@songsid/agend 2.3.2-beta.1 → 2.3.2-beta.11

package/dist/structured-signin.d.ts

@@ -0,0 +1,131 @@
+import { type AuthCheckResult } from "./login-flows.js";
+import { LoginWindowLock } from "./login-window-lock.js";
+export declare const STRUCTURED_SIGNIN_BACKENDS: readonly ["kiro-cli", "claude-code", "codex"];
+export type StructuredBackend = typeof STRUCTURED_SIGNIN_BACKENDS[number];
+export declare function structuredSignInSupported(backend: string): backend is StructuredBackend;
+export type SignInFailure = "busy" | "cancelled" | "expired" | "revoked" | "unsupported_prompt" | "provider_rejected" | "relogin_required" | "auth_unconfirmed" | "transport_failed" | "cleanup_failed";
+export type SignInPrompt = {
+    phase: "waiting";
+} | {
+    phase: "method";
+    choices: string[];
+    selected: number;
+} | {
+    phase: "start_url";
+} | {
+    phase: "region";
+} | {
+    phase: "authorization";
+    url: string;
+    code: string | null;
+} | {
+    phase: "code";
+    url: string | null;
+} | {
+    phase: "success";
+} | {
+    phase: "failed";
+    reason: SignInFailure;
+};
+export type SignInAction = {
+    kind: "method";
+    choice: string;
+} | {
+    kind: "start_url" | "region" | "code";
+    value: string;
+};
+/** Plain joined pane only, bounded; raw output never becomes a browser view or an error. */
+export declare function structuredSignInPrompt(backend: StructuredBackend, input: string): SignInPrompt;
+export interface StructuredSignInLaunch {
+    argv: readonly string[];
+    /** Fixed command, only after an explicit re-login choice. Never an implicit logout. */
+    logoutArgv?: readonly string[];
+}
+export interface StructuredSignInTransport {
+    /** Must be bounded, disable automatic browser opening and use a dedicated process/PTY.
+     * No interactive shell after exit. Abort/close must reap late-created resources. */
+    start(spec: StructuredSignInLaunch, signal: AbortSignal): Promise<void>;
+    capture(): Promise<string>;
+    status(): Promise<{
+        alive: boolean;
+        exitCode?: number;
+    }>;
+    /** Literal PTY input to this attempt's fixed login command, never shell interpolation. */
+    write(input: string, signal: AbortSignal): Promise<void>;
+    /** Confirm all this attempt's native resources are gone; reject if that cannot be proven. */
+    close(): Promise<void>;
+}
+export interface StructuredSignInDeps {
+    transport: StructuredSignInTransport;
+    lock: LoginWindowLock;
+    /** Current setup owner / local-admin session. Rechecked after every await. */
+    current(): boolean;
+    /** Independently probe the backend's auth status; bounded and token-free (LOGIN_FLOWS.authCheck). */
+    checkAuth(): Promise<AuthCheckResult>;
+    /** Monotonic elapsed milliseconds; wall-clock corrections must not extend an attempt. */
+    now?(): number;
+    /** Safe event only. Never receives panes, URLs, codes or supplied input. */
+    changed?(event: {
+        backend: StructuredBackend;
+        phase: string;
+        reason?: SignInFailure;
+    }): void;
+}
+export interface StructuredSignInView {
+    id: string;
+    backend: StructuredBackend;
+    revision: number;
+    phase: "checking" | "starting" | "done" | "failed" | SignInPrompt["phase"];
+    reason?: SignInFailure;
+    mine: boolean;
+    choices?: string[];
+    url?: string | null;
+    code?: string | null;
+    canAct?: boolean;
+}
+export type SignInActionResult = "accepted" | "stale" | "invalid" | "ended" | "busy";
+export declare class StructuredSignIn {
+    readonly backend: StructuredBackend;
+    private readonly owner;
+    private readonly deps;
+    readonly id: string;
+    private claim;
+    private readonly abort;
+    private phase;
+    private reason;
+    private prompt;
+    private revision;
+    private closed;
+    private begun;
+    private startInFlight;
+    private transportTouched;
+    private finishing;
+    private queue;
+    private pollTimer;
+    private deadline;
+    private unknownAt;
+    private readonly answered;
+    private get promptUsed();
+    private expiresAt;
+    private pendingActions;
+    constructor(backend: StructuredBackend, owner: object, deps: StructuredSignInDeps);
+    /** A reused valid login changes no credentials and needs no running-agent restart. */
+    get launched(): boolean;
+    private now;
+    private authorized;
+    private lostReason;
+    private current;
+    private emit;
+    private setPhase;
+    /** Duplicate begin/refresh joins this attempt; it never starts another child. */
+    start(confirmedRelogin?: boolean): Promise<void>;
+    view(who: object): StructuredSignInView;
+    private serial;
+    private observe;
+    private schedule;
+    /** Also used by inert harnesses; overlapping captures/actions share one FIFO. */
+    poll(): Promise<void>;
+    action(who: object, id: string, revision: number, action: SignInAction): Promise<SignInActionResult>;
+    cancel(): Promise<void>;
+    private finish;
+}

package/dist/structured-signin.js

@@ -0,0 +1,388 @@
+/**
+ * #2599 stage 1: browser controls for a login command, never a browser terminal.
+ * Transport/authority are supplied by the host; this module starts no processes
+ * by itself and imports no fleet lifecycle. Agy remains console-only.
+ */
+import { randomBytes } from "node:crypto";
+import { performance } from "node:perf_hooks";
+import { LOGIN_FLOWS, extractLoginHint } from "./login-flows.js";
+import { linkableLoginUrl } from "./login-url.js";
+export const STRUCTURED_SIGNIN_BACKENDS = ["kiro-cli", "claude-code", "codex"];
+export function structuredSignInSupported(backend) {
+    return STRUCTURED_SIGNIN_BACKENDS.includes(backend);
+}
+const ARGV = {
+    "kiro-cli": ["kiro-cli", "login"],
+    "claude-code": ["claude", "auth", "login"],
+    "codex": ["codex", "login", "--device-auth"],
+};
+const TTL_MS = 10 * 60_000;
+const UNKNOWN_GRACE_MS = 5_000;
+const MAX_PANE = 64 * 1024;
+const MAX_VALUE = 4_096;
+/** Only the portion below the last menu title may be interpreted as controls. */
+function menu(pane, backend) {
+    const rows = pane.split("\n").map(row => row.trimEnd()).filter(row => row.trim());
+    let title = -1;
+    for (let i = 0; i < rows.length; i++)
+        if (/^\s*\??\s*Select login method\s*[:›]?\s*$/.test(rows[i]))
+            title = i;
+    if (title < 0)
+        return null;
+    const options = rows.slice(title + 1);
+    const labels = backend === "kiro-cli"
+        ? ["Use with Builder ID", "Use with Google", "Use with GitHub", "Use with Your Organization"]
+        : backend === "claude-code" ? [
+            "Claude account with subscription · Pro, Max, Team, or Enterprise",
+            "Anthropic Console account · API usage billing",
+            "3rd-party platform · Amazon Bedrock, Microsoft Foundry, Google Vertex AI",
+        ] : [];
+    if (!labels.length || options.length !== labels.length)
+        return { phase: "failed", reason: "unsupported_prompt" };
+    let selected = -1;
+    for (let i = 0; i < labels.length; i++) {
+        const row = options[i].trimStart();
+        const marked = /^[❯›>]\s/.test(row);
+        const text = row.replace(/^[❯›>]\s*/, "").replace(/^\d+\.\s*/, "");
+        if (text !== labels[i] || (marked && selected !== -1))
+            return { phase: "failed", reason: "unsupported_prompt" };
+        if (marked)
+            selected = i;
+    }
+    if (selected < 0)
+        return { phase: "failed", reason: "unsupported_prompt" };
+    return { phase: "method", selected, choices: backend === "kiro-cli"
+            ? ["builder_id", "google", "github", "organization"] : ["subscription", "console", "third_party"] };
+}
+/** Plain joined pane only, bounded; raw output never becomes a browser view or an error. */
+export function structuredSignInPrompt(backend, input) {
+    if (Buffer.byteLength(input, "utf8") > MAX_PANE || /\x1b|\x00/.test(input))
+        return { phase: "failed", reason: "unsupported_prompt" };
+    const pane = input.replace(/\r/g, "").trimEnd();
+    const flow = LOGIN_FLOWS[backend];
+    if (flow.failures?.some(failure => failure.pattern.test(pane))) {
+        return { phase: "failed", reason: /Already logged in, please logout/.test(pane) ? "relogin_required" : "provider_rejected" };
+    }
+    if (/Invalid code\b|expired (?:device )?code|authorization (?:denied|expired)/i.test(pane)) {
+        return { phase: "failed", reason: "provider_rejected" };
+    }
+    if (flow.successPattern.test(pane))
+        return { phase: "success" };
+    const selection = menu(pane, backend);
+    if (selection)
+        return selection;
+    if (backend === "kiro-cli") {
+        if (/(?:^|\n)\s*\??\s*Enter Start URL\s*[›>:]?\s*[^\n]*$/.test(pane))
+            return { phase: "start_url" };
+        if (/(?:^|\n)\s*\??\s*Enter Region\s*[›>:]?\s*[^\n]*$/.test(pane))
+            return { phase: "region" };
+    }
+    const hint = extractLoginHint(pane, flow);
+    const url = hint.url && linkableLoginUrl(backend, hint.url) && hint.url.length <= MAX_VALUE ? hint.url : null;
+    if (backend === "claude-code" && /(?:^|\n)\s*Paste code here if prompted >\s*$/.test(pane))
+        return { phase: "code", url };
+    if (url && (backend !== "codex" || hint.code))
+        return { phase: "authorization", url, code: hint.code };
+    // Unknown interactive screens are not answered. The session gives partial
+    // redraws a short grace, then offers the explicit console fallback.
+    return { phase: "waiting" };
+}
+export class StructuredSignIn {
+    backend;
+    owner;
+    deps;
+    id = randomBytes(16).toString("hex");
+    claim = null;
+    abort = new AbortController();
+    phase = "checking";
+    reason;
+    prompt = { phase: "waiting" };
+    revision = 0;
+    closed = false;
+    begun = false;
+    startInFlight = null;
+    transportTouched = false;
+    finishing = null;
+    queue = Promise.resolve();
+    pollTimer = null;
+    deadline = null;
+    unknownAt = null;
+    answered = new Set();
+    get promptUsed() { return this.answered.has(this.prompt.phase); }
+    expiresAt = Infinity;
+    pendingActions = 0;
+    constructor(backend, owner, deps) {
+        this.backend = backend;
+        this.owner = owner;
+        this.deps = deps;
+        if (!structuredSignInSupported(backend))
+            throw new Error("structured_signin_unsupported");
+    }
+    /** A reused valid login changes no credentials and needs no running-agent restart. */
+    get launched() { return this.transportTouched; }
+    now() { return (this.deps.now ?? (() => performance.now()))(); }
+    authorized() { try {
+        return this.now() < this.expiresAt && this.deps.current();
+    }
+    catch {
+        return false;
+    } }
+    lostReason() { return this.now() >= this.expiresAt ? "expired" : "revoked"; }
+    current() { return !this.closed && this.authorized() && this.deps.lock.isCurrent(this.claim); }
+    emit() {
+        try {
+            this.deps.changed?.({ backend: this.backend, phase: this.phase, ...(this.reason ? { reason: this.reason } : {}) });
+        }
+        catch { /* observer is not authority */ }
+    }
+    setPhase(phase, reason) {
+        if (this.phase === phase && this.reason === reason)
+            return;
+        this.phase = phase;
+        this.reason = reason;
+        this.revision++;
+        this.emit();
+    }
+    /** Duplicate begin/refresh joins this attempt; it never starts another child. */
+    async start(confirmedRelogin = false) {
+        if (this.begun || this.closed)
+            return;
+        this.begun = true;
+        this.claim = this.deps.lock.tryClaim("web", this.backend);
+        if (!this.claim) {
+            await this.finish("busy");
+            return;
+        }
+        this.expiresAt = this.now() + TTL_MS;
+        this.deadline = setTimeout(() => { void this.finish("expired"); }, TTL_MS);
+        this.deadline.unref?.();
+        try {
+            if (!this.current()) {
+                await this.finish(this.lostReason());
+                return;
+            }
+            const auth = await this.deps.checkAuth();
+            if (!this.current()) {
+                await this.finish(this.lostReason());
+                return;
+            }
+            if (auth === "valid" && !confirmedRelogin) {
+                await this.finish();
+                return;
+            }
+            this.setPhase("starting");
+            if (!this.current()) {
+                await this.finish(this.lostReason());
+                return;
+            }
+            this.transportTouched = true;
+            this.startInFlight = this.deps.transport.start({ argv: [...ARGV[this.backend]],
+                ...(confirmedRelogin && this.backend === "kiro-cli" ? { logoutArgv: ["kiro-cli", "logout"] } : {}) }, this.abort.signal);
+            await this.startInFlight;
+            if (!this.current()) {
+                await this.finish(this.lostReason());
+                return;
+            }
+            await this.poll();
+        }
+        catch {
+            await this.finish("transport_failed");
+        }
+    }
+    view(who) {
+        const mine = who === this.owner && this.authorized();
+        const basic = { id: this.id, backend: this.backend, phase: this.phase, mine, revision: this.revision,
+            ...(this.reason ? { reason: this.reason } : {}) };
+        if (!mine || this.closed)
+            return basic;
+        basic.canAct = !this.promptUsed && ["method", "code", "start_url", "region"].includes(this.prompt.phase);
+        if (this.prompt.phase === "method")
+            basic.choices = this.prompt.choices.filter(choice => choice !== "third_party");
+        if (this.prompt.phase === "authorization") {
+            basic.url = this.prompt.url;
+            basic.code = this.prompt.code;
+        }
+        if (this.prompt.phase === "code")
+            basic.url = this.prompt.url;
+        return basic;
+    }
+    serial(work) {
+        const run = this.queue.then(work);
+        this.queue = run.catch(() => { });
+        return run;
+    }
+    observe(pane) {
+        const next = structuredSignInPrompt(this.backend, pane);
+        if (JSON.stringify(next) !== JSON.stringify(this.prompt)) {
+            this.prompt = next;
+            this.revision++;
+        }
+        this.setPhase(next.phase === "success" ? "checking" : next.phase);
+        return next;
+    }
+    schedule() {
+        if (this.closed)
+            return;
+        this.pollTimer = setTimeout(() => { void this.poll(); }, 500);
+        this.pollTimer.unref?.();
+    }
+    /** Also used by inert harnesses; overlapping captures/actions share one FIFO. */
+    poll() {
+        return this.serial(async () => {
+            if (this.closed)
+                return;
+            if (this.pollTimer) {
+                clearTimeout(this.pollTimer);
+                this.pollTimer = null;
+            }
+            if (!this.current()) {
+                await this.finish(this.lostReason());
+                return;
+            }
+            try {
+                const pane = await this.deps.transport.capture();
+                if (!this.current()) {
+                    await this.finish(this.lostReason());
+                    return;
+                }
+                const prompt = this.observe(pane);
+                if (prompt.phase === "failed") {
+                    await this.finish(prompt.reason);
+                    return;
+                }
+                const status = await this.deps.transport.status();
+                if (!this.current()) {
+                    await this.finish(this.lostReason());
+                    return;
+                }
+                if (prompt.phase === "success" || !status.alive) {
+                    const auth = await this.deps.checkAuth();
+                    if (!this.current()) {
+                        await this.finish(this.lostReason());
+                        return;
+                    }
+                    await this.finish(auth === "valid" ? undefined : "auth_unconfirmed");
+                    return;
+                }
+                if (prompt.phase === "waiting" && pane.trim()) {
+                    this.unknownAt ??= this.now();
+                    if (this.now() - this.unknownAt >= UNKNOWN_GRACE_MS) {
+                        await this.finish("unsupported_prompt");
+                        return;
+                    }
+                }
+                else
+                    this.unknownAt = null;
+                this.schedule();
+            }
+            catch {
+                await this.finish("transport_failed");
+            }
+        });
+    }
+    action(who, id, revision, action) {
+        if (this.pendingActions >= 8)
+            return Promise.resolve("busy");
+        this.pendingActions++;
+        return this.serial(async () => {
+            if (this.closed)
+                return "ended";
+            if (who !== this.owner || id !== this.id || !this.current())
+                return "stale";
+            if (revision !== this.revision || this.promptUsed)
+                return "stale";
+            if (!action || typeof action !== "object"
+                || (action.kind === "method" ? typeof action.choice !== "string"
+                    : !["code", "start_url", "region"].includes(action.kind) || typeof action.value !== "string"))
+                return "invalid";
+            try {
+                // Re-observe immediately before input: an old browser page cannot
+                // answer a later prompt just because its cached revision still matches.
+                const pane = await this.deps.transport.capture();
+                if (!this.current()) {
+                    await this.finish(this.lostReason());
+                    return "stale";
+                }
+                this.observe(pane);
+                if (revision !== this.revision || this.promptUsed)
+                    return "stale";
+                const prompt = this.prompt;
+                let text = null;
+                if (action.kind === "method" && prompt.phase === "method") {
+                    const target = prompt.choices.indexOf(action.choice);
+                    if (target < 0 || action.choice === "third_party")
+                        return "invalid";
+                    const delta = target - prompt.selected;
+                    text = (delta > 0 ? "\x1b[B" : "\x1b[A").repeat(Math.abs(delta)) + "\r";
+                }
+                else if ((action.kind === "code" && prompt.phase === "code")
+                    || (action.kind === "start_url" && prompt.phase === "start_url") || (action.kind === "region" && prompt.phase === "region")) {
+                    const value = action.value.trim();
+                    if (!value || value.length > MAX_VALUE || /[^\x21-\x7e]/.test(value))
+                        return "invalid";
+                    if (action.kind === "start_url" && !validStartUrl(value))
+                        return "invalid";
+                    if (action.kind === "region" && !/^[a-z]{2}(?:-[a-z]+){1,3}-\d$/.test(value))
+                        return "invalid";
+                    if (action.kind === "code" && !/^[A-Za-z0-9._~+/#=-]+$/.test(value))
+                        return "invalid";
+                    text = "\x15" + value + "\r"; // replace a prefilled prompt; literal bytes only
+                }
+                if (text === null)
+                    return "invalid";
+                this.answered.add(prompt.phase); // before the async write; redraws never re-arm an answered phase
+                this.revision++;
+                await this.deps.transport.write(text, this.abort.signal);
+                if (!this.current()) {
+                    await this.finish(this.lostReason());
+                    return "ended";
+                }
+                return "accepted";
+            }
+            catch {
+                await this.finish("transport_failed");
+                return "ended";
+            }
+        }).finally(() => { this.pendingActions--; });
+    }
+    cancel() { return this.finish("cancelled"); }
+    finish(reason) {
+        if (this.finishing)
+            return this.finishing;
+        this.closed = true;
+        this.abort.abort();
+        if (this.deadline)
+            clearTimeout(this.deadline);
+        if (this.pollTimer)
+            clearTimeout(this.pollTimer);
+        this.finishing = Promise.resolve().then(async () => {
+            if (this.startInFlight)
+                await this.startInFlight.catch(() => { });
+            let cleanupFailed = false;
+            try {
+                if (this.transportTouched)
+                    await this.deps.transport.close();
+            }
+            catch {
+                cleanupFailed = true;
+            }
+            // A possibly live credential writer keeps the shared slot reserved.
+            if (!cleanupFailed)
+                this.deps.lock.release(this.claim);
+            this.prompt = { phase: "waiting" };
+            this.setPhase(cleanupFailed || reason ? "failed" : "done", cleanupFailed ? "cleanup_failed" : reason);
+        });
+        return this.finishing;
+    }
+}
+function validStartUrl(value) {
+    try {
+        const url = new URL(value);
+        return url.protocol === "https:" && !url.username && !url.password && !url.search && !url.hash && !url.port
+            && (url.hostname === "awsapps.com" || url.hostname.endsWith(".awsapps.com")) && /^\/start\/?$/.test(url.pathname);
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=structured-signin.js.map

package/dist/structured-signin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"structured-signin.js","sourceRoot":"","sources":["../src/structured-signin.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAwB,MAAM,kBAAkB,CAAC;AAEvF,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElD,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,UAAU,EAAE,aAAa,EAAE,OAAO,CAAU,CAAC;AAExF,MAAM,UAAU,yBAAyB,CAAC,OAAe;IACvD,OAAQ,0BAAgD,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,IAAI,GAAiD;IACzD,UAAU,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;IACjC,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC;IAC1C,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,eAAe,CAAC;CAC7C,CAAC;AACF,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,CAAC;AAC3B,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAC/B,MAAM,QAAQ,GAAG,EAAE,GAAG,IAAI,CAAC;AAC3B,MAAM,SAAS,GAAG,KAAK,CAAC;AAiBxB,iFAAiF;AACjF,SAAS,IAAI,CAAC,IAAY,EAAE,OAA0B;IACpD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAClF,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;IACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,2CAA2C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC;YAAE,KAAK,GAAG,CAAC,CAAC;IAChH,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,OAAO,KAAK,UAAU;QACnC,CAAC,CAAC,CAAC,qBAAqB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,4BAA4B,CAAC;QAC7F,CAAC,CAAC,OAAO,KAAK,aAAa,CAAC,CAAC,CAAC;YAC5B,kEAAkE;YAClE,+CAA+C;YAC/C,0EAA0E;SAC3E,CAAC,CAAC,CAAC,EAAE,CAAC;IACT,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IACjH,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC;IAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC,SAAS,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACnE,IAAI,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,QAAQ,KAAK,CAAC,CAAC,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;QAChH,IAAI,MAAM;YAAE,QAAQ,GAAG,CAAC,CAAC;IAC3B,CAAC;IACD,IAAI,QAAQ,GAAG,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAC3E,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,KAAK,UAAU;YACjE,CAAC,CAAC,CAAC,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,SAAS,EAAE,aAAa,CAAC,EAAE,CAAC;AACxG,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,sBAAsB,CAAC,OAA0B,EAAE,KAAa;IAC9E,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,QAAQ,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IACrI,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAChD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAE,CAAC;IACnC,IAAI,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC/D,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,mBAAmB,EAAE,CAAC;IAC/H,CAAC;IACD,IAAI,2EAA2E,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3F,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC1D,CAAC;IACD,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAChE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACtC,IAAI,SAAS;QAAE,OAAO,SAAS,CAAC;IAChC,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;QAC3B,IAAI,qDAAqD,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QACpG,IAAI,kDAAkD,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAChG,CAAC;IACD,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9G,IAAI,OAAO,KAAK,aAAa,IAAI,8CAA8C,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAC1H,IAAI,GAAG,IAAI,CAAC,OAAO,KAAK,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;IACvG,0EAA0E;IAC1E,oEAAoE;IACpE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAC9B,CAAC;AA4CD,MAAM,OAAO,gBAAgB;IAsBN,OAAO;IAAsC,KAAK;IAA2B,IAAI;IArB7F,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtC,KAAK,GAA4B,IAAI,CAAC;IAC7B,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IACvC,KAAK,GAAkC,UAAU,CAAC;IAClD,MAAM,CAA4B;IAClC,MAAM,GAAiB,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC5C,QAAQ,GAAG,CAAC,CAAC;IACb,MAAM,GAAG,KAAK,CAAC;IACf,KAAK,GAAG,KAAK,CAAC;IACd,aAAa,GAAyB,IAAI,CAAC;IAC3C,gBAAgB,GAAG,KAAK,CAAC;IACzB,SAAS,GAAyB,IAAI,CAAC;IACvC,KAAK,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;IAC5C,SAAS,GAAyC,IAAI,CAAC;IACvD,QAAQ,GAAyC,IAAI,CAAC;IACtD,SAAS,GAAkB,IAAI,CAAC;IACvB,QAAQ,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC7D,IAAY,UAAU,KAAc,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1E,SAAS,GAAG,QAAQ,CAAC;IACrB,cAAc,GAAG,CAAC,CAAC;IAE3B,YAAqB,OAA0B,EAAmB,KAAa,EAAmB,IAA0B;uBAAvG,OAAO;qBAAsC,KAAK;oBAA2B,IAAI;QACpG,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC5F,CAAC;IACD,sFAAsF;IACtF,IAAI,QAAQ,KAAc,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACjD,GAAG,KAAa,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACxE,UAAU,KAAc,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC,CAAC,CAAC;IACpH,UAAU,KAAoB,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5F,OAAO,KAAc,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxG,IAAI;QACV,IAAI,CAAC;YAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,+BAA+B,CAAC,CAAC;IACvK,CAAC;IACO,QAAQ,CAAC,KAAoC,EAAE,MAAsB;QAC3E,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO;QAC3D,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACzE,CAAC;IAED,iFAAiF;IACjF,KAAK,CAAC,KAAK,CAAC,gBAAgB,GAAG,KAAK;QAClC,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACtC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACvD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;QACrC,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC3E,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;gBAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACtE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACzC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;gBAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACtE,IAAI,IAAI,KAAK,OAAO,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YAC3E,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YAC1B,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;gBAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACtE,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;YAC7B,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC5E,GAAG,CAAC,gBAAgB,IAAI,IAAI,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC3H,MAAM,IAAI,CAAC,aAAa,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;gBAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACtE,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAAC,CAAC;IACpD,CAAC;IAED,IAAI,CAAC,GAAW;QACd,MAAM,IAAI,GAAG,GAAG,KAAK,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACrD,MAAM,KAAK,GAAyB,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACxH,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QACvC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzG,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,QAAQ;YAAE,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC;QACnH,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,eAAe,EAAE,CAAC;YAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;YAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;QAAC,CAAC;QAC1G,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,MAAM;YAAE,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;QAC9D,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,MAAM,CAAI,IAAsB;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACjC,OAAO,GAAG,CAAC;IACb,CAAC;IACO,OAAO,CAAC,IAAY;QAC1B,MAAM,IAAI,GAAG,sBAAsB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACxD,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACzD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtC,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,QAAQ;QACd,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC9D,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;IAC3B,CAAC;IACD,iFAAiF;IACjF,IAAI;QACF,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;YAC5B,IAAI,IAAI,CAAC,MAAM;gBAAE,OAAO;YACxB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAAC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YAAC,CAAC;YAC5E,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;gBAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACtE,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;gBACjD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;oBAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;oBAAC,OAAO;gBAAC,CAAC;gBACtE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAClC,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;oBAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;oBAAC,OAAO;gBAAC,CAAC;gBAC5E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;gBAClD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;oBAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;oBAAC,OAAO;gBAAC,CAAC;gBACtE,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;oBAChD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;oBACzC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;wBAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;wBAAC,OAAO;oBAAC,CAAC;oBACtE,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;oBACrE,OAAO;gBACT,CAAC;gBACD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;oBAC9C,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;oBAC9B,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,gBAAgB,EAAE,CAAC;wBAAC,MAAM,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;wBAAC,OAAO;oBAAC,CAAC;gBAC3G,CAAC;;oBAAM,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;gBAC7B,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,CAAC;YAAC,MAAM,CAAC;gBAAC,MAAM,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAAC,CAAC;QACpD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,GAAW,EAAE,EAAU,EAAE,QAAgB,EAAE,MAAoB;QACpE,IAAI,IAAI,CAAC,cAAc,IAAI,CAAC;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7D,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC,MAAM,CAAqB,KAAK,IAAI,EAAE;YAChD,IAAI,IAAI,CAAC,MAAM;gBAAE,OAAO,OAAO,CAAC;YAChC,IAAI,GAAG,KAAK,IAAI,CAAC,KAAK,IAAI,EAAE,KAAK,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;gBAAE,OAAO,OAAO,CAAC;YAC5E,IAAI,QAAQ,KAAK,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,UAAU;gBAAE,OAAO,OAAO,CAAC;YAClE,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;mBACpC,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;oBAC9D,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC;gBAAE,OAAO,SAAS,CAAC;YACpH,IAAI,CAAC;gBACH,kEAAkE;gBAClE,wEAAwE;gBACxE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;gBACjD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;oBAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;oBAAC,OAAO,OAAO,CAAC;gBAAC,CAAC;gBAC9E,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACnB,IAAI,QAAQ,KAAK,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,UAAU;oBAAE,OAAO,OAAO,CAAC;gBAClE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;gBAC3B,IAAI,IAAI,GAAkB,IAAI,CAAC;gBAC/B,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;oBAC1D,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;oBACrD,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,aAAa;wBAAE,OAAO,SAAS,CAAC;oBACpE,MAAM,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC;oBACvC,IAAI,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC;gBAC1E,CAAC;qBAAM,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC;uBACzD,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,EAAE,CAAC;oBAC9H,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;oBAClC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;wBAAE,OAAO,SAAS,CAAC;oBACvF,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;wBAAE,OAAO,SAAS,CAAC;oBAC3E,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC;wBAAE,OAAO,SAAS,CAAC;oBAC/F,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC;wBAAE,OAAO,SAAS,CAAC;oBACtF,IAAI,GAAG,MAAM,GAAG,KAAK,GAAG,IAAI,CAAC,CAAC,iDAAiD;gBACjF,CAAC;gBACD,IAAI,IAAI,KAAK,IAAI;oBAAE,OAAO,SAAS,CAAC;gBACpC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,iEAAiE;gBAClG,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAChB,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACzD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;oBAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;oBAAC,OAAO,OAAO,CAAC;gBAAC,CAAC;gBAC9E,OAAO,UAAU,CAAC;YACpB,CAAC;YAAC,MAAM,CAAC;gBAAC,MAAM,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;gBAAC,OAAO,OAAO,CAAC;YAAC,CAAC;QACpE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,KAAoB,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IACpD,MAAM,CAAC,MAAsB;QACnC,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC;QAC1C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,IAAI,CAAC,QAAQ;YAAE,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAI,IAAI,CAAC,SAAS;YAAE,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YACjD,IAAI,IAAI,CAAC,aAAa;gBAAE,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACjE,IAAI,aAAa,GAAG,KAAK,CAAC;YAC1B,IAAI,CAAC;gBAAC,IAAI,IAAI,CAAC,gBAAgB;oBAAE,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,aAAa,GAAG,IAAI,CAAC;YAAC,CAAC;YACrG,oEAAoE;YACpE,IAAI,CAAC,aAAa;gBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACvD,IAAI,CAAC,MAAM,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;YACnC,IAAI,CAAC,QAAQ,CAAC,aAAa,IAAI,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACxG,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;CACF;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI;eACtG,CAAC,GAAG,CAAC,QAAQ,KAAK,aAAa,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtH,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AAC3B,CAAC"}

package/dist/tool-permissions.js

@@ -58,6 +58,10 @@ const WORKER = [
     "set_web_ambient", "clear_web_ambient",
     // Mods (#1629 r4-5b): its own look as a file, and proposing one for a person — never importing.
     "export_web_mod", "propose_web_mod",
+    // Its own character in the Office view (#2578): no target; off until a person switches office_access on.
+    "office_view", "office_set",
+    // The Office view's skin packs (#2692): everyone's, so off until a person switches office_pack_access on for it.
+    "office_pack_check", "office_pack_upload", "office_pack_delete", "office_pack_restore", "office_pack_list", "office_set_style",
     "upload_web_effect", "list_web_effects", "preview_web_effect", "profile_web_effect", "apply_web_effect", "remove_web_effect", "delete_web_effect",
     // Its own schedules. Present here, but not a free hand: scheduleOpRefusal
     // limits a non-coordinator to schedules that target itself and that it
@@ -78,6 +82,8 @@ const ORCHESTRATION = [
     "deploy_template", "teardown_deployment",
     "create_team", "delete_team", "update_team",
     "update_fleet_defaults", "update_instance_config",
+    // #2598 B2: asks only; a fleet admin's Confirm in General makes the move.
+    "migrate_kiro_instance",
     // Changing a decision somebody else recorded; `post_decision` adds, and stays.
     "update_decision",
     // #2056: Settings → Web appearance for the user (General has these too; a worker changes only its own theme).
@@ -119,6 +125,10 @@ export const TOOL_PROFILES = {
         "set_web_ambient", "clear_web_ambient",
         "export_web_mod", "propose_web_mod",
         "upload_web_effect", "list_web_effects", "preview_web_effect", "profile_web_effect", "apply_web_effect", "remove_web_effect", "delete_web_effect",
+        // Its own character in the Office view (#2578), as a worker's.
+        "office_view", "office_set",
+        // The Office view's skin packs (#2692), as a worker's: off until a person switches office_pack_access on.
+        "office_pack_check", "office_pack_upload", "office_pack_delete", "office_pack_restore", "office_pack_list", "office_set_style",
         // #2056: Settings → Web appearance for the user (the page's own checks; a worker's are its own theme only).
         "get_web_settings", "set_web_settings",
     ],
@@ -130,6 +140,8 @@ export const TOOL_PROFILES = {
         "get_web_theme", "set_web_theme", "set_web_theme_asset", "reset_web_theme",
         "get_web_appearance", "preview_web_appearance", "set_web_widget", "remove_web_widget", "set_web_ambient", "clear_web_ambient", "export_web_mod", "propose_web_mod",
         "upload_web_effect", "list_web_effects", "preview_web_effect", "profile_web_effect", "apply_web_effect", "remove_web_effect", "delete_web_effect",
+        "office_view", "office_set",
+        "office_pack_check", "office_pack_upload", "office_pack_delete", "office_pack_restore", "office_pack_list", "office_set_style",
         "validate_config", "get_fleet_status", "get_usage", "get_effort", "get_instance_logs", "get_fleet_config", "kiro_engine_status", "get_cache_report", "get_usage_report",
         // Self-scheduling, same scope as worker (#895).
         "create_schedule", "list_schedules", "update_schedule", "delete_schedule",
@@ -254,6 +266,14 @@ export const IPC_TYPE_TOOLS = {
     fleet_apply_web_effect: "apply_web_effect",
     fleet_remove_web_effect: "remove_web_effect",
     fleet_delete_web_effect: "delete_web_effect",
+    fleet_office_view: "office_view",
+    fleet_office_set: "office_set",
+    fleet_office_pack_check: "office_pack_check",
+    fleet_office_pack_upload: "office_pack_upload",
+    fleet_office_pack_delete: "office_pack_delete",
+    fleet_office_pack_restore: "office_pack_restore",
+    fleet_office_pack_list: "office_pack_list",
+    fleet_office_set_style: "office_set_style",
 };
 /**
  * Agent-endpoint ops that never reach its `OP_MAP`.
@@ -302,6 +322,14 @@ export const EARLY_AGENT_OP_TOOLS = {
     "effect-apply": "apply_web_effect",
     "effect-remove": "remove_web_effect",
     "effect-delete": "delete_web_effect",
+    "office-view": "office_view",
+    "office-set": "office_set",
+    "office-pack-check": "office_pack_check",
+    "office-pack-upload": "office_pack_upload",
+    "office-pack-delete": "office_pack_delete",
+    "office-pack-restore": "office_pack_restore",
+    "office-packs": "office_pack_list",
+    "office-style": "office_set_style",
 };
 /**
  * What to say to an agent that was refused.
@@ -322,6 +350,7 @@ const OWN_APPEARANCE_TOOLS = new Set([
     "export_web_mod", "propose_web_mod",
     "upload_web_effect", "list_web_effects", "preview_web_effect", "profile_web_effect",
     "apply_web_effect", "remove_web_effect", "delete_web_effect",
+    "office_view", "office_set",
 ]);
 export function toolRefusedMessage(profile, tool) {
     if (OWN_APPEARANCE_TOOLS.has(tool)) {