@cleocode/core 2026.10.2 → 2026.10.4

package/dist/cloud/nexus-first-run.d.ts

@@ -0,0 +1,142 @@
+/**
+ * The guided first run of `cleo login nexus` (T13102, owner decision
+ * 2026-10-02: onboarding = A + B + C' + D, so that `cleo login` is the only
+ * setup step in practice). It runs after a successful sign-in and never fails
+ * it: every problem becomes a state, a warning and the exact next command.
+ *
+ * - **Inside a CLEO project this device has not linked**: offer "link and
+ *   back up now". With consent `yes` (`--yes`) it links the project through
+ *   {@link linkProjectToNexus} (the same path as `cleo project link`, so the
+ *   project key created at registration comes with it) and then takes the
+ *   first encrypted backup through {@link pushNexusVault}. With `prompt` (a
+ *   terminal) it asks first. With `never` (a non-interactive run: an agent)
+ *   it never asks and reports the exact next command.
+ * - **Inside an unlinked project the cloud already backs up**, from another
+ *   device, and this copy never synced (a fresh clone on a new machine: the
+ *   project id is tracked in git): a backup would be refused as behind, so
+ *   the offer is to restore that backup here ({@link restoreNexusVault}, then
+ *   the same link), under the same consent rules.
+ * - **Inside a project linked and attached from this device**: nothing to do.
+ * - **Outside a CLEO project**: list the account's projects by name
+ *   ({@link listNexusNamedProjects}) with the exact `cleo cloud restore`
+ *   command for each one this machine can restore.
+ * - **A read-only device, or device credentials off**: skipped.
+ *
+ * Every printed command carries `--api-url` when the origin is not the
+ * default. No function here logs, prompts or prints: the caller supplies
+ * `confirm` and `onStep`.
+ *
+ * @task T13102
+ * @epic T12322
+ */
+import type { CloudPushResult, CloudRestoreResult, NexusFirstRunResult, NexusFirstRunState, NexusProjectLinkResult } from '@cleocode/contracts';
+import { type NexusLinkOptions } from './nexus-link.js';
+import { type NexusNamedProjectsOptions, type NexusNamedProjectsResult } from './nexus-project-names.js';
+import { type NexusVaultCommandOptions, type NexusVaultRestoreOptions } from './nexus-vault.js';
+import type { NexusVaultOptions } from './nexus-vault-keys.js';
+/** The question a terminal is asked before linking and backing up. */
+export declare const NEXUS_FIRST_RUN_QUESTION = "This project is not linked to Cleo Nexus. Link it and back it up now (encrypted)?";
+/** The question a terminal is asked before restoring a backup this copy never synced. */
+export declare const NEXUS_FIRST_RUN_RESTORE_QUESTION = "Cleo Nexus holds a backup of this project from another device. Restore it here now?";
+/** Warning code: linking the project failed. */
+export declare const W_NEXUS_FIRST_RUN_LINK = "W_NEXUS_FIRST_RUN_LINK";
+/** Warning code: the first backup failed. */
+export declare const W_NEXUS_FIRST_RUN_BACKUP = "W_NEXUS_FIRST_RUN_BACKUP";
+/** Warning code: restoring the cloud's backup failed. */
+export declare const W_NEXUS_FIRST_RUN_RESTORE = "W_NEXUS_FIRST_RUN_RESTORE";
+/** Warning code: the account's projects could not be listed. */
+export declare const W_NEXUS_FIRST_RUN_PROJECTS = "W_NEXUS_FIRST_RUN_PROJECTS";
+/** Warning code: a non-fatal problem the link reported. */
+export declare const W_NEXUS_FIRST_RUN_LINK_NOTE = "W_NEXUS_FIRST_RUN_LINK_NOTE";
+/**
+ * Whether the first run may act: `yes` does it, `prompt` asks through
+ * `confirm`, `never` only reports the next command.
+ */
+export type NexusFirstRunConsent = 'yes' | 'prompt' | 'never';
+/** A step the first run is about to take (for progress lines). */
+export type NexusFirstRunStep = 'link' | 'backup' | 'restore' | 'projects';
+/** What {@link NexusFirstRunOptions.cloudBackup} is asked about. */
+export interface NexusCloudBackupQuery extends NexusVaultOptions {
+    /** API origin. */
+    apiUrl: string;
+    /** The project's root on this machine. */
+    projectRoot: string;
+    /** The server's project id (the tracked local id, or the link's remote id). */
+    projectId: string;
+}
+/** Options of {@link runNexusFirstRun}. */
+export interface NexusFirstRunOptions extends NexusVaultOptions {
+    /** `yes` (`--yes`), `prompt` (a terminal) or `never` (non-interactive). */
+    consent: NexusFirstRunConsent;
+    /**
+     * Asks a yes/no question (`prompt` only); `defaultYes` is what an empty answer means
+     * (yes for link and back up, no for a restore). Without it, `prompt` acts as `never`.
+     */
+    confirm?: (question: string, defaultYes: boolean) => Promise<boolean>;
+    /** The device login enrolled, to tell projects attached here from others. */
+    deviceId?: string | null;
+    /** The device signed in with the read-only profile: it cannot link or back up. */
+    readOnly?: boolean;
+    /** Called before each step (progress lines). */
+    onStep?: (step: NexusFirstRunStep) => void;
+    /** Link (tests); defaults to {@link linkProjectToNexus}. */
+    link?: (opts: NexusLinkOptions) => Promise<NexusProjectLinkResult>;
+    /** Push (tests); defaults to {@link pushNexusVault}. */
+    push?: (opts: NexusVaultCommandOptions) => Promise<CloudPushResult>;
+    /** Restore (tests); defaults to {@link restoreNexusVault}. */
+    restore?: (opts: NexusVaultRestoreOptions) => Promise<CloudRestoreResult>;
+    /** Unsynced-backup check (tests); defaults to {@link hasUnsyncedNexusBackup}. */
+    cloudBackup?: (query: NexusCloudBackupQuery) => Promise<boolean>;
+    /** Project list (tests); defaults to {@link listNexusNamedProjects}. */
+    listProjects?: (opts: NexusNamedProjectsOptions) => Promise<NexusNamedProjectsResult>;
+}
+/**
+ * A first-run result with every field at its empty value.
+ *
+ * @param state - How it ended.
+ * @param fields - Fields to set.
+ * @returns The result.
+ */
+export declare function nexusFirstRunResult(state: NexusFirstRunState, fields?: Partial<Omit<NexusFirstRunResult, 'state'>>): NexusFirstRunResult;
+/** The commands a first run names (see {@link nexusFirstRunCommands}). */
+export interface NexusFirstRunCommands {
+    /** Link the current project, then push its first backup. */
+    linkAndBackUp: string;
+    /** Link the current project, then push it as a labelled fork over a newer cloud head. */
+    linkAndForkPush: string;
+    /** Push the current project. */
+    push: string;
+    /** Pull the cloud's newest snapshot into the current project. */
+    pull: string;
+    /** List the account's projects. */
+    projects: string;
+    /** Restore a project's backup into a directory. */
+    restore: (projectId: string, root: string) => string;
+}
+/**
+ * The commands a first run names, with `--api-url` when the origin is not the default.
+ *
+ * @param apiUrl - API origin.
+ * @returns The link-and-back-up, push, pull, list and restore commands.
+ */
+export declare function nexusFirstRunCommands(apiUrl: string): NexusFirstRunCommands;
+/**
+ * Whether Cleo Nexus holds a backup of the project that this copy never
+ * synced: the project is registered with a head snapshot (E14, a `GET`), and
+ * the vault state records no sync of its stream from this project root. Any
+ * failure answers `false`, so the run falls back to link and back up.
+ *
+ * @param query - API URL, project root and id, stores and test overrides.
+ * @returns `true` when a restore, not a backup, is the right first step.
+ */
+export declare function hasUnsyncedNexusBackup(query: NexusCloudBackupQuery): Promise<boolean>;
+/**
+ * The guided first run after `cleo login nexus` signed in. Never throws for a
+ * flow failure: the result's state, warnings and next command describe it.
+ *
+ * @param opts - Consent, prompt, device id, profile, API URL, stores and test overrides.
+ * @returns How it ended.
+ * @throws {NexusAccountError} `E_NEXUS_INVALID_API_URL` only (login has already checked it).
+ */
+export declare function runNexusFirstRun(opts: NexusFirstRunOptions): Promise<NexusFirstRunResult>;
+//# sourceMappingURL=nexus-first-run.d.ts.map

package/dist/cloud/nexus-first-run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nexus-first-run.d.ts","sourceRoot":"","sources":["../../src/cloud/nexus-first-run.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAGH,OAAO,KAAK,EACV,eAAe,EACf,kBAAkB,EAElB,mBAAmB,EACnB,kBAAkB,EAElB,sBAAsB,EACvB,MAAM,qBAAqB,CAAC;AAK7B,OAAO,EAAsB,KAAK,gBAAgB,EAAwB,MAAM,iBAAiB,CAAC;AAClG,OAAO,EAEL,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAG9B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAG9B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAG/D,sEAAsE;AACtE,eAAO,MAAM,wBAAwB,sFACgD,CAAC;AAEtF,yFAAyF;AACzF,eAAO,MAAM,gCAAgC,wFAC0C,CAAC;AAExF,gDAAgD;AAChD,eAAO,MAAM,sBAAsB,2BAA2B,CAAC;AAE/D,6CAA6C;AAC7C,eAAO,MAAM,wBAAwB,6BAA6B,CAAC;AAEnE,yDAAyD;AACzD,eAAO,MAAM,yBAAyB,8BAA8B,CAAC;AAErE,gEAAgE;AAChE,eAAO,MAAM,0BAA0B,+BAA+B,CAAC;AAEvE,2DAA2D;AAC3D,eAAO,MAAM,2BAA2B,gCAAgC,CAAC;AAEzE;;;GAGG;AACH,MAAM,MAAM,oBAAoB,GAAG,KAAK,GAAG,QAAQ,GAAG,OAAO,CAAC;AAE9D,kEAAkE;AAClE,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAC;AAE3E,oEAAoE;AACpE,MAAM,WAAW,qBAAsB,SAAQ,iBAAiB;IAC9D,kBAAkB;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,0CAA0C;IAC1C,WAAW,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,2CAA2C;AAC3C,MAAM,WAAW,oBAAqB,SAAQ,iBAAiB;IAC7D,2EAA2E;IAC3E,OAAO,EAAE,oBAAoB,CAAC;IAC9B;;;OAGG;IACH,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACtE,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,kFAAkF;IAClF,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,gDAAgD;IAChD,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,iBAAiB,KAAK,IAAI,CAAC;IAC3C,4DAA4D;IAC5D,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,gBAAgB,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACnE,wDAAwD;IACxD,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,wBAAwB,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;IACpE,8DAA8D;IAC9D,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,wBAAwB,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC1E,iFAAiF;IACjF,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,qBAAqB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACjE,wEAAwE;IACxE,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,yBAAyB,KAAK,OAAO,CAAC,wBAAwB,CAAC,CAAC;CACvF;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,kBAAkB,EACzB,MAAM,GAAE,OAAO,CAAC,IAAI,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAM,GACvD,mBAAmB,CAerB;AAED,0EAA0E;AAC1E,MAAM,WAAW,qBAAqB;IACpC,4DAA4D;IAC5D,aAAa,EAAE,MAAM,CAAC;IACtB,yFAAyF;IACzF,eAAe,EAAE,MAAM,CAAC;IACxB,gCAAgC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,IAAI,EAAE,MAAM,CAAC;IACb,mCAAmC;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,mDAAmD;IACnD,OAAO,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;CACtD;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,qBAAqB,CAW3E;AAoCD;;;;;;;;GAQG;AACH,wBAAsB,sBAAsB,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,OAAO,CAAC,CAmB3F;AA8LD;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAmC/F"}

package/dist/cloud/nexus-first-run.js

@@ -0,0 +1,352 @@
+/**
+ * The guided first run of `cleo login nexus` (T13102, owner decision
+ * 2026-10-02: onboarding = A + B + C' + D, so that `cleo login` is the only
+ * setup step in practice). It runs after a successful sign-in and never fails
+ * it: every problem becomes a state, a warning and the exact next command.
+ *
+ * - **Inside a CLEO project this device has not linked**: offer "link and
+ *   back up now". With consent `yes` (`--yes`) it links the project through
+ *   {@link linkProjectToNexus} (the same path as `cleo project link`, so the
+ *   project key created at registration comes with it) and then takes the
+ *   first encrypted backup through {@link pushNexusVault}. With `prompt` (a
+ *   terminal) it asks first. With `never` (a non-interactive run: an agent)
+ *   it never asks and reports the exact next command.
+ * - **Inside an unlinked project the cloud already backs up**, from another
+ *   device, and this copy never synced (a fresh clone on a new machine: the
+ *   project id is tracked in git): a backup would be refused as behind, so
+ *   the offer is to restore that backup here ({@link restoreNexusVault}, then
+ *   the same link), under the same consent rules.
+ * - **Inside a project linked and attached from this device**: nothing to do.
+ * - **Outside a CLEO project**: list the account's projects by name
+ *   ({@link listNexusNamedProjects}) with the exact `cleo cloud restore`
+ *   command for each one this machine can restore.
+ * - **A read-only device, or device credentials off**: skipped.
+ *
+ * Every printed command carries `--api-url` when the origin is not the
+ * default. No function here logs, prompts or prints: the caller supplies
+ * `confirm` and `onStep`.
+ *
+ * @task T13102
+ * @epic T12322
+ */
+import path from 'node:path';
+import { nexusCloudProjectDetailSchema } from '@cleocode/contracts';
+import { NexusAccountError, resolveNexusApiUrl } from './nexus-auth.js';
+import { connectNexusCloud, currentNexusCloudProject } from './nexus-cloud.js';
+import { isNexusDeviceEnabled } from './nexus-device.js';
+import { linkProjectToNexus, readNexusProjectLink } from './nexus-link.js';
+import { listNexusNamedProjects, nexusApiUrlFlag, shellQuoteWord, } from './nexus-project-names.js';
+import { pushNexusVault, restoreNexusVault, } from './nexus-vault.js';
+import { NexusVaultState } from './nexus-vault-state.js';
+/** The question a terminal is asked before linking and backing up. */
+export const NEXUS_FIRST_RUN_QUESTION = 'This project is not linked to Cleo Nexus. Link it and back it up now (encrypted)?';
+/** The question a terminal is asked before restoring a backup this copy never synced. */
+export const NEXUS_FIRST_RUN_RESTORE_QUESTION = 'Cleo Nexus holds a backup of this project from another device. Restore it here now?';
+/** Warning code: linking the project failed. */
+export const W_NEXUS_FIRST_RUN_LINK = 'W_NEXUS_FIRST_RUN_LINK';
+/** Warning code: the first backup failed. */
+export const W_NEXUS_FIRST_RUN_BACKUP = 'W_NEXUS_FIRST_RUN_BACKUP';
+/** Warning code: restoring the cloud's backup failed. */
+export const W_NEXUS_FIRST_RUN_RESTORE = 'W_NEXUS_FIRST_RUN_RESTORE';
+/** Warning code: the account's projects could not be listed. */
+export const W_NEXUS_FIRST_RUN_PROJECTS = 'W_NEXUS_FIRST_RUN_PROJECTS';
+/** Warning code: a non-fatal problem the link reported. */
+export const W_NEXUS_FIRST_RUN_LINK_NOTE = 'W_NEXUS_FIRST_RUN_LINK_NOTE';
+/**
+ * A first-run result with every field at its empty value.
+ *
+ * @param state - How it ended.
+ * @param fields - Fields to set.
+ * @returns The result.
+ */
+export function nexusFirstRunResult(state, fields = {}) {
+    return {
+        state,
+        reason: null,
+        projectRoot: null,
+        link: null,
+        offer: null,
+        backup: null,
+        restore: null,
+        projects: [],
+        nextCommand: null,
+        choices: [],
+        warnings: [],
+        ...fields,
+    };
+}
+/**
+ * The commands a first run names, with `--api-url` when the origin is not the default.
+ *
+ * @param apiUrl - API origin.
+ * @returns The link-and-back-up, push, pull, list and restore commands.
+ */
+export function nexusFirstRunCommands(apiUrl) {
+    const f = nexusApiUrlFlag(apiUrl);
+    return {
+        linkAndBackUp: `cleo project link${f} && cleo cloud push${f}`,
+        linkAndForkPush: `cleo project link${f} && cleo cloud push --force${f}`,
+        push: `cleo cloud push${f}`,
+        pull: `cleo cloud pull${f}`,
+        projects: `cleo cloud projects${f}`,
+        restore: (projectId, root) => `cleo cloud restore ${shellQuoteWord(projectId)} --into ${shellQuoteWord(root)}${f}`,
+    };
+}
+/** A failure as one secret-free line: code, message and remedy. */
+function describeFailure(err) {
+    if (err instanceof NexusAccountError) {
+        return `${err.code}: ${err.message}${err.fix ? `; ${err.fix}` : ''}`;
+    }
+    return err instanceof Error ? err.message : String(err);
+}
+/** The error's code, when it carries one. */
+function codeOf(err) {
+    return err instanceof NexusAccountError ? err.code : null;
+}
+/** The link is attached from this device (or, with no device id known, attached at all). */
+function attachedHere(link, deviceId) {
+    if (link === null || !link.replicaId)
+        return false;
+    return deviceId === null || link.nexusDeviceId === deviceId;
+}
+/** Ask, when asking is allowed; a failed or closed prompt answers no. */
+async function consented(opts, question, defaultYes) {
+    if (opts.consent === 'yes')
+        return true;
+    if (opts.consent !== 'prompt' || !opts.confirm)
+        return false;
+    try {
+        return await opts.confirm(question, defaultYes);
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Whether Cleo Nexus holds a backup of the project that this copy never
+ * synced: the project is registered with a head snapshot (E14, a `GET`), and
+ * the vault state records no sync of its stream from this project root. Any
+ * failure answers `false`, so the run falls back to link and back up.
+ *
+ * @param query - API URL, project root and id, stores and test overrides.
+ * @returns `true` when a restore, not a backup, is the right first step.
+ */
+export async function hasUnsyncedNexusBackup(query) {
+    try {
+        const conn = await connectNexusCloud(query);
+        const detail = await conn.find(`/v1/projects/${encodeURIComponent(query.projectId)}`, nexusCloudProjectDetailSchema);
+        const stream = detail?.stream ?? null;
+        if (stream === null || stream.headCheckpointId === null)
+            return false;
+        const synced = (query.vaultState ?? new NexusVaultState()).stream(conn.apiUrl, conn.device.userId, stream.streamId, path.resolve(query.projectRoot));
+        return !synced?.lastCheckpointId;
+    }
+    catch {
+        return false;
+    }
+}
+/** The link step's options from the vault options. */
+function linkOptions(vault, projectRoot) {
+    return {
+        apiUrl: vault.apiUrl,
+        projectRoot,
+        ...(vault.store ? { store: vault.store } : {}),
+        ...(vault.fetch ? { fetch: vault.fetch } : {}),
+        ...(vault.deviceStore ? { deviceStore: vault.deviceStore } : {}),
+    };
+}
+/** Link the project (the `cleo project link` path), then push its first backup. */
+async function linkAndBackUp(opts, vault, projectRoot) {
+    const commands = nexusFirstRunCommands(vault.apiUrl);
+    const base = { projectRoot, offer: 'link-and-backup' };
+    opts.onStep?.('link');
+    let linked;
+    try {
+        linked = await (opts.link ?? linkProjectToNexus)(linkOptions(vault, projectRoot));
+    }
+    catch (err) {
+        return nexusFirstRunResult('link-failed', {
+            ...base,
+            nextCommand: commands.linkAndBackUp,
+            warnings: [{ code: W_NEXUS_FIRST_RUN_LINK, message: describeFailure(err) }],
+        });
+    }
+    const warnings = linked.warnings.map((message) => ({
+        code: W_NEXUS_FIRST_RUN_LINK_NOTE,
+        message,
+    }));
+    if (linked.replica === null) {
+        // A push needs this copy attached from this device; the link's warning says why it is not.
+        return nexusFirstRunResult('backup-failed', {
+            ...base,
+            link: linked.link,
+            nextCommand: commands.linkAndBackUp,
+            warnings: [
+                ...warnings,
+                {
+                    code: W_NEXUS_FIRST_RUN_BACKUP,
+                    message: `not backed up: this copy is not attached from this device${linked.attachError ? ` (${linked.attachError.code}: ${linked.attachError.message})` : ''}`,
+                },
+            ],
+        });
+    }
+    opts.onStep?.('backup');
+    let pushed;
+    try {
+        pushed = await (opts.push ?? pushNexusVault)({ ...vault, projectRoot, scope: 'project' });
+    }
+    catch (err) {
+        return nexusFirstRunResult('backup-failed', {
+            ...base,
+            link: linked.link,
+            // Behind: another device pushed since this copy last synced; bring that state here first.
+            nextCommand: codeOf(err) === 'E_NEXUS_VAULT_BEHIND' ? commands.pull : commands.push,
+            warnings: [...warnings, { code: W_NEXUS_FIRST_RUN_BACKUP, message: describeFailure(err) }],
+        });
+    }
+    return nexusFirstRunResult('backed-up', {
+        ...base,
+        link: linked.link,
+        backup: { status: pushed.status, snapshot: pushed.snapshot },
+        warnings: [...warnings, ...pushed.warnings],
+    });
+}
+/** Restore the cloud's backup into this copy, then link it (the `cleo cloud restore` path). */
+async function restoreHere(opts, vault, projectRoot, projectId) {
+    const base = { projectRoot, offer: 'restore' };
+    opts.onStep?.('restore');
+    let restored;
+    try {
+        restored = await (opts.restore ?? restoreNexusVault)({
+            ...vault,
+            scope: 'project',
+            mode: 'restore',
+            projectId,
+            into: projectRoot,
+            relink: async (root) => {
+                try {
+                    return (await (opts.link ?? linkProjectToNexus)(linkOptions(vault, root))).warnings;
+                }
+                catch (err) {
+                    return [
+                        `restored, but linking this copy failed (${describeFailure(err)}); run \`cleo project link\``,
+                    ];
+                }
+            },
+        });
+    }
+    catch (err) {
+        const commands = nexusFirstRunCommands(vault.apiUrl);
+        const restoreCmd = commands.restore(projectId, projectRoot);
+        const warnings = [{ code: W_NEXUS_FIRST_RUN_RESTORE, message: describeFailure(err) }];
+        if (codeOf(err) === 'E_NEXUS_VAULT_LOCAL_CHANGES') {
+            // This copy has rows it never synced: rerunning the restore refuses the same way, so
+            // the user chooses which side wins (review LOW-2).
+            return nexusFirstRunResult('restore-failed', {
+                ...base,
+                choices: [
+                    {
+                        command: `${restoreCmd} --force`,
+                        effect: "take the cloud's backup; this copy's rows are replaced after a safety backup",
+                    },
+                    {
+                        command: commands.linkAndForkPush,
+                        effect: "keep this copy; it is pushed as a labelled fork over the cloud's newest backup",
+                    },
+                ],
+                warnings,
+            });
+        }
+        return nexusFirstRunResult('restore-failed', { ...base, nextCommand: restoreCmd, warnings });
+    }
+    return nexusFirstRunResult('restored', {
+        ...base,
+        link: readNexusProjectLink(projectRoot, vault.apiUrl),
+        restore: {
+            status: restored.status,
+            snapshot: restored.snapshot,
+            tables: restored.tables,
+            safetyBackup: restored.safetyBackup,
+        },
+        warnings: restored.warnings,
+    });
+}
+/** Outside a project: the account's projects by name, with their restore commands. */
+async function listProjectsStep(opts, vault) {
+    opts.onStep?.('projects');
+    try {
+        const listed = await (opts.listProjects ?? listNexusNamedProjects)({
+            ...vault,
+            deviceId: opts.deviceId ?? null,
+        });
+        const restorable = listed.projects.filter((p) => p.restoreCommand !== null);
+        return nexusFirstRunResult('projects', {
+            projects: listed.projects,
+            nextCommand: restorable.length === 1 ? (restorable[0]?.restoreCommand ?? null) : null,
+            warnings: listed.warnings,
+        });
+    }
+    catch (err) {
+        return nexusFirstRunResult('projects', {
+            nextCommand: nexusFirstRunCommands(vault.apiUrl).projects,
+            warnings: [{ code: W_NEXUS_FIRST_RUN_PROJECTS, message: describeFailure(err) }],
+        });
+    }
+}
+/** Inside an unlinked project: restore the cloud's backup, or link and back up; asking first. */
+async function offerInProject(opts, vault, project) {
+    const projectId = project.link?.remoteProjectId ?? project.projectId;
+    const restore = await (opts.cloudBackup ?? hasUnsyncedNexusBackup)({
+        ...vault,
+        projectRoot: project.root,
+        projectId,
+    });
+    const question = restore ? NEXUS_FIRST_RUN_RESTORE_QUESTION : NEXUS_FIRST_RUN_QUESTION;
+    // A restore replaces what this copy holds, so an empty answer means no (review LOW-3).
+    if (await consented(opts, question, !restore)) {
+        return restore
+            ? restoreHere(opts, vault, project.root, projectId)
+            : linkAndBackUp(opts, vault, project.root);
+    }
+    const commands = nexusFirstRunCommands(vault.apiUrl);
+    return nexusFirstRunResult(opts.consent === 'prompt' && opts.confirm ? 'declined' : 'offered', {
+        projectRoot: project.root,
+        link: project.link,
+        offer: restore ? 'restore' : 'link-and-backup',
+        nextCommand: restore ? commands.restore(projectId, project.root) : commands.linkAndBackUp,
+    });
+}
+/**
+ * The guided first run after `cleo login nexus` signed in. Never throws for a
+ * flow failure: the result's state, warnings and next command describe it.
+ *
+ * @param opts - Consent, prompt, device id, profile, API URL, stores and test overrides.
+ * @returns How it ended.
+ * @throws {NexusAccountError} `E_NEXUS_INVALID_API_URL` only (login has already checked it).
+ */
+export async function runNexusFirstRun(opts) {
+    if (opts.readOnly === true) {
+        return nexusFirstRunResult('skipped', {
+            reason: 'this device signed in with the read-only profile, which cannot link or back up',
+        });
+    }
+    if (!isNexusDeviceEnabled()) {
+        return nexusFirstRunResult('skipped', {
+            reason: 'device credentials are off (CLEO_NEXUS_DEVICE=0); linking and backups need them',
+        });
+    }
+    const { consent, confirm, deviceId, readOnly, onStep, link, push, restore, cloudBackup, listProjects, ...rest } = opts;
+    const apiUrl = resolveNexusApiUrl(opts.apiUrl);
+    const vault = { ...rest, apiUrl };
+    const project = currentNexusCloudProject(apiUrl, opts.projectRoot);
+    if (project === null)
+        return listProjectsStep(opts, vault);
+    if (attachedHere(project.link, deviceId ?? null)) {
+        return nexusFirstRunResult('already-linked', {
+            projectRoot: project.root,
+            link: project.link,
+        });
+    }
+    return offerInProject(opts, vault, project);
+}
+//# sourceMappingURL=nexus-first-run.js.map

package/dist/cloud/nexus-first-run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nexus-first-run.js","sourceRoot":"","sources":["../../src/cloud/nexus-first-run.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAU7B,OAAO,EAAE,6BAA6B,EAAE,MAAM,qBAAqB,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC/E,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAyB,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAClG,OAAO,EACL,sBAAsB,EAGtB,eAAe,EACf,cAAc,GACf,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAGL,cAAc,EACd,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,sEAAsE;AACtE,MAAM,CAAC,MAAM,wBAAwB,GACnC,mFAAmF,CAAC;AAEtF,yFAAyF;AACzF,MAAM,CAAC,MAAM,gCAAgC,GAC3C,qFAAqF,CAAC;AAExF,gDAAgD;AAChD,MAAM,CAAC,MAAM,sBAAsB,GAAG,wBAAwB,CAAC;AAE/D,6CAA6C;AAC7C,MAAM,CAAC,MAAM,wBAAwB,GAAG,0BAA0B,CAAC;AAEnE,yDAAyD;AACzD,MAAM,CAAC,MAAM,yBAAyB,GAAG,2BAA2B,CAAC;AAErE,gEAAgE;AAChE,MAAM,CAAC,MAAM,0BAA0B,GAAG,4BAA4B,CAAC;AAEvE,2DAA2D;AAC3D,MAAM,CAAC,MAAM,2BAA2B,GAAG,6BAA6B,CAAC;AAgDzE;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAyB,EACzB,SAAsD,EAAE;IAExD,OAAO;QACL,KAAK;QACL,MAAM,EAAE,IAAI;QACZ,WAAW,EAAE,IAAI;QACjB,IAAI,EAAE,IAAI;QACV,KAAK,EAAE,IAAI;QACX,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,IAAI;QACjB,OAAO,EAAE,EAAE;QACX,QAAQ,EAAE,EAAE;QACZ,GAAG,MAAM;KACV,CAAC;AACJ,CAAC;AAkBD;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAc;IAClD,MAAM,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAClC,OAAO;QACL,aAAa,EAAE,oBAAoB,CAAC,sBAAsB,CAAC,EAAE;QAC7D,eAAe,EAAE,oBAAoB,CAAC,8BAA8B,CAAC,EAAE;QACvE,IAAI,EAAE,kBAAkB,CAAC,EAAE;QAC3B,IAAI,EAAE,kBAAkB,CAAC,EAAE;QAC3B,QAAQ,EAAE,sBAAsB,CAAC,EAAE;QACnC,OAAO,EAAE,CAAC,SAAiB,EAAE,IAAY,EAAE,EAAE,CAC3C,sBAAsB,cAAc,CAAC,SAAS,CAAC,WAAW,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;KACvF,CAAC;AACJ,CAAC;AAED,mEAAmE;AACnE,SAAS,eAAe,CAAC,GAAY;IACnC,IAAI,GAAG,YAAY,iBAAiB,EAAE,CAAC;QACrC,OAAO,GAAG,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACvE,CAAC;IACD,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,6CAA6C;AAC7C,SAAS,MAAM,CAAC,GAAY;IAC1B,OAAO,GAAG,YAAY,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5D,CAAC;AAED,4FAA4F;AAC5F,SAAS,YAAY,CAAC,IAA6B,EAAE,QAAuB;IAC1E,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IACnD,OAAO,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,aAAa,KAAK,QAAQ,CAAC;AAC9D,CAAC;AAED,yEAAyE;AACzE,KAAK,UAAU,SAAS,CACtB,IAA0B,EAC1B,QAAgB,EAChB,UAAmB;IAEnB,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC7D,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAA4B;IACvE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAC5B,gBAAgB,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,EACrD,6BAA6B,CAC9B,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,IAAI,IAAI,CAAC;QACtC,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,gBAAgB,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QACtE,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,IAAI,eAAe,EAAE,CAAC,CAAC,MAAM,CAC/D,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,MAAM,CAAC,MAAM,EAClB,MAAM,CAAC,QAAQ,EACf,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAChC,CAAC;QACF,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,sDAAsD;AACtD,SAAS,WAAW,CAAC,KAAwB,EAAE,WAAmB;IAChE,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,WAAW;QACX,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjE,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,KAAK,UAAU,aAAa,CAC1B,IAA0B,EAC1B,KAA6C,EAC7C,WAAmB;IAEnB,MAAM,QAAQ,GAAG,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,iBAA0B,EAAE,CAAC;IAChE,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC;IACtB,IAAI,MAA8B,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,kBAAkB,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC;IACpF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,mBAAmB,CAAC,aAAa,EAAE;YACxC,GAAG,IAAI;YACP,WAAW,EAAE,QAAQ,CAAC,aAAa;YACnC,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;SAC5E,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAmB,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACjE,IAAI,EAAE,2BAA2B;QACjC,OAAO;KACR,CAAC,CAAC,CAAC;IACJ,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QAC5B,2FAA2F;QAC3F,OAAO,mBAAmB,CAAC,eAAe,EAAE;YAC1C,GAAG,IAAI;YACP,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,WAAW,EAAE,QAAQ,CAAC,aAAa;YACnC,QAAQ,EAAE;gBACR,GAAG,QAAQ;gBACX;oBACE,IAAI,EAAE,wBAAwB;oBAC9B,OAAO,EAAE,4DAA4D,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,WAAW,CAAC,IAAI,KAAK,MAAM,CAAC,WAAW,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;iBAChK;aACF;SACF,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC;IACxB,IAAI,MAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,cAAc,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAC5F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,mBAAmB,CAAC,eAAe,EAAE;YAC1C,GAAG,IAAI;YACP,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,0FAA0F;YAC1F,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,sBAAsB,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI;YACnF,QAAQ,EAAE,CAAC,GAAG,QAAQ,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;SAC3F,CAAC,CAAC;IACL,CAAC;IACD,OAAO,mBAAmB,CAAC,WAAW,EAAE;QACtC,GAAG,IAAI;QACP,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;QAC5D,QAAQ,EAAE,CAAC,GAAG,QAAQ,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC;KAC5C,CAAC,CAAC;AACL,CAAC;AAED,+FAA+F;AAC/F,KAAK,UAAU,WAAW,CACxB,IAA0B,EAC1B,KAA6C,EAC7C,WAAmB,EACnB,SAAiB;IAEjB,MAAM,IAAI,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,SAAkB,EAAE,CAAC;IACxD,IAAI,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC;IACzB,IAAI,QAA4B,CAAC;IACjC,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,iBAAiB,CAAC,CAAC;YACnD,GAAG,KAAK;YACR,KAAK,EAAE,SAAS;YAChB,IAAI,EAAE,SAAS;YACf,SAAS;YACT,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,KAAK,EAAE,IAAY,EAAE,EAAE;gBAC7B,IAAI,CAAC;oBACH,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,kBAAkB,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;gBACtF,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO;wBACL,2CAA2C,eAAe,CAAC,GAAG,CAAC,8BAA8B;qBAC9F,CAAC;gBACJ,CAAC;YACH,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,QAAQ,GAAG,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACrD,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtF,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,6BAA6B,EAAE,CAAC;YAClD,qFAAqF;YACrF,mDAAmD;YACnD,OAAO,mBAAmB,CAAC,gBAAgB,EAAE;gBAC3C,GAAG,IAAI;gBACP,OAAO,EAAE;oBACP;wBACE,OAAO,EAAE,GAAG,UAAU,UAAU;wBAChC,MAAM,EAAE,8EAA8E;qBACvF;oBACD;wBACE,OAAO,EAAE,QAAQ,CAAC,eAAe;wBACjC,MAAM,EACJ,gFAAgF;qBACnF;iBACF;gBACD,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;QACD,OAAO,mBAAmB,CAAC,gBAAgB,EAAE,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,mBAAmB,CAAC,UAAU,EAAE;QACrC,GAAG,IAAI;QACP,IAAI,EAAE,oBAAoB,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC;QACrD,OAAO,EAAE;YACP,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,YAAY,EAAE,QAAQ,CAAC,YAAY;SACpC;QACD,QAAQ,EAAE,QAAQ,CAAC,QAAQ;KAC5B,CAAC,CAAC;AACL,CAAC;AAED,sFAAsF;AACtF,KAAK,UAAU,gBAAgB,CAC7B,IAA0B,EAC1B,KAA6C;IAE7C,IAAI,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,IAAI,sBAAsB,CAAC,CAAC;YACjE,GAAG,KAAK;YACR,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI;SAChC,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,IAAI,CAAC,CAAC;QAC5E,OAAO,mBAAmB,CAAC,UAAU,EAAE;YACrC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,WAAW,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,cAAc,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;YACrF,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,mBAAmB,CAAC,UAAU,EAAE;YACrC,WAAW,EAAE,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,QAAQ;YACzD,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,0BAA0B,EAAE,OAAO,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;SAChF,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,iGAAiG;AACjG,KAAK,UAAU,cAAc,CAC3B,IAA0B,EAC1B,KAA6C,EAC7C,OAA2E;IAE3E,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,eAAe,IAAI,OAAO,CAAC,SAAS,CAAC;IACrE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,sBAAsB,CAAC,CAAC;QACjE,GAAG,KAAK;QACR,WAAW,EAAE,OAAO,CAAC,IAAI;QACzB,SAAS;KACV,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,wBAAwB,CAAC;IACvF,uFAAuF;IACvF,IAAI,MAAM,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9C,OAAO,OAAO;YACZ,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC;YACnD,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACrD,OAAO,mBAAmB,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,EAAE;QAC7F,WAAW,EAAE,OAAO,CAAC,IAAI;QACzB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB;QAC9C,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa;KAC1F,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAA0B;IAC/D,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC3B,OAAO,mBAAmB,CAAC,SAAS,EAAE;YACpC,MAAM,EAAE,gFAAgF;SACzF,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,oBAAoB,EAAE,EAAE,CAAC;QAC5B,OAAO,mBAAmB,CAAC,SAAS,EAAE;YACpC,MAAM,EAAE,iFAAiF;SAC1F,CAAC,CAAC;IACL,CAAC;IACD,MAAM,EACJ,OAAO,EACP,OAAO,EACP,QAAQ,EACR,QAAQ,EACR,MAAM,EACN,IAAI,EACJ,IAAI,EACJ,OAAO,EACP,WAAW,EACX,YAAY,EACZ,GAAG,IAAI,EACR,GAAG,IAAI,CAAC;IACT,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,wBAAwB,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACnE,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3D,IAAI,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,IAAI,IAAI,CAAC,EAAE,CAAC;QACjD,OAAO,mBAAmB,CAAC,gBAAgB,EAAE;YAC3C,WAAW,EAAE,OAAO,CAAC,IAAI;YACzB,IAAI,EAAE,OAAO,CAAC,IAAI;SACnB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;AAC9C,CAAC"}