@spinabot/brigade 0.1.2 → 1.0.0

package/dist/cli/commands/mcp-cmd.js

@@ -0,0 +1,30 @@
+// src/cli/commands/mcp-cmd.ts
+//
+// `brigade mcp` — expose this Brigade's long-term memory as an MCP server over
+// stdio, so an MCP client (a desktop app, another agent runtime) can add /
+// search / context against it. Bound to the OWNER principal (the operator runs
+// it for their own memory); reads are owner-scoped, writes stamped owner.
+//
+// Protocol I/O is on STDOUT (newline-delimited JSON-RPC); the readiness line +
+// any diagnostics go to STDERR so they can never corrupt the stream.
+import { createMemoryMcpServer, runMemoryMcpStdio } from "../../agents/memory/memory-mcp-server.js";
+import { Tideline } from "../../agents/memory/tideline.js";
+import { resolveAgentWorkspaceDir } from "../../config/paths.js";
+import { scanForThreats } from "../../security/injection-patterns.js";
+export async function runMemoryMcpServerCli(opts = {}) {
+    const agentId = opts.agentId ?? "main";
+    const workspaceDir = resolveAgentWorkspaceDir(agentId);
+    // Wire the recall-time content threat-scan into the facade's injectable seam so
+    // the MCP memory tools surface a poisoned fact as `[BLOCKED]` (never its raw
+    // text) — the same net auto-recall applies in-process. Owner-exposed surface,
+    // but legacy/owner-pasted payloads still get caught at recall.
+    const tide = Tideline.open(workspaceDir, {
+        threatScan: { scan: (c) => scanForThreats(c, "strict") },
+    });
+    const server = createMemoryMcpServer(tide, { origin: { kind: "owner" }, serverName: "brigade-memory" });
+    process.stderr.write(`brigade memory MCP server ready — agent '${agentId}', ${server.toolCount} tools, MCP over stdio. ` +
+        `Ctrl-C or close stdin to stop.\n`);
+    await runMemoryMcpStdio(server);
+    return 0;
+}
+//# sourceMappingURL=mcp-cmd.js.map

package/dist/cli/commands/mcp-cmd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-cmd.js","sourceRoot":"","sources":["../../../src/cli/commands/mcp-cmd.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAC9B,EAAE;AACF,+EAA+E;AAC/E,2EAA2E;AAC3E,+EAA+E;AAC/E,0EAA0E;AAC1E,EAAE;AACF,+EAA+E;AAC/E,qEAAqE;AAErE,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AACpG,OAAO,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AAEtE,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAA6B,EAAE;IAC1E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC;IACvC,MAAM,YAAY,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;IACvD,gFAAgF;IAChF,6EAA6E;IAC7E,8EAA8E;IAC9E,+DAA+D;IAC/D,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE;QACxC,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE;KACxD,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,qBAAqB,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACxG,OAAO,CAAC,MAAM,CAAC,KAAK,CACnB,4CAA4C,OAAO,MAAM,MAAM,CAAC,SAAS,0BAA0B;QAClG,kCAAkC,CACnC,CAAC;IACF,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAChC,OAAO,CAAC,CAAC;AACV,CAAC"}

package/dist/cli/commands/onboard-config.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Onboarding-time defaults applied to brigade.json when the wizard finishes.
+ *
+ * The runtime fallbacks in src/agents/routing/session-key.ts and
+ * src/agents/routing/resolve-route.ts coalesce a missing `session.dmScope`
+ * to `"main"`, which silently collapses every DM into the agent's single
+ * `agent:<id>:main` lane (shared transcript + memory across peers). That's
+ * the wrong default for any install with >= 2 DM senders, so the secure
+ * default is seeded HERE at onboarding time — operator-explicit values are
+ * preserved (nullish-coalesce semantics).
+ */
+import type { BrigadeConfig, DmScope } from "../../config/types.js";
+/** Default DM session scope seeded by `brigade onboard`. */
+export declare const ONBOARDING_DEFAULT_DM_SCOPE: DmScope;
+/**
+ * Stamp the secure DM-scope default onto a brigade.json mutation if (and
+ * only if) the operator hasn't already chosen one. Mirrors upstream
+ * `applyLocalSetupWorkspaceConfig` — explicit `main` / `per-peer` /
+ * `per-channel-peer` / `per-account-channel-peer` values pass through
+ * untouched.
+ */
+export declare function applyOnboardingSessionDefaults(cfg: BrigadeConfig): BrigadeConfig;
+//# sourceMappingURL=onboard-config.d.ts.map

package/dist/cli/commands/onboard-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboard-config.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/onboard-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAEpE,4DAA4D;AAC5D,eAAO,MAAM,2BAA2B,EAAE,OAA4B,CAAC;AAEvE;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAAC,GAAG,EAAE,aAAa,GAAG,aAAa,CAWhF"}

package/dist/cli/commands/onboard-config.js

@@ -0,0 +1,33 @@
+/**
+ * Onboarding-time defaults applied to brigade.json when the wizard finishes.
+ *
+ * The runtime fallbacks in src/agents/routing/session-key.ts and
+ * src/agents/routing/resolve-route.ts coalesce a missing `session.dmScope`
+ * to `"main"`, which silently collapses every DM into the agent's single
+ * `agent:<id>:main` lane (shared transcript + memory across peers). That's
+ * the wrong default for any install with >= 2 DM senders, so the secure
+ * default is seeded HERE at onboarding time — operator-explicit values are
+ * preserved (nullish-coalesce semantics).
+ */
+/** Default DM session scope seeded by `brigade onboard`. */
+export const ONBOARDING_DEFAULT_DM_SCOPE = "per-channel-peer";
+/**
+ * Stamp the secure DM-scope default onto a brigade.json mutation if (and
+ * only if) the operator hasn't already chosen one. Mirrors upstream
+ * `applyLocalSetupWorkspaceConfig` — explicit `main` / `per-peer` /
+ * `per-channel-peer` / `per-account-channel-peer` values pass through
+ * untouched.
+ */
+export function applyOnboardingSessionDefaults(cfg) {
+    const session = cfg.session ?? {};
+    const existing = typeof session.dmScope === "string" ? session.dmScope.trim() : "";
+    const dmScope = existing.length > 0 ? session.dmScope : ONBOARDING_DEFAULT_DM_SCOPE;
+    return {
+        ...cfg,
+        session: {
+            ...session,
+            dmScope,
+        },
+    };
+}
+//# sourceMappingURL=onboard-config.js.map

package/dist/cli/commands/onboard-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboard-config.js","sourceRoot":"","sources":["../../../src/cli/commands/onboard-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,4DAA4D;AAC5D,MAAM,CAAC,MAAM,2BAA2B,GAAY,kBAAkB,CAAC;AAEvE;;;;;;GAMG;AACH,MAAM,UAAU,8BAA8B,CAAC,GAAkB;IAChE,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;IAClC,MAAM,QAAQ,GAAG,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,MAAM,OAAO,GAAY,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAE,OAAO,CAAC,OAAmB,CAAC,CAAC,CAAC,2BAA2B,CAAC;IAC1G,OAAO;QACN,GAAG,GAAG;QACN,OAAO,EAAE;YACR,GAAG,OAAO;YACV,OAAO;SACP;KACD,CAAC;AACH,CAAC"}

package/dist/cli/commands/onboard.d.ts

@@ -0,0 +1,48 @@
+/**
+ * `brigade onboard` — provider/model setup wizard, standalone.
+ *
+ * Boot the Pi-TUI wizard, write the chosen provider+model to brigade.json
+ * and the API key to Brigade-native auth-profiles.json, tear down the TUI,
+ * print a one-liner with what to do next, and exit.
+ *
+ * Mirrors the published v0.1.3 `src/cli/onboard-cmd.ts` UI shape exactly:
+ * Pi-TUI arrow-key navigation, animated branding frames, the same step
+ * sequence (provider → key → model → name), and the same success / cancel /
+ * error messaging. The internals diverge in two small places, marked clearly
+ * below — see "Brigade-native bridge".
+ *
+ * Re-onboarding: this command always runs the wizard. If a default model
+ * is already saved, the wizard's existing flow lets the user pick a new one
+ * (or Esc out without changes). We don't pre-emptively delete anything from
+ * config — the wizard owns its own write semantics.
+ */
+import type { Command } from "commander";
+export interface OnboardCommandOptions {
+    /**
+     * When true, the wizard ignores any API keys exported in the user's shell
+     * environment. Forces the typed-key prompt for every provider. Threaded
+     * through from the `--no-env-detect` CLI flag.
+     */
+    noEnvDetect?: boolean;
+    /**
+     * Storage shape for accepted env-key credentials, switched by the
+     * `--secret-input-mode` CLI flag.
+     *   - "plaintext" (default) — copy the literal value into Brigade's state.
+     *   - "ref" — write a `keyRef` pointer; literal value never lands on disk.
+     * Threaded through from the `--secret-input-mode` CLI flag.
+     */
+    secretInputMode?: "plaintext" | "ref";
+}
+/**
+ * Run the onboarding wizard and exit. Resolves once the wizard completes
+ * (success or cancellation) — no long-running event loop to keep alive.
+ */
+export declare function runOnboardCommand(opts?: OnboardCommandOptions): Promise<number>;
+/**
+ * Commander registrar — declared at the program level so `brigade --help`
+ * lists the subcommand. The action handler is dynamic-imported in
+ * build-program.ts to keep the command's import graph (Pi TUI + onboarding
+ * wizard) out of the cold-start path for unrelated commands.
+ */
+export declare function registerOnboardCommand(program: Command): void;
+//# sourceMappingURL=onboard.d.ts.map

package/dist/cli/commands/onboard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboard.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/onboard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAQH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAezC,MAAM,WAAW,qBAAqB;IACrC;;;;OAIG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,WAAW,GAAG,KAAK,CAAC;CACtC;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,GAAE,qBAA0B,GAAG,OAAO,CAAC,MAAM,CAAC,CAyOzF;AAkID;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA4B7D"}

package/dist/cli/commands/onboard.js

@@ -0,0 +1,397 @@
+/**
+ * `brigade onboard` — provider/model setup wizard, standalone.
+ *
+ * Boot the Pi-TUI wizard, write the chosen provider+model to brigade.json
+ * and the API key to Brigade-native auth-profiles.json, tear down the TUI,
+ * print a one-liner with what to do next, and exit.
+ *
+ * Mirrors the published v0.1.3 `src/cli/onboard-cmd.ts` UI shape exactly:
+ * Pi-TUI arrow-key navigation, animated branding frames, the same step
+ * sequence (provider → key → model → name), and the same success / cancel /
+ * error messaging. The internals diverge in two small places, marked clearly
+ * below — see "Brigade-native bridge".
+ *
+ * Re-onboarding: this command always runs the wizard. If a default model
+ * is already saved, the wizard's existing flow lets the user pick a new one
+ * (or Esc out without changes). We don't pre-emptively delete anything from
+ * config — the wizard owns its own write semantics.
+ */
+import * as fsAsync from "node:fs/promises";
+import process from "node:process";
+import { AuthStorage, ModelRegistry } from "@mariozechner/pi-coding-agent";
+import { ProcessTerminal, TUI } from "@mariozechner/pi-tui";
+import chalk from "chalk";
+import { initAuthProfiles, readProfiles, upsertApiKeyProfile } from "../../auth/profiles.js";
+import { DEFAULT_AGENT_ID, resolveModelsPath } from "../../config/paths.js";
+import { BRIGADE_DIR, loadConfig, saveConfig } from "../../core/config.js";
+import { EXIT_CONFIG_ERROR } from "../../protocol.js";
+import { bootRuntimeContext } from "../../storage/boot.js";
+import { flushAllPendingWrites } from "../../storage/flush.js";
+import { deleteSentinel, readSentinel, sentinelExists, writeSentinel, writeSentinelNow } from "../../storage/sentinel.js";
+import { pickStorageMode } from "../../ui/onboard-storage-mode.js";
+import { runOnboarding } from "../../ui/onboarding.js";
+import { markTuiActive, restoreTerminal } from "../../ui/terminal-cleanup.js";
+import { applyOnboardingSessionDefaults, ONBOARDING_DEFAULT_DM_SCOPE } from "./onboard-config.js";
+/**
+ * Run the onboarding wizard and exit. Resolves once the wizard completes
+ * (success or cancellation) — no long-running event loop to keep alive.
+ */
+export async function runOnboardCommand(opts = {}) {
+    // Onboard uses prompts (raw mode + cursor manipulation) — opt into the
+    // on-exit terminal cleanup so a Ctrl+C mid-wizard doesn't leave the
+    // terminal in raw mode.
+    markTuiActive();
+    if (!process.stdin.isTTY || !process.stdout.isTTY) {
+        console.error(chalk.red("brigade onboard needs an interactive terminal."));
+        console.error(chalk.dim("To configure non-interactively, set provider env vars (e.g. OPENROUTER_API_KEY) and write\n" +
+            "  ~/.brigade/brigade.json directly with `agents.defaults.model.primary` set."));
+        return EXIT_CONFIG_ERROR;
+    }
+    const tui = new TUI(new ProcessTerminal());
+    tui.start();
+    // Snapshot the PRE-RUN sentinel so ANY aborted run (Esc, error, backend
+    // connect failure, Ctrl+C) restores the machine's previous mode pin
+    // exactly. persistStorageMode below OVERWRITES a pre-existing pin with the
+    // new pick, so a delete-if-created rollback is not enough — a re-onboard
+    // that switched modes and then cancelled would silently flip the machine's
+    // mode (filesystem operator curiosity-picks convex, Escs out, next boot is
+    // an empty convex crew). A corrupt pre-run sentinel reads as "none";
+    // rollback then deletes — the same self-heal the old flow got by
+    // overwriting the corrupt file at the end.
+    let priorSentinel;
+    try {
+        priorSentinel = readSentinel();
+    }
+    catch {
+        priorSentinel = undefined;
+    }
+    let onboardSettled = false;
+    const rollbackSentinel = () => {
+        if (onboardSettled)
+            return;
+        try {
+            if (priorSentinel)
+                writeSentinel(priorSentinel);
+            else
+                deleteSentinel();
+        }
+        catch {
+            // Best-effort — a stuck pin surfaces on the next `store mode show`.
+        }
+    };
+    // SIGINT during the wizard — clean exit, no half-written config (the
+    // wizard's saveConfig only fires on a completed flow).
+    const onSigint = () => {
+        tui.stop();
+        restoreTerminal();
+        // An interrupted run must not leave a half-configured mode pin (same
+        // rule as the cancel/error paths below); no-op after success.
+        rollbackSentinel();
+        // Once the convex context is up, a just-entered key rides a write-behind
+        // chain — drain it before exiting so Ctrl+C can't silently drop it. 2s
+        // safety net so a wedged flush never hangs the abort.
+        const t = setTimeout(() => process.exit(130), 2000);
+        t.unref?.();
+        void flushAllPendingWrites().finally(() => process.exit(130));
+    };
+    process.once("SIGINT", onSigint);
+    // ───────────────── Step 0 + runtime context (FIRST) ─────────────────
+    // Pick the storage mode, pin the sentinel, and boot the runtime context
+    // BEFORE any auth/config/model write. The wizard used to run end-to-end in
+    // filesystem mode and flip the sentinel LAST — so a convex pick wrote the
+    // provider key + config + web-search key PLAINTEXT under ~/.brigade and
+    // left the convex backend empty. Establishing the context here means every
+    // downstream upsertApiKeyProfile / saveConfig / models-catalog write
+    // dispatches sealed into convex (filesystem mode is byte-identical).
+    let storage;
+    try {
+        storage = await pickStorageMode(tui);
+    }
+    catch (err) {
+        const m = err.message;
+        if (m === "storage-mode-revert-to-filesystem") {
+            storage = { mode: "filesystem" };
+        }
+        else {
+            tui.stop();
+            restoreTerminal();
+            if (m === "onboarding-cancelled") {
+                console.error(chalk.dim("Onboarding cancelled — run `brigade onboard` again any time."));
+                return 0;
+            }
+            throw err;
+        }
+    }
+    // Pin the sentinel, then boot. In convex mode bootRuntimeContext runs the
+    // encryption-fingerprint check, installs the strict guard, and primes the
+    // config cache (without which readConfigOrInit throws). The pre-run pin was
+    // snapshotted above; every abort path below restores it via
+    // rollbackSentinel so no aborted run can leave the mode switched.
+    persistStorageMode(storage);
+    // persistStorageMode is warn-only by design; but a convex pick whose
+    // sentinel never landed would silently boot FILESYSTEM below (resolveMode
+    // finds no pin) and run the whole wizard in the wrong mode. Fail loudly
+    // instead — the warning above already printed the retry command.
+    if (storage.mode === "convex" && !sentinelExists()) {
+        tui.stop();
+        restoreTerminal();
+        return EXIT_CONFIG_ERROR;
+    }
+    try {
+        await bootRuntimeContext();
+    }
+    catch (err) {
+        tui.stop();
+        restoreTerminal();
+        rollbackSentinel();
+        console.error(chalk.red(`Onboarding failed — couldn't connect the storage backend: ${err.message}`));
+        if (storage.mode === "convex") {
+            console.error(chalk.dim(`Make sure your backend is running at ${storage.convexUrl}, then re-run brigade onboard.`));
+        }
+        return EXIT_CONFIG_ERROR;
+    }
+    // Now mode-aware. Convex → initAuthProfiles primes empty in-memory caches
+    // (no disk files); filesystem → scaffolds auth-profiles.json at 0600 as
+    // before (the bridge's defensive upsert expects a readable profile store).
+    initAuthProfiles(DEFAULT_AGENT_ID);
+    // One-shot prune of any leftover `~/.brigade/auth.json` from a prior Brigade
+    // version (Pi's `AuthStorage.create(<path>)` wrote `{}` on construction and
+    // mirrored set() to disk). The wizard now uses `AuthStorage.inMemory()`, so
+    // a fresh onboard never recreates it — but stale copies surprised the user
+    // in `ls ~/.brigade/`. Best-effort async unlink. (The old `require("node:
+    // fs")` here was dead code — this module is ESM, so `require` threw and the
+    // prune never ran.)
+    try {
+        await fsAsync.unlink(`${BRIGADE_DIR}/auth.json`);
+    }
+    catch {
+        /* missing / unreadable is fine */
+    }
+    // IN-MEMORY authStorage — never writes to disk. The wizard owns ALL
+    // persistence via `upsertApiKeyProfile` / `upsertApiKeyRefProfile`, which
+    // now dispatch into convex (sealed) because the context is live. `set()` in
+    // memory still lets the wizard process reuse the key for model discovery.
+    // The ModelRegistry is created AFTER the context so `resolveModelsPath`
+    // resolves to the convex OS-cache location, not ~/.brigade/models.json.
+    const authStorage = AuthStorage.inMemory();
+    const modelRegistry = ModelRegistry.create(authStorage, resolveModelsPath(DEFAULT_AGENT_ID));
+    try {
+        const result = await runOnboarding(tui, authStorage, modelRegistry, {
+            noEnvDetect: opts.noEnvDetect,
+            secretInputMode: opts.secretInputMode,
+            storage,
+        });
+        tui.stop();
+        restoreTerminal();
+        // ─────────────────── Brigade-native bridge ───────────────────
+        // The lifted runOnboarding writes:
+        //   1. The API key into Pi's auth.json (via authStorage.set)
+        //   2. brigade.json with the legacy flat keys defaultProvider /
+        //      defaultModelId (line 144 in src/ui/onboarding.ts)
+        //
+        // Brigade's runtime (Primitive #1's agent-loop, the lifted chat/
+        // gateway, doctor, status) all read:
+        //   1. The API key from `~/.brigade/agents/main/agent/auth-profiles.json`
+        //      (resolveAuthProfilesPath + readBrigadeCredentials)
+        //   2. brigade.json's `agents.defaults.{provider, model.primary}` shape
+        //
+        // We bridge here so the chosen provider/model land in the canonical
+        // places without requiring a patch to the byte-identical lifted UI.
+        await bridgeOnboardingResultToBrigadeNative({
+            provider: result.provider,
+            modelId: result.modelId,
+            authStorage,
+        });
+        // The sentinel was pinned + the context booted up front (so writes
+        // sealed into convex as they happened). Now drain the convex write-
+        // behind chains so the provider key, config, and models catalog are
+        // durably committed before we print "onboarded" and exit. No-op in
+        // filesystem mode (writes were synchronous).
+        await flushAllPendingWrites();
+        // Onboarding is durable — from here the NEW pin is the real state; a
+        // late Ctrl+C must not roll it back.
+        onboardSettled = true;
+        // Web-tools setup is now Step 4 of the Pi-TUI wizard above — runs
+        // inside `runOnboarding` against the same TUI, so its look matches
+        // the provider picker exactly. No post-wizard prompt here.
+        const modeLine = result.storage.mode === "convex"
+            ? `Storage:     ${chalk.bold("convex")} (${chalk.bold(result.storage.convexUrl)})`
+            : `Storage:     ${chalk.bold("filesystem")} (~/.brigade)`;
+        console.error(chalk.dim(`\n✓ onboarded — provider: ${chalk.bold(result.provider)} · model: ${chalk.bold(result.modelId)}\n` +
+            `${modeLine}\n` +
+            `Next: run ${chalk.bold("brigade gateway")} (then ${chalk.bold("brigade connect")} in a second terminal),\n` +
+            `      or ${chalk.bold("brigade")} for the in-process TUI.\n` +
+            `Web tools:   ${chalk.bold("brigade onboard web")} to (re-)pick a search backend.\n` +
+            `Memory:      facts auto-extract after every turn — run ${chalk.bold("brigade doctor")} to see the active embedder.\n` +
+            `Shell access: ${chalk.bold("bash is gated")} — agents must ask before running commands.\n` +
+            `              Approve with ${chalk.bold('brigade exec allow "<cmd>"')} ` +
+            `(${chalk.bold("brigade exec list")} to see what's approved).\n` +
+            `              Read/grep/find/ls are open — they never need approval.\n`));
+        return 0;
+    }
+    catch (err) {
+        tui.stop();
+        restoreTerminal();
+        const msg = err instanceof Error ? err.message : String(err);
+        // `runOnboarding` throws "onboarding-cancelled" when the user hits Esc
+        // on the provider picker — surface that as a friendly message, not a
+        // crash. Any other error propagates as a real failure.
+        //
+        // Either way, restore the PRE-RUN pin: the sentinel now lands BEFORE
+        // the wizard (so writes seal into the right backend), so an aborted
+        // run must not leave the machine pinned to a mode it never finished
+        // setting up — neither a fresh pin over an unconfigured backend NOR a
+        // silently switched mode on a cancelled re-onboard. Any rows already
+        // sealed into convex are harmless: idempotent, overwritten by the next
+        // successful onboard.
+        rollbackSentinel();
+        if (msg === "onboarding-cancelled") {
+            console.error(chalk.dim("Onboarding cancelled — run `brigade onboard` again any time."));
+            return 0;
+        }
+        console.error(chalk.red(`Onboarding failed: ${msg}`));
+        return 1;
+    }
+}
+/**
+ * Persist the storage-mode choice into `~/.brigade/mode.sentinel`. Idempotent —
+ * writes the sentinel regardless of whether it already existed (a re-onboard
+ * with the same answer is a no-op, a re-onboard that switches modes flips
+ * the pin). Doesn't migrate data; that's a separate `brigade store migrate`
+ * command.
+ *
+ * Failure here is non-fatal: the user has already burned wizard time, so we
+ * log a yellow warning and let them re-run `brigade store mode set <mode>`
+ * to retry.
+ */
+function persistStorageMode(storage) {
+    try {
+        writeSentinelNow(storage.mode, {
+            ...(storage.convexUrl !== undefined ? { convexUrl: storage.convexUrl } : {}),
+        });
+    }
+    catch (err) {
+        process.stderr.write(chalk.yellow(`\nbrigade: warning — couldn't write ~/.brigade/mode.sentinel: ${err.message}\n` +
+            `  Retry with: brigade store mode set ${storage.mode}` +
+            (storage.convexUrl ? ` --convex-url ${storage.convexUrl}\n` : "\n")));
+    }
+}
+/**
+ * Bridge the post-wizard state into Brigade-native storage.
+ *
+ *   - Pi auth.json → Brigade auth-profiles.json (so the runtime sees the key
+ *     via auth-bridge / readAuthProfilesAsCredentialMap).
+ *   - brigade.json `defaultProvider`/`defaultModelId` → `agents.defaults.
+ *     {provider, model.primary}` (so chat/gateway/status read the right
+ *     shape).
+ *
+ * Both writes are idempotent and tolerate a wizard re-run that flips
+ * provider/model — first-wins semantics on the auth side keep things sane.
+ */
+async function bridgeOnboardingResultToBrigadeNative(args) {
+    // Credential-mirror step: the wizard now owns ALL credential persistence
+    // (typed-paste, env-accept, env-auto-select all call `upsertApiKeyProfile`
+    // or `upsertApiKeyRefProfile` directly inside `runOnboarding`). This bridge
+    // used to re-write the profile by reading `authStorage.getApiKey` — but
+    // that's a literal value, so re-writing would CLOBBER any keyRef profile
+    // the wizard just persisted in `--secret-input-mode ref`, defeating ref
+    // mode entirely.
+    //
+    // Defensive net only: if (and ONLY if) the wizard somehow didn't write a
+    // profile for this provider (e.g. a code path that pre-dates the direct
+    // upsert), do a one-time mirror so the user isn't left without a credential.
+    // Any existing profile (literal `key` OR `keyRef`) is left untouched.
+    try {
+        let providerHasProfile = false;
+        try {
+            // Mode-aware: in convex mode there is NO disk auth-profiles.json —
+            // readProfiles serves the in-memory cache (primed at boot / by the
+            // wizard's sealed upsert). A raw disk read would always miss in
+            // convex mode → a spurious "no profile" → redundant re-mirror.
+            const { profiles } = readProfiles(DEFAULT_AGENT_ID);
+            providerHasProfile = Object.values(profiles ?? {}).some((p) => p.provider === args.provider &&
+                (p.key !== undefined ||
+                    p.keyRef !== undefined));
+        }
+        catch {
+            // No profiles yet — fall through; the upsert below creates it.
+        }
+        if (!providerHasProfile) {
+            const key = await args.authStorage.getApiKey(args.provider);
+            if (typeof key === "string" && key.length > 0) {
+                upsertApiKeyProfile(DEFAULT_AGENT_ID, { provider: args.provider, key });
+            }
+        }
+    }
+    catch (err) {
+        // Don't block onboarding success on the bridge failing — surface a
+        // breadcrumb instead. The user can re-run `brigade onboard` to
+        // retry, or hand-edit auth-profiles.json themselves.
+        process.stderr.write(chalk.yellow(`\nbrigade: warning — couldn't verify auth-profiles.json: ${err.message}\n`));
+    }
+    // Migrate brigade.json's flat shape (written by ui/onboarding.ts:144) into
+    // the agents.defaults shape that the rest of Brigade reads. We don't
+    // delete the legacy keys — leaving them around as a no-op is safer than
+    // touching fields the user may have hand-edited.
+    try {
+        const cfg = loadConfig();
+        const agents = cfg.agents ?? {};
+        const defaults = agents.defaults ?? {};
+        const model = defaults.model ?? {};
+        defaults.provider = args.provider;
+        model.primary = args.modelId;
+        defaults.model = model;
+        agents.defaults = defaults;
+        cfg.agents = agents;
+        // Wave N3 (bug #5) — seed the secure DM-scope default. Without
+        // this, a fresh onboard leaves `session.dmScope` undefined and the
+        // runtime fallback in session-key.ts collapses every DM into the
+        // agent's single `agent:<id>:main` lane (shared transcript +
+        // memory across peers). Operator-explicit values are preserved.
+        const seeded = applyOnboardingSessionDefaults(cfg);
+        saveConfig(seeded);
+        const finalScope = seeded.session?.dmScope;
+        if (finalScope === ONBOARDING_DEFAULT_DM_SCOPE) {
+            process.stderr.write(chalk.dim(`Set session.dmScope to "${ONBOARDING_DEFAULT_DM_SCOPE}" — every DM gets its own session/transcript/memory.\n`));
+        }
+    }
+    catch (err) {
+        process.stderr.write(chalk.yellow(`\nbrigade: warning — couldn't update brigade.json: ${err.message}\n`));
+    }
+}
+/**
+ * Commander registrar — declared at the program level so `brigade --help`
+ * lists the subcommand. The action handler is dynamic-imported in
+ * build-program.ts to keep the command's import graph (Pi TUI + onboarding
+ * wizard) out of the cold-start path for unrelated commands.
+ */
+export function registerOnboardCommand(program) {
+    const onboardCmd = program
+        .command("onboard")
+        .description("Pick a provider and model — interactive Pi-TUI wizard")
+        .option("--no-env-detect", "ignore API keys from the shell environment", false)
+        .action(async (opts) => {
+        const code = await runOnboardCommand({ noEnvDetect: opts.envDetect === false });
+        process.exit(code);
+    });
+    // Sub-command: `brigade onboard web` — re-run JUST the web-tools section
+    // of the wizard. Useful when the operator already configured provider/
+    // model but skipped web setup, or wants to swap the default search backend.
+    onboardCmd
+        .command("web")
+        .description("Pick a default web-search provider (re-runnable Pi-TUI wizard step)")
+        .option("--secret-input-mode <mode>", "plaintext (default) or ref (store env-var pointer)", "plaintext")
+        .action(async (opts) => {
+        try {
+            const { runWebSetupStandalone } = await import("../flows/web-setup.js");
+            const mode = opts.secretInputMode === "ref" ? "ref" : "plaintext";
+            const code = await runWebSetupStandalone({ secretInputMode: mode });
+            process.exit(code);
+        }
+        catch (err) {
+            console.error(chalk.red(`Web setup failed: ${err instanceof Error ? err.message : String(err)}`));
+            process.exit(1);
+        }
+    });
+}
+//# sourceMappingURL=onboard.js.map

package/dist/cli/commands/onboard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboard.js","sourceRoot":"","sources":["../../../src/cli/commands/onboard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,OAAO,MAAM,kBAAkB,CAAC;AAC5C,OAAO,OAAO,MAAM,cAAc,CAAC;AAEnC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,KAAK,MAAM,OAAO,CAAC;AAG1B,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7F,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC5E,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAC3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAE1H,OAAO,EAAE,eAAe,EAA0B,MAAM,kCAAkC,CAAC;AAC3F,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC9E,OAAO,EAAE,8BAA8B,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAmBlG;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAA8B,EAAE;IACvE,uEAAuE;IACvE,oEAAoE;IACpE,wBAAwB;IACxB,aAAa,EAAE,CAAC;IAChB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACnD,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC,CAAC;QAC3E,OAAO,CAAC,KAAK,CACZ,KAAK,CAAC,GAAG,CACR,6FAA6F;YAC5F,8EAA8E,CAC/E,CACD,CAAC;QACF,OAAO,iBAAiB,CAAC;IAC1B,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,eAAe,EAAE,CAAC,CAAC;IAC3C,GAAG,CAAC,KAAK,EAAE,CAAC;IAEZ,wEAAwE;IACxE,oEAAoE;IACpE,2EAA2E;IAC3E,yEAAyE;IACzE,2EAA2E;IAC3E,2EAA2E;IAC3E,qEAAqE;IACrE,iEAAiE;IACjE,2CAA2C;IAC3C,IAAI,aAAuC,CAAC;IAC5C,IAAI,CAAC;QACJ,aAAa,GAAG,YAAY,EAAE,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACR,aAAa,GAAG,SAAS,CAAC;IAC3B,CAAC;IACD,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,MAAM,gBAAgB,GAAG,GAAS,EAAE;QACnC,IAAI,cAAc;YAAE,OAAO;QAC3B,IAAI,CAAC;YACJ,IAAI,aAAa;gBAAE,aAAa,CAAC,aAAa,CAAC,CAAC;;gBAC3C,cAAc,EAAE,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACR,oEAAoE;QACrE,CAAC;IACF,CAAC,CAAC;IAEF,qEAAqE;IACrE,uDAAuD;IACvD,MAAM,QAAQ,GAAG,GAAS,EAAE;QAC3B,GAAG,CAAC,IAAI,EAAE,CAAC;QACX,eAAe,EAAE,CAAC;QAClB,qEAAqE;QACrE,8DAA8D;QAC9D,gBAAgB,EAAE,CAAC;QACnB,yEAAyE;QACzE,uEAAuE;QACvE,sDAAsD;QACtD,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QACpD,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QACZ,KAAK,qBAAqB,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/D,CAAC,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAEjC,uEAAuE;IACvE,wEAAwE;IACxE,2EAA2E;IAC3E,0EAA0E;IAC1E,wEAAwE;IACxE,2EAA2E;IAC3E,qEAAqE;IACrE,qEAAqE;IACrE,IAAI,OAA0B,CAAC;IAC/B,IAAI,CAAC;QACJ,OAAO,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,CAAC,GAAI,GAAa,CAAC,OAAO,CAAC;QACjC,IAAI,CAAC,KAAK,mCAAmC,EAAE,CAAC;YAC/C,OAAO,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QAClC,CAAC;aAAM,CAAC;YACP,GAAG,CAAC,IAAI,EAAE,CAAC;YACX,eAAe,EAAE,CAAC;YAClB,IAAI,CAAC,KAAK,sBAAsB,EAAE,CAAC;gBAClC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC,CAAC;gBACzF,OAAO,CAAC,CAAC;YACV,CAAC;YACD,MAAM,GAAG,CAAC;QACX,CAAC;IACF,CAAC;IAED,0EAA0E;IAC1E,0EAA0E;IAC1E,4EAA4E;IAC5E,4DAA4D;IAC5D,kEAAkE;IAClE,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC5B,qEAAqE;IACrE,0EAA0E;IAC1E,wEAAwE;IACxE,iEAAiE;IACjE,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QACpD,GAAG,CAAC,IAAI,EAAE,CAAC;QACX,eAAe,EAAE,CAAC;QAClB,OAAO,iBAAiB,CAAC;IAC1B,CAAC;IACD,IAAI,CAAC;QACJ,MAAM,kBAAkB,EAAE,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,GAAG,CAAC,IAAI,EAAE,CAAC;QACX,eAAe,EAAE,CAAC;QAClB,gBAAgB,EAAE,CAAC;QACnB,OAAO,CAAC,KAAK,CACZ,KAAK,CAAC,GAAG,CAAC,6DAA8D,GAAa,CAAC,OAAO,EAAE,CAAC,CAChG,CAAC;QACF,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC/B,OAAO,CAAC,KAAK,CACZ,KAAK,CAAC,GAAG,CAAC,wCAAwC,OAAO,CAAC,SAAS,gCAAgC,CAAC,CACpG,CAAC;QACH,CAAC;QACD,OAAO,iBAAiB,CAAC;IAC1B,CAAC;IAED,0EAA0E;IAC1E,wEAAwE;IACxE,2EAA2E;IAC3E,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;IAEnC,6EAA6E;IAC7E,4EAA4E;IAC5E,4EAA4E;IAC5E,2EAA2E;IAC3E,0EAA0E;IAC1E,4EAA4E;IAC5E,oBAAoB;IACpB,IAAI,CAAC;QACJ,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,WAAW,YAAY,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACR,kCAAkC;IACnC,CAAC;IAED,oEAAoE;IACpE,0EAA0E;IAC1E,4EAA4E;IAC5E,0EAA0E;IAC1E,wEAAwE;IACxE,wEAAwE;IACxE,MAAM,WAAW,GAAG,WAAW,CAAC,QAAQ,EAAE,CAAC;IAC3C,MAAM,aAAa,GAAG,aAAa,CAAC,MAAM,CAAC,WAAW,EAAE,iBAAiB,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAE7F,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,WAAW,EAAE,aAAa,EAAE;YACnE,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,OAAO;SACP,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,EAAE,CAAC;QACX,eAAe,EAAE,CAAC;QAElB,gEAAgE;QAChE,mCAAmC;QACnC,6DAA6D;QAC7D,gEAAgE;QAChE,yDAAyD;QACzD,EAAE;QACF,iEAAiE;QACjE,qCAAqC;QACrC,0EAA0E;QAC1E,0DAA0D;QAC1D,wEAAwE;QACxE,EAAE;QACF,oEAAoE;QACpE,oEAAoE;QACpE,MAAM,qCAAqC,CAAC;YAC3C,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,WAAW;SACX,CAAC,CAAC;QAEH,mEAAmE;QACnE,oEAAoE;QACpE,oEAAoE;QACpE,mEAAmE;QACnE,6CAA6C;QAC7C,MAAM,qBAAqB,EAAE,CAAC;QAC9B,qEAAqE;QACrE,qCAAqC;QACrC,cAAc,GAAG,IAAI,CAAC;QAEtB,kEAAkE;QAClE,mEAAmE;QACnE,2DAA2D;QAE3D,MAAM,QAAQ,GACb,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ;YAC/B,CAAC,CAAC,gBAAgB,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG;YAClF,CAAC,CAAC,gBAAgB,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC;QAE5D,OAAO,CAAC,KAAK,CACZ,KAAK,CAAC,GAAG,CACR,6BAA6B,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI;YAClG,GAAG,QAAQ,IAAI;YACf,aAAa,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,UAAU,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,2BAA2B;YAC5G,YAAY,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,4BAA4B;YAC7D,gBAAgB,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,mCAAmC;YACpF,0DAA0D,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,gCAAgC;YACtH,iBAAiB,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,+CAA+C;YAC3F,8BAA8B,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,GAAG;YACzE,IAAI,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,6BAA6B;YAChE,wEAAwE,CACzE,CACD,CAAC;QACF,OAAO,CAAC,CAAC;IACV,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,GAAG,CAAC,IAAI,EAAE,CAAC;QACX,eAAe,EAAE,CAAC;QAClB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,uEAAuE;QACvE,qEAAqE;QACrE,uDAAuD;QACvD,EAAE;QACF,qEAAqE;QACrE,oEAAoE;QACpE,oEAAoE;QACpE,sEAAsE;QACtE,qEAAqE;QACrE,uEAAuE;QACvE,sBAAsB;QACtB,gBAAgB,EAAE,CAAC;QACnB,IAAI,GAAG,KAAK,sBAAsB,EAAE,CAAC;YACpC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC,CAAC;YACzF,OAAO,CAAC,CAAC;QACV,CAAC;QACD,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,sBAAsB,GAAG,EAAE,CAAC,CAAC,CAAC;QACtD,OAAO,CAAC,CAAC;IACV,CAAC;AACF,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,kBAAkB,CAAC,OAA0B;IACrD,IAAI,CAAC;QACJ,gBAAgB,CAAC,OAAO,CAAC,IAAI,EAAE;YAC9B,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5E,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,MAAM,CAAC,KAAK,CACnB,KAAK,CAAC,MAAM,CACX,iEAAkE,GAAa,CAAC,OAAO,IAAI;YAC1F,wCAAwC,OAAO,CAAC,IAAI,EAAE;YACtD,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CACpE,CACD,CAAC;IACH,CAAC;AACF,CAAC;AAED;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,qCAAqC,CAAC,IAIpD;IACA,yEAAyE;IACzE,2EAA2E;IAC3E,4EAA4E;IAC5E,wEAAwE;IACxE,yEAAyE;IACzE,wEAAwE;IACxE,iBAAiB;IACjB,EAAE;IACF,yEAAyE;IACzE,wEAAwE;IACxE,6EAA6E;IAC7E,sEAAsE;IACtE,IAAI,CAAC;QACJ,IAAI,kBAAkB,GAAG,KAAK,CAAC;QAC/B,IAAI,CAAC;YACJ,mEAAmE;YACnE,mEAAmE;YACnE,gEAAgE;YAChE,+DAA+D;YAC/D,MAAM,EAAE,QAAQ,EAAE,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAC;YACpD,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,CACtD,CAAC,CAAC,EAAE,EAAE,CACJ,CAA2B,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ;gBACvD,CAAE,CAAsB,CAAC,GAAG,KAAK,SAAS;oBACxC,CAA0B,CAAC,MAAM,KAAK,SAAS,CAAC,CACnD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACR,+DAA+D;QAChE,CAAC;QACD,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC5D,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/C,mBAAmB,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;YACzE,CAAC;QACF,CAAC;IACF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,mEAAmE;QACnE,+DAA+D;QAC/D,qDAAqD;QACrD,OAAO,CAAC,MAAM,CAAC,KAAK,CACnB,KAAK,CAAC,MAAM,CACX,4DAA6D,GAAa,CAAC,OAAO,IAAI,CACtF,CACD,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,qEAAqE;IACrE,wEAAwE;IACxE,iDAAiD;IACjD,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,UAAU,EAA6B,CAAC;QACpD,MAAM,MAAM,GAAI,GAAG,CAAC,MAA8C,IAAI,EAAE,CAAC;QACzE,MAAM,QAAQ,GAAI,MAAM,CAAC,QAAgD,IAAI,EAAE,CAAC;QAChF,MAAM,KAAK,GAAI,QAAQ,CAAC,KAA6C,IAAI,EAAE,CAAC;QAC5E,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAClC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,QAAQ,CAAC,KAAK,GAAG,KAAK,CAAC;QACvB,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAC3B,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC;QACpB,+DAA+D;QAC/D,mEAAmE;QACnE,iEAAiE;QACjE,6DAA6D;QAC7D,gEAAgE;QAChE,MAAM,MAAM,GAAG,8BAA8B,CAAC,GAAY,CAAC,CAAC;QAC5D,UAAU,CAAC,MAAe,CAAC,CAAC;QAC5B,MAAM,UAAU,GAAI,MAA6C,CAAC,OAAO,EAAE,OAAO,CAAC;QACnF,IAAI,UAAU,KAAK,2BAA2B,EAAE,CAAC;YAChD,OAAO,CAAC,MAAM,CAAC,KAAK,CACnB,KAAK,CAAC,GAAG,CACR,2BAA2B,2BAA2B,wDAAwD,CAC9G,CACD,CAAC;QACH,CAAC;IACF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,MAAM,CAAC,KAAK,CACnB,KAAK,CAAC,MAAM,CACX,sDAAuD,GAAa,CAAC,OAAO,IAAI,CAChF,CACD,CAAC;IACH,CAAC;AACF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAgB;IACtD,MAAM,UAAU,GAAG,OAAO;SACxB,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,uDAAuD,CAAC;SACpE,MAAM,CAAC,iBAAiB,EAAE,4CAA4C,EAAE,KAAK,CAAC;SAC9E,MAAM,CAAC,KAAK,EAAE,IAA6B,EAAE,EAAE;QAC/C,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC,CAAC;QAChF,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC,CAAC,CAAC;IAEJ,yEAAyE;IACzE,uEAAuE;IACvE,4EAA4E;IAC5E,UAAU;SACR,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,qEAAqE,CAAC;SAClF,MAAM,CAAC,4BAA4B,EAAE,oDAAoD,EAAE,WAAW,CAAC;SACvG,MAAM,CAAC,KAAK,EAAE,IAAkC,EAAE,EAAE;QACpD,IAAI,CAAC;YACJ,MAAM,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;YACxE,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC;YAClE,MAAM,IAAI,GAAG,MAAM,qBAAqB,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;YACpE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,qBAAqB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YAClG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;IACF,CAAC,CAAC,CAAC;AACL,CAAC"}