@mesh-tech/mesh-cli 0.18.2 → 0.19.0

package/dist/src/commands/init/wizard.js

@@ -0,0 +1,471 @@
+/**
+ * Bare `mesh init` — the guided setup of a machine and a repo for one tenant.
+ *
+ * Four questions and four steps, in order:
+ *
+ *   1. tenant   — which tenant this repo belongs to
+ *   2. mode     — local only (`mesh start` / `mesh dev`) or a deployed platform
+ *   3. registry — package-registry access, signing in if the machine has none
+ *   4. platform — (deployed only) `mesh login <tenant>.<env>` in-process
+ *   5. repo     — bootstrap an empty apps repo, or check an existing one
+ *   6. skills   — the agent skills the repo's packages ship
+ *
+ * Two identities never mix: the registry step talks to the ONE global package
+ * registry and never needs a context; the platform step is the only place a
+ * `<tenant>.<env>` context appears, and the local branch never mentions it.
+ *
+ * Every step is data (`WizardStep` → `StepResult`) so the summary, the exit
+ * code and the `--json` document are one reducer over one list, and a step
+ * that fails without blocking (a registry 403 — the user needs the summary to
+ * know whom to ask) lets the rest run. Every prompt has a flag, so a runner
+ * with `--tenant … --local --yes` sees no prompt at all.
+ */
+import * as fs from "fs";
+import * as path from "path";
+import chalk from "chalk";
+import { logInfo, logWarn } from "../../utils/log.js";
+import { MeshCliError, emitJsonPayload } from "../../utils/errors.js";
+import { probeRegistryToken } from "../../utils/auth-preflight.js";
+import { RegistryNotAuthorizedError } from "../registry.js";
+import { readRegistrySession } from "../../utils/registry-identity.js";
+import { findMeshJson, isValidTenantName, writeMeshJson } from "../../utils/mesh-json.js";
+import { discoverConfigForContext, isRemoteEnvironment, readCredentials, renderNoConfigHelp, runLoginFlow, tokenStillValid, } from "../login.js";
+import { bootstrapAppsRepo, isInsidePlatformMonorepo, shouldBootstrapAppsRepo } from "../create-app.js";
+import { resolveTargetRoot, syncSkills } from "../skills.js";
+import { detectLocalTenant } from "../local/dev-local.js";
+/** Printed when the registry step has no session and no way to sign in. */
+export const NO_SESSION_NO_TTY_MESSAGE = "No registry session and no terminal to sign in with.\n" +
+    "  On a headless box: mesh registry login --device   (one-time, prints a code)\n" +
+    "  In CI with AWS creds: mesh registry login --ci";
+/** Printed when a non-TTY run has no `--tenant`. */
+export const TENANT_REQUIRED_MESSAGE = "--tenant is required (no TTY for interactive mode)";
+/** Exit code for a Ctrl-C at a prompt: nothing half-written, conventional SIGINT code. */
+export const INTERRUPTED_EXIT_CODE = 130;
+const STEP_LABELS = {
+    registry: "Registry access",
+    platform: "Platform sign-in",
+    repo: "Repo",
+    skills: "Agent skills",
+};
+// ── pure parts ──────────────────────────────────────────────────────────────
+/**
+ * The exit code for a finished run: 1 when any step failed (blocking or not
+ * — a registry 403 still means the machine is not set up), else 0.
+ *
+ * @example
+ * wizardExitCode([{ name: "Registry access", status: "fail", detail: "…", blocking: false }]); // → 1
+ */
+export function wizardExitCode(steps) {
+    return steps.some((s) => s.status === "fail") ? 1 : 0;
+}
+/**
+ * The commands to run next, by mode.
+ *
+ * @example
+ * wizardNextCommands({ platform: "dev" }); // → ["mesh create-app", "mesh deploy up   # from the app directory"]
+ */
+export function wizardNextCommands(mode) {
+    return mode === "local"
+        ? ["mesh create-app"]
+        : ["mesh create-app", "mesh deploy up   # from the app directory, once it exists"];
+}
+/**
+ * Whether the wizard should stop after `result`: a failing step that did not
+ * opt out of blocking.
+ */
+export function stepBlocks(result) {
+    return result.status === "fail" && result.blocking !== false;
+}
+/** The mode as a short phrase for the summary heading. */
+export function describeMode(mode) {
+    return mode === "local" ? "local only" : `deployed platform (${mode.platform})`;
+}
+/**
+ * Render the summary check-list — the same lines for a terminal and for the
+ * stderr side of `--json`.
+ *
+ * @example
+ * renderWizardSummary({ tenant: "acme", mode: "local", steps: [], next: ["mesh create-app"] });
+ */
+export function renderWizardSummary(outcome, opts = {}) {
+    const paint = opts.color === false ? { green: (s) => s, red: (s) => s, yellow: (s) => s, dim: (s) => s, cyan: (s) => s } : chalk;
+    const icon = (status) => status === "pass" ? paint.green("✔") : status === "fail" ? paint.red("✘") : status === "warn" ? paint.yellow("▲") : paint.dim("–");
+    const lines = [`Setup summary — tenant ${outcome.tenant} (${describeMode(outcome.mode)})`];
+    for (const step of outcome.steps) {
+        lines.push(`  ${icon(step.status)} ${step.name.padEnd(18)} ${step.detail}`);
+        if (step.fix && step.status !== "pass")
+            lines.push(`      ${paint.dim("→ run:")} ${paint.cyan(step.fix)}`);
+    }
+    lines.push("", "Next:");
+    for (const cmd of outcome.next)
+        lines.push(`  ${cmd}`);
+    return lines.join("\n");
+}
+/**
+ * Resolve the answers that need no prompt: flags first, then `--yes`
+ * defaults, then what the repo already records. Returns the questions still
+ * open so the caller prompts for exactly those.
+ *
+ * @example
+ * resolveAnswers({ tenant: "acme", local: true }, null, false)
+ * // → { tenant: "acme", mode: "local", open: [] }
+ */
+export function resolveAnswers(opts, recorded, interactive) {
+    const open = [];
+    let tenant = opts.tenant;
+    if (tenant !== undefined && !isValidTenantName(tenant)) {
+        throw new MeshCliError(`Invalid tenant name '${tenant}' (lowercase alphanumeric + dashes, starting with a letter).`);
+    }
+    if (!tenant && (opts.yes || !interactive) && recorded)
+        tenant = recorded.tenant;
+    if (!tenant) {
+        if (!interactive)
+            throw new MeshCliError(TENANT_REQUIRED_MESSAGE);
+        open.push("tenant");
+    }
+    let mode;
+    if (opts.local && opts.platform) {
+        throw new MeshCliError("--local and --platform are mutually exclusive.");
+    }
+    if (opts.platform)
+        mode = { platform: opts.platform };
+    else if (opts.local)
+        mode = "local";
+    else if (opts.yes || !interactive) {
+        mode = recorded && recorded.platform !== "local" ? { platform: recorded.platform } : "local";
+    }
+    else {
+        open.push("mode");
+    }
+    return { tenant, mode, open };
+}
+// ── steps ───────────────────────────────────────────────────────────────────
+/** The registry step, exported so a test can drive the real thing through its seams. */
+export const registryStep = {
+    name: "registry",
+    async run(ctx) {
+        const name = STEP_LABELS.registry;
+        const probe = await (ctx.seams?.probe ?? probeRegistryToken)();
+        if (probe.state === "fresh") {
+            const session = readRegistrySession();
+            return { name, status: "pass", detail: `Registry access OK (${session ? `signed in as ${session.email}` : "token valid"})` };
+        }
+        if (probe.state === "unreachable") {
+            return {
+                name,
+                status: "warn",
+                detail: `could not reach the registry to verify access (${probe.detail ?? "unknown error"})`,
+                fix: "mesh registry login",
+            };
+        }
+        if (!ctx.interactive && !ctx.device && !ctx.profile) {
+            logWarn(NO_SESSION_NO_TTY_MESSAGE);
+            return { name, status: "fail", detail: NO_SESSION_NO_TTY_MESSAGE.split("\n")[0], fix: "mesh registry login --device", blocking: true };
+        }
+        try {
+            const login = ctx.seams?.runRegistryLogin ??
+                (async (opts) => {
+                    const { runRegistryLogin } = await import("../registry.js");
+                    await runRegistryLogin(undefined, opts);
+                });
+            await login({ device: ctx.device, profile: ctx.profile });
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            if (err instanceof RegistryNotAuthorizedError) {
+                // The account is fine; the grant is missing. Not blocking: the repo
+                // steps still tell the user what else is set up, and the summary
+                // carries the "whom to ask" line.
+                return {
+                    name,
+                    status: "fail",
+                    detail: `not authorized — ${message.split("\n")[0]}`,
+                    fix: "ask a Mesh platform admin for the registry:read role, then: mesh registry login",
+                    blocking: false,
+                };
+            }
+            return {
+                name,
+                status: "fail",
+                detail: message.split("\n")[0],
+                fix: ctx.device || ctx.remote ? "mesh registry login --device" : "mesh registry login",
+                blocking: true,
+            };
+        }
+        const session = readRegistrySession();
+        return { name, status: "pass", detail: `Registry access OK (${session ? `signed in as ${session.email}` : "token written"})` };
+    },
+};
+const platformStep = {
+    name: "platform",
+    async run(ctx) {
+        const name = STEP_LABELS.platform;
+        if (!ctx.context)
+            return { name, status: "skip", detail: "local only — no platform to sign in to" };
+        const context = ctx.context;
+        const cached = readCredentials(context);
+        if (cached && tokenStillValid(cached.expiresAt)) {
+            return { name, status: "pass", detail: `signed in to ${context}${cached.email ? ` as ${cached.email}` : ""}` };
+        }
+        const config = await discoverConfigForContext(context);
+        if (!config) {
+            logWarn(renderNoConfigHelp(context));
+            return { name, status: "fail", detail: `no configuration found for ${context} (see above)`, fix: `mesh login ${context}` };
+        }
+        if (!ctx.interactive && !ctx.device) {
+            return { name, status: "fail", detail: `no session for ${context} and no terminal to sign in with`, fix: `mesh login ${context} --device` };
+        }
+        try {
+            await runLoginFlow(context, config, { device: ctx.device });
+        }
+        catch (err) {
+            return { name, status: "fail", detail: `sign-in failed: ${err.message}`, fix: `mesh login ${context}${ctx.device ? " --device" : ""}` };
+        }
+        const creds = readCredentials(context);
+        return {
+            name,
+            status: "pass",
+            detail: `signed in to ${context}${creds?.email ? ` as ${creds.email}` : ""} — tenant registration: mesh init app-tenant --context ${context} --hub-url <hub api url>`,
+        };
+    },
+};
+/**
+ * Classify `cwd` for the repo step. Pure over the filesystem; exported for
+ * tests.
+ *
+ * @example
+ * classifyRepo("/tmp/empty-git-clone"); // → "empty-apps-repo"
+ */
+export function classifyRepo(cwd) {
+    if (isInsidePlatformMonorepo(cwd))
+        return { kind: "platform-monorepo", root: resolveTargetRoot(cwd) };
+    if (shouldBootstrapAppsRepo(cwd))
+        return { kind: "empty-apps-repo", root: cwd };
+    const root = resolveTargetRoot(cwd);
+    const inRepo = fs.existsSync(path.join(root, ".git"));
+    if (!inRepo)
+        return { kind: "no-repo", root };
+    const hasWorkspace = fs.existsSync(path.join(root, "pnpm-workspace.yaml")) || fs.existsSync(path.join(root, "pnpm-lock.yaml"));
+    const hasApps = fs.existsSync(path.join(root, "apps")) || fs.existsSync(path.join(root, "tenants"));
+    if (hasWorkspace || hasApps)
+        return { kind: "apps-repo", root };
+    return { kind: "other-repo", root };
+}
+const repoStep = {
+    name: "repo",
+    async run(ctx) {
+        const name = STEP_LABELS.repo;
+        if (ctx.skipRepo)
+            return { name, status: "skip", detail: "--skip-repo" };
+        const { kind, root } = classifyRepo(ctx.cwd);
+        switch (kind) {
+            case "platform-monorepo":
+                return { name, status: "skip", detail: "inside mesh-platform — apps here link workspace packages; nothing to set up" };
+            case "no-repo":
+                return {
+                    name,
+                    status: "skip",
+                    detail: `not in a git repo — clone (or git init) your ${ctx.tenant}-mesh-apps repo and re-run mesh init there`,
+                };
+            case "other-repo":
+                return {
+                    name,
+                    status: "warn",
+                    detail: "this repo is not a Mesh apps repo (no pnpm workspace, no apps/)",
+                    fix: "mesh create-app   # scaffolds an app and the workspace files around it",
+                };
+            case "empty-apps-repo": {
+                const go = ctx.yes || !ctx.interactive
+                    ? true
+                    : await ctx.prompts.confirm({ message: `Empty repo — bootstrap the ${ctx.tenant}-mesh-apps layout here?`, default: true });
+                if (!go)
+                    return { name, status: "skip", detail: "empty repo left as is", fix: "mesh create-app" };
+                const created = bootstrapAppsRepo(root, ctx.tenant);
+                return { name, status: "pass", detail: `bootstrapped apps repo: ${created.join(", ")}` };
+            }
+            case "apps-repo": {
+                const missing = [];
+                if (!fs.existsSync(path.join(root, "package.json")))
+                    missing.push("package.json");
+                if (!fs.existsSync(path.join(root, "pnpm-workspace.yaml")) && !fs.existsSync(path.join(root, "pnpm-lock.yaml"))) {
+                    missing.push("pnpm-workspace.yaml");
+                }
+                if (missing.length) {
+                    return { name, status: "warn", detail: `apps repo missing ${missing.join(", ")}`, fix: "mesh create-app   # writes the workspace files" };
+                }
+                return { name, status: "pass", detail: `apps repo at ${root}` };
+            }
+        }
+    },
+};
+const skillsStep = {
+    name: "skills",
+    async run(ctx) {
+        const name = STEP_LABELS.skills;
+        if (ctx.skipRepo)
+            return { name, status: "skip", detail: "--skip-repo" };
+        const { kind, root } = classifyRepo(ctx.cwd);
+        if (kind !== "apps-repo" && kind !== "empty-apps-repo") {
+            return { name, status: "skip", detail: "no apps repo to install skills into" };
+        }
+        try {
+            // In fix mode a `false` return is not a failure: the base skills are
+            // written; the platform skills arrive with the packages, so the sync
+            // asks to be re-run after the first install — the doctor reads it the
+            // same way.
+            const complete = syncSkills(root);
+            return complete
+                ? { name, status: "pass", detail: "base skills + Intent discovery in sync" }
+                : { name, status: "pass", detail: "base skills synced — after pnpm install, run: mesh skills sync   (platform skills)" };
+        }
+        catch (err) {
+            return { name, status: "fail", detail: `skills sync failed: ${err.message}`, fix: "mesh skills sync", blocking: false };
+        }
+    },
+};
+/** The steps in run order. Exported so tests can drive the reducer with fakes. */
+export const WIZARD_STEPS = [registryStep, platformStep, repoStep, skillsStep];
+/**
+ * Run `steps` in order, stopping after the first blocking failure. Pure over
+ * the steps' results — the reducer the CLI and the tests share.
+ *
+ * @example
+ * const steps = await runWizardSteps(ctx, WIZARD_STEPS);
+ */
+export async function runWizardSteps(ctx, steps) {
+    const results = [];
+    for (const step of steps) {
+        const result = await step.run(ctx);
+        results.push(result);
+        if (stepBlocks(result))
+            break;
+    }
+    return results;
+}
+// ── the command ─────────────────────────────────────────────────────────────
+async function inquirerPrompts() {
+    const [{ default: input }, { default: select }, { default: confirm }] = await Promise.all([
+        import("@inquirer/input"),
+        import("@inquirer/select"),
+        import("@inquirer/confirm"),
+    ]);
+    return {
+        input: (args) => input(args),
+        select: (args) => select(args),
+        confirm: (args) => confirm(args),
+    };
+}
+function isInterrupt(err) {
+    return err instanceof Error && err.name === "ExitPromptError";
+}
+/**
+ * The wizard entry point behind bare `mesh init`.
+ *
+ * Returns the process exit code instead of exiting, so the caller decides
+ * (and a test can assert on it). Ctrl-C at a prompt returns 130 with nothing
+ * written. All human output goes to stderr under `--json`, leaving stdout for
+ * the one document.
+ *
+ * @example
+ * process.exitCode = await runInitWizard({ tenant: "acme", local: true, yes: true });
+ */
+export async function runInitWizard(opts, deps = {}) {
+    const cwd = deps.cwd ?? process.cwd();
+    const interactive = deps.interactive ?? Boolean(process.stdin.isTTY && process.stdout.isTTY);
+    const remote = deps.remote ?? isRemoteEnvironment();
+    const recorded = findMeshJson(cwd)?.data ?? null;
+    const origLog = console.log;
+    if (opts.json)
+        console.log = (...a) => console.error(...a);
+    try {
+        const answers = resolveAnswers(opts, recorded, interactive);
+        const prompts = deps.prompts ?? (answers.open.length ? await inquirerPrompts() : {});
+        let tenant = answers.tenant;
+        if (!tenant) {
+            const detected = recorded?.tenant ?? (() => {
+                try {
+                    const t = detectLocalTenant(cwd);
+                    return t === "local" ? undefined : t;
+                }
+                catch {
+                    return undefined;
+                }
+            })();
+            tenant = await prompts.input({
+                message: "Tenant name",
+                default: detected,
+                validate: (v) => (isValidTenantName(v) ? true : "lowercase letters, digits and dashes, starting with a letter"),
+            });
+        }
+        let mode = answers.mode;
+        if (!mode) {
+            const choice = await prompts.select({
+                message: "Where does this tenant run?",
+                choices: [
+                    { name: "Local only (mesh start / mesh dev — no deployed platform yet)", value: "local" },
+                    { name: `A deployed Mesh platform (I have a ${tenant}.<env> context)`, value: "deployed" },
+                ],
+                default: recorded && recorded.platform !== "local" ? "deployed" : "local",
+            });
+            if (choice === "local")
+                mode = "local";
+            else {
+                const env = await prompts.input({
+                    message: "Environment",
+                    default: recorded && recorded.platform !== "local" ? recorded.platform : "dev",
+                    validate: (v) => (/^[a-z][a-z0-9-]*$/.test(v) ? true : "lowercase letters, digits and dashes"),
+                });
+                mode = { platform: env };
+            }
+        }
+        const ctx = {
+            cwd,
+            tenant,
+            mode,
+            context: mode === "local" ? null : `${tenant}.${mode.platform}`,
+            device: opts.device,
+            profile: opts.profile,
+            interactive,
+            remote,
+            yes: Boolean(opts.yes),
+            skipRepo: Boolean(opts.skipRepo),
+            prompts,
+            seams: deps.seams,
+        };
+        logInfo(`Setting up tenant '${tenant}' (${describeMode(mode)})…`);
+        const steps = await runWizardSteps(ctx, deps.steps ?? WIZARD_STEPS);
+        // Persist what was answered so a re-run pre-fills — only where there is a
+        // repo of ours to record it in.
+        // Only a Mesh apps repo (or the empty clone that just became one) gets
+        // the record — never an unrelated checkout the wizard happens to run in.
+        const { kind, root } = classifyRepo(cwd);
+        if (!opts.skipRepo && (kind === "apps-repo" || kind === "empty-apps-repo")) {
+            const written = writeMeshJson(root, { tenant, platform: mode === "local" ? "local" : mode.platform });
+            logInfo(`Recorded tenant + mode in ${written}`);
+        }
+        const outcome = { tenant, mode, steps, next: wizardNextCommands(mode) };
+        const code = wizardExitCode(steps);
+        if (opts.json) {
+            console.log = origLog;
+            emitJsonPayload({ ok: code === 0, ...outcome });
+        }
+        else {
+            console.log("");
+            console.log(renderWizardSummary(outcome));
+            console.log("");
+        }
+        return code;
+    }
+    catch (err) {
+        if (isInterrupt(err)) {
+            console.error("");
+            logWarn("Interrupted — nothing was written.");
+            return INTERRUPTED_EXIT_CODE;
+        }
+        throw err;
+    }
+    finally {
+        console.log = origLog;
+    }
+}
+//# sourceMappingURL=wizard.js.map

package/dist/src/commands/init/wizard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wizard.js","sourceRoot":"","sources":["../../../../src/commands/init/wizard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAE,0BAA0B,EAA6B,MAAM,gBAAgB,CAAC;AACvF,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,aAAa,EAAiB,MAAM,0BAA0B,CAAC;AACzG,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,eAAe,EACf,kBAAkB,EAClB,YAAY,EACZ,eAAe,GAChB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AACxG,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAyF1D,2EAA2E;AAC3E,MAAM,CAAC,MAAM,yBAAyB,GACpC,wDAAwD;IACxD,iFAAiF;IACjF,kDAAkD,CAAC;AAErD,oDAAoD;AACpD,MAAM,CAAC,MAAM,uBAAuB,GAAG,oDAAoD,CAAC;AAE5F,0FAA0F;AAC1F,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAEzC,MAAM,WAAW,GAAuC;IACtD,QAAQ,EAAE,iBAAiB;IAC3B,QAAQ,EAAE,kBAAkB;IAC5B,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,cAAc;CACvB,CAAC;AAEF,+EAA+E;AAE/E;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,KAAgD;IAC7E,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAgB;IACjD,OAAO,IAAI,KAAK,OAAO;QACrB,CAAC,CAAC,CAAC,iBAAiB,CAAC;QACrB,CAAC,CAAC,CAAC,iBAAiB,EAAE,2DAA2D,CAAC,CAAC;AACvF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,MAAkB;IAC3C,OAAO,MAAM,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC;AAC/D,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,YAAY,CAAC,IAAgB;IAC3C,OAAO,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,sBAAsB,IAAI,CAAC,QAAQ,GAAG,CAAC;AAClF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAsB,EAAE,OAA4B,EAAE;IACxF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IACzK,MAAM,IAAI,GAAG,CAAC,MAAkB,EAAE,EAAE,CAClC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrI,MAAM,KAAK,GAAG,CAAC,0BAA0B,OAAO,CAAC,MAAM,KAAK,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3F,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5E,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC7G,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IACxB,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;IACvD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAC5B,IAAmB,EACnB,QAAyB,EACzB,WAAoB;IAEpB,MAAM,IAAI,GAA6B,EAAE,CAAC;IAE1C,IAAI,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IACzB,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,YAAY,CAAC,wBAAwB,MAAM,8DAA8D,CAAC,CAAC;IACvH,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,QAAQ;QAAE,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAChF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,YAAY,CAAC,uBAAuB,CAAC,CAAC;QAClE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtB,CAAC;IAED,IAAI,IAA4B,CAAC;IACjC,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,IAAI,YAAY,CAAC,gDAAgD,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ;QAAE,IAAI,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;SACjD,IAAI,IAAI,CAAC,KAAK;QAAE,IAAI,GAAG,OAAO,CAAC;SAC/B,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAClC,IAAI,GAAG,QAAQ,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;IAC/F,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACpB,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAChC,CAAC;AAED,+EAA+E;AAE/E,wFAAwF;AACxF,MAAM,CAAC,MAAM,YAAY,GAAe;IACtC,IAAI,EAAE,UAAU;IAChB,KAAK,CAAC,GAAG,CAAC,GAAG;QACX,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,IAAI,kBAAkB,CAAC,EAAE,CAAC;QAC/D,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,mBAAmB,EAAE,CAAC;YACtC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,uBAAuB,OAAO,CAAC,CAAC,CAAC,gBAAgB,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,aAAa,GAAG,EAAE,CAAC;QAC/H,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;YAClC,OAAO;gBACL,IAAI;gBACJ,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,kDAAkD,KAAK,CAAC,MAAM,IAAI,eAAe,GAAG;gBAC5F,GAAG,EAAE,qBAAqB;aAC3B,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACpD,OAAO,CAAC,yBAAyB,CAAC,CAAC;YACnC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,EAAE,GAAG,EAAE,8BAA8B,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC1I,CAAC;QACD,IAAI,CAAC;YACH,MAAM,KAAK,GACT,GAAG,CAAC,KAAK,EAAE,gBAAgB;gBAC3B,CAAC,KAAK,EAAE,IAA0B,EAAE,EAAE;oBACpC,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;oBAC5D,MAAM,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;gBAC1C,CAAC,CAAC,CAAC;YACL,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,IAAI,GAAG,YAAY,0BAA0B,EAAE,CAAC;gBAC9C,oEAAoE;gBACpE,iEAAiE;gBACjE,kCAAkC;gBAClC,OAAO;oBACL,IAAI;oBACJ,MAAM,EAAE,MAAM;oBACd,MAAM,EAAE,oBAAoB,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE;oBACpD,GAAG,EAAE,iFAAiF;oBACtF,QAAQ,EAAE,KAAK;iBAChB,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,IAAI;gBACJ,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE;gBAC/B,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,qBAAqB;gBACtF,QAAQ,EAAE,IAAI;aACf,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,mBAAmB,EAAE,CAAC;QACtC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,uBAAuB,OAAO,CAAC,CAAC,CAAC,gBAAgB,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,eAAe,GAAG,EAAE,CAAC;IACjI,CAAC;CACF,CAAC;AAEF,MAAM,YAAY,GAAe;IAC/B,IAAI,EAAE,UAAU;IAChB,KAAK,CAAC,GAAG,CAAC,GAAG;QACX,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC;QAClC,IAAI,CAAC,GAAG,CAAC,OAAO;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC;QACpG,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QAC5B,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,MAAM,IAAI,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YAChD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC;QACjH,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;YACrC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,8BAA8B,OAAO,cAAc,EAAE,GAAG,EAAE,cAAc,OAAO,EAAE,EAAE,CAAC;QAC7H,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;YACpC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,OAAO,kCAAkC,EAAE,GAAG,EAAE,cAAc,OAAO,WAAW,EAAE,CAAC;QAC9I,CAAC;QACD,IAAI,CAAC;YACH,MAAM,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAoB,GAAa,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,cAAc,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC;QACrJ,CAAC;QACD,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QACvC,OAAO;YACL,IAAI;YACJ,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,gBAAgB,OAAO,GAAG,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,0DAA0D,OAAO,0BAA0B;SACtK,CAAC;IACJ,CAAC;CACF,CAAC;AAKF;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,IAAI,wBAAwB,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;IACtG,IAAI,uBAAuB,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IAChF,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC9C,MAAM,YAAY,GAChB,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAC5G,MAAM,OAAO,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;IACpG,IAAI,YAAY,IAAI,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAChE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;AACtC,CAAC;AAED,MAAM,QAAQ,GAAe;IAC3B,IAAI,EAAE,MAAM;IACZ,KAAK,CAAC,GAAG,CAAC,GAAG;QACX,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC;QAC9B,IAAI,GAAG,CAAC,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QACzE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7C,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,mBAAmB;gBACtB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,6EAA6E,EAAE,CAAC;YACzH,KAAK,SAAS;gBACZ,OAAO;oBACL,IAAI;oBACJ,MAAM,EAAE,MAAM;oBACd,MAAM,EAAE,gDAAgD,GAAG,CAAC,MAAM,4CAA4C;iBAC/G,CAAC;YACJ,KAAK,YAAY;gBACf,OAAO;oBACL,IAAI;oBACJ,MAAM,EAAE,MAAM;oBACd,MAAM,EAAE,iEAAiE;oBACzE,GAAG,EAAE,wEAAwE;iBAC9E,CAAC;YACJ,KAAK,iBAAiB,CAAC,CAAC,CAAC;gBACvB,MAAM,EAAE,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW;oBACpC,CAAC,CAAC,IAAI;oBACN,CAAC,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,8BAA8B,GAAG,CAAC,MAAM,yBAAyB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC7H,IAAI,CAAC,EAAE;oBAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,uBAAuB,EAAE,GAAG,EAAE,iBAAiB,EAAE,CAAC;gBAClG,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;gBACpD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,2BAA2B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YAC3F,CAAC;YACD,KAAK,WAAW,CAAC,CAAC,CAAC;gBACjB,MAAM,OAAO,GAAa,EAAE,CAAC;gBAC7B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;oBAAE,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;gBAClF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,EAAE,CAAC;oBAChH,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;gBACtC,CAAC;gBACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;oBACnB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,qBAAqB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,gDAAgD,EAAE,CAAC;gBAC5I,CAAC;gBACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,IAAI,EAAE,EAAE,CAAC;YAClE,CAAC;QACH,CAAC;IACH,CAAC;CACF,CAAC;AAEF,MAAM,UAAU,GAAe;IAC7B,IAAI,EAAE,QAAQ;IACd,KAAK,CAAC,GAAG,CAAC,GAAG;QACX,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC;QAChC,IAAI,GAAG,CAAC,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QACzE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACvD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,qCAAqC,EAAE,CAAC;QACjF,CAAC;QACD,IAAI,CAAC;YACH,qEAAqE;YACrE,qEAAqE;YACrE,sEAAsE;YACtE,YAAY;YACZ,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;YAClC,OAAO,QAAQ;gBACb,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,wCAAwC,EAAE;gBAC5E,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,oFAAoF,EAAE,CAAC;QAC7H,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,uBAAwB,GAAa,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,kBAAkB,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACrI,CAAC;IACH,CAAC;CACF,CAAC;AAEF,kFAAkF;AAClF,MAAM,CAAC,MAAM,YAAY,GAA0B,CAAC,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;AAEtG;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAc,EAAE,KAA4B;IAC/E,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrB,IAAI,UAAU,CAAC,MAAM,CAAC;YAAE,MAAM;IAChC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,+EAA+E;AAE/E,KAAK,UAAU,eAAe;IAC5B,MAAM,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACxF,MAAM,CAAC,iBAAiB,CAAC;QACzB,MAAM,CAAC,kBAAkB,CAAC;QAC1B,MAAM,CAAC,mBAAmB,CAAC;KAC5B,CAAC,CAAC;IACH,OAAO;QACL,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;QAC5B,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;QAC9B,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;KACjC,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,GAAY;IAC/B,OAAO,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,iBAAiB,CAAC;AAChE,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAmB,EACnB,OAOI,EAAE;IAEN,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACtC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7F,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,mBAAmB,EAAE,CAAC;IACpD,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC;IAEjD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC;IAC5B,IAAI,IAAI,CAAC,IAAI;QAAE,OAAO,CAAC,GAAG,GAAG,CAAC,GAAG,CAAY,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACtE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,eAAe,EAAE,CAAC,CAAC,CAAE,EAAc,CAAC,CAAC;QAElG,IAAI,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,QAAQ,GAAG,QAAQ,EAAE,MAAM,IAAI,CAAC,GAAG,EAAE;gBACzC,IAAI,CAAC;oBACH,MAAM,CAAC,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;oBACjC,OAAO,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;gBACvC,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,SAAS,CAAC;gBACnB,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;YACL,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC;gBAC3B,OAAO,EAAE,aAAa;gBACtB,OAAO,EAAE,QAAQ;gBACjB,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,8DAA8D,CAAC;aAChH,CAAC,CAAC;QACL,CAAC;QAED,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACxB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAuB;gBACxD,OAAO,EAAE,6BAA6B;gBACtC,OAAO,EAAE;oBACP,EAAE,IAAI,EAAE,+DAA+D,EAAE,KAAK,EAAE,OAAO,EAAE;oBACzF,EAAE,IAAI,EAAE,sCAAsC,MAAM,iBAAiB,EAAE,KAAK,EAAE,UAAU,EAAE;iBAC3F;gBACD,OAAO,EAAE,QAAQ,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO;aAC1E,CAAC,CAAC;YACH,IAAI,MAAM,KAAK,OAAO;gBAAE,IAAI,GAAG,OAAO,CAAC;iBAClC,CAAC;gBACJ,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC;oBAC9B,OAAO,EAAE,aAAa;oBACtB,OAAO,EAAE,QAAQ,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK;oBAC9E,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,sCAAsC,CAAC;iBAC/F,CAAC,CAAC;gBACH,IAAI,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;YAC3B,CAAC;QACH,CAAC;QAED,MAAM,GAAG,GAAc;YACrB,GAAG;YACH,MAAM;YACN,IAAI;YACJ,OAAO,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE;YAC/D,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,WAAW;YACX,MAAM;YACN,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;YACtB,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;YAChC,OAAO;YACP,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC;QAEF,OAAO,CAAC,sBAAsB,MAAM,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClE,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC,CAAC;QAEpE,0EAA0E;QAC1E,gCAAgC;QAChC,uEAAuE;QACvE,yEAAyE;QACzE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,iBAAiB,CAAC,EAAE,CAAC;YAC3E,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YACtG,OAAO,CAAC,6BAA6B,OAAO,EAAE,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,OAAO,GAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;QACvF,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC;YACtB,eAAe,CAAC,EAAE,EAAE,EAAE,IAAI,KAAK,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;QAClD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAClB,OAAO,CAAC,oCAAoC,CAAC,CAAC;YAC9C,OAAO,qBAAqB,CAAC;QAC/B,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC;IACxB,CAAC;AACH,CAAC"}

package/dist/src/commands/init.d.ts

@@ -1,6 +1,8 @@
 /**
- * mesh init app-tenant — the doctor for a tenant apps repo (design §3.1,
- * AC A1–A3).
+ * mesh init — bare: the guided setup wizard (`./init/wizard.ts`);
+ * `init platform <tenant>`: scaffold a platform repo;
+ * `init app-tenant`: the doctor for a tenant apps repo (design §3.1,
+ * AC A1–A3), described below.
  *
  * Runs a read-only check pipeline; every failure names the exact `mesh`
  * command that fixes it (never a person — A2). Re-running IS the doctor
@@ -36,8 +38,15 @@ interface CheckResult {
  * the command `--fix` actually executes: `runRegistryLogin` is called with the
  * doctor's own `--profile` (or none), so advertising a hardcoded
  * `--profile mesh-dev` would be a command the doctor never runs.
+ *
+ * The registry is global, so the command never carries a context — the bare
+ * form is the one that works on a machine that has never signed in.
+ *
+ * @example
+ * registryFixCommand();           // → "mesh registry login"
+ * registryFixCommand("mesh-dev"); // → "mesh registry login --profile mesh-dev"
  */
-export declare function registryFixCommand(profile?: string, context?: string): string;
+export declare function registryFixCommand(profile?: string): string;
 /**
  * The two registry checks, exported for tests.
  *
@@ -51,14 +60,13 @@ export declare function registryFixCommand(profile?: string, context?: string):
  *    expiry. `mesh registry login` now removes it, so it is the fix for both.
  */
 export declare function registryChecks(args: {
-    context: string;
     fix: boolean;
     /** AWS SSO profile to log in with — threaded from `mesh init app-tenant --profile`. */
     profile?: string;
     /** Test seam — defaults to the real network probe against ~/.npmrc. */
     probe?: typeof probeRegistryToken;
-    /** Test seam — defaults to `runRegistryLogin`. */
-    login?: (context: string) => Promise<void>;
+    /** Test seam — defaults to `runRegistryLogin` (context-free: the registry is global). */
+    login?: () => Promise<void>;
 }): Promise<CheckResult[]>;
 export declare function registerInitCommands(program: Command): void;
 export {};

package/dist/src/commands/init.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../../src/commands/init.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAMpC,OAAO,EAGL,kBAAkB,EACnB,MAAM,4BAA4B,CAAC;AAMpC,KAAK,WAAW,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAE5C,UAAU,WAAW;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,sEAAsE;IACtE,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAgCD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAM7E;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,OAAO,CAAC;IACb,uFAAuF;IACvF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uEAAuE;IACvE,KAAK,CAAC,EAAE,OAAO,kBAAkB,CAAC;IAClC,kDAAkD;IAClD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5C,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAqFzB;AA6HD,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA8G3D"}
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../../src/commands/init.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAMpC,OAAO,EAGL,kBAAkB,EACnB,MAAM,4BAA4B,CAAC;AAMpC,KAAK,WAAW,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAE5C,UAAU,WAAW;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,sEAAsE;IACtE,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAgCD;;;;;;;;;;;;GAYG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE;IACzC,GAAG,EAAE,OAAO,CAAC;IACb,uFAAuF;IACvF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uEAAuE;IACvE,KAAK,CAAC,EAAE,OAAO,kBAAkB,CAAC;IAClC,yFAAyF;IACzF,KAAK,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7B,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAqFzB;AA6HD,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA+I3D"}

package/dist/src/commands/init.js

@@ -1,6 +1,8 @@
 /**
- * mesh init app-tenant — the doctor for a tenant apps repo (design §3.1,
- * AC A1–A3).
+ * mesh init — bare: the guided setup wizard (`./init/wizard.ts`);
+ * `init platform <tenant>`: scaffold a platform repo;
+ * `init app-tenant`: the doctor for a tenant apps repo (design §3.1,
+ * AC A1–A3), described below.
  *
  * Runs a read-only check pipeline; every failure names the exact `mesh`
  * command that fixes it (never a person — A2). Re-running IS the doctor
@@ -64,13 +66,16 @@ function readHomeNpmrc() {
  * the command `--fix` actually executes: `runRegistryLogin` is called with the
  * doctor's own `--profile` (or none), so advertising a hardcoded
  * `--profile mesh-dev` would be a command the doctor never runs.
+ *
+ * The registry is global, so the command never carries a context — the bare
+ * form is the one that works on a machine that has never signed in.
+ *
+ * @example
+ * registryFixCommand();           // → "mesh registry login"
+ * registryFixCommand("mesh-dev"); // → "mesh registry login --profile mesh-dev"
  */
-export function registryFixCommand(profile, context) {
-    // Context first: `--fix` calls runRegistryLogin(ctx, …), and a context-less
-    // `mesh registry login` skips the broker entirely — so advertising the bare
-    // form sends someone with no AWS account to a command that cannot work.
-    const base = context ? `mesh registry login ${context}` : "mesh registry login";
-    return profile ? `${base} --profile ${profile}` : base;
+export function registryFixCommand(profile) {
+    return profile ? `mesh registry login --profile ${profile}` : "mesh registry login";
 }
 /**
  * The two registry checks, exported for tests.
@@ -85,16 +90,16 @@ export function registryFixCommand(profile, context) {
  *    expiry. `mesh registry login` now removes it, so it is the fix for both.
  */
 export async function registryChecks(args) {
-    const { context, fix, profile } = args;
+    const { fix, profile } = args;
     const probe = args.probe ?? probeRegistryToken;
     const login = args.login ??
-        (async (ctx) => {
+        (async () => {
             const { runRegistryLogin } = await import("./registry.js");
-            await runRegistryLogin(ctx, profile ? { profile } : {});
+            await runRegistryLogin(undefined, profile ? { profile } : {});
         });
     // The command we ADVERTISE must be the command `--fix` RUNS — otherwise the
     // doctor tells you to pass a profile it then silently drops.
-    const REGISTRY_FIX = registryFixCommand(profile, context);
+    const REGISTRY_FIX = registryFixCommand(profile);
     let tokenState = await probe({ npmrcPath: homeNpmrcPath() });
     let hijack = findUnscopedCodeArtifactRegistry(readHomeNpmrc());
     let repaired = false;
@@ -102,7 +107,7 @@ export async function registryChecks(args) {
     // One login repairs both: it refreshes the token AND strips the unscoped line.
     if (fix && (tokenState.state === "expired" || tokenState.state === "missing" || hijack)) {
         try {
-            await login(context);
+            await login();
             repaired = true;
             tokenState = await probe({ npmrcPath: homeNpmrcPath() });
             hijack = findUnscopedCodeArtifactRegistry(readHomeNpmrc());
@@ -184,7 +189,7 @@ async function runChecks(args) {
         checks.push({ name: "Public npm not hijacked", status: "pass", detail: "local context — no registry required" });
     }
     else {
-        checks.push(...(await registryChecks({ context, fix, profile })));
+        checks.push(...(await registryChecks({ fix, profile })));
     }
     // 3 + 4. Platform tenant + app tenant via the Hub API (the registry)
     const hub = await probeHubTenants(hubUrl, accessToken);
@@ -263,7 +268,28 @@ async function runChecks(args) {
     return checks;
 }
 export function registerInitCommands(program) {
-    const init = program.command("init").description("Initialize / diagnose a repo against the Mesh platform");
+    const init = program
+        .command("init")
+        // The wizard's flags (--tenant, --profile, --json, …) overlap the
+        // subcommands' own. Positional options keep them apart: options before a
+        // subcommand name belong to the wizard, options after it to the subcommand,
+        // so `mesh init app-tenant --json` still reaches the doctor unchanged.
+        .enablePositionalOptions()
+        .description("Set up this machine and repo for a tenant — a guided wizard with no subcommand (tenant, local or deployed, package-registry sign-in, repo, skills); `init platform` scaffolds a platform repo, `init app-tenant` is the apps-repo doctor")
+        .option("--tenant <name>", "app tenant this repo belongs to (prompted when omitted on a TTY)")
+        .option("--local", "local only — mesh start / mesh dev, no deployed platform (the default)")
+        .option("--platform <env>", "a deployed platform's environment; signs in to <tenant>.<env>")
+        .option("--device", "device-code sign-in for the registry and platform steps (headless / SSH)")
+        .option("--profile <aws-profile>", "deployers only: AWS profile that can read the registry (skips the broker)")
+        .option("--skip-repo", "do not bootstrap, check or record anything in the current repo", false)
+        .option("--yes", "accept every default and never prompt", false)
+        .option("--json", "one JSON document on stdout ({tenant, mode, steps, next}); human output on stderr", false)
+        .action(async (opts) => {
+        const { runInitWizard } = await import("./init/wizard.js");
+        const code = await runInitWizard(opts);
+        if (code !== 0)
+            process.exitCode = code;
+    });
     init
         .command("platform <tenant>")
         .description("Scaffold a tenant PLATFORM repo (core + platform Pulumi layers on @mesh-tech/infra-components) that deploys with `mesh deploy` unmodified — the proven mesh-sandbox shape, annotated.")