@vibe-commit/capture 0.7.0 → 0.8.0

package/dist/commands/connect_account.d.ts

@@ -0,0 +1,135 @@
+/**
+ * What `connect` does with the account's grants (slice 2, S4 part 3): the changes it queues for the account, the turn-ons the
+ * account itself had turned off, the second question a joining machine is asked, and `g` — use the repositories the account
+ * already grants, on a machine with no credential.
+ *
+ * ```
+ *   changeOps(change, covered)          the account writes a picker change means, for the pending queue
+ *   splitAccountExclusions(change, …)   a repo the account turned off is a `turn on`, not an add
+ *   joiningMachine(ctx, …)              screen 2: "Your account also grants … Capture those here too?"
+ *   mintForG(ctx, …)                    `g`: sign in (the credential held in MEMORY behind a write-ahead row), then read the account's grants
+ *   commitG(ctx, g)                     the yes: credentials.json, then the row's deletion
+ *   settleG(ctx, deps, g)               the ONE finally: a run that did not commit revokes what `g` made and clears its row
+ * ```
+ *
+ * ⛔ LOADED LAZILY with `connect_picker.ts` (see its docblock): the picker path is a person at a terminal.
+ *
+ * ⛔ `g` IS THE ONE PLACE A CREDENTIAL IS MADE AHEAD OF CONSENT (exception 3), and it is kept honest by WRITE-AHEAD (`pending_revoke.ts`):
+ * the instant the server hands the token over a row for it is written, and the credential lives in memory — `credentials.json` does not
+ * exist before the person's yes. Whatever then ends the run short of the yes (a no, Ctrl+C, a kill, an unexpected throw) leaves a row the
+ * next verb revokes, never a live credential nothing remembers; the yes commits the grants, then `credentials.json`, then deletes the row.
+ * It is reached only from the picker's `g`, which is offered only where there is no credential and a browser to sign in with — so never
+ * from the `auth` chain (which has no browser, and always leaves a credential).
+ */
+import { readAccountState } from "../consent.js";
+import { saveCredential, type IngestCredential } from "../credential.js";
+import { type AccountSnapshot, type SyncOp } from "../grants_sync.js";
+import { type VerbSync, type VerbSyncDeps } from "../grants_verb.js";
+import type { PickerChange } from "../picker.js";
+import { type ConnectDeps, type ConnectOptions } from "./connect.js";
+import { type CommandContext } from "./context.js";
+/**
+ * The account writes a picker change means, in the order they should be queued. A re-include is `include` (the account's
+ * exclusion lifts) and, unless an owner grant already covers the repo, `grant` (it is named on this machine from now on) —
+ * exactly what `applyChange` does to `grants.json`. A removal is a `revoke`; a per-clone consent withdrawn is a `revoke` of its slug,
+ * because the first sync uploaded it as a grant.
+ */
+export declare function changeOps(change: PickerChange, covered: (slug: string) => boolean): SyncOp[];
+/**
+ * A repo the ACCOUNT has turned off (not only this machine) and the person picked as an ordinary add is a re-include: it moves
+ * to `turnOn`, so the grant block names it on its own `turn on` row, `(turned off on your account)`, and the yes lifts the
+ * exclusion for every machine. The user's yes wins, as slice 1's re-include rule has it. `accountOff` is every `turn on` slug the
+ * account turned off, the moved ones and the ones that were already turn-ons here.
+ */
+export declare function splitAccountExclusions(change: PickerChange, accountExcluded: readonly string[]): {
+    readonly change: PickerChange;
+    readonly accountOff: ReadonlySet<string>;
+};
+/**
+ * Screen 2 — a machine joining an account by picking local repos (design slice 2, step 4). After the credential and the first
+ * sync, the account may grant more than was just picked: ask, naming them, before any is admitted on this machine. `y` names them
+ * here (and syncs, so the server learns this machine's set); `n` — and Ctrl+C, which here is a No that does not undo what was
+ * already chosen — leaves them on the account, listed by `status`.
+ *
+ * Returns the names now captured here, for the "Capture is on" block, and whether the question was cancelled with Ctrl+C: the run
+ * then finishes its non-interactive steps and asks nothing more (no backfill offer), VQ's ruling on #88.
+ */
+export declare function joiningMachine(ctx: CommandContext, deps: VerbSyncDeps, answers: string, 
+/** The first-sync line was already printed in this run: the sync after "y" does not print it again. */
+firstSyncSaid?: boolean): Promise<{
+    readonly names: readonly string[];
+    readonly cancelled: boolean;
+    readonly sync: VerbSync | null;
+}>;
+/**
+ * What `connect` says under "Capture is on" about the sync after its writes (VQ, on VT's question). Capture IS on whatever this
+ * says — the local grants admit the repo — so these are muted lines that tell the truth about the ACCOUNT, by what the sync answered:
+ *   - synced: nothing;
+ *   - a 400 (our own bug; the queue is kept and will be refused again): the status row's wording, "didn't accept · report this";
+ *   - a 401 (the credential is no longer accepted): `ERRORS.authFatal` and the channel's `auth` command;
+ *   - anything else (no answer, off-contract, over the caps, or no sync attempted): "hasn't been told yet; running `status` retries".
+ * Only `connect`, `status` and `off` sync, so the retry it names is `status`.
+ */
+export declare function accountNoteLines(ctx: CommandContext, sync: VerbSync | null): string[];
+/** What `g` found: the credential it made (in MEMORY ONLY), and the account's grants (`null`: they could not be read). */
+export type GMint = {
+    readonly kind: "exit";
+    readonly code: number;
+} | {
+    readonly kind: "minted";
+    readonly credential: IngestCredential;
+    readonly snapshot: AccountSnapshot | null;
+    readonly notes: readonly string[];
+    readonly origin: string;
+};
+/**
+ * `g`'s state across a `connectPicker` run, for the ONE `finally` that settles it (`settleG`). `credential` is the token `g` made;
+ * `committed` flips only once the credential is on disk behind a successful grant write; `end` says how a run that granted nothing
+ * ended, for the line the person reads.
+ */
+export interface GState {
+    credential: IngestCredential | null;
+    /** What the GET learned: written to `grants-account.json` at the commit (after the yes), never before it. */
+    snapshot: AccountSnapshot | null;
+    /** The origin that minted the credential: where an in-memory revoke goes when its row is missing or the queue is refused. */
+    origin: string;
+    /** What the mint said to add to the "Saved" block (the environment-token shadow note). */
+    notes: readonly string[];
+    committed: boolean;
+    end: "declined" | "cancelled" | "lost" | "unrecorded" | "occupied" | null;
+}
+/**
+ * The yes, for a credential `g` is holding: the GRANTS are already written (the caller's `applyChange`); now `credentials.json`, THEN
+ * the row's deletion. `committed` flips as soon as the credential is on disk, so a failure of the deletion (or a kill between the two)
+ * never revokes what the person kept: the row's token IS the current credential, and the next verb's retry skips and drops it.
+ */
+export declare function commitG(ctx: CommandContext, g: GState, save?: typeof saveCredential): "committed" | "lost" | "unrecorded" | "occupied";
+/**
+ * `g`: sign in through `deps.browser` (the credential beat, behind its own gate: no credential, a terminal, a browser), then ONE
+ * `GET` of the account's grants — a pure read that marks nothing as synced.
+ *
+ * ⛔ **WRITE-AHEAD, AND NOTHING ON DISK.** The mint is asked to HOLD the credential (`hold`): the instant the server hands the token
+ * over, a row for it is written to `pending-revoke.json` (`addPendingRevoke`), and `credentials.json` is NOT written — the credential
+ * lives in memory until the person's yes, and the GET below uses it from there. If the row cannot be written (an insecure or unreadable
+ * file, the cap, a failed write) the credential is revoked in memory at once, nothing is kept, and `g` ends on the ordinary
+ * "Nothing was changed" path with a muted line that says what happened.
+ *
+ * What the GET learned is NOT written here: `commitG` writes it to `grants-account.json` after the yes, so a no or Ctrl+C leaves nothing
+ * about the account behind on a machine that keeps no credential — and after a yes, `account.excluded` denies an account-excluded repo
+ * under a newly granted owner.
+ */
+export declare function mintForG(ctx: CommandContext, options: ConnectOptions, deps: ConnectDeps, account: VerbSyncDeps): Promise<GMint>;
+/** The account's own list as a picker change: its owners, and its repos that no listed owner covers and that are not turned off. */
+export declare function accountChange(snapshot: AccountSnapshot): PickerChange;
+/**
+ * The ONE `finally` of `g` (VQ + VT, #88). A run that did not COMMIT the credential — a no, Ctrl+C (the first, a second, a
+ * SIGHUP: the row already exists, so a signal needs only to exit), an empty account, Enter, a removals-only yes, a failed write or an
+ * unexpected throw — makes one best-effort revoke within 3 s, to the origin the row recorded, and the row leaves on a 2xx, a 401 or a
+ * 404. Nothing was ever on disk, so there is no file to delete; the row is what stays if the revoke does not land.
+ *
+ * `end` says how a run that granted nothing ended: its line is printed here, and "the server will be told on the next vibecommit
+ * command that contacts the server" only when the row is still there to say it with. A throw prints nothing and rethrows.
+ */
+export declare function settleG(ctx: CommandContext, deps: ConnectDeps, g: GState): Promise<void>;
+/** The account state the last sync recorded, or `null` before a first sync. */
+export declare function lastAccountState(home: string): ReturnType<typeof readAccountState>["account"];

package/dist/commands/connect_account.js

@@ -0,0 +1,321 @@
+/**
+ * What `connect` does with the account's grants (slice 2, S4 part 3): the changes it queues for the account, the turn-ons the
+ * account itself had turned off, the second question a joining machine is asked, and `g` — use the repositories the account
+ * already grants, on a machine with no credential.
+ *
+ * ```
+ *   changeOps(change, covered)          the account writes a picker change means, for the pending queue
+ *   splitAccountExclusions(change, …)   a repo the account turned off is a `turn on`, not an add
+ *   joiningMachine(ctx, …)              screen 2: "Your account also grants … Capture those here too?"
+ *   mintForG(ctx, …)                    `g`: sign in (the credential held in MEMORY behind a write-ahead row), then read the account's grants
+ *   commitG(ctx, g)                     the yes: credentials.json, then the row's deletion
+ *   settleG(ctx, deps, g)               the ONE finally: a run that did not commit revokes what `g` made and clears its row
+ * ```
+ *
+ * ⛔ LOADED LAZILY with `connect_picker.ts` (see its docblock): the picker path is a person at a terminal.
+ *
+ * ⛔ `g` IS THE ONE PLACE A CREDENTIAL IS MADE AHEAD OF CONSENT (exception 3), and it is kept honest by WRITE-AHEAD (`pending_revoke.ts`):
+ * the instant the server hands the token over a row for it is written, and the credential lives in memory — `credentials.json` does not
+ * exist before the person's yes. Whatever then ends the run short of the yes (a no, Ctrl+C, a kill, an unexpected throw) leaves a row the
+ * next verb revokes, never a live credential nothing remembers; the yes commits the grants, then `credentials.json`, then deletes the row.
+ * It is reached only from the picker's `g`, which is offered only where there is no credential and a browser to sign in with — so never
+ * from the `auth` chain (which has no browser, and always leaves a credential).
+ */
+import { PICKER, REPLACE } from "../copy/index.js";
+import { isAffirmative, normalizeOwner, normalizeSlug, ownerOfSlug, readAccountState, holdsAny, updateGrants, writeAccountState, } from "../consent.js";
+import { existsSync } from "node:fs";
+import { saveCredential } from "../credential.js";
+import { stoppedSyncReason } from "./sync_reason.js";
+import { EXIT } from "../exit.js";
+import { fetchAccountGrants, GRANTS_VERB_BODY_BYTES } from "../grants_sync.js";
+import { readAccountView, syncForVerb } from "../grants_verb.js";
+import { authCommandFor, channelCommand, connectCommandFor } from "../install.js";
+import { COMMANDS } from "../copy/index.js";
+import { addPendingRevoke, holdsRow, removePendingRevoke, revokeHeld } from "../pending_revoke.js";
+import { readPerClone } from "../machine_state.js";
+import { credentialsPath } from "../paths.js";
+import { ingestUrl } from "../post.js";
+import { paint, renderErrorBlock, wrap } from "../term.js";
+import { askOrCancel, savedBlock } from "./connect.js";
+import { credentialProblemBlock } from "./credential_problem.js";
+import { writeLines } from "./context.js";
+/**
+ * The account writes a picker change means, in the order they should be queued. A re-include is `include` (the account's
+ * exclusion lifts) and, unless an owner grant already covers the repo, `grant` (it is named on this machine from now on) —
+ * exactly what `applyChange` does to `grants.json`. A removal is a `revoke`; a per-clone consent withdrawn is a `revoke` of its slug,
+ * because the first sync uploaded it as a grant.
+ */
+export function changeOps(change, covered) {
+    const ops = [];
+    for (const value of change.stopOwners)
+        ops.push({ op: "revoke", kind: "owner", value });
+    for (const value of [...change.stopRepos, ...change.stopClones])
+        ops.push({ op: "revoke", kind: "repo", value });
+    for (const value of change.addOwners)
+        ops.push({ op: "grant", kind: "owner", value });
+    for (const value of change.addRepos)
+        ops.push({ op: "grant", kind: "repo", value });
+    for (const value of change.turnOn) {
+        ops.push({ op: "include", kind: "repo", value });
+        if (!covered(value))
+            ops.push({ op: "grant", kind: "repo", value });
+    }
+    return ops;
+}
+/**
+ * A repo the ACCOUNT has turned off (not only this machine) and the person picked as an ordinary add is a re-include: it moves
+ * to `turnOn`, so the grant block names it on its own `turn on` row, `(turned off on your account)`, and the yes lifts the
+ * exclusion for every machine. The user's yes wins, as slice 1's re-include rule has it. `accountOff` is every `turn on` slug the
+ * account turned off, the moved ones and the ones that were already turn-ons here.
+ */
+export function splitAccountExclusions(change, accountExcluded) {
+    const off = new Set(accountExcluded.map(normalizeSlug));
+    const moved = change.addRepos.filter((slug) => off.has(slug));
+    const next = moved.length === 0
+        ? change
+        : { ...change, addRepos: change.addRepos.filter((slug) => !off.has(slug)), turnOn: [...change.turnOn, ...moved] };
+    return { change: next, accountOff: new Set(next.turnOn.filter((slug) => off.has(slug))) };
+}
+/**
+ * Screen 2 — a machine joining an account by picking local repos (design slice 2, step 4). After the credential and the first
+ * sync, the account may grant more than was just picked: ask, naming them, before any is admitted on this machine. `y` names them
+ * here (and syncs, so the server learns this machine's set); `n` — and Ctrl+C, which here is a No that does not undo what was
+ * already chosen — leaves them on the account, listed by `status`.
+ *
+ * Returns the names now captured here, for the "Capture is on" block, and whether the question was cancelled with Ctrl+C: the run
+ * then finishes its non-interactive steps and asks nothing more (no backfill offer), VQ's ruling on #88.
+ */
+export async function joiningMachine(ctx, deps, answers, 
+/** The first-sync line was already printed in this run: the sync after "y" does not print it again. */
+firstSyncSaid = false) {
+    const view = readAccountView(ctx.home, readPerClone(ctx.home).flatMap((clone) => (clone.slug === null ? [] : [clone.slug])), { kind: "skipped" });
+    const names = view === null ? [] : view.notHere;
+    if (names.length === 0)
+        return { names: [], cancelled: false, sync: null };
+    writeLines(ctx.stdout, [
+        "",
+        ...wrap(PICKER.joinAlso(names.join("\n")), 2),
+        ...(names.length > 3 ? names.map((name) => `    ${name}`) : []),
+    ]);
+    const answer = await askOrCancel(ctx, `  ${paint(ctx.colour, "text", PICKER.joinQuestion)} ${paint(ctx.colour, "muted", answers)} `);
+    if (answer === null || !isAffirmative(answer)) {
+        writeLines(ctx.stdout, ["", ...wrap(PICKER.joinDeclined(channelCommand(ctx.env, ctx.selfPath, COMMANDS.status)), 2)]);
+        return { names: [], cancelled: answer === null, sync: null };
+    }
+    const owners = names.filter((name) => name.endsWith("/")).map((name) => normalizeOwner(name.slice(0, -1)));
+    const repos = names.filter((name) => !name.endsWith("/")).map(normalizeSlug);
+    try {
+        updateGrants(ctx.home, (g) => {
+            const nextOwners = [...new Set([...g.owners, ...owners])];
+            return {
+                ...g,
+                owners: nextOwners,
+                repos: [...new Set([...g.repos, ...repos.filter((slug) => !nextOwners.includes(ownerOfSlug(slug)))])],
+            };
+        });
+    }
+    catch {
+        // `grants.json` became unreadable since the picker's own write: nothing was named, and the next `connect` says so.
+        return { names: [], cancelled: false, sync: null };
+    }
+    // The server's `named` set is what the dashboard's "confirmed on N of M machines" counts: tell it now.
+    const sync = await syncForVerb(ctx, false, deps, { quietFirst: firstSyncSaid });
+    return { names, cancelled: false, sync };
+}
+/**
+ * What `connect` says under "Capture is on" about the sync after its writes (VQ, on VT's question). Capture IS on whatever this
+ * says — the local grants admit the repo — so these are muted lines that tell the truth about the ACCOUNT, by what the sync answered:
+ *   - synced: nothing;
+ *   - a 400 (our own bug; the queue is kept and will be refused again): the status row's wording, "didn't accept · report this";
+ *   - a 401 (the credential is no longer accepted): `ERRORS.authFatal` and the channel's `auth` command;
+ *   - anything else (no answer, off-contract, over the caps, or no sync attempted): "hasn't been told yet; running `status` retries".
+ * Only `connect`, `status` and `off` sync, so the retry it names is `status`.
+ */
+export function accountNoteLines(ctx, sync) {
+    if (sync === null)
+        return [];
+    if (sync.kind === "ran" && sync.result.kind === "synced")
+        return [];
+    if (sync.kind === "ran") {
+        // A 400 and a 401 have their own lines, shared with `off` (`sync_reason.ts`, hook-safe).
+        const reason = stoppedSyncReason(ctx, sync.result);
+        if (reason !== null)
+            return reason;
+    }
+    const status = channelCommand(ctx.env, ctx.selfPath, COMMANDS.status);
+    // F2 / R2-2: the held wording only when the hold applies to something — a synced machine with a queued grant the cached account does
+    // not already grant (`holdsAny`, the gate's own predicate). Otherwise nothing waits and the plain line is the true one.
+    const held = holdsAny(ctx.home);
+    return wrap(held ? PICKER.accountNotToldHeld(status) : PICKER.accountNotTold(status), 2).map((line) => paint(ctx.colour, "muted", line));
+}
+/**
+ * The yes, for a credential `g` is holding: the GRANTS are already written (the caller's `applyChange`); now `credentials.json`, THEN
+ * the row's deletion. `committed` flips as soon as the credential is on disk, so a failure of the deletion (or a kill between the two)
+ * never revokes what the person kept: the row's token IS the current credential, and the next verb's retry skips and drops it.
+ */
+export function commitG(ctx, g, save = saveCredential) {
+    if (g.credential === null)
+        return "lost";
+    // ⛔ BEFORE ANYTHING IS WRITTEN: the row is `g`'s lease on the credential. If it is gone, another verb's retry settled it (revoked it)
+    // while the question was open, and a `credentials.json` written now would be a dead credential: refuse. A `credentials.json` that
+    // already exists is a concurrent mint: never overwritten. Either way nothing is saved, and the finally revokes the in-memory token.
+    const held = holdsRow(ctx.home, g.credential.expose());
+    if (held === "gone")
+        return "lost";
+    if (held === "unusable")
+        return "unrecorded";
+    if (existsSync(credentialsPath(ctx.home)))
+        return "occupied";
+    save(ctx.home, g.credential);
+    g.committed = true;
+    removePendingRevoke(ctx.home, g.credential.expose());
+    savedBlock(ctx, g.notes);
+    // The account's state, as a sync leaves it — written only now, after the yes, so a no or Ctrl+C leaves nothing about the account
+    // on a machine that keeps no credential. It makes `account.excluded` deny an account-excluded repo under a newly granted owner.
+    if (g.snapshot !== null) {
+        try {
+            writeAccountState(ctx.home, {
+                account: {
+                    owners: g.snapshot.owners,
+                    repos: g.snapshot.repos,
+                    excluded: g.snapshot.excluded,
+                    epoch: g.snapshot.epoch,
+                    synced_at: ctx.now().toISOString(),
+                },
+                refused: [],
+                stale: false,
+                last_get_at: readAccountState(ctx.home).last_get_at,
+            });
+        }
+        catch {
+            // A cache of what the server said; the next sync writes it.
+        }
+    }
+    return "committed";
+}
+/**
+ * `g`: sign in through `deps.browser` (the credential beat, behind its own gate: no credential, a terminal, a browser), then ONE
+ * `GET` of the account's grants — a pure read that marks nothing as synced.
+ *
+ * ⛔ **WRITE-AHEAD, AND NOTHING ON DISK.** The mint is asked to HOLD the credential (`hold`): the instant the server hands the token
+ * over, a row for it is written to `pending-revoke.json` (`addPendingRevoke`), and `credentials.json` is NOT written — the credential
+ * lives in memory until the person's yes, and the GET below uses it from there. If the row cannot be written (an insecure or unreadable
+ * file, the cap, a failed write) the credential is revoked in memory at once, nothing is kept, and `g` ends on the ordinary
+ * "Nothing was changed" path with a muted line that says what happened.
+ *
+ * What the GET learned is NOT written here: `commitG` writes it to `grants-account.json` after the yes, so a no or Ctrl+C leaves nothing
+ * about the account behind on a machine that keeps no credential — and after a yes, `account.excluded` denies an account-excluded repo
+ * under a newly granted owner.
+ */
+export async function mintForG(ctx, options, deps, account) {
+    if (deps.browser === undefined)
+        return { kind: "exit", code: EXIT.failure };
+    const refusal = { current: null };
+    const mintedAt = { origin: "" };
+    const hold = {
+        record: (credential, endpoint) => {
+            // The row carries `g`'s lease (this process, 30 minutes): another verb's retry leaves it alone while the question is open.
+            const added = addPendingRevoke(ctx.home, credential, endpoint, ctx.now(), { lease: true });
+            if (added.kind === "written")
+                mintedAt.origin = new URL(endpoint).origin;
+            if (added.kind !== "written")
+                refusal.current = added;
+            return added.kind === "written";
+        },
+        release: (credential) => removePendingRevoke(ctx.home, credential.expose()),
+    };
+    const minted = await deps.browser(ctx, "connect", { device: options.device === true, scope: "repos", hold });
+    if (minted.kind === "unrecorded") {
+        const read = refusal.current !== null && refusal.current.kind === "refused" ? refusal.current.read : null;
+        if (read !== null && read.kind === "insecure-file") {
+            writeLines(ctx.stderr, ["", ...renderErrorBlock(credentialProblemBlock(read, authCommandFor(ctx.env, ctx.selfPath)), ctx.colour)]);
+        }
+        else {
+            writeLines(ctx.stdout, ["", ...wrap(PICKER.gNotRecorded, 2).map((line) => paint(ctx.colour, "muted", line))]);
+        }
+        // ⛔ NEVER "Cancelled. Nothing was changed.": a credential WAS made. In memory it was revoked (`declinedRevoked`), or it could not be
+        // and may still be live (`declinedOrphan` says where to revoke it) — either way the line is the credential's, and the exit is 1.
+        writeLines(ctx.stdout, wrap(minted.revoked ? REPLACE.declinedRevoked : REPLACE.declinedOrphan, 2).map((line) => paint(ctx.colour, "muted", line)));
+        return { kind: "exit", code: EXIT.failure };
+    }
+    // A declined or failed sign-in has already said why on screen, and made no credential that the client has to remember.
+    if (minted.kind !== "held")
+        return { kind: "exit", code: EXIT.failure };
+    const url = ingestUrl(ctx.env);
+    const read = url === null
+        ? null
+        : await fetchAccountGrants(url, minted.credential, {
+            fetch: account.fetch,
+            ...(account.timeoutMs === undefined ? {} : { timeoutMs: account.timeoutMs }),
+            maxBodyBytes: GRANTS_VERB_BODY_BYTES,
+        });
+    const snapshot = read !== null && read.kind === "ok" ? read : null;
+    return { kind: "minted", credential: minted.credential, snapshot, notes: minted.notes ?? [], origin: mintedAt.origin };
+}
+/** The account's own list as a picker change: its owners, and its repos that no listed owner covers and that are not turned off. */
+export function accountChange(snapshot) {
+    const owners = snapshot.owners.map(normalizeOwner);
+    const off = new Set(snapshot.excluded);
+    return {
+        addOwners: owners,
+        addRepos: snapshot.repos.map(normalizeSlug).filter((slug) => !off.has(slug) && !owners.includes(ownerOfSlug(slug))),
+        turnOn: [],
+        stopOwners: [],
+        stopRepos: [],
+        stopClones: [],
+    };
+}
+/**
+ * The ONE `finally` of `g` (VQ + VT, #88). A run that did not COMMIT the credential — a no, Ctrl+C (the first, a second, a
+ * SIGHUP: the row already exists, so a signal needs only to exit), an empty account, Enter, a removals-only yes, a failed write or an
+ * unexpected throw — makes one best-effort revoke within 3 s, to the origin the row recorded, and the row leaves on a 2xx, a 401 or a
+ * 404. Nothing was ever on disk, so there is no file to delete; the row is what stays if the revoke does not land.
+ *
+ * `end` says how a run that granted nothing ended: its line is printed here, and "the server will be told on the next vibecommit
+ * command that contacts the server" only when the row is still there to say it with. A throw prints nothing and rethrows.
+ */
+export async function settleG(ctx, deps, g) {
+    if (g.credential === null || g.committed)
+        return;
+    const result = await revokeHeld(ctx.home, g.credential, g.origin, deps.fetch ?? globalThis.fetch);
+    // A queue file that is insecure is named, with its fix: until it is fixed no later verb can read the row.
+    if (result.insecure !== null) {
+        writeLines(ctx.stderr, ["", ...renderErrorBlock(credentialProblemBlock(result.insecure, authCommandFor(ctx.env, ctx.selfPath)), ctx.colour)]);
+    }
+    if (g.end === null)
+        return;
+    const cancelled = g.end === "cancelled";
+    // Exactly what happened: "revoked" only on an answer from the server; "removed here … will be told" only while a readable row is
+    // there to tell it with; and with no usable row and no answer the credential may be live, so it says where to remove it.
+    const connect = connectCommandFor(ctx.env, ctx.selfPath);
+    const fate = result.kind === "revoked" ? REPLACE.declinedRevoked : result.kind === "waiting" ? PICKER.gRemovedWillTell : REPLACE.declinedOrphan;
+    // `orphan` (no usable row, no answer) and `unrevocable` (a 404: the row ended, but nothing revoked it) both leave a credential that may
+    // be live: neither is ever called "revoked" ("0.8.0 truth fixes" F7).
+    const live = result.kind === "orphan" || result.kind === "unrevocable";
+    // ⛔ "Nothing is captured on this machine" is for a run that ended with no credential kept AND nothing granted. An occupied
+    // `credentials.json` means the grants are saved and a credential is on disk: capture IS on, so that case says what happened and
+    // then what became of the credential this run made, on its own line.
+    if (g.end === "occupied") {
+        writeLines(ctx.stdout, ["", ...wrap(PICKER.gOccupied(connect), 2), ...wrap(fate, 2)]);
+        return;
+    }
+    const line = g.end === "lost" && result.kind === "revoked"
+        ? PICKER.gRevokedElsewhere(connect)
+        : g.end === "unrecorded" && !live
+            ? PICKER.gRecordUnusable(connect)
+            : live
+                ? REPLACE.declinedOrphan
+                : cancelled
+                    ? result.kind === "revoked"
+                        ? PICKER.gCancelledRevoked
+                        : PICKER.gCancelledRemoved
+                    : result.kind === "revoked"
+                        ? PICKER.gDeclinedRevoked
+                        : PICKER.gDeclinedRemoved;
+    writeLines(ctx.stdout, cancelled ? ["", "", ...wrap(line, 2)] : ["", ...wrap(line, 2)]);
+}
+/** The account state the last sync recorded, or `null` before a first sync. */
+export function lastAccountState(home) {
+    return readAccountState(home).account;
+}
+//# sourceMappingURL=connect_account.js.map

package/dist/commands/connect_account.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect_account.js","sourceRoot":"","sources":["../../src/commands/connect_account.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EACL,aAAa,EACb,cAAc,EACd,aAAa,EACb,WAAW,EACX,gBAAgB,EAChB,QAAQ,EACR,YAAY,EACZ,iBAAiB,GAElB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,cAAc,EAAyB,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAClC,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAqC,MAAM,mBAAmB,CAAC;AAClH,OAAO,EAAE,eAAe,EAAE,WAAW,EAAoC,MAAM,mBAAmB,CAAC;AACnG,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClF,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,mBAAmB,EAAE,UAAU,EAAkB,MAAM,sBAAsB,CAAC;AACnH,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEvC,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAE3D,OAAO,EAAE,WAAW,EAAE,UAAU,EAAyC,MAAM,cAAc,CAAC;AAC9F,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,UAAU,EAAuB,MAAM,cAAc,CAAC;AAE/D;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,MAAoB,EAAE,OAAkC;IAChF,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,UAAU;QAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACxF,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,SAAS,EAAE,GAAG,MAAM,CAAC,UAAU,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACjH,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,SAAS;QAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACtF,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,QAAQ;QAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACpF,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAoB,EACpB,eAAkC;IAElC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,MAAM,IAAI,GACR,KAAK,CAAC,MAAM,KAAK,CAAC;QAChB,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;IACtH,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5F,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAmB,EACnB,IAAkB,EAClB,OAAe;AACf,uGAAuG;AACvG,aAAa,GAAG,KAAK;IAErB,MAAM,IAAI,GAAG,eAAe,CAC1B,GAAG,CAAC,IAAI,EACR,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EACpF,EAAE,IAAI,EAAE,SAAS,EAAE,CACpB,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;IAChD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAE3E,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE;QACrB,EAAE;QACF,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7C,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAChE,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,KAAK,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACrI,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9C,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACtH,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,KAAK,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC/D,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3G,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC7E,IAAI,CAAC;QACH,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAS,EAAU,EAAE;YAC3C,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YAC1D,OAAO;gBACL,GAAG,CAAC;gBACJ,MAAM,EAAE,UAAU;gBAClB,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aACtG,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,mHAAmH;QACnH,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACrD,CAAC;IACD,uGAAuG;IACvG,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC,CAAC;IAChF,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAC3C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAmB,EAAE,IAAqB;IACzE,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAC7B,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACpE,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QACxB,yFAAyF;QACzF,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACnD,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC;IACrC,CAAC;IACD,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtE,qIAAqI;IACrI,wHAAwH;IACxH,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;AAC3I,CAAC;AA8BD;;;;GAIG;AACH,MAAM,UAAU,OAAO,CACrB,GAAmB,EACnB,CAAS,EACT,OAA8B,cAAc;IAE5C,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IACzC,sIAAsI;IACtI,kIAAkI;IAClI,oIAAoI;IACpI,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IACvD,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IACnC,IAAI,IAAI,KAAK,UAAU;QAAE,OAAO,YAAY,CAAC;IAC7C,IAAI,UAAU,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,UAAU,CAAC;IAC7D,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;IAC7B,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC;IACnB,mBAAmB,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IACrD,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IACzB,iIAAiI;IACjI,gIAAgI;IAChI,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,iBAAiB,CAAC,GAAG,CAAC,IAAI,EAAE;gBAC1B,OAAO,EAAE;oBACP,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM;oBACzB,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK;oBACvB,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ;oBAC7B,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK;oBACvB,SAAS,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;iBACnC;gBACD,OAAO,EAAE,EAAE;gBACX,KAAK,EAAE,KAAK;gBACZ,WAAW,EAAE,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,WAAW;aACpD,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,4DAA4D;QAC9D,CAAC;IACH,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,GAAmB,EACnB,OAAuB,EACvB,IAAiB,EACjB,OAAqB;IAErB,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;IAC5E,MAAM,OAAO,GAAkC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACjE,MAAM,QAAQ,GAAuB,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACpD,MAAM,IAAI,GAAa;QACrB,MAAM,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,EAAE;YAC/B,2HAA2H;YAC3H,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3F,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;gBAAE,QAAQ,CAAC,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;YACzE,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;gBAAE,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC;YACtD,OAAO,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC;QAClC,CAAC;QACD,OAAO,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;KAC5E,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7G,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1G,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACnD,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,GAAG,gBAAgB,CAAC,sBAAsB,CAAC,IAAI,EAAE,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrI,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAChH,CAAC;QACD,qIAAqI;QACrI,iIAAiI;QACjI,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QACnJ,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;IAC9C,CAAC;IACD,uHAAuH;IACvH,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;IAExE,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,IAAI,GACR,GAAG,KAAK,IAAI;QACV,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,MAAM,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE;YAC/C,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;YAC5E,YAAY,EAAE,sBAAsB;SACrC,CAAC,CAAC;IACT,MAAM,QAAQ,GAAG,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;AACzH,CAAC;AAED,oIAAoI;AACpI,MAAM,UAAU,aAAa,CAAC,QAAyB;IACrD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACvC,OAAO;QACL,SAAS,EAAE,MAAM;QACjB,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;QACnH,MAAM,EAAE,EAAE;QACV,UAAU,EAAE,EAAE;QACd,SAAS,EAAE,EAAE;QACb,UAAU,EAAE,EAAE;KACf,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,GAAmB,EAAE,IAAiB,EAAE,CAAS;IAC7E,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI,IAAI,CAAC,CAAC,SAAS;QAAE,OAAO;IACjD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAClG,0GAA0G;IAC1G,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC7B,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,GAAG,gBAAgB,CAAC,sBAAsB,CAAC,MAAM,CAAC,QAAQ,EAAE,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAChJ,CAAC;IACD,IAAI,CAAC,CAAC,GAAG,KAAK,IAAI;QAAE,OAAO;IAC3B,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,KAAK,WAAW,CAAC;IACxC,iIAAiI;IACjI,yHAAyH;IACzH,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzD,MAAM,IAAI,GACR,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;IACrI,wIAAwI;IACxI,sEAAsE;IACtE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,CAAC;IACvE,2HAA2H;IAC3H,gIAAgI;IAChI,qEAAqE;IACrE,IAAI,CAAC,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;QACzB,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACtF,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GACR,CAAC,CAAC,GAAG,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAC3C,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC;QACnC,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,YAAY,IAAI,CAAC,IAAI;YAC/B,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC;YACjC,CAAC,CAAC,IAAI;gBACJ,CAAC,CAAC,OAAO,CAAC,cAAc;gBACxB,CAAC,CAAC,SAAS;oBACT,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS;wBACzB,CAAC,CAAC,MAAM,CAAC,iBAAiB;wBAC1B,CAAC,CAAC,MAAM,CAAC,iBAAiB;oBAC5B,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS;wBACzB,CAAC,CAAC,MAAM,CAAC,gBAAgB;wBACzB,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC;IACtC,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1F,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;AACxC,CAAC"}