@graphorin/cli 0.5.0 → 0.6.0

package/CHANGELOG.md

@@ -1,5 +1,44 @@
 # @graphorin/cli
 
+## 0.6.0
+
+### Patch Changes
+
+- [#135](https://github.com/o-stepper/graphorin/pull/135) [`4f850d9`](https://github.com/o-stepper/graphorin/commit/4f850d9bc0a05d6256c59c5117b010336fcb41d3) Thanks [@o-stepper](https://github.com/o-stepper)! - Store durability and data lifecycle (audit 2026-07-04 Wave B, cluster B7).
+
+  - store-02: new `graphorin storage backup <dest>` - online, consistent copy via the driver's page-level `backup()` API (safe under a live writer, preserves rowids so FTS5 mappings survive, encrypted stores produce an equally-encrypted copy). `deployment.md` stops recommending the non-existent `BACKUP TO` and explicitly warns against `VACUUM INTO`.
+  - store-03: episode vector KNN gains the MRET-9 over-fetch loop facts already had (shared `widenKnn` helper) - a minority user's episodic recall is no longer starved to zero by a dominant user's vectors.
+  - store-04: GDPR `purge()` scrubs the fact's text out of `memory_history` (both rows keyed to the id and value-matching rows - a SUPERSEDE row carries the new fact's text on the OLD id) inside the same transaction, keeping the event skeleton; new `SqliteMemoryStore.pruneHistory(olderThanMs)` retention API bounds the otherwise-unbounded table.
+  - store-05: `encryptDatabase` copies via the driver's online backup API instead of checkpoint-close-then-copyFileSync - a concurrent writer can no longer commit WAL frames that silently miss the encrypted copy.
+  - store-06: every write transaction now BEGINs IMMEDIATE, eliminating the SQLITE_BUSY_SNAPSHOT class on read-then-write transactions under server+CLI concurrency (busy_timeout waits instead).
+  - store-07: `upsertState` builds its UPDATE from the supplied patch keys only (insert-if-absent + patch, in one immediate transaction) and `releaseLock` is a single conditional UPDATE - a concurrently acquired consolidator lock can no longer be silently reverted.
+  - store-13: migration 025 adds partial indexes on `facts.supersedes` / `facts.superseded_by`, so `historyOf` chain walks stop scanning the user's facts per node; registry owner map backfilled for 024/025.
+  - store F13: `distanceMetric: 'dot'` is coerced to `'cosine'` at registration with a loud warning (the vec0 table never computed dot; the meta now matches reality).
+
+- [#138](https://github.com/o-stepper/graphorin/pull/138) [`6293a25`](https://github.com/o-stepper/graphorin/commit/6293a2531c5c9265294da22fb365a08f2bdf445a) Thanks [@o-stepper](https://github.com/o-stepper)! - Documentation-truth sweep (audit 2026-07-04 Wave E, cluster E10): stale npm package descriptions rewritten (cli "Phase 14a three commands", mcp "upcoming auth CLI", store-sqlite's nonexistent WorkerPool), the store-sqlite WorkerPool TSDoc and the cipher-pragma ordering comment corrected, the executor timeout-precedence JSDoc fixed to the real `inlineToolTimeoutMs > tier timeoutMs > default` order, the `rrf.<label>` explain signals documented, and the skills spec-snapshot wording no longer claims a CI cron refreshes it (the diff is a manual `--upstream` pass; the release gate only parses the bundled snapshot).
+
+- [#138](https://github.com/o-stepper/graphorin/pull/138) [`6293a25`](https://github.com/o-stepper/graphorin/commit/6293a2531c5c9265294da22fb365a08f2bdf445a) Thanks [@o-stepper](https://github.com/o-stepper)! - Fix `graphorin storage cleanup-backups` being a silent no-op on Windows (audit 2026-07-04 Wave E, cluster E6): the DB base name was derived via `dbPath.split('/')`, which on backslash-separated Windows paths returned the whole path so no directory entry ever matched. Now uses `node:path` `basename`/`join`. Also documents the supported-platforms matrix (the one genuine ARM gap: `sqlite-vec` ships no `windows-arm64` binary, so vector search is unavailable on Windows-on-ARM while FTS recall keeps working).
+
+- Updated dependencies [[`32f20c1`](https://github.com/o-stepper/graphorin/commit/32f20c110f184f8cef7eec85bf39f5f07c886cb6), [`32f20c1`](https://github.com/o-stepper/graphorin/commit/32f20c110f184f8cef7eec85bf39f5f07c886cb6), [`32f20c1`](https://github.com/o-stepper/graphorin/commit/32f20c110f184f8cef7eec85bf39f5f07c886cb6), [`32f20c1`](https://github.com/o-stepper/graphorin/commit/32f20c110f184f8cef7eec85bf39f5f07c886cb6), [`4f850d9`](https://github.com/o-stepper/graphorin/commit/4f850d9bc0a05d6256c59c5117b010336fcb41d3), [`4f850d9`](https://github.com/o-stepper/graphorin/commit/4f850d9bc0a05d6256c59c5117b010336fcb41d3), [`4f850d9`](https://github.com/o-stepper/graphorin/commit/4f850d9bc0a05d6256c59c5117b010336fcb41d3), [`4f850d9`](https://github.com/o-stepper/graphorin/commit/4f850d9bc0a05d6256c59c5117b010336fcb41d3), [`4f850d9`](https://github.com/o-stepper/graphorin/commit/4f850d9bc0a05d6256c59c5117b010336fcb41d3), [`4f850d9`](https://github.com/o-stepper/graphorin/commit/4f850d9bc0a05d6256c59c5117b010336fcb41d3), [`4f850d9`](https://github.com/o-stepper/graphorin/commit/4f850d9bc0a05d6256c59c5117b010336fcb41d3), [`17a2d30`](https://github.com/o-stepper/graphorin/commit/17a2d30564154ca2ab87473335cdef43a5089c84), [`17a2d30`](https://github.com/o-stepper/graphorin/commit/17a2d30564154ca2ab87473335cdef43a5089c84), [`17a2d30`](https://github.com/o-stepper/graphorin/commit/17a2d30564154ca2ab87473335cdef43a5089c84), [`17a2d30`](https://github.com/o-stepper/graphorin/commit/17a2d30564154ca2ab87473335cdef43a5089c84), [`17a2d30`](https://github.com/o-stepper/graphorin/commit/17a2d30564154ca2ab87473335cdef43a5089c84), [`17a2d30`](https://github.com/o-stepper/graphorin/commit/17a2d30564154ca2ab87473335cdef43a5089c84), [`ce06b47`](https://github.com/o-stepper/graphorin/commit/ce06b472af9e30ac5d0792f7a8b6f42170a94627), [`ce06b47`](https://github.com/o-stepper/graphorin/commit/ce06b472af9e30ac5d0792f7a8b6f42170a94627), [`ce06b47`](https://github.com/o-stepper/graphorin/commit/ce06b472af9e30ac5d0792f7a8b6f42170a94627), [`ce06b47`](https://github.com/o-stepper/graphorin/commit/ce06b472af9e30ac5d0792f7a8b6f42170a94627), [`ce06b47`](https://github.com/o-stepper/graphorin/commit/ce06b472af9e30ac5d0792f7a8b6f42170a94627), [`ce06b47`](https://github.com/o-stepper/graphorin/commit/ce06b472af9e30ac5d0792f7a8b6f42170a94627), [`6293a25`](https://github.com/o-stepper/graphorin/commit/6293a2531c5c9265294da22fb365a08f2bdf445a), [`6293a25`](https://github.com/o-stepper/graphorin/commit/6293a2531c5c9265294da22fb365a08f2bdf445a), [`6293a25`](https://github.com/o-stepper/graphorin/commit/6293a2531c5c9265294da22fb365a08f2bdf445a), [`6293a25`](https://github.com/o-stepper/graphorin/commit/6293a2531c5c9265294da22fb365a08f2bdf445a), [`6293a25`](https://github.com/o-stepper/graphorin/commit/6293a2531c5c9265294da22fb365a08f2bdf445a)]:
+  - @graphorin/memory@0.6.0
+  - @graphorin/store-sqlite@0.6.0
+  - @graphorin/core@0.6.0
+  - @graphorin/skills@0.6.0
+  - @graphorin/server@0.6.0
+  - @graphorin/pricing@0.6.0
+  - @graphorin/security@0.6.0
+  - @graphorin/eslint-plugin@0.6.0
+  - @graphorin/sessions@0.6.0
+
+## 0.5.0
+
+First version published to the npm registry (with Sigstore build
+provenance). The 0.2.0, 0.3.0, and 0.4.0 versions were internal lockstep
+milestones and were never published. All `@graphorin/*` packages release
+lockstep at the same version; the full release notes for 0.2.0-0.5.0 live
+in the repository-level
+[CHANGELOG](https://github.com/o-stepper/graphorin/blob/main/CHANGELOG.md).
+
 ## 0.1.0
 
 Initial release. See the workspace root `CHANGELOG.md` for the full

package/README.md

@@ -5,7 +5,7 @@
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](./LICENSE)
 [![Node.js: 22+](https://img.shields.io/badge/Node.js-22%2B-43853d.svg)](https://nodejs.org)
 
-- **Version:** v0.5.0
+- **Version:** v0.6.0
 - **License:** [MIT](./LICENSE) (© 2026 Oleksiy Stepurenko)
 - **Repository:** <https://github.com/o-stepper/graphorin/tree/main/packages/cli>
 - **Issues:** <https://github.com/o-stepper/graphorin/issues>
@@ -84,7 +84,7 @@ graphorin migrate --config ./graphorin.config.ts
 graphorin start --config ./graphorin.config.ts
 ```
 
-`GRAPHORIN_OFFLINE=1` is honoured by every subcommand — the CLI never makes implicit network calls (verified by the repository-wide `pnpm run check-no-network` CI check).
+`GRAPHORIN_OFFLINE=1` is honoured by every subcommand - the CLI never makes implicit network calls (verified by the repository-wide `pnpm run check-no-network` CI check).
 
 ## Programmatic usage
 
@@ -116,15 +116,15 @@ await runStart({ config: './graphorin.config.ts', port: 8090 });
 
 Phase 15 ships ready-to-copy templates for production deployments:
 
-- `examples/systemd/graphorin.service` — hardened systemd unit (refuse-as-root, `UMask=0077`, `ProtectSystem=strict`, `NoNewPrivileges=true`).
-- `examples/docker/Dockerfile` — multi-stage Node 22-slim image with a non-root user (UID 10001), read-only rootfs friendly, `--cap-drop=ALL` ready.
-- `examples/k8s/deployment.yaml` — Pod-Security-Standards "restricted" profile with `runAsNonRoot`, `seccompProfile: RuntimeDefault`, projected secret mounts.
-- `examples/github-actions/{security.yml,release.yml,renovate.json,audit-ignore.json}` — supply-chain workflows (`pnpm audit`, Sigstore provenance verification, Changesets-driven releases).
+- `examples/systemd/graphorin.service` - hardened systemd unit (refuse-as-root, `UMask=0077`, `ProtectSystem=strict`, `NoNewPrivileges=true`).
+- `examples/docker/Dockerfile` - multi-stage Node 22-slim image with a non-root user (UID 10001), read-only rootfs friendly, `--cap-drop=ALL` ready.
+- `examples/k8s/deployment.yaml` - Pod-Security-Standards "restricted" profile with `runAsNonRoot`, `seccompProfile: RuntimeDefault`, projected secret mounts.
+- `examples/github-actions/{security.yml,release.yml,renovate.json,audit-ignore.json}` - supply-chain workflows (`pnpm audit`, Sigstore provenance verification, Changesets-driven releases).
 
 ## Status
 
-`@graphorin/cli` is part of the Graphorin framework's `v0.5.0` pre-release. Once published, the package follows the lockstep release cadence shared by every `@graphorin/*` package on the `0.x` line.
+`@graphorin/cli` is part of the Graphorin framework's `v0.6.0` pre-release. Once published, the package follows the lockstep release cadence shared by every `@graphorin/*` package on the `0.x` line.
 
 ---
 
-**Project Graphorin** · v0.5.0 · MIT License · © 2026 Oleksiy Stepurenko · <https://github.com/o-stepper/graphorin>
+**Project Graphorin** · v0.6.0 · MIT License · © 2026 Oleksiy Stepurenko · <https://github.com/o-stepper/graphorin>

package/dist/bin/graphorin.js

@@ -14,7 +14,7 @@ import { runMigrateExport } from "../commands/migrate-export.js";
 import { runPricingDiff, runPricingLookup, runPricingMissing, runPricingRefresh, runPricingStatus } from "../commands/pricing.js";
 import { runSecretsDelete, runSecretsGet, runSecretsList, runSecretsRef, runSecretsRotate, runSecretsSet } from "../commands/secrets.js";
 import { runSkillsAudit, runSkillsInspect, runSkillsInstall, runSkillsMigrateFrontmatter } from "../commands/skills.js";
-import { runStorageCleanupBackups, runStorageEncrypt, runStorageRekey, runStorageStatus } from "../commands/storage.js";
+import { runStorageBackup, runStorageCleanupBackups, runStorageEncrypt, runStorageRekey, runStorageStatus } from "../commands/storage.js";
 import { runTelemetryDisable, runTelemetryEnable, runTelemetryInspect, runTelemetryStatus } from "../commands/telemetry.js";
 import { runTokenCreate, runTokenList, runTokenRekey, runTokenRevoke, runTokenRotate, runTokenVerify } from "../commands/token.js";
 import { runToolsLint } from "../commands/tools-lint.js";
@@ -47,7 +47,7 @@ import { Command } from "commander";
 * `migrate-export`, `migrate-config`, `guard`, `telemetry`,
 * `tools lint`).
 *
-* `GRAPHORIN_OFFLINE=1` is honoured by every subcommand — the v0.1
+* `GRAPHORIN_OFFLINE=1` is honoured by every subcommand - the v0.1
 * surface never makes implicit network calls. Phase 15 commands that
 * do touch the network (e.g. `graphorin pricing refresh`) consult
 * the same flag through the helper in `../internal/offline.ts`.
@@ -67,7 +67,7 @@ async function main() {
 		"  Storage:      storage, audit, memory, consolidator, triggers, migrate-export",
 		"  Catalogue:    pricing, skills, tools",
 		"",
-		"Honours GRAPHORIN_OFFLINE=1 — the v0.1 surface never makes implicit network calls."
+		"Honours GRAPHORIN_OFFLINE=1 - the v0.1 surface never makes implicit network calls."
 	].join("\n")).version(VERSION);
 	registerLifecycleCommands(program);
 	registerDoctorCommand(program);
@@ -91,7 +91,7 @@ async function main() {
 }
 function registerLifecycleCommands(program) {
 	program.command("start").description("[Runtime] Start the @graphorin/server daemon.").option("-c, --config <path>", "Path to the graphorin.config file (TS / JS / JSON).").option("-h, --host <host>", "Override the configured listen host.").option("-p, --port <port>", "Override the configured listen port.", (value) => Number.parseInt(value, 10)).option("--secrets-source <kind>", "Override secrets.source: auto | keyring | encrypted-file | env (DEC-136).").option("--strict-secrets", "Refuse to fall back to a different secrets store (DEC-136).").action(async (opts) => {
-		if (isOfflineMode()) process.stderr.write("[graphorin/cli] GRAPHORIN_OFFLINE=1 — running with no implicit network calls.\n");
+		if (isOfflineMode()) process.stderr.write("[graphorin/cli] GRAPHORIN_OFFLINE=1 - running with no implicit network calls.\n");
 		await runStart({
 			...opts.config !== void 0 ? { config: opts.config } : {},
 			...opts.host !== void 0 ? { host: opts.host } : {},
@@ -101,7 +101,7 @@ function registerLifecycleCommands(program) {
 		});
 	});
 	program.command("init").description("[Bootstrap] Generate a fresh graphorin.config.ts and a one-shot bootstrap admin token.").option("-o, --out <path>", "Output path; defaults to ./graphorin.config.ts.").option("--non-interactive", "Accept defaults / env vars without prompting.", false).option("--cloud-consent <tier>", "Cloud-upload consent tier: public-only | public-and-internal | all-with-warnings.").option("--encrypted", "Enable storage encryption opt-in.").option("--no-encrypted", "Disable storage encryption opt-in.").action(async (opts) => {
-		if (isOfflineMode()) process.stderr.write("[graphorin/cli] GRAPHORIN_OFFLINE=1 — init never reaches the network.\n");
+		if (isOfflineMode()) process.stderr.write("[graphorin/cli] GRAPHORIN_OFFLINE=1 - init never reaches the network.\n");
 		await runInit({
 			...opts.out !== void 0 ? { out: opts.out } : {},
 			...opts.nonInteractive !== void 0 ? { nonInteractive: opts.nonInteractive } : {},
@@ -110,7 +110,7 @@ function registerLifecycleCommands(program) {
 		});
 	});
 	program.command("migrate").description("[Maintenance] Apply pending storage migrations against the configured SQLite store.").option("-c, --config <path>", "Path to the graphorin.config file.").option("--target <version>", "Reserved for the Phase 15 partial-migration runner.").action(async (opts) => {
-		if (isOfflineMode()) process.stderr.write("[graphorin/cli] GRAPHORIN_OFFLINE=1 — migrate is a local-only operation.\n");
+		if (isOfflineMode()) process.stderr.write("[graphorin/cli] GRAPHORIN_OFFLINE=1 - migrate is a local-only operation.\n");
 		await runMigrate({
 			...opts.config !== void 0 ? { config: opts.config } : {},
 			...opts.target !== void 0 ? { target: opts.target } : {}
@@ -171,7 +171,7 @@ function registerTokenCommands(program) {
 			...opts.json !== void 0 ? { json: opts.json } : {}
 		});
 	});
-	token.command("verify <token>").description("Offline checksum verification — never consults the store.").option("--prefix <prefix>", "Override the expected token prefix.").option("--json", "Emit a structured JSON document on stdout.").action((tok, opts) => {
+	token.command("verify <token>").description("Offline checksum verification - never consults the store.").option("--prefix <prefix>", "Override the expected token prefix.").option("--json", "Emit a structured JSON document on stdout.").action((tok, opts) => {
 		runTokenVerify({
 			token: tok,
 			...opts.prefix !== void 0 ? { prefix: opts.prefix } : {},
@@ -259,6 +259,14 @@ function registerStorageCommands(program) {
 			...opts.json !== void 0 ? { json: opts.json } : {}
 		});
 	});
+	storage.command("backup").description("Online, consistent copy of the store via the page-level backup API (safe under a live writer; never use VACUUM INTO).").argument("<dest>", "Destination file path for the backup copy.").option("-c, --config <path>", "Path to the graphorin.config file.").option("--overwrite", "Replace an existing destination file.").option("--json", "Emit a structured JSON document on stdout.").action(async (dest, opts) => {
+		await runStorageBackup({
+			dest,
+			...opts.config !== void 0 ? { config: opts.config } : {},
+			...opts.overwrite === true ? { overwrite: true } : {},
+			...opts.json !== void 0 ? { json: opts.json } : {}
+		});
+	});
 	storage.command("cleanup-backups").description("Drop stale .bak / .tmp.<ts> files left by previous encrypt / rekey runs.").option("-c, --config <path>", "Path to the graphorin.config file.").option("--dry-run", "Print what would be removed without touching the filesystem.").option("--json", "Emit a structured JSON document on stdout.").action(async (opts) => {
 		await runStorageCleanupBackups({
 			...opts.config !== void 0 ? { config: opts.config } : {},

package/dist/bin/graphorin.js.map

@@ -1 +1 @@
-{"version":3,"file":"graphorin.js","names":[],"sources":["../../src/bin/graphorin.ts"],"sourcesContent":["/**\n * `graphorin` CLI entry point. Built into `dist/bin/graphorin.js`\n * with a shebang prepended by `tsdown`; the `package.json` `bin`\n * field points npm at the compiled file.\n *\n * Phase 14a installs three subcommands grouped by lifecycle phase:\n *\n *   Bootstrap:\n *     - graphorin init\n *\n *   Maintenance:\n *     - graphorin migrate\n *\n *   Runtime:\n *     - graphorin start\n *\n * Phase 15 extends this binary with the full operator surface\n * (`doctor`, `token`, `secrets`, `audit`, `storage`, `memory`,\n * `consolidator`, `triggers`, `auth`, `pricing`, `skills`, `traces`,\n * `migrate-export`, `migrate-config`, `guard`, `telemetry`,\n * `tools lint`).\n *\n * `GRAPHORIN_OFFLINE=1` is honoured by every subcommand — the v0.1\n * surface never makes implicit network calls. Phase 15 commands that\n * do touch the network (e.g. `graphorin pricing refresh`) consult\n * the same flag through the helper in `../internal/offline.ts`.\n *\n * @packageDocumentation\n */\n\nimport process from 'node:process';\n\nimport { Command } from 'commander';\n\nimport {\n  runAuditExport,\n  runAuditPrune,\n  runAuditVerify,\n  runAuthList,\n  runAuthLogin,\n  runAuthRefresh,\n  runAuthRevoke,\n  runAuthStatus,\n  runConsolidatorSetTier,\n  runConsolidatorStatus,\n  runConsolidatorStop,\n  runDoctor,\n  runGuardExplain,\n  runGuardStatus,\n  runInit,\n  runMemoryActivity,\n  runMemoryInspect,\n  runMemoryMigrate,\n  runMemoryReview,\n  runMemoryStatus,\n  runMemoryWhy,\n  runMigrate,\n  runMigrateConfig,\n  runMigrateExport,\n  runPricingDiff,\n  runPricingLookup,\n  runPricingMissing,\n  runPricingRefresh,\n  runPricingStatus,\n  runSecretsDelete,\n  runSecretsGet,\n  runSecretsList,\n  runSecretsRef,\n  runSecretsRotate,\n  runSecretsSet,\n  runSkillsAudit,\n  runSkillsInspect,\n  runSkillsInstall,\n  runSkillsMigrateFrontmatter,\n  runStart,\n  runStorageCleanupBackups,\n  runStorageEncrypt,\n  runStorageRekey,\n  runStorageStatus,\n  runTelemetryDisable,\n  runTelemetryEnable,\n  runTelemetryInspect,\n  runTelemetryStatus,\n  runTokenCreate,\n  runTokenList,\n  runTokenRekey,\n  runTokenRevoke,\n  runTokenRotate,\n  runTokenVerify,\n  runToolsLint,\n  runTracesPrune,\n  runTracesStatus,\n  runTriggersDisable,\n  runTriggersFire,\n  runTriggersList,\n  runTriggersPrune,\n  runTriggersStatus,\n  VERSION,\n} from '../index.js';\nimport { isOfflineMode } from '../internal/offline.js';\n\nasync function main(): Promise<void> {\n  const program = new Command();\n  program\n    .name('graphorin')\n    .description(\n      [\n        'Operator CLI for the Graphorin framework.',\n        '',\n        'Commands grouped by purpose:',\n        '  Bootstrap:    init, migrate, migrate-config',\n        '  Runtime:      start',\n        '  Diagnostics:  doctor, telemetry, traces, guard',\n        '  Auth:         token, secrets, auth',\n        '  Storage:      storage, audit, memory, consolidator, triggers, migrate-export',\n        '  Catalogue:    pricing, skills, tools',\n        '',\n        'Honours GRAPHORIN_OFFLINE=1 — the v0.1 surface never makes implicit network calls.',\n      ].join('\\n'),\n    )\n    .version(VERSION);\n\n  registerLifecycleCommands(program);\n  registerDoctorCommand(program);\n  registerTokenCommands(program);\n  registerSecretsCommands(program);\n  registerStorageCommands(program);\n  registerAuditCommands(program);\n  registerMemoryCommands(program);\n  registerConsolidatorCommands(program);\n  registerTriggersCommands(program);\n  registerAuthCommands(program);\n  registerPricingCommands(program);\n  registerSkillsCommands(program);\n  registerTracesCommands(program);\n  registerMigrateExportCommand(program);\n  registerMigrateConfigCommand(program);\n  registerGuardCommands(program);\n  registerTelemetryCommands(program);\n  registerToolsCommands(program);\n\n  await program.parseAsync(process.argv);\n}\n\nfunction registerLifecycleCommands(program: Command): void {\n  program\n    .command('start')\n    .description('[Runtime] Start the @graphorin/server daemon.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file (TS / JS / JSON).')\n    .option('-h, --host <host>', 'Override the configured listen host.')\n    .option('-p, --port <port>', 'Override the configured listen port.', (value) =>\n      Number.parseInt(value, 10),\n    )\n    .option(\n      '--secrets-source <kind>',\n      'Override secrets.source: auto | keyring | encrypted-file | env (DEC-136).',\n    )\n    .option('--strict-secrets', 'Refuse to fall back to a different secrets store (DEC-136).')\n    .action(\n      async (opts: {\n        config?: string;\n        host?: string;\n        port?: number;\n        secretsSource?: 'auto' | 'keyring' | 'encrypted-file' | 'env';\n        strictSecrets?: boolean;\n      }) => {\n        if (isOfflineMode()) {\n          process.stderr.write(\n            '[graphorin/cli] GRAPHORIN_OFFLINE=1 — running with no implicit network calls.\\n',\n          );\n        }\n        await runStart({\n          ...(opts.config !== undefined ? { config: opts.config } : {}),\n          ...(opts.host !== undefined ? { host: opts.host } : {}),\n          ...(opts.port !== undefined ? { port: opts.port } : {}),\n          ...(opts.secretsSource !== undefined ? { secretsSource: opts.secretsSource } : {}),\n          ...(opts.strictSecrets !== undefined ? { strictSecrets: opts.strictSecrets } : {}),\n        });\n      },\n    );\n\n  program\n    .command('init')\n    .description(\n      '[Bootstrap] Generate a fresh graphorin.config.ts and a one-shot bootstrap admin token.',\n    )\n    .option('-o, --out <path>', 'Output path; defaults to ./graphorin.config.ts.')\n    .option('--non-interactive', 'Accept defaults / env vars without prompting.', false)\n    .option(\n      '--cloud-consent <tier>',\n      'Cloud-upload consent tier: public-only | public-and-internal | all-with-warnings.',\n    )\n    .option('--encrypted', 'Enable storage encryption opt-in.')\n    .option('--no-encrypted', 'Disable storage encryption opt-in.')\n    .action(\n      async (opts: {\n        out?: string;\n        nonInteractive?: boolean;\n        cloudConsent?: 'public-only' | 'public-and-internal' | 'all-with-warnings';\n        encrypted?: boolean;\n      }) => {\n        if (isOfflineMode()) {\n          process.stderr.write(\n            '[graphorin/cli] GRAPHORIN_OFFLINE=1 — init never reaches the network.\\n',\n          );\n        }\n        await runInit({\n          ...(opts.out !== undefined ? { out: opts.out } : {}),\n          ...(opts.nonInteractive !== undefined ? { nonInteractive: opts.nonInteractive } : {}),\n          ...(opts.cloudConsent !== undefined ? { cloudConsent: opts.cloudConsent } : {}),\n          ...(opts.encrypted !== undefined ? { encrypted: opts.encrypted } : {}),\n        });\n      },\n    );\n\n  program\n    .command('migrate')\n    .description(\n      '[Maintenance] Apply pending storage migrations against the configured SQLite store.',\n    )\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--target <version>', 'Reserved for the Phase 15 partial-migration runner.')\n    .action(async (opts: { config?: string; target?: string }) => {\n      if (isOfflineMode()) {\n        process.stderr.write(\n          '[graphorin/cli] GRAPHORIN_OFFLINE=1 — migrate is a local-only operation.\\n',\n        );\n      }\n      await runMigrate({\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.target !== undefined ? { target: opts.target } : {}),\n      });\n    });\n}\n\nfunction registerDoctorCommand(program: Command): void {\n  program\n    .command('doctor')\n    .description('[Diagnostics] Health check (perms + secrets + encryption + systemd).')\n    .option('--fix-perms', 'Repair drifted POSIX file modes.')\n    .option('--check-perms', 'Run the file-perms check.')\n    .option('--check-secrets', 'Run the secrets-store check.')\n    .option('--check-encryption', 'Run the audit-encryption check.')\n    .option('--check-systemd', 'Run the systemd-hardening check (Linux only).')\n    .option('--all', 'Run every check.')\n    .option('--json', 'Emit a structured JSON report on stdout.')\n    .action(\n      async (opts: {\n        fixPerms?: boolean;\n        checkPerms?: boolean;\n        checkSecrets?: boolean;\n        checkEncryption?: boolean;\n        checkSystemd?: boolean;\n        all?: boolean;\n        json?: boolean;\n      }) => {\n        await runDoctor({\n          ...(opts.fixPerms !== undefined ? { fixPerms: opts.fixPerms } : {}),\n          ...(opts.checkPerms !== undefined ? { checkPerms: opts.checkPerms } : {}),\n          ...(opts.checkSecrets !== undefined ? { checkSecrets: opts.checkSecrets } : {}),\n          ...(opts.checkEncryption !== undefined ? { checkEncryption: opts.checkEncryption } : {}),\n          ...(opts.checkSystemd !== undefined ? { checkSystemd: opts.checkSystemd } : {}),\n          ...(opts.all !== undefined ? { all: opts.all } : {}),\n          ...(opts.json !== undefined ? { json: opts.json } : {}),\n        });\n      },\n    );\n}\n\nfunction registerTokenCommands(program: Command): void {\n  const token = program.command('token').description('[Auth] Manage server auth tokens.');\n  token\n    .command('create')\n    .description('Mint a new token. Prints the raw value once.')\n    .requiredOption('--scopes <list>', 'Comma-separated scope list.')\n    .option('--label <name>', 'Optional label.')\n    .option('--expires-in <duration>', 'Duration string: 30d, 12h, 90m, 45s.')\n    .option('--env <env>', 'Token environment: live | test.', 'live')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(\n      async (opts: {\n        scopes: string;\n        label?: string;\n        expiresIn?: string;\n        env?: 'live' | 'test';\n        config?: string;\n        json?: boolean;\n      }) => {\n        await runTokenCreate({\n          scopes: opts.scopes\n            .split(',')\n            .map((s) => s.trim())\n            .filter(Boolean),\n          ...(opts.label !== undefined ? { label: opts.label } : {}),\n          ...(opts.expiresIn !== undefined ? { expiresIn: opts.expiresIn } : {}),\n          ...(opts.env !== undefined ? { env: opts.env } : {}),\n          ...(opts.config !== undefined ? { config: opts.config } : {}),\n          ...(opts.json !== undefined ? { json: opts.json } : {}),\n        });\n      },\n    );\n  token\n    .command('list')\n    .description('List token metadata.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--include-revoked', 'Include revoked tokens.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (opts: { config?: string; includeRevoked?: boolean; json?: boolean }) => {\n      await runTokenList({\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.includeRevoked !== undefined ? { includeRevoked: opts.includeRevoked } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  token\n    .command('revoke <id>')\n    .description('Revoke a single token.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (id: string, opts: { config?: string; json?: boolean }) => {\n      await runTokenRevoke({\n        id,\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  token\n    .command('rotate <id>')\n    .description('Revoke + reissue a token with the same scopes.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--env <env>', 'Token environment: live | test.', 'live')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(\n      async (id: string, opts: { config?: string; env?: 'live' | 'test'; json?: boolean }) => {\n        await runTokenRotate({\n          id,\n          ...(opts.config !== undefined ? { config: opts.config } : {}),\n          ...(opts.env !== undefined ? { env: opts.env } : {}),\n          ...(opts.json !== undefined ? { json: opts.json } : {}),\n        });\n      },\n    );\n  token\n    .command('rekey')\n    .description('Re-issue every active token (use after a known compromise).')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--env <env>', 'Token environment: live | test.', 'live')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (opts: { config?: string; env?: 'live' | 'test'; json?: boolean }) => {\n      await runTokenRekey({\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.env !== undefined ? { env: opts.env } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  token\n    .command('verify <token>')\n    .description('Offline checksum verification — never consults the store.')\n    .option('--prefix <prefix>', 'Override the expected token prefix.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action((tok: string, opts: { prefix?: string; json?: boolean }) => {\n      runTokenVerify({\n        token: tok,\n        ...(opts.prefix !== undefined ? { prefix: opts.prefix } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n}\n\nfunction registerSecretsCommands(program: Command): void {\n  const secrets = program\n    .command('secrets')\n    .description('[Auth] Manage secrets in the configured store.');\n  const commonOpts = (cmd: Command): Command =>\n    cmd\n      .option('--secrets-source <kind>', 'auto | keyring | encrypted-file | env (DEC-136).')\n      .option('--strict-secrets', 'Refuse to fall back to a different secrets store.')\n      .option('--json', 'Emit a structured JSON document on stdout.');\n  commonOpts(secrets.command('list').description('List secret metadata.')).action(\n    async (opts: {\n      secretsSource?: 'auto' | 'keyring' | 'encrypted-file' | 'env';\n      strictSecrets?: boolean;\n      json?: boolean;\n    }) => {\n      await runSecretsList({\n        ...(opts.secretsSource !== undefined ? { secretsSource: opts.secretsSource } : {}),\n        ...(opts.strictSecrets !== undefined ? { strictSecrets: opts.strictSecrets } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    },\n  );\n  commonOpts(\n    secrets\n      .command('get <key>')\n      .description('Read a secret. Use --reveal to print the bytes.')\n      .option('--reveal', 'Print the raw value.'),\n  ).action(\n    async (\n      key: string,\n      opts: {\n        secretsSource?: 'auto' | 'keyring' | 'encrypted-file' | 'env';\n        strictSecrets?: boolean;\n        json?: boolean;\n        reveal?: boolean;\n      },\n    ) => {\n      await runSecretsGet({\n        key,\n        ...(opts.secretsSource !== undefined ? { secretsSource: opts.secretsSource } : {}),\n        ...(opts.strictSecrets !== undefined ? { strictSecrets: opts.strictSecrets } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n        ...(opts.reveal !== undefined ? { reveal: opts.reveal } : {}),\n      });\n    },\n  );\n  commonOpts(\n    secrets\n      .command('set <key>')\n      .description('Persist a secret. Pass --value <v> or --from-stdin.')\n      .option('--value <v>', 'Inline value.')\n      .option('--from-stdin', 'Read the value from stdin.'),\n  ).action(\n    async (\n      key: string,\n      opts: {\n        value?: string;\n        fromStdin?: boolean;\n        secretsSource?: 'auto' | 'keyring' | 'encrypted-file' | 'env';\n        strictSecrets?: boolean;\n        json?: boolean;\n      },\n    ) => {\n      await runSecretsSet({\n        key,\n        ...(opts.value !== undefined ? { value: opts.value } : {}),\n        ...(opts.fromStdin !== undefined ? { fromStdin: opts.fromStdin } : {}),\n        ...(opts.secretsSource !== undefined ? { secretsSource: opts.secretsSource } : {}),\n        ...(opts.strictSecrets !== undefined ? { strictSecrets: opts.strictSecrets } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    },\n  );\n  commonOpts(secrets.command('delete <key>').description('Delete a secret.')).action(\n    async (\n      key: string,\n      opts: {\n        secretsSource?: 'auto' | 'keyring' | 'encrypted-file' | 'env';\n        strictSecrets?: boolean;\n        json?: boolean;\n      },\n    ) => {\n      await runSecretsDelete({\n        key,\n        ...(opts.secretsSource !== undefined ? { secretsSource: opts.secretsSource } : {}),\n        ...(opts.strictSecrets !== undefined ? { strictSecrets: opts.strictSecrets } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    },\n  );\n  commonOpts(\n    secrets\n      .command('ref <uri>')\n      .description('Test resolution of a SecretRef URI.')\n      .option('--reveal', 'Include the resolved value in the report.'),\n  ).action(async (uri: string, opts: { reveal?: boolean; json?: boolean }) => {\n    await runSecretsRef({\n      uri,\n      ...(opts.reveal !== undefined ? { reveal: opts.reveal } : {}),\n      ...(opts.json !== undefined ? { json: opts.json } : {}),\n    });\n  });\n  commonOpts(\n    secrets\n      .command('rotate <key>')\n      .description('Replace an existing secret with a fresh value.')\n      .option('--new-value <v>', 'Inline new value.')\n      .option('--from-stdin', 'Read the new value from stdin.'),\n  ).action(\n    async (\n      key: string,\n      opts: {\n        newValue?: string;\n        fromStdin?: boolean;\n        secretsSource?: 'auto' | 'keyring' | 'encrypted-file' | 'env';\n        strictSecrets?: boolean;\n        json?: boolean;\n      },\n    ) => {\n      await runSecretsRotate({\n        key,\n        ...(opts.newValue !== undefined ? { newValue: opts.newValue } : {}),\n        ...(opts.fromStdin !== undefined ? { fromStdin: opts.fromStdin } : {}),\n        ...(opts.secretsSource !== undefined ? { secretsSource: opts.secretsSource } : {}),\n        ...(opts.strictSecrets !== undefined ? { strictSecrets: opts.strictSecrets } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    },\n  );\n}\n\nfunction registerStorageCommands(program: Command): void {\n  const storage = program\n    .command('storage')\n    .description('[Storage] SQLite + encryption-at-rest commands.');\n  storage\n    .command('status')\n    .description('Report current store state + cipher peer availability.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (opts: { config?: string; json?: boolean }) => {\n      await runStorageStatus({\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  storage\n    .command('encrypt')\n    .description(\n      'Encrypt the store. Requires the @graphorin/store-sqlite-encrypted sub-pack (Phase 16).',\n    )\n    .requiredOption('--passphrase-from <ref>', 'SecretRef URI for the new passphrase.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option(\n      '--target-path <path>',\n      'Override the encrypted output path. Default <storage>.encrypted.',\n    )\n    .option(\n      '--swap',\n      'Atomically swap the encrypted output into the storage path; original kept under .bak.<ts>.',\n    )\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(\n      async (opts: {\n        passphraseFrom: string;\n        config?: string;\n        targetPath?: string;\n        swap?: boolean;\n        json?: boolean;\n      }) => {\n        await runStorageEncrypt({\n          passphraseFrom: opts.passphraseFrom,\n          ...(opts.config !== undefined ? { config: opts.config } : {}),\n          ...(opts.targetPath !== undefined ? { targetPath: opts.targetPath } : {}),\n          ...(opts.swap === true ? { swap: true } : {}),\n          ...(opts.json !== undefined ? { json: opts.json } : {}),\n        });\n      },\n    );\n  storage\n    .command('rekey')\n    .description('Rekey an already-encrypted store.')\n    .requiredOption('--old-passphrase-from <ref>', 'SecretRef URI for the existing passphrase.')\n    .requiredOption('--new-passphrase-from <ref>', 'SecretRef URI for the new passphrase.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(\n      async (opts: {\n        oldPassphraseFrom: string;\n        newPassphraseFrom: string;\n        config?: string;\n        json?: boolean;\n      }) => {\n        await runStorageRekey({\n          oldPassphraseFrom: opts.oldPassphraseFrom,\n          newPassphraseFrom: opts.newPassphraseFrom,\n          ...(opts.config !== undefined ? { config: opts.config } : {}),\n          ...(opts.json !== undefined ? { json: opts.json } : {}),\n        });\n      },\n    );\n  storage\n    .command('cleanup-backups')\n    .description('Drop stale .bak / .tmp.<ts> files left by previous encrypt / rekey runs.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--dry-run', 'Print what would be removed without touching the filesystem.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (opts: { config?: string; dryRun?: boolean; json?: boolean }) => {\n      await runStorageCleanupBackups({\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.dryRun !== undefined ? { dryRun: opts.dryRun } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n}\n\nfunction registerAuditCommands(program: Command): void {\n  const audit = program\n    .command('audit')\n    .description('[Storage] Operate on the encrypted audit log.');\n  audit\n    .command('verify')\n    .description('Replay the chain and report the first broken link (if any).')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (opts: { config?: string; json?: boolean }) => {\n      await runAuditVerify({\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  audit\n    .command('prune')\n    .description('Drop entries older than --before (cutoff is required).')\n    .requiredOption('--before <date>', 'ISO date / epoch ms cutoff.')\n    .option('--retain <n>', 'Minimum number of entries that must survive.', (v) =>\n      Number.parseInt(v, 10),\n    )\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (opts: { before: string; retain?: number; config?: string; json?: boolean }) => {\n      await runAuditPrune({\n        before: opts.before,\n        ...(opts.retain !== undefined ? { retain: opts.retain } : {}),\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  audit\n    .command('export')\n    .description('Stream every audit entry as JSONL into --to.')\n    .requiredOption('--to <file>', 'Output path.')\n    .option('--from-seq <n>', 'Lower bound (inclusive).', (v) => Number.parseInt(v, 10))\n    .option('--to-seq <n>', 'Upper bound (inclusive).', (v) => Number.parseInt(v, 10))\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(\n      async (opts: {\n        to: string;\n        fromSeq?: number;\n        toSeq?: number;\n        config?: string;\n        json?: boolean;\n      }) => {\n        await runAuditExport({\n          to: opts.to,\n          ...(opts.fromSeq !== undefined ? { fromSeq: opts.fromSeq } : {}),\n          ...(opts.toSeq !== undefined ? { toSeq: opts.toSeq } : {}),\n          ...(opts.config !== undefined ? { config: opts.config } : {}),\n          ...(opts.json !== undefined ? { json: opts.json } : {}),\n        });\n      },\n    );\n}\n\nfunction registerMemoryCommands(program: Command): void {\n  const memory = program\n    .command('memory')\n    .description('[Storage] Long-term memory operator commands.');\n  memory\n    .command('status')\n    .description('Report counts + active embedder + migration state.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (opts: { config?: string; json?: boolean }) => {\n      await runMemoryStatus({\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  memory\n    .command('migrate')\n    .description('Embedder swap. Requires --embedders module that exports the factories.')\n    .requiredOption('--from <id>', 'Source embedder id.')\n    .requiredOption('--to <id>', 'Target embedder id.')\n    .requiredOption('--strategy <s>', 'lock-on-first | auto-migrate | multi-active.')\n    .option('--embedders <path>', 'Path to a module exporting embedder factories.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .action(\n      async (opts: {\n        from: string;\n        to: string;\n        strategy: string;\n        embedders?: string;\n        config?: string;\n      }) => {\n        await runMemoryMigrate({\n          from: opts.from,\n          to: opts.to,\n          strategy: opts.strategy as 'lock-on-first' | 'auto-migrate' | 'multi-active',\n          ...(opts.embedders !== undefined ? { embeddersModule: opts.embedders } : {}),\n          ...(opts.config !== undefined ? { config: opts.config } : {}),\n        });\n      },\n    );\n  memory\n    .command('inspect')\n    .description('Inspect one fact: supersede chain, quarantine, conflicts, citing insights.')\n    .argument('<factId>', 'Id of the fact to inspect.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (factId: string, opts: { config?: string; json?: boolean }) => {\n      await runMemoryInspect({\n        factId,\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  memory\n    .command('activity')\n    .description('Store-wide consolidator / reflection activity: quarantine, history, conflicts.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--limit <n>', 'Cap on recent history / conflict rows (default 20).')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (opts: { config?: string; limit?: string; json?: boolean }) => {\n      const limit = opts.limit !== undefined ? Number.parseInt(opts.limit, 10) : undefined;\n      await runMemoryActivity({\n        ...(limit !== undefined && Number.isFinite(limit) ? { limit } : {}),\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  memory\n    .command('why')\n    .description(\n      'Explain why facts were recalled (ranking signals) from the persisted recall spans.',\n    )\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--session <id>', \"Restrict to one session's recall spans.\")\n    .option('--limit <n>', 'Cap on the most-recent recall spans (default 5).')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (opts: { config?: string; session?: string; limit?: string; json?: boolean }) => {\n      const limit = opts.limit !== undefined ? Number.parseInt(opts.limit, 10) : undefined;\n      await runMemoryWhy({\n        ...(opts.session !== undefined ? { sessionId: opts.session } : {}),\n        ...(limit !== undefined && Number.isFinite(limit) ? { limit } : {}),\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  memory\n    .command('review')\n    .description('List quarantined memory by tier, or promote a reviewed item with --promote.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--limit <n>', 'Cap on rows listed per type (default 20).')\n    .option('--promote <id>', 'Promote this quarantined memory id out of quarantine.')\n    .option('--reason <text>', 'Audit reason recorded with the promotion.')\n    .option('--force', 'Override the injection-refusal gate (operator action, after review).')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(\n      async (opts: {\n        config?: string;\n        limit?: string;\n        promote?: string;\n        reason?: string;\n        force?: boolean;\n        json?: boolean;\n      }) => {\n        const limit = opts.limit !== undefined ? Number.parseInt(opts.limit, 10) : undefined;\n        await runMemoryReview({\n          ...(limit !== undefined && Number.isFinite(limit) ? { limit } : {}),\n          ...(opts.promote !== undefined ? { promote: opts.promote } : {}),\n          ...(opts.reason !== undefined ? { reason: opts.reason } : {}),\n          ...(opts.force !== undefined ? { force: opts.force } : {}),\n          ...(opts.config !== undefined ? { config: opts.config } : {}),\n          ...(opts.json !== undefined ? { json: opts.json } : {}),\n        });\n      },\n    );\n}\n\nfunction registerConsolidatorCommands(program: Command): void {\n  const c = program\n    .command('consolidator')\n    .description('[Storage] Inspect and steer the memory consolidator.');\n  c.command('status')\n    .description('Current tier hint + DLQ size + recent run history.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (opts: { config?: string; json?: boolean }) => {\n      await runConsolidatorStatus({\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  c.command('set-tier <tier>')\n    .description('Persist a tier hint (free | cheap | standard | full | custom).')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (tier: string, opts: { config?: string; json?: boolean }) => {\n      await runConsolidatorSetTier({\n        tier: tier as 'free' | 'cheap' | 'standard' | 'full' | 'custom',\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  c.command('stop')\n    .description('Persist a pause flag the running daemon honours.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (opts: { config?: string; json?: boolean }) => {\n      await runConsolidatorStop({\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n}\n\nfunction registerTriggersCommands(program: Command): void {\n  const t = program\n    .command('triggers')\n    .description('[Storage] Operate on the durable trigger registry.');\n  t.command('list')\n    .description('Every persisted trigger.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (opts: { config?: string; json?: boolean }) => {\n      await runTriggersList({\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  t.command('status <id>')\n    .description('Single-trigger detail.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (id: string, opts: { config?: string; json?: boolean }) => {\n      await runTriggersStatus({\n        id,\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  t.command('fire <id>')\n    .description('Operator-fired side-effect (admin only).')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (id: string, opts: { config?: string; json?: boolean }) => {\n      await runTriggersFire({\n        id,\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  t.command('disable <id>')\n    .description('Flip the disabled column on the registry row.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (id: string, opts: { config?: string; json?: boolean }) => {\n      await runTriggersDisable({\n        id,\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  t.command('prune')\n    .description('Drop disabled triggers older than --before.')\n    .option(\n      '--before <date>',\n      'ISO date / epoch ms cutoff. Defaults to 0 (drop every disabled row).',\n    )\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (opts: { before?: string; config?: string; json?: boolean }) => {\n      await runTriggersPrune({\n        ...(opts.before !== undefined ? { before: opts.before } : {}),\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n}\n\nfunction registerAuthCommands(program: Command): void {\n  const a = program.command('auth').description('[Auth] Outbound OAuth (e.g. for MCP servers).');\n  a.command('login')\n    .description('Drive an interactive login flow.')\n    .requiredOption('--server <url>', 'Authorization server URL.')\n    .option('--server-id <id>', 'Override the persisted server identifier.')\n    .option('--scope <scope>', 'OAuth scope.')\n    .option('--device-flow', 'Use the Device Authorization Grant.')\n    .option('--client-id <id>', 'Pre-existing client identifier (skip DCR).')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .action(\n      async (opts: {\n        server: string;\n        serverId?: string;\n        scope?: string;\n        deviceFlow?: boolean;\n        clientId?: string;\n        config?: string;\n      }) => {\n        await runAuthLogin({\n          serverUrl: opts.server,\n          ...(opts.serverId !== undefined ? { serverId: opts.serverId } : {}),\n          ...(opts.scope !== undefined ? { scope: opts.scope } : {}),\n          ...(opts.deviceFlow !== undefined ? { deviceFlow: opts.deviceFlow } : {}),\n          ...(opts.clientId !== undefined ? { clientId: opts.clientId } : {}),\n          ...(opts.config !== undefined ? { config: opts.config } : {}),\n        });\n      },\n    );\n  a.command('list')\n    .description('List persisted OAuth sessions.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (opts: { config?: string; json?: boolean }) => {\n      await runAuthList({\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  a.command('refresh <id>')\n    .description('Refresh a session.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .action(async (id: string, opts: { config?: string }) => {\n      await runAuthRefresh({\n        id,\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n      });\n    });\n  a.command('revoke <id>')\n    .description('Revoke a session.')\n    .option('--reason <text>', 'Optional reason persisted in the audit log.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .action(async (id: string, opts: { reason?: string; config?: string }) => {\n      await runAuthRevoke({\n        id,\n        ...(opts.reason !== undefined ? { reason: opts.reason } : {}),\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n      });\n    });\n  a.command('status')\n    .description('OAuth subsystem snapshot.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (opts: { config?: string; json?: boolean }) => {\n      await runAuthStatus({\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n}\n\nfunction registerPricingCommands(program: Command): void {\n  const p = program.command('pricing').description('[Catalogue] Bundled LLM pricing snapshot.');\n  p.command('status')\n    .description('Show bundled snapshot version + entry count + digest.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action((opts: { json?: boolean }) => {\n      runPricingStatus({ ...(opts.json !== undefined ? { json: opts.json } : {}) });\n    });\n  p.command('refresh')\n    .description('Pull a fresh snapshot from --url (network).')\n    .requiredOption('--url <url>', 'Snapshot URL.')\n    .option('--out <file>', 'Optional path to write the refreshed snapshot to.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (opts: { url: string; out?: string; json?: boolean }) => {\n      await runPricingRefresh({\n        url: opts.url,\n        ...(opts.out !== undefined ? { out: opts.out } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  p.command('diff')\n    .description('Diff a supplied snapshot against the bundled one.')\n    .requiredOption('--snapshot <file>', 'JSON file containing a PricingSnapshot.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (opts: { snapshot: string; json?: boolean }) => {\n      await runPricingDiff({\n        snapshot: opts.snapshot,\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  p.command('lookup')\n    .description('Print the per-token price for a single (provider, model) pair.')\n    .requiredOption('--provider <name>', 'Provider id.')\n    .requiredOption('--model <id>', 'Model id.')\n    .option('--region <region>', 'Optional region.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action((opts: { provider: string; model: string; region?: string; json?: boolean }) => {\n      runPricingLookup({\n        provider: opts.provider,\n        model: opts.model,\n        ...(opts.region !== undefined ? { region: opts.region } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  p.command('missing')\n    .description('Report (provider, model) pairs absent from the bundled snapshot.')\n    .requiredOption('--spans <file>', 'JSON file containing trace spans (array of { attributes }).')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (opts: { spans: string; json?: boolean }) => {\n      await runPricingMissing({\n        spans: opts.spans,\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n}\n\nfunction registerSkillsCommands(program: Command): void {\n  const s = program\n    .command('skills')\n    .description('[Catalogue] Manage operator-managed skill packages.');\n  s.command('install <source>')\n    .description('Install a skill from npm:<name>[@version] or git:<url>.')\n    .option('--version <version>', 'npm version pin.')\n    .option('--ref <ref>', 'git ref (branch / tag / sha).')\n    .option('--trust-level <level>', 'trusted | trusted-with-scripts | untrusted.')\n    .option('--cwd <dir>', 'Working directory for npm installs.')\n    .option('--dry-run', 'Skip the install; run the policy + audit pipeline only.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(\n      async (\n        source: string,\n        opts: {\n          version?: string;\n          ref?: string;\n          trustLevel?: 'trusted' | 'trusted-with-scripts' | 'untrusted';\n          cwd?: string;\n          dryRun?: boolean;\n          json?: boolean;\n        },\n      ) => {\n        await runSkillsInstall({\n          source,\n          ...(opts.version !== undefined ? { version: opts.version } : {}),\n          ...(opts.ref !== undefined ? { ref: opts.ref } : {}),\n          ...(opts.trustLevel !== undefined ? { trustLevel: opts.trustLevel } : {}),\n          ...(opts.cwd !== undefined ? { cwd: opts.cwd } : {}),\n          ...(opts.dryRun !== undefined ? { dryRun: opts.dryRun } : {}),\n          ...(opts.json !== undefined ? { json: opts.json } : {}),\n        });\n      },\n    );\n  s.command('inspect <name>')\n    .description('Print a single recorded installation.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (name: string, opts: { json?: boolean }) => {\n      await runSkillsInspect({\n        name,\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  s.command('audit')\n    .description('Audit every recorded installation in this process.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action((opts: { json?: boolean }) => {\n      runSkillsAudit({ ...(opts.json !== undefined ? { json: opts.json } : {}) });\n    });\n  s.command('migrate-frontmatter')\n    .description(\n      'Migrate legacy graphorin-* frontmatter fields onto upstream equivalents (DEC-156).',\n    )\n    .option('--path <dir>', 'Directory to walk. Defaults to cwd.')\n    .option('--recursive', 'Walk subdirectories.')\n    .option('--apply', 'Actually rewrite files (default: dry-run).')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(\n      async (opts: { path?: string; recursive?: boolean; apply?: boolean; json?: boolean }) => {\n        await runSkillsMigrateFrontmatter({\n          ...(opts.path !== undefined ? { path: opts.path } : {}),\n          ...(opts.recursive !== undefined ? { recursive: opts.recursive } : {}),\n          ...(opts.apply !== undefined ? { apply: opts.apply } : {}),\n          ...(opts.json !== undefined ? { json: opts.json } : {}),\n        });\n      },\n    );\n}\n\nfunction registerTracesCommands(program: Command): void {\n  const t = program.command('traces').description('[Diagnostics] Operate on the trace cache.');\n  t.command('status')\n    .description('Count rows + report TTL config.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (opts: { config?: string; json?: boolean }) => {\n      await runTracesStatus({\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  t.command('prune')\n    .description('Manual TTL enforcement (cutoff is required).')\n    .requiredOption('--before <date>', 'ISO date / epoch ms cutoff.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (opts: { before: string; config?: string; json?: boolean }) => {\n      await runTracesPrune({\n        before: opts.before,\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n}\n\nfunction registerMigrateExportCommand(program: Command): void {\n  program\n    .command('migrate-export <input>')\n    .description('[Storage] Migrate a session export file to the current schema (DEC-155).')\n    .requiredOption('--to <file>', 'Output path.')\n    .option('--to-schema <version>', 'Target schema version.', '1.0')\n    .option('--writer <id>', 'Writer identifier surfaced on the meta header.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(\n      async (\n        input: string,\n        opts: { to: string; toSchema?: string; writer?: string; json?: boolean },\n      ) => {\n        await runMigrateExport({\n          input,\n          to: opts.to,\n          ...(opts.toSchema !== undefined ? { toSchema: opts.toSchema } : {}),\n          ...(opts.writer !== undefined ? { writer: opts.writer } : {}),\n          ...(opts.json !== undefined ? { json: opts.json } : {}),\n        });\n      },\n    );\n}\n\nfunction registerMigrateConfigCommand(program: Command): void {\n  program\n    .command('migrate-config <input>')\n    .description('[Bootstrap] Migrate an old config file to the current schema.')\n    .option('--out <file>', 'Output path. Defaults to <input>.migrated.json next to the source.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (input: string, opts: { out?: string; json?: boolean }) => {\n      await runMigrateConfig({\n        input,\n        ...(opts.out !== undefined ? { out: opts.out } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n}\n\nfunction registerGuardCommands(program: Command): void {\n  const g = program\n    .command('guard')\n    .description('[Diagnostics] Inspect the memory-modification guard.');\n  g.command('status')\n    .description('Print the four guard tiers and their variants.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action((opts: { json?: boolean }) => {\n      runGuardStatus({ ...(opts.json !== undefined ? { json: opts.json } : {}) });\n    });\n  g.command('explain <toolName>')\n    .description(\n      'Derive the tier the classifier would assign to a tool with the supplied metadata.',\n    )\n    .option('--tags <list>', 'Comma-separated tag list.')\n    .option('--secrets-allowed <list>', 'Comma-separated secret allowlist.')\n    .option('--trust-level <level>', 'built-in | user-defined | trusted | untrusted.')\n    .option(\n      '--explicit-tier <tier>',\n      'pure | side-effecting-no-memory | memory-aware | unknown | untrusted.',\n    )\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(\n      (\n        toolName: string,\n        opts: {\n          tags?: string;\n          secretsAllowed?: string;\n          trustLevel?: 'built-in' | 'user-defined' | 'trusted' | 'untrusted';\n          explicitTier?:\n            | 'pure'\n            | 'side-effecting-no-memory'\n            | 'memory-aware'\n            | 'unknown'\n            | 'untrusted';\n          json?: boolean;\n        },\n      ) => {\n        runGuardExplain({\n          toolName,\n          ...(opts.tags !== undefined\n            ? {\n                tags: opts.tags\n                  .split(',')\n                  .map((s) => s.trim())\n                  .filter(Boolean),\n              }\n            : {}),\n          ...(opts.secretsAllowed !== undefined\n            ? {\n                secretsAllowed: opts.secretsAllowed\n                  .split(',')\n                  .map((s) => s.trim())\n                  .filter(Boolean),\n              }\n            : {}),\n          ...(opts.trustLevel !== undefined ? { trustLevel: opts.trustLevel } : {}),\n          ...(opts.explicitTier !== undefined ? { explicitTier: opts.explicitTier } : {}),\n          ...(opts.json !== undefined ? { json: opts.json } : {}),\n        });\n      },\n    );\n}\n\nfunction registerTelemetryCommands(program: Command): void {\n  const t = program\n    .command('telemetry')\n    .description('[Diagnostics] Telemetry policy (zero-default per ADR-041).');\n  t.command('status')\n    .description('Always reports disabled.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action((opts: { json?: boolean }) => {\n      runTelemetryStatus({ ...(opts.json !== undefined ? { json: opts.json } : {}) });\n    });\n  t.command('enable')\n    .description('Refuses; opt-in collector is on the v0.2+ roadmap.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action((opts: { json?: boolean }) => {\n      runTelemetryEnable({ ...(opts.json !== undefined ? { json: opts.json } : {}) });\n    });\n  t.command('disable')\n    .description('No-op; telemetry is always disabled.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action((opts: { json?: boolean }) => {\n      runTelemetryDisable({ ...(opts.json !== undefined ? { json: opts.json } : {}) });\n    });\n  t.command('inspect')\n    .description('Informational summary of the zero-default promise.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action((opts: { json?: boolean }) => {\n      runTelemetryInspect({ ...(opts.json !== undefined ? { json: opts.json } : {}) });\n    });\n}\n\nfunction registerToolsCommands(program: Command): void {\n  const tools = program.command('tools').description('[Catalogue] Operate on the tool registry.');\n  tools\n    .command('lint')\n    .description(\n      [\n        'Static AST analysis of every tool({...}) registration; per-tool grader + threshold gate (RB-49).',\n        '',\n        'Grader rubric (40 + 30 + 30 = 100 points):',\n        '  description axis (0..40): 0 if missing/placeholder/<20 chars; 16/24/32/40 by length.',\n        '  examples axis    (0..30): 0 if none or >5; 12 base + 6 per additional, cap 30; -6 per PII.',\n        '  parameter naming (0..30): 30 base; -30/N per ambiguous name; -10/N per numeric suffix.',\n        '',\n        'Exit codes (CI-friendly):',\n        '  0  every tool meets or exceeds --threshold.',\n        '  1  at least one tool falls below --threshold.',\n        '  2  invocation could not start (config missing, walker failed).',\n      ].join('\\n'),\n    )\n    .option('-c, --config <path>', 'Optional tsconfig.json whose include overrides the file glob.')\n    .option('--threshold <n>', 'Minimum acceptable per-tool score (default 60).', (v) =>\n      Number.parseInt(v, 10),\n    )\n    .option('--format <fmt>', 'text | json (default text).')\n    .option('--source <pattern>', 'File glob override (e.g. src/skills/**/tools/*.ts).')\n    .action(\n      async (opts: {\n        config?: string;\n        threshold?: number;\n        format?: 'text' | 'json';\n        source?: string;\n      }) => {\n        await runToolsLint({\n          ...(opts.config !== undefined ? { config: opts.config } : {}),\n          ...(opts.threshold !== undefined ? { threshold: opts.threshold } : {}),\n          ...(opts.format !== undefined ? { format: opts.format } : {}),\n          ...(opts.source !== undefined ? { source: opts.source } : {}),\n        });\n      },\n    );\n}\n\nmain().catch((err) => {\n  process.stderr.write(`[graphorin/cli] ${(err as Error).message}\\n`);\n  process.exit(1);\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqGA,eAAe,OAAsB;CACnC,MAAM,UAAU,IAAI,SAAS;AAC7B,SACG,KAAK,YAAY,CACjB,YACC;EACE;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC,KAAK,KAAK,CACb,CACA,QAAQ,QAAQ;AAEnB,2BAA0B,QAAQ;AAClC,uBAAsB,QAAQ;AAC9B,uBAAsB,QAAQ;AAC9B,yBAAwB,QAAQ;AAChC,yBAAwB,QAAQ;AAChC,uBAAsB,QAAQ;AAC9B,wBAAuB,QAAQ;AAC/B,8BAA6B,QAAQ;AACrC,0BAAyB,QAAQ;AACjC,sBAAqB,QAAQ;AAC7B,yBAAwB,QAAQ;AAChC,wBAAuB,QAAQ;AAC/B,wBAAuB,QAAQ;AAC/B,8BAA6B,QAAQ;AACrC,8BAA6B,QAAQ;AACrC,uBAAsB,QAAQ;AAC9B,2BAA0B,QAAQ;AAClC,uBAAsB,QAAQ;AAE9B,OAAM,QAAQ,WAAW,QAAQ,KAAK;;AAGxC,SAAS,0BAA0B,SAAwB;AACzD,SACG,QAAQ,QAAQ,CAChB,YAAY,gDAAgD,CAC5D,OAAO,uBAAuB,sDAAsD,CACpF,OAAO,qBAAqB,uCAAuC,CACnE,OAAO,qBAAqB,yCAAyC,UACpE,OAAO,SAAS,OAAO,GAAG,CAC3B,CACA,OACC,2BACA,4EACD,CACA,OAAO,oBAAoB,8DAA8D,CACzF,OACC,OAAO,SAMD;AACJ,MAAI,eAAe,CACjB,SAAQ,OAAO,MACb,kFACD;AAEH,QAAM,SAAS;GACb,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACtD,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACtD,GAAI,KAAK,kBAAkB,SAAY,EAAE,eAAe,KAAK,eAAe,GAAG,EAAE;GACjF,GAAI,KAAK,kBAAkB,SAAY,EAAE,eAAe,KAAK,eAAe,GAAG,EAAE;GAClF,CAAC;GAEL;AAEH,SACG,QAAQ,OAAO,CACf,YACC,yFACD,CACA,OAAO,oBAAoB,kDAAkD,CAC7E,OAAO,qBAAqB,iDAAiD,MAAM,CACnF,OACC,0BACA,oFACD,CACA,OAAO,eAAe,oCAAoC,CAC1D,OAAO,kBAAkB,qCAAqC,CAC9D,OACC,OAAO,SAKD;AACJ,MAAI,eAAe,CACjB,SAAQ,OAAO,MACb,0EACD;AAEH,QAAM,QAAQ;GACZ,GAAI,KAAK,QAAQ,SAAY,EAAE,KAAK,KAAK,KAAK,GAAG,EAAE;GACnD,GAAI,KAAK,mBAAmB,SAAY,EAAE,gBAAgB,KAAK,gBAAgB,GAAG,EAAE;GACpF,GAAI,KAAK,iBAAiB,SAAY,EAAE,cAAc,KAAK,cAAc,GAAG,EAAE;GAC9E,GAAI,KAAK,cAAc,SAAY,EAAE,WAAW,KAAK,WAAW,GAAG,EAAE;GACtE,CAAC;GAEL;AAEH,SACG,QAAQ,UAAU,CAClB,YACC,sFACD,CACA,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,sBAAsB,sDAAsD,CACnF,OAAO,OAAO,SAA+C;AAC5D,MAAI,eAAe,CACjB,SAAQ,OAAO,MACb,6EACD;AAEH,QAAM,WAAW;GACf,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC7D,CAAC;GACF;;AAGN,SAAS,sBAAsB,SAAwB;AACrD,SACG,QAAQ,SAAS,CACjB,YAAY,uEAAuE,CACnF,OAAO,eAAe,mCAAmC,CACzD,OAAO,iBAAiB,4BAA4B,CACpD,OAAO,mBAAmB,+BAA+B,CACzD,OAAO,sBAAsB,kCAAkC,CAC/D,OAAO,mBAAmB,gDAAgD,CAC1E,OAAO,SAAS,mBAAmB,CACnC,OAAO,UAAU,2CAA2C,CAC5D,OACC,OAAO,SAQD;AACJ,QAAM,UAAU;GACd,GAAI,KAAK,aAAa,SAAY,EAAE,UAAU,KAAK,UAAU,GAAG,EAAE;GAClE,GAAI,KAAK,eAAe,SAAY,EAAE,YAAY,KAAK,YAAY,GAAG,EAAE;GACxE,GAAI,KAAK,iBAAiB,SAAY,EAAE,cAAc,KAAK,cAAc,GAAG,EAAE;GAC9E,GAAI,KAAK,oBAAoB,SAAY,EAAE,iBAAiB,KAAK,iBAAiB,GAAG,EAAE;GACvF,GAAI,KAAK,iBAAiB,SAAY,EAAE,cAAc,KAAK,cAAc,GAAG,EAAE;GAC9E,GAAI,KAAK,QAAQ,SAAY,EAAE,KAAK,KAAK,KAAK,GAAG,EAAE;GACnD,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GAEL;;AAGL,SAAS,sBAAsB,SAAwB;CACrD,MAAM,QAAQ,QAAQ,QAAQ,QAAQ,CAAC,YAAY,oCAAoC;AACvF,OACG,QAAQ,SAAS,CACjB,YAAY,+CAA+C,CAC3D,eAAe,mBAAmB,8BAA8B,CAChE,OAAO,kBAAkB,kBAAkB,CAC3C,OAAO,2BAA2B,uCAAuC,CACzE,OAAO,eAAe,mCAAmC,OAAO,CAChE,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,UAAU,6CAA6C,CAC9D,OACC,OAAO,SAOD;AACJ,QAAM,eAAe;GACnB,QAAQ,KAAK,OACV,MAAM,IAAI,CACV,KAAK,MAAM,EAAE,MAAM,CAAC,CACpB,OAAO,QAAQ;GAClB,GAAI,KAAK,UAAU,SAAY,EAAE,OAAO,KAAK,OAAO,GAAG,EAAE;GACzD,GAAI,KAAK,cAAc,SAAY,EAAE,WAAW,KAAK,WAAW,GAAG,EAAE;GACrE,GAAI,KAAK,QAAQ,SAAY,EAAE,KAAK,KAAK,KAAK,GAAG,EAAE;GACnD,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GAEL;AACH,OACG,QAAQ,OAAO,CACf,YAAY,uBAAuB,CACnC,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,qBAAqB,0BAA0B,CACtD,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,SAAwE;AACrF,QAAM,aAAa;GACjB,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,mBAAmB,SAAY,EAAE,gBAAgB,KAAK,gBAAgB,GAAG,EAAE;GACpF,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,OACG,QAAQ,cAAc,CACtB,YAAY,yBAAyB,CACrC,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,IAAY,SAA8C;AACvE,QAAM,eAAe;GACnB;GACA,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,OACG,QAAQ,cAAc,CACtB,YAAY,iDAAiD,CAC7D,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,eAAe,mCAAmC,OAAO,CAChE,OAAO,UAAU,6CAA6C,CAC9D,OACC,OAAO,IAAY,SAAqE;AACtF,QAAM,eAAe;GACnB;GACA,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,QAAQ,SAAY,EAAE,KAAK,KAAK,KAAK,GAAG,EAAE;GACnD,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GAEL;AACH,OACG,QAAQ,QAAQ,CAChB,YAAY,8DAA8D,CAC1E,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,eAAe,mCAAmC,OAAO,CAChE,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,SAAqE;AAClF,QAAM,cAAc;GAClB,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,QAAQ,SAAY,EAAE,KAAK,KAAK,KAAK,GAAG,EAAE;GACnD,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,OACG,QAAQ,iBAAiB,CACzB,YAAY,4DAA4D,CACxE,OAAO,qBAAqB,sCAAsC,CAClE,OAAO,UAAU,6CAA6C,CAC9D,QAAQ,KAAa,SAA8C;AAClE,iBAAe;GACb,OAAO;GACP,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;;AAGN,SAAS,wBAAwB,SAAwB;CACvD,MAAM,UAAU,QACb,QAAQ,UAAU,CAClB,YAAY,iDAAiD;CAChE,MAAM,cAAc,QAClB,IACG,OAAO,2BAA2B,mDAAmD,CACrF,OAAO,oBAAoB,oDAAoD,CAC/E,OAAO,UAAU,6CAA6C;AACnE,YAAW,QAAQ,QAAQ,OAAO,CAAC,YAAY,wBAAwB,CAAC,CAAC,OACvE,OAAO,SAID;AACJ,QAAM,eAAe;GACnB,GAAI,KAAK,kBAAkB,SAAY,EAAE,eAAe,KAAK,eAAe,GAAG,EAAE;GACjF,GAAI,KAAK,kBAAkB,SAAY,EAAE,eAAe,KAAK,eAAe,GAAG,EAAE;GACjF,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GAEL;AACD,YACE,QACG,QAAQ,YAAY,CACpB,YAAY,kDAAkD,CAC9D,OAAO,YAAY,uBAAuB,CAC9C,CAAC,OACA,OACE,KACA,SAMG;AACH,QAAM,cAAc;GAClB;GACA,GAAI,KAAK,kBAAkB,SAAY,EAAE,eAAe,KAAK,eAAe,GAAG,EAAE;GACjF,GAAI,KAAK,kBAAkB,SAAY,EAAE,eAAe,KAAK,eAAe,GAAG,EAAE;GACjF,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACtD,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC7D,CAAC;GAEL;AACD,YACE,QACG,QAAQ,YAAY,CACpB,YAAY,sDAAsD,CAClE,OAAO,eAAe,gBAAgB,CACtC,OAAO,gBAAgB,6BAA6B,CACxD,CAAC,OACA,OACE,KACA,SAOG;AACH,QAAM,cAAc;GAClB;GACA,GAAI,KAAK,UAAU,SAAY,EAAE,OAAO,KAAK,OAAO,GAAG,EAAE;GACzD,GAAI,KAAK,cAAc,SAAY,EAAE,WAAW,KAAK,WAAW,GAAG,EAAE;GACrE,GAAI,KAAK,kBAAkB,SAAY,EAAE,eAAe,KAAK,eAAe,GAAG,EAAE;GACjF,GAAI,KAAK,kBAAkB,SAAY,EAAE,eAAe,KAAK,eAAe,GAAG,EAAE;GACjF,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GAEL;AACD,YAAW,QAAQ,QAAQ,eAAe,CAAC,YAAY,mBAAmB,CAAC,CAAC,OAC1E,OACE,KACA,SAKG;AACH,QAAM,iBAAiB;GACrB;GACA,GAAI,KAAK,kBAAkB,SAAY,EAAE,eAAe,KAAK,eAAe,GAAG,EAAE;GACjF,GAAI,KAAK,kBAAkB,SAAY,EAAE,eAAe,KAAK,eAAe,GAAG,EAAE;GACjF,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GAEL;AACD,YACE,QACG,QAAQ,YAAY,CACpB,YAAY,sCAAsC,CAClD,OAAO,YAAY,4CAA4C,CACnE,CAAC,OAAO,OAAO,KAAa,SAA+C;AAC1E,QAAM,cAAc;GAClB;GACA,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACF,YACE,QACG,QAAQ,eAAe,CACvB,YAAY,iDAAiD,CAC7D,OAAO,mBAAmB,oBAAoB,CAC9C,OAAO,gBAAgB,iCAAiC,CAC5D,CAAC,OACA,OACE,KACA,SAOG;AACH,QAAM,iBAAiB;GACrB;GACA,GAAI,KAAK,aAAa,SAAY,EAAE,UAAU,KAAK,UAAU,GAAG,EAAE;GAClE,GAAI,KAAK,cAAc,SAAY,EAAE,WAAW,KAAK,WAAW,GAAG,EAAE;GACrE,GAAI,KAAK,kBAAkB,SAAY,EAAE,eAAe,KAAK,eAAe,GAAG,EAAE;GACjF,GAAI,KAAK,kBAAkB,SAAY,EAAE,eAAe,KAAK,eAAe,GAAG,EAAE;GACjF,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GAEL;;AAGH,SAAS,wBAAwB,SAAwB;CACvD,MAAM,UAAU,QACb,QAAQ,UAAU,CAClB,YAAY,kDAAkD;AACjE,SACG,QAAQ,SAAS,CACjB,YAAY,yDAAyD,CACrE,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,SAA8C;AAC3D,QAAM,iBAAiB;GACrB,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,SACG,QAAQ,UAAU,CAClB,YACC,yFACD,CACA,eAAe,2BAA2B,wCAAwC,CAClF,OAAO,uBAAuB,qCAAqC,CACnE,OACC,wBACA,mEACD,CACA,OACC,UACA,6FACD,CACA,OAAO,UAAU,6CAA6C,CAC9D,OACC,OAAO,SAMD;AACJ,QAAM,kBAAkB;GACtB,gBAAgB,KAAK;GACrB,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,eAAe,SAAY,EAAE,YAAY,KAAK,YAAY,GAAG,EAAE;GACxE,GAAI,KAAK,SAAS,OAAO,EAAE,MAAM,MAAM,GAAG,EAAE;GAC5C,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GAEL;AACH,SACG,QAAQ,QAAQ,CAChB,YAAY,oCAAoC,CAChD,eAAe,+BAA+B,6CAA6C,CAC3F,eAAe,+BAA+B,wCAAwC,CACtF,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,UAAU,6CAA6C,CAC9D,OACC,OAAO,SAKD;AACJ,QAAM,gBAAgB;GACpB,mBAAmB,KAAK;GACxB,mBAAmB,KAAK;GACxB,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GAEL;AACH,SACG,QAAQ,kBAAkB,CAC1B,YAAY,2EAA2E,CACvF,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,aAAa,+DAA+D,CACnF,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,SAAgE;AAC7E,QAAM,yBAAyB;GAC7B,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;;AAGN,SAAS,sBAAsB,SAAwB;CACrD,MAAM,QAAQ,QACX,QAAQ,QAAQ,CAChB,YAAY,gDAAgD;AAC/D,OACG,QAAQ,SAAS,CACjB,YAAY,8DAA8D,CAC1E,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,SAA8C;AAC3D,QAAM,eAAe;GACnB,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,OACG,QAAQ,QAAQ,CAChB,YAAY,yDAAyD,CACrE,eAAe,mBAAmB,8BAA8B,CAChE,OAAO,gBAAgB,iDAAiD,MACvE,OAAO,SAAS,GAAG,GAAG,CACvB,CACA,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,SAA+E;AAC5F,QAAM,cAAc;GAClB,QAAQ,KAAK;GACb,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,OACG,QAAQ,SAAS,CACjB,YAAY,+CAA+C,CAC3D,eAAe,eAAe,eAAe,CAC7C,OAAO,kBAAkB,6BAA6B,MAAM,OAAO,SAAS,GAAG,GAAG,CAAC,CACnF,OAAO,gBAAgB,6BAA6B,MAAM,OAAO,SAAS,GAAG,GAAG,CAAC,CACjF,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,UAAU,6CAA6C,CAC9D,OACC,OAAO,SAMD;AACJ,QAAM,eAAe;GACnB,IAAI,KAAK;GACT,GAAI,KAAK,YAAY,SAAY,EAAE,SAAS,KAAK,SAAS,GAAG,EAAE;GAC/D,GAAI,KAAK,UAAU,SAAY,EAAE,OAAO,KAAK,OAAO,GAAG,EAAE;GACzD,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GAEL;;AAGL,SAAS,uBAAuB,SAAwB;CACtD,MAAM,SAAS,QACZ,QAAQ,SAAS,CACjB,YAAY,gDAAgD;AAC/D,QACG,QAAQ,SAAS,CACjB,YAAY,qDAAqD,CACjE,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,SAA8C;AAC3D,QAAM,gBAAgB;GACpB,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,QACG,QAAQ,UAAU,CAClB,YAAY,yEAAyE,CACrF,eAAe,eAAe,sBAAsB,CACpD,eAAe,aAAa,sBAAsB,CAClD,eAAe,kBAAkB,+CAA+C,CAChF,OAAO,sBAAsB,iDAAiD,CAC9E,OAAO,uBAAuB,qCAAqC,CACnE,OACC,OAAO,SAMD;AACJ,QAAM,iBAAiB;GACrB,MAAM,KAAK;GACX,IAAI,KAAK;GACT,UAAU,KAAK;GACf,GAAI,KAAK,cAAc,SAAY,EAAE,iBAAiB,KAAK,WAAW,GAAG,EAAE;GAC3E,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC7D,CAAC;GAEL;AACH,QACG,QAAQ,UAAU,CAClB,YAAY,6EAA6E,CACzF,SAAS,YAAY,6BAA6B,CAClD,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,QAAgB,SAA8C;AAC3E,QAAM,iBAAiB;GACrB;GACA,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,QACG,QAAQ,WAAW,CACnB,YAAY,iFAAiF,CAC7F,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,eAAe,sDAAsD,CAC5E,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,SAA8D;EAC3E,MAAM,QAAQ,KAAK,UAAU,SAAY,OAAO,SAAS,KAAK,OAAO,GAAG,GAAG;AAC3E,QAAM,kBAAkB;GACtB,GAAI,UAAU,UAAa,OAAO,SAAS,MAAM,GAAG,EAAE,OAAO,GAAG,EAAE;GAClE,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,QACG,QAAQ,MAAM,CACd,YACC,qFACD,CACA,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,kBAAkB,0CAA0C,CACnE,OAAO,eAAe,mDAAmD,CACzE,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,SAAgF;EAC7F,MAAM,QAAQ,KAAK,UAAU,SAAY,OAAO,SAAS,KAAK,OAAO,GAAG,GAAG;AAC3E,QAAM,aAAa;GACjB,GAAI,KAAK,YAAY,SAAY,EAAE,WAAW,KAAK,SAAS,GAAG,EAAE;GACjE,GAAI,UAAU,UAAa,OAAO,SAAS,MAAM,GAAG,EAAE,OAAO,GAAG,EAAE;GAClE,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,QACG,QAAQ,SAAS,CACjB,YAAY,8EAA8E,CAC1F,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,eAAe,4CAA4C,CAClE,OAAO,kBAAkB,wDAAwD,CACjF,OAAO,mBAAmB,4CAA4C,CACtE,OAAO,WAAW,uEAAuE,CACzF,OAAO,UAAU,6CAA6C,CAC9D,OACC,OAAO,SAOD;EACJ,MAAM,QAAQ,KAAK,UAAU,SAAY,OAAO,SAAS,KAAK,OAAO,GAAG,GAAG;AAC3E,QAAM,gBAAgB;GACpB,GAAI,UAAU,UAAa,OAAO,SAAS,MAAM,GAAG,EAAE,OAAO,GAAG,EAAE;GAClE,GAAI,KAAK,YAAY,SAAY,EAAE,SAAS,KAAK,SAAS,GAAG,EAAE;GAC/D,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,UAAU,SAAY,EAAE,OAAO,KAAK,OAAO,GAAG,EAAE;GACzD,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GAEL;;AAGL,SAAS,6BAA6B,SAAwB;CAC5D,MAAM,IAAI,QACP,QAAQ,eAAe,CACvB,YAAY,uDAAuD;AACtE,GAAE,QAAQ,SAAS,CAChB,YAAY,qDAAqD,CACjE,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,SAA8C;AAC3D,QAAM,sBAAsB;GAC1B,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,GAAE,QAAQ,kBAAkB,CACzB,YAAY,iEAAiE,CAC7E,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,MAAc,SAA8C;AACzE,QAAM,uBAAuB;GACrB;GACN,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,GAAE,QAAQ,OAAO,CACd,YAAY,mDAAmD,CAC/D,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,SAA8C;AAC3D,QAAM,oBAAoB;GACxB,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;;AAGN,SAAS,yBAAyB,SAAwB;CACxD,MAAM,IAAI,QACP,QAAQ,WAAW,CACnB,YAAY,qDAAqD;AACpE,GAAE,QAAQ,OAAO,CACd,YAAY,2BAA2B,CACvC,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,SAA8C;AAC3D,QAAM,gBAAgB;GACpB,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,GAAE,QAAQ,cAAc,CACrB,YAAY,yBAAyB,CACrC,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,IAAY,SAA8C;AACvE,QAAM,kBAAkB;GACtB;GACA,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,GAAE,QAAQ,YAAY,CACnB,YAAY,2CAA2C,CACvD,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,IAAY,SAA8C;AACvE,QAAM,gBAAgB;GACpB;GACA,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,GAAE,QAAQ,eAAe,CACtB,YAAY,gDAAgD,CAC5D,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,IAAY,SAA8C;AACvE,QAAM,mBAAmB;GACvB;GACA,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,GAAE,QAAQ,QAAQ,CACf,YAAY,8CAA8C,CAC1D,OACC,mBACA,uEACD,CACA,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,SAA+D;AAC5E,QAAM,iBAAiB;GACrB,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;;AAGN,SAAS,qBAAqB,SAAwB;CACpD,MAAM,IAAI,QAAQ,QAAQ,OAAO,CAAC,YAAY,gDAAgD;AAC9F,GAAE,QAAQ,QAAQ,CACf,YAAY,mCAAmC,CAC/C,eAAe,kBAAkB,4BAA4B,CAC7D,OAAO,oBAAoB,4CAA4C,CACvE,OAAO,mBAAmB,eAAe,CACzC,OAAO,iBAAiB,sCAAsC,CAC9D,OAAO,oBAAoB,6CAA6C,CACxE,OAAO,uBAAuB,qCAAqC,CACnE,OACC,OAAO,SAOD;AACJ,QAAM,aAAa;GACjB,WAAW,KAAK;GAChB,GAAI,KAAK,aAAa,SAAY,EAAE,UAAU,KAAK,UAAU,GAAG,EAAE;GAClE,GAAI,KAAK,UAAU,SAAY,EAAE,OAAO,KAAK,OAAO,GAAG,EAAE;GACzD,GAAI,KAAK,eAAe,SAAY,EAAE,YAAY,KAAK,YAAY,GAAG,EAAE;GACxE,GAAI,KAAK,aAAa,SAAY,EAAE,UAAU,KAAK,UAAU,GAAG,EAAE;GAClE,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC7D,CAAC;GAEL;AACH,GAAE,QAAQ,OAAO,CACd,YAAY,iCAAiC,CAC7C,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,SAA8C;AAC3D,QAAM,YAAY;GAChB,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,GAAE,QAAQ,eAAe,CACtB,YAAY,qBAAqB,CACjC,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,OAAO,IAAY,SAA8B;AACvD,QAAM,eAAe;GACnB;GACA,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC7D,CAAC;GACF;AACJ,GAAE,QAAQ,cAAc,CACrB,YAAY,oBAAoB,CAChC,OAAO,mBAAmB,8CAA8C,CACxE,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,OAAO,IAAY,SAA+C;AACxE,QAAM,cAAc;GAClB;GACA,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC7D,CAAC;GACF;AACJ,GAAE,QAAQ,SAAS,CAChB,YAAY,4BAA4B,CACxC,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,SAA8C;AAC3D,QAAM,cAAc;GAClB,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;;AAGN,SAAS,wBAAwB,SAAwB;CACvD,MAAM,IAAI,QAAQ,QAAQ,UAAU,CAAC,YAAY,4CAA4C;AAC7F,GAAE,QAAQ,SAAS,CAChB,YAAY,wDAAwD,CACpE,OAAO,UAAU,6CAA6C,CAC9D,QAAQ,SAA6B;AACpC,mBAAiB,EAAE,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE,EAAG,CAAC;GAC7E;AACJ,GAAE,QAAQ,UAAU,CACjB,YAAY,8CAA8C,CAC1D,eAAe,eAAe,gBAAgB,CAC9C,OAAO,gBAAgB,oDAAoD,CAC3E,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,SAAwD;AACrE,QAAM,kBAAkB;GACtB,KAAK,KAAK;GACV,GAAI,KAAK,QAAQ,SAAY,EAAE,KAAK,KAAK,KAAK,GAAG,EAAE;GACnD,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,GAAE,QAAQ,OAAO,CACd,YAAY,oDAAoD,CAChE,eAAe,qBAAqB,0CAA0C,CAC9E,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,SAA+C;AAC5D,QAAM,eAAe;GACnB,UAAU,KAAK;GACf,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,GAAE,QAAQ,SAAS,CAChB,YAAY,iEAAiE,CAC7E,eAAe,qBAAqB,eAAe,CACnD,eAAe,gBAAgB,YAAY,CAC3C,OAAO,qBAAqB,mBAAmB,CAC/C,OAAO,UAAU,6CAA6C,CAC9D,QAAQ,SAA+E;AACtF,mBAAiB;GACf,UAAU,KAAK;GACf,OAAO,KAAK;GACZ,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,GAAE,QAAQ,UAAU,CACjB,YAAY,mEAAmE,CAC/E,eAAe,kBAAkB,8DAA8D,CAC/F,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,SAA4C;AACzD,QAAM,kBAAkB;GACtB,OAAO,KAAK;GACZ,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;;AAGN,SAAS,uBAAuB,SAAwB;CACtD,MAAM,IAAI,QACP,QAAQ,SAAS,CACjB,YAAY,sDAAsD;AACrE,GAAE,QAAQ,mBAAmB,CAC1B,YAAY,0DAA0D,CACtE,OAAO,uBAAuB,mBAAmB,CACjD,OAAO,eAAe,gCAAgC,CACtD,OAAO,yBAAyB,8CAA8C,CAC9E,OAAO,eAAe,sCAAsC,CAC5D,OAAO,aAAa,0DAA0D,CAC9E,OAAO,UAAU,6CAA6C,CAC9D,OACC,OACE,QACA,SAQG;AACH,QAAM,iBAAiB;GACrB;GACA,GAAI,KAAK,YAAY,SAAY,EAAE,SAAS,KAAK,SAAS,GAAG,EAAE;GAC/D,GAAI,KAAK,QAAQ,SAAY,EAAE,KAAK,KAAK,KAAK,GAAG,EAAE;GACnD,GAAI,KAAK,eAAe,SAAY,EAAE,YAAY,KAAK,YAAY,GAAG,EAAE;GACxE,GAAI,KAAK,QAAQ,SAAY,EAAE,KAAK,KAAK,KAAK,GAAG,EAAE;GACnD,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GAEL;AACH,GAAE,QAAQ,iBAAiB,CACxB,YAAY,wCAAwC,CACpD,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,MAAc,SAA6B;AACxD,QAAM,iBAAiB;GACrB;GACA,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,GAAE,QAAQ,QAAQ,CACf,YAAY,qDAAqD,CACjE,OAAO,UAAU,6CAA6C,CAC9D,QAAQ,SAA6B;AACpC,iBAAe,EAAE,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE,EAAG,CAAC;GAC3E;AACJ,GAAE,QAAQ,sBAAsB,CAC7B,YACC,qFACD,CACA,OAAO,gBAAgB,sCAAsC,CAC7D,OAAO,eAAe,uBAAuB,CAC7C,OAAO,WAAW,6CAA6C,CAC/D,OAAO,UAAU,6CAA6C,CAC9D,OACC,OAAO,SAAkF;AACvF,QAAM,4BAA4B;GAChC,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACtD,GAAI,KAAK,cAAc,SAAY,EAAE,WAAW,KAAK,WAAW,GAAG,EAAE;GACrE,GAAI,KAAK,UAAU,SAAY,EAAE,OAAO,KAAK,OAAO,GAAG,EAAE;GACzD,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GAEL;;AAGL,SAAS,uBAAuB,SAAwB;CACtD,MAAM,IAAI,QAAQ,QAAQ,SAAS,CAAC,YAAY,4CAA4C;AAC5F,GAAE,QAAQ,SAAS,CAChB,YAAY,kCAAkC,CAC9C,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,SAA8C;AAC3D,QAAM,gBAAgB;GACpB,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,GAAE,QAAQ,QAAQ,CACf,YAAY,+CAA+C,CAC3D,eAAe,mBAAmB,8BAA8B,CAChE,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,SAA8D;AAC3E,QAAM,eAAe;GACnB,QAAQ,KAAK;GACb,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;;AAGN,SAAS,6BAA6B,SAAwB;AAC5D,SACG,QAAQ,yBAAyB,CACjC,YAAY,2EAA2E,CACvF,eAAe,eAAe,eAAe,CAC7C,OAAO,yBAAyB,0BAA0B,MAAM,CAChE,OAAO,iBAAiB,iDAAiD,CACzE,OAAO,UAAU,6CAA6C,CAC9D,OACC,OACE,OACA,SACG;AACH,QAAM,iBAAiB;GACrB;GACA,IAAI,KAAK;GACT,GAAI,KAAK,aAAa,SAAY,EAAE,UAAU,KAAK,UAAU,GAAG,EAAE;GAClE,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GAEL;;AAGL,SAAS,6BAA6B,SAAwB;AAC5D,SACG,QAAQ,yBAAyB,CACjC,YAAY,gEAAgE,CAC5E,OAAO,gBAAgB,qEAAqE,CAC5F,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,OAAe,SAA2C;AACvE,QAAM,iBAAiB;GACrB;GACA,GAAI,KAAK,QAAQ,SAAY,EAAE,KAAK,KAAK,KAAK,GAAG,EAAE;GACnD,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;;AAGN,SAAS,sBAAsB,SAAwB;CACrD,MAAM,IAAI,QACP,QAAQ,QAAQ,CAChB,YAAY,uDAAuD;AACtE,GAAE,QAAQ,SAAS,CAChB,YAAY,iDAAiD,CAC7D,OAAO,UAAU,6CAA6C,CAC9D,QAAQ,SAA6B;AACpC,iBAAe,EAAE,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE,EAAG,CAAC;GAC3E;AACJ,GAAE,QAAQ,qBAAqB,CAC5B,YACC,oFACD,CACA,OAAO,iBAAiB,4BAA4B,CACpD,OAAO,4BAA4B,oCAAoC,CACvE,OAAO,yBAAyB,iDAAiD,CACjF,OACC,0BACA,wEACD,CACA,OAAO,UAAU,6CAA6C,CAC9D,QAEG,UACA,SAYG;AACH,kBAAgB;GACd;GACA,GAAI,KAAK,SAAS,SACd,EACE,MAAM,KAAK,KACR,MAAM,IAAI,CACV,KAAK,MAAM,EAAE,MAAM,CAAC,CACpB,OAAO,QAAQ,EACnB,GACD,EAAE;GACN,GAAI,KAAK,mBAAmB,SACxB,EACE,gBAAgB,KAAK,eAClB,MAAM,IAAI,CACV,KAAK,MAAM,EAAE,MAAM,CAAC,CACpB,OAAO,QAAQ,EACnB,GACD,EAAE;GACN,GAAI,KAAK,eAAe,SAAY,EAAE,YAAY,KAAK,YAAY,GAAG,EAAE;GACxE,GAAI,KAAK,iBAAiB,SAAY,EAAE,cAAc,KAAK,cAAc,GAAG,EAAE;GAC9E,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GAEL;;AAGL,SAAS,0BAA0B,SAAwB;CACzD,MAAM,IAAI,QACP,QAAQ,YAAY,CACpB,YAAY,6DAA6D;AAC5E,GAAE,QAAQ,SAAS,CAChB,YAAY,2BAA2B,CACvC,OAAO,UAAU,6CAA6C,CAC9D,QAAQ,SAA6B;AACpC,qBAAmB,EAAE,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE,EAAG,CAAC;GAC/E;AACJ,GAAE,QAAQ,SAAS,CAChB,YAAY,qDAAqD,CACjE,OAAO,UAAU,6CAA6C,CAC9D,QAAQ,SAA6B;AACpC,qBAAmB,EAAE,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE,EAAG,CAAC;GAC/E;AACJ,GAAE,QAAQ,UAAU,CACjB,YAAY,uCAAuC,CACnD,OAAO,UAAU,6CAA6C,CAC9D,QAAQ,SAA6B;AACpC,sBAAoB,EAAE,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE,EAAG,CAAC;GAChF;AACJ,GAAE,QAAQ,UAAU,CACjB,YAAY,qDAAqD,CACjE,OAAO,UAAU,6CAA6C,CAC9D,QAAQ,SAA6B;AACpC,sBAAoB,EAAE,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE,EAAG,CAAC;GAChF;;AAGN,SAAS,sBAAsB,SAAwB;AAErD,CADc,QAAQ,QAAQ,QAAQ,CAAC,YAAY,4CAA4C,CAE5F,QAAQ,OAAO,CACf,YACC;EACE;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC,KAAK,KAAK,CACb,CACA,OAAO,uBAAuB,gEAAgE,CAC9F,OAAO,mBAAmB,oDAAoD,MAC7E,OAAO,SAAS,GAAG,GAAG,CACvB,CACA,OAAO,kBAAkB,8BAA8B,CACvD,OAAO,sBAAsB,sDAAsD,CACnF,OACC,OAAO,SAKD;AACJ,QAAM,aAAa;GACjB,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,cAAc,SAAY,EAAE,WAAW,KAAK,WAAW,GAAG,EAAE;GACrE,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC7D,CAAC;GAEL;;AAGL,MAAM,CAAC,OAAO,QAAQ;AACpB,SAAQ,OAAO,MAAM,mBAAoB,IAAc,QAAQ,IAAI;AACnE,SAAQ,KAAK,EAAE;EACf"}
+{"version":3,"file":"graphorin.js","names":[],"sources":["../../src/bin/graphorin.ts"],"sourcesContent":["/**\n * `graphorin` CLI entry point. Built into `dist/bin/graphorin.js`\n * with a shebang prepended by `tsdown`; the `package.json` `bin`\n * field points npm at the compiled file.\n *\n * Phase 14a installs three subcommands grouped by lifecycle phase:\n *\n *   Bootstrap:\n *     - graphorin init\n *\n *   Maintenance:\n *     - graphorin migrate\n *\n *   Runtime:\n *     - graphorin start\n *\n * Phase 15 extends this binary with the full operator surface\n * (`doctor`, `token`, `secrets`, `audit`, `storage`, `memory`,\n * `consolidator`, `triggers`, `auth`, `pricing`, `skills`, `traces`,\n * `migrate-export`, `migrate-config`, `guard`, `telemetry`,\n * `tools lint`).\n *\n * `GRAPHORIN_OFFLINE=1` is honoured by every subcommand - the v0.1\n * surface never makes implicit network calls. Phase 15 commands that\n * do touch the network (e.g. `graphorin pricing refresh`) consult\n * the same flag through the helper in `../internal/offline.ts`.\n *\n * @packageDocumentation\n */\n\nimport process from 'node:process';\n\nimport { Command } from 'commander';\n\nimport {\n  runAuditExport,\n  runAuditPrune,\n  runAuditVerify,\n  runAuthList,\n  runAuthLogin,\n  runAuthRefresh,\n  runAuthRevoke,\n  runAuthStatus,\n  runConsolidatorSetTier,\n  runConsolidatorStatus,\n  runConsolidatorStop,\n  runDoctor,\n  runGuardExplain,\n  runGuardStatus,\n  runInit,\n  runMemoryActivity,\n  runMemoryInspect,\n  runMemoryMigrate,\n  runMemoryReview,\n  runMemoryStatus,\n  runMemoryWhy,\n  runMigrate,\n  runMigrateConfig,\n  runMigrateExport,\n  runPricingDiff,\n  runPricingLookup,\n  runPricingMissing,\n  runPricingRefresh,\n  runPricingStatus,\n  runSecretsDelete,\n  runSecretsGet,\n  runSecretsList,\n  runSecretsRef,\n  runSecretsRotate,\n  runSecretsSet,\n  runSkillsAudit,\n  runSkillsInspect,\n  runSkillsInstall,\n  runSkillsMigrateFrontmatter,\n  runStart,\n  runStorageBackup,\n  runStorageCleanupBackups,\n  runStorageEncrypt,\n  runStorageRekey,\n  runStorageStatus,\n  runTelemetryDisable,\n  runTelemetryEnable,\n  runTelemetryInspect,\n  runTelemetryStatus,\n  runTokenCreate,\n  runTokenList,\n  runTokenRekey,\n  runTokenRevoke,\n  runTokenRotate,\n  runTokenVerify,\n  runToolsLint,\n  runTracesPrune,\n  runTracesStatus,\n  runTriggersDisable,\n  runTriggersFire,\n  runTriggersList,\n  runTriggersPrune,\n  runTriggersStatus,\n  VERSION,\n} from '../index.js';\nimport { isOfflineMode } from '../internal/offline.js';\n\nasync function main(): Promise<void> {\n  const program = new Command();\n  program\n    .name('graphorin')\n    .description(\n      [\n        'Operator CLI for the Graphorin framework.',\n        '',\n        'Commands grouped by purpose:',\n        '  Bootstrap:    init, migrate, migrate-config',\n        '  Runtime:      start',\n        '  Diagnostics:  doctor, telemetry, traces, guard',\n        '  Auth:         token, secrets, auth',\n        '  Storage:      storage, audit, memory, consolidator, triggers, migrate-export',\n        '  Catalogue:    pricing, skills, tools',\n        '',\n        'Honours GRAPHORIN_OFFLINE=1 - the v0.1 surface never makes implicit network calls.',\n      ].join('\\n'),\n    )\n    .version(VERSION);\n\n  registerLifecycleCommands(program);\n  registerDoctorCommand(program);\n  registerTokenCommands(program);\n  registerSecretsCommands(program);\n  registerStorageCommands(program);\n  registerAuditCommands(program);\n  registerMemoryCommands(program);\n  registerConsolidatorCommands(program);\n  registerTriggersCommands(program);\n  registerAuthCommands(program);\n  registerPricingCommands(program);\n  registerSkillsCommands(program);\n  registerTracesCommands(program);\n  registerMigrateExportCommand(program);\n  registerMigrateConfigCommand(program);\n  registerGuardCommands(program);\n  registerTelemetryCommands(program);\n  registerToolsCommands(program);\n\n  await program.parseAsync(process.argv);\n}\n\nfunction registerLifecycleCommands(program: Command): void {\n  program\n    .command('start')\n    .description('[Runtime] Start the @graphorin/server daemon.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file (TS / JS / JSON).')\n    .option('-h, --host <host>', 'Override the configured listen host.')\n    .option('-p, --port <port>', 'Override the configured listen port.', (value) =>\n      Number.parseInt(value, 10),\n    )\n    .option(\n      '--secrets-source <kind>',\n      'Override secrets.source: auto | keyring | encrypted-file | env (DEC-136).',\n    )\n    .option('--strict-secrets', 'Refuse to fall back to a different secrets store (DEC-136).')\n    .action(\n      async (opts: {\n        config?: string;\n        host?: string;\n        port?: number;\n        secretsSource?: 'auto' | 'keyring' | 'encrypted-file' | 'env';\n        strictSecrets?: boolean;\n      }) => {\n        if (isOfflineMode()) {\n          process.stderr.write(\n            '[graphorin/cli] GRAPHORIN_OFFLINE=1 - running with no implicit network calls.\\n',\n          );\n        }\n        await runStart({\n          ...(opts.config !== undefined ? { config: opts.config } : {}),\n          ...(opts.host !== undefined ? { host: opts.host } : {}),\n          ...(opts.port !== undefined ? { port: opts.port } : {}),\n          ...(opts.secretsSource !== undefined ? { secretsSource: opts.secretsSource } : {}),\n          ...(opts.strictSecrets !== undefined ? { strictSecrets: opts.strictSecrets } : {}),\n        });\n      },\n    );\n\n  program\n    .command('init')\n    .description(\n      '[Bootstrap] Generate a fresh graphorin.config.ts and a one-shot bootstrap admin token.',\n    )\n    .option('-o, --out <path>', 'Output path; defaults to ./graphorin.config.ts.')\n    .option('--non-interactive', 'Accept defaults / env vars without prompting.', false)\n    .option(\n      '--cloud-consent <tier>',\n      'Cloud-upload consent tier: public-only | public-and-internal | all-with-warnings.',\n    )\n    .option('--encrypted', 'Enable storage encryption opt-in.')\n    .option('--no-encrypted', 'Disable storage encryption opt-in.')\n    .action(\n      async (opts: {\n        out?: string;\n        nonInteractive?: boolean;\n        cloudConsent?: 'public-only' | 'public-and-internal' | 'all-with-warnings';\n        encrypted?: boolean;\n      }) => {\n        if (isOfflineMode()) {\n          process.stderr.write(\n            '[graphorin/cli] GRAPHORIN_OFFLINE=1 - init never reaches the network.\\n',\n          );\n        }\n        await runInit({\n          ...(opts.out !== undefined ? { out: opts.out } : {}),\n          ...(opts.nonInteractive !== undefined ? { nonInteractive: opts.nonInteractive } : {}),\n          ...(opts.cloudConsent !== undefined ? { cloudConsent: opts.cloudConsent } : {}),\n          ...(opts.encrypted !== undefined ? { encrypted: opts.encrypted } : {}),\n        });\n      },\n    );\n\n  program\n    .command('migrate')\n    .description(\n      '[Maintenance] Apply pending storage migrations against the configured SQLite store.',\n    )\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--target <version>', 'Reserved for the Phase 15 partial-migration runner.')\n    .action(async (opts: { config?: string; target?: string }) => {\n      if (isOfflineMode()) {\n        process.stderr.write(\n          '[graphorin/cli] GRAPHORIN_OFFLINE=1 - migrate is a local-only operation.\\n',\n        );\n      }\n      await runMigrate({\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.target !== undefined ? { target: opts.target } : {}),\n      });\n    });\n}\n\nfunction registerDoctorCommand(program: Command): void {\n  program\n    .command('doctor')\n    .description('[Diagnostics] Health check (perms + secrets + encryption + systemd).')\n    .option('--fix-perms', 'Repair drifted POSIX file modes.')\n    .option('--check-perms', 'Run the file-perms check.')\n    .option('--check-secrets', 'Run the secrets-store check.')\n    .option('--check-encryption', 'Run the audit-encryption check.')\n    .option('--check-systemd', 'Run the systemd-hardening check (Linux only).')\n    .option('--all', 'Run every check.')\n    .option('--json', 'Emit a structured JSON report on stdout.')\n    .action(\n      async (opts: {\n        fixPerms?: boolean;\n        checkPerms?: boolean;\n        checkSecrets?: boolean;\n        checkEncryption?: boolean;\n        checkSystemd?: boolean;\n        all?: boolean;\n        json?: boolean;\n      }) => {\n        await runDoctor({\n          ...(opts.fixPerms !== undefined ? { fixPerms: opts.fixPerms } : {}),\n          ...(opts.checkPerms !== undefined ? { checkPerms: opts.checkPerms } : {}),\n          ...(opts.checkSecrets !== undefined ? { checkSecrets: opts.checkSecrets } : {}),\n          ...(opts.checkEncryption !== undefined ? { checkEncryption: opts.checkEncryption } : {}),\n          ...(opts.checkSystemd !== undefined ? { checkSystemd: opts.checkSystemd } : {}),\n          ...(opts.all !== undefined ? { all: opts.all } : {}),\n          ...(opts.json !== undefined ? { json: opts.json } : {}),\n        });\n      },\n    );\n}\n\nfunction registerTokenCommands(program: Command): void {\n  const token = program.command('token').description('[Auth] Manage server auth tokens.');\n  token\n    .command('create')\n    .description('Mint a new token. Prints the raw value once.')\n    .requiredOption('--scopes <list>', 'Comma-separated scope list.')\n    .option('--label <name>', 'Optional label.')\n    .option('--expires-in <duration>', 'Duration string: 30d, 12h, 90m, 45s.')\n    .option('--env <env>', 'Token environment: live | test.', 'live')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(\n      async (opts: {\n        scopes: string;\n        label?: string;\n        expiresIn?: string;\n        env?: 'live' | 'test';\n        config?: string;\n        json?: boolean;\n      }) => {\n        await runTokenCreate({\n          scopes: opts.scopes\n            .split(',')\n            .map((s) => s.trim())\n            .filter(Boolean),\n          ...(opts.label !== undefined ? { label: opts.label } : {}),\n          ...(opts.expiresIn !== undefined ? { expiresIn: opts.expiresIn } : {}),\n          ...(opts.env !== undefined ? { env: opts.env } : {}),\n          ...(opts.config !== undefined ? { config: opts.config } : {}),\n          ...(opts.json !== undefined ? { json: opts.json } : {}),\n        });\n      },\n    );\n  token\n    .command('list')\n    .description('List token metadata.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--include-revoked', 'Include revoked tokens.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (opts: { config?: string; includeRevoked?: boolean; json?: boolean }) => {\n      await runTokenList({\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.includeRevoked !== undefined ? { includeRevoked: opts.includeRevoked } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  token\n    .command('revoke <id>')\n    .description('Revoke a single token.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (id: string, opts: { config?: string; json?: boolean }) => {\n      await runTokenRevoke({\n        id,\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  token\n    .command('rotate <id>')\n    .description('Revoke + reissue a token with the same scopes.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--env <env>', 'Token environment: live | test.', 'live')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(\n      async (id: string, opts: { config?: string; env?: 'live' | 'test'; json?: boolean }) => {\n        await runTokenRotate({\n          id,\n          ...(opts.config !== undefined ? { config: opts.config } : {}),\n          ...(opts.env !== undefined ? { env: opts.env } : {}),\n          ...(opts.json !== undefined ? { json: opts.json } : {}),\n        });\n      },\n    );\n  token\n    .command('rekey')\n    .description('Re-issue every active token (use after a known compromise).')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--env <env>', 'Token environment: live | test.', 'live')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (opts: { config?: string; env?: 'live' | 'test'; json?: boolean }) => {\n      await runTokenRekey({\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.env !== undefined ? { env: opts.env } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  token\n    .command('verify <token>')\n    .description('Offline checksum verification - never consults the store.')\n    .option('--prefix <prefix>', 'Override the expected token prefix.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action((tok: string, opts: { prefix?: string; json?: boolean }) => {\n      runTokenVerify({\n        token: tok,\n        ...(opts.prefix !== undefined ? { prefix: opts.prefix } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n}\n\nfunction registerSecretsCommands(program: Command): void {\n  const secrets = program\n    .command('secrets')\n    .description('[Auth] Manage secrets in the configured store.');\n  const commonOpts = (cmd: Command): Command =>\n    cmd\n      .option('--secrets-source <kind>', 'auto | keyring | encrypted-file | env (DEC-136).')\n      .option('--strict-secrets', 'Refuse to fall back to a different secrets store.')\n      .option('--json', 'Emit a structured JSON document on stdout.');\n  commonOpts(secrets.command('list').description('List secret metadata.')).action(\n    async (opts: {\n      secretsSource?: 'auto' | 'keyring' | 'encrypted-file' | 'env';\n      strictSecrets?: boolean;\n      json?: boolean;\n    }) => {\n      await runSecretsList({\n        ...(opts.secretsSource !== undefined ? { secretsSource: opts.secretsSource } : {}),\n        ...(opts.strictSecrets !== undefined ? { strictSecrets: opts.strictSecrets } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    },\n  );\n  commonOpts(\n    secrets\n      .command('get <key>')\n      .description('Read a secret. Use --reveal to print the bytes.')\n      .option('--reveal', 'Print the raw value.'),\n  ).action(\n    async (\n      key: string,\n      opts: {\n        secretsSource?: 'auto' | 'keyring' | 'encrypted-file' | 'env';\n        strictSecrets?: boolean;\n        json?: boolean;\n        reveal?: boolean;\n      },\n    ) => {\n      await runSecretsGet({\n        key,\n        ...(opts.secretsSource !== undefined ? { secretsSource: opts.secretsSource } : {}),\n        ...(opts.strictSecrets !== undefined ? { strictSecrets: opts.strictSecrets } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n        ...(opts.reveal !== undefined ? { reveal: opts.reveal } : {}),\n      });\n    },\n  );\n  commonOpts(\n    secrets\n      .command('set <key>')\n      .description('Persist a secret. Pass --value <v> or --from-stdin.')\n      .option('--value <v>', 'Inline value.')\n      .option('--from-stdin', 'Read the value from stdin.'),\n  ).action(\n    async (\n      key: string,\n      opts: {\n        value?: string;\n        fromStdin?: boolean;\n        secretsSource?: 'auto' | 'keyring' | 'encrypted-file' | 'env';\n        strictSecrets?: boolean;\n        json?: boolean;\n      },\n    ) => {\n      await runSecretsSet({\n        key,\n        ...(opts.value !== undefined ? { value: opts.value } : {}),\n        ...(opts.fromStdin !== undefined ? { fromStdin: opts.fromStdin } : {}),\n        ...(opts.secretsSource !== undefined ? { secretsSource: opts.secretsSource } : {}),\n        ...(opts.strictSecrets !== undefined ? { strictSecrets: opts.strictSecrets } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    },\n  );\n  commonOpts(secrets.command('delete <key>').description('Delete a secret.')).action(\n    async (\n      key: string,\n      opts: {\n        secretsSource?: 'auto' | 'keyring' | 'encrypted-file' | 'env';\n        strictSecrets?: boolean;\n        json?: boolean;\n      },\n    ) => {\n      await runSecretsDelete({\n        key,\n        ...(opts.secretsSource !== undefined ? { secretsSource: opts.secretsSource } : {}),\n        ...(opts.strictSecrets !== undefined ? { strictSecrets: opts.strictSecrets } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    },\n  );\n  commonOpts(\n    secrets\n      .command('ref <uri>')\n      .description('Test resolution of a SecretRef URI.')\n      .option('--reveal', 'Include the resolved value in the report.'),\n  ).action(async (uri: string, opts: { reveal?: boolean; json?: boolean }) => {\n    await runSecretsRef({\n      uri,\n      ...(opts.reveal !== undefined ? { reveal: opts.reveal } : {}),\n      ...(opts.json !== undefined ? { json: opts.json } : {}),\n    });\n  });\n  commonOpts(\n    secrets\n      .command('rotate <key>')\n      .description('Replace an existing secret with a fresh value.')\n      .option('--new-value <v>', 'Inline new value.')\n      .option('--from-stdin', 'Read the new value from stdin.'),\n  ).action(\n    async (\n      key: string,\n      opts: {\n        newValue?: string;\n        fromStdin?: boolean;\n        secretsSource?: 'auto' | 'keyring' | 'encrypted-file' | 'env';\n        strictSecrets?: boolean;\n        json?: boolean;\n      },\n    ) => {\n      await runSecretsRotate({\n        key,\n        ...(opts.newValue !== undefined ? { newValue: opts.newValue } : {}),\n        ...(opts.fromStdin !== undefined ? { fromStdin: opts.fromStdin } : {}),\n        ...(opts.secretsSource !== undefined ? { secretsSource: opts.secretsSource } : {}),\n        ...(opts.strictSecrets !== undefined ? { strictSecrets: opts.strictSecrets } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    },\n  );\n}\n\nfunction registerStorageCommands(program: Command): void {\n  const storage = program\n    .command('storage')\n    .description('[Storage] SQLite + encryption-at-rest commands.');\n  storage\n    .command('status')\n    .description('Report current store state + cipher peer availability.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (opts: { config?: string; json?: boolean }) => {\n      await runStorageStatus({\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  storage\n    .command('encrypt')\n    .description(\n      'Encrypt the store. Requires the @graphorin/store-sqlite-encrypted sub-pack (Phase 16).',\n    )\n    .requiredOption('--passphrase-from <ref>', 'SecretRef URI for the new passphrase.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option(\n      '--target-path <path>',\n      'Override the encrypted output path. Default <storage>.encrypted.',\n    )\n    .option(\n      '--swap',\n      'Atomically swap the encrypted output into the storage path; original kept under .bak.<ts>.',\n    )\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(\n      async (opts: {\n        passphraseFrom: string;\n        config?: string;\n        targetPath?: string;\n        swap?: boolean;\n        json?: boolean;\n      }) => {\n        await runStorageEncrypt({\n          passphraseFrom: opts.passphraseFrom,\n          ...(opts.config !== undefined ? { config: opts.config } : {}),\n          ...(opts.targetPath !== undefined ? { targetPath: opts.targetPath } : {}),\n          ...(opts.swap === true ? { swap: true } : {}),\n          ...(opts.json !== undefined ? { json: opts.json } : {}),\n        });\n      },\n    );\n  storage\n    .command('rekey')\n    .description('Rekey an already-encrypted store.')\n    .requiredOption('--old-passphrase-from <ref>', 'SecretRef URI for the existing passphrase.')\n    .requiredOption('--new-passphrase-from <ref>', 'SecretRef URI for the new passphrase.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(\n      async (opts: {\n        oldPassphraseFrom: string;\n        newPassphraseFrom: string;\n        config?: string;\n        json?: boolean;\n      }) => {\n        await runStorageRekey({\n          oldPassphraseFrom: opts.oldPassphraseFrom,\n          newPassphraseFrom: opts.newPassphraseFrom,\n          ...(opts.config !== undefined ? { config: opts.config } : {}),\n          ...(opts.json !== undefined ? { json: opts.json } : {}),\n        });\n      },\n    );\n  storage\n    .command('backup')\n    .description(\n      'Online, consistent copy of the store via the page-level backup API (safe under a live writer; never use VACUUM INTO).',\n    )\n    .argument('<dest>', 'Destination file path for the backup copy.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--overwrite', 'Replace an existing destination file.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(\n      async (dest: string, opts: { config?: string; overwrite?: boolean; json?: boolean }) => {\n        await runStorageBackup({\n          dest,\n          ...(opts.config !== undefined ? { config: opts.config } : {}),\n          ...(opts.overwrite === true ? { overwrite: true } : {}),\n          ...(opts.json !== undefined ? { json: opts.json } : {}),\n        });\n      },\n    );\n  storage\n    .command('cleanup-backups')\n    .description('Drop stale .bak / .tmp.<ts> files left by previous encrypt / rekey runs.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--dry-run', 'Print what would be removed without touching the filesystem.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (opts: { config?: string; dryRun?: boolean; json?: boolean }) => {\n      await runStorageCleanupBackups({\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.dryRun !== undefined ? { dryRun: opts.dryRun } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n}\n\nfunction registerAuditCommands(program: Command): void {\n  const audit = program\n    .command('audit')\n    .description('[Storage] Operate on the encrypted audit log.');\n  audit\n    .command('verify')\n    .description('Replay the chain and report the first broken link (if any).')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (opts: { config?: string; json?: boolean }) => {\n      await runAuditVerify({\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  audit\n    .command('prune')\n    .description('Drop entries older than --before (cutoff is required).')\n    .requiredOption('--before <date>', 'ISO date / epoch ms cutoff.')\n    .option('--retain <n>', 'Minimum number of entries that must survive.', (v) =>\n      Number.parseInt(v, 10),\n    )\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (opts: { before: string; retain?: number; config?: string; json?: boolean }) => {\n      await runAuditPrune({\n        before: opts.before,\n        ...(opts.retain !== undefined ? { retain: opts.retain } : {}),\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  audit\n    .command('export')\n    .description('Stream every audit entry as JSONL into --to.')\n    .requiredOption('--to <file>', 'Output path.')\n    .option('--from-seq <n>', 'Lower bound (inclusive).', (v) => Number.parseInt(v, 10))\n    .option('--to-seq <n>', 'Upper bound (inclusive).', (v) => Number.parseInt(v, 10))\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(\n      async (opts: {\n        to: string;\n        fromSeq?: number;\n        toSeq?: number;\n        config?: string;\n        json?: boolean;\n      }) => {\n        await runAuditExport({\n          to: opts.to,\n          ...(opts.fromSeq !== undefined ? { fromSeq: opts.fromSeq } : {}),\n          ...(opts.toSeq !== undefined ? { toSeq: opts.toSeq } : {}),\n          ...(opts.config !== undefined ? { config: opts.config } : {}),\n          ...(opts.json !== undefined ? { json: opts.json } : {}),\n        });\n      },\n    );\n}\n\nfunction registerMemoryCommands(program: Command): void {\n  const memory = program\n    .command('memory')\n    .description('[Storage] Long-term memory operator commands.');\n  memory\n    .command('status')\n    .description('Report counts + active embedder + migration state.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (opts: { config?: string; json?: boolean }) => {\n      await runMemoryStatus({\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  memory\n    .command('migrate')\n    .description('Embedder swap. Requires --embedders module that exports the factories.')\n    .requiredOption('--from <id>', 'Source embedder id.')\n    .requiredOption('--to <id>', 'Target embedder id.')\n    .requiredOption('--strategy <s>', 'lock-on-first | auto-migrate | multi-active.')\n    .option('--embedders <path>', 'Path to a module exporting embedder factories.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .action(\n      async (opts: {\n        from: string;\n        to: string;\n        strategy: string;\n        embedders?: string;\n        config?: string;\n      }) => {\n        await runMemoryMigrate({\n          from: opts.from,\n          to: opts.to,\n          strategy: opts.strategy as 'lock-on-first' | 'auto-migrate' | 'multi-active',\n          ...(opts.embedders !== undefined ? { embeddersModule: opts.embedders } : {}),\n          ...(opts.config !== undefined ? { config: opts.config } : {}),\n        });\n      },\n    );\n  memory\n    .command('inspect')\n    .description('Inspect one fact: supersede chain, quarantine, conflicts, citing insights.')\n    .argument('<factId>', 'Id of the fact to inspect.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (factId: string, opts: { config?: string; json?: boolean }) => {\n      await runMemoryInspect({\n        factId,\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  memory\n    .command('activity')\n    .description('Store-wide consolidator / reflection activity: quarantine, history, conflicts.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--limit <n>', 'Cap on recent history / conflict rows (default 20).')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (opts: { config?: string; limit?: string; json?: boolean }) => {\n      const limit = opts.limit !== undefined ? Number.parseInt(opts.limit, 10) : undefined;\n      await runMemoryActivity({\n        ...(limit !== undefined && Number.isFinite(limit) ? { limit } : {}),\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  memory\n    .command('why')\n    .description(\n      'Explain why facts were recalled (ranking signals) from the persisted recall spans.',\n    )\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--session <id>', \"Restrict to one session's recall spans.\")\n    .option('--limit <n>', 'Cap on the most-recent recall spans (default 5).')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (opts: { config?: string; session?: string; limit?: string; json?: boolean }) => {\n      const limit = opts.limit !== undefined ? Number.parseInt(opts.limit, 10) : undefined;\n      await runMemoryWhy({\n        ...(opts.session !== undefined ? { sessionId: opts.session } : {}),\n        ...(limit !== undefined && Number.isFinite(limit) ? { limit } : {}),\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  memory\n    .command('review')\n    .description('List quarantined memory by tier, or promote a reviewed item with --promote.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--limit <n>', 'Cap on rows listed per type (default 20).')\n    .option('--promote <id>', 'Promote this quarantined memory id out of quarantine.')\n    .option('--reason <text>', 'Audit reason recorded with the promotion.')\n    .option('--force', 'Override the injection-refusal gate (operator action, after review).')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(\n      async (opts: {\n        config?: string;\n        limit?: string;\n        promote?: string;\n        reason?: string;\n        force?: boolean;\n        json?: boolean;\n      }) => {\n        const limit = opts.limit !== undefined ? Number.parseInt(opts.limit, 10) : undefined;\n        await runMemoryReview({\n          ...(limit !== undefined && Number.isFinite(limit) ? { limit } : {}),\n          ...(opts.promote !== undefined ? { promote: opts.promote } : {}),\n          ...(opts.reason !== undefined ? { reason: opts.reason } : {}),\n          ...(opts.force !== undefined ? { force: opts.force } : {}),\n          ...(opts.config !== undefined ? { config: opts.config } : {}),\n          ...(opts.json !== undefined ? { json: opts.json } : {}),\n        });\n      },\n    );\n}\n\nfunction registerConsolidatorCommands(program: Command): void {\n  const c = program\n    .command('consolidator')\n    .description('[Storage] Inspect and steer the memory consolidator.');\n  c.command('status')\n    .description('Current tier hint + DLQ size + recent run history.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (opts: { config?: string; json?: boolean }) => {\n      await runConsolidatorStatus({\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  c.command('set-tier <tier>')\n    .description('Persist a tier hint (free | cheap | standard | full | custom).')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (tier: string, opts: { config?: string; json?: boolean }) => {\n      await runConsolidatorSetTier({\n        tier: tier as 'free' | 'cheap' | 'standard' | 'full' | 'custom',\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  c.command('stop')\n    .description('Persist a pause flag the running daemon honours.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (opts: { config?: string; json?: boolean }) => {\n      await runConsolidatorStop({\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n}\n\nfunction registerTriggersCommands(program: Command): void {\n  const t = program\n    .command('triggers')\n    .description('[Storage] Operate on the durable trigger registry.');\n  t.command('list')\n    .description('Every persisted trigger.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (opts: { config?: string; json?: boolean }) => {\n      await runTriggersList({\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  t.command('status <id>')\n    .description('Single-trigger detail.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (id: string, opts: { config?: string; json?: boolean }) => {\n      await runTriggersStatus({\n        id,\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  t.command('fire <id>')\n    .description('Operator-fired side-effect (admin only).')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (id: string, opts: { config?: string; json?: boolean }) => {\n      await runTriggersFire({\n        id,\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  t.command('disable <id>')\n    .description('Flip the disabled column on the registry row.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (id: string, opts: { config?: string; json?: boolean }) => {\n      await runTriggersDisable({\n        id,\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  t.command('prune')\n    .description('Drop disabled triggers older than --before.')\n    .option(\n      '--before <date>',\n      'ISO date / epoch ms cutoff. Defaults to 0 (drop every disabled row).',\n    )\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (opts: { before?: string; config?: string; json?: boolean }) => {\n      await runTriggersPrune({\n        ...(opts.before !== undefined ? { before: opts.before } : {}),\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n}\n\nfunction registerAuthCommands(program: Command): void {\n  const a = program.command('auth').description('[Auth] Outbound OAuth (e.g. for MCP servers).');\n  a.command('login')\n    .description('Drive an interactive login flow.')\n    .requiredOption('--server <url>', 'Authorization server URL.')\n    .option('--server-id <id>', 'Override the persisted server identifier.')\n    .option('--scope <scope>', 'OAuth scope.')\n    .option('--device-flow', 'Use the Device Authorization Grant.')\n    .option('--client-id <id>', 'Pre-existing client identifier (skip DCR).')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .action(\n      async (opts: {\n        server: string;\n        serverId?: string;\n        scope?: string;\n        deviceFlow?: boolean;\n        clientId?: string;\n        config?: string;\n      }) => {\n        await runAuthLogin({\n          serverUrl: opts.server,\n          ...(opts.serverId !== undefined ? { serverId: opts.serverId } : {}),\n          ...(opts.scope !== undefined ? { scope: opts.scope } : {}),\n          ...(opts.deviceFlow !== undefined ? { deviceFlow: opts.deviceFlow } : {}),\n          ...(opts.clientId !== undefined ? { clientId: opts.clientId } : {}),\n          ...(opts.config !== undefined ? { config: opts.config } : {}),\n        });\n      },\n    );\n  a.command('list')\n    .description('List persisted OAuth sessions.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (opts: { config?: string; json?: boolean }) => {\n      await runAuthList({\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  a.command('refresh <id>')\n    .description('Refresh a session.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .action(async (id: string, opts: { config?: string }) => {\n      await runAuthRefresh({\n        id,\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n      });\n    });\n  a.command('revoke <id>')\n    .description('Revoke a session.')\n    .option('--reason <text>', 'Optional reason persisted in the audit log.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .action(async (id: string, opts: { reason?: string; config?: string }) => {\n      await runAuthRevoke({\n        id,\n        ...(opts.reason !== undefined ? { reason: opts.reason } : {}),\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n      });\n    });\n  a.command('status')\n    .description('OAuth subsystem snapshot.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (opts: { config?: string; json?: boolean }) => {\n      await runAuthStatus({\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n}\n\nfunction registerPricingCommands(program: Command): void {\n  const p = program.command('pricing').description('[Catalogue] Bundled LLM pricing snapshot.');\n  p.command('status')\n    .description('Show bundled snapshot version + entry count + digest.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action((opts: { json?: boolean }) => {\n      runPricingStatus({ ...(opts.json !== undefined ? { json: opts.json } : {}) });\n    });\n  p.command('refresh')\n    .description('Pull a fresh snapshot from --url (network).')\n    .requiredOption('--url <url>', 'Snapshot URL.')\n    .option('--out <file>', 'Optional path to write the refreshed snapshot to.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (opts: { url: string; out?: string; json?: boolean }) => {\n      await runPricingRefresh({\n        url: opts.url,\n        ...(opts.out !== undefined ? { out: opts.out } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  p.command('diff')\n    .description('Diff a supplied snapshot against the bundled one.')\n    .requiredOption('--snapshot <file>', 'JSON file containing a PricingSnapshot.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (opts: { snapshot: string; json?: boolean }) => {\n      await runPricingDiff({\n        snapshot: opts.snapshot,\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  p.command('lookup')\n    .description('Print the per-token price for a single (provider, model) pair.')\n    .requiredOption('--provider <name>', 'Provider id.')\n    .requiredOption('--model <id>', 'Model id.')\n    .option('--region <region>', 'Optional region.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action((opts: { provider: string; model: string; region?: string; json?: boolean }) => {\n      runPricingLookup({\n        provider: opts.provider,\n        model: opts.model,\n        ...(opts.region !== undefined ? { region: opts.region } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  p.command('missing')\n    .description('Report (provider, model) pairs absent from the bundled snapshot.')\n    .requiredOption('--spans <file>', 'JSON file containing trace spans (array of { attributes }).')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (opts: { spans: string; json?: boolean }) => {\n      await runPricingMissing({\n        spans: opts.spans,\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n}\n\nfunction registerSkillsCommands(program: Command): void {\n  const s = program\n    .command('skills')\n    .description('[Catalogue] Manage operator-managed skill packages.');\n  s.command('install <source>')\n    .description('Install a skill from npm:<name>[@version] or git:<url>.')\n    .option('--version <version>', 'npm version pin.')\n    .option('--ref <ref>', 'git ref (branch / tag / sha).')\n    .option('--trust-level <level>', 'trusted | trusted-with-scripts | untrusted.')\n    .option('--cwd <dir>', 'Working directory for npm installs.')\n    .option('--dry-run', 'Skip the install; run the policy + audit pipeline only.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(\n      async (\n        source: string,\n        opts: {\n          version?: string;\n          ref?: string;\n          trustLevel?: 'trusted' | 'trusted-with-scripts' | 'untrusted';\n          cwd?: string;\n          dryRun?: boolean;\n          json?: boolean;\n        },\n      ) => {\n        await runSkillsInstall({\n          source,\n          ...(opts.version !== undefined ? { version: opts.version } : {}),\n          ...(opts.ref !== undefined ? { ref: opts.ref } : {}),\n          ...(opts.trustLevel !== undefined ? { trustLevel: opts.trustLevel } : {}),\n          ...(opts.cwd !== undefined ? { cwd: opts.cwd } : {}),\n          ...(opts.dryRun !== undefined ? { dryRun: opts.dryRun } : {}),\n          ...(opts.json !== undefined ? { json: opts.json } : {}),\n        });\n      },\n    );\n  s.command('inspect <name>')\n    .description('Print a single recorded installation.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (name: string, opts: { json?: boolean }) => {\n      await runSkillsInspect({\n        name,\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  s.command('audit')\n    .description('Audit every recorded installation in this process.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action((opts: { json?: boolean }) => {\n      runSkillsAudit({ ...(opts.json !== undefined ? { json: opts.json } : {}) });\n    });\n  s.command('migrate-frontmatter')\n    .description(\n      'Migrate legacy graphorin-* frontmatter fields onto upstream equivalents (DEC-156).',\n    )\n    .option('--path <dir>', 'Directory to walk. Defaults to cwd.')\n    .option('--recursive', 'Walk subdirectories.')\n    .option('--apply', 'Actually rewrite files (default: dry-run).')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(\n      async (opts: { path?: string; recursive?: boolean; apply?: boolean; json?: boolean }) => {\n        await runSkillsMigrateFrontmatter({\n          ...(opts.path !== undefined ? { path: opts.path } : {}),\n          ...(opts.recursive !== undefined ? { recursive: opts.recursive } : {}),\n          ...(opts.apply !== undefined ? { apply: opts.apply } : {}),\n          ...(opts.json !== undefined ? { json: opts.json } : {}),\n        });\n      },\n    );\n}\n\nfunction registerTracesCommands(program: Command): void {\n  const t = program.command('traces').description('[Diagnostics] Operate on the trace cache.');\n  t.command('status')\n    .description('Count rows + report TTL config.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (opts: { config?: string; json?: boolean }) => {\n      await runTracesStatus({\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n  t.command('prune')\n    .description('Manual TTL enforcement (cutoff is required).')\n    .requiredOption('--before <date>', 'ISO date / epoch ms cutoff.')\n    .option('-c, --config <path>', 'Path to the graphorin.config file.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (opts: { before: string; config?: string; json?: boolean }) => {\n      await runTracesPrune({\n        before: opts.before,\n        ...(opts.config !== undefined ? { config: opts.config } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n}\n\nfunction registerMigrateExportCommand(program: Command): void {\n  program\n    .command('migrate-export <input>')\n    .description('[Storage] Migrate a session export file to the current schema (DEC-155).')\n    .requiredOption('--to <file>', 'Output path.')\n    .option('--to-schema <version>', 'Target schema version.', '1.0')\n    .option('--writer <id>', 'Writer identifier surfaced on the meta header.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(\n      async (\n        input: string,\n        opts: { to: string; toSchema?: string; writer?: string; json?: boolean },\n      ) => {\n        await runMigrateExport({\n          input,\n          to: opts.to,\n          ...(opts.toSchema !== undefined ? { toSchema: opts.toSchema } : {}),\n          ...(opts.writer !== undefined ? { writer: opts.writer } : {}),\n          ...(opts.json !== undefined ? { json: opts.json } : {}),\n        });\n      },\n    );\n}\n\nfunction registerMigrateConfigCommand(program: Command): void {\n  program\n    .command('migrate-config <input>')\n    .description('[Bootstrap] Migrate an old config file to the current schema.')\n    .option('--out <file>', 'Output path. Defaults to <input>.migrated.json next to the source.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(async (input: string, opts: { out?: string; json?: boolean }) => {\n      await runMigrateConfig({\n        input,\n        ...(opts.out !== undefined ? { out: opts.out } : {}),\n        ...(opts.json !== undefined ? { json: opts.json } : {}),\n      });\n    });\n}\n\nfunction registerGuardCommands(program: Command): void {\n  const g = program\n    .command('guard')\n    .description('[Diagnostics] Inspect the memory-modification guard.');\n  g.command('status')\n    .description('Print the four guard tiers and their variants.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action((opts: { json?: boolean }) => {\n      runGuardStatus({ ...(opts.json !== undefined ? { json: opts.json } : {}) });\n    });\n  g.command('explain <toolName>')\n    .description(\n      'Derive the tier the classifier would assign to a tool with the supplied metadata.',\n    )\n    .option('--tags <list>', 'Comma-separated tag list.')\n    .option('--secrets-allowed <list>', 'Comma-separated secret allowlist.')\n    .option('--trust-level <level>', 'built-in | user-defined | trusted | untrusted.')\n    .option(\n      '--explicit-tier <tier>',\n      'pure | side-effecting-no-memory | memory-aware | unknown | untrusted.',\n    )\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action(\n      (\n        toolName: string,\n        opts: {\n          tags?: string;\n          secretsAllowed?: string;\n          trustLevel?: 'built-in' | 'user-defined' | 'trusted' | 'untrusted';\n          explicitTier?:\n            | 'pure'\n            | 'side-effecting-no-memory'\n            | 'memory-aware'\n            | 'unknown'\n            | 'untrusted';\n          json?: boolean;\n        },\n      ) => {\n        runGuardExplain({\n          toolName,\n          ...(opts.tags !== undefined\n            ? {\n                tags: opts.tags\n                  .split(',')\n                  .map((s) => s.trim())\n                  .filter(Boolean),\n              }\n            : {}),\n          ...(opts.secretsAllowed !== undefined\n            ? {\n                secretsAllowed: opts.secretsAllowed\n                  .split(',')\n                  .map((s) => s.trim())\n                  .filter(Boolean),\n              }\n            : {}),\n          ...(opts.trustLevel !== undefined ? { trustLevel: opts.trustLevel } : {}),\n          ...(opts.explicitTier !== undefined ? { explicitTier: opts.explicitTier } : {}),\n          ...(opts.json !== undefined ? { json: opts.json } : {}),\n        });\n      },\n    );\n}\n\nfunction registerTelemetryCommands(program: Command): void {\n  const t = program\n    .command('telemetry')\n    .description('[Diagnostics] Telemetry policy (zero-default per ADR-041).');\n  t.command('status')\n    .description('Always reports disabled.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action((opts: { json?: boolean }) => {\n      runTelemetryStatus({ ...(opts.json !== undefined ? { json: opts.json } : {}) });\n    });\n  t.command('enable')\n    .description('Refuses; opt-in collector is on the v0.2+ roadmap.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action((opts: { json?: boolean }) => {\n      runTelemetryEnable({ ...(opts.json !== undefined ? { json: opts.json } : {}) });\n    });\n  t.command('disable')\n    .description('No-op; telemetry is always disabled.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action((opts: { json?: boolean }) => {\n      runTelemetryDisable({ ...(opts.json !== undefined ? { json: opts.json } : {}) });\n    });\n  t.command('inspect')\n    .description('Informational summary of the zero-default promise.')\n    .option('--json', 'Emit a structured JSON document on stdout.')\n    .action((opts: { json?: boolean }) => {\n      runTelemetryInspect({ ...(opts.json !== undefined ? { json: opts.json } : {}) });\n    });\n}\n\nfunction registerToolsCommands(program: Command): void {\n  const tools = program.command('tools').description('[Catalogue] Operate on the tool registry.');\n  tools\n    .command('lint')\n    .description(\n      [\n        'Static AST analysis of every tool({...}) registration; per-tool grader + threshold gate (RB-49).',\n        '',\n        'Grader rubric (40 + 30 + 30 = 100 points):',\n        '  description axis (0..40): 0 if missing/placeholder/<20 chars; 16/24/32/40 by length.',\n        '  examples axis    (0..30): 0 if none or >5; 12 base + 6 per additional, cap 30; -6 per PII.',\n        '  parameter naming (0..30): 30 base; -30/N per ambiguous name; -10/N per numeric suffix.',\n        '',\n        'Exit codes (CI-friendly):',\n        '  0  every tool meets or exceeds --threshold.',\n        '  1  at least one tool falls below --threshold.',\n        '  2  invocation could not start (config missing, walker failed).',\n      ].join('\\n'),\n    )\n    .option('-c, --config <path>', 'Optional tsconfig.json whose include overrides the file glob.')\n    .option('--threshold <n>', 'Minimum acceptable per-tool score (default 60).', (v) =>\n      Number.parseInt(v, 10),\n    )\n    .option('--format <fmt>', 'text | json (default text).')\n    .option('--source <pattern>', 'File glob override (e.g. src/skills/**/tools/*.ts).')\n    .action(\n      async (opts: {\n        config?: string;\n        threshold?: number;\n        format?: 'text' | 'json';\n        source?: string;\n      }) => {\n        await runToolsLint({\n          ...(opts.config !== undefined ? { config: opts.config } : {}),\n          ...(opts.threshold !== undefined ? { threshold: opts.threshold } : {}),\n          ...(opts.format !== undefined ? { format: opts.format } : {}),\n          ...(opts.source !== undefined ? { source: opts.source } : {}),\n        });\n      },\n    );\n}\n\nmain().catch((err) => {\n  process.stderr.write(`[graphorin/cli] ${(err as Error).message}\\n`);\n  process.exit(1);\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsGA,eAAe,OAAsB;CACnC,MAAM,UAAU,IAAI,SAAS;AAC7B,SACG,KAAK,YAAY,CACjB,YACC;EACE;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC,KAAK,KAAK,CACb,CACA,QAAQ,QAAQ;AAEnB,2BAA0B,QAAQ;AAClC,uBAAsB,QAAQ;AAC9B,uBAAsB,QAAQ;AAC9B,yBAAwB,QAAQ;AAChC,yBAAwB,QAAQ;AAChC,uBAAsB,QAAQ;AAC9B,wBAAuB,QAAQ;AAC/B,8BAA6B,QAAQ;AACrC,0BAAyB,QAAQ;AACjC,sBAAqB,QAAQ;AAC7B,yBAAwB,QAAQ;AAChC,wBAAuB,QAAQ;AAC/B,wBAAuB,QAAQ;AAC/B,8BAA6B,QAAQ;AACrC,8BAA6B,QAAQ;AACrC,uBAAsB,QAAQ;AAC9B,2BAA0B,QAAQ;AAClC,uBAAsB,QAAQ;AAE9B,OAAM,QAAQ,WAAW,QAAQ,KAAK;;AAGxC,SAAS,0BAA0B,SAAwB;AACzD,SACG,QAAQ,QAAQ,CAChB,YAAY,gDAAgD,CAC5D,OAAO,uBAAuB,sDAAsD,CACpF,OAAO,qBAAqB,uCAAuC,CACnE,OAAO,qBAAqB,yCAAyC,UACpE,OAAO,SAAS,OAAO,GAAG,CAC3B,CACA,OACC,2BACA,4EACD,CACA,OAAO,oBAAoB,8DAA8D,CACzF,OACC,OAAO,SAMD;AACJ,MAAI,eAAe,CACjB,SAAQ,OAAO,MACb,kFACD;AAEH,QAAM,SAAS;GACb,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACtD,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACtD,GAAI,KAAK,kBAAkB,SAAY,EAAE,eAAe,KAAK,eAAe,GAAG,EAAE;GACjF,GAAI,KAAK,kBAAkB,SAAY,EAAE,eAAe,KAAK,eAAe,GAAG,EAAE;GAClF,CAAC;GAEL;AAEH,SACG,QAAQ,OAAO,CACf,YACC,yFACD,CACA,OAAO,oBAAoB,kDAAkD,CAC7E,OAAO,qBAAqB,iDAAiD,MAAM,CACnF,OACC,0BACA,oFACD,CACA,OAAO,eAAe,oCAAoC,CAC1D,OAAO,kBAAkB,qCAAqC,CAC9D,OACC,OAAO,SAKD;AACJ,MAAI,eAAe,CACjB,SAAQ,OAAO,MACb,0EACD;AAEH,QAAM,QAAQ;GACZ,GAAI,KAAK,QAAQ,SAAY,EAAE,KAAK,KAAK,KAAK,GAAG,EAAE;GACnD,GAAI,KAAK,mBAAmB,SAAY,EAAE,gBAAgB,KAAK,gBAAgB,GAAG,EAAE;GACpF,GAAI,KAAK,iBAAiB,SAAY,EAAE,cAAc,KAAK,cAAc,GAAG,EAAE;GAC9E,GAAI,KAAK,cAAc,SAAY,EAAE,WAAW,KAAK,WAAW,GAAG,EAAE;GACtE,CAAC;GAEL;AAEH,SACG,QAAQ,UAAU,CAClB,YACC,sFACD,CACA,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,sBAAsB,sDAAsD,CACnF,OAAO,OAAO,SAA+C;AAC5D,MAAI,eAAe,CACjB,SAAQ,OAAO,MACb,6EACD;AAEH,QAAM,WAAW;GACf,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC7D,CAAC;GACF;;AAGN,SAAS,sBAAsB,SAAwB;AACrD,SACG,QAAQ,SAAS,CACjB,YAAY,uEAAuE,CACnF,OAAO,eAAe,mCAAmC,CACzD,OAAO,iBAAiB,4BAA4B,CACpD,OAAO,mBAAmB,+BAA+B,CACzD,OAAO,sBAAsB,kCAAkC,CAC/D,OAAO,mBAAmB,gDAAgD,CAC1E,OAAO,SAAS,mBAAmB,CACnC,OAAO,UAAU,2CAA2C,CAC5D,OACC,OAAO,SAQD;AACJ,QAAM,UAAU;GACd,GAAI,KAAK,aAAa,SAAY,EAAE,UAAU,KAAK,UAAU,GAAG,EAAE;GAClE,GAAI,KAAK,eAAe,SAAY,EAAE,YAAY,KAAK,YAAY,GAAG,EAAE;GACxE,GAAI,KAAK,iBAAiB,SAAY,EAAE,cAAc,KAAK,cAAc,GAAG,EAAE;GAC9E,GAAI,KAAK,oBAAoB,SAAY,EAAE,iBAAiB,KAAK,iBAAiB,GAAG,EAAE;GACvF,GAAI,KAAK,iBAAiB,SAAY,EAAE,cAAc,KAAK,cAAc,GAAG,EAAE;GAC9E,GAAI,KAAK,QAAQ,SAAY,EAAE,KAAK,KAAK,KAAK,GAAG,EAAE;GACnD,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GAEL;;AAGL,SAAS,sBAAsB,SAAwB;CACrD,MAAM,QAAQ,QAAQ,QAAQ,QAAQ,CAAC,YAAY,oCAAoC;AACvF,OACG,QAAQ,SAAS,CACjB,YAAY,+CAA+C,CAC3D,eAAe,mBAAmB,8BAA8B,CAChE,OAAO,kBAAkB,kBAAkB,CAC3C,OAAO,2BAA2B,uCAAuC,CACzE,OAAO,eAAe,mCAAmC,OAAO,CAChE,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,UAAU,6CAA6C,CAC9D,OACC,OAAO,SAOD;AACJ,QAAM,eAAe;GACnB,QAAQ,KAAK,OACV,MAAM,IAAI,CACV,KAAK,MAAM,EAAE,MAAM,CAAC,CACpB,OAAO,QAAQ;GAClB,GAAI,KAAK,UAAU,SAAY,EAAE,OAAO,KAAK,OAAO,GAAG,EAAE;GACzD,GAAI,KAAK,cAAc,SAAY,EAAE,WAAW,KAAK,WAAW,GAAG,EAAE;GACrE,GAAI,KAAK,QAAQ,SAAY,EAAE,KAAK,KAAK,KAAK,GAAG,EAAE;GACnD,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GAEL;AACH,OACG,QAAQ,OAAO,CACf,YAAY,uBAAuB,CACnC,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,qBAAqB,0BAA0B,CACtD,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,SAAwE;AACrF,QAAM,aAAa;GACjB,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,mBAAmB,SAAY,EAAE,gBAAgB,KAAK,gBAAgB,GAAG,EAAE;GACpF,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,OACG,QAAQ,cAAc,CACtB,YAAY,yBAAyB,CACrC,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,IAAY,SAA8C;AACvE,QAAM,eAAe;GACnB;GACA,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,OACG,QAAQ,cAAc,CACtB,YAAY,iDAAiD,CAC7D,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,eAAe,mCAAmC,OAAO,CAChE,OAAO,UAAU,6CAA6C,CAC9D,OACC,OAAO,IAAY,SAAqE;AACtF,QAAM,eAAe;GACnB;GACA,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,QAAQ,SAAY,EAAE,KAAK,KAAK,KAAK,GAAG,EAAE;GACnD,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GAEL;AACH,OACG,QAAQ,QAAQ,CAChB,YAAY,8DAA8D,CAC1E,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,eAAe,mCAAmC,OAAO,CAChE,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,SAAqE;AAClF,QAAM,cAAc;GAClB,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,QAAQ,SAAY,EAAE,KAAK,KAAK,KAAK,GAAG,EAAE;GACnD,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,OACG,QAAQ,iBAAiB,CACzB,YAAY,4DAA4D,CACxE,OAAO,qBAAqB,sCAAsC,CAClE,OAAO,UAAU,6CAA6C,CAC9D,QAAQ,KAAa,SAA8C;AAClE,iBAAe;GACb,OAAO;GACP,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;;AAGN,SAAS,wBAAwB,SAAwB;CACvD,MAAM,UAAU,QACb,QAAQ,UAAU,CAClB,YAAY,iDAAiD;CAChE,MAAM,cAAc,QAClB,IACG,OAAO,2BAA2B,mDAAmD,CACrF,OAAO,oBAAoB,oDAAoD,CAC/E,OAAO,UAAU,6CAA6C;AACnE,YAAW,QAAQ,QAAQ,OAAO,CAAC,YAAY,wBAAwB,CAAC,CAAC,OACvE,OAAO,SAID;AACJ,QAAM,eAAe;GACnB,GAAI,KAAK,kBAAkB,SAAY,EAAE,eAAe,KAAK,eAAe,GAAG,EAAE;GACjF,GAAI,KAAK,kBAAkB,SAAY,EAAE,eAAe,KAAK,eAAe,GAAG,EAAE;GACjF,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GAEL;AACD,YACE,QACG,QAAQ,YAAY,CACpB,YAAY,kDAAkD,CAC9D,OAAO,YAAY,uBAAuB,CAC9C,CAAC,OACA,OACE,KACA,SAMG;AACH,QAAM,cAAc;GAClB;GACA,GAAI,KAAK,kBAAkB,SAAY,EAAE,eAAe,KAAK,eAAe,GAAG,EAAE;GACjF,GAAI,KAAK,kBAAkB,SAAY,EAAE,eAAe,KAAK,eAAe,GAAG,EAAE;GACjF,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACtD,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC7D,CAAC;GAEL;AACD,YACE,QACG,QAAQ,YAAY,CACpB,YAAY,sDAAsD,CAClE,OAAO,eAAe,gBAAgB,CACtC,OAAO,gBAAgB,6BAA6B,CACxD,CAAC,OACA,OACE,KACA,SAOG;AACH,QAAM,cAAc;GAClB;GACA,GAAI,KAAK,UAAU,SAAY,EAAE,OAAO,KAAK,OAAO,GAAG,EAAE;GACzD,GAAI,KAAK,cAAc,SAAY,EAAE,WAAW,KAAK,WAAW,GAAG,EAAE;GACrE,GAAI,KAAK,kBAAkB,SAAY,EAAE,eAAe,KAAK,eAAe,GAAG,EAAE;GACjF,GAAI,KAAK,kBAAkB,SAAY,EAAE,eAAe,KAAK,eAAe,GAAG,EAAE;GACjF,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GAEL;AACD,YAAW,QAAQ,QAAQ,eAAe,CAAC,YAAY,mBAAmB,CAAC,CAAC,OAC1E,OACE,KACA,SAKG;AACH,QAAM,iBAAiB;GACrB;GACA,GAAI,KAAK,kBAAkB,SAAY,EAAE,eAAe,KAAK,eAAe,GAAG,EAAE;GACjF,GAAI,KAAK,kBAAkB,SAAY,EAAE,eAAe,KAAK,eAAe,GAAG,EAAE;GACjF,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GAEL;AACD,YACE,QACG,QAAQ,YAAY,CACpB,YAAY,sCAAsC,CAClD,OAAO,YAAY,4CAA4C,CACnE,CAAC,OAAO,OAAO,KAAa,SAA+C;AAC1E,QAAM,cAAc;GAClB;GACA,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACF,YACE,QACG,QAAQ,eAAe,CACvB,YAAY,iDAAiD,CAC7D,OAAO,mBAAmB,oBAAoB,CAC9C,OAAO,gBAAgB,iCAAiC,CAC5D,CAAC,OACA,OACE,KACA,SAOG;AACH,QAAM,iBAAiB;GACrB;GACA,GAAI,KAAK,aAAa,SAAY,EAAE,UAAU,KAAK,UAAU,GAAG,EAAE;GAClE,GAAI,KAAK,cAAc,SAAY,EAAE,WAAW,KAAK,WAAW,GAAG,EAAE;GACrE,GAAI,KAAK,kBAAkB,SAAY,EAAE,eAAe,KAAK,eAAe,GAAG,EAAE;GACjF,GAAI,KAAK,kBAAkB,SAAY,EAAE,eAAe,KAAK,eAAe,GAAG,EAAE;GACjF,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GAEL;;AAGH,SAAS,wBAAwB,SAAwB;CACvD,MAAM,UAAU,QACb,QAAQ,UAAU,CAClB,YAAY,kDAAkD;AACjE,SACG,QAAQ,SAAS,CACjB,YAAY,yDAAyD,CACrE,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,SAA8C;AAC3D,QAAM,iBAAiB;GACrB,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,SACG,QAAQ,UAAU,CAClB,YACC,yFACD,CACA,eAAe,2BAA2B,wCAAwC,CAClF,OAAO,uBAAuB,qCAAqC,CACnE,OACC,wBACA,mEACD,CACA,OACC,UACA,6FACD,CACA,OAAO,UAAU,6CAA6C,CAC9D,OACC,OAAO,SAMD;AACJ,QAAM,kBAAkB;GACtB,gBAAgB,KAAK;GACrB,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,eAAe,SAAY,EAAE,YAAY,KAAK,YAAY,GAAG,EAAE;GACxE,GAAI,KAAK,SAAS,OAAO,EAAE,MAAM,MAAM,GAAG,EAAE;GAC5C,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GAEL;AACH,SACG,QAAQ,QAAQ,CAChB,YAAY,oCAAoC,CAChD,eAAe,+BAA+B,6CAA6C,CAC3F,eAAe,+BAA+B,wCAAwC,CACtF,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,UAAU,6CAA6C,CAC9D,OACC,OAAO,SAKD;AACJ,QAAM,gBAAgB;GACpB,mBAAmB,KAAK;GACxB,mBAAmB,KAAK;GACxB,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GAEL;AACH,SACG,QAAQ,SAAS,CACjB,YACC,wHACD,CACA,SAAS,UAAU,6CAA6C,CAChE,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,eAAe,wCAAwC,CAC9D,OAAO,UAAU,6CAA6C,CAC9D,OACC,OAAO,MAAc,SAAmE;AACtF,QAAM,iBAAiB;GACrB;GACA,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,cAAc,OAAO,EAAE,WAAW,MAAM,GAAG,EAAE;GACtD,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GAEL;AACH,SACG,QAAQ,kBAAkB,CAC1B,YAAY,2EAA2E,CACvF,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,aAAa,+DAA+D,CACnF,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,SAAgE;AAC7E,QAAM,yBAAyB;GAC7B,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;;AAGN,SAAS,sBAAsB,SAAwB;CACrD,MAAM,QAAQ,QACX,QAAQ,QAAQ,CAChB,YAAY,gDAAgD;AAC/D,OACG,QAAQ,SAAS,CACjB,YAAY,8DAA8D,CAC1E,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,SAA8C;AAC3D,QAAM,eAAe;GACnB,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,OACG,QAAQ,QAAQ,CAChB,YAAY,yDAAyD,CACrE,eAAe,mBAAmB,8BAA8B,CAChE,OAAO,gBAAgB,iDAAiD,MACvE,OAAO,SAAS,GAAG,GAAG,CACvB,CACA,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,SAA+E;AAC5F,QAAM,cAAc;GAClB,QAAQ,KAAK;GACb,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,OACG,QAAQ,SAAS,CACjB,YAAY,+CAA+C,CAC3D,eAAe,eAAe,eAAe,CAC7C,OAAO,kBAAkB,6BAA6B,MAAM,OAAO,SAAS,GAAG,GAAG,CAAC,CACnF,OAAO,gBAAgB,6BAA6B,MAAM,OAAO,SAAS,GAAG,GAAG,CAAC,CACjF,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,UAAU,6CAA6C,CAC9D,OACC,OAAO,SAMD;AACJ,QAAM,eAAe;GACnB,IAAI,KAAK;GACT,GAAI,KAAK,YAAY,SAAY,EAAE,SAAS,KAAK,SAAS,GAAG,EAAE;GAC/D,GAAI,KAAK,UAAU,SAAY,EAAE,OAAO,KAAK,OAAO,GAAG,EAAE;GACzD,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GAEL;;AAGL,SAAS,uBAAuB,SAAwB;CACtD,MAAM,SAAS,QACZ,QAAQ,SAAS,CACjB,YAAY,gDAAgD;AAC/D,QACG,QAAQ,SAAS,CACjB,YAAY,qDAAqD,CACjE,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,SAA8C;AAC3D,QAAM,gBAAgB;GACpB,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,QACG,QAAQ,UAAU,CAClB,YAAY,yEAAyE,CACrF,eAAe,eAAe,sBAAsB,CACpD,eAAe,aAAa,sBAAsB,CAClD,eAAe,kBAAkB,+CAA+C,CAChF,OAAO,sBAAsB,iDAAiD,CAC9E,OAAO,uBAAuB,qCAAqC,CACnE,OACC,OAAO,SAMD;AACJ,QAAM,iBAAiB;GACrB,MAAM,KAAK;GACX,IAAI,KAAK;GACT,UAAU,KAAK;GACf,GAAI,KAAK,cAAc,SAAY,EAAE,iBAAiB,KAAK,WAAW,GAAG,EAAE;GAC3E,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC7D,CAAC;GAEL;AACH,QACG,QAAQ,UAAU,CAClB,YAAY,6EAA6E,CACzF,SAAS,YAAY,6BAA6B,CAClD,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,QAAgB,SAA8C;AAC3E,QAAM,iBAAiB;GACrB;GACA,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,QACG,QAAQ,WAAW,CACnB,YAAY,iFAAiF,CAC7F,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,eAAe,sDAAsD,CAC5E,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,SAA8D;EAC3E,MAAM,QAAQ,KAAK,UAAU,SAAY,OAAO,SAAS,KAAK,OAAO,GAAG,GAAG;AAC3E,QAAM,kBAAkB;GACtB,GAAI,UAAU,UAAa,OAAO,SAAS,MAAM,GAAG,EAAE,OAAO,GAAG,EAAE;GAClE,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,QACG,QAAQ,MAAM,CACd,YACC,qFACD,CACA,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,kBAAkB,0CAA0C,CACnE,OAAO,eAAe,mDAAmD,CACzE,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,SAAgF;EAC7F,MAAM,QAAQ,KAAK,UAAU,SAAY,OAAO,SAAS,KAAK,OAAO,GAAG,GAAG;AAC3E,QAAM,aAAa;GACjB,GAAI,KAAK,YAAY,SAAY,EAAE,WAAW,KAAK,SAAS,GAAG,EAAE;GACjE,GAAI,UAAU,UAAa,OAAO,SAAS,MAAM,GAAG,EAAE,OAAO,GAAG,EAAE;GAClE,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,QACG,QAAQ,SAAS,CACjB,YAAY,8EAA8E,CAC1F,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,eAAe,4CAA4C,CAClE,OAAO,kBAAkB,wDAAwD,CACjF,OAAO,mBAAmB,4CAA4C,CACtE,OAAO,WAAW,uEAAuE,CACzF,OAAO,UAAU,6CAA6C,CAC9D,OACC,OAAO,SAOD;EACJ,MAAM,QAAQ,KAAK,UAAU,SAAY,OAAO,SAAS,KAAK,OAAO,GAAG,GAAG;AAC3E,QAAM,gBAAgB;GACpB,GAAI,UAAU,UAAa,OAAO,SAAS,MAAM,GAAG,EAAE,OAAO,GAAG,EAAE;GAClE,GAAI,KAAK,YAAY,SAAY,EAAE,SAAS,KAAK,SAAS,GAAG,EAAE;GAC/D,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,UAAU,SAAY,EAAE,OAAO,KAAK,OAAO,GAAG,EAAE;GACzD,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GAEL;;AAGL,SAAS,6BAA6B,SAAwB;CAC5D,MAAM,IAAI,QACP,QAAQ,eAAe,CACvB,YAAY,uDAAuD;AACtE,GAAE,QAAQ,SAAS,CAChB,YAAY,qDAAqD,CACjE,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,SAA8C;AAC3D,QAAM,sBAAsB;GAC1B,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,GAAE,QAAQ,kBAAkB,CACzB,YAAY,iEAAiE,CAC7E,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,MAAc,SAA8C;AACzE,QAAM,uBAAuB;GACrB;GACN,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,GAAE,QAAQ,OAAO,CACd,YAAY,mDAAmD,CAC/D,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,SAA8C;AAC3D,QAAM,oBAAoB;GACxB,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;;AAGN,SAAS,yBAAyB,SAAwB;CACxD,MAAM,IAAI,QACP,QAAQ,WAAW,CACnB,YAAY,qDAAqD;AACpE,GAAE,QAAQ,OAAO,CACd,YAAY,2BAA2B,CACvC,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,SAA8C;AAC3D,QAAM,gBAAgB;GACpB,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,GAAE,QAAQ,cAAc,CACrB,YAAY,yBAAyB,CACrC,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,IAAY,SAA8C;AACvE,QAAM,kBAAkB;GACtB;GACA,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,GAAE,QAAQ,YAAY,CACnB,YAAY,2CAA2C,CACvD,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,IAAY,SAA8C;AACvE,QAAM,gBAAgB;GACpB;GACA,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,GAAE,QAAQ,eAAe,CACtB,YAAY,gDAAgD,CAC5D,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,IAAY,SAA8C;AACvE,QAAM,mBAAmB;GACvB;GACA,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,GAAE,QAAQ,QAAQ,CACf,YAAY,8CAA8C,CAC1D,OACC,mBACA,uEACD,CACA,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,SAA+D;AAC5E,QAAM,iBAAiB;GACrB,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;;AAGN,SAAS,qBAAqB,SAAwB;CACpD,MAAM,IAAI,QAAQ,QAAQ,OAAO,CAAC,YAAY,gDAAgD;AAC9F,GAAE,QAAQ,QAAQ,CACf,YAAY,mCAAmC,CAC/C,eAAe,kBAAkB,4BAA4B,CAC7D,OAAO,oBAAoB,4CAA4C,CACvE,OAAO,mBAAmB,eAAe,CACzC,OAAO,iBAAiB,sCAAsC,CAC9D,OAAO,oBAAoB,6CAA6C,CACxE,OAAO,uBAAuB,qCAAqC,CACnE,OACC,OAAO,SAOD;AACJ,QAAM,aAAa;GACjB,WAAW,KAAK;GAChB,GAAI,KAAK,aAAa,SAAY,EAAE,UAAU,KAAK,UAAU,GAAG,EAAE;GAClE,GAAI,KAAK,UAAU,SAAY,EAAE,OAAO,KAAK,OAAO,GAAG,EAAE;GACzD,GAAI,KAAK,eAAe,SAAY,EAAE,YAAY,KAAK,YAAY,GAAG,EAAE;GACxE,GAAI,KAAK,aAAa,SAAY,EAAE,UAAU,KAAK,UAAU,GAAG,EAAE;GAClE,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC7D,CAAC;GAEL;AACH,GAAE,QAAQ,OAAO,CACd,YAAY,iCAAiC,CAC7C,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,SAA8C;AAC3D,QAAM,YAAY;GAChB,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,GAAE,QAAQ,eAAe,CACtB,YAAY,qBAAqB,CACjC,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,OAAO,IAAY,SAA8B;AACvD,QAAM,eAAe;GACnB;GACA,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC7D,CAAC;GACF;AACJ,GAAE,QAAQ,cAAc,CACrB,YAAY,oBAAoB,CAChC,OAAO,mBAAmB,8CAA8C,CACxE,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,OAAO,IAAY,SAA+C;AACxE,QAAM,cAAc;GAClB;GACA,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC7D,CAAC;GACF;AACJ,GAAE,QAAQ,SAAS,CAChB,YAAY,4BAA4B,CACxC,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,SAA8C;AAC3D,QAAM,cAAc;GAClB,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;;AAGN,SAAS,wBAAwB,SAAwB;CACvD,MAAM,IAAI,QAAQ,QAAQ,UAAU,CAAC,YAAY,4CAA4C;AAC7F,GAAE,QAAQ,SAAS,CAChB,YAAY,wDAAwD,CACpE,OAAO,UAAU,6CAA6C,CAC9D,QAAQ,SAA6B;AACpC,mBAAiB,EAAE,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE,EAAG,CAAC;GAC7E;AACJ,GAAE,QAAQ,UAAU,CACjB,YAAY,8CAA8C,CAC1D,eAAe,eAAe,gBAAgB,CAC9C,OAAO,gBAAgB,oDAAoD,CAC3E,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,SAAwD;AACrE,QAAM,kBAAkB;GACtB,KAAK,KAAK;GACV,GAAI,KAAK,QAAQ,SAAY,EAAE,KAAK,KAAK,KAAK,GAAG,EAAE;GACnD,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,GAAE,QAAQ,OAAO,CACd,YAAY,oDAAoD,CAChE,eAAe,qBAAqB,0CAA0C,CAC9E,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,SAA+C;AAC5D,QAAM,eAAe;GACnB,UAAU,KAAK;GACf,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,GAAE,QAAQ,SAAS,CAChB,YAAY,iEAAiE,CAC7E,eAAe,qBAAqB,eAAe,CACnD,eAAe,gBAAgB,YAAY,CAC3C,OAAO,qBAAqB,mBAAmB,CAC/C,OAAO,UAAU,6CAA6C,CAC9D,QAAQ,SAA+E;AACtF,mBAAiB;GACf,UAAU,KAAK;GACf,OAAO,KAAK;GACZ,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,GAAE,QAAQ,UAAU,CACjB,YAAY,mEAAmE,CAC/E,eAAe,kBAAkB,8DAA8D,CAC/F,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,SAA4C;AACzD,QAAM,kBAAkB;GACtB,OAAO,KAAK;GACZ,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;;AAGN,SAAS,uBAAuB,SAAwB;CACtD,MAAM,IAAI,QACP,QAAQ,SAAS,CACjB,YAAY,sDAAsD;AACrE,GAAE,QAAQ,mBAAmB,CAC1B,YAAY,0DAA0D,CACtE,OAAO,uBAAuB,mBAAmB,CACjD,OAAO,eAAe,gCAAgC,CACtD,OAAO,yBAAyB,8CAA8C,CAC9E,OAAO,eAAe,sCAAsC,CAC5D,OAAO,aAAa,0DAA0D,CAC9E,OAAO,UAAU,6CAA6C,CAC9D,OACC,OACE,QACA,SAQG;AACH,QAAM,iBAAiB;GACrB;GACA,GAAI,KAAK,YAAY,SAAY,EAAE,SAAS,KAAK,SAAS,GAAG,EAAE;GAC/D,GAAI,KAAK,QAAQ,SAAY,EAAE,KAAK,KAAK,KAAK,GAAG,EAAE;GACnD,GAAI,KAAK,eAAe,SAAY,EAAE,YAAY,KAAK,YAAY,GAAG,EAAE;GACxE,GAAI,KAAK,QAAQ,SAAY,EAAE,KAAK,KAAK,KAAK,GAAG,EAAE;GACnD,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GAEL;AACH,GAAE,QAAQ,iBAAiB,CACxB,YAAY,wCAAwC,CACpD,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,MAAc,SAA6B;AACxD,QAAM,iBAAiB;GACrB;GACA,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,GAAE,QAAQ,QAAQ,CACf,YAAY,qDAAqD,CACjE,OAAO,UAAU,6CAA6C,CAC9D,QAAQ,SAA6B;AACpC,iBAAe,EAAE,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE,EAAG,CAAC;GAC3E;AACJ,GAAE,QAAQ,sBAAsB,CAC7B,YACC,qFACD,CACA,OAAO,gBAAgB,sCAAsC,CAC7D,OAAO,eAAe,uBAAuB,CAC7C,OAAO,WAAW,6CAA6C,CAC/D,OAAO,UAAU,6CAA6C,CAC9D,OACC,OAAO,SAAkF;AACvF,QAAM,4BAA4B;GAChC,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACtD,GAAI,KAAK,cAAc,SAAY,EAAE,WAAW,KAAK,WAAW,GAAG,EAAE;GACrE,GAAI,KAAK,UAAU,SAAY,EAAE,OAAO,KAAK,OAAO,GAAG,EAAE;GACzD,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GAEL;;AAGL,SAAS,uBAAuB,SAAwB;CACtD,MAAM,IAAI,QAAQ,QAAQ,SAAS,CAAC,YAAY,4CAA4C;AAC5F,GAAE,QAAQ,SAAS,CAChB,YAAY,kCAAkC,CAC9C,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,SAA8C;AAC3D,QAAM,gBAAgB;GACpB,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;AACJ,GAAE,QAAQ,QAAQ,CACf,YAAY,+CAA+C,CAC3D,eAAe,mBAAmB,8BAA8B,CAChE,OAAO,uBAAuB,qCAAqC,CACnE,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,SAA8D;AAC3E,QAAM,eAAe;GACnB,QAAQ,KAAK;GACb,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;;AAGN,SAAS,6BAA6B,SAAwB;AAC5D,SACG,QAAQ,yBAAyB,CACjC,YAAY,2EAA2E,CACvF,eAAe,eAAe,eAAe,CAC7C,OAAO,yBAAyB,0BAA0B,MAAM,CAChE,OAAO,iBAAiB,iDAAiD,CACzE,OAAO,UAAU,6CAA6C,CAC9D,OACC,OACE,OACA,SACG;AACH,QAAM,iBAAiB;GACrB;GACA,IAAI,KAAK;GACT,GAAI,KAAK,aAAa,SAAY,EAAE,UAAU,KAAK,UAAU,GAAG,EAAE;GAClE,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GAEL;;AAGL,SAAS,6BAA6B,SAAwB;AAC5D,SACG,QAAQ,yBAAyB,CACjC,YAAY,gEAAgE,CAC5E,OAAO,gBAAgB,qEAAqE,CAC5F,OAAO,UAAU,6CAA6C,CAC9D,OAAO,OAAO,OAAe,SAA2C;AACvE,QAAM,iBAAiB;GACrB;GACA,GAAI,KAAK,QAAQ,SAAY,EAAE,KAAK,KAAK,KAAK,GAAG,EAAE;GACnD,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GACF;;AAGN,SAAS,sBAAsB,SAAwB;CACrD,MAAM,IAAI,QACP,QAAQ,QAAQ,CAChB,YAAY,uDAAuD;AACtE,GAAE,QAAQ,SAAS,CAChB,YAAY,iDAAiD,CAC7D,OAAO,UAAU,6CAA6C,CAC9D,QAAQ,SAA6B;AACpC,iBAAe,EAAE,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE,EAAG,CAAC;GAC3E;AACJ,GAAE,QAAQ,qBAAqB,CAC5B,YACC,oFACD,CACA,OAAO,iBAAiB,4BAA4B,CACpD,OAAO,4BAA4B,oCAAoC,CACvE,OAAO,yBAAyB,iDAAiD,CACjF,OACC,0BACA,wEACD,CACA,OAAO,UAAU,6CAA6C,CAC9D,QAEG,UACA,SAYG;AACH,kBAAgB;GACd;GACA,GAAI,KAAK,SAAS,SACd,EACE,MAAM,KAAK,KACR,MAAM,IAAI,CACV,KAAK,MAAM,EAAE,MAAM,CAAC,CACpB,OAAO,QAAQ,EACnB,GACD,EAAE;GACN,GAAI,KAAK,mBAAmB,SACxB,EACE,gBAAgB,KAAK,eAClB,MAAM,IAAI,CACV,KAAK,MAAM,EAAE,MAAM,CAAC,CACpB,OAAO,QAAQ,EACnB,GACD,EAAE;GACN,GAAI,KAAK,eAAe,SAAY,EAAE,YAAY,KAAK,YAAY,GAAG,EAAE;GACxE,GAAI,KAAK,iBAAiB,SAAY,EAAE,cAAc,KAAK,cAAc,GAAG,EAAE;GAC9E,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GACvD,CAAC;GAEL;;AAGL,SAAS,0BAA0B,SAAwB;CACzD,MAAM,IAAI,QACP,QAAQ,YAAY,CACpB,YAAY,6DAA6D;AAC5E,GAAE,QAAQ,SAAS,CAChB,YAAY,2BAA2B,CACvC,OAAO,UAAU,6CAA6C,CAC9D,QAAQ,SAA6B;AACpC,qBAAmB,EAAE,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE,EAAG,CAAC;GAC/E;AACJ,GAAE,QAAQ,SAAS,CAChB,YAAY,qDAAqD,CACjE,OAAO,UAAU,6CAA6C,CAC9D,QAAQ,SAA6B;AACpC,qBAAmB,EAAE,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE,EAAG,CAAC;GAC/E;AACJ,GAAE,QAAQ,UAAU,CACjB,YAAY,uCAAuC,CACnD,OAAO,UAAU,6CAA6C,CAC9D,QAAQ,SAA6B;AACpC,sBAAoB,EAAE,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE,EAAG,CAAC;GAChF;AACJ,GAAE,QAAQ,UAAU,CACjB,YAAY,qDAAqD,CACjE,OAAO,UAAU,6CAA6C,CAC9D,QAAQ,SAA6B;AACpC,sBAAoB,EAAE,GAAI,KAAK,SAAS,SAAY,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE,EAAG,CAAC;GAChF;;AAGN,SAAS,sBAAsB,SAAwB;AAErD,CADc,QAAQ,QAAQ,QAAQ,CAAC,YAAY,4CAA4C,CAE5F,QAAQ,OAAO,CACf,YACC;EACE;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC,KAAK,KAAK,CACb,CACA,OAAO,uBAAuB,gEAAgE,CAC9F,OAAO,mBAAmB,oDAAoD,MAC7E,OAAO,SAAS,GAAG,GAAG,CACvB,CACA,OAAO,kBAAkB,8BAA8B,CACvD,OAAO,sBAAsB,sDAAsD,CACnF,OACC,OAAO,SAKD;AACJ,QAAM,aAAa;GACjB,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,cAAc,SAAY,EAAE,WAAW,KAAK,WAAW,GAAG,EAAE;GACrE,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC5D,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;GAC7D,CAAC;GAEL;;AAGL,MAAM,CAAC,OAAO,QAAQ;AACpB,SAAQ,OAAO,MAAM,mBAAoB,IAAc,QAAQ,IAAI;AACnE,SAAQ,KAAK,EAAE;EACf"}

package/dist/commands/audit.d.ts

@@ -19,7 +19,7 @@ interface AuditVerifyResult {
   };
 }
 /**
- * `graphorin audit verify` — replay the chain and report the first
+ * `graphorin audit verify` - replay the chain and report the first
  * broken link (if any).
  *
  * @stable
@@ -49,7 +49,7 @@ interface AuditExportResult {
   readonly rows: number;
 }
 /**
- * `graphorin audit export --to <file>` — stream every entry as JSONL.
+ * `graphorin audit export --to <file>` - stream every entry as JSONL.
  *
  * @stable
  */