@openrig/cli 0.6.11 → 0.6.12

package/dist/commands/policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/commands/policy.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,mFAAmF;AACnF,EAAE;AACF,4GAA4G;AAC5G,4GAA4G;AAC5G,0HAA0H;AAC1H,iGAAiG;AACjG,8FAA8F;AAC9F,uCAAuC;AACvC,EAAE;AACF,yDAAyD;AACzD,8FAA8F;AAC9F,uFAAuF;AACvF,6FAA6F;AAC7F,8FAA8F;AAC9F,yFAAyF;AACzF,kGAAkG;AAClG,qGAAqG;AACrG,EAAE;AACF,kGAAkG;AAClG,gGAAgG;AAChG,gGAAgG;AAChG,mGAAmG;AACnG,qFAAqF;AAErF,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,WAAW,EACX,0BAA0B,EAC1B,uBAAuB,EACvB,cAAc,GACf,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,2BAA2B,EAC3B,iCAAiC,GAElC,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAE9F,MAAM,WAAW,GACf,4NAA4N;IAC5N,uGAAuG,CAAC;AAE1G,MAAM,oBAAoB,GAA2B;IACnD,MAAM,EAAE,2FAA2F;IACnG,QAAQ,EAAE,wDAAwD;IAClE,IAAI,EAAE,gEAAgE;IACtE,IAAI,EAAE,kGAAkG;IACxG,IAAI,EAAE,kGAAkG;IACxG,IAAI,EAAE,oKAAoK;CAC3K,CAAC;AAEF,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC;AACtD,CAAC;AAED,MAAM,WAAW,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC;AAU7E;8EAC8E;AAC9E,SAAS,eAAe,CAAC,GAA4B;IACnD,MAAM,KAAK,GAAkB,CAAC;YAC5B,IAAI,EAAE,KAAK;YACX,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,SAAS;SAC3G,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,MAAM,CAAoC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/F,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE;QACvB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,SAAS,CAAoC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxG,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE;YAC7B,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,EAAE,CAAC;gBAC9G,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC/D,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;YAC9G,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,QAAgB;IAChC,MAAM,QAAQ,GAAG,uBAAuB,CAAC,WAAW,EAAE,EAAE,QAAQ,CAAC,CAAC;IAClE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,KAAK,EAAE,wBAAwB,QAAQ,6EAA6E,EAAE,CAAC;IAClI,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAA4B,CAAC;QAC7F,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,KAAK,EAAE,mBAAmB,QAAQ,KAAM,GAAa,CAAC,OAAO,EAAE,EAAE,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,6DAA6D;AAC7D,SAAS,kBAAkB,CAAC,CAA2B;IACrD,MAAM,KAAK,GAAG;QACZ,UAAU,CAAC,CAAC,MAAM,EAAE;QACpB,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;QACjD,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,IAAI;QACtD,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI;QACzC,kBAAkB,CAAC,CAAC,aAAa,EAAE;QACnC,oBAAoB,CAAC,CAAC,eAAe,EAAE;KACxC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClB,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,eAAe;QAC1D,CAAC,CAAC,kGAAkG;QACpG,CAAC,CAAC,EAAE,CAAC;IACP,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAC3C,qDAAqD,WAAW,kEAAkE,CACnI,CAAC;IAEF,MAAM,WAAW,GAAG,IAAI,OAAO,CAAC,aAAa,CAAC,CAAC,WAAW,CACxD,kHAAkH,CACnH,CAAC;IACF,0BAA0B,CAAC,WAAW,CAAC,CAAC;IACxC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IAC5B,2FAA2F;IAC3F,0BAA0B,CAAC,GAAG,CAAC,CAAC;IAChC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,0BAA0B,CAAC,GAAY;IAE9C,GAAG;SACA,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,sGAAsG,WAAW,EAAE,CAAC;SAChI,MAAM,CAAC,eAAe,EAAE,iEAAiE,CAAC;SAC1F,MAAM,CAAC,QAAQ,EAAE,yBAAyB,CAAC;SAC3C,MAAM,CAAC,CAAC,IAAuC,EAAE,EAAE;QAClD,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,oBAAoB,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;QACrL,MAAM,MAAM,GAAmC,EAAE,CAAC;QAClD,IAAI,SAAS,GAAkB,IAAI,CAAC;QACpC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;gBACtB,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC;YAC3B,CAAC;iBAAM,CAAC;gBACN,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACnD,KAAK,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;oBACxD,IAAI,GAAG,KAAK,SAAS;wBAAE,SAAS,CAAC,eAAe;oBAChD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,KAAK,MAAM,IAAI,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;wBAAE,SAAS;oBACxF,MAAM,OAAO,GAAG,2BAA2B,CAAC,GAAG,EAAE,GAAG,IAAI,oBAAoB,CAAC,CAAC;oBAC9E,IAAI,OAAO,EAAE,CAAC;wBACZ,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;wBACpC,SAAS;oBACX,CAAC;oBACD,MAAM,CAAC,GAAG,iCAAiC,CAAC,GAAa,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;oBACtF,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,eAAe,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;gBAC/J,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;QACtH,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,CAAC,IAAI,QAAQ;gBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YACnG,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBAC5B,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,oCAAoC,CAAC,CAAC,CAAC,mDAAmD,CAAC,CAAC;gBAC5H,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;oBACvB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO;wBACnB,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,eAAe,CAAC,CAAC,OAAO,EAAE;wBACnE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,cAAc,aAAa,CAAC,CAAC,OAAO,IAAI,GAAG,oBAAoB,CAAC,CAAC,aAAa,sBAAsB,CAAC,CAAC,eAAe,GAAG,CAAC,CAAC;gBAC/K,CAAC;YACH,CAAC;YACD,IAAI,SAAS;gBAAE,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACxC,OAAO,CAAC,GAAG,CAAC,KAAK,WAAW,EAAE,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,SAAS;YAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEL,GAAG;SACA,OAAO,CAAC,kBAAkB,CAAC;SAC3B,WAAW,CAAC,6HAA6H,CAAC;SAC1I,MAAM,CAAC,eAAe,EAAE,mEAAmE,CAAC;SAC5F,MAAM,CAAC,QAAQ,EAAE,yBAAyB,CAAC;SAC3C,MAAM,CAAC,CAAC,SAAiB,EAAE,IAAuC,EAAE,EAAE;QACrE,IAAK,cAAoC,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9D,MAAM,GAAG,GAAG;gBACV,IAAI,EAAE,SAAS;gBACf,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC;gBACtB,MAAM,EAAE,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;gBAC5D,WAAW,EAAE,oBAAoB,CAAC,SAAS,CAAC,IAAI,EAAE;gBAClD,UAAU,EAAE,sBAAsB,MAAM,CAAC,SAAS,CAAC,EAAE;gBACrD,aAAa,EAAE,oBAAoB,CAAC,SAAS,CAAC;gBAC9C,WAAW,EAAE,WAAW;aACzB,CAAC;YACF,IAAI,IAAI,CAAC,IAAI;gBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;iBAC3C,CAAC;gBACJ,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;gBAChD,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,CAAC,UAAU,qBAAqB,GAAG,CAAC,aAAa,GAAG,CAAC,CAAC;gBACrF,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAC/B,CAAC;YACD,OAAO;QACT,CAAC;QACD,sFAAsF;QACtF,MAAM,GAAG,GAAG,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QACrE,MAAM,OAAO,GAAG,2BAA2B,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAC/D,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACvB,OAAO,CAAC,KAAK,CAAC,oBAAoB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,IAAI,YAAY,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QACjC,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;gBACtB,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC5B,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YACD,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC7C,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC3B,CAAC;QACD,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QACvD,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,KAAK,CAAC,kBAAkB,GAAG,uBAAuB,cAAc,0CAA0C,MAAM,oCAAoC,CAAC,CAAC;YAC9J,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;YACtB,OAAO,CAAC,KAAK,CAAC,kBAAkB,GAAG,QAAQ,cAAc,gBAAgB,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YACzF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACxD,MAAM,UAAU,GAAG,iCAAiC,CAAC,GAAG,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;QACrF,MAAM,GAAG,GAAG;YACV,GAAG;YACH,MAAM,EAAE,QAAQ;YAChB,cAAc;YACd,YAAY;YACZ,OAAO,EAAE,UAAU,CAAC,OAAO,IAAI,IAAI;YACnC,aAAa,EAAE,UAAU,CAAC,aAAa;YACvC,eAAe,EAAE,UAAU,CAAC,eAAe;YAC3C,aAAa,EAAE,QAAQ,CAAC,EAAE;YAC1B,cAAc,EAAE,QAAQ,CAAC,MAAM;YAC/B,WAAW,EAAE,WAAW;SACzB,CAAC;QACF,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;aAC3C,CAAC;YACJ,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,MAAM,cAAc,EAAE,CAAC,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC,CAAC;YAC5C,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM;oBAAE,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;YACnF,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEL,GAAG;SACA,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,4JAA4J,CAAC;SACzK,cAAc,CAAC,eAAe,EAAE,8DAA8D,CAAC;SAC/F,MAAM,CAAC,QAAQ,EAAE,yBAAyB,CAAC;SAC3C,MAAM,CAAC,CAAC,IAAsC,EAAE,EAAE;QACjD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;YACtB,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5B,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,GAAG,CAAC;QAC7B,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE;YACzC,+FAA+F;YAC/F,mFAAmF;YACnF,MAAM,SAAS,GAAG,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAC5E,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,yOAAyO,EAAE,CAAC;YAClS,CAAC;YACD,MAAM,OAAO,GAAG,2BAA2B,CAAC,SAAS,EAAE,GAAG,IAAI,oBAAoB,CAAC,CAAC;YACpF,IAAI,OAAO,EAAE,CAAC;gBACZ,UAAU,GAAG,IAAI,CAAC;gBAClB,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;YACxD,CAAC;YACD,MAAM,CAAC,GAAG,iCAAiC,CAAC,SAAmB,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;YAC5F,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;QAC9F,CAAC,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;QAC/E,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;aAC3C,CAAC;YACJ,OAAO,CAAC,GAAG,CAAC,SAAS,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YACxC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;gBACvB,IAAI,SAAS,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO;oBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,SAAS,eAAe,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;;oBAC7F,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,SAAS,IAAI,UAAU,MAAM,MAAM,CAAE,CAA0B,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC/G,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC3B,CAAC;QACD,2FAA2F;QAC3F,IAAI,UAAU;YAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEL,GAAG;SACA,OAAO,CAAC,cAAc,CAAC;SACvB,WAAW,CAAC,oJAAoJ,WAAW,EAAE,CAAC;SAC9K,cAAc,CAAC,eAAe,EAAE,8DAA8D,CAAC;SAC/F,MAAM,CAAC,QAAQ,EAAE,yBAAyB,CAAC;SAC3C,MAAM,CAAC,CAAC,IAAY,EAAE,IAAsC,EAAE,EAAE;QAC/D,MAAM,IAAI,GAAG,0BAA0B,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACxE,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;aAC5C,CAAC;YACJ,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1B,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC3B,IAAI,IAAI,CAAC,MAAM;oBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC1C,IAAI,IAAI,CAAC,OAAO;oBAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AAEP,CAAC;AAED,qFAAqF;AACrF,OAAO,EAAE,oBAAoB,EAAE,CAAC"}
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/commands/policy.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,mFAAmF;AACnF,EAAE;AACF,4GAA4G;AAC5G,4GAA4G;AAC5G,0HAA0H;AAC1H,iGAAiG;AACjG,8FAA8F;AAC9F,uCAAuC;AACvC,EAAE;AACF,yDAAyD;AACzD,8FAA8F;AAC9F,uFAAuF;AACvF,6FAA6F;AAC7F,8FAA8F;AAC9F,yFAAyF;AACzF,kGAAkG;AAClG,qGAAqG;AACrG,sGAAsG;AACtG,+FAA+F;AAC/F,EAAE;AACF,kGAAkG;AAClG,gGAAgG;AAChG,gGAAgG;AAChG,mGAAmG;AACnG,qFAAqF;AAErF,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,WAAW,EACX,0BAA0B,EAC1B,uBAAuB,EACvB,cAAc,GACf,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,2BAA2B,EAC3B,iCAAiC,GAElC,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAC9F,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC1F,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAGvC,MAAM,WAAW,GACf,4NAA4N;IAC5N,uGAAuG,CAAC;AAE1G,MAAM,oBAAoB,GAA2B;IACnD,MAAM,EAAE,2FAA2F;IACnG,QAAQ,EAAE,wDAAwD;IAClE,IAAI,EAAE,gEAAgE;IACtE,IAAI,EAAE,kGAAkG;IACxG,IAAI,EAAE,kGAAkG;IACxG,IAAI,EAAE,oKAAoK;CAC3K,CAAC;AAEF,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC;AACtD,CAAC;AAED,MAAM,WAAW,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC;AAU7E;8EAC8E;AAC9E,SAAS,eAAe,CAAC,GAA4B;IACnD,MAAM,KAAK,GAAkB,CAAC;YAC5B,IAAI,EAAE,KAAK;YACX,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,SAAS;SAC3G,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,MAAM,CAAoC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/F,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE;QACvB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,SAAS,CAAoC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxG,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE;YAC7B,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,EAAE,CAAC;gBAC9G,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC/D,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;YAC9G,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,QAAgB;IAChC,MAAM,QAAQ,GAAG,uBAAuB,CAAC,WAAW,EAAE,EAAE,QAAQ,CAAC,CAAC;IAClE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,KAAK,EAAE,wBAAwB,QAAQ,6EAA6E,EAAE,CAAC;IAClI,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAA4B,CAAC;QAC7F,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,KAAK,EAAE,mBAAmB,QAAQ,KAAM,GAAa,CAAC,OAAO,EAAE,EAAE,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,6DAA6D;AAC7D,SAAS,kBAAkB,CAAC,CAA2B;IACrD,MAAM,KAAK,GAAG;QACZ,UAAU,CAAC,CAAC,MAAM,EAAE;QACpB,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;QACjD,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,IAAI;QACtD,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI;QACzC,kBAAkB,CAAC,CAAC,aAAa,EAAE;QACnC,oBAAoB,CAAC,CAAC,eAAe,EAAE;KACxC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClB,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,eAAe;QAC1D,CAAC,CAAC,kGAAkG;QACpG,CAAC,CAAC,EAAE,CAAC;IACP,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,YAAyB;IACrD,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAC3C,qDAAqD,WAAW,kEAAkE,CACnI,CAAC;IACF,MAAM,OAAO,GAAG,GAAe,EAAE,CAAC,YAAY,IAAI;QAChD,aAAa,EAAE,QAAQ,EAAE;QACzB,aAAa,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC;KACtD,CAAC;IAEF,MAAM,WAAW,GAAG,IAAI,OAAO,CAAC,aAAa,CAAC,CAAC,WAAW,CACxD,kHAAkH,CACnH,CAAC;IACF,0BAA0B,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACjD,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IAC5B,2FAA2F;IAC3F,0BAA0B,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACzC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,mGAAmG;AACnG,KAAK,UAAU,WAAW,CACxB,OAAyB,EACzB,IAAY,EACZ,IAA0E;IAE1E,IAAI,CAAE,cAAoC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1D,MAAM,OAAO,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,0BAA0B,IAAI,qBAAqB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAChJ,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;;YAC/C,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACpC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACzD,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC;QAAE,OAAO;IACvC,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACzB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAA0B,wBAAwB,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE;QAC9G,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtF,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;SAChD,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QAC3B,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,6BAA6B,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC9G,IAAI,OAAO,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,QAAQ;YAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IACpF,CAAC;SAAM,CAAC;QACN,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,MAAM,OAAO,GAAG,kBAAkB,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;QACtE,OAAO,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM;YACzB,CAAC,CAAC,4CAA4C,IAAI,CAAC,IAAI,6FAA6F,OAAO,IAAI,SAAS,GAAG;YAC3K,CAAC,CAAC,+BAA+B,GAAG,YAAY,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,SAAS,GAAG,CAAC,CAAC;QACzF,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,0BAA0B,CAAC,GAAY,EAAE,OAAyB;IAEzE,GAAG;SACA,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,sGAAsG,WAAW,EAAE,CAAC;SAChI,MAAM,CAAC,eAAe,EAAE,iEAAiE,CAAC;SAC1F,MAAM,CAAC,QAAQ,EAAE,yBAAyB,CAAC;SAC3C,MAAM,CAAC,CAAC,IAAuC,EAAE,EAAE;QAClD,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,oBAAoB,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;QACrL,MAAM,MAAM,GAAmC,EAAE,CAAC;QAClD,IAAI,SAAS,GAAkB,IAAI,CAAC;QACpC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;gBACtB,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC;YAC3B,CAAC;iBAAM,CAAC;gBACN,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACnD,KAAK,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;oBACxD,IAAI,GAAG,KAAK,SAAS;wBAAE,SAAS,CAAC,eAAe;oBAChD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,KAAK,MAAM,IAAI,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;wBAAE,SAAS;oBACxF,MAAM,OAAO,GAAG,2BAA2B,CAAC,GAAG,EAAE,GAAG,IAAI,oBAAoB,CAAC,CAAC;oBAC9E,IAAI,OAAO,EAAE,CAAC;wBACZ,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;wBACpC,SAAS;oBACX,CAAC;oBACD,MAAM,CAAC,GAAG,iCAAiC,CAAC,GAAa,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;oBACtF,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,eAAe,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;gBAC/J,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;QACtH,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,CAAC,IAAI,QAAQ;gBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YACnG,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBAC5B,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,oCAAoC,CAAC,CAAC,CAAC,mDAAmD,CAAC,CAAC;gBAC5H,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;oBACvB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO;wBACnB,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,eAAe,CAAC,CAAC,OAAO,EAAE;wBACnE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,cAAc,aAAa,CAAC,CAAC,OAAO,IAAI,GAAG,oBAAoB,CAAC,CAAC,aAAa,sBAAsB,CAAC,CAAC,eAAe,GAAG,CAAC,CAAC;gBAC/K,CAAC;YACH,CAAC;YACD,IAAI,SAAS;gBAAE,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACxC,OAAO,CAAC,GAAG,CAAC,KAAK,WAAW,EAAE,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,SAAS;YAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEL,GAAG;SACA,OAAO,CAAC,kBAAkB,CAAC;SAC3B,WAAW,CAAC,6HAA6H,CAAC;SAC1I,MAAM,CAAC,eAAe,EAAE,mEAAmE,CAAC;SAC5F,MAAM,CAAC,QAAQ,EAAE,yBAAyB,CAAC;SAC3C,MAAM,CAAC,CAAC,SAAiB,EAAE,IAAuC,EAAE,EAAE;QACrE,IAAK,cAAoC,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9D,MAAM,GAAG,GAAG;gBACV,IAAI,EAAE,SAAS;gBACf,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC;gBACtB,MAAM,EAAE,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;gBAC5D,WAAW,EAAE,oBAAoB,CAAC,SAAS,CAAC,IAAI,EAAE;gBAClD,UAAU,EAAE,sBAAsB,MAAM,CAAC,SAAS,CAAC,EAAE;gBACrD,aAAa,EAAE,oBAAoB,CAAC,SAAS,CAAC;gBAC9C,WAAW,EAAE,WAAW;aACzB,CAAC;YACF,IAAI,IAAI,CAAC,IAAI;gBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;iBAC3C,CAAC;gBACJ,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;gBAChD,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,CAAC,UAAU,qBAAqB,GAAG,CAAC,aAAa,GAAG,CAAC,CAAC;gBACrF,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAC/B,CAAC;YACD,OAAO;QACT,CAAC;QACD,sFAAsF;QACtF,MAAM,GAAG,GAAG,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QACrE,MAAM,OAAO,GAAG,2BAA2B,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAC/D,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACvB,OAAO,CAAC,KAAK,CAAC,oBAAoB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,IAAI,YAAY,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QACjC,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;gBACtB,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC5B,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YACD,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC7C,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC3B,CAAC;QACD,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QACvD,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,KAAK,CAAC,kBAAkB,GAAG,uBAAuB,cAAc,0CAA0C,MAAM,oCAAoC,CAAC,CAAC;YAC9J,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;YACtB,OAAO,CAAC,KAAK,CAAC,kBAAkB,GAAG,QAAQ,cAAc,gBAAgB,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YACzF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACxD,MAAM,UAAU,GAAG,iCAAiC,CAAC,GAAG,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;QACrF,MAAM,GAAG,GAAG;YACV,GAAG;YACH,MAAM,EAAE,QAAQ;YAChB,cAAc;YACd,YAAY;YACZ,OAAO,EAAE,UAAU,CAAC,OAAO,IAAI,IAAI;YACnC,aAAa,EAAE,UAAU,CAAC,aAAa;YACvC,eAAe,EAAE,UAAU,CAAC,eAAe;YAC3C,aAAa,EAAE,QAAQ,CAAC,EAAE;YAC1B,cAAc,EAAE,QAAQ,CAAC,MAAM;YAC/B,WAAW,EAAE,WAAW;SACzB,CAAC;QACF,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;aAC3C,CAAC;YACJ,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,MAAM,cAAc,EAAE,CAAC,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC,CAAC;YAC5C,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM;oBAAE,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;YACnF,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEL,GAAG;SACA,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,4JAA4J,CAAC;SACzK,cAAc,CAAC,eAAe,EAAE,8DAA8D,CAAC;SAC/F,MAAM,CAAC,QAAQ,EAAE,yBAAyB,CAAC;SAC3C,MAAM,CAAC,CAAC,IAAsC,EAAE,EAAE;QACjD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;YACtB,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5B,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,GAAG,CAAC;QAC7B,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE;YACzC,+FAA+F;YAC/F,mFAAmF;YACnF,MAAM,SAAS,GAAG,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAC5E,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,yOAAyO,EAAE,CAAC;YAClS,CAAC;YACD,MAAM,OAAO,GAAG,2BAA2B,CAAC,SAAS,EAAE,GAAG,IAAI,oBAAoB,CAAC,CAAC;YACpF,IAAI,OAAO,EAAE,CAAC;gBACZ,UAAU,GAAG,IAAI,CAAC;gBAClB,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;YACxD,CAAC;YACD,MAAM,CAAC,GAAG,iCAAiC,CAAC,SAAmB,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;YAC5F,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;QAC9F,CAAC,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;QAC/E,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;aAC3C,CAAC;YACJ,OAAO,CAAC,GAAG,CAAC,SAAS,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YACxC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;gBACvB,IAAI,SAAS,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO;oBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,SAAS,eAAe,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;;oBAC7F,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,SAAS,IAAI,UAAU,MAAM,MAAM,CAAE,CAA0B,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC/G,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC3B,CAAC;QACD,2FAA2F;QAC3F,IAAI,UAAU;YAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEL,GAAG;SACA,OAAO,CAAC,cAAc,CAAC;SACvB,WAAW,CAAC,4fAA4f,WAAW,EAAE,CAAC;SACthB,MAAM,CAAC,eAAe,EAAE,8DAA8D,CAAC;SACvF,MAAM,CAAC,eAAe,EAAE,sRAAsR,CAAC;SAC/S,MAAM,CAAC,iBAAiB,EAAE,0CAA0C,CAAC;SACrE,MAAM,CAAC,sBAAsB,EAAE,uFAAuF,CAAC;SACvH,MAAM,CAAC,QAAQ,EAAE,yBAAyB,CAAC;SAC3C,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,IAA0F,EAAE,EAAE;QACzH,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,EAAE,CAAC;YAC5D,OAAO,CAAC,KAAK,CAAC,2GAA2G,CAAC,CAAC;YAC3H,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAC/D,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,0BAA0B,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACxE,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;aAC5C,CAAC;YACJ,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1B,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC3B,IAAI,IAAI,CAAC,MAAM;oBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC1C,IAAI,IAAI,CAAC,OAAO;oBAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AAEP,CAAC;AAED,qFAAqF;AACrF,OAAO,EAAE,oBAAoB,EAAE,CAAC"}

package/dist/commands/provider.d.ts

@@ -1,4 +1,6 @@
 import { Command } from "commander";
 import type { StatusDeps } from "./status.js";
+export declare const USAGE_ACROSS_HOSTS_READ_TIMEOUT_MS = 20000;
+export declare const USAGE_ACROSS_HOSTS_REFRESH_TIMEOUT_MS = 75000;
 export declare function providerCommand(depsOverride?: StatusDeps): Command;
 //# sourceMappingURL=provider.d.ts.map

package/dist/commands/provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../../src/commands/provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIpC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAU9C,wBAAgB,eAAe,CAAC,YAAY,CAAC,EAAE,UAAU,GAAG,OAAO,CAiQlE"}
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../../src/commands/provider.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIpC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAY9C,eAAO,MAAM,kCAAkC,QAAS,CAAC;AAGzD,eAAO,MAAM,qCAAqC,QAAS,CAAC;AAE5D,wBAAgB,eAAe,CAAC,YAAY,CAAC,EAAE,UAAU,GAAG,OAAO,CAsgBlE"}

package/dist/commands/provider.js

@@ -1,3 +1,4 @@
+import fs from "node:fs";
 import { Command } from "commander";
 import { DaemonClient } from "../client.js";
 import { getDaemonStatus, getDaemonUrl, daemonStatusGuard } from "../daemon-lifecycle.js";
@@ -9,6 +10,12 @@ import { realDeps } from "./daemon.js";
 // route; the real precheck-gated switch + rig-auth codex composition + durable action record live
 // in the daemon routes/service (seams B/C/D), where seam D resolves the CLI-local auth
 // composition/package boundary. Every verb is --json-stable for agents.
+// The daemon answers the view across hosts within its own 15 s deadline, whatever the registry's size (hosts it hasn't
+// heard from by then are listed as such). 15 s + 5 s for its own read model and the transfer = 20 s.
+export const USAGE_ACROSS_HOSTS_READ_TIMEOUT_MS = 20_000;
+// The refresh answers after its slowest leg (Codex 50 s; all legs run at once), with the same view by its 15 s
+// deadline: 50 s + 15 s + a 10 s margin = 75 s.
+export const USAGE_ACROSS_HOSTS_REFRESH_TIMEOUT_MS = 75_000;
 export function providerCommand(depsOverride) {
     const cmd = new Command("provider").description("Provider accounts, usage signals, and interruption-safe account switching");
     const getDeps = () => depsOverride ?? { lifecycleDeps: realDeps(), clientFactory: (url) => new DaemonClient(url) };
@@ -24,7 +31,11 @@ export function providerCommand(depsOverride) {
         if (res.status < 400)
             return false;
         const p = (res.data ?? {});
-        console.error(p.errors ?? p.error ?? `${label} failed (HTTP ${res.status})`);
+        // Slice 18 — the move record's switch is off: say so, and how to turn it on, rather than the bare code.
+        if (p.error === "subscription_moves_disabled" && typeof p.message === "string")
+            console.error(p.message);
+        else
+            console.error(p.errors ?? p.error ?? `${label} failed (HTTP ${res.status})`);
         process.exitCode = res.status >= 500 ? 2 : 1;
         return true;
     }
@@ -117,54 +128,211 @@ export function providerCommand(depsOverride) {
         // prints beside the kept reading.
         if (Array.isArray(m["usage"]))
             renderUsage(m["usage"]);
+        if (Array.isArray(m["seatAccounts"]))
+            renderSeatAccounts(m["seatAccounts"]);
+    }
+    // Slice 01 — each seat's configured account and its source (present only while provider.usage_windows is on).
+    // Configuration, never an observed account: the allowance stays unlinked, with the reason.
+    // A failure's reason and detail as served. Both are optional in the read model: an absent reason reads "no reason
+    // given" and an absent detail drops its clause, never "undefined". When both are served the text is unchanged.
+    function failureText(f) {
+        return `${f["reason"] ?? "no reason given"}${f["detail"] !== undefined ? ` (${f["detail"]})` : ""}`;
+    }
+    function renderSeatAccounts(rows, where = "") {
+        console.log(`SEATS${where} (configured account; not proof of the login a running session uses)`);
+        for (const r of rows) {
+            const c = (r["configured"] ?? {});
+            const configured = c["source"] === "registry"
+                ? `configured: profile ${c["profileRef"]} (registry, recorded ${c["recordedAt"]}${c["profileSaved"] === false ? "; profile not saved on this host" : c["profileSaved"] === null ? "; whether the profile is saved: unknown" : ""})`
+                : c["source"] === "default_login"
+                    ? `configured: default login${c["home"] ? ` (${c["home"]})` : ""}`
+                    : `configured: unknown (${c["reason"]})`;
+            const allowance = (r["allowance"] ?? {});
+            console.log(`  ${r["seatSession"]}  ${r["runtime"]}  ${configured} · allowance not linked`);
+            if (c["source"] === "default_login" && c["homeNote"])
+                console.log(`    ${c["homeNote"]}`);
+            for (const note of r["registryNotes"] ?? [])
+                console.log(`    ${note}`);
+            const observed = r["observed"];
+            const differs = observed?.["differsFrom"] ?? [];
+            if (differs.length)
+                console.log(`    observed: differs from ${differs.join(", ")}${observed?.["note"] !== undefined ? ` (${observed["note"]})` : ""}`);
+            else if (observed?.["windowsSampled"] === true)
+                console.log(`    observed: this seat's status line last reported windows at ${observed["lastSampledAt"] ?? "an unknown time"}`);
+            else if (observed?.["windowsSampled"] === false)
+                console.log("    observed: no status-line windows from this seat yet");
+            else if (observed?.["note"])
+                console.log(`    observed: ${observed["note"]}`);
+            if (allowance["reason"])
+                console.log(`    allowance not linked: ${allowance["reason"]}`);
+        }
     }
     function windowName(w) {
         const mins = w["durationMins"];
         const label = mins === 300 ? "5h" : mins === 10080 ? "weekly" : typeof mins === "number" ? `${mins} min` : null;
         return label ? `${label} (${w["window"]})` : String(w["window"]);
     }
+    function identityLabel(id) {
+        // Codex: account, else the workspace account/read reported; Claude: the organisation and email auth status
+        // reported at the last refresh; else unresolved. For Codex the email is a label.
+        return id["accountId"] ? `account ${id["accountId"]}`
+            : id["workspaceId"] ? `workspace ${id["workspaceId"]} (from account/read; no usage account id)`
+                : id["source"] !== "unresolved" && id["orgId"] ? `organisation ${id["orgName"] ? `${id["orgName"]} (${id["orgId"]})` : id["orgId"]}`
+                    : "identity unresolved";
+    }
     function renderUsage(rows) {
         console.log("USAGE (read on request: rig provider status --refresh)");
-        for (const r of rows) {
-            const id = r["identity"];
-            if (!id) {
-                console.log(`  ${r["provider"]}  unavailable: ${r["unavailableReason"] ?? "no reading"}`);
-                continue;
+        for (const r of rows)
+            renderUsageRow(r);
+        const saved = rows.find((r) => r["savedProfiles"])?.["savedProfiles"];
+        if (saved)
+            console.log(`  ${saved["note"]}: ${(saved["names"] ?? []).join(", ")}`);
+    }
+    function renderUsageRow(r, pad = "  ") {
+        const id = r["identity"];
+        if (!id) {
+            console.log(`${pad}${r["provider"]}  unavailable: ${r["unavailableReason"] ?? "no reading"}`);
+            return;
+        }
+        // Identity first; for Codex the email is a label.
+        const labels = [identityLabel(id), `bucket ${id["limitId"]}`, id["email"] ?? "email not reported", id["planType"], id["subscriptionType"], `seats ${r["seats"] ?? "unknown"}`]
+            .filter((x) => x !== null && x !== undefined);
+        // Not from the latest read: say only that. A later read proves no other account (an unresolved read
+        // may be this same login), so the label names the read, not an account.
+        const earlier = r["latestFromSource"] ? ""
+            : id["source"] === "unresolved" ? "  [from an earlier read; possibly this same login]"
+                : "  [from an earlier read; the latest read didn't match this row]";
+        console.log(`${pad}${r["provider"]}  ${labels.join(" · ")}${earlier}`);
+        if (r["identityNote"])
+            console.log(`${pad}  ${r["identityNote"]}`);
+        const unresolved = r["unresolved"];
+        if (unresolved) {
+            const dropped = Number(unresolved["droppedReads"] ?? 0);
+            console.log(`${pad}  not matched to, merged with or replacing any other row; kept from the ${unresolved["keptReads"]} most recent unresolved reads${dropped > 0 ? ` (${dropped} older dropped)` : ""}`);
+        }
+        for (const w of r["windows"] ?? []) {
+            const left = w["remainingPercent"] === null ? "?% left" : `${w["remainingPercent"]}% left`;
+            const level = w["levelReason"] ? `${w["level"]} (${w["levelReason"]})` : String(w["level"]);
+            const fresh = w["freshnessReason"] ? `${w["freshness"]}: ${w["freshnessReason"]}` : String(w["freshness"]);
+            const seat = w["seatSession"] ? ` by seat ${w["seatSession"]}` : "";
+            console.log(`${pad}  ${windowName(w)}  ${left}  ${level}  resets ${w["resetsAt"] ?? "unknown"}  observed ${w["observedAt"]}${seat} (${fresh})`);
+            for (const d of w["disagreeingSeats"] ?? []) {
+                console.log(`${pad}    seat ${d["seatSession"]} reports ${Math.max(0, 100 - Number(d["usedPercent"]))}% left  resets ${d["resetsAt"] ?? "unknown"}  observed ${d["observedAt"]}`);
             }
-            // Identity first (account, else the workspace account/read reported, else unresolved); email is a label.
-            const identity = id["accountId"] ? `account ${id["accountId"]}`
-                : id["workspaceId"] ? `workspace ${id["workspaceId"]} (from account/read; no usage account id)`
-                    : "identity unresolved";
-            const labels = [identity, `bucket ${id["limitId"]}`, id["email"] ?? "email not reported", id["planType"], "seats unknown"]
-                .filter((x) => x !== null && x !== undefined);
-            // Not from the latest read: say only that. A later read proves no other account (an unresolved read
-            // may be this same login), so the label names the read, not an account.
-            const earlier = r["latestFromSource"] ? ""
-                : id["source"] === "unresolved" ? "  [from an earlier read]"
-                    : "  [from an earlier read; the latest read didn't match this row]";
-            console.log(`  ${r["provider"]}  ${labels.join(" · ")}${earlier}`);
-            const unresolved = r["unresolved"];
-            if (unresolved) {
-                const dropped = Number(unresolved["droppedReads"] ?? 0);
-                console.log(`    not matched to, merged with or replacing any other row; kept from the ${unresolved["keptReads"]} most recent unresolved reads${dropped > 0 ? ` (${dropped} older dropped)` : ""}`);
+        }
+        if ((r["windows"] ?? []).length === 0 && r["unavailableReason"])
+            console.log(`${pad}  ${r["unavailableReason"]}`);
+        if (r["limitEvidence"])
+            console.log(`${pad}  limit evidence: ${r["limitEvidence"]}`);
+        const last = r["lastRefresh"];
+        if (last?.["outcome"] === "failed") {
+            // Claude's refresh reads identity only; its windows keep coming from the seats' samples.
+            console.log(r["provider"] === "claude"
+                ? `${pad}  identity refresh failed at ${last["at"]}: ${failureText(last)}; the identity shown is from the last refresh that worked, if any`
+                : `${pad}  refresh failed at ${last["at"]}: ${failureText(last)}; last reading kept, marked old`);
+        }
+        console.log(`${pad}  current availability: ${r["currentAvailability"]}`);
+    }
+    // Slice 01 — usage across registered hosts, as the daemon serves it: each host's status and whether it serves usage
+    // windows, then one entry per allowance with every host's own observation (never summed), then each host's
+    // configured seats. Nothing here re-derives a level, a freshness or a link.
+    function renderAcrossHosts(v) {
+        console.log("USAGE ACROSS HOSTS (what each host already holds; read them now: rig provider status --all-hosts --refresh)");
+        console.log("HOSTS");
+        for (const h of v["hosts"] ?? []) {
+            const transport = h["status"] === "ok" ? "answered" : `${h["status"]}${h["error"] ? ` (${h["error"]})` : ""}`;
+            const usage = h["usage"] === "served" ? "usage windows served" : `usage ${h["usage"]}${h["usageReason"] ? `: ${h["usageReason"]}` : ""}`;
+            console.log(`  ${h["hostId"]}  ${transport} · ${usage}${h["readAt"] ? ` · read ${h["readAt"]}` : ""}`);
+            const last = (h["lastRefresh"] ?? {});
+            for (const leg of Object.values(last)) {
+                console.log(leg["outcome"] === "failed"
+                    ? `    refresh from here (${leg["provider"]}) failed at ${leg["at"]}: ${failureText(leg)}; this host's earlier observations are kept`
+                    : `    refresh from here (${leg["provider"]}) answered at ${leg["at"]}`);
             }
-            for (const w of r["windows"] ?? []) {
-                const left = w["remainingPercent"] === null ? "?% left" : `${w["remainingPercent"]}% left`;
-                const level = w["levelReason"] ? `${w["level"]} (${w["levelReason"]})` : String(w["level"]);
-                const fresh = w["freshnessReason"] ? `${w["freshness"]}: ${w["freshnessReason"]}` : String(w["freshness"]);
-                console.log(`    ${windowName(w)}  ${left}  ${level}  resets ${w["resetsAt"] ?? "unknown"}  observed ${w["observedAt"]} (${fresh})`);
+        }
+        for (const s of v["skipped"] ?? [])
+            console.log(`  ${s["hostId"]}  skipped: ${s["reason"]}`);
+        const registry = (v["registry"] ?? {});
+        if (registry["state"] !== "read")
+            console.log(`  host registry ${registry["state"]}${registry["note"] ? `: ${registry["note"]}` : ""}`);
+        console.log("ALLOWANCES (one entry per allowance; each host's observation kept as that host served it, never summed)");
+        for (const g of v["items"] ?? []) {
+            const obs = g["observations"] ?? [];
+            const hosts = [...new Set(obs.map((o) => String(o["hostId"])))];
+            const first = (obs[0]?.["row"] ?? {});
+            const id = first["identity"];
+            const linkage = g["linkage"] === "same" ? `the same allowance on ${hosts.length} hosts: ${hosts.join(", ")}`
+                : g["linkage"] === "conflict" ? `the same allowance on ${hosts.length} hosts, disagreeing: ${hosts.join(", ")}`
+                    : g["linkage"] === "single" ? `observed on ${hosts[0]}`
+                        : `linkage unknown; observed on ${hosts.join(", ")}`;
+            const identity = id ? `${identityLabel(id)} · bucket ${id["limitId"]}` : "not read yet";
+            console.log(`  ${g["provider"]}  ${identity}  [${linkage}]`);
+            for (const note of g["notes"] ?? [])
+                console.log(`    ! ${note}`);
+            for (const o of obs) {
+                console.log(`    on ${o["hostId"]} (read ${o["readAt"]}):`);
+                renderUsageRow(o["row"], "      ");
+            }
+        }
+        for (const s of v["seatAccounts"] ?? []) {
+            renderSeatAccounts(s["seats"] ?? [], ` on ${s["hostId"]}`);
+        }
+    }
+    // A host where Claude doesn't apply (no claude, no login, not a subscription login, or no Claude refresh there) is a
+    // note under a bare --refresh, as on one host; naming --provider claude makes it count.
+    const CLAUDE_NOT_APPLICABLE = new Set(["binary_not_found", "not_logged_in", "not_subscription_login", "not_available"]);
+    async function statusAcrossHosts(client, opts) {
+        const hosts = (opts.hosts ?? "").split(",").map((h) => h.trim()).filter(Boolean);
+        if (opts.hosts !== undefined && hosts.length === 0) {
+            console.error("--hosts needs at least one registered host id (comma-separated); for every host use --all-hosts");
+            process.exitCode = 1;
+            return;
+        }
+        const offLine = (data) => (data ?? {}).message ?? "usage windows are off on this daemon (provider.usage_windows)";
+        let view;
+        let refreshExit = 0;
+        if (opts.refresh) {
+            // One request for every asked provider: its answer carries each leg and the view, so the view isn't read again.
+            const answer = await client.post("/api/provider/usage/hosts/refresh", { providers: opts.provider ? [opts.provider] : ["codex", "claude"], ...(hosts.length > 0 ? { hosts } : {}) }, { timeoutMs: USAGE_ACROSS_HOSTS_REFRESH_TIMEOUT_MS });
+            if (answer.status === 409) {
+                console.error(offLine(answer.data));
+                process.exitCode = 1;
+                return;
             }
-            if (r["limitEvidence"])
-                console.log(`    limit evidence: ${r["limitEvidence"]}`);
-            const last = r["lastRefresh"];
-            if (last?.["outcome"] === "failed") {
-                console.log(`    refresh failed at ${last["at"]}: ${last["reason"]} (${last["detail"]}); last reading kept, marked old`);
+            if (handleHttpError(answer, "refresh usage across hosts"))
+                return;
+            for (const leg of answer.data["refresh"] ?? []) {
+                if (leg["outcome"] !== "failed")
+                    continue;
+                const line = `refresh ${leg["provider"]} on ${leg["hostId"]} failed: ${failureText(leg)}`;
+                if (opts.provider === undefined && leg["provider"] === "claude" && CLAUDE_NOT_APPLICABLE.has(String(leg["reason"]))) {
+                    console.error(`note: ${line}; exit unaffected (name --provider claude to require it)`);
+                }
+                else {
+                    console.error(line);
+                    refreshExit = 1;
+                }
             }
-            console.log(`    current availability: ${r["currentAvailability"]}`);
+            view = (answer.data["view"] ?? {});
         }
-        const saved = rows.find((r) => r["savedProfiles"])?.["savedProfiles"];
-        if (saved)
-            console.log(`  ${saved["note"]}: ${(saved["names"] ?? []).join(", ")}`);
+        else {
+            const res = await client.get(`/api/provider/usage/hosts${hosts.length > 0 ? `?hosts=${encodeURIComponent(hosts.join(","))}` : ""}`, { timeoutMs: USAGE_ACROSS_HOSTS_READ_TIMEOUT_MS });
+            if (res.status === 409) {
+                console.error(offLine(res.data));
+                process.exitCode = 1;
+                return;
+            }
+            if (handleHttpError(res, "read usage across hosts"))
+                return;
+            view = res.data;
+        }
+        // A host not heard from in time is listed like any host that couldn't be read; only a failed refresh leg sets the exit.
+        if (refreshExit > 0)
+            process.exitCode = refreshExit;
+        if (opts.json)
+            console.log(JSON.stringify(view));
+        else
+            renderAcrossHosts(view);
     }
     // Shared daemon-backed read for the FILTERED blocks: --json verbatim, human = pretty JSON (§3
     // allows pretty JSON for the filtered blocks; only `status` gets the projection).
@@ -183,34 +351,81 @@ export function providerCommand(depsOverride) {
         .command("status")
         .description("The whole four-block provider read model (accounts, bindings, signals)")
         .option("--json", "Output as parseable JSON")
-        .option("--refresh", "First read the Codex login's usage windows natively (up to 35 s; needs provider.usage_windows on)")
+        .option("--refresh", "First read the Codex login's usage windows and the Claude login's identity natively (up to 35 s; needs provider.usage_windows on)")
+        .option("--provider <p>", "With --refresh, read only this provider (codex|claude)")
+        .option("--all-hosts", "Usage windows across every registered host, as each host already holds them (needs provider.usage_windows on)")
+        .option("--hosts <ids>", "Like --all-hosts, for these registered hosts (comma-separated); this host is always included, so --hosts b --refresh also reads this daemon")
         .action(async (opts) => {
+        if (opts.provider !== undefined && opts.provider !== "codex" && opts.provider !== "claude") {
+            console.error(`--provider must be codex or claude (got ${opts.provider})`);
+            process.exitCode = 1;
+            return;
+        }
         const client = await getClient(getDeps());
         if (!client) {
             process.exitCode = 1;
             return;
         }
-        let refreshFailed = false;
+        if (opts.allHosts || opts.hosts !== undefined) {
+            await statusAcrossHosts(client, opts);
+            return;
+        }
+        let refreshExit = 0;
         if (opts.refresh) {
-            // The daemon's worst case is the 35 s read deadline plus stopping the reader (stdin EOF, TERM,
-            // KILL and reap, up to 2 s each: ~8 s), so ~43 s before it answers. Wait 60 s so a slow-dying
-            // child never turns the daemon's answer into a transport error here.
-            const refreshed = await client.post("/api/provider/usage/refresh", { provider: "codex" }, { timeoutMs: 60_000 });
-            if (refreshed.status === 409) {
-                const p = (refreshed.data ?? {});
+            // The daemon's worst case is a read's deadline plus stopping what it started: Codex 35 s plus ~8 s
+            // (stdin EOF, TERM, KILL and reap, up to 2 s each); Claude's auth status 10 s plus ~3 s. Wait 60 s so
+            // a slow-dying child never turns the daemon's answer into a transport error here. Both providers are
+            // read in parallel unless --provider names one.
+            const providers = opts.provider ? [opts.provider] : ["codex", "claude"];
+            const answered = await Promise.all(providers.map(async (provider) => ({
+                provider,
+                answer: await client.post("/api/provider/usage/refresh", { provider }, { timeoutMs: 60_000 }),
+            })));
+            // Bare --refresh keeps main's Codex exit: Claude is read too, but where it doesn't apply on this host
+            // (no claude, no login, not a subscription login), or the daemon has no Claude refresh (400/404, an
+            // older daemon), that is a note, not a failure. Naming --provider claude makes it count.
+            const implicit = opts.provider === undefined;
+            const notApplicable = ({ provider, answer }) => {
+                if (!implicit || provider !== "claude")
+                    return false;
+                if (answer.status === 400 || answer.status === 404)
+                    return true;
+                const reason = answer.status === 200 ? answer.data?.["refresh"]?.["reason"] : undefined;
+                return reason === "binary_not_found" || reason === "not_logged_in" || reason === "not_subscription_login";
+            };
+            const counted = answered.filter((a) => !notApplicable(a));
+            if (counted.length > 0 && counted.every((a) => a.answer.status === 409)) {
+                // The switch is off: one line naming it (the first provider's message).
+                const p = (counted[0].answer.data ?? {});
                 console.error(p.message ?? "Codex usage windows are off (provider.usage_windows)");
                 process.exitCode = 1;
                 return;
             }
-            if (handleHttpError(refreshed, "refresh usage windows"))
-                return;
-            refreshFailed = refreshed.data["refresh"]?.["outcome"] === "failed";
+            for (const a of answered) {
+                if (!notApplicable(a))
+                    continue;
+                const refresh = a.answer.status === 200 ? a.answer.data?.["refresh"] : undefined;
+                console.error(refresh
+                    ? `note: Claude usage not read on this host: ${refresh["reason"]} (${refresh["detail"]}); exit unaffected (name --provider claude to require it)`
+                    : "note: this daemon has no Claude usage refresh; exit unaffected");
+            }
+            // A counted provider's refusal or error is printed, and the status is still read and printed for the
+            // other; the exit code then says the refresh didn't fully succeed.
+            for (const { answer } of counted) {
+                if (handleHttpError(answer, "refresh usage windows")) {
+                    refreshExit = Math.max(refreshExit, process.exitCode === 2 ? 2 : 1);
+                    continue;
+                }
+                if (answer.data["refresh"]?.["outcome"] === "failed")
+                    refreshExit = Math.max(refreshExit, 1);
+            }
+            process.exitCode = undefined;
         }
         const res = await client.get("/api/provider/status");
-        if (refreshFailed)
-            process.exitCode = 1;
         if (handleHttpError(res, "read provider status"))
             return;
+        if (refreshExit > 0)
+            process.exitCode = refreshExit;
         if (opts.json)
             console.log(JSON.stringify(res.data));
         else
@@ -283,6 +498,78 @@ export function providerCommand(depsOverride) {
         if (res.data.outcome === "failed_safely")
             process.exitCode = 1;
     });
+    // OPR.0.7.0.18 — the subscription move record. The agent that moves seats records each move it makes or attempts;
+    // it and the observatory read them back. Labels and references only, never credentials. Off unless the daemon's
+    // provider.subscription_moves is on.
+    const moves = cmd
+        .command("moves")
+        .description("Recorded subscription moves, newest first (needs provider.subscription_moves on)")
+        .option("--home <home>", "Only moves of this Codex home")
+        .option("--seat <seat>", "Only moves that restarted or listed this seat")
+        .option("--limit <n>", "At most this many (default 50)")
+        .option("--json", "Output as parseable JSON")
+        .action(async (opts) => {
+        const qs = new URLSearchParams();
+        if (opts.home)
+            qs.set("home", opts.home);
+        if (opts.seat)
+            qs.set("seat", opts.seat);
+        if (opts.limit)
+            qs.set("limit", opts.limit);
+        const q = qs.toString();
+        await read(`/api/provider/moves${q ? `?${q}` : ""}`, opts.json, "moves");
+    });
+    moves
+        .command("show <id>")
+        .description("One recorded move: seats and results, from and to, the reason, the readings and their age, peers (needs provider.subscription_moves on)")
+        .option("--json", "Output as parseable JSON")
+        .action(async (id, opts, command) => {
+        // `moves` has its own --json, which commander may take for the parent.
+        await read(`/api/provider/moves/${encodeURIComponent(id)}`, opts.json || command.parent?.opts().json, "move");
+    });
+    moves
+        .command("record")
+        .description("Record a move you made or attempted (JSON: home, host, from, to, reason, readings, seats, peers, supersedes; needs provider.subscription_moves on)")
+        .requiredOption("--file <path>", "The move as JSON, or - for stdin")
+        .option("--operator <name>", "Who is recording, when this shell has no seat identity (a seat identity wins)")
+        .option("--json", "Output as parseable JSON")
+        .addHelpText("after", `
+The JSON shape:
+  { "home": "<codex home>", "host": "<machine>", "from": "<subscription>", "to": "<subscription>",
+    "reason": "<why, in your words>",
+    "readings": [{ "subject": "<allowance>", "observedAt": "<ISO time observed>", "summary": "<what it said>" }],
+    "seats": [{ "seat": "<seat>", "result": "moved|unconfirmed|unknown", "missing": "<what's missing>", "evidence": "<verify outcome>" }],
+    "peers": [{ "seat": "<seat>", "note": "not restarted; account unverified" }],
+    "supersedes": "<an earlier move id>" }
+Record unconfirmed and partial moves too. Labels only: never put credentials in a record.
+The record is off by default. Turn it on with: rig config set provider.subscription_moves true`)
+        .action(async (opts, command) => {
+        const json = opts.json || command.parent?.opts().json;
+        let body;
+        try {
+            body = JSON.parse(opts.file === "-" ? fs.readFileSync(0, "utf8") : fs.readFileSync(opts.file, "utf8"));
+        }
+        catch (error) {
+            console.error(`Could not read the move from ${opts.file}: ${error.message}`);
+            process.exitCode = 1;
+            return;
+        }
+        const client = await getClient(getDeps());
+        if (!client) {
+            process.exitCode = 1;
+            return;
+        }
+        if (opts.operator && body !== null && typeof body === "object" && !Array.isArray(body)) {
+            body = { ...body, operator: opts.operator };
+        }
+        const res = await client.post("/api/provider/moves", body);
+        if (handleHttpError(res, "record move"))
+            return;
+        if (json)
+            console.log(JSON.stringify(res.data));
+        else
+            console.log(`Recorded ${res.data.move?.id ?? "the move"}`);
+    });
     return cmd;
 }
 //# sourceMappingURL=provider.js.map