@rubytech/create-maxy-code 0.1.593 → 0.1.594

package/payload/platform/plugins/admin/mcp/dist/lib/onboarding.js

@@ -1,249 +0,0 @@
-// Onboarding state management — graph-persisted workflow state.
-// Purpose-built for Phase 0; migrates to a Workflow node with Task 13.
-import { existsSync, readFileSync, rmSync, writeFileSync } from "node:fs";
-import { join } from "node:path";
-const STEP_FIELDS = [
-    "step1CompletedAt",
-    "step2CompletedAt",
-    "step3CompletedAt",
-    "step4CompletedAt",
-    "step5CompletedAt",
-    "step6CompletedAt",
-    "step7CompletedAt",
-    "step8CompletedAt",
-    "step9CompletedAt",
-];
-// neo4j-driver v5 returns Integer objects for integer properties, not native
-// JS numbers. This converts them safely (values 0–9 are well within range).
-function toJsNumber(val) {
-    if (typeof val === "number")
-        return val;
-    if (val && typeof val === "object" && "toNumber" in val) {
-        return val.toNumber();
-    }
-    return 0;
-}
-function recordToState(record) {
-    return {
-        currentStep: toJsNumber(record.get("currentStep")),
-        step1CompletedAt: record.get("step1CompletedAt") ?? null,
-        step2CompletedAt: record.get("step2CompletedAt") ?? null,
-        step3CompletedAt: record.get("step3CompletedAt") ?? null,
-        step4CompletedAt: record.get("step4CompletedAt") ?? null,
-        step5CompletedAt: record.get("step5CompletedAt") ?? null,
-        step6CompletedAt: record.get("step6CompletedAt") ?? null,
-        step7CompletedAt: record.get("step7CompletedAt") ?? null,
-        step8CompletedAt: record.get("step8CompletedAt") ?? null,
-        step9CompletedAt: record.get("step9CompletedAt") ?? null,
-        createdAt: record.get("createdAt") ?? new Date().toISOString(),
-        updatedAt: record.get("updatedAt") ?? new Date().toISOString(),
-    };
-}
-function readMigrationStep(accountDir) {
-    try {
-        const raw = readFileSync(join(accountDir, "account.json"), "utf-8");
-        const config = JSON.parse(raw);
-        if (typeof config.onboardingStep === "number" && config.onboardingStep > 0) {
-            return config.onboardingStep;
-        }
-    }
-    catch {
-        // File missing, unreadable, or malformed — no migration data
-    }
-    return 0;
-}
-function removeOnboardingStepFromFile(accountDir) {
-    try {
-        const configPath = join(accountDir, "account.json");
-        const raw = readFileSync(configPath, "utf-8");
-        const config = JSON.parse(raw);
-        if ("onboardingStep" in config) {
-            delete config.onboardingStep;
-            writeFileSync(configPath, JSON.stringify(config, null, 2) + "\n", "utf-8");
-        }
-    }
-    catch {
-        // Tolerate cleanup failure — graph is the authority now
-    }
-}
-/**
- * Task 562: consume the step-7 completion flag written by setup-tunnel.sh
- * before the service restart. The script runs inside ${BRAND}.service's
- * cgroup and cannot complete the MCP call after dispatching the restart —
- * so it drops a filesystem marker instead. The first read of onboarding
- * state after the restart picks it up, advances the graph via the same
- * CASE-WHEN-NULL cypher as completeOnboardingStep, and deletes the marker.
- *
- * Idempotent at every layer: a missing flag is a no-op; a flag present
- * against an already-completed step is a no-op on the graph (CASE-WHEN-NULL
- * preserves the existing timestamp); a crash between graph write and flag
- * delete re-consumes on the next call with the same no-op outcome.
- */
-export async function consumeStep7Flag(session, accountId, accountDir) {
-    const flagPath = join(accountDir, "onboarding", "step7-complete");
-    if (!existsSync(flagPath))
-        return false;
-    let completedAt = new Date().toISOString();
-    try {
-        const raw = readFileSync(flagPath, "utf-8").trim();
-        if (raw) {
-            const parsed = JSON.parse(raw);
-            if (typeof parsed.completedAt === "string") {
-                completedAt = parsed.completedAt;
-            }
-        }
-    }
-    catch {
-        // Malformed flag content still advances state — the flag's presence
-        // alone is the authoritative signal; the embedded timestamp is forensic.
-    }
-    // RETURN count(o) so we can detect the "no OnboardingState node" case
-    // where SET is a silent no-op. Without this check, rmSync below would
-    // delete the flag against a graph that never applied the write, silently
-    // losing the step-7 completion signal forever.
-    const result = await session.run(`MATCH (o:OnboardingState {accountId: $accountId})
-     SET o.step7CompletedAt = CASE WHEN o.step7CompletedAt IS NULL THEN $completedAt ELSE o.step7CompletedAt END,
-         o.currentStep = CASE WHEN 7 > o.currentStep THEN 7 ELSE o.currentStep END,
-         o.updatedAt = $completedAt
-     RETURN count(o) AS updated`, { accountId, completedAt });
-    const updatedRaw = result.records[0]?.get("updated");
-    const updated = toJsNumber(updatedRaw);
-    if (updated === 0) {
-        // No OnboardingState node yet — leave the flag in place so the next
-        // reader (after node creation via MERGE in this function's migration
-        // branch below) can still consume it.
-        console.log(`[onboarding-flag-consumed] accountId=${accountId.slice(0, 8)}… step=7 ` +
-            `source=filesystem flagPath=${flagPath} skipped=no-node`);
-        return false;
-    }
-    console.log(`[onboarding-flag-consumed] accountId=${accountId.slice(0, 8)}… step=7 ` +
-        `source=filesystem flagPath=${flagPath} completedAt=${completedAt}`);
-    try {
-        rmSync(flagPath);
-    }
-    catch (err) {
-        console.error(`[onboarding-flag-consumed] warn: failed to delete ${flagPath}: ` +
-            `${err instanceof Error ? err.message : String(err)}`);
-    }
-    return true;
-}
-const READ_STATE_QUERY = `MATCH (o:OnboardingState {accountId: $accountId})
-       RETURN o.currentStep AS currentStep,
-              o.step1CompletedAt AS step1CompletedAt,
-              o.step2CompletedAt AS step2CompletedAt,
-              o.step3CompletedAt AS step3CompletedAt,
-              o.step4CompletedAt AS step4CompletedAt,
-              o.step5CompletedAt AS step5CompletedAt,
-              o.step6CompletedAt AS step6CompletedAt,
-              o.step7CompletedAt AS step7CompletedAt,
-              o.step8CompletedAt AS step8CompletedAt,
-              o.step9CompletedAt AS step9CompletedAt,
-              o.createdAt AS createdAt,
-              o.updatedAt AS updatedAt`;
-export async function getOnboardingState(sessionFactory, accountId, accountDir) {
-    const session = sessionFactory();
-    try {
-        // Check for existing graph node
-        const existing = await session.run(READ_STATE_QUERY, { accountId });
-        const nodeExisted = existing.records.length > 0;
-        if (nodeExisted) {
-            // Task 562: consume setup-tunnel.sh step-7 flag against the existing
-            // node. loadOnboardingStep (UI side) usually does this first at session
-            // start; this call is defensive in case this read precedes it.
-            //
-            // Always re-read after the consume attempt. If a concurrent caller
-            // consumed the flag between our initial read and our consumeStep7Flag
-            // call, consumeStep7Flag returns false (flag gone) but the graph still
-            // advanced — returning `existing.records[0]` would hand back the stale
-            // pre-consumption record. One extra indexed MATCH is negligible and
-            // guarantees the caller sees the authoritative state.
-            await consumeStep7Flag(session, accountId, accountDir);
-            const refreshed = await session.run(READ_STATE_QUERY, { accountId });
-            return recordToState(refreshed.records[0]);
-        }
-        // No graph node — check for migration from account.json
-        const migratedStep = readMigrationStep(accountDir);
-        const now = new Date().toISOString();
-        // Build step completion timestamps for migrated steps.
-        // account.json only stored a step counter, not per-step timestamps,
-        // so migrated steps all get the current time — the original times
-        // were never recorded.
-        const stepProps = {};
-        for (let i = 0; i < STEP_FIELDS.length; i++) {
-            stepProps[STEP_FIELDS[i]] = i < migratedStep ? now : null;
-        }
-        // Create the node via MERGE (idempotent under concurrent access)
-        const result = await session.run(`MERGE (o:OnboardingState {accountId: $accountId})
-       ON CREATE SET
-         o.currentStep = $currentStep,
-         o.step1CompletedAt = $step1CompletedAt,
-         o.step2CompletedAt = $step2CompletedAt,
-         o.step3CompletedAt = $step3CompletedAt,
-         o.step4CompletedAt = $step4CompletedAt,
-         o.step5CompletedAt = $step5CompletedAt,
-         o.step6CompletedAt = $step6CompletedAt,
-         o.step7CompletedAt = $step7CompletedAt,
-         o.step8CompletedAt = $step8CompletedAt,
-         o.step9CompletedAt = $step9CompletedAt,
-         o.createdAt = $now,
-         o.updatedAt = $now
-       RETURN o.currentStep AS currentStep,
-              o.step1CompletedAt AS step1CompletedAt,
-              o.step2CompletedAt AS step2CompletedAt,
-              o.step3CompletedAt AS step3CompletedAt,
-              o.step4CompletedAt AS step4CompletedAt,
-              o.step5CompletedAt AS step5CompletedAt,
-              o.step6CompletedAt AS step6CompletedAt,
-              o.step7CompletedAt AS step7CompletedAt,
-              o.step8CompletedAt AS step8CompletedAt,
-              o.step9CompletedAt AS step9CompletedAt,
-              o.createdAt AS createdAt,
-              o.updatedAt AS updatedAt`, { accountId, currentStep: migratedStep, now, ...stepProps });
-        // Clean up account.json if migration happened
-        if (migratedStep > 0) {
-            removeOnboardingStepFromFile(accountDir);
-        }
-        return recordToState(result.records[0]);
-    }
-    finally {
-        await session.close();
-    }
-}
-export async function completeOnboardingStep(sessionFactory, accountId, step) {
-    if (!Number.isInteger(step) || step < 1 || step > 9) {
-        throw new Error("Step must be between 1 and 9");
-    }
-    const session = sessionFactory();
-    try {
-        const stepField = STEP_FIELDS[step - 1];
-        const now = new Date().toISOString();
-        // Single query: MATCH + SET. If no node exists, MATCH returns zero
-        // records and we detect that from the result — no separate check needed.
-        const result = await session.run(`MATCH (o:OnboardingState {accountId: $accountId})
-       SET o.${stepField} = CASE WHEN o.${stepField} IS NULL THEN $now ELSE o.${stepField} END,
-           o.currentStep = CASE WHEN $step > o.currentStep THEN $step ELSE o.currentStep END,
-           o.updatedAt = $now
-       RETURN o.currentStep AS currentStep,
-              o.step1CompletedAt AS step1CompletedAt,
-              o.step2CompletedAt AS step2CompletedAt,
-              o.step3CompletedAt AS step3CompletedAt,
-              o.step4CompletedAt AS step4CompletedAt,
-              o.step5CompletedAt AS step5CompletedAt,
-              o.step6CompletedAt AS step6CompletedAt,
-              o.step7CompletedAt AS step7CompletedAt,
-              o.step8CompletedAt AS step8CompletedAt,
-              o.step9CompletedAt AS step9CompletedAt,
-              o.createdAt AS createdAt,
-              o.updatedAt AS updatedAt`, { accountId, step, now });
-        if (result.records.length === 0) {
-            throw new Error("No onboarding state found for this account. Call onboarding-get first.");
-        }
-        console.log(`[onboarding-step-complete] accountId=${accountId.slice(0, 8)}… ` +
-            `step=${step} completedAt=${now}`);
-        return recordToState(result.records[0]);
-    }
-    finally {
-        await session.close();
-    }
-}
-//# sourceMappingURL=onboarding.js.map

package/payload/platform/plugins/admin/mcp/dist/lib/onboarding.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"onboarding.js","sourceRoot":"","sources":["../../src/lib/onboarding.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,uEAAuE;AAEvE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAwBjC,MAAM,WAAW,GAAG;IAClB,kBAAkB;IAClB,kBAAkB;IAClB,kBAAkB;IAClB,kBAAkB;IAClB,kBAAkB;IAClB,kBAAkB;IAClB,kBAAkB;IAClB,kBAAkB;IAClB,kBAAkB;CACV,CAAC;AAEX,6EAA6E;AAC7E,4EAA4E;AAC5E,SAAS,UAAU,CAAC,GAAY;IAC9B,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,UAAU,IAAI,GAAG,EAAE,CAAC;QACxD,OAAQ,GAA8B,CAAC,QAAQ,EAAE,CAAC;IACpD,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,aAAa,CAAC,MAAqC;IAC1D,OAAO;QACL,WAAW,EAAE,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAClD,gBAAgB,EAAG,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAmB,IAAI,IAAI;QAC3E,gBAAgB,EAAG,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAmB,IAAI,IAAI;QAC3E,gBAAgB,EAAG,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAmB,IAAI,IAAI;QAC3E,gBAAgB,EAAG,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAmB,IAAI,IAAI;QAC3E,gBAAgB,EAAG,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAmB,IAAI,IAAI;QAC3E,gBAAgB,EAAG,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAmB,IAAI,IAAI;QAC3E,gBAAgB,EAAG,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAmB,IAAI,IAAI;QAC3E,gBAAgB,EAAG,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAmB,IAAI,IAAI;QAC3E,gBAAgB,EAAG,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAmB,IAAI,IAAI;QAC3E,SAAS,EAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAY,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC1E,SAAS,EAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAY,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAC3E,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,UAAkB;IAC3C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,IAAI,MAAM,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;YAC3E,OAAO,MAAM,CAAC,cAAc,CAAC;QAC/B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,6DAA6D;IAC/D,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,4BAA4B,CAAC,UAAkB;IACtD,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,gBAAgB,IAAI,MAAM,EAAE,CAAC;YAC/B,OAAO,MAAM,CAAC,cAAc,CAAC;YAC7B,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,wDAAwD;IAC1D,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAoB,EACpB,SAAiB,EACjB,UAAkB;IAElB,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC;IAClE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAExC,IAAI,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACnD,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;gBAC3C,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;YACnC,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;QACpE,yEAAyE;IAC3E,CAAC;IAED,sEAAsE;IACtE,sEAAsE;IACtE,yEAAyE;IACzE,+CAA+C;IAC/C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B;;;;gCAI4B,EAC5B,EAAE,SAAS,EAAE,WAAW,EAAE,CAC3B,CAAC;IAEF,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IAEvC,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;QAClB,oEAAoE;QACpE,qEAAqE;QACrE,sCAAsC;QACtC,OAAO,CAAC,GAAG,CACT,wCAAwC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW;YACxE,8BAA8B,QAAQ,kBAAkB,CACzD,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,CAAC,GAAG,CACT,wCAAwC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW;QACxE,8BAA8B,QAAQ,gBAAgB,WAAW,EAAE,CACpE,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CACX,qDAAqD,QAAQ,IAAI;YACjE,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACtD,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,gBAAgB,GAAG;;;;;;;;;;;;uCAYc,CAAC;AAExC,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,cAAiC,EACjC,SAAiB,EACjB,UAAkB;IAElB,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,gCAAgC;QAChC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QACpE,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;QAEhD,IAAI,WAAW,EAAE,CAAC;YAChB,qEAAqE;YACrE,wEAAwE;YACxE,+DAA+D;YAC/D,EAAE;YACF,mEAAmE;YACnE,sEAAsE;YACtE,uEAAuE;YACvE,uEAAuE;YACvE,oEAAoE;YACpE,sDAAsD;YACtD,MAAM,gBAAgB,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;YACvD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YACrE,OAAO,aAAa,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7C,CAAC;QAED,wDAAwD;QACxD,MAAM,YAAY,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAErC,uDAAuD;QACvD,oEAAoE;QACpE,kEAAkE;QAClE,uBAAuB;QACvB,MAAM,SAAS,GAAkC,EAAE,CAAC;QACpD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5C,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5D,CAAC;QAED,iEAAiE;QACjE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B;;;;;;;;;;;;;;;;;;;;;;;;;uCAyBiC,EACjC,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,EAAE,GAAG,SAAS,EAAE,CAC5D,CAAC;QAEF,8CAA8C;QAC9C,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;YACrB,4BAA4B,CAAC,UAAU,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,cAAiC,EACjC,SAAiB,EACjB,IAAY;IAEZ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAErC,mEAAmE;QACnE,yEAAyE;QACzE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B;eACS,SAAS,kBAAkB,SAAS,6BAA6B,SAAS;;;;;;;;;;;;;;uCAclD,EACjC,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,CACzB,CAAC;QAEF,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;QAC5F,CAAC;QAED,OAAO,CAAC,GAAG,CACT,wCAAwC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI;YACjE,QAAQ,IAAI,gBAAgB,GAAG,EAAE,CAClC,CAAC;QAEF,OAAO,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC"}

package/payload/platform/plugins/admin/mcp/dist/tools/admin-identity-authenticate.d.ts

@@ -1,6 +0,0 @@
-export interface AuthenticateDeps {
-    fetchImpl?: typeof fetch;
-    uiPort?: string;
-}
-export declare function runAuthenticate(pin: string, deps?: AuthenticateDeps): Promise<string>;
-//# sourceMappingURL=admin-identity-authenticate.d.ts.map

package/payload/platform/plugins/admin/mcp/dist/tools/admin-identity-authenticate.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"admin-identity-authenticate.d.ts","sourceRoot":"","sources":["../../src/tools/admin-identity-authenticate.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;IACxB,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AASD,wBAAsB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE,gBAAqB,GAAG,OAAO,CAAC,MAAM,CAAC,CAuB/F"}

package/payload/platform/plugins/admin/mcp/dist/tools/admin-identity-authenticate.js

@@ -1,32 +0,0 @@
-// Task 619 — admin-identity-authenticate tool.
-//
-// The agent-callable PIN-submit surface for native-CC admin sessions. The
-// PreToolUse identity gate validates the PIN, writes per-session auth state, and
-// only then allows this tool to run; the tool itself re-asks the same loopback
-// endpoint solely to fetch and return the authenticated operator's profile to
-// the agent. It never touches users.json or Neo4j directly — the endpoint is the
-// single resolution surface, so `loadUserProfile` is not duplicated here.
-export async function runAuthenticate(pin, deps = {}) {
-    const f = deps.fetchImpl ?? fetch;
-    const port = deps.uiPort ?? process.env.MAXY_UI_INTERNAL_PORT ?? "";
-    const url = `http://127.0.0.1:${port}/api/admin/identity/validate`;
-    let data;
-    try {
-        const r = await f(url, {
-            method: "POST",
-            headers: { "content-type": "application/json" },
-            body: JSON.stringify({ pin }),
-        });
-        data = (await r.json());
-    }
-    catch {
-        return "Identity service unavailable; could not load your profile.";
-    }
-    if (data.kind !== "match")
-        return "Invalid PIN.";
-    const name = data.userName ?? "operator";
-    const profile = data.aboutOwner?.ok ? (data.aboutOwner.body ?? "") : "";
-    console.error(`[admin-identity] op=about-owner-loaded userId=${(data.userId ?? "").slice(0, 8)}`);
-    return `Authenticated as ${name}.\n\n${profile}`.trim();
-}
-//# sourceMappingURL=admin-identity-authenticate.js.map

package/payload/platform/plugins/admin/mcp/dist/tools/admin-identity-authenticate.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"admin-identity-authenticate.js","sourceRoot":"","sources":["../../src/tools/admin-identity-authenticate.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAC/C,EAAE;AACF,0EAA0E;AAC1E,iFAAiF;AACjF,+EAA+E;AAC/E,8EAA8E;AAC9E,iFAAiF;AACjF,0EAA0E;AAc1E,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAW,EAAE,OAAyB,EAAE;IAC5E,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAA;IACjC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,EAAE,CAAA;IACnE,MAAM,GAAG,GAAG,oBAAoB,IAAI,8BAA8B,CAAA;IAElE,IAAI,IAAsB,CAAA;IAC1B,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,EAAE;YACrB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC;SAC9B,CAAC,CAAA;QACF,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAqB,CAAA;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,4DAA4D,CAAC;IACtE,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,cAAc,CAAC;IAEjD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,IAAI,UAAU,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,OAAO,CAAC,KAAK,CAAC,iDAAiD,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAClG,OAAO,oBAAoB,IAAI,QAAQ,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC;AAC1D,CAAC"}

package/payload/platform/plugins/cloudflare/mcp/dist/lib/cloudflared.d.ts

@@ -1,283 +0,0 @@
-interface BrandConfig {
-    configDir: string;
-    productName: string;
-    vncDisplay: number;
-}
-export declare function loadBrand(): BrandConfig;
-/**
- * Test-only: reset the cached brand so a subsequent loadBrand() re-reads
- * the manifest. Production code never calls this.
- */
-export declare function _resetBrandCache(): void;
-export declare function findBinary(): string | null;
-export declare function isInstalled(): boolean;
-export declare function version(): string | null;
-interface AccountBinding {
-    accountId: string;
-    boundAt: string;
-}
-export declare function readAccountBinding(): AccountBinding | null;
-/**
- * @internal — production code MUST go through `materializeBinding` so the
- * source-of-truth lifecycle (fresh-login vs migration) is preserved and
- * logged. Exported only so unit tests can pre-seed bindings without
- * re-implementing the file format.
- */
-export declare function writeAccountBinding(accountId: string): AccountBinding;
-export type RefusalReason = "account-drift" | "unbound-device" | "post-flight-fqdn-mismatch" | "bound-account-does-not-own-hostname" | "hostname-zone-not-routable";
-export interface RefusalDetail {
-    reason: RefusalReason;
-    message: string;
-    /** Structured fields for the [cloudflare:refuse] log line. */
-    fields?: {
-        requestedHostname?: string;
-        requestedDomain?: string;
-        boundAccountId?: string | null;
-        certAccountId?: string | null;
-        actualFqdn?: string;
-        tunnelId?: string;
-    };
-}
-export declare function logRefuse(detail: RefusalDetail): void;
-/**
- * The only recovery instruction — every refusal that involves the wrong
- * Cloudflare account points here. Single source of truth so the four
- * surfaces that quote it (tunnel-status, tunnel-add-hostname, personal
- * assistant template, setup-tunnel skill) cannot drift.
- */
-export declare const DASHBOARD_SWITCH_ACCOUNTS_INSTRUCTION: string;
-export declare function recoveryMessage(): string;
-export declare function resetAuth(): {
-    deletedCert: boolean;
-    deletedBinding: boolean;
-};
-export declare function hasCert(): boolean;
-interface CertIdentity {
-    accountId: string;
-}
-/**
- * Parse the ARGO TUNNEL TOKEN PEM block from cert.pem to extract the
- * AccountTag. Only the account ID is returned — nothing else in cert.pem
- * is used by this codebase. The cert itself stays on disk; `cloudflared`
- * shell-outs read it via `--origincert` for tunnel CRUD and DNS routing.
- */
-export declare function parseCertPem(): CertIdentity | null;
-/** Wraps a structured RefusalDetail so call sites can branch on `reason`. */
-export declare class CloudflareRefusalError extends Error {
-    refusal: RefusalDetail;
-    constructor(detail: RefusalDetail);
-}
-export interface AuthValidation {
-    hasCert: boolean;
-    hasBinding: boolean;
-    /** True when both present AND cert.accountId === binding.accountId. */
-    bound: boolean;
-    certAccountId: string | null;
-    boundAccountId: string | null;
-}
-export declare function validateAuth(): AuthValidation;
-/**
- * Establish the device-local account binding from cert.pem. Used by:
- *   (1) tunnel-login fresh-success path — first time creds are derived.
- *   (2) migration path — when cert.pem exists from a prior install but no
- *       binding has yet been written (silent materialization, since the
- *       cert was already trust-established by the operator's prior login).
- */
-export declare function materializeBinding(source: "fresh-login" | "migration"): AccountBinding;
-export declare function createTunnelCli(name: string): {
-    tunnelId: string;
-    tunnelName: string;
-    credentialsPath: string;
-};
-export declare function getTunnelTokenCli(tunnelId: string): string;
-/**
- * Write a local config.yml for cloudflared tunnel run.
- * This is the ONLY tunnel startup configuration — no remote config, no API.
- * hostnames: the actual FQDNs to route (e.g. ["joel.maxy.bot", "shop.maxy.bot"]).
- */
-export declare function writeLocalConfig(tunnelId: string, credentialsPath: string, hostnames: string[], port: number): string;
-export declare function parseConfiguredHostnames(configYmlPath: string): string[];
-export interface NsPreflightResult {
-    zoneParent: string;
-    nameservers: string[];
-    onCloudflare: boolean;
-    error?: string;
-}
-export declare function checkZoneParentOnCloudflare(hostname: string): Promise<NsPreflightResult>;
-export declare function routeDnsCli(tunnelId: string, hostname: string): Promise<{
-    created: boolean;
-    output: string;
-    fqdn: string;
-}>;
-interface LoginState {
-    pid: number;
-    startedAt: number;
-    authUrl: string;
-    logPath: string;
-    /**
-     * Byte offset in `logPath` at the moment this login was spawned. Every
-     * subsequent failure-marker parse slices the log from this offset forward
-     * so historical markers from prior (reset + respawned) attempts cannot
-     * re-trigger the failed state. Without this, `cloudflared-login.log`
-     * being append-mode across spawns would cause the handler to loop on
-     * old "Failed to fetch resource" lines forever after the first recovery.
-     *
-     * Defaults to 0 when absent (backward compatibility with pre-541 state
-     * files): a zero offset scans the whole file, which is the pre-541
-     * behaviour — safe as a one-time fallthrough because the handler's
-     * `failed` branch calls `resetAuth()` which clears the login state,
-     * guaranteeing the next spawn writes a state file with a real offset.
-     */
-    logOffset?: number;
-}
-export interface TunnelLoginResult {
-    authUrl: string;
-    alreadyRunning?: boolean;
-}
-/**
- * Login process state from the agent's perspective. Three states plus one
- * non-terminal advisory decoration.
- *
- *   in-progress               — PID alive. The OAuth-callback loop is still
- *                               listening, regardless of what the log
- *                               contains. `browserLaunchFailed: true` when
- *                               the courtesy-marker is present: cloudflared
- *                               attempted to open the browser itself and
- *                               couldn't (headless spawn context, DISPLAY
- *                               unreachable, etc.), but the sign-in can
- *                               still complete if the user opens the auth
- *                               URL in any reachable browser.
- *   failed                    — PID dead AND cert.pem absent. The login
- *                               process tore down without writing the cert.
- *                               Caller must restart. `reason` distinguishes
- *                               *why* the process is gone: `-with-marker`
- *                               when the courtesy marker was observed during
- *                               its lifetime, `-without-marker` otherwise.
- *                               Both variants trigger the same handler
- *                               response — reason is for log-side
- *                               observability only.
- *   idle                      — nothing recorded; fresh spawn required.
- *
- * `complete` (cert.pem written) is determined upstream in the tunnel-login
- * handler via `findCert()` / `validateAuth().bound` before this helper is
- * called — so it is not represented here.
- *
- * rewrite: the old `failed` state fired on marker-alone, which
- * looped restart-respawn hermetically because cloudflared re-emits the
- * courtesy marker on every spawn whose browser-launch subcommand fails.
- * Liveness (PID alive) is now the sole discriminant for in-progress; the
- * marker is informational and drives an operator-facing advisory, not a
- * restart.
- */
-export type LoginStatus = {
-    state: "in-progress";
-    loginState: LoginState;
-    browserLaunchFailed: boolean;
-} | {
-    state: "failed";
-    loginState: LoginState | null;
-    reason: "login-process-exited-without-cert" | "login-process-exited-with-marker";
-} | {
-    state: "idle";
-};
-export declare function getLoginStatus(): LoginStatus;
-export declare function tunnelLogin(): Promise<TunnelLoginResult>;
-interface TunnelState {
-    tunnelId: string;
-    tunnelName: string;
-    domain: string;
-    configPath: string;
-    credentialsPath: string;
-    adminHostname: string | null;
-    publicHostname: string | null;
-    pid: number | null;
-    startedAt: number | null;
-    connectorToken?: string;
-}
-export declare function getPersistedTunnelId(): string | null;
-export declare function getPersistedDomain(): string | null;
-export declare function getPersistedState(): TunnelState | null;
-export declare function saveTunnelIdentity(params: {
-    tunnelId: string;
-    tunnelName: string;
-    domain: string;
-    configPath: string;
-    credentialsPath: string;
-    adminHostname: string;
-    publicHostname: string | null;
-}): void;
-/**
- * Return the actual hostnames from persisted state (or derive from domain
- * for pre-521 state files).
- */
-export declare function getPersistedHostnames(): string[];
-export type HostnameFailureMode = "ok" | "dns-missing" | "cname-points-elsewhere" | "edge-unreachable" | "tunnel-not-matched";
-/**
- * Exhaustive enum of reasons `tunnel-status` can return `healthy: false`.
- * The agent's recovery sentence is a total function of this enum — every
- * arm must map to exactly one prescribed sentence in the `tunnel-status`
- * handler's `buildTunnelStatusGuidance`. Adding a value here without
- * updating the handler is a compile error (exhaustiveness check).
- */
-export type TunnelUnhealthyReason = "not-running" | "no-tunnel-configured" | "bound-account-does-not-own-hostname" | "hostname-probes-failed";
-export interface HostnameProbeResult {
-    hostname: string;
-    resolves: boolean;
-    cname: string | null;
-    httpStatus: number | null;
-    failureMode: HostnameFailureMode;
-}
-export declare function probeHostname(hostname: string, expectedTunnelId: string | null): Promise<HostnameProbeResult>;
-export interface TunnelStatus {
-    installed: boolean;
-    version: string | null;
-    hasCert: boolean;
-    hasBinding: boolean;
-    /** True when cert and binding agree. */
-    bound: boolean;
-    certAccountId: string | null;
-    boundAccountId: string | null;
-    running: boolean;
-    pid: number | null;
-    tunnelId: string | null;
-    domain: string | null;
-    /** Hostnames parsed from config.yml (authoritative for ingress). */
-    configuredHostnames: string[];
-    /** Hostnames from tunnel.state — may diverge from config.yml. */
-    persistedHostnames: string[];
-    adminHostname: string | null;
-    publicHostname: string | null;
-    upSince: number | null;
-    probes: HostnameProbeResult[];
-    /**
-     * True iff tunnel is running AND at least one hostname's CNAME points
-     * back to this tunnel (proving the signed-in Cloudflare account owns
-     * the domain being served). False means the laptop is running a tunnel
-     * that nothing on the internet is reaching — almost always "wrong
-     * Cloudflare account signed in."
-     */
-    boundAccountOwnsHostnames: boolean;
-    /**
-     * Aggregated health: true only when the tunnel is running, at least one
-     * hostname is configured, and every configured hostname probes `ok`.
-     */
-    healthy: boolean;
-    /**
-     * Structured reason for unhealthy status. "no-tunnel-configured" when
-     * config.yml or hostnames are absent; "not-running" when cloudflared is
-     * not alive; "bound-account-does-not-own-hostname" when the dominant
-     * failure mode is wrong-account; "hostname-probes-failed" otherwise.
-     */
-    unhealthyReason: TunnelUnhealthyReason | null;
-}
-export declare function getStatus(domain?: string): Promise<TunnelStatus>;
-export declare function startTunnel(params: {
-    tunnelId: string;
-    tunnelName: string;
-    domain: string;
-    configPath: string;
-    credentialsPath: string;
-}): void;
-export declare function stopTunnel(): void;
-export {};
-//# sourceMappingURL=cloudflared.d.ts.map

package/payload/platform/plugins/cloudflare/mcp/dist/lib/cloudflared.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cloudflared.d.ts","sourceRoot":"","sources":["../../src/lib/cloudflared.ts"],"names":[],"mappings":"AA2BA,UAAU,WAAW;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAID,wBAAgB,SAAS,IAAI,WAAW,CAwBvC;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC;AAcD,wBAAgB,UAAU,IAAI,MAAM,GAAG,IAAI,CAqB1C;AAED,wBAAgB,WAAW,IAAI,OAAO,CAErC;AAED,wBAAgB,OAAO,IAAI,MAAM,GAAG,IAAI,CAavC;AAcD,UAAU,cAAc;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAUD,wBAAgB,kBAAkB,IAAI,cAAc,GAAG,IAAI,CAgB1D;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,CAMrE;AA0BD,MAAM,MAAM,aAAa,GACrB,eAAe,GACf,gBAAgB,GAChB,2BAA2B,GAC3B,qCAAqC,GACrC,4BAA4B,CAAC;AAEjC,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,8DAA8D;IAC9D,MAAM,CAAC,EAAE;QACP,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC/B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED,wBAAgB,SAAS,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAgBrD;AAED;;;;;GAKG;AACH,eAAO,MAAM,qCAAqC,QAKf,CAAC;AAEpC,wBAAgB,eAAe,IAAI,MAAM,CAOxC;AAYD,wBAAgB,SAAS,IAAI;IAAE,WAAW,EAAE,OAAO,CAAC;IAAC,cAAc,EAAE,OAAO,CAAA;CAAE,CA2C7E;AAwDD,wBAAgB,OAAO,IAAI,OAAO,CAEjC;AAED,UAAU,YAAY;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,IAAI,YAAY,GAAG,IAAI,CA0BlD;AAED,6EAA6E;AAC7E,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,OAAO,EAAE,aAAa,CAAC;gBACX,MAAM,EAAE,aAAa;CAKlC;AAMD,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;IACpB,uEAAuE;IACvE,KAAK,EAAE,OAAO,CAAC;IACf,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,wBAAgB,YAAY,IAAI,cAAc,CAU7C;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,aAAa,GAAG,WAAW,GAClC,cAAc,CAUhB;AAkBD,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,GACX;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,CAkFnE;AAED,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,GACf,MAAM,CAsBR;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,MAAM,EAChB,eAAe,EAAE,MAAM,EACvB,SAAS,EAAE,MAAM,EAAE,EACnB,IAAI,EAAE,MAAM,GACX,MAAM,CAsBR;AAWD,wBAAgB,wBAAwB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,EAAE,CAcxE;AAyBD,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,YAAY,EAAE,OAAO,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,2BAA2B,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAY9F;AAoBD,wBAAsB,WAAW,CAC/B,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAsH7D;AAUD,UAAU,UAAU;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;;;;;;;;;OAaG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AA6BD,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AA0CD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,MAAM,MAAM,WAAW,GACnB;IAAE,KAAK,EAAE,aAAa,CAAC;IAAC,UAAU,EAAE,UAAU,CAAC;IAAC,mBAAmB,EAAE,OAAO,CAAA;CAAE,GAC9E;IACE,KAAK,EAAE,QAAQ,CAAC;IAChB,UAAU,EAAE,UAAU,GAAG,IAAI,CAAC;IAC9B,MAAM,EAAE,mCAAmC,GAAG,kCAAkC,CAAC;CAClF,GACD;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtB,wBAAgB,cAAc,IAAI,WAAW,CAqC5C;AA+BD,wBAAgB,WAAW,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAoIxD;AAUD,UAAU,WAAW;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AA4BD,wBAAgB,oBAAoB,IAAI,MAAM,GAAG,IAAI,CAEpD;AAED,wBAAgB,kBAAkB,IAAI,MAAM,GAAG,IAAI,CAElD;AAED,wBAAgB,iBAAiB,IAAI,WAAW,GAAG,IAAI,CAEtD;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B,GAAG,IAAI,CAYP;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,IAAI,MAAM,EAAE,CAehD;AAcD,MAAM,MAAM,mBAAmB,GAC3B,IAAI,GACJ,aAAa,GACb,wBAAwB,GACxB,kBAAkB,GAClB,oBAAoB,CAAC;AAEzB;;;;;;GAMG;AACH,MAAM,MAAM,qBAAqB,GAC7B,aAAa,GACb,sBAAsB,GACtB,qCAAqC,GACrC,wBAAwB,CAAC;AAE7B,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;IAClB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,mBAAmB,CAAC;CAClC;AAED,wBAAsB,aAAa,CACjC,QAAQ,EAAE,MAAM,EAChB,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAC9B,OAAO,CAAC,mBAAmB,CAAC,CAqE9B;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;IACpB,wCAAwC;IACxC,KAAK,EAAE,OAAO,CAAC;IACf,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,oEAAoE;IACpE,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,iEAAiE;IACjE,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC9B;;;;;;OAMG;IACH,yBAAyB,EAAE,OAAO,CAAC;IACnC;;;OAGG;IACH,OAAO,EAAE,OAAO,CAAC;IACjB;;;;;OAKG;IACH,eAAe,EAAE,qBAAqB,GAAG,IAAI,CAAC;CAC/C;AAED,wBAAsB,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CA+GtE;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;CACzB,GAAG,IAAI,CA8CP;AAED,wBAAgB,UAAU,IAAI,IAAI,CAwBjC"}