@effect-agent/platform-cloudflare 0.1.0-beta.52 → 0.1.0-beta.54

package/dist/ProtectedBrowser.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"ProtectedBrowser.mjs","names":[],"sources":["../src/protected-browser/policy.ts","../src/protected-browser/inspect-frame.ts","../src/protected-browser/native.ts","../src/protected-browser/binding.ts"],"sourcesContent":["import { InteractiveBrowserPolicy } from \"@effect-agent/sandbox/InteractiveBrowser\";\n/// <reference types=\"@cloudflare/workers-types\" />\nimport {\n  BrowserCredentialAccess,\n  type BrowserCredentialMaterial,\n  CardCredential,\n  CredentialOffer,\n  CredentialOfferMetadata,\n  CredentialOrigin,\n  type CredentialTarget,\n  CredentialUseResult,\n  ListCredentialOffers,\n  LoginCredential,\n  ProtectedBrowser,\n  ProtectedBrowserClick,\n  ProtectedBrowserError,\n  ProtectedBrowserNavigate,\n  ProtectedBrowserObservation,\n  ProtectedBrowserControl,\n  UseCredential,\n  type CredentialFieldRole,\n  type CredentialKind,\n  type CredentialUseAuthorization,\n  type ProtectedBrowserHandle,\n  type ProtectedCleanup,\n  type ProtectedObservationState,\n} from \"@effect-agent/sandbox/ProtectedBrowser\";\nimport {\n  Clock,\n  Context,\n  Crypto,\n  Effect,\n  Layer,\n  Option,\n  Redacted,\n  Schema,\n  Semaphore,\n  type Scope,\n} from \"effect\";\n\nexport class ProtectedTransportError extends Schema.TaggedError<ProtectedTransportError>()(\n  \"ProtectedTransportError\",\n  { reason: Schema.Literals([\"stale-reference\", \"needs-attention\", \"unsupported\", \"provider\"]) },\n) {}\n\n/** Per-write evidence authority, provided by the policy immediately around a transport fill. */\nexport class ProtectedBrowserDispatch extends Context.Service<\n  ProtectedBrowserDispatch,\n  { readonly mark: Effect.Effect<void> }\n>()(\"@effect-agent/platform-cloudflare/ProtectedBrowserDispatch\") {}\n\n/** Decoded adapter boundary. SDK exceptions and page diagnostics never cross this port. */\nexport interface ProtectedBrowserTransport {\n  readonly context: Effect.Effect<typeof ProtectedPageContext.Type, ProtectedTransportError>;\n  readonly discover: Effect.Effect<typeof ProtectedDiscovery.Type, ProtectedTransportError>;\n  readonly target: (ref: string) => Effect.Effect<ProtectedBrowserControl, ProtectedTransportError>;\n  readonly navigate: (url: string) => Effect.Effect<void, ProtectedTransportError>;\n  readonly click: (ref: string) => Effect.Effect<void, ProtectedTransportError>;\n  readonly fill: (\n    ref: string,\n    role: typeof CredentialFieldRole.Type,\n    value: Redacted.Redacted<string>,\n  ) => Effect.Effect<void, ProtectedTransportError, ProtectedBrowserDispatch>;\n  /** Invalidates local references synchronously before bounded exact-session cleanup. */\n  readonly invalidate: () => void;\n  readonly close: Effect.Effect<typeof ProtectedCleanup.Type>;\n}\n\n/** Adapter-private injection seam for deterministic tests, not a model capability. */\nexport class BrowserRunProtectedTransport extends Context.Service<\n  BrowserRunProtectedTransport,\n  {\n    readonly open: (\n      policy: InteractiveBrowserPolicy,\n    ) => Effect.Effect<ProtectedBrowserTransport, ProtectedBrowserError, Scope.Scope>;\n  }\n>()(\"@effect-agent/platform-cloudflare/BrowserRunProtectedTransport\") {}\n\nexport const ProtectedPageContext = Schema.Struct({\n  document: Schema.String.check(Schema.isUUID()),\n  topOrigin: CredentialOrigin,\n  frameOrigins: Schema.Array(CredentialOrigin).check(Schema.isMaxLength(16)),\n});\n\nexport const ProtectedDiscovery = Schema.Struct({\n  ...ProtectedPageContext.fields,\n  text: Schema.String.check(Schema.isMaxLength(64 * 1024)),\n  controls: Schema.Array(ProtectedBrowserControl).check(Schema.isMaxLength(64)),\n  truncated: Schema.Boolean,\n});\n\nconst sameTarget = (a: CredentialTarget, b: CredentialTarget) =>\n  a.topOrigin === b.topOrigin &&\n  a.frameOrigin === b.frameOrigin &&\n  a.recipientOrigin === b.recipientOrigin &&\n  a.document === b.document &&\n  a.frame === b.frame &&\n  a.form === b.form;\n\nconst kindFor = (role: string): typeof CredentialKind.Type | undefined =>\n  role === \"username\" || role === \"password\"\n    ? \"login\"\n    : role.startsWith(\"card-\")\n      ? \"card\"\n      : undefined;\n\nconst secretFor = (material: BrowserCredentialMaterial, role: typeof CredentialFieldRole.Type) => {\n  if (material._tag === \"LoginCredential\") {\n    return role === \"username\"\n      ? material.username\n      : role === \"password\"\n        ? material.password\n        : undefined;\n  }\n  switch (role) {\n    case \"card-name\":\n      return material.name;\n    case \"card-number\":\n      return material.number;\n    case \"card-expiry\":\n      return material.expiry;\n    case \"card-expiry-month\":\n      return material.expiryMonth;\n    case \"card-expiry-year\":\n      return material.expiryYear;\n    case \"card-security-code\":\n      return material.securityCode;\n    case \"username\":\n    case \"password\":\n      return undefined;\n  }\n};\n\n/**\n * Fresh private passes only. Account administrators and Browser Rendering token holders are\n * trusted operators. No viewer, handoff, raw JavaScript, screenshot or plaintext-fill API exists.\n * Hosts explicitly authorize post-exposure observations for recipients they trust not to echo.\n */\nexport const browserRunProtectedLayer = () =>\n  Layer.effect(ProtectedBrowser)(\n    Effect.gen(function* () {\n      const transport = yield* BrowserRunProtectedTransport;\n      const crypto = yield* Crypto.Crypto;\n\n      const open = Effect.fn(\"ProtectedBrowser.open\")(function* (\n        input: InteractiveBrowserPolicy,\n      ): Effect.fn.Return<\n        ProtectedBrowserHandle,\n        ProtectedBrowserError,\n        Scope.Scope | BrowserCredentialAccess\n      > {\n        const initialError = (reason: ProtectedBrowserError[\"reason\"]) =>\n          new ProtectedBrowserError({\n            reason,\n            dispatch: \"not-dispatched\",\n            milestone: \"none\",\n            observation: \"closed\",\n            cleanup: \"not-requested\",\n          });\n\n        const decodedPolicy = yield* Schema.decodeUnknownEffect(InteractiveBrowserPolicy)(\n          input,\n        ).pipe(Effect.mapError(() => initialError(\"denied\")));\n\n        if (decodedPolicy.network._tag === \"PublicWeb\") return yield* initialError(\"unsupported\");\n\n        const policy = InteractiveBrowserPolicy.make({\n          ...decodedPolicy,\n          network:\n            decodedPolicy.network._tag === \"ExactHosts\"\n              ? { _tag: \"ExactHosts\", allowedHosts: [...decodedPolicy.network.allowedHosts] }\n              : { _tag: \"Unrestricted\" },\n        });\n\n        // Capture the host access service for THIS execution, not the application singleton.\n        const access = yield* BrowserCredentialAccess;\n        const started = yield* Clock.currentTimeMillis;\n        const driver = yield* transport.open(policy);\n        const lock = yield* Semaphore.make(1);\n        let observation: typeof ProtectedObservationState.Type = \"before-exposure\";\n        let cleanup: typeof ProtectedCleanup.Type = \"not-requested\";\n        let actions = 0;\n        let dispatch: ProtectedBrowserError[\"dispatch\"] = \"not-dispatched\";\n        let milestone: ProtectedBrowserError[\"milestone\"] = \"none\";\n        const exposures: Array<CredentialTarget> = [];\n\n        const offers = new Map<\n          string,\n          {\n            caller: Redacted.Redacted<string>;\n            key: Redacted.Redacted<string>;\n            target: CredentialTarget;\n            targetRef: string;\n            kind: typeof CredentialKind.Type;\n            expires: number;\n          }\n        >();\n\n        const fail = (reason: ProtectedBrowserError[\"reason\"]) =>\n          new ProtectedBrowserError({ reason, dispatch, milestone, observation, cleanup });\n\n        const close = yield* Effect.cached(\n          Effect.uninterruptible(\n            Effect.gen(function* () {\n              observation = \"closed\";\n              offers.clear();\n              driver.invalidate();\n              cleanup = yield* driver.close.pipe(\n                Effect.interruptible,\n                Effect.timeoutOrElse({\n                  duration: \"10 seconds\",\n                  orElse: () => Effect.succeed(\"unconfirmed\" as const),\n                }),\n                Effect.catchCause(() => Effect.succeed(\"unconfirmed\" as const)),\n              );\n\n              return cleanup;\n            }),\n          ),\n        );\n\n        yield* Effect.addFinalizer(() =>\n          close.pipe(\n            Effect.flatMap((result) =>\n              result === \"unconfirmed\"\n                ? Effect.logWarning(\"Protected browser exact-session closure unconfirmed\")\n                : Effect.void,\n            ),\n          ),\n        );\n\n        const remote = <A, R>(effect: Effect.Effect<A, ProtectedTransportError, R>) =>\n          effect.pipe(Effect.mapError((error) => fail(error.reason)));\n\n        const decode = <A>(schema: Schema.Codec<A>, value: unknown) =>\n          Schema.decodeUnknownEffect(schema)(value).pipe(Effect.mapError(() => fail(\"provider\")));\n\n        const caller = access.caller.pipe(Effect.mapError((error) => fail(error.reason)));\n        const pageContext = remote(driver.context);\n\n        const permitObservation = Effect.gen(function* () {\n          const context = yield* pageContext;\n\n          if (exposures.length > 0) {\n            observation = \"protected\";\n\n            const decision = yield* access\n              .observation({ ...context, caller: yield* caller, exposures: [...exposures] })\n              .pipe(Effect.mapError((error) => fail(error.reason)));\n\n            if (decision !== \"trust-recipient-no-credential-echo\")\n              return yield* fail(\"observation-blocked\");\n            observation = \"approved-after-exposure\";\n          }\n\n          return context;\n        });\n\n        const target = (ref: string) => remote(driver.target(ref));\n\n        const bounded = <A>(result: A) => {\n          const bytes = new TextEncoder().encode(JSON.stringify(result)).byteLength;\n\n          return bytes <= policy.maxReturnedBytes\n            ? Effect.succeed(result)\n            : Effect.fail(fail(\"limit\"));\n        };\n\n        const run = <A>(effect: Effect.Effect<A, ProtectedBrowserError>) =>\n          lock\n            .withPermitsIfAvailable(1)(\n              Effect.gen(function* () {\n                dispatch = \"not-dispatched\";\n                milestone = \"none\";\n                if (observation === \"closed\") return yield* fail(\"closed\");\n                if (++actions > policy.maxActions) return yield* fail(\"limit\");\n\n                const remaining =\n                  policy.maxElapsedMillis - ((yield* Clock.currentTimeMillis) - started);\n\n                if (remaining <= 0) {\n                  yield* close;\n\n                  return yield* fail(\"timeout\");\n                }\n\n                return yield* effect.pipe(\n                  Effect.timeoutOrElse({\n                    duration: remaining,\n                    orElse: () => Effect.fail(fail(\"timeout\")),\n                  }),\n                  Effect.catchCause((cause) =>\n                    Effect.gen(function* () {\n                      // No foreign exception or defect is retained. Interrupted operations still finalize.\n                      const error = cause.reasons.find(\n                        (reason) =>\n                          reason._tag === \"Fail\" && Schema.is(ProtectedBrowserError)(reason.error),\n                      );\n\n                      const reason =\n                        error?._tag === \"Fail\" && Schema.is(ProtectedBrowserError)(error.error)\n                          ? error.error.reason\n                          : \"provider\";\n\n                      const interrupt = cause.reasons.some((reason) => reason._tag === \"Interrupt\");\n\n                      if (\n                        dispatch !== \"not-dispatched\" ||\n                        interrupt ||\n                        reason === \"provider\" ||\n                        reason === \"timeout\"\n                      )\n                        yield* close;\n                      if (interrupt) return yield* Effect.interrupt;\n\n                      return yield* fail(\n                        dispatch === \"possibly-dispatched\" && reason === \"provider\"\n                          ? \"outcome-unknown\"\n                          : reason,\n                      );\n                    }),\n                  ),\n                  Effect.onInterrupt(() => close),\n                  Effect.withTracerEnabled(false),\n                );\n              }),\n            )\n            .pipe(\n              Effect.flatMap((result) =>\n                Option.isSome(result)\n                  ? Effect.succeed(result.value)\n                  : Effect.fail(\n                      new ProtectedBrowserError({\n                        reason: \"busy\",\n                        dispatch: \"not-dispatched\",\n                        milestone: \"none\",\n                        observation,\n                        cleanup,\n                      }),\n                    ),\n              ),\n            );\n\n        return {\n          close,\n          navigate: (request) =>\n            run(\n              Effect.gen(function* () {\n                const decoded = yield* Schema.decodeUnknownEffect(ProtectedBrowserNavigate)(\n                  request,\n                ).pipe(Effect.mapError(() => fail(\"denied\")));\n\n                let url: URL;\n\n                try {\n                  url = new URL(decoded.url);\n                } catch {\n                  return yield* fail(\"denied\");\n                }\n                if (\n                  url.protocol !== \"https:\" ||\n                  url.username ||\n                  url.password ||\n                  (policy.network._tag === \"ExactHosts\" &&\n                    !policy.network.allowedHosts.includes(url.host))\n                )\n                  return yield* fail(\"denied\");\n                if (exposures.length > 0) yield* permitObservation;\n                offers.clear();\n                dispatch = \"possibly-dispatched\";\n                yield* remote(driver.navigate(decoded.url));\n                dispatch = \"dispatched\";\n                yield* permitObservation;\n              }),\n            ),\n          observe: run(\n            Effect.gen(function* () {\n              const before = yield* permitObservation;\n              const result = yield* remote(driver.discover);\n              const after = yield* permitObservation;\n\n              if (before.document !== after.document || result.document !== after.document)\n                return yield* fail(\"stale-reference\");\n\n              return yield* bounded(\n                ProtectedBrowserObservation.make({\n                  ...result,\n                  observation: exposures.length > 0 ? \"approved-after-exposure\" : \"before-exposure\",\n                }),\n              );\n            }),\n          ),\n          click: (request) =>\n            run(\n              Effect.gen(function* () {\n                const decoded = yield* Schema.decodeUnknownEffect(ProtectedBrowserClick)(\n                  request,\n                ).pipe(Effect.mapError(() => fail(\"denied\")));\n\n                yield* permitObservation;\n                const control = yield* target(decoded.ref);\n\n                // Credential submission goes through useCredential, never a generic click.\n                if (control.role !== \"link\" && control.role !== \"button\")\n                  return yield* fail(\"unsupported\");\n                dispatch = \"possibly-dispatched\";\n                yield* remote(driver.click(decoded.ref));\n                dispatch = \"dispatched\";\n                yield* permitObservation;\n              }),\n            ),\n          listCredentialOffers: (request) =>\n            run(\n              Effect.gen(function* () {\n                const decoded = yield* Schema.decodeUnknownEffect(ListCredentialOffers)(\n                  request,\n                ).pipe(Effect.mapError(() => fail(\"denied\")));\n\n                yield* permitObservation;\n                const control = yield* target(decoded.target);\n\n                if (kindFor(control.role) !== decoded.kind) return yield* fail(\"unsupported\");\n                const principal = yield* caller;\n\n                const candidates = yield* access\n                  .list({ caller: principal, kind: decoded.kind, target: control.target })\n                  .pipe(Effect.mapError((error) => fail(error.reason)));\n\n                const now = yield* Clock.currentTimeMillis;\n\n                for (const [ref, offer] of offers) if (offer.expires <= now) offers.delete(ref);\n                if (candidates.length > 16 || offers.size + candidates.length > 64)\n                  return yield* fail(\"limit\");\n                if (!sameTarget(control.target, (yield* target(decoded.target)).target))\n                  return yield* fail(\"stale-reference\");\n                const expires = now + 60_000;\n                const result: Array<CredentialOffer> = [];\n                const pending: typeof offers = new Map();\n\n                for (const candidate of candidates) {\n                  const metadata = yield* decode(CredentialOfferMetadata, candidate.metadata);\n\n                  const ref = yield* crypto.randomUUIDv4.pipe(\n                    Effect.mapError(() => fail(\"provider\")),\n                  );\n\n                  pending.set(ref, {\n                    caller: principal,\n                    key: candidate.key,\n                    target: control.target,\n                    targetRef: decoded.target,\n                    kind: decoded.kind,\n                    expires,\n                  });\n                  result.push(CredentialOffer.make({ ref, kind: decoded.kind, metadata }));\n                }\n                yield* bounded(result);\n                for (const [ref, offer] of pending) offers.set(ref, offer);\n\n                return result;\n              }),\n            ),\n          useCredential: (request) =>\n            run(\n              Effect.gen(function* () {\n                const decoded = yield* Schema.decodeUnknownEffect(UseCredential)(request).pipe(\n                  Effect.mapError(() => fail(\"denied\")),\n                );\n\n                const offer = offers.get(decoded.offer);\n\n                if (offer === undefined || offer.expires <= (yield* Clock.currentTimeMillis))\n                  return yield* fail(\"stale-reference\");\n                const principal = yield* caller;\n\n                if (Redacted.value(principal) !== Redacted.value(offer.caller))\n                  return yield* fail(\"denied\");\n                if (offer.kind === \"card\" && decoded.submit !== undefined)\n                  return yield* fail(\"unsupported\");\n                if (\n                  new Set(decoded.fields.map((field) => field.ref)).size !==\n                    decoded.fields.length ||\n                  new Set(decoded.fields.map((field) => field.role)).size !== decoded.fields.length\n                )\n                  return yield* fail(\"denied\");\n\n                const validate = Effect.gen(function* () {\n                  if (!sameTarget(offer.target, (yield* target(offer.targetRef)).target))\n                    return yield* fail(\"stale-reference\");\n                  for (const field of decoded.fields) {\n                    const current = yield* target(field.ref);\n\n                    if (\n                      field.role !== current.role ||\n                      kindFor(field.role) !== offer.kind ||\n                      !sameTarget(offer.target, current.target)\n                    )\n                      return yield* fail(\"denied\");\n                  }\n                  if (decoded.submit !== undefined) {\n                    const submit = yield* target(decoded.submit);\n\n                    if (submit.role !== \"submit\" || !sameTarget(offer.target, submit.target))\n                      return yield* fail(\"denied\");\n                  }\n                });\n\n                yield* validate;\n\n                const authorization: CredentialUseAuthorization = {\n                  caller: principal,\n                  key: offer.key,\n                  kind: offer.kind,\n                  target: offer.target,\n                  roles: decoded.fields.map((field) => field.role),\n                  submit: decoded.submit !== undefined,\n                };\n\n                const authorize = Effect.gen(function* () {\n                  if (Redacted.value(yield* caller) !== Redacted.value(principal))\n                    return yield* fail(\"denied\");\n                  yield* access\n                    .authorize(authorization)\n                    .pipe(Effect.mapError((error) => fail(error.reason)));\n                });\n\n                yield* authorize;\n                yield* validate;\n\n                const raw = yield* access\n                  .resolve(authorization)\n                  .pipe(Effect.mapError((error) => fail(error.reason)));\n\n                const material = yield* Schema.decodeUnknownEffect(\n                  offer.kind === \"login\" ? LoginCredential : CardCredential,\n                )(raw).pipe(Effect.mapError(() => fail(\"resolver\")));\n\n                for (const field of decoded.fields)\n                  if (secretFor(material, field.role) === undefined)\n                    return yield* fail(\"missing-credential\");\n                offers.delete(decoded.offer);\n                for (const field of decoded.fields) {\n                  yield* validate;\n                  yield* authorize;\n                  const value = secretFor(material, field.role);\n\n                  if (value === undefined) return yield* fail(\"missing-credential\");\n                  observation = \"protected\";\n                  yield* remote(driver.fill(field.ref, field.role, value)).pipe(\n                    Effect.provideService(ProtectedBrowserDispatch, {\n                      mark: Effect.sync(() => {\n                        dispatch = \"possibly-dispatched\";\n                        if (!exposures.some((target) => sameTarget(target, offer.target)))\n                          exposures.push(offer.target);\n                      }),\n                    }),\n                  );\n                  dispatch = \"dispatched\";\n                  milestone = \"partial-fill\";\n                }\n                milestone = \"filled\";\n                if (decoded.submit !== undefined) {\n                  yield* validate;\n                  yield* authorize;\n                  const ref = decoded.submit;\n\n                  dispatch = \"possibly-dispatched\";\n                  yield* remote(driver.click(ref)).pipe(\n                    Effect.catch((error) => {\n                      if (error.reason === \"needs-attention\") dispatch = \"dispatched\";\n\n                      return Effect.fail(error);\n                    }),\n                  );\n                  dispatch = \"dispatched\";\n                  milestone = \"submission-dispatched\";\n                }\n                yield* permitObservation;\n\n                return CredentialUseResult.make({\n                  dispatch,\n                  milestone,\n                  observation,\n                  cleanup,\n                  authentication: \"unverified\",\n                });\n              }),\n            ),\n        };\n      }, Effect.withTracerEnabled(false));\n\n      return { open };\n    }),\n  );\n","// This fixed program runs in an isolated world. Pages cannot replace its native DOM methods.\n// Handles retain actual nodes; a selector is never reconstructed from an opaque reference.\nexport const maxAttributeLength = 2048;\n\nexport const inspectFrame = `(() => {\n  const doc = document;\n  const forms = [];\n  const elements = [...doc.querySelectorAll('input,select,button,a[href]')].slice(0, 65);\n  const describe = (el) => {\n    if (doc !== document || !el.isConnected || el.ownerDocument !== doc) return null;\n    const form = el.form ?? null;\n    let formIndex = forms.indexOf(form);\n    if (formIndex < 0) { formIndex = forms.length; forms.push(form); }\n    const action = form ? (el.hasAttribute('formaction') ? el.formAction : form.action || doc.URL) : doc.URL;\n    const method = form ? (el.hasAttribute('formmethod') ? el.formMethod : form.method) : '';\n    const enctype = form?.enctype ?? '';\n    const name = el.name ?? '';\n    const completion = el.getAttribute('autocomplete') ?? '';\n    const inputType = el.type ?? '';\n    // Reject before parsing, fingerprinting or CDP transfer. Truncation could hide a target change.\n    if ([action, method, enctype, name, completion, inputType].some(value => value.length > ${maxAttributeLength})) return null;\n    const type = inputType.toLowerCase();\n    const autocomplete = completion.trim().toLowerCase().split(/\\\\s+/).at(-1);\n    const cardRoles = { 'cc-name':'card-name', 'cc-number':'card-number', 'cc-exp':'card-expiry',\n      'cc-exp-month':'card-expiry-month', 'cc-exp-year':'card-expiry-year', 'cc-csc':'card-security-code' };\n    let role = 'unsupported';\n    const nativeField = el instanceof HTMLInputElement || el instanceof HTMLSelectElement;\n    if (nativeField && form && !['submit','button'].includes(type) && !el.disabled && !el.readOnly && el.getClientRects().length > 0) {\n      if (el instanceof HTMLInputElement && type === 'password') role = 'password';\n      else if (['text','email','tel','number','month',''].includes(type) || el instanceof HTMLSelectElement) {\n        if (cardRoles[autocomplete]) role = cardRoles[autocomplete];\n        else if (autocomplete === 'username' || autocomplete === 'email') role = 'username';\n        else if (['text','email'].includes(type) && form && form.querySelector('input[type=\"password\"]')) role = 'username';\n      }\n    } else if (el instanceof HTMLButtonElement || (el instanceof HTMLInputElement && ['submit','button'].includes(type))) {\n      if (!el.disabled) role = type === 'submit' && form ? 'submit' : type === 'button' ? 'button' : 'unsupported';\n    } else if (el instanceof HTMLAnchorElement) role = 'link';\n    const fingerprint = JSON.stringify([role, action, method, enctype, name, completion, type]);\n    return { role, formIndex, action, fingerprint,\n      label: (el.labels?.[0]?.textContent ?? el.getAttribute('aria-label') ?? el.textContent ?? '').slice(0,200) };\n  };\n  const expose = ({role, formIndex, action, label}) => ({role, formIndex, action, label});\n  const original = elements.map(describe);\n  const validate = (index) => {\n    const current = describe(elements[index]);\n    if (!current || !original[index] || current.fingerprint !== original[index].fingerprint ||\n      current.formIndex !== original[index].formIndex) return null;\n    return expose(current);\n  };\n  return {\n    doc, elements, original: original.map(current => current && expose(current)), validate,\n    text: () => {\n      if (doc !== document) return null;\n      const clone = doc.body?.cloneNode(true);\n      clone?.querySelectorAll('input,textarea,select,script,style,noscript,iframe,object,embed').forEach(el => el.remove());\n      return (clone?.textContent ?? '').slice(0,65536);\n    },\n    fill: (index, role, value) => {\n      const current = validate(index);\n      if (!current || current.role !== role) return false;\n      const el = elements[index];\n      let prototype = Object.getPrototypeOf(el);\n      let setter;\n      while (prototype && !setter) { setter = Object.getOwnPropertyDescriptor(prototype,'value')?.set; prototype = Object.getPrototypeOf(prototype); }\n      if (!setter) return false;\n      // Validate and mutate in one isolated-world task, without focusing first and running\n      // page handlers between validation and assignment. Native setters support controlled inputs.\n      setter.call(el, value);\n      if (el.value !== value) return 'unsupported';\n      el.dispatchEvent(new Event('input', {bubbles:true}));\n      el.dispatchEvent(new Event('change', {bubbles:true}));\n      return true;\n    },\n    click: (index) => {\n      const current = validate(index);\n      if (!current || !['button','submit','link'].includes(current.role)) return false;\n      if (current.role === 'submit' && elements[index].form && !elements[index].form.matches(':valid')) return 'needs-attention';\n      elements[index].click();\n      return true;\n    }\n  };\n})()`;\n","/// <reference types=\"@cloudflare/workers-types\" />\nimport type { Browser, Frame, JSHandle, Page } from \"@cloudflare/puppeteer\";\nimport { type InteractiveBrowserPolicy } from \"@effect-agent/sandbox/InteractiveBrowser\";\nimport {\n  CredentialOrigin,\n  CredentialTarget,\n  ProtectedBrowserControl,\n} from \"@effect-agent/sandbox/ProtectedBrowser\";\nimport { Clock, Context, Crypto, Effect, Redacted, Schema, type Scope } from \"effect\";\n\nimport { inspectFrame, maxAttributeLength } from \"./inspect-frame.ts\";\nimport {\n  ProtectedBrowserDispatch,\n  ProtectedTransportError,\n  ProtectedDiscovery,\n  ProtectedPageContext,\n  type ProtectedBrowserTransport,\n} from \"./policy.ts\";\n\n// The pinned SDK implements this method but strips its internal declaration from lib/types.d.ts.\n// Keep the declaration narrow and refuse runtimes without it. No main-world fallback is safe.\ndeclare module \"@cloudflare/puppeteer\" {\n  interface Frame {\n    isolatedRealm(): { evaluateHandle(source: string): Promise<JSHandle<unknown>> };\n  }\n}\n\nconst Description = Schema.Struct({\n  role: ProtectedBrowserControl.fields.role,\n  formIndex: Schema.Natural,\n  action: Schema.String.check(Schema.isMaxLength(maxAttributeLength)),\n  label: Schema.String.check(Schema.isMaxLength(200)),\n});\n\nconst Descriptions = Schema.Array(Schema.NullOr(Description)).check(Schema.isMaxLength(65));\n\ninterface FrameState {\n  readonly frame: Frame;\n  readonly handle: JSHandle<unknown>;\n  readonly ref: string;\n  readonly document: string;\n  readonly forms: Map<number, string>;\n}\ninterface ControlState {\n  readonly frame: FrameState;\n  readonly index: number;\n  readonly control: ProtectedBrowserControl;\n  readonly expires: number;\n}\n\n/** One host-private acquired session. The SDK handles and exact-session cleanup have one owner. */\nexport class ProtectedNativeSession extends Context.Service<\n  ProtectedNativeSession,\n  {\n    readonly browser: Browser;\n    readonly page: Page;\n    readonly close: Effect.Effect<\"confirmed\" | \"unconfirmed\">;\n  }\n>()(\"@effect-agent/platform-cloudflare/ProtectedNativeSession\") {}\n\nconst transportError = (reason: ProtectedTransportError[\"reason\"]) =>\n  new ProtectedTransportError({ reason });\n\nconst decode = <A>(schema: Schema.Codec<A>, value: unknown) =>\n  Schema.decodeUnknownEffect(schema)(value).pipe(Effect.mapError(() => transportError(\"provider\")));\n\n// Attach rejection handling inside the SDK callback before workerd can report foreign diagnostics.\nconst remote = <A>(run: (signal: AbortSignal) => Promise<A>) =>\n  Effect.tryPromise({\n    try: async (signal) => {\n      try {\n        return { ok: true as const, value: await run(signal) };\n      } catch {\n        return { ok: false as const };\n      }\n    },\n    catch: () => transportError(\"provider\"),\n  }).pipe(\n    Effect.flatMap((result) =>\n      result.ok ? Effect.succeed(result.value) : Effect.fail(transportError(\"provider\")),\n    ),\n  );\n\n/** Host-private scoped transport. Session capabilities are requirements; policy is per-pass data. */\nexport const makeProtectedNativeTransport = Effect.fn(\"ProtectedNativeTransport.make\")(function* (\n  policy: InteractiveBrowserPolicy,\n): Effect.fn.Return<\n  ProtectedBrowserTransport,\n  never,\n  ProtectedNativeSession | Crypto.Crypto | Scope.Scope\n> {\n  const session = yield* ProtectedNativeSession;\n  const { browser, page } = session;\n  const crypto = yield* Crypto.Crypto;\n  const clock = yield* Clock.Clock;\n  const uuid = crypto.randomUUIDv4.pipe(Effect.mapError(() => transportError(\"provider\")));\n  let closed = false;\n  let violation = false;\n  let documentRef: string | undefined;\n  const frames = new Map<Frame, FrameState>();\n  const controls = new Map<string, ControlState>();\n\n  const origin = (value: string) =>\n    Effect.try({\n      try: () => {\n        const url = new URL(value);\n\n        if (url.username || url.password) throw transportError(\"stale-reference\");\n        if (!Schema.is(CredentialOrigin)(url.origin)) throw transportError(\"unsupported\");\n        if (policy.network._tag === \"ExactHosts\" && !policy.network.allowedHosts.includes(url.host))\n          throw transportError(\"stale-reference\");\n\n        return url.origin;\n      },\n      catch: (cause) =>\n        Schema.is(ProtectedTransportError)(cause) ? cause : transportError(\"provider\"),\n    });\n\n  const check = Effect.suspend(() =>\n    closed || violation || !browser.isConnected()\n      ? Effect.fail(transportError(\"stale-reference\"))\n      : Effect.void,\n  );\n\n  const clear = () => {\n    controls.clear();\n    // Browser event callbacks only invalidate. The next Effect operation allocates the new identity.\n    documentRef = undefined;\n  };\n\n  const onNavigated = () => {\n    clear();\n  };\n\n  const onTarget = (target: { type(): string }) => {\n    if (target.type() !== \"page\") return;\n    // No popup or additional page may inherit an observation channel.\n    violation = true;\n    clear();\n  };\n\n  const invalidate = () => {\n    closed = true;\n    clear();\n  };\n\n  const context = Effect.gen(function* () {\n    yield* check;\n    const list = page.frames();\n\n    if (list.length > 16) return yield* transportError(\"unsupported\");\n    const topOrigin = yield* origin(page.url());\n    const frameOrigins = yield* Effect.forEach(list, (frame) => origin(frame.url()));\n\n    if (documentRef === undefined) documentRef = yield* uuid;\n\n    return yield* decode(ProtectedPageContext, { document: documentRef, topOrigin, frameOrigins });\n  });\n\n  const isCurrent = Effect.fn(\"ProtectedNativeTransport.isCurrent\")(function* (state: FrameState) {\n    if (state.frame.detached) return false;\n\n    return yield* remote(() =>\n      state.handle.evaluate((held) => {\n        if (typeof held !== \"object\" || held === null) return false;\n\n        return Reflect.get(held, \"doc\") === Reflect.get(globalThis, \"document\");\n      }),\n    );\n  });\n\n  const get = Effect.fn(\"ProtectedNativeTransport.get\")(function* (ref: string) {\n    yield* check;\n    const state = controls.get(ref);\n\n    if (\n      !state ||\n      state.expires <= (yield* clock.currentTimeMillis) ||\n      !(yield* isCurrent(state.frame))\n    )\n      return yield* transportError(\"stale-reference\");\n\n    const current = yield* remote(() =>\n      state.frame.handle.evaluate((held, index) => {\n        if (typeof held !== \"object\" || held === null) return null;\n\n        return Reflect.apply(Reflect.get(held, \"validate\"), held, [index]);\n      }, state.index),\n    );\n\n    const description = yield* decode(Schema.NullOr(Description), current);\n\n    if (description === null) return yield* transportError(\"stale-reference\");\n    const ctx = yield* context;\n\n    if (\n      ctx.topOrigin !== state.control.target.topOrigin ||\n      (yield* origin(state.frame.frame.url())) !== state.control.target.frameOrigin ||\n      (yield* origin(description.action)) !== state.control.target.recipientOrigin ||\n      description.role !== state.control.role\n    )\n      return yield* transportError(\"stale-reference\");\n\n    return state;\n  });\n\n  const close = yield* Effect.cached(\n    Effect.gen(function* () {\n      invalidate();\n\n      return yield* session.close;\n    }).pipe(\n      Effect.ensuring(\n        Effect.sync(() => {\n          page.off(\"framenavigated\", onNavigated);\n          page.off(\"framedetached\", onNavigated);\n          browser.off(\"targetcreated\", onTarget);\n          // Handles die with the exact session. Do not block remote termination on local disposal.\n          frames.clear();\n        }),\n      ),\n    ),\n  );\n\n  yield* Effect.acquireRelease(\n    Effect.sync(() => {\n      page.on(\"framenavigated\", onNavigated);\n      page.on(\"framedetached\", onNavigated);\n      browser.on(\"targetcreated\", onTarget);\n    }),\n    () => close,\n  );\n\n  return {\n    context,\n    invalidate,\n    close,\n    navigate: Effect.fn(\"ProtectedNativeTransport.navigate\")(function* (url) {\n      yield* check;\n      yield* origin(url);\n      clear();\n      yield* remote(() => page.goto(url, { waitUntil: \"load\" }));\n      yield* context;\n    }),\n    target: (ref) => get(ref).pipe(Effect.map((state) => state.control)),\n    discover: Effect.gen(function* () {\n      const before = yield* context;\n\n      controls.clear();\n      for (const state of frames.values()) yield* remote(() => state.handle.dispose());\n      frames.clear();\n      const discovered: Array<ProtectedBrowserControl> = [];\n      let text = \"\";\n      let truncated = false;\n\n      for (const frame of page.frames()) {\n        if (typeof frame.isolatedRealm !== \"function\") return yield* transportError(\"unsupported\");\n        const handle = yield* remote(() => frame.isolatedRealm().evaluateHandle(inspectFrame));\n\n        const state: FrameState = {\n          frame,\n          handle,\n          ref: yield* uuid,\n          document: yield* uuid,\n          forms: new Map(),\n        };\n\n        frames.set(frame, state);\n\n        const raw = yield* remote(() =>\n          handle.evaluate((held) => {\n            if (typeof held !== \"object\" || held === null) return null;\n\n            return Reflect.get(held, \"original\");\n          }),\n        );\n\n        const descriptions = yield* decode(Descriptions, raw);\n\n        for (let index = 0; index < descriptions.length; index++) {\n          const desc = descriptions[index];\n\n          if (!desc) continue;\n          if (discovered.length === 64) {\n            truncated = true;\n            break;\n          }\n          let form = state.forms.get(desc.formIndex);\n\n          if (form === undefined) {\n            form = yield* uuid;\n            state.forms.set(desc.formIndex, form);\n          }\n          // Unsupported destinations/controls are not offered as credential targets.\n          const recipient = yield* origin(desc.action).pipe(Effect.result);\n\n          if (recipient._tag === \"Failure\") continue;\n\n          const control = ProtectedBrowserControl.make({\n            ref: yield* uuid,\n            role: desc.role,\n            label: desc.label,\n            target: CredentialTarget.make({\n              topOrigin: before.topOrigin,\n              frameOrigin: yield* origin(frame.url()),\n              recipientOrigin: recipient.success,\n              document: state.document,\n              frame: state.ref,\n              form,\n            }),\n          });\n\n          controls.set(control.ref, {\n            frame: state,\n            index,\n            control,\n            expires: (yield* clock.currentTimeMillis) + 60_000,\n          });\n          discovered.push(control);\n        }\n\n        const rawText = yield* remote(() =>\n          handle.evaluate((held) => {\n            if (typeof held !== \"object\" || held === null) return null;\n\n            return Reflect.apply(Reflect.get(held, \"text\"), held, []);\n          }),\n        );\n\n        text += yield* decode(Schema.String.check(Schema.isMaxLength(65536)), rawText);\n        if (text.length > 65536) {\n          text = text.slice(0, 65536);\n          truncated = true;\n        }\n      }\n      if ((yield* context).document !== before.document)\n        return yield* transportError(\"stale-reference\");\n\n      return yield* decode(ProtectedDiscovery, {\n        ...before,\n        text,\n        controls: discovered,\n        truncated,\n      });\n    }),\n    fill: Effect.fn(\"ProtectedNativeTransport.fill\")(function* (ref, role, value) {\n      const dispatch = yield* ProtectedBrowserDispatch;\n      const state = yield* get(ref);\n\n      // CDP dispatch may mutate before its reply is lost, so uncertainty starts here.\n      yield* dispatch.mark;\n\n      const filled = yield* remote(() =>\n        state.frame.handle.evaluate(\n          (held, index, expectedRole, secret) => {\n            if (typeof held !== \"object\" || held === null) return false;\n\n            return Reflect.apply(Reflect.get(held, \"fill\"), held, [index, expectedRole, secret]);\n          },\n          state.index,\n          role,\n          Redacted.value(value),\n        ),\n      );\n\n      if (filled === \"unsupported\") return yield* transportError(\"unsupported\");\n      if (filled !== true) return yield* transportError(\"stale-reference\");\n    }),\n    click: Effect.fn(\"ProtectedNativeTransport.click\")(function* (ref) {\n      const state = yield* get(ref);\n\n      const clicked = yield* remote(() =>\n        state.frame.handle.evaluate((held, index) => {\n          if (typeof held !== \"object\" || held === null) return false;\n\n          return Reflect.apply(Reflect.get(held, \"click\"), held, [index]);\n        }, state.index),\n      );\n\n      if (clicked === \"needs-attention\") return yield* transportError(\"needs-attention\");\n      if (clicked !== true) return yield* transportError(\"stale-reference\");\n    }),\n  };\n}, Effect.withTracerEnabled(false));\n","/// <reference types=\"@cloudflare/workers-types\" />\nimport puppeteer, { type Browser } from \"@cloudflare/puppeteer\";\nimport { type InteractiveBrowserPolicy } from \"@effect-agent/sandbox/InteractiveBrowser\";\nimport { ProtectedBrowserError } from \"@effect-agent/sandbox/ProtectedBrowser\";\nimport { Clock, Context, Crypto, Effect, Layer, Redacted, Schema, type Scope } from \"effect\";\n\nimport { BrowserRunSessionLifecycle } from \"../internal/browser-session-lifecycle.ts\";\nimport { makeProtectedNativeTransport, ProtectedNativeSession } from \"./native.ts\";\nimport {\n  BrowserRunProtectedTransport,\n  ProtectedTransportError,\n  type ProtectedBrowserTransport,\n} from \"./policy.ts\";\n\n/**\n * Acquires through BROWSER with recording=false explicitly on the wire. The trusted provider's\n * documented opt-in semantics are the recording guarantee; no recording-status API exists.\n * Account operators remain trusted, and must not attach external observers to private passes.\n */\nexport const browserRunProtectedBindingLayer = (options: {\n  readonly browser: Pick<BrowserRun, \"fetch\">;\n}) =>\n  Layer.effect(BrowserRunProtectedTransport)(\n    Effect.gen(function* () {\n      const lifecycle = yield* BrowserRunSessionLifecycle;\n      const crypto = yield* Crypto.Crypto;\n\n      const open = Effect.fn(\"BrowserRunProtectedTransport.open\")(function* (\n        policy: InteractiveBrowserPolicy,\n      ): Effect.fn.Return<ProtectedBrowserTransport, ProtectedBrowserError, Scope.Scope> {\n        const failure = () =>\n          new ProtectedBrowserError({\n            reason: \"provider\",\n            dispatch: \"not-dispatched\",\n            milestone: \"none\",\n            observation: \"closed\",\n            cleanup: \"unconfirmed\",\n          });\n\n        let sessionId: Redacted.Redacted<string> | undefined;\n        let browser: Browser | undefined;\n        let driver: ProtectedBrowserTransport | undefined;\n        let invalid = false;\n        // SDK acquisition may finish after interruption. Its late-reply callback must await cleanup,\n        // using this pass's clock rather than starting an Effect runtime with default services.\n        const runCleanup = Effect.runPromiseWith(Context.make(Clock.Clock, yield* Clock.Clock));\n\n        const terminate = Effect.gen(function* () {\n          invalid = true;\n          driver?.invalidate();\n          if (sessionId === undefined) return \"unconfirmed\" as const;\n\n          const cleanup = yield* lifecycle.close(sessionId).pipe(\n            Effect.as(\"confirmed\" as const),\n            Effect.catchCause(() => Effect.succeed(\"unconfirmed\" as const)),\n            Effect.interruptible,\n            Effect.timeoutOrElse({\n              duration: \"10 seconds\",\n              orElse: () => Effect.succeed(\"unconfirmed\" as const),\n            }),\n          );\n\n          // Local disconnect is not remote-closure evidence. Do it even when confirmation fails.\n          const connected = browser;\n\n          if (connected !== undefined)\n            yield* Effect.promise(() => connected.disconnect()).pipe(\n              Effect.catchCause(() => Effect.void),\n              Effect.interruptible,\n              Effect.timeoutOrElse({ duration: \"1 second\", orElse: () => Effect.void }),\n            );\n\n          return cleanup;\n        });\n\n        const close = yield* Effect.cached(terminate);\n\n        yield* Effect.addFinalizer(() =>\n          close.pipe(\n            Effect.flatMap((state) =>\n              state === \"confirmed\"\n                ? Effect.void\n                : Effect.logWarning(\"Protected browser exact-session closure unconfirmed\"),\n            ),\n          ),\n        );\n\n        const acquired = yield* Effect.tryPromise({\n          try: async (signal) => {\n            let recordingDisabled = false;\n\n            const binding = {\n              fetch: async (input: RequestInfo | URL, init?: RequestInit) => {\n                const request = new Request(input, init);\n                const url = new URL(request.url);\n\n                if (url.pathname === \"/v1/devtools/browser\" && request.method === \"POST\") {\n                  url.searchParams.set(\"recording\", \"false\");\n                  recordingDisabled = url.searchParams.get(\"recording\") === \"false\";\n\n                  return options.browser.fetch(new Request(url, request));\n                }\n\n                return options.browser.fetch(request);\n              },\n            };\n\n            const acquired = await puppeteer.acquire(binding, {\n              recording: false,\n              keep_alive: Math.max(10_000, policy.maxElapsedMillis),\n            });\n\n            sessionId = Redacted.make(\n              Schema.decodeUnknownSync(Schema.String.check(Schema.isUUID()))(acquired.sessionId),\n            );\n            if (!recordingDisabled || signal.aborted || invalid) {\n              await runCleanup(terminate);\n              throw new ProtectedTransportError({ reason: \"stale-reference\" });\n            }\n            // Initial attachment only. No recovery/reconnection path exists.\n            browser = await puppeteer.connect(options.browser, acquired.sessionId);\n            if (signal.aborted || invalid) {\n              await runCleanup(terminate);\n              throw new ProtectedTransportError({ reason: \"stale-reference\" });\n            }\n            const context = await browser.createBrowserContext();\n            const page = await context.newPage();\n\n            await page.setBypassServiceWorker(true);\n            await page.setRequestInterception(true);\n            page.on(\"request\", (request) => {\n              let allowed = policy.network._tag === \"Unrestricted\";\n\n              try {\n                const url = new URL(request.url());\n\n                allowed ||=\n                  policy.network._tag === \"ExactHosts\" &&\n                  url.protocol === \"https:\" &&\n                  !url.username &&\n                  !url.password &&\n                  policy.network.allowedHosts.includes(url.host);\n              } catch {\n                /* Refuse malformed destinations. */\n              }\n              void (\n                allowed && !invalid ? request.continue() : request.abort(\"blockedbyclient\")\n              ).catch(() => {\n                invalid = true;\n                driver?.invalidate();\n              });\n            });\n            if (signal.aborted || invalid) {\n              await runCleanup(terminate);\n              throw new ProtectedTransportError({ reason: \"stale-reference\" });\n            }\n\n            return ProtectedNativeSession.of({ browser, page, close });\n          },\n          catch: failure,\n        }).pipe(\n          Effect.timeoutOrElse({\n            duration: Math.min(policy.maxElapsedMillis, 30_000),\n            orElse: () =>\n              Effect.fail(new ProtectedBrowserError({ ...failure(), reason: \"timeout\" })),\n          }),\n          Effect.catch((error) =>\n            close.pipe(\n              Effect.flatMap((cleanup) =>\n                Effect.fail(new ProtectedBrowserError({ ...error, cleanup })),\n              ),\n            ),\n          ),\n        );\n\n        driver = yield* makeProtectedNativeTransport(policy).pipe(\n          Effect.provideService(ProtectedNativeSession, acquired),\n          Effect.provideService(Crypto.Crypto, crypto),\n        );\n\n        return driver;\n      }, Effect.withTracerEnabled(false));\n\n      return { open };\n    }),\n  );\n"],"mappings":";;;;;;AAwCA,IAAa,0BAAb,cAA6C,OAAO,YAAqC,CAAC,CACxF,2BACA,EAAE,QAAQ,OAAO,SAAS;CAAC;CAAmB;CAAmB;CAAe;AAAU,CAAC,EAAE,CAC/F,CAAC,CAAC,CAAC;;AAGH,IAAa,2BAAb,cAA8C,QAAQ,QAGpD,CAAC,CAAC,4DAA4D,CAAC,CAAC,CAAC;;AAoBnE,IAAa,+BAAb,cAAkD,QAAQ,QAOxD,CAAC,CAAC,gEAAgE,CAAC,CAAC,CAAC;AAEvE,MAAa,uBAAuB,OAAO,OAAO;CAChD,UAAU,OAAO,OAAO,MAAM,OAAO,OAAO,CAAC;CAC7C,WAAW;CACX,cAAc,OAAO,MAAM,gBAAgB,CAAC,CAAC,MAAM,OAAO,YAAY,EAAE,CAAC;AAC3E,CAAC;AAED,MAAa,qBAAqB,OAAO,OAAO;CAC9C,GAAG,qBAAqB;CACxB,MAAM,OAAO,OAAO,MAAM,OAAO,YAAY,KAAS,CAAC;CACvD,UAAU,OAAO,MAAM,uBAAuB,CAAC,CAAC,MAAM,OAAO,YAAY,EAAE,CAAC;CAC5E,WAAW,OAAO;AACpB,CAAC;AAED,MAAM,cAAc,GAAqB,MACvC,EAAE,cAAc,EAAE,aAClB,EAAE,gBAAgB,EAAE,eACpB,EAAE,oBAAoB,EAAE,mBACxB,EAAE,aAAa,EAAE,YACjB,EAAE,UAAU,EAAE,SACd,EAAE,SAAS,EAAE;AAEf,MAAM,WAAW,SACf,SAAS,cAAc,SAAS,aAC5B,UACA,KAAK,WAAW,OAAO,IACrB,SACA,KAAA;AAER,MAAM,aAAa,UAAqC,SAA0C;CAChG,IAAI,SAAS,SAAS,mBACpB,OAAO,SAAS,aACZ,SAAS,WACT,SAAS,aACP,SAAS,WACT,KAAA;CAER,QAAQ,MAAR;EACE,KAAK,aACH,OAAO,SAAS;EAClB,KAAK,eACH,OAAO,SAAS;EAClB,KAAK,eACH,OAAO,SAAS;EAClB,KAAK,qBACH,OAAO,SAAS;EAClB,KAAK,oBACH,OAAO,SAAS;EAClB,KAAK,sBACH,OAAO,SAAS;EAClB,KAAK;EACL,KAAK,YACH;CACJ;AACF;;;;;;AAOA,MAAa,iCACX,MAAM,OAAO,gBAAgB,CAAC,CAC5B,OAAO,IAAI,aAAa;CACtB,MAAM,YAAY,OAAO;CACzB,MAAM,SAAS,OAAO,OAAO;CAic7B,OAAO,EAAE,MA/bI,OAAO,GAAG,uBAAuB,CAAC,CAAC,WAC9C,OAKA;EACA,MAAM,gBAAgB,WACpB,IAAI,sBAAsB;GACxB;GACA,UAAU;GACV,WAAW;GACX,aAAa;GACb,SAAS;EACX,CAAC;EAEH,MAAM,gBAAgB,OAAO,OAAO,oBAAoB,wBAAwB,CAAC,CAC/E,KACF,CAAC,CAAC,KAAK,OAAO,eAAe,aAAa,QAAQ,CAAC,CAAC;EAEpD,IAAI,cAAc,QAAQ,SAAS,aAAa,OAAO,OAAO,aAAa,aAAa;EAExF,MAAM,SAAS,yBAAyB,KAAK;GAC3C,GAAG;GACH,SACE,cAAc,QAAQ,SAAS,eAC3B;IAAE,MAAM;IAAc,cAAc,CAAC,GAAG,cAAc,QAAQ,YAAY;GAAE,IAC5E,EAAE,MAAM,eAAe;EAC/B,CAAC;EAGD,MAAM,SAAS,OAAO;EACtB,MAAM,UAAU,OAAO,MAAM;EAC7B,MAAM,SAAS,OAAO,UAAU,KAAK,MAAM;EAC3C,MAAM,OAAO,OAAO,UAAU,KAAK,CAAC;EACpC,IAAI,cAAqD;EACzD,IAAI,UAAwC;EAC5C,IAAI,UAAU;EACd,IAAI,WAA8C;EAClD,IAAI,YAAgD;EACpD,MAAM,YAAqC,CAAC;EAE5C,MAAM,yBAAS,IAAI,IAUjB;EAEF,MAAM,QAAQ,WACZ,IAAI,sBAAsB;GAAE;GAAQ;GAAU;GAAW;GAAa;EAAQ,CAAC;EAEjF,MAAM,QAAQ,OAAO,OAAO,OAC1B,OAAO,gBACL,OAAO,IAAI,aAAa;GACtB,cAAc;GACd,OAAO,MAAM;GACb,OAAO,WAAW;GAClB,UAAU,OAAO,OAAO,MAAM,KAC5B,OAAO,eACP,OAAO,cAAc;IACnB,UAAU;IACV,cAAc,OAAO,QAAQ,aAAsB;GACrD,CAAC,GACD,OAAO,iBAAiB,OAAO,QAAQ,aAAsB,CAAC,CAChE;GAEA,OAAO;EACT,CAAC,CACH,CACF;EAEA,OAAO,OAAO,mBACZ,MAAM,KACJ,OAAO,SAAS,WACd,WAAW,gBACP,OAAO,WAAW,qDAAqD,IACvE,OAAO,IACb,CACF,CACF;EAEA,MAAM,UAAgB,WACpB,OAAO,KAAK,OAAO,UAAU,UAAU,KAAK,MAAM,MAAM,CAAC,CAAC;EAE5D,MAAM,UAAa,QAAyB,UAC1C,OAAO,oBAAoB,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,OAAO,eAAe,KAAK,UAAU,CAAC,CAAC;EAExF,MAAM,SAAS,OAAO,OAAO,KAAK,OAAO,UAAU,UAAU,KAAK,MAAM,MAAM,CAAC,CAAC;EAChF,MAAM,cAAc,OAAO,OAAO,OAAO;EAEzC,MAAM,oBAAoB,OAAO,IAAI,aAAa;GAChD,MAAM,UAAU,OAAO;GAEvB,IAAI,UAAU,SAAS,GAAG;IACxB,cAAc;IAMd,KAAI,OAJoB,OACrB,YAAY;KAAE,GAAG;KAAS,QAAQ,OAAO;KAAQ,WAAW,CAAC,GAAG,SAAS;IAAE,CAAC,CAAC,CAC7E,KAAK,OAAO,UAAU,UAAU,KAAK,MAAM,MAAM,CAAC,CAAC,OAErC,sCACf,OAAO,OAAO,KAAK,qBAAqB;IAC1C,cAAc;GAChB;GAEA,OAAO;EACT,CAAC;EAED,MAAM,UAAU,QAAgB,OAAO,OAAO,OAAO,GAAG,CAAC;EAEzD,MAAM,WAAc,WAAc;GAGhC,OAFc,IAAI,YAAY,CAAC,CAAC,OAAO,KAAK,UAAU,MAAM,CAAC,CAAC,CAAC,cAE/C,OAAO,mBACnB,OAAO,QAAQ,MAAM,IACrB,OAAO,KAAK,KAAK,OAAO,CAAC;EAC/B;EAEA,MAAM,OAAU,WACd,KACG,uBAAuB,CAAC,CAAC,CACxB,OAAO,IAAI,aAAa;GACtB,WAAW;GACX,YAAY;GACZ,IAAI,gBAAgB,UAAU,OAAO,OAAO,KAAK,QAAQ;GACzD,IAAI,EAAE,UAAU,OAAO,YAAY,OAAO,OAAO,KAAK,OAAO;GAE7D,MAAM,YACJ,OAAO,qBAAqB,OAAO,MAAM,qBAAqB;GAEhE,IAAI,aAAa,GAAG;IAClB,OAAO;IAEP,OAAO,OAAO,KAAK,SAAS;GAC9B;GAEA,OAAO,OAAO,OAAO,KACnB,OAAO,cAAc;IACnB,UAAU;IACV,cAAc,OAAO,KAAK,KAAK,SAAS,CAAC;GAC3C,CAAC,GACD,OAAO,YAAY,UACjB,OAAO,IAAI,aAAa;IAEtB,MAAM,QAAQ,MAAM,QAAQ,MACzB,WACC,OAAO,SAAS,UAAU,OAAO,GAAG,qBAAqB,CAAC,CAAC,OAAO,KAAK,CAC3E;IAEA,MAAM,SACJ,OAAO,SAAS,UAAU,OAAO,GAAG,qBAAqB,CAAC,CAAC,MAAM,KAAK,IAClE,MAAM,MAAM,SACZ;IAEN,MAAM,YAAY,MAAM,QAAQ,MAAM,WAAW,OAAO,SAAS,WAAW;IAE5E,IACE,aAAa,oBACb,aACA,WAAW,cACX,WAAW,WAEX,OAAO;IACT,IAAI,WAAW,OAAO,OAAO,OAAO;IAEpC,OAAO,OAAO,KACZ,aAAa,yBAAyB,WAAW,aAC7C,oBACA,MACN;GACF,CAAC,CACH,GACA,OAAO,kBAAkB,KAAK,GAC9B,OAAO,kBAAkB,KAAK,CAChC;EACF,CAAC,CACH,CAAC,CACA,KACC,OAAO,SAAS,WACd,OAAO,OAAO,MAAM,IAChB,OAAO,QAAQ,OAAO,KAAK,IAC3B,OAAO,KACL,IAAI,sBAAsB;GACxB,QAAQ;GACR,UAAU;GACV,WAAW;GACX;GACA;EACF,CAAC,CACH,CACN,CACF;EAEJ,OAAO;GACL;GACA,WAAW,YACT,IACE,OAAO,IAAI,aAAa;IACtB,MAAM,UAAU,OAAO,OAAO,oBAAoB,wBAAwB,CAAC,CACzE,OACF,CAAC,CAAC,KAAK,OAAO,eAAe,KAAK,QAAQ,CAAC,CAAC;IAE5C,IAAI;IAEJ,IAAI;KACF,MAAM,IAAI,IAAI,QAAQ,GAAG;IAC3B,QAAQ;KACN,OAAO,OAAO,KAAK,QAAQ;IAC7B;IACA,IACE,IAAI,aAAa,YACjB,IAAI,YACJ,IAAI,YACH,OAAO,QAAQ,SAAS,gBACvB,CAAC,OAAO,QAAQ,aAAa,SAAS,IAAI,IAAI,GAEhD,OAAO,OAAO,KAAK,QAAQ;IAC7B,IAAI,UAAU,SAAS,GAAG,OAAO;IACjC,OAAO,MAAM;IACb,WAAW;IACX,OAAO,OAAO,OAAO,SAAS,QAAQ,GAAG,CAAC;IAC1C,WAAW;IACX,OAAO;GACT,CAAC,CACH;GACF,SAAS,IACP,OAAO,IAAI,aAAa;IACtB,MAAM,SAAS,OAAO;IACtB,MAAM,SAAS,OAAO,OAAO,OAAO,QAAQ;IAC5C,MAAM,QAAQ,OAAO;IAErB,IAAI,OAAO,aAAa,MAAM,YAAY,OAAO,aAAa,MAAM,UAClE,OAAO,OAAO,KAAK,iBAAiB;IAEtC,OAAO,OAAO,QACZ,4BAA4B,KAAK;KAC/B,GAAG;KACH,aAAa,UAAU,SAAS,IAAI,4BAA4B;IAClE,CAAC,CACH;GACF,CAAC,CACH;GACA,QAAQ,YACN,IACE,OAAO,IAAI,aAAa;IACtB,MAAM,UAAU,OAAO,OAAO,oBAAoB,qBAAqB,CAAC,CACtE,OACF,CAAC,CAAC,KAAK,OAAO,eAAe,KAAK,QAAQ,CAAC,CAAC;IAE5C,OAAO;IACP,MAAM,UAAU,OAAO,OAAO,QAAQ,GAAG;IAGzC,IAAI,QAAQ,SAAS,UAAU,QAAQ,SAAS,UAC9C,OAAO,OAAO,KAAK,aAAa;IAClC,WAAW;IACX,OAAO,OAAO,OAAO,MAAM,QAAQ,GAAG,CAAC;IACvC,WAAW;IACX,OAAO;GACT,CAAC,CACH;GACF,uBAAuB,YACrB,IACE,OAAO,IAAI,aAAa;IACtB,MAAM,UAAU,OAAO,OAAO,oBAAoB,oBAAoB,CAAC,CACrE,OACF,CAAC,CAAC,KAAK,OAAO,eAAe,KAAK,QAAQ,CAAC,CAAC;IAE5C,OAAO;IACP,MAAM,UAAU,OAAO,OAAO,QAAQ,MAAM;IAE5C,IAAI,QAAQ,QAAQ,IAAI,MAAM,QAAQ,MAAM,OAAO,OAAO,KAAK,aAAa;IAC5E,MAAM,YAAY,OAAO;IAEzB,MAAM,aAAa,OAAO,OACvB,KAAK;KAAE,QAAQ;KAAW,MAAM,QAAQ;KAAM,QAAQ,QAAQ;IAAO,CAAC,CAAC,CACvE,KAAK,OAAO,UAAU,UAAU,KAAK,MAAM,MAAM,CAAC,CAAC;IAEtD,MAAM,MAAM,OAAO,MAAM;IAEzB,KAAK,MAAM,CAAC,KAAK,UAAU,QAAQ,IAAI,MAAM,WAAW,KAAK,OAAO,OAAO,GAAG;IAC9E,IAAI,WAAW,SAAS,MAAM,OAAO,OAAO,WAAW,SAAS,IAC9D,OAAO,OAAO,KAAK,OAAO;IAC5B,IAAI,CAAC,WAAW,QAAQ,SAAS,OAAO,OAAO,QAAQ,MAAM,EAAA,CAAG,MAAM,GACpE,OAAO,OAAO,KAAK,iBAAiB;IACtC,MAAM,UAAU,MAAM;IACtB,MAAM,SAAiC,CAAC;IACxC,MAAM,0BAAyB,IAAI,IAAI;IAEvC,KAAK,MAAM,aAAa,YAAY;KAClC,MAAM,WAAW,OAAO,OAAO,yBAAyB,UAAU,QAAQ;KAE1E,MAAM,MAAM,OAAO,OAAO,aAAa,KACrC,OAAO,eAAe,KAAK,UAAU,CAAC,CACxC;KAEA,QAAQ,IAAI,KAAK;MACf,QAAQ;MACR,KAAK,UAAU;MACf,QAAQ,QAAQ;MAChB,WAAW,QAAQ;MACnB,MAAM,QAAQ;MACd;KACF,CAAC;KACD,OAAO,KAAK,gBAAgB,KAAK;MAAE;MAAK,MAAM,QAAQ;MAAM;KAAS,CAAC,CAAC;IACzE;IACA,OAAO,QAAQ,MAAM;IACrB,KAAK,MAAM,CAAC,KAAK,UAAU,SAAS,OAAO,IAAI,KAAK,KAAK;IAEzD,OAAO;GACT,CAAC,CACH;GACF,gBAAgB,YACd,IACE,OAAO,IAAI,aAAa;IACtB,MAAM,UAAU,OAAO,OAAO,oBAAoB,aAAa,CAAC,CAAC,OAAO,CAAC,CAAC,KACxE,OAAO,eAAe,KAAK,QAAQ,CAAC,CACtC;IAEA,MAAM,QAAQ,OAAO,IAAI,QAAQ,KAAK;IAEtC,IAAI,UAAU,KAAA,KAAa,MAAM,YAAY,OAAO,MAAM,oBACxD,OAAO,OAAO,KAAK,iBAAiB;IACtC,MAAM,YAAY,OAAO;IAEzB,IAAI,SAAS,MAAM,SAAS,MAAM,SAAS,MAAM,MAAM,MAAM,GAC3D,OAAO,OAAO,KAAK,QAAQ;IAC7B,IAAI,MAAM,SAAS,UAAU,QAAQ,WAAW,KAAA,GAC9C,OAAO,OAAO,KAAK,aAAa;IAClC,IACE,IAAI,IAAI,QAAQ,OAAO,KAAK,UAAU,MAAM,GAAG,CAAC,CAAC,CAAC,SAChD,QAAQ,OAAO,UACjB,IAAI,IAAI,QAAQ,OAAO,KAAK,UAAU,MAAM,IAAI,CAAC,CAAC,CAAC,SAAS,QAAQ,OAAO,QAE3E,OAAO,OAAO,KAAK,QAAQ;IAE7B,MAAM,WAAW,OAAO,IAAI,aAAa;KACvC,IAAI,CAAC,WAAW,MAAM,SAAS,OAAO,OAAO,MAAM,SAAS,EAAA,CAAG,MAAM,GACnE,OAAO,OAAO,KAAK,iBAAiB;KACtC,KAAK,MAAM,SAAS,QAAQ,QAAQ;MAClC,MAAM,UAAU,OAAO,OAAO,MAAM,GAAG;MAEvC,IACE,MAAM,SAAS,QAAQ,QACvB,QAAQ,MAAM,IAAI,MAAM,MAAM,QAC9B,CAAC,WAAW,MAAM,QAAQ,QAAQ,MAAM,GAExC,OAAO,OAAO,KAAK,QAAQ;KAC/B;KACA,IAAI,QAAQ,WAAW,KAAA,GAAW;MAChC,MAAM,SAAS,OAAO,OAAO,QAAQ,MAAM;MAE3C,IAAI,OAAO,SAAS,YAAY,CAAC,WAAW,MAAM,QAAQ,OAAO,MAAM,GACrE,OAAO,OAAO,KAAK,QAAQ;KAC/B;IACF,CAAC;IAED,OAAO;IAEP,MAAM,gBAA4C;KAChD,QAAQ;KACR,KAAK,MAAM;KACX,MAAM,MAAM;KACZ,QAAQ,MAAM;KACd,OAAO,QAAQ,OAAO,KAAK,UAAU,MAAM,IAAI;KAC/C,QAAQ,QAAQ,WAAW,KAAA;IAC7B;IAEA,MAAM,YAAY,OAAO,IAAI,aAAa;KACxC,IAAI,SAAS,MAAM,OAAO,MAAM,MAAM,SAAS,MAAM,SAAS,GAC5D,OAAO,OAAO,KAAK,QAAQ;KAC7B,OAAO,OACJ,UAAU,aAAa,CAAC,CACxB,KAAK,OAAO,UAAU,UAAU,KAAK,MAAM,MAAM,CAAC,CAAC;IACxD,CAAC;IAED,OAAO;IACP,OAAO;IAEP,MAAM,MAAM,OAAO,OAChB,QAAQ,aAAa,CAAC,CACtB,KAAK,OAAO,UAAU,UAAU,KAAK,MAAM,MAAM,CAAC,CAAC;IAEtD,MAAM,WAAW,OAAO,OAAO,oBAC7B,MAAM,SAAS,UAAU,kBAAkB,cAC7C,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,OAAO,eAAe,KAAK,UAAU,CAAC,CAAC;IAEnD,KAAK,MAAM,SAAS,QAAQ,QAC1B,IAAI,UAAU,UAAU,MAAM,IAAI,MAAM,KAAA,GACtC,OAAO,OAAO,KAAK,oBAAoB;IAC3C,OAAO,OAAO,QAAQ,KAAK;IAC3B,KAAK,MAAM,SAAS,QAAQ,QAAQ;KAClC,OAAO;KACP,OAAO;KACP,MAAM,QAAQ,UAAU,UAAU,MAAM,IAAI;KAE5C,IAAI,UAAU,KAAA,GAAW,OAAO,OAAO,KAAK,oBAAoB;KAChE,cAAc;KACd,OAAO,OAAO,OAAO,KAAK,MAAM,KAAK,MAAM,MAAM,KAAK,CAAC,CAAC,CAAC,KACvD,OAAO,eAAe,0BAA0B,EAC9C,MAAM,OAAO,WAAW;MACtB,WAAW;MACX,IAAI,CAAC,UAAU,MAAM,WAAW,WAAW,QAAQ,MAAM,MAAM,CAAC,GAC9D,UAAU,KAAK,MAAM,MAAM;KAC/B,CAAC,EACH,CAAC,CACH;KACA,WAAW;KACX,YAAY;IACd;IACA,YAAY;IACZ,IAAI,QAAQ,WAAW,KAAA,GAAW;KAChC,OAAO;KACP,OAAO;KACP,MAAM,MAAM,QAAQ;KAEpB,WAAW;KACX,OAAO,OAAO,OAAO,MAAM,GAAG,CAAC,CAAC,CAAC,KAC/B,OAAO,OAAO,UAAU;MACtB,IAAI,MAAM,WAAW,mBAAmB,WAAW;MAEnD,OAAO,OAAO,KAAK,KAAK;KAC1B,CAAC,CACH;KACA,WAAW;KACX,YAAY;IACd;IACA,OAAO;IAEP,OAAO,oBAAoB,KAAK;KAC9B;KACA;KACA;KACA;KACA,gBAAgB;IAClB,CAAC;GACH,CAAC,CACH;EACJ;CACF,GAAG,OAAO,kBAAkB,KAAK,CAErB,EAAE;AAChB,CAAC,CACH;;;AC/kBF,MAAa,qBAAqB;AAElC,MAAa,eAAe;;;;;;;;;;;;;;;;8FAgBkE,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACOjH,MAAM,cAAc,OAAO,OAAO;CAChC,MAAM,wBAAwB,OAAO;CACrC,WAAW,OAAO;CAClB,QAAQ,OAAO,OAAO,MAAM,OAAO,YAAY,kBAAkB,CAAC;CAClE,OAAO,OAAO,OAAO,MAAM,OAAO,YAAY,GAAG,CAAC;AACpD,CAAC;AAED,MAAM,eAAe,OAAO,MAAM,OAAO,OAAO,WAAW,CAAC,CAAC,CAAC,MAAM,OAAO,YAAY,EAAE,CAAC;;AAiB1F,IAAa,yBAAb,cAA4C,QAAQ,QAOlD,CAAC,CAAC,0DAA0D,CAAC,CAAC,CAAC;AAEjE,MAAM,kBAAkB,WACtB,IAAI,wBAAwB,EAAE,OAAO,CAAC;AAExC,MAAM,UAAa,QAAyB,UAC1C,OAAO,oBAAoB,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,OAAO,eAAe,eAAe,UAAU,CAAC,CAAC;AAGlG,MAAM,UAAa,QACjB,OAAO,WAAW;CAChB,KAAK,OAAO,WAAW;EACrB,IAAI;GACF,OAAO;IAAE,IAAI;IAAe,OAAO,MAAM,IAAI,MAAM;GAAE;EACvD,QAAQ;GACN,OAAO,EAAE,IAAI,MAAe;EAC9B;CACF;CACA,aAAa,eAAe,UAAU;AACxC,CAAC,CAAC,CAAC,KACD,OAAO,SAAS,WACd,OAAO,KAAK,OAAO,QAAQ,OAAO,KAAK,IAAI,OAAO,KAAK,eAAe,UAAU,CAAC,CACnF,CACF;;AAGF,MAAa,+BAA+B,OAAO,GAAG,+BAA+B,CAAC,CAAC,WACrF,QAKA;CACA,MAAM,UAAU,OAAO;CACvB,MAAM,EAAE,SAAS,SAAS;CAC1B,MAAM,SAAS,OAAO,OAAO;CAC7B,MAAM,QAAQ,OAAO,MAAM;CAC3B,MAAM,OAAO,OAAO,aAAa,KAAK,OAAO,eAAe,eAAe,UAAU,CAAC,CAAC;CACvF,IAAI,SAAS;CACb,IAAI,YAAY;CAChB,IAAI;CACJ,MAAM,yBAAS,IAAI,IAAuB;CAC1C,MAAM,2BAAW,IAAI,IAA0B;CAE/C,MAAM,UAAU,UACd,OAAO,IAAI;EACT,WAAW;GACT,MAAM,MAAM,IAAI,IAAI,KAAK;GAEzB,IAAI,IAAI,YAAY,IAAI,UAAU,MAAM,eAAe,iBAAiB;GACxE,IAAI,CAAC,OAAO,GAAG,gBAAgB,CAAC,CAAC,IAAI,MAAM,GAAG,MAAM,eAAe,aAAa;GAChF,IAAI,OAAO,QAAQ,SAAS,gBAAgB,CAAC,OAAO,QAAQ,aAAa,SAAS,IAAI,IAAI,GACxF,MAAM,eAAe,iBAAiB;GAExC,OAAO,IAAI;EACb;EACA,QAAQ,UACN,OAAO,GAAG,uBAAuB,CAAC,CAAC,KAAK,IAAI,QAAQ,eAAe,UAAU;CACjF,CAAC;CAEH,MAAM,QAAQ,OAAO,cACnB,UAAU,aAAa,CAAC,QAAQ,YAAY,IACxC,OAAO,KAAK,eAAe,iBAAiB,CAAC,IAC7C,OAAO,IACb;CAEA,MAAM,cAAc;EAClB,SAAS,MAAM;EAEf,cAAc,KAAA;CAChB;CAEA,MAAM,oBAAoB;EACxB,MAAM;CACR;CAEA,MAAM,YAAY,WAA+B;EAC/C,IAAI,OAAO,KAAK,MAAM,QAAQ;EAE9B,YAAY;EACZ,MAAM;CACR;CAEA,MAAM,mBAAmB;EACvB,SAAS;EACT,MAAM;CACR;CAEA,MAAM,UAAU,OAAO,IAAI,aAAa;EACtC,OAAO;EACP,MAAM,OAAO,KAAK,OAAO;EAEzB,IAAI,KAAK,SAAS,IAAI,OAAO,OAAO,eAAe,aAAa;EAChE,MAAM,YAAY,OAAO,OAAO,KAAK,IAAI,CAAC;EAC1C,MAAM,eAAe,OAAO,OAAO,QAAQ,OAAO,UAAU,OAAO,MAAM,IAAI,CAAC,CAAC;EAE/E,IAAI,gBAAgB,KAAA,GAAW,cAAc,OAAO;EAEpD,OAAO,OAAO,OAAO,sBAAsB;GAAE,UAAU;GAAa;GAAW;EAAa,CAAC;CAC/F,CAAC;CAED,MAAM,YAAY,OAAO,GAAG,oCAAoC,CAAC,CAAC,WAAW,OAAmB;EAC9F,IAAI,MAAM,MAAM,UAAU,OAAO;EAEjC,OAAO,OAAO,aACZ,MAAM,OAAO,UAAU,SAAS;GAC9B,IAAI,OAAO,SAAS,YAAY,SAAS,MAAM,OAAO;GAEtD,OAAO,QAAQ,IAAI,MAAM,KAAK,MAAM,QAAQ,IAAI,YAAY,UAAU;EACxE,CAAC,CACH;CACF,CAAC;CAED,MAAM,MAAM,OAAO,GAAG,8BAA8B,CAAC,CAAC,WAAW,KAAa;EAC5E,OAAO;EACP,MAAM,QAAQ,SAAS,IAAI,GAAG;EAE9B,IACE,CAAC,SACD,MAAM,YAAY,OAAO,MAAM,sBAC/B,EAAE,OAAO,UAAU,MAAM,KAAK,IAE9B,OAAO,OAAO,eAAe,iBAAiB;EAEhD,MAAM,UAAU,OAAO,aACrB,MAAM,MAAM,OAAO,UAAU,MAAM,UAAU;GAC3C,IAAI,OAAO,SAAS,YAAY,SAAS,MAAM,OAAO;GAEtD,OAAO,QAAQ,MAAM,QAAQ,IAAI,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC;EACnE,GAAG,MAAM,KAAK,CAChB;EAEA,MAAM,cAAc,OAAO,OAAO,OAAO,OAAO,WAAW,GAAG,OAAO;EAErE,IAAI,gBAAgB,MAAM,OAAO,OAAO,eAAe,iBAAiB;EAGxE,KACE,OAHiB,QAAA,CAGb,cAAc,MAAM,QAAQ,OAAO,cACtC,OAAO,OAAO,MAAM,MAAM,MAAM,IAAI,CAAC,OAAO,MAAM,QAAQ,OAAO,gBACjE,OAAO,OAAO,YAAY,MAAM,OAAO,MAAM,QAAQ,OAAO,mBAC7D,YAAY,SAAS,MAAM,QAAQ,MAEnC,OAAO,OAAO,eAAe,iBAAiB;EAEhD,OAAO;CACT,CAAC;CAED,MAAM,QAAQ,OAAO,OAAO,OAC1B,OAAO,IAAI,aAAa;EACtB,WAAW;EAEX,OAAO,OAAO,QAAQ;CACxB,CAAC,CAAC,CAAC,KACD,OAAO,SACL,OAAO,WAAW;EAChB,KAAK,IAAI,kBAAkB,WAAW;EACtC,KAAK,IAAI,iBAAiB,WAAW;EACrC,QAAQ,IAAI,iBAAiB,QAAQ;EAErC,OAAO,MAAM;CACf,CAAC,CACH,CACF,CACF;CAEA,OAAO,OAAO,eACZ,OAAO,WAAW;EAChB,KAAK,GAAG,kBAAkB,WAAW;EACrC,KAAK,GAAG,iBAAiB,WAAW;EACpC,QAAQ,GAAG,iBAAiB,QAAQ;CACtC,CAAC,SACK,KACR;CAEA,OAAO;EACL;EACA;EACA;EACA,UAAU,OAAO,GAAG,mCAAmC,CAAC,CAAC,WAAW,KAAK;GACvE,OAAO;GACP,OAAO,OAAO,GAAG;GACjB,MAAM;GACN,OAAO,aAAa,KAAK,KAAK,KAAK,EAAE,WAAW,OAAO,CAAC,CAAC;GACzD,OAAO;EACT,CAAC;EACD,SAAS,QAAQ,IAAI,GAAG,CAAC,CAAC,KAAK,OAAO,KAAK,UAAU,MAAM,OAAO,CAAC;EACnE,UAAU,OAAO,IAAI,aAAa;GAChC,MAAM,SAAS,OAAO;GAEtB,SAAS,MAAM;GACf,KAAK,MAAM,SAAS,OAAO,OAAO,GAAG,OAAO,aAAa,MAAM,OAAO,QAAQ,CAAC;GAC/E,OAAO,MAAM;GACb,MAAM,aAA6C,CAAC;GACpD,IAAI,OAAO;GACX,IAAI,YAAY;GAEhB,KAAK,MAAM,SAAS,KAAK,OAAO,GAAG;IACjC,IAAI,OAAO,MAAM,kBAAkB,YAAY,OAAO,OAAO,eAAe,aAAa;IACzF,MAAM,SAAS,OAAO,aAAa,MAAM,cAAc,CAAC,CAAC,eAAe,YAAY,CAAC;IAErF,MAAM,QAAoB;KACxB;KACA;KACA,KAAK,OAAO;KACZ,UAAU,OAAO;KACjB,uBAAO,IAAI,IAAI;IACjB;IAEA,OAAO,IAAI,OAAO,KAAK;IAEvB,MAAM,MAAM,OAAO,aACjB,OAAO,UAAU,SAAS;KACxB,IAAI,OAAO,SAAS,YAAY,SAAS,MAAM,OAAO;KAEtD,OAAO,QAAQ,IAAI,MAAM,UAAU;IACrC,CAAC,CACH;IAEA,MAAM,eAAe,OAAO,OAAO,cAAc,GAAG;IAEpD,KAAK,IAAI,QAAQ,GAAG,QAAQ,aAAa,QAAQ,SAAS;KACxD,MAAM,OAAO,aAAa;KAE1B,IAAI,CAAC,MAAM;KACX,IAAI,WAAW,WAAW,IAAI;MAC5B,YAAY;MACZ;KACF;KACA,IAAI,OAAO,MAAM,MAAM,IAAI,KAAK,SAAS;KAEzC,IAAI,SAAS,KAAA,GAAW;MACtB,OAAO,OAAO;MACd,MAAM,MAAM,IAAI,KAAK,WAAW,IAAI;KACtC;KAEA,MAAM,YAAY,OAAO,OAAO,KAAK,MAAM,CAAC,CAAC,KAAK,OAAO,MAAM;KAE/D,IAAI,UAAU,SAAS,WAAW;KAElC,MAAM,UAAU,wBAAwB,KAAK;MAC3C,KAAK,OAAO;MACZ,MAAM,KAAK;MACX,OAAO,KAAK;MACZ,QAAQ,iBAAiB,KAAK;OAC5B,WAAW,OAAO;OAClB,aAAa,OAAO,OAAO,MAAM,IAAI,CAAC;OACtC,iBAAiB,UAAU;OAC3B,UAAU,MAAM;OAChB,OAAO,MAAM;OACb;MACF,CAAC;KACH,CAAC;KAED,SAAS,IAAI,QAAQ,KAAK;MACxB,OAAO;MACP;MACA;MACA,UAAU,OAAO,MAAM,qBAAqB;KAC9C,CAAC;KACD,WAAW,KAAK,OAAO;IACzB;IAEA,MAAM,UAAU,OAAO,aACrB,OAAO,UAAU,SAAS;KACxB,IAAI,OAAO,SAAS,YAAY,SAAS,MAAM,OAAO;KAEtD,OAAO,QAAQ,MAAM,QAAQ,IAAI,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC;IAC1D,CAAC,CACH;IAEA,QAAQ,OAAO,OAAO,OAAO,OAAO,MAAM,OAAO,YAAY,KAAK,CAAC,GAAG,OAAO;IAC7E,IAAI,KAAK,SAAS,OAAO;KACvB,OAAO,KAAK,MAAM,GAAG,KAAK;KAC1B,YAAY;IACd;GACF;GACA,KAAK,OAAO,QAAA,CAAS,aAAa,OAAO,UACvC,OAAO,OAAO,eAAe,iBAAiB;GAEhD,OAAO,OAAO,OAAO,oBAAoB;IACvC,GAAG;IACH;IACA,UAAU;IACV;GACF,CAAC;EACH,CAAC;EACD,MAAM,OAAO,GAAG,+BAA+B,CAAC,CAAC,WAAW,KAAK,MAAM,OAAO;GAC5E,MAAM,WAAW,OAAO;GACxB,MAAM,QAAQ,OAAO,IAAI,GAAG;GAG5B,OAAO,SAAS;GAEhB,MAAM,SAAS,OAAO,aACpB,MAAM,MAAM,OAAO,UAChB,MAAM,OAAO,cAAc,WAAW;IACrC,IAAI,OAAO,SAAS,YAAY,SAAS,MAAM,OAAO;IAEtD,OAAO,QAAQ,MAAM,QAAQ,IAAI,MAAM,MAAM,GAAG,MAAM;KAAC;KAAO;KAAc;IAAM,CAAC;GACrF,GACA,MAAM,OACN,MACA,SAAS,MAAM,KAAK,CACtB,CACF;GAEA,IAAI,WAAW,eAAe,OAAO,OAAO,eAAe,aAAa;GACxE,IAAI,WAAW,MAAM,OAAO,OAAO,eAAe,iBAAiB;EACrE,CAAC;EACD,OAAO,OAAO,GAAG,gCAAgC,CAAC,CAAC,WAAW,KAAK;GACjE,MAAM,QAAQ,OAAO,IAAI,GAAG;GAE5B,MAAM,UAAU,OAAO,aACrB,MAAM,MAAM,OAAO,UAAU,MAAM,UAAU;IAC3C,IAAI,OAAO,SAAS,YAAY,SAAS,MAAM,OAAO;IAEtD,OAAO,QAAQ,MAAM,QAAQ,IAAI,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC;GAChE,GAAG,MAAM,KAAK,CAChB;GAEA,IAAI,YAAY,mBAAmB,OAAO,OAAO,eAAe,iBAAiB;GACjF,IAAI,YAAY,MAAM,OAAO,OAAO,eAAe,iBAAiB;EACtE,CAAC;CACH;AACF,GAAG,OAAO,kBAAkB,KAAK,CAAC;;;;;;;;AC5WlC,MAAa,mCAAmC,YAG9C,MAAM,OAAO,4BAA4B,CAAC,CACxC,OAAO,IAAI,aAAa;CACtB,MAAM,YAAY,OAAO;CACzB,MAAM,SAAS,OAAO,OAAO;CA8J7B,OAAO,EAAE,MA5JI,OAAO,GAAG,mCAAmC,CAAC,CAAC,WAC1D,QACiF;EACjF,MAAM,gBACJ,IAAI,sBAAsB;GACxB,QAAQ;GACR,UAAU;GACV,WAAW;GACX,aAAa;GACb,SAAS;EACX,CAAC;EAEH,IAAI;EACJ,IAAI;EACJ,IAAI;EACJ,IAAI,UAAU;EAGd,MAAM,aAAa,OAAO,eAAe,QAAQ,KAAK,MAAM,OAAO,OAAO,MAAM,KAAK,CAAC;EAEtF,MAAM,YAAY,OAAO,IAAI,aAAa;GACxC,UAAU;GACV,QAAQ,WAAW;GACnB,IAAI,cAAc,KAAA,GAAW,OAAO;GAEpC,MAAM,UAAU,OAAO,UAAU,MAAM,SAAS,CAAC,CAAC,KAChD,OAAO,GAAG,WAAoB,GAC9B,OAAO,iBAAiB,OAAO,QAAQ,aAAsB,CAAC,GAC9D,OAAO,eACP,OAAO,cAAc;IACnB,UAAU;IACV,cAAc,OAAO,QAAQ,aAAsB;GACrD,CAAC,CACH;GAGA,MAAM,YAAY;GAElB,IAAI,cAAc,KAAA,GAChB,OAAO,OAAO,cAAc,UAAU,WAAW,CAAC,CAAC,CAAC,KAClD,OAAO,iBAAiB,OAAO,IAAI,GACnC,OAAO,eACP,OAAO,cAAc;IAAE,UAAU;IAAY,cAAc,OAAO;GAAK,CAAC,CAC1E;GAEF,OAAO;EACT,CAAC;EAED,MAAM,QAAQ,OAAO,OAAO,OAAO,SAAS;EAE5C,OAAO,OAAO,mBACZ,MAAM,KACJ,OAAO,SAAS,UACd,UAAU,cACN,OAAO,OACP,OAAO,WAAW,qDAAqD,CAC7E,CACF,CACF;EAEA,MAAM,WAAW,OAAO,OAAO,WAAW;GACxC,KAAK,OAAO,WAAW;IACrB,IAAI,oBAAoB;IAkBxB,MAAM,WAAW,MAAM,UAAU,QAAQ,EAfvC,OAAO,OAAO,OAA0B,SAAuB;KAC7D,MAAM,UAAU,IAAI,QAAQ,OAAO,IAAI;KACvC,MAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;KAE/B,IAAI,IAAI,aAAa,0BAA0B,QAAQ,WAAW,QAAQ;MACxE,IAAI,aAAa,IAAI,aAAa,OAAO;MACzC,oBAAoB,IAAI,aAAa,IAAI,WAAW,MAAM;MAE1D,OAAO,QAAQ,QAAQ,MAAM,IAAI,QAAQ,KAAK,OAAO,CAAC;KACxD;KAEA,OAAO,QAAQ,QAAQ,MAAM,OAAO;IACtC,EAG6C,GAAG;KAChD,WAAW;KACX,YAAY,KAAK,IAAI,KAAQ,OAAO,gBAAgB;IACtD,CAAC;IAED,YAAY,SAAS,KACnB,OAAO,kBAAkB,OAAO,OAAO,MAAM,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,SAAS,CACnF;IACA,IAAI,CAAC,qBAAqB,OAAO,WAAW,SAAS;KACnD,MAAM,WAAW,SAAS;KAC1B,MAAM,IAAI,wBAAwB,EAAE,QAAQ,kBAAkB,CAAC;IACjE;IAEA,UAAU,MAAM,UAAU,QAAQ,QAAQ,SAAS,SAAS,SAAS;IACrE,IAAI,OAAO,WAAW,SAAS;KAC7B,MAAM,WAAW,SAAS;KAC1B,MAAM,IAAI,wBAAwB,EAAE,QAAQ,kBAAkB,CAAC;IACjE;IAEA,MAAM,OAAO,OAAM,MADG,QAAQ,qBAAqB,EAAA,CACxB,QAAQ;IAEnC,MAAM,KAAK,uBAAuB,IAAI;IACtC,MAAM,KAAK,uBAAuB,IAAI;IACtC,KAAK,GAAG,YAAY,YAAY;KAC9B,IAAI,UAAU,OAAO,QAAQ,SAAS;KAEtC,IAAI;MACF,MAAM,MAAM,IAAI,IAAI,QAAQ,IAAI,CAAC;MAEjC,YACE,OAAO,QAAQ,SAAS,gBACxB,IAAI,aAAa,YACjB,CAAC,IAAI,YACL,CAAC,IAAI,YACL,OAAO,QAAQ,aAAa,SAAS,IAAI,IAAI;KACjD,QAAQ,CAER;KACA,CACE,WAAW,CAAC,UAAU,QAAQ,SAAS,IAAI,QAAQ,MAAM,iBAAiB,EAAA,CAC1E,YAAY;MACZ,UAAU;MACV,QAAQ,WAAW;KACrB,CAAC;IACH,CAAC;IACD,IAAI,OAAO,WAAW,SAAS;KAC7B,MAAM,WAAW,SAAS;KAC1B,MAAM,IAAI,wBAAwB,EAAE,QAAQ,kBAAkB,CAAC;IACjE;IAEA,OAAO,uBAAuB,GAAG;KAAE;KAAS;KAAM;IAAM,CAAC;GAC3D;GACA,OAAO;EACT,CAAC,CAAC,CAAC,KACD,OAAO,cAAc;GACnB,UAAU,KAAK,IAAI,OAAO,kBAAkB,GAAM;GAClD,cACE,OAAO,KAAK,IAAI,sBAAsB;IAAE,GAAG,QAAQ;IAAG,QAAQ;GAAU,CAAC,CAAC;EAC9E,CAAC,GACD,OAAO,OAAO,UACZ,MAAM,KACJ,OAAO,SAAS,YACd,OAAO,KAAK,IAAI,sBAAsB;GAAE,GAAG;GAAO;EAAQ,CAAC,CAAC,CAC9D,CACF,CACF,CACF;EAEA,SAAS,OAAO,6BAA6B,MAAM,CAAC,CAAC,KACnD,OAAO,eAAe,wBAAwB,QAAQ,GACtD,OAAO,eAAe,OAAO,QAAQ,MAAM,CAC7C;EAEA,OAAO;CACT,GAAG,OAAO,kBAAkB,KAAK,CAErB,EAAE;AAChB,CAAC,CACH"}
+{"version":3,"file":"ProtectedBrowser.mjs","names":[],"sources":["../src/protected-browser/policy.ts","../src/protected-browser/inspect-frame.ts","../src/protected-browser/native.ts","../src/protected-browser/binding.ts"],"sourcesContent":["import { InteractiveBrowserPolicy } from \"@effect-agent/sandbox/InteractiveBrowser\";\n/// <reference types=\"@cloudflare/workers-types\" />\nimport {\n  BrowserCredentialAccess,\n  type BrowserCredentialMaterial,\n  CardCredential,\n  CredentialOffer,\n  CredentialOfferMetadata,\n  CredentialOrigin,\n  CredentialObservationDecision,\n  type CredentialTarget,\n  CredentialUseResult,\n  ListCredentialOffers,\n  LoginCredential,\n  ProtectedBrowser,\n  ProtectedBrowserClick,\n  ProtectedBrowserError,\n  ProtectedBrowserFill,\n  ProtectedBrowserNavigate,\n  ProtectedBrowserObservation,\n  ProtectedBrowserControl,\n  UseCredential,\n  type CredentialFieldRole,\n  type CredentialKind,\n  type CredentialUseAuthorization,\n  type ProtectedBrowserHandle,\n  type ProtectedBrowserAction,\n  type ProtectedCleanup,\n  type ProtectedObservationState,\n} from \"@effect-agent/sandbox/ProtectedBrowser\";\nimport {\n  Clock,\n  Context,\n  Crypto,\n  Effect,\n  Layer,\n  Option,\n  Redacted,\n  Schema,\n  Semaphore,\n  type Scope,\n} from \"effect\";\n\nexport class ProtectedTransportError extends Schema.TaggedError<ProtectedTransportError>()(\n  \"ProtectedTransportError\",\n  { reason: Schema.Literals([\"stale-reference\", \"needs-attention\", \"unsupported\", \"provider\"]) },\n) {}\n\n/** Per-write evidence authority, provided by the policy immediately around a transport fill. */\nexport class ProtectedBrowserDispatch extends Context.Service<\n  ProtectedBrowserDispatch,\n  { readonly mark: Effect.Effect<void> }\n>()(\"@effect-agent/platform-cloudflare/ProtectedBrowserDispatch\") {}\n\n/** Decoded adapter boundary. SDK exceptions and page diagnostics never cross this port. */\nexport interface ProtectedBrowserTransport {\n  /** Select observation/target origins; undefined restores all network-permitted HTTPS frames. */\n  readonly restrictObservation: (\n    origins: ReadonlyArray<typeof CredentialOrigin.Type> | undefined,\n  ) => Effect.Effect<void, ProtectedTransportError>;\n  readonly context: Effect.Effect<typeof ProtectedPageContext.Type, ProtectedTransportError>;\n  readonly discover: Effect.Effect<typeof ProtectedDiscovery.Type, ProtectedTransportError>;\n  readonly target: (ref: string) => Effect.Effect<ProtectedBrowserControl, ProtectedTransportError>;\n  readonly navigate: (url: string) => Effect.Effect<void, ProtectedTransportError>;\n  readonly click: (ref: string) => Effect.Effect<void, ProtectedTransportError>;\n  readonly fill: (\n    ref: string,\n    role: typeof CredentialFieldRole.Type | \"text\" | \"select\",\n    value: Redacted.Redacted<string>,\n  ) => Effect.Effect<void, ProtectedTransportError, ProtectedBrowserDispatch>;\n  /** Invalidates local references synchronously before bounded exact-session cleanup. */\n  readonly invalidate: () => void;\n  readonly close: Effect.Effect<typeof ProtectedCleanup.Type>;\n}\n\n/** Adapter-private injection seam for deterministic tests, not a model capability. */\nexport class BrowserRunProtectedTransport extends Context.Service<\n  BrowserRunProtectedTransport,\n  {\n    readonly open: (\n      policy: InteractiveBrowserPolicy,\n    ) => Effect.Effect<ProtectedBrowserTransport, ProtectedBrowserError, Scope.Scope>;\n  }\n>()(\"@effect-agent/platform-cloudflare/BrowserRunProtectedTransport\") {}\n\nexport const ProtectedPageContext = Schema.Struct({\n  document: Schema.String.check(Schema.isUUID()),\n  topOrigin: CredentialOrigin,\n  frameOrigins: Schema.Array(CredentialOrigin).check(Schema.isMaxLength(16)),\n});\n\nexport const ProtectedDiscovery = Schema.Struct({\n  ...ProtectedPageContext.fields,\n  text: Schema.String.check(Schema.isMaxLength(64 * 1024)),\n  controls: Schema.Array(ProtectedBrowserControl).check(Schema.isMaxLength(64)),\n  truncated: Schema.Boolean,\n});\n\nconst sameTarget = (a: CredentialTarget, b: CredentialTarget) =>\n  a.topOrigin === b.topOrigin &&\n  a.frameOrigin === b.frameOrigin &&\n  a.recipientOrigin === b.recipientOrigin &&\n  a.document === b.document &&\n  a.frame === b.frame &&\n  a.form === b.form;\n\nconst kindFor = (role: string): typeof CredentialKind.Type | undefined =>\n  role === \"username\" || role === \"password\"\n    ? \"login\"\n    : role.startsWith(\"card-\")\n      ? \"card\"\n      : undefined;\n\nconst secretFor = (material: BrowserCredentialMaterial, role: typeof CredentialFieldRole.Type) => {\n  if (material._tag === \"LoginCredential\") {\n    return role === \"username\"\n      ? material.username\n      : role === \"password\"\n        ? material.password\n        : undefined;\n  }\n  switch (role) {\n    case \"card-name\":\n      return material.name;\n    case \"card-number\":\n      return material.number;\n    case \"card-expiry\":\n      return material.expiry;\n    case \"card-expiry-month\":\n      return material.expiryMonth;\n    case \"card-expiry-year\":\n      return material.expiryYear;\n    case \"card-security-code\":\n      return material.securityCode;\n    case \"username\":\n    case \"password\":\n      return undefined;\n  }\n};\n\n/**\n * Fresh private passes only. Account administrators and Browser Rendering token holders are\n * trusted operators. No viewer, handoff, raw JavaScript, screenshot or plaintext credential API exists.\n * Hosts explicitly authorize post-exposure observations for recipients they trust not to echo.\n */\nexport const browserRunProtectedLayer = () =>\n  Layer.effect(ProtectedBrowser)(\n    Effect.gen(function* () {\n      const transport = yield* BrowserRunProtectedTransport;\n      const crypto = yield* Crypto.Crypto;\n\n      const open = Effect.fn(\"ProtectedBrowser.open\")(function* (\n        input: InteractiveBrowserPolicy,\n      ): Effect.fn.Return<\n        ProtectedBrowserHandle,\n        ProtectedBrowserError,\n        Scope.Scope | BrowserCredentialAccess\n      > {\n        const initialError = (reason: ProtectedBrowserError[\"reason\"]) =>\n          new ProtectedBrowserError({\n            reason,\n            dispatch: \"not-dispatched\",\n            milestone: \"none\",\n            observation: \"closed\",\n            cleanup: \"not-requested\",\n          });\n\n        const decodedPolicy = yield* Schema.decodeUnknownEffect(InteractiveBrowserPolicy)(\n          input,\n        ).pipe(Effect.mapError(() => initialError(\"denied\")));\n\n        if (decodedPolicy.network._tag === \"PublicWeb\") return yield* initialError(\"unsupported\");\n\n        const policy = InteractiveBrowserPolicy.make({\n          ...decodedPolicy,\n          network:\n            decodedPolicy.network._tag === \"ExactHosts\"\n              ? { _tag: \"ExactHosts\", allowedHosts: [...decodedPolicy.network.allowedHosts] }\n              : { _tag: \"Unrestricted\" },\n        });\n\n        // Capture the host access service for THIS execution, not the application singleton.\n        const access = yield* BrowserCredentialAccess;\n        const started = yield* Clock.currentTimeMillis;\n        const driver = yield* transport.open(policy);\n        const lock = yield* Semaphore.make(1);\n        let observation: typeof ProtectedObservationState.Type = \"before-exposure\";\n        let cleanup: typeof ProtectedCleanup.Type = \"not-requested\";\n        let actions = 0;\n        let dispatch: ProtectedBrowserError[\"dispatch\"] = \"not-dispatched\";\n        let milestone: ProtectedBrowserError[\"milestone\"] = \"none\";\n        const exposures: Array<CredentialTarget> = [];\n\n        const offers = new Map<\n          string,\n          {\n            caller: Redacted.Redacted<string>;\n            key: Redacted.Redacted<string>;\n            target: CredentialTarget;\n            targetRef: string;\n            kind: typeof CredentialKind.Type;\n            expires: number;\n          }\n        >();\n\n        const fail = (reason: ProtectedBrowserError[\"reason\"]) =>\n          new ProtectedBrowserError({ reason, dispatch, milestone, observation, cleanup });\n\n        const close = yield* Effect.cached(\n          Effect.uninterruptible(\n            Effect.gen(function* () {\n              observation = \"closed\";\n              offers.clear();\n              driver.invalidate();\n              cleanup = yield* driver.close.pipe(\n                Effect.interruptible,\n                Effect.timeoutOrElse({\n                  duration: \"10 seconds\",\n                  orElse: () => Effect.succeed(\"unconfirmed\" as const),\n                }),\n                Effect.catchCause(() => Effect.succeed(\"unconfirmed\" as const)),\n              );\n\n              return cleanup;\n            }),\n          ),\n        );\n\n        yield* Effect.addFinalizer(() =>\n          close.pipe(\n            Effect.flatMap((result) =>\n              result === \"unconfirmed\"\n                ? Effect.logWarning(\"Protected browser exact-session closure unconfirmed\")\n                : Effect.void,\n            ),\n          ),\n        );\n\n        const remote = <A, R>(effect: Effect.Effect<A, ProtectedTransportError, R>) =>\n          effect.pipe(Effect.mapError((error) => fail(error.reason)));\n\n        const decode = <A>(schema: Schema.Codec<A>, value: unknown) =>\n          Schema.decodeUnknownEffect(schema)(value).pipe(Effect.mapError(() => fail(\"provider\")));\n\n        const caller = access.caller.pipe(Effect.mapError((error) => fail(error.reason)));\n        const pageContext = remote(driver.context);\n\n        const permitObservation = Effect.gen(function* () {\n          const context = yield* pageContext;\n          let origins: ReadonlyArray<typeof CredentialOrigin.Type> | undefined;\n\n          if (exposures.length > 0) {\n            observation = \"protected\";\n            const principal = yield* caller;\n\n            const rawDecision = yield* access\n              .observation({ ...context, caller: principal, exposures: [...exposures] })\n              .pipe(Effect.mapError((error) => fail(error.reason)));\n\n            if (Redacted.value(yield* caller) !== Redacted.value(principal))\n              return yield* fail(\"denied\");\n\n            const decision = yield* Schema.decodeUnknownEffect(CredentialObservationDecision)(\n              rawDecision,\n            ).pipe(Effect.mapError(() => fail(\"observation-blocked\")));\n\n            if (decision === \"deny\") return yield* fail(\"observation-blocked\");\n            if (typeof decision !== \"string\") {\n              origins = [...decision.origins];\n              if (!origins.includes(context.topOrigin)) return yield* fail(\"observation-blocked\");\n            }\n            observation = \"approved-after-exposure\";\n          }\n          yield* remote(driver.restrictObservation(origins));\n\n          return {\n            ...context,\n            frameOrigins: context.frameOrigins.filter(\n              (origin) => origins === undefined || origins.includes(origin),\n            ),\n          };\n        });\n\n        const target = (ref: string) => remote(driver.target(ref));\n\n        const authorizeAction = Effect.fn(\"ProtectedBrowser.authorizeAction\")(function* (\n          action: ProtectedBrowserAction,\n        ) {\n          if (access.authorizeAction === undefined) {\n            if (action._tag === \"Submit\") return yield* fail(\"unsupported\");\n\n            return;\n          }\n          const principal = yield* caller;\n\n          yield* access\n            .authorizeAction({ caller: principal, action, exposures: [...exposures] })\n            .pipe(Effect.mapError((error) => fail(error.reason)));\n          if (Redacted.value(yield* caller) !== Redacted.value(principal))\n            return yield* fail(\"denied\");\n          if (action._tag !== \"Navigate\") {\n            const current = yield* target(action.ref);\n\n            if (\n              !sameTarget(current.target, action.target) ||\n              current.role !== (action._tag === \"Submit\" ? \"submit\" : action.role) ||\n              (action._tag === \"Click\" && action.role === \"link\" && current.url !== action.url)\n            )\n              return yield* fail(\"stale-reference\");\n          }\n        }, Effect.withTracerEnabled(false));\n\n        const bounded = <A>(result: A) => {\n          const bytes = new TextEncoder().encode(JSON.stringify(result)).byteLength;\n\n          return bytes <= policy.maxReturnedBytes\n            ? Effect.succeed(result)\n            : Effect.fail(fail(\"limit\"));\n        };\n\n        const run = <A>(effect: Effect.Effect<A, ProtectedBrowserError>) =>\n          lock\n            .withPermitsIfAvailable(1)(\n              Effect.gen(function* () {\n                dispatch = \"not-dispatched\";\n                milestone = \"none\";\n                if (observation === \"closed\") return yield* fail(\"closed\");\n                if (++actions > policy.maxActions) return yield* fail(\"limit\");\n\n                const remaining =\n                  policy.maxElapsedMillis - ((yield* Clock.currentTimeMillis) - started);\n\n                if (remaining <= 0) {\n                  yield* close;\n\n                  return yield* fail(\"timeout\");\n                }\n\n                return yield* effect.pipe(\n                  Effect.timeoutOrElse({\n                    duration: remaining,\n                    orElse: () => Effect.fail(fail(\"timeout\")),\n                  }),\n                  Effect.catchCause((cause) =>\n                    Effect.gen(function* () {\n                      // No foreign exception or defect is retained. Interrupted operations still finalize.\n                      const error = cause.reasons.find(\n                        (reason) =>\n                          reason._tag === \"Fail\" && Schema.is(ProtectedBrowserError)(reason.error),\n                      );\n\n                      const reason =\n                        error?._tag === \"Fail\" && Schema.is(ProtectedBrowserError)(error.error)\n                          ? error.error.reason\n                          : \"provider\";\n\n                      const interrupt = cause.reasons.some((reason) => reason._tag === \"Interrupt\");\n\n                      if (\n                        dispatch !== \"not-dispatched\" ||\n                        interrupt ||\n                        reason === \"provider\" ||\n                        reason === \"timeout\"\n                      )\n                        yield* close;\n                      if (interrupt) return yield* Effect.interrupt;\n\n                      return yield* fail(\n                        dispatch === \"possibly-dispatched\" && reason === \"provider\"\n                          ? \"outcome-unknown\"\n                          : reason,\n                      );\n                    }),\n                  ),\n                  Effect.onInterrupt(() => close),\n                  Effect.withTracerEnabled(false),\n                );\n              }),\n            )\n            .pipe(\n              Effect.flatMap((result) =>\n                Option.isSome(result)\n                  ? Effect.succeed(result.value)\n                  : Effect.fail(\n                      new ProtectedBrowserError({\n                        reason: \"busy\",\n                        dispatch: \"not-dispatched\",\n                        milestone: \"none\",\n                        observation,\n                        cleanup,\n                      }),\n                    ),\n              ),\n            );\n\n        return {\n          close,\n          navigate: (request) =>\n            run(\n              Effect.gen(function* () {\n                const decoded = yield* Schema.decodeUnknownEffect(ProtectedBrowserNavigate)(\n                  request,\n                ).pipe(Effect.mapError(() => fail(\"denied\")));\n\n                let url: URL;\n\n                try {\n                  url = new URL(decoded.url);\n                } catch {\n                  return yield* fail(\"denied\");\n                }\n                if (\n                  url.protocol !== \"https:\" ||\n                  url.username ||\n                  url.password ||\n                  (policy.network._tag === \"ExactHosts\" &&\n                    !policy.network.allowedHosts.includes(url.host))\n                )\n                  return yield* fail(\"denied\");\n                if (exposures.length > 0) yield* permitObservation;\n                yield* authorizeAction({ _tag: \"Navigate\", url: decoded.url });\n                offers.clear();\n                dispatch = \"possibly-dispatched\";\n                yield* remote(driver.navigate(decoded.url));\n                dispatch = \"dispatched\";\n                yield* permitObservation;\n              }),\n            ),\n          observe: run(\n            Effect.gen(function* () {\n              const before = yield* permitObservation;\n              const result = yield* remote(driver.discover);\n              const after = yield* permitObservation;\n\n              if (\n                before.document !== after.document ||\n                result.document !== after.document ||\n                result.topOrigin !== after.topOrigin\n              )\n                return yield* fail(\"stale-reference\");\n              if (result.frameOrigins.some((origin) => !after.frameOrigins.includes(origin)))\n                return yield* fail(\"observation-blocked\");\n\n              return yield* bounded(\n                ProtectedBrowserObservation.make({\n                  ...result,\n                  observation: exposures.length > 0 ? \"approved-after-exposure\" : \"before-exposure\",\n                }),\n              );\n            }),\n          ),\n          click: (request) =>\n            run(\n              Effect.gen(function* () {\n                const decoded = yield* Schema.decodeUnknownEffect(ProtectedBrowserClick)(\n                  request,\n                ).pipe(Effect.mapError(() => fail(\"denied\")));\n\n                yield* permitObservation;\n                const control = yield* target(decoded.ref);\n\n                if (\n                  control.role !== \"link\" &&\n                  control.role !== \"button\" &&\n                  control.role !== \"radio\" &&\n                  control.role !== \"checkbox\" &&\n                  control.role !== \"submit\"\n                )\n                  return yield* fail(\"unsupported\");\n                let action: ProtectedBrowserAction;\n\n                if (control.role === \"link\") {\n                  if (control.url === undefined) return yield* fail(\"unsupported\");\n                  action = {\n                    _tag: \"Click\",\n                    ref: decoded.ref,\n                    target: control.target,\n                    role: \"link\",\n                    url: control.url,\n                  };\n                } else if (control.role === \"submit\") {\n                  action = { _tag: \"Submit\", ref: decoded.ref, target: control.target };\n                } else {\n                  action = {\n                    _tag: \"Click\",\n                    ref: decoded.ref,\n                    target: control.target,\n                    role: control.role,\n                  };\n                }\n                yield* authorizeAction(action);\n                dispatch = \"possibly-dispatched\";\n                yield* remote(driver.click(decoded.ref)).pipe(\n                  Effect.catch((error) => {\n                    if (error.reason === \"needs-attention\") dispatch = \"not-dispatched\";\n\n                    return Effect.fail(error);\n                  }),\n                );\n                dispatch = \"dispatched\";\n                if (control.role === \"submit\") milestone = \"submission-dispatched\";\n                yield* permitObservation;\n              }),\n            ),\n          fill: (request) =>\n            run(\n              Effect.gen(function* () {\n                const decoded = yield* Schema.decodeUnknownEffect(ProtectedBrowserFill)(\n                  request,\n                ).pipe(Effect.mapError(() => fail(\"denied\")));\n\n                yield* permitObservation;\n                const control = yield* target(decoded.ref);\n\n                if (control.role !== \"text\" && control.role !== \"select\")\n                  return yield* fail(\"unsupported\");\n                yield* authorizeAction({\n                  _tag: \"Fill\",\n                  ref: decoded.ref,\n                  target: control.target,\n                  role: control.role,\n                });\n                yield* remote(\n                  driver.fill(decoded.ref, control.role, Redacted.make(decoded.value)),\n                ).pipe(\n                  Effect.provideService(ProtectedBrowserDispatch, {\n                    mark: Effect.sync(() => {\n                      dispatch = \"possibly-dispatched\";\n                    }),\n                  }),\n                );\n                dispatch = \"dispatched\";\n                milestone = \"filled\";\n                yield* permitObservation;\n              }),\n            ),\n          listCredentialOffers: (request) =>\n            run(\n              Effect.gen(function* () {\n                const decoded = yield* Schema.decodeUnknownEffect(ListCredentialOffers)(\n                  request,\n                ).pipe(Effect.mapError(() => fail(\"denied\")));\n\n                yield* permitObservation;\n                const control = yield* target(decoded.target);\n\n                if (kindFor(control.role) !== decoded.kind) return yield* fail(\"unsupported\");\n                const principal = yield* caller;\n\n                const candidates = yield* access\n                  .list({ caller: principal, kind: decoded.kind, target: control.target })\n                  .pipe(Effect.mapError((error) => fail(error.reason)));\n\n                const now = yield* Clock.currentTimeMillis;\n\n                for (const [ref, offer] of offers) if (offer.expires <= now) offers.delete(ref);\n                if (candidates.length > 16 || offers.size + candidates.length > 64)\n                  return yield* fail(\"limit\");\n                if (!sameTarget(control.target, (yield* target(decoded.target)).target))\n                  return yield* fail(\"stale-reference\");\n                const expires = now + 60_000;\n                const result: Array<CredentialOffer> = [];\n                const pending: typeof offers = new Map();\n\n                for (const candidate of candidates) {\n                  const metadata = yield* decode(CredentialOfferMetadata, candidate.metadata);\n\n                  const ref = yield* crypto.randomUUIDv4.pipe(\n                    Effect.mapError(() => fail(\"provider\")),\n                  );\n\n                  pending.set(ref, {\n                    caller: principal,\n                    key: candidate.key,\n                    target: control.target,\n                    targetRef: decoded.target,\n                    kind: decoded.kind,\n                    expires,\n                  });\n                  result.push(CredentialOffer.make({ ref, kind: decoded.kind, metadata }));\n                }\n                yield* bounded(result);\n                for (const [ref, offer] of pending) offers.set(ref, offer);\n\n                return result;\n              }),\n            ),\n          useCredential: (request) =>\n            run(\n              Effect.gen(function* () {\n                const decoded = yield* Schema.decodeUnknownEffect(UseCredential)(request).pipe(\n                  Effect.mapError(() => fail(\"denied\")),\n                );\n\n                const offer = offers.get(decoded.offer);\n\n                if (offer === undefined || offer.expires <= (yield* Clock.currentTimeMillis))\n                  return yield* fail(\"stale-reference\");\n                const principal = yield* caller;\n\n                if (Redacted.value(principal) !== Redacted.value(offer.caller))\n                  return yield* fail(\"denied\");\n                if (\n                  new Set(decoded.fields.map((field) => field.ref)).size !==\n                    decoded.fields.length ||\n                  new Set(decoded.fields.map((field) => field.role)).size !== decoded.fields.length\n                )\n                  return yield* fail(\"denied\");\n\n                const validate = Effect.gen(function* () {\n                  if (!sameTarget(offer.target, (yield* target(offer.targetRef)).target))\n                    return yield* fail(\"stale-reference\");\n                  for (const field of decoded.fields) {\n                    const current = yield* target(field.ref);\n\n                    if (\n                      field.role !== current.role ||\n                      kindFor(field.role) !== offer.kind ||\n                      !sameTarget(offer.target, current.target)\n                    )\n                      return yield* fail(\"denied\");\n                  }\n                  if (decoded.submit !== undefined) {\n                    const submit = yield* target(decoded.submit);\n\n                    if (submit.role !== \"submit\" || !sameTarget(offer.target, submit.target))\n                      return yield* fail(\"denied\");\n                  }\n                });\n\n                yield* validate;\n\n                const authorization: CredentialUseAuthorization = {\n                  caller: principal,\n                  key: offer.key,\n                  kind: offer.kind,\n                  target: offer.target,\n                  roles: decoded.fields.map((field) => field.role),\n                  submit: decoded.submit !== undefined,\n                };\n\n                const authorize = Effect.gen(function* () {\n                  if (Redacted.value(yield* caller) !== Redacted.value(principal))\n                    return yield* fail(\"denied\");\n                  yield* access\n                    .authorize(authorization)\n                    .pipe(Effect.mapError((error) => fail(error.reason)));\n                  if (Redacted.value(yield* caller) !== Redacted.value(principal))\n                    return yield* fail(\"denied\");\n                });\n\n                yield* authorize;\n                yield* validate;\n\n                const raw = yield* access\n                  .resolve(authorization)\n                  .pipe(Effect.mapError((error) => fail(error.reason)));\n\n                const material = yield* Schema.decodeUnknownEffect(\n                  offer.kind === \"login\" ? LoginCredential : CardCredential,\n                )(raw).pipe(Effect.mapError(() => fail(\"resolver\")));\n\n                for (const field of decoded.fields)\n                  if (secretFor(material, field.role) === undefined)\n                    return yield* fail(\"missing-credential\");\n                offers.delete(decoded.offer);\n                for (const field of decoded.fields) {\n                  yield* validate;\n                  yield* authorize;\n                  const value = secretFor(material, field.role);\n\n                  if (value === undefined) return yield* fail(\"missing-credential\");\n                  observation = \"protected\";\n                  yield* remote(driver.fill(field.ref, field.role, value)).pipe(\n                    Effect.provideService(ProtectedBrowserDispatch, {\n                      mark: Effect.sync(() => {\n                        dispatch = \"possibly-dispatched\";\n                        if (!exposures.some((target) => sameTarget(target, offer.target)))\n                          exposures.push(offer.target);\n                      }),\n                    }),\n                  );\n                  dispatch = \"dispatched\";\n                  milestone = \"partial-fill\";\n                }\n                milestone = \"filled\";\n                if (decoded.submit !== undefined) {\n                  yield* validate;\n                  yield* authorize;\n                  const ref = decoded.submit;\n\n                  dispatch = \"possibly-dispatched\";\n                  yield* remote(driver.click(ref)).pipe(\n                    Effect.catch((error) => {\n                      if (error.reason === \"needs-attention\") dispatch = \"dispatched\";\n\n                      return Effect.fail(error);\n                    }),\n                  );\n                  dispatch = \"dispatched\";\n                  milestone = \"submission-dispatched\";\n                }\n                yield* permitObservation;\n\n                return CredentialUseResult.make({\n                  dispatch,\n                  milestone,\n                  observation,\n                  cleanup,\n                  authentication: \"unverified\",\n                });\n              }),\n            ),\n        };\n      }, Effect.withTracerEnabled(false));\n\n      return { open };\n    }),\n  );\n","// This fixed program runs in an isolated world. Pages cannot replace its native DOM methods.\n// Handles retain actual nodes; a selector is never reconstructed from an opaque reference.\nexport const maxAttributeLength = 2048;\n\nexport const inspectFrame = `(() => {\n  const doc = document;\n  const forms = [];\n  const isChoice = el => el instanceof HTMLInputElement && ['radio','checkbox'].includes(el.type);\n  const presented = el => {\n    if (el.closest('[hidden],[aria-hidden=\"true\"],[inert]') ||\n      ['hidden','collapse'].includes(getComputedStyle(el).visibility)) return false;\n    for (let parent = el; parent; parent = parent.parentElement) {\n      if (getComputedStyle(parent).opacity === '0') return false;\n    }\n    return true;\n  };\n  const hasLayout = el => presented(el) &&\n    [...el.getClientRects()].some(rect => rect.width > 0 && rect.height > 0);\n  const available = el => el.type !== 'hidden' && !el.closest('[hidden],[aria-hidden=\"true\"],[inert]') &&\n    (hasLayout(el) || (isChoice(el) && [...(el.labels ?? [])].some(hasLayout)));\n  const elements = [...doc.querySelectorAll('input,textarea,select,button,a[href]')].filter(available).slice(0, 65);\n  const labelText = el => {\n    const label = el.labels?.[0]?.cloneNode(true);\n    label?.querySelectorAll('input,textarea,select,script,style,noscript').forEach(child => child.remove());\n    return label?.textContent ?? el.getAttribute('aria-label');\n  };\n  const describe = (el) => {\n    if (doc !== document || !el.isConnected || el.ownerDocument !== doc || !available(el)) return null;\n    const form = el.form ?? null;\n    let formIndex = forms.indexOf(form);\n    if (formIndex < 0) { formIndex = forms.length; forms.push(form); }\n    // Resolved href (including path/query/fragment and base-URL changes) is part of the fingerprint.\n    const action = el instanceof HTMLAnchorElement ? el.href : form ? (el.hasAttribute('formaction') ? el.formAction : form.action || doc.URL) : doc.URL;\n    const method = form ? (el.hasAttribute('formmethod') ? el.formMethod : form.method) : '';\n    const enctype = form?.enctype ?? '';\n    const name = el.name ?? '';\n    const completion = el.getAttribute('autocomplete') ?? '';\n    const inputType = el.type ?? '';\n    const choiceValue = isChoice(el) ? el.value : '';\n    // Reject before parsing, fingerprinting or CDP transfer. Truncation could hide a target change.\n    if ([action, method, enctype, name, completion, inputType, choiceValue].some(value => value.length > ${maxAttributeLength})) return null;\n    const type = inputType.toLowerCase();\n    const autocomplete = completion.trim().toLowerCase().split(/\\\\s+/).at(-1);\n    const cardRoles = { 'cc-name':'card-name', 'cc-number':'card-number', 'cc-exp':'card-expiry',\n      'cc-exp-month':'card-expiry-month', 'cc-exp-year':'card-expiry-year', 'cc-csc':'card-security-code' };\n    let role = 'unsupported';\n    const nativeField = el instanceof HTMLInputElement || el instanceof HTMLSelectElement || el instanceof HTMLTextAreaElement;\n    if (nativeField && !['submit','button'].includes(type) && !el.matches(':disabled') && !el.readOnly && !(el instanceof HTMLSelectElement && el.multiple)) {\n      if (isChoice(el)) role = type;\n      else if (type === 'password' || ['current-password','new-password','one-time-code'].includes(autocomplete)) {\n        if (type === 'password' && form) role = 'password';\n      } else if (['text','email','tel','number','month','search','url','date','time','week','datetime-local','textarea',''].includes(type) || el instanceof HTMLSelectElement) {\n        if (cardRoles[autocomplete]) { if (form) role = cardRoles[autocomplete]; }\n        else if (autocomplete === 'username' || autocomplete === 'email') { if (form) role = 'username'; }\n        else if (['text','email'].includes(type) && form && form.querySelector('input[type=\"password\"]')) role = 'username';\n        else if (el instanceof HTMLSelectElement) { if (!el.multiple) role = 'select'; }\n        else role = 'text';\n      }\n    } else if (el instanceof HTMLButtonElement || (el instanceof HTMLInputElement && ['submit','button'].includes(type))) {\n      if (!el.matches(':disabled')) role = type === 'submit' && form ? 'submit' : type === 'button' ? 'button' : 'unsupported';\n    } else if (el instanceof HTMLAnchorElement) role = 'link';\n    const fingerprint = JSON.stringify([role, action, method, enctype, name, completion, type, choiceValue]);\n    return { role, formIndex, action, fingerprint, ...(isChoice(el) ? {checked: el.checked} : {}),\n      label: (labelText(el) ?? (nativeField ? '' : el.textContent) ?? '').slice(0,200) };\n  };\n  const expose = ({role, formIndex, action, label, checked}) =>\n    ({role, formIndex, action, label, ...(checked === undefined ? {} : {checked})});\n  const original = elements.map(describe);\n  const validate = (index) => {\n    const current = describe(elements[index]);\n    if (!current || !original[index] || current.fingerprint !== original[index].fingerprint ||\n      current.formIndex !== original[index].formIndex) return null;\n    return expose(current);\n  };\n  return {\n    doc, elements, original: original.map(current => current && expose(current)), validate,\n    text: () => {\n      if (doc !== document) return null;\n      if (!doc.body) return '';\n      const walker = doc.createTreeWalker(doc.body, NodeFilter.SHOW_TEXT);\n      const range = doc.createRange();\n      let text = '';\n      for (let node = walker.nextNode(); node && text.length < 65536; node = walker.nextNode()) {\n        const parent = node.parentElement;\n        if (!parent || parent.closest('input,textarea,select,script,style,noscript,iframe,object,embed')) continue;\n        if (!presented(parent)) continue;\n        range.selectNodeContents(node);\n        if (![...range.getClientRects()].some(rect => rect.width > 0 && rect.height > 0)) continue;\n        text += (node.textContent ?? '').replace(/\\\\s+/g, ' ') + ' ';\n      }\n      return text.slice(0,65536);\n    },\n    fill: (index, role, value) => {\n      const current = validate(index);\n      if (!current || current.role !== role) return false;\n      const el = elements[index];\n      if (role === 'select') {\n        const options = [...el.options].filter(option => !option.matches(':disabled'));\n        const values = options.filter(option => option.value === value);\n        const matches = values.length > 0 ? values : options.filter(option => option.textContent?.trim() === value);\n        if (matches.length !== 1) return 'unsupported';\n        value = matches[0].value;\n        if ([...el.options].filter(option => option.value === value).length !== 1) return 'unsupported';\n      }\n      let prototype = Object.getPrototypeOf(el);\n      let setter;\n      while (prototype && !setter) { setter = Object.getOwnPropertyDescriptor(prototype,'value')?.set; prototype = Object.getPrototypeOf(prototype); }\n      if (!setter) return false;\n      // Validate and mutate in one isolated-world task, without focusing first and running\n      // page handlers between validation and assignment. Native setters support controlled inputs.\n      setter.call(el, value);\n      if (el.value !== value) return 'unsupported';\n      el.dispatchEvent(new Event('input', {bubbles:true}));\n      el.dispatchEvent(new Event('change', {bubbles:true}));\n      return true;\n    },\n    click: (index) => {\n      const current = validate(index);\n      if (!current || !['button','submit','link','radio','checkbox'].includes(current.role)) return false;\n      if (current.role === 'submit' && elements[index].form && !elements[index].form.matches(':valid')) return 'needs-attention';\n      elements[index].click();\n      return true;\n    }\n  };\n})()`;\n","/// <reference types=\"@cloudflare/workers-types\" />\nimport type { Browser, Frame, JSHandle, Page } from \"@cloudflare/puppeteer\";\nimport { type InteractiveBrowserPolicy } from \"@effect-agent/sandbox/InteractiveBrowser\";\nimport {\n  CredentialOrigin,\n  CredentialTarget,\n  ProtectedBrowserControl,\n} from \"@effect-agent/sandbox/ProtectedBrowser\";\nimport { Clock, Context, Crypto, Effect, Redacted, Schema, type Scope } from \"effect\";\n\nimport { inspectFrame, maxAttributeLength } from \"./inspect-frame.ts\";\nimport {\n  ProtectedBrowserDispatch,\n  ProtectedTransportError,\n  ProtectedDiscovery,\n  ProtectedPageContext,\n  type ProtectedBrowserTransport,\n} from \"./policy.ts\";\n\n// The pinned SDK implements this method but strips its internal declaration from lib/types.d.ts.\n// Keep the declaration narrow and refuse runtimes without it. No main-world fallback is safe.\ndeclare module \"@cloudflare/puppeteer\" {\n  interface Frame {\n    isolatedRealm(): { evaluateHandle(source: string): Promise<JSHandle<unknown>> };\n  }\n}\n\nconst Description = Schema.Struct({\n  role: ProtectedBrowserControl.fields.role,\n  formIndex: Schema.Natural,\n  action: Schema.String.check(Schema.isMaxLength(maxAttributeLength)),\n  label: Schema.String.check(Schema.isMaxLength(200)),\n  checked: Schema.optionalKey(Schema.Boolean),\n});\n\nconst Descriptions = Schema.Array(Schema.NullOr(Description)).check(Schema.isMaxLength(65));\n\ninterface FrameState {\n  readonly frame: Frame;\n  readonly handle: JSHandle<unknown>;\n  readonly ref: string;\n  readonly document: string;\n  readonly forms: Map<number, string>;\n}\ninterface ControlState {\n  readonly frame: FrameState;\n  readonly index: number;\n  readonly control: ProtectedBrowserControl;\n  readonly expires: number;\n}\n\n/** One host-private acquired session. The SDK handles and exact-session cleanup have one owner. */\nexport class ProtectedNativeSession extends Context.Service<\n  ProtectedNativeSession,\n  {\n    readonly browser: Browser;\n    readonly page: Page;\n    readonly close: Effect.Effect<\"confirmed\" | \"unconfirmed\">;\n  }\n>()(\"@effect-agent/platform-cloudflare/ProtectedNativeSession\") {}\n\nconst transportError = (reason: ProtectedTransportError[\"reason\"]) =>\n  new ProtectedTransportError({ reason });\n\nconst decode = <A>(schema: Schema.Codec<A>, value: unknown) =>\n  Schema.decodeUnknownEffect(schema)(value).pipe(Effect.mapError(() => transportError(\"provider\")));\n\n// Attach rejection handling inside the SDK callback before workerd can report foreign diagnostics.\nconst remote = <A>(run: (signal: AbortSignal) => Promise<A>) =>\n  Effect.tryPromise({\n    try: async (signal) => {\n      try {\n        return { ok: true as const, value: await run(signal) };\n      } catch {\n        return { ok: false as const };\n      }\n    },\n    catch: () => transportError(\"provider\"),\n  }).pipe(\n    Effect.flatMap((result) =>\n      result.ok ? Effect.succeed(result.value) : Effect.fail(transportError(\"provider\")),\n    ),\n  );\n\n/** Host-private scoped transport. Session capabilities are requirements; policy is per-pass data. */\nexport const makeProtectedNativeTransport = Effect.fn(\"ProtectedNativeTransport.make\")(function* (\n  policy: InteractiveBrowserPolicy,\n): Effect.fn.Return<\n  ProtectedBrowserTransport,\n  never,\n  ProtectedNativeSession | Crypto.Crypto | Scope.Scope\n> {\n  const session = yield* ProtectedNativeSession;\n  const { browser, page } = session;\n  const crypto = yield* Crypto.Crypto;\n  const clock = yield* Clock.Clock;\n  const uuid = crypto.randomUUIDv4.pipe(Effect.mapError(() => transportError(\"provider\")));\n  let closed = false;\n  let violation = false;\n  let documentRef: string | undefined;\n  let observationOrigins: ReadonlySet<string> | undefined;\n  const frames = new Map<Frame, FrameState>();\n  const controls = new Map<string, ControlState>();\n\n  const origin = (value: string) =>\n    Effect.try({\n      try: () => {\n        const url = new URL(value);\n\n        if (url.username || url.password) throw transportError(\"stale-reference\");\n        if (!Schema.is(CredentialOrigin)(url.origin)) throw transportError(\"unsupported\");\n        if (policy.network._tag === \"ExactHosts\" && !policy.network.allowedHosts.includes(url.host))\n          throw transportError(\"stale-reference\");\n\n        return url.origin;\n      },\n      catch: (cause) =>\n        Schema.is(ProtectedTransportError)(cause) ? cause : transportError(\"provider\"),\n    });\n\n  const check = Effect.suspend(() =>\n    closed || violation || !browser.isConnected()\n      ? Effect.fail(transportError(\"stale-reference\"))\n      : Effect.void,\n  );\n\n  const clear = () => {\n    controls.clear();\n    // Browser event callbacks only invalidate. The next Effect operation allocates the new identity.\n    documentRef = undefined;\n  };\n\n  const onNavigated = () => {\n    clear();\n  };\n\n  const onTarget = (target: { type(): string }) => {\n    if (target.type() !== \"page\") return;\n    // No popup or additional page may inherit an observation channel.\n    violation = true;\n    clear();\n  };\n\n  const invalidate = () => {\n    closed = true;\n    clear();\n  };\n\n  const observationFrames = Effect.gen(function* () {\n    const list = page.frames();\n\n    if (list.length > 32) return yield* transportError(\"unsupported\");\n\n    // Opaque/blank child documents have no observation channel or credential targets.\n    // The main document and every retained HTTPS child still require strict origin validation.\n    return yield* Effect.filter(list, (frame) =>\n      frame === page.mainFrame()\n        ? Effect.succeed(true)\n        : Effect.try({\n            try: () => frame.url() !== \"\" && new URL(frame.url()).protocol === \"https:\",\n            catch: () => transportError(\"provider\"),\n          }),\n    );\n  });\n\n  const context = Effect.gen(function* () {\n    yield* check;\n    const list = yield* observationFrames;\n    const topOrigin = yield* origin(page.url());\n    const frameOrigins = [...new Set(yield* Effect.forEach(list, (frame) => origin(frame.url())))];\n\n    if (frameOrigins.length > 16) return yield* transportError(\"unsupported\");\n\n    if (documentRef === undefined) documentRef = yield* uuid;\n\n    return yield* decode(ProtectedPageContext, { document: documentRef, topOrigin, frameOrigins });\n  });\n\n  const isCurrent = Effect.fn(\"ProtectedNativeTransport.isCurrent\")(function* (state: FrameState) {\n    if (state.frame.detached) return false;\n\n    return yield* remote(() =>\n      state.handle.evaluate((held) => {\n        if (typeof held !== \"object\" || held === null) return false;\n\n        return Reflect.get(held, \"doc\") === Reflect.get(globalThis, \"document\");\n      }),\n    );\n  });\n\n  const get = Effect.fn(\"ProtectedNativeTransport.get\")(function* (ref: string) {\n    yield* check;\n    const state = controls.get(ref);\n\n    if (\n      !state ||\n      (observationOrigins !== undefined &&\n        !observationOrigins.has(state.control.target.frameOrigin)) ||\n      state.expires <= (yield* clock.currentTimeMillis) ||\n      !(yield* isCurrent(state.frame))\n    )\n      return yield* transportError(\"stale-reference\");\n\n    const current = yield* remote(() =>\n      state.frame.handle.evaluate((held, index) => {\n        if (typeof held !== \"object\" || held === null) return null;\n\n        return Reflect.apply(Reflect.get(held, \"validate\"), held, [index]);\n      }, state.index),\n    );\n\n    const description = yield* decode(Schema.NullOr(Description), current);\n\n    if (description === null) return yield* transportError(\"stale-reference\");\n    const ctx = yield* context;\n\n    if (\n      ctx.topOrigin !== state.control.target.topOrigin ||\n      (yield* origin(state.frame.frame.url())) !== state.control.target.frameOrigin ||\n      (yield* origin(description.action)) !== state.control.target.recipientOrigin ||\n      description.role !== state.control.role\n    )\n      return yield* transportError(\"stale-reference\");\n\n    return state;\n  });\n\n  const close = yield* Effect.cached(\n    Effect.gen(function* () {\n      invalidate();\n\n      return yield* session.close;\n    }).pipe(\n      Effect.ensuring(\n        Effect.sync(() => {\n          page.off(\"framenavigated\", onNavigated);\n          page.off(\"framedetached\", onNavigated);\n          browser.off(\"targetcreated\", onTarget);\n          // Handles die with the exact session. Do not block remote termination on local disposal.\n          frames.clear();\n        }),\n      ),\n    ),\n  );\n\n  yield* Effect.acquireRelease(\n    Effect.sync(() => {\n      page.on(\"framenavigated\", onNavigated);\n      page.on(\"framedetached\", onNavigated);\n      browser.on(\"targetcreated\", onTarget);\n    }),\n    () => close,\n  );\n\n  return {\n    restrictObservation: Effect.fn(\"ProtectedNativeTransport.restrictObservation\")(\n      function* (origins) {\n        yield* check;\n        observationOrigins =\n          origins === undefined\n            ? undefined\n            : new Set(yield* decode(Schema.Array(CredentialOrigin), origins));\n        // A later grant expansion must not revive previously excluded references.\n        for (const [ref, state] of controls)\n          if (\n            observationOrigins !== undefined &&\n            !observationOrigins.has(state.control.target.frameOrigin)\n          )\n            controls.delete(ref);\n      },\n    ),\n    context,\n    invalidate,\n    close,\n    navigate: Effect.fn(\"ProtectedNativeTransport.navigate\")(function* (url) {\n      yield* check;\n      yield* origin(url);\n      clear();\n      yield* remote(() => page.goto(url, { waitUntil: \"load\" }));\n      yield* context;\n    }),\n    target: (ref) => get(ref).pipe(Effect.map((state) => state.control)),\n    discover: Effect.gen(function* () {\n      const before = yield* context;\n\n      controls.clear();\n      for (const state of frames.values()) yield* remote(() => state.handle.dispose());\n      frames.clear();\n      const discovered: Array<ProtectedBrowserControl> = [];\n      let text = \"\";\n      let truncated = false;\n      const frameOrigins = new Set<string>();\n\n      for (const frame of yield* observationFrames) {\n        const frameOrigin = yield* origin(frame.url());\n\n        if (observationOrigins !== undefined && !observationOrigins.has(frameOrigin)) continue;\n        frameOrigins.add(frameOrigin);\n        if (typeof frame.isolatedRealm !== \"function\") return yield* transportError(\"unsupported\");\n        const handle = yield* remote(() => frame.isolatedRealm().evaluateHandle(inspectFrame));\n\n        const state: FrameState = {\n          frame,\n          handle,\n          ref: yield* uuid,\n          document: yield* uuid,\n          forms: new Map(),\n        };\n\n        frames.set(frame, state);\n\n        const raw = yield* remote(() =>\n          handle.evaluate((held) => {\n            if (typeof held !== \"object\" || held === null) return null;\n\n            return Reflect.get(held, \"original\");\n          }),\n        );\n\n        const descriptions = yield* decode(Descriptions, raw);\n\n        for (let index = 0; index < descriptions.length; index++) {\n          const desc = descriptions[index];\n\n          if (!desc) continue;\n          if (discovered.length === 64) {\n            truncated = true;\n            break;\n          }\n          let form = state.forms.get(desc.formIndex);\n\n          if (form === undefined) {\n            form = yield* uuid;\n            state.forms.set(desc.formIndex, form);\n          }\n          // Unsupported destinations/controls are not offered as credential targets.\n          const recipient = yield* origin(desc.action).pipe(Effect.result);\n\n          if (recipient._tag === \"Failure\") continue;\n\n          const control = ProtectedBrowserControl.make({\n            ref: yield* uuid,\n            role: desc.role,\n            label: desc.label,\n            ...(desc.checked === undefined ? {} : { checked: desc.checked }),\n            ...(desc.role === \"link\" ? { url: desc.action } : {}),\n            target: CredentialTarget.make({\n              topOrigin: before.topOrigin,\n              frameOrigin: yield* origin(frame.url()),\n              recipientOrigin: recipient.success,\n              document: state.document,\n              frame: state.ref,\n              form,\n            }),\n          });\n\n          controls.set(control.ref, {\n            frame: state,\n            index,\n            control,\n            expires: (yield* clock.currentTimeMillis) + 60_000,\n          });\n          discovered.push(control);\n        }\n\n        const rawText = yield* remote(() =>\n          handle.evaluate((held) => {\n            if (typeof held !== \"object\" || held === null) return null;\n\n            return Reflect.apply(Reflect.get(held, \"text\"), held, []);\n          }),\n        );\n\n        text += yield* decode(Schema.String.check(Schema.isMaxLength(65536)), rawText);\n        if (text.length > 65536) {\n          text = text.slice(0, 65536);\n          truncated = true;\n        }\n      }\n      if ((yield* context).document !== before.document)\n        return yield* transportError(\"stale-reference\");\n\n      return yield* decode(ProtectedDiscovery, {\n        ...before,\n        frameOrigins: [...frameOrigins],\n        text,\n        controls: discovered,\n        truncated,\n      });\n    }),\n    fill: Effect.fn(\"ProtectedNativeTransport.fill\")(function* (ref, role, value) {\n      const dispatch = yield* ProtectedBrowserDispatch;\n      const state = yield* get(ref);\n\n      // CDP dispatch may mutate before its reply is lost, so uncertainty starts here.\n      yield* dispatch.mark;\n\n      const filled = yield* remote(() =>\n        state.frame.handle.evaluate(\n          (held, index, expectedRole, secret) => {\n            if (typeof held !== \"object\" || held === null) return false;\n\n            return Reflect.apply(Reflect.get(held, \"fill\"), held, [index, expectedRole, secret]);\n          },\n          state.index,\n          role,\n          Redacted.value(value),\n        ),\n      );\n\n      if (filled === \"unsupported\") return yield* transportError(\"unsupported\");\n      if (filled !== true) return yield* transportError(\"stale-reference\");\n    }),\n    click: Effect.fn(\"ProtectedNativeTransport.click\")(function* (ref) {\n      const state = yield* get(ref);\n\n      const clicked = yield* remote(() =>\n        state.frame.handle.evaluate((held, index) => {\n          if (typeof held !== \"object\" || held === null) return false;\n\n          return Reflect.apply(Reflect.get(held, \"click\"), held, [index]);\n        }, state.index),\n      );\n\n      if (clicked === \"needs-attention\") return yield* transportError(\"needs-attention\");\n      if (clicked !== true) return yield* transportError(\"stale-reference\");\n    }),\n  };\n}, Effect.withTracerEnabled(false));\n","/// <reference types=\"@cloudflare/workers-types\" />\nimport puppeteer, { type Browser } from \"@cloudflare/puppeteer\";\nimport { type InteractiveBrowserPolicy } from \"@effect-agent/sandbox/InteractiveBrowser\";\nimport { ProtectedBrowserError } from \"@effect-agent/sandbox/ProtectedBrowser\";\nimport { Clock, Context, Crypto, Effect, Layer, Redacted, Schema, type Scope } from \"effect\";\n\nimport { BrowserRunSessionLifecycle } from \"../internal/browser-session-lifecycle.ts\";\nimport { makeProtectedNativeTransport, ProtectedNativeSession } from \"./native.ts\";\nimport {\n  BrowserRunProtectedTransport,\n  ProtectedTransportError,\n  type ProtectedBrowserTransport,\n} from \"./policy.ts\";\n\n/**\n * Acquires through BROWSER with recording=false explicitly on the wire. The trusted provider's\n * documented opt-in semantics are the recording guarantee; no recording-status API exists.\n * Account operators remain trusted, and must not attach external observers to private passes.\n */\nexport const browserRunProtectedBindingLayer = (options: {\n  readonly browser: Pick<BrowserRun, \"fetch\">;\n}) =>\n  Layer.effect(BrowserRunProtectedTransport)(\n    Effect.gen(function* () {\n      const lifecycle = yield* BrowserRunSessionLifecycle;\n      const crypto = yield* Crypto.Crypto;\n\n      const open = Effect.fn(\"BrowserRunProtectedTransport.open\")(function* (\n        policy: InteractiveBrowserPolicy,\n      ): Effect.fn.Return<ProtectedBrowserTransport, ProtectedBrowserError, Scope.Scope> {\n        const failure = () =>\n          new ProtectedBrowserError({\n            reason: \"provider\",\n            dispatch: \"not-dispatched\",\n            milestone: \"none\",\n            observation: \"closed\",\n            cleanup: \"unconfirmed\",\n          });\n\n        let sessionId: Redacted.Redacted<string> | undefined;\n        let browser: Browser | undefined;\n        let driver: ProtectedBrowserTransport | undefined;\n        let invalid = false;\n        // SDK acquisition may finish after interruption. Its late-reply callback must await cleanup,\n        // using this pass's clock rather than starting an Effect runtime with default services.\n        const runCleanup = Effect.runPromiseWith(Context.make(Clock.Clock, yield* Clock.Clock));\n\n        const terminate = Effect.gen(function* () {\n          invalid = true;\n          driver?.invalidate();\n          if (sessionId === undefined) return \"unconfirmed\" as const;\n\n          const cleanup = yield* lifecycle.close(sessionId).pipe(\n            Effect.as(\"confirmed\" as const),\n            Effect.catchCause(() => Effect.succeed(\"unconfirmed\" as const)),\n            Effect.interruptible,\n            Effect.timeoutOrElse({\n              duration: \"10 seconds\",\n              orElse: () => Effect.succeed(\"unconfirmed\" as const),\n            }),\n          );\n\n          // Local disconnect is not remote-closure evidence. Do it even when confirmation fails.\n          const connected = browser;\n\n          if (connected !== undefined)\n            yield* Effect.promise(() => connected.disconnect()).pipe(\n              Effect.catchCause(() => Effect.void),\n              Effect.interruptible,\n              Effect.timeoutOrElse({ duration: \"1 second\", orElse: () => Effect.void }),\n            );\n\n          return cleanup;\n        });\n\n        const close = yield* Effect.cached(terminate);\n\n        yield* Effect.addFinalizer(() =>\n          close.pipe(\n            Effect.flatMap((state) =>\n              state === \"confirmed\"\n                ? Effect.void\n                : Effect.logWarning(\"Protected browser exact-session closure unconfirmed\"),\n            ),\n          ),\n        );\n\n        const acquired = yield* Effect.tryPromise({\n          try: async (signal) => {\n            let recordingDisabled = false;\n\n            const binding = {\n              fetch: async (input: RequestInfo | URL, init?: RequestInit) => {\n                const request = new Request(input, init);\n                const url = new URL(request.url);\n\n                if (url.pathname === \"/v1/devtools/browser\" && request.method === \"POST\") {\n                  url.searchParams.set(\"recording\", \"false\");\n                  recordingDisabled = url.searchParams.get(\"recording\") === \"false\";\n\n                  return options.browser.fetch(new Request(url, request));\n                }\n\n                return options.browser.fetch(request);\n              },\n            };\n\n            const acquired = await puppeteer.acquire(binding, {\n              recording: false,\n              // Provider inactivity timeout, independent of the finite total pass deadline.\n              keep_alive: Math.min(600_000, Math.max(10_000, policy.maxElapsedMillis)),\n            });\n\n            sessionId = Redacted.make(\n              Schema.decodeUnknownSync(Schema.String.check(Schema.isUUID()))(acquired.sessionId),\n            );\n            if (!recordingDisabled || signal.aborted || invalid) {\n              await runCleanup(terminate);\n              throw new ProtectedTransportError({ reason: \"stale-reference\" });\n            }\n            // Initial attachment only. No recovery/reconnection path exists.\n            browser = await puppeteer.connect(options.browser, acquired.sessionId);\n            if (signal.aborted || invalid) {\n              await runCleanup(terminate);\n              throw new ProtectedTransportError({ reason: \"stale-reference\" });\n            }\n            const context = await browser.createBrowserContext();\n            const page = await context.newPage();\n\n            await page.setBypassServiceWorker(true);\n            await page.setRequestInterception(true);\n            page.on(\"request\", (request) => {\n              let allowed = policy.network._tag === \"Unrestricted\";\n\n              try {\n                const url = new URL(request.url());\n\n                allowed ||=\n                  policy.network._tag === \"ExactHosts\" &&\n                  url.protocol === \"https:\" &&\n                  !url.username &&\n                  !url.password &&\n                  policy.network.allowedHosts.includes(url.host);\n              } catch {\n                /* Refuse malformed destinations. */\n              }\n              void (\n                allowed && !invalid ? request.continue() : request.abort(\"blockedbyclient\")\n              ).catch(() => {\n                invalid = true;\n                driver?.invalidate();\n              });\n            });\n            if (signal.aborted || invalid) {\n              await runCleanup(terminate);\n              throw new ProtectedTransportError({ reason: \"stale-reference\" });\n            }\n\n            return ProtectedNativeSession.of({ browser, page, close });\n          },\n          catch: failure,\n        }).pipe(\n          Effect.timeoutOrElse({\n            duration: Math.min(policy.maxElapsedMillis, 30_000),\n            orElse: () =>\n              Effect.fail(new ProtectedBrowserError({ ...failure(), reason: \"timeout\" })),\n          }),\n          Effect.catch((error) =>\n            close.pipe(\n              Effect.flatMap((cleanup) =>\n                Effect.fail(new ProtectedBrowserError({ ...error, cleanup })),\n              ),\n            ),\n          ),\n        );\n\n        driver = yield* makeProtectedNativeTransport(policy).pipe(\n          Effect.provideService(ProtectedNativeSession, acquired),\n          Effect.provideService(Crypto.Crypto, crypto),\n        );\n\n        return driver;\n      }, Effect.withTracerEnabled(false));\n\n      return { open };\n    }),\n  );\n"],"mappings":";;;;;;AA2CA,IAAa,0BAAb,cAA6C,OAAO,YAAqC,CAAC,CACxF,2BACA,EAAE,QAAQ,OAAO,SAAS;CAAC;CAAmB;CAAmB;CAAe;AAAU,CAAC,EAAE,CAC/F,CAAC,CAAC,CAAC;;AAGH,IAAa,2BAAb,cAA8C,QAAQ,QAGpD,CAAC,CAAC,4DAA4D,CAAC,CAAC,CAAC;;AAwBnE,IAAa,+BAAb,cAAkD,QAAQ,QAOxD,CAAC,CAAC,gEAAgE,CAAC,CAAC,CAAC;AAEvE,MAAa,uBAAuB,OAAO,OAAO;CAChD,UAAU,OAAO,OAAO,MAAM,OAAO,OAAO,CAAC;CAC7C,WAAW;CACX,cAAc,OAAO,MAAM,gBAAgB,CAAC,CAAC,MAAM,OAAO,YAAY,EAAE,CAAC;AAC3E,CAAC;AAED,MAAa,qBAAqB,OAAO,OAAO;CAC9C,GAAG,qBAAqB;CACxB,MAAM,OAAO,OAAO,MAAM,OAAO,YAAY,KAAS,CAAC;CACvD,UAAU,OAAO,MAAM,uBAAuB,CAAC,CAAC,MAAM,OAAO,YAAY,EAAE,CAAC;CAC5E,WAAW,OAAO;AACpB,CAAC;AAED,MAAM,cAAc,GAAqB,MACvC,EAAE,cAAc,EAAE,aAClB,EAAE,gBAAgB,EAAE,eACpB,EAAE,oBAAoB,EAAE,mBACxB,EAAE,aAAa,EAAE,YACjB,EAAE,UAAU,EAAE,SACd,EAAE,SAAS,EAAE;AAEf,MAAM,WAAW,SACf,SAAS,cAAc,SAAS,aAC5B,UACA,KAAK,WAAW,OAAO,IACrB,SACA,KAAA;AAER,MAAM,aAAa,UAAqC,SAA0C;CAChG,IAAI,SAAS,SAAS,mBACpB,OAAO,SAAS,aACZ,SAAS,WACT,SAAS,aACP,SAAS,WACT,KAAA;CAER,QAAQ,MAAR;EACE,KAAK,aACH,OAAO,SAAS;EAClB,KAAK,eACH,OAAO,SAAS;EAClB,KAAK,eACH,OAAO,SAAS;EAClB,KAAK,qBACH,OAAO,SAAS;EAClB,KAAK,oBACH,OAAO,SAAS;EAClB,KAAK,sBACH,OAAO,SAAS;EAClB,KAAK;EACL,KAAK,YACH;CACJ;AACF;;;;;;AAOA,MAAa,iCACX,MAAM,OAAO,gBAAgB,CAAC,CAC5B,OAAO,IAAI,aAAa;CACtB,MAAM,YAAY,OAAO;CACzB,MAAM,SAAS,OAAO,OAAO;CAujB7B,OAAO,EAAE,MArjBI,OAAO,GAAG,uBAAuB,CAAC,CAAC,WAC9C,OAKA;EACA,MAAM,gBAAgB,WACpB,IAAI,sBAAsB;GACxB;GACA,UAAU;GACV,WAAW;GACX,aAAa;GACb,SAAS;EACX,CAAC;EAEH,MAAM,gBAAgB,OAAO,OAAO,oBAAoB,wBAAwB,CAAC,CAC/E,KACF,CAAC,CAAC,KAAK,OAAO,eAAe,aAAa,QAAQ,CAAC,CAAC;EAEpD,IAAI,cAAc,QAAQ,SAAS,aAAa,OAAO,OAAO,aAAa,aAAa;EAExF,MAAM,SAAS,yBAAyB,KAAK;GAC3C,GAAG;GACH,SACE,cAAc,QAAQ,SAAS,eAC3B;IAAE,MAAM;IAAc,cAAc,CAAC,GAAG,cAAc,QAAQ,YAAY;GAAE,IAC5E,EAAE,MAAM,eAAe;EAC/B,CAAC;EAGD,MAAM,SAAS,OAAO;EACtB,MAAM,UAAU,OAAO,MAAM;EAC7B,MAAM,SAAS,OAAO,UAAU,KAAK,MAAM;EAC3C,MAAM,OAAO,OAAO,UAAU,KAAK,CAAC;EACpC,IAAI,cAAqD;EACzD,IAAI,UAAwC;EAC5C,IAAI,UAAU;EACd,IAAI,WAA8C;EAClD,IAAI,YAAgD;EACpD,MAAM,YAAqC,CAAC;EAE5C,MAAM,yBAAS,IAAI,IAUjB;EAEF,MAAM,QAAQ,WACZ,IAAI,sBAAsB;GAAE;GAAQ;GAAU;GAAW;GAAa;EAAQ,CAAC;EAEjF,MAAM,QAAQ,OAAO,OAAO,OAC1B,OAAO,gBACL,OAAO,IAAI,aAAa;GACtB,cAAc;GACd,OAAO,MAAM;GACb,OAAO,WAAW;GAClB,UAAU,OAAO,OAAO,MAAM,KAC5B,OAAO,eACP,OAAO,cAAc;IACnB,UAAU;IACV,cAAc,OAAO,QAAQ,aAAsB;GACrD,CAAC,GACD,OAAO,iBAAiB,OAAO,QAAQ,aAAsB,CAAC,CAChE;GAEA,OAAO;EACT,CAAC,CACH,CACF;EAEA,OAAO,OAAO,mBACZ,MAAM,KACJ,OAAO,SAAS,WACd,WAAW,gBACP,OAAO,WAAW,qDAAqD,IACvE,OAAO,IACb,CACF,CACF;EAEA,MAAM,UAAgB,WACpB,OAAO,KAAK,OAAO,UAAU,UAAU,KAAK,MAAM,MAAM,CAAC,CAAC;EAE5D,MAAM,UAAa,QAAyB,UAC1C,OAAO,oBAAoB,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,OAAO,eAAe,KAAK,UAAU,CAAC,CAAC;EAExF,MAAM,SAAS,OAAO,OAAO,KAAK,OAAO,UAAU,UAAU,KAAK,MAAM,MAAM,CAAC,CAAC;EAChF,MAAM,cAAc,OAAO,OAAO,OAAO;EAEzC,MAAM,oBAAoB,OAAO,IAAI,aAAa;GAChD,MAAM,UAAU,OAAO;GACvB,IAAI;GAEJ,IAAI,UAAU,SAAS,GAAG;IACxB,cAAc;IACd,MAAM,YAAY,OAAO;IAEzB,MAAM,cAAc,OAAO,OACxB,YAAY;KAAE,GAAG;KAAS,QAAQ;KAAW,WAAW,CAAC,GAAG,SAAS;IAAE,CAAC,CAAC,CACzE,KAAK,OAAO,UAAU,UAAU,KAAK,MAAM,MAAM,CAAC,CAAC;IAEtD,IAAI,SAAS,MAAM,OAAO,MAAM,MAAM,SAAS,MAAM,SAAS,GAC5D,OAAO,OAAO,KAAK,QAAQ;IAE7B,MAAM,WAAW,OAAO,OAAO,oBAAoB,6BAA6B,CAAC,CAC/E,WACF,CAAC,CAAC,KAAK,OAAO,eAAe,KAAK,qBAAqB,CAAC,CAAC;IAEzD,IAAI,aAAa,QAAQ,OAAO,OAAO,KAAK,qBAAqB;IACjE,IAAI,OAAO,aAAa,UAAU;KAChC,UAAU,CAAC,GAAG,SAAS,OAAO;KAC9B,IAAI,CAAC,QAAQ,SAAS,QAAQ,SAAS,GAAG,OAAO,OAAO,KAAK,qBAAqB;IACpF;IACA,cAAc;GAChB;GACA,OAAO,OAAO,OAAO,oBAAoB,OAAO,CAAC;GAEjD,OAAO;IACL,GAAG;IACH,cAAc,QAAQ,aAAa,QAChC,WAAW,YAAY,KAAA,KAAa,QAAQ,SAAS,MAAM,CAC9D;GACF;EACF,CAAC;EAED,MAAM,UAAU,QAAgB,OAAO,OAAO,OAAO,GAAG,CAAC;EAEzD,MAAM,kBAAkB,OAAO,GAAG,kCAAkC,CAAC,CAAC,WACpE,QACA;GACA,IAAI,OAAO,oBAAoB,KAAA,GAAW;IACxC,IAAI,OAAO,SAAS,UAAU,OAAO,OAAO,KAAK,aAAa;IAE9D;GACF;GACA,MAAM,YAAY,OAAO;GAEzB,OAAO,OACJ,gBAAgB;IAAE,QAAQ;IAAW;IAAQ,WAAW,CAAC,GAAG,SAAS;GAAE,CAAC,CAAC,CACzE,KAAK,OAAO,UAAU,UAAU,KAAK,MAAM,MAAM,CAAC,CAAC;GACtD,IAAI,SAAS,MAAM,OAAO,MAAM,MAAM,SAAS,MAAM,SAAS,GAC5D,OAAO,OAAO,KAAK,QAAQ;GAC7B,IAAI,OAAO,SAAS,YAAY;IAC9B,MAAM,UAAU,OAAO,OAAO,OAAO,GAAG;IAExC,IACE,CAAC,WAAW,QAAQ,QAAQ,OAAO,MAAM,KACzC,QAAQ,UAAU,OAAO,SAAS,WAAW,WAAW,OAAO,SAC9D,OAAO,SAAS,WAAW,OAAO,SAAS,UAAU,QAAQ,QAAQ,OAAO,KAE7E,OAAO,OAAO,KAAK,iBAAiB;GACxC;EACF,GAAG,OAAO,kBAAkB,KAAK,CAAC;EAElC,MAAM,WAAc,WAAc;GAGhC,OAFc,IAAI,YAAY,CAAC,CAAC,OAAO,KAAK,UAAU,MAAM,CAAC,CAAC,CAAC,cAE/C,OAAO,mBACnB,OAAO,QAAQ,MAAM,IACrB,OAAO,KAAK,KAAK,OAAO,CAAC;EAC/B;EAEA,MAAM,OAAU,WACd,KACG,uBAAuB,CAAC,CAAC,CACxB,OAAO,IAAI,aAAa;GACtB,WAAW;GACX,YAAY;GACZ,IAAI,gBAAgB,UAAU,OAAO,OAAO,KAAK,QAAQ;GACzD,IAAI,EAAE,UAAU,OAAO,YAAY,OAAO,OAAO,KAAK,OAAO;GAE7D,MAAM,YACJ,OAAO,qBAAqB,OAAO,MAAM,qBAAqB;GAEhE,IAAI,aAAa,GAAG;IAClB,OAAO;IAEP,OAAO,OAAO,KAAK,SAAS;GAC9B;GAEA,OAAO,OAAO,OAAO,KACnB,OAAO,cAAc;IACnB,UAAU;IACV,cAAc,OAAO,KAAK,KAAK,SAAS,CAAC;GAC3C,CAAC,GACD,OAAO,YAAY,UACjB,OAAO,IAAI,aAAa;IAEtB,MAAM,QAAQ,MAAM,QAAQ,MACzB,WACC,OAAO,SAAS,UAAU,OAAO,GAAG,qBAAqB,CAAC,CAAC,OAAO,KAAK,CAC3E;IAEA,MAAM,SACJ,OAAO,SAAS,UAAU,OAAO,GAAG,qBAAqB,CAAC,CAAC,MAAM,KAAK,IAClE,MAAM,MAAM,SACZ;IAEN,MAAM,YAAY,MAAM,QAAQ,MAAM,WAAW,OAAO,SAAS,WAAW;IAE5E,IACE,aAAa,oBACb,aACA,WAAW,cACX,WAAW,WAEX,OAAO;IACT,IAAI,WAAW,OAAO,OAAO,OAAO;IAEpC,OAAO,OAAO,KACZ,aAAa,yBAAyB,WAAW,aAC7C,oBACA,MACN;GACF,CAAC,CACH,GACA,OAAO,kBAAkB,KAAK,GAC9B,OAAO,kBAAkB,KAAK,CAChC;EACF,CAAC,CACH,CAAC,CACA,KACC,OAAO,SAAS,WACd,OAAO,OAAO,MAAM,IAChB,OAAO,QAAQ,OAAO,KAAK,IAC3B,OAAO,KACL,IAAI,sBAAsB;GACxB,QAAQ;GACR,UAAU;GACV,WAAW;GACX;GACA;EACF,CAAC,CACH,CACN,CACF;EAEJ,OAAO;GACL;GACA,WAAW,YACT,IACE,OAAO,IAAI,aAAa;IACtB,MAAM,UAAU,OAAO,OAAO,oBAAoB,wBAAwB,CAAC,CACzE,OACF,CAAC,CAAC,KAAK,OAAO,eAAe,KAAK,QAAQ,CAAC,CAAC;IAE5C,IAAI;IAEJ,IAAI;KACF,MAAM,IAAI,IAAI,QAAQ,GAAG;IAC3B,QAAQ;KACN,OAAO,OAAO,KAAK,QAAQ;IAC7B;IACA,IACE,IAAI,aAAa,YACjB,IAAI,YACJ,IAAI,YACH,OAAO,QAAQ,SAAS,gBACvB,CAAC,OAAO,QAAQ,aAAa,SAAS,IAAI,IAAI,GAEhD,OAAO,OAAO,KAAK,QAAQ;IAC7B,IAAI,UAAU,SAAS,GAAG,OAAO;IACjC,OAAO,gBAAgB;KAAE,MAAM;KAAY,KAAK,QAAQ;IAAI,CAAC;IAC7D,OAAO,MAAM;IACb,WAAW;IACX,OAAO,OAAO,OAAO,SAAS,QAAQ,GAAG,CAAC;IAC1C,WAAW;IACX,OAAO;GACT,CAAC,CACH;GACF,SAAS,IACP,OAAO,IAAI,aAAa;IACtB,MAAM,SAAS,OAAO;IACtB,MAAM,SAAS,OAAO,OAAO,OAAO,QAAQ;IAC5C,MAAM,QAAQ,OAAO;IAErB,IACE,OAAO,aAAa,MAAM,YAC1B,OAAO,aAAa,MAAM,YAC1B,OAAO,cAAc,MAAM,WAE3B,OAAO,OAAO,KAAK,iBAAiB;IACtC,IAAI,OAAO,aAAa,MAAM,WAAW,CAAC,MAAM,aAAa,SAAS,MAAM,CAAC,GAC3E,OAAO,OAAO,KAAK,qBAAqB;IAE1C,OAAO,OAAO,QACZ,4BAA4B,KAAK;KAC/B,GAAG;KACH,aAAa,UAAU,SAAS,IAAI,4BAA4B;IAClE,CAAC,CACH;GACF,CAAC,CACH;GACA,QAAQ,YACN,IACE,OAAO,IAAI,aAAa;IACtB,MAAM,UAAU,OAAO,OAAO,oBAAoB,qBAAqB,CAAC,CACtE,OACF,CAAC,CAAC,KAAK,OAAO,eAAe,KAAK,QAAQ,CAAC,CAAC;IAE5C,OAAO;IACP,MAAM,UAAU,OAAO,OAAO,QAAQ,GAAG;IAEzC,IACE,QAAQ,SAAS,UACjB,QAAQ,SAAS,YACjB,QAAQ,SAAS,WACjB,QAAQ,SAAS,cACjB,QAAQ,SAAS,UAEjB,OAAO,OAAO,KAAK,aAAa;IAClC,IAAI;IAEJ,IAAI,QAAQ,SAAS,QAAQ;KAC3B,IAAI,QAAQ,QAAQ,KAAA,GAAW,OAAO,OAAO,KAAK,aAAa;KAC/D,SAAS;MACP,MAAM;MACN,KAAK,QAAQ;MACb,QAAQ,QAAQ;MAChB,MAAM;MACN,KAAK,QAAQ;KACf;IACF,OAAO,IAAI,QAAQ,SAAS,UAC1B,SAAS;KAAE,MAAM;KAAU,KAAK,QAAQ;KAAK,QAAQ,QAAQ;IAAO;SAEpE,SAAS;KACP,MAAM;KACN,KAAK,QAAQ;KACb,QAAQ,QAAQ;KAChB,MAAM,QAAQ;IAChB;IAEF,OAAO,gBAAgB,MAAM;IAC7B,WAAW;IACX,OAAO,OAAO,OAAO,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,KACvC,OAAO,OAAO,UAAU;KACtB,IAAI,MAAM,WAAW,mBAAmB,WAAW;KAEnD,OAAO,OAAO,KAAK,KAAK;IAC1B,CAAC,CACH;IACA,WAAW;IACX,IAAI,QAAQ,SAAS,UAAU,YAAY;IAC3C,OAAO;GACT,CAAC,CACH;GACF,OAAO,YACL,IACE,OAAO,IAAI,aAAa;IACtB,MAAM,UAAU,OAAO,OAAO,oBAAoB,oBAAoB,CAAC,CACrE,OACF,CAAC,CAAC,KAAK,OAAO,eAAe,KAAK,QAAQ,CAAC,CAAC;IAE5C,OAAO;IACP,MAAM,UAAU,OAAO,OAAO,QAAQ,GAAG;IAEzC,IAAI,QAAQ,SAAS,UAAU,QAAQ,SAAS,UAC9C,OAAO,OAAO,KAAK,aAAa;IAClC,OAAO,gBAAgB;KACrB,MAAM;KACN,KAAK,QAAQ;KACb,QAAQ,QAAQ;KAChB,MAAM,QAAQ;IAChB,CAAC;IACD,OAAO,OACL,OAAO,KAAK,QAAQ,KAAK,QAAQ,MAAM,SAAS,KAAK,QAAQ,KAAK,CAAC,CACrE,CAAC,CAAC,KACA,OAAO,eAAe,0BAA0B,EAC9C,MAAM,OAAO,WAAW;KACtB,WAAW;IACb,CAAC,EACH,CAAC,CACH;IACA,WAAW;IACX,YAAY;IACZ,OAAO;GACT,CAAC,CACH;GACF,uBAAuB,YACrB,IACE,OAAO,IAAI,aAAa;IACtB,MAAM,UAAU,OAAO,OAAO,oBAAoB,oBAAoB,CAAC,CACrE,OACF,CAAC,CAAC,KAAK,OAAO,eAAe,KAAK,QAAQ,CAAC,CAAC;IAE5C,OAAO;IACP,MAAM,UAAU,OAAO,OAAO,QAAQ,MAAM;IAE5C,IAAI,QAAQ,QAAQ,IAAI,MAAM,QAAQ,MAAM,OAAO,OAAO,KAAK,aAAa;IAC5E,MAAM,YAAY,OAAO;IAEzB,MAAM,aAAa,OAAO,OACvB,KAAK;KAAE,QAAQ;KAAW,MAAM,QAAQ;KAAM,QAAQ,QAAQ;IAAO,CAAC,CAAC,CACvE,KAAK,OAAO,UAAU,UAAU,KAAK,MAAM,MAAM,CAAC,CAAC;IAEtD,MAAM,MAAM,OAAO,MAAM;IAEzB,KAAK,MAAM,CAAC,KAAK,UAAU,QAAQ,IAAI,MAAM,WAAW,KAAK,OAAO,OAAO,GAAG;IAC9E,IAAI,WAAW,SAAS,MAAM,OAAO,OAAO,WAAW,SAAS,IAC9D,OAAO,OAAO,KAAK,OAAO;IAC5B,IAAI,CAAC,WAAW,QAAQ,SAAS,OAAO,OAAO,QAAQ,MAAM,EAAA,CAAG,MAAM,GACpE,OAAO,OAAO,KAAK,iBAAiB;IACtC,MAAM,UAAU,MAAM;IACtB,MAAM,SAAiC,CAAC;IACxC,MAAM,0BAAyB,IAAI,IAAI;IAEvC,KAAK,MAAM,aAAa,YAAY;KAClC,MAAM,WAAW,OAAO,OAAO,yBAAyB,UAAU,QAAQ;KAE1E,MAAM,MAAM,OAAO,OAAO,aAAa,KACrC,OAAO,eAAe,KAAK,UAAU,CAAC,CACxC;KAEA,QAAQ,IAAI,KAAK;MACf,QAAQ;MACR,KAAK,UAAU;MACf,QAAQ,QAAQ;MAChB,WAAW,QAAQ;MACnB,MAAM,QAAQ;MACd;KACF,CAAC;KACD,OAAO,KAAK,gBAAgB,KAAK;MAAE;MAAK,MAAM,QAAQ;MAAM;KAAS,CAAC,CAAC;IACzE;IACA,OAAO,QAAQ,MAAM;IACrB,KAAK,MAAM,CAAC,KAAK,UAAU,SAAS,OAAO,IAAI,KAAK,KAAK;IAEzD,OAAO;GACT,CAAC,CACH;GACF,gBAAgB,YACd,IACE,OAAO,IAAI,aAAa;IACtB,MAAM,UAAU,OAAO,OAAO,oBAAoB,aAAa,CAAC,CAAC,OAAO,CAAC,CAAC,KACxE,OAAO,eAAe,KAAK,QAAQ,CAAC,CACtC;IAEA,MAAM,QAAQ,OAAO,IAAI,QAAQ,KAAK;IAEtC,IAAI,UAAU,KAAA,KAAa,MAAM,YAAY,OAAO,MAAM,oBACxD,OAAO,OAAO,KAAK,iBAAiB;IACtC,MAAM,YAAY,OAAO;IAEzB,IAAI,SAAS,MAAM,SAAS,MAAM,SAAS,MAAM,MAAM,MAAM,GAC3D,OAAO,OAAO,KAAK,QAAQ;IAC7B,IACE,IAAI,IAAI,QAAQ,OAAO,KAAK,UAAU,MAAM,GAAG,CAAC,CAAC,CAAC,SAChD,QAAQ,OAAO,UACjB,IAAI,IAAI,QAAQ,OAAO,KAAK,UAAU,MAAM,IAAI,CAAC,CAAC,CAAC,SAAS,QAAQ,OAAO,QAE3E,OAAO,OAAO,KAAK,QAAQ;IAE7B,MAAM,WAAW,OAAO,IAAI,aAAa;KACvC,IAAI,CAAC,WAAW,MAAM,SAAS,OAAO,OAAO,MAAM,SAAS,EAAA,CAAG,MAAM,GACnE,OAAO,OAAO,KAAK,iBAAiB;KACtC,KAAK,MAAM,SAAS,QAAQ,QAAQ;MAClC,MAAM,UAAU,OAAO,OAAO,MAAM,GAAG;MAEvC,IACE,MAAM,SAAS,QAAQ,QACvB,QAAQ,MAAM,IAAI,MAAM,MAAM,QAC9B,CAAC,WAAW,MAAM,QAAQ,QAAQ,MAAM,GAExC,OAAO,OAAO,KAAK,QAAQ;KAC/B;KACA,IAAI,QAAQ,WAAW,KAAA,GAAW;MAChC,MAAM,SAAS,OAAO,OAAO,QAAQ,MAAM;MAE3C,IAAI,OAAO,SAAS,YAAY,CAAC,WAAW,MAAM,QAAQ,OAAO,MAAM,GACrE,OAAO,OAAO,KAAK,QAAQ;KAC/B;IACF,CAAC;IAED,OAAO;IAEP,MAAM,gBAA4C;KAChD,QAAQ;KACR,KAAK,MAAM;KACX,MAAM,MAAM;KACZ,QAAQ,MAAM;KACd,OAAO,QAAQ,OAAO,KAAK,UAAU,MAAM,IAAI;KAC/C,QAAQ,QAAQ,WAAW,KAAA;IAC7B;IAEA,MAAM,YAAY,OAAO,IAAI,aAAa;KACxC,IAAI,SAAS,MAAM,OAAO,MAAM,MAAM,SAAS,MAAM,SAAS,GAC5D,OAAO,OAAO,KAAK,QAAQ;KAC7B,OAAO,OACJ,UAAU,aAAa,CAAC,CACxB,KAAK,OAAO,UAAU,UAAU,KAAK,MAAM,MAAM,CAAC,CAAC;KACtD,IAAI,SAAS,MAAM,OAAO,MAAM,MAAM,SAAS,MAAM,SAAS,GAC5D,OAAO,OAAO,KAAK,QAAQ;IAC/B,CAAC;IAED,OAAO;IACP,OAAO;IAEP,MAAM,MAAM,OAAO,OAChB,QAAQ,aAAa,CAAC,CACtB,KAAK,OAAO,UAAU,UAAU,KAAK,MAAM,MAAM,CAAC,CAAC;IAEtD,MAAM,WAAW,OAAO,OAAO,oBAC7B,MAAM,SAAS,UAAU,kBAAkB,cAC7C,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,OAAO,eAAe,KAAK,UAAU,CAAC,CAAC;IAEnD,KAAK,MAAM,SAAS,QAAQ,QAC1B,IAAI,UAAU,UAAU,MAAM,IAAI,MAAM,KAAA,GACtC,OAAO,OAAO,KAAK,oBAAoB;IAC3C,OAAO,OAAO,QAAQ,KAAK;IAC3B,KAAK,MAAM,SAAS,QAAQ,QAAQ;KAClC,OAAO;KACP,OAAO;KACP,MAAM,QAAQ,UAAU,UAAU,MAAM,IAAI;KAE5C,IAAI,UAAU,KAAA,GAAW,OAAO,OAAO,KAAK,oBAAoB;KAChE,cAAc;KACd,OAAO,OAAO,OAAO,KAAK,MAAM,KAAK,MAAM,MAAM,KAAK,CAAC,CAAC,CAAC,KACvD,OAAO,eAAe,0BAA0B,EAC9C,MAAM,OAAO,WAAW;MACtB,WAAW;MACX,IAAI,CAAC,UAAU,MAAM,WAAW,WAAW,QAAQ,MAAM,MAAM,CAAC,GAC9D,UAAU,KAAK,MAAM,MAAM;KAC/B,CAAC,EACH,CAAC,CACH;KACA,WAAW;KACX,YAAY;IACd;IACA,YAAY;IACZ,IAAI,QAAQ,WAAW,KAAA,GAAW;KAChC,OAAO;KACP,OAAO;KACP,MAAM,MAAM,QAAQ;KAEpB,WAAW;KACX,OAAO,OAAO,OAAO,MAAM,GAAG,CAAC,CAAC,CAAC,KAC/B,OAAO,OAAO,UAAU;MACtB,IAAI,MAAM,WAAW,mBAAmB,WAAW;MAEnD,OAAO,OAAO,KAAK,KAAK;KAC1B,CAAC,CACH;KACA,WAAW;KACX,YAAY;IACd;IACA,OAAO;IAEP,OAAO,oBAAoB,KAAK;KAC9B;KACA;KACA;KACA;KACA,gBAAgB;IAClB,CAAC;GACH,CAAC,CACH;EACJ;CACF,GAAG,OAAO,kBAAkB,KAAK,CAErB,EAAE;AAChB,CAAC,CACH;;;AC5sBF,MAAa,qBAAqB;AAElC,MAAa,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2GAoC+E,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACb9H,MAAM,cAAc,OAAO,OAAO;CAChC,MAAM,wBAAwB,OAAO;CACrC,WAAW,OAAO;CAClB,QAAQ,OAAO,OAAO,MAAM,OAAO,YAAY,kBAAkB,CAAC;CAClE,OAAO,OAAO,OAAO,MAAM,OAAO,YAAY,GAAG,CAAC;CAClD,SAAS,OAAO,YAAY,OAAO,OAAO;AAC5C,CAAC;AAED,MAAM,eAAe,OAAO,MAAM,OAAO,OAAO,WAAW,CAAC,CAAC,CAAC,MAAM,OAAO,YAAY,EAAE,CAAC;;AAiB1F,IAAa,yBAAb,cAA4C,QAAQ,QAOlD,CAAC,CAAC,0DAA0D,CAAC,CAAC,CAAC;AAEjE,MAAM,kBAAkB,WACtB,IAAI,wBAAwB,EAAE,OAAO,CAAC;AAExC,MAAM,UAAa,QAAyB,UAC1C,OAAO,oBAAoB,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,OAAO,eAAe,eAAe,UAAU,CAAC,CAAC;AAGlG,MAAM,UAAa,QACjB,OAAO,WAAW;CAChB,KAAK,OAAO,WAAW;EACrB,IAAI;GACF,OAAO;IAAE,IAAI;IAAe,OAAO,MAAM,IAAI,MAAM;GAAE;EACvD,QAAQ;GACN,OAAO,EAAE,IAAI,MAAe;EAC9B;CACF;CACA,aAAa,eAAe,UAAU;AACxC,CAAC,CAAC,CAAC,KACD,OAAO,SAAS,WACd,OAAO,KAAK,OAAO,QAAQ,OAAO,KAAK,IAAI,OAAO,KAAK,eAAe,UAAU,CAAC,CACnF,CACF;;AAGF,MAAa,+BAA+B,OAAO,GAAG,+BAA+B,CAAC,CAAC,WACrF,QAKA;CACA,MAAM,UAAU,OAAO;CACvB,MAAM,EAAE,SAAS,SAAS;CAC1B,MAAM,SAAS,OAAO,OAAO;CAC7B,MAAM,QAAQ,OAAO,MAAM;CAC3B,MAAM,OAAO,OAAO,aAAa,KAAK,OAAO,eAAe,eAAe,UAAU,CAAC,CAAC;CACvF,IAAI,SAAS;CACb,IAAI,YAAY;CAChB,IAAI;CACJ,IAAI;CACJ,MAAM,yBAAS,IAAI,IAAuB;CAC1C,MAAM,2BAAW,IAAI,IAA0B;CAE/C,MAAM,UAAU,UACd,OAAO,IAAI;EACT,WAAW;GACT,MAAM,MAAM,IAAI,IAAI,KAAK;GAEzB,IAAI,IAAI,YAAY,IAAI,UAAU,MAAM,eAAe,iBAAiB;GACxE,IAAI,CAAC,OAAO,GAAG,gBAAgB,CAAC,CAAC,IAAI,MAAM,GAAG,MAAM,eAAe,aAAa;GAChF,IAAI,OAAO,QAAQ,SAAS,gBAAgB,CAAC,OAAO,QAAQ,aAAa,SAAS,IAAI,IAAI,GACxF,MAAM,eAAe,iBAAiB;GAExC,OAAO,IAAI;EACb;EACA,QAAQ,UACN,OAAO,GAAG,uBAAuB,CAAC,CAAC,KAAK,IAAI,QAAQ,eAAe,UAAU;CACjF,CAAC;CAEH,MAAM,QAAQ,OAAO,cACnB,UAAU,aAAa,CAAC,QAAQ,YAAY,IACxC,OAAO,KAAK,eAAe,iBAAiB,CAAC,IAC7C,OAAO,IACb;CAEA,MAAM,cAAc;EAClB,SAAS,MAAM;EAEf,cAAc,KAAA;CAChB;CAEA,MAAM,oBAAoB;EACxB,MAAM;CACR;CAEA,MAAM,YAAY,WAA+B;EAC/C,IAAI,OAAO,KAAK,MAAM,QAAQ;EAE9B,YAAY;EACZ,MAAM;CACR;CAEA,MAAM,mBAAmB;EACvB,SAAS;EACT,MAAM;CACR;CAEA,MAAM,oBAAoB,OAAO,IAAI,aAAa;EAChD,MAAM,OAAO,KAAK,OAAO;EAEzB,IAAI,KAAK,SAAS,IAAI,OAAO,OAAO,eAAe,aAAa;EAIhE,OAAO,OAAO,OAAO,OAAO,OAAO,UACjC,UAAU,KAAK,UAAU,IACrB,OAAO,QAAQ,IAAI,IACnB,OAAO,IAAI;GACT,WAAW,MAAM,IAAI,MAAM,MAAM,IAAI,IAAI,MAAM,IAAI,CAAC,CAAC,CAAC,aAAa;GACnE,aAAa,eAAe,UAAU;EACxC,CAAC,CACP;CACF,CAAC;CAED,MAAM,UAAU,OAAO,IAAI,aAAa;EACtC,OAAO;EACP,MAAM,OAAO,OAAO;EACpB,MAAM,YAAY,OAAO,OAAO,KAAK,IAAI,CAAC;EAC1C,MAAM,eAAe,CAAC,GAAG,IAAI,IAAI,OAAO,OAAO,QAAQ,OAAO,UAAU,OAAO,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC;EAE7F,IAAI,aAAa,SAAS,IAAI,OAAO,OAAO,eAAe,aAAa;EAExE,IAAI,gBAAgB,KAAA,GAAW,cAAc,OAAO;EAEpD,OAAO,OAAO,OAAO,sBAAsB;GAAE,UAAU;GAAa;GAAW;EAAa,CAAC;CAC/F,CAAC;CAED,MAAM,YAAY,OAAO,GAAG,oCAAoC,CAAC,CAAC,WAAW,OAAmB;EAC9F,IAAI,MAAM,MAAM,UAAU,OAAO;EAEjC,OAAO,OAAO,aACZ,MAAM,OAAO,UAAU,SAAS;GAC9B,IAAI,OAAO,SAAS,YAAY,SAAS,MAAM,OAAO;GAEtD,OAAO,QAAQ,IAAI,MAAM,KAAK,MAAM,QAAQ,IAAI,YAAY,UAAU;EACxE,CAAC,CACH;CACF,CAAC;CAED,MAAM,MAAM,OAAO,GAAG,8BAA8B,CAAC,CAAC,WAAW,KAAa;EAC5E,OAAO;EACP,MAAM,QAAQ,SAAS,IAAI,GAAG;EAE9B,IACE,CAAC,SACA,uBAAuB,KAAA,KACtB,CAAC,mBAAmB,IAAI,MAAM,QAAQ,OAAO,WAAW,KAC1D,MAAM,YAAY,OAAO,MAAM,sBAC/B,EAAE,OAAO,UAAU,MAAM,KAAK,IAE9B,OAAO,OAAO,eAAe,iBAAiB;EAEhD,MAAM,UAAU,OAAO,aACrB,MAAM,MAAM,OAAO,UAAU,MAAM,UAAU;GAC3C,IAAI,OAAO,SAAS,YAAY,SAAS,MAAM,OAAO;GAEtD,OAAO,QAAQ,MAAM,QAAQ,IAAI,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC;EACnE,GAAG,MAAM,KAAK,CAChB;EAEA,MAAM,cAAc,OAAO,OAAO,OAAO,OAAO,WAAW,GAAG,OAAO;EAErE,IAAI,gBAAgB,MAAM,OAAO,OAAO,eAAe,iBAAiB;EAGxE,KACE,OAHiB,QAAA,CAGb,cAAc,MAAM,QAAQ,OAAO,cACtC,OAAO,OAAO,MAAM,MAAM,MAAM,IAAI,CAAC,OAAO,MAAM,QAAQ,OAAO,gBACjE,OAAO,OAAO,YAAY,MAAM,OAAO,MAAM,QAAQ,OAAO,mBAC7D,YAAY,SAAS,MAAM,QAAQ,MAEnC,OAAO,OAAO,eAAe,iBAAiB;EAEhD,OAAO;CACT,CAAC;CAED,MAAM,QAAQ,OAAO,OAAO,OAC1B,OAAO,IAAI,aAAa;EACtB,WAAW;EAEX,OAAO,OAAO,QAAQ;CACxB,CAAC,CAAC,CAAC,KACD,OAAO,SACL,OAAO,WAAW;EAChB,KAAK,IAAI,kBAAkB,WAAW;EACtC,KAAK,IAAI,iBAAiB,WAAW;EACrC,QAAQ,IAAI,iBAAiB,QAAQ;EAErC,OAAO,MAAM;CACf,CAAC,CACH,CACF,CACF;CAEA,OAAO,OAAO,eACZ,OAAO,WAAW;EAChB,KAAK,GAAG,kBAAkB,WAAW;EACrC,KAAK,GAAG,iBAAiB,WAAW;EACpC,QAAQ,GAAG,iBAAiB,QAAQ;CACtC,CAAC,SACK,KACR;CAEA,OAAO;EACL,qBAAqB,OAAO,GAAG,8CAA8C,CAAC,CAC5E,WAAW,SAAS;GAClB,OAAO;GACP,qBACE,YAAY,KAAA,IACR,KAAA,IACA,IAAI,IAAI,OAAO,OAAO,OAAO,MAAM,gBAAgB,GAAG,OAAO,CAAC;GAEpE,KAAK,MAAM,CAAC,KAAK,UAAU,UACzB,IACE,uBAAuB,KAAA,KACvB,CAAC,mBAAmB,IAAI,MAAM,QAAQ,OAAO,WAAW,GAExD,SAAS,OAAO,GAAG;EACzB,CACF;EACA;EACA;EACA;EACA,UAAU,OAAO,GAAG,mCAAmC,CAAC,CAAC,WAAW,KAAK;GACvE,OAAO;GACP,OAAO,OAAO,GAAG;GACjB,MAAM;GACN,OAAO,aAAa,KAAK,KAAK,KAAK,EAAE,WAAW,OAAO,CAAC,CAAC;GACzD,OAAO;EACT,CAAC;EACD,SAAS,QAAQ,IAAI,GAAG,CAAC,CAAC,KAAK,OAAO,KAAK,UAAU,MAAM,OAAO,CAAC;EACnE,UAAU,OAAO,IAAI,aAAa;GAChC,MAAM,SAAS,OAAO;GAEtB,SAAS,MAAM;GACf,KAAK,MAAM,SAAS,OAAO,OAAO,GAAG,OAAO,aAAa,MAAM,OAAO,QAAQ,CAAC;GAC/E,OAAO,MAAM;GACb,MAAM,aAA6C,CAAC;GACpD,IAAI,OAAO;GACX,IAAI,YAAY;GAChB,MAAM,+BAAe,IAAI,IAAY;GAErC,KAAK,MAAM,SAAS,OAAO,mBAAmB;IAC5C,MAAM,cAAc,OAAO,OAAO,MAAM,IAAI,CAAC;IAE7C,IAAI,uBAAuB,KAAA,KAAa,CAAC,mBAAmB,IAAI,WAAW,GAAG;IAC9E,aAAa,IAAI,WAAW;IAC5B,IAAI,OAAO,MAAM,kBAAkB,YAAY,OAAO,OAAO,eAAe,aAAa;IACzF,MAAM,SAAS,OAAO,aAAa,MAAM,cAAc,CAAC,CAAC,eAAe,YAAY,CAAC;IAErF,MAAM,QAAoB;KACxB;KACA;KACA,KAAK,OAAO;KACZ,UAAU,OAAO;KACjB,uBAAO,IAAI,IAAI;IACjB;IAEA,OAAO,IAAI,OAAO,KAAK;IAEvB,MAAM,MAAM,OAAO,aACjB,OAAO,UAAU,SAAS;KACxB,IAAI,OAAO,SAAS,YAAY,SAAS,MAAM,OAAO;KAEtD,OAAO,QAAQ,IAAI,MAAM,UAAU;IACrC,CAAC,CACH;IAEA,MAAM,eAAe,OAAO,OAAO,cAAc,GAAG;IAEpD,KAAK,IAAI,QAAQ,GAAG,QAAQ,aAAa,QAAQ,SAAS;KACxD,MAAM,OAAO,aAAa;KAE1B,IAAI,CAAC,MAAM;KACX,IAAI,WAAW,WAAW,IAAI;MAC5B,YAAY;MACZ;KACF;KACA,IAAI,OAAO,MAAM,MAAM,IAAI,KAAK,SAAS;KAEzC,IAAI,SAAS,KAAA,GAAW;MACtB,OAAO,OAAO;MACd,MAAM,MAAM,IAAI,KAAK,WAAW,IAAI;KACtC;KAEA,MAAM,YAAY,OAAO,OAAO,KAAK,MAAM,CAAC,CAAC,KAAK,OAAO,MAAM;KAE/D,IAAI,UAAU,SAAS,WAAW;KAElC,MAAM,UAAU,wBAAwB,KAAK;MAC3C,KAAK,OAAO;MACZ,MAAM,KAAK;MACX,OAAO,KAAK;MACZ,GAAI,KAAK,YAAY,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS,KAAK,QAAQ;MAC9D,GAAI,KAAK,SAAS,SAAS,EAAE,KAAK,KAAK,OAAO,IAAI,CAAC;MACnD,QAAQ,iBAAiB,KAAK;OAC5B,WAAW,OAAO;OAClB,aAAa,OAAO,OAAO,MAAM,IAAI,CAAC;OACtC,iBAAiB,UAAU;OAC3B,UAAU,MAAM;OAChB,OAAO,MAAM;OACb;MACF,CAAC;KACH,CAAC;KAED,SAAS,IAAI,QAAQ,KAAK;MACxB,OAAO;MACP;MACA;MACA,UAAU,OAAO,MAAM,qBAAqB;KAC9C,CAAC;KACD,WAAW,KAAK,OAAO;IACzB;IAEA,MAAM,UAAU,OAAO,aACrB,OAAO,UAAU,SAAS;KACxB,IAAI,OAAO,SAAS,YAAY,SAAS,MAAM,OAAO;KAEtD,OAAO,QAAQ,MAAM,QAAQ,IAAI,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC;IAC1D,CAAC,CACH;IAEA,QAAQ,OAAO,OAAO,OAAO,OAAO,MAAM,OAAO,YAAY,KAAK,CAAC,GAAG,OAAO;IAC7E,IAAI,KAAK,SAAS,OAAO;KACvB,OAAO,KAAK,MAAM,GAAG,KAAK;KAC1B,YAAY;IACd;GACF;GACA,KAAK,OAAO,QAAA,CAAS,aAAa,OAAO,UACvC,OAAO,OAAO,eAAe,iBAAiB;GAEhD,OAAO,OAAO,OAAO,oBAAoB;IACvC,GAAG;IACH,cAAc,CAAC,GAAG,YAAY;IAC9B;IACA,UAAU;IACV;GACF,CAAC;EACH,CAAC;EACD,MAAM,OAAO,GAAG,+BAA+B,CAAC,CAAC,WAAW,KAAK,MAAM,OAAO;GAC5E,MAAM,WAAW,OAAO;GACxB,MAAM,QAAQ,OAAO,IAAI,GAAG;GAG5B,OAAO,SAAS;GAEhB,MAAM,SAAS,OAAO,aACpB,MAAM,MAAM,OAAO,UAChB,MAAM,OAAO,cAAc,WAAW;IACrC,IAAI,OAAO,SAAS,YAAY,SAAS,MAAM,OAAO;IAEtD,OAAO,QAAQ,MAAM,QAAQ,IAAI,MAAM,MAAM,GAAG,MAAM;KAAC;KAAO;KAAc;IAAM,CAAC;GACrF,GACA,MAAM,OACN,MACA,SAAS,MAAM,KAAK,CACtB,CACF;GAEA,IAAI,WAAW,eAAe,OAAO,OAAO,eAAe,aAAa;GACxE,IAAI,WAAW,MAAM,OAAO,OAAO,eAAe,iBAAiB;EACrE,CAAC;EACD,OAAO,OAAO,GAAG,gCAAgC,CAAC,CAAC,WAAW,KAAK;GACjE,MAAM,QAAQ,OAAO,IAAI,GAAG;GAE5B,MAAM,UAAU,OAAO,aACrB,MAAM,MAAM,OAAO,UAAU,MAAM,UAAU;IAC3C,IAAI,OAAO,SAAS,YAAY,SAAS,MAAM,OAAO;IAEtD,OAAO,QAAQ,MAAM,QAAQ,IAAI,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC;GAChE,GAAG,MAAM,KAAK,CAChB;GAEA,IAAI,YAAY,mBAAmB,OAAO,OAAO,eAAe,iBAAiB;GACjF,IAAI,YAAY,MAAM,OAAO,OAAO,eAAe,iBAAiB;EACtE,CAAC;CACH;AACF,GAAG,OAAO,kBAAkB,KAAK,CAAC;;;;;;;;ACzZlC,MAAa,mCAAmC,YAG9C,MAAM,OAAO,4BAA4B,CAAC,CACxC,OAAO,IAAI,aAAa;CACtB,MAAM,YAAY,OAAO;CACzB,MAAM,SAAS,OAAO,OAAO;CA+J7B,OAAO,EAAE,MA7JI,OAAO,GAAG,mCAAmC,CAAC,CAAC,WAC1D,QACiF;EACjF,MAAM,gBACJ,IAAI,sBAAsB;GACxB,QAAQ;GACR,UAAU;GACV,WAAW;GACX,aAAa;GACb,SAAS;EACX,CAAC;EAEH,IAAI;EACJ,IAAI;EACJ,IAAI;EACJ,IAAI,UAAU;EAGd,MAAM,aAAa,OAAO,eAAe,QAAQ,KAAK,MAAM,OAAO,OAAO,MAAM,KAAK,CAAC;EAEtF,MAAM,YAAY,OAAO,IAAI,aAAa;GACxC,UAAU;GACV,QAAQ,WAAW;GACnB,IAAI,cAAc,KAAA,GAAW,OAAO;GAEpC,MAAM,UAAU,OAAO,UAAU,MAAM,SAAS,CAAC,CAAC,KAChD,OAAO,GAAG,WAAoB,GAC9B,OAAO,iBAAiB,OAAO,QAAQ,aAAsB,CAAC,GAC9D,OAAO,eACP,OAAO,cAAc;IACnB,UAAU;IACV,cAAc,OAAO,QAAQ,aAAsB;GACrD,CAAC,CACH;GAGA,MAAM,YAAY;GAElB,IAAI,cAAc,KAAA,GAChB,OAAO,OAAO,cAAc,UAAU,WAAW,CAAC,CAAC,CAAC,KAClD,OAAO,iBAAiB,OAAO,IAAI,GACnC,OAAO,eACP,OAAO,cAAc;IAAE,UAAU;IAAY,cAAc,OAAO;GAAK,CAAC,CAC1E;GAEF,OAAO;EACT,CAAC;EAED,MAAM,QAAQ,OAAO,OAAO,OAAO,SAAS;EAE5C,OAAO,OAAO,mBACZ,MAAM,KACJ,OAAO,SAAS,UACd,UAAU,cACN,OAAO,OACP,OAAO,WAAW,qDAAqD,CAC7E,CACF,CACF;EAEA,MAAM,WAAW,OAAO,OAAO,WAAW;GACxC,KAAK,OAAO,WAAW;IACrB,IAAI,oBAAoB;IAkBxB,MAAM,WAAW,MAAM,UAAU,QAAQ,EAfvC,OAAO,OAAO,OAA0B,SAAuB;KAC7D,MAAM,UAAU,IAAI,QAAQ,OAAO,IAAI;KACvC,MAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;KAE/B,IAAI,IAAI,aAAa,0BAA0B,QAAQ,WAAW,QAAQ;MACxE,IAAI,aAAa,IAAI,aAAa,OAAO;MACzC,oBAAoB,IAAI,aAAa,IAAI,WAAW,MAAM;MAE1D,OAAO,QAAQ,QAAQ,MAAM,IAAI,QAAQ,KAAK,OAAO,CAAC;KACxD;KAEA,OAAO,QAAQ,QAAQ,MAAM,OAAO;IACtC,EAG6C,GAAG;KAChD,WAAW;KAEX,YAAY,KAAK,IAAI,KAAS,KAAK,IAAI,KAAQ,OAAO,gBAAgB,CAAC;IACzE,CAAC;IAED,YAAY,SAAS,KACnB,OAAO,kBAAkB,OAAO,OAAO,MAAM,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,SAAS,CACnF;IACA,IAAI,CAAC,qBAAqB,OAAO,WAAW,SAAS;KACnD,MAAM,WAAW,SAAS;KAC1B,MAAM,IAAI,wBAAwB,EAAE,QAAQ,kBAAkB,CAAC;IACjE;IAEA,UAAU,MAAM,UAAU,QAAQ,QAAQ,SAAS,SAAS,SAAS;IACrE,IAAI,OAAO,WAAW,SAAS;KAC7B,MAAM,WAAW,SAAS;KAC1B,MAAM,IAAI,wBAAwB,EAAE,QAAQ,kBAAkB,CAAC;IACjE;IAEA,MAAM,OAAO,OAAM,MADG,QAAQ,qBAAqB,EAAA,CACxB,QAAQ;IAEnC,MAAM,KAAK,uBAAuB,IAAI;IACtC,MAAM,KAAK,uBAAuB,IAAI;IACtC,KAAK,GAAG,YAAY,YAAY;KAC9B,IAAI,UAAU,OAAO,QAAQ,SAAS;KAEtC,IAAI;MACF,MAAM,MAAM,IAAI,IAAI,QAAQ,IAAI,CAAC;MAEjC,YACE,OAAO,QAAQ,SAAS,gBACxB,IAAI,aAAa,YACjB,CAAC,IAAI,YACL,CAAC,IAAI,YACL,OAAO,QAAQ,aAAa,SAAS,IAAI,IAAI;KACjD,QAAQ,CAER;KACA,CACE,WAAW,CAAC,UAAU,QAAQ,SAAS,IAAI,QAAQ,MAAM,iBAAiB,EAAA,CAC1E,YAAY;MACZ,UAAU;MACV,QAAQ,WAAW;KACrB,CAAC;IACH,CAAC;IACD,IAAI,OAAO,WAAW,SAAS;KAC7B,MAAM,WAAW,SAAS;KAC1B,MAAM,IAAI,wBAAwB,EAAE,QAAQ,kBAAkB,CAAC;IACjE;IAEA,OAAO,uBAAuB,GAAG;KAAE;KAAS;KAAM;IAAM,CAAC;GAC3D;GACA,OAAO;EACT,CAAC,CAAC,CAAC,KACD,OAAO,cAAc;GACnB,UAAU,KAAK,IAAI,OAAO,kBAAkB,GAAM;GAClD,cACE,OAAO,KAAK,IAAI,sBAAsB;IAAE,GAAG,QAAQ;IAAG,QAAQ;GAAU,CAAC,CAAC;EAC9E,CAAC,GACD,OAAO,OAAO,UACZ,MAAM,KACJ,OAAO,SAAS,YACd,OAAO,KAAK,IAAI,sBAAsB;GAAE,GAAG;GAAO;EAAQ,CAAC,CAAC,CAC9D,CACF,CACF,CACF;EAEA,SAAS,OAAO,6BAA6B,MAAM,CAAC,CAAC,KACnD,OAAO,eAAe,wBAAwB,QAAQ,GACtD,OAAO,eAAe,OAAO,QAAQ,MAAM,CAC7C;EAEA,OAAO;CACT,GAAG,OAAO,kBAAkB,KAAK,CAErB,EAAE;AAChB,CAAC,CACH"}

package/dist/{ThreadObject-BSRVxtPI.d.mts → ThreadObject-6_j7YgMV.d.mts}

@@ -1,6 +1,6 @@
 import { DurableObjectContext, ThreadObjectIdentity, ThreadObjectNamespace } from "./CloudflareBindings.mjs";
 import { c as CloudflarePlatformConfigError, o as CloudflareDurableRuntimeConfig } from "./CloudflareConfig-f3CqTel1.mjs";
-import { DurableAlarmError, DurableAlarmService, ThreadMaintenance, ThreadMaintenanceFailpoint, ThreadMaintenanceFailpointHandler } from "./Alarm.mjs";
+import { DurableAlarmError, DurableAlarmService, ThreadMaintenance, ThreadMaintenanceFailpoint, ThreadMaintenanceFailpointHandler, ThreadMutationGate, ThreadPublication } from "./Alarm.mjs";
 import { HostProtocolError } from "./CloudflareThreadClient.mjs";
 import { AgentRegistration } from "@effect-agent/thread/AgentRegistration";
 import { DurableAgentRuntime, DurableRuntimeConfig, RecoveryReport } from "@effect-agent/thread/DurableAgentRuntime";
@@ -23,7 +23,7 @@ import { ToolReconciler } from "@effect-agent/thread/ToolReconciler";
 declare const ProgressWaitRegistry_base: Context.ServiceClass<ProgressWaitRegistry, "@effect-agent/platform-cloudflare/ProgressWaitRegistry", {
   /** Register a Scope-owned cancellation signal, observing any early cancel tombstone. */
   readonly subscribe: (waiterId: string) => Effect.Effect<Effect.Effect<void>, never, Scope.Scope>;
-  /** Cancel a registered waiter, or remember a bounded early cancellation. */
+  /** Cancel every attempt and retain a bounded tombstone for later transport attempts. */
   readonly cancel: (waiterId: string) => Effect.Effect<void>;
 }>;
 /**
@@ -100,7 +100,7 @@ type CloudflareBootstrapServices = CloudflareDurableRuntimeConfig | ThreadObject
 /** Every construction failure of the assembled Cloudflare durable runtime stack. */
 type CloudflareDurableRuntimeInitializationError = CloudflarePlatformConfigError | DigestError | DoStorageInitializationError;
 /** The services `ThreadObject.layer` provides. */
-type CloudflareDurableRuntimeServices = DurableAgentRuntime | SubmissionLedger | ThreadStore | WakeScheduler | DurableAlarmService | ThreadMaintenance | ThreadObjectPorts | ProgressWaitRegistry;
+type CloudflareDurableRuntimeServices = DurableAgentRuntime | SubmissionLedger | ThreadStore | WakeScheduler | DurableAlarmService | ThreadMaintenance | ThreadMutationGate | ThreadPublication | ThreadObjectPorts | ProgressWaitRegistry;
 declare const ThreadObjectPorts_base: Context.ServiceClass<ThreadObjectPorts, "@effect-agent/platform-cloudflare/ThreadObjectPorts", {
   readonly handle: (request: PortRequest) => Effect.Effect<PortResponse>;
 }>;
@@ -117,17 +117,28 @@ declare class ThreadObjectPorts extends ThreadObjectPorts_base {}
  * can provide it around the complete application Layer with the native context already supplied.
  */
 declare const layerConfig: (options: CloudflareDurableRuntimeOptions) => Layer.Layer<CloudflareBootstrapServices, CloudflarePlatformConfigError, DurableObjectContext>;
+interface ThreadPublicationOptions<E = never, R = never> {
+  /**
+   * Optional host outbox consumer, built once per incarnation with RAW LOCAL ThreadStore and
+   * SubmissionLedger services. Yield DurableObjectContext and ThreadObjectIdentity for native
+   * bindings and identity. Initialization is local-only, inside the constructor gate; setup
+   * errors and additional requirements remain in the returned Layer. Layer.effect owns Scope.
+   * Canonical appends and durable approval, abort and unknown-resolution intents invalidate
+   * publication after commit. Custom host facts must use ThreadMaintenance.withMutation.
+   */
+  readonly publication?: Layer.Layer<ThreadPublication, E, R>;
+}
 /**
  * Register typed Agents and version declarations. Hashing and dependency capture happen in
  * this Layer's Scope, after application Layers have been provided. Every Agent's instruction,
  * Tool, Schema, and model requirements remain visible until satisfied by Layer composition.
  * Use Layer.unwrap for registration values that need effectful application setup.
  */
-declare const layer: <const Entries extends ReadonlyArray<AgentRegistration>>(registrations: Entries) => Layer.Layer<CloudflareDurableRuntimeServices, DigestError | DoStorageInitializationError, DurableObjectContext | ThreadObjectNamespace | Exclude<[Entries[number]] extends [never] ? never : Entries[number] extends (infer T) ? T extends Entries[number] ? T extends {
+declare const layer: <const Entries extends ReadonlyArray<AgentRegistration>, E = never, R = never>(registrations: Entries, options?: ThreadPublicationOptions<E, R>) => Layer.Layer<CloudflareDurableRuntimeServices, E | DigestError | DoStorageInitializationError, DurableObjectContext | ThreadObjectNamespace | Exclude<R, SubmissionLedger | ThreadStore> | Exclude<[Entries[number]] extends [never] ? never : Entries[number] extends (infer T_2) ? T_2 extends Entries[number] ? T_2 extends {
   readonly attemptLayer: (context: import("@effect-agent/thread/AgentRegistration").AgentAttemptContext) => Layer.Layer<infer Provides, never, infer Requires>;
-} ? Requires | Exclude<T extends (infer T_1) ? T_1 extends T ? T_1 extends {
+} ? Requires | Exclude<T_2 extends (infer T_3) ? T_3 extends T_2 ? T_3 extends {
   readonly agent: infer A extends import("@effect-agent/thread/AgentRegistration").ExecutableAgentBinding;
-} ? import("@effect-agent/thread/DurableAgentRuntime").DurableWorkerRequirements<A> : T_1 extends {
+} ? import("@effect-agent/thread/DurableAgentRuntime").DurableWorkerRequirements<A> : T_3 extends {
   readonly agent: infer D extends import("@effect-agent/core/Agent").Definition<Schema.Top, Schema.Top, unknown, import("effect/unstable/ai/Toolkit").Any, import("@effect-agent/core/Agent").RunDispositionDeclaration<never, Schema.Top> | undefined, unknown> & {
     readonly instructions: import("@effect-agent/core/Agent").InstructionSource<never, unknown, unknown>;
     readonly inputPrompt?: import("@effect-agent/core/Agent").InputPromptSource<never, unknown, unknown> | undefined;
@@ -136,9 +147,9 @@ declare const layer: <const Entries extends ReadonlyArray<AgentRegistration>>(re
 } ? import("@effect-agent/thread/DurableAgentRuntime").DurableWorkerRequirements<{
   readonly definition: D;
   readonly model: M;
-}> : never : never : never, Provides> : T extends {
+}> : never : never : never, Provides> : T_2 extends {
   readonly agent: infer A extends import("@effect-agent/thread/AgentRegistration").ExecutableAgentBinding;
-} ? import("@effect-agent/thread/DurableAgentRuntime").DurableWorkerRequirements<A> : T extends {
+} ? import("@effect-agent/thread/DurableAgentRuntime").DurableWorkerRequirements<A> : T_2 extends {
   readonly agent: infer D extends import("@effect-agent/core/Agent").Definition<Schema.Top, Schema.Top, unknown, import("effect/unstable/ai/Toolkit").Any, import("@effect-agent/core/Agent").RunDispositionDeclaration<never, Schema.Top> | undefined, unknown> & {
     readonly instructions: import("@effect-agent/core/Agent").InstructionSource<never, unknown, unknown>;
     readonly inputPrompt?: import("@effect-agent/core/Agent").InputPromptSource<never, unknown, unknown> | undefined;
@@ -149,7 +160,7 @@ declare const layer: <const Entries extends ReadonlyArray<AgentRegistration>>(re
   readonly model: M;
 }> : never : never : never, import("effect/Scope").Scope> | CloudflareBootstrapServices>;
 declare namespace ThreadObject_d_exports {
-  export { AdminExplainRequest, AdminFailed, AdminFailure, AdminResponse, AdminVerifyRequest, CloudflareBootstrapServices as BootstrapServices, Class, ExplainedRecovery, CloudflareDurableRuntimeInitializationError as InitializationError, Instance, ObligationsScanned, Options, RetryExecuted, CloudflareDurableRuntimeOptions as RuntimeOptions, CloudflareDurableRuntimeServices as Services, VerifiedIntegrity, decodeAdminExplainRequest, decodeAdminResponse, decodeAdminVerifyRequest, decodeObligationThresholds, decodeRetryCommand, encodeAdminResponse, layer, layerConfig, make };
+  export { AdminExplainRequest, AdminFailed, AdminFailure, AdminResponse, AdminVerifyRequest, CloudflareBootstrapServices as BootstrapServices, Class, ExplainedRecovery, CloudflareDurableRuntimeInitializationError as InitializationError, Instance, ObligationsScanned, Options, ThreadPublicationOptions as PublicationOptions, RetryExecuted, CloudflareDurableRuntimeOptions as RuntimeOptions, CloudflareDurableRuntimeServices as Services, VerifiedIntegrity, decodeAdminExplainRequest, decodeAdminResponse, decodeAdminVerifyRequest, decodeObligationThresholds, decodeRetryCommand, encodeAdminResponse, layer, layerConfig, make };
 }
 /**
  * `ThreadObject.make(application, options)` — the Thread Durable Object
@@ -636,14 +647,38 @@ declare const encodeAdminResponse: (input: AdminFailed | ExplainedRecovery | Obl
     readonly reason: "occupied" | "refused" | "unavailable";
     readonly code: string;
   } | {
-    readonly _tag: "SettlementConflict";
+    readonly _tag: "OperationDenied";
+    readonly operation: "abort" | "awaitSettlement" | "explain" | "observe" | "resolveApproval" | "resolveUnknown" | "retry" | "scanObligations" | "verify" | "wake";
+    readonly reason: string;
+    readonly threadId?: string | undefined;
+    readonly submissionId?: string | undefined;
+  } | {
+    readonly _tag: "RetryRefused";
     readonly submissionId: string;
-    readonly existingOutcome: "aborted" | "completed" | "failed";
+    readonly refusal: "await-approval-decision" | "await-unknown-resolution" | "settled";
+    readonly decisionTag: string;
+    readonly message: string;
   } | {
     readonly _tag: "LedgerError";
     readonly operation: string;
     readonly message: string;
     readonly cause?: Schema.Json | undefined;
+  } | {
+    readonly _tag: "RunJournalError";
+    readonly message: string;
+    readonly cause?: Schema.Json | undefined;
+  } | {
+    readonly _tag: "DigestError";
+    readonly message: string;
+    readonly cause?: Schema.Json | undefined;
+  } | {
+    readonly _tag: "OwnershipLost";
+    readonly submissionId: string;
+    readonly actualEpoch: number;
+  } | {
+    readonly _tag: "SettlementConflict";
+    readonly submissionId: string;
+    readonly existingOutcome: "aborted" | "completed" | "failed";
   } | {
     readonly _tag: "ThreadStoreError";
     readonly operation: string;
@@ -664,30 +699,6 @@ declare const encodeAdminResponse: (input: AdminFailed | ExplainedRecovery | Obl
     readonly threadId: string;
     readonly actualEpoch: number;
     readonly attemptedEpoch: number;
-  } | {
-    readonly _tag: "OperationDenied";
-    readonly operation: "abort" | "awaitSettlement" | "explain" | "observe" | "resolveApproval" | "resolveUnknown" | "retry" | "scanObligations" | "verify" | "wake";
-    readonly reason: string;
-    readonly threadId?: string | undefined;
-    readonly submissionId?: string | undefined;
-  } | {
-    readonly _tag: "RetryRefused";
-    readonly submissionId: string;
-    readonly refusal: "await-approval-decision" | "await-unknown-resolution" | "settled";
-    readonly decisionTag: string;
-    readonly message: string;
-  } | {
-    readonly _tag: "RunJournalError";
-    readonly message: string;
-    readonly cause?: Schema.Json | undefined;
-  } | {
-    readonly _tag: "DigestError";
-    readonly message: string;
-    readonly cause?: Schema.Json | undefined;
-  } | {
-    readonly _tag: "OwnershipLost";
-    readonly submissionId: string;
-    readonly actualEpoch: number;
   } | {
     readonly _tag: "DurableRuntimeFailpointError";
     readonly location: "abort:after-intent" | "approval:after-request-append" | "approval:after-suspend" | "claim:after-claim" | "compaction:after-canonical-append" | "compaction:before-canonical-append" | "input:after-canonical-append" | "join:after-canonical-append" | "join:after-claim" | "policy:after-reservation-append" | "policy:before-reservation-append" | "resolve:after-intent" | "run:after-start-append" | "run:before-start-append" | "step:after-step-append" | "subagent:after-admit" | "subagent:after-child-abort-intent" | "subagent:after-child-ready" | "subagent:after-join-append" | "subagent:after-release" | "subagent:after-release-pending" | "subagent:after-request-append" | "subagent:after-reserve" | "subagent:after-sibling-settle" | "subagent:after-start-append" | "subagent:after-suspend" | "submit:after-admit" | "submit:after-materialize" | "terminalize:after-canonical-append" | "terminalize:after-reserve" | "tools:after-prepared-append" | "tools:before-prepared-append" | "turn:after-canonical-append" | "turn:after-response-append" | "turn:after-results-append";
@@ -736,5 +747,5 @@ interface Class<EventServices = never> {
  */
 declare const make: <ApplicationServices, ApplicationError, EventServices = never, EventLayerError = never>(applicationLayer: Layer.Layer<CloudflareDurableRuntimeServices | ApplicationServices, ApplicationError, CloudflareBootstrapServices | DurableObjectState$1.DurableObjectState | WorkerEnvironment | DurableObjectContext | ThreadObjectNamespace>, options: Options<ApplicationServices, EventServices, EventLayerError>) => Class<ApplicationServices | EventServices>;
 //#endregion
-export { CloudflareDurableRuntimeOptions as C, layerConfig as E, CloudflareDurableRuntimeInitializationError as S, layer as T, decodeObligationThresholds as _, AdminVerifyRequest as a, make as b, Instance as c, RetryExecuted as d, ThreadObject_d_exports as f, decodeAdminVerifyRequest as g, decodeAdminResponse as h, AdminResponse as i, ObligationsScanned as l, decodeAdminExplainRequest as m, AdminFailed as n, Class as o, VerifiedIntegrity as p, AdminFailure as r, ExplainedRecovery as s, AdminExplainRequest as t, Options as u, decodeRetryCommand as v, CloudflareDurableRuntimeServices as w, CloudflareBootstrapServices as x, encodeAdminResponse as y };
-//# sourceMappingURL=ThreadObject-BSRVxtPI.d.mts.map
+export { CloudflareDurableRuntimeOptions as C, layerConfig as D, layer as E, CloudflareDurableRuntimeInitializationError as S, ThreadPublicationOptions as T, decodeObligationThresholds as _, AdminVerifyRequest as a, make as b, Instance as c, RetryExecuted as d, ThreadObject_d_exports as f, decodeAdminVerifyRequest as g, decodeAdminResponse as h, AdminResponse as i, ObligationsScanned as l, decodeAdminExplainRequest as m, AdminFailed as n, Class as o, VerifiedIntegrity as p, AdminFailure as r, ExplainedRecovery as s, AdminExplainRequest as t, Options as u, decodeRetryCommand as v, CloudflareDurableRuntimeServices as w, CloudflareBootstrapServices as x, encodeAdminResponse as y };
+//# sourceMappingURL=ThreadObject-6_j7YgMV.d.mts.map