paseo-room 0.2.0 → 0.4.0

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../package.json","../src/result.ts","../src/credentials.ts","../src/layout.ts","../src/fsops.ts","../src/roles.ts","../src/room.ts","../src/which.ts","../src/auth.ts","../src/room/prompts.ts","../src/room/instructions.ts","../src/agents/mcp.ts","../src/agents/resources.ts","../src/agents/claude.ts","../src/agents/codex.ts","../src/agents/pi.ts","../src/paseo.ts","../src/plugin.ts","../src/commands.ts","../src/wizard.ts","../src/cli.ts","../src/render.ts","../src/index.ts"],"sourcesContent":["{\n  \"name\": \"paseo-room\",\n  \"version\": \"0.2.0\",\n  \"description\": \"One CLI that configures Codex, Claude Code, and Pi role homes in $HOME and registers them with your local Paseo daemon.\",\n  \"keywords\": [\n    \"paseo\",\n    \"codex\",\n    \"claude-code\",\n    \"pi-coding-agent\",\n    \"agent\",\n    \"orchestration\",\n    \"cli\"\n  ],\n  \"homepage\": \"https://github.com/cuongntr/paseo-room#readme\",\n  \"bugs\": \"https://github.com/cuongntr/paseo-room/issues\",\n  \"repository\": {\n    \"type\": \"git\",\n    \"url\": \"git+https://github.com/cuongntr/paseo-room.git\"\n  },\n  \"license\": \"MIT\",\n  \"author\": \"Invoker <cuongnt1987@gmail.com>\",\n  \"type\": \"module\",\n  \"engines\": {\n    \"node\": \">=22\"\n  },\n  \"bin\": {\n    \"paseo-room\": \"dist/index.js\"\n  },\n  \"files\": [\n    \"dist/\"\n  ],\n  \"scripts\": {\n    \"typecheck\": \"tsc --noEmit\",\n    \"lint\": \"eslint . --max-warnings 0\",\n    \"test\": \"vitest run\",\n    \"test:package\": \"vitest run --config vitest.package.config.ts\",\n    \"build\": \"tsup && node --input-type=module -e \\\"import { cpSync, rmSync } from 'node:fs'; for (const [source, target] of [['src/room/prompts', 'dist/prompts'], ['src/plugin-assets', 'dist/plugin-assets']]) { rmSync(target, { recursive: true, force: true }); cpSync(source, target, { recursive: true }); }\\\"\",\n    \"prepack\": \"npm run build\",\n    \"verify\": \"npm run typecheck && npm run lint && npm test && npm run build && npm run test:package\"\n  },\n  \"dependencies\": {\n    \"@clack/prompts\": \"^1.8.0\",\n    \"@getpaseo/client\": \"0.8.0-beta.1\",\n    \"commander\": \"^14.0.3\",\n    \"semver\": \"^7.8.5\",\n    \"smol-toml\": \"^1.8.0\",\n    \"zod\": \"^4.5.4\"\n  },\n  \"devDependencies\": {\n    \"@eslint/js\": \"^10.0.1\",\n    \"@types/node\": \"^22.0.0\",\n    \"@types/semver\": \"^7.7.0\",\n    \"eslint\": \"^10.10.0\",\n    \"tsup\": \"^8.5.1\",\n    \"typescript\": \"~5.9.3\",\n    \"typescript-eslint\": \"^8.70.0\",\n    \"vitest\": \"^4.1.11\"\n  }\n}\n","export type Status = 'pass' | 'warn' | 'fail';\nexport interface Check {\n  readonly id: string;\n  readonly status: Status;\n  readonly message: string;\n  readonly fix?: string;\n}\nexport interface Operation {\n  readonly action: 'create' | 'update' | 'remove' | 'noop';\n  readonly kind: 'dir' | 'file' | 'link' | 'provider' | 'profile' | 'plugin';\n  readonly target: string;\n}\nexport type Outcome = 'ok' | 'changes-planned' | 'failed';\nexport interface Result {\n  readonly command: string;\n  readonly outcome: Outcome;\n  readonly changed: boolean;\n  readonly checks: readonly Check[];\n  readonly operations: readonly Operation[];\n}\n\nexport function pass(id: string, message: string): Check {\n  return { id, status: 'pass', message };\n}\nexport function warn(id: string, message: string, fix?: string): Check {\n  return { id, status: 'warn', message, ...(fix === undefined ? {} : { fix }) };\n}\nexport function fail(id: string, message: string, fix: string): Check {\n  return { id, status: 'fail', message, fix };\n}\nexport function failed(command: string, checks: readonly Check[]): Result {\n  return { command, outcome: 'failed', changed: false, checks, operations: [] };\n}\nexport function hasFailure(checks: readonly Check[]): boolean {\n  return checks.some(check => check.status === 'fail');\n}\nexport function exitCode(result: Result): number {\n  return result.outcome === 'failed' || hasFailure(result.checks) ? 1 : 0;\n}\n","import { lstat, readlink } from 'node:fs/promises';\nimport { warn, type Check } from './result.js';\n\nexport type CredentialPathState =\n  | { readonly kind: 'missing' }\n  | { readonly kind: 'file' }\n  | { readonly kind: 'symlink'; readonly target: string }\n  | { readonly kind: 'unsafe'; readonly fileType: string };\n\nexport interface CredentialDiagnostic {\n  /** Credential paths are diagnostic-only and must never become managed entries. */\n  readonly path: string;\n  readonly checks: readonly Check[];\n}\n\nfunction fileType(stat: Awaited<ReturnType<typeof lstat>>): string {\n  if (stat.isDirectory()) return 'directory';\n  if (stat.isSocket()) return 'socket';\n  if (stat.isFIFO()) return 'FIFO';\n  if (stat.isCharacterDevice()) return 'character device';\n  if (stat.isBlockDevice()) return 'block device';\n  return 'unsupported file type';\n}\n\n/** Inspect only path metadata. Credential contents and link targets are never followed. */\nexport async function inspectCredentialPath(path: string): Promise<CredentialPathState> {\n  let stat;\n  try {\n    stat = await lstat(path);\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === 'ENOENT') return { kind: 'missing' };\n    return { kind: 'unsafe', fileType: 'uninspectable path' };\n  }\n  if (stat.isFile()) return { kind: 'file' };\n  if (!stat.isSymbolicLink()) return { kind: 'unsafe', fileType: fileType(stat) };\n  try {\n    return { kind: 'symlink', target: await readlink(path) };\n  } catch {\n    return { kind: 'unsafe', fileType: 'unreadable symbolic link' };\n  }\n}\n\nfunction shellQuote(value: string): string {\n  return `'${value.replaceAll(\"'\", `'\"'\"'`)}'`;\n}\n\nexport function roleCommand(\n  environment: Readonly<Record<string, string>>,\n  executable: string,\n  args: readonly string[] = [],\n): string {\n  const variables = Object.entries(environment).map(([name, value]) => `${name}=${shellQuote(value)}`);\n  return [...variables, ...[executable, ...args].map(shellQuote)].join(' ');\n}\n\nexport interface PreservedCredentialInput {\n  readonly id: string;\n  readonly agent: string;\n  readonly role: string;\n  readonly path: string;\n  readonly state: Exclude<CredentialPathState, { readonly kind: 'missing' }>;\n  readonly login: string;\n  readonly status?: string;\n}\n\n/** Produce migration diagnostics for an existing path without claiming authentication. */\nexport function preservedCredentialCheck(input: PreservedCredentialInput): Check {\n  const status = input.status ? ` Check status with: ${input.status}.` : '';\n  if (input.state.kind === 'file') {\n    return warn(`${input.id}.diverged-file-preserve`,\n      `${input.agent} ${input.role} auth: configured structurally (diverged-file-preserve); a role-owned credential file exists at ${input.path} and is preserved. Token validity and freshness were not checked.`,\n      `If authentication fails, close that role and authenticate it again with: ${input.login}.${status}`);\n  }\n  if (input.state.kind === 'symlink') {\n    return warn(`${input.id}.legacy-shared-risk`,\n      `${input.agent} ${input.role} auth: legacy-shared-risk; a credential symlink at ${input.path} -> ${input.state.target} is preserved. Its target was not inspected, followed, or changed.`,\n      `Close that role. Remove only the legacy link with: rm -- ${shellQuote(input.path)}. Then create role-owned credentials with: ${input.login}.${status}`);\n  }\n  return warn(`${input.id}.manual-recovery`,\n    `${input.agent} ${input.role} auth: diverged-file-preserve/manual-recovery; ${input.path} is a ${input.state.fileType}, not a credential file. It is preserved without inspection.`,\n    `Close that role and inspect the path metadata yourself. Move or remove it manually only when safe, then authenticate with: ${input.login}.${status}`);\n}\n\nexport function presentNames(names: ReadonlySet<string>, supported: readonly string[]): string[] {\n  return supported.filter(name => names.has(name));\n}\n\nexport function configuredByNamesCheck(id: string, agent: string, role: string, names: readonly string[]): Check {\n  return warn(`${id}.configured-structurally`,\n    `${agent} ${role} auth: configured structurally; ${names.join(', ')} ${names.length === 1 ? 'is' : 'are'} present by name. Values, token validity, and freshness were not checked.`);\n}\n\nexport function ambientNamesCheck(id: string, agent: string, role: string, names: readonly string[]): Check {\n  return warn(`${id}.ambient-auth-unverifiable`,\n    `${agent} ${role} auth: ambient auth unverifiable; ${names.join(', ')} ${names.length === 1 ? 'is' : 'are'} present by name in the setup process. paseo-room does not copy credential values into providers, so availability to the Paseo-launched role, token validity, and freshness were not checked.`);\n}\n","import { homedir } from 'node:os';\nimport { join, resolve, sep } from 'node:path';\nimport { fail, type Check } from './result.js';\nimport type { AgentId, Role } from './roles.js';\n\nexport interface Options {\n  readonly roomHome?: string;\n  readonly codexHome?: string;\n  readonly claudeHome?: string;\n  readonly piHome?: string;\n  readonly codexBin?: string;\n  readonly claudeBin?: string;\n  readonly piBin?: string;\n  readonly paseoBin?: string;\n}\nexport interface Layout {\n  readonly home: string;\n  readonly roomHome: string;\n  readonly paseoHome: string;\n  readonly agentHome: Record<AgentId, string>;\n  /** Claude keeps legacy default state beside ~/.claude, but custom config state inside it. */\n  readonly claudeState: string;\n  readonly bin: Record<AgentId | 'paseo', string>;\n  /** The PATH executables are looked up on. Resolved here so nothing reaches for process.env. */\n  readonly searchPath: string;\n  /** Environment names only, for structural auth diagnostics without retaining values. */\n  readonly envNames: ReadonlySet<string>;\n}\n\nfunction pick(...candidates: readonly (string | undefined)[]): string {\n  for (const candidate of candidates) if (candidate?.trim()) return candidate.trim();\n  throw new Error('Could not determine HOME; pass explicit --room-home and --codex-home/--claude-home paths.');\n}\n\n/** Everything is derived from HOME; flags and environment only override defaults. */\nexport function resolveLayout(options: Options = {}, env: NodeJS.ProcessEnv = process.env): Layout {\n  const home = pick(env.HOME, homedir());\n  const claudeOverride = options.claudeHome?.trim() || env.CLAUDE_CONFIG_DIR?.trim() || undefined;\n  const claudeHome = resolve(pick(claudeOverride, join(home, '.claude')));\n  // Relative overrides resolve against the working directory, as a CLI flag should.\n  return {\n    home,\n    roomHome: resolve(pick(options.roomHome, env.PASEO_ROOM_HOME, join(home, '.paseo-room'))),\n    paseoHome: resolve(pick(env.PASEO_HOME, join(home, '.paseo'))),\n    agentHome: {\n      codex: resolve(pick(options.codexHome, env.CODEX_HOME, join(home, '.codex'))),\n      claude: claudeHome,\n      pi: resolve(pick(options.piHome, env.PI_CODING_AGENT_DIR, join(home, '.pi', 'agent'))),\n    },\n    claudeState: claudeOverride?.trim() ? join(claudeHome, '.claude.json') : join(home, '.claude.json'),\n    bin: {\n      codex: pick(options.codexBin, env.CODEX_BIN, 'codex'),\n      claude: pick(options.claudeBin, env.CLAUDE_BIN, 'claude'),\n      pi: pick(options.piBin, env.PI_BIN, 'pi'),\n      paseo: pick(options.paseoBin, env.PASEO_BIN, 'paseo'),\n    },\n    searchPath: env.PATH ?? '',\n    envNames: new Set(Object.keys(env)),\n  };\n}\n\n/** True when `path` is the root itself or sits underneath it. */\nexport function contains(root: string, path: string): boolean {\n  return path === root || path.startsWith(root.endsWith(sep) ? root : root + sep);\n}\n\n/** The room home must own its directory: no overlap with $HOME or a source agent home. */\nexport function layoutChecks(layout: Layout, agents: readonly AgentId[]): Check[] {\n  const checks: Check[] = [];\n  if (contains(layout.roomHome, layout.home)) {\n    checks.push(fail('room.home', `Refusing to use ${layout.roomHome} as the room home: it contains your home directory.`,\n      'Point --room-home at a dedicated directory, by default ~/.paseo-room.'));\n  }\n  for (const id of agents) {\n    const home = layout.agentHome[id];\n    if (contains(layout.roomHome, home) || contains(home, layout.roomHome)) {\n      checks.push(fail(`${id}.home`, `The ${id} home ${home} overlaps the room home ${layout.roomHome}.`,\n        `Pass --${id}-home pointing at your own ${id} configuration (this happens when setup runs inside a room seat).`));\n    }\n  }\n  return checks;\n}\n\nexport function roleHome(layout: Layout, agent: AgentId, role: Role): string {\n  return join(layout.roomHome, 'roles', agent, role);\n}\nexport function sharedRoom(layout: Layout): string {\n  return join(layout.roomHome, 'room');\n}\n","import { randomBytes } from 'node:crypto';\nimport { chmod, lstat, mkdir, readdir, readFile, readlink, rename, rm, symlink, unlink, writeFile } from 'node:fs/promises';\nimport type { Stats } from 'node:fs';\nimport { basename, dirname, join } from 'node:path';\nimport type { Operation } from './result.js';\n\n/** A directory the room creates but whose children it does not own. */\nexport interface DirEntry { readonly kind: 'dir'; readonly path: string }\n/** `once` writes the file only when absent: runtime state the agent owns after setup. */\nexport interface FileEntry { readonly kind: 'file'; readonly path: string; readonly content: string; readonly once?: true }\nexport interface LinkEntry { readonly kind: 'link'; readonly path: string; readonly target: string }\n/**\n * A directory whose whole child inventory the room owns: names outside `children`\n * are removed so a generated projection cannot go stale. Ownership is declared here\n * and never inferred from an ordinary `dir`, so it stays limited to generated\n * projections such as Peer `skills` — never role homes or credential-bearing paths.\n */\nexport interface ManagedDirEntry {\n  readonly kind: 'managed-dir';\n  readonly path: string;\n  readonly children: readonly string[];\n  /** The single legacy shape this path may be migrated from: a symlink to this target. */\n  readonly legacyLink?: string;\n}\nexport type Entry = DirEntry | FileEntry | LinkEntry | ManagedDirEntry;\n\nconst DIR_MODE = 0o700;\nconst FILE_MODE = 0o600;\n\n/**\n * An existing path is not the shape the room manages, so replacing it would destroy\n * something this CLI does not own. Raised before any deletion.\n */\nexport class ManagedPathError extends Error {\n  readonly path: string;\n  readonly fix: string;\n  constructor(path: string, message: string, fix: string) {\n    super(message);\n    this.name = 'ManagedPathError';\n    this.path = path;\n    this.fix = fix;\n  }\n}\n\nconst MOVE_ASIDE = 'Check that path for role-owned credentials, move it aside manually, then run setup again.';\n\nfunction shape(stat: Stats): string {\n  if (stat.isSymbolicLink()) return 'a symbolic link';\n  if (stat.isDirectory()) return 'a directory';\n  if (stat.isFile()) return 'a regular file';\n  return 'a special file';\n}\n\nfunction refuse(path: string, expected: string, stat: Stats): never {\n  throw new ManagedPathError(path, `Refusing to replace ${path}: expected ${expected} but found ${shape(stat)}.`, MOVE_ASIDE);\n}\n\nfunction isMissing(error: unknown): boolean {\n  return error !== null && typeof error === 'object' && 'code' in error && error.code === 'ENOENT';\n}\n\nasync function lstatOrAbsent(path: string): Promise<Stats | undefined> {\n  try { return await lstat(path); } catch (error) {\n    if (isMissing(error)) return undefined;\n    throw error;\n  }\n}\n\n/** Names present under a managed directory that its declaration does not claim. */\nasync function staleChildren(entry: ManagedDirEntry): Promise<string[]> {\n  const declared = new Set(entry.children);\n  let names: string[];\n  try { names = await readdir(entry.path); } catch (error) {\n    if (isMissing(error)) return [];\n    throw error;\n  }\n  return names.filter(name => !declared.has(name));\n}\n\nasync function current(entry: Entry): Promise<'absent' | 'same' | 'different'> {\n  const stat = await lstatOrAbsent(entry.path);\n  if (!stat) return 'absent';\n  if (entry.kind === 'dir') return stat.isDirectory() ? 'same' : 'different';\n  if (entry.kind === 'managed-dir') {\n    if (!stat.isDirectory()) return 'different';\n    return (await staleChildren(entry)).length === 0 ? 'same' : 'different';\n  }\n  if (entry.kind === 'link') {\n    if (!stat.isSymbolicLink()) return 'different';\n    return await readlink(entry.path) === entry.target ? 'same' : 'different';\n  }\n  if (!stat.isFile()) return 'different';\n  if (entry.once) return 'same';\n  return await readFile(entry.path, 'utf8') === entry.content ? 'same' : 'different';\n}\n\n/** Everything lives under the room home, which this CLI owns outright. */\nexport async function planEntries(entries: readonly Entry[]): Promise<Operation[]> {\n  const operations: Operation[] = [];\n  for (const entry of entries) {\n    const state = await current(entry);\n    operations.push({\n      action: state === 'same' ? 'noop' : state === 'absent' ? 'create' : 'update',\n      // A managed directory is still a directory to everything that reports operations.\n      kind: entry.kind === 'managed-dir' ? 'dir' : entry.kind,\n      target: entry.path,\n    });\n  }\n  return operations;\n}\n\n/** Unique so two runs, or a leftover from a failed one, can never collide. */\nfunction tempSibling(path: string): string {\n  return join(dirname(path), `.${basename(path)}.paseo-room-${randomBytes(8).toString('hex')}`);\n}\n\n/** A managed file or link may replace only an absent path or the same shape. */\nasync function assertReplaceable(entry: FileEntry | LinkEntry): Promise<void> {\n  const stat = await lstatOrAbsent(entry.path);\n  if (!stat) return;\n  if (entry.kind === 'link') {\n    if (!stat.isSymbolicLink()) refuse(entry.path, 'a symbolic link', stat);\n    return;\n  }\n  if (!stat.isFile()) refuse(entry.path, 'a regular file', stat);\n}\n\n/** Build beside the target and rename, so a reader never sees a half-written path. */\nasync function replaceAtomically(entry: FileEntry | LinkEntry): Promise<void> {\n  const temp = tempSibling(entry.path);\n  try {\n    if (entry.kind === 'link') await symlink(entry.target, temp);\n    else {\n      await writeFile(temp, entry.content, { mode: FILE_MODE });\n      await chmod(temp, FILE_MODE);\n    }\n    await rename(temp, entry.path);\n  } catch (error) {\n    await rm(temp, { force: true });\n    throw error;\n  }\n}\n\nasync function applyDirectory(path: string): Promise<void> {\n  const stat = await lstatOrAbsent(path);\n  if (stat && !stat.isDirectory()) refuse(path, 'a directory', stat);\n  await mkdir(path, { recursive: true, mode: DIR_MODE });\n}\n\n/**\n * Creates the projection, migrating the one declared legacy symlink by unlinking the\n * link alone, and removes only undeclared children that are links or files. An\n * unrecognized shape — including a real child directory — fails instead of being\n * deleted recursively.\n */\nasync function applyManagedDirectory(entry: ManagedDirEntry): Promise<void> {\n  const stat = await lstatOrAbsent(entry.path);\n  if (stat?.isSymbolicLink() === true) {\n    const target = await readlink(entry.path);\n    if (entry.legacyLink === undefined || target !== entry.legacyLink) {\n      throw new ManagedPathError(entry.path,\n        `Refusing to replace ${entry.path}: this room owns that directory, but it is a symbolic link to ${target}.`,\n        MOVE_ASIDE);\n    }\n    // Unlink the alias only; the operator directory it pointed at is never touched.\n    await unlink(entry.path);\n    await mkdir(entry.path, { recursive: true, mode: DIR_MODE });\n    return;\n  }\n  if (stat && !stat.isDirectory()) refuse(entry.path, 'a directory this room owns', stat);\n  await mkdir(entry.path, { recursive: true, mode: DIR_MODE });\n  if (!stat) return;\n  for (const name of await staleChildren(entry)) {\n    const child = join(entry.path, name);\n    const childStat = await lstatOrAbsent(child);\n    if (!childStat) continue;\n    if (!childStat.isFile() && !childStat.isSymbolicLink()) {\n      throw new ManagedPathError(child,\n        `Refusing to remove ${child}: this room manages ${entry.path} by name, but that stale child is ${shape(childStat)} rather than a generated file or link.`,\n        MOVE_ASIDE);\n    }\n    await rm(child, { force: true });\n  }\n}\n\n/** Rewrites only what differs, so a repeat run costs stats rather than writes. */\nexport async function applyEntries(entries: readonly Entry[]): Promise<void> {\n  for (const entry of entries) {\n    if (await current(entry) === 'same') continue;\n    if (entry.kind === 'dir') {\n      await applyDirectory(entry.path);\n      continue;\n    }\n    if (entry.kind === 'managed-dir') {\n      await applyManagedDirectory(entry);\n      continue;\n    }\n    await mkdir(dirname(entry.path), { recursive: true, mode: DIR_MODE });\n    await assertReplaceable(entry);\n    await replaceAtomically(entry);\n  }\n}\n\nexport async function exists(path: string): Promise<boolean> {\n  try { await lstat(path); return true; } catch { return false; }\n}\n\n/** Which of `names` exist under `home`, probed once for all roles that share them. */\nexport async function existingPaths(home: string, names: readonly string[]): Promise<string[]> {\n  const paths = names.map(name => join(home, name));\n  const present = await Promise.all(paths.map(exists));\n  return paths.filter((_, index) => present[index] === true);\n}\n\nexport async function readIfPresent(path: string): Promise<string | undefined> {\n  try { return await readFile(path, 'utf8'); } catch { return undefined; }\n}\n","export const ROLES = ['supervisor', 'lead', 'peer'] as const;\nexport type Role = (typeof ROLES)[number];\n\nexport const AGENT_IDS = ['codex', 'claude', 'pi'] as const;\nexport type AgentId = (typeof AGENT_IDS)[number];\n\n/** Supervisor and Lead orchestrate; Peer executes one brief and gets no room tools. */\nexport const ROLE_PASEO_TOOLS: Record<Role, boolean> = { supervisor: true, lead: true, peer: false };\n\n/**\n * Reasoning effort a seat starts at: Supervisor routes, Lead judges, Peer implements.\n * Deliberately short of the top option on either agent — `ultra` and `ultracode`\n * advertise automatic task delegation, which is a second control plane.\n */\nexport const ROLE_THINKING: Record<Role, string> = { supervisor: 'low', lead: 'high', peer: 'high' };\n\n/**\n * The top option on either agent, which Paseo advertises as maximum reasoning with automatic\n * task delegation. Whether it can still delegate once the room has closed the native\n * multi-agent paths is unverified, so selecting one is reported and never rejected.\n */\nexport const DELEGATING_THINKING = ['ultra', 'ultracode'] as const;\n\n/** Paseo profile appearance encodes the room role, independent of agent runtime. */\nexport const ROLE_ICON: Record<Role, string> = { supervisor: 'eye', lead: 'compass', peer: 'code' };\nexport const ROLE_COLOR: Record<Role, string> = { supervisor: 'violet', lead: 'blue', peer: 'emerald' };\n\n/** Paseo shows these to orchestrating agents, so each one says who may open the seat. */\nexport const ROLE_NOTES: Record<Role, string> = {\n  supervisor: 'Human-facing routing seat. Opened by Human, never by another agent; cwd, title and provider label do not prove room membership.',\n  lead: 'Sole project technical owner. When opening, copy every present profile launch field. Otherwise reuse only with exact current room Lead provider/mode/workspace evidence plus corroborated ownership. Cwd, title and provider label are not membership. Creates Peer seats only.',\n  peer: 'One fresh Lead brief. Open by copying every present profile launch field; require exact current room Peer provider/mode/workspace and paseo.parent-agent-id for its Lead. Cwd, title and provider label are not membership; no orchestration.',\n};\n\nexport function providerId(agent: AgentId, role: Role): string {\n  return `${agent}-${role}`;\n}\n/** Distinct from the provider id: a host may already have a profile by that name. */\nexport function profileId(agent: AgentId, role: Role): string {\n  return `room-${agent}-${role}`;\n}\nexport function providerLabel(agent: AgentId, role: Role): string {\n  const title = (value: string): string => value.charAt(0).toUpperCase() + value.slice(1);\n  return `${title(agent)} ${title(role)}`;\n}\n","import { join } from 'node:path';\nimport { z } from 'zod';\nimport { readIfPresent } from './fsops.js';\nimport type { Layout } from './layout.js';\nimport { AGENT_IDS, ROLES, type AgentId, type Role } from './roles.js';\n\nexport const MARKER = 'room.json';\n\nconst markerSchema = z.object({\n  version: z.string(),\n  agents: z.array(z.enum(AGENT_IDS)).min(1),\n  roles: z.array(z.enum(ROLES)).min(1),\n  /**\n   * The rendered contract generation this room was installed from. Optional because a room\n   * written before contract provenance existed has no digest, and such a marker must still\n   * parse rather than look like a foreign file.\n   */\n  contract: z.string().min(1).optional(),\n});\nexport type Marker = z.infer<typeof markerSchema>;\n\n/** Deterministic on purpose: re-running setup must not show a phantom change. */\nexport function renderMarker(\n  version: string,\n  agents: readonly AgentId[],\n  roles: readonly Role[],\n  contract?: string,\n): string {\n  return JSON.stringify({\n    version, agents: [...agents], roles: [...roles],\n    ...(contract === undefined ? {} : { contract }),\n  } satisfies Marker, null, 2) + '\\n';\n}\n\n/** Records what setup created, so verify and remove touch nothing else. */\nexport async function readMarker(layout: Layout): Promise<Marker | undefined> {\n  const source = await readIfPresent(join(layout.roomHome, MARKER));\n  if (source === undefined) return undefined;\n  try { return markerSchema.parse(JSON.parse(source)); } catch { return undefined; }\n}\n","import { execFile } from 'node:child_process';\nimport { access, constants } from 'node:fs/promises';\nimport { delimiter, isAbsolute, join, resolve } from 'node:path';\nimport { promisify } from 'node:util';\n\nconst run = promisify(execFile);\n\n/**\n * Resolve a command to an absolute executable path on `searchPath`.\n *\n * Deliberately not canonicalised. Version managers point a stable name at a\n * versioned file — `~/.local/bin/claude` at `versions/2.1.267`, mise's\n * `node/latest` at `node/24.15.0` — and the resolved target is deleted by the\n * next upgrade. Providers store this path, so following the link would pin every\n * seat to a binary that stops existing.\n */\nexport async function which(command: string, searchPath: string): Promise<string | undefined> {\n  const candidates = isAbsolute(command) || command.includes('/')\n    ? [resolve(command)]\n    : searchPath.split(delimiter).filter(Boolean).map(entry => join(entry, command));\n  for (const candidate of candidates) {\n    try {\n      await access(candidate, constants.X_OK);\n      return candidate;\n    } catch { /* try the next PATH entry */ }\n  }\n  return undefined;\n}\n\nexport interface CommandOutput {\n  readonly ok: boolean;\n  readonly stdout: string;\n}\n/** Bounded, shell-free probe. Failures are reported, never thrown. */\nexport async function probe(executable: string, args: readonly string[], env: NodeJS.ProcessEnv): Promise<CommandOutput> {\n  try {\n    const { stdout } = await run(executable, [...args], { env, timeout: 20_000, maxBuffer: 16 * 1024 * 1024, encoding: 'utf8' });\n    return { ok: true, stdout };\n  } catch {\n    return { ok: false, stdout: '' };\n  }\n}\n","import { spawn } from 'node:child_process';\nimport { constants } from 'node:os';\nimport { join } from 'node:path';\nimport { lstat } from 'node:fs/promises';\nimport { roleCommand } from './credentials.js';\nimport { resolveLayout, roleHome, type Options } from './layout.js';\nimport { MARKER, readMarker } from './room.js';\nimport { AGENT_IDS, ROLES, type AgentId, type Role } from './roles.js';\nimport { which } from './which.js';\n\nexport const AUTHENTICATION_GUIDE = 'AUTHENTICATION.md';\n/** A truthy empty override suppresses Pi's role-home APPEND_SYSTEM.md discovery. */\nexport const PI_AUTH_ARGV = ['--no-extensions', '--no-approve', '--append-system-prompt', ''] as const;\n\n/** A copy-paste-safe Pi login command that cannot inherit the caller repository cwd. */\nexport function piLoginCommand(rolePath: string, binary: string): string {\n  const command = roleCommand({ PI_CODING_AGENT_DIR: rolePath }, binary, PI_AUTH_ARGV);\n  return `cd ${roleCommand({}, rolePath)} && ${command}`;\n}\n\nexport interface LoginOutput {\n  readonly stdout: (text: string) => void;\n  readonly stderr: (text: string) => void;\n}\n\nexport interface LoginSpawnOptions {\n  readonly env: NodeJS.ProcessEnv;\n  readonly cwd?: string;\n  readonly shell: false;\n  readonly stdio: 'inherit';\n}\n\nexport interface LoginChild {\n  once(event: 'error', listener: (error: Error) => void): this;\n  once(event: 'close', listener: (code: number | null, signal: NodeJS.Signals | null) => void): this;\n}\n\nexport type LoginSpawner = (executable: string, argv: readonly string[], options: LoginSpawnOptions) => LoginChild;\n\nconst spawnLogin: LoginSpawner = (executable, argv, options) => spawn(executable, [...argv], options);\n\nfunction title(value: string): string {\n  return value.charAt(0).toUpperCase() + value.slice(1);\n}\n\nfunction loginInvocation(agent: AgentId, rolePath: string, binary: string): {\n  readonly env: Readonly<Record<string, string>>;\n  readonly argv: readonly string[];\n  readonly cwd?: string;\n  readonly command: string;\n} {\n  if (agent === 'codex') {\n    const env = { CODEX_HOME: rolePath };\n    const argv = ['login'] as const;\n    return { env, argv, command: roleCommand(env, binary, argv) };\n  }\n  if (agent === 'claude') {\n    const env = { CLAUDE_CONFIG_DIR: rolePath, CLAUDE_SECURESTORAGE_CONFIG_DIR: rolePath };\n    const argv = ['auth', 'login'] as const;\n    return { env, argv, command: roleCommand(env, binary, argv) };\n  }\n  const env = { PI_CODING_AGENT_DIR: rolePath };\n  const argv = PI_AUTH_ARGV;\n  return { env, argv, cwd: rolePath, command: piLoginCommand(rolePath, binary) };\n}\n\n/** Deterministic, secret-free instructions using setup's resolved executables. */\nexport function renderAuthenticationGuide(\n  roomHome: string,\n  binaries: Readonly<Partial<Record<AgentId, string>>>,\n  agents: readonly AgentId[],\n  roles: readonly Role[],\n): string {\n  const lines = [\n    '# Role authentication',\n    '',\n    'Setup and verify do not validate authentication, inspect credential contents, query keyrings,',\n    'or test token freshness. Run the command for each role you want to authenticate.',\n    '',\n  ];\n  for (const agent of agents) {\n    const binary = binaries[agent];\n    if (!binary) throw new Error(`Cannot render authentication guidance without the resolved ${agent} executable.`);\n    lines.push(`## ${agent === 'claude' ? 'Claude Code' : title(agent)}`, '');\n    for (const role of roles) {\n      const invocation = loginInvocation(agent, join(roomHome, 'roles', agent, role), binary);\n      lines.push(`### ${title(role)}`, '', '```sh', invocation.command, '```', '');\n      if (agent === 'pi') {\n        lines.push('Run `/login`, then exit Pi when authentication completes. This minimal interactive',\n          'login session starts in the role home, not the caller repository, disables extension discovery and',\n          'approval files, and suppresses role-home APPEND_SYSTEM.md discovery;',\n          'it is not equivalent to launching the room seat through Paseo.', '');\n      }\n    }\n  }\n  return `${lines.join('\\n').trimEnd()}\\n`;\n}\n\nasync function realDirectory(path: string): Promise<'directory' | 'missing' | 'unsafe'> {\n  try {\n    return (await lstat(path)).isDirectory() ? 'directory' : 'unsafe';\n  } catch (error) {\n    return (error as NodeJS.ErrnoException).code === 'ENOENT' ? 'missing' : 'unsafe';\n  }\n}\n\nfunction usageError(output: LoginOutput, detail: string): number {\n  output.stderr(`paseo-room auth login: ${detail}\\n`);\n  return 2;\n}\n\nexport interface LoginOptions extends Options {\n  readonly env?: NodeJS.ProcessEnv;\n  readonly isTTY: boolean;\n  readonly spawn?: LoginSpawner;\n}\n\n/** Launch one vendor's normal interactive login without touching credential stores itself. */\nexport async function loginRole(\n  agentValue: string,\n  roleValue: string,\n  options: LoginOptions,\n  output: LoginOutput,\n): Promise<number> {\n  const agent = AGENT_IDS.find(value => value === agentValue);\n  if (!agent) return usageError(output, `unknown agent \"${agentValue}\"; expected codex, claude, or pi.`);\n  const role = ROLES.find(value => value === roleValue);\n  if (!role) return usageError(output, `unknown role \"${roleValue}\"; expected supervisor, lead, or peer.`);\n  if (!options.isTTY) {\n    output.stderr('paseo-room auth login requires interactive stdin, stdout, and stderr terminals.\\n');\n    return 1;\n  }\n\n  const env = options.env ?? process.env;\n  const layout = resolveLayout(options, env);\n  if (await realDirectory(layout.roomHome) !== 'directory') {\n    output.stderr(`No room found at ${layout.roomHome}. Run: paseo-room setup --apply\\n`);\n    return 1;\n  }\n  try {\n    if (!(await lstat(join(layout.roomHome, MARKER))).isFile()) throw new Error('not a regular marker');\n  } catch {\n    output.stderr(`No valid room marker found at ${join(layout.roomHome, MARKER)}. Run: paseo-room setup --apply\\n`);\n    return 1;\n  }\n  const marker = await readMarker(layout);\n  if (!marker) {\n    output.stderr(`No valid room marker found at ${join(layout.roomHome, MARKER)}. Run: paseo-room setup --apply\\n`);\n    return 1;\n  }\n  if (!marker.agents.includes(agent)) {\n    output.stderr(`${title(agent)} is not selected in this room. Re-run setup with --agent ${agent} --apply.\\n`);\n    return 1;\n  }\n  if (!marker.roles.includes(role)) {\n    output.stderr(`${title(role)} is not installed for ${agent} in this room. Re-run setup --apply.\\n`);\n    return 1;\n  }\n  const rolePath = roleHome(layout, agent, role);\n  for (const path of [join(layout.roomHome, 'roles'), join(layout.roomHome, 'roles', agent), rolePath]) {\n    if (await realDirectory(path) !== 'directory') {\n      output.stderr(`The selected ${agent} ${role} role is not safely installed at ${rolePath}. Run: paseo-room setup --apply\\n`);\n      return 1;\n    }\n  }\n\n  const binary = await which(layout.bin[agent], layout.searchPath);\n  if (!binary) {\n    output.stderr(`${title(agent)} executable not found. Install it, or pass --${agent}-bin /path/to/${agent}.\\n`);\n    return 1;\n  }\n  const invocation = loginInvocation(agent, rolePath, binary);\n  if (agent === 'pi') {\n    output.stdout(`Starting a minimal interactive Pi login session for ${role} in its role home. Run /login, then exit Pi when authentication completes.\\n`);\n    output.stdout('Extensions and approval files are disabled, and role APPEND_SYSTEM.md discovery is suppressed.\\n');\n    output.stdout('This is not a room-equivalent Paseo launch.\\n');\n  } else {\n    output.stdout(`Starting ${agent === 'claude' ? 'Claude Code' : 'Codex'} login for ${role}.\\n`);\n  }\n\n  const childEnv = { ...env, ...invocation.env };\n  const launch = options.spawn ?? spawnLogin;\n  return new Promise(resolve => {\n    let settled = false;\n    const finish = (code: number): void => {\n      if (settled) return;\n      settled = true;\n      resolve(code);\n    };\n    let child: LoginChild;\n    try {\n      child = launch(binary, invocation.argv, {\n        env: childEnv,\n        ...(invocation.cwd === undefined ? {} : { cwd: invocation.cwd }),\n        shell: false,\n        stdio: 'inherit',\n      });\n    } catch (error) {\n      const detail = error instanceof Error ? error.message : 'unknown error';\n      output.stderr(`Could not start ${agent} login: ${detail}\\n`);\n      finish(1);\n      return;\n    }\n    child.once('error', error => {\n      output.stderr(`Could not start ${agent} login: ${error.message}\\n`);\n      finish(1);\n    });\n    child.once('close', (code, signal) => {\n      if (code !== null) {\n        finish(code);\n        return;\n      }\n      if (signal) {\n        const signalNumber = constants.signals[signal];\n        const mapped = typeof signalNumber === 'number' ? 128 + signalNumber : 1;\n        output.stderr(`${title(agent)} login ended from signal ${signal}; returning ${String(mapped)}.\\n`);\n        finish(mapped);\n        return;\n      }\n      output.stderr(`${title(agent)} login ended without an exit code or signal.\\n`);\n      finish(1);\n    });\n  });\n}\n","import { readFileSync } from 'node:fs';\n\nexport const PROMPT_ASSETS = {\n  documents: {\n    supervisor: { path: 'documents/supervisor.md', kind: 'head' },\n    lead: { path: 'documents/lead.md', kind: 'head' },\n    peer: { path: 'documents/peer.md', kind: 'head' },\n    workspace: { path: 'documents/workspace.md', kind: 'head' },\n  },\n  contract: {\n    humanAuthority: { path: 'contract/shared/human-authority.md', kind: 'section' },\n    workspaceProtocolPrecedence: { path: 'contract/shared/workspace-protocol-precedence.md', kind: 'section' },\n    evidenceAndEventWaiting: { path: 'contract/shared/evidence-and-event-waiting.md', kind: 'section' },\n    scopeAndUnrelatedWork: { path: 'contract/shared/scope-and-unrelated-work.md', kind: 'section' },\n    directiveIntegrity: { path: 'contract/supervisor/directive-integrity.md', kind: 'section' },\n    technicalNonInterference: { path: 'contract/supervisor/technical-non-interference.md', kind: 'section' },\n    leadDiscoveryAndRecovery: { path: 'contract/supervisor/lead-discovery-and-recovery.md', kind: 'section' },\n    observationAndAdvice: { path: 'contract/supervisor/observation-and-advice.md', kind: 'section' },\n    escalationBoundaries: { path: 'contract/supervisor/escalation-boundaries.md', kind: 'section' },\n    projectTechnicalOwnership: { path: 'contract/lead/project-technical-ownership.md', kind: 'section' },\n    movingWriteOwnership: { path: 'contract/lead/moving-write-ownership.md', kind: 'section' },\n    completePeerBrief: { path: 'contract/lead/complete-peer-brief.md', kind: 'section' },\n    challengeSignals: { path: 'contract/shared-lead-peer/challenge-signals.md', kind: 'section' },\n    technicalAcceptance: { path: 'contract/lead/technical-acceptance.md', kind: 'section' },\n    independentReview: { path: 'contract/lead/independent-review.md', kind: 'section' },\n    peerSeatLifecycle: { path: 'contract/lead/peer-seat-lifecycle.md', kind: 'section' },\n    boundedOutcome: { path: 'contract/peer/bounded-outcome.md', kind: 'section' },\n    independentJudgment: { path: 'contract/peer/independent-judgment.md', kind: 'section' },\n    writingAndReviewScope: { path: 'contract/peer/writing-and-review-scope.md', kind: 'section' },\n    noOrchestration: { path: 'contract/peer/no-orchestration.md', kind: 'section' },\n    reproducibleHandoff: { path: 'contract/peer/reproducible-handoff.md', kind: 'section' },\n    noSelfAcceptance: { path: 'contract/peer/no-self-acceptance.md', kind: 'section' },\n  },\n  workspace: {\n    topology: { path: 'workspace/topology.md', kind: 'section' },\n    verification: { path: 'workspace/verification.md', kind: 'section' },\n    review: { path: 'workspace/review.md', kind: 'section' },\n    repositoryConventions: { path: 'workspace/repository-conventions.md', kind: 'section' },\n  },\n  pi: {\n    communicationStyle: { path: 'pi/communication-style.md', kind: 'capsule' },\n    runtime: { path: 'pi/runtime.md', kind: 'capsule' },\n  },\n} as const;\n\nexport type PromptAssetGroup = keyof typeof PROMPT_ASSETS;\nexport type PromptAssetKey<Group extends PromptAssetGroup> = keyof (typeof PROMPT_ASSETS)[Group];\nexport type ContractKey = PromptAssetKey<'contract'>;\nexport type WorkspaceKey = PromptAssetKey<'workspace'>;\nexport type DocumentKey = PromptAssetKey<'documents'>;\nexport type PiPromptKey = PromptAssetKey<'pi'>;\n\ntype PromptAssetKind = 'head' | 'section' | 'capsule';\ninterface PromptAssetDefinition {\n  readonly path: string;\n  readonly kind: PromptAssetKind;\n}\n\nexport class PromptAssetError extends Error {\n  readonly logicalAsset: string;\n  readonly assetUrl: URL;\n\n  constructor(logicalAsset: string, assetUrl: URL, detail: string, options?: ErrorOptions) {\n    super(`Prompt asset ${logicalAsset} at ${assetUrl.pathname} ${detail} Reinstall paseo-room and try again.`, options);\n    this.name = 'PromptAssetError';\n    this.logicalAsset = logicalAsset;\n    this.assetUrl = assetUrl;\n  }\n}\n\nconst cache = new Map<string, string>();\n\nfunction definition<Group extends PromptAssetGroup>(\n  group: Group,\n  key: PromptAssetKey<Group>,\n): PromptAssetDefinition {\n  const assets = PROMPT_ASSETS[group] as Readonly<Record<string, PromptAssetDefinition>>;\n  const asset = assets[String(key)];\n  if (asset === undefined) throw new Error(`Unknown prompt asset ${group}.${String(key)}.`);\n  return asset;\n}\n\nfunction headingCount(source: string, level: 1 | 2): number {\n  const prefix = level === 1 ? '# ' : '## ';\n  return source.split('\\n').filter(line => line.startsWith(prefix)).length;\n}\n\nfunction validateHeadOrCapsule(source: string, kind: 'head' | 'capsule'): string {\n  const trimmed = source.trimEnd();\n  if (!trimmed.trim()) throw new Error('is empty.');\n  const firstLine = trimmed.split('\\n', 1)[0] ?? '';\n  if (!/^# \\S.*$/.test(firstLine) || headingCount(trimmed, 1) !== 1) {\n    throw new Error(`${kind === 'head' ? 'document head' : 'Pi capsule'} must begin with exactly one H1 heading.`);\n  }\n  return trimmed;\n}\n\nfunction validateSection(source: string): string {\n  const trimmed = source.trimEnd();\n  if (!trimmed.trim()) throw new Error('is empty.');\n  const lines = trimmed.split('\\n');\n  const heading = lines.shift() ?? '';\n  if (!/^## \\S.*$/.test(heading) || headingCount(trimmed, 2) !== 1) {\n    throw new Error('section must begin with exactly one H2 heading.');\n  }\n  if (lines.some(line => /^#{1,6}\\s/.test(line))) {\n    throw new Error('section must not contain additional Markdown headings.');\n  }\n  const body = lines.join('\\n').trim();\n  if (!body) throw new Error('section must contain at least one non-empty statement.');\n  const statements = body.split(/\\n\\s*\\n/).map(statement =>\n    statement.split('\\n').map(line => line.trim()).join(' '),\n  );\n  if (statements.some(statement => !statement)) {\n    throw new Error('section must contain only non-empty statements.');\n  }\n  return `${heading}\\n${statements.map(statement => `- ${statement}`).join('\\n')}`;\n}\n\nexport function loadPromptAsset<Group extends PromptAssetGroup>(\n  group: Group,\n  key: PromptAssetKey<Group>,\n): string {\n  const logicalAsset = `${group}.${String(key)}`;\n  const cached = cache.get(logicalAsset);\n  if (cached !== undefined) return cached;\n\n  const asset = definition(group, key);\n  const assetUrl = new URL(`./prompts/${asset.path}`, import.meta.url);\n  try {\n    const source = readFileSync(assetUrl, 'utf8');\n    if (source.includes('\\uFFFD')) throw new Error('is not valid UTF-8 text.');\n    const validated = asset.kind === 'section'\n      ? validateSection(source)\n      : validateHeadOrCapsule(source, asset.kind);\n    cache.set(logicalAsset, validated);\n    return validated;\n  } catch (error) {\n    if (error instanceof PromptAssetError) throw error;\n    const detail = error instanceof Error ? error.message : 'could not be read.';\n    throw new PromptAssetError(logicalAsset, assetUrl, detail, { cause: error });\n  }\n}\n","import { createHash } from 'node:crypto';\nimport { ROLES, type Role } from '../roles.js';\nimport {\n  loadPromptAsset,\n  type ContractKey,\n  type WorkspaceKey,\n} from './prompts.js';\n\nexport type InstructionKind = Role | 'workspace';\n\nconst SHARED_KEYS = [\n  'humanAuthority',\n  'workspaceProtocolPrecedence',\n  'evidenceAndEventWaiting',\n  'scopeAndUnrelatedWork',\n] as const satisfies readonly ContractKey[];\n\nconst ROLE_KEYS = {\n  supervisor: [\n    'directiveIntegrity',\n    'technicalNonInterference',\n    'leadDiscoveryAndRecovery',\n    'observationAndAdvice',\n    'escalationBoundaries',\n  ],\n  lead: [\n    'projectTechnicalOwnership',\n    'movingWriteOwnership',\n    'completePeerBrief',\n    'challengeSignals',\n    'technicalAcceptance',\n    'independentReview',\n    'peerSeatLifecycle',\n  ],\n  // Peer needs Challenge Signals as well as its own obligations.\n  peer: [\n    'challengeSignals',\n    'boundedOutcome',\n    'independentJudgment',\n    'writingAndReviewScope',\n    'noOrchestration',\n    'reproducibleHandoff',\n    'noSelfAcceptance',\n  ],\n} as const satisfies Record<Role, readonly ContractKey[]>;\n\nconst ALL_PROTOCOL_KEYS = [\n  'topology',\n  'verification',\n  'review',\n  'repositoryConventions',\n] as const satisfies readonly WorkspaceKey[];\n\n// Topology is Lead's decision and Supervisor's to audit. No Orchestration forbids Peer to\n// infer room topology, so handing Peer the topology rules would contradict its own contract.\nconst PROTOCOL_KEYS = {\n  supervisor: ALL_PROTOCOL_KEYS,\n  lead: ALL_PROTOCOL_KEYS,\n  peer: ['verification', 'review', 'repositoryConventions'],\n} as const satisfies Record<Role, readonly WorkspaceKey[]>;\n\nexport function instructionKeys(role: Role): readonly ContractKey[] {\n  // Every role carries the shared authority contract plus its own obligations.\n  return [...SHARED_KEYS, ...ROLE_KEYS[role]];\n}\n\nexport function protocolKeys(role: Role): readonly WorkspaceKey[] {\n  return PROTOCOL_KEYS[role];\n}\n\nfunction protocol(keys: readonly WorkspaceKey[]): string[] {\n  return [\n    loadPromptAsset('documents', 'workspace'),\n    ...keys.map(key => loadPromptAsset('workspace', key)),\n  ];\n}\n\nexport function renderInstructions(kind: InstructionKind): string {\n  if (kind === 'workspace') return protocol(ALL_PROTOCOL_KEYS).join('\\n\\n') + '\\n';\n  return [\n    loadPromptAsset('documents', kind),\n    ...instructionKeys(kind).map(key => loadPromptAsset('contract', key)),\n    ...protocol(protocolKeys(kind)),\n  ].join('\\n\\n') + '\\n';\n}\n\n/** Every document the room composes, in one fixed order, so a digest over them is stable. */\nexport const INSTRUCTION_KINDS = [...ROLES, 'workspace'] as const satisfies readonly InstructionKind[];\n\n/**\n * Identifies the rendered contract generation a room was installed from.\n *\n * Derived from the composed documents rather than the package version: two packages that\n * render identical contracts are the same generation, and editing one prompt asset without a\n * release still changes the digest. Truncated because this is provenance an operator compares\n * by eye, not a security claim.\n */\nexport function contractDigest(): string {\n  const hash = createHash('sha256');\n  for (const kind of INSTRUCTION_KINDS) hash.update(`${kind}\\u0000${renderInstructions(kind)}\\u0000`);\n  return `sha256:${hash.digest('hex').slice(0, 16)}`;\n}\n","import { fail, type Check } from '../result.js';\n\n/**\n * The bounded heuristic: `paseo` as a whole identifier or path token, including a\n * lower-to-upper camel-case boundary. It is not embedded in a larger word, so `paseo`,\n * `paseo-mcp`, `/opt/paseo/bin/serve` and `paseoRoom` match while `grapaseo`,\n * `paseonaut` and `PASEONAUT` do not.\n *\n * This recognizes an obvious configuration collision and says why it matched. It is not a\n * scanner for a hostile or obfuscated endpoint, and matching nothing proves nothing.\n */\nconst PASEO_TOKEN = /(?<![\\p{L}\\p{N}])[Pp][Aa][Ss][Ee][Oo](?=$|[^\\p{L}\\p{N}]|\\p{Lu}\\p{Ll})/u;\n\n/** Declaration fields that name what a server runs or connects to. */\nconst VALUE_FIELDS = ['command', 'url', 'serverUrl', 'httpUrl', 'endpoint'] as const;\n/** Declaration fields that carry a list of such values. */\nconst LIST_FIELDS = ['args'] as const;\n\n/** One recognizable declaration, kept so the diagnostic can state its own evidence. */\nexport interface McpMatch {\n  readonly server: string;\n  /** `name`, or the declaration field that carried the token. */\n  readonly field: 'name' | (typeof VALUE_FIELDS)[number] | (typeof LIST_FIELDS)[number];\n  readonly value: string;\n}\n\nfunction asRecord(value: unknown): Record<string, unknown> | undefined {\n  return value !== null && typeof value === 'object' && !Array.isArray(value)\n    ? (value as Record<string, unknown>)\n    : undefined;\n}\n\n/** An MCP declaration map exactly as an already-parsed config carries it. */\nexport function serverTable(value: unknown): Record<string, unknown> {\n  return asRecord(value) ?? {};\n}\n\n/** Names one side declares and the other does not, in both directions. */\nexport interface NameDivergence {\n  /** Declared for the operator but absent from the compared side. */\n  readonly missing: readonly string[];\n  /** Declared by the compared side but no longer by the operator. */\n  readonly extra: readonly string[];\n}\n\n/**\n * Compare two declaration maps by server name alone. Used for seed-once runtime state the\n * room must not synchronize: a name difference is reportable, and nothing about what those\n * servers run is compared, copied, or written back.\n */\nexport function serverNameDivergence(\n  operator: Readonly<Record<string, unknown>>,\n  compared: Readonly<Record<string, unknown>>,\n): NameDivergence | undefined {\n  const operatorNames = new Set(Object.keys(operator));\n  const comparedNames = new Set(Object.keys(compared));\n  const missing = [...operatorNames].filter(name => !comparedNames.has(name)).sort();\n  const extra = [...comparedNames].filter(name => !operatorNames.has(name)).sort();\n  return missing.length === 0 && extra.length === 0 ? undefined : { missing, extra };\n}\n\n/**\n * The declaration maps inside a JSON configuration file, read through the named keys only:\n * nothing else in the document — history, credentials, runtime state — is inspected.\n *\n * Every named key is merged, in the order given, because an agent that accepts more than one\n * key loads all of them: stopping at the first table would let a benign one hide a Paseo\n * declaration under a later key. A name declared twice keeps the earlier key's entry at its\n * own name and the later one under a key-qualified name, so no declaration is lost. Invalid\n * JSON, a non-object root, or a named declaration value that is not an object is rejected:\n * an unparseable source cannot truthfully be reported as inspected and clean.\n */\nexport function jsonServerTable(source: string | undefined, keys: readonly string[]): Record<string, unknown> {\n  if (source === undefined) return {};\n  const root = asRecord(JSON.parse(source));\n  if (!root) throw new TypeError('MCP configuration must be a JSON object.');\n  const merged: Record<string, unknown> = {};\n  for (const key of keys) {\n    const value = root[key];\n    if (value === undefined) continue;\n    const table = asRecord(value);\n    if (!table) throw new TypeError(`${key} must be a JSON object.`);\n    for (const [server, declaration] of Object.entries(table)) {\n      merged[server in merged ? `${server} (${key})` : server] = declaration;\n    }\n  }\n  return merged;\n}\n\n/** Every recognizably Paseo-related declaration, with the evidence that recognized it. */\nexport function detectPaseoServers(servers: Readonly<Record<string, unknown>>): McpMatch[] {\n  const matches: McpMatch[] = [];\n  for (const [server, declaration] of Object.entries(servers)) {\n    if (PASEO_TOKEN.test(server)) matches.push({ server, field: 'name', value: server });\n    const fields = asRecord(declaration);\n    if (!fields) continue;\n    for (const field of VALUE_FIELDS) {\n      const value = fields[field];\n      if (typeof value === 'string' && PASEO_TOKEN.test(value)) matches.push({ server, field, value });\n    }\n    for (const field of LIST_FIELDS) {\n      const list = fields[field];\n      if (!Array.isArray(list)) continue;\n      for (const item of list) {\n        if (typeof item === 'string' && PASEO_TOKEN.test(item)) matches.push({ server, field, value: item });\n      }\n    }\n  }\n  return matches;\n}\n\nfunction evidence(match: McpMatch): string {\n  return match.field === 'name' ? `${match.server} (server name)` : `${match.server} (${match.field}: ${match.value})`;\n}\n\n/**\n * Paseo is the room's only control plane, so a Peer-visible MCP server that looks like a\n * second one fails before anything is applied. The room never edits operator configuration:\n * the fix names the source file and leaves the decision with the operator.\n */\nexport function paseoMcpCheck(id: string, path: string, servers: Readonly<Record<string, unknown>>): Check | undefined {\n  const matches = detectPaseoServers(servers);\n  if (matches.length === 0) return undefined;\n  return fail(id,\n    `${path} declares MCP servers that are recognizably Paseo-related: ${matches.map(evidence).join('; ')}.`,\n    `Remove or rename those servers in ${path} so no room seat reaches Paseo outside its own seat, then run setup again. paseo-room never edits your MCP configuration, and this name check is a bounded heuristic rather than a sandbox.`);\n}\n","import { readdir } from 'node:fs/promises';\nimport { join } from 'node:path';\nimport type { Entry } from '../fsops.js';\nimport type { Role } from '../roles.js';\n\n/** The one operator resource Peer receives as an exact projection rather than an alias. */\nexport const SKILLS = 'skills';\n\n/** A room-owned orchestration skill: advertised to seats that orchestrate, never to Peer. */\nfunction isPaseoSkill(name: string): boolean {\n  return name.toLowerCase().startsWith('paseo');\n}\n\n/**\n * Peer has no room tools, so the room also stops loading orchestration surfaces into it.\n * This closes known configuration paths — Peer still has a shell, so it is not containment.\n */\nfunction receivesExecutableResources(role: Role): boolean {\n  return role !== 'peer';\n}\n\n/** Names under the operator skills directory; a missing directory is an empty projection. */\nasync function skillNames(path: string): Promise<string[]> {\n  try { return (await readdir(path)).filter(name => !isPaseoSkill(name)).sort(); } catch (error) {\n    if (error !== null && typeof error === 'object' && 'code' in error && error.code === 'ENOENT') return [];\n    throw error;\n  }\n}\n\nexport interface RoleResourceInput {\n  readonly role: Role;\n  /** The role home every generated alias is created inside. */\n  readonly target: string;\n  /** The operator agent home the shared resources are read from. */\n  readonly home: string;\n  /** Shared resource basenames in the adapter's declared order, present or not. */\n  readonly names: readonly string[];\n  /** Absolute operator paths that exist, probed once for every role. */\n  readonly shared: readonly string[];\n  /** Basenames whose contents can run code, withheld from Peer. */\n  readonly executable: readonly string[];\n}\n\n/**\n * Supervisor and Lead keep one alias per shared operator resource that exists, so they never\n * gain a broken link. Peer receives no executable resource, and its `skills` becomes an exact\n * managed directory of links to the non-`paseo*` operator skills, so an inventory change\n * cannot leave it silently stale.\n *\n * Peer's projection is declared even when the operator deleted the whole skills directory:\n * an empty managed directory is what lets a later run remove yesterday's child links, or\n * migrate the legacy whole-directory symlink, instead of leaving them unreconciled.\n */\nexport async function roleResourceEntries(input: RoleResourceInput): Promise<Entry[]> {\n  const present = new Set(input.shared);\n  const executable = new Set(input.executable);\n  const entries: Entry[] = [];\n  for (const name of input.names) {\n    const path = join(input.home, name);\n    const alias = join(input.target, name);\n    if (!receivesExecutableResources(input.role)) {\n      if (executable.has(name)) continue;\n      if (name === SKILLS) {\n        const children = present.has(path) ? await skillNames(path) : [];\n        entries.push({ kind: 'managed-dir', path: alias, children, legacyLink: path });\n        for (const child of children) entries.push({ kind: 'link', path: join(alias, child), target: join(path, child) });\n        continue;\n      }\n    }\n    if (!present.has(path)) continue;\n    entries.push({ kind: 'link', path: alias, target: path });\n  }\n  return entries;\n}\n","import { readFile } from 'node:fs/promises';\nimport { join } from 'node:path';\nimport {\n  ambientNamesCheck, configuredByNamesCheck, inspectCredentialPath, presentNames, preservedCredentialCheck,\n  roleCommand, type CredentialDiagnostic,\n} from '../credentials.js';\nimport type { Layout } from '../layout.js';\nimport { roleHome } from '../layout.js';\nimport type { Entry } from '../fsops.js';\nimport { existingPaths, exists, readIfPresent } from '../fsops.js';\nimport { fail, pass, warn, type Check } from '../result.js';\nimport type { Role } from '../roles.js';\nimport { renderInstructions } from '../room/instructions.js';\nimport { which } from '../which.js';\nimport { jsonServerTable, paseoMcpCheck, serverNameDivergence, type NameDivergence } from './mcp.js';\nimport { roleResourceEntries } from './resources.js';\nimport type { Agent, AgentPlan } from './types.js';\n\n/** Operator-authored resources shared by reference; native agent definitions stay out. */\nconst SHARED = [\n  'skills', 'plugins', 'commands', 'hooks', 'rules',\n  'output-styles', 'keybindings.json', 'themes',\n] as const;\n/** These carry executable prompts, plugin code, and hook programs: never shared with Peer. */\nconst EXECUTABLE = ['plugins', 'commands', 'hooks'] as const;\n/** Claude keeps personal MCP declarations under this one key of its runtime state. */\nconst MCP_KEY = 'mcpServers';\nconst AUTH_ENV = [\n  'ANTHROPIC_AUTH_TOKEN', 'ANTHROPIC_API_KEY', 'CLAUDE_CODE_OAUTH_TOKEN',\n  'CLAUDE_CODE_USE_BEDROCK', 'CLAUDE_CODE_USE_VERTEX', 'CLAUDE_CODE_USE_FOUNDRY',\n] as const;\nconst CONTROL_PLANE_ENV = {\n  CLAUDE_CODE_DISABLE_AGENT_VIEW: '1',\n  CLAUDE_CODE_DISABLE_WORKFLOWS: '1',\n} as const;\nconst SECURE_STORAGE_ENV = 'CLAUDE_SECURESTORAGE_CONFIG_DIR';\n/** Copied once so a fresh role home does not re-run interactive onboarding. */\nconst SEEDED_KEYS = ['hasCompletedOnboarding', 'theme', 'installMethod', 'userID', MCP_KEY] as const;\n\nfunction asObject(value: unknown): Record<string, unknown> {\n  return value !== null && typeof value === 'object' && !Array.isArray(value) ? { ...value } : {};\n}\n/** Any unreadable or non-object source is simply an empty starting point. */\nfunction readObject(source: string | undefined): Record<string, unknown> {\n  try { return asObject(source === undefined ? {} : JSON.parse(source)); } catch { return {}; }\n}\n\n/** Read optional runtime state, but do not turn an inspection failure into \"no servers\". */\nasync function readStateIfPresent(path: string): Promise<string | undefined> {\n  try { return await readFile(path, 'utf8'); } catch (error) {\n    if (error !== null && typeof error === 'object' && 'code' in error && error.code === 'ENOENT') return undefined;\n    throw error;\n  }\n}\n\n/** Keep operator configuration while closing non-Paseo inbound coordination. */\nexport function renderRoleSettings(source: string | undefined, role: Role, secureStorageDir?: string): string {\n  const settings = readObject(source);\n  // Claude applies settings.env after the launch environment, so repeat these\n  // provider pins here after operator values to make them effective.\n  settings.env = {\n    ...asObject(settings.env),\n    ...CONTROL_PLANE_ENV,\n    PASEO_ROOM_ROLE: role,\n    ...(secureStorageDir === undefined ? {} : { [SECURE_STORAGE_ENV]: secureStorageDir }),\n  };\n  // These restrictive settings cannot be weakened by another settings scope.\n  settings.disableAgentView = true;\n  settings.disableWorkflows = true;\n  settings.crossSessionInbound = 'refuse';\n  return JSON.stringify(settings, null, 2) + '\\n';\n}\n\nexport function renderRoleState(source: string | undefined): string {\n  const root = readObject(source);\n  const state: Record<string, unknown> = { hasCompletedOnboarding: true };\n  for (const key of SEEDED_KEYS) if (key in root) state[key] = root[key];\n  return JSON.stringify(state, null, 2) + '\\n';\n}\n\n/** Preserve the operator's global memory, then add the stronger room role contract. */\nexport function renderRoleMemory(source: string | undefined, role: Role): string {\n  const operator = source?.trim();\n  return operator ? `${operator}\\n\\n${renderInstructions(role)}` : renderInstructions(role);\n}\n\n/** Detect only configuration names; never inspect environment or settings values. */\nexport function claudeAuthMethodNames(settingsSource: string | undefined, envNames: ReadonlySet<string>): string[] {\n  const settings = readObject(settingsSource);\n  const settingsEnv = asObject(settings.env);\n  const names = new Set(presentNames(envNames, AUTH_ENV));\n  for (const name of AUTH_ENV) if (Object.hasOwn(settingsEnv, name)) names.add(name);\n  if (Object.hasOwn(settings, 'apiKeyHelper')) names.add('apiKeyHelper');\n  return [...names];\n}\n\nexport async function claudeCredentialDiagnostic(\n  layout: Layout,\n  role: Role,\n  settingsSource: string | undefined,\n  platform: NodeJS.Platform = process.platform,\n  binary = 'claude',\n): Promise<CredentialDiagnostic> {\n  const home = roleHome(layout, 'claude', role);\n  const path = join(home, '.credentials.json');\n  const roleEnvironment = { CLAUDE_CONFIG_DIR: home, [SECURE_STORAGE_ENV]: home };\n  const login = roleCommand(roleEnvironment, binary, ['auth', 'login']);\n  const status = roleCommand(roleEnvironment, binary, ['auth', 'status']);\n  const state = await inspectCredentialPath(path);\n  const id = `claude.auth.${role}`;\n  if (state.kind !== 'missing') {\n    return { path, checks: [preservedCredentialCheck({ id, agent: 'Claude', role, path, state, login, status })] };\n  }\n  const configured = claudeAuthMethodNames(settingsSource, new Set());\n  if (configured.length > 0) return { path, checks: [configuredByNamesCheck(id, 'Claude', role, configured)] };\n  const ambient = presentNames(layout.envNames, AUTH_ENV);\n  if (ambient.length > 0) return { path, checks: [ambientNamesCheck(id, 'Claude', role, ambient)] };\n  if (platform === 'darwin') {\n    return { path, checks: [{\n      id: `${id}.native-keyring-unverifiable`, status: 'warn',\n      message: `Claude ${role} auth: native-keyring unverifiable; the current runtime's secure-storage location is pinned to this role home, but no Keychain entry was queried and older runtime behavior was not assumed. Token validity and freshness were not checked.`,\n      fix: `Authenticate this role with: ${login}. If that subcommand is unavailable, launch ${roleCommand(roleEnvironment, binary)} and run /login. Check status with: ${status}.`,\n    }] };\n  }\n  return { path, checks: [{\n    id: `${id}.login-required`, status: 'warn',\n    message: `Claude ${role} auth: login-required; no role-owned .credentials.json or configured environment/static auth method was detected. Authentication was not attempted.`,\n    fix: `Authenticate this role with: ${login}. If that subcommand is unavailable, launch ${roleCommand(roleEnvironment, binary)} and run /login. Check status with: ${status}.`,\n  }] };\n}\n\n/**\n * `.claude.json` is seeded once and runtime-owned afterwards, so a later change to the\n * operator's own MCP inventory never reaches a role home. That is reported rather than\n * repaired: rewriting the file would discard whatever the runtime has since stored in it.\n * Only declared names are compared — no command, URL, argument, credential or history value\n * is read for this check.\n */\nfunction mcpDriftCheck(role: Role, home: string, path: string, divergence: NameDivergence): Check {\n  const parts = [\n    ...(divergence.missing.length === 0 ? [] : [`not declared for this role: ${divergence.missing.join(', ')}`]),\n    ...(divergence.extra.length === 0 ? [] : [`declared only for this role: ${divergence.extra.join(', ')}`]),\n  ];\n  return warn(`claude.mcp.drift.${role}`,\n    `Claude ${role} MCP server names differ from your own Claude MCP servers (${parts.join('; ')}). ${path} is seeded once and owned by Claude afterwards, so paseo-room did not change it; only server names were compared.`,\n    `If this role should have the same servers, add them with: CLAUDE_CONFIG_DIR=${home} claude mcp add ... — or delete ${path} and run setup --apply to reseed it from your current Claude state, which discards that role's other runtime state.`);\n}\n\nexport const claudeAgent: Agent = {\n  id: 'claude',\n  label: 'Claude Code',\n  homeEnv: 'CLAUDE_CONFIG_DIR',\n  // Agent View and dynamic workflows have entry points beyond model tool calls.\n  providerEnv: CONTROL_PLANE_ENV,\n  defaultModeId: 'bypassPermissions',\n  // Keep the legacy Task name and block current native orchestration,\n  // shared task/cron coordination, and cross-session paths. Paseo alone owns\n  // agent lifecycle and coordination.\n  pins: {\n    disallowedTools: [\n      'Task', 'Agent', 'Workflow', 'ListAgents', 'SendMessage', 'TeamCreate', 'TeamDelete',\n      'TaskCreate', 'TaskGet', 'TaskList', 'TaskUpdate',\n      'CronCreate', 'CronDelete', 'CronList',\n    ],\n  },\n  async build(layout: Layout, roles: readonly Role[]): Promise<AgentPlan> {\n    const home = layout.agentHome.claude;\n    const binary = await which(layout.bin.claude, layout.searchPath);\n    if (!binary) {\n      return { entries: [], checks: [fail('claude.bin', 'Claude Code executable not found.', 'Install Claude Code, or pass --claude-bin /path/to/claude.')] };\n    }\n    if (!(await exists(home))) {\n      return { entries: [], checks: [fail('claude.home', `No Claude config directory at ${home}.`, 'Run claude once to initialise it, or pass --claude-home.')] };\n    }\n    const checks: Check[] = [pass('claude.home', `Claude Code found at ${binary} using ${home}.`)];\n\n    const settingsSource = await readIfPresent(join(home, 'settings.json'));\n    const memorySource = await readIfPresent(join(home, 'CLAUDE.md'));\n    let stateSource: string | undefined;\n    let operatorServers: Record<string, unknown>;\n    try {\n      stateSource = await readStateIfPresent(layout.claudeState);\n      // `.claude.json` is runtime-owned after the seed write, so only this one key is interpreted.\n      operatorServers = jsonServerTable(stateSource, [MCP_KEY]);\n    } catch {\n      return { entries: [], checks: [...checks, fail('claude.mcp',\n        `Could not read ${layout.claudeState} as a JSON object, so its MCP declarations could not be inspected.`,\n        'Make your Claude state file readable and fix its JSON structure, then run setup again.')] };\n    }\n    const stateConflict = paseoMcpCheck('claude.mcp', layout.claudeState, operatorServers);\n    if (stateConflict) return { entries: [], checks: [...checks, stateConflict] };\n    const shared = await existingPaths(home, SHARED);\n    const entries: Entry[] = [];\n    const credentials: CredentialDiagnostic[] = [];\n    const providerEnv: Partial<Record<Role, Readonly<Record<string, string>>>> = {};\n    // Held back so a hard conflict found in a later role is never preceded by advice.\n    const drift: Check[] = [];\n    for (const role of roles) {\n      const target = roleHome(layout, 'claude', role);\n      const statePath = join(target, '.claude.json');\n      // A seeded role home keeps its own copy, so its declarations are checked as well.\n      let roleStateSource: string | undefined;\n      let roleServers: Record<string, unknown>;\n      try {\n        roleStateSource = await readStateIfPresent(statePath);\n        roleServers = jsonServerTable(roleStateSource, [MCP_KEY]);\n      } catch {\n        return { entries: [], checks: [...checks, fail(`claude.mcp.${role}`,\n          `Could not read ${statePath} as a JSON object, so its MCP declarations could not be inspected.`,\n          'Make that role-owned Claude state file readable and fix its JSON structure, then run setup again.')] };\n      }\n      const roleConflict = paseoMcpCheck(`claude.mcp.${role}`, statePath, roleServers);\n      if (roleConflict) return { entries: [], checks: [...checks, roleConflict] };\n      // Only an already-seeded role home can have drifted: an absent one is about to be\n      // seeded from the same operator state this run just read.\n      if (roleStateSource !== undefined) {\n        const divergence = serverNameDivergence(operatorServers, roleServers);\n        if (divergence) drift.push(mcpDriftCheck(role, target, statePath, divergence));\n      }\n      entries.push({ kind: 'dir', path: target });\n      entries.push({ kind: 'file', path: join(target, 'CLAUDE.md'), content: renderRoleMemory(memorySource, role) });\n      entries.push({ kind: 'file', path: join(target, 'settings.json'), content: renderRoleSettings(settingsSource, role, target) });\n      entries.push({ kind: 'file', path: statePath, content: renderRoleState(stateSource), once: true });\n      entries.push(...await roleResourceEntries({ role, target, home, names: SHARED, shared, executable: EXECUTABLE }));\n      credentials.push(await claudeCredentialDiagnostic(layout, role, settingsSource, process.platform, binary));\n      providerEnv[role] = { [SECURE_STORAGE_ENV]: target };\n    }\n    return { entries, credentials, checks: [...checks, ...drift], binary, providerEnv };\n  },\n};\n","import { join } from 'node:path';\nimport { parse, stringify, type TomlTable } from 'smol-toml';\nimport { inspectCredentialPath, preservedCredentialCheck, roleCommand, type CredentialDiagnostic } from '../credentials.js';\nimport type { Layout } from '../layout.js';\nimport { roleHome } from '../layout.js';\nimport type { Entry } from '../fsops.js';\nimport { existingPaths, readIfPresent } from '../fsops.js';\nimport { fail, pass, type Check } from '../result.js';\nimport type { Role } from '../roles.js';\nimport { renderInstructions } from '../room/instructions.js';\nimport { probe, which } from '../which.js';\nimport { paseoMcpCheck, serverTable } from './mcp.js';\nimport { roleResourceEntries } from './resources.js';\nimport type { Agent, AgentPlan } from './types.js';\n\n/** Read-only operator resources every role shares by reference, never by copy. */\nconst SHARED = ['AGENTS.md', 'skills', 'plugins', 'hooks.json'] as const;\n/** Plugins and hooks run operator code, so Peer — which has no room tools — never loads them. */\nconst EXECUTABLE = ['plugins', 'hooks.json'] as const;\nconst CATALOG = 'model-catalog.json';\nexport type CodexCredentialStore = 'file' | 'ephemeral' | 'auto' | 'keyring' | 'unknown';\n\nfunction table(parent: TomlTable, key: string): TomlTable {\n  const value = parent[key];\n  if (value === undefined || typeof value !== 'object' || Array.isArray(value) || value instanceof Date) {\n    return (parent[key] = {});\n  }\n  return value;\n}\n\n/**\n * Close Codex's native multi-agent features inside one scope: the top-level table, or an\n * active profile, which outranks it.\n */\nfunction pinMultiAgentFeatures(scope: TomlTable): void {\n  const features = table(scope, 'features');\n  features.multi_agent = false;\n  // Newer configs represent v2 as a table; keep that shape rather than writing a\n  // boolean at the same key, which would be a TOML conflict.\n  if (typeof features.multi_agent_v2 === 'boolean' || features.multi_agent_v2 === undefined) features.multi_agent_v2 = false;\n  else table(features, 'multi_agent_v2').enabled = false;\n}\n\nexport interface RoleConfigInput {\n  readonly roleDocument: string;\n  readonly catalogPath?: string;\n}\n/**\n * Copy the operator's config, then override only the keys the room owns.\n *\n * `model_instructions_file` is deliberately untouched: it *replaces* Codex's base\n * prompt, so writing it would mean vendoring and maintaining a full copy of that\n * prompt. The room contract is additive and belongs in `developer_instructions`.\n */\nexport function renderRoleConfig(source: TomlTable, input: RoleConfigInput): string {\n  const config = structuredClone(source);\n  config.sandbox_mode = 'danger-full-access';\n  config.approval_policy = 'never';\n  config.developer_instructions = input.roleDocument;\n  if (input.catalogPath) config.model_catalog_json = input.catalogPath;\n  // Codex's own multi-agent mode would compete with the room's role contract.\n  // `[agents]` stays top-level only: Codex profiles have no such key.\n  table(config, 'agents').enabled = false;\n  pinMultiAgentFeatures(config);\n  // An active profile outranks the top-level keys, so every room-owned key a profile can\n  // also carry — sandbox, approval, catalog, features — has to land there too.\n  if (typeof config.profile === 'string') {\n    const profile = table(table(config, 'profiles'), config.profile);\n    profile.sandbox_mode = 'danger-full-access';\n    profile.approval_policy = 'never';\n    if (input.catalogPath) profile.model_catalog_json = input.catalogPath;\n    pinMultiAgentFeatures(profile);\n  }\n  return stringify(config) + '\\n';\n}\n\nexport function renderCatalog(catalog: unknown): string {\n  return JSON.stringify(catalog, (key, value: unknown) => (key === 'multi_agent_version' ? null : value), 2) + '\\n';\n}\n\n/** Facts the captured catalog itself carries. Nothing is inferred beyond them. */\nexport interface CatalogEvidence {\n  /** Codex reads the catalog as a JSON object, so any other top-level shape is not one. */\n  readonly object: boolean;\n  /** How many `multi_agent_version` fields the capture carried, and the copy therefore nulls. */\n  readonly markers: number;\n}\n\nexport function catalogEvidence(catalog: unknown): CatalogEvidence {\n  let markers = 0;\n  const walk = (value: unknown): void => {\n    if (Array.isArray(value)) { for (const item of value) walk(item); return; }\n    if (value === null || typeof value !== 'object') return;\n    for (const [key, nested] of Object.entries(value)) {\n      if (key === 'multi_agent_version') markers += 1;\n      else walk(nested);\n    }\n  };\n  walk(catalog);\n  return { object: catalog !== null && typeof catalog === 'object' && !Array.isArray(catalog), markers };\n}\n\n/** Read only the generated config's non-secret store selector. */\nexport function codexCredentialStore(config: TomlTable): CodexCredentialStore {\n  const value = config.cli_auth_credentials_store;\n  return value === 'file' || value === 'ephemeral' || value === 'auto' || value === 'keyring'\n    ? value\n    : 'unknown';\n}\n\nasync function credentialDiagnostic(\n  layout: Layout,\n  role: Role,\n  store: CodexCredentialStore,\n  binary: string,\n): Promise<CredentialDiagnostic> {\n  const home = roleHome(layout, 'codex', role);\n  const path = join(home, 'auth.json');\n  const login = roleCommand({ CODEX_HOME: home }, binary, ['login']);\n  const status = roleCommand({ CODEX_HOME: home }, binary, ['login', 'status']);\n  const state = await inspectCredentialPath(path);\n  const id = `codex.auth.${role}`;\n  const checks: Check[] = [];\n  if (state.kind !== 'missing') {\n    checks.push(preservedCredentialCheck({ id, agent: 'Codex', role, path, state, login, status }));\n  } else {\n    if (store === 'keyring' || store === 'auto') {\n      checks.push({\n        id: `${id}.native-keyring-unverifiable`, status: 'warn',\n        message: `Codex ${role} auth: native-keyring unverifiable; cli_auth_credentials_store is ${store}, and no keyring was queried. Token validity and freshness were not checked.`,\n        fix: `Authenticate this role with: ${login}. Check status with: ${status}.`,\n      });\n    } else {\n      const apiKey = layout.envNames.has('OPENAI_API_KEY')\n        ? ' OPENAI_API_KEY is present only in the setup process; Codex has not stored it for this role and paseo-room does not copy it into the provider.'\n        : '';\n      const detail = store === 'ephemeral'\n        ? 'cli_auth_credentials_store is ephemeral, so no persistent credential file is expected'\n        : `no role-owned auth.json exists${store === 'file' ? ' for the configured file store' : ''}`;\n      checks.push({\n        id: `${id}.login-required`, status: 'warn',\n        message: `Codex ${role} auth: login-required; ${detail}.${apiKey} Authentication was not attempted.`,\n        fix: `Authenticate this role with: ${login}. Check status with: ${status}.`,\n      });\n    }\n  }\n  if (state.kind !== 'missing' && (store === 'keyring' || store === 'auto')) {\n    checks.push({\n      id: `${id}.native-keyring-unverifiable`, status: 'warn',\n      message: `Codex ${role} auth: native-keyring unverifiable; cli_auth_credentials_store is ${store}, and the preserved auth.json does not prove what the runtime will use. No keyring was queried.`,\n      fix: `Check status without exposing credentials: ${status}.`,\n    });\n  }\n  return { path, checks };\n}\n\nexport const codexAgent: Agent = {\n  id: 'codex',\n  label: 'Codex',\n  homeEnv: 'CODEX_HOME',\n  defaultModeId: 'full-access',\n  // Without these, Paseo's own mode preset (default auto-review) is sent to the\n  // app-server and outranks the sandbox/approval keys in the generated config.\n  pins: { params: { sandbox_mode: 'danger-full-access', approval_policy: 'never' } },\n  async build(layout: Layout, roles: readonly Role[]): Promise<AgentPlan> {\n    const checks: Check[] = [];\n    const home = layout.agentHome.codex;\n    const binary = await which(layout.bin.codex, layout.searchPath);\n    if (!binary) {\n      return { entries: [], checks: [fail('codex.bin', 'Codex executable not found.', 'Install Codex, or pass --codex-bin /path/to/codex.')] };\n    }\n    const configPath = join(home, 'config.toml');\n    const raw = await readIfPresent(configPath);\n    if (raw === undefined) {\n      return { entries: [], checks: [fail('codex.home', `No config.toml in ${home}.`, 'Run codex once to initialise it, or pass --codex-home.')] };\n    }\n    let source: TomlTable;\n    try { source = parse(raw); } catch {\n      return { entries: [], checks: [fail('codex.config', `Could not read ${configPath} as TOML.`, 'Fix the syntax in your Codex config, then run setup again.')] };\n    }\n    checks.push(pass('codex.home', `Codex found at ${binary} using ${home}.`));\n    // Paseo is the room's only control plane, so a Paseo-looking MCP server fails here,\n    // before any managed path is written, rather than being filtered out of the copy.\n    const conflict = paseoMcpCheck('codex.mcp', configPath, serverTable(source.mcp_servers));\n    if (conflict) return { entries: [], checks: [...checks, conflict] };\n    const store = codexCredentialStore(source);\n\n    const entries: Entry[] = [];\n    const credentials: CredentialDiagnostic[] = [];\n\n    // The scrubbed catalog is one of the room's three native multi-agent closures, so a\n    // catalog it cannot capture is a build failure, not a silent fall back to the\n    // built-in catalog and its collaboration metadata.\n    const capture = roleCommand({ CODEX_HOME: home }, binary, ['debug', 'models']);\n    const models = await probe(binary, ['debug', 'models'], { HOME: layout.home, CODEX_HOME: home, PATH: layout.searchPath });\n    if (!models.ok) {\n      return { entries: [], checks: [...checks, fail('codex.catalog',\n        'Codex model catalog unavailable, so native multi-agent metadata cannot be removed.',\n        `Run ${capture} to see why it failed, upgrade Codex to a version that prints the JSON catalog, then run setup again.`)] };\n    }\n    let catalogSource: string;\n    let evidence: CatalogEvidence;\n    try {\n      const parsed: unknown = JSON.parse(models.stdout);\n      evidence = catalogEvidence(parsed);\n      catalogSource = renderCatalog(parsed);\n    } catch {\n      return { entries: [], checks: [...checks, fail('codex.catalog',\n        'Codex model catalog was not valid JSON, so native multi-agent metadata cannot be removed.',\n        `Check the output of ${capture}, upgrade Codex if it does not print a JSON catalog, then run setup again.`)] };\n    }\n    // A JSON scalar or array parses but is not a catalog: writing it would point every role\n    // at a file Codex cannot load, which is the same closure failure as no catalog at all.\n    if (!evidence.object) {\n      return { entries: [], checks: [...checks, fail('codex.catalog',\n        'Codex printed valid JSON that is not a model catalog object, so native multi-agent metadata cannot be removed.',\n        `Check the output of ${capture}, upgrade Codex to a version that prints the JSON catalog object, then run setup again.`)] };\n    }\n    checks.push(pass('codex.catalog', evidence.markers === 0\n      ? `Codex model catalog captured from ${capture}; it declared no multi_agent_version field, and each role home gets that generated copy instead of Codex's built-in catalog.`\n      : `Codex model catalog captured from ${capture}; ${String(evidence.markers)} multi_agent_version field(s) are nulled in the generated copy in each role home.`));\n\n    const shared = await existingPaths(home, SHARED);\n    for (const role of roles) {\n      const target = roleHome(layout, 'codex', role);\n      const catalogPath = join(target, CATALOG);\n      const roleDocument = renderInstructions(role);\n      entries.push({ kind: 'dir', path: target });\n      // Codex reads the brief from developer_instructions; this copy is for the operator.\n      entries.push({ kind: 'file', path: join(target, 'role-instructions.md'), content: roleDocument });\n      entries.push({\n        kind: 'file',\n        path: join(target, 'config.toml'),\n        content: renderRoleConfig(source, { roleDocument, catalogPath }),\n      });\n      entries.push({ kind: 'file', path: catalogPath, content: catalogSource });\n      entries.push(...await roleResourceEntries({ role, target, home, names: SHARED, shared, executable: EXECUTABLE }));\n      credentials.push(await credentialDiagnostic(layout, role, store, binary));\n    }\n    return { entries, credentials, checks, binary };\n  },\n};\n","import { spawn } from 'node:child_process';\nimport { mkdtemp, readFile, realpath, rm, stat } from 'node:fs/promises';\nimport { tmpdir } from 'node:os';\nimport { isAbsolute, join, resolve } from 'node:path';\nimport {\n  ambientNamesCheck, inspectCredentialPath, presentNames, preservedCredentialCheck,\n  type CredentialDiagnostic,\n} from '../credentials.js';\nimport { piLoginCommand } from '../auth.js';\nimport type { Entry } from '../fsops.js';\nimport { existingPaths } from '../fsops.js';\nimport type { Layout } from '../layout.js';\nimport { contains, roleHome } from '../layout.js';\nimport { fail, pass, type Check } from '../result.js';\nimport type { Role } from '../roles.js';\nimport { renderInstructions } from '../room/instructions.js';\nimport { loadPromptAsset } from '../room/prompts.js';\nimport { which } from '../which.js';\nimport { jsonServerTable, paseoMcpCheck } from './mcp.js';\nimport { roleResourceEntries } from './resources.js';\nimport type { Agent, AgentPlan } from './types.js';\n\nconst PACKAGE_NAME = 'pi-mcp-adapter';\nconst PROBE_ID = 'paseo-room-pi-mcp-probe';\nconst PROBE_TIMEOUT_MS = 10_000;\nconst PROBE_OUTPUT_LIMIT = 1024 * 1024;\nconst SHARED = ['models.json', 'AGENTS.md', 'skills', 'prompts', 'themes', 'keybindings.json', 'mcp.json'] as const;\n/** Pi prompts are its slash commands, so they execute; Peer receives no such resource. */\nconst EXECUTABLE = ['prompts'] as const;\nconst MCP_FILE = 'mcp.json';\n/** Pi accepts either key for its declaration map, so both are read and neither is rewritten. */\nconst MCP_KEYS = ['mcpServers', 'servers'] as const;\n/** Built-in provider key names only; ambient cloud credential files are deliberately not probed. */\nconst AUTH_ENV = [\n  'ANTHROPIC_AUTH_TOKEN', 'ANTHROPIC_OAUTH_TOKEN', 'ANTHROPIC_API_KEY',\n  'OPENAI_API_KEY', 'AZURE_OPENAI_API_KEY', 'GEMINI_API_KEY', 'GOOGLE_CLOUD_API_KEY',\n  'MISTRAL_API_KEY', 'GROQ_API_KEY', 'CEREBRAS_API_KEY', 'XAI_API_KEY',\n  'DEEPSEEK_API_KEY', 'OPENROUTER_API_KEY', 'AI_GATEWAY_API_KEY', 'FIREWORKS_API_KEY',\n  'ZAI_API_KEY', 'MINIMAX_API_KEY', 'OPENCODE_API_KEY', 'KIMI_API_KEY',\n  'COPILOT_GITHUB_TOKEN',\n] as const;\n\nfunction asObject(value: unknown): Record<string, unknown> | undefined {\n  return value !== null && typeof value === 'object' && !Array.isArray(value) ? { ...value } : undefined;\n}\n\n/** Copy operator preferences but remove every declaration that can install or load packages. */\nexport function renderPiSettings(source: string | undefined): string {\n  const parsed: unknown = source === undefined ? {} : JSON.parse(source);\n  const settings = asObject(parsed);\n  if (!settings) throw new Error('Pi settings must be a JSON object.');\n  delete settings.packages;\n  delete settings.extensions;\n  return JSON.stringify(settings, null, 2) + '\\n';\n}\n\n/** Preserve the operator append first; room-specific guidance is additive and stronger. */\nexport function renderPiAppend(source: string | undefined, role: Role): string {\n  return [\n    source?.trim(),\n    loadPromptAsset('pi', 'communicationStyle'),\n    loadPromptAsset('pi', 'runtime'),\n    renderInstructions(role),\n  ].filter((part): part is string => Boolean(part)).join('\\n\\n');\n}\n\ninterface ResolvedAdapter {\n  readonly entry: string;\n  readonly version: string;\n}\n\nfunction adapterFailure(home: string, detail: string): Check {\n  return fail('pi.adapter', detail,\n    `Install ${PACKAGE_NAME} in ${join(home, 'npm')} with Pi yourself, then run setup again.`);\n}\n\n/** Resolve only Pi's intended global package and its single declared extension entry. */\nexport async function resolvePiAdapter(home: string): Promise<{ readonly adapter?: ResolvedAdapter; readonly check: Check }> {\n  const packageRoot = join(home, 'npm', 'node_modules', PACKAGE_NAME);\n  const manifestPath = join(packageRoot, 'package.json');\n  try {\n    const [canonicalRoot, manifestStat, raw] = await Promise.all([\n      realpath(packageRoot), stat(manifestPath), readFile(manifestPath, 'utf8'),\n    ]);\n    if (!manifestStat.isFile()) return { check: adapterFailure(home, `${manifestPath} is not a regular file.`) };\n    const manifest = asObject(JSON.parse(raw));\n    if (!manifest || manifest.name !== PACKAGE_NAME) {\n      return { check: adapterFailure(home, `${manifestPath} does not identify ${PACKAGE_NAME}.`) };\n    }\n    const pi = asObject(manifest.pi);\n    const declared = pi?.extensions;\n    if (!Array.isArray(declared) || declared.length !== 1 || typeof declared[0] !== 'string' || !declared[0].trim()) {\n      return { check: adapterFailure(home, `${manifestPath} must declare one Pi extension entry.`) };\n    }\n    const declaration = declared[0];\n    if (isAbsolute(declaration)) {\n      return { check: adapterFailure(home, `${manifestPath} declares an unsafe absolute extension path.`) };\n    }\n    const candidate = resolve(packageRoot, declaration);\n    const [canonicalEntry, entryStat] = await Promise.all([realpath(candidate), stat(candidate)]);\n    if (!contains(canonicalRoot, canonicalEntry) || canonicalEntry === canonicalRoot || !entryStat.isFile()) {\n      return { check: adapterFailure(home, `The declared ${PACKAGE_NAME} extension escapes its package or is not a regular file.`) };\n    }\n    const version = typeof manifest.version === 'string' && manifest.version.trim() ? manifest.version.trim() : 'unknown';\n    return {\n      adapter: { entry: canonicalEntry, version },\n      check: pass('pi.adapter', `${PACKAGE_NAME} ${version} resolved to ${canonicalEntry}.`),\n    };\n  } catch {\n    return { check: adapterFailure(home, `Could not safely resolve ${PACKAGE_NAME} from ${manifestPath}.`) };\n  }\n}\n\nexport interface PiProbeOptions {\n  readonly timeoutMs?: number;\n  readonly outputLimit?: number;\n}\ninterface ProcessResult {\n  readonly ok: boolean;\n  readonly stdout: string;\n  readonly reason?: 'failure' | 'timeout' | 'overflow';\n}\n\nfunction terminateProbe(child: ReturnType<typeof spawn>): void {\n  if (child.pid !== undefined) {\n    try { process.kill(-child.pid, 'SIGKILL'); } catch { /* the process group may already be gone */ }\n  }\n  try { child.kill('SIGKILL'); } catch { /* the direct child may already be gone */ }\n  child.stdin?.destroy();\n  child.stdout?.destroy();\n  child.stderr?.destroy();\n}\n\n/** One bounded JSONL request in its own process group and isolated working directory. */\nfunction runProbeProcess(\n  executable: string,\n  adapterEntry: string,\n  env: NodeJS.ProcessEnv,\n  options: PiProbeOptions,\n  cwd: string,\n): Promise<ProcessResult> {\n  const timeoutMs = options.timeoutMs ?? PROBE_TIMEOUT_MS;\n  const outputLimit = options.outputLimit ?? PROBE_OUTPUT_LIMIT;\n  const args = ['--mode', 'rpc', '--no-session', '--no-extensions', '--extension', adapterEntry, '--no-approve'];\n  return new Promise(resolveResult => {\n    const child = spawn(executable, args, { cwd, detached: true, env, stdio: ['pipe', 'pipe', 'pipe'] });\n    const stdout: Buffer[] = [];\n    let bytes = 0;\n    let settled = false;\n    const finish = (result: ProcessResult): void => {\n      if (settled) return;\n      settled = true;\n      clearTimeout(timer);\n      resolveResult(result);\n    };\n    const abort = (reason: NonNullable<ProcessResult['reason']>): void => {\n      if (settled) return;\n      terminateProbe(child);\n      finish({ ok: false, stdout: Buffer.concat(stdout).toString('utf8'), reason });\n    };\n    const capture = (chunk: Buffer, keep: boolean): void => {\n      if (settled) return;\n      bytes += chunk.length;\n      if (bytes > outputLimit) {\n        abort('overflow');\n        return;\n      }\n      if (keep) stdout.push(chunk);\n    };\n    const timer = setTimeout(() => { abort('timeout'); }, timeoutMs);\n    child.stdout.on('data', (chunk: Buffer) => { capture(chunk, true); });\n    child.stderr.on('data', (chunk: Buffer) => { capture(chunk, false); });\n    child.stdout.on('error', () => { abort('failure'); });\n    child.stderr.on('error', () => { abort('failure'); });\n    child.on('error', () => { abort('failure'); });\n    child.on('close', code => {\n      const output = Buffer.concat(stdout).toString('utf8');\n      finish(code === 0 ? { ok: true, stdout: output } : { ok: false, stdout: output, reason: 'failure' });\n    });\n    child.stdin.on('error', () => { /* a failed child is reported by close/error */ });\n    child.stdin.end(`${JSON.stringify({ id: PROBE_ID, type: 'get_commands' })}\\n`);\n  });\n}\n\n/** Pi runs migrations against cwd before RPC, so never probe in the caller's project. */\nasync function runProbe(\n  executable: string,\n  adapterEntry: string,\n  env: NodeJS.ProcessEnv,\n  options: PiProbeOptions,\n): Promise<ProcessResult> {\n  const createdCwd = await mkdtemp(join(tmpdir(), 'paseo-room-pi-probe-'));\n  const cwd = await realpath(createdCwd);\n  try {\n    return await runProbeProcess(executable, adapterEntry, {\n      ...env,\n      HOME: cwd,\n      PI_CODING_AGENT_DIR: '/dev/null',\n      PI_MCP_CONFIG_MODE: 'exclusive',\n      PI_OFFLINE: '1',\n    }, options, cwd);\n  } finally {\n    await rm(createdCwd, { force: true, recursive: true });\n  }\n}\n\nfunction probeFailure(message: string): Check {\n  return fail('pi.capability', message,\n    'Use a Pi and pi-mcp-adapter installation that exposes /mcp through the declared adapter entry.');\n}\n\n/** Authenticate the exact adapter path through Pi's correlated get_commands response. */\nexport async function probePiMcp(\n  executable: string,\n  adapterEntry: string,\n  env: NodeJS.ProcessEnv,\n  options: PiProbeOptions = {},\n): Promise<Check> {\n  let result: ProcessResult;\n  try {\n    result = await runProbe(executable, adapterEntry, env, options);\n  } catch {\n    return probeFailure('Pi capability probe could not create or clean its isolated working directory.');\n  }\n  if (!result.ok) {\n    if (result.reason === 'timeout') return probeFailure('Pi capability probe timed out.');\n    if (result.reason === 'overflow') return probeFailure('Pi capability probe exceeded its output limit.');\n    return probeFailure('Pi capability probe failed.');\n  }\n  const correlated: Record<string, unknown>[] = [];\n  for (const line of result.stdout.split(/\\r?\\n/).filter(Boolean)) {\n    let parsed: unknown;\n    try { parsed = JSON.parse(line); } catch { return probeFailure('Pi capability probe returned malformed JSONL.'); }\n    const event = asObject(parsed);\n    if (!event) return probeFailure('Pi capability probe returned malformed JSONL.');\n    if (event.type === 'response' && event.id === PROBE_ID) correlated.push(event);\n  }\n  if (correlated.length !== 1) return probeFailure('Pi capability probe did not return one correlated get_commands response.');\n  const response = correlated[0];\n  if (response?.command !== 'get_commands' || response.success !== true) {\n    return probeFailure('Pi rejected the get_commands capability probe.');\n  }\n  const data = asObject(response.data);\n  const commands = data?.commands;\n  if (!Array.isArray(commands)) return probeFailure('Pi get_commands response was malformed.');\n  const matches = commands.map(asObject).filter((command): command is Record<string, unknown> => command?.name === 'mcp');\n  if (matches.length !== 1) return probeFailure('Pi did not expose exactly one /mcp command.');\n  const command = matches[0];\n  if (command?.source !== 'extension') return probeFailure('Pi exposed /mcp from the wrong source.');\n  const sourceInfo = asObject(command.sourceInfo);\n  if (typeof sourceInfo?.path !== 'string') return probeFailure('Pi did not report the /mcp extension path.');\n  try {\n    const sourcePath = await realpath(sourceInfo.path);\n    if (sourcePath !== adapterEntry) return probeFailure('Pi loaded /mcp from a different extension path.');\n  } catch {\n    return probeFailure('Pi reported an unresolvable /mcp extension path.');\n  }\n  return pass('pi.capability', `Pi exposed /mcp from ${adapterEntry}.`);\n}\n\nasync function readPiOptional(path: string): Promise<string | undefined> {\n  try {\n    return await readFile(path, 'utf8');\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === 'ENOENT') return undefined;\n    throw error;\n  }\n}\n\nexport async function piCredentialDiagnostic(layout: Layout, role: Role, binary = 'pi'): Promise<CredentialDiagnostic> {\n  const home = roleHome(layout, 'pi', role);\n  const path = join(home, 'auth.json');\n  const launch = piLoginCommand(home, binary);\n  const state = await inspectCredentialPath(path);\n  const id = `pi.auth.${role}`;\n  if (state.kind !== 'missing') {\n    return {\n      path,\n      checks: [preservedCredentialCheck({\n        id, agent: 'Pi', role, path, state,\n        login: `${launch}; this starts a minimal, non-room-equivalent interactive login session. Run /login, then exit Pi`,\n      })],\n    };\n  }\n  const configured = presentNames(layout.envNames, AUTH_ENV);\n  if (configured.length > 0) return { path, checks: [ambientNamesCheck(id, 'Pi', role, configured)] };\n  return { path, checks: [{\n    id: `${id}.login-required`, status: 'warn',\n    message: `Pi ${role} auth: login-required; no role-owned auth.json or known provider environment name was detected. Ambient provider auth may exist, but it was not inspected or validated.`,\n    fix: `Start a minimal, non-room-equivalent interactive login session with: ${launch}. Run /login, then exit Pi.`,\n  }] };\n}\n\nexport const piAgent: Agent = {\n  id: 'pi',\n  label: 'Pi',\n  homeEnv: 'PI_CODING_AGENT_DIR',\n  providerEnv: { PI_MCP_CONFIG_MODE: 'exclusive' },\n  pins: {},\n  async build(layout: Layout, roles: readonly Role[]): Promise<AgentPlan> {\n    const home = layout.agentHome.pi;\n    const binary = await which(layout.bin.pi, layout.searchPath);\n    if (!binary) {\n      return { entries: [], checks: [fail('pi.bin', 'Pi executable not found.', 'Install Pi yourself, or pass --pi-bin /path/to/pi.')] };\n    }\n    try {\n      if (!(await stat(home)).isDirectory()) throw new Error('not a directory');\n    } catch {\n      return { entries: [], checks: [fail('pi.home', `No Pi config directory at ${home}.`, 'Run Pi once to initialise it, or pass --pi-home.')] };\n    }\n    const resolved = await resolvePiAdapter(home);\n    if (!resolved.adapter) return { entries: [], checks: [resolved.check] };\n    const capability = await probePiMcp(binary, resolved.adapter.entry, {\n      HOME: layout.home,\n      PATH: layout.searchPath,\n      PI_CODING_AGENT_DIR: '/dev/null',\n      PI_OFFLINE: '1',\n    });\n    if (capability.status === 'fail') return { entries: [], checks: [resolved.check, capability] };\n\n    const settingsPath = join(home, 'settings.json');\n    let settings: string;\n    try { settings = renderPiSettings(await readPiOptional(settingsPath)); } catch {\n      return {\n        entries: [], checks: [resolved.check, capability,\n          fail('pi.settings', `Could not read ${settingsPath} as a JSON object.`,\n            'Make your Pi settings readable and fix any JSON syntax, then run setup again.')],\n      };\n    }\n    const operatorAppendPath = join(home, 'APPEND_SYSTEM.md');\n    let operatorAppend: string | undefined;\n    try {\n      operatorAppend = await readPiOptional(operatorAppendPath);\n    } catch {\n      return {\n        entries: [], checks: [resolved.check, capability,\n          fail('pi.append', `Could not read ${operatorAppendPath}.`,\n            'Make your Pi APPEND_SYSTEM.md readable, then run setup again.')],\n      };\n    }\n    const shared = await existingPaths(home, SHARED);\n    // The adapter reads this file as its only config source, so a Paseo-looking server here\n    // would be a second control plane. Fail before apply; never edit the operator's file.\n    const mcpPath = join(home, MCP_FILE);\n    let servers: Record<string, unknown>;\n    try {\n      servers = jsonServerTable(await readPiOptional(mcpPath), MCP_KEYS);\n    } catch {\n      return {\n        entries: [], checks: [resolved.check, capability,\n          fail('pi.mcp', `Could not read ${mcpPath} as a JSON object, so its MCP declarations could not be inspected.`,\n            'Make your Pi mcp.json readable and fix its JSON structure, then run setup again.')],\n      };\n    }\n    const conflict = paseoMcpCheck('pi.mcp', mcpPath, servers);\n    if (conflict) return { entries: [], checks: [resolved.check, capability, conflict] };\n    const entries: Entry[] = [];\n    const credentials: CredentialDiagnostic[] = [];\n    const argv: Partial<Record<Role, readonly string[]>> = {};\n    for (const role of roles) {\n      const target = roleHome(layout, 'pi', role);\n      const appendPath = join(target, 'APPEND_SYSTEM.md');\n      entries.push({ kind: 'dir', path: target });\n      entries.push({ kind: 'file', path: join(target, 'settings.json'), content: settings });\n      entries.push({ kind: 'file', path: appendPath, content: renderPiAppend(operatorAppend, role) });\n      entries.push(...await roleResourceEntries({ role, target, home, names: SHARED, shared, executable: EXECUTABLE }));\n      credentials.push(await piCredentialDiagnostic(layout, role, binary));\n      argv[role] = ['--no-extensions', '--extension', resolved.adapter.entry, '--no-approve', '--append-system-prompt', appendPath];\n    }\n    return {\n      entries,\n      credentials,\n      checks: [pass('pi.home', `Pi found at ${binary} using ${home}.`), resolved.check, capability],\n      binary,\n      argv,\n    };\n  },\n};\n","import type { PaseoClient, PaseoClientConfig } from '@getpaseo/client';\nimport { gte, valid } from 'semver';\nimport { z } from 'zod';\nimport type { Layout } from './layout.js';\nimport { fail, pass, type Check } from './result.js';\nimport type { Profile, Provider } from './agents/types.js';\nimport type { AgentId } from './roles.js';\nimport { probe, which } from './which.js';\n\nexport const MINIMUM_VERSION = '0.8.0-beta.1';\nexport const PI_MINIMUM_VERSION = '0.8.0';\n\nexport function minimumPaseoVersion(agents: readonly AgentId[]): string {\n  return agents.includes('pi') || agents.includes('claude') ? PI_MINIMUM_VERSION : MINIMUM_VERSION;\n}\n\nconst statusSchema = z.object({\n  listen: z.string().min(1),\n  localDaemon: z.enum(['running', 'stopped', 'stale_pid', 'unresponsive']),\n  cliVersion: z.string(),\n  daemonVersion: z.string().nullable(),\n});\n\nexport interface Daemon {\n  readonly url: string;\n  readonly version: string;\n}\nexport interface DaemonResult {\n  readonly checks: readonly Check[];\n  readonly daemon?: Daemon;\n}\n\nexport function normalizeUrl(listen: string): string | undefined {\n  const match = /^(?:ws:\\/\\/)?([^:/]+|\\[[^\\]]+\\]):(\\d+)$/.exec(listen.trim());\n  if (!match) return undefined;\n  const [, host = '', port = ''] = match;\n  const local = ['localhost', '127.0.0.1', '0.0.0.0', '[::1]', '[::]'].includes(host) ? '127.0.0.1' : host;\n  return `ws://${local}:${port}`;\n}\n\n/** The whole compatibility story: is Paseo running, and is it new enough? */\nexport function assessStatus(raw: unknown, minimumVersion = MINIMUM_VERSION): DaemonResult {\n  const parsed = statusSchema.safeParse(raw);\n  if (!parsed.success) {\n    return { checks: [fail('paseo.status', 'Paseo status output was not understood.', 'Upgrade Paseo, then run: paseo daemon status --json')] };\n  }\n  const status = parsed.data;\n  if (status.localDaemon !== 'running') {\n    return { checks: [fail('paseo.daemon', `Paseo daemon is ${status.localDaemon}.`, 'Start it with: paseo daemon start')] };\n  }\n  const cli = valid(status.cliVersion);\n  const daemon = status.daemonVersion === null ? null : valid(status.daemonVersion);\n  if (!cli || !daemon) {\n    return { checks: [fail('paseo.version', 'Paseo did not report a usable version.', 'Upgrade Paseo to a release that reports semver versions.')] };\n  }\n  if (cli !== daemon) {\n    return { checks: [fail('paseo.version', `Paseo CLI is ${cli} but the running daemon is ${daemon}.`, 'Restart the daemon with: paseo daemon restart')] };\n  }\n  if (!gte(daemon, minimumVersion)) {\n    return { checks: [fail('paseo.version', `Paseo ${daemon} is older than the required ${minimumVersion}.`, 'Upgrade Paseo, then run setup again.')] };\n  }\n  const url = normalizeUrl(status.listen);\n  if (!url) {\n    return { checks: [fail('paseo.listen', `Paseo listen address ${status.listen} was not understood.`, 'Use a host:port listen address in the Paseo config.')] };\n  }\n  return { checks: [pass('paseo.version', `Paseo ${daemon} is running on ${url} (compatible, needs >= ${minimumVersion}).`)], daemon: { url, version: daemon } };\n}\n\nexport async function checkDaemon(layout: Layout, env: NodeJS.ProcessEnv = process.env, minimumVersion = MINIMUM_VERSION): Promise<DaemonResult> {\n  const binary = await which(layout.bin.paseo, layout.searchPath);\n  if (!binary) {\n    return { checks: [fail('paseo.bin', 'Paseo executable not found.', 'Install Paseo, or pass --paseo-bin /path/to/paseo.')] };\n  }\n  const output = await probe(binary, ['daemon', 'status', '--json'], {\n    HOME: layout.home, PASEO_HOME: layout.paseoHome, PATH: layout.searchPath,\n    ...(env.PASEO_PASSWORD === undefined ? {} : { PASEO_PASSWORD: env.PASEO_PASSWORD }),\n  });\n  if (!output.ok) {\n    return { checks: [fail('paseo.status', 'Could not read Paseo daemon status.', 'Run: paseo daemon status --json')] };\n  }\n  try { return assessStatus(JSON.parse(output.stdout), minimumVersion); }\n  catch { return assessStatus(undefined, minimumVersion); }\n}\n\nconst configSchema = z.object({\n  config: z.object({\n    providers: z.record(z.string(), z.unknown()).optional(),\n    // Read loosely: entries carry operator fields the room neither knows nor touches.\n    agentProfiles: z.array(z.record(z.string(), z.unknown())).optional(),\n    pluginsEnabled: z.boolean().optional(),\n  }),\n});\nexport type LiveProfile = Record<string, unknown>;\nexport interface LivePlugin {\n  readonly id: string;\n  readonly path: string;\n  readonly enabled: boolean;\n  readonly status: string;\n  readonly error?: string | undefined;\n}\n\nexport interface Session {\n  readProviders(): Promise<Record<string, unknown>>;\n  writeProviders(providers: Readonly<Record<string, Provider>>): Promise<void>;\n  removeProviders(ids: readonly string[]): Promise<void>;\n  readProfiles(): Promise<readonly LiveProfile[]>;\n  /** Paseo has no remove-one call for profiles, so this replaces the whole array. */\n  writeProfiles(profiles: readonly LiveProfile[]): Promise<void>;\n  pluginsEnabled(): Promise<boolean>;\n  listPlugins(): Promise<readonly LivePlugin[]>;\n  installPlugin(path: string, id: string): Promise<LivePlugin>;\n  reloadPlugin(id: string): Promise<LivePlugin>;\n  enablePlugin(id: string): Promise<LivePlugin>;\n  removePlugin(id: string): Promise<void>;\n  refresh(ids: readonly string[]): Promise<void>;\n}\nexport interface RoomClient extends PaseoClient {\n  listPlugins(): Promise<LivePlugin[]>;\n  installDirectoryPlugin(path: string, id?: string): Promise<LivePlugin>;\n  reloadPlugin(id: string): Promise<LivePlugin>;\n  enablePlugin(id: string): Promise<LivePlugin>;\n  removePlugin(id: string): Promise<void>;\n}\nexport type ClientFactory = (config: PaseoClientConfig) => RoomClient;\n\n/** One connection per command. No retries, no reconnects, no background state. */\nexport async function withSession<T>(\n  daemon: Daemon,\n  run: (session: Session) => Promise<T>,\n  options: { readonly password?: string; readonly factory?: ClientFactory } = {},\n): Promise<T> {\n  const quiet = { debug() { /* silent */ }, info() { /* silent */ }, warn() { /* silent */ }, error() { /* silent */ } };\n  // Loaded here so the \"Paseo is not running\" path never pays for the SDK.\n  const clientConfig: PaseoClientConfig = {\n    url: `${daemon.url}/ws`,\n    ...(options.password === undefined ? {} : { password: options.password }),\n    appVersion: MINIMUM_VERSION,\n    connectTimeoutMs: 10_000,\n    reconnect: { enabled: false },\n    logger: quiet,\n  };\n  let client: RoomClient;\n  if (options.factory !== undefined) {\n    client = options.factory(clientConfig);\n  } else {\n    const [{ createPaseoApi }, { DaemonClient }] = await Promise.all([\n      import('@getpaseo/client'), import('@getpaseo/client/internal/daemon-client'),\n    ]);\n    const raw = new DaemonClient({ ...clientConfig, clientId: `paseo-room-${String(process.pid)}`, clientType: 'cli' });\n    client = {\n      ...createPaseoApi(raw),\n      connect: () => raw.connect(), close: () => raw.close(),\n      ensureConnected: () => { raw.ensureConnected(); }, getConnectionState: () => raw.getConnectionState(),\n      listPlugins: () => raw.listPlugins(),\n      installDirectoryPlugin: (path, id) => raw.installDirectoryPlugin(path, id),\n      reloadPlugin: id => raw.reloadPlugin(id), enablePlugin: id => raw.enablePlugin(id),\n      removePlugin: id => raw.removePlugin(id),\n    };\n  }\n  try {\n    await client.connect();\n    return await run({\n      async readProviders() {\n        const response = configSchema.parse(await client.config.get());\n        return response.config.providers ?? {};\n      },\n      async writeProviders(providers) {\n        await client.config.patch({ providers } as unknown as Parameters<PaseoClient['config']['patch']>[0]);\n      },\n      async removeProviders(ids) {\n        await client.config.patch({ removeProviders: [...ids] });\n      },\n      async readProfiles() {\n        const response = configSchema.parse(await client.config.get());\n        return response.config.agentProfiles ?? [];\n      },\n      async writeProfiles(profiles) {\n        await client.config.patch({ agentProfiles: [...profiles] } as unknown as Parameters<PaseoClient['config']['patch']>[0]);\n      },\n      async pluginsEnabled() {\n        const response = configSchema.parse(await client.config.get());\n        return response.config.pluginsEnabled === true;\n      },\n      async listPlugins() {\n        return await client.listPlugins();\n      },\n      async installPlugin(path, id) {\n        return await client.installDirectoryPlugin(path, id);\n      },\n      async reloadPlugin(id) {\n        return await client.reloadPlugin(id);\n      },\n      async enablePlugin(id) {\n        return await client.enablePlugin(id);\n      },\n      async removePlugin(id) {\n        await client.removePlugin(id);\n      },\n      async refresh(ids) {\n        await client.providers.refresh({ providers: [...ids] });\n      },\n    });\n  } finally {\n    await client.close();\n  }\n}\n\n/**\n * The provider environment is written whole by the room, so it is compared whole: an\n * added key can enable exactly what the pins close, and a subset test would call that a\n * match. Unrelated *top-level* provider fields remain the operator's.\n */\nfunction envMatches(live: unknown, desired: Readonly<Record<string, string>>): boolean {\n  if (live === null || typeof live !== 'object' || Array.isArray(live)) return false;\n  const entries = Object.entries(live as Record<string, unknown>);\n  return entries.length === Object.keys(desired).length &&\n    entries.every(([key, value]) => Object.hasOwn(desired, key) && value === desired[key]);\n}\n\n/** Compare only the keys the room owns; unrelated fields stay the operator's. */\nexport function providerMatches(desired: Provider, live: unknown): boolean {\n  if (live === null || typeof live !== 'object') return false;\n  const entry = live as Record<string, unknown>;\n  const tools = entry.paseoTools;\n  const same = (left: unknown, right: unknown): boolean => JSON.stringify(left ?? null) === JSON.stringify(right ?? null);\n  return entry.extends === desired.extends &&\n    same(entry.command, desired.command) &&\n    envMatches(entry.env, desired.env) &&\n    tools !== null && typeof tools === 'object' &&\n    (tools as { enabled?: unknown }).enabled === desired.paseoTools.enabled &&\n    // Pins are the room's guarantee: drifting them silently re-enables what they block.\n    same(entry.params, desired.params) &&\n    same(entry.disallowedTools, desired.disallowedTools);\n}\n\n/** Compare only the fields the room writes on an update; the rest are the operator's. */\nexport function profileMatches(desired: Profile, live: unknown): boolean {\n  if (live === null || typeof live !== 'object') return false;\n  const entry = live as Record<string, unknown>;\n  return entry.name === desired.name && entry.icon === desired.icon && entry.color === desired.color &&\n    entry.provider === desired.provider && entry.modeId === desired.modeId && entry.notes === desired.notes;\n}\n\n/**\n * Paseo stores every profile in one host-wide array, so the room rewrites that array\n * rather than patching an entry. Operator profiles pass through untouched, and so does\n * every field of a room profile that the room does not own.\n */\nexport function mergeProfiles(\n  live: readonly LiveProfile[],\n  desired: readonly Profile[],\n  drop: readonly string[],\n): LiveProfile[] {\n  const dropped = new Set(drop);\n  const wanted = new Map(desired.map(profile => [profile.id, profile]));\n  const seen = new Set<string>();\n  const kept = live\n    .filter(entry => !dropped.has(String(entry.id)))\n    .map(entry => {\n      const profile = wanted.get(String(entry.id));\n      if (!profile) return entry;\n      seen.add(profile.id);\n      // Model and thinkingOptionId remain operator choices; the room owns the\n      // role's visual identity and its no-prompt launch mode.\n      const updated: LiveProfile = {\n        ...entry, name: profile.name, icon: profile.icon, color: profile.color,\n        provider: profile.provider, notes: profile.notes,\n      };\n      if (profile.modeId === undefined) delete updated.modeId;\n      else updated.modeId = profile.modeId;\n      return updated;\n    });\n  return [...kept, ...desired.filter(profile => !seen.has(profile.id)).map(profile => ({ ...profile }))];\n}\n","import { readFileSync } from 'node:fs';\nimport { join } from 'node:path';\nimport type { Entry } from './fsops.js';\nimport type { Layout } from './layout.js';\nimport { providerId, type Role } from './roles.js';\nimport { contractDigest, renderInstructions } from './room/instructions.js';\n\nexport const CLAUDE_CARRIER_PLUGIN_ID = 'paseo-room-claude-carrier';\nexport const CLAUDE_CARRIER_PASEO_RANGE = '>=0.8.0 <0.9.0';\n\nconst STATIC_ASSETS = [\n  'paseo-plugin.json',\n  'package.json',\n  'tsconfig.json',\n  'index.server.ts',\n  'server/carrier.ts',\n] as const;\n\nfunction loadAsset(path: string): string {\n  return readFileSync(new URL(`./plugin-assets/${path}`, import.meta.url), 'utf8');\n}\n\nexport function claudeCarrierPluginDir(layout: Layout): string {\n  return join(layout.roomHome, 'plugin');\n}\n\nexport function renderClaudeCarrierContract(roles: readonly Role[]): string {\n  const contracts = Object.fromEntries(roles.map(role => [providerId('claude', role), renderInstructions(role)]));\n  return [\n    '/** Generated by paseo-room. The Markdown prompt assets remain authoritative. */',\n    `export const GENERATION = ${JSON.stringify(contractDigest())};`,\n    `export const CONTRACT: Readonly<Record<string, string>> = ${JSON.stringify(contracts, null, 2)};`,\n    '',\n  ].join('\\n');\n}\n\nexport function claudeCarrierEntries(layout: Layout, roles: readonly Role[]): Entry[] {\n  const root = claudeCarrierPluginDir(layout);\n  return [\n    { kind: 'dir', path: root },\n    { kind: 'dir', path: join(root, 'server') },\n    ...STATIC_ASSETS.map(path => ({ kind: 'file' as const, path: join(root, path), content: loadAsset(path) })),\n    { kind: 'file', path: join(root, 'server', 'contract.ts'), content: renderClaudeCarrierContract(roles) },\n  ];\n}\n","import { join, sep } from 'node:path';\nimport { lstat, rm } from 'node:fs/promises';\nimport metadata from '../package.json' with { type: 'json' };\nimport { claudeAgent } from './agents/claude.js';\nimport { codexAgent } from './agents/codex.js';\nimport { piAgent } from './agents/pi.js';\nimport type { Agent, AgentPlan, Profile, Provider } from './agents/types.js';\nimport { AUTHENTICATION_GUIDE, renderAuthenticationGuide } from './auth.js';\nimport { applyEntries, exists, planEntries, type Entry } from './fsops.js';\nimport { layoutChecks, resolveLayout, roleHome, sharedRoom, type Layout, type Options } from './layout.js';\nimport { checkDaemon, mergeProfiles, minimumPaseoVersion, profileMatches, providerMatches, withSession, type ClientFactory, type LivePlugin, type LiveProfile, type Session } from './paseo.js';\nimport { CLAUDE_CARRIER_PLUGIN_ID, claudeCarrierEntries, claudeCarrierPluginDir } from './plugin.js';\nimport { fail, failed, hasFailure, pass, warn, type Check, type Operation, type Result } from './result.js';\nimport { contractDigest, renderInstructions } from './room/instructions.js';\nimport { MARKER, readMarker, renderMarker, type Marker } from './room.js';\nimport { DELEGATING_THINKING, profileId, providerId, providerLabel, ROLES, ROLE_COLOR, ROLE_ICON, ROLE_NOTES, ROLE_PASEO_TOOLS, ROLE_THINKING, type AgentId, type Role } from './roles.js';\n\nexport const AGENTS: Record<AgentId, Agent> = { codex: codexAgent, claude: claudeAgent, pi: piAgent };\n\nexport interface RunOptions extends Options {\n  readonly agents?: readonly AgentId[];\n  readonly apply?: boolean;\n  readonly env?: NodeJS.ProcessEnv;\n  readonly factory?: ClientFactory;\n}\n\nfunction sessionOptions(options: RunOptions): { password?: string; factory?: ClientFactory } {\n  const password = (options.env ?? process.env).PASEO_PASSWORD;\n  return { ...(password === undefined ? {} : { password }), ...(options.factory ? { factory: options.factory } : {}) };\n}\n\n/** The only per-agent differences are the home variable and the provider pins. */\nfunction roleProviders(\n  layout: Layout,\n  agent: Agent,\n  plan: { readonly binary: string; readonly argv?: AgentPlan['argv']; readonly providerEnv?: AgentPlan['providerEnv'] },\n  roles: readonly Role[],\n): Record<string, Provider> {\n  return Object.fromEntries(roles.map(role => [providerId(agent.id, role), {\n    extends: agent.id,\n    label: providerLabel(agent.id, role),\n    command: [plan.binary, ...(plan.argv?.[role] ?? [])],\n    env: { ...agent.providerEnv, ...plan.providerEnv?.[role], [agent.homeEnv]: roleHome(layout, agent.id, role) },\n    paseoTools: { enabled: ROLE_PASEO_TOOLS[role] },\n    ...agent.pins,\n  }]));\n}\n\n/** The picker preset that points at a provider, so a seat is one click rather than four. */\nfunction roleProfiles(agent: Agent, roles: readonly Role[]): Profile[] {\n  return roles.map(role => ({\n    id: profileId(agent.id, role),\n    name: providerLabel(agent.id, role),\n    icon: ROLE_ICON[role],\n    color: ROLE_COLOR[role],\n    provider: providerId(agent.id, role),\n    ...(agent.defaultModeId === undefined ? {} : { modeId: agent.defaultModeId }),\n    thinkingOptionId: ROLE_THINKING[role],\n    notes: ROLE_NOTES[role],\n  }));\n}\n\ninterface Desired {\n  readonly entries: readonly Entry[];\n  readonly providers: Readonly<Record<string, Provider>>;\n  readonly profiles: readonly Profile[];\n  readonly checks: readonly Check[];\n  readonly pluginPath?: string;\n}\nasync function buildDesired(layout: Layout, agents: readonly AgentId[], roles: readonly Role[]): Promise<Desired> {\n  // Template, not linked into any seat: each repo owns its own docs/WORKSPACE_PROTOCOL.md.\n  // Named exactly as Workspace Protocol Precedence names it, so a copy needs no rename.\n  const entries: Entry[] = [\n    { kind: 'dir', path: layout.roomHome },\n    { kind: 'dir', path: sharedRoom(layout) },\n    { kind: 'file', path: join(sharedRoom(layout), 'WORKSPACE_PROTOCOL.md'), content: renderInstructions('workspace') },\n  ];\n  const providers: Record<string, Provider> = {};\n  const profiles: Profile[] = [];\n  const checks: Check[] = [];\n  const binaries: Partial<Record<AgentId, string>> = {};\n  for (const id of agents) {\n    const agent = AGENTS[id];\n    const plan = await agent.build(layout, roles);\n    entries.push(...plan.entries);\n    checks.push(...plan.checks);\n    const credentials = plan.credentials ?? [];\n    checks.push(...credentials.flatMap(credential => credential.checks));\n    const credentialPaths = new Set(credentials.map(credential => credential.path));\n    const collisions = plan.entries.filter(entry => credentialPaths.has(entry.path));\n    if (collisions.length > 0) {\n      checks.push(fail(`${id}.credentials`,\n        `${agent.label} produced managed entries for preserve-only credential paths: ${collisions.map(entry => entry.path).join(', ')}.`,\n        'This is an adapter defect; do not apply the plan.'));\n    }\n    if (plan.binary === undefined) continue;\n    binaries[id] = plan.binary;\n    Object.assign(providers, roleProviders(layout, agent, {\n      binary: plan.binary,\n      ...(plan.argv ? { argv: plan.argv } : {}),\n      ...(plan.providerEnv ? { providerEnv: plan.providerEnv } : {}),\n    }, roles));\n    profiles.push(...roleProfiles(agent, roles));\n  }\n  if (agents.every(id => binaries[id] !== undefined)) {\n    entries.push({\n      kind: 'file',\n      path: join(layout.roomHome, AUTHENTICATION_GUIDE),\n      content: renderAuthenticationGuide(layout.roomHome, binaries, agents, roles),\n    });\n    checks.push(warn('room.authentication-not-validated',\n      `Role authentication was not validated. Login instructions are managed at ${join(layout.roomHome, AUTHENTICATION_GUIDE)}.`,\n      'After setup --apply, follow that guide or run: paseo-room auth login <agent> <role>'));\n  }\n  const pluginPath = agents.includes('claude') ? claudeCarrierPluginDir(layout) : undefined;\n  if (pluginPath !== undefined) entries.push(...claudeCarrierEntries(layout, roles));\n  entries.push({ kind: 'file', path: join(layout.roomHome, MARKER), content: renderMarker(metadata.version, agents, roles, contractDigest()) });\n  return { entries, providers, profiles, checks, ...(pluginPath === undefined ? {} : { pluginPath }) };\n}\n\n/**\n * The marker records which rendered contract generation installed this room, so an operator\n * who upgrades the package can see that the seats now hold older text. A room installed\n * before provenance existed has no digest, which is reported the same way rather than\n * treated as a broken marker.\n */\nfunction contractProvenance(previous: Marker | undefined): Check[] {\n  const digest = contractDigest();\n  if (!previous) return [];\n  if (previous.contract === digest) {\n    return [pass('room.contract', `Role contract generation ${digest} matches this package.`)];\n  }\n  const held = previous.contract === undefined\n    ? `was installed before the room recorded its contract generation (package ${previous.version})`\n    : `holds contract generation ${previous.contract}`;\n  return [warn('room.contract',\n    `This room ${held}; this package renders ${digest}. Managed role documents are rewritten by setup, and a running seat keeps the text it started with.`,\n    'Run: paseo-room setup --apply, then restart the affected seats.')];\n}\n\n/**\n * `thinkingOptionId` is seeded once and the operator's afterwards, so a risky selection is\n * reported rather than corrected. Nothing here changes provider selection, profile writes, or\n * exit status.\n */\nfunction thinkingDiagnostics(live: readonly LiveProfile[], desired: readonly Profile[]): Check[] {\n  const owned = new Set(desired.map(profile => profile.id));\n  const selected = live\n    .filter(entry => owned.has(String(entry.id)))\n    .filter(entry => DELEGATING_THINKING.some(option => option === entry.thinkingOptionId))\n    .map(entry => `${String(entry.id)} (${String(entry.thinkingOptionId)})`)\n    .sort();\n  if (selected.length === 0) return [];\n  return [warn('room.thinking',\n    `${String(selected.length)} room seats are set to a top reasoning option that Paseo describes as including automatic task delegation: ${selected.join(', ')}. Whether that option can actually delegate once the room has closed the native multi-agent paths is unverified: paseo-room has not verified whether those closures prevent that option from delegating, and left your selection in place.`,\n    `Choose a lower reasoning option for those seats in Paseo if you want the room's own defaults (${ROLE_THINKING.supervisor} for Supervisor, ${ROLE_THINKING.lead} for Lead and Peer).`)];\n}\n\n/** Catalog copies are one of the room's three native multi-agent closures, so their drift is named. */\nfunction fileDriftDetail(targets: readonly string[]): string {\n  const catalogs = targets.filter(target => target.endsWith(`${sep}model-catalog.json`));\n  if (catalogs.length === 0) return '';\n  const count = catalogs.length === 1 ? 'One of them is a generated Codex model catalog' : `${String(catalogs.length)} of them are generated Codex model catalogs`;\n  return ` ${count}, so those seats currently lack the scrubbed catalog closure rather than only older contract text.`;\n}\n\ninterface Stale {\n  readonly providerIds: readonly string[];\n  readonly profileIds: readonly string[];\n  readonly removePlugin: boolean;\n  /** Role homes are retained during setup because runtime-owned credentials may be inside. */\n  readonly retainedDirectories: readonly string[];\n}\nconst NOTHING_STALE: Stale = { providerIds: [], profileIds: [], removePlugin: false, retainedDirectories: [] };\n\nasync function safeDirectory(path: string, checks: Check[]): Promise<boolean> {\n  try {\n    const stat = await lstat(path);\n    if (stat.isDirectory()) return true;\n    checks.push(fail('room.path-safety',\n      `Refusing to traverse ${path}: every existing room directory ancestor must be a real directory, not a symbolic link or another file type.`,\n      'Move the path aside manually after checking it for role-owned credentials, then run the command again.'));\n    return false;\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === 'ENOENT') return false;\n    checks.push(fail('room.path-safety', `Could not inspect room directory ${path} without following links.`,\n      'Fix its parent permissions or move the path manually, then run the command again.'));\n    return false;\n  }\n}\n\n/** Refuse managed writes through any existing room-relative directory alias. */\nasync function roomPathSafety(layout: Layout, agents: readonly AgentId[], roles: readonly Role[]): Promise<Check[]> {\n  const checks: Check[] = [];\n  if (!await safeDirectory(layout.roomHome, checks)) return checks;\n  await safeDirectory(sharedRoom(layout), checks);\n  const rolesHome = join(layout.roomHome, 'roles');\n  if (!await safeDirectory(rolesHome, checks)) return checks;\n  for (const agent of agents) {\n    const agentHome = join(rolesHome, agent);\n    if (!await safeDirectory(agentHome, checks)) continue;\n    for (const role of roles) await safeDirectory(roleHome(layout, agent, role), checks);\n  }\n  return checks;\n}\n\n/** A previous setup may have seated agents or roles this one does not: drop those. */\nasync function staleFrom(layout: Layout, previous: Marker | undefined, agents: readonly AgentId[], roles: readonly Role[]): Promise<Stale> {\n  if (!previous) return NOTHING_STALE;\n  const kept = new Set(agents.flatMap(agent => roles.map(role => providerId(agent, role))));\n  const providerIds: string[] = [];\n  const profileIds: string[] = [];\n  const retainedDirectories: string[] = [];\n  for (const agent of previous.agents) {\n    for (const role of previous.roles) {\n      if (kept.has(providerId(agent, role))) continue;\n      providerIds.push(providerId(agent, role));\n      profileIds.push(profileId(agent, role));\n      const path = roleHome(layout, agent, role);\n      if (await exists(path)) retainedDirectories.push(path);\n    }\n  }\n  return {\n    providerIds,\n    profileIds,\n    removePlugin: previous.agents.includes('claude') && !agents.includes('claude'),\n    retainedDirectories,\n  };\n}\n\ninterface Plan {\n  readonly operations: readonly Operation[];\n  /** Carried out of the plan so apply rewrites the array it actually compared against. */\n  readonly liveProfiles: readonly LiveProfile[];\n  readonly livePlugin?: LivePlugin;\n  readonly pluginChecks: readonly Check[];\n}\n\nfunction pluginPlan(desired: Desired, stale: Stale, plugins: readonly LivePlugin[], expectedPath: string): {\n  operation?: Operation; livePlugin?: LivePlugin; checks: Check[];\n} {\n  const livePlugin = plugins.find(plugin => plugin.id === CLAUDE_CARRIER_PLUGIN_ID);\n  const shouldManage = desired.pluginPath !== undefined || stale.removePlugin;\n  if (!shouldManage) return { checks: [] };\n  if (livePlugin !== undefined && livePlugin.path !== expectedPath) {\n    return {\n      livePlugin,\n      checks: [fail('claude.plugin.path',\n        `Plugin ${CLAUDE_CARRIER_PLUGIN_ID} is registered from ${livePlugin.path}, not the room-owned path ${expectedPath}.`,\n        'Move or remove that conflicting plugin registration manually, then run setup again.')],\n    };\n  }\n  if (desired.pluginPath !== undefined) {\n    const healthy = livePlugin?.enabled === true && livePlugin.status === 'running' && livePlugin.error === undefined;\n    return {\n      ...(livePlugin === undefined ? {} : { livePlugin }),\n      operation: { action: livePlugin === undefined ? 'create' : healthy ? 'noop' : 'update', kind: 'plugin', target: CLAUDE_CARRIER_PLUGIN_ID },\n      checks: [],\n    };\n  }\n  return {\n    ...(livePlugin === undefined ? {} : { livePlugin }),\n    operation: { action: livePlugin === undefined ? 'noop' : 'remove', kind: 'plugin', target: CLAUDE_CARRIER_PLUGIN_ID },\n    checks: [],\n  };\n}\n\n/** One definition of drift, shared by the command that fixes it and the one that reports it. */\nasync function planRoom(session: Session, desired: Desired, stale: Stale, expectedPluginPath: string): Promise<Plan> {\n  const inspectPlugins = desired.pluginPath !== undefined || stale.removePlugin;\n  const [live, liveProfiles, plugins] = await Promise.all([\n    session.readProviders(), session.readProfiles(), inspectPlugins ? session.listPlugins() : Promise.resolve([]),\n  ]);\n  const byId = new Map(liveProfiles.map(entry => [String(entry.id), entry]));\n  const plugin = pluginPlan(desired, stale, plugins, expectedPluginPath);\n  return {\n    liveProfiles,\n    ...(plugin.livePlugin === undefined ? {} : { livePlugin: plugin.livePlugin }),\n    pluginChecks: plugin.checks,\n    operations: [\n      ...await planEntries(desired.entries),\n      ...Object.entries(desired.providers).map(([id, provider]) => ({\n        action: !(id in live) ? 'create' : providerMatches(provider, live[id]) ? 'noop' : 'update',\n        kind: 'provider',\n        target: id,\n      }) satisfies Operation),\n      ...desired.profiles.map(profile => ({\n        action: !byId.has(profile.id) ? 'create' : profileMatches(profile, byId.get(profile.id)) ? 'noop' : 'update',\n        kind: 'profile',\n        target: profile.id,\n      }) satisfies Operation),\n      ...stale.providerIds.filter(id => id in live).map(id => ({ action: 'remove', kind: 'provider', target: id }) satisfies Operation),\n      ...stale.profileIds.filter(id => byId.has(id)).map(id => ({ action: 'remove', kind: 'profile', target: id }) satisfies Operation),\n      ...(plugin.operation === undefined ? [] : [plugin.operation]),\n    ],\n  };\n}\n\nfunction pluginsEnabledCheck(enabled: boolean): Check {\n  return enabled\n    ? pass('claude.plugin.enabled', 'Paseo plugins are enabled for the required Claude contract carrier.')\n    : fail('claude.plugin.enabled',\n      'Claude rooms require the paseo-room trusted server plugin, but Paseo plugins are disabled. Plugins are trusted, unsandboxed code with access to the daemon machine.',\n      'Review that trust boundary, enable plugins in Paseo Settings, reload Paseo, then run setup again.');\n}\n\nfunction pluginRuntimeCheck(plugin: LivePlugin | undefined, expectedPath: string): Check {\n  if (plugin === undefined) {\n    return fail('claude.plugin.runtime', `Plugin ${CLAUDE_CARRIER_PLUGIN_ID} is not registered.`, 'Run: paseo-room setup --apply');\n  }\n  if (plugin.path !== expectedPath) {\n    return fail('claude.plugin.runtime', `Plugin ${CLAUDE_CARRIER_PLUGIN_ID} is registered from ${plugin.path}, not ${expectedPath}.`,\n      'Move or remove that conflicting plugin registration manually, then run setup again.');\n  }\n  if (!plugin.enabled || plugin.status !== 'running' || plugin.error !== undefined) {\n    const detail = plugin.error === undefined ? `status ${plugin.status}` : `${plugin.status}: ${plugin.error}`;\n    return fail('claude.plugin.runtime', `Plugin ${CLAUDE_CARRIER_PLUGIN_ID} is not running (${detail}).`, 'Run: paseo-room setup --apply');\n  }\n  return pass('claude.plugin.runtime', `Claude contract carrier plugin is running from ${expectedPath}.`);\n}\n\nasync function reconcilePlugin(\n  session: Session, desired: Desired, plan: Plan, pending: readonly Operation[], expectedPath: string,\n): Promise<Check[]> {\n  if (desired.pluginPath === undefined) {\n    if (plan.livePlugin !== undefined) await session.removePlugin(CLAUDE_CARRIER_PLUGIN_ID);\n    return [];\n  }\n  let plugin = plan.livePlugin;\n  if (plugin === undefined) {\n    plugin = await session.installPlugin(expectedPath, CLAUDE_CARRIER_PLUGIN_ID);\n  } else {\n    if (!plugin.enabled) plugin = await session.enablePlugin(CLAUDE_CARRIER_PLUGIN_ID);\n    const filesChanged = pending.some(operation =>\n      (operation.kind === 'file' || operation.kind === 'dir') && operation.target.startsWith(`${expectedPath}${sep}`),\n    );\n    const needsReload = filesChanged || plugin.status !== 'running' || plugin.error !== undefined;\n    if (needsReload) plugin = await session.reloadPlugin(CLAUDE_CARRIER_PLUGIN_ID);\n  }\n  return [pluginRuntimeCheck(plugin, expectedPath)];\n}\n\n/** The whole product: write the role homes, then register them with Paseo. */\nexport async function setup(options: RunOptions = {}): Promise<Result> {\n  const layout = resolveLayout(options, options.env);\n  const agents = options.agents ?? ['codex'];\n  const invalid = layoutChecks(layout, agents);\n  if (invalid.length > 0) return failed('setup', invalid);\n  const rootSafety = await roomPathSafety(layout, [], []);\n  if (hasFailure(rootSafety)) return failed('setup', rootSafety);\n  const previous = await readMarker(layout);\n  const safetyAgents = [...new Set([...agents, ...(previous?.agents ?? [])])];\n  const pathSafety = await roomPathSafety(layout, safetyAgents, ROLES);\n  if (hasFailure(pathSafety)) return failed('setup', pathSafety);\n  // Cleanup uses the APIs required by the old selection too (notably Claude's plugin API).\n  const compatibilityAgents = [...new Set([...agents, ...(previous?.agents ?? [])])];\n  const daemon = await checkDaemon(layout, options.env, minimumPaseoVersion(compatibilityAgents));\n  if (!daemon.daemon) return failed('setup', daemon.checks);\n  const desired = await buildDesired(layout, agents, ROLES);\n  const stale = await staleFrom(layout, previous, agents, ROLES);\n  const retained = stale.retainedDirectories.length === 0 ? [] : [warn(\n    'room.stale-role-homes-preserved',\n    `Preserved ${String(stale.retainedDirectories.length)} deselected role homes because they may contain role-owned credentials or runtime state.`,\n    `Use paseo-room remove --apply to delete the entire room after reviewing its credential warning, or remove deselected homes manually: ${stale.retainedDirectories.join(', ')}`,\n  )];\n  const checks = [...daemon.checks, ...desired.checks, ...retained];\n  if (hasFailure(checks)) return failed('setup', checks);\n\n  return withSession(daemon.daemon, async session => {\n    const expectedPluginPath = claudeCarrierPluginDir(layout);\n    const plan = await planRoom(session, desired, stale, expectedPluginPath);\n    const { operations, liveProfiles } = plan;\n    const pending = operations.filter(operation => operation.action !== 'noop');\n    const pluginPreconditions = desired.pluginPath === undefined\n      ? plan.pluginChecks\n      : [pluginsEnabledCheck(await session.pluginsEnabled()), ...plan.pluginChecks];\n    // Diagnostics last: nothing above may be reached only through a warning.\n    const preApplyDiagnostics = [...checks, ...pluginPreconditions, ...contractProvenance(previous), ...thinkingDiagnostics(liveProfiles, desired.profiles)];\n    if (hasFailure(preApplyDiagnostics) || !options.apply) {\n      return {\n        command: 'setup',\n        outcome: hasFailure(preApplyDiagnostics) ? 'failed' : pending.length > 0 ? 'changes-planned' : 'ok',\n        changed: false, checks: preApplyDiagnostics, operations,\n      } satisfies Result;\n    }\n    // Keep the old marker until daemon reconciliation succeeds. If a remote write fails,\n    // rerunning setup can still discover every stale provider/profile/plugin it must remove.\n    const markerPath = join(layout.roomHome, MARKER);\n    const markerEntries = desired.entries.filter(entry => entry.path === markerPath);\n    await applyEntries(desired.entries.filter(entry => entry.path !== markerPath));\n    const ids = Object.keys(desired.providers);\n    await session.writeProviders(desired.providers);\n    if (stale.providerIds.length > 0) await session.removeProviders(stale.providerIds);\n    // Profiles point at providers, so they are written once the providers exist — and\n    // only when something changed, since one write replaces the host's whole array.\n    let appliedProfiles = liveProfiles;\n    if (pending.some(operation => operation.kind === 'profile')) {\n      appliedProfiles = mergeProfiles(liveProfiles, desired.profiles, stale.profileIds);\n      await session.writeProfiles(appliedProfiles);\n    }\n    await session.refresh(ids);\n    const pluginChecks = await reconcilePlugin(session, desired, plan, pending, expectedPluginPath);\n    await applyEntries(markerEntries);\n    const appliedMarker: Marker = {\n      version: metadata.version, agents: [...agents], roles: [...ROLES], contract: contractDigest(),\n    };\n    const appliedChecks = [...checks, ...pluginPreconditions, ...pluginChecks,\n      pass('room.applied', `Room ready at ${layout.roomHome} with ${String(ids.length)} Paseo providers.`),\n      ...contractProvenance(appliedMarker), ...thinkingDiagnostics(appliedProfiles, desired.profiles)];\n    return {\n      command: 'setup', outcome: hasFailure(appliedChecks) ? 'failed' : 'ok', changed: pending.length > 0,\n      checks: appliedChecks, operations,\n    } satisfies Result;\n  }, sessionOptions(options));\n}\n\nexport async function verify(options: RunOptions = {}): Promise<Result> {\n  const layout = resolveLayout(options, options.env);\n  const rootSafety = await roomPathSafety(layout, [], []);\n  if (hasFailure(rootSafety)) return failed('verify', rootSafety);\n  const marker = await readMarker(layout);\n  if (!marker) {\n    return failed('verify', [fail('room.marker', `No room found at ${layout.roomHome}.`, 'Run: paseo-room setup --apply')]);\n  }\n  const invalid = layoutChecks(layout, marker.agents);\n  if (invalid.length > 0) return failed('verify', invalid);\n  const pathSafety = await roomPathSafety(layout, marker.agents, marker.roles);\n  if (hasFailure(pathSafety)) return failed('verify', pathSafety);\n  const daemon = await checkDaemon(layout, options.env, minimumPaseoVersion(marker.agents));\n  if (!daemon.daemon) return failed('verify', daemon.checks);\n  const desired = await buildDesired(layout, marker.agents, marker.roles);\n  const checks = [...daemon.checks, ...desired.checks];\n  if (hasFailure(checks)) return failed('verify', checks);\n\n  return withSession(daemon.daemon, async session => {\n    const expectedPluginPath = claudeCarrierPluginDir(layout);\n    const plan = await planRoom(session, desired, NOTHING_STALE, expectedPluginPath);\n    const { operations, liveProfiles } = plan;\n    const drifted = operations.filter(operation => operation.action !== 'noop');\n    const count = (kind: Operation['kind']): number => drifted.filter(operation => operation.kind === kind).length;\n    const providers = count('provider');\n    const profiles = count('profile');\n    const driftedFiles = drifted.filter(operation => !['provider', 'profile', 'plugin'].includes(operation.kind));\n    const files = driftedFiles.length;\n    const pluginChecks = desired.pluginPath === undefined ? [] : [\n      pluginsEnabledCheck(await session.pluginsEnabled()),\n      ...plan.pluginChecks,\n      pluginRuntimeCheck(plan.livePlugin, expectedPluginPath),\n    ];\n    const all: Check[] = [...checks,\n      files === 0\n        ? pass('room.files', 'Every managed role file matches the current definition.')\n        : fail('room.files', `${String(files)} managed role files are missing or outdated.${fileDriftDetail(driftedFiles.map(operation => operation.target))}`, 'Run: paseo-room setup --apply'),\n      providers === 0\n        ? pass('room.providers', `All ${String(Object.keys(desired.providers).length)} Paseo providers are registered as expected.`)\n        : fail('room.providers', `${String(providers)} Paseo providers are missing or differ.`, 'Run: paseo-room setup --apply'),\n      profiles === 0\n        ? pass('room.profiles', `All ${String(desired.profiles.length)} Paseo agent profiles are registered as expected.`)\n        : fail('room.profiles', `${String(profiles)} Paseo agent profiles are missing or differ.`, 'Run: paseo-room setup --apply'),\n      ...pluginChecks,\n      // Diagnostics last: a warning never precedes the failure it might be mistaken for.\n      ...contractProvenance(marker),\n      ...thinkingDiagnostics(liveProfiles, desired.profiles),\n    ];\n    return {\n      command: 'verify', outcome: hasFailure(all) ? 'failed' : 'ok', changed: false, checks: all, operations,\n    } satisfies Result;\n  }, sessionOptions(options));\n}\n\nexport async function remove(options: RunOptions = {}): Promise<Result> {\n  const layout = resolveLayout(options, options.env);\n  const rootSafety = await roomPathSafety(layout, [], []);\n  if (hasFailure(rootSafety)) return failed('remove', rootSafety);\n  const marker = await readMarker(layout);\n  if (!marker) {\n    return failed('remove', [fail('room.marker', `No room found at ${layout.roomHome}.`, 'Nothing to remove; the room home was never created here.')]);\n  }\n  // A recursive delete needs a floor, so the layout rules gate this command too.\n  const invalid = layoutChecks(layout, marker.agents);\n  if (invalid.length > 0) return failed('remove', invalid);\n  const ids = marker.agents.flatMap(agent => marker.roles.map(role => providerId(agent, role)));\n  const profiles = new Set(marker.agents.flatMap(agent => marker.roles.map(role => profileId(agent, role))));\n  const hasClaude = marker.agents.includes('claude');\n  const operations: Operation[] = [\n    ...ids.map(id => ({ action: 'remove', kind: 'provider', target: id }) satisfies Operation),\n    ...[...profiles].map(id => ({ action: 'remove', kind: 'profile', target: id }) satisfies Operation),\n    ...(hasClaude ? [{ action: 'remove', kind: 'plugin', target: CLAUDE_CARRIER_PLUGIN_ID } satisfies Operation] : []),\n    { action: 'remove', kind: 'dir', target: layout.roomHome },\n  ];\n  const credentialWarning = warn('room.remove.credentials',\n    `Deleting ${layout.roomHome} will delete role-owned credential files stored inside it. Native OS keyring entries are not inspected or deleted and may remain. Operator agent-home credentials are untouched.`);\n  if (!options.apply) {\n    return { command: 'remove', outcome: 'changes-planned', changed: false, checks: [credentialWarning], operations };\n  }\n  const daemon = await checkDaemon(layout, options.env);\n  const checks: Check[] = [credentialWarning];\n  if (!daemon.daemon) {\n    return failed('remove', [\n      credentialWarning,\n      ...daemon.checks,\n      fail(\n        'room.files',\n        `Preserved ${layout.roomHome}, including its room marker, because Paseo cleanup could not start.`,\n        'Start Paseo, then run: paseo-room remove --apply',\n      ),\n    ]);\n  }\n  try {\n    await withSession(daemon.daemon, async session => {\n      if (hasClaude) {\n        const plugin = (await session.listPlugins()).find(entry => entry.id === CLAUDE_CARRIER_PLUGIN_ID);\n        const expectedPath = claudeCarrierPluginDir(layout);\n        if (plugin !== undefined && plugin.path !== expectedPath) {\n          throw new Error(`refusing to remove foreign plugin path ${plugin.path}`);\n        }\n        if (plugin !== undefined) await session.removePlugin(CLAUDE_CARRIER_PLUGIN_ID);\n      }\n      await session.removeProviders(ids);\n      const live = await session.readProfiles();\n      const kept = live.filter(entry => !profiles.has(String(entry.id)));\n      if (kept.length !== live.length) await session.writeProfiles(kept);\n    }, sessionOptions(options));\n    checks.push(pass('room.providers', `Removed ${String(ids.length)} Paseo providers and their agent profiles.`));\n  } catch {\n    return failed('remove', [\n      credentialWarning,\n      fail(\n        'room.providers',\n        `Paseo provider/profile cleanup did not complete; ${layout.roomHome} and its room marker were preserved.`,\n        'Restore Paseo connectivity, then run: paseo-room remove --apply',\n      ),\n    ]);\n  }\n  // Explicit remove owns the whole room home, including runtime-owned role credentials.\n  try {\n    await rm(layout.roomHome, { recursive: true, force: true });\n  } catch (error) {\n    const detail = error instanceof Error ? error.message : 'unknown filesystem error';\n    checks.push(fail(\n      'room.files',\n      `Removed the Paseo providers and profiles, but could not fully delete ${layout.roomHome}: ${detail}`,\n      'Delete that directory manually after reviewing it for role-owned credentials; the Paseo side is already clean.',\n    ));\n    const completedOperations = operations.filter(operation => operation.kind !== 'dir');\n    return { command: 'remove', outcome: 'failed', changed: true, checks, operations: completedOperations };\n  }\n  checks.push(pass('room.files', `Deleted ${layout.roomHome}.`));\n  return { command: 'remove', outcome: 'ok', changed: true, checks, operations };\n}\n","import * as clack from '@clack/prompts';\nimport { AGENTS, remove, setup, verify, type RunOptions } from './commands.js';\nimport type { Result } from './result.js';\nimport { AGENT_IDS, type AgentId } from './roles.js';\n\nexport interface Prompts {\n  select(options: { readonly message: string; readonly options: readonly { readonly value: string; readonly label: string }[] }): Promise<string | symbol>;\n  multiselect(options: { readonly message: string; readonly options: readonly { readonly value: AgentId; readonly label: string }[] }): Promise<AgentId[] | symbol>;\n  confirm(options: { readonly message: string }): Promise<boolean | symbol>;\n}\nexport const terminalPrompts: Prompts = {\n  select: options => clack.select({ message: options.message, options: [...options.options] }),\n  multiselect: options => clack.multiselect({ message: options.message, options: [...options.options], required: true }),\n  confirm: options => clack.confirm({ message: options.message, initialValue: false }),\n};\n\n/** Guided path over the same commands the flags use; nothing extra happens here. */\nexport async function runWizard(\n  prompts: Prompts,\n  emit: (result: Result) => number,\n  write: (text: string) => void,\n  options: RunOptions = {},\n  onAction?: (action: string) => void,\n): Promise<number> {\n  const cancelled = (): number => { write('Cancelled; nothing was changed.\\n'); return 0; };\n  const action = await prompts.select({\n    message: 'What do you want to do?',\n    options: [\n      { value: 'setup', label: 'Set up / update the room (login stays separate)' },\n      { value: 'verify', label: 'Verify the current room' },\n      { value: 'remove', label: 'Remove the room' },\n    ],\n  });\n  if (typeof action === 'symbol') return cancelled();\n  onAction?.(action);\n  if (action === 'verify') return emit(await verify(options));\n  if (action === 'remove') {\n    const preview = await remove(options);\n    const status = emit(preview);\n    if (preview.outcome !== 'changes-planned') return status;\n    const approved = await prompts.confirm({ message: 'Delete the room home, including role credentials, and its Paseo providers?' });\n    return approved === true ? emit(await remove({ ...options, apply: true })) : cancelled();\n  }\n  const agents = await prompts.multiselect({\n    message: 'Which coding agents should the room use?',\n    options: AGENT_IDS.map(value => ({ value, label: AGENTS[value].label })),\n  });\n  if (typeof agents === 'symbol' || agents.length === 0) return cancelled();\n  const preview = await setup({ ...options, agents });\n  const status = emit(preview);\n  if (preview.outcome !== 'changes-planned') return status;\n  const approved = await prompts.confirm({ message: 'Apply these changes? Authentication will not be validated or started.' });\n  if (approved !== true) return cancelled();\n  return emit(await setup({ ...options, agents, apply: true }));\n}\n","import { Command, CommanderError, InvalidArgumentError } from 'commander';\nimport metadata from '../package.json' with { type: 'json' };\nimport { loginRole, type LoginSpawner } from './auth.js';\nimport { remove, setup, verify, type RunOptions } from './commands.js';\nimport { renderHuman, renderJson } from './render.js';\nimport { exitCode, fail, failed, type Result } from './result.js';\nimport { AGENT_IDS, type AgentId } from './roles.js';\nimport { PromptAssetError } from './room/prompts.js';\nimport type { Prompts } from './wizard.js';\n\nexport interface Output {\n  readonly stdout: (text: string) => void;\n  readonly stderr: (text: string) => void;\n}\nexport interface CliContext {\n  readonly isTTY?: boolean;\n  readonly prompts?: Prompts;\n  readonly options?: RunOptions;\n  readonly loginSpawn?: LoginSpawner;\n}\n\n/** Commander passes no initial value, so the first call starts the list. */\nfunction collectAgent(value: string, previous: AgentId[] | undefined): AgentId[] {\n  const agent = AGENT_IDS.find(id => id === value);\n  if (!agent) throw new InvalidArgumentError(`Unknown agent: ${value}`);\n  const seated = previous ?? [];\n  return seated.includes(agent) ? seated : [...seated, agent];\n}\n\nconst PATH_FLAGS = ['roomHome', 'codexHome', 'claudeHome', 'piHome', 'codexBin', 'claudeBin', 'piBin', 'paseoBin'] as const;\n\nfunction optionsFrom(raw: Record<string, unknown>, base: RunOptions): RunOptions {\n  const paths: Record<string, string> = {};\n  for (const flag of PATH_FLAGS) {\n    const value = raw[flag];\n    if (typeof value === 'string' && value.trim()) paths[flag] = value.trim();\n  }\n  const agents = Array.isArray(raw.agent) && raw.agent.length > 0 ? (raw.agent as AgentId[]) : undefined;\n  return { ...base, ...paths, ...(agents ? { agents } : {}), ...(raw.apply === true ? { apply: true } : {}) };\n}\n\nfunction failedFromThrown(command: string, error: unknown): Result {\n  if (error instanceof PromptAssetError) {\n    return failed(command, [fail(\n      `${command}.prompt-asset`,\n      error.message,\n      'Reinstall paseo-room, then try again.',\n    )]);\n  }\n  const detail = error instanceof Error ? error.message : 'unknown error';\n  return failed(command, [fail(\n    `${command}.error`,\n    detail,\n    'Check that Paseo is running and reachable, then try again.',\n  )]);\n}\n\nexport async function runCli(argv: readonly string[], output: Output, context: CliContext = {}): Promise<number> {\n  const password = (context.options?.env ?? process.env).PASEO_PASSWORD;\n  const redact = (text: string): string => (password ? text.split(password).join('[redacted]') : text);\n  // Set once the flags are parsed; the wizard path never sees flags, so text output is right there.\n  let json = false;\n  const emit = (result: Result): number => {\n    output.stdout(redact(json ? renderJson(result) : renderHuman(result)));\n    return exitCode(result);\n  };\n  const isTTY = context.isTTY ?? (process.stdin.isTTY && process.stdout.isTTY && process.stderr.isTTY);\n  const base = context.options ?? {};\n\n  if (argv.length === 0) {\n    if (!isTTY) {\n      output.stderr('paseo-room: no command given. Try: paseo-room setup, verify, remove, auth login, or --help.\\n');\n      return 2;\n    }\n    let wizardCommand = 'wizard';\n    try {\n      // @clack/prompts is only reachable here, so keep it off the scripted path.\n      const { runWizard, terminalPrompts } = await import('./wizard.js');\n      return await runWizard(\n        context.prompts ?? terminalPrompts,\n        emit,\n        text => { output.stdout(text); },\n        base,\n        action => { wizardCommand = action; },\n      );\n    } catch (error) {\n      return emit(failedFromThrown(wizardCommand, error));\n    }\n  }\n  const program = new Command()\n    .name('paseo-room')\n    .description('Configure Codex/Claude/Pi role homes in $HOME and register them with your local Paseo daemon.')\n    .version(metadata.version)\n    .usage('<setup|verify|remove> [options]\\n       auth login <codex|claude|pi> <supervisor|lead|peer> [options]')\n    .argument('<command>', 'setup | verify | remove | auth')\n    .argument('[command-arguments...]', 'auth login <agent> <role>')\n    .option('--agent <agent>', 'codex, claude, or pi; repeat to combine (default: codex)', collectAgent)\n    .option('--apply', 'actually make the changes (default: dry run)')\n    .option('--json', 'machine-readable output')\n    .option('--room-home <path>', 'where role homes are written (default: ~/.paseo-room)')\n    .option('--codex-home <path>', 'source Codex config (default: ~/.codex)')\n    .option('--claude-home <path>', 'source Claude Code config (default: ~/.claude)')\n    .option('--pi-home <path>', 'source Pi config (default: ~/.pi/agent)')\n    .option('--codex-bin <path>', 'Codex executable (default: found on PATH)')\n    .option('--claude-bin <path>', 'Claude Code executable (default: found on PATH)')\n    .option('--pi-bin <path>', 'Pi executable (default: found on PATH)')\n    .option('--paseo-bin <path>', 'Paseo executable (default: found on PATH)')\n    .configureOutput({ writeOut: text => { output.stdout(text); }, writeErr: text => { output.stderr(text); } })\n    .exitOverride();\n\n  let command: string;\n  let commandArguments: string[];\n  let options: RunOptions;\n  let raw: Record<string, unknown>;\n  try {\n    program.parse([...argv], { from: 'user' });\n    raw = program.opts<Record<string, unknown>>();\n    json = raw.json === true;\n    command = program.args[0] ?? '';\n    commandArguments = program.args.slice(1);\n    options = optionsFrom(raw, base);\n  } catch (error) {\n    if (error instanceof CommanderError && error.exitCode === 0) return 0;\n    return 2;\n  }\n\n  try {\n    if (command === 'auth') {\n      if (raw.apply === true) {\n        output.stderr('paseo-room auth login is already explicit and does not use --apply.\\n');\n        return 2;\n      }\n      if (raw.json === true) {\n        output.stderr('paseo-room auth login is interactive and does not support --json.\\n');\n        return 2;\n      }\n      if (raw.agent !== undefined) {\n        output.stderr('paseo-room auth login takes exactly one positional agent and does not use --agent.\\n');\n        return 2;\n      }\n      if (commandArguments.length !== 3 || commandArguments[0] !== 'login') {\n        output.stderr('Usage: paseo-room auth login <codex|claude|pi> <supervisor|lead|peer>\\n');\n        return 2;\n      }\n      return await loginRole(commandArguments[1] ?? '', commandArguments[2] ?? '', {\n        ...options,\n        isTTY,\n        ...(context.loginSpawn ? { spawn: context.loginSpawn } : {}),\n      }, output);\n    }\n    if (commandArguments.length > 0) {\n      output.stderr(`paseo-room ${command}: unexpected arguments: ${commandArguments.join(' ')}\\n`);\n      return 2;\n    }\n    if (command === 'setup') return emit(await setup(options));\n    if (command === 'verify') return emit(await verify(options));\n    if (command === 'remove') return emit(await remove(options));\n  } catch (error) {\n    return emit(failedFromThrown(command, error));\n  }\n  output.stderr(`paseo-room: unknown command \"${command}\". Try: setup, verify, remove, or auth login.\\n`);\n  return 2;\n}\n","import type { Result } from './result.js';\n\nexport function renderJson(result: Result): string {\n  return `${JSON.stringify({ schemaVersion: 2, ...result }, null, 2)}\\n`;\n}\n\nconst ICONS = { pass: '✓', warn: '!', fail: '✗' } as const;\n\nexport function renderHuman(result: Result): string {\n  const lines: string[] = [];\n  for (const check of result.checks) {\n    lines.push(`${ICONS[check.status]} ${check.message}`);\n    if (check.fix) lines.push(`  → ${check.fix}`);\n  }\n  const changes = result.operations.filter(operation => operation.action !== 'noop');\n  if (changes.length > 0) {\n    lines.push('', result.changed ? 'Applied:' : 'Planned changes:');\n    for (const operation of changes) lines.push(`  ${operation.action} ${operation.kind} ${operation.target}`);\n    const unchanged = result.operations.length - changes.length;\n    if (unchanged > 0) lines.push(`  (${String(unchanged)} already up to date)`);\n  } else if (result.operations.length > 0) {\n    lines.push('', 'Everything is already up to date.');\n  }\n  lines.push('', `${result.command}: ${result.outcome}`);\n  return `${lines.join('\\n')}\\n`;\n}\n","#!/usr/bin/env node\nimport { runCli } from './cli.js';\n\nprocess.exitCode = await runCli(process.argv.slice(2), {\n  stdout: text => { process.stdout.write(text); },\n  stderr: text => { process.stderr.write(text); },\n});\n"],"mappings":";;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA,MACE,MAAQ;AAAA,MACR,SAAW;AAAA,MACX,aAAe;AAAA,MACf,UAAY;AAAA,QACV;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,MACA,UAAY;AAAA,MACZ,MAAQ;AAAA,MACR,YAAc;AAAA,QACZ,MAAQ;AAAA,QACR,KAAO;AAAA,MACT;AAAA,MACA,SAAW;AAAA,MACX,QAAU;AAAA,MACV,MAAQ;AAAA,MACR,SAAW;AAAA,QACT,MAAQ;AAAA,MACV;AAAA,MACA,KAAO;AAAA,QACL,cAAc;AAAA,MAChB;AAAA,MACA,OAAS;AAAA,QACP;AAAA,MACF;AAAA,MACA,SAAW;AAAA,QACT,WAAa;AAAA,QACb,MAAQ;AAAA,QACR,MAAQ;AAAA,QACR,gBAAgB;AAAA,QAChB,OAAS;AAAA,QACT,SAAW;AAAA,QACX,QAAU;AAAA,MACZ;AAAA,MACA,cAAgB;AAAA,QACd,kBAAkB;AAAA,QAClB,oBAAoB;AAAA,QACpB,WAAa;AAAA,QACb,QAAU;AAAA,QACV,aAAa;AAAA,QACb,KAAO;AAAA,MACT;AAAA,MACA,iBAAmB;AAAA,QACjB,cAAc;AAAA,QACd,eAAe;AAAA,QACf,iBAAiB;AAAA,QACjB,QAAU;AAAA,QACV,MAAQ;AAAA,QACR,YAAc;AAAA,QACd,qBAAqB;AAAA,QACrB,QAAU;AAAA,MACZ;AAAA,IACF;AAAA;AAAA;;;ACrCO,SAAS,KAAK,IAAY,SAAwB;AACvD,SAAO,EAAE,IAAI,QAAQ,QAAQ,QAAQ;AACvC;AACO,SAAS,KAAK,IAAY,SAAiB,KAAqB;AACrE,SAAO,EAAE,IAAI,QAAQ,QAAQ,SAAS,GAAI,QAAQ,SAAY,CAAC,IAAI,EAAE,IAAI,EAAG;AAC9E;AACO,SAAS,KAAK,IAAY,SAAiB,KAAoB;AACpE,SAAO,EAAE,IAAI,QAAQ,QAAQ,SAAS,IAAI;AAC5C;AACO,SAAS,OAAO,SAAiB,QAAkC;AACxE,SAAO,EAAE,SAAS,SAAS,UAAU,SAAS,OAAO,QAAQ,YAAY,CAAC,EAAE;AAC9E;AACO,SAAS,WAAW,QAAmC;AAC5D,SAAO,OAAO,KAAK,WAAS,MAAM,WAAW,MAAM;AACrD;AACO,SAAS,SAAS,QAAwB;AAC/C,SAAO,OAAO,YAAY,YAAY,WAAW,OAAO,MAAM,IAAI,IAAI;AACxE;AAtCA;AAAA;AAAA;AAAA;AAAA;;;ACAA,SAAS,OAAO,gBAAgB;AAehC,SAAS,SAASA,OAAiD;AACjE,MAAIA,MAAK,YAAY,EAAG,QAAO;AAC/B,MAAIA,MAAK,SAAS,EAAG,QAAO;AAC5B,MAAIA,MAAK,OAAO,EAAG,QAAO;AAC1B,MAAIA,MAAK,kBAAkB,EAAG,QAAO;AACrC,MAAIA,MAAK,cAAc,EAAG,QAAO;AACjC,SAAO;AACT;AAGA,eAAsB,sBAAsB,MAA4C;AACtF,MAAIA;AACJ,MAAI;AACF,IAAAA,QAAO,MAAM,MAAM,IAAI;AAAA,EACzB,SAAS,OAAO;AACd,QAAK,MAAgC,SAAS,SAAU,QAAO,EAAE,MAAM,UAAU;AACjF,WAAO,EAAE,MAAM,UAAU,UAAU,qBAAqB;AAAA,EAC1D;AACA,MAAIA,MAAK,OAAO,EAAG,QAAO,EAAE,MAAM,OAAO;AACzC,MAAI,CAACA,MAAK,eAAe,EAAG,QAAO,EAAE,MAAM,UAAU,UAAU,SAASA,KAAI,EAAE;AAC9E,MAAI;AACF,WAAO,EAAE,MAAM,WAAW,QAAQ,MAAM,SAAS,IAAI,EAAE;AAAA,EACzD,QAAQ;AACN,WAAO,EAAE,MAAM,UAAU,UAAU,2BAA2B;AAAA,EAChE;AACF;AAEA,SAAS,WAAW,OAAuB;AACzC,SAAO,IAAI,MAAM,WAAW,KAAK,OAAO,CAAC;AAC3C;AAEO,SAAS,YACd,aACA,YACA,OAA0B,CAAC,GACnB;AACR,QAAM,YAAY,OAAO,QAAQ,WAAW,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,GAAG,IAAI,IAAI,WAAW,KAAK,CAAC,EAAE;AACnG,SAAO,CAAC,GAAG,WAAW,GAAG,CAAC,YAAY,GAAG,IAAI,EAAE,IAAI,UAAU,CAAC,EAAE,KAAK,GAAG;AAC1E;AAaO,SAAS,yBAAyB,OAAwC;AAC/E,QAAM,SAAS,MAAM,SAAS,uBAAuB,MAAM,MAAM,MAAM;AACvE,MAAI,MAAM,MAAM,SAAS,QAAQ;AAC/B,WAAO;AAAA,MAAK,GAAG,MAAM,EAAE;AAAA,MACrB,GAAG,MAAM,KAAK,IAAI,MAAM,IAAI,mGAAmG,MAAM,IAAI;AAAA,MACzI,4EAA4E,MAAM,KAAK,IAAI,MAAM;AAAA,IAAE;AAAA,EACvG;AACA,MAAI,MAAM,MAAM,SAAS,WAAW;AAClC,WAAO;AAAA,MAAK,GAAG,MAAM,EAAE;AAAA,MACrB,GAAG,MAAM,KAAK,IAAI,MAAM,IAAI,sDAAsD,MAAM,IAAI,OAAO,MAAM,MAAM,MAAM;AAAA,MACrH,4DAA4D,WAAW,MAAM,IAAI,CAAC,8CAA8C,MAAM,KAAK,IAAI,MAAM;AAAA,IAAE;AAAA,EAC3J;AACA,SAAO;AAAA,IAAK,GAAG,MAAM,EAAE;AAAA,IACrB,GAAG,MAAM,KAAK,IAAI,MAAM,IAAI,kDAAkD,MAAM,IAAI,SAAS,MAAM,MAAM,QAAQ;AAAA,IACrH,8HAA8H,MAAM,KAAK,IAAI,MAAM;AAAA,EAAE;AACzJ;AAEO,SAAS,aAAa,OAA4B,WAAwC;AAC/F,SAAO,UAAU,OAAO,UAAQ,MAAM,IAAI,IAAI,CAAC;AACjD;AAEO,SAAS,uBAAuB,IAAY,OAAe,MAAc,OAAiC;AAC/G,SAAO;AAAA,IAAK,GAAG,EAAE;AAAA,IACf,GAAG,KAAK,IAAI,IAAI,mCAAmC,MAAM,KAAK,IAAI,CAAC,IAAI,MAAM,WAAW,IAAI,OAAO,KAAK;AAAA,EAA2E;AACvL;AAEO,SAAS,kBAAkB,IAAY,OAAe,MAAc,OAAiC;AAC1G,SAAO;AAAA,IAAK,GAAG,EAAE;AAAA,IACf,GAAG,KAAK,IAAI,IAAI,qCAAqC,MAAM,KAAK,IAAI,CAAC,IAAI,MAAM,WAAW,IAAI,OAAO,KAAK;AAAA,EAA+L;AAC7S;AA/FA;AAAA;AAAA;AACA;AAAA;AAAA;;;ACDA,SAAS,eAAe;AACxB,SAAS,MAAM,SAAS,WAAW;AA4BnC,SAAS,QAAQ,YAAqD;AACpE,aAAW,aAAa,WAAY,KAAI,WAAW,KAAK,EAAG,QAAO,UAAU,KAAK;AACjF,QAAM,IAAI,MAAM,2FAA2F;AAC7G;AAGO,SAAS,cAAc,UAAmB,CAAC,GAAG,MAAyB,QAAQ,KAAa;AACjG,QAAM,OAAO,KAAK,IAAI,MAAM,QAAQ,CAAC;AACrC,QAAM,iBAAiB,QAAQ,YAAY,KAAK,KAAK,IAAI,mBAAmB,KAAK,KAAK;AACtF,QAAM,aAAa,QAAQ,KAAK,gBAAgB,KAAK,MAAM,SAAS,CAAC,CAAC;AAEtE,SAAO;AAAA,IACL;AAAA,IACA,UAAU,QAAQ,KAAK,QAAQ,UAAU,IAAI,iBAAiB,KAAK,MAAM,aAAa,CAAC,CAAC;AAAA,IACxF,WAAW,QAAQ,KAAK,IAAI,YAAY,KAAK,MAAM,QAAQ,CAAC,CAAC;AAAA,IAC7D,WAAW;AAAA,MACT,OAAO,QAAQ,KAAK,QAAQ,WAAW,IAAI,YAAY,KAAK,MAAM,QAAQ,CAAC,CAAC;AAAA,MAC5E,QAAQ;AAAA,MACR,IAAI,QAAQ,KAAK,QAAQ,QAAQ,IAAI,qBAAqB,KAAK,MAAM,OAAO,OAAO,CAAC,CAAC;AAAA,IACvF;AAAA,IACA,aAAa,gBAAgB,KAAK,IAAI,KAAK,YAAY,cAAc,IAAI,KAAK,MAAM,cAAc;AAAA,IAClG,KAAK;AAAA,MACH,OAAO,KAAK,QAAQ,UAAU,IAAI,WAAW,OAAO;AAAA,MACpD,QAAQ,KAAK,QAAQ,WAAW,IAAI,YAAY,QAAQ;AAAA,MACxD,IAAI,KAAK,QAAQ,OAAO,IAAI,QAAQ,IAAI;AAAA,MACxC,OAAO,KAAK,QAAQ,UAAU,IAAI,WAAW,OAAO;AAAA,IACtD;AAAA,IACA,YAAY,IAAI,QAAQ;AAAA,IACxB,UAAU,IAAI,IAAI,OAAO,KAAK,GAAG,CAAC;AAAA,EACpC;AACF;AAGO,SAAS,SAAS,MAAc,MAAuB;AAC5D,SAAO,SAAS,QAAQ,KAAK,WAAW,KAAK,SAAS,GAAG,IAAI,OAAO,OAAO,GAAG;AAChF;AAGO,SAAS,aAAa,QAAgB,QAAqC;AAChF,QAAM,SAAkB,CAAC;AACzB,MAAI,SAAS,OAAO,UAAU,OAAO,IAAI,GAAG;AAC1C,WAAO,KAAK;AAAA,MAAK;AAAA,MAAa,mBAAmB,OAAO,QAAQ;AAAA,MAC9D;AAAA,IAAuE,CAAC;AAAA,EAC5E;AACA,aAAW,MAAM,QAAQ;AACvB,UAAM,OAAO,OAAO,UAAU,EAAE;AAChC,QAAI,SAAS,OAAO,UAAU,IAAI,KAAK,SAAS,MAAM,OAAO,QAAQ,GAAG;AACtE,aAAO,KAAK;AAAA,QAAK,GAAG,EAAE;AAAA,QAAS,OAAO,EAAE,SAAS,IAAI,2BAA2B,OAAO,QAAQ;AAAA,QAC7F,UAAU,EAAE,8BAA8B,EAAE;AAAA,MAAmE,CAAC;AAAA,IACpH;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,SAAS,QAAgB,OAAgB,MAAoB;AAC3E,SAAO,KAAK,OAAO,UAAU,SAAS,OAAO,IAAI;AACnD;AACO,SAAS,WAAW,QAAwB;AACjD,SAAO,KAAK,OAAO,UAAU,MAAM;AACrC;AAxFA;AAAA;AAAA;AAEA;AAAA;AAAA;;;ACFA,SAAS,mBAAmB;AAC5B,SAAS,OAAO,SAAAC,QAAO,OAAO,SAAS,UAAU,YAAAC,WAAU,QAAQ,IAAI,SAAS,QAAQ,iBAAiB;AAEzG,SAAS,UAAU,SAAS,QAAAC,aAAY;AA2CxC,SAAS,MAAMC,OAAqB;AAClC,MAAIA,MAAK,eAAe,EAAG,QAAO;AAClC,MAAIA,MAAK,YAAY,EAAG,QAAO;AAC/B,MAAIA,MAAK,OAAO,EAAG,QAAO;AAC1B,SAAO;AACT;AAEA,SAAS,OAAO,MAAc,UAAkBA,OAAoB;AAClE,QAAM,IAAI,iBAAiB,MAAM,uBAAuB,IAAI,cAAc,QAAQ,cAAc,MAAMA,KAAI,CAAC,KAAK,UAAU;AAC5H;AAEA,SAAS,UAAU,OAAyB;AAC1C,SAAO,UAAU,QAAQ,OAAO,UAAU,YAAY,UAAU,SAAS,MAAM,SAAS;AAC1F;AAEA,eAAe,cAAc,MAA0C;AACrE,MAAI;AAAE,WAAO,MAAMH,OAAM,IAAI;AAAA,EAAG,SAAS,OAAO;AAC9C,QAAI,UAAU,KAAK,EAAG,QAAO;AAC7B,UAAM;AAAA,EACR;AACF;AAGA,eAAe,cAAc,OAA2C;AACtE,QAAM,WAAW,IAAI,IAAI,MAAM,QAAQ;AACvC,MAAI;AACJ,MAAI;AAAE,YAAQ,MAAM,QAAQ,MAAM,IAAI;AAAA,EAAG,SAAS,OAAO;AACvD,QAAI,UAAU,KAAK,EAAG,QAAO,CAAC;AAC9B,UAAM;AAAA,EACR;AACA,SAAO,MAAM,OAAO,UAAQ,CAAC,SAAS,IAAI,IAAI,CAAC;AACjD;AAEA,eAAe,QAAQ,OAAwD;AAC7E,QAAMG,QAAO,MAAM,cAAc,MAAM,IAAI;AAC3C,MAAI,CAACA,MAAM,QAAO;AAClB,MAAI,MAAM,SAAS,MAAO,QAAOA,MAAK,YAAY,IAAI,SAAS;AAC/D,MAAI,MAAM,SAAS,eAAe;AAChC,QAAI,CAACA,MAAK,YAAY,EAAG,QAAO;AAChC,YAAQ,MAAM,cAAc,KAAK,GAAG,WAAW,IAAI,SAAS;AAAA,EAC9D;AACA,MAAI,MAAM,SAAS,QAAQ;AACzB,QAAI,CAACA,MAAK,eAAe,EAAG,QAAO;AACnC,WAAO,MAAMF,UAAS,MAAM,IAAI,MAAM,MAAM,SAAS,SAAS;AAAA,EAChE;AACA,MAAI,CAACE,MAAK,OAAO,EAAG,QAAO;AAC3B,MAAI,MAAM,KAAM,QAAO;AACvB,SAAO,MAAM,SAAS,MAAM,MAAM,MAAM,MAAM,MAAM,UAAU,SAAS;AACzE;AAGA,eAAsB,YAAY,SAAiD;AACjF,QAAM,aAA0B,CAAC;AACjC,aAAW,SAAS,SAAS;AAC3B,UAAM,QAAQ,MAAM,QAAQ,KAAK;AACjC,eAAW,KAAK;AAAA,MACd,QAAQ,UAAU,SAAS,SAAS,UAAU,WAAW,WAAW;AAAA;AAAA,MAEpE,MAAM,MAAM,SAAS,gBAAgB,QAAQ,MAAM;AAAA,MACnD,QAAQ,MAAM;AAAA,IAChB,CAAC;AAAA,EACH;AACA,SAAO;AACT;AAGA,SAAS,YAAY,MAAsB;AACzC,SAAOD,MAAK,QAAQ,IAAI,GAAG,IAAI,SAAS,IAAI,CAAC,eAAe,YAAY,CAAC,EAAE,SAAS,KAAK,CAAC,EAAE;AAC9F;AAGA,eAAe,kBAAkB,OAA6C;AAC5E,QAAMC,QAAO,MAAM,cAAc,MAAM,IAAI;AAC3C,MAAI,CAACA,MAAM;AACX,MAAI,MAAM,SAAS,QAAQ;AACzB,QAAI,CAACA,MAAK,eAAe,EAAG,QAAO,MAAM,MAAM,mBAAmBA,KAAI;AACtE;AAAA,EACF;AACA,MAAI,CAACA,MAAK,OAAO,EAAG,QAAO,MAAM,MAAM,kBAAkBA,KAAI;AAC/D;AAGA,eAAe,kBAAkB,OAA6C;AAC5E,QAAM,OAAO,YAAY,MAAM,IAAI;AACnC,MAAI;AACF,QAAI,MAAM,SAAS,OAAQ,OAAM,QAAQ,MAAM,QAAQ,IAAI;AAAA,SACtD;AACH,YAAM,UAAU,MAAM,MAAM,SAAS,EAAE,MAAM,UAAU,CAAC;AACxD,YAAM,MAAM,MAAM,SAAS;AAAA,IAC7B;AACA,UAAM,OAAO,MAAM,MAAM,IAAI;AAAA,EAC/B,SAAS,OAAO;AACd,UAAM,GAAG,MAAM,EAAE,OAAO,KAAK,CAAC;AAC9B,UAAM;AAAA,EACR;AACF;AAEA,eAAe,eAAe,MAA6B;AACzD,QAAMA,QAAO,MAAM,cAAc,IAAI;AACrC,MAAIA,SAAQ,CAACA,MAAK,YAAY,EAAG,QAAO,MAAM,eAAeA,KAAI;AACjE,QAAM,MAAM,MAAM,EAAE,WAAW,MAAM,MAAM,SAAS,CAAC;AACvD;AAQA,eAAe,sBAAsB,OAAuC;AAC1E,QAAMA,QAAO,MAAM,cAAc,MAAM,IAAI;AAC3C,MAAIA,OAAM,eAAe,MAAM,MAAM;AACnC,UAAM,SAAS,MAAMF,UAAS,MAAM,IAAI;AACxC,QAAI,MAAM,eAAe,UAAa,WAAW,MAAM,YAAY;AACjE,YAAM,IAAI;AAAA,QAAiB,MAAM;AAAA,QAC/B,uBAAuB,MAAM,IAAI,iEAAiE,MAAM;AAAA,QACxG;AAAA,MAAU;AAAA,IACd;AAEA,UAAM,OAAO,MAAM,IAAI;AACvB,UAAM,MAAM,MAAM,MAAM,EAAE,WAAW,MAAM,MAAM,SAAS,CAAC;AAC3D;AAAA,EACF;AACA,MAAIE,SAAQ,CAACA,MAAK,YAAY,EAAG,QAAO,MAAM,MAAM,8BAA8BA,KAAI;AACtF,QAAM,MAAM,MAAM,MAAM,EAAE,WAAW,MAAM,MAAM,SAAS,CAAC;AAC3D,MAAI,CAACA,MAAM;AACX,aAAW,QAAQ,MAAM,cAAc,KAAK,GAAG;AAC7C,UAAM,QAAQD,MAAK,MAAM,MAAM,IAAI;AACnC,UAAM,YAAY,MAAM,cAAc,KAAK;AAC3C,QAAI,CAAC,UAAW;AAChB,QAAI,CAAC,UAAU,OAAO,KAAK,CAAC,UAAU,eAAe,GAAG;AACtD,YAAM,IAAI;AAAA,QAAiB;AAAA,QACzB,sBAAsB,KAAK,uBAAuB,MAAM,IAAI,qCAAqC,MAAM,SAAS,CAAC;AAAA,QACjH;AAAA,MAAU;AAAA,IACd;AACA,UAAM,GAAG,OAAO,EAAE,OAAO,KAAK,CAAC;AAAA,EACjC;AACF;AAGA,eAAsB,aAAa,SAA0C;AAC3E,aAAW,SAAS,SAAS;AAC3B,QAAI,MAAM,QAAQ,KAAK,MAAM,OAAQ;AACrC,QAAI,MAAM,SAAS,OAAO;AACxB,YAAM,eAAe,MAAM,IAAI;AAC/B;AAAA,IACF;AACA,QAAI,MAAM,SAAS,eAAe;AAChC,YAAM,sBAAsB,KAAK;AACjC;AAAA,IACF;AACA,UAAM,MAAM,QAAQ,MAAM,IAAI,GAAG,EAAE,WAAW,MAAM,MAAM,SAAS,CAAC;AACpE,UAAM,kBAAkB,KAAK;AAC7B,UAAM,kBAAkB,KAAK;AAAA,EAC/B;AACF;AAEA,eAAsB,OAAO,MAAgC;AAC3D,MAAI;AAAE,UAAMF,OAAM,IAAI;AAAG,WAAO;AAAA,EAAM,QAAQ;AAAE,WAAO;AAAA,EAAO;AAChE;AAGA,eAAsB,cAAc,MAAc,OAA6C;AAC7F,QAAM,QAAQ,MAAM,IAAI,UAAQE,MAAK,MAAM,IAAI,CAAC;AAChD,QAAM,UAAU,MAAM,QAAQ,IAAI,MAAM,IAAI,MAAM,CAAC;AACnD,SAAO,MAAM,OAAO,CAAC,GAAG,UAAU,QAAQ,KAAK,MAAM,IAAI;AAC3D;AAEA,eAAsB,cAAc,MAA2C;AAC7E,MAAI;AAAE,WAAO,MAAM,SAAS,MAAM,MAAM;AAAA,EAAG,QAAQ;AAAE,WAAO;AAAA,EAAW;AACzE;AAxNA,IA0BM,UACA,WAMO,kBAWP;AA5CN;AAAA;AAAA;AA0BA,IAAM,WAAW;AACjB,IAAM,YAAY;AAMX,IAAM,mBAAN,cAA+B,MAAM;AAAA,MACjC;AAAA,MACA;AAAA,MACT,YAAY,MAAc,SAAiB,KAAa;AACtD,cAAM,OAAO;AACb,aAAK,OAAO;AACZ,aAAK,OAAO;AACZ,aAAK,MAAM;AAAA,MACb;AAAA,IACF;AAEA,IAAM,aAAa;AAAA;AAAA;;;ACVZ,SAAS,WAAW,OAAgB,MAAoB;AAC7D,SAAO,GAAG,KAAK,IAAI,IAAI;AACzB;AAEO,SAAS,UAAU,OAAgB,MAAoB;AAC5D,SAAO,QAAQ,KAAK,IAAI,IAAI;AAC9B;AACO,SAAS,cAAc,OAAgB,MAAoB;AAChE,QAAME,SAAQ,CAAC,UAA0B,MAAM,OAAO,CAAC,EAAE,YAAY,IAAI,MAAM,MAAM,CAAC;AACtF,SAAO,GAAGA,OAAM,KAAK,CAAC,IAAIA,OAAM,IAAI,CAAC;AACvC;AA5CA,IAAa,OAGA,WAIA,kBAOA,eAOA,qBAGA,WACA,YAGA;AA5Bb;AAAA;AAAA;AAAO,IAAM,QAAQ,CAAC,cAAc,QAAQ,MAAM;AAG3C,IAAM,YAAY,CAAC,SAAS,UAAU,IAAI;AAI1C,IAAM,mBAA0C,EAAE,YAAY,MAAM,MAAM,MAAM,MAAM,MAAM;AAO5F,IAAM,gBAAsC,EAAE,YAAY,OAAO,MAAM,QAAQ,MAAM,OAAO;AAO5F,IAAM,sBAAsB,CAAC,SAAS,WAAW;AAGjD,IAAM,YAAkC,EAAE,YAAY,OAAO,MAAM,WAAW,MAAM,OAAO;AAC3F,IAAM,aAAmC,EAAE,YAAY,UAAU,MAAM,QAAQ,MAAM,UAAU;AAG/F,IAAM,aAAmC;AAAA,MAC9C,YAAY;AAAA,MACZ,MAAM;AAAA,MACN,MAAM;AAAA,IACR;AAAA;AAAA;;;AChCA,SAAS,QAAAC,aAAY;AACrB,SAAS,SAAS;AAqBX,SAAS,aACd,SACA,QACA,OACA,UACQ;AACR,SAAO,KAAK,UAAU;AAAA,IACpB;AAAA,IAAS,QAAQ,CAAC,GAAG,MAAM;AAAA,IAAG,OAAO,CAAC,GAAG,KAAK;AAAA,IAC9C,GAAI,aAAa,SAAY,CAAC,IAAI,EAAE,SAAS;AAAA,EAC/C,GAAoB,MAAM,CAAC,IAAI;AACjC;AAGA,eAAsB,WAAW,QAA6C;AAC5E,QAAM,SAAS,MAAM,cAAcA,MAAK,OAAO,UAAU,MAAM,CAAC;AAChE,MAAI,WAAW,OAAW,QAAO;AACjC,MAAI;AAAE,WAAO,aAAa,MAAM,KAAK,MAAM,MAAM,CAAC;AAAA,EAAG,QAAQ;AAAE,WAAO;AAAA,EAAW;AACnF;AAvCA,IAMa,QAEP;AARN;AAAA;AAAA;AAEA;AAEA;AAEO,IAAM,SAAS;AAEtB,IAAM,eAAe,EAAE,OAAO;AAAA,MAC5B,SAAS,EAAE,OAAO;AAAA,MAClB,QAAQ,EAAE,MAAM,EAAE,KAAK,SAAS,CAAC,EAAE,IAAI,CAAC;AAAA,MACxC,OAAO,EAAE,MAAM,EAAE,KAAK,KAAK,CAAC,EAAE,IAAI,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAMnC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,IACvC,CAAC;AAAA;AAAA;;;AClBD,SAAS,gBAAgB;AACzB,SAAS,QAAQ,iBAAiB;AAClC,SAAS,WAAW,YAAY,QAAAC,OAAM,WAAAC,gBAAe;AACrD,SAAS,iBAAiB;AAa1B,eAAsB,MAAM,SAAiB,YAAiD;AAC5F,QAAM,aAAa,WAAW,OAAO,KAAK,QAAQ,SAAS,GAAG,IAC1D,CAACA,SAAQ,OAAO,CAAC,IACjB,WAAW,MAAM,SAAS,EAAE,OAAO,OAAO,EAAE,IAAI,WAASD,MAAK,OAAO,OAAO,CAAC;AACjF,aAAW,aAAa,YAAY;AAClC,QAAI;AACF,YAAM,OAAO,WAAW,UAAU,IAAI;AACtC,aAAO;AAAA,IACT,QAAQ;AAAA,IAAgC;AAAA,EAC1C;AACA,SAAO;AACT;AAOA,eAAsB,MAAM,YAAoB,MAAyB,KAAgD;AACvH,MAAI;AACF,UAAM,EAAE,OAAO,IAAI,MAAM,IAAI,YAAY,CAAC,GAAG,IAAI,GAAG,EAAE,KAAK,SAAS,KAAQ,WAAW,KAAK,OAAO,MAAM,UAAU,OAAO,CAAC;AAC3H,WAAO,EAAE,IAAI,MAAM,OAAO;AAAA,EAC5B,QAAQ;AACN,WAAO,EAAE,IAAI,OAAO,QAAQ,GAAG;AAAA,EACjC;AACF;AAzCA,IAKM;AALN;AAAA;AAAA;AAKA,IAAM,MAAM,UAAU,QAAQ;AAAA;AAAA;;;ACL9B,SAAS,aAAa;AACtB,SAAS,aAAAE,kBAAiB;AAC1B,SAAS,QAAAC,aAAY;AACrB,SAAS,SAAAC,cAAa;AAYf,SAAS,eAAe,UAAkB,QAAwB;AACvE,QAAM,UAAU,YAAY,EAAE,qBAAqB,SAAS,GAAG,QAAQ,YAAY;AACnF,SAAO,MAAM,YAAY,CAAC,GAAG,QAAQ,CAAC,OAAO,OAAO;AACtD;AAuBA,SAAS,MAAM,OAAuB;AACpC,SAAO,MAAM,OAAO,CAAC,EAAE,YAAY,IAAI,MAAM,MAAM,CAAC;AACtD;AAEA,SAAS,gBAAgB,OAAgB,UAAkB,QAKzD;AACA,MAAI,UAAU,SAAS;AACrB,UAAMC,OAAM,EAAE,YAAY,SAAS;AACnC,UAAMC,QAAO,CAAC,OAAO;AACrB,WAAO,EAAE,KAAAD,MAAK,MAAAC,OAAM,SAAS,YAAYD,MAAK,QAAQC,KAAI,EAAE;AAAA,EAC9D;AACA,MAAI,UAAU,UAAU;AACtB,UAAMD,OAAM,EAAE,mBAAmB,UAAU,iCAAiC,SAAS;AACrF,UAAMC,QAAO,CAAC,QAAQ,OAAO;AAC7B,WAAO,EAAE,KAAAD,MAAK,MAAAC,OAAM,SAAS,YAAYD,MAAK,QAAQC,KAAI,EAAE;AAAA,EAC9D;AACA,QAAM,MAAM,EAAE,qBAAqB,SAAS;AAC5C,QAAM,OAAO;AACb,SAAO,EAAE,KAAK,MAAM,KAAK,UAAU,SAAS,eAAe,UAAU,MAAM,EAAE;AAC/E;AAGO,SAAS,0BACd,UACA,UACA,QACA,OACQ;AACR,QAAM,QAAQ;AAAA,IACZ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,aAAW,SAAS,QAAQ;AAC1B,UAAM,SAAS,SAAS,KAAK;AAC7B,QAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,8DAA8D,KAAK,cAAc;AAC9G,UAAM,KAAK,MAAM,UAAU,WAAW,gBAAgB,MAAM,KAAK,CAAC,IAAI,EAAE;AACxE,eAAW,QAAQ,OAAO;AACxB,YAAM,aAAa,gBAAgB,OAAOH,MAAK,UAAU,SAAS,OAAO,IAAI,GAAG,MAAM;AACtF,YAAM,KAAK,OAAO,MAAM,IAAI,CAAC,IAAI,IAAI,SAAS,WAAW,SAAS,OAAO,EAAE;AAC3E,UAAI,UAAU,MAAM;AAClB,cAAM;AAAA,UAAK;AAAA,UACT;AAAA,UACA;AAAA,UACA;AAAA,UAAkE;AAAA,QAAE;AAAA,MACxE;AAAA,IACF;AAAA,EACF;AACA,SAAO,GAAG,MAAM,KAAK,IAAI,EAAE,QAAQ,CAAC;AAAA;AACtC;AAEA,eAAe,cAAc,MAA2D;AACtF,MAAI;AACF,YAAQ,MAAMC,OAAM,IAAI,GAAG,YAAY,IAAI,cAAc;AAAA,EAC3D,SAAS,OAAO;AACd,WAAQ,MAAgC,SAAS,WAAW,YAAY;AAAA,EAC1E;AACF;AAEA,SAAS,WAAW,QAAqB,QAAwB;AAC/D,SAAO,OAAO,0BAA0B,MAAM;AAAA,CAAI;AAClD,SAAO;AACT;AASA,eAAsB,UACpB,YACA,WACA,SACA,QACiB;AACjB,QAAM,QAAQ,UAAU,KAAK,WAAS,UAAU,UAAU;AAC1D,MAAI,CAAC,MAAO,QAAO,WAAW,QAAQ,kBAAkB,UAAU,mCAAmC;AACrG,QAAM,OAAO,MAAM,KAAK,WAAS,UAAU,SAAS;AACpD,MAAI,CAAC,KAAM,QAAO,WAAW,QAAQ,iBAAiB,SAAS,wCAAwC;AACvG,MAAI,CAAC,QAAQ,OAAO;AAClB,WAAO,OAAO,mFAAmF;AACjG,WAAO;AAAA,EACT;AAEA,QAAM,MAAM,QAAQ,OAAO,QAAQ;AACnC,QAAM,SAAS,cAAc,SAAS,GAAG;AACzC,MAAI,MAAM,cAAc,OAAO,QAAQ,MAAM,aAAa;AACxD,WAAO,OAAO,oBAAoB,OAAO,QAAQ;AAAA,CAAmC;AACpF,WAAO;AAAA,EACT;AACA,MAAI;AACF,QAAI,EAAE,MAAMA,OAAMD,MAAK,OAAO,UAAU,MAAM,CAAC,GAAG,OAAO,EAAG,OAAM,IAAI,MAAM,sBAAsB;AAAA,EACpG,QAAQ;AACN,WAAO,OAAO,iCAAiCA,MAAK,OAAO,UAAU,MAAM,CAAC;AAAA,CAAmC;AAC/G,WAAO;AAAA,EACT;AACA,QAAM,SAAS,MAAM,WAAW,MAAM;AACtC,MAAI,CAAC,QAAQ;AACX,WAAO,OAAO,iCAAiCA,MAAK,OAAO,UAAU,MAAM,CAAC;AAAA,CAAmC;AAC/G,WAAO;AAAA,EACT;AACA,MAAI,CAAC,OAAO,OAAO,SAAS,KAAK,GAAG;AAClC,WAAO,OAAO,GAAG,MAAM,KAAK,CAAC,4DAA4D,KAAK;AAAA,CAAa;AAC3G,WAAO;AAAA,EACT;AACA,MAAI,CAAC,OAAO,MAAM,SAAS,IAAI,GAAG;AAChC,WAAO,OAAO,GAAG,MAAM,IAAI,CAAC,yBAAyB,KAAK;AAAA,CAAwC;AAClG,WAAO;AAAA,EACT;AACA,QAAM,WAAW,SAAS,QAAQ,OAAO,IAAI;AAC7C,aAAW,QAAQ,CAACA,MAAK,OAAO,UAAU,OAAO,GAAGA,MAAK,OAAO,UAAU,SAAS,KAAK,GAAG,QAAQ,GAAG;AACpG,QAAI,MAAM,cAAc,IAAI,MAAM,aAAa;AAC7C,aAAO,OAAO,gBAAgB,KAAK,IAAI,IAAI,oCAAoC,QAAQ;AAAA,CAAmC;AAC1H,aAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,SAAS,MAAM,MAAM,OAAO,IAAI,KAAK,GAAG,OAAO,UAAU;AAC/D,MAAI,CAAC,QAAQ;AACX,WAAO,OAAO,GAAG,MAAM,KAAK,CAAC,gDAAgD,KAAK,iBAAiB,KAAK;AAAA,CAAK;AAC7G,WAAO;AAAA,EACT;AACA,QAAM,aAAa,gBAAgB,OAAO,UAAU,MAAM;AAC1D,MAAI,UAAU,MAAM;AAClB,WAAO,OAAO,uDAAuD,IAAI;AAAA,CAA8E;AACvJ,WAAO,OAAO,kGAAkG;AAChH,WAAO,OAAO,+CAA+C;AAAA,EAC/D,OAAO;AACL,WAAO,OAAO,YAAY,UAAU,WAAW,gBAAgB,OAAO,cAAc,IAAI;AAAA,CAAK;AAAA,EAC/F;AAEA,QAAM,WAAW,EAAE,GAAG,KAAK,GAAG,WAAW,IAAI;AAC7C,QAAM,SAAS,QAAQ,SAAS;AAChC,SAAO,IAAI,QAAQ,CAAAI,aAAW;AAC5B,QAAI,UAAU;AACd,UAAM,SAAS,CAAC,SAAuB;AACrC,UAAI,QAAS;AACb,gBAAU;AACV,MAAAA,SAAQ,IAAI;AAAA,IACd;AACA,QAAI;AACJ,QAAI;AACF,cAAQ,OAAO,QAAQ,WAAW,MAAM;AAAA,QACtC,KAAK;AAAA,QACL,GAAI,WAAW,QAAQ,SAAY,CAAC,IAAI,EAAE,KAAK,WAAW,IAAI;AAAA,QAC9D,OAAO;AAAA,QACP,OAAO;AAAA,MACT,CAAC;AAAA,IACH,SAAS,OAAO;AACd,YAAM,SAAS,iBAAiB,QAAQ,MAAM,UAAU;AACxD,aAAO,OAAO,mBAAmB,KAAK,WAAW,MAAM;AAAA,CAAI;AAC3D,aAAO,CAAC;AACR;AAAA,IACF;AACA,UAAM,KAAK,SAAS,WAAS;AAC3B,aAAO,OAAO,mBAAmB,KAAK,WAAW,MAAM,OAAO;AAAA,CAAI;AAClE,aAAO,CAAC;AAAA,IACV,CAAC;AACD,UAAM,KAAK,SAAS,CAAC,MAAM,WAAW;AACpC,UAAI,SAAS,MAAM;AACjB,eAAO,IAAI;AACX;AAAA,MACF;AACA,UAAI,QAAQ;AACV,cAAM,eAAeL,WAAU,QAAQ,MAAM;AAC7C,cAAM,SAAS,OAAO,iBAAiB,WAAW,MAAM,eAAe;AACvE,eAAO,OAAO,GAAG,MAAM,KAAK,CAAC,4BAA4B,MAAM,eAAe,OAAO,MAAM,CAAC;AAAA,CAAK;AACjG,eAAO,MAAM;AACb;AAAA,MACF;AACA,aAAO,OAAO,GAAG,MAAM,KAAK,CAAC;AAAA,CAAgD;AAC7E,aAAO,CAAC;AAAA,IACV,CAAC;AAAA,EACH,CAAC;AACH;AA/NA,IAUa,sBAEA,cA2BP;AAvCN;AAAA;AAAA;AAIA;AACA;AACA;AACA;AACA;AAEO,IAAM,uBAAuB;AAE7B,IAAM,eAAe,CAAC,mBAAmB,gBAAgB,0BAA0B,EAAE;AA2B5F,IAAM,aAA2B,CAAC,YAAY,MAAM,YAAY,MAAM,YAAY,CAAC,GAAG,IAAI,GAAG,OAAO;AAAA;AAAA;;;ACvCpG,SAAS,oBAAoB;AAwE7B,SAAS,WACP,OACA,KACuB;AACvB,QAAM,SAAS,cAAc,KAAK;AAClC,QAAM,QAAQ,OAAO,OAAO,GAAG,CAAC;AAChC,MAAI,UAAU,OAAW,OAAM,IAAI,MAAM,wBAAwB,KAAK,IAAI,OAAO,GAAG,CAAC,GAAG;AACxF,SAAO;AACT;AAEA,SAAS,aAAa,QAAgB,OAAsB;AAC1D,QAAM,SAAS,UAAU,IAAI,OAAO;AACpC,SAAO,OAAO,MAAM,IAAI,EAAE,OAAO,UAAQ,KAAK,WAAW,MAAM,CAAC,EAAE;AACpE;AAEA,SAAS,sBAAsB,QAAgB,MAAkC;AAC/E,QAAM,UAAU,OAAO,QAAQ;AAC/B,MAAI,CAAC,QAAQ,KAAK,EAAG,OAAM,IAAI,MAAM,WAAW;AAChD,QAAM,YAAY,QAAQ,MAAM,MAAM,CAAC,EAAE,CAAC,KAAK;AAC/C,MAAI,CAAC,WAAW,KAAK,SAAS,KAAK,aAAa,SAAS,CAAC,MAAM,GAAG;AACjE,UAAM,IAAI,MAAM,GAAG,SAAS,SAAS,kBAAkB,YAAY,0CAA0C;AAAA,EAC/G;AACA,SAAO;AACT;AAEA,SAAS,gBAAgB,QAAwB;AAC/C,QAAM,UAAU,OAAO,QAAQ;AAC/B,MAAI,CAAC,QAAQ,KAAK,EAAG,OAAM,IAAI,MAAM,WAAW;AAChD,QAAM,QAAQ,QAAQ,MAAM,IAAI;AAChC,QAAM,UAAU,MAAM,MAAM,KAAK;AACjC,MAAI,CAAC,YAAY,KAAK,OAAO,KAAK,aAAa,SAAS,CAAC,MAAM,GAAG;AAChE,UAAM,IAAI,MAAM,iDAAiD;AAAA,EACnE;AACA,MAAI,MAAM,KAAK,UAAQ,YAAY,KAAK,IAAI,CAAC,GAAG;AAC9C,UAAM,IAAI,MAAM,wDAAwD;AAAA,EAC1E;AACA,QAAM,OAAO,MAAM,KAAK,IAAI,EAAE,KAAK;AACnC,MAAI,CAAC,KAAM,OAAM,IAAI,MAAM,wDAAwD;AACnF,QAAM,aAAa,KAAK,MAAM,SAAS,EAAE;AAAA,IAAI,eAC3C,UAAU,MAAM,IAAI,EAAE,IAAI,UAAQ,KAAK,KAAK,CAAC,EAAE,KAAK,GAAG;AAAA,EACzD;AACA,MAAI,WAAW,KAAK,eAAa,CAAC,SAAS,GAAG;AAC5C,UAAM,IAAI,MAAM,iDAAiD;AAAA,EACnE;AACA,SAAO,GAAG,OAAO;AAAA,EAAK,WAAW,IAAI,eAAa,KAAK,SAAS,EAAE,EAAE,KAAK,IAAI,CAAC;AAChF;AAEO,SAAS,gBACd,OACA,KACQ;AACR,QAAM,eAAe,GAAG,KAAK,IAAI,OAAO,GAAG,CAAC;AAC5C,QAAM,SAAS,MAAM,IAAI,YAAY;AACrC,MAAI,WAAW,OAAW,QAAO;AAEjC,QAAM,QAAQ,WAAW,OAAO,GAAG;AACnC,QAAM,WAAW,IAAI,IAAI,aAAa,MAAM,IAAI,IAAI,YAAY,GAAG;AACnE,MAAI;AACF,UAAM,SAAS,aAAa,UAAU,MAAM;AAC5C,QAAI,OAAO,SAAS,QAAQ,EAAG,OAAM,IAAI,MAAM,0BAA0B;AACzE,UAAM,YAAY,MAAM,SAAS,YAC7B,gBAAgB,MAAM,IACtB,sBAAsB,QAAQ,MAAM,IAAI;AAC5C,UAAM,IAAI,cAAc,SAAS;AACjC,WAAO;AAAA,EACT,SAAS,OAAO;AACd,QAAI,iBAAiB,iBAAkB,OAAM;AAC7C,UAAM,SAAS,iBAAiB,QAAQ,MAAM,UAAU;AACxD,UAAM,IAAI,iBAAiB,cAAc,UAAU,QAAQ,EAAE,OAAO,MAAM,CAAC;AAAA,EAC7E;AACF;AA9IA,IAEa,eAwDA,kBAYP;AAtEN;AAAA;AAAA;AAEO,IAAM,gBAAgB;AAAA,MAC3B,WAAW;AAAA,QACT,YAAY,EAAE,MAAM,2BAA2B,MAAM,OAAO;AAAA,QAC5D,MAAM,EAAE,MAAM,qBAAqB,MAAM,OAAO;AAAA,QAChD,MAAM,EAAE,MAAM,qBAAqB,MAAM,OAAO;AAAA,QAChD,WAAW,EAAE,MAAM,0BAA0B,MAAM,OAAO;AAAA,MAC5D;AAAA,MACA,UAAU;AAAA,QACR,gBAAgB,EAAE,MAAM,sCAAsC,MAAM,UAAU;AAAA,QAC9E,6BAA6B,EAAE,MAAM,oDAAoD,MAAM,UAAU;AAAA,QACzG,yBAAyB,EAAE,MAAM,iDAAiD,MAAM,UAAU;AAAA,QAClG,uBAAuB,EAAE,MAAM,+CAA+C,MAAM,UAAU;AAAA,QAC9F,oBAAoB,EAAE,MAAM,8CAA8C,MAAM,UAAU;AAAA,QAC1F,0BAA0B,EAAE,MAAM,qDAAqD,MAAM,UAAU;AAAA,QACvG,0BAA0B,EAAE,MAAM,sDAAsD,MAAM,UAAU;AAAA,QACxG,sBAAsB,EAAE,MAAM,iDAAiD,MAAM,UAAU;AAAA,QAC/F,sBAAsB,EAAE,MAAM,gDAAgD,MAAM,UAAU;AAAA,QAC9F,2BAA2B,EAAE,MAAM,gDAAgD,MAAM,UAAU;AAAA,QACnG,sBAAsB,EAAE,MAAM,2CAA2C,MAAM,UAAU;AAAA,QACzF,mBAAmB,EAAE,MAAM,wCAAwC,MAAM,UAAU;AAAA,QACnF,kBAAkB,EAAE,MAAM,kDAAkD,MAAM,UAAU;AAAA,QAC5F,qBAAqB,EAAE,MAAM,yCAAyC,MAAM,UAAU;AAAA,QACtF,mBAAmB,EAAE,MAAM,uCAAuC,MAAM,UAAU;AAAA,QAClF,mBAAmB,EAAE,MAAM,wCAAwC,MAAM,UAAU;AAAA,QACnF,gBAAgB,EAAE,MAAM,oCAAoC,MAAM,UAAU;AAAA,QAC5E,qBAAqB,EAAE,MAAM,yCAAyC,MAAM,UAAU;AAAA,QACtF,uBAAuB,EAAE,MAAM,6CAA6C,MAAM,UAAU;AAAA,QAC5F,iBAAiB,EAAE,MAAM,qCAAqC,MAAM,UAAU;AAAA,QAC9E,qBAAqB,EAAE,MAAM,yCAAyC,MAAM,UAAU;AAAA,QACtF,kBAAkB,EAAE,MAAM,uCAAuC,MAAM,UAAU;AAAA,MACnF;AAAA,MACA,WAAW;AAAA,QACT,UAAU,EAAE,MAAM,yBAAyB,MAAM,UAAU;AAAA,QAC3D,cAAc,EAAE,MAAM,6BAA6B,MAAM,UAAU;AAAA,QACnE,QAAQ,EAAE,MAAM,uBAAuB,MAAM,UAAU;AAAA,QACvD,uBAAuB,EAAE,MAAM,uCAAuC,MAAM,UAAU;AAAA,MACxF;AAAA,MACA,IAAI;AAAA,QACF,oBAAoB,EAAE,MAAM,6BAA6B,MAAM,UAAU;AAAA,QACzE,SAAS,EAAE,MAAM,iBAAiB,MAAM,UAAU;AAAA,MACpD;AAAA,IACF;AAeO,IAAM,mBAAN,cAA+B,MAAM;AAAA,MACjC;AAAA,MACA;AAAA,MAET,YAAY,cAAsB,UAAe,QAAgB,SAAwB;AACvF,cAAM,gBAAgB,YAAY,OAAO,SAAS,QAAQ,IAAI,MAAM,wCAAwC,OAAO;AACnH,aAAK,OAAO;AACZ,aAAK,eAAe;AACpB,aAAK,WAAW;AAAA,MAClB;AAAA,IACF;AAEA,IAAM,QAAQ,oBAAI,IAAoB;AAAA;AAAA;;;ACtEtC,SAAS,kBAAkB;AA6DpB,SAAS,gBAAgB,MAAoC;AAElE,SAAO,CAAC,GAAG,aAAa,GAAG,UAAU,IAAI,CAAC;AAC5C;AAEO,SAAS,aAAa,MAAqC;AAChE,SAAO,cAAc,IAAI;AAC3B;AAEA,SAAS,SAAS,MAAyC;AACzD,SAAO;AAAA,IACL,gBAAgB,aAAa,WAAW;AAAA,IACxC,GAAG,KAAK,IAAI,SAAO,gBAAgB,aAAa,GAAG,CAAC;AAAA,EACtD;AACF;AAEO,SAAS,mBAAmB,MAA+B;AAChE,MAAI,SAAS,YAAa,QAAO,SAAS,iBAAiB,EAAE,KAAK,MAAM,IAAI;AAC5E,SAAO;AAAA,IACL,gBAAgB,aAAa,IAAI;AAAA,IACjC,GAAG,gBAAgB,IAAI,EAAE,IAAI,SAAO,gBAAgB,YAAY,GAAG,CAAC;AAAA,IACpE,GAAG,SAAS,aAAa,IAAI,CAAC;AAAA,EAChC,EAAE,KAAK,MAAM,IAAI;AACnB;AAaO,SAAS,iBAAyB;AACvC,QAAM,OAAO,WAAW,QAAQ;AAChC,aAAW,QAAQ,kBAAmB,MAAK,OAAO,GAAG,IAAI,KAAS,mBAAmB,IAAI,CAAC,IAAQ;AAClG,SAAO,UAAU,KAAK,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE,CAAC;AAClD;AArGA,IAUM,aAOA,WA6BA,mBASA,eAgCO;AAvFb;AAAA;AAAA;AACA;AACA;AAQA,IAAM,cAAc;AAAA,MAClB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,IAAM,YAAY;AAAA,MAChB,YAAY;AAAA,QACV;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,MACA,MAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA;AAAA,MAEA,MAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,IAAM,oBAAoB;AAAA,MACxB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAIA,IAAM,gBAAgB;AAAA,MACpB,YAAY;AAAA,MACZ,MAAM;AAAA,MACN,MAAM,CAAC,gBAAgB,UAAU,uBAAuB;AAAA,IAC1D;AA4BO,IAAM,oBAAoB,CAAC,GAAG,OAAO,WAAW;AAAA;AAAA;;;AC7DvD,SAAS,SAAS,OAAqD;AACrE,SAAO,UAAU,QAAQ,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IACrE,QACD;AACN;AAGO,SAAS,YAAY,OAAyC;AACnE,SAAO,SAAS,KAAK,KAAK,CAAC;AAC7B;AAeO,SAAS,qBACd,UACA,UAC4B;AAC5B,QAAM,gBAAgB,IAAI,IAAI,OAAO,KAAK,QAAQ,CAAC;AACnD,QAAM,gBAAgB,IAAI,IAAI,OAAO,KAAK,QAAQ,CAAC;AACnD,QAAM,UAAU,CAAC,GAAG,aAAa,EAAE,OAAO,UAAQ,CAAC,cAAc,IAAI,IAAI,CAAC,EAAE,KAAK;AACjF,QAAM,QAAQ,CAAC,GAAG,aAAa,EAAE,OAAO,UAAQ,CAAC,cAAc,IAAI,IAAI,CAAC,EAAE,KAAK;AAC/E,SAAO,QAAQ,WAAW,KAAK,MAAM,WAAW,IAAI,SAAY,EAAE,SAAS,MAAM;AACnF;AAaO,SAAS,gBAAgB,QAA4B,MAAkD;AAC5G,MAAI,WAAW,OAAW,QAAO,CAAC;AAClC,QAAM,OAAO,SAAS,KAAK,MAAM,MAAM,CAAC;AACxC,MAAI,CAAC,KAAM,OAAM,IAAI,UAAU,0CAA0C;AACzE,QAAM,SAAkC,CAAC;AACzC,aAAW,OAAO,MAAM;AACtB,UAAM,QAAQ,KAAK,GAAG;AACtB,QAAI,UAAU,OAAW;AACzB,UAAMM,SAAQ,SAAS,KAAK;AAC5B,QAAI,CAACA,OAAO,OAAM,IAAI,UAAU,GAAG,GAAG,yBAAyB;AAC/D,eAAW,CAAC,QAAQ,WAAW,KAAK,OAAO,QAAQA,MAAK,GAAG;AACzD,aAAO,UAAU,SAAS,GAAG,MAAM,KAAK,GAAG,MAAM,MAAM,IAAI;AAAA,IAC7D;AAAA,EACF;AACA,SAAO;AACT;AAGO,SAAS,mBAAmB,SAAwD;AACzF,QAAM,UAAsB,CAAC;AAC7B,aAAW,CAAC,QAAQ,WAAW,KAAK,OAAO,QAAQ,OAAO,GAAG;AAC3D,QAAI,YAAY,KAAK,MAAM,EAAG,SAAQ,KAAK,EAAE,QAAQ,OAAO,QAAQ,OAAO,OAAO,CAAC;AACnF,UAAM,SAAS,SAAS,WAAW;AACnC,QAAI,CAAC,OAAQ;AACb,eAAW,SAAS,cAAc;AAChC,YAAM,QAAQ,OAAO,KAAK;AAC1B,UAAI,OAAO,UAAU,YAAY,YAAY,KAAK,KAAK,EAAG,SAAQ,KAAK,EAAE,QAAQ,OAAO,MAAM,CAAC;AAAA,IACjG;AACA,eAAW,SAAS,aAAa;AAC/B,YAAM,OAAO,OAAO,KAAK;AACzB,UAAI,CAAC,MAAM,QAAQ,IAAI,EAAG;AAC1B,iBAAW,QAAQ,MAAM;AACvB,YAAI,OAAO,SAAS,YAAY,YAAY,KAAK,IAAI,EAAG,SAAQ,KAAK,EAAE,QAAQ,OAAO,OAAO,KAAK,CAAC;AAAA,MACrG;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,SAAS,OAAyB;AACzC,SAAO,MAAM,UAAU,SAAS,GAAG,MAAM,MAAM,mBAAmB,GAAG,MAAM,MAAM,KAAK,MAAM,KAAK,KAAK,MAAM,KAAK;AACnH;AAOO,SAAS,cAAc,IAAY,MAAc,SAA+D;AACrH,QAAM,UAAU,mBAAmB,OAAO;AAC1C,MAAI,QAAQ,WAAW,EAAG,QAAO;AACjC,SAAO;AAAA,IAAK;AAAA,IACV,GAAG,IAAI,8DAA8D,QAAQ,IAAI,QAAQ,EAAE,KAAK,IAAI,CAAC;AAAA,IACrG,qCAAqC,IAAI;AAAA,EAA6L;AAC1O;AA9HA,IAWM,aAGA,cAEA;AAhBN;AAAA;AAAA;AAAA;AAWA,IAAM,cAAc,WAAC,+EAAsE,GAAC;AAG5F,IAAM,eAAe,CAAC,WAAW,OAAO,aAAa,WAAW,UAAU;AAE1E,IAAM,cAAc,CAAC,MAAM;AAAA;AAAA;;;AChB3B,SAAS,WAAAC,gBAAe;AACxB,SAAS,QAAAC,aAAY;AAQrB,SAAS,aAAa,MAAuB;AAC3C,SAAO,KAAK,YAAY,EAAE,WAAW,OAAO;AAC9C;AAMA,SAAS,4BAA4B,MAAqB;AACxD,SAAO,SAAS;AAClB;AAGA,eAAe,WAAW,MAAiC;AACzD,MAAI;AAAE,YAAQ,MAAMD,SAAQ,IAAI,GAAG,OAAO,UAAQ,CAAC,aAAa,IAAI,CAAC,EAAE,KAAK;AAAA,EAAG,SAAS,OAAO;AAC7F,QAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,UAAU,SAAS,MAAM,SAAS,SAAU,QAAO,CAAC;AACvG,UAAM;AAAA,EACR;AACF;AA0BA,eAAsB,oBAAoB,OAA4C;AACpF,QAAM,UAAU,IAAI,IAAI,MAAM,MAAM;AACpC,QAAM,aAAa,IAAI,IAAI,MAAM,UAAU;AAC3C,QAAM,UAAmB,CAAC;AAC1B,aAAW,QAAQ,MAAM,OAAO;AAC9B,UAAM,OAAOC,MAAK,MAAM,MAAM,IAAI;AAClC,UAAM,QAAQA,MAAK,MAAM,QAAQ,IAAI;AACrC,QAAI,CAAC,4BAA4B,MAAM,IAAI,GAAG;AAC5C,UAAI,WAAW,IAAI,IAAI,EAAG;AAC1B,UAAI,SAAS,QAAQ;AACnB,cAAM,WAAW,QAAQ,IAAI,IAAI,IAAI,MAAM,WAAW,IAAI,IAAI,CAAC;AAC/D,gBAAQ,KAAK,EAAE,MAAM,eAAe,MAAM,OAAO,UAAU,YAAY,KAAK,CAAC;AAC7E,mBAAW,SAAS,SAAU,SAAQ,KAAK,EAAE,MAAM,QAAQ,MAAMA,MAAK,OAAO,KAAK,GAAG,QAAQA,MAAK,MAAM,KAAK,EAAE,CAAC;AAChH;AAAA,MACF;AAAA,IACF;AACA,QAAI,CAAC,QAAQ,IAAI,IAAI,EAAG;AACxB,YAAQ,KAAK,EAAE,MAAM,QAAQ,MAAM,OAAO,QAAQ,KAAK,CAAC;AAAA,EAC1D;AACA,SAAO;AACT;AAzEA,IAMa;AANb;AAAA;AAAA;AAMO,IAAM,SAAS;AAAA;AAAA;;;ACNtB,SAAS,YAAAC,iBAAgB;AACzB,SAAS,QAAAC,aAAY;AAsCrB,SAAS,SAAS,OAAyC;AACzD,SAAO,UAAU,QAAQ,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC;AAChG;AAEA,SAAS,WAAW,QAAqD;AACvE,MAAI;AAAE,WAAO,SAAS,WAAW,SAAY,CAAC,IAAI,KAAK,MAAM,MAAM,CAAC;AAAA,EAAG,QAAQ;AAAE,WAAO,CAAC;AAAA,EAAG;AAC9F;AAGA,eAAe,mBAAmB,MAA2C;AAC3E,MAAI;AAAE,WAAO,MAAMD,UAAS,MAAM,MAAM;AAAA,EAAG,SAAS,OAAO;AACzD,QAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,UAAU,SAAS,MAAM,SAAS,SAAU,QAAO;AACtG,UAAM;AAAA,EACR;AACF;AAGO,SAAS,mBAAmB,QAA4B,MAAY,kBAAmC;AAC5G,QAAM,WAAW,WAAW,MAAM;AAGlC,WAAS,MAAM;AAAA,IACb,GAAG,SAAS,SAAS,GAAG;AAAA,IACxB,GAAG;AAAA,IACH,iBAAiB;AAAA,IACjB,GAAI,qBAAqB,SAAY,CAAC,IAAI,EAAE,CAAC,kBAAkB,GAAG,iBAAiB;AAAA,EACrF;AAEA,WAAS,mBAAmB;AAC5B,WAAS,mBAAmB;AAC5B,WAAS,sBAAsB;AAC/B,SAAO,KAAK,UAAU,UAAU,MAAM,CAAC,IAAI;AAC7C;AAEO,SAAS,gBAAgB,QAAoC;AAClE,QAAM,OAAO,WAAW,MAAM;AAC9B,QAAM,QAAiC,EAAE,wBAAwB,KAAK;AACtE,aAAW,OAAO,YAAa,KAAI,OAAO,KAAM,OAAM,GAAG,IAAI,KAAK,GAAG;AACrE,SAAO,KAAK,UAAU,OAAO,MAAM,CAAC,IAAI;AAC1C;AAGO,SAAS,iBAAiB,QAA4B,MAAoB;AAC/E,QAAM,WAAW,QAAQ,KAAK;AAC9B,SAAO,WAAW,GAAG,QAAQ;AAAA;AAAA,EAAO,mBAAmB,IAAI,CAAC,KAAK,mBAAmB,IAAI;AAC1F;AAGO,SAAS,sBAAsB,gBAAoC,UAAyC;AACjH,QAAM,WAAW,WAAW,cAAc;AAC1C,QAAM,cAAc,SAAS,SAAS,GAAG;AACzC,QAAM,QAAQ,IAAI,IAAI,aAAa,UAAU,QAAQ,CAAC;AACtD,aAAW,QAAQ,SAAU,KAAI,OAAO,OAAO,aAAa,IAAI,EAAG,OAAM,IAAI,IAAI;AACjF,MAAI,OAAO,OAAO,UAAU,cAAc,EAAG,OAAM,IAAI,cAAc;AACrE,SAAO,CAAC,GAAG,KAAK;AAClB;AAEA,eAAsB,2BACpB,QACA,MACA,gBACA,WAA4B,QAAQ,UACpC,SAAS,UACsB;AAC/B,QAAM,OAAO,SAAS,QAAQ,UAAU,IAAI;AAC5C,QAAM,OAAOC,MAAK,MAAM,mBAAmB;AAC3C,QAAM,kBAAkB,EAAE,mBAAmB,MAAM,CAAC,kBAAkB,GAAG,KAAK;AAC9E,QAAM,QAAQ,YAAY,iBAAiB,QAAQ,CAAC,QAAQ,OAAO,CAAC;AACpE,QAAM,SAAS,YAAY,iBAAiB,QAAQ,CAAC,QAAQ,QAAQ,CAAC;AACtE,QAAM,QAAQ,MAAM,sBAAsB,IAAI;AAC9C,QAAM,KAAK,eAAe,IAAI;AAC9B,MAAI,MAAM,SAAS,WAAW;AAC5B,WAAO,EAAE,MAAM,QAAQ,CAAC,yBAAyB,EAAE,IAAI,OAAO,UAAU,MAAM,MAAM,OAAO,OAAO,OAAO,CAAC,CAAC,EAAE;AAAA,EAC/G;AACA,QAAM,aAAa,sBAAsB,gBAAgB,oBAAI,IAAI,CAAC;AAClE,MAAI,WAAW,SAAS,EAAG,QAAO,EAAE,MAAM,QAAQ,CAAC,uBAAuB,IAAI,UAAU,MAAM,UAAU,CAAC,EAAE;AAC3G,QAAM,UAAU,aAAa,OAAO,UAAU,QAAQ;AACtD,MAAI,QAAQ,SAAS,EAAG,QAAO,EAAE,MAAM,QAAQ,CAAC,kBAAkB,IAAI,UAAU,MAAM,OAAO,CAAC,EAAE;AAChG,MAAI,aAAa,UAAU;AACzB,WAAO,EAAE,MAAM,QAAQ,CAAC;AAAA,MACtB,IAAI,GAAG,EAAE;AAAA,MAAgC,QAAQ;AAAA,MACjD,SAAS,UAAU,IAAI;AAAA,MACvB,KAAK,gCAAgC,KAAK,+CAA+C,YAAY,iBAAiB,MAAM,CAAC,uCAAuC,MAAM;AAAA,IAC5K,CAAC,EAAE;AAAA,EACL;AACA,SAAO,EAAE,MAAM,QAAQ,CAAC;AAAA,IACtB,IAAI,GAAG,EAAE;AAAA,IAAmB,QAAQ;AAAA,IACpC,SAAS,UAAU,IAAI;AAAA,IACvB,KAAK,gCAAgC,KAAK,+CAA+C,YAAY,iBAAiB,MAAM,CAAC,uCAAuC,MAAM;AAAA,EAC5K,CAAC,EAAE;AACL;AASA,SAAS,cAAc,MAAY,MAAc,MAAc,YAAmC;AAChG,QAAM,QAAQ;AAAA,IACZ,GAAI,WAAW,QAAQ,WAAW,IAAI,CAAC,IAAI,CAAC,+BAA+B,WAAW,QAAQ,KAAK,IAAI,CAAC,EAAE;AAAA,IAC1G,GAAI,WAAW,MAAM,WAAW,IAAI,CAAC,IAAI,CAAC,gCAAgC,WAAW,MAAM,KAAK,IAAI,CAAC,EAAE;AAAA,EACzG;AACA,SAAO;AAAA,IAAK,oBAAoB,IAAI;AAAA,IAClC,UAAU,IAAI,8DAA8D,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI;AAAA,IACtG,+EAA+E,IAAI,wCAAmC,IAAI;AAAA,EAAqH;AACnP;AAlJA,IAmBM,QAKA,YAEA,SACA,UAIA,mBAIA,oBAEA,aA+GO;AApJb;AAAA;AAAA;AAEA;AAKA;AAEA;AACA;AAEA;AACA;AACA;AACA;AAIA,IAAM,SAAS;AAAA,MACb;AAAA,MAAU;AAAA,MAAW;AAAA,MAAY;AAAA,MAAS;AAAA,MAC1C;AAAA,MAAiB;AAAA,MAAoB;AAAA,IACvC;AAEA,IAAM,aAAa,CAAC,WAAW,YAAY,OAAO;AAElD,IAAM,UAAU;AAChB,IAAM,WAAW;AAAA,MACf;AAAA,MAAwB;AAAA,MAAqB;AAAA,MAC7C;AAAA,MAA2B;AAAA,MAA0B;AAAA,IACvD;AACA,IAAM,oBAAoB;AAAA,MACxB,gCAAgC;AAAA,MAChC,+BAA+B;AAAA,IACjC;AACA,IAAM,qBAAqB;AAE3B,IAAM,cAAc,CAAC,0BAA0B,SAAS,iBAAiB,UAAU,OAAO;AA+GnF,IAAM,cAAqB;AAAA,MAChC,IAAI;AAAA,MACJ,OAAO;AAAA,MACP,SAAS;AAAA;AAAA,MAET,aAAa;AAAA,MACb,eAAe;AAAA;AAAA;AAAA;AAAA,MAIf,MAAM;AAAA,QACJ,iBAAiB;AAAA,UACf;AAAA,UAAQ;AAAA,UAAS;AAAA,UAAY;AAAA,UAAc;AAAA,UAAe;AAAA,UAAc;AAAA,UACxE;AAAA,UAAc;AAAA,UAAW;AAAA,UAAY;AAAA,UACrC;AAAA,UAAc;AAAA,UAAc;AAAA,QAC9B;AAAA,MACF;AAAA,MACA,MAAM,MAAM,QAAgB,OAA4C;AACtE,cAAM,OAAO,OAAO,UAAU;AAC9B,cAAM,SAAS,MAAM,MAAM,OAAO,IAAI,QAAQ,OAAO,UAAU;AAC/D,YAAI,CAAC,QAAQ;AACX,iBAAO,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,KAAK,cAAc,qCAAqC,4DAA4D,CAAC,EAAE;AAAA,QACxJ;AACA,YAAI,CAAE,MAAM,OAAO,IAAI,GAAI;AACzB,iBAAO,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,KAAK,eAAe,iCAAiC,IAAI,KAAK,0DAA0D,CAAC,EAAE;AAAA,QAC5J;AACA,cAAM,SAAkB,CAAC,KAAK,eAAe,wBAAwB,MAAM,UAAU,IAAI,GAAG,CAAC;AAE7F,cAAM,iBAAiB,MAAM,cAAcA,MAAK,MAAM,eAAe,CAAC;AACtE,cAAM,eAAe,MAAM,cAAcA,MAAK,MAAM,WAAW,CAAC;AAChE,YAAI;AACJ,YAAI;AACJ,YAAI;AACF,wBAAc,MAAM,mBAAmB,OAAO,WAAW;AAEzD,4BAAkB,gBAAgB,aAAa,CAAC,OAAO,CAAC;AAAA,QAC1D,QAAQ;AACN,iBAAO,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,GAAG,QAAQ;AAAA,YAAK;AAAA,YAC7C,kBAAkB,OAAO,WAAW;AAAA,YACpC;AAAA,UAAwF,CAAC,EAAE;AAAA,QAC/F;AACA,cAAM,gBAAgB,cAAc,cAAc,OAAO,aAAa,eAAe;AACrF,YAAI,cAAe,QAAO,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,GAAG,QAAQ,aAAa,EAAE;AAC5E,cAAM,SAAS,MAAM,cAAc,MAAM,MAAM;AAC/C,cAAM,UAAmB,CAAC;AAC1B,cAAM,cAAsC,CAAC;AAC7C,cAAM,cAAuE,CAAC;AAE9E,cAAM,QAAiB,CAAC;AACxB,mBAAW,QAAQ,OAAO;AACxB,gBAAM,SAAS,SAAS,QAAQ,UAAU,IAAI;AAC9C,gBAAM,YAAYA,MAAK,QAAQ,cAAc;AAE7C,cAAI;AACJ,cAAI;AACJ,cAAI;AACF,8BAAkB,MAAM,mBAAmB,SAAS;AACpD,0BAAc,gBAAgB,iBAAiB,CAAC,OAAO,CAAC;AAAA,UAC1D,QAAQ;AACN,mBAAO,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,GAAG,QAAQ;AAAA,cAAK,cAAc,IAAI;AAAA,cAC/D,kBAAkB,SAAS;AAAA,cAC3B;AAAA,YAAmG,CAAC,EAAE;AAAA,UAC1G;AACA,gBAAM,eAAe,cAAc,cAAc,IAAI,IAAI,WAAW,WAAW;AAC/E,cAAI,aAAc,QAAO,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,GAAG,QAAQ,YAAY,EAAE;AAG1E,cAAI,oBAAoB,QAAW;AACjC,kBAAM,aAAa,qBAAqB,iBAAiB,WAAW;AACpE,gBAAI,WAAY,OAAM,KAAK,cAAc,MAAM,QAAQ,WAAW,UAAU,CAAC;AAAA,UAC/E;AACA,kBAAQ,KAAK,EAAE,MAAM,OAAO,MAAM,OAAO,CAAC;AAC1C,kBAAQ,KAAK,EAAE,MAAM,QAAQ,MAAMA,MAAK,QAAQ,WAAW,GAAG,SAAS,iBAAiB,cAAc,IAAI,EAAE,CAAC;AAC7G,kBAAQ,KAAK,EAAE,MAAM,QAAQ,MAAMA,MAAK,QAAQ,eAAe,GAAG,SAAS,mBAAmB,gBAAgB,MAAM,MAAM,EAAE,CAAC;AAC7H,kBAAQ,KAAK,EAAE,MAAM,QAAQ,MAAM,WAAW,SAAS,gBAAgB,WAAW,GAAG,MAAM,KAAK,CAAC;AACjG,kBAAQ,KAAK,GAAG,MAAM,oBAAoB,EAAE,MAAM,QAAQ,MAAM,OAAO,QAAQ,QAAQ,YAAY,WAAW,CAAC,CAAC;AAChH,sBAAY,KAAK,MAAM,2BAA2B,QAAQ,MAAM,gBAAgB,QAAQ,UAAU,MAAM,CAAC;AACzG,sBAAY,IAAI,IAAI,EAAE,CAAC,kBAAkB,GAAG,OAAO;AAAA,QACrD;AACA,eAAO,EAAE,SAAS,aAAa,QAAQ,CAAC,GAAG,QAAQ,GAAG,KAAK,GAAG,QAAQ,YAAY;AAAA,MACpF;AAAA,IACF;AAAA;AAAA;;;ACrOA,SAAS,QAAAC,aAAY;AACrB,SAAS,OAAO,iBAAiC;AAqBjD,SAAS,MAAM,QAAmB,KAAwB;AACxD,QAAM,QAAQ,OAAO,GAAG;AACxB,MAAI,UAAU,UAAa,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,KAAK,iBAAiB,MAAM;AACrG,WAAQ,OAAO,GAAG,IAAI,CAAC;AAAA,EACzB;AACA,SAAO;AACT;AAMA,SAAS,sBAAsB,OAAwB;AACrD,QAAM,WAAW,MAAM,OAAO,UAAU;AACxC,WAAS,cAAc;AAGvB,MAAI,OAAO,SAAS,mBAAmB,aAAa,SAAS,mBAAmB,OAAW,UAAS,iBAAiB;AAAA,MAChH,OAAM,UAAU,gBAAgB,EAAE,UAAU;AACnD;AAaO,SAAS,iBAAiB,QAAmB,OAAgC;AAClF,QAAM,SAAS,gBAAgB,MAAM;AACrC,SAAO,eAAe;AACtB,SAAO,kBAAkB;AACzB,SAAO,yBAAyB,MAAM;AACtC,MAAI,MAAM,YAAa,QAAO,qBAAqB,MAAM;AAGzD,QAAM,QAAQ,QAAQ,EAAE,UAAU;AAClC,wBAAsB,MAAM;AAG5B,MAAI,OAAO,OAAO,YAAY,UAAU;AACtC,UAAM,UAAU,MAAM,MAAM,QAAQ,UAAU,GAAG,OAAO,OAAO;AAC/D,YAAQ,eAAe;AACvB,YAAQ,kBAAkB;AAC1B,QAAI,MAAM,YAAa,SAAQ,qBAAqB,MAAM;AAC1D,0BAAsB,OAAO;AAAA,EAC/B;AACA,SAAO,UAAU,MAAM,IAAI;AAC7B;AAEO,SAAS,cAAc,SAA0B;AACtD,SAAO,KAAK,UAAU,SAAS,CAAC,KAAK,UAAoB,QAAQ,wBAAwB,OAAO,OAAQ,CAAC,IAAI;AAC/G;AAUO,SAAS,gBAAgB,SAAmC;AACjE,MAAI,UAAU;AACd,QAAM,OAAO,CAAC,UAAyB;AACrC,QAAI,MAAM,QAAQ,KAAK,GAAG;AAAE,iBAAW,QAAQ,MAAO,MAAK,IAAI;AAAG;AAAA,IAAQ;AAC1E,QAAI,UAAU,QAAQ,OAAO,UAAU,SAAU;AACjD,eAAW,CAAC,KAAK,MAAM,KAAK,OAAO,QAAQ,KAAK,GAAG;AACjD,UAAI,QAAQ,sBAAuB,YAAW;AAAA,UACzC,MAAK,MAAM;AAAA,IAClB;AAAA,EACF;AACA,OAAK,OAAO;AACZ,SAAO,EAAE,QAAQ,YAAY,QAAQ,OAAO,YAAY,YAAY,CAAC,MAAM,QAAQ,OAAO,GAAG,QAAQ;AACvG;AAGO,SAAS,qBAAqB,QAAyC;AAC5E,QAAM,QAAQ,OAAO;AACrB,SAAO,UAAU,UAAU,UAAU,eAAe,UAAU,UAAU,UAAU,YAC9E,QACA;AACN;AAEA,eAAe,qBACb,QACA,MACA,OACA,QAC+B;AAC/B,QAAM,OAAO,SAAS,QAAQ,SAAS,IAAI;AAC3C,QAAM,OAAOA,MAAK,MAAM,WAAW;AACnC,QAAM,QAAQ,YAAY,EAAE,YAAY,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC;AACjE,QAAM,SAAS,YAAY,EAAE,YAAY,KAAK,GAAG,QAAQ,CAAC,SAAS,QAAQ,CAAC;AAC5E,QAAM,QAAQ,MAAM,sBAAsB,IAAI;AAC9C,QAAM,KAAK,cAAc,IAAI;AAC7B,QAAM,SAAkB,CAAC;AACzB,MAAI,MAAM,SAAS,WAAW;AAC5B,WAAO,KAAK,yBAAyB,EAAE,IAAI,OAAO,SAAS,MAAM,MAAM,OAAO,OAAO,OAAO,CAAC,CAAC;AAAA,EAChG,OAAO;AACL,QAAI,UAAU,aAAa,UAAU,QAAQ;AAC3C,aAAO,KAAK;AAAA,QACV,IAAI,GAAG,EAAE;AAAA,QAAgC,QAAQ;AAAA,QACjD,SAAS,SAAS,IAAI,qEAAqE,KAAK;AAAA,QAChG,KAAK,gCAAgC,KAAK,wBAAwB,MAAM;AAAA,MAC1E,CAAC;AAAA,IACH,OAAO;AACL,YAAM,SAAS,OAAO,SAAS,IAAI,gBAAgB,IAC/C,mJACA;AACJ,YAAM,SAAS,UAAU,cACrB,0FACA,iCAAiC,UAAU,SAAS,mCAAmC,EAAE;AAC7F,aAAO,KAAK;AAAA,QACV,IAAI,GAAG,EAAE;AAAA,QAAmB,QAAQ;AAAA,QACpC,SAAS,SAAS,IAAI,0BAA0B,MAAM,IAAI,MAAM;AAAA,QAChE,KAAK,gCAAgC,KAAK,wBAAwB,MAAM;AAAA,MAC1E,CAAC;AAAA,IACH;AAAA,EACF;AACA,MAAI,MAAM,SAAS,cAAc,UAAU,aAAa,UAAU,SAAS;AACzE,WAAO,KAAK;AAAA,MACV,IAAI,GAAG,EAAE;AAAA,MAAgC,QAAQ;AAAA,MACjD,SAAS,SAAS,IAAI,qEAAqE,KAAK;AAAA,MAChG,KAAK,8CAA8C,MAAM;AAAA,IAC3D,CAAC;AAAA,EACH;AACA,SAAO,EAAE,MAAM,OAAO;AACxB;AA1JA,IAgBMC,SAEAC,aACA,SAyIO;AA5Jb;AAAA;AAAA;AAEA;AAEA;AAEA;AACA;AAEA;AACA;AACA;AACA;AAIA,IAAMD,UAAS,CAAC,aAAa,UAAU,WAAW,YAAY;AAE9D,IAAMC,cAAa,CAAC,WAAW,YAAY;AAC3C,IAAM,UAAU;AAyIT,IAAM,aAAoB;AAAA,MAC/B,IAAI;AAAA,MACJ,OAAO;AAAA,MACP,SAAS;AAAA,MACT,eAAe;AAAA;AAAA;AAAA,MAGf,MAAM,EAAE,QAAQ,EAAE,cAAc,sBAAsB,iBAAiB,QAAQ,EAAE;AAAA,MACjF,MAAM,MAAM,QAAgB,OAA4C;AACtE,cAAM,SAAkB,CAAC;AACzB,cAAM,OAAO,OAAO,UAAU;AAC9B,cAAM,SAAS,MAAM,MAAM,OAAO,IAAI,OAAO,OAAO,UAAU;AAC9D,YAAI,CAAC,QAAQ;AACX,iBAAO,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,KAAK,aAAa,+BAA+B,oDAAoD,CAAC,EAAE;AAAA,QACzI;AACA,cAAM,aAAaF,MAAK,MAAM,aAAa;AAC3C,cAAM,MAAM,MAAM,cAAc,UAAU;AAC1C,YAAI,QAAQ,QAAW;AACrB,iBAAO,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,KAAK,cAAc,qBAAqB,IAAI,KAAK,wDAAwD,CAAC,EAAE;AAAA,QAC7I;AACA,YAAI;AACJ,YAAI;AAAE,mBAAS,MAAM,GAAG;AAAA,QAAG,QAAQ;AACjC,iBAAO,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,KAAK,gBAAgB,kBAAkB,UAAU,aAAa,4DAA4D,CAAC,EAAE;AAAA,QAC9J;AACA,eAAO,KAAK,KAAK,cAAc,kBAAkB,MAAM,UAAU,IAAI,GAAG,CAAC;AAGzE,cAAM,WAAW,cAAc,aAAa,YAAY,YAAY,OAAO,WAAW,CAAC;AACvF,YAAI,SAAU,QAAO,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,GAAG,QAAQ,QAAQ,EAAE;AAClE,cAAM,QAAQ,qBAAqB,MAAM;AAEzC,cAAM,UAAmB,CAAC;AAC1B,cAAM,cAAsC,CAAC;AAK7C,cAAM,UAAU,YAAY,EAAE,YAAY,KAAK,GAAG,QAAQ,CAAC,SAAS,QAAQ,CAAC;AAC7E,cAAM,SAAS,MAAM,MAAM,QAAQ,CAAC,SAAS,QAAQ,GAAG,EAAE,MAAM,OAAO,MAAM,YAAY,MAAM,MAAM,OAAO,WAAW,CAAC;AACxH,YAAI,CAAC,OAAO,IAAI;AACd,iBAAO,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,GAAG,QAAQ;AAAA,YAAK;AAAA,YAC7C;AAAA,YACA,OAAO,OAAO;AAAA,UAAuG,CAAC,EAAE;AAAA,QAC5H;AACA,YAAI;AACJ,YAAIG;AACJ,YAAI;AACF,gBAAM,SAAkB,KAAK,MAAM,OAAO,MAAM;AAChD,UAAAA,YAAW,gBAAgB,MAAM;AACjC,0BAAgB,cAAc,MAAM;AAAA,QACtC,QAAQ;AACN,iBAAO,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,GAAG,QAAQ;AAAA,YAAK;AAAA,YAC7C;AAAA,YACA,uBAAuB,OAAO;AAAA,UAA4E,CAAC,EAAE;AAAA,QACjH;AAGA,YAAI,CAACA,UAAS,QAAQ;AACpB,iBAAO,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,GAAG,QAAQ;AAAA,YAAK;AAAA,YAC7C;AAAA,YACA,uBAAuB,OAAO;AAAA,UAAyF,CAAC,EAAE;AAAA,QAC9H;AACA,eAAO,KAAK,KAAK,iBAAiBA,UAAS,YAAY,IACnD,qCAAqC,OAAO,iIAC5C,qCAAqC,OAAO,KAAK,OAAOA,UAAS,OAAO,CAAC,mFAAmF,CAAC;AAEjK,cAAM,SAAS,MAAM,cAAc,MAAMF,OAAM;AAC/C,mBAAW,QAAQ,OAAO;AACxB,gBAAM,SAAS,SAAS,QAAQ,SAAS,IAAI;AAC7C,gBAAM,cAAcD,MAAK,QAAQ,OAAO;AACxC,gBAAM,eAAe,mBAAmB,IAAI;AAC5C,kBAAQ,KAAK,EAAE,MAAM,OAAO,MAAM,OAAO,CAAC;AAE1C,kBAAQ,KAAK,EAAE,MAAM,QAAQ,MAAMA,MAAK,QAAQ,sBAAsB,GAAG,SAAS,aAAa,CAAC;AAChG,kBAAQ,KAAK;AAAA,YACX,MAAM;AAAA,YACN,MAAMA,MAAK,QAAQ,aAAa;AAAA,YAChC,SAAS,iBAAiB,QAAQ,EAAE,cAAc,YAAY,CAAC;AAAA,UACjE,CAAC;AACD,kBAAQ,KAAK,EAAE,MAAM,QAAQ,MAAM,aAAa,SAAS,cAAc,CAAC;AACxE,kBAAQ,KAAK,GAAG,MAAM,oBAAoB,EAAE,MAAM,QAAQ,MAAM,OAAOC,SAAQ,QAAQ,YAAYC,YAAW,CAAC,CAAC;AAChH,sBAAY,KAAK,MAAM,qBAAqB,QAAQ,MAAM,OAAO,MAAM,CAAC;AAAA,QAC1E;AACA,eAAO,EAAE,SAAS,aAAa,QAAQ,OAAO;AAAA,MAChD;AAAA,IACF;AAAA;AAAA;;;ACjPA,SAAS,SAAAE,cAAa;AACtB,SAAS,SAAS,YAAAC,WAAU,UAAU,MAAAC,KAAI,YAAY;AACtD,SAAS,cAAc;AACvB,SAAS,cAAAC,aAAY,QAAAC,OAAM,WAAAC,gBAAe;AAuC1C,SAASC,UAAS,OAAqD;AACrE,SAAO,UAAU,QAAQ,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,EAAE,GAAG,MAAM,IAAI;AAC/F;AAGO,SAAS,iBAAiB,QAAoC;AACnE,QAAM,SAAkB,WAAW,SAAY,CAAC,IAAI,KAAK,MAAM,MAAM;AACrE,QAAM,WAAWA,UAAS,MAAM;AAChC,MAAI,CAAC,SAAU,OAAM,IAAI,MAAM,oCAAoC;AACnE,SAAO,SAAS;AAChB,SAAO,SAAS;AAChB,SAAO,KAAK,UAAU,UAAU,MAAM,CAAC,IAAI;AAC7C;AAGO,SAAS,eAAe,QAA4B,MAAoB;AAC7E,SAAO;AAAA,IACL,QAAQ,KAAK;AAAA,IACb,gBAAgB,MAAM,oBAAoB;AAAA,IAC1C,gBAAgB,MAAM,SAAS;AAAA,IAC/B,mBAAmB,IAAI;AAAA,EACzB,EAAE,OAAO,CAAC,SAAyB,QAAQ,IAAI,CAAC,EAAE,KAAK,MAAM;AAC/D;AAOA,SAAS,eAAe,MAAc,QAAuB;AAC3D,SAAO;AAAA,IAAK;AAAA,IAAc;AAAA,IACxB,WAAW,YAAY,OAAOF,MAAK,MAAM,KAAK,CAAC;AAAA,EAA0C;AAC7F;AAGA,eAAsB,iBAAiB,MAAsF;AAC3H,QAAM,cAAcA,MAAK,MAAM,OAAO,gBAAgB,YAAY;AAClE,QAAM,eAAeA,MAAK,aAAa,cAAc;AACrD,MAAI;AACF,UAAM,CAAC,eAAe,cAAc,GAAG,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC3D,SAAS,WAAW;AAAA,MAAG,KAAK,YAAY;AAAA,MAAGH,UAAS,cAAc,MAAM;AAAA,IAC1E,CAAC;AACD,QAAI,CAAC,aAAa,OAAO,EAAG,QAAO,EAAE,OAAO,eAAe,MAAM,GAAG,YAAY,yBAAyB,EAAE;AAC3G,UAAM,WAAWK,UAAS,KAAK,MAAM,GAAG,CAAC;AACzC,QAAI,CAAC,YAAY,SAAS,SAAS,cAAc;AAC/C,aAAO,EAAE,OAAO,eAAe,MAAM,GAAG,YAAY,sBAAsB,YAAY,GAAG,EAAE;AAAA,IAC7F;AACA,UAAM,KAAKA,UAAS,SAAS,EAAE;AAC/B,UAAM,WAAW,IAAI;AACrB,QAAI,CAAC,MAAM,QAAQ,QAAQ,KAAK,SAAS,WAAW,KAAK,OAAO,SAAS,CAAC,MAAM,YAAY,CAAC,SAAS,CAAC,EAAE,KAAK,GAAG;AAC/G,aAAO,EAAE,OAAO,eAAe,MAAM,GAAG,YAAY,uCAAuC,EAAE;AAAA,IAC/F;AACA,UAAM,cAAc,SAAS,CAAC;AAC9B,QAAIH,YAAW,WAAW,GAAG;AAC3B,aAAO,EAAE,OAAO,eAAe,MAAM,GAAG,YAAY,8CAA8C,EAAE;AAAA,IACtG;AACA,UAAM,YAAYE,SAAQ,aAAa,WAAW;AAClD,UAAM,CAAC,gBAAgB,SAAS,IAAI,MAAM,QAAQ,IAAI,CAAC,SAAS,SAAS,GAAG,KAAK,SAAS,CAAC,CAAC;AAC5F,QAAI,CAAC,SAAS,eAAe,cAAc,KAAK,mBAAmB,iBAAiB,CAAC,UAAU,OAAO,GAAG;AACvG,aAAO,EAAE,OAAO,eAAe,MAAM,gBAAgB,YAAY,0DAA0D,EAAE;AAAA,IAC/H;AACA,UAAM,UAAU,OAAO,SAAS,YAAY,YAAY,SAAS,QAAQ,KAAK,IAAI,SAAS,QAAQ,KAAK,IAAI;AAC5G,WAAO;AAAA,MACL,SAAS,EAAE,OAAO,gBAAgB,QAAQ;AAAA,MAC1C,OAAO,KAAK,cAAc,GAAG,YAAY,IAAI,OAAO,gBAAgB,cAAc,GAAG;AAAA,IACvF;AAAA,EACF,QAAQ;AACN,WAAO,EAAE,OAAO,eAAe,MAAM,4BAA4B,YAAY,SAAS,YAAY,GAAG,EAAE;AAAA,EACzG;AACF;AAYA,SAAS,eAAe,OAAuC;AAC7D,MAAI,MAAM,QAAQ,QAAW;AAC3B,QAAI;AAAE,cAAQ,KAAK,CAAC,MAAM,KAAK,SAAS;AAAA,IAAG,QAAQ;AAAA,IAA8C;AAAA,EACnG;AACA,MAAI;AAAE,UAAM,KAAK,SAAS;AAAA,EAAG,QAAQ;AAAA,EAA6C;AAClF,QAAM,OAAO,QAAQ;AACrB,QAAM,QAAQ,QAAQ;AACtB,QAAM,QAAQ,QAAQ;AACxB;AAGA,SAAS,gBACP,YACA,cACA,KACA,SACA,KACwB;AACxB,QAAM,YAAY,QAAQ,aAAa;AACvC,QAAM,cAAc,QAAQ,eAAe;AAC3C,QAAM,OAAO,CAAC,UAAU,OAAO,gBAAgB,mBAAmB,eAAe,cAAc,cAAc;AAC7G,SAAO,IAAI,QAAQ,mBAAiB;AAClC,UAAM,QAAQL,OAAM,YAAY,MAAM,EAAE,KAAK,UAAU,MAAM,KAAK,OAAO,CAAC,QAAQ,QAAQ,MAAM,EAAE,CAAC;AACnG,UAAM,SAAmB,CAAC;AAC1B,QAAI,QAAQ;AACZ,QAAI,UAAU;AACd,UAAM,SAAS,CAAC,WAAgC;AAC9C,UAAI,QAAS;AACb,gBAAU;AACV,mBAAa,KAAK;AAClB,oBAAc,MAAM;AAAA,IACtB;AACA,UAAM,QAAQ,CAAC,WAAuD;AACpE,UAAI,QAAS;AACb,qBAAe,KAAK;AACpB,aAAO,EAAE,IAAI,OAAO,QAAQ,OAAO,OAAO,MAAM,EAAE,SAAS,MAAM,GAAG,OAAO,CAAC;AAAA,IAC9E;AACA,UAAM,UAAU,CAAC,OAAe,SAAwB;AACtD,UAAI,QAAS;AACb,eAAS,MAAM;AACf,UAAI,QAAQ,aAAa;AACvB,cAAM,UAAU;AAChB;AAAA,MACF;AACA,UAAI,KAAM,QAAO,KAAK,KAAK;AAAA,IAC7B;AACA,UAAM,QAAQ,WAAW,MAAM;AAAE,YAAM,SAAS;AAAA,IAAG,GAAG,SAAS;AAC/D,UAAM,OAAO,GAAG,QAAQ,CAAC,UAAkB;AAAE,cAAQ,OAAO,IAAI;AAAA,IAAG,CAAC;AACpE,UAAM,OAAO,GAAG,QAAQ,CAAC,UAAkB;AAAE,cAAQ,OAAO,KAAK;AAAA,IAAG,CAAC;AACrE,UAAM,OAAO,GAAG,SAAS,MAAM;AAAE,YAAM,SAAS;AAAA,IAAG,CAAC;AACpD,UAAM,OAAO,GAAG,SAAS,MAAM;AAAE,YAAM,SAAS;AAAA,IAAG,CAAC;AACpD,UAAM,GAAG,SAAS,MAAM;AAAE,YAAM,SAAS;AAAA,IAAG,CAAC;AAC7C,UAAM,GAAG,SAAS,UAAQ;AACxB,YAAM,SAAS,OAAO,OAAO,MAAM,EAAE,SAAS,MAAM;AACpD,aAAO,SAAS,IAAI,EAAE,IAAI,MAAM,QAAQ,OAAO,IAAI,EAAE,IAAI,OAAO,QAAQ,QAAQ,QAAQ,UAAU,CAAC;AAAA,IACrG,CAAC;AACD,UAAM,MAAM,GAAG,SAAS,MAAM;AAAA,IAAkD,CAAC;AACjF,UAAM,MAAM,IAAI,GAAG,KAAK,UAAU,EAAE,IAAI,UAAU,MAAM,eAAe,CAAC,CAAC;AAAA,CAAI;AAAA,EAC/E,CAAC;AACH;AAGA,eAAe,SACb,YACA,cACA,KACA,SACwB;AACxB,QAAM,aAAa,MAAM,QAAQI,MAAK,OAAO,GAAG,sBAAsB,CAAC;AACvE,QAAM,MAAM,MAAM,SAAS,UAAU;AACrC,MAAI;AACF,WAAO,MAAM,gBAAgB,YAAY,cAAc;AAAA,MACrD,GAAG;AAAA,MACH,MAAM;AAAA,MACN,qBAAqB;AAAA,MACrB,oBAAoB;AAAA,MACpB,YAAY;AAAA,IACd,GAAG,SAAS,GAAG;AAAA,EACjB,UAAE;AACA,UAAMF,IAAG,YAAY,EAAE,OAAO,MAAM,WAAW,KAAK,CAAC;AAAA,EACvD;AACF;AAEA,SAAS,aAAa,SAAwB;AAC5C,SAAO;AAAA,IAAK;AAAA,IAAiB;AAAA,IAC3B;AAAA,EAAgG;AACpG;AAGA,eAAsB,WACpB,YACA,cACA,KACA,UAA0B,CAAC,GACX;AAChB,MAAI;AACJ,MAAI;AACF,aAAS,MAAM,SAAS,YAAY,cAAc,KAAK,OAAO;AAAA,EAChE,QAAQ;AACN,WAAO,aAAa,+EAA+E;AAAA,EACrG;AACA,MAAI,CAAC,OAAO,IAAI;AACd,QAAI,OAAO,WAAW,UAAW,QAAO,aAAa,gCAAgC;AACrF,QAAI,OAAO,WAAW,WAAY,QAAO,aAAa,gDAAgD;AACtG,WAAO,aAAa,6BAA6B;AAAA,EACnD;AACA,QAAM,aAAwC,CAAC;AAC/C,aAAW,QAAQ,OAAO,OAAO,MAAM,OAAO,EAAE,OAAO,OAAO,GAAG;AAC/D,QAAI;AACJ,QAAI;AAAE,eAAS,KAAK,MAAM,IAAI;AAAA,IAAG,QAAQ;AAAE,aAAO,aAAa,+CAA+C;AAAA,IAAG;AACjH,UAAM,QAAQI,UAAS,MAAM;AAC7B,QAAI,CAAC,MAAO,QAAO,aAAa,+CAA+C;AAC/E,QAAI,MAAM,SAAS,cAAc,MAAM,OAAO,SAAU,YAAW,KAAK,KAAK;AAAA,EAC/E;AACA,MAAI,WAAW,WAAW,EAAG,QAAO,aAAa,0EAA0E;AAC3H,QAAM,WAAW,WAAW,CAAC;AAC7B,MAAI,UAAU,YAAY,kBAAkB,SAAS,YAAY,MAAM;AACrE,WAAO,aAAa,gDAAgD;AAAA,EACtE;AACA,QAAM,OAAOA,UAAS,SAAS,IAAI;AACnC,QAAM,WAAW,MAAM;AACvB,MAAI,CAAC,MAAM,QAAQ,QAAQ,EAAG,QAAO,aAAa,yCAAyC;AAC3F,QAAM,UAAU,SAAS,IAAIA,SAAQ,EAAE,OAAO,CAACC,aAAgDA,UAAS,SAAS,KAAK;AACtH,MAAI,QAAQ,WAAW,EAAG,QAAO,aAAa,6CAA6C;AAC3F,QAAM,UAAU,QAAQ,CAAC;AACzB,MAAI,SAAS,WAAW,YAAa,QAAO,aAAa,wCAAwC;AACjG,QAAM,aAAaD,UAAS,QAAQ,UAAU;AAC9C,MAAI,OAAO,YAAY,SAAS,SAAU,QAAO,aAAa,4CAA4C;AAC1G,MAAI;AACF,UAAM,aAAa,MAAM,SAAS,WAAW,IAAI;AACjD,QAAI,eAAe,aAAc,QAAO,aAAa,iDAAiD;AAAA,EACxG,QAAQ;AACN,WAAO,aAAa,kDAAkD;AAAA,EACxE;AACA,SAAO,KAAK,iBAAiB,wBAAwB,YAAY,GAAG;AACtE;AAEA,eAAe,eAAe,MAA2C;AACvE,MAAI;AACF,WAAO,MAAML,UAAS,MAAM,MAAM;AAAA,EACpC,SAAS,OAAO;AACd,QAAK,MAAgC,SAAS,SAAU,QAAO;AAC/D,UAAM;AAAA,EACR;AACF;AAEA,eAAsB,uBAAuB,QAAgB,MAAY,SAAS,MAAqC;AACrH,QAAM,OAAO,SAAS,QAAQ,MAAM,IAAI;AACxC,QAAM,OAAOG,MAAK,MAAM,WAAW;AACnC,QAAM,SAAS,eAAe,MAAM,MAAM;AAC1C,QAAM,QAAQ,MAAM,sBAAsB,IAAI;AAC9C,QAAM,KAAK,WAAW,IAAI;AAC1B,MAAI,MAAM,SAAS,WAAW;AAC5B,WAAO;AAAA,MACL;AAAA,MACA,QAAQ,CAAC,yBAAyB;AAAA,QAChC;AAAA,QAAI,OAAO;AAAA,QAAM;AAAA,QAAM;AAAA,QAAM;AAAA,QAC7B,OAAO,GAAG,MAAM;AAAA,MAClB,CAAC,CAAC;AAAA,IACJ;AAAA,EACF;AACA,QAAM,aAAa,aAAa,OAAO,UAAUI,SAAQ;AACzD,MAAI,WAAW,SAAS,EAAG,QAAO,EAAE,MAAM,QAAQ,CAAC,kBAAkB,IAAI,MAAM,MAAM,UAAU,CAAC,EAAE;AAClG,SAAO,EAAE,MAAM,QAAQ,CAAC;AAAA,IACtB,IAAI,GAAG,EAAE;AAAA,IAAmB,QAAQ;AAAA,IACpC,SAAS,MAAM,IAAI;AAAA,IACnB,KAAK,wEAAwE,MAAM;AAAA,EACrF,CAAC,EAAE;AACL;AAnSA,IAsBM,cACA,UACA,kBACA,oBACAC,SAEAC,aACA,UAEA,UAEAF,WAoQO;AArSb;AAAA;AAAA;AAIA;AAIA;AAEA;AAEA;AACA;AAEA;AACA;AACA;AACA;AACA;AAGA,IAAM,eAAe;AACrB,IAAM,WAAW;AACjB,IAAM,mBAAmB;AACzB,IAAM,qBAAqB,OAAO;AAClC,IAAMC,UAAS,CAAC,eAAe,aAAa,UAAU,WAAW,UAAU,oBAAoB,UAAU;AAEzG,IAAMC,cAAa,CAAC,SAAS;AAC7B,IAAM,WAAW;AAEjB,IAAM,WAAW,CAAC,cAAc,SAAS;AAEzC,IAAMF,YAAW;AAAA,MACf;AAAA,MAAwB;AAAA,MAAyB;AAAA,MACjD;AAAA,MAAkB;AAAA,MAAwB;AAAA,MAAkB;AAAA,MAC5D;AAAA,MAAmB;AAAA,MAAgB;AAAA,MAAoB;AAAA,MACvD;AAAA,MAAoB;AAAA,MAAsB;AAAA,MAAsB;AAAA,MAChE;AAAA,MAAe;AAAA,MAAmB;AAAA,MAAoB;AAAA,MACtD;AAAA,IACF;AA6PO,IAAM,UAAiB;AAAA,MAC5B,IAAI;AAAA,MACJ,OAAO;AAAA,MACP,SAAS;AAAA,MACT,aAAa,EAAE,oBAAoB,YAAY;AAAA,MAC/C,MAAM,CAAC;AAAA,MACP,MAAM,MAAM,QAAgB,OAA4C;AACtE,cAAM,OAAO,OAAO,UAAU;AAC9B,cAAM,SAAS,MAAM,MAAM,OAAO,IAAI,IAAI,OAAO,UAAU;AAC3D,YAAI,CAAC,QAAQ;AACX,iBAAO,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,KAAK,UAAU,4BAA4B,oDAAoD,CAAC,EAAE;AAAA,QACnI;AACA,YAAI;AACF,cAAI,EAAE,MAAM,KAAK,IAAI,GAAG,YAAY,EAAG,OAAM,IAAI,MAAM,iBAAiB;AAAA,QAC1E,QAAQ;AACN,iBAAO,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,KAAK,WAAW,6BAA6B,IAAI,KAAK,kDAAkD,CAAC,EAAE;AAAA,QAC5I;AACA,cAAM,WAAW,MAAM,iBAAiB,IAAI;AAC5C,YAAI,CAAC,SAAS,QAAS,QAAO,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,SAAS,KAAK,EAAE;AACtE,cAAM,aAAa,MAAM,WAAW,QAAQ,SAAS,QAAQ,OAAO;AAAA,UAClE,MAAM,OAAO;AAAA,UACb,MAAM,OAAO;AAAA,UACb,qBAAqB;AAAA,UACrB,YAAY;AAAA,QACd,CAAC;AACD,YAAI,WAAW,WAAW,OAAQ,QAAO,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,SAAS,OAAO,UAAU,EAAE;AAE7F,cAAM,eAAeJ,MAAK,MAAM,eAAe;AAC/C,YAAI;AACJ,YAAI;AAAE,qBAAW,iBAAiB,MAAM,eAAe,YAAY,CAAC;AAAA,QAAG,QAAQ;AAC7E,iBAAO;AAAA,YACL,SAAS,CAAC;AAAA,YAAG,QAAQ;AAAA,cAAC,SAAS;AAAA,cAAO;AAAA,cACpC;AAAA,gBAAK;AAAA,gBAAe,kBAAkB,YAAY;AAAA,gBAChD;AAAA,cAA+E;AAAA,YAAC;AAAA,UACtF;AAAA,QACF;AACA,cAAM,qBAAqBA,MAAK,MAAM,kBAAkB;AACxD,YAAI;AACJ,YAAI;AACF,2BAAiB,MAAM,eAAe,kBAAkB;AAAA,QAC1D,QAAQ;AACN,iBAAO;AAAA,YACL,SAAS,CAAC;AAAA,YAAG,QAAQ;AAAA,cAAC,SAAS;AAAA,cAAO;AAAA,cACpC;AAAA,gBAAK;AAAA,gBAAa,kBAAkB,kBAAkB;AAAA,gBACpD;AAAA,cAA+D;AAAA,YAAC;AAAA,UACtE;AAAA,QACF;AACA,cAAM,SAAS,MAAM,cAAc,MAAMK,OAAM;AAG/C,cAAM,UAAUL,MAAK,MAAM,QAAQ;AACnC,YAAI;AACJ,YAAI;AACF,oBAAU,gBAAgB,MAAM,eAAe,OAAO,GAAG,QAAQ;AAAA,QACnE,QAAQ;AACN,iBAAO;AAAA,YACL,SAAS,CAAC;AAAA,YAAG,QAAQ;AAAA,cAAC,SAAS;AAAA,cAAO;AAAA,cACpC;AAAA,gBAAK;AAAA,gBAAU,kBAAkB,OAAO;AAAA,gBACtC;AAAA,cAAkF;AAAA,YAAC;AAAA,UACzF;AAAA,QACF;AACA,cAAM,WAAW,cAAc,UAAU,SAAS,OAAO;AACzD,YAAI,SAAU,QAAO,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,SAAS,OAAO,YAAY,QAAQ,EAAE;AACnF,cAAM,UAAmB,CAAC;AAC1B,cAAM,cAAsC,CAAC;AAC7C,cAAM,OAAiD,CAAC;AACxD,mBAAW,QAAQ,OAAO;AACxB,gBAAM,SAAS,SAAS,QAAQ,MAAM,IAAI;AAC1C,gBAAM,aAAaA,MAAK,QAAQ,kBAAkB;AAClD,kBAAQ,KAAK,EAAE,MAAM,OAAO,MAAM,OAAO,CAAC;AAC1C,kBAAQ,KAAK,EAAE,MAAM,QAAQ,MAAMA,MAAK,QAAQ,eAAe,GAAG,SAAS,SAAS,CAAC;AACrF,kBAAQ,KAAK,EAAE,MAAM,QAAQ,MAAM,YAAY,SAAS,eAAe,gBAAgB,IAAI,EAAE,CAAC;AAC9F,kBAAQ,KAAK,GAAG,MAAM,oBAAoB,EAAE,MAAM,QAAQ,MAAM,OAAOK,SAAQ,QAAQ,YAAYC,YAAW,CAAC,CAAC;AAChH,sBAAY,KAAK,MAAM,uBAAuB,QAAQ,MAAM,MAAM,CAAC;AACnE,eAAK,IAAI,IAAI,CAAC,mBAAmB,eAAe,SAAS,QAAQ,OAAO,gBAAgB,0BAA0B,UAAU;AAAA,QAC9H;AACA,eAAO;AAAA,UACL;AAAA,UACA;AAAA,UACA,QAAQ,CAAC,KAAK,WAAW,eAAe,MAAM,UAAU,IAAI,GAAG,GAAG,SAAS,OAAO,UAAU;AAAA,UAC5F;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA;AAAA;;;ACxXA,SAAS,KAAK,aAAa;AAC3B,SAAS,KAAAC,UAAS;AAUX,SAAS,oBAAoB,QAAoC;AACtE,SAAO,OAAO,SAAS,IAAI,KAAK,OAAO,SAAS,QAAQ,IAAI,qBAAqB;AACnF;AAkBO,SAAS,aAAa,QAAoC;AAC/D,QAAM,QAAQ,0CAA0C,KAAK,OAAO,KAAK,CAAC;AAC1E,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,CAAC,EAAE,OAAO,IAAI,OAAO,EAAE,IAAI;AACjC,QAAM,QAAQ,CAAC,aAAa,aAAa,WAAW,SAAS,MAAM,EAAE,SAAS,IAAI,IAAI,cAAc;AACpG,SAAO,QAAQ,KAAK,IAAI,IAAI;AAC9B;AAGO,SAAS,aAAa,KAAc,iBAAiB,iBAA+B;AACzF,QAAM,SAAS,aAAa,UAAU,GAAG;AACzC,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,EAAE,QAAQ,CAAC,KAAK,gBAAgB,2CAA2C,qDAAqD,CAAC,EAAE;AAAA,EAC5I;AACA,QAAM,SAAS,OAAO;AACtB,MAAI,OAAO,gBAAgB,WAAW;AACpC,WAAO,EAAE,QAAQ,CAAC,KAAK,gBAAgB,mBAAmB,OAAO,WAAW,KAAK,mCAAmC,CAAC,EAAE;AAAA,EACzH;AACA,QAAM,MAAM,MAAM,OAAO,UAAU;AACnC,QAAM,SAAS,OAAO,kBAAkB,OAAO,OAAO,MAAM,OAAO,aAAa;AAChF,MAAI,CAAC,OAAO,CAAC,QAAQ;AACnB,WAAO,EAAE,QAAQ,CAAC,KAAK,iBAAiB,0CAA0C,0DAA0D,CAAC,EAAE;AAAA,EACjJ;AACA,MAAI,QAAQ,QAAQ;AAClB,WAAO,EAAE,QAAQ,CAAC,KAAK,iBAAiB,gBAAgB,GAAG,8BAA8B,MAAM,KAAK,+CAA+C,CAAC,EAAE;AAAA,EACxJ;AACA,MAAI,CAAC,IAAI,QAAQ,cAAc,GAAG;AAChC,WAAO,EAAE,QAAQ,CAAC,KAAK,iBAAiB,SAAS,MAAM,+BAA+B,cAAc,KAAK,sCAAsC,CAAC,EAAE;AAAA,EACpJ;AACA,QAAM,MAAM,aAAa,OAAO,MAAM;AACtC,MAAI,CAAC,KAAK;AACR,WAAO,EAAE,QAAQ,CAAC,KAAK,gBAAgB,wBAAwB,OAAO,MAAM,wBAAwB,qDAAqD,CAAC,EAAE;AAAA,EAC9J;AACA,SAAO,EAAE,QAAQ,CAAC,KAAK,iBAAiB,SAAS,MAAM,kBAAkB,GAAG,0BAA0B,cAAc,IAAI,CAAC,GAAG,QAAQ,EAAE,KAAK,SAAS,OAAO,EAAE;AAC/J;AAEA,eAAsB,YAAY,QAAgB,MAAyB,QAAQ,KAAK,iBAAiB,iBAAwC;AAC/I,QAAM,SAAS,MAAM,MAAM,OAAO,IAAI,OAAO,OAAO,UAAU;AAC9D,MAAI,CAAC,QAAQ;AACX,WAAO,EAAE,QAAQ,CAAC,KAAK,aAAa,+BAA+B,oDAAoD,CAAC,EAAE;AAAA,EAC5H;AACA,QAAM,SAAS,MAAM,MAAM,QAAQ,CAAC,UAAU,UAAU,QAAQ,GAAG;AAAA,IACjE,MAAM,OAAO;AAAA,IAAM,YAAY,OAAO;AAAA,IAAW,MAAM,OAAO;AAAA,IAC9D,GAAI,IAAI,mBAAmB,SAAY,CAAC,IAAI,EAAE,gBAAgB,IAAI,eAAe;AAAA,EACnF,CAAC;AACD,MAAI,CAAC,OAAO,IAAI;AACd,WAAO,EAAE,QAAQ,CAAC,KAAK,gBAAgB,uCAAuC,iCAAiC,CAAC,EAAE;AAAA,EACpH;AACA,MAAI;AAAE,WAAO,aAAa,KAAK,MAAM,OAAO,MAAM,GAAG,cAAc;AAAA,EAAG,QAChE;AAAE,WAAO,aAAa,QAAW,cAAc;AAAA,EAAG;AAC1D;AA4CA,eAAsB,YACpB,QACAC,MACA,UAA4E,CAAC,GACjE;AACZ,QAAM,QAAQ,EAAE,QAAQ;AAAA,EAAe,GAAG,OAAO;AAAA,EAAe,GAAG,OAAO;AAAA,EAAe,GAAG,QAAQ;AAAA,EAAe,EAAE;AAErH,QAAM,eAAkC;AAAA,IACtC,KAAK,GAAG,OAAO,GAAG;AAAA,IAClB,GAAI,QAAQ,aAAa,SAAY,CAAC,IAAI,EAAE,UAAU,QAAQ,SAAS;AAAA,IACvE,YAAY;AAAA,IACZ,kBAAkB;AAAA,IAClB,WAAW,EAAE,SAAS,MAAM;AAAA,IAC5B,QAAQ;AAAA,EACV;AACA,MAAI;AACJ,MAAI,QAAQ,YAAY,QAAW;AACjC,aAAS,QAAQ,QAAQ,YAAY;AAAA,EACvC,OAAO;AACL,UAAM,CAAC,EAAE,eAAe,GAAG,EAAE,aAAa,CAAC,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC/D,OAAO,kBAAkB;AAAA,MAAG,OAAO,yCAAyC;AAAA,IAC9E,CAAC;AACD,UAAM,MAAM,IAAI,aAAa,EAAE,GAAG,cAAc,UAAU,cAAc,OAAO,QAAQ,GAAG,CAAC,IAAI,YAAY,MAAM,CAAC;AAClH,aAAS;AAAA,MACP,GAAG,eAAe,GAAG;AAAA,MACrB,SAAS,MAAM,IAAI,QAAQ;AAAA,MAAG,OAAO,MAAM,IAAI,MAAM;AAAA,MACrD,iBAAiB,MAAM;AAAE,YAAI,gBAAgB;AAAA,MAAG;AAAA,MAAG,oBAAoB,MAAM,IAAI,mBAAmB;AAAA,MACpG,aAAa,MAAM,IAAI,YAAY;AAAA,MACnC,wBAAwB,CAAC,MAAM,OAAO,IAAI,uBAAuB,MAAM,EAAE;AAAA,MACzE,cAAc,QAAM,IAAI,aAAa,EAAE;AAAA,MAAG,cAAc,QAAM,IAAI,aAAa,EAAE;AAAA,MACjF,cAAc,QAAM,IAAI,aAAa,EAAE;AAAA,IACzC;AAAA,EACF;AACA,MAAI;AACF,UAAM,OAAO,QAAQ;AACrB,WAAO,MAAMA,KAAI;AAAA,MACf,MAAM,gBAAgB;AACpB,cAAM,WAAW,aAAa,MAAM,MAAM,OAAO,OAAO,IAAI,CAAC;AAC7D,eAAO,SAAS,OAAO,aAAa,CAAC;AAAA,MACvC;AAAA,MACA,MAAM,eAAe,WAAW;AAC9B,cAAM,OAAO,OAAO,MAAM,EAAE,UAAU,CAA6D;AAAA,MACrG;AAAA,MACA,MAAM,gBAAgB,KAAK;AACzB,cAAM,OAAO,OAAO,MAAM,EAAE,iBAAiB,CAAC,GAAG,GAAG,EAAE,CAAC;AAAA,MACzD;AAAA,MACA,MAAM,eAAe;AACnB,cAAM,WAAW,aAAa,MAAM,MAAM,OAAO,OAAO,IAAI,CAAC;AAC7D,eAAO,SAAS,OAAO,iBAAiB,CAAC;AAAA,MAC3C;AAAA,MACA,MAAM,cAAc,UAAU;AAC5B,cAAM,OAAO,OAAO,MAAM,EAAE,eAAe,CAAC,GAAG,QAAQ,EAAE,CAA6D;AAAA,MACxH;AAAA,MACA,MAAM,iBAAiB;AACrB,cAAM,WAAW,aAAa,MAAM,MAAM,OAAO,OAAO,IAAI,CAAC;AAC7D,eAAO,SAAS,OAAO,mBAAmB;AAAA,MAC5C;AAAA,MACA,MAAM,cAAc;AAClB,eAAO,MAAM,OAAO,YAAY;AAAA,MAClC;AAAA,MACA,MAAM,cAAc,MAAM,IAAI;AAC5B,eAAO,MAAM,OAAO,uBAAuB,MAAM,EAAE;AAAA,MACrD;AAAA,MACA,MAAM,aAAa,IAAI;AACrB,eAAO,MAAM,OAAO,aAAa,EAAE;AAAA,MACrC;AAAA,MACA,MAAM,aAAa,IAAI;AACrB,eAAO,MAAM,OAAO,aAAa,EAAE;AAAA,MACrC;AAAA,MACA,MAAM,aAAa,IAAI;AACrB,cAAM,OAAO,aAAa,EAAE;AAAA,MAC9B;AAAA,MACA,MAAM,QAAQ,KAAK;AACjB,cAAM,OAAO,UAAU,QAAQ,EAAE,WAAW,CAAC,GAAG,GAAG,EAAE,CAAC;AAAA,MACxD;AAAA,IACF,CAAC;AAAA,EACH,UAAE;AACA,UAAM,OAAO,MAAM;AAAA,EACrB;AACF;AAOA,SAAS,WAAW,MAAe,SAAoD;AACrF,MAAI,SAAS,QAAQ,OAAO,SAAS,YAAY,MAAM,QAAQ,IAAI,EAAG,QAAO;AAC7E,QAAM,UAAU,OAAO,QAAQ,IAA+B;AAC9D,SAAO,QAAQ,WAAW,OAAO,KAAK,OAAO,EAAE,UAC7C,QAAQ,MAAM,CAAC,CAAC,KAAK,KAAK,MAAM,OAAO,OAAO,SAAS,GAAG,KAAK,UAAU,QAAQ,GAAG,CAAC;AACzF;AAGO,SAAS,gBAAgB,SAAmB,MAAwB;AACzE,MAAI,SAAS,QAAQ,OAAO,SAAS,SAAU,QAAO;AACtD,QAAM,QAAQ;AACd,QAAM,QAAQ,MAAM;AACpB,QAAM,OAAO,CAAC,MAAe,UAA4B,KAAK,UAAU,QAAQ,IAAI,MAAM,KAAK,UAAU,SAAS,IAAI;AACtH,SAAO,MAAM,YAAY,QAAQ,WAC/B,KAAK,MAAM,SAAS,QAAQ,OAAO,KACnC,WAAW,MAAM,KAAK,QAAQ,GAAG,KACjC,UAAU,QAAQ,OAAO,UAAU,YAClC,MAAgC,YAAY,QAAQ,WAAW;AAAA,EAEhE,KAAK,MAAM,QAAQ,QAAQ,MAAM,KACjC,KAAK,MAAM,iBAAiB,QAAQ,eAAe;AACvD;AAGO,SAAS,eAAe,SAAkB,MAAwB;AACvE,MAAI,SAAS,QAAQ,OAAO,SAAS,SAAU,QAAO;AACtD,QAAM,QAAQ;AACd,SAAO,MAAM,SAAS,QAAQ,QAAQ,MAAM,SAAS,QAAQ,QAAQ,MAAM,UAAU,QAAQ,SAC3F,MAAM,aAAa,QAAQ,YAAY,MAAM,WAAW,QAAQ,UAAU,MAAM,UAAU,QAAQ;AACtG;AAOO,SAAS,cACd,MACA,SACA,MACe;AACf,QAAM,UAAU,IAAI,IAAI,IAAI;AAC5B,QAAM,SAAS,IAAI,IAAI,QAAQ,IAAI,aAAW,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC;AACpE,QAAM,OAAO,oBAAI,IAAY;AAC7B,QAAM,OAAO,KACV,OAAO,WAAS,CAAC,QAAQ,IAAI,OAAO,MAAM,EAAE,CAAC,CAAC,EAC9C,IAAI,WAAS;AACZ,UAAM,UAAU,OAAO,IAAI,OAAO,MAAM,EAAE,CAAC;AAC3C,QAAI,CAAC,QAAS,QAAO;AACrB,SAAK,IAAI,QAAQ,EAAE;AAGnB,UAAM,UAAuB;AAAA,MAC3B,GAAG;AAAA,MAAO,MAAM,QAAQ;AAAA,MAAM,MAAM,QAAQ;AAAA,MAAM,OAAO,QAAQ;AAAA,MACjE,UAAU,QAAQ;AAAA,MAAU,OAAO,QAAQ;AAAA,IAC7C;AACA,QAAI,QAAQ,WAAW,OAAW,QAAO,QAAQ;AAAA,QAC5C,SAAQ,SAAS,QAAQ;AAC9B,WAAO;AAAA,EACT,CAAC;AACH,SAAO,CAAC,GAAG,MAAM,GAAG,QAAQ,OAAO,aAAW,CAAC,KAAK,IAAI,QAAQ,EAAE,CAAC,EAAE,IAAI,cAAY,EAAE,GAAG,QAAQ,EAAE,CAAC;AACvG;AAjRA,IASa,iBACA,oBAMP,cAoEA;AApFN;AAAA;AAAA;AAIA;AAGA;AAEO,IAAM,kBAAkB;AACxB,IAAM,qBAAqB;AAMlC,IAAM,eAAeD,GAAE,OAAO;AAAA,MAC5B,QAAQA,GAAE,OAAO,EAAE,IAAI,CAAC;AAAA,MACxB,aAAaA,GAAE,KAAK,CAAC,WAAW,WAAW,aAAa,cAAc,CAAC;AAAA,MACvE,YAAYA,GAAE,OAAO;AAAA,MACrB,eAAeA,GAAE,OAAO,EAAE,SAAS;AAAA,IACrC,CAAC;AA+DD,IAAM,eAAeA,GAAE,OAAO;AAAA,MAC5B,QAAQA,GAAE,OAAO;AAAA,QACf,WAAWA,GAAE,OAAOA,GAAE,OAAO,GAAGA,GAAE,QAAQ,CAAC,EAAE,SAAS;AAAA;AAAA,QAEtD,eAAeA,GAAE,MAAMA,GAAE,OAAOA,GAAE,OAAO,GAAGA,GAAE,QAAQ,CAAC,CAAC,EAAE,SAAS;AAAA,QACnE,gBAAgBA,GAAE,QAAQ,EAAE,SAAS;AAAA,MACvC,CAAC;AAAA,IACH,CAAC;AAAA;AAAA;;;AC3FD,SAAS,gBAAAE,qBAAoB;AAC7B,SAAS,QAAAC,cAAY;AAiBrB,SAAS,UAAU,MAAsB;AACvC,SAAOD,cAAa,IAAI,IAAI,mBAAmB,IAAI,IAAI,YAAY,GAAG,GAAG,MAAM;AACjF;AAEO,SAAS,uBAAuB,QAAwB;AAC7D,SAAOC,OAAK,OAAO,UAAU,QAAQ;AACvC;AAEO,SAAS,4BAA4B,OAAgC;AAC1E,QAAM,YAAY,OAAO,YAAY,MAAM,IAAI,UAAQ,CAAC,WAAW,UAAU,IAAI,GAAG,mBAAmB,IAAI,CAAC,CAAC,CAAC;AAC9G,SAAO;AAAA,IACL;AAAA,IACA,6BAA6B,KAAK,UAAU,eAAe,CAAC,CAAC;AAAA,IAC7D,6DAA6D,KAAK,UAAU,WAAW,MAAM,CAAC,CAAC;AAAA,IAC/F;AAAA,EACF,EAAE,KAAK,IAAI;AACb;AAEO,SAAS,qBAAqB,QAAgB,OAAiC;AACpF,QAAM,OAAO,uBAAuB,MAAM;AAC1C,SAAO;AAAA,IACL,EAAE,MAAM,OAAO,MAAM,KAAK;AAAA,IAC1B,EAAE,MAAM,OAAO,MAAMA,OAAK,MAAM,QAAQ,EAAE;AAAA,IAC1C,GAAG,cAAc,IAAI,WAAS,EAAE,MAAM,QAAiB,MAAMA,OAAK,MAAM,IAAI,GAAG,SAAS,UAAU,IAAI,EAAE,EAAE;AAAA,IAC1G,EAAE,MAAM,QAAQ,MAAMA,OAAK,MAAM,UAAU,aAAa,GAAG,SAAS,4BAA4B,KAAK,EAAE;AAAA,EACzG;AACF;AA5CA,IAOa,0BAGP;AAVN;AAAA;AAAA;AAIA;AACA;AAEO,IAAM,2BAA2B;AAGxC,IAAM,gBAAgB;AAAA,MACpB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA;AAAA;;;AChBA,SAAS,QAAAC,QAAM,OAAAC,YAAW;AAC1B,SAAS,SAAAC,QAAO,MAAAC,WAAU;AAyB1B,SAAS,eAAe,SAAqE;AAC3F,QAAM,YAAY,QAAQ,OAAO,QAAQ,KAAK;AAC9C,SAAO,EAAE,GAAI,aAAa,SAAY,CAAC,IAAI,EAAE,SAAS,GAAI,GAAI,QAAQ,UAAU,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC,EAAG;AACrH;AAGA,SAAS,cACP,QACA,OACA,MACA,OAC0B;AAC1B,SAAO,OAAO,YAAY,MAAM,IAAI,UAAQ,CAAC,WAAW,MAAM,IAAI,IAAI,GAAG;AAAA,IACvE,SAAS,MAAM;AAAA,IACf,OAAO,cAAc,MAAM,IAAI,IAAI;AAAA,IACnC,SAAS,CAAC,KAAK,QAAQ,GAAI,KAAK,OAAO,IAAI,KAAK,CAAC,CAAE;AAAA,IACnD,KAAK,EAAE,GAAG,MAAM,aAAa,GAAG,KAAK,cAAc,IAAI,GAAG,CAAC,MAAM,OAAO,GAAG,SAAS,QAAQ,MAAM,IAAI,IAAI,EAAE;AAAA,IAC5G,YAAY,EAAE,SAAS,iBAAiB,IAAI,EAAE;AAAA,IAC9C,GAAG,MAAM;AAAA,EACX,CAAC,CAAC,CAAC;AACL;AAGA,SAAS,aAAa,OAAc,OAAmC;AACrE,SAAO,MAAM,IAAI,WAAS;AAAA,IACxB,IAAI,UAAU,MAAM,IAAI,IAAI;AAAA,IAC5B,MAAM,cAAc,MAAM,IAAI,IAAI;AAAA,IAClC,MAAM,UAAU,IAAI;AAAA,IACpB,OAAO,WAAW,IAAI;AAAA,IACtB,UAAU,WAAW,MAAM,IAAI,IAAI;AAAA,IACnC,GAAI,MAAM,kBAAkB,SAAY,CAAC,IAAI,EAAE,QAAQ,MAAM,cAAc;AAAA,IAC3E,kBAAkB,cAAc,IAAI;AAAA,IACpC,OAAO,WAAW,IAAI;AAAA,EACxB,EAAE;AACJ;AASA,eAAe,aAAa,QAAgB,QAA4B,OAA0C;AAGhH,QAAM,UAAmB;AAAA,IACvB,EAAE,MAAM,OAAO,MAAM,OAAO,SAAS;AAAA,IACrC,EAAE,MAAM,OAAO,MAAM,WAAW,MAAM,EAAE;AAAA,IACxC,EAAE,MAAM,QAAQ,MAAMH,OAAK,WAAW,MAAM,GAAG,uBAAuB,GAAG,SAAS,mBAAmB,WAAW,EAAE;AAAA,EACpH;AACA,QAAM,YAAsC,CAAC;AAC7C,QAAM,WAAsB,CAAC;AAC7B,QAAM,SAAkB,CAAC;AACzB,QAAM,WAA6C,CAAC;AACpD,aAAW,MAAM,QAAQ;AACvB,UAAM,QAAQ,OAAO,EAAE;AACvB,UAAM,OAAO,MAAM,MAAM,MAAM,QAAQ,KAAK;AAC5C,YAAQ,KAAK,GAAG,KAAK,OAAO;AAC5B,WAAO,KAAK,GAAG,KAAK,MAAM;AAC1B,UAAM,cAAc,KAAK,eAAe,CAAC;AACzC,WAAO,KAAK,GAAG,YAAY,QAAQ,gBAAc,WAAW,MAAM,CAAC;AACnE,UAAM,kBAAkB,IAAI,IAAI,YAAY,IAAI,gBAAc,WAAW,IAAI,CAAC;AAC9E,UAAM,aAAa,KAAK,QAAQ,OAAO,WAAS,gBAAgB,IAAI,MAAM,IAAI,CAAC;AAC/E,QAAI,WAAW,SAAS,GAAG;AACzB,aAAO,KAAK;AAAA,QAAK,GAAG,EAAE;AAAA,QACpB,GAAG,MAAM,KAAK,iEAAiE,WAAW,IAAI,WAAS,MAAM,IAAI,EAAE,KAAK,IAAI,CAAC;AAAA,QAC7H;AAAA,MAAmD,CAAC;AAAA,IACxD;AACA,QAAI,KAAK,WAAW,OAAW;AAC/B,aAAS,EAAE,IAAI,KAAK;AACpB,WAAO,OAAO,WAAW,cAAc,QAAQ,OAAO;AAAA,MACpD,QAAQ,KAAK;AAAA,MACb,GAAI,KAAK,OAAO,EAAE,MAAM,KAAK,KAAK,IAAI,CAAC;AAAA,MACvC,GAAI,KAAK,cAAc,EAAE,aAAa,KAAK,YAAY,IAAI,CAAC;AAAA,IAC9D,GAAG,KAAK,CAAC;AACT,aAAS,KAAK,GAAG,aAAa,OAAO,KAAK,CAAC;AAAA,EAC7C;AACA,MAAI,OAAO,MAAM,QAAM,SAAS,EAAE,MAAM,MAAS,GAAG;AAClD,YAAQ,KAAK;AAAA,MACX,MAAM;AAAA,MACN,MAAMA,OAAK,OAAO,UAAU,oBAAoB;AAAA,MAChD,SAAS,0BAA0B,OAAO,UAAU,UAAU,QAAQ,KAAK;AAAA,IAC7E,CAAC;AACD,WAAO,KAAK;AAAA,MAAK;AAAA,MACf,4EAA4EA,OAAK,OAAO,UAAU,oBAAoB,CAAC;AAAA,MACvH;AAAA,IAAqF,CAAC;AAAA,EAC1F;AACA,QAAM,aAAa,OAAO,SAAS,QAAQ,IAAI,uBAAuB,MAAM,IAAI;AAChF,MAAI,eAAe,OAAW,SAAQ,KAAK,GAAG,qBAAqB,QAAQ,KAAK,CAAC;AACjF,UAAQ,KAAK,EAAE,MAAM,QAAQ,MAAMA,OAAK,OAAO,UAAU,MAAM,GAAG,SAAS,aAAa,gBAAS,SAAS,QAAQ,OAAO,eAAe,CAAC,EAAE,CAAC;AAC5I,SAAO,EAAE,SAAS,WAAW,UAAU,QAAQ,GAAI,eAAe,SAAY,CAAC,IAAI,EAAE,WAAW,EAAG;AACrG;AAQA,SAAS,mBAAmB,UAAuC;AACjE,QAAM,SAAS,eAAe;AAC9B,MAAI,CAAC,SAAU,QAAO,CAAC;AACvB,MAAI,SAAS,aAAa,QAAQ;AAChC,WAAO,CAAC,KAAK,iBAAiB,4BAA4B,MAAM,wBAAwB,CAAC;AAAA,EAC3F;AACA,QAAM,OAAO,SAAS,aAAa,SAC/B,2EAA2E,SAAS,OAAO,MAC3F,6BAA6B,SAAS,QAAQ;AAClD,SAAO,CAAC;AAAA,IAAK;AAAA,IACX,aAAa,IAAI,0BAA0B,MAAM;AAAA,IACjD;AAAA,EAAiE,CAAC;AACtE;AAOA,SAAS,oBAAoB,MAA8B,SAAsC;AAC/F,QAAM,QAAQ,IAAI,IAAI,QAAQ,IAAI,aAAW,QAAQ,EAAE,CAAC;AACxD,QAAM,WAAW,KACd,OAAO,WAAS,MAAM,IAAI,OAAO,MAAM,EAAE,CAAC,CAAC,EAC3C,OAAO,WAAS,oBAAoB,KAAK,YAAU,WAAW,MAAM,gBAAgB,CAAC,EACrF,IAAI,WAAS,GAAG,OAAO,MAAM,EAAE,CAAC,KAAK,OAAO,MAAM,gBAAgB,CAAC,GAAG,EACtE,KAAK;AACR,MAAI,SAAS,WAAW,EAAG,QAAO,CAAC;AACnC,SAAO,CAAC;AAAA,IAAK;AAAA,IACX,GAAG,OAAO,SAAS,MAAM,CAAC,8GAA8G,SAAS,KAAK,IAAI,CAAC;AAAA,IAC3J,iGAAiG,cAAc,UAAU,oBAAoB,cAAc,IAAI;AAAA,EAAsB,CAAC;AAC1L;AAGA,SAAS,gBAAgB,SAAoC;AAC3D,QAAM,WAAW,QAAQ,OAAO,YAAU,OAAO,SAAS,GAAGC,IAAG,oBAAoB,CAAC;AACrF,MAAI,SAAS,WAAW,EAAG,QAAO;AAClC,QAAM,QAAQ,SAAS,WAAW,IAAI,mDAAmD,GAAG,OAAO,SAAS,MAAM,CAAC;AACnH,SAAO,IAAI,KAAK;AAClB;AAWA,eAAe,cAAc,MAAc,QAAmC;AAC5E,MAAI;AACF,UAAMG,QAAO,MAAMF,OAAM,IAAI;AAC7B,QAAIE,MAAK,YAAY,EAAG,QAAO;AAC/B,WAAO,KAAK;AAAA,MAAK;AAAA,MACf,wBAAwB,IAAI;AAAA,MAC5B;AAAA,IAAwG,CAAC;AAC3G,WAAO;AAAA,EACT,SAAS,OAAO;AACd,QAAK,MAAgC,SAAS,SAAU,QAAO;AAC/D,WAAO,KAAK;AAAA,MAAK;AAAA,MAAoB,oCAAoC,IAAI;AAAA,MAC3E;AAAA,IAAmF,CAAC;AACtF,WAAO;AAAA,EACT;AACF;AAGA,eAAe,eAAe,QAAgB,QAA4B,OAA0C;AAClH,QAAM,SAAkB,CAAC;AACzB,MAAI,CAAC,MAAM,cAAc,OAAO,UAAU,MAAM,EAAG,QAAO;AAC1D,QAAM,cAAc,WAAW,MAAM,GAAG,MAAM;AAC9C,QAAM,YAAYJ,OAAK,OAAO,UAAU,OAAO;AAC/C,MAAI,CAAC,MAAM,cAAc,WAAW,MAAM,EAAG,QAAO;AACpD,aAAW,SAAS,QAAQ;AAC1B,UAAM,YAAYA,OAAK,WAAW,KAAK;AACvC,QAAI,CAAC,MAAM,cAAc,WAAW,MAAM,EAAG;AAC7C,eAAW,QAAQ,MAAO,OAAM,cAAc,SAAS,QAAQ,OAAO,IAAI,GAAG,MAAM;AAAA,EACrF;AACA,SAAO;AACT;AAGA,eAAe,UAAU,QAAgB,UAA8B,QAA4B,OAAwC;AACzI,MAAI,CAAC,SAAU,QAAO;AACtB,QAAM,OAAO,IAAI,IAAI,OAAO,QAAQ,WAAS,MAAM,IAAI,UAAQ,WAAW,OAAO,IAAI,CAAC,CAAC,CAAC;AACxF,QAAM,cAAwB,CAAC;AAC/B,QAAM,aAAuB,CAAC;AAC9B,QAAM,sBAAgC,CAAC;AACvC,aAAW,SAAS,SAAS,QAAQ;AACnC,eAAW,QAAQ,SAAS,OAAO;AACjC,UAAI,KAAK,IAAI,WAAW,OAAO,IAAI,CAAC,EAAG;AACvC,kBAAY,KAAK,WAAW,OAAO,IAAI,CAAC;AACxC,iBAAW,KAAK,UAAU,OAAO,IAAI,CAAC;AACtC,YAAM,OAAO,SAAS,QAAQ,OAAO,IAAI;AACzC,UAAI,MAAM,OAAO,IAAI,EAAG,qBAAoB,KAAK,IAAI;AAAA,IACvD;AAAA,EACF;AACA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,cAAc,SAAS,OAAO,SAAS,QAAQ,KAAK,CAAC,OAAO,SAAS,QAAQ;AAAA,IAC7E;AAAA,EACF;AACF;AAUA,SAAS,WAAW,SAAkB,OAAc,SAAgC,cAElF;AACA,QAAM,aAAa,QAAQ,KAAK,YAAU,OAAO,OAAO,wBAAwB;AAChF,QAAM,eAAe,QAAQ,eAAe,UAAa,MAAM;AAC/D,MAAI,CAAC,aAAc,QAAO,EAAE,QAAQ,CAAC,EAAE;AACvC,MAAI,eAAe,UAAa,WAAW,SAAS,cAAc;AAChE,WAAO;AAAA,MACL;AAAA,MACA,QAAQ,CAAC;AAAA,QAAK;AAAA,QACZ,UAAU,wBAAwB,uBAAuB,WAAW,IAAI,6BAA6B,YAAY;AAAA,QACjH;AAAA,MAAqF,CAAC;AAAA,IAC1F;AAAA,EACF;AACA,MAAI,QAAQ,eAAe,QAAW;AACpC,UAAM,UAAU,YAAY,YAAY,QAAQ,WAAW,WAAW,aAAa,WAAW,UAAU;AACxG,WAAO;AAAA,MACL,GAAI,eAAe,SAAY,CAAC,IAAI,EAAE,WAAW;AAAA,MACjD,WAAW,EAAE,QAAQ,eAAe,SAAY,WAAW,UAAU,SAAS,UAAU,MAAM,UAAU,QAAQ,yBAAyB;AAAA,MACzI,QAAQ,CAAC;AAAA,IACX;AAAA,EACF;AACA,SAAO;AAAA,IACL,GAAI,eAAe,SAAY,CAAC,IAAI,EAAE,WAAW;AAAA,IACjD,WAAW,EAAE,QAAQ,eAAe,SAAY,SAAS,UAAU,MAAM,UAAU,QAAQ,yBAAyB;AAAA,IACpH,QAAQ,CAAC;AAAA,EACX;AACF;AAGA,eAAe,SAAS,SAAkB,SAAkB,OAAc,oBAA2C;AACnH,QAAM,iBAAiB,QAAQ,eAAe,UAAa,MAAM;AACjE,QAAM,CAAC,MAAM,cAAc,OAAO,IAAI,MAAM,QAAQ,IAAI;AAAA,IACtD,QAAQ,cAAc;AAAA,IAAG,QAAQ,aAAa;AAAA,IAAG,iBAAiB,QAAQ,YAAY,IAAI,QAAQ,QAAQ,CAAC,CAAC;AAAA,EAC9G,CAAC;AACD,QAAM,OAAO,IAAI,IAAI,aAAa,IAAI,WAAS,CAAC,OAAO,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC;AACzE,QAAM,SAAS,WAAW,SAAS,OAAO,SAAS,kBAAkB;AACrE,SAAO;AAAA,IACL;AAAA,IACA,GAAI,OAAO,eAAe,SAAY,CAAC,IAAI,EAAE,YAAY,OAAO,WAAW;AAAA,IAC3E,cAAc,OAAO;AAAA,IACrB,YAAY;AAAA,MACV,GAAG,MAAM,YAAY,QAAQ,OAAO;AAAA,MACpC,GAAG,OAAO,QAAQ,QAAQ,SAAS,EAAE,IAAI,CAAC,CAAC,IAAI,QAAQ,OAAO;AAAA,QAC5D,QAAQ,EAAE,MAAM,QAAQ,WAAW,gBAAgB,UAAU,KAAK,EAAE,CAAC,IAAI,SAAS;AAAA,QAClF,MAAM;AAAA,QACN,QAAQ;AAAA,MACV,EAAsB;AAAA,MACtB,GAAG,QAAQ,SAAS,IAAI,cAAY;AAAA,QAClC,QAAQ,CAAC,KAAK,IAAI,QAAQ,EAAE,IAAI,WAAW,eAAe,SAAS,KAAK,IAAI,QAAQ,EAAE,CAAC,IAAI,SAAS;AAAA,QACpG,MAAM;AAAA,QACN,QAAQ,QAAQ;AAAA,MAClB,EAAsB;AAAA,MACtB,GAAG,MAAM,YAAY,OAAO,QAAM,MAAM,IAAI,EAAE,IAAI,SAAO,EAAE,QAAQ,UAAU,MAAM,YAAY,QAAQ,GAAG,EAAsB;AAAA,MAChI,GAAG,MAAM,WAAW,OAAO,QAAM,KAAK,IAAI,EAAE,CAAC,EAAE,IAAI,SAAO,EAAE,QAAQ,UAAU,MAAM,WAAW,QAAQ,GAAG,EAAsB;AAAA,MAChI,GAAI,OAAO,cAAc,SAAY,CAAC,IAAI,CAAC,OAAO,SAAS;AAAA,IAC7D;AAAA,EACF;AACF;AAEA,SAAS,oBAAoB,SAAyB;AACpD,SAAO,UACH,KAAK,yBAAyB,qEAAqE,IACnG;AAAA,IAAK;AAAA,IACL;AAAA,IACA;AAAA,EAAmG;AACzG;AAEA,SAAS,mBAAmB,QAAgC,cAA6B;AACvF,MAAI,WAAW,QAAW;AACxB,WAAO,KAAK,yBAAyB,UAAU,wBAAwB,uBAAuB,+BAA+B;AAAA,EAC/H;AACA,MAAI,OAAO,SAAS,cAAc;AAChC,WAAO;AAAA,MAAK;AAAA,MAAyB,UAAU,wBAAwB,uBAAuB,OAAO,IAAI,SAAS,YAAY;AAAA,MAC5H;AAAA,IAAqF;AAAA,EACzF;AACA,MAAI,CAAC,OAAO,WAAW,OAAO,WAAW,aAAa,OAAO,UAAU,QAAW;AAChF,UAAM,SAAS,OAAO,UAAU,SAAY,UAAU,OAAO,MAAM,KAAK,GAAG,OAAO,MAAM,KAAK,OAAO,KAAK;AACzG,WAAO,KAAK,yBAAyB,UAAU,wBAAwB,oBAAoB,MAAM,MAAM,+BAA+B;AAAA,EACxI;AACA,SAAO,KAAK,yBAAyB,kDAAkD,YAAY,GAAG;AACxG;AAEA,eAAe,gBACb,SAAkB,SAAkB,MAAY,SAA+B,cAC7D;AAClB,MAAI,QAAQ,eAAe,QAAW;AACpC,QAAI,KAAK,eAAe,OAAW,OAAM,QAAQ,aAAa,wBAAwB;AACtF,WAAO,CAAC;AAAA,EACV;AACA,MAAI,SAAS,KAAK;AAClB,MAAI,WAAW,QAAW;AACxB,aAAS,MAAM,QAAQ,cAAc,cAAc,wBAAwB;AAAA,EAC7E,OAAO;AACL,QAAI,CAAC,OAAO,QAAS,UAAS,MAAM,QAAQ,aAAa,wBAAwB;AACjF,UAAM,eAAe,QAAQ;AAAA,MAAK,gBAC/B,UAAU,SAAS,UAAU,UAAU,SAAS,UAAU,UAAU,OAAO,WAAW,GAAG,YAAY,GAAGC,IAAG,EAAE;AAAA,IAChH;AACA,UAAM,cAAc,gBAAgB,OAAO,WAAW,aAAa,OAAO,UAAU;AACpF,QAAI,YAAa,UAAS,MAAM,QAAQ,aAAa,wBAAwB;AAAA,EAC/E;AACA,SAAO,CAAC,mBAAmB,QAAQ,YAAY,CAAC;AAClD;AAGA,eAAsB,MAAM,UAAsB,CAAC,GAAoB;AACrE,QAAM,SAAS,cAAc,SAAS,QAAQ,GAAG;AACjD,QAAM,SAAS,QAAQ,UAAU,CAAC,OAAO;AACzC,QAAM,UAAU,aAAa,QAAQ,MAAM;AAC3C,MAAI,QAAQ,SAAS,EAAG,QAAO,OAAO,SAAS,OAAO;AACtD,QAAM,aAAa,MAAM,eAAe,QAAQ,CAAC,GAAG,CAAC,CAAC;AACtD,MAAI,WAAW,UAAU,EAAG,QAAO,OAAO,SAAS,UAAU;AAC7D,QAAM,WAAW,MAAM,WAAW,MAAM;AACxC,QAAM,eAAe,CAAC,GAAG,oBAAI,IAAI,CAAC,GAAG,QAAQ,GAAI,UAAU,UAAU,CAAC,CAAE,CAAC,CAAC;AAC1E,QAAM,aAAa,MAAM,eAAe,QAAQ,cAAc,KAAK;AACnE,MAAI,WAAW,UAAU,EAAG,QAAO,OAAO,SAAS,UAAU;AAE7D,QAAM,sBAAsB,CAAC,GAAG,oBAAI,IAAI,CAAC,GAAG,QAAQ,GAAI,UAAU,UAAU,CAAC,CAAE,CAAC,CAAC;AACjF,QAAM,SAAS,MAAM,YAAY,QAAQ,QAAQ,KAAK,oBAAoB,mBAAmB,CAAC;AAC9F,MAAI,CAAC,OAAO,OAAQ,QAAO,OAAO,SAAS,OAAO,MAAM;AACxD,QAAM,UAAU,MAAM,aAAa,QAAQ,QAAQ,KAAK;AACxD,QAAM,QAAQ,MAAM,UAAU,QAAQ,UAAU,QAAQ,KAAK;AAC7D,QAAM,WAAW,MAAM,oBAAoB,WAAW,IAAI,CAAC,IAAI,CAAC;AAAA,IAC9D;AAAA,IACA,aAAa,OAAO,MAAM,oBAAoB,MAAM,CAAC;AAAA,IACrD,wIAAwI,MAAM,oBAAoB,KAAK,IAAI,CAAC;AAAA,EAC9K,CAAC;AACD,QAAM,SAAS,CAAC,GAAG,OAAO,QAAQ,GAAG,QAAQ,QAAQ,GAAG,QAAQ;AAChE,MAAI,WAAW,MAAM,EAAG,QAAO,OAAO,SAAS,MAAM;AAErD,SAAO,YAAY,OAAO,QAAQ,OAAM,YAAW;AACjD,UAAM,qBAAqB,uBAAuB,MAAM;AACxD,UAAM,OAAO,MAAM,SAAS,SAAS,SAAS,OAAO,kBAAkB;AACvE,UAAM,EAAE,YAAY,aAAa,IAAI;AACrC,UAAM,UAAU,WAAW,OAAO,eAAa,UAAU,WAAW,MAAM;AAC1E,UAAM,sBAAsB,QAAQ,eAAe,SAC/C,KAAK,eACL,CAAC,oBAAoB,MAAM,QAAQ,eAAe,CAAC,GAAG,GAAG,KAAK,YAAY;AAE9E,UAAM,sBAAsB,CAAC,GAAG,QAAQ,GAAG,qBAAqB,GAAG,mBAAmB,QAAQ,GAAG,GAAG,oBAAoB,cAAc,QAAQ,QAAQ,CAAC;AACvJ,QAAI,WAAW,mBAAmB,KAAK,CAAC,QAAQ,OAAO;AACrD,aAAO;AAAA,QACL,SAAS;AAAA,QACT,SAAS,WAAW,mBAAmB,IAAI,WAAW,QAAQ,SAAS,IAAI,oBAAoB;AAAA,QAC/F,SAAS;AAAA,QAAO,QAAQ;AAAA,QAAqB;AAAA,MAC/C;AAAA,IACF;AAGA,UAAM,aAAaD,OAAK,OAAO,UAAU,MAAM;AAC/C,UAAM,gBAAgB,QAAQ,QAAQ,OAAO,WAAS,MAAM,SAAS,UAAU;AAC/E,UAAM,aAAa,QAAQ,QAAQ,OAAO,WAAS,MAAM,SAAS,UAAU,CAAC;AAC7E,UAAM,MAAM,OAAO,KAAK,QAAQ,SAAS;AACzC,UAAM,QAAQ,eAAe,QAAQ,SAAS;AAC9C,QAAI,MAAM,YAAY,SAAS,EAAG,OAAM,QAAQ,gBAAgB,MAAM,WAAW;AAGjF,QAAI,kBAAkB;AACtB,QAAI,QAAQ,KAAK,eAAa,UAAU,SAAS,SAAS,GAAG;AAC3D,wBAAkB,cAAc,cAAc,QAAQ,UAAU,MAAM,UAAU;AAChF,YAAM,QAAQ,cAAc,eAAe;AAAA,IAC7C;AACA,UAAM,QAAQ,QAAQ,GAAG;AACzB,UAAM,eAAe,MAAM,gBAAgB,SAAS,SAAS,MAAM,SAAS,kBAAkB;AAC9F,UAAM,aAAa,aAAa;AAChC,UAAM,gBAAwB;AAAA,MAC5B,SAAS,gBAAS;AAAA,MAAS,QAAQ,CAAC,GAAG,MAAM;AAAA,MAAG,OAAO,CAAC,GAAG,KAAK;AAAA,MAAG,UAAU,eAAe;AAAA,IAC9F;AACA,UAAM,gBAAgB;AAAA,MAAC,GAAG;AAAA,MAAQ,GAAG;AAAA,MAAqB,GAAG;AAAA,MAC3D,KAAK,gBAAgB,iBAAiB,OAAO,QAAQ,SAAS,OAAO,IAAI,MAAM,CAAC,mBAAmB;AAAA,MACnG,GAAG,mBAAmB,aAAa;AAAA,MAAG,GAAG,oBAAoB,iBAAiB,QAAQ,QAAQ;AAAA,IAAC;AACjG,WAAO;AAAA,MACL,SAAS;AAAA,MAAS,SAAS,WAAW,aAAa,IAAI,WAAW;AAAA,MAAM,SAAS,QAAQ,SAAS;AAAA,MAClG,QAAQ;AAAA,MAAe;AAAA,IACzB;AAAA,EACF,GAAG,eAAe,OAAO,CAAC;AAC5B;AAEA,eAAsB,OAAO,UAAsB,CAAC,GAAoB;AACtE,QAAM,SAAS,cAAc,SAAS,QAAQ,GAAG;AACjD,QAAM,aAAa,MAAM,eAAe,QAAQ,CAAC,GAAG,CAAC,CAAC;AACtD,MAAI,WAAW,UAAU,EAAG,QAAO,OAAO,UAAU,UAAU;AAC9D,QAAM,SAAS,MAAM,WAAW,MAAM;AACtC,MAAI,CAAC,QAAQ;AACX,WAAO,OAAO,UAAU,CAAC,KAAK,eAAe,oBAAoB,OAAO,QAAQ,KAAK,+BAA+B,CAAC,CAAC;AAAA,EACxH;AACA,QAAM,UAAU,aAAa,QAAQ,OAAO,MAAM;AAClD,MAAI,QAAQ,SAAS,EAAG,QAAO,OAAO,UAAU,OAAO;AACvD,QAAM,aAAa,MAAM,eAAe,QAAQ,OAAO,QAAQ,OAAO,KAAK;AAC3E,MAAI,WAAW,UAAU,EAAG,QAAO,OAAO,UAAU,UAAU;AAC9D,QAAM,SAAS,MAAM,YAAY,QAAQ,QAAQ,KAAK,oBAAoB,OAAO,MAAM,CAAC;AACxF,MAAI,CAAC,OAAO,OAAQ,QAAO,OAAO,UAAU,OAAO,MAAM;AACzD,QAAM,UAAU,MAAM,aAAa,QAAQ,OAAO,QAAQ,OAAO,KAAK;AACtE,QAAM,SAAS,CAAC,GAAG,OAAO,QAAQ,GAAG,QAAQ,MAAM;AACnD,MAAI,WAAW,MAAM,EAAG,QAAO,OAAO,UAAU,MAAM;AAEtD,SAAO,YAAY,OAAO,QAAQ,OAAM,YAAW;AACjD,UAAM,qBAAqB,uBAAuB,MAAM;AACxD,UAAM,OAAO,MAAM,SAAS,SAAS,SAAS,eAAe,kBAAkB;AAC/E,UAAM,EAAE,YAAY,aAAa,IAAI;AACrC,UAAM,UAAU,WAAW,OAAO,eAAa,UAAU,WAAW,MAAM;AAC1E,UAAM,QAAQ,CAAC,SAAoC,QAAQ,OAAO,eAAa,UAAU,SAAS,IAAI,EAAE;AACxG,UAAM,YAAY,MAAM,UAAU;AAClC,UAAM,WAAW,MAAM,SAAS;AAChC,UAAM,eAAe,QAAQ,OAAO,eAAa,CAAC,CAAC,YAAY,WAAW,QAAQ,EAAE,SAAS,UAAU,IAAI,CAAC;AAC5G,UAAM,QAAQ,aAAa;AAC3B,UAAM,eAAe,QAAQ,eAAe,SAAY,CAAC,IAAI;AAAA,MAC3D,oBAAoB,MAAM,QAAQ,eAAe,CAAC;AAAA,MAClD,GAAG,KAAK;AAAA,MACR,mBAAmB,KAAK,YAAY,kBAAkB;AAAA,IACxD;AACA,UAAM,MAAe;AAAA,MAAC,GAAG;AAAA,MACvB,UAAU,IACN,KAAK,cAAc,yDAAyD,IAC5E,KAAK,cAAc,GAAG,OAAO,KAAK,CAAC,+CAA+C,gBAAgB,aAAa,IAAI,eAAa,UAAU,MAAM,CAAC,CAAC,IAAI,+BAA+B;AAAA,MACzL,cAAc,IACV,KAAK,kBAAkB,OAAO,OAAO,OAAO,KAAK,QAAQ,SAAS,EAAE,MAAM,CAAC,8CAA8C,IACzH,KAAK,kBAAkB,GAAG,OAAO,SAAS,CAAC,2CAA2C,+BAA+B;AAAA,MACzH,aAAa,IACT,KAAK,iBAAiB,OAAO,OAAO,QAAQ,SAAS,MAAM,CAAC,mDAAmD,IAC/G,KAAK,iBAAiB,GAAG,OAAO,QAAQ,CAAC,gDAAgD,+BAA+B;AAAA,MAC5H,GAAG;AAAA;AAAA,MAEH,GAAG,mBAAmB,MAAM;AAAA,MAC5B,GAAG,oBAAoB,cAAc,QAAQ,QAAQ;AAAA,IACvD;AACA,WAAO;AAAA,MACL,SAAS;AAAA,MAAU,SAAS,WAAW,GAAG,IAAI,WAAW;AAAA,MAAM,SAAS;AAAA,MAAO,QAAQ;AAAA,MAAK;AAAA,IAC9F;AAAA,EACF,GAAG,eAAe,OAAO,CAAC;AAC5B;AAEA,eAAsB,OAAO,UAAsB,CAAC,GAAoB;AACtE,QAAM,SAAS,cAAc,SAAS,QAAQ,GAAG;AACjD,QAAM,aAAa,MAAM,eAAe,QAAQ,CAAC,GAAG,CAAC,CAAC;AACtD,MAAI,WAAW,UAAU,EAAG,QAAO,OAAO,UAAU,UAAU;AAC9D,QAAM,SAAS,MAAM,WAAW,MAAM;AACtC,MAAI,CAAC,QAAQ;AACX,WAAO,OAAO,UAAU,CAAC,KAAK,eAAe,oBAAoB,OAAO,QAAQ,KAAK,0DAA0D,CAAC,CAAC;AAAA,EACnJ;AAEA,QAAM,UAAU,aAAa,QAAQ,OAAO,MAAM;AAClD,MAAI,QAAQ,SAAS,EAAG,QAAO,OAAO,UAAU,OAAO;AACvD,QAAM,MAAM,OAAO,OAAO,QAAQ,WAAS,OAAO,MAAM,IAAI,UAAQ,WAAW,OAAO,IAAI,CAAC,CAAC;AAC5F,QAAM,WAAW,IAAI,IAAI,OAAO,OAAO,QAAQ,WAAS,OAAO,MAAM,IAAI,UAAQ,UAAU,OAAO,IAAI,CAAC,CAAC,CAAC;AACzG,QAAM,YAAY,OAAO,OAAO,SAAS,QAAQ;AACjD,QAAM,aAA0B;AAAA,IAC9B,GAAG,IAAI,IAAI,SAAO,EAAE,QAAQ,UAAU,MAAM,YAAY,QAAQ,GAAG,EAAsB;AAAA,IACzF,GAAG,CAAC,GAAG,QAAQ,EAAE,IAAI,SAAO,EAAE,QAAQ,UAAU,MAAM,WAAW,QAAQ,GAAG,EAAsB;AAAA,IAClG,GAAI,YAAY,CAAC,EAAE,QAAQ,UAAU,MAAM,UAAU,QAAQ,yBAAyB,CAAqB,IAAI,CAAC;AAAA,IAChH,EAAE,QAAQ,UAAU,MAAM,OAAO,QAAQ,OAAO,SAAS;AAAA,EAC3D;AACA,QAAM,oBAAoB;AAAA,IAAK;AAAA,IAC7B,YAAY,OAAO,QAAQ;AAAA,EAAkL;AAC/M,MAAI,CAAC,QAAQ,OAAO;AAClB,WAAO,EAAE,SAAS,UAAU,SAAS,mBAAmB,SAAS,OAAO,QAAQ,CAAC,iBAAiB,GAAG,WAAW;AAAA,EAClH;AACA,QAAM,SAAS,MAAM,YAAY,QAAQ,QAAQ,GAAG;AACpD,QAAM,SAAkB,CAAC,iBAAiB;AAC1C,MAAI,CAAC,OAAO,QAAQ;AAClB,WAAO,OAAO,UAAU;AAAA,MACtB;AAAA,MACA,GAAG,OAAO;AAAA,MACV;AAAA,QACE;AAAA,QACA,aAAa,OAAO,QAAQ;AAAA,QAC5B;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AACA,MAAI;AACF,UAAM,YAAY,OAAO,QAAQ,OAAM,YAAW;AAChD,UAAI,WAAW;AACb,cAAM,UAAU,MAAM,QAAQ,YAAY,GAAG,KAAK,WAAS,MAAM,OAAO,wBAAwB;AAChG,cAAM,eAAe,uBAAuB,MAAM;AAClD,YAAI,WAAW,UAAa,OAAO,SAAS,cAAc;AACxD,gBAAM,IAAI,MAAM,0CAA0C,OAAO,IAAI,EAAE;AAAA,QACzE;AACA,YAAI,WAAW,OAAW,OAAM,QAAQ,aAAa,wBAAwB;AAAA,MAC/E;AACA,YAAM,QAAQ,gBAAgB,GAAG;AACjC,YAAM,OAAO,MAAM,QAAQ,aAAa;AACxC,YAAM,OAAO,KAAK,OAAO,WAAS,CAAC,SAAS,IAAI,OAAO,MAAM,EAAE,CAAC,CAAC;AACjE,UAAI,KAAK,WAAW,KAAK,OAAQ,OAAM,QAAQ,cAAc,IAAI;AAAA,IACnE,GAAG,eAAe,OAAO,CAAC;AAC1B,WAAO,KAAK,KAAK,kBAAkB,WAAW,OAAO,IAAI,MAAM,CAAC,4CAA4C,CAAC;AAAA,EAC/G,QAAQ;AACN,WAAO,OAAO,UAAU;AAAA,MACtB;AAAA,MACA;AAAA,QACE;AAAA,QACA,oDAAoD,OAAO,QAAQ;AAAA,QACnE;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AAEA,MAAI;AACF,UAAMG,IAAG,OAAO,UAAU,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,EAC5D,SAAS,OAAO;AACd,UAAM,SAAS,iBAAiB,QAAQ,MAAM,UAAU;AACxD,WAAO,KAAK;AAAA,MACV;AAAA,MACA,wEAAwE,OAAO,QAAQ,KAAK,MAAM;AAAA,MAClG;AAAA,IACF,CAAC;AACD,UAAM,sBAAsB,WAAW,OAAO,eAAa,UAAU,SAAS,KAAK;AACnF,WAAO,EAAE,SAAS,UAAU,SAAS,UAAU,SAAS,MAAM,QAAQ,YAAY,oBAAoB;AAAA,EACxG;AACA,SAAO,KAAK,KAAK,cAAc,WAAW,OAAO,QAAQ,GAAG,CAAC;AAC7D,SAAO,EAAE,SAAS,UAAU,SAAS,MAAM,SAAS,MAAM,QAAQ,WAAW;AAC/E;AAriBA,IAiBa,QA4JP;AA7KN;AAAA;AAAA;AAEA;AACA;AACA;AACA;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAEO,IAAM,SAAiC,EAAE,OAAO,YAAY,QAAQ,aAAa,IAAI,QAAQ;AA4JpG,IAAM,gBAAuB,EAAE,aAAa,CAAC,GAAG,YAAY,CAAC,GAAG,cAAc,OAAO,qBAAqB,CAAC,EAAE;AAAA;AAAA;;;AC7K7G;AAAA;AAAA;AAAA;AAAA;AAAA,YAAY,WAAW;AAiBvB,eAAsB,UACpB,SACA,MACA,OACA,UAAsB,CAAC,GACvB,UACiB;AACjB,QAAM,YAAY,MAAc;AAAE,UAAM,mCAAmC;AAAG,WAAO;AAAA,EAAG;AACxF,QAAM,SAAS,MAAM,QAAQ,OAAO;AAAA,IAClC,SAAS;AAAA,IACT,SAAS;AAAA,MACP,EAAE,OAAO,SAAS,OAAO,kDAAkD;AAAA,MAC3E,EAAE,OAAO,UAAU,OAAO,0BAA0B;AAAA,MACpD,EAAE,OAAO,UAAU,OAAO,kBAAkB;AAAA,IAC9C;AAAA,EACF,CAAC;AACD,MAAI,OAAO,WAAW,SAAU,QAAO,UAAU;AACjD,aAAW,MAAM;AACjB,MAAI,WAAW,SAAU,QAAO,KAAK,MAAM,OAAO,OAAO,CAAC;AAC1D,MAAI,WAAW,UAAU;AACvB,UAAME,WAAU,MAAM,OAAO,OAAO;AACpC,UAAMC,UAAS,KAAKD,QAAO;AAC3B,QAAIA,SAAQ,YAAY,kBAAmB,QAAOC;AAClD,UAAMC,YAAW,MAAM,QAAQ,QAAQ,EAAE,SAAS,6EAA6E,CAAC;AAChI,WAAOA,cAAa,OAAO,KAAK,MAAM,OAAO,EAAE,GAAG,SAAS,OAAO,KAAK,CAAC,CAAC,IAAI,UAAU;AAAA,EACzF;AACA,QAAM,SAAS,MAAM,QAAQ,YAAY;AAAA,IACvC,SAAS;AAAA,IACT,SAAS,UAAU,IAAI,YAAU,EAAE,OAAO,OAAO,OAAO,KAAK,EAAE,MAAM,EAAE;AAAA,EACzE,CAAC;AACD,MAAI,OAAO,WAAW,YAAY,OAAO,WAAW,EAAG,QAAO,UAAU;AACxE,QAAM,UAAU,MAAM,MAAM,EAAE,GAAG,SAAS,OAAO,CAAC;AAClD,QAAM,SAAS,KAAK,OAAO;AAC3B,MAAI,QAAQ,YAAY,kBAAmB,QAAO;AAClD,QAAM,WAAW,MAAM,QAAQ,QAAQ,EAAE,SAAS,wEAAwE,CAAC;AAC3H,MAAI,aAAa,KAAM,QAAO,UAAU;AACxC,SAAO,KAAK,MAAM,MAAM,EAAE,GAAG,SAAS,QAAQ,OAAO,KAAK,CAAC,CAAC;AAC9D;AAtDA,IAUa;AAVb;AAAA;AAAA;AACA;AAEA;AAOO,IAAM,kBAA2B;AAAA,MACtC,QAAQ,aAAiB,aAAO,EAAE,SAAS,QAAQ,SAAS,SAAS,CAAC,GAAG,QAAQ,OAAO,EAAE,CAAC;AAAA,MAC3F,aAAa,aAAiB,kBAAY,EAAE,SAAS,QAAQ,SAAS,SAAS,CAAC,GAAG,QAAQ,OAAO,GAAG,UAAU,KAAK,CAAC;AAAA,MACrH,SAAS,aAAiB,cAAQ,EAAE,SAAS,QAAQ,SAAS,cAAc,MAAM,CAAC;AAAA,IACrF;AAAA;AAAA;;;ACbA;AACA;AACA;AAHA,SAAS,SAAS,gBAAgB,4BAA4B;;;ACEvD,SAAS,WAAW,QAAwB;AACjD,SAAO,GAAG,KAAK,UAAU,EAAE,eAAe,GAAG,GAAG,OAAO,GAAG,MAAM,CAAC,CAAC;AAAA;AACpE;AAEA,IAAM,QAAQ,EAAE,MAAM,UAAK,MAAM,KAAK,MAAM,SAAI;AAEzC,SAAS,YAAY,QAAwB;AAClD,QAAM,QAAkB,CAAC;AACzB,aAAW,SAAS,OAAO,QAAQ;AACjC,UAAM,KAAK,GAAG,MAAM,MAAM,MAAM,CAAC,IAAI,MAAM,OAAO,EAAE;AACpD,QAAI,MAAM,IAAK,OAAM,KAAK,YAAO,MAAM,GAAG,EAAE;AAAA,EAC9C;AACA,QAAM,UAAU,OAAO,WAAW,OAAO,eAAa,UAAU,WAAW,MAAM;AACjF,MAAI,QAAQ,SAAS,GAAG;AACtB,UAAM,KAAK,IAAI,OAAO,UAAU,aAAa,kBAAkB;AAC/D,eAAW,aAAa,QAAS,OAAM,KAAK,KAAK,UAAU,MAAM,IAAI,UAAU,IAAI,IAAI,UAAU,MAAM,EAAE;AACzG,UAAM,YAAY,OAAO,WAAW,SAAS,QAAQ;AACrD,QAAI,YAAY,EAAG,OAAM,KAAK,MAAM,OAAO,SAAS,CAAC,sBAAsB;AAAA,EAC7E,WAAW,OAAO,WAAW,SAAS,GAAG;AACvC,UAAM,KAAK,IAAI,mCAAmC;AAAA,EACpD;AACA,QAAM,KAAK,IAAI,GAAG,OAAO,OAAO,KAAK,OAAO,OAAO,EAAE;AACrD,SAAO,GAAG,MAAM,KAAK,IAAI,CAAC;AAAA;AAC5B;;;ADpBA;AACA;AACA;AAeA,SAAS,aAAa,OAAe,UAA4C;AAC/E,QAAM,QAAQ,UAAU,KAAK,QAAM,OAAO,KAAK;AAC/C,MAAI,CAAC,MAAO,OAAM,IAAI,qBAAqB,kBAAkB,KAAK,EAAE;AACpE,QAAM,SAAS,YAAY,CAAC;AAC5B,SAAO,OAAO,SAAS,KAAK,IAAI,SAAS,CAAC,GAAG,QAAQ,KAAK;AAC5D;AAEA,IAAM,aAAa,CAAC,YAAY,aAAa,cAAc,UAAU,YAAY,aAAa,SAAS,UAAU;AAEjH,SAAS,YAAY,KAA8B,MAA8B;AAC/E,QAAM,QAAgC,CAAC;AACvC,aAAW,QAAQ,YAAY;AAC7B,UAAM,QAAQ,IAAI,IAAI;AACtB,QAAI,OAAO,UAAU,YAAY,MAAM,KAAK,EAAG,OAAM,IAAI,IAAI,MAAM,KAAK;AAAA,EAC1E;AACA,QAAM,SAAS,MAAM,QAAQ,IAAI,KAAK,KAAK,IAAI,MAAM,SAAS,IAAK,IAAI,QAAsB;AAC7F,SAAO,EAAE,GAAG,MAAM,GAAG,OAAO,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC,GAAI,GAAI,IAAI,UAAU,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC,EAAG;AAC5G;AAEA,SAAS,iBAAiB,SAAiB,OAAwB;AACjE,MAAI,iBAAiB,kBAAkB;AACrC,WAAO,OAAO,SAAS,CAAC;AAAA,MACtB,GAAG,OAAO;AAAA,MACV,MAAM;AAAA,MACN;AAAA,IACF,CAAC,CAAC;AAAA,EACJ;AACA,QAAM,SAAS,iBAAiB,QAAQ,MAAM,UAAU;AACxD,SAAO,OAAO,SAAS,CAAC;AAAA,IACtB,GAAG,OAAO;AAAA,IACV;AAAA,IACA;AAAA,EACF,CAAC,CAAC;AACJ;AAEA,eAAsB,OAAO,MAAyB,QAAgB,UAAsB,CAAC,GAAoB;AAC/G,QAAM,YAAY,QAAQ,SAAS,OAAO,QAAQ,KAAK;AACvD,QAAM,SAAS,CAAC,SAA0B,WAAW,KAAK,MAAM,QAAQ,EAAE,KAAK,YAAY,IAAI;AAE/F,MAAI,OAAO;AACX,QAAM,OAAO,CAAC,WAA2B;AACvC,WAAO,OAAO,OAAO,OAAO,WAAW,MAAM,IAAI,YAAY,MAAM,CAAC,CAAC;AACrE,WAAO,SAAS,MAAM;AAAA,EACxB;AACA,QAAM,QAAQ,QAAQ,UAAU,QAAQ,MAAM,SAAS,QAAQ,OAAO,SAAS,QAAQ,OAAO;AAC9F,QAAM,OAAO,QAAQ,WAAW,CAAC;AAEjC,MAAI,KAAK,WAAW,GAAG;AACrB,QAAI,CAAC,OAAO;AACV,aAAO,OAAO,+FAA+F;AAC7G,aAAO;AAAA,IACT;AACA,QAAI,gBAAgB;AACpB,QAAI;AAEF,YAAM,EAAE,WAAAC,YAAW,iBAAAC,iBAAgB,IAAI,MAAM;AAC7C,aAAO,MAAMD;AAAA,QACX,QAAQ,WAAWC;AAAA,QACnB;AAAA,QACA,UAAQ;AAAE,iBAAO,OAAO,IAAI;AAAA,QAAG;AAAA,QAC/B;AAAA,QACA,YAAU;AAAE,0BAAgB;AAAA,QAAQ;AAAA,MACtC;AAAA,IACF,SAAS,OAAO;AACd,aAAO,KAAK,iBAAiB,eAAe,KAAK,CAAC;AAAA,IACpD;AAAA,EACF;AACA,QAAM,UAAU,IAAI,QAAQ,EACzB,KAAK,YAAY,EACjB,YAAY,+FAA+F,EAC3G,QAAQ,gBAAS,OAAO,EACxB,MAAM,uGAAuG,EAC7G,SAAS,aAAa,gCAAgC,EACtD,SAAS,0BAA0B,2BAA2B,EAC9D,OAAO,mBAAmB,4DAA4D,YAAY,EAClG,OAAO,WAAW,8CAA8C,EAChE,OAAO,UAAU,yBAAyB,EAC1C,OAAO,sBAAsB,uDAAuD,EACpF,OAAO,uBAAuB,yCAAyC,EACvE,OAAO,wBAAwB,gDAAgD,EAC/E,OAAO,oBAAoB,yCAAyC,EACpE,OAAO,sBAAsB,2CAA2C,EACxE,OAAO,uBAAuB,iDAAiD,EAC/E,OAAO,mBAAmB,wCAAwC,EAClE,OAAO,sBAAsB,2CAA2C,EACxE,gBAAgB,EAAE,UAAU,UAAQ;AAAE,WAAO,OAAO,IAAI;AAAA,EAAG,GAAG,UAAU,UAAQ;AAAE,WAAO,OAAO,IAAI;AAAA,EAAG,EAAE,CAAC,EAC1G,aAAa;AAEhB,MAAI;AACJ,MAAI;AACJ,MAAI;AACJ,MAAI;AACJ,MAAI;AACF,YAAQ,MAAM,CAAC,GAAG,IAAI,GAAG,EAAE,MAAM,OAAO,CAAC;AACzC,UAAM,QAAQ,KAA8B;AAC5C,WAAO,IAAI,SAAS;AACpB,cAAU,QAAQ,KAAK,CAAC,KAAK;AAC7B,uBAAmB,QAAQ,KAAK,MAAM,CAAC;AACvC,cAAU,YAAY,KAAK,IAAI;AAAA,EACjC,SAAS,OAAO;AACd,QAAI,iBAAiB,kBAAkB,MAAM,aAAa,EAAG,QAAO;AACpE,WAAO;AAAA,EACT;AAEA,MAAI;AACF,QAAI,YAAY,QAAQ;AACtB,UAAI,IAAI,UAAU,MAAM;AACtB,eAAO,OAAO,uEAAuE;AACrF,eAAO;AAAA,MACT;AACA,UAAI,IAAI,SAAS,MAAM;AACrB,eAAO,OAAO,qEAAqE;AACnF,eAAO;AAAA,MACT;AACA,UAAI,IAAI,UAAU,QAAW;AAC3B,eAAO,OAAO,sFAAsF;AACpG,eAAO;AAAA,MACT;AACA,UAAI,iBAAiB,WAAW,KAAK,iBAAiB,CAAC,MAAM,SAAS;AACpE,eAAO,OAAO,yEAAyE;AACvF,eAAO;AAAA,MACT;AACA,aAAO,MAAM,UAAU,iBAAiB,CAAC,KAAK,IAAI,iBAAiB,CAAC,KAAK,IAAI;AAAA,QAC3E,GAAG;AAAA,QACH;AAAA,QACA,GAAI,QAAQ,aAAa,EAAE,OAAO,QAAQ,WAAW,IAAI,CAAC;AAAA,MAC5D,GAAG,MAAM;AAAA,IACX;AACA,QAAI,iBAAiB,SAAS,GAAG;AAC/B,aAAO,OAAO,cAAc,OAAO,2BAA2B,iBAAiB,KAAK,GAAG,CAAC;AAAA,CAAI;AAC5F,aAAO;AAAA,IACT;AACA,QAAI,YAAY,QAAS,QAAO,KAAK,MAAM,MAAM,OAAO,CAAC;AACzD,QAAI,YAAY,SAAU,QAAO,KAAK,MAAM,OAAO,OAAO,CAAC;AAC3D,QAAI,YAAY,SAAU,QAAO,KAAK,MAAM,OAAO,OAAO,CAAC;AAAA,EAC7D,SAAS,OAAO;AACd,WAAO,KAAK,iBAAiB,SAAS,KAAK,CAAC;AAAA,EAC9C;AACA,SAAO,OAAO,gCAAgC,OAAO;AAAA,CAAiD;AACtG,SAAO;AACT;;;AE/JA,QAAQ,WAAW,MAAM,OAAO,QAAQ,KAAK,MAAM,CAAC,GAAG;AAAA,EACrD,QAAQ,UAAQ;AAAE,YAAQ,OAAO,MAAM,IAAI;AAAA,EAAG;AAAA,EAC9C,QAAQ,UAAQ;AAAE,YAAQ,OAAO,MAAM,IAAI;AAAA,EAAG;AAChD,CAAC;","names":["stat","lstat","readlink","join","stat","title","join","join","resolve","constants","join","lstat","env","argv","resolve","table","readdir","join","readFile","join","join","SHARED","EXECUTABLE","evidence","spawn","readFile","rm","isAbsolute","join","resolve","asObject","command","AUTH_ENV","SHARED","EXECUTABLE","z","run","readFileSync","join","join","sep","lstat","rm","stat","preview","status","approved","runWizard","terminalPrompts"]}
+{"version":3,"sources":["../package.json","../src/result.ts","../src/credentials.ts","../src/layout.ts","../src/fsops.ts","../src/roles.ts","../src/room.ts","../src/which.ts","../src/auth.ts","../src/room/prompts.ts","../src/room/instructions.ts","../src/agents/mcp.ts","../src/agents/resources.ts","../src/agents/claude.ts","../src/agents/codex.ts","../src/agents/pi.ts","../src/paseo.ts","../src/plugin.ts","../src/commands.ts","../src/wizard.ts","../src/cli.ts","../src/render.ts","../src/index.ts"],"sourcesContent":["{\n  \"name\": \"paseo-room\",\n  \"version\": \"0.4.0\",\n  \"description\": \"One CLI that configures Codex, Claude Code, and Pi role homes in $HOME and registers them with your local Paseo daemon.\",\n  \"keywords\": [\n    \"paseo\",\n    \"codex\",\n    \"claude-code\",\n    \"pi-coding-agent\",\n    \"agent\",\n    \"orchestration\",\n    \"cli\"\n  ],\n  \"homepage\": \"https://github.com/cuongntr/paseo-room#readme\",\n  \"bugs\": \"https://github.com/cuongntr/paseo-room/issues\",\n  \"repository\": {\n    \"type\": \"git\",\n    \"url\": \"git+https://github.com/cuongntr/paseo-room.git\"\n  },\n  \"license\": \"MIT\",\n  \"author\": \"Invoker <cuongnt1987@gmail.com>\",\n  \"type\": \"module\",\n  \"engines\": {\n    \"node\": \">=22\"\n  },\n  \"bin\": {\n    \"paseo-room\": \"dist/index.js\"\n  },\n  \"files\": [\n    \"dist/\"\n  ],\n  \"scripts\": {\n    \"typecheck\": \"tsc --noEmit\",\n    \"lint\": \"eslint . --max-warnings 0\",\n    \"test\": \"vitest run\",\n    \"test:package\": \"vitest run --config vitest.package.config.ts\",\n    \"build\": \"tsup && node --input-type=module -e \\\"import { cpSync, rmSync } from 'node:fs'; for (const [source, target] of [['src/room/prompts', 'dist/prompts'], ['src/plugin-assets', 'dist/plugin-assets']]) { rmSync(target, { recursive: true, force: true }); cpSync(source, target, { recursive: true }); }\\\"\",\n    \"prepack\": \"npm run build\",\n    \"verify\": \"npm run typecheck && npm run lint && npm test && npm run build && npm run test:package\"\n  },\n  \"dependencies\": {\n    \"@clack/prompts\": \"^1.8.0\",\n    \"@getpaseo/client\": \"0.8.0-beta.1\",\n    \"commander\": \"^14.0.3\",\n    \"semver\": \"^7.8.5\",\n    \"smol-toml\": \"^1.8.0\",\n    \"zod\": \"^4.5.4\"\n  },\n  \"devDependencies\": {\n    \"@eslint/js\": \"^10.0.1\",\n    \"@types/node\": \"^22.0.0\",\n    \"@types/semver\": \"^7.7.0\",\n    \"eslint\": \"^10.10.0\",\n    \"tsup\": \"^8.5.1\",\n    \"typescript\": \"~5.9.3\",\n    \"typescript-eslint\": \"^8.70.0\",\n    \"vitest\": \"^4.1.11\"\n  }\n}\n","export type Status = 'pass' | 'warn' | 'fail';\nexport interface Check {\n  readonly id: string;\n  readonly status: Status;\n  readonly message: string;\n  readonly fix?: string;\n}\nexport interface Operation {\n  readonly action: 'create' | 'update' | 'remove' | 'noop';\n  readonly kind: 'dir' | 'file' | 'link' | 'provider' | 'profile' | 'plugin';\n  readonly target: string;\n}\nexport type Outcome = 'ok' | 'changes-planned' | 'failed';\nexport interface Result {\n  readonly command: string;\n  readonly outcome: Outcome;\n  readonly changed: boolean;\n  readonly checks: readonly Check[];\n  readonly operations: readonly Operation[];\n}\n\nexport function pass(id: string, message: string): Check {\n  return { id, status: 'pass', message };\n}\nexport function warn(id: string, message: string, fix?: string): Check {\n  return { id, status: 'warn', message, ...(fix === undefined ? {} : { fix }) };\n}\nexport function fail(id: string, message: string, fix: string): Check {\n  return { id, status: 'fail', message, fix };\n}\nexport function failed(command: string, checks: readonly Check[]): Result {\n  return { command, outcome: 'failed', changed: false, checks, operations: [] };\n}\nexport function hasFailure(checks: readonly Check[]): boolean {\n  return checks.some(check => check.status === 'fail');\n}\nexport function exitCode(result: Result): number {\n  return result.outcome === 'failed' || hasFailure(result.checks) ? 1 : 0;\n}\n","import { lstat, readlink } from 'node:fs/promises';\nimport { warn, type Check } from './result.js';\n\nexport type CredentialPathState =\n  | { readonly kind: 'missing' }\n  | { readonly kind: 'file' }\n  | { readonly kind: 'symlink'; readonly target: string }\n  | { readonly kind: 'unsafe'; readonly fileType: string };\n\nexport interface CredentialDiagnostic {\n  /** Credential paths are diagnostic-only and must never become managed entries. */\n  readonly path: string;\n  readonly checks: readonly Check[];\n}\n\nfunction fileType(stat: Awaited<ReturnType<typeof lstat>>): string {\n  if (stat.isDirectory()) return 'directory';\n  if (stat.isSocket()) return 'socket';\n  if (stat.isFIFO()) return 'FIFO';\n  if (stat.isCharacterDevice()) return 'character device';\n  if (stat.isBlockDevice()) return 'block device';\n  return 'unsupported file type';\n}\n\n/** Inspect only path metadata. Credential contents and link targets are never followed. */\nexport async function inspectCredentialPath(path: string): Promise<CredentialPathState> {\n  let stat;\n  try {\n    stat = await lstat(path);\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === 'ENOENT') return { kind: 'missing' };\n    return { kind: 'unsafe', fileType: 'uninspectable path' };\n  }\n  if (stat.isFile()) return { kind: 'file' };\n  if (!stat.isSymbolicLink()) return { kind: 'unsafe', fileType: fileType(stat) };\n  try {\n    return { kind: 'symlink', target: await readlink(path) };\n  } catch {\n    return { kind: 'unsafe', fileType: 'unreadable symbolic link' };\n  }\n}\n\nfunction shellQuote(value: string): string {\n  return `'${value.replaceAll(\"'\", `'\"'\"'`)}'`;\n}\n\nexport function roleCommand(\n  environment: Readonly<Record<string, string>>,\n  executable: string,\n  args: readonly string[] = [],\n): string {\n  const variables = Object.entries(environment).map(([name, value]) => `${name}=${shellQuote(value)}`);\n  return [...variables, ...[executable, ...args].map(shellQuote)].join(' ');\n}\n\nexport interface PreservedCredentialInput {\n  readonly id: string;\n  readonly agent: string;\n  readonly role: string;\n  readonly path: string;\n  readonly state: Exclude<CredentialPathState, { readonly kind: 'missing' }>;\n  readonly login: string;\n  readonly status?: string;\n}\n\n/** Produce migration diagnostics for an existing path without claiming authentication. */\nexport function preservedCredentialCheck(input: PreservedCredentialInput): Check {\n  const status = input.status ? ` Check status with: ${input.status}.` : '';\n  if (input.state.kind === 'file') {\n    return warn(`${input.id}.diverged-file-preserve`,\n      `${input.agent} ${input.role} auth: configured structurally (diverged-file-preserve); a role-owned credential file exists at ${input.path} and is preserved. Token validity and freshness were not checked.`,\n      `If authentication fails, close that role and authenticate it again with: ${input.login}.${status}`);\n  }\n  if (input.state.kind === 'symlink') {\n    return warn(`${input.id}.legacy-shared-risk`,\n      `${input.agent} ${input.role} auth: legacy-shared-risk; a credential symlink at ${input.path} -> ${input.state.target} is preserved. Its target was not inspected, followed, or changed.`,\n      `Close that role. Remove only the legacy link with: rm -- ${shellQuote(input.path)}. Then create role-owned credentials with: ${input.login}.${status}`);\n  }\n  return warn(`${input.id}.manual-recovery`,\n    `${input.agent} ${input.role} auth: diverged-file-preserve/manual-recovery; ${input.path} is a ${input.state.fileType}, not a credential file. It is preserved without inspection.`,\n    `Close that role and inspect the path metadata yourself. Move or remove it manually only when safe, then authenticate with: ${input.login}.${status}`);\n}\n\nexport function presentNames(names: ReadonlySet<string>, supported: readonly string[]): string[] {\n  return supported.filter(name => names.has(name));\n}\n\nexport function configuredByNamesCheck(id: string, agent: string, role: string, names: readonly string[]): Check {\n  return warn(`${id}.configured-structurally`,\n    `${agent} ${role} auth: configured structurally; ${names.join(', ')} ${names.length === 1 ? 'is' : 'are'} present by name. Values, token validity, and freshness were not checked.`);\n}\n\nexport function ambientNamesCheck(id: string, agent: string, role: string, names: readonly string[]): Check {\n  return warn(`${id}.ambient-auth-unverifiable`,\n    `${agent} ${role} auth: ambient auth unverifiable; ${names.join(', ')} ${names.length === 1 ? 'is' : 'are'} present by name in the setup process. paseo-room does not copy credential values into providers, so availability to the Paseo-launched role, token validity, and freshness were not checked.`);\n}\n","import { homedir } from 'node:os';\nimport { join, resolve, sep } from 'node:path';\nimport { fail, type Check } from './result.js';\nimport type { AgentId, Role } from './roles.js';\n\nexport interface Options {\n  readonly roomHome?: string;\n  readonly codexHome?: string;\n  readonly claudeHome?: string;\n  readonly piHome?: string;\n  readonly codexBin?: string;\n  readonly claudeBin?: string;\n  readonly piBin?: string;\n  readonly paseoBin?: string;\n}\nexport interface Layout {\n  readonly home: string;\n  readonly roomHome: string;\n  readonly paseoHome: string;\n  readonly agentHome: Record<AgentId, string>;\n  /** Claude keeps legacy default state beside ~/.claude, but custom config state inside it. */\n  readonly claudeState: string;\n  readonly bin: Record<AgentId | 'paseo', string>;\n  /** The PATH executables are looked up on. Resolved here so nothing reaches for process.env. */\n  readonly searchPath: string;\n  /** Environment names only, for structural auth diagnostics without retaining values. */\n  readonly envNames: ReadonlySet<string>;\n}\n\nfunction pick(...candidates: readonly (string | undefined)[]): string {\n  for (const candidate of candidates) if (candidate?.trim()) return candidate.trim();\n  throw new Error('Could not determine HOME; pass explicit --room-home and --codex-home/--claude-home paths.');\n}\n\n/** Everything is derived from HOME; flags and environment only override defaults. */\nexport function resolveLayout(options: Options = {}, env: NodeJS.ProcessEnv = process.env): Layout {\n  const home = pick(env.HOME, homedir());\n  const claudeOverride = options.claudeHome?.trim() || env.CLAUDE_CONFIG_DIR?.trim() || undefined;\n  const claudeHome = resolve(pick(claudeOverride, join(home, '.claude')));\n  // Relative overrides resolve against the working directory, as a CLI flag should.\n  return {\n    home,\n    roomHome: resolve(pick(options.roomHome, env.PASEO_ROOM_HOME, join(home, '.paseo-room'))),\n    paseoHome: resolve(pick(env.PASEO_HOME, join(home, '.paseo'))),\n    agentHome: {\n      codex: resolve(pick(options.codexHome, env.CODEX_HOME, join(home, '.codex'))),\n      claude: claudeHome,\n      pi: resolve(pick(options.piHome, env.PI_CODING_AGENT_DIR, join(home, '.pi', 'agent'))),\n    },\n    claudeState: claudeOverride?.trim() ? join(claudeHome, '.claude.json') : join(home, '.claude.json'),\n    bin: {\n      codex: pick(options.codexBin, env.CODEX_BIN, 'codex'),\n      claude: pick(options.claudeBin, env.CLAUDE_BIN, 'claude'),\n      pi: pick(options.piBin, env.PI_BIN, 'pi'),\n      paseo: pick(options.paseoBin, env.PASEO_BIN, 'paseo'),\n    },\n    searchPath: env.PATH ?? '',\n    envNames: new Set(Object.keys(env)),\n  };\n}\n\n/** True when `path` is the root itself or sits underneath it. */\nexport function contains(root: string, path: string): boolean {\n  return path === root || path.startsWith(root.endsWith(sep) ? root : root + sep);\n}\n\n/** The room home must own its directory: no overlap with $HOME or a source agent home. */\nexport function layoutChecks(layout: Layout, agents: readonly AgentId[]): Check[] {\n  const checks: Check[] = [];\n  if (contains(layout.roomHome, layout.home)) {\n    checks.push(fail('room.home', `Refusing to use ${layout.roomHome} as the room home: it contains your home directory.`,\n      'Point --room-home at a dedicated directory, by default ~/.paseo-room.'));\n  }\n  for (const id of agents) {\n    const home = layout.agentHome[id];\n    if (contains(layout.roomHome, home) || contains(home, layout.roomHome)) {\n      checks.push(fail(`${id}.home`, `The ${id} home ${home} overlaps the room home ${layout.roomHome}.`,\n        `Pass --${id}-home pointing at your own ${id} configuration (this happens when setup runs inside a room seat).`));\n    }\n  }\n  return checks;\n}\n\nexport function roleHome(layout: Layout, agent: AgentId, role: Role): string {\n  return join(layout.roomHome, 'roles', agent, role);\n}\nexport function sharedRoom(layout: Layout): string {\n  return join(layout.roomHome, 'room');\n}\n","import { randomBytes } from 'node:crypto';\nimport { chmod, lstat, mkdir, readdir, readFile, readlink, rename, rm, symlink, unlink, writeFile } from 'node:fs/promises';\nimport type { Stats } from 'node:fs';\nimport { basename, dirname, join } from 'node:path';\nimport type { Operation } from './result.js';\n\n/** A directory the room creates but whose children it does not own. */\nexport interface DirEntry { readonly kind: 'dir'; readonly path: string }\n/** `once` writes the file only when absent: runtime state the agent owns after setup. */\nexport interface FileEntry { readonly kind: 'file'; readonly path: string; readonly content: string; readonly once?: true }\nexport interface LinkEntry { readonly kind: 'link'; readonly path: string; readonly target: string }\n/**\n * A managed path this room declares must not exist, so suppressing generated content\n * removes the stale file instead of leaving an older generation behind. Like every other\n * managed entry it only ever replaces the shape it writes: a regular file. Anything else\n * is refused rather than deleted.\n */\nexport interface AbsentEntry { readonly kind: 'absent'; readonly path: string }\n/**\n * A directory whose whole child inventory the room owns: names outside `children`\n * are removed so a generated projection cannot go stale. Ownership is declared here\n * and never inferred from an ordinary `dir`, so it stays limited to generated\n * projections such as Peer `skills` — never role homes or credential-bearing paths.\n */\nexport interface ManagedDirEntry {\n  readonly kind: 'managed-dir';\n  readonly path: string;\n  readonly children: readonly string[];\n  /** The single legacy shape this path may be migrated from: a symlink to this target. */\n  readonly legacyLink?: string;\n}\nexport type Entry = DirEntry | FileEntry | LinkEntry | ManagedDirEntry | AbsentEntry;\n\nconst DIR_MODE = 0o700;\nconst FILE_MODE = 0o600;\n\n/**\n * An existing path is not the shape the room manages, so replacing it would destroy\n * something this CLI does not own. Raised before any deletion.\n */\nexport class ManagedPathError extends Error {\n  readonly path: string;\n  readonly fix: string;\n  constructor(path: string, message: string, fix: string) {\n    super(message);\n    this.name = 'ManagedPathError';\n    this.path = path;\n    this.fix = fix;\n  }\n}\n\nconst MOVE_ASIDE = 'Check that path for role-owned credentials, move it aside manually, then run setup again.';\n\nfunction shape(stat: Stats): string {\n  if (stat.isSymbolicLink()) return 'a symbolic link';\n  if (stat.isDirectory()) return 'a directory';\n  if (stat.isFile()) return 'a regular file';\n  return 'a special file';\n}\n\nfunction refuse(path: string, expected: string, stat: Stats): never {\n  throw new ManagedPathError(path, `Refusing to replace ${path}: expected ${expected} but found ${shape(stat)}.`, MOVE_ASIDE);\n}\n\nfunction isMissing(error: unknown): boolean {\n  return error !== null && typeof error === 'object' && 'code' in error && error.code === 'ENOENT';\n}\n\nasync function lstatOrAbsent(path: string): Promise<Stats | undefined> {\n  try { return await lstat(path); } catch (error) {\n    if (isMissing(error)) return undefined;\n    throw error;\n  }\n}\n\n/** Names present under a managed directory that its declaration does not claim. */\nasync function staleChildren(entry: ManagedDirEntry): Promise<string[]> {\n  const declared = new Set(entry.children);\n  let names: string[];\n  try { names = await readdir(entry.path); } catch (error) {\n    if (isMissing(error)) return [];\n    throw error;\n  }\n  return names.filter(name => !declared.has(name));\n}\n\nasync function current(entry: Entry): Promise<'absent' | 'same' | 'different'> {\n  const stat = await lstatOrAbsent(entry.path);\n  // A declared-absent path is already correct when nothing is there.\n  if (entry.kind === 'absent') return stat ? 'different' : 'same';\n  if (!stat) return 'absent';\n  if (entry.kind === 'dir') return stat.isDirectory() ? 'same' : 'different';\n  if (entry.kind === 'managed-dir') {\n    if (!stat.isDirectory()) return 'different';\n    return (await staleChildren(entry)).length === 0 ? 'same' : 'different';\n  }\n  if (entry.kind === 'link') {\n    if (!stat.isSymbolicLink()) return 'different';\n    return await readlink(entry.path) === entry.target ? 'same' : 'different';\n  }\n  if (!stat.isFile()) return 'different';\n  if (entry.once) return 'same';\n  return await readFile(entry.path, 'utf8') === entry.content ? 'same' : 'different';\n}\n\n/** Everything lives under the room home, which this CLI owns outright. */\nexport async function planEntries(entries: readonly Entry[]): Promise<Operation[]> {\n  const operations: Operation[] = [];\n  for (const entry of entries) {\n    const state = await current(entry);\n    operations.push({\n      action: state === 'same' ? 'noop' : entry.kind === 'absent' ? 'remove' : state === 'absent' ? 'create' : 'update',\n      // A managed directory is still a directory to everything that reports operations.\n      kind: entry.kind === 'managed-dir' ? 'dir' : entry.kind === 'absent' ? 'file' : entry.kind,\n      target: entry.path,\n    });\n  }\n  return operations;\n}\n\n/** Unique so two runs, or a leftover from a failed one, can never collide. */\nfunction tempSibling(path: string): string {\n  return join(dirname(path), `.${basename(path)}.paseo-room-${randomBytes(8).toString('hex')}`);\n}\n\n/** A managed file or link may replace only an absent path or the same shape. */\nasync function assertReplaceable(entry: FileEntry | LinkEntry): Promise<void> {\n  const stat = await lstatOrAbsent(entry.path);\n  if (!stat) return;\n  if (entry.kind === 'link') {\n    if (!stat.isSymbolicLink()) refuse(entry.path, 'a symbolic link', stat);\n    return;\n  }\n  if (!stat.isFile()) refuse(entry.path, 'a regular file', stat);\n}\n\n/** Build beside the target and rename, so a reader never sees a half-written path. */\nasync function replaceAtomically(entry: FileEntry | LinkEntry): Promise<void> {\n  const temp = tempSibling(entry.path);\n  try {\n    if (entry.kind === 'link') await symlink(entry.target, temp);\n    else {\n      await writeFile(temp, entry.content, { mode: FILE_MODE });\n      await chmod(temp, FILE_MODE);\n    }\n    await rename(temp, entry.path);\n  } catch (error) {\n    await rm(temp, { force: true });\n    throw error;\n  }\n}\n\nasync function applyDirectory(path: string): Promise<void> {\n  const stat = await lstatOrAbsent(path);\n  if (stat && !stat.isDirectory()) refuse(path, 'a directory', stat);\n  await mkdir(path, { recursive: true, mode: DIR_MODE });\n}\n\n/**\n * Creates the projection, migrating the one declared legacy symlink by unlinking the\n * link alone, and removes only undeclared children that are links or files. An\n * unrecognized shape — including a real child directory — fails instead of being\n * deleted recursively.\n */\nasync function applyManagedDirectory(entry: ManagedDirEntry): Promise<void> {\n  const stat = await lstatOrAbsent(entry.path);\n  if (stat?.isSymbolicLink() === true) {\n    const target = await readlink(entry.path);\n    if (entry.legacyLink === undefined || target !== entry.legacyLink) {\n      throw new ManagedPathError(entry.path,\n        `Refusing to replace ${entry.path}: this room owns that directory, but it is a symbolic link to ${target}.`,\n        MOVE_ASIDE);\n    }\n    // Unlink the alias only; the operator directory it pointed at is never touched.\n    await unlink(entry.path);\n    await mkdir(entry.path, { recursive: true, mode: DIR_MODE });\n    return;\n  }\n  if (stat && !stat.isDirectory()) refuse(entry.path, 'a directory this room owns', stat);\n  await mkdir(entry.path, { recursive: true, mode: DIR_MODE });\n  if (!stat) return;\n  for (const name of await staleChildren(entry)) {\n    const child = join(entry.path, name);\n    const childStat = await lstatOrAbsent(child);\n    if (!childStat) continue;\n    if (!childStat.isFile() && !childStat.isSymbolicLink()) {\n      throw new ManagedPathError(child,\n        `Refusing to remove ${child}: this room manages ${entry.path} by name, but that stale child is ${shape(childStat)} rather than a generated file or link.`,\n        MOVE_ASIDE);\n    }\n    await rm(child, { force: true });\n  }\n}\n\n/**\n * Removes a suppressed managed file. Only a regular file is ever deleted: a directory,\n * link or special file at that path belongs to something this room does not own.\n */\nasync function removeManagedFile(path: string): Promise<void> {\n  const stat = await lstatOrAbsent(path);\n  if (!stat) return;\n  if (!stat.isFile()) refuse(path, 'a regular file this room generated', stat);\n  await rm(path, { force: true });\n}\n\n/** Rewrites only what differs, so a repeat run costs stats rather than writes. */\nexport async function applyEntries(entries: readonly Entry[]): Promise<void> {\n  for (const entry of entries) {\n    if (await current(entry) === 'same') continue;\n    if (entry.kind === 'dir') {\n      await applyDirectory(entry.path);\n      continue;\n    }\n    if (entry.kind === 'managed-dir') {\n      await applyManagedDirectory(entry);\n      continue;\n    }\n    if (entry.kind === 'absent') {\n      await removeManagedFile(entry.path);\n      continue;\n    }\n    await mkdir(dirname(entry.path), { recursive: true, mode: DIR_MODE });\n    await assertReplaceable(entry);\n    await replaceAtomically(entry);\n  }\n}\n\nexport async function exists(path: string): Promise<boolean> {\n  try { await lstat(path); return true; } catch { return false; }\n}\n\n/** Which of `names` exist under `home`, probed once for all roles that share them. */\nexport async function existingPaths(home: string, names: readonly string[]): Promise<string[]> {\n  const paths = names.map(name => join(home, name));\n  const present = await Promise.all(paths.map(exists));\n  return paths.filter((_, index) => present[index] === true);\n}\n\nexport async function readIfPresent(path: string): Promise<string | undefined> {\n  try { return await readFile(path, 'utf8'); } catch { return undefined; }\n}\n","export const ROLES = ['supervisor', 'lead', 'peer'] as const;\nexport type Role = (typeof ROLES)[number];\n\nexport const AGENT_IDS = ['codex', 'claude', 'pi'] as const;\nexport type AgentId = (typeof AGENT_IDS)[number];\n\n/** Supervisor and Lead orchestrate; Peer executes one brief and gets no room tools. */\nexport const ROLE_PASEO_TOOLS: Record<Role, boolean> = { supervisor: true, lead: true, peer: false };\n\n/**\n * Reasoning effort a seat starts at: Supervisor routes, Lead judges, Peer implements.\n * Deliberately short of the top option on either agent — `ultra` and `ultracode`\n * advertise automatic task delegation, which is a second control plane.\n */\nexport const ROLE_THINKING: Record<Role, string> = { supervisor: 'low', lead: 'high', peer: 'high' };\n\n/**\n * The top option on either agent, which Paseo advertises as maximum reasoning with automatic\n * task delegation. Whether it can still delegate once the room has closed the native\n * multi-agent paths is unverified, so selecting one is reported and never rejected.\n */\nexport const DELEGATING_THINKING = ['ultra', 'ultracode'] as const;\n\n/** Paseo profile appearance encodes the room role, independent of agent runtime. */\nexport const ROLE_ICON: Record<Role, string> = { supervisor: 'eye', lead: 'compass', peer: 'code' };\nexport const ROLE_COLOR: Record<Role, string> = { supervisor: 'violet', lead: 'blue', peer: 'emerald' };\n\n/** Paseo shows these to orchestrating agents, so each one says who may open the seat. */\nexport const ROLE_NOTES: Record<Role, string> = {\n  supervisor: 'Human-facing routing seat. Opened by Human, never by another agent; cwd, title and provider label do not prove room membership.',\n  lead: 'Sole project technical owner. When opening, copy every present profile launch field. Otherwise reuse only with exact current room Lead provider/mode/workspace evidence plus corroborated ownership. Cwd, title and provider label are not membership. Creates Peer seats only.',\n  peer: 'One fresh Lead brief. Open by copying every present profile launch field; require exact current room Peer provider/mode/workspace and paseo.parent-agent-id for its Lead. Cwd, title and provider label are not membership; no orchestration.',\n};\n\nexport function providerId(agent: AgentId, role: Role): string {\n  return `${agent}-${role}`;\n}\n/** Distinct from the provider id: a host may already have a profile by that name. */\nexport function profileId(agent: AgentId, role: Role): string {\n  return `room-${agent}-${role}`;\n}\nexport function providerLabel(agent: AgentId, role: Role): string {\n  const title = (value: string): string => value.charAt(0).toUpperCase() + value.slice(1);\n  return `${title(agent)} ${title(role)}`;\n}\n","import { join } from 'node:path';\nimport { z } from 'zod';\nimport { readIfPresent } from './fsops.js';\nimport type { Layout } from './layout.js';\nimport { AGENT_IDS, ROLES, type AgentId, type Role } from './roles.js';\n\nexport const MARKER = 'room.json';\n\nconst markerSchema = z.object({\n  version: z.string(),\n  agents: z.array(z.enum(AGENT_IDS)).min(1),\n  roles: z.array(z.enum(ROLES)).min(1),\n  /**\n   * The rendered contract generation this room was installed from. Optional because a room\n   * written before contract provenance existed has no digest, and such a marker must still\n   * parse rather than look like a foreign file.\n   */\n  contract: z.string().min(1).optional(),\n  /**\n   * False when this room deliberately suppressed the role contract in Claude's `CLAUDE.md`,\n   * leaving the plugin as its only Claude carrier. Optional and defaulted to true so a room\n   * written before the option existed keeps parsing and keeps its current behaviour.\n   */\n  claudeMemoryContract: z.boolean().optional(),\n});\nexport type Marker = z.infer<typeof markerSchema>;\n\n/** Deterministic on purpose: re-running setup must not show a phantom change. */\nexport function renderMarker(\n  version: string,\n  agents: readonly AgentId[],\n  roles: readonly Role[],\n  contract?: string,\n  claudeMemoryContract?: boolean,\n): string {\n  return JSON.stringify({\n    version, agents: [...agents], roles: [...roles],\n    ...(contract === undefined ? {} : { contract }),\n    // Written only when it differs from the default, so an unchanged room's marker is unchanged.\n    ...(claudeMemoryContract === false ? { claudeMemoryContract: false } : {}),\n  } satisfies Marker, null, 2) + '\\n';\n}\n\n/** Records what setup created, so verify and remove touch nothing else. */\nexport async function readMarker(layout: Layout): Promise<Marker | undefined> {\n  const source = await readIfPresent(join(layout.roomHome, MARKER));\n  if (source === undefined) return undefined;\n  try { return markerSchema.parse(JSON.parse(source)); } catch { return undefined; }\n}\n","import { execFile } from 'node:child_process';\nimport { access, constants } from 'node:fs/promises';\nimport { delimiter, isAbsolute, join, resolve } from 'node:path';\nimport { promisify } from 'node:util';\n\nconst run = promisify(execFile);\n\n/**\n * Resolve a command to an absolute executable path on `searchPath`.\n *\n * Deliberately not canonicalised. Version managers point a stable name at a\n * versioned file — `~/.local/bin/claude` at `versions/2.1.267`, mise's\n * `node/latest` at `node/24.15.0` — and the resolved target is deleted by the\n * next upgrade. Providers store this path, so following the link would pin every\n * seat to a binary that stops existing.\n */\nexport async function which(command: string, searchPath: string): Promise<string | undefined> {\n  const candidates = isAbsolute(command) || command.includes('/')\n    ? [resolve(command)]\n    : searchPath.split(delimiter).filter(Boolean).map(entry => join(entry, command));\n  for (const candidate of candidates) {\n    try {\n      await access(candidate, constants.X_OK);\n      return candidate;\n    } catch { /* try the next PATH entry */ }\n  }\n  return undefined;\n}\n\nexport interface CommandOutput {\n  readonly ok: boolean;\n  readonly stdout: string;\n}\n/** Bounded, shell-free probe. Failures are reported, never thrown. */\nexport async function probe(executable: string, args: readonly string[], env: NodeJS.ProcessEnv): Promise<CommandOutput> {\n  try {\n    const { stdout } = await run(executable, [...args], { env, timeout: 20_000, maxBuffer: 16 * 1024 * 1024, encoding: 'utf8' });\n    return { ok: true, stdout };\n  } catch {\n    return { ok: false, stdout: '' };\n  }\n}\n","import { spawn } from 'node:child_process';\nimport { constants } from 'node:os';\nimport { join } from 'node:path';\nimport { lstat } from 'node:fs/promises';\nimport { roleCommand } from './credentials.js';\nimport { resolveLayout, roleHome, type Options } from './layout.js';\nimport { MARKER, readMarker } from './room.js';\nimport { AGENT_IDS, ROLES, type AgentId, type Role } from './roles.js';\nimport { which } from './which.js';\n\nexport const AUTHENTICATION_GUIDE = 'AUTHENTICATION.md';\n/** A truthy empty override suppresses Pi's role-home APPEND_SYSTEM.md discovery. */\nexport const PI_AUTH_ARGV = ['--no-extensions', '--no-approve', '--append-system-prompt', ''] as const;\n\n/** A copy-paste-safe Pi login command that cannot inherit the caller repository cwd. */\nexport function piLoginCommand(rolePath: string, binary: string): string {\n  const command = roleCommand({ PI_CODING_AGENT_DIR: rolePath }, binary, PI_AUTH_ARGV);\n  return `cd ${roleCommand({}, rolePath)} && ${command}`;\n}\n\nexport interface LoginOutput {\n  readonly stdout: (text: string) => void;\n  readonly stderr: (text: string) => void;\n}\n\nexport interface LoginSpawnOptions {\n  readonly env: NodeJS.ProcessEnv;\n  readonly cwd?: string;\n  readonly shell: false;\n  readonly stdio: 'inherit';\n}\n\nexport interface LoginChild {\n  once(event: 'error', listener: (error: Error) => void): this;\n  once(event: 'close', listener: (code: number | null, signal: NodeJS.Signals | null) => void): this;\n}\n\nexport type LoginSpawner = (executable: string, argv: readonly string[], options: LoginSpawnOptions) => LoginChild;\n\nconst spawnLogin: LoginSpawner = (executable, argv, options) => spawn(executable, [...argv], options);\n\nfunction title(value: string): string {\n  return value.charAt(0).toUpperCase() + value.slice(1);\n}\n\nfunction loginInvocation(agent: AgentId, rolePath: string, binary: string): {\n  readonly env: Readonly<Record<string, string>>;\n  readonly argv: readonly string[];\n  readonly cwd?: string;\n  readonly command: string;\n} {\n  if (agent === 'codex') {\n    const env = { CODEX_HOME: rolePath };\n    const argv = ['login'] as const;\n    return { env, argv, command: roleCommand(env, binary, argv) };\n  }\n  if (agent === 'claude') {\n    const env = { CLAUDE_CONFIG_DIR: rolePath, CLAUDE_SECURESTORAGE_CONFIG_DIR: rolePath };\n    const argv = ['auth', 'login'] as const;\n    return { env, argv, command: roleCommand(env, binary, argv) };\n  }\n  const env = { PI_CODING_AGENT_DIR: rolePath };\n  const argv = PI_AUTH_ARGV;\n  return { env, argv, cwd: rolePath, command: piLoginCommand(rolePath, binary) };\n}\n\n/** Deterministic, secret-free instructions using setup's resolved executables. */\nexport function renderAuthenticationGuide(\n  roomHome: string,\n  binaries: Readonly<Partial<Record<AgentId, string>>>,\n  agents: readonly AgentId[],\n  roles: readonly Role[],\n): string {\n  const lines = [\n    '# Role authentication',\n    '',\n    'Setup and verify do not validate authentication, inspect credential contents, query keyrings,',\n    'or test token freshness. Run the command for each role you want to authenticate.',\n    '',\n  ];\n  for (const agent of agents) {\n    const binary = binaries[agent];\n    if (!binary) throw new Error(`Cannot render authentication guidance without the resolved ${agent} executable.`);\n    lines.push(`## ${agent === 'claude' ? 'Claude Code' : title(agent)}`, '');\n    for (const role of roles) {\n      const invocation = loginInvocation(agent, join(roomHome, 'roles', agent, role), binary);\n      lines.push(`### ${title(role)}`, '', '```sh', invocation.command, '```', '');\n      if (agent === 'pi') {\n        lines.push('Run `/login`, then exit Pi when authentication completes. This minimal interactive',\n          'login session starts in the role home, not the caller repository, disables extension discovery and',\n          'approval files, and suppresses role-home APPEND_SYSTEM.md discovery;',\n          'it is not equivalent to launching the room seat through Paseo.', '');\n      }\n    }\n  }\n  return `${lines.join('\\n').trimEnd()}\\n`;\n}\n\nasync function realDirectory(path: string): Promise<'directory' | 'missing' | 'unsafe'> {\n  try {\n    return (await lstat(path)).isDirectory() ? 'directory' : 'unsafe';\n  } catch (error) {\n    return (error as NodeJS.ErrnoException).code === 'ENOENT' ? 'missing' : 'unsafe';\n  }\n}\n\nfunction usageError(output: LoginOutput, detail: string): number {\n  output.stderr(`paseo-room auth login: ${detail}\\n`);\n  return 2;\n}\n\nexport interface LoginOptions extends Options {\n  readonly env?: NodeJS.ProcessEnv;\n  readonly isTTY: boolean;\n  readonly spawn?: LoginSpawner;\n}\n\n/** Launch one vendor's normal interactive login without touching credential stores itself. */\nexport async function loginRole(\n  agentValue: string,\n  roleValue: string,\n  options: LoginOptions,\n  output: LoginOutput,\n): Promise<number> {\n  const agent = AGENT_IDS.find(value => value === agentValue);\n  if (!agent) return usageError(output, `unknown agent \"${agentValue}\"; expected codex, claude, or pi.`);\n  const role = ROLES.find(value => value === roleValue);\n  if (!role) return usageError(output, `unknown role \"${roleValue}\"; expected supervisor, lead, or peer.`);\n  if (!options.isTTY) {\n    output.stderr('paseo-room auth login requires interactive stdin, stdout, and stderr terminals.\\n');\n    return 1;\n  }\n\n  const env = options.env ?? process.env;\n  const layout = resolveLayout(options, env);\n  if (await realDirectory(layout.roomHome) !== 'directory') {\n    output.stderr(`No room found at ${layout.roomHome}. Run: paseo-room setup --apply\\n`);\n    return 1;\n  }\n  try {\n    if (!(await lstat(join(layout.roomHome, MARKER))).isFile()) throw new Error('not a regular marker');\n  } catch {\n    output.stderr(`No valid room marker found at ${join(layout.roomHome, MARKER)}. Run: paseo-room setup --apply\\n`);\n    return 1;\n  }\n  const marker = await readMarker(layout);\n  if (!marker) {\n    output.stderr(`No valid room marker found at ${join(layout.roomHome, MARKER)}. Run: paseo-room setup --apply\\n`);\n    return 1;\n  }\n  if (!marker.agents.includes(agent)) {\n    output.stderr(`${title(agent)} is not selected in this room. Re-run setup with --agent ${agent} --apply.\\n`);\n    return 1;\n  }\n  if (!marker.roles.includes(role)) {\n    output.stderr(`${title(role)} is not installed for ${agent} in this room. Re-run setup --apply.\\n`);\n    return 1;\n  }\n  const rolePath = roleHome(layout, agent, role);\n  for (const path of [join(layout.roomHome, 'roles'), join(layout.roomHome, 'roles', agent), rolePath]) {\n    if (await realDirectory(path) !== 'directory') {\n      output.stderr(`The selected ${agent} ${role} role is not safely installed at ${rolePath}. Run: paseo-room setup --apply\\n`);\n      return 1;\n    }\n  }\n\n  const binary = await which(layout.bin[agent], layout.searchPath);\n  if (!binary) {\n    output.stderr(`${title(agent)} executable not found. Install it, or pass --${agent}-bin /path/to/${agent}.\\n`);\n    return 1;\n  }\n  const invocation = loginInvocation(agent, rolePath, binary);\n  if (agent === 'pi') {\n    output.stdout(`Starting a minimal interactive Pi login session for ${role} in its role home. Run /login, then exit Pi when authentication completes.\\n`);\n    output.stdout('Extensions and approval files are disabled, and role APPEND_SYSTEM.md discovery is suppressed.\\n');\n    output.stdout('This is not a room-equivalent Paseo launch.\\n');\n  } else {\n    output.stdout(`Starting ${agent === 'claude' ? 'Claude Code' : 'Codex'} login for ${role}.\\n`);\n  }\n\n  const childEnv = { ...env, ...invocation.env };\n  const launch = options.spawn ?? spawnLogin;\n  return new Promise(resolve => {\n    let settled = false;\n    const finish = (code: number): void => {\n      if (settled) return;\n      settled = true;\n      resolve(code);\n    };\n    let child: LoginChild;\n    try {\n      child = launch(binary, invocation.argv, {\n        env: childEnv,\n        ...(invocation.cwd === undefined ? {} : { cwd: invocation.cwd }),\n        shell: false,\n        stdio: 'inherit',\n      });\n    } catch (error) {\n      const detail = error instanceof Error ? error.message : 'unknown error';\n      output.stderr(`Could not start ${agent} login: ${detail}\\n`);\n      finish(1);\n      return;\n    }\n    child.once('error', error => {\n      output.stderr(`Could not start ${agent} login: ${error.message}\\n`);\n      finish(1);\n    });\n    child.once('close', (code, signal) => {\n      if (code !== null) {\n        finish(code);\n        return;\n      }\n      if (signal) {\n        const signalNumber = constants.signals[signal];\n        const mapped = typeof signalNumber === 'number' ? 128 + signalNumber : 1;\n        output.stderr(`${title(agent)} login ended from signal ${signal}; returning ${String(mapped)}.\\n`);\n        finish(mapped);\n        return;\n      }\n      output.stderr(`${title(agent)} login ended without an exit code or signal.\\n`);\n      finish(1);\n    });\n  });\n}\n","import { readFileSync } from 'node:fs';\n\nexport const PROMPT_ASSETS = {\n  documents: {\n    supervisor: { path: 'documents/supervisor.md', kind: 'head' },\n    lead: { path: 'documents/lead.md', kind: 'head' },\n    peer: { path: 'documents/peer.md', kind: 'head' },\n    workspace: { path: 'documents/workspace.md', kind: 'head' },\n  },\n  contract: {\n    humanAuthority: { path: 'contract/shared/human-authority.md', kind: 'section' },\n    workspaceProtocolPrecedence: { path: 'contract/shared-supervisor-lead/workspace-protocol-precedence.md', kind: 'section' },\n    evidenceAndEventWaiting: { path: 'contract/shared/evidence-and-event-waiting.md', kind: 'section' },\n    scopeAndUnrelatedWork: { path: 'contract/shared/scope-and-unrelated-work.md', kind: 'section' },\n    directiveIntegrity: { path: 'contract/supervisor/directive-integrity.md', kind: 'section' },\n    technicalNonInterference: { path: 'contract/supervisor/technical-non-interference.md', kind: 'section' },\n    leadDiscoveryAndRecovery: { path: 'contract/supervisor/lead-discovery-and-recovery.md', kind: 'section' },\n    observationAndAdvice: { path: 'contract/supervisor/observation-and-advice.md', kind: 'section' },\n    escalationBoundaries: { path: 'contract/supervisor/escalation-boundaries.md', kind: 'section' },\n    projectTechnicalOwnership: { path: 'contract/lead/project-technical-ownership.md', kind: 'section' },\n    movingWriteOwnership: { path: 'contract/lead/moving-write-ownership.md', kind: 'section' },\n    completePeerBrief: { path: 'contract/lead/complete-peer-brief.md', kind: 'section' },\n    challengeSignals: { path: 'contract/shared-lead-peer/challenge-signals.md', kind: 'section' },\n    technicalAcceptance: { path: 'contract/lead/technical-acceptance.md', kind: 'section' },\n    independentReview: { path: 'contract/lead/independent-review.md', kind: 'section' },\n    peerSeatLifecycle: { path: 'contract/lead/peer-seat-lifecycle.md', kind: 'section' },\n    boundedOutcome: { path: 'contract/peer/bounded-outcome.md', kind: 'section' },\n    independentJudgment: { path: 'contract/peer/independent-judgment.md', kind: 'section' },\n    assignmentScope: { path: 'contract/peer/assignment-scope.md', kind: 'section' },\n    noOrchestration: { path: 'contract/peer/no-orchestration.md', kind: 'section' },\n    reproducibleHandoff: { path: 'contract/peer/reproducible-handoff.md', kind: 'section' },\n    noSelfAcceptance: { path: 'contract/peer/no-self-acceptance.md', kind: 'section' },\n  },\n  workspace: {\n    topology: { path: 'workspace/topology.md', kind: 'section' },\n    verification: { path: 'workspace/verification.md', kind: 'section' },\n    review: { path: 'workspace/review.md', kind: 'section' },\n    repositoryConventions: { path: 'workspace/repository-conventions.md', kind: 'section' },\n  },\n  pi: {\n    communicationStyle: { path: 'pi/communication-style.md', kind: 'capsule' },\n    runtime: { path: 'pi/runtime.md', kind: 'capsule' },\n  },\n} as const;\n\nexport type PromptAssetGroup = keyof typeof PROMPT_ASSETS;\nexport type PromptAssetKey<Group extends PromptAssetGroup> = keyof (typeof PROMPT_ASSETS)[Group];\nexport type ContractKey = PromptAssetKey<'contract'>;\nexport type WorkspaceKey = PromptAssetKey<'workspace'>;\nexport type DocumentKey = PromptAssetKey<'documents'>;\nexport type PiPromptKey = PromptAssetKey<'pi'>;\n\ntype PromptAssetKind = 'head' | 'section' | 'capsule';\ninterface PromptAssetDefinition {\n  readonly path: string;\n  readonly kind: PromptAssetKind;\n}\n\nexport class PromptAssetError extends Error {\n  readonly logicalAsset: string;\n  readonly assetUrl: URL;\n\n  constructor(logicalAsset: string, assetUrl: URL, detail: string, options?: ErrorOptions) {\n    super(`Prompt asset ${logicalAsset} at ${assetUrl.pathname} ${detail} Reinstall paseo-room and try again.`, options);\n    this.name = 'PromptAssetError';\n    this.logicalAsset = logicalAsset;\n    this.assetUrl = assetUrl;\n  }\n}\n\nconst cache = new Map<string, string>();\n\nfunction definition<Group extends PromptAssetGroup>(\n  group: Group,\n  key: PromptAssetKey<Group>,\n): PromptAssetDefinition {\n  const assets = PROMPT_ASSETS[group] as Readonly<Record<string, PromptAssetDefinition>>;\n  const asset = assets[String(key)];\n  if (asset === undefined) throw new Error(`Unknown prompt asset ${group}.${String(key)}.`);\n  return asset;\n}\n\nfunction headingCount(source: string, level: 1 | 2): number {\n  const prefix = level === 1 ? '# ' : '## ';\n  return source.split('\\n').filter(line => line.startsWith(prefix)).length;\n}\n\nfunction validateHeadOrCapsule(source: string, kind: 'head' | 'capsule'): string {\n  const trimmed = source.trimEnd();\n  if (!trimmed.trim()) throw new Error('is empty.');\n  const firstLine = trimmed.split('\\n', 1)[0] ?? '';\n  if (!/^# \\S.*$/.test(firstLine) || headingCount(trimmed, 1) !== 1) {\n    throw new Error(`${kind === 'head' ? 'document head' : 'Pi capsule'} must begin with exactly one H1 heading.`);\n  }\n  return trimmed;\n}\n\nfunction validateSection(source: string): string {\n  const trimmed = source.trimEnd();\n  if (!trimmed.trim()) throw new Error('is empty.');\n  const lines = trimmed.split('\\n');\n  const heading = lines.shift() ?? '';\n  if (!/^## \\S.*$/.test(heading) || headingCount(trimmed, 2) !== 1) {\n    throw new Error('section must begin with exactly one H2 heading.');\n  }\n  if (lines.some(line => /^#{1,6}\\s/.test(line))) {\n    throw new Error('section must not contain additional Markdown headings.');\n  }\n  const body = lines.join('\\n').trim();\n  if (!body) throw new Error('section must contain at least one non-empty statement.');\n  const statements = body.split(/\\n\\s*\\n/).map(statement =>\n    statement.split('\\n').map(line => line.trim()).join(' '),\n  );\n  if (statements.some(statement => !statement)) {\n    throw new Error('section must contain only non-empty statements.');\n  }\n  return `${heading}\\n${statements.map(statement => `- ${statement}`).join('\\n')}`;\n}\n\nexport function loadPromptAsset<Group extends PromptAssetGroup>(\n  group: Group,\n  key: PromptAssetKey<Group>,\n): string {\n  const logicalAsset = `${group}.${String(key)}`;\n  const cached = cache.get(logicalAsset);\n  if (cached !== undefined) return cached;\n\n  const asset = definition(group, key);\n  const assetUrl = new URL(`./prompts/${asset.path}`, import.meta.url);\n  try {\n    const source = readFileSync(assetUrl, 'utf8');\n    if (source.includes('\\uFFFD')) throw new Error('is not valid UTF-8 text.');\n    const validated = asset.kind === 'section'\n      ? validateSection(source)\n      : validateHeadOrCapsule(source, asset.kind);\n    cache.set(logicalAsset, validated);\n    return validated;\n  } catch (error) {\n    if (error instanceof PromptAssetError) throw error;\n    const detail = error instanceof Error ? error.message : 'could not be read.';\n    throw new PromptAssetError(logicalAsset, assetUrl, detail, { cause: error });\n  }\n}\n","import { createHash } from 'node:crypto';\nimport { ROLES, type Role } from '../roles.js';\nimport {\n  loadPromptAsset,\n  type ContractKey,\n  type WorkspaceKey,\n} from './prompts.js';\n\nexport type InstructionKind = Role | 'workspace';\n\n// Every role carries the same authority contract; Workspace Protocol Precedence is not part\n// of it. That layer reaches only the seats that read a repository's protocol: the model gives\n// it to Lead, and to Supervisor when auditing, while Peer receives the constraints that bear\n// on its brief quoted into the brief. Telling Peer about the file is the broadcast the model\n// exists to avoid.\nconst AUTHORITY_KEYS = [\n  'humanAuthority',\n  'evidenceAndEventWaiting',\n  'scopeAndUnrelatedWork',\n] as const satisfies readonly ContractKey[];\n\nconst PROTOCOL_READER_KEYS = [\n  'humanAuthority',\n  'workspaceProtocolPrecedence',\n  'evidenceAndEventWaiting',\n  'scopeAndUnrelatedWork',\n] as const satisfies readonly ContractKey[];\n\nconst SHARED_KEYS = {\n  supervisor: PROTOCOL_READER_KEYS,\n  lead: PROTOCOL_READER_KEYS,\n  peer: AUTHORITY_KEYS,\n} as const satisfies Record<Role, readonly ContractKey[]>;\n\nconst ROLE_KEYS = {\n  supervisor: [\n    'directiveIntegrity',\n    'technicalNonInterference',\n    'leadDiscoveryAndRecovery',\n    'observationAndAdvice',\n    'escalationBoundaries',\n  ],\n  lead: [\n    'projectTechnicalOwnership',\n    'movingWriteOwnership',\n    'completePeerBrief',\n    'challengeSignals',\n    'technicalAcceptance',\n    'independentReview',\n    'peerSeatLifecycle',\n  ],\n  // Peer needs Challenge Signals as well as its own obligations.\n  peer: [\n    'challengeSignals',\n    'boundedOutcome',\n    'independentJudgment',\n    'assignmentScope',\n    'noOrchestration',\n    'reproducibleHandoff',\n    'noSelfAcceptance',\n  ],\n} as const satisfies Record<Role, readonly ContractKey[]>;\n\nconst ALL_PROTOCOL_KEYS = [\n  'topology',\n  'verification',\n  'review',\n  'repositoryConventions',\n] as const satisfies readonly WorkspaceKey[];\n\n// The workspace layer belongs to the seats that own workflow: Lead decides it and\n// Supervisor audits it. Peer receives none of it, so its attention stays on one brief and\n// the brief remains the only channel for repository-local constraints.\nconst PROTOCOL_KEYS = {\n  supervisor: ALL_PROTOCOL_KEYS,\n  lead: ALL_PROTOCOL_KEYS,\n  peer: [],\n} as const satisfies Record<Role, readonly WorkspaceKey[]>;\n\nexport function instructionKeys(role: Role): readonly ContractKey[] {\n  // Every role carries the shared authority contract plus its own obligations.\n  return [...SHARED_KEYS[role], ...ROLE_KEYS[role]];\n}\n\nexport function protocolKeys(role: Role): readonly WorkspaceKey[] {\n  return PROTOCOL_KEYS[role];\n}\n\nfunction protocol(keys: readonly WorkspaceKey[]): string[] {\n  // A preface introducing sections that follow is noise when none of them do.\n  if (keys.length === 0) return [];\n  return [\n    loadPromptAsset('documents', 'workspace'),\n    ...keys.map(key => loadPromptAsset('workspace', key)),\n  ];\n}\n\nexport function renderInstructions(kind: InstructionKind): string {\n  if (kind === 'workspace') return protocol(ALL_PROTOCOL_KEYS).join('\\n\\n') + '\\n';\n  return [\n    loadPromptAsset('documents', kind),\n    ...instructionKeys(kind).map(key => loadPromptAsset('contract', key)),\n    ...protocol(protocolKeys(kind)),\n  ].join('\\n\\n') + '\\n';\n}\n\n/** Every document the room composes, in one fixed order, so a digest over them is stable. */\nexport const INSTRUCTION_KINDS = [...ROLES, 'workspace'] as const satisfies readonly InstructionKind[];\n\n/**\n * Identifies the rendered contract generation a room was installed from.\n *\n * Derived from the composed documents rather than the package version: two packages that\n * render identical contracts are the same generation, and editing one prompt asset without a\n * release still changes the digest. Truncated because this is provenance an operator compares\n * by eye, not a security claim.\n */\nexport function contractDigest(): string {\n  const hash = createHash('sha256');\n  for (const kind of INSTRUCTION_KINDS) hash.update(`${kind}\\u0000${renderInstructions(kind)}\\u0000`);\n  return `sha256:${hash.digest('hex').slice(0, 16)}`;\n}\n","import { fail, type Check } from '../result.js';\n\n/**\n * The bounded heuristic: `paseo` as a whole identifier or path token, including a\n * lower-to-upper camel-case boundary. It is not embedded in a larger word, so `paseo`,\n * `paseo-mcp`, `/opt/paseo/bin/serve` and `paseoRoom` match while `grapaseo`,\n * `paseonaut` and `PASEONAUT` do not.\n *\n * This recognizes an obvious configuration collision and says why it matched. It is not a\n * scanner for a hostile or obfuscated endpoint, and matching nothing proves nothing.\n */\nconst PASEO_TOKEN = /(?<![\\p{L}\\p{N}])[Pp][Aa][Ss][Ee][Oo](?=$|[^\\p{L}\\p{N}]|\\p{Lu}\\p{Ll})/u;\n\n/** Declaration fields that name what a server runs or connects to. */\nconst VALUE_FIELDS = ['command', 'url', 'serverUrl', 'httpUrl', 'endpoint'] as const;\n/** Declaration fields that carry a list of such values. */\nconst LIST_FIELDS = ['args'] as const;\n\n/** One recognizable declaration, kept so the diagnostic can state its own evidence. */\nexport interface McpMatch {\n  readonly server: string;\n  /** `name`, or the declaration field that carried the token. */\n  readonly field: 'name' | (typeof VALUE_FIELDS)[number] | (typeof LIST_FIELDS)[number];\n  readonly value: string;\n}\n\nfunction asRecord(value: unknown): Record<string, unknown> | undefined {\n  return value !== null && typeof value === 'object' && !Array.isArray(value)\n    ? (value as Record<string, unknown>)\n    : undefined;\n}\n\n/** An MCP declaration map exactly as an already-parsed config carries it. */\nexport function serverTable(value: unknown): Record<string, unknown> {\n  return asRecord(value) ?? {};\n}\n\n/** Names one side declares and the other does not, in both directions. */\nexport interface NameDivergence {\n  /** Declared for the operator but absent from the compared side. */\n  readonly missing: readonly string[];\n  /** Declared by the compared side but no longer by the operator. */\n  readonly extra: readonly string[];\n}\n\n/**\n * Compare two declaration maps by server name alone. Used for seed-once runtime state the\n * room must not synchronize: a name difference is reportable, and nothing about what those\n * servers run is compared, copied, or written back.\n */\nexport function serverNameDivergence(\n  operator: Readonly<Record<string, unknown>>,\n  compared: Readonly<Record<string, unknown>>,\n): NameDivergence | undefined {\n  const operatorNames = new Set(Object.keys(operator));\n  const comparedNames = new Set(Object.keys(compared));\n  const missing = [...operatorNames].filter(name => !comparedNames.has(name)).sort();\n  const extra = [...comparedNames].filter(name => !operatorNames.has(name)).sort();\n  return missing.length === 0 && extra.length === 0 ? undefined : { missing, extra };\n}\n\n/**\n * The declaration maps inside a JSON configuration file, read through the named keys only:\n * nothing else in the document — history, credentials, runtime state — is inspected.\n *\n * Every named key is merged, in the order given, because an agent that accepts more than one\n * key loads all of them: stopping at the first table would let a benign one hide a Paseo\n * declaration under a later key. A name declared twice keeps the earlier key's entry at its\n * own name and the later one under a key-qualified name, so no declaration is lost. Invalid\n * JSON, a non-object root, or a named declaration value that is not an object is rejected:\n * an unparseable source cannot truthfully be reported as inspected and clean.\n */\nexport function jsonServerTable(source: string | undefined, keys: readonly string[]): Record<string, unknown> {\n  if (source === undefined) return {};\n  const root = asRecord(JSON.parse(source));\n  if (!root) throw new TypeError('MCP configuration must be a JSON object.');\n  const merged: Record<string, unknown> = {};\n  for (const key of keys) {\n    const value = root[key];\n    if (value === undefined) continue;\n    const table = asRecord(value);\n    if (!table) throw new TypeError(`${key} must be a JSON object.`);\n    for (const [server, declaration] of Object.entries(table)) {\n      merged[server in merged ? `${server} (${key})` : server] = declaration;\n    }\n  }\n  return merged;\n}\n\n/** Every recognizably Paseo-related declaration, with the evidence that recognized it. */\nexport function detectPaseoServers(servers: Readonly<Record<string, unknown>>): McpMatch[] {\n  const matches: McpMatch[] = [];\n  for (const [server, declaration] of Object.entries(servers)) {\n    if (PASEO_TOKEN.test(server)) matches.push({ server, field: 'name', value: server });\n    const fields = asRecord(declaration);\n    if (!fields) continue;\n    for (const field of VALUE_FIELDS) {\n      const value = fields[field];\n      if (typeof value === 'string' && PASEO_TOKEN.test(value)) matches.push({ server, field, value });\n    }\n    for (const field of LIST_FIELDS) {\n      const list = fields[field];\n      if (!Array.isArray(list)) continue;\n      for (const item of list) {\n        if (typeof item === 'string' && PASEO_TOKEN.test(item)) matches.push({ server, field, value: item });\n      }\n    }\n  }\n  return matches;\n}\n\nfunction evidence(match: McpMatch): string {\n  return match.field === 'name' ? `${match.server} (server name)` : `${match.server} (${match.field}: ${match.value})`;\n}\n\n/**\n * Paseo is the room's only control plane, so a Peer-visible MCP server that looks like a\n * second one fails before anything is applied. The room never edits operator configuration:\n * the fix names the source file and leaves the decision with the operator.\n */\nexport function paseoMcpCheck(id: string, path: string, servers: Readonly<Record<string, unknown>>): Check | undefined {\n  const matches = detectPaseoServers(servers);\n  if (matches.length === 0) return undefined;\n  return fail(id,\n    `${path} declares MCP servers that are recognizably Paseo-related: ${matches.map(evidence).join('; ')}.`,\n    `Remove or rename those servers in ${path} so no room seat reaches Paseo outside its own seat, then run setup again. paseo-room never edits your MCP configuration, and this name check is a bounded heuristic rather than a sandbox.`);\n}\n","import { readdir } from 'node:fs/promises';\nimport { join } from 'node:path';\nimport type { Entry } from '../fsops.js';\nimport type { Role } from '../roles.js';\n\n/** The one operator resource Peer receives as an exact projection rather than an alias. */\nexport const SKILLS = 'skills';\n\n/** A room-owned orchestration skill: advertised to seats that orchestrate, never to Peer. */\nfunction isPaseoSkill(name: string): boolean {\n  return name.toLowerCase().startsWith('paseo');\n}\n\n/**\n * Peer has no room tools, so the room also stops loading orchestration surfaces into it.\n * This closes known configuration paths — Peer still has a shell, so it is not containment.\n */\nfunction receivesExecutableResources(role: Role): boolean {\n  return role !== 'peer';\n}\n\n/** Names under the operator skills directory; a missing directory is an empty projection. */\nasync function skillNames(path: string): Promise<string[]> {\n  try { return (await readdir(path)).filter(name => !isPaseoSkill(name)).sort(); } catch (error) {\n    if (error !== null && typeof error === 'object' && 'code' in error && error.code === 'ENOENT') return [];\n    throw error;\n  }\n}\n\nexport interface RoleResourceInput {\n  readonly role: Role;\n  /** The role home every generated alias is created inside. */\n  readonly target: string;\n  /** The operator agent home the shared resources are read from. */\n  readonly home: string;\n  /** Shared resource basenames in the adapter's declared order, present or not. */\n  readonly names: readonly string[];\n  /** Absolute operator paths that exist, probed once for every role. */\n  readonly shared: readonly string[];\n  /** Basenames whose contents can run code, withheld from Peer. */\n  readonly executable: readonly string[];\n}\n\n/**\n * Supervisor and Lead keep one alias per shared operator resource that exists, so they never\n * gain a broken link. Peer receives no executable resource, and its `skills` becomes an exact\n * managed directory of links to the non-`paseo*` operator skills, so an inventory change\n * cannot leave it silently stale.\n *\n * Peer's projection is declared even when the operator deleted the whole skills directory:\n * an empty managed directory is what lets a later run remove yesterday's child links, or\n * migrate the legacy whole-directory symlink, instead of leaving them unreconciled.\n */\nexport async function roleResourceEntries(input: RoleResourceInput): Promise<Entry[]> {\n  const present = new Set(input.shared);\n  const executable = new Set(input.executable);\n  const entries: Entry[] = [];\n  for (const name of input.names) {\n    const path = join(input.home, name);\n    const alias = join(input.target, name);\n    if (!receivesExecutableResources(input.role)) {\n      if (executable.has(name)) continue;\n      if (name === SKILLS) {\n        const children = present.has(path) ? await skillNames(path) : [];\n        entries.push({ kind: 'managed-dir', path: alias, children, legacyLink: path });\n        for (const child of children) entries.push({ kind: 'link', path: join(alias, child), target: join(path, child) });\n        continue;\n      }\n    }\n    if (!present.has(path)) continue;\n    entries.push({ kind: 'link', path: alias, target: path });\n  }\n  return entries;\n}\n","import { readFile } from 'node:fs/promises';\nimport { join } from 'node:path';\nimport {\n  ambientNamesCheck, configuredByNamesCheck, inspectCredentialPath, presentNames, preservedCredentialCheck,\n  roleCommand, type CredentialDiagnostic,\n} from '../credentials.js';\nimport type { Layout } from '../layout.js';\nimport { roleHome } from '../layout.js';\nimport type { Entry } from '../fsops.js';\nimport { existingPaths, exists, readIfPresent } from '../fsops.js';\nimport { fail, pass, warn, type Check } from '../result.js';\nimport type { Role } from '../roles.js';\nimport { renderInstructions } from '../room/instructions.js';\nimport { which } from '../which.js';\nimport { jsonServerTable, paseoMcpCheck, serverNameDivergence, type NameDivergence } from './mcp.js';\nimport { roleResourceEntries } from './resources.js';\nimport type { Agent, AgentPlan, BuildOptions } from './types.js';\n\n/** Operator-authored resources shared by reference; native agent definitions stay out. */\nconst SHARED = [\n  'skills', 'plugins', 'commands', 'hooks', 'rules',\n  'output-styles', 'keybindings.json', 'themes',\n] as const;\n/** These carry executable prompts, plugin code, and hook programs: never shared with Peer. */\nconst EXECUTABLE = ['plugins', 'commands', 'hooks'] as const;\n/** Claude keeps personal MCP declarations under this one key of its runtime state. */\nconst MCP_KEY = 'mcpServers';\nconst AUTH_ENV = [\n  'ANTHROPIC_AUTH_TOKEN', 'ANTHROPIC_API_KEY', 'CLAUDE_CODE_OAUTH_TOKEN',\n  'CLAUDE_CODE_USE_BEDROCK', 'CLAUDE_CODE_USE_VERTEX', 'CLAUDE_CODE_USE_FOUNDRY',\n] as const;\nconst CONTROL_PLANE_ENV = {\n  CLAUDE_CODE_DISABLE_AGENT_VIEW: '1',\n  CLAUDE_CODE_DISABLE_WORKFLOWS: '1',\n} as const;\nconst SECURE_STORAGE_ENV = 'CLAUDE_SECURESTORAGE_CONFIG_DIR';\n/** Copied once so a fresh role home does not re-run interactive onboarding. */\nconst SEEDED_KEYS = ['hasCompletedOnboarding', 'theme', 'installMethod', 'userID', MCP_KEY] as const;\n\nfunction asObject(value: unknown): Record<string, unknown> {\n  return value !== null && typeof value === 'object' && !Array.isArray(value) ? { ...value } : {};\n}\n/** Any unreadable or non-object source is simply an empty starting point. */\nfunction readObject(source: string | undefined): Record<string, unknown> {\n  try { return asObject(source === undefined ? {} : JSON.parse(source)); } catch { return {}; }\n}\n\n/** Read optional runtime state, but do not turn an inspection failure into \"no servers\". */\nasync function readStateIfPresent(path: string): Promise<string | undefined> {\n  try { return await readFile(path, 'utf8'); } catch (error) {\n    if (error !== null && typeof error === 'object' && 'code' in error && error.code === 'ENOENT') return undefined;\n    throw error;\n  }\n}\n\n/** Keep operator configuration while closing non-Paseo inbound coordination. */\nexport function renderRoleSettings(source: string | undefined, role: Role, secureStorageDir?: string): string {\n  const settings = readObject(source);\n  // Claude applies settings.env after the launch environment, so repeat these\n  // provider pins here after operator values to make them effective.\n  settings.env = {\n    ...asObject(settings.env),\n    ...CONTROL_PLANE_ENV,\n    PASEO_ROOM_ROLE: role,\n    ...(secureStorageDir === undefined ? {} : { [SECURE_STORAGE_ENV]: secureStorageDir }),\n  };\n  // These restrictive settings cannot be weakened by another settings scope.\n  settings.disableAgentView = true;\n  settings.disableWorkflows = true;\n  settings.crossSessionInbound = 'refuse';\n  return JSON.stringify(settings, null, 2) + '\\n';\n}\n\nexport function renderRoleState(source: string | undefined): string {\n  const root = readObject(source);\n  const state: Record<string, unknown> = { hasCompletedOnboarding: true };\n  for (const key of SEEDED_KEYS) if (key in root) state[key] = root[key];\n  return JSON.stringify(state, null, 2) + '\\n';\n}\n\n/**\n * Preserve the operator's global memory, then add the stronger room role contract.\n *\n * With the contract suppressed, the file carries the operator's memory alone: the plugin is\n * then the room's only Claude contract carrier. Returning `undefined` for an operator with no\n * global memory keeps the room from writing a file whose whole content it just removed.\n */\nexport function renderRoleMemory(source: string | undefined, role: Role, contract = true): string | undefined {\n  const operator = source?.trim();\n  if (!contract) return operator ? `${operator}\\n` : undefined;\n  return operator ? `${operator}\\n\\n${renderInstructions(role)}` : renderInstructions(role);\n}\n\n/** Detect only configuration names; never inspect environment or settings values. */\nexport function claudeAuthMethodNames(settingsSource: string | undefined, envNames: ReadonlySet<string>): string[] {\n  const settings = readObject(settingsSource);\n  const settingsEnv = asObject(settings.env);\n  const names = new Set(presentNames(envNames, AUTH_ENV));\n  for (const name of AUTH_ENV) if (Object.hasOwn(settingsEnv, name)) names.add(name);\n  if (Object.hasOwn(settings, 'apiKeyHelper')) names.add('apiKeyHelper');\n  return [...names];\n}\n\nexport async function claudeCredentialDiagnostic(\n  layout: Layout,\n  role: Role,\n  settingsSource: string | undefined,\n  platform: NodeJS.Platform = process.platform,\n  binary = 'claude',\n): Promise<CredentialDiagnostic> {\n  const home = roleHome(layout, 'claude', role);\n  const path = join(home, '.credentials.json');\n  const roleEnvironment = { CLAUDE_CONFIG_DIR: home, [SECURE_STORAGE_ENV]: home };\n  const login = roleCommand(roleEnvironment, binary, ['auth', 'login']);\n  const status = roleCommand(roleEnvironment, binary, ['auth', 'status']);\n  const state = await inspectCredentialPath(path);\n  const id = `claude.auth.${role}`;\n  if (state.kind !== 'missing') {\n    return { path, checks: [preservedCredentialCheck({ id, agent: 'Claude', role, path, state, login, status })] };\n  }\n  const configured = claudeAuthMethodNames(settingsSource, new Set());\n  if (configured.length > 0) return { path, checks: [configuredByNamesCheck(id, 'Claude', role, configured)] };\n  const ambient = presentNames(layout.envNames, AUTH_ENV);\n  if (ambient.length > 0) return { path, checks: [ambientNamesCheck(id, 'Claude', role, ambient)] };\n  if (platform === 'darwin') {\n    return { path, checks: [{\n      id: `${id}.native-keyring-unverifiable`, status: 'warn',\n      message: `Claude ${role} auth: native-keyring unverifiable; the current runtime's secure-storage location is pinned to this role home, but no Keychain entry was queried and older runtime behavior was not assumed. Token validity and freshness were not checked.`,\n      fix: `Authenticate this role with: ${login}. If that subcommand is unavailable, launch ${roleCommand(roleEnvironment, binary)} and run /login. Check status with: ${status}.`,\n    }] };\n  }\n  return { path, checks: [{\n    id: `${id}.login-required`, status: 'warn',\n    message: `Claude ${role} auth: login-required; no role-owned .credentials.json or configured environment/static auth method was detected. Authentication was not attempted.`,\n    fix: `Authenticate this role with: ${login}. If that subcommand is unavailable, launch ${roleCommand(roleEnvironment, binary)} and run /login. Check status with: ${status}.`,\n  }] };\n}\n\n/**\n * `.claude.json` is seeded once and runtime-owned afterwards, so a later change to the\n * operator's own MCP inventory never reaches a role home. That is reported rather than\n * repaired: rewriting the file would discard whatever the runtime has since stored in it.\n * Only declared names are compared — no command, URL, argument, credential or history value\n * is read for this check.\n */\nfunction mcpDriftCheck(role: Role, home: string, path: string, divergence: NameDivergence): Check {\n  const parts = [\n    ...(divergence.missing.length === 0 ? [] : [`not declared for this role: ${divergence.missing.join(', ')}`]),\n    ...(divergence.extra.length === 0 ? [] : [`declared only for this role: ${divergence.extra.join(', ')}`]),\n  ];\n  return warn(`claude.mcp.drift.${role}`,\n    `Claude ${role} MCP server names differ from your own Claude MCP servers (${parts.join('; ')}). ${path} is seeded once and owned by Claude afterwards, so paseo-room did not change it; only server names were compared.`,\n    `If this role should have the same servers, add them with: CLAUDE_CONFIG_DIR=${home} claude mcp add ... — or delete ${path} and run setup --apply to reseed it from your current Claude state, which discards that role's other runtime state.`);\n}\n\nexport const claudeAgent: Agent = {\n  id: 'claude',\n  label: 'Claude Code',\n  homeEnv: 'CLAUDE_CONFIG_DIR',\n  // Agent View and dynamic workflows have entry points beyond model tool calls.\n  providerEnv: CONTROL_PLANE_ENV,\n  defaultModeId: 'bypassPermissions',\n  // Keep the legacy Task name and block current native orchestration,\n  // shared task/cron coordination, and cross-session paths. Paseo alone owns\n  // agent lifecycle and coordination.\n  pins: {\n    disallowedTools: [\n      'Task', 'Agent', 'Workflow', 'ListAgents', 'SendMessage', 'TeamCreate', 'TeamDelete',\n      'TaskCreate', 'TaskGet', 'TaskList', 'TaskUpdate',\n      'CronCreate', 'CronDelete', 'CronList',\n    ],\n  },\n  async build(layout: Layout, roles: readonly Role[], options: BuildOptions = {}): Promise<AgentPlan> {\n    const home = layout.agentHome.claude;\n    const binary = await which(layout.bin.claude, layout.searchPath);\n    if (!binary) {\n      return { entries: [], checks: [fail('claude.bin', 'Claude Code executable not found.', 'Install Claude Code, or pass --claude-bin /path/to/claude.')] };\n    }\n    if (!(await exists(home))) {\n      return { entries: [], checks: [fail('claude.home', `No Claude config directory at ${home}.`, 'Run claude once to initialise it, or pass --claude-home.')] };\n    }\n    const checks: Check[] = [pass('claude.home', `Claude Code found at ${binary} using ${home}.`)];\n\n    const settingsSource = await readIfPresent(join(home, 'settings.json'));\n    const memorySource = await readIfPresent(join(home, 'CLAUDE.md'));\n    let stateSource: string | undefined;\n    let operatorServers: Record<string, unknown>;\n    try {\n      stateSource = await readStateIfPresent(layout.claudeState);\n      // `.claude.json` is runtime-owned after the seed write, so only this one key is interpreted.\n      operatorServers = jsonServerTable(stateSource, [MCP_KEY]);\n    } catch {\n      return { entries: [], checks: [...checks, fail('claude.mcp',\n        `Could not read ${layout.claudeState} as a JSON object, so its MCP declarations could not be inspected.`,\n        'Make your Claude state file readable and fix its JSON structure, then run setup again.')] };\n    }\n    const stateConflict = paseoMcpCheck('claude.mcp', layout.claudeState, operatorServers);\n    if (stateConflict) return { entries: [], checks: [...checks, stateConflict] };\n    const shared = await existingPaths(home, SHARED);\n    const entries: Entry[] = [];\n    const credentials: CredentialDiagnostic[] = [];\n    const providerEnv: Partial<Record<Role, Readonly<Record<string, string>>>> = {};\n    // Held back so a hard conflict found in a later role is never preceded by advice.\n    const drift: Check[] = [];\n    for (const role of roles) {\n      const target = roleHome(layout, 'claude', role);\n      const statePath = join(target, '.claude.json');\n      // A seeded role home keeps its own copy, so its declarations are checked as well.\n      let roleStateSource: string | undefined;\n      let roleServers: Record<string, unknown>;\n      try {\n        roleStateSource = await readStateIfPresent(statePath);\n        roleServers = jsonServerTable(roleStateSource, [MCP_KEY]);\n      } catch {\n        return { entries: [], checks: [...checks, fail(`claude.mcp.${role}`,\n          `Could not read ${statePath} as a JSON object, so its MCP declarations could not be inspected.`,\n          'Make that role-owned Claude state file readable and fix its JSON structure, then run setup again.')] };\n      }\n      const roleConflict = paseoMcpCheck(`claude.mcp.${role}`, statePath, roleServers);\n      if (roleConflict) return { entries: [], checks: [...checks, roleConflict] };\n      // Only an already-seeded role home can have drifted: an absent one is about to be\n      // seeded from the same operator state this run just read.\n      if (roleStateSource !== undefined) {\n        const divergence = serverNameDivergence(operatorServers, roleServers);\n        if (divergence) drift.push(mcpDriftCheck(role, target, statePath, divergence));\n      }\n      entries.push({ kind: 'dir', path: target });\n      const memoryPath = join(target, 'CLAUDE.md');\n      const memory = renderRoleMemory(memorySource, role, options.memoryContract ?? true);\n      // Suppressed with no operator memory to carry: remove any file an earlier run wrote,\n      // so a stale contract generation cannot outlive the option that turned it off.\n      entries.push(memory === undefined\n        ? { kind: 'absent', path: memoryPath }\n        : { kind: 'file', path: memoryPath, content: memory });\n      entries.push({ kind: 'file', path: join(target, 'settings.json'), content: renderRoleSettings(settingsSource, role, target) });\n      entries.push({ kind: 'file', path: statePath, content: renderRoleState(stateSource), once: true });\n      entries.push(...await roleResourceEntries({ role, target, home, names: SHARED, shared, executable: EXECUTABLE }));\n      credentials.push(await claudeCredentialDiagnostic(layout, role, settingsSource, process.platform, binary));\n      providerEnv[role] = { [SECURE_STORAGE_ENV]: target };\n    }\n    return { entries, credentials, checks: [...checks, ...drift], binary, providerEnv };\n  },\n};\n","import { join } from 'node:path';\nimport { parse, stringify, type TomlTable } from 'smol-toml';\nimport { inspectCredentialPath, preservedCredentialCheck, roleCommand, type CredentialDiagnostic } from '../credentials.js';\nimport type { Layout } from '../layout.js';\nimport { roleHome } from '../layout.js';\nimport type { Entry } from '../fsops.js';\nimport { existingPaths, readIfPresent } from '../fsops.js';\nimport { fail, pass, type Check } from '../result.js';\nimport type { Role } from '../roles.js';\nimport { renderInstructions } from '../room/instructions.js';\nimport { probe, which } from '../which.js';\nimport { paseoMcpCheck, serverTable } from './mcp.js';\nimport { roleResourceEntries } from './resources.js';\nimport type { Agent, AgentPlan } from './types.js';\n\n/** Read-only operator resources every role shares by reference, never by copy. */\nconst SHARED = ['AGENTS.md', 'skills', 'plugins', 'hooks.json'] as const;\n/** Plugins and hooks run operator code, so Peer — which has no room tools — never loads them. */\nconst EXECUTABLE = ['plugins', 'hooks.json'] as const;\nconst CATALOG = 'model-catalog.json';\nexport type CodexCredentialStore = 'file' | 'ephemeral' | 'auto' | 'keyring' | 'unknown';\n\nfunction table(parent: TomlTable, key: string): TomlTable {\n  const value = parent[key];\n  if (value === undefined || typeof value !== 'object' || Array.isArray(value) || value instanceof Date) {\n    return (parent[key] = {});\n  }\n  return value;\n}\n\n/**\n * Close Codex's native multi-agent features inside one scope: the top-level table, or an\n * active profile, which outranks it.\n */\nfunction pinMultiAgentFeatures(scope: TomlTable): void {\n  const features = table(scope, 'features');\n  features.multi_agent = false;\n  // Newer configs represent v2 as a table; keep that shape rather than writing a\n  // boolean at the same key, which would be a TOML conflict.\n  if (typeof features.multi_agent_v2 === 'boolean' || features.multi_agent_v2 === undefined) features.multi_agent_v2 = false;\n  else table(features, 'multi_agent_v2').enabled = false;\n}\n\nexport interface RoleConfigInput {\n  readonly roleDocument: string;\n  readonly catalogPath?: string;\n}\n/**\n * Copy the operator's config, then override only the keys the room owns.\n *\n * `model_instructions_file` is deliberately untouched: it *replaces* Codex's base\n * prompt, so writing it would mean vendoring and maintaining a full copy of that\n * prompt. The room contract is additive and belongs in `developer_instructions`.\n */\nexport function renderRoleConfig(source: TomlTable, input: RoleConfigInput): string {\n  const config = structuredClone(source);\n  config.sandbox_mode = 'danger-full-access';\n  config.approval_policy = 'never';\n  config.developer_instructions = input.roleDocument;\n  if (input.catalogPath) config.model_catalog_json = input.catalogPath;\n  // Codex's own multi-agent mode would compete with the room's role contract.\n  // `[agents]` stays top-level only: Codex profiles have no such key.\n  table(config, 'agents').enabled = false;\n  pinMultiAgentFeatures(config);\n  // An active profile outranks the top-level keys, so every room-owned key a profile can\n  // also carry — sandbox, approval, catalog, features — has to land there too.\n  if (typeof config.profile === 'string') {\n    const profile = table(table(config, 'profiles'), config.profile);\n    profile.sandbox_mode = 'danger-full-access';\n    profile.approval_policy = 'never';\n    if (input.catalogPath) profile.model_catalog_json = input.catalogPath;\n    pinMultiAgentFeatures(profile);\n  }\n  return stringify(config) + '\\n';\n}\n\nexport function renderCatalog(catalog: unknown): string {\n  return JSON.stringify(catalog, (key, value: unknown) => (key === 'multi_agent_version' ? null : value), 2) + '\\n';\n}\n\n/** Facts the captured catalog itself carries. Nothing is inferred beyond them. */\nexport interface CatalogEvidence {\n  /** Codex reads the catalog as a JSON object, so any other top-level shape is not one. */\n  readonly object: boolean;\n  /** How many `multi_agent_version` fields the capture carried, and the copy therefore nulls. */\n  readonly markers: number;\n}\n\nexport function catalogEvidence(catalog: unknown): CatalogEvidence {\n  let markers = 0;\n  const walk = (value: unknown): void => {\n    if (Array.isArray(value)) { for (const item of value) walk(item); return; }\n    if (value === null || typeof value !== 'object') return;\n    for (const [key, nested] of Object.entries(value)) {\n      if (key === 'multi_agent_version') markers += 1;\n      else walk(nested);\n    }\n  };\n  walk(catalog);\n  return { object: catalog !== null && typeof catalog === 'object' && !Array.isArray(catalog), markers };\n}\n\n/** Read only the generated config's non-secret store selector. */\nexport function codexCredentialStore(config: TomlTable): CodexCredentialStore {\n  const value = config.cli_auth_credentials_store;\n  return value === 'file' || value === 'ephemeral' || value === 'auto' || value === 'keyring'\n    ? value\n    : 'unknown';\n}\n\nasync function credentialDiagnostic(\n  layout: Layout,\n  role: Role,\n  store: CodexCredentialStore,\n  binary: string,\n): Promise<CredentialDiagnostic> {\n  const home = roleHome(layout, 'codex', role);\n  const path = join(home, 'auth.json');\n  const login = roleCommand({ CODEX_HOME: home }, binary, ['login']);\n  const status = roleCommand({ CODEX_HOME: home }, binary, ['login', 'status']);\n  const state = await inspectCredentialPath(path);\n  const id = `codex.auth.${role}`;\n  const checks: Check[] = [];\n  if (state.kind !== 'missing') {\n    checks.push(preservedCredentialCheck({ id, agent: 'Codex', role, path, state, login, status }));\n  } else {\n    if (store === 'keyring' || store === 'auto') {\n      checks.push({\n        id: `${id}.native-keyring-unverifiable`, status: 'warn',\n        message: `Codex ${role} auth: native-keyring unverifiable; cli_auth_credentials_store is ${store}, and no keyring was queried. Token validity and freshness were not checked.`,\n        fix: `Authenticate this role with: ${login}. Check status with: ${status}.`,\n      });\n    } else {\n      const apiKey = layout.envNames.has('OPENAI_API_KEY')\n        ? ' OPENAI_API_KEY is present only in the setup process; Codex has not stored it for this role and paseo-room does not copy it into the provider.'\n        : '';\n      const detail = store === 'ephemeral'\n        ? 'cli_auth_credentials_store is ephemeral, so no persistent credential file is expected'\n        : `no role-owned auth.json exists${store === 'file' ? ' for the configured file store' : ''}`;\n      checks.push({\n        id: `${id}.login-required`, status: 'warn',\n        message: `Codex ${role} auth: login-required; ${detail}.${apiKey} Authentication was not attempted.`,\n        fix: `Authenticate this role with: ${login}. Check status with: ${status}.`,\n      });\n    }\n  }\n  if (state.kind !== 'missing' && (store === 'keyring' || store === 'auto')) {\n    checks.push({\n      id: `${id}.native-keyring-unverifiable`, status: 'warn',\n      message: `Codex ${role} auth: native-keyring unverifiable; cli_auth_credentials_store is ${store}, and the preserved auth.json does not prove what the runtime will use. No keyring was queried.`,\n      fix: `Check status without exposing credentials: ${status}.`,\n    });\n  }\n  return { path, checks };\n}\n\nexport const codexAgent: Agent = {\n  id: 'codex',\n  label: 'Codex',\n  homeEnv: 'CODEX_HOME',\n  defaultModeId: 'full-access',\n  // Without these, Paseo's own mode preset (default auto-review) is sent to the\n  // app-server and outranks the sandbox/approval keys in the generated config.\n  pins: { params: { sandbox_mode: 'danger-full-access', approval_policy: 'never' } },\n  async build(layout: Layout, roles: readonly Role[]): Promise<AgentPlan> {\n    const checks: Check[] = [];\n    const home = layout.agentHome.codex;\n    const binary = await which(layout.bin.codex, layout.searchPath);\n    if (!binary) {\n      return { entries: [], checks: [fail('codex.bin', 'Codex executable not found.', 'Install Codex, or pass --codex-bin /path/to/codex.')] };\n    }\n    const configPath = join(home, 'config.toml');\n    const raw = await readIfPresent(configPath);\n    if (raw === undefined) {\n      return { entries: [], checks: [fail('codex.home', `No config.toml in ${home}.`, 'Run codex once to initialise it, or pass --codex-home.')] };\n    }\n    let source: TomlTable;\n    try { source = parse(raw); } catch {\n      return { entries: [], checks: [fail('codex.config', `Could not read ${configPath} as TOML.`, 'Fix the syntax in your Codex config, then run setup again.')] };\n    }\n    checks.push(pass('codex.home', `Codex found at ${binary} using ${home}.`));\n    // Paseo is the room's only control plane, so a Paseo-looking MCP server fails here,\n    // before any managed path is written, rather than being filtered out of the copy.\n    const conflict = paseoMcpCheck('codex.mcp', configPath, serverTable(source.mcp_servers));\n    if (conflict) return { entries: [], checks: [...checks, conflict] };\n    const store = codexCredentialStore(source);\n\n    const entries: Entry[] = [];\n    const credentials: CredentialDiagnostic[] = [];\n\n    // The scrubbed catalog is one of the room's three native multi-agent closures, so a\n    // catalog it cannot capture is a build failure, not a silent fall back to the\n    // built-in catalog and its collaboration metadata.\n    const capture = roleCommand({ CODEX_HOME: home }, binary, ['debug', 'models']);\n    const models = await probe(binary, ['debug', 'models'], { HOME: layout.home, CODEX_HOME: home, PATH: layout.searchPath });\n    if (!models.ok) {\n      return { entries: [], checks: [...checks, fail('codex.catalog',\n        'Codex model catalog unavailable, so native multi-agent metadata cannot be removed.',\n        `Run ${capture} to see why it failed, upgrade Codex to a version that prints the JSON catalog, then run setup again.`)] };\n    }\n    let catalogSource: string;\n    let evidence: CatalogEvidence;\n    try {\n      const parsed: unknown = JSON.parse(models.stdout);\n      evidence = catalogEvidence(parsed);\n      catalogSource = renderCatalog(parsed);\n    } catch {\n      return { entries: [], checks: [...checks, fail('codex.catalog',\n        'Codex model catalog was not valid JSON, so native multi-agent metadata cannot be removed.',\n        `Check the output of ${capture}, upgrade Codex if it does not print a JSON catalog, then run setup again.`)] };\n    }\n    // A JSON scalar or array parses but is not a catalog: writing it would point every role\n    // at a file Codex cannot load, which is the same closure failure as no catalog at all.\n    if (!evidence.object) {\n      return { entries: [], checks: [...checks, fail('codex.catalog',\n        'Codex printed valid JSON that is not a model catalog object, so native multi-agent metadata cannot be removed.',\n        `Check the output of ${capture}, upgrade Codex to a version that prints the JSON catalog object, then run setup again.`)] };\n    }\n    checks.push(pass('codex.catalog', evidence.markers === 0\n      ? `Codex model catalog captured from ${capture}; it declared no multi_agent_version field, and each role home gets that generated copy instead of Codex's built-in catalog.`\n      : `Codex model catalog captured from ${capture}; ${String(evidence.markers)} multi_agent_version field(s) are nulled in the generated copy in each role home.`));\n\n    const shared = await existingPaths(home, SHARED);\n    for (const role of roles) {\n      const target = roleHome(layout, 'codex', role);\n      const catalogPath = join(target, CATALOG);\n      const roleDocument = renderInstructions(role);\n      entries.push({ kind: 'dir', path: target });\n      // Codex reads the brief from developer_instructions; this copy is for the operator.\n      entries.push({ kind: 'file', path: join(target, 'role-instructions.md'), content: roleDocument });\n      entries.push({\n        kind: 'file',\n        path: join(target, 'config.toml'),\n        content: renderRoleConfig(source, { roleDocument, catalogPath }),\n      });\n      entries.push({ kind: 'file', path: catalogPath, content: catalogSource });\n      entries.push(...await roleResourceEntries({ role, target, home, names: SHARED, shared, executable: EXECUTABLE }));\n      credentials.push(await credentialDiagnostic(layout, role, store, binary));\n    }\n    return { entries, credentials, checks, binary };\n  },\n};\n","import { spawn } from 'node:child_process';\nimport { mkdtemp, readFile, realpath, rm, stat } from 'node:fs/promises';\nimport { tmpdir } from 'node:os';\nimport { isAbsolute, join, resolve } from 'node:path';\nimport {\n  ambientNamesCheck, inspectCredentialPath, presentNames, preservedCredentialCheck,\n  type CredentialDiagnostic,\n} from '../credentials.js';\nimport { piLoginCommand } from '../auth.js';\nimport type { Entry } from '../fsops.js';\nimport { existingPaths } from '../fsops.js';\nimport type { Layout } from '../layout.js';\nimport { contains, roleHome } from '../layout.js';\nimport { fail, pass, type Check } from '../result.js';\nimport type { Role } from '../roles.js';\nimport { renderInstructions } from '../room/instructions.js';\nimport { loadPromptAsset } from '../room/prompts.js';\nimport { which } from '../which.js';\nimport { jsonServerTable, paseoMcpCheck } from './mcp.js';\nimport { roleResourceEntries } from './resources.js';\nimport type { Agent, AgentPlan } from './types.js';\n\nconst PACKAGE_NAME = 'pi-mcp-adapter';\nconst PROBE_ID = 'paseo-room-pi-mcp-probe';\nconst PROBE_TIMEOUT_MS = 10_000;\nconst PROBE_OUTPUT_LIMIT = 1024 * 1024;\nconst SHARED = ['models.json', 'AGENTS.md', 'skills', 'prompts', 'themes', 'keybindings.json', 'mcp.json'] as const;\n/** Pi prompts are its slash commands, so they execute; Peer receives no such resource. */\nconst EXECUTABLE = ['prompts'] as const;\nconst MCP_FILE = 'mcp.json';\n/** Pi accepts either key for its declaration map, so both are read and neither is rewritten. */\nconst MCP_KEYS = ['mcpServers', 'servers'] as const;\n/** Built-in provider key names only; ambient cloud credential files are deliberately not probed. */\nconst AUTH_ENV = [\n  'ANTHROPIC_AUTH_TOKEN', 'ANTHROPIC_OAUTH_TOKEN', 'ANTHROPIC_API_KEY',\n  'OPENAI_API_KEY', 'AZURE_OPENAI_API_KEY', 'GEMINI_API_KEY', 'GOOGLE_CLOUD_API_KEY',\n  'MISTRAL_API_KEY', 'GROQ_API_KEY', 'CEREBRAS_API_KEY', 'XAI_API_KEY',\n  'DEEPSEEK_API_KEY', 'OPENROUTER_API_KEY', 'AI_GATEWAY_API_KEY', 'FIREWORKS_API_KEY',\n  'ZAI_API_KEY', 'MINIMAX_API_KEY', 'OPENCODE_API_KEY', 'KIMI_API_KEY',\n  'COPILOT_GITHUB_TOKEN',\n] as const;\n\nfunction asObject(value: unknown): Record<string, unknown> | undefined {\n  return value !== null && typeof value === 'object' && !Array.isArray(value) ? { ...value } : undefined;\n}\n\n/** Copy operator preferences but remove every declaration that can install or load packages. */\nexport function renderPiSettings(source: string | undefined): string {\n  const parsed: unknown = source === undefined ? {} : JSON.parse(source);\n  const settings = asObject(parsed);\n  if (!settings) throw new Error('Pi settings must be a JSON object.');\n  delete settings.packages;\n  delete settings.extensions;\n  return JSON.stringify(settings, null, 2) + '\\n';\n}\n\n/** Preserve the operator append first; room-specific guidance is additive and stronger. */\nexport function renderPiAppend(source: string | undefined, role: Role): string {\n  return [\n    source?.trim(),\n    loadPromptAsset('pi', 'communicationStyle'),\n    loadPromptAsset('pi', 'runtime'),\n    renderInstructions(role),\n  ].filter((part): part is string => Boolean(part)).join('\\n\\n');\n}\n\ninterface ResolvedAdapter {\n  readonly entry: string;\n  readonly version: string;\n}\n\nfunction adapterFailure(home: string, detail: string): Check {\n  return fail('pi.adapter', detail,\n    `Install ${PACKAGE_NAME} in ${join(home, 'npm')} with Pi yourself, then run setup again.`);\n}\n\n/** Resolve only Pi's intended global package and its single declared extension entry. */\nexport async function resolvePiAdapter(home: string): Promise<{ readonly adapter?: ResolvedAdapter; readonly check: Check }> {\n  const packageRoot = join(home, 'npm', 'node_modules', PACKAGE_NAME);\n  const manifestPath = join(packageRoot, 'package.json');\n  try {\n    const [canonicalRoot, manifestStat, raw] = await Promise.all([\n      realpath(packageRoot), stat(manifestPath), readFile(manifestPath, 'utf8'),\n    ]);\n    if (!manifestStat.isFile()) return { check: adapterFailure(home, `${manifestPath} is not a regular file.`) };\n    const manifest = asObject(JSON.parse(raw));\n    if (!manifest || manifest.name !== PACKAGE_NAME) {\n      return { check: adapterFailure(home, `${manifestPath} does not identify ${PACKAGE_NAME}.`) };\n    }\n    const pi = asObject(manifest.pi);\n    const declared = pi?.extensions;\n    if (!Array.isArray(declared) || declared.length !== 1 || typeof declared[0] !== 'string' || !declared[0].trim()) {\n      return { check: adapterFailure(home, `${manifestPath} must declare one Pi extension entry.`) };\n    }\n    const declaration = declared[0];\n    if (isAbsolute(declaration)) {\n      return { check: adapterFailure(home, `${manifestPath} declares an unsafe absolute extension path.`) };\n    }\n    const candidate = resolve(packageRoot, declaration);\n    const [canonicalEntry, entryStat] = await Promise.all([realpath(candidate), stat(candidate)]);\n    if (!contains(canonicalRoot, canonicalEntry) || canonicalEntry === canonicalRoot || !entryStat.isFile()) {\n      return { check: adapterFailure(home, `The declared ${PACKAGE_NAME} extension escapes its package or is not a regular file.`) };\n    }\n    const version = typeof manifest.version === 'string' && manifest.version.trim() ? manifest.version.trim() : 'unknown';\n    return {\n      adapter: { entry: canonicalEntry, version },\n      check: pass('pi.adapter', `${PACKAGE_NAME} ${version} resolved to ${canonicalEntry}.`),\n    };\n  } catch {\n    return { check: adapterFailure(home, `Could not safely resolve ${PACKAGE_NAME} from ${manifestPath}.`) };\n  }\n}\n\nexport interface PiProbeOptions {\n  readonly timeoutMs?: number;\n  readonly outputLimit?: number;\n}\ninterface ProcessResult {\n  readonly ok: boolean;\n  readonly stdout: string;\n  readonly reason?: 'failure' | 'timeout' | 'overflow';\n}\n\nfunction terminateProbe(child: ReturnType<typeof spawn>): void {\n  if (child.pid !== undefined) {\n    try { process.kill(-child.pid, 'SIGKILL'); } catch { /* the process group may already be gone */ }\n  }\n  try { child.kill('SIGKILL'); } catch { /* the direct child may already be gone */ }\n  child.stdin?.destroy();\n  child.stdout?.destroy();\n  child.stderr?.destroy();\n}\n\n/** One bounded JSONL request in its own process group and isolated working directory. */\nfunction runProbeProcess(\n  executable: string,\n  adapterEntry: string,\n  env: NodeJS.ProcessEnv,\n  options: PiProbeOptions,\n  cwd: string,\n): Promise<ProcessResult> {\n  const timeoutMs = options.timeoutMs ?? PROBE_TIMEOUT_MS;\n  const outputLimit = options.outputLimit ?? PROBE_OUTPUT_LIMIT;\n  const args = ['--mode', 'rpc', '--no-session', '--no-extensions', '--extension', adapterEntry, '--no-approve'];\n  return new Promise(resolveResult => {\n    const child = spawn(executable, args, { cwd, detached: true, env, stdio: ['pipe', 'pipe', 'pipe'] });\n    const stdout: Buffer[] = [];\n    let bytes = 0;\n    let settled = false;\n    const finish = (result: ProcessResult): void => {\n      if (settled) return;\n      settled = true;\n      clearTimeout(timer);\n      resolveResult(result);\n    };\n    const abort = (reason: NonNullable<ProcessResult['reason']>): void => {\n      if (settled) return;\n      terminateProbe(child);\n      finish({ ok: false, stdout: Buffer.concat(stdout).toString('utf8'), reason });\n    };\n    const capture = (chunk: Buffer, keep: boolean): void => {\n      if (settled) return;\n      bytes += chunk.length;\n      if (bytes > outputLimit) {\n        abort('overflow');\n        return;\n      }\n      if (keep) stdout.push(chunk);\n    };\n    const timer = setTimeout(() => { abort('timeout'); }, timeoutMs);\n    child.stdout.on('data', (chunk: Buffer) => { capture(chunk, true); });\n    child.stderr.on('data', (chunk: Buffer) => { capture(chunk, false); });\n    child.stdout.on('error', () => { abort('failure'); });\n    child.stderr.on('error', () => { abort('failure'); });\n    child.on('error', () => { abort('failure'); });\n    child.on('close', code => {\n      const output = Buffer.concat(stdout).toString('utf8');\n      finish(code === 0 ? { ok: true, stdout: output } : { ok: false, stdout: output, reason: 'failure' });\n    });\n    child.stdin.on('error', () => { /* a failed child is reported by close/error */ });\n    child.stdin.end(`${JSON.stringify({ id: PROBE_ID, type: 'get_commands' })}\\n`);\n  });\n}\n\n/** Pi runs migrations against cwd before RPC, so never probe in the caller's project. */\nasync function runProbe(\n  executable: string,\n  adapterEntry: string,\n  env: NodeJS.ProcessEnv,\n  options: PiProbeOptions,\n): Promise<ProcessResult> {\n  const createdCwd = await mkdtemp(join(tmpdir(), 'paseo-room-pi-probe-'));\n  const cwd = await realpath(createdCwd);\n  try {\n    return await runProbeProcess(executable, adapterEntry, {\n      ...env,\n      HOME: cwd,\n      PI_CODING_AGENT_DIR: '/dev/null',\n      PI_MCP_CONFIG_MODE: 'exclusive',\n      PI_OFFLINE: '1',\n    }, options, cwd);\n  } finally {\n    await rm(createdCwd, { force: true, recursive: true });\n  }\n}\n\nfunction probeFailure(message: string): Check {\n  return fail('pi.capability', message,\n    'Use a Pi and pi-mcp-adapter installation that exposes /mcp through the declared adapter entry.');\n}\n\n/** Authenticate the exact adapter path through Pi's correlated get_commands response. */\nexport async function probePiMcp(\n  executable: string,\n  adapterEntry: string,\n  env: NodeJS.ProcessEnv,\n  options: PiProbeOptions = {},\n): Promise<Check> {\n  let result: ProcessResult;\n  try {\n    result = await runProbe(executable, adapterEntry, env, options);\n  } catch {\n    return probeFailure('Pi capability probe could not create or clean its isolated working directory.');\n  }\n  if (!result.ok) {\n    if (result.reason === 'timeout') return probeFailure('Pi capability probe timed out.');\n    if (result.reason === 'overflow') return probeFailure('Pi capability probe exceeded its output limit.');\n    return probeFailure('Pi capability probe failed.');\n  }\n  const correlated: Record<string, unknown>[] = [];\n  for (const line of result.stdout.split(/\\r?\\n/).filter(Boolean)) {\n    let parsed: unknown;\n    try { parsed = JSON.parse(line); } catch { return probeFailure('Pi capability probe returned malformed JSONL.'); }\n    const event = asObject(parsed);\n    if (!event) return probeFailure('Pi capability probe returned malformed JSONL.');\n    if (event.type === 'response' && event.id === PROBE_ID) correlated.push(event);\n  }\n  if (correlated.length !== 1) return probeFailure('Pi capability probe did not return one correlated get_commands response.');\n  const response = correlated[0];\n  if (response?.command !== 'get_commands' || response.success !== true) {\n    return probeFailure('Pi rejected the get_commands capability probe.');\n  }\n  const data = asObject(response.data);\n  const commands = data?.commands;\n  if (!Array.isArray(commands)) return probeFailure('Pi get_commands response was malformed.');\n  const matches = commands.map(asObject).filter((command): command is Record<string, unknown> => command?.name === 'mcp');\n  if (matches.length !== 1) return probeFailure('Pi did not expose exactly one /mcp command.');\n  const command = matches[0];\n  if (command?.source !== 'extension') return probeFailure('Pi exposed /mcp from the wrong source.');\n  const sourceInfo = asObject(command.sourceInfo);\n  if (typeof sourceInfo?.path !== 'string') return probeFailure('Pi did not report the /mcp extension path.');\n  try {\n    const sourcePath = await realpath(sourceInfo.path);\n    if (sourcePath !== adapterEntry) return probeFailure('Pi loaded /mcp from a different extension path.');\n  } catch {\n    return probeFailure('Pi reported an unresolvable /mcp extension path.');\n  }\n  return pass('pi.capability', `Pi exposed /mcp from ${adapterEntry}.`);\n}\n\nasync function readPiOptional(path: string): Promise<string | undefined> {\n  try {\n    return await readFile(path, 'utf8');\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === 'ENOENT') return undefined;\n    throw error;\n  }\n}\n\nexport async function piCredentialDiagnostic(layout: Layout, role: Role, binary = 'pi'): Promise<CredentialDiagnostic> {\n  const home = roleHome(layout, 'pi', role);\n  const path = join(home, 'auth.json');\n  const launch = piLoginCommand(home, binary);\n  const state = await inspectCredentialPath(path);\n  const id = `pi.auth.${role}`;\n  if (state.kind !== 'missing') {\n    return {\n      path,\n      checks: [preservedCredentialCheck({\n        id, agent: 'Pi', role, path, state,\n        login: `${launch}; this starts a minimal, non-room-equivalent interactive login session. Run /login, then exit Pi`,\n      })],\n    };\n  }\n  const configured = presentNames(layout.envNames, AUTH_ENV);\n  if (configured.length > 0) return { path, checks: [ambientNamesCheck(id, 'Pi', role, configured)] };\n  return { path, checks: [{\n    id: `${id}.login-required`, status: 'warn',\n    message: `Pi ${role} auth: login-required; no role-owned auth.json or known provider environment name was detected. Ambient provider auth may exist, but it was not inspected or validated.`,\n    fix: `Start a minimal, non-room-equivalent interactive login session with: ${launch}. Run /login, then exit Pi.`,\n  }] };\n}\n\nexport const piAgent: Agent = {\n  id: 'pi',\n  label: 'Pi',\n  homeEnv: 'PI_CODING_AGENT_DIR',\n  providerEnv: { PI_MCP_CONFIG_MODE: 'exclusive' },\n  pins: {},\n  async build(layout: Layout, roles: readonly Role[]): Promise<AgentPlan> {\n    const home = layout.agentHome.pi;\n    const binary = await which(layout.bin.pi, layout.searchPath);\n    if (!binary) {\n      return { entries: [], checks: [fail('pi.bin', 'Pi executable not found.', 'Install Pi yourself, or pass --pi-bin /path/to/pi.')] };\n    }\n    try {\n      if (!(await stat(home)).isDirectory()) throw new Error('not a directory');\n    } catch {\n      return { entries: [], checks: [fail('pi.home', `No Pi config directory at ${home}.`, 'Run Pi once to initialise it, or pass --pi-home.')] };\n    }\n    const resolved = await resolvePiAdapter(home);\n    if (!resolved.adapter) return { entries: [], checks: [resolved.check] };\n    const capability = await probePiMcp(binary, resolved.adapter.entry, {\n      HOME: layout.home,\n      PATH: layout.searchPath,\n      PI_CODING_AGENT_DIR: '/dev/null',\n      PI_OFFLINE: '1',\n    });\n    if (capability.status === 'fail') return { entries: [], checks: [resolved.check, capability] };\n\n    const settingsPath = join(home, 'settings.json');\n    let settings: string;\n    try { settings = renderPiSettings(await readPiOptional(settingsPath)); } catch {\n      return {\n        entries: [], checks: [resolved.check, capability,\n          fail('pi.settings', `Could not read ${settingsPath} as a JSON object.`,\n            'Make your Pi settings readable and fix any JSON syntax, then run setup again.')],\n      };\n    }\n    const operatorAppendPath = join(home, 'APPEND_SYSTEM.md');\n    let operatorAppend: string | undefined;\n    try {\n      operatorAppend = await readPiOptional(operatorAppendPath);\n    } catch {\n      return {\n        entries: [], checks: [resolved.check, capability,\n          fail('pi.append', `Could not read ${operatorAppendPath}.`,\n            'Make your Pi APPEND_SYSTEM.md readable, then run setup again.')],\n      };\n    }\n    const shared = await existingPaths(home, SHARED);\n    // The adapter reads this file as its only config source, so a Paseo-looking server here\n    // would be a second control plane. Fail before apply; never edit the operator's file.\n    const mcpPath = join(home, MCP_FILE);\n    let servers: Record<string, unknown>;\n    try {\n      servers = jsonServerTable(await readPiOptional(mcpPath), MCP_KEYS);\n    } catch {\n      return {\n        entries: [], checks: [resolved.check, capability,\n          fail('pi.mcp', `Could not read ${mcpPath} as a JSON object, so its MCP declarations could not be inspected.`,\n            'Make your Pi mcp.json readable and fix its JSON structure, then run setup again.')],\n      };\n    }\n    const conflict = paseoMcpCheck('pi.mcp', mcpPath, servers);\n    if (conflict) return { entries: [], checks: [resolved.check, capability, conflict] };\n    const entries: Entry[] = [];\n    const credentials: CredentialDiagnostic[] = [];\n    const argv: Partial<Record<Role, readonly string[]>> = {};\n    for (const role of roles) {\n      const target = roleHome(layout, 'pi', role);\n      const appendPath = join(target, 'APPEND_SYSTEM.md');\n      entries.push({ kind: 'dir', path: target });\n      entries.push({ kind: 'file', path: join(target, 'settings.json'), content: settings });\n      entries.push({ kind: 'file', path: appendPath, content: renderPiAppend(operatorAppend, role) });\n      entries.push(...await roleResourceEntries({ role, target, home, names: SHARED, shared, executable: EXECUTABLE }));\n      credentials.push(await piCredentialDiagnostic(layout, role, binary));\n      argv[role] = ['--no-extensions', '--extension', resolved.adapter.entry, '--no-approve', '--append-system-prompt', appendPath];\n    }\n    return {\n      entries,\n      credentials,\n      checks: [pass('pi.home', `Pi found at ${binary} using ${home}.`), resolved.check, capability],\n      binary,\n      argv,\n    };\n  },\n};\n","import type { PaseoClient, PaseoClientConfig } from '@getpaseo/client';\nimport { gte, valid } from 'semver';\nimport { z } from 'zod';\nimport type { Layout } from './layout.js';\nimport { fail, pass, type Check } from './result.js';\nimport type { Profile, Provider } from './agents/types.js';\nimport type { AgentId } from './roles.js';\nimport { probe, which } from './which.js';\n\nexport const MINIMUM_VERSION = '0.8.0-beta.1';\nexport const PI_MINIMUM_VERSION = '0.8.0';\n\nexport function minimumPaseoVersion(agents: readonly AgentId[]): string {\n  return agents.includes('pi') || agents.includes('claude') ? PI_MINIMUM_VERSION : MINIMUM_VERSION;\n}\n\nconst statusSchema = z.object({\n  listen: z.string().min(1),\n  localDaemon: z.enum(['running', 'stopped', 'stale_pid', 'unresponsive']),\n  cliVersion: z.string(),\n  daemonVersion: z.string().nullable(),\n});\n\nexport interface Daemon {\n  readonly url: string;\n  readonly version: string;\n}\nexport interface DaemonResult {\n  readonly checks: readonly Check[];\n  readonly daemon?: Daemon;\n}\n\nexport function normalizeUrl(listen: string): string | undefined {\n  const match = /^(?:ws:\\/\\/)?([^:/]+|\\[[^\\]]+\\]):(\\d+)$/.exec(listen.trim());\n  if (!match) return undefined;\n  const [, host = '', port = ''] = match;\n  const local = ['localhost', '127.0.0.1', '0.0.0.0', '[::1]', '[::]'].includes(host) ? '127.0.0.1' : host;\n  return `ws://${local}:${port}`;\n}\n\n/** The whole compatibility story: is Paseo running, and is it new enough? */\nexport function assessStatus(raw: unknown, minimumVersion = MINIMUM_VERSION): DaemonResult {\n  const parsed = statusSchema.safeParse(raw);\n  if (!parsed.success) {\n    return { checks: [fail('paseo.status', 'Paseo status output was not understood.', 'Upgrade Paseo, then run: paseo daemon status --json')] };\n  }\n  const status = parsed.data;\n  if (status.localDaemon !== 'running') {\n    return { checks: [fail('paseo.daemon', `Paseo daemon is ${status.localDaemon}.`, 'Start it with: paseo daemon start')] };\n  }\n  const cli = valid(status.cliVersion);\n  const daemon = status.daemonVersion === null ? null : valid(status.daemonVersion);\n  if (!cli || !daemon) {\n    return { checks: [fail('paseo.version', 'Paseo did not report a usable version.', 'Upgrade Paseo to a release that reports semver versions.')] };\n  }\n  if (cli !== daemon) {\n    return { checks: [fail('paseo.version', `Paseo CLI is ${cli} but the running daemon is ${daemon}.`, 'Restart the daemon with: paseo daemon restart')] };\n  }\n  if (!gte(daemon, minimumVersion)) {\n    return { checks: [fail('paseo.version', `Paseo ${daemon} is older than the required ${minimumVersion}.`, 'Upgrade Paseo, then run setup again.')] };\n  }\n  const url = normalizeUrl(status.listen);\n  if (!url) {\n    return { checks: [fail('paseo.listen', `Paseo listen address ${status.listen} was not understood.`, 'Use a host:port listen address in the Paseo config.')] };\n  }\n  return { checks: [pass('paseo.version', `Paseo ${daemon} is running on ${url} (compatible, needs >= ${minimumVersion}).`)], daemon: { url, version: daemon } };\n}\n\nexport async function checkDaemon(layout: Layout, env: NodeJS.ProcessEnv = process.env, minimumVersion = MINIMUM_VERSION): Promise<DaemonResult> {\n  const binary = await which(layout.bin.paseo, layout.searchPath);\n  if (!binary) {\n    return { checks: [fail('paseo.bin', 'Paseo executable not found.', 'Install Paseo, or pass --paseo-bin /path/to/paseo.')] };\n  }\n  const output = await probe(binary, ['daemon', 'status', '--json'], {\n    HOME: layout.home, PASEO_HOME: layout.paseoHome, PATH: layout.searchPath,\n    ...(env.PASEO_PASSWORD === undefined ? {} : { PASEO_PASSWORD: env.PASEO_PASSWORD }),\n  });\n  if (!output.ok) {\n    return { checks: [fail('paseo.status', 'Could not read Paseo daemon status.', 'Run: paseo daemon status --json')] };\n  }\n  try { return assessStatus(JSON.parse(output.stdout), minimumVersion); }\n  catch { return assessStatus(undefined, minimumVersion); }\n}\n\nconst configSchema = z.object({\n  config: z.object({\n    providers: z.record(z.string(), z.unknown()).optional(),\n    // Read loosely: entries carry operator fields the room neither knows nor touches.\n    agentProfiles: z.array(z.record(z.string(), z.unknown())).optional(),\n    pluginsEnabled: z.boolean().optional(),\n  }),\n});\nexport type LiveProfile = Record<string, unknown>;\nexport interface LivePlugin {\n  readonly id: string;\n  readonly path: string;\n  readonly enabled: boolean;\n  readonly status: string;\n  readonly error?: string | undefined;\n}\n\nexport interface Session {\n  readProviders(): Promise<Record<string, unknown>>;\n  writeProviders(providers: Readonly<Record<string, Provider>>): Promise<void>;\n  removeProviders(ids: readonly string[]): Promise<void>;\n  readProfiles(): Promise<readonly LiveProfile[]>;\n  /** Paseo has no remove-one call for profiles, so this replaces the whole array. */\n  writeProfiles(profiles: readonly LiveProfile[]): Promise<void>;\n  pluginsEnabled(): Promise<boolean>;\n  listPlugins(): Promise<readonly LivePlugin[]>;\n  installPlugin(path: string, id: string): Promise<LivePlugin>;\n  reloadPlugin(id: string): Promise<LivePlugin>;\n  enablePlugin(id: string): Promise<LivePlugin>;\n  removePlugin(id: string): Promise<void>;\n  refresh(ids: readonly string[]): Promise<void>;\n}\nexport interface RoomClient extends PaseoClient {\n  listPlugins(): Promise<LivePlugin[]>;\n  installDirectoryPlugin(path: string, id?: string): Promise<LivePlugin>;\n  reloadPlugin(id: string): Promise<LivePlugin>;\n  enablePlugin(id: string): Promise<LivePlugin>;\n  removePlugin(id: string): Promise<void>;\n}\nexport type ClientFactory = (config: PaseoClientConfig) => RoomClient;\n\n/** One connection per command. No retries, no reconnects, no background state. */\nexport async function withSession<T>(\n  daemon: Daemon,\n  run: (session: Session) => Promise<T>,\n  options: { readonly password?: string; readonly factory?: ClientFactory } = {},\n): Promise<T> {\n  const quiet = { debug() { /* silent */ }, info() { /* silent */ }, warn() { /* silent */ }, error() { /* silent */ } };\n  // Loaded here so the \"Paseo is not running\" path never pays for the SDK.\n  const clientConfig: PaseoClientConfig = {\n    url: `${daemon.url}/ws`,\n    ...(options.password === undefined ? {} : { password: options.password }),\n    appVersion: MINIMUM_VERSION,\n    connectTimeoutMs: 10_000,\n    reconnect: { enabled: false },\n    logger: quiet,\n  };\n  let client: RoomClient;\n  if (options.factory !== undefined) {\n    client = options.factory(clientConfig);\n  } else {\n    const [{ createPaseoApi }, { DaemonClient }] = await Promise.all([\n      import('@getpaseo/client'), import('@getpaseo/client/internal/daemon-client'),\n    ]);\n    const raw = new DaemonClient({ ...clientConfig, clientId: `paseo-room-${String(process.pid)}`, clientType: 'cli' });\n    client = {\n      ...createPaseoApi(raw),\n      connect: () => raw.connect(), close: () => raw.close(),\n      ensureConnected: () => { raw.ensureConnected(); }, getConnectionState: () => raw.getConnectionState(),\n      listPlugins: () => raw.listPlugins(),\n      installDirectoryPlugin: (path, id) => raw.installDirectoryPlugin(path, id),\n      reloadPlugin: id => raw.reloadPlugin(id), enablePlugin: id => raw.enablePlugin(id),\n      removePlugin: id => raw.removePlugin(id),\n    };\n  }\n  try {\n    await client.connect();\n    return await run({\n      async readProviders() {\n        const response = configSchema.parse(await client.config.get());\n        return response.config.providers ?? {};\n      },\n      async writeProviders(providers) {\n        await client.config.patch({ providers } as unknown as Parameters<PaseoClient['config']['patch']>[0]);\n      },\n      async removeProviders(ids) {\n        await client.config.patch({ removeProviders: [...ids] });\n      },\n      async readProfiles() {\n        const response = configSchema.parse(await client.config.get());\n        return response.config.agentProfiles ?? [];\n      },\n      async writeProfiles(profiles) {\n        await client.config.patch({ agentProfiles: [...profiles] } as unknown as Parameters<PaseoClient['config']['patch']>[0]);\n      },\n      async pluginsEnabled() {\n        const response = configSchema.parse(await client.config.get());\n        return response.config.pluginsEnabled === true;\n      },\n      async listPlugins() {\n        return await client.listPlugins();\n      },\n      async installPlugin(path, id) {\n        return await client.installDirectoryPlugin(path, id);\n      },\n      async reloadPlugin(id) {\n        return await client.reloadPlugin(id);\n      },\n      async enablePlugin(id) {\n        return await client.enablePlugin(id);\n      },\n      async removePlugin(id) {\n        await client.removePlugin(id);\n      },\n      async refresh(ids) {\n        await client.providers.refresh({ providers: [...ids] });\n      },\n    });\n  } finally {\n    await client.close();\n  }\n}\n\n/**\n * The provider environment is written whole by the room, so it is compared whole: an\n * added key can enable exactly what the pins close, and a subset test would call that a\n * match. Unrelated *top-level* provider fields remain the operator's.\n */\nfunction envMatches(live: unknown, desired: Readonly<Record<string, string>>): boolean {\n  if (live === null || typeof live !== 'object' || Array.isArray(live)) return false;\n  const entries = Object.entries(live as Record<string, unknown>);\n  return entries.length === Object.keys(desired).length &&\n    entries.every(([key, value]) => Object.hasOwn(desired, key) && value === desired[key]);\n}\n\n/** Compare only the keys the room owns; unrelated fields stay the operator's. */\nexport function providerMatches(desired: Provider, live: unknown): boolean {\n  if (live === null || typeof live !== 'object') return false;\n  const entry = live as Record<string, unknown>;\n  const tools = entry.paseoTools;\n  const same = (left: unknown, right: unknown): boolean => JSON.stringify(left ?? null) === JSON.stringify(right ?? null);\n  return entry.extends === desired.extends &&\n    same(entry.command, desired.command) &&\n    envMatches(entry.env, desired.env) &&\n    tools !== null && typeof tools === 'object' &&\n    (tools as { enabled?: unknown }).enabled === desired.paseoTools.enabled &&\n    // Pins are the room's guarantee: drifting them silently re-enables what they block.\n    same(entry.params, desired.params) &&\n    same(entry.disallowedTools, desired.disallowedTools);\n}\n\n/** Compare only the fields the room writes on an update; the rest are the operator's. */\nexport function profileMatches(desired: Profile, live: unknown): boolean {\n  if (live === null || typeof live !== 'object') return false;\n  const entry = live as Record<string, unknown>;\n  return entry.name === desired.name && entry.icon === desired.icon && entry.color === desired.color &&\n    entry.provider === desired.provider && entry.modeId === desired.modeId && entry.notes === desired.notes;\n}\n\n/**\n * Paseo stores every profile in one host-wide array, so the room rewrites that array\n * rather than patching an entry. Operator profiles pass through untouched, and so does\n * every field of a room profile that the room does not own.\n */\nexport function mergeProfiles(\n  live: readonly LiveProfile[],\n  desired: readonly Profile[],\n  drop: readonly string[],\n): LiveProfile[] {\n  const dropped = new Set(drop);\n  const wanted = new Map(desired.map(profile => [profile.id, profile]));\n  const seen = new Set<string>();\n  const kept = live\n    .filter(entry => !dropped.has(String(entry.id)))\n    .map(entry => {\n      const profile = wanted.get(String(entry.id));\n      if (!profile) return entry;\n      seen.add(profile.id);\n      // Model and thinkingOptionId remain operator choices; the room owns the\n      // role's visual identity and its no-prompt launch mode.\n      const updated: LiveProfile = {\n        ...entry, name: profile.name, icon: profile.icon, color: profile.color,\n        provider: profile.provider, notes: profile.notes,\n      };\n      if (profile.modeId === undefined) delete updated.modeId;\n      else updated.modeId = profile.modeId;\n      return updated;\n    });\n  return [...kept, ...desired.filter(profile => !seen.has(profile.id)).map(profile => ({ ...profile }))];\n}\n","import { readFileSync } from 'node:fs';\nimport { join } from 'node:path';\nimport type { Entry } from './fsops.js';\nimport type { Layout } from './layout.js';\nimport { providerId, type Role } from './roles.js';\nimport { contractDigest, renderInstructions } from './room/instructions.js';\n\nexport const CLAUDE_CARRIER_PLUGIN_ID = 'paseo-room-claude-carrier';\nexport const CLAUDE_CARRIER_PASEO_RANGE = '>=0.8.0 <0.9.0';\n\nconst STATIC_ASSETS = [\n  'paseo-plugin.json',\n  'package.json',\n  'tsconfig.json',\n  'index.server.ts',\n  'server/carrier.ts',\n] as const;\n\nfunction loadAsset(path: string): string {\n  return readFileSync(new URL(`./plugin-assets/${path}`, import.meta.url), 'utf8');\n}\n\nexport function claudeCarrierPluginDir(layout: Layout): string {\n  return join(layout.roomHome, 'plugin');\n}\n\nexport function renderClaudeCarrierContract(roles: readonly Role[]): string {\n  const contracts = Object.fromEntries(roles.map(role => [providerId('claude', role), renderInstructions(role)]));\n  return [\n    '/** Generated by paseo-room. The Markdown prompt assets remain authoritative. */',\n    `export const GENERATION = ${JSON.stringify(contractDigest())};`,\n    `export const CONTRACT: Readonly<Record<string, string>> = ${JSON.stringify(contracts, null, 2)};`,\n    '',\n  ].join('\\n');\n}\n\nexport function claudeCarrierEntries(layout: Layout, roles: readonly Role[]): Entry[] {\n  const root = claudeCarrierPluginDir(layout);\n  return [\n    { kind: 'dir', path: root },\n    { kind: 'dir', path: join(root, 'server') },\n    ...STATIC_ASSETS.map(path => ({ kind: 'file' as const, path: join(root, path), content: loadAsset(path) })),\n    { kind: 'file', path: join(root, 'server', 'contract.ts'), content: renderClaudeCarrierContract(roles) },\n  ];\n}\n","import { join, sep } from 'node:path';\nimport { lstat, rm } from 'node:fs/promises';\nimport metadata from '../package.json' with { type: 'json' };\nimport { claudeAgent } from './agents/claude.js';\nimport { codexAgent } from './agents/codex.js';\nimport { piAgent } from './agents/pi.js';\nimport type { Agent, AgentPlan, BuildOptions, Profile, Provider } from './agents/types.js';\nimport { AUTHENTICATION_GUIDE, renderAuthenticationGuide } from './auth.js';\nimport { applyEntries, exists, planEntries, type Entry } from './fsops.js';\nimport { layoutChecks, resolveLayout, roleHome, sharedRoom, type Layout, type Options } from './layout.js';\nimport { checkDaemon, mergeProfiles, minimumPaseoVersion, profileMatches, providerMatches, withSession, type ClientFactory, type LivePlugin, type LiveProfile, type Session } from './paseo.js';\nimport { CLAUDE_CARRIER_PLUGIN_ID, claudeCarrierEntries, claudeCarrierPluginDir } from './plugin.js';\nimport { fail, failed, hasFailure, pass, warn, type Check, type Operation, type Result } from './result.js';\nimport { contractDigest, renderInstructions } from './room/instructions.js';\nimport { MARKER, readMarker, renderMarker, type Marker } from './room.js';\nimport { DELEGATING_THINKING, profileId, providerId, providerLabel, ROLES, ROLE_COLOR, ROLE_ICON, ROLE_NOTES, ROLE_PASEO_TOOLS, ROLE_THINKING, type AgentId, type Role } from './roles.js';\n\nexport const AGENTS: Record<AgentId, Agent> = { codex: codexAgent, claude: claudeAgent, pi: piAgent };\n\nexport interface RunOptions extends Options {\n  readonly agents?: readonly AgentId[];\n  readonly apply?: boolean;\n  /**\n   * Write the role contract into Claude's `CLAUDE.md` as well as the plugin. Defaults to true:\n   * the plugin is the strong carrier, but whether a resumed session re-enters its creation hook\n   * is unproven, so the file fallback is only dropped when asked for.\n   */\n  readonly claudeMemoryContract?: boolean;\n  readonly env?: NodeJS.ProcessEnv;\n  readonly factory?: ClientFactory;\n}\n\nfunction sessionOptions(options: RunOptions): { password?: string; factory?: ClientFactory } {\n  const password = (options.env ?? process.env).PASEO_PASSWORD;\n  return { ...(password === undefined ? {} : { password }), ...(options.factory ? { factory: options.factory } : {}) };\n}\n\n/** The only per-agent differences are the home variable and the provider pins. */\nfunction roleProviders(\n  layout: Layout,\n  agent: Agent,\n  plan: { readonly binary: string; readonly argv?: AgentPlan['argv']; readonly providerEnv?: AgentPlan['providerEnv'] },\n  roles: readonly Role[],\n): Record<string, Provider> {\n  return Object.fromEntries(roles.map(role => [providerId(agent.id, role), {\n    extends: agent.id,\n    label: providerLabel(agent.id, role),\n    command: [plan.binary, ...(plan.argv?.[role] ?? [])],\n    env: { ...agent.providerEnv, ...plan.providerEnv?.[role], [agent.homeEnv]: roleHome(layout, agent.id, role) },\n    paseoTools: { enabled: ROLE_PASEO_TOOLS[role] },\n    ...agent.pins,\n  }]));\n}\n\n/** The picker preset that points at a provider, so a seat is one click rather than four. */\nfunction roleProfiles(agent: Agent, roles: readonly Role[]): Profile[] {\n  return roles.map(role => ({\n    id: profileId(agent.id, role),\n    name: providerLabel(agent.id, role),\n    icon: ROLE_ICON[role],\n    color: ROLE_COLOR[role],\n    provider: providerId(agent.id, role),\n    ...(agent.defaultModeId === undefined ? {} : { modeId: agent.defaultModeId }),\n    thinkingOptionId: ROLE_THINKING[role],\n    notes: ROLE_NOTES[role],\n  }));\n}\n\ninterface Desired {\n  readonly entries: readonly Entry[];\n  readonly providers: Readonly<Record<string, Provider>>;\n  readonly profiles: readonly Profile[];\n  readonly checks: readonly Check[];\n  readonly pluginPath?: string;\n}\nasync function buildDesired(\n  layout: Layout,\n  agents: readonly AgentId[],\n  roles: readonly Role[],\n  build: BuildOptions = {},\n): Promise<Desired> {\n  // Template, not linked into any seat: each repo owns its own root WORKSPACE_PROTOCOL.md.\n  // Named exactly as Workspace Protocol Precedence names it, so a copy needs no rename.\n  const entries: Entry[] = [\n    { kind: 'dir', path: layout.roomHome },\n    { kind: 'dir', path: sharedRoom(layout) },\n    { kind: 'file', path: join(sharedRoom(layout), 'WORKSPACE_PROTOCOL.md'), content: renderInstructions('workspace') },\n  ];\n  const providers: Record<string, Provider> = {};\n  const profiles: Profile[] = [];\n  const checks: Check[] = [];\n  const binaries: Partial<Record<AgentId, string>> = {};\n  for (const id of agents) {\n    const agent = AGENTS[id];\n    const plan = await agent.build(layout, roles, build);\n    entries.push(...plan.entries);\n    checks.push(...plan.checks);\n    const credentials = plan.credentials ?? [];\n    checks.push(...credentials.flatMap(credential => credential.checks));\n    const credentialPaths = new Set(credentials.map(credential => credential.path));\n    const collisions = plan.entries.filter(entry => credentialPaths.has(entry.path));\n    if (collisions.length > 0) {\n      checks.push(fail(`${id}.credentials`,\n        `${agent.label} produced managed entries for preserve-only credential paths: ${collisions.map(entry => entry.path).join(', ')}.`,\n        'This is an adapter defect; do not apply the plan.'));\n    }\n    if (plan.binary === undefined) continue;\n    binaries[id] = plan.binary;\n    Object.assign(providers, roleProviders(layout, agent, {\n      binary: plan.binary,\n      ...(plan.argv ? { argv: plan.argv } : {}),\n      ...(plan.providerEnv ? { providerEnv: plan.providerEnv } : {}),\n    }, roles));\n    profiles.push(...roleProfiles(agent, roles));\n  }\n  if (agents.every(id => binaries[id] !== undefined)) {\n    entries.push({\n      kind: 'file',\n      path: join(layout.roomHome, AUTHENTICATION_GUIDE),\n      content: renderAuthenticationGuide(layout.roomHome, binaries, agents, roles),\n    });\n    checks.push(warn('room.authentication-not-validated',\n      `Role authentication was not validated. Login instructions are managed at ${join(layout.roomHome, AUTHENTICATION_GUIDE)}.`,\n      'After setup --apply, follow that guide or run: paseo-room auth login <agent> <role>'));\n  }\n  const pluginPath = agents.includes('claude') ? claudeCarrierPluginDir(layout) : undefined;\n  if (pluginPath !== undefined) entries.push(...claudeCarrierEntries(layout, roles));\n  entries.push({ kind: 'file', path: join(layout.roomHome, MARKER), content: renderMarker(metadata.version, agents, roles, contractDigest(), markerMemoryContract(agents, build.memoryContract ?? true)) });\n  return { entries, providers, profiles, checks, ...(pluginPath === undefined ? {} : { pluginPath }) };\n}\n\n/**\n * The marker records which rendered contract generation installed this room, so an operator\n * who upgrades the package can see that the seats now hold older text. A room installed\n * before provenance existed has no digest, which is reported the same way rather than\n * treated as a broken marker.\n */\nfunction contractProvenance(previous: Marker | undefined): Check[] {\n  const digest = contractDigest();\n  if (!previous) return [];\n  if (previous.contract === digest) {\n    return [pass('room.contract', `Role contract generation ${digest} matches this package.`)];\n  }\n  const held = previous.contract === undefined\n    ? `was installed before the room recorded its contract generation (package ${previous.version})`\n    : `holds contract generation ${previous.contract}`;\n  return [warn('room.contract',\n    `This room ${held}; this package renders ${digest}. Managed role documents are rewritten by setup, and a running seat keeps the text it started with.`,\n    'Run: paseo-room setup --apply, then restart the affected seats.')];\n}\n\n/**\n * `thinkingOptionId` is seeded once and the operator's afterwards, so a risky selection is\n * reported rather than corrected. Nothing here changes provider selection, profile writes, or\n * exit status.\n */\nfunction thinkingDiagnostics(live: readonly LiveProfile[], desired: readonly Profile[]): Check[] {\n  const owned = new Set(desired.map(profile => profile.id));\n  const selected = live\n    .filter(entry => owned.has(String(entry.id)))\n    .filter(entry => DELEGATING_THINKING.some(option => option === entry.thinkingOptionId))\n    .map(entry => `${String(entry.id)} (${String(entry.thinkingOptionId)})`)\n    .sort();\n  if (selected.length === 0) return [];\n  return [warn('room.thinking',\n    `${String(selected.length)} room seats are set to a top reasoning option that Paseo describes as including automatic task delegation: ${selected.join(', ')}. Whether that option can actually delegate once the room has closed the native multi-agent paths is unverified: paseo-room has not verified whether those closures prevent that option from delegating, and left your selection in place.`,\n    `Choose a lower reasoning option for those seats in Paseo if you want the room's own defaults (${ROLE_THINKING.supervisor} for Supervisor, ${ROLE_THINKING.lead} for Lead and Peer).`)];\n}\n\n/**\n * Names what kind of drift was found. A path the room suppressed needs deleting rather than\n * rewriting, so reporting every difference as \"missing or outdated\" would name the wrong fix.\n */\nfunction fileDriftSummary(drifted: readonly Operation[]): string {\n  const removals = drifted.filter(operation => operation.action === 'remove').length;\n  const count = String(drifted.length);\n  const subject = drifted.length === 1 ? 'managed role file is' : 'managed role files are';\n  if (removals === 0) return `${count} ${subject} missing or outdated.`;\n  if (removals === drifted.length) return `${count} ${subject} present but suppressed by this room.`;\n  return `${count} ${subject} missing or outdated, and ${String(removals)} of them are present but suppressed by this room.`;\n}\n\n/** Catalog copies are one of the room's three native multi-agent closures, so their drift is named. */\nfunction fileDriftDetail(targets: readonly string[]): string {\n  const catalogs = targets.filter(target => target.endsWith(`${sep}model-catalog.json`));\n  if (catalogs.length === 0) return '';\n  const count = catalogs.length === 1 ? 'One of them is a generated Codex model catalog' : `${String(catalogs.length)} of them are generated Codex model catalogs`;\n  return ` ${count}, so those seats currently lack the scrubbed catalog closure rather than only older contract text.`;\n}\n\ninterface Stale {\n  readonly providerIds: readonly string[];\n  readonly profileIds: readonly string[];\n  readonly removePlugin: boolean;\n  /** Role homes are retained during setup because runtime-owned credentials may be inside. */\n  readonly retainedDirectories: readonly string[];\n}\nconst NOTHING_STALE: Stale = { providerIds: [], profileIds: [], removePlugin: false, retainedDirectories: [] };\n\nasync function safeDirectory(path: string, checks: Check[]): Promise<boolean> {\n  try {\n    const stat = await lstat(path);\n    if (stat.isDirectory()) return true;\n    checks.push(fail('room.path-safety',\n      `Refusing to traverse ${path}: every existing room directory ancestor must be a real directory, not a symbolic link or another file type.`,\n      'Move the path aside manually after checking it for role-owned credentials, then run the command again.'));\n    return false;\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === 'ENOENT') return false;\n    checks.push(fail('room.path-safety', `Could not inspect room directory ${path} without following links.`,\n      'Fix its parent permissions or move the path manually, then run the command again.'));\n    return false;\n  }\n}\n\n/** Refuse managed writes through any existing room-relative directory alias. */\nasync function roomPathSafety(layout: Layout, agents: readonly AgentId[], roles: readonly Role[]): Promise<Check[]> {\n  const checks: Check[] = [];\n  if (!await safeDirectory(layout.roomHome, checks)) return checks;\n  await safeDirectory(sharedRoom(layout), checks);\n  const rolesHome = join(layout.roomHome, 'roles');\n  if (!await safeDirectory(rolesHome, checks)) return checks;\n  for (const agent of agents) {\n    const agentHome = join(rolesHome, agent);\n    if (!await safeDirectory(agentHome, checks)) continue;\n    for (const role of roles) await safeDirectory(roleHome(layout, agent, role), checks);\n  }\n  return checks;\n}\n\n/** A previous setup may have seated agents or roles this one does not: drop those. */\nasync function staleFrom(layout: Layout, previous: Marker | undefined, agents: readonly AgentId[], roles: readonly Role[]): Promise<Stale> {\n  if (!previous) return NOTHING_STALE;\n  const kept = new Set(agents.flatMap(agent => roles.map(role => providerId(agent, role))));\n  const providerIds: string[] = [];\n  const profileIds: string[] = [];\n  const retainedDirectories: string[] = [];\n  for (const agent of previous.agents) {\n    for (const role of previous.roles) {\n      if (kept.has(providerId(agent, role))) continue;\n      providerIds.push(providerId(agent, role));\n      profileIds.push(profileId(agent, role));\n      const path = roleHome(layout, agent, role);\n      if (await exists(path)) retainedDirectories.push(path);\n    }\n  }\n  return {\n    providerIds,\n    profileIds,\n    removePlugin: previous.agents.includes('claude') && !agents.includes('claude'),\n    retainedDirectories,\n  };\n}\n\ninterface Plan {\n  readonly operations: readonly Operation[];\n  /** Carried out of the plan so apply rewrites the array it actually compared against. */\n  readonly liveProfiles: readonly LiveProfile[];\n  readonly livePlugin?: LivePlugin;\n  readonly pluginChecks: readonly Check[];\n}\n\nfunction pluginPlan(desired: Desired, stale: Stale, plugins: readonly LivePlugin[], expectedPath: string): {\n  operation?: Operation; livePlugin?: LivePlugin; checks: Check[];\n} {\n  const livePlugin = plugins.find(plugin => plugin.id === CLAUDE_CARRIER_PLUGIN_ID);\n  const shouldManage = desired.pluginPath !== undefined || stale.removePlugin;\n  if (!shouldManage) return { checks: [] };\n  if (livePlugin !== undefined && livePlugin.path !== expectedPath) {\n    return {\n      livePlugin,\n      checks: [fail('claude.plugin.path',\n        `Plugin ${CLAUDE_CARRIER_PLUGIN_ID} is registered from ${livePlugin.path}, not the room-owned path ${expectedPath}.`,\n        'Move or remove that conflicting plugin registration manually, then run setup again.')],\n    };\n  }\n  if (desired.pluginPath !== undefined) {\n    const healthy = livePlugin?.enabled === true && livePlugin.status === 'running' && livePlugin.error === undefined;\n    return {\n      ...(livePlugin === undefined ? {} : { livePlugin }),\n      operation: { action: livePlugin === undefined ? 'create' : healthy ? 'noop' : 'update', kind: 'plugin', target: CLAUDE_CARRIER_PLUGIN_ID },\n      checks: [],\n    };\n  }\n  return {\n    ...(livePlugin === undefined ? {} : { livePlugin }),\n    operation: { action: livePlugin === undefined ? 'noop' : 'remove', kind: 'plugin', target: CLAUDE_CARRIER_PLUGIN_ID },\n    checks: [],\n  };\n}\n\n/** One definition of drift, shared by the command that fixes it and the one that reports it. */\nasync function planRoom(session: Session, desired: Desired, stale: Stale, expectedPluginPath: string): Promise<Plan> {\n  const inspectPlugins = desired.pluginPath !== undefined || stale.removePlugin;\n  const [live, liveProfiles, plugins] = await Promise.all([\n    session.readProviders(), session.readProfiles(), inspectPlugins ? session.listPlugins() : Promise.resolve([]),\n  ]);\n  const byId = new Map(liveProfiles.map(entry => [String(entry.id), entry]));\n  const plugin = pluginPlan(desired, stale, plugins, expectedPluginPath);\n  return {\n    liveProfiles,\n    ...(plugin.livePlugin === undefined ? {} : { livePlugin: plugin.livePlugin }),\n    pluginChecks: plugin.checks,\n    operations: [\n      ...await planEntries(desired.entries),\n      ...Object.entries(desired.providers).map(([id, provider]) => ({\n        action: !(id in live) ? 'create' : providerMatches(provider, live[id]) ? 'noop' : 'update',\n        kind: 'provider',\n        target: id,\n      }) satisfies Operation),\n      ...desired.profiles.map(profile => ({\n        action: !byId.has(profile.id) ? 'create' : profileMatches(profile, byId.get(profile.id)) ? 'noop' : 'update',\n        kind: 'profile',\n        target: profile.id,\n      }) satisfies Operation),\n      ...stale.providerIds.filter(id => id in live).map(id => ({ action: 'remove', kind: 'provider', target: id }) satisfies Operation),\n      ...stale.profileIds.filter(id => byId.has(id)).map(id => ({ action: 'remove', kind: 'profile', target: id }) satisfies Operation),\n      ...(plugin.operation === undefined ? [] : [plugin.operation]),\n    ],\n  };\n}\n\nfunction pluginsEnabledCheck(enabled: boolean): Check {\n  return enabled\n    ? pass('claude.plugin.enabled', 'Paseo plugins are enabled for the required Claude contract carrier.')\n    : fail('claude.plugin.enabled',\n      'Claude rooms require the paseo-room trusted server plugin, but Paseo plugins are disabled. Plugins are trusted, unsandboxed code with access to the daemon machine.',\n      'Review that trust boundary, enable plugins in Paseo Settings, reload Paseo, then run setup again.');\n}\n\nfunction pluginRuntimeCheck(plugin: LivePlugin | undefined, expectedPath: string): Check {\n  if (plugin === undefined) {\n    return fail('claude.plugin.runtime', `Plugin ${CLAUDE_CARRIER_PLUGIN_ID} is not registered.`, 'Run: paseo-room setup --apply');\n  }\n  if (plugin.path !== expectedPath) {\n    return fail('claude.plugin.runtime', `Plugin ${CLAUDE_CARRIER_PLUGIN_ID} is registered from ${plugin.path}, not ${expectedPath}.`,\n      'Move or remove that conflicting plugin registration manually, then run setup again.');\n  }\n  if (!plugin.enabled || plugin.status !== 'running' || plugin.error !== undefined) {\n    const detail = plugin.error === undefined ? `status ${plugin.status}` : `${plugin.status}: ${plugin.error}`;\n    return fail('claude.plugin.runtime', `Plugin ${CLAUDE_CARRIER_PLUGIN_ID} is not running (${detail}).`, 'Run: paseo-room setup --apply');\n  }\n  return pass('claude.plugin.runtime', `Claude contract carrier plugin is running from ${expectedPath}.`);\n}\n\nasync function reconcilePlugin(\n  session: Session, desired: Desired, plan: Plan, pending: readonly Operation[], expectedPath: string,\n): Promise<Check[]> {\n  if (desired.pluginPath === undefined) {\n    if (plan.livePlugin !== undefined) await session.removePlugin(CLAUDE_CARRIER_PLUGIN_ID);\n    return [];\n  }\n  let plugin = plan.livePlugin;\n  if (plugin === undefined) {\n    plugin = await session.installPlugin(expectedPath, CLAUDE_CARRIER_PLUGIN_ID);\n  } else {\n    if (!plugin.enabled) plugin = await session.enablePlugin(CLAUDE_CARRIER_PLUGIN_ID);\n    const filesChanged = pending.some(operation =>\n      (operation.kind === 'file' || operation.kind === 'dir') && operation.target.startsWith(`${expectedPath}${sep}`),\n    );\n    const needsReload = filesChanged || plugin.status !== 'running' || plugin.error !== undefined;\n    if (needsReload) plugin = await session.reloadPlugin(CLAUDE_CARRIER_PLUGIN_ID);\n  }\n  return [pluginRuntimeCheck(plugin, expectedPath)];\n}\n\n/**\n * The marker value for the Claude memory-contract choice. A room with no Claude seat records\n * nothing: the choice only describes Claude's `CLAUDE.md`, and storing it anyway would leave\n * state in the marker that nothing generated and nothing reads.\n */\nfunction markerMemoryContract(agents: readonly AgentId[], memoryContract: boolean): boolean | undefined {\n  return agents.includes('claude') ? memoryContract : undefined;\n}\n\n/**\n * With the file carrier suppressed, the plugin is the room's only Claude carrier. The plugin\n * is verified, so this is not a silent risk — but whether a resumed session re-enters the\n * creation hook is unproven, so the operator is told what they gave up rather than reassured.\n */\nfunction memoryContractDiagnostic(agents: readonly AgentId[], memoryContract: boolean): Check[] {\n  if (memoryContract || !agents.includes('claude')) return [];\n  return [warn('claude.memory-contract',\n    'Claude role CLAUDE.md files carry your global memory only: the role contract was not written to them, so the trusted server plugin is this room\\'s only Claude carrier. Only a newly created agent passes through its creation hook, and whether a resumed session re-enters that hook is unproven.',\n    'Drop --no-claude-memory-contract and run setup --apply to restore the file fallback.')];\n}\n\n/** The whole product: write the role homes, then register them with Paseo. */\nexport async function setup(options: RunOptions = {}): Promise<Result> {\n  const layout = resolveLayout(options, options.env);\n  const agents = options.agents ?? ['codex'];\n  const memoryContract = options.claudeMemoryContract ?? true;\n  const invalid = layoutChecks(layout, agents);\n  if (invalid.length > 0) return failed('setup', invalid);\n  const rootSafety = await roomPathSafety(layout, [], []);\n  if (hasFailure(rootSafety)) return failed('setup', rootSafety);\n  const previous = await readMarker(layout);\n  const safetyAgents = [...new Set([...agents, ...(previous?.agents ?? [])])];\n  const pathSafety = await roomPathSafety(layout, safetyAgents, ROLES);\n  if (hasFailure(pathSafety)) return failed('setup', pathSafety);\n  // Cleanup uses the APIs required by the old selection too (notably Claude's plugin API).\n  const compatibilityAgents = [...new Set([...agents, ...(previous?.agents ?? [])])];\n  const daemon = await checkDaemon(layout, options.env, minimumPaseoVersion(compatibilityAgents));\n  if (!daemon.daemon) return failed('setup', daemon.checks);\n  const desired = await buildDesired(layout, agents, ROLES, { memoryContract });\n  const stale = await staleFrom(layout, previous, agents, ROLES);\n  const retained = stale.retainedDirectories.length === 0 ? [] : [warn(\n    'room.stale-role-homes-preserved',\n    `Preserved ${String(stale.retainedDirectories.length)} deselected role homes because they may contain role-owned credentials or runtime state.`,\n    `Use paseo-room remove --apply to delete the entire room after reviewing its credential warning, or remove deselected homes manually: ${stale.retainedDirectories.join(', ')}`,\n  )];\n  const checks = [...daemon.checks, ...desired.checks, ...retained];\n  if (hasFailure(checks)) return failed('setup', checks);\n\n  return withSession(daemon.daemon, async session => {\n    const expectedPluginPath = claudeCarrierPluginDir(layout);\n    const plan = await planRoom(session, desired, stale, expectedPluginPath);\n    const { operations, liveProfiles } = plan;\n    const pending = operations.filter(operation => operation.action !== 'noop');\n    const pluginPreconditions = desired.pluginPath === undefined\n      ? plan.pluginChecks\n      : [pluginsEnabledCheck(await session.pluginsEnabled()), ...plan.pluginChecks];\n    // Diagnostics last: nothing above may be reached only through a warning.\n    const preApplyDiagnostics = [...checks, ...pluginPreconditions, ...memoryContractDiagnostic(agents, memoryContract), ...contractProvenance(previous), ...thinkingDiagnostics(liveProfiles, desired.profiles)];\n    if (hasFailure(preApplyDiagnostics) || !options.apply) {\n      return {\n        command: 'setup',\n        outcome: hasFailure(preApplyDiagnostics) ? 'failed' : pending.length > 0 ? 'changes-planned' : 'ok',\n        changed: false, checks: preApplyDiagnostics, operations,\n      } satisfies Result;\n    }\n    // Keep the old marker until daemon reconciliation succeeds. If a remote write fails,\n    // rerunning setup can still discover every stale provider/profile/plugin it must remove.\n    const markerPath = join(layout.roomHome, MARKER);\n    const markerEntries = desired.entries.filter(entry => entry.path === markerPath);\n    await applyEntries(desired.entries.filter(entry => entry.path !== markerPath));\n    const ids = Object.keys(desired.providers);\n    await session.writeProviders(desired.providers);\n    if (stale.providerIds.length > 0) await session.removeProviders(stale.providerIds);\n    // Profiles point at providers, so they are written once the providers exist — and\n    // only when something changed, since one write replaces the host's whole array.\n    let appliedProfiles = liveProfiles;\n    if (pending.some(operation => operation.kind === 'profile')) {\n      appliedProfiles = mergeProfiles(liveProfiles, desired.profiles, stale.profileIds);\n      await session.writeProfiles(appliedProfiles);\n    }\n    await session.refresh(ids);\n    const pluginChecks = await reconcilePlugin(session, desired, plan, pending, expectedPluginPath);\n    await applyEntries(markerEntries);\n    const appliedMarker: Marker = {\n      version: metadata.version, agents: [...agents], roles: [...ROLES], contract: contractDigest(),\n      ...(markerMemoryContract(agents, memoryContract) === false ? { claudeMemoryContract: false } : {}),\n    };\n    const appliedChecks = [...checks, ...pluginPreconditions, ...pluginChecks,\n      pass('room.applied', `Room ready at ${layout.roomHome} with ${String(ids.length)} Paseo providers.`),\n      ...memoryContractDiagnostic(agents, memoryContract),\n      ...contractProvenance(appliedMarker), ...thinkingDiagnostics(appliedProfiles, desired.profiles)];\n    return {\n      command: 'setup', outcome: hasFailure(appliedChecks) ? 'failed' : 'ok', changed: pending.length > 0,\n      checks: appliedChecks, operations,\n    } satisfies Result;\n  }, sessionOptions(options));\n}\n\nexport async function verify(options: RunOptions = {}): Promise<Result> {\n  const layout = resolveLayout(options, options.env);\n  const rootSafety = await roomPathSafety(layout, [], []);\n  if (hasFailure(rootSafety)) return failed('verify', rootSafety);\n  const marker = await readMarker(layout);\n  if (!marker) {\n    return failed('verify', [fail('room.marker', `No room found at ${layout.roomHome}.`, 'Run: paseo-room setup --apply')]);\n  }\n  const invalid = layoutChecks(layout, marker.agents);\n  if (invalid.length > 0) return failed('verify', invalid);\n  const pathSafety = await roomPathSafety(layout, marker.agents, marker.roles);\n  if (hasFailure(pathSafety)) return failed('verify', pathSafety);\n  const daemon = await checkDaemon(layout, options.env, minimumPaseoVersion(marker.agents));\n  if (!daemon.daemon) return failed('verify', daemon.checks);\n  const desired = await buildDesired(layout, marker.agents, marker.roles, {\n    // The room's own recorded choice, so verify compares against what setup wrote.\n    memoryContract: marker.claudeMemoryContract ?? true,\n  });\n  const checks = [...daemon.checks, ...desired.checks];\n  if (hasFailure(checks)) return failed('verify', checks);\n\n  return withSession(daemon.daemon, async session => {\n    const expectedPluginPath = claudeCarrierPluginDir(layout);\n    const plan = await planRoom(session, desired, NOTHING_STALE, expectedPluginPath);\n    const { operations, liveProfiles } = plan;\n    const drifted = operations.filter(operation => operation.action !== 'noop');\n    const count = (kind: Operation['kind']): number => drifted.filter(operation => operation.kind === kind).length;\n    const providers = count('provider');\n    const profiles = count('profile');\n    const driftedFiles = drifted.filter(operation => !['provider', 'profile', 'plugin'].includes(operation.kind));\n    const files = driftedFiles.length;\n    const pluginChecks = desired.pluginPath === undefined ? [] : [\n      pluginsEnabledCheck(await session.pluginsEnabled()),\n      ...plan.pluginChecks,\n      pluginRuntimeCheck(plan.livePlugin, expectedPluginPath),\n    ];\n    const all: Check[] = [...checks,\n      files === 0\n        ? pass('room.files', 'Every managed role file matches the current definition.')\n        : fail('room.files', `${fileDriftSummary(driftedFiles)}${fileDriftDetail(driftedFiles.map(operation => operation.target))}`, 'Run: paseo-room setup --apply'),\n      providers === 0\n        ? pass('room.providers', `All ${String(Object.keys(desired.providers).length)} Paseo providers are registered as expected.`)\n        : fail('room.providers', `${String(providers)} Paseo providers are missing or differ.`, 'Run: paseo-room setup --apply'),\n      profiles === 0\n        ? pass('room.profiles', `All ${String(desired.profiles.length)} Paseo agent profiles are registered as expected.`)\n        : fail('room.profiles', `${String(profiles)} Paseo agent profiles are missing or differ.`, 'Run: paseo-room setup --apply'),\n      ...pluginChecks,\n      // Diagnostics last: a warning never precedes the failure it might be mistaken for.\n      ...memoryContractDiagnostic(marker.agents, marker.claudeMemoryContract ?? true),\n      ...contractProvenance(marker),\n      ...thinkingDiagnostics(liveProfiles, desired.profiles),\n    ];\n    return {\n      command: 'verify', outcome: hasFailure(all) ? 'failed' : 'ok', changed: false, checks: all, operations,\n    } satisfies Result;\n  }, sessionOptions(options));\n}\n\nexport async function remove(options: RunOptions = {}): Promise<Result> {\n  const layout = resolveLayout(options, options.env);\n  const rootSafety = await roomPathSafety(layout, [], []);\n  if (hasFailure(rootSafety)) return failed('remove', rootSafety);\n  const marker = await readMarker(layout);\n  if (!marker) {\n    return failed('remove', [fail('room.marker', `No room found at ${layout.roomHome}.`, 'Nothing to remove; the room home was never created here.')]);\n  }\n  // A recursive delete needs a floor, so the layout rules gate this command too.\n  const invalid = layoutChecks(layout, marker.agents);\n  if (invalid.length > 0) return failed('remove', invalid);\n  const ids = marker.agents.flatMap(agent => marker.roles.map(role => providerId(agent, role)));\n  const profiles = new Set(marker.agents.flatMap(agent => marker.roles.map(role => profileId(agent, role))));\n  const hasClaude = marker.agents.includes('claude');\n  const operations: Operation[] = [\n    ...ids.map(id => ({ action: 'remove', kind: 'provider', target: id }) satisfies Operation),\n    ...[...profiles].map(id => ({ action: 'remove', kind: 'profile', target: id }) satisfies Operation),\n    ...(hasClaude ? [{ action: 'remove', kind: 'plugin', target: CLAUDE_CARRIER_PLUGIN_ID } satisfies Operation] : []),\n    { action: 'remove', kind: 'dir', target: layout.roomHome },\n  ];\n  const credentialWarning = warn('room.remove.credentials',\n    `Deleting ${layout.roomHome} will delete role-owned credential files stored inside it. Native OS keyring entries are not inspected or deleted and may remain. Operator agent-home credentials are untouched.`);\n  if (!options.apply) {\n    return { command: 'remove', outcome: 'changes-planned', changed: false, checks: [credentialWarning], operations };\n  }\n  const daemon = await checkDaemon(layout, options.env);\n  const checks: Check[] = [credentialWarning];\n  if (!daemon.daemon) {\n    return failed('remove', [\n      credentialWarning,\n      ...daemon.checks,\n      fail(\n        'room.files',\n        `Preserved ${layout.roomHome}, including its room marker, because Paseo cleanup could not start.`,\n        'Start Paseo, then run: paseo-room remove --apply',\n      ),\n    ]);\n  }\n  try {\n    await withSession(daemon.daemon, async session => {\n      if (hasClaude) {\n        const plugin = (await session.listPlugins()).find(entry => entry.id === CLAUDE_CARRIER_PLUGIN_ID);\n        const expectedPath = claudeCarrierPluginDir(layout);\n        if (plugin !== undefined && plugin.path !== expectedPath) {\n          throw new Error(`refusing to remove foreign plugin path ${plugin.path}`);\n        }\n        if (plugin !== undefined) await session.removePlugin(CLAUDE_CARRIER_PLUGIN_ID);\n      }\n      await session.removeProviders(ids);\n      const live = await session.readProfiles();\n      const kept = live.filter(entry => !profiles.has(String(entry.id)));\n      if (kept.length !== live.length) await session.writeProfiles(kept);\n    }, sessionOptions(options));\n    checks.push(pass('room.providers', `Removed ${String(ids.length)} Paseo providers and their agent profiles.`));\n  } catch {\n    return failed('remove', [\n      credentialWarning,\n      fail(\n        'room.providers',\n        `Paseo provider/profile cleanup did not complete; ${layout.roomHome} and its room marker were preserved.`,\n        'Restore Paseo connectivity, then run: paseo-room remove --apply',\n      ),\n    ]);\n  }\n  // Explicit remove owns the whole room home, including runtime-owned role credentials.\n  try {\n    await rm(layout.roomHome, { recursive: true, force: true });\n  } catch (error) {\n    const detail = error instanceof Error ? error.message : 'unknown filesystem error';\n    checks.push(fail(\n      'room.files',\n      `Removed the Paseo providers and profiles, but could not fully delete ${layout.roomHome}: ${detail}`,\n      'Delete that directory manually after reviewing it for role-owned credentials; the Paseo side is already clean.',\n    ));\n    const completedOperations = operations.filter(operation => operation.kind !== 'dir');\n    return { command: 'remove', outcome: 'failed', changed: true, checks, operations: completedOperations };\n  }\n  checks.push(pass('room.files', `Deleted ${layout.roomHome}.`));\n  return { command: 'remove', outcome: 'ok', changed: true, checks, operations };\n}\n","import * as clack from '@clack/prompts';\nimport { AGENTS, remove, setup, verify, type RunOptions } from './commands.js';\nimport type { Result } from './result.js';\nimport { AGENT_IDS, type AgentId } from './roles.js';\n\nexport interface Prompts {\n  select(options: { readonly message: string; readonly options: readonly { readonly value: string; readonly label: string }[] }): Promise<string | symbol>;\n  multiselect(options: { readonly message: string; readonly options: readonly { readonly value: AgentId; readonly label: string }[] }): Promise<AgentId[] | symbol>;\n  confirm(options: { readonly message: string }): Promise<boolean | symbol>;\n}\nexport const terminalPrompts: Prompts = {\n  select: options => clack.select({ message: options.message, options: [...options.options] }),\n  multiselect: options => clack.multiselect({ message: options.message, options: [...options.options], required: true }),\n  confirm: options => clack.confirm({ message: options.message, initialValue: false }),\n};\n\n/** Guided path over the same commands the flags use; nothing extra happens here. */\nexport async function runWizard(\n  prompts: Prompts,\n  emit: (result: Result) => number,\n  write: (text: string) => void,\n  options: RunOptions = {},\n  onAction?: (action: string) => void,\n): Promise<number> {\n  const cancelled = (): number => { write('Cancelled; nothing was changed.\\n'); return 0; };\n  const action = await prompts.select({\n    message: 'What do you want to do?',\n    options: [\n      { value: 'setup', label: 'Set up / update the room (login stays separate)' },\n      { value: 'verify', label: 'Verify the current room' },\n      { value: 'remove', label: 'Remove the room' },\n    ],\n  });\n  if (typeof action === 'symbol') return cancelled();\n  onAction?.(action);\n  if (action === 'verify') return emit(await verify(options));\n  if (action === 'remove') {\n    const preview = await remove(options);\n    const status = emit(preview);\n    if (preview.outcome !== 'changes-planned') return status;\n    const approved = await prompts.confirm({ message: 'Delete the room home, including role credentials, and its Paseo providers?' });\n    return approved === true ? emit(await remove({ ...options, apply: true })) : cancelled();\n  }\n  const agents = await prompts.multiselect({\n    message: 'Which coding agents should the room use?',\n    options: AGENT_IDS.map(value => ({ value, label: AGENTS[value].label })),\n  });\n  if (typeof agents === 'symbol' || agents.length === 0) return cancelled();\n  // Only meaningful for Claude: the other adapters have no plugin carrier to fall back from.\n  let claudeMemoryContract = true;\n  if (agents.includes('claude')) {\n    const carrier = await prompts.select({\n      message: 'Claude role contract carrier: the room plugin is always used. Also write the contract into each role CLAUDE.md?',\n      options: [\n        { value: 'both', label: 'Yes — keep it as a fallback (recommended; resume behaviour is unproven)' },\n        { value: 'plugin', label: 'No — plugin only; CLAUDE.md keeps your global memory alone' },\n      ],\n    });\n    if (typeof carrier === 'symbol') return cancelled();\n    claudeMemoryContract = carrier === 'both';\n  }\n  const setupOptions = { ...options, agents, claudeMemoryContract };\n  const preview = await setup(setupOptions);\n  const status = emit(preview);\n  if (preview.outcome !== 'changes-planned') return status;\n  const approved = await prompts.confirm({ message: 'Apply these changes? Authentication will not be validated or started.' });\n  if (approved !== true) return cancelled();\n  return emit(await setup({ ...setupOptions, apply: true }));\n}\n","import { Command, CommanderError, InvalidArgumentError } from 'commander';\nimport metadata from '../package.json' with { type: 'json' };\nimport { loginRole, type LoginSpawner } from './auth.js';\nimport { remove, setup, verify, type RunOptions } from './commands.js';\nimport { renderHuman, renderJson } from './render.js';\nimport { exitCode, fail, failed, type Result } from './result.js';\nimport { AGENT_IDS, type AgentId } from './roles.js';\nimport { PromptAssetError } from './room/prompts.js';\nimport type { Prompts } from './wizard.js';\n\nexport interface Output {\n  readonly stdout: (text: string) => void;\n  readonly stderr: (text: string) => void;\n}\nexport interface CliContext {\n  readonly isTTY?: boolean;\n  readonly prompts?: Prompts;\n  readonly options?: RunOptions;\n  readonly loginSpawn?: LoginSpawner;\n}\n\n/** Commander passes no initial value, so the first call starts the list. */\nfunction collectAgent(value: string, previous: AgentId[] | undefined): AgentId[] {\n  const agent = AGENT_IDS.find(id => id === value);\n  if (!agent) throw new InvalidArgumentError(`Unknown agent: ${value}`);\n  const seated = previous ?? [];\n  return seated.includes(agent) ? seated : [...seated, agent];\n}\n\nconst PATH_FLAGS = ['roomHome', 'codexHome', 'claudeHome', 'piHome', 'codexBin', 'claudeBin', 'piBin', 'paseoBin'] as const;\n\nfunction optionsFrom(raw: Record<string, unknown>, base: RunOptions): RunOptions {\n  const paths: Record<string, string> = {};\n  for (const flag of PATH_FLAGS) {\n    const value = raw[flag];\n    if (typeof value === 'string' && value.trim()) paths[flag] = value.trim();\n  }\n  const agents = Array.isArray(raw.agent) && raw.agent.length > 0 ? (raw.agent as AgentId[]) : undefined;\n  return {\n    ...base, ...paths, ...(agents ? { agents } : {}), ...(raw.apply === true ? { apply: true } : {}),\n    // Commander defaults a --no- flag to true, so only an explicit opt-out is carried.\n    ...(raw.claudeMemoryContract === false ? { claudeMemoryContract: false } : {}),\n  };\n}\n\nfunction failedFromThrown(command: string, error: unknown): Result {\n  if (error instanceof PromptAssetError) {\n    return failed(command, [fail(\n      `${command}.prompt-asset`,\n      error.message,\n      'Reinstall paseo-room, then try again.',\n    )]);\n  }\n  const detail = error instanceof Error ? error.message : 'unknown error';\n  return failed(command, [fail(\n    `${command}.error`,\n    detail,\n    'Check that Paseo is running and reachable, then try again.',\n  )]);\n}\n\nexport async function runCli(argv: readonly string[], output: Output, context: CliContext = {}): Promise<number> {\n  const password = (context.options?.env ?? process.env).PASEO_PASSWORD;\n  const redact = (text: string): string => (password ? text.split(password).join('[redacted]') : text);\n  // Set once the flags are parsed; the wizard path never sees flags, so text output is right there.\n  let json = false;\n  const emit = (result: Result): number => {\n    output.stdout(redact(json ? renderJson(result) : renderHuman(result)));\n    return exitCode(result);\n  };\n  const isTTY = context.isTTY ?? (process.stdin.isTTY && process.stdout.isTTY && process.stderr.isTTY);\n  const base = context.options ?? {};\n\n  if (argv.length === 0) {\n    if (!isTTY) {\n      output.stderr('paseo-room: no command given. Try: paseo-room setup, verify, remove, auth login, or --help.\\n');\n      return 2;\n    }\n    let wizardCommand = 'wizard';\n    try {\n      // @clack/prompts is only reachable here, so keep it off the scripted path.\n      const { runWizard, terminalPrompts } = await import('./wizard.js');\n      return await runWizard(\n        context.prompts ?? terminalPrompts,\n        emit,\n        text => { output.stdout(text); },\n        base,\n        action => { wizardCommand = action; },\n      );\n    } catch (error) {\n      return emit(failedFromThrown(wizardCommand, error));\n    }\n  }\n  const program = new Command()\n    .name('paseo-room')\n    .description('Configure Codex/Claude/Pi role homes in $HOME and register them with your local Paseo daemon.')\n    .version(metadata.version)\n    .usage('<setup|verify|remove> [options]\\n       auth login <codex|claude|pi> <supervisor|lead|peer> [options]')\n    .argument('<command>', 'setup | verify | remove | auth')\n    .argument('[command-arguments...]', 'auth login <agent> <role>')\n    .option('--agent <agent>', 'codex, claude, or pi; repeat to combine (default: codex)', collectAgent)\n    .option('--apply', 'actually make the changes (default: dry run)')\n    .option('--json', 'machine-readable output')\n    .option('--no-claude-memory-contract', 'omit the role contract from Claude role CLAUDE.md files, leaving the room plugin as the only Claude carrier')\n    .option('--room-home <path>', 'where role homes are written (default: ~/.paseo-room)')\n    .option('--codex-home <path>', 'source Codex config (default: ~/.codex)')\n    .option('--claude-home <path>', 'source Claude Code config (default: ~/.claude)')\n    .option('--pi-home <path>', 'source Pi config (default: ~/.pi/agent)')\n    .option('--codex-bin <path>', 'Codex executable (default: found on PATH)')\n    .option('--claude-bin <path>', 'Claude Code executable (default: found on PATH)')\n    .option('--pi-bin <path>', 'Pi executable (default: found on PATH)')\n    .option('--paseo-bin <path>', 'Paseo executable (default: found on PATH)')\n    .configureOutput({ writeOut: text => { output.stdout(text); }, writeErr: text => { output.stderr(text); } })\n    .exitOverride();\n\n  let command: string;\n  let commandArguments: string[];\n  let options: RunOptions;\n  let raw: Record<string, unknown>;\n  try {\n    program.parse([...argv], { from: 'user' });\n    raw = program.opts<Record<string, unknown>>();\n    json = raw.json === true;\n    command = program.args[0] ?? '';\n    commandArguments = program.args.slice(1);\n    options = optionsFrom(raw, base);\n  } catch (error) {\n    if (error instanceof CommanderError && error.exitCode === 0) return 0;\n    return 2;\n  }\n\n  try {\n    // Only setup chooses this: verify and remove read the room's recorded choice instead, and\n    // auth does not carry it at all. Silently ignoring it would misreport what the run did.\n    if (raw.claudeMemoryContract === false && (command === 'verify' || command === 'remove')) {\n      output.stderr(`paseo-room ${command}: --no-claude-memory-contract is a setup choice recorded in the room marker; ${command} reads it from there.\\n`);\n      return 2;\n    }\n    if (command === 'auth') {\n      if (raw.claudeMemoryContract === false) {\n        output.stderr('paseo-room auth login only authenticates a role and does not use --no-claude-memory-contract.\\n');\n        return 2;\n      }\n      if (raw.apply === true) {\n        output.stderr('paseo-room auth login is already explicit and does not use --apply.\\n');\n        return 2;\n      }\n      if (raw.json === true) {\n        output.stderr('paseo-room auth login is interactive and does not support --json.\\n');\n        return 2;\n      }\n      if (raw.agent !== undefined) {\n        output.stderr('paseo-room auth login takes exactly one positional agent and does not use --agent.\\n');\n        return 2;\n      }\n      if (commandArguments.length !== 3 || commandArguments[0] !== 'login') {\n        output.stderr('Usage: paseo-room auth login <codex|claude|pi> <supervisor|lead|peer>\\n');\n        return 2;\n      }\n      return await loginRole(commandArguments[1] ?? '', commandArguments[2] ?? '', {\n        ...options,\n        isTTY,\n        ...(context.loginSpawn ? { spawn: context.loginSpawn } : {}),\n      }, output);\n    }\n    if (commandArguments.length > 0) {\n      output.stderr(`paseo-room ${command}: unexpected arguments: ${commandArguments.join(' ')}\\n`);\n      return 2;\n    }\n    if (command === 'setup') return emit(await setup(options));\n    if (command === 'verify') return emit(await verify(options));\n    if (command === 'remove') return emit(await remove(options));\n  } catch (error) {\n    return emit(failedFromThrown(command, error));\n  }\n  output.stderr(`paseo-room: unknown command \"${command}\". Try: setup, verify, remove, or auth login.\\n`);\n  return 2;\n}\n","import type { Result } from './result.js';\n\nexport function renderJson(result: Result): string {\n  return `${JSON.stringify({ schemaVersion: 2, ...result }, null, 2)}\\n`;\n}\n\nconst ICONS = { pass: '✓', warn: '!', fail: '✗' } as const;\n\nexport function renderHuman(result: Result): string {\n  const lines: string[] = [];\n  for (const check of result.checks) {\n    lines.push(`${ICONS[check.status]} ${check.message}`);\n    if (check.fix) lines.push(`  → ${check.fix}`);\n  }\n  const changes = result.operations.filter(operation => operation.action !== 'noop');\n  if (changes.length > 0) {\n    lines.push('', result.changed ? 'Applied:' : 'Planned changes:');\n    for (const operation of changes) lines.push(`  ${operation.action} ${operation.kind} ${operation.target}`);\n    const unchanged = result.operations.length - changes.length;\n    if (unchanged > 0) lines.push(`  (${String(unchanged)} already up to date)`);\n  } else if (result.operations.length > 0) {\n    lines.push('', 'Everything is already up to date.');\n  }\n  lines.push('', `${result.command}: ${result.outcome}`);\n  return `${lines.join('\\n')}\\n`;\n}\n","#!/usr/bin/env node\nimport { runCli } from './cli.js';\n\nprocess.exitCode = await runCli(process.argv.slice(2), {\n  stdout: text => { process.stdout.write(text); },\n  stderr: text => { process.stderr.write(text); },\n});\n"],"mappings":";;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA,MACE,MAAQ;AAAA,MACR,SAAW;AAAA,MACX,aAAe;AAAA,MACf,UAAY;AAAA,QACV;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,MACA,UAAY;AAAA,MACZ,MAAQ;AAAA,MACR,YAAc;AAAA,QACZ,MAAQ;AAAA,QACR,KAAO;AAAA,MACT;AAAA,MACA,SAAW;AAAA,MACX,QAAU;AAAA,MACV,MAAQ;AAAA,MACR,SAAW;AAAA,QACT,MAAQ;AAAA,MACV;AAAA,MACA,KAAO;AAAA,QACL,cAAc;AAAA,MAChB;AAAA,MACA,OAAS;AAAA,QACP;AAAA,MACF;AAAA,MACA,SAAW;AAAA,QACT,WAAa;AAAA,QACb,MAAQ;AAAA,QACR,MAAQ;AAAA,QACR,gBAAgB;AAAA,QAChB,OAAS;AAAA,QACT,SAAW;AAAA,QACX,QAAU;AAAA,MACZ;AAAA,MACA,cAAgB;AAAA,QACd,kBAAkB;AAAA,QAClB,oBAAoB;AAAA,QACpB,WAAa;AAAA,QACb,QAAU;AAAA,QACV,aAAa;AAAA,QACb,KAAO;AAAA,MACT;AAAA,MACA,iBAAmB;AAAA,QACjB,cAAc;AAAA,QACd,eAAe;AAAA,QACf,iBAAiB;AAAA,QACjB,QAAU;AAAA,QACV,MAAQ;AAAA,QACR,YAAc;AAAA,QACd,qBAAqB;AAAA,QACrB,QAAU;AAAA,MACZ;AAAA,IACF;AAAA;AAAA;;;ACrCO,SAAS,KAAK,IAAY,SAAwB;AACvD,SAAO,EAAE,IAAI,QAAQ,QAAQ,QAAQ;AACvC;AACO,SAAS,KAAK,IAAY,SAAiB,KAAqB;AACrE,SAAO,EAAE,IAAI,QAAQ,QAAQ,SAAS,GAAI,QAAQ,SAAY,CAAC,IAAI,EAAE,IAAI,EAAG;AAC9E;AACO,SAAS,KAAK,IAAY,SAAiB,KAAoB;AACpE,SAAO,EAAE,IAAI,QAAQ,QAAQ,SAAS,IAAI;AAC5C;AACO,SAAS,OAAO,SAAiB,QAAkC;AACxE,SAAO,EAAE,SAAS,SAAS,UAAU,SAAS,OAAO,QAAQ,YAAY,CAAC,EAAE;AAC9E;AACO,SAAS,WAAW,QAAmC;AAC5D,SAAO,OAAO,KAAK,WAAS,MAAM,WAAW,MAAM;AACrD;AACO,SAAS,SAAS,QAAwB;AAC/C,SAAO,OAAO,YAAY,YAAY,WAAW,OAAO,MAAM,IAAI,IAAI;AACxE;AAtCA;AAAA;AAAA;AAAA;AAAA;;;ACAA,SAAS,OAAO,gBAAgB;AAehC,SAAS,SAASA,OAAiD;AACjE,MAAIA,MAAK,YAAY,EAAG,QAAO;AAC/B,MAAIA,MAAK,SAAS,EAAG,QAAO;AAC5B,MAAIA,MAAK,OAAO,EAAG,QAAO;AAC1B,MAAIA,MAAK,kBAAkB,EAAG,QAAO;AACrC,MAAIA,MAAK,cAAc,EAAG,QAAO;AACjC,SAAO;AACT;AAGA,eAAsB,sBAAsB,MAA4C;AACtF,MAAIA;AACJ,MAAI;AACF,IAAAA,QAAO,MAAM,MAAM,IAAI;AAAA,EACzB,SAAS,OAAO;AACd,QAAK,MAAgC,SAAS,SAAU,QAAO,EAAE,MAAM,UAAU;AACjF,WAAO,EAAE,MAAM,UAAU,UAAU,qBAAqB;AAAA,EAC1D;AACA,MAAIA,MAAK,OAAO,EAAG,QAAO,EAAE,MAAM,OAAO;AACzC,MAAI,CAACA,MAAK,eAAe,EAAG,QAAO,EAAE,MAAM,UAAU,UAAU,SAASA,KAAI,EAAE;AAC9E,MAAI;AACF,WAAO,EAAE,MAAM,WAAW,QAAQ,MAAM,SAAS,IAAI,EAAE;AAAA,EACzD,QAAQ;AACN,WAAO,EAAE,MAAM,UAAU,UAAU,2BAA2B;AAAA,EAChE;AACF;AAEA,SAAS,WAAW,OAAuB;AACzC,SAAO,IAAI,MAAM,WAAW,KAAK,OAAO,CAAC;AAC3C;AAEO,SAAS,YACd,aACA,YACA,OAA0B,CAAC,GACnB;AACR,QAAM,YAAY,OAAO,QAAQ,WAAW,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,GAAG,IAAI,IAAI,WAAW,KAAK,CAAC,EAAE;AACnG,SAAO,CAAC,GAAG,WAAW,GAAG,CAAC,YAAY,GAAG,IAAI,EAAE,IAAI,UAAU,CAAC,EAAE,KAAK,GAAG;AAC1E;AAaO,SAAS,yBAAyB,OAAwC;AAC/E,QAAM,SAAS,MAAM,SAAS,uBAAuB,MAAM,MAAM,MAAM;AACvE,MAAI,MAAM,MAAM,SAAS,QAAQ;AAC/B,WAAO;AAAA,MAAK,GAAG,MAAM,EAAE;AAAA,MACrB,GAAG,MAAM,KAAK,IAAI,MAAM,IAAI,mGAAmG,MAAM,IAAI;AAAA,MACzI,4EAA4E,MAAM,KAAK,IAAI,MAAM;AAAA,IAAE;AAAA,EACvG;AACA,MAAI,MAAM,MAAM,SAAS,WAAW;AAClC,WAAO;AAAA,MAAK,GAAG,MAAM,EAAE;AAAA,MACrB,GAAG,MAAM,KAAK,IAAI,MAAM,IAAI,sDAAsD,MAAM,IAAI,OAAO,MAAM,MAAM,MAAM;AAAA,MACrH,4DAA4D,WAAW,MAAM,IAAI,CAAC,8CAA8C,MAAM,KAAK,IAAI,MAAM;AAAA,IAAE;AAAA,EAC3J;AACA,SAAO;AAAA,IAAK,GAAG,MAAM,EAAE;AAAA,IACrB,GAAG,MAAM,KAAK,IAAI,MAAM,IAAI,kDAAkD,MAAM,IAAI,SAAS,MAAM,MAAM,QAAQ;AAAA,IACrH,8HAA8H,MAAM,KAAK,IAAI,MAAM;AAAA,EAAE;AACzJ;AAEO,SAAS,aAAa,OAA4B,WAAwC;AAC/F,SAAO,UAAU,OAAO,UAAQ,MAAM,IAAI,IAAI,CAAC;AACjD;AAEO,SAAS,uBAAuB,IAAY,OAAe,MAAc,OAAiC;AAC/G,SAAO;AAAA,IAAK,GAAG,EAAE;AAAA,IACf,GAAG,KAAK,IAAI,IAAI,mCAAmC,MAAM,KAAK,IAAI,CAAC,IAAI,MAAM,WAAW,IAAI,OAAO,KAAK;AAAA,EAA2E;AACvL;AAEO,SAAS,kBAAkB,IAAY,OAAe,MAAc,OAAiC;AAC1G,SAAO;AAAA,IAAK,GAAG,EAAE;AAAA,IACf,GAAG,KAAK,IAAI,IAAI,qCAAqC,MAAM,KAAK,IAAI,CAAC,IAAI,MAAM,WAAW,IAAI,OAAO,KAAK;AAAA,EAA+L;AAC7S;AA/FA;AAAA;AAAA;AACA;AAAA;AAAA;;;ACDA,SAAS,eAAe;AACxB,SAAS,MAAM,SAAS,WAAW;AA4BnC,SAAS,QAAQ,YAAqD;AACpE,aAAW,aAAa,WAAY,KAAI,WAAW,KAAK,EAAG,QAAO,UAAU,KAAK;AACjF,QAAM,IAAI,MAAM,2FAA2F;AAC7G;AAGO,SAAS,cAAc,UAAmB,CAAC,GAAG,MAAyB,QAAQ,KAAa;AACjG,QAAM,OAAO,KAAK,IAAI,MAAM,QAAQ,CAAC;AACrC,QAAM,iBAAiB,QAAQ,YAAY,KAAK,KAAK,IAAI,mBAAmB,KAAK,KAAK;AACtF,QAAM,aAAa,QAAQ,KAAK,gBAAgB,KAAK,MAAM,SAAS,CAAC,CAAC;AAEtE,SAAO;AAAA,IACL;AAAA,IACA,UAAU,QAAQ,KAAK,QAAQ,UAAU,IAAI,iBAAiB,KAAK,MAAM,aAAa,CAAC,CAAC;AAAA,IACxF,WAAW,QAAQ,KAAK,IAAI,YAAY,KAAK,MAAM,QAAQ,CAAC,CAAC;AAAA,IAC7D,WAAW;AAAA,MACT,OAAO,QAAQ,KAAK,QAAQ,WAAW,IAAI,YAAY,KAAK,MAAM,QAAQ,CAAC,CAAC;AAAA,MAC5E,QAAQ;AAAA,MACR,IAAI,QAAQ,KAAK,QAAQ,QAAQ,IAAI,qBAAqB,KAAK,MAAM,OAAO,OAAO,CAAC,CAAC;AAAA,IACvF;AAAA,IACA,aAAa,gBAAgB,KAAK,IAAI,KAAK,YAAY,cAAc,IAAI,KAAK,MAAM,cAAc;AAAA,IAClG,KAAK;AAAA,MACH,OAAO,KAAK,QAAQ,UAAU,IAAI,WAAW,OAAO;AAAA,MACpD,QAAQ,KAAK,QAAQ,WAAW,IAAI,YAAY,QAAQ;AAAA,MACxD,IAAI,KAAK,QAAQ,OAAO,IAAI,QAAQ,IAAI;AAAA,MACxC,OAAO,KAAK,QAAQ,UAAU,IAAI,WAAW,OAAO;AAAA,IACtD;AAAA,IACA,YAAY,IAAI,QAAQ;AAAA,IACxB,UAAU,IAAI,IAAI,OAAO,KAAK,GAAG,CAAC;AAAA,EACpC;AACF;AAGO,SAAS,SAAS,MAAc,MAAuB;AAC5D,SAAO,SAAS,QAAQ,KAAK,WAAW,KAAK,SAAS,GAAG,IAAI,OAAO,OAAO,GAAG;AAChF;AAGO,SAAS,aAAa,QAAgB,QAAqC;AAChF,QAAM,SAAkB,CAAC;AACzB,MAAI,SAAS,OAAO,UAAU,OAAO,IAAI,GAAG;AAC1C,WAAO,KAAK;AAAA,MAAK;AAAA,MAAa,mBAAmB,OAAO,QAAQ;AAAA,MAC9D;AAAA,IAAuE,CAAC;AAAA,EAC5E;AACA,aAAW,MAAM,QAAQ;AACvB,UAAM,OAAO,OAAO,UAAU,EAAE;AAChC,QAAI,SAAS,OAAO,UAAU,IAAI,KAAK,SAAS,MAAM,OAAO,QAAQ,GAAG;AACtE,aAAO,KAAK;AAAA,QAAK,GAAG,EAAE;AAAA,QAAS,OAAO,EAAE,SAAS,IAAI,2BAA2B,OAAO,QAAQ;AAAA,QAC7F,UAAU,EAAE,8BAA8B,EAAE;AAAA,MAAmE,CAAC;AAAA,IACpH;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,SAAS,QAAgB,OAAgB,MAAoB;AAC3E,SAAO,KAAK,OAAO,UAAU,SAAS,OAAO,IAAI;AACnD;AACO,SAAS,WAAW,QAAwB;AACjD,SAAO,KAAK,OAAO,UAAU,MAAM;AACrC;AAxFA;AAAA;AAAA;AAEA;AAAA;AAAA;;;ACFA,SAAS,mBAAmB;AAC5B,SAAS,OAAO,SAAAC,QAAO,OAAO,SAAS,UAAU,YAAAC,WAAU,QAAQ,IAAI,SAAS,QAAQ,iBAAiB;AAEzG,SAAS,UAAU,SAAS,QAAAC,aAAY;AAkDxC,SAAS,MAAMC,OAAqB;AAClC,MAAIA,MAAK,eAAe,EAAG,QAAO;AAClC,MAAIA,MAAK,YAAY,EAAG,QAAO;AAC/B,MAAIA,MAAK,OAAO,EAAG,QAAO;AAC1B,SAAO;AACT;AAEA,SAAS,OAAO,MAAc,UAAkBA,OAAoB;AAClE,QAAM,IAAI,iBAAiB,MAAM,uBAAuB,IAAI,cAAc,QAAQ,cAAc,MAAMA,KAAI,CAAC,KAAK,UAAU;AAC5H;AAEA,SAAS,UAAU,OAAyB;AAC1C,SAAO,UAAU,QAAQ,OAAO,UAAU,YAAY,UAAU,SAAS,MAAM,SAAS;AAC1F;AAEA,eAAe,cAAc,MAA0C;AACrE,MAAI;AAAE,WAAO,MAAMH,OAAM,IAAI;AAAA,EAAG,SAAS,OAAO;AAC9C,QAAI,UAAU,KAAK,EAAG,QAAO;AAC7B,UAAM;AAAA,EACR;AACF;AAGA,eAAe,cAAc,OAA2C;AACtE,QAAM,WAAW,IAAI,IAAI,MAAM,QAAQ;AACvC,MAAI;AACJ,MAAI;AAAE,YAAQ,MAAM,QAAQ,MAAM,IAAI;AAAA,EAAG,SAAS,OAAO;AACvD,QAAI,UAAU,KAAK,EAAG,QAAO,CAAC;AAC9B,UAAM;AAAA,EACR;AACA,SAAO,MAAM,OAAO,UAAQ,CAAC,SAAS,IAAI,IAAI,CAAC;AACjD;AAEA,eAAe,QAAQ,OAAwD;AAC7E,QAAMG,QAAO,MAAM,cAAc,MAAM,IAAI;AAE3C,MAAI,MAAM,SAAS,SAAU,QAAOA,QAAO,cAAc;AACzD,MAAI,CAACA,MAAM,QAAO;AAClB,MAAI,MAAM,SAAS,MAAO,QAAOA,MAAK,YAAY,IAAI,SAAS;AAC/D,MAAI,MAAM,SAAS,eAAe;AAChC,QAAI,CAACA,MAAK,YAAY,EAAG,QAAO;AAChC,YAAQ,MAAM,cAAc,KAAK,GAAG,WAAW,IAAI,SAAS;AAAA,EAC9D;AACA,MAAI,MAAM,SAAS,QAAQ;AACzB,QAAI,CAACA,MAAK,eAAe,EAAG,QAAO;AACnC,WAAO,MAAMF,UAAS,MAAM,IAAI,MAAM,MAAM,SAAS,SAAS;AAAA,EAChE;AACA,MAAI,CAACE,MAAK,OAAO,EAAG,QAAO;AAC3B,MAAI,MAAM,KAAM,QAAO;AACvB,SAAO,MAAM,SAAS,MAAM,MAAM,MAAM,MAAM,MAAM,UAAU,SAAS;AACzE;AAGA,eAAsB,YAAY,SAAiD;AACjF,QAAM,aAA0B,CAAC;AACjC,aAAW,SAAS,SAAS;AAC3B,UAAM,QAAQ,MAAM,QAAQ,KAAK;AACjC,eAAW,KAAK;AAAA,MACd,QAAQ,UAAU,SAAS,SAAS,MAAM,SAAS,WAAW,WAAW,UAAU,WAAW,WAAW;AAAA;AAAA,MAEzG,MAAM,MAAM,SAAS,gBAAgB,QAAQ,MAAM,SAAS,WAAW,SAAS,MAAM;AAAA,MACtF,QAAQ,MAAM;AAAA,IAChB,CAAC;AAAA,EACH;AACA,SAAO;AACT;AAGA,SAAS,YAAY,MAAsB;AACzC,SAAOD,MAAK,QAAQ,IAAI,GAAG,IAAI,SAAS,IAAI,CAAC,eAAe,YAAY,CAAC,EAAE,SAAS,KAAK,CAAC,EAAE;AAC9F;AAGA,eAAe,kBAAkB,OAA6C;AAC5E,QAAMC,QAAO,MAAM,cAAc,MAAM,IAAI;AAC3C,MAAI,CAACA,MAAM;AACX,MAAI,MAAM,SAAS,QAAQ;AACzB,QAAI,CAACA,MAAK,eAAe,EAAG,QAAO,MAAM,MAAM,mBAAmBA,KAAI;AACtE;AAAA,EACF;AACA,MAAI,CAACA,MAAK,OAAO,EAAG,QAAO,MAAM,MAAM,kBAAkBA,KAAI;AAC/D;AAGA,eAAe,kBAAkB,OAA6C;AAC5E,QAAM,OAAO,YAAY,MAAM,IAAI;AACnC,MAAI;AACF,QAAI,MAAM,SAAS,OAAQ,OAAM,QAAQ,MAAM,QAAQ,IAAI;AAAA,SACtD;AACH,YAAM,UAAU,MAAM,MAAM,SAAS,EAAE,MAAM,UAAU,CAAC;AACxD,YAAM,MAAM,MAAM,SAAS;AAAA,IAC7B;AACA,UAAM,OAAO,MAAM,MAAM,IAAI;AAAA,EAC/B,SAAS,OAAO;AACd,UAAM,GAAG,MAAM,EAAE,OAAO,KAAK,CAAC;AAC9B,UAAM;AAAA,EACR;AACF;AAEA,eAAe,eAAe,MAA6B;AACzD,QAAMA,QAAO,MAAM,cAAc,IAAI;AACrC,MAAIA,SAAQ,CAACA,MAAK,YAAY,EAAG,QAAO,MAAM,eAAeA,KAAI;AACjE,QAAM,MAAM,MAAM,EAAE,WAAW,MAAM,MAAM,SAAS,CAAC;AACvD;AAQA,eAAe,sBAAsB,OAAuC;AAC1E,QAAMA,QAAO,MAAM,cAAc,MAAM,IAAI;AAC3C,MAAIA,OAAM,eAAe,MAAM,MAAM;AACnC,UAAM,SAAS,MAAMF,UAAS,MAAM,IAAI;AACxC,QAAI,MAAM,eAAe,UAAa,WAAW,MAAM,YAAY;AACjE,YAAM,IAAI;AAAA,QAAiB,MAAM;AAAA,QAC/B,uBAAuB,MAAM,IAAI,iEAAiE,MAAM;AAAA,QACxG;AAAA,MAAU;AAAA,IACd;AAEA,UAAM,OAAO,MAAM,IAAI;AACvB,UAAM,MAAM,MAAM,MAAM,EAAE,WAAW,MAAM,MAAM,SAAS,CAAC;AAC3D;AAAA,EACF;AACA,MAAIE,SAAQ,CAACA,MAAK,YAAY,EAAG,QAAO,MAAM,MAAM,8BAA8BA,KAAI;AACtF,QAAM,MAAM,MAAM,MAAM,EAAE,WAAW,MAAM,MAAM,SAAS,CAAC;AAC3D,MAAI,CAACA,MAAM;AACX,aAAW,QAAQ,MAAM,cAAc,KAAK,GAAG;AAC7C,UAAM,QAAQD,MAAK,MAAM,MAAM,IAAI;AACnC,UAAM,YAAY,MAAM,cAAc,KAAK;AAC3C,QAAI,CAAC,UAAW;AAChB,QAAI,CAAC,UAAU,OAAO,KAAK,CAAC,UAAU,eAAe,GAAG;AACtD,YAAM,IAAI;AAAA,QAAiB;AAAA,QACzB,sBAAsB,KAAK,uBAAuB,MAAM,IAAI,qCAAqC,MAAM,SAAS,CAAC;AAAA,QACjH;AAAA,MAAU;AAAA,IACd;AACA,UAAM,GAAG,OAAO,EAAE,OAAO,KAAK,CAAC;AAAA,EACjC;AACF;AAMA,eAAe,kBAAkB,MAA6B;AAC5D,QAAMC,QAAO,MAAM,cAAc,IAAI;AACrC,MAAI,CAACA,MAAM;AACX,MAAI,CAACA,MAAK,OAAO,EAAG,QAAO,MAAM,sCAAsCA,KAAI;AAC3E,QAAM,GAAG,MAAM,EAAE,OAAO,KAAK,CAAC;AAChC;AAGA,eAAsB,aAAa,SAA0C;AAC3E,aAAW,SAAS,SAAS;AAC3B,QAAI,MAAM,QAAQ,KAAK,MAAM,OAAQ;AACrC,QAAI,MAAM,SAAS,OAAO;AACxB,YAAM,eAAe,MAAM,IAAI;AAC/B;AAAA,IACF;AACA,QAAI,MAAM,SAAS,eAAe;AAChC,YAAM,sBAAsB,KAAK;AACjC;AAAA,IACF;AACA,QAAI,MAAM,SAAS,UAAU;AAC3B,YAAM,kBAAkB,MAAM,IAAI;AAClC;AAAA,IACF;AACA,UAAM,MAAM,QAAQ,MAAM,IAAI,GAAG,EAAE,WAAW,MAAM,MAAM,SAAS,CAAC;AACpE,UAAM,kBAAkB,KAAK;AAC7B,UAAM,kBAAkB,KAAK;AAAA,EAC/B;AACF;AAEA,eAAsB,OAAO,MAAgC;AAC3D,MAAI;AAAE,UAAMH,OAAM,IAAI;AAAG,WAAO;AAAA,EAAM,QAAQ;AAAE,WAAO;AAAA,EAAO;AAChE;AAGA,eAAsB,cAAc,MAAc,OAA6C;AAC7F,QAAM,QAAQ,MAAM,IAAI,UAAQE,MAAK,MAAM,IAAI,CAAC;AAChD,QAAM,UAAU,MAAM,QAAQ,IAAI,MAAM,IAAI,MAAM,CAAC;AACnD,SAAO,MAAM,OAAO,CAAC,GAAG,UAAU,QAAQ,KAAK,MAAM,IAAI;AAC3D;AAEA,eAAsB,cAAc,MAA2C;AAC7E,MAAI;AAAE,WAAO,MAAM,SAAS,MAAM,MAAM;AAAA,EAAG,QAAQ;AAAE,WAAO;AAAA,EAAW;AACzE;AAhPA,IAiCM,UACA,WAMO,kBAWP;AAnDN;AAAA;AAAA;AAiCA,IAAM,WAAW;AACjB,IAAM,YAAY;AAMX,IAAM,mBAAN,cAA+B,MAAM;AAAA,MACjC;AAAA,MACA;AAAA,MACT,YAAY,MAAc,SAAiB,KAAa;AACtD,cAAM,OAAO;AACb,aAAK,OAAO;AACZ,aAAK,OAAO;AACZ,aAAK,MAAM;AAAA,MACb;AAAA,IACF;AAEA,IAAM,aAAa;AAAA;AAAA;;;ACjBZ,SAAS,WAAW,OAAgB,MAAoB;AAC7D,SAAO,GAAG,KAAK,IAAI,IAAI;AACzB;AAEO,SAAS,UAAU,OAAgB,MAAoB;AAC5D,SAAO,QAAQ,KAAK,IAAI,IAAI;AAC9B;AACO,SAAS,cAAc,OAAgB,MAAoB;AAChE,QAAME,SAAQ,CAAC,UAA0B,MAAM,OAAO,CAAC,EAAE,YAAY,IAAI,MAAM,MAAM,CAAC;AACtF,SAAO,GAAGA,OAAM,KAAK,CAAC,IAAIA,OAAM,IAAI,CAAC;AACvC;AA5CA,IAAa,OAGA,WAIA,kBAOA,eAOA,qBAGA,WACA,YAGA;AA5Bb;AAAA;AAAA;AAAO,IAAM,QAAQ,CAAC,cAAc,QAAQ,MAAM;AAG3C,IAAM,YAAY,CAAC,SAAS,UAAU,IAAI;AAI1C,IAAM,mBAA0C,EAAE,YAAY,MAAM,MAAM,MAAM,MAAM,MAAM;AAO5F,IAAM,gBAAsC,EAAE,YAAY,OAAO,MAAM,QAAQ,MAAM,OAAO;AAO5F,IAAM,sBAAsB,CAAC,SAAS,WAAW;AAGjD,IAAM,YAAkC,EAAE,YAAY,OAAO,MAAM,WAAW,MAAM,OAAO;AAC3F,IAAM,aAAmC,EAAE,YAAY,UAAU,MAAM,QAAQ,MAAM,UAAU;AAG/F,IAAM,aAAmC;AAAA,MAC9C,YAAY;AAAA,MACZ,MAAM;AAAA,MACN,MAAM;AAAA,IACR;AAAA;AAAA;;;AChCA,SAAS,QAAAC,aAAY;AACrB,SAAS,SAAS;AA2BX,SAAS,aACd,SACA,QACA,OACA,UACA,sBACQ;AACR,SAAO,KAAK,UAAU;AAAA,IACpB;AAAA,IAAS,QAAQ,CAAC,GAAG,MAAM;AAAA,IAAG,OAAO,CAAC,GAAG,KAAK;AAAA,IAC9C,GAAI,aAAa,SAAY,CAAC,IAAI,EAAE,SAAS;AAAA;AAAA,IAE7C,GAAI,yBAAyB,QAAQ,EAAE,sBAAsB,MAAM,IAAI,CAAC;AAAA,EAC1E,GAAoB,MAAM,CAAC,IAAI;AACjC;AAGA,eAAsB,WAAW,QAA6C;AAC5E,QAAM,SAAS,MAAM,cAAcA,MAAK,OAAO,UAAU,MAAM,CAAC;AAChE,MAAI,WAAW,OAAW,QAAO;AACjC,MAAI;AAAE,WAAO,aAAa,MAAM,KAAK,MAAM,MAAM,CAAC;AAAA,EAAG,QAAQ;AAAE,WAAO;AAAA,EAAW;AACnF;AAhDA,IAMa,QAEP;AARN;AAAA;AAAA;AAEA;AAEA;AAEO,IAAM,SAAS;AAEtB,IAAM,eAAe,EAAE,OAAO;AAAA,MAC5B,SAAS,EAAE,OAAO;AAAA,MAClB,QAAQ,EAAE,MAAM,EAAE,KAAK,SAAS,CAAC,EAAE,IAAI,CAAC;AAAA,MACxC,OAAO,EAAE,MAAM,EAAE,KAAK,KAAK,CAAC,EAAE,IAAI,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAMnC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAMrC,sBAAsB,EAAE,QAAQ,EAAE,SAAS;AAAA,IAC7C,CAAC;AAAA;AAAA;;;ACxBD,SAAS,gBAAgB;AACzB,SAAS,QAAQ,iBAAiB;AAClC,SAAS,WAAW,YAAY,QAAAC,OAAM,WAAAC,gBAAe;AACrD,SAAS,iBAAiB;AAa1B,eAAsB,MAAM,SAAiB,YAAiD;AAC5F,QAAM,aAAa,WAAW,OAAO,KAAK,QAAQ,SAAS,GAAG,IAC1D,CAACA,SAAQ,OAAO,CAAC,IACjB,WAAW,MAAM,SAAS,EAAE,OAAO,OAAO,EAAE,IAAI,WAASD,MAAK,OAAO,OAAO,CAAC;AACjF,aAAW,aAAa,YAAY;AAClC,QAAI;AACF,YAAM,OAAO,WAAW,UAAU,IAAI;AACtC,aAAO;AAAA,IACT,QAAQ;AAAA,IAAgC;AAAA,EAC1C;AACA,SAAO;AACT;AAOA,eAAsB,MAAM,YAAoB,MAAyB,KAAgD;AACvH,MAAI;AACF,UAAM,EAAE,OAAO,IAAI,MAAM,IAAI,YAAY,CAAC,GAAG,IAAI,GAAG,EAAE,KAAK,SAAS,KAAQ,WAAW,KAAK,OAAO,MAAM,UAAU,OAAO,CAAC;AAC3H,WAAO,EAAE,IAAI,MAAM,OAAO;AAAA,EAC5B,QAAQ;AACN,WAAO,EAAE,IAAI,OAAO,QAAQ,GAAG;AAAA,EACjC;AACF;AAzCA,IAKM;AALN;AAAA;AAAA;AAKA,IAAM,MAAM,UAAU,QAAQ;AAAA;AAAA;;;ACL9B,SAAS,aAAa;AACtB,SAAS,aAAAE,kBAAiB;AAC1B,SAAS,QAAAC,aAAY;AACrB,SAAS,SAAAC,cAAa;AAYf,SAAS,eAAe,UAAkB,QAAwB;AACvE,QAAM,UAAU,YAAY,EAAE,qBAAqB,SAAS,GAAG,QAAQ,YAAY;AACnF,SAAO,MAAM,YAAY,CAAC,GAAG,QAAQ,CAAC,OAAO,OAAO;AACtD;AAuBA,SAAS,MAAM,OAAuB;AACpC,SAAO,MAAM,OAAO,CAAC,EAAE,YAAY,IAAI,MAAM,MAAM,CAAC;AACtD;AAEA,SAAS,gBAAgB,OAAgB,UAAkB,QAKzD;AACA,MAAI,UAAU,SAAS;AACrB,UAAMC,OAAM,EAAE,YAAY,SAAS;AACnC,UAAMC,QAAO,CAAC,OAAO;AACrB,WAAO,EAAE,KAAAD,MAAK,MAAAC,OAAM,SAAS,YAAYD,MAAK,QAAQC,KAAI,EAAE;AAAA,EAC9D;AACA,MAAI,UAAU,UAAU;AACtB,UAAMD,OAAM,EAAE,mBAAmB,UAAU,iCAAiC,SAAS;AACrF,UAAMC,QAAO,CAAC,QAAQ,OAAO;AAC7B,WAAO,EAAE,KAAAD,MAAK,MAAAC,OAAM,SAAS,YAAYD,MAAK,QAAQC,KAAI,EAAE;AAAA,EAC9D;AACA,QAAM,MAAM,EAAE,qBAAqB,SAAS;AAC5C,QAAM,OAAO;AACb,SAAO,EAAE,KAAK,MAAM,KAAK,UAAU,SAAS,eAAe,UAAU,MAAM,EAAE;AAC/E;AAGO,SAAS,0BACd,UACA,UACA,QACA,OACQ;AACR,QAAM,QAAQ;AAAA,IACZ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,aAAW,SAAS,QAAQ;AAC1B,UAAM,SAAS,SAAS,KAAK;AAC7B,QAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,8DAA8D,KAAK,cAAc;AAC9G,UAAM,KAAK,MAAM,UAAU,WAAW,gBAAgB,MAAM,KAAK,CAAC,IAAI,EAAE;AACxE,eAAW,QAAQ,OAAO;AACxB,YAAM,aAAa,gBAAgB,OAAOH,MAAK,UAAU,SAAS,OAAO,IAAI,GAAG,MAAM;AACtF,YAAM,KAAK,OAAO,MAAM,IAAI,CAAC,IAAI,IAAI,SAAS,WAAW,SAAS,OAAO,EAAE;AAC3E,UAAI,UAAU,MAAM;AAClB,cAAM;AAAA,UAAK;AAAA,UACT;AAAA,UACA;AAAA,UACA;AAAA,UAAkE;AAAA,QAAE;AAAA,MACxE;AAAA,IACF;AAAA,EACF;AACA,SAAO,GAAG,MAAM,KAAK,IAAI,EAAE,QAAQ,CAAC;AAAA;AACtC;AAEA,eAAe,cAAc,MAA2D;AACtF,MAAI;AACF,YAAQ,MAAMC,OAAM,IAAI,GAAG,YAAY,IAAI,cAAc;AAAA,EAC3D,SAAS,OAAO;AACd,WAAQ,MAAgC,SAAS,WAAW,YAAY;AAAA,EAC1E;AACF;AAEA,SAAS,WAAW,QAAqB,QAAwB;AAC/D,SAAO,OAAO,0BAA0B,MAAM;AAAA,CAAI;AAClD,SAAO;AACT;AASA,eAAsB,UACpB,YACA,WACA,SACA,QACiB;AACjB,QAAM,QAAQ,UAAU,KAAK,WAAS,UAAU,UAAU;AAC1D,MAAI,CAAC,MAAO,QAAO,WAAW,QAAQ,kBAAkB,UAAU,mCAAmC;AACrG,QAAM,OAAO,MAAM,KAAK,WAAS,UAAU,SAAS;AACpD,MAAI,CAAC,KAAM,QAAO,WAAW,QAAQ,iBAAiB,SAAS,wCAAwC;AACvG,MAAI,CAAC,QAAQ,OAAO;AAClB,WAAO,OAAO,mFAAmF;AACjG,WAAO;AAAA,EACT;AAEA,QAAM,MAAM,QAAQ,OAAO,QAAQ;AACnC,QAAM,SAAS,cAAc,SAAS,GAAG;AACzC,MAAI,MAAM,cAAc,OAAO,QAAQ,MAAM,aAAa;AACxD,WAAO,OAAO,oBAAoB,OAAO,QAAQ;AAAA,CAAmC;AACpF,WAAO;AAAA,EACT;AACA,MAAI;AACF,QAAI,EAAE,MAAMA,OAAMD,MAAK,OAAO,UAAU,MAAM,CAAC,GAAG,OAAO,EAAG,OAAM,IAAI,MAAM,sBAAsB;AAAA,EACpG,QAAQ;AACN,WAAO,OAAO,iCAAiCA,MAAK,OAAO,UAAU,MAAM,CAAC;AAAA,CAAmC;AAC/G,WAAO;AAAA,EACT;AACA,QAAM,SAAS,MAAM,WAAW,MAAM;AACtC,MAAI,CAAC,QAAQ;AACX,WAAO,OAAO,iCAAiCA,MAAK,OAAO,UAAU,MAAM,CAAC;AAAA,CAAmC;AAC/G,WAAO;AAAA,EACT;AACA,MAAI,CAAC,OAAO,OAAO,SAAS,KAAK,GAAG;AAClC,WAAO,OAAO,GAAG,MAAM,KAAK,CAAC,4DAA4D,KAAK;AAAA,CAAa;AAC3G,WAAO;AAAA,EACT;AACA,MAAI,CAAC,OAAO,MAAM,SAAS,IAAI,GAAG;AAChC,WAAO,OAAO,GAAG,MAAM,IAAI,CAAC,yBAAyB,KAAK;AAAA,CAAwC;AAClG,WAAO;AAAA,EACT;AACA,QAAM,WAAW,SAAS,QAAQ,OAAO,IAAI;AAC7C,aAAW,QAAQ,CAACA,MAAK,OAAO,UAAU,OAAO,GAAGA,MAAK,OAAO,UAAU,SAAS,KAAK,GAAG,QAAQ,GAAG;AACpG,QAAI,MAAM,cAAc,IAAI,MAAM,aAAa;AAC7C,aAAO,OAAO,gBAAgB,KAAK,IAAI,IAAI,oCAAoC,QAAQ;AAAA,CAAmC;AAC1H,aAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,SAAS,MAAM,MAAM,OAAO,IAAI,KAAK,GAAG,OAAO,UAAU;AAC/D,MAAI,CAAC,QAAQ;AACX,WAAO,OAAO,GAAG,MAAM,KAAK,CAAC,gDAAgD,KAAK,iBAAiB,KAAK;AAAA,CAAK;AAC7G,WAAO;AAAA,EACT;AACA,QAAM,aAAa,gBAAgB,OAAO,UAAU,MAAM;AAC1D,MAAI,UAAU,MAAM;AAClB,WAAO,OAAO,uDAAuD,IAAI;AAAA,CAA8E;AACvJ,WAAO,OAAO,kGAAkG;AAChH,WAAO,OAAO,+CAA+C;AAAA,EAC/D,OAAO;AACL,WAAO,OAAO,YAAY,UAAU,WAAW,gBAAgB,OAAO,cAAc,IAAI;AAAA,CAAK;AAAA,EAC/F;AAEA,QAAM,WAAW,EAAE,GAAG,KAAK,GAAG,WAAW,IAAI;AAC7C,QAAM,SAAS,QAAQ,SAAS;AAChC,SAAO,IAAI,QAAQ,CAAAI,aAAW;AAC5B,QAAI,UAAU;AACd,UAAM,SAAS,CAAC,SAAuB;AACrC,UAAI,QAAS;AACb,gBAAU;AACV,MAAAA,SAAQ,IAAI;AAAA,IACd;AACA,QAAI;AACJ,QAAI;AACF,cAAQ,OAAO,QAAQ,WAAW,MAAM;AAAA,QACtC,KAAK;AAAA,QACL,GAAI,WAAW,QAAQ,SAAY,CAAC,IAAI,EAAE,KAAK,WAAW,IAAI;AAAA,QAC9D,OAAO;AAAA,QACP,OAAO;AAAA,MACT,CAAC;AAAA,IACH,SAAS,OAAO;AACd,YAAM,SAAS,iBAAiB,QAAQ,MAAM,UAAU;AACxD,aAAO,OAAO,mBAAmB,KAAK,WAAW,MAAM;AAAA,CAAI;AAC3D,aAAO,CAAC;AACR;AAAA,IACF;AACA,UAAM,KAAK,SAAS,WAAS;AAC3B,aAAO,OAAO,mBAAmB,KAAK,WAAW,MAAM,OAAO;AAAA,CAAI;AAClE,aAAO,CAAC;AAAA,IACV,CAAC;AACD,UAAM,KAAK,SAAS,CAAC,MAAM,WAAW;AACpC,UAAI,SAAS,MAAM;AACjB,eAAO,IAAI;AACX;AAAA,MACF;AACA,UAAI,QAAQ;AACV,cAAM,eAAeL,WAAU,QAAQ,MAAM;AAC7C,cAAM,SAAS,OAAO,iBAAiB,WAAW,MAAM,eAAe;AACvE,eAAO,OAAO,GAAG,MAAM,KAAK,CAAC,4BAA4B,MAAM,eAAe,OAAO,MAAM,CAAC;AAAA,CAAK;AACjG,eAAO,MAAM;AACb;AAAA,MACF;AACA,aAAO,OAAO,GAAG,MAAM,KAAK,CAAC;AAAA,CAAgD;AAC7E,aAAO,CAAC;AAAA,IACV,CAAC;AAAA,EACH,CAAC;AACH;AA/NA,IAUa,sBAEA,cA2BP;AAvCN;AAAA;AAAA;AAIA;AACA;AACA;AACA;AACA;AAEO,IAAM,uBAAuB;AAE7B,IAAM,eAAe,CAAC,mBAAmB,gBAAgB,0BAA0B,EAAE;AA2B5F,IAAM,aAA2B,CAAC,YAAY,MAAM,YAAY,MAAM,YAAY,CAAC,GAAG,IAAI,GAAG,OAAO;AAAA;AAAA;;;ACvCpG,SAAS,oBAAoB;AAwE7B,SAAS,WACP,OACA,KACuB;AACvB,QAAM,SAAS,cAAc,KAAK;AAClC,QAAM,QAAQ,OAAO,OAAO,GAAG,CAAC;AAChC,MAAI,UAAU,OAAW,OAAM,IAAI,MAAM,wBAAwB,KAAK,IAAI,OAAO,GAAG,CAAC,GAAG;AACxF,SAAO;AACT;AAEA,SAAS,aAAa,QAAgB,OAAsB;AAC1D,QAAM,SAAS,UAAU,IAAI,OAAO;AACpC,SAAO,OAAO,MAAM,IAAI,EAAE,OAAO,UAAQ,KAAK,WAAW,MAAM,CAAC,EAAE;AACpE;AAEA,SAAS,sBAAsB,QAAgB,MAAkC;AAC/E,QAAM,UAAU,OAAO,QAAQ;AAC/B,MAAI,CAAC,QAAQ,KAAK,EAAG,OAAM,IAAI,MAAM,WAAW;AAChD,QAAM,YAAY,QAAQ,MAAM,MAAM,CAAC,EAAE,CAAC,KAAK;AAC/C,MAAI,CAAC,WAAW,KAAK,SAAS,KAAK,aAAa,SAAS,CAAC,MAAM,GAAG;AACjE,UAAM,IAAI,MAAM,GAAG,SAAS,SAAS,kBAAkB,YAAY,0CAA0C;AAAA,EAC/G;AACA,SAAO;AACT;AAEA,SAAS,gBAAgB,QAAwB;AAC/C,QAAM,UAAU,OAAO,QAAQ;AAC/B,MAAI,CAAC,QAAQ,KAAK,EAAG,OAAM,IAAI,MAAM,WAAW;AAChD,QAAM,QAAQ,QAAQ,MAAM,IAAI;AAChC,QAAM,UAAU,MAAM,MAAM,KAAK;AACjC,MAAI,CAAC,YAAY,KAAK,OAAO,KAAK,aAAa,SAAS,CAAC,MAAM,GAAG;AAChE,UAAM,IAAI,MAAM,iDAAiD;AAAA,EACnE;AACA,MAAI,MAAM,KAAK,UAAQ,YAAY,KAAK,IAAI,CAAC,GAAG;AAC9C,UAAM,IAAI,MAAM,wDAAwD;AAAA,EAC1E;AACA,QAAM,OAAO,MAAM,KAAK,IAAI,EAAE,KAAK;AACnC,MAAI,CAAC,KAAM,OAAM,IAAI,MAAM,wDAAwD;AACnF,QAAM,aAAa,KAAK,MAAM,SAAS,EAAE;AAAA,IAAI,eAC3C,UAAU,MAAM,IAAI,EAAE,IAAI,UAAQ,KAAK,KAAK,CAAC,EAAE,KAAK,GAAG;AAAA,EACzD;AACA,MAAI,WAAW,KAAK,eAAa,CAAC,SAAS,GAAG;AAC5C,UAAM,IAAI,MAAM,iDAAiD;AAAA,EACnE;AACA,SAAO,GAAG,OAAO;AAAA,EAAK,WAAW,IAAI,eAAa,KAAK,SAAS,EAAE,EAAE,KAAK,IAAI,CAAC;AAChF;AAEO,SAAS,gBACd,OACA,KACQ;AACR,QAAM,eAAe,GAAG,KAAK,IAAI,OAAO,GAAG,CAAC;AAC5C,QAAM,SAAS,MAAM,IAAI,YAAY;AACrC,MAAI,WAAW,OAAW,QAAO;AAEjC,QAAM,QAAQ,WAAW,OAAO,GAAG;AACnC,QAAM,WAAW,IAAI,IAAI,aAAa,MAAM,IAAI,IAAI,YAAY,GAAG;AACnE,MAAI;AACF,UAAM,SAAS,aAAa,UAAU,MAAM;AAC5C,QAAI,OAAO,SAAS,QAAQ,EAAG,OAAM,IAAI,MAAM,0BAA0B;AACzE,UAAM,YAAY,MAAM,SAAS,YAC7B,gBAAgB,MAAM,IACtB,sBAAsB,QAAQ,MAAM,IAAI;AAC5C,UAAM,IAAI,cAAc,SAAS;AACjC,WAAO;AAAA,EACT,SAAS,OAAO;AACd,QAAI,iBAAiB,iBAAkB,OAAM;AAC7C,UAAM,SAAS,iBAAiB,QAAQ,MAAM,UAAU;AACxD,UAAM,IAAI,iBAAiB,cAAc,UAAU,QAAQ,EAAE,OAAO,MAAM,CAAC;AAAA,EAC7E;AACF;AA9IA,IAEa,eAwDA,kBAYP;AAtEN;AAAA;AAAA;AAEO,IAAM,gBAAgB;AAAA,MAC3B,WAAW;AAAA,QACT,YAAY,EAAE,MAAM,2BAA2B,MAAM,OAAO;AAAA,QAC5D,MAAM,EAAE,MAAM,qBAAqB,MAAM,OAAO;AAAA,QAChD,MAAM,EAAE,MAAM,qBAAqB,MAAM,OAAO;AAAA,QAChD,WAAW,EAAE,MAAM,0BAA0B,MAAM,OAAO;AAAA,MAC5D;AAAA,MACA,UAAU;AAAA,QACR,gBAAgB,EAAE,MAAM,sCAAsC,MAAM,UAAU;AAAA,QAC9E,6BAA6B,EAAE,MAAM,oEAAoE,MAAM,UAAU;AAAA,QACzH,yBAAyB,EAAE,MAAM,iDAAiD,MAAM,UAAU;AAAA,QAClG,uBAAuB,EAAE,MAAM,+CAA+C,MAAM,UAAU;AAAA,QAC9F,oBAAoB,EAAE,MAAM,8CAA8C,MAAM,UAAU;AAAA,QAC1F,0BAA0B,EAAE,MAAM,qDAAqD,MAAM,UAAU;AAAA,QACvG,0BAA0B,EAAE,MAAM,sDAAsD,MAAM,UAAU;AAAA,QACxG,sBAAsB,EAAE,MAAM,iDAAiD,MAAM,UAAU;AAAA,QAC/F,sBAAsB,EAAE,MAAM,gDAAgD,MAAM,UAAU;AAAA,QAC9F,2BAA2B,EAAE,MAAM,gDAAgD,MAAM,UAAU;AAAA,QACnG,sBAAsB,EAAE,MAAM,2CAA2C,MAAM,UAAU;AAAA,QACzF,mBAAmB,EAAE,MAAM,wCAAwC,MAAM,UAAU;AAAA,QACnF,kBAAkB,EAAE,MAAM,kDAAkD,MAAM,UAAU;AAAA,QAC5F,qBAAqB,EAAE,MAAM,yCAAyC,MAAM,UAAU;AAAA,QACtF,mBAAmB,EAAE,MAAM,uCAAuC,MAAM,UAAU;AAAA,QAClF,mBAAmB,EAAE,MAAM,wCAAwC,MAAM,UAAU;AAAA,QACnF,gBAAgB,EAAE,MAAM,oCAAoC,MAAM,UAAU;AAAA,QAC5E,qBAAqB,EAAE,MAAM,yCAAyC,MAAM,UAAU;AAAA,QACtF,iBAAiB,EAAE,MAAM,qCAAqC,MAAM,UAAU;AAAA,QAC9E,iBAAiB,EAAE,MAAM,qCAAqC,MAAM,UAAU;AAAA,QAC9E,qBAAqB,EAAE,MAAM,yCAAyC,MAAM,UAAU;AAAA,QACtF,kBAAkB,EAAE,MAAM,uCAAuC,MAAM,UAAU;AAAA,MACnF;AAAA,MACA,WAAW;AAAA,QACT,UAAU,EAAE,MAAM,yBAAyB,MAAM,UAAU;AAAA,QAC3D,cAAc,EAAE,MAAM,6BAA6B,MAAM,UAAU;AAAA,QACnE,QAAQ,EAAE,MAAM,uBAAuB,MAAM,UAAU;AAAA,QACvD,uBAAuB,EAAE,MAAM,uCAAuC,MAAM,UAAU;AAAA,MACxF;AAAA,MACA,IAAI;AAAA,QACF,oBAAoB,EAAE,MAAM,6BAA6B,MAAM,UAAU;AAAA,QACzE,SAAS,EAAE,MAAM,iBAAiB,MAAM,UAAU;AAAA,MACpD;AAAA,IACF;AAeO,IAAM,mBAAN,cAA+B,MAAM;AAAA,MACjC;AAAA,MACA;AAAA,MAET,YAAY,cAAsB,UAAe,QAAgB,SAAwB;AACvF,cAAM,gBAAgB,YAAY,OAAO,SAAS,QAAQ,IAAI,MAAM,wCAAwC,OAAO;AACnH,aAAK,OAAO;AACZ,aAAK,eAAe;AACpB,aAAK,WAAW;AAAA,MAClB;AAAA,IACF;AAEA,IAAM,QAAQ,oBAAI,IAAoB;AAAA;AAAA;;;ACtEtC,SAAS,kBAAkB;AA+EpB,SAAS,gBAAgB,MAAoC;AAElE,SAAO,CAAC,GAAG,YAAY,IAAI,GAAG,GAAG,UAAU,IAAI,CAAC;AAClD;AAEO,SAAS,aAAa,MAAqC;AAChE,SAAO,cAAc,IAAI;AAC3B;AAEA,SAAS,SAAS,MAAyC;AAEzD,MAAI,KAAK,WAAW,EAAG,QAAO,CAAC;AAC/B,SAAO;AAAA,IACL,gBAAgB,aAAa,WAAW;AAAA,IACxC,GAAG,KAAK,IAAI,SAAO,gBAAgB,aAAa,GAAG,CAAC;AAAA,EACtD;AACF;AAEO,SAAS,mBAAmB,MAA+B;AAChE,MAAI,SAAS,YAAa,QAAO,SAAS,iBAAiB,EAAE,KAAK,MAAM,IAAI;AAC5E,SAAO;AAAA,IACL,gBAAgB,aAAa,IAAI;AAAA,IACjC,GAAG,gBAAgB,IAAI,EAAE,IAAI,SAAO,gBAAgB,YAAY,GAAG,CAAC;AAAA,IACpE,GAAG,SAAS,aAAa,IAAI,CAAC;AAAA,EAChC,EAAE,KAAK,MAAM,IAAI;AACnB;AAaO,SAAS,iBAAyB;AACvC,QAAM,OAAO,WAAW,QAAQ;AAChC,aAAW,QAAQ,kBAAmB,MAAK,OAAO,GAAG,IAAI,KAAS,mBAAmB,IAAI,CAAC,IAAQ;AAClG,SAAO,UAAU,KAAK,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE,CAAC;AAClD;AAzHA,IAeM,gBAMA,sBAOA,aAMA,WA6BA,mBAUA,eAkCO;AA3Gb;AAAA;AAAA;AACA;AACA;AAaA,IAAM,iBAAiB;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,IAAM,uBAAuB;AAAA,MAC3B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,IAAM,cAAc;AAAA,MAClB,YAAY;AAAA,MACZ,MAAM;AAAA,MACN,MAAM;AAAA,IACR;AAEA,IAAM,YAAY;AAAA,MAChB,YAAY;AAAA,QACV;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,MACA,MAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA;AAAA,MAEA,MAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,IAAM,oBAAoB;AAAA,MACxB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAKA,IAAM,gBAAgB;AAAA,MACpB,YAAY;AAAA,MACZ,MAAM;AAAA,MACN,MAAM,CAAC;AAAA,IACT;AA8BO,IAAM,oBAAoB,CAAC,GAAG,OAAO,WAAW;AAAA;AAAA;;;ACjFvD,SAAS,SAAS,OAAqD;AACrE,SAAO,UAAU,QAAQ,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IACrE,QACD;AACN;AAGO,SAAS,YAAY,OAAyC;AACnE,SAAO,SAAS,KAAK,KAAK,CAAC;AAC7B;AAeO,SAAS,qBACd,UACA,UAC4B;AAC5B,QAAM,gBAAgB,IAAI,IAAI,OAAO,KAAK,QAAQ,CAAC;AACnD,QAAM,gBAAgB,IAAI,IAAI,OAAO,KAAK,QAAQ,CAAC;AACnD,QAAM,UAAU,CAAC,GAAG,aAAa,EAAE,OAAO,UAAQ,CAAC,cAAc,IAAI,IAAI,CAAC,EAAE,KAAK;AACjF,QAAM,QAAQ,CAAC,GAAG,aAAa,EAAE,OAAO,UAAQ,CAAC,cAAc,IAAI,IAAI,CAAC,EAAE,KAAK;AAC/E,SAAO,QAAQ,WAAW,KAAK,MAAM,WAAW,IAAI,SAAY,EAAE,SAAS,MAAM;AACnF;AAaO,SAAS,gBAAgB,QAA4B,MAAkD;AAC5G,MAAI,WAAW,OAAW,QAAO,CAAC;AAClC,QAAM,OAAO,SAAS,KAAK,MAAM,MAAM,CAAC;AACxC,MAAI,CAAC,KAAM,OAAM,IAAI,UAAU,0CAA0C;AACzE,QAAM,SAAkC,CAAC;AACzC,aAAW,OAAO,MAAM;AACtB,UAAM,QAAQ,KAAK,GAAG;AACtB,QAAI,UAAU,OAAW;AACzB,UAAMM,SAAQ,SAAS,KAAK;AAC5B,QAAI,CAACA,OAAO,OAAM,IAAI,UAAU,GAAG,GAAG,yBAAyB;AAC/D,eAAW,CAAC,QAAQ,WAAW,KAAK,OAAO,QAAQA,MAAK,GAAG;AACzD,aAAO,UAAU,SAAS,GAAG,MAAM,KAAK,GAAG,MAAM,MAAM,IAAI;AAAA,IAC7D;AAAA,EACF;AACA,SAAO;AACT;AAGO,SAAS,mBAAmB,SAAwD;AACzF,QAAM,UAAsB,CAAC;AAC7B,aAAW,CAAC,QAAQ,WAAW,KAAK,OAAO,QAAQ,OAAO,GAAG;AAC3D,QAAI,YAAY,KAAK,MAAM,EAAG,SAAQ,KAAK,EAAE,QAAQ,OAAO,QAAQ,OAAO,OAAO,CAAC;AACnF,UAAM,SAAS,SAAS,WAAW;AACnC,QAAI,CAAC,OAAQ;AACb,eAAW,SAAS,cAAc;AAChC,YAAM,QAAQ,OAAO,KAAK;AAC1B,UAAI,OAAO,UAAU,YAAY,YAAY,KAAK,KAAK,EAAG,SAAQ,KAAK,EAAE,QAAQ,OAAO,MAAM,CAAC;AAAA,IACjG;AACA,eAAW,SAAS,aAAa;AAC/B,YAAM,OAAO,OAAO,KAAK;AACzB,UAAI,CAAC,MAAM,QAAQ,IAAI,EAAG;AAC1B,iBAAW,QAAQ,MAAM;AACvB,YAAI,OAAO,SAAS,YAAY,YAAY,KAAK,IAAI,EAAG,SAAQ,KAAK,EAAE,QAAQ,OAAO,OAAO,KAAK,CAAC;AAAA,MACrG;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,SAAS,OAAyB;AACzC,SAAO,MAAM,UAAU,SAAS,GAAG,MAAM,MAAM,mBAAmB,GAAG,MAAM,MAAM,KAAK,MAAM,KAAK,KAAK,MAAM,KAAK;AACnH;AAOO,SAAS,cAAc,IAAY,MAAc,SAA+D;AACrH,QAAM,UAAU,mBAAmB,OAAO;AAC1C,MAAI,QAAQ,WAAW,EAAG,QAAO;AACjC,SAAO;AAAA,IAAK;AAAA,IACV,GAAG,IAAI,8DAA8D,QAAQ,IAAI,QAAQ,EAAE,KAAK,IAAI,CAAC;AAAA,IACrG,qCAAqC,IAAI;AAAA,EAA6L;AAC1O;AA9HA,IAWM,aAGA,cAEA;AAhBN;AAAA;AAAA;AAAA;AAWA,IAAM,cAAc,WAAC,+EAAsE,GAAC;AAG5F,IAAM,eAAe,CAAC,WAAW,OAAO,aAAa,WAAW,UAAU;AAE1E,IAAM,cAAc,CAAC,MAAM;AAAA;AAAA;;;AChB3B,SAAS,WAAAC,gBAAe;AACxB,SAAS,QAAAC,aAAY;AAQrB,SAAS,aAAa,MAAuB;AAC3C,SAAO,KAAK,YAAY,EAAE,WAAW,OAAO;AAC9C;AAMA,SAAS,4BAA4B,MAAqB;AACxD,SAAO,SAAS;AAClB;AAGA,eAAe,WAAW,MAAiC;AACzD,MAAI;AAAE,YAAQ,MAAMD,SAAQ,IAAI,GAAG,OAAO,UAAQ,CAAC,aAAa,IAAI,CAAC,EAAE,KAAK;AAAA,EAAG,SAAS,OAAO;AAC7F,QAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,UAAU,SAAS,MAAM,SAAS,SAAU,QAAO,CAAC;AACvG,UAAM;AAAA,EACR;AACF;AA0BA,eAAsB,oBAAoB,OAA4C;AACpF,QAAM,UAAU,IAAI,IAAI,MAAM,MAAM;AACpC,QAAM,aAAa,IAAI,IAAI,MAAM,UAAU;AAC3C,QAAM,UAAmB,CAAC;AAC1B,aAAW,QAAQ,MAAM,OAAO;AAC9B,UAAM,OAAOC,MAAK,MAAM,MAAM,IAAI;AAClC,UAAM,QAAQA,MAAK,MAAM,QAAQ,IAAI;AACrC,QAAI,CAAC,4BAA4B,MAAM,IAAI,GAAG;AAC5C,UAAI,WAAW,IAAI,IAAI,EAAG;AAC1B,UAAI,SAAS,QAAQ;AACnB,cAAM,WAAW,QAAQ,IAAI,IAAI,IAAI,MAAM,WAAW,IAAI,IAAI,CAAC;AAC/D,gBAAQ,KAAK,EAAE,MAAM,eAAe,MAAM,OAAO,UAAU,YAAY,KAAK,CAAC;AAC7E,mBAAW,SAAS,SAAU,SAAQ,KAAK,EAAE,MAAM,QAAQ,MAAMA,MAAK,OAAO,KAAK,GAAG,QAAQA,MAAK,MAAM,KAAK,EAAE,CAAC;AAChH;AAAA,MACF;AAAA,IACF;AACA,QAAI,CAAC,QAAQ,IAAI,IAAI,EAAG;AACxB,YAAQ,KAAK,EAAE,MAAM,QAAQ,MAAM,OAAO,QAAQ,KAAK,CAAC;AAAA,EAC1D;AACA,SAAO;AACT;AAzEA,IAMa;AANb;AAAA;AAAA;AAMO,IAAM,SAAS;AAAA;AAAA;;;ACNtB,SAAS,YAAAC,iBAAgB;AACzB,SAAS,QAAAC,aAAY;AAsCrB,SAAS,SAAS,OAAyC;AACzD,SAAO,UAAU,QAAQ,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC;AAChG;AAEA,SAAS,WAAW,QAAqD;AACvE,MAAI;AAAE,WAAO,SAAS,WAAW,SAAY,CAAC,IAAI,KAAK,MAAM,MAAM,CAAC;AAAA,EAAG,QAAQ;AAAE,WAAO,CAAC;AAAA,EAAG;AAC9F;AAGA,eAAe,mBAAmB,MAA2C;AAC3E,MAAI;AAAE,WAAO,MAAMD,UAAS,MAAM,MAAM;AAAA,EAAG,SAAS,OAAO;AACzD,QAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,UAAU,SAAS,MAAM,SAAS,SAAU,QAAO;AACtG,UAAM;AAAA,EACR;AACF;AAGO,SAAS,mBAAmB,QAA4B,MAAY,kBAAmC;AAC5G,QAAM,WAAW,WAAW,MAAM;AAGlC,WAAS,MAAM;AAAA,IACb,GAAG,SAAS,SAAS,GAAG;AAAA,IACxB,GAAG;AAAA,IACH,iBAAiB;AAAA,IACjB,GAAI,qBAAqB,SAAY,CAAC,IAAI,EAAE,CAAC,kBAAkB,GAAG,iBAAiB;AAAA,EACrF;AAEA,WAAS,mBAAmB;AAC5B,WAAS,mBAAmB;AAC5B,WAAS,sBAAsB;AAC/B,SAAO,KAAK,UAAU,UAAU,MAAM,CAAC,IAAI;AAC7C;AAEO,SAAS,gBAAgB,QAAoC;AAClE,QAAM,OAAO,WAAW,MAAM;AAC9B,QAAM,QAAiC,EAAE,wBAAwB,KAAK;AACtE,aAAW,OAAO,YAAa,KAAI,OAAO,KAAM,OAAM,GAAG,IAAI,KAAK,GAAG;AACrE,SAAO,KAAK,UAAU,OAAO,MAAM,CAAC,IAAI;AAC1C;AASO,SAAS,iBAAiB,QAA4B,MAAY,WAAW,MAA0B;AAC5G,QAAM,WAAW,QAAQ,KAAK;AAC9B,MAAI,CAAC,SAAU,QAAO,WAAW,GAAG,QAAQ;AAAA,IAAO;AACnD,SAAO,WAAW,GAAG,QAAQ;AAAA;AAAA,EAAO,mBAAmB,IAAI,CAAC,KAAK,mBAAmB,IAAI;AAC1F;AAGO,SAAS,sBAAsB,gBAAoC,UAAyC;AACjH,QAAM,WAAW,WAAW,cAAc;AAC1C,QAAM,cAAc,SAAS,SAAS,GAAG;AACzC,QAAM,QAAQ,IAAI,IAAI,aAAa,UAAU,QAAQ,CAAC;AACtD,aAAW,QAAQ,SAAU,KAAI,OAAO,OAAO,aAAa,IAAI,EAAG,OAAM,IAAI,IAAI;AACjF,MAAI,OAAO,OAAO,UAAU,cAAc,EAAG,OAAM,IAAI,cAAc;AACrE,SAAO,CAAC,GAAG,KAAK;AAClB;AAEA,eAAsB,2BACpB,QACA,MACA,gBACA,WAA4B,QAAQ,UACpC,SAAS,UACsB;AAC/B,QAAM,OAAO,SAAS,QAAQ,UAAU,IAAI;AAC5C,QAAM,OAAOC,MAAK,MAAM,mBAAmB;AAC3C,QAAM,kBAAkB,EAAE,mBAAmB,MAAM,CAAC,kBAAkB,GAAG,KAAK;AAC9E,QAAM,QAAQ,YAAY,iBAAiB,QAAQ,CAAC,QAAQ,OAAO,CAAC;AACpE,QAAM,SAAS,YAAY,iBAAiB,QAAQ,CAAC,QAAQ,QAAQ,CAAC;AACtE,QAAM,QAAQ,MAAM,sBAAsB,IAAI;AAC9C,QAAM,KAAK,eAAe,IAAI;AAC9B,MAAI,MAAM,SAAS,WAAW;AAC5B,WAAO,EAAE,MAAM,QAAQ,CAAC,yBAAyB,EAAE,IAAI,OAAO,UAAU,MAAM,MAAM,OAAO,OAAO,OAAO,CAAC,CAAC,EAAE;AAAA,EAC/G;AACA,QAAM,aAAa,sBAAsB,gBAAgB,oBAAI,IAAI,CAAC;AAClE,MAAI,WAAW,SAAS,EAAG,QAAO,EAAE,MAAM,QAAQ,CAAC,uBAAuB,IAAI,UAAU,MAAM,UAAU,CAAC,EAAE;AAC3G,QAAM,UAAU,aAAa,OAAO,UAAU,QAAQ;AACtD,MAAI,QAAQ,SAAS,EAAG,QAAO,EAAE,MAAM,QAAQ,CAAC,kBAAkB,IAAI,UAAU,MAAM,OAAO,CAAC,EAAE;AAChG,MAAI,aAAa,UAAU;AACzB,WAAO,EAAE,MAAM,QAAQ,CAAC;AAAA,MACtB,IAAI,GAAG,EAAE;AAAA,MAAgC,QAAQ;AAAA,MACjD,SAAS,UAAU,IAAI;AAAA,MACvB,KAAK,gCAAgC,KAAK,+CAA+C,YAAY,iBAAiB,MAAM,CAAC,uCAAuC,MAAM;AAAA,IAC5K,CAAC,EAAE;AAAA,EACL;AACA,SAAO,EAAE,MAAM,QAAQ,CAAC;AAAA,IACtB,IAAI,GAAG,EAAE;AAAA,IAAmB,QAAQ;AAAA,IACpC,SAAS,UAAU,IAAI;AAAA,IACvB,KAAK,gCAAgC,KAAK,+CAA+C,YAAY,iBAAiB,MAAM,CAAC,uCAAuC,MAAM;AAAA,EAC5K,CAAC,EAAE;AACL;AASA,SAAS,cAAc,MAAY,MAAc,MAAc,YAAmC;AAChG,QAAM,QAAQ;AAAA,IACZ,GAAI,WAAW,QAAQ,WAAW,IAAI,CAAC,IAAI,CAAC,+BAA+B,WAAW,QAAQ,KAAK,IAAI,CAAC,EAAE;AAAA,IAC1G,GAAI,WAAW,MAAM,WAAW,IAAI,CAAC,IAAI,CAAC,gCAAgC,WAAW,MAAM,KAAK,IAAI,CAAC,EAAE;AAAA,EACzG;AACA,SAAO;AAAA,IAAK,oBAAoB,IAAI;AAAA,IAClC,UAAU,IAAI,8DAA8D,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI;AAAA,IACtG,+EAA+E,IAAI,wCAAmC,IAAI;AAAA,EAAqH;AACnP;AAzJA,IAmBM,QAKA,YAEA,SACA,UAIA,mBAIA,oBAEA,aAsHO;AA3Jb;AAAA;AAAA;AAEA;AAKA;AAEA;AACA;AAEA;AACA;AACA;AACA;AAIA,IAAM,SAAS;AAAA,MACb;AAAA,MAAU;AAAA,MAAW;AAAA,MAAY;AAAA,MAAS;AAAA,MAC1C;AAAA,MAAiB;AAAA,MAAoB;AAAA,IACvC;AAEA,IAAM,aAAa,CAAC,WAAW,YAAY,OAAO;AAElD,IAAM,UAAU;AAChB,IAAM,WAAW;AAAA,MACf;AAAA,MAAwB;AAAA,MAAqB;AAAA,MAC7C;AAAA,MAA2B;AAAA,MAA0B;AAAA,IACvD;AACA,IAAM,oBAAoB;AAAA,MACxB,gCAAgC;AAAA,MAChC,+BAA+B;AAAA,IACjC;AACA,IAAM,qBAAqB;AAE3B,IAAM,cAAc,CAAC,0BAA0B,SAAS,iBAAiB,UAAU,OAAO;AAsHnF,IAAM,cAAqB;AAAA,MAChC,IAAI;AAAA,MACJ,OAAO;AAAA,MACP,SAAS;AAAA;AAAA,MAET,aAAa;AAAA,MACb,eAAe;AAAA;AAAA;AAAA;AAAA,MAIf,MAAM;AAAA,QACJ,iBAAiB;AAAA,UACf;AAAA,UAAQ;AAAA,UAAS;AAAA,UAAY;AAAA,UAAc;AAAA,UAAe;AAAA,UAAc;AAAA,UACxE;AAAA,UAAc;AAAA,UAAW;AAAA,UAAY;AAAA,UACrC;AAAA,UAAc;AAAA,UAAc;AAAA,QAC9B;AAAA,MACF;AAAA,MACA,MAAM,MAAM,QAAgB,OAAwB,UAAwB,CAAC,GAAuB;AAClG,cAAM,OAAO,OAAO,UAAU;AAC9B,cAAM,SAAS,MAAM,MAAM,OAAO,IAAI,QAAQ,OAAO,UAAU;AAC/D,YAAI,CAAC,QAAQ;AACX,iBAAO,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,KAAK,cAAc,qCAAqC,4DAA4D,CAAC,EAAE;AAAA,QACxJ;AACA,YAAI,CAAE,MAAM,OAAO,IAAI,GAAI;AACzB,iBAAO,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,KAAK,eAAe,iCAAiC,IAAI,KAAK,0DAA0D,CAAC,EAAE;AAAA,QAC5J;AACA,cAAM,SAAkB,CAAC,KAAK,eAAe,wBAAwB,MAAM,UAAU,IAAI,GAAG,CAAC;AAE7F,cAAM,iBAAiB,MAAM,cAAcA,MAAK,MAAM,eAAe,CAAC;AACtE,cAAM,eAAe,MAAM,cAAcA,MAAK,MAAM,WAAW,CAAC;AAChE,YAAI;AACJ,YAAI;AACJ,YAAI;AACF,wBAAc,MAAM,mBAAmB,OAAO,WAAW;AAEzD,4BAAkB,gBAAgB,aAAa,CAAC,OAAO,CAAC;AAAA,QAC1D,QAAQ;AACN,iBAAO,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,GAAG,QAAQ;AAAA,YAAK;AAAA,YAC7C,kBAAkB,OAAO,WAAW;AAAA,YACpC;AAAA,UAAwF,CAAC,EAAE;AAAA,QAC/F;AACA,cAAM,gBAAgB,cAAc,cAAc,OAAO,aAAa,eAAe;AACrF,YAAI,cAAe,QAAO,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,GAAG,QAAQ,aAAa,EAAE;AAC5E,cAAM,SAAS,MAAM,cAAc,MAAM,MAAM;AAC/C,cAAM,UAAmB,CAAC;AAC1B,cAAM,cAAsC,CAAC;AAC7C,cAAM,cAAuE,CAAC;AAE9E,cAAM,QAAiB,CAAC;AACxB,mBAAW,QAAQ,OAAO;AACxB,gBAAM,SAAS,SAAS,QAAQ,UAAU,IAAI;AAC9C,gBAAM,YAAYA,MAAK,QAAQ,cAAc;AAE7C,cAAI;AACJ,cAAI;AACJ,cAAI;AACF,8BAAkB,MAAM,mBAAmB,SAAS;AACpD,0BAAc,gBAAgB,iBAAiB,CAAC,OAAO,CAAC;AAAA,UAC1D,QAAQ;AACN,mBAAO,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,GAAG,QAAQ;AAAA,cAAK,cAAc,IAAI;AAAA,cAC/D,kBAAkB,SAAS;AAAA,cAC3B;AAAA,YAAmG,CAAC,EAAE;AAAA,UAC1G;AACA,gBAAM,eAAe,cAAc,cAAc,IAAI,IAAI,WAAW,WAAW;AAC/E,cAAI,aAAc,QAAO,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,GAAG,QAAQ,YAAY,EAAE;AAG1E,cAAI,oBAAoB,QAAW;AACjC,kBAAM,aAAa,qBAAqB,iBAAiB,WAAW;AACpE,gBAAI,WAAY,OAAM,KAAK,cAAc,MAAM,QAAQ,WAAW,UAAU,CAAC;AAAA,UAC/E;AACA,kBAAQ,KAAK,EAAE,MAAM,OAAO,MAAM,OAAO,CAAC;AAC1C,gBAAM,aAAaA,MAAK,QAAQ,WAAW;AAC3C,gBAAM,SAAS,iBAAiB,cAAc,MAAM,QAAQ,kBAAkB,IAAI;AAGlF,kBAAQ,KAAK,WAAW,SACpB,EAAE,MAAM,UAAU,MAAM,WAAW,IACnC,EAAE,MAAM,QAAQ,MAAM,YAAY,SAAS,OAAO,CAAC;AACvD,kBAAQ,KAAK,EAAE,MAAM,QAAQ,MAAMA,MAAK,QAAQ,eAAe,GAAG,SAAS,mBAAmB,gBAAgB,MAAM,MAAM,EAAE,CAAC;AAC7H,kBAAQ,KAAK,EAAE,MAAM,QAAQ,MAAM,WAAW,SAAS,gBAAgB,WAAW,GAAG,MAAM,KAAK,CAAC;AACjG,kBAAQ,KAAK,GAAG,MAAM,oBAAoB,EAAE,MAAM,QAAQ,MAAM,OAAO,QAAQ,QAAQ,YAAY,WAAW,CAAC,CAAC;AAChH,sBAAY,KAAK,MAAM,2BAA2B,QAAQ,MAAM,gBAAgB,QAAQ,UAAU,MAAM,CAAC;AACzG,sBAAY,IAAI,IAAI,EAAE,CAAC,kBAAkB,GAAG,OAAO;AAAA,QACrD;AACA,eAAO,EAAE,SAAS,aAAa,QAAQ,CAAC,GAAG,QAAQ,GAAG,KAAK,GAAG,QAAQ,YAAY;AAAA,MACpF;AAAA,IACF;AAAA;AAAA;;;AClPA,SAAS,QAAAC,aAAY;AACrB,SAAS,OAAO,iBAAiC;AAqBjD,SAAS,MAAM,QAAmB,KAAwB;AACxD,QAAM,QAAQ,OAAO,GAAG;AACxB,MAAI,UAAU,UAAa,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,KAAK,iBAAiB,MAAM;AACrG,WAAQ,OAAO,GAAG,IAAI,CAAC;AAAA,EACzB;AACA,SAAO;AACT;AAMA,SAAS,sBAAsB,OAAwB;AACrD,QAAM,WAAW,MAAM,OAAO,UAAU;AACxC,WAAS,cAAc;AAGvB,MAAI,OAAO,SAAS,mBAAmB,aAAa,SAAS,mBAAmB,OAAW,UAAS,iBAAiB;AAAA,MAChH,OAAM,UAAU,gBAAgB,EAAE,UAAU;AACnD;AAaO,SAAS,iBAAiB,QAAmB,OAAgC;AAClF,QAAM,SAAS,gBAAgB,MAAM;AACrC,SAAO,eAAe;AACtB,SAAO,kBAAkB;AACzB,SAAO,yBAAyB,MAAM;AACtC,MAAI,MAAM,YAAa,QAAO,qBAAqB,MAAM;AAGzD,QAAM,QAAQ,QAAQ,EAAE,UAAU;AAClC,wBAAsB,MAAM;AAG5B,MAAI,OAAO,OAAO,YAAY,UAAU;AACtC,UAAM,UAAU,MAAM,MAAM,QAAQ,UAAU,GAAG,OAAO,OAAO;AAC/D,YAAQ,eAAe;AACvB,YAAQ,kBAAkB;AAC1B,QAAI,MAAM,YAAa,SAAQ,qBAAqB,MAAM;AAC1D,0BAAsB,OAAO;AAAA,EAC/B;AACA,SAAO,UAAU,MAAM,IAAI;AAC7B;AAEO,SAAS,cAAc,SAA0B;AACtD,SAAO,KAAK,UAAU,SAAS,CAAC,KAAK,UAAoB,QAAQ,wBAAwB,OAAO,OAAQ,CAAC,IAAI;AAC/G;AAUO,SAAS,gBAAgB,SAAmC;AACjE,MAAI,UAAU;AACd,QAAM,OAAO,CAAC,UAAyB;AACrC,QAAI,MAAM,QAAQ,KAAK,GAAG;AAAE,iBAAW,QAAQ,MAAO,MAAK,IAAI;AAAG;AAAA,IAAQ;AAC1E,QAAI,UAAU,QAAQ,OAAO,UAAU,SAAU;AACjD,eAAW,CAAC,KAAK,MAAM,KAAK,OAAO,QAAQ,KAAK,GAAG;AACjD,UAAI,QAAQ,sBAAuB,YAAW;AAAA,UACzC,MAAK,MAAM;AAAA,IAClB;AAAA,EACF;AACA,OAAK,OAAO;AACZ,SAAO,EAAE,QAAQ,YAAY,QAAQ,OAAO,YAAY,YAAY,CAAC,MAAM,QAAQ,OAAO,GAAG,QAAQ;AACvG;AAGO,SAAS,qBAAqB,QAAyC;AAC5E,QAAM,QAAQ,OAAO;AACrB,SAAO,UAAU,UAAU,UAAU,eAAe,UAAU,UAAU,UAAU,YAC9E,QACA;AACN;AAEA,eAAe,qBACb,QACA,MACA,OACA,QAC+B;AAC/B,QAAM,OAAO,SAAS,QAAQ,SAAS,IAAI;AAC3C,QAAM,OAAOA,MAAK,MAAM,WAAW;AACnC,QAAM,QAAQ,YAAY,EAAE,YAAY,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC;AACjE,QAAM,SAAS,YAAY,EAAE,YAAY,KAAK,GAAG,QAAQ,CAAC,SAAS,QAAQ,CAAC;AAC5E,QAAM,QAAQ,MAAM,sBAAsB,IAAI;AAC9C,QAAM,KAAK,cAAc,IAAI;AAC7B,QAAM,SAAkB,CAAC;AACzB,MAAI,MAAM,SAAS,WAAW;AAC5B,WAAO,KAAK,yBAAyB,EAAE,IAAI,OAAO,SAAS,MAAM,MAAM,OAAO,OAAO,OAAO,CAAC,CAAC;AAAA,EAChG,OAAO;AACL,QAAI,UAAU,aAAa,UAAU,QAAQ;AAC3C,aAAO,KAAK;AAAA,QACV,IAAI,GAAG,EAAE;AAAA,QAAgC,QAAQ;AAAA,QACjD,SAAS,SAAS,IAAI,qEAAqE,KAAK;AAAA,QAChG,KAAK,gCAAgC,KAAK,wBAAwB,MAAM;AAAA,MAC1E,CAAC;AAAA,IACH,OAAO;AACL,YAAM,SAAS,OAAO,SAAS,IAAI,gBAAgB,IAC/C,mJACA;AACJ,YAAM,SAAS,UAAU,cACrB,0FACA,iCAAiC,UAAU,SAAS,mCAAmC,EAAE;AAC7F,aAAO,KAAK;AAAA,QACV,IAAI,GAAG,EAAE;AAAA,QAAmB,QAAQ;AAAA,QACpC,SAAS,SAAS,IAAI,0BAA0B,MAAM,IAAI,MAAM;AAAA,QAChE,KAAK,gCAAgC,KAAK,wBAAwB,MAAM;AAAA,MAC1E,CAAC;AAAA,IACH;AAAA,EACF;AACA,MAAI,MAAM,SAAS,cAAc,UAAU,aAAa,UAAU,SAAS;AACzE,WAAO,KAAK;AAAA,MACV,IAAI,GAAG,EAAE;AAAA,MAAgC,QAAQ;AAAA,MACjD,SAAS,SAAS,IAAI,qEAAqE,KAAK;AAAA,MAChG,KAAK,8CAA8C,MAAM;AAAA,IAC3D,CAAC;AAAA,EACH;AACA,SAAO,EAAE,MAAM,OAAO;AACxB;AA1JA,IAgBMC,SAEAC,aACA,SAyIO;AA5Jb;AAAA;AAAA;AAEA;AAEA;AAEA;AACA;AAEA;AACA;AACA;AACA;AAIA,IAAMD,UAAS,CAAC,aAAa,UAAU,WAAW,YAAY;AAE9D,IAAMC,cAAa,CAAC,WAAW,YAAY;AAC3C,IAAM,UAAU;AAyIT,IAAM,aAAoB;AAAA,MAC/B,IAAI;AAAA,MACJ,OAAO;AAAA,MACP,SAAS;AAAA,MACT,eAAe;AAAA;AAAA;AAAA,MAGf,MAAM,EAAE,QAAQ,EAAE,cAAc,sBAAsB,iBAAiB,QAAQ,EAAE;AAAA,MACjF,MAAM,MAAM,QAAgB,OAA4C;AACtE,cAAM,SAAkB,CAAC;AACzB,cAAM,OAAO,OAAO,UAAU;AAC9B,cAAM,SAAS,MAAM,MAAM,OAAO,IAAI,OAAO,OAAO,UAAU;AAC9D,YAAI,CAAC,QAAQ;AACX,iBAAO,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,KAAK,aAAa,+BAA+B,oDAAoD,CAAC,EAAE;AAAA,QACzI;AACA,cAAM,aAAaF,MAAK,MAAM,aAAa;AAC3C,cAAM,MAAM,MAAM,cAAc,UAAU;AAC1C,YAAI,QAAQ,QAAW;AACrB,iBAAO,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,KAAK,cAAc,qBAAqB,IAAI,KAAK,wDAAwD,CAAC,EAAE;AAAA,QAC7I;AACA,YAAI;AACJ,YAAI;AAAE,mBAAS,MAAM,GAAG;AAAA,QAAG,QAAQ;AACjC,iBAAO,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,KAAK,gBAAgB,kBAAkB,UAAU,aAAa,4DAA4D,CAAC,EAAE;AAAA,QAC9J;AACA,eAAO,KAAK,KAAK,cAAc,kBAAkB,MAAM,UAAU,IAAI,GAAG,CAAC;AAGzE,cAAM,WAAW,cAAc,aAAa,YAAY,YAAY,OAAO,WAAW,CAAC;AACvF,YAAI,SAAU,QAAO,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,GAAG,QAAQ,QAAQ,EAAE;AAClE,cAAM,QAAQ,qBAAqB,MAAM;AAEzC,cAAM,UAAmB,CAAC;AAC1B,cAAM,cAAsC,CAAC;AAK7C,cAAM,UAAU,YAAY,EAAE,YAAY,KAAK,GAAG,QAAQ,CAAC,SAAS,QAAQ,CAAC;AAC7E,cAAM,SAAS,MAAM,MAAM,QAAQ,CAAC,SAAS,QAAQ,GAAG,EAAE,MAAM,OAAO,MAAM,YAAY,MAAM,MAAM,OAAO,WAAW,CAAC;AACxH,YAAI,CAAC,OAAO,IAAI;AACd,iBAAO,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,GAAG,QAAQ;AAAA,YAAK;AAAA,YAC7C;AAAA,YACA,OAAO,OAAO;AAAA,UAAuG,CAAC,EAAE;AAAA,QAC5H;AACA,YAAI;AACJ,YAAIG;AACJ,YAAI;AACF,gBAAM,SAAkB,KAAK,MAAM,OAAO,MAAM;AAChD,UAAAA,YAAW,gBAAgB,MAAM;AACjC,0BAAgB,cAAc,MAAM;AAAA,QACtC,QAAQ;AACN,iBAAO,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,GAAG,QAAQ;AAAA,YAAK;AAAA,YAC7C;AAAA,YACA,uBAAuB,OAAO;AAAA,UAA4E,CAAC,EAAE;AAAA,QACjH;AAGA,YAAI,CAACA,UAAS,QAAQ;AACpB,iBAAO,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,GAAG,QAAQ;AAAA,YAAK;AAAA,YAC7C;AAAA,YACA,uBAAuB,OAAO;AAAA,UAAyF,CAAC,EAAE;AAAA,QAC9H;AACA,eAAO,KAAK,KAAK,iBAAiBA,UAAS,YAAY,IACnD,qCAAqC,OAAO,iIAC5C,qCAAqC,OAAO,KAAK,OAAOA,UAAS,OAAO,CAAC,mFAAmF,CAAC;AAEjK,cAAM,SAAS,MAAM,cAAc,MAAMF,OAAM;AAC/C,mBAAW,QAAQ,OAAO;AACxB,gBAAM,SAAS,SAAS,QAAQ,SAAS,IAAI;AAC7C,gBAAM,cAAcD,MAAK,QAAQ,OAAO;AACxC,gBAAM,eAAe,mBAAmB,IAAI;AAC5C,kBAAQ,KAAK,EAAE,MAAM,OAAO,MAAM,OAAO,CAAC;AAE1C,kBAAQ,KAAK,EAAE,MAAM,QAAQ,MAAMA,MAAK,QAAQ,sBAAsB,GAAG,SAAS,aAAa,CAAC;AAChG,kBAAQ,KAAK;AAAA,YACX,MAAM;AAAA,YACN,MAAMA,MAAK,QAAQ,aAAa;AAAA,YAChC,SAAS,iBAAiB,QAAQ,EAAE,cAAc,YAAY,CAAC;AAAA,UACjE,CAAC;AACD,kBAAQ,KAAK,EAAE,MAAM,QAAQ,MAAM,aAAa,SAAS,cAAc,CAAC;AACxE,kBAAQ,KAAK,GAAG,MAAM,oBAAoB,EAAE,MAAM,QAAQ,MAAM,OAAOC,SAAQ,QAAQ,YAAYC,YAAW,CAAC,CAAC;AAChH,sBAAY,KAAK,MAAM,qBAAqB,QAAQ,MAAM,OAAO,MAAM,CAAC;AAAA,QAC1E;AACA,eAAO,EAAE,SAAS,aAAa,QAAQ,OAAO;AAAA,MAChD;AAAA,IACF;AAAA;AAAA;;;ACjPA,SAAS,SAAAE,cAAa;AACtB,SAAS,SAAS,YAAAC,WAAU,UAAU,MAAAC,KAAI,YAAY;AACtD,SAAS,cAAc;AACvB,SAAS,cAAAC,aAAY,QAAAC,OAAM,WAAAC,gBAAe;AAuC1C,SAASC,UAAS,OAAqD;AACrE,SAAO,UAAU,QAAQ,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,EAAE,GAAG,MAAM,IAAI;AAC/F;AAGO,SAAS,iBAAiB,QAAoC;AACnE,QAAM,SAAkB,WAAW,SAAY,CAAC,IAAI,KAAK,MAAM,MAAM;AACrE,QAAM,WAAWA,UAAS,MAAM;AAChC,MAAI,CAAC,SAAU,OAAM,IAAI,MAAM,oCAAoC;AACnE,SAAO,SAAS;AAChB,SAAO,SAAS;AAChB,SAAO,KAAK,UAAU,UAAU,MAAM,CAAC,IAAI;AAC7C;AAGO,SAAS,eAAe,QAA4B,MAAoB;AAC7E,SAAO;AAAA,IACL,QAAQ,KAAK;AAAA,IACb,gBAAgB,MAAM,oBAAoB;AAAA,IAC1C,gBAAgB,MAAM,SAAS;AAAA,IAC/B,mBAAmB,IAAI;AAAA,EACzB,EAAE,OAAO,CAAC,SAAyB,QAAQ,IAAI,CAAC,EAAE,KAAK,MAAM;AAC/D;AAOA,SAAS,eAAe,MAAc,QAAuB;AAC3D,SAAO;AAAA,IAAK;AAAA,IAAc;AAAA,IACxB,WAAW,YAAY,OAAOF,MAAK,MAAM,KAAK,CAAC;AAAA,EAA0C;AAC7F;AAGA,eAAsB,iBAAiB,MAAsF;AAC3H,QAAM,cAAcA,MAAK,MAAM,OAAO,gBAAgB,YAAY;AAClE,QAAM,eAAeA,MAAK,aAAa,cAAc;AACrD,MAAI;AACF,UAAM,CAAC,eAAe,cAAc,GAAG,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC3D,SAAS,WAAW;AAAA,MAAG,KAAK,YAAY;AAAA,MAAGH,UAAS,cAAc,MAAM;AAAA,IAC1E,CAAC;AACD,QAAI,CAAC,aAAa,OAAO,EAAG,QAAO,EAAE,OAAO,eAAe,MAAM,GAAG,YAAY,yBAAyB,EAAE;AAC3G,UAAM,WAAWK,UAAS,KAAK,MAAM,GAAG,CAAC;AACzC,QAAI,CAAC,YAAY,SAAS,SAAS,cAAc;AAC/C,aAAO,EAAE,OAAO,eAAe,MAAM,GAAG,YAAY,sBAAsB,YAAY,GAAG,EAAE;AAAA,IAC7F;AACA,UAAM,KAAKA,UAAS,SAAS,EAAE;AAC/B,UAAM,WAAW,IAAI;AACrB,QAAI,CAAC,MAAM,QAAQ,QAAQ,KAAK,SAAS,WAAW,KAAK,OAAO,SAAS,CAAC,MAAM,YAAY,CAAC,SAAS,CAAC,EAAE,KAAK,GAAG;AAC/G,aAAO,EAAE,OAAO,eAAe,MAAM,GAAG,YAAY,uCAAuC,EAAE;AAAA,IAC/F;AACA,UAAM,cAAc,SAAS,CAAC;AAC9B,QAAIH,YAAW,WAAW,GAAG;AAC3B,aAAO,EAAE,OAAO,eAAe,MAAM,GAAG,YAAY,8CAA8C,EAAE;AAAA,IACtG;AACA,UAAM,YAAYE,SAAQ,aAAa,WAAW;AAClD,UAAM,CAAC,gBAAgB,SAAS,IAAI,MAAM,QAAQ,IAAI,CAAC,SAAS,SAAS,GAAG,KAAK,SAAS,CAAC,CAAC;AAC5F,QAAI,CAAC,SAAS,eAAe,cAAc,KAAK,mBAAmB,iBAAiB,CAAC,UAAU,OAAO,GAAG;AACvG,aAAO,EAAE,OAAO,eAAe,MAAM,gBAAgB,YAAY,0DAA0D,EAAE;AAAA,IAC/H;AACA,UAAM,UAAU,OAAO,SAAS,YAAY,YAAY,SAAS,QAAQ,KAAK,IAAI,SAAS,QAAQ,KAAK,IAAI;AAC5G,WAAO;AAAA,MACL,SAAS,EAAE,OAAO,gBAAgB,QAAQ;AAAA,MAC1C,OAAO,KAAK,cAAc,GAAG,YAAY,IAAI,OAAO,gBAAgB,cAAc,GAAG;AAAA,IACvF;AAAA,EACF,QAAQ;AACN,WAAO,EAAE,OAAO,eAAe,MAAM,4BAA4B,YAAY,SAAS,YAAY,GAAG,EAAE;AAAA,EACzG;AACF;AAYA,SAAS,eAAe,OAAuC;AAC7D,MAAI,MAAM,QAAQ,QAAW;AAC3B,QAAI;AAAE,cAAQ,KAAK,CAAC,MAAM,KAAK,SAAS;AAAA,IAAG,QAAQ;AAAA,IAA8C;AAAA,EACnG;AACA,MAAI;AAAE,UAAM,KAAK,SAAS;AAAA,EAAG,QAAQ;AAAA,EAA6C;AAClF,QAAM,OAAO,QAAQ;AACrB,QAAM,QAAQ,QAAQ;AACtB,QAAM,QAAQ,QAAQ;AACxB;AAGA,SAAS,gBACP,YACA,cACA,KACA,SACA,KACwB;AACxB,QAAM,YAAY,QAAQ,aAAa;AACvC,QAAM,cAAc,QAAQ,eAAe;AAC3C,QAAM,OAAO,CAAC,UAAU,OAAO,gBAAgB,mBAAmB,eAAe,cAAc,cAAc;AAC7G,SAAO,IAAI,QAAQ,mBAAiB;AAClC,UAAM,QAAQL,OAAM,YAAY,MAAM,EAAE,KAAK,UAAU,MAAM,KAAK,OAAO,CAAC,QAAQ,QAAQ,MAAM,EAAE,CAAC;AACnG,UAAM,SAAmB,CAAC;AAC1B,QAAI,QAAQ;AACZ,QAAI,UAAU;AACd,UAAM,SAAS,CAAC,WAAgC;AAC9C,UAAI,QAAS;AACb,gBAAU;AACV,mBAAa,KAAK;AAClB,oBAAc,MAAM;AAAA,IACtB;AACA,UAAM,QAAQ,CAAC,WAAuD;AACpE,UAAI,QAAS;AACb,qBAAe,KAAK;AACpB,aAAO,EAAE,IAAI,OAAO,QAAQ,OAAO,OAAO,MAAM,EAAE,SAAS,MAAM,GAAG,OAAO,CAAC;AAAA,IAC9E;AACA,UAAM,UAAU,CAAC,OAAe,SAAwB;AACtD,UAAI,QAAS;AACb,eAAS,MAAM;AACf,UAAI,QAAQ,aAAa;AACvB,cAAM,UAAU;AAChB;AAAA,MACF;AACA,UAAI,KAAM,QAAO,KAAK,KAAK;AAAA,IAC7B;AACA,UAAM,QAAQ,WAAW,MAAM;AAAE,YAAM,SAAS;AAAA,IAAG,GAAG,SAAS;AAC/D,UAAM,OAAO,GAAG,QAAQ,CAAC,UAAkB;AAAE,cAAQ,OAAO,IAAI;AAAA,IAAG,CAAC;AACpE,UAAM,OAAO,GAAG,QAAQ,CAAC,UAAkB;AAAE,cAAQ,OAAO,KAAK;AAAA,IAAG,CAAC;AACrE,UAAM,OAAO,GAAG,SAAS,MAAM;AAAE,YAAM,SAAS;AAAA,IAAG,CAAC;AACpD,UAAM,OAAO,GAAG,SAAS,MAAM;AAAE,YAAM,SAAS;AAAA,IAAG,CAAC;AACpD,UAAM,GAAG,SAAS,MAAM;AAAE,YAAM,SAAS;AAAA,IAAG,CAAC;AAC7C,UAAM,GAAG,SAAS,UAAQ;AACxB,YAAM,SAAS,OAAO,OAAO,MAAM,EAAE,SAAS,MAAM;AACpD,aAAO,SAAS,IAAI,EAAE,IAAI,MAAM,QAAQ,OAAO,IAAI,EAAE,IAAI,OAAO,QAAQ,QAAQ,QAAQ,UAAU,CAAC;AAAA,IACrG,CAAC;AACD,UAAM,MAAM,GAAG,SAAS,MAAM;AAAA,IAAkD,CAAC;AACjF,UAAM,MAAM,IAAI,GAAG,KAAK,UAAU,EAAE,IAAI,UAAU,MAAM,eAAe,CAAC,CAAC;AAAA,CAAI;AAAA,EAC/E,CAAC;AACH;AAGA,eAAe,SACb,YACA,cACA,KACA,SACwB;AACxB,QAAM,aAAa,MAAM,QAAQI,MAAK,OAAO,GAAG,sBAAsB,CAAC;AACvE,QAAM,MAAM,MAAM,SAAS,UAAU;AACrC,MAAI;AACF,WAAO,MAAM,gBAAgB,YAAY,cAAc;AAAA,MACrD,GAAG;AAAA,MACH,MAAM;AAAA,MACN,qBAAqB;AAAA,MACrB,oBAAoB;AAAA,MACpB,YAAY;AAAA,IACd,GAAG,SAAS,GAAG;AAAA,EACjB,UAAE;AACA,UAAMF,IAAG,YAAY,EAAE,OAAO,MAAM,WAAW,KAAK,CAAC;AAAA,EACvD;AACF;AAEA,SAAS,aAAa,SAAwB;AAC5C,SAAO;AAAA,IAAK;AAAA,IAAiB;AAAA,IAC3B;AAAA,EAAgG;AACpG;AAGA,eAAsB,WACpB,YACA,cACA,KACA,UAA0B,CAAC,GACX;AAChB,MAAI;AACJ,MAAI;AACF,aAAS,MAAM,SAAS,YAAY,cAAc,KAAK,OAAO;AAAA,EAChE,QAAQ;AACN,WAAO,aAAa,+EAA+E;AAAA,EACrG;AACA,MAAI,CAAC,OAAO,IAAI;AACd,QAAI,OAAO,WAAW,UAAW,QAAO,aAAa,gCAAgC;AACrF,QAAI,OAAO,WAAW,WAAY,QAAO,aAAa,gDAAgD;AACtG,WAAO,aAAa,6BAA6B;AAAA,EACnD;AACA,QAAM,aAAwC,CAAC;AAC/C,aAAW,QAAQ,OAAO,OAAO,MAAM,OAAO,EAAE,OAAO,OAAO,GAAG;AAC/D,QAAI;AACJ,QAAI;AAAE,eAAS,KAAK,MAAM,IAAI;AAAA,IAAG,QAAQ;AAAE,aAAO,aAAa,+CAA+C;AAAA,IAAG;AACjH,UAAM,QAAQI,UAAS,MAAM;AAC7B,QAAI,CAAC,MAAO,QAAO,aAAa,+CAA+C;AAC/E,QAAI,MAAM,SAAS,cAAc,MAAM,OAAO,SAAU,YAAW,KAAK,KAAK;AAAA,EAC/E;AACA,MAAI,WAAW,WAAW,EAAG,QAAO,aAAa,0EAA0E;AAC3H,QAAM,WAAW,WAAW,CAAC;AAC7B,MAAI,UAAU,YAAY,kBAAkB,SAAS,YAAY,MAAM;AACrE,WAAO,aAAa,gDAAgD;AAAA,EACtE;AACA,QAAM,OAAOA,UAAS,SAAS,IAAI;AACnC,QAAM,WAAW,MAAM;AACvB,MAAI,CAAC,MAAM,QAAQ,QAAQ,EAAG,QAAO,aAAa,yCAAyC;AAC3F,QAAM,UAAU,SAAS,IAAIA,SAAQ,EAAE,OAAO,CAACC,aAAgDA,UAAS,SAAS,KAAK;AACtH,MAAI,QAAQ,WAAW,EAAG,QAAO,aAAa,6CAA6C;AAC3F,QAAM,UAAU,QAAQ,CAAC;AACzB,MAAI,SAAS,WAAW,YAAa,QAAO,aAAa,wCAAwC;AACjG,QAAM,aAAaD,UAAS,QAAQ,UAAU;AAC9C,MAAI,OAAO,YAAY,SAAS,SAAU,QAAO,aAAa,4CAA4C;AAC1G,MAAI;AACF,UAAM,aAAa,MAAM,SAAS,WAAW,IAAI;AACjD,QAAI,eAAe,aAAc,QAAO,aAAa,iDAAiD;AAAA,EACxG,QAAQ;AACN,WAAO,aAAa,kDAAkD;AAAA,EACxE;AACA,SAAO,KAAK,iBAAiB,wBAAwB,YAAY,GAAG;AACtE;AAEA,eAAe,eAAe,MAA2C;AACvE,MAAI;AACF,WAAO,MAAML,UAAS,MAAM,MAAM;AAAA,EACpC,SAAS,OAAO;AACd,QAAK,MAAgC,SAAS,SAAU,QAAO;AAC/D,UAAM;AAAA,EACR;AACF;AAEA,eAAsB,uBAAuB,QAAgB,MAAY,SAAS,MAAqC;AACrH,QAAM,OAAO,SAAS,QAAQ,MAAM,IAAI;AACxC,QAAM,OAAOG,MAAK,MAAM,WAAW;AACnC,QAAM,SAAS,eAAe,MAAM,MAAM;AAC1C,QAAM,QAAQ,MAAM,sBAAsB,IAAI;AAC9C,QAAM,KAAK,WAAW,IAAI;AAC1B,MAAI,MAAM,SAAS,WAAW;AAC5B,WAAO;AAAA,MACL;AAAA,MACA,QAAQ,CAAC,yBAAyB;AAAA,QAChC;AAAA,QAAI,OAAO;AAAA,QAAM;AAAA,QAAM;AAAA,QAAM;AAAA,QAC7B,OAAO,GAAG,MAAM;AAAA,MAClB,CAAC,CAAC;AAAA,IACJ;AAAA,EACF;AACA,QAAM,aAAa,aAAa,OAAO,UAAUI,SAAQ;AACzD,MAAI,WAAW,SAAS,EAAG,QAAO,EAAE,MAAM,QAAQ,CAAC,kBAAkB,IAAI,MAAM,MAAM,UAAU,CAAC,EAAE;AAClG,SAAO,EAAE,MAAM,QAAQ,CAAC;AAAA,IACtB,IAAI,GAAG,EAAE;AAAA,IAAmB,QAAQ;AAAA,IACpC,SAAS,MAAM,IAAI;AAAA,IACnB,KAAK,wEAAwE,MAAM;AAAA,EACrF,CAAC,EAAE;AACL;AAnSA,IAsBM,cACA,UACA,kBACA,oBACAC,SAEAC,aACA,UAEA,UAEAF,WAoQO;AArSb;AAAA;AAAA;AAIA;AAIA;AAEA;AAEA;AACA;AAEA;AACA;AACA;AACA;AACA;AAGA,IAAM,eAAe;AACrB,IAAM,WAAW;AACjB,IAAM,mBAAmB;AACzB,IAAM,qBAAqB,OAAO;AAClC,IAAMC,UAAS,CAAC,eAAe,aAAa,UAAU,WAAW,UAAU,oBAAoB,UAAU;AAEzG,IAAMC,cAAa,CAAC,SAAS;AAC7B,IAAM,WAAW;AAEjB,IAAM,WAAW,CAAC,cAAc,SAAS;AAEzC,IAAMF,YAAW;AAAA,MACf;AAAA,MAAwB;AAAA,MAAyB;AAAA,MACjD;AAAA,MAAkB;AAAA,MAAwB;AAAA,MAAkB;AAAA,MAC5D;AAAA,MAAmB;AAAA,MAAgB;AAAA,MAAoB;AAAA,MACvD;AAAA,MAAoB;AAAA,MAAsB;AAAA,MAAsB;AAAA,MAChE;AAAA,MAAe;AAAA,MAAmB;AAAA,MAAoB;AAAA,MACtD;AAAA,IACF;AA6PO,IAAM,UAAiB;AAAA,MAC5B,IAAI;AAAA,MACJ,OAAO;AAAA,MACP,SAAS;AAAA,MACT,aAAa,EAAE,oBAAoB,YAAY;AAAA,MAC/C,MAAM,CAAC;AAAA,MACP,MAAM,MAAM,QAAgB,OAA4C;AACtE,cAAM,OAAO,OAAO,UAAU;AAC9B,cAAM,SAAS,MAAM,MAAM,OAAO,IAAI,IAAI,OAAO,UAAU;AAC3D,YAAI,CAAC,QAAQ;AACX,iBAAO,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,KAAK,UAAU,4BAA4B,oDAAoD,CAAC,EAAE;AAAA,QACnI;AACA,YAAI;AACF,cAAI,EAAE,MAAM,KAAK,IAAI,GAAG,YAAY,EAAG,OAAM,IAAI,MAAM,iBAAiB;AAAA,QAC1E,QAAQ;AACN,iBAAO,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,KAAK,WAAW,6BAA6B,IAAI,KAAK,kDAAkD,CAAC,EAAE;AAAA,QAC5I;AACA,cAAM,WAAW,MAAM,iBAAiB,IAAI;AAC5C,YAAI,CAAC,SAAS,QAAS,QAAO,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,SAAS,KAAK,EAAE;AACtE,cAAM,aAAa,MAAM,WAAW,QAAQ,SAAS,QAAQ,OAAO;AAAA,UAClE,MAAM,OAAO;AAAA,UACb,MAAM,OAAO;AAAA,UACb,qBAAqB;AAAA,UACrB,YAAY;AAAA,QACd,CAAC;AACD,YAAI,WAAW,WAAW,OAAQ,QAAO,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,SAAS,OAAO,UAAU,EAAE;AAE7F,cAAM,eAAeJ,MAAK,MAAM,eAAe;AAC/C,YAAI;AACJ,YAAI;AAAE,qBAAW,iBAAiB,MAAM,eAAe,YAAY,CAAC;AAAA,QAAG,QAAQ;AAC7E,iBAAO;AAAA,YACL,SAAS,CAAC;AAAA,YAAG,QAAQ;AAAA,cAAC,SAAS;AAAA,cAAO;AAAA,cACpC;AAAA,gBAAK;AAAA,gBAAe,kBAAkB,YAAY;AAAA,gBAChD;AAAA,cAA+E;AAAA,YAAC;AAAA,UACtF;AAAA,QACF;AACA,cAAM,qBAAqBA,MAAK,MAAM,kBAAkB;AACxD,YAAI;AACJ,YAAI;AACF,2BAAiB,MAAM,eAAe,kBAAkB;AAAA,QAC1D,QAAQ;AACN,iBAAO;AAAA,YACL,SAAS,CAAC;AAAA,YAAG,QAAQ;AAAA,cAAC,SAAS;AAAA,cAAO;AAAA,cACpC;AAAA,gBAAK;AAAA,gBAAa,kBAAkB,kBAAkB;AAAA,gBACpD;AAAA,cAA+D;AAAA,YAAC;AAAA,UACtE;AAAA,QACF;AACA,cAAM,SAAS,MAAM,cAAc,MAAMK,OAAM;AAG/C,cAAM,UAAUL,MAAK,MAAM,QAAQ;AACnC,YAAI;AACJ,YAAI;AACF,oBAAU,gBAAgB,MAAM,eAAe,OAAO,GAAG,QAAQ;AAAA,QACnE,QAAQ;AACN,iBAAO;AAAA,YACL,SAAS,CAAC;AAAA,YAAG,QAAQ;AAAA,cAAC,SAAS;AAAA,cAAO;AAAA,cACpC;AAAA,gBAAK;AAAA,gBAAU,kBAAkB,OAAO;AAAA,gBACtC;AAAA,cAAkF;AAAA,YAAC;AAAA,UACzF;AAAA,QACF;AACA,cAAM,WAAW,cAAc,UAAU,SAAS,OAAO;AACzD,YAAI,SAAU,QAAO,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,SAAS,OAAO,YAAY,QAAQ,EAAE;AACnF,cAAM,UAAmB,CAAC;AAC1B,cAAM,cAAsC,CAAC;AAC7C,cAAM,OAAiD,CAAC;AACxD,mBAAW,QAAQ,OAAO;AACxB,gBAAM,SAAS,SAAS,QAAQ,MAAM,IAAI;AAC1C,gBAAM,aAAaA,MAAK,QAAQ,kBAAkB;AAClD,kBAAQ,KAAK,EAAE,MAAM,OAAO,MAAM,OAAO,CAAC;AAC1C,kBAAQ,KAAK,EAAE,MAAM,QAAQ,MAAMA,MAAK,QAAQ,eAAe,GAAG,SAAS,SAAS,CAAC;AACrF,kBAAQ,KAAK,EAAE,MAAM,QAAQ,MAAM,YAAY,SAAS,eAAe,gBAAgB,IAAI,EAAE,CAAC;AAC9F,kBAAQ,KAAK,GAAG,MAAM,oBAAoB,EAAE,MAAM,QAAQ,MAAM,OAAOK,SAAQ,QAAQ,YAAYC,YAAW,CAAC,CAAC;AAChH,sBAAY,KAAK,MAAM,uBAAuB,QAAQ,MAAM,MAAM,CAAC;AACnE,eAAK,IAAI,IAAI,CAAC,mBAAmB,eAAe,SAAS,QAAQ,OAAO,gBAAgB,0BAA0B,UAAU;AAAA,QAC9H;AACA,eAAO;AAAA,UACL;AAAA,UACA;AAAA,UACA,QAAQ,CAAC,KAAK,WAAW,eAAe,MAAM,UAAU,IAAI,GAAG,GAAG,SAAS,OAAO,UAAU;AAAA,UAC5F;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA;AAAA;;;ACxXA,SAAS,KAAK,aAAa;AAC3B,SAAS,KAAAC,UAAS;AAUX,SAAS,oBAAoB,QAAoC;AACtE,SAAO,OAAO,SAAS,IAAI,KAAK,OAAO,SAAS,QAAQ,IAAI,qBAAqB;AACnF;AAkBO,SAAS,aAAa,QAAoC;AAC/D,QAAM,QAAQ,0CAA0C,KAAK,OAAO,KAAK,CAAC;AAC1E,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,CAAC,EAAE,OAAO,IAAI,OAAO,EAAE,IAAI;AACjC,QAAM,QAAQ,CAAC,aAAa,aAAa,WAAW,SAAS,MAAM,EAAE,SAAS,IAAI,IAAI,cAAc;AACpG,SAAO,QAAQ,KAAK,IAAI,IAAI;AAC9B;AAGO,SAAS,aAAa,KAAc,iBAAiB,iBAA+B;AACzF,QAAM,SAAS,aAAa,UAAU,GAAG;AACzC,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,EAAE,QAAQ,CAAC,KAAK,gBAAgB,2CAA2C,qDAAqD,CAAC,EAAE;AAAA,EAC5I;AACA,QAAM,SAAS,OAAO;AACtB,MAAI,OAAO,gBAAgB,WAAW;AACpC,WAAO,EAAE,QAAQ,CAAC,KAAK,gBAAgB,mBAAmB,OAAO,WAAW,KAAK,mCAAmC,CAAC,EAAE;AAAA,EACzH;AACA,QAAM,MAAM,MAAM,OAAO,UAAU;AACnC,QAAM,SAAS,OAAO,kBAAkB,OAAO,OAAO,MAAM,OAAO,aAAa;AAChF,MAAI,CAAC,OAAO,CAAC,QAAQ;AACnB,WAAO,EAAE,QAAQ,CAAC,KAAK,iBAAiB,0CAA0C,0DAA0D,CAAC,EAAE;AAAA,EACjJ;AACA,MAAI,QAAQ,QAAQ;AAClB,WAAO,EAAE,QAAQ,CAAC,KAAK,iBAAiB,gBAAgB,GAAG,8BAA8B,MAAM,KAAK,+CAA+C,CAAC,EAAE;AAAA,EACxJ;AACA,MAAI,CAAC,IAAI,QAAQ,cAAc,GAAG;AAChC,WAAO,EAAE,QAAQ,CAAC,KAAK,iBAAiB,SAAS,MAAM,+BAA+B,cAAc,KAAK,sCAAsC,CAAC,EAAE;AAAA,EACpJ;AACA,QAAM,MAAM,aAAa,OAAO,MAAM;AACtC,MAAI,CAAC,KAAK;AACR,WAAO,EAAE,QAAQ,CAAC,KAAK,gBAAgB,wBAAwB,OAAO,MAAM,wBAAwB,qDAAqD,CAAC,EAAE;AAAA,EAC9J;AACA,SAAO,EAAE,QAAQ,CAAC,KAAK,iBAAiB,SAAS,MAAM,kBAAkB,GAAG,0BAA0B,cAAc,IAAI,CAAC,GAAG,QAAQ,EAAE,KAAK,SAAS,OAAO,EAAE;AAC/J;AAEA,eAAsB,YAAY,QAAgB,MAAyB,QAAQ,KAAK,iBAAiB,iBAAwC;AAC/I,QAAM,SAAS,MAAM,MAAM,OAAO,IAAI,OAAO,OAAO,UAAU;AAC9D,MAAI,CAAC,QAAQ;AACX,WAAO,EAAE,QAAQ,CAAC,KAAK,aAAa,+BAA+B,oDAAoD,CAAC,EAAE;AAAA,EAC5H;AACA,QAAM,SAAS,MAAM,MAAM,QAAQ,CAAC,UAAU,UAAU,QAAQ,GAAG;AAAA,IACjE,MAAM,OAAO;AAAA,IAAM,YAAY,OAAO;AAAA,IAAW,MAAM,OAAO;AAAA,IAC9D,GAAI,IAAI,mBAAmB,SAAY,CAAC,IAAI,EAAE,gBAAgB,IAAI,eAAe;AAAA,EACnF,CAAC;AACD,MAAI,CAAC,OAAO,IAAI;AACd,WAAO,EAAE,QAAQ,CAAC,KAAK,gBAAgB,uCAAuC,iCAAiC,CAAC,EAAE;AAAA,EACpH;AACA,MAAI;AAAE,WAAO,aAAa,KAAK,MAAM,OAAO,MAAM,GAAG,cAAc;AAAA,EAAG,QAChE;AAAE,WAAO,aAAa,QAAW,cAAc;AAAA,EAAG;AAC1D;AA4CA,eAAsB,YACpB,QACAC,MACA,UAA4E,CAAC,GACjE;AACZ,QAAM,QAAQ,EAAE,QAAQ;AAAA,EAAe,GAAG,OAAO;AAAA,EAAe,GAAG,OAAO;AAAA,EAAe,GAAG,QAAQ;AAAA,EAAe,EAAE;AAErH,QAAM,eAAkC;AAAA,IACtC,KAAK,GAAG,OAAO,GAAG;AAAA,IAClB,GAAI,QAAQ,aAAa,SAAY,CAAC,IAAI,EAAE,UAAU,QAAQ,SAAS;AAAA,IACvE,YAAY;AAAA,IACZ,kBAAkB;AAAA,IAClB,WAAW,EAAE,SAAS,MAAM;AAAA,IAC5B,QAAQ;AAAA,EACV;AACA,MAAI;AACJ,MAAI,QAAQ,YAAY,QAAW;AACjC,aAAS,QAAQ,QAAQ,YAAY;AAAA,EACvC,OAAO;AACL,UAAM,CAAC,EAAE,eAAe,GAAG,EAAE,aAAa,CAAC,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC/D,OAAO,kBAAkB;AAAA,MAAG,OAAO,yCAAyC;AAAA,IAC9E,CAAC;AACD,UAAM,MAAM,IAAI,aAAa,EAAE,GAAG,cAAc,UAAU,cAAc,OAAO,QAAQ,GAAG,CAAC,IAAI,YAAY,MAAM,CAAC;AAClH,aAAS;AAAA,MACP,GAAG,eAAe,GAAG;AAAA,MACrB,SAAS,MAAM,IAAI,QAAQ;AAAA,MAAG,OAAO,MAAM,IAAI,MAAM;AAAA,MACrD,iBAAiB,MAAM;AAAE,YAAI,gBAAgB;AAAA,MAAG;AAAA,MAAG,oBAAoB,MAAM,IAAI,mBAAmB;AAAA,MACpG,aAAa,MAAM,IAAI,YAAY;AAAA,MACnC,wBAAwB,CAAC,MAAM,OAAO,IAAI,uBAAuB,MAAM,EAAE;AAAA,MACzE,cAAc,QAAM,IAAI,aAAa,EAAE;AAAA,MAAG,cAAc,QAAM,IAAI,aAAa,EAAE;AAAA,MACjF,cAAc,QAAM,IAAI,aAAa,EAAE;AAAA,IACzC;AAAA,EACF;AACA,MAAI;AACF,UAAM,OAAO,QAAQ;AACrB,WAAO,MAAMA,KAAI;AAAA,MACf,MAAM,gBAAgB;AACpB,cAAM,WAAW,aAAa,MAAM,MAAM,OAAO,OAAO,IAAI,CAAC;AAC7D,eAAO,SAAS,OAAO,aAAa,CAAC;AAAA,MACvC;AAAA,MACA,MAAM,eAAe,WAAW;AAC9B,cAAM,OAAO,OAAO,MAAM,EAAE,UAAU,CAA6D;AAAA,MACrG;AAAA,MACA,MAAM,gBAAgB,KAAK;AACzB,cAAM,OAAO,OAAO,MAAM,EAAE,iBAAiB,CAAC,GAAG,GAAG,EAAE,CAAC;AAAA,MACzD;AAAA,MACA,MAAM,eAAe;AACnB,cAAM,WAAW,aAAa,MAAM,MAAM,OAAO,OAAO,IAAI,CAAC;AAC7D,eAAO,SAAS,OAAO,iBAAiB,CAAC;AAAA,MAC3C;AAAA,MACA,MAAM,cAAc,UAAU;AAC5B,cAAM,OAAO,OAAO,MAAM,EAAE,eAAe,CAAC,GAAG,QAAQ,EAAE,CAA6D;AAAA,MACxH;AAAA,MACA,MAAM,iBAAiB;AACrB,cAAM,WAAW,aAAa,MAAM,MAAM,OAAO,OAAO,IAAI,CAAC;AAC7D,eAAO,SAAS,OAAO,mBAAmB;AAAA,MAC5C;AAAA,MACA,MAAM,cAAc;AAClB,eAAO,MAAM,OAAO,YAAY;AAAA,MAClC;AAAA,MACA,MAAM,cAAc,MAAM,IAAI;AAC5B,eAAO,MAAM,OAAO,uBAAuB,MAAM,EAAE;AAAA,MACrD;AAAA,MACA,MAAM,aAAa,IAAI;AACrB,eAAO,MAAM,OAAO,aAAa,EAAE;AAAA,MACrC;AAAA,MACA,MAAM,aAAa,IAAI;AACrB,eAAO,MAAM,OAAO,aAAa,EAAE;AAAA,MACrC;AAAA,MACA,MAAM,aAAa,IAAI;AACrB,cAAM,OAAO,aAAa,EAAE;AAAA,MAC9B;AAAA,MACA,MAAM,QAAQ,KAAK;AACjB,cAAM,OAAO,UAAU,QAAQ,EAAE,WAAW,CAAC,GAAG,GAAG,EAAE,CAAC;AAAA,MACxD;AAAA,IACF,CAAC;AAAA,EACH,UAAE;AACA,UAAM,OAAO,MAAM;AAAA,EACrB;AACF;AAOA,SAAS,WAAW,MAAe,SAAoD;AACrF,MAAI,SAAS,QAAQ,OAAO,SAAS,YAAY,MAAM,QAAQ,IAAI,EAAG,QAAO;AAC7E,QAAM,UAAU,OAAO,QAAQ,IAA+B;AAC9D,SAAO,QAAQ,WAAW,OAAO,KAAK,OAAO,EAAE,UAC7C,QAAQ,MAAM,CAAC,CAAC,KAAK,KAAK,MAAM,OAAO,OAAO,SAAS,GAAG,KAAK,UAAU,QAAQ,GAAG,CAAC;AACzF;AAGO,SAAS,gBAAgB,SAAmB,MAAwB;AACzE,MAAI,SAAS,QAAQ,OAAO,SAAS,SAAU,QAAO;AACtD,QAAM,QAAQ;AACd,QAAM,QAAQ,MAAM;AACpB,QAAM,OAAO,CAAC,MAAe,UAA4B,KAAK,UAAU,QAAQ,IAAI,MAAM,KAAK,UAAU,SAAS,IAAI;AACtH,SAAO,MAAM,YAAY,QAAQ,WAC/B,KAAK,MAAM,SAAS,QAAQ,OAAO,KACnC,WAAW,MAAM,KAAK,QAAQ,GAAG,KACjC,UAAU,QAAQ,OAAO,UAAU,YAClC,MAAgC,YAAY,QAAQ,WAAW;AAAA,EAEhE,KAAK,MAAM,QAAQ,QAAQ,MAAM,KACjC,KAAK,MAAM,iBAAiB,QAAQ,eAAe;AACvD;AAGO,SAAS,eAAe,SAAkB,MAAwB;AACvE,MAAI,SAAS,QAAQ,OAAO,SAAS,SAAU,QAAO;AACtD,QAAM,QAAQ;AACd,SAAO,MAAM,SAAS,QAAQ,QAAQ,MAAM,SAAS,QAAQ,QAAQ,MAAM,UAAU,QAAQ,SAC3F,MAAM,aAAa,QAAQ,YAAY,MAAM,WAAW,QAAQ,UAAU,MAAM,UAAU,QAAQ;AACtG;AAOO,SAAS,cACd,MACA,SACA,MACe;AACf,QAAM,UAAU,IAAI,IAAI,IAAI;AAC5B,QAAM,SAAS,IAAI,IAAI,QAAQ,IAAI,aAAW,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC;AACpE,QAAM,OAAO,oBAAI,IAAY;AAC7B,QAAM,OAAO,KACV,OAAO,WAAS,CAAC,QAAQ,IAAI,OAAO,MAAM,EAAE,CAAC,CAAC,EAC9C,IAAI,WAAS;AACZ,UAAM,UAAU,OAAO,IAAI,OAAO,MAAM,EAAE,CAAC;AAC3C,QAAI,CAAC,QAAS,QAAO;AACrB,SAAK,IAAI,QAAQ,EAAE;AAGnB,UAAM,UAAuB;AAAA,MAC3B,GAAG;AAAA,MAAO,MAAM,QAAQ;AAAA,MAAM,MAAM,QAAQ;AAAA,MAAM,OAAO,QAAQ;AAAA,MACjE,UAAU,QAAQ;AAAA,MAAU,OAAO,QAAQ;AAAA,IAC7C;AACA,QAAI,QAAQ,WAAW,OAAW,QAAO,QAAQ;AAAA,QAC5C,SAAQ,SAAS,QAAQ;AAC9B,WAAO;AAAA,EACT,CAAC;AACH,SAAO,CAAC,GAAG,MAAM,GAAG,QAAQ,OAAO,aAAW,CAAC,KAAK,IAAI,QAAQ,EAAE,CAAC,EAAE,IAAI,cAAY,EAAE,GAAG,QAAQ,EAAE,CAAC;AACvG;AAjRA,IASa,iBACA,oBAMP,cAoEA;AApFN;AAAA;AAAA;AAIA;AAGA;AAEO,IAAM,kBAAkB;AACxB,IAAM,qBAAqB;AAMlC,IAAM,eAAeD,GAAE,OAAO;AAAA,MAC5B,QAAQA,GAAE,OAAO,EAAE,IAAI,CAAC;AAAA,MACxB,aAAaA,GAAE,KAAK,CAAC,WAAW,WAAW,aAAa,cAAc,CAAC;AAAA,MACvE,YAAYA,GAAE,OAAO;AAAA,MACrB,eAAeA,GAAE,OAAO,EAAE,SAAS;AAAA,IACrC,CAAC;AA+DD,IAAM,eAAeA,GAAE,OAAO;AAAA,MAC5B,QAAQA,GAAE,OAAO;AAAA,QACf,WAAWA,GAAE,OAAOA,GAAE,OAAO,GAAGA,GAAE,QAAQ,CAAC,EAAE,SAAS;AAAA;AAAA,QAEtD,eAAeA,GAAE,MAAMA,GAAE,OAAOA,GAAE,OAAO,GAAGA,GAAE,QAAQ,CAAC,CAAC,EAAE,SAAS;AAAA,QACnE,gBAAgBA,GAAE,QAAQ,EAAE,SAAS;AAAA,MACvC,CAAC;AAAA,IACH,CAAC;AAAA;AAAA;;;AC3FD,SAAS,gBAAAE,qBAAoB;AAC7B,SAAS,QAAAC,cAAY;AAiBrB,SAAS,UAAU,MAAsB;AACvC,SAAOD,cAAa,IAAI,IAAI,mBAAmB,IAAI,IAAI,YAAY,GAAG,GAAG,MAAM;AACjF;AAEO,SAAS,uBAAuB,QAAwB;AAC7D,SAAOC,OAAK,OAAO,UAAU,QAAQ;AACvC;AAEO,SAAS,4BAA4B,OAAgC;AAC1E,QAAM,YAAY,OAAO,YAAY,MAAM,IAAI,UAAQ,CAAC,WAAW,UAAU,IAAI,GAAG,mBAAmB,IAAI,CAAC,CAAC,CAAC;AAC9G,SAAO;AAAA,IACL;AAAA,IACA,6BAA6B,KAAK,UAAU,eAAe,CAAC,CAAC;AAAA,IAC7D,6DAA6D,KAAK,UAAU,WAAW,MAAM,CAAC,CAAC;AAAA,IAC/F;AAAA,EACF,EAAE,KAAK,IAAI;AACb;AAEO,SAAS,qBAAqB,QAAgB,OAAiC;AACpF,QAAM,OAAO,uBAAuB,MAAM;AAC1C,SAAO;AAAA,IACL,EAAE,MAAM,OAAO,MAAM,KAAK;AAAA,IAC1B,EAAE,MAAM,OAAO,MAAMA,OAAK,MAAM,QAAQ,EAAE;AAAA,IAC1C,GAAG,cAAc,IAAI,WAAS,EAAE,MAAM,QAAiB,MAAMA,OAAK,MAAM,IAAI,GAAG,SAAS,UAAU,IAAI,EAAE,EAAE;AAAA,IAC1G,EAAE,MAAM,QAAQ,MAAMA,OAAK,MAAM,UAAU,aAAa,GAAG,SAAS,4BAA4B,KAAK,EAAE;AAAA,EACzG;AACF;AA5CA,IAOa,0BAGP;AAVN;AAAA;AAAA;AAIA;AACA;AAEO,IAAM,2BAA2B;AAGxC,IAAM,gBAAgB;AAAA,MACpB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA;AAAA;;;AChBA,SAAS,QAAAC,QAAM,OAAAC,YAAW;AAC1B,SAAS,SAAAC,QAAO,MAAAC,WAAU;AA+B1B,SAAS,eAAe,SAAqE;AAC3F,QAAM,YAAY,QAAQ,OAAO,QAAQ,KAAK;AAC9C,SAAO,EAAE,GAAI,aAAa,SAAY,CAAC,IAAI,EAAE,SAAS,GAAI,GAAI,QAAQ,UAAU,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC,EAAG;AACrH;AAGA,SAAS,cACP,QACA,OACA,MACA,OAC0B;AAC1B,SAAO,OAAO,YAAY,MAAM,IAAI,UAAQ,CAAC,WAAW,MAAM,IAAI,IAAI,GAAG;AAAA,IACvE,SAAS,MAAM;AAAA,IACf,OAAO,cAAc,MAAM,IAAI,IAAI;AAAA,IACnC,SAAS,CAAC,KAAK,QAAQ,GAAI,KAAK,OAAO,IAAI,KAAK,CAAC,CAAE;AAAA,IACnD,KAAK,EAAE,GAAG,MAAM,aAAa,GAAG,KAAK,cAAc,IAAI,GAAG,CAAC,MAAM,OAAO,GAAG,SAAS,QAAQ,MAAM,IAAI,IAAI,EAAE;AAAA,IAC5G,YAAY,EAAE,SAAS,iBAAiB,IAAI,EAAE;AAAA,IAC9C,GAAG,MAAM;AAAA,EACX,CAAC,CAAC,CAAC;AACL;AAGA,SAAS,aAAa,OAAc,OAAmC;AACrE,SAAO,MAAM,IAAI,WAAS;AAAA,IACxB,IAAI,UAAU,MAAM,IAAI,IAAI;AAAA,IAC5B,MAAM,cAAc,MAAM,IAAI,IAAI;AAAA,IAClC,MAAM,UAAU,IAAI;AAAA,IACpB,OAAO,WAAW,IAAI;AAAA,IACtB,UAAU,WAAW,MAAM,IAAI,IAAI;AAAA,IACnC,GAAI,MAAM,kBAAkB,SAAY,CAAC,IAAI,EAAE,QAAQ,MAAM,cAAc;AAAA,IAC3E,kBAAkB,cAAc,IAAI;AAAA,IACpC,OAAO,WAAW,IAAI;AAAA,EACxB,EAAE;AACJ;AASA,eAAe,aACb,QACA,QACA,OACA,QAAsB,CAAC,GACL;AAGlB,QAAM,UAAmB;AAAA,IACvB,EAAE,MAAM,OAAO,MAAM,OAAO,SAAS;AAAA,IACrC,EAAE,MAAM,OAAO,MAAM,WAAW,MAAM,EAAE;AAAA,IACxC,EAAE,MAAM,QAAQ,MAAMH,OAAK,WAAW,MAAM,GAAG,uBAAuB,GAAG,SAAS,mBAAmB,WAAW,EAAE;AAAA,EACpH;AACA,QAAM,YAAsC,CAAC;AAC7C,QAAM,WAAsB,CAAC;AAC7B,QAAM,SAAkB,CAAC;AACzB,QAAM,WAA6C,CAAC;AACpD,aAAW,MAAM,QAAQ;AACvB,UAAM,QAAQ,OAAO,EAAE;AACvB,UAAM,OAAO,MAAM,MAAM,MAAM,QAAQ,OAAO,KAAK;AACnD,YAAQ,KAAK,GAAG,KAAK,OAAO;AAC5B,WAAO,KAAK,GAAG,KAAK,MAAM;AAC1B,UAAM,cAAc,KAAK,eAAe,CAAC;AACzC,WAAO,KAAK,GAAG,YAAY,QAAQ,gBAAc,WAAW,MAAM,CAAC;AACnE,UAAM,kBAAkB,IAAI,IAAI,YAAY,IAAI,gBAAc,WAAW,IAAI,CAAC;AAC9E,UAAM,aAAa,KAAK,QAAQ,OAAO,WAAS,gBAAgB,IAAI,MAAM,IAAI,CAAC;AAC/E,QAAI,WAAW,SAAS,GAAG;AACzB,aAAO,KAAK;AAAA,QAAK,GAAG,EAAE;AAAA,QACpB,GAAG,MAAM,KAAK,iEAAiE,WAAW,IAAI,WAAS,MAAM,IAAI,EAAE,KAAK,IAAI,CAAC;AAAA,QAC7H;AAAA,MAAmD,CAAC;AAAA,IACxD;AACA,QAAI,KAAK,WAAW,OAAW;AAC/B,aAAS,EAAE,IAAI,KAAK;AACpB,WAAO,OAAO,WAAW,cAAc,QAAQ,OAAO;AAAA,MACpD,QAAQ,KAAK;AAAA,MACb,GAAI,KAAK,OAAO,EAAE,MAAM,KAAK,KAAK,IAAI,CAAC;AAAA,MACvC,GAAI,KAAK,cAAc,EAAE,aAAa,KAAK,YAAY,IAAI,CAAC;AAAA,IAC9D,GAAG,KAAK,CAAC;AACT,aAAS,KAAK,GAAG,aAAa,OAAO,KAAK,CAAC;AAAA,EAC7C;AACA,MAAI,OAAO,MAAM,QAAM,SAAS,EAAE,MAAM,MAAS,GAAG;AAClD,YAAQ,KAAK;AAAA,MACX,MAAM;AAAA,MACN,MAAMA,OAAK,OAAO,UAAU,oBAAoB;AAAA,MAChD,SAAS,0BAA0B,OAAO,UAAU,UAAU,QAAQ,KAAK;AAAA,IAC7E,CAAC;AACD,WAAO,KAAK;AAAA,MAAK;AAAA,MACf,4EAA4EA,OAAK,OAAO,UAAU,oBAAoB,CAAC;AAAA,MACvH;AAAA,IAAqF,CAAC;AAAA,EAC1F;AACA,QAAM,aAAa,OAAO,SAAS,QAAQ,IAAI,uBAAuB,MAAM,IAAI;AAChF,MAAI,eAAe,OAAW,SAAQ,KAAK,GAAG,qBAAqB,QAAQ,KAAK,CAAC;AACjF,UAAQ,KAAK,EAAE,MAAM,QAAQ,MAAMA,OAAK,OAAO,UAAU,MAAM,GAAG,SAAS,aAAa,gBAAS,SAAS,QAAQ,OAAO,eAAe,GAAG,qBAAqB,QAAQ,MAAM,kBAAkB,IAAI,CAAC,EAAE,CAAC;AACxM,SAAO,EAAE,SAAS,WAAW,UAAU,QAAQ,GAAI,eAAe,SAAY,CAAC,IAAI,EAAE,WAAW,EAAG;AACrG;AAQA,SAAS,mBAAmB,UAAuC;AACjE,QAAM,SAAS,eAAe;AAC9B,MAAI,CAAC,SAAU,QAAO,CAAC;AACvB,MAAI,SAAS,aAAa,QAAQ;AAChC,WAAO,CAAC,KAAK,iBAAiB,4BAA4B,MAAM,wBAAwB,CAAC;AAAA,EAC3F;AACA,QAAM,OAAO,SAAS,aAAa,SAC/B,2EAA2E,SAAS,OAAO,MAC3F,6BAA6B,SAAS,QAAQ;AAClD,SAAO,CAAC;AAAA,IAAK;AAAA,IACX,aAAa,IAAI,0BAA0B,MAAM;AAAA,IACjD;AAAA,EAAiE,CAAC;AACtE;AAOA,SAAS,oBAAoB,MAA8B,SAAsC;AAC/F,QAAM,QAAQ,IAAI,IAAI,QAAQ,IAAI,aAAW,QAAQ,EAAE,CAAC;AACxD,QAAM,WAAW,KACd,OAAO,WAAS,MAAM,IAAI,OAAO,MAAM,EAAE,CAAC,CAAC,EAC3C,OAAO,WAAS,oBAAoB,KAAK,YAAU,WAAW,MAAM,gBAAgB,CAAC,EACrF,IAAI,WAAS,GAAG,OAAO,MAAM,EAAE,CAAC,KAAK,OAAO,MAAM,gBAAgB,CAAC,GAAG,EACtE,KAAK;AACR,MAAI,SAAS,WAAW,EAAG,QAAO,CAAC;AACnC,SAAO,CAAC;AAAA,IAAK;AAAA,IACX,GAAG,OAAO,SAAS,MAAM,CAAC,8GAA8G,SAAS,KAAK,IAAI,CAAC;AAAA,IAC3J,iGAAiG,cAAc,UAAU,oBAAoB,cAAc,IAAI;AAAA,EAAsB,CAAC;AAC1L;AAMA,SAAS,iBAAiB,SAAuC;AAC/D,QAAM,WAAW,QAAQ,OAAO,eAAa,UAAU,WAAW,QAAQ,EAAE;AAC5E,QAAM,QAAQ,OAAO,QAAQ,MAAM;AACnC,QAAM,UAAU,QAAQ,WAAW,IAAI,yBAAyB;AAChE,MAAI,aAAa,EAAG,QAAO,GAAG,KAAK,IAAI,OAAO;AAC9C,MAAI,aAAa,QAAQ,OAAQ,QAAO,GAAG,KAAK,IAAI,OAAO;AAC3D,SAAO,GAAG,KAAK,IAAI,OAAO,6BAA6B,OAAO,QAAQ,CAAC;AACzE;AAGA,SAAS,gBAAgB,SAAoC;AAC3D,QAAM,WAAW,QAAQ,OAAO,YAAU,OAAO,SAAS,GAAGC,IAAG,oBAAoB,CAAC;AACrF,MAAI,SAAS,WAAW,EAAG,QAAO;AAClC,QAAM,QAAQ,SAAS,WAAW,IAAI,mDAAmD,GAAG,OAAO,SAAS,MAAM,CAAC;AACnH,SAAO,IAAI,KAAK;AAClB;AAWA,eAAe,cAAc,MAAc,QAAmC;AAC5E,MAAI;AACF,UAAMG,QAAO,MAAMF,OAAM,IAAI;AAC7B,QAAIE,MAAK,YAAY,EAAG,QAAO;AAC/B,WAAO,KAAK;AAAA,MAAK;AAAA,MACf,wBAAwB,IAAI;AAAA,MAC5B;AAAA,IAAwG,CAAC;AAC3G,WAAO;AAAA,EACT,SAAS,OAAO;AACd,QAAK,MAAgC,SAAS,SAAU,QAAO;AAC/D,WAAO,KAAK;AAAA,MAAK;AAAA,MAAoB,oCAAoC,IAAI;AAAA,MAC3E;AAAA,IAAmF,CAAC;AACtF,WAAO;AAAA,EACT;AACF;AAGA,eAAe,eAAe,QAAgB,QAA4B,OAA0C;AAClH,QAAM,SAAkB,CAAC;AACzB,MAAI,CAAC,MAAM,cAAc,OAAO,UAAU,MAAM,EAAG,QAAO;AAC1D,QAAM,cAAc,WAAW,MAAM,GAAG,MAAM;AAC9C,QAAM,YAAYJ,OAAK,OAAO,UAAU,OAAO;AAC/C,MAAI,CAAC,MAAM,cAAc,WAAW,MAAM,EAAG,QAAO;AACpD,aAAW,SAAS,QAAQ;AAC1B,UAAM,YAAYA,OAAK,WAAW,KAAK;AACvC,QAAI,CAAC,MAAM,cAAc,WAAW,MAAM,EAAG;AAC7C,eAAW,QAAQ,MAAO,OAAM,cAAc,SAAS,QAAQ,OAAO,IAAI,GAAG,MAAM;AAAA,EACrF;AACA,SAAO;AACT;AAGA,eAAe,UAAU,QAAgB,UAA8B,QAA4B,OAAwC;AACzI,MAAI,CAAC,SAAU,QAAO;AACtB,QAAM,OAAO,IAAI,IAAI,OAAO,QAAQ,WAAS,MAAM,IAAI,UAAQ,WAAW,OAAO,IAAI,CAAC,CAAC,CAAC;AACxF,QAAM,cAAwB,CAAC;AAC/B,QAAM,aAAuB,CAAC;AAC9B,QAAM,sBAAgC,CAAC;AACvC,aAAW,SAAS,SAAS,QAAQ;AACnC,eAAW,QAAQ,SAAS,OAAO;AACjC,UAAI,KAAK,IAAI,WAAW,OAAO,IAAI,CAAC,EAAG;AACvC,kBAAY,KAAK,WAAW,OAAO,IAAI,CAAC;AACxC,iBAAW,KAAK,UAAU,OAAO,IAAI,CAAC;AACtC,YAAM,OAAO,SAAS,QAAQ,OAAO,IAAI;AACzC,UAAI,MAAM,OAAO,IAAI,EAAG,qBAAoB,KAAK,IAAI;AAAA,IACvD;AAAA,EACF;AACA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,cAAc,SAAS,OAAO,SAAS,QAAQ,KAAK,CAAC,OAAO,SAAS,QAAQ;AAAA,IAC7E;AAAA,EACF;AACF;AAUA,SAAS,WAAW,SAAkB,OAAc,SAAgC,cAElF;AACA,QAAM,aAAa,QAAQ,KAAK,YAAU,OAAO,OAAO,wBAAwB;AAChF,QAAM,eAAe,QAAQ,eAAe,UAAa,MAAM;AAC/D,MAAI,CAAC,aAAc,QAAO,EAAE,QAAQ,CAAC,EAAE;AACvC,MAAI,eAAe,UAAa,WAAW,SAAS,cAAc;AAChE,WAAO;AAAA,MACL;AAAA,MACA,QAAQ,CAAC;AAAA,QAAK;AAAA,QACZ,UAAU,wBAAwB,uBAAuB,WAAW,IAAI,6BAA6B,YAAY;AAAA,QACjH;AAAA,MAAqF,CAAC;AAAA,IAC1F;AAAA,EACF;AACA,MAAI,QAAQ,eAAe,QAAW;AACpC,UAAM,UAAU,YAAY,YAAY,QAAQ,WAAW,WAAW,aAAa,WAAW,UAAU;AACxG,WAAO;AAAA,MACL,GAAI,eAAe,SAAY,CAAC,IAAI,EAAE,WAAW;AAAA,MACjD,WAAW,EAAE,QAAQ,eAAe,SAAY,WAAW,UAAU,SAAS,UAAU,MAAM,UAAU,QAAQ,yBAAyB;AAAA,MACzI,QAAQ,CAAC;AAAA,IACX;AAAA,EACF;AACA,SAAO;AAAA,IACL,GAAI,eAAe,SAAY,CAAC,IAAI,EAAE,WAAW;AAAA,IACjD,WAAW,EAAE,QAAQ,eAAe,SAAY,SAAS,UAAU,MAAM,UAAU,QAAQ,yBAAyB;AAAA,IACpH,QAAQ,CAAC;AAAA,EACX;AACF;AAGA,eAAe,SAAS,SAAkB,SAAkB,OAAc,oBAA2C;AACnH,QAAM,iBAAiB,QAAQ,eAAe,UAAa,MAAM;AACjE,QAAM,CAAC,MAAM,cAAc,OAAO,IAAI,MAAM,QAAQ,IAAI;AAAA,IACtD,QAAQ,cAAc;AAAA,IAAG,QAAQ,aAAa;AAAA,IAAG,iBAAiB,QAAQ,YAAY,IAAI,QAAQ,QAAQ,CAAC,CAAC;AAAA,EAC9G,CAAC;AACD,QAAM,OAAO,IAAI,IAAI,aAAa,IAAI,WAAS,CAAC,OAAO,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC;AACzE,QAAM,SAAS,WAAW,SAAS,OAAO,SAAS,kBAAkB;AACrE,SAAO;AAAA,IACL;AAAA,IACA,GAAI,OAAO,eAAe,SAAY,CAAC,IAAI,EAAE,YAAY,OAAO,WAAW;AAAA,IAC3E,cAAc,OAAO;AAAA,IACrB,YAAY;AAAA,MACV,GAAG,MAAM,YAAY,QAAQ,OAAO;AAAA,MACpC,GAAG,OAAO,QAAQ,QAAQ,SAAS,EAAE,IAAI,CAAC,CAAC,IAAI,QAAQ,OAAO;AAAA,QAC5D,QAAQ,EAAE,MAAM,QAAQ,WAAW,gBAAgB,UAAU,KAAK,EAAE,CAAC,IAAI,SAAS;AAAA,QAClF,MAAM;AAAA,QACN,QAAQ;AAAA,MACV,EAAsB;AAAA,MACtB,GAAG,QAAQ,SAAS,IAAI,cAAY;AAAA,QAClC,QAAQ,CAAC,KAAK,IAAI,QAAQ,EAAE,IAAI,WAAW,eAAe,SAAS,KAAK,IAAI,QAAQ,EAAE,CAAC,IAAI,SAAS;AAAA,QACpG,MAAM;AAAA,QACN,QAAQ,QAAQ;AAAA,MAClB,EAAsB;AAAA,MACtB,GAAG,MAAM,YAAY,OAAO,QAAM,MAAM,IAAI,EAAE,IAAI,SAAO,EAAE,QAAQ,UAAU,MAAM,YAAY,QAAQ,GAAG,EAAsB;AAAA,MAChI,GAAG,MAAM,WAAW,OAAO,QAAM,KAAK,IAAI,EAAE,CAAC,EAAE,IAAI,SAAO,EAAE,QAAQ,UAAU,MAAM,WAAW,QAAQ,GAAG,EAAsB;AAAA,MAChI,GAAI,OAAO,cAAc,SAAY,CAAC,IAAI,CAAC,OAAO,SAAS;AAAA,IAC7D;AAAA,EACF;AACF;AAEA,SAAS,oBAAoB,SAAyB;AACpD,SAAO,UACH,KAAK,yBAAyB,qEAAqE,IACnG;AAAA,IAAK;AAAA,IACL;AAAA,IACA;AAAA,EAAmG;AACzG;AAEA,SAAS,mBAAmB,QAAgC,cAA6B;AACvF,MAAI,WAAW,QAAW;AACxB,WAAO,KAAK,yBAAyB,UAAU,wBAAwB,uBAAuB,+BAA+B;AAAA,EAC/H;AACA,MAAI,OAAO,SAAS,cAAc;AAChC,WAAO;AAAA,MAAK;AAAA,MAAyB,UAAU,wBAAwB,uBAAuB,OAAO,IAAI,SAAS,YAAY;AAAA,MAC5H;AAAA,IAAqF;AAAA,EACzF;AACA,MAAI,CAAC,OAAO,WAAW,OAAO,WAAW,aAAa,OAAO,UAAU,QAAW;AAChF,UAAM,SAAS,OAAO,UAAU,SAAY,UAAU,OAAO,MAAM,KAAK,GAAG,OAAO,MAAM,KAAK,OAAO,KAAK;AACzG,WAAO,KAAK,yBAAyB,UAAU,wBAAwB,oBAAoB,MAAM,MAAM,+BAA+B;AAAA,EACxI;AACA,SAAO,KAAK,yBAAyB,kDAAkD,YAAY,GAAG;AACxG;AAEA,eAAe,gBACb,SAAkB,SAAkB,MAAY,SAA+B,cAC7D;AAClB,MAAI,QAAQ,eAAe,QAAW;AACpC,QAAI,KAAK,eAAe,OAAW,OAAM,QAAQ,aAAa,wBAAwB;AACtF,WAAO,CAAC;AAAA,EACV;AACA,MAAI,SAAS,KAAK;AAClB,MAAI,WAAW,QAAW;AACxB,aAAS,MAAM,QAAQ,cAAc,cAAc,wBAAwB;AAAA,EAC7E,OAAO;AACL,QAAI,CAAC,OAAO,QAAS,UAAS,MAAM,QAAQ,aAAa,wBAAwB;AACjF,UAAM,eAAe,QAAQ;AAAA,MAAK,gBAC/B,UAAU,SAAS,UAAU,UAAU,SAAS,UAAU,UAAU,OAAO,WAAW,GAAG,YAAY,GAAGC,IAAG,EAAE;AAAA,IAChH;AACA,UAAM,cAAc,gBAAgB,OAAO,WAAW,aAAa,OAAO,UAAU;AACpF,QAAI,YAAa,UAAS,MAAM,QAAQ,aAAa,wBAAwB;AAAA,EAC/E;AACA,SAAO,CAAC,mBAAmB,QAAQ,YAAY,CAAC;AAClD;AAOA,SAAS,qBAAqB,QAA4B,gBAA8C;AACtG,SAAO,OAAO,SAAS,QAAQ,IAAI,iBAAiB;AACtD;AAOA,SAAS,yBAAyB,QAA4B,gBAAkC;AAC9F,MAAI,kBAAkB,CAAC,OAAO,SAAS,QAAQ,EAAG,QAAO,CAAC;AAC1D,SAAO,CAAC;AAAA,IAAK;AAAA,IACX;AAAA,IACA;AAAA,EAAsF,CAAC;AAC3F;AAGA,eAAsB,MAAM,UAAsB,CAAC,GAAoB;AACrE,QAAM,SAAS,cAAc,SAAS,QAAQ,GAAG;AACjD,QAAM,SAAS,QAAQ,UAAU,CAAC,OAAO;AACzC,QAAM,iBAAiB,QAAQ,wBAAwB;AACvD,QAAM,UAAU,aAAa,QAAQ,MAAM;AAC3C,MAAI,QAAQ,SAAS,EAAG,QAAO,OAAO,SAAS,OAAO;AACtD,QAAM,aAAa,MAAM,eAAe,QAAQ,CAAC,GAAG,CAAC,CAAC;AACtD,MAAI,WAAW,UAAU,EAAG,QAAO,OAAO,SAAS,UAAU;AAC7D,QAAM,WAAW,MAAM,WAAW,MAAM;AACxC,QAAM,eAAe,CAAC,GAAG,oBAAI,IAAI,CAAC,GAAG,QAAQ,GAAI,UAAU,UAAU,CAAC,CAAE,CAAC,CAAC;AAC1E,QAAM,aAAa,MAAM,eAAe,QAAQ,cAAc,KAAK;AACnE,MAAI,WAAW,UAAU,EAAG,QAAO,OAAO,SAAS,UAAU;AAE7D,QAAM,sBAAsB,CAAC,GAAG,oBAAI,IAAI,CAAC,GAAG,QAAQ,GAAI,UAAU,UAAU,CAAC,CAAE,CAAC,CAAC;AACjF,QAAM,SAAS,MAAM,YAAY,QAAQ,QAAQ,KAAK,oBAAoB,mBAAmB,CAAC;AAC9F,MAAI,CAAC,OAAO,OAAQ,QAAO,OAAO,SAAS,OAAO,MAAM;AACxD,QAAM,UAAU,MAAM,aAAa,QAAQ,QAAQ,OAAO,EAAE,eAAe,CAAC;AAC5E,QAAM,QAAQ,MAAM,UAAU,QAAQ,UAAU,QAAQ,KAAK;AAC7D,QAAM,WAAW,MAAM,oBAAoB,WAAW,IAAI,CAAC,IAAI,CAAC;AAAA,IAC9D;AAAA,IACA,aAAa,OAAO,MAAM,oBAAoB,MAAM,CAAC;AAAA,IACrD,wIAAwI,MAAM,oBAAoB,KAAK,IAAI,CAAC;AAAA,EAC9K,CAAC;AACD,QAAM,SAAS,CAAC,GAAG,OAAO,QAAQ,GAAG,QAAQ,QAAQ,GAAG,QAAQ;AAChE,MAAI,WAAW,MAAM,EAAG,QAAO,OAAO,SAAS,MAAM;AAErD,SAAO,YAAY,OAAO,QAAQ,OAAM,YAAW;AACjD,UAAM,qBAAqB,uBAAuB,MAAM;AACxD,UAAM,OAAO,MAAM,SAAS,SAAS,SAAS,OAAO,kBAAkB;AACvE,UAAM,EAAE,YAAY,aAAa,IAAI;AACrC,UAAM,UAAU,WAAW,OAAO,eAAa,UAAU,WAAW,MAAM;AAC1E,UAAM,sBAAsB,QAAQ,eAAe,SAC/C,KAAK,eACL,CAAC,oBAAoB,MAAM,QAAQ,eAAe,CAAC,GAAG,GAAG,KAAK,YAAY;AAE9E,UAAM,sBAAsB,CAAC,GAAG,QAAQ,GAAG,qBAAqB,GAAG,yBAAyB,QAAQ,cAAc,GAAG,GAAG,mBAAmB,QAAQ,GAAG,GAAG,oBAAoB,cAAc,QAAQ,QAAQ,CAAC;AAC5M,QAAI,WAAW,mBAAmB,KAAK,CAAC,QAAQ,OAAO;AACrD,aAAO;AAAA,QACL,SAAS;AAAA,QACT,SAAS,WAAW,mBAAmB,IAAI,WAAW,QAAQ,SAAS,IAAI,oBAAoB;AAAA,QAC/F,SAAS;AAAA,QAAO,QAAQ;AAAA,QAAqB;AAAA,MAC/C;AAAA,IACF;AAGA,UAAM,aAAaD,OAAK,OAAO,UAAU,MAAM;AAC/C,UAAM,gBAAgB,QAAQ,QAAQ,OAAO,WAAS,MAAM,SAAS,UAAU;AAC/E,UAAM,aAAa,QAAQ,QAAQ,OAAO,WAAS,MAAM,SAAS,UAAU,CAAC;AAC7E,UAAM,MAAM,OAAO,KAAK,QAAQ,SAAS;AACzC,UAAM,QAAQ,eAAe,QAAQ,SAAS;AAC9C,QAAI,MAAM,YAAY,SAAS,EAAG,OAAM,QAAQ,gBAAgB,MAAM,WAAW;AAGjF,QAAI,kBAAkB;AACtB,QAAI,QAAQ,KAAK,eAAa,UAAU,SAAS,SAAS,GAAG;AAC3D,wBAAkB,cAAc,cAAc,QAAQ,UAAU,MAAM,UAAU;AAChF,YAAM,QAAQ,cAAc,eAAe;AAAA,IAC7C;AACA,UAAM,QAAQ,QAAQ,GAAG;AACzB,UAAM,eAAe,MAAM,gBAAgB,SAAS,SAAS,MAAM,SAAS,kBAAkB;AAC9F,UAAM,aAAa,aAAa;AAChC,UAAM,gBAAwB;AAAA,MAC5B,SAAS,gBAAS;AAAA,MAAS,QAAQ,CAAC,GAAG,MAAM;AAAA,MAAG,OAAO,CAAC,GAAG,KAAK;AAAA,MAAG,UAAU,eAAe;AAAA,MAC5F,GAAI,qBAAqB,QAAQ,cAAc,MAAM,QAAQ,EAAE,sBAAsB,MAAM,IAAI,CAAC;AAAA,IAClG;AACA,UAAM,gBAAgB;AAAA,MAAC,GAAG;AAAA,MAAQ,GAAG;AAAA,MAAqB,GAAG;AAAA,MAC3D,KAAK,gBAAgB,iBAAiB,OAAO,QAAQ,SAAS,OAAO,IAAI,MAAM,CAAC,mBAAmB;AAAA,MACnG,GAAG,yBAAyB,QAAQ,cAAc;AAAA,MAClD,GAAG,mBAAmB,aAAa;AAAA,MAAG,GAAG,oBAAoB,iBAAiB,QAAQ,QAAQ;AAAA,IAAC;AACjG,WAAO;AAAA,MACL,SAAS;AAAA,MAAS,SAAS,WAAW,aAAa,IAAI,WAAW;AAAA,MAAM,SAAS,QAAQ,SAAS;AAAA,MAClG,QAAQ;AAAA,MAAe;AAAA,IACzB;AAAA,EACF,GAAG,eAAe,OAAO,CAAC;AAC5B;AAEA,eAAsB,OAAO,UAAsB,CAAC,GAAoB;AACtE,QAAM,SAAS,cAAc,SAAS,QAAQ,GAAG;AACjD,QAAM,aAAa,MAAM,eAAe,QAAQ,CAAC,GAAG,CAAC,CAAC;AACtD,MAAI,WAAW,UAAU,EAAG,QAAO,OAAO,UAAU,UAAU;AAC9D,QAAM,SAAS,MAAM,WAAW,MAAM;AACtC,MAAI,CAAC,QAAQ;AACX,WAAO,OAAO,UAAU,CAAC,KAAK,eAAe,oBAAoB,OAAO,QAAQ,KAAK,+BAA+B,CAAC,CAAC;AAAA,EACxH;AACA,QAAM,UAAU,aAAa,QAAQ,OAAO,MAAM;AAClD,MAAI,QAAQ,SAAS,EAAG,QAAO,OAAO,UAAU,OAAO;AACvD,QAAM,aAAa,MAAM,eAAe,QAAQ,OAAO,QAAQ,OAAO,KAAK;AAC3E,MAAI,WAAW,UAAU,EAAG,QAAO,OAAO,UAAU,UAAU;AAC9D,QAAM,SAAS,MAAM,YAAY,QAAQ,QAAQ,KAAK,oBAAoB,OAAO,MAAM,CAAC;AACxF,MAAI,CAAC,OAAO,OAAQ,QAAO,OAAO,UAAU,OAAO,MAAM;AACzD,QAAM,UAAU,MAAM,aAAa,QAAQ,OAAO,QAAQ,OAAO,OAAO;AAAA;AAAA,IAEtE,gBAAgB,OAAO,wBAAwB;AAAA,EACjD,CAAC;AACD,QAAM,SAAS,CAAC,GAAG,OAAO,QAAQ,GAAG,QAAQ,MAAM;AACnD,MAAI,WAAW,MAAM,EAAG,QAAO,OAAO,UAAU,MAAM;AAEtD,SAAO,YAAY,OAAO,QAAQ,OAAM,YAAW;AACjD,UAAM,qBAAqB,uBAAuB,MAAM;AACxD,UAAM,OAAO,MAAM,SAAS,SAAS,SAAS,eAAe,kBAAkB;AAC/E,UAAM,EAAE,YAAY,aAAa,IAAI;AACrC,UAAM,UAAU,WAAW,OAAO,eAAa,UAAU,WAAW,MAAM;AAC1E,UAAM,QAAQ,CAAC,SAAoC,QAAQ,OAAO,eAAa,UAAU,SAAS,IAAI,EAAE;AACxG,UAAM,YAAY,MAAM,UAAU;AAClC,UAAM,WAAW,MAAM,SAAS;AAChC,UAAM,eAAe,QAAQ,OAAO,eAAa,CAAC,CAAC,YAAY,WAAW,QAAQ,EAAE,SAAS,UAAU,IAAI,CAAC;AAC5G,UAAM,QAAQ,aAAa;AAC3B,UAAM,eAAe,QAAQ,eAAe,SAAY,CAAC,IAAI;AAAA,MAC3D,oBAAoB,MAAM,QAAQ,eAAe,CAAC;AAAA,MAClD,GAAG,KAAK;AAAA,MACR,mBAAmB,KAAK,YAAY,kBAAkB;AAAA,IACxD;AACA,UAAM,MAAe;AAAA,MAAC,GAAG;AAAA,MACvB,UAAU,IACN,KAAK,cAAc,yDAAyD,IAC5E,KAAK,cAAc,GAAG,iBAAiB,YAAY,CAAC,GAAG,gBAAgB,aAAa,IAAI,eAAa,UAAU,MAAM,CAAC,CAAC,IAAI,+BAA+B;AAAA,MAC9J,cAAc,IACV,KAAK,kBAAkB,OAAO,OAAO,OAAO,KAAK,QAAQ,SAAS,EAAE,MAAM,CAAC,8CAA8C,IACzH,KAAK,kBAAkB,GAAG,OAAO,SAAS,CAAC,2CAA2C,+BAA+B;AAAA,MACzH,aAAa,IACT,KAAK,iBAAiB,OAAO,OAAO,QAAQ,SAAS,MAAM,CAAC,mDAAmD,IAC/G,KAAK,iBAAiB,GAAG,OAAO,QAAQ,CAAC,gDAAgD,+BAA+B;AAAA,MAC5H,GAAG;AAAA;AAAA,MAEH,GAAG,yBAAyB,OAAO,QAAQ,OAAO,wBAAwB,IAAI;AAAA,MAC9E,GAAG,mBAAmB,MAAM;AAAA,MAC5B,GAAG,oBAAoB,cAAc,QAAQ,QAAQ;AAAA,IACvD;AACA,WAAO;AAAA,MACL,SAAS;AAAA,MAAU,SAAS,WAAW,GAAG,IAAI,WAAW;AAAA,MAAM,SAAS;AAAA,MAAO,QAAQ;AAAA,MAAK;AAAA,IAC9F;AAAA,EACF,GAAG,eAAe,OAAO,CAAC;AAC5B;AAEA,eAAsB,OAAO,UAAsB,CAAC,GAAoB;AACtE,QAAM,SAAS,cAAc,SAAS,QAAQ,GAAG;AACjD,QAAM,aAAa,MAAM,eAAe,QAAQ,CAAC,GAAG,CAAC,CAAC;AACtD,MAAI,WAAW,UAAU,EAAG,QAAO,OAAO,UAAU,UAAU;AAC9D,QAAM,SAAS,MAAM,WAAW,MAAM;AACtC,MAAI,CAAC,QAAQ;AACX,WAAO,OAAO,UAAU,CAAC,KAAK,eAAe,oBAAoB,OAAO,QAAQ,KAAK,0DAA0D,CAAC,CAAC;AAAA,EACnJ;AAEA,QAAM,UAAU,aAAa,QAAQ,OAAO,MAAM;AAClD,MAAI,QAAQ,SAAS,EAAG,QAAO,OAAO,UAAU,OAAO;AACvD,QAAM,MAAM,OAAO,OAAO,QAAQ,WAAS,OAAO,MAAM,IAAI,UAAQ,WAAW,OAAO,IAAI,CAAC,CAAC;AAC5F,QAAM,WAAW,IAAI,IAAI,OAAO,OAAO,QAAQ,WAAS,OAAO,MAAM,IAAI,UAAQ,UAAU,OAAO,IAAI,CAAC,CAAC,CAAC;AACzG,QAAM,YAAY,OAAO,OAAO,SAAS,QAAQ;AACjD,QAAM,aAA0B;AAAA,IAC9B,GAAG,IAAI,IAAI,SAAO,EAAE,QAAQ,UAAU,MAAM,YAAY,QAAQ,GAAG,EAAsB;AAAA,IACzF,GAAG,CAAC,GAAG,QAAQ,EAAE,IAAI,SAAO,EAAE,QAAQ,UAAU,MAAM,WAAW,QAAQ,GAAG,EAAsB;AAAA,IAClG,GAAI,YAAY,CAAC,EAAE,QAAQ,UAAU,MAAM,UAAU,QAAQ,yBAAyB,CAAqB,IAAI,CAAC;AAAA,IAChH,EAAE,QAAQ,UAAU,MAAM,OAAO,QAAQ,OAAO,SAAS;AAAA,EAC3D;AACA,QAAM,oBAAoB;AAAA,IAAK;AAAA,IAC7B,YAAY,OAAO,QAAQ;AAAA,EAAkL;AAC/M,MAAI,CAAC,QAAQ,OAAO;AAClB,WAAO,EAAE,SAAS,UAAU,SAAS,mBAAmB,SAAS,OAAO,QAAQ,CAAC,iBAAiB,GAAG,WAAW;AAAA,EAClH;AACA,QAAM,SAAS,MAAM,YAAY,QAAQ,QAAQ,GAAG;AACpD,QAAM,SAAkB,CAAC,iBAAiB;AAC1C,MAAI,CAAC,OAAO,QAAQ;AAClB,WAAO,OAAO,UAAU;AAAA,MACtB;AAAA,MACA,GAAG,OAAO;AAAA,MACV;AAAA,QACE;AAAA,QACA,aAAa,OAAO,QAAQ;AAAA,QAC5B;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AACA,MAAI;AACF,UAAM,YAAY,OAAO,QAAQ,OAAM,YAAW;AAChD,UAAI,WAAW;AACb,cAAM,UAAU,MAAM,QAAQ,YAAY,GAAG,KAAK,WAAS,MAAM,OAAO,wBAAwB;AAChG,cAAM,eAAe,uBAAuB,MAAM;AAClD,YAAI,WAAW,UAAa,OAAO,SAAS,cAAc;AACxD,gBAAM,IAAI,MAAM,0CAA0C,OAAO,IAAI,EAAE;AAAA,QACzE;AACA,YAAI,WAAW,OAAW,OAAM,QAAQ,aAAa,wBAAwB;AAAA,MAC/E;AACA,YAAM,QAAQ,gBAAgB,GAAG;AACjC,YAAM,OAAO,MAAM,QAAQ,aAAa;AACxC,YAAM,OAAO,KAAK,OAAO,WAAS,CAAC,SAAS,IAAI,OAAO,MAAM,EAAE,CAAC,CAAC;AACjE,UAAI,KAAK,WAAW,KAAK,OAAQ,OAAM,QAAQ,cAAc,IAAI;AAAA,IACnE,GAAG,eAAe,OAAO,CAAC;AAC1B,WAAO,KAAK,KAAK,kBAAkB,WAAW,OAAO,IAAI,MAAM,CAAC,4CAA4C,CAAC;AAAA,EAC/G,QAAQ;AACN,WAAO,OAAO,UAAU;AAAA,MACtB;AAAA,MACA;AAAA,QACE;AAAA,QACA,oDAAoD,OAAO,QAAQ;AAAA,QACnE;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AAEA,MAAI;AACF,UAAMG,IAAG,OAAO,UAAU,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,EAC5D,SAAS,OAAO;AACd,UAAM,SAAS,iBAAiB,QAAQ,MAAM,UAAU;AACxD,WAAO,KAAK;AAAA,MACV;AAAA,MACA,wEAAwE,OAAO,QAAQ,KAAK,MAAM;AAAA,MAClG;AAAA,IACF,CAAC;AACD,UAAM,sBAAsB,WAAW,OAAO,eAAa,UAAU,SAAS,KAAK;AACnF,WAAO,EAAE,SAAS,UAAU,SAAS,UAAU,SAAS,MAAM,QAAQ,YAAY,oBAAoB;AAAA,EACxG;AACA,SAAO,KAAK,KAAK,cAAc,WAAW,OAAO,QAAQ,GAAG,CAAC;AAC7D,SAAO,EAAE,SAAS,UAAU,SAAS,MAAM,SAAS,MAAM,QAAQ,WAAW;AAC/E;AAzlBA,IAiBa,QAoLP;AArMN;AAAA;AAAA;AAEA;AACA;AACA;AACA;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAEO,IAAM,SAAiC,EAAE,OAAO,YAAY,QAAQ,aAAa,IAAI,QAAQ;AAoLpG,IAAM,gBAAuB,EAAE,aAAa,CAAC,GAAG,YAAY,CAAC,GAAG,cAAc,OAAO,qBAAqB,CAAC,EAAE;AAAA;AAAA;;;ACrM7G;AAAA;AAAA;AAAA;AAAA;AAAA,YAAY,WAAW;AAiBvB,eAAsB,UACpB,SACA,MACA,OACA,UAAsB,CAAC,GACvB,UACiB;AACjB,QAAM,YAAY,MAAc;AAAE,UAAM,mCAAmC;AAAG,WAAO;AAAA,EAAG;AACxF,QAAM,SAAS,MAAM,QAAQ,OAAO;AAAA,IAClC,SAAS;AAAA,IACT,SAAS;AAAA,MACP,EAAE,OAAO,SAAS,OAAO,kDAAkD;AAAA,MAC3E,EAAE,OAAO,UAAU,OAAO,0BAA0B;AAAA,MACpD,EAAE,OAAO,UAAU,OAAO,kBAAkB;AAAA,IAC9C;AAAA,EACF,CAAC;AACD,MAAI,OAAO,WAAW,SAAU,QAAO,UAAU;AACjD,aAAW,MAAM;AACjB,MAAI,WAAW,SAAU,QAAO,KAAK,MAAM,OAAO,OAAO,CAAC;AAC1D,MAAI,WAAW,UAAU;AACvB,UAAME,WAAU,MAAM,OAAO,OAAO;AACpC,UAAMC,UAAS,KAAKD,QAAO;AAC3B,QAAIA,SAAQ,YAAY,kBAAmB,QAAOC;AAClD,UAAMC,YAAW,MAAM,QAAQ,QAAQ,EAAE,SAAS,6EAA6E,CAAC;AAChI,WAAOA,cAAa,OAAO,KAAK,MAAM,OAAO,EAAE,GAAG,SAAS,OAAO,KAAK,CAAC,CAAC,IAAI,UAAU;AAAA,EACzF;AACA,QAAM,SAAS,MAAM,QAAQ,YAAY;AAAA,IACvC,SAAS;AAAA,IACT,SAAS,UAAU,IAAI,YAAU,EAAE,OAAO,OAAO,OAAO,KAAK,EAAE,MAAM,EAAE;AAAA,EACzE,CAAC;AACD,MAAI,OAAO,WAAW,YAAY,OAAO,WAAW,EAAG,QAAO,UAAU;AAExE,MAAI,uBAAuB;AAC3B,MAAI,OAAO,SAAS,QAAQ,GAAG;AAC7B,UAAM,UAAU,MAAM,QAAQ,OAAO;AAAA,MACnC,SAAS;AAAA,MACT,SAAS;AAAA,QACP,EAAE,OAAO,QAAQ,OAAO,+EAA0E;AAAA,QAClG,EAAE,OAAO,UAAU,OAAO,kEAA6D;AAAA,MACzF;AAAA,IACF,CAAC;AACD,QAAI,OAAO,YAAY,SAAU,QAAO,UAAU;AAClD,2BAAuB,YAAY;AAAA,EACrC;AACA,QAAM,eAAe,EAAE,GAAG,SAAS,QAAQ,qBAAqB;AAChE,QAAM,UAAU,MAAM,MAAM,YAAY;AACxC,QAAM,SAAS,KAAK,OAAO;AAC3B,MAAI,QAAQ,YAAY,kBAAmB,QAAO;AAClD,QAAM,WAAW,MAAM,QAAQ,QAAQ,EAAE,SAAS,wEAAwE,CAAC;AAC3H,MAAI,aAAa,KAAM,QAAO,UAAU;AACxC,SAAO,KAAK,MAAM,MAAM,EAAE,GAAG,cAAc,OAAO,KAAK,CAAC,CAAC;AAC3D;AApEA,IAUa;AAVb;AAAA;AAAA;AACA;AAEA;AAOO,IAAM,kBAA2B;AAAA,MACtC,QAAQ,aAAiB,aAAO,EAAE,SAAS,QAAQ,SAAS,SAAS,CAAC,GAAG,QAAQ,OAAO,EAAE,CAAC;AAAA,MAC3F,aAAa,aAAiB,kBAAY,EAAE,SAAS,QAAQ,SAAS,SAAS,CAAC,GAAG,QAAQ,OAAO,GAAG,UAAU,KAAK,CAAC;AAAA,MACrH,SAAS,aAAiB,cAAQ,EAAE,SAAS,QAAQ,SAAS,cAAc,MAAM,CAAC;AAAA,IACrF;AAAA;AAAA;;;ACbA;AACA;AACA;AAHA,SAAS,SAAS,gBAAgB,4BAA4B;;;ACEvD,SAAS,WAAW,QAAwB;AACjD,SAAO,GAAG,KAAK,UAAU,EAAE,eAAe,GAAG,GAAG,OAAO,GAAG,MAAM,CAAC,CAAC;AAAA;AACpE;AAEA,IAAM,QAAQ,EAAE,MAAM,UAAK,MAAM,KAAK,MAAM,SAAI;AAEzC,SAAS,YAAY,QAAwB;AAClD,QAAM,QAAkB,CAAC;AACzB,aAAW,SAAS,OAAO,QAAQ;AACjC,UAAM,KAAK,GAAG,MAAM,MAAM,MAAM,CAAC,IAAI,MAAM,OAAO,EAAE;AACpD,QAAI,MAAM,IAAK,OAAM,KAAK,YAAO,MAAM,GAAG,EAAE;AAAA,EAC9C;AACA,QAAM,UAAU,OAAO,WAAW,OAAO,eAAa,UAAU,WAAW,MAAM;AACjF,MAAI,QAAQ,SAAS,GAAG;AACtB,UAAM,KAAK,IAAI,OAAO,UAAU,aAAa,kBAAkB;AAC/D,eAAW,aAAa,QAAS,OAAM,KAAK,KAAK,UAAU,MAAM,IAAI,UAAU,IAAI,IAAI,UAAU,MAAM,EAAE;AACzG,UAAM,YAAY,OAAO,WAAW,SAAS,QAAQ;AACrD,QAAI,YAAY,EAAG,OAAM,KAAK,MAAM,OAAO,SAAS,CAAC,sBAAsB;AAAA,EAC7E,WAAW,OAAO,WAAW,SAAS,GAAG;AACvC,UAAM,KAAK,IAAI,mCAAmC;AAAA,EACpD;AACA,QAAM,KAAK,IAAI,GAAG,OAAO,OAAO,KAAK,OAAO,OAAO,EAAE;AACrD,SAAO,GAAG,MAAM,KAAK,IAAI,CAAC;AAAA;AAC5B;;;ADpBA;AACA;AACA;AAeA,SAAS,aAAa,OAAe,UAA4C;AAC/E,QAAM,QAAQ,UAAU,KAAK,QAAM,OAAO,KAAK;AAC/C,MAAI,CAAC,MAAO,OAAM,IAAI,qBAAqB,kBAAkB,KAAK,EAAE;AACpE,QAAM,SAAS,YAAY,CAAC;AAC5B,SAAO,OAAO,SAAS,KAAK,IAAI,SAAS,CAAC,GAAG,QAAQ,KAAK;AAC5D;AAEA,IAAM,aAAa,CAAC,YAAY,aAAa,cAAc,UAAU,YAAY,aAAa,SAAS,UAAU;AAEjH,SAAS,YAAY,KAA8B,MAA8B;AAC/E,QAAM,QAAgC,CAAC;AACvC,aAAW,QAAQ,YAAY;AAC7B,UAAM,QAAQ,IAAI,IAAI;AACtB,QAAI,OAAO,UAAU,YAAY,MAAM,KAAK,EAAG,OAAM,IAAI,IAAI,MAAM,KAAK;AAAA,EAC1E;AACA,QAAM,SAAS,MAAM,QAAQ,IAAI,KAAK,KAAK,IAAI,MAAM,SAAS,IAAK,IAAI,QAAsB;AAC7F,SAAO;AAAA,IACL,GAAG;AAAA,IAAM,GAAG;AAAA,IAAO,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;AAAA,IAAI,GAAI,IAAI,UAAU,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;AAAA;AAAA,IAE9F,GAAI,IAAI,yBAAyB,QAAQ,EAAE,sBAAsB,MAAM,IAAI,CAAC;AAAA,EAC9E;AACF;AAEA,SAAS,iBAAiB,SAAiB,OAAwB;AACjE,MAAI,iBAAiB,kBAAkB;AACrC,WAAO,OAAO,SAAS,CAAC;AAAA,MACtB,GAAG,OAAO;AAAA,MACV,MAAM;AAAA,MACN;AAAA,IACF,CAAC,CAAC;AAAA,EACJ;AACA,QAAM,SAAS,iBAAiB,QAAQ,MAAM,UAAU;AACxD,SAAO,OAAO,SAAS,CAAC;AAAA,IACtB,GAAG,OAAO;AAAA,IACV;AAAA,IACA;AAAA,EACF,CAAC,CAAC;AACJ;AAEA,eAAsB,OAAO,MAAyB,QAAgB,UAAsB,CAAC,GAAoB;AAC/G,QAAM,YAAY,QAAQ,SAAS,OAAO,QAAQ,KAAK;AACvD,QAAM,SAAS,CAAC,SAA0B,WAAW,KAAK,MAAM,QAAQ,EAAE,KAAK,YAAY,IAAI;AAE/F,MAAI,OAAO;AACX,QAAM,OAAO,CAAC,WAA2B;AACvC,WAAO,OAAO,OAAO,OAAO,WAAW,MAAM,IAAI,YAAY,MAAM,CAAC,CAAC;AACrE,WAAO,SAAS,MAAM;AAAA,EACxB;AACA,QAAM,QAAQ,QAAQ,UAAU,QAAQ,MAAM,SAAS,QAAQ,OAAO,SAAS,QAAQ,OAAO;AAC9F,QAAM,OAAO,QAAQ,WAAW,CAAC;AAEjC,MAAI,KAAK,WAAW,GAAG;AACrB,QAAI,CAAC,OAAO;AACV,aAAO,OAAO,+FAA+F;AAC7G,aAAO;AAAA,IACT;AACA,QAAI,gBAAgB;AACpB,QAAI;AAEF,YAAM,EAAE,WAAAC,YAAW,iBAAAC,iBAAgB,IAAI,MAAM;AAC7C,aAAO,MAAMD;AAAA,QACX,QAAQ,WAAWC;AAAA,QACnB;AAAA,QACA,UAAQ;AAAE,iBAAO,OAAO,IAAI;AAAA,QAAG;AAAA,QAC/B;AAAA,QACA,YAAU;AAAE,0BAAgB;AAAA,QAAQ;AAAA,MACtC;AAAA,IACF,SAAS,OAAO;AACd,aAAO,KAAK,iBAAiB,eAAe,KAAK,CAAC;AAAA,IACpD;AAAA,EACF;AACA,QAAM,UAAU,IAAI,QAAQ,EACzB,KAAK,YAAY,EACjB,YAAY,+FAA+F,EAC3G,QAAQ,gBAAS,OAAO,EACxB,MAAM,uGAAuG,EAC7G,SAAS,aAAa,gCAAgC,EACtD,SAAS,0BAA0B,2BAA2B,EAC9D,OAAO,mBAAmB,4DAA4D,YAAY,EAClG,OAAO,WAAW,8CAA8C,EAChE,OAAO,UAAU,yBAAyB,EAC1C,OAAO,+BAA+B,6GAA6G,EACnJ,OAAO,sBAAsB,uDAAuD,EACpF,OAAO,uBAAuB,yCAAyC,EACvE,OAAO,wBAAwB,gDAAgD,EAC/E,OAAO,oBAAoB,yCAAyC,EACpE,OAAO,sBAAsB,2CAA2C,EACxE,OAAO,uBAAuB,iDAAiD,EAC/E,OAAO,mBAAmB,wCAAwC,EAClE,OAAO,sBAAsB,2CAA2C,EACxE,gBAAgB,EAAE,UAAU,UAAQ;AAAE,WAAO,OAAO,IAAI;AAAA,EAAG,GAAG,UAAU,UAAQ;AAAE,WAAO,OAAO,IAAI;AAAA,EAAG,EAAE,CAAC,EAC1G,aAAa;AAEhB,MAAI;AACJ,MAAI;AACJ,MAAI;AACJ,MAAI;AACJ,MAAI;AACF,YAAQ,MAAM,CAAC,GAAG,IAAI,GAAG,EAAE,MAAM,OAAO,CAAC;AACzC,UAAM,QAAQ,KAA8B;AAC5C,WAAO,IAAI,SAAS;AACpB,cAAU,QAAQ,KAAK,CAAC,KAAK;AAC7B,uBAAmB,QAAQ,KAAK,MAAM,CAAC;AACvC,cAAU,YAAY,KAAK,IAAI;AAAA,EACjC,SAAS,OAAO;AACd,QAAI,iBAAiB,kBAAkB,MAAM,aAAa,EAAG,QAAO;AACpE,WAAO;AAAA,EACT;AAEA,MAAI;AAGF,QAAI,IAAI,yBAAyB,UAAU,YAAY,YAAY,YAAY,WAAW;AACxF,aAAO,OAAO,cAAc,OAAO,gFAAgF,OAAO;AAAA,CAAyB;AACnJ,aAAO;AAAA,IACT;AACA,QAAI,YAAY,QAAQ;AACtB,UAAI,IAAI,yBAAyB,OAAO;AACtC,eAAO,OAAO,iGAAiG;AAC/G,eAAO;AAAA,MACT;AACA,UAAI,IAAI,UAAU,MAAM;AACtB,eAAO,OAAO,uEAAuE;AACrF,eAAO;AAAA,MACT;AACA,UAAI,IAAI,SAAS,MAAM;AACrB,eAAO,OAAO,qEAAqE;AACnF,eAAO;AAAA,MACT;AACA,UAAI,IAAI,UAAU,QAAW;AAC3B,eAAO,OAAO,sFAAsF;AACpG,eAAO;AAAA,MACT;AACA,UAAI,iBAAiB,WAAW,KAAK,iBAAiB,CAAC,MAAM,SAAS;AACpE,eAAO,OAAO,yEAAyE;AACvF,eAAO;AAAA,MACT;AACA,aAAO,MAAM,UAAU,iBAAiB,CAAC,KAAK,IAAI,iBAAiB,CAAC,KAAK,IAAI;AAAA,QAC3E,GAAG;AAAA,QACH;AAAA,QACA,GAAI,QAAQ,aAAa,EAAE,OAAO,QAAQ,WAAW,IAAI,CAAC;AAAA,MAC5D,GAAG,MAAM;AAAA,IACX;AACA,QAAI,iBAAiB,SAAS,GAAG;AAC/B,aAAO,OAAO,cAAc,OAAO,2BAA2B,iBAAiB,KAAK,GAAG,CAAC;AAAA,CAAI;AAC5F,aAAO;AAAA,IACT;AACA,QAAI,YAAY,QAAS,QAAO,KAAK,MAAM,MAAM,OAAO,CAAC;AACzD,QAAI,YAAY,SAAU,QAAO,KAAK,MAAM,OAAO,OAAO,CAAC;AAC3D,QAAI,YAAY,SAAU,QAAO,KAAK,MAAM,OAAO,OAAO,CAAC;AAAA,EAC7D,SAAS,OAAO;AACd,WAAO,KAAK,iBAAiB,SAAS,KAAK,CAAC;AAAA,EAC9C;AACA,SAAO,OAAO,gCAAgC,OAAO;AAAA,CAAiD;AACtG,SAAO;AACT;;;AE9KA,QAAQ,WAAW,MAAM,OAAO,QAAQ,KAAK,MAAM,CAAC,GAAG;AAAA,EACrD,QAAQ,UAAQ;AAAE,YAAQ,OAAO,MAAM,IAAI;AAAA,EAAG;AAAA,EAC9C,QAAQ,UAAQ;AAAE,YAAQ,OAAO,MAAM,IAAI;AAAA,EAAG;AAChD,CAAC;","names":["stat","lstat","readlink","join","stat","title","join","join","resolve","constants","join","lstat","env","argv","resolve","table","readdir","join","readFile","join","join","SHARED","EXECUTABLE","evidence","spawn","readFile","rm","isAbsolute","join","resolve","asObject","command","AUTH_ENV","SHARED","EXECUTABLE","z","run","readFileSync","join","join","sep","lstat","rm","stat","preview","status","approved","runWizard","terminalPrompts"]}