clawdlets 0.0.1 → 0.2.0

package/README.md

@@ -1,22 +1,68 @@
-# clawdlets
+# Clawdlets
 
-Reserved placeholder package for the `clawdlets` name on npm.
+Clawdlets is the hetzner infrastructure companion for [clawdbot](https://github.com/clawdbot/clawdbot) and [nix-clawdbot](https://github.com/clawdbot/nix-clawdbot). It provides the tooling to deploy and manage secure, reproducible bot fleets on Hetzner Cloud using NixOS. The infra template lives in `regenrek/clawdlets-template`; this repo is the CLI + docs.
 
-[![npm](https://img.shields.io/npm/v/clawdlets?logo=npm)](https://www.npmjs.com/package/clawdlets)
-[![License](https://img.shields.io/badge/License-MIT-yellow?style=flat)](LICENSE)
-[![Stars](https://img.shields.io/github/stars/regenrek/clawdlets.svg?style=flat)](https://github.com/regenrek/clawdlets/stargazers)
+🚧 Under construction: Don't use this as it is. Its currently WIP and only for advanced users.
 
+Looking for official AWS Deploy? [clawdbot/clawdinators](https://github.com/clawdbot/clawdinators)
 
-## Status
+![Clawdlets Banner](public/clawdlets-banner.webp)
 
-This package currently exports an empty object. The name is reserved for future use.
+## Features
 
-## Links
+- **Discord bot fleet** – deploy multiple bots from one repo.
+- **Secure by default** – WireGuard/Tailscale, lockdown, sops/age secrets.
+- **Hetzner + NixOS** – immutable infra + reproducible deploys.
+- **CLI-first** – bootstrap, deploy, ops, troubleshooting.
+- **Atomic updates** – rollbacks via NixOS generations.
 
-- X/Twitter: [@kregenrek](https://x.com/kregenrek)
+## Quickstart
 
+Ready to ship? Check out the [Quickstart Guide](docs/quickstart.md) to get your fleet running in minutes.
 
-## See my other projects:
+## Local hooks (recommended)
 
-* [Personal GH](https://github.com/regenrek) - Building AI tools to driving my coding agent to the max.
-* [Instructa GH](https://github.com/orgs/instructa/repositories) - Instructa Projects
+- Install git hooks: `nix run nixpkgs#lefthook -- install -f`
+- Policy is in `.forbidden-paths.regex` (blocks committing local runtime + credential files).
+- Manual gate before PR/release: `pnpm gate`
+
+## Ask an agent (copy/paste prompt)
+
+```text
+clawdlets project init --dir ~/projects/clawdlets-project
+cd ~/projects/clawdlets-project
+
+Now start Codex/Claude and tell it
+read @AGENT-BOOTSTRAP-SERVER.md and help me setup my own clawdlets hetzner server
+```
+
+## Documentation
+
+- Start here: `docs/README.md`
+- [Overview](docs/overview.md) – Mental model + lifecycle.
+- [CLI Cookbook](docs/cli.md) – Common commands and patterns.
+- [Config Reference](docs/config.md) – `fleet/clawdlets.json` reference.
+- [Installation Guide](docs/install.md) – Prerequisites and setup.
+- [Deployment & Updates](docs/deploy.md) – How to ship changes.
+- [Agent Configuration](docs/agent-config.md) – Routing, skills, and workspaces.
+- [Secrets Management](docs/secrets.md) – Handling keys safely with sops/age.
+- [Security Model](docs/security.md) – Threat model + boundaries.
+- [Operations Manual](docs/operations.md) – Day-to-day maintenance.
+- [Troubleshooting](docs/troubleshooting.md) – Common failures and fixes.
+- [Going Public](docs/publicing.md) – Checklist for OSS-safe publishing.
+- [Upstream & Tracking](docs/upstream.md) – Keeping your fork in sync.
+
+## Powered By
+
+Clawdlets is strictly an infrastructure wrapper. All credit for the AI assistant and Nix packaging goes to the core projects:
+
+- [nix-clawdbot](https://github.com/clawdbot/nix-clawdbot) by [joshp123](https://github.com/joshp123)
+- [clawdbot](https://github.com/clawdbot/clawdbot) by [steipete](https://x.com/steipete)
+
+## License
+
+MIT
+
+## Find me
+
+[@kevinkernx](https://x.com/kevinkern)

package/dist/commands/bootstrap.d.ts

@@ -0,0 +1,43 @@
+export declare const bootstrap: import("citty").CommandDef<{
+    runtimeDir: {
+        type: "string";
+        description: string;
+    };
+    envFile: {
+        type: "string";
+        description: string;
+    };
+    host: {
+        type: "string";
+        description: string;
+    };
+    mode: {
+        type: "string";
+        description: string;
+        default: string;
+    };
+    flake: {
+        type: "string";
+        description: string;
+    };
+    rev: {
+        type: "string";
+        description: string;
+        default: string;
+    };
+    ref: {
+        type: "string";
+        description: string;
+    };
+    force: {
+        type: "boolean";
+        description: string;
+        default: false;
+    };
+    dryRun: {
+        type: "boolean";
+        description: string;
+        default: false;
+    };
+}>;
+//# sourceMappingURL=bootstrap.d.ts.map

package/dist/commands/bootstrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.d.ts","sourceRoot":"","sources":["../../src/commands/bootstrap.ts"],"names":[],"mappings":"AAsCA,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA2SnB,CAAC"}

package/dist/commands/bootstrap.js

@@ -0,0 +1,318 @@
+import fs from "node:fs";
+import path from "node:path";
+import process from "node:process";
+import { defineCommand } from "citty";
+import { applyOpenTofuVars } from "@clawdlets/core/lib/opentofu";
+import { resolveGitRev } from "@clawdlets/core/lib/git";
+import { capture, run } from "@clawdlets/core/lib/run";
+import { checkGithubRepoVisibility, tryParseGithubFlakeUri } from "@clawdlets/core/lib/github";
+import { loadDeployCreds } from "@clawdlets/core/lib/deploy-creds";
+import { expandPath } from "@clawdlets/core/lib/path-expand";
+import { findRepoRoot } from "@clawdlets/core/lib/repo";
+import { buildFleetSecretsPlan } from "@clawdlets/core/lib/fleet-secrets";
+import { withFlakesEnv } from "@clawdlets/core/lib/nix-flakes";
+import { getSshExposureMode, getTailnetMode, loadClawdletsConfig } from "@clawdlets/core/lib/clawdlets-config";
+import { resolveBaseFlake } from "@clawdlets/core/lib/base-flake";
+import { getHostExtraFilesDir, getHostExtraFilesKeyPath, getHostExtraFilesSecretsDir, getHostOpenTofuDir } from "@clawdlets/core/repo-layout";
+import { requireDeployGate } from "../lib/deploy-gate.js";
+import { resolveHostNameOrExit } from "../lib/host-resolve.js";
+async function purgeKnownHosts(ipv4, opts) {
+    const rm = async (host) => {
+        if (opts.dryRun) {
+            console.log(`ssh-keygen -R ${host}`);
+            return;
+        }
+        await run("ssh-keygen", ["-R", host]);
+    };
+    await rm(ipv4);
+    await rm(`[${ipv4}]:22`);
+}
+function resolveHostFromFlake(flakeBase) {
+    const hashIndex = flakeBase.indexOf("#");
+    if (hashIndex === -1)
+        return null;
+    const host = flakeBase.slice(hashIndex + 1).trim();
+    return host.length > 0 ? host : null;
+}
+export const bootstrap = defineCommand({
+    meta: {
+        name: "bootstrap",
+        description: "Provision Hetzner VM + install NixOS (nixos-anywhere or image).",
+    },
+    args: {
+        runtimeDir: { type: "string", description: "Runtime directory (default: .clawdlets)." },
+        envFile: { type: "string", description: "Env file for deploy creds (default: <runtimeDir>/env)." },
+        host: { type: "string", description: "Host name (defaults to clawdlets.json defaultHost / sole host)." },
+        mode: { type: "string", description: "Bootstrap mode: nixos-anywhere|image.", default: "nixos-anywhere" },
+        flake: { type: "string", description: "Override base flake (default: clawdlets.json baseFlake or git origin)." },
+        rev: { type: "string", description: "Git rev to pin (HEAD/sha/tag).", default: "HEAD" },
+        ref: { type: "string", description: "Git ref to pin (branch or tag)." },
+        force: { type: "boolean", description: "Skip doctor gate (not recommended).", default: false },
+        dryRun: { type: "boolean", description: "Print commands without executing.", default: false },
+    },
+    async run({ args }) {
+        const cwd = process.cwd();
+        const repoRoot = findRepoRoot(cwd);
+        const hostName = resolveHostNameOrExit({ cwd, runtimeDir: args.runtimeDir, hostArg: args.host });
+        if (!hostName)
+            return;
+        const { layout, config: clawdletsConfig } = loadClawdletsConfig({ repoRoot, runtimeDir: args.runtimeDir });
+        const hostCfg = clawdletsConfig.hosts[hostName];
+        if (!hostCfg)
+            throw new Error(`missing host in fleet/clawdlets.json: ${hostName}`);
+        const sshExposureMode = getSshExposureMode(hostCfg);
+        const tailnetMode = getTailnetMode(hostCfg);
+        const modeRaw = String(args.mode || "nixos-anywhere").trim();
+        if (modeRaw !== "nixos-anywhere" && modeRaw !== "image") {
+            throw new Error(`invalid --mode: ${modeRaw} (expected nixos-anywhere|image)`);
+        }
+        const mode = modeRaw;
+        if (Boolean(args.force)) {
+            console.error("warn: skipping doctor gate (--force)");
+        }
+        else {
+            if (mode === "nixos-anywhere") {
+                await requireDeployGate({ runtimeDir: args.runtimeDir, envFile: args.envFile, host: hostName, scope: "bootstrap", strict: false });
+            }
+            else {
+                console.error("warn: skipping doctor gate for image bootstrap");
+            }
+        }
+        const deployCreds = loadDeployCreds({ cwd, runtimeDir: args.runtimeDir, envFile: args.envFile });
+        if (deployCreds.envFile?.status === "invalid")
+            throw new Error(`deploy env file rejected: ${deployCreds.envFile.path} (${deployCreds.envFile.error || "invalid"})`);
+        if (deployCreds.envFile?.status === "missing")
+            throw new Error(`missing deploy env file: ${deployCreds.envFile.path}`);
+        const hcloudToken = String(deployCreds.values.HCLOUD_TOKEN || "").trim();
+        if (!hcloudToken)
+            throw new Error("missing HCLOUD_TOKEN (set in .clawdlets/env or env var; run: clawdlets env init)");
+        const githubToken = String(deployCreds.values.GITHUB_TOKEN || "").trim();
+        const nixBin = String(deployCreds.values.NIX_BIN || "nix").trim() || "nix";
+        const opentofuDir = getHostOpenTofuDir(layout, hostName);
+        const serverType = String(hostCfg.hetzner.serverType || "").trim();
+        if (!serverType)
+            throw new Error(`missing hetzner.serverType for ${hostName} (set via: clawdlets host set --server-type ...)`);
+        const image = String(hostCfg.hetzner.image || "").trim();
+        const location = String(hostCfg.hetzner.location || "").trim();
+        if (mode === "image" && !image) {
+            throw new Error(`missing hetzner.image for ${hostName} (set via: clawdlets host set --hetzner-image <image_id>)`);
+        }
+        const adminCidr = String(hostCfg.provisioning.adminCidr || "").trim();
+        if (!adminCidr)
+            throw new Error(`missing provisioning.adminCidr for ${hostName} (set via: clawdlets host set --admin-cidr ...)`);
+        const sshPubkeyFileRaw = String(hostCfg.provisioning.sshPubkeyFile || "").trim();
+        if (!sshPubkeyFileRaw)
+            throw new Error(`missing provisioning.sshPubkeyFile for ${hostName} (set via: clawdlets host set --ssh-pubkey-file ...)`);
+        const sshPubkeyFileExpanded = expandPath(sshPubkeyFileRaw);
+        const sshPubkeyFile = path.isAbsolute(sshPubkeyFileExpanded) ? sshPubkeyFileExpanded : path.resolve(repoRoot, sshPubkeyFileExpanded);
+        if (!fs.existsSync(sshPubkeyFile))
+            throw new Error(`ssh pubkey file not found: ${sshPubkeyFile}`);
+        if (sshExposureMode === "tailnet") {
+            throw new Error(`sshExposure.mode=tailnet; bootstrap requires public SSH. Set: clawdlets host set --host ${hostName} --ssh-exposure bootstrap`);
+        }
+        await applyOpenTofuVars({
+            opentofuDir,
+            vars: {
+                hostName,
+                hcloudToken,
+                adminCidr,
+                adminCidrIsWorldOpen: Boolean(hostCfg.provisioning.adminCidrAllowWorldOpen),
+                sshPubkeyFile,
+                serverType,
+                image,
+                location,
+                sshExposureMode,
+                tailnetMode,
+            },
+            nixBin,
+            dryRun: args.dryRun,
+            redact: [hcloudToken, githubToken].filter(Boolean),
+        });
+        const tofuEnv = {
+            ...process.env,
+            HCLOUD_TOKEN: hcloudToken,
+            ADMIN_CIDR: adminCidr,
+            SSH_PUBKEY_FILE: sshPubkeyFile,
+            SERVER_TYPE: serverType,
+        };
+        const tofuEnvWithFlakes = withFlakesEnv(tofuEnv);
+        const ipv4 = args.dryRun
+            ? "<opentofu-output:ipv4>"
+            : await capture(nixBin, ["run", "--impure", "nixpkgs#opentofu", "--", "output", "-raw", "ipv4"], { cwd: opentofuDir, env: tofuEnvWithFlakes, dryRun: args.dryRun });
+        console.log(`Target IPv4: ${ipv4}`);
+        await purgeKnownHosts(ipv4, { dryRun: args.dryRun });
+        if (mode === "image") {
+            console.log("🎉 Bootstrap complete (image mode).");
+            console.log(`Host: ${hostName}`);
+            console.log(`IPv4: ${ipv4}`);
+            console.log(`SSH exposure: ${sshExposureMode}`);
+            console.log("");
+            console.log("Next:");
+            console.log(`1) Set targetHost for deploys:`);
+            console.log(`   clawdlets host set --host ${hostName} --target-host admin@${ipv4}`);
+            console.log("2) Deploy secrets + system:");
+            console.log(`   clawdlets server deploy --host ${hostName} --target-host admin@${ipv4} --manifest deploy-manifest.${hostName}.json`);
+            console.log("");
+            console.log("After tailnet is healthy, lock down SSH:");
+            console.log(`  clawdlets host set --host ${hostName} --ssh-exposure tailnet`);
+            console.log(`  clawdlets lockdown --host ${hostName}`);
+            return;
+        }
+        const baseResolved = await resolveBaseFlake({ repoRoot, config: clawdletsConfig });
+        const flakeBase = String(args.flake || baseResolved.flake || "").trim();
+        if (!flakeBase)
+            throw new Error("missing base flake (set baseFlake in fleet/clawdlets.json, set git origin, or pass --flake)");
+        const rev = String(args.rev || "").trim();
+        const ref = String(args.ref || "").trim();
+        if (rev && ref)
+            throw new Error("use either --rev or --ref (not both)");
+        const requestedHost = String(hostCfg.flakeHost || hostName).trim() || hostName;
+        const hostFromFlake = resolveHostFromFlake(flakeBase);
+        if (hostFromFlake && hostFromFlake !== requestedHost)
+            throw new Error(`flake host mismatch: ${hostFromFlake} vs ${requestedHost}`);
+        const flakeWithHost = flakeBase.includes("#") ? flakeBase : `${flakeBase}#${requestedHost}`;
+        const hashIndex = flakeWithHost.indexOf("#");
+        const flakeBasePath = hashIndex === -1 ? flakeWithHost : flakeWithHost.slice(0, hashIndex);
+        const flakeFragment = hashIndex === -1 ? "" : flakeWithHost.slice(hashIndex);
+        if ((rev || ref) && /(^|[?&])(rev|ref)=/.test(flakeBasePath)) {
+            throw new Error("flake already includes ?rev/?ref; drop --rev/--ref");
+        }
+        let flakePinned = flakeWithHost;
+        if (rev) {
+            const resolved = await resolveGitRev(repoRoot, rev);
+            if (!resolved)
+                throw new Error(`unable to resolve git rev: ${rev}`);
+            const sep = flakeBasePath.includes("?") ? "&" : "?";
+            flakePinned = `${flakeBasePath}${sep}rev=${resolved}${flakeFragment}`;
+        }
+        else if (ref) {
+            const sep = flakeBasePath.includes("?") ? "&" : "?";
+            flakePinned = `${flakeBasePath}${sep}ref=${ref}${flakeFragment}`;
+        }
+        const githubRepo = tryParseGithubFlakeUri(flakeBasePath);
+        if (githubRepo && !args.dryRun) {
+            const check = await checkGithubRepoVisibility({
+                owner: githubRepo.owner,
+                repo: githubRepo.repo,
+                token: githubToken || undefined,
+            });
+            if (check.ok && check.status === "private-or-missing" && !githubToken) {
+                throw new Error(`base flake repo appears private (404). Set GITHUB_TOKEN in your environment and retry.`);
+            }
+            if (check.ok && check.status === "unauthorized") {
+                throw new Error(`GITHUB_TOKEN rejected by GitHub (401).`);
+            }
+        }
+        const extraFiles = getHostExtraFilesDir(layout, hostName);
+        const requiredKey = getHostExtraFilesKeyPath(layout, hostName);
+        if (!fs.existsSync(requiredKey)) {
+            throw new Error(`missing extra-files key: ${requiredKey} (run: clawdlets secrets init)`);
+        }
+        const secretsPlan = buildFleetSecretsPlan({ config: clawdletsConfig, hostName });
+        const requiredSecrets = [
+            ...(tailnetMode === "tailscale" ? ["tailscale_auth_key"] : []),
+            "admin_password_hash",
+            ...secretsPlan.secretNamesRequired,
+        ];
+        const extraFilesSecretsDir = getHostExtraFilesSecretsDir(layout, hostName);
+        if (!fs.existsSync(extraFilesSecretsDir)) {
+            throw new Error(`missing extra-files secrets dir: ${extraFilesSecretsDir} (run: clawdlets secrets init)`);
+        }
+        for (const secretName of requiredSecrets) {
+            const f = path.join(extraFilesSecretsDir, `${secretName}.yaml`);
+            if (!fs.existsSync(f)) {
+                throw new Error(`missing extra-files secret: ${f} (run: clawdlets secrets init)`);
+            }
+        }
+        const nixosAnywhereArgs = [
+            "run",
+            "--option",
+            "max-jobs",
+            "1",
+            "--option",
+            "cores",
+            "1",
+            "--option",
+            "keep-outputs",
+            "false",
+            "--option",
+            "keep-derivations",
+            "false",
+            "github:nix-community/nixos-anywhere",
+            "--",
+            "--option",
+            "tarball-ttl",
+            "0",
+            "--option",
+            "accept-flake-config",
+            "true",
+            "--option",
+            "extra-substituters",
+            "https://cache.garnix.io",
+            "--option",
+            "extra-trusted-public-keys",
+            "cache.garnix.io:CTFPyKSLcx5RMJKfLo5EEPUObbA78b0YQ2DTCJXqr9g=",
+            "--build-on-remote",
+            "--extra-files",
+            extraFiles,
+            ...(githubToken ? ["--option", "access-tokens", `github.com=${githubToken}`] : []),
+            "--flake",
+            flakePinned,
+            `root@${ipv4}`,
+        ];
+        const nixosAnywhereBaseEnv = withFlakesEnv(process.env);
+        const nixosAnywhereEnv = {
+            ...nixosAnywhereBaseEnv,
+            NIX_CONFIG: [
+                nixosAnywhereBaseEnv.NIX_CONFIG,
+                "accept-flake-config = true",
+                "extra-substituters = https://cache.garnix.io",
+                "extra-trusted-public-keys = cache.garnix.io:CTFPyKSLcx5RMJKfLo5EEPUObbA78b0YQ2DTCJXqr9g=",
+                githubToken ? `access-tokens = github.com=${githubToken}` : "",
+            ]
+                .filter(Boolean)
+                .join("\n"),
+        };
+        await run(nixBin, nixosAnywhereArgs, {
+            cwd: repoRoot,
+            env: nixosAnywhereEnv,
+            dryRun: args.dryRun,
+            redact: [hcloudToken, githubToken].filter(Boolean),
+        });
+        await purgeKnownHosts(ipv4, { dryRun: args.dryRun });
+        const publicSshStatus = "OPEN";
+        console.log("🎉 Bootstrap complete.");
+        console.log(`Host: ${hostName}`);
+        console.log(`IPv4: ${ipv4}`);
+        console.log(`SSH exposure: ${sshExposureMode}`);
+        console.log(`Public SSH (22): ${publicSshStatus}`);
+        console.log("");
+        console.log("⚠ SSH WILL REMAIN OPEN until you switch to tailnet and run lockdown:");
+        console.log(`  clawdlets host set --host ${hostName} --ssh-exposure tailnet`);
+        console.log(`  clawdlets lockdown --host ${hostName}`);
+        if (tailnetMode === "tailscale") {
+            console.log("");
+            console.log("Next (tailscale):");
+            console.log(`1) Wait for the host to appear in Tailscale, then copy its 100.x IP.`);
+            console.log("   tailscale status  # look for the 100.x address");
+            console.log(`2) Set future SSH target to tailnet:`);
+            console.log(`   clawdlets host set --host ${hostName} --target-host admin@<tailscale-ip>`);
+            console.log("3) Verify access:");
+            console.log("   ssh admin@<tailscale-ip> 'hostname; uptime'");
+            console.log("4) Switch SSH exposure to tailnet and lock down:");
+            console.log(`   clawdlets host set --host ${hostName} --ssh-exposure tailnet`);
+            console.log(`   clawdlets lockdown --host ${hostName}`);
+            console.log("5) Optional checks:");
+            console.log("   clawdlets server audit --host " + hostName);
+        }
+        else {
+            console.log("");
+            console.log("Notes:");
+            console.log(`- SSH exposure is ${sshExposureMode}.`);
+            console.log("- If you want tailnet-only SSH, set tailnet.mode=tailscale, verify access, then:");
+            console.log(`  clawdlets host set --host ${hostName} --ssh-exposure tailnet`);
+            console.log(`  clawdlets lockdown --host ${hostName}`);
+        }
+    },
+});
+//# sourceMappingURL=bootstrap.js.map

package/dist/commands/bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../../src/commands/bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,OAAO,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AACtC,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,yBAAyB,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAC/F,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAC/G,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,2BAA2B,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAC9I,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAE/D,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,IAAyB;IACpE,MAAM,EAAE,GAAG,KAAK,EAAE,IAAY,EAAE,EAAE;QAChC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;YACrC,OAAO;QACT,CAAC;QACD,MAAM,GAAG,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC;IACF,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;IACf,MAAM,EAAE,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,oBAAoB,CAAC,SAAiB;IAC7C,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,SAAS,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACnD,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,MAAM,SAAS,GAAG,aAAa,CAAC;IACrC,IAAI,EAAE;QACJ,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,iEAAiE;KAC9E;IACD,IAAI,EAAE;QACJ,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,0CAA0C,EAAE;QACvF,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,wDAAwD,EAAE;QAClG,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iEAAiE,EAAE;QACxG,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uCAAuC,EAAE,OAAO,EAAE,gBAAgB,EAAE;QACzG,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,wEAAwE,EAAE;QAChH,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gCAAgC,EAAE,OAAO,EAAE,MAAM,EAAE;QACvF,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iCAAiC,EAAE;QACvE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,qCAAqC,EAAE,OAAO,EAAE,KAAK,EAAE;QAC9F,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mCAAmC,EAAE,OAAO,EAAE,KAAK,EAAE;KAC9F;IACD,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE;QAChB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,qBAAqB,CAAC,EAAE,GAAG,EAAE,UAAU,EAAG,IAAY,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1G,IAAI,CAAC,QAAQ;YAAE,OAAO;QACtB,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,GAAG,mBAAmB,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAG,IAAY,CAAC,UAAU,EAAE,CAAC,CAAC;QACpH,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,QAAQ,EAAE,CAAC,CAAC;QACnF,MAAM,eAAe,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACpD,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,MAAM,CAAE,IAAY,CAAC,IAAI,IAAI,gBAAgB,CAAC,CAAC,IAAI,EAAE,CAAC;QACtE,IAAI,OAAO,KAAK,gBAAgB,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,mBAAmB,OAAO,kCAAkC,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,IAAI,GAAG,OAAqC,CAAC;QAEnD,IAAI,OAAO,CAAE,IAAY,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACxD,CAAC;aAAM,CAAC;YACN,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;gBAC9B,MAAM,iBAAiB,CAAC,EAAE,UAAU,EAAG,IAAY,CAAC,UAAU,EAAE,OAAO,EAAG,IAAY,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YACvJ,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG,eAAe,CAAC,EAAE,GAAG,EAAE,UAAU,EAAG,IAAY,CAAC,UAAU,EAAE,OAAO,EAAG,IAAY,CAAC,OAAO,EAAE,CAAC,CAAC;QACnH,IAAI,WAAW,CAAC,OAAO,EAAE,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,WAAW,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW,CAAC,OAAO,CAAC,KAAK,IAAI,SAAS,GAAG,CAAC,CAAC;QACpK,IAAI,WAAW,CAAC,OAAO,EAAE,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAEvH,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACzE,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAC;QACtH,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAEzE,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC;QAC3E,MAAM,WAAW,GAAG,kBAAkB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAEzD,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACnE,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,QAAQ,kDAAkD,CAAC,CAAC;QAC/H,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACzD,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/D,IAAI,IAAI,KAAK,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,6BAA6B,QAAQ,2DAA2D,CAAC,CAAC;QACpH,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACtE,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,QAAQ,iDAAiD,CAAC,CAAC;QAEjI,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACjF,IAAI,CAAC,gBAAgB;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,QAAQ,sDAAsD,CAAC,CAAC;QACjJ,MAAM,qBAAqB,GAAG,UAAU,CAAC,gBAAgB,CAAC,CAAC;QAC3D,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;QACrI,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,aAAa,EAAE,CAAC,CAAC;QAElG,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,2FAA2F,QAAQ,2BAA2B,CAAC,CAAC;QAClJ,CAAC;QAED,MAAM,iBAAiB,CAAC;YACtB,WAAW;YACX,IAAI,EAAE;gBACH,QAAQ;gBACT,WAAW;gBACX,SAAS;gBACT,oBAAoB,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,uBAAuB,CAAC;gBAC3E,aAAa;gBACb,UAAU;gBACV,KAAK;gBACL,QAAQ;gBACR,eAAe;gBACf,WAAW;aACZ;YACD,MAAM;YACN,MAAM,EAAE,IAAI,CAAC,MAAM;YACpB,MAAM,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,MAAM,CAAC,OAAO,CAAa;SAC/D,CAAC,CAAC;QAEF,MAAM,OAAO,GAAsB;YACjC,GAAG,OAAO,CAAC,GAAG;YACd,YAAY,EAAE,WAAW;YACzB,UAAU,EAAE,SAAS;YACrB,eAAe,EAAE,aAAa;YAC9B,WAAW,EAAE,UAAU;SACxB,CAAC;QACH,MAAM,iBAAiB,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QAEjD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM;YACtB,CAAC,CAAC,wBAAwB;YAC1B,CAAC,CAAC,MAAM,OAAO,CACX,MAAM,EACN,CAAC,KAAK,EAAE,UAAU,EAAE,kBAAkB,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EACvE,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,iBAAiB,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAClE,CAAC;QAEN,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;QACpC,MAAM,eAAe,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAErD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;YACnD,OAAO,CAAC,GAAG,CAAC,SAAS,QAAQ,EAAE,CAAC,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,iBAAiB,eAAe,EAAE,CAAC,CAAC;YAChD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;YAC9C,OAAO,CAAC,GAAG,CAAC,gCAAgC,QAAQ,wBAAwB,IAAI,EAAE,CAAC,CAAC;YACpF,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,qCAAqC,QAAQ,wBAAwB,IAAI,+BAA+B,QAAQ,OAAO,CAAC,CAAC;YACrI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;YACxD,OAAO,CAAC,GAAG,CAAC,+BAA+B,QAAQ,yBAAyB,CAAC,CAAC;YAC9E,OAAO,CAAC,GAAG,CAAC,+BAA+B,QAAQ,EAAE,CAAC,CAAC;YACvD,OAAO;QACT,CAAC;QAEA,MAAM,YAAY,GAAG,MAAM,gBAAgB,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;QACnF,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACxE,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,6FAA6F,CAAC,CAAC;QAEhI,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1C,IAAI,GAAG,IAAI,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAEvE,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,QAAQ,CAAC,CAAC,IAAI,EAAE,IAAI,QAAQ,CAAC;QAChF,MAAM,aAAa,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,aAAa,IAAI,aAAa,KAAK,aAAa;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,aAAa,OAAO,aAAa,EAAE,CAAC,CAAC;QAEnI,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,IAAI,aAAa,EAAE,CAAC;QAC5F,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,aAAa,GAAG,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QAC3F,MAAM,aAAa,GAAG,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC7E,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QAED,IAAI,WAAW,GAAG,aAAa,CAAC;QAChC,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YACpD,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,EAAE,CAAC,CAAC;YACpE,MAAM,GAAG,GAAG,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YACpD,WAAW,GAAG,GAAG,aAAa,GAAG,GAAG,OAAO,QAAQ,GAAG,aAAa,EAAE,CAAC;QACxE,CAAC;aAAM,IAAI,GAAG,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YACpD,WAAW,GAAG,GAAG,aAAa,GAAG,GAAG,OAAO,GAAG,GAAG,aAAa,EAAE,CAAC;QACnE,CAAC;QAED,MAAM,UAAU,GAAG,sBAAsB,CAAC,aAAa,CAAC,CAAC;QACzD,IAAI,UAAU,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,MAAM,yBAAyB,CAAC;gBAC5C,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,KAAK,EAAE,WAAW,IAAI,SAAS;aAChC,CAAC,CAAC;YACF,IAAI,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,MAAM,KAAK,oBAAoB,IAAI,CAAC,WAAW,EAAE,CAAC;gBACtE,MAAM,IAAI,KAAK,CAAC,wFAAwF,CAAC,CAAC;YAC5G,CAAC;YACF,IAAI,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;gBAChD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAEA,MAAM,UAAU,GAAG,oBAAoB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC1D,MAAM,WAAW,GAAG,wBAAwB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC/D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,4BAA4B,WAAW,gCAAgC,CAAC,CAAC;QAC3F,CAAC;QAEF,MAAM,WAAW,GAAG,qBAAqB,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,CAAC;QAEjF,MAAM,eAAe,GAAG;YACtB,GAAG,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,qBAAqB;YACrB,GAAG,WAAW,CAAC,mBAAmB;SACnC,CAAC;QAED,MAAM,oBAAoB,GAAG,2BAA2B,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC3E,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,oCAAoC,oBAAoB,gCAAgC,CAAC,CAAC;QAC5G,CAAC;QAEF,KAAK,MAAM,UAAU,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,UAAU,OAAO,CAAC,CAAC;YAChE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,gCAAgC,CAAC,CAAC;YACpF,CAAC;QACH,CAAC;QAED,MAAM,iBAAiB,GAAG;YACxB,KAAK;YACL,UAAU;YACV,UAAU;YACV,GAAG;YACH,UAAU;YACV,OAAO;YACP,GAAG;YACH,UAAU;YACV,cAAc;YACd,OAAO;YACP,UAAU;YACV,kBAAkB;YAClB,OAAO;YACP,qCAAqC;YACrC,IAAI;YACJ,UAAU;YACV,aAAa;YACb,GAAG;YACH,UAAU;YACV,qBAAqB;YACrB,MAAM;YACN,UAAU;YACV,oBAAoB;YACpB,yBAAyB;YACzB,UAAU;YACV,2BAA2B;YAC3B,8DAA8D;YAC9D,mBAAmB;YACnB,eAAe;YACf,UAAU;YACV,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,eAAe,EAAE,cAAc,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAClF,SAAS;YACT,WAAW;YACX,QAAQ,IAAI,EAAE;SACf,CAAC;QAEF,MAAM,oBAAoB,GAAG,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACxD,MAAM,gBAAgB,GAAsB;YAC1C,GAAG,oBAAoB;YACvB,UAAU,EAAE;gBACV,oBAAoB,CAAC,UAAU;gBAC/B,4BAA4B;gBAC5B,8CAA8C;gBAC9C,0FAA0F;gBAC1F,WAAW,CAAC,CAAC,CAAC,8BAA8B,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE;aAC/D;iBACE,MAAM,CAAC,OAAO,CAAC;iBACf,IAAI,CAAC,IAAI,CAAC;SACd,CAAC;QAEF,MAAM,GAAG,CAAC,MAAM,EAAE,iBAAiB,EAAE;YACnC,GAAG,EAAE,QAAQ;YACb,GAAG,EAAE,gBAAgB;YACrB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,MAAM,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,MAAM,CAAC,OAAO,CAAa;SAC/D,CAAC,CAAC;QAEH,MAAM,eAAe,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAErD,MAAM,eAAe,GAAG,MAAM,CAAC;QAE/B,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,SAAS,QAAQ,EAAE,CAAC,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,iBAAiB,eAAe,EAAE,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,oBAAoB,eAAe,EAAE,CAAC,CAAC;QAEnD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,sEAAsE,CAAC,CAAC;QACpF,OAAO,CAAC,GAAG,CAAC,+BAA+B,QAAQ,yBAAyB,CAAC,CAAC;QAC9E,OAAO,CAAC,GAAG,CAAC,+BAA+B,QAAQ,EAAE,CAAC,CAAC;QAEvD,IAAI,WAAW,KAAK,WAAW,EAAE,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,sEAAsE,CAAC,CAAC;YACpF,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;YAChE,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;YACpD,OAAO,CAAC,GAAG,CAAC,gCAAgC,QAAQ,qCAAqC,CAAC,CAAC;YAC3F,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;YAC9D,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;YAChE,OAAO,CAAC,GAAG,CAAC,gCAAgC,QAAQ,yBAAyB,CAAC,CAAC;YAC/E,OAAO,CAAC,GAAG,CAAC,gCAAgC,QAAQ,EAAE,CAAC,CAAC;YACxD,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,mCAAmC,GAAG,QAAQ,CAAC,CAAC;QAC9D,CAAC;aAAM,CAAC;YACP,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,qBAAqB,eAAe,GAAG,CAAC,CAAC;YACrD,OAAO,CAAC,GAAG,CAAC,kFAAkF,CAAC,CAAC;YAChG,OAAO,CAAC,GAAG,CAAC,+BAA+B,QAAQ,yBAAyB,CAAC,CAAC;YAC7E,OAAO,CAAC,GAAG,CAAC,+BAA+B,QAAQ,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;CACF,CAAC,CAAC"}

package/dist/commands/bot.d.ts

@@ -0,0 +1,2 @@
+export declare const bot: import("citty").CommandDef<import("citty").ArgsDef>;
+//# sourceMappingURL=bot.d.ts.map

package/dist/commands/bot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bot.d.ts","sourceRoot":"","sources":["../../src/commands/bot.ts"],"names":[],"mappings":"AA6FA,eAAO,MAAM,GAAG,qDAGd,CAAC"}

package/dist/commands/bot.js

@@ -0,0 +1,97 @@
+import process from "node:process";
+import { defineCommand } from "citty";
+import * as p from "@clack/prompts";
+import { findRepoRoot } from "@clawdlets/core/lib/repo";
+import { ClawdletsConfigSchema, loadClawdletsConfig, writeClawdletsConfig } from "@clawdlets/core/lib/clawdlets-config";
+import { cancelFlow, navOnCancel, NAV_EXIT } from "../lib/wizard.js";
+function validateBotId(value) {
+    const v = value.trim();
+    if (!v)
+        return "bot id required";
+    if (!/^[a-z][a-z0-9_-]*$/.test(v))
+        return "use: [a-z][a-z0-9_-]*";
+    return undefined;
+}
+const list = defineCommand({
+    meta: { name: "list", description: "List bots (from fleet/clawdlets.json)." },
+    args: {},
+    async run({ args }) {
+        const repoRoot = findRepoRoot(process.cwd());
+        const { config } = loadClawdletsConfig({ repoRoot });
+        console.log((config.fleet.botOrder || []).join("\n"));
+    },
+});
+const add = defineCommand({
+    meta: { name: "add", description: "Add a bot id to fleet/clawdlets.json." },
+    args: {
+        bot: { type: "string", description: "Bot id (e.g. maren)." },
+        interactive: { type: "boolean", description: "Prompt for missing inputs (requires TTY).", default: false },
+    },
+    async run({ args }) {
+        const repoRoot = findRepoRoot(process.cwd());
+        const { configPath, config } = loadClawdletsConfig({ repoRoot });
+        let botId = String(args.bot || "").trim();
+        if (!botId) {
+            if (!args.interactive)
+                throw new Error("missing --bot (or pass --interactive)");
+            if (!process.stdout.isTTY)
+                throw new Error("--interactive requires a TTY");
+            p.intro("clawdlets bot add");
+            const v = await p.text({ message: "Bot id", placeholder: "maren", validate: validateBotId });
+            if (p.isCancel(v)) {
+                const nav = await navOnCancel({ flow: "bot add", canBack: false });
+                if (nav === NAV_EXIT)
+                    cancelFlow();
+                return;
+            }
+            botId = String(v).trim();
+        }
+        const err = validateBotId(botId);
+        if (err)
+            throw new Error(err);
+        const existingBots = config.fleet.botOrder;
+        if (existingBots.includes(botId) || config.fleet.bots[botId]) {
+            console.log(`ok: already present: ${botId}`);
+            return;
+        }
+        const next = {
+            ...config,
+            fleet: {
+                ...config.fleet,
+                botOrder: [...existingBots, botId],
+                bots: { ...config.fleet.bots, [botId]: {} },
+            },
+        };
+        const validated = ClawdletsConfigSchema.parse(next);
+        await writeClawdletsConfig({ configPath, config: validated });
+        console.log(`ok: added bot ${botId}`);
+    },
+});
+const rm = defineCommand({
+    meta: { name: "rm", description: "Remove a bot id from fleet/clawdlets.json." },
+    args: {
+        bot: { type: "string", description: "Bot id to remove.", },
+    },
+    async run({ args }) {
+        const repoRoot = findRepoRoot(process.cwd());
+        const { configPath, config } = loadClawdletsConfig({ repoRoot });
+        const botId = String(args.bot || "").trim();
+        if (!botId)
+            throw new Error("missing --bot");
+        const existingBots = config.fleet.botOrder;
+        if (!existingBots.includes(botId) && !config.fleet.bots[botId])
+            throw new Error(`bot not found: ${botId}`);
+        const nextBots = existingBots.filter((b) => b !== botId);
+        const nextBotsRecord = { ...config.fleet.bots };
+        delete nextBotsRecord[botId];
+        const next = { ...config, fleet: { ...config.fleet, botOrder: nextBots, bots: nextBotsRecord } };
+        const validated = ClawdletsConfigSchema.parse(next);
+        await writeClawdletsConfig({ configPath, config: validated });
+        console.log(`ok: removed bot ${botId}`);
+    },
+});
+export const bot = defineCommand({
+    meta: { name: "bot", description: "Manage fleet bots." },
+    subCommands: { add, list, rm },
+});
+//# sourceMappingURL=bot.js.map

package/dist/commands/bot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bot.js","sourceRoot":"","sources":["../../src/commands/bot.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AACtC,OAAO,KAAK,CAAC,MAAM,gBAAgB,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AACxH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAErE,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACvB,IAAI,CAAC,CAAC;QAAE,OAAO,iBAAiB,CAAC;IACjC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,uBAAuB,CAAC;IAClE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,IAAI,GAAG,aAAa,CAAC;IACzB,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,wCAAwC,EAAE;IAC7E,IAAI,EAAE,EAAE;IACR,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE;QAChB,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAC7C,MAAM,EAAE,MAAM,EAAE,GAAG,mBAAmB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACxD,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,GAAG,GAAG,aAAa,CAAC;IACxB,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,uCAAuC,EAAE;IAC3E,IAAI,EAAE;QACJ,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sBAAsB,EAAE;QAC5D,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,2CAA2C,EAAE,OAAO,EAAE,KAAK,EAAE;KAC3G;IACD,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE;QAChB,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAC7C,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,mBAAmB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QAEjE,IAAI,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,IAAI,CAAC,WAAW;gBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAChF,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAC3E,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC,CAAC;YAC7F,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClB,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;gBACnE,IAAI,GAAG,KAAK,QAAQ;oBAAE,UAAU,EAAE,CAAC;gBACnC,OAAO;YACT,CAAC;YACD,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC;QAE9B,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC3C,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7D,OAAO,CAAC,GAAG,CAAC,wBAAwB,KAAK,EAAE,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG;YACX,GAAG,MAAM;YACT,KAAK,EAAE;gBACL,GAAG,MAAM,CAAC,KAAK;gBACf,QAAQ,EAAE,CAAC,GAAG,YAAY,EAAE,KAAK,CAAC;gBAClC,IAAI,EAAE,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE;aAC5C;SACF,CAAC;QACF,MAAM,SAAS,GAAG,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,oBAAoB,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,EAAE,CAAC,CAAC;IACxC,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,EAAE,GAAG,aAAa,CAAC;IACvB,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,4CAA4C,EAAE;IAC/E,IAAI,EAAE;QACJ,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,GAAG;KAC3D;IACD,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE;QAChB,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAC7C,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,mBAAmB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QAC7C,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC3C,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,EAAE,CAAC,CAAC;QAC3G,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC;QACzD,MAAM,cAAc,GAAG,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAChD,OAAQ,cAAsB,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,CAAC;QACjG,MAAM,SAAS,GAAG,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,oBAAoB,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,GAAG,GAAG,aAAa,CAAC;IAC/B,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,oBAAoB,EAAE;IACxD,WAAW,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE;CAC/B,CAAC,CAAC"}

package/dist/commands/cattle/common.d.ts

@@ -0,0 +1,29 @@
+import { type CattleTask } from "@clawdlets/core/lib/cattle-task";
+import type { CattleServer } from "@clawdlets/core/lib/hcloud-cattle";
+export declare function requireEnabled(params: {
+    enabled: boolean;
+    hint: string;
+}): void;
+export declare function requireFile(pathname: string, label: string): void;
+export declare function readJsonFile(filePath: string): unknown;
+export declare function requireTtlSeconds(ttlRaw: string): {
+    seconds: number;
+    normalized: string;
+};
+export declare function unixSecondsNow(): number;
+export declare function formatAgeSeconds(seconds: number): string;
+export declare function formatTable(rows: string[][]): string;
+export declare function resolveTailscaleIpv4(hostname: string): Promise<string>;
+export declare function loadTaskFromFile(taskFile: string): CattleTask;
+export declare function waitForClfJobTerminal(params: {
+    client: {
+        show: (jobId: string) => Promise<{
+            job: any;
+        }>;
+    };
+    jobId: string;
+    timeoutMs: number;
+    pollMs: number;
+}): Promise<any>;
+export declare function resolveOne(servers: CattleServer[], idOrName: string): CattleServer;
+//# sourceMappingURL=common.d.ts.map

package/dist/commands/cattle/common.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../../src/commands/cattle/common.ts"],"names":[],"mappings":"AAGA,OAAO,EAAgD,KAAK,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAChH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AAEtE,wBAAgB,cAAc,CAAC,MAAM,EAAE;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAG/E;AAED,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAGjE;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAOtD;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAIzF;AAED,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAUxD;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,CAWpD;AAED,wBAAsB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAO5E;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,UAAU,CAK7D;AAED,wBAAsB,qBAAqB,CAAC,MAAM,EAAE;IAClD,MAAM,EAAE;QAAE,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;YAAE,GAAG,EAAE,GAAG,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC;IAC3D,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,GAAG,CAAC,CAWf;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,QAAQ,EAAE,MAAM,GAAG,YAAY,CAQlF"}