@cuna_labs/cli 0.1.0

package/dist/api/supervisor-live-update.js

@@ -0,0 +1,434 @@
+import { contractViolation, isObject, underIndex } from "../core/validation.js";
+import { decodeMachineItem } from "./contracts.js";
+/**
+ * `sessions.updateSupervisorInPlace` and `sessions.readSupervisorInPlaceUpdate`
+ * — the running-Machine supervisor update, and the read that recovers it.
+ *
+ * WHAT THE PATH ID IS. `POST /v1/sessions/{id}/supervisor/live-update` reads
+ * `{id}` as a MACHINE, exactly like its stopped-boundary sibling
+ * `sessions.replaceSupervisor`: the producer parses it with `canonicalUuid` into
+ * `machineId` and the `Session` schema it answers with is the Machine row. It is
+ * NOT an AgentSession id, and the per-session custody it reports is a separate
+ * array of `agent_session_id` values. Binding the response to the requested
+ * Machine is therefore a real check, and `api/client.ts` performs it.
+ *
+ * THE OPERATION IDENTITY, which is what makes a lost answer recoverable. The
+ * POST now carries a required body — one field, `operation_id`, chosen by the
+ * CALLER before sending. The producer records that identity durably before it
+ * issues any supervisor enrollment, so repeating the SAME value never rotates a
+ * second time: it resumes an attempt that spent nothing, reconciles one that
+ * may have spent something, and returns the recorded answer once the operation
+ * has settled. A DIFFERENT value for a Machine whose update has not settled is
+ * refused. `sessions.readSupervisorInPlaceUpdate` is the read of that record: it
+ * dispatches no installer, sends nothing to the Machine and changes no state.
+ *
+ * WHERE THE SHAPES BELOW COME FROM, exactly. The VENDORED producer contract at
+ * `contracts/infra/cuna-api.openapi.json`, synchronized by
+ * `npm run contract:sync:infra` from producer repository `Cuna-Labs/infra` at
+ * commit `7b1b3e425ed273986a909a68395b5272bd6a01ba` — read from a clean,
+ * detached, read-only reference worktree, never from a mutable one. The sync
+ * runs the producer's own `contracts/tools/verify-contract.mjs` and refuses
+ * unless the consumer's recomputed canonical digest equals the digest that
+ * verifier attests, so the artifact in this repository is the producer's bytes
+ * and is provably so. `contracts/infra/cuna-api.openapi.identity.json` carries
+ * the commit, tree and blob ids.
+ *
+ * WHY THE TABLE BELOW IS STILL HAND-WRITTEN. The repository's convention for a
+ * canonical DTO is a generated projection (`scripts/project-provider-v2.mjs`
+ * and its siblings). This module keeps its own declaration for one reason a
+ * schema projection cannot cover: the decoders enforce CROSS-FIELD invariants
+ * the producer states in prose and encodes nowhere — a settled phase agrees
+ * with `next_action: "none"` and with a non-null `settled_at`; a declared
+ * session carries no verdict; one AgentSession is never accounted for twice. A
+ * generated shape would check none of those.
+ *
+ * It is not therefore unchecked. `test/machines-live-update-supervisor.test.mjs`
+ * reads the vendored artifact and asserts that every key list, enum and bound
+ * in `SUPERVISOR_LIVE_UPDATE_WIRE` equals the producer's own, so this table is
+ * a VERIFIED projection rather than a copy that can drift in silence. If the
+ * next sync moves any of them, that test names which.
+ */
+export const SUPERVISOR_LIVE_UPDATE_WIRE = Object.freeze({
+    operationId: "sessions.updateSupervisorInPlace",
+    method: "POST",
+    /** `{id}` is the Machine, not the AgentSession. */
+    pathTemplate: "/v1/sessions/{id}/supervisor/live-update",
+    pathParameterSubject: "machine",
+    requestSchema: "SupervisorLiveUpdateRequest",
+    responseSchema: "SupervisorLiveUpdateResult",
+    sessionSchema: "SupervisorLiveUpdateSession",
+    requiredPermission: "machines:update",
+    /**
+     * A required JSON body carrying the caller's chosen operation identity. There
+     * is still no idempotency key: this identity is the durable one, and it is the
+     * producer's own journal key rather than a transport-level retry token.
+     */
+    hasRequestBody: true,
+    requestContentType: "application/json; charset=utf-8",
+    requestKeys: Object.freeze(["operation_id"]),
+    responseKeys: Object.freeze([
+        "machine",
+        "operation_id",
+        "control_generation",
+        "artifact_sha256",
+        "installed_at",
+        "agent_sessions",
+    ]),
+    sessionKeys: Object.freeze(["agent_session_id", "process_epoch", "outcome"]),
+    outcomes: Object.freeze(["preserved", "exited", "ended", "unknown"]),
+    /** `maxItems` on `agent_sessions` in the producer schema. */
+    maximumSessions: 64,
+    /**
+     * The read that recovers a lost answer.
+     *
+     * `machines:read`, not `machines:update`: it is a database read scoped to the
+     * owner and the exact Machine. `dispatchesInstaller: false` is the producer's
+     * own statement about it and the reason this CLI may call it freely after an
+     * interruption — the thing a caller must NOT do to resolve an operation is
+     * send a second one, and this is not that.
+     */
+    recovery: Object.freeze({
+        operationId: "sessions.readSupervisorInPlaceUpdate",
+        method: "GET",
+        pathTemplate: "/v1/sessions/{id}/supervisor/live-update/{operationId}",
+        pathParameterSubject: "machine",
+        responseSchema: "SupervisorLiveUpdateOperation",
+        declaredSessionSchema: "SupervisorLiveUpdateDeclaredSession",
+        failureSchema: "SupervisorLiveUpdateFailure",
+        requiredPermission: "machines:read",
+        dispatchesInstaller: false,
+        operationKeys: Object.freeze([
+            "operation_id",
+            "machine_id",
+            "phase",
+            "control_rotated",
+            "installer_outcome",
+            "control_generation",
+            "artifact_sha256",
+            "installed_at",
+            "installation_evidence",
+            "declared_sessions",
+            "agent_sessions",
+            "failure",
+            "next_action",
+            "claimed_at",
+            "updated_at",
+            "settled_at",
+            /**
+             * The install fence, added at producer `7b1b3e42`. Both are required and
+             * both are nullable, and they are one fact in two fields: the producer's
+             * own column constraint is `(retired_at is null) = (retirement_receipt is
+             * null)`, so a reader that got one without the other would be reading a
+             * row the producer forbids.
+             */
+            "retired_at",
+            "retirement_outcome",
+        ]),
+        declaredSessionKeys: Object.freeze(["agent_session_id", "process_epoch"]),
+        failureKeys: Object.freeze([
+            "status",
+            "code",
+            "title",
+            "detail",
+            "retryable",
+            "action",
+        ]),
+        phases: Object.freeze(["claimed", "control_rotated", "installed", "settled"]),
+        installerOutcomes: Object.freeze(["not_sent", "unknown", "refused", "installed"]),
+        /** `null` is a declared member of the producer's own enum, not an absence. */
+        installationEvidence: Object.freeze(["installer_exit", "reconciled"]),
+        nextActions: Object.freeze(["none", "repeat_same_operation"]),
+        failureActions: Object.freeze(["retry", "none"]),
+        /**
+         * What the Machine's install fence had recorded for this operation's
+         * control generation when the fence was advanced past it. `null` is a
+         * declared member of the producer's enum — "not retired yet" — and is
+         * decoded as absence rather than listed here.
+         *
+         * NEVER a substitute for `installerOutcome`. `installed` here says the
+         * fence recorded an admitted installer that finished; `installerOutcome`
+         * says what CUNA observed, and only it may be rendered as an installation.
+         */
+        retirementOutcomes: Object.freeze(["retired", "partial", "installed"]),
+    }),
+    source: Object.freeze({
+        state: "vendored",
+        producerRepository: "Cuna-Labs/infra",
+        producerRevision: "7b1b3e425ed273986a909a68395b5272bd6a01ba",
+        /**
+         * The producer-side artifact is `contracts/` plus the producer's own file
+         * name, which still carries the earlier brand. That literal now exists in
+         * exactly ONE shipped place — `scripts/sync-infra-openapi.mjs`'s
+         * `expectedSourceName`, whose classification `test/error-namespace.test.mjs`
+         * pins line-exactly — and the sync refuses any other source, so restating it
+         * here bought no authority and minted a second unclassified copy of it.
+         * `contracts/infra/cuna-api.openapi.identity.json` records the commit, tree
+         * and blob this table is attributed to.
+         */
+        /** `sha256` of the artifact's exact bytes at that commit. */
+        rawDigest: "f4c2d396b94f296b22df276435dc04ecf1da48807efa1e819c4cbff9ea59a83e",
+        /** The producer's own published digest, under its own canonical semantics. */
+        canonicalDigest: "43213c2adac602676437b612b7d4153707e09155bdc4fa3029cca15a0b207ecc",
+        digestSemantics: "sha256(canonical-json:utf8;recursive-object-key-sort;array-order-preserved)",
+        operations: 101,
+        sdkOperations: 40,
+        vendoredArtifact: "contracts/infra/cuna-api.openapi.json",
+        /** Synchronized 2026-09-13. The declarations above are checked against it. */
+        vendoredCarriesOperation: true,
+        synchronizeWith: "npm run contract:sync:infra",
+    }),
+});
+const OUTCOMES = new Set(SUPERVISOR_LIVE_UPDATE_WIRE.outcomes);
+const PHASES = new Set(SUPERVISOR_LIVE_UPDATE_WIRE.recovery.phases);
+const INSTALLER_OUTCOMES = new Set(SUPERVISOR_LIVE_UPDATE_WIRE.recovery.installerOutcomes);
+const INSTALLATION_EVIDENCE = new Set(SUPERVISOR_LIVE_UPDATE_WIRE.recovery.installationEvidence);
+const NEXT_ACTIONS = new Set(SUPERVISOR_LIVE_UPDATE_WIRE.recovery.nextActions);
+const FAILURE_ACTIONS = new Set(SUPERVISOR_LIVE_UPDATE_WIRE.recovery.failureActions);
+const RETIREMENT_OUTCOMES = new Set(SUPERVISOR_LIVE_UPDATE_WIRE.recovery.retirementOutcomes);
+const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/u;
+const SHA256 = /^[0-9a-f]{64}$/u;
+const PROBLEM_CODE = /^[a-z][a-z0-9_]{2,63}$/u;
+function exactKeys(value, keys, predicate) {
+    const actual = Object.keys(value).sort();
+    const expected = [...keys].sort();
+    if (actual.length !== expected.length || actual.some((key, index) => key !== expected[index])) {
+        throw contractViolation(predicate);
+    }
+}
+function uuid(value, field) {
+    if (typeof value !== "string" || !UUID.test(value))
+        throw contractViolation("canonical_uuid", field);
+    return value;
+}
+function timestamp(value, field) {
+    if (typeof value !== "string" || !Number.isFinite(Date.parse(value))) {
+        throw contractViolation("parsable_timestamp", field);
+    }
+    return value;
+}
+/**
+ * A field the producer types as `["X", "null"]`.
+ *
+ * `null` is the producer's own way of saying "not established yet", and it is
+ * decoded to `undefined` — absent rather than a falsy value some later branch
+ * could read as zero, empty or settled.
+ */
+function nullable(value, field, decode) {
+    if (value === null)
+        return undefined;
+    if (value === undefined)
+        throw contractViolation("explicit_null_not_absence", field);
+    return decode(value);
+}
+function decodeSession(value) {
+    if (!isObject(value))
+        throw contractViolation("object");
+    exactKeys(value, SUPERVISOR_LIVE_UPDATE_WIRE.sessionKeys, "exact_live_update_session_shape");
+    const outcome = value.outcome;
+    // A value this build does not know is a contract violation, never a silent
+    // demotion to `unknown`: an unrecognised outcome could be a NEW way to say
+    // "ended", and rendering it as "we could not tell" would understate it.
+    if (typeof outcome !== "string" || !OUTCOMES.has(outcome)) {
+        throw contractViolation("known_enum_value", "outcome");
+    }
+    return Object.freeze({
+        agentSessionId: uuid(value.agent_session_id, "agent_session_id"),
+        processEpoch: uuid(value.process_epoch, "process_epoch"),
+        outcome: outcome,
+    });
+}
+function decodeDeclaredSession(value) {
+    if (!isObject(value))
+        throw contractViolation("object");
+    exactKeys(value, SUPERVISOR_LIVE_UPDATE_WIRE.recovery.declaredSessionKeys, "exact_live_update_declared_session_shape");
+    return Object.freeze({
+        agentSessionId: uuid(value.agent_session_id, "agent_session_id"),
+        processEpoch: uuid(value.process_epoch, "process_epoch"),
+    });
+}
+function decodeSessionArray(value, field, decode) {
+    if (!Array.isArray(value) || value.length > SUPERVISOR_LIVE_UPDATE_WIRE.maximumSessions) {
+        throw contractViolation("bounded_live_update_session_array", field);
+    }
+    const items = value.map((item, index) => underIndex(field, index, () => decode(item)));
+    // One AgentSession may not appear twice: two rows for one id would let a
+    // `preserved` and an `ended` verdict coexist for the same process.
+    if (new Set(items.map((item) => item.agentSessionId)).size !== items.length) {
+        throw contractViolation("distinct_agent_sessions", field);
+    }
+    return items;
+}
+function decodeFailure(value) {
+    if (!isObject(value))
+        throw contractViolation("object", "failure");
+    exactKeys(value, SUPERVISOR_LIVE_UPDATE_WIRE.recovery.failureKeys, "exact_live_update_failure_shape");
+    const status = value.status;
+    if (!Number.isSafeInteger(status) || Number(status) < 400 || Number(status) > 599) {
+        throw contractViolation("problem_status", "failure.status");
+    }
+    const code = value.code;
+    if (typeof code !== "string" || !PROBLEM_CODE.test(code)) {
+        throw contractViolation("problem_code", "failure.code");
+    }
+    const title = value.title;
+    if (typeof title !== "string" || title.length < 1 || title.length > 120) {
+        throw contractViolation("bounded_title", "failure.title");
+    }
+    const detail = value.detail;
+    if (typeof detail !== "string" || detail.length < 1 || detail.length > 500) {
+        throw contractViolation("bounded_detail", "failure.detail");
+    }
+    if (typeof value.retryable !== "boolean") {
+        throw contractViolation("boolean", "failure.retryable");
+    }
+    const action = value.action;
+    if (typeof action !== "string" || !FAILURE_ACTIONS.has(action)) {
+        throw contractViolation("known_enum_value", "failure.action");
+    }
+    return Object.freeze({
+        status: Number(status),
+        code,
+        title,
+        detail,
+        retryable: value.retryable,
+        action: action,
+    });
+}
+/** Strict: the producer declares `additionalProperties: false` on both objects. */
+export function decodeSupervisorLiveUpdate(value) {
+    if (!isObject(value))
+        throw contractViolation("object");
+    exactKeys(value, SUPERVISOR_LIVE_UPDATE_WIRE.responseKeys, "exact_live_update_result_shape");
+    const controlGeneration = value.control_generation;
+    if (!Number.isSafeInteger(controlGeneration) || Number(controlGeneration) < 1) {
+        throw contractViolation("safe_positive_integer", "control_generation");
+    }
+    const artifactSha256 = value.artifact_sha256;
+    if (typeof artifactSha256 !== "string" || !SHA256.test(artifactSha256)) {
+        throw contractViolation("sha256_digest", "artifact_sha256");
+    }
+    const sessions = decodeSessionArray(value.agent_sessions, "agent_sessions", decodeSession);
+    return Object.freeze({
+        machine: decodeMachineItem(value.machine),
+        operationId: uuid(value.operation_id, "operation_id"),
+        controlGeneration: Number(controlGeneration),
+        artifactSha256,
+        installedAt: timestamp(value.installed_at, "installed_at"),
+        sessions: Object.freeze(sessions),
+    });
+}
+/**
+ * The authoritative phase and known result of ONE owned in-place update.
+ *
+ * Everything optional here is optional because the producer types it nullable,
+ * and every one of those nulls means "Cuna has not established this". None of
+ * them is defaulted: a `control_generation` of null is not generation zero, an
+ * empty `agent_sessions` is not a set of `unknown` outcomes, and an
+ * `installed_at` with `installation_evidence: reconciled` is when Cuna LOOKED,
+ * not when the artifact arrived.
+ */
+export function decodeSupervisorLiveUpdateOperation(value) {
+    if (!isObject(value))
+        throw contractViolation("object");
+    exactKeys(value, SUPERVISOR_LIVE_UPDATE_WIRE.recovery.operationKeys, "exact_live_update_operation_shape");
+    const phase = value.phase;
+    if (typeof phase !== "string" || !PHASES.has(phase)) {
+        throw contractViolation("known_enum_value", "phase");
+    }
+    if (typeof value.control_rotated !== "boolean") {
+        throw contractViolation("boolean", "control_rotated");
+    }
+    const installerOutcome = value.installer_outcome;
+    if (typeof installerOutcome !== "string" || !INSTALLER_OUTCOMES.has(installerOutcome)) {
+        throw contractViolation("known_enum_value", "installer_outcome");
+    }
+    const nextAction = value.next_action;
+    if (typeof nextAction !== "string" || !NEXT_ACTIONS.has(nextAction)) {
+        throw contractViolation("known_enum_value", "next_action");
+    }
+    const controlGeneration = nullable(value.control_generation, "control_generation", (raw) => {
+        if (!Number.isSafeInteger(raw) || Number(raw) < 1) {
+            throw contractViolation("safe_positive_integer", "control_generation");
+        }
+        return Number(raw);
+    });
+    const artifactSha256 = nullable(value.artifact_sha256, "artifact_sha256", (raw) => {
+        if (typeof raw !== "string" || !SHA256.test(raw)) {
+            throw contractViolation("sha256_digest", "artifact_sha256");
+        }
+        return raw;
+    });
+    const installedAt = nullable(value.installed_at, "installed_at", (raw) => timestamp(raw, "installed_at"));
+    const installationEvidence = nullable(value.installation_evidence, "installation_evidence", (raw) => {
+        if (typeof raw !== "string" || !INSTALLATION_EVIDENCE.has(raw)) {
+            throw contractViolation("known_enum_value", "installation_evidence");
+        }
+        return raw;
+    });
+    const failure = nullable(value.failure, "failure", decodeFailure);
+    const settledAt = nullable(value.settled_at, "settled_at", (raw) => timestamp(raw, "settled_at"));
+    const retiredAt = nullable(value.retired_at, "retired_at", (raw) => timestamp(raw, "retired_at"));
+    const retirementOutcome = nullable(value.retirement_outcome, "retirement_outcome", (raw) => {
+        if (typeof raw !== "string" || !RETIREMENT_OUTCOMES.has(raw)) {
+            throw contractViolation("known_enum_value", "retirement_outcome");
+        }
+        return raw;
+    });
+    // The producer's own invariant, and the one a renderer would otherwise have to
+    // guess at: only a settled operation is finished with, and only a settled one
+    // stops asking for the same identity back.
+    if ((phase === "settled") !== (nextAction === "none")) {
+        throw contractViolation("settled_phase_agrees_with_next_action", "next_action");
+    }
+    if ((phase === "settled") !== (settledAt !== undefined)) {
+        throw contractViolation("settled_phase_agrees_with_settled_at", "settled_at");
+    }
+    // The producer's own column constraint, `(retired_at is null) =
+    // (retirement_receipt is null)`. One of the two alone is a row the producer
+    // forbids, and accepting it would let a surface say "the installer can no
+    // longer act" with nothing recording what it had already done, or the reverse.
+    if ((retiredAt !== undefined) !== (retirementOutcome !== undefined)) {
+        throw contractViolation("retirement_time_agrees_with_retirement_outcome", "retirement_outcome");
+    }
+    // `supervisor_live_update_retirement_after_rotation`: nothing can be retired
+    // that never authorized an installer. A retirement on an operation that never
+    // rotated control would be a fence raised against nothing.
+    if (retiredAt !== undefined && !value.control_rotated) {
+        throw contractViolation("retirement_follows_control_rotation", "retired_at");
+    }
+    // `supervisor_live_update_unknown_settles_only_on_retirement`: the retirement
+    // receipt is the ONLY evidence on which an unobserved installer outcome may
+    // settle. This is the invariant the whole presentation rests on -- it is what
+    // makes "settled and unknown" mean "it never ran and can no longer run"
+    // rather than "nobody ever found out" -- so a row that settles `unknown`
+    // without it is refused here rather than rendered as either.
+    //
+    // Deliberately NOT the converse. A retired operation may still be open: a
+    // `partial` receipt whose Machine still reports an outstanding systemd job
+    // cannot settle, and the producer records the fence anyway because raising it
+    // is true regardless and is what stops a new effect from starting.
+    if (phase === "settled" && installerOutcome === "unknown" && retiredAt === undefined) {
+        throw contractViolation("settled_unknown_carries_retirement", "retired_at");
+    }
+    return Object.freeze({
+        operationId: uuid(value.operation_id, "operation_id"),
+        machineId: uuid(value.machine_id, "machine_id"),
+        phase: phase,
+        controlRotated: value.control_rotated,
+        installerOutcome: installerOutcome,
+        ...(controlGeneration === undefined ? {} : { controlGeneration }),
+        ...(artifactSha256 === undefined ? {} : { artifactSha256 }),
+        ...(installedAt === undefined ? {} : { installedAt }),
+        ...(installationEvidence === undefined ? {} : { installationEvidence }),
+        declaredSessions: Object.freeze(decodeSessionArray(value.declared_sessions, "declared_sessions", decodeDeclaredSession)),
+        sessions: Object.freeze(decodeSessionArray(value.agent_sessions, "agent_sessions", decodeSession)),
+        ...(failure === undefined ? {} : { failure }),
+        nextAction: nextAction,
+        claimedAt: timestamp(value.claimed_at, "claimed_at"),
+        updatedAt: timestamp(value.updated_at, "updated_at"),
+        ...(settledAt === undefined ? {} : { settledAt }),
+        ...(retiredAt === undefined ? {} : { retiredAt }),
+        ...(retirementOutcome === undefined ? {} : { retirementOutcome }),
+    });
+}
+//# sourceMappingURL=supervisor-live-update.js.map

package/dist/api/supervisor-live-update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor-live-update.js","sourceRoot":"","sources":["../../src/api/supervisor-live-update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAChF,OAAO,EAAE,iBAAiB,EAAgB,MAAM,gBAAgB,CAAC;AAEjE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,MAAM,CAAC,MAAM,CAAC;IACvD,WAAW,EAAE,kCAAkC;IAC/C,MAAM,EAAE,MAAM;IACd,mDAAmD;IACnD,YAAY,EAAE,0CAA0C;IACxD,oBAAoB,EAAE,SAAS;IAC/B,aAAa,EAAE,6BAA6B;IAC5C,cAAc,EAAE,4BAA4B;IAC5C,aAAa,EAAE,6BAA6B;IAC5C,kBAAkB,EAAE,iBAAiB;IACrC;;;;OAIG;IACH,cAAc,EAAE,IAAI;IACpB,kBAAkB,EAAE,iCAAiC;IACrD,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAU,CAAC;IACrD,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC;QAC1B,SAAS;QACT,cAAc;QACd,oBAAoB;QACpB,iBAAiB;QACjB,cAAc;QACd,gBAAgB;KACR,CAAC;IACX,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,kBAAkB,EAAE,eAAe,EAAE,SAAS,CAAU,CAAC;IACrF,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAU,CAAC;IAC7E,6DAA6D;IAC7D,eAAe,EAAE,EAAE;IACnB;;;;;;;;OAQG;IACH,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;QACtB,WAAW,EAAE,sCAAsC;QACnD,MAAM,EAAE,KAAK;QACb,YAAY,EAAE,wDAAwD;QACtE,oBAAoB,EAAE,SAAS;QAC/B,cAAc,EAAE,+BAA+B;QAC/C,qBAAqB,EAAE,qCAAqC;QAC5D,aAAa,EAAE,6BAA6B;QAC5C,kBAAkB,EAAE,eAAe;QACnC,mBAAmB,EAAE,KAAK;QAC1B,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC;YAC3B,cAAc;YACd,YAAY;YACZ,OAAO;YACP,iBAAiB;YACjB,mBAAmB;YACnB,oBAAoB;YACpB,iBAAiB;YACjB,cAAc;YACd,uBAAuB;YACvB,mBAAmB;YACnB,gBAAgB;YAChB,SAAS;YACT,aAAa;YACb,YAAY;YACZ,YAAY;YACZ,YAAY;YACZ;;;;;;eAMG;YACH,YAAY;YACZ,oBAAoB;SACZ,CAAC;QACX,mBAAmB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,kBAAkB,EAAE,eAAe,CAAU,CAAC;QAClF,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC;YACzB,QAAQ;YACR,MAAM;YACN,OAAO;YACP,QAAQ;YACR,WAAW;YACX,QAAQ;SACA,CAAC;QACX,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,iBAAiB,EAAE,WAAW,EAAE,SAAS,CAAU,CAAC;QACtF,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,CAAU,CAAC;QAC1F,8EAA8E;QAC9E,oBAAoB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,gBAAgB,EAAE,YAAY,CAAU,CAAC;QAC9E,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,uBAAuB,CAAU,CAAC;QACtE,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,MAAM,CAAU,CAAC;QACzD;;;;;;;;;WASG;QACH,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,CAAU,CAAC;KAChF,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;QACpB,KAAK,EAAE,UAAU;QACjB,kBAAkB,EAAE,iBAAiB;QACrC,gBAAgB,EAAE,0CAA0C;QAC5D;;;;;;;;;WASG;QACH,6DAA6D;QAC7D,SAAS,EAAE,kEAAkE;QAC7E,8EAA8E;QAC9E,eAAe,EAAE,kEAAkE;QACnF,eAAe,EAAE,6EAA6E;QAC9F,UAAU,EAAE,GAAG;QACf,aAAa,EAAE,EAAE;QACjB,gBAAgB,EAAE,uCAAuC;QACzD,8EAA8E;QAC9E,wBAAwB,EAAE,IAAI;QAC9B,eAAe,EAAE,6BAA6B;KAC/C,CAAC;CACM,CAAC,CAAC;AA6GZ,MAAM,QAAQ,GAAwB,IAAI,GAAG,CAAC,2BAA2B,CAAC,QAAQ,CAAC,CAAC;AACpF,MAAM,MAAM,GAAwB,IAAI,GAAG,CAAC,2BAA2B,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACzF,MAAM,kBAAkB,GACtB,IAAI,GAAG,CAAC,2BAA2B,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;AAClE,MAAM,qBAAqB,GACzB,IAAI,GAAG,CAAC,2BAA2B,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC;AACrE,MAAM,YAAY,GAAwB,IAAI,GAAG,CAAC,2BAA2B,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACpG,MAAM,eAAe,GACnB,IAAI,GAAG,CAAC,2BAA2B,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;AAC/D,MAAM,mBAAmB,GACvB,IAAI,GAAG,CAAC,2BAA2B,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;AACnE,MAAM,IAAI,GAAG,iEAAiE,CAAC;AAC/E,MAAM,MAAM,GAAG,iBAAiB,CAAC;AACjC,MAAM,YAAY,GAAG,yBAAyB,CAAC;AAE/C,SAAS,SAAS,CAAC,KAA8B,EAAE,IAAuB,EAAE,SAAiB;IAC3F,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC9F,MAAM,iBAAiB,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED,SAAS,IAAI,CAAC,KAAc,EAAE,KAAa;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,iBAAiB,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;IACrG,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,KAAa;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACrE,MAAM,iBAAiB,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,SAAS,QAAQ,CAAI,KAAc,EAAE,KAAa,EAAE,MAA6B;IAC/E,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACrC,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,iBAAiB,CAAC,2BAA2B,EAAE,KAAK,CAAC,CAAC;IACrF,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACxD,SAAS,CAAC,KAAK,EAAE,2BAA2B,CAAC,WAAW,EAAE,iCAAiC,CAAC,CAAC;IAC7F,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,2EAA2E;IAC3E,2EAA2E;IAC3E,wEAAwE;IACxE,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1D,MAAM,iBAAiB,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;QAChE,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,eAAe,CAAC;QACxD,OAAO,EAAE,OAAsC;KAChD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACxD,SAAS,CACP,KAAK,EACL,2BAA2B,CAAC,QAAQ,CAAC,mBAAmB,EACxD,0CAA0C,CAC3C,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;QAChE,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,eAAe,CAAC;KACzD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CACzB,KAAc,EACd,KAAa,EACb,MAA4B;IAE5B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,2BAA2B,CAAC,eAAe,EAAE,CAAC;QACxF,MAAM,iBAAiB,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACvF,yEAAyE;IACzE,mEAAmE;IACnE,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QAC5E,MAAM,iBAAiB,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,iBAAiB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACnE,SAAS,CAAC,KAAK,EAAE,2BAA2B,CAAC,QAAQ,CAAC,WAAW,EAAE,iCAAiC,CAAC,CAAC;IACtG,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;QAClF,MAAM,iBAAiB,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACzD,MAAM,iBAAiB,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACxE,MAAM,iBAAiB,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QAC3E,MAAM,iBAAiB,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACzC,MAAM,iBAAiB,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/D,MAAM,iBAAiB,CAAC,kBAAkB,EAAE,gBAAgB,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;QACtB,IAAI;QACJ,KAAK;QACL,MAAM;QACN,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,MAA2C;KACpD,CAAC,CAAC;AACL,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACxD,SAAS,CAAC,KAAK,EAAE,2BAA2B,CAAC,YAAY,EAAE,gCAAgC,CAAC,CAAC;IAC7F,MAAM,iBAAiB,GAAG,KAAK,CAAC,kBAAkB,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,iBAAiB,CAAC,IAAI,MAAM,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9E,MAAM,iBAAiB,CAAC,uBAAuB,EAAE,oBAAoB,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,cAAc,GAAG,KAAK,CAAC,eAAe,CAAC;IAC7C,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;QACvE,MAAM,iBAAiB,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,EAAE,aAAa,CAAC,CAAC;IAC3F,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC;QACzC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC;QACrD,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,CAAC;QAC5C,cAAc;QACd,WAAW,EAAE,SAAS,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC;QAC1D,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;KAClC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mCAAmC,CAAC,KAAc;IAChE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACxD,SAAS,CACP,KAAK,EACL,2BAA2B,CAAC,QAAQ,CAAC,aAAa,EAClD,mCAAmC,CACpC,CAAC;IACF,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,iBAAiB,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QAC/C,MAAM,iBAAiB,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,gBAAgB,GAAG,KAAK,CAAC,iBAAiB,CAAC;IACjD,IAAI,OAAO,gBAAgB,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACtF,MAAM,iBAAiB,CAAC,kBAAkB,EAAE,mBAAmB,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,WAAW,CAAC;IACrC,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QACpE,MAAM,iBAAiB,CAAC,kBAAkB,EAAE,aAAa,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,iBAAiB,GAAG,QAAQ,CAAC,KAAK,CAAC,kBAAkB,EAAE,oBAAoB,EAAE,CAAC,GAAG,EAAE,EAAE;QACzF,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAClD,MAAM,iBAAiB,CAAC,uBAAuB,EAAE,oBAAoB,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,QAAQ,CAAC,KAAK,CAAC,eAAe,EAAE,iBAAiB,EAAE,CAAC,GAAG,EAAE,EAAE;QAChF,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACjD,MAAM,iBAAiB,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,EAAE,CAAC,GAAG,EAAE,EAAE,CACvE,SAAS,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC;IAClC,MAAM,oBAAoB,GAAG,QAAQ,CAAC,KAAK,CAAC,qBAAqB,EAAE,uBAAuB,EAAE,CAAC,GAAG,EAAE,EAAE;QAClG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/D,MAAM,iBAAiB,CAAC,kBAAkB,EAAE,uBAAuB,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,GAA+C,CAAC;IACzD,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC;IAClG,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC;IAClG,MAAM,iBAAiB,GAAG,QAAQ,CAAC,KAAK,CAAC,kBAAkB,EAAE,oBAAoB,EAAE,CAAC,GAAG,EAAE,EAAE;QACzF,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7D,MAAM,iBAAiB,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,GAA4C,CAAC;IACtD,CAAC,CAAC,CAAC;IACH,+EAA+E;IAC/E,8EAA8E;IAC9E,2CAA2C;IAC3C,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK,CAAC,UAAU,KAAK,MAAM,CAAC,EAAE,CAAC;QACtD,MAAM,iBAAiB,CAAC,uCAAuC,EAAE,aAAa,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,EAAE,CAAC;QACxD,MAAM,iBAAiB,CAAC,sCAAsC,EAAE,YAAY,CAAC,CAAC;IAChF,CAAC;IACD,gEAAgE;IAChE,4EAA4E;IAC5E,0EAA0E;IAC1E,+EAA+E;IAC/E,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS,CAAC,EAAE,CAAC;QACpE,MAAM,iBAAiB,CAAC,gDAAgD,EAAE,oBAAoB,CAAC,CAAC;IAClG,CAAC;IACD,6EAA6E;IAC7E,8EAA8E;IAC9E,2DAA2D;IAC3D,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;QACtD,MAAM,iBAAiB,CAAC,qCAAqC,EAAE,YAAY,CAAC,CAAC;IAC/E,CAAC;IACD,8EAA8E;IAC9E,4EAA4E;IAC5E,8EAA8E;IAC9E,wEAAwE;IACxE,yEAAyE;IACzE,6DAA6D;IAC7D,EAAE;IACF,0EAA0E;IAC1E,2EAA2E;IAC3E,8EAA8E;IAC9E,mEAAmE;IACnE,IAAI,KAAK,KAAK,SAAS,IAAI,gBAAgB,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QACrF,MAAM,iBAAiB,CAAC,oCAAoC,EAAE,YAAY,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC;QACrD,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC;QAC/C,KAAK,EAAE,KAAkC;QACzC,cAAc,EAAE,KAAK,CAAC,eAAe;QACrC,gBAAgB,EAAE,gBAAwD;QAC1E,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC;QACjE,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC;QAC3D,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;QACrD,GAAG,CAAC,oBAAoB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,CAAC;QACvE,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAC7B,kBAAkB,CAAC,KAAK,CAAC,iBAAiB,EAAE,mBAAmB,EAAE,qBAAqB,CAAC,CACxF;QACD,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,EAAE,aAAa,CAAC,CAAC;QAClG,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;QAC7C,UAAU,EAAE,UAA4C;QACxD,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC;QACpD,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC;QACpD,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;QACjD,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;QACjD,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC;KAClE,CAAC,CAAC;AACL,CAAC"}

package/dist/api/terminal-reason.d.ts

@@ -0,0 +1,5 @@
+/** Public terminal reasons are reviewed codes, never provider output. */
+export declare const TERMINAL_REASONS: readonly ["process_exited", "process_not_observed", "owner_unrecoverable", "opencode_server_exited", "terminal_model_terminated_unobserved", "session_executable_allowlist", "session_executable_unavailable", "session_executable_permissions", "session_executable_owner", "session_executable_location", "canonical_launch_interrupted", "machine_restarted"];
+export type TerminalReason = typeof TERMINAL_REASONS[number];
+export declare function isTerminalReason(value: unknown): value is TerminalReason;
+//# sourceMappingURL=terminal-reason.d.ts.map

package/dist/api/terminal-reason.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-reason.d.ts","sourceRoot":"","sources":["../../src/api/terminal-reason.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,eAAO,MAAM,gBAAgB,kWAMnB,CAAC;AAEX,MAAM,MAAM,cAAc,GAAG,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC;AAE7D,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAExE"}

package/dist/api/terminal-reason.js

@@ -0,0 +1,12 @@
+/** Public terminal reasons are reviewed codes, never provider output. */
+export const TERMINAL_REASONS = [
+    "process_exited", "process_not_observed", "owner_unrecoverable",
+    "opencode_server_exited", "terminal_model_terminated_unobserved",
+    "session_executable_allowlist", "session_executable_unavailable",
+    "session_executable_permissions", "session_executable_owner",
+    "session_executable_location", "canonical_launch_interrupted", "machine_restarted",
+];
+export function isTerminalReason(value) {
+    return typeof value === "string" && TERMINAL_REASONS.some(reason => reason === value);
+}
+//# sourceMappingURL=terminal-reason.js.map

package/dist/api/terminal-reason.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-reason.js","sourceRoot":"","sources":["../../src/api/terminal-reason.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,gBAAgB,EAAE,sBAAsB,EAAE,qBAAqB;IAC/D,wBAAwB,EAAE,sCAAsC;IAChE,8BAA8B,EAAE,gCAAgC;IAChE,gCAAgC,EAAE,0BAA0B;IAC5D,6BAA6B,EAAE,8BAA8B,EAAE,mBAAmB;CAC1E,CAAC;AAIX,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC;AACxF,CAAC"}

package/dist/auth/browser-handoff.d.ts

@@ -0,0 +1,59 @@
+import type { BrowserOpener } from "./browser.js";
+/**
+ * How the continuation URL reached the user.
+ *
+ * `printed_only` is a success, not a degradation to report as a failure: the
+ * printed URL is a complete affordance on its own. Spawning a browser is the
+ * convenience, not the mechanism.
+ */
+export type BrowserHandoffOutcome = "opened" | "printed_only";
+/**
+ * The terminal side of the browser handoff.
+ *
+ * Declared here, in the auth layer, and implemented in the CLI layer: this
+ * module owns *when* the user is told, and the caller owns *how* it is
+ * rendered. Splitting it the other way is how the URL came to be produced and
+ * never delivered.
+ */
+export interface BrowserHandoffReporter {
+    /**
+     * Deliver the continuation URL to the user.
+     *
+     * Called exactly once, before any open attempt, on every path. This is the
+     * only delivery of the URL there is: the console's `/cli/continue` page reads
+     * its continuation proof from the URL fragment and refuses to fall back to an
+     * older one, and the CLI is the only holder of that fragment. If this is not
+     * called, the sign-in cannot be completed by any means.
+     */
+    continuationUrl(url: string): void;
+    /** The open attempt succeeded. Must not restate the URL. */
+    browserOpened(): void;
+    /** The open attempt failed. Must not restate the URL. */
+    browserOpenFailed(): void;
+}
+/**
+ * Deliver the browser continuation to the user, then try to open it.
+ *
+ * The order is the invariant, and it is the reason this is one function rather
+ * than two call sites: printing and opening are one obligation with one
+ * failure mode. `open` spawns a detached child process, so it can fail on a
+ * headless host, over SSH, inside WSL, with no registered default browser, or
+ * under a hardened desktop policy. Announcing first makes every one of those a
+ * cosmetic loss instead of a dead end.
+ *
+ * An open failure is therefore contained rather than propagated. The URL has
+ * already reached the user by the time it can happen, so failing the sign-in
+ * here would discard a working flow because a convenience did not work.
+ *
+ * `url` is the server-minted `browser_url`, already validated by
+ * `decodeCliContinuationIssued` against the bootstrap-advertised origin, the
+ * `/cli/continue` path and the exact fragment binding. This function never
+ * constructs or edits a URL: the CLI accepts the one authority the service
+ * minted and forwards it unchanged.
+ */
+export declare function handOffContinuationToBrowser(input: {
+    readonly url: string;
+    readonly opener: BrowserOpener;
+    readonly reporter: BrowserHandoffReporter;
+}): Promise<BrowserHandoffOutcome>;
+//# sourceMappingURL=browser-handoff.d.ts.map

package/dist/auth/browser-handoff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-handoff.d.ts","sourceRoot":"","sources":["../../src/auth/browser-handoff.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD;;;;;;GAMG;AACH,MAAM,MAAM,qBAAqB,GAAG,QAAQ,GAAG,cAAc,CAAC;AAE9D;;;;;;;GAOG;AACH,MAAM,WAAW,sBAAsB;IACrC;;;;;;;;OAQG;IACH,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,4DAA4D;IAC5D,aAAa,IAAI,IAAI,CAAC;IACtB,yDAAyD;IACzD,iBAAiB,IAAI,IAAI,CAAC;CAC3B;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,4BAA4B,CAAC,KAAK,EAAE;IACxD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,sBAAsB,CAAC;CAC3C,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAUjC"}

package/dist/auth/browser-handoff.js

@@ -0,0 +1,33 @@
+/**
+ * Deliver the browser continuation to the user, then try to open it.
+ *
+ * The order is the invariant, and it is the reason this is one function rather
+ * than two call sites: printing and opening are one obligation with one
+ * failure mode. `open` spawns a detached child process, so it can fail on a
+ * headless host, over SSH, inside WSL, with no registered default browser, or
+ * under a hardened desktop policy. Announcing first makes every one of those a
+ * cosmetic loss instead of a dead end.
+ *
+ * An open failure is therefore contained rather than propagated. The URL has
+ * already reached the user by the time it can happen, so failing the sign-in
+ * here would discard a working flow because a convenience did not work.
+ *
+ * `url` is the server-minted `browser_url`, already validated by
+ * `decodeCliContinuationIssued` against the bootstrap-advertised origin, the
+ * `/cli/continue` path and the exact fragment binding. This function never
+ * constructs or edits a URL: the CLI accepts the one authority the service
+ * minted and forwards it unchanged.
+ */
+export async function handOffContinuationToBrowser(input) {
+    input.reporter.continuationUrl(input.url);
+    try {
+        await input.opener.open(input.url);
+    }
+    catch {
+        input.reporter.browserOpenFailed();
+        return "printed_only";
+    }
+    input.reporter.browserOpened();
+    return "opened";
+}
+//# sourceMappingURL=browser-handoff.js.map

package/dist/auth/browser-handoff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-handoff.js","sourceRoot":"","sources":["../../src/auth/browser-handoff.ts"],"names":[],"mappings":"AAoCA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,KAIlD;IACC,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC;QACnC,OAAO,cAAc,CAAC;IACxB,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;IAC/B,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/auth/browser.d.ts

@@ -0,0 +1,11 @@
+export interface BrowserOpener {
+    open(url: string): Promise<void>;
+}
+export interface BrowserCommand {
+    readonly executable: string;
+    readonly args: readonly string[];
+    readonly cwd: string;
+}
+export declare function resolveBrowserCommand(platform: NodeJS.Platform, url: string, _environment?: NodeJS.ProcessEnv): BrowserCommand;
+export declare function createBrowserOpener(platform?: NodeJS.Platform, environment?: NodeJS.ProcessEnv): BrowserOpener;
+//# sourceMappingURL=browser.d.ts.map

package/dist/auth/browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../../src/auth/browser.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ,EACzB,GAAG,EAAE,MAAM,EACX,YAAY,GAAE,MAAM,CAAC,UAAwB,GAC5C,cAAc,CAehB;AAED,wBAAgB,mBAAmB,CACjC,QAAQ,GAAE,MAAM,CAAC,QAA2B,EAC5C,WAAW,GAAE,MAAM,CAAC,UAAwB,GAC3C,aAAa,CAqBf"}