@cuna_labs/cli 0.1.0

package/dist/machines/live-supervisor-update.js

@@ -0,0 +1,513 @@
+import { createHash } from "node:crypto";
+import { lstat, unlink } from "node:fs/promises";
+import { join } from "node:path";
+import { CunaError } from "../core/errors.js";
+import { isObservationBudgetCode } from "../core/observation-budget.js";
+import { assertCanonicalUuid, assertMachineId } from "../core/validation.js";
+/* -------------------------------------------------------------------------- */
+/* What the producer's refusals mean for the Machine                          */
+/* -------------------------------------------------------------------------- */
+/**
+ * Refusals ordered strictly BEFORE the producer admits a durable operation.
+ *
+ * The grouping is the producer's ordering, read at
+ * `7cb7e37ec8f0821fc6b402be5fcc9bc8e9439d55`, not a guess: `updateLiveSupervisor`
+ * parses, reads the owned Machine, checks `status === "running"`, checks the
+ * runtime and resolves the tenant, and only THEN calls `claimOperation` — under
+ * the comment "the durable identity, before any observation of the Machine …
+ * an ABSENT record is itself evidence". Every code below can only be reached
+ * above that line, so no operation exists under the identity this CLI sent and
+ * the local record that holds it has nothing left to protect.
+ *
+ * `supervisor_live_update_unverifiable`, `..._control_unavailable`,
+ * `..._preconditions_unmet` and `..._not_required` are deliberately NOT here.
+ * The producer raises each of them from BOTH sides of the claim, and the wire
+ * carries no field that says which. Whether they settled the record is then the
+ * record's own question, and `machines live-update-status` is what asks it.
+ */
+const NOT_ADMITTED_REASONS = new Set([
+    // 422: the request never named a Machine, or never named an operation.
+    "invalid_supervisor_upgrade_request",
+    // 409, both raised above the claim.
+    "supervisor_live_update_machine_not_running",
+    "supervisor_live_update_runtime_unavailable",
+]);
+/**
+ * 404, and the one reason whose meaning depends on WHOSE identity was sent.
+ *
+ * The producer answers `resource_not_found` for an absent Machine, a Machine
+ * this principal does not own, AND an operation row that its owner-scoped query
+ * cannot see. Those are one answer by design — it refuses to tell a caller which
+ * of them is true — so the client cannot read it without saying what it asked
+ * with.
+ *
+ * With an identity this process MINTED microseconds ago, no operation can exist
+ * under it, so the answer is about the Machine and nothing was admitted.
+ *
+ * With an identity read from this computer's record, it is not. The signed-in
+ * principal may simply have changed since the record was written: the record is
+ * keyed by API origin and Machine, deliberately, so that switching profiles
+ * cannot clear it — and the same property means the account asking may not be
+ * the account that filed it. Treating that 404 as "this operation never
+ * existed" would discard the one handle that could still resolve it, on the say
+ * so of an answer that means "you cannot see it".
+ */
+const NOT_FOUND_REASON = "resource_not_found";
+/** The update landed, was acknowledged, and named AgentSessions that did not survive. */
+const SESSIONS_ENDED_REASON = "supervisor_live_update_sessions_ended";
+/**
+ * The producer's single word for "this operation has not resolved".
+ *
+ * Its meaning INVERTED at the producer commit this CLI is pinned to, and the
+ * inversion is the whole point of the durable identity. Every detail carrying
+ * this code used to end "do not repeat the update"; every one of them now ends
+ * "Repeat this same update request; do not start a new one." Repetition is safe
+ * because the identity is the producer's journal key — the same value resumes an
+ * attempt that spent nothing and reconciles one that may have spent something.
+ *
+ * It is still not a TRANSPORT retry. `api/client.ts` keeps `automaticRedispatch`
+ * off for this mutation so the only repetition is one a person chose.
+ */
+const PENDING_REASON = "supervisor_live_update_pending";
+/**
+ * Another operation holds this Machine, or this identity meant something else.
+ *
+ * One code covers five producer conditions, two of which ("this update has
+ * already changed this Machine's control", "this Machine is no longer the one
+ * this update measured") mean the identity we sent DID rotate control. The wire
+ * does not separate them, so this build does not either: it keeps the record and
+ * reads the operation.
+ */
+const OPERATION_CONFLICT_REASON = "supervisor_live_update_operation_conflict";
+/** Terminal, control rotated, nothing installed: the Machine was busy launching. */
+const IN_PROGRESS_REASON = "supervisor_live_update_in_progress";
+/**
+ * Dispositions for which the local record must survive.
+ *
+ * With a durable server-side operation the record stopped being a local
+ * suppression and became the only place the identity of a possibly-open
+ * operation lives. Dropping it strands the Machine twice over: the owner cannot
+ * resume the identity, and the producer refuses every DIFFERENT identity until
+ * that operation settles. So the record is kept unless an authoritative read
+ * says the operation settled, or the refusal proves it was never admitted.
+ */
+/**
+ * Answers the producer only reaches through `settled(...)`, which writes the
+ * terminal record before it throws. Reaching one is itself proof that the
+ * operation is closed, whichever identity asked.
+ */
+const SETTLED_DISPOSITIONS = new Set([
+    "applied_with_ended_sessions",
+    "settled_control_rotated",
+]);
+/**
+ * Whether the local record must survive this refusal.
+ *
+ * Two ways out, and the asymmetry between them is what a reviewer drove out. A
+ * refusal that proves nothing was ADMITTED only proves it for an identity this
+ * process MINTED: the same refusal reached with a RECORDED identity may be
+ * about an operation that exists and is merely out of this account's view — the
+ * record is keyed by API origin and Machine so that switching profiles cannot
+ * clear it, and the price of that is that the account asking need not be the
+ * account that filed it. A record dropped there leaves a Machine nobody can
+ * resume and nobody can start afresh.
+ */
+export function liveSupervisorUpdateRecordSurvives(disposition, origin = "recorded_identity") {
+    if (SETTLED_DISPOSITIONS.has(disposition))
+        return false;
+    // `not_admitted_machine_busy` is only ever produced for a minted identity, so
+    // the origin conjunct is stated once and both of them share it.
+    return !(origin === "new_identity" &&
+        (disposition === "not_admitted" || disposition === "not_admitted_machine_busy"));
+}
+/** Whether re-sending the SAME operation identity is the producer's own next step. */
+export function liveSupervisorUpdateMayResume(disposition) {
+    return disposition === "resumable" || disposition === "unknown";
+}
+function reasonOf(error) {
+    if (!(error instanceof CunaError))
+        return undefined;
+    const reason = error.details?.["reason"];
+    return typeof reason === "string" ? reason : undefined;
+}
+/**
+ * Classify a failed dispatch of the in-place update.
+ *
+ * Fails CLOSED on purpose: an error this build cannot name is `unknown`, because
+ * the alternative is telling a caller nothing happened to a Machine whose
+ * supervisor may already have been replaced — and, now, discarding the one
+ * identity that could still resolve it.
+ */
+export function classifyLiveSupervisorUpdateFailure(error, 
+/**
+ * What was sent. Defaulted to the conservative reading, so a caller that
+ * forgets to say cannot accidentally get the one answer that discards a
+ * record.
+ */
+origin = "recorded_identity") {
+    const reason = reasonOf(error);
+    if (reason === NOT_FOUND_REASON) {
+        return origin === "new_identity" ? "not_admitted" : "operation_inaccessible";
+    }
+    if (reason !== undefined && NOT_ADMITTED_REASONS.has(reason))
+        return "not_admitted";
+    if (reason === SESSIONS_ENDED_REASON)
+        return "applied_with_ended_sessions";
+    if (reason === IN_PROGRESS_REASON)
+        return "settled_control_rotated";
+    if (reason === PENDING_REASON)
+        return "resumable";
+    if (reason === OPERATION_CONFLICT_REASON) {
+        /* One code, five producer conditions, and which are reachable depends on
+           what was sent. With an identity this process minted moments ago, only
+           `machine_busy` is: `claim_supervisor_live_update_operation` at 7cb
+           (migration 0193) looks the offered id up first, and when it is absent and
+           another unsettled operation holds the Machine it returns `machine_busy`
+           BEFORE its insert. No row exists for the id that was sent, so nothing was
+           admitted under it. The other four all require that id to exist already.
+           Treating this as `operation_conflict` for a fresh identity kept a record
+           naming an operation the producer had never heard of: no repeat, no new
+           update, and a read that could only ever answer not-found. The dispatch
+           path still confirms non-admission with that read before it acts. */
+        return origin === "new_identity" ? "not_admitted_machine_busy" : "operation_conflict";
+    }
+    if (error instanceof CunaError) {
+        // The CLI stopped waiting for its own response. The request is still in
+        // flight as far as this process knows.
+        if (isObservationBudgetCode(error.code))
+            return "unknown";
+        // Refusals this CLI raised itself, before anything left the process.
+        if (error.code === "cuna.usage.invalid" ||
+            error.code === "cuna.confirmation.required" ||
+            error.code.startsWith("cuna.capability."))
+            return "not_admitted";
+        // A credential the server refused outright never reached the operation.
+        if (error.code === "cuna.auth.rejected" || error.code === "cuna.policy.denied")
+            return "not_admitted";
+    }
+    return "unknown";
+}
+export function summarizeLiveSupervisorUpdate(result) {
+    const count = (outcome) => result.sessions.filter((session) => session.outcome === outcome).length;
+    const preserved = count("preserved");
+    const unknown = count("unknown");
+    return Object.freeze({
+        total: result.sessions.length,
+        preserved,
+        exited: count("exited"),
+        ended: count("ended"),
+        unknown,
+        // An empty Machine has nothing to preserve, and saying "all preserved" of
+        // zero sessions would read as a custody claim nobody made.
+        allPreserved: result.sessions.length > 0 && preserved === result.sessions.length,
+        anyUnknown: unknown > 0,
+    });
+}
+/**
+ * The human sentence for one session outcome.
+ *
+ * `ended` and `unknown` are deliberately not softened. A 200 that carries either
+ * is a producer this build does not expect — its operation raises instead — and
+ * the honest reading of that response is still the outcome it states.
+ */
+export function liveSupervisorSessionOutcomeLabel(outcome) {
+    switch (outcome) {
+        case "preserved": return "preserved (same process, PTY and stored master)";
+        case "exited": return "exited on its own during the update";
+        case "ended": return "did not survive the update";
+        case "unknown": return "unknown: Cuna could not re-read it";
+    }
+}
+/* -------------------------------------------------------------------------- */
+/* Reading one operation                                                       */
+/* -------------------------------------------------------------------------- */
+/**
+ * The producer's four phases in the one sentence each owner needs.
+ *
+ * None of them says "running", and that is deliberate. The producer's own note
+ * on this route is that a running Machine is not evidence that an update did or
+ * did not apply, and that this read is the only thing that is.
+ */
+export function liveSupervisorUpdatePhaseLabel(phase) {
+    switch (phase) {
+        case "claimed":
+            return "claimed: recorded, and no enrollment, installer or control change has left Cuna";
+        case "control_rotated":
+            return "control rotated: this Machine's supervisor control HAS changed for this update, and what the installer did is unknown";
+        case "installed":
+            return "installed: the selected artifact is on the Machine; its acknowledgement and the fate of the AgentSessions may still be unestablished";
+        case "settled":
+            return "settled: terminal, and this recorded answer is what every repeat of this identity receives";
+    }
+}
+/**
+ * What Cuna OBSERVED of the installer, qualified by whether that installer can
+ * still act.
+ *
+ * `unknown` is the reason this takes a second argument. On its own the word
+ * covers two states a person has to tell apart: a request was sent and nobody
+ * found out, and an authorized installer may still wake up and write; or the
+ * same, plus a fence the Machine has since raised so that it never can. The
+ * producer publishes the difference and this sentence carries it.
+ *
+ * The fence never changes the outcome itself. `unknown` retired is still
+ * `unknown` — Cuna did not observe an installation and does not claim one — and
+ * `installed` is Cuna's own observation, which no retirement record replaces.
+ */
+export function liveSupervisorInstallerOutcomeLabel(outcome, reach = "may_still_arrive") {
+    switch (outcome) {
+        case "not_sent":
+            return "not sent: no installer request left Cuna";
+        case "unknown":
+            return reach === "may_still_arrive"
+                ? "unknown: a request was sent, nothing observed what it did, and an installer it authorized may still arrive"
+                : "unknown: a request was sent and nothing observed what it did. Cuna has since retired that installer on the Machine, so it can no longer act";
+        case "refused":
+            return "refused: the installer answered and refused, which it does before it writes";
+        case "installed":
+            return "installed: the selected artifact is on the Machine";
+    }
+}
+/**
+ * What `installed_at` is a timestamp OF, which is not the same question twice.
+ *
+ * `installer_exit` is the installer's own zero exit inside this operation's
+ * request, so the time is the installation's. `reconciled` is a later read-only
+ * observation that found the artifact there: it establishes THAT it is
+ * installed and never WHEN, so the timestamp is when Cuna looked.
+ */
+export function liveSupervisorInstallationEvidenceLabel(evidence) {
+    return evidence === "installer_exit"
+        ? "installer_exit: the installer's own zero exit, observed in this operation's own request"
+        : "reconciled: a later read-only observation found the artifact on the Machine, which establishes that it is installed and never when";
+}
+/** The fence reading, from the two fields the producer keeps paired. */
+function installerReachOf(operation) {
+    if (operation.retiredAt === undefined)
+        return "may_still_arrive";
+    if (operation.retirementOutcome === "retired")
+        return "retired_without_admission";
+    if (operation.retirementOutcome === "installed")
+        return "retired_after_completion";
+    // `partial`, and the shape the decoder already refuses -- a retirement time
+    // with no outcome beside it. Falling through to `partial` is the safe
+    // direction for both: it is the only reading that asserts nothing about what
+    // the installer did or did not write, and it names an action. Falling through
+    // to `retired` would be the dangerous one, because that reading TELLS a person
+    // nothing on the Machine was changed.
+    return "retired_after_partial_write";
+}
+export function readLiveSupervisorUpdateOperation(operation) {
+    const declared = operation.declaredSessions.length;
+    const accounted = operation.sessions.length;
+    const installerReach = installerReachOf(operation);
+    return Object.freeze({
+        settled: operation.phase === "settled",
+        mayRepeatSameOperation: operation.nextAction === "repeat_same_operation",
+        controlRotated: operation.controlRotated,
+        declared,
+        accounted,
+        accountWithheld: declared > 0 && accounted === 0,
+        installerReach,
+        installerCanStillAct: installerReach === "may_still_arrive",
+        installerWroteNothing: installerReach === "retired_without_admission",
+    });
+}
+/**
+ * What the fence says, and what a person may do next because of it.
+ *
+ * Two sentences, and the second is an ACTION only where the producer supports
+ * one. The producer names it in its own refusals, which reach only a client
+ * that was live at the moment they were recorded; a client recovering later
+ * sees these fields and nothing else, so the sentence is derived from them here
+ * rather than left to a reader to reconstruct.
+ *
+ * What none of these may do: turn `unknown` into a success, or read a fence
+ * record of a completed installer as Cuna having observed an installation.
+ */
+export function liveSupervisorInstallerReachLines(reading, machineId) {
+    const startNew = `Start a new in-place supervisor update: \`cuna machines live-update-supervisor ${machineId} --yes\`.`;
+    switch (reading.installerReach) {
+        case "may_still_arrive":
+            return [
+                "This update's installer has not been retired on the Machine, so one it authorized could still arrive and change this Machine, however long it has been.",
+            ];
+        case "retired_without_admission":
+            return [
+                "Cuna has retired this update's installer on the Machine itself: it reports that the installer never reached it, and it can no longer arrive. Nothing this installer would have written was written.",
+                `${startNew} This Machine's control generation has already moved, which is irreversible and is not undone by the retirement.`,
+            ];
+        case "retired_after_partial_write":
+            return [
+                "Cuna has retired this update's installer on the Machine, and the Machine reports that it had been admitted and did not finish: it began replacing the supervisor and stopped. Cuna cannot say which files it had already written, and cannot say what became of the AgentSessions.",
+                `${startNew} It re-measures this Machine and installs the whole release over what is there. Inspect the AgentSessions first if they matter.`,
+            ];
+        case "retired_after_completion":
+            return [
+                "Cuna has retired this update's installer on the Machine, and the Machine's own fence records that it had been admitted and finished. That is the FENCE's record, not an observation by Cuna: the installer outcome above is the only thing that says what Cuna saw.",
+                "Inspect this Machine's supervisor and its AgentSessions before starting anything else.",
+            ];
+    }
+}
+const CANONICAL_UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/u;
+const MAXIMUM_BYTES = 2048;
+const NOTE_KEYS = "dispatchedAt,machineId,operationId,scope,version";
+const NOTE_KEYS_WITH_ACCOUNT = "account,dispatchedAt,machineId,operationId,scope,version";
+const DIRECTORY = "supervisor-live-updates";
+/**
+ * One short, printable sentence about why a record could not be read.
+ *
+ * It reaches a terminal and a `--json` record, so it is bounded and carries no
+ * bytes from the record itself — only the reason the reader gave.
+ */
+function boundedReason(error) {
+    const message = error instanceof Error && typeof error.message === "string"
+        ? error.message
+        : "the record could not be read";
+    const flattened = message.replaceAll(/\s+/gu, " ").trim();
+    return flattened.length <= 160 ? flattened : `${flattened.slice(0, 159)}…`;
+}
+function scopeDigest(scope) {
+    const url = new URL(scope.baseUrl);
+    if (url.username || url.password || !["https:", "http:"].includes(url.protocol)) {
+        throw new Error("Invalid live supervisor update scope.");
+    }
+    // `url.origin`, not `url.href`: the path, query and fragment of whichever
+    // base URL a profile happens to carry must not fork the exclusion.
+    return createHash("sha256")
+        .update(JSON.stringify(["supervisor-live-update", url.origin]))
+        .digest("hex");
+}
+export function liveSupervisorUpdateNotes(platform, scope) {
+    const digest = scopeDigest(scope);
+    const file = (machineId) => join(platform.paths.stateDirectory, DIRECTORY, digest, `${assertMachineId(machineId)}.json`);
+    // An adapter without the exclusive primitive cannot fence this mutation, and
+    // silently falling back to read-then-write is exactly the defect. Refuse to
+    // build the store at all rather than build one that cannot keep its promise.
+    if (typeof platform.createExclusiveConfig !== "function") {
+        throw new Error("This host cannot reserve a supervisor update exclusively. Nothing was sent.");
+    }
+    const notes = {
+        async reserve(machineId, operationId, dispatchedAt, account) {
+            if (!Number.isFinite(Date.parse(dispatchedAt)))
+                throw new Error("Invalid dispatch timestamp.");
+            const value = Object.freeze({
+                version: 2, scope: digest, machineId: assertMachineId(machineId),
+                operationId: assertCanonicalUuid(operationId, "supervisor update operation ID"),
+                dispatchedAt,
+                // Recorded only when the caller already held it. Nothing is fetched to
+                // populate a label, and nothing reads it back to decide.
+                ...(account === undefined ? {} : { account: assertCanonicalUuid(account, "account ID") }),
+            });
+            const path = file(machineId);
+            const text = `${JSON.stringify(value)}\n`;
+            // THE fence. One `open(O_CREAT|O_EXCL)` on the target, resolved by the
+            // kernel, so two processes interleaved in any order produce one winner.
+            // There is no read before it: a read that finds the slot free proves
+            // nothing about the instant of the write.
+            const created = await platform.createExclusiveConfig(path, text, MAXIMUM_BYTES);
+            if (!created)
+                return undefined;
+            // Kept from the original: the slot is ours, and these are the bytes that
+            // have to be in it. A file we created but cannot read back is a record
+            // this computer does not really hold.
+            const saved = await platform.readSafeConfig(path, MAXIMUM_BYTES);
+            if (!saved.exists || saved.text !== text) {
+                /* The message said "Nothing was sent" and left the file behind, so the
+                   next invocation found a readable record naming an operation that had
+                   never reached the producer — unresumable, and unclearable for as long
+                   as the read of it answered not-found.
+                   Withdrawn through `settle`, which is bound to THIS identity: if the
+                   bytes now belong to another writer, `settle` answers `superseded` and
+                   leaves them alone. A blind `discard` here would delete a concurrent
+                   process's live reservation, which is the same class of defect one
+                   layer down. Either way the refusal below is still raised. */
+                try {
+                    await notes.settle(machineId, value.operationId);
+                }
+                catch { /* the throw below is the answer */ }
+                throw new Error("The supervisor update record could not be verified. Nothing was sent.");
+            }
+            return value;
+        },
+        async settle(machineId, operationId) {
+            const current = await notes.read(machineId);
+            if (current.state === "none")
+                return "absent";
+            // Unreadable bytes are not this dispatch's record. Removing them here
+            // would let a completion silently clear a state only an authoritative
+            // read may resolve.
+            if (current.state === "unreadable")
+                return "superseded";
+            if (current.note.operationId !== operationId)
+                return "superseded";
+            return (await notes.discard(machineId)) ? "settled" : "absent";
+        },
+        async discard(machineId) {
+            const path = file(machineId);
+            try {
+                const metadata = await lstat(path);
+                if (metadata.isSymbolicLink() || !metadata.isFile()) {
+                    throw new Error("Unsafe supervisor update record.");
+                }
+                await unlink(path);
+                return true;
+            }
+            catch (error) {
+                if (error.code === "ENOENT")
+                    return false;
+                throw error;
+            }
+        },
+        async read(machineId) {
+            const path = file(machineId);
+            // Every failure below answers `unreadable` instead of throwing, including
+            // a refusal from `readSafeConfig` itself: the acknowledgement path must
+            // stay reachable for a record whose bytes or permissions are wrong, and
+            // `discard` unlinks without needing to read.
+            const unreadable = (reason) => Object.freeze({ state: "unreadable", path, reason });
+            let snapshot;
+            try {
+                snapshot = await platform.readSafeConfig(path, MAXIMUM_BYTES);
+            }
+            catch (error) {
+                return unreadable(boundedReason(error));
+            }
+            if (!snapshot.exists)
+                return Object.freeze({ state: "none" });
+            let value;
+            try {
+                value = JSON.parse(snapshot.text ?? "");
+            }
+            catch {
+                return unreadable("the record is not JSON");
+            }
+            if (typeof value !== "object" || value === null || Array.isArray(value)) {
+                return unreadable("the record is not an object");
+            }
+            const row = value;
+            const dispatchedAt = row.dispatchedAt;
+            const operationId = row.operationId;
+            const account = row.account;
+            const keys = Object.keys(row).sort().join(",");
+            if ((keys !== NOTE_KEYS && keys !== NOTE_KEYS_WITH_ACCOUNT) || row.version !== 2 ||
+                row.scope !== digest || row.machineId !== machineId ||
+                typeof operationId !== "string" || !CANONICAL_UUID.test(operationId) ||
+                typeof dispatchedAt !== "string" || !Number.isFinite(Date.parse(dispatchedAt)) ||
+                (keys === NOTE_KEYS_WITH_ACCOUNT && typeof account !== "string")) {
+                return unreadable("the record does not match the shape this build writes");
+            }
+            // The account is returned for display and nothing else. It is NOT compared
+            // against the caller: a note that named a different account and let the
+            // mutation through would be metadata granting access, and the whole point
+            // of this record is that it can only ever refuse.
+            const note = Object.freeze({
+                version: 2, scope: digest, machineId, operationId, dispatchedAt,
+                ...(typeof account === "string" ? { account } : {}),
+            });
+            return Object.freeze({ state: "outstanding", note });
+        },
+    };
+    return Object.freeze(notes);
+}
+//# sourceMappingURL=live-supervisor-update.js.map

package/dist/machines/live-supervisor-update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-supervisor-update.js","sourceRoot":"","sources":["../../src/machines/live-supervisor-update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAUjC,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAG7E,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC;IACxD,uEAAuE;IACvE,oCAAoC;IACpC,oCAAoC;IACpC,4CAA4C;IAC5C,4CAA4C;CAC7C,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,gBAAgB,GAAG,oBAAoB,CAAC;AAQ9C,yFAAyF;AACzF,MAAM,qBAAqB,GAAG,uCAAuC,CAAC;AAEtE;;;;;;;;;;;;GAYG;AACH,MAAM,cAAc,GAAG,gCAAgC,CAAC;AAExD;;;;;;;;GAQG;AACH,MAAM,yBAAyB,GAAG,2CAA2C,CAAC;AAE9E,oFAAoF;AACpF,MAAM,kBAAkB,GAAG,oCAAoC,CAAC;AA+BhE;;;;;;;;;GASG;AACH;;;;GAIG;AACH,MAAM,oBAAoB,GAAiD,IAAI,GAAG,CAAC;IACjF,6BAA6B;IAC7B,yBAAyB;CACjB,CAAC,CAAC;AAEZ;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kCAAkC,CAChD,WAA4C,EAC5C,SAA6C,mBAAmB;IAEhE,IAAI,oBAAoB,CAAC,GAAG,CAAC,WAAW,CAAC;QAAE,OAAO,KAAK,CAAC;IACxD,8EAA8E;IAC9E,gEAAgE;IAChE,OAAO,CAAC,CACN,MAAM,KAAK,cAAc;QACzB,CAAC,WAAW,KAAK,cAAc,IAAI,WAAW,KAAK,2BAA2B,CAAC,CAChF,CAAC;AACJ,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,6BAA6B,CAC3C,WAA4C;IAE5C,OAAO,WAAW,KAAK,WAAW,IAAI,WAAW,KAAK,SAAS,CAAC;AAClE,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,CAAC,CAAC,KAAK,YAAY,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IACpD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,CAAC;IACzC,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mCAAmC,CACjD,KAAc;AACd;;;;GAIG;AACH,SAA6C,mBAAmB;IAEhE,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,MAAM,KAAK,gBAAgB,EAAE,CAAC;QAChC,OAAO,MAAM,KAAK,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,wBAAwB,CAAC;IAC/E,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,IAAI,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,cAAc,CAAC;IACpF,IAAI,MAAM,KAAK,qBAAqB;QAAE,OAAO,6BAA6B,CAAC;IAC3E,IAAI,MAAM,KAAK,kBAAkB;QAAE,OAAO,yBAAyB,CAAC;IACpE,IAAI,MAAM,KAAK,cAAc;QAAE,OAAO,WAAW,CAAC;IAClD,IAAI,MAAM,KAAK,yBAAyB,EAAE,CAAC;QACzC;;;;;;;;;;8EAUsE;QACtE,OAAO,MAAM,KAAK,cAAc,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,oBAAoB,CAAC;IACxF,CAAC;IACD,IAAI,KAAK,YAAY,SAAS,EAAE,CAAC;QAC/B,wEAAwE;QACxE,uCAAuC;QACvC,IAAI,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QAC1D,qEAAqE;QACrE,IACE,KAAK,CAAC,IAAI,KAAK,oBAAoB;YACnC,KAAK,CAAC,IAAI,KAAK,4BAA4B;YAC3C,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC;YACzC,OAAO,cAAc,CAAC;QACxB,wEAAwE;QACxE,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB;YAAE,OAAO,cAAc,CAAC;IACxG,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAkBD,MAAM,UAAU,6BAA6B,CAAC,MAA4B;IACxE,MAAM,KAAK,GAAG,CAAC,OAAoC,EAAU,EAAE,CAC7D,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;IAC1E,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;QAC7B,SAAS;QACT,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC;QACvB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC;QACrB,OAAO;QACP,0EAA0E;QAC1E,2DAA2D;QAC3D,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM;QAChF,UAAU,EAAE,OAAO,GAAG,CAAC;KACxB,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iCAAiC,CAAC,OAAoC;IACpF,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,WAAW,CAAC,CAAC,OAAO,iDAAiD,CAAC;QAC3E,KAAK,QAAQ,CAAC,CAAC,OAAO,qCAAqC,CAAC;QAC5D,KAAK,OAAO,CAAC,CAAC,OAAO,4BAA4B,CAAC;QAClD,KAAK,SAAS,CAAC,CAAC,OAAO,oCAAoC,CAAC;IAC9D,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,iFAAiF;AACjF,gFAAgF;AAEhF;;;;;;GAMG;AACH,MAAM,UAAU,8BAA8B,CAAC,KAAgC;IAC7E,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,SAAS;YACZ,OAAO,iFAAiF,CAAC;QAC3F,KAAK,iBAAiB;YACpB,OAAO,uHAAuH,CAAC;QACjI,KAAK,WAAW;YACd,OAAO,sIAAsI,CAAC;QAChJ,KAAK,SAAS;YACZ,OAAO,4FAA4F,CAAC;IACxG,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,mCAAmC,CACjD,OAA6C,EAC7C,QAAsC,kBAAkB;IAExD,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,UAAU;YACb,OAAO,0CAA0C,CAAC;QACpD,KAAK,SAAS;YACZ,OAAO,KAAK,KAAK,kBAAkB;gBACjC,CAAC,CAAC,4GAA4G;gBAC9G,CAAC,CAAC,6IAA6I,CAAC;QACpJ,KAAK,SAAS;YACZ,OAAO,6EAA6E,CAAC;QACvF,KAAK,WAAW;YACd,OAAO,oDAAoD,CAAC;IAChE,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,uCAAuC,CACrD,QAAkD;IAElD,OAAO,QAAQ,KAAK,gBAAgB;QAClC,CAAC,CAAC,yFAAyF;QAC3F,CAAC,CAAC,oIAAoI,CAAC;AAC3I,CAAC;AA8DD,wEAAwE;AACxE,SAAS,gBAAgB,CAAC,SAAwC;IAChE,IAAI,SAAS,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,kBAAkB,CAAC;IACjE,IAAI,SAAS,CAAC,iBAAiB,KAAK,SAAS;QAAE,OAAO,2BAA2B,CAAC;IAClF,IAAI,SAAS,CAAC,iBAAiB,KAAK,WAAW;QAAE,OAAO,0BAA0B,CAAC;IACnF,4EAA4E;IAC5E,sEAAsE;IACtE,6EAA6E;IAC7E,8EAA8E;IAC9E,+EAA+E;IAC/E,sCAAsC;IACtC,OAAO,6BAA6B,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,SAAwC;IAExC,MAAM,QAAQ,GAAG,SAAS,CAAC,gBAAgB,CAAC,MAAM,CAAC;IACnD,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;IAC5C,MAAM,cAAc,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IACnD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,SAAS,CAAC,KAAK,KAAK,SAAS;QACtC,sBAAsB,EAAE,SAAS,CAAC,UAAU,KAAK,uBAAuB;QACxE,cAAc,EAAE,SAAS,CAAC,cAAc;QACxC,QAAQ;QACR,SAAS;QACT,eAAe,EAAE,QAAQ,GAAG,CAAC,IAAI,SAAS,KAAK,CAAC;QAChD,cAAc;QACd,oBAAoB,EAAE,cAAc,KAAK,kBAAkB;QAC3D,qBAAqB,EAAE,cAAc,KAAK,2BAA2B;KACtE,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,iCAAiC,CAC/C,OAA6C,EAC7C,SAAiB;IAEjB,MAAM,QAAQ,GACZ,kFAAkF,SAAS,WAAW,CAAC;IACzG,QAAQ,OAAO,CAAC,cAAc,EAAE,CAAC;QAC/B,KAAK,kBAAkB;YACrB,OAAO;gBACL,yJAAyJ;aAC1J,CAAC;QACJ,KAAK,2BAA2B;YAC9B,OAAO;gBACL,qMAAqM;gBACrM,GAAG,QAAQ,kHAAkH;aAC9H,CAAC;QACJ,KAAK,6BAA6B;YAChC,OAAO;gBACL,oRAAoR;gBACpR,GAAG,QAAQ,iIAAiI;aAC7I,CAAC;QACJ,KAAK,0BAA0B;YAC7B,OAAO;gBACL,qQAAqQ;gBACrQ,wFAAwF;aACzF,CAAC;IACN,CAAC;AACH,CAAC;AA8ED,MAAM,cAAc,GAAG,iEAAiE,CAAC;AACzF,MAAM,aAAa,GAAG,IAAI,CAAC;AAC3B,MAAM,SAAS,GAAG,kDAAkD,CAAC;AACrE,MAAM,sBAAsB,GAAG,0DAA0D,CAAC;AAC1F,MAAM,SAAS,GAAG,yBAAyB,CAAC;AAE5C;;;;;GAKG;AACH,SAAS,aAAa,CAAC,KAAc;IACnC,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QACzE,CAAC,CAAC,KAAK,CAAC,OAAO;QACf,CAAC,CAAC,8BAA8B,CAAC;IACnC,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1D,OAAO,SAAS,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC;AAC7E,CAAC;AAED,SAAS,WAAW,CAAC,KAAgC;IACnD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,0EAA0E;IAC1E,mEAAmE;IACnE,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,wBAAwB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;SAC9D,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAoED,MAAM,UAAU,yBAAyB,CACvC,QAAyB,EACzB,KAAgC;IAEhC,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,CAAC,SAAiB,EAAU,EAAE,CACzC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC/F,6EAA6E;IAC7E,4EAA4E;IAC5E,6EAA6E;IAC7E,IAAI,OAAO,QAAQ,CAAC,qBAAqB,KAAK,UAAU,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;IACjG,CAAC;IACD,MAAM,KAAK,GAA8B;QACvC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO;YACzD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YAC/F,MAAM,KAAK,GAA6B,MAAM,CAAC,MAAM,CAAC;gBACpD,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe,CAAC,SAAS,CAAC;gBAChE,WAAW,EAAE,mBAAmB,CAAC,WAAW,EAAE,gCAAgC,CAAC;gBAC/E,YAAY;gBACZ,uEAAuE;gBACvE,yDAAyD;gBACzD,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,CAAC;aAC1F,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;YAC7B,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;YAC1C,uEAAuE;YACvE,wEAAwE;YACxE,qEAAqE;YACrE,0CAA0C;YAC1C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,qBAAqB,CAAC,IAAI,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;YAChF,IAAI,CAAC,OAAO;gBAAE,OAAO,SAAS,CAAC;YAC/B,yEAAyE;YACzE,uEAAuE;YACvE,sCAAsC;YACtC,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;YACjE,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBACzC;;;;;;;;+EAQ+D;gBAC/D,IAAI,CAAC;oBAAC,MAAM,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,mCAAmC,CAAC,CAAC;gBACvG,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;YAC3F,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW;YACjC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC5C,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM;gBAAE,OAAO,QAAQ,CAAC;YAC9C,sEAAsE;YACtE,sEAAsE;YACtE,oBAAoB;YACpB,IAAI,OAAO,CAAC,KAAK,KAAK,YAAY;gBAAE,OAAO,YAAY,CAAC;YACxD,IAAI,OAAO,CAAC,IAAI,CAAC,WAAW,KAAK,WAAW;gBAAE,OAAO,YAAY,CAAC;YAClE,OAAO,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;QACjE,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,SAAS;YACrB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;gBACnC,IAAI,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;oBACpD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;gBACtD,CAAC;gBACD,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;gBACnB,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,OAAO,KAAK,CAAC;gBACrE,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,SAAS;YAClB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;YAC7B,0EAA0E;YAC1E,wEAAwE;YACxE,wEAAwE;YACxE,6CAA6C;YAC7C,MAAM,UAAU,GAAG,CAAC,MAAc,EAA+B,EAAE,CACjE,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,YAAqB,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YAChE,IAAI,QAA0B,CAAC;YAC/B,IAAI,CAAC;gBAAC,QAAQ,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;YAAC,CAAC;YACtE,OAAO,KAAK,EAAE,CAAC;gBAAC,OAAO,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;YAAC,CAAC;YAC1D,IAAI,CAAC,QAAQ,CAAC,MAAM;gBAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAe,EAAE,CAAC,CAAC;YACvE,IAAI,KAAc,CAAC;YACnB,IAAI,CAAC;gBAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YAAC,CAAC;YAChD,MAAM,CAAC;gBAAC,OAAO,UAAU,CAAC,wBAAwB,CAAC,CAAC;YAAC,CAAC;YACtD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxE,OAAO,UAAU,CAAC,6BAA6B,CAAC,CAAC;YACnD,CAAC;YACD,MAAM,GAAG,GAAG,KAAgC,CAAC;YAC7C,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC;YACtC,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;YACpC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;YAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC/C,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,sBAAsB,CAAC,IAAI,GAAG,CAAC,OAAO,KAAK,CAAC;gBAC5E,GAAG,CAAC,KAAK,KAAK,MAAM,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS;gBACnD,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC;gBACpE,OAAO,YAAY,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;gBAC9E,CAAC,IAAI,KAAK,sBAAsB,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC,EAAE,CAAC;gBACrE,OAAO,UAAU,CAAC,uDAAuD,CAAC,CAAC;YAC7E,CAAC;YACD,2EAA2E;YAC3E,wEAAwE;YACxE,0EAA0E;YAC1E,kDAAkD;YAClD,MAAM,IAAI,GAA6B,MAAM,CAAC,MAAM,CAAC;gBACnD,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY;gBAC/D,GAAG,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpD,CAAC,CAAC;YACH,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,aAAsB,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,CAAC;KACF,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC"}

package/dist/machines/machine-first.d.ts

@@ -0,0 +1,123 @@
+import type { AgentSession, Machine } from "../api/contracts.js";
+import { type ActionableProvider } from "./provider-availability.js";
+export type MachineFirstScreen = Readonly<{
+    readonly kind: "machines";
+}> | Readonly<{
+    readonly kind: "machine";
+    readonly machineId: string;
+}> | Readonly<{
+    readonly kind: "provider";
+    readonly machineId: string;
+    readonly provider: ActionableProvider;
+}>
+/** PRD-PM-008 E13-R1: provider step of `n  New machine`, reachable from any overview. */
+ | Readonly<{
+    readonly kind: "new-machine";
+}>
+/** Name step; the default is computed by the caller from the current inventory. */
+ | Readonly<{
+    readonly kind: "new-machine-name";
+    readonly provider: ActionableProvider;
+}>;
+export interface MachineFirstNavigationState {
+    readonly screen: MachineFirstScreen;
+    readonly selectedIndex: number;
+    readonly quit: boolean;
+}
+export type MachineFirstNavigationEvent = Readonly<{
+    readonly type: "move";
+    readonly delta: -1 | 1;
+    readonly itemCount: number;
+}> | Readonly<{
+    readonly type: "open-machine";
+    readonly machineId: string;
+}> | Readonly<{
+    readonly type: "open-provider";
+    readonly machineId: string;
+    readonly provider: ActionableProvider;
+}> | Readonly<{
+    readonly type: "open-new-machine";
+}> | Readonly<{
+    readonly type: "choose-new-machine-provider";
+    readonly provider: ActionableProvider;
+}> | Readonly<{
+    readonly type: "back";
+}> | Readonly<{
+    readonly type: "quit";
+}>;
+export type MachineContextAction = Readonly<{
+    readonly kind: "recover";
+    readonly label: "Recover creation";
+    readonly machineId: string;
+}> | Readonly<{
+    readonly kind: "start";
+    readonly label: "Start";
+    readonly machineId: string;
+}> | Readonly<{
+    readonly kind: "stop";
+    readonly label: "Stop";
+    readonly machineId: string;
+}>
+/**
+ * PRD-PM-008 E13-R2: offered in every state, including `error`, because a
+ * Machine the console can delete must be deletable here. The screen owns
+ * the double confirmation; this list only says the action exists.
+ */
+ | Readonly<{
+    readonly kind: "delete";
+    readonly label: "Delete";
+    readonly machineId: string;
+}>
+/**
+ * An informational, non-mutating first action. It exists so a running
+ * OpenCode Machine with a supervisor prerequisite does not make `Stop` the
+ * default Enter target in the machine menu.
+ */
+ | Readonly<{
+    readonly kind: "supervisor-blocked";
+    readonly label: "OpenCode needs a terminal update";
+    readonly machineId: string;
+}>
+/** Available only after the current Machine observation is stopped. */
+ | Readonly<{
+    readonly kind: "update-supervisor";
+    readonly label: "Update terminal supervisor";
+    readonly machineId: string;
+}> | Readonly<{
+    readonly kind: "provider";
+    readonly label: string;
+    readonly machineId: string;
+    readonly provider: ActionableProvider;
+}> | Readonly<{
+    readonly kind: "new-session";
+    readonly label: string;
+    readonly machineId: string;
+    readonly provider: ActionableProvider;
+}>;
+export type ProviderContextAction = Readonly<{
+    readonly kind: "session";
+    readonly label: string;
+    readonly session: AgentSession;
+}>;
+export declare const INITIAL_MACHINE_FIRST_STATE: MachineFirstNavigationState;
+export declare function reduceMachineFirstNavigation(state: MachineFirstNavigationState, event: MachineFirstNavigationEvent): MachineFirstNavigationState;
+export declare function resolveMachineContextActions(machine: Machine, options?: Readonly<{
+    readonly hasSessions?: boolean;
+    readonly canCreateSession?: boolean;
+    /** Exact, current server evidence—not a local provider guess. */
+    readonly opencodeSupervisorRepairRequired?: boolean;
+}>): readonly MachineContextAction[];
+export declare function resolveProviderContextActions(input: Readonly<{
+    readonly machine: Machine;
+    readonly provider: ActionableProvider;
+    readonly sessions: readonly AgentSession[];
+    readonly now: number;
+}>): readonly ProviderContextAction[];
+export declare function shouldShowRemoteWaitProgress(elapsedMs: number): boolean;
+export declare function canAutoContinueMachineFirst(input: Readonly<{
+    readonly safeContinuationCount: number;
+    readonly screenShownAt: number;
+    readonly now: number;
+    readonly cancelled: boolean;
+}>): boolean;
+//# sourceMappingURL=machine-first.d.ts.map