@rubytech/create-sitedesk-code 0.1.527 → 0.1.528

package/payload/platform/plugins/email/mcp/dist/tools/email-sending-identity-set.js

@@ -0,0 +1,32 @@
+import { resolveConfig, writeSendingIdentity } from "../lib/credentials.js";
+/**
+ * Task 2194 — designate the account's own outbound address.
+ *
+ * A dedicated writer rather than an `email-setup` parameter, following the
+ * `email-signature-set` precedent from Task 2097: designation has to be
+ * changeable on an account whose mailboxes already exist, and the account this
+ * was filed from holds three.
+ *
+ * The mailbox is resolved through `resolveConfig` before anything is written,
+ * so an address the account does not hold is refused naming the stored
+ * identities and nothing is touched. Uniqueness is enforced by the write, not
+ * by a check afterwards — see `writeSendingIdentity`.
+ */
+export async function emailSendingIdentitySet(params) {
+    const { accountId, mailbox } = params;
+    const resolved = await resolveConfig(accountId, mailbox);
+    if ("error" in resolved)
+        throw new Error(resolved.error);
+    const { config } = resolved;
+    const cleared = await writeSendingIdentity(accountId, config.email);
+    console.error(`[email-sending-identity-set] op=write accountId=${accountId.slice(0, 8)} mailbox=${config.email} cleared=${cleared}`);
+    return [
+        `${config.email} is now this account's sending identity. `,
+        `An email-draft, email-send or email-reply that names no mailbox composes from it, `,
+        `so the sending address is read from the account rather than chosen by whoever is drafting.`,
+        cleared
+            ? `\n\nCleared the designation from ${cleared} other mailbox${cleared === 1 ? "" : "es"}. Exactly one mailbox carries it at a time.`
+            : `\n\nNo other mailbox carried the designation.`,
+    ].join("");
+}
+//# sourceMappingURL=email-sending-identity-set.js.map

package/payload/platform/plugins/email/mcp/dist/tools/email-sending-identity-set.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-sending-identity-set.js","sourceRoot":"","sources":["../../src/tools/email-sending-identity-set.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAO5E;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,MAAgC;IAEhC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IAEtC,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACzD,IAAI,OAAO,IAAI,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzD,MAAM,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC;IAE5B,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAEpE,OAAO,CAAC,KAAK,CACX,mDAAmD,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,CAAC,KAAK,YAAY,OAAO,EAAE,CACtH,CAAC;IAEF,OAAO;QACL,GAAG,MAAM,CAAC,KAAK,2CAA2C;QAC1D,oFAAoF;QACpF,4FAA4F;QAC5F,OAAO;YACL,CAAC,CAAC,oCAAoC,OAAO,iBAAiB,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,6CAA6C;YACpI,CAAC,CAAC,+CAA+C;KACpD,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACb,CAAC"}

package/payload/platform/plugins/email/mcp/dist/tools/email-status.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"email-status.d.ts","sourceRoot":"","sources":["../../src/tools/email-status.ts"],"names":[],"mappings":"AAQA,UAAU,YAAY;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AA4FD,wBAAsB,WAAW,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CA8BvE"}
+{"version":3,"file":"email-status.d.ts","sourceRoot":"","sources":["../../src/tools/email-status.ts"],"names":[],"mappings":"AAQA,UAAU,YAAY;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AA0GD,wBAAsB,WAAW,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAwCvE"}

package/payload/platform/plugins/email/mcp/dist/tools/email-status.js

@@ -3,9 +3,20 @@ import * as imap from "../lib/imap.js";
 import * as smtp from "../lib/smtp.js";
 /** Probe one mailbox's IMAP + SMTP and render its health block. */
 async function probeOne(accountId, config) {
+    // Task 2194. The account's own outbound address is a stored fact about this
+    // mailbox, so it is reported on a single-mailbox account as well as a
+    // multi-mailbox one, and above the credential check rather than below it: a
+    // broken credential changes the mailbox's health, not which address the
+    // account sends from, and a failing mailbox is exactly when someone is
+    // reading this looking for it.
+    const identityLine = config.sendingIdentity === true
+        ? "Sending identity: yes — a draft, send or reply that names no mailbox composes from this address"
+        : "";
     const credResult = await loadCredentials(accountId, config.email);
     if ("error" in credResult) {
-        return `Email: ${config.email} — ${credResult.error}`;
+        return [`Email: ${config.email} — ${credResult.error}`, identityLine]
+            .filter(Boolean)
+            .join("\n");
     }
     const { password } = credResult.credentials;
     // Test IMAP
@@ -56,6 +67,7 @@ async function probeOne(accountId, config) {
         `IMAP: ${config.imapHost}:${config.imapPort} (${config.imapSecurity}) — ${imapStatus}`,
         `SMTP: ${config.smtpHost}:${config.smtpPort} (${config.smtpSecurity}) — ${smtpStatus}`,
         lastConnectLine,
+        identityLine,
         inboxInfo,
     ]
         .filter(Boolean)
@@ -112,7 +124,15 @@ export async function emailStatus(params) {
         blocks.push(multi ? `Mailbox: ${config.email}\n${body}` : body);
     }
     const header = multi ? `${configs.length} mailboxes attached.\n\n` : "";
+    // Task 2194. Computed from `configs`, the whole account, and not from
+    // `targets` — a mailbox-narrowed report must not hide the account's gap.
+    // Only multi-mailbox accounts have a gap: resolveConfig returns the sole
+    // mailbox on a single-mailbox account without any designation.
+    const noneDesignated = multi && !configs.some((c) => c.sendingIdentity === true);
+    const identityGap = noneDesignated
+        ? `\n\nNo mailbox is designated as this account's sending identity, so a draft, send or reply that names no mailbox is refused rather than resolved. Ask the operator which address this account sends from, then run email-sending-identity-set with it.`
+        : "";
     logOutcome("ok");
-    return header + blocks.join("\n\n");
+    return header + blocks.join("\n\n") + identityGap;
 }
 //# sourceMappingURL=email-status.js.map

package/payload/platform/plugins/email/mcp/dist/tools/email-status.js.map

@@ -1 +1 @@
-{"version":3,"file":"email-status.js","sourceRoot":"","sources":["../../src/tools/email-status.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EAAE,eAAe,EAAE,mBAAmB,EACjD,uBAAuB,EAAE,yBAAyB,GAEnD,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,IAAI,MAAM,gBAAgB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,gBAAgB,CAAC;AAOvC,mEAAmE;AACnE,KAAK,UAAU,QAAQ,CAAC,SAAiB,EAAE,MAAmB;IAC5D,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAClE,IAAI,OAAO,IAAI,UAAU,EAAE,CAAC;QAC1B,OAAO,UAAU,MAAM,CAAC,KAAK,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC;IACxD,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,GAAG,UAAU,CAAC,WAAW,CAAC;IAE5C,YAAY;IACZ,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,UAAU,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAE5D,8EAA8E;IAC9E,4EAA4E;IAC5E,+EAA+E;IAC/E,6EAA6E;IAC7E,2BAA2B;IAC3B,IAAI,eAAuB,CAAC;IAC5B,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,uBAAuB,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,sEAAsE;QACxE,CAAC;QACD,eAAe,GAAG,4BAA4B,GAAG,EAAE,CAAC;IACtD,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,MAAM,yBAAyB,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QACtE,eAAe,GAAG,IAAI;YACpB,CAAC,CAAC,4BAA4B,IAAI,EAAE;YACpC,CAAC,CAAC,kDAAkD,CAAC;IACzD,CAAC;IAED,YAAY;IACZ,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,UAAU,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAE5D,qCAAqC;IACrC,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACzD,SAAS,GAAG,YAAY,KAAK,WAAW,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,GAAG,mCAAmC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,KAAK,MAAM,CAAC,KAAK;QACpD,CAAC,CAAC,kBAAkB,MAAM,CAAC,YAAY,WAAW,MAAM,CAAC,KAAK,GAAG;QACjE,CAAC,CAAC,UAAU,MAAM,CAAC,KAAK,EAAE,CAAC;IAE7B,OAAO;QACL,SAAS;QACT,eAAe,MAAM,CAAC,KAAK,WAAW,mBAAmB,EAAE,GAAG;QAC9D,SAAS,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,YAAY,OAAO,UAAU,EAAE;QACtF,SAAS,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,YAAY,OAAO,UAAU,EAAE;QACtF,eAAe;QACf,SAAS;KACV;SACE,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH;;;;;;;;;;;;;;;GAeG;AACH,SAAS,UAAU,CAAC,OAAiD;IACnE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,OAAO,IAAI,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAoB;IACpD,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,UAAU,CAAC,YAAY,CAAC,CAAC;QACzB,OAAO,iRAAiR,CAAC;IAC3R,CAAC;IAED,IAAI,OAAO,GAAG,OAAO,CAAC;IACtB,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5D,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnD,UAAU,CAAC,kBAAkB,CAAC,CAAC;YAC/B,OAAO,cAAc,MAAM,CAAC,OAAO,+CAA+C,GAAG,0BAA0B,MAAM,CAAC,OAAO,wCAAwC,MAAM,CAAC,OAAO,yDAAyD,CAAC;QAC/O,CAAC;QACD,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IAED,0EAA0E;IAC1E,uEAAuE;IACvE,2CAA2C;IAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IACjC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,MAAM,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,0BAA0B,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,UAAU,CAAC,IAAI,CAAC,CAAC;IACjB,OAAO,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACtC,CAAC"}
+{"version":3,"file":"email-status.js","sourceRoot":"","sources":["../../src/tools/email-status.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EAAE,eAAe,EAAE,mBAAmB,EACjD,uBAAuB,EAAE,yBAAyB,GAEnD,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,IAAI,MAAM,gBAAgB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,gBAAgB,CAAC;AAOvC,mEAAmE;AACnE,KAAK,UAAU,QAAQ,CAAC,SAAiB,EAAE,MAAmB;IAC5D,4EAA4E;IAC5E,sEAAsE;IACtE,4EAA4E;IAC5E,wEAAwE;IACxE,uEAAuE;IACvE,+BAA+B;IAC/B,MAAM,YAAY,GAChB,MAAM,CAAC,eAAe,KAAK,IAAI;QAC7B,CAAC,CAAC,iGAAiG;QACnG,CAAC,CAAC,EAAE,CAAC;IAET,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAClE,IAAI,OAAO,IAAI,UAAU,EAAE,CAAC;QAC1B,OAAO,CAAC,UAAU,MAAM,CAAC,KAAK,MAAM,UAAU,CAAC,KAAK,EAAE,EAAE,YAAY,CAAC;aAClE,MAAM,CAAC,OAAO,CAAC;aACf,IAAI,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,GAAG,UAAU,CAAC,WAAW,CAAC;IAE5C,YAAY;IACZ,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,UAAU,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAE5D,8EAA8E;IAC9E,4EAA4E;IAC5E,+EAA+E;IAC/E,6EAA6E;IAC7E,2BAA2B;IAC3B,IAAI,eAAuB,CAAC;IAC5B,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,uBAAuB,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,sEAAsE;QACxE,CAAC;QACD,eAAe,GAAG,4BAA4B,GAAG,EAAE,CAAC;IACtD,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,MAAM,yBAAyB,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QACtE,eAAe,GAAG,IAAI;YACpB,CAAC,CAAC,4BAA4B,IAAI,EAAE;YACpC,CAAC,CAAC,kDAAkD,CAAC;IACzD,CAAC;IAED,YAAY;IACZ,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,UAAU,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAE5D,qCAAqC;IACrC,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACzD,SAAS,GAAG,YAAY,KAAK,WAAW,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,GAAG,mCAAmC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,KAAK,MAAM,CAAC,KAAK;QACpD,CAAC,CAAC,kBAAkB,MAAM,CAAC,YAAY,WAAW,MAAM,CAAC,KAAK,GAAG;QACjE,CAAC,CAAC,UAAU,MAAM,CAAC,KAAK,EAAE,CAAC;IAE7B,OAAO;QACL,SAAS;QACT,eAAe,MAAM,CAAC,KAAK,WAAW,mBAAmB,EAAE,GAAG;QAC9D,SAAS,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,YAAY,OAAO,UAAU,EAAE;QACtF,SAAS,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,YAAY,OAAO,UAAU,EAAE;QACtF,eAAe;QACf,YAAY;QACZ,SAAS;KACV;SACE,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH;;;;;;;;;;;;;;;GAeG;AACH,SAAS,UAAU,CAAC,OAAiD;IACnE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,OAAO,IAAI,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAoB;IACpD,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,UAAU,CAAC,YAAY,CAAC,CAAC;QACzB,OAAO,iRAAiR,CAAC;IAC3R,CAAC;IAED,IAAI,OAAO,GAAG,OAAO,CAAC;IACtB,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5D,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnD,UAAU,CAAC,kBAAkB,CAAC,CAAC;YAC/B,OAAO,cAAc,MAAM,CAAC,OAAO,+CAA+C,GAAG,0BAA0B,MAAM,CAAC,OAAO,wCAAwC,MAAM,CAAC,OAAO,yDAAyD,CAAC;QAC/O,CAAC;QACD,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IAED,0EAA0E;IAC1E,uEAAuE;IACvE,2CAA2C;IAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IACjC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,MAAM,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,0BAA0B,CAAC,CAAC,CAAC,EAAE,CAAC;IAExE,sEAAsE;IACtE,yEAAyE;IACzE,yEAAyE;IACzE,+DAA+D;IAC/D,MAAM,cAAc,GAAG,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC;IACjF,MAAM,WAAW,GAAG,cAAc;QAChC,CAAC,CAAC,wPAAwP;QAC1P,CAAC,CAAC,EAAE,CAAC;IAEP,UAAU,CAAC,IAAI,CAAC,CAAC;IACjB,OAAO,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,WAAW,CAAC;AACpD,CAAC"}

package/payload/platform/plugins/email/references/email-reference.md

@@ -54,12 +54,18 @@ Every operational tool (`email-read`, `email-search`, `email-fetch-body`, `email
 - `mailbox` given and configured: act on that mailbox.
 - `mailbox` given but not configured: refused with `No mailbox <addr> is configured. Stored mailbox identities: [...]. Run email-setup for <addr>. This lists IMAP mailboxes only; if <addr> is a Microsoft 365 address, call outlook-mailbox-list.`
 - `mailbox` omitted, exactly one mailbox configured: act on it (single-mailbox installs pass nothing).
-- `mailbox` omitted, two or more configured: refused with `Multiple mailboxes are configured. Stored mailbox identities: [...]. Pass mailbox to choose one.`
+- `mailbox` omitted, two or more configured, one designated as the account's sending identity: act on the designated mailbox.
+- `mailbox` omitted, two or more configured, none designated: refused with `Multiple mailboxes are configured and none is designated as this account's sending identity. Stored mailbox identities: [...]. Pass mailbox to choose one for this call, or run email-sending-identity-set to designate the address this account sends from, so calls that name no mailbox resolve it without guessing.`
+- `mailbox` omitted, two or more designated: refused naming the designated addresses. The setter clears every sibling in one statement, so this state was written outside the plugin; electing one of them would be the silent pick the designation exists to remove.
 
 Read the attached mailboxes with `email-status`, which lists every one, before naming a selector. To act on a message in a second inbox, pass that inbox's address as `mailbox` on the operating tool; there is no setup swap. The poll high-water mark (`lastFetchedUid`) and the pending `email-fetch` / `email-ingest` batch are per-mailbox, so triaging two inboxes never crosses their state.
 
 `email-graph-query` is account-scoped (it reads stored archives, not a live mailbox) and takes no `mailbox` argument. Every credential load logs `[email] cred-resolve ... email=<addr> source=store`, naming the resolved mailbox, so a per-call selection is visible in the logs.
 
+**Designating the sender: `email-sending-identity-set`.** An account holding two or more mailboxes has no default until one is designated. The setter takes one `mailbox`, resolves it through the same `resolveConfig` every operational tool uses (an address the account does not hold is refused naming the stored identities, and nothing is written), then designates it and removes the flag from every sibling in one statement — uniqueness is a property of the write, not of a check afterwards. It logs `[email-sending-identity-set] op=write accountId=<id8> mailbox=<addr> cleared=<n>`; `cleared=` is what makes that uniqueness claim auditable. Re-running `email-setup` on a designated mailbox preserves the designation, because `writeConfig` names the property in neither its `SET` nor its `REMOVE` list. The address must come from the operator: a routing rule, a signature or an inbound reconcile trigger each name an address for a different purpose, and reading one of those as the sending address is exactly the inference this tool exists to remove.
+
+Every resolution that picks a mailbox logs `[email] op=identity-resolve accountId=<id8> mailbox=<addr> source=<explicit|sendingIdentity|sole>`, so a wrong-mailbox send is diagnosed from one line naming both the address and the route that chose it. Refusals log nothing here — they pick no mailbox, and each returns a typed error naming the stored identities. `email-status` is the standing check for the account that has never drafted: it marks the designated mailbox and states plainly when a multi-mailbox account has none.
+
 ## Reading and Searching
 
 `email-read` and `email-search` return message metadata plus a short body preview (capped at 500 characters): UID, sender, subject, date, and the opening of the body. They are screening tools — use them to find a message, not to read it in full.
@@ -191,9 +197,11 @@ If neither the UID nor the Message-ID resolves a live draft, the prior draft is
 - `email-signature.html` is the HTML signature block, appended to the message html.
 - `email-signature.font` is an optional single-line CSS font-family; when present the html part is wrapped in one `font-family` div.
 
-The plain-text signature is appended whenever it exists. The html signature and the font wrap apply only when the caller supplied html, because font has no plain-text analogue. The caller passes body and html without the signature, and the tool appends it. Each draft compose logs `[email-draft] op=signature accountId=<id8> applied=<bool> asset=<path>`; `applied=false` on a turn that produced a draft is the failure signal, meaning the asset was missing or the account directory did not resolve.
+The plain-text signature is appended whenever it exists. The html signature is appended whenever it exists too: when the caller passed no html body, one is derived from the plain body — escaped, blank line to paragraph, single newline to line break — so the stored html signature has somewhere to land and the draft becomes `multipart/alternative`. The derivation reads the caller's body, not the text-signed one, so each MIME alternative carries exactly one sign-off. An account with no stored `.html` derives nothing and its drafts stay `text/plain`. The font wrap applies to whichever html body exists, derived or supplied, and has no plain-text analogue.
+
+Each draft compose logs `[email-draft] op=signature accountId=<id8> text=<bool> html=<bool> derivedHtml=<bool> asset=<path>`, and each draft tool's own result names the parts that landed and the part the account has not stored. The result sentence is the proof: the log is unreachable from the tools a drafting agent holds. A part reported false means no file of that kind is stored, not that the append failed.
 
-**Writing the files: `email-signature-set`.** Those three files are installed only by `email-signature-set`, which writes to the same directory the draft path reads, so a signature stored through it cannot land somewhere a draft would miss. Text and html are stored byte-for-byte; font is stored trimmed. **Omitting a parameter removes its file**, so a text-only call clears a stale `.html` rather than leaving it to keep being appended — pass every part that should survive on each call. Omitting is the only way to remove: an empty string is a value, so `text: ""` stores an empty signature and makes the draft log report `applied=true` while the recipient sees nothing. A call with no parameters at all is refused rather than treated as "erase everything", and an unresolvable account directory is refused before anything is touched. The write logs `[email-signature-set] op=write accountId=<id8> files=<written> removed=<removed>`. Until this tool shipped the loader had no writer at all, which is why accounts carried `applied=false` and agents hand-built signatures into draft bodies; see `skills/email-signature/SKILL.md` for the standing rules.
+**Writing the files: `email-signature-set`.** Those three files are installed only by `email-signature-set`, which writes to the same directory the draft path reads, so a signature stored through it cannot land somewhere a draft would miss. Text and html are stored byte-for-byte; font is stored trimmed. **Omitting a parameter removes its file**, so a text-only call clears a stale `.html` rather than leaving it to keep being appended — pass every part that should survive on each call. Omitting is the only way to remove: an empty string is a value, so `text: ""` stores an empty signature and makes the draft report `plain text applied` while the recipient sees nothing. A call with no parameters at all is refused rather than treated as "erase everything", and an unresolvable account directory is refused before anything is touched. The write logs `[email-signature-set] op=write accountId=<id8> files=<written> removed=<removed>`. Until this tool shipped the loader had no writer at all, which is why accounts had no signature at all and agents hand-built them into draft bodies; see `skills/email-signature/SKILL.md` for the standing rules.
 
 ### Transient connection drops
 

package/payload/platform/plugins/email/skills/email-composition/SKILL.md

@@ -131,6 +131,8 @@ Same as the reply flow with two differences:
 
 Multi-recipient drafting: if the operator names a single person, use that address. If the operator names a group ("email the team", "everyone from yesterday's viewings"), ask which addresses to include — list candidates if you can resolve them from the graph, otherwise ask the operator to enumerate. Do not invent recipients.
 
+**The sending mailbox is the account's, not yours to choose.** When the operator has not named a mailbox to send from, pass no `mailbox` and let the tool resolve the account's sending identity. Do not pick one, and do not write one into a brief for another agent. If the call is refused because the account has no designated sending identity, that refusal is the correct outcome: ask the operator which address they send from, then run `email-sending-identity-set` with their answer. An address that appears in a routing rule, a signature, a domain or an inbound trigger is named there for a different purpose and is not evidence of what the account sends from.
+
 ## Flow — save to Drafts instead of sending
 
 When the operator's stated outcome is a reviewable, unsent email — signalled by intent like "draft it", "leave it in drafts", "don't send yet", "the same as last time but leave it in the draft box", "let me review before sending" — the approval step changes target: the approved draft goes to `email-draft`, not `email-send`/`email-reply`. Everything upstream (thread identification, voice conditioning, the present-and-edit loop) is identical.
@@ -183,6 +185,7 @@ Delete is move-to-Trash only. There is no permanent/hard delete, no delete-by-cr
 | Situation | Behaviour |
 |-----------|-----------|
 | Multiple threads match the operator's description | Surface 3-5 candidates and ask. Never guess. |
+| Account has two or more mailboxes and the operator named none | Pass no `mailbox`; the account's designated sending identity resolves it. If the call is refused because none is designated, ask the operator which address they send from and run `email-sending-identity-set`. Never infer the address. |
 | CC / BCC in the original thread | Reply to sender only by default. Ask explicitly before copying others. |
 | Recipient's contact record carries an always-CC or alternate address | Apply it to To/Cc in the draft and show it for approval. Explicit operator instruction on this send overrides it. |
 | `replyAll` requested | Pass `replyAll: true` to `email-reply`. Otherwise omit (defaults false). |

package/payload/platform/plugins/email/skills/email-signature/SKILL.md

@@ -10,9 +10,20 @@ Invoked from `specialists:personal-assistant`, or by the admin session directly.
 ## What success looks like
 
 The operator's real signature is stored in the account, and every draft from then on carries it
-byte-for-byte with no signature text the model wrote. `email-draft` logs
-`[email-draft] op=signature applied=true asset=<path>` on the next draft. That log line is the proof;
-a claim that the signature is set without it is not evidence.
+byte-for-byte with no signature text the model wrote.
+
+**The proof is the draft tool's own result.** `email-draft` and `email-draft-edit` each end with one
+of four sentences, naming what that draft actually carried:
+
+- `Signature: plain text and HTML (body derived from the plain text) applied.`
+- `Signature: plain text and HTML applied.`
+- `Signature: plain text applied. No HTML signature is stored.`
+- `Signature: none stored for this account.`
+
+`email-draft` also logs `[email-draft] op=signature text=<bool> html=<bool> derivedHtml=<bool>
+asset=<path>`, which says the same thing from the other side. It is corroboration, not the proof: that
+log is unreachable from the tools a drafting agent holds. A claim that the signature is set, without
+the result sentence, is not evidence.
 
 ## The convention
 
@@ -22,7 +33,7 @@ judgement in the path. It reads three files at the account root:
 | File | Content | How it is applied |
 |---|---|---|
 | `email-signature.txt` | Plain-text signature | Appended to the plain-text body after a blank line, byte-for-byte |
-| `email-signature.html` | HTML signature | Appended to the HTML body, byte-for-byte |
+| `email-signature.html` | HTML signature | Appended to the HTML body, byte-for-byte. A draft composed with no HTML body gets one derived from its plain text, so a stored HTML signature always lands |
 | `email-signature.font` | One CSS font-family value, e.g. `Georgia, serif` | Wraps the whole HTML body in a `font-family` div. HTML-only, no plain-text effect |
 
 `email-signature-set` is the only sanctioned way to write them. It writes to the exact directory the
@@ -46,9 +57,9 @@ that should survive; a part left out has its file deleted, which is how a stale
 cleared. A call with no parts at all is refused rather than treated as "erase everything".
 
 **Omitting a key is the only way to remove a part.** An empty string is a value, so `text: ""` stores an
-empty signature rather than clearing it: the file exists, the draft log reports `applied=true`, and the
+empty signature rather than clearing it: the file exists, the draft reports `plain text applied`, and the
 recipient sees a blank line where the sign-off should be. That is the one way to manufacture a false
-`applied=true`, so never pass `""` to clear something — leave the key out.
+`applied`, so never pass `""` to clear something — leave the key out.
 
 **One signature per account.** There is no per-mailbox signature: the loader reads one account root.
 An account whose mailboxes need different sign-offs is a gap to report, not something to work around
@@ -56,6 +67,13 @@ by putting the difference in a draft body.
 
 ## When a draft came out wrong
 
-`applied=false` in the draft log means the account has no stored signature, not that the append
-failed. Install it rather than compensating in the body. If `applied=true` but the content is wrong,
-the stored file is wrong: re-read the source of truth and set it again.
+Read the draft's own result sentence. Each half names a stored file, not a failure:
+
+- **`No plain text signature is stored`** — the account has no `email-signature.txt`.
+- **`No HTML signature is stored`** — the account has no `email-signature.html`. This is why a draft
+  arrives without the logo or letterhead while still carrying the sign-off.
+- **`Signature: none stored for this account`** — neither file is there.
+
+In every case the fix is to install the missing part with `email-signature-set`, never to compensate
+in the draft body. If a part is reported applied but its content is wrong, the stored file is wrong:
+re-read the source of truth and set it again.

package/payload/platform/scripts/__tests__/vnc-cdp-liveness.test.sh

@@ -96,10 +96,13 @@ SS
 exec /bin/sleep 0.02
 SLEEP
 
-  # Stub Chromium: record the launch; in "ready" mode open the CDP port.
+  # Stub Chromium: record the launch — its argv and the DISPLAY it inherited,
+  # so a test can assert HOW Chromium was launched, not just that it was
+  # (Task 1562 turned the virtual-mode launch headless). In "ready" mode open
+  # the CDP port.
   cat > "$FAKE_BIN/chromium-stub" <<'STUB'
 #!/usr/bin/env bash
-echo "launch" >> "$STATE_DIR/chromium-calls"
+echo "launch DISPLAY=${DISPLAY:-unset} $*" >> "$STATE_DIR/chromium-calls"
 if [ "$(cat "$STATE_DIR/chromium-mode")" = "ready" ]; then
   cat "$STATE_DIR/cdp-port" >> "$STATE_DIR/ports"
 fi
@@ -209,11 +212,31 @@ case_native_noop() {
   teardown
 }
 
+# --- Case 6: virtual-mode respawn launches Chromium HEADLESS -------------
+# Task 1562. The respawned browser must not need an X display: `--headless=new`
+# is present, the X11 ozone backend is not requested, and no DISPLAY is
+# exported into the launch. Without this the respawn silently depends on
+# Xtigervnc and the display stack can never be retired.
+case_respawn_is_headless() {
+  echo "=== CASE 6: virtual-mode respawn launches Chromium headless ==="
+  setup; write_env virtual
+  set_ports "$RFB_PORT"                  # display up, CDP down → respawn
+  set_mode ready
+  run_liveness >/dev/null
+  local call; call="$(cat "$STATE_DIR/chromium-calls")"
+  assert "launch requests --headless=new"   "$(echo "$call" | grep -q -- '--headless=new' && echo 1 || echo 0)"
+  assert "launch does not request x11 ozone" "$(echo "$call" | grep -q -- '--ozone-platform=x11' && echo 0 || echo 1)"
+  assert "launch inherits no DISPLAY"        "$(echo "$call" | grep -q 'DISPLAY=unset' && echo 1 || echo 0)"
+  assert "launch keeps the brand CDP port"   "$(echo "$call" | grep -q -- "--remote-debugging-port=$CDP_PORT" && echo 1 || echo 0)"
+  teardown
+}
+
 case_reachable_noop
 case_down_respawns_ready
 case_backoff_no_hotloop
 case_cooldown_retries
 case_native_noop
+case_respawn_is_headless
 
 echo ""
 echo "==================================="

package/payload/platform/scripts/vnc.sh

@@ -8,9 +8,15 @@
 #   Xtigervnc :${VNC_DISPLAY}      — virtual X11 display per brand
 #   Xtigervnc -rfbport ${RFB_PORT} — RFB port per brand
 #   websockify :${WEBSOCKIFY_PORT} — WebSocket bridge per brand
-#   Chromium                       — headed browser with --user-data-dir per brand
+#   Chromium                       — headless browser with --user-data-dir per brand
 #   CDP :${CDP_PORT}               — browser plugin (browser-render) CDP endpoint per brand
 #
+# Task 1562: virtual-mode Chromium is HEADLESS. The X display, RFB port and
+# websockify still boot, but no browser renders onto them and no surface reads
+# them — every consumer (agent browser-* tools, the operator screencast viewer,
+# the Claude sign-in browser) is a CDP client on ${CDP_PORT}. Retiring the three
+# now-unread components, their ports and their apt deps is Task 2198.
+#
 # Brand isolation (Tasks 553 + 924): the X display number, Chromium profile,
 # rfbport, websockify port, and CDP port are all brand-scoped so any number
 # of brands on the same device run their full VNC stacks concurrently
@@ -27,7 +33,7 @@
 # (/api/admin/actions/*) rather than an in-browser terminal.
 #
 # Display modes (DISPLAY_MODE env var, set by installer --display flag):
-#   virtual (default) — Chromium runs on the brand's :${VNC_DISPLAY}
+#   virtual (default) — Chromium runs headless; no display at all (Task 1562)
 #   native            — Chromium runs on the login session's real display
 #                        (discovered via loginctl, NOT from $DISPLAY which
 #                         is poisoned by the systemd Environment=DISPLAY line)
@@ -263,7 +269,9 @@ wait_for_port() {
 
 # Return 0 if a visible Chromium window is mapped on the given X display.
 # Used as a log-only observability invariant after CDP comes up (callers do
-# NOT gate on the result). Matches the WM_CLASS of both Chromium (Pi .deb,
+# NOT gate on the result). Native mode is its only caller since Task 1562 —
+# virtual mode is headless and maps no window anywhere. Matches the WM_CLASS
+# of both Chromium (Pi .deb,
 # class "chromium") and Google Chrome (Noble, class "google-chrome") via the
 # [Cc]hrom regex. Degrades to non-zero when xdotool is absent or the display
 # is non-X11, so the caller logs the existing non-gating "no window visible"
@@ -322,19 +330,32 @@ discover_native_session() {
   fi
 }
 
-start_chrome_on() {
-  local target_display="$1"
-  local label="$2"  # "vnc" (native mode uses start_chrome_native instead)
+# Virtual-mode Chromium: headless, driven entirely over CDP (Task 1562).
+#
+# Nothing reads pixels off an X display any more — the agent's browser-* tools
+# and the operator's screencast viewer (Task 1561) are both CDP clients, and the
+# Claude sign-in browser now reaches this same instance through the wrapper's
+# CDP handover (writeChromiumWrapper, app/lib/vnc.ts) rather than by launching a
+# second Chromium against the profile.
+#
+# DISPLAY and WAYLAND_DISPLAY are actively unset rather than merely omitted: the
+# brand's edge.service stamps `Environment=DISPLAY=:${VNC_DISPLAY}`, so an
+# inherited DISPLAY would otherwise reach Chromium and re-couple the headless
+# browser to the X stack this task exists to decouple it from.
+#
+# `--window-size` still matters headless: it fixes the screencast frame
+# dimensions the viewer renders.
+start_chrome() {
   # Brand-scoped Chromium kill: only this brand's profile-bound chromium.
   pkill -f "chromium.*--user-data-dir=${CHROMIUM_PROFILE_DIR}" 2>/dev/null || true
   sleep 0.3
 
   mkdir -p "${CHROMIUM_PROFILE_DIR}"
-  log "Starting Chromium on ${target_display} (${label}) profile=${CHROMIUM_PROFILE_DIR} CDP=:${CDP_PORT}"
+  log "Starting Chromium headless profile=${CHROMIUM_PROFILE_DIR} CDP=:${CDP_PORT}"
 
-  DISPLAY="${target_display}" "$CHROMIUM_BIN" \
+  env -u DISPLAY -u WAYLAND_DISPLAY "$CHROMIUM_BIN" \
+    --headless=new \
     --user-data-dir="${CHROMIUM_PROFILE_DIR}" \
-    --ozone-platform=x11 \
     --no-sandbox \
     --test-type \
     --disable-dev-shm-usage \
@@ -353,32 +374,19 @@ start_chrome_on() {
     --noerrdialogs \
     --metrics-recording-only \
     --window-size=1280,800 \
-    --window-position=0,0 \
     --remote-debugging-port="${CDP_PORT}" \
     about:blank \
     >> "$LOG_FILE" 2>&1 &
 
   if wait_for_port "${CDP_PORT}"; then
-    # Log-only observability: the display-membership invariant is
-    # asserted but does NOT gate success here. Chromium does not D-Bus-delegate
-    # its window creation, so the failure mode is not currently reachable — but
-    # making the invariant visible now means future backend swaps (e.g.
-    # snap-installed Chromium on Ubuntu with different IPC) surface the drift
-    # in vnc-boot.log rather than as a silent-black iframe.
-    if check_window_on_display "${target_display}"; then
-      log "Chromium ready (${label}) with CDP on :${CDP_PORT} windowPresent=true"
-    else
-      log "WARNING: Chromium CDP up on :${CDP_PORT} but no window visible on ${target_display} (${label}) — observability-only, not gating"
-    fi
+    log "Chromium ready (headless) with CDP on :${CDP_PORT}"
+    echo "[vnc] op=chromium-headless-start cdp=:${CDP_PORT} outcome=ready"
   else
-    log "ERROR: Chromium failed to start on ${target_display} (${label}) — CDP port ${CDP_PORT} not listening (browser-specialist degraded)"
+    log "ERROR: Chromium failed to start headless — CDP port ${CDP_PORT} not listening (browser-specialist degraded)"
+    echo "[vnc] op=chromium-headless-start cdp=:${CDP_PORT} outcome=failed"
   fi
 }
 
-start_chrome() {
-  start_chrome_on "${VNC_DISPLAY}" "vnc"
-}
-
 # ---------------------------------------------------------------------------
 # Retired in Task 287: the admin-UI terminal and browser-overlay surfaces
 # are gone. This script still launches Chromium for legacy installs where

package/payload/platform/services/claude-session-manager/dist/account-dir-schema-reconcile.d.ts

@@ -15,7 +15,7 @@ export interface ReconcileResult extends ReconcileCounts {
 /** The single per-run summary line body. A non-zero count is the standing signal
  *  that an agent authored folders the hard guards could not prevent. Pure
  *  formatter so the emitter and its test share one wording. */
-export declare function formatReconcileLine(c: ReconcileCounts, homeMissing?: number, homeUnaudited?: number, agentDrift?: number): string;
+export declare function formatReconcileLine(c: ReconcileCounts, homeMissing?: number, homeUnaudited?: number, agentDrift?: number, hooksMissing?: number, hooksUnaudited?: number): string;
 /** Parse the fenced ```allowed-top-level block from an account's SCHEMA.md —
  *  the same structured set fs-schema-guard.sh parses with awk. Returns the
  *  entry names (blank lines dropped). An absent block yields an empty set. */
@@ -29,6 +29,29 @@ export interface ReconcileDeps {
     accountsRoot: string;
     logger: (line: string) => void;
 }
+/**
+ * Task 2196 — which of the required file-write fences this account's settings do
+ * not register, as `<matcher>:<hook filename>`.
+ *
+ * The cross-account refusal and the account-layout fences live in those hooks,
+ * so an account that does not register them is unfenced while every other signal
+ * reads clean: a hook that never runs emits nothing, which is precisely the
+ * state that cannot be seen by watching for its output.
+ *
+ * Returns null when settings.json is absent or unparseable, which the caller
+ * counts as "not audited" rather than "clean". Without that, an install where no
+ * account has settings reports hooks-missing=0 and reads as fenced.
+ *
+ * The matcher is compared for equality, which is the shape
+ * provision-account-dir.sh writes for all five. A settings file that reaches the
+ * same effect another way — a matcher-less catch-all entry, or a regex
+ * alternation — reads as missing here. That is intended: what this audits is
+ * whether the account carries the provisioned fence, and drift from the template
+ * is worth a line even when it happens to be equivalent.
+ */
+export declare function hookRegistration(accountDir: string): {
+    missing: string[];
+} | null;
 /** One reconcile pass over every account under the accounts root: one op=strays
  *  line naming the unaccounted-for entries of each account that has any, then the
  *  single summary line. An account is any child dir with an account.json (the

package/payload/platform/services/claude-session-manager/dist/account-dir-schema-reconcile.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"account-dir-schema-reconcile.d.ts","sourceRoot":"","sources":["../src/account-dir-schema-reconcile.ts"],"names":[],"mappings":"AA8EA,MAAM,WAAW,eAAe;IAC9B,aAAa,EAAE,MAAM,CAAA;IACrB,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,eAAgB,SAAQ,eAAe;IACtD;;;;;0CAKsC;IACtC,UAAU,EAAE,MAAM,EAAE,CAAA;CACrB;AAED;;+DAE+D;AAC/D,wBAAgB,mBAAmB,CACjC,CAAC,EAAE,eAAe,EAClB,WAAW,SAAI,EACf,aAAa,SAAI,EACjB,UAAU,SAAI,GACb,MAAM,CAGR;AAED;;8EAE8E;AAC9E,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAcpE;AA+ED;;;8EAG8E;AAC9E,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,eAAe,CAoCpE;AAED,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAC/B;AA0DD;;;;;;;;;;;;;iCAaiC;AACjC,wBAAgB,YAAY,CAAC,IAAI,EAAE,aAAa,GAAG,IAAI,CA8DtD;AAED,MAAM,WAAW,yBAAyB;IACxC,KAAK,IAAI,IAAI,CAAA;IACb,IAAI,IAAI,IAAI,CAAA;CACb;AAED;oDACoD;AACpD,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE,aAAa,GAAG;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,GAC3C,yBAAyB,CAiB3B"}
+{"version":3,"file":"account-dir-schema-reconcile.d.ts","sourceRoot":"","sources":["../src/account-dir-schema-reconcile.ts"],"names":[],"mappings":"AA8EA,MAAM,WAAW,eAAe;IAC9B,aAAa,EAAE,MAAM,CAAA;IACrB,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,eAAgB,SAAQ,eAAe;IACtD;;;;;0CAKsC;IACtC,UAAU,EAAE,MAAM,EAAE,CAAA;CACrB;AAED;;+DAE+D;AAC/D,wBAAgB,mBAAmB,CACjC,CAAC,EAAE,eAAe,EAClB,WAAW,SAAI,EACf,aAAa,SAAI,EACjB,UAAU,SAAI,EACd,YAAY,SAAI,EAChB,cAAc,SAAI,GACjB,MAAM,CAIR;AAED;;8EAE8E;AAC9E,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAcpE;AA+ED;;;8EAG8E;AAC9E,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,eAAe,CAoCpE;AAED,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAC/B;AAqED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,IAAI,CA6BjF;AAED;;;;;;;;;;;;;iCAaiC;AACjC,wBAAgB,YAAY,CAAC,IAAI,EAAE,aAAa,GAAG,IAAI,CA6EtD;AAED,MAAM,WAAW,yBAAyB;IACxC,KAAK,IAAI,IAAI,CAAA;IACb,IAAI,IAAI,IAAI,CAAA;CACb;AAED;oDACoD;AACpD,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE,aAAa,GAAG;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,GAC3C,yBAAyB,CAiB3B"}

package/payload/platform/services/claude-session-manager/dist/account-dir-schema-reconcile.js

@@ -73,9 +73,10 @@ const FILE_NAME_RE = /^[a-z0-9-]+(\.[a-z0-9-]+)*$/;
 /** The single per-run summary line body. A non-zero count is the standing signal
  *  that an agent authored folders the hard guards could not prevent. Pure
  *  formatter so the emitter and its test share one wording. */
-export function formatReconcileLine(c, homeMissing = 0, homeUnaudited = 0, agentDrift = 0) {
+export function formatReconcileLine(c, homeMissing = 0, homeUnaudited = 0, agentDrift = 0, hooksMissing = 0, hooksUnaudited = 0) {
     return `${TAG} stray-top-level=${c.strayTopLevel} over-deep=${c.overDeep} bad-name=${c.badName}`
-        + ` home-missing=${homeMissing} home-unaudited=${homeUnaudited} agent-drift=${agentDrift}`;
+        + ` home-missing=${homeMissing} home-unaudited=${homeUnaudited} agent-drift=${agentDrift}`
+        + ` hooks-missing=${hooksMissing} hooks-unaudited=${hooksUnaudited}`;
 }
 /** Parse the fenced ```allowed-top-level block from an account's SCHEMA.md —
  *  the same structured set fs-schema-guard.sh parses with awk. Returns the
@@ -283,6 +284,70 @@ function agentParity(accountDir) {
     const stillOnDisk = disabled.filter((n) => existsSync(join(accountDir, 'specialists', 'agents', n)));
     return { disabled: disabled.length, stillOnDisk };
 }
+/** The hook entries that fence an account's file writes: the path guard on each
+ *  path-bearing tool, and the Bash snapshot pair. Each row is
+ *  [settings event, matcher, hook filename]. */
+const REQUIRED_HOOKS = [
+    ['PreToolUse', 'Write', 'fs-schema-guard.sh'],
+    ['PreToolUse', 'Edit', 'fs-schema-guard.sh'],
+    ['PreToolUse', 'NotebookEdit', 'fs-schema-guard.sh'],
+    ['PreToolUse', 'Bash', 'fs-schema-guard-bash-pre.sh'],
+    ['PostToolUse', 'Bash', 'fs-schema-guard-bash-post.sh'],
+];
+/**
+ * Task 2196 — which of the required file-write fences this account's settings do
+ * not register, as `<matcher>:<hook filename>`.
+ *
+ * The cross-account refusal and the account-layout fences live in those hooks,
+ * so an account that does not register them is unfenced while every other signal
+ * reads clean: a hook that never runs emits nothing, which is precisely the
+ * state that cannot be seen by watching for its output.
+ *
+ * Returns null when settings.json is absent or unparseable, which the caller
+ * counts as "not audited" rather than "clean". Without that, an install where no
+ * account has settings reports hooks-missing=0 and reads as fenced.
+ *
+ * The matcher is compared for equality, which is the shape
+ * provision-account-dir.sh writes for all five. A settings file that reaches the
+ * same effect another way — a matcher-less catch-all entry, or a regex
+ * alternation — reads as missing here. That is intended: what this audits is
+ * whether the account carries the provisioned fence, and drift from the template
+ * is worth a line even when it happens to be equivalent.
+ */
+export function hookRegistration(accountDir) {
+    let raw;
+    try {
+        raw = readFileSync(join(accountDir, '.claude', 'settings.json'), 'utf8');
+    }
+    catch {
+        return null;
+    }
+    let hooks;
+    try {
+        hooks = JSON.parse(raw).hooks;
+    }
+    catch {
+        return null;
+    }
+    const missing = [];
+    for (const [event, matcher, hookFile] of REQUIRED_HOOKS) {
+        const entries = hooks && typeof hooks === 'object'
+            ? hooks[event]
+            : undefined;
+        const found = Array.isArray(entries) && entries.some((e) => {
+            const entry = e;
+            if (entry.matcher !== matcher)
+                return false;
+            return Array.isArray(entry.hooks) && entry.hooks.some((h) => {
+                const cmd = h.command;
+                return typeof cmd === 'string' && cmd.includes(hookFile);
+            });
+        });
+        if (!found)
+            missing.push(`${matcher}:${hookFile}`);
+    }
+    return { missing };
+}
 /** One reconcile pass over every account under the accounts root: one op=strays
  *  line naming the unaccounted-for entries of each account that has any, then the
  *  single summary line. An account is any child dir with an account.json (the
@@ -312,6 +377,13 @@ export function runReconcile(deps) {
     // that the check ran and found nothing, which is what makes the absence of an
     // op=agent-parity line readable as "clean" rather than "never audited".
     let agentDrift = 0;
+    // Task 2196 — per-run total of required file-write fences no account
+    // registers, and the count of accounts whose settings could not be read at
+    // all. hooks-missing=0 with hooks-unaudited=0 on the summary line is the
+    // per-cycle proof the fence is wired everywhere; either being non-zero means
+    // some account is unfenced or unchecked.
+    let hooksMissing = 0;
+    let hooksUnaudited = 0;
     let entries;
     try {
         entries = readdirSync(deps.accountsRoot);
@@ -350,6 +422,15 @@ export function runReconcile(deps) {
                     `stillOnDisk=${agents.stillOnDisk.join(',')}`);
                 agentDrift += agents.stillOnDisk.length;
             }
+            // Task 2196 — named only when a fence is unregistered, mirroring the lines
+            // above. The per-cycle heartbeat is hooks-missing= on the summary line.
+            const reg = hookRegistration(accountDir);
+            if (!reg)
+                hooksUnaudited++;
+            if (reg && reg.missing.length > 0) {
+                deps.logger(`${TAG} op=hook-registration account=${entry} missing=${reg.missing.join(',')}`);
+                hooksMissing += reg.missing.length;
+            }
             total.strayTopLevel += c.strayTopLevel;
             total.overDeep += c.overDeep;
             total.badName += c.badName;
@@ -358,7 +439,7 @@ export function runReconcile(deps) {
             // best-effort: skip an account that throws unexpectedly
         }
     }
-    deps.logger(formatReconcileLine(total, homeMissing, homeUnaudited, agentDrift));
+    deps.logger(formatReconcileLine(total, homeMissing, homeUnaudited, agentDrift, hooksMissing, hooksUnaudited));
 }
 /** Standing periodic reconcile. Unref'd interval so it never holds the process
  *  open; each tick re-runs the pass best-effort. */

package/payload/platform/services/claude-session-manager/dist/account-dir-schema-reconcile.js.map

@@ -1 +1 @@
-{"version":3,"file":"account-dir-schema-reconcile.js","sourceRoot":"","sources":["../src/account-dir-schema-reconcile.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,gFAAgF;AAChF,8EAA8E;AAC9E,iFAAiF;AACjF,iFAAiF;AACjF,kFAAkF;AAClF,kDAAkD;AAClD,EAAE;AACF,iFAAiF;AACjF,gFAAgF;AAChF,gFAAgF;AAChF,2EAA2E;AAC3E,gFAAgF;AAChF,6EAA6E;AAC7E,+EAA+E;AAC/E,gFAAgF;AAChF,iFAAiF;AACjF,8EAA8E;AAC9E,8EAA8E;AAC9E,qDAAqD;AACrD,kFAAkF;AAClF,wEAAwE;AACxE,EAAE;AACF,6EAA6E;AAC7E,2EAA2E;AAC3E,+EAA+E;AAC/E,iFAAiF;AACjF,2CAA2C;AAE3C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AACzE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AAC/C,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,mDAAmD,CAAA;AAElG,MAAM,GAAG,GAAG,gBAAgB,CAAA;AAC5B,MAAM,cAAc,GAAG,aAAa,CAAA;AAEpC;;;;;;;;;;;;;;;;;gFAiBgF;AAChF,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,MAAM;IACN,SAAS;IACT,cAAc;IACd,WAAW;IACX,cAAc;IACd,WAAW;CACZ,CAAC,CAAA;AAEF;;;uBAGuB;AACvB,MAAM,qBAAqB,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,WAAW,CAAC,CAAA;AACnE,MAAM,gBAAgB,GAAG,CAAC,CAAA;AAE1B;;;;4DAI4D;AAC5D,MAAM,cAAc,GAAG,cAAc,CAAA;AACrC,MAAM,YAAY,GAAG,6BAA6B,CAAA;AAkBlD;;+DAE+D;AAC/D,MAAM,UAAU,mBAAmB,CACjC,CAAkB,EAClB,WAAW,GAAG,CAAC,EACf,aAAa,GAAG,CAAC,EACjB,UAAU,GAAG,CAAC;IAEd,OAAO,GAAG,GAAG,oBAAoB,CAAC,CAAC,aAAa,cAAc,CAAC,CAAC,QAAQ,aAAa,CAAC,CAAC,OAAO,EAAE;UAC5F,iBAAiB,WAAW,mBAAmB,aAAa,gBAAgB,UAAU,EAAE,CAAA;AAC9F,CAAC;AAED;;8EAE8E;AAC9E,MAAM,UAAU,oBAAoB,CAAC,UAAkB;IACrD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACpC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAA;IAC7B,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QACrB,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,KAAK,sBAAsB;gBAAE,OAAO,GAAG,IAAI,CAAA;YAChD,SAAQ;QACV,CAAC;QACD,IAAI,CAAC,KAAK,KAAK;YAAE,MAAK;QACtB,IAAI,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IACnB,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;oDAGoD;AACpD,SAAS,kBAAkB,CAAC,UAAkB,EAAE,MAAc;IAC5D,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;IAC3C,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,CAAC,CAAA;IACrC,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,MAAM,IAAI,GAAG,CAAC,GAAW,EAAQ,EAAE;QACjC,IAAI,OAAiB,CAAA;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAM;QACR,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;YAC5B,IAAI,EAAE,CAAA;YACN,IAAI,CAAC;gBACH,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;YACrB,CAAC;YAAC,MAAM,CAAC;gBACP,SAAQ;YACV,CAAC;YACD,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;gBACrB,IAAI,CAAC,IAAI,CAAC,CAAA;YACZ,CAAC;iBAAM,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC;gBACvB,MAAM,GAAG,GAAG,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;gBACtC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAA;gBACnC,IAAI,KAAK,GAAG,gBAAgB;oBAAE,KAAK,EAAE,CAAA;YACvC,CAAC;QACH,CAAC;IACH,CAAC,CAAA;IACD,IAAI,CAAC,UAAU,CAAC,CAAA;IAChB,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;uCAMuC;AACvC,SAAS,mBAAmB,CAAC,UAAkB,EAAE,MAAc;IAC7D,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;IAC3C,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,CAAC,CAAA;IACrC,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,MAAM,IAAI,GAAG,CAAC,GAAW,EAAQ,EAAE;QACjC,IAAI,OAAiB,CAAA;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAM;QACR,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,uEAAuE;YACvE,uEAAuE;YACvE,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAQ;YAClC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;YAC5B,IAAI,EAAE,CAAA;YACN,IAAI,CAAC;gBACH,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;YACrB,CAAC;YAAC,MAAM,CAAC;gBACP,SAAQ;YACV,CAAC;YACD,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;gBACrB,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;oBAAE,KAAK,EAAE,CAAA;gBACvC,IAAI,CAAC,IAAI,CAAC,CAAA;YACZ,CAAC;iBAAM,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC;gBACvB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;oBAAE,KAAK,EAAE,CAAA;YACvC,CAAC;QACH,CAAC;IACH,CAAC,CAAA;IACD,IAAI,CAAC,UAAU,CAAC,CAAA;IAChB,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;8EAG8E;AAC9E,MAAM,UAAU,gBAAgB,CAAC,UAAkB;IACjD,MAAM,KAAK,GAAoB,EAAE,aAAa,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAA;IAC5F,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAA;IAChD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAA;IACzC,IAAI,OAAoB,CAAA;IACxB,IAAI,CAAC;QACH,OAAO,GAAG,oBAAoB,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAA;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IAEpC,IAAI,WAAqB,CAAA;IACzB,IAAI,CAAC;QACH,WAAW,GAAG,WAAW,CAAC,UAAU,CAAC,CAAA;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;IAED,6EAA6E;IAC7E,6EAA6E;IAC7E,4EAA4E;IAC5E,kEAAkE;IAClE,kCAAkC;IAClC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAC/B,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CACxF,CAAA;IAED,IAAI,QAAQ,GAAG,CAAC,CAAA;IAChB,IAAI,OAAO,GAAG,CAAC,CAAA;IACf,KAAK,MAAM,MAAM,IAAI,qBAAqB,EAAE,CAAC;QAC3C,QAAQ,IAAI,kBAAkB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;QAClD,OAAO,IAAI,mBAAmB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;IACpD,CAAC;IAED,OAAO,EAAE,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAA;AAChF,CAAC;AAOD;;;;;;;;;GASG;AACH,SAAS,UAAU,CAAC,UAAkB;IACpC,IAAI,QAAgB,CAAA;IACpB,IAAI,CAAC;QACH,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAA;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAA;IAC5C,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IAChC,MAAM,QAAQ,GAAG,CAAC,GAAG,OAAO,CAAC,aAAa,EAAE,GAAG,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;IAClG,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;AACxF,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,WAAW,CAAC,UAAkB;IACrC,IAAI,GAAW,CAAA;IACf,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,sBAAsB,CAAC,EAAE,MAAM,CAAC,CAAA;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,KAAc,CAAA;IAClB,IAAI,CAAC;QACH,KAAK,GAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC,QAAQ,CAAA;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAA;IACxE,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IACpG,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,CAAA;AACnD,CAAC;AAED;;;;;;;;;;;;;iCAaiC;AACjC,MAAM,UAAU,YAAY,CAAC,IAAmB;IAC9C,MAAM,KAAK,GAAoB,EAAE,aAAa,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAA;IAC5E,4EAA4E;IAC5E,2EAA2E;IAC3E,qCAAqC;IACrC,IAAI,WAAW,GAAG,CAAC,CAAA;IACnB,4EAA4E;IAC5E,4EAA4E;IAC5E,sDAAsD;IACtD,IAAI,aAAa,GAAG,CAAC,CAAA;IACrB,6EAA6E;IAC7E,8EAA8E;IAC9E,8EAA8E;IAC9E,wEAAwE;IACxE,IAAI,UAAU,GAAG,CAAC,CAAA;IAClB,IAAI,OAAiB,CAAA;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAA;QACvC,OAAM;IACR,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAA;QACjD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;YAAE,SAAQ;QAC3D,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAA;YACtC,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,sBAAsB,KAAK,UAAU,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YAClF,CAAC;YACD,wEAAwE;YACxE,yEAAyE;YACzE,0EAA0E;YAC1E,WAAW;YACX,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAA;YACrC,IAAI,CAAC,MAAM;gBAAE,aAAa,EAAE,CAAA;YAC5B,IAAI,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxC,IAAI,CAAC,MAAM,CACT,GAAG,GAAG,2BAA2B,KAAK,aAAa,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG;oBAC5E,UAAU,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG;oBAC3D,WAAW,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CACtC,CAAA;gBACD,WAAW,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAA;YACtC,CAAC;YACD,yEAAyE;YACzE,sCAAsC;YACtC,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,CAAA;YACtC,IAAI,MAAM,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5C,IAAI,CAAC,MAAM,CACT,GAAG,GAAG,4BAA4B,KAAK,aAAa,MAAM,CAAC,QAAQ,GAAG;oBACtE,eAAe,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAC9C,CAAA;gBACD,UAAU,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,CAAA;YACzC,CAAC;YACD,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC,aAAa,CAAA;YACtC,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAA;YAC5B,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAA;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,wDAAwD;QAC1D,CAAC;IACH,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC,CAAA;AACjF,CAAC;AAOD;oDACoD;AACpD,MAAM,UAAU,+BAA+B,CAC7C,IAA4C;IAE5C,IAAI,KAAK,GAA0B,IAAI,CAAA;IACvC,OAAO;QACL,KAAK;YACH,IAAI,KAAK;gBAAE,OAAM;YACjB,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;gBACvB,YAAY,CAAC,IAAI,CAAC,CAAA;YACpB,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;YACnB,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,UAAU;gBAAE,KAAK,CAAC,KAAK,EAAE,CAAA;QACtD,CAAC;QACD,IAAI;YACF,IAAI,KAAK,EAAE,CAAC;gBACV,aAAa,CAAC,KAAK,CAAC,CAAA;gBACpB,KAAK,GAAG,IAAI,CAAA;YACd,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC"}
+{"version":3,"file":"account-dir-schema-reconcile.js","sourceRoot":"","sources":["../src/account-dir-schema-reconcile.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,gFAAgF;AAChF,8EAA8E;AAC9E,iFAAiF;AACjF,iFAAiF;AACjF,kFAAkF;AAClF,kDAAkD;AAClD,EAAE;AACF,iFAAiF;AACjF,gFAAgF;AAChF,gFAAgF;AAChF,2EAA2E;AAC3E,gFAAgF;AAChF,6EAA6E;AAC7E,+EAA+E;AAC/E,gFAAgF;AAChF,iFAAiF;AACjF,8EAA8E;AAC9E,8EAA8E;AAC9E,qDAAqD;AACrD,kFAAkF;AAClF,wEAAwE;AACxE,EAAE;AACF,6EAA6E;AAC7E,2EAA2E;AAC3E,+EAA+E;AAC/E,iFAAiF;AACjF,2CAA2C;AAE3C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AACzE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AAC/C,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,mDAAmD,CAAA;AAElG,MAAM,GAAG,GAAG,gBAAgB,CAAA;AAC5B,MAAM,cAAc,GAAG,aAAa,CAAA;AAEpC;;;;;;;;;;;;;;;;;gFAiBgF;AAChF,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,MAAM;IACN,SAAS;IACT,cAAc;IACd,WAAW;IACX,cAAc;IACd,WAAW;CACZ,CAAC,CAAA;AAEF;;;uBAGuB;AACvB,MAAM,qBAAqB,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,WAAW,CAAC,CAAA;AACnE,MAAM,gBAAgB,GAAG,CAAC,CAAA;AAE1B;;;;4DAI4D;AAC5D,MAAM,cAAc,GAAG,cAAc,CAAA;AACrC,MAAM,YAAY,GAAG,6BAA6B,CAAA;AAkBlD;;+DAE+D;AAC/D,MAAM,UAAU,mBAAmB,CACjC,CAAkB,EAClB,WAAW,GAAG,CAAC,EACf,aAAa,GAAG,CAAC,EACjB,UAAU,GAAG,CAAC,EACd,YAAY,GAAG,CAAC,EAChB,cAAc,GAAG,CAAC;IAElB,OAAO,GAAG,GAAG,oBAAoB,CAAC,CAAC,aAAa,cAAc,CAAC,CAAC,QAAQ,aAAa,CAAC,CAAC,OAAO,EAAE;UAC5F,iBAAiB,WAAW,mBAAmB,aAAa,gBAAgB,UAAU,EAAE;UACxF,kBAAkB,YAAY,oBAAoB,cAAc,EAAE,CAAA;AACxE,CAAC;AAED;;8EAE8E;AAC9E,MAAM,UAAU,oBAAoB,CAAC,UAAkB;IACrD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACpC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAA;IAC7B,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QACrB,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,KAAK,sBAAsB;gBAAE,OAAO,GAAG,IAAI,CAAA;YAChD,SAAQ;QACV,CAAC;QACD,IAAI,CAAC,KAAK,KAAK;YAAE,MAAK;QACtB,IAAI,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IACnB,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;oDAGoD;AACpD,SAAS,kBAAkB,CAAC,UAAkB,EAAE,MAAc;IAC5D,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;IAC3C,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,CAAC,CAAA;IACrC,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,MAAM,IAAI,GAAG,CAAC,GAAW,EAAQ,EAAE;QACjC,IAAI,OAAiB,CAAA;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAM;QACR,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;YAC5B,IAAI,EAAE,CAAA;YACN,IAAI,CAAC;gBACH,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;YACrB,CAAC;YAAC,MAAM,CAAC;gBACP,SAAQ;YACV,CAAC;YACD,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;gBACrB,IAAI,CAAC,IAAI,CAAC,CAAA;YACZ,CAAC;iBAAM,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC;gBACvB,MAAM,GAAG,GAAG,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;gBACtC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAA;gBACnC,IAAI,KAAK,GAAG,gBAAgB;oBAAE,KAAK,EAAE,CAAA;YACvC,CAAC;QACH,CAAC;IACH,CAAC,CAAA;IACD,IAAI,CAAC,UAAU,CAAC,CAAA;IAChB,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;uCAMuC;AACvC,SAAS,mBAAmB,CAAC,UAAkB,EAAE,MAAc;IAC7D,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;IAC3C,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,CAAC,CAAA;IACrC,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,MAAM,IAAI,GAAG,CAAC,GAAW,EAAQ,EAAE;QACjC,IAAI,OAAiB,CAAA;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAM;QACR,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,uEAAuE;YACvE,uEAAuE;YACvE,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAQ;YAClC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;YAC5B,IAAI,EAAE,CAAA;YACN,IAAI,CAAC;gBACH,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;YACrB,CAAC;YAAC,MAAM,CAAC;gBACP,SAAQ;YACV,CAAC;YACD,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;gBACrB,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;oBAAE,KAAK,EAAE,CAAA;gBACvC,IAAI,CAAC,IAAI,CAAC,CAAA;YACZ,CAAC;iBAAM,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC;gBACvB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;oBAAE,KAAK,EAAE,CAAA;YACvC,CAAC;QACH,CAAC;IACH,CAAC,CAAA;IACD,IAAI,CAAC,UAAU,CAAC,CAAA;IAChB,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;8EAG8E;AAC9E,MAAM,UAAU,gBAAgB,CAAC,UAAkB;IACjD,MAAM,KAAK,GAAoB,EAAE,aAAa,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAA;IAC5F,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAA;IAChD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAA;IACzC,IAAI,OAAoB,CAAA;IACxB,IAAI,CAAC;QACH,OAAO,GAAG,oBAAoB,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAA;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IAEpC,IAAI,WAAqB,CAAA;IACzB,IAAI,CAAC;QACH,WAAW,GAAG,WAAW,CAAC,UAAU,CAAC,CAAA;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;IAED,6EAA6E;IAC7E,6EAA6E;IAC7E,4EAA4E;IAC5E,kEAAkE;IAClE,kCAAkC;IAClC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAC/B,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CACxF,CAAA;IAED,IAAI,QAAQ,GAAG,CAAC,CAAA;IAChB,IAAI,OAAO,GAAG,CAAC,CAAA;IACf,KAAK,MAAM,MAAM,IAAI,qBAAqB,EAAE,CAAC;QAC3C,QAAQ,IAAI,kBAAkB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;QAClD,OAAO,IAAI,mBAAmB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;IACpD,CAAC;IAED,OAAO,EAAE,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAA;AAChF,CAAC;AAOD;;;;;;;;;GASG;AACH,SAAS,UAAU,CAAC,UAAkB;IACpC,IAAI,QAAgB,CAAA;IACpB,IAAI,CAAC;QACH,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAA;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAA;IAC5C,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IAChC,MAAM,QAAQ,GAAG,CAAC,GAAG,OAAO,CAAC,aAAa,EAAE,GAAG,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;IAClG,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;AACxF,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,WAAW,CAAC,UAAkB;IACrC,IAAI,GAAW,CAAA;IACf,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,sBAAsB,CAAC,EAAE,MAAM,CAAC,CAAA;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,KAAc,CAAA;IAClB,IAAI,CAAC;QACH,KAAK,GAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC,QAAQ,CAAA;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAA;IACxE,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IACpG,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,CAAA;AACnD,CAAC;AAED;;gDAEgD;AAChD,MAAM,cAAc,GAA2E;IAC7F,CAAC,YAAY,EAAE,OAAO,EAAE,oBAAoB,CAAC;IAC7C,CAAC,YAAY,EAAE,MAAM,EAAE,oBAAoB,CAAC;IAC5C,CAAC,YAAY,EAAE,cAAc,EAAE,oBAAoB,CAAC;IACpD,CAAC,YAAY,EAAE,MAAM,EAAE,6BAA6B,CAAC;IACrD,CAAC,aAAa,EAAE,MAAM,EAAE,8BAA8B,CAAC;CACxD,CAAA;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAkB;IACjD,IAAI,GAAW,CAAA;IACf,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,CAAA;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,KAAc,CAAA;IAClB,IAAI,CAAC;QACH,KAAK,GAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyB,CAAC,KAAK,CAAA;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,OAAO,GAAa,EAAE,CAAA;IAC5B,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,cAAc,EAAE,CAAC;QACxD,MAAM,OAAO,GAAG,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAChD,CAAC,CAAE,KAAiC,CAAC,KAAK,CAAC;YAC3C,CAAC,CAAC,SAAS,CAAA;QACb,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;YACzD,MAAM,KAAK,GAAG,CAA2C,CAAA;YACzD,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO;gBAAE,OAAO,KAAK,CAAA;YAC3C,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC1D,MAAM,GAAG,GAAI,CAA2B,CAAC,OAAO,CAAA;gBAChD,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;YAC1D,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QACF,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,IAAI,QAAQ,EAAE,CAAC,CAAA;IACpD,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAA;AACpB,CAAC;AAED;;;;;;;;;;;;;iCAaiC;AACjC,MAAM,UAAU,YAAY,CAAC,IAAmB;IAC9C,MAAM,KAAK,GAAoB,EAAE,aAAa,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAA;IAC5E,4EAA4E;IAC5E,2EAA2E;IAC3E,qCAAqC;IACrC,IAAI,WAAW,GAAG,CAAC,CAAA;IACnB,4EAA4E;IAC5E,4EAA4E;IAC5E,sDAAsD;IACtD,IAAI,aAAa,GAAG,CAAC,CAAA;IACrB,6EAA6E;IAC7E,8EAA8E;IAC9E,8EAA8E;IAC9E,wEAAwE;IACxE,IAAI,UAAU,GAAG,CAAC,CAAA;IAClB,qEAAqE;IACrE,2EAA2E;IAC3E,yEAAyE;IACzE,6EAA6E;IAC7E,yCAAyC;IACzC,IAAI,YAAY,GAAG,CAAC,CAAA;IACpB,IAAI,cAAc,GAAG,CAAC,CAAA;IACtB,IAAI,OAAiB,CAAA;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAA;QACvC,OAAM;IACR,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAA;QACjD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;YAAE,SAAQ;QAC3D,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAA;YACtC,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,sBAAsB,KAAK,UAAU,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YAClF,CAAC;YACD,wEAAwE;YACxE,yEAAyE;YACzE,0EAA0E;YAC1E,WAAW;YACX,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAA;YACrC,IAAI,CAAC,MAAM;gBAAE,aAAa,EAAE,CAAA;YAC5B,IAAI,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxC,IAAI,CAAC,MAAM,CACT,GAAG,GAAG,2BAA2B,KAAK,aAAa,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG;oBAC5E,UAAU,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG;oBAC3D,WAAW,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CACtC,CAAA;gBACD,WAAW,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAA;YACtC,CAAC;YACD,yEAAyE;YACzE,sCAAsC;YACtC,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,CAAA;YACtC,IAAI,MAAM,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5C,IAAI,CAAC,MAAM,CACT,GAAG,GAAG,4BAA4B,KAAK,aAAa,MAAM,CAAC,QAAQ,GAAG;oBACtE,eAAe,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAC9C,CAAA;gBACD,UAAU,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,CAAA;YACzC,CAAC;YACD,2EAA2E;YAC3E,wEAAwE;YACxE,MAAM,GAAG,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAA;YACxC,IAAI,CAAC,GAAG;gBAAE,cAAc,EAAE,CAAA;YAC1B,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClC,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,iCAAiC,KAAK,YAAY,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;gBAC5F,YAAY,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAA;YACpC,CAAC;YACD,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC,aAAa,CAAA;YACtC,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAA;YAC5B,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAA;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,wDAAwD;QAC1D,CAAC;IACH,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC,CAAA;AAC/G,CAAC;AAOD;oDACoD;AACpD,MAAM,UAAU,+BAA+B,CAC7C,IAA4C;IAE5C,IAAI,KAAK,GAA0B,IAAI,CAAA;IACvC,OAAO;QACL,KAAK;YACH,IAAI,KAAK;gBAAE,OAAM;YACjB,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;gBACvB,YAAY,CAAC,IAAI,CAAC,CAAA;YACpB,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;YACnB,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,UAAU;gBAAE,KAAK,CAAC,KAAK,EAAE,CAAA;QACtD,CAAC;QACD,IAAI;YACF,IAAI,KAAK,EAAE,CAAC;gBACV,aAAa,CAAC,KAAK,CAAC,CAAA;gBACpB,KAAK,GAAG,IAAI,CAAA;YACd,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC"}