@ornexus/neocortex 3.8.0

package/packages/client/dist/license/license-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"license-client.d.ts","sourceRoot":"","sources":["../../src/license/license-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAcH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAYvD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,UAAU,gBAAgB;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAID,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgB;IACtC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,KAAK,CAAuB;gBAExB,OAAO,EAAE,oBAAoB;IAQzC;;;OAGG;IACG,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAoCxC;;;;OAIG;IACG,QAAQ,IAAI,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IA0BlD;;;;OAIG;IACG,OAAO,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IA0BrE,OAAO,CAAC,kBAAkB;YAcZ,aAAa;CAO5B"}

package/packages/client/dist/license/license-client.js

@@ -0,0 +1,164 @@
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ *
+ * This file is part of Neocortex CLI, licensed under the
+ * Functional Source License, Version 1.1 (FSL-1.1).
+ *
+ * Change Date: February 20, 2029
+ * Change License: MIT
+ *
+ * See the LICENSE file in the project root for full license text.
+ */
+/**
+ * @neocortex/client - License Client
+ *
+ * Manages license activation, JWT token caching, and proactive refresh.
+ * Integrates with the IP Protection Server's license endpoints and
+ * uses EncryptedCache for persistent token storage.
+ *
+ * NEVER throws exceptions - returns null on failure (graceful degradation).
+ */
+import { decodeJwt } from 'jose';
+import { NoOpCache } from '../types/index.js';
+import { getMachineFingerprint } from '../machine/fingerprint.js';
+// ── Constants ────────────────────────────────────────────────────────────
+const CACHE_KEY = 'neocortex:jwt:token';
+const REFRESH_THRESHOLD_S = 3600; // 1 hour before expiry
+const DEFAULT_CLIENT_VERSION = '0.1.0';
+// ── LicenseClient ────────────────────────────────────────────────────────
+export class LicenseClient {
+    serverUrl;
+    licenseKey;
+    cache;
+    clientVersion;
+    machineId;
+    token = null;
+    constructor(options) {
+        this.serverUrl = options.serverUrl.replace(/\/+$/, '');
+        this.licenseKey = options.licenseKey;
+        this.cache = options.cacheProvider ?? new NoOpCache();
+        this.clientVersion = options.clientVersion ?? DEFAULT_CLIENT_VERSION;
+        this.machineId = getMachineFingerprint();
+    }
+    /**
+     * Get a valid JWT token. Checks memory, cache, refresh, then activation.
+     * NEVER throws - returns null on failure.
+     */
+    async getToken() {
+        try {
+            // 1. Check in-memory token
+            if (this.token) {
+                const validity = this.checkTokenValidity(this.token);
+                if (validity === 'valid')
+                    return this.token;
+                if (validity === 'needs-refresh') {
+                    const refreshed = await this.refresh(this.token);
+                    return refreshed?.token ?? this.token;
+                }
+                // expired or invalid - clear memory
+                this.token = null;
+            }
+            // 2. Check cache
+            const cached = await this.loadFromCache();
+            if (cached) {
+                this.token = cached;
+                const validity = this.checkTokenValidity(cached);
+                if (validity === 'valid')
+                    return cached;
+                if (validity === 'needs-refresh') {
+                    const refreshed = await this.refresh(cached);
+                    return refreshed?.token ?? cached;
+                }
+                // expired - clear
+                this.token = null;
+            }
+            // 3. Activate
+            const result = await this.activate();
+            return result?.token ?? null;
+        }
+        catch {
+            return null;
+        }
+    }
+    /**
+     * Activate the license by calling POST /api/v1/license/activate.
+     * Stores token in memory and cache on success.
+     * NEVER throws - returns null on failure.
+     */
+    async activate() {
+        try {
+            const response = await fetch(`${this.serverUrl}/api/v1/license/activate`, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify({
+                    license_key: this.licenseKey,
+                    machine_id: this.machineId,
+                    client_version: this.clientVersion,
+                }),
+            });
+            if (!response.ok)
+                return null;
+            const data = (await response.json());
+            this.token = data.token;
+            // Persist to cache (fire-and-forget)
+            this.cache.set(CACHE_KEY, data.token, data.expires_in * 1000).catch(() => { });
+            return { token: data.token, expiresIn: data.expires_in };
+        }
+        catch {
+            return null;
+        }
+    }
+    /**
+     * Refresh an expiring token by calling POST /api/v1/license/refresh.
+     * Stores new token in memory and cache on success.
+     * NEVER throws - returns null on failure.
+     */
+    async refresh(currentToken) {
+        try {
+            const response = await fetch(`${this.serverUrl}/api/v1/license/refresh`, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                    'Authorization': `Bearer ${currentToken}`,
+                },
+            });
+            if (!response.ok)
+                return null;
+            const data = (await response.json());
+            this.token = data.token;
+            // Persist to cache (fire-and-forget)
+            this.cache.set(CACHE_KEY, data.token, data.expires_in * 1000).catch(() => { });
+            return { token: data.token, expiresIn: data.expires_in };
+        }
+        catch {
+            return null;
+        }
+    }
+    // ── Private Methods ─────────────────────────────────────────────────
+    checkTokenValidity(token) {
+        try {
+            const payload = decodeJwt(token);
+            if (!payload.exp)
+                return 'expired';
+            const now = Math.floor(Date.now() / 1000);
+            if (payload.exp <= now)
+                return 'expired';
+            if (payload.exp - now <= REFRESH_THRESHOLD_S)
+                return 'needs-refresh';
+            return 'valid';
+        }
+        catch {
+            return 'expired';
+        }
+    }
+    async loadFromCache() {
+        try {
+            return await this.cache.get(CACHE_KEY);
+        }
+        catch {
+            return null;
+        }
+    }
+}
+//# sourceMappingURL=license-client.js.map

package/packages/client/dist/license/license-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"license-client.js","sourceRoot":"","sources":["../../src/license/license-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH;;;;;;;;GAQG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAGjC,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAElE,4EAA4E;AAE5E,MAAM,SAAS,GAAG,qBAAqB,CAAC;AACxC,MAAM,mBAAmB,GAAG,IAAI,CAAC,CAAC,uBAAuB;AACzD,MAAM,sBAAsB,GAAG,OAAO,CAAC;AAgBvC,4EAA4E;AAE5E,MAAM,OAAO,aAAa;IACP,SAAS,CAAS;IAClB,UAAU,CAAS;IACnB,KAAK,CAAgB;IACrB,aAAa,CAAS;IACtB,SAAS,CAAS;IAC3B,KAAK,GAAkB,IAAI,CAAC;IAEpC,YAAY,OAA6B;QACvC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,aAAa,IAAI,IAAI,SAAS,EAAE,CAAC;QACtD,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,sBAAsB,CAAC;QACrE,IAAI,CAAC,SAAS,GAAG,qBAAqB,EAAE,CAAC;IAC3C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC;YACH,2BAA2B;YAC3B,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACrD,IAAI,QAAQ,KAAK,OAAO;oBAAE,OAAO,IAAI,CAAC,KAAK,CAAC;gBAC5C,IAAI,QAAQ,KAAK,eAAe,EAAE,CAAC;oBACjC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACjD,OAAO,SAAS,EAAE,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC;gBACxC,CAAC;gBACD,oCAAoC;gBACpC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YACpB,CAAC;YAED,iBAAiB;YACjB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;YAC1C,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC;gBACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;gBACjD,IAAI,QAAQ,KAAK,OAAO;oBAAE,OAAO,MAAM,CAAC;gBACxC,IAAI,QAAQ,KAAK,eAAe,EAAE,CAAC;oBACjC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;oBAC7C,OAAO,SAAS,EAAE,KAAK,IAAI,MAAM,CAAC;gBACpC,CAAC;gBACD,kBAAkB;gBAClB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YACpB,CAAC;YAED,cAAc;YACd,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACrC,OAAO,MAAM,EAAE,KAAK,IAAI,IAAI,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,0BAA0B,EAAE;gBACxE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,WAAW,EAAE,IAAI,CAAC,UAAU;oBAC5B,UAAU,EAAE,IAAI,CAAC,SAAS;oBAC1B,cAAc,EAAE,IAAI,CAAC,aAAa;iBACnC,CAAC;aACH,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC;YAE9B,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA0C,CAAC;YAC9E,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YAExB,qCAAqC;YACrC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAE9E,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO,CAAC,YAAoB;QAChC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,yBAAyB,EAAE;gBACvE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,eAAe,EAAE,UAAU,YAAY,EAAE;iBAC1C;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC;YAE9B,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA0C,CAAC;YAC9E,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YAExB,qCAAqC;YACrC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAE9E,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,uEAAuE;IAE/D,kBAAkB,CAAC,KAAa;QACtC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YACjC,IAAI,CAAC,OAAO,CAAC,GAAG;gBAAE,OAAO,SAAS,CAAC;YAEnC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YAC1C,IAAI,OAAO,CAAC,GAAG,IAAI,GAAG;gBAAE,OAAO,SAAS,CAAC;YACzC,IAAI,OAAO,CAAC,GAAG,GAAG,GAAG,IAAI,mBAAmB;gBAAE,OAAO,eAAe,CAAC;YACrE,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,aAAa;QACzB,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF"}

package/packages/client/dist/machine/fingerprint.d.ts

@@ -0,0 +1,24 @@
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ *
+ * This file is part of Neocortex CLI, licensed under the
+ * Functional Source License, Version 1.1 (FSL-1.1).
+ *
+ * Change Date: February 20, 2029
+ * Change License: MIT
+ *
+ * See the LICENSE file in the project root for full license text.
+ */
+/**
+ * Generate a stable machine fingerprint as a SHA-256 hex digest.
+ *
+ * Combines: hostname | platform | arch | cpu model | sorted MAC addresses
+ *
+ * The fingerprint is deterministic and stable across process restarts
+ * and reboots on the same machine. Minor OS updates should not change it.
+ *
+ * @returns 64-character hex string (SHA-256 digest)
+ */
+export declare function getMachineFingerprint(): string;
+//# sourceMappingURL=fingerprint.d.ts.map

package/packages/client/dist/machine/fingerprint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.d.ts","sourceRoot":"","sources":["../../src/machine/fingerprint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAmCH;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,IAAI,MAAM,CAW9C"}

package/packages/client/dist/machine/fingerprint.js

@@ -0,0 +1,61 @@
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ *
+ * This file is part of Neocortex CLI, licensed under the
+ * Functional Source License, Version 1.1 (FSL-1.1).
+ *
+ * Change Date: February 20, 2029
+ * Change License: MIT
+ *
+ * See the LICENSE file in the project root for full license text.
+ */
+/**
+ * @neocortex/client - Machine Fingerprint
+ *
+ * Generates a stable, deterministic machine identifier from hardware/OS
+ * attributes using SHA-256. Used for license activation machine tracking.
+ */
+import { createHash } from 'node:crypto';
+import { arch, cpus, hostname, networkInterfaces, platform } from 'node:os';
+const ALL_ZEROS_MAC = '00:00:00:00:00:00';
+/**
+ * Collect sorted, non-internal MAC addresses from network interfaces.
+ * Filters out internal/loopback interfaces and all-zeros MACs.
+ */
+function collectMacAddresses() {
+    const interfaces = networkInterfaces();
+    const macs = [];
+    for (const entries of Object.values(interfaces)) {
+        if (!entries)
+            continue;
+        for (const entry of entries) {
+            if (!entry.internal && entry.mac !== ALL_ZEROS_MAC) {
+                macs.push(entry.mac);
+            }
+        }
+    }
+    // Sort for determinism regardless of NIC enumeration order
+    return [...new Set(macs)].sort();
+}
+/**
+ * Generate a stable machine fingerprint as a SHA-256 hex digest.
+ *
+ * Combines: hostname | platform | arch | cpu model | sorted MAC addresses
+ *
+ * The fingerprint is deterministic and stable across process restarts
+ * and reboots on the same machine. Minor OS updates should not change it.
+ *
+ * @returns 64-character hex string (SHA-256 digest)
+ */
+export function getMachineFingerprint() {
+    const host = hostname();
+    const plat = platform();
+    const architecture = arch();
+    const cpuList = cpus();
+    const cpuModel = cpuList.length > 0 ? cpuList[0].model : '';
+    const macs = collectMacAddresses();
+    const input = `${host}|${plat}|${architecture}|${cpuModel}|${macs.join(',')}`;
+    return createHash('sha256').update(input).digest('hex');
+}
+//# sourceMappingURL=fingerprint.js.map

package/packages/client/dist/machine/fingerprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.js","sourceRoot":"","sources":["../../src/machine/fingerprint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAE5E,MAAM,aAAa,GAAG,mBAAmB,CAAC;AAE1C;;;GAGG;AACH,SAAS,mBAAmB;IAC1B,MAAM,UAAU,GAAG,iBAAiB,EAAE,CAAC;IACvC,MAAM,IAAI,GAAa,EAAE,CAAC;IAE1B,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,EAAE,CAAC;gBACnD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;IACH,CAAC;IAED,2DAA2D;IAC3D,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACnC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB;IACnC,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC;IACxB,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC;IACxB,MAAM,YAAY,GAAG,IAAI,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,IAAI,EAAE,CAAC;IACvB,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,MAAM,IAAI,GAAG,mBAAmB,EAAE,CAAC;IAEnC,MAAM,KAAK,GAAG,GAAG,IAAI,IAAI,IAAI,IAAI,YAAY,IAAI,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAE9E,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC"}

package/packages/client/dist/machine/index.d.ts

@@ -0,0 +1,6 @@
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ */
+export { getMachineFingerprint } from './fingerprint.js';
+//# sourceMappingURL=index.d.ts.map

package/packages/client/dist/machine/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/machine/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC"}

package/packages/client/dist/machine/index.js

@@ -0,0 +1,6 @@
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ */
+export { getMachineFingerprint } from './fingerprint.js';
+//# sourceMappingURL=index.js.map

package/packages/client/dist/machine/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/machine/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC"}

package/packages/client/dist/resilience/circuit-breaker.d.ts

@@ -0,0 +1,71 @@
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ *
+ * This file is part of Neocortex CLI, licensed under the
+ * Functional Source License, Version 1.1 (FSL-1.1).
+ *
+ * Change Date: February 20, 2029
+ * Change License: MIT
+ *
+ * See the LICENSE file in the project root for full license text.
+ */
+export type CircuitState = 'CLOSED' | 'OPEN' | 'HALF_OPEN';
+export interface CircuitBreakerConfig {
+    /** Number of failures within window to trip circuit. Default: 3 */
+    failureThreshold: number;
+    /** Window in ms for counting failures. Default: 60_000 (60s) */
+    failureWindowMs: number;
+    /** Time in ms before OPEN transitions to HALF_OPEN. Default: 60_000 (60s) */
+    halfOpenAfterMs: number;
+    /** Path to persist circuit state. Default: ~/.neocortex/.circuit-state */
+    stateFilePath: string;
+}
+export interface FailureRecord {
+    timestamp: number;
+}
+export interface CircuitBreakerState {
+    state: CircuitState;
+    failures: FailureRecord[];
+    openedAt: number | null;
+    lastProbeAt: number | null;
+}
+export declare class ClientCircuitBreaker {
+    private readonly config;
+    private internalState;
+    constructor(config?: Partial<CircuitBreakerConfig>, initialState?: CircuitBreakerState);
+    /**
+     * Check if a request can be made to the server.
+     * Returns false if circuit is OPEN (fail-fast to cache).
+     */
+    canCall(): boolean;
+    /**
+     * Record a successful server response. Closes the circuit.
+     */
+    recordSuccess(): Promise<void>;
+    /**
+     * Record a failed server response. Opens circuit after threshold failures in window.
+     */
+    recordFailure(): Promise<void>;
+    /**
+     * Get current circuit breaker state (copy).
+     */
+    getState(): CircuitBreakerState;
+    /**
+     * Reset circuit breaker to initial CLOSED state.
+     */
+    reset(): Promise<void>;
+    /**
+     * Load circuit breaker state from disk.
+     */
+    static loadFromDisk(path?: string): Promise<ClientCircuitBreaker>;
+    /**
+     * Remove failures outside the counting window.
+     */
+    private pruneExpiredFailures;
+    /**
+     * Persist state to disk with atomic write.
+     */
+    private saveToDisk;
+}
+//# sourceMappingURL=circuit-breaker.d.ts.map

package/packages/client/dist/resilience/circuit-breaker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"circuit-breaker.d.ts","sourceRoot":"","sources":["../../src/resilience/circuit-breaker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAwBH,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,MAAM,GAAG,WAAW,CAAC;AAE3D,MAAM,WAAW,oBAAoB;IACnC,mEAAmE;IACnE,gBAAgB,EAAE,MAAM,CAAC;IACzB,gEAAgE;IAChE,eAAe,EAAE,MAAM,CAAC;IACxB,6EAA6E;IAC7E,eAAe,EAAE,MAAM,CAAC;IACxB,0EAA0E;IAC1E,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,YAAY,CAAC;IACpB,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAoBD,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuB;IAC9C,OAAO,CAAC,aAAa,CAAsB;gBAE/B,MAAM,CAAC,EAAE,OAAO,CAAC,oBAAoB,CAAC,EAAE,YAAY,CAAC,EAAE,mBAAmB;IAKtF;;;OAGG;IACH,OAAO,IAAI,OAAO;IA0BlB;;OAEG;IACG,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IAQpC;;OAEG;IACG,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IAmBpC;;OAEG;IACH,QAAQ,IAAI,mBAAmB;IAU/B;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAK5B;;OAEG;WACU,YAAY,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAoBvE;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAO5B;;OAEG;YACW,UAAU;CAiBzB"}

package/packages/client/dist/resilience/circuit-breaker.js

@@ -0,0 +1,171 @@
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ *
+ * This file is part of Neocortex CLI, licensed under the
+ * Functional Source License, Version 1.1 (FSL-1.1).
+ *
+ * Change Date: February 20, 2029
+ * Change License: MIT
+ *
+ * See the LICENSE file in the project root for full license text.
+ */
+/**
+ * @neocortex/client - Persistent Circuit Breaker
+ *
+ * Circuit breaker with file-based state persistence for the CLI client.
+ * Tracks server health using window-based failure counting and persists
+ * state between CLI invocations at ~/.neocortex/.circuit-state.
+ *
+ * States:
+ *   CLOSED    - Normal operation, requests pass through
+ *   OPEN      - Circuit tripped, requests fail immediately (use cache)
+ *   HALF_OPEN - Testing if server recovered (one probe request allowed)
+ *
+ * Story 42.9
+ */
+import { readFile, writeFile, mkdir } from 'node:fs/promises';
+import { dirname } from 'node:path';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+// ── Defaults ──────────────────────────────────────────────────────────────
+const DEFAULT_CONFIG = {
+    failureThreshold: 3,
+    failureWindowMs: 60_000,
+    halfOpenAfterMs: 60_000,
+    stateFilePath: join(homedir(), '.neocortex', '.circuit-state'),
+};
+const INITIAL_STATE = {
+    state: 'CLOSED',
+    failures: [],
+    openedAt: null,
+    lastProbeAt: null,
+};
+// ── ClientCircuitBreaker ──────────────────────────────────────────────────
+export class ClientCircuitBreaker {
+    config;
+    internalState;
+    constructor(config, initialState) {
+        this.config = { ...DEFAULT_CONFIG, ...config };
+        this.internalState = initialState ? { ...initialState } : { ...INITIAL_STATE, failures: [] };
+    }
+    /**
+     * Check if a request can be made to the server.
+     * Returns false if circuit is OPEN (fail-fast to cache).
+     */
+    canCall() {
+        this.pruneExpiredFailures();
+        switch (this.internalState.state) {
+            case 'CLOSED':
+                return true;
+            case 'OPEN': {
+                const now = Date.now();
+                const openedAt = this.internalState.openedAt ?? 0;
+                if (now - openedAt >= this.config.halfOpenAfterMs) {
+                    this.internalState.state = 'HALF_OPEN';
+                    this.internalState.lastProbeAt = now;
+                    return true;
+                }
+                return false;
+            }
+            case 'HALF_OPEN':
+                return true;
+            default:
+                return true;
+        }
+    }
+    /**
+     * Record a successful server response. Closes the circuit.
+     */
+    async recordSuccess() {
+        this.internalState.state = 'CLOSED';
+        this.internalState.failures = [];
+        this.internalState.openedAt = null;
+        this.internalState.lastProbeAt = null;
+        await this.saveToDisk();
+    }
+    /**
+     * Record a failed server response. Opens circuit after threshold failures in window.
+     */
+    async recordFailure() {
+        const now = Date.now();
+        this.internalState.failures.push({ timestamp: now });
+        this.pruneExpiredFailures();
+        if (this.internalState.failures.length >= this.config.failureThreshold) {
+            this.internalState.state = 'OPEN';
+            this.internalState.openedAt = now;
+        }
+        // If in HALF_OPEN and probe fails, go back to OPEN
+        if (this.internalState.state === 'HALF_OPEN') {
+            this.internalState.state = 'OPEN';
+            this.internalState.openedAt = now;
+        }
+        await this.saveToDisk();
+    }
+    /**
+     * Get current circuit breaker state (copy).
+     */
+    getState() {
+        this.pruneExpiredFailures();
+        return {
+            state: this.internalState.state,
+            failures: [...this.internalState.failures],
+            openedAt: this.internalState.openedAt,
+            lastProbeAt: this.internalState.lastProbeAt,
+        };
+    }
+    /**
+     * Reset circuit breaker to initial CLOSED state.
+     */
+    async reset() {
+        this.internalState = { ...INITIAL_STATE, failures: [] };
+        await this.saveToDisk();
+    }
+    /**
+     * Load circuit breaker state from disk.
+     */
+    static async loadFromDisk(path) {
+        const filePath = path ?? DEFAULT_CONFIG.stateFilePath;
+        try {
+            const raw = await readFile(filePath, 'utf8');
+            const data = JSON.parse(raw);
+            // Validate loaded state
+            if (!data.state || !Array.isArray(data.failures)) {
+                return new ClientCircuitBreaker({ stateFilePath: filePath });
+            }
+            return new ClientCircuitBreaker({ stateFilePath: filePath }, data);
+        }
+        catch {
+            // File doesn't exist or is corrupted - start fresh
+            return new ClientCircuitBreaker({ stateFilePath: filePath });
+        }
+    }
+    // ── Private ─────────────────────────────────────────────────────────
+    /**
+     * Remove failures outside the counting window.
+     */
+    pruneExpiredFailures() {
+        const cutoff = Date.now() - this.config.failureWindowMs;
+        this.internalState.failures = this.internalState.failures.filter((f) => f.timestamp > cutoff);
+    }
+    /**
+     * Persist state to disk with atomic write.
+     */
+    async saveToDisk() {
+        try {
+            const dir = dirname(this.config.stateFilePath);
+            await mkdir(dir, { recursive: true });
+            const tmpPath = `${this.config.stateFilePath}.tmp`;
+            const data = JSON.stringify(this.internalState, null, 2);
+            await writeFile(tmpPath, data, 'utf8');
+            // Atomic rename
+            const { rename } = await import('node:fs/promises');
+            await rename(tmpPath, this.config.stateFilePath);
+        }
+        catch {
+            // Persistence failures are non-critical - circuit breaker
+            // still works in-memory for current session
+        }
+    }
+}
+//# sourceMappingURL=circuit-breaker.js.map

package/packages/client/dist/resilience/circuit-breaker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"circuit-breaker.js","sourceRoot":"","sources":["../../src/resilience/circuit-breaker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AA4BjC,6EAA6E;AAE7E,MAAM,cAAc,GAAyB;IAC3C,gBAAgB,EAAE,CAAC;IACnB,eAAe,EAAE,MAAM;IACvB,eAAe,EAAE,MAAM;IACvB,aAAa,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,gBAAgB,CAAC;CAC/D,CAAC;AAEF,MAAM,aAAa,GAAwB;IACzC,KAAK,EAAE,QAAQ;IACf,QAAQ,EAAE,EAAE;IACZ,QAAQ,EAAE,IAAI;IACd,WAAW,EAAE,IAAI;CAClB,CAAC;AAEF,6EAA6E;AAE7E,MAAM,OAAO,oBAAoB;IACd,MAAM,CAAuB;IACtC,aAAa,CAAsB;IAE3C,YAAY,MAAsC,EAAE,YAAkC;QACpF,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;QAC/C,IAAI,CAAC,aAAa,GAAG,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,aAAa,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC/F,CAAC;IAED;;;OAGG;IACH,OAAO;QACL,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAE5B,QAAQ,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;YACjC,KAAK,QAAQ;gBACX,OAAO,IAAI,CAAC;YAEd,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,IAAI,CAAC,CAAC;gBAClD,IAAI,GAAG,GAAG,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;oBAClD,IAAI,CAAC,aAAa,CAAC,KAAK,GAAG,WAAW,CAAC;oBACvC,IAAI,CAAC,aAAa,CAAC,WAAW,GAAG,GAAG,CAAC;oBACrC,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YAED,KAAK,WAAW;gBACd,OAAO,IAAI,CAAC;YAEd;gBACE,OAAO,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa;QACjB,IAAI,CAAC,aAAa,CAAC,KAAK,GAAG,QAAQ,CAAC;QACpC,IAAI,CAAC,aAAa,CAAC,QAAQ,GAAG,EAAE,CAAC;QACjC,IAAI,CAAC,aAAa,CAAC,QAAQ,GAAG,IAAI,CAAC;QACnC,IAAI,CAAC,aAAa,CAAC,WAAW,GAAG,IAAI,CAAC;QACtC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAE5B,IAAI,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACvE,IAAI,CAAC,aAAa,CAAC,KAAK,GAAG,MAAM,CAAC;YAClC,IAAI,CAAC,aAAa,CAAC,QAAQ,GAAG,GAAG,CAAC;QACpC,CAAC;QAED,mDAAmD;QACnD,IAAI,IAAI,CAAC,aAAa,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YAC7C,IAAI,CAAC,aAAa,CAAC,KAAK,GAAG,MAAM,CAAC;YAClC,IAAI,CAAC,aAAa,CAAC,QAAQ,GAAG,GAAG,CAAC;QACpC,CAAC;QAED,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC5B,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,KAAK;YAC/B,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC;YAC1C,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,QAAQ;YACrC,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC,WAAW;SAC5C,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,aAAa,GAAG,EAAE,GAAG,aAAa,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QACxD,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,IAAa;QACrC,MAAM,QAAQ,GAAG,IAAI,IAAI,cAAc,CAAC,aAAa,CAAC;QACtD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAwB,CAAC;YAEpD,wBAAwB;YACxB,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACjD,OAAO,IAAI,oBAAoB,CAAC,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC/D,CAAC;YAED,OAAO,IAAI,oBAAoB,CAAC,EAAE,aAAa,EAAE,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC;QACrE,CAAC;QAAC,MAAM,CAAC;YACP,mDAAmD;YACnD,OAAO,IAAI,oBAAoB,CAAC,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,uEAAuE;IAEvE;;OAEG;IACK,oBAAoB;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;QACxD,IAAI,CAAC,aAAa,CAAC,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAC9D,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,MAAM,CAC5B,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,UAAU;QACtB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YAC/C,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAEtC,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,MAAM,CAAC;YACnD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACzD,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAEvC,gBAAgB;YAChB,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;YACpD,MAAM,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,0DAA0D;YAC1D,4CAA4C;QAC9C,CAAC;IACH,CAAC;CACF"}

package/packages/client/dist/resilience/degradation-manager.d.ts

@@ -0,0 +1,68 @@
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ *
+ * This file is part of Neocortex CLI, licensed under the
+ * Functional Source License, Version 1.1 (FSL-1.1).
+ *
+ * Change Date: February 20, 2029
+ * Change License: MIT
+ *
+ * See the LICENSE file in the project root for full license text.
+ */
+/**
+ * @neocortex/client - Degradation Manager
+ *
+ * Evaluates current degradation level (L0-L4) based on circuit breaker state,
+ * measured latency, cache availability and freshness. Returns a decision
+ * object that tells the resolver how to behave.
+ *
+ * Story 42.9
+ */
+import type { CircuitState } from './circuit-breaker.js';
+export declare enum DegradationLevel {
+    /** Server available, fresh data, optimal performance */
+    ONLINE = 0,
+    /** Server slow (>2s), use cache when available */
+    HIGH_LATENCY = 1,
+    /** Server down, use cache exclusively */
+    SERVER_DOWN = 2,
+    /** Cache expired (>24h), use with warning */
+    STALE_CACHE = 3,
+    /** No cache and no server - error state */
+    NO_CACHE = 4
+}
+export interface DegradationContext {
+    circuitState: CircuitState;
+    latencyMs?: number;
+    cacheAvailable: boolean;
+    cacheAgeMs?: number;
+    forceOffline: boolean;
+}
+export interface DegradationDecision {
+    level: DegradationLevel;
+    useCache: boolean;
+    useServer: boolean;
+    prefix: string;
+    warning: string | null;
+}
+export interface DegradationManagerConfig {
+    /** Cache age threshold for STALE warning. Default: 86_400_000 (24h) */
+    staleThresholdMs: number;
+    /** Cache age threshold for initial warning. Default: 43_200_000 (12h) */
+    warningThresholdMs: number;
+    /** Latency threshold for HIGH_LATENCY level. Default: 2000 (2s) */
+    latencyThresholdMs: number;
+}
+export declare class DegradationManager {
+    private readonly config;
+    constructor(config?: Partial<DegradationManagerConfig>);
+    /**
+     * Evaluate the current degradation level based on context.
+     */
+    evaluate(context: DegradationContext): DegradationDecision;
+    private buildServerDownDecision;
+    private buildCacheOnlyDecision;
+    private formatAge;
+}
+//# sourceMappingURL=degradation-manager.d.ts.map

package/packages/client/dist/resilience/degradation-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"degradation-manager.d.ts","sourceRoot":"","sources":["../../src/resilience/degradation-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAIzD,oBAAY,gBAAgB;IAC1B,wDAAwD;IACxD,MAAM,IAAI;IACV,kDAAkD;IAClD,YAAY,IAAI;IAChB,yCAAyC;IACzC,WAAW,IAAI;IACf,6CAA6C;IAC7C,WAAW,IAAI;IACf,2CAA2C;IAC3C,QAAQ,IAAI;CACb;AAED,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,YAAY,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,OAAO,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,gBAAgB,CAAC;IACxB,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,wBAAwB;IACvC,uEAAuE;IACvE,gBAAgB,EAAE,MAAM,CAAC;IACzB,yEAAyE;IACzE,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mEAAmE;IACnE,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAYD,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA2B;gBAEtC,MAAM,CAAC,EAAE,OAAO,CAAC,wBAAwB,CAAC;IAItD;;OAEG;IACH,QAAQ,CAAC,OAAO,EAAE,kBAAkB,GAAG,mBAAmB;IAyD1D,OAAO,CAAC,uBAAuB;IAmC/B,OAAO,CAAC,sBAAsB;IAiC9B,OAAO,CAAC,SAAS;CAQlB"}