@vectle/cli 1.0.0 → 1.1.0

package/dist/release-manifest.js

@@ -0,0 +1,226 @@
+import { createHash, verify as verifySignature } from 'node:crypto';
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { atomicWriteJson, cachePath, ensureStateRoot } from './state.js';
+import { zeroRolloutThresholds } from './rollout.js';
+// Public verification keys are embedded in the client. Private signing keys
+// are deliberately absent from the repository and are only used by release
+// engineering outside the application runtime.
+export const EMBEDDED_RELEASE_PUBLIC_KEYS = {
+    vsk_cOqStz_60aMtduLFG2EDbA: 'MCowBQYDK2VwAyEAJqPomjYwutDWUqjELEZtefRk7dOVtXGSE2kBwvFF1CE=',
+    'vsk_9i-aLC97pC51-evxo7mOag': 'MCowBQYDK2VwAyEAxpRTzEYmfEAdpjOdkDcAjvYvmiwve6Qudfnr8aO5jmo=',
+    'vsk_DnzNxLJj9FOZ92P3KQIkuQ': 'MCowBQYDK2VwAyEAxe+CZptYKryGpuOjnwNE+Q58zcSyY/RTmfdj9ykCJLk=',
+};
+export const RELEASE_MANIFEST_MAX_BYTES = 98_304;
+export const RELEASE_MANIFEST_MAX_AGE_MS = 7 * 24 * 60 * 60 * 1_000;
+export const RELEASE_CLOCK_SKEW_MS = 5 * 60 * 1_000;
+function canonicalValue(value) {
+    if (typeof value === 'string')
+        return value.normalize('NFC');
+    if (Array.isArray(value))
+        return value.map(canonicalValue);
+    if (value && typeof value === 'object')
+        return Object.fromEntries(Object.entries(value).sort(([a], [b]) => a.localeCompare(b)).map(([key, child]) => [key.normalize('NFC'), canonicalValue(child)]));
+    return value;
+}
+export function canonicalManifestBytes(manifest) {
+    return Buffer.from(JSON.stringify(canonicalValue(manifest)), 'utf8');
+}
+export function canonicalEnvelopeBytes(envelope) {
+    return Buffer.from(JSON.stringify(canonicalValue(envelope)), 'utf8');
+}
+function semver(value) { return typeof value === 'string' && /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/u.test(value); }
+function timestamp(value) { return typeof value === 'string' && /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}Z$/u.test(value) && Number.isFinite(Date.parse(value)); }
+function exact(value, keys) { return Object.keys(value).length === keys.length && keys.every(key => Object.prototype.hasOwnProperty.call(value, key)); }
+function base64Url(value, bytes) { if (typeof value !== 'string' || !/^[A-Za-z0-9_-]+$/u.test(value))
+    return false; try {
+    return Buffer.from(value, 'base64url').byteLength === bytes && value.length === Math.ceil(bytes * 8 / 6);
+}
+catch {
+    return false;
+} }
+function compareVersion(left, right) {
+    const parse = (value) => { const match = /^(\d+)\.(\d+)\.(\d+)(?:-([^+]+))?/u.exec(value); return { major: Number(match[1]), minor: Number(match[2]), patch: Number(match[3]), pre: match[4] ?? '' }; };
+    const a = parse(left);
+    const b = parse(right);
+    for (const key of ['major', 'minor', 'patch'])
+        if (a[key] !== b[key])
+            return a[key] - b[key];
+    if (!a.pre && b.pre)
+        return 1;
+    if (a.pre && !b.pre)
+        return -1;
+    return a.pre.localeCompare(b.pre);
+}
+function tupleCompare(left, right) { for (let index = 0; index < Math.max(left.length, right.length); index += 1) {
+    const a = Buffer.from(left[index] ?? '', 'utf8');
+    const b = Buffer.from(right[index] ?? '', 'utf8');
+    const result = Buffer.compare(a, b);
+    if (result)
+        return result;
+} return 0; }
+function allowedUrl(value) { if (typeof value !== 'string' || Buffer.byteLength(value, 'utf8') > 2_048)
+    return false; try {
+    const url = new URL(value);
+    return url.protocol === 'https:' && (url.hostname === 'vectle.com' || url.hostname.endsWith('.vectle.com')) && !url.username && !url.password && !url.hash;
+}
+catch {
+    return false;
+} }
+function relativePath(value) { return typeof value === 'string' && value.length >= 1 && value.length <= 200 && !value.startsWith('/') && !value.includes('\\') && !value.includes('\0') && value.split('/').every(segment => Boolean(segment) && segment !== '.' && segment !== '..'); }
+function validArtifact(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return false;
+    const item = value;
+    if (!exact(item, ['artifact_kind', 'version', 'platform', 'architecture', 'url', 'sha256', 'size_bytes', 'package_integrity', 'license_notice_paths']) || !semver(item.version) || !allowedUrl(item.url) || typeof item.sha256 !== 'string' || !/^[0-9a-f]{64}$/u.test(item.sha256) || !Array.isArray(item.license_notice_paths) || item.license_notice_paths.length > 16 || item.license_notice_paths.some(path => !relativePath(path)) || new Set(item.license_notice_paths).size !== item.license_notice_paths.length)
+        return false;
+    const kind = item.artifact_kind;
+    const platform = item.platform;
+    const architecture = item.architecture;
+    if (!['cli_package', 'node_runtime', 'standalone'].includes(String(kind)) || !['any', 'darwin', 'linux', 'win32'].includes(String(platform)) || !['any', 'arm64', 'x64'].includes(String(architecture)))
+        return false;
+    const cap = kind === 'cli_package' ? 20 * 1024 * 1024 : kind === 'node_runtime' ? 150 * 1024 * 1024 : 100 * 1024 * 1024;
+    if (typeof item.size_bytes !== 'number' || !Number.isSafeInteger(item.size_bytes) || item.size_bytes < 1 || item.size_bytes > cap)
+        return false;
+    if (kind === 'cli_package')
+        return platform === 'any' && architecture === 'any' && typeof item.package_integrity === 'string' && /^sha512-[A-Za-z0-9+/]+={0,2}$/u.test(item.package_integrity) && item.license_notice_paths.length <= 16;
+    return platform !== 'any' && architecture !== 'any' && item.package_integrity === null && item.license_notice_paths.length >= 1;
+}
+function validAdapter(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return false;
+    const item = value;
+    return exact(item, ['client_family', 'platform', 'minimum_client_version', 'maximum_client_version', 'config_schema_version', 'maximum_capability']) && ['codex', 'claude_code', 'cursor', 'vscode'].includes(String(item.client_family)) && ['darwin', 'linux', 'win32'].includes(String(item.platform)) && semver(item.minimum_client_version) && (item.maximum_client_version === null || semver(item.maximum_client_version)) && (item.maximum_client_version === null || compareVersion(item.maximum_client_version, item.minimum_client_version) >= 0) && typeof item.config_schema_version === 'number' && Number.isSafeInteger(item.config_schema_version) && item.config_schema_version >= 1 && item.config_schema_version <= 65_535 && ['authorized_only', 'mcp_only', 'policy_and_mcp', 'full_lifecycle'].includes(String(item.maximum_capability));
+}
+function validBlocked(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return false;
+    const item = value;
+    return exact(item, ['artifact_kind', 'version', 'platform', 'architecture', 'reason_code']) && ['cli_package', 'node_runtime', 'standalone'].includes(String(item.artifact_kind)) && semver(item.version) && ['any', 'darwin', 'linux', 'win32'].includes(String(item.platform)) && ['any', 'arm64', 'x64'].includes(String(item.architecture)) && ['security', 'broken_release', 'incompatible', 'superseded'].includes(String(item.reason_code));
+}
+function validRollback(value) {
+    if (value === null)
+        return true;
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return false;
+    const item = value;
+    return exact(item, ['target_cli_version', 'from_cli_version', 'through_cli_version', 'reason_code']) && semver(item.target_cli_version) && semver(item.from_cli_version) && semver(item.through_cli_version) && compareVersion(item.from_cli_version, item.through_cli_version) <= 0 && compareVersion(item.target_cli_version, item.from_cli_version) < 0 && ['security', 'broken_release', 'critical_compatibility'].includes(String(item.reason_code));
+}
+export function validateReleaseManifestEnvelope(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return false;
+    const envelope = value;
+    if (!exact(envelope, ['schema_version', 'algorithm', 'key_id', 'manifest', 'signature']) || envelope.schema_version !== 'release-manifest-envelope-v1' || envelope.algorithm !== 'Ed25519' || typeof envelope.key_id !== 'string' || !/^vsk_[A-Za-z0-9_-]{22}$/u.test(envelope.key_id) || !base64Url(envelope.signature, 64))
+        return false;
+    if (!envelope.manifest || typeof envelope.manifest !== 'object' || Array.isArray(envelope.manifest))
+        return false;
+    const manifest = envelope.manifest;
+    const keys = ['schema_version', 'sequence', 'channel', 'issued_at', 'expires_at', 'minimum_supported_cli', 'recommended_cli', 'artifacts', 'adapters', 'rollouts', 'blocked_artifacts', 'rollback', 'signing_key_id'];
+    if (!exact(manifest, keys) || manifest.schema_version !== 'release-manifest-v1')
+        return false;
+    if (manifest.signing_key_id !== envelope.key_id || typeof manifest.signing_key_id !== 'string' || !/^vsk_[A-Za-z0-9_-]{22}$/u.test(manifest.signing_key_id))
+        return false;
+    if (typeof manifest.sequence !== 'number' || !Number.isSafeInteger(manifest.sequence) || manifest.sequence < 1 || manifest.channel !== 'stable' && manifest.channel !== 'beta' || !timestamp(manifest.issued_at) || !timestamp(manifest.expires_at) || Date.parse(manifest.expires_at) <= Date.parse(manifest.issued_at) || Date.parse(manifest.expires_at) > Date.parse(manifest.issued_at) + RELEASE_MANIFEST_MAX_AGE_MS || !semver(manifest.minimum_supported_cli) || !semver(manifest.recommended_cli))
+        return false;
+    if (!Array.isArray(manifest.artifacts) || manifest.artifacts.length < 1 || manifest.artifacts.length > 32 || !manifest.artifacts.every(validArtifact) || !Array.isArray(manifest.adapters) || manifest.adapters.length > 32 || !manifest.adapters.every(validAdapter) || !Array.isArray(manifest.blocked_artifacts) || manifest.blocked_artifacts.length > 64 || !manifest.blocked_artifacts.every(validBlocked) || !validRollback(manifest.rollback))
+        return false;
+    const artifacts = manifest.artifacts;
+    if (new Set(artifacts.map(item => [item.artifact_kind, item.version, item.platform, item.architecture, item.url].join('|'))).size !== artifacts.length || artifacts.some((item, index) => index > 0 && tupleCompare([String(artifacts[index - 1].artifact_kind), String(artifacts[index - 1].version), String(artifacts[index - 1].platform), String(artifacts[index - 1].architecture), String(artifacts[index - 1].url)], [String(item.artifact_kind), String(item.version), String(item.platform), String(item.architecture), String(item.url)]) > 0))
+        return false;
+    const adapters = manifest.adapters;
+    if (new Set(adapters.map(item => [item.client_family, item.platform, item.minimum_client_version, item.maximum_client_version ?? ''].join('|'))).size !== adapters.length || adapters.some((item, index) => index > 0 && tupleCompare([String(adapters[index - 1].client_family), String(adapters[index - 1].platform), String(adapters[index - 1].minimum_client_version), String(adapters[index - 1].maximum_client_version ?? '')], [String(item.client_family), String(item.platform), String(item.minimum_client_version), String(item.maximum_client_version ?? '')]) > 0))
+        return false;
+    const blocked = manifest.blocked_artifacts;
+    if (new Set(blocked.map(item => [item.artifact_kind, item.version, item.platform, item.architecture].join('|'))).size !== blocked.length || blocked.some((item, index) => index > 0 && tupleCompare([String(blocked[index - 1].artifact_kind), String(blocked[index - 1].version), String(blocked[index - 1].platform), String(blocked[index - 1].architecture)], [String(item.artifact_kind), String(item.version), String(item.platform), String(item.architecture)]) > 0))
+        return false;
+    const expectedRollouts = Object.keys(zeroRolloutThresholds());
+    const rollouts = manifest.rollouts;
+    if (!rollouts || typeof rollouts !== 'object' || Array.isArray(rollouts) || !exact(rollouts, expectedRollouts) || Object.values(rollouts).some(item => typeof item !== 'number' || !Number.isSafeInteger(item) || item < 0 || item > 10_000))
+        return false;
+    if (manifest.rollback !== null && (!manifest.rollback || typeof manifest.rollback !== 'object' || Array.isArray(manifest.rollback)))
+        return false;
+    if (Buffer.byteLength(JSON.stringify(value), 'utf8') > RELEASE_MANIFEST_MAX_BYTES)
+        return false;
+    return true;
+}
+export function verifyReleaseManifest(envelope, now = Date.now(), publicKeys = EMBEDDED_RELEASE_PUBLIC_KEYS) {
+    if (!validateReleaseManifestEnvelope(envelope))
+        return { ok: false, code: 'invalid_manifest' };
+    const typed = envelope;
+    const key = publicKeys[typed.key_id];
+    if (!key)
+        return { ok: false, code: 'unknown_key' };
+    const issued = Date.parse(typed.manifest.issued_at);
+    const expires = Date.parse(typed.manifest.expires_at);
+    if (now + RELEASE_CLOCK_SKEW_MS < issued || now - RELEASE_CLOCK_SKEW_MS > expires)
+        return { ok: false, code: 'expired_manifest' };
+    try {
+        const valid = verifySignature(null, canonicalManifestBytes(typed.manifest), { key: Buffer.from(key, 'base64'), format: 'der', type: 'spki' }, Buffer.from(typed.signature, 'base64url'));
+        if (!valid)
+            return { ok: false, code: 'bad_signature' };
+    }
+    catch {
+        return { ok: false, code: 'bad_signature' };
+    }
+    return { ok: true, envelope: typed, etag: createHash('sha256').update(canonicalEnvelopeBytes(typed)).digest('hex') };
+}
+export function manifestCacheFile(root) { return join(cachePath(root), 'release-manifest.json'); }
+export function readCachedManifest(root, now = Date.now()) {
+    try {
+        const envelope = JSON.parse(readFileSync(manifestCacheFile(root), 'utf8'));
+        const verified = verifyReleaseManifest(envelope, now);
+        if (!verified.ok)
+            return { envelope: null, state: verified.code, etag: null };
+        return { envelope: verified.envelope, state: verified.envelope.manifest.expires_at && now - RELEASE_CLOCK_SKEW_MS <= Date.parse(verified.envelope.manifest.expires_at) ? 'live' : 'expired', etag: verified.etag };
+    }
+    catch {
+        return { envelope: null, state: 'unchecked', etag: null };
+    }
+}
+export function acceptCachedManifest(root, envelope) {
+    const verified = verifyReleaseManifest(envelope);
+    if (!verified.ok)
+        throw new Error(verified.code);
+    ensureStateRoot(root);
+    const current = readCachedManifest(root);
+    if (current.envelope && envelope.manifest.sequence < current.envelope.manifest.sequence)
+        throw new Error('manifest_replay');
+    atomicWriteJson(manifestCacheFile(root), envelope);
+    return verified;
+}
+export async function fetchReleaseManifest(endpoint, root, options = {}) {
+    const fetchImpl = options.fetchImpl ?? fetch;
+    const cached = readCachedManifest(root, options.now);
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), options.timeoutMs ?? 2_000);
+    try {
+        const headers = { Accept: 'application/json' };
+        if (cached.etag)
+            headers['If-None-Match'] = `"${cached.etag}"`;
+        const url = new URL('/api/v1/cli/releases/manifest', endpoint);
+        const response = await fetchImpl(url, { method: 'GET', headers, redirect: 'error', signal: controller.signal });
+        const etag = response.headers.get('etag')?.replace(/^"|"$/gu, '') ?? cached.etag;
+        if (response.status === 304 && cached.envelope)
+            return { envelope: cached.envelope, state: 'live', etag };
+        if (!response.ok)
+            throw new Error(`manifest_http_${response.status}`);
+        const body = await response.json();
+        const verified = verifyReleaseManifest(body, options.now);
+        if (!verified.ok)
+            throw new Error(verified.code);
+        if (cached.envelope && verified.envelope.manifest.sequence < cached.envelope.manifest.sequence)
+            throw new Error('manifest_replay');
+        if (options.persist !== false)
+            acceptCachedManifest(root, verified.envelope);
+        return { envelope: verified.envelope, state: 'live', etag: verified.etag };
+    }
+    catch (error) {
+        if (cached.envelope && cached.state === 'live')
+            return { envelope: cached.envelope, state: 'cached', etag: cached.etag, error: error instanceof Error ? error.message : 'manifest_unavailable' };
+        return { envelope: null, state: 'unavailable', etag: null, error: error instanceof Error ? error.message : 'manifest_unavailable' };
+    }
+    finally {
+        clearTimeout(timeout);
+    }
+}
+//# sourceMappingURL=release-manifest.js.map

package/dist/release-manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"release-manifest.js","sourceRoot":"","sources":["../src/release-manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,aAAa,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAA0B,MAAM,cAAc,CAAC;AAO7E,4EAA4E;AAC5E,2EAA2E;AAC3E,+CAA+C;AAC/C,MAAM,CAAC,MAAM,4BAA4B,GAAqC;IAC5E,0BAA0B,EAAE,8DAA8D;IAC1F,4BAA4B,EAAE,8DAA8D;IAC5F,4BAA4B,EAAE,8DAA8D;CAC7F,CAAC;AACF,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAM,CAAC;AACjD,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;AACpE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;AAEpD,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC7D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC3D,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAChO,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,QAAyB;IAC9D,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,QAAiC;IACtE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,IAAI,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,sFAAsF,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC3K,SAAS,SAAS,CAAC,KAAc,IAAI,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,yCAAyC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACvK,SAAS,KAAK,CAAC,KAA8B,EAAE,IAAc,IAAI,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3L,SAAS,SAAS,CAAC,KAAc,EAAE,KAAa,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC;IAAE,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC;IAAC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,UAAU,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AAAC,CAAC;AAAC,MAAM,CAAC;IAAC,OAAO,KAAK,CAAC;AAAC,CAAC,CAAC,CAAC;AAChR,SAAS,cAAc,CAAC,IAAY,EAAE,KAAa;IACjD,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,EAAE,GAAG,MAAM,KAAK,GAAG,oCAAoC,CAAC,IAAI,CAAC,KAAK,CAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACjN,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IAAC,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAC9C,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAU;QAAE,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;IACtG,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG;QAAE,OAAO,CAAC,CAAC;IAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG;QAAE,OAAO,CAAC,CAAC,CAAC;IAAC,OAAO,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AACnG,CAAC;AACD,SAAS,YAAY,CAAC,IAAc,EAAE,KAAe,IAAI,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;IAAC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;IAAC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;IAAC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAAC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;AAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAC1T,SAAS,UAAU,CAAC,KAAc,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,KAAK;IAAE,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC;IAAC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAAC,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;AAAC,CAAC;AAAC,MAAM,CAAC;IAAC,OAAO,KAAK,CAAC;AAAC,CAAC,CAAC,CAAC;AACxV,SAAS,YAAY,CAAC,KAAc,IAAI,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC;AAEjS,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,MAAM,IAAI,GAAG,KAAgC,CAAC;IAC9C,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,eAAe,EAAE,SAAS,EAAE,UAAU,EAAE,cAAc,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,mBAAmB,EAAE,sBAAsB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,IAAI,CAAC,oBAAoB,CAAC,MAAM,GAAG,EAAE,IAAI,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,oBAAiC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,oBAAoB,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACphB,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC;IAAC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAAC,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;IACxG,IAAI,CAAC,CAAC,aAAa,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACtN,MAAM,GAAG,GAAG,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;IACxH,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,UAAU,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,GAAG,GAAG;QAAE,OAAO,KAAK,CAAC;IAChJ,IAAI,IAAI,KAAK,aAAa;QAAE,OAAO,QAAQ,KAAK,KAAK,IAAI,YAAY,KAAK,KAAK,IAAI,OAAO,IAAI,CAAC,iBAAiB,KAAK,QAAQ,IAAI,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAK,IAAI,CAAC,oBAAkC,CAAC,MAAM,IAAI,EAAE,CAAC;IACxP,OAAO,QAAQ,KAAK,KAAK,IAAI,YAAY,KAAK,KAAK,IAAI,IAAI,CAAC,iBAAiB,KAAK,IAAI,IAAK,IAAI,CAAC,oBAAkC,CAAC,MAAM,IAAI,CAAC,CAAC;AACjJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,MAAM,IAAI,GAAG,KAAgC,CAAC;IAC9C,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,eAAe,EAAE,UAAU,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,oBAAoB,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,sBAAsB,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,sBAAsB,KAAK,IAAI,IAAI,cAAc,CAAC,IAAI,CAAC,sBAAgC,EAAE,IAAI,CAAC,sBAAgC,CAAC,IAAI,CAAC,CAAC,IAAI,OAAO,IAAI,CAAC,qBAAqB,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,IAAI,CAAC,qBAAqB,IAAI,CAAC,IAAI,IAAI,CAAC,qBAAqB,IAAI,MAAM,IAAI,CAAC,iBAAiB,EAAE,UAAU,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC;AACr1B,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,MAAM,IAAI,GAAG,KAAgC,CAAC;IAC9C,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,eAAe,EAAE,SAAS,EAAE,UAAU,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,gBAAgB,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;AACrb,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,MAAM,IAAI,GAAG,KAAgC,CAAC;IAC9C,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,oBAAoB,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,aAAa,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,gBAA0B,EAAE,IAAI,CAAC,mBAA6B,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,kBAA4B,EAAE,IAAI,CAAC,gBAA0B,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,gBAAgB,EAAE,wBAAwB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;AACpe,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,KAAc;IAC5D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,MAAM,QAAQ,GAAG,KAA2C,CAAC;IAC7D,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,gBAAgB,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC,IAAI,QAAQ,CAAC,cAAc,KAAK,8BAA8B,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3U,IAAI,CAAC,QAAQ,CAAC,QAAQ,IAAI,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAClH,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAA8C,CAAC;IACzE,MAAM,IAAI,GAAG,CAAC,gBAAgB,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,mBAAmB,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAC;IACtN,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,QAAQ,CAAC,cAAc,KAAK,qBAAqB;QAAE,OAAO,KAAK,CAAC;IAC9F,IAAI,QAAQ,CAAC,cAAc,KAAK,QAAQ,CAAC,MAAM,IAAI,OAAO,QAAQ,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1K,IAAI,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,GAAG,CAAC,IAAI,QAAQ,CAAC,OAAO,KAAK,QAAQ,IAAI,QAAQ,CAAC,OAAO,KAAK,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAoB,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAmB,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAoB,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAmB,CAAC,GAAG,2BAA2B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC;QAAE,OAAO,KAAK,CAAC;IACjiB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,QAAQ,CAAC,iBAAiB,CAAC,MAAM,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IACpc,MAAM,SAAS,GAAG,QAAQ,CAAC,SAA2C,CAAC;IACvE,IAAI,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,IAAI,YAAY,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACviB,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAA0C,CAAC;IACrE,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,sBAAsB,EAAE,IAAI,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,IAAI,YAAY,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/jB,MAAM,OAAO,GAAG,QAAQ,CAAC,iBAAmD,CAAC;IAC7E,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,IAAI,YAAY,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3d,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;IACnC,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,QAAmC,EAAE,gBAAgB,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,QAAmC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACjT,IAAI,QAAQ,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,IAAI,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAClJ,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,GAAG,0BAA0B;QAAE,OAAO,KAAK,CAAC;IAChG,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAiB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,aAA+C,4BAA4B;IACpJ,IAAI,CAAC,+BAA+B,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAc,EAAE,IAAI,EAAE,kBAA2B,EAAE,CAAC;IACjH,MAAM,KAAK,GAAG,QAAmC,CAAC;IAClD,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAc,EAAE,IAAI,EAAE,aAAsB,EAAE,CAAC;IACtE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACtD,IAAI,GAAG,GAAG,qBAAqB,GAAG,MAAM,IAAI,GAAG,GAAG,qBAAqB,GAAG,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAc,EAAE,IAAI,EAAE,kBAA2B,EAAE,CAAC;IACpJ,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,EAAE,sBAAsB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;QACzL,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,EAAE,EAAE,KAAc,EAAE,IAAI,EAAE,eAAwB,EAAE,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAc,EAAE,IAAI,EAAE,eAAwB,EAAE,CAAC;IAChE,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAChI,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAY,IAAI,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,uBAAuB,CAAC,CAAC,CAAC,CAAC;AAE1G,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAC/D,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAY,CAAC;QACtF,MAAM,QAAQ,GAAG,qBAAqB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACtD,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAc,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACxF,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,IAAI,GAAG,GAAG,qBAAqB,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;IACrN,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,QAAiC;IAClF,MAAM,QAAQ,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IACjD,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjD,eAAe,CAAC,IAAI,CAAC,CAAC;IACtB,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC5H,eAAe,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;IACnD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,QAAgB,EAAE,IAAY,EAAE,UAA6F,EAAE;IACxK,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC7C,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC;IACjF,IAAI,CAAC;QACH,MAAM,OAAO,GAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QACvE,IAAI,MAAM,CAAC,IAAI;YAAE,OAAO,CAAC,eAAe,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC;QAC/D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,+BAA+B,EAAE,QAAQ,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QAChH,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC;QACjF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,QAAQ;YAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAe,EAAE,IAAI,EAAE,CAAC;QACnH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACtE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAa,CAAC;QAC9C,MAAM,QAAQ,GAAG,qBAAqB,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1D,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,MAAM,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACnI,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK;YAAE,oBAAoB,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC7E,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAe,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;IACtF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,KAAK,KAAK,MAAM;YAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAiB,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,EAAE,CAAC;QAC1M,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,aAAsB,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,EAAE,CAAC;IAC/I,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;AACH,CAAC"}

package/dist/release.d.ts

@@ -15,7 +15,7 @@ type UpdateAudience = 'terminal' | 'mcp';
 export type UpdateState = {
     deliveredToMcp: boolean;
 };
-export declare function compareVersions(left: string, right: string): 0 | 1 | -1 | null;
+export declare function compareVersions(left: string, right: string): 1 | 0 | -1 | null;
 export declare function clientUpdateFrom(value: unknown): ClientUpdateNotice | null;
 export declare function processClientUpdate(body: unknown, config: VectleConfig, audience: UpdateAudience, state: UpdateState): unknown;
 export {};

package/dist/response.d.ts

@@ -3,3 +3,20 @@ export declare function writeEnvelope(result: Record<string, unknown>, extra?: R
     status: string;
     authorization: string;
 };
+export type CliResponse = {
+    schema_version: 'cli-response-v1';
+    ok: boolean;
+    operation: string;
+    status: string;
+    reason_code: string | null;
+    data: unknown;
+    user_summary: string;
+    next_action: string | null;
+};
+export declare function cliResponse(operation: string, status: string, data: unknown, options?: {
+    ok?: boolean;
+    reasonCode?: string | null;
+    userSummary?: string;
+    nextAction?: string | null;
+}): CliResponse;
+export declare function writeCliResponse(value: CliResponse): void;

package/dist/response.js

@@ -6,4 +6,19 @@ export function writeEnvelope(result, extra = {}) {
             : 'retained';
     return { status, authorization: 'standing_installation', ...extra, result };
 }
+export function cliResponse(operation, status, data, options = {}) {
+    return {
+        schema_version: 'cli-response-v1',
+        ok: options.ok ?? true,
+        operation,
+        status,
+        reason_code: options.reasonCode ?? null,
+        data,
+        user_summary: options.userSummary ?? '',
+        next_action: options.nextAction ?? null,
+    };
+}
+export function writeCliResponse(value) {
+    process.stdout.write(`${JSON.stringify(value)}\n`);
+}
 //# sourceMappingURL=response.js.map

package/dist/response.js.map

@@ -1 +1 @@
-{"version":3,"file":"response.js","sourceRoot":"","sources":["../src/response.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,aAAa,CAAC,MAA+B,EAAE,QAAiC,EAAE;IAChG,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;QAC9C,CAAC,CAAC,MAAM,CAAC,MAAM;QACf,CAAC,CAAC,MAAM,CAAC,SAAS,KAAK,IAAI;YACzB,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,UAAU,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,uBAAuB,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,CAAC;AAC9E,CAAC"}
+{"version":3,"file":"response.js","sourceRoot":"","sources":["../src/response.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,aAAa,CAAC,MAA+B,EAAE,QAAiC,EAAE;IAChG,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;QAC9C,CAAC,CAAC,MAAM,CAAC,MAAM;QACf,CAAC,CAAC,MAAM,CAAC,SAAS,KAAK,IAAI;YACzB,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,UAAU,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,uBAAuB,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,CAAC;AAC9E,CAAC;AAaD,MAAM,UAAU,WAAW,CAAC,SAAiB,EAAE,MAAc,EAAE,IAAa,EAAE,UAA0G,EAAE;IACxL,OAAO;QACL,cAAc,EAAE,iBAAiB;QACjC,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,IAAI;QACtB,SAAS;QACT,MAAM;QACN,WAAW,EAAE,OAAO,CAAC,UAAU,IAAI,IAAI;QACvC,IAAI;QACJ,YAAY,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE;QACvC,WAAW,EAAE,OAAO,CAAC,UAAU,IAAI,IAAI;KACxC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAkB;IACjD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AACrD,CAAC"}

package/dist/rollout.d.ts

@@ -0,0 +1,8 @@
+import type { VectleConfig } from './store.js';
+export type RolloutFeature = 'startup_lookup' | 'authenticated_updates' | 'automatic_finding_submission' | 'automatic_finding_correction' | 'client_codex_lifecycle' | 'client_claude_lifecycle' | 'client_cursor_lifecycle' | 'client_vscode_lifecycle';
+export type RolloutThresholds = Record<RolloutFeature, number>;
+export declare function rolloutBucket(seed: string, feature: RolloutFeature): number;
+export declare function rolloutEligible(seed: string, feature: RolloutFeature, threshold: number): boolean;
+export declare function rolloutDecision(config: Pick<VectleConfig, 'rollout_seed'>, feature: RolloutFeature, threshold: number): boolean;
+export declare function laneRolloutAllowed(config: Pick<VectleConfig, 'rollout_seed'>, feature: RolloutFeature, thresholds: Partial<RolloutThresholds>): boolean;
+export declare function zeroRolloutThresholds(): RolloutThresholds;

package/dist/rollout.js

@@ -0,0 +1,27 @@
+import { createHmac } from 'node:crypto';
+export function rolloutBucket(seed, feature) {
+    const digest = createHmac('sha256', seed).update(`vectle-rollout-v1\0${feature}`, 'utf8').digest();
+    return digest.readUInt32BE(0) % 10_000;
+}
+export function rolloutEligible(seed, feature, threshold) {
+    return Number.isInteger(threshold) && threshold >= 0 && threshold <= 10_000 && rolloutBucket(seed, feature) < threshold;
+}
+export function rolloutDecision(config, feature, threshold) {
+    return typeof config.rollout_seed === 'string' && config.rollout_seed.length > 0 && rolloutEligible(config.rollout_seed, feature, threshold);
+}
+export function laneRolloutAllowed(config, feature, thresholds) {
+    return rolloutDecision(config, feature, thresholds[feature] ?? 0);
+}
+export function zeroRolloutThresholds() {
+    return {
+        startup_lookup: 0,
+        authenticated_updates: 0,
+        automatic_finding_submission: 0,
+        automatic_finding_correction: 0,
+        client_codex_lifecycle: 0,
+        client_claude_lifecycle: 0,
+        client_cursor_lifecycle: 0,
+        client_vscode_lifecycle: 0,
+    };
+}
+//# sourceMappingURL=rollout.js.map

package/dist/rollout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rollout.js","sourceRoot":"","sources":["../src/rollout.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAMzC,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,OAAuB;IACjE,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,sBAAsB,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;IACnG,OAAO,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,OAAuB,EAAE,SAAiB;IACtF,OAAO,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,IAAI,SAAS,IAAI,MAAM,IAAI,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;AAC1H,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAA0C,EAAE,OAAuB,EAAE,SAAiB;IACpH,OAAO,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,eAAe,CAAC,MAAM,CAAC,YAAY,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;AAC/I,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAA0C,EAAE,OAAuB,EAAE,UAAsC;IAC5I,OAAO,eAAe,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,OAAO;QACL,cAAc,EAAE,CAAC;QACjB,qBAAqB,EAAE,CAAC;QACxB,4BAA4B,EAAE,CAAC;QAC/B,4BAA4B,EAAE,CAAC;QAC/B,sBAAsB,EAAE,CAAC;QACzB,uBAAuB,EAAE,CAAC;QAC1B,uBAAuB,EAAE,CAAC;QAC1B,uBAAuB,EAAE,CAAC;KAC3B,CAAC;AACJ,CAAC"}

package/dist/runtime.d.ts

@@ -0,0 +1,60 @@
+export type RuntimeProvider = 'stable_external' | 'vectle_managed' | 'ephemeral';
+export type PackageSource = 'global' | 'stable_local' | 'managed' | 'npx_cache' | 'unknown';
+export type RuntimeDescriptor = {
+    schema_version: 'runtime-descriptor-v1';
+    provider: RuntimeProvider;
+    package_source: PackageSource;
+    node_path: string;
+    node_version: string;
+    platform: NodeJS.Platform;
+    architecture: string;
+    node_sha256: `sha256:${string}` | null;
+    cli_entry: string;
+    cli_sha256: `sha256:${string}` | null;
+    durable: boolean;
+    reason_code: 'verified' | 'node_version_unsupported' | 'ephemeral_node' | 'ephemeral_package' | 'missing_entry' | 'unsafe_path' | 'unreadable';
+};
+export type ManagedRuntimePointer = {
+    schema_version: 'managed-runtime-v1';
+    state_root: string;
+    node_path: string;
+    cli_entry: string;
+    node_sha256: `sha256:${string}`;
+    cli_sha256: `sha256:${string}`;
+    cli_version: string;
+    updated_at: string;
+};
+export declare function digestFile(path: string): `sha256:${string}`;
+export declare function isEphemeralPath(path: string): boolean;
+export declare function classifyPackageSource(entryPath?: string): PackageSource;
+export declare function inspectCurrentRuntime(options?: {
+    nodePath?: string;
+    cliEntry?: string;
+    stateRoot?: string;
+}): RuntimeDescriptor;
+export declare function managedRuntimeRoot(stateRoot: string): string;
+export declare function managedRuntimePointerPath(stateRoot: string): string;
+export declare function readManagedRuntime(stateRoot: string): ManagedRuntimePointer | null;
+export declare function writeManagedRuntimePointer(pointer: ManagedRuntimePointer): void;
+export declare function durableRuntimeForSetup(stateRoot: string): {
+    descriptor: RuntimeDescriptor;
+    action: null;
+} | {
+    descriptor: RuntimeDescriptor;
+    action: string;
+};
+/**
+ * Copy the currently resolved runtime into a Vectle-owned, digest-addressed
+ * directory. This is deliberately local-only: setup never downloads code or
+ * changes a user's package manager. A valid pointer makes later setup/status
+ * runs independent of npx caches, Homebrew upgrades, or version-manager GC.
+ */
+export declare function provisionManagedRuntime(stateRoot: string, source: {
+    nodePath: string;
+    cliEntry: string;
+}): ManagedRuntimePointer;
+export declare function runtimeTestPaths(stateRoot: string, version: string, platform?: NodeJS.Platform, architecture?: NodeJS.Architecture): {
+    node: string;
+    cli: string;
+    launcher: string;
+};