@vibesdotdev/platform 0.0.0-stage → 1.0.0-rc.2

package/dist/schemas/hosts/provision-cli.js

@@ -0,0 +1,65 @@
+import * as z from 'zod/v4';
+import { CapabilityError, CaughtFailureSchema, valueFreeFailure } from '@vibesdotdev/kernel';
+import { provisionHostFormSchema, sandboxDescriptorInputSchema } from "./provision.js";
+import { labelsToHostCapabilities } from "./capabilities.js";
+export const hostProvisionInputSchema = provisionHostFormSchema.omit({ sandbox: true }).extend({
+    capabilityLabels: z.array(z.string().min(1)).default([]),
+    sandbox: sandboxDescriptorInputSchema.optional(),
+    adapter: z.string().min(1).default('digitalocean-droplet'),
+    dropletSize: z.string().min(1).default('s-1vcpu-1gb'),
+    image: z.string().min(1).default('ubuntu-24-04-x64'),
+    tags: z.array(z.string().min(1)).default([]),
+    sshKeyIds: z.array(z.string().min(1)).default([])
+});
+// Choose admission before parsing. JSON-looking text cannot fall through to I/O.
+// Prefix an ambiguous filename with ./ to explicitly select file admission.
+const SandboxSourceSchema = z.string().trim().min(1).transform(value => /^(?:[[{"\d-]|true|false|null)/.test(value)
+    ? { kind: 'inline', text: value }
+    : { kind: 'file', path: value });
+const HoursSchema = z.union([z.number(), z.string().trim().min(1).transform(Number)]);
+export const HostProvisionOptionsSchema = hostProvisionInputSchema.omit({
+    capabilityLabels: true, sandbox: true, tags: true, sshKeyIds: true, expiresInHours: true,
+    ttlHours: true
+}).extend({
+    capabilityLabel: hostProvisionInputSchema.shape.capabilityLabels,
+    tag: hostProvisionInputSchema.shape.tags,
+    sshKeyId: hostProvisionInputSchema.shape.sshKeyIds,
+    expiresInHours: HoursSchema.pipe(provisionHostFormSchema.shape.expiresInHours.unwrap()).optional(),
+    ttlHours: HoursSchema.pipe(provisionHostFormSchema.shape.ttlHours.unwrap()).optional(),
+    sandbox: SandboxSourceSchema.optional()
+}).transform(({ capabilityLabel, tag, sshKeyId, ...options }) => ({
+    ...options, capabilityLabels: capabilityLabel, tags: tag, sshKeyIds: sshKeyId
+}));
+export const HostProvisionRequestSchema = hostProvisionInputSchema.transform(input => {
+    const { capabilityLabels, adapter, dropletSize, image, tags, sshKeyIds, sandbox, ...request } = input;
+    return {
+        ...request,
+        capabilities: input.capabilities ??
+            (capabilityLabels.length > 0 ? labelsToHostCapabilities(capabilityLabels) : undefined),
+        sandbox: sandbox ?? { adapter, region: input.region, dropletSize, image, tags, sshKeyIds }
+    };
+});
+export function hostProvisionInvalid(reason) {
+    return new CapabilityError('Invalid host provision input.', 'INVALID_INPUT', {
+        reason, retryable: false,
+        recoveryHint: 'Provide valid provisioning options and --sandbox JSON or a JSON file path.'
+    });
+}
+export function parseProvisionSandbox(text) {
+    let raw;
+    try {
+        raw = JSON.parse(text);
+    }
+    catch (error) {
+        throw new CapabilityError('Invalid sandbox JSON.', 'INVALID_INPUT', {
+            reason: 'host-provision-json-invalid', retryable: false,
+            details: { failure: valueFreeFailure(CaughtFailureSchema.parse(error)) }
+        });
+    }
+    const parsed = sandboxDescriptorInputSchema.safeParse(raw);
+    if (!parsed.success)
+        throw hostProvisionInvalid('host-provision-sandbox-invalid');
+    return parsed.data;
+}
+export const ProvisionSandboxTextSchema = z.string();
+//# sourceMappingURL=provision-cli.js.map

package/dist/schemas/hosts/provision-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provision-cli.js","sourceRoot":"","sources":["../../../src/schemas/hosts/provision-cli.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC7F,OAAO,EAAE,uBAAuB,EAAE,4BAA4B,EAAE,MAAM,gBAAgB,CAAC;AACvF,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAE7D,MAAM,CAAC,MAAM,wBAAwB,GAAG,uBAAuB,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IAC9F,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACxD,OAAO,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IAChD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC;IAC1D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IACrD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC;IACpD,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5C,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACjD,CAAC,CAAC;AAGH,iFAAiF;AACjF,4EAA4E;AAC5E,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CACtE,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC;IAC1C,CAAC,CAAC,EAAE,IAAI,EAAE,QAAiB,EAAE,IAAI,EAAE,KAAK,EAAE;IAC1C,CAAC,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,KAAK,EAAE,CACzC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACtF,MAAM,CAAC,MAAM,0BAA0B,GAAG,wBAAwB,CAAC,IAAI,CAAC;IACvE,gBAAgB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI;IACxF,QAAQ,EAAE,IAAI;CACd,CAAC,CAAC,MAAM,CAAC;IACT,eAAe,EAAE,wBAAwB,CAAC,KAAK,CAAC,gBAAgB;IAChE,GAAG,EAAE,wBAAwB,CAAC,KAAK,CAAC,IAAI;IACxC,QAAQ,EAAE,wBAAwB,CAAC,KAAK,CAAC,SAAS;IAClD,cAAc,EAAE,WAAW,CAAC,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAClG,QAAQ,EAAE,WAAW,CAAC,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtF,OAAO,EAAE,mBAAmB,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IACjE,GAAG,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,QAAQ;CAC7E,CAAC,CAAC,CAAC;AAGJ,MAAM,CAAC,MAAM,0BAA0B,GAAG,wBAAwB,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE;IACpF,MAAM,EACL,gBAAgB,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EACvE,GAAG,OAAO,EACV,GAAG,KAAK,CAAC;IACV,OAAO;QACN,GAAG,OAAO;QACV,YAAY,EAAE,KAAK,CAAC,YAAY;YAC/B,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACvF,OAAO,EAAE,OAAO,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE;KAC1F,CAAC;AACH,CAAC,CAAC,CAAC;AAIH,MAAM,UAAU,oBAAoB,CAAC,MAAc;IAClD,OAAO,IAAI,eAAe,CAAC,+BAA+B,EAAE,eAAe,EAAE;QAC5E,MAAM,EAAE,SAAS,EAAE,KAAK;QACxB,YAAY,EAAE,4EAA4E;KAC1F,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAY;IACjD,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACJ,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,eAAe,CAAC,uBAAuB,EAAE,eAAe,EAAE;YACnE,MAAM,EAAE,6BAA6B,EAAE,SAAS,EAAE,KAAK;YACvD,OAAO,EAAE,EAAE,OAAO,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE;SACxE,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,4BAA4B,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC3D,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,oBAAoB,CAAC,gCAAgC,CAAC,CAAC;IAClF,OAAO,MAAM,CAAC,IAAI,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC"}

package/dist/schemas/hosts/provision.d.ts

@@ -0,0 +1,465 @@
+import * as z from 'zod/v4';
+/**
+ * The IaaS sandbox descriptor input the user supplies. The route synthesizes
+ * the full `infra/sandbox` runtime descriptor (with a server-generated id +
+ * `vibes:hostId=<id>` tag injection) and resolves an impl via the runtime.
+ *
+ * Validation is intentionally permissive — the resolved infra adapter
+ * descriptorSchema (e.g. `DoDropletDescriptorSchema` in
+ * [`infra-doks`](../../../../infra-doks/SPEC.md)) does the strict
+ * shape check. Adding new providers is an adapter-package change.
+ */
+export declare const sandboxDescriptorInputSchema: z.ZodObject<{
+    adapter: z.ZodString;
+    region: z.ZodOptional<z.ZodString>;
+    dropletSize: z.ZodOptional<z.ZodString>;
+    size: z.ZodOptional<z.ZodString>;
+    image: z.ZodOptional<z.ZodString>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    sshKeyIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    cloudInitScript: z.ZodOptional<z.ZodString>;
+    extras: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>;
+/** Upper bound for a requested host TTL; mirrors `FLEET_LAUNCH_MAX_TTL_HOURS`. */
+export declare const PROVISION_HOST_MAX_TTL_HOURS = 168;
+export declare const provisionHostFormSchema: z.ZodObject<{
+    hostId: z.ZodString;
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    environment: z.ZodDefault<z.ZodEnum<{
+        consumer: "consumer";
+        cloud: "cloud";
+    }>>;
+    provider: z.ZodDefault<z.ZodString>;
+    region: z.ZodOptional<z.ZodString>;
+    capabilities: z.ZodOptional<z.ZodObject<{
+        os: z.ZodOptional<z.ZodString>;
+        arch: z.ZodOptional<z.ZodString>;
+        kernel: z.ZodOptional<z.ZodString>;
+        cpu: z.ZodOptional<z.ZodObject<{
+            model: z.ZodOptional<z.ZodString>;
+            cores: z.ZodOptional<z.ZodNumber>;
+            threads: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>>;
+        ramMb: z.ZodOptional<z.ZodNumber>;
+        gpu: z.ZodOptional<z.ZodObject<{
+            model: z.ZodOptional<z.ZodString>;
+            vramMb: z.ZodOptional<z.ZodNumber>;
+            count: z.ZodOptional<z.ZodNumber>;
+            driver: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        storage: z.ZodOptional<z.ZodObject<{
+            totalMb: z.ZodOptional<z.ZodNumber>;
+            freeMb: z.ZodOptional<z.ZodNumber>;
+            volumeType: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        network: z.ZodOptional<z.ZodObject<{
+            publicIp: z.ZodOptional<z.ZodString>;
+            privateIp: z.ZodOptional<z.ZodString>;
+            egressMbps: z.ZodOptional<z.ZodNumber>;
+            ingressMbps: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>>;
+        dockerVersion: z.ZodOptional<z.ZodString>;
+        nvidiaToolkitVersion: z.ZodOptional<z.ZodString>;
+        tools: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            kind: z.ZodDefault<z.ZodLiteral<"tools/tool">>;
+            version: z.ZodOptional<z.ZodString>;
+            category: z.ZodOptional<z.ZodString>;
+            safety: z.ZodOptional<z.ZodString>;
+            purposes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            labels: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>>>;
+        actions: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            kind: z.ZodString;
+            version: z.ZodOptional<z.ZodString>;
+            targets: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            labels: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>>>;
+        daemons: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            kind: z.ZodString;
+            status: z.ZodDefault<z.ZodEnum<{
+                unavailable: "unavailable";
+                degraded: "degraded";
+                running: "running";
+                available: "available";
+            }>>;
+            capabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            labels: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>>>;
+        labels: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>>;
+    expiresInHours: z.ZodDefault<z.ZodNumber>;
+    sandbox: z.ZodObject<{
+        adapter: z.ZodString;
+        region: z.ZodOptional<z.ZodString>;
+        dropletSize: z.ZodOptional<z.ZodString>;
+        size: z.ZodOptional<z.ZodString>;
+        image: z.ZodOptional<z.ZodString>;
+        tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        sshKeyIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        cloudInitScript: z.ZodOptional<z.ZodString>;
+        extras: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>;
+    ttlHours: z.ZodOptional<z.ZodNumber>;
+    ownerOrgId: z.ZodOptional<z.ZodString>;
+    restrictedWorkload: z.ZodOptional<z.ZodBoolean>;
+    ownerProviderCredentialKey: z.ZodOptional<z.ZodString>;
+    preset: z.ZodOptional<z.ZodString>;
+    actionPolicy: z.ZodOptional<z.ZodObject<{
+        accepts: z.ZodArray<z.ZodObject<{
+            actionKind: z.ZodString;
+            sourceKinds: z.ZodArray<z.ZodEnum<{
+                git: "git";
+            }>>;
+        }, z.core.$strict>>;
+        queueGrants: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        relayGrants: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>>;
+}, z.core.$strip>;
+export declare const provisionHostRequestSchema: z.ZodObject<{
+    hostId: z.ZodString;
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    environment: z.ZodDefault<z.ZodEnum<{
+        consumer: "consumer";
+        cloud: "cloud";
+    }>>;
+    provider: z.ZodDefault<z.ZodString>;
+    region: z.ZodOptional<z.ZodString>;
+    capabilities: z.ZodOptional<z.ZodObject<{
+        os: z.ZodOptional<z.ZodString>;
+        arch: z.ZodOptional<z.ZodString>;
+        kernel: z.ZodOptional<z.ZodString>;
+        cpu: z.ZodOptional<z.ZodObject<{
+            model: z.ZodOptional<z.ZodString>;
+            cores: z.ZodOptional<z.ZodNumber>;
+            threads: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>>;
+        ramMb: z.ZodOptional<z.ZodNumber>;
+        gpu: z.ZodOptional<z.ZodObject<{
+            model: z.ZodOptional<z.ZodString>;
+            vramMb: z.ZodOptional<z.ZodNumber>;
+            count: z.ZodOptional<z.ZodNumber>;
+            driver: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        storage: z.ZodOptional<z.ZodObject<{
+            totalMb: z.ZodOptional<z.ZodNumber>;
+            freeMb: z.ZodOptional<z.ZodNumber>;
+            volumeType: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        network: z.ZodOptional<z.ZodObject<{
+            publicIp: z.ZodOptional<z.ZodString>;
+            privateIp: z.ZodOptional<z.ZodString>;
+            egressMbps: z.ZodOptional<z.ZodNumber>;
+            ingressMbps: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>>;
+        dockerVersion: z.ZodOptional<z.ZodString>;
+        nvidiaToolkitVersion: z.ZodOptional<z.ZodString>;
+        tools: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            kind: z.ZodDefault<z.ZodLiteral<"tools/tool">>;
+            version: z.ZodOptional<z.ZodString>;
+            category: z.ZodOptional<z.ZodString>;
+            safety: z.ZodOptional<z.ZodString>;
+            purposes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            labels: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>>>;
+        actions: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            kind: z.ZodString;
+            version: z.ZodOptional<z.ZodString>;
+            targets: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            labels: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>>>;
+        daemons: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            kind: z.ZodString;
+            status: z.ZodDefault<z.ZodEnum<{
+                unavailable: "unavailable";
+                degraded: "degraded";
+                running: "running";
+                available: "available";
+            }>>;
+            capabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            labels: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>>>;
+        labels: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>>;
+    expiresInHours: z.ZodDefault<z.ZodNumber>;
+    sandbox: z.ZodObject<{
+        adapter: z.ZodString;
+        region: z.ZodOptional<z.ZodString>;
+        dropletSize: z.ZodOptional<z.ZodString>;
+        size: z.ZodOptional<z.ZodString>;
+        image: z.ZodOptional<z.ZodString>;
+        tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        sshKeyIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        cloudInitScript: z.ZodOptional<z.ZodString>;
+        extras: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>;
+    ttlHours: z.ZodOptional<z.ZodNumber>;
+    ownerOrgId: z.ZodOptional<z.ZodString>;
+    restrictedWorkload: z.ZodOptional<z.ZodBoolean>;
+    ownerProviderCredentialKey: z.ZodOptional<z.ZodString>;
+    preset: z.ZodOptional<z.ZodString>;
+    actionPolicy: z.ZodOptional<z.ZodObject<{
+        accepts: z.ZodArray<z.ZodObject<{
+            actionKind: z.ZodString;
+            sourceKinds: z.ZodArray<z.ZodEnum<{
+                git: "git";
+            }>>;
+        }, z.core.$strict>>;
+        queueGrants: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        relayGrants: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>>;
+}, z.core.$strip>;
+export declare const provisionHostResponseSchema: z.ZodObject<{
+    host: z.ZodObject<{
+        id: z.ZodUUID;
+        hostId: z.ZodString;
+        name: z.ZodString;
+        description: z.ZodNullable<z.ZodString>;
+        ownerType: z.ZodEnum<{
+            user: "user";
+            organization: "organization";
+            system: "system";
+        }>;
+        ownerId: z.ZodString;
+        environment: z.ZodEnum<{
+            consumer: "consumer";
+            cloud: "cloud";
+        }>;
+        provider: z.ZodString;
+        region: z.ZodNullable<z.ZodString>;
+        status: z.ZodEnum<{
+            active: "active";
+            pending: "pending";
+            paused: "paused";
+            provisioning: "provisioning";
+            pausing: "pausing";
+            draining: "draining";
+            retired: "retired";
+            orphaned: "orphaned";
+        }>;
+        capabilities: z.ZodObject<{
+            os: z.ZodOptional<z.ZodString>;
+            arch: z.ZodOptional<z.ZodString>;
+            kernel: z.ZodOptional<z.ZodString>;
+            cpu: z.ZodOptional<z.ZodObject<{
+                model: z.ZodOptional<z.ZodString>;
+                cores: z.ZodOptional<z.ZodNumber>;
+                threads: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strip>>;
+            ramMb: z.ZodOptional<z.ZodNumber>;
+            gpu: z.ZodOptional<z.ZodObject<{
+                model: z.ZodOptional<z.ZodString>;
+                vramMb: z.ZodOptional<z.ZodNumber>;
+                count: z.ZodOptional<z.ZodNumber>;
+                driver: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+            storage: z.ZodOptional<z.ZodObject<{
+                totalMb: z.ZodOptional<z.ZodNumber>;
+                freeMb: z.ZodOptional<z.ZodNumber>;
+                volumeType: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+            network: z.ZodOptional<z.ZodObject<{
+                publicIp: z.ZodOptional<z.ZodString>;
+                privateIp: z.ZodOptional<z.ZodString>;
+                egressMbps: z.ZodOptional<z.ZodNumber>;
+                ingressMbps: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strip>>;
+            dockerVersion: z.ZodOptional<z.ZodString>;
+            nvidiaToolkitVersion: z.ZodOptional<z.ZodString>;
+            tools: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                kind: z.ZodDefault<z.ZodLiteral<"tools/tool">>;
+                version: z.ZodOptional<z.ZodString>;
+                category: z.ZodOptional<z.ZodString>;
+                safety: z.ZodOptional<z.ZodString>;
+                purposes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                labels: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            }, z.core.$strip>>>;
+            actions: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                kind: z.ZodString;
+                version: z.ZodOptional<z.ZodString>;
+                targets: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                labels: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            }, z.core.$strip>>>;
+            daemons: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                kind: z.ZodString;
+                status: z.ZodDefault<z.ZodEnum<{
+                    unavailable: "unavailable";
+                    degraded: "degraded";
+                    running: "running";
+                    available: "available";
+                }>>;
+                capabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                labels: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            }, z.core.$strip>>>;
+            labels: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>;
+        agentVersion: z.ZodNullable<z.ZodString>;
+        lastHeartbeatAt: z.ZodNullable<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodISODateTime, z.ZodTransform<Date, string>>]>>;
+        lastHeartbeat: z.ZodNullable<z.ZodObject<{
+            timestamp: z.ZodOptional<z.ZodISODateTime>;
+            uptimeSeconds: z.ZodOptional<z.ZodNumber>;
+            capacity: z.ZodOptional<z.ZodObject<{
+                cpuCores: z.ZodOptional<z.ZodNumber>;
+                ramMb: z.ZodOptional<z.ZodNumber>;
+                vramMb: z.ZodOptional<z.ZodNumber>;
+                diskMb: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strip>>;
+            usage: z.ZodOptional<z.ZodObject<{
+                cpuPercent: z.ZodOptional<z.ZodNumber>;
+                ramPercent: z.ZodOptional<z.ZodNumber>;
+                gpuPercent: z.ZodOptional<z.ZodNumber>;
+                diskPercent: z.ZodOptional<z.ZodNumber>;
+                temperatureC: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strip>>;
+            activeJobs: z.ZodOptional<z.ZodNumber>;
+            notes: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        sandboxResourceId: z.ZodNullable<z.ZodString>;
+        lastBilledAt: z.ZodNullable<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodISODateTime, z.ZodTransform<Date, string>>]>>;
+        relayReachable: z.ZodDefault<z.ZodBoolean>;
+        relayConnectedAt: z.ZodNullable<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodISODateTime, z.ZodTransform<Date, string>>]>>;
+        restrictedWorkload: z.ZodOptional<z.ZodBoolean>;
+        createdAt: z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodISODateTime, z.ZodTransform<Date, string>>]>;
+        updatedAt: z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodISODateTime, z.ZodTransform<Date, string>>]>;
+    }, z.core.$strip>;
+    enrollmentTokenStart: z.ZodOptional<z.ZodString>;
+    enrollmentTokenPrefix: z.ZodOptional<z.ZodString>;
+    sandboxResourceId: z.ZodString;
+    expiresAt: z.ZodOptional<z.ZodNullable<z.ZodDate>>;
+}, z.core.$strip>;
+export declare const provisionHostResponseJsonSchema: z.ZodObject<{
+    enrollmentTokenStart: z.ZodOptional<z.ZodString>;
+    enrollmentTokenPrefix: z.ZodOptional<z.ZodString>;
+    sandboxResourceId: z.ZodString;
+    host: z.ZodObject<{
+        id: z.ZodUUID;
+        hostId: z.ZodString;
+        name: z.ZodString;
+        description: z.ZodNullable<z.ZodString>;
+        ownerType: z.ZodEnum<{
+            user: "user";
+            organization: "organization";
+            system: "system";
+        }>;
+        ownerId: z.ZodString;
+        environment: z.ZodEnum<{
+            consumer: "consumer";
+            cloud: "cloud";
+        }>;
+        provider: z.ZodString;
+        region: z.ZodNullable<z.ZodString>;
+        status: z.ZodEnum<{
+            active: "active";
+            pending: "pending";
+            paused: "paused";
+            provisioning: "provisioning";
+            pausing: "pausing";
+            draining: "draining";
+            retired: "retired";
+            orphaned: "orphaned";
+        }>;
+        capabilities: z.ZodObject<{
+            os: z.ZodOptional<z.ZodString>;
+            arch: z.ZodOptional<z.ZodString>;
+            kernel: z.ZodOptional<z.ZodString>;
+            cpu: z.ZodOptional<z.ZodObject<{
+                model: z.ZodOptional<z.ZodString>;
+                cores: z.ZodOptional<z.ZodNumber>;
+                threads: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strip>>;
+            ramMb: z.ZodOptional<z.ZodNumber>;
+            gpu: z.ZodOptional<z.ZodObject<{
+                model: z.ZodOptional<z.ZodString>;
+                vramMb: z.ZodOptional<z.ZodNumber>;
+                count: z.ZodOptional<z.ZodNumber>;
+                driver: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+            storage: z.ZodOptional<z.ZodObject<{
+                totalMb: z.ZodOptional<z.ZodNumber>;
+                freeMb: z.ZodOptional<z.ZodNumber>;
+                volumeType: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+            network: z.ZodOptional<z.ZodObject<{
+                publicIp: z.ZodOptional<z.ZodString>;
+                privateIp: z.ZodOptional<z.ZodString>;
+                egressMbps: z.ZodOptional<z.ZodNumber>;
+                ingressMbps: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strip>>;
+            dockerVersion: z.ZodOptional<z.ZodString>;
+            nvidiaToolkitVersion: z.ZodOptional<z.ZodString>;
+            tools: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                kind: z.ZodDefault<z.ZodLiteral<"tools/tool">>;
+                version: z.ZodOptional<z.ZodString>;
+                category: z.ZodOptional<z.ZodString>;
+                safety: z.ZodOptional<z.ZodString>;
+                purposes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                labels: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            }, z.core.$strip>>>;
+            actions: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                kind: z.ZodString;
+                version: z.ZodOptional<z.ZodString>;
+                targets: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                labels: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            }, z.core.$strip>>>;
+            daemons: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                kind: z.ZodString;
+                status: z.ZodDefault<z.ZodEnum<{
+                    unavailable: "unavailable";
+                    degraded: "degraded";
+                    running: "running";
+                    available: "available";
+                }>>;
+                capabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                labels: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            }, z.core.$strip>>>;
+            labels: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>;
+        agentVersion: z.ZodNullable<z.ZodString>;
+        lastHeartbeat: z.ZodNullable<z.ZodObject<{
+            timestamp: z.ZodOptional<z.ZodISODateTime>;
+            uptimeSeconds: z.ZodOptional<z.ZodNumber>;
+            capacity: z.ZodOptional<z.ZodObject<{
+                cpuCores: z.ZodOptional<z.ZodNumber>;
+                ramMb: z.ZodOptional<z.ZodNumber>;
+                vramMb: z.ZodOptional<z.ZodNumber>;
+                diskMb: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strip>>;
+            usage: z.ZodOptional<z.ZodObject<{
+                cpuPercent: z.ZodOptional<z.ZodNumber>;
+                ramPercent: z.ZodOptional<z.ZodNumber>;
+                gpuPercent: z.ZodOptional<z.ZodNumber>;
+                diskPercent: z.ZodOptional<z.ZodNumber>;
+                temperatureC: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strip>>;
+            activeJobs: z.ZodOptional<z.ZodNumber>;
+            notes: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        sandboxResourceId: z.ZodNullable<z.ZodString>;
+        relayReachable: z.ZodDefault<z.ZodBoolean>;
+        restrictedWorkload: z.ZodOptional<z.ZodBoolean>;
+        lastHeartbeatAt: z.ZodNullable<z.ZodPipe<z.ZodISODateTime, z.ZodTransform<Date, string>>>;
+        lastBilledAt: z.ZodNullable<z.ZodPipe<z.ZodISODateTime, z.ZodTransform<Date, string>>>;
+        relayConnectedAt: z.ZodNullable<z.ZodPipe<z.ZodISODateTime, z.ZodTransform<Date, string>>>;
+        createdAt: z.ZodPipe<z.ZodISODateTime, z.ZodTransform<Date, string>>;
+        updatedAt: z.ZodPipe<z.ZodISODateTime, z.ZodTransform<Date, string>>;
+    }, z.core.$strip>;
+    expiresAt: z.ZodOptional<z.ZodNullable<z.ZodPipe<z.ZodISODateTime, z.ZodTransform<Date, string>>>>;
+}, z.core.$strip>;
+export type SandboxDescriptorInput = z.infer<typeof sandboxDescriptorInputSchema>;
+export type ProvisionHostForm = z.infer<typeof provisionHostFormSchema>;
+export type ProvisionHostRequest = z.infer<typeof provisionHostRequestSchema>;
+export type ProvisionHostResponse = z.infer<typeof provisionHostResponseSchema>;
+//# sourceMappingURL=provision.d.ts.map

package/dist/schemas/hosts/provision.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provision.d.ts","sourceRoot":"","sources":["../../../src/schemas/hosts/provision.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAS5B;;;;;;;;;GASG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;iBAWvC,CAAC;AAEH,kFAAkF;AAClF,eAAO,MAAM,4BAA4B,MAAM,CAAC;AAEhD,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAsDlC,CAAC;AAEH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAA0B,CAAC;AAElE,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAatC,CAAC;AAIH,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAS1C,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAClF,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAC9E,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC"}

package/dist/schemas/hosts/provision.js

@@ -0,0 +1,110 @@
+import * as z from 'zod/v4';
+import { hostActionPolicySchema } from "./actions.js";
+import { hostCapabilitiesSchema, hostEnvironmentSchema, hostProviderSchema, hostSchema } from "./common.js";
+/**
+ * The IaaS sandbox descriptor input the user supplies. The route synthesizes
+ * the full `infra/sandbox` runtime descriptor (with a server-generated id +
+ * `vibes:hostId=<id>` tag injection) and resolves an impl via the runtime.
+ *
+ * Validation is intentionally permissive — the resolved infra adapter
+ * descriptorSchema (e.g. `DoDropletDescriptorSchema` in
+ * [`infra-doks`](../../../../infra-doks/SPEC.md)) does the strict
+ * shape check. Adding new providers is an adapter-package change.
+ */
+export const sandboxDescriptorInputSchema = z.object({
+    adapter: z.string().min(1),
+    region: z.string().optional(),
+    dropletSize: z.string().optional(),
+    /** @deprecated Use `dropletSize`; kept for older platform-web and CLI callers. */
+    size: z.string().optional(),
+    image: z.string().optional(),
+    tags: z.array(z.string()).optional(),
+    sshKeyIds: z.array(z.string()).optional(),
+    cloudInitScript: z.string().optional(),
+    extras: z.record(z.string(), z.unknown()).optional()
+});
+/** Upper bound for a requested host TTL; mirrors `FLEET_LAUNCH_MAX_TTL_HOURS`. */
+export const PROVISION_HOST_MAX_TTL_HOURS = 168;
+export const provisionHostFormSchema = z.object({
+    hostId: z
+        .string()
+        .min(2)
+        .max(64)
+        .regex(/^[a-z0-9-]+$/, 'Host ID must be kebab-case'),
+    name: z.string().min(2).max(120),
+    description: z.string().optional(),
+    environment: hostEnvironmentSchema.default('consumer'),
+    provider: hostProviderSchema.default('custom'),
+    region: z.string().optional(),
+    capabilities: hostCapabilitiesSchema.optional(),
+    expiresInHours: z.number().int().positive().max(168).default(24),
+    sandbox: sandboxDescriptorInputSchema,
+    /**
+     * Requested host time-to-live in hours (`vibes fleet launch --ttl`). The
+     * CLI always sent this, but until this field existed the route's zod parse
+     * silently stripped it, so no TTL ever reached the server and orphaned
+     * droplets billed indefinitely. Optional because hand-enrolled hosts and
+     * the web form carry no TTL. The server records it as an expiry and reports
+     * it back as `expiresAt` on the provision response; when the response has
+     * no `expiresAt`, the server did NOT record one and the caller must say so.
+     */
+    ttlHours: z.number().int().min(1).max(PROVISION_HOST_MAX_TTL_HOURS).optional(),
+    /**
+     * Explicit org-scope override for the provisioned host's owner (e.g.
+     * `vibes fleet launch --org <orgId>`). The CLI authenticates with a bearer
+     * JWT and carries no `activeOrg` cookie, so the route's default
+     * `actingScopeFromLocals(locals)` always resolves to the caller's
+     * PERSONAL scope — without this field there is no way to provision an
+     * org-owned host from the CLI at all. The route authorizes this value
+     * server-side against the caller's verified JWT `orgs` membership claim
+     * before honoring it (never trusted on its own); a non-member request is
+     * rejected with 403. Omit for personal-scope provisioning (unchanged
+     * default behavior).
+     */
+    ownerOrgId: z.string().min(1).optional(),
+    /**
+     * This host may run workloads providers restrict (including game servers).
+     * When set, provision uses only the owner provider credential — never the
+     * Vibes platform token. Game presets force it on.
+     */
+    restrictedWorkload: z.boolean().optional(),
+    /** Account secret key for the owner cloud token. Must not be a platform token key. */
+    ownerProviderCredentialKey: z.string().min(1).optional(),
+    /** Launch preset. `game-server` forces restrictedWorkload and serviceKind `game/server`. */
+    preset: z.string().min(1).optional(),
+    /**
+     * The new host's action policy, applied in the same step only when the
+     * caller administers the host (its user, or an organization owner or
+     * admin); anyone else supplying one is refused. Omitted, the host accepts
+     * nothing until an administrator sets it.
+     */
+    actionPolicy: hostActionPolicySchema.optional()
+});
+export const provisionHostRequestSchema = provisionHostFormSchema;
+export const provisionHostResponseSchema = z.object({
+    host: hostSchema,
+    /** Absent when an existing process was reconciled without issuing enrollment. */
+    enrollmentTokenStart: z.string().optional(),
+    enrollmentTokenPrefix: z.string().optional(),
+    sandboxResourceId: z.string(),
+    /**
+     * Server-confirmed teardown time derived from `ttlHours`. Absent or `null`
+     * means the server recorded NO expiry for this host (it will not be torn
+     * down automatically), and callers must surface that rather than echo the
+     * requested TTL as if it were enforced.
+     */
+    expiresAt: z.date().nullable().optional()
+});
+// HTTP dates arrive as ISO strings; the semantic client returns domain Dates.
+const responseDateSchema = z.iso.datetime().transform(value => new Date(value));
+export const provisionHostResponseJsonSchema = provisionHostResponseSchema.extend({
+    host: hostSchema.extend({
+        lastHeartbeatAt: responseDateSchema.nullable(),
+        lastBilledAt: responseDateSchema.nullable(),
+        relayConnectedAt: responseDateSchema.nullable(),
+        createdAt: responseDateSchema,
+        updatedAt: responseDateSchema
+    }),
+    expiresAt: responseDateSchema.nullable().optional()
+});
+//# sourceMappingURL=provision.js.map

package/dist/schemas/hosts/provision.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provision.js","sourceRoot":"","sources":["../../../src/schemas/hosts/provision.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EACN,sBAAsB,EACtB,qBAAqB,EACrB,kBAAkB,EAClB,UAAU,EACV,MAAM,aAAa,CAAC;AAErB;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,kFAAkF;IAClF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACzC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACpD,CAAC,CAAC;AAEH,kFAAkF;AAClF,MAAM,CAAC,MAAM,4BAA4B,GAAG,GAAG,CAAC;AAEhD,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,MAAM,EAAE,CAAC;SACP,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,EAAE,CAAC;SACP,KAAK,CAAC,cAAc,EAAE,4BAA4B,CAAC;IACrD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,WAAW,EAAE,qBAAqB,CAAC,OAAO,CAAC,UAAU,CAAC;IACtD,QAAQ,EAAE,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC9C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,YAAY,EAAE,sBAAsB,CAAC,QAAQ,EAAE;IAC/C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAChE,OAAO,EAAE,4BAA4B;IACrC;;;;;;;;OAQG;IACH,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,QAAQ,EAAE;IAC9E;;;;;;;;;;;OAWG;IACH,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxC;;;;OAIG;IACH,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC1C,sFAAsF;IACtF,0BAA0B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxD,4FAA4F;IAC5F,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpC;;;;;OAKG;IACH,YAAY,EAAE,sBAAsB,CAAC,QAAQ,EAAE;CAC/C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,uBAAuB,CAAC;AAElE,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,IAAI,EAAE,UAAU;IAChB,iFAAiF;IACjF,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3C,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5C,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC7B;;;;;OAKG;IACH,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACzC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,MAAM,kBAAkB,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AAChF,MAAM,CAAC,MAAM,+BAA+B,GAAG,2BAA2B,CAAC,MAAM,CAAC;IACjF,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC;QACvB,eAAe,EAAE,kBAAkB,CAAC,QAAQ,EAAE;QAC9C,YAAY,EAAE,kBAAkB,CAAC,QAAQ,EAAE;QAC3C,gBAAgB,EAAE,kBAAkB,CAAC,QAAQ,EAAE;QAC/C,SAAS,EAAE,kBAAkB;QAC7B,SAAS,EAAE,kBAAkB;KAC7B,CAAC;IACF,SAAS,EAAE,kBAAkB,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACnD,CAAC,CAAC"}