@openrig/cli 0.5.0 → 0.5.1

package/node_modules/@openrig/daemon/dist/domain/external-install-executor.js

@@ -0,0 +1,87 @@
+import { ulid } from "ulid";
+/**
+ * Executes approved external install actions via injected ExecFn.
+ * Journals everything to bootstrap_actions table.
+ * On failure: marks failed, continues to next (no global abort).
+ * No automatic uninstall rollback.
+ */
+export class ExternalInstallExecutor {
+    exec;
+    db;
+    constructor(deps) {
+        this.exec = deps.exec;
+        this.db = deps.db;
+    }
+    /**
+     * Execute tagged actions. All actions are journaled (including skipped).
+     * @param bootstrapId - links journal entries to a bootstrap run
+     * @param taggedActions - full action set with approval decisions
+     */
+    async execute(bootstrapId, taggedActions, startSeq = 1) {
+        const results = [];
+        for (let i = 0; i < taggedActions.length; i++) {
+            const { action, approved } = taggedActions[i];
+            const seq = startSeq + i;
+            const actionId = ulid();
+            // Skip: unapproved, manual_only (defense in depth), or no command
+            if (!approved || action.classification === "manual_only" || !action.commandPreview) {
+                const result = {
+                    actionId,
+                    requirementName: action.requirementName,
+                    status: "skipped",
+                    command: action.commandPreview,
+                    stdout: null,
+                    errorMessage: null,
+                    durationMs: 0,
+                };
+                this.journal(actionId, bootstrapId, seq, action, "skipped", { stdout: null, errorMessage: null, durationMs: 0 });
+                results.push(result);
+                continue;
+            }
+            // Execute
+            const start = Date.now();
+            try {
+                const stdout = await this.exec(action.commandPreview);
+                const durationMs = Date.now() - start;
+                const result = {
+                    actionId,
+                    requirementName: action.requirementName,
+                    status: "completed",
+                    command: action.commandPreview,
+                    stdout: stdout ?? null,
+                    errorMessage: null,
+                    durationMs,
+                };
+                this.journal(actionId, bootstrapId, seq, action, "completed", { stdout: stdout ?? null, errorMessage: null, durationMs });
+                results.push(result);
+            }
+            catch (err) {
+                const durationMs = Date.now() - start;
+                const errorMessage = err.message ?? "unknown error";
+                const result = {
+                    actionId,
+                    requirementName: action.requirementName,
+                    status: "failed",
+                    command: action.commandPreview,
+                    stdout: null,
+                    errorMessage,
+                    durationMs,
+                };
+                this.journal(actionId, bootstrapId, seq, action, "failed", { stdout: null, errorMessage, durationMs });
+                results.push(result);
+                // Continue to next — no abort
+            }
+        }
+        return {
+            results,
+            completed: results.filter((r) => r.status === "completed"),
+            failed: results.filter((r) => r.status === "failed"),
+            skipped: results.filter((r) => r.status === "skipped"),
+        };
+    }
+    journal(id, bootstrapId, seq, action, status, detail) {
+        this.db.prepare(`INSERT INTO bootstrap_actions (id, bootstrap_id, seq, action_kind, subject_type, subject_name, provider, command_preview, status, detail_json)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(id, bootstrapId, seq, "external_install", action.kind, action.requirementName, action.provider, action.commandPreview, status, JSON.stringify(detail));
+    }
+}
+//# sourceMappingURL=external-install-executor.js.map

package/node_modules/@openrig/daemon/dist/domain/external-install-executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-install-executor.js","sourceRoot":"","sources":["../../src/domain/external-install-executor.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AA6B5B;;;;;GAKG;AACH,MAAM,OAAO,uBAAuB;IAC1B,IAAI,CAAS;IACZ,EAAE,CAAoB;IAE/B,YAAY,IAA6C;QACvD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;IACpB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO,CAAC,WAAmB,EAAE,aAA6B,EAAE,WAAmB,CAAC;QACpF,MAAM,OAAO,GAAsB,EAAE,CAAC;QAEtC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC9C,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,aAAa,CAAC,CAAC,CAAE,CAAC;YAC/C,MAAM,GAAG,GAAG,QAAQ,GAAG,CAAC,CAAC;YACzB,MAAM,QAAQ,GAAG,IAAI,EAAE,CAAC;YAExB,kEAAkE;YAClE,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,cAAc,KAAK,aAAa,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;gBACnF,MAAM,MAAM,GAAoB;oBAC9B,QAAQ;oBACR,eAAe,EAAE,MAAM,CAAC,eAAe;oBACvC,MAAM,EAAE,SAAS;oBACjB,OAAO,EAAE,MAAM,CAAC,cAAc;oBAC9B,MAAM,EAAE,IAAI;oBACZ,YAAY,EAAE,IAAI;oBAClB,UAAU,EAAE,CAAC;iBACd,CAAC;gBACF,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;gBACjH,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACrB,SAAS;YACX,CAAC;YAED,UAAU;YACV,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;gBACtD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;gBACtC,MAAM,MAAM,GAAoB;oBAC9B,QAAQ;oBACR,eAAe,EAAE,MAAM,CAAC,eAAe;oBACvC,MAAM,EAAE,WAAW;oBACnB,OAAO,EAAE,MAAM,CAAC,cAAc;oBAC9B,MAAM,EAAE,MAAM,IAAI,IAAI;oBACtB,YAAY,EAAE,IAAI;oBAClB,UAAU;iBACX,CAAC;gBACF,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,MAAM,IAAI,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;gBAC1H,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;gBACtC,MAAM,YAAY,GAAI,GAAa,CAAC,OAAO,IAAI,eAAe,CAAC;gBAC/D,MAAM,MAAM,GAAoB;oBAC9B,QAAQ;oBACR,eAAe,EAAE,MAAM,CAAC,eAAe;oBACvC,MAAM,EAAE,QAAQ;oBAChB,OAAO,EAAE,MAAM,CAAC,cAAc;oBAC9B,MAAM,EAAE,IAAI;oBACZ,YAAY;oBACZ,UAAU;iBACX,CAAC;gBACF,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC,CAAC;gBACvG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACrB,8BAA8B;YAChC,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO;YACP,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC;YAC1D,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC;YACpD,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC;SACvD,CAAC;IACJ,CAAC;IAEO,OAAO,CACb,EAAU,EACV,WAAmB,EACnB,GAAW,EACX,MAA6B,EAC7B,MAAc,EACd,MAAkF;QAElF,IAAI,CAAC,EAAE,CAAC,OAAO,CACb;6CACuC,CACxC,CAAC,GAAG,CACH,EAAE,EACF,WAAW,EACX,GAAG,EACH,kBAAkB,EAClB,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,eAAe,EACtB,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,cAAc,EACrB,MAAM,EACN,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CACvB,CAAC;IACJ,CAAC;CACF"}

package/node_modules/@openrig/daemon/dist/domain/external-install-planner.d.ts

@@ -0,0 +1,41 @@
+import type { ProbeResult } from "./requirements-probe.js";
+/** Approval classification for an external install action */
+export type ApprovalClassification = "auto_approvable" | "review_required" | "manual_only";
+/** A single external install action in the plan */
+export interface ExternalInstallAction {
+    requirementName: string;
+    kind: "cli_tool" | "system_package";
+    provider: string | null;
+    commandPreview: string | null;
+    classification: ApprovalClassification;
+    installHints: Record<string, string> | null;
+    reason: string;
+}
+/** The full external install plan */
+export interface ExternalInstallPlan {
+    actions: ExternalInstallAction[];
+    autoApprovable: ExternalInstallAction[];
+    reviewRequired: ExternalInstallAction[];
+    manualOnly: ExternalInstallAction[];
+    alreadyInstalled: string[];
+}
+interface PlannerOptions {
+    platform?: string;
+}
+/**
+ * Maps missing requirements to trusted provider install actions.
+ * Phase 5 ships Homebrew (darwin) only. All other platforms produce manual_only.
+ * install_hints from manifests are display-only — never executed.
+ */
+export declare class ExternalInstallPlanner {
+    private platform;
+    constructor(opts?: PlannerOptions);
+    /**
+     * Build an install plan from probe results.
+     * @param probeResults - results from RequirementsProbeRegistry.probeAll()
+     */
+    planInstalls(probeResults: ProbeResult[]): ExternalInstallPlan;
+    private mapToAction;
+}
+export {};
+//# sourceMappingURL=external-install-planner.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/external-install-planner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-install-planner.d.ts","sourceRoot":"","sources":["../../src/domain/external-install-planner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAG3D,6DAA6D;AAC7D,MAAM,MAAM,sBAAsB,GAAG,iBAAiB,GAAG,iBAAiB,GAAG,aAAa,CAAC;AAE3F,mDAAmD;AACnD,MAAM,WAAW,qBAAqB;IACpC,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,UAAU,GAAG,gBAAgB,CAAC;IACpC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,cAAc,EAAE,sBAAsB,CAAC;IACvC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;IAC5C,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,qCAAqC;AACrC,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,qBAAqB,EAAE,CAAC;IACjC,cAAc,EAAE,qBAAqB,EAAE,CAAC;IACxC,cAAc,EAAE,qBAAqB,EAAE,CAAC;IACxC,UAAU,EAAE,qBAAqB,EAAE,CAAC;IACpC,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED,UAAU,cAAc;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAS;gBAEb,IAAI,CAAC,EAAE,cAAc;IAIjC;;;OAGG;IACH,YAAY,CAAC,YAAY,EAAE,WAAW,EAAE,GAAG,mBAAmB;IAuB9D,OAAO,CAAC,WAAW;CAkDpB"}

package/node_modules/@openrig/daemon/dist/domain/external-install-planner.js

@@ -0,0 +1,83 @@
+import { shellQuote } from "../adapters/shell-quote.js";
+/**
+ * Maps missing requirements to trusted provider install actions.
+ * Phase 5 ships Homebrew (darwin) only. All other platforms produce manual_only.
+ * install_hints from manifests are display-only — never executed.
+ */
+export class ExternalInstallPlanner {
+    platform;
+    constructor(opts) {
+        this.platform = opts?.platform ?? process.platform;
+    }
+    /**
+     * Build an install plan from probe results.
+     * @param probeResults - results from RequirementsProbeRegistry.probeAll()
+     */
+    planInstalls(probeResults) {
+        const actions = [];
+        const alreadyInstalled = [];
+        for (const probe of probeResults) {
+            if (probe.status === "installed") {
+                alreadyInstalled.push(probe.name);
+                continue;
+            }
+            const action = this.mapToAction(probe);
+            actions.push(action);
+        }
+        return {
+            actions,
+            autoApprovable: actions.filter((a) => a.classification === "auto_approvable"),
+            reviewRequired: actions.filter((a) => a.classification === "review_required"),
+            manualOnly: actions.filter((a) => a.classification === "manual_only"),
+            alreadyInstalled,
+        };
+    }
+    mapToAction(probe) {
+        // Unsupported platform probe or unknown (probe failed) -> manual_only
+        if (probe.status === "unsupported") {
+            return {
+                requirementName: probe.name,
+                kind: probe.kind,
+                provider: null,
+                commandPreview: null,
+                classification: "manual_only",
+                installHints: probe.installHints,
+                reason: "no trusted provider for this platform",
+            };
+        }
+        if (probe.status === "unknown") {
+            return {
+                requirementName: probe.name,
+                kind: probe.kind,
+                provider: null,
+                commandPreview: null,
+                classification: "manual_only",
+                installHints: probe.installHints,
+                reason: "probe failed — cannot determine install action",
+            };
+        }
+        // status === "missing" — try to map to a trusted provider
+        if (this.platform === "darwin") {
+            return {
+                requirementName: probe.name,
+                kind: probe.kind,
+                provider: "homebrew",
+                commandPreview: `brew install ${shellQuote(probe.name)}`,
+                classification: "auto_approvable",
+                installHints: probe.installHints,
+                reason: "trusted Homebrew install",
+            };
+        }
+        // Non-darwin with missing requirement -> manual_only
+        return {
+            requirementName: probe.name,
+            kind: probe.kind,
+            provider: null,
+            commandPreview: null,
+            classification: "manual_only",
+            installHints: probe.installHints,
+            reason: "no trusted provider for this platform",
+        };
+    }
+}
+//# sourceMappingURL=external-install-planner.js.map

package/node_modules/@openrig/daemon/dist/domain/external-install-planner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-install-planner.js","sourceRoot":"","sources":["../../src/domain/external-install-planner.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AA6BxD;;;;GAIG;AACH,MAAM,OAAO,sBAAsB;IACzB,QAAQ,CAAS;IAEzB,YAAY,IAAqB;QAC/B,IAAI,CAAC,QAAQ,GAAG,IAAI,EAAE,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACrD,CAAC;IAED;;;OAGG;IACH,YAAY,CAAC,YAA2B;QACtC,MAAM,OAAO,GAA4B,EAAE,CAAC;QAC5C,MAAM,gBAAgB,GAAa,EAAE,CAAC;QAEtC,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;YACjC,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBACjC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAClC,SAAS;YACX,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACvC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QAED,OAAO;YACL,OAAO;YACP,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,iBAAiB,CAAC;YAC7E,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,iBAAiB,CAAC;YAC7E,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,aAAa,CAAC;YACrE,gBAAgB;SACjB,CAAC;IACJ,CAAC;IAEO,WAAW,CAAC,KAAkB;QACpC,sEAAsE;QACtE,IAAI,KAAK,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;YACnC,OAAO;gBACL,eAAe,EAAE,KAAK,CAAC,IAAI;gBAC3B,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,QAAQ,EAAE,IAAI;gBACd,cAAc,EAAE,IAAI;gBACpB,cAAc,EAAE,aAAa;gBAC7B,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,MAAM,EAAE,uCAAuC;aAChD,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO;gBACL,eAAe,EAAE,KAAK,CAAC,IAAI;gBAC3B,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,QAAQ,EAAE,IAAI;gBACd,cAAc,EAAE,IAAI;gBACpB,cAAc,EAAE,aAAa;gBAC7B,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,MAAM,EAAE,gDAAgD;aACzD,CAAC;QACJ,CAAC;QAED,0DAA0D;QAC1D,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC/B,OAAO;gBACL,eAAe,EAAE,KAAK,CAAC,IAAI;gBAC3B,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,QAAQ,EAAE,UAAU;gBACpB,cAAc,EAAE,gBAAgB,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE;gBACxD,cAAc,EAAE,iBAAiB;gBACjC,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,MAAM,EAAE,0BAA0B;aACnC,CAAC;QACJ,CAAC;QAED,qDAAqD;QACrD,OAAO;YACL,eAAe,EAAE,KAAK,CAAC,IAAI;YAC3B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ,EAAE,IAAI;YACd,cAAc,EAAE,IAAI;YACpB,cAAc,EAAE,aAAa;YAC7B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,MAAM,EAAE,uCAAuC;SAChD,CAAC;IACJ,CAAC;CACF"}

package/node_modules/@openrig/daemon/dist/domain/feed/attention-aggregator.d.ts

@@ -0,0 +1,31 @@
+import type { AggregatedPayload } from "../hosts/fanout-contract.js";
+import type { HostRegistryLoadResult } from "../hosts/hosts-registry-reader.js";
+/** The aggregation READ deadline class (per-host bound). Distinct from the
+ *  up-leaf's long-running budget by design — named here, passed explicitly. */
+export declare const ATTENTION_READ_TIMEOUT_MS = 5000;
+/** Fixed fan-out cap — a poll across a handful of hosts; adaptive
+ *  throttling is out of scope (same v1 posture as the topology walker). */
+export declare const ATTENTION_FANOUT_CONCURRENCY = 4;
+export type AttentionItem = Record<string, unknown>;
+export interface AttentionAggregatorDeps {
+    /** The SAME query the shipped /api/queue/list?attention=1 route runs. */
+    listLocalAttention: () => AttentionItem[];
+    /** settings-store.listFeedHostSubscriptions (the G15-P1 dynamic class). */
+    listSubscriptions: () => Array<{
+        hostId: string;
+        enabled: boolean;
+    }>;
+    /** S11's shared reader — called lazily, only when a remote sub exists. */
+    loadRegistry: () => HostRegistryLoadResult;
+    fetchImpl?: typeof fetch;
+    env?: Record<string, string | undefined>;
+    readFile?: (path: string) => string;
+    /** Test override; production uses ATTENTION_READ_TIMEOUT_MS. */
+    timeoutMs?: number;
+    concurrency?: number;
+}
+/** One merged attention payload: local ALWAYS included (stamped with the
+ *  contract's LOCAL_HOST_ID), each enabled remote host fanned out under the
+ *  read deadline + fixed cap, per-host status complete by construction. */
+export declare function aggregateAttention(deps: AttentionAggregatorDeps): Promise<AggregatedPayload<AttentionItem>>;
+//# sourceMappingURL=attention-aggregator.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/feed/attention-aggregator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attention-aggregator.d.ts","sourceRoot":"","sources":["../../../src/domain/feed/attention-aggregator.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,iBAAiB,EAAiB,MAAM,6BAA6B,CAAC;AAEpF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAIhF;+EAC+E;AAC/E,eAAO,MAAM,yBAAyB,OAAQ,CAAC;AAE/C;2EAC2E;AAC3E,eAAO,MAAM,4BAA4B,IAAI,CAAC;AAE9C,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEpD,MAAM,WAAW,uBAAuB;IACtC,yEAAyE;IACzE,kBAAkB,EAAE,MAAM,aAAa,EAAE,CAAC;IAC1C,2EAA2E;IAC3E,iBAAiB,EAAE,MAAM,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACrE,0EAA0E;IAC1E,YAAY,EAAE,MAAM,sBAAsB,CAAC;IAC3C,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IACpC,gEAAgE;IAChE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAgED;;2EAE2E;AAC3E,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,uBAAuB,GAAG,OAAO,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAgCjH"}

package/node_modules/@openrig/daemon/dist/domain/feed/attention-aggregator.js

@@ -0,0 +1,119 @@
+// OPR.0.4.4.15 FR-1 — daemon-side attention aggregation (the SEE architecture,
+// call A): the LOCAL daemon fans out server-side to each subscribed host's
+// shipped GET /api/queue/list?attention=1 over the registered HTTP+bearer
+// transport, merges, and returns ONE AggregatedPayload. Bearer tokens never
+// reach the browser — this module is the only place remote hosts are
+// contacted for the feed.
+//
+// Reuse, not reimplementation: the LOCAL leg invokes the SAME
+// QueueRepository.listAttention query the existing route uses (injected at
+// the route wiring); the registry is read through S11's shared
+// hosts-registry-reader (interface cell — never re-parsed); the remote hop
+// rides the shared remote-daemon-http core with the READ deadline class
+// named EXPLICITLY at this call-site (arch sharpening: 5s — a poll, not a
+// bootstrap; the up-leaf's 120s budget lives at ITS call-site).
+//
+// FR-1/R15-2 honesty: EVERY subscribed host appears in hosts[] on EVERY
+// call — ok, unreachable, auth-failed, or unsupported-transport — never
+// all-or-nothing, never a silently thinner feed. The registry is read ONLY
+// when ≥1 remote subscription is enabled (zero-config never touches it).
+import { LOCAL_HOST_ID } from "../hosts/fanout-contract.js";
+import { resolveHost } from "../hosts/hosts-registry-reader.js";
+import { remoteJsonRequest } from "../hosts/remote-daemon-http.js";
+/** The aggregation READ deadline class (per-host bound). Distinct from the
+ *  up-leaf's long-running budget by design — named here, passed explicitly. */
+export const ATTENTION_READ_TIMEOUT_MS = 5_000;
+/** Fixed fan-out cap — a poll across a handful of hosts; adaptive
+ *  throttling is out of scope (same v1 posture as the topology walker). */
+export const ATTENTION_FANOUT_CONCURRENCY = 4;
+async function readHostAttention(hostId, reg, deps) {
+    if (!reg.ok) {
+        // Registry unreadable: every subscribed host reports it honestly —
+        // the operator sees ONE actionable error per host row, local items
+        // are untouched.
+        return { status: { hostId, status: "unreachable", error: reg.error }, items: [] };
+    }
+    const resolved = resolveHost(reg.registry, hostId);
+    if (!resolved.ok) {
+        return { status: { hostId, status: "unreachable", error: resolved.error }, items: [] };
+    }
+    if (resolved.host.transport !== "http") {
+        // R15-2 (the whoami --all-hosts precedent): SSH-declared hosts are a
+        // structured per-host status, never a silently thinner feed.
+        return {
+            status: { hostId, status: "unsupported-transport", error: `host '${hostId}' is SSH-declared; the aggregated feed read requires an http-transport registry entry (url; bearer optional)` },
+            items: [],
+        };
+    }
+    const res = await remoteJsonRequest(resolved.host, "/api/queue/list?attention=1", {
+        method: "GET",
+        timeoutMs: deps.timeoutMs ?? ATTENTION_READ_TIMEOUT_MS,
+        fetchImpl: deps.fetchImpl,
+        env: deps.env,
+        readFile: deps.readFile,
+    });
+    if (res.ok) {
+        const arr = Array.isArray(res.payload) ? res.payload : [];
+        return { status: { hostId, status: "ok" }, items: arr.map((i) => ({ ...i, hostId })) };
+    }
+    switch (res.kind) {
+        case "bearer":
+            return { status: { hostId, status: "auth-failed", error: res.detail, failedStep: "permission-gate" }, items: [] };
+        case "http":
+            if (res.status === 401 || res.status === 403) {
+                return { status: { hostId, status: "auth-failed", error: `HTTP ${res.status}${res.detail ? `: ${res.detail}` : ""}`, failedStep: "permission-gate" }, items: [] };
+            }
+            // A remote 4xx/5xx on the read: the feed cannot show that host's
+            // items — the closest closed-enum truth is unreachable, with the
+            // remote's own status/text as the honest detail and the shipped
+            // FailedStep vocabulary riding as the additive detail field.
+            return { status: { hostId, status: "unreachable", error: `HTTP ${res.status}${res.detail ? `: ${res.detail}` : ""}`, failedStep: "remote-command-failed" }, items: [] };
+        case "timeout":
+            return {
+                status: {
+                    hostId,
+                    status: "unreachable",
+                    error: res.phase === "body" ? `read timed out: response headers arrived (HTTP ${res.status}) but the body never completed` : `read timed out after ${deps.timeoutMs ?? ATTENTION_READ_TIMEOUT_MS}ms`,
+                    failedStep: "remote-daemon-unreachable",
+                },
+                items: [],
+            };
+        case "network":
+            return { status: { hostId, status: "unreachable", error: res.detail, failedStep: "remote-daemon-unreachable" }, items: [] };
+    }
+}
+/** One merged attention payload: local ALWAYS included (stamped with the
+ *  contract's LOCAL_HOST_ID), each enabled remote host fanned out under the
+ *  read deadline + fixed cap, per-host status complete by construction. */
+export async function aggregateAttention(deps) {
+    const localItems = deps.listLocalAttention().map((i) => ({ ...i, hostId: LOCAL_HOST_ID }));
+    const hosts = [{ hostId: LOCAL_HOST_ID, status: "ok" }];
+    const items = [...localItems];
+    const subs = deps.listSubscriptions().filter((s) => s.enabled);
+    if (subs.length === 0) {
+        // Zero remote subscriptions: the registry is NEVER read; the payload
+        // is today's local feed plus the local status row.
+        return { items, hosts };
+    }
+    const reg = deps.loadRegistry();
+    const outcomes = new Array(subs.length);
+    let next = 0;
+    const cap = Math.max(1, Math.min(deps.concurrency ?? ATTENTION_FANOUT_CONCURRENCY, subs.length));
+    const workers = Array.from({ length: cap }, async () => {
+        while (true) {
+            const i = next;
+            if (i >= subs.length)
+                return;
+            next += 1;
+            outcomes[i] = await readHostAttention(subs[i].hostId, reg, deps);
+        }
+    });
+    await Promise.all(workers);
+    // Subscription order preserved in both arrays (deterministic payload).
+    for (const outcome of outcomes) {
+        hosts.push(outcome.status);
+        items.push(...outcome.items);
+    }
+    return { items, hosts };
+}
+//# sourceMappingURL=attention-aggregator.js.map

package/node_modules/@openrig/daemon/dist/domain/feed/attention-aggregator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attention-aggregator.js","sourceRoot":"","sources":["../../../src/domain/feed/attention-aggregator.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,2EAA2E;AAC3E,0EAA0E;AAC1E,4EAA4E;AAC5E,qEAAqE;AACrE,0BAA0B;AAC1B,EAAE;AACF,8DAA8D;AAC9D,2EAA2E;AAC3E,+DAA+D;AAC/D,2EAA2E;AAC3E,wEAAwE;AACxE,0EAA0E;AAC1E,gEAAgE;AAChE,EAAE;AACF,wEAAwE;AACxE,wEAAwE;AACxE,2EAA2E;AAC3E,yEAAyE;AAGzE,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAE5D,OAAO,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAEnE;+EAC+E;AAC/E,MAAM,CAAC,MAAM,yBAAyB,GAAG,KAAK,CAAC;AAE/C;2EAC2E;AAC3E,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC;AAwB9C,KAAK,UAAU,iBAAiB,CAAC,MAAc,EAAE,GAA2B,EAAE,IAA6B;IACzG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,mEAAmE;QACnE,mEAAmE;QACnE,iBAAiB;QACjB,OAAO,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACpF,CAAC;IACD,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACzF,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;QACvC,qEAAqE;QACrE,6DAA6D;QAC7D,OAAO;YACL,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,uBAAuB,EAAE,KAAK,EAAE,SAAS,MAAM,8GAA8G,EAAE;YACzL,KAAK,EAAE,EAAE;SACV,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,IAAI,EAAE,6BAA6B,EAAE;QAChF,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,yBAAyB;QACtD,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC,CAAC;IACH,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,OAA2B,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,OAAO,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;IACzF,CAAC;IACD,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,QAAQ;YACX,OAAO,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,iBAAiB,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QACpH,KAAK,MAAM;YACT,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC7C,OAAO,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,iBAAiB,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;YACpK,CAAC;YACD,iEAAiE;YACjE,iEAAiE;YACjE,gEAAgE;YAChE,6DAA6D;YAC7D,OAAO,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,uBAAuB,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAC1K,KAAK,SAAS;YACZ,OAAO;gBACL,MAAM,EAAE;oBACN,MAAM;oBACN,MAAM,EAAE,aAAa;oBACrB,KAAK,EAAE,GAAG,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,kDAAkD,GAAG,CAAC,MAAM,gCAAgC,CAAC,CAAC,CAAC,wBAAwB,IAAI,CAAC,SAAS,IAAI,yBAAyB,IAAI;oBACpM,UAAU,EAAE,2BAA2B;iBACxC;gBACD,KAAK,EAAE,EAAE;aACV,CAAC;QACJ,KAAK,SAAS;YACZ,OAAO,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,2BAA2B,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAChI,CAAC;AACH,CAAC;AAED;;2EAE2E;AAC3E,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAA6B;IACpE,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;IAC3F,MAAM,KAAK,GAAoB,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACzE,MAAM,KAAK,GAAoB,CAAC,GAAG,UAAU,CAAC,CAAC;IAE/C,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC/D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,qEAAqE;QACrE,mDAAmD;QACnD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC1B,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAG,IAAI,KAAK,CAAiB,IAAI,CAAC,MAAM,CAAC,CAAC;IACxD,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,4BAA4B,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACjG,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,KAAK,IAAI,EAAE;QACrD,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,CAAC,GAAG,IAAI,CAAC;YACf,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM;gBAAE,OAAO;YAC7B,IAAI,IAAI,CAAC,CAAC;YACV,QAAQ,CAAC,CAAC,CAAC,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QACpE,CAAC;IACH,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAE3B,uEAAuE;IACvE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC1B,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/files/file-write-service.d.ts

@@ -0,0 +1,73 @@
+import { type AllowlistRoot } from "./path-safety.js";
+export interface FileWriteRequest {
+    rootName: string;
+    /** Relative path under the allowlist root; same shape as item 3 routes. */
+    path: string;
+    content: string;
+    /** Caller-known mtime (ISO string) at the time of last read. */
+    expectedMtime: string;
+    /** Caller-known SHA-256 content hash (hex) at the time of last read. */
+    expectedContentHash: string;
+    /** Operator session that initiated the write (for the audit row). */
+    actor: string;
+    /** P21 §4 era-stamp for the audit row: `transport:v1` when the actor came from the transport
+     *  header chokepoint; null = claimed-era (the UI/MCP named-deferral path). */
+    identityProvenance?: string | null;
+}
+export interface FileWriteResult {
+    /** Resolved canonical absolute path that was written. */
+    absolutePath: string;
+    /** New mtime after the write (ISO string). */
+    newMtime: string;
+    /** New SHA-256 content hash (hex) after the write. */
+    newContentHash: string;
+    /** Byte-count delta (new - prev). */
+    byteCountDelta: number;
+}
+export declare class WriteConflictError extends Error {
+    readonly currentMtime: string;
+    readonly currentContentHash: string;
+    readonly details: Record<string, unknown>;
+    constructor(currentMtime: string, currentContentHash: string, details: Record<string, unknown>);
+}
+export declare class FileWriteError extends Error {
+    readonly code: "stat_failed" | "tmp_write_failed" | "rename_failed" | "audit_write_failed" | "target_exists";
+    readonly details?: Record<string, unknown> | undefined;
+    constructor(code: "stat_failed" | "tmp_write_failed" | "rename_failed" | "audit_write_failed" | "target_exists", message: string, details?: Record<string, unknown> | undefined);
+}
+export interface FileWriteServiceOpts {
+    /** Allowlist roots resolved from env at startup (re-resolved per request is fine; cheap). */
+    allowlist: AllowlistRoot[];
+    /** Override default audit file location for tests. */
+    auditFilePath?: string;
+    /** Override Date.now() for tests (returns ISO timestamp). */
+    now?: () => Date;
+}
+export declare class FileWriteService {
+    private readonly allowlist;
+    private readonly auditFilePath;
+    private readonly now;
+    constructor(opts: FileWriteServiceOpts);
+    /**
+     * Atomically write content to an allowlisted file. Throws
+     * WriteConflictError on mtime/contentHash mismatch; throws
+     * FileWriteError on stat / temp-write / rename / audit failures.
+     * Returns FileWriteResult with the new mtime + contentHash on
+     * success.
+     */
+    writeAtomic(req: FileWriteRequest): FileWriteResult;
+    /**
+     * Atomically CREATE a new allowlisted file (OPR.0.4.4.20 FR-6 — the frozen
+     * review export). Exclusive: throws `target_exists` when the file is
+     * already there (frozen exports are point-in-time snapshots, never
+     * rewritten; re-invoking the freeze for the same approval is an idempotent
+     * no-op at the caller). Same temp-write + fsync + audit-row machinery as
+     * writeAtomic — one writer family, no parallel write path.
+     */
+    createAtomic(req: Omit<FileWriteRequest, "expectedMtime" | "expectedContentHash">): FileWriteResult;
+    private appendAuditRow;
+    /** Test/debug helper: returns the configured audit file path. */
+    getAuditFilePath(): string;
+}
+export declare function sha256Hex(content: Buffer | string): string;
+//# sourceMappingURL=file-write-service.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/files/file-write-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-write-service.d.ts","sourceRoot":"","sources":["../../../src/domain/files/file-write-service.ts"],"names":[],"mappings":"AA6BA,OAAO,EAAsB,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAE1E,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,gEAAgE;IAChE,aAAa,EAAE,MAAM,CAAC;IACtB,wEAAwE;IACxE,mBAAmB,EAAE,MAAM,CAAC;IAC5B,qEAAqE;IACrE,KAAK,EAAE,MAAM,CAAC;IACd;kFAC8E;IAC9E,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAED,MAAM,WAAW,eAAe;IAC9B,yDAAyD;IACzD,YAAY,EAAE,MAAM,CAAC;IACrB,8CAA8C;IAC9C,QAAQ,EAAE,MAAM,CAAC;IACjB,sDAAsD;IACtD,cAAc,EAAE,MAAM,CAAC;IACvB,qCAAqC;IACrC,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,qBAAa,kBAAmB,SAAQ,KAAK;aAEzB,YAAY,EAAE,MAAM;aACpB,kBAAkB,EAAE,MAAM;aAC1B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAFhC,YAAY,EAAE,MAAM,EACpB,kBAAkB,EAAE,MAAM,EAC1B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAKnD;AAED,qBAAa,cAAe,SAAQ,KAAK;aAErB,IAAI,EAAE,aAAa,GAAG,kBAAkB,GAAG,eAAe,GAAG,oBAAoB,GAAG,eAAe;aAEnG,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAFjC,IAAI,EAAE,aAAa,GAAG,kBAAkB,GAAG,eAAe,GAAG,oBAAoB,GAAG,eAAe,EACnH,OAAO,EAAE,MAAM,EACC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAA;CAKpD;AAED,MAAM,WAAW,oBAAoB;IACnC,6FAA6F;IAC7F,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,sDAAsD;IACtD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,6DAA6D;IAC7D,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAQD,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkB;IAC5C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAa;gBAErB,IAAI,EAAE,oBAAoB;IAMtC;;;;;;OAMG;IACH,WAAW,CAAC,GAAG,EAAE,gBAAgB,GAAG,eAAe;IAwGnD;;;;;;;OAOG;IACH,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,gBAAgB,EAAE,eAAe,GAAG,qBAAqB,CAAC,GAAG,eAAe;IAsEnG,OAAO,CAAC,cAAc;IAKtB,iEAAiE;IACjE,gBAAgB,IAAI,MAAM;CAG3B;AAED,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAE1D"}