@dsh-enhanced/assistant-actions 0.1.30

package/lib/broker-server.js

@@ -0,0 +1,467 @@
+import { createPublicKey, KeyObject, randomUUID } from 'node:crypto';
+import { chmod, chown, lstat, realpath, rename, unlink } from 'node:fs/promises';
+import { createConnection, createServer } from 'node:net';
+import { dirname, isAbsolute, resolve } from 'node:path';
+import { BrokerFrameDecoder, GITHUB_BROKER_DEFAULT_HELLO_TTL_MS, GITHUB_BROKER_REQUEST_MAX_BYTES, GITHUB_BROKER_RESPONSE_MAX_BYTES, createBrokerAdminResponse, createBrokerServerHello, createBrokerServerResponse, encodeBrokerFrame, verifyBrokerAdminRequest, verifyBrokerClientRequest, verifyBrokerServerHello, } from './broker-protocol.js';
+export class GitHubBrokerServerError extends Error {
+    code;
+    constructor(code, message, options) {
+        super(`assistant-actions broker server: ${message}`, options);
+        this.name = 'GitHubBrokerServerError';
+        this.code = code;
+    }
+}
+const SAFE_CORE_CODES = new Set(['aborted', 'broker-busy', 'broker-draining', 'credential-unavailable', 'deadline-exceeded', 'grant-expired', 'grant-invalid', 'grant-revoked', 'identity-mismatch', 'internal-error', 'policy-changed', 'request-conflict', 'request-invalid', 'target-mismatch', 'transport-failed', 'unsupported-operation']);
+const integer = (value, minimum, maximum) => typeof value === 'number' && Number.isSafeInteger(value) && value >= minimum && value <= maximum;
+const enoent = (error) => !!error && typeof error === 'object' && 'code' in error && error.code === 'ENOENT';
+function failure(code, message, cause) { return new GitHubBrokerServerError(code, message, cause === undefined ? undefined : { cause }); }
+function fileIdentity(stat) { return { dev: BigInt(stat.dev), ino: BigInt(stat.ino), uid: BigInt(stat.uid), gid: BigInt(stat.gid), mode: Number(stat.mode) & 0o7777 }; }
+function sameIdentity(left, right) { return left.dev === right.dev && left.ino === right.ino && left.uid === right.uid && left.gid === right.gid && left.mode === right.mode; }
+function sameInode(left, right) { return left.dev === right.dev && left.ino === right.ino; }
+function timer(callback, timeoutMs) { const value = setTimeout(callback, timeoutMs); value.unref(); return value; }
+function clearTimers(state) { clearTimeout(state.totalTimer); if (state.firstByteTimer)
+    clearTimeout(state.firstByteTimer); if (state.frameTimer)
+    clearTimeout(state.frameTimer); }
+function destroy(state, reason) { if (!state.controller.signal.aborted)
+    state.controller.abort(new Error(reason)); clearTimers(state); if (!state.socket.destroyed)
+    state.socket.destroy(); }
+function safeCoreError(error) {
+    if (!error || typeof error !== 'object')
+        return { code: 'internal-error', dispatched: false };
+    return { code: 'code' in error && typeof error.code === 'string' && SAFE_CORE_CODES.has(error.code) ? error.code : 'internal-error', dispatched: 'dispatched' in error && error.dispatched === true };
+}
+function abortable(operation, signal) {
+    if (signal.aborted)
+        return Promise.reject(signal.reason);
+    return new Promise((resolveOperation, rejectOperation) => {
+        const onAbort = () => { signal.removeEventListener('abort', onAbort); rejectOperation(signal.reason); };
+        signal.addEventListener('abort', onAbort, { once: true });
+        Promise.resolve(operation).then(value => { signal.removeEventListener('abort', onAbort); resolveOperation(value); }, error => { signal.removeEventListener('abort', onAbort); rejectOperation(error); });
+    });
+}
+async function beforeDeadline(operation, deadlineAt, now, message) {
+    let timeout;
+    try {
+        return await Promise.race([operation, new Promise((_resolve, reject) => { timeout = timer(() => reject(failure('shutdown-failed', message)), Math.max(1, deadlineAt - now())); })]);
+    }
+    finally {
+        if (timeout)
+            clearTimeout(timeout);
+    }
+}
+function publicKey(value) {
+    if (value instanceof KeyObject && value.type === 'public')
+        return value;
+    return createPublicKey(value);
+}
+function endpoint(path, uid, gid, parentMode, mode, maxConnections) {
+    if (!isAbsolute(path) || resolve(path) !== path || dirname(path) === path || Buffer.byteLength(path) > 100 || !integer(uid, 0, 0x7fffffff) || !integer(gid, 0, 0x7fffffff)
+        || !integer(parentMode, 0, 0o777) || (parentMode & 0o022) !== 0 || !integer(mode, 0, 0o777) || (mode & 0o007) !== 0
+        || !integer(maxConnections, 1, 1_024))
+        throw failure('invalid-config', 'socket endpoint is invalid');
+    return { path, uid, gid, parentMode, mode, maxConnections };
+}
+function normalize(options) {
+    const action = endpoint(options.actionSocketPath, options.expectedActionSocketUid, options.expectedActionSocketGid, options.expectedActionParentMode, options.expectedActionSocketMode, options.maxActionConnections ?? 32);
+    const admin = endpoint(options.adminSocketPath, options.expectedAdminSocketUid, options.expectedAdminSocketGid, options.expectedAdminParentMode, options.expectedAdminSocketMode, options.maxAdminConnections ?? 4);
+    const result = { ...options, action, admin, maxConcurrentRequests: options.maxConcurrentRequests ?? 2, firstByteTimeoutMs: options.firstByteTimeoutMs ?? 2_000, frameTimeoutMs: options.frameTimeoutMs ?? 10_000, totalTimeoutMs: options.totalTimeoutMs ?? 30_000, helloTtlMs: options.helloTtlMs ?? GITHUB_BROKER_DEFAULT_HELLO_TTL_MS, staleProbeTimeoutMs: options.staleProbeTimeoutMs ?? 500, drainTimeoutMs: options.drainTimeoutMs ?? 10_000, now: options.now ?? Date.now };
+    let signingKeysValid = false, sameSigningKey = true;
+    try {
+        const server = publicKey(result.serverPrivateKey), client = publicKey(result.clientPublicKey), admin = publicKey(result.adminPublicKey);
+        signingKeysValid = server.asymmetricKeyType === 'ed25519' && client.asymmetricKeyType === 'ed25519' && admin.asymmetricKeyType === 'ed25519';
+        sameSigningKey = client.equals(admin) || server.equals(client) || server.equals(admin);
+    }
+    catch { /* rejected below without binding */ }
+    if (action.path === admin.path || !result.instanceId || result.instanceId.length > 128 || !result.clientKeyId || result.clientKeyId.length > 128 || !result.adminKeyId || result.adminKeyId.length > 128
+        || result.clientKeyId === result.adminKeyId || !signingKeysValid || sameSigningKey
+        || !integer(result.generation, 1, Number.MAX_SAFE_INTEGER) || typeof result.inspectPeerCredentials !== 'function' || typeof result.core?.snapshot !== 'function' || typeof result.core?.execute !== 'function' || typeof result.core?.admin !== 'function' || typeof result.core?.beginDrain !== 'function' || typeof result.core?.drain !== 'function' || typeof result.core?.close !== 'function'
+        || !integer(result.expectedClientPeerUid, 0, 0x7fffffff) || !integer(result.expectedClientPeerGid, 0, 0x7fffffff) || !integer(result.expectedAdminPeerUid, 0, 0x7fffffff) || !integer(result.expectedAdminPeerGid, 0, 0x7fffffff)
+        || !integer(result.maxConcurrentRequests, 1, action.maxConnections) || !integer(result.firstByteTimeoutMs, 1, 60_000) || !integer(result.frameTimeoutMs, result.firstByteTimeoutMs, 300_000)
+        || !integer(result.totalTimeoutMs, result.frameTimeoutMs, 300_000) || !integer(result.helloTtlMs, 1, 300_000) || !integer(result.staleProbeTimeoutMs, 1, 10_000) || !integer(result.drainTimeoutMs, 1, 300_000))
+        throw failure('invalid-config', 'server options are invalid');
+    return result;
+}
+async function inspectParent(endpoint) {
+    const parent = dirname(endpoint.path);
+    let cursor = parent;
+    for (;;) {
+        const [canonicalCursor, cursorStat] = await Promise.all([realpath(cursor), lstat(cursor)]);
+        const mode = cursorStat.mode & 0o7777, stickyRoot = cursorStat.uid === 0 && (mode & 0o1000) !== 0 && (mode & 0o022) !== 0;
+        if (canonicalCursor !== cursor || cursorStat.isSymbolicLink() || !cursorStat.isDirectory() || !stickyRoot && (mode & 0o022) !== 0)
+            throw failure('unsafe-parent', 'socket ancestor is unsafe');
+        const next = dirname(cursor);
+        if (next === cursor)
+            break;
+        cursor = next;
+    }
+    let canonical, stat;
+    try {
+        [canonical, stat] = await Promise.all([realpath(parent), lstat(parent)]);
+    }
+    catch (error) {
+        throw failure('unsafe-parent', 'socket parent cannot be inspected', error);
+    }
+    if (canonical !== parent || stat.isSymbolicLink() || !stat.isDirectory() || stat.uid !== endpoint.uid || stat.gid !== endpoint.gid || (stat.mode & 0o7777) !== endpoint.parentMode)
+        throw failure('unsafe-parent', 'socket parent type, ownership, or mode is unsafe');
+    return fileIdentity(stat);
+}
+async function inspectSocket(endpoint) {
+    let stat;
+    try {
+        stat = await lstat(endpoint.path);
+    }
+    catch (error) {
+        if (enoent(error))
+            return undefined;
+        throw failure('unsafe-socket', 'socket path cannot be inspected', error);
+    }
+    if (stat.isSymbolicLink() || !stat.isSocket() || stat.uid !== endpoint.uid || stat.gid !== endpoint.gid || (stat.mode & 0o7777) !== endpoint.mode)
+        throw failure('unsafe-socket', 'socket type, ownership, or mode is unsafe');
+    return fileIdentity(stat);
+}
+async function probe(endpoint, options) {
+    const publicKey = createPublicKey(options.serverPrivateKey);
+    return await new Promise(resolveProbe => {
+        const decoder = new BrokerFrameDecoder(GITHUB_BROKER_RESPONSE_MAX_BYTES, 1), socket = createConnection({ path: endpoint.path });
+        let settled = false;
+        const settle = (result) => { if (settled)
+            return; settled = true; clearTimeout(timeout); socket.removeAllListeners(); socket.destroy(); resolveProbe(result); };
+        const timeout = timer(() => settle('untrusted'), options.staleProbeTimeoutMs);
+        socket.on('data', chunk => { try {
+            const values = decoder.push(chunk);
+            if (values.length === 1) {
+                verifyBrokerServerHello(values[0], publicKey, { maxTtlMs: options.helloTtlMs, expectedInstanceId: options.instanceId, minimumGeneration: 1 });
+                settle('active');
+            }
+        }
+        catch {
+            settle('untrusted');
+        } });
+        socket.once('error', error => settle(error && typeof error === 'object' && 'code' in error && error.code === 'ECONNREFUSED' ? 'refused' : 'untrusted'));
+        socket.once('end', () => settle('untrusted'));
+    });
+}
+async function removeStale(endpoint, options, before) {
+    const result = await probe(endpoint, options);
+    if (result === 'active')
+        throw failure('already-running', 'an authenticated broker is already listening');
+    if (result !== 'refused')
+        throw failure('unsafe-socket', 'existing socket cannot be authenticated or proven stale');
+    const after = await inspectSocket(endpoint);
+    if (!after || !sameIdentity(before, after))
+        throw failure('unsafe-socket', 'socket changed during stale inspection');
+    await unlink(endpoint.path).catch(error => { throw failure('unsafe-socket', 'stale socket cannot be removed', error); });
+}
+async function listen(server, path) {
+    await new Promise((resolveListen, rejectListen) => { const onError = (error) => { server.off('listening', onListen); rejectListen(error); }; const onListen = () => { server.off('error', onError); resolveListen(); }; server.once('error', onError); server.once('listening', onListen); server.listen(path); });
+}
+async function closeServer(server, deadlineAt, now) {
+    if (!server.listening)
+        return;
+    await new Promise((resolveClose, rejectClose) => {
+        const timeout = timer(() => rejectClose(failure('shutdown-failed', 'listener close deadline exceeded')), Math.max(1, deadlineAt - now()));
+        server.close(error => { clearTimeout(timeout); if (error)
+            rejectClose(error);
+        else
+            resolveClose(); });
+    });
+}
+async function closeOwned(listener, deadlineAt, now) {
+    if (!listener.owned) {
+        await closeServer(listener.server, deadlineAt, now);
+        return;
+    }
+    const parked = `${listener.endpoint.path}.replacement-${randomUUID()}`;
+    let parkedIdentity;
+    let parkedExists = false;
+    let problem;
+    try {
+        try {
+            await rename(listener.endpoint.path, parked);
+            parkedExists = true;
+        }
+        catch (error) {
+            if (!enoent(error))
+                throw error;
+        }
+        const stat = await lstat(parked).catch(error => enoent(error) ? undefined : Promise.reject(error));
+        if (stat) {
+            parkedIdentity = fileIdentity(stat);
+            if (!sameInode(parkedIdentity, listener.owned) && (stat.isSymbolicLink() || !stat.isSocket() || stat.uid !== listener.endpoint.uid || stat.gid !== listener.endpoint.gid || (stat.mode & 0o7777) !== listener.endpoint.mode))
+                throw failure('shutdown-failed', 'parked socket is unsafe');
+        }
+    }
+    catch (error) {
+        problem = error;
+    }
+    try {
+        await closeServer(listener.server, deadlineAt, now);
+    }
+    catch (error) {
+        problem ??= error;
+    }
+    try {
+        if (parkedIdentity && sameInode(parkedIdentity, listener.owned))
+            await unlink(parked);
+        else if (parkedIdentity) {
+            if (await lstat(listener.endpoint.path).then(() => true, error => enoent(error) ? false : Promise.reject(error)) || !sameIdentity(parkedIdentity, fileIdentity(await lstat(parked))))
+                throw failure('shutdown-failed', 'replacement socket cannot be restored');
+            await rename(parked, listener.endpoint.path);
+            if (!sameIdentity(parkedIdentity, fileIdentity(await lstat(listener.endpoint.path))))
+                throw failure('shutdown-failed', 'replacement socket changed');
+        }
+    }
+    catch (error) {
+        problem ??= error;
+    }
+    if (problem !== undefined) {
+        if (parkedExists && parkedIdentity && sameInode(parkedIdentity, listener.owned))
+            await unlink(parked).catch(() => undefined);
+        else if (parkedExists) {
+            const destinationMissing = await lstat(listener.endpoint.path).then(() => false, error => enoent(error));
+            if (destinationMissing)
+                await rename(parked, listener.endpoint.path).catch(() => undefined);
+        }
+        if (problem instanceof GitHubBrokerServerError)
+            throw problem;
+        throw failure('shutdown-failed', 'socket preservation failed', problem);
+    }
+}
+async function unlinkOwned(listener) {
+    if (!listener.owned)
+        return;
+    const current = await inspectSocket(listener.endpoint).catch(() => undefined);
+    if (current && sameIdentity(current, listener.owned) && await inspectParent(listener.endpoint).catch(() => undefined))
+        await unlink(listener.endpoint.path).catch(() => undefined);
+}
+export class GitHubBrokerServer {
+    #options;
+    #action;
+    #admin;
+    #accepting = false;
+    #concurrent = 0;
+    #stopping;
+    constructor(options) {
+        this.#options = options;
+        this.#action = this.#listener('action', options.action);
+        this.#admin = this.#listener('admin', options.admin);
+    }
+    #listener(kind, endpoint) {
+        const listener = { kind, endpoint, server: undefined, connections: new Set(), active: new Set() };
+        listener.server = createServer(socket => this.#accept(listener, socket));
+        listener.server.maxConnections = endpoint.maxConnections;
+        return listener;
+    }
+    static async start(raw) {
+        const options = normalize(raw), instance = new GitHubBrokerServer(options);
+        try {
+            await instance.#bind(instance.#action);
+            await instance.#bind(instance.#admin);
+            instance.#accepting = true;
+            return instance;
+        }
+        catch (error) {
+            const deadlineAt = options.now() + options.drainTimeoutMs;
+            await Promise.allSettled([closeOwned(instance.#action, deadlineAt, options.now), closeOwned(instance.#admin, deadlineAt, options.now)]);
+            await Promise.allSettled([unlinkOwned(instance.#action), unlinkOwned(instance.#admin)]);
+            if (error instanceof GitHubBrokerServerError)
+                throw error;
+            throw failure('listen-failed', 'Unix socket bind failed', error);
+        }
+    }
+    async #bind(listener) {
+        const before = await inspectParent(listener.endpoint), existing = await inspectSocket(listener.endpoint);
+        if (existing)
+            await removeStale(listener.endpoint, this.#options, existing);
+        const after = await inspectParent(listener.endpoint);
+        if (!sameIdentity(before, after))
+            throw failure('unsafe-parent', 'socket parent changed during startup');
+        await listen(listener.server, listener.endpoint.path);
+        const provisional = await lstat(listener.endpoint.path);
+        if (provisional.isSymbolicLink() || !provisional.isSocket())
+            throw failure('unsafe-socket', 'newly bound path is not a socket');
+        listener.owned = fileIdentity(provisional);
+        await chown(listener.endpoint.path, listener.endpoint.uid, listener.endpoint.gid);
+        await chmod(listener.endpoint.path, listener.endpoint.mode);
+        const socket = await inspectSocket(listener.endpoint), finalParent = await inspectParent(listener.endpoint);
+        if (!socket || !sameIdentity(after, finalParent))
+            throw failure('unsafe-socket', 'bound socket identity could not be verified');
+        if (!sameInode(listener.owned, socket))
+            throw failure('unsafe-socket', 'bound socket inode changed during startup');
+        listener.owned = socket;
+    }
+    get actionSocketPath() { return this.#action.endpoint.path; }
+    get adminSocketPath() { return this.#admin.endpoint.path; }
+    get accepting() { return this.#accepting; }
+    get activeRequests() { return this.#concurrent; }
+    #accept(listener, socket) {
+        if (!this.#accepting || listener.connections.size >= listener.endpoint.maxConnections) {
+            socket.destroy();
+            return;
+        }
+        const controller = new AbortController();
+        const state = { socket, controller, verified: false, settled: false, totalTimer: timer(() => destroy(state, 'total deadline exceeded'), this.#options.totalTimeoutMs) };
+        listener.connections.add(state);
+        socket.once('close', () => { clearTimers(state); listener.connections.delete(state); if (state.verified && !state.settled)
+            controller.abort(new Error('client disconnected')); });
+        const task = this.#serve(listener.kind, state).finally(() => listener.active.delete(task));
+        listener.active.add(task);
+    }
+    async #serve(kind, state) {
+        try {
+            const peer = await abortable(this.#options.inspectPeerCredentials(state.socket, state.controller.signal), state.controller.signal);
+            if (!peer || !integer(peer.uid, 0, 0x7fffffff) || !integer(peer.gid, 0, 0x7fffffff) || peer.pid !== undefined && !integer(peer.pid, 1, 0x7fffffff))
+                return destroy(state, 'peer credentials rejected');
+            const expectedUid = kind === 'action' ? this.#options.expectedClientPeerUid : this.#options.expectedAdminPeerUid;
+            const expectedGid = kind === 'action' ? this.#options.expectedClientPeerGid : this.#options.expectedAdminPeerGid;
+            if (peer.uid !== expectedUid || peer.gid !== expectedGid)
+                return destroy(state, 'peer role rejected');
+            const now = this.#options.now(), snapshot = this.#options.core.snapshot();
+            if (!integer(snapshot.generation, 1, Number.MAX_SAFE_INTEGER) || snapshot.generation !== this.#options.generation || !integer(snapshot.policyEpoch, 0, Number.MAX_SAFE_INTEGER) || !integer(snapshot.emergencyEpoch, 0, Number.MAX_SAFE_INTEGER))
+                return destroy(state, 'core snapshot rejected');
+            const hello = createBrokerServerHello({ instanceId: this.#options.instanceId, generation: snapshot.generation, policyEpoch: snapshot.policyEpoch, emergencyEpoch: snapshot.emergencyEpoch, expiresAt: now + this.#options.helloTtlMs }, this.#options.serverPrivateKey);
+            state.socket.write(encodeBrokerFrame(hello, GITHUB_BROKER_RESPONSE_MAX_BYTES));
+            if (kind === 'admin')
+                return await this.#serveAdmin(state, hello);
+            await this.#serveAction(state, hello);
+        }
+        catch {
+            destroy(state, 'request rejected');
+        }
+    }
+    async #serveAction(state, hello) {
+        const request = await this.#read(state, raw => verifyBrokerClientRequest(raw, hello, this.#options.clientPublicKey, { now: this.#options.now(), expectedClientKeyId: this.#options.clientKeyId }));
+        if (!request)
+            return;
+        state.verified = true;
+        if (!this.#accepting || this.#concurrent >= this.#options.maxConcurrentRequests)
+            return await this.#replyAction(state, request, { status: 'failed', dispatched: false, result: null, error: { code: this.#accepting ? 'broker-busy' : 'broker-draining' }, completedAt: this.#options.now() }, hello);
+        this.#concurrent++;
+        try {
+            await this.#replyAction(state, request, await abortable(this.#options.core.execute(request, state.controller.signal), state.controller.signal), hello);
+        }
+        catch (error) {
+            const safe = safeCoreError(error);
+            await this.#replyAction(state, request, { status: safe.dispatched ? 'unknown' : 'failed', dispatched: safe.dispatched, result: null, error: { code: safe.code }, completedAt: this.#options.now() }, hello);
+        }
+        finally {
+            this.#concurrent--;
+        }
+    }
+    async #serveAdmin(state, hello) {
+        const request = await this.#read(state, raw => verifyBrokerAdminRequest(raw, hello, this.#options.adminPublicKey, { now: this.#options.now(), expectedAdminKeyId: this.#options.adminKeyId }));
+        if (!request)
+            return;
+        state.verified = true;
+        try {
+            await this.#replyAdmin(state, request, await abortable(this.#options.core.admin(request, state.controller.signal), state.controller.signal), hello);
+        }
+        catch {
+            destroy(state, 'admin request rejected');
+        }
+    }
+    async #read(state, verify) {
+        const decoder = new BrokerFrameDecoder(GITHUB_BROKER_REQUEST_MAX_BYTES, 1);
+        return await new Promise(resolveRequest => {
+            let settled = false, sawByte = false;
+            const settle = (value) => { if (settled)
+                return; settled = true; if (state.firstByteTimer)
+                clearTimeout(state.firstByteTimer); if (state.frameTimer)
+                clearTimeout(state.frameTimer); state.socket.off('data', onData); state.socket.off('end', onEnd); state.controller.signal.removeEventListener('abort', onAbort); resolveRequest(value); };
+            const reject = () => { settle(); destroy(state, 'invalid request frame'); };
+            const onAbort = () => settle();
+            const onEnd = () => { try {
+                decoder.finish();
+            }
+            catch { /* rejected below */ } reject(); };
+            const onData = (chunk) => {
+                if (!sawByte && chunk.length) {
+                    sawByte = true;
+                    if (state.firstByteTimer)
+                        clearTimeout(state.firstByteTimer);
+                    state.frameTimer = timer(reject, this.#options.frameTimeoutMs);
+                }
+                try {
+                    const values = decoder.push(chunk);
+                    if (values.length === 1) {
+                        const request = verify(values[0]);
+                        state.socket.on('data', reject);
+                        settle(request);
+                    }
+                }
+                catch {
+                    reject();
+                }
+            };
+            state.firstByteTimer = timer(reject, this.#options.firstByteTimeoutMs);
+            state.socket.on('data', onData);
+            state.socket.once('end', onEnd);
+            state.controller.signal.addEventListener('abort', onAbort, { once: true });
+        });
+    }
+    async #replyAction(state, request, input, hello) { if (!state.controller.signal.aborted && !state.socket.destroyed)
+        await this.#end(state, encodeBrokerFrame(createBrokerServerResponse(input, request, hello, this.#options.serverPrivateKey), GITHUB_BROKER_RESPONSE_MAX_BYTES)); }
+    async #replyAdmin(state, request, input, hello) { if (!state.controller.signal.aborted && !state.socket.destroyed)
+        await this.#end(state, encodeBrokerFrame(createBrokerAdminResponse(input, request, hello, this.#options.serverPrivateKey), GITHUB_BROKER_RESPONSE_MAX_BYTES)); }
+    async #end(state, frame) { await new Promise((resolveWrite, rejectWrite) => { state.socket.once('error', rejectWrite); state.socket.end(frame, () => { state.socket.off('error', rejectWrite); resolveWrite(); }); }); state.settled = true; }
+    stop(reason = 'lifecycle', timeoutMs = this.#options.drainTimeoutMs) { if (this.#stopping)
+        return this.#stopping; if (!integer(timeoutMs, 1, 300_000))
+        return Promise.reject(failure('invalid-config', 'shutdown timeout is invalid')); this.#stopping = this.#stop(reason, timeoutMs); return this.#stopping; }
+    async #stop(reason, timeoutMs) {
+        this.#accepting = false;
+        const deadlineAt = this.#options.now() + timeoutMs, listeners = [this.#action, this.#admin];
+        let cause;
+        try {
+            await beforeDeadline(Promise.resolve().then(() => this.#options.core.beginDrain(reason)), deadlineAt, this.#options.now, 'begin-drain deadline exceeded');
+        }
+        catch (error) {
+            cause = error;
+        }
+        const closing = Promise.allSettled(listeners.map(listener => closeOwned(listener, deadlineAt, this.#options.now))).then(results => { const rejected = results.find(result => result.status === 'rejected'); if (rejected?.status === 'rejected')
+            cause ??= rejected.reason; });
+        for (const listener of listeners)
+            for (const state of listener.connections)
+                if (!state.verified)
+                    destroy(state, 'server draining');
+        let deadlineTimer;
+        const deadline = new Promise(resolveDeadline => { deadlineTimer = timer(() => resolveDeadline('deadline'), Math.max(1, deadlineAt - this.#options.now())); });
+        const activeSets = listeners.map(listener => Promise.allSettled(listener.active));
+        const settled = Promise.all(activeSets).then(() => 'settled');
+        if (await Promise.race([settled, deadline]) === 'deadline') {
+            for (const listener of listeners)
+                for (const state of listener.connections)
+                    destroy(state, 'drain deadline exceeded');
+            await Promise.all(listeners.map(listener => Promise.allSettled(listener.active)));
+        }
+        if (deadlineTimer)
+            clearTimeout(deadlineTimer);
+        for (const listener of listeners)
+            for (const state of listener.connections)
+                destroy(state, 'server shutdown');
+        try {
+            await beforeDeadline(Promise.resolve().then(() => this.#options.core.drain(deadlineAt)), deadlineAt, this.#options.now, 'core drain deadline exceeded');
+        }
+        catch (error) {
+            cause ??= error;
+        }
+        try {
+            await beforeDeadline(closing, deadlineAt, this.#options.now, 'listener close deadline exceeded');
+        }
+        catch (error) {
+            cause ??= error;
+        }
+        try {
+            await beforeDeadline(Promise.resolve().then(() => this.#options.core.close()), deadlineAt, this.#options.now, 'core close deadline exceeded');
+        }
+        catch (error) {
+            cause ??= error;
+        }
+        finally {
+            await Promise.allSettled(listeners.map(unlinkOwned));
+        }
+        if (cause !== undefined)
+            throw failure('shutdown-failed', 'one or more shutdown barriers failed', cause);
+    }
+}
+export async function startGitHubBrokerServer(options) { return await GitHubBrokerServer.start(options); }
+//# sourceMappingURL=broker-server.js.map

package/lib/broker-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"broker-server.js","sourceRoot":"","sources":["../src/broker-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACpE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AAChF,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAA4B,MAAM,UAAU,CAAA;AACnF,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACxD,OAAO,EACL,kBAAkB,EAAE,kCAAkC,EAAE,+BAA+B,EAAE,gCAAgC,EACzH,yBAAyB,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,uBAAuB,GAEhL,MAAM,sBAAsB,CAAA;AAwD7B,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IACvC,IAAI,CAAgH;IAC7H,YAAY,IAAqC,EAAE,OAAe,EAAE,OAAsB;QACxF,KAAK,CAAC,oCAAoC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;QAAC,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;QAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;IACxH,CAAC;CACF;AA2BD,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,eAAe,EAAE,eAAe,EAAE,eAAe,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,uBAAuB,CAAC,CAAC,CAAA;AAChV,MAAM,OAAO,GAAG,CAAC,KAAc,EAAE,OAAe,EAAE,OAAe,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,OAAO,IAAI,KAAK,IAAI,OAAO,CAAA;AACvL,MAAM,MAAM,GAAG,CAAC,KAAc,EAAW,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAA;AAC9H,SAAS,OAAO,CAAC,IAAqC,EAAE,OAAe,EAAE,KAAe,IAA6B,OAAO,IAAI,uBAAuB,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA,CAAC,CAAC;AACrN,SAAS,YAAY,CAAC,IAAuC,IAAkB,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,EAAE,CAAA,CAAC,CAAC;AACxN,SAAS,YAAY,CAAC,IAAkB,EAAE,KAAmB,IAAa,OAAO,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAA,CAAC,CAAC;AACnN,SAAS,SAAS,CAAC,IAAkB,EAAE,KAAmB,IAAa,OAAO,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,CAAA,CAAC,CAAC;AAChI,SAAS,KAAK,CAAC,QAAoB,EAAE,SAAiB,IAAmC,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,KAAK,CAAA,CAAC,CAAC;AACrK,SAAS,WAAW,CAAC,KAAsB,IAAU,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,cAAc;IAAE,YAAY,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,UAAU;IAAE,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA,CAAC,CAAC;AACzM,SAAS,OAAO,CAAC,KAAsB,EAAE,MAAc,IAAU,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO;IAAE,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS;IAAE,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAA,CAAC,CAAC;AAC3N,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE,KAAK,EAAE,CAAA;IAC7F,OAAO,EAAE,IAAI,EAAE,MAAM,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,EAAE,UAAU,EAAE,YAAY,IAAI,KAAK,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,EAAE,CAAA;AACvM,CAAC;AACD,SAAS,SAAS,CAAI,SAAyB,EAAE,MAAmB;IAClE,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACxD,OAAO,IAAI,OAAO,CAAI,CAAC,gBAAgB,EAAE,eAAe,EAAE,EAAE;QAC1D,MAAM,OAAO,GAAG,GAAS,EAAE,GAAG,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA,CAAC,CAAC,CAAA;QAC5G,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACzD,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;IACxM,CAAC,CAAC,CAAA;AACJ,CAAC;AACD,KAAK,UAAU,cAAc,CAAI,SAAqB,EAAE,UAAkB,EAAE,GAAiB,EAAE,OAAe;IAC5G,IAAI,OAAkD,CAAA;IACtD,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,GAAG,OAAO,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,GAAG,EAAE,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC3L,CAAC;YAAS,CAAC;QAAC,IAAI,OAAO;YAAE,YAAY,CAAC,OAAO,CAAC,CAAA;IAAC,CAAC;AAClD,CAAC;AACD,SAAS,SAAS,CAAC,KAAe;IAChC,IAAI,KAAK,YAAY,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IACvE,OAAO,eAAe,CAAC,KAAK,CAAC,CAAA;AAC/B,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,GAAW,EAAE,GAAW,EAAE,UAAkB,EAAE,IAAY,EAAE,cAAsB;IAChH,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,UAAU,CAAC;WACrK,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;WAChH,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,EAAE,KAAK,CAAC;QAAE,MAAM,OAAO,CAAC,gBAAgB,EAAE,4BAA4B,CAAC,CAAA;IACtG,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,EAAE,CAAA;AAC7D,CAAC;AACD,SAAS,SAAS,CAAC,OAAkC;IACnD,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,gBAAgB,EAAE,OAAO,CAAC,uBAAuB,EAAE,OAAO,CAAC,uBAAuB,EAAE,OAAO,CAAC,wBAAwB,EAAE,OAAO,CAAC,wBAAwB,EAAE,OAAO,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAA;IAC3N,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,eAAe,EAAE,OAAO,CAAC,sBAAsB,EAAE,OAAO,CAAC,sBAAsB,EAAE,OAAO,CAAC,uBAAuB,EAAE,OAAO,CAAC,uBAAuB,EAAE,OAAO,CAAC,mBAAmB,IAAI,CAAC,CAAC,CAAA;IACnN,MAAM,MAAM,GAAsB,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,EAAE,OAAO,CAAC,qBAAqB,IAAI,CAAC,EAAE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,IAAI,KAAK,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,MAAM,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,kCAAkC,EAAE,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,IAAI,GAAG,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAA;IACte,IAAI,gBAAgB,GAAG,KAAK,EAAE,cAAc,GAAG,IAAI,CAAA;IACnD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,cAAc,CAAC,CAAA;QACvI,gBAAgB,GAAG,MAAM,CAAC,iBAAiB,KAAK,SAAS,IAAI,MAAM,CAAC,iBAAiB,KAAK,SAAS,IAAI,KAAK,CAAC,iBAAiB,KAAK,SAAS,CAAA;QAC5I,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACxF,CAAC;IAAC,MAAM,CAAC,CAAC,oCAAoC,CAAC,CAAC;IAChD,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG;WACnM,MAAM,CAAC,WAAW,KAAK,MAAM,CAAC,UAAU,IAAI,CAAC,gBAAgB,IAAI,cAAc;WAC/E,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,EAAE,MAAM,CAAC,gBAAgB,CAAC,IAAI,OAAO,MAAM,CAAC,sBAAsB,KAAK,UAAU,IAAI,OAAO,MAAM,CAAC,IAAI,EAAE,QAAQ,KAAK,UAAU,IAAI,OAAO,MAAM,CAAC,IAAI,EAAE,OAAO,KAAK,UAAU,IAAI,OAAO,MAAM,CAAC,IAAI,EAAE,KAAK,KAAK,UAAU,IAAI,OAAO,MAAM,CAAC,IAAI,EAAE,UAAU,KAAK,UAAU,IAAI,OAAO,MAAM,CAAC,IAAI,EAAE,KAAK,KAAK,UAAU,IAAI,OAAO,MAAM,CAAC,IAAI,EAAE,KAAK,KAAK,UAAU;WAChY,CAAC,OAAO,CAAC,MAAM,CAAC,qBAAqB,EAAE,CAAC,EAAE,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,qBAAqB,EAAE,CAAC,EAAE,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC,EAAE,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC,EAAE,UAAU,CAAC;WAC9N,CAAC,OAAO,CAAC,MAAM,CAAC,qBAAqB,EAAE,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,kBAAkB,EAAE,OAAO,CAAC;WACzL,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,EAAE,OAAO,CAAC;QAAE,MAAM,OAAO,CAAC,gBAAgB,EAAE,4BAA4B,CAAC,CAAA;IAChR,OAAO,MAAM,CAAA;AACf,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,QAAkB;IAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;IACrC,IAAI,MAAM,GAAG,MAAM,CAAA;IACnB,SAAS,CAAC;QACR,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QAC1F,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,GAAG,MAAM,EAAE,UAAU,GAAG,UAAU,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAA;QACzH,IAAI,eAAe,KAAK,MAAM,IAAI,UAAU,CAAC,cAAc,EAAE,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;YAAE,MAAM,OAAO,CAAC,eAAe,EAAE,2BAA2B,CAAC,CAAA;QAC9L,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAAC,IAAI,IAAI,KAAK,MAAM;YAAE,MAAM;QAAC,MAAM,GAAG,IAAI,CAAA;IACzE,CAAC;IACD,IAAI,SAAiB,EAAE,IAAuC,CAAA;IAC9D,IAAI,CAAC;QAAC,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,OAAO,CAAC,eAAe,EAAE,mCAAmC,EAAE,KAAK,CAAC,CAAA;IAAC,CAAC;IAC7K,IAAI,SAAS,KAAK,MAAM,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,QAAQ,CAAC,UAAU;QAAE,MAAM,OAAO,CAAC,eAAe,EAAE,kDAAkD,CAAC,CAAA;IACtQ,OAAO,YAAY,CAAC,IAAI,CAAC,CAAA;AAC3B,CAAC;AACD,KAAK,UAAU,aAAa,CAAC,QAAkB;IAC7C,IAAI,IAAuC,CAAA;IAC3C,IAAI,CAAC;QAAC,IAAI,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAI,MAAM,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAAC,MAAM,OAAO,CAAC,eAAe,EAAE,iCAAiC,EAAE,KAAK,CAAC,CAAA;IAAC,CAAC;IACzK,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,QAAQ,CAAC,IAAI;QAAE,MAAM,OAAO,CAAC,eAAe,EAAE,2CAA2C,CAAC,CAAA;IAC9N,OAAO,YAAY,CAAC,IAAI,CAAC,CAAA;AAC3B,CAAC;AAED,KAAK,UAAU,KAAK,CAAC,QAAkB,EAAE,OAA0B;IACjE,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAC3D,OAAO,MAAM,IAAI,OAAO,CAAQ,YAAY,CAAC,EAAE;QAC7C,MAAM,OAAO,GAAG,IAAI,kBAAkB,CAAC,gCAAgC,EAAE,CAAC,CAAC,EAAE,MAAM,GAAG,gBAAgB,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAA;QAC/H,IAAI,OAAO,GAAG,KAAK,CAAA;QACnB,MAAM,MAAM,GAAG,CAAC,MAAa,EAAQ,EAAE,GAAG,IAAI,OAAO;YAAE,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA,CAAC,CAAC,CAAA;QAC3K,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAA;QAC7E,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC;YAAC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,UAAU,EAAE,kBAAkB,EAAE,OAAO,CAAC,UAAU,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAAC,CAAC;gBAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;YAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,CAAC,WAAW,CAAC,CAAA;QAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACtS,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAA;QACvJ,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;AACJ,CAAC;AACD,KAAK,UAAU,WAAW,CAAC,QAAkB,EAAE,OAA0B,EAAE,MAAoB;IAC7F,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;IAC7C,IAAI,MAAM,KAAK,QAAQ;QAAE,MAAM,OAAO,CAAC,iBAAiB,EAAE,8CAA8C,CAAC,CAAA;IACzG,IAAI,MAAM,KAAK,SAAS;QAAE,MAAM,OAAO,CAAC,eAAe,EAAE,yDAAyD,CAAC,CAAA;IACnH,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAA;IAC3C,IAAI,CAAC,KAAK,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC;QAAE,MAAM,OAAO,CAAC,eAAe,EAAE,wCAAwC,CAAC,CAAA;IACpH,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,OAAO,CAAC,eAAe,EAAE,gCAAgC,EAAE,KAAK,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;AACzH,CAAC;AACD,KAAK,UAAU,MAAM,CAAC,MAAc,EAAE,IAAY;IAChD,MAAM,IAAI,OAAO,CAAO,CAAC,aAAa,EAAE,YAAY,EAAE,EAAE,GAAG,MAAM,OAAO,GAAG,CAAC,KAAY,EAAQ,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC,CAAC,CAAC,MAAM,QAAQ,GAAG,GAAS,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,aAAa,EAAE,CAAA,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;AAC1U,CAAC;AACD,KAAK,UAAU,WAAW,CAAC,MAAc,EAAE,UAAkB,EAAE,GAAiB;IAC9E,IAAI,CAAC,MAAM,CAAC,SAAS;QAAE,OAAM;IAC7B,MAAM,IAAI,OAAO,CAAO,CAAC,YAAY,EAAE,WAAW,EAAE,EAAE;QACpD,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,iBAAiB,EAAE,kCAAkC,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,GAAG,EAAE,CAAC,CAAC,CAAA;QACzI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK;YAAE,WAAW,CAAC,KAAK,CAAC,CAAC;;YAAM,YAAY,EAAE,CAAA,CAAC,CAAC,CAAC,CAAA;IACtG,CAAC,CAAC,CAAA;AACJ,CAAC;AACD,KAAK,UAAU,UAAU,CAAC,QAAuB,EAAE,UAAkB,EAAE,GAAiB;IACtF,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QAAC,MAAM,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;QAAC,OAAM;IAAC,CAAC;IACpF,MAAM,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,gBAAgB,UAAU,EAAE,EAAE,CAAA;IACtE,IAAI,cAAwC,CAAA;IAC5C,IAAI,YAAY,GAAG,KAAK,CAAA;IACxB,IAAI,OAAgB,CAAA;IACpB,IAAI,CAAC;QACH,IAAI,CAAC;YAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAAC,YAAY,GAAG,IAAI,CAAA;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAA;QAAC,CAAC;QAC3H,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QAClG,IAAI,IAAI,EAAE,CAAC;YACT,cAAc,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;YACnC,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,QAAQ,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,MAAM,OAAO,CAAC,iBAAiB,EAAE,yBAAyB,CAAC,CAAA;QAC3R,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,OAAO,GAAG,KAAK,CAAA;IAAC,CAAC;IACnC,IAAI,CAAC;QAAC,MAAM,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,CAAA;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,OAAO,KAAK,KAAK,CAAA;IAAC,CAAC;IAC/F,IAAI,CAAC;QACH,IAAI,cAAc,IAAI,SAAS,CAAC,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC;YAAE,MAAM,MAAM,CAAC,MAAM,CAAC,CAAA;aAChF,IAAI,cAAc,EAAE,CAAC;YACxB,IAAI,MAAM,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,YAAY,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;gBAAE,MAAM,OAAO,CAAC,iBAAiB,EAAE,uCAAuC,CAAC,CAAA;YAC/P,MAAM,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;YAC5C,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,YAAY,CAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,MAAM,OAAO,CAAC,iBAAiB,EAAE,4BAA4B,CAAC,CAAA;QACtJ,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,OAAO,KAAK,KAAK,CAAA;IAAC,CAAC;IACrC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,IAAI,YAAY,IAAI,cAAc,IAAI,SAAS,CAAC,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC;YAAE,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;aACvH,IAAI,YAAY,EAAE,CAAC;YACtB,MAAM,kBAAkB,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;YACxG,IAAI,kBAAkB;gBAAE,MAAM,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAC7F,CAAC;QACD,IAAI,OAAO,YAAY,uBAAuB;YAAE,MAAM,OAAO,CAAA;QAC7D,MAAM,OAAO,CAAC,iBAAiB,EAAE,4BAA4B,EAAE,OAAO,CAAC,CAAA;IACzE,CAAC;AACH,CAAC;AACD,KAAK,UAAU,WAAW,CAAC,QAAuB;IAChD,IAAI,CAAC,QAAQ,CAAC,KAAK;QAAE,OAAM;IAC3B,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IAC7E,IAAI,OAAO,IAAI,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;QAAE,MAAM,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;AACpL,CAAC;AAED,MAAM,OAAO,kBAAkB;IACpB,QAAQ,CAAmB;IAC3B,OAAO,CAAe;IACtB,MAAM,CAAe;IAC9B,UAAU,GAAG,KAAK,CAAA;IAClB,WAAW,GAAG,CAAC,CAAA;IACf,SAAS,CAAgB;IAEzB,YAAoB,OAA0B;QAC5C,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAA;QACvB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;QACvD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAA;IACtD,CAAC;IACD,SAAS,CAAC,IAAkB,EAAE,QAAkB;QAC9C,MAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,SAA8B,EAAE,WAAW,EAAE,IAAI,GAAG,EAAmB,EAAE,MAAM,EAAE,IAAI,GAAG,EAAiB,EAAE,CAAA;QACtJ,QAAQ,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,GAAG,QAAQ,CAAC,cAAc,CAAA;QAClI,OAAO,QAAQ,CAAA;IACjB,CAAC;IACD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAA8B;QAC/C,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,EAAE,QAAQ,GAAG,IAAI,kBAAkB,CAAC,OAAO,CAAC,CAAA;QAC1E,IAAI,CAAC;YAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAAC,QAAQ,CAAC,UAAU,GAAG,IAAI,CAAC;YAAC,OAAO,QAAQ,CAAA;QAAC,CAAC;QAClI,OAAO,KAAK,EAAE,CAAC;YAAC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,cAAc,CAAC;YAAC,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAAC,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAAC,IAAI,KAAK,YAAY,uBAAuB;gBAAE,MAAM,KAAK,CAAC;YAAC,MAAM,OAAO,CAAC,eAAe,EAAE,yBAAyB,EAAE,KAAK,CAAC,CAAA;QAAC,CAAC;IAC5a,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,QAAuB;QACjC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QACxG,IAAI,QAAQ;YAAE,MAAM,WAAW,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;QAC3E,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC;YAAE,MAAM,OAAO,CAAC,eAAe,EAAE,sCAAsC,CAAC,CAAA;QAC9J,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;QACrD,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;QACvD,IAAI,WAAW,CAAC,cAAc,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE;YAAE,MAAM,OAAO,CAAC,eAAe,EAAE,kCAAkC,CAAC,CAAA;QAC/H,QAAQ,CAAC,KAAK,GAAG,YAAY,CAAC,WAAW,CAAC,CAAA;QAC1C,MAAM,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;QACjF,MAAM,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;QAC3D,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,WAAW,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QAC3G,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,WAAW,CAAC;YAAE,MAAM,OAAO,CAAC,eAAe,EAAE,6CAA6C,CAAC,CAAA;QAC/H,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;YAAE,MAAM,OAAO,CAAC,eAAe,EAAE,2CAA2C,CAAC,CAAA;QACnH,QAAQ,CAAC,KAAK,GAAG,MAAM,CAAA;IACzB,CAAC;IACD,IAAI,gBAAgB,KAAa,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAA,CAAC,CAAC;IACpE,IAAI,eAAe,KAAa,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAA,CAAC,CAAC;IAClE,IAAI,SAAS,KAAc,OAAO,IAAI,CAAC,UAAU,CAAA,CAAC,CAAC;IACnD,IAAI,cAAc,KAAa,OAAO,IAAI,CAAC,WAAW,CAAA,CAAC,CAAC;IACxD,OAAO,CAAC,QAAuB,EAAE,MAAc;QAC7C,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,QAAQ,CAAC,WAAW,CAAC,IAAI,IAAI,QAAQ,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;YAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAAC,OAAM;QAAC,CAAC;QACnH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;QACxC,MAAM,KAAK,GAAoB,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,yBAAyB,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAA;QACxL,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAC/B,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO;YAAE,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;QAChL,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACvH,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,IAAkB,EAAE,KAAsB;QACrD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;YAClI,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,UAAU,CAAC,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,UAAU,CAAC;gBAAE,OAAO,OAAO,CAAC,KAAK,EAAE,2BAA2B,CAAC,CAAA;YACtM,MAAM,WAAW,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAA;YAChH,MAAM,WAAW,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAA;YAChH,IAAI,IAAI,CAAC,GAAG,KAAK,WAAW,IAAI,IAAI,CAAC,GAAG,KAAK,WAAW;gBAAE,OAAO,OAAO,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAA;YACrG,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAA;YACzE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,EAAE,MAAM,CAAC,gBAAgB,CAAC,IAAI,QAAQ,CAAC,UAAU,KAAK,IAAI,CAAC,QAAQ,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,EAAE,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC,EAAE,MAAM,CAAC,gBAAgB,CAAC;gBAAE,OAAO,OAAO,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAA;YACjS,MAAM,KAAK,GAAG,uBAAuB,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE,SAAS,EAAE,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAA;YACvQ,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,KAAK,EAAE,gCAAgC,CAAC,CAAC,CAAA;YAC9E,IAAI,IAAI,KAAK,OAAO;gBAAE,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;YACjE,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QACvC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAA;QAAC,CAAC;IAChD,CAAC;IACD,KAAK,CAAC,YAAY,CAAC,KAAsB,EAAE,KAAwB;QACjE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,yBAAyB,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,mBAAmB,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAA;QAClM,IAAI,CAAC,OAAO;YAAE,OAAO;QAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAA;QAC3C,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,qBAAqB;YAAE,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,iBAAiB,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;QACrS,IAAI,CAAC,WAAW,EAAE,CAAA;QAClB,IAAI,CAAC;YAAC,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAA;QAAC,CAAC;QAC9J,OAAO,KAAK,EAAE,CAAC;YAAC,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;YAAC,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;QAAC,CAAC;gBACxP,CAAC;YAAC,IAAI,CAAC,WAAW,EAAE,CAAA;QAAC,CAAC;IAChC,CAAC;IACD,KAAK,CAAC,WAAW,CAAC,KAAsB,EAAE,KAAwB;QAChE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,wBAAwB,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,kBAAkB,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAA;QAC9L,IAAI,CAAC,OAAO;YAAE,OAAO;QAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAA;QAC3C,IAAI,CAAC;YAAC,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAA;QAAC,CAAC;IAChN,CAAC;IACD,KAAK,CAAC,KAAK,CAAI,KAAsB,EAAE,MAA6B;QAClE,MAAM,OAAO,GAAG,IAAI,kBAAkB,CAAC,+BAA+B,EAAE,CAAC,CAAC,CAAA;QAC1E,OAAO,MAAM,IAAI,OAAO,CAAgB,cAAc,CAAC,EAAE;YACvD,IAAI,OAAO,GAAG,KAAK,EAAE,OAAO,GAAG,KAAK,CAAA;YACpC,MAAM,MAAM,GAAG,CAAC,KAAS,EAAQ,EAAE,GAAG,IAAI,OAAO;gBAAE,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,cAAc;gBAAE,YAAY,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,UAAU;gBAAE,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC,CAAA;YACvV,MAAM,MAAM,GAAG,GAAS,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAA,CAAC,CAAC,CAAA;YAChF,MAAM,OAAO,GAAG,GAAS,EAAE,CAAC,MAAM,EAAE,CAAA;YACpC,MAAM,KAAK,GAAG,GAAS,EAAE,GAAG,IAAI,CAAC;gBAAC,OAAO,CAAC,MAAM,EAAE,CAAA;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,MAAM,EAAE,CAAA,CAAC,CAAC,CAAA;YAC9F,MAAM,MAAM,GAAG,CAAC,KAAa,EAAQ,EAAE;gBACrC,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;oBAAC,OAAO,GAAG,IAAI,CAAC;oBAAC,IAAI,KAAK,CAAC,cAAc;wBAAE,YAAY,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;oBAAC,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAA;gBAAC,CAAC;gBAC9K,IAAI,CAAC;oBAAC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBAAC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;wBAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;wBAAC,MAAM,CAAC,OAAO,CAAC,CAAA;oBAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,MAAM,EAAE,CAAA;gBAAC,CAAC;YACjL,CAAC,CAAA;YACD,KAAK,CAAC,cAAc,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;YAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACtN,CAAC,CAAC,CAAA;IACJ,CAAC;IACD,KAAK,CAAC,YAAY,CAAC,KAAsB,EAAE,OAA4B,EAAE,KAAqB,EAAE,KAAwB,IAAmB,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS;QAAE,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,iBAAiB,CAAC,0BAA0B,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,gCAAgC,CAAC,CAAC,CAAA,CAAC,CAAC;IAC5W,KAAK,CAAC,WAAW,CAAC,KAAsB,EAAE,OAA2B,EAAE,KAAoB,EAAE,KAAwB,IAAmB,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS;QAAE,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,iBAAiB,CAAC,yBAAyB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,gCAAgC,CAAC,CAAC,CAAA,CAAC,CAAC;IACxW,KAAK,CAAC,IAAI,CAAC,KAAsB,EAAE,KAAa,IAAmB,MAAM,IAAI,OAAO,CAAO,CAAC,YAAY,EAAE,WAAW,EAAE,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,YAAY,EAAE,CAAA,CAAC,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAA,CAAC,CAAC;IACzR,IAAI,CAAC,SAAqB,WAAW,EAAE,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,cAAc,IAAmB,IAAI,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,EAAE,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,EAAE,6BAA6B,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,SAAS,CAAA,CAAC,CAAC;IAC1U,KAAK,CAAC,KAAK,CAAC,MAAkB,EAAE,SAAiB;QAC/C,IAAI,CAAC,UAAU,GAAG,KAAK,CAAA;QACvB,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,SAAS,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;QAC3F,IAAI,KAAc,CAAA;QAClB,IAAI,CAAC;YAAC,MAAM,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAA;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,KAAK,GAAG,KAAK,CAAA;QAAC,CAAC;QACjM,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,QAAQ,EAAE,MAAM,KAAK,UAAU;YAAE,KAAK,KAAK,QAAQ,CAAC,MAAM,CAAA,CAAC,CAAC,CAAC,CAAA;QAC7Q,KAAK,MAAM,QAAQ,IAAI,SAAS;YAAE,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,WAAW;gBAAE,IAAI,CAAC,KAAK,CAAC,QAAQ;oBAAE,OAAO,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAA;QAClI,IAAI,aAAwD,CAAA;QAC5D,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAa,eAAe,CAAC,EAAE,GAAG,aAAa,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;QACxK,MAAM,UAAU,GAAG,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAAC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAkB,CAAC,CAAA;QACzJ,IAAI,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;YAAC,KAAK,MAAM,QAAQ,IAAI,SAAS;gBAAE,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,WAAW;oBAAE,OAAO,CAAC,KAAK,EAAE,yBAAyB,CAAC,CAAC;YAAC,MAAM,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QAAC,CAAC;QACxQ,IAAI,aAAa;YAAE,YAAY,CAAC,aAAa,CAAC,CAAA;QAC9C,KAAK,MAAM,QAAQ,IAAI,SAAS;YAAE,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,WAAW;gBAAE,OAAO,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAA;QAC7G,IAAI,CAAC;YAAC,MAAM,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,8BAA8B,CAAC,CAAA;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,KAAK,KAAK,KAAK,CAAA;QAAC,CAAC;QACjM,IAAI,CAAC;YAAC,MAAM,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,kCAAkC,CAAC,CAAA;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,KAAK,KAAK,KAAK,CAAA;QAAC,CAAC;QAC1I,IAAI,CAAC;YAAC,MAAM,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,8BAA8B,CAAC,CAAA;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,KAAK,KAAK,KAAK,CAAA;QAAC,CAAC;gBAC/K,CAAC;YAAC,MAAM,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAA;QAAC,CAAC;QAChE,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,OAAO,CAAC,iBAAiB,EAAE,sCAAsC,EAAE,KAAK,CAAC,CAAA;IAC1G,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAAkC,IAAiC,OAAO,MAAM,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA,CAAC,CAAC"}

package/lib/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export declare function revokeActionGrant(root: string, grantId: string, revision: number): void;
+//# sourceMappingURL=cli.d.ts.map

package/lib/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAMA,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAOvF"}

package/lib/cli.js

@@ -0,0 +1,36 @@
+#!/usr/bin/env node
+import { lstatSync, realpathSync } from 'node:fs';
+import { isAbsolute, join } from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { ActionLedger } from './ledger.js';
+export function revokeActionGrant(root, grantId, revision) {
+    if (!isAbsolute(root) || realpathSync(root) !== root)
+        throw new Error('private canonical root required');
+    const dir = lstatSync(root);
+    const path = join(root, 'ledger.sqlite');
+    const file = lstatSync(path);
+    if (!dir.isDirectory() || dir.uid !== process.getuid?.() || (dir.mode & 0o077) !== 0 || !file.isFile() || file.isSymbolicLink()
+        || file.nlink !== 1 || file.uid !== dir.uid || (file.mode & 0o077) !== 0)
+        throw new Error('private owned ledger required');
+    const ledger = new ActionLedger(path);
+    try {
+        ledger.revoke(grantId, revision);
+    }
+    finally {
+        ledger.close();
+    }
+}
+if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) {
+    const [command, root, grant, revision, ...extra] = process.argv.slice(2);
+    try {
+        if (command !== 'revoke' || !root || !grant || !revision || !/^[1-9][0-9]*$/.test(revision) || extra.length)
+            throw new Error('usage: dsh-actions revoke /private/state grant-id revision');
+        revokeActionGrant(root, grant, Number(revision));
+        process.stdout.write('{"revoked":true,"inFlightOutcome":"requires-readback"}\n');
+    }
+    catch {
+        process.stderr.write('assistant-actions: revocation failed or invalid arguments\n');
+        process.exitCode = 1;
+    }
+}
+//# sourceMappingURL=cli.js.map

package/lib/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACjD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAE1C,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,OAAe,EAAE,QAAgB;IAC/E,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;IACxG,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAAC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IAAC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;IACnG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;WAC1H,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;IAC5H,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAA;IACrC,IAAI,CAAC;QAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;IAAC,CAAC;YAAS,CAAC;QAAC,MAAM,CAAC,KAAK,EAAE,CAAA;IAAC,CAAC;AACrE,CAAC;AACD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/E,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IACxE,IAAI,CAAC;QACH,IAAI,OAAO,KAAK,QAAQ,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAA;QAC1L,iBAAiB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAA;QAChD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAA;IAClF,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6DAA6D,CAAC,CAAC;QAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;IAAC,CAAC;AACvH,CAAC"}

package/lib/config.d.ts

@@ -0,0 +1,54 @@
+import Schema from '@deepseek-ai/schemastery';
+import type { ActionGrant, CommitRequest, CompensationRequest, ExternalActionGrantMirror, VerifiedDeliveryRequest } from './types.js';
+export interface EmbeddedBrokerConfig {
+    mode: 'embedded-compat';
+}
+export interface ExternalUnixBrokerConfig {
+    mode: 'external-unix-v1';
+    actionSocketPath: string;
+    brokerId: string;
+    brokerPublicKeyPath: string;
+    clientKeyId: string;
+    clientSigningKeyPath: string;
+    clientInstanceId: string;
+    clientGeneration: number;
+    requestTimeoutMs?: number;
+    helloTtlMs?: number;
+    expectedSocketUid: number;
+    expectedSocketGid: number;
+    expectedSocketMode?: number;
+    expectedSocketParentUid?: number;
+    expectedSocketParentGid?: number;
+    expectedSocketParentMode?: number;
+    expectedBrokerPeerUid: number;
+    expectedBrokerPeerGid: number;
+    minimumBrokerGeneration?: number;
+}
+export type BrokerConfig = EmbeddedBrokerConfig | ExternalUnixBrokerConfig;
+export interface Config {
+    stateRoot?: string;
+    grants?: ActionGrant[];
+    externalGrants?: readonly ExternalActionGrantMirror[];
+    broker?: BrokerConfig;
+}
+type ValidatedExternalUnixBrokerConfig = Required<ExternalUnixBrokerConfig>;
+export type ValidatedConfig = {
+    stateRoot: string;
+    grants: ActionGrant[];
+    externalGrants: [];
+    broker: EmbeddedBrokerConfig;
+} | {
+    stateRoot: string;
+    grants: [];
+    externalGrants: ExternalActionGrantMirror[];
+    broker: ValidatedExternalUnixBrokerConfig;
+};
+export declare const Config: Schema<Config>;
+export declare function validPath(value: unknown): value is string;
+export declare function validateConfig(input: Config): ValidatedConfig;
+export declare function normalizeCommit(value: CommitRequest): CommitRequest;
+export declare const commitBytes: (request: CommitRequest) => number;
+export declare function normalizeCompensation(value: CompensationRequest): CompensationRequest;
+export declare function normalizeVerifiedDelivery(input: VerifiedDeliveryRequest): VerifiedDeliveryRequest;
+export {};
+//# sourceMappingURL=config.d.ts.map