@chatlychat/cli 0.2.0 → 0.4.0

package/dist/commands/listen-core.js

@@ -0,0 +1,334 @@
+/**
+ * What `chatly listen` does the same way for every surface it tails.
+ *
+ * ═══ WHY THIS FILE EXISTS ═════════════════════════════════════════════════
+ *
+ * `listen` tails two ledgers now — webhook subscriptions
+ * (`/v1/webhooks/deliveries`) and an external agent's push deliveries
+ * (`/v1/bots/{id}/deliveries`) — and will tail more. The poll loop differs
+ * per ledger; the flags, the seen-set, the signing and the forward leg do
+ * not. They are here so there is one of each, and so `listen.ts` stays under
+ * this repo's 650-line ceiling.
+ *
+ * ═══ THE SIGNATURE IT MINTS, AND THE SELF-CHECK ═══════════════════════════
+ *
+ * Neither ledger stores the signature Chatly sent — `webhook_deliveries` and
+ * `agent_deliveries` both store the PAYLOAD as `jsonb` and nothing else, and
+ * `jsonb` does not preserve key order, so the exact signed bytes are
+ * unreconstructable by construction rather than by omission. So a forwarded
+ * request is re-signed here, from `--secret`, and every forward carries TWO
+ * headers:
+ *
+ *   - the surface's own legacy header (`x-livechat-signature` for an event
+ *     webhook, `x-chatly-signature` for an agent delivery), `t=…,v1=…` over
+ *     `<t>.<rawBody>` — what the platform sends today;
+ *   - `x-chatly-signature-v2`, `t=…,v1=…` over
+ *     `<t>.<METHOD>.<path>.<rawBody>` — the unified construction every
+ *     surface is moving to (C-02). The platform does not send this on either
+ *     surface yet, which is exactly why minting it locally is useful: a
+ *     developer can write and test the verifier they will need before the
+ *     sender moves.
+ *
+ * `path` in that base string is the path of the request being signed — the
+ * local `--forward-to` path, because that is the request the receiver
+ * verifies. Both headers are verified with the SDK's own
+ * `verifyChatlySignature` BEFORE the request goes out, and a forward whose
+ * own signature does not verify is refused rather than sent. That self-check
+ * is not ceremony: it is the one thing that catches a signer and a verifier
+ * drifting on construction or on timestamp unit, which is a bug this product
+ * has actually shipped — the scheme once emitted milliseconds in the header
+ * while signing a seconds value, and every correct handler rejected us.
+ */
+import { createHmac } from 'node:crypto';
+import { chatlyV2SigningPath, signChatlyV2, verifyChatlySignature } from '@chatlychat/sdk-node';
+import { bool, num, str } from '../args.js';
+export const WEBHOOK_SIGN_PLAN = {
+    surface: 'event_webhook',
+    legacyHeader: 'x-livechat-signature',
+    timestampHeader: 'x-livechat-timestamp',
+};
+export const AGENT_SIGN_PLAN = {
+    surface: 'agent_delivery',
+    legacyHeader: 'x-chatly-signature',
+    timestampHeader: null,
+};
+/** Deliveries remembered before the oldest id is dropped. */
+const SEEN_CAP = 5_000;
+const DEFAULT_INTERVAL_SECONDS = 2;
+const MIN_INTERVAL_SECONDS = 1;
+const DEFAULT_PAGE_LIMIT = 50;
+/**
+ * The four words both ledgers use, with the same meanings: `failed` will be
+ * retried and `dead` will not. Validated here because the bot ledger answers
+ * a **400** on a word outside the four rather than an empty page.
+ */
+export const DELIVERY_STATUSES = ['pending', 'delivered', 'failed', 'dead'];
+/** Drop the oldest ids once the set is at its cap. Sets iterate in insertion order. */
+export function remember(seen, id) {
+    seen.add(id);
+    if (seen.size > SEEN_CAP) {
+        for (const old of seen) {
+            seen.delete(old);
+            if (seen.size <= SEEN_CAP) {
+                break;
+            }
+        }
+    }
+}
+/** `t=<unix seconds>,v1=<hex>` over `<t>.<body>`, the way the worker signs. */
+function tv1(body, secret, t, prefix = '') {
+    const v1 = createHmac('sha256', secret).update(`${t}.${prefix}${body}`).digest('hex');
+    return `t=${t},v1=${v1}`;
+}
+/**
+ * The signature headers for one forwarded request, self-checked.
+ *
+ * Returns the headers to merge, or a message naming what went wrong — which
+ * can only be a bug in this CLI, since it signed the bytes itself moments
+ * earlier. See this file's header for why both headers are minted.
+ */
+export function signedForwardHeaders(input) {
+    const t = Math.floor(input.nowMs / 1000).toString();
+    const { plan, body, secret, nowMs } = input;
+    const legacy = tv1(body, secret, t);
+    const legacyCheck = verifyChatlySignature({
+        surface: plan.surface,
+        body,
+        headers: { [plan.legacyHeader]: legacy },
+        secret,
+        nowMs,
+        // The v2 header is minted below and lives in the same bag on the wire;
+        // this check is specifically of the LEGACY construction, so the policy
+        // that would prefer v2 has to be off.
+        v2: 'ignore',
+    });
+    if (!legacyCheck.ok) {
+        return { ok: false, message: `${legacyCheck.reason}: ${legacyCheck.message}` };
+    }
+    const headers = { [plan.legacyHeader]: legacy };
+    if (plan.timestampHeader !== null) {
+        headers[plan.timestampHeader] = t;
+    }
+    /*
+     * The unified v2 header. `method` is POST because that is what this
+     * forwards, and `path` is the target's own path — the receiver verifies
+     * the request IT received, so the path in the digest has to be the one on
+     * that request line.
+     */
+    const path = chatlyV2SigningPath(input.targetUrl);
+    if (path === null) {
+        return { ok: false, message: `--forward-to "${input.targetUrl}" is not a URL` };
+    }
+    /*
+     * Through the shared signer, so this emits the `b=t` base marker.
+     *
+     * It used to build the value by hand, and its own docblock said "the
+     * platform does not send this on either surface yet" — which is now false
+     * for both. Worse, a hand-rolled value carries no marker, and an absent
+     * marker means the LEGACY `<t>.<rawBody>` construction: a receiver reading
+     * `b=` to decide what to verify would have been told, by the one tool whose
+     * job is to rehearse production, that the unified base is the body base.
+     *
+     * From `@chatlychat/sdk-node`, NOT from `@livechat/shared`. This package
+     * builds with plain `tsc` and publishes `dist` declaring only the SDK, so
+     * an import of the internal scope would emit a reference to a package that
+     * is not on npm and `npm i -g @chatlychat/cli` would fail at run time with
+     * MODULE_NOT_FOUND — a break no test here would see, because in the
+     * monorepo the import resolves. The SDK's copy is held byte-for-byte
+     * against the one the API and worker send with by
+     * `packages/shared/src/webhook-signature/v2.parity.spec.ts`, so this still
+     * teaches exactly the shape production sends.
+     */
+    const v2 = signChatlyV2({
+        base: 'target',
+        secret,
+        timestampSeconds: Number(t),
+        method: 'POST',
+        path,
+        body,
+    });
+    const v2Check = verifyChatlySignature({
+        surface: 'unified_v2',
+        body,
+        headers: { 'x-chatly-signature-v2': v2 },
+        secret,
+        method: 'POST',
+        path,
+        nowMs,
+    });
+    if (!v2Check.ok) {
+        return { ok: false, message: `${v2Check.reason}: ${v2Check.message}` };
+    }
+    headers['x-chatly-signature-v2'] = v2;
+    return { ok: true, headers };
+}
+/** POST one event on, verifying the headers we just minted before sending. */
+export async function forward(opts, deps, req) {
+    if (opts.forwardTo === null) {
+        return false;
+    }
+    const headers = {
+        'content-type': 'application/json',
+        ...req.headers,
+        // Not a header Chatly sends. A handler that logs it can tell a replayed
+        // local forward from a real delivery, which matters the first time
+        // somebody points this at a staging environment.
+        'x-chatly-cli-forwarded': '1',
+    };
+    if (opts.secret !== null) {
+        const signed = signedForwardHeaders({
+            plan: req.plan,
+            body: req.body,
+            secret: opts.secret,
+            nowMs: deps.now(),
+            targetUrl: opts.forwardTo,
+        });
+        if (!signed.ok) {
+            deps.err(`refusing to forward ${req.id}: the signature this CLI minted does not verify ` +
+                `(${signed.message}). This is a bug in chatly listen, not in your handler — ` +
+                'please report it.\n');
+            return false;
+        }
+        Object.assign(headers, signed.headers);
+    }
+    try {
+        const res = await deps.fetchFn(opts.forwardTo, {
+            method: 'POST',
+            headers,
+            body: req.body,
+            signal: deps.signal,
+        });
+        if (!res.ok) {
+            deps.err(`   ↳ ${opts.forwardTo} answered ${String(res.status)}. ` +
+                (res.status === 401 || res.status === 403
+                    ? 'That is usually signature verification — check --secret matches the endpoint.\n'
+                    : '\n'));
+            return false;
+        }
+        deps.out(`   ↳ ${String(res.status)} from ${opts.forwardTo}`);
+        return true;
+    }
+    catch (err) {
+        const reason = err instanceof Error ? err.message : String(err);
+        deps.err(`   ↳ ${opts.forwardTo} unreachable: ${reason}. Is your server running on that port?\n`);
+        return false;
+    }
+}
+function parseEventFilter(args) {
+    const raw = args.flags['event'];
+    if (raw === undefined) {
+        return null;
+    }
+    const list = (Array.isArray(raw) ? raw : [String(raw)]).flatMap((v) => v
+        .split(',')
+        .map((s) => s.trim())
+        .filter((s) => s.length > 0));
+    return list.length === 0 ? null : new Set(list);
+}
+/**
+ * Read the flags, refusing anything that cannot work, with the fix named.
+ *
+ * The two secret prefixes are the one refusal worth reading twice: a webhook
+ * endpoint's secret is `whsec_` and an external agent's is `chsec_`, they are
+ * minted by different routes, and neither verifies the other's traffic. The
+ * symptom of crossing them is a 401 from your own handler, which looks
+ * exactly like a verifier bug.
+ */
+export function parseListenOptions(args) {
+    const forwardTo = str(args.flags, 'forward-to') ?? null;
+    if (forwardTo !== null) {
+        let parsed = null;
+        try {
+            parsed = new URL(forwardTo);
+        }
+        catch {
+            parsed = null;
+        }
+        /*
+         * One message for both failures, because `localhost:3000` — the mistake
+         * everyone makes — hits the SECOND branch, not the first: the WHATWG
+         * parser reads `localhost:` as a SCHEME and succeeds. A test caught this
+         * command telling a developer who typed `localhost:3000` that the scheme
+         * `"localhost:"` was unsupported, which is true and useless.
+         */
+        if (parsed === null || (parsed.protocol !== 'http:' && parsed.protocol !== 'https:')) {
+            throw new Error(`--forward-to "${forwardTo}" is not an http(s) URL${parsed === null ? '' : ` (it parsed as the scheme "${parsed.protocol}")`}. Include the scheme:\n` + '  chatly listen --forward-to http://localhost:3000/webhooks');
+        }
+    }
+    const botId = str(args.flags, 'bot') ?? null;
+    const endpointId = str(args.flags, 'endpoint') ?? null;
+    if (botId !== null && endpointId !== null) {
+        throw new Error('--bot and --endpoint tail different ledgers and cannot be combined. --bot <id> tails one ' +
+            "external agent's push deliveries; --endpoint <id> tails one webhook subscription's.");
+    }
+    const intervalSeconds = num(args.flags, 'interval') ?? DEFAULT_INTERVAL_SECONDS;
+    if (intervalSeconds < MIN_INTERVAL_SECONDS) {
+        throw new Error(`--interval ${String(intervalSeconds)} is below the ${String(MIN_INTERVAL_SECONDS)}s floor. ` +
+            'This polls a real API on your own rate limit; a tighter loop buys nothing, because the ' +
+            'delivery row is written after the attempt completes.');
+    }
+    const pageLimit = num(args.flags, 'limit') ?? DEFAULT_PAGE_LIMIT;
+    if (pageLimit < 1) {
+        throw new Error(`--limit ${String(pageLimit)} must be at least 1.`);
+    }
+    const replay = num(args.flags, 'replay') ?? 0;
+    if (replay < 0) {
+        throw new Error(`--replay ${String(replay)} cannot be negative.`);
+    }
+    if (replay > pageLimit) {
+        throw new Error(`--replay ${String(replay)} is more than --limit ${String(pageLimit)}, and this command ` +
+            'only ever reads one page per poll. Raise --limit to match.');
+    }
+    const status = str(args.flags, 'status') ?? null;
+    if (botId !== null && status !== null && !DELIVERY_STATUSES.includes(status)) {
+        // The route validates this against a zod enum and answers 400, not an
+        // empty page. Refusing here names the four words.
+        throw new Error(`--status "${status}" is not one of ${DELIVERY_STATUSES.join(', ')}. ` +
+            '`failed` will be retried; `dead` will not.');
+    }
+    const secret = str(args.flags, 'secret') ?? null;
+    if (secret !== null && botId === null && !secret.startsWith('whsec_')) {
+        throw new Error(`--secret should be the endpoint's whsec_ signing secret (got "${secret.slice(0, 6)}…").\n` +
+            'It is returned exactly once, by `chatly webhooks create`, and by no other route — if ' +
+            'you no longer have it, create another endpoint.\n' +
+            "With --bot, pass the AGENT's chsec_ secret instead; the two do not verify each other's " +
+            'traffic.');
+    }
+    if (secret !== null && botId !== null && !secret.startsWith('chsec_')) {
+        throw new Error(`--secret should be the external agent's chsec_ signing secret (got "${secret.slice(0, 6)}…").\n` +
+            'It is shown once by `chatly bots create` and once by `chatly bots rotate-secret <id>`, ' +
+            'and no read route returns it.\n' +
+            "A webhook endpoint's whsec_ secret signs a different surface and will not verify here.");
+    }
+    return {
+        forwardTo,
+        botId,
+        endpointId,
+        events: parseEventFilter(args),
+        status,
+        secret,
+        intervalMs: intervalSeconds * 1000,
+        replay,
+        pageLimit,
+        json: bool(args.flags, 'json'),
+    };
+}
+/** An abortable sleep, so Ctrl-C does not wait out the poll interval. */
+export function sleepUntilAborted(ms, signal) {
+    return new Promise((resolve) => {
+        if (signal.aborted) {
+            resolve();
+            return;
+        }
+        const timer = setTimeout(() => {
+            signal.removeEventListener('abort', onAbort);
+            resolve();
+        }, ms);
+        function onAbort() {
+            clearTimeout(timer);
+            resolve();
+        }
+        signal.addEventListener('abort', onAbort, { once: true });
+    });
+}
+//# sourceMappingURL=listen-core.js.map

package/dist/commands/listen-core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"listen-core.js","sourceRoot":"","sources":["../../src/commands/listen-core.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAEhG,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAmB,MAAM,YAAY,CAAC;AAe7D,MAAM,CAAC,MAAM,iBAAiB,GAAa;IACzC,OAAO,EAAE,eAAe;IACxB,YAAY,EAAE,sBAAsB;IACpC,eAAe,EAAE,sBAAsB;CACxC,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAa;IACvC,OAAO,EAAE,gBAAgB;IACzB,YAAY,EAAE,oBAAoB;IAClC,eAAe,EAAE,IAAI;CACtB,CAAC;AA4CF,6DAA6D;AAC7D,MAAM,QAAQ,GAAG,KAAK,CAAC;AAEvB,MAAM,wBAAwB,GAAG,CAAC,CAAC;AACnC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAC/B,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAE9B;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAU,CAAC;AAErF,uFAAuF;AACvF,MAAM,UAAU,QAAQ,CAAC,IAAiB,EAAE,EAAU;IACpD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACb,IAAI,IAAI,CAAC,IAAI,GAAG,QAAQ,EAAE,CAAC;QACzB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjB,IAAI,IAAI,CAAC,IAAI,IAAI,QAAQ,EAAE,CAAC;gBAC1B,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,SAAS,GAAG,CAAC,IAAY,EAAE,MAAc,EAAE,CAAS,EAAE,MAAM,GAAG,EAAE;IAC/D,MAAM,EAAE,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,MAAM,GAAG,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACtF,OAAO,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;AAC3B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAOpC;IACC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;IACpD,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAE5C,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IACpC,MAAM,WAAW,GAAG,qBAAqB,CAAC;QACxC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,IAAI;QACJ,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE;QACxC,MAAM;QACN,KAAK;QACL,uEAAuE;QACvE,uEAAuE;QACvE,sCAAsC;QACtC,EAAE,EAAE,QAAQ;KACb,CAAC,CAAC;IACH,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;QACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC,MAAM,KAAK,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;IACjF,CAAC;IAED,MAAM,OAAO,GAA2B,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxE,IAAI,IAAI,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;QAClC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC;IAED;;;;;OAKG;IACH,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAClD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,iBAAiB,KAAK,CAAC,SAAS,gBAAgB,EAAE,CAAC;IAClF,CAAC;IACD;;;;;;;;;;;;;;;;;;;OAmBG;IACH,MAAM,EAAE,GAAG,YAAY,CAAC;QACtB,IAAI,EAAE,QAAQ;QACd,MAAM;QACN,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC;QAC3B,MAAM,EAAE,MAAM;QACd,IAAI;QACJ,IAAI;KACL,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,qBAAqB,CAAC;QACpC,OAAO,EAAE,YAAY;QACrB,IAAI;QACJ,OAAO,EAAE,EAAE,uBAAuB,EAAE,EAAE,EAAE;QACxC,MAAM;QACN,MAAM,EAAE,MAAM;QACd,IAAI;QACJ,KAAK;KACN,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;IACzE,CAAC;IACD,OAAO,CAAC,uBAAuB,CAAC,GAAG,EAAE,CAAC;IAEtC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC;AAYD,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,IAAmB,EACnB,IAAgB,EAChB,GAAmB;IAEnB,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,kBAAkB;QAClC,GAAG,GAAG,CAAC,OAAO;QACd,wEAAwE;QACxE,mEAAmE;QACnE,iDAAiD;QACjD,wBAAwB,EAAE,GAAG;KAC9B,CAAC;IAEF,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,oBAAoB,CAAC;YAClC,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE;YACjB,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,IAAI,CAAC,GAAG,CACN,uBAAuB,GAAG,CAAC,EAAE,kDAAkD;gBAC7E,IAAI,MAAM,CAAC,OAAO,2DAA2D;gBAC7E,qBAAqB,CACxB,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE;YAC7C,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,IAAI,CAAC,GAAG,CACN,QAAQ,IAAI,CAAC,SAAS,aAAa,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI;gBACvD,CAAC,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;oBACvC,CAAC,CAAC,iFAAiF;oBACnF,CAAC,CAAC,IAAI,CAAC,CACZ,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,QAAQ,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,IAAI,CAAC,GAAG,CACN,QAAQ,IAAI,CAAC,SAAS,iBAAiB,MAAM,0CAA0C,CACxF,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAgB;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CACpE,CAAC;SACE,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAC/B,CAAC;IACF,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAgB;IACjD,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,IAAI,CAAC;IACxD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,IAAI,MAAM,GAAe,IAAI,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;QACD;;;;;;WAMG;QACH,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,EAAE,CAAC;YACrF,MAAM,IAAI,KAAK,CACb,iBAAiB,SAAS,0BACxB,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,8BAA8B,MAAM,CAAC,QAAQ,IACtE,yBAAyB,GAAG,6DAA6D,CAC1F,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC;IAC7C,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,IAAI,CAAC;IACvD,IAAI,KAAK,KAAK,IAAI,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CACb,2FAA2F;YACzF,qFAAqF,CACxF,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,wBAAwB,CAAC;IAChF,IAAI,eAAe,GAAG,oBAAoB,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CACb,cAAc,MAAM,CAAC,eAAe,CAAC,iBAAiB,MAAM,CAAC,oBAAoB,CAAC,WAAW;YAC3F,yFAAyF;YACzF,sDAAsD,CACzD,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,kBAAkB,CAAC;IACjE,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,WAAW,MAAM,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,YAAY,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,MAAM,GAAG,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,YAAY,MAAM,CAAC,MAAM,CAAC,yBAAyB,MAAM,CAAC,SAAS,CAAC,qBAAqB;YACvF,4DAA4D,CAC/D,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC;IACjD,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,MAAe,CAAC,EAAE,CAAC;QACtF,sEAAsE;QACtE,kDAAkD;QAClD,MAAM,IAAI,KAAK,CACb,aAAa,MAAM,mBAAmB,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YACpE,4CAA4C,CAC/C,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC;IACjD,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CACb,iEAAiE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ;YACzF,uFAAuF;YACvF,mDAAmD;YACnD,yFAAyF;YACzF,UAAU,CACb,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CACb,uEAAuE,MAAM,CAAC,KAAK,CACjF,CAAC,EACD,CAAC,CACF,QAAQ;YACP,yFAAyF;YACzF,iCAAiC;YACjC,wFAAwF,CAC3F,CAAC;IACJ,CAAC;IAED,OAAO;QACL,SAAS;QACT,KAAK;QACL,UAAU;QACV,MAAM,EAAE,gBAAgB,CAAC,IAAI,CAAC;QAC9B,MAAM;QACN,MAAM;QACN,UAAU,EAAE,eAAe,GAAG,IAAI;QAClC,MAAM;QACN,SAAS;QACT,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC;KAC/B,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,iBAAiB,CAAC,EAAU,EAAE,MAAmB;IAC/D,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QACnC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,OAAO,EAAE,CAAC;QACZ,CAAC,EAAE,EAAE,CAAC,CAAC;QACP,SAAS,OAAO;YACd,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/listen-relay-harness.d.ts

@@ -0,0 +1,80 @@
+/**
+ * The scripted server, the frame fixture and the deps both relay specs drive.
+ *
+ * Extracted when `listen-relay.spec.ts` crossed the 650-line ceiling and had
+ * to become two files. It is a FIXTURE module and not a spec: nothing here
+ * asserts anything, and both specs' caveats live on them rather than here.
+ *
+ * ── The one thing worth repeating here ───────────────────────────────────
+ *
+ * The "server" is a fake `fetch` under the REAL `ChatlyClient`, so the SDK's
+ * transport, retries and error mapping all run. What it CANNOT do is tell you
+ * the server answers this way: `server()` answers what
+ * `RELAY-SERVER-SPEC.md` says, which is the contract and not an observation.
+ * A fake that agrees with whatever it is asked is how four mobile SDKs
+ * shipped a realtime client that could not connect.
+ *
+ * (Original header follows.)
+ *
+ * `chatly listen --relay` — the CLI half, against a scripted server.
+ *
+ * ═══ WHAT THIS CAN AND CANNOT PROVE ═══════════════════════════════════════
+ *
+ * The server half is `apps/api/src/modules/relay/`, but this spec does not run
+ * it: the "server" here is a fake `fetch` under the REAL `ChatlyClient` — the
+ * SDK's transport, retries and error mapping all run — answering the routes
+ * `RELAY-SERVER-SPEC.md` defines.
+ * That proves what the CLI SENDS (the attach body, the answer it posts, the
+ * request it makes to localhost and its signature) and how it reacts to each
+ * answer the spec allows. It cannot prove the server will answer that way,
+ * and nothing here should be read as evidence that a relay works end to end.
+ *
+ * Assertions are on the requests the CLI made, not on a canned response it
+ * echoed: a fake that agrees with whatever it is asked is how four mobile
+ * SDKs shipped a realtime client that could not connect.
+ */
+import { ChatlyClient } from '@chatlychat/sdk-node';
+import { type RelayFrame, type RelayOptions } from './listen-relay.js';
+import type { ListenDeps } from './listen-core.js';
+export declare const NOW_MS = 1760000000123;
+export declare const SESSION = "rs_1";
+export declare const TOOL = "tool_orders";
+export declare const CARD = "card_billing";
+export declare const CANVAS = "ch_web";
+export declare const SECRET = "tool-secret-from-the-form";
+export interface Call {
+    readonly url: string;
+    readonly method: string;
+    readonly headers: Record<string, string>;
+    readonly body: string | null;
+}
+export declare function headersOf(init?: RequestInit): Record<string, string>;
+export declare function frame(over?: Partial<RelayFrame>): RelayFrame;
+export type Answer = {
+    status: number;
+    body?: unknown;
+    code?: string;
+};
+/** A scripted relay server: attach, a queue of poll answers, answer + detach. */
+export declare function server(opts?: {
+    attach?: Answer;
+    polls?: ReadonlyArray<Answer>;
+}): {
+    chatly: ChatlyClient;
+    calls: Call[];
+};
+/** The local handler: records every forward, answers as scripted. */
+export declare function harness(over?: {
+    respond?: (call: Call) => Response | Promise<Response>;
+    now?: () => number;
+    maxPolls?: number;
+    signal?: AbortSignal;
+}): {
+    deps: ListenDeps;
+    forwards: Call[];
+    out: string[];
+    err: string[];
+};
+export declare function options(argv: string): RelayOptions;
+export declare const ALL = "--tool tool_orders --card card_billing --canvas ch_web --forward-to http://localhost:3000";
+//# sourceMappingURL=listen-relay-harness.d.ts.map

package/dist/commands/listen-relay-harness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"listen-relay-harness.d.ts","sourceRoot":"","sources":["../../src/commands/listen-relay-harness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAGpD,OAAO,EAEL,KAAK,UAAU,EACf,KAAK,YAAY,EAClB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,eAAO,MAAM,MAAM,gBAAoB,CAAC;AACxC,eAAO,MAAM,OAAO,SAAS,CAAC;AAC9B,eAAO,MAAM,IAAI,gBAAgB,CAAC;AAClC,eAAO,MAAM,IAAI,iBAAiB,CAAC;AACnC,eAAO,MAAM,MAAM,WAAW,CAAC;AAC/B,eAAO,MAAM,MAAM,8BAA8B,CAAC;AAElD,MAAM,WAAW,IAAI;IACnB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,wBAAgB,SAAS,CAAC,IAAI,CAAC,EAAE,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAMpE;AAED,wBAAgB,KAAK,CAAC,IAAI,GAAE,OAAO,CAAC,UAAU,CAAM,GAAG,UAAU,CAgBhE;AAED,MAAM,MAAM,MAAM,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvE,iFAAiF;AACjF,wBAAgB,MAAM,CAAC,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;CAAO,GAAG;IACrF,MAAM,EAAE,YAAY,CAAC;IACrB,KAAK,EAAE,IAAI,EAAE,CAAC;CACf,CAyDA;AAED,qEAAqE;AACrE,wBAAgB,OAAO,CACrB,IAAI,GAAE;IACJ,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvD,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,WAAW,CAAC;CACjB,GACL;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;IAAC,GAAG,EAAE,MAAM,EAAE,CAAC;IAAC,GAAG,EAAE,MAAM,EAAE,CAAA;CAAE,CAiCtE;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAElD;AAED,eAAO,MAAM,GAAG,8FAAwF,CAAC"}

package/dist/commands/listen-relay-harness.js

@@ -0,0 +1,163 @@
+/**
+ * The scripted server, the frame fixture and the deps both relay specs drive.
+ *
+ * Extracted when `listen-relay.spec.ts` crossed the 650-line ceiling and had
+ * to become two files. It is a FIXTURE module and not a spec: nothing here
+ * asserts anything, and both specs' caveats live on them rather than here.
+ *
+ * ── The one thing worth repeating here ───────────────────────────────────
+ *
+ * The "server" is a fake `fetch` under the REAL `ChatlyClient`, so the SDK's
+ * transport, retries and error mapping all run. What it CANNOT do is tell you
+ * the server answers this way: `server()` answers what
+ * `RELAY-SERVER-SPEC.md` says, which is the contract and not an observation.
+ * A fake that agrees with whatever it is asked is how four mobile SDKs
+ * shipped a realtime client that could not connect.
+ *
+ * (Original header follows.)
+ *
+ * `chatly listen --relay` — the CLI half, against a scripted server.
+ *
+ * ═══ WHAT THIS CAN AND CANNOT PROVE ═══════════════════════════════════════
+ *
+ * The server half is `apps/api/src/modules/relay/`, but this spec does not run
+ * it: the "server" here is a fake `fetch` under the REAL `ChatlyClient` — the
+ * SDK's transport, retries and error mapping all run — answering the routes
+ * `RELAY-SERVER-SPEC.md` defines.
+ * That proves what the CLI SENDS (the attach body, the answer it posts, the
+ * request it makes to localhost and its signature) and how it reacts to each
+ * answer the spec allows. It cannot prove the server will answer that way,
+ * and nothing here should be read as evidence that a relay works end to end.
+ *
+ * Assertions are on the requests the CLI made, not on a canned response it
+ * echoed: a fake that agrees with whatever it is asked is how four mobile
+ * SDKs shipped a realtime client that could not connect.
+ */
+import { ChatlyClient } from '@chatlychat/sdk-node';
+import { parseRelayOptions, } from './listen-relay.js';
+import { parseArgs } from '../args.js';
+export const NOW_MS = 1_760_000_000_123;
+export const SESSION = 'rs_1';
+export const TOOL = 'tool_orders';
+export const CARD = 'card_billing';
+export const CANVAS = 'ch_web';
+export const SECRET = 'tool-secret-from-the-form';
+export function headersOf(init) {
+    const h = init?.headers;
+    if (h instanceof Headers) {
+        return Object.fromEntries(h.entries());
+    }
+    return { ...(h ?? {}) };
+}
+export function frame(over = {}) {
+    return {
+        id: 'fr_1',
+        kind: 'ai_tool_call',
+        targetId: TOOL,
+        method: 'GET',
+        path: '/orders/42?expand=items',
+        headers: {
+            'x-chatly-contact-external-id': 'u_7',
+            'x-chatly-identity-verified': 'true',
+            'x-chatly-conversation-id': 'c_1',
+        },
+        body: '',
+        deadlineAt: new Date(NOW_MS + 30_000).toISOString(),
+        ...over,
+    };
+}
+/** A scripted relay server: attach, a queue of poll answers, answer + detach. */
+export function server(opts = {}) {
+    const calls = [];
+    let poll = 0;
+    const fetchFn = (async (url, init) => {
+        const href = String(url);
+        const method = init?.method ?? 'GET';
+        calls.push({
+            url: href,
+            method,
+            headers: headersOf(init),
+            body: typeof init?.body === 'string' ? init.body : null,
+        });
+        const path = new URL(href).pathname;
+        const reply = (a) => {
+            if (a.status === 204) {
+                return new Response(null, { status: 204 });
+            }
+            const body = a.code === undefined ? (a.body ?? {}) : { error: { code: a.code, message: a.code } };
+            return new Response(JSON.stringify(body), {
+                status: a.status,
+                headers: { 'content-type': 'application/json' },
+            });
+        };
+        if (method === 'POST' && path === '/v1/relay-sessions') {
+            return reply(opts.attach ?? {
+                status: 201,
+                body: { id: SESSION, attachedBy: { displayName: 'key "laptop" (Ada)' } },
+            });
+        }
+        if (method === 'GET' && path === `/v1/relay-sessions/${SESSION}/frames`) {
+            const list = opts.polls ?? [{ status: 200, body: { frames: [] } }];
+            const a = list[Math.min(poll, list.length - 1)] ?? { status: 200, body: { frames: [] } };
+            poll += 1;
+            return reply(a);
+        }
+        if (method === 'POST' && path.startsWith(`/v1/relay-sessions/${SESSION}/frames/`)) {
+            return reply({ status: 202, body: { accepted: true } });
+        }
+        if (method === 'DELETE' && path === `/v1/relay-sessions/${SESSION}`) {
+            return reply({ status: 204 });
+        }
+        return reply({ status: 599, body: { unexpected: path } });
+    });
+    return {
+        chatly: new ChatlyClient({
+            apiKey: 'ck_test',
+            apiUrl: 'https://api.test',
+            fetchFn,
+            sleepFn: async () => undefined,
+            retry: { attempts: 1 },
+        }),
+        calls,
+    };
+}
+/** The local handler: records every forward, answers as scripted. */
+export function harness(over = {}) {
+    const forwards = [];
+    const out = [];
+    const err = [];
+    const fetchFn = (async (url, init) => {
+        const call = {
+            url: String(url),
+            method: init?.method ?? 'GET',
+            headers: headersOf(init),
+            body: typeof init?.body === 'string' ? init.body : null,
+        };
+        forwards.push(call);
+        return over.respond === undefined
+            ? new Response('{"ok":true}', {
+                status: 200,
+                headers: { 'content-type': 'application/json' },
+            })
+            : over.respond(call);
+    });
+    return {
+        deps: {
+            fetchFn,
+            now: over.now ?? (() => NOW_MS),
+            sleep: async () => undefined,
+            signal: over.signal ?? new AbortController().signal,
+            out: (l) => out.push(l),
+            err: (l) => err.push(l),
+            maxPolls: over.maxPolls ?? 1,
+        },
+        forwards,
+        out,
+        err,
+    };
+}
+export function options(argv) {
+    return parseRelayOptions(parseArgs(['listen', '--relay', ...argv.split(' ').filter(Boolean)]));
+}
+export const ALL = `--tool ${TOOL} --card ${CARD} --canvas ${CANVAS} --forward-to http://localhost:3000`;
+//# sourceMappingURL=listen-relay-harness.js.map

package/dist/commands/listen-relay-harness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"listen-relay-harness.js","sourceRoot":"","sources":["../../src/commands/listen-relay-harness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAGpD,OAAO,EACL,iBAAiB,GAGlB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAIvC,MAAM,CAAC,MAAM,MAAM,GAAG,iBAAiB,CAAC;AACxC,MAAM,CAAC,MAAM,OAAO,GAAG,MAAM,CAAC;AAC9B,MAAM,CAAC,MAAM,IAAI,GAAG,aAAa,CAAC;AAClC,MAAM,CAAC,MAAM,IAAI,GAAG,cAAc,CAAC;AACnC,MAAM,CAAC,MAAM,MAAM,GAAG,QAAQ,CAAC;AAC/B,MAAM,CAAC,MAAM,MAAM,GAAG,2BAA2B,CAAC;AASlD,MAAM,UAAU,SAAS,CAAC,IAAkB;IAC1C,MAAM,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;IACxB,IAAI,CAAC,YAAY,OAAO,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,EAAE,GAAI,CAAC,CAAC,IAAI,EAAE,CAA4B,EAAE,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,OAA4B,EAAE;IAClD,OAAO;QACL,EAAE,EAAE,MAAM;QACV,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,yBAAyB;QAC/B,OAAO,EAAE;YACP,8BAA8B,EAAE,KAAK;YACrC,4BAA4B,EAAE,MAAM;YACpC,0BAA0B,EAAE,KAAK;SAClC;QACD,IAAI,EAAE,EAAE;QACR,UAAU,EAAE,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE;QACnD,GAAG,IAAI;KACR,CAAC;AACJ,CAAC;AAID,iFAAiF;AACjF,MAAM,UAAU,MAAM,CAAC,OAA2D,EAAE;IAIlF,MAAM,KAAK,GAAW,EAAE,CAAC;IACzB,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,MAAM,OAAO,GAAG,CAAC,KAAK,EAAE,GAAiB,EAAE,IAAkB,EAAE,EAAE;QAC/D,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,KAAK,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC;YACT,GAAG,EAAE,IAAI;YACT,MAAM;YACN,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC;YACxB,IAAI,EAAE,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;SACxD,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC;QACpC,MAAM,KAAK,GAAG,CAAC,CAAS,EAAY,EAAE;YACpC,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACrB,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAC7C,CAAC;YACD,MAAM,IAAI,GACR,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACvF,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;gBACxC,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;aAChD,CAAC,CAAC;QACL,CAAC,CAAC;QACF,IAAI,MAAM,KAAK,MAAM,IAAI,IAAI,KAAK,oBAAoB,EAAE,CAAC;YACvD,OAAO,KAAK,CACV,IAAI,CAAC,MAAM,IAAI;gBACb,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,WAAW,EAAE,oBAAoB,EAAE,EAAE;aACzE,CACF,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,KAAK,KAAK,IAAI,IAAI,KAAK,sBAAsB,OAAO,SAAS,EAAE,CAAC;YACxE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;YACnE,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC;YACzF,IAAI,IAAI,CAAC,CAAC;YACV,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,IAAI,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,sBAAsB,OAAO,UAAU,CAAC,EAAE,CAAC;YAClF,OAAO,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,MAAM,KAAK,QAAQ,IAAI,IAAI,KAAK,sBAAsB,OAAO,EAAE,EAAE,CAAC;YACpE,OAAO,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAChC,CAAC;QACD,OAAO,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC5D,CAAC,CAA4B,CAAC;IAE9B,OAAO;QACL,MAAM,EAAE,IAAI,YAAY,CAAC;YACvB,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,kBAAkB;YAC1B,OAAO;YACP,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;YAC9B,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE;SACvB,CAAC;QACF,KAAK;KACN,CAAC;AACJ,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,OAAO,CACrB,OAKI,EAAE;IAEN,MAAM,QAAQ,GAAW,EAAE,CAAC;IAC5B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,OAAO,GAAG,CAAC,KAAK,EAAE,GAAiB,EAAE,IAAkB,EAAE,EAAE;QAC/D,MAAM,IAAI,GAAS;YACjB,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC;YAChB,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,KAAK;YAC7B,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC;YACxB,IAAI,EAAE,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;SACxD,CAAC;QACF,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,OAAO,IAAI,CAAC,OAAO,KAAK,SAAS;YAC/B,CAAC,CAAC,IAAI,QAAQ,CAAC,aAAa,EAAE;gBAC1B,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;aAChD,CAAC;YACJ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC,CAA4B,CAAC;IAC9B,OAAO;QACL,IAAI,EAAE;YACJ,OAAO;YACP,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC;YAC/B,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;YAC5B,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC,MAAM;YACnD,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;YACvB,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,CAAC;SAC7B;QACD,QAAQ;QACR,GAAG;QACH,GAAG;KACJ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,IAAY;IAClC,OAAO,iBAAiB,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AACjG,CAAC;AAED,MAAM,CAAC,MAAM,GAAG,GAAG,UAAU,IAAI,WAAW,IAAI,aAAa,MAAM,qCAAqC,CAAC"}