@stratusagent/cli 0.11.2 → 0.11.4

package/dist/commands/doctor.js

@@ -0,0 +1,376 @@
+import { readdir, readFile } from 'node:fs/promises';
+import path from 'node:path';
+import { agentsDirPath, defaultApiKeyEnvName, DEFAULT_STRATUS_AGENT, globalConfigPath, loadChannelCredentials, loadCredentials, loadRosterSouls, loadSoulFile, isSignedInRuntime, parseProviderName, readNonEmptyString, readProcessEnv, readWorkingDirectory, DEFAULT_CONFIG_FILENAME, loadConfigFile, resolveRuntimeConfig as resolveStateRuntimeConfig, CREDENTIAL_PROVIDER_NAMES, ignoredUntrustedConfigKeys, } from '@stratusagent/state';
+import { readServiceCommand } from "../service.js";
+import { serviceEnvFor } from "../daemon.js";
+import { writeLine, pathExists } from "../io.js";
+import { ignoredConfigRemedy } from "../runtime.js";
+import { loadSlackAdapter } from "../loaders.js";
+/**
+ * `stratus doctor` — what a run would resolve to right now, and which file
+ * or variable decided each part. Every "why is it using X" question needs
+ * the precedence chain, and reading it out of the source is not something
+ * anyone should have to do.
+ */
+export const collectDoctorReport = async (command, warn, env = {}) => {
+    const processEnv = readProcessEnv(env);
+    const cwd = readWorkingDirectory(env);
+    const problems = [];
+    // Config discovery, spelled out rather than delegated: doctor has to
+    // report the files that LOST as well as the one in use, which is the
+    // whole point when a stray project config is the answer.
+    // Which of the two named it, not just that one did: telling someone to
+    // fix STRATUS_CONFIG when --config is what is set leaves the real
+    // override in place — the same mistake as provider and key attribution,
+    // in the one place a typo is most likely.
+    const explicitSource = command.configPath !== undefined
+        ? { name: '--config', value: command.configPath }
+        : readNonEmptyString(processEnv.STRATUS_CONFIG)
+            ? { name: 'STRATUS_CONFIG', value: String(processEnv.STRATUS_CONFIG) }
+            : undefined;
+    const explicit = explicitSource?.value;
+    const candidates = explicitSource
+        ? [{ path: path.resolve(cwd, explicitSource.value), label: explicitSource.name }]
+        : [
+            { path: path.join(cwd, DEFAULT_CONFIG_FILENAME), label: 'project' },
+            { path: globalConfigPath(env), label: 'global' },
+        ];
+    const present = [];
+    let unreadable;
+    for (const candidate of candidates) {
+        try {
+            await readFile(candidate.path, 'utf8');
+            present.push(candidate);
+        }
+        catch (error) {
+            const code = error.code;
+            if (code !== 'ENOENT') {
+                // resolveConfigLocation throws here rather than trying the next
+                // candidate, so discovery stops: a lower-priority file that a real
+                // run never reaches must not be reported as the config in use.
+                unreadable = candidate;
+                problems.push(`${candidate.path} exists but cannot be read (${error.message}). Every run fails here — discovery never reaches a lower-priority config.`);
+                break;
+            }
+            if (explicit) {
+                // Discovery treats a missing candidate as "try the next one", but
+                // an explicitly named config has no next one: a real run calls
+                // loadConfigFile on it and fails. Reporting built-in defaults here
+                // would describe a run that cannot happen, and hide the typo.
+                problems.push(`${candidate.path} does not exist, but ${candidate.label} names it — every run with this setting fails. `
+                    + 'Fix the path, or drop the setting to fall back to config discovery.');
+            }
+        }
+    }
+    const winner = unreadable ?? present[0];
+    const shadowed = unreadable ? [] : present.slice(1);
+    if (winner && shadowed.length > 0 && winner.label.startsWith('project')) {
+        problems.push(`${winner.path} outranks ${shadowed.map((entry) => entry.path).join(' and ')} for runs started in this directory. `
+            + 'Run from elsewhere, or pass --config to pick one explicitly.');
+    }
+    let fileConfig = {};
+    let configFatal = unreadable !== undefined;
+    if (winner && !unreadable) {
+        try {
+            fileConfig = await loadConfigFile(winner.path);
+        }
+        catch (error) {
+            // resolveRuntimeConfig propagates this — no run reaches provider or
+            // credential resolution, so presenting defaults as resolved settings
+            // would describe a run that cannot happen.
+            configFatal = true;
+            problems.push(`${winner.path} could not be parsed (${error.message}). Every run fails until it is fixed or removed.`);
+            warn(`ignoring unreadable config ${winner.path}`);
+        }
+    }
+    // Which variable supplied a value, not just the value: naming the wrong
+    // one sends the reader to unset something that was never the cause,
+    // leaving the real override in place.
+    const envPick = (name) => {
+        const value = readNonEmptyString(processEnv[name]);
+        return typeof value === 'string' ? { name, value } : undefined;
+    };
+    /**
+     * The verdict comes from the resolver, not from a second copy of its
+     * rules. Everything below only *attributes* values to the file or
+     * variable that supplied them — which the resolver does not report —
+     * while whether a run works at all, and what it bills, is whatever
+     * resolveRuntimeConfig actually returns or throws.
+     */
+    const envSoul = envPick('STRATUS_SOUL');
+    // The file's soul under the resolver's trust rule: a project-local file
+    // does not name one, so doctor must not attribute one to it.
+    const soulValue = envSoul?.value ?? (winner?.label === 'project' ? undefined : fileConfig.soul);
+    const soulSource = envSoul ? envSoul.name : (winner ? winner.path : '');
+    const soulPath = typeof soulValue === 'string' ? path.resolve(cwd, soulValue) : undefined;
+    // Loaded here for ATTRIBUTION only — the soul's frontmatter is what
+    // explains a provider nobody wrote in a config file. Whether a run works
+    // is still the resolver's verdict below.
+    const soul = soulPath ? await loadSoulFile(soulPath).catch(() => undefined) : undefined;
+    let resolved;
+    if (!configFatal) {
+        try {
+            resolved = await resolveStateRuntimeConfig(command.configPath ? { configPath: command.configPath } : {}, env);
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            problems.push(`No run can start: ${message}`);
+            if (soulPath && /soul/i.test(message)) {
+                // Worth saying explicitly: a soul that fails to load is fatal, not
+                // a quiet downgrade to the built-in agent.
+                problems.push(`Every run fails until ${soulPath} is fixed or the soul setting is removed — the built-in agent is not substituted.`);
+            }
+        }
+    }
+    // A refused persona is a finding, not a silence: the file asks for a soul
+    // or a preamble, no run started here will use it, and a doctor that said
+    // "no soul configured" would be hiding the trust decision it exists to
+    // explain. The resolver's own record is the verdict — it already leaves
+    // out a key the environment outranked, which is not refused but beaten —
+    // and only when no run could resolve at all is the same rule applied
+    // here, so the finding still appears beside the failure that hid it.
+    const refusedByTrust = resolved?.ignoredFromUntrustedConfig
+        ?? ignoredUntrustedConfigKeys({}, fileConfig, winner ? { path: winner.path, trusted: winner.label !== 'project' } : undefined, env);
+    if (refusedByTrust) {
+        problems.push(`${refusedByTrust.path} sets ${refusedByTrust.keys.join(' and ')}, which an auto-discovered config does not get to choose — `
+            + `every run started here ignores ${refusedByTrust.keys.length === 1 ? 'it' : 'them'}. `
+            + ignoredConfigRemedy(refusedByTrust, false));
+    }
+    const envProviderPick = envPick('STRATUS_PROVIDER');
+    const providerSource = envProviderPick
+        ? envProviderPick.name
+        : soul?.provider
+            ? `${soulPath} (soul frontmatter)`
+            : fileConfig.provider
+                ? (winner?.path ?? 'config')
+                : 'built-in default — nothing set a provider';
+    // When resolution fails the intended provider is still worth reporting:
+    // "why is it anthropic" is exactly the question, and the problems below
+    // already say no run can start.
+    const intendedProvider = envProviderPick?.value ?? soul?.provider ?? fileConfig.provider ?? 'demo';
+    const provider = resolved
+        ? { value: resolved.provider, source: providerSource }
+        : { value: `${intendedProvider} (unreachable)`, source: providerSource };
+    if (provider.value === 'demo') {
+        // Setup writes the config file, which is the LOWEST precedence of the
+        // three — so when an env var or a soul chose demo, "run setup" is
+        // advice that changes nothing and leaves every run on demo.
+        const fix = envProviderPick
+            ? `Unset ${envProviderPick.name}; it outranks both your config and any soul.`
+            : soul?.provider === 'demo'
+                ? `Change or remove the provider pin in ${soulPath}; a soul outranks the config file.`
+                : fileConfig.provider === 'demo'
+                    ? `Change "provider" in ${winner?.path}, or run \`stratus setup\` → Providers.`
+                    : 'Run `stratus setup` → Providers and sign in, then Save & finish.';
+        problems.push(`Provider is the offline demo model, so replies are canned. ${fix}`);
+    }
+    let model;
+    if (resolved && resolved.provider !== 'demo') {
+        const envModel = envPick('STRATUS_MODEL');
+        // A soul's model belongs to the soul's provider, and the config's model
+        // to the config's provider — either can be stranded by an override.
+        // The soul's pin in resolved form, so a soul saying `ollama` matches
+        // the `plugin:ollama` the run resolved to.
+        const soulModelApplies = soul?.provider === undefined || parseProviderName(soul.provider, 'soul file') === resolved.provider;
+        const configModelApplies = (fileConfig.provider ?? 'openai') === resolved.provider;
+        model = {
+            value: resolved.model ?? 'the provider\'s own default',
+            source: envModel
+                ? envModel.name
+                : soulModelApplies && soul?.model === resolved.model
+                    ? `${soulPath} (soul frontmatter)`
+                    : configModelApplies && fileConfig.model === resolved.model
+                        ? (winner?.path ?? 'config')
+                        : 'built-in default for this provider',
+        };
+    }
+    const credentials = await loadCredentials(env);
+    const signIns = [];
+    const usedKeyEnvVar = resolved && isSignedInRuntime(resolved) ? resolved.apiKeyEnvVar : undefined;
+    const usesAuthToken = resolved?.provider === 'anthropic' && resolved.authToken !== undefined;
+    const fallback = resolved && resolved.provider !== 'demo' ? resolved.fallback : undefined;
+    for (const target of CREDENTIAL_PROVIDER_NAMES) {
+        const stored = credentials[target];
+        const label = stored?.type === 'oauth_token'
+            ? (target === 'codex' ? 'ChatGPT sign-in (codex login)' : 'Claude subscription (Pro/Max)')
+            : 'API key';
+        const isDefault = resolved?.provider === target;
+        const isFallback = fallback?.provider === target;
+        // A provider no resolved run consults is reported, never diagnosed:
+        // flagging an override on a credential nothing reads is a false alarm.
+        if (!isDefault && !isFallback) {
+            signIns.push({
+                provider: target,
+                status: stored
+                    ? `${label} (unused — ${resolved ? resolved.provider : 'nothing'} serves your runs)`
+                    : 'not signed in',
+            });
+            continue;
+        }
+        const envVar = isDefault ? usedKeyEnvVar : defaultApiKeyEnvName(target);
+        const viaEnv = isDefault
+            ? usedKeyEnvVar !== undefined
+            : fallback?.apiKey !== undefined && fallback.apiKey === readNonEmptyString(processEnv[String(envVar)]);
+        const where = isDefault ? 'runs are' : 'fallback runs are';
+        if (stored && viaEnv) {
+            signIns.push({ provider: target, status: `${label}, overridden by ${envVar} in your environment` });
+            // The costly case: an env key silently demotes a subscription to
+            // per-token billing, and nothing in a normal run says so.
+            problems.push(stored.type === 'oauth_token'
+                ? `${envVar} in your environment outranks your saved ${target} subscription sign-in, so ${where} billed per token instead of through your plan. Unset it (check your shell profile) to use the subscription.`
+                : `${envVar} in your environment outranks your saved ${target} sign-in. Unset it to use the one \`stratus setup\` stored.`);
+            continue;
+        }
+        if (viaEnv) {
+            signIns.push({ provider: target, status: `using ${envVar} from your environment` });
+            continue;
+        }
+        if (stored) {
+            signIns.push({ provider: target, status: isDefault && usesAuthToken ? `${label} — runs go through the Claude Code runtime` : label });
+            continue;
+        }
+        signIns.push({ provider: target, status: 'not signed in' });
+    }
+    // A fallback the resolver dropped is the quiet failure: the config still
+    // names one, but a failing primary has nothing to retry on.
+    if (fileConfig.fallbackModel !== undefined && resolved && resolved.provider !== 'demo' && !fallback) {
+        problems.push(`A fallback model (${fileConfig.fallbackModel}) is configured but could not be resolved — usually no sign-in for its provider, or an endpoint its saved key is not sent to. `
+            + 'A failing primary model has nothing to retry on.');
+    }
+    const channels = await loadChannelCredentials(env);
+    const slackAgents = Object.keys(channels.slack ?? {}).sort();
+    const slackPackageInstalled = (await loadSlackAdapter()) !== undefined;
+    if (slackAgents.length > 0 && !slackPackageInstalled) {
+        problems.push(`Slack tokens are stored for ${slackAgents.length} agent(s) but @stratusagent/channel-slack is not installed, so \`stratus serve\` skips them. `
+            + 'Install it with: npm install -g @stratusagent/channel-slack');
+    }
+    let rosterCount = 0;
+    try {
+        rosterCount = (await readdir(agentsDirPath(env))).filter((file) => file.endsWith('.md')).length;
+    }
+    catch (error) {
+        if (error.code !== 'ENOENT') {
+            throw error;
+        }
+    }
+    // Tokens keyed to an agent the roster no longer has are loaded and
+    // skipped on every start, silently.
+    let rosterEntries = [];
+    let rosterLoaded = true;
+    try {
+        rosterEntries = await loadRosterSouls(env, warn);
+    }
+    catch (error) {
+        // Doctor exists to name problems, so a roster it cannot load is a
+        // finding to report — not an exception that replaces the report.
+        rosterLoaded = false;
+        problems.push(error instanceof Error ? error.message : String(error));
+    }
+    const rosterIds = new Set(rosterEntries.map((entry) => entry.soul.agent.id));
+    rosterIds.add(DEFAULT_STRATUS_AGENT.id);
+    if (soul) {
+        rosterIds.add(soul.agent.id);
+    }
+    // Only against a roster that actually loaded. "No agent has this id" is
+    // a claim about the roster, and a refused one cannot support it — every
+    // stored token would be reported as orphaned, and this advises clearing
+    // them. Advice is not deletion, but an operator who follows it loses the
+    // same credentials by hand.
+    const orphans = rosterLoaded ? slackAgents.filter((id) => !rosterIds.has(id)) : [];
+    if (orphans.length > 0) {
+        problems.push(`Slack tokens are stored for ${orphans.join(', ')}, which no agent matches — \`stratus serve\` skips them. `
+            + 'Clear them from `stratus setup` → Channels.');
+    }
+    // The invisible failure doctor exists to surface: the service unit embeds
+    // absolute node and entrypoint paths, and upgrading node (an nvm version
+    // directory, say) leaves the unit pointing at an interpreter that no
+    // longer exists. The service stops working and nothing else says so.
+    const unitCommand = await readServiceCommand(serviceEnvFor(env));
+    if (unitCommand?.execPath !== undefined && !(await pathExists(unitCommand.execPath))) {
+        problems.push(`The service unit points at a node interpreter that no longer exists (${unitCommand.execPath}), so stratusd cannot start. `
+            + 'Run `stratus update` (or `stratus service install`) to rewrite it with current paths.');
+    }
+    if (unitCommand?.scriptPath !== undefined && !(await pathExists(unitCommand.scriptPath))) {
+        problems.push(`The service unit points at a CLI entrypoint that no longer exists (${unitCommand.scriptPath}), so stratusd cannot start. `
+            + 'Run `stratus update` (or `stratus service install`) to rewrite it with current paths.');
+    }
+    return {
+        ...(winner ? { configInUse: winner.path } : {}),
+        configShadowed: shadowed.map((entry) => entry.path),
+        provider,
+        ...(model ? { model } : {}),
+        ...(soulPath ? { soul: { value: soulPath, source: soulSource } } : {}),
+        ...(soul ? { agent: `${soul.agent.name} (${soul.agent.id})` } : {}),
+        ...(fallback ? { fallback: { provider: fallback.provider, model: fallback.model } } : {}),
+        signIns,
+        slackAgents,
+        slackPackageInstalled,
+        rosterCount,
+        problems,
+    };
+};
+export const runDoctor = async (command, streams, env = {}) => {
+    const report = await collectDoctorReport(command, (message) => {
+        writeLine(streams.stderr, `Warning: ${message}.`);
+    }, env);
+    if (command.format === 'json') {
+        writeLine(streams.stdout, JSON.stringify(report, null, 2));
+        return report.problems.length > 0 ? 1 : 0;
+    }
+    const field = (label, setting) => {
+        if (!setting) {
+            return;
+        }
+        writeLine(streams.stdout, `  ${label.padEnd(10)}${setting.value}`);
+        writeLine(streams.stdout, `  ${''.padEnd(10)}from ${setting.source}`);
+    };
+    writeLine(streams.stdout, 'Stratus Agent — what a run would use right now');
+    writeLine(streams.stdout);
+    field('provider', report.provider);
+    field('model', report.model);
+    field('soul', report.soul);
+    if (report.agent) {
+        writeLine(streams.stdout, `  ${'agent'.padEnd(10)}${report.agent}`);
+    }
+    else if (report.soul) {
+        // A soul is configured but did not load — saying "built-in" here would
+        // describe a run that cannot happen.
+        writeLine(streams.stdout, `  ${'agent'.padEnd(10)}unresolved — the configured soul could not be read`);
+    }
+    else {
+        writeLine(streams.stdout, `  ${'agent'.padEnd(10)}${DEFAULT_STRATUS_AGENT.name} (built-in — no soul configured)`);
+    }
+    writeLine(streams.stdout);
+    writeLine(streams.stdout, 'Files');
+    writeLine(streams.stdout, `  config    ${report.configInUse ?? 'none found — built-in defaults apply'}`);
+    for (const shadowedPath of report.configShadowed) {
+        writeLine(streams.stdout, `            (${shadowedPath} exists but is outranked)`);
+    }
+    writeLine(streams.stdout, `  agents    ${report.rosterCount} soul file${report.rosterCount === 1 ? '' : 's'}`);
+    if (report.fallback) {
+        writeLine(streams.stdout, `  ${'fallback'.padEnd(10)}${report.fallback.provider} · ${report.fallback.model}`);
+        writeLine(streams.stdout, `  ${''.padEnd(10)}used when the default model errors mid-run`);
+    }
+    writeLine(streams.stdout);
+    writeLine(streams.stdout, 'Sign-ins');
+    for (const entry of report.signIns) {
+        writeLine(streams.stdout, `  ${entry.provider.padEnd(10)}${entry.status}`);
+    }
+    writeLine(streams.stdout);
+    writeLine(streams.stdout, 'Channels');
+    writeLine(streams.stdout, `  slack     ${report.slackAgents.length === 0
+        ? 'no agents connected'
+        : `${report.slackAgents.length} connected (${report.slackAgents.join(', ')})`}`);
+    writeLine(streams.stdout, `            @stratusagent/channel-slack ${report.slackPackageInstalled ? 'installed' : 'not installed'}`);
+    writeLine(streams.stdout);
+    if (report.problems.length === 0) {
+        writeLine(streams.stdout, 'No problems found.');
+        return 0;
+    }
+    writeLine(streams.stdout, `${report.problems.length} problem${report.problems.length === 1 ? '' : 's'} found:`);
+    for (const problem of report.problems) {
+        writeLine(streams.stdout, `  ! ${problem}`);
+    }
+    return 1;
+};
+//# sourceMappingURL=doctor.js.map

package/dist/commands/doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,qBAAqB,EACrB,gBAAgB,EAChB,sBAAsB,EACtB,eAAe,EACf,eAAe,EACf,YAAY,EACZ,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,oBAAoB,EACpB,uBAAuB,EACvB,cAAc,EACd,oBAAoB,IAAI,yBAAyB,EACjD,yBAAyB,EAKzB,0BAA0B,GAC3B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AA0BjD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EACtC,OAA4B,EAC5B,IAA+B,EAC/B,MAAsB,EAAE,EACD,EAAE;IACzB,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,qEAAqE;IACrE,qEAAqE;IACrE,yDAAyD;IACzD,uEAAuE;IACvE,kEAAkE;IAClE,wEAAwE;IACxE,0CAA0C;IAC1C,MAAM,cAAc,GAAG,OAAO,CAAC,UAAU,KAAK,SAAS;QACrD,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,UAAU,EAAE;QACjD,CAAC,CAAC,kBAAkB,CAAC,UAAU,CAAC,cAAc,CAAC;YAC7C,CAAC,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE;YACtE,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,QAAQ,GAAG,cAAc,EAAE,KAAK,CAAC;IACvC,MAAM,UAAU,GAAG,cAAc;QAC/B,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,cAAc,CAAC,IAAI,EAAE,CAAC;QACjF,CAAC,CAAC;YACE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,uBAAuB,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE;YACnE,EAAE,IAAI,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE;SACjD,CAAC;IACN,MAAM,OAAO,GAA2C,EAAE,CAAC;IAC3D,IAAI,UAAuD,CAAC;IAC5D,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACvC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;YACnD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,gEAAgE;gBAChE,mEAAmE;gBACnE,+DAA+D;gBAC/D,UAAU,GAAG,SAAS,CAAC;gBACvB,QAAQ,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,IAAI,+BAAgC,KAAe,CAAC,OAAO,4EAA4E,CAAC,CAAC;gBACpK,MAAM;YACR,CAAC;YACD,IAAI,QAAQ,EAAE,CAAC;gBACb,kEAAkE;gBAClE,+DAA+D;gBAC/D,mEAAmE;gBACnE,8DAA8D;gBAC9D,QAAQ,CAAC,IAAI,CACX,GAAG,SAAS,CAAC,IAAI,wBAAwB,SAAS,CAAC,KAAK,iDAAiD;sBACvG,qEAAqE,CACxE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACpD,IAAI,MAAM,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACxE,QAAQ,CAAC,IAAI,CACX,GAAG,MAAM,CAAC,IAAI,aAAa,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,uCAAuC;cACjH,8DAA8D,CACjE,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,GAAsB,EAAE,CAAC;IACvC,IAAI,WAAW,GAAG,UAAU,KAAK,SAAS,CAAC;IAC3C,IAAI,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,UAAU,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,oEAAoE;YACpE,qEAAqE;YACrE,2CAA2C;YAC3C,WAAW,GAAG,IAAI,CAAC;YACnB,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,yBAA0B,KAAe,CAAC,OAAO,kDAAkD,CAAC,CAAC;YACjI,IAAI,CAAC,8BAA8B,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,oEAAoE;IACpE,sCAAsC;IACtC,MAAM,OAAO,GAAG,CAAC,IAAY,EAA+C,EAAE;QAC5E,MAAM,KAAK,GAAG,kBAAkB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QACnD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACjE,CAAC,CAAC;IAEF;;;;;;OAMG;IACH,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACxC,wEAAwE;IACxE,6DAA6D;IAC7D,MAAM,SAAS,GAAG,OAAO,EAAE,KAAK,IAAI,CAAC,MAAM,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAChG,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1F,oEAAoE;IACpE,yEAAyE;IACzE,yCAAyC;IACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAExF,IAAI,QAAmC,CAAC;IACxC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,yBAAyB,CACxC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,EAC5D,GAAG,CACJ,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,QAAQ,CAAC,IAAI,CAAC,qBAAqB,OAAO,EAAE,CAAC,CAAC;YAC9C,IAAI,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtC,mEAAmE;gBACnE,2CAA2C;gBAC3C,QAAQ,CAAC,IAAI,CACX,yBAAyB,QAAQ,mFAAmF,CACrH,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,yEAAyE;IACzE,uEAAuE;IACvE,wEAAwE;IACxE,yEAAyE;IACzE,qEAAqE;IACrE,qEAAqE;IACrE,MAAM,cAAc,GAAG,QAAQ,EAAE,0BAA0B;WACtD,0BAA0B,CAAC,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACtI,IAAI,cAAc,EAAE,CAAC;QACnB,QAAQ,CAAC,IAAI,CACX,GAAG,cAAc,CAAC,IAAI,SAAS,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,6DAA6D;cAC3H,kCAAkC,cAAc,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI;cACtF,mBAAmB,CAAC,cAAc,EAAE,KAAK,CAAC,CAC7C,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACpD,MAAM,cAAc,GAAG,eAAe;QACpC,CAAC,CAAC,eAAe,CAAC,IAAI;QACtB,CAAC,CAAC,IAAI,EAAE,QAAQ;YACd,CAAC,CAAC,GAAG,QAAQ,qBAAqB;YAClC,CAAC,CAAC,UAAU,CAAC,QAAQ;gBACnB,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,IAAI,QAAQ,CAAC;gBAC5B,CAAC,CAAC,2CAA2C,CAAC;IACpD,wEAAwE;IACxE,wEAAwE;IACxE,gCAAgC;IAChC,MAAM,gBAAgB,GAAG,eAAe,EAAE,KAAK,IAAI,IAAI,EAAE,QAAQ,IAAI,UAAU,CAAC,QAAQ,IAAI,MAAM,CAAC;IACnG,MAAM,QAAQ,GAAkB,QAAQ;QACtC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE;QACtD,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,gBAAgB,gBAAgB,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAE3E,IAAI,QAAQ,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;QAC9B,sEAAsE;QACtE,kEAAkE;QAClE,4DAA4D;QAC5D,MAAM,GAAG,GAAG,eAAe;YACzB,CAAC,CAAC,SAAS,eAAe,CAAC,IAAI,8CAA8C;YAC7E,CAAC,CAAC,IAAI,EAAE,QAAQ,KAAK,MAAM;gBACzB,CAAC,CAAC,wCAAwC,QAAQ,oCAAoC;gBACtF,CAAC,CAAC,UAAU,CAAC,QAAQ,KAAK,MAAM;oBAC9B,CAAC,CAAC,wBAAwB,MAAM,EAAE,IAAI,yCAAyC;oBAC/E,CAAC,CAAC,kEAAkE,CAAC;QAC3E,QAAQ,CAAC,IAAI,CAAC,8DAA8D,GAAG,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,IAAI,KAAgC,CAAC;IACrC,IAAI,QAAQ,IAAI,QAAQ,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;QAC1C,wEAAwE;QACxE,oEAAoE;QACpE,qEAAqE;QACrE,2CAA2C;QAC3C,MAAM,gBAAgB,GAAG,IAAI,EAAE,QAAQ,KAAK,SAAS,IAAI,iBAAiB,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,KAAK,QAAQ,CAAC,QAAQ,CAAC;QAC7H,MAAM,kBAAkB,GAAG,CAAC,UAAU,CAAC,QAAQ,IAAI,QAAQ,CAAC,KAAK,QAAQ,CAAC,QAAQ,CAAC;QACnF,KAAK,GAAG;YACN,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,6BAA6B;YACtD,MAAM,EAAE,QAAQ;gBACd,CAAC,CAAC,QAAQ,CAAC,IAAI;gBACf,CAAC,CAAC,gBAAgB,IAAI,IAAI,EAAE,KAAK,KAAK,QAAQ,CAAC,KAAK;oBAClD,CAAC,CAAC,GAAG,QAAQ,qBAAqB;oBAClC,CAAC,CAAC,kBAAkB,IAAI,UAAU,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK;wBACzD,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,IAAI,QAAQ,CAAC;wBAC5B,CAAC,CAAC,oCAAoC;SAC7C,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;IAC/C,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,MAAM,aAAa,GAAG,QAAQ,IAAI,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IAClG,MAAM,aAAa,GAAG,QAAQ,EAAE,QAAQ,KAAK,WAAW,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,CAAC;IAC7F,MAAM,QAAQ,GAAG,QAAQ,IAAI,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAE1F,KAAK,MAAM,MAAM,IAAI,yBAAyB,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,MAAM,EAAE,IAAI,KAAK,aAAa;YAC1C,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,+BAA+B,CAAC;YAC1F,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,SAAS,GAAG,QAAQ,EAAE,QAAQ,KAAK,MAAM,CAAC;QAChD,MAAM,UAAU,GAAG,QAAQ,EAAE,QAAQ,KAAK,MAAM,CAAC;QAEjD,oEAAoE;QACpE,uEAAuE;QACvE,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,MAAM;gBAChB,MAAM,EAAE,MAAM;oBACZ,CAAC,CAAC,GAAG,KAAK,cAAc,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,oBAAoB;oBACpF,CAAC,CAAC,eAAe;aACpB,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,SAAS;YACtB,CAAC,CAAC,aAAa,KAAK,SAAS;YAC7B,CAAC,CAAC,QAAQ,EAAE,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,kBAAkB,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACzG,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC;QAE3D,IAAI,MAAM,IAAI,MAAM,EAAE,CAAC;YACrB,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,mBAAmB,MAAM,sBAAsB,EAAE,CAAC,CAAC;YACpG,iEAAiE;YACjE,0DAA0D;YAC1D,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,aAAa;gBACzC,CAAC,CAAC,GAAG,MAAM,4CAA4C,MAAM,6BAA6B,KAAK,8GAA8G;gBAC7M,CAAC,CAAC,GAAG,MAAM,4CAA4C,MAAM,6DAA6D,CAAC,CAAC;YAC9H,SAAS;QACX,CAAC;QACD,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,MAAM,wBAAwB,EAAE,CAAC,CAAC;YACpF,SAAS;QACX,CAAC;QACD,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,IAAI,aAAa,CAAC,CAAC,CAAC,GAAG,KAAK,4CAA4C,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACtI,SAAS;QACX,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,yEAAyE;IACzE,4DAA4D;IAC5D,IAAI,UAAU,CAAC,aAAa,KAAK,SAAS,IAAI,QAAQ,IAAI,QAAQ,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACpG,QAAQ,CAAC,IAAI,CACX,qBAAqB,UAAU,CAAC,aAAa,gIAAgI;cAC3K,kDAAkD,CACrD,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,GAAG,CAAC,CAAC;IACnD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7D,MAAM,qBAAqB,GAAG,CAAC,MAAM,gBAAgB,EAAE,CAAC,KAAK,SAAS,CAAC;IACvE,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC;QACrD,QAAQ,CAAC,IAAI,CACX,+BAA+B,WAAW,CAAC,MAAM,+FAA+F;cAC9I,6DAA6D,CAChE,CAAC;IACJ,CAAC;IAED,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,CAAC;QACH,WAAW,GAAG,CAAC,MAAM,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IAClG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IACD,mEAAmE;IACnE,oCAAoC;IACpC,IAAI,aAAa,GAAkB,EAAE,CAAC;IACtC,IAAI,YAAY,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC;QACH,aAAa,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,kEAAkE;QAClE,iEAAiE;QACjE,YAAY,GAAG,KAAK,CAAC;QACrB,QAAQ,CAAC,IAAI,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7E,SAAS,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;IACxC,IAAI,IAAI,EAAE,CAAC;QACT,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;IACD,wEAAwE;IACxE,wEAAwE;IACxE,wEAAwE;IACxE,yEAAyE;IACzE,4BAA4B;IAC5B,MAAM,OAAO,GAAG,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,QAAQ,CAAC,IAAI,CACX,+BAA+B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,2DAA2D;cAC1G,6CAA6C,CAChD,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,yEAAyE;IACzE,qEAAqE;IACrE,qEAAqE;IACrE,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;IACjE,IAAI,WAAW,EAAE,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACrF,QAAQ,CAAC,IAAI,CACX,wEAAwE,WAAW,CAAC,QAAQ,+BAA+B;cACzH,uFAAuF,CAC1F,CAAC;IACJ,CAAC;IACD,IAAI,WAAW,EAAE,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QACzF,QAAQ,CAAC,IAAI,CACX,sEAAsE,WAAW,CAAC,UAAU,+BAA+B;cACzH,uFAAuF,CAC1F,CAAC;IACJ,CAAC;IAED,OAAO;QACL,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,cAAc,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;QACnD,QAAQ;QACR,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3B,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,OAAO;QACP,WAAW;QACX,qBAAqB;QACrB,WAAW;QACX,QAAQ;KACT,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,SAAS,GAAG,KAAK,EAC5B,OAA4B,EAC5B,OAAmB,EACnB,MAAsB,EAAE,EACP,EAAE;IACnB,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE;QAC5D,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,OAAO,GAAG,CAAC,CAAC;IACpD,CAAC,EAAE,GAAG,CAAC,CAAC;IAER,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9B,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3D,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,OAAuB,EAAQ,EAAE;QAC7D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QACD,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QACnE,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACxE,CAAC,CAAC;IAEF,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,gDAAgD,CAAC,CAAC;IAC5E,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1B,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IACtE,CAAC;SAAM,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QACvB,uEAAuE;QACvE,qCAAqC;QACrC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,oDAAoD,CAAC,CAAC;IACzG,CAAC;SAAM,CAAC;QACN,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,qBAAqB,CAAC,IAAI,kCAAkC,CAAC,CAAC;IACpH,CAAC;IAED,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1B,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,eAAe,MAAM,CAAC,WAAW,IAAI,sCAAsC,EAAE,CAAC,CAAC;IACzG,KAAK,MAAM,YAAY,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QACjD,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,gBAAgB,YAAY,2BAA2B,CAAC,CAAC;IACrF,CAAC;IACD,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,eAAe,MAAM,CAAC,WAAW,aAAa,MAAM,CAAC,WAAW,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAE/G,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,MAAM,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;QAC9G,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,4CAA4C,CAAC,CAAC;IAC5F,CAAC;IAED,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1B,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACtC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1B,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACtC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,eAAe,MAAM,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;QACtE,CAAC,CAAC,qBAAqB;QACvB,CAAC,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,eAAe,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACnF,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,2CAA2C,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;IAErI,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1B,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;QAChD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,WAAW,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;IAChH,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,OAAO,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC,CAAC"}

package/dist/commands/grants.d.ts

@@ -0,0 +1,19 @@
+import type { CliStreams, CliEnvironment } from '../environment.ts';
+import type { ParsedGrantsCommand } from '../parse.ts';
+/**
+ * `stratus grants <agent>` and `stratus grants revoke <agent> …` — the
+ * operator's view of what an agent may do unattended, and the way to take
+ * one back.
+ *
+ * Through the running daemon when one says it is serving, and only then
+ * from the files, because of the daemon's cache: the store reads each
+ * agent's file once per process, so a revoke that edited the file behind a
+ * live daemon would leave the policy honouring a grant the listing no
+ * longer shows until the next restart. Going through `POST
+ * /agents/:id/grants/revoke` is what makes a revoke the next call's answer.
+ * A daemon that `gateway.json` names but that does not answer falls back
+ * to the files with a warning saying exactly that, since the file is still
+ * the truth for the next daemon to start.
+ */
+export declare const runGrants: (command: ParsedGrantsCommand, streams: CliStreams, env?: CliEnvironment) => Promise<number>;
+//# sourceMappingURL=grants.d.ts.map

package/dist/commands/grants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grants.d.ts","sourceRoot":"","sources":["../../src/commands/grants.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAQvD;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,SAAS,GACpB,SAAS,mBAAmB,EAC5B,SAAS,UAAU,EACnB,MAAK,cAAmB,KACvB,OAAO,CAAC,MAAM,CAmHhB,CAAC"}

package/dist/commands/grants.js

@@ -0,0 +1,128 @@
+import { createFileCommandWhitelist, describeAgentGrants, describeToolGrant, whitelistPathFor, } from '@stratusagent/permissions';
+import { agentsDirPath, gatewayInfoPath } from '@stratusagent/state';
+import { callRunningGateway, gatewayErrorMessage, readGatewayInfo } from "../daemon.js";
+import { writeLine } from "../io.js";
+/**
+ * `stratus grants <agent>` and `stratus grants revoke <agent> …` — the
+ * operator's view of what an agent may do unattended, and the way to take
+ * one back.
+ *
+ * Through the running daemon when one says it is serving, and only then
+ * from the files, because of the daemon's cache: the store reads each
+ * agent's file once per process, so a revoke that edited the file behind a
+ * live daemon would leave the policy honouring a grant the listing no
+ * longer shows until the next restart. Going through `POST
+ * /agents/:id/grants/revoke` is what makes a revoke the next call's answer.
+ * A daemon that `gateway.json` names but that does not answer falls back
+ * to the files with a warning saying exactly that, since the file is still
+ * the truth for the next daemon to start.
+ */
+export const runGrants = async (command, streams, env = {}) => {
+    const agentId = command.agentId;
+    const encoded = encodeURIComponent(agentId);
+    const base = command.gateway
+        ? command.gateway.replace(/\/+$/, '')
+        : (await readGatewayInfo(env))?.url.replace(/\/+$/, '');
+    const revocation = command.action === 'revoke'
+        ? command.tool !== undefined
+            ? { tool: command.tool }
+            : command.scope !== undefined
+                ? { scope: command.scope }
+                : { origin: command.origin ?? '' }
+        : undefined;
+    const named = revocation?.tool ?? revocation?.scope ?? revocation?.origin ?? '';
+    const fromFiles = async () => {
+        const store = createFileCommandWhitelist({
+            directory: agentsDirPath(env),
+            warn: (line) => writeLine(streams.stderr, `Warning: ${line}`),
+        });
+        if (revocation) {
+            const revoked = revocation.tool !== undefined
+                ? await store.forgetTool(agentId, revocation.tool)
+                : revocation.scope !== undefined
+                    ? await store.forgetScope(agentId, revocation.scope)
+                    : await store.forgetOrigin(agentId, revocation.origin ?? '');
+            return reportRevocation(revoked);
+        }
+        const listing = { agentId, ...describeAgentGrants(await store.grantsFor(agentId)) };
+        return render(listing, `${whitelistPathFor(agentsDirPath(env), agentId)}`);
+    };
+    const reportRevocation = (revoked) => {
+        if (!revoked) {
+            writeLine(streams.stderr, `${agentId} has no such grant. \`stratus grants ${agentId}\` lists what exists.`);
+            return 1;
+        }
+        writeLine(streams.stdout, `Revoked ${named} for ${agentId}.`);
+        return 0;
+    };
+    const render = (listing, source) => {
+        if (command.format === 'json') {
+            writeLine(streams.stdout, JSON.stringify({ ...listing, source }, null, 2));
+            return 0;
+        }
+        const total = listing.tools.length + listing.scopes.length + listing.origins.length;
+        if (total === 0) {
+            writeLine(streams.stdout, `${agentId} has no standing grants beyond the built-in safe list (${source}).`);
+            writeLine(streams.stdout, 'An "always allow" answered on one of its gated calls creates one.');
+            return 0;
+        }
+        writeLine(streams.stdout, `${agentId} may do this unattended, beyond the built-in safe list (${source}):`);
+        if (listing.tools.length > 0) {
+            writeLine(streams.stdout, '  tools');
+            for (const grant of listing.tools) {
+                const by = grant.grantedBy ? ` by ${grant.grantedBy}` : '';
+                const stale = grant.stale ? `  — stale: ${grant.stale}` : '';
+                writeLine(streams.stdout, `    ${describeToolGrant(grant)}  (granted ${grant.grantedAt}${by})${stale}`);
+            }
+        }
+        if (listing.scopes.length > 0) {
+            writeLine(streams.stdout, '  commands');
+            for (const row of listing.scopes) {
+                writeLine(streams.stdout, `    ${row.description}`);
+            }
+        }
+        if (listing.origins.length > 0) {
+            writeLine(streams.stdout, '  sites');
+            for (const row of listing.origins) {
+                writeLine(streams.stdout, `    ${row.origin}`);
+            }
+        }
+        writeLine(streams.stdout, `Take one back: stratus grants revoke ${agentId} --tool <name> | --scope "<command>" | --origin <origin>`);
+        return 0;
+    };
+    if (!base) {
+        return fromFiles();
+    }
+    let response;
+    try {
+        response = revocation
+            ? await callRunningGateway(env, command, base, `/api/v1/agents/${encoded}/grants/revoke`, revocation)
+            : await callRunningGateway(env, command, base, `/api/v1/agents/${encoded}/grants`, undefined, 'GET');
+    }
+    catch (error) {
+        if (command.gateway) {
+            throw error;
+        }
+        // Named by the file, not answering: a daemon that crashed leaves the
+        // file behind. The files are still the truth for the next one to
+        // start, so act on them — and say so, because if a daemon *is* alive
+        // behind a broken API it keeps its cached view until it restarts.
+        writeLine(streams.stderr, `Warning: ${gatewayInfoPath(env)} names a daemon at ${base}, but it did not answer `
+            + `(${error instanceof Error ? error.message : String(error)}). `
+            + `${revocation ? 'Revoking in' : 'Reading'} ${whitelistPathFor(agentsDirPath(env), agentId)} instead; `
+            + 'a daemon that is running will not notice until it restarts.');
+        return fromFiles();
+    }
+    if (response.status === 404 && revocation) {
+        return reportRevocation(false);
+    }
+    if (!response.ok) {
+        writeLine(streams.stderr, `Error: ${await gatewayErrorMessage(response)}`);
+        return 1;
+    }
+    if (revocation) {
+        return reportRevocation(true);
+    }
+    return render(await response.json(), `from the daemon at ${base}`);
+};
+//# sourceMappingURL=grants.js.map

package/dist/commands/grants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grants.js","sourceRoot":"","sources":["../../src/commands/grants.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,EAC1B,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,GAGjB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAExF,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AASrC;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,KAAK,EAC5B,OAA4B,EAC5B,OAAmB,EACnB,MAAsB,EAAE,EACP,EAAE;IACnB,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO;QAC1B,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACrC,CAAC,CAAC,CAAC,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAE1D,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,KAAK,QAAQ;QAC5C,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS;YAC1B,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE;YACxB,CAAC,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS;gBAC3B,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE;gBAC1B,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE;QACtC,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,KAAK,GAAG,UAAU,EAAE,IAAI,IAAI,UAAU,EAAE,KAAK,IAAI,UAAU,EAAE,MAAM,IAAI,EAAE,CAAC;IAEhF,MAAM,SAAS,GAAG,KAAK,IAAqB,EAAE;QAC5C,MAAM,KAAK,GAAG,0BAA0B,CAAC;YACvC,SAAS,EAAE,aAAa,CAAC,GAAG,CAAC;YAC7B,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,IAAI,EAAE,CAAC;SAC9D,CAAC,CAAC;QACH,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,KAAK,SAAS;gBAC3C,CAAC,CAAC,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC;gBAClD,CAAC,CAAC,UAAU,CAAC,KAAK,KAAK,SAAS;oBAC9B,CAAC,CAAC,MAAM,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC;oBACpD,CAAC,CAAC,MAAM,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,UAAU,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;YACjE,OAAO,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;QACD,MAAM,OAAO,GAAkB,EAAE,OAAO,EAAE,GAAG,mBAAmB,CAAC,MAAM,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACnG,OAAO,MAAM,CAAC,OAAO,EAAE,GAAG,gBAAgB,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7E,CAAC,CAAC;IAEF,MAAM,gBAAgB,GAAG,CAAC,OAAgB,EAAU,EAAE;QACpD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,OAAO,wCAAwC,OAAO,uBAAuB,CAAC,CAAC;YAC5G,OAAO,CAAC,CAAC;QACX,CAAC;QACD,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,KAAK,QAAQ,OAAO,GAAG,CAAC,CAAC;QAC9D,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,CAAC,OAAsB,EAAE,MAAc,EAAU,EAAE;QAChE,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC9B,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC3E,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;QACpF,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAChB,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,OAAO,0DAA0D,MAAM,IAAI,CAAC,CAAC;YAC1G,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,mEAAmE,CAAC,CAAC;YAC/F,OAAO,CAAC,CAAC;QACX,CAAC;QACD,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,OAAO,2DAA2D,MAAM,IAAI,CAAC,CAAC;QAC3G,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACrC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;gBAClC,MAAM,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7D,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,iBAAiB,CAAC,KAAK,CAAC,cAAc,KAAK,CAAC,SAAS,GAAG,EAAE,IAAI,KAAK,EAAE,CAAC,CAAC;YAC1G,CAAC;QACH,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;YACxC,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACjC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;QACD,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACrC,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBAClC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;QACD,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,wCAAwC,OAAO,0DAA0D,CAAC,CAAC;QACrI,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IAEF,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,SAAS,EAAE,CAAC;IACrB,CAAC;IAED,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,UAAU;YACnB,CAAC,CAAC,MAAM,kBAAkB,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,kBAAkB,OAAO,gBAAgB,EAAE,UAAU,CAAC;YACrG,CAAC,CAAC,MAAM,kBAAkB,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,kBAAkB,OAAO,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IACzG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,KAAK,CAAC;QACd,CAAC;QACD,qEAAqE;QACrE,iEAAiE;QACjE,qEAAqE;QACrE,kEAAkE;QAClE,SAAS,CACP,OAAO,CAAC,MAAM,EACd,YAAY,eAAe,CAAC,GAAG,CAAC,sBAAsB,IAAI,0BAA0B;cAClF,IAAI,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK;cAC/D,GAAG,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,IAAI,gBAAgB,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,YAAY;cACtG,6DAA6D,CAChE,CAAC;QACF,OAAO,SAAS,EAAE,CAAC;IACrB,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,UAAU,EAAE,CAAC;QAC1C,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,MAAM,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC3E,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAmB,EAAE,sBAAsB,IAAI,EAAE,CAAC,CAAC;AACtF,CAAC,CAAC"}

package/dist/commands/logs.d.ts

@@ -0,0 +1,9 @@
+import type { CliStreams, CliEnvironment } from '../environment.ts';
+import type { ParsedLogsCommand } from '../parse.ts';
+/**
+ * `stratus logs` — the daemon's structured log, filtered. `serve` streams
+ * to its own stdout, which is gone the moment it runs under a service
+ * manager; this reads the file it also writes, from any terminal.
+ */
+export declare const runLogs: (command: ParsedLogsCommand, streams: CliStreams, env?: CliEnvironment) => Promise<number>;
+//# sourceMappingURL=logs.d.ts.map

package/dist/commands/logs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logs.d.ts","sourceRoot":"","sources":["../../src/commands/logs.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEpE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAErD;;;;GAIG;AACH,eAAO,MAAM,OAAO,GAClB,SAAS,iBAAiB,EAC1B,SAAS,UAAU,EACnB,MAAK,cAAmB,KACvB,OAAO,CAAC,MAAM,CAkDhB,CAAC"}

package/dist/commands/logs.js

@@ -0,0 +1,58 @@
+import { logsDirPath } from '@stratusagent/state';
+import { currentLogPosition, formatLogRecord, readRecentRecords, tailLog, } from "../logs.js";
+import { writeLine } from "../io.js";
+/**
+ * `stratus logs` — the daemon's structured log, filtered. `serve` streams
+ * to its own stdout, which is gone the moment it runs under a service
+ * manager; this reads the file it also writes, from any terminal.
+ */
+export const runLogs = async (command, streams, env = {}) => {
+    const dir = logsDirPath(env);
+    const filter = {
+        ...(command.agentId ? { agentId: command.agentId } : {}),
+        ...(command.sessionId ? { sessionId: command.sessionId } : {}),
+    };
+    const emit = (record) => {
+        writeLine(streams.stdout, command.format === 'json' ? JSON.stringify(record) : formatLogRecord(record));
+    };
+    // Captured BEFORE the backlog is read: the daemon keeps writing while a
+    // large backlog prints, and a follower that takes its offset afterwards
+    // skips everything written in between — permanently.
+    const followFrom = command.follow ? await currentLogPosition(dir) : undefined;
+    // Bounded by the same offset the follower resumes from: without it, a
+    // record written between the two reads is printed by the backlog and
+    // then again by the stream.
+    const recent = await readRecentRecords(dir, command.limit, filter, followFrom);
+    for (const record of recent) {
+        emit(record);
+    }
+    if (!command.follow) {
+        if (recent.length === 0 && command.format === 'text') {
+            writeLine(streams.stdout, `No log records yet in ${dir}. Start the daemon with \`stratus serve\`.`);
+        }
+        return 0;
+    }
+    const controller = new AbortController();
+    const stop = () => controller.abort();
+    process.once('SIGINT', stop);
+    process.once('SIGTERM', stop);
+    env.shutdownSignal?.addEventListener('abort', stop, { once: true });
+    if (env.shutdownSignal?.aborted) {
+        stop();
+    }
+    try {
+        await tailLog({
+            dir,
+            filter,
+            ...(followFrom !== undefined ? { startPosition: followFrom } : {}),
+            signal: controller.signal,
+            onRecord: emit,
+        });
+    }
+    finally {
+        process.off('SIGINT', stop);
+        process.off('SIGTERM', stop);
+    }
+    return 0;
+};
+//# sourceMappingURL=logs.js.map