@productbrain/cli 0.1.0-beta.14 → 0.1.0-beta.14010

package/dist/lib/compose-wrapup-view.d.ts

@@ -0,0 +1,66 @@
+/**
+ * composeWrapupView — the single place TEN-2402 is fixed on the CLI surface.
+ *
+ * Twin of the MCP package's helper (packages/mcp-server/src/lib/compose-wrapup-view.ts).
+ * CLI and MCP publish separately and cannot share a module, so each package keeps its own
+ * copy and a repo-level parity test (gateway-parity precedent) feeds ONE synthetic raw
+ * result to both and asserts set-equal committed/draft IDs.
+ *
+ * The MERGE (capped ∪ overflow) MUST live here, not at the call site — that is the only
+ * place the parity test can pin TEN-2402:
+ *   committed = committed ∪ overflowCommitted
+ *   drafts    = drafts ∪ overflowDrafts
+ *
+ * Whether the loop is empty is the server's canClose (TASK-1191), never computed here.
+ * Every overflow read coalesces `?? []` / `?? 0` so a result lacking the fields can never throw.
+ */
+export interface ComposedEntry {
+    entryId: string;
+    name: string;
+}
+interface OverflowEntry {
+    entryId: string;
+    name: string;
+}
+/** Raw kernel wrapup result this helper consumes (only the fields it reads are required). */
+export interface RawWrapupView {
+    committed?: Array<{
+        entryId: string;
+        name: string;
+    }>;
+    drafts?: Array<{
+        entryId: string;
+        name: string;
+    }>;
+    overflowCommitted?: OverflowEntry[];
+    overflowDrafts?: OverflowEntry[];
+    /** TASK-743 (TEN-4624): discarded/archived/resolved entries, named with their workflow label. */
+    discarded?: Array<OverflowEntry & {
+        label: string;
+    }>;
+    overflowUnscanned?: number;
+    /** TASK-923 (DEC-2130 B): role-held drafts, apart from drafts, each with the line the kernel wrote; never promoted at close. */
+    held?: Array<{
+        entryId: string;
+        name: string;
+        line: string;
+    }>;
+}
+export interface ComposedWrapupView {
+    committed: ComposedEntry[];
+    drafts: ComposedEntry[];
+    /** TASK-743: never committed, never draft — listed under its own word. */
+    discarded: Array<ComposedEntry & {
+        label: string;
+    }>;
+    overflowUnscanned: number;
+    /** TASK-923: left for their owners; never in the promote set. */
+    held: Array<{
+        entryId: string;
+        name: string;
+        line: string;
+    }>;
+}
+export declare function composeWrapupView(raw: RawWrapupView): ComposedWrapupView;
+export {};
+//# sourceMappingURL=compose-wrapup-view.d.ts.map

package/dist/lib/compose-wrapup-view.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compose-wrapup-view.d.ts","sourceRoot":"","sources":["../../src/lib/compose-wrapup-view.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,UAAU,aAAa;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,6FAA6F;AAC7F,MAAM,WAAW,aAAa;IAC5B,SAAS,CAAC,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrD,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClD,iBAAiB,CAAC,EAAE,aAAa,EAAE,CAAC;IACpC,cAAc,CAAC,EAAE,aAAa,EAAE,CAAC;IACjC,iGAAiG;IACjG,SAAS,CAAC,EAAE,KAAK,CAAC,aAAa,GAAG;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrD,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,gIAAgI;IAChI,IAAI,CAAC,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC/D;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB,0EAA0E;IAC1E,SAAS,EAAE,KAAK,CAAC,aAAa,GAAG;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpD,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iEAAiE;IACjE,IAAI,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC9D;AAMD,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,aAAa,GAAG,kBAAkB,CAkBxE"}

package/dist/lib/compose-wrapup-view.js

@@ -0,0 +1,39 @@
+/**
+ * composeWrapupView — the single place TEN-2402 is fixed on the CLI surface.
+ *
+ * Twin of the MCP package's helper (packages/mcp-server/src/lib/compose-wrapup-view.ts).
+ * CLI and MCP publish separately and cannot share a module, so each package keeps its own
+ * copy and a repo-level parity test (gateway-parity precedent) feeds ONE synthetic raw
+ * result to both and asserts set-equal committed/draft IDs.
+ *
+ * The MERGE (capped ∪ overflow) MUST live here, not at the call site — that is the only
+ * place the parity test can pin TEN-2402:
+ *   committed = committed ∪ overflowCommitted
+ *   drafts    = drafts ∪ overflowDrafts
+ *
+ * Whether the loop is empty is the server's canClose (TASK-1191), never computed here.
+ * Every overflow read coalesces `?? []` / `?? 0` so a result lacking the fields can never throw.
+ */
+function toComposed(e) {
+    return { entryId: e.entryId, name: e.name };
+}
+export function composeWrapupView(raw) {
+    const committed = [
+        ...(raw.committed ?? []).map(toComposed),
+        ...(raw.overflowCommitted ?? []).map(toComposed),
+    ];
+    const drafts = [
+        ...(raw.drafts ?? []).map(toComposed),
+        ...(raw.overflowDrafts ?? []).map(toComposed),
+    ];
+    const discarded = (raw.discarded ?? []).map((e) => ({ ...toComposed(e), label: e.label }));
+    const overflowUnscanned = raw.overflowUnscanned ?? 0;
+    return {
+        committed,
+        drafts,
+        discarded,
+        overflowUnscanned,
+        held: (raw.held ?? []).map((h) => ({ entryId: h.entryId, name: h.name, line: h.line })),
+    };
+}
+//# sourceMappingURL=compose-wrapup-view.js.map

package/dist/lib/compose-wrapup-view.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compose-wrapup-view.js","sourceRoot":"","sources":["../../src/lib/compose-wrapup-view.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAmCH,SAAS,UAAU,CAAC,CAAoC;IACtD,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAkB;IAClD,MAAM,SAAS,GAAG;QAChB,GAAG,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;QACxC,GAAG,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;KACjD,CAAC;IACF,MAAM,MAAM,GAAG;QACb,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;QACrC,GAAG,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;KAC9C,CAAC;IACF,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC3F,MAAM,iBAAiB,GAAG,GAAG,CAAC,iBAAiB,IAAI,CAAC,CAAC;IACrD,OAAO;QACL,SAAS;QACT,MAAM;QACN,SAAS;QACT,iBAAiB;QACjB,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;KACxF,CAAC;AACJ,CAAC"}

package/dist/lib/config.d.ts

@@ -1,13 +1,137 @@
 /**
  * CLI config — reads PRODUCTBRAIN_API_KEY + CONVEX_SITE_URL from:
+ * 0. The profile a subagent's conversation names (conversationKeyProfile below)
  * 1. Environment variables
- * 2. ~/.config/productbrain/.env (works from any directory)
- * 3. CWD .env.mcp / packages/mcp-server/.env.mcp / .env
+ * 2. Project local config: .productbrain/config.local.json (walked up from CWD, machine-local)
+ * 3. Project config: .productbrain/config.json (walked up from CWD, committed) — its presence
+ *    declares a project; its siteUrl never routes a key (TEN-4500)
+ * 4. Profile system (~/.config/productbrain/profiles/{name}.env)
+ * 5. Legacy ~/.config/productbrain/.env (auto-migrated to profiles on first use)
+ * 6. CWD .env.mcp / packages/mcp-server/.env.mcp / .env
+ *
+ * Config loading is lazy — loadEnv() runs on first getConfig()/getConfigOrGuide() call.
+ * This enables profile switching without import-time side effects (TEN-1276).
  *
  * When key is missing and retry is provided (TTY), runs guided flow per docs/cli-unauthenticated-user-journey.md.
+ *
+ * The repo's own config files (.productbrain/config.json, config.local.json) are located and
+ * read by projectConfig.ts — this module turns what they declare into a credential.
  */
+import { type ConfigResult, type ResolvedConfig } from './configResult.js';
 declare const HOME_CONFIG_DIR: string;
 declare const HOME_ENV_PATH: string;
+export { findProjectRoot, readLocalProjectConfig, type LocalProjectConfig } from './projectConfig.js';
+export type { ConfigFailureKind, ConfigResult, ConfigSource, ResolvedConfig, SiteUrlSource } from './configResult.js';
+/**
+ * Returns the preview binding metadata when pb is currently bound to a throwaway preview,
+ * or null when bound to the real Chain (the default).
+ *
+ * Effective-binding mirror: this only reports a preview binding when
+ * `resolveConfig()`/`loadEnv()` would actually honor it — `preview === true` AND
+ * an atomic apiKey+siteUrl pair (SF-3) AND no `PRODUCTBRAIN_API_KEY` env override
+ * (env always wins in resolveConfig step 1). Without these guards the PREVIEW
+ * banner could fire while writes still hit the real Chain, defeating the safety
+ * warning. Used by the PREVIEW banner (index.ts preAction hook) and the
+ * capture/update advisory.
+ *
+ * Security classification: reads only the gitignored machine-local config.local.json.
+ * The preview key in that file is a throwaway preview-scoped key, set by explicit
+ * `npm run pb:preview` opt-in and reversed by `npm run pb:real`. Never throws — returns
+ * null on any error so the banner/advisory path is never the source of a CLI crash.
+ */
+export declare function getPreviewBinding(): {
+    workspaceName: string | null;
+} | null;
+/**
+ * Write/merge the profile pin into <projectRoot>/.productbrain/config.local.json,
+ * preserving any sibling keys. Single source of truth for the local pin write —
+ * used by `pb profile use --local`, the default reconcile path, and `pb connect`.
+ *
+ * Co-writer note (SF-2): scripts/pb-binding.mjs is the OTHER writer of config.local.json — it
+ * merges/strips the preview-binding keys (apiKey, siteUrl, preview, workspaceName) for
+ * `npm run pb:preview` / `npm run pb:real`, plus previewKey*. Both writers keep the `profile` pin. If you add
+ * a preview-scoped key here or in readLocalProjectConfig(), update pb-binding.mjs's PREVIEW_KEYS.
+ */
+export declare function setLocalProfilePin(projectRoot: string, profile: string): void;
+/**
+ * Outcome of a preview apiKey refresh attempt (WP-458 E2). The discriminated result lets the
+ * caller (session.ts) react precisely instead of conflating "couldn't recover" with "the failure
+ * wasn't a stale key at all":
+ *  - 'refreshed'   — a DIFFERENT valid key was loaded; a retry is worthwhile.
+ *  - 'unchanged'   — the bound key file's key already matches the bound key, so the auth/INTERNAL failure
+ *                    is NOT a stale-key problem. The caller must surface the ORIGINAL error rather
+ *                    than relabel it (the reviewer's no-masking concern; R2 honesty).
+ *  - 'unavailable' — preview-bound but the bound key file is unrecorded, missing, malformed, names
+ *                    another person, workspace or seat, or lacks a valid key, so the stale binding cannot be recovered. The caller surfaces a clean, actionable
+ *                    error (doneWhen #1: no opaque INTERNAL).
+ *  - 'not-bound'   — not a preview binding, or a genuine env override is in play; leave the error
+ *                    untouched.
+ */
+export type PreviewKeyRefresh = 'refreshed' | 'unchanged' | 'unavailable' | 'not-bound';
+/**
+ * WP-458 E2 — one-shot preview apiKey refresh from disk.
+ *
+ * After a worktree preview is reseeded, seed-preview.mjs Step 6 mints a NEW apiKey into the bound key
+ * file the binding recorded (`previewKey`), but `config.local.json` (and the live `process.env` binding it
+ * seeded via loadEnv) still carry the PRE-reseed key — so the next `pb session start` fails auth
+ * with an opaque INTERNAL. This re-reads the fresh key from that file so the caller can retry
+ * ONCE (session.ts). It is deliberately disk-to-disk: it compares that file's key against
+ * config.local.json's bound key, NOT against process.env (which loadEnv already populated from the
+ * stale binding), so it can't be confused by its own prior population. Never throws — any error
+ * degrades to 'unavailable'/'not-bound' so it can sit on the session-start path.
+ *
+ * Co-writer note (SF-2): mirrors pb-binding.mjs / setLocalProfilePin — preserves every sibling key
+ * in config.local.json (profile, preview, workspaceName, previewKey*) and only rewrites apiKey + siteUrl.
+ */
+export declare function refreshPreviewApiKeyFromDisk(): PreviewKeyRefresh;
+/**
+ * The profile a subagent's conversation runs on (TASK-1177; DEC-2298): the session-start hook saves the profile's NAME, never
+ * a key, in ~/.config/productbrain/conversations/<conversation>, and removes it when the subagent stops. A subagent shares
+ * its parent's env, so only a pb command prefixed with the subagent's own PB_CONVERSATION_ID finds it; that command runs on
+ * the profile's key ahead of the parent's exported key, and one without the prefix stays on the parent's key. In the home
+ * folder, not the repo: a subagent works in another worktree than the one its hook ran in.
+ */
+export declare function conversationKeyProfile(): string | null;
+/** Source of the effective profile, in resolution-precedence order. */
+export type EffectiveProfileSource = 'local' | 'env' | 'global' | 'default' | 'none';
+/**
+ * Resolve the effective profile NAME + where it came from. PRECEDENCE — local pin > env >
+ * global > default: the pin outranks `PB_PROFILE` because resolveConfig() 2b / loadEnv() 1b
+ * bind the pinned key before the profile system (the only step reading `PB_PROFILE`), so
+ * under both the env name never supplies the credential and must not be reported. Unlike
+ * resolveConfig() this names the *configured* pin even when unresolvable (deleted / missing
+ * key): a dangling pin must be surfaced by `pb whoami`, never masked by the global profile
+ * — the TEN-2163 silent-drift bug. Used by `pb whoami`, session labels, "now using" prints.
+ */
+export declare function resolveEffectiveProfile(): {
+    profile: string | null;
+    source: EffectiveProfileSource;
+};
+/**
+ * Run the full config resolution cascade and return a typed result.
+ * Resolution order:
+ * 0. The profile this subagent's conversation names (highest priority; it holds no key of its own)
+ * 1. Environment variables
+ * 2. config.local.json profile → resolveNamedProfileConfig(profile) for apiKey + siteUrl
+ * 2c. Declared project naming no tenant — refuses (config.json names neither a tenant nor a gateway)
+ * 3. Profile system (~/.config/productbrain/profiles/{name}.env)
+ * 4. Legacy home config (~/.config/productbrain/.env)
+ * 5. CWD .env files (.env.mcp, packages/mcp-server/.env.mcp, .env)
+ *
+ * A key travels only with the site URL stored or exported beside it (TEN-4500): every branch
+ * reads its URL from the same source as its key, and a key with no URL of its own goes to
+ * DEFAULT_SITE_URL. `.productbrain/config.json` is committed, so a cloned repo controls its
+ * siteUrl; it never routes a key. Same rule as resolveAdminConfig() (TEN-1334). loadEnv()
+ * exports this function's answer, so `pb doctor` and the command path cannot name different
+ * hosts. `siteUrlSource` records which source supplied the URL.
+ *
+ * THROWS at step 2 rather than substituting a different workspace: CONFIG_INVALID at 2a
+ * (incomplete binding), AUTH_MISSING at 2b (dangling pin), missing-pin at 2c. getConfigSafe()
+ * reports each as `ok: false` with the kind preserved, for callers that must not crash.
+ */
+export declare function resolveConfig(ignoreEnvKey?: boolean): ResolvedConfig;
+/** Reset env loaded state — used for profile switching. */
+export declare function resetConfigCache(): void;
 export declare function getConfig(): {
     apiKey: string;
     siteUrl: string;
@@ -17,10 +141,27 @@ export type Config = {
     siteUrl: string;
 };
 /**
- * Get config; if key is missing and stdin is a TTY, run guided flow (y/n → paste key → save → retry).
- * @param retry Called after saving key so the original command runs in-process.
- * @returns Config, or null if we ran retry (caller should return without running again).
+ * Non-throwing alternative to getConfig().
+ *
+ * Architecture: getConfig() is the primary path for commands that require auth — it
+ * throws CLIError when the key is missing, which is correct for API call paths.
+ * getConfigSafe() is for status/probe surfaces (no-args dashboard, init) that need
+ * to check config availability without crashing. Both paths are intentional and
+ * coexist by design — see WP-303 review (DW#5).
+ *
+ * Uses resolveConfig() directly (no loadEnv) to avoid env var pollution affecting source attribution.
+ *
+ * A refusal from resolveConfig() (dangling repo pin) is reported as `ok: false` with the
+ * refusal as the reason — NOT rethrown. This surface is what `pb doctor` and the bare-`pb`
+ * dashboard use to *diagnose*, and a diagnostic that dies on the condition it exists to
+ * explain is useless. The refusal keeps its teeth either way: `ok: false` hands out no
+ * credential, so nothing can proceed against the wrong workspace.
+ */
+export declare function getConfigSafe(): ConfigResult;
+/**
+ * Get config for a command that needs auth. TASK-562: the paste-a-key guided flow is deleted; a
+ * missing key throws the same missing-key sentence as getConfig, in a TTY too (connect, never paste).
  */
-export declare function getConfigOrGuide(retry: () => Promise<void>): Promise<Config | null>;
+export declare function getConfigOrGuide(): Promise<Config>;
 export { HOME_CONFIG_DIR, HOME_ENV_PATH };
 //# sourceMappingURL=config.d.ts.map

package/dist/lib/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AASH,QAAA,MAAM,eAAe,QAAgD,CAAC;AACtE,QAAA,MAAM,aAAa,QAAmC,CAAC;AA2FvD,wBAAgB,SAAS,IAAI;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAe/D;AAED,MAAM,MAAM,MAAM,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzD;;;;GAIG;AACH,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAczF;AAED,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,CAAC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAaH,OAAO,EAML,KAAK,YAAY,EACjB,KAAK,cAAc,EACpB,MAAM,mBAAmB,CAAC;AAE3B,QAAA,MAAM,eAAe,QAAgD,CAAC;AACtE,QAAA,MAAM,aAAa,QAAmC,CAAC;AASvD,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,KAAK,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACtG,YAAY,EAAE,iBAAiB,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEtH;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,iBAAiB,IAAI;IAAE,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,IAAI,CAO3E;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAY7E;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,iBAAiB,GAAG,WAAW,GAAG,WAAW,GAAG,aAAa,GAAG,WAAW,CAAC;AAExF;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,4BAA4B,IAAI,iBAAiB,CA8ChE;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,IAAI,MAAM,GAAG,IAAI,CAStD;AAED,uEAAuE;AACvE,MAAM,MAAM,sBAAsB,GAAG,OAAO,GAAG,KAAK,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;AAErF;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,IAAI;IAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,sBAAsB,CAAA;CAAE,CAapG;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,aAAa,CAAC,YAAY,UAAQ,GAAG,cAAc,CAmGlE;AAyDD,2DAA2D;AAC3D,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC;AAED,wBAAgB,SAAS,IAAI;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CA4B/D;AAED,MAAM,MAAM,MAAM,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,aAAa,IAAI,YAAY,CAE5C;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,MAAM,CAAC,CAExD;AAMD,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,CAAC"}