@intutic/cli 1.10.0 → 2.0.0

package/dist/commands/gateway.js

@@ -0,0 +1,298 @@
+/**
+ * `intutic gateway` — manage self-hosted gateway registrations (LLD #66)
+ * and routing assignment (LLD #68 §2).
+ *
+ * Subcommands:
+ *   - `intutic gateway register --name <name> --target <docker|kubernetes|bare_metal>`
+ *   - `intutic gateway list [--json]`
+ *   - `intutic gateway status <gateway_id> [--json]`
+ *   - `intutic gateway rotate <gateway_id>`
+ *   - `intutic gateway revoke <gateway_id> [--reason <text>]`
+ *   - `intutic gateway config set <gateway_id> [--require-vk <bool>] [--require-provisioned-key <bool>]`
+ *   - `intutic gateway assign --gateway <gateway_id>|--clear [--org <org_id>]`
+ *   - `intutic gateway resolve [--json]`
+ *
+ * Server side: services/control-plane/src/routes/gateways.ts,
+ * routes/gatewayHeartbeat.ts, routes/orgs.ts (`PATCH .../gateway`). A
+ * gateway token (`gwk_...`) is a distinct credential from the `vk_`/JWT
+ * this command authenticates with — it is printed exactly once, on
+ * `register` and `rotate`, and never retrievable again, matching the
+ * server's own one-shot design.
+ *
+ * `assign`/`resolve` are client-side discovery, not traffic routing:
+ * there is no proxy-in-front-of-proxies in this architecture, so
+ * `resolve` tells you which gateway a client SHOULD point at; actually
+ * pointing one there (`CONTROL_PLANE_URL=...`) is still a manual step.
+ *
+ * @module
+ */
+import { log } from '../lib/logger.js';
+import { loadCredentials } from '../config/store.js';
+import { resolveControlPlaneUrl } from '../config/paths.js';
+import { createApiClient } from '../lib/api.js';
+import pc from 'picocolors';
+const NOT_AUTHENTICATED = 'Not authenticated. Run `intutic login` first — gateway registration is an org-scoped control plane feature.';
+const DEPLOYMENT_TARGETS = ['docker', 'kubernetes', 'bare_metal'];
+async function getClient(opts) {
+    const creds = await loadCredentials();
+    if (!creds) {
+        log.error(NOT_AUTHENTICATED);
+        process.exit(1);
+    }
+    const controlPlaneUrl = resolveControlPlaneUrl(opts.dev);
+    return createApiClient(controlPlaneUrl, creds.apiKey);
+}
+function colorStatus(status) {
+    switch (status) {
+        case 'online':
+            return pc.green(status);
+        case 'degraded':
+            return pc.yellow(status);
+        case 'unreachable':
+        case 'revoked':
+            return pc.red(status);
+        default:
+            return pc.dim(status);
+    }
+}
+/** `intutic gateway register` */
+export async function runGatewayRegister(opts) {
+    if (!opts.name || !opts.name.trim()) {
+        log.error('--name is required');
+        process.exit(1);
+    }
+    if (!opts.target || !DEPLOYMENT_TARGETS.includes(opts.target)) {
+        log.error(`--target must be one of: ${DEPLOYMENT_TARGETS.join(', ')}`);
+        process.exit(1);
+    }
+    const client = await getClient(opts);
+    try {
+        const res = await client.post('/api/v1/gateways', {
+            name: opts.name.trim(),
+            deploymentTarget: opts.target,
+        });
+        if (opts.json) {
+            console.log(JSON.stringify(res, null, 2));
+            return;
+        }
+        log.header('Intutic — Gateway Registered');
+        log.field('Gateway ID', res.gatewayId);
+        log.field('Name', res.name);
+        log.field('Deployment target', res.deploymentTarget);
+        log.field('Status', colorStatus(res.status));
+        console.log('');
+        log.warn('This token is shown ONCE and cannot be retrieved again:');
+        console.log(`  ${pc.bold(res.token)}`);
+        console.log('');
+        log.dim(`  ${res.instructions}`);
+    }
+    catch (err) {
+        log.error(`Failed to register gateway: ${err instanceof Error ? err.message : String(err)}`);
+        process.exit(1);
+    }
+}
+/** `intutic gateway list` */
+export async function runGatewayList(opts) {
+    const client = await getClient(opts);
+    try {
+        const res = await client.get('/api/v1/gateways');
+        const rows = res.data ?? [];
+        if (opts.json) {
+            console.log(JSON.stringify(res, null, 2));
+            return;
+        }
+        log.header('Intutic — Gateways');
+        if (rows.length === 0) {
+            log.dim('  No gateways registered for this org yet. Run `intutic gateway register` to add one.');
+            return;
+        }
+        for (const g of rows) {
+            console.log('');
+            log.field('Gateway ID', g.gatewayId);
+            log.field('Name', g.name);
+            log.field('Target', g.deploymentTarget);
+            log.field('Status', colorStatus(g.status));
+            log.field('Token prefix', g.keyPrefix);
+            log.field('Last heartbeat', g.lastHeartbeatAt ?? '— (never)');
+            log.field('Proxy version', g.proxyVersion ?? '—');
+        }
+    }
+    catch (err) {
+        log.error(`Failed to list gateways: ${err instanceof Error ? err.message : String(err)}`);
+        process.exit(1);
+    }
+}
+/** `intutic gateway status <gateway_id>` */
+export async function runGatewayStatus(gatewayId, opts) {
+    const client = await getClient(opts);
+    try {
+        const res = await client.get(`/api/v1/gateways/${encodeURIComponent(gatewayId)}/status`);
+        if (opts.json) {
+            console.log(JSON.stringify(res, null, 2));
+            return;
+        }
+        log.header('Intutic — Gateway Status');
+        log.field('Status', colorStatus(res.status));
+        log.field('Proxy version', res.proxyVersion ?? '—');
+        log.field('Uptime (s)', res.uptimeSeconds !== null ? String(res.uptimeSeconds) : '—');
+        log.field('Active workspaces', res.activeWorkspaces !== null ? String(res.activeWorkspaces) : '—');
+        log.field('LiteLLM reachable', res.litellmReachable === null ? '— (not reported by this proxy version)' : String(res.litellmReachable));
+        log.field('Last error', res.lastError ?? '—');
+        log.field('Reported at', res.reportedAt ?? '— (no heartbeat received within the TTL window)');
+    }
+    catch (err) {
+        log.error(`Failed to fetch gateway status: ${err instanceof Error ? err.message : String(err)}`);
+        process.exit(1);
+    }
+}
+/** `intutic gateway rotate <gateway_id>` */
+export async function runGatewayRotate(gatewayId, opts) {
+    const client = await getClient(opts);
+    try {
+        const res = await client.post(`/api/v1/gateways/${encodeURIComponent(gatewayId)}/rotate`, {});
+        if (opts.json) {
+            console.log(JSON.stringify(res, null, 2));
+            return;
+        }
+        log.header('Intutic — Gateway Token Rotated');
+        log.warn('This new token is shown ONCE and cannot be retrieved again:');
+        console.log(`  ${pc.bold(res.token)}`);
+        console.log('');
+        log.dim(`  ${res.instructions}`);
+    }
+    catch (err) {
+        log.error(`Failed to rotate gateway token: ${err instanceof Error ? err.message : String(err)}`);
+        process.exit(1);
+    }
+}
+/** `intutic gateway revoke <gateway_id>` */
+export async function runGatewayRevoke(gatewayId, opts) {
+    const client = await getClient(opts);
+    try {
+        await client.del(`/api/v1/gateways/${encodeURIComponent(gatewayId)}`, {
+            reason: opts.reason,
+        });
+        log.success(`Gateway ${gatewayId} revoked.`);
+        if (!opts.reason) {
+            log.dim('  Tip: pass --reason "<text>" next time — it is recorded in the audit log.');
+        }
+    }
+    catch (err) {
+        log.error(`Failed to revoke gateway: ${err instanceof Error ? err.message : String(err)}`);
+        process.exit(1);
+    }
+}
+/** `intutic gateway config set <gateway_id>` */
+export async function runGatewayConfigSet(gatewayId, opts) {
+    const body = {};
+    if (opts.requireVk !== undefined) {
+        if (opts.requireVk !== 'true' && opts.requireVk !== 'false') {
+            log.error('--require-vk must be "true" or "false"');
+            process.exit(1);
+        }
+        body.requireVk = opts.requireVk === 'true';
+    }
+    if (opts.requireProvisionedKey !== undefined) {
+        if (opts.requireProvisionedKey !== 'true' && opts.requireProvisionedKey !== 'false') {
+            log.error('--require-provisioned-key must be "true" or "false"');
+            process.exit(1);
+        }
+        body.requireProvisionedKey = opts.requireProvisionedKey === 'true';
+    }
+    if (Object.keys(body).length === 0) {
+        log.error('At least one of --require-vk, --require-provisioned-key is required');
+        process.exit(1);
+    }
+    const client = await getClient(opts);
+    try {
+        const res = await client.patch(`/api/v1/gateways/${encodeURIComponent(gatewayId)}/config`, body);
+        if (opts.json) {
+            console.log(JSON.stringify(res, null, 2));
+            return;
+        }
+        log.success(`Gateway config updated (version ${res.configVersion}).`);
+        log.dim('  A daemon-supervised gateway (packages/gateway-daemon) applies this on its next poll. ' +
+            'Docker/Kubernetes deployments require a manual redeploy to pick up config changes.');
+    }
+    catch (err) {
+        log.error(`Failed to update gateway config: ${err instanceof Error ? err.message : String(err)}`);
+        process.exit(1);
+    }
+}
+/** `intutic gateway assign` — LLD #68 §2. */
+export async function runGatewayAssign(opts) {
+    if (!opts.clear && !opts.gateway) {
+        log.error('Either --gateway <gateway_id> or --clear is required');
+        process.exit(1);
+    }
+    if (opts.clear && opts.gateway) {
+        log.error('--gateway and --clear are mutually exclusive');
+        process.exit(1);
+    }
+    const gatewayId = opts.clear ? null : opts.gateway;
+    const client = await getClient(opts);
+    const path = opts.org
+        ? `/api/v1/orgs/${encodeURIComponent(opts.org)}/gateway`
+        : '/api/v1/workspace/gateway';
+    try {
+        const res = await client.patch(path, { gatewayId });
+        if (opts.json) {
+            console.log(JSON.stringify(res, null, 2));
+            return;
+        }
+        if (res.gatewayId) {
+            log.success(`${opts.org ? `Org ${opts.org}` : 'This workspace'} now defaults to gateway ${res.gatewayId}.`);
+        }
+        else {
+            log.success(`${opts.org ? `Org ${opts.org}'s` : "This workspace's"} gateway override cleared.`);
+        }
+    }
+    catch (err) {
+        log.error(`Failed to update gateway assignment: ${err instanceof Error ? err.message : String(err)}`);
+        process.exit(1);
+    }
+}
+/** `intutic gateway resolve` — LLD #68 §2. */
+export async function runGatewayResolve(opts) {
+    const client = await getClient(opts);
+    try {
+        const res = await client.get('/api/v1/workspace/gateway-resolution');
+        if (opts.json) {
+            console.log(JSON.stringify(res, null, 2));
+            return;
+        }
+        log.header('Intutic — Gateway Resolution');
+        if (res.staleAssignment) {
+            log.warn(`This ${res.source} points at gateway ${res.staleAssignment}, which no longer exists or was revoked.`);
+            log.dim('  Falling back to the shared gateway.intutic.ai until this is reassigned or cleared.');
+            return;
+        }
+        if (!res.gateway) {
+            log.dim('  No override assigned — this workspace uses the shared gateway.intutic.ai.');
+            return;
+        }
+        log.field('Source', res.source === 'workspace' ? 'This workspace\'s own override' : "This org's default");
+        log.field('Gateway ID', res.gateway.gatewayId);
+        log.field('Name', res.gateway.name);
+        log.field('Target', res.gateway.deploymentTarget);
+        log.field('Status', colorStatus(res.gateway.status));
+        console.log('');
+        if (res.gateway.registeredEndpoint && res.gateway.status === 'online') {
+            log.field('Endpoint', res.gateway.registeredEndpoint);
+            log.dim("  intutic connect uses this automatically once no proxyUrl override is set on the workspace.");
+        }
+        else if (res.gateway.registeredEndpoint) {
+            log.dim(`  Endpoint ${res.gateway.registeredEndpoint} is registered but the gateway isn't online yet ` +
+                `(status: ${res.gateway.status}) — traffic stays on the shared gateway until it heartbeats.`);
+        }
+        else {
+            log.dim('  Pointing a client here is still manual — set CONTROL_PLANE_URL (or the proxy target) ' +
+                "to this gateway's own reachable address.");
+        }
+    }
+    catch (err) {
+        log.error(`Failed to resolve gateway: ${err instanceof Error ? err.message : String(err)}`);
+        process.exit(1);
+    }
+}
+//# sourceMappingURL=gateway.js.map

package/dist/commands/gateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway.js","sourceRoot":"","sources":["../../src/commands/gateway.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,MAAM,YAAY,CAAA;AAE3B,MAAM,iBAAiB,GACrB,6GAA6G,CAAA;AAE/G,MAAM,kBAAkB,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE,YAAY,CAAU,CAAA;AA6C1E,KAAK,UAAU,SAAS,CAAC,IAAoB;IAC3C,MAAM,KAAK,GAAG,MAAM,eAAe,EAAE,CAAA;IACrC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAA;QAC5B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IACD,MAAM,eAAe,GAAG,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACxD,OAAO,eAAe,CAAC,eAAe,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;AACvD,CAAC;AAED,SAAS,WAAW,CAAC,MAAc;IACjC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,QAAQ;YACX,OAAO,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACzB,KAAK,UAAU;YACb,OAAO,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QAC1B,KAAK,aAAa,CAAC;QACnB,KAAK,SAAS;YACZ,OAAO,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACvB;YACE,OAAO,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACzB,CAAC;AACH,CAAC;AAED,iCAAiC;AACjC,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAyD;IAEzD,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QACpC,GAAG,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAA;QAC/B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAE,kBAAwC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACrF,GAAG,CAAC,KAAK,CAAC,4BAA4B,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACtE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAA;IAEpC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAA0B,kBAAkB,EAAE;YACzE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YACtB,gBAAgB,EAAE,IAAI,CAAC,MAAM;SAC9B,CAAC,CAAA;QAEF,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;YACzC,OAAM;QACR,CAAC;QAED,GAAG,CAAC,MAAM,CAAC,8BAA8B,CAAC,CAAA;QAC1C,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,GAAG,CAAC,SAAS,CAAC,CAAA;QACtC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAA;QAC3B,GAAG,CAAC,KAAK,CAAC,mBAAmB,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAA;QACpD,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;QAC5C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACf,GAAG,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAA;QACnE,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QACtC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACf,GAAG,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,YAAY,EAAE,CAAC,CAAA;IAClC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,+BAA+B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC5F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;AACH,CAAC;AAED,6BAA6B;AAC7B,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAoB;IACvD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAA;IAEpC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,GAAG,CAA6B,kBAAkB,CAAC,CAAA;QAC5E,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAA;QAE3B,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;YACzC,OAAM;QACR,CAAC;QAED,GAAG,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAA;QAEhC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,GAAG,CAAC,GAAG,CAAC,uFAAuF,CAAC,CAAA;YAChG,OAAM;QACR,CAAC;QAED,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACf,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,SAAS,CAAC,CAAA;YACpC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAA;YACzB,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAA;YACvC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;YAC1C,GAAG,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,SAAS,CAAC,CAAA;YACtC,GAAG,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,eAAe,IAAI,WAAW,CAAC,CAAA;YAC7D,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,YAAY,IAAI,GAAG,CAAC,CAAA;QACnD,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,4BAA4B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACzF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;AACH,CAAC;AAED,4CAA4C;AAC5C,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,SAAiB,EAAE,IAAoB;IAC5E,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAA;IAEpC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,GAAG,CAC1B,oBAAoB,kBAAkB,CAAC,SAAS,CAAC,SAAS,CAC3D,CAAA;QAED,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;YACzC,OAAM;QACR,CAAC;QAED,GAAG,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAA;QACtC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;QAC5C,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,CAAA;QACnD,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,GAAG,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QACrF,GAAG,CAAC,KAAK,CAAC,mBAAmB,EAAE,GAAG,CAAC,gBAAgB,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QAClG,GAAG,CAAC,KAAK,CACP,mBAAmB,EACnB,GAAG,CAAC,gBAAgB,KAAK,IAAI,CAAC,CAAC,CAAC,wCAAwC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CACxG,CAAA;QACD,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,CAAA;QAC7C,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,CAAC,UAAU,IAAI,iDAAiD,CAAC,CAAA;IAC/F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,mCAAmC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAChG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;AACH,CAAC;AAED,4CAA4C;AAC5C,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,SAAiB,EAAE,IAAoB;IAC5E,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAA;IAEpC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAC3B,oBAAoB,kBAAkB,CAAC,SAAS,CAAC,SAAS,EAC1D,EAAE,CACH,CAAA;QAED,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;YACzC,OAAM;QACR,CAAC;QAED,GAAG,CAAC,MAAM,CAAC,iCAAiC,CAAC,CAAA;QAC7C,GAAG,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAA;QACvE,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QACtC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACf,GAAG,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,YAAY,EAAE,CAAC,CAAA;IAClC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,mCAAmC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAChG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;AACH,CAAC;AAED,4CAA4C;AAC5C,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,SAAiB,EACjB,IAA0C;IAE1C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAA;IAEpC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,GAAG,CAAC,oBAAoB,kBAAkB,CAAC,SAAS,CAAC,EAAE,EAAE;YACpE,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAA;QACF,GAAG,CAAC,OAAO,CAAC,WAAW,SAAS,WAAW,CAAC,CAAA;QAC5C,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,GAAG,CAAC,GAAG,CAAC,4EAA4E,CAAC,CAAA;QACvF,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC1F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;AACH,CAAC;AAED,gDAAgD;AAChD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,SAAiB,EACjB,IAA6E;IAE7E,MAAM,IAAI,GAA4B,EAAE,CAAA;IACxC,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM,IAAI,IAAI,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;YAC5D,GAAG,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAA;YACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,KAAK,MAAM,CAAA;IAC5C,CAAC;IACD,IAAI,IAAI,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;QAC7C,IAAI,IAAI,CAAC,qBAAqB,KAAK,MAAM,IAAI,IAAI,CAAC,qBAAqB,KAAK,OAAO,EAAE,CAAC;YACpF,GAAG,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAA;YAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC;QACD,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC,qBAAqB,KAAK,MAAM,CAAA;IACpE,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,GAAG,CAAC,KAAK,CAAC,qEAAqE,CAAC,CAAA;QAChF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAA;IAEpC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAC5B,oBAAoB,kBAAkB,CAAC,SAAS,CAAC,SAAS,EAC1D,IAAI,CACL,CAAA;QAED,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;YACzC,OAAM;QACR,CAAC;QAED,GAAG,CAAC,OAAO,CAAC,mCAAmC,GAAG,CAAC,aAAa,IAAI,CAAC,CAAA;QACrE,GAAG,CAAC,GAAG,CACL,yFAAyF;YACvF,oFAAoF,CACvF,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,oCAAoC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACjG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;AACH,CAAC;AAED,6CAA6C;AAC7C,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAA0E;IAE1E,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACjC,GAAG,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAA;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAC/B,GAAG,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAA;QACzD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,IAAI,CAAC,OAAkB,CAAA;IAC9D,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAA;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG;QACnB,CAAC,CAAC,gBAAgB,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU;QACxD,CAAC,CAAC,2BAA2B,CAAA;IAE/B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAC5B,IAAI,EACJ,EAAE,SAAS,EAAE,CACd,CAAA;QAED,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;YACzC,OAAM;QACR,CAAC;QAED,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;YAClB,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,gBAAgB,4BAA4B,GAAG,CAAC,SAAS,GAAG,CAAC,CAAA;QAC7G,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,kBAAkB,4BAA4B,CAAC,CAAA;QACjG,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,wCAAwC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACrG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;AACH,CAAC;AAcD,8CAA8C;AAC9C,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAoB;IAC1D,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAA;IAEpC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,GAAG,CAA4B,sCAAsC,CAAC,CAAA;QAE/F,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;YACzC,OAAM;QACR,CAAC;QAED,GAAG,CAAC,MAAM,CAAC,8BAA8B,CAAC,CAAA;QAC1C,IAAI,GAAG,CAAC,eAAe,EAAE,CAAC;YACxB,GAAG,CAAC,IAAI,CACN,QAAQ,GAAG,CAAC,MAAM,sBAAsB,GAAG,CAAC,eAAe,0CAA0C,CACtG,CAAA;YACD,GAAG,CAAC,GAAG,CAAC,sFAAsF,CAAC,CAAA;YAC/F,OAAM;QACR,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACjB,GAAG,CAAC,GAAG,CAAC,6EAA6E,CAAC,CAAA;YACtF,OAAM;QACR,CAAC;QAED,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAA;QACzG,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QAC9C,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QACnC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;QACjD,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAA;QACpD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAEf,IAAI,GAAG,CAAC,OAAO,CAAC,kBAAkB,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACtE,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAA;YACrD,GAAG,CAAC,GAAG,CAAC,8FAA8F,CAAC,CAAA;QACzG,CAAC;aAAM,IAAI,GAAG,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;YAC1C,GAAG,CAAC,GAAG,CACL,cAAc,GAAG,CAAC,OAAO,CAAC,kBAAkB,kDAAkD;gBAC5F,YAAY,GAAG,CAAC,OAAO,CAAC,MAAM,8DAA8D,CAC/F,CAAA;QACH,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CACL,yFAAyF;gBACvF,0CAA0C,CAC7C,CAAA;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,8BAA8B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC3F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;AACH,CAAC"}

package/dist/commands/guardrails.d.ts

@@ -0,0 +1,81 @@
+/**
+ * `intutic guardrails` — the Policy Clause Ledger from the terminal
+ * (LLD #71, Wave 6): sources, documents, the review queue, and the three
+ * decisions that move a cited guardrail. A client of
+ * `/api/v1/policy-guardrails/*` and `/api/v1/connectors`; nothing here
+ * decides anything the server would not.
+ *
+ * Not `intutic policy` (the WASM rule loop) and not `intutic sops` (the
+ * file plane). The acting identity is never a flag: the server records the
+ * authenticated member, so a client-supplied name cannot forge the audit
+ * trail — same rule as `intutic findings adjudicate`.
+ */
+interface CommonOpts {
+    dev?: boolean;
+    json?: boolean;
+}
+export declare function runGuardrailsSourcesList(opts: CommonOpts): Promise<void>;
+export declare function runGuardrailsSourcesAdd(provider: string, opts: CommonOpts & {
+    name?: string;
+    token?: string;
+    tokenFile?: string;
+    config?: string;
+}): Promise<void>;
+export declare function runGuardrailsSourcesSync(connectorId: string, opts: CommonOpts): Promise<void>;
+export declare function runGuardrailsDocsList(opts: CommonOpts): Promise<void>;
+export declare function runGuardrailsDocsShow(docId: string, opts: CommonOpts): Promise<void>;
+export declare function runGuardrailsDocsExtract(docId: string, opts: CommonOpts & {
+    noLlm?: boolean;
+}): Promise<void>;
+export declare function runGuardrailsSearch(token: string, opts: CommonOpts & {
+    text?: boolean;
+}): Promise<void>;
+export declare function runGuardrailsImpact(opts: CommonOpts & {
+    doc?: string;
+    passage?: string;
+}): Promise<void>;
+export declare function runGuardrailsDuplicates(opts: CommonOpts & {
+    minJaccard?: string;
+}): Promise<void>;
+export declare function runGuardrailsList(opts: CommonOpts & {
+    status?: string;
+    target?: string;
+    doc?: string;
+    limit?: string;
+}): Promise<void>;
+export declare function runGuardrailsShow(guardrailId: string, opts: CommonOpts): Promise<void>;
+export declare function runGuardrailsApproveShadow(guardrailId: string, opts: CommonOpts): Promise<void>;
+export declare function runGuardrailsPromote(guardrailId: string, opts: CommonOpts & {
+    acknowledgeNoTraffic?: boolean;
+}): Promise<void>;
+export declare function runGuardrailsReject(guardrailId: string, opts: CommonOpts & {
+    reason?: string;
+}): Promise<void>;
+export declare function runGuardrailsRetire(guardrailId: string, opts: CommonOpts): Promise<void>;
+export declare function runGuardrailsReconfirm(guardrailId: string, opts: CommonOpts): Promise<void>;
+export declare function runGuardrailsReplay(guardrailId: string, opts: CommonOpts): Promise<void>;
+export declare function runGuardrailsConflicts(opts: CommonOpts): Promise<void>;
+/**
+ * `intutic guardrails pull` — the SHADOW and ENFORCING front-matter
+ * guardrails `GET /api/v1/workspace/sops-policy` serves, written to
+ * `.intutic/sops/guardrail-<id>.md` for a proxy that reads SOPs from disk.
+ *
+ * Flat, not in a subdirectory: the proxy's loader reads one directory level
+ * and titles each SOP by its file stem, and `guardrail-<id>` is a stem the
+ * control plane credits shadow reports to. The served markdown already
+ * carries its own front-matter fence with the enforcing keys and
+ * `mode: shadow`; `withContentHash` puts the pull marker inside that fence
+ * rather than wrapping a second one the proxy would never read.
+ *
+ * Same overwrite rule as `intutic sops pull`: a file whose recorded hash no
+ * longer matches its body was edited by hand and is left alone without
+ * `--force`. A file for a guardrail that is no longer served (retired or
+ * rejected) is reported — a proxy reading the directory still enforces it —
+ * and removed only with `--prune`, and only when it is unmodified.
+ */
+export declare function runGuardrailsPull(opts: CommonOpts & {
+    force?: boolean;
+    prune?: boolean;
+}): Promise<void>;
+export {};
+//# sourceMappingURL=guardrails.d.ts.map

package/dist/commands/guardrails.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guardrails.d.ts","sourceRoot":"","sources":["../../src/commands/guardrails.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAiCH,UAAU,UAAU;IAClB,GAAG,CAAC,EAAE,OAAO,CAAA;IACb,IAAI,CAAC,EAAE,OAAO,CAAA;CACf;AAwCD,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CA0B9E;AAED,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,UAAU,GAAG;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACxF,OAAO,CAAC,IAAI,CAAC,CAuDf;AAED,wBAAsB,wBAAwB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBnG;AAID,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAyB3E;AAED,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CA+B1F;AAED,wBAAsB,wBAAwB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAqCnH;AAID,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA4B7G;AAiCD,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,UAAU,GAAG;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA4B9G;AAED,wBAAsB,uBAAuB,CAAC,IAAI,EAAE,UAAU,GAAG;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAqCvG;AAID,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,UAAU,GAAG;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAmD5I;AAUD,wBAAsB,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CA8C5F;AA8CD,wBAAsB,0BAA0B,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAErG;AAED,wBAAsB,oBAAoB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG;IAAE,oBAAoB,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAEpI;AAED,wBAAsB,mBAAmB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAMpH;AAED,wBAAsB,mBAAmB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAE9F;AAED,wBAAsB,sBAAsB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAEjG;AAED,wBAAsB,mBAAmB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAqB9F;AAED,wBAAsB,sBAAsB,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAwB5E;AAYD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,UAAU,GAAG;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAwF9G"}