@songsid/agend 2.1.11-beta.1 → 2.1.11-beta.3

package/dist/e2e-isolation.js

@@ -0,0 +1,386 @@
+/**
+ * The gate a real-platform end-to-end run goes through BEFORE it starts anything.
+ *
+ * An e2e run drives a scratch fleet with real bot tokens. The one way that goes badly wrong is not a test
+ * failing — it is the scratch fleet reaching the LIVE one. It has happened: a "throwaway" fleet started with a
+ * changed HOME resolved to tmux's default socket, attached to the live server, and its startup cleanup killed
+ * sixteen live windows as orphans (2026-10-03). `AGEND_HOME` isolates the tmux socket, the lock file, the pid
+ * file, the IPC sockets and the databases; it does NOT isolate the health port (default 19280, and the CLI
+ * treats "something answers there" as "the fleet is running"), `AGEND_PORT`, per-user CLI state, the
+ * per-user service unit, or the credentials the child inherits.
+ *
+ * So this module does two things, both pure (no process is started, no file is written, nothing here ever
+ * reads or changes the real process environment):
+ *
+ *  - `planScratchRun` decides, from a requested scratch directory and port, the ONE layout and the ONE child
+ *    environment a scratch run may use, and refuses — with every violated rule, not just the first — when any
+ *    guarantee cannot be proven. The child environment is built from an allowlist, never copied: a live token,
+ *    an AWS key or the real AGEND_HOME in the runner's own environment cannot reach the child.
+ *  - `planTeardown` produces the only command a run may use to clean up: a tmux `kill-server` against a socket
+ *    that is proven to live inside the scratch directory.
+ *
+ * Everything the checks need from the machine (the user's real AgEnD home, realpath, the uid, the temp root)
+ * is an injectable seam, so every refusal is exercised with fake values and no real directory.
+ *
+ * An `ok` is a decision about paths as they were when it was made, not a sandbox: a path can be swapped for a
+ * symlink between the plan and the start. The runner must own the scratch directory (create it itself, private to
+ * the user, never accept one it did not make) and call `planScratchRun` again immediately before it executes
+ * anything, and `planTeardown` immediately before it cleans up. A fact that cannot be established (a path that
+ * cannot be resolved, an unknown live home) is a refusal, never an assumption.
+ */
+import { lstatSync, realpathSync } from "node:fs";
+import { tmpdir, userInfo } from "node:os";
+import { basename, dirname, isAbsolute, join, resolve, sep } from "node:path";
+import { realDefaultAgendHome, tmuxSessionNameFor, tmuxSocketNameFor } from "./paths.js";
+import { UNIX_SOCKET_PATH_MAX } from "./channel/ipc-bridge.js";
+/** The live fleet's default health port. A scratch fleet must never use it. */
+export const LIVE_HEALTH_PORT = 19280;
+/** The longest instance name the layout is checked against: `<home>/instances/<name>/channel.sock` must still fit a unix socket. */
+export const INSTANCE_NAME_BUDGET = 40;
+/** What a scratch token variable must look like: never a name a live fleet could be using. */
+export const SCRATCH_TOKEN_VAR = /^E2E_[A-Z0-9_]+$/;
+/** Knobs the mock backend reads; the only other variables a run may add to the child environment. */
+const MOCK_KNOB = /^MOCK_[A-Z0-9_]+$/;
+/** Variables copied from the runner's environment, and nothing else. */
+const PASSTHROUGH = ["PATH", "LANG", "LC_ALL", "TERM"];
+export class IsolationError extends Error {
+    violations;
+    constructor(violations) {
+        super(`scratch run refused: ${violations.map(v => `${v.rule} (${v.detail})`).join("; ")}`);
+        this.violations = violations;
+        this.name = "IsolationError";
+    }
+}
+function defaultSeams(seams) {
+    return {
+        realAgendHome: seams.realAgendHome !== undefined ? seams.realAgendHome : realDefaultAgendHome(),
+        realpath: seams.realpath ?? realpathOfNearestAncestor,
+        tmpRoot: seams.tmpRoot ?? tmpdir(),
+        livePorts: seams.livePorts ?? [LIVE_HEALTH_PORT],
+        uid: seams.uid ?? (typeof process.getuid === "function" ? process.getuid() : userInfo().uid),
+    };
+}
+/**
+ * `realpath`, but for a path that need not exist yet: resolve the nearest existing ancestor and re-attach the rest.
+ * Only a path that is certainly MISSING is climbed past. A dangling symlink, an unreadable directory (EACCES), a
+ * symlink loop (ELOOP) or a file in the middle of the path (ENOTDIR) throws: a fact the check cannot establish
+ * is a refusal, never an assumption that the path is harmless.
+ */
+function realpathOfNearestAncestor(path) {
+    const rest = [];
+    let current = path;
+    for (;;) {
+        try {
+            return rest.length === 0 ? realpathSync.native(current) : join(realpathSync.native(current), ...rest.reverse());
+        }
+        catch (err) {
+            if (err.code !== "ENOENT")
+                throw err;
+            try {
+                lstatSync(current);
+                throw Object.assign(new Error(`${current} is a dangling symlink`), { code: "ELOOP" });
+            }
+            catch (lstatErr) {
+                if (lstatErr.code !== "ENOENT")
+                    throw lstatErr;
+            }
+            const parent = dirname(current);
+            if (parent === current)
+                return path; // nothing exists: nothing can be a symlink either
+            rest.push(basename(current));
+            current = parent;
+        }
+    }
+}
+/** Resolve `path` with the seam; a path that cannot be resolved is a violation, and null. */
+function resolveOrRefuse(s, path, what, out) {
+    try {
+        return s.realpath(path);
+    }
+    catch (err) {
+        out.push({ rule: "path-unresolved", detail: `${what} ${path} cannot be resolved (${err.code ?? err.message}); an unproven path is refused` });
+        return null;
+    }
+}
+const isInside = (inner, outer) => inner === outer || inner.startsWith(outer.endsWith(sep) ? outer : outer + sep);
+const isStrictlyInside = (inner, outer) => inner !== outer && isInside(inner, outer);
+export function layoutFor(scratchDir) {
+    // Short names on purpose: `<home>/instances/<name>/channel.sock` has to fit a unix socket path (~108 bytes).
+    return { scratchDir, agendHome: join(scratchDir, "ag"), tmuxTmpdir: join(scratchDir, "tm"), userHome: join(scratchDir, "hm") };
+}
+/** The directory a scratch run's own files live under must be provably the scratch run's. */
+function checkScratchDir(scratchDir, s, out) {
+    if (!isAbsolute(scratchDir) || scratchDir !== resolve(scratchDir)) {
+        out.push({ rule: "scratch-root", detail: `scratch directory must be an absolute, normalised path (got ${JSON.stringify(scratchDir)})` });
+        return;
+    }
+    const root = resolveOrRefuse(s, s.tmpRoot, "the temp root", out);
+    const real = resolveOrRefuse(s, scratchDir, "the scratch directory", out);
+    if (root === null || real === null)
+        return;
+    if (!isStrictlyInside(real, root)) {
+        out.push({ rule: "scratch-root", detail: `${real} is not a directory inside ${root}` });
+    }
+    if (s.realAgendHome !== null) {
+        const live = resolveOrRefuse(s, s.realAgendHome, "the live AgEnD home", out);
+        if (live === null)
+            return;
+        // Inside the live home, equal to it, or a parent of it (a scratch run rooted above the live fleet could be told to clean up inside it).
+        if (isInside(real, live) || isInside(live, real)) {
+            out.push({ rule: "scratch-not-live", detail: `${real} overlaps the live AgEnD home ${live}` });
+        }
+    }
+}
+/**
+ * Every path the child is handed (its AGEND_HOME, HOME, TMUX_TMPDIR and the tmux socket) must resolve to a place
+ * strictly inside the scratch directory and clear of the live home. A symlink at `<scratch>/ag` or `<scratch>/tm` that
+ * points elsewhere would otherwise carry the run's data, credentials or tmux server out of the isolation. The
+ * scratch directory itself is proven clear of the live home by `checkScratchDir`, so staying strictly inside it is
+ * also staying clear of the live home.
+ */
+function checkLayoutContained(layout, tmuxSocketPath, s, out) {
+    const scratch = resolveOrRefuse(s, layout.scratchDir, "the scratch directory", out);
+    if (scratch === null)
+        return;
+    const parts = [
+        ["AGEND_HOME", layout.agendHome], ["HOME", layout.userHome], ["TMUX_TMPDIR", layout.tmuxTmpdir],
+        ["the tmux socket directory", dirname(tmuxSocketPath)], ["the tmux socket", tmuxSocketPath],
+    ];
+    for (const [what, path] of parts) {
+        const real = resolveOrRefuse(s, path, what, out);
+        if (real === null)
+            continue;
+        // Staying strictly inside a scratch directory that `checkScratchDir` has already proven clear of the live home
+        // is also staying clear of it.
+        if (!isStrictlyInside(real, scratch)) {
+            out.push({ rule: "layout-escapes", detail: `${what} ${path} resolves to ${real}, outside the scratch directory ${scratch}` });
+        }
+    }
+}
+function checkPort(port, s, out) {
+    if (!Number.isInteger(port) || port < 1024 || port > 65535) {
+        out.push({ rule: "health-port", detail: `${String(port)} is not a usable unprivileged port` });
+    }
+    else if (port === LIVE_HEALTH_PORT || s.livePorts.includes(port)) {
+        out.push({ rule: "health-port", detail: `${port} is the live fleet's port` });
+    }
+}
+/**
+ * Subcommands of the `agend` CLI that act on the machine's service or on the installed package rather than on a
+ * fleet directory: they go through the per-user service unit (or `npm`), which a scratch AGEND_HOME does not isolate.
+ * `fleet start|stop|restart` are NOT here — they act on the fleet whose health port the scratch config names.
+ */
+const FORBIDDEN_AGEND_SUBCOMMANDS = new Set(["install", "uninstall", "update", "start", "stop", "restart", "setup", "quickstart", "init", "reload"]);
+/** Programs that have no business in a scratch run: they act on the machine, not on the scratch directory. */
+const FORBIDDEN_PROGRAMS = new Set(["systemctl", "launchctl", "service", "sudo", "su", "doas", "kill", "pkill", "killall", "npm", "npx", "pnpm", "yarn"]);
+/** Programs a scratch run may execute. Anything else (`sh -c`, `env`, `tmux`, `xargs`, `bash` …) is an indirection the check cannot see through. */
+const ALLOWED_PROGRAMS = new Set(["agend", "node", "tsx"]);
+const SCRIPT_RUNNERS = new Set(["node", "tsx"]);
+/** The only flags accepted where a subcommand would go: they print and exit. */
+const INFO_FLAGS = new Set(["--version", "-v", "--help", "-h"]);
+/**
+ * The command grammar is a whitelist, not a blacklist of words:
+ *   agend <subcommand> [anything]
+ *   node|tsx <script> <subcommand> [anything]
+ * The subcommand must sit exactly where the grammar puts it. A runtime flag before the script (`node --import x
+ * cli.js restart`, `node -- cli.js stop`) or before the subcommand is refused outright, because it can change what
+ * runs or hide where the subcommand is. tmux is refused here too: the only tmux command a run may issue is the
+ * one `planTeardown` returns, against a socket it has proven.
+ */
+function checkCommand(command, out) {
+    if (command.length === 0)
+        return;
+    const program = basename(command[0]);
+    if (FORBIDDEN_PROGRAMS.has(program)) {
+        out.push({ rule: "command-forbidden", detail: `${program} acts on the machine, not on the scratch directory` });
+        return;
+    }
+    if (!ALLOWED_PROGRAMS.has(program)) {
+        out.push({ rule: "command-forbidden", detail: `${program} is not an allowed program (agend, node, tsx); shells and wrappers hide what they run, and tmux is only used through planTeardown` });
+        return;
+    }
+    let args = command.slice(1);
+    if (SCRIPT_RUNNERS.has(program)) {
+        const script = args[0];
+        if (script === undefined || script.startsWith("-")) {
+            out.push({ rule: "command-forbidden", detail: `${program} must be followed directly by a script path, not ${JSON.stringify(script ?? "")}: runtime flags change what runs` });
+            return;
+        }
+        args = args.slice(1);
+    }
+    const sub = args[0];
+    if (sub === undefined)
+        return;
+    if (sub.startsWith("-")) {
+        if (!INFO_FLAGS.has(sub) || args.length > 1) {
+            out.push({ rule: "command-forbidden", detail: `${JSON.stringify(sub)} comes where the agend subcommand belongs; only --version/--help (alone) may` });
+        }
+        return;
+    }
+    if (FORBIDDEN_AGEND_SUBCOMMANDS.has(sub)) {
+        out.push({ rule: "command-forbidden", detail: `agend ${sub} goes through the per-user service, which a scratch AGEND_HOME does not isolate` });
+    }
+}
+/**
+ * Decide the layout and child environment of a scratch run, or refuse it with every rule that failed.
+ * Pure: it neither starts nor writes anything.
+ */
+export function planScratchRun(request, seams = {}) {
+    const s = defaultSeams(seams);
+    const violations = [];
+    const { scratchDir, parentEnv } = request;
+    checkScratchDir(scratchDir, s, violations);
+    const layout = layoutFor(scratchDir);
+    if (s.realAgendHome === null) {
+        violations.push({ rule: "real-home-unknown", detail: "the live AgEnD home cannot be determined, so nothing can be proven different from it" });
+    }
+    else {
+        const live = resolveOrRefuse(s, s.realAgendHome, "the live AgEnD home", violations);
+        const home = resolveOrRefuse(s, layout.agendHome, "AGEND_HOME", violations);
+        if (live !== null && home !== null && (home === live || layout.agendHome === s.realAgendHome)) {
+            violations.push({ rule: "home-not-live", detail: `AGEND_HOME ${layout.agendHome} is the live home` });
+        }
+    }
+    // The decision that once killed live windows, evaluated for the CHILD's home rather than this process's.
+    const socketName = tmuxSocketNameFor(layout.agendHome, s.realAgendHome);
+    const sessionName = tmuxSessionNameFor(layout.agendHome, s.realAgendHome);
+    if (socketName === null) {
+        violations.push({ rule: "tmux-socket-default", detail: "the child would use tmux's DEFAULT socket — the live server" });
+    }
+    if (sessionName === "agend") {
+        violations.push({ rule: "tmux-session-live", detail: 'the child would use the live tmux session name "agend"' });
+    }
+    const longest = join(layout.agendHome, "instances", "x".repeat(INSTANCE_NAME_BUDGET), "channel.sock");
+    const tmuxSocketPath = join(layout.tmuxTmpdir, `tmux-${s.uid}`, socketName ?? "default");
+    for (const [what, path] of [["IPC socket", longest], ["tmux socket", tmuxSocketPath]]) {
+        if (Buffer.byteLength(path) >= UNIX_SOCKET_PATH_MAX) {
+            violations.push({ rule: "socket-path-length", detail: `${what} path would be ${Buffer.byteLength(path)} bytes (limit ${UNIX_SOCKET_PATH_MAX - 1}); use a shorter scratch directory` });
+        }
+    }
+    checkLayoutContained(layout, tmuxSocketPath, s, violations);
+    checkPort(request.healthPort, s, violations);
+    const tokenVars = [...(request.tokenVars ?? [])];
+    for (const name of tokenVars) {
+        if (!SCRATCH_TOKEN_VAR.test(name)) {
+            violations.push({ rule: "token-var", detail: `${JSON.stringify(name)} is not a scratch token variable (E2E_*); a live fleet's variable must never be passed on` });
+        }
+    }
+    for (const key of Object.keys(request.extraEnv ?? {})) {
+        if (!MOCK_KNOB.test(key)) {
+            violations.push({ rule: "env-forbidden", detail: `${key} may not be added to the child environment (only MOCK_* knobs)` });
+        }
+    }
+    checkCommand(request.command ?? [], violations);
+    if (violations.length > 0)
+        return { ok: false, violations };
+    const childEnv = {};
+    for (const name of PASSTHROUGH) {
+        const value = parentEnv[name];
+        if (value !== undefined && value !== "")
+            childEnv[name] = value;
+    }
+    childEnv.AGEND_HOME = layout.agendHome;
+    childEnv.TMUX_TMPDIR = layout.tmuxTmpdir;
+    childEnv.HOME = layout.userHome;
+    childEnv.AGEND_E2E = "1";
+    for (const name of tokenVars) {
+        const value = parentEnv[name];
+        if (value !== undefined && value !== "")
+            childEnv[name] = value;
+    }
+    Object.assign(childEnv, request.extraEnv ?? {});
+    return { ok: true, plan: { layout, childEnv, healthPort: request.healthPort, socketName: socketName, sessionName, tmuxSocketPath, tokenVars } };
+}
+/** `planScratchRun`, throwing: the form a runner uses so that a refusal cannot be ignored. */
+export function assertScratchRun(request, seams = {}) {
+    const result = planScratchRun(request, seams);
+    if (!result.ok)
+        throw new IsolationError(result.violations);
+    return result.plan;
+}
+/**
+ * The only way a run may clean up: `tmux -S <socket> kill-server`, and only for a socket proven to live inside the
+ * scratch directory and to carry the scratch run's own name. Never `-L`, never the default socket, never a
+ * pattern — a wrong guess here is how live windows die. Returns the command; running it is the caller's job.
+ */
+export function planTeardown(plan, seams = {}) {
+    const s = defaultSeams(seams);
+    const violations = [];
+    const { scratchDir } = plan.layout;
+    checkScratchDir(scratchDir, s, violations);
+    if (s.realAgendHome === null) {
+        violations.push({ rule: "real-home-unknown", detail: "the live AgEnD home cannot be determined, so a kill-server cannot be proven to miss the live fleet" });
+    }
+    const real = resolveOrRefuse(s, plan.tmuxSocketPath, "the tmux socket", violations);
+    const scratchReal = resolveOrRefuse(s, scratchDir, "the scratch directory", violations);
+    if (!isAbsolute(plan.tmuxSocketPath) || plan.tmuxSocketPath !== resolve(plan.tmuxSocketPath)) {
+        violations.push({ rule: "teardown-target", detail: "the tmux socket path is not an absolute, normalised path" });
+    }
+    else if (real !== null && scratchReal !== null && !isStrictlyInside(real, scratchReal)) {
+        violations.push({ rule: "teardown-target", detail: `${real} is not inside the scratch directory ${scratchReal}` });
+    }
+    checkLayoutContained(plan.layout, plan.tmuxSocketPath, s, violations);
+    if (basename(plan.tmuxSocketPath) !== plan.socketName || plan.socketName.length === 0 || plan.socketName === "default") {
+        violations.push({ rule: "teardown-target", detail: `socket ${JSON.stringify(basename(plan.tmuxSocketPath))} is not the scratch run's own (${plan.socketName})` });
+    }
+    if (s.realAgendHome !== null && tmuxSocketNameFor(plan.layout.agendHome, s.realAgendHome) !== plan.socketName) {
+        violations.push({ rule: "teardown-target", detail: "the socket name is not the one the scratch home derives" });
+    }
+    if (violations.length > 0)
+        return { ok: false, violations };
+    return { ok: true, argv: ["tmux", "-S", plan.tmuxSocketPath, "kill-server"], removeDir: scratchDir };
+}
+/**
+ * A scratch run's fleet.yaml, checked before the fleet is given it: the isolation above is worth nothing if the
+ * config then names a live token variable, a real backend, a webhook or the live port.
+ */
+export function checkScratchFleetConfig(config, plan) {
+    const out = [];
+    if (config.health_port !== plan.healthPort) {
+        out.push({ rule: "config-health-port", detail: `health_port must be ${plan.healthPort} (got ${JSON.stringify(config.health_port)})` });
+    }
+    const channels = config.channels ?? (config.channel ? [config.channel] : []);
+    channels.forEach((channel, i) => {
+        const env = channel.bot_token_env;
+        if (typeof env !== "string" || !plan.tokenVars.includes(env)) {
+            out.push({ rule: "config-token-var", detail: `channel ${i} bot_token_env ${JSON.stringify(env)} is not one of this run's scratch variables` });
+        }
+        if (channel.access === undefined || channel.access === null || typeof channel.access !== "object") {
+            out.push({ rule: "config-access", detail: `channel ${i} has no explicit access block (who may talk to the scratch bot must be written down)` });
+        }
+    });
+    if (config.defaults?.backend !== "mock") {
+        out.push({ rule: "config-backend", detail: `defaults.backend must be "mock" (got ${JSON.stringify(config.defaults?.backend)}): a real CLI needs real credentials and per-user state` });
+    }
+    for (const [name, instance] of Object.entries(config.instances ?? {})) {
+        if (instance.backend !== undefined && instance.backend !== "mock") {
+            out.push({ rule: "config-backend", detail: `instance ${name} backend ${JSON.stringify(instance.backend)} is not "mock"` });
+        }
+        // An instance inherits `defaults.agent_mode` / `defaults.hang_detector`; the defaults are checked below, so here
+        // only what the instance sets itself can differ from them.
+        if (instance.agent_mode === "cli") {
+            out.push({ rule: "config-agent-mode", detail: `instance ${name} uses agent_mode: cli, whose port (AGEND_PORT, default 19280) is not derived from the scratch health port` });
+        }
+        const hang = instance.hang_detector?.enabled;
+        if (hang !== undefined && hang !== false) {
+            out.push({ rule: "config-quiet", detail: `instance ${name} hang_detector.enabled is ${JSON.stringify(hang)}: it overrides the quiet default and posts to the real chat on its own` });
+        }
+    }
+    if (config.defaults?.agent_mode === "cli") {
+        out.push({ rule: "config-agent-mode", detail: "defaults.agent_mode: cli would put every instance on a port that is not derived from the scratch health port" });
+    }
+    const quiet = [
+        ["defaults.tips", config.defaults?.tips],
+        ["defaults.daily_summary.enabled", config.defaults?.daily_summary?.enabled],
+        ["defaults.hang_detector.enabled", config.defaults?.hang_detector?.enabled],
+    ];
+    for (const [name, value] of quiet) {
+        if (value !== false)
+            out.push({ rule: "config-quiet", detail: `${name} must be explicitly false (got ${JSON.stringify(value)}): they post to the real chat on their own schedule` });
+    }
+    if (config.defaults?.webhooks !== undefined) {
+        out.push({ rule: "config-webhooks", detail: "defaults.webhooks would call out to real endpoints" });
+    }
+    return out;
+}
+//# sourceMappingURL=e2e-isolation.js.map

package/dist/e2e-isolation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"e2e-isolation.js","sourceRoot":"","sources":["../src/e2e-isolation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC9E,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACzF,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAE/D,+EAA+E;AAC/E,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,CAAC;AACtC,oIAAoI;AACpI,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AACvC,8FAA8F;AAC9F,MAAM,CAAC,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AACpD,qGAAqG;AACrG,MAAM,SAAS,GAAG,mBAAmB,CAAC;AACtC,wEAAwE;AACxE,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAU,CAAC;AAyDhE,MAAM,OAAO,cAAe,SAAQ,KAAK;IAClB;IAArB,YAAqB,UAAuB;QAC1C,KAAK,CAAC,wBAAwB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QADxE,eAAU,GAAV,UAAU,CAAa;QAE1C,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED,SAAS,YAAY,CAAC,KAAY;IAChC,OAAO;QACL,aAAa,EAAE,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,oBAAoB,EAAE;QAC/F,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,yBAAyB;QACrD,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,MAAM,EAAE;QAClC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,CAAC,gBAAgB,CAAC;QAChD,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC;KAC7F,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,yBAAyB,CAAC,IAAY;IAC7C,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,SAAS,CAAC;QACR,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAClH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,GAAG,CAAC;YAChE,IAAI,CAAC;gBACH,SAAS,CAAC,OAAO,CAAC,CAAC;gBACnB,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,OAAO,wBAAwB,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YACxF,CAAC;YAAC,OAAO,QAAQ,EAAE,CAAC;gBAClB,IAAK,QAAkC,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,QAAQ,CAAC;YAC5E,CAAC;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;YAChC,IAAI,MAAM,KAAK,OAAO;gBAAE,OAAO,IAAI,CAAC,CAAY,kDAAkD;YAClG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YAC7B,OAAO,GAAG,MAAM,CAAC;QACnB,CAAC;IACH,CAAC;AACH,CAAC;AAED,6FAA6F;AAC7F,SAAS,eAAe,CAAC,CAAkB,EAAE,IAAY,EAAE,IAAY,EAAE,GAAgB;IACvF,IAAI,CAAC;QACH,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,GAAG,IAAI,IAAI,IAAI,wBAAyB,GAA6B,CAAC,IAAI,IAAK,GAAa,CAAC,OAAO,gCAAgC,EAAE,CAAC,CAAC;QACpL,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAE,KAAa,EAAW,EAAE,CAAC,KAAK,KAAK,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC;AAC3I,MAAM,gBAAgB,GAAG,CAAC,KAAa,EAAE,KAAa,EAAW,EAAE,CAAC,KAAK,KAAK,KAAK,IAAI,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAE9G,MAAM,UAAU,SAAS,CAAC,UAAkB;IAC1C,6GAA6G;IAC7G,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC;AACjI,CAAC;AAED,6FAA6F;AAC7F,SAAS,eAAe,CAAC,UAAkB,EAAE,CAAkB,EAAE,GAAgB;IAC/E,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,UAAU,KAAK,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,+DAA+D,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC;QACzI,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,EAAE,UAAU,EAAE,uBAAuB,EAAE,GAAG,CAAC,CAAC;IAC1E,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO;IAC3C,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;QAClC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,IAAI,8BAA8B,IAAI,EAAE,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,CAAC,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,aAAa,EAAE,qBAAqB,EAAE,GAAG,CAAC,CAAC;QAC7E,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO;QAC1B,wIAAwI;QACxI,IAAI,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,GAAG,IAAI,iCAAiC,IAAI,EAAE,EAAE,CAAC,CAAC;QACjG,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,oBAAoB,CAAC,MAAqB,EAAE,cAAsB,EAAE,CAAkB,EAAE,GAAgB;IAC/G,MAAM,OAAO,GAAG,eAAe,CAAC,CAAC,EAAE,MAAM,CAAC,UAAU,EAAE,uBAAuB,EAAE,GAAG,CAAC,CAAC;IACpF,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO;IAC7B,MAAM,KAAK,GAA4B;QACrC,CAAC,YAAY,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC;QAC/F,CAAC,2BAA2B,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,iBAAiB,EAAE,cAAc,CAAC;KAC5F,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACjD,IAAI,IAAI,KAAK,IAAI;YAAE,SAAS;QAC5B,+GAA+G;QAC/G,+BAA+B;QAC/B,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;YACrC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,GAAG,IAAI,IAAI,IAAI,gBAAgB,IAAI,mCAAmC,OAAO,EAAE,EAAE,CAAC,CAAC;QAChI,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,CAAkB,EAAE,GAAgB;IACnE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;QAC3D,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE,CAAC,CAAC;IACjG,CAAC;SAAM,IAAI,IAAI,KAAK,gBAAgB,IAAI,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,IAAI,2BAA2B,EAAE,CAAC,CAAC;IAChF,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,2BAA2B,GAAwB,IAAI,GAAG,CAC9D,CAAC,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,CACxG,CAAC;AACF,8GAA8G;AAC9G,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CACrD,CAAC,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CACtH,CAAC;AACF,oJAAoJ;AACpJ,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AAChF,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AACrE,gFAAgF;AAChF,MAAM,UAAU,GAAwB,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;AAErF;;;;;;;;GAQG;AACH,SAAS,YAAY,CAAC,OAA0B,EAAE,GAAgB;IAChE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACjC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC;IACtC,IAAI,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,GAAG,OAAO,oDAAoD,EAAE,CAAC,CAAC;QAChH,OAAO;IACT,CAAC;IACD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,GAAG,OAAO,mIAAmI,EAAE,CAAC,CAAC;QAC/L,OAAO;IACT,CAAC;IACD,IAAI,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACvB,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACnD,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,GAAG,OAAO,oDAAoD,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC,kCAAkC,EAAE,CAAC,CAAC;YAC9K,OAAO;QACT,CAAC;QACD,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACvB,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO;IAC9B,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5C,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,8EAA8E,EAAE,CAAC,CAAC;QACxJ,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,2BAA2B,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,SAAS,GAAG,iFAAiF,EAAE,CAAC,CAAC;IACjJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,OAAuB,EAAE,QAAe,EAAE;IACvE,MAAM,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAC9B,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IAE1C,eAAe,CAAC,UAAU,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IAErC,IAAI,CAAC,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;QAC7B,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,sFAAsF,EAAE,CAAC,CAAC;IACjJ,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,aAAa,EAAE,qBAAqB,EAAE,UAAU,CAAC,CAAC;QACpF,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,EAAE,MAAM,CAAC,SAAS,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;QAC5E,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,SAAS,KAAK,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC;YAC9F,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,cAAc,MAAM,CAAC,SAAS,mBAAmB,EAAE,CAAC,CAAC;QACxG,CAAC;IACH,CAAC;IAED,yGAAyG;IACzG,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC;IACxE,MAAM,WAAW,GAAG,kBAAkB,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC;IAC1E,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,MAAM,EAAE,6DAA6D,EAAE,CAAC,CAAC;IAC1H,CAAC;IACD,IAAI,WAAW,KAAK,OAAO,EAAE,CAAC;QAC5B,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,wDAAwD,EAAE,CAAC,CAAC;IACnH,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,oBAAoB,CAAC,EAAE,cAAc,CAAC,CAAC;IACtG,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,GAAG,EAAE,EAAE,UAAU,IAAI,SAAS,CAAC,CAAC;IACzF,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,OAAO,CAAC,EAAE,CAAC,aAAa,EAAE,cAAc,CAAC,CAAU,EAAE,CAAC;QAC/F,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,oBAAoB,EAAE,CAAC;YACpD,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,GAAG,IAAI,kBAAkB,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,iBAAiB,oBAAoB,GAAG,CAAC,oCAAoC,EAAE,CAAC,CAAC;QACzL,CAAC;IACH,CAAC;IAED,oBAAoB,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;IAC5D,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;IAE7C,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC;IACjD,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,2FAA2F,EAAE,CAAC,CAAC;QACrK,CAAC;IACH,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,GAAG,gEAAgE,EAAE,CAAC,CAAC;QAC7H,CAAC;IACH,CAAC;IACD,YAAY,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE,UAAU,CAAC,CAAC;IAEhD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IAE5D,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;YAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IAClE,CAAC;IACD,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC;IACvC,QAAQ,CAAC,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC;IACzC,QAAQ,CAAC,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC;IAChC,QAAQ,CAAC,SAAS,GAAG,GAAG,CAAC;IACzB,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;YAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IAClE,CAAC;IACD,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAEhD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,UAAU,EAAE,UAAW,EAAE,WAAW,EAAE,cAAc,EAAE,SAAS,EAAE,EAAE,CAAC;AACnJ,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,gBAAgB,CAAC,OAAuB,EAAE,QAAe,EAAE;IACzE,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,MAAM,IAAI,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC5D,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAMD;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,IAAiB,EAAE,QAAe,EAAE;IAC/D,MAAM,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAC9B,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;IAEnC,eAAe,CAAC,UAAU,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;IAC3C,IAAI,CAAC,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;QAC7B,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,oGAAoG,EAAE,CAAC,CAAC;IAC/J,CAAC;IACD,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,iBAAiB,EAAE,UAAU,CAAC,CAAC;IACpF,MAAM,WAAW,GAAG,eAAe,CAAC,CAAC,EAAE,UAAU,EAAE,uBAAuB,EAAE,UAAU,CAAC,CAAC;IACxF,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;QAC7F,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,0DAA0D,EAAE,CAAC,CAAC;IACnH,CAAC;SAAM,IAAI,IAAI,KAAK,IAAI,IAAI,WAAW,KAAK,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,CAAC;QACzF,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,GAAG,IAAI,wCAAwC,WAAW,EAAE,EAAE,CAAC,CAAC;IACrH,CAAC;IACD,oBAAoB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;IACtE,IAAI,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACvH,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,UAAU,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,kCAAkC,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC;IACpK,CAAC;IACD,IAAI,CAAC,CAAC,aAAa,KAAK,IAAI,IAAI,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,aAAa,CAAC,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;QAC9G,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,yDAAyD,EAAE,CAAC,CAAC;IAClH,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IAC5D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,aAAa,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AACvG,CAAC;AAWD;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAA0B,EAAE,IAAiB;IACnF,MAAM,GAAG,GAAgB,EAAE,CAAC;IAC5B,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;QAC3C,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,uBAAuB,IAAI,CAAC,UAAU,SAAS,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;IACzI,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7E,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE;QAC9B,MAAM,GAAG,GAAG,OAAO,CAAC,aAAa,CAAC;QAClC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,WAAW,CAAC,kBAAkB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,6CAA6C,EAAE,CAAC,CAAC;QACjJ,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAClG,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,WAAW,CAAC,sFAAsF,EAAE,CAAC,CAAC;QAClJ,CAAC;IACH,CAAC,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,QAAQ,EAAE,OAAO,KAAK,MAAM,EAAE,CAAC;QACxC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,wCAAwC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,yDAAyD,EAAE,CAAC,CAAC;IAC1L,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,CAAC;QACtE,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,IAAI,QAAQ,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAClE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,YAAY,IAAI,YAAY,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAC7H,CAAC;QACD,iHAAiH;QACjH,2DAA2D;QAC3D,IAAI,QAAQ,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC;YAClC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,YAAY,IAAI,2GAA2G,EAAE,CAAC,CAAC;QAC/K,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;QAC7C,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YACzC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,YAAY,IAAI,6BAA6B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,wEAAwE,EAAE,CAAC,CAAC;QACxL,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,EAAE,UAAU,KAAK,KAAK,EAAE,CAAC;QAC1C,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,8GAA8G,EAAE,CAAC,CAAC;IAClK,CAAC;IACD,MAAM,KAAK,GAA6B;QACtC,CAAC,eAAe,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC;QACxC,CAAC,gCAAgC,EAAE,MAAM,CAAC,QAAQ,EAAE,aAAa,EAAE,OAAO,CAAC;QAC3E,CAAC,gCAAgC,EAAE,MAAM,CAAC,QAAQ,EAAE,aAAa,EAAE,OAAO,CAAC;KAC5E,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC;QAClC,IAAI,KAAK,KAAK,KAAK;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,IAAI,kCAAkC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,qDAAqD,EAAE,CAAC,CAAC;IACvL,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,EAAE,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC5C,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,oDAAoD,EAAE,CAAC,CAAC;IACtG,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/fleet-manager.d.ts

@@ -254,6 +254,7 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
     private startupRetryNotices;
     /** Unsupported-CLI refusals waiting to go out, grouped by reason (#1109). */
     private unsupportedCliNotices;
+    private kiroIncompatNotices;
     /** Backoff between automatic startup retries; the last step repeats while the backend is down. */
     static readonly STARTUP_RETRY_BACKOFF_MS: number[];
     /** Hard cap on automatic startup retries (3 backoff steps + up to 3 more during a backend outage). */
@@ -652,6 +653,15 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
      * type a slash command could `/update` the host.
      */
     fleetAdminGate(userId: string, adapterId?: string): "ok" | "disabled" | "denied";
+    /**
+     * Every Discord slash command, for every adapter, in one place (it used to be two copies that could drift).
+     *
+     * Two checks before any command's own code runs, and the order matters: the DOOR (src/slash-authz.ts — may
+     * this caller speak here at all) and then the COMMAND TABLE (src/command-table.ts — does this command apply
+     * in this kind of channel, and which kind of admin does it need). The table can only narrow what the door
+     * let through. A command nobody registered is answered, not left to time out.
+     */
+    private dispatchSlash;
     /**
      * The door every Discord slash command goes through (src/slash-authz.ts has the rule and the reasoning).
      * Answers the caller itself when it refuses, so a refused command costs one reply and does nothing else.
@@ -798,6 +808,20 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
      * first unattended start and every scheduled retry.
      */
     private stopOnUnsupportedCli;
+    /**
+     * LifecycleContext: a kiro instance the installed kiro-cli cannot run as
+     * configured (#1109) — at start, or at a respawn after kiro-cli replaced
+     * itself. The operator already gets the plain notice; this tells every
+     * General, as an agent, so it can explain the kiro engine move when asked.
+     * One notice per refusal reason, like the operator's.
+     */
+    queueKiroIncompatNotice(name: string, reason: string): void;
+    /**
+     * Held in the delivery outbox until each General takes it: the same kiro-cli
+     * may have stopped the General too, and it should still hear once it is back.
+     * Admitted once per day per refusal (reason + names) and General.
+     */
+    private sendKiroIncompatToGenerals;
     /**
      * One notice per refusal reason: a kiro-cli that dropped the legacy UI
      * refuses every kiro instance at once, and that is one message, not ten.