@openrig/cli 0.5.0 → 0.5.2

package/node_modules/@openrig/daemon/dist/domain/outbox-handler.js

@@ -0,0 +1,249 @@
+/**
+ * The EXECUTABLE wake-intent namespace. A durable wake intent is written by the
+ * daemon (QueueRepository.stageWakeIntent) with an id under this prefix, and the
+ * startup drain EXECUTES every pending row under it as a real wake.
+ *
+ * NOT a route reservation: the public `/outbox/record` audit route no longer
+ * refuses caller-supplied ids under this prefix (the W4-era MF5 guard was unbuilt —
+ * founder ruling, over-engineering audit: its justification required an adversary
+ * inside this trust domain, where the only caller is the daemon's own localhost
+ * client). A caller CAN now record an id under this prefix and the drain will
+ * select it. Single source of truth for the drain query only.
+ */
+export const WAKE_INTENT_PREFIX = "wake-intent-";
+// W1 (transactional closure): `indeterminate` is the ambiguous-delivery outcome —
+// a send that landed on the wire but whose render could not be CONFIRMED (transport
+// res.ok && !verified). It is never silently promoted to `delivered` (unconfirmed)
+// nor demoted to `failed` (it may have landed); the CAS transitions gate on 'pending',
+// so an indeterminate row is TERMINAL-BY-CAS (reconciliation is an out-of-scope
+// follow-on, not a W1 transition).
+// `sending` (MF3) is a transient CLAIM state: a drainer atomically moves a wake
+// intent pending→sending BEFORE the external send, so an overlapping drainer finds
+// nothing to claim and cannot double-send. A crash mid-send leaves the row visibly
+// `sending`; the recovery boundary (`reconcileAbandonedSending`, run once at
+// startup) reconciles it to `indeterminate` — the send is never blindly re-driven.
+export const OUTBOX_DELIVERY_STATES = ["pending", "sending", "delivered", "failed", "indeterminate"];
+/**
+ * Validate a raw `delivery_state` cell against the closed union before it is typed
+ * as an {@link OutboxDeliveryState}. Replaces the prior unchecked `as` cast: a cast
+ * never fails, so a stray DB value (corruption, a newer daemon's state read by an
+ * older one) would silently masquerade as a typed value and make every downstream
+ * narrowing unsound. We control every writer, so an unknown value is a real defect —
+ * fail loud rather than fabricate a type.
+ */
+export function parseDeliveryState(raw) {
+    if (OUTBOX_DELIVERY_STATES.includes(raw)) {
+        return raw;
+    }
+    throw new OutboxHandlerError("invalid_delivery_state", `outbox row has unknown delivery_state ${JSON.stringify(raw)} (expected one of ${OUTBOX_DELIVERY_STATES.join(", ")})`);
+}
+export class OutboxHandlerError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+    }
+}
+function newOutboxId() {
+    const ts = new Date().toISOString().replace(/[-:T.Z]/g, "").slice(0, 14);
+    const hex = Math.floor(Math.random() * 0xffffffff).toString(16).padStart(8, "0");
+    return `outbox-${ts}-${hex}`;
+}
+/**
+ * Sender-side outbox. Symmetric to InboxHandler. Records what a sender
+ * dispatched independent of receiver behavior. Idempotent on outbox_id.
+ *
+ * No event-bus events emitted in Phase A — outbox is pure audit. If a future
+ * phase wants delivery-tracking events, add them through this surface.
+ */
+export class OutboxHandler {
+    db;
+    /** P21 §4: detected once — a curated-migration test DB (or a pre-067 daemon) may lack the
+     *  era-stamp column, so the writer degrades (omits it) instead of throwing. */
+    hasIdentityProvenanceColumn;
+    constructor(db) {
+        this.db = db;
+        this.hasIdentityProvenanceColumn = this.db.prepare("PRAGMA table_info(outbox_entries)").all().some((col) => col.name === "identity_provenance");
+    }
+    record(input) {
+        const id = input.outboxId ?? newOutboxId();
+        const existing = this.getByIdRaw(id);
+        if (existing)
+            return this.rowToEntry(existing);
+        const ts = new Date().toISOString();
+        const tags = input.tags ? JSON.stringify(input.tags) : null;
+        const urgency = input.urgency ?? "routine";
+        if (this.hasIdentityProvenanceColumn) {
+            this.db
+                .prepare(`INSERT INTO outbox_entries (
+            outbox_id, sender_session, destination_session, body, tags, urgency, ts_dispatched, audit_pointer, identity_provenance
+          ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`)
+                .run(id, input.senderSession, input.destinationSession, input.body, tags, urgency, ts, input.auditPointer ?? null, input.identityProvenance ?? null);
+        }
+        else {
+            this.db
+                .prepare(`INSERT INTO outbox_entries (
+            outbox_id, sender_session, destination_session, body, tags, urgency, ts_dispatched, audit_pointer
+          ) VALUES (?, ?, ?, ?, ?, ?, ?, ?)`)
+                .run(id, input.senderSession, input.destinationSession, input.body, tags, urgency, ts, input.auditPointer ?? null);
+        }
+        return this.getByIdOrThrow(id);
+    }
+    markDelivered(outboxId) {
+        const ts = new Date().toISOString();
+        const result = this.db
+            .prepare(`UPDATE outbox_entries
+           SET delivery_state = 'delivered', delivered_at = ?
+         WHERE outbox_id = ? AND delivery_state = 'pending'`)
+            .run(ts, outboxId);
+        if (result.changes === 0) {
+            const entry = this.getById(outboxId);
+            if (!entry)
+                throw new OutboxHandlerError("outbox_not_found", `outbox ${outboxId} not found`);
+            return entry;
+        }
+        return this.getByIdOrThrow(outboxId);
+    }
+    markFailed(outboxId) {
+        const result = this.db
+            .prepare(`UPDATE outbox_entries
+           SET delivery_state = 'failed'
+         WHERE outbox_id = ? AND delivery_state = 'pending'`)
+            .run(outboxId);
+        if (result.changes === 0) {
+            const entry = this.getById(outboxId);
+            if (!entry)
+                throw new OutboxHandlerError("outbox_not_found", `outbox ${outboxId} not found`);
+            return entry;
+        }
+        return this.getByIdOrThrow(outboxId);
+    }
+    /**
+     * W1 (transactional closure): record an AMBIGUOUS delivery outcome — the send
+     * landed but its render could not be confirmed (transport res.ok && !verified).
+     * Same compare-and-set shape as markFailed/markDelivered (guards on 'pending'),
+     * so it is idempotent and NEVER clobbers a row that already resolved. An
+     * indeterminate row is terminal-by-CAS: it is never silently promoted to
+     * delivered nor demoted to failed by the drain.
+     */
+    markIndeterminate(outboxId) {
+        const result = this.db
+            .prepare(`UPDATE outbox_entries
+           SET delivery_state = 'indeterminate'
+         WHERE outbox_id = ? AND delivery_state = 'pending'`)
+            .run(outboxId);
+        if (result.changes === 0) {
+            const entry = this.getById(outboxId);
+            if (!entry)
+                throw new OutboxHandlerError("outbox_not_found", `outbox ${outboxId} not found`);
+            return entry;
+        }
+        return this.getByIdOrThrow(outboxId);
+    }
+    /**
+     * MF3: atomically CLAIM a pending wake intent for delivery (pending→sending)
+     * BEFORE the external send. Returns true iff this caller won the claim. An
+     * overlapping drainer's claim finds the row no longer `pending` and returns
+     * false, so exactly one caller performs the external send.
+     */
+    claimForDelivery(outboxId) {
+        const result = this.db
+            .prepare(`UPDATE outbox_entries SET delivery_state = 'sending'
+          WHERE outbox_id = ? AND delivery_state = 'pending'`)
+            .run(outboxId);
+        return result.changes === 1;
+    }
+    /**
+     * MF3: finalize a CLAIMED wake intent (sending→delivered|indeterminate|failed)
+     * after its external send resolved. CAS-guarded on `sending` so it only ever
+     * finalizes a row this drainer claimed. `delivered_at` is stamped only for a
+     * confirmed delivery.
+     */
+    finalizeDelivery(outboxId, state) {
+        const deliveredAt = state === "delivered" ? new Date().toISOString() : null;
+        const result = this.db
+            .prepare(`UPDATE outbox_entries SET delivery_state = ?, delivered_at = ?
+          WHERE outbox_id = ? AND delivery_state = 'sending'`)
+            .run(state, deliveredAt, outboxId);
+        if (result.changes === 0) {
+            const entry = this.getById(outboxId);
+            if (!entry)
+                throw new OutboxHandlerError("outbox_not_found", `outbox ${outboxId} not found`);
+            return entry;
+        }
+        return this.getByIdOrThrow(outboxId);
+    }
+    getById(outboxId) {
+        const row = this.getByIdRaw(outboxId);
+        return row ? this.rowToEntry(row) : null;
+    }
+    listForSender(senderSession, limit = 100) {
+        const rows = this.db
+            .prepare(`SELECT * FROM outbox_entries WHERE sender_session = ? ORDER BY ts_dispatched DESC, rowid DESC LIMIT ?`)
+            .all(senderSession, limit);
+        return rows.map((r) => this.rowToEntry(r));
+    }
+    /**
+     * W1 (transactional closure): list still-`pending` rows whose outbox_id begins
+     * with `idPrefix`, oldest first. The drain uses this to recover intents a crash
+     * left committed-but-undelivered. `idPrefix` is a trusted compile-time constant
+     * (e.g. "wake-intent-") with no LIKE wildcards. Oldest-first + bounded `limit`
+     * so a caller can page and terminate on a served short batch (never a silent cap).
+     */
+    listPending(idPrefix, limit = 200) {
+        // EXACT-CASE prefix match. SQLite `LIKE` is case-insensitive by default, so a
+        // `LIKE 'wake-intent-%'` selector would also execute `WAKE-INTENT-…` variants.
+        // `substr(...) = ?` uses the binary collation (case-sensitive), so exactly one
+        // spelling is executable. With the route-side prefix refusal unbuilt, this
+        // narrowness is the ONLY thing keeping a recorded case variant out of the
+        // executable drain — widen it and variants become executable.
+        const rows = this.db
+            .prepare(`SELECT * FROM outbox_entries
+          WHERE delivery_state = 'pending' AND substr(outbox_id, 1, ?) = ?
+          ORDER BY ts_dispatched ASC, rowid ASC LIMIT ?`)
+            .all(idPrefix.length, idPrefix, limit);
+        return rows.map((r) => this.rowToEntry(r));
+    }
+    /**
+     * BLOCKING 1 (guard re-seal): at a process/recovery boundary, atomically
+     * reconcile ABANDONED claims — rows a crashed process left in the transient
+     * `sending` state — to `indeterminate` WITHOUT re-sending. A `sending` row is
+     * ambiguous (the external send may or may not have landed after the claim), so
+     * it records `indeterminate`, never a forever-transient claim and never a blind
+     * re-send. EXACT-CASE prefix, matching the executable selector. Returns the
+     * count reconciled.
+     */
+    reconcileAbandonedSending(idPrefix) {
+        const result = this.db
+            .prepare(`UPDATE outbox_entries SET delivery_state = 'indeterminate'
+          WHERE delivery_state = 'sending' AND substr(outbox_id, 1, ?) = ?`)
+            .run(idPrefix.length, idPrefix);
+        return result.changes;
+    }
+    getByIdRaw(outboxId) {
+        return this.db
+            .prepare("SELECT * FROM outbox_entries WHERE outbox_id = ?")
+            .get(outboxId);
+    }
+    getByIdOrThrow(outboxId) {
+        const entry = this.getById(outboxId);
+        if (!entry)
+            throw new OutboxHandlerError("outbox_not_found", `outbox ${outboxId} not found after write`);
+        return entry;
+    }
+    rowToEntry(row) {
+        return {
+            outboxId: row.outbox_id,
+            senderSession: row.sender_session,
+            destinationSession: row.destination_session,
+            body: row.body,
+            tags: row.tags ? JSON.parse(row.tags) : null,
+            urgency: row.urgency,
+            tsDispatched: row.ts_dispatched,
+            deliveryState: parseDeliveryState(row.delivery_state),
+            deliveredAt: row.delivered_at,
+            auditPointer: row.audit_pointer,
+        };
+    }
+}
+//# sourceMappingURL=outbox-handler.js.map

package/node_modules/@openrig/daemon/dist/domain/outbox-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbox-handler.js","sourceRoot":"","sources":["../../src/domain/outbox-handler.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,cAAc,CAAC;AAEjD,kFAAkF;AAClF,oFAAoF;AACpF,mFAAmF;AACnF,uFAAuF;AACvF,gFAAgF;AAChF,mCAAmC;AACnC,gFAAgF;AAChF,mFAAmF;AACnF,mFAAmF;AACnF,6EAA6E;AAC7E,mFAAmF;AACnF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,eAAe,CAAU,CAAC;AAG9G;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,IAAK,sBAA4C,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAChE,OAAO,GAA0B,CAAC;IACpC,CAAC;IACD,MAAM,IAAI,kBAAkB,CAC1B,wBAAwB,EACxB,yCAAyC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,qBAAqB,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACtH,CAAC;AACJ,CAAC;AAyCD,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAClC,IAAI,CAAS;IACtB,YAAY,IAAY,EAAE,OAAe;QACvC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,SAAS,WAAW;IAClB,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACzE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACjF,OAAO,UAAU,EAAE,IAAI,GAAG,EAAE,CAAC;AAC/B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,aAAa;IACf,EAAE,CAAoB;IAC/B;mFAC+E;IAC9D,2BAA2B,CAAU;IAEtD,YAAY,EAAqB;QAC/B,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,2BAA2B,GAC9B,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAC,GAAG,EACzD,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,qBAAqB,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,CAAC,KAAwB;QAC7B,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,IAAI,WAAW,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,QAAQ;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAE/C,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,SAAS,CAAC;QAE3C,IAAI,IAAI,CAAC,2BAA2B,EAAE,CAAC;YACrC,IAAI,CAAC,EAAE;iBACJ,OAAO,CACN;;+CAEqC,CACtC;iBACA,GAAG,CACF,EAAE,EACF,KAAK,CAAC,aAAa,EACnB,KAAK,CAAC,kBAAkB,EACxB,KAAK,CAAC,IAAI,EACV,IAAI,EACJ,OAAO,EACP,EAAE,EACF,KAAK,CAAC,YAAY,IAAI,IAAI,EAC1B,KAAK,CAAC,kBAAkB,IAAI,IAAI,CACjC,CAAC;QACN,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,EAAE;iBACJ,OAAO,CACN;;4CAEkC,CACnC;iBACA,GAAG,CACF,EAAE,EACF,KAAK,CAAC,aAAa,EACnB,KAAK,CAAC,kBAAkB,EACxB,KAAK,CAAC,IAAI,EACV,IAAI,EACJ,OAAO,EACP,EAAE,EACF,KAAK,CAAC,YAAY,IAAI,IAAI,CAC3B,CAAC;QACN,CAAC;QAED,OAAO,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;IACjC,CAAC;IAED,aAAa,CAAC,QAAgB;QAC5B,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE;aACnB,OAAO,CACN;;4DAEoD,CACrD;aACA,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QACrB,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACrC,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,kBAAkB,CAAC,kBAAkB,EAAE,UAAU,QAAQ,YAAY,CAAC,CAAC;YAC7F,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IAED,UAAU,CAAC,QAAgB;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE;aACnB,OAAO,CACN;;4DAEoD,CACrD;aACA,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjB,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACrC,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,kBAAkB,CAAC,kBAAkB,EAAE,UAAU,QAAQ,YAAY,CAAC,CAAC;YAC7F,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IAED;;;;;;;OAOG;IACH,iBAAiB,CAAC,QAAgB;QAChC,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE;aACnB,OAAO,CACN;;4DAEoD,CACrD;aACA,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjB,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACrC,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,kBAAkB,CAAC,kBAAkB,EAAE,UAAU,QAAQ,YAAY,CAAC,CAAC;YAC7F,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IAED;;;;;OAKG;IACH,gBAAgB,CAAC,QAAgB;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE;aACnB,OAAO,CACN;6DACqD,CACtD;aACA,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjB,OAAO,MAAM,CAAC,OAAO,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED;;;;;OAKG;IACH,gBAAgB,CAAC,QAAgB,EAAE,KAA+C;QAChF,MAAM,WAAW,GAAG,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE;aACnB,OAAO,CACN;6DACqD,CACtD;aACA,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;QACrC,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACrC,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,kBAAkB,CAAC,kBAAkB,EAAE,UAAU,QAAQ,YAAY,CAAC,CAAC;YAC7F,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IAED,OAAO,CAAC,QAAgB;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACtC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3C,CAAC;IAED,aAAa,CAAC,aAAqB,EAAE,KAAK,GAAG,GAAG;QAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CACN,uGAAuG,CACxG;aACA,GAAG,CAAC,aAAa,EAAE,KAAK,CAAqB,CAAC;QACjD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED;;;;;;OAMG;IACH,WAAW,CAAC,QAAgB,EAAE,KAAK,GAAG,GAAG;QACvC,8EAA8E;QAC9E,+EAA+E;QAC/E,+EAA+E;QAC/E,2EAA2E;QAC3E,0EAA0E;QAC1E,8DAA8D;QAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CACN;;wDAEgD,CACjD;aACA,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAqB,CAAC;QAC7D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED;;;;;;;;OAQG;IACH,yBAAyB,CAAC,QAAgB;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE;aACnB,OAAO,CACN;2EACmE,CACpE;aACA,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAClC,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;IAEO,UAAU,CAAC,QAAgB;QACjC,OAAO,IAAI,CAAC,EAAE;aACX,OAAO,CAAC,kDAAkD,CAAC;aAC3D,GAAG,CAAC,QAAQ,CAA+B,CAAC;IACjD,CAAC;IAEO,cAAc,CAAC,QAAgB;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,kBAAkB,CAAC,kBAAkB,EAAE,UAAU,QAAQ,wBAAwB,CAAC,CAAC;QACzG,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,UAAU,CAAC,GAAmB;QACpC,OAAO;YACL,QAAQ,EAAE,GAAG,CAAC,SAAS;YACvB,aAAa,EAAE,GAAG,CAAC,cAAc;YACjC,kBAAkB,EAAE,GAAG,CAAC,mBAAmB;YAC3C,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAc,CAAC,CAAC,CAAC,IAAI;YAC1D,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,YAAY,EAAE,GAAG,CAAC,aAAa;YAC/B,aAAa,EAAE,kBAAkB,CAAC,GAAG,CAAC,cAAc,CAAC;YACrD,WAAW,EAAE,GAAG,CAAC,YAAY;YAC7B,YAAY,EAAE,GAAG,CAAC,aAAa;SAChC,CAAC;IACJ,CAAC;CACF"}

package/node_modules/@openrig/daemon/dist/domain/package-install-service.d.ts

@@ -0,0 +1,64 @@
+import type { PackageRepository } from "./package-repository.js";
+import type { InstallRepository } from "./install-repository.js";
+import type { InstallEngine } from "./install-engine.js";
+import type { InstallVerifier } from "./install-verifier.js";
+import type { ResolvedPackage, FsOps } from "./package-resolver.js";
+export type PackageInstallOutcome = {
+    ok: true;
+    installId: string;
+    packageId: string;
+    applied: number;
+    deferred: number;
+} | {
+    ok: false;
+    code: "conflict_blocked";
+    message: string;
+} | {
+    ok: false;
+    code: "policy_rejected";
+    message: string;
+} | {
+    ok: false;
+    code: "manifest_hash_mismatch";
+    message: string;
+} | {
+    ok: false;
+    code: "apply_error";
+    message: string;
+} | {
+    ok: false;
+    code: "verification_failed";
+    message: string;
+};
+interface PackageInstallOpts {
+    resolved: ResolvedPackage;
+    targetRoot: string;
+    runtime: "claude-code" | "codex";
+    roleName?: string;
+    allowMerge?: boolean;
+    bootstrapId?: string;
+    fsOps: FsOps;
+}
+interface PackageInstallServiceDeps {
+    packageRepo: PackageRepository;
+    installRepo: InstallRepository;
+    installEngine: InstallEngine;
+    installVerifier: InstallVerifier;
+}
+/**
+ * Reusable package install pipeline. Composes resolve -> plan -> detect -> policy -> dedup -> apply -> verify.
+ * Used by both the packages route and the bootstrap orchestrator.
+ */
+export declare class PackageInstallService {
+    readonly db: import("better-sqlite3").Database;
+    private packageRepo;
+    private installEngine;
+    private installVerifier;
+    constructor(deps: PackageInstallServiceDeps);
+    /**
+     * Run the full install pipeline for a single resolved package.
+     */
+    install(opts: PackageInstallOpts): PackageInstallOutcome;
+}
+export {};
+//# sourceMappingURL=package-install-service.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/package-install-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-install-service.d.ts","sourceRoot":"","sources":["../../src/domain/package-install-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,KAAK,EAAE,aAAa,EAAiB,MAAM,qBAAqB,CAAC;AACxE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAKpE,MAAM,MAAM,qBAAqB,GAC7B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACrF;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACxD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,iBAAiB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACvD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,wBAAwB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC9D;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,aAAa,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACnD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,qBAAqB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhE,UAAU,kBAAkB;IAC1B,QAAQ,EAAE,eAAe,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,KAAK,CAAC;CACd;AAED,UAAU,yBAAyB;IACjC,WAAW,EAAE,iBAAiB,CAAC;IAC/B,WAAW,EAAE,iBAAiB,CAAC;IAC/B,aAAa,EAAE,aAAa,CAAC;IAC7B,eAAe,EAAE,eAAe,CAAC;CAClC;AAED;;;GAGG;AACH,qBAAa,qBAAqB;IAChC,QAAQ,CAAC,EAAE,EAAE,OAAO,gBAAgB,EAAE,QAAQ,CAAC;IAC/C,OAAO,CAAC,WAAW,CAAoB;IACvC,OAAO,CAAC,aAAa,CAAgB;IACrC,OAAO,CAAC,eAAe,CAAkB;gBAE7B,IAAI,EAAE,yBAAyB;IAQ3C;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,kBAAkB,GAAG,qBAAqB;CA6DzD"}

package/node_modules/@openrig/daemon/dist/domain/package-install-service.js

@@ -0,0 +1,80 @@
+import { InstallPlanner } from "./install-planner.js";
+import { detectConflicts } from "./conflict-detector.js";
+import { applyPolicy } from "./install-policy.js";
+/**
+ * Reusable package install pipeline. Composes resolve -> plan -> detect -> policy -> dedup -> apply -> verify.
+ * Used by both the packages route and the bootstrap orchestrator.
+ */
+export class PackageInstallService {
+    db;
+    packageRepo;
+    installEngine;
+    installVerifier;
+    constructor(deps) {
+        this.db = deps.packageRepo.db;
+        if (deps.installRepo.db !== this.db)
+            throw new Error("PackageInstallService: installRepo must share the same db handle");
+        this.packageRepo = deps.packageRepo;
+        this.installEngine = deps.installEngine;
+        this.installVerifier = deps.installVerifier;
+    }
+    /**
+     * Run the full install pipeline for a single resolved package.
+     */
+    install(opts) {
+        const { resolved, targetRoot, runtime, roleName, allowMerge, bootstrapId, fsOps } = opts;
+        // Plan + detect conflicts
+        let plan, refined;
+        try {
+            const planner = new InstallPlanner(fsOps);
+            plan = planner.plan(resolved, targetRoot, runtime, { roleName });
+            refined = detectConflicts(plan, fsOps);
+        }
+        catch (err) {
+            return { ok: false, code: "apply_error", message: err.message };
+        }
+        // Check for content-level conflicts
+        if (refined.conflicts.length > 0) {
+            return { ok: false, code: "conflict_blocked", message: `${refined.conflicts.length} unresolved conflicts` };
+        }
+        // Apply policy
+        const policyResult = applyPolicy(refined, { allowMerge: allowMerge ?? false });
+        if (policyResult.approved.length === 0) {
+            return { ok: false, code: "policy_rejected", message: "No entries approved by policy" };
+        }
+        // Dedup package record
+        const existing = this.packageRepo.findByNameVersion(resolved.manifest.name, resolved.manifest.version);
+        if (existing && existing.manifestHash !== resolved.manifestHash) {
+            return { ok: false, code: "manifest_hash_mismatch", message: `Package already registered with different content` };
+        }
+        const pkg = existing ?? this.packageRepo.createPackage({
+            name: resolved.manifest.name,
+            version: resolved.manifest.version,
+            sourceKind: resolved.sourceKind,
+            sourceRef: resolved.sourceRef,
+            manifestHash: resolved.manifestHash,
+            summary: resolved.manifest.summary,
+        });
+        // Apply
+        let result;
+        try {
+            result = this.installEngine.apply(policyResult, refined, pkg.id, targetRoot, bootstrapId);
+        }
+        catch (err) {
+            return { ok: false, code: "apply_error", message: err.message };
+        }
+        // Verify
+        const verification = this.installVerifier.verify(result.installId);
+        if (!verification.passed) {
+            return { ok: false, code: "verification_failed", message: "Post-apply verification failed" };
+        }
+        return {
+            ok: true,
+            installId: result.installId,
+            packageId: pkg.id,
+            applied: result.applied.length,
+            deferred: result.deferred.length,
+        };
+    }
+}
+//# sourceMappingURL=package-install-service.js.map

package/node_modules/@openrig/daemon/dist/domain/package-install-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-install-service.js","sourceRoot":"","sources":["../../src/domain/package-install-service.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AA2BlD;;;GAGG;AACH,MAAM,OAAO,qBAAqB;IACvB,EAAE,CAAoC;IACvC,WAAW,CAAoB;IAC/B,aAAa,CAAgB;IAC7B,eAAe,CAAkB;IAEzC,YAAY,IAA+B;QACzC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,WAAW,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;QACzH,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACpC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;QACxC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,IAAwB;QAC9B,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QAEzF,0BAA0B;QAC1B,IAAI,IAAI,EAAE,OAAO,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,cAAc,CAAC,KAAK,CAAC,CAAC;YAC1C,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YACjE,OAAO,GAAG,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC;QAC7E,CAAC;QAED,oCAAoC;QACpC,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,uBAAuB,EAAE,CAAC;QAC9G,CAAC;QAED,eAAe;QACf,MAAM,YAAY,GAAG,WAAW,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,UAAU,IAAI,KAAK,EAAE,CAAC,CAAC;QAE/E,IAAI,YAAY,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC;QAC1F,CAAC;QAED,uBAAuB;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACvG,IAAI,QAAQ,IAAI,QAAQ,CAAC,YAAY,KAAK,QAAQ,CAAC,YAAY,EAAE,CAAC;YAChE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,mDAAmD,EAAE,CAAC;QACrH,CAAC;QACD,MAAM,GAAG,GAAG,QAAQ,IAAI,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC;YACrD,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI;YAC5B,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO;YAClC,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO;SACnC,CAAC,CAAC;QAEH,QAAQ;QACR,IAAI,MAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,YAAY,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;QAC5F,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC;QAC7E,CAAC;QAED,SAAS;QACT,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnE,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;YACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC;QAC/F,CAAC;QAED,OAAO;YACL,EAAE,EAAE,IAAI;YACR,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,GAAG,CAAC,EAAE;YACjB,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM;YAC9B,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;SACjC,CAAC;IACJ,CAAC;CACF"}

package/node_modules/@openrig/daemon/dist/domain/package-manifest.d.ts

@@ -0,0 +1,93 @@
+export interface PackageManifest {
+    schemaVersion: number;
+    name: string;
+    version: string;
+    summary: string;
+    compatibility: {
+        runtimes: string[];
+    };
+    exports: PackageExports;
+    requirements?: PackageRequirements;
+    installPolicy?: InstallPolicy;
+    verification?: VerificationConfig;
+    roles?: RoleDefinition[];
+}
+export interface PackageExports {
+    skills?: SkillExport[];
+    guidance?: GuidanceExport[];
+    agents?: AgentExport[];
+    hooks?: HookExport[];
+    mcp?: McpExport[];
+}
+export interface SkillExport {
+    source: string;
+    name: string;
+    supportedScopes: string[];
+    defaultScope: string;
+}
+export interface GuidanceExport {
+    source: string;
+    name: string;
+    kind: string;
+    supportedScopes: string[];
+    defaultScope: string;
+    mergeStrategy: string;
+}
+export interface AgentExport {
+    source: string;
+    name?: string;
+    supportedScopes?: string[];
+    defaultScope?: string;
+}
+export interface HookExport {
+    source: string;
+    supportedRuntimes?: string[];
+    supportedScopes?: string[];
+    defaultScope?: string;
+}
+export interface McpExport {
+    source: string;
+    supportedRuntimes?: string[];
+    supportedScopes?: string[];
+    defaultScope?: string;
+}
+export interface PackageRequirements {
+    cliTools?: Array<{
+        name: string;
+        requiredFor?: string[];
+        installHints?: Record<string, string>;
+    }>;
+    systemPackages?: Array<{
+        name: string;
+    }>;
+}
+export interface InstallPolicy {
+    requireReviewForExternalInstalls?: boolean;
+    allowUserGlobalWrites?: boolean;
+    allowAgentMergeOfGuidance?: boolean;
+}
+export interface RoleDefinition {
+    name: string;
+    description?: string;
+    skills?: string[];
+    guidance?: string[];
+    hooks?: string[];
+    context?: string[];
+}
+export interface VerificationCheck {
+    type: string;
+    name?: string;
+    command?: string;
+}
+export interface VerificationConfig {
+    checks: VerificationCheck[];
+}
+export interface ValidationResult {
+    valid: boolean;
+    errors: string[];
+}
+export declare function parseManifest(yamlString: string): unknown;
+export declare function validateManifest(raw: unknown): ValidationResult;
+export declare function normalizeManifest(raw: unknown): PackageManifest;
+export declare function serializeManifest(manifest: PackageManifest): string;
+//# sourceMappingURL=package-manifest.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/package-manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-manifest.d.ts","sourceRoot":"","sources":["../../src/domain/package-manifest.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,eAAe;IAC9B,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE;QAAE,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IACtC,OAAO,EAAE,cAAc,CAAC;IACxB,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAClC,KAAK,CAAC,EAAE,cAAc,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC;IACvB,QAAQ,CAAC,EAAE,cAAc,EAAE,CAAC;IAC5B,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC;IACvB,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC;IACrB,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC,CAAC;IAClG,cAAc,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC1C;AAED,MAAM,WAAW,aAAa;IAC5B,gCAAgC,CAAC,EAAE,OAAO,CAAC;IAC3C,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,yBAAyB,CAAC,EAAE,OAAO,CAAC;CACrC;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,iBAAiB,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAYD,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAEzD;AAUD,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,OAAO,GAAG,gBAAgB,CA4L/D;AAgDD,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,eAAe,CAgE/D;AAID,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,eAAe,GAAG,MAAM,CA8GnE"}