@wrongstack/cli 0.295.1 → 0.296.3

package/dist/chunk-Z7YGASQP.js

@@ -0,0 +1,313 @@
+
+// src/tui-thinking-word.ts
+var DEFAULT_TUI_THINKING_WORD = "thinking";
+var MAX_TUI_THINKING_WORD_LENGTH = 16;
+function normalizeTuiThinkingWord(value) {
+  if (typeof value !== "string") return DEFAULT_TUI_THINKING_WORD;
+  const word = value.trim();
+  if (word.length === 0 || word.length > MAX_TUI_THINKING_WORD_LENGTH) {
+    return DEFAULT_TUI_THINKING_WORD;
+  }
+  if (!/^[\p{L}\p{N}_-]+$/u.test(word)) return DEFAULT_TUI_THINKING_WORD;
+  return word;
+}
+
+// src/settings-menu.ts
+import * as fs from "node:fs/promises";
+import * as path from "node:path";
+import { atomicWrite, deepMerge } from "@wrongstack/core/utils";
+import { ConfigError, ERROR_CODES, FsError } from "@wrongstack/core/types";
+import { decryptConfigSecrets, encryptConfigSecrets } from "@wrongstack/core/security";
+function resolvePersistPath(deps) {
+  if (deps.forceGlobal) return deps.profileConfigPath;
+  const scope = deps.configStore.get().configScope;
+  if (scope === "project" && deps.inProjectConfigPath) {
+    return deps.inProjectConfigPath;
+  }
+  return deps.profileConfigPath;
+}
+function resolveActualTarget(deps, decrypted, fallbackPath) {
+  if (deps.forceGlobal) return deps.profileConfigPath;
+  const newScope = decrypted.configScope;
+  const newProfileName = decrypted.activeProfile;
+  const effectiveProfilePath = newProfileName && deps.resolveProfilePath ? deps.resolveProfilePath(newProfileName) : deps.profileConfigPath;
+  if (newScope === "project" && deps.inProjectConfigPath) {
+    return deps.inProjectConfigPath;
+  }
+  if (newScope === "global") {
+    return effectiveProfilePath;
+  }
+  return fallbackPath;
+}
+function isProfileOrGlobalTarget(actualTarget, deps) {
+  return actualTarget === deps.profileConfigPath;
+}
+async function ensureProjectDir(filePath) {
+  const dir = path.dirname(filePath);
+  try {
+    await fs.mkdir(dir, { recursive: true });
+  } catch {
+  }
+}
+async function mergeWithDestinationIfExists(destPath, source, vault) {
+  let destRaw;
+  try {
+    destRaw = await fs.readFile(destPath, "utf8");
+  } catch (err) {
+    if (err.code === "ENOENT") {
+      return source;
+    }
+    throw err;
+  }
+  let destParsed;
+  try {
+    destParsed = JSON.parse(destRaw);
+  } catch (err) {
+    process.stderr.write(JSON.stringify({
+      level: "warn",
+      event: "settings_menu_merge_skipped",
+      message: `Skipping merge into corrupt destination file: ${destPath}`,
+      timestamp: (/* @__PURE__ */ new Date()).toISOString()
+    }) + "\n");
+    void err;
+    return source;
+  }
+  const destDecrypted = decryptConfigSecrets(destParsed, vault);
+  return deepMerge(destDecrypted, source);
+}
+var PROJECT_SAFE_FIELDS = /* @__PURE__ */ new Set([
+  "provider",
+  "model",
+  "fallbackModels",
+  // Kept in sync with core's IN_PROJECT_ALLOWED_KEYS (config-loader.ts): these
+  // model-routing prefs are explicitly safe to READ from a per-project config,
+  // so the writer must not strip them — otherwise a scope=project /fallback
+  // profile/fav write (or a TUI full-config write under project scope) would be
+  // silently dropped while the loader would happily accept them on next boot.
+  "fallbackProfiles",
+  "favoriteModels",
+  "favoriteModelsOnly",
+  "modelAvailabilitySchedule",
+  "fallbackAuto",
+  "models",
+  "modelMatrix",
+  "maxConcurrent",
+  "autonomy",
+  "hints",
+  "nextPrediction",
+  "debugStream",
+  "configScope",
+  "yolo",
+  "features",
+  "context",
+  "log",
+  "session",
+  "indexing",
+  "tools",
+  "launch",
+  "circuitBreaker",
+  "adaptiveConcurrency",
+  "modelRuntime"
+]);
+function filterSafeForProject(cfg) {
+  const out = {};
+  for (const [key, value] of Object.entries(cfg)) {
+    if (PROJECT_SAFE_FIELDS.has(key)) {
+      out[key] = value;
+    }
+  }
+  return out;
+}
+async function persistAutonomySetting(deps, mutator) {
+  const targetPath = resolvePersistPath(deps);
+  await ensureProjectDir(targetPath);
+  let raw;
+  let fileExists = true;
+  try {
+    raw = await fs.readFile(targetPath, "utf8");
+  } catch (err) {
+    if (err.code !== "ENOENT") {
+      throw new FsError({
+        message: `Could not read ${targetPath}`,
+        code: ERROR_CODES.FS_READ_FAILED,
+        path: targetPath,
+        cause: err
+      });
+    }
+    fileExists = false;
+    raw = "{}";
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch (err) {
+    if (fileExists) {
+      throw new ConfigError({
+        message: `Config at ${targetPath} is not valid JSON`,
+        code: ERROR_CODES.CONFIG_PARSE_FAILED,
+        context: { path: targetPath },
+        cause: err
+      });
+    }
+    parsed = {};
+  }
+  const decrypted = decryptConfigSecrets(parsed, deps.vault);
+  const autonomy = decrypted.autonomy ?? {};
+  mutator(
+    autonomy
+  );
+  decrypted.autonomy = autonomy;
+  const actualTarget = resolveActualTarget(deps, decrypted, targetPath);
+  if (actualTarget !== targetPath) {
+    await ensureProjectDir(actualTarget);
+  }
+  const effectiveConfig = actualTarget !== targetPath ? await mergeWithDestinationIfExists(actualTarget, decrypted, deps.vault) : decrypted;
+  const toWrite = isProfileOrGlobalTarget(actualTarget, deps) ? effectiveConfig : filterSafeForProject(effectiveConfig);
+  const encrypted = encryptConfigSecrets(toWrite, deps.vault);
+  await atomicWrite(actualTarget, JSON.stringify(encrypted, null, 2), { mode: 384 });
+  deps.configStore.update({
+    autonomy: decrypted.autonomy
+  });
+}
+async function persistConfigSetting(deps, mutator) {
+  const targetPath = resolvePersistPath(deps);
+  await ensureProjectDir(targetPath);
+  let raw;
+  let fileExists = true;
+  try {
+    raw = await fs.readFile(targetPath, "utf8");
+  } catch (err) {
+    if (err.code !== "ENOENT") {
+      throw new FsError({
+        message: `Could not read ${targetPath}`,
+        code: ERROR_CODES.FS_READ_FAILED,
+        path: targetPath,
+        cause: err
+      });
+    }
+    fileExists = false;
+    raw = "{}";
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch (err) {
+    if (fileExists) {
+      throw new ConfigError({
+        message: `Config at ${targetPath} is not valid JSON`,
+        code: ERROR_CODES.CONFIG_PARSE_FAILED,
+        context: { path: targetPath },
+        cause: err
+      });
+    }
+    parsed = {};
+  }
+  const decrypted = decryptConfigSecrets(parsed, deps.vault);
+  mutator(decrypted);
+  const actualTarget = resolveActualTarget(deps, decrypted, targetPath);
+  if (actualTarget !== targetPath) {
+    await ensureProjectDir(actualTarget);
+  }
+  const effectiveConfig = actualTarget !== targetPath ? await mergeWithDestinationIfExists(actualTarget, decrypted, deps.vault) : decrypted;
+  const toWrite = isProfileOrGlobalTarget(actualTarget, deps) ? effectiveConfig : filterSafeForProject(effectiveConfig);
+  const encrypted = encryptConfigSecrets(toWrite, deps.vault);
+  await atomicWrite(actualTarget, JSON.stringify(encrypted, null, 2), { mode: 384 });
+  deps.configStore.update(decrypted);
+}
+async function persistTelegramConfig(deps, mutator) {
+  const targetPath = deps.profileConfigPath;
+  let raw;
+  let fileExists = true;
+  try {
+    raw = await fs.readFile(targetPath, "utf8");
+  } catch (err) {
+    if (err.code !== "ENOENT") {
+      throw new FsError({
+        message: `Could not read ${targetPath}: ${err.message}`,
+        code: "FS_READ_FAILED",
+        path: targetPath,
+        context: { operation: "readGlobalConfig", phase: "read" },
+        cause: err
+      });
+    }
+    fileExists = false;
+    raw = "{}";
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch (err) {
+    if (fileExists) {
+      throw new ConfigError({
+        message: `Config at ${targetPath} is not valid JSON: ${err.message}`,
+        code: "CONFIG_PARSE_FAILED",
+        context: { filePath: targetPath, operation: "readProfileConfig" },
+        cause: err
+      });
+    }
+    parsed = {};
+  }
+  const decrypted = decryptConfigSecrets(parsed, deps.vault);
+  const extensions = decrypted.extensions ?? {};
+  const telegram = extensions.telegram ?? {};
+  mutator(telegram);
+  extensions.telegram = telegram;
+  decrypted.extensions = extensions;
+  const encrypted = encryptConfigSecrets(decrypted, deps.vault);
+  await atomicWrite(targetPath, JSON.stringify(encrypted, null, 2), { mode: 384 });
+  deps.configStore.update({
+    extensions
+  });
+}
+function deriveFsAccessPair(input) {
+  if (input.allowOutsideProjectRoot !== void 0) {
+    const allow = input.allowOutsideProjectRoot;
+    return { allowOutsideProjectRoot: allow, restrictToProjectRoot: !allow };
+  }
+  if (input.restrictFsToRoot !== void 0) {
+    const restrict = input.restrictFsToRoot;
+    return { allowOutsideProjectRoot: !restrict, restrictToProjectRoot: restrict };
+  }
+  return void 0;
+}
+
+// src/services/suggestion-store.ts
+var sharedSuggestions = [];
+var sharedAutoSuggestions = [];
+function setSuggestions(suggestions) {
+  sharedSuggestions = suggestions;
+}
+function setAutoSuggestions(suggestions) {
+  sharedAutoSuggestions = suggestions;
+}
+function getSuggestions() {
+  return sharedSuggestions;
+}
+function removeSuggestions(indices) {
+  if (indices.length === 0) return;
+  const set = new Set(indices);
+  sharedSuggestions = sharedSuggestions.filter((_, i) => !set.has(i));
+  sharedAutoSuggestions = [];
+}
+function clearSuggestions() {
+  sharedSuggestions = [];
+  sharedAutoSuggestions = [];
+}
+
+export {
+  MAX_TUI_THINKING_WORD_LENGTH,
+  normalizeTuiThinkingWord,
+  resolvePersistPath,
+  resolveActualTarget,
+  filterSafeForProject,
+  persistAutonomySetting,
+  persistConfigSetting,
+  persistTelegramConfig,
+  deriveFsAccessPair,
+  setSuggestions,
+  setAutoSuggestions,
+  getSuggestions,
+  removeSuggestions,
+  clearSuggestions
+};
+//# sourceMappingURL=chunk-Z7YGASQP.js.map

package/dist/chunk-Z7YGASQP.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/tui-thinking-word.ts", "../src/settings-menu.ts", "../src/services/suggestion-store.ts"],
+  "sourcesContent": ["export const DEFAULT_TUI_THINKING_WORD = 'thinking';\nexport const MAX_TUI_THINKING_WORD_LENGTH = 16;\n\n/** Normalize autonomy.thinkingWord to a single short word for the TUI statusline. */\nexport function normalizeTuiThinkingWord(value: unknown): string {\n  if (typeof value !== 'string') return DEFAULT_TUI_THINKING_WORD;\n  const word = value.trim();\n  if (word.length === 0 || word.length > MAX_TUI_THINKING_WORD_LENGTH) {\n    return DEFAULT_TUI_THINKING_WORD;\n  }\n  if (!/^[\\p{L}\\p{N}_-]+$/u.test(word)) return DEFAULT_TUI_THINKING_WORD;\n  return word;\n}\n", "import * as fs from 'node:fs/promises';\nimport * as path from 'node:path';\nimport { atomicWrite, deepMerge } from '@wrongstack/core/utils';\nimport { ConfigError, ERROR_CODES, FsError, type SecretVault } from '@wrongstack/core/types';\nimport type { ConfigStore } from '@wrongstack/core/types';\nimport { decryptConfigSecrets, encryptConfigSecrets } from '@wrongstack/core/security';\n\n/** Configuration and storage dependencies needed to persist a setting.\n *  This is safe to call from non-interactive surfaces such as the TUI,\n *  headless runs, and the arg-driven `/settings` slash command. */\nexport interface PersistSettingDeps {\n  configStore: ConfigStore;\n  /** Path to the active profile config (~/.wrongstack/profiles/<name>/config.json). */\n  profileConfigPath: string;\n  /** Per-project config path (<project>/.wrongstack/config.json).\n   *  Used when configScope === 'project'. Lives inside the project\n   *  root so it can be gitignored or team-shared. */\n  inProjectConfigPath?: string | undefined;\n  vault: SecretVault;\n  /** Force writes to the active profile config even when configScope is project. */\n  forceGlobal?: boolean | undefined;\n  /**\n   * Optional resolver that recomputes the profile config path for a given\n   * profile name. When set, {@link resolveActualTarget} uses this to\n   * re-resolve the target path when `decrypted.activeProfile` differs from\n   * the one used to compute `profileConfigPath`. This prevents the write\n   * from landing in the wrong profile when the mutator changes activeProfile.\n   */\n  resolveProfilePath?: ((profileName: string) => string) | undefined;\n}\n\nexport function resolvePersistPath(deps: PersistSettingDeps): string {\n  if (deps.forceGlobal) return deps.profileConfigPath;\n  const scope = (deps.configStore.get() as { configScope?: string | undefined }).configScope;\n  if (scope === 'project' && deps.inProjectConfigPath) {\n    return deps.inProjectConfigPath;\n  }\n  // Default user scope always means the active profile, never the root bootstrap.\n  return deps.profileConfigPath;\n}\n\n/**\n * Re-resolve the target path after a mutator may have changed configScope.\n * Handles the two settings targets: project config or active profile config.\n */\nexport function resolveActualTarget(\n  deps: PersistSettingDeps,\n  decrypted: Record<string, unknown>,\n  fallbackPath: string,\n): string {\n  if (deps.forceGlobal) return deps.profileConfigPath;\n  const newScope = decrypted.configScope as string | undefined;\n  // Recompute profile path when activeProfile changed in the mutation block.\n  const newProfileName = decrypted.activeProfile as string | undefined;\n  const effectiveProfilePath =\n    newProfileName && deps.resolveProfilePath\n      ? deps.resolveProfilePath(newProfileName)\n      : deps.profileConfigPath;\n  if (newScope === 'project' && deps.inProjectConfigPath) {\n    return deps.inProjectConfigPath;\n  }\n  if (newScope === 'global') {\n    return effectiveProfilePath;\n  }\n  return fallbackPath;\n}\n\n/**\n * Returns true when the target path is the trusted active-profile config, so\n * secrets are NOT stripped before writing.\n * Returns false for project-scoped paths where credentials must be filtered.\n */\nfunction isProfileOrGlobalTarget(actualTarget: string, deps: PersistSettingDeps): boolean {\n  return actualTarget === deps.profileConfigPath;\n}\n\nasync function ensureProjectDir(filePath: string): Promise<void> {\n  const dir = path.dirname(filePath);\n  try {\n    await fs.mkdir(dir, { recursive: true });\n  } catch {\n    // Directory already exists or is inaccessible \u2014 the write will surface the real error.\n  }\n}\n\n/**\n * When configScope changed mid-save, the write target differs from the file\n * that was read.  Read the *destination* file, decrypt it, and deep-merge the\n * mutated `source` on top (prefer-patch so the user's explicit changes win).\n * This prevents a sparse source (e.g. project config without credentials)\n * from clobbering credential-bearing fields in the destination (e.g. profile\n * config with apiKey / providers / mcpServers).\n *\n * Returns `source` unchanged when destination does not exist yet.\n */\nasync function mergeWithDestinationIfExists(\n  destPath: string,\n  source: Record<string, unknown>,\n  vault: SecretVault,\n): Promise<Record<string, unknown>> {\n  let destRaw: string;\n  try {\n    destRaw = await fs.readFile(destPath, 'utf8');\n  } catch (err) {\n    // Only swallow ENOENT (destination doesn't exist yet).\n    // All other errors (EACCES, EIO, etc.) propagate as-is.\n    if ((err as NodeJS.ErrnoException).code === 'ENOENT') {\n      return source;\n    }\n    throw err;\n  }\n  let destParsed: Record<string, unknown>;\n  try {\n    destParsed = JSON.parse(destRaw) as Record<string, unknown>;\n  } catch (err) {\n    // Corrupt destination \u2014 don't merge, just write our content.\n    process.stderr.write(JSON.stringify({\n      level: 'warn',\n      event: 'settings_menu_merge_skipped',\n      message: `Skipping merge into corrupt destination file: ${destPath}`,\n      timestamp: new Date().toISOString(),\n    }) + '\\n');\n    void err;\n    return source;\n  }\n  const destDecrypted = decryptConfigSecrets(destParsed, vault) as Record<string, unknown>;\n  return deepMerge(destDecrypted, source) as Record<string, unknown>;\n}\n\n/**\n * Fields that are safe to persist in a per-project `.wrongstack/config.json`.\n * Credential-bearing fields (apiKey, providers, sync) MUST NOT appear here \u2014\n * they stay in the active profile config only. The active profile always gets the\n * full unfiltered object.\n *\n * When adding a field here, ask: \"Would I commit this to a shared repo?\"\n * If the answer is no, it doesn't belong on this list.\n */\nconst PROJECT_SAFE_FIELDS = new Set([\n  'provider',\n  'model',\n  'fallbackModels',\n  // Kept in sync with core's IN_PROJECT_ALLOWED_KEYS (config-loader.ts): these\n  // model-routing prefs are explicitly safe to READ from a per-project config,\n  // so the writer must not strip them \u2014 otherwise a scope=project /fallback\n  // profile/fav write (or a TUI full-config write under project scope) would be\n  // silently dropped while the loader would happily accept them on next boot.\n  'fallbackProfiles',\n  'favoriteModels',\n  'favoriteModelsOnly',\n  'modelAvailabilitySchedule',\n  'fallbackAuto',\n  'models',\n  'modelMatrix',\n  'maxConcurrent',\n  'autonomy',\n  'hints',\n  'nextPrediction',\n  'debugStream',\n  'configScope',\n  'yolo',\n  'features',\n  'context',\n  'log',\n  'session',\n  'indexing',\n  'tools',\n  'launch',\n  'circuitBreaker',\n  'adaptiveConcurrency',\n  'modelRuntime',\n]);\n\n/**\n * Strip credential-bearing and machine-specific fields from a config object\n * so it is safe to write into a per-project `.wrongstack/config.json` file.\n * Returns a new object \u2014 the original is not mutated.\n */\nexport function filterSafeForProject(cfg: Record<string, unknown>): Record<string, unknown> {\n  const out: Record<string, unknown> = {};\n  for (const [key, value] of Object.entries(cfg)) {\n    if (PROJECT_SAFE_FIELDS.has(key)) {\n      out[key] = value;\n    }\n  }\n  return out;\n}\n\n/**\n * Read the config file, apply `mutator` to its `autonomy` block, and write it\n * back atomically (then mirror into the in-memory config store). Pure I/O \u2014 no\n * terminal interaction \u2014 so it works identically under the plain REPL and the\n * Ink TUI.\n */\nexport async function persistAutonomySetting(\n  deps: PersistSettingDeps,\n  mutator: (autonomy: {\n    autoProceedDelayMs?: number | undefined;\n    defaultMode?: string | undefined;\n    enhance?: boolean | undefined;\n    enhanceDelayMs?: number | undefined;\n    enhanceLanguage?: string | undefined;\n  }) => void,\n): Promise<void> {\n  const targetPath = resolvePersistPath(deps);\n  await ensureProjectDir(targetPath);\n\n  let raw: string;\n  let fileExists = true;\n  try {\n    raw = await fs.readFile(targetPath, 'utf8');\n  } catch (err) {\n    if ((err as NodeJS.ErrnoException).code !== 'ENOENT') {\n      throw new FsError({\n        message: `Could not read ${targetPath}`,\n        code: ERROR_CODES.FS_READ_FAILED,\n        path: targetPath,\n        cause: err,\n      });\n    }\n    fileExists = false;\n    raw = '{}';\n  }\n\n  let parsed: Record<string, unknown>;\n  try {\n    parsed = JSON.parse(raw) as Record<string, unknown>;\n  } catch (err) {\n    if (fileExists) {\n      throw new ConfigError({\n        message: `Config at ${targetPath} is not valid JSON`,\n        code: ERROR_CODES.CONFIG_PARSE_FAILED,\n        context: { path: targetPath },\n        cause: err,\n      });\n    }\n    parsed = {};\n  }\n\n  const decrypted = decryptConfigSecrets(parsed, deps.vault) as Record<string, unknown>;\n  const autonomy = (decrypted.autonomy as Record<string, unknown>) ?? {};\n  mutator(\n    autonomy as { autoProceedDelayMs?: number | undefined; defaultMode?: string | undefined },\n  );\n  decrypted.autonomy = autonomy;\n\n  // Re-resolve path \u2014 the mutator might have changed configScope.\n  const actualTarget = resolveActualTarget(deps, decrypted as Record<string, unknown>, targetPath);\n  if (actualTarget !== targetPath) {\n    await ensureProjectDir(actualTarget);\n  }\n\n  // When configScope changed mid-save, merge into the destination file's\n  // existing content so credential-bearing fields are preserved.\n  const effectiveConfig =\n    actualTarget !== targetPath\n      ? await mergeWithDestinationIfExists(actualTarget, decrypted, deps.vault)\n      : decrypted;\n\n  // When writing to the project-local config, strip credentials so\n  // apiKey / providers / sync never leak into a per-project file.\n  const toWrite =\n    isProfileOrGlobalTarget(actualTarget, deps) ? effectiveConfig : filterSafeForProject(effectiveConfig);\n\n  const encrypted = encryptConfigSecrets(toWrite, deps.vault);\n  await atomicWrite(actualTarget, JSON.stringify(encrypted, null, 2), { mode: 0o600 });\n\n  // Also update the in-memory config store so changes are immediately visible\n  deps.configStore.update({\n    autonomy: decrypted.autonomy as Parameters<typeof deps.configStore.update>[0]['autonomy'],\n  });\n}\n\n/**\n * Read the config file, apply `mutator` to the full decrypted object, and\n * write it back atomically. This is used for small top-level settings that do\n * not warrant a dedicated helper.\n */\nexport async function persistConfigSetting(\n  deps: PersistSettingDeps,\n  mutator: (config: Record<string, unknown>) => void,\n): Promise<void> {\n  const targetPath = resolvePersistPath(deps);\n  await ensureProjectDir(targetPath);\n\n  let raw: string;\n  let fileExists = true;\n  try {\n    raw = await fs.readFile(targetPath, 'utf8');\n  } catch (err) {\n    if ((err as NodeJS.ErrnoException).code !== 'ENOENT') {\n      throw new FsError({\n        message: `Could not read ${targetPath}`,\n        code: ERROR_CODES.FS_READ_FAILED,\n        path: targetPath,\n        cause: err,\n      });\n    }\n    fileExists = false;\n    raw = '{}';\n  }\n\n  let parsed: Record<string, unknown>;\n  try {\n    parsed = JSON.parse(raw) as Record<string, unknown>;\n  } catch (err) {\n    if (fileExists) {\n      throw new ConfigError({\n        message: `Config at ${targetPath} is not valid JSON`,\n        code: ERROR_CODES.CONFIG_PARSE_FAILED,\n        context: { path: targetPath },\n        cause: err,\n      });\n    }\n    parsed = {};\n  }\n\n  const decrypted = decryptConfigSecrets(parsed, deps.vault) as Record<string, unknown>;\n  mutator(decrypted);\n\n  // If the mutator changed configScope, re-resolve the target path.\n  // Without this, a scope change from 'project' \u2192 'global' would write\n  // to the old project path instead of the new global one.\n  const actualTarget = resolveActualTarget(deps, decrypted, targetPath);\n\n  // Ensure the directory exists if we're writing to a new path\n  if (actualTarget !== targetPath) {\n    await ensureProjectDir(actualTarget);\n  }\n\n  // When configScope changed mid-save, merge into the destination file's\n  // existing content so credential-bearing fields are preserved.\n  const effectiveConfig =\n    actualTarget !== targetPath\n      ? await mergeWithDestinationIfExists(actualTarget, decrypted, deps.vault)\n      : decrypted;\n\n  // When writing to the project-local config, strip credentials so\n  // apiKey / providers / sync never leak into a per-project file.\n  const toWrite =\n    isProfileOrGlobalTarget(actualTarget, deps) ? effectiveConfig : filterSafeForProject(effectiveConfig);\n\n  const encrypted = encryptConfigSecrets(toWrite, deps.vault);\n  await atomicWrite(actualTarget, JSON.stringify(encrypted, null, 2), { mode: 0o600 });\n  deps.configStore.update(decrypted as Parameters<typeof deps.configStore.update>[0]);\n}\n\n/**\n * Persist Telegram plugin config to `extensions.telegram` in the active profile config\n * file. Mirrors `persistAutonomySetting` \u2014 reads the config, applies the\n * mutator, encrypts secrets, writes atomically, then updates ConfigStore.\n */\nexport async function persistTelegramConfig(\n  deps: PersistSettingDeps,\n  mutator: (telegram: Record<string, unknown>) => void,\n): Promise<void> {\n  const targetPath = deps.profileConfigPath;\n  let raw: string;\n  let fileExists = true;\n  try {\n    raw = await fs.readFile(targetPath, 'utf8');\n  } catch (err) {\n    if ((err as NodeJS.ErrnoException).code !== 'ENOENT') {\n      throw new FsError({\n        message: `Could not read ${targetPath}: ${(err as Error).message}`,\n        code: 'FS_READ_FAILED',\n        path: targetPath,\n        context: { operation: 'readGlobalConfig', phase: 'read' },\n        cause: err,\n      });\n    }\n    fileExists = false;\n    raw = '{}';\n  }\n\n  let parsed: Record<string, unknown>;\n  try {\n    parsed = JSON.parse(raw) as Record<string, unknown>;\n  } catch (err) {\n    if (fileExists) {\n      throw new ConfigError({\n        message: `Config at ${targetPath} is not valid JSON: ${(err as Error).message}`,\n        code: 'CONFIG_PARSE_FAILED',\n        context: { filePath: targetPath, operation: 'readProfileConfig' },\n        cause: err,\n      });\n    }\n    parsed = {};\n  }\n\n  const decrypted = decryptConfigSecrets(parsed, deps.vault) as Record<string, unknown>;\n  const extensions = (decrypted.extensions as Record<string, Record<string, unknown>>) ?? {};\n  const telegram = extensions.telegram ?? {};\n  mutator(telegram);\n  extensions.telegram = telegram;\n  decrypted.extensions = extensions;\n\n  const encrypted = encryptConfigSecrets(decrypted, deps.vault);\n  await atomicWrite(targetPath, JSON.stringify(encrypted, null, 2), { mode: 0o600 });\n\n  // Also update the in-memory config store so changes are immediately visible\n  deps.configStore.update({\n    extensions: extensions as NonNullable<\n      Parameters<typeof deps.configStore.update>[0]['extensions']\n    >,\n  });\n}\n\n/**\n * Derive the filesystem-access pair (`features.allowOutsideProjectRoot` and\n * `tools.restrictToProjectRoot`) from a save input. The two are inverses\n * of each other and the codebase intentionally keeps both in sync for\n * backward compatibility with older readers that only know about\n * `tools.restrictToProjectRoot`.\n *\n * Single source of truth: `allowOutsideProjectRoot`. If the caller only\n * sets `restrictFsToRoot`, it is converted to its inverse. If both are\n * set (which the picker should not do, but defensive code paths may),\n * `allowOutsideProjectRoot` wins. Returns `undefined` if neither is set,\n * so the caller can skip the write.\n *\n * The input is duck-typed (only the two relevant fields are read) so any\n * caller can pass a partial shape: the TUI's full `LiveSettingsInput`,\n * a slash-command's `{ restrictFsToRoot: boolean }`, or any future\n * save-handler that only carries these two knobs.\n */\nexport function deriveFsAccessPair(input: {\n  allowOutsideProjectRoot?: boolean | undefined;\n  restrictFsToRoot?: boolean | undefined;\n}): { allowOutsideProjectRoot: boolean; restrictToProjectRoot: boolean } | undefined {\n  if (input.allowOutsideProjectRoot !== undefined) {\n    const allow = input.allowOutsideProjectRoot;\n    return { allowOutsideProjectRoot: allow, restrictToProjectRoot: !allow };\n  }\n  if (input.restrictFsToRoot !== undefined) {\n    const restrict = input.restrictFsToRoot;\n    return { allowOutsideProjectRoot: !restrict, restrictToProjectRoot: restrict };\n  }\n  return undefined;\n}\n", "/**\n * Shared suggestion state used by command and runtime surfaces.\n *\n * Previously, suggestions were stored in a closure variable (`currentSuggestions`)\n * inside cli-main.ts, accessed via the `onSuggestions` callback on\n * `SlashCommandContext`. This closure-based approach works correctly in the REPL\n * but can fail in the TUI when the callback goes through multiple indirections\n * (SlashCommandRegistry \u2192 SlashCommand.run \u2192 closed-over opts).\n *\n * By using a module-level store, both /suggest (writer) and /next (reader)\n * access the same array directly, bypassing the callback indirection entirely.\n * The CLI's `onSuggestions` callback now reads/writes this shared store to\n * maintain backward compatibility with the REPL autonomy loop's\n * `getSuggestions`/`onSuggestionsParsed` flow.\n *\n * Auto suggestions (items with auto=\"true\" attribute) are stored separately\n * for YOLO+auto autonomy mode.\n */\n\nlet sharedSuggestions: string[] = [];\nlet sharedAutoSuggestions: string[] = [];\n\n/** Store suggestions (called by /suggest and onSuggestionsParsed). */\nexport function setSuggestions(suggestions: string[]): void {\n  sharedSuggestions = suggestions;\n}\n\n/** Store auto suggestions (items with auto=\"true\" attribute). Called by onAutoSuggestionsParsed. */\nexport function setAutoSuggestions(suggestions: string[]): void {\n  sharedAutoSuggestions = suggestions;\n}\n\n/** Retrieve current suggestions (called by /next selection and getSuggestions). */\nexport function getSuggestions(): string[] {\n  return sharedSuggestions;\n}\n\n/** Retrieve current auto suggestions (called by YOLO+auto autonomy). */\nexport function getAutoSuggestions(): string[] {\n  return sharedAutoSuggestions;\n}\n\n/**\n * Remove suggestions at the given 0-based indices.\n * Called by /next selection so selected prompts cannot be re-selected.\n * Also clears auto-suggestions since an explicit user selection should\n * override any auto-submit queue.\n */\nexport function removeSuggestions(indices: number[]): void {\n  if (indices.length === 0) return;\n  const set = new Set(indices);\n  sharedSuggestions = sharedSuggestions.filter((_, i) => !set.has(i));\n  sharedAutoSuggestions = [];\n}\n\n/** Clear suggestions (called by /next clear). */\nexport function clearSuggestions(): void {\n  sharedSuggestions = [];\n  sharedAutoSuggestions = [];\n}\n"],
+  "mappings": ";;;AAAO,IAAM,4BAA4B;AAClC,IAAM,+BAA+B;AAGrC,SAAS,yBAAyB,OAAwB;AAC/D,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,OAAO,MAAM,KAAK;AACxB,MAAI,KAAK,WAAW,KAAK,KAAK,SAAS,8BAA8B;AACnE,WAAO;AAAA,EACT;AACA,MAAI,CAAC,qBAAqB,KAAK,IAAI,EAAG,QAAO;AAC7C,SAAO;AACT;;;ACZA,YAAY,QAAQ;AACpB,YAAY,UAAU;AACtB,SAAS,aAAa,iBAAiB;AACvC,SAAS,aAAa,aAAa,eAAiC;AAEpE,SAAS,sBAAsB,4BAA4B;AA0BpD,SAAS,mBAAmB,MAAkC;AACnE,MAAI,KAAK,YAAa,QAAO,KAAK;AAClC,QAAM,QAAS,KAAK,YAAY,IAAI,EAA2C;AAC/E,MAAI,UAAU,aAAa,KAAK,qBAAqB;AACnD,WAAO,KAAK;AAAA,EACd;AAEA,SAAO,KAAK;AACd;AAMO,SAAS,oBACd,MACA,WACA,cACQ;AACR,MAAI,KAAK,YAAa,QAAO,KAAK;AAClC,QAAM,WAAW,UAAU;AAE3B,QAAM,iBAAiB,UAAU;AACjC,QAAM,uBACJ,kBAAkB,KAAK,qBACnB,KAAK,mBAAmB,cAAc,IACtC,KAAK;AACX,MAAI,aAAa,aAAa,KAAK,qBAAqB;AACtD,WAAO,KAAK;AAAA,EACd;AACA,MAAI,aAAa,UAAU;AACzB,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAOA,SAAS,wBAAwB,cAAsB,MAAmC;AACxF,SAAO,iBAAiB,KAAK;AAC/B;AAEA,eAAe,iBAAiB,UAAiC;AAC/D,QAAM,MAAW,aAAQ,QAAQ;AACjC,MAAI;AACF,UAAS,SAAM,KAAK,EAAE,WAAW,KAAK,CAAC;AAAA,EACzC,QAAQ;AAAA,EAER;AACF;AAYA,eAAe,6BACb,UACA,QACA,OACkC;AAClC,MAAI;AACJ,MAAI;AACF,cAAU,MAAS,YAAS,UAAU,MAAM;AAAA,EAC9C,SAAS,KAAK;AAGZ,QAAK,IAA8B,SAAS,UAAU;AACpD,aAAO;AAAA,IACT;AACA,UAAM;AAAA,EACR;AACA,MAAI;AACJ,MAAI;AACF,iBAAa,KAAK,MAAM,OAAO;AAAA,EACjC,SAAS,KAAK;AAEZ,YAAQ,OAAO,MAAM,KAAK,UAAU;AAAA,MAClC,OAAO;AAAA,MACP,OAAO;AAAA,MACP,SAAS,iDAAiD,QAAQ;AAAA,MAClE,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC,IAAI,IAAI;AACT,SAAK;AACL,WAAO;AAAA,EACT;AACA,QAAM,gBAAgB,qBAAqB,YAAY,KAAK;AAC5D,SAAO,UAAU,eAAe,MAAM;AACxC;AAWA,IAAM,sBAAsB,oBAAI,IAAI;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAOM,SAAS,qBAAqB,KAAuD;AAC1F,QAAM,MAA+B,CAAC;AACtC,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,GAAG,GAAG;AAC9C,QAAI,oBAAoB,IAAI,GAAG,GAAG;AAChC,UAAI,GAAG,IAAI;AAAA,IACb;AAAA,EACF;AACA,SAAO;AACT;AAQA,eAAsB,uBACpB,MACA,SAOe;AACf,QAAM,aAAa,mBAAmB,IAAI;AAC1C,QAAM,iBAAiB,UAAU;AAEjC,MAAI;AACJ,MAAI,aAAa;AACjB,MAAI;AACF,UAAM,MAAS,YAAS,YAAY,MAAM;AAAA,EAC5C,SAAS,KAAK;AACZ,QAAK,IAA8B,SAAS,UAAU;AACpD,YAAM,IAAI,QAAQ;AAAA,QAChB,SAAS,kBAAkB,UAAU;AAAA,QACrC,MAAM,YAAY;AAAA,QAClB,MAAM;AAAA,QACN,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AACA,iBAAa;AACb,UAAM;AAAA,EACR;AAEA,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,GAAG;AAAA,EACzB,SAAS,KAAK;AACZ,QAAI,YAAY;AACd,YAAM,IAAI,YAAY;AAAA,QACpB,SAAS,aAAa,UAAU;AAAA,QAChC,MAAM,YAAY;AAAA,QAClB,SAAS,EAAE,MAAM,WAAW;AAAA,QAC5B,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AACA,aAAS,CAAC;AAAA,EACZ;AAEA,QAAM,YAAY,qBAAqB,QAAQ,KAAK,KAAK;AACzD,QAAM,WAAY,UAAU,YAAwC,CAAC;AACrE;AAAA,IACE;AAAA,EACF;AACA,YAAU,WAAW;AAGrB,QAAM,eAAe,oBAAoB,MAAM,WAAsC,UAAU;AAC/F,MAAI,iBAAiB,YAAY;AAC/B,UAAM,iBAAiB,YAAY;AAAA,EACrC;AAIA,QAAM,kBACJ,iBAAiB,aACb,MAAM,6BAA6B,cAAc,WAAW,KAAK,KAAK,IACtE;AAIN,QAAM,UACJ,wBAAwB,cAAc,IAAI,IAAI,kBAAkB,qBAAqB,eAAe;AAEtG,QAAM,YAAY,qBAAqB,SAAS,KAAK,KAAK;AAC1D,QAAM,YAAY,cAAc,KAAK,UAAU,WAAW,MAAM,CAAC,GAAG,EAAE,MAAM,IAAM,CAAC;AAGnF,OAAK,YAAY,OAAO;AAAA,IACtB,UAAU,UAAU;AAAA,EACtB,CAAC;AACH;AAOA,eAAsB,qBACpB,MACA,SACe;AACf,QAAM,aAAa,mBAAmB,IAAI;AAC1C,QAAM,iBAAiB,UAAU;AAEjC,MAAI;AACJ,MAAI,aAAa;AACjB,MAAI;AACF,UAAM,MAAS,YAAS,YAAY,MAAM;AAAA,EAC5C,SAAS,KAAK;AACZ,QAAK,IAA8B,SAAS,UAAU;AACpD,YAAM,IAAI,QAAQ;AAAA,QAChB,SAAS,kBAAkB,UAAU;AAAA,QACrC,MAAM,YAAY;AAAA,QAClB,MAAM;AAAA,QACN,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AACA,iBAAa;AACb,UAAM;AAAA,EACR;AAEA,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,GAAG;AAAA,EACzB,SAAS,KAAK;AACZ,QAAI,YAAY;AACd,YAAM,IAAI,YAAY;AAAA,QACpB,SAAS,aAAa,UAAU;AAAA,QAChC,MAAM,YAAY;AAAA,QAClB,SAAS,EAAE,MAAM,WAAW;AAAA,QAC5B,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AACA,aAAS,CAAC;AAAA,EACZ;AAEA,QAAM,YAAY,qBAAqB,QAAQ,KAAK,KAAK;AACzD,UAAQ,SAAS;AAKjB,QAAM,eAAe,oBAAoB,MAAM,WAAW,UAAU;AAGpE,MAAI,iBAAiB,YAAY;AAC/B,UAAM,iBAAiB,YAAY;AAAA,EACrC;AAIA,QAAM,kBACJ,iBAAiB,aACb,MAAM,6BAA6B,cAAc,WAAW,KAAK,KAAK,IACtE;AAIN,QAAM,UACJ,wBAAwB,cAAc,IAAI,IAAI,kBAAkB,qBAAqB,eAAe;AAEtG,QAAM,YAAY,qBAAqB,SAAS,KAAK,KAAK;AAC1D,QAAM,YAAY,cAAc,KAAK,UAAU,WAAW,MAAM,CAAC,GAAG,EAAE,MAAM,IAAM,CAAC;AACnF,OAAK,YAAY,OAAO,SAA0D;AACpF;AAOA,eAAsB,sBACpB,MACA,SACe;AACf,QAAM,aAAa,KAAK;AACxB,MAAI;AACJ,MAAI,aAAa;AACjB,MAAI;AACF,UAAM,MAAS,YAAS,YAAY,MAAM;AAAA,EAC5C,SAAS,KAAK;AACZ,QAAK,IAA8B,SAAS,UAAU;AACpD,YAAM,IAAI,QAAQ;AAAA,QAChB,SAAS,kBAAkB,UAAU,KAAM,IAAc,OAAO;AAAA,QAChE,MAAM;AAAA,QACN,MAAM;AAAA,QACN,SAAS,EAAE,WAAW,oBAAoB,OAAO,OAAO;AAAA,QACxD,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AACA,iBAAa;AACb,UAAM;AAAA,EACR;AAEA,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,GAAG;AAAA,EACzB,SAAS,KAAK;AACZ,QAAI,YAAY;AACd,YAAM,IAAI,YAAY;AAAA,QACpB,SAAS,aAAa,UAAU,uBAAwB,IAAc,OAAO;AAAA,QAC7E,MAAM;AAAA,QACN,SAAS,EAAE,UAAU,YAAY,WAAW,oBAAoB;AAAA,QAChE,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AACA,aAAS,CAAC;AAAA,EACZ;AAEA,QAAM,YAAY,qBAAqB,QAAQ,KAAK,KAAK;AACzD,QAAM,aAAc,UAAU,cAA0D,CAAC;AACzF,QAAM,WAAW,WAAW,YAAY,CAAC;AACzC,UAAQ,QAAQ;AAChB,aAAW,WAAW;AACtB,YAAU,aAAa;AAEvB,QAAM,YAAY,qBAAqB,WAAW,KAAK,KAAK;AAC5D,QAAM,YAAY,YAAY,KAAK,UAAU,WAAW,MAAM,CAAC,GAAG,EAAE,MAAM,IAAM,CAAC;AAGjF,OAAK,YAAY,OAAO;AAAA,IACtB;AAAA,EAGF,CAAC;AACH;AAoBO,SAAS,mBAAmB,OAGkD;AACnF,MAAI,MAAM,4BAA4B,QAAW;AAC/C,UAAM,QAAQ,MAAM;AACpB,WAAO,EAAE,yBAAyB,OAAO,uBAAuB,CAAC,MAAM;AAAA,EACzE;AACA,MAAI,MAAM,qBAAqB,QAAW;AACxC,UAAM,WAAW,MAAM;AACvB,WAAO,EAAE,yBAAyB,CAAC,UAAU,uBAAuB,SAAS;AAAA,EAC/E;AACA,SAAO;AACT;;;ACpaA,IAAI,oBAA8B,CAAC;AACnC,IAAI,wBAAkC,CAAC;AAGhC,SAAS,eAAe,aAA6B;AAC1D,sBAAoB;AACtB;AAGO,SAAS,mBAAmB,aAA6B;AAC9D,0BAAwB;AAC1B;AAGO,SAAS,iBAA2B;AACzC,SAAO;AACT;AAaO,SAAS,kBAAkB,SAAyB;AACzD,MAAI,QAAQ,WAAW,EAAG;AAC1B,QAAM,MAAM,IAAI,IAAI,OAAO;AAC3B,sBAAoB,kBAAkB,OAAO,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;AAClE,0BAAwB,CAAC;AAC3B;AAGO,SAAS,mBAAyB;AACvC,sBAAoB,CAAC;AACrB,0BAAwB,CAAC;AAC3B;",
+  "names": []
+}

package/dist/cli-entry-main.d.ts

@@ -0,0 +1,2 @@
+export declare function main(argv: string[]): Promise<number>;
+//# sourceMappingURL=cli-entry-main.d.ts.map

package/dist/cli-entry-main.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-entry-main.d.ts","sourceRoot":"","sources":["../src/cli-entry-main.ts"],"names":[],"mappings":"AA0BA,wBAAsB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAQ1D"}

package/dist/cli-entry-point.d.ts

@@ -31,9 +31,9 @@ interface BrokenPipeHandlerOptions {
  *
  * A failed `write()` is reported asynchronously through the destination
  * stream's `error` event, so wrapping individual writes in `try/catch` cannot
- * prevent Node's unhandled-event crash. Keep this guard at the process entry
- * boundary and rethrow every non-EPIPE error so genuine stream failures remain
- * visible.
+ * prevent Node's unhandled-event crash. Windows can report the same closed
+ * consumer as ECONNRESET rather than EPIPE, so handle both at the process entry
+ * boundary and rethrow other stream failures so genuine faults remain visible.
  */
 export declare function installBrokenPipeHandlers(options?: BrokenPipeHandlerOptions): () => void;
 export declare function runAsMain(mainFn: (argv: string[]) => Promise<number>): void;

package/dist/cli-entry-point.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli-entry-point.d.ts","sourceRoot":"","sources":["../src/cli-entry-point.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAwDH,UAAU,gBAAgB;IACxB,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,GAAG,OAAO,CAAC;IAChE,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,GAAG,OAAO,CAAC;CAClE;AAED,UAAU,wBAAwB;IAChC,OAAO,CAAC,EAAE,SAAS,gBAAgB,EAAE,GAAG,SAAS,CAAC;IAClD,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CAC7C;AAMD;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,GAAE,wBAA6B,GACrC,MAAM,IAAI,CAgBZ;AAED,wBAAgB,SAAS,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,CAqB3E"}
+{"version":3,"file":"cli-entry-point.d.ts","sourceRoot":"","sources":["../src/cli-entry-point.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAmDH,UAAU,gBAAgB;IACxB,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,GAAG,OAAO,CAAC;IAChE,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,GAAG,OAAO,CAAC;CAClE;AAED,UAAU,wBAAwB;IAChC,OAAO,CAAC,EAAE,SAAS,gBAAgB,EAAE,GAAG,SAAS,CAAC;IAClD,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CAC7C;AAOD;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,GAAE,wBAA6B,GAAG,MAAM,IAAI,CAgB5F;AAED,wBAAgB,SAAS,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,CAqB3E"}