@openrig/cli 0.5.0 → 0.5.2

package/node_modules/@openrig/daemon/dist/routes/health-summary.d.ts

@@ -0,0 +1,9 @@
+import { Hono } from "hono";
+import type Database from "better-sqlite3";
+import type { RigRepository } from "../domain/rig-repository.js";
+export interface HealthSummaryRoutesDeps {
+    db: Database.Database;
+    rigRepo: RigRepository;
+}
+export declare function healthSummaryRoutes(): Hono;
+//# sourceMappingURL=health-summary.d.ts.map

package/node_modules/@openrig/daemon/dist/routes/health-summary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health-summary.d.ts","sourceRoot":"","sources":["../../src/routes/health-summary.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAOjE,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,OAAO,EAAE,aAAa,CAAC;CACxB;AAED,wBAAgB,mBAAmB,IAAI,IAAI,CA6B1C"}

package/node_modules/@openrig/daemon/dist/routes/health-summary.js

@@ -0,0 +1,44 @@
+// Operator Surface Reconciliation v0 — compact health-summary routes.
+//
+// Endpoints (item 1F):
+//   GET /api/health-summary/nodes    cross-rig roll-up of node sessionStatus + lifecycle
+//   GET /api/health-summary/context  cross-rig roll-up of context-usage urgency + freshness
+//   GET /api/health-summary/version  the daemon's own running version (OPR.0.4.1.14)
+//
+// The nodes/context routes wrap existing daemon-side aggregation helpers; the
+// steering surface's compact gates consume them. The version route is a
+// dependency-free read of the daemon's own package.json, so the dashboard Field
+// Environment shows the REAL running daemon version (never the UI bundle
+// version, which would silently drift on a version mismatch).
+import { Hono } from "hono";
+import { computeContextHealthSummary, computeNodeHealthSummary, } from "../domain/steering/health-summary.js";
+import { getDaemonVersion } from "../domain/daemon-version.js";
+export function healthSummaryRoutes() {
+    const app = new Hono();
+    function getDeps(c) {
+        const rigRepo = c.get("rigRepo");
+        if (!rigRepo)
+            return null;
+        return { db: rigRepo.db, rigRepo };
+    }
+    app.get("/nodes", (c) => {
+        const deps = getDeps(c);
+        if (!deps)
+            return c.json({ error: "health_summary_unavailable" }, 503);
+        return c.json(computeNodeHealthSummary(deps));
+    });
+    app.get("/context", (c) => {
+        const deps = getDeps(c);
+        if (!deps)
+            return c.json({ error: "health_summary_unavailable" }, 503);
+        return c.json(computeContextHealthSummary({ db: deps.db }));
+    });
+    // No deps: the running version is a read of the daemon's own package.json.
+    // getDaemonVersion returns "unknown" on any read failure, so this route is
+    // always 200 and the client renders the value (or its own honest fallback).
+    app.get("/version", (c) => {
+        return c.json({ version: getDaemonVersion() });
+    });
+    return app;
+}
+//# sourceMappingURL=health-summary.js.map

package/node_modules/@openrig/daemon/dist/routes/health-summary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health-summary.js","sourceRoot":"","sources":["../../src/routes/health-summary.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,EAAE;AACF,uBAAuB;AACvB,yFAAyF;AACzF,4FAA4F;AAC5F,qFAAqF;AACrF,EAAE;AACF,8EAA8E;AAC9E,wEAAwE;AACxE,gFAAgF;AAChF,yEAAyE;AACzE,8DAA8D;AAE9D,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B,OAAO,EACL,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAO/D,MAAM,UAAU,mBAAmB;IACjC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,SAAS,OAAO,CAAC,CAAoC;QACnD,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,SAAkB,CAA8B,CAAC;QACvE,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC;IACrC,CAAC;IAED,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;QACtB,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,EAAE,GAAG,CAAC,CAAC;QACvE,OAAO,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE;QACxB,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,EAAE,GAAG,CAAC,CAAC;QACvE,OAAO,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,2EAA2E;IAC3E,2EAA2E;IAC3E,4EAA4E;IAC5E,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE;QACxB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/node_modules/@openrig/daemon/dist/routes/hosts.d.ts

@@ -0,0 +1,5 @@
+import { Hono } from "hono";
+export declare function hostsRoutes(opts?: {
+    bearerToken?: string | null;
+}): Hono;
+//# sourceMappingURL=hosts.d.ts.map

package/node_modules/@openrig/daemon/dist/routes/hosts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosts.d.ts","sourceRoot":"","sources":["../../src/routes/hosts.ts"],"names":[],"mappings":"AAoCA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AA6C5B,wBAAgB,WAAW,CAAC,IAAI,CAAC,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,IAAI,CA6SxE"}

package/node_modules/@openrig/daemon/dist/routes/hosts.js

@@ -0,0 +1,346 @@
+// OPR.0.4.6.MH1 FR-5/FR-6 — THE narrow named host add/pair route family
+// (arch B1 ruling, pin P1: host add + the pair handshake ONLY — no
+// generic registry-write route exists, remove/edit stay out of scope;
+// the daemon reader module stays read-only-forever).
+//
+// Surface map:
+//   POST /api/hosts/pair-request      TARGET side, OPEN (pre-token
+//                                     bootstrap — a pairing client has no
+//                                     bearer yet by definition). Mints a
+//                                     pairing code + the ONE human
+//                                     approval moment (arch Ruling 2: a
+//                                     human-routed queue item — the
+//                                     shipped human-gate machinery IS the
+//                                     approval surface).
+//   GET  /api/hosts/pair-request/:id  TARGET side, OPEN. Polls the
+//                                     approval item; hands the bearer
+//                                     over ONCE on approval (single-shot,
+//                                     then the pairing dies).
+//   POST /api/hosts/add               LOCAL side, WRITE (bearer-gated
+//                                     like every other daemon write).
+//                                     The dashboard's manual-add seam —
+//                                     delegates to the parity-pinned
+//                                     writer twin (P3); never accepts
+//                                     secret VALUES (P2).
+//   POST /api/hosts/pair              LOCAL side, WRITE. The browser's
+//                                     pair-client seam (B1: the UI's
+//                                     write seam is its local daemon).
+//   GET  /api/hosts/pair/:id          LOCAL side, WRITE-family. Stateless
+//                                     pull-through poll of the target; on
+//                                     approval persists token file +
+//                                     registry entry via the writer twin.
+//
+// Deny/timeout persists NOTHING: pairing state is an in-memory map (a
+// daemon restart kills pending pairs), the token file is deleted if the
+// registry write fails, and the approval item simply goes stale.
+import { Hono } from "hono";
+import { mkdirSync, writeFileSync, rmSync } from "node:fs";
+import { join } from "node:path";
+import { randomUUID, randomInt } from "node:crypto";
+import { connect } from "node:net";
+import { authBearerTokenMiddleware } from "../middleware/auth-bearer-token.js";
+import { getOpenRigHome } from "../openrig-compat.js";
+import { addHostEntry } from "../domain/hosts/hosts-registry-writer.js";
+import { defaultHostRegistryPath, loadHostRegistry, validateHostRegistry } from "../domain/hosts/hosts-registry-reader.js";
+import { existsSync } from "node:fs";
+const PAIR_TTL_MS = 10 * 60 * 1000;
+const PAIR_HTTP_TIMEOUT_MS = 10_000;
+// The human seat that receives pairing approvals (the shipped human-seat
+// session grammar; renders in the target's attention/For-You surface).
+const PAIR_APPROVAL_SEAT = "human-operator@kernel";
+const PAIR_SOURCE_SESSION = "host-pair@kernel";
+// P2 — hosts.yaml carries bearer POINTERS only; any secret-value-shaped
+// field on the add body is rejected loudly BEFORE any write.
+const SECRET_SHAPED_FIELDS = ["bearer_value", "bearer_token", "token", "secret", "password"];
+function deriveHostId(url) {
+    const raw = url.hostname.toLowerCase().replace(/[^a-z0-9.-]/g, "-").replace(/\./g, "-");
+    return raw.replace(/^-+|-+$/g, "") || "paired-host";
+}
+export function hostsRoutes(opts) {
+    const router = new Hono();
+    const bearerToken = opts?.bearerToken ?? null;
+    const issued = new Map();
+    const clientPairs = new Map();
+    // Writes are gated exactly like mission-control writes: enforced when a
+    // bearer is configured, pass-through on loopback/tailnet-trust daemons.
+    const requireAuth = authBearerTokenMiddleware({ expectedToken: bearerToken });
+    router.use("/add", requireAuth);
+    router.use("/pair", requireAuth);
+    router.use("/pair/:pairId", requireAuth);
+    function getRepo(c) {
+        return c.get("queueRepo");
+    }
+    // ---------------------------------------------------------------------
+    // Pointers-only READ for the dashboard host-config component (FR-5).
+    // Not a write surface (P1's cap is the write family); rows mirror the
+    // CLI's `rig host ls --json` additive shape: entry fields (bearer
+    // POINTERS by construction) + `selected` + a bounded coarse `status`.
+    // ---------------------------------------------------------------------
+    function probeHost(host, timeoutMs = 1500) {
+        try {
+            let target;
+            let port;
+            if (host.transport === "ssh") {
+                target = host.target;
+                port = 22;
+            }
+            else {
+                const u = new URL(host.url);
+                target = u.hostname;
+                port = u.port ? Number(u.port) : u.protocol === "https:" ? 443 : 80;
+            }
+            return new Promise((resolve) => {
+                const sock = connect({ host: target, port, timeout: timeoutMs });
+                sock.on("connect", () => { sock.destroy(); resolve("reachable"); });
+                sock.on("timeout", () => { sock.destroy(); resolve("unreachable"); });
+                sock.on("error", () => { sock.destroy(); resolve("unreachable"); });
+            });
+        }
+        catch {
+            return Promise.resolve("unknown");
+        }
+    }
+    router.get("/", async (c) => {
+        const store = c.get("settingsStore");
+        const selected = store?.resolveOne("host.selected").value ?? "local";
+        const ownName = store?.resolveOne("host.name").value ?? "localhost";
+        const registryPath = defaultHostRegistryPath();
+        if (!existsSync(registryPath)) {
+            return c.json({ ownName, selected, hosts: [] });
+        }
+        const loaded = loadHostRegistry(registryPath);
+        if (!loaded.ok) {
+            return c.json({ error: "invalid_registry", message: loaded.error }, 500);
+        }
+        const statuses = await Promise.all(loaded.registry.hosts.map((h) => probeHost(h)));
+        return c.json({
+            ownName,
+            selected,
+            hosts: loaded.registry.hosts.map((h, i) => ({ ...h, selected: h.id === selected, status: statuses[i] })),
+        });
+    });
+    // ---------------------------------------------------------------------
+    // TARGET side: issuance.
+    // ---------------------------------------------------------------------
+    router.post("/pair-request", async (c) => {
+        if (!bearerToken) {
+            // A tokenless daemon has nothing to issue. Loud + structured; the
+            // fix is named (no silent success, no token minting machinery —
+            // the one-static-bearer model is the shipped auth surface).
+            return c.json({
+                error: "pair_target_no_bearer",
+                message: "this daemon runs without OPENRIG_AUTH_BEARER_TOKEN; pairing has no credential to issue. Set OPENRIG_AUTH_BEARER_TOKEN on the target daemon and retry.",
+            }, 409);
+        }
+        const body = (await c.req.json().catch(() => ({})));
+        const requester = (body.requester ?? "").trim() || "unknown requester";
+        const pairId = randomUUID();
+        const code = String(randomInt(100000, 1000000));
+        let qitemId;
+        try {
+            const item = await getRepo(c).create({
+                sourceSession: PAIR_SOURCE_SESSION,
+                destinationSession: PAIR_APPROVAL_SEAT,
+                tier: "human-gate",
+                summary: `Host pairing request ${code} from ${requester}`,
+                evidenceRef: `pair-request:${pairId}`,
+                body: [
+                    `A remote operator (${requester}) is asking to pair with this host.`,
+                    `Pairing code: ${code} — confirm it matches the code shown on the requesting side.`,
+                    `APPROVE: rig queue update <this-qitem-id> --state done --closure-reason no-follow-on`,
+                    `DENY:    rig queue update <this-qitem-id> --state denied`,
+                    `Approval hands this daemon's bearer token to the requester (full API access).`,
+                    `This request expires ${Math.round(PAIR_TTL_MS / 60000)} minutes after creation; expiry persists nothing.`,
+                ].join("\n"),
+            });
+            qitemId = item.qitemId;
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            return c.json({ error: "pair_approval_item_failed", message }, 500);
+        }
+        issued.set(pairId, { code, qitemId, requester, createdAt: Date.now() });
+        return c.json({ pairId, code, approvalQitemId: qitemId });
+    });
+    router.get("/pair-request/:pairId", (c) => {
+        const pairId = c.req.param("pairId");
+        const rec = issued.get(pairId);
+        if (!rec)
+            return c.json({ error: "pair_unknown", message: "unknown or already-consumed pairing request" }, 404);
+        if (Date.now() - rec.createdAt > PAIR_TTL_MS) {
+            issued.delete(pairId);
+            return c.json({ status: "expired" });
+        }
+        const item = getRepo(c).getById(rec.qitemId);
+        const state = item?.state ?? "pending";
+        if (state === "done") {
+            // Single-shot handover: the first approved read consumes the pairing.
+            issued.delete(pairId);
+            return c.json({ status: "approved", token: bearerToken });
+        }
+        if (state === "denied" || state === "canceled" || state === "failed") {
+            issued.delete(pairId);
+            return c.json({ status: "denied" });
+        }
+        return c.json({ status: "pending", code: rec.code });
+    });
+    // ---------------------------------------------------------------------
+    // LOCAL side: the dashboard's add + pair-client seams.
+    // ---------------------------------------------------------------------
+    router.post("/add", async (c) => {
+        const body = (await c.req.json().catch(() => null));
+        if (!body || typeof body !== "object") {
+            return c.json({ error: "invalid_host_entry", message: "body must be a host entry object" }, 400);
+        }
+        const secretField = SECRET_SHAPED_FIELDS.find((f) => f in body);
+        if (secretField) {
+            return c.json({
+                error: "no_secret_values",
+                message: `field '${secretField}' looks like a secret VALUE — hosts.yaml carries bearer POINTERS only (bearer_env / bearer_file). Nothing was written.`,
+            }, 400);
+        }
+        const res = addHostEntry(body);
+        if (!res.ok) {
+            return c.json({ error: "invalid_host_entry", message: res.error }, 400);
+        }
+        return c.json({ ok: true, entry: res.entry, path: res.path });
+    });
+    router.post("/pair", async (c) => {
+        const body = (await c.req.json().catch(() => ({})));
+        const rawUrl = (body.url ?? "").trim();
+        if (!rawUrl)
+            return c.json({ error: "pair_url_required", message: "body.url is required (the target daemon's address)" }, 400);
+        let target;
+        try {
+            target = new URL(/^https?:\/\//.test(rawUrl) ? rawUrl : `http://${rawUrl}`);
+        }
+        catch {
+            return c.json({ error: "pair_url_invalid", message: `'${rawUrl}' is not a usable address` }, 400);
+        }
+        const targetBase = target.origin;
+        // B1 fixback (guard code-review 2026-07-07): PREFLIGHT before the
+        // target is contacted. The candidate entry runs the SAME validation
+        // contract the add will use (duplicate/reserved ids, invalid existing
+        // registry fail here — before any approval item is minted on the
+        // target), and a pre-existing token file is pre-existing CREDENTIAL
+        // STATE: rejected, never overwritten, never deleted by this pairing.
+        const hostId = (body.id ?? "").trim() || deriveHostId(target);
+        const tokenPath = join(getOpenRigHome(), "secrets", `host-${hostId}.token`);
+        {
+            const registryPath = defaultHostRegistryPath();
+            let existing = [];
+            if (existsSync(registryPath)) {
+                const loaded = loadHostRegistry(registryPath);
+                if (!loaded.ok) {
+                    return c.json({ error: "invalid_registry", message: loaded.error }, 400);
+                }
+                existing = loaded.registry.hosts;
+            }
+            const preflight = validateHostRegistry({ hosts: [...existing, { id: hostId, transport: "http", url: targetBase, bearer_file: tokenPath }] }, registryPath);
+            if (!preflight.ok) {
+                return c.json({ error: "invalid_host_entry", message: preflight.error }, 400);
+            }
+            if (existsSync(tokenPath)) {
+                return c.json({
+                    error: "pair_token_path_exists",
+                    message: `a credential file already exists at ${tokenPath} — pre-existing credential state is never overwritten. Pair with a different id, or remove the file if it is stale.`,
+                }, 409);
+            }
+        }
+        let remote;
+        let status;
+        try {
+            const res = await fetch(`${targetBase}/api/hosts/pair-request`, {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify({ requester: body.requester ?? `dashboard@${getOpenRigHome()}` }),
+                signal: AbortSignal.timeout(PAIR_HTTP_TIMEOUT_MS),
+            });
+            status = res.status;
+            remote = (await res.json().catch(() => ({})));
+        }
+        catch (err) {
+            return c.json({ error: "pair_target_unreachable", message: `could not reach ${targetBase}: ${err.message}` }, 502);
+        }
+        if (status !== 200 || !remote.pairId || !remote.code) {
+            return c.json({
+                error: remote.error ?? "pair_request_failed",
+                message: remote.message ?? `target responded HTTP ${status}`,
+            }, 502);
+        }
+        const localPairId = randomUUID();
+        clientPairs.set(localPairId, {
+            url: targetBase,
+            remotePairId: remote.pairId,
+            code: remote.code,
+            hostId,
+            createdAt: Date.now(),
+        });
+        return c.json({ pairId: localPairId, code: remote.code, target: targetBase });
+    });
+    router.get("/pair/:pairId", async (c) => {
+        const rec = clientPairs.get(c.req.param("pairId"));
+        if (!rec)
+            return c.json({ error: "pair_unknown", message: "unknown or already-completed pairing" }, 404);
+        if (Date.now() - rec.createdAt > PAIR_TTL_MS) {
+            clientPairs.delete(c.req.param("pairId"));
+            return c.json({ status: "expired" });
+        }
+        let remote;
+        try {
+            const res = await fetch(`${rec.url}/api/hosts/pair-request/${rec.remotePairId}`, {
+                signal: AbortSignal.timeout(PAIR_HTTP_TIMEOUT_MS),
+            });
+            remote = (await res.json().catch(() => ({})));
+        }
+        catch (err) {
+            return c.json({ error: "pair_target_unreachable", message: `could not reach ${rec.url}: ${err.message}` }, 502);
+        }
+        if (remote.status === "pending" || remote.status === undefined) {
+            return c.json({ status: "pending", code: rec.code });
+        }
+        if (remote.status !== "approved" || !remote.token) {
+            clientPairs.delete(c.req.param("pairId"));
+            return c.json({ status: remote.status === "expired" ? "expired" : "denied" });
+        }
+        // Approved: persist the token via EXCLUSIVE CREATE (open flag "wx",
+        // 0600 — rev1-r2 B3: check-then-rename had a window where a
+        // concurrent same-id pair could clobber the winner's file and then
+        // delete it on its own add failure; "wx" is atomic at the
+        // filesystem, so creation SUCCESS is the proof of ownership the
+        // cleanup relies on), then the registry entry through the ONE write
+        // contract. addHostEntry re-validates authoritatively.
+        const secretsDir = join(getOpenRigHome(), "secrets");
+        const tokenPath = join(secretsDir, `host-${rec.hostId}.token`);
+        try {
+            mkdirSync(secretsDir, { recursive: true, mode: 0o700 });
+            writeFileSync(tokenPath, `${remote.token}\n`, { mode: 0o600, flag: "wx" });
+        }
+        catch (err) {
+            if (err.code === "EEXIST") {
+                clientPairs.delete(c.req.param("pairId"));
+                return c.json({
+                    error: "pair_token_path_exists",
+                    message: `a credential file appeared at ${tokenPath} during pairing — refusing to overwrite it; nothing was persisted by this pairing.`,
+                }, 409);
+            }
+            return c.json({ error: "pair_token_write_failed", message: err.message }, 500);
+        }
+        const added = addHostEntry({
+            id: rec.hostId,
+            transport: "http",
+            url: rec.url,
+            bearer_file: tokenPath,
+            notes: `paired ${new Date().toISOString().slice(0, 10)}`,
+        });
+        if (!added.ok) {
+            rmSync(tokenPath, { force: true });
+            clientPairs.delete(c.req.param("pairId"));
+            return c.json({ error: "invalid_host_entry", message: added.error }, 400);
+        }
+        clientPairs.delete(c.req.param("pairId"));
+        return c.json({ status: "approved", entry: added.entry });
+    });
+    return router;
+}
+//# sourceMappingURL=hosts.js.map

package/node_modules/@openrig/daemon/dist/routes/hosts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosts.js","sourceRoot":"","sources":["../../src/routes/hosts.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,mEAAmE;AACnE,sEAAsE;AACtE,qDAAqD;AACrD,EAAE;AACF,eAAe;AACf,mEAAmE;AACnE,0EAA0E;AAC1E,yEAAyE;AACzE,mEAAmE;AACnE,wEAAwE;AACxE,oEAAoE;AACpE,0EAA0E;AAC1E,yDAAyD;AACzD,mEAAmE;AACnE,sEAAsE;AACtE,0EAA0E;AAC1E,8DAA8D;AAC9D,sEAAsE;AACtE,sEAAsE;AACtE,wEAAwE;AACxE,qEAAqE;AACrE,sEAAsE;AACtE,0DAA0D;AAC1D,uEAAuE;AACvE,qEAAqE;AACrE,uEAAuE;AACvE,0EAA0E;AAC1E,0EAA0E;AAC1E,qEAAqE;AACrE,0EAA0E;AAC1E,EAAE;AACF,sEAAsE;AACtE,wEAAwE;AACxE,iEAAiE;AAEjE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AACnC,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,0CAA0C,CAAC;AACxE,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,oBAAoB,EAAkB,MAAM,0CAA0C,CAAC;AAG3I,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,MAAM,WAAW,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACnC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAEpC,yEAAyE;AACzE,uEAAuE;AACvE,MAAM,kBAAkB,GAAG,uBAAuB,CAAC;AACnD,MAAM,mBAAmB,GAAG,kBAAkB,CAAC;AAiB/C,wEAAwE;AACxE,6DAA6D;AAC7D,MAAM,oBAAoB,GAAG,CAAC,cAAc,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;AAE7F,SAAS,YAAY,CAAC,GAAQ;IAC5B,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACxF,OAAO,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,aAAa,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAsC;IAChE,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;IAC1B,MAAM,WAAW,GAAG,IAAI,EAAE,WAAW,IAAI,IAAI,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC7C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAsB,CAAC;IAElD,wEAAwE;IACxE,wEAAwE;IACxE,MAAM,WAAW,GAAG,yBAAyB,CAAC,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC;IAC9E,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAChC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACjC,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IAEzC,SAAS,OAAO,CAAC,CAAoC;QACnD,OAAO,CAAC,CAAC,GAAG,CAAC,WAAoB,CAAoB,CAAC;IACxD,CAAC;IAED,wEAAwE;IACxE,qEAAqE;IACrE,sEAAsE;IACtE,kEAAkE;IAClE,sEAAsE;IACtE,wEAAwE;IAExE,SAAS,SAAS,CAAC,IAAe,EAAE,SAAS,GAAG,IAAI;QAClD,IAAI,CAAC;YACH,IAAI,MAAc,CAAC;YACnB,IAAI,IAAY,CAAC;YACjB,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;gBAC7B,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;gBACrB,IAAI,GAAG,EAAE,CAAC;YACZ,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC5B,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAC;gBACpB,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,CAAC;YACD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;gBAC7B,MAAM,IAAI,GAAG,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;gBACjE,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACpE,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtE,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACtE,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1B,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,eAAwB,CAA8B,CAAC;QAC3E,MAAM,QAAQ,GAAI,KAAK,EAAE,UAAU,CAAC,eAAe,CAAC,CAAC,KAA4B,IAAI,OAAO,CAAC;QAC7F,MAAM,OAAO,GAAI,KAAK,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC,KAA4B,IAAI,WAAW,CAAC;QAC5F,MAAM,YAAY,GAAG,uBAAuB,EAAE,CAAC;QAC/C,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnF,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,OAAO;YACP,QAAQ;YACR,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,KAAK,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;SACzG,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,wEAAwE;IACxE,yBAAyB;IACzB,wEAAwE;IAExE,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,kEAAkE;YAClE,gEAAgE;YAChE,4DAA4D;YAC5D,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,KAAK,EAAE,uBAAuB;gBAC9B,OAAO,EAAE,uJAAuJ;aACjK,EAAE,GAAG,CAAC,CAAC;QACV,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAA0B,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAA2B,CAAC;QACtG,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,mBAAmB,CAAC;QACvE,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAEhD,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;gBACnC,aAAa,EAAE,mBAAmB;gBAClC,kBAAkB,EAAE,kBAAkB;gBACtC,IAAI,EAAE,YAAY;gBAClB,OAAO,EAAE,wBAAwB,IAAI,SAAS,SAAS,EAAE;gBACzD,WAAW,EAAE,gBAAgB,MAAM,EAAE;gBACrC,IAAI,EAAE;oBACJ,sBAAsB,SAAS,qCAAqC;oBACpE,iBAAiB,IAAI,8DAA8D;oBACnF,sFAAsF;oBACtF,0DAA0D;oBAC1D,+EAA+E;oBAC/E,wBAAwB,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,KAAK,CAAC,mDAAmD;iBAC3G,CAAC,IAAI,CAAC,IAAI,CAAC;aACb,CAAC,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACxE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,uBAAuB,EAAE,CAAC,CAAC,EAAE,EAAE;QACxC,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,CAAC,GAAG;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,6CAA6C,EAAE,EAAE,GAAG,CAAC,CAAC;QAEhH,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,SAAS,GAAG,WAAW,EAAE,CAAC;YAC7C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACtB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,SAAS,CAAC;QACvC,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YACrB,sEAAsE;YACtE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACtB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YACrE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACtB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,wEAAwE;IACxE,uDAAuD;IACvD,wEAAwE;IAExE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC9B,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAA2B,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7E,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,OAAO,EAAE,kCAAkC,EAAE,EAAE,GAAG,CAAC,CAAC;QACnG,CAAC;QACD,MAAM,WAAW,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QAChE,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,KAAK,EAAE,kBAAkB;gBACzB,OAAO,EAAE,UAAU,WAAW,wHAAwH;aACvJ,EAAE,GAAG,CAAC,CAAC;QACV,CAAC;QACD,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC/B,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAqD,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAsD,CAAC;QAC5J,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACvC,IAAI,CAAC,MAAM;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,OAAO,EAAE,oDAAoD,EAAE,EAAE,GAAG,CAAC,CAAC;QAC/H,IAAI,MAAW,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,MAAM,EAAE,CAAC,CAAC;QAC9E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,IAAI,MAAM,2BAA2B,EAAE,EAAE,GAAG,CAAC,CAAC;QACpG,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;QAEjC,kEAAkE;QAClE,oEAAoE;QACpE,sEAAsE;QACtE,iEAAiE;QACjE,oEAAoE;QACpE,qEAAqE;QACrE,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,QAAQ,MAAM,QAAQ,CAAC,CAAC;QAC5E,CAAC;YACC,MAAM,YAAY,GAAG,uBAAuB,EAAE,CAAC;YAC/C,IAAI,QAAQ,GAAgB,EAAE,CAAC;YAC/B,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC7B,MAAM,MAAM,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;gBAC9C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;oBACf,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;gBAC3E,CAAC;gBACD,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YACnC,CAAC;YACD,MAAM,SAAS,GAAG,oBAAoB,CACpC,EAAE,KAAK,EAAE,CAAC,GAAG,QAAQ,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,EAAE,EACpG,YAAY,CACb,CAAC;YACF,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;gBAClB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,OAAO,EAAE,SAAS,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;YAChF,CAAC;YACD,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC1B,OAAO,CAAC,CAAC,IAAI,CAAC;oBACZ,KAAK,EAAE,wBAAwB;oBAC/B,OAAO,EAAE,uCAAuC,SAAS,qHAAqH;iBAC/K,EAAE,GAAG,CAAC,CAAC;YACV,CAAC;QACH,CAAC;QAED,IAAI,MAA4E,CAAC;QACjF,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,UAAU,yBAAyB,EAAE;gBAC9D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,aAAa,cAAc,EAAE,EAAE,EAAE,CAAC;gBACtF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,oBAAoB,CAAC;aAClD,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;YACpB,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAkB,CAAC;QACjE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,OAAO,EAAE,mBAAmB,UAAU,KAAM,GAAa,CAAC,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QAChI,CAAC;QACD,IAAI,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACrD,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,qBAAqB;gBAC5C,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,yBAAyB,MAAM,EAAE;aAC7D,EAAE,GAAG,CAAC,CAAC;QACV,CAAC;QAED,MAAM,WAAW,GAAG,UAAU,EAAE,CAAC;QACjC,WAAW,CAAC,GAAG,CAAC,WAAW,EAAE;YAC3B,GAAG,EAAE,UAAU;YACf,YAAY,EAAE,MAAM,CAAC,MAAM;YAC3B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM;YACN,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtC,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QACnD,IAAI,CAAC,GAAG;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,sCAAsC,EAAE,EAAE,GAAG,CAAC,CAAC;QACzG,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,SAAS,GAAG,WAAW,EAAE,CAAC;YAC7C,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACvC,CAAC;QAED,IAAI,MAA2C,CAAC;QAChD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,CAAC,GAAG,2BAA2B,GAAG,CAAC,YAAY,EAAE,EAAE;gBAC/E,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,oBAAoB,CAAC;aAClD,CAAC,CAAC;YACH,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAkB,CAAC;QACjE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,OAAO,EAAE,mBAAmB,GAAG,CAAC,GAAG,KAAM,GAAa,CAAC,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7H,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAClD,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAChF,CAAC;QAED,oEAAoE;QACpE,4DAA4D;QAC5D,mEAAmE;QACnE,0DAA0D;QAC1D,gEAAgE;QAChE,oEAAoE;QACpE,uDAAuD;QACvD,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,EAAE,EAAE,SAAS,CAAC,CAAC;QACrD,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,QAAQ,GAAG,CAAC,MAAM,QAAQ,CAAC,CAAC;QAC/D,IAAI,CAAC;YACH,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACxD,aAAa,CAAC,SAAS,EAAE,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACrD,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAC1C,OAAO,CAAC,CAAC,IAAI,CAAC;oBACZ,KAAK,EAAE,wBAAwB;oBAC/B,OAAO,EAAE,iCAAiC,SAAS,oFAAoF;iBACxI,EAAE,GAAG,CAAC,CAAC;YACV,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,OAAO,EAAG,GAAa,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QAC5F,CAAC;QACD,MAAM,KAAK,GAAG,YAAY,CAAC;YACzB,EAAE,EAAE,GAAG,CAAC,MAAM;YACd,SAAS,EAAE,MAAM;YACjB,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,WAAW,EAAE,SAAS;YACtB,KAAK,EAAE,UAAU,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;SACzD,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACnC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;QAC5E,CAAC;QACD,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC1C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/node_modules/@openrig/daemon/dist/routes/info.d.ts

@@ -0,0 +1,3 @@
+import { Hono } from "hono";
+export declare function infoRoutes(): Hono;
+//# sourceMappingURL=info.d.ts.map

package/node_modules/@openrig/daemon/dist/routes/info.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"info.d.ts","sourceRoot":"","sources":["../../src/routes/info.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAW5B,wBAAgB,UAAU,IAAI,IAAI,CAUjC"}

package/node_modules/@openrig/daemon/dist/routes/info.js

@@ -0,0 +1,20 @@
+import { Hono } from "hono";
+import { getOpenRigInstallRoot } from "../domain/cwd-resolution.js";
+// GET /api/info — daemon-info surface for tactical CLI awareness paths
+// (OPR.0.3.2.22 Bug 3 first consumer: CLI default-cwd extension for
+// path-form `rig up <install-internal-spec>` without --cwd).
+//
+// installRoot is the daemon's on-disk install root (the parent of the
+// daemon's package directory). The CLI uses it to detect when a spec
+// path lives inside the OpenRig install — the case that hits
+// getOpenRigInstallCwdError at preflight without a --cwd override.
+export function infoRoutes() {
+    const app = new Hono();
+    app.get("/", (c) => {
+        return c.json({
+            installRoot: getOpenRigInstallRoot(),
+        });
+    });
+    return app;
+}
+//# sourceMappingURL=info.js.map

package/node_modules/@openrig/daemon/dist/routes/info.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"info.js","sourceRoot":"","sources":["../../src/routes/info.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,uEAAuE;AACvE,oEAAoE;AACpE,6DAA6D;AAC7D,EAAE;AACF,sEAAsE;AACtE,qEAAqE;AACrE,6DAA6D;AAC7D,mEAAmE;AACnE,MAAM,UAAU,UAAU;IACxB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE;QACjB,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,WAAW,EAAE,qBAAqB,EAAE;SACrC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/node_modules/@openrig/daemon/dist/routes/kernel-status.d.ts

@@ -0,0 +1,3 @@
+import { Hono } from "hono";
+export declare const kernelStatusRoutes: Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
+//# sourceMappingURL=kernel-status.d.ts.map

package/node_modules/@openrig/daemon/dist/routes/kernel-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kernel-status.d.ts","sourceRoot":"","sources":["../../src/routes/kernel-status.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B,eAAO,MAAM,kBAAkB,4EAAa,CAAC"}

package/node_modules/@openrig/daemon/dist/routes/kernel-status.js

@@ -0,0 +1,40 @@
+// V0.3.1 slice 05 kernel-rig-as-default — forward-fix #3 architectural.
+//
+// GET /api/kernel/status — read-only observability surface for the
+// background kernel-boot. Pairs with the architectural decoupling in
+// kernel-boot-tracker.ts: healthz binds early; this route lets
+// operators (and CLI's `--wait-for-kernel`) observe kernel agent
+// readiness independently of HTTP health.
+//
+// Returns one of two shapes:
+//
+//   200 { kernel_state, agents[], first_unready_since, variant, detail }
+//     — when the tracker is wired (the standard daemon composition).
+//
+//   503 { error: 'kernel_boot_tracker_unavailable', message: ... }
+//     — when AppDeps was constructed without a tracker (test fixtures
+//       or custom daemon compositions). Clear hint instead of a 500.
+import { Hono } from "hono";
+export const kernelStatusRoutes = new Hono();
+kernelStatusRoutes.get("/status", (c) => {
+    const tracker = c.get("kernelBootTracker");
+    if (!tracker) {
+        return c.json({
+            error: "kernel_boot_tracker_unavailable",
+            message: "Kernel-boot tracker not wired into this daemon. Use --no-kernel or check startup logs for a kernel-boot failure that prevented tracker construction.",
+        }, 503);
+    }
+    const status = tracker.getStatus();
+    return c.json({
+        kernel_state: status.kernelState,
+        agents: status.agents.map((a) => ({
+            session_name: a.sessionName,
+            runtime: a.runtime,
+            startup_status: a.startupStatus,
+        })),
+        first_unready_since: status.firstUnreadySince,
+        variant: status.variant,
+        detail: status.detail,
+    });
+});
+//# sourceMappingURL=kernel-status.js.map

package/node_modules/@openrig/daemon/dist/routes/kernel-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kernel-status.js","sourceRoot":"","sources":["../../src/routes/kernel-status.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,EAAE;AACF,mEAAmE;AACnE,qEAAqE;AACrE,+DAA+D;AAC/D,iEAAiE;AACjE,0CAA0C;AAC1C,EAAE;AACF,6BAA6B;AAC7B,EAAE;AACF,yEAAyE;AACzE,qEAAqE;AACrE,EAAE;AACF,mEAAmE;AACnE,sEAAsE;AACtE,qEAAqE;AAErE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,IAAI,EAAE,CAAC;AAE7C,kBAAkB,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE;IACtC,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,mBAA4B,CAAkC,CAAC;IACrF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,CAAC,IAAI,CACX;YACE,KAAK,EAAE,iCAAiC;YACxC,OAAO,EACL,sJAAsJ;SACzJ,EACD,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IACnC,OAAO,CAAC,CAAC,IAAI,CAAC;QACZ,YAAY,EAAE,MAAM,CAAC,WAAW;QAChC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAChC,YAAY,EAAE,CAAC,CAAC,WAAW;YAC3B,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,cAAc,EAAE,CAAC,CAAC,aAAa;SAChC,CAAC,CAAC;QACH,mBAAmB,EAAE,MAAM,CAAC,iBAAiB;QAC7C,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/node_modules/@openrig/daemon/dist/routes/mission-control.d.ts

@@ -0,0 +1,37 @@
+import { Hono } from "hono";
+/**
+ * Mission Control HTTP routes (PL-005 Phase A). Backs the integrated
+ * Mission Control product UI inside the existing shell.
+ *
+ * Per Phase A R1 (PL-004) SSE route-order lesson: SSE/literal paths
+ * mounted BEFORE bare-param /:view-name catchall.
+ *
+ * Endpoints:
+ *   GET  /api/mission-control/views/:view-name   read one of 7 views
+ *   POST /api/mission-control/action              execute one of 7 verbs
+ *   GET  /api/mission-control/sse                 SSE stream of mission_control.* events
+ *   GET  /api/mission-control/watch               alias of /sse
+ *   GET  /api/mission-control/cli-capabilities    per-rig CLI capability cache
+ *   GET  /api/mission-control/destinations         handoff/route destination candidates
+ *   GET  /api/mission-control/views               list view names
+ */
+export interface MissionControlRoutesOpts {
+    /**
+     * PL-005 Phase B: bearer token enforced on write verbs (POST /action,
+     * POST /notifications/test) when set. When null, the daemon is
+     * loopback-bound and no auth is enforced (the index.ts startup
+     * check guarantees this).
+     */
+    bearerToken?: string | null;
+}
+export interface MissionControlDestination {
+    sessionName: string;
+    label: string;
+    source: "topology" | "queue";
+    rigName?: string | null;
+    logicalId?: string | null;
+    runtime?: string | null;
+    status?: string | null;
+}
+export declare function missionControlRoutes(opts?: MissionControlRoutesOpts): Hono;
+//# sourceMappingURL=mission-control.d.ts.map

package/node_modules/@openrig/daemon/dist/routes/mission-control.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-control.d.ts","sourceRoot":"","sources":["../../src/routes/mission-control.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAgC5B;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,wBAAwB;IACvC;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,yBAAyB;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,wBAAgB,oBAAoB,CAAC,IAAI,CAAC,EAAE,wBAAwB,GAAG,IAAI,CAqc1E"}