anon-pi 0.10.0 → 0.11.0

package/README.md

@@ -62,6 +62,8 @@ anon-pi --list-models          list the models pi sees (also --models; no projec
 anon-pi pi <pi-args…>          run pi with ANY args and no project (the passthrough)
 anon-pi --version              print anon-pi's version (also -V)
 anon-pi --shell [<project>]    a jailed bash (at ~, or cd'd into <project>) - the project-hopper
+anon-pi forward [<p>] [--port …]  open a host port onto a running container's in-jail server
+anon-pi ports [<project>]      list a running container's open in-jail TCP listeners
 anon-pi -m <machine> [<p>]     the same, on <machine> (its own image + home + conversations)
 anon-pi --mount <parent> [<p>] root at a HOST parent folder instead of the projects root
 anon-pi init                   onboard: verify your proxy, capture your local model, pick an image
@@ -86,6 +88,8 @@ Every subcommand carries its own help: `anon-pi --help` (the launch surface), `a
 | Fork a session into a project | `anon-pi <project> --fork <id>` (`.` for the root; created on demand) |
 | Run a one-shot prompt (scriptable) | `anon-pi <project> -p "…"` |
 | Hop between projects / poke the box | `anon-pi --shell` then `cd /projects/<p> && pi` |
+| Open an in-jail server on the host | `anon-pi forward <project> --port 3001` (or `8080:3001`) |
+| See a container's open in-jail ports | `anon-pi ports <project>` |
 | A scratch pi not tied to a subfolder | `anon-pi .` |
 | Use a separate anonymized environment | `anon-pi -m <machine> <project>` |
 | Jail pi into a host folder you edit with host tools | `anon-pi --mount <host-parent> <subfolder>` |
@@ -123,6 +127,34 @@ anon-pi --shell recon      # bash cd'd into /projects/recon
 
 From inside the shell you can `cd` between `/projects/*` and run `pi` yourself in whichever one you want. The shell forwards no arguments (`anon-pi --shell recon extra` is an error); run pi from inside it instead. Same forced-egress jail as a pi launch.
 
+### Reaching an in-jail server from the host (`forward` / `ports`)
+
+A jailed tool sometimes runs a server you want to open on the host: a dev/preview server on `:3001`, a local API. The jail deliberately publishes no ports (that would open an inbound path around the forced egress), so host access is a separate, explicit verb, the way `kubectl port-forward` / `ssh -L` work. anon-pi wraps netcage's `forward` so you never handle the raw container name (needs **netcage >= 0.9.0**):
+
+```sh
+# terminal 1: a running session with a server inside (e.g. pi started `pnpm dev` on :3001)
+anon-pi recon
+# terminal 2: open that port on your host
+anon-pi forward recon --port 3001        # host 127.0.0.1:3001 -> jail 3001, until Ctrl-C
+```
+
+The port is host-first, like docker/kubectl, so you can bind it on a **different host port**:
+
+```sh
+anon-pi forward recon --port 8080:3001   # host 8080 -> jail 3001
+anon-pi forward recon --port 3001 --bind 0.0.0.0   # LAN-visible (netcage warns; loopback is the default)
+```
+
+The positional is always the **project** (a numeric name like `3001` is a project, never a port), and it only **filters** which containers are offered. If several sessions match (you can run `anon-pi recon` in two terminals), anon-pi shows a picker, each row annotated with that container's open in-jail ports.
+
+**Don't know the port?** Omit `--port` and anon-pi lists the container's open listeners and prompts you (defaulting to the obvious one), then asks whether to expose it on a different host port. You can also just list them:
+
+```sh
+anon-pi ports recon      # the container's open in-jail TCP listeners
+```
+
+`ports` reads the jail's listeners **image-independently** (netcage reads `/proc/net/tcp*` via the sidecar), so it works even for a minimal image with no `ss`/`netstat`/`nc`. An explicit `--port` may name a port that **isn't open yet**: the forward binds the host side immediately and reaches into the jail on the first connection, so you can set it up before the server starts. Forwarding works for both throwaway (`--rm`) and `--keep` containers, for as long as the container is running.
+
 ### Headless / one-shot
 
 Any tokens after the project are forwarded to pi verbatim. A run is headless (no TTY needed, so it fits scripts and pipes) only when you forward pi's `-p`/`--print`; other forwarded flags (like `--session`) stay interactive.

package/dist/anon-pi.d.ts

@@ -680,6 +680,134 @@ export declare function keptContainerKey(intent: LaunchIntent): string;
  * decision is a pure function of (intent, listing).
  */
 export declare function resolveRunVsStart(intent: LaunchIntent, kept: readonly KeptContainer[]): RunVsStart;
+/**
+ * PURE: the decoded fields of a stamped keptContainerKey (the reverse of
+ * keptContainerKey's `k=v\n` record). Used by `forward`/`ports` to filter the
+ * running managed containers by machine + project WITHOUT reconstructing the
+ * exact key (which would couple to launchCwd). Unknown/missing fields are ''.
+ */
+export interface KeptKeyFields {
+    machine: string;
+    projectsRoot: string;
+    mountParent: string;
+    cwd: string;
+}
+/** PURE: parse a stamped keptContainerKey back into its fields (best-effort). */
+export declare function parseKeptKey(key: string): KeptKeyFields;
+/**
+ * PURE: the leaf name of a stamped key's cwd, i.e. the project a container hosts
+ * (`/projects/recon` -> `recon`, `/projects` -> '.', `/work/x` -> `x`, `/root`
+ * -> '' for a bare shell). Used to filter the picker by `<project>` and to label
+ * each row. A root cwd (`/projects`, `/work`) maps to the `.` root token.
+ */
+export declare function keyProject(fields: KeptKeyFields): string;
+/**
+ * PURE: pick the RUNNING anon-pi containers a `forward`/`ports` should offer.
+ * Filters the supplied running managed containers (each with its decoded key
+ * fields) to those on `machine`, optionally narrowed to `project` (its leaf cwd
+ * name). With no project, every anon-pi container on the machine qualifies. The
+ * caller resolves 0 (error) / 1 (auto) / many (picker).
+ */
+export declare function resolveManagedMatches(args: {
+    containers: readonly ManagedContainer[];
+    machine: string;
+    project?: string;
+}): ManagedContainer[];
+/**
+ * A RUNNING netcage-managed container the CLI surfaces to the pure forward/ports
+ * resolution: its anon-pi identity `key` (stamped label, decoded), the `ref` to
+ * pass to `netcage forward`/`ports` (id or name), and a human `name` for the
+ * picker. Mirrors KeptContainer with the display name added.
+ */
+export interface ManagedContainer {
+    key: string;
+    ref: string;
+    name: string;
+}
+/**
+ * A parsed, validated port argument for `forward`: the in-jail port to reach and
+ * the host port to bind it on (equal to the jail port unless a `<hostPort>:`
+ * prefix remapped it). `raw` is the exact token to hand to netcage verbatim
+ * (`3001` or `8080:3001`), so anon-pi never re-serialises netcage's grammar.
+ */
+export interface ForwardPort {
+    hostPort: number;
+    jailPort: number;
+    raw: string;
+}
+/**
+ * PURE: parse a `forward` port token `[<hostPort>:]<jailPort>` (docker/kubectl
+ * host-first order). One port `3001` maps host 3001 -> jail 3001; `8080:3001`
+ * maps host 8080 -> jail 3001. Both sides must be integers in 1..65535. Throws
+ * AnonPiError on a bad shape / out-of-range / extra colon, with copy-pasteable
+ * guidance. `raw` is normalised to `<host>:<jail>` only when they differ, else
+ * the bare jail port, matching netcage's own accepted forms.
+ */
+export declare function parsePortArg(token: string): ForwardPort;
+/** A parsed `anon-pi forward` command (pure; the CLI does the netcage I/O). */
+export interface ForwardCommand {
+    project?: string;
+    machine: string;
+    machineExplicit: boolean;
+    /** The parsed port, or undefined to prompt from the container's listeners. */
+    port?: ForwardPort;
+    /** `--bind <addr>` passed through to netcage verbatim (undefined => netcage default). */
+    bind?: string;
+}
+/**
+ * PURE: parse `anon-pi forward [<project>] [--port <[hostPort:]jailPort>]
+ * [--bind <addr>] [-m <machine>]`. The bare positional is ALWAYS the project (so
+ * a numeric name like `3001` is a project, never a port); the port is the
+ * `--port`/`-p` flag, removing the number-vs-project ambiguity. `--bind` is
+ * passed through to netcage (which validates 127.0.0.1 / 0.0.0.0). Throws
+ * AnonPiError on an unknown flag, a missing flag argument, a second positional,
+ * or a bad port.
+ */
+export declare function parseForwardArgs(args: readonly string[]): ForwardCommand;
+/** A parsed `anon-pi ports` command (pure). */
+export interface PortsCommand {
+    project?: string;
+    machine: string;
+    machineExplicit: boolean;
+}
+/**
+ * PURE: parse `anon-pi ports [<project>] [-m <machine>]`. Like forward but with
+ * no port/bind: it lists a container's open in-jail listeners. The bare
+ * positional is the project filter.
+ */
+export declare function parsePortsArgs(args: readonly string[]): PortsCommand;
+/**
+ * A jail TCP LISTEN socket, as netcage's `ports --json` reports it: the bind
+ * `address`, the `port`, and `loopbackOnly` (bound 127.0.0.0/8 or ::1). The
+ * contract is netcage's (ADR-0015); anon-pi only consumes it.
+ */
+export interface NetcageListener {
+    address: string;
+    port: number;
+    loopbackOnly: boolean;
+}
+/**
+ * PURE: parse `netcage ports --json` output into listeners (best-effort). Keeps
+ * only well-formed `{address:string, port:int, loopbackOnly:bool}` entries;
+ * anything else (a netcage version drift, a non-array) yields []. The caller
+ * treats [] as "no hint", never an error.
+ */
+export declare function parseNetcagePortsJson(stdout: string): NetcageListener[];
+/** netcage's in-jail DNS forwarder always listens here; anon-pi hides it from the port hint. */
+export declare const NETCAGE_DNS_PORT = 53;
+/**
+ * PURE: the in-jail ports worth offering as forward targets: the listeners with
+ * netcage's own `127.0.0.1:53` DNS forwarder dropped (it is never something a
+ * user forwards), de-duplicated by port, sorted ascending. A server bound on
+ * both IPv4 and IPv6 (two listeners, same port) collapses to one entry.
+ */
+export declare function forwardablePorts(listeners: readonly NetcageListener[]): number[];
+/**
+ * PURE: a compact one-line hint of a container's forwardable in-jail ports for
+ * the picker / the pre-forward confirmation, e.g. `open: 3001, 5173` or
+ * `open: (none detected)`. Never includes the DNS forwarder (forwardablePorts).
+ */
+export declare function formatPortsHint(listeners: readonly NetcageListener[]): string;
 /**
  * PURE: the pi session-dir slug for a project, i.e. pathSlug of its jail cwd
  * `/projects/<name>`. Because the cwd is the SAME on every machine (files are
@@ -1269,5 +1397,5 @@ export declare function setImageWarning(name: string, oldImage: string | undefin
 /** Read the AnonPiEnv from a process env map (kept separate so tests inject one). */
 export declare function envFromProcess(penv: Record<string, string | undefined>): AnonPiEnv;
 /** The --help text (kept here so it is covered by the same module). */
-export declare const HELP = "anon-pi - run pi on anonymized, jailed machines (netcage: forced egress + one direct local model)\n\nUSAGE\n  anon-pi                        MENU: pick a project (pi), a shell, or a new project\n  anon-pi <project>              pi in the project (/projects/<project>); exit pi -> host\n  anon-pi <project> <pi-args\u2026>   forward args to pi (e.g. -p for a headless one-shot)\n  anon-pi --session <id>         resume a pi session by id, in its own project (also -r/--resume)\n  anon-pi <project> --fork <id>  fork a session into <project> (`.`=root; --continue too; project required)\n  anon-pi --list-models          list the models pi sees (also --models; no project needed)\n  anon-pi pi <pi-args\u2026>          run pi with ANY args and no project (the passthrough)\n  anon-pi --version              print anon-pi's version (also -V)\n  anon-pi --shell [<project>]    a jailed bash (at ~, or cd'd into <project>) - the project-hopper\n  anon-pi -m <machine> [<p>]     the same, on <machine> (its own image + home + conversations)\n  anon-pi --mount <parent> [<p>] root at a HOST parent folder instead of the projects root\n  anon-pi init                   onboard: verify your proxy, capture your local model, pick an image\n  anon-pi machine \u2026              manage machines (create / list / set-image / rm)\n  anon-pi --delete-home [<m>]    delete a machine's home (config + convos); keep its image pin + files\n  anon-pi --delete-project <p>   delete a project's files + its per-machine sessions; keep the homes\n\n  <project>   a folder under the projects root (mounted at /projects; pi's cwd). `.` means\n              the root itself (a scratch pi at /projects, /work for --mount, or ~).\n\n  [--rm]      throwaway container this run (the DEFAULT; deleted on exit).\n  [--keep]    leave the container KEPT so its filesystem survives (apt install,\n              quit, re-enter). anon-pi finds it by netcage's managed label and\n              `netcage start`s it on re-entry.\n\nWHAT IT DOES\n  Runs pi inside netcage with all web/DNS egress forced through the socks5h proxy\n  (fail-closed) and ONE direct hole to your local model (ANON_PI_LLM). A MACHINE\n  is an image + a persistent HOST home (bind-mounted at /root) holding your pi\n  config, extensions, and conversations; the container is disposable, so `--rm`\n  loses nothing. Files (projects) are global by default; conversations are\n  per-machine. On a FRESH machine home the image's staged defaults + your\n  models.json are seeded in once; after that pi owns the home. Requires `netcage`.\n\nENVIRONMENT\n  ANON_PI_PROXY   (required) socks5h URL of your proxy (Tor/wireproxy/ssh -D).\n                  No default: the proxy is what anonymizes, so it is never guessed.\n  ANON_PI_LLM     (required) RFC1918/link-local IP[:port] of the local model\n  ANON_PI_IMAGE   image with `pi` on PATH, used when a machine has no image set.\n                  No image yet? See the README (Providing a pi image).\n  ANON_PI_HOME    anon-pi workspace dir (default ~/.anon-pi; NOT under ~/.config)\n  ANON_PI_PROJECTS  projects root override (host dir mounted at /projects)\n\nPLATFORM\n  Linux only (via netcage's netns/nft jail). On macOS/Windows it works only\n  inside a Linux VM, where --allow-direct to a LAN model is VM-boundary-sensitive.\n";
+export declare const HELP = "anon-pi - run pi on anonymized, jailed machines (netcage: forced egress + one direct local model)\n\nUSAGE\n  anon-pi                        MENU: pick a project (pi), a shell, or a new project\n  anon-pi <project>              pi in the project (/projects/<project>); exit pi -> host\n  anon-pi <project> <pi-args\u2026>   forward args to pi (e.g. -p for a headless one-shot)\n  anon-pi --session <id>         resume a pi session by id, in its own project (also -r/--resume)\n  anon-pi <project> --fork <id>  fork a session into <project> (`.`=root; --continue too; project required)\n  anon-pi --list-models          list the models pi sees (also --models; no project needed)\n  anon-pi pi <pi-args\u2026>          run pi with ANY args and no project (the passthrough)\n  anon-pi --version              print anon-pi's version (also -V)\n  anon-pi --shell [<project>]    a jailed bash (at ~, or cd'd into <project>) - the project-hopper\n  anon-pi forward [<p>] [--port \u2026]  open a host port onto a running container's in-jail server\n  anon-pi ports [<project>]      list a running container's open in-jail TCP listeners\n  anon-pi -m <machine> [<p>]     the same, on <machine> (its own image + home + conversations)\n  anon-pi --mount <parent> [<p>] root at a HOST parent folder instead of the projects root\n  anon-pi init                   onboard: verify your proxy, capture your local model, pick an image\n  anon-pi machine \u2026              manage machines (create / list / set-image / rm)\n  anon-pi --delete-home [<m>]    delete a machine's home (config + convos); keep its image pin + files\n  anon-pi --delete-project <p>   delete a project's files + its per-machine sessions; keep the homes\n\n  <project>   a folder under the projects root (mounted at /projects; pi's cwd). `.` means\n              the root itself (a scratch pi at /projects, /work for --mount, or ~).\n\n  [--rm]      throwaway container this run (the DEFAULT; deleted on exit).\n  [--keep]    leave the container KEPT so its filesystem survives (apt install,\n              quit, re-enter). anon-pi finds it by netcage's managed label and\n              `netcage start`s it on re-entry.\n\nWHAT IT DOES\n  Runs pi inside netcage with all web/DNS egress forced through the socks5h proxy\n  (fail-closed) and ONE direct hole to your local model (ANON_PI_LLM). A MACHINE\n  is an image + a persistent HOST home (bind-mounted at /root) holding your pi\n  config, extensions, and conversations; the container is disposable, so `--rm`\n  loses nothing. Files (projects) are global by default; conversations are\n  per-machine. On a FRESH machine home the image's staged defaults + your\n  models.json are seeded in once; after that pi owns the home. Requires `netcage`.\n\nENVIRONMENT\n  ANON_PI_PROXY   (required) socks5h URL of your proxy (Tor/wireproxy/ssh -D).\n                  No default: the proxy is what anonymizes, so it is never guessed.\n  ANON_PI_LLM     (required) RFC1918/link-local IP[:port] of the local model\n  ANON_PI_IMAGE   image with `pi` on PATH, used when a machine has no image set.\n                  No image yet? See the README (Providing a pi image).\n  ANON_PI_HOME    anon-pi workspace dir (default ~/.anon-pi; NOT under ~/.config)\n  ANON_PI_PROJECTS  projects root override (host dir mounted at /projects)\n\nPLATFORM\n  Linux only (via netcage's netns/nft jail). On macOS/Windows it works only\n  inside a Linux VM, where --allow-direct to a LAN model is VM-boundary-sensitive.\n";
 //# sourceMappingURL=anon-pi.d.ts.map

package/dist/anon-pi.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"anon-pi.d.ts","sourceRoot":"","sources":["../src/anon-pi.ts"],"names":[],"mappings":"AAqCA;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,cAAc,CAAC;AAEnD;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,UAAU,CAAC;AAE5C;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAE1C;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,UAAU,CAAC;AAE3C;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,oBAAoB,CAAC;AAErD;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,4BAA4B,CAAC;AAE7D;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,8BAA8B,CAAC;AAEjE;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,gCAAgC,CAAC;AAErE,oFAAoF;AACpF,eAAO,MAAM,WAAW,kBAAkB,CAAC;AAE3C,yEAAyE;AACzE,eAAO,MAAM,WAAW,gBAAgB,CAAC;AAEzC,oFAAoF;AACpF,eAAO,MAAM,aAAa,kBAAkB,CAAC;AAE7C;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AAEvD;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAc3D;AAED,oFAAoF;AACpF,eAAO,MAAM,YAAY,MAAM,CAAC;AAEhC,gFAAgF;AAChF,MAAM,WAAW,SAAS;IACzB,2DAA2D;IAC3D,IAAI,EAAE,MAAM,CAAC;IACb,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,sEAAsE;IACtE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2DAA2D;IAC3D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,qEAAqE;IACrE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,+EAA+E;IAC/E,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,oFAAoF;AACpF,qBAAa,WAAY,SAAQ,KAAK;CAAG;AAEzC;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,QAgB6C,CAAC;AAEjF;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,SAAS,GAAG,MAAM,CAGxD;AAED,kFAAkF;AAClF,wBAAgB,UAAU,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED,6FAA6F;AAC7F,wBAAgB,cAAc,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEnE;AAED,0EAA0E;AAC1E,wBAAgB,eAAe,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEpE;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,SAAS,GAAG,MAAM,CAE3D;AAED,2FAA2F;AAC3F,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,SAAS,GAAG,MAAM,CAE7D;AAED,yFAAyF;AACzF,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAE1E;AAED,kGAAkG;AAClG,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAE5E;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACpC,GAAG,EAAE,SAAS,EACd,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,OAAO,GAC5B,MAAM,GAAG,SAAS,CAMpB;AAED,gGAAgG;AAChG,wBAAgB,uBAAuB,CACtC,GAAG,EAAE,SAAS,EACd,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,OAAO,GAC5B,MAAM,GAAG,SAAS,CAMpB;AAED,4FAA4F;AAC5F,eAAO,MAAM,gBAAgB,aAAa,CAAC;AAE3C;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEpE;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEvE;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACvC,GAAG,EAAE,SAAS,EACd,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GACb,MAAM,CAER;AAED,kEAAkE;AAClE,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,SAAS,GAAG,MAAM,CAE1D;AAaD,4DAA4D;AAC5D,MAAM,WAAW,cAAc;IAC9B,yCAAyC;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;CACb;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAChC,GAAG,EAAE,SAAS,EACd,OAAO,EAAE,MAAM,GACb,cAAc,CAGhB;AAED,+DAA+D;AAC/D,MAAM,WAAW,iBAAiB;IACjC,kEAAkE;IAClE,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,MAAM,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,QAAQ,EAAE,MAAM,EAAE,CAAC;CACnB;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE;IAC1C,GAAG,EAAE,SAAS,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,YAAY,EAAE,MAAM,CAAC;IACrB,yEAAyE;IACzE,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5B,GAAG,iBAAiB,CAQpB;AAID;;;;GAIG;AACH,eAAO,MAAM,UAAU,MAAM,CAAC;AAE9B;;;;;;;GAOG;AACH,eAAO,MAAM,cAAc,EAAE,SAAS,MAAM,EAAsB,CAAC;AAInE,uDAAuD;AACvD,MAAM,MAAM,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;AAE7C;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,MAAM,CAejE;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEzE;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAExD;AAED,kFAAkF;AAClF,MAAM,MAAM,QAAQ,GAAG,UAAU,GAAG,OAAO,GAAG,SAAS,CAAC;AAExD,0EAA0E;AAC1E,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAE9D;AAED,qFAAqF;AACrF,wBAAgB,OAAO,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,CAS9C;AAED;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAShE;AAED;;;;;;;;GAQG;AACH,wBAAgB,SAAS,CACxB,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,QAAQ,EACd,OAAO,EAAE,MAAM,GAAG,SAAS,GACzB,MAAM,CAGR;AAED,0FAA0F;AAC1F,MAAM,WAAW,YAAY;IAC5B,yBAAyB;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mDAAmD;IACnD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,sDAAsD;IACtD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kEAAkE;IAClE,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,uEAAuE;AACvE,MAAM,WAAW,aAAa;IAC7B,8DAA8D;IAC9D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB;AASD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG,YAAY,CAW1D;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,OAAO,GAAG,aAAa,CAO5D;AAOD;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAM3D;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,yBAAyB,6BAA6B,CAAC;AAEpE;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACtC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACtC,MAAM,CAGR;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACzC,GAAG,EAAE,SAAS,CAAC;IACf,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,6EAA6E;IAC7E,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,MAAM,CAST;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE;IAClC,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,GAAG,EAAE;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAC,CAAC;CACtB,GAAG,MAAM,CAIT;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE;IAChC,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,GAAG,EAAE;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAC,CAAC;CAC1B,GAAG,MAAM,GAAG,SAAS,CAErB;AAYD,6EAA6E;AAC7E,MAAM,WAAW,OAAO;IACvB,wEAAwE;IACxE,IAAI,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAC;IACb,8DAA8D;IAC9D,KAAK,EAAE,MAAM,CAAC;CACd;AAED;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC;AAEjD;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC5B,+CAA+C;IAC/C,OAAO,EAAE,OAAO,CAAC;IACjB,gCAAgC;IAChC,IAAI,EAAE,UAAU,CAAC;IACjB;;;OAGG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2EAA2E;IAC3E,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB;;;;OAIG;IACH,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,mFAAmF;IACnF,KAAK,EAAE,MAAM,CAAC;IACd,sFAAsF;IACtF,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iFAAiF;IACjF,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GACnB;IACA,0EAA0E;IAC1E,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;CAChB,GACD;IACA,IAAI,EAAE,QAAQ,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,uFAAuF;IACvF,GAAG,EAAE,MAAM,CAAC;IACZ,uFAAuF;IACvF,KAAK,EAAE,OAAO,CAAC;IACf,uEAAuE;IACvE,WAAW,EAAE,MAAM,EAAE,CAAC;CACrB,CAAC;AAUL,8EAA8E;AAC9E,eAAO,MAAM,eAAe,YAAY,CAAC;AAEzC;;;;;;;;;GASG;AACH,MAAM,WAAW,YAAY;IAC5B,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,eAAe,EAAE,OAAO,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAqED,uFAAuF;AACvF,wBAAgB,cAAc,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAEjD;AAED,yFAAyF;AACzF,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAI1E;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC9B,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,GACnC,MAAM,GAAG,SAAS,CAUpB;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAYvE;AAED;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,OAAO,CAAC;AAEzC;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC/B,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,GACnC,OAAO,CAET;AAuCD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,YAAY,CAmKrE;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,cAAc,CAC7B,MAAM,EAAE,YAAY,EACpB,SAAS,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,GACzC,UAAU,CA+GZ;AAqDD;;;;;;;;GAQG;AACH,MAAM,WAAW,aAAa;IAC7B,mFAAmF;IACnF,GAAG,EAAE,MAAM,CAAC;IACZ,iEAAiE;IACjE,GAAG,EAAE,MAAM,CAAC;CACZ;AAED;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAAG;IAAC,MAAM,EAAE,KAAK,CAAA;CAAC,GAAG;IAAC,MAAM,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAC,CAAC;AAE1E;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAa7D;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAChC,MAAM,EAAE,YAAY,EACpB,IAAI,EAAE,SAAS,aAAa,EAAE,GAC5B,UAAU,CAQZ;AAkBD;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,cAAc;IAC9B,kFAAkF;IAClF,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,0EAA0E;IAC1E,IAAI,EAAE,MAAM,CAAC;IACb,8EAA8E;IAC9E,MAAM,EAAE,OAAO,CAAC;IAChB,qEAAqE;IACrE,QAAQ,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACzC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACnB,GAAG,cAAc,CAejB;AAYD;;;;;;;GAOG;AACH,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC;AAElE,qFAAqF;AACrF,MAAM,WAAW,YAAY;IAC5B,iDAAiD;IACjD,OAAO,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB;;;OAGG;IACH,mBAAmB,EAAE,OAAO,CAAC;CAC7B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE;IACxC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,iBAAiB,CAAC;CAC5B,GAAG,YAAY,EAAE,CAajB;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,CAAC;AAEjE,6EAA6E;AAC7E,MAAM,WAAW,SAAS;IACzB,0EAA0E;IAC1E,IAAI,EAAE,aAAa,CAAC;IACpB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,KAAK,EAAE,MAAM,CAAC;CACd;AAED,kGAAkG;AAClG,eAAO,MAAM,eAAe,uCAAuC,CAAC;AACpE,eAAO,MAAM,cAAc,wBAAwB,CAAC;AACpD,eAAO,MAAM,gBAAgB,0CAA0C,CAAC;AAExE;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,CAOnE;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACtC,UAAU,EAAE,cAAc,CAAC;IAC3B,KAAK,EAAE,SAAS,YAAY,EAAE,CAAC;CAC/B,GAAG,SAAS,EAAE,CAiBd;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOjD;AAED;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,UAAU,CAAC;AAE3C;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AAEvD;;;GAGG;AACH,eAAO,MAAM,sBAAsB,SAAS,CAAC;AAE7C;;;;;GAKG;AACH,eAAO,MAAM,eAAe,EAAE,WAAW,CAAC,MAAM,CAS9C,CAAC;AAEH,qFAAqF;AACrF,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAGnE;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,cAAc;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAC,CAAC;IAC9E,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACrB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,OAAO,CAAC;IACpB,gFAAgF;IAChF,KAAK,EAAE,cAAc,CAAC;CACtB;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,cAAc,CAM1D;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,EAAE,CAmBzD;AAED,6EAA6E;AAC7E,MAAM,WAAW,iBAAiB;IACjC,gFAAgF;IAChF,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,4EAA4E;IAC5E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oFAAoF;IACpF,eAAe,EAAE,OAAO,CAAC;CACzB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CACtC,UAAU,EAAE,YAAY,EACxB,WAAW,EAAE,MAAM,GACjB,iBAAiB,GAAG,SAAS,CAwB/B;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAChC,UAAU,EAAE,SAAS,cAAc,EAAE,EACrC,SAAS,EAAE,SAAS,MAAM,EAAE,GAC1B,cAAc,EAAE,CAalB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,kBAAkB,CACjC,WAAW,EAAE,MAAM,EACnB,MAAM,GAAE,SAAS,CAAC,cAAc,GAAG,MAAM,CAAC,EAAO,EACjD,MAAM,GAAE,MAA+B,GACrC,YAAY,CAmBd;AAED,oFAAoF;AACpF,MAAM,WAAW,cAAc;IAC9B,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,EAAE,CAAC;CACxB;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACrC,QAAQ,EAAE,SAAS,MAAM,EAAE,EAC3B,SAAS,EAAE,MAAM,GACf,cAAc,CAShB;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAClC,QAAQ,EAAE,OAAO,EACjB,SAAS,EAAE,cAAc,GACvB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CASzB;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,SAAS,GAAG,MAAM,CAM5D;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC;IACnB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACrB;AAED,uEAAuE;AACvE,MAAM,WAAW,YAAY;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACvC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACrB;AAaD;;;;;;;;GAQG;AACH,eAAO,MAAM,yBAAyB,EAAE,SAAS;IAChD,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACb,EAIA,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,EAAE,SAAS,MAAM,EAAuB,CAAC;AAE5E,+EAA+E;AAC/E,MAAM,MAAM,cAAc,GACvB;IACA,2EAA2E;IAC3E,MAAM,EAAE,IAAI,CAAC;IACb,iEAAiE;IACjE,MAAM,EAAE,MAAM,CAAC;CACd,GACD;IACA,wEAAwE;IACxE,MAAM,EAAE,KAAK,CAAC;IACd,iEAAiE;IACjE,MAAM,EAAE,MAAM,CAAC;CACd,CAAC;AAEL;;;;;;;;;;;;GAYG;AACH,wBAAgB,wBAAwB,CACvC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,UAAU,GAAG,MAAM,GAC5C,cAAc,CAUhB;AAED;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC3B,2DAA2D;IAC3D,OAAO,EAAE,MAAM,CAAC;IAChB,+EAA+E;IAC/E,IAAI,EAAE,MAAM,CAAC;CACb;AAED;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAmBxE;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC5B,oDAAoD;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,gCAAgC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,8DAA8D;IAC9D,IAAI,EAAE,OAAO,CAAC;IACd,kEAAkE;IAClE,SAAS,CAAC,EAAE,cAAc,CAAC;IAC3B,sEAAsE;IACtE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sEAAsE;IACtE,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,gFAAgF;AAChF,MAAM,WAAW,kBAAkB;IAClC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,KAAK,CAAC;QAClB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,OAAO,CAAC;QACf,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,WAAW,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC,CAAC;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CACxC,GAAG,EAAE,kBAAkB,GAAG,SAAS,GACjC,YAAY,EAAE,CAwBhB;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAC3C,GAAG,EAAE,kBAAkB,GAAG,SAAS,GACjC,MAAM,GAAG,SAAS,CAOpB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB,EAAE,SAAS,MAAM,EAatD,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,mBAAmB,CAClC,QAAQ,EAAE,SAAS,YAAY,EAAE,EACjC,WAAW,CAAC,EAAE,MAAM,GAClB,MAAM,CAkCR;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAYpE;AAED;;;;;;GAMG;AACH,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,SAAS,GAAG,UAAU,GAAG,MAAM,CAAC;AAExE,uEAAuE;AACvE,MAAM,WAAW,kBAAkB;IAClC,MAAM,EAAE,eAAe,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;CACd;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,IAAI,kBAAkB,EAAE,CAcpD;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAWhE;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,IAAI,MAAM,GAAG,SAAS,CAE1D;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,IAAI,MAAM,GAAG,SAAS,CAEjE;AAmBD;;;;GAIG;AACH,wBAAgB,aAAa,IAAI,MAAM,GAAG,SAAS,CASlD;AAWD;;;;;;;;;GASG;AACH,MAAM,MAAM,cAAc,GACvB;IAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAC,GAC9C;IAAC,IAAI,EAAE,MAAM,CAAA;CAAC,GACd;IAAC,IAAI,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAC,GAChD;IAAC,IAAI,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,OAAO,CAAA;CAAC,CAAC;AAE5C;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,cAAc,CAoFxE;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,aAAa,GAAG,MAAM,CAOlE;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC9B,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,QAAQ,EAAE,MAAM,GACd,MAAM,CASR;AAED,qFAAqF;AACrF,wBAAgB,cAAc,CAC7B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACtC,SAAS,CAaX;AAED,uEAAuE;AACvE,eAAO,MAAM,IAAI,ovGAgDhB,CAAC"}
+{"version":3,"file":"anon-pi.d.ts","sourceRoot":"","sources":["../src/anon-pi.ts"],"names":[],"mappings":"AAqCA;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,cAAc,CAAC;AAEnD;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,UAAU,CAAC;AAE5C;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAE1C;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,UAAU,CAAC;AAE3C;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,oBAAoB,CAAC;AAErD;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,4BAA4B,CAAC;AAE7D;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,8BAA8B,CAAC;AAEjE;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,gCAAgC,CAAC;AAErE,oFAAoF;AACpF,eAAO,MAAM,WAAW,kBAAkB,CAAC;AAE3C,yEAAyE;AACzE,eAAO,MAAM,WAAW,gBAAgB,CAAC;AAEzC,oFAAoF;AACpF,eAAO,MAAM,aAAa,kBAAkB,CAAC;AAE7C;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AAEvD;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAc3D;AAED,oFAAoF;AACpF,eAAO,MAAM,YAAY,MAAM,CAAC;AAEhC,gFAAgF;AAChF,MAAM,WAAW,SAAS;IACzB,2DAA2D;IAC3D,IAAI,EAAE,MAAM,CAAC;IACb,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,sEAAsE;IACtE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2DAA2D;IAC3D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,qEAAqE;IACrE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,+EAA+E;IAC/E,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,oFAAoF;AACpF,qBAAa,WAAY,SAAQ,KAAK;CAAG;AAEzC;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,QAgB6C,CAAC;AAEjF;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,SAAS,GAAG,MAAM,CAGxD;AAED,kFAAkF;AAClF,wBAAgB,UAAU,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED,6FAA6F;AAC7F,wBAAgB,cAAc,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEnE;AAED,0EAA0E;AAC1E,wBAAgB,eAAe,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEpE;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,SAAS,GAAG,MAAM,CAE3D;AAED,2FAA2F;AAC3F,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,SAAS,GAAG,MAAM,CAE7D;AAED,yFAAyF;AACzF,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAE1E;AAED,kGAAkG;AAClG,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAE5E;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACpC,GAAG,EAAE,SAAS,EACd,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,OAAO,GAC5B,MAAM,GAAG,SAAS,CAMpB;AAED,gGAAgG;AAChG,wBAAgB,uBAAuB,CACtC,GAAG,EAAE,SAAS,EACd,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,OAAO,GAC5B,MAAM,GAAG,SAAS,CAMpB;AAED,4FAA4F;AAC5F,eAAO,MAAM,gBAAgB,aAAa,CAAC;AAE3C;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEpE;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEvE;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACvC,GAAG,EAAE,SAAS,EACd,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GACb,MAAM,CAER;AAED,kEAAkE;AAClE,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,SAAS,GAAG,MAAM,CAE1D;AAaD,4DAA4D;AAC5D,MAAM,WAAW,cAAc;IAC9B,yCAAyC;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;CACb;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAChC,GAAG,EAAE,SAAS,EACd,OAAO,EAAE,MAAM,GACb,cAAc,CAGhB;AAED,+DAA+D;AAC/D,MAAM,WAAW,iBAAiB;IACjC,kEAAkE;IAClE,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,MAAM,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,QAAQ,EAAE,MAAM,EAAE,CAAC;CACnB;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE;IAC1C,GAAG,EAAE,SAAS,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,YAAY,EAAE,MAAM,CAAC;IACrB,yEAAyE;IACzE,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5B,GAAG,iBAAiB,CAQpB;AAID;;;;GAIG;AACH,eAAO,MAAM,UAAU,MAAM,CAAC;AAE9B;;;;;;;GAOG;AACH,eAAO,MAAM,cAAc,EAAE,SAAS,MAAM,EAAsB,CAAC;AAInE,uDAAuD;AACvD,MAAM,MAAM,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;AAE7C;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,MAAM,CAejE;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEzE;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAExD;AAED,kFAAkF;AAClF,MAAM,MAAM,QAAQ,GAAG,UAAU,GAAG,OAAO,GAAG,SAAS,CAAC;AAExD,0EAA0E;AAC1E,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAE9D;AAED,qFAAqF;AACrF,wBAAgB,OAAO,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,CAS9C;AAED;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAShE;AAED;;;;;;;;GAQG;AACH,wBAAgB,SAAS,CACxB,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,QAAQ,EACd,OAAO,EAAE,MAAM,GAAG,SAAS,GACzB,MAAM,CAGR;AAED,0FAA0F;AAC1F,MAAM,WAAW,YAAY;IAC5B,yBAAyB;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mDAAmD;IACnD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,sDAAsD;IACtD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kEAAkE;IAClE,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,uEAAuE;AACvE,MAAM,WAAW,aAAa;IAC7B,8DAA8D;IAC9D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB;AASD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG,YAAY,CAW1D;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,OAAO,GAAG,aAAa,CAO5D;AAOD;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAM3D;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,yBAAyB,6BAA6B,CAAC;AAEpE;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACtC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACtC,MAAM,CAGR;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACzC,GAAG,EAAE,SAAS,CAAC;IACf,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,6EAA6E;IAC7E,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,MAAM,CAST;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE;IAClC,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,GAAG,EAAE;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAC,CAAC;CACtB,GAAG,MAAM,CAIT;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE;IAChC,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,GAAG,EAAE;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAC,CAAC;CAC1B,GAAG,MAAM,GAAG,SAAS,CAErB;AAYD,6EAA6E;AAC7E,MAAM,WAAW,OAAO;IACvB,wEAAwE;IACxE,IAAI,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAC;IACb,8DAA8D;IAC9D,KAAK,EAAE,MAAM,CAAC;CACd;AAED;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC;AAEjD;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC5B,+CAA+C;IAC/C,OAAO,EAAE,OAAO,CAAC;IACjB,gCAAgC;IAChC,IAAI,EAAE,UAAU,CAAC;IACjB;;;OAGG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2EAA2E;IAC3E,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB;;;;OAIG;IACH,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,mFAAmF;IACnF,KAAK,EAAE,MAAM,CAAC;IACd,sFAAsF;IACtF,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iFAAiF;IACjF,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GACnB;IACA,0EAA0E;IAC1E,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;CAChB,GACD;IACA,IAAI,EAAE,QAAQ,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,uFAAuF;IACvF,GAAG,EAAE,MAAM,CAAC;IACZ,uFAAuF;IACvF,KAAK,EAAE,OAAO,CAAC;IACf,uEAAuE;IACvE,WAAW,EAAE,MAAM,EAAE,CAAC;CACrB,CAAC;AAUL,8EAA8E;AAC9E,eAAO,MAAM,eAAe,YAAY,CAAC;AAEzC;;;;;;;;;GASG;AACH,MAAM,WAAW,YAAY;IAC5B,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,eAAe,EAAE,OAAO,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAqED,uFAAuF;AACvF,wBAAgB,cAAc,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAEjD;AAED,yFAAyF;AACzF,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAI1E;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC9B,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,GACnC,MAAM,GAAG,SAAS,CAUpB;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAYvE;AAED;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,OAAO,CAAC;AAEzC;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC/B,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,GACnC,OAAO,CAET;AAuCD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,YAAY,CAmKrE;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,cAAc,CAC7B,MAAM,EAAE,YAAY,EACpB,SAAS,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,GACzC,UAAU,CA+GZ;AAqDD;;;;;;;;GAQG;AACH,MAAM,WAAW,aAAa;IAC7B,mFAAmF;IACnF,GAAG,EAAE,MAAM,CAAC;IACZ,iEAAiE;IACjE,GAAG,EAAE,MAAM,CAAC;CACZ;AAED;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAAG;IAAC,MAAM,EAAE,KAAK,CAAA;CAAC,GAAG;IAAC,MAAM,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAC,CAAC;AAE1E;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAa7D;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAChC,MAAM,EAAE,YAAY,EACpB,IAAI,EAAE,SAAS,aAAa,EAAE,GAC5B,UAAU,CAQZ;AAeD;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;CACZ;AAED,iFAAiF;AACjF,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,aAAa,CAkBvD;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,aAAa,GAAG,MAAM,CAQxD;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE;IAC3C,UAAU,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,gBAAgB,EAAE,CAQrB;AAED;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;CACb;AAED;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;CACZ;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,WAAW,CAyBvD;AAED,+EAA+E;AAC/E,MAAM,WAAW,cAAc;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,OAAO,CAAC;IACzB,8EAA8E;IAC9E,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,yFAAyF;IACzF,IAAI,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,cAAc,CAkCxE;AAED,+CAA+C;AAC/C,MAAM,WAAW,YAAY;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,OAAO,CAAC;CACzB;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,YAAY,CAuBpE;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,OAAO,CAAC;CACtB;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,eAAe,EAAE,CAyBvE;AAED,gGAAgG;AAChG,eAAO,MAAM,gBAAgB,KAAK,CAAC;AAEnC;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC/B,SAAS,EAAE,SAAS,eAAe,EAAE,GACnC,MAAM,EAAE,CAOV;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,SAAS,eAAe,EAAE,GAAG,MAAM,CAK7E;AAkBD;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,cAAc;IAC9B,kFAAkF;IAClF,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,0EAA0E;IAC1E,IAAI,EAAE,MAAM,CAAC;IACb,8EAA8E;IAC9E,MAAM,EAAE,OAAO,CAAC;IAChB,qEAAqE;IACrE,QAAQ,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACzC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACnB,GAAG,cAAc,CAejB;AAYD;;;;;;;GAOG;AACH,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC;AAElE,qFAAqF;AACrF,MAAM,WAAW,YAAY;IAC5B,iDAAiD;IACjD,OAAO,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB;;;OAGG;IACH,mBAAmB,EAAE,OAAO,CAAC;CAC7B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE;IACxC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,iBAAiB,CAAC;CAC5B,GAAG,YAAY,EAAE,CAajB;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,CAAC;AAEjE,6EAA6E;AAC7E,MAAM,WAAW,SAAS;IACzB,0EAA0E;IAC1E,IAAI,EAAE,aAAa,CAAC;IACpB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,KAAK,EAAE,MAAM,CAAC;CACd;AAED,kGAAkG;AAClG,eAAO,MAAM,eAAe,uCAAuC,CAAC;AACpE,eAAO,MAAM,cAAc,wBAAwB,CAAC;AACpD,eAAO,MAAM,gBAAgB,0CAA0C,CAAC;AAExE;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,CAOnE;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACtC,UAAU,EAAE,cAAc,CAAC;IAC3B,KAAK,EAAE,SAAS,YAAY,EAAE,CAAC;CAC/B,GAAG,SAAS,EAAE,CAiBd;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOjD;AAED;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,UAAU,CAAC;AAE3C;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AAEvD;;;GAGG;AACH,eAAO,MAAM,sBAAsB,SAAS,CAAC;AAE7C;;;;;GAKG;AACH,eAAO,MAAM,eAAe,EAAE,WAAW,CAAC,MAAM,CAS9C,CAAC;AAEH,qFAAqF;AACrF,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAGnE;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,cAAc;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAC,CAAC;IAC9E,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACrB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,OAAO,CAAC;IACpB,gFAAgF;IAChF,KAAK,EAAE,cAAc,CAAC;CACtB;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,cAAc,CAM1D;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,EAAE,CAmBzD;AAED,6EAA6E;AAC7E,MAAM,WAAW,iBAAiB;IACjC,gFAAgF;IAChF,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,4EAA4E;IAC5E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oFAAoF;IACpF,eAAe,EAAE,OAAO,CAAC;CACzB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CACtC,UAAU,EAAE,YAAY,EACxB,WAAW,EAAE,MAAM,GACjB,iBAAiB,GAAG,SAAS,CAwB/B;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAChC,UAAU,EAAE,SAAS,cAAc,EAAE,EACrC,SAAS,EAAE,SAAS,MAAM,EAAE,GAC1B,cAAc,EAAE,CAalB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,kBAAkB,CACjC,WAAW,EAAE,MAAM,EACnB,MAAM,GAAE,SAAS,CAAC,cAAc,GAAG,MAAM,CAAC,EAAO,EACjD,MAAM,GAAE,MAA+B,GACrC,YAAY,CAmBd;AAED,oFAAoF;AACpF,MAAM,WAAW,cAAc;IAC9B,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,EAAE,CAAC;CACxB;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACrC,QAAQ,EAAE,SAAS,MAAM,EAAE,EAC3B,SAAS,EAAE,MAAM,GACf,cAAc,CAShB;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAClC,QAAQ,EAAE,OAAO,EACjB,SAAS,EAAE,cAAc,GACvB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CASzB;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,SAAS,GAAG,MAAM,CAM5D;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC;IACnB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACrB;AAED,uEAAuE;AACvE,MAAM,WAAW,YAAY;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACvC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACrB;AAaD;;;;;;;;GAQG;AACH,eAAO,MAAM,yBAAyB,EAAE,SAAS;IAChD,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACb,EAIA,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,EAAE,SAAS,MAAM,EAAuB,CAAC;AAE5E,+EAA+E;AAC/E,MAAM,MAAM,cAAc,GACvB;IACA,2EAA2E;IAC3E,MAAM,EAAE,IAAI,CAAC;IACb,iEAAiE;IACjE,MAAM,EAAE,MAAM,CAAC;CACd,GACD;IACA,wEAAwE;IACxE,MAAM,EAAE,KAAK,CAAC;IACd,iEAAiE;IACjE,MAAM,EAAE,MAAM,CAAC;CACd,CAAC;AAEL;;;;;;;;;;;;GAYG;AACH,wBAAgB,wBAAwB,CACvC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,UAAU,GAAG,MAAM,GAC5C,cAAc,CAUhB;AAED;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC3B,2DAA2D;IAC3D,OAAO,EAAE,MAAM,CAAC;IAChB,+EAA+E;IAC/E,IAAI,EAAE,MAAM,CAAC;CACb;AAED;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAmBxE;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC5B,oDAAoD;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,gCAAgC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,8DAA8D;IAC9D,IAAI,EAAE,OAAO,CAAC;IACd,kEAAkE;IAClE,SAAS,CAAC,EAAE,cAAc,CAAC;IAC3B,sEAAsE;IACtE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sEAAsE;IACtE,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,gFAAgF;AAChF,MAAM,WAAW,kBAAkB;IAClC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,KAAK,CAAC;QAClB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,OAAO,CAAC;QACf,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,WAAW,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC,CAAC;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CACxC,GAAG,EAAE,kBAAkB,GAAG,SAAS,GACjC,YAAY,EAAE,CAwBhB;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAC3C,GAAG,EAAE,kBAAkB,GAAG,SAAS,GACjC,MAAM,GAAG,SAAS,CAOpB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB,EAAE,SAAS,MAAM,EAatD,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,mBAAmB,CAClC,QAAQ,EAAE,SAAS,YAAY,EAAE,EACjC,WAAW,CAAC,EAAE,MAAM,GAClB,MAAM,CAkCR;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAYpE;AAED;;;;;;GAMG;AACH,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,SAAS,GAAG,UAAU,GAAG,MAAM,CAAC;AAExE,uEAAuE;AACvE,MAAM,WAAW,kBAAkB;IAClC,MAAM,EAAE,eAAe,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;CACd;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,IAAI,kBAAkB,EAAE,CAcpD;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAWhE;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,IAAI,MAAM,GAAG,SAAS,CAE1D;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,IAAI,MAAM,GAAG,SAAS,CAEjE;AAmBD;;;;GAIG;AACH,wBAAgB,aAAa,IAAI,MAAM,GAAG,SAAS,CASlD;AAWD;;;;;;;;;GASG;AACH,MAAM,MAAM,cAAc,GACvB;IAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAC,GAC9C;IAAC,IAAI,EAAE,MAAM,CAAA;CAAC,GACd;IAAC,IAAI,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAC,GAChD;IAAC,IAAI,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,OAAO,CAAA;CAAC,CAAC;AAE5C;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,cAAc,CAoFxE;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,aAAa,GAAG,MAAM,CAOlE;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC9B,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,QAAQ,EAAE,MAAM,GACd,MAAM,CASR;AAED,qFAAqF;AACrF,wBAAgB,cAAc,CAC7B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACtC,SAAS,CAaX;AAED,uEAAuE;AACvE,eAAO,MAAM,IAAI,i7GAkDhB,CAAC"}

package/dist/anon-pi.js

@@ -1079,6 +1079,244 @@ export function resolveRunVsStart(intent, kept) {
     const match = kept.find((c) => c.key === want);
     return match ? { action: 'start', ref: match.ref } : { action: 'run' };
 }
+/** PURE: parse a stamped keptContainerKey back into its fields (best-effort). */
+export function parseKeptKey(key) {
+    const out = {
+        machine: '',
+        projectsRoot: '',
+        mountParent: '',
+        cwd: '',
+    };
+    for (const line of key.split('\n')) {
+        const eq = line.indexOf('=');
+        if (eq < 0)
+            continue;
+        const k = line.slice(0, eq);
+        const v = line.slice(eq + 1);
+        if (k === 'machine')
+            out.machine = v;
+        else if (k === 'projectsRoot')
+            out.projectsRoot = v;
+        else if (k === 'mountParent')
+            out.mountParent = v;
+        else if (k === 'cwd')
+            out.cwd = v;
+    }
+    return out;
+}
+/**
+ * PURE: the leaf name of a stamped key's cwd, i.e. the project a container hosts
+ * (`/projects/recon` -> `recon`, `/projects` -> '.', `/work/x` -> `x`, `/root`
+ * -> '' for a bare shell). Used to filter the picker by `<project>` and to label
+ * each row. A root cwd (`/projects`, `/work`) maps to the `.` root token.
+ */
+export function keyProject(fields) {
+    const cwd = fields.cwd;
+    if (cwd === CONTAINER_PROJECTS_ROOT || cwd === CONTAINER_MOUNT_ROOT) {
+        return ROOT_TOKEN;
+    }
+    if (cwd === CONTAINER_HOME_ROOT)
+        return ''; // a bare shell, no project
+    const slash = cwd.lastIndexOf('/');
+    return slash < 0 ? cwd : cwd.slice(slash + 1);
+}
+/**
+ * PURE: pick the RUNNING anon-pi containers a `forward`/`ports` should offer.
+ * Filters the supplied running managed containers (each with its decoded key
+ * fields) to those on `machine`, optionally narrowed to `project` (its leaf cwd
+ * name). With no project, every anon-pi container on the machine qualifies. The
+ * caller resolves 0 (error) / 1 (auto) / many (picker).
+ */
+export function resolveManagedMatches(args) {
+    const { containers, machine, project } = args;
+    return containers.filter((c) => {
+        const f = parseKeptKey(c.key);
+        if (f.machine !== machine)
+            return false;
+        if (project !== undefined && keyProject(f) !== project)
+            return false;
+        return true;
+    });
+}
+/**
+ * PURE: parse a `forward` port token `[<hostPort>:]<jailPort>` (docker/kubectl
+ * host-first order). One port `3001` maps host 3001 -> jail 3001; `8080:3001`
+ * maps host 8080 -> jail 3001. Both sides must be integers in 1..65535. Throws
+ * AnonPiError on a bad shape / out-of-range / extra colon, with copy-pasteable
+ * guidance. `raw` is normalised to `<host>:<jail>` only when they differ, else
+ * the bare jail port, matching netcage's own accepted forms.
+ */
+export function parsePortArg(token) {
+    const bad = (why) => {
+        throw new AnonPiError(`anon-pi: invalid --port ${JSON.stringify(token)}: ${why}. ` +
+            'Use <jailPort> (e.g. 3001) or <hostPort>:<jailPort> (e.g. 8080:3001), ' +
+            'each 1..65535.');
+    };
+    const parts = token.split(':');
+    if (parts.length > 2)
+        bad('too many colons');
+    const toPort = (s) => {
+        if (!/^[0-9]+$/.test(s))
+            bad(`${JSON.stringify(s)} is not a port number`);
+        const n = Number(s);
+        if (n < 1 || n > 65535)
+            bad(`${s} is out of range (1..65535)`);
+        return n;
+    };
+    if (parts.length === 1) {
+        const p = toPort(parts[0]);
+        return { hostPort: p, jailPort: p, raw: String(p) };
+    }
+    const hostPort = toPort(parts[0]);
+    const jailPort = toPort(parts[1]);
+    const raw = hostPort === jailPort ? String(jailPort) : `${hostPort}:${jailPort}`;
+    return { hostPort, jailPort, raw };
+}
+/**
+ * PURE: parse `anon-pi forward [<project>] [--port <[hostPort:]jailPort>]
+ * [--bind <addr>] [-m <machine>]`. The bare positional is ALWAYS the project (so
+ * a numeric name like `3001` is a project, never a port); the port is the
+ * `--port`/`-p` flag, removing the number-vs-project ambiguity. `--bind` is
+ * passed through to netcage (which validates 127.0.0.1 / 0.0.0.0). Throws
+ * AnonPiError on an unknown flag, a missing flag argument, a second positional,
+ * or a bad port.
+ */
+export function parseForwardArgs(args) {
+    const fail = (msg) => {
+        throw new AnonPiError(`anon-pi: ${msg}\nRun \`anon-pi forward --help\`.`);
+    };
+    let project;
+    let machine = DEFAULT_MACHINE;
+    let machineExplicit = false;
+    let port;
+    let bind;
+    for (let i = 0; i < args.length; i++) {
+        const a = args[i];
+        if (a === '-m' || a === '--machine') {
+            const v = args[++i];
+            if (v === undefined)
+                fail(`${a} needs a machine name`);
+            machine = validateName(v, 'machine');
+            machineExplicit = true;
+        }
+        else if (a === '-p' || a === '--port') {
+            const v = args[++i];
+            if (v === undefined)
+                fail(`${a} needs a port ([hostPort:]jailPort)`);
+            port = parsePortArg(v);
+        }
+        else if (a === '--bind') {
+            const v = args[++i];
+            if (v === undefined)
+                fail('--bind needs an address (127.0.0.1 or 0.0.0.0)');
+            bind = v;
+        }
+        else if (a.startsWith('-')) {
+            fail(`unknown option: ${a}`);
+        }
+        else if (project === undefined) {
+            project = validateName(a, 'project');
+        }
+        else {
+            fail(`unexpected argument: ${a} (forward takes at most one project)`);
+        }
+    }
+    return { project, machine, machineExplicit, port, bind };
+}
+/**
+ * PURE: parse `anon-pi ports [<project>] [-m <machine>]`. Like forward but with
+ * no port/bind: it lists a container's open in-jail listeners. The bare
+ * positional is the project filter.
+ */
+export function parsePortsArgs(args) {
+    const fail = (msg) => {
+        throw new AnonPiError(`anon-pi: ${msg}\nRun \`anon-pi ports --help\`.`);
+    };
+    let project;
+    let machine = DEFAULT_MACHINE;
+    let machineExplicit = false;
+    for (let i = 0; i < args.length; i++) {
+        const a = args[i];
+        if (a === '-m' || a === '--machine') {
+            const v = args[++i];
+            if (v === undefined)
+                fail(`${a} needs a machine name`);
+            machine = validateName(v, 'machine');
+            machineExplicit = true;
+        }
+        else if (a.startsWith('-')) {
+            fail(`unknown option: ${a}`);
+        }
+        else if (project === undefined) {
+            project = validateName(a, 'project');
+        }
+        else {
+            fail(`unexpected argument: ${a} (ports takes at most one project)`);
+        }
+    }
+    return { project, machine, machineExplicit };
+}
+/**
+ * PURE: parse `netcage ports --json` output into listeners (best-effort). Keeps
+ * only well-formed `{address:string, port:int, loopbackOnly:bool}` entries;
+ * anything else (a netcage version drift, a non-array) yields []. The caller
+ * treats [] as "no hint", never an error.
+ */
+export function parseNetcagePortsJson(stdout) {
+    let parsed;
+    try {
+        parsed = JSON.parse(stdout);
+    }
+    catch {
+        return [];
+    }
+    if (!Array.isArray(parsed))
+        return [];
+    const out = [];
+    for (const e of parsed) {
+        if (!e || typeof e !== 'object')
+            continue;
+        const r = e;
+        if (typeof r.address === 'string' &&
+            typeof r.port === 'number' &&
+            typeof r.loopbackOnly === 'boolean') {
+            out.push({
+                address: r.address,
+                port: r.port,
+                loopbackOnly: r.loopbackOnly,
+            });
+        }
+    }
+    return out;
+}
+/** netcage's in-jail DNS forwarder always listens here; anon-pi hides it from the port hint. */
+export const NETCAGE_DNS_PORT = 53;
+/**
+ * PURE: the in-jail ports worth offering as forward targets: the listeners with
+ * netcage's own `127.0.0.1:53` DNS forwarder dropped (it is never something a
+ * user forwards), de-duplicated by port, sorted ascending. A server bound on
+ * both IPv4 and IPv6 (two listeners, same port) collapses to one entry.
+ */
+export function forwardablePorts(listeners) {
+    const ports = new Set();
+    for (const l of listeners) {
+        if (l.port === NETCAGE_DNS_PORT && l.loopbackOnly)
+            continue;
+        ports.add(l.port);
+    }
+    return [...ports].sort((a, b) => a - b);
+}
+/**
+ * PURE: a compact one-line hint of a container's forwardable in-jail ports for
+ * the picker / the pre-forward confirmation, e.g. `open: 3001, 5173` or
+ * `open: (none detected)`. Never includes the DNS forwarder (forwardablePorts).
+ */
+export function formatPortsHint(listeners) {
+    const ports = forwardablePorts(listeners);
+    return ports.length === 0
+        ? 'open: (none detected)'
+        : `open: ${ports.join(', ')}`;
+}
 // --- The bare-launch menu: choice-list + per-machine project-usage record ----
 //
 // anon-pi's bare launch shows a HOST-side arrow-key menu of a machine's
@@ -1969,6 +2207,8 @@ USAGE
   anon-pi pi <pi-args…>          run pi with ANY args and no project (the passthrough)
   anon-pi --version              print anon-pi's version (also -V)
   anon-pi --shell [<project>]    a jailed bash (at ~, or cd'd into <project>) - the project-hopper
+  anon-pi forward [<p>] [--port …]  open a host port onto a running container's in-jail server
+  anon-pi ports [<project>]      list a running container's open in-jail TCP listeners
   anon-pi -m <machine> [<p>]     the same, on <machine> (its own image + home + conversations)
   anon-pi --mount <parent> [<p>] root at a HOST parent folder instead of the projects root
   anon-pi init                   onboard: verify your proxy, capture your local model, pick an image