@songsid/agend 2.3.5-alpha.5 → 2.3.5-beta.1

package/dist/web-remote-access.js

@@ -1,368 +0,0 @@
-/**
- * #3008 (alpha.3; decision 28c2d3a3 rule 3, the user's simplified form hmsg-33c3d609): connections from outside for a
- * web-only fleet. Its one person — this computer's admin, the host operator (`agend web --code` on this computer) — sets
- * up an authenticator app (TOTP, RFC 6238) here, then turns on "Allow connections from outside": the public link opens,
- * owned by this computer's admin, and signing in through it asks for the app's code. Turning it off closes the link.
- *
- * What this file holds, in `web-remote-access.json` beside the fleet (0600, written atomically — never fleet.yaml, so
- * neither an agent nor a hand edit of the config turns it on):
- * - the authenticator secret (160 bits, base32), when it was set up, and the last time step a code was accepted for
- *   (each step once: a code that was seen cannot be used again);
- * - the outside switch;
- * - the wrong-code limiter: 5 wrong codes → a wait (15 minutes, doubling after each further 5 up to a day; a correct
- *   code resets it — #3008 C(b), confirmed by the user, decision 0471da59). Never a permanent
- *   lock (the user's decision 4). It is fleet-wide: one guesser from many addresses is one guesser.
- *
- * The secret never leaves this module except once, to the host operator who is setting it up (beginEnrollment). It is
- * never logged, never in a status, a Notice or an error.
- */
-import { createHmac, randomBytes, timingSafeEqual } from "node:crypto";
-import { readFileSync } from "node:fs";
-import { atomicWriteFileSync } from "./atomic-write.js";
-import { t } from "./locale.js";
-export const WEB_REMOTE_ACCESS_FILE = "web-remote-access.json";
-/** RFC 6238 as every common authenticator app shows it: SHA-1, 6 digits, 30-second steps. */
-export const TOTP_STEP_SECONDS = 30;
-export const TOTP_DIGITS = 6;
-/**
- * Steps accepted around now: one either side (#3008 C, the leader: this host is WSL2, whose clock drifts behind after
- * Windows sleeps — accepting only the current and previous code would refuse the phone's newest one).
- */
-export const TOTP_PAST_STEPS = 1;
-export const TOTP_FUTURE_STEPS = 1;
-/** Diagnosis only (#3008 C): a wrong code is also compared this many steps out, to log how far this clock is off. */
-export const TOTP_SKEW_PROBE_STEPS = 2;
-/** 5 wrong codes → a wait. */
-export const TOTP_WRONG_LIMIT = 5;
-/** The first wait; #3008 C(b): each further one doubles, up to TOTP_PAUSE_MAX_MS. A correct code resets it. */
-export const TOTP_PAUSE_MS = 15 * 60_000;
-export const TOTP_PAUSE_MAX_MS = 24 * 60 * 60_000;
-/** #3008 review (Prism P2 1): a state that could not be saved is written again this often until it is. */
-export const OUTSIDE_SAVE_RETRY_MS = 30_000;
-/** How long a secret being set up waits for its first code. */
-export const TOTP_ENROLL_TTL_MS = 10 * 60_000;
-const SECRET_BYTES = 20;
-const BASE32 = "ABCDEFGHIJKLMNOPQRSTUVWXYZ234567";
-export function base32Encode(bytes) {
-    let out = "", bits = 0, value = 0;
-    for (const b of bytes) {
-        value = (value << 8) | b;
-        bits += 8;
-        while (bits >= 5) {
-            out += BASE32[(value >>> (bits - 5)) & 31];
-            bits -= 5;
-        }
-    }
-    if (bits > 0)
-        out += BASE32[(value << (5 - bits)) & 31];
-    return out;
-}
-export function base32Decode(text) {
-    const clean = text.replace(/[\s=]/g, "").toUpperCase();
-    if (!clean || /[^A-Z2-7]/.test(clean))
-        return null;
-    const out = [];
-    let bits = 0, value = 0;
-    for (const ch of clean) {
-        value = (value << 5) | BASE32.indexOf(ch);
-        bits += 5;
-        if (bits >= 8) {
-            out.push((value >>> (bits - 8)) & 255);
-            bits -= 8;
-        }
-    }
-    return Buffer.from(out);
-}
-/** RFC 4226 HOTP: the code for one counter, as `digits` decimal digits (left-padded). */
-export function hotp(secret, counter, digits = TOTP_DIGITS) {
-    const msg = Buffer.alloc(8);
-    msg.writeUInt32BE(Math.floor(counter / 2 ** 32), 0);
-    msg.writeUInt32BE(counter >>> 0, 4);
-    const mac = createHmac("sha1", secret).update(msg).digest();
-    const off = mac[mac.length - 1] & 15;
-    const bin = ((mac[off] & 0x7f) << 24) | (mac[off + 1] << 16) | (mac[off + 2] << 8) | mac[off + 3];
-    return String(bin % 10 ** digits).padStart(digits, "0");
-}
-/** The RFC 6238 time step a wall-clock moment falls in. */
-export function totpStep(nowMs) {
-    return Math.floor(nowMs / 1000 / TOTP_STEP_SECONDS);
-}
-/**
- * The step `code` is valid for — the current one or one within the accepted window, newer than `after` — or null. Six
- * digits only (spaces ignored); compared in constant time.
- */
-export function matchTotp(secret, code, nowMs, after) {
-    const typed = code.replace(/\s/g, "");
-    if (!/^\d{6}$/.test(typed))
-        return null;
-    const now = totpStep(nowMs);
-    let found = null;
-    for (let step = now - TOTP_PAST_STEPS; step <= now + TOTP_FUTURE_STEPS; step++) {
-        if (step <= after)
-            continue;
-        if (timingSafeEqual(Buffer.from(hotp(secret, step)), Buffer.from(typed)) && found === null)
-            found = step;
-    }
-    return found;
-}
-/**
- * Diagnosis only, never acceptance: for a code that did not match, the step offset (beyond the accepted window, at most
- * TOTP_SKEW_PROBE_STEPS out) it would have matched — positive: the phone is ahead of this computer's clock. Else null.
- */
-export function totpSkew(secret, code, nowMs) {
-    const typed = code.replace(/\s/g, "");
-    if (!/^\d{6}$/.test(typed))
-        return null;
-    const now = totpStep(nowMs);
-    for (let d = 1; d <= TOTP_SKEW_PROBE_STEPS; d++) {
-        for (const offset of [d, -d]) {
-            if (offset >= -TOTP_PAST_STEPS && offset <= TOTP_FUTURE_STEPS)
-                continue;
-            if (timingSafeEqual(Buffer.from(hotp(secret, now + offset)), Buffer.from(typed)))
-                return offset;
-        }
-    }
-    return null;
-}
-/** The `otpauth://` URI an authenticator app reads from the QR code (or the key typed in by hand). */
-export function otpauthUri(secretBase32, account) {
-    const label = encodeURIComponent(`AgEnD:${account}`);
-    return `otpauth://totp/${label}?secret=${secretBase32}&issuer=AgEnD&algorithm=SHA1&digits=${TOTP_DIGITS}&period=${TOTP_STEP_SECONDS}`;
-}
-/** How many sessions from outside one generation remembers (each is a sign-in with a code; older ones read as revoked). */
-export const OUTSIDE_HANDLES_MAX = 64;
-const blank = () => ({ v: 1, outside: false, wrong: 0, level: 0, pausedUntil: 0, handles: [] });
-export class WebRemoteAccess {
-    path;
-    log;
-    now;
-    monotonic;
-    state = blank();
-    pending = null;
-    warned = false;
-    /** The state in memory is not on disk yet (a write failed): written again, by the next change or the retry timer. */
-    dirty = false;
-    retry = null;
-    constructor(path, log, now = Date.now, monotonic = () => performance.now()) {
-        this.path = path;
-        this.log = log;
-        this.now = now;
-        this.monotonic = monotonic;
-        let raw;
-        try {
-            raw = readFileSync(path, "utf8");
-        }
-        catch (err) {
-            if (err.code !== "ENOENT")
-                log.warn({ path }, "Outside connections state unreadable — off, nothing set up");
-            return;
-        }
-        try {
-            const v = JSON.parse(raw);
-            if (v.v !== 1)
-                throw new Error("shape");
-            const t = v.totp;
-            const totp = t && typeof t.secret === "string" && (base32Decode(t.secret)?.length ?? 0) >= 16 && Number.isSafeInteger(t.enrolledAt)
-                && Number.isSafeInteger(t.lastStep) ? { secret: t.secret, enrolledAt: t.enrolledAt, lastStep: t.lastStep } : undefined;
-            const count = (n) => (Number.isSafeInteger(n) && n >= 0 ? n : 0);
-            this.state = { v: 1, ...(totp ? { totp } : {}),
-                // Never on without an app set up: a file that says otherwise is read as off.
-                outside: v.outside === true && !!totp,
-                wrong: Math.min(count(v.wrong), TOTP_WRONG_LIMIT - 1), level: Math.min(count(v.level), 32),
-                // A wait never longer than the longest there is (a clock set back, or a hand edit).
-                pausedUntil: Math.min(count(v.pausedUntil), this.now() + TOTP_PAUSE_MAX_MS),
-                // A file without the list (or a garbled one) admits nobody: every older receipt from outside reads as none.
-                handles: Array.isArray(v.handles) ? v.handles.filter((h) => typeof h === "string" && /^[0-9a-f]{16}$/.test(h)).slice(-OUTSIDE_HANDLES_MAX) : [] };
-        }
-        catch {
-            log.warn({ path }, "Outside connections state unreadable — off, nothing set up");
-            this.state = blank();
-        }
-    }
-    status() {
-        return { enrolled: !!this.state.totp, enrolledAt: this.state.totp?.enrolledAt ?? null, outside: this.state.outside,
-            pausedForMs: Math.max(0, this.state.pausedUntil - this.now()) };
-    }
-    get enrolled() { return !!this.state.totp; }
-    /** The sessions authorized from outside since the last revocation (their receipts hold). */
-    get admitted() { return new Set(this.state.handles); }
-    /**
-     * A session just signed in from outside: its handle is saved as admitted before it is authorized. False: not saved —
-     * the sign-in must not go on (a restart would not know it, and the next revocation could not be proven to end it).
-     */
-    admit(handle) {
-        if (!/^[0-9a-f]{16}$/.test(handle) || !this.state.totp || !this.state.outside)
-            return false;
-        const before = this.state, wasDirty = this.dirty;
-        this.state = { ...this.state, handles: [...this.state.handles.filter(h => h !== handle), handle].slice(-OUTSIDE_HANDLES_MAX) };
-        if (this.flush())
-            return true;
-        this.restore(before, wasDirty);
-        return false;
-    }
-    /** Undo a change whose write failed, keeping whatever was already owed to the disk before it (#3015 review r3, P2 1). */
-    restore(before, wasDirty) {
-        this.state = before;
-        this.dirty = wasDirty;
-        if (!wasDirty && this.retry) {
-            clearTimeout(this.retry);
-            this.retry = null;
-        }
-        if (wasDirty)
-            this.flush(); // still owed: keep trying (re-arms the timer)
-    }
-    get outside() { return this.state.outside && !!this.state.totp; }
-    /**
-     * A new secret for the session `handle` to set up (it replaces nothing until confirmEnrollment). Returned once: the
-     * caller shows it to that session and forgets it.
-     */
-    beginEnrollment(handle, account) {
-        const secret = base32Encode(randomBytes(SECRET_BYTES));
-        this.pending = { secret, handle, until: this.monotonic() + TOTP_ENROLL_TTL_MS };
-        return { secret, uri: otpauthUri(secret, account), expiresInMs: TOTP_ENROLL_TTL_MS };
-    }
-    /**
-     * The first code from the app being set up, by the session that began it. "ok": it is now the one (a previous one is
-     * replaced; the limiter starts afresh). The caller then ends the sessions signed in with the old one.
-     */
-    confirmEnrollment(handle, code) {
-        const p = this.pending;
-        if (!p || p.handle !== handle || this.monotonic() > p.until) {
-            if (p && this.monotonic() > p.until)
-                this.pending = null;
-            return "expired";
-        }
-        const step = matchTotp(base32Decode(p.secret), code, this.now(), -1);
-        if (step === null)
-            return "wrong";
-        const before = this.state, wasDirty = this.dirty;
-        // A new app replaces the old one: what was authorized under the old one ends (the admitted sessions are forgotten).
-        this.state = { ...this.state, totp: { secret: p.secret, enrolledAt: this.now(), lastStep: step }, wrong: 0, level: 0, pausedUntil: 0, handles: [] };
-        if (!this.flush()) {
-            // Not set up: the state before stands — and if it was itself still owed to the disk (an unsaved Off), it still is.
-            this.restore(before, wasDirty);
-            return "unsaved";
-        }
-        this.pending = null;
-        return "ok";
-    }
-    /**
-     * Forget the app; the outside switch goes off with it, and what was authorized from outside ends (handles). In force in
-     * memory at once; false: not saved yet (retried — a restart before that would read the old file).
-     */
-    remove() {
-        this.pending = null;
-        this.state = { ...blank() };
-        return this.flush();
-    }
-    /**
-     * The switch. On only with an app set up. Off ends what was authorized from outside (handles). "unsaved": in force in
-     * memory, not on disk yet (retried; asking again writes it again).
-     */
-    setOutside(on) {
-        if (on && !this.state.totp)
-            return "not_enrolled";
-        if (this.state.outside === on && !this.dirty)
-            return "ok";
-        if (this.state.outside !== on)
-            this.state = { ...this.state, outside: on, ...(on ? {} : { handles: [] }) };
-        return this.flush() ? "ok" : "unsaved";
-    }
-    /** A code typed at sign-in from outside. Each step is accepted once; wrong codes count toward a wait. */
-    verify(code) {
-        const t = this.state.totp;
-        if (!t)
-            return { kind: "not_enrolled" };
-        const now = this.now();
-        if (now < this.state.pausedUntil)
-            return { kind: "paused", retryAfterMs: this.state.pausedUntil - now };
-        const step = matchTotp(base32Decode(t.secret), code, now, t.lastStep);
-        if (step !== null) {
-            const before = this.state;
-            this.state = { ...this.state, totp: { ...t, lastStep: step }, wrong: 0, level: 0, pausedUntil: 0 };
-            if (!this.flush()) {
-                this.state = { ...before, totp: { ...t, lastStep: step } };
-                return { kind: "unavailable" };
-            }
-            return { kind: "ok" };
-        }
-        const skewSteps = totpSkew(base32Decode(t.secret), code, now);
-        const wrong = this.state.wrong + 1;
-        if (wrong < TOTP_WRONG_LIMIT) {
-            this.state = { ...this.state, wrong };
-            this.flush();
-            return { kind: "wrong", paused: false, skewSteps };
-        }
-        const wait = Math.min(TOTP_PAUSE_MS * 2 ** this.state.level, TOTP_PAUSE_MAX_MS);
-        this.state = { ...this.state, wrong: 0, level: this.state.level + 1, pausedUntil: now + wait };
-        this.flush();
-        return { kind: "wrong", paused: true, retryAfterMs: wait, wrong: TOTP_WRONG_LIMIT, skewSteps };
-    }
-    /**
-     * Saved: true. Not saved: false (warned once until it works again) — memory keeps the new state, and it is written
-     * again by the next change or every OUTSIDE_SAVE_RETRY_MS until it is (#3008 review, Prism P2 1).
-     */
-    flush() {
-        try {
-            atomicWriteFileSync(this.path, JSON.stringify(this.state) + "\n", { mode: 0o600 });
-            this.warned = false;
-            this.dirty = false;
-            if (this.retry) {
-                clearTimeout(this.retry);
-                this.retry = null;
-            }
-            return true;
-        }
-        catch (err) {
-            if (!this.warned)
-                this.log.warn({ err: err.message, path: this.path }, "Outside connections state could not be saved; retrying");
-            this.warned = true;
-            this.dirty = true;
-            if (!this.retry) {
-                this.retry = setTimeout(() => { this.retry = null; if (this.dirty)
-                    this.flush(); }, OUTSIDE_SAVE_RETRY_MS);
-                this.retry.unref?.();
-            }
-            return false;
-        }
-    }
-    /** Whether the state in memory is still waiting to be saved. */
-    get unsaved() { return this.dirty; }
-    /** Fleet stop: one last write of an unsaved state, then no timer left. */
-    close() {
-        if (this.dirty)
-            this.flush();
-        if (this.retry) {
-            clearTimeout(this.retry);
-            this.retry = null;
-        }
-    }
-}
-// ── The outside link (FleetManager): its owner, its retries, and the closes that are its own ──
-/**
- * #3008: whose the outside link is — this computer's admin, not a chat account. Never matches a chat owner (those carry
- * a live adapter binding); FleetManager.publicOwnerCurrent permits it only while the switch is on, on a web-only fleet.
- */
-export const OUTSIDE_LINK_OWNER = Object.freeze({ adapterId: "host", userId: "operator", chatId: "host" });
-export function isOutsideLinkOwner(owner) {
-    return owner.adapterId === OUTSIDE_LINK_OWNER.adapterId && owner.userId === OUTSIDE_LINK_OWNER.userId
-        && owner.chatId === OUTSIDE_LINK_OWNER.chatId && owner.binding === undefined && owner.threadId === undefined;
-}
-/** #3008 B: a dropped link is reopened twice at most — after 30 s, then 2 minutes. */
-export const OUTSIDE_LINK_RETRY_MS = [30_000, 120_000];
-/** Closes the switch itself made (or the fleet stopping, or its own failed start): nothing to reopen or announce. */
-export const OUTSIDE_OWN_CLOSES = new Set(["outside off", "outside removed", "fleet shutdown", "unattended start failed"]);
-export function outsideTimer(fn, ms) {
-    const timer = setTimeout(fn, ms);
-    timer.unref?.();
-    return { cancel: () => clearTimeout(timer) };
-}
-/** A wait as words: "15 minutes" / 「15 分鐘」, "2 hours" / 「2 小時」 (whole minutes under an hour, else whole hours, rounded up). */
-export function outsideDuration(ms) {
-    const minutes = Math.max(1, Math.ceil(ms / 60_000));
-    if (minutes < 60)
-        return minutes === 1 ? t("outside.duration_minute") : t("outside.duration_minutes", minutes);
-    const hours = Math.ceil(minutes / 60);
-    return hours === 1 ? t("outside.duration_hour") : t("outside.duration_hours", hours);
-}
-//# sourceMappingURL=web-remote-access.js.map

package/dist/web-remote-access.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"web-remote-access.js","sourceRoot":"","sources":["../src/web-remote-access.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,CAAC,EAAE,MAAM,aAAa,CAAC;AAGhC,MAAM,CAAC,MAAM,sBAAsB,GAAG,wBAAwB,CAAC;AAC/D,6FAA6F;AAC7F,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AACpC,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC;AAC7B;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC;AACjC,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AACnC,qHAAqH;AACrH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AACvC,8BAA8B;AAC9B,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAClC,+GAA+G;AAC/G,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,GAAG,MAAM,CAAC;AACzC,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;AAClD,0GAA0G;AAC1G,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAC5C,+DAA+D;AAC/D,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,GAAG,MAAM,CAAC;AAC9C,MAAM,YAAY,GAAG,EAAE,CAAC;AACxB,MAAM,MAAM,GAAG,kCAAkC,CAAC;AAElD,MAAM,UAAU,YAAY,CAAC,KAAiB;IAC5C,IAAI,GAAG,GAAG,EAAE,EAAE,IAAI,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAAC,IAAI,IAAI,CAAC,CAAC;QACpC,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC;YAAC,GAAG,IAAI,MAAM,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YAAC,IAAI,IAAI,CAAC,CAAC;QAAC,CAAC;IAC9E,CAAC;IACD,IAAI,IAAI,GAAG,CAAC;QAAE,GAAG,IAAI,MAAM,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACxD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACvD,IAAI,CAAC,KAAK,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,IAAI,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC;IACxB,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;QACvB,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAAC,IAAI,IAAI,CAAC,CAAC;QACrD,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;YAAC,IAAI,IAAI,CAAC,CAAC;QAAC,CAAC;IACvE,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,IAAI,CAAC,MAAkB,EAAE,OAAe,EAAE,MAAM,GAAG,WAAW;IAC5E,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5B,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACpD,GAAG,CAAC,aAAa,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;IAC5D,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAE,GAAG,EAAE,CAAC;IACtC,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,CAAE,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAE,CAAC;IACtG,OAAO,MAAM,CAAC,GAAG,GAAG,EAAE,IAAI,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,QAAQ,CAAC,KAAa;IACpC,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,GAAG,iBAAiB,CAAC,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,MAAkB,EAAE,IAAY,EAAE,KAAa,EAAE,KAAa;IACtF,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACtC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,KAAK,GAAkB,IAAI,CAAC;IAChC,KAAK,IAAI,IAAI,GAAG,GAAG,GAAG,eAAe,EAAE,IAAI,IAAI,GAAG,GAAG,iBAAiB,EAAE,IAAI,EAAE,EAAE,CAAC;QAC/E,IAAI,IAAI,IAAI,KAAK;YAAE,SAAS;QAC5B,IAAI,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI;YAAE,KAAK,GAAG,IAAI,CAAC;IAC3G,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,MAAkB,EAAE,IAAY,EAAE,KAAa;IACtE,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACtC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,qBAAqB,EAAE,CAAC,EAAE,EAAE,CAAC;QAChD,KAAK,MAAM,MAAM,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7B,IAAI,MAAM,IAAI,CAAC,eAAe,IAAI,MAAM,IAAI,iBAAiB;gBAAE,SAAS;YACxE,IAAI,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAAE,OAAO,MAAM,CAAC;QAClG,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,UAAU,CAAC,YAAoB,EAAE,OAAe;IAC9D,MAAM,KAAK,GAAG,kBAAkB,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC;IACrD,OAAO,kBAAkB,KAAK,WAAW,YAAY,uCAAuC,WAAW,WAAW,iBAAiB,EAAE,CAAC;AACxI,CAAC;AAsBD,2HAA2H;AAC3H,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAqBtC,MAAM,KAAK,GAAG,GAAU,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;AAEvG,MAAM,OAAO,eAAe;IAQG,IAAI;IAA2B,GAAG;IAC5C,GAAG;IAA4C,SAAS;IARnE,KAAK,GAAU,KAAK,EAAE,CAAC;IACvB,OAAO,GAA6D,IAAI,CAAC;IACzE,MAAM,GAAG,KAAK,CAAC;IACvB,qHAAqH;IAC7G,KAAK,GAAG,KAAK,CAAC;IACd,KAAK,GAAyC,IAAI,CAAC;IAE3D,YAA6B,IAAY,EAAmB,GAA8C,EACvF,GAAG,GAAiB,IAAI,CAAC,GAAG,EAAmB,SAAS,GAAiB,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;oBADtF,IAAI;mBAA2B,GAAG;mBAC5C,GAAG;yBAA4C,SAAS;QACzE,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YAAC,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACrD,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,4DAA4D,CAAC,CAAC;YACvI,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;YAC5C,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;YACxC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACjB,MAAM,IAAI,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC;mBAC9H,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YACzH,MAAM,KAAK,GAAG,CAAC,CAAU,EAAU,EAAE,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAK,CAAY,IAAI,CAAC,CAAC,CAAC,CAAC,CAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACxG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5C,6EAA6E;gBAC7E,OAAO,EAAE,CAAC,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI;gBACrC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,gBAAgB,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;gBAC1F,oFAAoF;gBACpF,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,iBAAiB,CAAC;gBAC3E,4GAA4G;gBAC5G,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACnK,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,4DAA4D,CAAC,CAAC;YACjF,IAAI,CAAC,KAAK,GAAG,KAAK,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAED,MAAM;QACJ,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,IAAI,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO;YAChH,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;IACpE,CAAC;IACD,IAAI,QAAQ,KAAc,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACrD,4FAA4F;IAC5F,IAAI,QAAQ,KAA0B,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAE3E;;;OAGG;IACH,KAAK,CAAC,MAAc;QAClB,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAC5F,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC;QACjD,IAAI,CAAC,KAAK,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAC/H,IAAI,IAAI,CAAC,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC;QAC9B,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC/B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,yHAAyH;IACjH,OAAO,CAAC,MAAa,EAAE,QAAiB;QAC9C,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC;QAAC,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC;QAC3C,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAAC,CAAC;QAC7E,IAAI,QAAQ;YAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAgD,8CAA8C;IAC3H,CAAC;IACD,IAAI,OAAO,KAAc,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAE1E;;;OAGG;IACH,eAAe,CAAC,MAAc,EAAE,OAAe;QAC7C,MAAM,MAAM,GAAG,YAAY,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,kBAAkB,EAAE,CAAC;QAChF,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;IACvF,CAAC;IAED;;;OAGG;IACH,iBAAiB,CAAC,MAAc,EAAE,IAAY;QAC5C,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;QACvB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,KAAK;gBAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YAAC,OAAO,SAAS,CAAC;QAAC,CAAC;QAC5I,MAAM,IAAI,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAE,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACtE,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,OAAO,CAAC;QAClC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC;QACjD,oHAAoH;QACpH,IAAI,CAAC,KAAK,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QACpJ,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;YAClB,mHAAmH;YACnH,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAC/B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,MAAM;QACJ,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,KAAK,GAAG,EAAE,GAAG,KAAK,EAAE,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;IAED;;;OAGG;IACH,UAAU,CAAC,EAAW;QACpB,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI;YAAE,OAAO,cAAc,CAAC;QAClD,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QAC1D,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,EAAE;YAAE,IAAI,CAAC,KAAK,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;QAC3G,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACzC,CAAC;IAED,yGAAyG;IACzG,MAAM,CAAC,IAAY;QACjB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QAC1B,IAAI,CAAC,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,GAAG,EAAE,CAAC;QACxG,MAAM,IAAI,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;QACvE,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC;YAC1B,IAAI,CAAC,KAAK,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;YACnG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;gBAAC,IAAI,CAAC,KAAK,GAAG,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC;gBAAC,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;YAAC,CAAC;YAClH,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACxB,CAAC;QACD,MAAM,SAAS,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;QACnC,IAAI,KAAK,GAAG,gBAAgB,EAAE,CAAC;YAAC,IAAI,CAAC,KAAK,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QAAC,CAAC;QAC1I,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;QAChF,IAAI,CAAC,KAAK,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,WAAW,EAAE,GAAG,GAAG,IAAI,EAAE,CAAC;QAC/F,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,gBAAgB,EAAE,SAAS,EAAE,CAAC;IACjG,CAAC;IAED;;;OAGG;IACK,KAAK;QACX,IAAI,CAAC;YACH,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACnF,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;YAAC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;YACxC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YAAC,CAAC;YAChE,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,MAAM;gBAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAG,GAAa,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,wDAAwD,CAAC,CAAC;YAC5I,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YACtC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;gBAChB,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK;oBAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC;gBAC3G,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YACvB,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,gEAAgE;IAChE,IAAI,OAAO,KAAc,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7C,0EAA0E;IAC1E,KAAK;QACH,IAAI,IAAI,CAAC,KAAK;YAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAAC,CAAC;IAClE,CAAC;CACF;AAED,iGAAiG;AAEjG;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAmB,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;AAC3H,MAAM,UAAU,kBAAkB,CAAC,KAAqB;IACtD,OAAO,KAAK,CAAC,SAAS,KAAK,kBAAkB,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,kBAAkB,CAAC,MAAM;WAChG,KAAK,CAAC,MAAM,KAAK,kBAAkB,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC;AACjH,CAAC;AACD,sFAAsF;AACtF,MAAM,CAAC,MAAM,qBAAqB,GAAsB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAC1E,qHAAqH;AACrH,MAAM,CAAC,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,yBAAyB,CAAC,CAAC,CAAC;AAEhJ,MAAM,UAAU,YAAY,CAAC,EAAc,EAAE,EAAU;IACrD,MAAM,KAAK,GAAG,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACjC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAChB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;AAC/C,CAAC;AAED,+HAA+H;AAC/H,MAAM,UAAU,eAAe,CAAC,EAAU;IACxC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC;IACpD,IAAI,OAAO,GAAG,EAAE;QAAE,OAAO,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,0BAA0B,EAAE,OAAO,CAAC,CAAC;IAC/G,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;IACtC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;AACvF,CAAC"}

package/dist/windows-agents.d.ts

@@ -1,127 +0,0 @@
-import type { NativePaneRecovery } from "./native-pane-recovery.js";
-import { type RuntimePaneSnapshot } from "./runtime-pane-protocol.js";
-import { type WindowsCliExecutor, type WindowsCliTask } from "./windows-cli.js";
-import { type NativeMcpConnection, type NativeProviderId } from "./windows-cli-providers.js";
-export interface WindowsTurn {
-    id: string;
-    prompt: string;
-    output: string;
-    status: string;
-    startedAt: number;
-    finishedAt?: number;
-    error?: string;
-}
-export interface WindowsAgent {
-    id: string;
-    name: string;
-    cwd: string;
-    description: string;
-    instructions: string;
-    cli: NativeProviderId;
-    model?: string;
-    sandbox: "read-only" | "workspace-write";
-    createdAt: number;
-    threadId?: string;
-    activeId?: string;
-    turns: WindowsTurn[];
-    /** Also occupies activeId so an older exec-only coordinator fails closed after rollback. */
-    paneLaunchId?: string;
-    paneRecovery?: NativePaneRecovery;
-    paneRecoveryAt?: number;
-    paused?: boolean;
-    /** Once linked, removal from fleet.yaml must not import this provider state again. */
-    fleet_instance?: string;
-    machineId?: string;
-}
-/**
- * M-2297: the per-PC agent limit is reached. The message keeps its original first sentence (callers match on it) and
- * names the limit and what holds the slots; `limit` and `holders` carry the same for a localised view.
- */
-export declare class MachineSlotLimitError extends Error {
-    readonly limit: number;
-    readonly holders: Array<{
-        name: string;
-        unknown: boolean;
-    }>;
-    constructor(limit: number, holders: Array<{
-        name: string;
-        unknown: boolean;
-    }>);
-}
-export interface WindowsAgentPatch {
-    name?: string;
-    cwd?: string;
-    description?: string;
-    instructions?: string;
-    sandbox?: WindowsAgent["sandbox"];
-    cli?: NativeProviderId;
-    model?: string;
-}
-export interface WindowsAgentSendOptions {
-    onSettled?: (task: WindowsCliTask) => void;
-    mcp?: NativeMcpConnection;
-    context?: string;
-    credentialProfile?: string;
-}
-export declare class WindowsAgents {
-    private bridge;
-    private data;
-    private file;
-    private listeners;
-    private launching;
-    constructor(home: string, bridge: WindowsCliExecutor);
-    private change;
-    private find;
-    useExecutor(executor: WindowsCliExecutor): void;
-    get(id: string): WindowsAgent & {
-        blocked: boolean;
-    };
-    list(): Array<Omit<WindowsAgent, "turns" | "instructions"> & {
-        blocked: boolean;
-    }>;
-    subscribe(listener: () => void): () => void;
-    /** Synchronous profile reservation is shared by exec and pane starts. Unknown owners still occupy a slot. */
-    private admitMachineSlot;
-    /** Metadata reservation before a pane can spawn. Exec and persistent adapters can never own one profile together. */
-    reservePane(id: string, launchId: string): WindowsAgent;
-    setPaneRecovery(id: string, recovery: NativePaneRecovery | undefined): void;
-    pinPaneSession(id: string, launchId: string, sessionId: string): void;
-    /** Only a durable fresh-session intent plus an exact positive exit can replace a pane pin. No provider data is removed. */
-    replacePaneSession(id: string, raw: RuntimePaneSnapshot, nextSessionId: string): void;
-    /** The durable Codex fresh intent is committed first; only its exact observed launch may replace the old pin. */
-    pinFreshCodexSession(id: string, rawPrevious: RuntimePaneSnapshot, rawObserved: RuntimePaneSnapshot): void;
-    /** A fresh Codex launch can exit before reporting any UUID. Release only that positive exit; retain the old pin. */
-    releaseUnpinnedCodexPane(id: string, rawPrevious: RuntimePaneSnapshot, rawExit: RuntimePaneSnapshot): void;
-    /** Only an exact positive owned-exit snapshot releases the old exec-compatible reservation. */
-    releasePane(id: string, raw: RuntimePaneSnapshot): void;
-    bindInstance(id: string, name: string): void;
-    /** A confirmed General binding is born already linked, so legacy import can never turn it into a worker. */
-    ensureGeneralBinding(input: {
-        id: string;
-        instance: string;
-        machineId: string;
-        cli: "claude-code" | "codex";
-        cwd: string;
-        name: string;
-        model: string;
-        instructions: string;
-        description: string;
-    }, authorized: () => boolean): WindowsAgent;
-    /** Validate without changing the retained launch or profile (used before an explicit cold-settings stop). */
-    previewUpdate(id: string, patch: WindowsAgentPatch): WindowsAgent;
-    update(id: string, patch: WindowsAgentPatch, authorized?: () => boolean): WindowsAgent;
-    remove(id: string, authorized?: () => boolean): WindowsAgent;
-    restore(snapshot: WindowsAgent): void;
-    setPaused(id: string, paused: boolean): WindowsAgent;
-    cancel(id: string): WindowsCliTask | null;
-    create(input: unknown, authorized?: () => boolean, binding?: {
-        instance: string;
-    }): Promise<WindowsAgent>;
-    send(id: string, value: unknown, authorized: () => boolean, options?: WindowsAgentSendOptions): WindowsCliTask | WindowsTurn;
-    recover(id: string, confirmedStopped: unknown): WindowsAgent & {
-        blocked: boolean;
-    };
-}
-export declare function windowsAgentsFor(owner: object & {
-    dataDir?: string;
-}, executor?: WindowsCliExecutor): WindowsAgents;