QACnE,gBAAgB,EAAE,KAAK,EAAE,KAAc,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;QACvE,cAAc,EAAE,KAAK,EAAE,KAAc,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC;QACnE,cAAc,EAAE,KAAK,EAAE,KAAc,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC;QACnE,aAAa,EAAE,KAAK,EAAE,KAAc,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC;QACjE,iBAAiB,EAAE,KAAK,EAAE,KAAc,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC;QACzE,cAAc,EAAE,KAAK,EAAE,KAAc,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC;QACnE,aAAa,EAAE,KAAK,EAAE,SAAiB,EAAE,WAAoB,EAAE,EAAE,CAC/D,gBAAgB,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC;QACjD,wBAAwB,EAAE,KAAK,EAAE,SAAiB,EAAE,EAAE,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;QAC5F,yBAAyB,EAAE,KAAK,EAAE,SAAiB,EAAE,EAAE,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;QAC9F,uBAAuB,EAAE,KAAK,EAAE,SAAiB,EAAE,EAAE,CACnD,gBAAgB,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE;QAC9C,2BAA2B,EAAE,KAAK,EAAE,SAAiB,EAAE,KAAc,EAAE,EAAE;YACvE,MAAM,OAAO,GAAG,KAAiE,CAAC;YAClF,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;gBAC3B,OAAO,gBAAgB,CAAC,SAAS,CAAC,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;YACtE,CAAC;YACD,MAAM,SAAS,GAAG,cAAc,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;YAC9D,IAAI,SAAS,CAAC,WAAW,KAAK,WAAW,IAAI,YAAY,CAAC,0BAA0B,EAAE,EAAE,CAAC;gBACvF,OAAO,SAAS,CAAC,OAAO,CAAC;YAC3B,CAAC;YACD,OAAO,YAAY,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC;QAC1F,CAAC;QACD,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,gBAAgB,CAAC,eAAe,CAAC;QACvD,GAAG,oBAAoB,CAAC,aAAa,CAAC;QACtC,oEAAoE;QACpE,mEAAmE;QACnE,kBAAkB,EAAE,+BAA+B,CAAC,aAAa,CAAC;QAClE,sEAAsE;QACtE,4EAA4E;QAC5E,2EAA2E;QAC3E,uBAAuB,EAAE,KAAK,EAAE,KAAc,EAAE,EAAE;YAChD,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAA4B,CAAC;YACnD,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,SAAS,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC7E,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBACtD,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,+CAA+C,CAAC,EAAE;oBAC9E,MAAM,EAAE,GAAG;iBACZ,CAAC,CAAC;YACL,CAAC;YACD,iCAAiC,CAC/B,UAAU,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,mBAAmB,EACtD,SAAS,EACT,SAAS,CACV,CAAC;YACF,IAAI,OAAsC,CAAC;YAC3C,kBAAkB,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAC9B,GAAG,MAAM;gBACT,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;oBAC9D,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS;wBAAE,OAAO,OAAO,CAAC;oBACzF,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC;oBAClC,OAAO,OAAO,CAAC;gBACjB,CAAC,CAAC;aACH,CAAC,CAAC,CAAC;YACJ,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAgC,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACpF,CAAC;YACD,gBAAgB,EAAE,CAAC;YACnB,OAAO;gBACL,OAAO,EAAE,OAAO;gBAChB,qEAAqE;gBACrE,uEAAuE;gBACvE,MAAM,EAAE,2BAA2B,CACjC,MAAM,mBAAmB,CAAC,OAAO,CAAC,EAClC,aAAa,EAAE,CAAC,IAAI,EAAE,CACvB;aACF,CAAC;QACJ,CAAC;QACD,qFAAqF;QACrF,uBAAuB,EAAE,KAAK,EAAE,KAAc,EAAE,EAAE;YAChD,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAA4B,CAAC;YACnD,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,EAAE,CAAC;gBAC7B,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,sCAAsC,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAC1F,CAAC;YACD,MAAM,WAAW,GAAG,qBAAqB,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;YAC3E,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,MAAM,CAAC,MAAM,CACjB,IAAI,KAAK,CACP,4CAA4C,WAAW,CAAC,KAAK,0CAA0C,CACxG,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;YACJ,CAAC;YACD,iCAAiC,CAC/B,UAAU,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,mBAAmB,EACtD,SAAS,EACT,SAAS,CACV,CAAC;YACF,OAAO,CAAC,2BAA2B,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAC1D,sEAAsE;YACtE,0EAA0E;YAC1E,oEAAoE;YACpE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,CAAC,eAAe,CAAC,CAAC,CAAC;YACrD,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC3C,IAAI,MAAM,CAAC,IAAI,EAAE,IAAI;oBAAE,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzD,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,SAAS;gBAAE,iBAAiB,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;YAC5E,aAAa,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YACpD,MAAM,KAAK,GAAG,yBAAyB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAC9D,IAAI,iBAAiB,GAAqD,MAAM,CAAC;YACjF,MAAM,eAAe,GAAa,EAAE,CAAC;YACrC,IAAI,CAAC;gBACH,IAAI,KAAK,CAAC,eAAe,KAAK,kBAAkB,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;oBAC5E,iEAAiE;oBACjE,iEAAiE;oBACjE,oEAAoE;oBACpE,iEAAiE;oBACjE,qDAAqD;oBACrD,MAAM,GAAG,GAAG,uBAAuB,CAAC,SAAS,CAAC;wBAC5C,CAAC,CAAC,wBAAwB,CAAC,SAAS,EAAE,KAAK,CAAC,iBAAiB,CAAC;wBAC9D,CAAC,CAAC,yBAAyB,CAAC,KAAK,CAAC,iBAAiB,EAAE,wBAAwB,CAAC,CAAC;oBACjF,4EAA4E;oBAC5E,MAAM,YAAY,GAAG,gCAAgC,CACnD,IAAI,CAAC,kBAAkB,EAAE,EAAE,UAAU,CAAC,CACvC,CAAC;oBACF,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,GAAG,GAAG,CAAC,EAAE,CAAC;wBACxC,MAAM,IAAI,KAAK,CACb,uBAAuB,GAAG,mCAAmC,YAAY,EAAE,CAC5E,CAAC;oBACJ,CAAC;oBACD,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;wBACpB,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;wBAC9C,iBAAiB,GAAG,oBAAoB,CAAC;oBAC3C,CAAC;gBACH,CAAC;qBAAM,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;oBAC5B,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;oBACrC,iBAAiB,GAAG,gBAAgB,CAAC;gBACvC,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,eAAe,CAAC,IAAI,CAClB,0DACE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;YACJ,CAAC;YACD,gBAAgB,EAAE,CAAC;YACnB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,IAAI;gBACb,iBAAiB;gBACjB,GAAG,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtF,CAAC;QACJ,CAAC;QACD,uEAAuE;QACvE,uEAAuE;QACvE,wEAAwE;QACxE,yDAAyD;QACzD,uBAAuB,EAAE,KAAK,EAAE,KAAc,EAAE,EAAE;YAChD,MAAM,OAAO,GAAG,qCAAqC,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YACzE,MAAM,EAAE,OAAO,EAAE,GAAG,wBAAwB,CAAC;gBAC3C,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;aACjC,CAAC,CAAC;YACH,gBAAgB,EAAE,CAAC;YACnB,OAAO;gBACL,OAAO;gBACP,MAAM,EAAE,2BAA2B,CACjC,MAAM,mBAAmB,CAAC,OAAO,CAAC,EAClC,aAAa,EAAE,CAAC,IAAI,EAAE,CACvB;aACF,CAAC;QACJ,CAAC;QACD,cAAc,EAAE,KAAK,EAAE,KAAc,EAAE,EAAE;YACvC,MAAM,CAAC,GAAG,4BAA4B,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAC1D,mEAAmE;YACnE,oEAAoE;YACpE,iEAAiE;YACjE,0EAA0E;YAC1E,0EAA0E;YAC1E,4DAA4D;YAC5D,MAAM,oBAAoB,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;YAC/C,gBAAgB,EAAE,CAAC;YACnB,OAAO,gBAAgB,CAAC,eAAe,CAAC,CAAC;QAC3C,CAAC;QACD,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;YACxB,OAAO,EAAE,WAAW,CAAC,eAAe,EAAE;YACtC,OAAO,EAAE,WAAW,CAAC,IAAI,EAAE;SAC5B,CAAC;QACF,SAAS,EAAE,KAAK,EAAE,KAAc,EAAE,EAAE;YAClC,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAA4B,CAAC;YACnD,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YACpE,uEAAuE;YACvE,wEAAwE;YACxE,0DAA0D;YAC1D,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/B,MAAM,MAAM,CAAC,MAAM,CACjB,IAAI,KAAK,CAAC,oEAAoE,IAAI,GAAG,CAAC,EACtF,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC7C,gBAAgB,EAAE,CAAC;YACnB,OAAO;gBACL,IAAI;gBACJ,OAAO;gBACP,MAAM,EAAE,IAAI;gBACZ,GAAG,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvF,CAAC;QACJ,CAAC;QACD,YAAY,EAAE,KAAK,EAAE,IAAY,EAAE,EAAE;YACnC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACzB,gBAAgB,EAAE,CAAC;YACnB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACjC,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"control-services.js","sourceRoot":"","sources":["../src/control-services.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAUlD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AACjG,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAEL,uCAAuC,EACvC,qCAAqC,EACrC,4BAA4B,EAE5B,QAAQ,EACR,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,gCAAgC,EAAE,MAAM,iCAAiC,CAAC;AACnF,OAAO,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAC;AAC/E,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAC1F,OAAO,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAE/D,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EACL,+BAA+B,EAC/B,sBAAsB,GAEvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC/E,OAAO,EACL,0BAA0B,GAE3B,MAAM,qCAAqC,CAAC;AAG7C,OAAO,EAAE,qBAAqB,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAC/F,OAAO,EACL,yBAAyB,EACzB,2BAA2B,GAC5B,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AACxE,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAC5E,OAAO,EAAE,eAAe,EAA2B,MAAM,sBAAsB,CAAC;AAChF,OAAO,EAAE,oCAAoC,EAAE,MAAM,4BAA4B,CAAC;AAClF,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,MAAM,eAAe,GAAG,iBAAiB,EAAE,CAAC;AAG5C;;;;;;;GAOG;AACH,SAAS,oBAAoB,CAAC,GAAyC;IACrE,MAAM,KAAK,GAAI,GAAG,CAAC,MAAiD,EAAE,KAAK,CAAC;IAC5E,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACpF,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;QACd,MAAM,MAAM,CAAC,MAAM,CACjB,IAAI,KAAK,CAAC,0CAA0C,GAAG,CAAC,KAAK,+BAA+B,CAAC,EAC7F,EAAE,IAAI,EAAE,6BAA6B,EAAE,MAAM,EAAE,GAAG,EAAE,CACrD,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,YAAiC,EACjC,QAA4B,EAC5B,OAA0B,EAC1B,YAA0B,EAC1B,cAA8B,EAC9B,aAAmC;AACnC;uEACuE;AACvE,SAA8B,EAC9B,aAAkC,EAClC,UAEC;IAED,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;IACtC,MAAM,aAAa,GAAG,KAAK,EAAE,KAAwB,EAAE,EAAE;QACvD,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACxC,YAAY,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,IAAI,KAAK,EAAE,CAAC,CAAC,SAAS,CACpE,EAAE,GAAG,EAAE,eAAe,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,IAAI,KAAK,EAAE,EACtD,KAAK,EAAE,UAAU,CAClB;YACD,kBAAkB,EAAE;SACrB,CAAC,CAAC;QACH,uEAAuE;QACvE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAC;IACpE,CAAC,CAAC;IACF,+FAA+F;IAC/F,MAAM,kBAAkB,GAAG,IAAI,qBAAqB,CAA4C;QAC9F,SAAS,EAAE,mBAAmB;KAC/B,CAAC,CAAC;IACH,MAAM,gBAAgB,GAAG,CAAC,OAAmC,EAAE,EAAE,CAC/D,0BAA0B,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IACrD,MAAM,gBAAgB,GAAG,CAAC,SAAiB,EAAkB,EAAE,CAC7D,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACvE,MAAM,SAAS,GAAG,GAAoB,EAAE;QACtC,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,OAAO,EAAE,CAAC;QAChC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IACE,KAAK;gBACL,OAAO,KAAK,KAAK,QAAQ;gBACzB,MAAM,IAAI,KAAK;gBACf,CAAE,KAA2B,CAAC,IAAI,KAAK,2BAA2B;oBAC/D,KAA2B,CAAC,IAAI,KAAK,0BAA0B,CAAC,EACnE,CAAC;gBACD,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,YAAY,EAAE,cAAc,CAAC,OAAO,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC;YAChF,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IACF,SAAS,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,MAAM,aAAa,GAAmC;QACpD,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;KAC7C,CAAC;IACF,MAAM,mBAAmB,GAAG,CAAC,OAA+B,EAAW,EAAE;QACvE,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC;QACrF,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAClF,OAAO,yBAAyB,CAC9B,OAAO,EACP,MAAM,EACN,UAAU,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,eAAe,CACrD,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,wBAAwB,GAAG,8BAA8B,CAAC,aAAa,EAAE,eAAe,EAAE;QAC9F,WAAW,EAAE,mBAAmB;KACjC,CAAC,CAAC;IACH,MAAM,8BAA8B,GAAG,8BAA8B,CACnE,aAAa,EACb,eAAe,EACf,EAAE,WAAW,EAAE,mBAAmB,EAAE,EACpC,EAAE,GAAG,EAAE,aAAa,EAAE,CACvB,CAAC;IACF,OAAO;QACL,wBAAwB;QACxB,8BAA8B;QAC9B,YAAY,EAAE,KAAK,EAAE,KAAc,EAAE,cAAsB,EAAE,EAAE,CAC7D,SAAS,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,cAAc,CAAC;QAC3C,WAAW,EAAE,KAAK,EAAE,QAAgB,EAAE,MAAiC,EAAE,EAAE,CACzE,SAAS,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC;QACrC,YAAY,EAAE,KAAK,EAAE,QAAgB,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;QACtE,YAAY,EAAE,KAAK,EAAE,QAAgB,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;QACtE,cAAc,EAAE,KAAK,EACnB,QAAgB,EAChB,cAAkC,EAClC,cAAsB,EACtB,EAAE,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,cAAc,EAAE,cAAc,CAAC;QACnE,iBAAiB,EAAE,KAAK,EAAE,IAA6B,EAAE,EAAE;YACzD,SAAS,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QACD,YAAY,EAAE,qBAAqB,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;QACtE,oEAAoE;QACpE,8EAA8E;QAC9E,YAAY,EAAE,KAAK,IAAI,EAAE;YACvB,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;YACzB,OAAO;gBACL,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAc;aAC5F,CAAC;QACJ,CAAC;QACD,0EAA0E;QAC1E,2EAA2E;QAC3E,GAAG,wBAAwB,CAAC,QAAQ,CAAC;QACrC,eAAe,EAAE,KAAK,EAAE,KAA8C,EAAE,EAAE;YACxE,MAAM,OAAO,GAAG,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YAC/C,OAAO,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;QACpE,CAAC;QACD,aAAa,EAAE,KAAK,EAAE,EAAU,EAAE,IAAY,EAAE,EAAE;YAChD,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAChD,OAAO,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;QACpE,CAAC;QACD,6EAA6E;QAC7E,2EAA2E;QAC3E,2EAA2E;QAC3E,6EAA6E;QAC7E,uDAAuD;QACvD,aAAa,EAAE,KAAK,EAAE,EAAU,EAAE,EAAE;YAClC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;YACzC,KAAK,MAAM,GAAG,IAAI,MAAM,UAAU,EAAE,EAAE,CAAC;gBACrC,IAAK,mBAA2C,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC;oBAAE,SAAS;gBAC1E,MAAM,IAAI,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;gBACvC,IAAI,IAAI,KAAK,IAAI;oBAAE,SAAS;gBAC5B,IAAI,CAAC;oBACH,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;gBACzC,CAAC;gBAAC,MAAM,CAAC;oBACP,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC3B,CAAC;YACH,CAAC;YACD,OAAO,OAAO,CAAC,aAAa,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;QACnD,CAAC;QACD,YAAY,EAAE,KAAK,EAAE,KAAc,EAAE,EAAE;YACrC,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE,CAAqD,CAAC;YAClF,oCAAoC,CAClC,OAAO,CAAC,mBAAmB,EAC3B,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,iBAAiB,IAAI,EAAE,EAC/B,UAAU,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,mBAAmB,CACvD,CAAC;YACF,OAAO,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACvC,CAAC;QACD,WAAW,EAAE,KAAK,IAAI,EAAE;YACtB,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;YACnE,OAAO,EAAE,OAAO,EAAE,IAAiB,EAAE,QAAQ,EAAE,QAAqB,EAAE,CAAC;QACzE,CAAC;QACD,GAAG,kBAAkB,CAAC,OAAO,EAAE,aAAa,CAAC;QAC7C,YAAY,EAAE,KAAK,EACjB,EAAU,EACV,KAOC,EACD,EAAE;YACF,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACtC,IAAI,CAAC,OAAO;gBAAE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,EAAE,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACvF,MAAM,SAAS,GACb,KAAK,CAAC,mBAAmB,KAAK,SAAS;gBACrC,CAAC,CAAC,OAAO,CAAC,qBAAqB;gBAC/B,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC;YAChC,MAAM,IAAI,GAAG,KAAK,CAAC,iBAAiB,IAAI,OAAO,CAAC,kBAAkB,CAAC;YACnE,MAAM,OAAO,GACX,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;YACtF,IACE,KAAK,CAAC,mBAAmB,KAAK,SAAS;gBACvC,KAAK,CAAC,cAAc,KAAK,SAAS;gBAClC,KAAK,CAAC,iBAAiB,KAAK,SAAS,EACrC,CAAC;gBACD,oCAAoC,CAClC,SAAS,EACT,OAAO,EACP,IAAI,EACJ,UAAU,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,mBAAmB,CACvD,CAAC;YACJ,CAAC;YACD,OAAO,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE;gBAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,KAAK,EAAE,KAAK,CAAC,KAAY;gBACzB,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;gBAC9C,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;gBAC1C,oEAAoE;gBACpE,yEAAyE;gBACzE,sEAAsE;gBACtE,sEAAsE;gBACtE,gEAAgE;gBAChE,MAAM,EAAE,KAAK,CAAC,MAAa;aAC5B,CAAC,CAAC;QACL,CAAC;QACD,WAAW,EAAE,KAAK,EAAE,EAAU,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAC1D,aAAa,EAAE,KAAK,EAAE,EAAU,EAAE,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QAC9D,WAAW,EAAE,KAAK,EAAE,EAAU,EAAE,EAAE;YAChC,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACrC,IAAI,CAAC,MAAM;gBAAE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,EAAE,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACtF,uEAAuE;YACvE,uEAAuE;YACvE,wDAAwD;YACxD,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YACvC,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBACxD,MAAM,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAClD,CAAC;YACD,sEAAsE;YACtE,0EAA0E;YAC1E,iCAAiC;YACjC,gBAAgB,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,eAAe,EAAE,EAAE,CAAC,CAAC;YAC3D,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,WAAW,EAAE,KAAK,EAAE,EAAU,EAAE,IAAwB,EAAE,EAAE,CAAC,eAAe,CAAC,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC;QAC/F,SAAS,EAAE,gBAAgB;QAC3B,WAAW,EAAE,kBAAkB;QAC/B,mBAAmB,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,YAAY,CAAC,aAAa,CAAC,KAAK,CAAC;QACzE,iBAAiB,EAAE,CAAC,KAAa,EAAE,aAAqB,EAAE,OAAgB,EAAE,EAAE,CAC5E,YAAY,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,EAAE,OAAO,CAAC;QACpD,gBAAgB,EAAE,CAAC,KAAa,EAAE,MAAe,EAAE,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC;QAC7F,iCAAiC,EAAE,CACjC,KAAa,EACb,MAAe,EACf,WAA8D,EAC9D,EAAE,CAAC,OAAO,CAAC,iCAAiC,CAAC,MAAM,EAAE,KAAK,EAAE,WAAW,CAAC;QAC1E,sBAAsB,EAAE,CACtB,KAAa,EACb,MAAe,EACf,QAA+C,EAC/C,WAA+D,EAC/D,EAAE,CAAC,OAAO,CAAC,sBAAsB,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,QAAQ,EAAE,EAAE,WAAW,CAAC;QAChF,aAAa,EAAE,KAAK,EAClB,MAAe,EACf,KAA2E,EAC3E,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC;QACzC,gBAAgB,EAAE,KAAK,EAAE,EAAU,EAAE,MAAe,EAAE,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,EAAE,MAAM,CAAC;QAC7F,YAAY,EAAE,KAAK,EAAE,EAAU,EAAE,KAAc,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC;QACnF,SAAS,EAAE,KAAK,EAAE,KAAwB,EAAE,EAAE,CAC5C,CAAC,KAAK,EAAE,YAAY,IAAI,CAAC,KAAK,EAAE,KAAK,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM;YACjE,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,aAAa,EAAE,CAAC;YAChD,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC;QAC1B,aAAa,EAAE,KAAK,EAAE,KAAiE,EAAE,EAAE,CACzF,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,eAAe,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC;QACpE,aAAa,EAAE,KAAK,EAAE,KAA8C,EAAE,EAAE,CACtE,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC;QACvD,iBAAiB,EAAE,KAAK,IAAI,EAAE,CAAC,2BAA2B,EAAE;QAC5D,gBAAgB,EAAE,KAAK,EAAE,KAA2B,EAAE,EAAE,CACtD,uBAAuB,CAAC,KAAK,CAAC,QAAQ,CAAC;QACzC,cAAc,EAAE,KAAK,EAAE,KAItB,EAAE,EAAE;YACH,uEAAuE;YACvE,gEAAgE;YAChE,MAAM,OAAO,GAAG,8BAA8B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC9D,MAAM,UAAU,GAAG,MAAM,2BAA2B,CAAC,OAAO,CAAC,OAAO,EAAE;gBACpE,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B,CAAC,CAAC;YACH,yBAAyB,CAAC,UAAU,CAAC,CAAC;YACtC,OAAO,SAAS,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE;gBACjC,GAAG,EAAE,KAAK,CAAC,cAAc;gBACzB,MAAM,EAAE,KAAK,CAAC,QAAQ;aACvB,CAAC,CAAC;QACL,CAAC;QACD,aAAa,EAAE,KAAK,EAAE,KAAe,EAAE,EAAE;YACvC,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;YACzB,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,KAAwC,CAAC,EAAE,CAAC;QACvE,CAAC;QACD,cAAc,EAAE,KAAK,EAAE,KAAc,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC;QACnE,gBAAgB,EAAE,KAAK,EAAE,KAAc,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;QACvE,cAAc,EAAE,KAAK,EAAE,KAAc,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC;QACnE,cAAc,EAAE,KAAK,EAAE,KAAc,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC;QACnE,aAAa,EAAE,KAAK,EAAE,KAAc,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC;QACjE,iBAAiB,EAAE,KAAK,EAAE,KAAc,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC;QACzE,cAAc,EAAE,KAAK,EAAE,KAAc,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC;QACnE,aAAa,EAAE,KAAK,EAAE,SAAiB,EAAE,WAAoB,EAAE,EAAE,CAC/D,gBAAgB,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC;QACjD,wBAAwB,EAAE,KAAK,EAAE,SAAiB,EAAE,EAAE,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;QAC5F,yBAAyB,EAAE,KAAK,EAAE,SAAiB,EAAE,EAAE,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;QAC9F,uBAAuB,EAAE,KAAK,EAAE,SAAiB,EAAE,EAAE,CACnD,gBAAgB,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE;QAC9C,2BAA2B,EAAE,KAAK,EAAE,SAAiB,EAAE,KAAc,EAAE,EAAE;YACvE,MAAM,OAAO,GAAG,KAAiE,CAAC;YAClF,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;gBAC3B,OAAO,gBAAgB,CAAC,SAAS,CAAC,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;YACtE,CAAC;YACD,MAAM,SAAS,GAAG,cAAc,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;YAC9D,IAAI,SAAS,CAAC,WAAW,KAAK,WAAW,IAAI,YAAY,CAAC,0BAA0B,EAAE,EAAE,CAAC;gBACvF,OAAO,SAAS,CAAC,OAAO,CAAC;YAC3B,CAAC;YACD,OAAO,YAAY,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC;QAC1F,CAAC;QACD,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,gBAAgB,CAAC,eAAe,CAAC;QACvD,GAAG,oBAAoB,CAAC,aAAa,CAAC;QACtC,oEAAoE;QACpE,mEAAmE;QACnE,yEAAyE;QACzE,kEAAkE;QAClE,GAAG,+BAA+B,CAAC,aAAa,CAAC;QACjD,wEAAwE;QACxE,wEAAwE;QACxE,2EAA2E;QAC3E,GAAG,0BAA0B,CAAC;YAC5B,OAAO;YACP,aAAa;YACb,WAAW;YACX,gBAAgB;YAChB,cAAc,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE,CACvC,qBAAqB,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC;SACzD,CAAC;QACF,qEAAqE;QACrE,sEAAsE;QACtE,wEAAwE;QACxE,uEAAuE;QACvE,0EAA0E;QAC1E,4DAA4D;QAC5D,yBAAyB,EAAE,KAAK,EAAE,KAAc,EAAE,EAAE;YAClD,MAAM,OAAO,GAAG,uCAAuC,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAC3E,MAAM,UAAU,GAAG,gCAAgC,CACjD,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,EACnC,OAAO,CAAC,SAAS,CAClB,CAAC;YACF,gBAAgB,EAAE,CAAC;YACnB,OAAO,EAAE,UAAU,EAAE,CAAC;QACxB,CAAC;QACD,uEAAuE;QACvE,uEAAuE;QACvE,wEAAwE;QACxE,yDAAyD;QACzD,uBAAuB,EAAE,KAAK,EAAE,KAAc,EAAE,EAAE;YAChD,MAAM,OAAO,GAAG,qCAAqC,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YACzE,MAAM,EAAE,OAAO,EAAE,GAAG,wBAAwB,CAAC;gBAC3C,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;aACjC,CAAC,CAAC;YACH,gBAAgB,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;YACjF,OAAO;gBACL,OAAO;gBACP,MAAM,EAAE,2BAA2B,CACjC,MAAM,mBAAmB,CAAC,OAAO,CAAC,EAClC,aAAa,EAAE,CAAC,IAAI,EAAE,CACvB;aACF,CAAC;QACJ,CAAC;QACD,cAAc,EAAE,KAAK,EAAE,KAAc,EAAE,EAAE;YACvC,MAAM,CAAC,GAAG,4BAA4B,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAC1D,mEAAmE;YACnE,oEAAoE;YACpE,iEAAiE;YACjE,0EAA0E;YAC1E,0EAA0E;YAC1E,4DAA4D;YAC5D,MAAM,oBAAoB,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;YAC/C,gBAAgB,EAAE,CAAC;YACnB,OAAO,gBAAgB,CAAC,eAAe,CAAC,CAAC;QAC3C,CAAC;QACD,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;YACxB,OAAO,EAAE,WAAW,CAAC,eAAe,EAAE;YACtC,OAAO,EAAE,WAAW,CAAC,IAAI,EAAE;SAC5B,CAAC;QACF,SAAS,EAAE,KAAK,EAAE,KAAc,EAAE,EAAE;YAClC,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAA4B,CAAC;YACnD,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YACpE,uEAAuE;YACvE,wEAAwE;YACxE,0DAA0D;YAC1D,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/B,MAAM,MAAM,CAAC,MAAM,CACjB,IAAI,KAAK,CAAC,oEAAoE,IAAI,GAAG,CAAC,EACtF,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC7C,gBAAgB,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;YACvC,OAAO;gBACL,IAAI;gBACJ,OAAO;gBACP,MAAM,EAAE,IAAI;gBACZ,GAAG,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvF,CAAC;QACJ,CAAC;QACD,YAAY,EAAE,KAAK,EAAE,IAAY,EAAE,EAAE;YACnC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACzB,gBAAgB,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;YACvC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACjC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/credential-commands.d.ts

@@ -1,9 +1,25 @@
+/**
+ * Credential surfaces: the managed secret store and INV-135 credential
+ * profiles. Thin clients — the daemon owns storage and doctor probes; the
+ * profile login spawns the SAME vendor command the setup jobs run, in this
+ * interactive terminal, scoped to the profile's config dir.
+ */
+import { spawnSync } from "node:child_process";
 import { type ParsedArgs } from "./args.js";
+import { daemonGet } from "./ops-commands.js";
 /**
  * Thin client over the daemon's credential-profile listing (INV-135): the
  * durable registry lives in the global config; readiness is the daemon
  * doctor's projection — this command never probes vendors itself.
  */
 export declare function profilesCommand(args: ParsedArgs, json: boolean): Promise<number>;
+export interface ProfilesCommandDeps {
+    daemonGet?: typeof daemonGet;
+    spawnSync?: typeof spawnSync;
+    platform?: NodeJS.Platform;
+}
+/** Injectable only at the process/vendor boundary so policy ordering has a
+ * zero-spawn regression test without contacting a daemon or vendor. */
+export declare function profilesCommandWithDeps(args: ParsedArgs, json: boolean, deps?: ProfilesCommandDeps): Promise<number>;
 export declare function secretsCommand(args: ParsedArgs, json: boolean): Promise<number>;
 //# sourceMappingURL=credential-commands.d.ts.map

package/dist/credential-commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"credential-commands.d.ts","sourceRoot":"","sources":["../src/credential-commands.ts"],"names":[],"mappings":"AAyBA,OAAO,EAAE,KAAK,UAAU,EAAW,MAAM,WAAW,CAAC;AAarD;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAiRtF;AAED,wBAAsB,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CA0ErF"}
+{"version":3,"file":"credential-commands.d.ts","sourceRoot":"","sources":["../src/credential-commands.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAoB/C,OAAO,EAAE,KAAK,UAAU,EAAW,MAAM,WAAW,CAAC;AAIrD,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAY9C;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAEtF;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,CAAC,EAAE,OAAO,SAAS,CAAC;IAC7B,SAAS,CAAC,EAAE,OAAO,SAAS,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;CAC5B;AAED;uEACuE;AACvE,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,OAAO,EACb,IAAI,GAAE,mBAAwB,GAC7B,OAAO,CAAC,MAAM,CAAC,CAkUjB;AAED,wBAAsB,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CA0ErF"}

package/dist/credential-commands.js

@@ -6,7 +6,7 @@
  */
 import { spawnSync } from "node:child_process";
 import { registerConfigDirProfile } from "./profile-registration.js";
-import { ControlCredentialProfileDeleteResponse, ControlCredentialProfileUpdateResponse, ControlCredentialProfilesResponse, ControlSecretListResponse, ControlSecretMutationResponse, ControlSecretSetRequest, ControlSetupJob, } from "@claudexor/schema";
+import { ControlAccountsMigrationRollbackResponse, ControlCredentialProfileDeleteResponse, ControlCredentialProfileUpdateResponse, ControlCredentialProfilesResponse, ControlSecretListResponse, ControlSecretMutationResponse, ControlSecretSetRequest, ControlSetupJob, } from "@claudexor/schema";
 import { streamDurableCodexLogin, terminalLoginFallback } from "./setup-login-inline.js";
 import { MANAGED_SECRET_NAMES, isManagedSecretName } from "@claudexor/secrets";
 import { CONFIG_DIR_LOGIN_HARNESSES, canonicalProfileLoginDir, configDirLoginHarnessList, isConfigDirLoginHarness, } from "./config-dir-login-harnesses.js";
@@ -16,6 +16,9 @@ import { ensureDaemon } from "./daemon-run.js";
 import { controlApiFetch } from "./live.js";
 import { daemonGet } from "./ops-commands.js";
 import { nativeLoginEnv, nativeLoginSpec } from "./native-login.js";
+import { credentialProfilePolicyProblem, credentialProfilePolicyState } from "@claudexor/core";
+import { buildRegistry } from "./registry.js";
+import { CliError, renderCliFailure } from "./cli-error.js";
 async function stdinText() {
     const chunks = [];
     for await (const chunk of process.stdin)
@@ -28,25 +31,53 @@ async function stdinText() {
  * doctor's projection — this command never probes vendors itself.
  */
 export async function profilesCommand(args, json) {
+    return profilesCommandWithDeps(args, json);
+}
+/** Injectable only at the process/vendor boundary so policy ordering has a
+ * zero-spawn regression test without contacting a daemon or vendor. */
+export async function profilesCommandWithDeps(args, json, deps = {}) {
+    const get = deps.daemonGet ?? daemonGet;
+    const spawnVendor = deps.spawnSync ?? spawnSync;
     const sub = args._[1] ?? "list";
     if (sub === "login") {
         // INV-135 profile login: the SAME vendor login command the setup jobs run,
-        // spawned interactively in THIS terminal with the profile's scoped config
-        // dir. The default vendor store is never touched; the doctor probe after
-        // exit is the verification truth.
+        // spawned interactively in THIS terminal with the profile's scoped state.
+        // Some platforms keep the vendor credential at OS-user scope; the doctor
+        // probe after exit is the verification truth.
         const harness = args._[2];
         const profileId = args._[3];
         if (!harness || !profileId) {
             return printUsageError(json, "usage: claudexor profiles login <harness> <profile-id>");
         }
-        // Claude profile login is deliberately the vendor's interactive TTY flow.
-        // Inheriting its stdout while also promising one JSON object would corrupt
-        // the machine surface, so refuse before discovery, prose, or spawn. Codex
-        // keeps its daemon-owned device-code JSON flow below.
+        const listing = ControlCredentialProfilesResponse.parse(await get("/credential-profiles"));
+        // The listing is the canonical registry projection. Apply the same static
+        // platform/cardinality gate as setup jobs before emitting interactive
+        // prose, spawning a vendor, or contacting any vendor surface. This closes
+        // the direct profile-login bypass without changing the valid TTY flow.
+        const adapter = buildRegistry({ includeFakes: false }).get(harness);
+        if (adapter) {
+            const state = credentialProfilePolicyState({
+                adapter,
+                registry: listing.profiles.map((row) => row.profile),
+                platform: deps.platform,
+            });
+            if (state.ambiguous) {
+                const problem = credentialProfilePolicyProblem(state, "credential_profile_ambiguous");
+                return renderCliFailure(json, new CliError("operational", problem.message, {
+                    code: problem.code,
+                    retryable: problem.retryable,
+                    fieldErrors: problem.fieldErrors,
+                    requiredActions: problem.requiredActions,
+                    context: problem.context,
+                }));
+            }
+        }
+        // Non-Codex profile login is deliberately the vendor's interactive TTY
+        // flow. Refuse JSON only after the static registry policy above so JSON
+        // cannot bypass the same typed ambiguity disposition as human mode.
         if (json && harness !== "codex") {
             return printUsageError(true, `claudexor profiles login ${harness} is interactive and does not support --json`);
         }
-        const listing = ControlCredentialProfilesResponse.parse(await daemonGet("/credential-profiles"));
         const entry = listing.profiles.find((p) => p.profile.harness_id === harness && p.profile.profile_id === profileId);
         if (!entry) {
             return printUsageError(json, `no credential profile "${profileId}" for harness "${harness}" (register it in the global config's credential_profiles)`);
@@ -109,14 +140,14 @@ export async function profilesCommand(args, json) {
         }
         const configDir = canonicalProfileLoginDir(harness, profile.isolation_locator ?? "");
         print(`running ${spec.displayCommand} into ${configDir}`);
-        const child = spawnSync(spec.binary, spec.args, {
+        const child = spawnVendor(spec.binary, spec.args, {
             stdio: "inherit",
             env: nativeLoginEnv(harness, process.env, configDir),
         });
         if (child.status !== 0) {
             print(`login command exited with ${child.status ?? child.signal ?? "unknown"}`);
         }
-        const after = ControlCredentialProfilesResponse.parse(await daemonGet("/credential-profiles")).profiles.find((p) => p.profile.harness_id === harness && p.profile.profile_id === profileId);
+        const after = ControlCredentialProfilesResponse.parse(await get("/credential-profiles")).profiles.find((p) => p.profile.harness_id === harness && p.profile.profile_id === profileId);
         const status = after?.status;
         if (json)
             printJson({ profile: after?.profile ?? profile, status: status ?? null });
@@ -188,8 +219,8 @@ export async function profilesCommand(args, json) {
             return printUsageError(json, "usage: claudexor profiles remove <harness> <profile-id>");
         }
         // Daemon-owned removal (one mutation path): registry entry + the profile's
-        // own credential material (scoped login dir / namespaced secret); refuses
-        // while a login job for the account is active.
+        // binding plus data Claudexor owns; vendor-owned OS-user credentials are
+        // reported explicitly and left untouched. Active login jobs still refuse.
         const { addr } = await ensureDaemon();
         const response = await controlApiFetch(addr, `/credential-profiles/${encodeURIComponent(harness)}/${encodeURIComponent(profileId)}`, { method: "DELETE", headers: { Authorization: `Bearer ${addr.token}` } });
         if (!response.ok) {
@@ -200,24 +231,56 @@ export async function profilesCommand(args, json) {
             printJson(receipt);
         else {
             print(`removed ${harness}/${profileId} (${receipt.credentialCleanup})`);
+            if (receipt.vendorCredentialDisposition) {
+                print("Claudexor removed the binding and any Claudexor-owned state or managed secret; it did not change any vendor credential for this OS user.");
+            }
             if (receipt.cleanupWarning)
                 print(`warning: ${receipt.cleanupWarning}`);
         }
         return 0;
     }
+    if (sub === "rollback-migration") {
+        // The supported downgrade path of the unified-accounts startup migration:
+        // sessions/checkpoints/lane homes return to the engine-default keys and
+        // the auto-registered row leaves the registry. Run BEFORE installing an
+        // engine whose canonicalizers refuse the migrated row's native locator.
+        const harness = args._[2];
+        const { addr } = await ensureDaemon();
+        const response = await controlApiFetch(addr, "/accounts-migration/rollback", {
+            method: "POST",
+            headers: { Authorization: `Bearer ${addr.token}`, "content-type": "application/json" },
+            body: JSON.stringify(harness ? { harnessId: harness } : {}),
+        });
+        if (!response.ok) {
+            return printUsageError(json, `migration rollback failed (${response.status}): ${await response.text()}`);
+        }
+        const receipt = ControlAccountsMigrationRollbackResponse.parse(await response.json());
+        if (json)
+            printJson(receipt);
+        else if (receipt.rolledBack.length === 0)
+            print("nothing to roll back (no migrated harness)");
+        else {
+            for (const entry of receipt.rolledBack) {
+                print(`rolled back ${entry.harness_id} (row ${entry.row_id}): ${entry.sessions} sessions, ${entry.checkpoints} checkpoints, ${entry.lanes} lane homes`);
+                if (entry.skipped_partitions.length > 0) {
+                    print(`warning: quarantined partition(s) not rolled back: ${entry.skipped_partitions.join(", ")} — recover them and rerun before downgrading`);
+                }
+            }
+        }
+        return 0;
+    }
     if (sub !== "list") {
-        return printUsageError(json, "usage: claudexor profiles [list | add <harness> <profile-id> | login <harness> <profile-id> | enable <harness> <profile-id> | disable <harness> <profile-id> | remove <harness> <profile-id>]");
+        return printUsageError(json, "usage: claudexor profiles [list | add <harness> <profile-id> | login <harness> <profile-id> | enable <harness> <profile-id> | disable <harness> <profile-id> | remove <harness> <profile-id> | rollback-migration [harness]]");
     }
-    const result = ControlCredentialProfilesResponse.parse(await daemonGet("/credential-profiles"));
+    const result = ControlCredentialProfilesResponse.parse(await get("/credential-profiles"));
     if (json) {
         printJson(result);
         return 0;
     }
-    // Symmetric accounts rows (INV-135, D25): per harness, every credential
-    // profile (the Enabled toggle — the only routing control) plus the native
-    // "CLI login" row, and an informational "next up" line naming who an unpinned
-    // run would route to. The server owns native/next-up truth — this surface
-    // never re-derives it.
+    // Unified account model (INV-135): every account is a named registry row
+    // with an Enabled toggle (the only routing control); routing facts come from
+    // the server-owned accountPools projection. This surface never re-derives
+    // pool truth, and there is no separate native/CLI-login pseudo-row.
     const byHarness = new Map();
     for (const entry of result.profiles) {
         const list = byHarness.get(entry.profile.harness_id) ?? [];
@@ -225,36 +288,27 @@ export async function profilesCommand(args, json) {
         byHarness.set(entry.profile.harness_id, list);
     }
     const harnessIds = [
-        ...new Set([...result.harnessAccounts.map((h) => h.harness_id), ...byHarness.keys()]),
+        ...new Set([...result.accountPools.map((pool) => pool.harness_id), ...byHarness.keys()]),
     ].sort();
     if (harnessIds.length === 0) {
-        print("no accounts (add credential_profiles entries to the global config, or log in a harness)");
+        print("no accounts (connect one with `claudexor auth login <harness>`)");
         return 0;
     }
     for (const harnessId of harnessIds) {
-        const authority = result.harnessAccounts.find((h) => h.harness_id === harnessId);
         print(`${harnessId}:`);
-        // The native "CLI login" pseudo-row: same Enabled toggle, no Delete.
-        const nativeEnabled = authority?.native_credentials_enabled ?? true;
-        const nativeState = !nativeEnabled
-            ? "disabled"
-            : authority?.native_login_detected
-                ? "logged-in"
-                : "not-logged-in";
-        print(`  CLI login [native] ${nativeState}`);
-        for (const { profile, status } of byHarness.get(harnessId) ?? []) {
+        const rows = byHarness.get(harnessId) ?? [];
+        if (rows.length === 0)
+            print("  (no accounts)");
+        for (const { profile, status } of rows) {
             const state = profile.enabled ? status.availability : "disabled";
             print(`  ${profile.profile_id} [${profile.credential_kind}] ${state}${status.detail ? ` — ${status.detail}` : ""}`);
         }
         // Informational: who an UNPINNED run routes to next (never a user setting).
-        const nextUp = authority?.next_up;
-        if (nextUp?.kind === "native") {
-            print(nextUp.route === "api_key"
-                ? `  next up: API key [default]`
-                : `  next up: CLI login [native]`);
-        }
-        else if (nextUp?.kind === "profile")
+        const nextUp = result.accountPools.find((pool) => pool.harness_id === harnessId)?.next_up;
+        if (nextUp?.kind === "profile")
             print(`  next up: ${nextUp.profileId}`);
+        else if (nextUp?.kind === "api_key_route")
+            print(`  next up: API key (paid route)`);
         else if (nextUp?.kind === "none")
             print(`  next up: nothing routable (${nextUp.reason})`);
     }