@openrig/cli 0.5.16 → 0.6.0

package/node_modules/@openrig/daemon/dist/routes/hosts.js

@@ -1,353 +0,0 @@
-// OPR.0.4.6.MH1 FR-5/FR-6 — THE narrow named host add/pair route family
-// (arch B1 ruling, pin P1: host add + the pair handshake ONLY — no
-// generic registry-write route exists, remove/edit stay out of scope;
-// the daemon reader module stays read-only-forever).
-//
-// Surface map:
-//   POST /api/hosts/pair-request      TARGET side, OPEN (pre-token
-//                                     bootstrap — a pairing client has no
-//                                     bearer yet by definition). Mints a
-//                                     pairing code + the ONE human
-//                                     approval moment (arch Ruling 2: a
-//                                     human-routed queue item — the
-//                                     shipped human-gate machinery IS the
-//                                     approval surface).
-//   GET  /api/hosts/pair-request/:id  TARGET side, OPEN. Polls the
-//                                     approval item; hands the bearer
-//                                     over ONCE on approval (single-shot,
-//                                     then the pairing dies).
-//   POST /api/hosts/add               LOCAL side, WRITE (bearer-gated
-//                                     like every other daemon write).
-//                                     The dashboard's manual-add seam —
-//                                     delegates to the parity-pinned
-//                                     writer twin (P3); never accepts
-//                                     secret VALUES (P2).
-//   POST /api/hosts/pair              LOCAL side, WRITE. The browser's
-//                                     pair-client seam (B1: the UI's
-//                                     write seam is its local daemon).
-//   GET  /api/hosts/pair/:id          LOCAL side, WRITE-family. Stateless
-//                                     pull-through poll of the target; on
-//                                     approval persists token file +
-//                                     registry entry via the writer twin.
-//
-// Deny/timeout persists NOTHING: pairing state is an in-memory map (a
-// daemon restart kills pending pairs), the token file is deleted if the
-// registry write fails, and the approval item simply goes stale.
-import { Hono } from "hono";
-import { mkdirSync, writeFileSync, rmSync } from "node:fs";
-import { join } from "node:path";
-import { randomUUID, randomInt } from "node:crypto";
-import { connect } from "node:net";
-import { authBearerTokenMiddleware } from "../middleware/auth-bearer-token.js";
-import { getOpenRigHome } from "../openrig-compat.js";
-import { addHostEntry } from "../domain/hosts/hosts-registry-writer.js";
-import { defaultHostRegistryPath, loadHostRegistry, validateHostRegistry } from "../domain/hosts/hosts-registry-reader.js";
-import { existsSync } from "node:fs";
-import { loadHumanRegistry } from "../domain/gateway/human-registry.js";
-const PAIR_TTL_MS = 10 * 60 * 1000;
-const PAIR_HTTP_TIMEOUT_MS = 10_000;
-const PAIR_SOURCE_SESSION = "host-pair@kernel";
-// P2 — hosts.yaml carries bearer POINTERS only; any secret-value-shaped
-// field on the add body is rejected loudly BEFORE any write.
-const SECRET_SHAPED_FIELDS = ["bearer_value", "bearer_token", "token", "secret", "password"];
-function deriveHostId(url) {
-    const raw = url.hostname.toLowerCase().replace(/[^a-z0-9.-]/g, "-").replace(/\./g, "-");
-    return raw.replace(/^-+|-+$/g, "") || "paired-host";
-}
-export function hostsRoutes(opts) {
-    const router = new Hono();
-    const bearerToken = opts?.bearerToken ?? null;
-    const issued = new Map();
-    const clientPairs = new Map();
-    // Writes are gated exactly like mission-control writes: enforced when a
-    // bearer is configured, pass-through on loopback/tailnet-trust daemons.
-    const requireAuth = authBearerTokenMiddleware({ expectedToken: bearerToken });
-    router.use("/add", requireAuth);
-    router.use("/pair", requireAuth);
-    router.use("/pair/:pairId", requireAuth);
-    function getRepo(c) {
-        return c.get("queueRepo");
-    }
-    // ---------------------------------------------------------------------
-    // Pointers-only READ for the dashboard host-config component (FR-5).
-    // Not a write surface (P1's cap is the write family); rows mirror the
-    // CLI's `rig host ls --json` additive shape: entry fields (bearer
-    // POINTERS by construction) + `selected` + a bounded coarse `status`.
-    // ---------------------------------------------------------------------
-    function probeHost(host, timeoutMs = 1500) {
-        try {
-            let target;
-            let port;
-            if (host.transport === "ssh") {
-                target = host.target;
-                port = 22;
-            }
-            else {
-                const u = new URL(host.url);
-                target = u.hostname;
-                port = u.port ? Number(u.port) : u.protocol === "https:" ? 443 : 80;
-            }
-            return new Promise((resolve) => {
-                const sock = connect({ host: target, port, timeout: timeoutMs });
-                sock.on("connect", () => { sock.destroy(); resolve("reachable"); });
-                sock.on("timeout", () => { sock.destroy(); resolve("unreachable"); });
-                sock.on("error", () => { sock.destroy(); resolve("unreachable"); });
-            });
-        }
-        catch {
-            return Promise.resolve("unknown");
-        }
-    }
-    router.get("/", async (c) => {
-        const store = c.get("settingsStore");
-        const selected = store?.resolveOne("host.selected").value ?? "local";
-        const ownName = store?.resolveOne("host.name").value ?? "localhost";
-        const registryPath = defaultHostRegistryPath();
-        if (!existsSync(registryPath)) {
-            return c.json({ ownName, selected, hosts: [] });
-        }
-        const loaded = loadHostRegistry(registryPath);
-        if (!loaded.ok) {
-            return c.json({ error: "invalid_registry", message: loaded.error }, 500);
-        }
-        const statuses = await Promise.all(loaded.registry.hosts.map((h) => probeHost(h)));
-        return c.json({
-            ownName,
-            selected,
-            hosts: loaded.registry.hosts.map((h, i) => ({ ...h, selected: h.id === selected, status: statuses[i] })),
-        });
-    });
-    // ---------------------------------------------------------------------
-    // TARGET side: issuance.
-    // ---------------------------------------------------------------------
-    router.post("/pair-request", async (c) => {
-        if (!bearerToken) {
-            // A tokenless daemon has nothing to issue. Loud + structured; the
-            // fix is named (no silent success, no token minting machinery —
-            // the one-static-bearer model is the shipped auth surface).
-            return c.json({
-                error: "pair_target_no_bearer",
-                message: "this daemon runs without OPENRIG_AUTH_BEARER_TOKEN; pairing has no credential to issue. Set OPENRIG_AUTH_BEARER_TOKEN on the target daemon and retry.",
-            }, 409);
-        }
-        const body = (await c.req.json().catch(() => ({})));
-        const registry = (opts?.humanRegistry ?? loadHumanRegistry)();
-        if (!registry.ok)
-            return c.json({ error: "pair_human_registry_unavailable", message: registry.error }, 409);
-        const humans = body.human ? registry.entities.filter((human) => human.address === body.human) : registry.entities;
-        if (humans.length !== 1)
-            return c.json({
-                error: "pair_human_required", addresses: registry.entities.map((human) => human.address),
-                message: "Pair approval needs one registered human. Inspect rig gateway human list --json; select --human <entityId>@external when several exist. No approval row was created.",
-            }, 409);
-        const requester = (body.requester ?? "").trim() || "unknown requester";
-        const pairId = randomUUID();
-        const code = String(randomInt(100000, 1000000));
-        let qitemId;
-        try {
-            const item = await getRepo(c).create({
-                sourceSession: PAIR_SOURCE_SESSION,
-                destinationSession: humans[0].address,
-                tier: "human-gate",
-                summary: `Host pairing request ${code} from ${requester}`,
-                evidenceRef: `pair-request:${pairId}`,
-                body: [
-                    `A remote operator (${requester}) is asking to pair with this host.`,
-                    `Pairing code: ${code} — confirm it matches the code shown on the requesting side.`,
-                    `APPROVE: rig queue update <this-qitem-id> --state done --closure-reason no-follow-on`,
-                    `DENY:    rig queue update <this-qitem-id> --state denied`,
-                    `Approval hands this daemon's bearer token to the requester (full API access).`,
-                    `This request expires ${Math.round(PAIR_TTL_MS / 60000)} minutes after creation; expiry persists nothing.`,
-                ].join("\n"),
-            });
-            qitemId = item.qitemId;
-        }
-        catch (err) {
-            const message = err instanceof Error ? err.message : String(err);
-            return c.json({ error: "pair_approval_item_failed", message }, 500);
-        }
-        issued.set(pairId, { code, qitemId, requester, createdAt: Date.now() });
-        return c.json({ pairId, code, approvalQitemId: qitemId });
-    });
-    router.get("/pair-request/:pairId", (c) => {
-        const pairId = c.req.param("pairId");
-        const rec = issued.get(pairId);
-        if (!rec)
-            return c.json({ error: "pair_unknown", message: "unknown or already-consumed pairing request" }, 404);
-        if (Date.now() - rec.createdAt > PAIR_TTL_MS) {
-            issued.delete(pairId);
-            return c.json({ status: "expired" });
-        }
-        const item = getRepo(c).getById(rec.qitemId);
-        const state = item?.state ?? "pending";
-        if (state === "done") {
-            // Single-shot handover: the first approved read consumes the pairing.
-            issued.delete(pairId);
-            return c.json({ status: "approved", token: bearerToken });
-        }
-        if (state === "denied" || state === "canceled" || state === "failed") {
-            issued.delete(pairId);
-            return c.json({ status: "denied" });
-        }
-        return c.json({ status: "pending", code: rec.code });
-    });
-    // ---------------------------------------------------------------------
-    // LOCAL side: the dashboard's add + pair-client seams.
-    // ---------------------------------------------------------------------
-    router.post("/add", async (c) => {
-        const body = (await c.req.json().catch(() => null));
-        if (!body || typeof body !== "object") {
-            return c.json({ error: "invalid_host_entry", message: "body must be a host entry object" }, 400);
-        }
-        const secretField = SECRET_SHAPED_FIELDS.find((f) => f in body);
-        if (secretField) {
-            return c.json({
-                error: "no_secret_values",
-                message: `field '${secretField}' looks like a secret VALUE — hosts.yaml carries bearer POINTERS only (bearer_env / bearer_file). Nothing was written.`,
-            }, 400);
-        }
-        const res = addHostEntry(body);
-        if (!res.ok) {
-            return c.json({ error: "invalid_host_entry", message: res.error }, 400);
-        }
-        return c.json({ ok: true, entry: res.entry, path: res.path });
-    });
-    router.post("/pair", async (c) => {
-        const body = (await c.req.json().catch(() => ({})));
-        const rawUrl = (body.url ?? "").trim();
-        if (!rawUrl)
-            return c.json({ error: "pair_url_required", message: "body.url is required (the target daemon's address)" }, 400);
-        let target;
-        try {
-            target = new URL(/^https?:\/\//.test(rawUrl) ? rawUrl : `http://${rawUrl}`);
-        }
-        catch {
-            return c.json({ error: "pair_url_invalid", message: `'${rawUrl}' is not a usable address` }, 400);
-        }
-        const targetBase = target.origin;
-        // B1 fixback (guard code-review 2026-07-07): PREFLIGHT before the
-        // target is contacted. The candidate entry runs the SAME validation
-        // contract the add will use (duplicate/reserved ids, invalid existing
-        // registry fail here — before any approval item is minted on the
-        // target), and a pre-existing token file is pre-existing CREDENTIAL
-        // STATE: rejected, never overwritten, never deleted by this pairing.
-        const hostId = (body.id ?? "").trim() || deriveHostId(target);
-        const tokenPath = join(getOpenRigHome(), "secrets", `host-${hostId}.token`);
-        {
-            const registryPath = defaultHostRegistryPath();
-            let existing = [];
-            if (existsSync(registryPath)) {
-                const loaded = loadHostRegistry(registryPath);
-                if (!loaded.ok) {
-                    return c.json({ error: "invalid_registry", message: loaded.error }, 400);
-                }
-                existing = loaded.registry.hosts;
-            }
-            const preflight = validateHostRegistry({ hosts: [...existing, { id: hostId, transport: "http", url: targetBase, bearer_file: tokenPath }] }, registryPath);
-            if (!preflight.ok) {
-                return c.json({ error: "invalid_host_entry", message: preflight.error }, 400);
-            }
-            if (existsSync(tokenPath)) {
-                return c.json({
-                    error: "pair_token_path_exists",
-                    message: `a credential file already exists at ${tokenPath} — pre-existing credential state is never overwritten. Pair with a different id, or remove the file if it is stale.`,
-                }, 409);
-            }
-        }
-        let remote;
-        let status;
-        try {
-            const res = await fetch(`${targetBase}/api/hosts/pair-request`, {
-                method: "POST",
-                headers: { "Content-Type": "application/json" },
-                body: JSON.stringify({ requester: body.requester ?? `dashboard@${getOpenRigHome()}`, ...(body.human ? { human: body.human } : {}) }),
-                signal: AbortSignal.timeout(PAIR_HTTP_TIMEOUT_MS),
-            });
-            status = res.status;
-            remote = (await res.json().catch(() => ({})));
-        }
-        catch (err) {
-            return c.json({ error: "pair_target_unreachable", message: `could not reach ${targetBase}: ${err.message}` }, 502);
-        }
-        if (status !== 200 || !remote.pairId || !remote.code) {
-            return c.json({
-                error: remote.error ?? "pair_request_failed",
-                message: remote.message ?? `target responded HTTP ${status}`,
-            }, 502);
-        }
-        const localPairId = randomUUID();
-        clientPairs.set(localPairId, {
-            url: targetBase,
-            remotePairId: remote.pairId,
-            code: remote.code,
-            hostId,
-            createdAt: Date.now(),
-        });
-        return c.json({ pairId: localPairId, code: remote.code, target: targetBase });
-    });
-    router.get("/pair/:pairId", async (c) => {
-        const rec = clientPairs.get(c.req.param("pairId"));
-        if (!rec)
-            return c.json({ error: "pair_unknown", message: "unknown or already-completed pairing" }, 404);
-        if (Date.now() - rec.createdAt > PAIR_TTL_MS) {
-            clientPairs.delete(c.req.param("pairId"));
-            return c.json({ status: "expired" });
-        }
-        let remote;
-        try {
-            const res = await fetch(`${rec.url}/api/hosts/pair-request/${rec.remotePairId}`, {
-                signal: AbortSignal.timeout(PAIR_HTTP_TIMEOUT_MS),
-            });
-            remote = (await res.json().catch(() => ({})));
-        }
-        catch (err) {
-            return c.json({ error: "pair_target_unreachable", message: `could not reach ${rec.url}: ${err.message}` }, 502);
-        }
-        if (remote.status === "pending" || remote.status === undefined) {
-            return c.json({ status: "pending", code: rec.code });
-        }
-        if (remote.status !== "approved" || !remote.token) {
-            clientPairs.delete(c.req.param("pairId"));
-            return c.json({ status: remote.status === "expired" ? "expired" : "denied" });
-        }
-        // Approved: persist the token via EXCLUSIVE CREATE (open flag "wx",
-        // 0600 — rev1-r2 B3: check-then-rename had a window where a
-        // concurrent same-id pair could clobber the winner's file and then
-        // delete it on its own add failure; "wx" is atomic at the
-        // filesystem, so creation SUCCESS is the proof of ownership the
-        // cleanup relies on), then the registry entry through the ONE write
-        // contract. addHostEntry re-validates authoritatively.
-        const secretsDir = join(getOpenRigHome(), "secrets");
-        const tokenPath = join(secretsDir, `host-${rec.hostId}.token`);
-        try {
-            mkdirSync(secretsDir, { recursive: true, mode: 0o700 });
-            writeFileSync(tokenPath, `${remote.token}\n`, { mode: 0o600, flag: "wx" });
-        }
-        catch (err) {
-            if (err.code === "EEXIST") {
-                clientPairs.delete(c.req.param("pairId"));
-                return c.json({
-                    error: "pair_token_path_exists",
-                    message: `a credential file appeared at ${tokenPath} during pairing — refusing to overwrite it; nothing was persisted by this pairing.`,
-                }, 409);
-            }
-            return c.json({ error: "pair_token_write_failed", message: err.message }, 500);
-        }
-        const added = addHostEntry({
-            id: rec.hostId,
-            transport: "http",
-            url: rec.url,
-            bearer_file: tokenPath,
-            notes: `paired ${new Date().toISOString().slice(0, 10)}`,
-        });
-        if (!added.ok) {
-            rmSync(tokenPath, { force: true });
-            clientPairs.delete(c.req.param("pairId"));
-            return c.json({ error: "invalid_host_entry", message: added.error }, 400);
-        }
-        clientPairs.delete(c.req.param("pairId"));
-        return c.json({ status: "approved", entry: added.entry });
-    });
-    return router;
-}
-//# sourceMappingURL=hosts.js.map

package/node_modules/@openrig/daemon/dist/routes/hosts.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"hosts.js","sourceRoot":"","sources":["../../src/routes/hosts.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,mEAAmE;AACnE,sEAAsE;AACtE,qDAAqD;AACrD,EAAE;AACF,eAAe;AACf,mEAAmE;AACnE,0EAA0E;AAC1E,yEAAyE;AACzE,mEAAmE;AACnE,wEAAwE;AACxE,oEAAoE;AACpE,0EAA0E;AAC1E,yDAAyD;AACzD,mEAAmE;AACnE,sEAAsE;AACtE,0EAA0E;AAC1E,8DAA8D;AAC9D,sEAAsE;AACtE,sEAAsE;AACtE,wEAAwE;AACxE,qEAAqE;AACrE,sEAAsE;AACtE,0DAA0D;AAC1D,uEAAuE;AACvE,qEAAqE;AACrE,uEAAuE;AACvE,0EAA0E;AAC1E,0EAA0E;AAC1E,qEAAqE;AACrE,0EAA0E;AAC1E,EAAE;AACF,sEAAsE;AACtE,wEAAwE;AACxE,iEAAiE;AAEjE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AACnC,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,0CAA0C,CAAC;AACxE,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,oBAAoB,EAAkB,MAAM,0CAA0C,CAAC;AAG3I,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,iBAAiB,EAAmB,MAAM,qCAAqC,CAAC;AAEzF,MAAM,WAAW,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACnC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAEpC,MAAM,mBAAmB,GAAG,kBAAkB,CAAC;AAiB/C,wEAAwE;AACxE,6DAA6D;AAC7D,MAAM,oBAAoB,GAAG,CAAC,cAAc,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;AAE7F,SAAS,YAAY,CAAC,GAAQ;IAC5B,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACxF,OAAO,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,aAAa,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAwE;IAClG,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;IAC1B,MAAM,WAAW,GAAG,IAAI,EAAE,WAAW,IAAI,IAAI,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC7C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAsB,CAAC;IAElD,wEAAwE;IACxE,wEAAwE;IACxE,MAAM,WAAW,GAAG,yBAAyB,CAAC,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC;IAC9E,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAChC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACjC,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IAEzC,SAAS,OAAO,CAAC,CAAoC;QACnD,OAAO,CAAC,CAAC,GAAG,CAAC,WAAoB,CAAoB,CAAC;IACxD,CAAC;IAED,wEAAwE;IACxE,qEAAqE;IACrE,sEAAsE;IACtE,kEAAkE;IAClE,sEAAsE;IACtE,wEAAwE;IAExE,SAAS,SAAS,CAAC,IAAe,EAAE,SAAS,GAAG,IAAI;QAClD,IAAI,CAAC;YACH,IAAI,MAAc,CAAC;YACnB,IAAI,IAAY,CAAC;YACjB,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;gBAC7B,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;gBACrB,IAAI,GAAG,EAAE,CAAC;YACZ,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC5B,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAC;gBACpB,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,CAAC;YACD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;gBAC7B,MAAM,IAAI,GAAG,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;gBACjE,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACpE,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtE,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACtE,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1B,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,eAAwB,CAA8B,CAAC;QAC3E,MAAM,QAAQ,GAAI,KAAK,EAAE,UAAU,CAAC,eAAe,CAAC,CAAC,KAA4B,IAAI,OAAO,CAAC;QAC7F,MAAM,OAAO,GAAI,KAAK,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC,KAA4B,IAAI,WAAW,CAAC;QAC5F,MAAM,YAAY,GAAG,uBAAuB,EAAE,CAAC;QAC/C,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnF,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,OAAO;YACP,QAAQ;YACR,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,KAAK,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;SACzG,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,wEAAwE;IACxE,yBAAyB;IACzB,wEAAwE;IAExE,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,kEAAkE;YAClE,gEAAgE;YAChE,4DAA4D;YAC5D,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,KAAK,EAAE,uBAAuB;gBAC9B,OAAO,EAAE,uJAAuJ;aACjK,EAAE,GAAG,CAAC,CAAC;QACV,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAA0C,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAA2C,CAAC;QACtI,MAAM,QAAQ,GAAG,CAAC,IAAI,EAAE,aAAa,IAAI,iBAAiB,CAAC,EAAE,CAAC;QAC9D,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iCAAiC,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;QAC5G,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAClH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC;gBACrC,KAAK,EAAE,qBAAqB,EAAE,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;gBACxF,OAAO,EAAE,sKAAsK;aAChL,EAAE,GAAG,CAAC,CAAC;QACR,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,mBAAmB,CAAC;QACvE,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAEhD,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;gBACnC,aAAa,EAAE,mBAAmB;gBAClC,kBAAkB,EAAE,MAAM,CAAC,CAAC,CAAE,CAAC,OAAO;gBACtC,IAAI,EAAE,YAAY;gBAClB,OAAO,EAAE,wBAAwB,IAAI,SAAS,SAAS,EAAE;gBACzD,WAAW,EAAE,gBAAgB,MAAM,EAAE;gBACrC,IAAI,EAAE;oBACJ,sBAAsB,SAAS,qCAAqC;oBACpE,iBAAiB,IAAI,8DAA8D;oBACnF,sFAAsF;oBACtF,0DAA0D;oBAC1D,+EAA+E;oBAC/E,wBAAwB,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,KAAK,CAAC,mDAAmD;iBAC3G,CAAC,IAAI,CAAC,IAAI,CAAC;aACb,CAAC,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACxE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,uBAAuB,EAAE,CAAC,CAAC,EAAE,EAAE;QACxC,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,CAAC,GAAG;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,6CAA6C,EAAE,EAAE,GAAG,CAAC,CAAC;QAEhH,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,SAAS,GAAG,WAAW,EAAE,CAAC;YAC7C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACtB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,SAAS,CAAC;QACvC,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YACrB,sEAAsE;YACtE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACtB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YACrE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACtB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,wEAAwE;IACxE,uDAAuD;IACvD,wEAAwE;IAExE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC9B,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAA2B,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7E,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,OAAO,EAAE,kCAAkC,EAAE,EAAE,GAAG,CAAC,CAAC;QACnG,CAAC;QACD,MAAM,WAAW,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QAChE,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,KAAK,EAAE,kBAAkB;gBACzB,OAAO,EAAE,UAAU,WAAW,wHAAwH;aACvJ,EAAE,GAAG,CAAC,CAAC;QACV,CAAC;QACD,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC/B,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAqE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAsE,CAAC;QAC5L,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACvC,IAAI,CAAC,MAAM;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,OAAO,EAAE,oDAAoD,EAAE,EAAE,GAAG,CAAC,CAAC;QAC/H,IAAI,MAAW,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,MAAM,EAAE,CAAC,CAAC;QAC9E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,IAAI,MAAM,2BAA2B,EAAE,EAAE,GAAG,CAAC,CAAC;QACpG,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;QAEjC,kEAAkE;QAClE,oEAAoE;QACpE,sEAAsE;QACtE,iEAAiE;QACjE,oEAAoE;QACpE,qEAAqE;QACrE,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,QAAQ,MAAM,QAAQ,CAAC,CAAC;QAC5E,CAAC;YACC,MAAM,YAAY,GAAG,uBAAuB,EAAE,CAAC;YAC/C,IAAI,QAAQ,GAAgB,EAAE,CAAC;YAC/B,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC7B,MAAM,MAAM,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;gBAC9C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;oBACf,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;gBAC3E,CAAC;gBACD,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YACnC,CAAC;YACD,MAAM,SAAS,GAAG,oBAAoB,CACpC,EAAE,KAAK,EAAE,CAAC,GAAG,QAAQ,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,EAAE,EACpG,YAAY,CACb,CAAC;YACF,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;gBAClB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,OAAO,EAAE,SAAS,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;YAChF,CAAC;YACD,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC1B,OAAO,CAAC,CAAC,IAAI,CAAC;oBACZ,KAAK,EAAE,wBAAwB;oBAC/B,OAAO,EAAE,uCAAuC,SAAS,qHAAqH;iBAC/K,EAAE,GAAG,CAAC,CAAC;YACV,CAAC;QACH,CAAC;QAED,IAAI,MAA4E,CAAC;QACjF,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,UAAU,yBAAyB,EAAE;gBAC9D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,aAAa,cAAc,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;gBACpI,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,oBAAoB,CAAC;aAClD,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;YACpB,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAkB,CAAC;QACjE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,OAAO,EAAE,mBAAmB,UAAU,KAAM,GAAa,CAAC,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QAChI,CAAC;QACD,IAAI,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACrD,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,qBAAqB;gBAC5C,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,yBAAyB,MAAM,EAAE;aAC7D,EAAE,GAAG,CAAC,CAAC;QACV,CAAC;QAED,MAAM,WAAW,GAAG,UAAU,EAAE,CAAC;QACjC,WAAW,CAAC,GAAG,CAAC,WAAW,EAAE;YAC3B,GAAG,EAAE,UAAU;YACf,YAAY,EAAE,MAAM,CAAC,MAAM;YAC3B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM;YACN,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtC,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QACnD,IAAI,CAAC,GAAG;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,sCAAsC,EAAE,EAAE,GAAG,CAAC,CAAC;QACzG,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,SAAS,GAAG,WAAW,EAAE,CAAC;YAC7C,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACvC,CAAC;QAED,IAAI,MAA2C,CAAC;QAChD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,CAAC,GAAG,2BAA2B,GAAG,CAAC,YAAY,EAAE,EAAE;gBAC/E,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,oBAAoB,CAAC;aAClD,CAAC,CAAC;YACH,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAkB,CAAC;QACjE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,OAAO,EAAE,mBAAmB,GAAG,CAAC,GAAG,KAAM,GAAa,CAAC,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7H,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAClD,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAChF,CAAC;QAED,oEAAoE;QACpE,4DAA4D;QAC5D,mEAAmE;QACnE,0DAA0D;QAC1D,gEAAgE;QAChE,oEAAoE;QACpE,uDAAuD;QACvD,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,EAAE,EAAE,SAAS,CAAC,CAAC;QACrD,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,QAAQ,GAAG,CAAC,MAAM,QAAQ,CAAC,CAAC;QAC/D,IAAI,CAAC;YACH,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACxD,aAAa,CAAC,SAAS,EAAE,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACrD,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAC1C,OAAO,CAAC,CAAC,IAAI,CAAC;oBACZ,KAAK,EAAE,wBAAwB;oBAC/B,OAAO,EAAE,iCAAiC,SAAS,oFAAoF;iBACxI,EAAE,GAAG,CAAC,CAAC;YACV,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,OAAO,EAAG,GAAa,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QAC5F,CAAC;QACD,MAAM,KAAK,GAAG,YAAY,CAAC;YACzB,EAAE,EAAE,GAAG,CAAC,MAAM;YACd,SAAS,EAAE,MAAM;YACjB,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,WAAW,EAAE,SAAS;YACtB,KAAK,EAAE,UAAU,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;SACzD,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACnC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;QAC5E,CAAC;QACD,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC1C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/node_modules/@openrig/daemon/dist/routes/info.d.ts

@@ -1,3 +0,0 @@
-import { Hono } from "hono";
-export declare function infoRoutes(): Hono;
-//# sourceMappingURL=info.d.ts.map

package/node_modules/@openrig/daemon/dist/routes/info.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"info.d.ts","sourceRoot":"","sources":["../../src/routes/info.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAW5B,wBAAgB,UAAU,IAAI,IAAI,CAUjC"}

package/node_modules/@openrig/daemon/dist/routes/info.js

@@ -1,20 +0,0 @@
-import { Hono } from "hono";
-import { getOpenRigInstallRoot } from "../domain/cwd-resolution.js";
-// GET /api/info — daemon-info surface for tactical CLI awareness paths
-// (OPR.0.3.2.22 Bug 3 first consumer: CLI default-cwd extension for
-// path-form `rig up <install-internal-spec>` without --cwd).
-//
-// installRoot is the daemon's on-disk install root (the parent of the
-// daemon's package directory). The CLI uses it to detect when a spec
-// path lives inside the OpenRig install — the case that hits
-// getOpenRigInstallCwdError at preflight without a --cwd override.
-export function infoRoutes() {
-    const app = new Hono();
-    app.get("/", (c) => {
-        return c.json({
-            installRoot: getOpenRigInstallRoot(),
-        });
-    });
-    return app;
-}
-//# sourceMappingURL=info.js.map

package/node_modules/@openrig/daemon/dist/routes/info.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"info.js","sourceRoot":"","sources":["../../src/routes/info.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,uEAAuE;AACvE,oEAAoE;AACpE,6DAA6D;AAC7D,EAAE;AACF,sEAAsE;AACtE,qEAAqE;AACrE,6DAA6D;AAC7D,mEAAmE;AACnE,MAAM,UAAU,UAAU;IACxB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE;QACjB,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,WAAW,EAAE,qBAAqB,EAAE;SACrC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/node_modules/@openrig/daemon/dist/routes/kernel-status.d.ts

@@ -1,3 +0,0 @@
-import { Hono } from "hono";
-export declare const kernelStatusRoutes: Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
-//# sourceMappingURL=kernel-status.d.ts.map

package/node_modules/@openrig/daemon/dist/routes/kernel-status.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"kernel-status.d.ts","sourceRoot":"","sources":["../../src/routes/kernel-status.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B,eAAO,MAAM,kBAAkB,4EAAa,CAAC"}

package/node_modules/@openrig/daemon/dist/routes/kernel-status.js

@@ -1,40 +0,0 @@
-// V0.3.1 slice 05 kernel-rig-as-default — forward-fix #3 architectural.
-//
-// GET /api/kernel/status — read-only observability surface for the
-// background kernel-boot. Pairs with the architectural decoupling in
-// kernel-boot-tracker.ts: healthz binds early; this route lets
-// operators (and CLI's `--wait-for-kernel`) observe kernel agent
-// readiness independently of HTTP health.
-//
-// Returns one of two shapes:
-//
-//   200 { kernel_state, agents[], first_unready_since, variant, detail }
-//     — when the tracker is wired (the standard daemon composition).
-//
-//   503 { error: 'kernel_boot_tracker_unavailable', message: ... }
-//     — when AppDeps was constructed without a tracker (test fixtures
-//       or custom daemon compositions). Clear hint instead of a 500.
-import { Hono } from "hono";
-export const kernelStatusRoutes = new Hono();
-kernelStatusRoutes.get("/status", (c) => {
-    const tracker = c.get("kernelBootTracker");
-    if (!tracker) {
-        return c.json({
-            error: "kernel_boot_tracker_unavailable",
-            message: "Kernel-boot tracker not wired into this daemon. Use --no-kernel or check startup logs for a kernel-boot failure that prevented tracker construction.",
-        }, 503);
-    }
-    const status = tracker.getStatus();
-    return c.json({
-        kernel_state: status.kernelState,
-        agents: status.agents.map((a) => ({
-            session_name: a.sessionName,
-            runtime: a.runtime,
-            startup_status: a.startupStatus,
-        })),
-        first_unready_since: status.firstUnreadySince,
-        variant: status.variant,
-        detail: status.detail,
-    });
-});
-//# sourceMappingURL=kernel-status.js.map

package/node_modules/@openrig/daemon/dist/routes/kernel-status.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"kernel-status.js","sourceRoot":"","sources":["../../src/routes/kernel-status.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,EAAE;AACF,mEAAmE;AACnE,qEAAqE;AACrE,+DAA+D;AAC/D,iEAAiE;AACjE,0CAA0C;AAC1C,EAAE;AACF,6BAA6B;AAC7B,EAAE;AACF,yEAAyE;AACzE,qEAAqE;AACrE,EAAE;AACF,mEAAmE;AACnE,sEAAsE;AACtE,qEAAqE;AAErE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,IAAI,EAAE,CAAC;AAE7C,kBAAkB,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE;IACtC,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,mBAA4B,CAAkC,CAAC;IACrF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,CAAC,IAAI,CACX;YACE,KAAK,EAAE,iCAAiC;YACxC,OAAO,EACL,sJAAsJ;SACzJ,EACD,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IACnC,OAAO,CAAC,CAAC,IAAI,CAAC;QACZ,YAAY,EAAE,MAAM,CAAC,WAAW;QAChC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAChC,YAAY,EAAE,CAAC,CAAC,WAAW;YAC3B,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,cAAc,EAAE,CAAC,CAAC,aAAa;SAChC,CAAC,CAAC;QACH,mBAAmB,EAAE,MAAM,CAAC,iBAAiB;QAC7C,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/node_modules/@openrig/daemon/dist/routes/mission-control.d.ts

@@ -1,37 +0,0 @@
-import { Hono } from "hono";
-/**
- * Mission Control HTTP routes (PL-005 Phase A). Backs the integrated
- * Mission Control product UI inside the existing shell.
- *
- * Per Phase A R1 (PL-004) SSE route-order lesson: SSE/literal paths
- * mounted BEFORE bare-param /:view-name catchall.
- *
- * Endpoints:
- *   GET  /api/mission-control/views/:view-name   read one of 7 views
- *   POST /api/mission-control/action              execute one of 7 verbs
- *   GET  /api/mission-control/sse                 SSE stream of mission_control.* events
- *   GET  /api/mission-control/watch               alias of /sse
- *   GET  /api/mission-control/cli-capabilities    per-rig CLI capability cache
- *   GET  /api/mission-control/destinations         handoff/route destination candidates
- *   GET  /api/mission-control/views               list view names
- */
-export interface MissionControlRoutesOpts {
-    /**
-     * PL-005 Phase B: bearer token enforced on write verbs (POST /action,
-     * POST /notifications/test) when set. When null, the daemon is
-     * loopback-bound and no auth is enforced (the index.ts startup
-     * check guarantees this).
-     */
-    bearerToken?: string | null;
-}
-export interface MissionControlDestination {
-    sessionName: string;
-    label: string;
-    source: "topology" | "queue";
-    rigName?: string | null;
-    logicalId?: string | null;
-    runtime?: string | null;
-    status?: string | null;
-}
-export declare function missionControlRoutes(opts?: MissionControlRoutesOpts): Hono;
-//# sourceMappingURL=mission-control.d.ts.map

package/node_modules/@openrig/daemon/dist/routes/mission-control.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mission-control.d.ts","sourceRoot":"","sources":["../../src/routes/mission-control.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAgC5B;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,wBAAwB;IACvC;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,yBAAyB;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,wBAAgB,oBAAoB,CAAC,IAAI,CAAC,EAAE,wBAAwB,GAAG,IAAI,CAqc1E"}