@deepseek-harness-tui/dsh-tui 0.14.1 → 0.16.0

package/lib/types/kernelPrefs.d.ts

@@ -1,19 +1,35 @@
-/** Kernels the TUI can run on (the Config.backend values). */
-export declare const KERNEL_IDS: readonly ["dsh", "claude", "codex"];
-export type KernelBackendId = typeof KERNEL_IDS[number];
-export declare function isKernelId(value: unknown): value is KernelBackendId;
-/**
- * Per-kernel facts: the picker label, the product a version belongs to, and
- * whether the host can install a missing kernel itself (the Claude SDK
- * wizard); the others only say how (their detection hint).
- */
-export declare const KERNEL_INFO: Record<KernelBackendId, {
-    labelKey: string;
-    product: string;
-    installable: boolean;
-}>;
-/** Brand names used by kernel chips and notices. */
-export declare function kernelDisplayName(id: string): string;
+import { type BackendId } from './agent/backend-manifest.js';
+/**
+ * The backends that ship inside this package, in picker order. They are the
+ * registry's seed and the vocabulary the launcher's messages use — **not** the
+ * validation source any more: since P0 D1 any syntactically valid id may name a
+ * plugin backend, and membership is decided by
+ * `src/dsh-adapter/backend-registry.ts` (which the launcher cannot import when
+ * it runs without compiled modules, hence the mirrored copy in `bin/dsh-tui.js`).
+ */
+export declare const BUILTIN_BACKEND_IDS: readonly ["dsh", "claude", "codex"];
+/**
+ * An id that passed the id-syntax gate (the rule and the brand live in
+ * `agent/backend-manifest.ts`, next to the manifest that declares it).
+ *
+ * It marks "validated input", which is what the session-ref and path builders
+ * need. *Membership* ("is this backend installed?") is a runtime question:
+ * `parseBackendChoice()` in the registry answers both halves, and the boot falls
+ * back to dsh when the second half misses — exactly like an unknown value always
+ * did (P0 D1).
+ */
+export type KernelBackendId = BackendId;
+/** The fallback every path lands on. `dsh` passes the syntax gate by
+ *  construction and is always registered, so it needs no runtime check. */
+export declare const DSH_BACKEND_ID: KernelBackendId;
+/**
+ * The first half of the parse: trim, lowercase, id syntax. Anything else (a
+ * blank, a typo, `has:colon`, `a/b`) is undefined, which every caller reads as
+ * "no choice made". The second half — is it registered? — belongs to the
+ * registry, which is deliberately not imported here (this module is reachable
+ * from the UI, which may not import the adapter).
+ */
+export declare function parseBackendId(value: unknown): KernelBackendId | undefined;
 /** Stored shape. */
 export interface KernelPrefsData {
     readonly backend?: KernelBackendId;
@@ -31,6 +47,13 @@ export declare function writeKernelPrefs(data: KernelPrefsData, file?: string, d
  * config > env > remembered choice.
  */
 export declare const KERNEL_SWITCH_HANDOFF_ENV = "DSH_TUI_BACKEND_HANDOFF";
+/** The entry's path, set by the launcher: every replacement
+ *  relaunches through it (src/update.ts restartArgv). */
+export declare const HOST_ENTRY_PATH_ENV = "DSH_TUI_HOST_ENTRY_PATH";
+export declare function hostEntryDisabled(env?: NodeJS.ProcessEnv): boolean;
+/** Why the entry could not use the installed dsh; set by the entry, read and
+ *  cleared once by the runtime (plugin.ts), also in a delegated `dsh --profile`. */
+export declare const HOST_NOTICE_ENV = "DSH_TUI_HOST_NOTICE";
 /**
  * The kernel boot runs on (plugin.ts backendChoice): a valid switch handoff
  * first, then the Config row, then DSH_TUI_BACKEND, then the remembered
@@ -41,11 +64,101 @@ export declare const KERNEL_SWITCH_HANDOFF_ENV = "DSH_TUI_BACKEND_HANDOFF";
 export declare function resolveRememberedBackend(input: {
     /** KERNEL_SWITCH_HANDOFF_ENV, normalized; undefined on ordinary launches. */
     readonly handoff?: KernelBackendId | undefined;
-    /** Config.backend (normalized by the schema). */
+    /** Config.backend after the boot's post-discovery membership check. */
     readonly configured?: KernelBackendId | undefined;
     /** process.env.DSH_TUI_BACKEND as given. */
     readonly envRaw?: string | undefined;
+    /**
+     * Whether DSH_TUI_BACKEND names an *installed* backend. Absent means the
+     * syntax gate alone, which is what callers without a registry (the
+     * crash-retry regressions) can offer. The boot passes the registry's
+     * `isRegisteredBackend`: an uninstalled plugin id must fall back to dsh
+     * exactly like a typo does, instead of reaching `loadBackend()` and crashing
+     * the boot on a pinned choice (P0 D1).
+     */
+    readonly envKnown?: ((id: string) => boolean) | undefined;
     /** The kernel remembered in kernel.json. */
     readonly memory?: KernelBackendId | undefined;
 }): KernelBackendId;
+/**
+ * The backend a **derived** resume target was read from (launcher → boot handoff).
+ *
+ * `DSH_TUI_RESUME_SESSION` alone cannot be trusted across backends. The launcher
+ * derives a bare `--resume` target from the chosen backend's own
+ * `backends/<id>/prefs.json` (`envFromLastRun` does the same from `last-run.json`),
+ * and this boot may then land on a *different* backend: an uninstalled plugin id
+ * falls back to dsh (P0 D1), and an unset `DSH_TUI_BACKEND` follows the remembered
+ * kernel instead. Handing the id to whoever booted resumes the wrong backend's
+ * session, or fails on one that never heard of it. This variable records the
+ * source so the boot can refuse it.
+ *
+ * An id the user placed themselves (`--resume <id>`, a Config row, `/restart`)
+ * carries no mark — where it belongs is theirs to decide, and the boot only says
+ * what it knows. Boot deletes this from process.env as soon as it reads it,
+ * exactly like {@link KERNEL_SWITCH_HANDOFF_ENV}.
+ */
+export declare const RESUME_BACKEND_ENV = "DSH_TUI_RESUME_BACKEND";
+/**
+ * Marks a boot the launcher started as the safe-mode **retry** (`dsh-tui safe`
+ * → option 1, and the first-run fallback that shares it).
+ *
+ * A retry derives its target from `last-run.json` — "the kernel and session that
+ * were running when the crash happened" — and the recorded kernel may no longer
+ * be in the registry, which is exactly the case {@link resolveResumeTarget}
+ * revokes. Failing the boot there would close the user's last way back, so a
+ * retry gets the tolerated branch instead: warn, then cold-start on the kernel
+ * that did open. The launcher sets it for the whole retry env, the boot deletes
+ * it as soon as it reads it (one-shot, like the mark above), and it never
+ * reaches the plugin protocol — `lastSession` and this handoff are implementation
+ * details, not a backend contract (roadmap §6 item 11).
+ */
+export declare const RESUME_RETRY_ENV = "DSH_TUI_RESUME_RETRY";
+/**
+ * What the boot must do with the resume request it inherited.
+ *
+ * The four outcomes the decision names (roadmap §6 item 11): only the selected
+ * backend is ever asked, a target is bound to the backend that derived it, and a
+ * request that cannot be honored fails the boot instead of degrading into a cold
+ * start or a session nobody asked for. `none` and `usable` are the two ordinary
+ * outcomes; `revoked` carries everything the caller needs to report the refusal —
+ * which backend the target came from, and whether the refusal is allowed to be
+ * soft (safe-mode retry only).
+ */
+export type ResumeTarget = 
+/** No resume request survives (nothing was asked for, or the id was blank). */
+{
+    readonly kind: 'none';
+}
+/** Hand this id to `backendChoice`, the backend this boot landed on. */
+ | {
+    readonly kind: 'usable';
+    readonly sessionId: string;
+}
+/**
+ * A **derived** target whose source backend is not the one this boot landed on.
+ * `fatal` says how loud the refusal is: `true` fails the boot (the target is
+ * neither carried across nor silently replaced by a new session), `false`
+ * (safe-mode retry) only warns and lets the boot continue on `backendChoice`.
+ */
+ | {
+    readonly kind: 'revoked';
+    readonly from: KernelBackendId;
+    readonly fatal: boolean;
+};
+/**
+ * Whether a resume target may be handed to the backend this boot landed on. A
+ * derived target is usable only on the backend it came from; a revoked one is
+ * dropped rather than carried over, which is why the result hands the source back
+ * for the caller's refusal instead of returning nothing. Pure.
+ */
+export declare function resolveResumeTarget(input: {
+    /** The id as given: DSH_TUI_RESUME_SESSION, else Config.sessionId. */
+    readonly sessionId?: string | undefined;
+    /** RESUME_BACKEND_ENV, normalized. Absent = the user named the target. */
+    readonly sourceBackend?: KernelBackendId | undefined;
+    /** The backend this boot landed on (plugin.ts `backendChoice`). */
+    readonly backendChoice: KernelBackendId;
+    /** RESUME_RETRY_ENV: a safe-mode retry must survive a revoked target. */
+    readonly retry?: boolean | undefined;
+}): ResumeTarget;
 //# sourceMappingURL=kernelPrefs.d.ts.map

package/lib/types/kernelPrefs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"kernelPrefs.d.ts","sourceRoot":"","sources":["../../src/kernelPrefs.ts"],"names":[],"mappings":"AAgBA,8DAA8D;AAC9D,eAAO,MAAM,UAAU,qCAAsC,CAAA;AAC7D,MAAM,MAAM,eAAe,GAAG,OAAO,UAAU,CAAC,MAAM,CAAC,CAAA;AAEvD,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,eAAe,CAEnE;AAED;;;;GAIG;AACH,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,eAAe,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,OAAO,CAAA;CAAE,CAI5G,CAAA;AAED,oDAAoD;AACpD,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,oBAAoB;AACpB,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe,CAAA;CACnC;AASD,mFAAmF;AACnF,wBAAgB,eAAe,CAAC,IAAI,GAAE,MAAsC,GAAG,eAAe,CAM7F;AAuBD,sFAAsF;AACtF,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,eAAe,EACrB,IAAI,GAAE,MAAsC,EAC5C,KAAK,GAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAsB,GACjD,IAAI,CAcN;AAWD;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB,4BAA4B,CAAA;AAElE;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,6EAA6E;IAC7E,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe,GAAG,SAAS,CAAA;IAC9C,iDAAiD;IACjD,QAAQ,CAAC,UAAU,CAAC,EAAE,eAAe,GAAG,SAAS,CAAA;IACjD,4CAA4C;IAC5C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACpC,4CAA4C;IAC5C,QAAQ,CAAC,MAAM,CAAC,EAAE,eAAe,GAAG,SAAS,CAAA;CAC9C,GAAG,eAAe,CAOlB"}
+{"version":3,"file":"kernelPrefs.d.ts","sourceRoot":"","sources":["../../src/kernelPrefs.ts"],"names":[],"mappings":"AAcA,OAAO,EAAqB,KAAK,SAAS,EAAE,MAAM,6BAA6B,CAAA;AAG/E;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,qCAAsC,CAAA;AAEtE;;;;;;;;;GASG;AACH,MAAM,MAAM,eAAe,GAAG,SAAS,CAAA;AAEvC;2EAC2E;AAC3E,eAAO,MAAM,cAAc,EAAY,eAAe,CAAA;AAEtD;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,GAAG,SAAS,CAI1E;AAED,oBAAoB;AACpB,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe,CAAA;CACnC;AASD,mFAAmF;AACnF,wBAAgB,eAAe,CAAC,IAAI,GAAE,MAAsC,GAAG,eAAe,CAM7F;AAuBD,sFAAsF;AACtF,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,eAAe,EACrB,IAAI,GAAE,MAAsC,EAC5C,KAAK,GAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAsB,GACjD,IAAI,CAcN;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB,4BAA4B,CAAA;AAQlE;yDACyD;AACzD,eAAO,MAAM,mBAAmB,4BAA4B,CAAA;AAE5D,wBAAgB,iBAAiB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAE/E;AAED;oFACoF;AACpF,eAAO,MAAM,eAAe,wBAAwB,CAAA;AAEpD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,6EAA6E;IAC7E,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe,GAAG,SAAS,CAAA;IAC9C,uEAAuE;IACvE,QAAQ,CAAC,UAAU,CAAC,EAAE,eAAe,GAAG,SAAS,CAAA;IACjD,4CAA4C;IAC5C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACpC;;;;;;;OAOG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,SAAS,CAAA;IACzD,4CAA4C;IAC5C,QAAQ,CAAC,MAAM,CAAC,EAAE,eAAe,GAAG,SAAS,CAAA;CAC9C,GAAG,eAAe,CASlB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,kBAAkB,2BAA2B,CAAA;AAE1D;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,gBAAgB,yBAAyB,CAAA;AAEtD;;;;;;;;;;GAUG;AACH,MAAM,MAAM,YAAY;AACtB,+EAA+E;AAC7E;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AAC3B,wEAAwE;GACtE;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE;AACzD;;;;;GAKG;GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAA;AAEzF;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IACzC,sEAAsE;IACtE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACvC,0EAA0E;IAC1E,QAAQ,CAAC,aAAa,CAAC,EAAE,eAAe,GAAG,SAAS,CAAA;IACpD,mEAAmE;IACnE,QAAQ,CAAC,aAAa,EAAE,eAAe,CAAA;IACvC,yEAAyE;IACzE,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CACrC,GAAG,YAAY,CAOf"}

package/lib/types/kernelPrefs.js

@@ -12,32 +12,39 @@
  */
 import { mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from 'node:fs';
 import { basename, dirname, join } from 'node:path';
+import { isBackendIdSyntax } from './agent/backend-manifest.js';
 import { DATA_DIR } from './utils/paths.js';
-/** Kernels the TUI can run on (the Config.backend values). */
-export const KERNEL_IDS = ['dsh', 'claude', 'codex'];
-export function isKernelId(value) {
-    return typeof value === 'string' && KERNEL_IDS.includes(value);
-}
 /**
- * Per-kernel facts: the picker label, the product a version belongs to, and
- * whether the host can install a missing kernel itself (the Claude SDK
- * wizard); the others only say how (their detection hint).
+ * The backends that ship inside this package, in picker order. They are the
+ * registry's seed and the vocabulary the launcher's messages use — **not** the
+ * validation source any more: since P0 D1 any syntactically valid id may name a
+ * plugin backend, and membership is decided by
+ * `src/dsh-adapter/backend-registry.ts` (which the launcher cannot import when
+ * it runs without compiled modules, hence the mirrored copy in `bin/dsh-tui.js`).
+ */
+export const BUILTIN_BACKEND_IDS = ['dsh', 'claude', 'codex'];
+/** The fallback every path lands on. `dsh` passes the syntax gate by
+ *  construction and is always registered, so it needs no runtime check. */
+export const DSH_BACKEND_ID = 'dsh';
+/**
+ * The first half of the parse: trim, lowercase, id syntax. Anything else (a
+ * blank, a typo, `has:colon`, `a/b`) is undefined, which every caller reads as
+ * "no choice made". The second half — is it registered? — belongs to the
+ * registry, which is deliberately not imported here (this module is reachable
+ * from the UI, which may not import the adapter).
  */
-export const KERNEL_INFO = {
-    dsh: { labelKey: 'kernel-label-dsh', product: 'dsh-core', installable: false },
-    claude: { labelKey: 'kernel-label-claude', product: 'claude-code', installable: true },
-    codex: { labelKey: 'kernel-label-codex', product: 'codex-cli', installable: false },
-};
-/** Brand names used by kernel chips and notices. */
-export function kernelDisplayName(id) {
-    return id === 'dsh' ? 'DSH' : id === 'claude' ? 'Claude' : id === 'codex' ? 'Codex' : id;
+export function parseBackendId(value) {
+    if (typeof value !== 'string')
+        return undefined;
+    const id = value.trim().toLowerCase();
+    return isBackendIdSyntax(id) ? id : undefined;
 }
 /** Keep only a valid backend value; anything else reads as no preference. */
 function parseKernelPrefs(parsed) {
     if (parsed === null || typeof parsed !== 'object' || Array.isArray(parsed))
         return {};
-    const backend = parsed.backend;
-    return isKernelId(backend) ? { backend } : {};
+    const backend = parseBackendId(parsed.backend);
+    return backend === undefined ? {} : { backend };
 }
 /** Read the preference; missing, broken or unreadable means none. Never throws. */
 export function readKernelPrefs(file = join(DATA_DIR, 'kernel.json')) {
@@ -87,15 +94,6 @@ export function writeKernelPrefs(data, file = join(DATA_DIR, 'kernel.json'), deb
         debug(`dsh-tui: kernel prefs write failed (${error instanceof Error ? error.message : String(error)})`);
     }
 }
-/** Same rules as dsh-adapter's normalizeBackendChoice (kept local so this
- *  module does not import the adapter): trimmed, case-insensitive; empty or
- *  unknown gives undefined. */
-function normalizeBackend(value) {
-    if (typeof value !== 'string')
-        return undefined;
-    const id = value.trim().toLowerCase();
-    return isKernelId(id) ? id : undefined;
-}
 /**
  * The kernel this one boot must land on, set by a kernel switch (restartTui's
  * backend option) and by the launcher's crash retry. Boot deletes it from
@@ -105,6 +103,21 @@ function normalizeBackend(value) {
  * config > env > remembered choice.
  */
 export const KERNEL_SWITCH_HANDOFF_ENV = 'DSH_TUI_BACKEND_HANDOFF';
+/**
+ * The package's own entry, which hosts every kernel by default (routing in
+ * hostEntryRoute.ts). Kept here so src/update.ts does not pull that module in.
+ * `DSH_TUI_HOST_ENTRY=0` keeps every kernel on `dsh --profile`.
+ */
+const HOST_ENTRY_ENV = 'DSH_TUI_HOST_ENTRY';
+/** The entry's path, set by the launcher: every replacement
+ *  relaunches through it (src/update.ts restartArgv). */
+export const HOST_ENTRY_PATH_ENV = 'DSH_TUI_HOST_ENTRY_PATH';
+export function hostEntryDisabled(env = process.env) {
+    return env[HOST_ENTRY_ENV] === '0';
+}
+/** Why the entry could not use the installed dsh; set by the entry, read and
+ *  cleared once by the runtime (plugin.ts), also in a delegated `dsh --profile`. */
+export const HOST_NOTICE_ENV = 'DSH_TUI_HOST_NOTICE';
 /**
  * The kernel boot runs on (plugin.ts backendChoice): a valid switch handoff
  * first, then the Config row, then DSH_TUI_BACKEND, then the remembered
@@ -113,14 +126,64 @@ export const KERNEL_SWITCH_HANDOFF_ENV = 'DSH_TUI_BACKEND_HANDOFF';
  * choice; an invalid handoff value is ignored. Pure.
  */
 export function resolveRememberedBackend(input) {
-    if (isKernelId(input.handoff))
-        return input.handoff;
-    if (isKernelId(input.configured))
-        return input.configured;
-    const env = normalizeBackend(input.envRaw);
-    if (env !== undefined)
+    const handoff = parseBackendId(input.handoff);
+    if (handoff !== undefined)
+        return handoff;
+    const configured = parseBackendId(input.configured);
+    if (configured !== undefined)
+        return configured;
+    const env = parseBackendId(input.envRaw);
+    if (env !== undefined && (input.envKnown === undefined || input.envKnown(env)))
         return env;
     if (input.envRaw !== undefined && input.envRaw.trim() !== '')
-        return 'dsh';
-    return input.memory ?? 'dsh';
+        return DSH_BACKEND_ID;
+    return input.memory ?? DSH_BACKEND_ID;
+}
+/**
+ * The backend a **derived** resume target was read from (launcher → boot handoff).
+ *
+ * `DSH_TUI_RESUME_SESSION` alone cannot be trusted across backends. The launcher
+ * derives a bare `--resume` target from the chosen backend's own
+ * `backends/<id>/prefs.json` (`envFromLastRun` does the same from `last-run.json`),
+ * and this boot may then land on a *different* backend: an uninstalled plugin id
+ * falls back to dsh (P0 D1), and an unset `DSH_TUI_BACKEND` follows the remembered
+ * kernel instead. Handing the id to whoever booted resumes the wrong backend's
+ * session, or fails on one that never heard of it. This variable records the
+ * source so the boot can refuse it.
+ *
+ * An id the user placed themselves (`--resume <id>`, a Config row, `/restart`)
+ * carries no mark — where it belongs is theirs to decide, and the boot only says
+ * what it knows. Boot deletes this from process.env as soon as it reads it,
+ * exactly like {@link KERNEL_SWITCH_HANDOFF_ENV}.
+ */
+export const RESUME_BACKEND_ENV = 'DSH_TUI_RESUME_BACKEND';
+/**
+ * Marks a boot the launcher started as the safe-mode **retry** (`dsh-tui safe`
+ * → option 1, and the first-run fallback that shares it).
+ *
+ * A retry derives its target from `last-run.json` — "the kernel and session that
+ * were running when the crash happened" — and the recorded kernel may no longer
+ * be in the registry, which is exactly the case {@link resolveResumeTarget}
+ * revokes. Failing the boot there would close the user's last way back, so a
+ * retry gets the tolerated branch instead: warn, then cold-start on the kernel
+ * that did open. The launcher sets it for the whole retry env, the boot deletes
+ * it as soon as it reads it (one-shot, like the mark above), and it never
+ * reaches the plugin protocol — `lastSession` and this handoff are implementation
+ * details, not a backend contract (roadmap §6 item 11).
+ */
+export const RESUME_RETRY_ENV = 'DSH_TUI_RESUME_RETRY';
+/**
+ * Whether a resume target may be handed to the backend this boot landed on. A
+ * derived target is usable only on the backend it came from; a revoked one is
+ * dropped rather than carried over, which is why the result hands the source back
+ * for the caller's refusal instead of returning nothing. Pure.
+ */
+export function resolveResumeTarget(input) {
+    const sessionId = input.sessionId?.trim();
+    if (sessionId === undefined || sessionId === '')
+        return { kind: 'none' };
+    if (input.sourceBackend === undefined || input.sourceBackend === input.backendChoice) {
+        return { kind: 'usable', sessionId };
+    }
+    return { kind: 'revoked', from: input.sourceBackend, fatal: input.retry !== true };
 }

package/lib/types/math/inline-layout.d.ts

@@ -15,6 +15,8 @@ export type InlineRow = {
     readonly width: number;
     /** The row continues the previous one (a wrap, not a source newline). */
     readonly continuation: boolean;
+    /** A separator omitted at a full row boundary; restore it on copy. */
+    readonly gap: boolean;
 };
 /** The placeholder run standing in for formula `index`, `columns` cells wide. */
 export declare function inlineMediaPlaceholder(index: number, columns: number): string;

package/lib/types/math/inline-layout.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"inline-layout.d.ts","sourceRoot":"","sources":["../../../src/math/inline-layout.ts"],"names":[],"mappings":"AAoBA,2EAA2E;AAC3E,eAAO,MAAM,gBAAgB,OAAS,CAAA;AAItC,MAAM,MAAM,WAAW,GACnB;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACxE;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAA;AAEhF,MAAM,MAAM,SAAS,GAAG;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,CAAA;IACvC,uCAAuC;IACvC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,yEAAyE;IACzE,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAA;CAC/B,CAAA;AAED,iFAAiF;AACjF,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAK7E;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,SAAS,MAAM,EAAE,GACzB,SAAS,EAAE,GAAG,SAAS,CA2CzB"}
+{"version":3,"file":"inline-layout.d.ts","sourceRoot":"","sources":["../../../src/math/inline-layout.ts"],"names":[],"mappings":"AAoBA,2EAA2E;AAC3E,eAAO,MAAM,gBAAgB,OAAS,CAAA;AAItC,MAAM,MAAM,WAAW,GACnB;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACxE;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAA;AAEhF,MAAM,MAAM,SAAS,GAAG;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,CAAA;IACvC,uCAAuC;IACvC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,yEAAyE;IACzE,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAA;IAC9B,sEAAsE;IACtE,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAA;CACtB,CAAA;AAED,iFAAiF;AACjF,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAK7E;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,SAAS,MAAM,EAAE,GACzB,SAAS,EAAE,GAAG,SAAS,CAyCzB"}

package/lib/types/math/inline-layout.js

@@ -5,15 +5,15 @@
  * its image (one private-use code point per formula, so neighbouring
  * formulas stay distinguishable), and the formatted paragraph is wrapped by
  * the same `wrapText` that <Text> uses. A run holds no spaces, so it wraps
- * as one unbreakable word: a formula never splits across rows, and a
- * paragraph with no formulas lays out exactly as it does in <Text>. Each
+ * as one unbreakable word: a formula never splits across rows. The display
+ * helper hides separators moved past a full row without changing row count. Each
  * wrapped row is then cut into ANSI-balanced text pieces (sliceAnsi re-opens
  * the styles and links a cut crosses) and the image slots between them.
  * Pure: no React, no terminal.
  */
 import stripAnsi from 'strip-ansi';
 import { stringWidth } from '../ink/stringWidth.js';
-import wrapText from '../ink/wrap-text.js';
+import { wrapTextLines } from '../ink/wrap-text.js';
 import sliceAnsi from '../utils/sliceAnsi.js';
 /** First placeholder code point (Private Use Area, width 1). */
 const PLACEHOLDER_BASE = 0xe000;
@@ -39,9 +39,7 @@ export function layoutInlineMedia(formatted, width, columns) {
         return undefined;
     const seen = new Set();
     const rows = [];
-    const wrapped = wrapText(formatted, width, 'wrap');
-    const continuations = wrapContinuations(stripAnsi(formatted), stripAnsi(wrapped));
-    for (const [lineIndex, line] of wrapped.split('\n').entries()) {
+    for (const { text: line, continuation, gap } of wrapTextLines(formatted, width)) {
         const pieces = [];
         const plain = stripAnsi(line);
         let column = 0;
@@ -80,27 +78,7 @@ export function layoutInlineMedia(formatted, width, columns) {
         if (!closeRun())
             return undefined;
         flushText(column);
-        rows.push({ pieces, width: column, continuation: continuations[lineIndex] === true });
+        rows.push({ pieces, width: column, continuation, gap });
     }
     return seen.size === columns.length ? rows : undefined;
 }
-/**
- * For each line of `wrapped`, whether the newline before it was inserted by
- * wrapping (true) or was in `source` (false). wrapAnsi (trim off) only
- * inserts newlines, so walking both plain strings in step finds them.
- */
-function wrapContinuations(source, wrapped) {
-    const result = [false];
-    let at = 0;
-    for (const char of wrapped) {
-        if (char === '\n') {
-            const inSource = source[at] === '\n';
-            result.push(!inSource);
-            if (inSource)
-                at += 1;
-            continue;
-        }
-        at += char.length;
-    }
-    return result;
-}

package/lib/types/modelGroups.d.ts

@@ -1,10 +1,8 @@
 /**
- * Pure derivation for the two-level `/model` picker: providers as top-level
- * groups, their models one level down, with a pinned "recently used"
- * pseudo-group first. Kept free of React/channel/i18n state so
- * `scripts/verify-model-picker-groups.mjs` can drive it headless; the
- * recents row's localized label is resolved at render time (its `label`
- * field is the {@link RECENTS_LABEL_PLACEHOLDER} sentinel).
+ * Pure derivation for the `/model` provider tabs, with a pinned
+ * "recently used" pseudo-provider first. Kept free of React/channel/i18n state so
+ * `scripts/verify-model-picker-groups.mjs` can drive it headless. Renderers
+ * derive the localized recents label from its provider key.
  *
  * @module dsh-tui/modelGroups
  */
@@ -15,14 +13,14 @@ import type { LlmModelInfo, LlmProviderInfo } from './adapter/ports/channel-view
  * never collide with a real route.
  */
 export declare const RECENTS_GROUP_PROVIDER = "__recents__";
-/** The recents row's raw label; renderers replace it with the localized one. */
+/** Placeholder for pure group data; the UI labels recents by provider key. */
 export declare const RECENTS_LABEL_PLACEHOLDER = "__recent__";
 /** One recent-model reference (same shape as modelRecents' persisted ref). */
 export interface ModelRef {
     readonly provider: string;
     readonly id: string;
 }
-/** One top-level row: a provider route with its picker-facing identity. */
+/** One provider tab with its picker-facing identity. */
 export interface ModelGroupRow {
     /** Harness route key (also the grouping key over `LlmModelInfo.provider`). */
     readonly provider: string;
@@ -33,7 +31,7 @@ export interface ModelGroupRow {
 }
 /**
  * The recent refs that the current catalog still lists, most-recent-first —
- * the second level of the recents group. Refs whose model vanished from the
+ * the model list of the recents tab. Refs whose model vanished from the
  * catalog (provider removed, or an OAuth provider signed out and
  * credential-gated away) drop out here, so the group never offers a row the
  * picker could not switch to.
@@ -42,31 +40,21 @@ export declare function recentCatalogModels(recents: readonly ModelRef[], models
 /**
  * Group a flat model catalog into provider rows, first-appearance order
  * (the registry's own listing order), labels resolved through
- * `providerInfos` with a route-key fallback. Recent refs (when supplied and
- * still catalogued) pin one extra pseudo-group at the top.
+ * `providerInfos` with a route-key fallback. Supplying recent refs pins an
+ * extra pseudo-group at the top, including an empty tab.
  */
 export declare function deriveModelGroups(models: readonly LlmModelInfo[], providerInfos: readonly LlmProviderInfo[], recents?: readonly ModelRef[]): readonly ModelGroupRow[];
-/** Where `/model` should open (or re-land after the fresh catalog arrives). */
+/** Where `/model` should open. */
 export interface ModelPickerLanding {
-    /**
-     * The group to open *inside* — set only by the single-provider fast path,
-     * where a one-row top level would be pure friction (and there are no
-     * recents to pin). Multi-provider catalogs — and any catalog with recents
-     * — land at the top level (`undefined`).
-     */
+    /** Active provider tab; undefined only for an empty catalog without recents. */
     readonly group: string | undefined;
-    /** Focus index within the landed level's rows. */
+    /** Focus index within that tab's model list. */
     readonly index: number;
 }
 /**
- * Compute the picker's landing: with a meaningful recents list pinned, focus
- * the recents row itself (its first entry is the most recently used model —
- * the likeliest destination); without recents, focus the current provider's
- * group. The single-provider fast path applies while recents carry no
- * navigation value — an empty list, or a lone entry that can only be the
- * current model (the picker seeds it): drilling straight into the only
- * provider's list beats a top level whose recents row duplicates it. Two or
- * more recents (or any multi-provider catalog) land at the top level.
+ * Open on the first recent model when the recents tab is present. Otherwise
+ * open the current provider and focus its current model, falling back to the
+ * first provider/model when the current route is absent.
  */
 export declare function modelPickerLanding(models: readonly LlmModelInfo[], currentProvider: string | undefined, currentModel: string | undefined, recents?: readonly ModelRef[]): ModelPickerLanding;
 //# sourceMappingURL=modelGroups.d.ts.map

package/lib/types/modelGroups.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"modelGroups.d.ts","sourceRoot":"","sources":["../../src/modelGroups.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAA;AAEpF;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,gBAAgB,CAAA;AAEnD,gFAAgF;AAChF,eAAO,MAAM,yBAAyB,eAAe,CAAA;AAErD,8EAA8E;AAC9E,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CACpB;AAED,2EAA2E;AAC3E,MAAM,WAAW,aAAa;IAC5B,8EAA8E;IAC9E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,mFAAmF;IACnF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,6DAA6D;IAC7D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,SAAS,QAAQ,EAAE,EAC5B,MAAM,EAAE,SAAS,YAAY,EAAE,GAC9B,SAAS,YAAY,EAAE,CAUzB;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,SAAS,YAAY,EAAE,EAC/B,aAAa,EAAE,SAAS,eAAe,EAAE,EACzC,OAAO,CAAC,EAAE,SAAS,QAAQ,EAAE,GAC5B,SAAS,aAAa,EAAE,CAsB1B;AAED,+EAA+E;AAC/E,MAAM,WAAW,kBAAkB;IACjC;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAA;IAClC,kDAAkD;IAClD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,SAAS,YAAY,EAAE,EAC/B,eAAe,EAAE,MAAM,GAAG,SAAS,EACnC,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,OAAO,CAAC,EAAE,SAAS,QAAQ,EAAE,GAC5B,kBAAkB,CAiBpB"}
+{"version":3,"file":"modelGroups.d.ts","sourceRoot":"","sources":["../../src/modelGroups.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAA;AAEpF;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,gBAAgB,CAAA;AAEnD,8EAA8E;AAC9E,eAAO,MAAM,yBAAyB,eAAe,CAAA;AAErD,8EAA8E;AAC9E,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CACpB;AAED,wDAAwD;AACxD,MAAM,WAAW,aAAa;IAC5B,8EAA8E;IAC9E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,mFAAmF;IACnF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,6DAA6D;IAC7D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,SAAS,QAAQ,EAAE,EAC5B,MAAM,EAAE,SAAS,YAAY,EAAE,GAC9B,SAAS,YAAY,EAAE,CAUzB;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,SAAS,YAAY,EAAE,EAC/B,aAAa,EAAE,SAAS,eAAe,EAAE,EACzC,OAAO,CAAC,EAAE,SAAS,QAAQ,EAAE,GAC5B,SAAS,aAAa,EAAE,CAoB1B;AAED,kCAAkC;AAClC,MAAM,WAAW,kBAAkB;IACjC,gFAAgF;IAChF,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAA;IAClC,gDAAgD;IAChD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,SAAS,YAAY,EAAE,EAC/B,eAAe,EAAE,MAAM,GAAG,SAAS,EACnC,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,OAAO,CAAC,EAAE,SAAS,QAAQ,EAAE,GAC5B,kBAAkB,CAUpB"}

package/lib/types/modelGroups.js

@@ -1,10 +1,8 @@
 /**
- * Pure derivation for the two-level `/model` picker: providers as top-level
- * groups, their models one level down, with a pinned "recently used"
- * pseudo-group first. Kept free of React/channel/i18n state so
- * `scripts/verify-model-picker-groups.mjs` can drive it headless; the
- * recents row's localized label is resolved at render time (its `label`
- * field is the {@link RECENTS_LABEL_PLACEHOLDER} sentinel).
+ * Pure derivation for the `/model` provider tabs, with a pinned
+ * "recently used" pseudo-provider first. Kept free of React/channel/i18n state so
+ * `scripts/verify-model-picker-groups.mjs` can drive it headless. Renderers
+ * derive the localized recents label from its provider key.
  *
  * @module dsh-tui/modelGroups
  */
@@ -14,11 +12,11 @@
  * never collide with a real route.
  */
 export const RECENTS_GROUP_PROVIDER = '__recents__';
-/** The recents row's raw label; renderers replace it with the localized one. */
+/** Placeholder for pure group data; the UI labels recents by provider key. */
 export const RECENTS_LABEL_PLACEHOLDER = '__recent__';
 /**
  * The recent refs that the current catalog still lists, most-recent-first —
- * the second level of the recents group. Refs whose model vanished from the
+ * the model list of the recents tab. Refs whose model vanished from the
  * catalog (provider removed, or an OAuth provider signed out and
  * credential-gated away) drop out here, so the group never offers a row the
  * picker could not switch to.
@@ -40,8 +38,8 @@ export function recentCatalogModels(recents, models) {
 /**
  * Group a flat model catalog into provider rows, first-appearance order
  * (the registry's own listing order), labels resolved through
- * `providerInfos` with a route-key fallback. Recent refs (when supplied and
- * still catalogued) pin one extra pseudo-group at the top.
+ * `providerInfos` with a route-key fallback. Supplying recent refs pins an
+ * extra pseudo-group at the top, including an empty tab.
  */
 export function deriveModelGroups(models, providerInfos, recents) {
     const order = [];
@@ -60,23 +58,18 @@ export function deriveModelGroups(models, providerInfos, recents) {
     }));
     if (recents !== undefined) {
         const recentCount = recentCatalogModels(recents, models).length;
-        if (recentCount > 0) {
-            groups.unshift({ provider: RECENTS_GROUP_PROVIDER, label: RECENTS_LABEL_PLACEHOLDER, count: recentCount });
-        }
+        groups.unshift({ provider: RECENTS_GROUP_PROVIDER, label: RECENTS_LABEL_PLACEHOLDER, count: recentCount });
     }
     return groups;
 }
 /**
- * Compute the picker's landing: with a meaningful recents list pinned, focus
- * the recents row itself (its first entry is the most recently used model —
- * the likeliest destination); without recents, focus the current provider's
- * group. The single-provider fast path applies while recents carry no
- * navigation value — an empty list, or a lone entry that can only be the
- * current model (the picker seeds it): drilling straight into the only
- * provider's list beats a top level whose recents row duplicates it. Two or
- * more recents (or any multi-provider catalog) land at the top level.
+ * Open on the first recent model when the recents tab is present. Otherwise
+ * open the current provider and focus its current model, falling back to the
+ * first provider/model when the current route is absent.
  */
 export function modelPickerLanding(models, currentProvider, currentModel, recents) {
+    if (recents !== undefined)
+        return { group: RECENTS_GROUP_PROVIDER, index: 0 };
     const providers = [];
     for (const model of models) {
         if (!providers.includes(model.provider))
@@ -84,14 +77,7 @@ export function modelPickerLanding(models, currentProvider, currentModel, recent
     }
     if (providers.length === 0)
         return { group: undefined, index: 0 };
-    const recentCount = recents === undefined ? 0 : recentCatalogModels(recents, models).length;
-    if (providers.length === 1 && recentCount <= 1) {
-        const only = providers[0];
-        const index = models.findIndex(model => model.provider === currentProvider && model.id === currentModel);
-        return { group: only, index: index >= 0 ? index : 0 };
-    }
-    if (recentCount > 0)
-        return { group: undefined, index: 0 };
-    const groupIndex = providers.indexOf(currentProvider ?? '');
-    return { group: undefined, index: groupIndex >= 0 ? groupIndex : 0 };
+    const group = providers.includes(currentProvider ?? '') ? currentProvider : providers[0];
+    const index = models.filter(model => model.provider === group).findIndex(model => model.id === currentModel && model.provider === currentProvider);
+    return { group, index: Math.max(0, index) };
 }

package/lib/types/modelPrefs.d.ts

@@ -3,10 +3,11 @@
  * `~/.dsh-tui/model.json` (`provider` + `model` keys) so the choice survives
  * restarts — same pattern as agent-preset.json. The file is best-effort: a
  * missing/corrupt file or an incomplete route simply falls back to the
- * harness default. Explicit `provider`/`model` keys in cordis.yml win over
- * this preference (deployment choice over runtime preference, matching
- * activityFrames and agent-preset) — but only as a COMPLETE pair; the
- * atomic resolution itself lives in modelRoute.ts (issue #67).
+ * deployment default. This preference is the standing user choice and wins
+ * over explicit `provider`/`model` keys in cordis.yml, which are the
+ * deployment DEFAULT for the first run — but only as a COMPLETE pair, so a
+ * config route can never merge with half of this file; the atomic resolution
+ * itself lives in modelRoute.ts (issue #67).
  */
 /** One persisted model route: the provider route plus its model id. */
 export interface ModelPref {

package/lib/types/modelPrefs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"modelPrefs.d.ts","sourceRoot":"","sources":["../../src/modelPrefs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAQH,uEAAuE;AACvE,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;CACd;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAWlE;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,GAAG,GAAE,MAAkB,GAAG,SAAS,GAAG,SAAS,CAM5E;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,GAAE,MAAkB,GAAG,OAAO,CAQhG"}
+{"version":3,"file":"modelPrefs.d.ts","sourceRoot":"","sources":["../../src/modelPrefs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAQH,uEAAuE;AACvE,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;CACd;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAWlE;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,GAAG,GAAE,MAAkB,GAAG,SAAS,GAAG,SAAS,CAM5E;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,GAAE,MAAkB,GAAG,OAAO,CAQhG"}