@openrig/cli 0.5.0 → 0.5.2

package/node_modules/@openrig/daemon/dist/domain/tmux-option-defaults.js

@@ -0,0 +1,133 @@
+import { spawnSync } from "node:child_process";
+import { runSyncSite } from "./sync-site-wrap.js";
+/**
+ * OPR.0.4.6.02 S1 — applies the daemon's tmux option defaults to a
+ * FRESHLY-CREATED session. Shared by `NodeLauncher` (the launch path) and
+ * `SuccessorSessionLauncher` (the fresh seat-handover successor path) so
+ * every fresh operator/agent seat gets consistent mouse/status/clipboard
+ * defaults (orch C1 scope ruling: fold fresh successors in via ONE helper).
+ *
+ * Scope discipline (guard b2): SESSION-scope options (`mouse`, `status`) are
+ * applied ONLY to the just-created session name passed in — never a
+ * pre-existing/discovered session — so the never-retro-flip rail (BR-1)
+ * holds and a `terminal.status_bar` flip affects future launches only.
+ * SERVER-scope options (`set-clipboard`, `copy-command`) are asserted ONCE
+ * per daemon lifetime via the shared memo on this single instance; a daemon
+ * RESTART re-asserts (a fresh applier). Callers MUST only invoke this after
+ * a successful `createSession` on a freshly-created session.
+ */
+export class TmuxOptionDefaultsApplier {
+    tmuxAdapter;
+    readTmuxOptionDefaults;
+    platform;
+    hasCommand;
+    serverDefaultsAsserted = false;
+    constructor(deps) {
+        this.tmuxAdapter = deps.tmuxAdapter;
+        this.readTmuxOptionDefaults = deps.readTmuxOptionDefaults ?? (() => ({ statusBar: false }));
+        this.platform = deps.platform ?? process.platform;
+        this.hasCommand = deps.hasCommand ?? defaultHasCommand;
+    }
+    /**
+     * Apply the option defaults to a JUST-CREATED session. `mouse` is always
+     * on; the inner status bar follows the `terminal.status_bar` config key
+     * (default off), read at apply time so a flip applies to FUTURE launches
+     * only (this touches only `sessionName`). Then assert the server-scope
+     * defaults once per daemon lifetime.
+     *
+     * Returns the list of non-fatal warnings (empty when all sets succeed) so
+     * the caller can fold them into its own launch-warning channel. NEVER
+     * throws for an option-set failure — a seat without mouse-scroll is
+     * degraded, not dead (and a handover successor must not be handover-fatal
+     * over a cosmetic option).
+     */
+    async applyToFreshSession(sessionName) {
+        const warnings = [];
+        const mouse = await this.tmuxAdapter.setSessionOption(sessionName, "mouse", "on");
+        if (!mouse.ok) {
+            warnings.push(`tmux "mouse" option not set for ${sessionName}: ${mouse.message}`);
+        }
+        let statusBar = false;
+        try {
+            statusBar = this.readTmuxOptionDefaults().statusBar === true;
+        }
+        catch {
+            statusBar = false;
+        }
+        const status = await this.tmuxAdapter.setSessionOption(sessionName, "status", statusBar ? "on" : "off");
+        if (!status.ok) {
+            warnings.push(`tmux "status" option not set for ${sessionName}: ${status.message}`);
+        }
+        await this.ensureServerDefaults(warnings);
+        return warnings;
+    }
+    /**
+     * Assert the SERVER-scope tmux defaults (`set-clipboard on` + the
+     * per-platform `copy-command`) on the daemon's OWN tmux server, ONCE per
+     * daemon lifetime. Written only through `setServerOption` (`set-option
+     * -s`) — never a `-t` session target (guard b2 scope contract).
+     *
+     * Per-process memoization means a daemon RESTART re-asserts these (a fresh
+     * applier instance): an operator's manual `copy-command` / `set-clipboard`
+     * override does NOT survive a daemon restart — the named off-switch
+     * follow-up is the customization path. Re-running is harmless (idempotent
+     * set of the same values); the memo is an optimization, not a correctness
+     * gate.
+     */
+    async ensureServerDefaults(warnings) {
+        if (this.serverDefaultsAsserted)
+            return;
+        // Set first so concurrent applies don't double-assert; either way the
+        // sets are idempotent.
+        this.serverDefaultsAsserted = true;
+        const clip = await this.tmuxAdapter.setServerOption("set-clipboard", "on");
+        if (!clip.ok) {
+            warnings.push(`tmux "set-clipboard" server option not set: ${clip.message}`);
+        }
+        const copyCommand = resolveCopyCommand(this.platform, this.hasCommand);
+        if (copyCommand !== null) {
+            const cc = await this.tmuxAdapter.setServerOption("copy-command", copyCommand);
+            if (!cc.ok) {
+                warnings.push(`tmux "copy-command" server option not set: ${cc.message}`);
+            }
+        }
+    }
+}
+/**
+ * OPR.0.4.6.02 S1 — the per-platform tmux `copy-command` table (arch rail
+ * b). Ref: the tmux "Clipboard" wiki — `copy-command` is the shell command
+ * tmux pipes a copy-mode selection into to reach the system clipboard.
+ *  - darwin → `pbcopy`
+ *  - linux  → `wl-copy` if present, else `xclip -selection clipboard -i`,
+ *             else UNSET (null) — fall back to `set-clipboard on` OSC 52.
+ *  - other  → UNSET (null).
+ * Pure: platform + a `command -v` probe in, the command string (or null)
+ * out. One table, no side effects — the applier decides whether to write.
+ */
+export function resolveCopyCommand(platform, hasCommand) {
+    if (platform === "darwin")
+        return "pbcopy";
+    if (platform === "linux") {
+        if (hasCommand("wl-copy"))
+            return "wl-copy";
+        if (hasCommand("xclip"))
+            return "xclip -selection clipboard -i";
+        return null;
+    }
+    return null;
+}
+/**
+ * OPR.0.4.6.02 S1 — default `command -v <bin>` probe (POSIX shell builtin).
+ * Returns true when the binary resolves on PATH. Cheap + best-effort; any
+ * failure (spawn error, non-shell env) reads as absent.
+ */
+function defaultHasCommand(bin) {
+    try {
+        const r = runSyncSite("tmux_options.command_v", () => spawnSync(`command -v ${bin}`, { shell: true, stdio: "ignore" }));
+        return r.status === 0;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=tmux-option-defaults.js.map

package/node_modules/@openrig/daemon/dist/domain/tmux-option-defaults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tmux-option-defaults.js","sourceRoot":"","sources":["../../src/domain/tmux-option-defaults.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAwBlD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,yBAAyB;IAC5B,WAAW,CAAc;IACzB,sBAAsB,CAA+B;IACrD,QAAQ,CAAkB;IAC1B,UAAU,CAA2B;IACrC,sBAAsB,GAAG,KAAK,CAAC;IAEvC,YAAY,IAA4B;QACtC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACpC,IAAI,CAAC,sBAAsB,GAAG,IAAI,CAAC,sBAAsB,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAC5F,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;QAClD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,iBAAiB,CAAC;IACzD,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,mBAAmB,CAAC,WAAmB;QAC3C,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QAClF,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,QAAQ,CAAC,IAAI,CAAC,mCAAmC,WAAW,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACpF,CAAC;QAED,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,CAAC;YACH,SAAS,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAAC,SAAS,KAAK,IAAI,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,GAAG,KAAK,CAAC;QACpB,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACxG,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC,oCAAoC,WAAW,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QACtF,CAAC;QAED,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QAC1C,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;;;;;;;;OAYG;IACK,KAAK,CAAC,oBAAoB,CAAC,QAAkB;QACnD,IAAI,IAAI,CAAC,sBAAsB;YAAE,OAAO;QACxC,sEAAsE;QACtE,uBAAuB;QACvB,IAAI,CAAC,sBAAsB,GAAG,IAAI,CAAC;QAEnC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;QAC3E,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,CAAC,+CAA+C,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,WAAW,GAAG,kBAAkB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACvE,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACzB,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;YAC/E,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBACX,QAAQ,CAAC,IAAI,CAAC,8CAA8C,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAAyB,EACzB,UAAoC;IAEpC,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC3C,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QAC5C,IAAI,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,+BAA+B,CAAC;QAChE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,GAAW;IACpC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,WAAW,CAAC,wBAAwB,EAAE,GAAG,EAAE,CACnD,SAAS,CAAC,cAAc,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CACjE,CAAC;QACF,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/topology/multi-rig-launcher.d.ts

@@ -0,0 +1,49 @@
+import type { TopologyManifest } from "./topology-manifest.js";
+import type { HostEntry, HostRegistryLoadResult } from "../hosts/hosts-registry-reader.js";
+export type TopologyEntryStatus = "ok" | "failed" | "skipped";
+export interface TopologyEntryResult {
+    rigRef: string;
+    /** Uniform on every entry: the placed host id, or the literal "local". */
+    host: string;
+    status: TopologyEntryStatus;
+    error?: string;
+}
+export interface TopologyLaunchResult {
+    /** True ONLY when every entry is ok (FR-5 — no false green). */
+    ok: boolean;
+    entries: TopologyEntryResult[];
+}
+export interface MultiRigLauncherDeps {
+    /** The SAME public lock pair the up route uses (bootstrap-orchestrator). */
+    tryAcquire: (sourceRef: string) => boolean;
+    release: (sourceRef: string) => void;
+    /** The existing local single-rig leaf (public bootstrap() via routes/up.ts
+     *  wiring). Resolves ok:false with the leaf's own error on failure — the
+     *  launcher invents no failure taxonomy. */
+    launchLocal: (source: string) => Promise<{
+        ok: boolean;
+        error?: string;
+    }>;
+    /** The shipped remote POST /api/up leaf for a placed entry. */
+    launchRemote: (source: string, host: HostEntry) => Promise<{
+        ok: boolean;
+        error?: string;
+    }>;
+    /** Lazy hosts-registry read (shared reader) — consulted only when the
+     *  manifest actually places entries on hosts. */
+    loadRegistry: () => HostRegistryLoadResult;
+    /** Resolve a local entry's manifest source string to the EXACT ref used
+     *  for BOTH the lock and the leaf (guard fixback F1): the orchestrator
+     *  normalizes lock keys with path.resolve, so locking the raw relative
+     *  string would key against the daemon cwd while the leaf launches the
+     *  manifest-dir-resolved file — false lock negatives (standalone up of
+     *  the real path doesn't conflict) AND false positives (two manifests'
+     *  './a.yaml' collide across different files). Identity when omitted. */
+    resolveLocalRef?: (source: string) => string;
+}
+export declare class MultiRigLauncher {
+    private deps;
+    constructor(deps: MultiRigLauncherDeps);
+    launch(manifest: TopologyManifest): Promise<TopologyLaunchResult>;
+}
+//# sourceMappingURL=multi-rig-launcher.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/topology/multi-rig-launcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"multi-rig-launcher.d.ts","sourceRoot":"","sources":["../../../src/domain/topology/multi-rig-launcher.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,KAAK,EAAE,SAAS,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAG3F,MAAM,MAAM,mBAAmB,GAAG,IAAI,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE9D,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,0EAA0E;IAC1E,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,mBAAmB,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC,gEAAgE;IAChE,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,mBAAmB,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,oBAAoB;IACnC,4EAA4E;IAC5E,UAAU,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;IAC3C,OAAO,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;IACrC;;gDAE4C;IAC5C,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1E,+DAA+D;IAC/D,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,KAAK,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5F;qDACiD;IACjD,YAAY,EAAE,MAAM,sBAAsB,CAAC;IAC3C;;;;;;6EAMyE;IACzE,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC;CAC9C;AAKD,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,IAAI,CAAuB;gBAEvB,IAAI,EAAE,oBAAoB;IAIhC,MAAM,CAAC,QAAQ,EAAE,gBAAgB,GAAG,OAAO,CAAC,oBAAoB,CAAC;CAqGxE"}

package/node_modules/@openrig/daemon/dist/domain/topology/multi-rig-launcher.js

@@ -0,0 +1,132 @@
+// OPR.0.4.4.11 — MultiRigLauncher: the THIN walker (FR-3/FR-4/FR-5).
+//
+// It INVOKES the existing single-rig leaves — it never re-implements stages,
+// locks, provenance, or result shapes. A local entry runs through the SAME
+// public bootstrap() entry + tryAcquire/release lock pair routes/up.ts uses
+// (guard G-2: the per-sourceRef lock is ROUTE-side today — bootstrap() never
+// acquires; the launcher explicitly participates in that same lock set,
+// acquire before the leaf, release in finally on success AND failure). A
+// host-placed entry runs through the shipped remote POST /api/up leaf. Both
+// leaves are injected so this module stays testable and the wiring in
+// routes/up.ts (the ONLY production caller) binds the real seams.
+//
+// Aggregate contract (arch ruling 5, verbatim): status is the CLOSED enum
+// {ok | failed | skipped}; entries after the failed one report `skipped`
+// EXPLICITLY (never absent — omission-proof); `host` is present uniformly on
+// every entry (the literal "local" for local entries); overall success =
+// every entry ok. Stop-on-failure is the ONLY v0 behavior (FR-5): no new
+// entry starts after a failure; already-started rigs are reported honestly
+// (mixed state, no rollback ceremony).
+import { resolvePlacementHost } from "../hosts/hosts-registry-reader.js";
+/** Mirrors the route's 409 lock-conflict semantics for a topology entry. */
+const LOCK_CONFLICT_ERROR = "Already in progress for this source (conflict): a concurrent up holds this rig's launch lock";
+export class MultiRigLauncher {
+    deps;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    async launch(manifest) {
+        const entries = manifest.rigs;
+        // Every entry starts explicitly skipped — an entry the walk never
+        // reaches is REPORTED, not absent (omission-proof aggregate).
+        const results = entries.map((e) => ({
+            rigRef: e.source,
+            host: e.host ?? "local",
+            status: "skipped",
+        }));
+        // ── Pre-launch placement validation (FR-1/FR-4: per-entry structured
+        // errors BEFORE any launch attempt). Registry is read once, only if a
+        // host-placed entry exists. Any placement failure aborts the whole run
+        // before the first leaf call: bad entries report failed, the rest stay
+        // skipped.
+        const placed = new Map();
+        if (entries.some((e) => e.host !== undefined)) {
+            const reg = this.deps.loadRegistry();
+            let placementFailed = false;
+            for (let i = 0; i < entries.length; i++) {
+                const hostId = entries[i].host;
+                if (hostId === undefined)
+                    continue;
+                if (!reg.ok) {
+                    results[i] = { ...results[i], status: "failed", error: reg.error };
+                    placementFailed = true;
+                    continue;
+                }
+                const res = resolvePlacementHost(reg.registry, hostId);
+                if (!res.ok) {
+                    results[i] = { ...results[i], status: "failed", error: res.error };
+                    placementFailed = true;
+                }
+                else {
+                    placed.set(i, res.host);
+                }
+            }
+            if (placementFailed)
+                return { ok: false, entries: results };
+        }
+        // ── Staged walk: entries START in manifest order under the fixed cap
+        // (default 1 = strictly sequential); a failure stops all further starts
+        // while in-flight entries complete and report honestly.
+        let nextIndex = 0;
+        let stopped = false;
+        const runEntry = async (i) => {
+            const entry = entries[i];
+            const hostEntry = placed.get(i);
+            try {
+                if (hostEntry) {
+                    const res = await this.deps.launchRemote(entry.source, hostEntry);
+                    results[i] = {
+                        rigRef: entry.source,
+                        host: hostEntry.id,
+                        status: res.ok ? "ok" : "failed",
+                        ...(res.ok ? {} : { error: res.error ?? "remote up failed" }),
+                    };
+                    return;
+                }
+                // Local: the route-side lock discipline, explicitly (guard G-2).
+                // Lock key and launch ref are the SAME resolved string (guard F1) —
+                // the aggregate's rigRef stays the raw manifest string for display.
+                const launchRef = this.deps.resolveLocalRef ? this.deps.resolveLocalRef(entry.source) : entry.source;
+                if (!this.deps.tryAcquire(launchRef)) {
+                    results[i] = { rigRef: entry.source, host: "local", status: "failed", error: LOCK_CONFLICT_ERROR };
+                    return;
+                }
+                try {
+                    const res = await this.deps.launchLocal(launchRef);
+                    results[i] = {
+                        rigRef: entry.source,
+                        host: "local",
+                        status: res.ok ? "ok" : "failed",
+                        ...(res.ok ? {} : { error: res.error ?? "bootstrap failed" }),
+                    };
+                }
+                finally {
+                    this.deps.release(launchRef);
+                }
+            }
+            catch (err) {
+                results[i] = {
+                    rigRef: entry.source,
+                    host: hostEntry ? hostEntry.id : "local",
+                    status: "failed",
+                    error: err.message,
+                };
+            }
+        };
+        const cap = Math.max(1, manifest.concurrency);
+        const workers = Array.from({ length: Math.min(cap, entries.length) }, async () => {
+            while (!stopped) {
+                const i = nextIndex;
+                if (i >= entries.length)
+                    return;
+                nextIndex += 1;
+                await runEntry(i);
+                if (results[i].status === "failed")
+                    stopped = true; // FR-5: stop at the failed entry
+            }
+        });
+        await Promise.all(workers);
+        return { ok: results.every((r) => r.status === "ok"), entries: results };
+    }
+}
+//# sourceMappingURL=multi-rig-launcher.js.map

package/node_modules/@openrig/daemon/dist/domain/topology/multi-rig-launcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"multi-rig-launcher.js","sourceRoot":"","sources":["../../../src/domain/topology/multi-rig-launcher.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,EAAE;AACF,6EAA6E;AAC7E,2EAA2E;AAC3E,4EAA4E;AAC5E,6EAA6E;AAC7E,wEAAwE;AACxE,yEAAyE;AACzE,4EAA4E;AAC5E,sEAAsE;AACtE,kEAAkE;AAClE,EAAE;AACF,0EAA0E;AAC1E,yEAAyE;AACzE,6EAA6E;AAC7E,yEAAyE;AACzE,yEAAyE;AACzE,2EAA2E;AAC3E,uCAAuC;AAIvC,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAyCzE,4EAA4E;AAC5E,MAAM,mBAAmB,GAAG,8FAA8F,CAAC;AAE3H,MAAM,OAAO,gBAAgB;IACnB,IAAI,CAAuB;IAEnC,YAAY,IAA0B;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAA0B;QACrC,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC;QAC9B,kEAAkE;QAClE,8DAA8D;QAC9D,MAAM,OAAO,GAA0B,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACzD,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,OAAO;YACvB,MAAM,EAAE,SAAgC;SACzC,CAAC,CAAC,CAAC;QAEJ,sEAAsE;QACtE,sEAAsE;QACtE,uEAAuE;QACvE,uEAAuE;QACvE,WAAW;QACX,MAAM,MAAM,GAAG,IAAI,GAAG,EAAqB,CAAC;QAC5C,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,EAAE,CAAC;YAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACrC,IAAI,eAAe,GAAG,KAAK,CAAC;YAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACxC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC;gBAChC,IAAI,MAAM,KAAK,SAAS;oBAAE,SAAS;gBACnC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;oBACZ,OAAO,CAAC,CAAC,CAAE,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC,CAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;oBACrE,eAAe,GAAG,IAAI,CAAC;oBACvB,SAAS;gBACX,CAAC;gBACD,MAAM,GAAG,GAAG,oBAAoB,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBACvD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;oBACZ,OAAO,CAAC,CAAC,CAAE,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC,CAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;oBACrE,eAAe,GAAG,IAAI,CAAC;gBACzB,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC;YACD,IAAI,eAAe;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QAC9D,CAAC;QAED,sEAAsE;QACtE,wEAAwE;QACxE,wDAAwD;QACxD,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,MAAM,QAAQ,GAAG,KAAK,EAAE,CAAS,EAAiB,EAAE;YAClD,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;YAC1B,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAChC,IAAI,CAAC;gBACH,IAAI,SAAS,EAAE,CAAC;oBACd,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;oBAClE,OAAO,CAAC,CAAC,CAAC,GAAG;wBACX,MAAM,EAAE,KAAK,CAAC,MAAM;wBACpB,IAAI,EAAE,SAAS,CAAC,EAAE;wBAClB,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ;wBAChC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,kBAAkB,EAAE,CAAC;qBAC9D,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,iEAAiE;gBACjE,oEAAoE;gBACpE,oEAAoE;gBACpE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;gBACrG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;oBACrC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;oBACnG,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;oBACnD,OAAO,CAAC,CAAC,CAAC,GAAG;wBACX,MAAM,EAAE,KAAK,CAAC,MAAM;wBACpB,IAAI,EAAE,OAAO;wBACb,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ;wBAChC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,kBAAkB,EAAE,CAAC;qBAC9D,CAAC;gBACJ,CAAC;wBAAS,CAAC;oBACT,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAC/B,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,CAAC,CAAC,GAAG;oBACX,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO;oBACxC,MAAM,EAAE,QAAQ;oBAChB,KAAK,EAAG,GAAa,CAAC,OAAO;iBAC9B,CAAC;YACJ,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE;YAC/E,OAAO,CAAC,OAAO,EAAE,CAAC;gBAChB,MAAM,CAAC,GAAG,SAAS,CAAC;gBACpB,IAAI,CAAC,IAAI,OAAO,CAAC,MAAM;oBAAE,OAAO;gBAChC,SAAS,IAAI,CAAC,CAAC;gBACf,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAClB,IAAI,OAAO,CAAC,CAAC,CAAE,CAAC,MAAM,KAAK,QAAQ;oBAAE,OAAO,GAAG,IAAI,CAAC,CAAC,iCAAiC;YACxF,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAE3B,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAC3E,CAAC;CACF"}

package/node_modules/@openrig/daemon/dist/domain/topology/remote-up-leaf.d.ts

@@ -0,0 +1,29 @@
+import type { HttpHostEntry } from "../hosts/hosts-registry-reader.js";
+export interface RemoteUpLeafDeps {
+    /** Injected for tests; defaults to global fetch. */
+    fetchImpl?: typeof fetch;
+    env?: Record<string, string | undefined>;
+    readFile?: (path: string) => string;
+    /** Bounded remote-up deadline (rev1-r2 R2-B1). Defaults to the
+     *  long-running rig-up budget — remote bootstrap legitimately runs
+     *  minutes, but never forever. Passed EXPLICITLY to the shared core
+     *  (the deadline class is this call-site's decision, per the arch
+     *  required-argument sharpening). */
+    timeoutMs?: number;
+}
+/** Matches the CLI's LONG_RUNNING_UP_TIMEOUT_MS for standalone remote ups. */
+export declare const REMOTE_UP_TIMEOUT_MS = 120000;
+export interface RemoteUpBody {
+    sourceRef: string;
+    autoApprove?: boolean;
+}
+/** POST the placed entry to the remote daemon's shipped /api/up. Returns the
+ *  launcher's normalized {ok, error?} shape; the remote daemon's own error
+ *  text rides through verbatim where available. Never hangs: the shared
+ *  core holds ONE deadline through request AND body parse (the G-R2B1-1
+ *  class is structurally closed there). */
+export declare function remoteUpLeaf(body: RemoteUpBody, host: HttpHostEntry, deps?: RemoteUpLeafDeps): Promise<{
+    ok: boolean;
+    error?: string;
+}>;
+//# sourceMappingURL=remote-up-leaf.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/topology/remote-up-leaf.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-up-leaf.d.ts","sourceRoot":"","sources":["../../../src/domain/topology/remote-up-leaf.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAGvE,MAAM,WAAW,gBAAgB;IAC/B,oDAAoD;IACpD,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IACpC;;;;yCAIqC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,8EAA8E;AAC9E,eAAO,MAAM,oBAAoB,SAAU,CAAC;AAE5C,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED;;;;2CAI2C;AAC3C,wBAAsB,YAAY,CAChC,IAAI,EAAE,YAAY,EAClB,IAAI,EAAE,aAAa,EACnB,IAAI,GAAE,gBAAqB,GAC1B,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAsC1C"}

package/node_modules/@openrig/daemon/dist/domain/topology/remote-up-leaf.js

@@ -0,0 +1,60 @@
+// OPR.0.4.4.11 — the daemon-side remote single-rig leaf (FR-4).
+//
+// A host-placed topology entry launches by POSTing the SHIPPED remote-up
+// surface: POST {host.url}/api/up with the same body shape the CLI's
+// --host path sends. Since OPR.0.4.4.15 this is a THIN CONSUMER of the
+// shared daemon→daemon transport core (domain/hosts/remote-daemon-http.ts
+// — arch cell 1: ONE copy of the security-adjacent bearer/bounded-abort/
+// classification code for the whole P3/P4 family). This module keeps its
+// shipped error-string surface byte-for-byte; only the transport plumbing
+// moved. The failure classes remain the EXISTING ones ([permission-gate] /
+// [remote-command-failed] / [remote-daemon-unreachable]) — no new taxonomy
+// (FR-4 negative AC).
+import { remoteJsonRequest } from "../hosts/remote-daemon-http.js";
+/** Matches the CLI's LONG_RUNNING_UP_TIMEOUT_MS for standalone remote ups. */
+export const REMOTE_UP_TIMEOUT_MS = 120_000;
+/** POST the placed entry to the remote daemon's shipped /api/up. Returns the
+ *  launcher's normalized {ok, error?} shape; the remote daemon's own error
+ *  text rides through verbatim where available. Never hangs: the shared
+ *  core holds ONE deadline through request AND body parse (the G-R2B1-1
+ *  class is structurally closed there). */
+export async function remoteUpLeaf(body, host, deps = {}) {
+    const timeoutMs = deps.timeoutMs ?? REMOTE_UP_TIMEOUT_MS;
+    const url = `${host.url.replace(/\/$/, "")}/api/up`;
+    const res = await remoteJsonRequest(host, "/api/up", {
+        method: "POST",
+        body,
+        timeoutMs,
+        fetchImpl: deps.fetchImpl,
+        env: deps.env,
+        readFile: deps.readFile,
+    });
+    if (res.ok)
+        return { ok: true };
+    switch (res.kind) {
+        case "bearer":
+            return { ok: false, error: `[permission-gate] ${res.detail}` };
+        case "timeout":
+            // R2-B1 / G-R2B1-1: a stalled remote /api/up — before OR after
+            // headers — is a STRUCTURED per-entry failure, never a hung walk.
+            return res.phase === "body"
+                ? {
+                    ok: false,
+                    error: `[remote-daemon-unreachable] POST ${url} timed out after ${timeoutMs}ms for host ${host.id}: response headers arrived (HTTP ${res.status}) but the error body never completed`,
+                }
+                : {
+                    ok: false,
+                    error: `[remote-daemon-unreachable] POST ${url} timed out after ${timeoutMs}ms for host ${host.id}: the remote daemon never settled the request within the rig-up budget`,
+                };
+        case "network":
+            return { ok: false, error: `[remote-daemon-unreachable] POST ${url} failed for host ${host.id}: ${res.detail}` };
+        case "http": {
+            // Same classification vocabulary as the CLI transport (classifyHttpFailedStep).
+            const status = res.status ?? 0;
+            const cls = status === 401 || status === 403 ? "permission-gate" : status >= 400 && status < 600 ? "remote-command-failed" : "remote-daemon-unreachable";
+            const detail = res.detail ? `HTTP ${res.status}: ${res.detail}` : `HTTP ${res.status}`;
+            return { ok: false, error: `[${cls}] remote up on host ${host.id} failed: ${detail}` };
+        }
+    }
+}
+//# sourceMappingURL=remote-up-leaf.js.map

package/node_modules/@openrig/daemon/dist/domain/topology/remote-up-leaf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-up-leaf.js","sourceRoot":"","sources":["../../../src/domain/topology/remote-up-leaf.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,EAAE;AACF,yEAAyE;AACzE,qEAAqE;AACrE,uEAAuE;AACvE,0EAA0E;AAC1E,yEAAyE;AACzE,yEAAyE;AACzE,0EAA0E;AAC1E,2EAA2E;AAC3E,2EAA2E;AAC3E,sBAAsB;AAGtB,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAenE,8EAA8E;AAC9E,MAAM,CAAC,MAAM,oBAAoB,GAAG,OAAO,CAAC;AAO5C;;;;2CAI2C;AAC3C,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAkB,EAClB,IAAmB,EACnB,OAAyB,EAAE;IAE3B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,oBAAoB,CAAC;IACzD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC;IACpD,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,SAAS,EAAE;QACnD,MAAM,EAAE,MAAM;QACd,IAAI;QACJ,SAAS;QACT,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC,CAAC;IACH,IAAI,GAAG,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAEhC,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,QAAQ;YACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;QACjE,KAAK,SAAS;YACZ,+DAA+D;YAC/D,kEAAkE;YAClE,OAAO,GAAG,CAAC,KAAK,KAAK,MAAM;gBACzB,CAAC,CAAC;oBACE,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,oCAAoC,GAAG,oBAAoB,SAAS,eAAe,IAAI,CAAC,EAAE,oCAAoC,GAAG,CAAC,MAAM,sCAAsC;iBACtL;gBACH,CAAC,CAAC;oBACE,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,oCAAoC,GAAG,oBAAoB,SAAS,eAAe,IAAI,CAAC,EAAE,wEAAwE;iBAC1K,CAAC;QACR,KAAK,SAAS;YACZ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oCAAoC,GAAG,oBAAoB,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;QACnH,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,gFAAgF;YAChF,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC;YAC/B,MAAM,GAAG,GAAG,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,2BAA2B,CAAC;YACzJ,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;YACvF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,GAAG,uBAAuB,IAAI,CAAC,EAAE,YAAY,MAAM,EAAE,EAAE,CAAC;QACzF,CAAC;IACH,CAAC;AACH,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/topology/topology-manifest.d.ts

@@ -0,0 +1,34 @@
+export interface TopologyRigEntry {
+    source: string;
+    host?: string;
+}
+export interface TopologyManifest {
+    rigs: TopologyRigEntry[];
+    /** Normalized: the manifest's cap, or the default 1 (sequential). */
+    concurrency: number;
+}
+export type TopologyManifestResult = {
+    ok: true;
+    manifest: TopologyManifest;
+} | {
+    ok: false;
+    errors: string[];
+};
+/** Validate an already-parsed YAML document as a topology manifest.
+ *  Collects EVERY structural error (per-entry, what/why/fix) rather than
+ *  failing fast — FR-1 reports them all before any launch. */
+export declare function validateTopologyManifest(parsed: unknown, sourcePath: string): TopologyManifestResult;
+/** Load + parse + validate a topology manifest file. Parse failures error AS
+ *  a topology (arch ruling 1: the declared kind binds — no rig-spec
+ *  fall-through). */
+export declare function loadTopologyManifest(path: string): TopologyManifestResult;
+/** Detection sniff (FR-1 + guard G-1/yaml folds): a parsed YAML document is
+ *  topology-SHAPED iff it carries a top-level `rigs:` LIST. A rig spec never
+ *  carries top-level `rigs`, so the sniff is unambiguous. Shape only — full
+ *  validation still runs (and rejects) as a topology afterwards. */
+export declare function hasTopLevelRigsList(parsed: unknown): boolean;
+/** Raw-text form of the sniff for router branches that have not parsed yet
+ *  (the extensionless path-form fallback). Unparseable YAML sniffs false —
+ *  it then flows to the existing non-topology handling unchanged. */
+export declare function yamlTextHasTopLevelRigsList(raw: string): boolean;
+//# sourceMappingURL=topology-manifest.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/topology/topology-manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"topology-manifest.d.ts","sourceRoot":"","sources":["../../../src/domain/topology/topology-manifest.ts"],"names":[],"mappings":"AA0BA,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,gBAAgB,EAAE,CAAC;IACzB,qEAAqE;IACrE,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,sBAAsB,GAC9B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,gBAAgB,CAAA;CAAE,GACxC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAoCpC;;8DAE8D;AAC9D,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,GAAG,sBAAsB,CA+FpG;AAED;;qBAEqB;AACrB,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,sBAAsB,CAsBzE;AAED;;;oEAGoE;AACpE,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAG5D;AAED;;qEAEqE;AACrE,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAMhE"}