create-principles-disciple 1.146.3 → 1.146.6

package/release-manager/dist/installer.d.ts

@@ -1,629 +0,0 @@
-import { type ChildProcess } from 'child_process';
-import type { InstallOptions } from './prompts.js';
-import { type ComponentStatus, type VerificationResult } from './mvp-config.js';
-import { type HostTarget } from './installers/index.js';
-import type { HostInstallResult } from '@principles/core/host';
-import { type SkillLanguage } from './skill-language.js';
-import { type ReleaseMetadataDigestSource, type TransactionState } from './update/transaction-journal.js';
-/** PRI-343: Keep in sync with @principles/core CONVERSATION_ACCESS_CONFIG_KEY */
-export declare const CONVERSATION_ACCESS_CONFIG_KEY: 'allowConversationAccess';
-/** PRI-853: the maintained official signed-release metadata repository.
- * Served from the repo's GitHub Pages (gh-pages branch, enabled 2026-09-19). */
-export declare const DEFAULT_RELEASE_METADATA_URL = "https://csuzngjh.github.io/principles";
-/**
- * PRI-343: Pure function — deep-merges allowConversationAccess: true into
- * the openclaw.json config without mutating the input.
- *
- * Ensures plugins.entries['principles-disciple'].hooks.allowConversationAccess
- * is set to true, creating intermediate objects if missing.
- * Preserves all other fields.
- */
-export declare function ensureConversationAccess(config: Record<string, unknown>): Record<string, unknown>;
-export declare function resolveConsolePortBase(): number;
-export declare function mergeInstallManifestHosts(current: unknown, host: HostTarget): string[];
-/**
- * PRI-709 P0-2 — active record commit point (ADR-0024 D-2).
- *
- * `~/.pd/active.json` is the deployment identity source: it records WHAT is
- * actually deployed, keyed to the transaction that deployed it. Before PRI-709
- * the installer never wrote it (the only writer was legacy-migration.ts), so
- * every real install and every ReleaseManager apply left active.json absent or
- * stale — the PRI-698 audit finding F-2.
- *
- * Identity is taken from the transaction, never recomputed here: the journal
- * was opened with the payload's own identity (`_release/manifest.json` digest
- * when the self-contained asset ships one), and active.json must agree with
- * the journal of the transaction that produced it. A divergent second
- * computation would break the audit trail.
- *
- * Ordering: journal-first. The caller appends `confirmed` and only then calls
- * this, so a crash between the two is recoverable from the journal (the
- * reverse order would leave an unjournaled active.json).
- *
- * Failure policy — Tier 2: this runs AFTER the backup was discarded, so the
- * install is already committed and must not be failed here. A write failure is
- * reported loud (rc-9) and returned to the caller; it never bricks the
- * installation.
- */
-export interface ActiveRecordCommitResult {
-    readonly written: boolean;
-    readonly activeRecordPath: string;
-    readonly generation: number;
-    readonly previousReleaseId: string | null;
-    /** Set when the record could not be written or the previous one was unreadable. */
-    readonly reason?: string;
-}
-export declare function commitInstallerActiveRecord(journal: InstallerJournal): ActiveRecordCommitResult;
-/**
- * PRI-709 P0-1 — installer supply path for the release metadata source.
- *
- * The installer is the only component that legitimately knows the metadata
- * repository at install time, so it persists `PD_RELEASE_METADATA_URL` into
- * `~/.pd/install.json` (the durable `install_config` tier). Without this the
- * variable had to be exported in every shell that wanted a governed update
- * check (PRI-698 audit F-4).
- *
- * Absent env is a no-op — an install with no metadata source stays
- * unconfigured rather than persisting a guessed URL. A malformed env value is
- * reported and skipped: it must never be written into install.json, where the
- * strict reader would then fail loud and mark the install corrupt.
- */
-export declare function persistReleaseMetadataSource(): void;
-/**
- * PRI-850 (SPEC v0.3 §6.1, ADR-0024 §6): stage, probe, and register the
- * bootstrap update executor under `~/.pd/bootstrap/`.
- *
- * The executor is the installer's own compiled package (dist + package.json) —
- * self-contained ESM, no runtime dependency resolution on the Owner machine.
- * Delivery order: stage → probe the staged bytes through the strict JSON
- * protocol → activate by rename-swap → register in bootstrap.json with a
- * digest of the deployed tree. The previous executor is kept until the new
- * registration is written, then removed.
- */
-export interface BootstrapDeliveryResult {
-    readonly bootstrapVersion: string;
-    readonly executorDigest: string;
-    readonly executorDir: string;
-}
-/**
- * Resolve which installer bytes the bootstrap executor should be deployed
- * from. The deployed executor is what RUNS an update, so delivering it from
- * "whichever installer is executing" pins that old code forever: the executor
- * re-delivers itself, its same-version fast path matches, and every later
- * update keeps running retired behavior. That is how the PRI-1021 legacy
- * `~/.openclaw/plugins/installs.json` writer came back on 2026-10-28 — a
- * 1.145.1 executor deployed 2026-10-15 applied release 2.4.0 using its own
- * pre-PRI-1021 host installer while the release shipped the fixed one.
- *
- * The payload's `release-manager` component is the installer this transaction
- * deploys, so it is the authority for the NEXT executor. Fall back to the
- * executing package only when the payload carries no installer component
- * (npm-distributed legacy shape).
- */
-export declare function resolveBootstrapExecutorSourceDir(payloadRoot: string): string;
-export declare function deliverBootstrapExecutor(input: {
-    pdHome: string;
-    /** The installer package's own root (contains dist/ and package.json). */
-    sourcePackageDir: string;
-}): Promise<BootstrapDeliveryResult>;
-/**
- * PRI-850: the official repair path for installations whose update chain is
- * broken or pre-bootstrap (ADR-0024 §6.5). It NEVER deploys a product release
- * and NEVER touches active.json — the installed product version is not this
- * command's authority. It repairs the update capability itself: bootstrap
- * delivery + update-source registration + install-state report.
- */
-export interface RepairUpdateChainResult {
-    readonly success: boolean;
-    readonly installedProductVersion: string | null;
-    readonly bootstrap: BootstrapDeliveryResult | null;
-    readonly metadataSourceRegistered: boolean;
-    readonly needsFullInstall: boolean;
-    readonly notes: readonly string[];
-    readonly error?: string;
-}
-export declare function repairUpdateChain(input: {
-    sourcePackageDir: string;
-}): Promise<RepairUpdateChainResult>;
-/**
- * 验证原生模块：better-sqlite3 随发布资产携带 prebuilt 二进制
- * (prebuilds/*.node)，node-gyp-build 在 require 时解析——无需（也没有）
- * npm rebuild 步骤。本函数的 require 探针就是唯一验证（历史上存在一个
- * 名为 rebuildNativeModules 的空壳函数，已删除以避免误导维护者）。
- */
-export declare function verifyNativeModules(cwd: string, componentName: string): void;
-export declare class SelfContainedDependencyError extends Error {
-    readonly reason: string;
-    readonly nextAction: string;
-    readonly component: string;
-    readonly dependency?: string;
-    constructor(options: {
-        reason: string;
-        nextAction: string;
-        message: string;
-        component: string;
-        dependency?: string;
-        cause?: unknown;
-    });
-}
-/**
- * Installer payload shape, decided once per install run (see
- * `decideInstallPayloadMode` below):
- * - `self-contained` — the package ships the immutable release asset
- *   (`_release/asset.json` + per-component node_modules); the default
- *   for the release-asset publication channel.
- * - `npm-distributed` — the npm registry package ships the bundled
- *   component trees WITHOUT node_modules/_release (the registry package
- *   is ~8MB vs ~792MB for the self-contained payload); dependencies
- *   resolve from the npm registry at install time (the
- *   PD_ALLOW_LEGACY_NPM_INSTALL recovery path).
- */
-type InstallerPayloadMode = 'self-contained' | 'npm-distributed';
-/**
- * Decide which payload shape this package instance carries and whether
- * registry dependency resolution (npm install) is required. Env override
- * first (explicit operator intent), then the physical shape: a present
- * `_release/asset.json` always takes the self-contained path (a present
- * but CORRUPT asset still fails hard inside the preflight — never
- * silently falling back to registry resolution); a package without the
- * release asset but with complete component trees is the npm-distributed
- * shape and resolves dependencies from the registry.
- */
-export declare function decideInstallPayloadMode(pluginDir: string): InstallerPayloadMode;
-/**
- * Whether registry dependency resolution (npm install / global root
- * discovery) may run: true for the npm-distributed payload shape and the
- * PD_ALLOW_LEGACY_NPM_INSTALL recovery path. Host installers consume this
- * gate instead of re-reading the env (their concern is payload shape, not
- * the specific env var).
- */
-export declare function isNpmDependencyResolutionEnabled(): boolean;
-/**
- * Supported release assets are self-contained: installation validates the
- * copied component and never resolves dependencies or runs lifecycle scripts.
- * The old npm path remains opt-in for development/legacy recovery only.
- */
-export declare function prepareBundledComponentDependencies(cwd: string, componentName: string): Promise<void>;
-export declare function preflightSelfContainedReleaseAsset(assetDir: string): Promise<void>;
-/**
- * 验证路径是否在工作区目录内，防止路径遍历攻击
- */
-export declare function validateWorkspacePath(targetPath: string, workspaceDir: string): void;
-interface BackupResult {
-    type: 'no_existing' | 'backed_up';
-    backupDir: string | null;
-    runtimeBackupDir?: string | null;
-}
-/**
- * Move legacy PD backup directories out of the extensions dir into the PD
- * backups root. Older versions created backups as siblings of the plugin
- * inside ~/.openclaw/extensions — OpenClaw plugin discovery scans every
- * extensions/ child directory, so those backups get discovered as duplicate
- * principles-disciple plugins ("duplicate plugin id detected" on every
- * gateway startup). Best-effort: failures are logged, never fatal (rc-9).
- *
- * Exported for real-filesystem tests (tests/backup-location.test.ts).
- */
-export declare function migrateLegacyPdBackups(): void;
-/**
- * P0-3 (SPEC v1.2 §17 / PRI-1070 comment §2): backup step failed midway and
- * the compensation (undo of the already-moved extension tree) ALSO failed —
- * the installer is holding the moved backup paths so the failure handler can
- * still restore them. Never silently dropped.
- */
-export declare class BackupIntegrityError extends Error {
-    readonly extensionBackupDir: string | null;
-    readonly runtimeBackupDir: string | null;
-    constructor(message: string, extensionBackupDir: string | null, runtimeBackupDir: string | null);
-}
-/**
- * Exported for real-filesystem tests (tests/backup-location.test.ts).
- */
-export declare function backupExistingInstall(host?: HostTarget): BackupResult;
-/** P0-3 (SPEC v1.2 §17): per-tree restore outcome — never one fuzzy boolean. */
-export interface TreeRestoreResult {
-    readonly tree: 'extension' | 'runtime';
-    readonly status: 'restored' | 'no_backup' | 'failed';
-    readonly detail?: string;
-    /** Directories that MUST be preserved for a later manual/automatic retry. */
-    readonly preservedDirs: readonly string[];
-}
-export interface RestoreBackupResult {
-    readonly restored: boolean;
-    readonly partial: boolean;
-    readonly extension?: TreeRestoreResult;
-    readonly runtime?: TreeRestoreResult;
-    readonly error?: string;
-}
-/**
- * P0-3/P0-4: restore both trees with per-tree outcomes. `restored: true` only
- * when every tree is genuinely back (or had no backup to apply). A partial
- * restore is reported as such — never as success, never as rolled_back.
- */
-export declare function restoreBackup(backupDir: string | null, runtimeBackupDir: string | null): RestoreBackupResult;
-/**
- * Legacy rule contract preflight (2026-08-19).
- *
- * Before replacing the current installation, run the NEW pd-cli's
- * `runtime compatibility-scan` against the target workspace: if any ACTIVE
- * owner-approved RuleCode still references a RuleHost contract symbol this
- * version removed (recentThinking, planStatus, hasPlanFile, ...), upgrading
- * would silently change that rule's behavior. Refusing here keeps the old
- * installation untouched (cli-5) and tells the owner exactly which rules
- * block the upgrade.
- */
-/**
- * Compatibility preflight status taxonomy (P1-3, 2026-08-20).
- *
- * The scanner's status is preserved end-to-end so a refusal names the real
- * cause instead of smearing every failure into "legacy RuleCode":
- *
- *   clean             → allow upgrade
- *   no_state_db       → allow (nothing persisted to be incompatible)
- *   legacy_dependency → refuse → migrate/deactivate the listed rules
- *   scan_failed       → refuse → repair DB / permissions
- *   scan_unavailable  → refuse → repair/re-download the installer
- *
- * Any unrecognized status is treated as a refusal (fail closed).
- */
-export type CompatibilityStatus = 'clean' | 'no_state_db' | 'legacy_dependency' | 'scan_failed' | 'scan_unavailable';
-export interface LegacyRulePreflightOutcome {
-    ok: boolean;
-    status?: CompatibilityStatus;
-    /** rc-9: structured reason + remediation whenever ok=false. */
-    reason?: string;
-    remediation?: string;
-}
-/** Injected runner so tests can exercise refusal without a built pd-cli. */
-export type LegacyRulePreflightRunner = (pdCliEntry: string, workspaceDir: string) => Promise<LegacyRulePreflightOutcome>;
-/**
- * Strict (ok, status) protocol parse (P2, 2026-08-20).
- *
- * Boolean `ok` alone is NOT authoritative — the (ok, status) pair is the
- * contract. Only ok=true + (clean|no_state_db) is a successful scan. Every
- * other combination fails closed:
- *   - ok=true + refusal/success-impossible status → protocol invalid
- *   - ok=false + clean|no_state_db/unknown   → protocol invalid
- *   - ok=false + legacy_dependency|scan_failed|scan_unavailable → refusal
- *   - non-boolean / missing ok               → protocol invalid
- * The payload is never trusted to self-describe a pass.
- */
-export declare function parseCompatibilityScanStdout(stdout: unknown): LegacyRulePreflightOutcome;
-/**
- * PRI-693 / PRI-1060: materialize node_modules links for the BUNDLED (not yet
- * deployed) components so the pre-deployment compatibility scan can execute
- * the bundled pd-cli. Mirrors the links syncPdCli creates for the deployed
- * copy — targets are the sibling component directories of the npm package
- * (files whitelist: core/, host-runtime/, codex-adapter/, workbuddy-adapter/,
- * install-layout/, plugin/). Idempotent.
- *
- * Links are materialized at BOTH levels:
- *
- * 1. <root>/pd-cli/node_modules/* — pd-cli's OWN first-hop imports.
- * 2. <root>/node_modules/* — every OTHER bundled component's `file:../`
- *    sibling dependencies. Node resolves a component reached through a
- *    junction by its REAL path, so host-runtime/dist/index.js importing
- *    '@principles/core' never sees pd-cli's node_modules — it only resolves
- *    via the package root's node_modules (PRI-1060: this exact gap crashed
- *    the scan with ERR_MODULE_NOT_FOUND on every registry install). The
- *    third-party dependencies of the bundled graph (@sinclair/typebox,
- *    better-sqlite3, …) are declared as top-level installer dependencies so
- *    the surrounding npx/npm install places them one node_modules above the
- *    package, reachable by the same upward resolution.
- */
-export declare function ensureBundledPdCliResolution(pdCliRoot: string): void;
-export declare function runLegacyRuleContractPreflight(pluginDir: string, workspaceDir: string, runScan?: LegacyRulePreflightRunner): Promise<LegacyRulePreflightOutcome>;
-export declare function checkBuiltPlugin(pluginDir: string): Promise<void>;
-export declare function installPluginToStaging(pluginDir: string, language: SkillLanguage): Promise<void>;
-/** Outcome of one global-shim discovery/install attempt (PRI-697 review P1). */
-export interface GlobalPdShimResult {
-    /** true when PD-owned shim files are in place in the npm global bin dir. */
-    installed: boolean;
-    /** Shim files this run CREATED (absent before) — the rollback set. */
-    createdPaths: string[];
-    /** PD-owned shim files that already existed and were overwritten in place. */
-    replacedPaths: string[];
-    /** Foreign-owned `pd` entries found — never written, never rolled back. */
-    skippedForeignPaths: string[];
-}
-/**
- * Render the POSIX-sh forwarding script that exposes a global `pd`.
- *
- * The target goes in SINGLE quotes. Inside `"…"` the shell still expands `$`
- * and backticks and treats `\` as an escape character — and a Windows path is
- * nothing but backslashes — so no complete escape set exists there short of
- * quoting per-character. Single quotes are literal except for `'` itself,
- * which is emitted as the close-escape-reopen idiom. Exported because the
- * win32 write branch is platform-gated while this escaping contract has to be
- * assertable on every runner.
- */
-export declare function renderShForwardingShim(targetPath: string): string;
-export declare function installGlobalPdShim(): GlobalPdShimResult | boolean;
-export declare function tryUpgradePdCliFromNpm(installedPdCliDir: string): void;
-/**
- * PRI-711: materialize node_modules links for the INSTALLED codex-adapter so
- * its declared `file:../<component>` dependencies resolve under ESM realpath
- * rules. The adapter's dist imports @principles/host-runtime and
- * @principles/core, and pd-cli's eager import graph (health-codex) statically
- * imports the adapter — without these links every pd command dies with
- * ERR_MODULE_NOT_FOUND at startup (observed 2026-09-09: the 1.231.2 full
- * update swapped in Slice-D pd-cli while the deployed adapter, laid down by
- * older installers, had no node_modules at all).
- */
-export declare function ensureCodexAdapterResolution(): void;
-/**
- * SPEC workbuddy-host-adapter §4.1/§5: the bundled @principles/workbuddy-adapter
- * payload installs as a runtime sibling exactly like codex-adapter, and its
- * `file:../<component>` dependency links are materialized the same way so the
- * plugin wrapper resolves core/host-runtime/install-layout under ESM realpath
- * rules.
- *
- * Unlike codex-adapter, the payload's ABSENCE is an observable skip, not a
- * failure: installer builds published before the adapter component landed (or
- * cut from a tree where it is not yet bundled) still deploy OpenClaw/Codex
- * untouched; the WorkBuddy host installer then reports
- * workbuddy_adapter_payload_missing for --host workbuddy (rc-9).
- */
-export declare function installBundledWorkbuddyAdapter(pluginDir: string): boolean;
-/**
- * Materialize the resolution links for the INSTALLED workbuddy-adapter.
- * Mirrors ensureCodexAdapterResolution; tolerates the component's absence
- * (observable skip — see installBundledWorkbuddyAdapter).
- */
-export declare function ensureWorkbuddyAdapterResolution(): {
-    installed: boolean;
-    skipReason?: string;
-};
-/**
- * PRI-912 (SPEC-P1′-A): canonical junction reconciliation for the plugin's
- * bundled @principles/core copy. The self-contained release asset must ship
- * node_modules materialized (the asset builder refuses symlinks), so every
- * deployed plugin carries a full physical duplicate of the runtime root core
- * (~119MB / 17k files on a real install). This pass runs once ALL components
- * are deployed and BEFORE the journal 'staged' transition — a conversion that
- * breaks runtime resolution must surface through the EXISTING console-probe →
- * rollback channel, not a new one.
- *
- * The ONLY candidate is <pluginDir>/node_modules/@principles/core with the
- * runtime root core (<runtime>/core) as canonical source. A materialized copy
- * is converted to a junction (Windows) / relative symlink (Unix) only when
- * ALL three gates hold:
- *   1. package identity — the copy's and the source's package.json `name`
- *      agree (evidence-based; never name-matching alone),
- *   2. declared relationship — the plugin manifest declares
- *      `@principles/core` as a `file:` dependency whose declared path stays
- *      inside the plugin dir (rc-1) and RESOLVES to the canonical runtime
- *      core (the <plugin>/core slot installPluginToStaging creates),
- *   3. content digest — digestDirectory(copy) === digestDirectory(source).
- * Any gate failure (or an unreadable/partial state) SKIPS the copy with a
- * structured reason (rc-9) and never mutates it — dedup must never make an
- * install worse. Conversion is rename-swap with verification and restore:
- * a failed link creation/verification puts the materialized copy back; only
- * a restore failure (which WOULD break resolution) fails the install loud
- * into the existing fail → rollback channel. Idempotent: an existing link
- * that already resolves to the canonical core is a no-op. The canonical
- * target itself is never deleted: removing a converted tree unlinks the
- * junction, it does not follow it (rmSync/fse.remove symlink semantics).
- */
-export interface CoreJunctionReconciliation {
-    /** Materialized copies replaced by a verified canonical junction. */
-    readonly converted: readonly string[];
-    /** Existing links already resolving to the canonical core (idempotent no-op). */
-    readonly alreadyCanonical: readonly string[];
-    /** Structured skip records — every non-conversion carries a reason (rc-9). */
-    readonly skipped: readonly {
-        dir: string;
-        reason: string;
-    }[];
-}
-export declare function reconcilePluginCoreCanonicalJunction(): CoreJunctionReconciliation;
-export interface ChildJoinResult {
-    readonly exited: boolean;
-    readonly exitCode: number | null;
-    readonly signal: string | null;
-    readonly timedOut: boolean;
-    readonly escalation: 'already_exited' | 'sigterm' | 'sigkill';
-}
-/**
- * P0-2 (SPEC v1.2 §5 step 6 / invariant I-4): terminate a child and WAIT for
- * its real exit event before anyone touches the directories it may hold.
- *
- * Discipline proven by the R8 Windows experiment (2026-11-02, real
- * better-sqlite3 .node): subscribing to 'exit' AFTER the kill signal loses
- * the event — the listener must be attached BEFORE the signal is sent.
- * Graceful SIGTERM first, bounded wait, then SIGKILL, then a second bounded
- * wait. If even that does not confirm exit, `exited: false` is returned and
- * the caller MUST NOT perform destructive directory operations (defer to a
- * recovery state instead).
- */
-export declare function terminateAndJoinChild(child: ChildProcess, options?: {
-    gracefulTimeoutMs?: number;
-    killTimeoutMs?: number;
-}): Promise<ChildJoinResult>;
-/** One probe attempt's diagnostics (SPEC v1.2 §14: attempt-level records;
- * the nonce VALUE itself is never recorded — only the match outcome). */
-export interface ConsoleVerifyAttempt {
-    readonly port: number;
-    readonly pid: number | null;
-    readonly outcome: 'verified' | 'identity_mismatch' | 'http_error_status' | 'bad_body' | 'request_error' | 'child_exited_early' | 'join_failed';
-    readonly httpStatus?: number;
-    readonly exitCode?: number | null;
-    readonly signal?: string | null;
-    readonly stderrTail?: string;
-    readonly detail?: string;
-}
-export declare class ConsoleVerifyError extends Error {
-    readonly attempts: readonly ConsoleVerifyAttempt[];
-    readonly hadJoinFailure: boolean;
-    constructor(message: string, attempts: readonly ConsoleVerifyAttempt[]);
-}
-/** Exported for real-subprocess tests (tests/console-verify-identity.test.ts). */
-export declare function verifyConsole(workspaceDir: string): Promise<{
-    ok: boolean;
-    url: string;
-    process: ChildProcess | null;
-    attempts: readonly ConsoleVerifyAttempt[];
-    unconfirmedChildren: readonly ChildProcess[];
-}>;
-/**
- * Task 8: Auto-launch the PD Console at the end of a successful install by
- * reusing `pd console open` (handleConsoleOpen). Spawns it detached so the
- * console survives installer exit, then opens the browser to /welcome.
- *
- * EP-03: on failure, returns consoleUrl=undefined + fallbackAction so the user
- *        is never left without a way to reach the console.
- * EP-04: detached + unref keeps the console running after the installer exits.
- * EP-06: reuses pd-cli's handleConsoleOpen via the CLI entry — no new launcher.
- */
-/**
- * WorkBuddy remediation (review 2026-10-13 §4 P1): the auto-launched Console,
- * canary and manual-open instructions must manage the directory the host's
- * hook/worker actually read. For the WorkBuddy host that is the dedicated
- * governance workspace (SPEC §4.1) — NOT the project directory, which is only
- * the task project path. Other hosts keep the project workspace.
- */
-export declare function resolveConsoleWorkspaceDir(host: HostTarget | undefined, projectWorkspaceDir: string, homeDir: string): string;
-export interface InstallResult {
-    success: boolean;
-    workspaceDir: string;
-    configYamlPath: string;
-    templatesCount: number;
-    components: ComponentStatus;
-    verification: VerificationResult;
-    enabledChannels: string[];
-    nextAction: string;
-    reason?: string;
-    component?: string;
-    dependency?: string;
-    error?: string;
-    /** Task 8: URL the browser was opened to when the installer auto-launched the
-     * console via `pd console open`. Undefined when auto-launch was skipped or failed. */
-    consoleUrl?: string;
-    /** ADR-0020 §2.3: Host-side install results (one per HostInstaller). */
-    hostResults?: HostInstallResult[];
-    /** ADR-0024 D-2 (PRI-664): transaction journal record for this install.
-     * Undefined when the mutation never began (pre-mutation refusal/throw). */
-    journal?: InstallJournalRecord;
-    /** PRI-726: degraded-success notice — the payload committed but the OpenClaw
-     * gateway did not come back up. Present ONLY on success results (a failed
-     * install reports its own error/nextAction); ReleaseManager.apply propagates
-     * it verbatim to the Console `gatewayNotice` contract (PRI-723 legacy path
-     * parity). */
-    gatewayNotice?: string;
-}
-/** Observability record for one installer transaction (ADR-0024 D-2). */
-export interface InstallJournalRecord {
-    readonly transactionId: string;
-    /** Journal file: `~/.pd/transactions/<transactionId>.jsonl` (D-6, runtime scope). */
-    readonly journalPath: string;
-    /** True when a mid-flight journal append failed (Tier-2 degradation) and
-     * later transitions were skipped — the backup/restore safety net remained
-     * authoritative for this transaction. */
-    readonly degraded: boolean;
-}
-export interface InstallRunMode {
-    /** Suppress human output (spinner / progress). True under --json. */
-    quiet?: boolean;
-    /** No interactive prompts. True under --yes / --non-interactive / --json. */
-    nonInteractive?: boolean;
-}
-export interface InstallerJournal {
-    readonly transactionId: string;
-    readonly journalPath: string;
-    readonly releaseId: string;
-    readonly productVersion: string;
-    /**
-     * PRI-926: the version the update started FROM. ReleaseManager apply only —
-     * the active record's productVersion at plan time, journaled once on the
-     * planned transition. Absent for installer-initiated (install-*)
-     * transactions, which are not Owner-facing update history.
-     */
-    readonly preUpdateProductVersion?: string;
-    /**
-     * Embedded product identity (SPEC §12): the payload's stamped source commit.
-     * Null = the payload carries no embedded identity (legacy shape) — provenance
-     * is then visibly unavailable in journal/active.json, never faked.
-     */
-    readonly sourceCommit: string | null;
-    /**
-     * Provenance of `productVersion`: `embedded` (installer read the payload's
-     * stamp) or `signed_channel` (ReleaseManager adopted a signed release).
-     * These are the only two producible values — see `InstallerProductVersionSource`.
-     */
-    readonly productVersionSource: InstallerProductVersionSource;
-    readonly releaseMetadataDigest: string;
-    /** PRI-664 review: provenance of releaseMetadataDigest ('manifest' | 'package_manifest' | 'fallback' | 'signed_channel'). */
-    readonly releaseMetadataDigestSource: ReleaseMetadataDigestSource;
-    /**
-     * PRI-698 Phase 1: dual-slot generation continuity. Standalone installs keep
-     * the historical `1`; an externally adopted transaction (ReleaseManager
-     * apply orchestration) supplies activeRecord.generation + 1.
-     */
-    readonly generation: number;
-    degraded: boolean;
-    /** Last successfully journaled state — the `from` for failure-path transitions. */
-    lastState: TransactionState | null;
-}
-/**
- * Identity of the payload being installed (SPEC §12). The PRODUCT VERSION comes
- * only from the EMBEDDED identity stamp (`_release/product-identity.json`,
- * written by the asset build BEFORE the artifact bytes were hashed) — there is
- * no manifest fallback for it any more, and a payload without a stamp is
- * refused rather than guessed (contract below).
- *
- * `releaseMetadataDigest` keeps its own, unrelated provenance ladder
- * (`manifest` → `package_manifest` → `fallback`): that digest is an integrity
- * marker whose source is a REAL fact, so the journal never stores a placeholder
- * where a verifiable value is available (same discipline as
- * legacy-migration.ts), and the last-resort `fallback` hashes the literal
- * reason string only to satisfy the journal's 64-hex format requirement.
- * Nothing in that ladder may be promoted to the product version.
- *
- * PRI-709 P0-2 (PRI-698 audit F-1): without an embedded stamp the installer
- * once derived `productVersion` from a component package manifest — the
- * exact promotion of a diagnostic to product authority that stamped every
- * legacy-installer machine with `bundled-1.74.1-*` (PRI-874).
- *
- * Embedded-stamp contract (fail-closed, rc-2/rc-3): the payload MUST carry
- * `_release/product-identity.json`. A PRESENT but malformed stamp throws
- * BEFORE any install mutation (the caller journals `planned` before the
- * first filesystem mutation, so a throw here leaves the runtime untouched).
- * A MISSING stamp now throws too — component manifest versions are
- * diagnostics and are never promoted to the product version. Only
- * train/asset builds stamp their payloads (PRI-874 publish guards); a tree
- * without a stamp is not an installable release.
- */
-/**
- * The ONLY producible product-version provenances:
- * - `embedded`       — the installer read the payload's `_release/product-identity.json`;
- * - `signed_channel` — ReleaseManager adopted a signed release document.
- *
- * PRI-874 review: `package_manifest` and `unavailable` were dropped. Once the
- * component-manifest fallback was deleted, no production seam could return
- * either value, so advertising them described a branch no seam can reach (the
- * ERR-099 class this repository's error index forbids). This is a compile-time
- * narrowing only: the value lives in the in-memory installer transaction and is
- * NOT part of the persisted journal/active.json schema, so no stored row is
- * reinterpreted.
- */
-export type InstallerProductVersionSource = 'embedded' | 'signed_channel';
-export interface InstallerPayloadIdentity {
-    readonly productVersion: string;
-    readonly sourceCommit: string | null;
-    readonly productVersionSource: InstallerProductVersionSource;
-    readonly releaseMetadataDigest: string;
-    readonly releaseMetadataDigestSource: ReleaseMetadataDigestSource;
-}
-/** Opens one installer transaction: `~/.pd/transactions/<transactionId>.jsonl`. */
-export declare function beginInstallerJournal(pluginDir: string, preResolvedIdentity?: InstallerPayloadIdentity): InstallerJournal;
-/**
- * Append one transition durably (append + fsync) BEFORE the side effect it
- * describes. Throws on failure — the caller decides Tier-1 (refuse before
- * mutation) vs Tier-2 (degrade and continue).
- */
-export declare function journalInstallerTransition(journal: InstallerJournal, from: TransactionState | null, to: TransactionState, detail: string): void;
-/** Tier-2 wrapper: on append failure, degrade (mark + warn) instead of throwing. */
-export declare function journalInstallerTransitionDegrading(journal: InstallerJournal, from: TransactionState | null, to: TransactionState, detail: string): void;
-export declare function install(options: InstallOptions, pluginDir: string, mode?: InstallRunMode, transaction?: InstallerJournal): Promise<InstallResult>;
-export {};
-//# sourceMappingURL=installer.d.ts.map

package/release-manager/dist/installer.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"installer.d.ts","sourceRoot":"","sources":["../src/installer.ts"],"names":[],"mappings":"AAOA,OAAO,EAAuB,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AAMvE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAoBL,KAAK,eAAe,EACpB,KAAK,kBAAkB,EAExB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAqB,KAAK,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAE3E,OAAO,KAAK,EAAsB,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAGnF,OAAO,EAA+B,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAoBtF,OAAO,EAOL,KAAK,2BAA2B,EAChC,KAAK,gBAAgB,EACtB,MAAM,iCAAiC,CAAC;AAEzC,iFAAiF;AACjF,eAAO,MAAM,8BAA8B,EAAG,yBAAkC,CAAC;AAEjF;gFACgF;AAChF,eAAO,MAAM,4BAA4B,0CAA0C,CAAC;AAMpF;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAmCjG;AAkCD,wBAAgB,sBAAsB,IAAI,MAAM,CAU/C;AAoCD,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,GAAG,MAAM,EAAE,CAgBtF;AA6DD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,mFAAmF;IACnF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,gBAAgB,GAAG,wBAAwB,CAmD/F;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,4BAA4B,IAAI,IAAI,CA0BnD;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AA+CD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iCAAiC,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAW7E;AAED,wBAAsB,wBAAwB,CAAC,KAAK,EAAE;IACpD,MAAM,EAAE,MAAM,CAAC;IACf,0EAA0E;IAC1E,gBAAgB,EAAE,MAAM,CAAC;CAC1B,GAAG,OAAO,CAAC,uBAAuB,CAAC,CA+FnC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChD,QAAQ,CAAC,SAAS,EAAE,uBAAuB,GAAG,IAAI,CAAC;IACnD,QAAQ,CAAC,wBAAwB,EAAE,OAAO,CAAC;IAC3C,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAWD,wBAAsB,iBAAiB,CAAC,KAAK,EAAE;IAAE,gBAAgB,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAuE7G;AAmED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI,CAW5E;AAKD,qBAAa,4BAA6B,SAAQ,KAAK;IACrD,SAAgB,MAAM,EAAE,MAAM,CAAC;IAC/B,SAAgB,UAAU,EAAE,MAAM,CAAC;IACnC,SAAgB,SAAS,EAAE,MAAM,CAAC;IAClC,SAAgB,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpC,YAAY,OAAO,EAAE;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,KAAK,CAAC,EAAE,OAAO,CAAC;KACjB,EAOA;CACF;AAOD;;;;;;;;;;;GAWG;AACH,KAAK,oBAAoB,GAAG,gBAAgB,GAAG,iBAAiB,CAAC;AAmEjE;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,MAAM,GAAG,oBAAoB,CAIhF;AAOD;;;;;;GAMG;AACH,wBAAgB,gCAAgC,IAAI,OAAO,CAE1D;AAED;;;;GAIG;AACH,wBAAsB,mCAAmC,CACvD,GAAG,EAAE,MAAM,EACX,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,IAAI,CAAC,CAwDf;AAWD,wBAAsB,kCAAkC,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAsCxF;AAYD;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAOpF;AAkDD,UAAU,YAAY;IACpB,IAAI,EAAE,aAAa,GAAG,WAAW,CAAC;IAClC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,IAAI,IAAI,CA+B7C;AAED;;;;;GAKG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAEzC,YAAY,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,GAAG,IAAI,EAAE,gBAAgB,EAAE,MAAM,GAAG,IAAI,EAK9F;CACF;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,GAAE,UAAuB,GAAG,YAAY,CA+CjF;AAED,gFAAgF;AAChF,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,WAAW,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,WAAW,GAAG,QAAQ,CAAC;IACrD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,6EAA6E;IAC7E,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3C;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,iBAAiB,CAAC;IACvC,QAAQ,CAAC,OAAO,CAAC,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAqED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,EAAE,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,mBAAmB,CAuB5G;AAiJD;;;;;;;;;;GAUG;AACH;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,mBAAmB,GAC3B,OAAO,GACP,aAAa,GACb,mBAAmB,GACnB,aAAa,GACb,kBAAkB,CAAC;AAEvB,MAAM,WAAW,0BAA0B;IACzC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,mBAAmB,CAAC;IAC7B,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,4EAA4E;AAC5E,MAAM,MAAM,yBAAyB,GAAG,CACtC,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,KACjB,OAAO,CAAC,0BAA0B,CAAC,CAAC;AAkDzC;;;;;;;;;;;GAWG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,OAAO,GAAG,0BAA0B,CAgCxF;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,4BAA4B,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAqCpE;AAiCD,wBAAsB,8BAA8B,CAClD,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE,yBAA4D,GACpE,OAAO,CAAC,0BAA0B,CAAC,CAyErC;AA0BD,wBAAsB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAqCvE;AAED,wBAAsB,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CA+BtG;AAwBD,gFAAgF;AAChF,MAAM,WAAW,kBAAkB;IACjC,4EAA4E;IAC5E,SAAS,EAAE,OAAO,CAAC;IACnB,sEAAsE;IACtE,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,8EAA8E;IAC9E,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,2EAA2E;IAC3E,mBAAmB,EAAE,MAAM,EAAE,CAAC;CAC/B;AAYD;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAEjE;AAuED,wBAAgB,mBAAmB,IAAI,kBAAkB,GAAG,OAAO,CA8FlE;AAED,wBAAgB,sBAAsB,CAAC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAqGtE;AAocD;;;;;;;;;GASG;AACH,wBAAgB,4BAA4B,IAAI,IAAI,CAEnD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,8BAA8B,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAoBzE;AAED;;;;GAIG;AACH,wBAAgB,gCAAgC,IAAI;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,CAO9F;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,WAAW,0BAA0B;IACzC,qEAAqE;IACrE,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,iFAAiF;IACjF,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,8EAA8E;IAC9E,QAAQ,CAAC,OAAO,EAAE,SAAS;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC9D;AAgBD,wBAAgB,oCAAoC,IAAI,0BAA0B,CAoMjF;AAiCD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,gBAAgB,GAAG,SAAS,GAAG,SAAS,CAAC;CAC/D;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,YAAY,EACnB,OAAO,GAAE;IAAE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAO,GACnE,OAAO,CAAC,eAAe,CAAC,CAyB1B;AAED;yEACyE;AACzE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,CAAC,OAAO,EACZ,UAAU,GACV,mBAAmB,GACnB,mBAAmB,GACnB,UAAU,GACV,eAAe,GACf,oBAAoB,GACpB,aAAa,CAAC;IAClB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,QAAQ,EAAE,SAAS,oBAAoB,EAAE,CAAC;IACnD,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IAEjC,YAAY,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,oBAAoB,EAAE,EAKrE;CACF;AAmDD,kFAAkF;AAClF,wBAAsB,aAAa,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,YAAY,GAAG,IAAI,CAAC;IAAC,QAAQ,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAAC,mBAAmB,EAAE,SAAS,YAAY,EAAE,CAAA;CAAE,CAAC,CA8JtN;AAkGD;;;;;;;;;GASG;AACH;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,UAAU,GAAG,SAAS,EAC5B,mBAAmB,EAAE,MAAM,EAC3B,OAAO,EAAE,MAAM,GACd,MAAM,CAER;AAqTD,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,eAAe,CAAC;IAC5B,YAAY,EAAE,kBAAkB,CAAC;IACjC,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;0FACsF;IACtF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,wEAAwE;IACxE,WAAW,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAClC;+EAC2E;IAC3E,OAAO,CAAC,EAAE,oBAAoB,CAAC;IAC/B;;;;kBAIc;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,yEAAyE;AACzE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,qFAAqF;IACrF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;;6CAEyC;IACzC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AAoCD,MAAM,WAAW,cAAc;IAC7B,qEAAqE;IACrE,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,6EAA6E;IAC7E,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAsBD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC;;;;;OAKG;IACH,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAC1C;;;;OAIG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC;;;;OAIG;IACH,QAAQ,CAAC,oBAAoB,EAAE,6BAA6B,CAAC;IAC7D,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,6HAA6H;IAC7H,QAAQ,CAAC,2BAA2B,EAAE,2BAA2B,CAAC;IAClE;;;;OAIG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,EAAE,OAAO,CAAC;IAClB,mFAAmF;IACnF,SAAS,EAAE,gBAAgB,GAAG,IAAI,CAAC;CACpC;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,6BAA6B,GAAG,UAAU,GAAG,gBAAgB,CAAC;AAE1E,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,oBAAoB,EAAE,6BAA6B,CAAC;IAC7D,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,2BAA2B,EAAE,2BAA2B,CAAC;CACnE;AAqDD,mFAAmF;AACnF,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,mBAAmB,CAAC,EAAE,wBAAwB,GAAG,gBAAgB,CAYzH;AAED;;;;GAIG;AAEH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,gBAAgB,EACzB,IAAI,EAAE,gBAAgB,GAAG,IAAI,EAC7B,EAAE,EAAE,gBAAgB,EACpB,MAAM,EAAE,MAAM,GACb,IAAI,CAqBN;AAED,oFAAoF;AAEpF,wBAAgB,mCAAmC,CACjD,OAAO,EAAE,gBAAgB,EACzB,IAAI,EAAE,gBAAgB,GAAG,IAAI,EAC7B,EAAE,EAAE,gBAAgB,EACpB,MAAM,EAAE,MAAM,GACb,IAAI,CAYN;AAQD,wBAAsB,OAAO,CAC3B,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE,cAAmB,EAMzB,WAAW,CAAC,EAAE,gBAAgB,GAC7B,OAAO,CAAC,aAAa,CAAC,CA86BxB"}