@antseed/cli 0.1.179 → 0.1.181

package/dist/gateway/services/keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../../src/gateway/services/keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAA;AAEtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAqB,MAAM,cAAc,CAAA;AAClF,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAyB,MAAM,uBAAuB,CAAA;AACnG,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AACvD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAA;AAEhF,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc,EAA6D,MAAM,cAAc,CAAA;AAclJ,SAAS,SAAS,CAAC,OAAe;IAChC,OAAO,IAAI,YAAY,CAAC,GAAG,EAAE,WAAW,EAAE,OAAO,CAAC,CAAA;AACpD,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAmB,EAAE,EAAU;IACvD,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IAC5B,IAAI,CAAC,GAAG;QAAE,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC/B,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,SAAS,CAAC,GAAiB;IAClC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAA;AACtD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAmB,EAAE,KAA4B;IACnF,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE;QACtC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,IAAI,CAAA;QACpC,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,CAAA;QACzB,OAAO,MAAM,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI,IAAI,MAAM,GAAG,GAAG,CAAA;IACxD,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,eAAe,MAAM,EAAE,CAAC,CAAA;AAC7C,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CACtB,KAAmB,EACnB,GAAwG,EACxG,IAAyF;IAEzF,MAAM,IAAI,GAAG,EAAE,GAAG,GAAG,EAAE,GAAG,IAAI,EAAkB,CAAA;IAChD,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;IACzH,MAAM,MAAM,GAAsD,EAAE,CAAA;IACpE,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS;QAAE,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAA;IAChJ,IAAI,IAAI,CAAC,kBAAkB,KAAK,SAAS;QAAE,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAA;IACrK,OAAO,MAAM,CAAA;AACf,CAAC;AAED,qEAAqE;AACrE,SAAS,gBAAgB,CAAC,GAAoC,EAAE,SAAwB;IACtF,IAAI,SAAS,KAAK,IAAI,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI;QAAE,MAAM,SAAS,CAAC,kDAAkD,CAAC,CAAA;IACrH,IAAI,SAAS,KAAK,IAAI,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI,IAAI,SAAS,GAAG,GAAG,CAAC,SAAS;QAAE,MAAM,SAAS,CAAC,kDAAkD,CAAC,CAAA;AACpJ,CAAC;AAiBD;;;;GAIG;AACH,MAAM,UAAU,SAAS,CACvB,GAAmB,EACnB,KAAY,EACZ,KAAqB,EACrB,UAAqD,EAAE,EAAE,EAAE,OAAO,EAAE;IAEpE,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAA;IACrB,MAAM,KAAK,GAAG,OAAO,CAAC,EAAE,KAAK,OAAO,CAAA;IACpC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,CAAA;IACjC,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,CAAA;IACrD,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW;QACjC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC;QACvC,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,KAAK,CAAC,aAAa,IAAI,sBAAsB,CAAC,CAAA;IACnF,IAAI,CAAC,SAAS;QAAE,MAAM,QAAQ,CAAC,WAAW,CAAC,CAAA;IAC3C,IAAI,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,aAAa,EAAE,CAAC;QAC3E,MAAM,UAAU,CAAC,cAAc,SAAS,CAAC,IAAI,yBAAyB,SAAS,CAAC,aAAa,WAAW,KAAK,CAAC,aAAa,GAAG,CAAC,CAAA;IACjI,CAAC;IACD,MAAM,WAAW,GAAG,SAAS,CAAC,EAAE,CAAA;IAEhC,IAAI,aAAa,GAAG,IAAI,CAAA;IACxB,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,SAAS,GAAG,KAAK,CAAC,aAAa,CAAA;QACrC,IAAI,SAAS,KAAK,IAAI,IAAI,CAAC,KAAK;YAAE,MAAM,SAAS,CAAC,kDAAkD,CAAC,CAAA;QACrG,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;YACxC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ;gBAAE,MAAM,UAAU,CAAC,wCAAwC,CAAC,CAAA;YACnG,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC;gBAAE,MAAM,UAAU,CAAC,4CAA4C,CAAC,CAAA;QAC7H,CAAC;QACD,aAAa,GAAG,SAAS,CAAA;IAC3B,CAAC;IACD,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,IAAI,KAAK,CAAA;IAChD,IAAI,YAAY,IAAI,CAAC,KAAK;QAAE,MAAM,SAAS,CAAC,0CAA0C,CAAC,CAAA;IACvF,IAAI,YAAY,IAAI,SAAS,CAAC,aAAa,KAAK,sBAAsB;QAAE,MAAM,UAAU,CAAC,uDAAuD,CAAC,CAAA;IACjJ,IAAI,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QACpC,IAAI,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAChG,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,kBAAkB,EAAE,wBAAwB,MAAM,CAAC,OAAO,gBAAgB,CAAC,CAAA;QACzG,CAAC;IACH,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAA;IAC/B,MAAM,UAAU,GAAG,KAAK,CAAC,aAAa,CAAA;IACtC,MAAM,eAAe,GAAG,KAAK,CAAC,WAAW,CAAA;IACzC,MAAM,eAAe,GAAG,KAAK,CAAC,kBAAkB,CAAA;IAChD,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,UAAU,IAAI,eAAe,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,eAAe,KAAK,SAAS,CAAC,CAAC,EAAE,CAAC;QAC/G,MAAM,UAAU,CAAC,oEAAoE,CAAC,CAAA;IACxF,CAAC;IACD,qEAAqE;IACrE,IAAI,MAAM,GAAG,gBAAgB,CAAA;IAC7B,IAAI,aAAa,GAAyB,IAAI,CAAA;IAC9C,IAAI,WAAW,GAAG,eAAe,IAAI,gBAAgB,CAAA;IACrD,IAAI,kBAAkB,GAAG,eAAe,IAAI,IAAI,CAAA;IAChD,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,GAAG,UAAU,IAAI,gBAAgB,CAAA;QACvC,aAAa,GAAG,UAAU,IAAI,IAAI,CAAA;IACpC,CAAC;SAAM,CAAC;QACN,WAAW,GAAG,eAAe,IAAI,UAAU,IAAI,gBAAgB,CAAA;QAC/D,IAAI,eAAe,KAAK,SAAS;YAAE,kBAAkB,GAAG,UAAU,IAAI,IAAI,CAAA;IAC5E,CAAC;IACD,cAAc,CAAC,kBAAkB,CAC/B,eAAe,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,EAAE;QACnH,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtD,CAAC,EACF,KAAK,EACL,EAAE,MAAM,EAAE,mBAAmB,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,SAAS,EAAE,YAAY,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,EAAE,CAC3H,CAAC,CAAA;IACF,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC;QACtC,KAAK;QACL,WAAW;QACX,aAAa;QACb,MAAM;QACN,aAAa;QACb,WAAW;QACX,kBAAkB;QAClB,YAAY;QACZ,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;KACnC,CAAC,CAAA;IACF,GAAG,CAAC,GAAG,CAAC,gBAAgB,GAAG,CAAC,EAAE,eAAe,WAAW,EAAE,CAAC,CAAA;IAC3D,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE;QACpD,WAAW,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa;QAChF,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,kBAAkB,EAAE,GAAG,CAAC,kBAAkB,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS;KACjH,CAAC,CAAA;IACF,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAA;AACxB,CAAC;AAiBD;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CAAC,GAAmB,EAAE,KAAY,EAAE,EAAU,EAAE,KAAqB,EAAE,UAA+B,EAAE,EAAE,EAAE,OAAO,EAAE;IAC5I,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAA;IACrB,MAAM,GAAG,GAAG,gBAAgB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IACvC,MAAM,KAAK,GAAG,OAAO,CAAC,EAAE,KAAK,OAAO,CAAA;IACpC,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,KAAK,CAAC,WAAW,KAAK,GAAG,CAAC,WAAW;QAAE,MAAM,UAAU,CAAC,wCAAwC,CAAC,CAAA;IACxI,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,CAAA;IACvC,IAAI,YAAY,KAAK,SAAS,IAAI,CAAC,KAAK;QAAE,MAAM,SAAS,CAAC,0CAA0C,CAAC,CAAA;IACrG,IAAI,YAAY,IAAI,GAAG,CAAC,aAAa,KAAK,sBAAsB;QAAE,MAAM,UAAU,CAAC,uDAAuD,CAAC,CAAA;IAC3I,IAAI,aAAwC,CAAA;IAC5C,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACtC,IAAI,CAAC,KAAK;YAAE,MAAM,SAAS,CAAC,iDAAiD,CAAC,CAAA;QAC9E,aAAa,GAAG,KAAK,CAAC,aAAa,CAAA;QACnC,IAAI,aAAa,IAAI,aAAa,KAAK,GAAG,CAAC,aAAa,EAAE,CAAC;YACzD,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,aAAa,CAAC,CAAA;YAC5C,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ;gBAAE,MAAM,UAAU,CAAC,wCAAwC,CAAC,CAAA;YACnG,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC;gBAAE,MAAM,UAAU,CAAC,4CAA4C,CAAC,CAAA;QACrI,CAAC;IACH,CAAC;IACD,MAAM,YAAY,GAAG,aAAa,KAAK,SAAS,IAAI,aAAa,KAAK,GAAG,CAAC,aAAa,CAAA;IACvF,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,MAAM,SAAS,CAAC,2EAA2E,CAAC,CAAA;IACtI,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS;QAAE,MAAM,SAAS,CAAC,0FAA0F,CAAC,CAAA;IAC5J,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,kBAAkB,EAAE,SAAS,EAAE,GAAG,KAAK,CAAA;IACnF,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,KAAK;QAAE,gBAAgB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;IAEvE,MAAM,UAAU,GAAG,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAA;IACvD,MAAM,eAAe,GAAG,EAAE,GAAG,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,CAAA;IACtE,cAAc,CAAC,kBAAkB,CAC/B,eAAe,CAAC,KAAK,EAAE,GAAG,EAAE;QAC1B,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpE,CAAC,EACF,KAAK,EACL;QACE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,mBAAmB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE;QACvE,SAAS,EAAE,YAAY,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC,CAAC;KAClG,CACF,CAAC,CAAA;IACF,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE;QACtC,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAC,CAAA;IACF,2EAA2E;IAC3E,uEAAuE;IACvE,gDAAgD;IAChD,IAAI,MAAM,GAAG,OAAO,CAAA;IACpB,IAAI,YAAY,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAA;QACpC,GAAG,CAAC,QAAQ,EAAE,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IACzC,CAAC;IACD,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE;QACvD,OAAO,EAAE,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,aAAa,EAAE,oBAAoB,EAAE,cAAc,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;QAC5J,GAAG,CAAC,YAAY,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9E,CAAC,CAAA;IACF,OAAO,MAAM,CAAA;AACf,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,SAAS,CAAC,GAAmB,EAAE,KAAY,EAAE,EAAU;IACrE,MAAM,GAAG,GAAG,gBAAgB,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IAC3C,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ;QAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,aAAa,EAAE,gCAAgC,CAAC,CAAA;IACzG,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAC3C,GAAG,CAAC,QAAQ,EAAE,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IACvC,GAAG,CAAC,GAAG,CAAC,gBAAgB,GAAG,CAAC,EAAE,UAAU,CAAC,CAAA;IACzC,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAA;IACrD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,SAAS,CAAC,GAAmB,EAAE,KAAY,EAAE,EAAU;IACrE,MAAM,GAAG,GAAG,gBAAgB,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IAC3C,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAC3C,GAAG,CAAC,QAAQ,EAAE,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IACvC,GAAG,CAAC,GAAG,CAAC,gBAAgB,GAAG,CAAC,EAAE,UAAU,CAAC,CAAA;IACzC,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAA;IACrD,OAAO,OAAO,CAAA;AAChB,CAAC"}

package/dist/gateway/services/members.d.ts

@@ -0,0 +1,72 @@
+import type { RoutingPolicy } from '../../routing-policy/policy.js';
+import type { Member } from '../console-api/types.js';
+import type { BudgetLimits } from '../limits.js';
+import type { InviteRecord, MemberRecord, OrgRole, WorkspaceRole } from '../store.js';
+import { type Actor, type PolicyConfirmations, type ServiceContext } from './context.js';
+export declare const ORG_ROLES: readonly OrgRole[];
+export declare const WORKSPACE_ROLES: readonly WorkspaceRole[];
+export declare const DEFAULT_INVITE_HOURS = 72;
+export declare const MAX_INVITE_HOURS: number;
+export declare function requireMemberRecord(ctx: Pick<ServiceContext, 'store'>, id: string): MemberRecord;
+export interface InviteInput {
+    label: string;
+    email: string | null;
+    orgRole: OrgRole;
+    workspaces: Array<{
+        workspaceId: string;
+        role: WorkspaceRole;
+    }>;
+    expiresInHours?: number;
+    /** The inviting member; null for the CLI and management tokens. */
+    createdBy: string | null;
+}
+/** Creates an invited member (already in their workspaces) and a single-use link token. */
+export declare function inviteMember(ctx: ServiceContext, actor: Actor, input: InviteInput): {
+    invite: InviteRecord;
+    token: string;
+};
+/** Open (unused) invite, or 404. */
+export declare function requireOpenInvite(ctx: Pick<ServiceContext, 'store'>, id: string): InviteRecord;
+export declare function cancelInvite(ctx: ServiceContext, actor: Actor, id: string): InviteRecord;
+export interface UpdateMemberInput extends PolicyConfirmations {
+    label?: string;
+    email?: string | null;
+    orgRole?: OrgRole;
+    /** Only the periods present change; null clears a cap. */
+    limits?: Partial<BudgetLimits>;
+    routingPolicy?: RoutingPolicy | null;
+    maxKeys?: number | null;
+}
+/**
+ * Changes a member. The last active owner keeps the role; a demoted admin's
+ * management tokens are revoked with it (tokens act as org admins).
+ */
+export declare function updateMember(ctx: ServiceContext, actor: Actor, id: string, input: UpdateMemberInput): MemberRecord;
+/** Disables a member: revokes their keys and management tokens and ends their sessions. */
+export declare function disableMember(ctx: ServiceContext, actor: Actor, id: string): {
+    member: MemberRecord;
+    revokedKeys: string[];
+    revokedTokens: string[];
+};
+/** Re-enables a disabled member; their revoked keys stay revoked. */
+export declare function enableMember(ctx: ServiceContext, actor: Actor, id: string): MemberRecord;
+/** A member's sign-in methods, as auth keeps them. */
+export interface CredentialStore {
+    credentialsFor(memberId: string): Member['credentials'];
+    /** Removes one and ends the member's sessions except `keepSessionId`. */
+    deleteCredential(memberId: string, credentialId: string, keepSessionId?: string | null): boolean;
+}
+/**
+ * Removes one sign-in method. A member's last one, which would lock them
+ * out, goes only with `allowLast`. `selfRemoval` (a member removing their
+ * own) keeps their current session (`keepSessionId`); otherwise all of the
+ * member's sessions end.
+ */
+export declare function removeCredential(ctx: ServiceContext, actor: Actor, credentials: CredentialStore, input: {
+    memberId: string;
+    credentialId: string;
+    allowLast: boolean;
+    selfRemoval?: boolean;
+    keepSessionId?: string | null;
+}): Member['credentials'][number];
+//# sourceMappingURL=members.d.ts.map

package/dist/gateway/services/members.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"members.d.ts","sourceRoot":"","sources":["../../../src/gateway/services/members.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAA;AAGnE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAA;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAEhD,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AACrF,OAAO,EAA4D,KAAK,KAAK,EAAE,KAAK,mBAAmB,EAAE,KAAK,cAAc,EAAE,MAAM,cAAc,CAAA;AAElJ,eAAO,MAAM,SAAS,EAAE,SAAS,OAAO,EAAiC,CAAA;AACzE,eAAO,MAAM,eAAe,EAAE,SAAS,aAAa,EAAwB,CAAA;AAC5E,eAAO,MAAM,oBAAoB,KAAK,CAAA;AACtC,eAAO,MAAM,gBAAgB,QAAU,CAAA;AAGvC,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,MAAM,GAAG,YAAY,CAIhG;AAMD,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,OAAO,EAAE,OAAO,CAAA;IAChB,UAAU,EAAE,KAAK,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,aAAa,CAAA;KAAE,CAAC,CAAA;IAC/D,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,mEAAmE;IACnE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB;AAED,2FAA2F;AAC3F,wBAAgB,YAAY,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,GAAG;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAyB3H;AAED,oCAAoC;AACpC,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,MAAM,GAAG,YAAY,CAI9F;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,GAAG,YAAY,CAKxF;AAED,MAAM,WAAW,iBAAkB,SAAQ,mBAAmB;IAC5D,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,0DAA0D;IAC1D,MAAM,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,CAAA;IAC9B,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,CAAA;IACpC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACxB;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,GAAG,YAAY,CAsClH;AAED,2FAA2F;AAC3F,wBAAgB,aAAa,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,WAAW,EAAE,MAAM,EAAE,CAAC;IAAC,aAAa,EAAE,MAAM,EAAE,CAAA;CAAE,CAYrJ;AAED,qEAAqE;AACrE,wBAAgB,YAAY,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,GAAG,YAAY,CAMxF;AAED,sDAAsD;AACtD,MAAM,WAAW,eAAe;IAC9B,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC,CAAA;IACvD,yEAAyE;IACzE,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAA;CACjG;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,cAAc,EACnB,KAAK,EAAE,KAAK,EACZ,WAAW,EAAE,eAAe,EAC5B,KAAK,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAC1H,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAoB/B"}

package/dist/gateway/services/members.js

@@ -0,0 +1,161 @@
+import { ConsoleError } from '../console-api/router.js';
+import { badRequest, notFound } from '../console-api/serialize.js';
+import { checkPolicyInput, policyInputProblem } from '../policy-resolver.js';
+import { changedFields, recordAudit, requiredText, throwIfProblem } from './context.js';
+export const ORG_ROLES = ['owner', 'admin', 'member'];
+export const WORKSPACE_ROLES = ['admin', 'member'];
+export const DEFAULT_INVITE_HOURS = 72;
+export const MAX_INVITE_HOURS = 24 * 30;
+const HOUR_MS = 60 * 60 * 1000;
+export function requireMemberRecord(ctx, id) {
+    const member = ctx.store.getMember(id);
+    if (!member)
+        throw notFound('Member');
+    return member;
+}
+function lastOwner() {
+    return new ConsoleError(409, 'last_owner', 'The organization needs at least one owner');
+}
+/** Creates an invited member (already in their workspaces) and a single-use link token. */
+export function inviteMember(ctx, actor, input) {
+    const { store } = ctx;
+    const label = requiredText(input.label, 'label');
+    if (!ORG_ROLES.includes(input.orgRole))
+        throw badRequest('orgRole must be owner, admin or member');
+    for (const entry of input.workspaces) {
+        if (!WORKSPACE_ROLES.includes(entry.role))
+            throw badRequest('workspace role must be admin or member');
+        if (!store.getWorkspace(entry.workspaceId))
+            throw notFound(`Workspace ${entry.workspaceId}`);
+    }
+    const hours = input.expiresInHours ?? DEFAULT_INVITE_HOURS;
+    if (typeof hours !== 'number' || !(hours > 0) || hours > MAX_INVITE_HOURS)
+        throw badRequest(`expiresInHours must be between 1 and ${MAX_INVITE_HOURS}`);
+    const email = input.email;
+    if (email && store.findMemberByEmail(email))
+        throw new ConsoleError(409, 'member_exists', 'A member with this email already exists');
+    const { invite, token } = store.createInvite({
+        label,
+        email,
+        orgRole: input.orgRole,
+        workspaces: input.workspaces,
+        expiresAt: ctx.now() + hours * HOUR_MS,
+        createdBy: input.createdBy,
+    });
+    ctx.log(`console: invite ${invite.id} created for member ${invite.memberId}`);
+    recordAudit(ctx, actor, 'invite.create', { kind: 'member', id: invite.memberId, label }, {
+        inviteId: invite.id, email, orgRole: input.orgRole, workspaces: input.workspaces, expiresAt: invite.expiresAt,
+    });
+    return { invite, token };
+}
+/** Open (unused) invite, or 404. */
+export function requireOpenInvite(ctx, id) {
+    const invite = ctx.store.getInvite(id);
+    if (!invite || invite.usedAt !== null)
+        throw notFound('Invite');
+    return invite;
+}
+export function cancelInvite(ctx, actor, id) {
+    const invite = requireOpenInvite(ctx, id);
+    ctx.store.deleteInvite(invite.id);
+    recordAudit(ctx, actor, 'invite.delete', { kind: 'member', id: invite.memberId, label: invite.label }, { inviteId: invite.id });
+    return invite;
+}
+/**
+ * Changes a member. The last active owner keeps the role; a demoted admin's
+ * management tokens are revoked with it (tokens act as org admins).
+ */
+export function updateMember(ctx, actor, id, input) {
+    const { store } = ctx;
+    const target = requireMemberRecord(ctx, id);
+    const { orgRole, email, routingPolicy } = input;
+    if (orgRole !== undefined && !ORG_ROLES.includes(orgRole))
+        throw badRequest('orgRole must be owner, admin or member');
+    if (target.orgRole === 'owner' && orgRole && orgRole !== 'owner' && target.status === 'active' && store.countActiveOwners() <= 1)
+        throw lastOwner();
+    if (email) {
+        const existing = store.findMemberByEmail(email);
+        if (existing && existing.id !== target.id)
+            throw new ConsoleError(409, 'member_exists', 'A member with this email already exists');
+    }
+    if (input.label !== undefined && !input.label.trim())
+        throw badRequest('label is required');
+    if (input.maxKeys !== undefined && input.maxKeys !== null && (!Number.isSafeInteger(input.maxKeys) || input.maxKeys < 0)) {
+        throw badRequest('maxKeys must be a non-negative integer or null');
+    }
+    if (routingPolicy !== undefined) {
+        // A member's policy applies in every workspace they belong to; it is
+        // checked against the gateway default here, each workspace's policy
+        // still narrows it per request.
+        throwIfProblem(policyInputProblem([{ field: 'routingPolicy', check: checkPolicyInput(store, { member: { ...target, routingPolicy }, memberId: target.id }, 'member', routingPolicy) }], input));
+    }
+    const updated = store.updateMember(target.id, {
+        ...(input.label !== undefined ? { label: input.label.trim() } : {}),
+        ...(email !== undefined ? { email } : {}),
+        ...(orgRole ? { orgRole } : {}),
+        ...(input.limits !== undefined ? { limits: input.limits } : {}),
+        ...(routingPolicy !== undefined ? { routingPolicy } : {}),
+        ...(input.maxKeys !== undefined ? { maxKeys: input.maxKeys } : {}),
+    });
+    const demoted = target.orgRole !== 'member' && updated.orgRole === 'member';
+    const revokedTokens = demoted ? store.revokeAdminTokensCreatedBy(target.id) : [];
+    recordAudit(ctx, actor, 'member.update', { kind: 'member', id: target.id, label: updated.label }, {
+        changes: changedFields(target, updated, ['label', 'email', 'orgRole', 'limits', 'routingPolicy', 'maxKeys']),
+        ...(revokedTokens.length ? { revokedTokens } : {}),
+    });
+    return updated;
+}
+/** Disables a member: revokes their keys and management tokens and ends their sessions. */
+export function disableMember(ctx, actor, id) {
+    const { store } = ctx;
+    const target = requireMemberRecord(ctx, id);
+    if (target.orgRole === 'owner' && target.status === 'active' && store.countActiveOwners() <= 1)
+        throw lastOwner();
+    const member = store.setMemberStatus(target.id, 'disabled');
+    const revokedKeys = store.revokeMemberKeys(target.id);
+    for (const keyId of revokedKeys)
+        ctx.sessions?.revokeKeySessions(keyId);
+    ctx.sessions?.revokeMemberSessions(target.id);
+    const revokedTokens = store.revokeAdminTokensCreatedBy(target.id);
+    ctx.log(`console: member ${target.id} disabled; revoked ${revokedKeys.length} key(s) and ${revokedTokens.length} management token(s)`);
+    recordAudit(ctx, actor, 'member.disable', { kind: 'member', id: target.id, label: target.label }, { revokedKeys, revokedTokens });
+    return { member, revokedKeys, revokedTokens };
+}
+/** Re-enables a disabled member; their revoked keys stay revoked. */
+export function enableMember(ctx, actor, id) {
+    const target = requireMemberRecord(ctx, id);
+    if (target.status === 'invited')
+        throw new ConsoleError(409, 'invite_pending', 'This member has not accepted their invite yet');
+    const member = ctx.store.setMemberStatus(target.id, 'active');
+    recordAudit(ctx, actor, 'member.enable', { kind: 'member', id: target.id, label: target.label });
+    return member;
+}
+/**
+ * Removes one sign-in method. A member's last one, which would lock them
+ * out, goes only with `allowLast`. `selfRemoval` (a member removing their
+ * own) keeps their current session (`keepSessionId`); otherwise all of the
+ * member's sessions end.
+ */
+export function removeCredential(ctx, actor, credentials, input) {
+    const member = requireMemberRecord(ctx, input.memberId);
+    const list = credentials.credentialsFor(member.id);
+    const credential = list.find((entry) => entry.id === input.credentialId);
+    if (!credential)
+        throw new ConsoleError(404, 'not_found', 'Sign-in method not found');
+    const last = list.length <= 1;
+    if (last && !input.allowLast) {
+        throw new ConsoleError(409, 'last_credential', input.selfRemoval
+            ? 'Add another sign-in method before removing this one'
+            : 'Only an organization owner can remove a member\'s last sign-in method');
+    }
+    const self = input.selfRemoval === true;
+    if (!credentials.deleteCredential(member.id, credential.id, self ? input.keepSessionId ?? null : null)) {
+        throw new ConsoleError(404, 'not_found', 'Sign-in method not found');
+    }
+    recordAudit(ctx, actor, 'member.credential_remove', { kind: 'member', id: member.id, label: member.label }, {
+        credentialId: credential.id, credentialKind: credential.kind, credentialLabel: credential.label, last, sessionsRevoked: self ? 'others' : 'all',
+    });
+    ctx.log(`console: removed a sign-in method of member ${member.id}; ended their ${self ? 'other ' : ''}sessions`);
+    return credential;
+}
+//# sourceMappingURL=members.js.map

package/dist/gateway/services/members.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"members.js","sourceRoot":"","sources":["../../../src/gateway/services/members.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AACvD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAA;AAGlE,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAE5E,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc,EAA6D,MAAM,cAAc,CAAA;AAElJ,MAAM,CAAC,MAAM,SAAS,GAAuB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAA;AACzE,MAAM,CAAC,MAAM,eAAe,GAA6B,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;AAC5E,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAA;AACtC,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,GAAG,EAAE,CAAA;AACvC,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAE9B,MAAM,UAAU,mBAAmB,CAAC,GAAkC,EAAE,EAAU;IAChF,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;IACtC,IAAI,CAAC,MAAM;QAAE,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAA;IACrC,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,IAAI,YAAY,CAAC,GAAG,EAAE,YAAY,EAAE,2CAA2C,CAAC,CAAA;AACzF,CAAC;AAYD,2FAA2F;AAC3F,MAAM,UAAU,YAAY,CAAC,GAAmB,EAAE,KAAY,EAAE,KAAkB;IAChF,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAA;IACrB,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;IAChD,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,MAAM,UAAU,CAAC,wCAAwC,CAAC,CAAA;IAClG,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACrC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,MAAM,UAAU,CAAC,wCAAwC,CAAC,CAAA;QACrG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC;YAAE,MAAM,QAAQ,CAAC,aAAa,KAAK,CAAC,WAAW,EAAE,CAAC,CAAA;IAC9F,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,cAAc,IAAI,oBAAoB,CAAA;IAC1D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,KAAK,GAAG,gBAAgB;QAAE,MAAM,UAAU,CAAC,wCAAwC,gBAAgB,EAAE,CAAC,CAAA;IACvJ,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAA;IACzB,IAAI,KAAK,IAAI,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,eAAe,EAAE,yCAAyC,CAAC,CAAA;IACpI,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,YAAY,CAAC;QAC3C,KAAK;QACL,KAAK;QACL,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,SAAS,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,OAAO;QACtC,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC,CAAA;IACF,GAAG,CAAC,GAAG,CAAC,mBAAmB,MAAM,CAAC,EAAE,uBAAuB,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAA;IAC7E,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE;QACvF,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS;KAC9G,CAAC,CAAA;IACF,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;AAC1B,CAAC;AAED,oCAAoC;AACpC,MAAM,UAAU,iBAAiB,CAAC,GAAkC,EAAE,EAAU;IAC9E,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;IACtC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;QAAE,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAA;IAC/D,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAmB,EAAE,KAAY,EAAE,EAAU;IACxE,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;IACzC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IACjC,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAA;IAC/H,OAAO,MAAM,CAAA;AACf,CAAC;AAYD;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,GAAmB,EAAE,KAAY,EAAE,EAAU,EAAE,KAAwB;IAClG,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAA;IACrB,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;IAC3C,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,KAAK,CAAA;IAC/C,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,MAAM,UAAU,CAAC,wCAAwC,CAAC,CAAA;IACrH,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,IAAI,OAAO,IAAI,OAAO,KAAK,OAAO,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,iBAAiB,EAAE,IAAI,CAAC;QAAE,MAAM,SAAS,EAAE,CAAA;IACnJ,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,QAAQ,GAAG,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAA;QAC/C,IAAI,QAAQ,IAAI,QAAQ,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE;YAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,eAAe,EAAE,yCAAyC,CAAC,CAAA;IACpI,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE;QAAE,MAAM,UAAU,CAAC,mBAAmB,CAAC,CAAA;IAC3F,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,CAAC;QACzH,MAAM,UAAU,CAAC,gDAAgD,CAAC,CAAA;IACpE,CAAC;IACD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,qEAAqE;QACrE,oEAAoE;QACpE,gCAAgC;QAChC,cAAc,CAAC,kBAAkB,CAC/B,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,gBAAgB,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,aAAa,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,aAAa,CAAC,EAAE,CAAC,EACpJ,KAAK,CACN,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,EAAE;QAC5C,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnE,CAAC,CAAA;IACF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAA;IAC3E,MAAM,aAAa,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAChF,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE;QAChG,OAAO,EAAE,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC;QAC5G,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnD,CAAC,CAAA;IACF,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,aAAa,CAAC,GAAmB,EAAE,KAAY,EAAE,EAAU;IACzE,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAA;IACrB,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;IAC3C,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,iBAAiB,EAAE,IAAI,CAAC;QAAE,MAAM,SAAS,EAAE,CAAA;IACjH,MAAM,MAAM,GAAG,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,EAAE,UAAU,CAAC,CAAA;IAC3D,MAAM,WAAW,GAAG,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IACrD,KAAK,MAAM,KAAK,IAAI,WAAW;QAAE,GAAG,CAAC,QAAQ,EAAE,iBAAiB,CAAC,KAAK,CAAC,CAAA;IACvE,GAAG,CAAC,QAAQ,EAAE,oBAAoB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IAC7C,MAAM,aAAa,GAAG,KAAK,CAAC,0BAA0B,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IACjE,GAAG,CAAC,GAAG,CAAC,mBAAmB,MAAM,CAAC,EAAE,sBAAsB,WAAW,CAAC,MAAM,eAAe,aAAa,CAAC,MAAM,sBAAsB,CAAC,CAAA;IACtI,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC,CAAA;IACjI,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,CAAA;AAC/C,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,YAAY,CAAC,GAAmB,EAAE,KAAY,EAAE,EAAU;IACxE,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;IAC3C,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,gBAAgB,EAAE,+CAA+C,CAAC,CAAA;IAC/H,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAA;IAC7D,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAA;IAChG,OAAO,MAAM,CAAA;AACf,CAAC;AASD;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,GAAmB,EACnB,KAAY,EACZ,WAA4B,EAC5B,KAA2H;IAE3H,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAA;IACvD,MAAM,IAAI,GAAG,WAAW,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IAClD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,KAAK,CAAC,YAAY,CAAC,CAAA;IACxE,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,WAAW,EAAE,0BAA0B,CAAC,CAAA;IACrF,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAA;IAC7B,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,iBAAiB,EAAE,KAAK,CAAC,WAAW;YAC9D,CAAC,CAAC,qDAAqD;YACvD,CAAC,CAAC,uEAAuE,CAAC,CAAA;IAC9E,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,KAAK,IAAI,CAAA;IACvC,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QACvG,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,WAAW,EAAE,0BAA0B,CAAC,CAAA;IACtE,CAAC;IACD,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,0BAA0B,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE;QAC1G,YAAY,EAAE,UAAU,CAAC,EAAE,EAAE,cAAc,EAAE,UAAU,CAAC,IAAI,EAAE,eAAe,EAAE,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK;KAChJ,CAAC,CAAA;IACF,GAAG,CAAC,GAAG,CAAC,+CAA+C,MAAM,CAAC,EAAE,iBAAiB,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAA;IAChH,OAAO,UAAU,CAAA;AACnB,CAAC"}

package/dist/gateway/services/network.d.ts

@@ -0,0 +1,36 @@
+import { type RoutingPolicy } from '../../routing-policy/policy.js';
+import { type BuyerClient } from '../console-api/handlers/network-buyer.js';
+import type { BuyerLimits, NetworkModel, Peer, RoutePreview } from '../console-api/types.js';
+import { resolvePolicy, type PolicyTarget } from '../policy-resolver.js';
+import type { GatewayStore } from '../store.js';
+export type PreviewTarget = Pick<PolicyTarget, 'keyId' | 'workspaceId' | 'memberId' | 'presetSlug'>;
+/** Sellers the buyer knows, with health, verification and this gateway's own 24 h stats. */
+export declare function listNetworkPeers(store: GatewayStore, buyer: BuyerClient, now: number): Promise<Peer[]>;
+/**
+ * Every model on the network, as the buyer's own `GET /v1/models` lists it
+ * without a routing policy (like `listNetworkPeers`), with each offer's
+ * verification, trust and latency from the peer list. The peer list is
+ * enrichment only: when it fails the models still answer.
+ */
+export declare function listNetworkModels(store: GatewayStore, buyer: BuyerClient, now: number): Promise<NetworkModel[]>;
+/**
+ * Which sellers a request for `model` would route to under the effective
+ * policy of `target` (gateway default → workspace → member → key → preset),
+ * ranked by the buyer with the same code as real routing, ineligible ones
+ * with reasons. A pinned `peer@model` is checked by its model id.
+ */
+export declare function previewRoute(store: GatewayStore, buyer: BuyerClient, requested: string, target: PreviewTarget, resolve?: typeof resolvePolicy, 
+/** Config file the buyer's max pricing is read from; null leaves it out. */
+configPath?: string | null): Promise<RoutePreview>;
+/**
+ * The buyer's config level, which every gateway policy narrows: max pricing
+ * defaults (from the config file), min reputation, a required verifier and
+ * routing preferences (as the running buyer reports them, else from the
+ * config).
+ */
+export declare function readBuyerLimits(configPath: string | null, live: unknown): Promise<BuyerLimits>;
+/** `GET /routing/buyer-limits`: asks the running buyer, falls back to the config file. */
+export declare function buyerLimits(configPath: string | null, buyer: BuyerClient): Promise<BuyerLimits>;
+/** The buyer's config as a policy, for the preview's `buyer` source. */
+export declare function buyerLimitsPolicy(limits: BuyerLimits): RoutingPolicy | null;
+//# sourceMappingURL=network.d.ts.map

package/dist/gateway/services/network.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"network.d.ts","sourceRoot":"","sources":["../../../src/gateway/services/network.ts"],"names":[],"mappings":"AACA,OAAO,EAAsC,KAAK,aAAa,EAAE,MAAM,gCAAgC,CAAA;AACvG,OAAO,EAAgC,KAAK,WAAW,EAAE,MAAM,0CAA0C,CAAA;AAEzG,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AAC5F,OAAO,EAAE,aAAa,EAAE,KAAK,YAAY,EAAE,MAAM,uBAAuB,CAAA;AACxE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAO/C,MAAM,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,EAAE,OAAO,GAAG,aAAa,GAAG,UAAU,GAAG,YAAY,CAAC,CAAA;AAEnG,4FAA4F;AAC5F,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAS5G;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAMrH;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,CAChC,KAAK,EAAE,YAAY,EACnB,KAAK,EAAE,WAAW,EAClB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,aAAa,EACrB,OAAO,GAAE,OAAO,aAA6B;AAC7C,4EAA4E;AAC5E,UAAU,GAAE,MAAM,GAAG,IAAW,GAC/B,OAAO,CAAC,YAAY,CAAC,CAkBvB;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC,CAyCpG;AAED,0FAA0F;AAC1F,wBAAsB,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAGrG;AAED,wEAAwE;AACxE,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,WAAW,GAAG,aAAa,GAAG,IAAI,CAiB3E"}

package/dist/gateway/services/network.js

@@ -0,0 +1,147 @@
+import { loadConfig } from '../../config/loader.js';
+import { isRoutingPolicy, policyAllowsModel } from '../../routing-policy/policy.js';
+import { buyerJson, optionalBuyerJson } from '../console-api/handlers/network-buyer.js';
+import { enrichCandidates, mapNetworkModels, mapPeers } from '../console-api/handlers/network-mapping.js';
+import { resolvePolicy } from '../policy-resolver.js';
+const DAY_MS = 24 * 60 * 60 * 1000;
+const PINNED_MODEL_RE = /^(?:0x)?[0-9a-f]{40}@(.+)$/i;
+/** Model name the buyer-limits read previews; no seller serves it, so it is cheap. */
+const PROBE_MODEL = '__probe__';
+/** Sellers the buyer knows, with health, verification and this gateway's own 24 h stats. */
+export async function listNetworkPeers(store, buyer, now) {
+    const [peers, health, verification] = await Promise.all([
+        buyerJson(buyer, '/_antseed/peers'),
+        optionalBuyerJson(buyer, '/_antseed/peer-health'),
+        // Needs the buyer's own verification token today; when refused, `verified` falls back.
+        optionalBuyerJson(buyer, '/_antseed/verification'),
+    ]);
+    const stats = store.peerStats(now - DAY_MS);
+    return mapPeers({ peers, health, verification, stats, now });
+}
+/**
+ * Every model on the network, as the buyer's own `GET /v1/models` lists it
+ * without a routing policy (like `listNetworkPeers`), with each offer's
+ * verification, trust and latency from the peer list. The peer list is
+ * enrichment only: when it fails the models still answer.
+ */
+export async function listNetworkModels(store, buyer, now) {
+    const [models, peers] = await Promise.all([
+        buyerJson(buyer, '/v1/models'),
+        listNetworkPeers(store, buyer, now).catch(() => []),
+    ]);
+    return mapNetworkModels(models, peers);
+}
+/**
+ * Which sellers a request for `model` would route to under the effective
+ * policy of `target` (gateway default → workspace → member → key → preset),
+ * ranked by the buyer with the same code as real routing, ineligible ones
+ * with reasons. A pinned `peer@model` is checked by its model id.
+ */
+export async function previewRoute(store, buyer, requested, target, resolve = resolvePolicy, 
+/** Config file the buyer's max pricing is read from; null leaves it out. */
+configPath = null) {
+    const model = PINNED_MODEL_RE.exec(requested)?.[1] ?? requested;
+    const { policy, sources } = resolve(store, target);
+    const modelAllowed = policyAllowsModel(policy, model);
+    if (!modelAllowed) {
+        return { model, policy, sources: await withBuyerSource(sources, configPath, null), modelAllowed, candidates: [] };
+    }
+    const [preview, peers] = await Promise.all([
+        buyerJson(buyer, `/_antseed/route-preview?model=${encodeURIComponent(model)}`, { policy }),
+        optionalBuyerJson(buyer, '/_antseed/peers'),
+    ]);
+    return {
+        model,
+        policy,
+        sources: await withBuyerSource(sources, configPath, preview['buyer']),
+        modelAllowed,
+        candidates: enrichCandidates(preview['candidates'], peers),
+    };
+}
+/**
+ * The buyer's config level, which every gateway policy narrows: max pricing
+ * defaults (from the config file), min reputation, a required verifier and
+ * routing preferences (as the running buyer reports them, else from the
+ * config).
+ */
+export async function readBuyerLimits(configPath, live) {
+    const reported = isRoutingPolicy(live) ? live : null;
+    let fromConfig = null;
+    if (configPath) {
+        try {
+            const config = await loadConfig(configPath);
+            const pricing = config.buyer.maxPricing.defaults;
+            // `buyer.verifier` as `GET /settings` reads it; start flags only the running buyer knows.
+            const verifier = config.buyer.verifier;
+            fromConfig = {
+                minPeerReputation: config.buyer.minPeerReputation,
+                requireVerifier: verifier?.enabled !== false && verifier?.require === true,
+                maxPricing: {
+                    inputUsdPerMillion: pricing.inputUsdPerMillion,
+                    outputUsdPerMillion: pricing.outputUsdPerMillion,
+                    cachedInputUsdPerMillion: pricing.cachedInputUsdPerMillion ?? null,
+                },
+                routingPreferences: {
+                    minTrustScore: config.buyer.routingPreferences.minTrustScore,
+                    allowedPeerIds: [...config.buyer.routingPreferences.allowedPeerIds],
+                    blockedPeerIds: [...config.buyer.routingPreferences.blockedPeerIds],
+                    preferFreePeers: config.buyer.routingPreferences.preferFreePeers,
+                },
+            };
+        }
+        catch {
+            // An unreadable config leaves only what the buyer reports.
+        }
+    }
+    return {
+        minPeerReputation: reported ? reported.minReputation ?? 0 : fromConfig?.minPeerReputation ?? 0,
+        requireVerifier: reported ? reported.requireVerified === true : fromConfig?.requireVerifier ?? false,
+        maxPricing: fromConfig?.maxPricing ?? null,
+        routingPreferences: reported
+            ? {
+                minTrustScore: reported.minTrustScore ?? 0,
+                allowedPeerIds: reported.allowedPeerIds ?? [],
+                blockedPeerIds: reported.blockedPeerIds ?? [],
+                preferFreePeers: reported.preferFreePeers === true,
+            }
+            : fromConfig?.routingPreferences ?? null,
+    };
+}
+/** `GET /routing/buyer-limits`: asks the running buyer, falls back to the config file. */
+export async function buyerLimits(configPath, buyer) {
+    const preview = await optionalBuyerJson(buyer, `/_antseed/route-preview?model=${PROBE_MODEL}`, { policy: {} });
+    return readBuyerLimits(configPath, preview?.['buyer']);
+}
+/** The buyer's config as a policy, for the preview's `buyer` source. */
+export function buyerLimitsPolicy(limits) {
+    const policy = {};
+    if (limits.minPeerReputation > 0)
+        policy.minReputation = limits.minPeerReputation;
+    if (limits.requireVerifier)
+        policy.requireVerified = true;
+    if (limits.maxPricing) {
+        policy.maxInputUsdPerMillion = limits.maxPricing.inputUsdPerMillion;
+        policy.maxOutputUsdPerMillion = limits.maxPricing.outputUsdPerMillion;
+        if (limits.maxPricing.cachedInputUsdPerMillion !== null)
+            policy.maxCachedInputUsdPerMillion = limits.maxPricing.cachedInputUsdPerMillion;
+    }
+    const prefs = limits.routingPreferences;
+    if (prefs) {
+        if (prefs.minTrustScore > 0)
+            policy.minTrustScore = prefs.minTrustScore;
+        if (prefs.allowedPeerIds.length > 0)
+            policy.allowedPeerIds = [...prefs.allowedPeerIds];
+        if (prefs.blockedPeerIds.length > 0)
+            policy.blockedPeerIds = [...prefs.blockedPeerIds];
+        if (prefs.preferFreePeers)
+            policy.preferFreePeers = true;
+    }
+    return Object.keys(policy).length > 0 ? policy : null;
+}
+async function withBuyerSource(sources, configPath, live) {
+    if (!configPath && !isRoutingPolicy(live))
+        return sources;
+    const policy = buyerLimitsPolicy(await readBuyerLimits(configPath, live));
+    return sources.map((source) => (source.level === 'buyer' ? { ...source, policy } : source));
+}
+//# sourceMappingURL=network.js.map

package/dist/gateway/services/network.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"network.js","sourceRoot":"","sources":["../../../src/gateway/services/network.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACnD,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAsB,MAAM,gCAAgC,CAAA;AACvG,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAoB,MAAM,0CAA0C,CAAA;AACzG,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,QAAQ,EAAiB,MAAM,4CAA4C,CAAA;AAExH,OAAO,EAAE,aAAa,EAAqB,MAAM,uBAAuB,CAAA;AAGxE,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAClC,MAAM,eAAe,GAAG,6BAA6B,CAAA;AACrD,sFAAsF;AACtF,MAAM,WAAW,GAAG,WAAW,CAAA;AAI/B,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAmB,EAAE,KAAkB,EAAE,GAAW;IACzF,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACtD,SAAS,CAAC,KAAK,EAAE,iBAAiB,CAAC;QACnC,iBAAiB,CAAC,KAAK,EAAE,uBAAuB,CAAC;QACjD,uFAAuF;QACvF,iBAAiB,CAAC,KAAK,EAAE,wBAAwB,CAAC;KACnD,CAAC,CAAA;IACF,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,GAAG,MAAM,CAAe,CAAA;IACzD,OAAO,QAAQ,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;AAC9D,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAmB,EAAE,KAAkB,EAAE,GAAW;IAC1F,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACxC,SAAS,CAAC,KAAK,EAAE,YAAY,CAAC;QAC9B,gBAAgB,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAW,EAAE,CAAC,EAAE,CAAC;KAC5D,CAAC,CAAA;IACF,OAAO,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;AACxC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAmB,EACnB,KAAkB,EAClB,SAAiB,EACjB,MAAqB,EACrB,UAAgC,aAAa;AAC7C,4EAA4E;AAC5E,aAA4B,IAAI;IAEhC,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,SAAS,CAAA;IAC/D,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;IAClD,MAAM,YAAY,GAAG,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IACrD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,EAAE,EAAE,CAAA;IACnH,CAAC;IACD,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACzC,SAAS,CAAC,KAAK,EAAE,iCAAiC,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;QAC1F,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,CAAC;KAC5C,CAAC,CAAA;IACF,OAAO;QACL,KAAK;QACL,MAAM;QACN,OAAO,EAAE,MAAM,eAAe,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QACrE,YAAY;QACZ,UAAU,EAAE,gBAAgB,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,KAAK,CAAC;KAC3D,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,UAAyB,EAAE,IAAa;IAC5E,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;IACpD,IAAI,UAAU,GAAuB,IAAI,CAAA;IACzC,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,CAAA;YAC3C,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAA;YAChD,0FAA0F;YAC1F,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAA;YACtC,UAAU,GAAG;gBACX,iBAAiB,EAAE,MAAM,CAAC,KAAK,CAAC,iBAAiB;gBACjD,eAAe,EAAE,QAAQ,EAAE,OAAO,KAAK,KAAK,IAAI,QAAQ,EAAE,OAAO,KAAK,IAAI;gBAC1E,UAAU,EAAE;oBACV,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;oBAC9C,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;oBAChD,wBAAwB,EAAE,OAAO,CAAC,wBAAwB,IAAI,IAAI;iBACnE;gBACD,kBAAkB,EAAE;oBAClB,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,aAAa;oBAC5D,cAAc,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,cAAc,CAAC;oBACnE,cAAc,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,cAAc,CAAC;oBACnE,eAAe,EAAE,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,eAAe;iBACjE;aACF,CAAA;QACH,CAAC;QAAC,MAAM,CAAC;YACP,2DAA2D;QAC7D,CAAC;IACH,CAAC;IACD,OAAO;QACL,iBAAiB,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,iBAAiB,IAAI,CAAC;QAC9F,eAAe,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,eAAe,IAAI,KAAK;QACpG,UAAU,EAAE,UAAU,EAAE,UAAU,IAAI,IAAI;QAC1C,kBAAkB,EAAE,QAAQ;YAC1B,CAAC,CAAC;gBACE,aAAa,EAAE,QAAQ,CAAC,aAAa,IAAI,CAAC;gBAC1C,cAAc,EAAE,QAAQ,CAAC,cAAc,IAAI,EAAE;gBAC7C,cAAc,EAAE,QAAQ,CAAC,cAAc,IAAI,EAAE;gBAC7C,eAAe,EAAE,QAAQ,CAAC,eAAe,KAAK,IAAI;aACnD;YACH,CAAC,CAAC,UAAU,EAAE,kBAAkB,IAAI,IAAI;KAC3C,CAAA;AACH,CAAC;AAED,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,UAAyB,EAAE,KAAkB;IAC7E,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,iCAAiC,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAA;IAC9G,OAAO,eAAe,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAA;AACxD,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,iBAAiB,CAAC,MAAmB;IACnD,MAAM,MAAM,GAAkB,EAAE,CAAA;IAChC,IAAI,MAAM,CAAC,iBAAiB,GAAG,CAAC;QAAE,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC,iBAAiB,CAAA;IACjF,IAAI,MAAM,CAAC,eAAe;QAAE,MAAM,CAAC,eAAe,GAAG,IAAI,CAAA;IACzD,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,MAAM,CAAC,qBAAqB,GAAG,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAA;QACnE,MAAM,CAAC,sBAAsB,GAAG,MAAM,CAAC,UAAU,CAAC,mBAAmB,CAAA;QACrE,IAAI,MAAM,CAAC,UAAU,CAAC,wBAAwB,KAAK,IAAI;YAAE,MAAM,CAAC,2BAA2B,GAAG,MAAM,CAAC,UAAU,CAAC,wBAAwB,CAAA;IAC1I,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,kBAAkB,CAAA;IACvC,IAAI,KAAK,EAAE,CAAC;QACV,IAAI,KAAK,CAAC,aAAa,GAAG,CAAC;YAAE,MAAM,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAA;QACvE,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,cAAc,GAAG,CAAC,GAAG,KAAK,CAAC,cAAc,CAAC,CAAA;QACtF,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,cAAc,GAAG,CAAC,GAAG,KAAK,CAAC,cAAc,CAAC,CAAA;QACtF,IAAI,KAAK,CAAC,eAAe;YAAE,MAAM,CAAC,eAAe,GAAG,IAAI,CAAA;IAC1D,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAA;AACvD,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,OAAgC,EAAE,UAAyB,EAAE,IAAa;IACvG,IAAI,CAAC,UAAU,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;QAAE,OAAO,OAAO,CAAA;IACzD,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAA;IACzE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;AAC7F,CAAC"}

package/dist/gateway/services/operator.d.ts

@@ -0,0 +1,98 @@
+/**
+ * The workspace wallet's "authorized wallet": its AntseedDeposits operator,
+ * the only address that can withdraw the wallet's deposits and claim its
+ * ANTS rewards (both go to the operator), and the only one that can hand the
+ * role over or clear it. Shared by the console API and `antseed gateway
+ * workspace operator`. Contract rules are summarized in
+ * console-api/operator-types.ts.
+ */
+import type { AntsChainConfig } from '@antseed/ants';
+import { type AbstractSigner } from 'ethers';
+import type Database from 'better-sqlite3';
+import type { OperatorAuthorization, OperatorRelation } from '../console-api/operator-types.js';
+import { ChainReadCache } from '../../proxy/chain-read-cache.js';
+/** Live reads of one buyer's operator state. Never cached: callers cache what they want. */
+export interface OperatorReader {
+    /** The current operator, or null when none is set. */
+    operator(buyer: string): Promise<string | null>;
+    /** The nonce the next SetOperator signature must carry. */
+    nonce(buyer: string): Promise<bigint>;
+}
+/** A checksummed address, or null for anything else (including the zero address). */
+export declare function normalizeOperator(value: unknown): string | null;
+export declare function isOperatorAddress(value: unknown): value is string;
+export declare function sameAddress(a: string | null | undefined, b: string | null | undefined): boolean;
+/** Reads straight from AntseedDeposits on the configured chain. */
+export declare function depositsOperatorReader(chain: AntsChainConfig): OperatorReader;
+/**
+ * Operator reads per buyer address, shared by every console request: one RPC
+ * call per buyer per `ttlMs`, concurrent readers share it. A fresh read
+ * (after a transaction) is allowed once per `freshIntervalMs`; within that
+ * the last read stands. Entries live in a `ChainReadCache` (pass the
+ * gateway's shared one), under `operator:<address>`. A failed read is an
+ * error, never a stale operator: the authorized wallet is a security fact.
+ */
+export declare class OperatorCache {
+    private readonly ttlMs;
+    private readonly freshIntervalMs;
+    readonly cache: ChainReadCache;
+    private readonly settled;
+    constructor(now: () => number, ttlMs?: number, freshIntervalMs?: number, cache?: ChainReadCache);
+    static key(buyer: string): string;
+    /** The last value read for `buyer`, or undefined when none has been read. */
+    known(buyer: string): {
+        operator: string | null;
+    } | undefined;
+    read(buyer: string, load: () => Promise<string | null>, fresh?: boolean): Promise<{
+        operator: string | null;
+        checkedAt: number;
+    }>;
+}
+export interface WalletOwner {
+    memberId: string;
+    label: string;
+}
+/**
+ * The member who signs in with `address` (a SIWE wallet credential), or
+ * null. Reads auth's credentials table; a gateway without it has no owners.
+ */
+export declare function walletOwnerFromDb(db: Database.Database, getMember: (id: string) => {
+    id: string;
+    label: string;
+    status: string;
+} | null, address: string): WalletOwner | null;
+/** How the operator relates to the caller; see `OperatorRelation`. */
+export declare function operatorRelation(input: {
+    buyer: string;
+    operator: string | null;
+    /** The signed-in member asking, or null (management token, CLI). */
+    viewerMemberId: string | null;
+    ownerOf: (address: string) => WalletOwner | null;
+}): {
+    relation: OperatorRelation;
+    owner: WalletOwner | null;
+};
+/** One sentence on what the relation means, for the CLI. */
+export declare function describeRelation(relation: OperatorRelation, owner: WalletOwner | null): string;
+/** SigningWallet's EIP-712 half; ethers wallets have it. */
+export interface TypedDataSigner {
+    address: string;
+    signTypedData?: AbstractSigner['signTypedData'];
+}
+/**
+ * Signs the buyer's SetOperator authorization for `operator`. Reads the
+ * current operator and the nonce straight from the chain right before
+ * signing: a signature for a buyer that already has an operator could never
+ * be used (OperatorAlreadySet), and a stale nonce would revert (InvalidNonce).
+ */
+export declare function signOperatorAuthorization(input: {
+    wallet: TypedDataSigner;
+    chain: AntsChainConfig;
+    operator: string;
+    reader: OperatorReader;
+}): Promise<OperatorAuthorization & {
+    nonceValue: bigint;
+}>;
+export declare function setOperatorCalldata(buyer: string, operator: string, nonce: bigint, signature: string): string;
+export declare function transferOperatorCalldata(buyer: string, newOperator: string): string;
+//# sourceMappingURL=operator.d.ts.map

package/dist/gateway/services/operator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operator.d.ts","sourceRoot":"","sources":["../../../src/gateway/services/operator.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAEpD,OAAO,EAAyB,KAAK,cAAc,EAAE,MAAM,QAAQ,CAAA;AACnE,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAA;AAC1C,OAAO,KAAK,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AAE/F,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAA;AAOhE,4FAA4F;AAC5F,MAAM,WAAW,cAAc;IAC7B,sDAAsD;IACtD,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IAC/C,2DAA2D;IAC3D,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;CACtC;AAED,qFAAqF;AACrF,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAG/D;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAEjE;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAE/F;AAgBD,mEAAmE;AACnE,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,eAAe,GAAG,cAAc,CAM7E;AAED;;;;;;;GAOG;AACH,qBAAa,aAAa;IAMtB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,eAAe;IANlC,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAA;IAC9B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiD;gBAGvE,GAAG,EAAE,MAAM,MAAM,EACA,KAAK,SAAS,EACd,eAAe,SAAQ,EACxC,KAAK,CAAC,EAAE,cAAc;IAKxB,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAIjC,6EAA6E;IAC7E,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG;QAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,SAAS;IAIvD,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,EAAE,KAAK,UAAQ,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;CAQtI;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;CACd;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAW7K;AAED,sEAAsE;AACtE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE;IACtC,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,oEAAoE;IACpE,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,WAAW,GAAG,IAAI,CAAA;CACjD,GAAG;IAAE,QAAQ,EAAE,gBAAgB,CAAC;IAAC,KAAK,EAAE,WAAW,GAAG,IAAI,CAAA;CAAE,CAO5D;AAED,4DAA4D;AAC5D,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,gBAAgB,EAAE,KAAK,EAAE,WAAW,GAAG,IAAI,GAAG,MAAM,CAQ9F;AAED,4DAA4D;AAC5D,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAA;IACf,aAAa,CAAC,EAAE,cAAc,CAAC,eAAe,CAAC,CAAA;CAChD;AAED;;;;;GAKG;AACH,wBAAsB,yBAAyB,CAAC,KAAK,EAAE;IACrD,MAAM,EAAE,eAAe,CAAA;IACvB,KAAK,EAAE,eAAe,CAAA;IACtB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,cAAc,CAAA;CACvB,GAAG,OAAO,CAAC,qBAAqB,GAAG;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAgC1D;AAOD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAE7G;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAEnF"}