@openrig/cli 0.4.8 → 0.5.1

package/node_modules/@openrig/daemon/dist/domain/install-verifier.js

@@ -0,0 +1,146 @@
+import { createHash } from "node:crypto";
+const BLOCK_START = (name) => `<!-- BEGIN OpenRig MANAGED BLOCK: ${name} -->`;
+const BLOCK_END = (name) => `<!-- END OpenRig MANAGED BLOCK: ${name} -->`;
+function hashContent(content) {
+    return createHash("sha256").update(content).digest("hex");
+}
+export class InstallVerifier {
+    installRepo;
+    packageRepo;
+    fs;
+    constructor(installRepo, packageRepo, fs) {
+        this.installRepo = installRepo;
+        this.packageRepo = packageRepo;
+        this.fs = fs;
+    }
+    verify(installId) {
+        const install = this.installRepo.getInstall(installId);
+        if (!install) {
+            return {
+                passed: false,
+                installId,
+                entries: [],
+                statusCheck: { name: "install_exists", passed: false, expected: "exists", actual: "not found" },
+            };
+        }
+        // Status check
+        const statusCheck = {
+            name: "install_status",
+            passed: install.status === "applied",
+            expected: "applied",
+            actual: install.status,
+        };
+        if (!statusCheck.passed) {
+            return { passed: false, installId, entries: [], statusCheck };
+        }
+        // Get package name for guidance marker checks
+        const pkg = this.packageRepo.getPackage(install.packageId);
+        const packageName = pkg?.name ?? "unknown";
+        // Get applied journal entries (not rollback entries)
+        const journal = this.installRepo.getJournalEntries(installId);
+        const applyEntries = journal.filter((e) => e.action !== "rollback");
+        // Empty journal for applied install is a verification failure
+        if (applyEntries.length === 0) {
+            return {
+                passed: false,
+                installId,
+                entries: [],
+                statusCheck: { ...statusCheck, name: "journal_not_empty", passed: false, expected: "at least 1 applied entry", actual: "0 entries" },
+            };
+        }
+        const entries = [];
+        let allPassed = true;
+        for (const entry of applyEntries) {
+            const checks = [];
+            // Check 1: Target file exists
+            const exists = this.fs.exists(entry.targetPath);
+            checks.push({
+                name: "target_exists",
+                passed: exists,
+                expected: "exists",
+                actual: exists ? "exists" : "missing",
+            });
+            if (exists) {
+                if (!entry.afterHash) {
+                    // Missing after_hash — integrity cannot be verified
+                    checks.push({
+                        name: "content_hash",
+                        passed: false,
+                        expected: "hash recorded",
+                        actual: "after_hash missing from journal",
+                    });
+                }
+                // Check 2: Content hash matches (only if after_hash recorded)
+                const content = this.fs.readFile(entry.targetPath);
+                const currentHash = hashContent(content);
+                if (entry.afterHash) {
+                    checks.push({
+                        name: "content_hash",
+                        passed: currentHash === entry.afterHash,
+                        expected: entry.afterHash,
+                        actual: currentHash,
+                    });
+                }
+                // Check 3: Guidance managed block markers — recognize both
+                // the OpenRig form (current writes) and the legacy RIGGED form
+                // from prior installs so verification of pre-rename installs
+                // does not falsely report missing markers.
+                if (entry.exportType === "guidance") {
+                    const legacyStart = `<!-- BEGIN RIGGED MANAGED BLOCK: ${packageName} -->`;
+                    const legacyEnd = `<!-- END RIGGED MANAGED BLOCK: ${packageName} -->`;
+                    const hasStart = content.includes(BLOCK_START(packageName)) || content.includes(legacyStart);
+                    const hasEnd = content.includes(BLOCK_END(packageName)) || content.includes(legacyEnd);
+                    checks.push({
+                        name: "managed_block_markers",
+                        passed: hasStart && hasEnd,
+                        expected: "BEGIN + END markers present",
+                        actual: hasStart && hasEnd ? "present" : `BEGIN: ${hasStart}, END: ${hasEnd}`,
+                    });
+                }
+            }
+            // Check 4-5: Backup integrity
+            if (entry.backupPath) {
+                const backupExists = this.fs.exists(entry.backupPath);
+                checks.push({
+                    name: "backup_exists",
+                    passed: backupExists,
+                    expected: "exists",
+                    actual: backupExists ? "exists" : "missing",
+                });
+                if (backupExists && !entry.beforeHash) {
+                    checks.push({
+                        name: "backup_hash",
+                        passed: false,
+                        expected: "hash recorded",
+                        actual: "before_hash missing from journal",
+                    });
+                }
+                else if (backupExists && entry.beforeHash) {
+                    const backupContent = this.fs.readFile(entry.backupPath);
+                    const backupHash = hashContent(backupContent);
+                    checks.push({
+                        name: "backup_hash",
+                        passed: backupHash === entry.beforeHash,
+                        expected: entry.beforeHash,
+                        actual: backupHash,
+                    });
+                }
+            }
+            const entryPassed = checks.every((c) => c.passed);
+            if (!entryPassed)
+                allPassed = false;
+            entries.push({
+                journalId: entry.id,
+                targetPath: entry.targetPath,
+                checks,
+            });
+        }
+        return {
+            passed: allPassed && statusCheck.passed,
+            installId,
+            entries,
+            statusCheck,
+        };
+    }
+}
+//# sourceMappingURL=install-verifier.js.map

package/node_modules/@openrig/daemon/dist/domain/install-verifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-verifier.js","sourceRoot":"","sources":["../../src/domain/install-verifier.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AA6BzC,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,qCAAqC,IAAI,MAAM,CAAC;AACtF,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,mCAAmC,IAAI,MAAM,CAAC;AAElF,SAAS,WAAW,CAAC,OAAe;IAClC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,OAAO,eAAe;IAClB,WAAW,CAAoB;IAC/B,WAAW,CAAoB;IAC/B,EAAE,CAAgB;IAE1B,YAAY,WAA8B,EAAE,WAA8B,EAAE,EAAiB;QAC3F,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,CAAC;IAED,MAAM,CAAC,SAAiB;QACtB,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,SAAS;gBACT,OAAO,EAAE,EAAE;gBACX,WAAW,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE;aAChG,CAAC;QACJ,CAAC;QAED,eAAe;QACf,MAAM,WAAW,GAAU;YACzB,IAAI,EAAE,gBAAgB;YACtB,MAAM,EAAE,OAAO,CAAC,MAAM,KAAK,SAAS;YACpC,QAAQ,EAAE,SAAS;YACnB,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC;QAEF,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;YACxB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;QAChE,CAAC;QAED,8CAA8C;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC3D,MAAM,WAAW,GAAG,GAAG,EAAE,IAAI,IAAI,SAAS,CAAC;QAE3C,qDAAqD;QACrD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC9D,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;QAEpE,8DAA8D;QAC9D,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,SAAS;gBACT,OAAO,EAAE,EAAE;gBACX,WAAW,EAAE,EAAE,GAAG,WAAW,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,0BAA0B,EAAE,MAAM,EAAE,WAAW,EAAE;aACrI,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAwB,EAAE,CAAC;QACxC,IAAI,SAAS,GAAG,IAAI,CAAC;QAErB,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;YACjC,MAAM,MAAM,GAAY,EAAE,CAAC;YAE3B,8BAA8B;YAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAChD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,eAAe;gBACrB,MAAM,EAAE,MAAM;gBACd,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;aACtC,CAAC,CAAC;YAEH,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;oBACrB,oDAAoD;oBACpD,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,cAAc;wBACpB,MAAM,EAAE,KAAK;wBACb,QAAQ,EAAE,eAAe;wBACzB,MAAM,EAAE,iCAAiC;qBAC1C,CAAC,CAAC;gBACL,CAAC;gBAED,8DAA8D;gBAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBACnD,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;gBAEzC,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;oBACpB,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,cAAc;wBACpB,MAAM,EAAE,WAAW,KAAK,KAAK,CAAC,SAAS;wBACvC,QAAQ,EAAE,KAAK,CAAC,SAAS;wBACzB,MAAM,EAAE,WAAW;qBACpB,CAAC,CAAC;gBACL,CAAC;gBAED,2DAA2D;gBAC3D,+DAA+D;gBAC/D,6DAA6D;gBAC7D,2CAA2C;gBAC3C,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;oBACpC,MAAM,WAAW,GAAG,oCAAoC,WAAW,MAAM,CAAC;oBAC1E,MAAM,SAAS,GAAG,kCAAkC,WAAW,MAAM,CAAC;oBACtE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;oBAC7F,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;oBACvF,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,uBAAuB;wBAC7B,MAAM,EAAE,QAAQ,IAAI,MAAM;wBAC1B,QAAQ,EAAE,6BAA6B;wBACvC,MAAM,EAAE,QAAQ,IAAI,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,QAAQ,UAAU,MAAM,EAAE;qBAC9E,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,8BAA8B;YAC9B,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;gBACrB,MAAM,YAAY,GAAG,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBACtD,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,eAAe;oBACrB,MAAM,EAAE,YAAY;oBACpB,QAAQ,EAAE,QAAQ;oBAClB,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;iBAC5C,CAAC,CAAC;gBAEH,IAAI,YAAY,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;oBACtC,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,aAAa;wBACnB,MAAM,EAAE,KAAK;wBACb,QAAQ,EAAE,eAAe;wBACzB,MAAM,EAAE,kCAAkC;qBAC3C,CAAC,CAAC;gBACL,CAAC;qBAAM,IAAI,YAAY,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;oBAC5C,MAAM,aAAa,GAAG,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;oBACzD,MAAM,UAAU,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC;oBAC9C,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,aAAa;wBACnB,MAAM,EAAE,UAAU,KAAK,KAAK,CAAC,UAAU;wBACvC,QAAQ,EAAE,KAAK,CAAC,UAAU;wBAC1B,MAAM,EAAE,UAAU;qBACnB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAClD,IAAI,CAAC,WAAW;gBAAE,SAAS,GAAG,KAAK,CAAC;YAEpC,OAAO,CAAC,IAAI,CAAC;gBACX,SAAS,EAAE,KAAK,CAAC,EAAE;gBACnB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,MAAM;aACP,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,MAAM,EAAE,SAAS,IAAI,WAAW,CAAC,MAAM;YACvC,SAAS;YACT,OAAO;YACP,WAAW;SACZ,CAAC;IACJ,CAAC;CACF"}

package/node_modules/@openrig/daemon/dist/domain/kernel-boot-tracker.d.ts

@@ -0,0 +1,74 @@
+import type { EventBus } from "./event-bus.js";
+import type { SessionRegistry } from "./session-registry.js";
+import type { RigRepository } from "./rig-repository.js";
+import type { BootstrapResult } from "./bootstrap-orchestrator.js";
+export type KernelState = "skipped" | "auth_blocked" | "spec_missing" | "booting" | "partial_ready" | "ready" | "bootstrap_failed" | "degraded";
+export interface KernelAgentStatus {
+    /** Session name (e.g. `advisor-lead@kernel`). */
+    sessionName: string;
+    /** Runtime declared in the agent profile (claude-code / codex / terminal). */
+    runtime: string;
+    /** Startup status from the sessions table. Same enum as session-registry. */
+    startupStatus: "pending" | "ready" | "attention_required" | "failed";
+}
+export interface KernelBootStatus {
+    kernelState: KernelState;
+    agents: KernelAgentStatus[];
+    /** ISO timestamp of when the kernel first entered booting; null in
+     *  terminal/skipped states. */
+    firstUnreadySince: string | null;
+    /** Filename of the picked variant (rig.yaml / rig-claude-only.yaml /
+     *  rig-codex-only.yaml). null when no variant was selected. */
+    variant: string | null;
+    /** Human-readable detail for auth_blocked / spec_missing /
+     *  bootstrap_failed / degraded states. null otherwise. */
+    detail: string | null;
+}
+export interface KernelBootTrackerDeps {
+    eventBus: EventBus;
+    sessionRegistry: SessionRegistry;
+    rigRepo: RigRepository;
+    /** Milliseconds the tracker waits in `booting` before emitting
+     *  `kernel.agent.degraded` and transitioning to the `degraded` state.
+     *  Default 90_000 (90s) per IMPL-PRD §6.3 amendment. Tests pass
+     *  shorter values; daemon startup honors the OPENRIG_KERNEL_DEGRADED_MS
+     *  env override resolved by startup.ts. */
+    degradedTimeoutMs?: number;
+}
+export declare class KernelBootTracker {
+    private readonly deps;
+    private state;
+    private variant;
+    private detail;
+    private firstUnreadySince;
+    private degradedTimer;
+    private degradedEmitted;
+    private bootstrapInFlight;
+    constructor(deps: KernelBootTrackerDeps);
+    /** Mark the tracker as having intentionally not booted (--no-kernel,
+     *  already-managed short-circuit, VITEST auto-skip). Terminal state;
+     *  no degraded timer. */
+    setSkipped(detail: string): void;
+    /** Auth-blocked terminal. Operator sees the 3-part error in detail. */
+    setAuthBlocked(message: string): void;
+    /** Spec-missing terminal. Path is in detail for ops triage. */
+    setSpecMissing(specPath: string): void;
+    /** Begin tracking an in-flight bootstrap. The bootstrap promise
+     *  is awaited internally; the caller does NOT block on it. */
+    startBooting(variant: string, bootstrapPromise: Promise<BootstrapResult>): void;
+    /** Read current status. Computes agents[] live from the sessions
+     *  table so the response always reflects the freshest startup_status. */
+    getStatus(): KernelBootStatus;
+    /** Stop the degraded timer. Safe to call from anywhere (idempotent).
+     *  Production callers don't need this; tests + graceful daemon
+     *  shutdown do. */
+    stop(): void;
+    private onBootstrapComplete;
+    private onBootstrapError;
+    private aggregateReadinessFromAgents;
+    private computeAgents;
+    private scheduleDegradedTimer;
+    private cancelTimer;
+    private checkDegraded;
+}
+//# sourceMappingURL=kernel-boot-tracker.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/kernel-boot-tracker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kernel-boot-tracker.d.ts","sourceRoot":"","sources":["../../src/domain/kernel-boot-tracker.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAEnE,MAAM,MAAM,WAAW,GACnB,SAAS,GACT,cAAc,GACd,cAAc,GACd,SAAS,GACT,eAAe,GACf,OAAO,GACP,kBAAkB,GAClB,UAAU,CAAC;AAEf,MAAM,WAAW,iBAAiB;IAChC,iDAAiD;IACjD,WAAW,EAAE,MAAM,CAAC;IACpB,8EAA8E;IAC9E,OAAO,EAAE,MAAM,CAAC;IAChB,6EAA6E;IAC7E,aAAa,EAAE,SAAS,GAAG,OAAO,GAAG,oBAAoB,GAAG,QAAQ,CAAC;CACtE;AAED,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,WAAW,CAAC;IACzB,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC5B;mCAC+B;IAC/B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC;mEAC+D;IAC/D,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB;8DAC0D;IAC1D,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,QAAQ,CAAC;IACnB,eAAe,EAAE,eAAe,CAAC;IACjC,OAAO,EAAE,aAAa,CAAC;IACvB;;;;+CAI2C;IAC3C,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,qBAAa,iBAAiB;IAShB,OAAO,CAAC,QAAQ,CAAC,IAAI;IARjC,OAAO,CAAC,KAAK,CAA0B;IACvC,OAAO,CAAC,OAAO,CAAuB;IACtC,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,iBAAiB,CAAuB;IAChD,OAAO,CAAC,aAAa,CAA8C;IACnE,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,iBAAiB,CAAS;gBAEL,IAAI,EAAE,qBAAqB;IAExD;;6BAEyB;IACzB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAOhC,uEAAuE;IACvE,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAOrC,+DAA+D;IAC/D,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAOtC;kEAC8D;IAC9D,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,IAAI;IAe/E;6EACyE;IACzE,SAAS,IAAI,gBAAgB;IAoB7B;;uBAEmB;IACnB,IAAI,IAAI,IAAI;IAIZ,OAAO,CAAC,mBAAmB;IAoB3B,OAAO,CAAC,gBAAgB;IAOxB,OAAO,CAAC,4BAA4B;IAepC,OAAO,CAAC,aAAa;IA2BrB,OAAO,CAAC,qBAAqB;IAW7B,OAAO,CAAC,WAAW;IAOnB,OAAO,CAAC,aAAa;CA6BtB"}

package/node_modules/@openrig/daemon/dist/domain/kernel-boot-tracker.js

@@ -0,0 +1,213 @@
+// V0.3.1 slice 05 kernel-rig-as-default — forward-fix #3 architectural.
+// Decouples daemon health/listen from kernel-agent readiness.
+//
+// Prior behavior: `bootKernelIfNeeded` awaited `bootstrapOrchestrator.bootstrap(...)`
+// inside `createDaemon`, so the daemon process couldn't reach `serve()` until
+// the kernel rig's members had been launched + their startup deliveries
+// completed. A broken kernel agent (e.g., Codex unauthenticated mid-boot)
+// stalled healthz too. The CLI then reported "daemon failed to start" even
+// though the daemon itself was perfectly happy — only the *kernel* was sad.
+//
+// New behavior: `bootKernelIfNeeded` builds a tracker, fires the bootstrap
+// in the background, and returns immediately. The daemon binds healthz as
+// soon as `createDaemon` completes (HTTP server bind happens in server.ts
+// right after). Tracker state is published via GET /api/kernel/status so
+// operators (and CLI flags like `--wait-for-kernel`) can observe progress.
+//
+// A configurable degraded-timer (default 90s) emits a single
+// `kernel.agent.degraded` event if the kernel doesn't reach a ready / partial-
+// ready state in time — telemetry that something is keeping the kernel
+// stuck (auth / spec / tmux / etc.).
+export class KernelBootTracker {
+    deps;
+    state = "skipped";
+    variant = null;
+    detail = null;
+    firstUnreadySince = null;
+    degradedTimer = null;
+    degradedEmitted = false;
+    bootstrapInFlight = false;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    /** Mark the tracker as having intentionally not booted (--no-kernel,
+     *  already-managed short-circuit, VITEST auto-skip). Terminal state;
+     *  no degraded timer. */
+    setSkipped(detail) {
+        this.cancelTimer();
+        this.state = "skipped";
+        this.detail = detail;
+        this.firstUnreadySince = null;
+    }
+    /** Auth-blocked terminal. Operator sees the 3-part error in detail. */
+    setAuthBlocked(message) {
+        this.cancelTimer();
+        this.state = "auth_blocked";
+        this.detail = message;
+        this.firstUnreadySince = null;
+    }
+    /** Spec-missing terminal. Path is in detail for ops triage. */
+    setSpecMissing(specPath) {
+        this.cancelTimer();
+        this.state = "spec_missing";
+        this.detail = specPath;
+        this.firstUnreadySince = null;
+    }
+    /** Begin tracking an in-flight bootstrap. The bootstrap promise
+     *  is awaited internally; the caller does NOT block on it. */
+    startBooting(variant, bootstrapPromise) {
+        if (this.bootstrapInFlight)
+            return;
+        this.bootstrapInFlight = true;
+        this.state = "booting";
+        this.variant = variant;
+        this.detail = null;
+        this.firstUnreadySince = new Date().toISOString();
+        this.degradedEmitted = false;
+        this.scheduleDegradedTimer();
+        bootstrapPromise
+            .then((result) => this.onBootstrapComplete(result))
+            .catch((err) => this.onBootstrapError(err));
+    }
+    /** Read current status. Computes agents[] live from the sessions
+     *  table so the response always reflects the freshest startup_status. */
+    getStatus() {
+        const agents = this.computeAgents();
+        let kernelState = this.state;
+        // Once bootstrap has completed (state == 'booting' before then),
+        // promote to ready / partial_ready based on agent startup_status.
+        if (this.state === "booting" && !this.bootstrapInFlight) {
+            kernelState = this.aggregateReadinessFromAgents(agents);
+        }
+        return {
+            kernelState,
+            agents,
+            firstUnreadySince: kernelState === "ready" || kernelState === "skipped"
+                ? null
+                : this.firstUnreadySince,
+            variant: this.variant,
+            detail: this.detail,
+        };
+    }
+    /** Stop the degraded timer. Safe to call from anywhere (idempotent).
+     *  Production callers don't need this; tests + graceful daemon
+     *  shutdown do. */
+    stop() {
+        this.cancelTimer();
+    }
+    onBootstrapComplete(result) {
+        this.bootstrapInFlight = false;
+        if (result.errors && result.errors.length > 0) {
+            this.cancelTimer();
+            this.state = "bootstrap_failed";
+            this.detail = result.errors.join("; ");
+            return;
+        }
+        // Bootstrap returned cleanly. State transitions to ready /
+        // partial_ready are computed on read from agents[]. Cancel the
+        // degraded timer ONLY when at least one agent is ready — until
+        // then, the kernel is still effectively booting and the operator
+        // wants the degraded telemetry if no agent ever reaches ready.
+        const agents = this.computeAgents();
+        const aggregated = this.aggregateReadinessFromAgents(agents);
+        if (aggregated === "ready" || aggregated === "partial_ready") {
+            this.cancelTimer();
+        }
+    }
+    onBootstrapError(err) {
+        this.bootstrapInFlight = false;
+        this.cancelTimer();
+        this.state = "bootstrap_failed";
+        this.detail = err instanceof Error ? err.message : String(err);
+    }
+    aggregateReadinessFromAgents(agents) {
+        if (agents.length === 0) {
+            // Bootstrap finished but no agents are registered yet (race
+            // window between session insert + status update). Keep state
+            // as booting so the operator sees progress, not a false ready.
+            return "booting";
+        }
+        const readyCount = agents.filter((a) => a.startupStatus === "ready").length;
+        if (readyCount === agents.length)
+            return "ready";
+        if (readyCount === 0)
+            return "booting";
+        return "partial_ready";
+    }
+    computeAgents() {
+        try {
+            const kernelRigs = this.deps.rigRepo.findRigsByName("kernel");
+            if (kernelRigs.length === 0)
+                return [];
+            const out = [];
+            for (const rig of kernelRigs) {
+                const sessions = this.deps.sessionRegistry.getSessionsForRig(rig.id);
+                for (const s of sessions) {
+                    // session-registry's Session shape carries startupStatus +
+                    // sessionName; runtime comes from the node row. Read minimal
+                    // fields here so the tracker doesn't pull in node-repository.
+                    out.push({
+                        sessionName: s.sessionName,
+                        runtime: s.runtime ?? "unknown",
+                        startupStatus: s.startupStatus,
+                    });
+                }
+            }
+            return out;
+        }
+        catch {
+            // Tracker must NEVER throw — /api/kernel/status returning a
+            // valid envelope with empty agents[] is more useful than a 500
+            // when the DB has a transient hiccup.
+            return [];
+        }
+    }
+    scheduleDegradedTimer() {
+        const ms = this.deps.degradedTimeoutMs ?? 90_000;
+        if (ms <= 0)
+            return;
+        this.cancelTimer();
+        this.degradedTimer = setTimeout(() => this.checkDegraded(), ms);
+        // Allow the daemon to exit cleanly without waiting on the timer.
+        if (typeof this.degradedTimer === "object" && "unref" in this.degradedTimer) {
+            this.degradedTimer.unref();
+        }
+    }
+    cancelTimer() {
+        if (this.degradedTimer !== null) {
+            clearTimeout(this.degradedTimer);
+            this.degradedTimer = null;
+        }
+    }
+    checkDegraded() {
+        const agents = this.computeAgents();
+        const aggregated = this.state === "booting"
+            ? this.aggregateReadinessFromAgents(agents)
+            : this.state;
+        if (aggregated === "ready" || aggregated === "partial_ready") {
+            // Made it before the deadline; no degraded emission.
+            return;
+        }
+        // Promote to degraded + emit telemetry exactly once.
+        if (this.degradedEmitted)
+            return;
+        this.degradedEmitted = true;
+        this.state = "degraded";
+        try {
+            this.deps.eventBus.emit({
+                type: "kernel.agent.degraded",
+                agents: agents.map((a) => ({
+                    sessionName: a.sessionName,
+                    runtime: a.runtime,
+                    startupStatus: a.startupStatus,
+                })),
+                firstUnreadySince: this.firstUnreadySince,
+                detail: this.detail,
+            });
+        }
+        catch {
+            // Best-effort telemetry; tracker must not throw.
+        }
+    }
+}
+//# sourceMappingURL=kernel-boot-tracker.js.map

package/node_modules/@openrig/daemon/dist/domain/kernel-boot-tracker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kernel-boot-tracker.js","sourceRoot":"","sources":["../../src/domain/kernel-boot-tracker.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,8DAA8D;AAC9D,EAAE;AACF,sFAAsF;AACtF,8EAA8E;AAC9E,wEAAwE;AACxE,0EAA0E;AAC1E,2EAA2E;AAC3E,4EAA4E;AAC5E,EAAE;AACF,2EAA2E;AAC3E,0EAA0E;AAC1E,0EAA0E;AAC1E,yEAAyE;AACzE,2EAA2E;AAC3E,EAAE;AACF,6DAA6D;AAC7D,+EAA+E;AAC/E,uEAAuE;AACvE,qCAAqC;AAoDrC,MAAM,OAAO,iBAAiB;IASC;IARrB,KAAK,GAAgB,SAAS,CAAC;IAC/B,OAAO,GAAkB,IAAI,CAAC;IAC9B,MAAM,GAAkB,IAAI,CAAC;IAC7B,iBAAiB,GAAkB,IAAI,CAAC;IACxC,aAAa,GAAyC,IAAI,CAAC;IAC3D,eAAe,GAAG,KAAK,CAAC;IACxB,iBAAiB,GAAG,KAAK,CAAC;IAElC,YAA6B,IAA2B;QAA3B,SAAI,GAAJ,IAAI,CAAuB;IAAG,CAAC;IAE5D;;6BAEyB;IACzB,UAAU,CAAC,MAAc;QACvB,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAChC,CAAC;IAED,uEAAuE;IACvE,cAAc,CAAC,OAAe;QAC5B,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,IAAI,CAAC,KAAK,GAAG,cAAc,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC;QACtB,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAChC,CAAC;IAED,+DAA+D;IAC/D,cAAc,CAAC,QAAgB;QAC7B,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,IAAI,CAAC,KAAK,GAAG,cAAc,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;QACvB,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAChC,CAAC;IAED;kEAC8D;IAC9D,YAAY,CAAC,OAAe,EAAE,gBAA0C;QACtE,IAAI,IAAI,CAAC,iBAAiB;YAAE,OAAO;QACnC,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAC9B,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,iBAAiB,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAClD,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;QAC7B,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAE7B,gBAAgB;aACb,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;aAClD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;IAChD,CAAC;IAED;6EACyE;IACzE,SAAS;QACP,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACpC,IAAI,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC;QAC7B,iEAAiE;QACjE,kEAAkE;QAClE,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACxD,WAAW,GAAG,IAAI,CAAC,4BAA4B,CAAC,MAAM,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO;YACL,WAAW;YACX,MAAM;YACN,iBAAiB,EACf,WAAW,KAAK,OAAO,IAAI,WAAW,KAAK,SAAS;gBAClD,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,IAAI,CAAC,iBAAiB;YAC5B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC;IACJ,CAAC;IAED;;uBAEmB;IACnB,IAAI;QACF,IAAI,CAAC,WAAW,EAAE,CAAC;IACrB,CAAC;IAEO,mBAAmB,CAAC,MAAuB;QACjD,IAAI,CAAC,iBAAiB,GAAG,KAAK,CAAC;QAC/B,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,IAAI,CAAC,KAAK,GAAG,kBAAkB,CAAC;YAChC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvC,OAAO;QACT,CAAC;QACD,2DAA2D;QAC3D,+DAA+D;QAC/D,+DAA+D;QAC/D,iEAAiE;QACjE,+DAA+D;QAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACpC,MAAM,UAAU,GAAG,IAAI,CAAC,4BAA4B,CAAC,MAAM,CAAC,CAAC;QAC7D,IAAI,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,eAAe,EAAE,CAAC;YAC7D,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;IAEO,gBAAgB,CAAC,GAAY;QACnC,IAAI,CAAC,iBAAiB,GAAG,KAAK,CAAC;QAC/B,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,IAAI,CAAC,KAAK,GAAG,kBAAkB,CAAC;QAChC,IAAI,CAAC,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjE,CAAC;IAEO,4BAA4B,CAClC,MAA2B;QAE3B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,4DAA4D;YAC5D,6DAA6D;YAC7D,+DAA+D;YAC/D,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;QAC5E,IAAI,UAAU,KAAK,MAAM,CAAC,MAAM;YAAE,OAAO,OAAO,CAAC;QACjD,IAAI,UAAU,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACvC,OAAO,eAAe,CAAC;IACzB,CAAC;IAEO,aAAa;QACnB,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;YAC9D,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAC;YACvC,MAAM,GAAG,GAAwB,EAAE,CAAC;YACpC,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;gBAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACrE,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;oBACzB,2DAA2D;oBAC3D,6DAA6D;oBAC7D,8DAA8D;oBAC9D,GAAG,CAAC,IAAI,CAAC;wBACP,WAAW,EAAE,CAAC,CAAC,WAAW;wBAC1B,OAAO,EAAG,CAA0B,CAAC,OAAO,IAAI,SAAS;wBACzD,aAAa,EAAE,CAAC,CAAC,aAAa;qBAC/B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,MAAM,CAAC;YACP,4DAA4D;YAC5D,+DAA+D;YAC/D,sCAAsC;YACtC,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,qBAAqB;QAC3B,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,IAAI,MAAM,CAAC;QACjD,IAAI,EAAE,IAAI,CAAC;YAAE,OAAO;QACpB,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,EAAE,CAAC,CAAC;QAChE,iEAAiE;QACjE,IAAI,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,IAAI,OAAO,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC3E,IAAI,CAAC,aAA8C,CAAC,KAAK,EAAE,CAAC;QAC/D,CAAC;IACH,CAAC;IAEO,WAAW;QACjB,IAAI,IAAI,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;YAChC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACjC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC5B,CAAC;IACH,CAAC;IAEO,aAAa;QACnB,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACpC,MAAM,UAAU,GACd,IAAI,CAAC,KAAK,KAAK,SAAS;YACtB,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,MAAM,CAAC;YAC3C,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QACjB,IAAI,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,eAAe,EAAE,CAAC;YAC7D,qDAAqD;YACrD,OAAO;QACT,CAAC;QACD,qDAAqD;QACrD,IAAI,IAAI,CAAC,eAAe;YAAE,OAAO;QACjC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAC5B,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC;QACxB,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACtB,IAAI,EAAE,uBAAuB;gBAC7B,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACzB,WAAW,EAAE,CAAC,CAAC,WAAW;oBAC1B,OAAO,EAAE,CAAC,CAAC,OAAO;oBAClB,aAAa,EAAE,CAAC,CAAC,aAAa;iBAC/B,CAAC,CAAC;gBACH,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;gBACzC,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,iDAAiD;QACnD,CAAC;IACH,CAAC;CACF"}

package/node_modules/@openrig/daemon/dist/domain/kernel-boot.d.ts

@@ -0,0 +1,50 @@
+import type { RigRepository } from "./rig-repository.js";
+import type { BootstrapOrchestrator } from "./bootstrap-orchestrator.js";
+import type { EventBus } from "./event-bus.js";
+import type { SessionRegistry } from "./session-registry.js";
+import { KernelBootTracker } from "./kernel-boot-tracker.js";
+export type RuntimeAuthStatus = "ok" | "unavailable";
+export interface RuntimeProbeResult {
+    claudeCode: RuntimeAuthStatus;
+    codex: RuntimeAuthStatus;
+}
+export interface KernelBootDeps {
+    rigRepo: RigRepository;
+    sessionRegistry: SessionRegistry;
+    eventBus: EventBus;
+    bootstrapOrchestrator: BootstrapOrchestrator;
+    /** Absolute path to the daemon's specs dir (passed in so tests can
+     *  inject a fixture root). Production callsite resolves to the
+     *  packaged `packages/daemon/specs/` location. */
+    specsDir: string;
+    /** cwdOverride passed to BootstrapOrchestrator.bootstrap. Kernel
+     *  members run against the operator's environment, not the daemon
+     *  installation tree — without this override, the bootstrap path
+     *  refuses with `cwd is inside the OpenRig installation`. Production
+     *  callsite passes the resolved workspace.root setting; tests inject
+     *  a fixture path. */
+    cwdOverride: string;
+    /** Runtime auth probe — defaults to live shellouts; tests inject. */
+    probeRuntimes?: () => Promise<RuntimeProbeResult>;
+    /** Logger sink; defaults to console.log/warn so daemon stdout/stderr
+     *  carry the boot trace. */
+    log?: (level: "info" | "warn" | "error", message: string) => void;
+    /** Degraded-timer override (ms). Forward-fix #3 default 90s; tests
+     *  pass short values to exercise the timer path quickly. */
+    degradedTimeoutMs?: number;
+}
+/** Entry point. Idempotent: safe to call on every daemon startup.
+ *  Returns the tracker immediately; bootstrap (if fired) runs in the
+ *  background. Callers should NOT await the tracker's internal
+ *  bootstrap promise — that's the whole point of the architectural
+ *  decoupling. Tracker state is observable via getStatus() and the
+ *  /api/kernel/status route. */
+export declare function bootKernelIfNeeded(deps: KernelBootDeps): Promise<KernelBootTracker>;
+/** True when a rig named `kernel` already exists in the DB. */
+export declare function kernelAlreadyManaged(rigRepo: RigRepository): boolean;
+/** Choose a rig variant from the auth probe. */
+export declare function selectVariant(probe: RuntimeProbeResult): string;
+/** Honest 3-part-error message for the auth-block path. Per IMPL-PRD
+ *  §6.3 + the building-agent-software skill discipline. */
+export declare function authBlockMessage(): string;
+//# sourceMappingURL=kernel-boot.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/kernel-boot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kernel-boot.d.ts","sourceRoot":"","sources":["../../src/domain/kernel-boot.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D,MAAM,MAAM,iBAAiB,GAAG,IAAI,GAAG,aAAa,CAAC;AAErD,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,iBAAiB,CAAC;IAC9B,KAAK,EAAE,iBAAiB,CAAC;CAC1B;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,aAAa,CAAC;IACvB,eAAe,EAAE,eAAe,CAAC;IACjC,QAAQ,EAAE,QAAQ,CAAC;IACnB,qBAAqB,EAAE,qBAAqB,CAAC;IAC7C;;sDAEkD;IAClD,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;0BAKsB;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,qEAAqE;IACrE,aAAa,CAAC,EAAE,MAAM,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAClD;gCAC4B;IAC5B,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAClE;gEAC4D;IAC5D,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;gCAKgC;AAChC,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAiEzF;AAED,+DAA+D;AAC/D,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAGpE;AAED,gDAAgD;AAChD,wBAAgB,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CAO/D;AAgCD;2DAC2D;AAC3D,wBAAgB,gBAAgB,IAAI,MAAM,CAMzC"}