@groundnuty/macf 0.2.37 → 0.2.39

package/dist/cli/commands/fleet-doctor.js

@@ -0,0 +1,481 @@
+/**
+ * `macf fleet doctor` — NON-INVASIVE mesh-interconnect test (DR-030 phase-1
+ * increment 1d, macf#568).
+ *
+ * For the current project's registry, run a two-tier delivery ladder per agent:
+ *
+ *   1. REACHABLE — the agent's registry `host:port` answers an mTLS `/health`
+ *      ping (reuses `pingAgentHealth`, the same probe `macf fleet status` uses).
+ *   2. ACCEPTED  — an mTLS `/notify` POST carrying a DIAGNOSTIC payload is ACK'd
+ *      by the server's receive path. The diagnostic body short-circuits to an
+ *      ACK BEFORE any MCP push, and the ACK echoes back the correlation token we
+ *      sent. "Accepted" is green iff HTTP 200 AND `ack === true` AND the echoed
+ *      `correlation_token` matches what we sent (the echo proves a real
+ *      round-trip, not a coincidental 200).
+ *
+ * HONESTY (DR-030 §3, rendered LOUDLY in the output legend): the default NON-
+ * invasive checks prove the protocol REACHES THE SERVER (mTLS auth + body parse)
+ * ONLY — they do NOT prove DELIVERY TO THE AGENT (the MCP-push → agent-reads gap
+ * is not exercised). Real deliver→process proof needs `--inject` (the INVASIVE
+ * Processed-now tier in this file — routes a real marker-bearing prompt + wakes
+ * each agent + matches the echoed run_id off `/health.last_processed`);
+ * routing-plane delivery needs an e2e run.
+ *
+ * Reuses `macf fleet status`'s plumbing: the registry list
+ * (`createRegistryFromConfig`), the mTLS `/health` probe (`pingAgentHealth`),
+ * the CA-cert read (`createClientFromConfig`), and the `formatTable` renderer
+ * (shared with `macf ps` / `macf fleet status`). The diagnostic POST mirrors
+ * `pingAgentHealth`'s mTLS request shape. Registry + both mTLS calls are
+ * injectable (`FleetDoctorDeps`) so tests run fully offline.
+ */
+import { randomUUID } from 'node:crypto';
+import { request } from 'node:https';
+import { readFileSync, existsSync } from 'node:fs';
+import { readAgentConfig, tokenSourceFromConfig, agentCertPath, agentKeyPath, } from '../config.js';
+import { createClientFromConfig } from '../registry-helper.js';
+import { createRegistryFromConfig, generateToken, pingAgentHealth, toVariableSegment, } from '@groundnuty/macf-core';
+import { formatTable } from './ps.js';
+import { postInjectNotify, pollLastProcessedToken, } from './fleet-doctor-inject.js';
+const DEFAULT_TIMEOUT_MS = 5000;
+const DEFAULT_INJECT_MAX_POLLS = 7;
+const DEFAULT_INJECT_POLL_INTERVAL_MS = 4000;
+/** Default digits-only run id: epoch-ms + 6 random digits → unique, `[0-9]+`. */
+export function defaultRunId() {
+    return `${Date.now()}${Math.floor(Math.random() * 1_000_000)}`;
+}
+/**
+ * Sanitize a registry name into a marker-legal agent slug. The
+ * `emit-turn-receipt.sh` grep is `\[macf-route:[0-9]+:[a-z0-9-]+\]`, so an
+ * UNsanitized label with an underscore/uppercase would fail the whole-marker
+ * match → no receipt written → a false UNCONFIRMED. Lowercase + map any
+ * out-of-class char to `-`; fall back to `agent` if the result is empty.
+ */
+export function sanitizeMarkerAgent(name) {
+    const slug = name.toLowerCase().replace(/[^a-z0-9-]/g, '-').replace(/-+/g, '-').replace(/^-|-$/g, '');
+    return slug === '' ? 'agent' : slug;
+}
+/**
+ * Accepted = HTTP 200 AND `ack === true` AND the echoed `correlation_token`
+ * matches what we sent. The token echo is the load-bearing check — it proves
+ * the 200 is a real round-trip of OUR request, not a coincidental success.
+ */
+export function isAccepted(sentToken, ack) {
+    return ack.status === 200 && ack.body?.ack === true && ack.body?.correlation_token === sentToken;
+}
+/** Human-readable reason the Accepted tier failed (used in `--json`/diagnostics). */
+export function acceptFailureReason(sentToken, ack) {
+    if (ack.error)
+        return ack.error;
+    if (ack.status === null)
+        return 'no response';
+    if (ack.status !== 200)
+        return `http ${ack.status}`;
+    if (ack.body?.ack !== true)
+        return 'ack not true';
+    if (ack.body?.correlation_token !== sentToken)
+        return 'correlation_token mismatch';
+    return 'unknown';
+}
+/**
+ * Run the Processed-now (`--inject`) tier for ONE reachable agent: route a real
+ * marker-bearing mention, then poll `/health.last_processed.correlation_token`
+ * for our `run_id`. Returns the tri-state outcome + diagnostics. PURE w.r.t.
+ * `inject.post`/`inject.poll`/`inject.sleep` — tests inject fakes (and a no-op
+ * sleep) so nothing hits the network and there are no real waits.
+ */
+export async function runProcessedInject(peer, ackAgent, inject) {
+    const { host, port } = peer.info;
+    const runId = (inject.genRunId ?? defaultRunId)();
+    const markerAgent = sanitizeMarkerAgent(ackAgent ?? peer.name);
+    const post = await inject.post(host, port, runId, markerAgent);
+    if (!post.delivered) {
+        return { processedInject: false, injectRunId: runId, injectError: post.error ?? 'inject POST not delivered' };
+    }
+    const maxPolls = inject.maxPolls ?? DEFAULT_INJECT_MAX_POLLS;
+    const intervalMs = inject.pollIntervalMs ?? DEFAULT_INJECT_POLL_INTERVAL_MS;
+    const sleep = inject.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+    for (let i = 0; i < maxPolls; i++) {
+        const token = await inject.poll(host, port);
+        if (token === runId)
+            return { processedInject: true, injectRunId: runId };
+        if (i < maxPolls - 1)
+            await sleep(intervalMs);
+    }
+    return {
+        processedInject: false,
+        injectRunId: runId,
+        injectError: `processing unconfirmed within ~${Math.round(((maxPolls - 1) * intervalMs) / 1000)}s`,
+    };
+}
+/**
+ * Run the ladder per peer: probe `/health`, then (only if reachable) POST the
+ * diagnostic `/notify`. When `inject` is supplied (`--inject`), ALSO run the
+ * INVASIVE Processed-now tier on each reachable agent (routes a real prompt +
+ * wakes the agent). PURE w.r.t. `probe`/`diagnose`/`genToken`/`inject` — tests
+ * inject fakes so nothing hits the network.
+ */
+export async function gatherFleetDoctor(peers, probe, diagnose, genToken = randomUUID, inject) {
+    const out = [];
+    for (const peer of peers) {
+        const { host, port } = peer.info;
+        const health = await probe(host, port);
+        if (health === null) {
+            // Tier 1 failed → ladder stops; Accepted + Processed are N/A (not attempted).
+            out.push({
+                name: peer.name,
+                host,
+                port,
+                reachable: false,
+                accepted: null,
+                processedInject: inject ? null : undefined,
+            });
+            continue;
+        }
+        const token = genToken();
+        const ack = await diagnose(host, port, token);
+        const accepted = isAccepted(token, ack);
+        const ackAgent = ack.body?.agent;
+        const proc = inject ? await runProcessedInject(peer, ackAgent, inject) : undefined;
+        out.push({
+            name: peer.name,
+            host,
+            port,
+            reachable: true,
+            accepted,
+            ackAgent,
+            instanceId: ack.body?.instance_id,
+            acceptError: accepted ? undefined : acceptFailureReason(token, ack),
+            processedInject: proc ? proc.processedInject : undefined,
+            injectRunId: proc?.injectRunId,
+            injectError: proc?.injectError,
+        });
+    }
+    return out;
+}
+const HEADERS = ['NAME', 'HOST:PORT', 'REACHABLE', 'ACCEPTED'];
+const HEADERS_INJECT = [...HEADERS, 'PROCESSED'];
+/** ✓ / ✗ for a boolean reachability flag. */
+export function reachableGlyph(reachable) {
+    return reachable ? '✓' : '✗';
+}
+/** ✓ / ✗ / — for the tri-state Accepted (null = not attempted). */
+export function acceptedGlyph(accepted) {
+    if (accepted === null)
+        return '—';
+    return accepted ? '✓' : '✗';
+}
+/**
+ * Processed glyph (inject tier). ✓ = run_id echoed (processed end-to-end);
+ * `?` = UNCONFIRMED within the window (delivered but not echoed — possibly a
+ * busy agent, NOT necessarily a gap — deliberately NOT `✗`); `—` = not
+ * attempted (unreachable / inject off).
+ */
+export function processedGlyph(processed) {
+    if (processed === true)
+        return '✓';
+    if (processed === false)
+        return '?';
+    return '—';
+}
+/**
+ * Build one display row per agent (pure — exported for tests). When `inject`
+ * is true, append the PROCESSED column.
+ */
+export function buildDoctorRows(results, inject = false) {
+    return results.map((r) => {
+        const base = [r.name, `${r.host}:${r.port}`, reachableGlyph(r.reachable), acceptedGlyph(r.accepted)];
+        return inject ? [...base, processedGlyph(r.processedInject)] : base;
+    });
+}
+/** Full rendered table (pure — exported for tests). */
+export function formatDoctorTable(results, inject = false) {
+    return formatTable(inject ? HEADERS_INJECT : HEADERS, buildDoctorRows(results, inject));
+}
+/** Reachable AND Accepted both green. */
+function isFullyOk(r) {
+    return r.reachable && r.accepted === true;
+}
+export function meshVerdict(results) {
+    if (results.length === 0)
+        return 'EMPTY';
+    return results.every(isFullyOk) ? 'HEALTHY' : 'DEGRADED';
+}
+/** `3/4 agents reachable + accepting; mesh interconnect: DEGRADED`. */
+export function summaryLine(results) {
+    const total = results.length;
+    const ok = results.filter(isFullyOk).length;
+    return `${ok}/${total} agents reachable + accepting; mesh interconnect: ${meshVerdict(results)}`;
+}
+/**
+ * The honesty footnote — non-invasive checks prove protocol-to-server ONLY.
+ * Kept as a single block so it renders identically in the table output and is
+ * carried verbatim in the `--json` `disclaimer` field.
+ */
+export const HONESTY_LEGEND = [
+    'Legend: REACHABLE = mTLS /health answered.  ACCEPTED = diagnostic /notify ACK (HTTP 200 + ack + token echo).',
+    'NOTE: these non-invasive checks prove the protocol REACHES THE SERVER (mTLS auth + parse) ONLY —',
+    '      NOT delivery to the agent (the MCP-push → agent-reads gap is not exercised). Actual mesh',
+    '      delivery needs `macf fleet doctor --inject` (INVASIVE — wakes each agent); routing-plane',
+    '      delivery needs an e2e run.',
+].join('\n');
+const HONESTY_DISCLAIMER = 'Non-invasive checks prove protocol-to-server (mTLS auth + parse) ONLY, NOT delivery to the ' +
+    'agent (MCP-push → agent-reads gap). Mesh delivery needs --inject (later increment); ' +
+    'routing-plane delivery needs e2e.';
+/**
+ * The `--inject` Processed-tier legend. INVASIVE: it routes a real probe to each
+ * reachable agent + costs it a turn. A `?` (UNCONFIRMED) is NOT "deaf" — a busy
+ * agent mid-long-turn legitimately won't process the probe within the window.
+ */
+export const INJECT_LEGEND = [
+    'Legend (--inject): PROCESSED ✓ = the probe run_id echoed back via /health.last_processed —',
+    '      the FULL chain proven (deliver → MCP push → agent read it as a TURN → local turn-receipt',
+    '      → /health surfaced it).  ? = UNCONFIRMED within the window (delivered, but no echo yet —',
+    '      a busy agent mid-long-turn legitimately may not have processed it; NOT proof of a gap).',
+    '      — = not attempted (agent unreachable).',
+    'INVASIVE: --inject routes a REAL /notify to each reachable agent, WAKING each + costing it a turn.',
+    '      It is the IDLE-agent fallback; for a busy/active agent prefer the passive last_processed self-report.',
+].join('\n');
+/** `2/3 reachable agents processed an injected probe (1 unconfirmed — possibly busy)`. */
+export function injectSummaryLine(results) {
+    const attempted = results.filter((r) => r.processedInject !== null && r.processedInject !== undefined);
+    const processed = attempted.filter((r) => r.processedInject === true).length;
+    const unconfirmed = attempted.length - processed;
+    const tail = unconfirmed > 0 ? ` (${unconfirmed} unconfirmed — possibly busy, NOT necessarily a gap)` : '';
+    return `${processed}/${attempted.length} reachable agents processed an injected probe${tail}`;
+}
+/** Count of reachable agents an `--inject` run will WAKE (for the up-front warning). */
+export function injectableCount(results) {
+    return results.filter((r) => r.reachable).length;
+}
+/**
+ * Structured `--json` shape for automation. THIS IS THE INPUT CONTRACT the
+ * DR-031 watchdog consumes — keep it clean + stable. `accepted` is tri-state
+ * (`true`/`false`/`null`); `summary.verdict` is the machine-readable health.
+ *
+ * `schema_version` is the HARD version contract (DR-006 watchdog request,
+ * macf-devops-toolkit#115): a consumer asserts `schema_version === <known>`
+ * and refuses an unknown value, so it fails LOUD on ANY breaking change —
+ * not just a renamed key (which a presence-check catches) but a same-name
+ * SEMANTIC change (e.g. `accepted` going tri-state-bool → string-enum) that
+ * would otherwise parse clean and silently misread (the Instance-13-adjacent
+ * silent-fallback at the supervisor's own input). BUMP this on any breaking
+ * change (rename / removal / semantic shift); additive-optional fields do NOT
+ * bump it.
+ */
+export const FLEET_DOCTOR_JSON_SCHEMA_VERSION = 1;
+/**
+ * `--inject` ADDS `processed_inject` (+ `inject_run_id` / `inject_error` /
+ * top-level `inject`) WITHOUT a `schema_version` bump. Per the documented policy
+ * above, additive-OPTIONAL fields do NOT bump the version (a bump is reserved
+ * for rename / removal / a same-name SEMANTIC shift). `processed_inject` is
+ * present ONLY when `--inject` ran (`opts.inject`); a watchdog that pins
+ * `schema_version === 1` keeps parsing clean and simply ignores the new key —
+ * exactly the additive-tolerance the version contract is built for.
+ */
+export function fleetDoctorToJson(results, project, opts = {}) {
+    return {
+        schema_version: FLEET_DOCTOR_JSON_SCHEMA_VERSION,
+        project: project ?? null,
+        ...(opts.inject
+            ? {
+                // Surfaced ONLY in inject mode so a consumer never misreads a
+                // mode-off run as "0 processed". Loudly flags the invasive nature.
+                inject: {
+                    invasive: true,
+                    woke: injectableCount(results),
+                    processed: results.filter((r) => r.processedInject === true).length,
+                },
+            }
+            : {}),
+        summary: {
+            total: results.length,
+            reachable: results.filter((r) => r.reachable).length,
+            accepting: results.filter(isFullyOk).length,
+            verdict: meshVerdict(results),
+        },
+        agents: results.map((r) => ({
+            name: r.name,
+            host: r.host,
+            port: r.port,
+            reachable: r.reachable,
+            accepted: r.accepted,
+            ack_agent: r.ackAgent ?? null,
+            instance_id: r.instanceId ?? null,
+            accept_error: r.acceptError ?? null,
+            // Additive-optional (no schema bump): tri-state true/false/null, present
+            // only under --inject. null = not attempted (unreachable).
+            ...(opts.inject
+                ? {
+                    processed_inject: r.processedInject ?? null,
+                    inject_run_id: r.injectRunId ?? null,
+                    inject_error: r.injectError ?? null,
+                }
+                : {}),
+        })),
+        disclaimer: HONESTY_DISCLAIMER,
+    };
+}
+/**
+ * The real mTLS diagnostic POST. Mirrors `pingAgentHealth`'s request shape
+ * (same CA + client cert/key, `rejectUnauthorized`, timeout) but POSTs the
+ * diagnostic body to `/notify`. Resolves with a `DiagnosticAck` describing the
+ * outcome; never throws (failures become `{ status: null, error }`).
+ */
+export async function postDiagnosticNotify(config) {
+    const { host, port, caCertPem, certPath, keyPath, correlationToken, timeoutMs = DEFAULT_TIMEOUT_MS, } = config;
+    if (!existsSync(certPath) || !existsSync(keyPath)) {
+        return { status: null, body: null, error: 'client cert/key missing' };
+    }
+    const payload = JSON.stringify({
+        type: 'mention',
+        diagnostic: true,
+        correlation_token: correlationToken,
+    });
+    return new Promise((resolve) => {
+        const req = request({
+            hostname: host,
+            port,
+            method: 'POST',
+            path: '/notify',
+            ca: Buffer.from(caCertPem),
+            cert: readFileSync(certPath),
+            key: readFileSync(keyPath),
+            rejectUnauthorized: true,
+            timeout: timeoutMs,
+            headers: {
+                'content-type': 'application/json',
+                'content-length': Buffer.byteLength(payload),
+            },
+        }, (res) => {
+            const chunks = [];
+            res.on('data', (chunk) => chunks.push(chunk));
+            res.on('end', () => {
+                const status = res.statusCode ?? null;
+                let body;
+                try {
+                    body = JSON.parse(Buffer.concat(chunks).toString('utf-8'));
+                }
+                catch {
+                    body = null;
+                }
+                resolve({ status, body, error: body ? undefined : 'non-JSON response' });
+            });
+        });
+        req.on('error', (e) => resolve({ status: null, body: null, error: e.message }));
+        req.on('timeout', () => {
+            req.destroy();
+            resolve({ status: null, body: null, error: 'timeout' });
+        });
+        req.write(payload);
+        req.end();
+    });
+}
+/** Wire the registry + both mTLS calls from a project's config. */
+async function resolveDepsFromRegistry(projectDir) {
+    const config = readAgentConfig(projectDir);
+    if (!config) {
+        console.error('No macf-agent.json found. Run `macf init` first.');
+        return { ok: false, code: 1 };
+    }
+    const token = await generateToken(tokenSourceFromConfig(projectDir, config));
+    const registry = createRegistryFromConfig(config.registry, config.project, token);
+    const client = createClientFromConfig(config.registry, token);
+    const caCertPem = await client.readVariable(`${toVariableSegment(config.project)}_CA_CERT`);
+    if (!caCertPem) {
+        console.error('CA certificate not found in registry. Run `macf certs init` first.');
+        return { ok: false, code: 1 };
+    }
+    const certPath = agentCertPath(projectDir);
+    const keyPath = agentKeyPath(projectDir);
+    return {
+        ok: true,
+        deps: {
+            project: config.project,
+            listPeers: () => registry.list(''),
+            probe: (host, port) => pingAgentHealth({ host, port, caCertPem, certPath, keyPath }),
+            diagnose: (host, port, correlationToken) => postDiagnosticNotify({ host, port, caCertPem, certPath, keyPath, correlationToken }),
+            injectPost: (host, port, runId, markerAgent) => postInjectNotify({ host, port, caCertPem, certPath, keyPath, runId, markerAgent }),
+            injectPoll: (host, port) => pollLastProcessedToken({ host, port, caCertPem, certPath, keyPath }),
+        },
+    };
+}
+/**
+ * Build the `FleetInjectConfig` from deps + options when `--inject` is on.
+ * Returns `undefined` when inject is off OR the deps lack the inject seams
+ * (defensive — production always wires them). A `~4s` poll interval; the
+ * timeout-seconds budget derives `maxPolls`.
+ */
+function buildInjectConfig(deps, opts) {
+    if (!opts.inject)
+        return undefined;
+    if (!deps.injectPost || !deps.injectPoll)
+        return undefined;
+    const intervalMs = DEFAULT_INJECT_POLL_INTERVAL_MS;
+    const budgetSec = opts.injectTimeoutSec ?? 24;
+    // maxPolls so that (maxPolls-1)*interval ≈ budget; floor at 2 polls.
+    const maxPolls = Math.max(2, Math.round((budgetSec * 1000) / intervalMs) + 1);
+    return {
+        post: deps.injectPost,
+        poll: deps.injectPoll,
+        genRunId: deps.injectGenRunId,
+        sleep: deps.injectSleep,
+        maxPolls,
+        pollIntervalMs: intervalMs,
+    };
+}
+/**
+ * `macf fleet doctor` entry point. Returns the shell exit code — 1 when the
+ * mesh is DEGRADED (any agent unreachable or not-accepting), 0 when HEALTHY or
+ * when no agents are registered (matching the `macf doctor` "non-zero on
+ * problem" convention). The `--json` body still prints to stdout regardless of
+ * exit code; the watchdog reads `summary.verdict` from it. `deps` is injected
+ * by tests; production resolves it from the project's registry config.
+ */
+export async function runFleetDoctor(projectDir, opts = {}, deps) {
+    let resolved = deps;
+    if (!resolved) {
+        const r = await resolveDepsFromRegistry(projectDir);
+        if (!r.ok)
+            return r.code;
+        resolved = r.deps;
+    }
+    const inject = buildInjectConfig(resolved, opts);
+    const peers = await resolved.listPeers();
+    // Loud up-front INVASIVE warning (DR-030 §3) to stderr BEFORE we route any
+    // real probe. Skipped under --json (machine consumer) + when no agents exist.
+    // The exact reachable count is reported post-gather (we'd otherwise double-
+    // probe every agent just to count).
+    if (inject && !opts.json && peers.length > 0) {
+        console.error(`⚠️  --inject is INVASIVE: it routes a REAL /notify to each REACHABLE agent ` +
+            `(up to ${String(peers.length)} registered), WAKING it + costing it a turn. ` +
+            `IDLE-agent fallback — prefer the passive last_processed self-report for a busy agent.`);
+    }
+    const results = await gatherFleetDoctor(peers, resolved.probe, resolved.diagnose, resolved.genToken, inject);
+    if (opts.json) {
+        console.log(JSON.stringify(fleetDoctorToJson(results, resolved.project, { inject: !!inject }), null, 2));
+        return meshVerdict(results) === 'DEGRADED' ? 1 : 0;
+    }
+    const header = `macf fleet doctor${resolved.project ? ` — ${resolved.project}` : ''}`;
+    if (results.length === 0) {
+        console.log(`${header}\n\nNo agents registered in the registry.`);
+        return 0;
+    }
+    console.log(`${header}\n`);
+    console.log(formatDoctorTable(results, !!inject));
+    console.log('');
+    console.log(summaryLine(results));
+    if (inject) {
+        console.log(`--inject routed a REAL probe to ${String(injectableCount(results))} reachable agent(s), waking each.`);
+        console.log(injectSummaryLine(results));
+    }
+    console.log('');
+    console.log(HONESTY_LEGEND);
+    if (inject) {
+        console.log('');
+        console.log(INJECT_LEGEND);
+    }
+    // The Processed tier does NOT fold into the verdict/exit code: an UNCONFIRMED
+    // is "possibly busy," not "broken." Exit stays driven by Reachable+Accepted.
+    return meshVerdict(results) === 'DEGRADED' ? 1 : 0;
+}
+//# sourceMappingURL=fleet-doctor.js.map

package/dist/cli/commands/fleet-doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet-doctor.js","sourceRoot":"","sources":["../../../src/cli/commands/fleet-doctor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,aAAa,EACb,YAAY,GACb,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EACL,wBAAwB,EACxB,aAAa,EACb,eAAe,EACf,iBAAiB,GAClB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACtC,OAAO,EACL,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,0BAA0B,CAAC;AAMlC,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAqEhC,MAAM,wBAAwB,GAAG,CAAC,CAAC;AACnC,MAAM,+BAA+B,GAAG,IAAI,CAAC;AAE7C,iFAAiF;AACjF,MAAM,UAAU,YAAY;IAC1B,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC,EAAE,CAAC;AACjE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACtG,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACtC,CAAC;AAqCD;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,SAAiB,EAAE,GAAkB;IAC9D,OAAO,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,iBAAiB,KAAK,SAAS,CAAC;AACnG,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,mBAAmB,CAAC,SAAiB,EAAE,GAAkB;IACvE,IAAI,GAAG,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC;IAChC,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,aAAa,CAAC;IAC9C,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;IACpD,IAAI,GAAG,CAAC,IAAI,EAAE,GAAG,KAAK,IAAI;QAAE,OAAO,cAAc,CAAC;IAClD,IAAI,GAAG,CAAC,IAAI,EAAE,iBAAiB,KAAK,SAAS;QAAE,OAAO,4BAA4B,CAAC;IACnF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAyD,EACzD,QAA4B,EAC5B,MAAyB;IAEzB,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;IACjC,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,YAAY,CAAC,EAAE,CAAC;IAClD,MAAM,WAAW,GAAG,mBAAmB,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC;IAE/D,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;IAC/D,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACpB,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,IAAI,2BAA2B,EAAE,CAAC;IAChH,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,wBAAwB,CAAC;IAC7D,MAAM,UAAU,GAAG,MAAM,CAAC,cAAc,IAAI,+BAA+B,CAAC;IAC5E,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAE5F,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5C,IAAI,KAAK,KAAK,KAAK;YAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;QAC1E,IAAI,CAAC,GAAG,QAAQ,GAAG,CAAC;YAAE,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC;IAChD,CAAC;IACD,OAAO;QACL,eAAe,EAAE,KAAK;QACtB,WAAW,EAAE,KAAK;QAClB,WAAW,EAAE,kCAAkC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,GAAG,UAAU,CAAC,GAAG,IAAI,CAAC,GAAG;KACnG,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAqE,EACrE,KAAmB,EACnB,QAA2B,EAC3B,WAAyB,UAAU,EACnC,MAA0B;IAE1B,MAAM,GAAG,GAAwB,EAAE,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACvC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,8EAA8E;YAC9E,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI;gBACJ,IAAI;gBACJ,SAAS,EAAE,KAAK;gBAChB,QAAQ,EAAE,IAAI;gBACd,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;aAC3C,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC;QACjC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,kBAAkB,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACnF,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI;YACJ,IAAI;YACJ,SAAS,EAAE,IAAI;YACf,QAAQ;YACR,QAAQ;YACR,UAAU,EAAE,GAAG,CAAC,IAAI,EAAE,WAAW;YACjC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,KAAK,EAAE,GAAG,CAAC;YACnE,eAAe,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS;YACxD,WAAW,EAAE,IAAI,EAAE,WAAW;YAC9B,WAAW,EAAE,IAAI,EAAE,WAAW;SAC/B,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,CAAU,CAAC;AACxE,MAAM,cAAc,GAAG,CAAC,GAAG,OAAO,EAAE,WAAW,CAAU,CAAC;AAE1D,6CAA6C;AAC7C,MAAM,UAAU,cAAc,CAAC,SAAkB;IAC/C,OAAO,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;AAC/B,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,aAAa,CAAC,QAAwB;IACpD,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC;IAClC,OAAO,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;AAC9B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,SAAqC;IAClE,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC;IACnC,IAAI,SAAS,KAAK,KAAK;QAAE,OAAO,GAAG,CAAC;IACpC,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,OAAqC,EACrC,MAAM,GAAG,KAAK;IAEd,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACvB,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QACrG,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,iBAAiB,CAAC,OAAqC,EAAE,MAAM,GAAG,KAAK;IACrF,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,EAAE,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AAC1F,CAAC;AAKD,yCAAyC;AACzC,SAAS,SAAS,CAAC,CAAoB;IACrC,OAAO,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAqC;IAC/D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IACzC,OAAO,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;AAC3D,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,WAAW,CAAC,OAAqC;IAC/D,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC;IAC7B,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC;IAC5C,OAAO,GAAG,EAAE,IAAI,KAAK,qDAAqD,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;AACnG,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,8GAA8G;IAC9G,kGAAkG;IAClG,gGAAgG;IAChG,gGAAgG;IAChG,kCAAkC;CACnC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,MAAM,kBAAkB,GACtB,6FAA6F;IAC7F,sFAAsF;IACtF,mCAAmC,CAAC;AAEtC;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,4FAA4F;IAC5F,gGAAgG;IAChG,gGAAgG;IAChG,+FAA+F;IAC/F,8CAA8C;IAC9C,oGAAoG;IACpG,6GAA6G;CAC9G,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,0FAA0F;AAC1F,MAAM,UAAU,iBAAiB,CAAC,OAAqC;IACrE,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,KAAK,IAAI,IAAI,CAAC,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC;IACvG,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;IAC7E,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC;IACjD,MAAM,IAAI,GAAG,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,WAAW,sDAAsD,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3G,OAAO,GAAG,SAAS,IAAI,SAAS,CAAC,MAAM,gDAAgD,IAAI,EAAE,CAAC;AAChG,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,eAAe,CAAC,OAAqC;IACnE,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC;AACnD,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC;AAElD;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAqC,EACrC,OAAgB,EAChB,OAAsC,EAAE;IAExC,OAAO;QACL,cAAc,EAAE,gCAAgC;QAChD,OAAO,EAAE,OAAO,IAAI,IAAI;QACxB,GAAG,CAAC,IAAI,CAAC,MAAM;YACb,CAAC,CAAC;gBACE,8DAA8D;gBAC9D,mEAAmE;gBACnE,MAAM,EAAE;oBACN,QAAQ,EAAE,IAAI;oBACd,IAAI,EAAE,eAAe,CAAC,OAAO,CAAC;oBAC9B,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC,MAAM;iBACpE;aACF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,OAAO,EAAE;YACP,KAAK,EAAE,OAAO,CAAC,MAAM;YACrB,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM;YACpD,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM;YAC3C,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC;SAC9B;QACD,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1B,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,SAAS,EAAE,CAAC,CAAC,QAAQ,IAAI,IAAI;YAC7B,WAAW,EAAE,CAAC,CAAC,UAAU,IAAI,IAAI;YACjC,YAAY,EAAE,CAAC,CAAC,WAAW,IAAI,IAAI;YACnC,yEAAyE;YACzE,2DAA2D;YAC3D,GAAG,CAAC,IAAI,CAAC,MAAM;gBACb,CAAC,CAAC;oBACE,gBAAgB,EAAE,CAAC,CAAC,eAAe,IAAI,IAAI;oBAC3C,aAAa,EAAE,CAAC,CAAC,WAAW,IAAI,IAAI;oBACpC,YAAY,EAAE,CAAC,CAAC,WAAW,IAAI,IAAI;iBACpC;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;QACH,UAAU,EAAE,kBAAkB;KAC/B,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,MAQ1C;IACC,MAAM,EACJ,IAAI,EACJ,IAAI,EACJ,SAAS,EACT,QAAQ,EACR,OAAO,EACP,gBAAgB,EAChB,SAAS,GAAG,kBAAkB,GAC/B,GAAG,MAAM,CAAC;IAEX,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAClD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;IACxE,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;QAC7B,IAAI,EAAE,SAAS;QACf,UAAU,EAAE,IAAI;QAChB,iBAAiB,EAAE,gBAAgB;KACpC,CAAC,CAAC;IAEH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,GAAG,GAAG,OAAO,CACjB;YACE,QAAQ,EAAE,IAAI;YACd,IAAI;YACJ,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,SAAS;YACf,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAC1B,IAAI,EAAE,YAAY,CAAC,QAAQ,CAAC;YAC5B,GAAG,EAAE,YAAY,CAAC,OAAO,CAAC;YAC1B,kBAAkB,EAAE,IAAI;YACxB,OAAO,EAAE,SAAS;YAClB,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC;aAC7C;SACF,EACD,CAAC,GAAG,EAAE,EAAE;YACN,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YACtD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC;gBACtC,IAAI,IAA8B,CAAC;gBACnC,IAAI,CAAC;oBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAsB,CAAC;gBAClF,CAAC;gBAAC,MAAM,CAAC;oBACP,IAAI,GAAG,IAAI,CAAC;gBACd,CAAC;gBACD,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,mBAAmB,EAAE,CAAC,CAAC;YAC3E,CAAC,CAAC,CAAC;QACL,CAAC,CACF,CAAC;QACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAChF,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;YACrB,GAAG,CAAC,OAAO,EAAE,CAAC;YACd,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnB,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AA4BD,mEAAmE;AACnE,KAAK,UAAU,uBAAuB,CACpC,UAAkB;IAElB,MAAM,MAAM,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;QAClE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAChC,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,qBAAqB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7E,MAAM,QAAQ,GAAG,wBAAwB,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAClF,MAAM,MAAM,GAAG,sBAAsB,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC5F,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,oEAAoE,CAAC,CAAC;QACpF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAChC,CAAC;IAED,MAAM,QAAQ,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACzC,OAAO;QACL,EAAE,EAAE,IAAI;QACR,IAAI,EAAE;YACJ,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;YACpF,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,CACzC,oBAAoB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;YACtF,UAAU,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAC7C,gBAAgB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;YACpF,UAAU,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,sBAAsB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;SACjG;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CACxB,IAAqB,EACrB,IAA2B;IAE3B,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IACnC,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAC3D,MAAM,UAAU,GAAG,+BAA+B,CAAC;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC;IAC9C,qEAAqE;IACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9E,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,UAAU;QACrB,IAAI,EAAE,IAAI,CAAC,UAAU;QACrB,QAAQ,EAAE,IAAI,CAAC,cAAc;QAC7B,KAAK,EAAE,IAAI,CAAC,WAAW;QACvB,QAAQ;QACR,cAAc,EAAE,UAAU;KAC3B,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,UAAkB,EAClB,OAA8B,EAAE,EAChC,IAAsB;IAEtB,IAAI,QAAQ,GAAG,IAAI,CAAC;IACpB,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,CAAC,GAAG,MAAM,uBAAuB,CAAC,UAAU,CAAC,CAAC;QACpD,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC;QACzB,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC;IACpB,CAAC;IAED,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,CAAC;IAEzC,2EAA2E;IAC3E,8EAA8E;IAC9E,4EAA4E;IAC5E,oCAAoC;IACpC,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7C,OAAO,CAAC,KAAK,CACX,6EAA6E;YAC3E,UAAU,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,+CAA+C;YAC7E,uFAAuF,CAC1F,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAE7G,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACzG,OAAO,WAAW,CAAC,OAAO,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,MAAM,GAAG,oBAAoB,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACtF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,2CAA2C,CAAC,CAAC;QAClE,OAAO,CAAC,CAAC;IACX,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC;IAC3B,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;IAClC,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,GAAG,CACT,mCAAmC,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,mCAAmC,CACvG,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC5B,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC7B,CAAC;IACD,8EAA8E;IAC9E,6EAA6E;IAC7E,OAAO,WAAW,CAAC,OAAO,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrD,CAAC"}

package/dist/cli/commands/fleet.d.ts

@@ -0,0 +1,83 @@
+import type { AgentInfo, HealthResponse } from '@groundnuty/macf-core';
+/**
+ * DR-030 sibling-increment `/health.state` object self-report — read
+ * DEFENSIVELY (NOT yet in the `HealthResponse` type). All fields optional; the
+ * field may also arrive as a plain `"idle"|"busy"` string (DR-030 §5).
+ */
+export interface AgentRunState {
+    readonly status?: string;
+    readonly turn_number?: number;
+    readonly elapsed_ms?: number;
+}
+/** DR-030 sibling-increment `/health.otel` self-report — read DEFENSIVELY. */
+export interface AgentOtelReport {
+    readonly endpoint_reachable?: boolean;
+}
+/** One agent's roster + reachability + raw self-report body. */
+export interface FleetAgentStatus {
+    readonly name: string;
+    readonly host: string;
+    readonly port: number;
+    readonly online: boolean;
+    /** Raw `/health` body (incl. any defensively-read `state`/`otel`), or null when offline. */
+    readonly health: HealthResponse | null;
+}
+/** Probe a single endpoint's `/health`; null on any failure. Injectable for tests. */
+export type FleetProbeFn = (host: string, port: number) => Promise<HealthResponse | null>;
+/**
+ * Probe every peer once and collect roster + reachability + raw body. PURE
+ * w.r.t. `probe` — tests inject a fake so nothing hits the network.
+ */
+export declare function gatherFleetStatus(peers: readonly {
+    readonly name: string;
+    readonly info: AgentInfo;
+}[], probe: FleetProbeFn): Promise<readonly FleetAgentStatus[]>;
+/** Human-readable elapsed from whole seconds: `45s` / `18m` / `2h5m`. */
+export declare function formatUptime(seconds: number): string;
+/** Whole days from `now` (ms) until an ISO timestamp; negative when past. */
+export declare function daysUntil(isoDate: string, now: number): number;
+/**
+ * Render `cert_expiry` with a severity marker: crit (`✗`) when <7d / already
+ * expired, warn (`⚠`) when <30d. An expired leaf = silent off-channels
+ * (DR-030 §5), so it earns the loudest marker.
+ */
+export declare function formatCertExpiry(certExpiry: string | null | undefined, now: number): string;
+/**
+ * Render the `state` self-report. Tolerates the field being absent, a plain
+ * `"idle"|"busy"` string (DR-030 §5), or a `{ status, turn_number, elapsed_ms }`
+ * object (rendered like `busy 18m on turn 7`).
+ */
+export declare function formatRunState(raw: unknown): string;
+/** Render the `otel` self-report's `endpoint_reachable` flag. */
+export declare function formatOtel(raw: unknown): string;
+/** Build one display row per agent (pure — exported for tests). */
+export declare function buildFleetRows(statuses: readonly FleetAgentStatus[], now: number): readonly (readonly string[])[];
+/** Full rendered table for a fleet status list (pure — exported for tests). */
+export declare function formatFleetTable(statuses: readonly FleetAgentStatus[], now: number): string;
+/**
+ * Structured `--json` shape for automation. Carries the RAW `/health` body so
+ * any present `state`/`otel`/future fields pass through untouched.
+ */
+export declare function fleetStatusToJson(statuses: readonly FleetAgentStatus[]): unknown;
+/** Options for `runFleetStatus`. */
+export interface RunFleetStatusOptions {
+    /** Emit the structured data as JSON instead of a table. */
+    readonly json?: boolean;
+    /** Clock for cert-expiry math (defaults to `Date.now()`; injected in tests). */
+    readonly now?: number;
+}
+/** Injectable seam so tests drive the command without touching the registry/network. */
+export interface FleetStatusDeps {
+    readonly listPeers: () => Promise<readonly {
+        readonly name: string;
+        readonly info: AgentInfo;
+    }[]>;
+    readonly probe: FleetProbeFn;
+    readonly project?: string;
+}
+/**
+ * `macf fleet status` entry point. Returns the shell exit code. `deps` is
+ * injected by tests; production resolves it from the project's registry config.
+ */
+export declare function runFleetStatus(projectDir: string, opts?: RunFleetStatusOptions, deps?: FleetStatusDeps): Promise<number>;
+//# sourceMappingURL=fleet.d.ts.map

package/dist/cli/commands/fleet.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/fleet.ts"],"names":[],"mappings":"AAwCA,OAAO,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAGvE;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,8EAA8E;AAC9E,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC;CACvC;AAED,gEAAgE;AAChE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,4FAA4F;IAC5F,QAAQ,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAAC;CACxC;AAED,sFAAsF;AACtF,MAAM,MAAM,YAAY,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;AAO1F;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,SAAS;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,EAAE,EACrE,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,SAAS,gBAAgB,EAAE,CAAC,CAatC;AAED,yEAAyE;AACzE,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAOpD;AAED,6EAA6E;AAC7E,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAG9D;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAQ3F;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAYnD;AAED,iEAAiE;AACjE,wBAAgB,UAAU,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAK/C;AAaD,mEAAmE;AACnE,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,SAAS,gBAAgB,EAAE,EACrC,GAAG,EAAE,MAAM,GACV,SAAS,CAAC,SAAS,MAAM,EAAE,CAAC,EAAE,CAkBhC;AAED,+EAA+E;AAC/E,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,SAAS,gBAAgB,EAAE,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAE3F;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,SAAS,gBAAgB,EAAE,GAAG,OAAO,CAUhF;AAED,oCAAoC;AACpC,MAAM,WAAW,qBAAqB;IACpC,2DAA2D;IAC3D,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,gFAAgF;IAChF,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,wFAAwF;AACxF,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,OAAO,CAAC,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;KAAE,EAAE,CAAC,CAAC;IAClG,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAiCD;;;GAGG;AACH,wBAAsB,cAAc,CAClC,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE,qBAA0B,EAChC,IAAI,CAAC,EAAE,eAAe,GACrB,OAAO,CAAC,MAAM,CAAC,CAyBjB"}