@sentropic/llm-mesh 0.32.3 → 0.33.0

package/dist/node/seat-onboarding-cell-compose.js

@@ -0,0 +1,117 @@
+//
+// Stage-2 cell-side composition: map seat-storage auth names to cell
+// destinations (§3.2), compose the claude `.claude.json` as its single
+// writer, and resolve receipt paths. Internal module: not exported from the
+// package entry points.
+import { lstat, readFile } from 'node:fs/promises';
+import { join, relative, resolve } from 'node:path';
+import { renderCodexSeatConfig } from '../enrollment/seat-onboarding-projections.js';
+import { decodeBase64, fail, isRecord, sha256Hex, utf8, withinRoot, } from './seat-stage-write.js';
+/** Map a seat-storage auth name to its cell destination (§3.2). */
+export function authCellDest(name, cellHome, configDirs) {
+    if (name.startsWith('.claude/'))
+        return join(configDirs.claudeConfigDir, name.slice('.claude/'.length));
+    if (name === '.claude.json')
+        return join(configDirs.claudeConfigDir, '.claude.json');
+    if (name.startsWith('.codex/'))
+        return join(configDirs.codexHome, name.slice('.codex/'.length));
+    if (name.startsWith('.config/'))
+        return join(configDirs.xdgConfigHome, name.slice('.config/'.length));
+    return join(cellHome, name);
+}
+/** Receipt path relative to the owning cell root (names only, §3.6). */
+export function receiptRelPath(path, cellHome, configDirs) {
+    if (withinRoot(cellHome, path))
+        return relative(resolve(cellHome), resolve(path));
+    for (const dir of Object.values(configDirs)) {
+        if (withinRoot(dir, path))
+            return relative(resolve(dir), resolve(path));
+    }
+    return resolve(path);
+}
+const CLAUDE_SINGLE_WRITER_KEYS = ['projects', 'hasCompletedOnboarding', 'oauthAccount'];
+/** Compose the cell `.claude.json`: auth projection + onboarding projection + trust synthesis + MCP config merged last. */
+export function composeClaudeJson(authBytes, onboardingBytes, workspaceDir, cellSynthesis, claudeMcpConfig) {
+    let authObj;
+    let onboardObj;
+    try {
+        authObj = JSON.parse(new TextDecoder().decode(authBytes));
+        onboardObj = JSON.parse(new TextDecoder().decode(onboardingBytes));
+    }
+    catch {
+        fail('onboarding-shape-unverified', 'claude projection content is not JSON');
+    }
+    if (!isRecord(authObj) || !isRecord(onboardObj))
+        fail('onboarding-shape-unverified', 'claude projections must be objects');
+    if (authObj['hasCompletedOnboarding'] !== undefined &&
+        onboardObj['hasCompletedOnboarding'] !== undefined &&
+        authObj['hasCompletedOnboarding'] !== onboardObj['hasCompletedOnboarding']) {
+        fail('onboarding-shape-unverified', 'auth and onboarding projections conflict on hasCompletedOnboarding');
+    }
+    const composed = {};
+    if (authObj['oauthAccount'] !== undefined)
+        composed['oauthAccount'] = authObj['oauthAccount'];
+    const completed = onboardObj['hasCompletedOnboarding'] ?? authObj['hasCompletedOnboarding'];
+    if (completed !== undefined)
+        composed['hasCompletedOnboarding'] = completed;
+    const lastVersion = onboardObj['lastOnboardingVersion'] ?? authObj['lastOnboardingVersion'];
+    if (lastVersion !== undefined)
+        composed['lastOnboardingVersion'] = lastVersion;
+    if (cellSynthesis.includes('claude-workspace-trust')) {
+        composed['projects'] = { [workspaceDir]: { hasTrustDialogAccepted: true } };
+    }
+    for (const [key, value] of Object.entries(claudeMcpConfig ?? {})) {
+        if (CLAUDE_SINGLE_WRITER_KEYS.includes(key)) {
+            fail('onboarding-shape-unverified', `claudeMcpConfig key has a single writer: ${key}`);
+        }
+        composed[key] = value;
+    }
+    return `${JSON.stringify(composed, null, 2)}\n`;
+}
+/**
+ * Plan the onboarding writes for one cell: the canonical agy bytes, the
+ * composed claude `.claude.json`, the synthesized muse trust file, or the
+ * rendered codex `config.toml` — exactly one file per CLI, digest-checked.
+ */
+export async function planOnboardingWrites(input) {
+    const { cli, onboarding, seatDir, cellHome, workspaceDir, configDirs } = input;
+    const file = onboarding.files[0];
+    const bytes = decodeBase64(file.contentBase64);
+    if (sha256Hex(bytes) !== file.sha256 || bytes.length !== file.byteLength) {
+        fail('onboarding-shape-unverified', 'onboarding file digest mismatch');
+    }
+    if (cli === 'agy') {
+        return [{ path: join(cellHome, '.gemini/antigravity-cli/jetski_state.pbtxt'), bytes, cls: 'onboarding' }];
+    }
+    if (cli === 'claude') {
+        const authPath = join(seatDir, '.claude.json');
+        const authSt = await lstat(authPath).catch(() => null);
+        if (!authSt || !authSt.isFile() || authSt.isSymbolicLink()) {
+            fail('onboarding-shape-unverified', 'claude auth .claude.json missing in seatDir');
+        }
+        const composed = composeClaudeJson(new Uint8Array(await readFile(authPath)), bytes, workspaceDir, onboarding.cellSynthesis, input.claudeMcpConfig);
+        return [{ path: join(configDirs.claudeConfigDir, '.claude.json'), bytes: utf8(composed), cls: 'composed' }];
+    }
+    if (cli === 'muse') {
+        if (!onboarding.cellSynthesis.includes('muse-workspace-trust'))
+            return [];
+        let proj;
+        try {
+            proj = JSON.parse(new TextDecoder().decode(bytes));
+        }
+        catch {
+            fail('onboarding-shape-unverified', 'muse trust content is not JSON');
+        }
+        if (!isRecord(proj))
+            fail('onboarding-shape-unverified', 'muse trust must be an object');
+        const content = `${JSON.stringify({ schema_version: proj['schema_version'], projects: { [workspaceDir]: { decision: 'trusted' } } }, null, 2)}\n`;
+        return [{ path: join(configDirs.xdgConfigHome, 'muse/trust.json'), bytes: utf8(content), cls: 'synthesized' }];
+    }
+    // codex
+    const toml = renderCodexSeatConfig(new TextDecoder().decode(bytes), workspaceDir, {
+        projectTrust: onboarding.cellSynthesis.includes('codex-project-trust'),
+        mcpServers: input.codexMcpServers,
+    });
+    return [{ path: join(configDirs.codexHome, 'config.toml'), bytes: utf8(toml), cls: 'synthesized' }];
+}
+//# sourceMappingURL=seat-onboarding-cell-compose.js.map

package/dist/node/seat-onboarding-cell-compose.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seat-onboarding-cell-compose.js","sourceRoot":"","sources":["../../src/node/seat-onboarding-cell-compose.ts"],"names":[],"mappings":"AAAA,EAAE;AACF,qEAAqE;AACrE,uEAAuE;AACvE,4EAA4E;AAC5E,wBAAwB;AAExB,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AAMrF,OAAO,EACL,YAAY,EACZ,IAAI,EACJ,QAAQ,EACR,SAAS,EACT,IAAI,EACJ,UAAU,GACX,MAAM,uBAAuB,CAAC;AAE/B,mEAAmE;AACnE,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,QAAgB,EAAE,UAA8B;IACzF,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC,UAAU,CAAC,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IACxG,IAAI,IAAI,KAAK,cAAc;QAAE,OAAO,IAAI,CAAC,UAAU,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC;IACrF,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAChG,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IACtG,OAAO,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,QAAgB,EAAE,UAA8B;IAC3F,IAAI,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAClF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5C,IAAI,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC;YAAE,OAAO,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;AACvB,CAAC;AAED,MAAM,yBAAyB,GAAG,CAAC,UAAU,EAAE,wBAAwB,EAAE,cAAc,CAAC,CAAC;AAEzF,2HAA2H;AAC3H,MAAM,UAAU,iBAAiB,CAC/B,SAAqB,EACrB,eAA2B,EAC3B,YAAoB,EACpB,aAAgC,EAChC,eAAoD;IAEpD,IAAI,OAAgC,CAAC;IACrC,IAAI,UAAmC,CAAC;IACxC,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QAC1D,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC,6BAA6B,EAAE,uCAAuC,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,IAAI,CAAC,6BAA6B,EAAE,oCAAoC,CAAC,CAAC;IAC3H,IACE,OAAO,CAAC,wBAAwB,CAAC,KAAK,SAAS;QAC/C,UAAU,CAAC,wBAAwB,CAAC,KAAK,SAAS;QAClD,OAAO,CAAC,wBAAwB,CAAC,KAAK,UAAU,CAAC,wBAAwB,CAAC,EAC1E,CAAC;QACD,IAAI,CAAC,6BAA6B,EAAE,oEAAoE,CAAC,CAAC;IAC5G,CAAC;IACD,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAC7C,IAAI,OAAO,CAAC,cAAc,CAAC,KAAK,SAAS;QAAE,QAAQ,CAAC,cAAc,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC9F,MAAM,SAAS,GAAG,UAAU,CAAC,wBAAwB,CAAC,IAAI,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC5F,IAAI,SAAS,KAAK,SAAS;QAAE,QAAQ,CAAC,wBAAwB,CAAC,GAAG,SAAS,CAAC;IAC5E,MAAM,WAAW,GAAG,UAAU,CAAC,uBAAuB,CAAC,IAAI,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC5F,IAAI,WAAW,KAAK,SAAS;QAAE,QAAQ,CAAC,uBAAuB,CAAC,GAAG,WAAW,CAAC;IAC/E,IAAI,aAAa,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,CAAC;QACrD,QAAQ,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,sBAAsB,EAAE,IAAI,EAAE,EAAE,CAAC;IAC9E,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC,EAAE,CAAC;QACjE,IAAI,yBAAyB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5C,IAAI,CAAC,6BAA6B,EAAE,4CAA4C,GAAG,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACxB,CAAC;IACD,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAS1C;IACC,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;IAC/E,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC/C,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;QACzE,IAAI,CAAC,6BAA6B,EAAE,iCAAiC,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;QAClB,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,4CAA4C,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;IAC5G,CAAC;IACD,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;QACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,cAAc,EAAE,EAAE,CAAC;YAC3D,IAAI,CAAC,6BAA6B,EAAE,6CAA6C,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,QAAQ,GAAG,iBAAiB,CAChC,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC,EACxC,KAAK,EACL,YAAY,EACZ,UAAU,CAAC,aAAa,EACxB,KAAK,CAAC,eAAe,CACtB,CAAC;QACF,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,eAAe,EAAE,cAAc,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;IAC9G,CAAC;IACD,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACnB,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,QAAQ,CAAC,sBAAsB,CAAC;YAAE,OAAO,EAAE,CAAC;QAC1E,IAAI,IAA6B,CAAC;QAClC,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,6BAA6B,EAAE,gCAAgC,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,6BAA6B,EAAE,8BAA8B,CAAC,CAAC;QACzF,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,gBAAgB,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;QAClJ,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,iBAAiB,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,aAAa,EAAE,CAAC,CAAC;IACjH,CAAC;IACD,QAAQ;IACR,MAAM,IAAI,GAAG,qBAAqB,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE;QAChF,YAAY,EAAE,UAAU,CAAC,aAAa,CAAC,QAAQ,CAAC,qBAAqB,CAAC;QACtE,UAAU,EAAE,KAAK,CAAC,eAAe;KAClC,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,aAAa,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,aAAa,EAAE,CAAC,CAAC;AACtG,CAAC"}

package/dist/node/seat-onboarding-erase.d.ts

@@ -0,0 +1,8 @@
+import type { SeatEraseResult } from './seat-onboarding-types.js';
+/**
+ * Whole-root erasure of a stage-1 seat directory or a stage-2 cell HOME.
+ * Returns the surviving-path list (empty = proven); never follows a
+ * symlinked root.
+ */
+export declare function eraseSeatHome(rootDir: string): Promise<SeatEraseResult>;
+//# sourceMappingURL=seat-onboarding-erase.d.ts.map

package/dist/node/seat-onboarding-erase.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seat-onboarding-erase.d.ts","sourceRoot":"","sources":["../../src/node/seat-onboarding-erase.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAKlE;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAa7E"}

package/dist/node/seat-onboarding-erase.js

@@ -0,0 +1,31 @@
+//
+// Erasure: whole-root wipe of a stage-1 seat directory or a stage-2 cell
+// HOME, returning the surviving-path list (empty = proven).
+import { lstat, rm } from 'node:fs/promises';
+import { resolve, sep } from 'node:path';
+import { asResult, fail } from './seat-stage-write.js';
+// ── erasure ──────────────────────────────────────────────────────────────
+/**
+ * Whole-root erasure of a stage-1 seat directory or a stage-2 cell HOME.
+ * Returns the surviving-path list (empty = proven); never follows a
+ * symlinked root.
+ */
+export async function eraseSeatHome(rootDir) {
+    try {
+        if (typeof rootDir !== 'string' || rootDir.length === 0)
+            fail('onboarding-schema-mismatch', 'rootDir is required');
+        const resolved = resolve(rootDir);
+        if (resolved === sep)
+            fail('onboarding-shape-unverified', 'refusing to erase the filesystem root');
+        const st = await lstat(resolved).catch(() => null);
+        if (st && st.isSymbolicLink())
+            fail('onboarding-shape-unverified', 'refusing to erase through a symlink');
+        await rm(resolved, { recursive: true, force: true });
+        const after = await lstat(resolved).catch(() => null);
+        return { ok: true, survivingPaths: after ? [resolved] : [] };
+    }
+    catch (error) {
+        return asResult(error);
+    }
+}
+//# sourceMappingURL=seat-onboarding-erase.js.map

package/dist/node/seat-onboarding-erase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seat-onboarding-erase.js","sourceRoot":"","sources":["../../src/node/seat-onboarding-erase.ts"],"names":[],"mappings":"AAAA,EAAE;AACF,yEAAyE;AACzE,4DAA4D;AAE5D,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAGzC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAEvD,4EAA4E;AAE5E;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAe;IACjD,IAAI,CAAC;QACH,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,IAAI,CAAC,4BAA4B,EAAE,qBAAqB,CAAC,CAAC;QACnH,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,QAAQ,KAAK,GAAG;YAAE,IAAI,CAAC,6BAA6B,EAAE,uCAAuC,CAAC,CAAC;QACnG,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,EAAE,IAAI,EAAE,CAAC,cAAc,EAAE;YAAE,IAAI,CAAC,6BAA6B,EAAE,qCAAqC,CAAC,CAAC;QAC1G,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACtD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAC/D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;AACH,CAAC"}

package/dist/node/seat-onboarding-materialize.d.ts

@@ -0,0 +1,6 @@
+export { SEAT_RECORD_REL_PATH } from './seat-stage-write.js';
+export type { PlannedWrite, SeatCellConfigDirs, SeatCellInput, SeatCellReceipt, SeatCellReceiptFile, SeatCellResult, SeatCodexMcpServer, SeatEraseResult, SeatRecordView, SeatStageInput, SeatStageInputSeat, SeatStageReceipt, SeatStageReceiptEntry, SeatStageReceiptOnboarding, SeatStageResult, } from './seat-onboarding-types.js';
+export { materialiseSeatEnvelopes } from './seat-onboarding-stage1.js';
+export { eraseSeatHome } from './seat-onboarding-erase.js';
+export { materialiseCellHome } from './seat-onboarding-stage2.js';
+//# sourceMappingURL=seat-onboarding-materialize.d.ts.map

package/dist/node/seat-onboarding-materialize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seat-onboarding-materialize.d.ts","sourceRoot":"","sources":["../../src/node/seat-onboarding-materialize.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,YAAY,EACV,YAAY,EACZ,kBAAkB,EAClB,aAAa,EACb,eAAe,EACf,mBAAmB,EACnB,cAAc,EACd,kBAAkB,EAClB,eAAe,EACf,cAAc,EACd,cAAc,EACd,kBAAkB,EAClB,gBAAgB,EAChB,qBAAqB,EACrB,0BAA0B,EAC1B,eAAe,GAChB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC"}

package/dist/node/seat-onboarding-materialize.js

@@ -0,0 +1,11 @@
+//
+// Two-stage seat materialization and erasure (public barrel). Stage 1
+// stages validated envelopes into per-seat directories; stage 2 seeds one
+// fresh cell HOME from a staged seat record; erasure wipes either root.
+// Implementations live in the sibling modules and import only Node builtins
+// plus the enrollment modules, keeping the bench vendor set dependency-closed.
+export { SEAT_RECORD_REL_PATH } from './seat-stage-write.js';
+export { materialiseSeatEnvelopes } from './seat-onboarding-stage1.js';
+export { eraseSeatHome } from './seat-onboarding-erase.js';
+export { materialiseCellHome } from './seat-onboarding-stage2.js';
+//# sourceMappingURL=seat-onboarding-materialize.js.map

package/dist/node/seat-onboarding-materialize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seat-onboarding-materialize.js","sourceRoot":"","sources":["../../src/node/seat-onboarding-materialize.ts"],"names":[],"mappings":"AAAA,EAAE;AACF,sEAAsE;AACtE,0EAA0E;AAC1E,wEAAwE;AACxE,4EAA4E;AAC5E,+EAA+E;AAE/E,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAkB7D,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC"}

package/dist/node/seat-onboarding-record.d.ts

@@ -0,0 +1,11 @@
+import type { SeatRecordView } from './seat-onboarding-types.js';
+/**
+ * Read and re-validate the seat record of a staged seat directory. Throws a
+ * StageRefusal (via `fail`) on any mismatch, missing or symlinked record.
+ */
+export declare function readSeatRecord(input: {
+    seatDir: string;
+    expectedNativeCliVersion: string;
+    ownerScope: string;
+}): Promise<SeatRecordView>;
+//# sourceMappingURL=seat-onboarding-record.d.ts.map

package/dist/node/seat-onboarding-record.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seat-onboarding-record.d.ts","sourceRoot":"","sources":["../../src/node/seat-onboarding-record.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAGjE;;;GAGG;AACH,wBAAsB,cAAc,CAAC,KAAK,EAAE;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,wBAAwB,EAAE,MAAM,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,cAAc,CAAC,CAkE1B"}

package/dist/node/seat-onboarding-record.js

@@ -0,0 +1,86 @@
+//
+// Stage-2 seat-record read: re-read and re-validate the stage-1 seat record
+// (bundle + onboarding + binding + versions) and re-derive the launch gate.
+// A stored gate that disagrees with the derivation is a tampered record.
+// Internal module: not exported from the package entry points.
+import { lstat, readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { validateSeatBundle } from '../enrollment/seat-bundle.js';
+import { seatLaunchGate, validateSeatOnboarding, } from '../enrollment/seat-onboarding.js';
+import { SEAT_RECORD_REL_PATH, fail, isRecord } from './seat-stage-write.js';
+/**
+ * Read and re-validate the seat record of a staged seat directory. Throws a
+ * StageRefusal (via `fail`) on any mismatch, missing or symlinked record.
+ */
+export async function readSeatRecord(input) {
+    const { seatDir } = input;
+    const seatSt = await lstat(seatDir).catch(() => null);
+    if (!seatSt || seatSt.isSymbolicLink() || !seatSt.isDirectory()) {
+        fail('onboarding-shape-unverified', 'seatDir must be an existing directory');
+    }
+    const recordPath = join(seatDir, SEAT_RECORD_REL_PATH);
+    const recordSt = await lstat(recordPath).catch(() => null);
+    if (!recordSt || recordSt.isSymbolicLink() || !recordSt.isFile()) {
+        fail('onboarding-shape-unverified', 'seat record missing or not a regular file');
+    }
+    let record;
+    try {
+        record = JSON.parse(await readFile(recordPath, 'utf8'));
+    }
+    catch {
+        fail('onboarding-shape-unverified', 'seat record is not JSON');
+    }
+    if (!isRecord(record))
+        fail('onboarding-shape-unverified', 'seat record must be an object');
+    const badRecordKey = Object.keys(record).find((k) => !['version', 'bundle', 'onboarding', 'launchGate', 'authFiles'].includes(k));
+    if (badRecordKey)
+        fail('onboarding-unknown-field', `unknown seat record field: ${badRecordKey}`);
+    if (record['version'] !== 1)
+        fail('onboarding-schema-mismatch', 'seat record version must be 1');
+    const bundleResult = validateSeatBundle(record['bundle'], { trustedAuthority: 'consumer' });
+    if (!bundleResult.ok)
+        fail(bundleResult.code, bundleResult.detail);
+    const bundle = bundleResult.bundle;
+    const cli = bundle.identity.cli;
+    let onboarding = null;
+    let onboardingStatus = 'absent';
+    if (record['onboarding'] !== null && record['onboarding'] !== undefined) {
+        const blockResult = validateSeatOnboarding(record['onboarding']);
+        if (!blockResult.ok)
+            fail(blockResult.code, blockResult.detail);
+        onboarding = blockResult.block;
+        onboardingStatus = 'present';
+        const lifecycle = bundle.lifecycle;
+        if (onboarding.cli !== cli ||
+            onboarding.seatRef !== bundle.identity.seatRef ||
+            onboarding.accountBinding !== bundle.provenance.accountBinding ||
+            onboarding.consent.ownerScope !== bundle.identity.ownerScope ||
+            onboarding.lineage.epoch !== lifecycle.epoch ||
+            onboarding.lineage.generation !== lifecycle.generation ||
+            onboarding.lineage.operationId !== lifecycle.operationId) {
+            fail('onboarding-lineage-mismatch', 'seat record binding mismatch');
+        }
+        if (bundle.identity.nativeCliVersion !== onboarding.nativeCliVersion) {
+            fail('onboarding-version-mismatch', 'record version mismatch');
+        }
+    }
+    if (bundle.identity.ownerScope !== input.ownerScope) {
+        fail('onboarding-lineage-mismatch', 'ownerScope does not match the seat record');
+    }
+    if (bundle.identity.nativeCliVersion !== undefined && bundle.identity.nativeCliVersion !== input.expectedNativeCliVersion) {
+        fail('onboarding-version-mismatch', 'bundle nativeCliVersion does not match the expected version');
+    }
+    if (onboarding && onboarding.nativeCliVersion !== input.expectedNativeCliVersion) {
+        fail('onboarding-version-mismatch', 'block nativeCliVersion does not match the expected version');
+    }
+    const derivedGate = seatLaunchGate(cli, onboardingStatus);
+    if (JSON.stringify(record['launchGate']) !== JSON.stringify(derivedGate)) {
+        fail('onboarding-lineage-mismatch', 'stored launchGate disagrees with the re-derived gate');
+    }
+    const authFiles = record['authFiles'];
+    if (!Array.isArray(authFiles) || authFiles.some((n) => typeof n !== 'string')) {
+        fail('onboarding-schema-mismatch', 'seat record authFiles must be a string list');
+    }
+    return { bundle, onboarding, onboardingStatus, launchGate: derivedGate, authFiles: authFiles };
+}
+//# sourceMappingURL=seat-onboarding-record.js.map

package/dist/node/seat-onboarding-record.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seat-onboarding-record.js","sourceRoot":"","sources":["../../src/node/seat-onboarding-record.ts"],"names":[],"mappings":"AAAA,EAAE;AACF,4EAA4E;AAC5E,4EAA4E;AAC5E,yEAAyE;AACzE,+DAA+D;AAE/D,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EACL,cAAc,EACd,sBAAsB,GAGvB,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EAAE,oBAAoB,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAE7E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAIpC;IACC,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC1B,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;QAChE,IAAI,CAAC,6BAA6B,EAAE,uCAAuC,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC3D,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QACjE,IAAI,CAAC,6BAA6B,EAAE,2CAA2C,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,MAA+B,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC,6BAA6B,EAAE,yBAAyB,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,IAAI,CAAC,6BAA6B,EAAE,+BAA+B,CAAC,CAAC;IAC5F,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAClI,IAAI,YAAY;QAAE,IAAI,CAAC,0BAA0B,EAAE,8BAA8B,YAAY,EAAE,CAAC,CAAC;IACjG,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,4BAA4B,EAAE,+BAA+B,CAAC,CAAC;IACjG,MAAM,YAAY,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,CAAC;IAC5F,IAAI,CAAC,YAAY,CAAC,EAAE;QAAE,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC;IACnC,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;IAChC,IAAI,UAAU,GAA4B,IAAI,CAAC;IAC/C,IAAI,gBAAgB,GAAyB,QAAQ,CAAC;IACtD,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,SAAS,EAAE,CAAC;QACxE,MAAM,WAAW,GAAG,sBAAsB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC,WAAW,CAAC,EAAE;YAAE,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QAChE,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC;QAC/B,gBAAgB,GAAG,SAAS,CAAC;QAC7B,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QACnC,IACE,UAAU,CAAC,GAAG,KAAK,GAAG;YACtB,UAAU,CAAC,OAAO,KAAK,MAAM,CAAC,QAAQ,CAAC,OAAO;YAC9C,UAAU,CAAC,cAAc,KAAK,MAAM,CAAC,UAAU,CAAC,cAAc;YAC9D,UAAU,CAAC,OAAO,CAAC,UAAU,KAAK,MAAM,CAAC,QAAQ,CAAC,UAAU;YAC5D,UAAU,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK;YAC5C,UAAU,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,UAAU;YACtD,UAAU,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,WAAW,EACxD,CAAC;YACD,IAAI,CAAC,6BAA6B,EAAE,8BAA8B,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,CAAC,gBAAgB,KAAK,UAAU,CAAC,gBAAgB,EAAE,CAAC;YACrE,IAAI,CAAC,6BAA6B,EAAE,yBAAyB,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;QACpD,IAAI,CAAC,6BAA6B,EAAE,2CAA2C,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,gBAAgB,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,gBAAgB,KAAK,KAAK,CAAC,wBAAwB,EAAE,CAAC;QAC1H,IAAI,CAAC,6BAA6B,EAAE,6DAA6D,CAAC,CAAC;IACrG,CAAC;IACD,IAAI,UAAU,IAAI,UAAU,CAAC,gBAAgB,KAAK,KAAK,CAAC,wBAAwB,EAAE,CAAC;QACjF,IAAI,CAAC,6BAA6B,EAAE,4DAA4D,CAAC,CAAC;IACpG,CAAC;IACD,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IAC1D,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC;QACzE,IAAI,CAAC,6BAA6B,EAAE,sDAAsD,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC9E,IAAI,CAAC,4BAA4B,EAAE,6CAA6C,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,SAAqB,EAAE,CAAC;AAC7G,CAAC"}

package/dist/node/seat-onboarding-stage1.d.ts

@@ -0,0 +1,11 @@
+import type { SeatStageInput, SeatStageResult } from './seat-onboarding-types.js';
+/**
+ * Stage 1, batch and two-phase: phase 1 validates every envelope (bundle,
+ * agy tuple, auth allowlist, onboarding binding, versions, digests, size
+ * bounds, claude minimized projection) and refuses the whole batch on the
+ * first failure with zero bytes written; an absent block is valid and
+ * stages with a closed launch gate. Phase 2 writes auth files at their
+ * storage names plus the seat record, per seat.
+ */
+export declare function materialiseSeatEnvelopes(input: SeatStageInput): Promise<SeatStageResult>;
+//# sourceMappingURL=seat-onboarding-stage1.d.ts.map

package/dist/node/seat-onboarding-stage1.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seat-onboarding-stage1.d.ts","sourceRoot":"","sources":["../../src/node/seat-onboarding-stage1.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EACV,cAAc,EAGd,eAAe,EAChB,MAAM,4BAA4B,CAAC;AAkCpC;;;;;;;GAOG;AACH,wBAAsB,wBAAwB,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC,CAoF9F"}

package/dist/node/seat-onboarding-stage1.js

@@ -0,0 +1,121 @@
+//
+// Stage 1 (seat stage): batch two-phase materialization of validated seat
+// envelopes into per-seat directories, plus the library-owned seat record.
+import { chmod, lstat, mkdir } from 'node:fs/promises';
+import { join, resolve } from 'node:path';
+import { validateSeatEnvelope, } from '../enrollment/seat-onboarding.js';
+import { SEAT_RECORD_REL_PATH, asResult, decodeBase64, fail, isRecord, sha256Hex, utf8, writeExclusive, assertCleanAncestors, DIR_MODE, } from './seat-stage-write.js';
+/** Auth `.claude.json` minimized-projection key set (stage-1 check, §3.3). */
+const CLAUDE_AUTH_MINIMIZED_KEYS = ['oauthAccount', 'hasCompletedOnboarding', 'lastOnboardingVersion'];
+function checkClaudeAuthMinimized(files) {
+    const raw = files['.claude.json'];
+    if (raw === undefined)
+        return;
+    let obj;
+    try {
+        obj = JSON.parse(new TextDecoder().decode(decodeBase64(raw)));
+    }
+    catch {
+        fail('onboarding-shape-unverified', 'auth .claude.json is not JSON');
+    }
+    if (!isRecord(obj))
+        fail('onboarding-shape-unverified', 'auth .claude.json must be an object');
+    for (const key of Object.keys(obj)) {
+        if (!CLAUDE_AUTH_MINIMIZED_KEYS.includes(key)) {
+            fail('onboarding-shape-unverified', `non-minimized auth .claude.json key: ${key}`);
+        }
+    }
+}
+/**
+ * Stage 1, batch and two-phase: phase 1 validates every envelope (bundle,
+ * agy tuple, auth allowlist, onboarding binding, versions, digests, size
+ * bounds, claude minimized projection) and refuses the whole batch on the
+ * first failure with zero bytes written; an absent block is valid and
+ * stages with a closed launch gate. Phase 2 writes auth files at their
+ * storage names plus the seat record, per seat.
+ */
+export async function materialiseSeatEnvelopes(input) {
+    try {
+        if (!isRecord(input) || !Array.isArray(input['seats']) || input['seats'].length === 0) {
+            fail('schema-mismatch', 'seats must be a non-empty array');
+        }
+        const ownerScope = input['ownerScope'];
+        if (typeof ownerScope !== 'string' || ownerScope.length === 0)
+            fail('schema-mismatch', 'ownerScope is required');
+        const expectedVersions = (input['expectedNativeCliVersions'] ?? {});
+        const validated = [];
+        const seenDirs = new Set();
+        for (const seat of input['seats']) {
+            if (!isRecord(seat) || typeof seat['seatDir'] !== 'string' || seat['seatDir'].length === 0) {
+                fail('schema-mismatch', 'each seat needs a seatDir');
+            }
+            const seatDir = resolve(seat['seatDir']);
+            if (seenDirs.has(seatDir))
+                fail('schema-mismatch', 'duplicate seatDir in batch');
+            seenDirs.add(seatDir);
+            const env = validateSeatEnvelope(seat['envelope'], { trustedAuthority: 'consumer' });
+            if (!env.ok)
+                fail(env.code, env.detail);
+            const { bundle, files, onboarding, onboardingStatus, launchGate } = env;
+            if (bundle.identity.ownerScope !== ownerScope) {
+                fail('onboarding-lineage-mismatch', 'bundle ownerScope does not match the stage ownerScope');
+            }
+            const expected = expectedVersions[bundle.identity.cli];
+            if (expected !== undefined && bundle.identity.nativeCliVersion !== expected) {
+                fail('onboarding-version-mismatch', 'bundle nativeCliVersion does not match the expected version');
+            }
+            if (bundle.identity.cli === 'claude')
+                checkClaudeAuthMinimized(files);
+            const existing = await lstat(seatDir).catch(() => null);
+            if (existing)
+                fail('onboarding-shape-unverified', `seatDir already exists: ${seatDir}`);
+            await assertCleanAncestors(seatDir);
+            validated.push({ seatDir, bundle, files, onboarding, onboardingStatus, launchGate });
+        }
+        const seats = [];
+        for (const v of validated) {
+            await mkdir(v.seatDir, { recursive: true, mode: DIR_MODE });
+            await chmod(v.seatDir, DIR_MODE);
+            const authFiles = Object.keys(v.files).sort();
+            for (const name of authFiles) {
+                await writeExclusive([v.seatDir], join(v.seatDir, name), decodeBase64(v.files[name]));
+            }
+            const record = {
+                version: 1,
+                bundle: v.bundle,
+                onboarding: v.onboarding,
+                launchGate: v.launchGate,
+                authFiles,
+            };
+            const recordBytes = utf8(`${JSON.stringify(record, null, 2)}\n`);
+            await writeExclusive([v.seatDir], join(v.seatDir, SEAT_RECORD_REL_PATH), recordBytes);
+            seats.push({
+                seatRef: v.bundle.identity.seatRef,
+                cli: v.bundle.identity.cli,
+                authFiles,
+                seatRecordSha256: sha256Hex(recordBytes),
+                onboardingStatus: v.onboardingStatus,
+                launchGate: v.launchGate,
+                onboarding: v.onboarding
+                    ? {
+                        files: v.onboarding.files.map((f) => ({
+                            destKey: f.destKey,
+                            format: f.format,
+                            sha256: f.sha256,
+                            byteLength: f.byteLength,
+                        })),
+                        nativeCliVersion: v.onboarding.nativeCliVersion,
+                        capturedAt: v.onboarding.capturedAt,
+                        lineage: v.onboarding.lineage,
+                        ...(v.onboarding.reboundFrom ? { reboundFrom: v.onboarding.reboundFrom } : {}),
+                    }
+                    : null,
+            });
+        }
+        return { ok: true, receipt: { seats } };
+    }
+    catch (error) {
+        return asResult(error);
+    }
+}
+//# sourceMappingURL=seat-onboarding-stage1.js.map

package/dist/node/seat-onboarding-stage1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seat-onboarding-stage1.js","sourceRoot":"","sources":["../../src/node/seat-onboarding-stage1.ts"],"names":[],"mappings":"AAAA,EAAE;AACF,0EAA0E;AAC1E,2EAA2E;AAE3E,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAG1C,OAAO,EACL,oBAAoB,GAIrB,MAAM,kCAAkC,CAAC;AAO1C,OAAO,EACL,oBAAoB,EACpB,QAAQ,EACR,YAAY,EACZ,IAAI,EACJ,QAAQ,EACR,SAAS,EACT,IAAI,EACJ,cAAc,EACd,oBAAoB,EACpB,QAAQ,GACT,MAAM,uBAAuB,CAAC;AAE/B,8EAA8E;AAC9E,MAAM,0BAA0B,GAAG,CAAC,cAAc,EAAE,wBAAwB,EAAE,uBAAuB,CAAC,CAAC;AAEvG,SAAS,wBAAwB,CAAC,KAA6B;IAC7D,MAAM,GAAG,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC;IAClC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO;IAC9B,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC,6BAA6B,EAAE,+BAA+B,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,IAAI,CAAC,6BAA6B,EAAE,qCAAqC,CAAC,CAAC;IAC/F,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,0BAA0B,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC,6BAA6B,EAAE,wCAAwC,GAAG,EAAE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAAqB;IAClE,IAAI,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtF,IAAI,CAAC,iBAAiB,EAAE,iCAAiC,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,UAAU,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC;QACvC,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,IAAI,CAAC,iBAAiB,EAAE,wBAAwB,CAAC,CAAC;QACjH,MAAM,gBAAgB,GAAG,CAAC,KAAK,CAAC,2BAA2B,CAAC,IAAI,EAAE,CAAqC,CAAC;QACxG,MAAM,SAAS,GAOV,EAAE,CAAC;QACR,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;QACnC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAkC,EAAE,CAAC;YACnE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3F,IAAI,CAAC,iBAAiB,EAAE,2BAA2B,CAAC,CAAC;YACvD,CAAC;YACD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;YACzC,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,IAAI,CAAC,iBAAiB,EAAE,4BAA4B,CAAC,CAAC;YACjF,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM,GAAG,GAAG,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,CAAC;YACrF,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;YACxC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,UAAU,EAAE,GAAG,GAAG,CAAC;YACxE,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;gBAC9C,IAAI,CAAC,6BAA6B,EAAE,uDAAuD,CAAC,CAAC;YAC/F,CAAC;YACD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACvD,IAAI,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,gBAAgB,KAAK,QAAQ,EAAE,CAAC;gBAC5E,IAAI,CAAC,6BAA6B,EAAE,6DAA6D,CAAC,CAAC;YACrG,CAAC;YACD,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,KAAK,QAAQ;gBAAE,wBAAwB,CAAC,KAAK,CAAC,CAAC;YACtE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YACxD,IAAI,QAAQ;gBAAE,IAAI,CAAC,6BAA6B,EAAE,2BAA2B,OAAO,EAAE,CAAC,CAAC;YACxF,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;YACpC,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,KAAK,GAA4B,EAAE,CAAC;QAC1C,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1B,MAAM,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC5D,MAAM,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YACjC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9C,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;gBAC7B,MAAM,cAAc,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACxF,CAAC;YACD,MAAM,MAAM,GAAG;gBACb,OAAO,EAAE,CAAC;gBACV,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,SAAS;aACV,CAAC;YACF,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YACjE,MAAM,cAAc,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,oBAAoB,CAAC,EAAE,WAAW,CAAC,CAAC;YACtF,KAAK,CAAC,IAAI,CAAC;gBACT,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO;gBAClC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG;gBAC1B,SAAS;gBACT,gBAAgB,EAAE,SAAS,CAAC,WAAW,CAAC;gBACxC,gBAAgB,EAAE,CAAC,CAAC,gBAAgB;gBACpC,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,UAAU,EAAE,CAAC,CAAC,UAAU;oBACtB,CAAC,CAAC;wBACE,KAAK,EAAE,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;4BACpC,OAAO,EAAE,CAAC,CAAC,OAAO;4BAClB,MAAM,EAAE,CAAC,CAAC,MAAM;4BAChB,MAAM,EAAE,CAAC,CAAC,MAAM;4BAChB,UAAU,EAAE,CAAC,CAAC,UAAU;yBACzB,CAAC,CAAC;wBACH,gBAAgB,EAAE,CAAC,CAAC,UAAU,CAAC,gBAAgB;wBAC/C,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,UAAU;wBACnC,OAAO,EAAE,CAAC,CAAC,UAAU,CAAC,OAAO;wBAC7B,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC/E;oBACH,CAAC,CAAC,IAAI;aACT,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;AACH,CAAC"}

package/dist/node/seat-onboarding-stage2.d.ts

@@ -0,0 +1,10 @@
+import type { SeatCellInput, SeatCellResult } from './seat-onboarding-types.js';
+/**
+ * Stage 2, one seat into one fresh cell HOME. Re-reads and re-validates the
+ * seat record (binding + versions), re-derives the launch gate (a stored
+ * gate that disagrees is a tampered record), refuses a closed gate with
+ * `onboarding-required` before any write, then writes as single writer per
+ * owned destination. The seatDir is opened read-only and never mutated.
+ */
+export declare function materialiseCellHome(input: SeatCellInput): Promise<SeatCellResult>;
+//# sourceMappingURL=seat-onboarding-stage2.d.ts.map

package/dist/node/seat-onboarding-stage2.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seat-onboarding-stage2.d.ts","sourceRoot":"","sources":["../../src/node/seat-onboarding-stage2.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAEV,aAAa,EACb,cAAc,EAEf,MAAM,4BAA4B,CAAC;AAUpC;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC,CAiFvF"}

package/dist/node/seat-onboarding-stage2.js

@@ -0,0 +1,110 @@
+//
+// Stage 2 (cell stage): seed one fresh cell HOME from a staged seat record.
+// Single writer per owned destination; the seatDir is opened read-only.
+import { lstat, readdir, readFile } from 'node:fs/promises';
+import { join, resolve } from 'node:path';
+import { SEAT_ENVELOPE_AUTH_FILES } from '../enrollment/seat-onboarding.js';
+import { authCellDest, planOnboardingWrites, receiptRelPath } from './seat-onboarding-cell-compose.js';
+import { readSeatRecord } from './seat-onboarding-record.js';
+import { asResult, fail, isRecord, sha256Hex, writeExclusive, assertCleanAncestors, } from './seat-stage-write.js';
+/**
+ * Stage 2, one seat into one fresh cell HOME. Re-reads and re-validates the
+ * seat record (binding + versions), re-derives the launch gate (a stored
+ * gate that disagrees is a tampered record), refuses a closed gate with
+ * `onboarding-required` before any write, then writes as single writer per
+ * owned destination. The seatDir is opened read-only and never mutated.
+ */
+export async function materialiseCellHome(input) {
+    try {
+        if (!isRecord(input))
+            fail('schema-mismatch', 'input must be an object');
+        for (const key of ['seatDir', 'cellHome', 'workspaceDir', 'expectedNativeCliVersion', 'ownerScope']) {
+            if (typeof input[key] !== 'string' || input[key].length === 0)
+                fail('schema-mismatch', `${key} is required`);
+        }
+        if (!isRecord(input['configDirs']))
+            fail('schema-mismatch', 'configDirs is required');
+        const seatDir = resolve(input.seatDir);
+        const cellHome = resolve(input.cellHome);
+        const workspaceDir = resolve(input.workspaceDir);
+        const configDirs = {
+            claudeConfigDir: resolve(input.configDirs['claudeConfigDir']),
+            codexHome: resolve(input.configDirs['codexHome']),
+            xdgConfigHome: resolve(input.configDirs['xdgConfigHome']),
+        };
+        const record = await readSeatRecord({
+            seatDir,
+            expectedNativeCliVersion: input.expectedNativeCliVersion,
+            ownerScope: input.ownerScope,
+        });
+        const { bundle, onboarding, launchGate } = record;
+        const cli = bundle.identity.cli;
+        if (!launchGate.eligible)
+            fail('onboarding-required', 'launch gate is closed for this seat');
+        const wsSt = await lstat(workspaceDir).catch(() => null);
+        if (!wsSt || wsSt.isSymbolicLink() || !wsSt.isDirectory()) {
+            fail('onboarding-shape-unverified', 'workspaceDir must be an existing directory');
+        }
+        if (onboarding && onboarding.cellSynthesis.length > 0) {
+            // Q2: the trust write is allowed only for the bench-created empty workspace.
+            const entries = await readdir(workspaceDir);
+            if (entries.length > 0) {
+                fail('onboarding-shape-unverified', 'trust write is limited to the empty bench-created workspace (Q2)');
+            }
+        }
+        const cellSt = await lstat(cellHome).catch(() => null);
+        if (cellSt)
+            fail('onboarding-shape-unverified', 'cellHome must be fresh (not pre-existing)');
+        for (const dir of Object.values(configDirs)) {
+            const st = await lstat(dir).catch(() => null);
+            if (st)
+                fail('onboarding-shape-unverified', `configDir must be fresh: ${dir}`);
+        }
+        const roots = [cellHome, configDirs.claudeConfigDir, configDirs.codexHome, configDirs.xdgConfigHome];
+        for (const root of roots)
+            await assertCleanAncestors(root);
+        // plan every write before writing any byte
+        const writes = [];
+        const allowlist = SEAT_ENVELOPE_AUTH_FILES[cli];
+        for (const name of record.authFiles) {
+            if (!allowlist.includes(name))
+                fail('unknown-field', `auth file not allowlisted for ${cli}: ${name}`);
+            const src = join(seatDir, name);
+            const st = await lstat(src).catch(() => null);
+            if (!st || st.isSymbolicLink() || !st.isFile()) {
+                fail('onboarding-shape-unverified', `auth file missing in seatDir: ${name}`);
+            }
+            const bytes = new Uint8Array(await readFile(src));
+            if (cli === 'claude' && name === '.claude.json')
+                continue; // composed below
+            writes.push({ path: authCellDest(name, cellHome, configDirs), bytes, cls: 'auth' });
+        }
+        if (onboarding) {
+            writes.push(...await planOnboardingWrites({
+                cli,
+                onboarding,
+                seatDir,
+                cellHome,
+                workspaceDir,
+                configDirs,
+                claudeMcpConfig: input.claudeMcpConfig,
+                codexMcpServers: input.codexMcpServers,
+            }));
+        }
+        for (const w of writes)
+            await writeExclusive(roots, w.path, w.bytes);
+        const files = writes
+            .map((w) => ({
+            cellRelPath: receiptRelPath(w.path, cellHome, configDirs),
+            class: w.cls,
+            sha256: sha256Hex(w.bytes),
+            byteLength: w.bytes.length,
+        }))
+            .sort((a, b) => a.cellRelPath.localeCompare(b.cellRelPath));
+        return { ok: true, receipt: { files } };
+    }
+    catch (error) {
+        return asResult(error);
+    }
+}
+//# sourceMappingURL=seat-onboarding-stage2.js.map

package/dist/node/seat-onboarding-stage2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seat-onboarding-stage2.js","sourceRoot":"","sources":["../../src/node/seat-onboarding-stage2.ts"],"names":[],"mappings":"AAAA,EAAE;AACF,4EAA4E;AAC5E,wEAAwE;AAExE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACvG,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAO7D,OAAO,EACL,QAAQ,EACR,IAAI,EACJ,QAAQ,EACR,SAAS,EACT,cAAc,EACd,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAE/B;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAAoB;IAC5D,IAAI,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,IAAI,CAAC,iBAAiB,EAAE,yBAAyB,CAAC,CAAC;QACzE,KAAK,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,cAAc,EAAE,0BAA0B,EAAE,YAAY,CAAU,EAAE,CAAC;YAC7G,IAAI,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAK,KAAK,CAAC,GAAG,CAAY,CAAC,MAAM,KAAK,CAAC;gBAAE,IAAI,CAAC,iBAAiB,EAAE,GAAG,GAAG,cAAc,CAAC,CAAC;QAC3H,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAAE,IAAI,CAAC,iBAAiB,EAAE,wBAAwB,CAAC,CAAC;QACtF,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACzC,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACjD,MAAM,UAAU,GAAuB;YACrC,eAAe,EAAE,OAAO,CAAE,KAAK,CAAC,UAAqC,CAAC,iBAAiB,CAAC,CAAC;YACzF,SAAS,EAAE,OAAO,CAAE,KAAK,CAAC,UAAqC,CAAC,WAAW,CAAC,CAAC;YAC7E,aAAa,EAAE,OAAO,CAAE,KAAK,CAAC,UAAqC,CAAC,eAAe,CAAC,CAAC;SACtF,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC;YAClC,OAAO;YACP,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;YACxD,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;QAClD,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAChC,IAAI,CAAC,UAAU,CAAC,QAAQ;YAAE,IAAI,CAAC,qBAAqB,EAAE,qCAAqC,CAAC,CAAC;QAC7F,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YAC1D,IAAI,CAAC,6BAA6B,EAAE,4CAA4C,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,UAAU,IAAI,UAAU,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtD,6EAA6E;YAC7E,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,CAAC;YAC5C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,IAAI,CAAC,6BAA6B,EAAE,kEAAkE,CAAC,CAAC;YAC1G,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,MAAM;YAAE,IAAI,CAAC,6BAA6B,EAAE,2CAA2C,CAAC,CAAC;QAC7F,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5C,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,EAAE;gBAAE,IAAI,CAAC,6BAA6B,EAAE,4BAA4B,GAAG,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,KAAK,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,eAAe,EAAE,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;QACrG,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,MAAM,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAC3D,2CAA2C;QAC3C,MAAM,MAAM,GAAmB,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;QAChD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACpC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,IAAI,CAAC,eAAe,EAAE,iCAAiC,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC;YACtG,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAChC,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC/C,IAAI,CAAC,6BAA6B,EAAE,iCAAiC,IAAI,EAAE,CAAC,CAAC;YAC/E,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YAClD,IAAI,GAAG,KAAK,QAAQ,IAAI,IAAI,KAAK,cAAc;gBAAE,SAAS,CAAC,iBAAiB;YAC5E,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,oBAAoB,CAAC;gBACxC,GAAG;gBACH,UAAU;gBACV,OAAO;gBACP,QAAQ;gBACR,YAAY;gBACZ,UAAU;gBACV,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,eAAe,EAAE,KAAK,CAAC,eAAe;aACvC,CAAC,CAAC,CAAC;QACN,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,MAAM;YAAE,MAAM,cAAc,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,MAAM;aACjB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACX,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC;YACzD,KAAK,EAAE,CAAC,CAAC,GAAG;YACZ,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;YAC1B,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM;SAC3B,CAAC,CAAC;aACF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;QAC9D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;AACH,CAAC"}