@deepwatch/dsh-client-settings 0.1.0

package/lib/client/readiness.js

@@ -0,0 +1,207 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { BINDING_STATUS_LABEL, ROLE_LABEL, blockerMessage, isExecutable, } from '@deepwatch/dsh-contracts';
+import { StatusChip } from './components.js';
+export const READINESS_STATUS_LABEL = {
+    loading: 'Loading…', ready: 'Ready', degraded: 'Degraded',
+    unconfigured: 'Not configured', unavailable: 'Unavailable',
+    not_tested: 'Not tested', error: 'Error',
+};
+export const READINESS = [
+    {
+        name: 'Watch Core',
+        detail: 'The engine that mints evidence and issues verdicts. Runs as a child of this workspace.',
+        section: 'watch-diagnostics',
+    },
+    {
+        name: 'Memory', detail: 'Durable, correctable memory with provenance on every record.',
+        section: 'watch-memory', coreCapabilities: ['watch.memory.recall'],
+    },
+    {
+        name: 'Verification', detail: 'Deterministic checks against the world. Needs no model.',
+        section: 'watch-verification', coreCapabilities: ['watch.verification.run'],
+    },
+    {
+        name: 'Browser',
+        detail: 'A supervised browser that acts and returns Core-owned evidence and a receipt.',
+        section: 'watch-sources',
+        coreCapabilities: ['watch.browser.observe', 'watch.browser.operate', 'watch.evidence.resolve'],
+    },
+    {
+        name: 'Agent Model', role: 'agent_model',
+        detail: 'Plans, reasons and writes. Any provider DSH supports — DeepSeek is one of them.',
+        section: 'watch-roles',
+    },
+    {
+        name: 'Visual Perception', role: 'visual_perception',
+        detail: 'Reads what is on screen or in a frame. A local model works.', section: 'watch-roles',
+    },
+    {
+        name: 'OCR', detail: 'Text out of images and pages. A CPU engine is available.',
+        section: 'watch-engines', defaultStatus: 'not_tested',
+    },
+    {
+        name: 'ASR', role: 'asr',
+        detail: 'Speech to text, with timings a citation can point at.', section: 'watch-roles',
+    },
+    {
+        name: 'Audio Understanding', role: 'audio_understanding',
+        detail: 'Non-speech audio: events, tone, music.', section: 'watch-roles',
+    },
+    {
+        name: 'Speaker / Diarization', detail: 'Who spoke, and when.',
+        section: 'watch-roles', defaultStatus: 'unconfigured',
+    },
+    {
+        name: 'Embeddings / Retrieval', role: 'embeddings',
+        detail: 'Search over the library and over memory. Falls back to lexical matching.',
+        section: 'watch-roles',
+    },
+    {
+        name: 'Capture',
+        detail: 'Screen, window, camera and microphone. Permission is asked at first use.',
+        section: 'watch-sources', defaultStatus: 'unconfigured',
+    },
+];
+function toneFor(status) {
+    if (status === 'ready')
+        return 'active';
+    if (status === 'degraded' || status === 'unavailable' || status === 'error')
+        return 'caution';
+    return 'neutral';
+}
+function coreStatus(health, reading) {
+    if (reading)
+        return 'loading';
+    if (health === null || health === undefined)
+        return 'error';
+    if (health.isTestOnlyMock)
+        return 'degraded';
+    if (health.blocker === 'connected')
+        return health.phase === 'ready' ? 'ready' : 'degraded';
+    if (health.blocker === 'core_missing' || health.blocker === 'bridge_surface_missing') {
+        return 'unavailable';
+    }
+    return health.phase === 'degraded' ? 'degraded' : 'error';
+}
+/**
+ * Core's evidence level, said in the vocabulary a surface may use.
+ *
+ * The interesting line is `probed`. Core separates three facts on purpose:
+ * the code exists, its dependencies were found (`probed`), and a real request
+ * ran here and succeeded (`machine_tested`). Only the third is *ready*.
+ *
+ * `probed` was drawn as **Degraded** for one release, and that was a false
+ * alarm in the opposite direction to the green dot: a machine with Chromium
+ * installed and a healthy memory index reported two capabilities as impaired
+ * when nothing was wrong with either — they simply had not been exercised.
+ * Degraded means working and hurt. Ignorance is `not_tested`, which is a
+ * neutral word and the accurate one.
+ */
+function capabilityStatus(detail) {
+    if (detail === undefined)
+        return 'not_tested';
+    if (!detail.usable)
+        return detail.status === 'unavailable' ? 'unavailable' : 'degraded';
+    if (detail.status === 'machine_tested')
+        return 'ready';
+    if (detail.status === 'unavailable')
+        return 'unavailable';
+    return 'not_tested';
+}
+const STATUS_PRIORITY = {
+    error: 7, unavailable: 6, degraded: 5, loading: 4,
+    not_tested: 3, unconfigured: 2, ready: 1,
+};
+/** Of two states, the one that promises less. */
+function worse(left, right) {
+    return STATUS_PRIORITY[right] > STATUS_PRIORITY[left] ? right : left;
+}
+/** Derive every row from runtime facts. Used by both first-run and Diagnostics. */
+export function deriveReadiness(facts) {
+    const reading = facts.reading === true;
+    const health = facts.health;
+    const details = new Map((health?.capabilityDetails ?? []).map(item => [item.capabilityId, item]));
+    const roles = new Map((facts.roles ?? []).map(row => [row.role, row]));
+    const core = coreStatus(health, reading);
+    return READINESS.map((definition, index) => {
+        let status;
+        let detail = definition.detail;
+        let statusLabel;
+        if (index === 0) {
+            status = core;
+            if (health !== null && health !== undefined && health.blocker !== 'connected' && health.fix !== '') {
+                detail = health.fix;
+            }
+        }
+        else if (definition.coreCapabilities !== undefined) {
+            // Core is the floor, not a separate row that happens to sit above these.
+            // A capability cannot be in better shape than the engine carrying it,
+            // and the case that proves it is the in-process fixture: it reports five
+            // machine-tested capabilities, and without this fold a mock backend
+            // renders as a working installation. Folding also means a group is only
+            // as good as its weakest member — two thirds of a browser is not a
+            // browser that can finish the job.
+            const states = definition.coreCapabilities.map(id => capabilityStatus(details.get(id)));
+            status = states.reduce(worse, core);
+            const problem = definition.coreCapabilities
+                .map(id => details.get(id))
+                .find(item => item !== undefined && (!item.usable || item.status !== 'machine_tested'));
+            if (problem !== undefined) {
+                detail = problem.fixes[0] ?? (problem.missing.length === 0
+                    ? definition.detail
+                    : `Missing: ${problem.missing.join(', ')}.`);
+            }
+            else if (status !== 'ready' && health !== null && health !== undefined
+                && health.fix !== '') {
+                // Core could not be read, so these rows have nothing of their own to
+                // report. What to do about Core is the only actionable sentence there is.
+                detail = health.fix;
+            }
+        }
+        else if (definition.role !== undefined) {
+            const role = roles.get(definition.role);
+            if (role === undefined)
+                status = 'unconfigured';
+            else if (isExecutable(role.readiness))
+                status = 'ready';
+            else if (role.readiness.status === 'bound_unverified')
+                status = 'not_tested';
+            else if (role.readiness.status === 'unbound')
+                status = 'unconfigured';
+            else
+                status = 'error';
+            if (role !== undefined) {
+                statusLabel = BINDING_STATUS_LABEL[role.readiness.status];
+                if (!isExecutable(role.readiness))
+                    detail = blockerMessage(role.readiness) ?? detail;
+            }
+        }
+        else {
+            status = definition.defaultStatus ?? 'not_tested';
+        }
+        return {
+            ...definition, detail, status,
+            statusLabel: statusLabel ?? READINESS_STATUS_LABEL[status], tone: toneFor(status),
+        };
+    });
+}
+export function ReadinessList({ openSection, roles, health, reading }) {
+    const rows = deriveReadiness({ roles, health, reading });
+    return (_jsx("div", { style: {
+            border: '1px solid color-mix(in srgb, var(--watch-accent) 10%, var(--dsw-alias-border-l2))',
+            borderRadius: '14px', overflow: 'hidden',
+            background: 'linear-gradient(145deg, color-mix(in srgb, var(--watch-accent) 3%, var(--dsw-alias-bg-layer-2)), var(--dsw-alias-bg-base))',
+            boxShadow: '0 10px 28px color-mix(in srgb, black 8%, transparent)',
+        }, children: rows.map((item, index) => (_jsxs("div", { style: {
+                display: 'flex', alignItems: 'flex-start', gap: '12px', padding: '12px 16px',
+                borderTop: index === 0 ? 'none' : '1px solid var(--dsw-alias-border-l2)',
+            }, children: [_jsxs("div", { style: { flex: 1, minWidth: 0 }, children: [_jsx("div", { style: { fontSize: '13px', fontWeight: 500 }, children: item.role === undefined ? item.name : ROLE_LABEL[item.role] }), _jsx("div", { style: {
+                                fontSize: '12px', lineHeight: 1.5, marginTop: '2px',
+                                color: 'var(--dsw-alias-label-tertiary)',
+                            }, children: item.detail })] }), _jsxs("span", { style: { display: 'flex', gap: '8px', alignItems: 'center', flexShrink: 0 }, children: [_jsx(StatusChip, { tone: item.tone, children: item.statusLabel }), item.section === undefined || openSection === undefined ? null : (_jsx("button", { type: "button", onClick: () => { openSection(item.section); }, style: {
+                                background: 'none', border: 'none', cursor: 'pointer', fontSize: '11px',
+                                padding: '2px 4px', color: 'var(--dsw-alias-label-secondary)',
+                                textDecoration: 'underline',
+                            }, children: "Configure" }))] })] }, item.name))) }));
+}
+//# sourceMappingURL=readiness.js.map

package/lib/client/readiness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"readiness.js","sourceRoot":"","sources":["../../src/client/readiness.tsx"],"names":[],"mappings":";AAGA,OAAO,EACL,oBAAoB,EAAE,UAAU,EAAE,cAAc,EAAE,YAAY,GAC/D,MAAM,0BAA0B,CAAA;AAKjC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAc5C,MAAM,CAAC,MAAM,sBAAsB,GAA8C;IAC/E,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU;IACzD,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAE,aAAa;IAC1D,UAAU,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO;CACzC,CAAA;AAmBD,MAAM,CAAC,MAAM,SAAS,GAAmC;IACvD;QACE,IAAI,EAAE,YAAY;QAClB,MAAM,EAAE,wFAAwF;QAChG,OAAO,EAAE,mBAAmB;KAC7B;IACD;QACE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,8DAA8D;QACtF,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,CAAC,qBAAqB,CAAC;KACnE;IACD;QACE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,yDAAyD;QACvF,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,CAAC,wBAAwB,CAAC;KAC5E;IACD;QACE,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,+EAA+E;QACvF,OAAO,EAAE,eAAe;QACxB,gBAAgB,EAAE,CAAC,uBAAuB,EAAE,uBAAuB,EAAE,wBAAwB,CAAC;KAC/F;IACD;QACE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa;QACxC,MAAM,EAAE,iFAAiF;QACzF,OAAO,EAAE,aAAa;KACvB;IACD;QACE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,mBAAmB;QACpD,MAAM,EAAE,6DAA6D,EAAE,OAAO,EAAE,aAAa;KAC9F;IACD;QACE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,0DAA0D;QAC/E,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,YAAY;KACtD;IACD;QACE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK;QACxB,MAAM,EAAE,uDAAuD,EAAE,OAAO,EAAE,aAAa;KACxF;IACD;QACE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,qBAAqB;QACxD,MAAM,EAAE,wCAAwC,EAAE,OAAO,EAAE,aAAa;KACzE;IACD;QACE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,sBAAsB;QAC7D,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc;KACtD;IACD;QACE,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,YAAY;QAClD,MAAM,EAAE,0EAA0E;QAClF,OAAO,EAAE,aAAa;KACvB;IACD;QACE,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,0EAA0E;QAClF,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,cAAc;KACxD;CACF,CAAA;AAQD,SAAS,OAAO,CAAC,MAAuB;IACtC,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,QAAQ,CAAA;IACvC,IAAI,MAAM,KAAK,UAAU,IAAI,MAAM,KAAK,aAAa,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,SAAS,CAAA;IAC7F,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,UAAU,CAAC,MAA2C,EAAE,OAAgB;IAC/E,IAAI,OAAO;QAAE,OAAO,SAAS,CAAA;IAC7B,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,OAAO,CAAA;IAC3D,IAAI,MAAM,CAAC,cAAc;QAAE,OAAO,UAAU,CAAA;IAC5C,IAAI,MAAM,CAAC,OAAO,KAAK,WAAW;QAAE,OAAO,MAAM,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAA;IAC1F,IAAI,MAAM,CAAC,OAAO,KAAK,cAAc,IAAI,MAAM,CAAC,OAAO,KAAK,wBAAwB,EAAE,CAAC;QACrF,OAAO,aAAa,CAAA;IACtB,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAA;AAC3D,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,gBAAgB,CAAC,MAA0C;IAClE,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,YAAY,CAAA;IAC7C,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAA;IACvF,IAAI,MAAM,CAAC,MAAM,KAAK,gBAAgB;QAAE,OAAO,OAAO,CAAA;IACtD,IAAI,MAAM,CAAC,MAAM,KAAK,aAAa;QAAE,OAAO,aAAa,CAAA;IACzD,OAAO,YAAY,CAAA;AACrB,CAAC;AAED,MAAM,eAAe,GAA8C;IACjE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;IACjD,UAAU,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;CACzC,CAAA;AAED,iDAAiD;AACjD,SAAS,KAAK,CAAC,IAAqB,EAAE,KAAsB;IAC1D,OAAO,eAAe,CAAC,KAAK,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAA;AACtE,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,eAAe,CAAC,KAAqB;IACnD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,KAAK,IAAI,CAAA;IACtC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAA;IAC3B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,iBAAiB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;IACjG,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAA;IACtE,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAExC,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,EAAE;QACzC,IAAI,MAAuB,CAAA;QAC3B,IAAI,MAAM,GAAG,UAAU,CAAC,MAAM,CAAA;QAC9B,IAAI,WAA+B,CAAA;QAEnC,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAChB,MAAM,GAAG,IAAI,CAAA;YACb,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,WAAW,IAAI,MAAM,CAAC,GAAG,KAAK,EAAE,EAAE,CAAC;gBACnG,MAAM,GAAG,MAAM,CAAC,GAAG,CAAA;YACrB,CAAC;QACH,CAAC;aAAM,IAAI,UAAU,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACrD,yEAAyE;YACzE,sEAAsE;YACtE,yEAAyE;YACzE,oEAAoE;YACpE,wEAAwE;YACxE,mEAAmE;YACnE,mCAAmC;YACnC,MAAM,MAAM,GAAG,UAAU,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;YACvF,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;YACnC,MAAM,OAAO,GAAG,UAAU,CAAC,gBAAgB;iBACxC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;iBAC1B,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,gBAAgB,CAAC,CAAC,CAAA;YACzF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;oBACxD,CAAC,CAAC,UAAU,CAAC,MAAM;oBACnB,CAAC,CAAC,YAAY,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAChD,CAAC;iBAAM,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS;mBACnE,MAAM,CAAC,GAAG,KAAK,EAAE,EAAE,CAAC;gBACvB,qEAAqE;gBACrE,0EAA0E;gBAC1E,MAAM,GAAG,MAAM,CAAC,GAAG,CAAA;YACrB,CAAC;QACH,CAAC;aAAM,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACzC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;YACvC,IAAI,IAAI,KAAK,SAAS;gBAAE,MAAM,GAAG,cAAc,CAAA;iBAC1C,IAAI,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC;gBAAE,MAAM,GAAG,OAAO,CAAA;iBAClD,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,kBAAkB;gBAAE,MAAM,GAAG,YAAY,CAAA;iBACvE,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,SAAS;gBAAE,MAAM,GAAG,cAAc,CAAA;;gBAChE,MAAM,GAAG,OAAO,CAAA;YACrB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,WAAW,GAAG,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;gBACzD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC;oBAAE,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,MAAM,CAAA;YACtF,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,UAAU,CAAC,aAAa,IAAI,YAAY,CAAA;QACnD,CAAC;QAED,OAAO;YACL,GAAG,UAAU,EAAE,MAAM,EAAE,MAAM;YAC7B,WAAW,EAAE,WAAW,IAAI,sBAAsB,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC;SAClF,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAEpC;IAED,MAAM,IAAI,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;IACxD,OAAO,CACL,cAAK,KAAK,EAAE;YACV,MAAM,EAAE,mFAAmF;YAC3F,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ;YACxC,UAAU,EAAE,4HAA4H;YACxI,SAAS,EAAE,uDAAuD;SACnE,YAEE,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CACzB,eAAqB,KAAK,EAAE;gBAC1B,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW;gBAC5E,SAAS,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,sCAAsC;aACzE,aAEC,eAAK,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,aAClC,cAAK,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,YAC9C,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GACxD,EACN,cAAK,KAAK,EAAE;gCACV,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK;gCACnD,KAAK,EAAE,iCAAiC;6BACzC,YAEE,IAAI,CAAC,MAAM,GACR,IACF,EACN,gBAAM,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,EAAE,aAC/E,KAAC,UAAU,IAAC,IAAI,EAAE,IAAI,CAAC,IAAI,YAAG,IAAI,CAAC,WAAW,GAAc,EAC3D,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAChE,iBAAQ,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,GAAG,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,OAAiB,CAAC,CAAA,CAAC,CAAC,EAC1E,KAAK,EAAE;gCACL,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM;gCACvE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,kCAAkC;gCAC7D,cAAc,EAAE,WAAW;6BAC5B,0BAGM,CACV,IACI,KA9BC,IAAI,CAAC,IAAI,CA+Bb,CACP,CAAC,GACE,CACP,CAAA;AACH,CAAC"}

package/lib/client/role-bindings.d.ts

@@ -0,0 +1,118 @@
+/**
+ * Role Bindings, as a screen somebody can actually finish setup on.
+ *
+ * This surface used to be four rows of static copy saying "Not bound" and a
+ * paragraph explaining that bindings were stored by DSH. Both true. Neither
+ * gave anybody a way to bind anything — so a person who had saved an OpenRouter
+ * credential arrived here, read that nothing was bound, and had no control to
+ * change it. The screen described the product's design instead of operating it.
+ *
+ * What it does now is the four steps in order, because they *are* ordered and
+ * pretending otherwise is what made a saved credential look like a finished
+ * setup:
+ *
+ *   1. a provider has a credential          — stored, and nothing more
+ *   2. that provider advertises models      — asked for, never assumed
+ *   3. a model is assigned to a capability  — explicitly, by a person
+ *   4. the capability can run                — derived, never stored
+ *
+ * **Nothing here is signalled by colour alone.** Every state carries the word
+ * for it, and the chip is decoration on top of that word. A status conveyed by
+ * a green dot is a status a screen reader does not have, and — as the incident
+ * that produced this file showed — one a sighted reader misreads too.
+ *
+ * **Nothing is chosen implicitly.** There is no "use my only credential", no
+ * defaulting to the first model in the list, and no provider that becomes
+ * bound because it was configured. Every binding here is a button somebody
+ * pressed.
+ *
+ * @module @deepwatch/dsh-client-settings/role-bindings
+ */
+import type { ReactNode } from 'react';
+import type { BindingStore, ProviderRow, RoleRow } from './binding-state.js';
+/** What the section is handed by whoever mounts it. */
+export interface RoleBindingsProps {
+    readonly store: BindingStore;
+}
+export declare const CONTROL: {
+    select: {
+        font: string;
+        fontSize: string;
+        padding: string;
+        borderRadius: string;
+        border: string;
+        background: string;
+        color: string;
+        minWidth: string;
+        maxWidth: string;
+    };
+    primary: {
+        font: string;
+        fontSize: string;
+        fontWeight: number;
+        padding: string;
+        borderRadius: string;
+        cursor: string;
+        border: string;
+        background: string;
+        color: string;
+        boxShadow: string;
+    };
+    quiet: {
+        font: string;
+        fontSize: string;
+        padding: string;
+        borderRadius: string;
+        cursor: string;
+        border: string;
+        background: string;
+        color: string;
+    };
+    field: {
+        display: string;
+        flexDirection: "column";
+        gap: string;
+        minWidth: number;
+    };
+    label: {
+        fontSize: string;
+        letterSpacing: string;
+        textTransform: "uppercase";
+        color: string;
+    };
+    row: {
+        display: string;
+        flexWrap: "wrap";
+        gap: string;
+        alignItems: string;
+        marginTop: string;
+    };
+};
+/**
+ * The editor for one role: pick a provider, pick one of its models, assign it.
+ *
+ * Two selects rather than one combined list, because the two choices fail
+ * differently. A provider with no credential is a different problem from a
+ * provider whose catalogue is empty, and a single flattened list would report
+ * both as "nothing to choose".
+ *
+ * Exported because the blocked composer offers the same choice in place. A
+ * person who is stopped from sending should be able to fix it where they are
+ * standing, and offering them a *second* picker written separately is how two
+ * screens end up disagreeing about what a provider offers.
+ */
+export declare function BindingEditor({ row, providers, saving, onBind, onCancel }: {
+    readonly row: RoleRow;
+    readonly providers: readonly ProviderRow[];
+    readonly saving: boolean;
+    readonly onBind: (provider: string, model: string) => void;
+    readonly onCancel: () => void;
+}): ReactNode;
+/**
+ * Role Bindings.
+ *
+ * @param props.store - the binding store this surface reads and writes.
+ * @returns the section body.
+ */
+export declare function RoleBindings({ store }: RoleBindingsProps): ReactNode;
+//# sourceMappingURL=role-bindings.d.ts.map

package/lib/client/role-bindings.js

@@ -0,0 +1,211 @@
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+/**
+ * Role Bindings, as a screen somebody can actually finish setup on.
+ *
+ * This surface used to be four rows of static copy saying "Not bound" and a
+ * paragraph explaining that bindings were stored by DSH. Both true. Neither
+ * gave anybody a way to bind anything — so a person who had saved an OpenRouter
+ * credential arrived here, read that nothing was bound, and had no control to
+ * change it. The screen described the product's design instead of operating it.
+ *
+ * What it does now is the four steps in order, because they *are* ordered and
+ * pretending otherwise is what made a saved credential look like a finished
+ * setup:
+ *
+ *   1. a provider has a credential          — stored, and nothing more
+ *   2. that provider advertises models      — asked for, never assumed
+ *   3. a model is assigned to a capability  — explicitly, by a person
+ *   4. the capability can run                — derived, never stored
+ *
+ * **Nothing here is signalled by colour alone.** Every state carries the word
+ * for it, and the chip is decoration on top of that word. A status conveyed by
+ * a green dot is a status a screen reader does not have, and — as the incident
+ * that produced this file showed — one a sighted reader misreads too.
+ *
+ * **Nothing is chosen implicitly.** There is no "use my only credential", no
+ * defaulting to the first model in the list, and no provider that becomes
+ * bound because it was configured. Every binding here is a button somebody
+ * pressed.
+ *
+ * @module @deepwatch/dsh-client-settings/role-bindings
+ */
+import { useCallback, useEffect, useId, useMemo, useRef, useState, useSyncExternalStore } from 'react';
+import { BINDABLE_ROLES, BINDING_STATUS_LABEL, CREDENTIAL_STATUS_LABEL, PRIMARY_ROLE, ROLE_LABEL, ROLE_PURPOSE, blockerMessage, isExecutable, } from '@deepwatch/dsh-contracts';
+import { StatusChip, T } from './components.js';
+import { DEEPSEEK_IS_OPTIONAL, HOSTED_COUNT, PROVIDER_COUNT, SAMPLE_PROVIDERS, SELF_HOSTED_COUNT, } from '../providers.js';
+/**
+ * The tone a readiness status earns.
+ *
+ * `bound_unverified` is deliberately not `active`. That is precisely the state
+ * a green dot used to claim, and claiming it is what sent a prompt to a
+ * provider nobody had configured.
+ */
+function toneFor(readiness) {
+    if (isExecutable(readiness))
+        return 'active';
+    return readiness.status === 'blocked' ? 'caution' : 'neutral';
+}
+/** The tone a credential state earns. Stored is not working. */
+function credentialTone(status) {
+    if (status === 'verified')
+        return 'active';
+    if (status === 'rejected' || status === 'inaccessible')
+        return 'caution';
+    return 'neutral';
+}
+export const CONTROL = {
+    select: {
+        font: 'inherit', fontSize: '13px', padding: '7px 10px', borderRadius: '10px',
+        border: '1px solid color-mix(in srgb, var(--watch-accent) 12%, var(--dsw-alias-border-l2))',
+        background: 'var(--dsw-alias-bg-layer-2)', color: 'var(--dsw-alias-label-primary)',
+        minWidth: '180px', maxWidth: '100%',
+    },
+    primary: {
+        font: 'inherit', fontSize: '13px', fontWeight: 600, padding: '8px 15px',
+        borderRadius: '10px', cursor: 'pointer',
+        border: '1px solid var(--watch-accent)',
+        background: 'var(--watch-accent)', color: 'white',
+        boxShadow: '0 6px 18px color-mix(in srgb, var(--watch-accent) 22%, transparent)',
+    },
+    quiet: {
+        font: 'inherit', fontSize: '13px', padding: '8px 13px', borderRadius: '10px',
+        cursor: 'pointer', border: '1px solid var(--dsw-alias-border-l2)',
+        background: 'color-mix(in srgb, var(--dsw-alias-bg-layer-2) 80%, transparent)', color: 'var(--dsw-alias-label-secondary)',
+    },
+    field: {
+        display: 'flex', flexDirection: 'column', gap: '4px', minWidth: 0,
+    },
+    label: {
+        fontSize: '11px', letterSpacing: '0.03em', textTransform: 'uppercase',
+        color: 'var(--dsw-alias-label-tertiary)',
+    },
+    // Wraps rather than scrolls: a narrow settings panel is the common case, and
+    // a row of controls that overflows horizontally hides the one on the right.
+    row: {
+        display: 'flex', flexWrap: 'wrap', gap: '10px',
+        alignItems: 'flex-end', marginTop: '12px',
+    },
+};
+/**
+ * The editor for one role: pick a provider, pick one of its models, assign it.
+ *
+ * Two selects rather than one combined list, because the two choices fail
+ * differently. A provider with no credential is a different problem from a
+ * provider whose catalogue is empty, and a single flattened list would report
+ * both as "nothing to choose".
+ *
+ * Exported because the blocked composer offers the same choice in place. A
+ * person who is stopped from sending should be able to fix it where they are
+ * standing, and offering them a *second* picker written separately is how two
+ * screens end up disagreeing about what a provider offers.
+ */
+export function BindingEditor({ row, providers, saving, onBind, onCancel }) {
+    const providerId = useId();
+    const modelId = useId();
+    const noticeId = useId();
+    const first = useRef(null);
+    const [provider, setProvider] = useState(row.provider ?? '');
+    const [model, setModel] = useState(row.model ?? '');
+    // Focus the first control when the editor opens: a person who pressed
+    // "Choose a model" is already looking here, and leaving focus on the button
+    // they just activated means the next Tab goes backwards through the card.
+    useEffect(() => { first.current?.focus(); }, []);
+    const chosen = providers.find(entry => entry.provider === provider);
+    const models = chosen?.models ?? [];
+    // The chosen model is cleared when the provider changes, rather than carried
+    // over. A model id from one provider is not a model id for another, and
+    // keeping it produced bindings that looked complete and could not run.
+    const pickProvider = (next) => {
+        setProvider(next);
+        setModel('');
+    };
+    const notice = chosen === undefined
+        ? 'Choose a provider to see the models it offers.'
+        : chosen.credential === 'absent'
+            ? `${chosen.displayName} has no credential yet. Add one in Models & Providers, then come back.`
+            : chosen.catalogError !== null
+                ? `${chosen.displayName} did not return a model list.`
+                : models.length === 0
+                    ? `${chosen.displayName} advertised no models.`
+                    : `${String(models.length)} model(s) offered by ${chosen.displayName}.`;
+    return (_jsxs("div", { style: CONTROL.row, children: [_jsxs("span", { style: CONTROL.field, children: [_jsx("label", { htmlFor: providerId, style: CONTROL.label, children: "Provider" }), _jsxs("select", { id: providerId, ref: first, style: CONTROL.select, value: provider, disabled: saving, "aria-describedby": noticeId, onChange: event => { pickProvider(event.target.value); }, children: [_jsx("option", { value: "", children: "Choose a provider\u2026" }), providers.map(entry => (_jsx("option", { value: entry.provider, children: `${entry.displayName} — ${CREDENTIAL_STATUS_LABEL[entry.credential]}` }, entry.provider)))] })] }), _jsxs("span", { style: CONTROL.field, children: [_jsx("label", { htmlFor: modelId, style: CONTROL.label, children: "Model" }), _jsxs("select", { id: modelId, style: CONTROL.select, value: model, disabled: saving || models.length === 0, "aria-describedby": noticeId, onChange: event => { setModel(event.target.value); }, children: [_jsx("option", { value: "", children: "Choose a model\u2026" }), models.map(entry => (_jsx("option", { value: entry.id, children: entry.name === '' ? entry.id : entry.name }, entry.id)))] })] }), _jsx("button", { type: "button", style: { ...CONTROL.primary, opacity: provider === '' || model === '' || saving ? 0.5 : 1 }, disabled: provider === '' || model === '' || saving, onClick: () => { onBind(provider, model); }, children: saving ? 'Assigning…' : `Assign to ${ROLE_LABEL[row.role]}` }), _jsx("button", { type: "button", style: CONTROL.quiet, onClick: onCancel, disabled: saving, children: "Cancel" }), _jsx("p", { id: noticeId, style: {
+                    flexBasis: '100%', margin: '2px 0 0', fontSize: '12px', lineHeight: 1.5,
+                    color: 'var(--dsw-alias-label-tertiary)',
+                }, children: notice })] }));
+}
+/** One role: what it is, what it is bound to, and whether that can run. */
+function RoleCard({ row, providers, snapshot, store, openEditor, editing, onEdit, onClose }) {
+    const provider = providers.find(entry => entry.provider === row.provider);
+    const blocker = blockerMessage(row.readiness);
+    const ready = isExecutable(row.readiness);
+    return (_jsxs("div", { style: T.card, children: [_jsxs("div", { style: T.cardHead, children: [_jsx("h3", { style: T.title, children: ROLE_LABEL[row.role] }), _jsx(StatusChip, { tone: toneFor(row.readiness), children: BINDING_STATUS_LABEL[row.readiness.status] })] }), _jsx("p", { style: { ...T.lead, margin: '6px 0 0' }, children: ROLE_PURPOSE[row.role] }), _jsxs("div", { style: T.meta, children: [_jsx("span", { style: T.key, children: "Provider" }), _jsx("span", { style: T.value, children: provider?.displayName ?? row.provider ?? 'Nothing assigned' }), _jsx("span", { style: T.key, children: "Model" }), _jsx("span", { style: T.value, children: row.model ?? 'Nothing assigned' }), _jsx("span", { style: T.key, children: "Status" }), _jsx("span", { style: T.value, children: ready
+                            ? `${ROLE_LABEL[row.role]} can run.`
+                            : blocker ?? 'Not configured.' })] }), openEditor && editing === row.role
+                ? (_jsx(BindingEditor, { row: row, providers: providers, saving: snapshot.saving, onBind: (chosenProvider, chosenModel) => {
+                        void store.bind(row.role, chosenProvider, chosenModel).then(onClose);
+                    }, onCancel: onClose }))
+                : (_jsxs("div", { style: CONTROL.row, children: [_jsx("button", { type: "button", style: CONTROL.primary, disabled: !snapshot.writable, "aria-describedby": snapshot.writable ? undefined : 'watch-bindings-readonly', onClick: () => { onEdit(row.role); }, children: row.model === null ? 'Choose a model' : 'Change model' }), row.model === null
+                            ? null
+                            : (_jsx("button", { type: "button", style: CONTROL.quiet, disabled: (snapshot.testingRole !== null && snapshot.testingRole !== row.role) || snapshot.saving, onClick: () => {
+                                    if (snapshot.testingRole === row.role)
+                                        store.cancelProviderTest();
+                                    else
+                                        void store.testRole(row.role);
+                                }, children: snapshot.testingRole === row.role ? 'Cancel provider test' : 'Run provider test' })), row.model === null
+                            ? null
+                            : (_jsx("button", { type: "button", style: CONTROL.quiet, disabled: !snapshot.writable || snapshot.saving, "aria-describedby": snapshot.writable ? undefined : 'watch-bindings-readonly', onClick: () => { void store.unbind(row.role); }, children: `Unassign ${ROLE_LABEL[row.role]}` }))] }))] }));
+}
+/** The providers a person has actually configured, and what is known of each. */
+function ProviderList({ providers }) {
+    const configured = providers.filter(entry => entry.credential !== 'absent');
+    if (configured.length === 0) {
+        return (_jsxs("div", { style: { ...T.card, borderStyle: 'dashed' }, children: [_jsxs("div", { style: T.cardHead, children: [_jsx("h3", { style: T.title, children: "No provider is configured yet" }), _jsx(StatusChip, { tone: "neutral", children: "No credential" })] }), _jsx("p", { style: { ...T.lead, margin: '8px 0 0' }, children: "Add a credential in the Harness\u2019s own Models & Providers screen. A saved credential is the first of four steps \u2014 it stores a key and assigns nothing." })] }));
+    }
+    return (_jsxs(_Fragment, { children: [_jsxs("div", { style: T.card, children: [_jsxs("div", { style: T.cardHead, children: [_jsx("h3", { style: T.title, children: `${String(PROVIDER_COUNT)} routes are available` }), _jsx(StatusChip, { tone: "neutral", children: `${String(configured.length)} configured` })] }), _jsxs("p", { style: { ...T.lead, margin: '8px 0 0' }, children: [`${String(HOSTED_COUNT)} hosted and ${String(SELF_HOSTED_COUNT)} where you supply the endpoint — `, SAMPLE_PROVIDERS.join(', '), ' and others. Watch adds none of these and removes none of them: the ', 'catalogue is the Harness’s, reached through its own Models & Providers screen.'] }), _jsxs("div", { style: T.meta, children: [_jsx("span", { style: T.key, children: "A local model" }), _jsx("span", { style: T.value, children: "An OpenAI-compatible server you run \u2014 Ollama, vLLM, LM Studio, llama.cpp \u2014 is a base URL you supply, not a separate feature." }), _jsx("span", { style: T.key, children: "DeepSeek" }), _jsx("span", { style: T.value, children: DEEPSEEK_IS_OPTIONAL
+                                    ? 'One route among many. Nothing here requires it, and nothing selects it for you.'
+                                    : 'The only route in this catalogue.' })] })] }), configured.map(entry => (_jsxs("div", { style: T.card, children: [_jsxs("div", { style: T.cardHead, children: [_jsx("h3", { style: T.title, children: entry.displayName }), _jsx(StatusChip, { tone: credentialTone(entry.credential), children: CREDENTIAL_STATUS_LABEL[entry.credential] })] }), _jsxs("div", { style: T.meta, children: [_jsx("span", { style: T.key, children: "Route" }), _jsx("span", { style: T.value, children: entry.active ? 'Served by an adapter' : 'Not currently served' }), _jsx("span", { style: T.key, children: "Models offered" }), _jsx("span", { style: T.value, children: entry.catalogError !== null
+                                    ? 'The provider did not return a list.'
+                                    : entry.models.length === 0
+                                        ? 'None advertised.'
+                                        : String(entry.models.length) }), _jsx("span", { style: T.key, children: "Credential save" }), _jsx("span", { style: T.value, children: "Does not contact the provider. Tests are explicit and apply to one exact provider/model binding." })] })] }, entry.provider)))] }));
+}
+/**
+ * Role Bindings.
+ *
+ * @param props.store - the binding store this surface reads and writes.
+ * @returns the section body.
+ */
+export function RoleBindings({ store }) {
+    const snapshot = useSyncExternalStore(store.subscribe, store.getSnapshot, store.getSnapshot);
+    const [editing, setEditing] = useState(null);
+    useEffect(() => { void store.load(); }, [store]);
+    const onEdit = useCallback((role) => { setEditing(role); }, []);
+    const onClose = useCallback(() => { setEditing(null); }, []);
+    const chat = useMemo(() => snapshot.roles.find(row => row.role === PRIMARY_ROLE) ?? null, [snapshot.roles]);
+    if (snapshot.status === 'error') {
+        return (_jsx("div", { style: T.page, children: _jsxs("div", { style: { ...T.card, borderStyle: 'dashed' }, children: [_jsxs("div", { style: T.cardHead, children: [_jsx("h3", { style: T.title, children: "Settings could not be read" }), _jsx(StatusChip, { tone: "caution", children: "Unavailable" })] }), _jsx("p", { style: { ...T.lead, margin: '8px 0 0' }, children: "The Harness did not answer. Nothing has been changed, and no capability has been reconfigured." }), _jsx("div", { style: CONTROL.row, children: _jsx("button", { type: "button", style: CONTROL.primary, onClick: () => { void store.load(); }, children: "Try again" }) })] }) }));
+    }
+    return (_jsxs("div", { style: T.page, children: [_jsx("p", { style: T.lead, children: "A capability is assigned per role, not per provider. One provider may serve several roles, and a role with nothing assigned says so \u2014 it never falls back to another role\u2019s model, and a stored credential never assigns itself." }), snapshot.writable
+                ? null
+                : (_jsxs("div", { id: "watch-bindings-readonly", style: { ...T.card, borderStyle: 'dashed' }, children: [_jsxs("div", { style: T.cardHead, children: [_jsx("h3", { style: T.title, children: "Settings are read-only" }), _jsx(StatusChip, { tone: "caution", children: "Not writable" })] }), _jsx("p", { style: { ...T.lead, margin: '8px 0 0' }, children: "This Workspace was opened against a configuration the Harness will not let it change, so assignments cannot be edited here. Nothing is wrong with the capabilities themselves \u2014 what is shown below is accurate and read from the running system." })] })), chat !== null && !isExecutable(chat.readiness)
+                ? (_jsxs("div", { style: { ...T.card, borderColor: 'var(--watch-accent)' }, children: [_jsxs("div", { style: T.cardHead, children: [_jsx("h3", { style: T.title, children: "Chat is not ready yet" }), _jsx(StatusChip, { tone: "neutral", children: BINDING_STATUS_LABEL[chat.readiness.status] })] }), _jsxs("p", { style: { ...T.lead, margin: '8px 0 0' }, children: [blockerMessage(chat.readiness) ?? 'Choose a provider and model for Chat.', ' Until then the composer stays closed and nothing is sent.'] }), _jsx("div", { style: CONTROL.row, children: _jsx("button", { type: "button", style: CONTROL.primary, disabled: !snapshot.writable, "aria-describedby": snapshot.writable ? undefined : 'watch-bindings-readonly', onClick: () => { setEditing(PRIMARY_ROLE); }, children: "Choose models and roles" }) })] }))
+                : null, _jsx("p", { role: "status", "aria-live": "polite", style: {
+                    margin: '0 0 10px', fontSize: '12px',
+                    color: 'var(--dsw-alias-label-tertiary)',
+                    minHeight: '1em',
+                }, children: snapshot.saving
+                    ? 'Saving the assignment…'
+                    : snapshot.testingRole !== null
+                        ? `Testing ${ROLE_LABEL[snapshot.testingRole]} with one bounded provider request…`
+                        : snapshot.testMessage !== null
+                            ? snapshot.testMessage
+                            : snapshot.error !== null
+                                ? snapshot.error
+                                : '' }), _jsx("h2", { style: T.h2, children: "Capabilities" }), BINDABLE_ROLES.map((role) => {
+                const row = snapshot.roles.find(entry => entry.role === role);
+                return row === undefined
+                    ? null
+                    : (_jsx(RoleCard, { row: row, providers: snapshot.providers, snapshot: snapshot, store: store, openEditor: editing === role, editing: editing, onEdit: onEdit, onClose: onClose }, role));
+            }), _jsx("h2", { style: T.h2, children: "Providers" }), _jsx(ProviderList, { providers: snapshot.providers }), _jsx("p", { style: T.note, children: "Assignments are stored beside the Harness\u2019s own settings, and reference a credential rather than holding one. Watch keeps no second credential store and never sees a key." })] }));
+}
+//# sourceMappingURL=role-bindings.js.map

package/lib/client/role-bindings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"role-bindings.js","sourceRoot":"","sources":["../../src/client/role-bindings.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,oBAAoB,EAAE,MAAM,OAAO,CAAA;AAEtG,OAAO,EACL,cAAc,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,YAAY,EAC3E,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,GACvD,MAAM,0BAA0B,CAAA;AAEjC,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,iBAAiB,CAAA;AAC/C,OAAO,EACL,oBAAoB,EAAE,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,iBAAiB,GACxF,MAAM,iBAAiB,CAAA;AASxB;;;;;;GAMG;AACH,SAAS,OAAO,CAAC,SAAwB;IACvC,IAAI,YAAY,CAAC,SAAS,CAAC;QAAE,OAAO,QAAQ,CAAA;IAC5C,OAAO,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAA;AAC/D,CAAC;AAED,gEAAgE;AAChE,SAAS,cAAc,CAAC,MAAc;IACpC,IAAI,MAAM,KAAK,UAAU;QAAE,OAAO,QAAQ,CAAA;IAC1C,IAAI,MAAM,KAAK,UAAU,IAAI,MAAM,KAAK,cAAc;QAAE,OAAO,SAAS,CAAA;IACxE,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,MAAM,EAAE;QACN,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM;QAC5E,MAAM,EAAE,mFAAmF;QAC3F,UAAU,EAAE,6BAA6B,EAAE,KAAK,EAAE,gCAAgC;QAClF,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM;KACpC;IACD,OAAO,EAAE;QACP,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,UAAU;QACvE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS;QACvC,MAAM,EAAE,+BAA+B;QACvC,UAAU,EAAE,qBAAqB,EAAE,KAAK,EAAE,OAAO;QACjD,SAAS,EAAE,qEAAqE;KACjF;IACD,KAAK,EAAE;QACL,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM;QAC5E,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,sCAAsC;QACjE,UAAU,EAAE,kEAAkE,EAAE,KAAK,EAAE,kCAAkC;KAC1H;IACD,KAAK,EAAE;QACL,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,QAAiB,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;KAC3E;IACD,KAAK,EAAE;QACL,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAoB;QAC9E,KAAK,EAAE,iCAAiC;KACzC;IACD,6EAA6E;IAC7E,4EAA4E;IAC5E,GAAG,EAAE;QACH,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAe,EAAE,GAAG,EAAE,MAAM;QACvD,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM;KAC1C;CACF,CAAA;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,aAAa,CAC3B,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAMzC;IAED,MAAM,UAAU,GAAG,KAAK,EAAE,CAAA;IAC1B,MAAM,OAAO,GAAG,KAAK,EAAE,CAAA;IACvB,MAAM,QAAQ,GAAG,KAAK,EAAE,CAAA;IACxB,MAAM,KAAK,GAAG,MAAM,CAAoB,IAAI,CAAC,CAAA;IAE7C,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAA;IAC5D,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAA;IAEnD,sEAAsE;IACtE,4EAA4E;IAC5E,0EAA0E;IAC1E,SAAS,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,CAAA,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAE/C,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAA;IACnE,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,IAAI,EAAE,CAAA;IAEnC,6EAA6E;IAC7E,wEAAwE;IACxE,uEAAuE;IACvE,MAAM,YAAY,GAAG,CAAC,IAAY,EAAQ,EAAE;QAC1C,WAAW,CAAC,IAAI,CAAC,CAAA;QACjB,QAAQ,CAAC,EAAE,CAAC,CAAA;IACd,CAAC,CAAA;IAED,MAAM,MAAM,GAAG,MAAM,KAAK,SAAS;QACjC,CAAC,CAAC,gDAAgD;QAClD,CAAC,CAAC,MAAM,CAAC,UAAU,KAAK,QAAQ;YAC9B,CAAC,CAAC,GAAG,MAAM,CAAC,WAAW,wEAAwE;YAC/F,CAAC,CAAC,MAAM,CAAC,YAAY,KAAK,IAAI;gBAC5B,CAAC,CAAC,GAAG,MAAM,CAAC,WAAW,+BAA+B;gBACtD,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;oBACnB,CAAC,CAAC,GAAG,MAAM,CAAC,WAAW,wBAAwB;oBAC/C,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,wBAAwB,MAAM,CAAC,WAAW,GAAG,CAAA;IAE/E,OAAO,CACL,eAAK,KAAK,EAAE,OAAO,CAAC,GAAG,aACrB,gBAAM,KAAK,EAAE,OAAO,CAAC,KAAK,aACxB,gBAAO,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,yBAAkB,EAClE,kBACE,EAAE,EAAE,UAAU,EACd,GAAG,EAAE,KAAK,EACV,KAAK,EAAE,OAAO,CAAC,MAAM,EACrB,KAAK,EAAE,QAAQ,EACf,QAAQ,EAAE,MAAM,sBACE,QAAQ,EAC1B,QAAQ,EAAE,KAAK,CAAC,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC,aAEvD,iBAAQ,KAAK,EAAC,EAAE,wCAA4B,EAC3C,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CACtB,iBAA6B,KAAK,EAAE,KAAK,CAAC,QAAQ,YAC/C,GAAG,KAAK,CAAC,WAAW,MAAM,uBAAuB,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,IAD3D,KAAK,CAAC,QAAQ,CAElB,CACV,CAAC,IACK,IACJ,EAEP,gBAAM,KAAK,EAAE,OAAO,CAAC,KAAK,aACxB,gBAAO,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,sBAAe,EAC5D,kBACE,EAAE,EAAE,OAAO,EACX,KAAK,EAAE,OAAO,CAAC,MAAM,EACrB,KAAK,EAAE,KAAK,EACZ,QAAQ,EAAE,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,sBACrB,QAAQ,EAC1B,QAAQ,EAAE,KAAK,CAAC,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC,aAEnD,iBAAQ,KAAK,EAAC,EAAE,qCAAyB,EACxC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CACnB,iBAAuB,KAAK,EAAE,KAAK,CAAC,EAAE,YAAG,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,IAArE,KAAK,CAAC,EAAE,CAAuE,CAC7F,CAAC,IACK,IACJ,EAEP,iBACE,IAAI,EAAC,QAAQ,EACb,KAAK,EAAE,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,KAAK,EAAE,IAAI,KAAK,KAAK,EAAE,IAAI,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAC3F,QAAQ,EAAE,QAAQ,KAAK,EAAE,IAAI,KAAK,KAAK,EAAE,IAAI,MAAM,EACnD,OAAO,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA,CAAC,CAAC,YAEzC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GACrD,EACT,iBAAQ,IAAI,EAAC,QAAQ,EAAC,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,uBAEtE,EAET,YACE,EAAE,EAAE,QAAQ,EACZ,KAAK,EAAE;oBACL,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG;oBACvE,KAAK,EAAE,iCAAiC;iBACzC,YAEA,MAAM,GACL,IACA,CACP,CAAA;AACH,CAAC;AAED,2EAA2E;AAC3E,SAAS,QAAQ,CACf,EAAE,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAStE;IAED,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,GAAG,CAAC,QAAQ,CAAC,CAAA;IACzE,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IAC7C,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IAEzC,OAAO,CACL,eAAK,KAAK,EAAE,CAAC,CAAC,IAAI,aAChB,eAAK,KAAK,EAAE,CAAC,CAAC,QAAQ,aACpB,aAAI,KAAK,EAAE,CAAC,CAAC,KAAK,YAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,GAAM,EAG/C,KAAC,UAAU,IAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,YACrC,oBAAoB,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,GAChC,IACT,EACN,YAAG,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,YAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,GAAK,EAExE,eAAK,KAAK,EAAE,CAAC,CAAC,IAAI,aAChB,eAAM,KAAK,EAAE,CAAC,CAAC,GAAG,yBAAiB,EACnC,eAAM,KAAK,EAAE,CAAC,CAAC,KAAK,YAAG,QAAQ,EAAE,WAAW,IAAI,GAAG,CAAC,QAAQ,IAAI,kBAAkB,GAAQ,EAC1F,eAAM,KAAK,EAAE,CAAC,CAAC,GAAG,sBAAc,EAChC,eAAM,KAAK,EAAE,CAAC,CAAC,KAAK,YAAG,GAAG,CAAC,KAAK,IAAI,kBAAkB,GAAQ,EAC9D,eAAM,KAAK,EAAE,CAAC,CAAC,GAAG,uBAAe,EACjC,eAAM,KAAK,EAAE,CAAC,CAAC,KAAK,YACjB,KAAK;4BACJ,CAAC,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW;4BACpC,CAAC,CAAC,OAAO,IAAI,iBAAiB,GAC3B,IACH,EAEL,UAAU,IAAI,OAAO,KAAK,GAAG,CAAC,IAAI;gBACjC,CAAC,CAAC,CACE,KAAC,aAAa,IACZ,GAAG,EAAE,GAAG,EACR,SAAS,EAAE,SAAS,EACpB,MAAM,EAAE,QAAQ,CAAC,MAAM,EACvB,MAAM,EAAE,CAAC,cAAc,EAAE,WAAW,EAAE,EAAE;wBACtC,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;oBACtE,CAAC,EACD,QAAQ,EAAE,OAAO,GACjB,CACH;gBACH,CAAC,CAAC,CACE,eAAK,KAAK,EAAE,OAAO,CAAC,GAAG,aACrB,iBACE,IAAI,EAAC,QAAQ,EACb,KAAK,EAAE,OAAO,CAAC,OAAO,EACtB,QAAQ,EAAE,CAAC,QAAQ,CAAC,QAAQ,sBACV,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,yBAAyB,EAC3E,OAAO,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA,CAAC,CAAC,YAElC,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,cAAc,GAChD,EACR,GAAG,CAAC,KAAK,KAAK,IAAI;4BACjB,CAAC,CAAC,IAAI;4BACN,CAAC,CAAC,CACE,iBACE,IAAI,EAAC,QAAQ,EACb,KAAK,EAAE,OAAO,CAAC,KAAK,EACpB,QAAQ,EAAE,CAAC,QAAQ,CAAC,WAAW,KAAK,IAAI,IAAI,QAAQ,CAAC,WAAW,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,MAAM,EACjG,OAAO,EAAE,GAAG,EAAE;oCACZ,IAAI,QAAQ,CAAC,WAAW,KAAK,GAAG,CAAC,IAAI;wCAAE,KAAK,CAAC,kBAAkB,EAAE,CAAA;;wCAC5D,KAAK,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;gCACpC,CAAC,YAEA,QAAQ,CAAC,WAAW,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,mBAAmB,GAC1E,CACV,EACJ,GAAG,CAAC,KAAK,KAAK,IAAI;4BACjB,CAAC,CAAC,IAAI;4BACN,CAAC,CAAC,CACE,iBACE,IAAI,EAAC,QAAQ,EACb,KAAK,EAAE,OAAO,CAAC,KAAK,EACpB,QAAQ,EAAE,CAAC,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,sBAC7B,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,yBAAyB,EAC3E,OAAO,EAAE,GAAG,EAAE,GAAG,KAAK,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA,CAAC,CAAC,YAE7C,YAAY,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAC5B,CACV,IACD,CACP,IACD,CACP,CAAA;AACH,CAAC;AAED,iFAAiF;AACjF,SAAS,YAAY,CAAC,EAAE,SAAS,EAAkD;IACjF,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAA;IAC3E,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,CACL,eAAK,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,aAC9C,eAAK,KAAK,EAAE,CAAC,CAAC,QAAQ,aACpB,aAAI,KAAK,EAAE,CAAC,CAAC,KAAK,8CAAoC,EACtD,KAAC,UAAU,IAAC,IAAI,EAAC,SAAS,8BAA2B,IACjD,EACN,YAAG,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,gLAItC,IACA,CACP,CAAA;IACH,CAAC;IACD,OAAO,CACL,8BAKE,eAAK,KAAK,EAAE,CAAC,CAAC,IAAI,aAChB,eAAK,KAAK,EAAE,CAAC,CAAC,QAAQ,aACpB,aAAI,KAAK,EAAE,CAAC,CAAC,KAAK,YAAG,GAAG,MAAM,CAAC,cAAc,CAAC,uBAAuB,GAAM,EAC3E,KAAC,UAAU,IAAC,IAAI,EAAC,SAAS,YACvB,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,aAAa,GAC/B,IACT,EACN,aAAG,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,aACvC,GAAG,MAAM,CAAC,YAAY,CAAC,eAAe,MAAM,CAAC,iBAAiB,CAAC,mCAAmC,EAClG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAC3B,sEAAsE,EACtE,gFAAgF,IAC/E,EACJ,eAAK,KAAK,EAAE,CAAC,CAAC,IAAI,aAChB,eAAM,KAAK,EAAE,CAAC,CAAC,GAAG,8BAAsB,EACxC,eAAM,KAAK,EAAE,CAAC,CAAC,KAAK,uJAGb,EACP,eAAM,KAAK,EAAE,CAAC,CAAC,GAAG,yBAAiB,EACnC,eAAM,KAAK,EAAE,CAAC,CAAC,KAAK,YACjB,oBAAoB;oCACnB,CAAC,CAAC,iFAAiF;oCACnF,CAAC,CAAC,mCAAmC,GAClC,IACH,IACF,EACL,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CACvB,eAA0B,KAAK,EAAE,CAAC,CAAC,IAAI,aACrC,eAAK,KAAK,EAAE,CAAC,CAAC,QAAQ,aACpB,aAAI,KAAK,EAAE,CAAC,CAAC,KAAK,YAAG,KAAK,CAAC,WAAW,GAAM,EAC5C,KAAC,UAAU,IAAC,IAAI,EAAE,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC,YAC/C,uBAAuB,CAAC,KAAK,CAAC,UAAU,CAAC,GAC/B,IACT,EACN,eAAK,KAAK,EAAE,CAAC,CAAC,IAAI,aAChB,eAAM,KAAK,EAAE,CAAC,CAAC,GAAG,sBAAc,EAChC,eAAM,KAAK,EAAE,CAAC,CAAC,KAAK,YAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,sBAAsB,GAAQ,EAC7F,eAAM,KAAK,EAAE,CAAC,CAAC,GAAG,+BAAuB,EACzC,eAAM,KAAK,EAAE,CAAC,CAAC,KAAK,YACjB,KAAK,CAAC,YAAY,KAAK,IAAI;oCAC1B,CAAC,CAAC,qCAAqC;oCACvC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;wCACzB,CAAC,CAAC,kBAAkB;wCACpB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,GAC5B,EACP,eAAM,KAAK,EAAE,CAAC,CAAC,GAAG,gCAAwB,EAC1C,eAAM,KAAK,EAAE,CAAC,CAAC,KAAK,iHAGb,IACH,KAvBE,KAAK,CAAC,QAAQ,CAwBlB,CACP,CAAC,IACD,CACJ,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,EAAE,KAAK,EAAqB;IACvD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;IAC5F,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAsB,IAAI,CAAC,CAAA;IAEjE,SAAS,CAAC,GAAG,EAAE,GAAG,KAAK,KAAK,CAAC,IAAI,EAAE,CAAA,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAA;IAE/C,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,IAAkB,EAAE,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAC5E,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAE3D,MAAM,IAAI,GAAG,OAAO,CAClB,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC,IAAI,IAAI,EACnE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;IAEnB,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAChC,OAAO,CACL,cAAK,KAAK,EAAE,CAAC,CAAC,IAAI,YAChB,eAAK,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,aAC9C,eAAK,KAAK,EAAE,CAAC,CAAC,QAAQ,aACpB,aAAI,KAAK,EAAE,CAAC,CAAC,KAAK,2CAAiC,EACnD,KAAC,UAAU,IAAC,IAAI,EAAC,SAAS,4BAAyB,IAC/C,EACN,YAAG,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,+GAGtC,EACJ,cAAK,KAAK,EAAE,OAAO,CAAC,GAAG,YACrB,iBAAQ,IAAI,EAAC,QAAQ,EAAC,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,KAAK,KAAK,CAAC,IAAI,EAAE,CAAA,CAAC,CAAC,0BAEzE,GACL,IACF,GACF,CACP,CAAA;IACH,CAAC;IAED,OAAO,CACL,eAAK,KAAK,EAAE,CAAC,CAAC,IAAI,aAChB,YAAG,KAAK,EAAE,CAAC,CAAC,IAAI,2PAKZ,EAMH,QAAQ,CAAC,QAAQ;gBAChB,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,CACE,eAAK,EAAE,EAAC,yBAAyB,EAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,aAC3E,eAAK,KAAK,EAAE,CAAC,CAAC,QAAQ,aACpB,aAAI,KAAK,EAAE,CAAC,CAAC,KAAK,uCAA6B,EAC/C,KAAC,UAAU,IAAC,IAAI,EAAC,SAAS,6BAA0B,IAChD,EACN,YAAG,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,uQAKtC,IACA,CACP,EAMJ,IAAI,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC;gBAC7C,CAAC,CAAC,CACE,eAAK,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,qBAAqB,EAAE,aAC3D,eAAK,KAAK,EAAE,CAAC,CAAC,QAAQ,aACpB,aAAI,KAAK,EAAE,CAAC,CAAC,KAAK,sCAA4B,EAC9C,KAAC,UAAU,IAAC,IAAI,EAAC,SAAS,YAAE,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAc,IACjF,EACN,aAAG,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,aACvC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,uCAAuC,EACzE,4DAA4D,IAC3D,EACJ,cAAK,KAAK,EAAE,OAAO,CAAC,GAAG,YACrB,iBACE,IAAI,EAAC,QAAQ,EACb,KAAK,EAAE,OAAO,CAAC,OAAO,EACtB,QAAQ,EAAE,CAAC,QAAQ,CAAC,QAAQ,sBACV,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,yBAAyB,EAC3E,OAAO,EAAE,GAAG,EAAE,GAAG,UAAU,CAAC,YAAY,CAAC,CAAA,CAAC,CAAC,wCAGpC,GACL,IACF,CACP;gBACH,CAAC,CAAC,IAAI,EAIR,YACE,IAAI,EAAC,QAAQ,eACH,QAAQ,EAClB,KAAK,EAAE;oBACL,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM;oBACpC,KAAK,EAAE,iCAAiC;oBACxC,SAAS,EAAE,KAAK;iBACjB,YAEA,QAAQ,CAAC,MAAM;oBACd,CAAC,CAAC,wBAAwB;oBAC1B,CAAC,CAAC,QAAQ,CAAC,WAAW,KAAK,IAAI;wBAC7B,CAAC,CAAC,WAAW,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,qCAAqC;wBAClF,CAAC,CAAC,QAAQ,CAAC,WAAW,KAAK,IAAI;4BAC7B,CAAC,CAAC,QAAQ,CAAC,WAAW;4BAC1B,CAAC,CAAC,QAAQ,CAAC,KAAK,KAAK,IAAI;gCACvB,CAAC,CAAC,QAAQ,CAAC,KAAK;gCAChB,CAAC,CAAC,EAAE,GACN,EAEJ,aAAI,KAAK,EAAE,CAAC,CAAC,EAAE,6BAAmB,EACjC,cAAc,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;gBAC3B,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;gBAC7D,OAAO,GAAG,KAAK,SAAS;oBACtB,CAAC,CAAC,IAAI;oBACN,CAAC,CAAC,CACE,KAAC,QAAQ,IAEP,GAAG,EAAE,GAAG,EACR,SAAS,EAAE,QAAQ,CAAC,SAAS,EAC7B,QAAQ,EAAE,QAAQ,EAClB,KAAK,EAAE,KAAK,EACZ,UAAU,EAAE,OAAO,KAAK,IAAI,EAC5B,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,OAAO,IARX,IAAI,CAST,CACH,CAAA;YACP,CAAC,CAAC,EAEF,aAAI,KAAK,EAAE,CAAC,CAAC,EAAE,0BAAgB,EAC/B,KAAC,YAAY,IAAC,SAAS,EAAE,QAAQ,CAAC,SAAS,GAAI,EAE/C,YAAG,KAAK,EAAE,CAAC,CAAC,IAAI,gMAIZ,IACA,CACP,CAAA;AACH,CAAC"}