agent-relay 6.0.16 → 6.0.18

package/dist/packages/cloud/src/lib/ssh-interactive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssh-interactive.d.ts","sourceRoot":"","sources":["../../../../../packages/cloud/src/lib/ssh-interactive.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAqC,KAAK,YAAY,EAAE,MAAM,qCAAqC,CAAC;AAC3G,OAAO,EAAqD,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAI1G,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,yBAAyB;IACxC,GAAG,EAAE,iBAAiB,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,aAAa,EAAE,YAAY,EAAE,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE;QAAE,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;QAAC,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAA;KAAE,CAAC;IAC/E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,YAAY,EAAE,OAAO,CAAC;CACvB;AAsDD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAG7D;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAGhE;AAED;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,wBAAwB,CAAC,CAyXnC"}

package/dist/packages/cloud/src/lib/ssh-interactive.js

@@ -0,0 +1,440 @@
+/**
+ * SSH Interactive Session — reusable SSH+PTY runner.
+ *
+ * Powers both `agent-relay auth <provider>` and `agent-relay cloud connect <provider>`,
+ * and is published from `@agent-relay/cloud` so other CLIs can drive the same flow.
+ */
+import { createServer } from 'node:net';
+import { spawn as spawnProcess } from 'node:child_process';
+import { stripAnsiCodes, findMatchingError } from '@agent-relay/config/cli-auth-config';
+import { loadSSH2, createAskpassScript, buildSystemSshArgs } from './ssh-runtime.js';
+// ── Debug (env-gated) ────────────────────────────────────────────────────────
+const DEBUG = process.env.AGENT_RELAY_DEBUG_SSH === '1';
+function dbg(event, fields = {}) {
+    if (!DEBUG)
+        return;
+    const ts = new Date().toISOString();
+    const parts = Object.entries(fields)
+        .map(([k, v]) => `${k}=${typeof v === 'string' ? JSON.stringify(v) : v}`)
+        .join(' ');
+    process.stderr.write(`[ssh-debug ${ts}] ${event}${parts ? ' ' + parts : ''}\n`);
+}
+// ── Helpers ──────────────────────────────────────────────────────────────────
+const color = {
+    cyan: (s) => `\x1b[36m${s}\x1b[0m`,
+    green: (s) => `\x1b[32m${s}\x1b[0m`,
+    yellow: (s) => `\x1b[33m${s}\x1b[0m`,
+    red: (s) => `\x1b[31m${s}\x1b[0m`,
+    dim: (s) => `\x1b[2m${s}\x1b[0m`,
+};
+function getSshErrorMessage(host, port, err) {
+    if (err.message.includes('Authentication')) {
+        return 'SSH authentication failed.';
+    }
+    if (err.message.includes('ECONNREFUSED')) {
+        return `Cannot connect to SSH server at ${host}:${port}. Is the workspace running and SSH enabled?`;
+    }
+    if (err.message.includes('ENOTFOUND') || err.message.includes('getaddrinfo')) {
+        return `Cannot resolve hostname: ${host}. Check network connectivity.`;
+    }
+    if (err.message.includes('ETIMEDOUT')) {
+        return `Connection timed out to ${host}:${port}. Is the workspace running?`;
+    }
+    return `SSH error: ${err.message}`;
+}
+// ── Main function ────────────────────────────────────────────────────────────
+const DEFAULT_RUNTIME = {
+    loadSSH2,
+    createAskpassScript,
+    buildSystemSshArgs,
+    spawnProcess,
+    createServer,
+    setTimeout,
+};
+/**
+ * Format a remote command for execution inside an ssh2 shell() PTY.
+ *
+ * Wraps the command in `exec sh -c '…'` so the PTY closes cleanly when the
+ * target CLI exits (no shell-teardown race with a TUI's alt-screen flush)
+ * while still letting `sh` parse leading prefix assignments like
+ * `PATH=/foo/bin claude`. A bare `exec PATH=… claude` does not work in zsh
+ * because zsh's exec builtin treats `PATH=…` as the command name instead of
+ * a prefix assignment.
+ *
+ * We intentionally use `shell()` rather than `exec(cmd, { pty })` because
+ * Daytona's sandbox sshd only populates the full login-shell environment
+ * (including nvm-managed PATH entries where `claude` / `codex` actually live)
+ * for interactive shell sessions. An `exec` channel with a PTY gets a
+ * stripped-down environment and the target CLI fails to start silently.
+ */
+export function formatShellInvocation(command) {
+    const escaped = command.replace(/'/g, `'\\''`);
+    return `exec sh -c '${escaped}'\n`;
+}
+/**
+ * Wrap the remote command with a visible checkpoint so the user sees proof
+ * the ssh pipeline reached the sandbox before the provider CLI takes over
+ * the terminal. Without this, claude/codex enter alt-screen immediately and
+ * the user sees zero output — indistinguishable from a hang.
+ *
+ * The printf runs before the exec that launches the provider CLI, so the
+ * user gets one visible line ("launching provider CLI…") right before
+ * alt-screen engages. When the provider CLI later exits and the alt-screen
+ * tears down, this line remains in scrollback as a breadcrumb.
+ */
+export function wrapWithLaunchCheckpoint(command) {
+    // Escape single quotes for inclusion in the printf argument.
+    return `printf '\\033[2m[agent-relay] launching provider CLI…\\033[0m\\n' >&2; ${command}`;
+}
+/**
+ * Run an interactive SSH session with PTY.
+ *
+ * Connects via ssh2 (if available) or falls back to system ssh,
+ * sets up a local port tunnel, and runs the remote command in a PTY.
+ * Monitors output for success/error patterns.
+ */
+export async function runInteractiveSession(options) {
+    const { ssh, successPatterns, errorPatterns, timeoutMs, io, tunnelPort = 1455 } = options;
+    const runtime = { ...DEFAULT_RUNTIME, ...options.runtime };
+    // Wrap the remote command with a visible checkpoint so the user sees proof
+    // the ssh pipeline is alive before the provider CLI enters alt-screen.
+    const remoteCommand = wrapWithLaunchCheckpoint(options.remoteCommand);
+    const ssh2 = await runtime.loadSSH2();
+    io.log(color.yellow('Starting interactive authentication...'));
+    io.log(color.dim(`Transport: ${ssh2 ? 'ssh2 (bundled)' : 'system ssh (fallback)'}`));
+    io.log(color.dim('The provider CLI may take 5-15s to render its first screen after connecting.'));
+    io.log(color.dim('A welcome / theme picker may appear before the sign-in step. Follow the on-screen prompts.'));
+    io.log(color.dim('Wait for the CLI to render before pressing Ctrl+C.'));
+    io.log('');
+    let execResult = null;
+    let execError = null;
+    if (ssh2) {
+        const { Client } = ssh2;
+        const sshClient = new Client();
+        let sshReady = false;
+        const tunnel = { server: null };
+        const sshReadyPromise = new Promise((resolve, reject) => {
+            sshClient.on('ready', () => {
+                sshReady = true;
+                tunnel.server = runtime.createServer((localSocket) => {
+                    sshClient.forwardOut('127.0.0.1', tunnelPort, 'localhost', tunnelPort, (err, stream) => {
+                        if (err) {
+                            localSocket.end();
+                            return;
+                        }
+                        localSocket.pipe(stream).pipe(localSocket);
+                    });
+                });
+                tunnel.server.on('error', (err) => {
+                    if (err.code === 'EADDRINUSE') {
+                        io.log(color.dim(`Note: Port ${tunnelPort} in use, OAuth callbacks may not work.`));
+                    }
+                    resolve();
+                });
+                tunnel.server.listen(tunnelPort, '127.0.0.1', () => {
+                    resolve();
+                });
+            });
+            sshClient.on('error', (err) => {
+                reject(new Error(getSshErrorMessage(ssh.host, ssh.port, err)));
+            });
+            sshClient.on('close', () => {
+                if (!sshReady) {
+                    reject(new Error(`SSH connection to ${ssh.host}:${ssh.port} closed unexpectedly.`));
+                }
+            });
+        });
+        try {
+            sshClient.connect({
+                host: ssh.host,
+                port: ssh.port,
+                username: ssh.user,
+                password: ssh.password,
+                readyTimeout: 10000,
+                hostVerifier: () => true,
+            });
+            await Promise.race([
+                sshReadyPromise,
+                new Promise((_, reject) => runtime.setTimeout(() => reject(new Error('SSH connection timeout')), 15000)),
+            ]);
+        }
+        catch (err) {
+            io.error(color.red(`Failed to connect via SSH: ${err instanceof Error ? err.message : String(err)}`));
+            if (tunnel.server)
+                tunnel.server.close();
+            sshClient.end();
+            throw err;
+        }
+        const execInteractive = async (command, commandTimeoutMs) => await new Promise((resolve, reject) => {
+            const cols = process.stdout.columns || 80;
+            const rows = process.stdout.rows || 24;
+            const term = process.env.TERM || 'xterm-256color';
+            dbg('shell-request', { term, cols, rows });
+            // Use shell() so the remote side sources its login-shell init files
+            // (/etc/profile, ~/.zprofile, nvm setup, …). Daytona's sandbox image
+            // populates the nvm-managed PATH (/usr/local/share/nvm/current/bin)
+            // from those init files, and without them the target CLIs (claude,
+            // codex) are not on PATH and fail to start silently. An exec channel
+            // with `{ pty }` was tried and produced zero output for this reason.
+            sshClient.shell({ term, cols, rows }, (err, stream) => {
+                if (err) {
+                    dbg('shell-error', { message: err.message });
+                    return reject(err);
+                }
+                dbg('shell-opened');
+                let exitCode = null;
+                let exitSignal = null;
+                let authDetected = false;
+                let outputBuffer = '';
+                // Gate pattern matching so shell MOTD (e.g. "Last logged in …")
+                // does not trigger the broad `/logged\s*in/i` success pattern
+                // before the target CLI has even started.
+                let patternMatchingEnabled = false;
+                // Track whether we've drawn the dim "waiting" hint so we can clear
+                // it the moment the remote CLI starts producing real output.
+                let hintVisible = false;
+                const stdin = process.stdin;
+                const stdout = process.stdout;
+                const stderr = process.stderr;
+                const wasRaw = stdin.isRaw ?? false;
+                const onStdinData = (data) => {
+                    if (authDetected && (data[0] === 0x1b || data[0] === 0x03)) {
+                        cleanup();
+                        clearTimeout(timer);
+                        try {
+                            stream.close();
+                        }
+                        catch {
+                            // ignore
+                        }
+                        return;
+                    }
+                    stream.write(data);
+                };
+                const cleanup = () => {
+                    stdin.off('data', onStdinData);
+                    stdout.off('resize', onResize);
+                    try {
+                        stdin.setRawMode?.(wasRaw);
+                    }
+                    catch {
+                        // ignore
+                    }
+                    stdin.pause();
+                };
+                const closeOnAuthSuccess = () => {
+                    authDetected = true;
+                    stdout.write('\n');
+                    stdout.write(color.green('  ✓ Authentication successful!') + '\n');
+                    stdout.write(color.dim('  Press Escape or Ctrl+C to exit.') + '\n');
+                    stdout.write('\n');
+                };
+                let totalBytes = 0;
+                let firstByteAt = null;
+                const sessionStart = Date.now();
+                stream.on('data', (data) => {
+                    totalBytes += data.length;
+                    if (firstByteAt === null) {
+                        firstByteAt = Date.now();
+                        dbg('first-byte', {
+                            elapsedMs: firstByteAt - sessionStart,
+                            bytes: data.length,
+                            preview: data.toString('utf8').slice(0, 120),
+                        });
+                        if (hintVisible) {
+                            // Clear the dim "waiting" hint line before the remote CLI
+                            // paints its own UI. \r moves to col 0, \x1b[2K clears the
+                            // line, so the subsequent bytes (including any alt-screen
+                            // switch) render from a known-clean state.
+                            stdout.write('\r\x1b[2K');
+                            hintVisible = false;
+                        }
+                    }
+                    else if (DEBUG) {
+                        dbg('data-out', { bytes: data.length, totalBytes });
+                    }
+                    stdout.write(data);
+                    outputBuffer += data.toString();
+                    if (outputBuffer.length > 8192) {
+                        outputBuffer = outputBuffer.slice(-8192);
+                    }
+                    if (patternMatchingEnabled && !authDetected && successPatterns.length > 0) {
+                        const clean = stripAnsiCodes(outputBuffer);
+                        for (const pattern of successPatterns) {
+                            if (pattern.test(clean)) {
+                                closeOnAuthSuccess();
+                                break;
+                            }
+                        }
+                    }
+                    if (patternMatchingEnabled && !authDetected && errorPatterns.length > 0) {
+                        const matched = findMatchingError(outputBuffer, errorPatterns);
+                        if (matched) {
+                            clearTimeout(timer);
+                            cleanup();
+                            try {
+                                stream.close();
+                            }
+                            catch {
+                                // ignore
+                            }
+                            reject(new Error(matched.message + (matched.hint ? ` ${matched.hint}` : '')));
+                        }
+                    }
+                });
+                stream.stderr.on('data', (data) => {
+                    dbg('stderr-out', { bytes: data.length });
+                    stderr.write(data);
+                });
+                const onResize = () => {
+                    try {
+                        stream.setWindow(stdout.rows || 24, stdout.columns || 80, 0, 0);
+                    }
+                    catch {
+                        // ignore
+                    }
+                };
+                stream.on('exit', (code, signal) => {
+                    dbg('stream-exit', { code, signal });
+                    if (typeof code === 'number')
+                        exitCode = code;
+                    if (typeof signal === 'string')
+                        exitSignal = signal;
+                });
+                stream.on('close', () => {
+                    dbg('stream-close', {
+                        totalBytes,
+                        firstByteAt: firstByteAt !== null ? firstByteAt - sessionStart : null,
+                        exitCode,
+                        exitSignal,
+                        authDetected,
+                    });
+                    clearTimeout(timer);
+                    cleanup();
+                    if (totalBytes === 0 && !authDetected) {
+                        io.log('');
+                        io.error(color.red('No output received from the remote auth command before the session closed.'));
+                        io.error(color.dim('  This usually means the remote CLI failed to start. Re-run with AGENT_RELAY_DEBUG_SSH=1 for details.'));
+                    }
+                    resolve({ exitCode, exitSignal, authDetected });
+                });
+                stream.on('error', (streamErr) => {
+                    dbg('stream-error', {
+                        message: streamErr instanceof Error ? streamErr.message : String(streamErr),
+                    });
+                    clearTimeout(timer);
+                    cleanup();
+                    reject(streamErr instanceof Error ? streamErr : new Error(String(streamErr)));
+                });
+                stdout.on('resize', onResize);
+                stdin.on('data', onStdinData);
+                try {
+                    stdin.setRawMode?.(true);
+                }
+                catch {
+                    // ignore
+                }
+                stdin.resume();
+                const timer = runtime.setTimeout(() => {
+                    cleanup();
+                    try {
+                        stream.close();
+                    }
+                    catch {
+                        // ignore
+                    }
+                    reject(new Error(`Authentication timed out after ${Math.floor(commandTimeoutMs / 1000)}s`));
+                }, commandTimeoutMs);
+                const invocation = formatShellInvocation(command);
+                dbg('shell-write', { bytes: invocation.length, preview: invocation.slice(0, 200) });
+                stream.write(invocation);
+                // Reset the output buffer so pattern matching only considers output
+                // produced by the command we just wrote, not the shell's MOTD.
+                outputBuffer = '';
+                patternMatchingEnabled = true;
+                // Show a single-line dim hint so the user can see something is
+                // happening while the remote shell starts. As soon as the first
+                // byte comes back from the target CLI, we clear this line (see
+                // stream.on('data')) and hand the terminal over to the remote.
+                stdout.write(color.dim('  Waiting for provider CLI to launch…'));
+                hintVisible = true;
+            });
+        });
+        try {
+            execResult = await execInteractive(remoteCommand, timeoutMs);
+        }
+        catch (err) {
+            execError = err instanceof Error ? err : new Error(String(err));
+            io.log('');
+            io.error(color.red(`Remote auth command failed: ${execError.message}`));
+        }
+        finally {
+            if (tunnel.server)
+                tunnel.server.close();
+            sshClient.end();
+        }
+    }
+    else {
+        // Fallback: system ssh
+        const askpassPath = runtime.createAskpassScript(ssh.password);
+        try {
+            const sshArgs = runtime.buildSystemSshArgs({
+                host: ssh.host,
+                port: ssh.port,
+                username: ssh.user,
+                localPort: tunnelPort,
+                remotePort: tunnelPort,
+            });
+            sshArgs.push('-tt');
+            sshArgs.push(`${ssh.user}@${ssh.host}`);
+            sshArgs.push(remoteCommand);
+            const child = runtime.spawnProcess('ssh', sshArgs, {
+                stdio: 'inherit',
+                env: {
+                    ...process.env,
+                    SSH_ASKPASS: askpassPath,
+                    SSH_ASKPASS_REQUIRE: 'force',
+                    DISPLAY: process.env.DISPLAY || ':0',
+                },
+            });
+            execResult = await new Promise((resolve) => {
+                child.on('exit', (code, signal) => {
+                    resolve({
+                        exitCode: code,
+                        exitSignal: signal ? String(signal) : null,
+                        authDetected: code === 0,
+                    });
+                });
+                child.on('error', (err) => {
+                    io.error(color.red(`Failed to launch ssh: ${err.message}`));
+                    resolve({ exitCode: 1, exitSignal: null, authDetected: false });
+                });
+            });
+        }
+        catch (err) {
+            execError = err instanceof Error ? err : new Error(String(err));
+            io.log('');
+            io.error(color.red(`SSH error: ${execError.message}`));
+        }
+        finally {
+            try {
+                const fs = await import('node:fs');
+                fs.unlinkSync(askpassPath);
+            }
+            catch {
+                // ignore
+            }
+        }
+    }
+    // Authentication is only considered successful when the interactive session
+    // reported a positive pattern match. A shell exit code of 0 is NOT trusted:
+    // zsh stays alive after a failed `exec` in interactive mode, and a user
+    // closing the session with Ctrl+D produces exit 0 even though nothing was
+    // authenticated. Callers currently always supply `successPatterns`.
+    return {
+        exitCode: execError ? 1 : (execResult?.exitCode ?? null),
+        exitSignal: execResult?.exitSignal ?? null,
+        authDetected: execError === null && execResult?.authDetected === true,
+    };
+}
+//# sourceMappingURL=ssh-interactive.js.map

package/dist/packages/cloud/src/lib/ssh-interactive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssh-interactive.js","sourceRoot":"","sources":["../../../../../packages/cloud/src/lib/ssh-interactive.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,KAAK,IAAI,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAqB,MAAM,qCAAqC,CAAC;AAC3G,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,kBAAkB,EAAuB,MAAM,kBAAkB,CAAC;AA4B1G,gFAAgF;AAEhF,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,KAAK,GAAG,CAAC;AACxD,SAAS,GAAG,CAAC,KAAa,EAAE,SAAkC,EAAE;IAC9D,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;SACjC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SACxE,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AAClF,CAAC;AAED,gFAAgF;AAEhF,MAAM,KAAK,GAAG;IACZ,IAAI,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS;IAC1C,KAAK,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS;IAC3C,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS;IAC5C,GAAG,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS;IACzC,GAAG,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS;CACzC,CAAC;AAEF,SAAS,kBAAkB,CAAC,IAAY,EAAE,IAAY,EAAE,GAAU;IAChE,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC3C,OAAO,4BAA4B,CAAC;IACtC,CAAC;IACD,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACzC,OAAO,mCAAmC,IAAI,IAAI,IAAI,6CAA6C,CAAC;IACtG,CAAC;IACD,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QAC7E,OAAO,4BAA4B,IAAI,+BAA+B,CAAC;IACzE,CAAC;IACD,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACtC,OAAO,2BAA2B,IAAI,IAAI,IAAI,6BAA6B,CAAC;IAC9E,CAAC;IACD,OAAO,cAAc,GAAG,CAAC,OAAO,EAAE,CAAC;AACrC,CAAC;AAED,gFAAgF;AAEhF,MAAM,eAAe,GAGjB;IACF,QAAQ;IACR,mBAAmB;IACnB,kBAAkB;IAClB,YAAY;IACZ,YAAY;IACZ,UAAU;CACX,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/C,OAAO,eAAe,OAAO,KAAK,CAAC;AACrC,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAe;IACtD,6DAA6D;IAC7D,OAAO,0EAA0E,OAAO,EAAE,CAAC;AAC7F,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAkC;IAElC,MAAM,EAAE,GAAG,EAAE,eAAe,EAAE,aAAa,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAE1F,MAAM,OAAO,GAAG,EAAE,GAAG,eAAe,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAE3D,2EAA2E;IAC3E,uEAAuE;IACvE,MAAM,aAAa,GAAG,wBAAwB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAEtE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC;IAEtC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,wCAAwC,CAAC,CAAC,CAAC;IAC/D,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,uBAAuB,EAAE,CAAC,CAAC,CAAC;IACrF,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,8EAA8E,CAAC,CAAC,CAAC;IAClG,EAAE,CAAC,GAAG,CACJ,KAAK,CAAC,GAAG,CAAC,4FAA4F,CAAC,CACxG,CAAC;IACF,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC,CAAC;IACxE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEX,IAAI,UAAU,GAAoC,IAAI,CAAC;IACvD,IAAI,SAAS,GAAiB,IAAI,CAAC;IAEnC,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QACxB,MAAM,SAAS,GAAG,IAAI,MAAM,EAAE,CAAC;QAC/B,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,MAAM,GAAuD,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAEpF,MAAM,eAAe,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC5D,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACzB,QAAQ,GAAG,IAAI,CAAC;gBAEhB,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,EAAE;oBACnD,SAAS,CAAC,UAAU,CAAC,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE;wBACrF,IAAI,GAAG,EAAE,CAAC;4BACR,WAAW,CAAC,GAAG,EAAE,CAAC;4BAClB,OAAO;wBACT,CAAC;wBACD,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;oBAC7C,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;gBAEH,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;oBACvD,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;wBAC9B,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,UAAU,wCAAwC,CAAC,CAAC,CAAC;oBACtF,CAAC;oBACD,OAAO,EAAE,CAAC;gBACZ,CAAC,CAAC,CAAC;gBAEH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,WAAW,EAAE,GAAG,EAAE;oBACjD,OAAO,EAAE,CAAC;gBACZ,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBAC5B,MAAM,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;YACjE,CAAC,CAAC,CAAC;YAEH,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACzB,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,MAAM,CAAC,IAAI,KAAK,CAAC,qBAAqB,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,uBAAuB,CAAC,CAAC,CAAC;gBACtF,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,SAAS,CAAC,OAAO,CAAC;gBAChB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,QAAQ,EAAE,GAAG,CAAC,IAAI;gBAClB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,YAAY,EAAE,KAAK;gBACnB,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI;aACzB,CAAC,CAAC;YAEH,MAAM,OAAO,CAAC,IAAI,CAAC;gBACjB,eAAe;gBACf,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAC9B,OAAO,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,EAAE,KAAK,CAAC,CAC7E;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,8BAA8B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YACtG,IAAI,MAAM,CAAC,MAAM;gBAAE,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACzC,SAAS,CAAC,GAAG,EAAE,CAAC;YAChB,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,MAAM,eAAe,GAAG,KAAK,EAAE,OAAe,EAAE,gBAAwB,EAAE,EAAE,CAC1E,MAAM,IAAI,OAAO,CAA2B,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC9D,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,gBAAgB,CAAC;YAElD,GAAG,CAAC,eAAe,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3C,oEAAoE;YACpE,qEAAqE;YACrE,oEAAoE;YACpE,mEAAmE;YACnE,qEAAqE;YACrE,qEAAqE;YACrE,SAAS,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE;gBACpD,IAAI,GAAG,EAAE,CAAC;oBACR,GAAG,CAAC,aAAa,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;oBAC7C,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;gBACrB,CAAC;gBACD,GAAG,CAAC,cAAc,CAAC,CAAC;gBAEpB,IAAI,QAAQ,GAAkB,IAAI,CAAC;gBACnC,IAAI,UAAU,GAAkB,IAAI,CAAC;gBACrC,IAAI,YAAY,GAAG,KAAK,CAAC;gBACzB,IAAI,YAAY,GAAG,EAAE,CAAC;gBACtB,gEAAgE;gBAChE,8DAA8D;gBAC9D,0CAA0C;gBAC1C,IAAI,sBAAsB,GAAG,KAAK,CAAC;gBACnC,mEAAmE;gBACnE,6DAA6D;gBAC7D,IAAI,WAAW,GAAG,KAAK,CAAC;gBAExB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;gBAC5B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;gBAC9B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;gBAE9B,MAAM,MAAM,GAAI,KAAwC,CAAC,KAAK,IAAI,KAAK,CAAC;gBAExE,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,EAAE;oBACnC,IAAI,YAAY,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;wBAC3D,OAAO,EAAE,CAAC;wBACV,YAAY,CAAC,KAAK,CAAC,CAAC;wBACpB,IAAI,CAAC;4BACH,MAAM,CAAC,KAAK,EAAE,CAAC;wBACjB,CAAC;wBAAC,MAAM,CAAC;4BACP,SAAS;wBACX,CAAC;wBACD,OAAO;oBACT,CAAC;oBACD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACrB,CAAC,CAAC;gBAEF,MAAM,OAAO,GAAG,GAAG,EAAE;oBACnB,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;oBAC/B,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;oBAC/B,IAAI,CAAC;wBACH,KAAK,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC;oBAC7B,CAAC;oBAAC,MAAM,CAAC;wBACP,SAAS;oBACX,CAAC;oBACD,KAAK,CAAC,KAAK,EAAE,CAAC;gBAChB,CAAC,CAAC;gBAEF,MAAM,kBAAkB,GAAG,GAAG,EAAE;oBAC9B,YAAY,GAAG,IAAI,CAAC;oBACpB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBACnB,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,gCAAgC,CAAC,GAAG,IAAI,CAAC,CAAC;oBACnE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,mCAAmC,CAAC,GAAG,IAAI,CAAC,CAAC;oBACpE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACrB,CAAC,CAAC;gBAEF,IAAI,UAAU,GAAG,CAAC,CAAC;gBACnB,IAAI,WAAW,GAAkB,IAAI,CAAC;gBACtC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAEhC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;oBACjC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC;oBAC1B,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;wBACzB,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;wBACzB,GAAG,CAAC,YAAY,EAAE;4BAChB,SAAS,EAAE,WAAW,GAAG,YAAY;4BACrC,KAAK,EAAE,IAAI,CAAC,MAAM;4BAClB,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;yBAC7C,CAAC,CAAC;wBACH,IAAI,WAAW,EAAE,CAAC;4BAChB,0DAA0D;4BAC1D,2DAA2D;4BAC3D,0DAA0D;4BAC1D,2CAA2C;4BAC3C,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;4BAC1B,WAAW,GAAG,KAAK,CAAC;wBACtB,CAAC;oBACH,CAAC;yBAAM,IAAI,KAAK,EAAE,CAAC;wBACjB,GAAG,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;oBACtD,CAAC;oBACD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAEnB,YAAY,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAChC,IAAI,YAAY,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;wBAC/B,YAAY,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;oBAC3C,CAAC;oBAED,IAAI,sBAAsB,IAAI,CAAC,YAAY,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC1E,MAAM,KAAK,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;wBAC3C,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;4BACtC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gCACxB,kBAAkB,EAAE,CAAC;gCACrB,MAAM;4BACR,CAAC;wBACH,CAAC;oBACH,CAAC;oBAED,IAAI,sBAAsB,IAAI,CAAC,YAAY,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACxE,MAAM,OAAO,GAAG,iBAAiB,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;wBAC/D,IAAI,OAAO,EAAE,CAAC;4BACZ,YAAY,CAAC,KAAK,CAAC,CAAC;4BACpB,OAAO,EAAE,CAAC;4BACV,IAAI,CAAC;gCACH,MAAM,CAAC,KAAK,EAAE,CAAC;4BACjB,CAAC;4BAAC,MAAM,CAAC;gCACP,SAAS;4BACX,CAAC;4BACD,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;wBAChF,CAAC;oBACH,CAAC;gBACH,CAAC,CAAC,CAAC;gBAEH,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;oBACxC,GAAG,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;oBAC1C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACrB,CAAC,CAAC,CAAC;gBAEH,MAAM,QAAQ,GAAG,GAAG,EAAE;oBACpB,IAAI,CAAC;wBACH,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;oBAClE,CAAC;oBAAC,MAAM,CAAC;wBACP,SAAS;oBACX,CAAC;gBACH,CAAC,CAAC;gBAEF,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAa,EAAE,MAAgB,EAAE,EAAE;oBACpD,GAAG,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;oBACrC,IAAI,OAAO,IAAI,KAAK,QAAQ;wBAAE,QAAQ,GAAG,IAAI,CAAC;oBAC9C,IAAI,OAAO,MAAM,KAAK,QAAQ;wBAAE,UAAU,GAAG,MAAM,CAAC;gBACtD,CAAC,CAAC,CAAC;gBAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;oBACtB,GAAG,CAAC,cAAc,EAAE;wBAClB,UAAU;wBACV,WAAW,EAAE,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI;wBACrE,QAAQ;wBACR,UAAU;wBACV,YAAY;qBACb,CAAC,CAAC;oBACH,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,OAAO,EAAE,CAAC;oBACV,IAAI,UAAU,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;wBACtC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;wBACX,EAAE,CAAC,KAAK,CACN,KAAK,CAAC,GAAG,CAAC,4EAA4E,CAAC,CACxF,CAAC;wBACF,EAAE,CAAC,KAAK,CACN,KAAK,CAAC,GAAG,CACP,uGAAuG,CACxG,CACF,CAAC;oBACJ,CAAC;oBACD,OAAO,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC;gBAClD,CAAC,CAAC,CAAC;gBAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,SAAkB,EAAE,EAAE;oBACxC,GAAG,CAAC,cAAc,EAAE;wBAClB,OAAO,EAAE,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;qBAC5E,CAAC,CAAC;oBACH,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,OAAO,EAAE,CAAC;oBACV,MAAM,CAAC,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;gBAChF,CAAC,CAAC,CAAC;gBAEH,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;gBAC9B,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;gBAE9B,IAAI,CAAC;oBACH,KAAK,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC;gBAC3B,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;gBACD,KAAK,CAAC,MAAM,EAAE,CAAC;gBAEf,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,EAAE;oBACpC,OAAO,EAAE,CAAC;oBACV,IAAI,CAAC;wBACH,MAAM,CAAC,KAAK,EAAE,CAAC;oBACjB,CAAC;oBAAC,MAAM,CAAC;wBACP,SAAS;oBACX,CAAC;oBACD,MAAM,CAAC,IAAI,KAAK,CAAC,kCAAkC,IAAI,CAAC,KAAK,CAAC,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC9F,CAAC,EAAE,gBAAgB,CAAC,CAAC;gBAErB,MAAM,UAAU,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;gBAClD,GAAG,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;gBACpF,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBACzB,oEAAoE;gBACpE,+DAA+D;gBAC/D,YAAY,GAAG,EAAE,CAAC;gBAClB,sBAAsB,GAAG,IAAI,CAAC;gBAE9B,+DAA+D;gBAC/D,gEAAgE;gBAChE,+DAA+D;gBAC/D,+DAA+D;gBAC/D,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC,CAAC;gBACjE,WAAW,GAAG,IAAI,CAAC;YACrB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEL,IAAI,CAAC;YACH,UAAU,GAAG,MAAM,eAAe,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,SAAS,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAChE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACX,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,+BAA+B,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC1E,CAAC;gBAAS,CAAC;YACT,IAAI,MAAM,CAAC,MAAM;gBAAE,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACzC,SAAS,CAAC,GAAG,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;SAAM,CAAC;QACN,uBAAuB;QACvB,MAAM,WAAW,GAAG,OAAO,CAAC,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9D,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,OAAO,CAAC,kBAAkB,CAAC;gBACzC,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,QAAQ,EAAE,GAAG,CAAC,IAAI;gBAClB,SAAS,EAAE,UAAU;gBACrB,UAAU,EAAE,UAAU;aACvB,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YACxC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAE5B,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE;gBACjD,KAAK,EAAE,SAAS;gBAChB,GAAG,EAAE;oBACH,GAAG,OAAO,CAAC,GAAG;oBACd,WAAW,EAAE,WAAW;oBACxB,mBAAmB,EAAE,OAAO;oBAC5B,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI;iBACrC;aACF,CAAC,CAAC;YAEH,UAAU,GAAG,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;gBACzC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;oBAChC,OAAO,CAAC;wBACN,QAAQ,EAAE,IAAI;wBACd,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI;wBAC1C,YAAY,EAAE,IAAI,KAAK,CAAC;qBACzB,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;gBACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;oBACxB,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,yBAAyB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;oBAC5D,OAAO,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;gBAClE,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,SAAS,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAChE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACX,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACzD,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;gBACnC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;YAC7B,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,4EAA4E;IAC5E,wEAAwE;IACxE,0EAA0E;IAC1E,oEAAoE;IACpE,OAAO;QACL,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,QAAQ,IAAI,IAAI,CAAC;QACxD,UAAU,EAAE,UAAU,EAAE,UAAU,IAAI,IAAI;QAC1C,YAAY,EAAE,SAAS,KAAK,IAAI,IAAI,UAAU,EAAE,YAAY,KAAK,IAAI;KACtE,CAAC;AACJ,CAAC"}

package/dist/packages/cloud/src/lib/ssh-runtime.d.ts

@@ -0,0 +1,35 @@
+import { spawn as spawnProcess } from 'node:child_process';
+import { createServer } from 'node:net';
+export interface AuthSshRuntime {
+    fetch: typeof fetch;
+    loadSSH2: () => Promise<typeof import('ssh2') | null>;
+    createAskpassScript: (password: string) => string;
+    buildSystemSshArgs: (options: {
+        host: string;
+        port: number;
+        username: string;
+        localPort?: number;
+        remotePort?: number;
+    }) => string[];
+    spawnProcess: typeof spawnProcess;
+    createServer: typeof createServer;
+    setTimeout: typeof setTimeout;
+}
+export declare function loadSSH2(): Promise<typeof import('ssh2') | null>;
+/**
+ * Create a temporary SSH_ASKPASS helper script that echoes the given password.
+ * Returns the script path. Caller must clean up.
+ */
+export declare function createAskpassScript(password: string): string;
+/**
+ * Build SSH args common to both auth and connect commands.
+ */
+export declare function buildSystemSshArgs(options: {
+    host: string;
+    port: number;
+    username: string;
+    localPort?: number;
+    remotePort?: number;
+}): string[];
+export declare const DEFAULT_SSH_RUNTIME: AuthSshRuntime;
+//# sourceMappingURL=ssh-runtime.d.ts.map

package/dist/packages/cloud/src/lib/ssh-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssh-runtime.d.ts","sourceRoot":"","sources":["../../../../../packages/cloud/src/lib/ssh-runtime.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,IAAI,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAExC,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,OAAO,KAAK,CAAC;IACpB,QAAQ,EAAE,MAAM,OAAO,CAAC,cAAc,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;IACtD,mBAAmB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC;IAClD,kBAAkB,EAAE,CAAC,OAAO,EAAE;QAC5B,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,KAAK,MAAM,EAAE,CAAC;IACf,YAAY,EAAE,OAAO,YAAY,CAAC;IAClC,YAAY,EAAE,OAAO,YAAY,CAAC;IAClC,UAAU,EAAE,OAAO,UAAU,CAAC;CAC/B;AAED,wBAAsB,QAAQ,IAAI,OAAO,CAAC,cAAc,MAAM,CAAC,GAAG,IAAI,CAAC,CAMtE;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAK5D;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,MAAM,EAAE,CAeX;AAED,eAAO,MAAM,mBAAmB,EAAE,cAQjC,CAAC"}

package/dist/packages/cloud/src/lib/ssh-runtime.js

@@ -0,0 +1,52 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { tmpdir } from 'node:os';
+import { spawn as spawnProcess } from 'node:child_process';
+import { createServer } from 'node:net';
+export async function loadSSH2() {
+    try {
+        return await import('ssh2');
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Create a temporary SSH_ASKPASS helper script that echoes the given password.
+ * Returns the script path. Caller must clean up.
+ */
+export function createAskpassScript(password) {
+    const askpassPath = path.join(tmpdir(), `ar-askpass-${process.pid}-${Date.now()}`);
+    const escaped = password.replace(/'/g, "'\"'\"'");
+    fs.writeFileSync(askpassPath, `#!/bin/sh\nprintf '%s\\n' '${escaped}'\n`, { mode: 0o700 });
+    return askpassPath;
+}
+/**
+ * Build SSH args common to both auth and connect commands.
+ */
+export function buildSystemSshArgs(options) {
+    const args = [
+        '-o',
+        'StrictHostKeyChecking=no',
+        '-o',
+        'UserKnownHostsFile=/dev/null',
+        '-o',
+        'LogLevel=ERROR',
+        '-p',
+        String(options.port),
+    ];
+    if (options.localPort && options.remotePort) {
+        args.push('-L', `${options.localPort}:localhost:${options.remotePort}`);
+    }
+    return args;
+}
+export const DEFAULT_SSH_RUNTIME = {
+    fetch: (input, init) => fetch(input, init),
+    loadSSH2,
+    createAskpassScript,
+    buildSystemSshArgs,
+    spawnProcess,
+    createServer,
+    setTimeout,
+};
+//# sourceMappingURL=ssh-runtime.js.map

package/dist/packages/cloud/src/lib/ssh-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssh-runtime.js","sourceRoot":"","sources":["../../../../../packages/cloud/src/lib/ssh-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,KAAK,IAAI,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAkBxC,MAAM,CAAC,KAAK,UAAU,QAAQ;IAC5B,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,cAAc,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACnF,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAClD,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,8BAA8B,OAAO,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3F,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAMlC;IACC,MAAM,IAAI,GAAG;QACX,IAAI;QACJ,0BAA0B;QAC1B,IAAI;QACJ,8BAA8B;QAC9B,IAAI;QACJ,gBAAgB;QAChB,IAAI;QACJ,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;KACrB,CAAC;IACF,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QAC5C,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,OAAO,CAAC,SAAS,cAAc,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAmB;IACjD,KAAK,EAAE,CAAC,KAAkC,EAAE,IAAkC,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC;IACrG,QAAQ;IACR,mBAAmB;IACnB,kBAAkB;IAClB,YAAY;IACZ,YAAY;IACZ,UAAU;CACX,CAAC"}

package/dist/packages/cloud/src/proactive-runtime.d.ts

@@ -0,0 +1,24 @@
+import { type ProactiveAgentRecord, type ProactiveDeploymentResponse, type WorkspaceSecretRecord } from './types.js';
+type ClientOptions = {
+    apiUrl?: string;
+};
+type DeployOptions = ClientOptions & {
+    name?: string;
+    watch?: boolean;
+};
+type DeployInput = {
+    entrypoint: string;
+    source: string;
+};
+type SecretOptions = ClientOptions & {
+    workspace: string;
+};
+export declare function deployProactiveAgent(input: DeployInput, options?: DeployOptions): Promise<ProactiveDeploymentResponse>;
+export declare function listProactiveAgents(options?: ClientOptions): Promise<ProactiveAgentRecord[]>;
+export declare function inspectProactiveAgent(agentId: string, options?: ClientOptions): Promise<ProactiveAgentRecord>;
+export declare function undeployProactiveAgent(agentId: string, options?: ClientOptions): Promise<ProactiveAgentRecord>;
+export declare function createWorkspaceSecret(name: string, value: string, options: SecretOptions): Promise<WorkspaceSecretRecord>;
+export declare function getWorkspaceSecret(name: string, options: SecretOptions): Promise<WorkspaceSecretRecord>;
+export declare function deleteWorkspaceSecret(name: string, options: SecretOptions): Promise<WorkspaceSecretRecord>;
+export {};
+//# sourceMappingURL=proactive-runtime.d.ts.map

package/dist/packages/cloud/src/proactive-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proactive-runtime.d.ts","sourceRoot":"","sources":["../../../../packages/cloud/src/proactive-runtime.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,oBAAoB,EACzB,KAAK,2BAA2B,EAChC,KAAK,qBAAqB,EAC3B,MAAM,YAAY,CAAC;AAEpB,KAAK,aAAa,GAAG;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,KAAK,aAAa,GAAG,aAAa,GAAG;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,KAAK,WAAW,GAAG;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,KAAK,aAAa,GAAG,aAAa,GAAG;IACnC,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAkJF,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,WAAW,EAClB,OAAO,GAAE,aAAkB,GAC1B,OAAO,CAAC,2BAA2B,CAAC,CAmCtC;AAED,wBAAsB,mBAAmB,CAAC,OAAO,GAAE,aAAkB,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAiBtG;AAED,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,aAAkB,GAC1B,OAAO,CAAC,oBAAoB,CAAC,CAqC/B;AAED,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,aAAkB,GAC1B,OAAO,CAAC,oBAAoB,CAAC,CA4B/B;AAED,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,qBAAqB,CAAC,CAgChC;AAED,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,qBAAqB,CAAC,CAgChC;AAED,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,qBAAqB,CAAC,CAmChC"}