@antseed/cli 0.1.178 → 0.1.180

package/dist/gateway/bundle.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle.test.d.ts","sourceRoot":"","sources":["../../src/gateway/bundle.test.ts"],"names":[],"mappings":""}

package/dist/gateway/bundle.test.js

@@ -0,0 +1,277 @@
+import assert from 'node:assert/strict';
+import { existsSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, rmSync, statSync, writeFileSync } from 'node:fs';
+import { createRequire } from 'node:module';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { test } from 'node:test';
+import { Worker } from 'node:worker_threads';
+import Database from 'better-sqlite3';
+import { FileIdentityStore, identityFromPrivateKeyHex } from '@antseed/node';
+import { AuthDb } from './auth/db.js';
+import { allowedBundlePath, BUNDLE_MAGIC, BundleError, exportGatewayBundle, importGatewayBundle } from './bundle.js';
+import { CONSOLE_LOCATION_SETTING, readConsoleLocation } from './console-location.js';
+import { createRecoveryLink } from './console-recovery.js';
+import { GatewayStore } from './store.js';
+const FAST_KDF = { N: 2 ** 14, r: 8, p: 1 };
+const PASSWORD = 'correct horse battery';
+const NO_LIMITS = { daily: null, weekly: null, monthly: null, total: null };
+const DEFAULT_KEY = '11'.repeat(32);
+const ALPHA_KEY = '22'.repeat(32);
+const posix = process.platform !== 'win32';
+function mode(path) {
+    return statSync(path).mode & 0o777;
+}
+/** A laptop data dir: gateway with an owner (passkey + session), workspaces, keys, two wallets, channels, config. */
+function seedSource(root) {
+    const dataDir = join(root, 'laptop');
+    mkdirSync(dataDir, { recursive: true });
+    writeFileSync(join(dataDir, 'identity.key'), DEFAULT_KEY, { mode: 0o600 });
+    mkdirSync(join(dataDir, 'buyer-identities', 'ws-alpha'), { recursive: true });
+    writeFileSync(join(dataDir, 'buyer-identities', 'ws-alpha', 'identity.key'), ALPHA_KEY, { mode: 0o600 });
+    mkdirSync(join(dataDir, 'payments'), { recursive: true });
+    const channels = new Database(join(dataDir, 'payments', 'sessions.db'));
+    channels.pragma('journal_mode = WAL');
+    channels.exec('CREATE TABLE payment_channels (id TEXT PRIMARY KEY, cumulative TEXT)');
+    channels.prepare('INSERT INTO payment_channels VALUES (?, ?)').run('0xchannel-fake', '1500000');
+    channels.close();
+    const configPath = join(dataDir, 'config.json');
+    writeFileSync(configPath, JSON.stringify({ buyer: { proxyPort: 8377, minPeerReputation: 40 } }));
+    const store = new GatewayStore(dataDir);
+    const owner = store.createOwner({ label: 'Dana', email: 'dana@example.test' });
+    const alpha = store.createWorkspace({ name: 'Alpha', buyerIdentity: 'ws-alpha' });
+    const key = store.createKey({ label: 'laptop key', workspaceId: alpha.id, limits: NO_LIMITS, expiresAt: null });
+    store.setSetting(CONSOLE_LOCATION_SETTING, { publicUrl: null, port: 8379, host: '127.0.0.1' });
+    const auth = new AuthDb(store.database, () => Date.now());
+    auth.addCredential(owner.id, { kind: 'passkey', label: 'MacBook', webauthnId: 'cred-fake', publicKey: new Uint8Array([1, 2, 3]), counter: 0, transports: [] });
+    auth.addCredential(owner.id, { kind: 'wallet', label: 'Wallet', address: '0x00000000000000000000000000000000000000aa' });
+    auth.createSession({ kind: 'member', memberId: owner.id }, { userAgent: null, ip: null });
+    createRecoveryLink(store, { publicUrl: null, port: 8379 }, owner.id);
+    store.close();
+    return { dataDir, configPath, ownerId: owner.id, apiKey: key.secret };
+}
+function fixture() {
+    const root = mkdtempSync(join(tmpdir(), 'antseed-bundle-'));
+    const source = seedSource(root);
+    const server = join(root, 'server', '.antseed');
+    return { root, source, server, serverConfig: join(server, 'config.json'), bundle: join(root, 'antseed-gateway.bundle'), cleanup: () => rmSync(root, { recursive: true, force: true }) };
+}
+async function exportFixture(f, extra = {}) {
+    return exportGatewayBundle({
+        dataDir: f.source.dataDir,
+        configPath: f.source.configPath,
+        outFile: f.bundle,
+        password: PASSWORD,
+        cliVersion: '0.0.0-test',
+        scryptParams: FAST_KDF,
+        ...extra,
+    });
+}
+test('export → import round trip restores keys, members, wallets and channels; sessions end, keys keep working', async () => {
+    const f = fixture();
+    try {
+        const exported = await exportFixture(f);
+        if (posix)
+            assert.equal(mode(f.bundle), 0o600, 'the bundle is readable only by its owner');
+        assert.ok(readFileSync(f.bundle).subarray(0, BUNDLE_MAGIC.length).toString() === BUNDLE_MAGIC);
+        const raw = readFileSync(f.bundle);
+        assert.ok(!raw.includes(Buffer.from(DEFAULT_KEY)) && !raw.includes(Buffer.from('dana@example.test')), 'nothing readable in the file');
+        assert.deepEqual(exported.files.sort(), [
+            'config/config.json', 'data/buyer-identities/ws-alpha/identity.key', 'data/gateway/gateway.db', 'data/identity.key', 'data/payments/sessions.db',
+        ]);
+        assert.equal(exported.summary.activeKeys, 1);
+        assert.ok(readdirSync(f.root).every((name) => !name.includes('.export-') && !name.includes('.partial-')), 'no staging left behind');
+        await assert.rejects(exportFixture(f), /already exists/);
+        await exportFixture(f, { force: true });
+        const result = await importGatewayBundle({
+            bundleFile: f.bundle, dataDir: f.server, configPath: f.serverConfig, password: PASSWORD, publicUrl: 'https://llm.example.com',
+        });
+        assert.equal(result.sessionsCleared, 1);
+        assert.equal(result.passkeysStranded, true, 'localhost passkeys do not work on the new domain');
+        assert.equal(result.previousOrigin, 'http://localhost:8379');
+        assert.equal(result.newOrigin, 'https://llm.example.com');
+        assert.deepEqual(result.backups, []);
+        assert.equal(result.summary.workspaces.find((ws) => ws.name === 'Alpha')?.address, identityFromPrivateKeyHex(ALPHA_KEY).wallet.address);
+        assert.equal(result.summary.wallets.find((wallet) => wallet.name === 'default')?.address, identityFromPrivateKeyHex(DEFAULT_KEY).wallet.address);
+        assert.ok(!JSON.stringify(result).includes(DEFAULT_KEY) && !JSON.stringify(result).includes(f.source.apiKey), 'the summary holds no secrets');
+        assert.equal(readFileSync(join(f.server, 'identity.key'), 'utf8'), DEFAULT_KEY);
+        assert.equal(readFileSync(join(f.server, 'buyer-identities', 'ws-alpha', 'identity.key'), 'utf8'), ALPHA_KEY);
+        assert.equal(JSON.parse(readFileSync(f.serverConfig, 'utf8')).buyer.minPeerReputation, 40);
+        const channels = new Database(join(f.server, 'payments', 'sessions.db'), { readonly: true });
+        assert.equal(channels.prepare('SELECT cumulative FROM payment_channels').get().cumulative, '1500000');
+        channels.close();
+        if (posix) {
+            for (const dir of [f.server, join(f.server, 'gateway'), join(f.server, 'buyer-identities'), join(f.server, 'buyer-identities', 'ws-alpha'), join(f.server, 'payments')]) {
+                assert.equal(mode(dir), 0o700, dir);
+            }
+            for (const file of ['identity.key', 'buyer-identities/ws-alpha/identity.key', 'gateway/gateway.db', 'payments/sessions.db'])
+                assert.equal(mode(join(f.server, file)), 0o600, file);
+            assert.equal(mode(f.serverConfig), 0o600);
+        }
+        const store = new GatewayStore(f.server);
+        try {
+            assert.ok(store.findKeyBySecret(f.source.apiKey), 'API keys keep working');
+            assert.equal(store.getMember(f.source.ownerId)?.orgRole, 'owner');
+            assert.deepEqual(readConsoleLocation(store), { publicUrl: 'https://llm.example.com', port: 8379 });
+            const count = (table) => store.database.prepare(`SELECT COUNT(*) AS n FROM ${table}`).get().n;
+            assert.equal(count('auth_sessions'), 0);
+            assert.equal(count('console_recovery_tokens'), 0);
+            assert.equal(count('auth_credentials'), 2, 'sign-in methods are kept');
+            assert.ok(store.listAudit({}).entries.some((entry) => entry.action === 'gateway.import'));
+        }
+        finally {
+            store.close();
+        }
+        assert.ok(readdirSync(join(f.root, 'server')).every((name) => !name.includes('.import-')), 'no staging left behind');
+    }
+    finally {
+        f.cleanup();
+    }
+});
+test('a wrong password or any tampering fails without touching the target', async () => {
+    const f = fixture();
+    try {
+        await exportFixture(f);
+        const attempt = (bundleFile, password = PASSWORD) => importGatewayBundle({ bundleFile, dataDir: f.server, configPath: f.serverConfig, password });
+        await assert.rejects(attempt(f.bundle, 'not the password'), (error) => error instanceof BundleError && /password is wrong/.test(error.message));
+        const original = readFileSync(f.bundle);
+        const tampered = join(f.root, 'tampered.bundle');
+        const body = Buffer.from(original);
+        body[Math.floor(body.length / 2)] ^= 0x01;
+        writeFileSync(tampered, body);
+        await assert.rejects(attempt(tampered), BundleError);
+        const header = Buffer.from(original);
+        const salt = header.indexOf(Buffer.from('"iv":"')) + 6;
+        header[salt] = header[salt] === 0x41 ? 0x42 : 0x41;
+        writeFileSync(tampered, header);
+        await assert.rejects(attempt(tampered), BundleError);
+        writeFileSync(tampered, original.subarray(0, original.length - 5));
+        await assert.rejects(attempt(tampered), BundleError);
+        writeFileSync(tampered, 'hello');
+        await assert.rejects(attempt(tampered), /not an Antseed gateway bundle/);
+        assert.ok(!existsSync(join(f.server, 'gateway')), 'nothing was restored');
+        assert.ok(!existsSync(join(f.server, 'identity.key')));
+    }
+    finally {
+        f.cleanup();
+    }
+});
+test('import refuses a data dir that already holds a gateway or wallet, and --force moves it aside', async () => {
+    const f = fixture();
+    try {
+        await exportFixture(f);
+        mkdirSync(f.server, { recursive: true });
+        writeFileSync(join(f.server, 'identity.key'), '33'.repeat(32));
+        const options = { bundleFile: f.bundle, dataDir: f.server, configPath: f.serverConfig, password: PASSWORD };
+        await assert.rejects(importGatewayBundle(options), /already holds a gateway or wallet \(identity.key\).*--force/);
+        assert.equal(readFileSync(join(f.server, 'identity.key'), 'utf8'), '33'.repeat(32));
+        // A bad console URL fails before anything is moved aside.
+        await assert.rejects(importGatewayBundle({ ...options, force: true, publicUrl: 'not a url' }), /not a valid console URL/);
+        assert.equal(readFileSync(join(f.server, 'identity.key'), 'utf8'), '33'.repeat(32));
+        assert.ok(!existsSync(join(f.server, 'gateway')), 'nothing was restored');
+        assert.deepEqual(readdirSync(join(f.root, 'server')).filter((name) => name.includes('.backup-')), [], 'no backup was made');
+        const result = await importGatewayBundle({ ...options, force: true, port: 9000 });
+        assert.equal(result.backups.length, 1);
+        assert.equal(readFileSync(join(result.backups[0], 'identity.key'), 'utf8'), '33'.repeat(32), 'the old data is kept');
+        assert.equal(readFileSync(join(f.server, 'identity.key'), 'utf8'), DEFAULT_KEY);
+        assert.equal(result.newOrigin, 'http://localhost:9000');
+        assert.equal(result.passkeysStranded, false, 'a passkey is bound to the host name, not the port');
+    }
+    finally {
+        f.cleanup();
+    }
+});
+test('export refuses weak passwords, missing gateway data and app-encrypted wallets', async () => {
+    const f = fixture();
+    try {
+        await assert.rejects(exportGatewayBundle({ dataDir: f.source.dataDir, configPath: f.source.configPath, outFile: f.bundle, password: 'short', cliVersion: 't' }), /at least 10/);
+        const empty = join(f.root, 'empty');
+        mkdirSync(empty);
+        await assert.rejects(exportGatewayBundle({ dataDir: empty, configPath: join(empty, 'c.json'), outFile: f.bundle, password: PASSWORD, cliVersion: 't' }), /No gateway data/);
+        rmSync(join(f.source.dataDir, 'identity.key'));
+        writeFileSync(join(f.source.dataDir, 'identity.enc'), 'opaque');
+        await assert.rejects(exportFixture(f), /encrypted by the Antseed desktop app/);
+    }
+    finally {
+        f.cleanup();
+    }
+});
+test('passphrase-encrypted wallet keys travel encrypted and are not decrypted on import', async () => {
+    const f = fixture();
+    try {
+        const dirs = [f.source.dataDir, join(f.source.dataDir, 'buyer-identities', 'ws-alpha')];
+        for (const dir of dirs)
+            await new FileIdentityStore(dir, { passphrase: 'wallet passphrase' }).protect();
+        const encrypted = dirs.map((dir) => readFileSync(join(dir, 'identity.key'), 'utf8'));
+        // Neither side has the passphrase.
+        await exportFixture(f);
+        const result = await importGatewayBundle({ bundleFile: f.bundle, dataDir: f.server, configPath: f.serverConfig, password: PASSWORD });
+        assert.equal(readFileSync(join(f.server, 'identity.key'), 'utf8'), encrypted[0]);
+        assert.equal(readFileSync(join(f.server, 'buyer-identities', 'ws-alpha', 'identity.key'), 'utf8'), encrypted[1]);
+        assert.equal(result.summary.wallets.find((wallet) => wallet.name === 'default')?.address, identityFromPrivateKeyHex(DEFAULT_KEY).wallet.address);
+        assert.equal(result.summary.workspaces.find((ws) => ws.name === 'Alpha')?.address, identityFromPrivateKeyHex(ALPHA_KEY).wallet.address);
+    }
+    finally {
+        f.cleanup();
+    }
+});
+test('only known paths may come out of a bundle', () => {
+    for (const path of ['data/gateway/gateway.db', 'data/identity.key', 'config/config.json', 'data/buyer-identities/team-a/identity.key', 'data/buyer-identities/.archived/old-1/identity.key']) {
+        assert.equal(allowedBundlePath(path), true, path);
+    }
+    for (const path of ['../etc/passwd', 'data/../../x', 'data/buyer-identities/../identity.key', 'data/buyer-identities/a', '/abs', 'data/gateway/other.db', 'data/buyer-identities/a/b c']) {
+        assert.equal(allowedBundlePath(path), false, path);
+    }
+});
+test('the database snapshot is consistent while a gateway keeps writing', async () => {
+    const f = fixture();
+    const db = join(f.source.dataDir, 'gateway', 'gateway.db');
+    const setup = new Database(db);
+    setup.exec('CREATE TABLE writes (id INTEGER PRIMARY KEY, payload TEXT); CREATE TABLE tally (n INTEGER); INSERT INTO tally VALUES (0)');
+    setup.close();
+    const sqlite = createRequire(import.meta.url).resolve('better-sqlite3');
+    const worker = new Worker(`
+    const { workerData, parentPort } = require('node:worker_threads')
+    const Database = require(workerData.sqlite)
+    const db = new Database(workerData.db, { timeout: 5000 })
+    db.pragma('busy_timeout = 5000')
+    const write = db.transaction(() => {
+      db.prepare('INSERT INTO writes (payload) VALUES (?)').run('x'.repeat(200))
+      db.prepare('UPDATE tally SET n = n + 1').run()
+    })
+    let stop = false
+    parentPort.on('message', () => { stop = true })
+    let count = 0
+    const loop = () => {
+      for (let i = 0; i < 50 && !stop; i += 1) { write(); count += 1 }
+      if (count === 50) parentPort.postMessage('started')
+      if (stop) { db.close(); parentPort.postMessage('done:' + count); return }
+      setImmediate(loop)
+    }
+    loop()
+  `, { eval: true, workerData: { sqlite, db } });
+    try {
+        await new Promise((resolve) => worker.once('message', () => resolve()));
+        await exportFixture(f);
+        const finished = new Promise((resolve) => worker.on('message', (message) => { if (message.startsWith('done:'))
+            resolve(message); }));
+        worker.postMessage('stop');
+        const total = Number((await finished).slice(5));
+        await importGatewayBundle({ bundleFile: f.bundle, dataDir: f.server, configPath: f.serverConfig, password: PASSWORD });
+        const restored = new Database(join(f.server, 'gateway', 'gateway.db'), { readonly: true });
+        try {
+            assert.equal(restored.pragma('integrity_check', { simple: true }), 'ok');
+            const rows = restored.prepare('SELECT COUNT(*) AS n FROM writes').get().n;
+            const tally = restored.prepare('SELECT n FROM tally').get().n;
+            assert.equal(rows, tally, 'both tables come from the same moment');
+            assert.ok(rows >= 50 && rows <= total, `snapshot holds ${rows} of ${total} writes`);
+        }
+        finally {
+            restored.close();
+        }
+    }
+    finally {
+        await worker.terminate();
+        f.cleanup();
+    }
+});
+//# sourceMappingURL=bundle.test.js.map

package/dist/gateway/bundle.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle.test.js","sourceRoot":"","sources":["../../src/gateway/bundle.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAA;AACvC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AACxH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAC5C,OAAO,QAAQ,MAAM,gBAAgB,CAAA;AACrC,OAAO,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAA;AAC5E,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACrC,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,WAAW,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AACpH,OAAO,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAEzC,MAAM,QAAQ,GAAG,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAA;AAC3C,MAAM,QAAQ,GAAG,uBAAuB,CAAA;AACxC,MAAM,SAAS,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;AAC3E,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;AACnC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;AACjC,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAA;AAE1C,SAAS,IAAI,CAAC,IAAY;IACxB,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,KAAK,CAAA;AACpC,CAAC;AAED,qHAAqH;AACrH,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;IACpC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACvC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAC1E,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,kBAAkB,EAAE,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC7E,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,cAAc,CAAC,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACxG,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACzD,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC,CAAA;IACvE,QAAQ,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAA;IACrC,QAAQ,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAA;IACrF,QAAQ,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAA;IAC/F,QAAQ,CAAC,KAAK,EAAE,CAAA;IAChB,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;IAC/C,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;IAEhG,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,CAAA;IACvC,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAA;IAC9E,MAAM,KAAK,GAAG,KAAK,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,CAAA;IACjF,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC/G,KAAK,CAAC,UAAU,CAAC,wBAAwB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAA;IAC9F,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;IACzD,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAA;IAC9J,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,4CAA4C,EAAE,CAAC,CAAA;IACxH,IAAI,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;IACzF,kBAAkB,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAAA;IACpE,KAAK,CAAC,KAAK,EAAE,CAAA;IACb,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAA;AACvE,CAAC;AAED,SAAS,OAAO;IACd,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAA;IAC3D,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;IAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAA;IAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,wBAAwB,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,CAAA;AACzL,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,CAA6B,EAAE,QAA6B,EAAE;IACzF,OAAO,mBAAmB,CAAC;QACzB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO;QACzB,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,UAAU;QAC/B,OAAO,EAAE,CAAC,CAAC,MAAM;QACjB,QAAQ,EAAE,QAAQ;QAClB,UAAU,EAAE,YAAY;QACxB,YAAY,EAAE,QAAQ;QACtB,GAAG,KAAK;KACT,CAAC,CAAA;AACJ,CAAC;AAED,IAAI,CAAC,0GAA0G,EAAE,KAAK,IAAI,EAAE;IAC1H,MAAM,CAAC,GAAG,OAAO,EAAE,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,CAAC,CAAC,CAAA;QACvC,IAAI,KAAK;YAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,0CAA0C,CAAC,CAAA;QAC1F,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,KAAK,YAAY,CAAC,CAAA;QAC9F,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;QAClC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,EAAE,8BAA8B,CAAC,CAAA;QACrI,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE;YACtC,oBAAoB,EAAE,6CAA6C,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,2BAA2B;SACjJ,CAAC,CAAA;QACF,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAA;QAC5C,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,EAAE,wBAAwB,CAAC,CAAA;QACnI,MAAM,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAA;QACxD,MAAM,aAAa,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAEvC,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC;YACvC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,yBAAyB;SAC9H,CAAC,CAAA;QACF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAA;QACvC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,EAAE,IAAI,EAAE,kDAAkD,CAAC,CAAA;QAC/F,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,uBAAuB,CAAC,CAAA;QAC5D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAA;QACzD,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;QACpC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,OAAO,CAAC,EAAE,OAAO,EAAE,yBAAyB,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QACvI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,EAAE,OAAO,EAAE,yBAAyB,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QAChJ,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,8BAA8B,CAAC,CAAA;QAE7I,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,EAAE,WAAW,CAAC,CAAA;QAC/E,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,kBAAkB,EAAE,UAAU,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,EAAE,SAAS,CAAC,CAAA;QAC7G,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAA;QAC1F,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,aAAa,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;QAC5F,MAAM,CAAC,KAAK,CAAE,QAAQ,CAAC,OAAO,CAAC,yCAAyC,CAAC,CAAC,GAAG,EAA6B,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;QACjI,QAAQ,CAAC,KAAK,EAAE,CAAA;QAChB,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,kBAAkB,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,kBAAkB,EAAE,UAAU,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;gBACxK,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAA;YACrC,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,CAAC,cAAc,EAAE,wCAAwC,EAAE,oBAAoB,EAAE,sBAAsB,CAAC;gBAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAA;YAClL,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,KAAK,CAAC,CAAA;QAC3C,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;QACxC,IAAI,CAAC;YACH,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,uBAAuB,CAAC,CAAA;YAC1E,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;YACjE,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,yBAAyB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;YAClG,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,EAAE,CAAE,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,6BAA6B,KAAK,EAAE,CAAC,CAAC,GAAG,EAAoB,CAAC,CAAC,CAAA;YACxH,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAA;YACvC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAC,CAAA;YACjD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC,EAAE,0BAA0B,CAAC,CAAA;YACtE,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,gBAAgB,CAAC,CAAC,CAAA;QAC3F,CAAC;gBAAS,CAAC;YACT,KAAK,CAAC,KAAK,EAAE,CAAA;QACf,CAAC;QACD,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,EAAE,wBAAwB,CAAC,CAAA;IACtH,CAAC;YAAS,CAAC;QACT,CAAC,CAAC,OAAO,EAAE,CAAA;IACb,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;IACrF,MAAM,CAAC,GAAG,OAAO,EAAE,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,aAAa,CAAC,CAAC,CAAC,CAAA;QACtB,MAAM,OAAO,GAAG,CAAC,UAAkB,EAAE,QAAQ,GAAG,QAAQ,EAAE,EAAE,CAC1D,mBAAmB,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAA;QAE9F,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,kBAAkB,CAAC,EAAE,CAAC,KAAc,EAAE,EAAE,CAAC,KAAK,YAAY,WAAW,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA;QAExJ,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAA;QAChD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAClC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAE,IAAI,IAAI,CAAA;QAC1C,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;QAC7B,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAC,CAAA;QAEpD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACpC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAA;QACtD,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;QAClD,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;QAC/B,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAC,CAAA;QAEpD,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAA;QAClE,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAC,CAAA;QAEpD,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QAChC,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,+BAA+B,CAAC,CAAA;QAExE,MAAM,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAA;QACzE,MAAM,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,CAAA;IACxD,CAAC;YAAS,CAAC;QACT,CAAC,CAAC,OAAO,EAAE,CAAA;IACb,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,8FAA8F,EAAE,KAAK,IAAI,EAAE;IAC9G,MAAM,CAAC,GAAG,OAAO,EAAE,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,aAAa,CAAC,CAAC,CAAC,CAAA;QACtB,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACxC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;QAC9D,MAAM,OAAO,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAA;QAC3G,MAAM,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,OAAO,CAAC,EAAE,6DAA6D,CAAC,CAAA;QACjH,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;QAEnF,0DAA0D;QAC1D,MAAM,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,EAAE,yBAAyB,CAAC,CAAA;QACzH,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;QACnF,MAAM,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAA;QACzE,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,oBAAoB,CAAC,CAAA;QAE3H,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACjF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;QACtC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAE,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,sBAAsB,CAAC,CAAA;QACrH,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,EAAE,WAAW,CAAC,CAAA;QAC/E,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAA;QACvD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,EAAE,KAAK,EAAE,mDAAmD,CAAC,CAAA;IACnG,CAAC;YAAS,CAAC;QACT,CAAC,CAAC,OAAO,EAAE,CAAA;IACb,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;IAC/F,MAAM,CAAC,GAAG,OAAO,EAAE,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,EAAE,aAAa,CAAC,CAAA;QAC/K,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QACnC,SAAS,CAAC,KAAK,CAAC,CAAA;QAChB,MAAM,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,EAAE,iBAAiB,CAAC,CAAA;QAC3K,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAA;QAC9C,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,QAAQ,CAAC,CAAA;QAC/D,MAAM,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,sCAAsC,CAAC,CAAA;IAChF,CAAC;YAAS,CAAC;QACT,CAAC,CAAC,OAAO,EAAE,CAAA;IACb,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,mFAAmF,EAAE,KAAK,IAAI,EAAE;IACnG,MAAM,CAAC,GAAG,OAAO,EAAE,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,kBAAkB,EAAE,UAAU,CAAC,CAAC,CAAA;QACvF,KAAK,MAAM,GAAG,IAAI,IAAI;YAAE,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAA;QACvG,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAA;QAEpF,mCAAmC;QACnC,MAAM,aAAa,CAAC,CAAC,CAAC,CAAA;QACtB,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAA;QACrI,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;QAChF,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,kBAAkB,EAAE,UAAU,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;QAChH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,EAAE,OAAO,EAAE,yBAAyB,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QAChJ,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,OAAO,CAAC,EAAE,OAAO,EAAE,yBAAyB,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IACzI,CAAC;YAAS,CAAC;QACT,CAAC,CAAC,OAAO,EAAE,CAAA;IACb,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,2CAA2C,EAAE,GAAG,EAAE;IACrD,KAAK,MAAM,IAAI,IAAI,CAAC,yBAAyB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,2CAA2C,EAAE,oDAAoD,CAAC,EAAE,CAAC;QAC7L,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;IACnD,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,CAAC,eAAe,EAAE,cAAc,EAAE,uCAAuC,EAAE,yBAAyB,EAAE,MAAM,EAAE,uBAAuB,EAAE,6BAA6B,CAAC,EAAE,CAAC;QACzL,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAA;IACpD,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;IACnF,MAAM,CAAC,GAAG,OAAO,EAAE,CAAA;IACnB,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,YAAY,CAAC,CAAA;IAC1D,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,EAAE,CAAC,CAAA;IAC9B,KAAK,CAAC,IAAI,CAAC,0HAA0H,CAAC,CAAA;IACtI,KAAK,CAAC,KAAK,EAAE,CAAA;IACb,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;IACvE,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC;;;;;;;;;;;;;;;;;;;GAmBzB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;IAC9C,IAAI,CAAC;QACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;QAC7E,MAAM,aAAa,CAAC,CAAC,CAAC,CAAA;QACtB,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,OAAe,EAAE,EAAE,GAAG,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,CAAC,OAAO,CAAC,CAAA,CAAC,CAAC,CAAC,CAAC,CAAA;QACnJ,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;QAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,MAAM,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;QAE/C,MAAM,mBAAmB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAA;QACtH,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,YAAY,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;QAC1F,IAAI,CAAC;YACH,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,CAAA;YACxE,MAAM,IAAI,GAAI,QAAQ,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC,GAAG,EAAoB,CAAC,CAAC,CAAA;YAC5F,MAAM,KAAK,GAAI,QAAQ,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,GAAG,EAAoB,CAAC,CAAC,CAAA;YAChF,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,uCAAuC,CAAC,CAAA;YAClE,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,KAAK,EAAE,kBAAkB,IAAI,OAAO,KAAK,SAAS,CAAC,CAAA;QACrF,CAAC;gBAAS,CAAC;YACT,QAAQ,CAAC,KAAK,EAAE,CAAA;QAClB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,SAAS,EAAE,CAAA;QACxB,CAAC,CAAC,OAAO,EAAE,CAAA;IACb,CAAC;AACH,CAAC,CAAC,CAAA"}

package/dist/gateway/buyer-control.d.ts

@@ -0,0 +1,33 @@
+import { type RoutingPolicy } from '../routing-policy/policy.js';
+/**
+ * The secret proving to the buyer that a routing policy came from this
+ * gateway. `ANTSEED_GATEWAY_CONTROL_SECRET` wins; otherwise it lives in
+ * `<dataDir>/gateway/buyer-control.secret` (0600), created by whichever
+ * process needs it first. The file appears atomically (written aside, then
+ * hard-linked into place), so a concurrent reader never sees half of it and
+ * two creators agree on one value.
+ */
+export declare function loadOrCreateControlSecret(dataDir: string): string;
+/**
+ * Records the buyer port a running gateway forwards to, so gateway CLI
+ * commands reach the same buyer when it was started with `--buyer-port`.
+ * Returns a function that clears the record when the gateway stops.
+ */
+export declare function recordGatewayBuyerPort(dataDir: string, buyerPort: number): () => void;
+/** The buyer port recorded by a running gateway, or null when none is running. */
+export declare function runningGatewayBuyerPort(dataDir: string): number | null;
+/**
+ * Calls a buyer control endpoint with the gateway's secret, optionally
+ * scoped to a routing policy and a buyer identity (`?identity=`).
+ */
+export declare function buyerFetch(opts: {
+    buyerPort: number;
+    secret: string;
+    timeoutMs?: number;
+}, path: string, init?: {
+    method?: string;
+    body?: unknown;
+    policy?: RoutingPolicy;
+    identity?: string;
+}): Promise<Response>;
+//# sourceMappingURL=buyer-control.d.ts.map

package/dist/gateway/buyer-control.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"buyer-control.d.ts","sourceRoot":"","sources":["../../src/gateway/buyer-control.ts"],"names":[],"mappings":"AAGA,OAAO,EAML,KAAK,aAAa,EACnB,MAAM,6BAA6B,CAAA;AAcpC;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAqBjE;AAID;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,IAAI,CAKrF;AAED,kFAAkF;AAClF,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGtE;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAC9B,IAAI,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,EAC/D,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GACxF,OAAO,CAAC,QAAQ,CAAC,CAYnB"}

package/dist/gateway/buyer-control.js

@@ -0,0 +1,93 @@
+import { randomBytes } from 'node:crypto';
+import { linkSync, mkdirSync, readFileSync, rmSync, unlinkSync, writeFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { GATEWAY_CONTROL_HEADER, GATEWAY_CONTROL_SECRET_ENV, GATEWAY_CONTROL_SECRET_FILE, ROUTING_POLICY_HEADER, encodePolicyHeader, } from '../routing-policy/policy.js';
+const BUYER_FETCH_TIMEOUT_MS = 5_000;
+function readTrimmedFile(path) {
+    try {
+        const value = readFileSync(path, 'utf8').trim();
+        return value.length > 0 ? value : null;
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return null;
+        throw error;
+    }
+}
+/**
+ * The secret proving to the buyer that a routing policy came from this
+ * gateway. `ANTSEED_GATEWAY_CONTROL_SECRET` wins; otherwise it lives in
+ * `<dataDir>/gateway/buyer-control.secret` (0600), created by whichever
+ * process needs it first. The file appears atomically (written aside, then
+ * hard-linked into place), so a concurrent reader never sees half of it and
+ * two creators agree on one value.
+ */
+export function loadOrCreateControlSecret(dataDir) {
+    const fromEnv = process.env[GATEWAY_CONTROL_SECRET_ENV]?.trim();
+    if (fromEnv)
+        return fromEnv;
+    const path = join(dataDir, GATEWAY_CONTROL_SECRET_FILE);
+    const existing = readTrimmedFile(path);
+    if (existing)
+        return existing;
+    mkdirSync(dirname(path), { recursive: true });
+    const secret = randomBytes(32).toString('hex');
+    const temp = `${path}.${process.pid}.${randomBytes(4).toString('hex')}.tmp`;
+    writeFileSync(temp, `${secret}\n`, { mode: 0o600, flag: 'wx' });
+    try {
+        linkSync(temp, path);
+        return secret;
+    }
+    catch (error) {
+        if (error.code !== 'EEXIST')
+            throw error;
+        const winner = readTrimmedFile(path);
+        if (!winner)
+            throw new Error(`${path} exists but is empty`);
+        return winner;
+    }
+    finally {
+        try {
+            unlinkSync(temp);
+        }
+        catch { /* already gone */ }
+    }
+}
+const RUNNING_BUYER_PORT_FILE = join('gateway', 'buyer-port');
+/**
+ * Records the buyer port a running gateway forwards to, so gateway CLI
+ * commands reach the same buyer when it was started with `--buyer-port`.
+ * Returns a function that clears the record when the gateway stops.
+ */
+export function recordGatewayBuyerPort(dataDir, buyerPort) {
+    const path = join(dataDir, RUNNING_BUYER_PORT_FILE);
+    mkdirSync(dirname(path), { recursive: true });
+    writeFileSync(path, `${buyerPort}\n`);
+    return () => { rmSync(path, { force: true }); };
+}
+/** The buyer port recorded by a running gateway, or null when none is running. */
+export function runningGatewayBuyerPort(dataDir) {
+    const value = Number(readTrimmedFile(join(dataDir, RUNNING_BUYER_PORT_FILE)));
+    return Number.isInteger(value) && value > 0 ? value : null;
+}
+/**
+ * Calls a buyer control endpoint with the gateway's secret, optionally
+ * scoped to a routing policy and a buyer identity (`?identity=`).
+ */
+export async function buyerFetch(opts, path, init = {}) {
+    const url = new URL(path, `http://127.0.0.1:${opts.buyerPort}`);
+    if (init.identity)
+        url.searchParams.set('identity', init.identity);
+    const headers = { [GATEWAY_CONTROL_HEADER]: opts.secret };
+    if (init.policy)
+        headers[ROUTING_POLICY_HEADER] = encodePolicyHeader(init.policy);
+    if (init.body !== undefined)
+        headers['content-type'] = 'application/json';
+    return fetch(url, {
+        method: init.method ?? (init.body === undefined ? 'GET' : 'POST'),
+        headers,
+        ...(init.body !== undefined ? { body: JSON.stringify(init.body) } : {}),
+        signal: AbortSignal.timeout(opts.timeoutMs ?? BUYER_FETCH_TIMEOUT_MS),
+    });
+}
+//# sourceMappingURL=buyer-control.js.map

package/dist/gateway/buyer-control.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"buyer-control.js","sourceRoot":"","sources":["../../src/gateway/buyer-control.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAC9F,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EACL,sBAAsB,EACtB,0BAA0B,EAC1B,2BAA2B,EAC3B,qBAAqB,EACrB,kBAAkB,GAEnB,MAAM,6BAA6B,CAAA;AAEpC,MAAM,sBAAsB,GAAG,KAAK,CAAA;AAEpC,SAAS,eAAe,CAAC,IAAY;IACnC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAA;QAC/C,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAA;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAA;QACnE,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAAe;IACvD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,EAAE,IAAI,EAAE,CAAA;IAC/D,IAAI,OAAO;QAAE,OAAO,OAAO,CAAA;IAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAA;IACvD,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,CAAA;IACtC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAA;IAC7B,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC7C,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC9C,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAA;IAC3E,aAAa,CAAC,IAAI,EAAE,GAAG,MAAM,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IAC/D,IAAI,CAAC;QACH,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QACpB,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAA;QACnE,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,CAAA;QACpC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,sBAAsB,CAAC,CAAA;QAC3D,OAAO,MAAM,CAAA;IACf,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YAAC,UAAU,CAAC,IAAI,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,MAAM,uBAAuB,GAAG,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAA;AAE7D;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAe,EAAE,SAAiB;IACvE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAA;IACnD,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC7C,aAAa,CAAC,IAAI,EAAE,GAAG,SAAS,IAAI,CAAC,CAAA;IACrC,OAAO,GAAG,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA,CAAC,CAAC,CAAA;AAChD,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,uBAAuB,CAAC,OAAe;IACrD,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC,CAAC,CAAA;IAC7E,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAA;AAC5D,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAA+D,EAC/D,IAAY,EACZ,OAAuF,EAAE;IAEzF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,oBAAoB,IAAI,CAAC,SAAS,EAAE,CAAC,CAAA;IAC/D,IAAI,IAAI,CAAC,QAAQ;QAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;IAClE,MAAM,OAAO,GAA2B,EAAE,CAAC,sBAAsB,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,CAAA;IACjF,IAAI,IAAI,CAAC,MAAM;QAAE,OAAO,CAAC,qBAAqB,CAAC,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACjF,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAA;IACzE,OAAO,KAAK,CAAC,GAAG,EAAE;QAChB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACjE,OAAO;QACP,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,IAAI,sBAAsB,CAAC;KACtE,CAAC,CAAA;AACJ,CAAC"}

package/dist/gateway/buyer-policy-probe.d.ts

@@ -0,0 +1,41 @@
+/**
+ * What the gateway knows about whether its buyer applies routing policies:
+ * `supported` once an authenticated route preview succeeds, `unsupported`
+ * when the buyer answers but refuses it (an older buyer without the
+ * endpoint, or one that does not share the control secret), `unknown` while
+ * the buyer cannot be reached.
+ */
+export type BuyerPolicySupport = 'unknown' | 'supported' | 'unsupported';
+export interface BuyerPolicyProbeOptions {
+    buyerPort: number;
+    secret: string;
+    onLog?: (message: string) => void;
+    /** Injectable for tests; defaults to `buyerFetch`. */
+    fetchPreview?: () => Promise<Response>;
+}
+/** One authenticated `GET /_antseed/route-preview`; never throws. */
+export declare function probeBuyerPolicySupport(options: BuyerPolicyProbeOptions): Promise<BuyerPolicySupport>;
+/**
+ * Probes the buyer at startup and keeps re-checking (every 5 s until it gets
+ * an answer, then every minute, so an upgraded or replaced buyer is noticed).
+ * `policyUnsupported()` is what the server consults: true unless the buyer
+ * has confirmed it applies policies, so a key whose policy restricts sellers
+ * is refused rather than silently routed unrestricted by an older buyer.
+ */
+export declare class BuyerPolicyProbe {
+    private readonly _options;
+    private _state;
+    private _timer;
+    private _stopped;
+    private _warned;
+    private _checked;
+    constructor(_options: BuyerPolicyProbeOptions);
+    get state(): BuyerPolicySupport;
+    policyUnsupported(): boolean;
+    /** Runs the first probe and schedules the next ones. */
+    start(): Promise<BuyerPolicySupport>;
+    check(): Promise<void>;
+    stop(): void;
+    private _schedule;
+}
+//# sourceMappingURL=buyer-policy-probe.d.ts.map

package/dist/gateway/buyer-policy-probe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"buyer-policy-probe.d.ts","sourceRoot":"","sources":["../../src/gateway/buyer-policy-probe.ts"],"names":[],"mappings":"AAOA;;;;;;GAMG;AACH,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,WAAW,GAAG,aAAa,CAAA;AAExE,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;IACjC,sDAAsD;IACtD,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAA;CACvC;AAED,qEAAqE;AACrE,wBAAsB,uBAAuB,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAgB3G;AAED;;;;;;GAMG;AACH,qBAAa,gBAAgB;IAOf,OAAO,CAAC,QAAQ,CAAC,QAAQ;IANrC,OAAO,CAAC,MAAM,CAAgC;IAC9C,OAAO,CAAC,MAAM,CAA6C;IAC3D,OAAO,CAAC,QAAQ,CAAQ;IACxB,OAAO,CAAC,OAAO,CAAQ;IACvB,OAAO,CAAC,QAAQ,CAAQ;gBAEK,QAAQ,EAAE,uBAAuB;IAE9D,IAAI,KAAK,IAAI,kBAAkB,CAE9B;IAED,iBAAiB,IAAI,OAAO;IAI5B,wDAAwD;IAClD,KAAK,IAAI,OAAO,CAAC,kBAAkB,CAAC;IAKpC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IA2B5B,IAAI,IAAI,IAAI;IAMZ,OAAO,CAAC,SAAS;CASlB"}

package/dist/gateway/buyer-policy-probe.js

@@ -0,0 +1,99 @@
+import { buyerFetch } from './buyer-control.js';
+/** Model name the probe previews; no seller serves it, so the preview is cheap. */
+const BUYER_POLICY_PROBE_MODEL = '__probe__';
+const RETRY_MS = 5_000;
+const RECHECK_MS = 60_000;
+/** One authenticated `GET /_antseed/route-preview`; never throws. */
+export async function probeBuyerPolicySupport(options) {
+    let response;
+    try {
+        response = options.fetchPreview
+            ? await options.fetchPreview()
+            : await buyerFetch({ buyerPort: options.buyerPort, secret: options.secret }, `/_antseed/route-preview?model=${BUYER_POLICY_PROBE_MODEL}`, { policy: {} });
+    }
+    catch {
+        return 'unknown';
+    }
+    if (!response.ok) {
+        await response.body?.cancel().catch(() => { });
+        return 'unsupported';
+    }
+    const body = await response.json().catch(() => null);
+    return Array.isArray(body?.candidates) ? 'supported' : 'unsupported';
+}
+/**
+ * Probes the buyer at startup and keeps re-checking (every 5 s until it gets
+ * an answer, then every minute, so an upgraded or replaced buyer is noticed).
+ * `policyUnsupported()` is what the server consults: true unless the buyer
+ * has confirmed it applies policies, so a key whose policy restricts sellers
+ * is refused rather than silently routed unrestricted by an older buyer.
+ */
+export class BuyerPolicyProbe {
+    _options;
+    _state = 'unknown';
+    _timer = null;
+    _stopped = false;
+    _warned = false;
+    _checked = false;
+    constructor(_options) {
+        this._options = _options;
+    }
+    get state() {
+        return this._state;
+    }
+    policyUnsupported() {
+        return this._state !== 'supported';
+    }
+    /** Runs the first probe and schedules the next ones. */
+    async start() {
+        await this.check();
+        return this._state;
+    }
+    async check() {
+        const next = await probeBuyerPolicySupport(this._options);
+        if (this._stopped)
+            return;
+        const previous = this._state;
+        this._state = next;
+        const first = !this._checked;
+        this._checked = true;
+        if (next !== previous || first) {
+            const log = this._options.onLog;
+            if (next === 'unsupported') {
+                this._warned = true;
+                log?.(`WARNING: the buyer on port ${this._options.buyerPort} does not accept this gateway's routing policies `
+                    + '(an older antseed buyer, or a different gateway control secret). Paid requests from keys whose '
+                    + 'policy restricts sellers are refused with 503 buyer_policy_unsupported until the buyer is upgraded '
+                    + 'and shares the control secret.');
+            }
+            else if (next === 'unknown') {
+                this._warned = true;
+                log?.(`WARNING: cannot reach the buyer on port ${this._options.buyerPort} to confirm it applies routing `
+                    + 'policies; keys whose policy restricts sellers are refused until it answers.');
+            }
+            else if (this._warned) {
+                this._warned = false;
+                log?.('The buyer now applies routing policies.');
+            }
+        }
+        this._schedule(next === 'unknown' ? RETRY_MS : RECHECK_MS);
+    }
+    stop() {
+        this._stopped = true;
+        if (this._timer)
+            clearTimeout(this._timer);
+        this._timer = null;
+    }
+    _schedule(delayMs) {
+        if (this._stopped)
+            return;
+        if (this._timer)
+            clearTimeout(this._timer);
+        this._timer = setTimeout(() => {
+            this._timer = null;
+            void this.check();
+        }, delayMs);
+        this._timer.unref?.();
+    }
+}
+//# sourceMappingURL=buyer-policy-probe.js.map

package/dist/gateway/buyer-policy-probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"buyer-policy-probe.js","sourceRoot":"","sources":["../../src/gateway/buyer-policy-probe.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAE/C,mFAAmF;AACnF,MAAM,wBAAwB,GAAG,WAAW,CAAA;AAC5C,MAAM,QAAQ,GAAG,KAAK,CAAA;AACtB,MAAM,UAAU,GAAG,MAAM,CAAA;AAmBzB,qEAAqE;AACrE,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAAgC;IAC5E,IAAI,QAAkB,CAAA;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,OAAO,CAAC,YAAY;YAC7B,CAAC,CAAC,MAAM,OAAO,CAAC,YAAY,EAAE;YAC9B,CAAC,CAAC,MAAM,UAAU,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EACzE,iCAAiC,wBAAwB,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAA;IAClF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAC7C,OAAO,aAAa,CAAA;IACtB,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAoC,CAAA;IACvF,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAA;AACtE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,gBAAgB;IAOE;IANrB,MAAM,GAAuB,SAAS,CAAA;IACtC,MAAM,GAAyC,IAAI,CAAA;IACnD,QAAQ,GAAG,KAAK,CAAA;IAChB,OAAO,GAAG,KAAK,CAAA;IACf,QAAQ,GAAG,KAAK,CAAA;IAExB,YAA6B,QAAiC;QAAjC,aAAQ,GAAR,QAAQ,CAAyB;IAAG,CAAC;IAElE,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,MAAM,CAAA;IACpB,CAAC;IAED,iBAAiB;QACf,OAAO,IAAI,CAAC,MAAM,KAAK,WAAW,CAAA;IACpC,CAAC;IAED,wDAAwD;IACxD,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;QAClB,OAAO,IAAI,CAAC,MAAM,CAAA;IACpB,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,GAAG,MAAM,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACzD,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAM;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAA;QAC5B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAA;QAClB,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAA;QAC5B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAA;QACpB,IAAI,IAAI,KAAK,QAAQ,IAAI,KAAK,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAA;YAC/B,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;gBAC3B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAA;gBACnB,GAAG,EAAE,CAAC,8BAA8B,IAAI,CAAC,QAAQ,CAAC,SAAS,mDAAmD;sBAC1G,iGAAiG;sBACjG,qGAAqG;sBACrG,gCAAgC,CAAC,CAAA;YACvC,CAAC;iBAAM,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC9B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAA;gBACnB,GAAG,EAAE,CAAC,2CAA2C,IAAI,CAAC,QAAQ,CAAC,SAAS,iCAAiC;sBACrG,6EAA6E,CAAC,CAAA;YACpF,CAAC;iBAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACxB,IAAI,CAAC,OAAO,GAAG,KAAK,CAAA;gBACpB,GAAG,EAAE,CAAC,yCAAyC,CAAC,CAAA;YAClD,CAAC;QACH,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAA;IAC5D,CAAC;IAED,IAAI;QACF,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAA;QACpB,IAAI,IAAI,CAAC,MAAM;YAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC1C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAA;IACpB,CAAC;IAEO,SAAS,CAAC,OAAe;QAC/B,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAM;QACzB,IAAI,IAAI,CAAC,MAAM;YAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC1C,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAA;YAClB,KAAK,IAAI,CAAC,KAAK,EAAE,CAAA;QACnB,CAAC,EAAE,OAAO,CAAC,CAAA;QACX,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAA;IACvB,CAAC;CACF"}

package/dist/gateway/buyer-policy-probe.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=buyer-policy-probe.test.d.ts.map

package/dist/gateway/buyer-policy-probe.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"buyer-policy-probe.test.d.ts","sourceRoot":"","sources":["../../src/gateway/buyer-policy-probe.test.ts"],"names":[],"mappings":""}