crewly 1.20.106 → 1.20.107

package/dist/cli/cli/src/utils/runtime-auth.d.ts

@@ -0,0 +1,130 @@
+/**
+ * Is an AI runtime (Claude Code, Codex, Gemini CLI) installed AND logged in?
+ *
+ * `crewly doctor` used to say "All checks passed" on machines where no agent
+ * could ever start (#779). An agent needs a runtime binary on PATH and a
+ * saved login; without the login it stops at a sign-in screen.
+ *
+ * Detection only reads files and environment variable NAMES; it never prints
+ * or returns a secret value.
+ *
+ * - Claude Code: first-run setup finished (`hasCompletedOnboarding`, the #782
+ *   check) plus a credential: an OAuth account in its config, an API key in
+ *   its config, a credentials file, an `apiKeyHelper`, or an auth env var.
+ * - Codex: `$CODEX_HOME/auth.json` (default `~/.codex`) holds tokens or an
+ *   API key (written by `codex login`).
+ * - Gemini CLI: an auth method saved in `~/.gemini/settings.json` with its
+ *   credential present, or a Gemini API key Crewly can hand it — Crewly then
+ *   pre-selects "Use Gemini API Key" at launch (#781).
+ *
+ * @module cli/utils/runtime-auth
+ */
+/** Result for one runtime. */
+export interface RuntimeAuthStatus {
+    /** Stable id: `claude`, `codex`, `gemini` */
+    id: RuntimeId;
+    /** Display name */
+    displayName: string;
+    /** Binary on PATH */
+    installed: boolean;
+    /** Installed and a usable login was found */
+    loggedIn: boolean;
+    /** What was found (never a secret) */
+    detail: string;
+    /** Command that fixes it (install and/or log in) */
+    fix: string;
+}
+/** Runtimes doctor checks. */
+export type RuntimeId = 'claude' | 'codex' | 'gemini';
+/** Inputs, injectable for tests. */
+export interface RuntimeAuthDeps {
+    /** PATH lookup */
+    which: (bin: string) => boolean;
+    /** Home directory */
+    homeDir: string;
+    /** Environment */
+    env: NodeJS.ProcessEnv;
+}
+/** Static facts about each runtime. */
+export declare const RUNTIME_AUTH_INFO: {
+    readonly claude: {
+        readonly displayName: "Claude Code";
+        readonly bin: "claude";
+        readonly install: "npm install -g @anthropic-ai/claude-code";
+        readonly login: "run `claude` once in a terminal: choose a theme and log in (or /login)";
+        /** Env vars that authenticate Claude Code without a saved login */
+        readonly authEnv: readonly ["ANTHROPIC_API_KEY", "ANTHROPIC_AUTH_TOKEN", "CLAUDE_CODE_OAUTH_TOKEN", "CLAUDE_CODE_USE_BEDROCK", "CLAUDE_CODE_USE_VERTEX"];
+        readonly configDirEnv: "CLAUDE_CONFIG_DIR";
+        readonly configFile: ".claude.json";
+        readonly onboardedKey: "hasCompletedOnboarding";
+        /** Config keys that record a login */
+        readonly loginKeys: readonly ["oauthAccount", "primaryApiKey"];
+        /** Claude's data directory under $HOME (unless CLAUDE_CONFIG_DIR is set) */
+        readonly dataDir: ".claude";
+        /** Credentials file (Linux; macOS keeps it in the Keychain) */
+        readonly credentialsFile: ".credentials.json";
+        readonly settingsFile: "settings.json";
+    };
+    readonly codex: {
+        readonly displayName: "Codex CLI";
+        readonly bin: "codex";
+        readonly install: "npm install -g @openai/codex";
+        readonly login: "codex login   (API key: printenv OPENAI_API_KEY | codex login --with-api-key)";
+        readonly homeEnv: "CODEX_HOME";
+        readonly homeDir: ".codex";
+        readonly authFile: "auth.json";
+    };
+    readonly gemini: {
+        readonly displayName: "Gemini CLI";
+        readonly bin: "gemini";
+        readonly install: "npm install -g @google/gemini-cli";
+        readonly login: "run `gemini` once and choose \"Login with Google\", or set GEMINI_API_KEY (or add a Gemini key in Crewly Settings)";
+        /** Env vars Crewly reads a Gemini key from (API_KEY_ENV_VARS.gemini) */
+        readonly keyEnv: readonly ["GOOGLE_GENERATIVE_AI_API_KEY", "GEMINI_API_KEY"];
+        readonly settingsFile: string;
+        readonly oauthCredsFile: string;
+        /** Gemini's Google-login auth types */
+        readonly googleLoginTypes: readonly ["oauth-personal", "login-with-google"];
+        /** Crewly settings file holding API keys */
+        readonly crewlySettingsFile: string;
+        /** Runtime id under apiKeys.runtimeOverrides */
+        readonly crewlyRuntimeId: "gemini-cli";
+    };
+};
+/**
+ * Claude Code login state.
+ *
+ * @param deps - Inputs
+ * @returns Status
+ */
+export declare function checkClaudeAuth(deps: RuntimeAuthDeps): RuntimeAuthStatus;
+/**
+ * Codex CLI login state.
+ *
+ * @param deps - Inputs
+ * @returns Status
+ */
+export declare function checkCodexAuth(deps: RuntimeAuthDeps): RuntimeAuthStatus;
+/**
+ * Whether Crewly has a Gemini API key it hands to Gemini sessions (settings
+ * global key or a gemini-cli runtime override, else the env).
+ *
+ * @param deps - Inputs
+ * @returns Where the key comes from, or null
+ */
+export declare function findCrewlyGeminiKey(deps: RuntimeAuthDeps): string | null;
+/**
+ * Gemini CLI login state.
+ *
+ * @param deps - Inputs
+ * @returns Status
+ */
+export declare function checkGeminiAuth(deps: RuntimeAuthDeps): RuntimeAuthStatus;
+/**
+ * Check every runtime.
+ *
+ * @param deps - Inputs
+ * @returns Claude, Codex, Gemini — in that order
+ */
+export declare function checkRuntimeAuth(deps: RuntimeAuthDeps): RuntimeAuthStatus[];
+//# sourceMappingURL=runtime-auth.d.ts.map

package/dist/cli/cli/src/utils/runtime-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-auth.d.ts","sourceRoot":"","sources":["../../../../../cli/src/utils/runtime-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AASH,8BAA8B;AAC9B,MAAM,WAAW,iBAAiB;IACjC,6CAA6C;IAC7C,EAAE,EAAE,SAAS,CAAC;IACd,mBAAmB;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,qBAAqB;IACrB,SAAS,EAAE,OAAO,CAAC;IACnB,6CAA6C;IAC7C,QAAQ,EAAE,OAAO,CAAC;IAClB,sCAAsC;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,oDAAoD;IACpD,GAAG,EAAE,MAAM,CAAC;CACZ;AAED,8BAA8B;AAC9B,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAC;AAEtD,oCAAoC;AACpC,MAAM,WAAW,eAAe;IAC/B,kBAAkB;IAClB,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IAChC,qBAAqB;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB;IAClB,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;CACvB;AAED,uCAAuC;AACvC,eAAO,MAAM,iBAAiB;;;;;;QAM5B,mEAAmE;;;;;QAKnE,sCAAsC;;QAEtC,4EAA4E;;QAE5E,+DAA+D;;;;;;;;;;;;;;;;;;QAkB/D,wEAAwE;;;;QAIxE,uCAAuC;;QAEvC,4CAA4C;;QAE5C,gDAAgD;;;CAGxC,CAAC;AAkDX;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,eAAe,GAAG,iBAAiB,CAgCxE;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,eAAe,GAAG,iBAAiB,CAYvE;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,eAAe,GAAG,MAAM,GAAG,IAAI,CAexE;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,eAAe,GAAG,iBAAiB,CAiCxE;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,eAAe,GAAG,iBAAiB,EAAE,CAE3E"}

package/dist/cli/cli/src/utils/runtime-auth.js

@@ -0,0 +1,248 @@
+/**
+ * Is an AI runtime (Claude Code, Codex, Gemini CLI) installed AND logged in?
+ *
+ * `crewly doctor` used to say "All checks passed" on machines where no agent
+ * could ever start (#779). An agent needs a runtime binary on PATH and a
+ * saved login; without the login it stops at a sign-in screen.
+ *
+ * Detection only reads files and environment variable NAMES; it never prints
+ * or returns a secret value.
+ *
+ * - Claude Code: first-run setup finished (`hasCompletedOnboarding`, the #782
+ *   check) plus a credential: an OAuth account in its config, an API key in
+ *   its config, a credentials file, an `apiKeyHelper`, or an auth env var.
+ * - Codex: `$CODEX_HOME/auth.json` (default `~/.codex`) holds tokens or an
+ *   API key (written by `codex login`).
+ * - Gemini CLI: an auth method saved in `~/.gemini/settings.json` with its
+ *   credential present, or a Gemini API key Crewly can hand it — Crewly then
+ *   pre-selects "Use Gemini API Key" at launch (#781).
+ *
+ * @module cli/utils/runtime-auth
+ */
+import * as fs from 'fs';
+import * as path from 'path';
+import { GEMINI_API_KEY_AUTH_TYPE, LEGACY_AUTH_TYPE_KEY, } from '../../../backend/src/utils/gemini-auth-settings.js';
+/** Static facts about each runtime. */
+export const RUNTIME_AUTH_INFO = {
+    claude: {
+        displayName: 'Claude Code',
+        bin: 'claude',
+        install: 'npm install -g @anthropic-ai/claude-code',
+        login: 'run `claude` once in a terminal: choose a theme and log in (or /login)',
+        /** Env vars that authenticate Claude Code without a saved login */
+        authEnv: ['ANTHROPIC_API_KEY', 'ANTHROPIC_AUTH_TOKEN', 'CLAUDE_CODE_OAUTH_TOKEN', 'CLAUDE_CODE_USE_BEDROCK', 'CLAUDE_CODE_USE_VERTEX'],
+        configDirEnv: 'CLAUDE_CONFIG_DIR',
+        configFile: '.claude.json',
+        onboardedKey: 'hasCompletedOnboarding',
+        /** Config keys that record a login */
+        loginKeys: ['oauthAccount', 'primaryApiKey'],
+        /** Claude's data directory under $HOME (unless CLAUDE_CONFIG_DIR is set) */
+        dataDir: '.claude',
+        /** Credentials file (Linux; macOS keeps it in the Keychain) */
+        credentialsFile: '.credentials.json',
+        settingsFile: 'settings.json',
+    },
+    codex: {
+        displayName: 'Codex CLI',
+        bin: 'codex',
+        install: 'npm install -g @openai/codex',
+        login: 'codex login   (API key: printenv OPENAI_API_KEY | codex login --with-api-key)',
+        homeEnv: 'CODEX_HOME',
+        homeDir: '.codex',
+        authFile: 'auth.json',
+    },
+    gemini: {
+        displayName: 'Gemini CLI',
+        bin: 'gemini',
+        install: 'npm install -g @google/gemini-cli',
+        login: 'run `gemini` once and choose "Login with Google", or set GEMINI_API_KEY (or add a Gemini key in Crewly Settings)',
+        /** Env vars Crewly reads a Gemini key from (API_KEY_ENV_VARS.gemini) */
+        keyEnv: ['GOOGLE_GENERATIVE_AI_API_KEY', 'GEMINI_API_KEY'],
+        settingsFile: path.join('.gemini', 'settings.json'),
+        oauthCredsFile: path.join('.gemini', 'oauth_creds.json'),
+        /** Gemini's Google-login auth types */
+        googleLoginTypes: ['oauth-personal', 'login-with-google'],
+        /** Crewly settings file holding API keys */
+        crewlySettingsFile: path.join('.crewly', 'settings.json'),
+        /** Runtime id under apiKeys.runtimeOverrides */
+        crewlyRuntimeId: 'gemini-cli',
+    },
+};
+/**
+ * Read and parse a JSON object file.
+ *
+ * @param file - Path
+ * @returns The object, or null when missing / unreadable / not an object
+ */
+function readJsonObject(file) {
+    try {
+        const parsed = JSON.parse(fs.readFileSync(file, 'utf-8'));
+        return parsed !== null && typeof parsed === 'object' && !Array.isArray(parsed) ? parsed : null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Whether a value is present (non-empty string or non-null object).
+ *
+ * @param value - Candidate
+ * @returns True when set
+ */
+function isSet(value) {
+    if (typeof value === 'string')
+        return value.trim().length > 0;
+    return value !== null && typeof value === 'object';
+}
+/**
+ * First env var name (from `names`) that has a value.
+ *
+ * @param env - Environment
+ * @param names - Candidate names
+ * @returns The name, or null
+ */
+function firstSetEnv(env, names) {
+    return names.find((name) => isSet(env[name])) ?? null;
+}
+/**
+ * Fix command: install (when missing) and log in.
+ *
+ * @param info - Runtime facts
+ * @param installed - Binary present
+ * @returns Command text
+ */
+function fixFor(info, installed) {
+    return installed ? info.login : `${info.install}, then ${info.login}`;
+}
+/**
+ * Claude Code login state.
+ *
+ * @param deps - Inputs
+ * @returns Status
+ */
+export function checkClaudeAuth(deps) {
+    const info = RUNTIME_AUTH_INFO.claude;
+    const installed = deps.which(info.bin);
+    const base = { id: 'claude', displayName: info.displayName, installed, fix: fixFor(info, installed) };
+    if (!installed)
+        return { ...base, loggedIn: false, detail: 'not installed' };
+    // CLAUDE_CONFIG_DIR relocates everything: .claude.json, .credentials.json,
+    // settings.json. Without it: ~/.claude.json and ~/.claude/<file>.
+    const customDir = deps.env[info.configDirEnv];
+    const configDir = customDir || deps.homeDir;
+    const dataDir = customDir || path.join(deps.homeDir, info.dataDir);
+    const config = readJsonObject(path.join(configDir, info.configFile));
+    if (!config || config[info.onboardedKey] !== true) {
+        return { ...base, loggedIn: false, detail: 'installed but never set up — agents stop at its theme and login screens' };
+    }
+    const envName = firstSetEnv(deps.env, info.authEnv);
+    const configKey = info.loginKeys.find((key) => isSet(config[key]));
+    const credentials = fs.existsSync(path.join(dataDir, info.credentialsFile));
+    const settings = readJsonObject(path.join(dataDir, info.settingsFile));
+    const helper = settings ? isSet(settings.apiKeyHelper) : false;
+    const source = configKey === 'oauthAccount' ? 'account login'
+        : configKey ? 'API key login'
+            : credentials ? 'credentials file'
+                : helper ? 'apiKeyHelper'
+                    : envName ? `$${envName}`
+                        : null;
+    if (!source) {
+        return { ...base, loggedIn: false, detail: 'set up, but no login found (logged out?)', fix: 'run `claude` and log in with /login' };
+    }
+    return { ...base, loggedIn: true, detail: `set up and logged in (${source})` };
+}
+/**
+ * Codex CLI login state.
+ *
+ * @param deps - Inputs
+ * @returns Status
+ */
+export function checkCodexAuth(deps) {
+    const info = RUNTIME_AUTH_INFO.codex;
+    const installed = deps.which(info.bin);
+    const base = { id: 'codex', displayName: info.displayName, installed, fix: fixFor(info, installed) };
+    if (!installed)
+        return { ...base, loggedIn: false, detail: 'not installed' };
+    const codexHome = deps.env[info.homeEnv] || path.join(deps.homeDir, info.homeDir);
+    const authFile = path.join(codexHome, info.authFile);
+    const auth = readJsonObject(authFile);
+    if (auth && isSet(auth.tokens))
+        return { ...base, loggedIn: true, detail: 'logged in (ChatGPT account)' };
+    if (auth && isSet(auth.OPENAI_API_KEY))
+        return { ...base, loggedIn: true, detail: 'logged in (API key)' };
+    return { ...base, loggedIn: false, detail: `installed but not logged in (no login in ${authFile})` };
+}
+/**
+ * Whether Crewly has a Gemini API key it hands to Gemini sessions (settings
+ * global key or a gemini-cli runtime override, else the env).
+ *
+ * @param deps - Inputs
+ * @returns Where the key comes from, or null
+ */
+export function findCrewlyGeminiKey(deps) {
+    const info = RUNTIME_AUTH_INFO.gemini;
+    const settings = readJsonObject(path.join(deps.homeDir, info.crewlySettingsFile));
+    const apiKeys = settings && typeof settings.apiKeys === 'object' && settings.apiKeys !== null
+        ? settings.apiKeys
+        : null;
+    if (apiKeys) {
+        const overrides = (apiKeys.runtimeOverrides ?? {});
+        const override = overrides[info.crewlyRuntimeId]?.gemini;
+        if (override && override.source === 'custom' && isSet(override.key))
+            return 'Crewly settings (Gemini runtime key)';
+        const global = (apiKeys.global ?? {});
+        if (isSet(global.gemini))
+            return 'Crewly settings';
+    }
+    const envName = firstSetEnv(deps.env, info.keyEnv);
+    return envName ? `$${envName}` : null;
+}
+/**
+ * Gemini CLI login state.
+ *
+ * @param deps - Inputs
+ * @returns Status
+ */
+export function checkGeminiAuth(deps) {
+    const info = RUNTIME_AUTH_INFO.gemini;
+    const installed = deps.which(info.bin);
+    const base = { id: 'gemini', displayName: info.displayName, installed, fix: fixFor(info, installed) };
+    if (!installed)
+        return { ...base, loggedIn: false, detail: 'not installed' };
+    const settings = readJsonObject(path.join(deps.homeDir, info.settingsFile));
+    const security = (settings?.security ?? {});
+    const auth = (security.auth ?? {});
+    const selected = [auth.selectedType, settings?.[LEGACY_AUTH_TYPE_KEY]].find((v) => typeof v === 'string' && v.length > 0) ?? null;
+    const key = findCrewlyGeminiKey(deps);
+    if (selected && info.googleLoginTypes.includes(selected)) {
+        return fs.existsSync(path.join(deps.homeDir, info.oauthCredsFile))
+            ? { ...base, loggedIn: true, detail: 'logged in (Google account)' }
+            : { ...base, loggedIn: false, detail: 'set to "Login with Google", but no saved Google login', fix: 'run `gemini` once and sign in with Google' };
+    }
+    if (selected === GEMINI_API_KEY_AUTH_TYPE || !selected) {
+        if (key) {
+            return {
+                ...base,
+                loggedIn: true,
+                detail: selected ? `API key (${key})` : `API key (${key}); Crewly selects "Use Gemini API Key" at launch`,
+            };
+        }
+        return {
+            ...base,
+            loggedIn: false,
+            detail: selected ? 'set to use an API key, but no Gemini API key is configured' : 'no login and no Gemini API key',
+        };
+    }
+    // Vertex AI, Cloud Shell, compute credentials: configured outside Gemini's files.
+    return { ...base, loggedIn: true, detail: `auth method "${selected}" configured` };
+}
+/**
+ * Check every runtime.
+ *
+ * @param deps - Inputs
+ * @returns Claude, Codex, Gemini — in that order
+ */
+export function checkRuntimeAuth(deps) {
+    return [checkClaudeAuth(deps), checkCodexAuth(deps), checkGeminiAuth(deps)];
+}
+//# sourceMappingURL=runtime-auth.js.map

package/dist/cli/cli/src/utils/runtime-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-auth.js","sourceRoot":"","sources":["../../../../../cli/src/utils/runtime-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EACN,wBAAwB,EACxB,oBAAoB,GACpB,MAAM,oDAAoD,CAAC;AA+B5D,uCAAuC;AACvC,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAChC,MAAM,EAAE;QACP,WAAW,EAAE,aAAa;QAC1B,GAAG,EAAE,QAAQ;QACb,OAAO,EAAE,0CAA0C;QACnD,KAAK,EAAE,wEAAwE;QAC/E,mEAAmE;QACnE,OAAO,EAAE,CAAC,mBAAmB,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,wBAAwB,CAAC;QACtI,YAAY,EAAE,mBAAmB;QACjC,UAAU,EAAE,cAAc;QAC1B,YAAY,EAAE,wBAAwB;QACtC,sCAAsC;QACtC,SAAS,EAAE,CAAC,cAAc,EAAE,eAAe,CAAC;QAC5C,4EAA4E;QAC5E,OAAO,EAAE,SAAS;QAClB,+DAA+D;QAC/D,eAAe,EAAE,mBAAmB;QACpC,YAAY,EAAE,eAAe;KAC7B;IACD,KAAK,EAAE;QACN,WAAW,EAAE,WAAW;QACxB,GAAG,EAAE,OAAO;QACZ,OAAO,EAAE,8BAA8B;QACvC,KAAK,EAAE,+EAA+E;QACtF,OAAO,EAAE,YAAY;QACrB,OAAO,EAAE,QAAQ;QACjB,QAAQ,EAAE,WAAW;KACrB;IACD,MAAM,EAAE;QACP,WAAW,EAAE,YAAY;QACzB,GAAG,EAAE,QAAQ;QACb,OAAO,EAAE,mCAAmC;QAC5C,KAAK,EAAE,kHAAkH;QACzH,wEAAwE;QACxE,MAAM,EAAE,CAAC,8BAA8B,EAAE,gBAAgB,CAAC;QAC1D,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC;QACnD,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC;QACxD,uCAAuC;QACvC,gBAAgB,EAAE,CAAC,gBAAgB,EAAE,mBAAmB,CAAC;QACzD,4CAA4C;QAC5C,kBAAkB,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC;QACzD,gDAAgD;QAChD,eAAe,EAAE,YAAY;KAC7B;CACQ,CAAC;AAEX;;;;;GAKG;AACH,SAAS,cAAc,CAAC,IAAY;IACnC,IAAI,CAAC;QACJ,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QACnE,OAAO,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,MAAkC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7H,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED;;;;;GAKG;AACH,SAAS,KAAK,CAAC,KAAc;IAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9D,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC;AACpD,CAAC;AAED;;;;;;GAMG;AACH,SAAS,WAAW,CAAC,GAAsB,EAAE,KAAwB;IACpE,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AACvD,CAAC;AAED;;;;;;GAMG;AACH,SAAS,MAAM,CAAC,IAAwC,EAAE,SAAkB;IAC3E,OAAO,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,UAAU,IAAI,CAAC,KAAK,EAAE,CAAC;AACvE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,IAAqB;IACpD,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,CAAC;IACtC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,QAAiB,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;IAC/G,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAE7E,2EAA2E;IAC3E,kEAAkE;IAClE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC;IAC5C,MAAM,OAAO,GAAG,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IACrE,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,IAAI,EAAE,CAAC;QACnD,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,yEAAyE,EAAE,CAAC;IACxH,CAAC;IAED,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACnE,MAAM,WAAW,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAE/D,MAAM,MAAM,GAAG,SAAS,KAAK,cAAc,CAAC,CAAC,CAAC,eAAe;QAC5D,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe;YAC5B,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,kBAAkB;gBACjC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc;oBACxB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE;wBACxB,CAAC,CAAC,IAAI,CAAC;IACZ,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,0CAA0C,EAAE,GAAG,EAAE,qCAAqC,EAAE,CAAC;IACrI,CAAC;IACD,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,yBAAyB,MAAM,GAAG,EAAE,CAAC;AAChF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,IAAqB;IACnD,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC;IACrC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,OAAgB,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;IAC9G,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAE7E,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAClF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;IAC1G,IAAI,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IAC1G,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,4CAA4C,QAAQ,GAAG,EAAE,CAAC;AACtG,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAqB;IACxD,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,CAAC;IACtC,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAClF,MAAM,OAAO,GAAG,QAAQ,IAAI,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,IAAI,QAAQ,CAAC,OAAO,KAAK,IAAI;QAC5F,CAAC,CAAE,QAAQ,CAAC,OAAmC;QAC/C,CAAC,CAAC,IAAI,CAAC;IACR,IAAI,OAAO,EAAE,CAAC;QACb,MAAM,SAAS,GAAG,CAAC,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAkF,CAAC;QACpI,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;QACzD,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,sCAAsC,CAAC;QACnH,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAA4B,CAAC;QACjE,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;YAAE,OAAO,iBAAiB,CAAC;IACpD,CAAC;IACD,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACnD,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACvC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,IAAqB;IACpD,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,CAAC;IACtC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,QAAiB,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;IAC/G,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAE7E,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,CAAC,QAAQ,EAAE,QAAQ,IAAI,EAAE,CAA4B,CAAC;IACvE,MAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC;IAC9D,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;IAC/I,MAAM,GAAG,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAEtC,IAAI,QAAQ,IAAK,IAAI,CAAC,gBAAsC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjF,OAAO,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;YACjE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,4BAA4B,EAAE;YACnE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,uDAAuD,EAAE,GAAG,EAAE,2CAA2C,EAAE,CAAC;IACpJ,CAAC;IACD,IAAI,QAAQ,KAAK,wBAAwB,IAAI,CAAC,QAAQ,EAAE,CAAC;QACxD,IAAI,GAAG,EAAE,CAAC;YACT,OAAO;gBACN,GAAG,IAAI;gBACP,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,YAAY,GAAG,GAAG,CAAC,CAAC,CAAC,YAAY,GAAG,kDAAkD;aACzG,CAAC;QACH,CAAC;QACD,OAAO;YACN,GAAG,IAAI;YACP,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,4DAA4D,CAAC,CAAC,CAAC,gCAAgC;SAClH,CAAC;IACH,CAAC;IACD,kFAAkF;IAClF,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,QAAQ,cAAc,EAAE,CAAC;AACpF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAqB;IACrD,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,cAAc,CAAC,IAAI,CAAC,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;AAC7E,CAAC"}

package/dist/cli/cli/src/utils/safe-shutdown.d.ts

@@ -0,0 +1,137 @@
+/**
+ * Safe-shutdown helpers for the CLI.
+ *
+ * The backend drains in-flight agent turns on SIGTERM/SIGINT for up to
+ * CREWLY_RESTART_DRAIN_MS (default 120s). Every CLI path that stops it —
+ * the `start` parent's signal forwarding, `crewly stop`, `crewly service
+ * stop|restart|upgrade` — must wait at least that long (plus a margin for the
+ * rest of shutdown) before escalating to SIGKILL or starting a new instance,
+ * or it cuts off the very turns the drain is protecting.
+ *
+ * @module cli/utils/safe-shutdown
+ */
+/** Pause between the two signals of a "skip the drain" request (ms), beyond the backend's dedup window. */
+export declare const SKIP_DRAIN_SIGNAL_GAP_MS: number;
+/** One busy agent as reported by the backend. */
+export interface ReadinessBusyAgent {
+    session: string;
+    since: string;
+    messagePreview: string;
+}
+/** Body of GET /api/system/restart-readiness. */
+export interface RestartReadiness {
+    safe: boolean;
+    busyAgents: ReadinessBusyAgent[];
+    queued: number;
+    draining?: boolean;
+}
+/**
+ * Resolve the backend's drain timeout from the environment.
+ *
+ * @param env - Environment
+ * @returns Drain timeout in ms (0 = drain disabled)
+ */
+export declare function resolveRestartDrainMs(env?: NodeJS.ProcessEnv): number;
+/**
+ * How long a supervisor must wait after SIGTERM before it may SIGKILL.
+ *
+ * @param env - Environment
+ * @returns Drain timeout plus the shutdown margin (ms)
+ *
+ * @example
+ * ```typescript
+ * resolveShutdownBudgetMs({}); // 150000
+ * ```
+ */
+export declare function resolveShutdownBudgetMs(env?: NodeJS.ProcessEnv): number;
+/**
+ * Validate an unknown JSON body as restart readiness.
+ *
+ * @param body - Parsed response body
+ * @returns The readiness, or null if the shape does not match
+ */
+export declare function parseReadiness(body: unknown): RestartReadiness | null;
+/**
+ * Ask the running backend whether a restart would cut an agent off.
+ *
+ * @param port - Backend web port
+ * @returns Readiness, or null when the backend does not answer (not running, older version)
+ */
+export declare function fetchRestartReadiness(port?: number | string): Promise<RestartReadiness | null>;
+/**
+ * Human-readable lines describing readiness, for printing before a stop.
+ *
+ * @param readiness - Readiness from the backend
+ * @param drainMs - Drain timeout in effect
+ * @returns Lines to print
+ */
+export declare function describeReadiness(readiness: RestartReadiness, drainMs: number): string[];
+/** Dependencies of {@link waitForPidExit}. */
+export interface WaitForExitDeps {
+    /** Whether the pid is alive */
+    isAlive: (pid: number) => boolean | Promise<boolean>;
+    /** Sleep */
+    sleep?: (ms: number) => Promise<void>;
+    /** Clock */
+    now?: () => number;
+    /** Progress callback, called about every PROGRESS_INTERVAL_MS */
+    onProgress?: (waitedMs: number) => void;
+    /** Poll interval (ms) */
+    pollMs?: number;
+}
+/**
+ * Wait for a process to exit.
+ *
+ * @param pid - Process id
+ * @param timeoutMs - Maximum wait
+ * @param deps - Liveness check and test hooks
+ * @returns True if the process exited within the timeout
+ */
+export declare function waitForPidExit(pid: number, timeoutMs: number, deps: WaitForExitDeps): Promise<boolean>;
+/**
+ * Liveness check via signal 0.
+ *
+ * @param pid - Process id
+ * @returns True if the process exists
+ */
+export declare function isPidAlive(pid: number): boolean;
+/** The part of a ChildProcess the shutdown handler uses. */
+export interface ShutdownChild {
+    /** True once any signal was sent (Node sets it after a successful kill()) — not "dead" */
+    killed: boolean;
+    exitCode: number | null;
+    signalCode?: NodeJS.Signals | null;
+    kill(signal?: NodeJS.Signals | number): boolean;
+    once(event: 'exit', listener: (...args: unknown[]) => void): unknown;
+}
+/** Options for {@link createChildShutdownHandler}. */
+export interface ChildShutdownOptions {
+    /** Wait after SIGTERM before SIGKILL (ms) — the backend's drain plus margin */
+    budgetMs: number;
+    /** Progress / status output */
+    log: (message: string) => void;
+    /** Called once every child is gone (or the hard cap passed) */
+    exit: () => void;
+}
+/**
+ * Build the signal handler for a parent process (the `crewly start` CLI)
+ * supervising backend children.
+ *
+ * First signal: SIGTERM each live child, SIGKILL only after `budgetMs`, and
+ * exit once all children are gone. Later signals are forwarded as another
+ * SIGTERM, which the backend reads as "stop draining now" — so a second
+ * `kill -TERM <cli pid>` or Ctrl+C still skips the drain rather than being
+ * swallowed here.
+ *
+ * @param getChildren - Returns the children to stop (the restart loop swaps them)
+ * @param options - Budget, logger, exit hook
+ * @returns Signal handler
+ *
+ * @example
+ * ```typescript
+ * const onSignal = createChildShutdownHandler(() => active, { budgetMs: resolveShutdownBudgetMs(), log, exit: () => process.exit(0) });
+ * process.on('SIGTERM', onSignal);
+ * ```
+ */
+export declare function createChildShutdownHandler(getChildren: () => readonly (ShutdownChild | null | undefined)[], options: ChildShutdownOptions): () => void;
+//# sourceMappingURL=safe-shutdown.d.ts.map

package/dist/cli/cli/src/utils/safe-shutdown.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-shutdown.d.ts","sourceRoot":"","sources":["../../../../../cli/src/utils/safe-shutdown.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAWH,2GAA2G;AAC3G,eAAO,MAAM,wBAAwB,QAAsD,CAAC;AAE5F,iDAAiD;AACjD,MAAM,WAAW,kBAAkB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;CACvB;AAED,iDAAiD;AACjD,MAAM,WAAW,gBAAgB;IAChC,IAAI,EAAE,OAAO,CAAC;IACd,UAAU,EAAE,kBAAkB,EAAE,CAAC;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAMlF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAEpF;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,OAAO,GAAG,gBAAgB,GAAG,IAAI,CAYrE;AAED;;;;;GAKG;AACH,wBAAsB,qBAAqB,CAAC,IAAI,GAAE,MAAM,GAAG,MAA4D,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CASzJ;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAYxF;AAED,8CAA8C;AAC9C,MAAM,WAAW,eAAe;IAC/B,+BAA+B;IAC/B,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrD,YAAY;IACZ,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,YAAY;IACZ,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,iEAAiE;IACjE,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;IACxC,yBAAyB;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,CAgB5G;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAQ/C;AAKD,4DAA4D;AAC5D,MAAM,WAAW,aAAa;IAC7B,0FAA0F;IAC1F,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IACnC,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC;IAChD,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,GAAG,OAAO,CAAC;CACrE;AAED,sDAAsD;AACtD,MAAM,WAAW,oBAAoB;IACpC,+EAA+E;IAC/E,QAAQ,EAAE,MAAM,CAAC;IACjB,+BAA+B;IAC/B,GAAG,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,+DAA+D;IAC/D,IAAI,EAAE,MAAM,IAAI,CAAC;CACjB;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,0BAA0B,CACzC,WAAW,EAAE,MAAM,SAAS,CAAC,aAAa,GAAG,IAAI,GAAG,SAAS,CAAC,EAAE,EAChE,OAAO,EAAE,oBAAoB,GAC3B,MAAM,IAAI,CAiEZ"}