instar 1.3.1343 → 1.3.1344

package/dist/commands/identity.js

@@ -0,0 +1,411 @@
+/**
+ * `instar identity` — replacing an EXISTING agent identity is a command on that machine,
+ * run by the agent after a human yes (a2a-single-agent-identity §1.4).
+ *
+ *   instar identity adopt --from <machine-name-or-id>
+ *       Under the identity lock, FIRST moves the existing identity file(s) and
+ *       `threadline/agent-info.json` aside (`*.superseded-<ISO>`; a present-but-invalid
+ *       file as `identity.json.invalid-<ISO>`) so this machine's observe answer reads
+ *       `not-provisioned` and its stale memory cannot pin; THEN requests the identity from
+ *       the named sibling over `agent-identity-request`; verifies signature, AAD, the sealed
+ *       key hashing to the value and the in-memory keypair check — WITHOUT the
+ *       `reachable-agree` and last-known rules (the human named the source, and this
+ *       machine's memory is precisely what is being corrected); installs; calls the reload
+ *       lever on the running server; restarts a running listener daemon. ANY refusal or
+ *       failure restores every moved file and says so.
+ *
+ *   instar identity init --standalone --i-understand-peers-must-repin
+ *       Mints a NEW identity on a fleet with no usable candidate (provenance
+ *       `minted-by-operator-recovery`). Peers must re-pin the new address.
+ *
+ *   instar identity status
+ *       The on-disk posture + fingerprint (never key material).
+ *
+ * Nothing here ever DELETES an identity file (L12: superseded files are renamed).
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import crypto from 'node:crypto';
+import pc from 'picocolors';
+import { loadConfig } from '../core/Config.js';
+import { MachineIdentityManager, isRegistryEntryActive, sign, verify } from '../core/MachineIdentity.js';
+import { MeshRpcClient } from '../core/MeshRpcClient.js';
+import { installAdoptedIdentity, openAdoptionEnvelope, readAgentIdentityPosture, verifyObserveResponse, } from '../core/AgentIdentityAdoption.js';
+import { AgentIdentityAudit } from '../core/AgentIdentityAudit.js';
+import { withIdentityLock, IdentityLockedError } from '../core/AgentIdentityLock.js';
+import { fingerprintOf } from '../core/AgentIdentityHandover.js';
+import { readIdentityKeyFile, writeFileAtomicOwnerOnly } from '../identity/IdentityKeyFile.js';
+import { generateIdentityKeyPair } from '../threadline/ThreadlineCrypto.js';
+import { restartListener } from './listener.js';
+const IDENTITY_FILES = ['identity.json', path.join('threadline', 'identity.json')];
+const LAST_KNOWN_FILE = path.join('threadline', 'agent-info.json');
+function stamp(now) {
+    return now.toISOString().replace(/[:.]/g, '-');
+}
+/**
+ * Move the existing identity file(s) and the last-known pin aside (rename, never unlink).
+ * A present-but-invalid or encrypted identity file is moved as `.invalid-<ISO>`.
+ */
+export function moveIdentityAside(stateDir, now) {
+    const moved = [];
+    for (const rel of IDENTITY_FILES) {
+        const full = path.join(stateDir, rel);
+        if (!fs.existsSync(full))
+            continue;
+        let usable = false;
+        try {
+            const loaded = readIdentityKeyFile(full, { repair: false });
+            usable = !!loaded && !loaded.encrypted && !!loaded.privateKey;
+        }
+        catch {
+            usable = false;
+        }
+        const to = `${full}.${usable ? 'superseded' : 'invalid'}-${stamp(now)}`;
+        fs.renameSync(full, to);
+        moved.push({ from: full, to });
+    }
+    const lastKnown = path.join(stateDir, LAST_KNOWN_FILE);
+    if (fs.existsSync(lastKnown)) {
+        const to = `${lastKnown}.superseded-${stamp(now)}`;
+        fs.renameSync(lastKnown, to);
+        moved.push({ from: lastKnown, to });
+    }
+    return moved;
+}
+/** Put every moved file back (only the ones that are still at their backup path). */
+export function restoreMoved(moved) {
+    const restored = [];
+    for (const m of moved) {
+        try {
+            if (fs.existsSync(m.to) && !fs.existsSync(m.from)) {
+                fs.renameSync(m.to, m.from);
+                restored.push(m);
+            }
+        }
+        catch {
+            /* a backup that cannot be moved back stays where it is — never deleted */
+        }
+    }
+    return restored;
+}
+/** `instar identity adopt --from <sibling>` — the core, pure over the injected transport. */
+export async function adoptFromSibling(d) {
+    const now = d.now ?? (() => new Date());
+    const nonce = d.mintNonce ?? (() => crypto.randomBytes(12).toString('hex'));
+    const existing = readAgentIdentityPosture(d.stateDir);
+    const voidFill = existing.state === 'not-provisioned';
+    // 1. Under the lock: move the existing files aside so this machine reads not-provisioned.
+    let moved = [];
+    try {
+        moved = withIdentityLock(d.stateDir, () => moveIdentityAside(d.stateDir, now()), d.lockDeps);
+    }
+    catch (err) {
+        const reason = err instanceof IdentityLockedError ? 'identity-locked' : 'move-aside-failed';
+        return { ok: false, reason, detail: err instanceof Error ? err.message : String(err), restored: [] };
+    }
+    const fail = (reason, detail) => {
+        const restored = restoreMoved(moved);
+        d.audit?.append('cli-adopt', { machineId: d.selfMachineId, from: d.from.machineId, ok: false, reason, detail, restored: restored.map((m) => path.basename(m.from)) });
+        return { ok: false, reason, detail, restored };
+    };
+    // 2. Observe the named sibling (signed) for the value it publishes.
+    const obsNonce = nonce();
+    const obs = await d.send({ type: 'agent-identity-observe', agentName: d.agentName, requesterNonce: obsNonce }, 8000);
+    if (!obs.ok)
+        return fail(`observe-${obs.reason}`, obs.reason === 'no-handler' ? `${d.from.nickname} runs an older version without the identity verbs — update it first` : `${d.from.nickname} could not be reached`);
+    const verified = verifyObserveResponse(obs.result, { machineId: d.from.machineId, requesterNonce: obsNonce, nickname: d.from.nickname }, d.verifySig);
+    if (verified.state === 'unreachable')
+        return fail(`observe-${verified.reason ?? 'unverified'}`, `${d.from.nickname}'s answer did not verify against its registered machine key`);
+    if (verified.state !== 'provisioned' || !verified.fingerprint)
+        return fail('source-not-provisioned', `${d.from.nickname} publishes no agent identity; nothing to adopt from it`);
+    const expected = verified.fingerprint;
+    // 3. Request the identity; verify signature, nonce, AAD, key hashing, keypair IN MEMORY.
+    if (!d.ownEncryptionPrivateKeyPem)
+        return fail('no-encryption-key', 'this machine has no X25519 encryption key to open a sealed identity (re-run `instar join`)');
+    const reqNonce = nonce();
+    const req = await d.send({ type: 'agent-identity-request', agentName: d.agentName, expectedFingerprint: expected, requesterNonce: reqNonce }, 15000);
+    if (!req.ok)
+        return fail(`request-${req.reason}`, `the request to ${d.from.nickname} failed (${req.reason})`);
+    const opened = openAdoptionEnvelope({
+        response: req.result,
+        responderMachineId: d.from.machineId,
+        selfMachineId: d.selfMachineId,
+        expectedFingerprint: expected,
+        requesterNonce: reqNonce,
+        ownEncryptionPrivateKeyPem: d.ownEncryptionPrivateKeyPem,
+        verifySig: d.verifySig,
+    });
+    if (!opened.ok) {
+        const reason = opened.rejection === 'refused' ? `refused:${opened.refusal ?? 'unknown'}` : opened.rejection;
+        return fail(reason, `${d.from.nickname} answered ${reason}`);
+    }
+    // 4. Install (void-fill — the files were moved aside, so a present file means a race).
+    const installed = installAdoptedIdentity({
+        stateDir: d.stateDir,
+        identity: opened.identity,
+        origin: 'adopted-by-operator',
+        selfMachineId: d.selfMachineId,
+        adoptedFrom: opened.adoptedFrom,
+        producedBy: 'instar identity adopt',
+        lockDeps: d.lockDeps,
+    });
+    if (!installed.ok)
+        return fail(installed.reason, installed.detail ?? installed.reason);
+    // 5. The reload lever on the running server (nothing if no server is up — the next boot
+    //    loads the new file), then a running listener daemon is restarted (stop + start).
+    const reloaded = await d.reload();
+    let listenerRestarted = false;
+    if (d.listenerRunning()) {
+        try {
+            await d.restartListener();
+            listenerRestarted = true;
+        }
+        catch {
+            listenerRestarted = false;
+        }
+    }
+    d.audit?.append('cli-adopt', { machineId: d.selfMachineId, from: d.from.machineId, ok: true, fingerprint: installed.fingerprint, voidFill, movedAside: moved.map((m) => path.basename(m.to)), reloaded: reloaded.ok, listenerRestarted });
+    return { ok: true, fingerprint: installed.fingerprint, movedAside: moved, reloaded, listenerRestarted, voidFill };
+}
+/** `instar identity init --standalone --i-understand-peers-must-repin` — the core. */
+export async function initStandalone(d) {
+    if (!d.acknowledged) {
+        return { ok: false, reason: 'not-acknowledged', detail: 'a new identity is a NEW address: every peer must re-pin it. Re-run with --i-understand-peers-must-repin to confirm.', restored: [] };
+    }
+    const now = d.now ?? (() => new Date());
+    let moved = [];
+    let fingerprint = '';
+    try {
+        withIdentityLock(d.stateDir, () => {
+            moved = moveIdentityAside(d.stateDir, now());
+            // Deliberate operator mint — the one minting site outside the guarded primitives
+            // (listed in the mint-site census by file).
+            const kp = generateIdentityKeyPair();
+            fingerprint = fingerprintOf(kp.publicKey.toString('base64'));
+            const file = {
+                version: 1,
+                publicKey: kp.publicKey.toString('base64'),
+                privateKey: kp.privateKey.toString('base64'),
+                privateKeyEncryption: 'none',
+                createdAt: now().toISOString(),
+                provenance: {
+                    schemaVersion: 1,
+                    origin: 'minted-by-operator-recovery',
+                    rootFingerprint: fingerprint,
+                    machineId: d.selfMachineId ?? 'standalone',
+                    createdAt: now().toISOString(),
+                    producedBy: 'instar identity init --standalone',
+                },
+            };
+            writeFileAtomicOwnerOnly(path.join(d.stateDir, 'identity.json'), JSON.stringify(file, null, 2) + '\n');
+        }, d.lockDeps);
+    }
+    catch (err) {
+        const restored = restoreMoved(moved);
+        const reason = err instanceof IdentityLockedError ? 'identity-locked' : 'mint-failed';
+        d.audit?.append('cli-init-standalone', { machineId: d.selfMachineId, ok: false, reason, restored: restored.map((m) => path.basename(m.from)) });
+        return { ok: false, reason, detail: err instanceof Error ? err.message : String(err), restored };
+    }
+    const reloaded = await d.reload();
+    let listenerRestarted = false;
+    if (d.listenerRunning()) {
+        try {
+            await d.restartListener();
+            listenerRestarted = true;
+        }
+        catch {
+            listenerRestarted = false;
+        }
+    }
+    d.audit?.append('cli-init-standalone', { machineId: d.selfMachineId, ok: true, fingerprint, movedAside: moved.map((m) => path.basename(m.to)), reloaded: reloaded.ok, listenerRestarted });
+    return { ok: true, fingerprint, movedAside: moved, reloaded, listenerRestarted };
+}
+function resolveSibling(mgr, selfId, nameOrId) {
+    const byNick = mgr.resolveNickname(nameOrId);
+    const registry = mgr.loadRegistry();
+    const id = byNick ?? Object.entries(registry.machines).find(([mid, e]) => isRegistryEntryActive(e) && mid !== selfId && (e.name === nameOrId || mid === nameOrId || mid.startsWith(nameOrId)))?.[0] ?? null;
+    if (!id || id === selfId)
+        return null;
+    const e = registry.machines[id];
+    return { machineId: id, nickname: e?.nickname ?? e?.name ?? id };
+}
+function peerUrlOf(mgr, machineId) {
+    const direct = mgr.getMachineUrl(machineId);
+    if (direct)
+        return direct;
+    const endpoints = mgr.getMachineEndpoints(machineId) ?? [];
+    for (const ep of endpoints)
+        if (typeof ep?.url === 'string' && ep.url)
+            return ep.url;
+    return null;
+}
+/** POST /agent-identity/reload on the local server, if one is up. */
+async function reloadOnLocalServer(config) {
+    const port = config.port ?? 4040;
+    try {
+        const r = await fetch(`http://127.0.0.1:${port}/agent-identity/reload`, {
+            method: 'POST',
+            headers: { Authorization: `Bearer ${config.authToken ?? ''}`, 'Content-Type': 'application/json' },
+            body: '{}',
+            signal: AbortSignal.timeout(15_000),
+        });
+        const j = (await r.json().catch(() => ({})));
+        if (!r.ok)
+            return { ok: false, detail: `server answered ${r.status}${j.error ? ` (${j.error})` : ''}` };
+        return { ok: true, detail: `server reloaded (${j.fingerprint ?? 'no fingerprint'}; ${j.connected ? 'relay connected' : j.reason ?? 'not connected'})` };
+    }
+    catch {
+        return { ok: false, detail: 'no server is up on this machine — the next boot loads the new file' };
+    }
+}
+function listenerRunningIn(stateDir) {
+    try {
+        const pid = parseInt(fs.readFileSync(path.join(stateDir, 'listener-daemon.pid'), 'utf-8').trim(), 10);
+        if (!Number.isFinite(pid) || pid <= 0)
+            return false;
+        process.kill(pid, 0);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function describeMoved(moved) {
+    return moved.length ? moved.map((m) => `    ${path.basename(m.from)} → ${path.basename(m.to)}`).join('\n') : '    (nothing to move — the identity slot was empty)';
+}
+export async function identityAdopt(options) {
+    let config;
+    try {
+        config = loadConfig(options.dir);
+    }
+    catch {
+        console.log(pc.red('Not initialized. Run `instar init` first.'));
+        process.exit(1);
+    }
+    if (!options.from) {
+        console.log(pc.red('Name the sibling to adopt from: instar identity adopt --from <machine-name-or-id>'));
+        process.exit(1);
+    }
+    const mgr = new MachineIdentityManager(config.stateDir);
+    if (!mgr.hasIdentity()) {
+        console.log(pc.red('This machine is not paired (no machine identity). Pair it first with `instar join`.'));
+        process.exit(1);
+    }
+    const self = mgr.loadIdentity();
+    const from = resolveSibling(mgr, self.machineId, options.from);
+    if (!from) {
+        console.log(pc.red(`No ACTIVE sibling named "${options.from}" in the machine registry.`));
+        process.exit(1);
+    }
+    const url = peerUrlOf(mgr, from.machineId);
+    if (!url) {
+        console.log(pc.red(`${from.nickname} has no known URL in the registry; it must be online and reachable.`));
+        process.exit(1);
+    }
+    const signingPem = mgr.loadSigningKey();
+    let n = 0;
+    const client = new MeshRpcClient({ selfMachineId: self.machineId, sign: (c) => sign(c, signingPem), nonce: () => `${self.machineId}:idcli:${Date.now()}:${++n}` });
+    const send = async (cmd, timeoutMs) => {
+        try {
+            const r = await client.send({ machineId: from.machineId, url }, cmd, 0, { timeoutMs });
+            if (r.ok)
+                return { ok: true, result: r.result };
+            return { ok: false, reason: r.reason === 'no-handler' ? 'no-handler' : 'transport' };
+        }
+        catch {
+            return { ok: false, reason: 'transport' };
+        }
+    };
+    console.log(pc.blue(`Adopting the agent identity ${from.nickname} publishes onto this machine (${self.name ?? self.machineId})…`));
+    const result = await adoptFromSibling({
+        stateDir: config.stateDir,
+        agentName: config.projectName,
+        selfMachineId: self.machineId,
+        from,
+        send,
+        verifySig: (machineId, canonical, sig) => {
+            const pem = mgr.getSigningPublicKeyPem(machineId);
+            if (!pem)
+                return false;
+            try {
+                return verify(canonical, sig, pem);
+            }
+            catch {
+                return false;
+            }
+        },
+        ownEncryptionPrivateKeyPem: (() => { try {
+            return mgr.loadEncryptionKey();
+        }
+        catch {
+            return null;
+        } })(),
+        reload: () => reloadOnLocalServer(config),
+        listenerRunning: () => listenerRunningIn(config.stateDir),
+        restartListener: () => restartListener({ dir: options.dir }),
+        audit: new AgentIdentityAudit(config.stateDir),
+    });
+    if (!result.ok) {
+        console.log(pc.red(`  Refused (${result.reason}): ${result.detail}`));
+        console.log(pc.dim(`  Restored ${result.restored.length} moved file(s); nothing was changed.`));
+        process.exit(1);
+    }
+    console.log(pc.green(`  Installed ${result.fingerprint} (adopted-by-operator, from ${from.nickname}).`));
+    console.log(pc.dim('  Moved aside (kept, never deleted):\n' + describeMoved(result.movedAside)));
+    console.log(pc.dim(`  Reload: ${result.reloaded.detail}`));
+    if (result.listenerRestarted)
+        console.log(pc.dim('  Listener daemon restarted under the new key.'));
+}
+export async function identityInit(options) {
+    let config;
+    try {
+        config = loadConfig(options.dir);
+    }
+    catch {
+        console.log(pc.red('Not initialized. Run `instar init` first.'));
+        process.exit(1);
+    }
+    if (!options.standalone) {
+        console.log(pc.red('`instar identity init` only mints with --standalone (a fleet with no usable candidate). To copy a sibling\'s identity use `instar identity adopt --from <machine>`.'));
+        process.exit(1);
+    }
+    const mgr = new MachineIdentityManager(config.stateDir);
+    const selfId = mgr.hasIdentity() ? mgr.loadIdentity().machineId : null;
+    const result = await initStandalone({
+        stateDir: config.stateDir,
+        selfMachineId: selfId,
+        acknowledged: options.iUnderstandPeersMustRepin === true,
+        reload: () => reloadOnLocalServer(config),
+        listenerRunning: () => listenerRunningIn(config.stateDir),
+        restartListener: () => restartListener({ dir: options.dir }),
+        audit: new AgentIdentityAudit(config.stateDir),
+    });
+    if (!result.ok) {
+        console.log(pc.red(`  Refused (${result.reason}): ${result.detail}`));
+        process.exit(1);
+    }
+    console.log(pc.green(`  Minted a NEW agent identity ${result.fingerprint} (minted-by-operator-recovery).`));
+    console.log(pc.yellow('  Every peer that pinned the old address must re-pin this one.'));
+    console.log(pc.dim('  Moved aside (kept, never deleted):\n' + describeMoved(result.movedAside)));
+    console.log(pc.dim(`  Reload: ${result.reloaded.detail}`));
+    if (result.listenerRestarted)
+        console.log(pc.dim('  Listener daemon restarted under the new key.'));
+}
+export async function identityStatus(options) {
+    let config;
+    try {
+        config = loadConfig(options.dir);
+    }
+    catch {
+        console.log(pc.red('Not initialized. Run `instar init` first.'));
+        process.exit(1);
+    }
+    const posture = readAgentIdentityPosture(config.stateDir);
+    if (posture.state === 'provisioned')
+        console.log(`${pc.green('provisioned')}  fingerprint ${posture.fingerprint}  (${path.relative(config.stateDir, posture.path)})`);
+    else if (posture.state === 'invalid')
+        console.log(`${pc.red('invalid')}  ${posture.path}: ${posture.reason} — \`instar identity adopt --from <sibling>\` moves it aside and installs the fleet's identity`);
+    else
+        console.log(`${pc.yellow('not-provisioned')}  no agent identity on this machine — a paired machine adopts it from a sibling automatically; a standalone one mints with \`instar identity init --standalone --i-understand-peers-must-repin\``);
+}
+//# sourceMappingURL=identity.js.map

package/dist/commands/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../src/commands/identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACzG,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzD,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,wBAAwB,EACxB,qBAAqB,GAGtB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAyB,MAAM,8BAA8B,CAAC;AAC5G,OAAO,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAC/F,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AA8BhD,MAAM,cAAc,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC,CAAC;AACnF,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAC;AAEnE,SAAS,KAAK,CAAC,GAAS;IACtB,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;AACjD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,GAAS;IAC3D,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QACnC,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5D,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,KAAK,CAAC;QACjB,CAAC;QACD,MAAM,EAAE,GAAG,GAAG,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACxE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACjC,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IACvD,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,MAAM,EAAE,GAAG,GAAG,SAAS,eAAe,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACnD,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,YAAY,CAAC,KAAkB;IAC7C,MAAM,QAAQ,GAAgB,EAAE,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClD,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;gBAC5B,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,0EAA0E;QAC5E,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,CAAuB;IAC5D,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,CAAC,CAAC,SAAS,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,wBAAwB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,KAAK,iBAAiB,CAAC;IAEtD,0FAA0F;IAC1F,IAAI,KAAK,GAAgB,EAAE,CAAC;IAC5B,IAAI,CAAC;QACH,KAAK,GAAG,gBAAgB,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC/F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,YAAY,mBAAmB,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,mBAAmB,CAAC;QAC5F,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACvG,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,MAAc,EAAe,EAAE;QAC3D,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;QACtK,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACjD,CAAC,CAAC;IAEF,oEAAoE;IACpE,MAAM,QAAQ,GAAG,KAAK,EAAE,CAAC;IACzB,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,cAAc,EAAE,QAAQ,EAA2B,EAAE,IAAI,CAAC,CAAC;IAC9I,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,WAAW,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,MAAM,KAAK,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,qEAAqE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,uBAAuB,CAAC,CAAC;IACrN,MAAM,QAAQ,GAAG,qBAAqB,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;IACtJ,IAAI,QAAQ,CAAC,KAAK,KAAK,aAAa;QAAE,OAAO,IAAI,CAAC,WAAW,QAAQ,CAAC,MAAM,IAAI,YAAY,EAAE,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,6DAA6D,CAAC,CAAC;IACjL,IAAI,QAAQ,CAAC,KAAK,KAAK,aAAa,IAAI,CAAC,QAAQ,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,wDAAwD,CAAC,CAAC;IACjL,MAAM,QAAQ,GAAG,QAAQ,CAAC,WAAW,CAAC;IAEtC,yFAAyF;IACzF,IAAI,CAAC,CAAC,CAAC,0BAA0B;QAAE,OAAO,IAAI,CAAC,mBAAmB,EAAE,4FAA4F,CAAC,CAAC;IAClK,MAAM,QAAQ,GAAG,KAAK,EAAE,CAAC;IACzB,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,mBAAmB,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAA2B,EAAE,KAAK,CAAC,CAAC;IAC9K,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,WAAW,GAAG,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,IAAI,CAAC,QAAQ,YAAY,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9G,MAAM,MAAM,GAAG,oBAAoB,CAAC;QAClC,QAAQ,EAAE,GAAG,CAAC,MAAM;QACpB,kBAAkB,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS;QACpC,aAAa,EAAE,CAAC,CAAC,aAAa;QAC9B,mBAAmB,EAAE,QAAQ;QAC7B,cAAc,EAAE,QAAQ;QACxB,0BAA0B,EAAE,CAAC,CAAC,0BAA0B;QACxD,SAAS,EAAE,CAAC,CAAC,SAAS;KACvB,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,MAAM,CAAC,OAAO,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;QAC5G,OAAO,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,aAAa,MAAM,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,uFAAuF;IACvF,MAAM,SAAS,GAAG,sBAAsB,CAAC;QACvC,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,qBAAqB;QAC7B,aAAa,EAAE,CAAC,CAAC,aAAa;QAC9B,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,UAAU,EAAE,uBAAuB;QACnC,QAAQ,EAAE,CAAC,CAAC,QAAQ;KACrB,CAAC,CAAC;IACH,IAAI,CAAC,SAAS,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC;IAEvF,wFAAwF;IACxF,sFAAsF;IACtF,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;IAClC,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,IAAI,CAAC,CAAC,eAAe,EAAE,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,CAAC,CAAC,eAAe,EAAE,CAAC;YAC1B,iBAAiB,GAAG,IAAI,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB,GAAG,KAAK,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC1O,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAC;AACpH,CAAC;AAkBD,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,CAAqB;IACxD,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC;QACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,qHAAqH,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAChM,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACxC,IAAI,KAAK,GAAgB,EAAE,CAAC;IAC5B,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,IAAI,CAAC;QACH,gBAAgB,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE;YAChC,KAAK,GAAG,iBAAiB,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;YAC7C,iFAAiF;YACjF,4CAA4C;YAC5C,MAAM,EAAE,GAAG,uBAAuB,EAAE,CAAC;YACrC,WAAW,GAAG,aAAa,CAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC7D,MAAM,IAAI,GAAG;gBACX,OAAO,EAAE,CAAC;gBACV,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAC1C,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAC5C,oBAAoB,EAAE,MAAM;gBAC5B,SAAS,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE;gBAC9B,UAAU,EAAE;oBACV,aAAa,EAAE,CAAC;oBAChB,MAAM,EAAE,6BAA6B;oBACrC,eAAe,EAAE,WAAW;oBAC5B,SAAS,EAAE,CAAC,CAAC,aAAa,IAAI,YAAY;oBAC1C,SAAS,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE;oBAC9B,UAAU,EAAE,mCAAmC;iBAChD;aACF,CAAC;YACF,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,eAAe,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACzG,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;IACjB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,GAAG,YAAY,mBAAmB,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,aAAa,CAAC;QACtF,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,qBAAqB,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,aAAa,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;QAChJ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC;IACnG,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;IAClC,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,IAAI,CAAC,CAAC,eAAe,EAAE,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,CAAC,CAAC,eAAe,EAAE,CAAC;YAC1B,iBAAiB,GAAG,IAAI,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB,GAAG,KAAK,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,qBAAqB,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,aAAa,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC3L,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC;AACnF,CAAC;AAWD,SAAS,cAAc,CAAC,GAA2B,EAAE,MAAc,EAAE,QAAgB;IACnF,MAAM,MAAM,GAAG,GAAG,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,EAAE,CAAC;IACpC,MAAM,EAAE,GAAG,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAC5M,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAChC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,IAAI,CAAC,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;AACnE,CAAC;AAED,SAAS,SAAS,CAAC,GAA2B,EAAE,SAAiB;IAC/D,MAAM,MAAM,GAAG,GAAG,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,SAAS,GAAG,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IAC3D,KAAK,MAAM,EAAE,IAAI,SAAoC;QAAE,IAAI,OAAO,EAAE,EAAE,GAAG,KAAK,QAAQ,IAAI,EAAE,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC,GAAG,CAAC;IAChH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,qEAAqE;AACrE,KAAK,UAAU,mBAAmB,CAAC,MAA6C;IAC9E,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,oBAAoB,IAAI,wBAAwB,EAAE;YACtE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,SAAS,IAAI,EAAE,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAClG,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAmF,CAAC;QAC/H,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC;QACxG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,oBAAoB,CAAC,CAAC,WAAW,IAAI,gBAAgB,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,eAAe,GAAG,EAAE,CAAC;IAC1J,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oEAAoE,EAAE,CAAC;IACrG,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB;IACzC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,QAAQ,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,qBAAqB,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACtG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACpD,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAkB;IACvC,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,qDAAqD,CAAC;AACrK,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAA2B;IAC7D,IAAI,MAAqC,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,mFAAmF,CAAC,CAAC,CAAC;QACzG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,sBAAsB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACxD,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,qFAAqF,CAAC,CAAC,CAAC;QAC3G,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,EAAE,CAAC;IAChC,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,4BAA4B,OAAO,CAAC,IAAI,4BAA4B,CAAC,CAAC,CAAC;QAC1F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAC3C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,qEAAqE,CAAC,CAAC,CAAC;QAC3G,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,UAAU,GAAG,GAAG,CAAC,cAAc,EAAE,CAAC;IACxC,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,UAAU,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IACnK,MAAM,IAAI,GAAgB,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE;QACjD,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YACvF,IAAI,CAAC,CAAC,EAAE;gBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;YAChD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,KAAK,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACvF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QAC5C,CAAC;IACH,CAAC,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,+BAA+B,IAAI,CAAC,QAAQ,iCAAiC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC;IACnI,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC;QACpC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,SAAS,EAAE,MAAM,CAAC,WAAW;QAC7B,aAAa,EAAE,IAAI,CAAC,SAAS;QAC7B,IAAI;QACJ,IAAI;QACJ,SAAS,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE;YACvC,MAAM,GAAG,GAAG,GAAG,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;YAClD,IAAI,CAAC,GAAG;gBAAE,OAAO,KAAK,CAAC;YACvB,IAAI,CAAC;gBAAC,OAAO,MAAM,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,KAAK,CAAC;YAAC,CAAC;QACrE,CAAC;QACD,0BAA0B,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YAAC,OAAO,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC,EAAE;QACxG,MAAM,EAAE,GAAG,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC;QACzC,eAAe,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC;QACzD,eAAe,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;QAC5D,KAAK,EAAE,IAAI,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC;KAC/C,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,MAAM,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACtE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,QAAQ,CAAC,MAAM,sCAAsC,CAAC,CAAC,CAAC;QAChG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,eAAe,MAAM,CAAC,WAAW,+BAA+B,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC;IACzG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,wCAAwC,GAAG,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACjG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC3D,IAAI,MAAM,CAAC,iBAAiB;QAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC,CAAC;AACtG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAA2B;IAC5D,IAAI,MAAqC,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,qKAAqK,CAAC,CAAC,CAAC;QAC3L,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,sBAAsB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IACvE,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC;QAClC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,aAAa,EAAE,MAAM;QACrB,YAAY,EAAE,OAAO,CAAC,yBAAyB,KAAK,IAAI;QACxD,MAAM,EAAE,GAAG,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC;QACzC,eAAe,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC;QACzD,eAAe,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;QAC5D,KAAK,EAAE,IAAI,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC;KAC/C,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,MAAM,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACtE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,iCAAiC,MAAM,CAAC,WAAW,iCAAiC,CAAC,CAAC,CAAC;IAC5G,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,gEAAgE,CAAC,CAAC,CAAC;IACzF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,wCAAwC,GAAG,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACjG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC3D,IAAI,MAAM,CAAC,iBAAiB;QAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC,CAAC;AACtG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAA2B;IAC9D,IAAI,MAAqC,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,OAAO,GAAG,wBAAwB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1D,IAAI,OAAO,CAAC,KAAK,KAAK,aAAa;QAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,iBAAiB,OAAO,CAAC,WAAW,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;SACjK,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,gGAAgG,CAAC,CAAC;;QACvM,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,kMAAkM,CAAC,CAAC;AACtP,CAAC"}

package/dist/commands/machine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"machine.d.ts","sourceRoot":"","sources":["../../src/commands/machine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAMH,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAG/C,OAAO,EAAE,sBAAsB,EAAyB,MAAM,4BAA4B,CAAC;AAU3F,wBAAsB,4BAA4B,CAChD,MAAM,EAAE,UAAU,CAAC,OAAO,UAAU,CAAC,EACrC,GAAG,EAAE,sBAAsB,GAC1B,OAAO,CAAC,IAAI,CAAC,CAYf;AA6BD;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,sBAAsB,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAazF;AAsBD;;;;;;;;;;;GAWG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,sBAAsB,EAC3B,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,OAAO,CAAA;CAAE,GACvE,OAAO,CAAC,IAAI,CAAC,CA4Cf;AAID,UAAU,eAAe;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,wBAAsB,YAAY,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAiD1E;AAID,UAAU,oBAAoB;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,wBAAsB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAwClG;AAID,UAAU,aAAa;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,wBAAsB,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAoClE;AAID,UAAU,WAAW;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,EAAE,CAAC,EAAE,OAAO,CAAC;CACd;AAED,wBAAsB,YAAY,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAuEtE;AAID,UAAU,WAAW;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,EACjJ,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,SAAS,EAAE,MAAM,GAChB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAkBzB;AAED,wBAAsB,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CA2RnF;AAID,UAAU,YAAY;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,wBAAsB,SAAS,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CA4CpE;AAID,UAAU,aAAa;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,sBAAsB,EAC3B,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,OAAO,KAAa,EAC7B,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,kBAAkB,EAAE,oBAAoB,CAAA;CAAE,GAAG,IAAI,CAAC,CAsB/F;AAED;;;;GAIG;AACH,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,sBAAsB,EAC3B,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,OAAO,KAAa,GAC5B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAaxB;AAED,wBAAsB,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAmKlE;AAID,UAAU,aAAa;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,wBAAsB,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAoPlE"}
+{"version":3,"file":"machine.d.ts","sourceRoot":"","sources":["../../src/commands/machine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAMH,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAG/C,OAAO,EAAE,sBAAsB,EAAyB,MAAM,4BAA4B,CAAC;AAU3F,wBAAsB,4BAA4B,CAChD,MAAM,EAAE,UAAU,CAAC,OAAO,UAAU,CAAC,EACrC,GAAG,EAAE,sBAAsB,GAC1B,OAAO,CAAC,IAAI,CAAC,CAYf;AA6BD;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,sBAAsB,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAazF;AAsBD;;;;;;;;;;;GAWG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,sBAAsB,EAC3B,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,OAAO,CAAA;CAAE,GACvE,OAAO,CAAC,IAAI,CAAC,CA4Cf;AAID,UAAU,eAAe;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,wBAAsB,YAAY,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAiD1E;AAID,UAAU,oBAAoB;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,wBAAsB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CA0ClG;AAID,UAAU,aAAa;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,wBAAsB,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAoClE;AAID,UAAU,WAAW;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,EAAE,CAAC,EAAE,OAAO,CAAC;CACd;AAED,wBAAsB,YAAY,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAuEtE;AAID,UAAU,WAAW;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,EACjJ,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,SAAS,EAAE,MAAM,GAChB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAkBzB;AAED,wBAAsB,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CA2RnF;AAID,UAAU,YAAY;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,wBAAsB,SAAS,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CA4CpE;AAID,UAAU,aAAa;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,sBAAsB,EAC3B,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,OAAO,KAAa,EAC7B,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,kBAAkB,EAAE,oBAAoB,CAAA;CAAE,GAAG,IAAI,CAAC,CAsB/F;AAED;;;;GAIG;AACH,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,sBAAsB,EAC3B,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,OAAO,KAAa,GAC5B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAaxB;AAED,wBAAsB,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAmKlE;AAID,UAAU,aAAa;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,wBAAsB,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAoPlE"}

package/dist/commands/machine.js

@@ -247,7 +247,9 @@ export async function removeMachine(nameOrId, options) {
     }
     mgr.revokeMachine(machineId, localIdentity.machineId, 'Removed via CLI');
     console.log(pc.green(`Machine "${entry.name}" has been revoked.`));
-    console.log(pc.dim('Secrets should be rotated. The revoked machine can no longer authenticate.'));
+    console.log(pc.dim('Secrets should be rotated. The revoked machine can no longer authenticate to the mesh with its machine key.'));
+    // a2a-single-agent-identity §1.4: true of the MACHINE key, false of the AGENT key — say so.
+    console.log(pc.yellow(`${entry.name} is revoked for the mesh but still holds a copy of the agent identity and can sign as ${config.projectName} until the identity is rotated fleet-wide.`));
 }
 export async function whoami(options) {
     let config;