@fabricorg/webhook-delivery 0.1.1 → 0.1.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (17) hide show
  1. package/CHANGELOG.md +29 -0
  2. package/README.md +10 -4
  3. package/dist/index.cjs +8641 -6289
  4. package/dist/index.cjs.map +1 -1
  5. package/dist/index.d.cts +2227 -779
  6. package/dist/index.d.ts +2227 -779
  7. package/dist/index.js +8640 -6287
  8. package/dist/index.js.map +1 -1
  9. package/dist/node.cjs +1089 -746
  10. package/dist/node.cjs.map +1 -1
  11. package/dist/node.d.cts +102 -32
  12. package/dist/node.d.ts +102 -32
  13. package/dist/node.js +1088 -744
  14. package/dist/node.js.map +1 -1
  15. package/package.json +8 -7
  16. package/dist/destination-joCBtgvY.d.cts +0 -1444
  17. package/dist/destination-joCBtgvY.d.ts +0 -1444
package/dist/index.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"sources":["../src/codes.ts","../src/snapshot.ts","../src/errors.ts","../src/limits.ts","../src/store-input.ts","../src/delivery-store-core.ts","../src/receipt.ts","../src/memory-delivery-store.ts","../src/subscription-store-core.ts","../src/memory-subscription-store.ts","../src/postgres-sql.ts","../src/postgres-delivery-store.ts","../src/postgres-subscription-store.ts","../src/retry.ts","../src/classify.ts","../src/persistence-projection.ts","../src/egress.ts","../src/headers.ts","../src/address.ts","../src/call-bounds.ts","../src/destination.ts","../src/decisions.ts","../src/fan-out-call.ts","../src/fan-out-read.ts","../src/fan-out-publisher.ts","../src/action-events.ts","../src/fan-out-cycle.ts","../src/delivery-read.ts","../src/delivery-cycle.ts","../src/action-parameters.ts","../src/governed-actions.ts"],"names":["field","copy","text","reflectDefineProperty","objectCreate","raw","DateConstructor","record","nowMs","finish","copyOut","entry","compareText","ioBoundary","numberIsSafeInteger","NumberConstructor","created","unreadable","unreadableFail","EMPTY","block","hex","words","reflectGetOwnPropertyDescriptor","abortedGetter","mathMax","mathMin","isAborted","stringSlice","settle","stop","readActor","setTimer","clearTimer","reflectOwnKeys","numberIsFinite","ABORTED","release","INSERT_OUTCOMES","REFUSED","refuse","plain","nonEmpty","whole","MAX_CLAIMED","STATUSES","UNREADABLE","hasMethods","positiveWhole","readConfig","readConfigUnguarded","readClock","keepLease","deadLetter","retryOrDeadLetter","refused","flag","apply","result","subscriptionId","dateGetTime"],"mappings":";AASO,IAAM,8BAAA,GAAiC,OAAO,MAAA,CAAO;AAAA,EAC3D,qBAAA;AAAA,EACA,qBAAA;AAAA,EACA,0BAAA;AAAA,EACA,8BAAA;AAAA,EACA;AACD,CAAU;AAMH,IAAM,wBAAA,GAA2B,OAAO,MAAA,CAAO;AAAA,EACrD,eAAA;AAAA,EACA,eAAA;AAAA,EACA;AACD,CAAU;AAyBH,IAAM,wBAAA,GAA2B,OAAO,MAAA,CAAO;AAAA,EACrD,uBAAA;AAAA,EACA,2BAAA;AAAA,EACA,gCAAA;AAAA,EACA,4BAAA;AAAA,EACA,oBAAA;AAAA,EACA,sBAAA;AAAA,EACA,cAAA;AAAA,EACA,wBAAA;AAAA,EACA,wBAAA;AAAA,EACA,YAAA;AAAA,EACA,oBAAA;AAAA,EACA,8BAAA;AAAA,EACA,uBAAA;AAAA,EACA,qBAAA;AAAA,EACA,gBAAA;AAAA,EACA,mBAAA;AAAA,EACA,2BAAA;AAAA,EACA;AACD,CAAU;AAaH,IAAM,wBAAA,GAA2B,OAAO,MAAA,CAAO;AAAA,EACrD,WAAA;AAAA,EACA,WAAA;AAAA,EACA,aAAA;AAAA,EACA,WAAA;AAAA,EACA;AACD,CAAU;AAWH,IAAM,4BAAA,GAA+B,OAAO,MAAA,CAAO;AAAA,EACzD,UAAA;AAAA,EACA,eAAA;AAAA,EACA,SAAA;AAAA,EACA,aAAA;AAAA,EACA,UAAA;AAAA,EACA,UAAA;AAAA,EACA,UAAA;AAAA,EACA,UAAA;AAAA,EACA,oBAAA;AAAA,EACA,UAAA;AAAA,EACA,UAAA;AAAA,EACA,UAAA;AAAA,EACA,UAAA;AAAA,EACA,UAAA;AAAA,EACA,UAAA;AAAA,EACA,aAAA;AAAA,EACA,iBAAA;AAAA,EACA,uBAAA;AAAA,EACA,qBAAA;AAAA,EACA,sBAAA;AAAA,EACA;AACD,CAAU;AAMH,IAAM,0BAAA,GAA6B,OAAO,MAAA,CAAO;AAAA,EACvD,2BAAA;AAAA,EACA,mBAAA;AAAA,EACA,oBAAA;AAAA,EACA,sBAAA;AAAA,EACA;AACD,CAAU;AAMH,IAAM,8BAAA,GAAiC,OAAO,MAAA,CAAO;AAAA,EAC3D,kBAAA;AAAA,EACA,wBAAA;AAAA,EACA,qBAAA;AAAA,EACA,mBAAA;AAAA,EACA,mBAAA;AAAA,EACA;AACD,CAAU;AAUH,IAAM,yBAAA,GAA4B,OAAO,MAAA,CAAO;AAAA,EACtD,kBAAA;AAAA,EACA,qBAAA;AAAA,EACA,qBAAA;AAAA,EACA,qBAAA;AAAA,EACA,mBAAA;AAAA,EACA,kBAAA;AAAA,EACA,qBAAA;AAAA,EACA,iBAAA;AAAA,EACA,qBAAA;AAAA,EACA,uBAAA;AAAA,EACA,uBAAA;AAAA,EACA,sBAAA;AAAA,EACA;AACD,CAAU;AAYH,IAAM,yBAAA,GAA4B,OAAO,MAAA,CAAO;AAAA,EACtD,eAAA;AAAA,EACA,iBAAA;AAAA,EACA,sBAAA;AAAA,EACA,cAAA;AAAA,EACA,iBAAA;AAAA,EACA,eAAA;AAAA,EACA;AACD,CAAU;AA0BH,IAAM,2BAAA,GAA8B,OAAO,MAAA,CAAO;AAAA,EACxD,2BAAA;AAAA,EACA,sBAAA;AAAA,EACA,uBAAA;AAAA,EACA,iBAAA;AAAA,EACA,aAAA;AAAA,EACA,cAAA;AAAA,EACA,eAAA;AAAA,EACA;AACD,CAAU;AAeH,IAAM,4BAAA,GAA+B,OAAO,MAAA,CAAO;AAAA,EACzD,uBAAA;AAAA,EACA,wBAAA;AAAA,EACA,eAAA;AAAA,EACA;AACD,CAAU;AAiDH,IAAM,4BAAA,GAA+B,OAAO,MAAA,CAAO;AAAA,EACzD,wBAAA;AAAA,EACA,eAAA;AAAA,EACA,eAAA;AAAA,EACA,oBAAA;AAAA,EACA,uBAAA;AAAA,EACA,sBAAA;AAAA,EACA,qBAAA;AAAA,EACA,wBAAA;AAAA,EACA,wBAAA;AAAA,EACA,qBAAA;AAAA,EACA,sBAAA;AAAA,EACA,yBAAA;AAAA,EACA,qBAAA;AAAA,EACA,oBAAA;AAAA,EACA,mBAAA;AAAA,EACA,kBAAA;AAAA,EACA,WAAA;AAAA,EACA,OAAA;AAAA,EACA,iBAAA;AAAA,EACA,qBAAA;AAAA,EACA,gBAAA;AAAA,EACA,eAAA;AAAA,EACA,kBAAA;AAAA,EACA,gBAAA;AAAA,EACA,iBAAA;AAAA,EACA,mBAAA;AAAA,EACA,mBAAA;AAAA,EACA,uBAAA;AAAA,EACA;AACD,CAAU;AASH,IAAM,mCAAA,GAAsC,MAAA,CAAO,MAAA,CAAO,CAAC,iBAAiB,CAAU;;;AC3S7F,IAAM,eAAe,OAAA,CAAQ,KAAA;AAC7B,IAAM,iBAAiB,OAAA,CAAQ,OAAA;AAC/B,IAAM,kCAAkC,OAAA,CAAQ,wBAAA;AAChD,IAAM,wBAAwB,OAAA,CAAQ,cAAA;AACtC,IAAM,wBAAwB,OAAA,CAAQ,cAAA;AACtC,IAAM,eAAe,MAAA,CAAO,MAAA;AAC5B,IAAM,eAAe,MAAA,CAAO,MAAA;AAC5B,IAAM,eAAe,MAAA,CAAO,MAAA;AAC5B,IAAM,kBAAkB,MAAA,CAAO,SAAA;AAC/B,IAAM,eAAe,KAAA,CAAM,OAAA;AAC3B,IAAM,WAAA,GAAc,KAAK,SAAA,CAAU,OAAA;AACnC,IAAM,eAAA,GAAkB,KAAK,SAAA,CAAU,WAAA;AACvC,IAAM,eAAA,GAAkB,IAAA;AACxB,IAAM,UAAA,GAAa,OAAO,SAAA,CAAU,IAAA;AACpC,IAAM,UAAA,GAAa,OAAO,SAAA,CAAU,IAAA;AACpC,IAAM,gBAAgB,IAAA,CAAK,SAAA;AAGpB,IAAM,KAAA,GAAQ,YAAA;AAEd,IAAM,iBAAiB,MAAA,CAAO,QAAA;AAC9B,IAAM,sBAAsB,MAAA,CAAO,aAAA;AACnC,IAAM,iBAAA,GAAoB,MAAA;AAC1B,IAAM,YAAY,IAAA,CAAK,KAAA;AACvB,IAAM,UAAU,IAAA,CAAK,GAAA;AACrB,IAAM,UAAU,IAAA,CAAK,GAAA;AACrB,IAAM,YAAY,IAAA,CAAK,KAAA;AACvB,IAAM,MAAA,GAAS,YAAA;AACf,IAAM,MAAA,GAAS,YAAA;AACf,IAAM,OAAA,GAAU,YAAA;AAGhB,IAAM,eAAA,GAAkB,IAAA;AAExB,IAAM,cAAA,GAAiB,EAAA;AAEvB,IAAM,cAAA,GAAiB,GAAA;AASvB,IAAM,aAAA,0BAAsC,gCAAgC,CAAA;AAGnF,SAAS,eAAe,KAAA,EAAoC;AAC3D,EAAA,MAAM,UAAA,GAAa,aAAa,IAAI,CAAA;AACpC,EAAA,UAAA,CAAW,KAAA,GAAQ,KAAA;AACnB,EAAA,UAAA,CAAW,UAAA,GAAa,IAAA;AACxB,EAAA,UAAA,CAAW,QAAA,GAAW,KAAA;AACtB,EAAA,UAAA,CAAW,YAAA,GAAe,KAAA;AAC1B,EAAA,OAAO,UAAA;AACR;AAGO,SAAS,MAAA,CAAO,MAAA,EAAgB,GAAA,EAAsB,KAAA,EAAsB;AAClF,EAAA,qBAAA,CAAsB,MAAA,EAAQ,GAAA,EAAK,cAAA,CAAe,KAAK,CAAC,CAAA;AACzD;AAGO,SAAS,WAAc,MAAA,EAAoC;AACjE,EAAA,MAAM,OAAY,EAAC;AACnB,EAAA,KAAA,IAAS,KAAA,GAAQ,CAAA,EAAG,KAAA,GAAQ,MAAA,CAAO,MAAA,EAAQ,KAAA,IAAS,CAAA,EAAG,MAAA,CAAO,IAAA,EAAM,KAAA,EAAO,MAAA,CAAO,KAAK,CAAC,CAAA;AACxF,EAAA,OAAO,aAAa,IAAI,CAAA;AACzB;AAOO,SAAS,OAAyB,MAAA,EAAc;AACtD,EAAA,MAAM,GAAA,GAAM,aAAa,IAAI,CAAA;AAC7B,EAAA,MAAM,IAAA,GAAO,eAAe,MAAM,CAAA;AAClC,EAAA,KAAA,IAAS,QAAQ,CAAA,EAAG,KAAA,GAAQ,IAAA,CAAK,MAAA,EAAQ,SAAS,CAAA,EAAG;AACpD,IAAA,MAAM,GAAA,GAAM,KAAK,KAAK,CAAA;AACtB,IAAA,MAAM,UAAA,GAAa,+BAAA,CAAgC,MAAA,EAAQ,GAAG,CAAA;AAC9D,IAAA,IAAI,UAAA,KAAe,MAAA,IAAa,YAAA,CAAa,UAAA,EAAY,OAAO,CAAA,IAAK,UAAA,CAAW,KAAA,KAAU,MAAA,EAAW,MAAA,CAAO,GAAA,EAAK,GAAA,EAAK,WAAW,KAAK,CAAA;AAAA,EACvI;AACA,EAAA,OAAO,aAAa,GAAG,CAAA;AACxB;AAGO,SAAS,QAAA,GAAiC;AAChD,EAAA,OAAO,aAAa,IAAI,CAAA;AACzB;AAGO,SAAS,OAAA,CAAQ,IAAY,KAAA,EAAwB;AAC3D,EAAA,OAAO,aAAa,UAAA,EAAY,EAAA,EAAI,CAAC,KAAK,CAAC,CAAA,KAAM,IAAA;AAClD;AAGO,SAAS,KAAK,KAAA,EAAuB;AAC3C,EAAA,OAAO,YAAA,CAAa,UAAA,EAAY,KAAA,EAAO,EAAE,CAAA;AAC1C;AAGO,SAAS,OAAA,CAAQ,OAA0B,KAAA,EAAyB;AAC1E,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,EAAU,OAAO,KAAA;AACtC,EAAA,KAAA,IAAS,KAAA,GAAQ,CAAA,EAAG,KAAA,GAAQ,KAAA,CAAM,MAAA,EAAQ,KAAA,IAAS,CAAA,EAAG,IAAI,KAAA,CAAM,KAAK,CAAA,KAAM,KAAA,EAAO,OAAO,IAAA;AACzF,EAAA,OAAO,KAAA;AACR;AAGO,SAAS,cAAc,KAAA,EAAiC;AAC9D,EAAA,IAAI,KAAA,KAAU,QAAQ,OAAO,KAAA,KAAU,YAAY,YAAA,CAAa,KAAK,GAAG,OAAO,KAAA;AAC/E,EAAA,MAAM,SAAA,GAAY,sBAAsB,KAAK,CAAA;AAC7C,EAAA,OAAO,SAAA,KAAc,mBAAmB,SAAA,KAAc,IAAA;AACvD;AAMO,SAAS,OAAA,CAAQ,MAAA,EAAgB,GAAA,EAAaA,MAAAA,EAAe,IAAA,EAAqB;AACxF,EAAA,MAAM,UAAA,GAAa,+BAAA,CAAgC,MAAA,EAAQ,GAAG,CAAA;AAC9D,EAAA,IAAI,UAAA,KAAe,QAAW,OAAO,MAAA;AACrC,EAAA,IAAI,CAAC,aAAa,UAAA,EAAY,OAAO,GAAG,OAAO,IAAA,CAAK,YAAYA,MAAK,CAAA;AACrE,EAAA,OAAO,UAAA,CAAW,KAAA;AACnB;AAGO,SAAS,UAAU,KAAA,EAAyB;AAClD,EAAA,IAAI,KAAA,KAAU,QAAS,OAAO,KAAA,KAAU,YAAY,OAAO,KAAA,KAAU,YAAa,OAAO,KAAA;AACzF,EAAA,OAAO,aAAA;AACR;AAOO,SAAS,QAAQ,KAAA,EAAoC;AAC3D,EAAA,MAAM,IAAA,GAAO,OAAO,KAAK,CAAA;AACzB,EAAA,IAAI,CAAC,cAAA,CAAe,IAAI,CAAA,EAAG,OAAO,MAAA;AAClC,EAAA,OAAO,YAAA,CAAa,eAAA,EAAiB,KAAA,EAAO,EAAE,CAAA;AAC/C;AAGO,SAAS,OAAO,KAAA,EAAwB;AAC9C,EAAA,IAAI,KAAA,KAAU,IAAA,IAAQ,OAAO,KAAA,KAAU,UAAU,OAAO,GAAA;AACxD,EAAA,IAAI;AAGH,IAAA,OAAO,YAAA,CAAa,WAAA,EAAa,KAAA,EAAO,EAAE,CAAA;AAAA,EAC3C,CAAA,CAAA,MAAQ;AACP,IAAA,OAAO,GAAA;AAAA,EACR;AACD;AAGO,SAAS,oBAAoB,KAAA,EAAoC;AACvE,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU,OAAO,QAAQ,IAAI,eAAA,CAAgB,KAAK,CAAC,CAAA;AACxE,EAAA,OAAO,QAAQ,KAAK,CAAA;AACrB;AAOO,SAAS,aAAA,CAAc,KAAA,EAAgBA,MAAAA,EAAe,IAAA,EAAqB;AACjF,EAAA,IAAI,CAAC,YAAA,CAAa,KAAK,GAAG,OAAO,KAAA,KAAU,SAAY,MAAA,GAAY,aAAA;AACnE,EAAA,MAAM,MAAA,GAAS,UAAA,CAAW,KAAA,EAAOA,MAAAA,EAAO,IAAI,CAAA;AAC5C,EAAA,MAAM,OAAkB,EAAC;AACzB,EAAA,KAAA,IAAS,KAAA,GAAQ,CAAA,EAAG,KAAA,GAAQ,MAAA,EAAQ,SAAS,CAAA,EAAG;AAC/C,IAAA,MAAA,CAAO,IAAA,EAAM,KAAA,EAAO,SAAA,CAAU,OAAA,CAAQ,OAAO,CAAA,EAAG,KAAK,CAAA,CAAA,EAAI,CAAA,EAAGA,MAAK,CAAA,CAAA,EAAI,KAAK,CAAA,CAAA,CAAA,EAAK,IAAI,CAAC,CAAC,CAAA;AAAA,EACtF;AACA,EAAA,OAAO,aAAa,IAAI,CAAA;AACzB;AAGO,SAAS,UAAA,CAAW,KAAA,EAAgBA,MAAAA,EAAe,IAAA,EAA2C;AACpG,EAAA,MAAM,IAAA,GAAO,aAAA,CAAc,KAAA,EAAOA,MAAAA,EAAO,IAAI,CAAA;AAC7C,EAAA,IAAI,CAAC,YAAA,CAAa,IAAI,CAAA,EAAG,OAAO,MAAA;AAChC,EAAA,MAAM,UAAoB,EAAC;AAC3B,EAAA,KAAA,IAAS,QAAQ,CAAA,EAAG,KAAA,GAAQ,IAAA,CAAK,MAAA,EAAQ,SAAS,CAAA,EAAG;AACpD,IAAA,MAAM,IAAA,GAAO,KAAK,KAAK,CAAA;AACvB,IAAA,IAAI,OAAO,IAAA,KAAS,QAAA,SAAiB,OAAA,EAAS,OAAA,CAAQ,QAAQ,IAAI,CAAA;AAAA,EACnE;AACA,EAAA,OAAO,aAAa,OAAO,CAAA;AAC5B;AAEA,SAAS,UAAA,CAAW,KAAA,EAAeA,MAAAA,EAAe,IAAA,EAAoB;AACrE,EAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,KAAA,EAAO,QAAA,EAAUA,QAAO,IAAI,CAAA;AACnD,EAAA,IAAI,OAAO,MAAA,KAAW,QAAA,IAAY,CAAC,mBAAA,CAAoB,MAAM,CAAA,IAAK,MAAA,GAAS,CAAA,EAAG,OAAO,IAAA,CAAK,UAAA,EAAYA,MAAK,CAAA;AAC3G,EAAA,IAAI,MAAA,GAAS,eAAA,EAAiB,OAAO,IAAA,CAAK,aAAaA,MAAK,CAAA;AAC5D,EAAA,OAAO,MAAA;AACR;AAYO,SAAS,YAAA,CAAa,KAAA,EAAgBA,MAAAA,EAAe,IAAA,EAA8B;AACzF,EAAA,OAAO,QAAA,CAAS,OAAOA,MAAAA,EAAO,IAAA,EAAM,GAAG,EAAE,KAAA,EAAO,GAAG,CAAA;AACpD;AAaO,SAAS,gBAAA,CAAiB,KAAA,EAAgBA,MAAAA,EAAe,IAAA,EAAY,OAAe,MAAA,EAA0C;AACpI,EAAA,OAAO,QAAA,CAAS,KAAA,EAAOA,MAAAA,EAAO,IAAA,EAAM,OAAO,MAAM,CAAA;AAClD;AAEA,SAAS,QAAA,CAAS,KAAA,EAAgBA,MAAAA,EAAe,IAAA,EAAY,OAAe,MAAA,EAA0C;AACrH,EAAA,IAAI,KAAA,KAAU,QAAQ,OAAO,KAAA,KAAU,YAAY,OAAO,KAAA,KAAU,WAAW,OAAO,KAAA;AACtF,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,EAAU,OAAO,cAAA,CAAe,KAAK,CAAA,GAAI,KAAA,GAAQ,IAAA,CAAK,UAAA,EAAYA,MAAK,CAAA;AAC5F,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,EAAU,OAAO,IAAA,CAAK,YAAYA,MAAK,CAAA;AAC5D,EAAA,IAAI,KAAA,IAAS,cAAA,EAAgB,OAAO,IAAA,CAAK,YAAYA,MAAK,CAAA;AAC1D,EAAA,MAAA,CAAO,KAAA,IAAS,CAAA;AAChB,EAAA,IAAI,OAAO,KAAA,GAAQ,cAAA,EAAgB,OAAO,IAAA,CAAK,aAAaA,MAAK,CAAA;AACjE,EAAA,MAAM,GAAA,GAAM,QAAQ,KAAK,CAAA;AACzB,EAAA,IAAI,GAAA,KAAQ,QAAW,OAAO,GAAA;AAC9B,EAAA,IAAI,YAAA,CAAa,KAAK,CAAA,EAAG;AACxB,IAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,KAAA,EAAO,QAAA,EAAUA,QAAO,IAAI,CAAA;AACnD,IAAA,IAAI,OAAO,MAAA,KAAW,QAAA,IAAY,CAAC,mBAAA,CAAoB,MAAM,CAAA,IAAK,MAAA,GAAS,CAAA,EAAG,OAAO,IAAA,CAAK,UAAA,EAAYA,MAAK,CAAA;AAC3G,IAAA,IAAI,MAAA,GAAS,cAAA,EAAgB,OAAO,IAAA,CAAK,aAAaA,MAAK,CAAA;AAC3D,IAAA,MAAMC,QAA2B,EAAC;AAClC,IAAA,KAAA,IAAS,KAAA,GAAQ,CAAA,EAAG,KAAA,GAAQ,MAAA,EAAQ,SAAS,CAAA,EAAG;AAC/C,MAAA,MAAM,OAAO,OAAA,CAAQ,KAAA,EAAO,GAAG,KAAK,CAAA,CAAA,EAAID,QAAO,IAAI,CAAA;AACnD,MAAA,IAAI,IAAA,KAAS,MAAA,EAAW,OAAO,IAAA,CAAK,QAAQA,MAAK,CAAA;AACjD,MAAA,MAAA,CAAOC,KAAAA,EAAM,OAAO,QAAA,CAAS,IAAA,EAAMD,QAAO,IAAA,EAAM,KAAA,GAAQ,CAAA,EAAG,MAAM,CAAC,CAAA;AAAA,IACnE;AACA,IAAA,OAAO,aAAaC,KAAI,CAAA;AAAA,EACzB;AACA,EAAA,IAAI,CAAC,aAAA,CAAc,KAAK,GAAG,OAAO,IAAA,CAAK,aAAaD,MAAK,CAAA;AACzD,EAAA,MAAM,IAAA,GAAO,eAAe,KAAK,CAAA;AACjC,EAAA,MAAM,IAAA,GAAO,aAAa,IAAI,CAAA;AAC9B,EAAA,KAAA,IAAS,QAAQ,CAAA,EAAG,KAAA,GAAQ,IAAA,CAAK,MAAA,EAAQ,SAAS,CAAA,EAAG;AACpD,IAAA,MAAM,GAAA,GAAM,KAAK,KAAK,CAAA;AACtB,IAAA,IAAI,OAAO,QAAQ,QAAA,EAAU;AAC7B,IAAA,MAAM,UAAA,GAAa,+BAAA,CAAgC,KAAA,EAAO,GAAG,CAAA;AAC7D,IAAA,IAAI,UAAA,KAAe,MAAA,IAAa,UAAA,CAAW,UAAA,KAAe,IAAA,EAAM;AAChE,IAAA,IAAI,CAAC,aAAa,UAAA,EAAY,OAAO,GAAG,OAAO,IAAA,CAAK,YAAYA,MAAK,CAAA;AACrE,IAAA,IAAI,UAAA,CAAW,UAAU,MAAA,EAAW;AACpC,IAAA,MAAA,CAAO,IAAA,EAAM,GAAA,EAAK,QAAA,CAAS,UAAA,CAAW,KAAA,EAAOA,QAAO,IAAA,EAAM,KAAA,GAAQ,CAAA,EAAG,MAAM,CAAC,CAAA;AAAA,EAC7E;AACA,EAAA,OAAO,aAAa,IAAI,CAAA;AACzB;AASO,SAAS,cAAc,KAAA,EAAwB;AACrD,EAAA,IAAI,KAAA,KAAU,MAAM,OAAO,MAAA;AAC3B,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,EAAU,OAAO,cAAc,KAAK,CAAA;AACzD,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU,OAAO,eAAe,KAAK,CAAA,GAAI,CAAA,EAAG,KAAK,CAAA,CAAA,GAAK,MAAA;AAC3E,EAAA,IAAI,OAAO,KAAA,KAAU,SAAA,EAAW,OAAO,QAAQ,MAAA,GAAS,OAAA;AACxD,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,EAAU,OAAO,MAAA;AACtC,EAAA,IAAI,YAAA,CAAa,KAAK,CAAA,EAAG;AACxB,IAAA,IAAIE,KAAAA,GAAO,GAAA;AACX,IAAA,KAAA,IAAS,QAAQ,CAAA,EAAG,KAAA,GAAQ,KAAA,CAAM,MAAA,EAAQ,SAAS,CAAA,EAAG;AACrD,MAAA,IAAI,KAAA,GAAQ,CAAA,EAAGA,KAAAA,IAAQ,GAAA;AACvB,MAAAA,KAAAA,IAAQ,aAAA,CAAc,KAAA,CAAM,KAAK,CAAC,CAAA;AAAA,IACnC;AACA,IAAA,OAAO,GAAGA,KAAI,CAAA,CAAA,CAAA;AAAA,EACf;AACA,EAAA,MAAM,IAAA,GAAO,eAAe,KAAK,CAAA;AACjC,EAAA,IAAIA,KAAAA,GAAO,GAAA;AACX,EAAA,IAAI,KAAA,GAAQ,IAAA;AACZ,EAAA,KAAA,IAAS,QAAQ,CAAA,EAAG,KAAA,GAAQ,IAAA,CAAK,MAAA,EAAQ,SAAS,CAAA,EAAG;AACpD,IAAA,MAAM,GAAA,GAAM,KAAK,KAAK,CAAA;AACtB,IAAA,IAAI,OAAO,QAAQ,QAAA,EAAU;AAC7B,IAAA,MAAM,IAAA,GAAQ,MAAkC,GAAG,CAAA;AACnD,IAAA,IAAI,SAAS,MAAA,EAAW;AACxB,IAAAA,KAAAA,IAAQ,CAAA,EAAG,KAAA,GAAQ,EAAA,GAAK,GAAG,CAAA,EAAG,aAAA,CAAc,GAAG,CAAW,CAAA,CAAA,EAAI,aAAA,CAAc,IAAI,CAAC,CAAA,CAAA;AACjF,IAAA,KAAA,GAAQ,KAAA;AAAA,EACT;AACA,EAAA,OAAO,GAAGA,KAAI,CAAA,CAAA,CAAA;AACf;;;AC/SA,IAAM,sBAA4E,MAAA,CAAO;AAAA,EACxF,gBAAA,EAAkB,oFAAA;AAAA,EAClB,sBAAA,EAAwB,4EAAA;AAAA,EACxB,mBAAA,EAAqB,qEAAA;AAAA,EACrB,iBAAA,EAAmB,8DAAA;AAAA,EACnB,iBAAA,EAAmB,6DAAA;AAAA,EACnB,cAAA,EAAgB;AACjB,CAAC,CAAA;AAED,IAAM,kBAAoE,MAAA,CAAO;AAAA,EAChF,yBAAA,EAA2B,2DAAA;AAAA,EAC3B,iBAAA,EAAmB,gDAAA;AAAA,EACnB,kBAAA,EAAoB,sDAAA;AAAA,EACpB,oBAAA,EAAsB,+DAAA;AAAA,EACtB,gBAAA,EAAkB;AACnB,CAAC,CAAA;AAED,IAAM,iBAAkE,MAAA,CAAO;AAAA,EAC9E,gBAAA,EAAkB,2CAAA;AAAA,EAClB,mBAAA,EAAqB,iEAAA;AAAA,EACrB,mBAAA,EAAqB,iEAAA;AAAA,EACrB,mBAAA,EAAqB,0DAAA;AAAA,EACrB,iBAAA,EAAmB,mEAAA;AAAA,EACnB,gBAAA,EAAkB,2FAAA;AAAA,EAClB,mBAAA,EAAqB,8FAAA;AAAA,EACrB,eAAA,EAAiB,kDAAA;AAAA,EACjB,mBAAA,EAAqB,oCAAA;AAAA,EACrB,qBAAA,EAAuB,mDAAA;AAAA,EACvB,qBAAA,EAAuB,6DAAA;AAAA,EACvB,oBAAA,EAAsB,qCAAA;AAAA,EACtB,mBAAA,EAAqB;AACtB,CAAC,CAAA;AAED,IAAM,iBAAkE,MAAA,CAAO;AAAA,EAC9E,aAAA,EAAe,8DAAA;AAAA,EACf,eAAA,EAAiB,oFAAA;AAAA,EACjB,oBAAA,EAAsB,6EAAA;AAAA,EACtB,YAAA,EAAc,wDAAA;AAAA,EACd,eAAA,EAAiB,4DAAA;AAAA,EACjB,aAAA,EAAe,yDAAA;AAAA,EACf,YAAA,EAAc;AACf,CAAC,CAAA;AAED,IAAM,mBAAqE,MAAA,CAAO;AAAA,EACjF,yBAAA,EAA2B,0GAAA;AAAA,EAC3B,oBAAA,EAAsB,oCAAA;AAAA,EACtB,qBAAA,EAAuB,oDAAA;AAAA,EACvB,eAAA,EAAiB,gEAAA;AAAA,EACjB,WAAA,EAAa,0DAAA;AAAA,EACb,YAAA,EAAc,0EAAA;AAAA,EACd,aAAA,EAAe,2DAAA;AAAA,EACf,eAAA,EAAiB;AAClB,CAAC,CAAA;AAED,IAAM,oBAAwE,MAAA,CAAO;AAAA,EACpF,qBAAA,EAAuB,qCAAA;AAAA,EACvB,sBAAA,EAAwB,qDAAA;AAAA,EACxB,aAAA,EAAe,4DAAA;AAAA,EACf,eAAA,EAAiB;AAClB,CAAC,CAAA;AAED,IAAM,2BAAqF,MAAA,CAAO;AAAA,EACjG,eAAA,EAAiB;AAClB,CAAC,CAAA;AAED,SAAS,UAAA,CAAW,KAAA,EAAyC,IAAA,EAAe,QAAA,EAA0B;AACrG,EAAA,OAAO,OAAO,SAAS,QAAA,IAAY,MAAA,CAAO,OAAO,IAAI,CAAA,GAAI,KAAA,CAAM,IAAI,CAAA,GAAK,QAAA;AACzE;AAEA,IAAMC,yBAAwB,OAAA,CAAQ,cAAA;AACtC,IAAMC,gBAAe,MAAA,CAAO,MAAA;AAO5B,SAAS,WAAA,CAAY,MAAA,EAAgB,GAAA,EAAa,KAAA,EAAsB;AACvE,EAAA,MAAM,UAAA,GAAaA,cAAa,IAAI,CAAA;AACpC,EAAA,UAAA,CAAW,KAAA,GAAQ,KAAA;AACnB,EAAA,UAAA,CAAW,UAAA,GAAa,IAAA;AACxB,EAAA,UAAA,CAAW,QAAA,GAAW,IAAA;AACtB,EAAA,UAAA,CAAW,YAAA,GAAe,IAAA;AAC1B,EAAAD,sBAAAA,CAAsB,MAAA,EAAQ,GAAA,EAAK,UAAU,CAAA;AAC9C;AAQO,IAAM,0BAAA,GAAN,cAAyC,KAAA,CAAM;AAAA,EAKrD,WAAA,CAAY,MAA8BH,MAAAA,EAAe;AACxD,IAAA,KAAA,CAAM,UAAA,CAAW,eAAA,EAAiB,IAAA,EAAM,sCAAsC,CAAC,CAAA;AAC/E,IAAA,WAAA,CAAY,IAAA,EAAM,QAAQ,4BAA4B,CAAA;AACtD,IAAA,WAAA,CAAY,IAAA,EAAM,QAAQ,IAAI,CAAA;AAC9B,IAAA,WAAA,CAAY,IAAA,EAAM,SAASA,MAAK,CAAA;AAAA,EACjC;AACD;AAOO,IAAM,sBAAA,GAAN,cAAqC,KAAA,CAAM;AAAA,EAKjD,WAAA,CAAY,MAAkCA,MAAAA,EAAe;AAC5D,IAAA,KAAA,CAAM,UAAA,CAAW,mBAAA,EAAqB,IAAA,EAAM,4BAA4B,CAAC,CAAA;AACzE,IAAA,WAAA,CAAY,IAAA,EAAM,QAAQ,wBAAwB,CAAA;AAClD,IAAA,WAAA,CAAY,IAAA,EAAM,QAAQ,IAAI,CAAA;AAC9B,IAAA,WAAA,CAAY,IAAA,EAAM,SAASA,MAAK,CAAA;AAAA,EACjC;AACD;AAUO,IAAM,iBAAA,GAAN,cAAgC,KAAA,CAAM;AAAA,EAK5C,WAAA,CAAY,MAA6BA,MAAAA,EAAe;AACvD,IAAA,KAAA,CAAM,UAAA,CAAW,cAAA,EAAgB,IAAA,EAAM,iCAAiC,CAAC,CAAA;AACzE,IAAA,WAAA,CAAY,IAAA,EAAM,QAAQ,mBAAmB,CAAA;AAC7C,IAAA,WAAA,CAAY,IAAA,EAAM,QAAQ,IAAI,CAAA;AAC9B,IAAA,WAAA,CAAY,IAAA,EAAM,SAASA,MAAK,CAAA;AAAA,EACjC;AACD;AAQO,IAAM,kBAAA,GAAN,cAAiC,KAAA,CAAM;AAAA,EAK7C,WAAA,CAAY,MAA8BA,MAAAA,EAAe;AACxD,IAAA,KAAA,CAAM,UAAA,CAAW,gBAAA,EAAkB,IAAA,EAAM,yBAAyB,CAAC,CAAA;AACnE,IAAA,WAAA,CAAY,IAAA,EAAM,QAAQ,oBAAoB,CAAA;AAC9C,IAAA,WAAA,CAAY,IAAA,EAAM,QAAQ,IAAI,CAAA;AAC9B,IAAA,WAAA,CAAY,IAAA,EAAM,SAASA,MAAK,CAAA;AAAA,EACjC;AACD;AAOO,IAAM,oBAAA,GAAN,cAAmC,KAAA,CAAM;AAAA,EAK/C,WAAA,CAAY,MAAgCA,MAAAA,EAAe;AAC1D,IAAA,KAAA,CAAM,UAAA,CAAW,iBAAA,EAAmB,IAAA,EAAM,0BAA0B,CAAC,CAAA;AACrE,IAAA,WAAA,CAAY,IAAA,EAAM,QAAQ,sBAAsB,CAAA;AAChD,IAAA,WAAA,CAAY,IAAA,EAAM,QAAQ,IAAI,CAAA;AAC9B,IAAA,WAAA,CAAY,IAAA,EAAM,SAASA,MAAK,CAAA;AAAA,EACjC;AACD;AAOO,IAAM,0BAAA,GAAN,cAAyC,KAAA,CAAM;AAAA,EAKrD,WAAA,CAAY,MAAsCA,MAAAA,EAAe;AAChE,IAAA,KAAA,CAAM,UAAA,CAAW,wBAAA,EAA0B,IAAA,EAAM,oDAAoD,CAAC,CAAA;AACtG,IAAA,WAAA,CAAY,IAAA,EAAM,QAAQ,4BAA4B,CAAA;AACtD,IAAA,WAAA,CAAY,IAAA,EAAM,QAAQ,IAAI,CAAA;AAC9B,IAAA,WAAA,CAAY,IAAA,EAAM,SAASA,MAAK,CAAA;AAAA,EACjC;AACD;AAEA,IAAM,OAAA,uBAAc,OAAA,EAAgB;AACpC,IAAM,UAAA,GAAa,QAAQ,SAAA,CAAU,GAAA;AACrC,IAAM,UAAA,GAAa,QAAQ,SAAA,CAAU,GAAA;AACrC,IAAM,oBAAA,GAAuB,SAAA;AAC7B,IAAM,qBAAA,GAAwB,UAAA;AAU9B,SAAS,IAAA,CAAsB,KAAA,EAAU,IAAA,EAAc,IAAA,EAAiB;AACvE,EAAA,MAAM,KAAA,GAAQI,cAAa,IAAI,CAAA;AAC/B,EAAA,KAAA,CAAM,KAAA,GAAQ,CAAA,EAAG,IAAI,CAAA,EAAA,EAAK,IAAI,CAAA,CAAA;AAC9B,EAAA,KAAA,CAAM,UAAA,GAAa,KAAA;AACnB,EAAA,KAAA,CAAM,QAAA,GAAW,KAAA;AACjB,EAAA,KAAA,CAAM,YAAA,GAAe,KAAA;AACrB,EAAA,IAAI,CAACD,uBAAsB,KAAA,EAAO,OAAA,EAAS,KAAK,CAAA,EAAG,MAAM,IAAI,oBAAA,CAAqB,2CAA2C,CAAA;AAC7H,EAAA,KAAA,CAAM,UAAA,EAAY,OAAA,EAAS,CAAC,KAAK,CAAC,CAAA;AAClC,EAAA,OAAO,OAAO,KAAK,CAAA;AACpB;AAGA,SAAS,eAAe,KAAA,EAAyB;AAChD,EAAA,OAAA,CAAQ,OAAO,KAAA,KAAU,QAAA,IAAY,OAAO,UAAU,UAAA,KAAe,KAAA,KAAU,IAAA,IAAQ,KAAA,CAAM,UAAA,EAAY,OAAA,EAAS,CAAC,KAAK,CAAC,CAAA,KAAM,IAAA;AAChI;AAGO,SAAS,eAAA,CAAgB,MAAkCH,MAAAA,EAAuC;AACxG,EAAA,OAAO,KAAK,IAAI,sBAAA,CAAuB,MAAMA,MAAK,CAAA,EAAG,0BAA0B,IAAI,CAAA;AACpF;AAGO,SAAS,WAAA,CAAY,MAA8BA,MAAAA,EAA2C;AACpG,EAAA,OAAO,KAAK,IAAI,0BAAA,CAA2B,MAAMA,MAAK,CAAA,EAAG,8BAA8B,IAAI,CAAA;AAC5F;AAGO,SAAS,UAAA,CAAW,MAA6BA,MAAAA,EAAkC;AACzF,EAAA,OAAO,KAAK,IAAI,iBAAA,CAAkB,MAAMA,MAAK,CAAA,EAAG,qBAAqB,IAAI,CAAA;AAC1E;AAGO,SAAS,WAAA,CAAY,MAA8BA,MAAAA,EAAmC;AAC5F,EAAA,OAAO,KAAK,IAAI,kBAAA,CAAmB,MAAMA,MAAK,CAAA,EAAG,sBAAsB,IAAI,CAAA;AAC5E;AAGO,SAAS,aAAA,CAAc,MAAgCA,MAAAA,EAAqC;AAClG,EAAA,OAAO,KAAK,IAAI,oBAAA,CAAqB,MAAMA,MAAK,CAAA,EAAG,wBAAwB,IAAI,CAAA;AAChF;AAGO,SAAS,mBAAA,CAAoB,MAAsCA,MAAAA,EAA2C;AACpH,EAAA,OAAO,KAAK,IAAI,0BAAA,CAA2B,MAAMA,MAAK,CAAA,EAAG,8BAA8B,IAAI,CAAA;AAC5F;AAGO,SAAS,UAAA,CAAW,MAAwB,IAAA,EAAqD;AACvG,EAAA,MAAM,OAAA,GAAU,eAAe,IAAI,CAAA;AACnC,EAAA,MAAM,KAAA,GAAQ,SAAS,MAAA,GAAS,IAAI,qBAAqB,OAAO,CAAA,GAAI,IAAI,qBAAA,CAAsB,OAAO,CAAA;AACrG,EAAA,MAAA,CAAO,KAAA,EAAO,QAAQ,IAAI,CAAA;AAC1B,EAAA,OAAO,KAAK,KAAA,EAAO,IAAA,KAAS,MAAA,GAAS,WAAA,GAAc,cAAc,IAAI,CAAA;AACtE;AAOO,SAAS,KAAA,CAAS,KAAc,WAAA,EAA6B;AACnE,EAAA,IAAI;AACH,IAAA,OAAO,GAAA,EAAI;AAAA,EACZ,SAAS,MAAA,EAAQ;AAChB,IAAA,IAAI,cAAA,CAAe,MAAM,CAAA,EAAG,MAAM,MAAA;AAClC,IAAA,MAAM,WAAA,EAAY;AAAA,EACnB;AACD;AAGO,SAAS,OAAA,CAAW,KAAc,QAAA,EAAsB;AAC9D,EAAA,IAAI;AACH,IAAA,OAAO,GAAA,EAAI;AAAA,EACZ,CAAA,CAAA,MAAQ;AACP,IAAA,OAAO,QAAA,EAAS;AAAA,EACjB;AACD;;;AChQA,IAAM,MAAA,GAAS,GAAA;AACf,IAAM,OAAO,EAAA,GAAK,MAAA;AAClB,IAAM,MAAM,EAAA,GAAK,IAAA;AAGV,IAAM,6BAAA,GAAgC;AAGtC,IAAM,oBAAA,GAAuB;AAM7B,IAAM,+BAAA,GAAyD,OAAO,MAAA,CAAO;AAAA,EACnF,mBAAA,EAAqB,CAAA;AAAA,EACrB,uBAAuB,MAAA,CAAO,MAAA,CAAO,CAAC,MAAA,EAAQ,IAAI,MAAA,EAAQ,EAAA,GAAK,MAAA,EAAQ,IAAA,EAAM,IAAI,IAAA,EAAM,EAAA,GAAK,IAAA,EAAM,EAAA,GAAK,IAAI,CAAC,CAAA;AAAA,EAC5G,oBAAoB,EAAA,GAAK,IAAA;AAAA,EACzB,iBAAA,EAAmB,EAAA;AAAA,EACnB,mBAAA,EAAqB,MAAA,CAAO,MAAA,CAAO,CAAC,GAAA,EAAO,GAAA,EAAO,GAAA,EAAQ,MAAA,EAAQ,CAAA,GAAI,MAAA,EAAQ,EAAA,GAAK,MAAM,CAAC,CAAA;AAAA,EAC1F,kBAAkB,EAAA,GAAK,IAAA;AAAA,EACvB,gBAAA,EAAkB,IAAA;AAAA,EAClB,aAAA,EAAe,GAAA;AAAA,EACf,gBAAA,EAAkB,GAAA;AAAA,EAClB,eAAA,EAAiB,IAAA;AAAA,EACjB,iBAAiB,EAAA,GAAK;AACvB,CAAC;AAGD,IAAM,UAAA,GAAa,OAAO,MAAA,CAAO;AAAA,EAChC,qBAAA;AAAA,EACA,uBAAA;AAAA,EACA,oBAAA;AAAA,EACA,mBAAA;AAAA,EACA,qBAAA;AAAA,EACA,kBAAA;AAAA,EACA,kBAAA;AAAA,EACA,eAAA;AAAA,EACA,kBAAA;AAAA,EACA,iBAAA;AAAA,EACA;AACD,CAA6D,CAAA;AAE7D,IAAM,mBAAmB,MAAA,CAAO,gBAAA;AAEhC,IAAM,SAAA,GAAkB,CAAC,KAAA,EAAOA,MAAAA,KAAU;AACzC,EAAA,MAAM,WAAA,CAAY,KAAA,KAAU,WAAA,GAAc,oBAAA,GAAuB,oBAAoBA,MAAK,CAAA;AAC3F,CAAA;AAcO,SAAS,4BAAA,CACf,SAAA,GAA4C,EAAC,EACrB;AACxB,EAAA,OAAO,KAAA,CAAM,MAAM,aAAA,CAAc,SAAS,GAAG,MAAM,WAAA,CAAY,kBAAA,EAAoB,WAAW,CAAC,CAAA;AAChG;AAEA,SAAS,cAAc,SAAA,EAA2C;AACjE,EAAA,IAAI,CAAC,aAAA,CAAc,SAAS,GAAG,OAAO,SAAA,CAAU,aAAa,WAAW,CAAA;AACxE,EAAA,MAAM,SAAS,QAAA,EAAkB;AACjC,EAAA,KAAA,IAAS,QAAQ,CAAA,EAAG,KAAA,GAAQ,UAAA,CAAW,MAAA,EAAQ,SAAS,CAAA,EAAG;AAC1D,IAAA,MAAM,GAAA,GAAM,WAAW,KAAK,CAAA;AAC5B,IAAA,MAAMK,IAAAA,GAAM,OAAA,CAAQ,SAAA,EAAW,GAAA,EAAK,KAAK,SAAS,CAAA;AAClD,IAAA,MAAM,KAAA,GAAQ,GAAA,KAAQ,uBAAA,IAA2B,GAAA,KAAQ,qBAAA,GAAwB,aAAA,CAAcA,IAAAA,EAAK,GAAA,EAAK,SAAS,CAAA,GAAI,SAAA,CAAUA,IAAG,CAAA;AACnI,IAAA,MAAA,CAAO,QAAQ,GAAA,EAAK,KAAA,KAAU,SAAY,+BAAA,CAAgC,GAAG,IAAI,KAAK,CAAA;AAAA,EACvF;AACA,EAAA,MAAM,MAAA,GAAS,MAAA;AACf,EAAA,qBAAA,CAAsB,MAAA,CAAO,qBAAqB,qBAAqB,CAAA;AACvE,EAAA,mBAAA,CAAoB,MAAA,CAAO,uBAAuB,uBAAuB,CAAA;AACzE,EAAA,oBAAA,CAAqB,MAAA,CAAO,oBAAoB,oBAAoB,CAAA;AACpE,EAAA,qBAAA,CAAsB,MAAA,CAAO,mBAAmB,mBAAmB,CAAA;AACnE,EAAA,mBAAA,CAAoB,MAAA,CAAO,qBAAqB,qBAAqB,CAAA;AACrE,EAAA,oBAAA,CAAqB,MAAA,CAAO,kBAAkB,kBAAkB,CAAA;AAChE,EAAA,gBAAA,CAAiB,MAAA,CAAO,kBAAkB,kBAAkB,CAAA;AAC5D,EAAA,gBAAA,CAAiB,MAAA,CAAO,eAAe,eAAe,CAAA;AACtD,EAAA,iBAAA,CAAkB,MAAA,CAAO,kBAAkB,kBAAkB,CAAA;AAC7D,EAAA,oBAAA,CAAqB,MAAA,CAAO,iBAAiB,iBAAiB,CAAA;AAC9D,EAAA,mCAAA,CAAoC,MAAA,CAAO,qBAAA,EAAuB,MAAA,CAAO,gBAAA,EAAkB,uBAAuB,CAAA;AAClH,EAAA,mCAAA,CAAoC,MAAA,CAAO,mBAAA,EAAqB,MAAA,CAAO,gBAAA,EAAkB,qBAAqB,CAAA;AAC9G,EAAA,mBAAA,CAAoB,MAAA,CAAO,iBAAiB,iBAAiB,CAAA;AAG7D,EAAA,IAAI,MAAA,CAAO,eAAA,GAAkB,MAAA,CAAO,gBAAA,GAAmB,OAAO,kBAAA,EAAoB;AACjF,IAAA,MAAM,WAAA,CAAY,sBAAsB,iBAAiB,CAAA;AAAA,EAC1D;AAGA,EAAA,OAAO,OAAO,MAAM,CAAA;AACrB;AAGO,SAAS,oBAAA,CAAqB,OAAgBL,MAAAA,EAAwC;AAC5F,EAAA,IAAI,OAAO,UAAU,QAAA,IAAY,CAAC,eAAe,KAAK,CAAA,IAAK,SAAS,CAAA,EAAG;AACtE,IAAA,MAAM,WAAA,CAAY,6BAA6BA,MAAK,CAAA;AAAA,EACrD;AACD;AAGO,SAAS,qBAAA,CAAsB,OAAgBA,MAAAA,EAAwC;AAC7F,EAAA,oBAAA,CAAqB,OAAOA,MAAK,CAAA;AACjC,EAAA,IAAI,CAAC,mBAAA,CAAoB,KAAK,CAAA,EAAG;AAChC,IAAA,MAAM,WAAA,CAAY,qBAAqBA,MAAK,CAAA;AAAA,EAC7C;AACD;AAGO,SAAS,mBAAA,CAAoB,OAAgBA,MAAAA,EAAmD;AACtG,EAAA,IAAI,CAAC,OAAA,CAAQ,KAAK,CAAA,IAAK,KAAA,CAAM,WAAW,CAAA,EAAG;AAC1C,IAAA,MAAM,WAAA,CAAY,wBAAwBA,MAAK,CAAA;AAAA,EAChD;AAEA,EAAA,KAAA,IAAS,QAAQ,CAAA,EAAG,KAAA,GAAQ,KAAA,CAAM,MAAA,EAAQ,SAAS,CAAA,EAAG;AACrD,IAAA,oBAAA,CAAqB,MAAM,KAAK,CAAA,EAAG,GAAGA,MAAK,CAAA,CAAA,EAAI,KAAK,CAAA,CAAA,CAAG,CAAA;AAAA,EACxD;AACD;AAQO,SAAS,mCAAA,CAAoC,MAAA,EAA2B,WAAA,EAAqBA,MAAAA,EAAqB;AACxH,EAAA,KAAA,IAAS,QAAQ,CAAA,EAAG,KAAA,GAAQ,MAAA,CAAO,MAAA,EAAQ,SAAS,CAAA,EAAG;AACtD,IAAA,IAAI,EAAE,MAAA,CAAO,KAAK,CAAA,IAAM,CAAA,GAAI,gBAAgB,gBAAA,CAAA,EAAmB;AAC9D,MAAA,MAAM,YAAY,oBAAA,EAAsB,CAAA,EAAGA,MAAK,CAAA,CAAA,EAAI,KAAK,CAAA,CAAA,CAAG,CAAA;AAAA,IAC7D;AAAA,EACD;AACD;AAGO,SAAS,iBAAA,CAAkB,OAAgBA,MAAAA,EAAwC;AACzF,EAAA,oBAAA,CAAqB,OAAOA,MAAK,CAAA;AACjC,EAAA,IAAI,QAAQ,CAAA,EAAG;AACd,IAAA,MAAM,WAAA,CAAY,sBAAsBA,MAAK,CAAA;AAAA,EAC9C;AACD;AASO,SAAS,mBAAA,CAAoB,OAAgBA,MAAAA,EAAwC;AAC3F,EAAA,qBAAA,CAAsB,OAAOA,MAAK,CAAA;AAClC,EAAA,IAAI,QAAQ,6BAAA,EAA+B;AAC1C,IAAA,MAAM,WAAA,CAAY,sBAAsBA,MAAK,CAAA;AAAA,EAC9C;AACD;AAEA,SAAS,gBAAA,CAAiB,OAAgBA,MAAAA,EAAwC;AACjF,EAAA,oBAAA,CAAqB,OAAOA,MAAK,CAAA;AACjC,EAAA,IAAI,QAAQ,oBAAA,EAAsB;AACjC,IAAA,MAAM,WAAA,CAAY,sBAAsBA,MAAK,CAAA;AAAA,EAC9C;AACD;;;ACjMA,IAAMM,gBAAAA,GAAkB,IAAA;AAExB,IAAM,SAAA,GAAkB,CAAC,MAAA,EAAQN,MAAAA,KAAU;AAC1C,EAAA,MAAM,UAAA,CAAW,iBAAiBA,MAAK,CAAA;AACxC,CAAA;AAMO,SAAS,cAAA,CAAe,OAAgBA,MAAAA,EAAyB;AACvE,EAAA,MAAM,IAAA,GAAO,YAAA,CAAa,KAAA,EAAOA,MAAAA,EAAO,SAAS,CAAA;AACjD,EAAA,IAAI,IAAA,KAAS,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,IAAY,OAAA,CAAQ,IAAI,CAAA,EAAG,MAAM,UAAA,CAAW,eAAA,EAAiBA,MAAK,CAAA;AACvG,EAAA,OAAO,IAAA;AACR;AAGO,SAAS,YAAA,CAAaO,OAAAA,EAAkB,GAAA,EAAaP,MAAAA,EAAyB;AACpF,EAAA,MAAM,KAAA,GAAQ,GAAA,CAAIO,OAAAA,EAAQ,GAAG,CAAA;AAC7B,EAAA,IAAI,KAAA,KAAU,IAAA,IAAQ,OAAO,KAAA,KAAU,QAAA,IAAY,OAAA,CAAQ,KAAK,CAAA,EAAG,MAAM,UAAA,CAAW,eAAA,EAAiBP,MAAK,CAAA;AAC1G,EAAA,OAAO,KAAA;AACR;AAEA,SAAS,GAAA,CAAIO,SAAkB,GAAA,EAA2C;AACzE,EAAA,OAAO,OAAA,CAAQA,OAAAA,EAAQ,GAAA,EAAK,GAAA,EAAK,SAAS,CAAA;AAC3C;AAGO,SAAS,IAAA,CAAKA,OAAAA,EAAkB,GAAA,EAAaP,MAAAA,EAAuB;AAC1E,EAAA,MAAM,KAAA,GAAQ,GAAA,CAAIO,OAAAA,EAAQ,GAAG,CAAA;AAC7B,EAAA,IAAI,OAAO,UAAU,QAAA,IAAY,KAAA,CAAM,WAAW,CAAA,EAAG,MAAM,UAAA,CAAW,eAAA,EAAiBP,MAAK,CAAA;AAC5F,EAAA,OAAO,KAAA;AACR;AAGO,IAAM,qBAAA,GAAwB,GAAA;AAGrC,IAAM,iBAAA,GAAoB,8BAAA;AAM1B,IAAM,cAAA,GAAiB,wEAAA;AAahB,SAAS,UAAA,CAAWO,OAAAA,EAAkB,GAAA,EAAaP,MAAAA,EAAuB;AAChF,EAAA,MAAM,KAAA,GAAQ,IAAA,CAAKO,OAAAA,EAAQ,GAAA,EAAKP,MAAK,CAAA;AACrC,EAAA,IAAI,CAAC,mBAAA,CAAoB,KAAK,GAAG,MAAM,UAAA,CAAW,iBAAiBA,MAAK,CAAA;AACxE,EAAA,OAAO,KAAA;AACR;AASO,SAAS,oBAAoB,KAAA,EAAiC;AACpE,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,CAAM,MAAA,GAAS,KAAK,KAAA,CAAM,MAAA,IAAU,qBAAA,IACvE,CAAC,QAAQ,iBAAA,EAAmB,KAAK,KAAK,CAAC,OAAA,CAAQ,gBAAgB,KAAK,CAAA;AACtE;AAGO,SAAS,kBAAA,CAAmBO,OAAAA,EAAkB,GAAA,EAAaP,MAAAA,EAAmC;AACpG,EAAA,OAAO,GAAA,CAAIO,SAAQ,GAAG,CAAA,KAAM,SAAY,MAAA,GAAY,UAAA,CAAWA,OAAAA,EAAQ,GAAA,EAAKP,MAAK,CAAA;AAClF;AAOO,SAAS,gBAAgB,KAAA,EAAkC;AACjE,EAAA,OAAO,cAAc,KAAK,CAAA;AAC3B;AAQO,SAAS,SAAY,KAAA,EAAmB;AAC9C,EAAA,OAAO,SAAS,KAAK,CAAA;AACtB;AAEA,SAAS,SAAS,KAAA,EAAyB;AAC1C,EAAA,IAAI,KAAA,KAAU,IAAA,IAAQ,OAAO,KAAA,KAAU,UAAU,OAAO,KAAA;AACxD,EAAA,IAAI,OAAA,CAAQ,KAAK,CAAA,EAAG;AACnB,IAAA,MAAM,OAAkB,EAAC;AACzB,IAAA,KAAA,IAAS,KAAA,GAAQ,CAAA,EAAG,KAAA,GAAQ,KAAA,CAAM,MAAA,EAAQ,KAAA,IAAS,CAAA,EAAG,IAAA,CAAK,KAAK,CAAA,GAAI,QAAA,CAAS,KAAA,CAAM,KAAK,CAAC,CAAA;AACzF,IAAA,OAAO,OAAO,IAAI,CAAA;AAAA,EACnB;AACA,EAAA,MAAM,GAAA,mBAAM,MAAA,CAAO,MAAA,CAAO,IAAI,CAAA;AAC9B,EAAA,MAAM,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,KAAK,CAAA;AAC9B,EAAA,KAAA,IAAS,QAAQ,CAAA,EAAG,KAAA,GAAQ,IAAA,CAAK,MAAA,EAAQ,SAAS,CAAA,EAAG;AACpD,IAAA,MAAM,GAAA,GAAM,KAAK,KAAK,CAAA;AACtB,IAAA,MAAM,IAAA,GAAQ,MAAkC,GAAG,CAAA;AACnD,IAAA,IAAI,SAAS,MAAA,EAAW,GAAA,CAAI,GAAG,CAAA,GAAI,SAAS,IAAI,CAAA;AAAA,EACjD;AACA,EAAA,OAAO,OAAO,GAAG,CAAA;AAClB;AAQO,SAAS,WAAA,CAAYO,OAAAA,EAAkB,GAAA,EAAaP,MAAAA,EAAe,GAAA,EAAqB;AAC9F,EAAA,MAAM,KAAA,GAAQ,GAAA,CAAIO,OAAAA,EAAQ,GAAG,CAAA;AAC7B,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,CAAC,mBAAA,CAAoB,KAAK,CAAA,IAAK,KAAA,GAAQ,GAAA,EAAK,MAAM,UAAA,CAAW,eAAA,EAAiBP,MAAK,CAAA;AACpH,EAAA,OAAO,KAAA;AACR;AAGO,SAAS,mBAAA,CAAoBO,OAAAA,EAAkB,GAAA,EAAaP,MAAAA,EAAe,GAAA,EAAiC;AAClH,EAAA,OAAO,GAAA,CAAIO,OAAAA,EAAQ,GAAG,CAAA,KAAM,MAAA,GAAY,SAAY,WAAA,CAAYA,OAAAA,EAAQ,GAAA,EAAKP,MAAAA,EAAO,GAAG,CAAA;AACxF;AAGO,SAAS,IAAA,CAAKO,OAAAA,EAAkB,GAAA,EAAaP,MAAAA,EAAwB;AAC3E,EAAA,MAAM,KAAA,GAAQ,GAAA,CAAIO,OAAAA,EAAQ,GAAG,CAAA;AAC7B,EAAA,IAAI,OAAO,KAAA,KAAU,SAAA,EAAW,MAAM,UAAA,CAAW,iBAAiBP,MAAK,CAAA;AACvE,EAAA,OAAO,KAAA;AACR;AAGO,SAAS,OAAA,CAAQO,OAAAA,EAAkB,GAAA,EAAaP,MAAAA,EAAuB;AAC7E,EAAA,MAAM,KAAA,GAAQ,GAAA,CAAIO,OAAAA,EAAQ,GAAG,CAAA;AAC7B,EAAA,MAAM,MAAM,OAAO,KAAA,KAAU,QAAA,GAAW,mBAAA,CAAoB,KAAK,CAAA,GAAI,MAAA;AACrE,EAAA,IAAI,GAAA,KAAQ,MAAA,EAAW,MAAM,UAAA,CAAW,iBAAiBP,MAAK,CAAA;AAC9D,EAAA,OAAO,UAAU,GAAG,CAAA;AACrB;AAGO,SAAS,MAAA,CAAyBO,OAAAA,EAAkB,GAAA,EAAa,KAAA,EAAqBP,MAAAA,EAAkB;AAC9G,EAAA,MAAM,KAAA,GAAQ,GAAA,CAAIO,OAAAA,EAAQ,GAAG,CAAA;AAC7B,EAAA,IAAI,CAAC,QAAQ,KAAA,EAAO,KAAK,GAAG,MAAM,UAAA,CAAW,iBAAiBP,MAAK,CAAA;AACnE,EAAA,OAAO,KAAA;AACR;AAGO,SAAS,QAAA,CAASO,OAAAA,EAAkB,GAAA,EAAaP,MAAAA,EAAkC;AACzF,EAAA,MAAM,KAAA,GAAQ,GAAA,CAAIO,OAAAA,EAAQ,GAAG,CAAA;AAC7B,EAAA,IAAI,CAAC,OAAA,CAAQ,KAAK,CAAA,IAAK,KAAA,CAAM,MAAA,KAAW,CAAA,IAAK,KAAA,CAAM,MAAA,GAAS,IAAA,EAAO,MAAM,UAAA,CAAW,iBAAiBP,MAAK,CAAA;AAC1G,EAAA,KAAA,IAAS,QAAQ,CAAA,EAAG,KAAA,GAAQ,KAAA,CAAM,MAAA,EAAQ,SAAS,CAAA,EAAG;AACrD,IAAA,MAAM,IAAA,GAAO,MAAM,KAAK,CAAA;AACxB,IAAA,IAAI,OAAO,IAAA,KAAS,QAAA,IAAY,IAAA,CAAK,MAAA,KAAW,CAAA,EAAG,MAAM,UAAA,CAAW,eAAA,EAAiB,CAAA,EAAGA,MAAK,CAAA,CAAA,EAAI,KAAK,CAAA,CAAA,CAAG,CAAA;AAAA,EAC1G;AACA,EAAA,OAAO,KAAA;AACR;AAGO,IAAM,WAAA,GAAc,MAAA;AAGpB,SAAS,MAAM,EAAA,EAAoB;AACzC,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,IAAIM,gBAAAA,CAAgB,EAAE,CAAC,CAAA;AAC3C,EAAA,IAAI,GAAA,KAAQ,MAAA,EAAW,MAAM,UAAA,CAAW,gBAAgB,MAAM,CAAA;AAC9D,EAAA,OAAO,GAAA;AACR;AAMA,IAAM,iBAAA,GAAoB,OAAO,WAAA,KAAgB,UAAA,GAAa,QAAQ,wBAAA,CAAyB,WAAA,CAAY,SAAA,EAAW,SAAS,CAAA,GAAI,MAAA;AACnI,IAAM,gBAAgB,iBAAA,EAAmB,GAAA;AAQzC,SAAS,UAAU,MAAA,EAAyB;AAC3C,EAAA,IAAI,aAAA,KAAkB,MAAA,EAAW,MAAM,UAAA,CAAW,iBAAiB,gBAAgB,CAAA;AAGnF,EAAA,OAAO,KAAA,CAAM,aAAA,EAAe,MAAA,EAAQ,EAAE,CAAA,KAAM,IAAA;AAC7C;AAGO,SAAS,gBAAgB,OAAA,EAA8B;AAC7D,EAAA,IAAI,OAAA,KAAY,QAAQ,OAAO,OAAA,KAAY,UAAU,MAAM,UAAA,CAAW,iBAAiB,SAAS,CAAA;AAChG,EAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,OAAA,EAAS,UAAA,EAAY,oBAAoB,SAAS,CAAA;AAC3E,EAAA,MAAM,UAAA,GAAa,OAAO,QAAQ,CAAA;AAClC,EAAA,IAAI,EAAE,UAAA,KAAe,UAAA,CAAA,IAAe,UAAA,KAAe,QAAA,IAAY,eAAe,CAAA,QAAA,EAAW,MAAM,UAAA,CAAW,eAAA,EAAiB,kBAAkB,CAAA;AAC7I,EAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,OAAA,EAAS,QAAA,EAAU,kBAAkB,SAAS,CAAA;AACrE,EAAA,IAAI,MAAA,KAAW,QAAQ,OAAO,MAAA,KAAW,UAAU,MAAM,UAAA,CAAW,iBAAiB,gBAAgB,CAAA;AACrG,EAAA,IAAI;AACH,IAAA,SAAA,CAAU,MAAM,CAAA;AAAA,EACjB,CAAA,CAAA,MAAQ;AACP,IAAA,MAAM,UAAA,CAAW,iBAAiB,gBAAgB,CAAA;AAAA,EACnD;AACA,EAAA,OAAO,EAAE,YAAY,MAAA,EAAO;AAC7B;AAOO,SAAS,gBAAA,CAAiB,QAAoBE,MAAAA,EAAqB;AACzE,EAAA,IAAI,UAAU,MAAA,CAAO,MAAM,GAAG,MAAM,UAAA,CAAW,gBAAgB,gBAAgB,CAAA;AAC/E,EAAA,IAAI,EAAE,MAAA,CAAO,UAAA,GAAaA,SAAQ,MAAM,UAAA,CAAW,mBAAmB,kBAAkB,CAAA;AACzF;AAaO,SAAS,aAAa,KAAA,EAAgD;AAC5E,EAAA,IAAI,KAAA,KAAU,QAAQ,OAAO,KAAA,KAAU,UAAU,MAAM,UAAA,CAAW,iBAAiB,OAAO,CAAA;AAC1F,EAAA,MAAM,MAAO,KAAA,CAA4B,GAAA;AACzC,EAAA,IAAI,OAAO,GAAA,KAAQ,UAAA,EAAY,MAAM,UAAA,CAAW,iBAAiB,WAAW,CAAA;AAC5E,EAAA,OAAO,EAAE,MAAA,EAAQ,KAAA,EAAO,GAAA,EAA0C;AACnE;AAGO,SAAS,UAAU,KAAA,EAA8B;AACvD,EAAA,IAAI,KAAA;AACJ,EAAA,IAAI;AACH,IAAA,KAAA,GAAQ,MAAM,KAAA,CAAM,GAAA,EAAK,KAAA,CAAM,MAAA,EAAQ,EAAE,CAAA;AAAA,EAC1C,CAAA,CAAA,MAAQ;AACP,IAAA,MAAM,UAAA,CAAW,iBAAiB,WAAW,CAAA;AAAA,EAC9C;AACA,EAAA,MAAM,EAAA,GAAK,OAAO,KAAK,CAAA;AACvB,EAAA,IAAI,EAAE,EAAA,KAAO,EAAA,CAAA,IAAO,EAAA,KAAO,QAAA,IAAY,OAAO,CAAA,QAAA,EAAW,MAAM,UAAA,CAAW,eAAA,EAAiB,WAAW,CAAA;AACtG,EAAA,OAAO,EAAA;AACR;;;AC3KO,IAAM,eAAkC,MAAA,CAAO,MAAA,CAAO,CAAC,WAAA,EAAa,aAAa,CAAC,CAAA;AAClF,IAAM,kBAAqC,MAAA,CAAO,MAAA,CAAO,CAAC,WAAA,EAAa,aAAA,EAAe,WAAW,CAAC,CAAA;AACzG,IAAM,gBAAA,GAAmB,OAAO,MAAA,CAAO,CAAC,aAAa,OAAA,EAAS,SAAA,EAAW,aAAA,EAAe,WAAW,CAAU,CAAA;AAC7G,IAAM,iBAAiB,MAAA,CAAO,MAAA,CAAO,CAAC,qBAAA,EAAuB,sBAAsB,CAAU,CAAA;AAC7F,IAAM,mBAAA,GAAyC,OAAO,MAAA,CAAO,CAAC,GAAG,4BAAA,EAA8B,GAAG,wBAAwB,CAAC,CAAA;AAC3H,IAAM,eAAA,GAAkB,MAAA,CAAO,MAAA,CAAO,CAAC,aAAa,CAAU,CAAA;AAOvD,SAAS,QAAW,KAAA,EAAkB;AAC5C,EAAA,OAAO,SAAY,KAAK,CAAA;AACzB;AAGO,SAAS,SAAA,CAAU,gBAAwB,OAAA,EAAyB;AAC1E,EAAA,OAAO,YAAA,CAAa,gBAAgB,OAAO,CAAA;AAC5C;AAOO,SAAS,OAAA,CAAQD,SAAiE,KAAA,EAAuB;AAC/G,EAAA,OAAOA,QAAO,QAAA,KAAa,KAAA,CAAM,QAAA,IAAYA,OAAAA,CAAO,YAAY,KAAA,CAAM,OAAA;AACvE;AAQO,SAAS,UAAA,CAAW,KAAA,EAAe,KAAA,EAAe,KAAA,EAAwB;AAChF,EAAA,OAAO,KAAA,CAAM,MAAA,KAAW,SAAA,IAAa,KAAA,CAAM,KAAA,KAAU,MAAA,IAAa,KAAA,CAAM,KAAA,CAAM,KAAA,KAAU,KAAA,IAAS,KAAA,CAAM,KAAA,CAAM,KAAA,KAAU,KAAA;AACxH;AASO,SAAS,KAAA,CAAM,KAAA,EAAe,KAAA,EAAe,KAAA,EAAe,UAAA,EAA6B;AAC/F,EAAA,OAAO,WAAW,KAAA,EAAO,KAAA,EAAO,KAAK,CAAA,IAAK,KAAA,CAAM,MAAO,WAAA,GAAc,UAAA;AACtE;AAGO,SAAS,WAAA,CAAY,MAAc,KAAA,EAAuB;AAChE,EAAA,OAAO,IAAA,GAAO,KAAA,GAAQ,EAAA,GAAK,IAAA,GAAO,QAAQ,CAAA,GAAI,CAAA;AAC/C;AAGA,SAAS,MAAS,IAAA,EAAkB;AACnC,EAAA,OAAO,MAAM,IAAA,EAAM,MAAM,UAAA,CAAW,eAAA,EAAiB,OAAO,CAAC,CAAA;AAC9D;AAOO,SAAS,kBAAkB,OAAA,EAA0B;AAC3D,EAAA,OAAO,KAAA;AAAA,IACN,MAAM;AACL,MAAA,IAAI,OAAA,KAAY,QAAQ,OAAO,OAAA,KAAY,UAAU,MAAM,WAAA,CAAY,oBAAoB,SAAS,CAAA;AACpG,MAAA,MAAM,QAAQ,SAAA,CAAU,OAAA,CAAQ,OAAA,EAAS,iBAAA,EAAmB,mBAAmB,MAAM;AACpF,QAAA,MAAM,WAAA,CAAY,oBAAoB,iBAAiB,CAAA;AAAA,MACxD,CAAC,CAAC,CAAA;AACF,MAAA,mBAAA,CAAoB,OAAO,iBAAiB,CAAA;AAC5C,MAAA,OAAO,KAAA;AAAA,IACR,CAAA;AAAA,IACA,MAAM,WAAA,CAAY,kBAAA,EAAoB,iBAAiB;AAAA,GACxD;AACD;AAGO,SAAS,cAAA,CAAwD,SAAkB,GAAA,EAA4B;AACrH,EAAA,OAAO,MAAM,MAAM;AAClB,IAAA,MAAM,IAAA,GAAQ,QAAoC,GAAG,CAAA;AACrD,IAAA,IAAI,IAAA,KAAS,UAAa,OAAO,IAAA,KAAS,YAAY,MAAM,UAAA,CAAW,iBAAiB,GAAG,CAAA;AAC3F,IAAA,OAAO,IAAA;AAAA,EACR,CAAA,EAAG,MAAM,UAAA,CAAW,eAAA,EAAiB,GAAG,CAAC,CAAA;AAC1C;AAEA,SAAS,SAAA,CAAU,OAAiBP,MAAAA,EAAsB;AACzD,EAAA,OAAO,EAAE,QAAA,EAAU,UAAA,CAAW,KAAA,EAAO,UAAA,EAAY,GAAGA,MAAK,CAAA,SAAA,CAAW,CAAA,EAAG,OAAA,EAAS,WAAW,KAAA,EAAO,SAAA,EAAW,CAAA,EAAGA,MAAK,UAAU,CAAA,EAAE;AAClI;AAQA,SAAS,WAAW,KAAA,EAA8B;AACjD,EAAA,OAAO,EAAE,KAAA,EAAO,UAAA,CAAW,OAAO,OAAA,EAAS,aAAa,GAAG,KAAA,EAAO,WAAA,CAAY,OAAO,OAAA,EAAS,aAAA,EAAe,CAAC,CAAA,EAAG,KAAA,EAAO,QAAQ,KAAA,EAAO,KAAA,EAAO,WAAW,CAAA,EAAE;AAC5J;AASA,SAAS,UAAU,OAAA,EAA8B;AAChD,EAAA,MAAM,KAAA,GAAQ,cAAA,CAAe,OAAA,EAAS,SAAS,CAAA;AAC/C,EAAA,MAAM,KAAA,GAAoB;AAAA,IACzB,QAAA,EAAU,UAAA,CAAW,KAAA,EAAO,UAAA,EAAY,kBAAkB,CAAA;AAAA,IAC1D,eAAA,EAAiB,WAAA,CAAY,KAAA,EAAO,iBAAA,EAAmB,2BAA2B,CAAC,CAAA;AAAA,IACnF,KAAA,EAAO,WAAA,CAAY,KAAA,EAAO,OAAA,EAAS,iBAAiB,CAAC,CAAA;AAAA,IACrD,KAAA,EAAO,OAAA,CAAQ,KAAA,EAAO,KAAA,EAAO,aAAa;AAAA,GAC3C;AAEA,EAAA,IAAI,KAAA,CAAM,QAAQ,KAAA,CAAM,eAAA,GAAkB,aAAa,MAAM,UAAA,CAAW,iBAAiB,yBAAyB,CAAA;AAClH,EAAA,OAAO,KAAA;AACR;AAUA,SAAS,mBAAmB,KAAA,EAA+B;AAC1D,EAAA,MAAM,OAAA,GAAU,YAAA,CAAa,KAAA,EAAO,SAAA,EAAW,eAAe,CAAA;AAC9D,EAAA,MAAA,CAAO,OAAA,EAAS,gBAAA,EAAkB,eAAA,EAAiB,8BAA8B,CAAA;AACjF,EAAA,OAAO;AAAA,IACN,aAAA,EAAe,WAAA,CAAY,OAAA,EAAS,eAAA,EAAiB,+BAA+B,CAAC,CAAA;AAAA,IACrF,WAAA,EAAa,UAAA,CAAW,OAAA,EAAS,aAAA,EAAe,2BAA2B,CAAA;AAAA,IAC3E,aAAA,EAAe,OAAA,CAAQ,OAAA,EAAS,aAAA,EAAe,2BAA2B,CAAA;AAAA,IAC1E,oBAAA,EAAsB,OAAA,CAAQ,OAAA,EAAS,oBAAA,EAAsB,kCAAkC,CAAA;AAAA,IAC/F,kBAAA,EAAoB,kBAAA,CAAmB,OAAA,EAAS,oBAAA,EAAsB,kCAAkC;AAAA,GACzG;AACD;AAEA,SAAS,WAAW,MAAA,EAAwC;AAC3D,EAAA,MAAM,KAAA,GAAQ,cAAA,CAAe,MAAA,EAAQ,QAAQ,CAAA;AAC7C,EAAA,OAAO,EAAE,OAAA,EAAS,UAAA,CAAW,OAAO,SAAA,EAAW,gBAAgB,GAAG,KAAA,EAAO,UAAA,CAAW,OAAO,OAAA,EAAS,cAAc,GAAG,KAAA,EAAO,WAAA,CAAY,OAAO,OAAA,EAAS,cAAA,EAAgB,CAAC,CAAA,EAAE;AAC5K;AAQO,SAAS,uBAAA,CAAwB,KAAc,OAAA,EAAkB;AACvE,EAAA,OAAO,KAAA,CAAM,OAAO,EAAE,MAAA,EAAQ,eAAA,CAAgB,OAAO,CAAA,EAAG,GAAA,EAAK,YAAA,CAAa,GAAG,CAAA,EAAE,CAAE,CAAA;AAClF;AAEO,SAAS,aAAA,CAAc,SAAkB,OAAA,EAAkB;AACjE,EAAA,OAAO,KAAA,CAAM,OAAO,EAAE,MAAA,EAAQ,eAAA,CAAgB,OAAO,CAAA,EAAG,KAAA,EAAO,SAAA,CAAU,OAAO,CAAA,EAAE,CAAE,CAAA;AACrF;AAEO,SAAS,iBAAA,CAAkB,OAAgB,OAAA,EAAkB;AACnE,EAAA,OAAO,MAAM,MAAM;AAClB,IAAA,MAAM,IAAA,GAAO,cAAA,CAAe,KAAA,EAAO,OAAO,CAAA;AAC1C,IAAA,OAAO,EAAE,MAAA,EAAQ,eAAA,CAAgB,OAAO,GAAG,MAAA,EAAQ,UAAA,CAAW,IAAI,CAAA,EAAG,OAAA,EAAS,UAAA,CAAW,IAAA,EAAM,SAAA,EAAW,eAAe,CAAA,EAAE;AAAA,EAC5H,CAAC,CAAA;AACF;AAEO,SAAS,kBAAA,CAAmB,OAAgB,OAAA,EAAkB;AACpE,EAAA,OAAO,MAAM,MAAM;AAClB,IAAA,MAAM,IAAA,GAAO,cAAA,CAAe,KAAA,EAAO,OAAO,CAAA;AAC1C,IAAA,OAAO;AAAA,MACN,MAAA,EAAQ,gBAAgB,OAAO,CAAA;AAAA,MAC/B,MAAA,EAAQ,WAAW,IAAI,CAAA;AAAA,MACvB,OAAA,EAAS,UAAA,CAAW,IAAA,EAAM,SAAA,EAAW,eAAe,CAAA;AAAA,MACpD,aAAA,EAAe,OAAA,CAAQ,IAAA,EAAM,aAAA,EAAe,mBAAmB,CAAA;AAAA,MAC/D,UAAA,EAAY,MAAA,CAAO,IAAA,EAAM,YAAA,EAAc,0BAA0B,kBAAkB;AAAA,KACpF;AAAA,EACD,CAAC,CAAA;AACF;AAGA,SAAS,WAAA,CAAY,MAAgB,MAAA,EAA6B;AACjE,EAAA,MAAM,eAAA,GAAkB,WAAA,CAAY,IAAA,EAAM,iBAAA,EAAmB,yBAAyB,CAAC,CAAA;AACvF,EAAA,IAAI,OAAO,KAAA,GAAQ,eAAA,GAAkB,aAAa,MAAM,UAAA,CAAW,iBAAiB,uBAAuB,CAAA;AAC3G,EAAA,OAAO,eAAA;AACR;AAEO,SAAS,gBAAA,CAAiB,OAAgB,OAAA,EAAkB;AAClE,EAAA,OAAO,MAAM,MAAM;AAClB,IAAA,MAAM,IAAA,GAAO,cAAA,CAAe,KAAA,EAAO,OAAO,CAAA;AAC1C,IAAA,MAAM,MAAA,GAAS,WAAW,IAAI,CAAA;AAC9B,IAAA,OAAO,EAAE,MAAA,EAAQ,eAAA,CAAgB,OAAO,CAAA,EAAG,QAAQ,OAAA,EAAS,UAAA,CAAW,IAAA,EAAM,SAAA,EAAW,eAAe,CAAA,EAAG,eAAA,EAAiB,WAAA,CAAY,IAAA,EAAM,MAAM,CAAA,EAAE;AAAA,EACtJ,CAAC,CAAA;AACF;AAEO,SAAS,mBAAA,CAAoB,OAAgB,OAAA,EAAkB;AACrE,EAAA,OAAO,MAAM,MAAM;AAClB,IAAA,MAAM,IAAA,GAAO,cAAA,CAAe,KAAA,EAAO,OAAO,CAAA;AAC1C,IAAA,MAAM,MAAA,GAAS,WAAW,IAAI,CAAA;AAC9B,IAAA,OAAO,EAAE,MAAA,EAAQ,eAAA,CAAgB,OAAO,CAAA,EAAG,QAAQ,UAAA,EAAY,UAAA,CAAW,IAAA,EAAM,YAAA,EAAc,kBAAkB,CAAA,EAAG,eAAA,EAAiB,WAAA,CAAY,IAAA,EAAM,MAAM,CAAA,EAAE;AAAA,EAC/J,CAAC,CAAA;AACF;AASO,SAAS,eAAA,CAAgB,KAAA,EAA2DQ,MAAAA,EAAe,eAAA,EAAiC;AAC1I,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAQA,MAAAA,GAAQ,eAAA,EAAiB,MAAM,oBAAoB,CAAA;AACzE,EAAA,MAAM,OAAA,GAAU,MAAM,KAAA,CAAO,WAAA;AAC7B,EAAA,OAAO,KAAA,GAAQ,UAAU,KAAA,GAAQ,OAAA;AAClC;AAEO,SAAS,qBAAA,CAAsB,OAAgB,OAAA,EAAkB;AACvE,EAAA,OAAO,MAAM,MAAM;AAClB,IAAA,MAAM,IAAA,GAAO,cAAA,CAAe,KAAA,EAAO,OAAO,CAAA;AAC1C,IAAA,OAAO;AAAA,MACN,MAAA,EAAQ,gBAAgB,OAAO,CAAA;AAAA,MAC/B,MAAA,EAAQ,WAAW,IAAI,CAAA;AAAA,MACvB,OAAA,EAAS,UAAA,CAAW,IAAA,EAAM,SAAA,EAAW,eAAe,CAAA;AAAA,MACpD,UAAA,EAAY,MAAA,CAAO,IAAA,EAAM,YAAA,EAAc,0BAA0B,kBAAkB;AAAA,KACpF;AAAA,EACD,CAAC,CAAA;AACF;AAQO,SAAS,qBAAA,CAAsB,OAAgB,OAAA,EAAkB;AACvE,EAAA,OAAO,MAAM,MAAM;AAClB,IAAA,MAAM,IAAA,GAAO,cAAA,CAAe,KAAA,EAAO,OAAO,CAAA;AAC1C,IAAA,MAAM,OAAA,GAAU,YAAA,CAAa,IAAA,EAAM,SAAA,EAAW,eAAe,CAAA;AAC7D,IAAA,MAAM,KAAA,GAAQ,YAAA,CAAa,OAAA,EAAS,OAAA,EAAS,qBAAqB,CAAA;AAClE,IAAA,MAAM,IAAA,GAAwB;AAAA,MAC7B,aAAA,EAAe,WAAA,CAAY,OAAA,EAAS,eAAA,EAAiB,+BAA+B,CAAC,CAAA;AAAA,MACrF,WAAA,EAAa,UAAA,CAAW,OAAA,EAAS,aAAA,EAAe,2BAA2B,CAAA;AAAA,MAC3E,aAAA,EAAe,OAAA,CAAQ,OAAA,EAAS,aAAA,EAAe,2BAA2B,CAAA;AAAA,MAC1E,oBAAA,EAAsB,OAAA,CAAQ,OAAA,EAAS,oBAAA,EAAsB,kCAAkC,CAAA;AAAA,MAC/F,kBAAA,EAAoB,kBAAA,CAAmB,OAAA,EAAS,oBAAA,EAAsB,kCAAkC,CAAA;AAAA,MACxG,OAAA,EAAS,UAAA,CAAW,KAAA,EAAO,SAAA,EAAW,6BAA6B,CAAA;AAAA,MACnE,SAAA,EAAW,UAAA,CAAW,KAAA,EAAO,WAAA,EAAa,+BAA+B;AAAA,KAC1E;AACA,IAAA,OAAO,EAAE,MAAA,EAAQ,eAAA,CAAgB,OAAO,CAAA,EAAG,OAAO,SAAA,CAAU,IAAA,EAAM,OAAO,CAAA,EAAG,SAAS,UAAA,CAAW,IAAA,EAAM,WAAW,eAAe,CAAA,EAAG,SAAS,IAAA,EAAK;AAAA,EAClJ,CAAC,CAAA;AACF;AAEO,SAAS,kBAAA,CAAmB,OAAgB,OAAA,EAAkB;AACpE,EAAA,OAAO,MAAM,MAAM;AAClB,IAAA,MAAM,IAAA,GAAO,cAAA,CAAe,KAAA,EAAO,OAAO,CAAA;AAC1C,IAAA,OAAO,EAAE,MAAA,EAAQ,eAAA,CAAgB,OAAO,CAAA,EAAG,KAAA,EAAO,UAAU,IAAA,EAAM,OAAO,GAAG,OAAA,EAAS,UAAA,CAAW,MAAM,SAAA,EAAW,eAAe,GAAG,OAAA,EAAS,kBAAA,CAAmB,IAAI,CAAA,EAAE;AAAA,EACtK,CAAC,CAAA;AACF;AAGO,SAAS,aAAA,CAAc,OAAgB,OAAA,EAAkB;AAC/D,EAAA,OAAO,MAAM,MAAM;AAClB,IAAA,MAAM,IAAA,GAAO,cAAA,CAAe,KAAA,EAAO,OAAO,CAAA;AAC1C,IAAA,OAAO,EAAE,MAAA,EAAQ,eAAA,CAAgB,OAAO,GAAG,KAAA,EAAO,SAAA,CAAU,IAAA,EAAM,OAAO,GAAG,OAAA,EAAS,UAAA,CAAW,IAAA,EAAM,SAAA,EAAW,eAAe,CAAA,EAAE;AAAA,EACnI,CAAC,CAAA;AACF;AAEO,SAAS,oBAAA,CAAqB,MAAA,EAAiB,MAAA,EAAiB,OAAA,EAAkB;AACxF,EAAA,OAAO,MAAM,MAAM;AAClB,IAAA,MAAM,IAAA,GAAO,cAAA,CAAe,MAAA,EAAQ,QAAQ,CAAA;AAC5C,IAAA,MAAM,KAAA,GAAQ,WAAW,MAAM,CAAA;AAC/B,IAAA,MAAM,IAAA,GAAO;AAAA,MACZ,MAAA,EAAQ,gBAAgB,OAAO,CAAA;AAAA,MAC/B,MAAA,EAAQ,KAAA;AAAA,MACR,UAAA,EAAY,UAAA,CAAW,IAAA,EAAM,YAAA,EAAc,mBAAmB,CAAA;AAAA,MAC9D,cAAA,EAAgB,UAAA,CAAW,IAAA,EAAM,gBAAA,EAAkB,uBAAuB,CAAA;AAAA,MAC1E,OAAA,EAAS,UAAA,CAAW,IAAA,EAAM,SAAA,EAAW,gBAAgB,CAAA;AAAA,MACrD,QAAA,EAAU,UAAA,CAAW,IAAA,EAAM,UAAA,EAAY,iBAAiB,CAAA;AAAA,MACxD,OAAA,EAAS,UAAA,CAAW,IAAA,EAAM,SAAA,EAAW,gBAAgB,CAAA;AAAA,MACrD,mBAAA,EAAqB,WAAA,CAAY,IAAA,EAAM,qBAAA,EAAuB,8BAA8B,CAAC,CAAA;AAAA,MAC7F,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,MAAA,EAAQ,aAAa,CAAA;AAAA,MACtC,aAAA,EAAe,OAAA,CAAQ,IAAA,EAAM,aAAA,EAAe,oBAAoB,CAAA;AAAA,MAChE,oBAAA,EAAsB,OAAA,CAAQ,IAAA,EAAM,oBAAA,EAAsB,2BAA2B,CAAA;AAAA,MACrF,WAAA,EAAa,OAAA,CAAQ,IAAA,EAAM,WAAA,EAAa,kBAAkB;AAAA,KAC3D;AACA,IAAA,IAAI,KAAK,OAAA,KAAY,KAAA,CAAM,SAAS,MAAM,UAAA,CAAW,mBAAmB,gBAAgB,CAAA;AACxF,IAAA,OAAO,IAAA;AAAA,EACR,CAAC,CAAA;AACF;AAEO,SAAS,cAAA,CAAeD,OAAAA,EAAiB,MAAA,EAAiB,OAAA,EAAkB;AAClF,EAAA,OAAO,MAAM,MAAM;AAClB,IAAA,MAAM,IAAA,GAAO,cAAA,CAAeA,OAAAA,EAAQ,QAAQ,CAAA;AAC5C,IAAA,MAAM,KAAA,GAAQ,WAAW,MAAM,CAAA;AAC/B,IAAA,MAAM,IAAA,GAAO;AAAA,MACZ,MAAA,EAAQ,gBAAgB,OAAO,CAAA;AAAA,MAC/B,MAAA,EAAQ,KAAA;AAAA,MACR,cAAA,EAAgB,UAAA,CAAW,IAAA,EAAM,gBAAA,EAAkB,uBAAuB,CAAA;AAAA,MAC1E,OAAA,EAAS,UAAA,CAAW,IAAA,EAAM,SAAA,EAAW,gBAAgB,CAAA;AAAA,MACrD,QAAA,EAAU,UAAA,CAAW,IAAA,EAAM,UAAA,EAAY,iBAAiB,CAAA;AAAA,MACxD,OAAA,EAAS,UAAA,CAAW,IAAA,EAAM,SAAA,EAAW,gBAAgB,CAAA;AAAA,MACrD,mBAAA,EAAqB,WAAA,CAAY,IAAA,EAAM,qBAAA,EAAuB,8BAA8B,CAAC,CAAA;AAAA,MAC7F,IAAA,EAAM,MAAA,CAAmC,IAAA,EAAM,MAAA,EAAQ,gCAAgC,aAAa,CAAA;AAAA,MACpG,YAAA,EAAc,OAAA,CAAQ,IAAA,EAAM,YAAA,EAAc,mBAAmB;AAAA,KAC9D;AACA,IAAA,IAAI,KAAK,OAAA,KAAY,KAAA,CAAM,SAAS,MAAM,UAAA,CAAW,mBAAmB,gBAAgB,CAAA;AACxF,IAAA,OAAO,IAAA;AAAA,EACR,CAAC,CAAA;AACF;AAGO,SAAS,aAAa,IAAA,EAAmD;AAC/E,EAAA,OAAO,OAAA,CAAkB;AAAA,IACxB,gBAAgB,IAAA,CAAK,cAAA;AAAA,IACrB,SAAS,IAAA,CAAK,OAAA;AAAA,IACd,UAAU,IAAA,CAAK,QAAA;AAAA,IACf,SAAS,IAAA,CAAK,OAAA;AAAA,IACd,qBAAqB,IAAA,CAAK,mBAAA;AAAA,IAC1B,MAAM,IAAA,CAAK,IAAA;AAAA,IACX,UAAA,EAAY,KAAA,CAAM,IAAA,CAAK,YAAY;AAAA,GACnC,CAAA;AACF;AAEO,SAAS,kBAAA,CAAmB,OAAgB,OAAA,EAAkB;AACpE,EAAA,OAAO,MAAM,MAAM;AAClB,IAAA,MAAM,IAAA,GAAO,cAAA,CAAe,KAAA,EAAO,OAAO,CAAA;AAC1C,IAAA,OAAO;AAAA,MACN,MAAA,EAAQ,gBAAgB,OAAO,CAAA;AAAA,MAC/B,KAAA,EAAO,SAAA,CAAU,IAAA,EAAM,OAAO,CAAA;AAAA,MAC9B,UAAA,EAAY,UAAA,CAAW,IAAA,EAAM,YAAA,EAAc,kBAAkB,CAAA;AAAA,MAC7D,MAAA,EAAQ,WAAW,IAAI;AAAA,KACxB;AAAA,EACD,CAAC,CAAA;AACF;AAEO,SAAS,qBAAA,CAAsB,OAAgB,OAAA,EAAkB;AACvE,EAAA,OAAO,MAAM,MAAM;AAClB,IAAA,MAAM,IAAA,GAAO,cAAA,CAAe,KAAA,EAAO,OAAO,CAAA;AAC1C,IAAA,MAAM,OAAA,GAAU,YAAA,CAAa,IAAA,EAAM,SAAA,EAAW,eAAe,CAAA;AAC7D,IAAA,MAAM,UAAA,GAAa,mBAAA,CAAoB,OAAA,EAAS,YAAA,EAAc,4BAA4B,GAAG,CAAA;AAC7F,IAAA,IAAI,eAAe,MAAA,IAAa,UAAA,GAAa,KAAK,MAAM,UAAA,CAAW,iBAAiB,0BAA0B,CAAA;AAC9G,IAAA,MAAMA,UAAS,OAAA,CAAkB;AAAA,MAChC,UAAA,EAAY,UAAA,CAAW,OAAA,EAAS,YAAA,EAAc,0BAA0B,CAAA;AAAA,MACxE,cAAA,EAAgB,UAAA,CAAW,OAAA,EAAS,gBAAA,EAAkB,8BAA8B,CAAA;AAAA,MACpF,OAAA,EAAS,UAAA,CAAW,OAAA,EAAS,SAAA,EAAW,uBAAuB,CAAA;AAAA,MAC/D,OAAA,EAAS,WAAA,CAAY,OAAA,EAAS,SAAA,EAAW,yBAAyB,CAAC,CAAA;AAAA,MACnE,oBAAA,EAAsB,WAAA,CAAY,OAAA,EAAS,sBAAA,EAAwB,sCAAsC,CAAC,CAAA;AAAA,MAC1G,WAAW,KAAA,CAAM,OAAA,CAAQ,OAAA,EAAS,WAAA,EAAa,yBAAyB,CAAC,CAAA;AAAA,MACzE,YAAY,KAAA,CAAM,OAAA,CAAQ,OAAA,EAAS,YAAA,EAAc,0BAA0B,CAAC,CAAA;AAAA,MAC5E,OAAA,EAAS,MAAA,CAAO,OAAA,EAAS,SAAA,EAAW,0BAA0B,uBAAuB,CAAA;AAAA,MACrF,MAAA,EAAQ,MAAA,CAAO,OAAA,EAAS,QAAA,EAAU,8BAA8B,sBAAsB,CAAA;AAAA,MACtF;AAAA,KACA,CAAA;AACD,IAAA,OAAO;AAAA,MACN,MAAA,EAAQ,gBAAgB,OAAO,CAAA;AAAA,MAC/B,MAAA,EAAQ,WAAW,IAAI,CAAA;AAAA,MACvB,MAAA,EAAAA,OAAAA;AAAA,MACA,UAAA,EAAYA,QAAO,YAAY,CAAA;AAAA,MAC/B,cAAA,EAAgBA,QAAO,gBAAgB,CAAA;AAAA,MACvC,OAAA,EAASA,QAAO,SAAS;AAAA,KAC1B;AAAA,EACD,CAAC,CAAA;AACF;AAMO,SAAS,oBAAA,CAAqB,OAAgB,OAAA,EAAkB;AACtE,EAAA,OAAO,MAAM,MAAM;AAClB,IAAA,MAAM,IAAA,GAAO,cAAA,CAAe,KAAA,EAAO,OAAO,CAAA;AAC1C,IAAA,MAAM,OAAA,GAAU,YAAA,CAAa,IAAA,EAAM,SAAA,EAAW,eAAe,CAAA;AAC7D,IAAA,MAAMA,UAAS,OAAA,CAAkB;AAAA,MAChC,UAAA,EAAY,UAAA,CAAW,OAAA,EAAS,YAAA,EAAc,0BAA0B,CAAA;AAAA,MACxE,cAAA,EAAgB,UAAA,CAAW,OAAA,EAAS,gBAAA,EAAkB,8BAA8B,CAAA;AAAA,MACpF,OAAA,EAAS,UAAA,CAAW,OAAA,EAAS,SAAA,EAAW,uBAAuB,CAAA;AAAA,MAC/D,OAAA,EAAS,WAAA,CAAY,OAAA,EAAS,SAAA,EAAW,yBAAyB,CAAC,CAAA;AAAA,MACnE,oBAAA,EAAsB,WAAA,CAAY,OAAA,EAAS,sBAAA,EAAwB,sCAAsC,CAAC,CAAA;AAAA,MAC1G,WAAW,KAAA,CAAM,OAAA,CAAQ,OAAA,EAAS,WAAA,EAAa,yBAAyB,CAAC;AAAA,KACzE,CAAA;AACD,IAAA,OAAO;AAAA,MACN,MAAA,EAAQ,gBAAgB,OAAO,CAAA;AAAA,MAC/B,MAAA,EAAQ,WAAW,IAAI,CAAA;AAAA,MACvB,MAAA,EAAAA,OAAAA;AAAA,MACA,UAAA,EAAYA,QAAO,YAAY,CAAA;AAAA,MAC/B,cAAA,EAAgBA,QAAO,gBAAgB,CAAA;AAAA,MACvC,OAAA,EAASA,QAAO,SAAS;AAAA,KAC1B;AAAA,EACD,CAAC,CAAA;AACF;AAGO,SAAS,qBAAA,CAAsB,OAAgB,OAAA,EAAkB;AACvE,EAAA,OAAO,MAAM,MAAM;AAClB,IAAA,MAAM,IAAA,GAAO,cAAA,CAAe,KAAA,EAAO,OAAO,CAAA;AAC1C,IAAA,MAAME,OAAAA,GAAS,YAAA,CAAa,IAAA,EAAM,QAAA,EAAU,cAAc,CAAA;AAC1D,IAAA,MAAM,UAAA,GAAa,mBAAA,CAAoBA,OAAAA,EAAQ,YAAA,EAAc,2BAA2B,GAAG,CAAA;AAC3F,IAAA,IAAI,eAAe,MAAA,IAAa,UAAA,GAAa,KAAK,MAAM,UAAA,CAAW,iBAAiB,yBAAyB,CAAA;AAC7G,IAAA,OAAO;AAAA,MACN,MAAA,EAAQ,gBAAgB,OAAO,CAAA;AAAA,MAC/B,KAAA,EAAO,SAAA,CAAU,IAAA,EAAM,OAAO,CAAA;AAAA,MAC9B,UAAA,EAAY,UAAA,CAAW,IAAA,EAAM,YAAA,EAAc,kBAAkB,CAAA;AAAA,MAC7D,KAAA,EAAO,WAAA,CAAY,IAAA,EAAM,OAAA,EAAS,eAAe,CAAC,CAAA;AAAA;AAAA,MAElD,OAAA,EAAS,UAAA,CAAW,IAAA,EAAM,SAAA,EAAW,eAAe,CAAA;AAAA,MACpD,QAAQ,OAAA,CAAkB;AAAA,QACzB,YAAY,KAAA,CAAM,OAAA,CAAQA,OAAAA,EAAQ,YAAA,EAAc,yBAAyB,CAAC,CAAA;AAAA,QAC1E,OAAA,EAAS,MAAA,CAAOA,OAAAA,EAAQ,SAAA,EAAW,0BAA0B,sBAAsB,CAAA;AAAA,QACnF,MAAA,EAAQ,MAAA,CAAOA,OAAAA,EAAQ,QAAA,EAAU,8BAA8B,qBAAqB,CAAA;AAAA,QACpF;AAAA,OACA;AAAA,KACF;AAAA,EACD,CAAC,CAAA;AACF;AAGO,SAAS,UAAA,CAAW,YAAoB,KAAA,EAAuB;AACrE,EAAA,OAAO,YAAA,CAAa,UAAA,EAAY,CAAA,EAAG,KAAK,CAAA,CAAE,CAAA;AAC3C;AAOO,SAAS,QAAA,CAAS,MAAA,EAAiC,MAAA,EAAqB,UAAA,EAA2C;AACzH,EAAA,OAAO,MAAA,KAAW,UAAa,KAAA,CAAM,MAAA,EAAQ,OAAO,KAAA,EAAO,MAAA,CAAO,OAAO,UAAU,CAAA;AACpF;AAQO,SAAS,eAAA,CAAgB,KAAA,EAAiB,KAAA,EAA2BA,OAAAA,EAAsC;AACjH,EAAA,IAAI,KAAA,KAAU,QAAW,OAAO,KAAA;AAChC,EAAA,IAAIA,OAAAA,KAAW,QAAW,OAAO,EAAE,GAAG,KAAA,EAAO,KAAA,EAAO,SAAS,WAAA,EAAY;AACzE,EAAA,OAAO,EAAE,GAAG,KAAA,EAAO,GAAGA,SAAQ,KAAA,EAAM;AACrC;AAEO,SAAS,YAAY,OAAA,EAAwD;AACnF,EAAA,OAAO,OAAA,CAAmC,OAAA,KAAY,MAAA,GAAY,EAAE,KAAA,EAAO,KAAA,EAAM,GAAI,EAAE,KAAA,EAAO,IAAA,EAAM,OAAA,EAAS,CAAA;AAC9G;AAEO,SAAS,cAAA,CAAe,OAAgB,OAAA,EAAkB;AAChE,EAAA,OAAO,MAAM,MAAM;AAClB,IAAA,MAAM,IAAA,GAAO,cAAA,CAAe,KAAA,EAAO,OAAO,CAAA;AAC1C,IAAA,OAAO,EAAE,MAAA,EAAQ,eAAA,CAAgB,OAAO,CAAA,EAAG,MAAA,EAAQ,WAAW,IAAI,CAAA,EAAG,UAAA,EAAY,UAAA,CAAW,MAAM,YAAA,EAAc,kBAAkB,GAAG,UAAA,EAAY,cAAA,CAAe,IAAI,CAAA,EAAE;AAAA,EACvK,CAAC,CAAA;AACF;AAEO,SAAS,cAAA,CAAe,OAAgB,OAAA,EAAkB;AAChE,EAAA,OAAO,MAAM,MAAM;AAClB,IAAA,MAAM,IAAA,GAAO,cAAA,CAAe,KAAA,EAAO,OAAO,CAAA;AAC1C,IAAA,OAAA,CAAQ,IAAA,EAAM,OAAO,WAAW,CAAA;AAChC,IAAA,OAAO;AAAA,MACN,MAAA,EAAQ,gBAAgB,OAAO,CAAA;AAAA,MAC/B,KAAA,EAAO,SAAA,CAAU,IAAA,EAAM,OAAO,CAAA;AAAA,MAC9B,cAAA,EAAgB,UAAA,CAAW,IAAA,EAAM,gBAAA,EAAkB,sBAAsB,CAAA;AAAA,MACzE,MAAA,EAAQ,MAAA,CAAO,IAAA,EAAM,QAAA,EAAU,gBAAgB,cAAc,CAAA;AAAA,MAC7D,cAAA,EAAgB,WAAA,CAAY,IAAA,EAAM,gBAAA,EAAkB,wBAAwB,CAAC;AAAA,KAC9E;AAAA,EACD,CAAC,CAAA;AACF;AAEO,SAAS,qBAAA,CAAsB,OAAgB,OAAA,EAAkB;AACvE,EAAA,OAAO,MAAM,MAAM;AAClB,IAAA,MAAM,IAAA,GAAO,cAAA,CAAe,KAAA,EAAO,OAAO,CAAA;AAC1C,IAAA,OAAO,EAAE,MAAA,EAAQ,eAAA,CAAgB,OAAO,CAAA,EAAG,KAAA,EAAO,UAAU,IAAA,EAAM,OAAO,GAAG,UAAA,EAAY,UAAA,CAAW,MAAM,YAAA,EAAc,kBAAkB,GAAG,OAAA,EAAS,kBAAA,CAAmB,IAAI,CAAA,EAAE;AAAA,EAC/K,CAAC,CAAA;AACF;AAGO,SAAS,gBAAA,CAAiB,OAAgB,OAAA,EAAkB;AAClE,EAAA,OAAO,MAAM,MAAM;AAClB,IAAA,MAAM,IAAA,GAAO,cAAA,CAAe,KAAA,EAAO,OAAO,CAAA;AAC1C,IAAA,OAAO,EAAE,MAAA,EAAQ,eAAA,CAAgB,OAAO,GAAG,KAAA,EAAO,SAAA,CAAU,IAAA,EAAM,OAAO,GAAG,UAAA,EAAY,UAAA,CAAW,IAAA,EAAM,YAAA,EAAc,kBAAkB,CAAA,EAAE;AAAA,EAC5I,CAAC,CAAA;AACF;AAEO,SAAS,iBAAA,CAAkB,OAAgB,OAAA,EAAkB;AACnE,EAAA,OAAO,MAAM,MAAM;AAClB,IAAA,MAAM,IAAA,GAAO,cAAA,CAAe,KAAA,EAAO,OAAO,CAAA;AAC1C,IAAA,OAAO;AAAA,MACN,MAAA,EAAQ,gBAAgB,OAAO,CAAA;AAAA,MAC/B,KAAA,EAAO,SAAA,CAAU,IAAA,EAAM,OAAO,CAAA;AAAA,MAC9B,cAAA,EAAgB,UAAA,CAAW,IAAA,EAAM,gBAAA,EAAkB,sBAAsB,CAAA;AAAA,MACzE,OAAA,EAAS,UAAA,CAAW,IAAA,EAAM,SAAA,EAAW,eAAe;AAAA,KACrD;AAAA,EACD,CAAC,CAAA;AACF;AAEO,SAAS,aAAA,CAAc,OAAgB,OAAA,EAA2E;AACxH,EAAA,OAAO,MAAM,MAAM;AAClB,IAAA,MAAM,IAAA,GAAO,cAAA,CAAe,KAAA,EAAO,OAAO,CAAA;AAC1C,IAAA,OAAO,EAAE,MAAA,EAAQ,eAAA,CAAgB,OAAO,CAAA,EAAG,KAAA,EAAO,WAAA,CAAY,IAAA,EAAM,OAAA,EAAS,aAAA,EAAe,CAAC,CAAA,EAAE;AAAA,EAChG,CAAC,CAAA;AACF;AAgBA,IAAM,eAAe,MAAA,CAAO,MAAA,CAAO,CAAC,SAAA,EAAW,QAAQ,CAAU,CAAA;AAEjE,IAAM,uBAAA,GAA0B,OAAO,MAAA,CAAO,CAAC,UAAU,UAAA,EAAY,cAAA,EAAgB,YAAY,CAAU,CAAA;AAC3G,IAAM,gBAAgB,MAAA,CAAO,MAAA,CAAO,CAAC,mBAAA,EAAqB,8BAA8B,CAAU,CAAA;AAClG,IAAM,iBAAiB,MAAA,CAAO,MAAA,CAAO,CAAC,YAAA,EAAc,QAAQ,CAAU,CAAA;AACtE,IAAM,cAAc,MAAA,CAAO,gBAAA;AAO3B,SAAS,kBAAkB,KAAA,EAAyB;AACnD,EAAA,MAAM,WAAA,GAAc,KAAA,CAAM,aAAa,CAAA,KAAM,MAAA,GAAY,SAAY,MAAA,CAAO,KAAA,EAAO,aAAA,EAAe,aAAA,EAAe,uBAAuB,CAAA;AACxI,EAAA,OAAO;AAAA,IACN,OAAA,EAAS,UAAA,CAAW,KAAA,EAAO,SAAA,EAAW,mBAAmB,CAAA;AAAA,IACzD,SAAA,EAAW,UAAA,CAAW,KAAA,EAAO,WAAA,EAAa,qBAAqB,CAAA;AAAA,IAC/D,kBAAA,EAAoB,WAAA,CAAY,KAAA,EAAO,oBAAA,EAAsB,gCAAgC,WAAW,CAAA;AAAA,IACxG,QAAA,EAAU,UAAA,CAAW,KAAA,EAAO,UAAA,EAAY,oBAAoB,CAAA;AAAA,IAC5D,OAAA,EAAS,UAAA,CAAW,KAAA,EAAO,SAAA,EAAW,mBAAmB,CAAA;AAAA,IACzD,WAAA,EAAa,UAAA,CAAW,KAAA,EAAO,aAAA,EAAe,uBAAuB,CAAA;AAAA,IACrE,SAAA,EAAW,UAAA,CAAW,KAAA,EAAO,WAAA,EAAa,qBAAqB,CAAA;AAAA,IAC/D,QAAA,EAAU,WAAA,CAAY,KAAA,EAAO,UAAA,EAAY,sBAAsB,WAAW,CAAA;AAAA,IAC1E,kBAAA,EAAoB,kBAAA,CAAmB,KAAA,EAAO,oBAAA,EAAsB,8BAA8B,CAAA;AAAA,IAClG,aAAA,EAAe,UAAA,CAAW,KAAA,EAAO,eAAA,EAAiB,yBAAyB,CAAA;AAAA,IAC3E,WAAA,EAAa,kBAAA,CAAmB,KAAA,EAAO,aAAA,EAAe,uBAAuB,CAAA;AAAA,IAC7E,YAAY,KAAA,CAAM,OAAA,CAAQ,KAAA,EAAO,YAAA,EAAc,sBAAsB,CAAC,CAAA;AAAA,IACtE,YAAY,KAAA,CAAM,OAAA,CAAQ,KAAA,EAAO,YAAA,EAAc,sBAAsB,CAAC,CAAA;AAAA,IACtE,qBAAA,EAAuB,UAAA,CAAW,KAAA,EAAO,uBAAA,EAAyB,iCAAiC,CAAA;AAAA,IACnG,qBAAA,EAAuB,MAAA,CAAO,KAAA,EAAO,uBAAA,EAAyB,yBAAyB,iCAAiC,CAAA;AAAA,IACxH;AAAA,GACD;AACD;AAGA,SAAS,UAAU,KAAA,EAAyB;AAC3C,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,KAAA,EAAO,OAAA,EAAS,cAAc,iBAAiB,CAAA;AACpE,EAAA,IAAI,UAAU,SAAA,EAAW;AACxB,IAAA,OAAO,EAAE,KAAA,EAAO,OAAA,EAAS,UAAA,CAAW,KAAA,EAAO,SAAA,EAAW,mBAAmB,CAAA,EAAG,SAAA,EAAW,UAAA,CAAW,KAAA,EAAO,WAAA,EAAa,qBAAqB,CAAA,EAAE;AAAA,EAC9I;AACA,EAAA,OAAO,EAAE,OAAO,MAAA,EAAQ,MAAA,CAAO,OAAO,QAAA,EAAU,cAAA,EAAgB,kBAAkB,CAAA,EAAE;AACrF;AAEA,SAAS,aAAa,GAAA,EAA6B;AAClD,EAAA,MAAM,IAAA,GAAO,cAAA,CAAe,GAAA,EAAK,KAAK,CAAA;AACtC,EAAA,MAAM,OAAA,GAAU,UAAA,CAAW,IAAA,EAAM,SAAA,EAAW,aAAa,CAAA;AACzD,EAAA,MAAM,QAAA,GAAW,UAAA,CAAW,IAAA,EAAM,UAAA,EAAY,cAAc,CAAA;AAC5D,EAAA,MAAM,OAAA,GAAU,UAAA,CAAW,IAAA,EAAM,SAAA,EAAW,aAAa,CAAA;AACzD,EAAA,MAAM,KAAA,GAAQ,YAAA,CAAa,IAAA,EAAM,OAAA,EAAS,WAAW,CAAA;AACrD,EAAA,IAAI,UAAA,CAAW,OAAO,SAAA,EAAW,mBAAmB,MAAM,OAAA,EAAS,MAAM,UAAA,CAAW,iBAAA,EAAmB,mBAAmB,CAAA;AAC1H,EAAA,IAAI,UAAA,CAAW,OAAO,UAAA,EAAY,oBAAoB,MAAM,QAAA,EAAU,MAAM,UAAA,CAAW,iBAAA,EAAmB,oBAAoB,CAAA;AAC9H,EAAA,IAAI,UAAA,CAAW,OAAO,SAAA,EAAW,mBAAmB,MAAM,OAAA,EAAS,MAAM,UAAA,CAAW,iBAAA,EAAmB,mBAAmB,CAAA;AAC1H,EAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,KAAA,EAAO,YAAA,EAAc,sBAAsB,CAAA;AACpE,EAAA,MAAM,gBAAA,GAAmB,IAAA,CAAK,IAAA,EAAM,kBAAA,EAAoB,sBAAsB,CAAA;AAC9E,EAAA,IAAI,OAAA,GAA2B,IAAA;AAC/B,EAAA,IAAI,gBAAA,EAAkB,OAAA,GAAU,YAAA,CAAa,IAAA,EAAM,WAAW,aAAa,CAAA;AAAA,OAAA,IAClE,KAAK,SAAS,CAAA,KAAM,MAAM,MAAM,UAAA,CAAW,iBAAiB,aAAa,CAAA;AAGlF,EAAA,MAAM,QAAQ,OAAA,CAAkB;AAAA,IAC/B,KAAA,EAAO,kBAAkB,KAAK,CAAA;AAAA,IAC9B,OAAA;AAAA,IACA,gBAAA;AAAA,IACA,KAAA,EAAO,YAAA,CAAa,IAAA,EAAM,OAAA,EAAS,WAAW,CAAA;AAAA,IAC9C,OAAO,SAAA,CAAU,YAAA,CAAa,IAAA,EAAM,OAAA,EAAS,WAAW,CAAC;AAAA,GACzD,CAAA;AACD,EAAA,OAAO;AAAA,IACN,KAAA;AAAA,IACA,OAAA;AAAA,IACA,QAAA;AAAA,IACA,OAAA;AAAA,IACA,QAAA;AAAA,IACA,WAAA,EAAa,OAAA,CAAQ,IAAA,EAAM,WAAA,EAAa,eAAe,CAAA;AAAA,IACvD,oBAAA,EAAsB,OAAA,CAAQ,IAAA,EAAM,oBAAA,EAAsB,wBAAwB;AAAA,GACnF;AACD;AAaA,SAAS,eAAe,KAAA,EAA6B;AACpD,EAAA,MAAM,UAAA,GAAa,YAAA,CAAa,KAAA,EAAO,YAAA,EAAc,kBAAkB,CAAA;AACvE,EAAA,MAAM,IAAA,GAAO,MAAA,CAAO,UAAA,EAAY,MAAA,EAAQ,kBAAkB,uBAAuB,CAAA;AACjF,EAAA,QAAQ,IAAA;AAAM,IACb,KAAK,WAAA;AACJ,MAAA,OAAO,EAAE,IAAA,EAAK;AAAA,IACf,KAAK,OAAA;AACJ,MAAA,OAAO;AAAA,QACN,IAAA;AAAA,QACA,aAAA,EAAe,OAAA,CAAQ,UAAA,EAAY,aAAA,EAAe,8BAA8B,CAAA;AAAA,QAChF,OAAA,EAAS,MAAA,CAAO,UAAA,EAAY,SAAA,EAAW,0BAA0B,0BAA0B,CAAA;AAAA,QAC3F,MAAA,EAAQ,MAAA,CAAO,UAAA,EAAY,QAAA,EAAU,8BAA8B,yBAAyB;AAAA,OAC7F;AAAA,IACD,KAAK,SAAA;AACJ,MAAA,OAAO;AAAA,QACN,IAAA;AAAA,QACA,aAAA,EAAe,OAAA,CAAQ,UAAA,EAAY,aAAA,EAAe,8BAA8B,CAAA;AAAA,QAChF,UAAA,EAAY,MAAA,CAAO,UAAA,EAAY,YAAA,EAAc,0BAA0B,6BAA6B;AAAA,OACrG;AAAA,IACD,KAAK,aAAA;AACJ,MAAA,OAAO,EAAE,MAAM,MAAA,EAAQ,MAAA,CAAO,YAAY,QAAA,EAAU,mBAAA,EAAqB,yBAAyB,CAAA,EAAsD;AAAA,IACzJ,KAAK,WAAA;AACJ,MAAA,OAAO,EAAE,MAAM,MAAA,EAAQ,MAAA,CAAO,YAAY,QAAA,EAAU,4BAAA,EAA8B,yBAAyB,CAAA,EAAE;AAAA;AAEhH;AAEA,SAAS,gBAAgB,KAAA,EAAkD;AAC1E,EAAA,OAAQ,4BAAA,CAAmD,SAAS,KAAK,CAAA;AAC1E;AAOO,SAAS,eAAA,CAAgB,QAAqB,UAAA,EAA8B;AAClF,EAAA,QAAQ,WAAW,IAAA;AAAM,IACxB,KAAK,WAAA;AACJ,MAAA,MAAA,CAAO,MAAA,GAAS,WAAA;AAChB,MAAA,MAAA,CAAO,WAAA,GAAc,EAAE,OAAA,EAAS,WAAA,EAAa,QAAQ,UAAA,EAAW;AAChE,MAAA;AAAA,IACD,KAAK,OAAA;AACJ,MAAA,MAAA,CAAO,YAAA,IAAgB,CAAA;AACvB,MAAA,MAAA,CAAO,gBAAgB,UAAA,CAAW,aAAA;AAClC,MAAA,MAAA,CAAO,cAAc,EAAE,OAAA,EAAS,WAAW,OAAA,EAAS,MAAA,EAAQ,WAAW,MAAA,EAAO;AAC9E,MAAA;AAAA,IACD,KAAK,SAAA;AACJ,MAAA,MAAA,CAAO,gBAAgB,UAAA,CAAW,aAAA;AAClC,MAAA,MAAA,CAAO,iBAAiB,UAAA,CAAW,UAAA;AACnC,MAAA;AAAA,IACD,KAAK,aAAA;AACJ,MAAA,MAAA,CAAO,MAAA,GAAS,aAAA;AAChB,MAAA,IAAI,eAAA,CAAgB,UAAA,CAAW,MAAM,CAAA,EAAG,MAAA,CAAO,WAAA,GAAc,EAAE,OAAA,EAAS,aAAA,EAAe,MAAA,EAAQ,UAAA,CAAW,MAAA,EAAO;AAAA,WAC5G,MAAA,CAAO,iBAAiB,UAAA,CAAW,MAAA;AACxC,MAAA;AAAA,IACD,KAAK,WAAA;AACJ,MAAA,MAAA,CAAO,MAAA,GAAS,WAAA;AAChB,MAAA,MAAA,CAAO,cAAc,EAAE,OAAA,EAAS,WAAA,EAAa,MAAA,EAAQ,WAAW,MAAA,EAAO;AACvE,MAAA;AAAA;AAEF,EAAA,MAAA,CAAO,KAAA,GAAQ,MAAA;AAChB;AAOO,SAAS,cAAA,CACf,KAAA,EACA,OAAA,EACA,OAAA,EAC2D;AAG3D,EAAA,IAAI,KAAA,CAAM,KAAA,KAAU,OAAA,CAAQ,aAAA,EAAe,OAAO,OAAA;AAClD,EAAA,IAAI,KAAA,CAAM,MAAA,KAAW,aAAA,EAAe,OAAO,iBAAA;AAC3C,EAAA,IAAI,KAAA,CAAM,QAAA,GAAW,OAAA,EAAS,OAAO,cAAA;AACrC,EAAA,OAAO,MAAA;AACR;AAEO,SAAS,kBAAA,CAAmB,GAAA,EAAe,OAAA,EAAuBD,MAAAA,EAAuC;AAC/G,EAAA,OAAO,OAAA,CAAgC;AAAA,IACtC,MAAA,EAAQ,aAAA;AAAA,IACR,SAAS,GAAA,CAAI,GAAA;AAAA,IACb,UAAU,GAAA,CAAI,QAAA;AAAA,IACd,SAAS,GAAA,CAAI,OAAA;AAAA,IACb,aAAa,OAAA,CAAQ,WAAA;AAAA,IACrB,WAAA,EAAa,KAAA,CAAM,OAAA,CAAQ,aAAa,CAAA;AAAA,IACxC,oBAAoB,OAAA,CAAQ,kBAAA;AAAA,IAC5B,SAAA,EAAW,MAAMA,MAAK,CAAA;AAAA,IACtB,mBAAmB,GAAA,CAAI,YAAA;AAAA,IACvB,gBAAA,EAAkB,KAAA,CAAM,GAAA,CAAI,aAAa,CAAA;AAAA,IACzC,uBAAA,EAAyB,KAAA,CAAM,GAAA,CAAI,oBAAoB,CAAA;AAAA,IACvD,YAAY,GAAA,CAAI,KAAA;AAAA,IAChB,qBAAqB,GAAA,CAAI,cAAA;AAAA,IACzB,kBAAA,EAAoB,KAAA,CAAM,OAAA,CAAQ,oBAAoB;AAAA,GACtD,CAAA;AACF;AAEO,SAAS,qBAAA,CAAsB,MAAA,EAAqB,OAAA,EAAuBA,MAAAA,EAAuC;AACxH,EAAA,OAAO,OAAA,CAAgC;AAAA,IACtC,MAAA,EAAQ,iBAAA;AAAA,IACR,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,YAAY,MAAA,CAAO,GAAA;AAAA,IACnB,gBAAgB,MAAA,CAAO,cAAA;AAAA,IACvB,UAAU,MAAA,CAAO,QAAA;AAAA,IACjB,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,aAAa,OAAA,CAAQ,WAAA;AAAA,IACrB,WAAA,EAAa,KAAA,CAAM,OAAA,CAAQ,aAAa,CAAA;AAAA,IACxC,oBAAoB,OAAA,CAAQ,kBAAA;AAAA,IAC5B,SAAA,EAAW,MAAMA,MAAK,CAAA;AAAA,IACtB,mBAAmB,MAAA,CAAO,YAAA;AAAA,IAC1B,gBAAA,EAAkB,KAAA,CAAM,MAAA,CAAO,aAAa,CAAA;AAAA,IAC5C,uBAAA,EAAyB,KAAA,CAAM,MAAA,CAAO,oBAAoB,CAAA;AAAA,IAC1D,YAAY,MAAA,CAAO,KAAA;AAAA,IACnB,qBAAqB,MAAA,CAAO,cAAA;AAAA,IAC5B,kBAAkB,MAAA,CAAO,WAAA;AAAA,IACzB,kBAAA,EAAoB,KAAA,CAAM,OAAA,CAAQ,oBAAoB;AAAA,GACtD,CAAA;AACF;AAQO,SAAS,iBAAA,CACf,GAAA,EACA,OAAA,EACA,OAAA,EACkH;AAClH,EAAA,IAAI,GAAA,CAAI,KAAA,KAAU,OAAA,CAAQ,aAAA,EAAe,OAAO,OAAA;AAChD,EAAA,IAAI,GAAA,CAAI,MAAA,KAAW,WAAA,EAAa,OAAO,gBAAA;AACvC,EAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,KAAA,CAAM,OAAO,CAAA;AAC/B,EAAA,IAAI,KAAA,CAAM,OAAO,CAAA,KAAM,QAAA,EAAU,OAAO,eAAA;AACxC,EAAA,IAAI,KAAA,CAAM,QAAQ,CAAA,KAAM,QAAA,EAAU,OAAO,kBAAA;AACzC,EAAA,IAAI,GAAA,CAAI,QAAA,GAAW,OAAA,EAAS,OAAO,cAAA;AACnC,EAAA,OAAO,MAAA;AACR;AAEO,SAAS,qBAAA,CAAsB,GAAA,EAAe,OAAA,EAA0BA,MAAAA,EAAuC;AACrH,EAAA,OAAO,OAAA,CAAgC;AAAA,IACtC,GAAI,kBAAA,CAAmB,GAAA,EAAK,OAAA,EAASA,MAAK,CAAA;AAAA,IAC1C,MAAA,EAAQ,mBAAA;AAAA,IACR,OAAO,EAAE,OAAA,EAAS,QAAQ,OAAA,EAAS,SAAA,EAAW,QAAQ,SAAA;AAAU,GAChE,CAAA;AACF;AAQO,SAAS,eAAA,CAAgB,KAAe,OAAA,EAAgC;AAC9E,EAAA,GAAA,CAAI,QAAQ,OAAA,CAAkB,EAAE,GAAI,GAAA,CAAI,OAAkB,KAAA,EAAO,EAAE,KAAA,EAAO,SAAA,EAAW,SAAS,OAAA,CAAQ,OAAA,EAAS,WAAW,OAAA,CAAQ,SAAA,IAAa,CAAA;AAC/I,EAAA,YAAA,CAAa,KAAK,OAAO,CAAA;AAC1B;AAEO,SAAS,kBAAkB,MAAA,EAAqH;AACtJ,EAAA,OAAO,QAAsC,EAAE,OAAA,EAAS,KAAA,EAAO,OAAA,EAAS,QAAQ,CAAA;AACjF;AAGO,SAAS,YAAA,CAAa,OAA+B,OAAA,EAA6B;AACxF,EAAA,KAAA,CAAM,MAAA,GAAS,SAAA;AACf,EAAA,KAAA,CAAM,YAAA,GAAe,CAAA;AACrB,EAAA,KAAA,CAAM,gBAAgB,OAAA,CAAQ,aAAA;AAC9B,EAAA,KAAA,CAAM,uBAAuB,OAAA,CAAQ,oBAAA;AACrC,EAAA,KAAA,CAAM,KAAA,IAAS,CAAA;AACf,EAAA,KAAA,CAAM,KAAA,GAAQ,MAAA;AACf;AAMA,SAAS,SAAS,KAAA,EAAmD;AACpE,EAAA,OAAO,KAAA,KAAU,MAAA,GAAY,MAAA,GAAY,EAAE,OAAO,KAAA,CAAM,KAAA,EAAO,KAAA,EAAO,KAAA,CAAM,KAAA,EAAO,SAAA,EAAW,KAAA,CAAM,KAAA,CAAM,WAAW,CAAA,EAAE;AACxH;AAEO,SAAS,MAAA,CAAO,GAAA,EAAe,KAAA,GAAgC,GAAA,CAAI,KAAA,EAAe;AACxF,EAAA,MAAM,QAAQ,GAAA,CAAI,KAAA;AAClB,EAAA,OAAO;AAAA,IACN,SAAS,GAAA,CAAI,GAAA;AAAA,IACb,UAAU,GAAA,CAAI,QAAA;AAAA,IACd,SAAS,GAAA,CAAI,OAAA;AAAA,IACb,KAAA,EAAO,MAAM,OAAO,CAAA;AAAA,IACpB,OAAA,EAAS,MAAM,SAAS,CAAA;AAAA,IACxB,gBAAA,EAAkB,MAAM,kBAAkB,CAAA;AAAA,IAC1C,KAAA,EAAO,MAAM,OAAO,CAAA;AAAA,IACpB,KAAA,EAAO,MAAM,OAAO,CAAA;AAAA,IACpB,QAAQ,GAAA,CAAI,MAAA;AAAA,IACZ,cAAc,GAAA,CAAI,YAAA;AAAA,IAClB,WAAA,EAAa,KAAA,CAAM,GAAA,CAAI,aAAa,CAAA;AAAA,IACpC,kBAAA,EAAoB,KAAA,CAAM,GAAA,CAAI,oBAAoB,CAAA;AAAA,IAClD,SAAA,EAAW,KAAA,CAAM,GAAA,CAAI,WAAW,CAAA;AAAA,IAChC,aAAa,GAAA,CAAI,aAAA,KAAkB,SAAY,MAAA,GAAY,KAAA,CAAM,IAAI,aAAa,CAAA;AAAA,IAClF,gBAAgB,GAAA,CAAI,cAAA;AAAA,IACpB,KAAA,EAAO,KAAA,KAAU,MAAA,GAAY,GAAA,CAAI,QAAQ,KAAA,CAAM,KAAA;AAAA,IAC/C,KAAA,EAAO,SAAS,KAAK;AAAA,GACtB;AACD;AAEO,SAAS,SAAA,CAAU,MAAA,EAAqB,KAAA,GAAgC,MAAA,CAAO,KAAA,EAAe;AACpG,EAAA,OAAO;AAAA,IACN,YAAY,MAAA,CAAO,GAAA;AAAA,IACnB,gBAAgB,MAAA,CAAO,cAAA;AAAA,IACvB,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,UAAU,MAAA,CAAO,QAAA;AAAA,IACjB,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,qBAAqB,MAAA,CAAO,mBAAA;AAAA,IAC5B,eAAA,EAAiB,KAAA,CAAM,MAAA,CAAO,QAAQ,CAAA;AAAA,IACtC,MAAM,MAAA,CAAO,IAAA;AAAA,IACb,QAAQ,MAAA,CAAO,MAAA;AAAA,IACf,cAAc,MAAA,CAAO,YAAA;AAAA,IACrB,WAAA,EAAa,KAAA,CAAM,MAAA,CAAO,aAAa,CAAA;AAAA,IACvC,kBAAA,EAAoB,KAAA,CAAM,MAAA,CAAO,oBAAoB,CAAA;AAAA,IACrD,SAAA,EAAW,KAAA,CAAM,MAAA,CAAO,WAAW,CAAA;AAAA,IACnC,aAAa,MAAA,CAAO,WAAA;AAAA,IACpB,gBAAgB,MAAA,CAAO,cAAA;AAAA,IACvB,KAAA,EAAO,KAAA,KAAU,MAAA,GAAY,MAAA,CAAO,QAAQ,KAAA,CAAM,KAAA;AAAA,IAClD,KAAA,EAAO,SAAS,KAAK;AAAA,GACtB;AACD;AAGO,SAAS,YAAA,CAAa,QAAqB,SAAA,EAA2B;AAC5E,EAAA,OAAO;AAAA,IACN,MAAM,MAAA,CAAO,IAAA;AAAA,IACb,gBAAgB,MAAA,CAAO,cAAA;AAAA,IACvB,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,UAAU,MAAA,CAAO,QAAA;AAAA,IACjB,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,aAAa,KAAA,CAAM,OAAA,CAAQ,OAAO,QAAA,GAAW,SAAA,EAAW,6BAA6B,CAAC;AAAA,GACvF;AACD;AAOO,SAAS,UAAA,CAAW,QAAiC,IAAA,EAAwE;AACnI,EAAA,IAAI,MAAA,KAAW,MAAA,IAAa,CAAC,OAAA,CAAQ,QAAQ,IAAA,CAAK,KAAK,CAAA,EAAG,OAAO,QAAmC,EAAE,KAAA,EAAO,KAAA,EAAO,MAAA,EAAQ,aAAa,CAAA;AACzI,EAAA,IAAI,MAAA,CAAO,MAAA,KAAW,SAAA,EAAW,OAAO,OAAA,CAAmC,EAAE,KAAA,EAAO,KAAA,EAAO,MAAA,EAAQ,oBAAA,EAAsB,CAAA;AACzH,EAAA,IAAI,CAAC,UAAA,CAAW,MAAA,EAAQ,IAAA,CAAK,OAAO,KAAA,EAAO,IAAA,CAAK,MAAA,CAAO,KAAK,KAAK,MAAA,CAAO,KAAA,CAAO,WAAA,IAAe,IAAA,CAAK,OAAO,KAAA,EAAO;AAChH,IAAA,OAAO,QAAmC,EAAE,KAAA,EAAO,KAAA,EAAO,MAAA,EAAQ,cAAc,CAAA;AAAA,EACjF;AACA,EAAA,OAAO,OAAA,CAAmC,EAAE,KAAA,EAAO,IAAA,EAAM,CAAA;AAC1D;AAEO,SAAS,eAAe,MAAA,EAA0F;AACxH,EAAA,OAAO,QAA8B,EAAE,OAAA,EAAS,KAAA,EAAO,OAAA,EAAS,QAAQ,CAAA;AACzE;AAeO,SAAS,uBAAA,CAAwB,SAA8B,MAAA,EAAgD;AACrH,EAAA,KAAA,MAAWD,WAAU,OAAA,EAAS;AAC7B,IAAA,IAAIA,OAAAA,CAAO,QAAQ,CAAA,KAAM,MAAA,CAAO,MAAA,EAAQ;AACxC,IAAA,IAAI,MAAA,CAAO,MAAA,KAAW,iBAAA,GAAoBA,OAAAA,CAAO,YAAY,CAAA,KAAM,MAAA,CAAO,UAAA,GAAaA,OAAAA,CAAO,SAAS,CAAA,KAAM,MAAA,CAAO,SAAS,OAAOA,OAAAA;AAAA,EACrI;AACA,EAAA,OAAO,MAAA;AACR;AAGO,SAAS,eAA8E,QAAA,EAAuB;AACpH,EAAA,OAAO,QAAW,EAAE,OAAA,EAAS,MAAM,QAAA,EAAU,IAAA,EAAM,UAAU,CAAA;AAC9D;AAGO,SAAS,0BAAA,CAA2B,OAAgB,OAAA,EAAkB;AAC5E,EAAA,OAAO,MAAM,MAAM;AAClB,IAAA,MAAM,IAAA,GAAO,cAAA,CAAe,KAAA,EAAO,OAAO,CAAA;AAC1C,IAAA,OAAO,EAAE,MAAA,EAAQ,eAAA,CAAgB,OAAO,GAAG,KAAA,EAAO,SAAA,CAAU,IAAA,EAAM,OAAO,GAAG,kBAAA,EAAoB,UAAA,CAAW,IAAA,EAAM,oBAAA,EAAsB,0BAA0B,CAAA,EAAE;AAAA,EACpK,CAAC,CAAA;AACF;AAEO,SAAS,cAAc,OAAA,EAA0E;AACvG,EAAA,OAAO,OAAA,CAAmC,EAAE,OAAA,EAAS,CAAA;AACtD;;;ACp+BA,IAAM,WAAA,GAAc,IAAI,WAAA,EAAY;AACpC,IAAM,aAAA,GAAgB,EAAA;AAQtB,SAAS,UAAUP,MAAAA,EAA0B;AAC5C,EAAA,MAAM,SAAU,UAAA,CAAsC,MAAA;AACtD,EAAA,IAAI,MAAA,KAAW,MAAA,IAAa,OAAO,MAAA,CAAO,eAAA,KAAoB,UAAA,IAAc,MAAA,CAAO,MAAA,KAAW,MAAA,EAAW,MAAM,UAAA,CAAW,cAAA,EAAgBA,MAAK,CAAA;AAC/I,EAAA,OAAO,MAAA;AACR;AAEA,SAAS,IAAI,KAAA,EAA2B;AACvC,EAAA,IAAIE,KAAAA,GAAO,EAAA;AACX,EAAA,KAAA,MAAW,IAAA,IAAQ,KAAA,EAAOA,KAAAA,IAAQ,IAAA,CAAK,SAAS,EAAE,CAAA,CAAE,QAAA,CAAS,CAAA,EAAG,GAAG,CAAA;AACnE,EAAA,OAAOA,KAAAA;AACR;AAGA,eAAsB,SAAA,CAAUA,OAAcF,MAAAA,EAAgC;AAC7E,EAAA,OAAO,GAAA,CAAI,IAAI,UAAA,CAAW,MAAM,UAAUA,MAAK,CAAA,CAAE,MAAA,CAAO,MAAA,CAAO,WAAW,WAAA,CAAY,MAAA,CAAOE,KAAI,CAAC,CAAC,CAAC,CAAA;AACrG;AAGA,eAAsB,iBAAA,GAAoF;AACzG,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,aAAa,CAAA;AAC1C,EAAA,SAAA,CAAU,sBAAsB,CAAA,CAAE,eAAA,CAAgB,KAAK,CAAA;AACvD,EAAA,MAAM,OAAA,GAAU,CAAA,KAAA,EAAQ,GAAA,CAAI,KAAK,CAAC,CAAA,CAAA;AAClC,EAAA,OAAO,EAAE,OAAA,EAAS,MAAA,EAAQ,MAAM,SAAA,CAAU,OAAA,EAAS,sBAAsB,CAAA,EAAE;AAC5E;AAGO,SAAS,qBAAqB,OAAA,EAAkC;AACtE,EAAA,OAAO,SAAA,CAAU,SAAS,uBAAuB,CAAA;AAClD;;;AC+HA,eAAe,aAAgB,GAAA,EAAmC;AACjE,EAAA,IAAI;AACH,IAAA,OAAO,MAAM,GAAA,EAAI;AAAA,EAClB,SAAS,MAAA,EAAQ;AAChB,IAAA,OAAO,MAAS,MAAM;AACrB,MAAA,MAAM,MAAA;AAAA,IACP,CAAA,EAAG,MAAM,UAAA,CAAW,cAAA,EAAgB,OAAO,CAAC,CAAA;AAAA,EAC7C;AACD;AAGA,SAAS,UAAA,GAA4B;AACpC,EAAA,OAAO,QAAQ,OAAA,EAAQ;AACxB;AAUO,IAAM,6BAAN,MAAiE;AAAA,EAC9D,MAAA;AAAA,EACA,iBAAA;AAAA,EACA,UAAA;AAAA,EACA,KAAA,uBAAY,GAAA,EAAsB;AAAA,EAClC,QAAA,uBAAe,GAAA,EAAyB;AAAA,EACxC,QAAA,uBAAe,GAAA,EAAyB;AAAA,EACxC,QAAA,uBAAe,GAAA,EAAyB;AAAA,EACxC,YAA4B,EAAC;AAAA;AAAA,EAE7B,MAAA,uBAAa,GAAA,EAA0B;AAAA;AAAA,EAEvC,SAAA,uBAAgB,GAAA,EAAsB;AAAA,EACtC,YAA6B,EAAC;AAAA;AAAA,EAEvC,gBAAA,GAAmB,CAAA,QAAA;AAAA,EAEnB,YAAY,OAAA,EAA4C;AACvD,IAAA,IAAA,CAAK,UAAA,GAAa,kBAAkB,OAAO,CAAA;AAC3C,IAAA,IAAA,CAAK,MAAA,GAAS,KAAA,CAAM,MAAM,YAAA,CAAc,OAAA,CAAqC,KAAK,CAAA,EAAG,MAAM,UAAA,CAAW,eAAA,EAAiB,OAAO,CAAC,CAAA;AAC/H,IAAA,IAAA,CAAK,iBAAA,GAAoB,cAAA,CAAe,OAAA,EAAS,kBAAkB,CAAA;AAAA,EACpE;AAAA;AAAA,EAGA,IAAI,eAAA,GAA0B;AAC7B,IAAA,OAAO,IAAA,CAAK,UAAA;AAAA,EACb;AAAA;AAAA,EAGA,MAAM,UAAU,SAAA,EAAkC;AACjD,IAAA,MAAM,OAAO,IAAA,CAAK,iBAAA;AAClB,IAAA,IAAI,IAAA,KAAS,MAAA,EAAW,OAAO,UAAA,EAAW;AAC1C,IAAA,IAAI;AACH,MAAA,MAAM,KAAK,SAAS,CAAA;AAAA,IACrB,CAAA,CAAA,MAAQ;AACP,MAAA,MAAM,UAAA,CAAW,gBAAgB,kBAAkB,CAAA;AAAA,IACpD;AAAA,EACD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAA,CAAW,QAAoB,IAAA,EAA+B;AAC7D,IAAA,OAAO,MAAM,MAAM;AAClB,MAAA,MAAMM,MAAAA,GAAQ,SAAA,CAAU,IAAA,CAAK,MAAM,CAAA;AACnC,MAAA,gBAAA,CAAiB,QAAQA,MAAK,CAAA;AAC9B,MAAA,OAAO,KAAKA,MAAK,CAAA;AAAA,IAClB,CAAA,EAAG,MAAM,UAAA,CAAW,cAAA,EAAgB,OAAO,CAAC,CAAA;AAAA,EAC7C;AAAA;AAAA,EAGA,SAASA,MAAAA,EAAuB;AAC/B,IAAA,OAAO,OAAA,CAAQA,MAAAA,GAAQ,IAAA,CAAK,UAAA,EAAY,KAAK,gBAAgB,CAAA;AAAA,EAC9D;AAAA,EAEA,YAAA,CAAa,UAAkBA,MAAAA,EAAwB;AACtD,IAAA,OAAO,QAAA,GAAW,IAAA,CAAK,QAAA,CAASA,MAAK,CAAA;AAAA,EACtC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,cAAA,CAAe,KAAA,EAAqB,kBAAA,EAAwC,MAAA,EAAgD;AAC3H,IAAA,IAAI,kBAAA,KAAuB,QAAW,OAAO,MAAA;AAC7C,IAAA,MAAM,OAAA,GAAU,KAAK,SAAA,CACnB,MAAA,CAAO,CAAC,IAAA,KAAS,OAAA,CAAQ,MAAM,KAAK,CAAA,IAAK,KAAK,MAAA,CAAO,oBAAoB,MAAM,kBAAkB,CAAA,CACjG,IAAI,CAAC,IAAA,KAAS,KAAK,MAAM,CAAA;AAC3B,IAAA,OAAO,uBAAA,CAAwB,SAAS,MAAM,CAAA;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,eAAA,CACL,GAAA,EACA,OAAA,EAC+B;AAC/B,IAAA,MAAM,IAAA,GAAO,uBAAA,CAAwB,GAAA,EAAK,OAAO,CAAA;AACjD,IAAA,MAAM,IAAA,CAAK,UAAU,iBAAiB,CAAA;AACtC,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,IAAA,CAAK,MAAA,EAAQ,CAACA,MAAAA,KAAU;AAC3C,MAAA,MAAM,QAAQ,IAAA,CAAK,GAAA;AAGnB,MAAA,IAAI,IAAA,CAAK,YAAA,CAAa,KAAA,CAAM,QAAA,EAAUA,MAAK,CAAA,EAAG,OAAO,OAAA,CAA6B,EAAE,OAAA,EAAS,cAAA,EAAgB,CAAA;AAC7G,MAAA,IAAI,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,KAAA,CAAM,OAAO,CAAA,EAAG,OAAO,OAAA,CAA6B,EAAE,OAAA,EAAS,iBAAA,EAAmB,CAAA;AACrG,MAAA,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,KAAA,CAAM,OAAA,EAAS;AAAA,QAC7B,KAAK,KAAA,CAAM,OAAA;AAAA,QACX,OAAO,KAAA,CAAM,KAAA;AAAA,QACb,UAAU,KAAA,CAAM,QAAA;AAAA,QAChB,SAAS,KAAA,CAAM,OAAA;AAAA,QACf,UAAU,KAAA,CAAM,QAAA;AAAA,QAChB,MAAA,EAAQ,SAAA;AAAA,QACR,YAAA,EAAc,CAAA;AAAA,QACd,eAAe,KAAA,CAAM,WAAA;AAAA,QACrB,aAAa,KAAA,CAAM,WAAA;AAAA,QACnB,sBAAsB,KAAA,CAAM,oBAAA;AAAA,QAC5B,aAAA,EAAe,MAAA;AAAA,QACf,cAAA,EAAgB,MAAA;AAAA,QAChB,KAAA,EAAO,CAAA;AAAA,QACP,KAAA,EAAO;AAAA,OACP,CAAA;AACD,MAAA,OAAO,OAAA,CAA6B,EAAE,OAAA,EAAS,UAAA,EAAY,CAAA;AAAA,IAC5D,CAAC,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,eAAA,CAAgB,OAAA,EAA8B,OAAA,EAAmE;AACtH,IAAA,MAAM,IAAA,GAAO,aAAA,CAAc,OAAA,EAAS,OAAO,CAAA;AAC3C,IAAA,MAAM,IAAA,CAAK,UAAU,iBAAiB,CAAA;AACtC,IAAA,OAAO,KAAK,OAAA,CAAQ,IAAA,CAAK,MAAA,EAAQ,MAChC,UAAU,CAAC,GAAG,IAAA,CAAK,KAAA,CAAM,QAAQ,CAAA,EAAG,IAAA,CAAK,KAAA,EAAO,MAAM,CAAgC,CAAA;AAAA,EACxF;AAAA,EAEA,MAAM,iBAAA,CAAkB,KAAA,EAA0D,OAAA,EAA+C;AAChI,IAAA,MAAM,IAAA,GAAO,iBAAA,CAAkB,KAAA,EAAO,OAAO,CAAA;AAC7C,IAAA,MAAM,IAAA,CAAK,UAAU,mBAAmB,CAAA;AACxC,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,IAAA,CAAK,MAAA,EAAQ,CAACA,MAAAA,KAAU;AAC3C,MAAA,MAAM,GAAA,GAAM,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,KAAK,OAAO,CAAA;AACvC,MAAA,IAAI,GAAA,KAAQ,MAAA,IAAa,CAAC,KAAA,CAAM,GAAA,EAAK,IAAA,CAAK,MAAA,CAAO,KAAA,EAAO,IAAA,CAAK,MAAA,CAAO,KAAA,EAAOA,MAAK,GAAG,OAAO,KAAA;AAC1F,MAAA,GAAA,CAAI,MAAA,GAAS,WAAA;AACb,MAAA,GAAA,CAAI,aAAA,GAAgB,KAAK,MAAA,CAAO,KAAA;AAChC,MAAA,GAAA,CAAI,KAAA,GAAQ,MAAA;AACZ,MAAA,OAAO,IAAA;AAAA,IACR,CAAC,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,mBAAA,CACL,KAAA,EACA,OAAA,EACmB;AACnB,IAAA,MAAM,IAAA,GAAO,kBAAA,CAAmB,KAAA,EAAO,OAAO,CAAA;AAC9C,IAAA,MAAM,IAAA,CAAK,UAAU,qBAAqB,CAAA;AAC1C,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,IAAA,CAAK,MAAA,EAAQ,CAACA,MAAAA,KAAU;AAC3C,MAAA,MAAM,GAAA,GAAM,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,KAAK,OAAO,CAAA;AACvC,MAAA,IAAI,GAAA,KAAQ,MAAA,IAAa,CAAC,KAAA,CAAM,GAAA,EAAK,IAAA,CAAK,MAAA,CAAO,KAAA,EAAO,IAAA,CAAK,MAAA,CAAO,KAAA,EAAOA,MAAK,GAAG,OAAO,KAAA;AAC1F,MAAA,GAAA,CAAI,YAAA,IAAgB,CAAA;AACpB,MAAA,GAAA,CAAI,gBAAgB,IAAA,CAAK,aAAA;AACzB,MAAA,GAAA,CAAI,iBAAiB,IAAA,CAAK,UAAA;AAC1B,MAAA,GAAA,CAAI,KAAA,GAAQ,MAAA;AACZ,MAAA,OAAO,IAAA;AAAA,IACR,CAAC,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,mBAAA,CACL,KAAA,EACA,OAAA,EACmB;AACnB,IAAA,MAAM,IAAA,GAAO,gBAAA,CAAiB,KAAA,EAAO,OAAO,CAAA;AAC5C,IAAA,MAAM,IAAA,CAAK,UAAU,qBAAqB,CAAA;AAC1C,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,IAAA,CAAK,MAAA,EAAQ,CAACA,MAAAA,KAAU;AAC3C,MAAA,MAAM,GAAA,GAAM,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,KAAK,OAAO,CAAA;AACvC,MAAA,IAAI,GAAA,KAAQ,MAAA,IAAa,CAAC,KAAA,CAAM,GAAA,EAAK,IAAA,CAAK,MAAA,CAAO,KAAA,EAAO,IAAA,CAAK,MAAA,CAAO,KAAA,EAAOA,MAAK,GAAG,OAAO,KAAA;AAC1F,MAAA,GAAA,CAAI,KAAA,GAAQ,EAAE,GAAG,GAAA,CAAI,KAAA,EAAQ,WAAA,EAAa,eAAA,CAAgB,GAAA,EAAK,IAAA,CAAK,MAAA,CAAO,KAAA,EAAO,IAAA,CAAK,eAAe,CAAA,EAAE;AACxG,MAAA,OAAO,IAAA;AAAA,IACR,CAAC,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,mBAAA,CACL,KAAA,EACA,OAAA,EACmB;AACnB,IAAA,MAAM,IAAA,GAAO,qBAAA,CAAsB,KAAA,EAAO,OAAO,CAAA;AACjD,IAAA,MAAM,IAAA,CAAK,UAAU,qBAAqB,CAAA;AAC1C,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,IAAA,CAAK,MAAA,EAAQ,CAACA,MAAAA,KAAU;AAC3C,MAAA,MAAM,GAAA,GAAM,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,KAAK,OAAO,CAAA;AACvC,MAAA,IAAI,GAAA,KAAQ,MAAA,IAAa,CAAC,KAAA,CAAM,GAAA,EAAK,IAAA,CAAK,MAAA,CAAO,KAAA,EAAO,IAAA,CAAK,MAAA,CAAO,KAAA,EAAOA,MAAK,GAAG,OAAO,KAAA;AAC1F,MAAA,GAAA,CAAI,MAAA,GAAS,aAAA;AACb,MAAA,GAAA,CAAI,iBAAiB,IAAA,CAAK,UAAA;AAC1B,MAAA,GAAA,CAAI,KAAA,GAAQ,MAAA;AACZ,MAAA,OAAO,IAAA;AAAA,IACR,CAAC,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,gBAAA,CACL,KAAA,EACA,OAAA,EACgC;AAChC,IAAA,MAAM,IAAA,GAAO,kBAAA,CAAmB,KAAA,EAAO,OAAO,CAAA;AAC9C,IAAA,MAAM,IAAA,CAAK,UAAU,kBAAkB,CAAA;AACvC,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,IAAA,CAAK,MAAA,EAAQ,CAACA,MAAAA,KAAU;AAC3C,MAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,cAAA,CAAe,IAAA,CAAK,OAAO,IAAA,CAAK,OAAA,CAAQ,kBAAA,EAAoB,EAAE,MAAA,EAAQ,aAAA,EAAe,OAAA,EAAS,IAAA,CAAK,SAAS,CAAA;AAC/H,MAAA,IAAI,KAAA,KAAU,MAAA,EAAW,OAAO,cAAA,CAAqC,KAAK,CAAA;AAC1E,MAAA,MAAM,GAAA,GAAM,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,KAAK,OAAO,CAAA;AACvC,MAAA,IAAI,GAAA,KAAQ,MAAA,IAAa,CAAC,OAAA,CAAQ,GAAA,EAAK,KAAK,KAAK,CAAA,EAAG,OAAO,cAAA,CAAe,WAAW,CAAA;AACrF,MAAA,MAAM,OAAA,GAAU,eAAe,GAAA,EAAK,IAAA,CAAK,SAAS,IAAA,CAAK,QAAA,CAASA,MAAK,CAAC,CAAA;AACtE,MAAA,IAAI,OAAA,KAAY,MAAA,EAAW,OAAO,cAAA,CAAe,OAAO,CAAA;AACxD,MAAA,MAAM,QAAA,GAAW,kBAAA,CAAmB,GAAA,EAAK,IAAA,CAAK,SAASA,MAAK,CAAA;AAC5D,MAAA,MAAM,SAAS,OAAA,CAA8B,EAAE,OAAA,EAAS,IAAA,EAAM,UAAU,CAAA;AACxE,MAAA,YAAA,CAAa,GAAA,EAAK,KAAK,OAAO,CAAA;AAC9B,MAAA,IAAA,CAAK,SAAA,CAAU,IAAA,CAAK,EAAE,QAAA,EAAU,IAAI,QAAA,EAAU,OAAA,EAAS,GAAA,CAAI,OAAA,EAAS,OAAA,EAAS,GAAA,CAAI,GAAA,EAAK,MAAA,EAAQ,UAAiC,CAAA;AAC/H,MAAA,OAAO,MAAA;AAAA,IACR,CAAC,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,oBAAA,CACL,KAAA,EACA,OAAA,EACwC;AACxC,IAAA,MAAM,IAAA,GAAO,qBAAA,CAAsB,KAAA,EAAO,OAAO,CAAA;AACjD,IAAA,MAAM,IAAA,CAAK,UAAU,sBAAsB,CAAA;AAC3C,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,IAAA,CAAK,MAAA,EAAQ,CAACA,MAAAA,KAAU;AAC3C,MAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,cAAA,CAAe,IAAA,CAAK,OAAO,IAAA,CAAK,OAAA,CAAQ,kBAAA,EAAoB,EAAE,MAAA,EAAQ,mBAAA,EAAqB,OAAA,EAAS,IAAA,CAAK,SAAS,CAAA;AACrI,MAAA,IAAI,KAAA,KAAU,MAAA,EAAW,OAAO,cAAA,CAA6C,KAAK,CAAA;AAClF,MAAA,MAAM,GAAA,GAAM,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,KAAK,OAAO,CAAA;AACvC,MAAA,IAAI,GAAA,KAAQ,MAAA,IAAa,CAAC,OAAA,CAAQ,GAAA,EAAK,KAAK,KAAK,CAAA,EAAG,OAAO,iBAAA,CAAkB,WAAW,CAAA;AACxF,MAAA,MAAM,OAAA,GAAU,kBAAkB,GAAA,EAAK,IAAA,CAAK,SAAS,IAAA,CAAK,QAAA,CAASA,MAAK,CAAC,CAAA;AACzE,MAAA,IAAI,OAAA,KAAY,MAAA,EAAW,OAAO,iBAAA,CAAkB,OAAO,CAAA;AAC3D,MAAA,MAAM,QAAA,GAAW,qBAAA,CAAsB,GAAA,EAAK,IAAA,CAAK,SAASA,MAAK,CAAA;AAC/D,MAAA,MAAM,SAAS,OAAA,CAAsC,EAAE,OAAA,EAAS,IAAA,EAAM,UAAU,CAAA;AAChF,MAAA,eAAA,CAAgB,GAAA,EAAK,KAAK,OAAO,CAAA;AACjC,MAAA,IAAA,CAAK,SAAA,CAAU,IAAA,CAAK,EAAE,QAAA,EAAU,IAAI,QAAA,EAAU,OAAA,EAAS,GAAA,CAAI,OAAA,EAAS,OAAA,EAAS,GAAA,CAAI,GAAA,EAAK,MAAA,EAAQ,UAAiC,CAAA;AAC/H,MAAA,OAAO,MAAA;AAAA,IACR,CAAC,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,aAAA,CAAc,KAAA,EAAoD,OAAA,EAA+D;AACtI,IAAA,MAAM,IAAA,GAAO,aAAA,CAAc,KAAA,EAAO,OAAO,CAAA;AACzC,IAAA,MAAM,IAAA,CAAK,UAAU,eAAe,CAAA;AACpC,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,IAAA,CAAK,MAAA,EAAQ,MAAM;AACtC,MAAA,MAAM,GAAA,GAAM,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,KAAK,OAAO,CAAA;AACvC,MAAA,OAAO,GAAA,KAAQ,MAAA,IAAa,CAAC,OAAA,CAAQ,GAAA,EAAK,IAAA,CAAK,KAAK,CAAA,GAAI,IAAA,GAAO,OAAA,CAA0B,MAAA,CAAO,GAAG,CAAC,CAAA;AAAA,IACrG,CAAC,CAAA;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,oBAAA,CACL,MAAA,EACA,MAAA,EACA,OAAA,EACqC;AACrC,IAAA,MAAM,IAAA,GAAO,oBAAA,CAAqB,MAAA,EAAQ,MAAA,EAAQ,OAAO,CAAA;AACzD,IAAA,MAAM,IAAA,CAAK,UAAU,sBAAsB,CAAA;AAC3C,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,IAAA,CAAK,MAAA,EAAQ,CAACA,MAAAA,KAAU;AAC3C,MAAA,MAAM,GAAA,GAAM,IAAA,CAAK,UAAA,CAAW,IAAA,CAAK,QAAQA,MAAK,CAAA;AAC9C,MAAA,IAAI,GAAA,KAAQ,MAAA,EAAW,OAAO,aAAA,CAAc,YAAY,CAAA;AACxD,MAAA,IAAI,CAAC,QAAQ,GAAA,EAAK,IAAI,GAAG,MAAM,UAAA,CAAW,mBAAmB,iBAAiB,CAAA;AAC9E,MAAA,IAAI,IAAA,CAAK,aAAa,GAAA,CAAI,QAAA,EAAUA,MAAK,CAAA,EAAG,OAAO,cAAc,cAAc,CAAA;AAC/E,MAAA,MAAM,GAAA,GAAM,SAAA,CAAU,IAAA,CAAK,cAAA,EAAgB,KAAK,OAAO,CAAA;AACvD,MAAA,IAAI,KAAK,QAAA,CAAS,GAAA,CAAI,GAAG,CAAA,EAAG,OAAO,cAAc,iBAAiB,CAAA;AAClE,MAAA,IAAI,IAAA,CAAK,SAAS,GAAA,CAAI,IAAA,CAAK,UAAU,CAAA,EAAG,MAAM,UAAA,CAAW,sBAAA,EAAwB,mBAAmB,CAAA;AACpG,MAAA,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,IAAA,CAAK,UAAA,EAAY;AAAA,QAClC,KAAK,IAAA,CAAK,UAAA;AAAA,QACV,gBAAgB,IAAA,CAAK,cAAA;AAAA,QACrB,SAAS,IAAA,CAAK,OAAA;AAAA,QACd,UAAU,IAAA,CAAK,QAAA;AAAA,QACf,SAAS,IAAA,CAAK,OAAA;AAAA,QACd,qBAAqB,IAAA,CAAK,mBAAA;AAAA,QAC1B,MAAM,IAAA,CAAK,IAAA;AAAA,QACX,UAAU,GAAA,CAAI,QAAA;AAAA,QACd,MAAA,EAAQ,SAAA;AAAA,QACR,YAAA,EAAc,CAAA;AAAA,QACd,eAAe,IAAA,CAAK,aAAA;AAAA,QACpB,aAAa,IAAA,CAAK,WAAA;AAAA,QAClB,sBAAsB,IAAA,CAAK,oBAAA;AAAA,QAC3B,WAAA,EAAa,MAAA;AAAA,QACb,cAAA,EAAgB,MAAA;AAAA,QAChB,KAAA,EAAO,CAAA;AAAA,QACP,KAAA,EAAO;AAAA,OACP,CAAA;AACD,MAAA,IAAA,CAAK,QAAA,CAAS,IAAI,GAAA,EAAK,EAAE,MAAM,QAAA,EAAU,cAAA,EAAgB,KAAK,cAAA,EAAgB,OAAA,EAAS,KAAK,OAAA,EAAS,QAAA,EAAU,KAAK,QAAA,EAAU,OAAA,EAAS,KAAK,OAAA,EAAS,QAAA,EAAU,GAAA,CAAI,QAAA,EAAU,CAAA;AAC7K,MAAA,OAAO,cAAc,UAAU,CAAA;AAAA,IAChC,CAAC,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,qBAAA,CACLD,OAAAA,EACA,MAAA,EACA,OAAA,EACqC;AACrC,IAAA,MAAM,IAAA,GAAO,cAAA,CAAeA,OAAAA,EAAQ,MAAA,EAAQ,OAAO,CAAA;AACnD,IAAA,MAAM,IAAA,CAAK,UAAU,uBAAuB,CAAA;AAC5C,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,IAAA,CAAK,MAAA,EAAQ,CAACC,MAAAA,KAAU;AAC3C,MAAA,MAAM,GAAA,GAAM,IAAA,CAAK,UAAA,CAAW,IAAA,CAAK,QAAQA,MAAK,CAAA;AAC9C,MAAA,IAAI,GAAA,KAAQ,MAAA,EAAW,OAAO,aAAA,CAAc,YAAY,CAAA;AACxD,MAAA,IAAI,CAAC,QAAQ,GAAA,EAAK,IAAI,GAAG,MAAM,UAAA,CAAW,mBAAmB,iBAAiB,CAAA;AAC9E,MAAA,IAAI,IAAA,CAAK,aAAa,GAAA,CAAI,QAAA,EAAUA,MAAK,CAAA,EAAG,OAAO,cAAc,cAAc,CAAA;AAC/E,MAAA,MAAM,GAAA,GAAM,SAAA,CAAU,IAAA,CAAK,cAAA,EAAgB,KAAK,OAAO,CAAA;AACvD,MAAA,IAAI,KAAK,QAAA,CAAS,GAAA,CAAI,GAAG,CAAA,EAAG,OAAO,cAAc,iBAAiB,CAAA;AAClE,MAAA,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,GAAA,EAAK,EAAE,GAAA,EAAK,MAAA,EAAQ,YAAA,CAAa,IAAI,CAAA,EAAG,QAAA,EAAU,GAAA,CAAI,QAAA,EAAU,CAAA;AAClF,MAAA,IAAA,CAAK,QAAA,CAAS,IAAI,GAAA,EAAK,EAAE,MAAM,QAAA,EAAU,cAAA,EAAgB,KAAK,cAAA,EAAgB,OAAA,EAAS,KAAK,OAAA,EAAS,QAAA,EAAU,KAAK,QAAA,EAAU,OAAA,EAAS,KAAK,OAAA,EAAS,QAAA,EAAU,GAAA,CAAI,QAAA,EAAU,CAAA;AAC7K,MAAA,OAAO,cAAc,UAAU,CAAA;AAAA,IAChC,CAAC,CAAA;AAAA,EACF;AAAA;AAAA,EAGA,UAAA,CAAW,OAA8BA,MAAAA,EAAqC;AAC7E,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,MAAM,OAAO,CAAA;AACxC,IAAA,OAAO,GAAA,KAAQ,MAAA,IAAa,KAAA,CAAM,GAAA,EAAK,KAAA,CAAM,OAAO,KAAA,CAAM,KAAA,EAAOA,MAAK,CAAA,GAAI,GAAA,GAAM,MAAA;AAAA,EACjF;AAAA,EAEA,MAAM,oBAAA,CAAqB,OAAA,EAA8B,OAAA,EAAwE;AAChI,IAAA,MAAM,IAAA,GAAO,aAAA,CAAc,OAAA,EAAS,OAAO,CAAA;AAC3C,IAAA,MAAM,IAAA,CAAK,UAAU,sBAAsB,CAAA;AAC3C,IAAA,OAAO,KAAK,OAAA,CAAQ,IAAA,CAAK,MAAA,EAAQ,MAChC,UAAU,CAAC,GAAG,IAAA,CAAK,QAAA,CAAS,QAAQ,CAAA,EAAG,IAAA,CAAK,KAAA,EAAO,SAAS,CAAqC,CAAA;AAAA,EACnG;AAAA,EAEA,MAAM,wBAAA,CACL,KAAA,EACA,OAAA,EACmB;AACnB,IAAA,MAAM,IAAA,GAAO,mBAAA,CAAoB,KAAA,EAAO,OAAO,CAAA;AAC/C,IAAA,MAAM,IAAA,CAAK,UAAU,0BAA0B,CAAA;AAC/C,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,IAAA,CAAK,MAAA,EAAQ,CAACA,MAAAA,KAAU;AAC3C,MAAA,MAAM,MAAA,GAAS,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,KAAK,UAAU,CAAA;AAChD,MAAA,IAAI,MAAA,KAAW,MAAA,IAAa,CAAC,KAAA,CAAM,MAAA,EAAQ,IAAA,CAAK,MAAA,CAAO,KAAA,EAAO,IAAA,CAAK,MAAA,CAAO,KAAA,EAAOA,MAAK,GAAG,OAAO,KAAA;AAChG,MAAA,MAAA,CAAO,KAAA,GAAQ,EAAE,GAAG,MAAA,CAAO,KAAA,EAAQ,WAAA,EAAa,eAAA,CAAgB,MAAA,EAAQ,IAAA,CAAK,MAAA,CAAO,KAAA,EAAO,IAAA,CAAK,eAAe,CAAA,EAAE;AACjH,MAAA,OAAO,IAAA;AAAA,IACR,CAAC,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,kBAAA,CACL,KAAA,EACA,OAAA,EACqC;AACrC,IAAA,MAAM,IAAA,GAAO,kBAAA,CAAmB,KAAA,EAAO,OAAO,CAAA;AAC9C,IAAA,MAAM,IAAA,CAAK,UAAU,oBAAoB,CAAA;AACzC,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,IAAA,CAAK,MAAA,EAAQ,MAAM,UAAA,CAAW,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,IAAA,CAAK,UAAU,CAAA,EAAG,IAAI,CAAC,CAAA;AAAA,EAC5F;AAAA,EAEA,MAAM,aAAA,CAAc,KAAA,EAAgF,OAAA,EAA+C;AAClJ,IAAA,MAAM,IAAA,GAAO,qBAAA,CAAsB,KAAA,EAAO,OAAO,CAAA;AACjD,IAAA,MAAM,IAAA,CAAK,UAAU,eAAe,CAAA;AACpC,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,IAAA,CAAK,MAAA,EAAQ,CAACA,MAAAA,KAAU;AAC3C,MAAA,MAAM,MAAA,GAAS,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,KAAK,UAAU,CAAA;AAChD,MAAA,IAAI,MAAA,KAAW,MAAA,IAAa,CAAC,KAAA,CAAM,MAAA,EAAQ,IAAA,CAAK,MAAA,CAAO,KAAA,EAAO,IAAA,CAAK,MAAA,CAAO,KAAA,EAAOA,MAAK,GAAG,OAAO,KAAA;AAChG,MAAA,IAAI,KAAK,cAAA,KAAmB,MAAA,CAAO,gBAAgB,MAAM,UAAA,CAAW,mBAAmB,8BAA8B,CAAA;AACrH,MAAA,IAAI,KAAK,OAAA,KAAY,MAAA,CAAO,SAAS,MAAM,UAAA,CAAW,mBAAmB,uBAAuB,CAAA;AAChG,MAAA,IAAA,CAAK,UAAU,IAAA,CAAK,EAAE,UAAU,MAAA,CAAO,QAAA,EAAU,SAAS,MAAA,CAAO,OAAA,EAAS,YAAY,IAAA,CAAK,UAAA,EAAY,QAAQ,IAAA,CAAK,MAAA,EAAQ,OAAO,MAAA,EAAW,aAAA,EAAe,QAAW,CAAA;AACxK,MAAA,OAAO,IAAA;AAAA,IACR,CAAC,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,YAAA,CAAa,KAAA,EAA+E,OAAA,EAAiE;AAClK,IAAA,MAAM,IAAA,GAAO,oBAAA,CAAqB,KAAA,EAAO,OAAO,CAAA;AAEhD,IAAA,MAAM,OAAA,GAAU,MAAM,YAAA,CAAa,iBAAiB,CAAA;AACpD,IAAA,MAAM,IAAA,CAAK,UAAU,cAAc,CAAA;AACnC,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,IAAA,CAAK,MAAA,EAAQ,CAACA,MAAAA,KAAU;AAC3C,MAAA,MAAM,MAAA,GAAS,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,KAAK,UAAU,CAAA;AAChD,MAAA,IAAI,CAAC,SAAS,MAAA,EAAQ,IAAA,CAAK,QAAQA,MAAK,CAAA,EAAG,OAAO,WAAA,CAAY,MAAS,CAAA;AACvE,MAAA,IAAI,KAAK,cAAA,KAAmB,MAAA,CAAO,gBAAgB,MAAM,UAAA,CAAW,mBAAmB,8BAA8B,CAAA;AACrH,MAAA,IAAI,KAAK,OAAA,KAAY,MAAA,CAAO,SAAS,MAAM,UAAA,CAAW,mBAAmB,uBAAuB,CAAA;AAChG,MAAA,MAAM,MAAM,UAAA,CAAW,IAAA,CAAK,UAAA,EAAY,IAAA,CAAK,OAAO,KAAK,CAAA;AACzD,MAAA,IAAI,KAAK,MAAA,CAAO,GAAA,CAAI,GAAG,CAAA,EAAG,OAAO,YAAY,MAAS,CAAA;AACtD,MAAA,MAAM,KAAA,GAAsB;AAAA,QAC3B,UAAU,MAAA,CAAO,QAAA;AAAA,QAAU,SAAS,MAAA,CAAO,OAAA;AAAA,QAAS,YAAY,IAAA,CAAK,UAAA;AAAA,QAAY,QAAQ,IAAA,CAAK,MAAA;AAAA,QAC9F,KAAA,EAAO,KAAK,MAAA,CAAO,KAAA;AAAA,QAAO,eAAe,OAAA,CAAQ;AAAA,OAClD;AACA,MAAA,IAAA,CAAK,SAAA,CAAU,KAAK,KAAK,CAAA;AACzB,MAAA,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,GAAA,EAAK,KAAK,CAAA;AAC1B,MAAA,OAAO,WAAA,CAAY,QAAQ,OAAO,CAAA;AAAA,IACnC,CAAC,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,aAAA,CACL,KAAA,EACA,OAAA,EACmB;AACnB,IAAA,MAAM,IAAA,GAAO,qBAAA,CAAsB,KAAA,EAAO,OAAO,CAAA;AACjD,IAAA,MAAM,SAAS,MAAM,YAAA,CAAa,MAAM,oBAAA,CAAqB,IAAA,CAAK,OAAO,CAAC,CAAA;AAC1E,IAAA,MAAM,IAAA,CAAK,UAAU,eAAe,CAAA;AACpC,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,IAAA,CAAK,MAAA,EAAQ,MAAM;AACtC,MAAA,MAAM,GAAA,GAAM,UAAA,CAAW,IAAA,CAAK,UAAA,EAAY,KAAK,KAAK,CAAA;AAClD,MAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,GAAG,CAAA;AAGjC,MAAA,IAAI,UAAU,MAAA,IAAa,CAAC,OAAA,CAAQ,KAAA,EAAO,KAAK,KAAK,CAAA,IAAK,KAAA,CAAM,aAAA,KAAkB,UAAU,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,GAAG,GAAG,OAAO,KAAA;AAC5H,MAAA,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,GAAA,EAAK,IAAA,CAAK,MAAM,CAAA;AACnC,MAAA,OAAO,IAAA;AAAA,IACR,CAAC,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,oBAAA,CACL,KAAA,EACA,OAAA,EACmB;AACnB,IAAA,MAAM,IAAA,GAAO,cAAA,CAAe,KAAA,EAAO,OAAO,CAAA;AAC1C,IAAA,MAAM,IAAA,CAAK,UAAU,sBAAsB,CAAA;AAC3C,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,IAAA,CAAK,MAAA,EAAQ,CAACA,MAAAA,KAAU;AAC3C,MAAA,MAAM,MAAA,GAAS,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,KAAK,UAAU,CAAA;AAChD,MAAA,IAAI,MAAA,KAAW,MAAA,IAAa,CAAC,KAAA,CAAM,MAAA,EAAQ,IAAA,CAAK,MAAA,CAAO,KAAA,EAAO,IAAA,CAAK,MAAA,CAAO,KAAA,EAAOA,MAAK,GAAG,OAAO,KAAA;AAChG,MAAA,eAAA,CAAgB,MAAA,EAAQ,KAAK,UAAU,CAAA;AACvC,MAAA,OAAO,IAAA;AAAA,IACR,CAAC,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,oBAAA,CACL,KAAA,EACA,OAAA,EACkB;AAClB,IAAA,MAAM,IAAA,GAAO,cAAA,CAAe,KAAA,EAAO,OAAO,CAAA;AAC1C,IAAA,MAAM,IAAA,CAAK,UAAU,sBAAsB,CAAA;AAC3C,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,IAAA,CAAK,MAAA,EAAQ,MAAM;AACtC,MAAA,IAAI,SAAA,GAAY,CAAA;AAChB,MAAA,KAAA,MAAW,MAAA,IAAU,IAAA,CAAK,QAAA,CAAS,MAAA,EAAO,EAAG;AAC5C,QAAA,IAAI,MAAA,CAAO,MAAA,KAAW,SAAA,IAAa,MAAA,CAAO,cAAA,KAAmB,IAAA,CAAK,cAAA,IAAkB,CAAC,OAAA,CAAQ,MAAA,EAAQ,IAAA,CAAK,KAAK,CAAA,EAAG;AAClH,QAAA,IAAI,MAAA,CAAO,mBAAA,IAAuB,IAAA,CAAK,cAAA,EAAgB;AACvD,QAAA,MAAA,CAAO,MAAA,GAAS,WAAA;AAChB,QAAA,MAAA,CAAO,cAAc,EAAE,OAAA,EAAS,WAAA,EAAa,MAAA,EAAQ,KAAK,MAAA,EAAO;AACjE,QAAA,MAAA,CAAO,KAAA,GAAQ,MAAA;AACf,QAAA,SAAA,IAAa,CAAA;AAAA,MACd;AACA,MAAA,OAAO,SAAA;AAAA,IACR,CAAC,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,qBAAA,CACL,KAAA,EACA,OAAA,EACgC;AAChC,IAAA,MAAM,IAAA,GAAO,qBAAA,CAAsB,KAAA,EAAO,OAAO,CAAA;AACjD,IAAA,MAAM,IAAA,CAAK,UAAU,uBAAuB,CAAA;AAC5C,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,IAAA,CAAK,MAAA,EAAQ,CAACA,MAAAA,KAAU;AAC3C,MAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,cAAA,CAAe,IAAA,CAAK,OAAO,IAAA,CAAK,OAAA,CAAQ,kBAAA,EAAoB,EAAE,MAAA,EAAQ,iBAAA,EAAmB,UAAA,EAAY,IAAA,CAAK,YAAY,CAAA;AACzI,MAAA,IAAI,KAAA,KAAU,MAAA,EAAW,OAAO,cAAA,CAAqC,KAAK,CAAA;AAC1E,MAAA,MAAM,MAAA,GAAS,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,KAAK,UAAU,CAAA;AAChD,MAAA,IAAI,MAAA,KAAW,MAAA,IAAa,CAAC,OAAA,CAAQ,MAAA,EAAQ,KAAK,KAAK,CAAA,EAAG,OAAO,cAAA,CAAe,WAAW,CAAA;AAC3F,MAAA,MAAM,OAAA,GAAU,eAAe,MAAA,EAAQ,IAAA,CAAK,SAAS,IAAA,CAAK,QAAA,CAASA,MAAK,CAAC,CAAA;AACzE,MAAA,IAAI,OAAA,KAAY,MAAA,EAAW,OAAO,cAAA,CAAe,OAAO,CAAA;AACxD,MAAA,MAAM,QAAA,GAAW,qBAAA,CAAsB,MAAA,EAAQ,IAAA,CAAK,SAASA,MAAK,CAAA;AAClE,MAAA,MAAM,SAAS,OAAA,CAA8B,EAAE,OAAA,EAAS,IAAA,EAAM,UAAU,CAAA;AACxE,MAAA,YAAA,CAAa,MAAA,EAAQ,KAAK,OAAO,CAAA;AACjC,MAAA,IAAA,CAAK,SAAA,CAAU,IAAA,CAAK,EAAE,QAAA,EAAU,OAAO,QAAA,EAAU,OAAA,EAAS,MAAA,CAAO,OAAA,EAAS,OAAA,EAAS,MAAA,CAAO,OAAA,EAAS,MAAA,EAAQ,UAAiC,CAAA;AAC5I,MAAA,OAAO,MAAA;AAAA,IACR,CAAC,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,kBAAA,CAAmB,KAAA,EAAuD,OAAA,EAAoE;AACnJ,IAAA,MAAM,IAAA,GAAO,gBAAA,CAAiB,KAAA,EAAO,OAAO,CAAA;AAC5C,IAAA,MAAM,IAAA,CAAK,UAAU,oBAAoB,CAAA;AACzC,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,IAAA,CAAK,MAAA,EAAQ,MAAM;AACtC,MAAA,MAAM,MAAA,GAAS,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,KAAK,UAAU,CAAA;AAChD,MAAA,OAAO,MAAA,KAAW,MAAA,IAAa,CAAC,OAAA,CAAQ,MAAA,EAAQ,IAAA,CAAK,KAAK,CAAA,GAAI,IAAA,GAAO,OAAA,CAA+B,SAAA,CAAU,MAAM,CAAC,CAAA;AAAA,IACtH,CAAC,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,oBAAA,CACL,KAAA,EACA,OAAA,EACqD;AACrD,IAAA,MAAM,IAAA,GAAO,gBAAA,CAAiB,KAAA,EAAO,OAAO,CAAA;AAC5C,IAAA,MAAM,IAAA,CAAK,UAAU,sBAAsB,CAAA;AAC3C,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,IAAA,CAAK,MAAA,EAAQ,MAAM,OAAA;AAAA,MACtC,KAAK,SAAA,CACH,MAAA,CAAO,CAAC,IAAA,KAAS,KAAK,UAAA,KAAe,IAAA,CAAK,UAAA,IAAc,OAAA,CAAQ,MAAM,IAAA,CAAK,KAAK,CAAC,CAAA,CACjF,GAAA,CAAI,CAAC,IAAA,KAAS,eAAA;AAAA,QACd,IAAA,CAAK,MAAA;AAAA,QACL,IAAA,CAAK,KAAA;AAAA,QACL,IAAA,CAAK,KAAA,KAAU,MAAA,GAAY,MAAA,GAAY,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,UAAA,CAAW,IAAA,CAAK,UAAA,EAAY,IAAA,CAAK,KAAK,CAAC;AAAA,OACjG;AAAA,KACF,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,mBAAA,CAAoB,KAAA,EAAoD,OAAA,EAAyE;AACtJ,IAAA,MAAM,IAAA,GAAO,aAAA,CAAc,KAAA,EAAO,OAAO,CAAA;AACzC,IAAA,MAAM,IAAA,CAAK,UAAU,qBAAqB,CAAA;AAC1C,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,IAAA,CAAK,MAAA,EAAQ,MAAM,OAAA;AAAA,MACtC,KAAK,SAAA,CAAU,MAAA,CAAO,CAAC,IAAA,KAAS,IAAA,CAAK,YAAY,IAAA,CAAK,OAAA,IAAW,QAAQ,IAAA,EAAM,IAAA,CAAK,KAAK,CAAC,CAAA,CAAE,IAAI,CAAC,IAAA,KAAS,KAAK,MAAM;AAAA,KACrH,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,6BAAA,CACL,KAAA,EACA,OAAA,EAC6C;AAC7C,IAAA,MAAM,IAAA,GAAO,0BAAA,CAA2B,KAAA,EAAO,OAAO,CAAA;AACtD,IAAA,MAAM,IAAA,CAAK,UAAU,+BAA+B,CAAA;AACpD,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,IAAA,CAAK,MAAA,EAAQ,MAAM,OAAA;AAAA,MACtC,IAAA,CAAK,UACH,MAAA,CAAO,CAAC,SAAS,OAAA,CAAQ,IAAA,EAAM,KAAK,KAAK,CAAA,IAAK,KAAK,MAAA,CAAO,oBAAoB,MAAM,IAAA,CAAK,kBAAkB,EAC3G,GAAA,CAAI,CAAC,IAAA,KAAS,IAAA,CAAK,MAAM;AAAA,KAC3B,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,aAAA,CACL,KAAA,EACA,OAAA,EACmC;AACnC,IAAA,MAAM,IAAA,GAAO,iBAAA,CAAkB,KAAA,EAAO,OAAO,CAAA;AAC7C,IAAA,MAAM,IAAA,CAAK,UAAU,eAAe,CAAA;AACpC,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,IAAA,CAAK,MAAA,EAAQ,MAAM;AACtC,MAAA,MAAM,MAAA,GAAS,KAAK,QAAA,CAAS,GAAA,CAAI,UAAU,IAAA,CAAK,cAAA,EAAgB,IAAA,CAAK,OAAO,CAAC,CAAA;AAC7E,MAAA,IAAI,MAAA,KAAW,UAAa,CAAC,OAAA,CAAQ,QAAQ,IAAA,CAAK,KAAK,GAAG,OAAO,IAAA;AACjE,MAAA,OAAO,OAAA,CAA0B,YAAA,CAAa,MAAA,EAAQ,IAAA,CAAK,UAAU,CAAC,CAAA;AAAA,IACvE,CAAC,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,mBAAA,CAAoB,KAAA,EAAmC,OAAA,EAA0D;AACtH,IAAA,MAAM,IAAA,GAAO,aAAA,CAAc,KAAA,EAAO,OAAO,CAAA;AACzC,IAAA,MAAM,IAAA,CAAK,UAAU,qBAAqB,CAAA;AAC1C,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,IAAA,CAAK,MAAA,EAAQ,CAACA,MAAAA,KAAU;AAC3C,MAAA,MAAM,QAAA,GAAW,IAAA,CAAK,QAAA,CAASA,MAAK,CAAA;AACpC,MAAA,MAAM,MAAA,GAAS,MAAM,QAAQ,CAAA;AAC7B,MAAA,MAAM,aAA2F,EAAC;AAClG,MAAA,KAAA,MAAW,GAAA,IAAO,IAAA,CAAK,KAAA,CAAM,MAAA,EAAO,EAAG;AACtC,QAAA,IAAI,IAAI,QAAA,GAAW,QAAA,IAAY,aAAa,QAAA,CAAS,GAAA,CAAI,MAAM,CAAA,EAAG,UAAA,CAAW,KAAK,EAAE,QAAA,EAAU,IAAI,QAAA,EAAU,IAAA,EAAM,GAAG,GAAA,EAAK,GAAA,CAAI,KAAK,CAAA;AAAA,MACpI;AACA,MAAA,KAAA,MAAW,MAAA,IAAU,IAAA,CAAK,QAAA,CAAS,MAAA,EAAO,EAAG;AAC5C,QAAA,IAAI,MAAA,CAAO,QAAA,GAAW,QAAA,EAAU,UAAA,CAAW,KAAK,EAAE,QAAA,EAAU,MAAA,CAAO,QAAA,EAAU,IAAA,EAAM,CAAA,EAAG,GAAA,EAAK,MAAA,CAAO,KAAK,CAAA;AAAA,MACxG;AACA,MAAA,KAAA,MAAW,MAAA,IAAU,IAAA,CAAK,QAAA,CAAS,MAAA,EAAO,EAAG;AAC5C,QAAA,IAAI,OAAO,QAAA,GAAW,QAAA,IAAY,gBAAgB,QAAA,CAAS,MAAA,CAAO,MAAM,CAAA,EAAG,UAAA,CAAW,KAAK,EAAE,QAAA,EAAU,OAAO,QAAA,EAAU,IAAA,EAAM,GAAG,GAAA,EAAK,MAAA,CAAO,KAAK,CAAA;AAAA,MACnJ;AACA,MAAA,UAAA,CAAW,KAAK,CAAC,IAAA,EAAM,KAAA,KAAU,IAAA,CAAK,WAAW,KAAA,CAAM,QAAA,IAAY,IAAA,CAAK,IAAA,GAAO,MAAM,IAAA,IAAQ,WAAA,CAAY,KAAK,GAAA,EAAK,KAAA,CAAM,GAAG,CAAC,CAAA;AAC7H,MAAA,MAAM,OAAO,UAAA,CAAW,MAAA,GAAS,KAAK,KAAA,GAAQ,UAAA,CAAW,SAAS,IAAA,CAAK,KAAA;AACvE,MAAA,MAAM,UAAU,EAAE,UAAA,EAAY,GAAG,eAAA,EAAiB,CAAA,EAAG,kBAAkB,CAAA,EAAE;AACzE,MAAA,KAAA,IAAS,KAAA,GAAQ,CAAA,EAAG,KAAA,GAAQ,IAAA,EAAM,SAAS,CAAA,EAAG;AAC7C,QAAA,MAAM,IAAA,GAAO,UAAA,CAAW,KAAK,CAAA,CAAG,IAAA;AAChC,QAAA,IAAI,IAAA,KAAS,CAAA,EAAG,OAAA,CAAQ,UAAA,IAAc,CAAA;AAAA,aAAA,IAC7B,IAAA,KAAS,CAAA,EAAG,OAAA,CAAQ,gBAAA,IAAoB,CAAA;AAAA,qBACpC,eAAA,IAAmB,CAAA;AAAA,MACjC;AACA,MAAA,MAAM,MAAA,GAAS,QAA4B,EAAE,MAAA,EAAQ,SAAS,IAAA,EAAM,UAAA,CAAW,MAAA,GAAS,IAAA,EAAM,CAAA;AAI9F,MAAA,IAAA,CAAK,gBAAA,GAAmB,QAAA;AACxB,MAAA,KAAA,IAAS,KAAA,GAAQ,CAAA,EAAG,KAAA,GAAQ,IAAA,EAAM,SAAS,CAAA,EAAG;AAC7C,QAAA,MAAM,SAAA,GAAY,WAAW,KAAK,CAAA;AAClC,QAAA,IAAI,SAAA,CAAU,SAAS,CAAA,EAAG;AACzB,UAAA,IAAA,CAAK,KAAA,CAAM,MAAA,CAAO,SAAA,CAAU,GAAG,CAAA;AAAA,QAChC,CAAA,MAAA,IAAW,SAAA,CAAU,IAAA,KAAS,CAAA,EAAG;AAChC,UAAA,IAAA,CAAK,QAAA,CAAS,MAAA,CAAO,SAAA,CAAU,GAAG,CAAA;AAClC,UAAA,IAAA,CAAK,QAAA,CAAS,MAAA,CAAO,SAAA,CAAU,GAAG,CAAA;AAAA,QACnC,CAAA,MAAO;AACN,UAAA,MAAM,MAAA,GAAS,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,UAAU,GAAG,CAAA;AAC9C,UAAA,IAAA,CAAK,QAAA,CAAS,MAAA,CAAO,SAAA,CAAU,GAAG,CAAA;AAClC,UAAA,IAAA,CAAK,SAAS,MAAA,CAAO,SAAA,CAAU,OAAO,cAAA,EAAgB,MAAA,CAAO,OAAO,CAAC,CAAA;AAAA,QACtE;AAAA,MACD;AACA,MAAA,OAAO,MAAA;AAAA,IACR,CAAC,CAAA;AAAA,EACF;AACD;AAYA,SAAS,SAAA,CAA4B,OAAA,EAAc,KAAA,EAAmB,MAAA,EAAsE;AAC3I,EAAA,MAAM,YAAY,OAAA,CAAQ,MAAA,CAAO,CAACD,OAAAA,KACjCA,OAAAA,CAAO,WAAW,SAAA,IAClBA,OAAAA,CAAO,iBAAiB,KAAA,CAAM,KAAA,KAC7BA,QAAO,KAAA,KAAU,MAAA,IAAaA,QAAO,KAAA,CAAM,WAAA,IAAe,MAAM,KAAA,CAAM,CAAA;AACxE,EAAA,SAAA,CAAU,KAAK,CAAC,IAAA,EAAM,KAAA,KAAU,IAAA,CAAK,gBAAgB,KAAA,CAAM,aAAA,IAAiB,IAAA,CAAK,WAAA,GAAc,MAAM,WAAA,IAAe,WAAA,CAAY,KAAK,GAAA,EAAK,KAAA,CAAM,GAAG,CAAC,CAAA;AACpJ,EAAA,MAAM,MAAA,GAAS,SAAA,CAAU,KAAA,CAAM,CAAA,EAAG,MAAM,KAAK,CAAA;AAG7C,EAAA,MAAM,IAAA,GAAO,MAAA,CAAO,GAAA,CAAI,CAACA,OAAAA,MAAY;AAAA,IACpC,MAAA,EAAAA,OAAAA;AAAA,IACA,KAAA,EAAO,EAAE,KAAA,EAAO,KAAA,CAAM,QAAA,EAAU,KAAA,EAAOA,OAAAA,CAAO,KAAA,GAAQ,CAAA,EAAG,WAAA,EAAa,KAAA,CAAM,KAAA,GAAQ,MAAM,eAAA;AAAgB,GAC3G,CAAE,CAAA;AACF,EAAA,MAAM,GAAA,GAAM,IAAA,CAAK,GAAA,CAAI,CAAC,EAAE,MAAA,EAAAA,OAAAA,EAAQ,KAAA,EAAM,KAAM,OAAA,CAAgB,MAAA,CAAOA,OAAAA,EAAQ,KAAK,CAAC,CAAC,CAAA;AAClF,EAAA,KAAA,MAAW,EAAE,MAAA,EAAAA,OAAAA,EAAQ,KAAA,MAAW,IAAA,EAAM;AACrC,IAAAA,OAAAA,CAAO,QAAQ,KAAA,CAAM,KAAA;AACrB,IAAAA,QAAO,KAAA,GAAQ,KAAA;AAAA,EAChB;AACA,EAAA,OAAO,WAAW,GAAG,CAAA;AACtB;;;AC1tBA,IAAM,OAAA,GAAU,MAAA,CAAO,MAAA,CAAO,CAAC,IAAI,CAAU,CAAA;AAGtC,SAASG,SAAW,KAAA,EAAkB;AAC5C,EAAA,OAAO,SAAY,KAAK,CAAA;AACzB;AAEA,SAASC,OAAS,IAAA,EAAkB;AACnC,EAAA,OAAO,MAAM,IAAA,EAAM,MAAM,UAAA,CAAW,eAAA,EAAiB,OAAO,CAAC,CAAA;AAC9D;AAEA,SAAS,WAAW,IAAA,EAAiD;AACpE,EAAA,OAAO;AAAA,IACN,QAAA,EAAU,UAAA,CAAW,IAAA,EAAM,UAAA,EAAY,gBAAgB,CAAA;AAAA,IACvD,OAAA,EAAS,UAAA,CAAW,IAAA,EAAM,SAAA,EAAW,eAAe,CAAA;AAAA,IACpD,cAAA,EAAgB,UAAA,CAAW,IAAA,EAAM,gBAAA,EAAkB,sBAAsB;AAAA,GAC1E;AACD;AAEA,SAAS,kBAAkB,IAAA,EAA4E;AACtG,EAAA,MAAM,aAAA,GAAgB,YAAA,CAAa,IAAA,EAAM,eAAA,EAAiB,qBAAqB,CAAA;AAC/E,EAAA,OAAO;AAAA,IACN,cAAA,EAAgB,IAAA,CAAK,aAAA,EAAe,gBAAA,EAAkB,oCAAoC,CAAA;AAAA,IAC1F,eAAA,EAAiB,MAAA,CAA+B,aAAA,EAAe,iBAAA,EAAmB,SAAS,qCAAqC,CAAA;AAAA,IAChI,SAAA,EAAW,IAAA,CAAK,aAAA,EAAe,WAAA,EAAa,+BAA+B;AAAA,GAC5E;AACD;AAMO,SAAS,mBAAA,CAAoB,OAAgB,OAAA,EAAkB;AACrE,EAAA,OAAOA,OAAM,MAAM;AAClB,IAAA,MAAM,IAAA,GAAO,cAAA,CAAe,KAAA,EAAO,OAAO,CAAA;AAC1C,IAAA,OAAO;AAAA,MACN,MAAA,EAAQ,gBAAgB,OAAO,CAAA;AAAA,MAC/B,QAAA,EAAU,UAAA,CAAW,IAAA,EAAM,UAAA,EAAY,gBAAgB,CAAA;AAAA,MACvD,OAAA,EAAS,UAAA,CAAW,IAAA,EAAM,SAAA,EAAW,eAAe,CAAA;AAAA,MACpD,YAAA,EAAc,OAAA,CAAQ,IAAA,EAAM,YAAA,EAAc,kBAAkB;AAAA,KAC7D;AAAA,EACD,CAAC,CAAA;AACF;AAGO,SAAS,cAAA,CAAe,OAAgB,OAAA,EAAkB;AAChE,EAAA,OAAOA,MAAAA,CAAM,OAAO,EAAE,MAAA,EAAQ,gBAAgB,OAAO,CAAA,EAAG,MAAA,EAAQ,UAAA,CAAW,cAAA,CAAe,KAAA,EAAO,OAAO,CAAC,GAAE,CAAE,CAAA;AAC9G;AAEO,SAAS,cAAA,CAAe,OAAgB,OAAA,EAAkB;AAChE,EAAA,OAAOA,OAAM,MAAM;AAClB,IAAA,MAAM,IAAA,GAAO,cAAA,CAAe,KAAA,EAAO,OAAO,CAAA;AAC1C,IAAA,OAAO;AAAA,MACN,MAAA,EAAQ,gBAAgB,OAAO,CAAA;AAAA,MAC/B,MAAA,EAAQ,WAAW,IAAI,CAAA;AAAA,MACvB,QAAA,EAAU,QAAA,CAAS,IAAA,EAAM,mBAAA,EAAqB,yBAAyB,CAAA;AAAA,MACvE,aAAA,EAAe,kBAAkB,IAAI;AAAA,KACtC;AAAA,EACD,CAAC,CAAA;AACF;AAEO,SAAS,sBAAA,CAAuB,OAAgB,OAAA,EAAkB;AACxE,EAAA,OAAOA,OAAM,MAAM;AAClB,IAAA,MAAM,IAAA,GAAO,cAAA,CAAe,KAAA,EAAO,OAAO,CAAA;AAC1C,IAAA,OAAO;AAAA,MACN,MAAA,EAAQ,gBAAgB,OAAO,CAAA;AAAA,MAC/B,MAAA,EAAQ,WAAW,IAAI,CAAA;AAAA,MACvB,gBAAA,EAAkB,mBAAA,CAAoB,IAAA,EAAM,kBAAA,EAAoB,0BAA0B,CAAC,CAAA;AAAA,MAC3F,QAAA,EAAU,QAAA,CAAS,IAAA,EAAM,mBAAA,EAAqB,yBAAyB;AAAA,KACxE;AAAA,EACD,CAAC,CAAA;AACF;AAEO,SAAS,oBAAA,CAAqB,OAAgB,OAAA,EAAkB;AACtE,EAAA,OAAOA,OAAM,MAAM;AAClB,IAAA,MAAM,IAAA,GAAO,cAAA,CAAe,KAAA,EAAO,OAAO,CAAA;AAC1C,IAAA,OAAO,EAAE,MAAA,EAAQ,eAAA,CAAgB,OAAO,GAAG,MAAA,EAAQ,UAAA,CAAW,IAAI,CAAA,EAAG,kBAAkB,mBAAA,CAAoB,IAAA,EAAM,kBAAA,EAAoB,wBAAA,EAA0B,CAAC,CAAA,EAAE;AAAA,EACnK,CAAC,CAAA;AACF;AAEO,SAAS,4BAAA,CAA6B,OAAgB,OAAA,EAAkB;AAC9E,EAAA,OAAOA,OAAM,MAAM;AAClB,IAAA,MAAM,IAAA,GAAO,cAAA,CAAe,KAAA,EAAO,OAAO,CAAA;AAC1C,IAAA,OAAO;AAAA,MACN,MAAA,EAAQ,gBAAgB,OAAO,CAAA;AAAA,MAC/B,MAAA,EAAQ,WAAW,IAAI,CAAA;AAAA,MACvB,eAAA,EAAiB,mBAAA,CAAoB,IAAA,EAAM,iBAAA,EAAmB,yBAAyB,CAAC,CAAA;AAAA,MACxF,aAAA,EAAe,kBAAkB,IAAI;AAAA,KACtC;AAAA,EACD,CAAC,CAAA;AACF;AASO,IAAM,KAAA,GAAsB,CAAC,MAAA,KAAY,MAAA,KAAW,WAAW,QAAA,GAAW,MAAA;AAC1E,IAAM,MAAA,GAAuB,CAAC,MAAA,KAAY,MAAA,KAAW,WAAW,QAAA,GAAW,MAAA;AAC3E,IAAM,SAAuB,MAAM,SAAA;AAInC,SAAS,qBAAqB,IAAA,EAAoC;AACxE,EAAA,OAAO,CAAC,OAAA,KAAY;AACnB,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,OAAA,CAAQ,MAAM,CAAA;AAClC,IAAA,OAAO,WAAW,MAAA,GAAY,MAAA,GAAY,EAAE,MAAA,EAAQ,QAAA,EAAU,QAAQ,iBAAA,EAAkB;AAAA,EACzF,CAAA;AACD;AAQO,SAAS,gBAAA,CACf,OAAA,EACA,gBAAA,EACAH,MAAAA,EACA,MAAA,EAC8F;AAC9F,EAAA,IAAI,YAAY,MAAA,EAAW,OAAO,EAAE,OAAA,EAAS,OAAA,CAAQ,WAAW,CAAA,EAAE;AAClE,EAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,SAAA,EAAW,OAAO,EAAE,SAAS,OAAA,CAAQ,SAAA,EAAW,OAAA,CAAQ,QAAQ,CAAA,EAAE;AACzF,EAAA,IAAI,gBAAA,KAAqB,MAAA,IAAa,gBAAA,KAAqB,OAAA,CAAQ,QAAA,EAAU,OAAO,EAAE,OAAA,EAAS,OAAA,CAAQ,mBAAA,EAAqB,OAAA,CAAQ,QAAQ,CAAA,EAAE;AAC9I,EAAA,MAAM,IAAA,GAAO,OAAO,OAAO,CAAA;AAC3B,EAAA,IAAI,IAAA,KAAS,QAAW,OAAO,EAAE,SAAS,OAAA,CAAQ,oBAAA,EAAsB,OAAA,CAAQ,QAAQ,CAAA,EAAE;AAC1F,EAAA,OAAO;AAAA,IACN,QAAA,EAAU;AAAA,MACT,QAAA,EAAU,QAAQ,QAAA,GAAW,CAAA;AAAA,MAC7B,QAAQ,IAAA,CAAK,MAAA;AAAA,MACb,mBAAmB,IAAA,CAAK,QAAA;AAAA,MACxB,eAAA,EAAiB,OAAA,CAAQA,MAAAA,EAAO,OAAA,CAAQ,eAAe;AAAA;AACxD,GACD;AACD;AAEO,SAAS,OAAA,CAAQ,SAA0C,eAAA,EAA0D;AAC3H,EAAA,OAAOE,SAAwC,EAAE,OAAA,EAAS,KAAA,EAAO,OAAA,EAAS,iBAAiB,CAAA;AAC5F;AAOO,SAAS,WAAA,CAAY,MAAA,EAAgB,QAAA,EAAyB,mBAAA,EAAiD;AACrH,EAAA,OAAO;AAAA,IACN,gBAAgB,MAAA,CAAO,cAAA;AAAA,IACvB,UAAU,QAAA,CAAS,QAAA;AAAA,IACnB,UAAU,MAAA,CAAO,QAAA;AAAA,IACjB,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,QAAQ,QAAA,CAAS,MAAA;AAAA,IACjB,mBAAmB,QAAA,CAAS,iBAAA;AAAA,IAC5B,aAAA,EAAe,KAAA,CAAM,QAAA,CAAS,eAAe,CAAA;AAAA,IAC7C,cAAA,EAAgB,mBAAA,KAAwB,MAAA,GAAY,IAAA,GAAO,MAAM,mBAAmB;AAAA,GACrF;AACD;AAWO,SAAS,oBAAoB,SAAA,EAA6C;AAChF,EAAA,MAAM,OAAA,GAAU,SAAA,CAAU,SAAA,CAAU,MAAA,GAAS,CAAC,CAAA;AAC9C,EAAA,KAAA,IAAS,QAAQ,SAAA,CAAU,MAAA,GAAS,GAAG,KAAA,IAAS,CAAA,EAAG,SAAS,CAAA,EAAG;AAC9D,IAAA,IAAI,SAAA,CAAU,KAAK,CAAA,CAAG,MAAA,KAAW,OAAA,CAAQ,QAAQ,OAAO,SAAA,CAAU,KAAK,CAAA,CAAG,QAAA,GAAW,CAAA;AAAA,EACtF;AACA,EAAA,OAAO,CAAA;AACR;AAEO,SAAS,gBAAA,CAAiB,MAAA,EAAgB,OAAA,EAAiB,aAAA,EAAgF;AACjJ,EAAA,OAAOA,QAAAA,CAAsC;AAAA,IAC5C,gBAAgB,MAAA,CAAO,cAAA;AAAA,IACvB,UAAU,MAAA,CAAO,QAAA;AAAA,IACjB,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,OAAA;AAAA,IACA,GAAG;AAAA,GACH,CAAA;AACF;AAGO,SAASE,YAAAA,CAAY,MAAc,KAAA,EAAuB;AAChE,EAAA,OAAO,IAAA,GAAO,KAAA,GAAQ,EAAA,GAAK,IAAA,GAAO,QAAQ,CAAA,GAAI,CAAA;AAC/C;;;ACpJA,SAAS,eAAA,CAAgB,QAAA,EAAkB,OAAA,EAAiB,cAAA,EAAgC;AAC3F,EAAA,OAAO,YAAA,CAAa,QAAA,EAAU,OAAA,EAAS,cAAc,CAAA;AACtD;AAEA,SAASC,WAAAA,GAA4B;AACpC,EAAA,OAAO,QAAQ,OAAA,EAAQ;AACxB;AAEA,SAAS,UAAA,CAAW,cAAiC,KAAA,EAAuB;AAC3E,EAAA,OAAO,WAAA,CAAY,YAAA,EAAc,YAAA,CAAa,SAAA,CAAU,KAAK,CAAA,EAAI,YAAA,CAAa,SAAA,CAAU,KAAA,GAAQ,CAAC,CAAA,EAAG,eAAe,CAAA;AACpH;AASO,IAAM,iCAAN,MAAoG;AAAA,EACjG,MAAA;AAAA,EACA,iBAAA;AAAA,EACA,cAAA,uBAAqB,GAAA,EAA+B;AAAA,EAE7D,YAAY,OAAA,EAAgD;AAC3D,IAAA,IAAA,CAAK,MAAA,GAAS,MAAM,MAAM;AACzB,MAAA,IAAI,OAAA,KAAY,QAAQ,OAAO,OAAA,KAAY,UAAU,MAAM,UAAA,CAAW,iBAAiB,OAAO,CAAA;AAC9F,MAAA,OAAO,YAAA,CAAa,QAAQ,KAAK,CAAA;AAAA,IAClC,CAAA,EAAG,MAAM,UAAA,CAAW,eAAA,EAAiB,OAAO,CAAC,CAAA;AAC7C,IAAA,IAAA,CAAK,iBAAA,GAAoB,cAAA,CAAe,OAAA,EAAS,kBAAkB,CAAA;AAAA,EACpE;AAAA;AAAA,EAGA,MAAM,UAAU,SAAA,EAAkC;AACjD,IAAA,MAAM,OAAO,IAAA,CAAK,iBAAA;AAClB,IAAA,IAAI,IAAA,KAAS,MAAA,EAAW,OAAOA,WAAAA,EAAW;AAC1C,IAAA,IAAI;AACH,MAAA,MAAM,KAAK,SAAS,CAAA;AAAA,IACrB,CAAA,CAAA,MAAQ;AACP,MAAA,MAAM,UAAA,CAAW,gBAAgB,kBAAkB,CAAA;AAAA,IACpD;AAAA,EACD;AAAA,EAEA,OAAA,CAAW,QAAoB,IAAA,EAA+B;AAC7D,IAAA,OAAO,MAAM,MAAM;AAClB,MAAA,MAAML,MAAAA,GAAQ,SAAA,CAAU,IAAA,CAAK,MAAM,CAAA;AACnC,MAAA,gBAAA,CAAiB,QAAQA,MAAK,CAAA;AAC9B,MAAA,OAAO,KAAKA,MAAK,CAAA;AAAA,IAClB,CAAA,EAAG,MAAM,UAAA,CAAW,cAAA,EAAgB,OAAO,CAAC,CAAA;AAAA,EAC7C;AAAA,EAEA,MAAM,MAAA,EAA+C;AACpD,IAAA,OAAO,IAAA,CAAK,cAAA,CAAe,GAAA,CAAI,eAAA,CAAgB,MAAA,CAAO,UAAU,MAAA,CAAO,OAAA,EAAS,MAAA,CAAO,cAAc,CAAC,CAAA;AAAA,EACvG;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,wBAAA,CACL,KAAA,EACA,OAAA,EACiD;AACjD,IAAA,MAAM,IAAA,GAAO,mBAAA,CAAoB,KAAA,EAAO,OAAO,CAAA;AAC/C,IAAA,MAAM,IAAA,CAAK,UAAU,0BAA0B,CAAA;AAC/C,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,IAAA,CAAK,MAAA,EAAQ,MAAM;AACtC,MAAA,MAAM,QAAkB,EAAC;AACzB,MAAA,MAAM,aAAA,GAAgB,CAAC,GAAG,IAAA,CAAK,cAAA,CAAe,MAAA,EAAQ,CAAA,CACpD,MAAA,CAAO,CAAC,YAAA,KAAiB,YAAA,CAAa,QAAA,KAAa,IAAA,CAAK,QAAA,IAAY,YAAA,CAAa,OAAA,KAAY,IAAA,CAAK,OAAO,CAAA,CACzG,IAAA,CAAK,CAAC,IAAA,EAAM,KAAA,KAAUI,YAAAA,CAAY,IAAA,CAAK,cAAA,EAAgB,KAAA,CAAM,cAAc,CAAC,CAAA;AAC9E,MAAA,KAAA,MAAW,gBAAgB,aAAA,EAAe;AAEzC,QAAA,KAAA,IAAS,KAAA,GAAQ,aAAa,SAAA,CAAU,MAAA,GAAS,GAAG,KAAA,IAAS,CAAA,EAAG,SAAS,CAAA,EAAG;AAC3E,UAAA,IAAI,aAAa,SAAA,CAAU,KAAK,CAAA,CAAG,eAAA,IAAmB,KAAK,YAAA,EAAc;AACxE,YAAA,MAAM,IAAA,GAAO,YAAA,CAAa,SAAA,CAAU,KAAA,GAAQ,CAAC,CAAA;AAC7C,YAAA,IAAI,IAAA,KAAS,MAAA,IAAa,IAAA,CAAK,YAAA,GAAe,IAAA,CAAK,eAAA,EAAiB,KAAA,CAAM,IAAA,CAAK,UAAA,CAAW,YAAA,EAAc,KAAK,CAAC,CAAA;AAC9G,YAAA;AAAA,UACD;AAAA,QACD;AAAA,MACD;AACA,MAAA,OAAOF,SAA+C,KAAK,CAAA;AAAA,IAC5D,CAAC,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,gBAAA,CACL,KAAA,EACA,OAAA,EAC8C;AAC9C,IAAA,MAAM,IAAA,GAAO,cAAA,CAAe,KAAA,EAAO,OAAO,CAAA;AAC1C,IAAA,MAAM,IAAA,CAAK,UAAU,kBAAkB,CAAA;AACvC,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,IAAA,CAAK,MAAA,EAAQ,MAAM;AACtC,MAAA,MAAM,YAAA,GAAe,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,MAAM,CAAA;AAC3C,MAAA,IAAI,YAAA,KAAiB,QAAW,OAAO,IAAA;AACvC,MAAA,OAAOA,QAAAA,CAAqC;AAAA,QAC3C,gBAAgB,YAAA,CAAa,cAAA;AAAA,QAC7B,UAAU,YAAA,CAAa,QAAA;AAAA,QACvB,SAAS,YAAA,CAAa,OAAA;AAAA,QACtB,QAAQ,YAAA,CAAa,SAAA,CAAU,aAAa,SAAA,CAAU,MAAA,GAAS,CAAC,CAAA,CAAG,MAAA;AAAA,QACnE,mBAAA,EAAqB,mBAAA,CAAoB,YAAA,CAAa,SAAS,CAAA;AAAA,QAC/D,eAAe,YAAA,CAAa,cAAA,CAAe,YAAA,CAAa,cAAA,CAAe,SAAS,CAAC;AAAA,OACjF,CAAA;AAAA,IACF,CAAC,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,sBAAA,CACL,KAAA,EACA,OAAA,EACiD;AACjD,IAAA,MAAM,IAAA,GAAO,cAAA,CAAe,KAAA,EAAO,OAAO,CAAA;AAC1C,IAAA,MAAM,IAAA,CAAK,UAAU,wBAAwB,CAAA;AAC7C,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,IAAA,CAAK,MAAA,EAAQ,MAAM;AACtC,MAAA,MAAM,YAAA,GAAe,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,MAAM,CAAA;AAC3C,MAAA,IAAI,YAAA,KAAiB,MAAA,EAAW,OAAOA,QAAAA,CAA+C,EAAE,CAAA;AACxF,MAAA,OAAOA,QAAAA,CAA+C,YAAA,CAAa,SAAA,CAAU,GAAA,CAAI,CAAC,SAAA,EAAW,KAAA,KAAU,UAAA,CAAW,YAAA,EAAc,KAAK,CAAC,CAAC,CAAA;AAAA,IACxI,CAAC,CAAA;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,kBAAA,CACL,KAAA,EAKA,OAAA,EAC0C;AAC1C,IAAA,MAAM,IAAA,GAAO,cAAA,CAAe,KAAA,EAAO,OAAO,CAAA;AAC1C,IAAA,MAAM,IAAA,CAAK,UAAU,oBAAoB,CAAA;AACzC,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,IAAA,CAAK,MAAA,EAAQ,CAACF,MAAAA,KAAU;AAC3C,MAAA,IAAI,IAAA,CAAK,MAAM,IAAA,CAAK,MAAM,MAAM,MAAA,EAAW,OAAO,QAAQ,gBAAgB,CAAA;AAC1E,MAAA,MAAM,EAAE,QAAA,EAAU,OAAA,EAAS,cAAA,KAAmB,IAAA,CAAK,MAAA;AACnD,MAAA,MAAM,gBAAgB,gBAAA,CAAiB,IAAA,CAAK,MAAA,EAAQ,CAAA,EAAG,KAAK,aAAa,CAAA;AACzE,MAAA,MAAM,YAAA,GAAkC;AAAA,QACvC,cAAA;AAAA,QACA,QAAA;AAAA,QACA,OAAA;AAAA,QACA,SAAA,EAAW,CAAC,EAAE,QAAA,EAAU,CAAA,EAAG,MAAA,EAAQ,QAAA,EAAU,iBAAA,EAAmB,IAAA,CAAK,QAAA,EAAU,eAAA,EAAiBA,MAAAA,EAAO,CAAA;AAAA,QACvG,cAAA,EAAgB,CAAC,aAAa;AAAA,OAC/B;AACA,MAAA,MAAM,MAAA,GAASE,QAAAA,CAAwC,EAAE,OAAA,EAAS,IAAA,EAAM,QAAA,EAAU,UAAA,CAAW,YAAA,EAAc,CAAC,CAAA,EAAG,aAAA,EAAe,CAAA;AAC9H,MAAA,IAAA,CAAK,eAAe,GAAA,CAAI,eAAA,CAAgB,UAAU,OAAA,EAAS,cAAc,GAAG,YAAY,CAAA;AACxF,MAAA,OAAO,MAAA;AAAA,IACR,CAAC,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,uBAAA,CACL,KAAA,EACA,OAAA,EAC0C;AAC1C,IAAA,MAAM,IAAA,GAAO,sBAAA,CAAuB,KAAA,EAAO,OAAO,CAAA;AAClD,IAAA,MAAM,IAAA,CAAK,UAAU,yBAAyB,CAAA;AAC9C,IAAA,OAAO,IAAA,CAAK,QAAQ,IAAA,CAAK,MAAA,EAAQ,CAACF,MAAAA,KACjC,IAAA,CAAK,WAAA,CAAY,IAAA,CAAK,MAAA,EAAQ,IAAA,CAAK,kBAAkBA,MAAAA,EAAO,CAAC,OAAA,MAAa,EAAE,MAAA,EAAQ,OAAA,CAAQ,QAAQ,QAAA,EAAU,IAAA,CAAK,QAAA,EAAS,CAAE,CAAC,CAAA;AAAA,EACjI;AAAA,EAEA,MAAM,iBAAA,CAAkB,KAAA,EAA2C,OAAA,EAAsE;AACxI,IAAA,OAAO,IAAA,CAAK,aAAA,CAAc,mBAAA,EAAqB,KAAA,EAAO,SAAS,KAAK,CAAA;AAAA,EACrE;AAAA,EAEA,MAAM,kBAAA,CAAmB,KAAA,EAA2C,OAAA,EAAsE;AACzI,IAAA,OAAO,IAAA,CAAK,aAAA,CAAc,oBAAA,EAAsB,KAAA,EAAO,SAAS,MAAM,CAAA;AAAA,EACvE;AAAA,EAEA,MAAM,kBAAA,CAAmB,KAAA,EAA2C,OAAA,EAAsE;AACzI,IAAA,OAAO,IAAA,CAAK,aAAA,CAAc,oBAAA,EAAsB,KAAA,EAAO,SAAS,MAAM,CAAA;AAAA,EACvE;AAAA,EAEA,MAAM,4BAAA,CACL,KAAA,EACA,OAAA,EAC2C;AAC3C,IAAA,MAAM,IAAA,GAAO,4BAAA,CAA6B,KAAA,EAAO,OAAO,CAAA;AACxD,IAAA,MAAM,IAAA,CAAK,UAAU,8BAA8B,CAAA;AACnD,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,IAAA,CAAK,MAAA,EAAQ,MAAM;AACtC,MAAA,MAAM,YAAA,GAAe,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,MAAM,CAAA;AAC3C,MAAA,IAAI,YAAA,KAAiB,QAAW,OAAOE,QAAAA,CAAyC,EAAE,OAAA,EAAS,KAAA,EAAO,OAAA,EAAS,WAAA,EAAa,CAAA;AACxH,MAAA,IAAI,YAAA,CAAa,UAAU,YAAA,CAAa,SAAA,CAAU,SAAS,CAAC,CAAA,CAAG,WAAW,SAAA,EAAW;AACpF,QAAA,OAAOA,SAAyC,EAAE,OAAA,EAAS,KAAA,EAAO,OAAA,EAAS,WAAW,CAAA;AAAA,MACvF;AACA,MAAA,MAAM,UAAU,YAAA,CAAa,cAAA,CAAe,YAAA,CAAa,cAAA,CAAe,SAAS,CAAC,CAAA;AAClF,MAAA,IAAI,KAAK,eAAA,KAAoB,MAAA,IAAa,IAAA,CAAK,eAAA,KAAoB,QAAQ,OAAA,EAAS;AACnF,QAAA,OAAOA,QAAAA,CAAyC,EAAE,OAAA,EAAS,KAAA,EAAO,SAAS,kBAAA,EAAoB,cAAA,EAAgB,OAAA,CAAQ,OAAA,EAAS,CAAA;AAAA,MACjI;AACA,MAAA,MAAM,gBAAgB,gBAAA,CAAiB,YAAA,EAAc,QAAQ,OAAA,GAAU,CAAA,EAAG,KAAK,aAAa,CAAA;AAC5F,MAAA,MAAM,SAASA,QAAAA,CAAyC,EAAE,OAAA,EAAS,IAAA,EAAM,eAAe,CAAA;AACxF,MAAA,YAAA,CAAa,cAAA,CAAe,KAAK,aAAa,CAAA;AAC9C,MAAA,OAAO,MAAA;AAAA,IACR,CAAC,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,aAAA,CACL,SAAA,EACA,KAAA,EACA,SACA,IAAA,EAC0C;AAC1C,IAAA,MAAM,IAAA,GAAO,oBAAA,CAAqB,KAAA,EAAO,OAAO,CAAA;AAChD,IAAA,MAAM,IAAA,CAAK,UAAU,SAAS,CAAA;AAC9B,IAAA,OAAO,KAAK,OAAA,CAAQ,IAAA,CAAK,MAAA,EAAQ,CAACF,WAAU,IAAA,CAAK,WAAA,CAAY,IAAA,CAAK,MAAA,EAAQ,KAAK,gBAAA,EAAkBA,MAAAA,EAAO,oBAAA,CAAqB,IAAI,CAAC,CAAC,CAAA;AAAA,EACpI;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,WAAA,CAAY,MAAA,EAAgB,gBAAA,EAAsCA,MAAAA,EAAe,MAAA,EAAwD;AACxI,IAAA,MAAM,YAAA,GAAe,IAAA,CAAK,KAAA,CAAM,MAAM,CAAA;AACtC,IAAA,MAAM,QAAA,GAAW,gBAAA,CAAiB,YAAA,EAAc,SAAA,CAAU,YAAA,CAAa,SAAA,CAAU,MAAA,GAAS,CAAC,CAAA,EAAG,gBAAA,EAAkBA,MAAAA,EAAO,MAAM,CAAA;AAC7H,IAAA,IAAI,SAAA,IAAa,QAAA,EAAU,OAAO,QAAA,CAAS,OAAA;AAC3C,IAAA,MAAM,OAAA,GAAU,YAAA;AAGhB,IAAA,MAAM,SAASE,QAAAA,CAAwC;AAAA,MACtD,OAAA,EAAS,IAAA;AAAA,MACT,QAAA,EAAU,WAAA,CAAY,OAAA,EAAS,QAAA,CAAS,UAAU,MAAS,CAAA;AAAA,MAC3D,eAAe,OAAA,CAAQ,cAAA,CAAe,OAAA,CAAQ,cAAA,CAAe,SAAS,CAAC;AAAA,KACvE,CAAA;AACD,IAAA,OAAA,CAAQ,SAAA,CAAU,IAAA,CAAK,QAAA,CAAS,QAAQ,CAAA;AACxC,IAAA,OAAO,MAAA;AAAA,EACR;AACD;;;ACrQA,IAAM,WAAA,GAAc,yBAAA;AAEb,IAAM,sBAAA,GAAyB,yBAAA;AAG/B,SAAS,iBAAiB,OAAA,EAA0B;AAC1D,EAAA,OAAO,MAAM,MAAM;AAClB,IAAA,MAAM,SAAU,OAAA,CAAiC,MAAA;AACjD,IAAA,IAAI,MAAA,KAAW,KAAA,CAAA,EAAW,OAAO,CAAA,CAAA,EAAI,sBAAsB,CAAA,CAAA,CAAA;AAC3D,IAAA,IAAI,OAAO,MAAA,KAAW,QAAA,IAAY,CAAC,OAAA,CAAQ,WAAA,EAAa,MAAM,CAAA,EAAG,MAAM,UAAA,CAAW,eAAA,EAAiB,QAAQ,CAAA;AAC3G,IAAA,OAAO,IAAI,MAAM,CAAA,CAAA,CAAA;AAAA,EAClB,CAAA,EAAG,MAAM,UAAA,CAAW,eAAA,EAAiB,QAAQ,CAAC,CAAA;AAC/C;AAGO,SAAS,eAAe,OAAA,EAAuC;AACrE,EAAA,OAAO,MAAM,MAAM;AAClB,IAAA,MAAM,OAAQ,OAAA,CAA+B,IAAA;AAC7C,IAAA,IAAI,IAAA,KAAS,QAAQ,OAAO,IAAA,KAAS,UAAU,MAAM,UAAA,CAAW,iBAAiB,MAAM,CAAA;AACvF,IAAA,MAAM,EAAE,KAAA,EAAO,OAAA,EAAQ,GAAI,IAAA;AAC3B,IAAA,IAAI,OAAO,UAAU,UAAA,IAAc,OAAO,YAAY,UAAA,EAAY,MAAM,UAAA,CAAW,eAAA,EAAiB,MAAM,CAAA;AAC1G,IAAA,OAAO,IAAA;AAAA,EACR,CAAA,EAAG,MAAM,UAAA,CAAW,eAAA,EAAiB,MAAM,CAAC,CAAA;AAC7C;AAOA,eAAsB,UAAa,GAAA,EAAmC;AACrE,EAAA,IAAI;AACH,IAAA,OAAO,MAAM,GAAA,EAAI;AAAA,EAClB,SAAS,MAAA,EAAQ;AAChB,IAAA,OAAO,MAAS,MAAM;AACrB,MAAA,MAAM,MAAA;AAAA,IACP,CAAA,EAAG,MAAM,UAAA,CAAW,cAAA,EAAgB,OAAO,CAAC,CAAA;AAAA,EAC7C;AACD;AAgBA,eAAsB,aAAA,CACrB,MACA,GAAA,EACa;AACb,EAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK,OAAA,EAAQ;AACtC,EAAA,IAAI,OAAA,GAAU,KAAA;AACd,EAAA,IAAI,SAAA,GAAY,KAAA;AAChB,EAAA,IAAI;AACH,IAAA,MAAM,UAAA,CAAW,MAAM,sCAAsC,CAAA;AAC7D,IAAA,MAAM,SAAS,MAAM,GAAA,CAAI,UAAA,EAAY,EAAE,SAAS,MAAM;AAAE,MAAA,SAAA,GAAY,IAAA;AAAA,IAAM,GAAG,CAAA;AAC7E,IAAA,MAAM,UAAA,CAAW,KAAA,CAAM,SAAA,GAAY,UAAA,GAAa,QAAQ,CAAA;AACxD,IAAA,OAAO,MAAA;AAAA,EACR,SAAS,KAAA,EAAO;AACf,IAAA,IAAI;AACH,MAAA,MAAM,UAAA,CAAW,MAAM,UAAU,CAAA;AAAA,IAClC,CAAA,CAAA,MAAQ;AACP,MAAA,OAAA,GAAU,IAAA;AAAA,IACX;AACA,IAAA,MAAM,KAAA;AAAA,EACP,CAAA,SAAE;AACD,IAAA,UAAA,CAAW,QAAQ,OAAO,CAAA;AAAA,EAC3B;AACD;AA6BO,SAAS,QAAA,CACf,IAAA,EACA,KAAA,EACA,MAAA,EACA,MACA,IAAA,EACa;AACb,EAAA,OAAO,UAAU,MAAM,aAAA,CAAc,IAAA,EAAM,OAAO,IAAI,OAAA,KAAY;AACjE,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,EAAE,CAAA;AAC5B,IAAA,MAAMF,MAAAA,GAAQ,UAAU,KAAK,CAAA;AAC7B,IAAA,gBAAA,CAAiB,QAAQA,MAAK,CAAA;AAC9B,IAAA,MAAM,SAAS,MAAM,IAAA,CAAK,EAAA,EAAIA,MAAAA,EAAO,QAAQ,OAAO,CAAA;AACpD,IAAA,gBAAA,CAAiB,MAAA,EAAQ,SAAA,CAAU,KAAK,CAAC,CAAA;AACzC,IAAA,OAAO,MAAA;AAAA,EACR,CAAC,CAAC,CAAA;AACH;AAGO,SAAS,OAAA,CACf,IAAA,EACA,KAAA,EACA,MAAA,EACA,IAAA,EACa;AACb,EAAA,OAAO,UAAU,YAAY;AAC5B,IAAA,MAAMA,MAAAA,GAAQ,UAAU,KAAK,CAAA;AAC7B,IAAA,gBAAA,CAAiB,QAAQA,MAAK,CAAA;AAC9B,IAAA,OAAO,IAAA,CAAK,MAAMA,MAAK,CAAA;AAAA,EACxB,CAAC,CAAA;AACF;AAGA,eAAsB,SAAA,CAAU,MAAgDR,MAAAA,EAA8B;AAC7G,EAAA,IAAI,SAAS,MAAA,EAAW;AACxB,EAAA,IAAI;AACH,IAAA,MAAM,IAAA,EAAK;AAAA,EACZ,CAAA,CAAA,MAAQ;AACP,IAAA,MAAM,UAAA,CAAW,gBAAgBA,MAAK,CAAA;AAAA,EACvC;AACD;AAwBA,eAAsB,sBAAA,CACrB,IAAA,EACA,MAAA,EACA,SAAA,EACA,UAAA,EACgB;AAChB,EAAA,MAAM,OAAA,GAAU,CAAC,GAAG,UAAU,CAAA,CAAE,IAAA,CAAK,CAAC,IAAA,EAAM,KAAA,KAAU,IAAA,CAAK,OAAA,GAAU,KAAA,CAAM,OAAO,CAAA;AAClF,EAAA,MAAM,SAAA,GAAY,MAAM,OAAA,CAAQ,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,CAAC,SAAA,KAAc,SAAA,CAAU,SAAA,CAAU,GAAA,EAAK,qBAAqB,CAAC,CAAC,CAAA;AAC/G,EAAA,MAAM,SAAA,CAAU,MAAM,aAAA,CAAc,IAAA,EAAM,OAAO,EAAA,KAAO;AACvD,IAAA,MAAM,GAAG,KAAA,CAAM,4CAAA,EAA8C,CAAC,CAAA,0CAAA,EAA6C,MAAM,EAAE,CAAC,CAAA;AACpH,IAAA,MAAM,EAAA,CAAG,KAAA,CAAM,CAAA,4BAAA,EAA+B,MAAM,CAAA,CAAE,CAAA;AACtD,IAAA,MAAM,EAAA,CAAG,KAAA,CAAM,CAAA,2BAAA,EAA8B,MAAM,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,GAAA,CAOjD,CAAA;AACF,IAAA,KAAA,IAAS,QAAQ,CAAA,EAAG,KAAA,GAAQ,OAAA,CAAQ,MAAA,EAAQ,SAAS,CAAA,EAAG;AACvD,MAAA,MAAM,SAAA,GAAY,QAAQ,KAAK,CAAA;AAC/B,MAAA,MAAM,QAAA,GAAW,UAAU,KAAK,CAAA;AAChC,MAAA,MAAM,QAAA,GAAW,MAAM,EAAA,CAAG,KAAA;AAAA,QACzB,wBAAwB,MAAM,CAAA,gEAAA,CAAA;AAAA,QAC9B,CAAC,SAAA,EAAW,SAAA,CAAU,OAAO;AAAA,OAC9B;AACA,MAAA,MAAM,GAAA,GAAM,QAAA,CAAS,IAAA,CAAK,CAAC,CAAA;AAC3B,MAAA,IAAI,QAAQ,KAAA,CAAA,EAAW;AACtB,QAAA,IAAI,IAAI,QAAA,KAAa,QAAA,EAAU,MAAM,UAAA,CAAW,gBAAgB,uBAAuB,CAAA;AACvF,QAAA;AAAA,MACD;AACA,MAAA,MAAM,GAAG,KAAA,CAAM,SAAA,CAAU,IAAI,UAAA,CAAW,YAAA,EAAc,MAAM,CAAC,CAAA;AAC7D,MAAA,MAAM,EAAA,CAAG,KAAA;AAAA,QACR,eAAe,MAAM,CAAA,uFAAA,CAAA;AAAA,QACrB,CAAC,SAAA,EAAW,SAAA,CAAU,OAAA,EAAS,SAAA,CAAU,MAAM,QAAQ;AAAA,OACxD;AAAA,IACD;AAAA,EACD,CAAC,CAAC,CAAA;AACH;AAMA,IAAM,YAAY,IAAA,CAAK,KAAA;AACvB,IAAMc,uBAAsB,MAAA,CAAO,aAAA;AACnC,IAAMC,kBAAAA,GAAoB,MAAA;AAQnB,SAAS,aAAa,KAAA,EAAuB;AACnD,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,IAAS,QAAQ,CAAA,EAAG,KAAA,GAAQ,KAAA,CAAM,MAAA,EAAQ,SAAS,CAAA,EAAG,GAAA,IAAO,KAAA,CAAM,UAAA,CAAW,KAAK,CAAA,CAAE,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,GAAG,GAAG,CAAA;AACjH,EAAA,OAAO,GAAA;AACR;AAGO,SAAS,KAAA,CAAM,OAAgBf,MAAAA,EAAuB;AAC5D,EAAA,MAAM,MAAA,GAAS,OAAO,KAAA,KAAU,QAAA,GAAW,KAAA,GAAQ,OAAO,KAAA,KAAU,QAAA,GAAWe,kBAAAA,CAAkB,KAAK,CAAA,GAAI,MAAA,CAAO,GAAA;AACjH,EAAA,IAAI,CAACD,oBAAAA,CAAoB,MAAM,GAAG,MAAM,UAAA,CAAW,gBAAgBd,MAAK,CAAA;AACxE,EAAA,OAAO,MAAA;AACR;AAEO,SAAS,aAAA,CAAc,OAAgBA,MAAAA,EAAmC;AAChF,EAAA,OAAO,UAAU,IAAA,IAAQ,KAAA,KAAU,SAAY,MAAA,GAAY,KAAA,CAAM,OAAOA,MAAK,CAAA;AAC9E;AAEO,SAAS,MAAA,CAAO,OAAgBA,MAAAA,EAAuB;AAC7D,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,EAAU,MAAM,UAAA,CAAW,gBAAgBA,MAAK,CAAA;AACrE,EAAA,OAAO,KAAA;AACR;AAEO,SAAS,cAAA,CAAe,OAAgBA,MAAAA,EAAmC;AACjF,EAAA,OAAO,UAAU,IAAA,IAAQ,KAAA,KAAU,SAAY,MAAA,GAAY,MAAA,CAAO,OAAOA,MAAK,CAAA;AAC/E;AASO,SAAS,MAAA,CAAO,OAAgBA,MAAAA,EAAwB;AAC9D,EAAA,MAAME,KAAAA,GAAO,MAAA,CAAO,KAAA,EAAOF,MAAK,CAAA;AAChC,EAAA,IAAI;AACH,IAAA,OAAO,UAAUE,KAAI,CAAA;AAAA,EACtB,CAAA,CAAA,MAAQ;AACP,IAAA,MAAM,UAAA,CAAW,gBAAgBF,MAAK,CAAA;AAAA,EACvC;AACD;;;AClFA,SAAS,SAAS,MAAA,EAAwB;AACzC,EAAA,OAAO;AAAA,IACN,OAAA,EAAS,GAAG,MAAM,CAAA,yBAAA,CAAA;AAAA,IAClB,IAAA,EAAM,GAAG,MAAM,CAAA,qBAAA,CAAA;AAAA,IACf,OAAA,EAAS,GAAG,MAAM,CAAA,yBAAA,CAAA;AAAA,IAClB,UAAA,EAAY,GAAG,MAAM,CAAA,4BAAA,CAAA;AAAA,IACrB,OAAA,EAAS,GAAG,MAAM,CAAA,0BAAA,CAAA;AAAA,IAClB,QAAA,EAAU,GAAG,MAAM,CAAA,0BAAA,CAAA;AAAA,IACnB,QAAA,EAAU,GAAG,MAAM,CAAA,kCAAA,CAAA;AAAA,IACnB,QAAA,EAAU,GAAG,MAAM,CAAA,yBAAA;AAAA,GACpB;AACD;AAUA,IAAM,mBAAA,GAA2D,MAAA,CAAO,MAAA,CAAO,CAAC;AAAA,EAC/E,OAAA,EAAS,CAAA;AAAA,EACT,IAAA,EAAM,mBAAA;AAAA,EACN,GAAA,EAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AA2FN,CAAA,EAAG;AAAA;AAAA;AAAA;AAAA,EAIF,OAAA,EAAS,CAAA;AAAA,EACT,IAAA,EAAM,+BAAA;AAAA,EACN,GAAA,EAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAcN,CAAA,EAAG;AAAA;AAAA;AAAA;AAAA;AAAA,EAKF,OAAA,EAAS,CAAA;AAAA,EACT,IAAA,EAAM,6BAAA;AAAA,EACN,GAAA,EAAK;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAMN,CAAC,CAAC,CAAA;AAEF,IAAM,WAAA,GAAc;AAAA,EACnB,UAAA;AAAA,EAAY,WAAA;AAAA,EAAa,UAAA;AAAA,EAAY,sBAAA;AAAA,EAAwB,8BAAA;AAAA,EAAgC,QAAA;AAAA,EAC7F,sCAAA;AAAA,EAAwC,0CAAA;AAAA,EAA4C,sCAAA;AAAA,EACpF,wDAAA;AAAA,EAA0D,0CAAA;AAAA,EAA4C,iBAAA;AAAA,EACtG,sBAAA;AAAA,EAAwB,aAAA;AAAA,EAAe;AACxC,CAAA;AAEA,IAAM,cAAA,GAAiB;AAAA,EACtB,aAAA;AAAA,EAAe,iBAAA;AAAA,EAAmB,UAAA;AAAA,EAAY,WAAA;AAAA,EAAa,UAAA;AAAA,EAAY,oDAAA;AAAA,EACvE,oBAAA;AAAA,EAAsB,8BAAA;AAAA,EAAgC,QAAA;AAAA,EAAU,sCAAA;AAAA,EAChE,0CAAA;AAAA,EAA4C,sCAAA;AAAA,EAC5C,wDAAA;AAAA,EAA0D,cAAA;AAAA,EAAgB,aAAA;AAAA,EAAe,iBAAA;AAAA,EACzF,sBAAA;AAAA,EAAwB,aAAA;AAAA,EAAe;AACxC,CAAA;AAEA,SAAS,OAAA,CAAQ,MAAyB,KAAA,EAAwB;AACjE,EAAA,OAAO,IAAA,CAAK,GAAA,CAAI,CAAC,MAAA,KAAY,UAAU,MAAA,GAAY,MAAA,GAAS,CAAA,EAAG,KAAK,CAAA,CAAA,EAAI,MAAM,CAAA,CAAG,CAAA,CAAE,KAAK,IAAI,CAAA;AAC7F;AAKA,SAAS,QAAQ,GAAA,EAAoB;AACpC,EAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,GAAA,CAAI,OAAO,GAAG,WAAW,CAAA;AAC7C,EAAA,MAAM,KAAA,GAAQ,cAAA,CAAe,GAAA,CAAI,aAAa,GAAG,iBAAiB,CAAA;AAClE,EAAA,OAAO;AAAA,IACN,GAAA,EAAK,MAAA,CAAO,GAAA,CAAI,UAAU,GAAG,cAAc,CAAA;AAAA,IAC3C,KAAA,EAAO,MAAA,CAAO,GAAA,CAAI,OAAO,GAAG,WAAW,CAAA;AAAA,IACvC,QAAA,EAAU,MAAA,CAAO,GAAA,CAAI,WAAW,GAAG,eAAe,CAAA;AAAA,IAClD,OAAA,EAAS,MAAA,CAAO,GAAA,CAAI,UAAU,GAAG,cAAc,CAAA;AAAA,IAC/C,QAAA,EAAU,KAAA,CAAM,GAAA,CAAI,WAAW,GAAG,eAAe,CAAA;AAAA,IACjD,MAAA,EAAQ,MAAA,CAAO,GAAA,CAAI,QAAQ,GAAG,YAAY,CAAA;AAAA,IAC1C,YAAA,EAAc,KAAA,CAAM,GAAA,CAAI,eAAe,GAAG,mBAAmB,CAAA;AAAA,IAC7D,aAAA,EAAe,KAAA,CAAM,GAAA,CAAI,iBAAiB,GAAG,qBAAqB,CAAA;AAAA,IAClE,WAAA,EAAa,KAAA,CAAM,GAAA,CAAI,eAAe,GAAG,mBAAmB,CAAA;AAAA,IAC5D,oBAAA,EAAsB,KAAA,CAAM,GAAA,CAAI,wBAAwB,GAAG,4BAA4B,CAAA;AAAA,IACvF,aAAA,EAAe,aAAA,CAAc,GAAA,CAAI,iBAAiB,GAAG,qBAAqB,CAAA;AAAA,IAC1E,cAAA,EAAgB,cAAA,CAAe,GAAA,CAAI,iBAAiB,GAAG,qBAAqB,CAAA;AAAA,IAC5E,KAAA;AAAA,IACA,KAAA,EAAO,KAAA,KAAU,MAAA,GAAY,MAAA,GAAY,EAAE,KAAA,EAAO,KAAA,EAAO,WAAA,EAAa,KAAA,CAAM,GAAA,CAAI,qBAAqB,CAAA,EAAG,yBAAyB,CAAA;AAAE,GACpI;AACD;AAGA,SAAS,WAAW,GAAA,EAAuB;AAC1C,EAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,GAAA,CAAI,OAAO,GAAG,WAAW,CAAA;AAC7C,EAAA,MAAM,KAAA,GAAQ,cAAA,CAAe,GAAA,CAAI,aAAa,GAAG,iBAAiB,CAAA;AAClE,EAAA,MAAM,OAAA,GAAU,cAAA,CAAe,GAAA,CAAI,cAAc,GAAG,kBAAkB,CAAA;AACtE,EAAA,OAAO;AAAA,IACN,GAAA,EAAK,MAAA,CAAO,GAAA,CAAI,aAAa,GAAG,iBAAiB,CAAA;AAAA,IACjD,cAAA,EAAgB,MAAA,CAAO,GAAA,CAAI,iBAAiB,GAAG,qBAAqB,CAAA;AAAA,IACpE,OAAA,EAAS,MAAA,CAAO,GAAA,CAAI,UAAU,GAAG,cAAc,CAAA;AAAA,IAC/C,QAAA,EAAU,MAAA,CAAO,GAAA,CAAI,WAAW,GAAG,eAAe,CAAA;AAAA,IAClD,OAAA,EAAS,MAAA,CAAO,GAAA,CAAI,UAAU,GAAG,cAAc,CAAA;AAAA,IAC/C,mBAAA,EAAqB,KAAA,CAAM,GAAA,CAAI,sBAAsB,GAAG,0BAA0B,CAAA;AAAA,IAClF,IAAA,EAAM,OAAO,MAAA,CAAO,GAAA,CAAI,MAAM,CAAA,EAAG,UAAU,GAAG,UAAU,CAAA;AAAA,IACxD,QAAA,EAAU,KAAA,CAAM,GAAA,CAAI,WAAW,GAAG,eAAe,CAAA;AAAA,IACjD,MAAA,EAAQ,MAAA,CAAO,GAAA,CAAI,QAAQ,GAAG,YAAY,CAAA;AAAA,IAC1C,YAAA,EAAc,KAAA,CAAM,GAAA,CAAI,eAAe,GAAG,mBAAmB,CAAA;AAAA,IAC7D,aAAA,EAAe,KAAA,CAAM,GAAA,CAAI,iBAAiB,GAAG,qBAAqB,CAAA;AAAA,IAClE,WAAA,EAAa,KAAA,CAAM,GAAA,CAAI,eAAe,GAAG,mBAAmB,CAAA;AAAA,IAC5D,oBAAA,EAAsB,KAAA,CAAM,GAAA,CAAI,wBAAwB,GAAG,4BAA4B,CAAA;AAAA,IACvF,WAAA,EAAa,OAAA,KAAY,MAAA,GACtB,MAAA,GACA,EAAE,OAAA,EAAwE,MAAA,EAAQ,MAAA,CAAO,GAAA,CAAI,aAAa,CAAA,EAAG,iBAAiB,CAAA,EAAuD;AAAA,IACxL,cAAA,EAAgB,cAAA,CAAe,GAAA,CAAI,iBAAiB,GAAG,qBAAqB,CAAA;AAAA,IAC5E,KAAA;AAAA,IACA,KAAA,EAAO,KAAA,KAAU,MAAA,GAAY,MAAA,GAAY,EAAE,KAAA,EAAO,KAAA,EAAO,WAAA,EAAa,KAAA,CAAM,GAAA,CAAI,qBAAqB,CAAA,EAAG,yBAAyB,CAAA;AAAE,GACpI;AACD;AAGA,SAAS,WAA6G,MAAA,EAAkB;AACvI,EAAA,OAAO,OAAO,IAAA,CAAK,CAAC,MAAM,KAAA,KAAU,IAAA,CAAK,gBAAgB,KAAA,CAAM,aAAA,IAAiB,IAAA,CAAK,WAAA,GAAc,MAAM,WAAA,IAAe,WAAA,CAAY,KAAK,GAAA,EAAK,KAAA,CAAM,GAAG,CAAC,CAAA;AACzJ;AAWO,IAAM,+BAAN,MAAmE;AAAA,EAChE,KAAA;AAAA,EACA,MAAA;AAAA,EACA,UAAA;AAAA,EACA,OAAA;AAAA,EACA,EAAA;AAAA,EACA,iBAAA;AAAA,EACA,WAAA;AAAA,EAET,YAAY,OAAA,EAA8C;AACzD,IAAA,IAAA,CAAK,UAAA,GAAa,kBAAkB,OAAO,CAAA;AAC3C,IAAA,IAAA,CAAK,MAAA,GAAS,KAAA,CAAM,MAAM,YAAA,CAAc,OAAA,CAAqC,KAAK,CAAA,EAAG,MAAM,UAAA,CAAW,eAAA,EAAiB,OAAO,CAAC,CAAA;AAC/H,IAAA,IAAA,CAAK,KAAA,GAAQ,eAAe,OAAO,CAAA;AACnC,IAAA,IAAA,CAAK,OAAA,GAAU,iBAAiB,OAAO,CAAA;AACvC,IAAA,IAAA,CAAK,EAAA,GAAK,QAAA,CAAS,IAAA,CAAK,OAAO,CAAA;AAC/B,IAAA,IAAA,CAAK,iBAAA,GAAoB,cAAA,CAAe,OAAA,EAAS,kBAAkB,CAAA;AACnE,IAAA,IAAA,CAAK,WAAA,GAAc,cAAA,CAAe,OAAA,EAAS,uBAAuB,CAAA;AAAA,EACnE;AAAA;AAAA,EAGA,IAAI,eAAA,GAA0B;AAC7B,IAAA,OAAO,IAAA,CAAK,UAAA;AAAA,EACb;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,YAAA,GAA8B;AACnC,IAAA,MAAM,uBAAuB,IAAA,CAAK,KAAA,EAAO,IAAA,CAAK,OAAA,EAAS,YAAY,mBAAmB,CAAA;AAAA,EACvF;AAAA,EAEA,UAAU,SAAA,EAAkC;AAC3C,IAAA,MAAM,OAAO,IAAA,CAAK,iBAAA;AAClB,IAAA,OAAO,SAAA,CAAU,SAAS,KAAA,CAAA,GAAY,KAAA,CAAA,GAAY,MAAM,IAAA,CAAK,SAAS,GAAG,kBAAkB,CAAA;AAAA,EAC5F;AAAA,EAEA,MAAA,CAAO,WAAmB,KAAA,EAAyD;AAClF,IAAA,MAAM,OAAO,IAAA,CAAK,WAAA;AAClB,IAAA,OAAO,SAAA,CAAU,SAAS,KAAA,CAAA,GAAY,KAAA,CAAA,GAAY,MAAM,IAAA,CAAK,SAAA,EAAW,KAAK,CAAA,EAAG,uBAAuB,CAAA;AAAA,EACxG;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,MAAA,CACL,SAAA,EACA,MAAA,EACA,MACA,IAAA,EACa;AACb,IAAA,MAAM,IAAA,CAAK,UAAU,SAAS,CAAA;AAC9B,IAAA,OAAO,SAAS,IAAA,CAAK,KAAA,EAAO,KAAK,MAAA,EAAQ,MAAA,EAAQ,MAAM,IAAI,CAAA;AAAA,EAC5D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,YAAA,CAAa,EAAA,EAA8B,IAAA,EAAoC;AACpF,IAAA,MAAM,EAAA,CAAG,KAAA,CAAM,CAAA,WAAA,EAAc,IAAA,CAAK,EAAA,CAAG,OAAO,CAAA,IAAA,EAAO,IAAA,KAAS,OAAA,GAAU,OAAA,GAAU,WAAW,CAAA,KAAA,CAAO,CAAA;AAClG,IAAA,MAAM,MAAA,GAAS,MAAM,EAAA,CAAG,KAAA,CAAM,4DAA4D,IAAA,CAAK,EAAA,CAAG,OAAO,CAAA,CAAE,CAAA;AAC3G,IAAA,MAAM,GAAA,GAAM,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA;AACzB,IAAA,IAAI,GAAA,KAAQ,MAAA,EAAW,MAAM,UAAA,CAAW,gBAAgB,SAAS,CAAA;AACjE,IAAA,OAAO,aAAA,CAAc,GAAA,CAAI,mBAAmB,CAAA,EAAG,2BAA2B,CAAA,IAAK,CAAA,QAAA;AAAA,EAChF;AAAA;AAAA,EAGA,QAAA,CAASQ,QAAe,eAAA,EAAiC;AACxD,IAAA,OAAO,OAAA,CAAQA,MAAAA,GAAQ,IAAA,CAAK,UAAA,EAAY,eAAe,CAAA;AAAA,EACxD;AAAA,EAEA,MAAM,KAAA,CAAS,SAAA,EAAmB,MAAA,EAAoB,IAAA,EAAgE;AACrH,IAAA,MAAM,IAAA,CAAK,UAAU,SAAS,CAAA;AAC9B,IAAA,OAAO,OAAA,CAAQ,IAAA,CAAK,KAAA,EAAO,IAAA,CAAK,MAAA,EAAQ,QAAQ,CAAC,EAAA,KAAO,IAAA,CAAK,EAAE,CAAC,CAAA;AAAA,EACjE;AAAA,EAEA,MAAM,QAAA,CAAS,EAAA,EAA8B,OAAA,EAAiB,IAAA,EAAyD;AACtH,IAAA,MAAM,SAAS,MAAM,EAAA,CAAG,KAAA,CAAM,CAAA,OAAA,EAAU,QAAQ,WAAW,CAAC,CAAA,MAAA,EAAS,IAAA,CAAK,GAAG,IAAI,CAAA,yBAAA,EAA4B,IAAI,CAAA,CAAA,EAAI,CAAC,OAAO,CAAC,CAAA;AAC9H,IAAA,OAAO,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,KAAM,MAAA,GAAY,SAAY,OAAA,CAAQ,MAAA,CAAO,IAAA,CAAK,CAAC,CAAC,CAAA;AAAA,EACzE;AAAA,EAEA,MAAM,WAAA,CAAY,EAAA,EAA8B,UAAA,EAAsD;AACrG,IAAA,MAAM,MAAA,GAAS,MAAM,EAAA,CAAG,KAAA,CAAM,UAAU,OAAA,CAAQ,cAAc,CAAC,CAAA,MAAA,EAAS,KAAK,EAAA,CAAG,OAAO,CAAA,kCAAA,CAAA,EAAsC,CAAC,UAAU,CAAC,CAAA;AACzI,IAAA,OAAO,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,KAAM,MAAA,GAAY,SAAY,UAAA,CAAW,MAAA,CAAO,IAAA,CAAK,CAAC,CAAC,CAAA;AAAA,EAC5E;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,eAAA,CACL,GAAA,EACA,OAAA,EAC+B;AAC/B,IAAA,MAAM,IAAA,GAAO,uBAAA,CAAwB,GAAA,EAAK,OAAO,CAAA;AACjD,IAAA,MAAM,QAAQ,IAAA,CAAK,GAAA;AACnB,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,MACX,iBAAA;AAAA,MACA,IAAA,CAAK,MAAA;AAAA,MACL,OAAO,EAAA,KAAO;AACb,QAAA,MAAM,eAAA,GAAkB,MAAM,IAAA,CAAK,YAAA,CAAa,IAAI,OAAO,CAAA;AAC3D,QAAA,MAAM,IAAA,CAAK,MAAA,CAAO,iBAAA,EAAmB,QAAQ,CAAA;AAI7C,QAAA,MAAM,QAAA,GAAW,MAAM,EAAA,CAAG,KAAA;AAAA,UACzB,CAAA,YAAA,EAAe,IAAA,CAAK,EAAA,CAAG,IAAI;AAAA;AAAA;AAAA;AAAA,0DAAA,CAAA;AAAA,UAK3B,CAAC,MAAM,OAAA,EAAS,YAAA,CAAa,MAAM,OAAO,CAAA,EAAG,MAAM,QAAA,EAAU,KAAA,CAAM,SAAS,aAAA,CAAc,KAAA,CAAM,KAAK,CAAA,EAAG,KAAA,CAAM,UAAU,KAAA,CAAM,WAAA,EAAa,MAAM,oBAAoB;AAAA,SACtK;AACA,QAAA,OAAO,EAAE,eAAA,EAAiB,QAAA,EAAU,QAAA,CAAS,IAAA,CAAK,WAAW,CAAA,EAAE;AAAA,MAChE,CAAA;AAAA,MACA,OAAO,GAAA,EAAKA,MAAAA,EAAO,MAAA,EAAQ,OAAA,KAAY;AAGtC,QAAA,IAAI,MAAM,QAAA,GAAW,IAAA,CAAK,SAASA,MAAAA,EAAO,MAAA,CAAO,eAAe,CAAA,EAAG;AAClE,UAAA,OAAA,CAAQ,OAAA,EAAQ;AAChB,UAAA,OAAO,OAAA,CAA6B,EAAE,OAAA,EAAS,cAAA,EAAgB,CAAA;AAAA,QAChE;AACA,QAAA,MAAM,IAAA,CAAK,MAAA,CAAO,iBAAA,EAAmB,SAAS,CAAA;AAC9C,QAAA,OAAO,QAA6B,EAAE,OAAA,EAAS,OAAO,QAAA,GAAW,UAAA,GAAa,mBAAmB,CAAA;AAAA,MAClG;AAAA,KACD;AAAA,EACD;AAAA,EAEA,MAAM,eAAA,CAAgB,OAAA,EAA8B,OAAA,EAAmE;AACtH,IAAA,MAAM,IAAA,GAAO,aAAA,CAAc,OAAA,EAAS,OAAO,CAAA;AAC3C,IAAA,MAAM,QAAQ,IAAA,CAAK,KAAA;AACnB,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,MACX,iBAAA;AAAA,MACA,IAAA,CAAK,MAAA;AAAA;AAAA,MAEL,OAAO,EAAA,KAAA,CAAQ,MAAM,EAAA,CAAG,KAAA;AAAA,QACvB,CAAA,qBAAA,EAAwB,IAAA,CAAK,EAAA,CAAG,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA,2BAAA,CAAA;AAAA,QAMpC,CAAC,KAAA,CAAM,KAAA,EAAO,KAAA,CAAM,KAAK;AAAA,OAC1B,EAAG,IAAA,CAAK,GAAA,CAAI,CAAC,GAAA,KAAQ,OAAO,GAAA,CAAI,UAAU,CAAA,EAAG,cAAc,CAAC,CAAA;AAAA,MAC5D,OAAO,EAAA,EAAI,MAAA,EAAQ,MAAA,KAAW;AAC7B,QAAA,IAAI,OAAO,MAAA,KAAW,CAAA,EAAG,OAAO,UAAA,CAA6B,EAAE,CAAA;AAC/D,QAAA,MAAM,MAAA,GAAS,MAAM,EAAA,CAAG,KAAA;AAAA,UACvB,CAAA,OAAA,EAAU,IAAA,CAAK,EAAA,CAAG,IAAI,CAAA;AAAA;AAAA;AAAA,gBAAA,EAGT,OAAA,CAAQ,WAAA,EAAa,KAAK,CAAC,CAAA,CAAA;AAAA,UACxC,CAAC,MAAA,EAAQ,KAAA,CAAM,UAAU,KAAA,CAAM,KAAA,GAAQ,MAAM,eAAe;AAAA,SAC7D;AACA,QAAA,MAAM,SAAS,UAAA,CAAW,MAAA,CAAO,IAAA,CAAK,GAAA,CAAI,OAAO,CAAC,CAAA;AAClD,QAAA,OAAO,UAAA,CAAW,MAAA,CAAO,GAAA,CAAI,CAAC,KAAA,KAAU,QAA0B,MAAA,CAAO,KAAK,CAAC,CAAC,CAAC,CAAA;AAAA,MAClF;AAAA,KACD;AAAA,EACD;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,eAAA,CACC,SAAA,EACA,MAAA,EACA,OAAA,EACA,QACA,MAAA,EACmB;AACnB,IAAA,OAAO,IAAA,CAAK,MAAA,CAAO,SAAA,EAAW,MAAA,EAAQ,CAAC,EAAA,KAAO,IAAA,CAAK,QAAA,CAAS,EAAA,EAAI,SAAS,QAAQ,CAAA,EAAG,OAAO,EAAA,EAAIA,QAAO,GAAA,KAAQ;AAC7G,MAAA,IAAI,GAAA,KAAQ,MAAA,IAAa,CAAC,KAAA,CAAM,GAAA,EAAK,MAAA,CAAO,KAAA,EAAO,MAAA,CAAO,KAAA,EAAOA,MAAK,CAAA,EAAG,OAAO,KAAA;AAChF,MAAA,MAAM,MAAA,CAAO,IAAI,GAAG,CAAA;AACpB,MAAA,OAAO,IAAA;AAAA,IACR,CAAC,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,iBAAA,CAAkB,KAAA,EAA0D,OAAA,EAA+C;AAChI,IAAA,MAAM,IAAA,GAAO,iBAAA,CAAkB,KAAA,EAAO,OAAO,CAAA;AAC7C,IAAA,OAAO,IAAA,CAAK,eAAA,CAAgB,mBAAA,EAAqB,IAAA,CAAK,MAAA,EAAQ,KAAK,OAAA,EAAS,IAAA,CAAK,MAAA,EAAQ,OAAO,EAAA,KAAO;AACtG,MAAA,MAAM,EAAA,CAAG,KAAA;AAAA,QACR,CAAA,OAAA,EAAU,IAAA,CAAK,EAAA,CAAG,IAAI;AAAA;AAAA,wBAAA,CAAA;AAAA,QAGtB,CAAC,IAAA,CAAK,OAAA,EAAS,IAAA,CAAK,OAAO,KAAK;AAAA,OACjC;AAAA,IACD,CAAC,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,mBAAA,CACL,KAAA,EACA,OAAA,EACmB;AACnB,IAAA,MAAM,IAAA,GAAO,kBAAA,CAAmB,KAAA,EAAO,OAAO,CAAA;AAC9C,IAAA,OAAO,IAAA,CAAK,eAAA,CAAgB,qBAAA,EAAuB,IAAA,CAAK,MAAA,EAAQ,KAAK,OAAA,EAAS,IAAA,CAAK,MAAA,EAAQ,OAAO,EAAA,KAAO;AACxG,MAAA,MAAM,EAAA,CAAG,KAAA;AAAA,QACR,CAAA,OAAA,EAAU,IAAA,CAAK,EAAA,CAAG,IAAI;AAAA;AAAA;AAAA,wBAAA,CAAA;AAAA,QAItB,CAAC,IAAA,CAAK,OAAA,EAAS,IAAA,CAAK,aAAA,EAAe,KAAK,UAAU;AAAA,OACnD;AAAA,IACD,CAAC,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,mBAAA,CACL,KAAA,EACA,OAAA,EACmB;AACnB,IAAA,MAAM,IAAA,GAAO,gBAAA,CAAiB,KAAA,EAAO,OAAO,CAAA;AAC5C,IAAA,OAAO,IAAA,CAAK,eAAA,CAAgB,qBAAA,EAAuB,IAAA,CAAK,MAAA,EAAQ,IAAA,CAAK,OAAA,EAAS,IAAA,CAAK,MAAA,EAAQ,OAAO,EAAA,EAAI,GAAA,KAAQ;AAC7G,MAAA,MAAM,EAAA,CAAG,KAAA;AAAA,QACR,CAAA,OAAA,EAAU,IAAA,CAAK,EAAA,CAAG,IAAI,CAAA,iDAAA,CAAA;AAAA,QACtB,CAAC,IAAA,CAAK,OAAA,EAAS,eAAA,CAAgB,GAAA,EAAK,KAAK,MAAA,CAAO,KAAA,EAAO,IAAA,CAAK,eAAe,CAAC;AAAA,OAC7E;AAAA,IACD,CAAC,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,mBAAA,CACL,KAAA,EACA,OAAA,EACmB;AACnB,IAAA,MAAM,IAAA,GAAO,qBAAA,CAAsB,KAAA,EAAO,OAAO,CAAA;AACjD,IAAA,OAAO,IAAA,CAAK,eAAA,CAAgB,qBAAA,EAAuB,IAAA,CAAK,MAAA,EAAQ,KAAK,OAAA,EAAS,IAAA,CAAK,MAAA,EAAQ,OAAO,EAAA,KAAO;AACxG,MAAA,MAAM,EAAA,CAAG,KAAA;AAAA,QACR,CAAA,OAAA,EAAU,IAAA,CAAK,EAAA,CAAG,IAAI;AAAA;AAAA,wBAAA,CAAA;AAAA,QAGtB,CAAC,IAAA,CAAK,OAAA,EAAS,IAAA,CAAK,UAAU;AAAA,OAC/B;AAAA,IACD,CAAC,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,gBAAA,CACL,KAAA,EACA,OAAA,EACgC;AAChC,IAAA,MAAM,IAAA,GAAO,kBAAA,CAAmB,KAAA,EAAO,OAAO,CAAA;AAC9C,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,MACX,kBAAA;AAAA,MACA,IAAA,CAAK,MAAA;AAAA,MACL,OAAO,EAAA,KAAO;AACb,QAAA,MAAM,eAAA,GAAkB,MAAM,IAAA,CAAK,YAAA,CAAa,IAAI,OAAO,CAAA;AAC3D,QAAA,MAAM,MAAM,MAAM,IAAA,CAAK,SAAS,EAAA,EAAI,IAAA,CAAK,SAAS,QAAQ,CAAA;AAC1D,QAAA,MAAM,QAAQ,MAAM,IAAA,CAAK,cAAA,CAAe,EAAA,EAAI,KAAK,KAAA,EAAO,IAAA,CAAK,OAAA,CAAQ,kBAAA,EAAoB,EAAE,MAAA,EAAQ,aAAA,EAAe,OAAA,EAAS,IAAA,CAAK,SAAS,CAAA;AACzI,QAAA,MAAM,IAAA,CAAK,MAAA,CAAO,kBAAA,EAAoB,QAAQ,CAAA;AAC9C,QAAA,OAAO,EAAE,eAAA,EAAiB,GAAA,EAAK,KAAA,EAAM;AAAA,MACtC,CAAA;AAAA,MACA,OAAO,EAAA,EAAIA,MAAAA,EAAO,EAAE,eAAA,EAAiB,GAAA,EAAK,OAAM,KAAM;AACrD,QAAA,IAAI,KAAA,KAAU,MAAA,EAAW,OAAO,cAAA,CAAqC,KAAK,CAAA;AAC1E,QAAA,IAAI,GAAA,KAAQ,MAAA,IAAa,CAAC,OAAA,CAAQ,GAAA,EAAK,KAAK,KAAK,CAAA,EAAG,OAAO,cAAA,CAAe,WAAW,CAAA;AACrF,QAAA,MAAM,OAAA,GAAU,eAAe,GAAA,EAAK,IAAA,CAAK,SAAS,IAAA,CAAK,QAAA,CAASA,MAAAA,EAAO,eAAe,CAAC,CAAA;AACvF,QAAA,IAAI,OAAA,KAAY,MAAA,EAAW,OAAO,cAAA,CAAe,OAAO,CAAA;AACxD,QAAA,MAAM,QAAA,GAAW,kBAAA,CAAmB,GAAA,EAAK,IAAA,CAAK,SAASA,MAAK,CAAA;AAC5D,QAAA,MAAM,SAAS,OAAA,CAA8B,EAAE,OAAA,EAAS,IAAA,EAAM,UAAU,CAAA;AACxE,QAAA,YAAA,CAAa,GAAA,EAAK,KAAK,OAAO,CAAA;AAC9B,QAAA,MAAM,EAAA,CAAG,KAAA;AAAA,UACR,CAAA,OAAA,EAAU,IAAA,CAAK,EAAA,CAAG,IAAI;AAAA;AAAA;AAAA,yBAAA,CAAA;AAAA,UAItB,CAAC,GAAA,CAAI,GAAA,EAAK,GAAA,CAAI,YAAA,EAAc,IAAI,aAAA,EAAe,GAAA,CAAI,oBAAA,EAAsB,GAAA,CAAI,KAAK;AAAA,SACnF;AACA,QAAA,MAAM,IAAA,CAAK,gBAAgB,EAAA,EAAI,GAAA,CAAI,KAAK,GAAA,CAAI,QAAA,EAAU,GAAA,CAAI,OAAA,EAAS,QAAQ,CAAA;AAC3E,QAAA,MAAM,IAAA,CAAK,MAAA,CAAO,kBAAA,EAAoB,SAAS,CAAA;AAC/C,QAAA,OAAO,MAAA;AAAA,MACR;AAAA,KACD;AAAA,EACD;AAAA,EACA,MAAM,oBAAA,CACL,KAAA,EACA,OAAA,EACwC;AACxC,IAAA,MAAM,IAAA,GAAO,qBAAA,CAAsB,KAAA,EAAO,OAAO,CAAA;AACjD,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,MACX,sBAAA;AAAA,MACA,IAAA,CAAK,MAAA;AAAA,MACL,OAAO,EAAA,KAAO;AACb,QAAA,MAAM,eAAA,GAAkB,MAAM,IAAA,CAAK,YAAA,CAAa,IAAI,OAAO,CAAA;AAC3D,QAAA,MAAM,MAAM,MAAM,IAAA,CAAK,SAAS,EAAA,EAAI,IAAA,CAAK,SAAS,QAAQ,CAAA;AAC1D,QAAA,MAAM,QAAQ,MAAM,IAAA,CAAK,cAAA,CAAe,EAAA,EAAI,KAAK,KAAA,EAAO,IAAA,CAAK,OAAA,CAAQ,kBAAA,EAAoB,EAAE,MAAA,EAAQ,mBAAA,EAAqB,OAAA,EAAS,IAAA,CAAK,SAAS,CAAA;AAC/I,QAAA,MAAM,IAAA,CAAK,MAAA,CAAO,sBAAA,EAAwB,QAAQ,CAAA;AAClD,QAAA,OAAO,EAAE,eAAA,EAAiB,GAAA,EAAK,KAAA,EAAM;AAAA,MACtC,CAAA;AAAA,MACA,OAAO,EAAA,EAAIA,MAAAA,EAAO,EAAE,eAAA,EAAiB,GAAA,EAAK,OAAM,KAAM;AACrD,QAAA,IAAI,KAAA,KAAU,MAAA,EAAW,OAAO,cAAA,CAA6C,KAAK,CAAA;AAClF,QAAA,IAAI,GAAA,KAAQ,MAAA,IAAa,CAAC,OAAA,CAAQ,GAAA,EAAK,KAAK,KAAK,CAAA,EAAG,OAAO,iBAAA,CAAkB,WAAW,CAAA;AACxF,QAAA,MAAM,OAAA,GAAU,kBAAkB,GAAA,EAAK,IAAA,CAAK,SAAS,IAAA,CAAK,QAAA,CAASA,MAAAA,EAAO,eAAe,CAAC,CAAA;AAC1F,QAAA,IAAI,OAAA,KAAY,MAAA,EAAW,OAAO,iBAAA,CAAkB,OAAO,CAAA;AAC3D,QAAA,MAAM,QAAA,GAAW,qBAAA,CAAsB,GAAA,EAAK,IAAA,CAAK,SAASA,MAAK,CAAA;AAC/D,QAAA,MAAM,SAAS,OAAA,CAAsC,EAAE,OAAA,EAAS,IAAA,EAAM,UAAU,CAAA;AAChF,QAAA,eAAA,CAAgB,GAAA,EAAK,KAAK,OAAO,CAAA;AACjC,QAAA,MAAM,EAAA,CAAG,KAAA;AAAA,UACR,CAAA,OAAA,EAAU,IAAA,CAAK,EAAA,CAAG,IAAI;AAAA;AAAA;AAAA,yBAAA,CAAA;AAAA,UAItB,CAAC,GAAA,CAAI,GAAA,EAAK,aAAA,CAAc,IAAI,KAAK,CAAA,EAAG,GAAA,CAAI,YAAA,EAAc,GAAA,CAAI,aAAA,EAAe,GAAA,CAAI,oBAAA,EAAsB,IAAI,KAAK;AAAA,SAC7G;AACA,QAAA,MAAM,IAAA,CAAK,gBAAgB,EAAA,EAAI,GAAA,CAAI,KAAK,GAAA,CAAI,QAAA,EAAU,GAAA,CAAI,OAAA,EAAS,QAAQ,CAAA;AAC3E,QAAA,MAAM,IAAA,CAAK,MAAA,CAAO,sBAAA,EAAwB,SAAS,CAAA;AACnD,QAAA,OAAO,MAAA;AAAA,MACR;AAAA,KACD;AAAA,EACD;AAAA,EAEA,MAAM,eAAA,CAAgB,EAAA,EAA8B,OAAA,EAAiB,QAAA,EAAkB,SAAiB,QAAA,EAAiD;AACxJ,IAAA,MAAM,EAAA,CAAG,KAAA;AAAA,MACR,CAAA,YAAA,EAAe,IAAA,CAAK,EAAA,CAAG,QAAQ,CAAA,gGAAA,CAAA;AAAA,MAC/B,CAAC,SAAS,QAAA,EAAU,OAAA,EAAS,cAAc,QAAQ,CAAA,EAAG,QAAA,CAAS,kBAAA,IAAsB,IAAI;AAAA,KAC1F;AAAA,EACD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,cAAA,CAAe,EAAA,EAA8B,KAAA,EAAqB,oBAAwC,MAAA,EAAyD;AACxK,IAAA,IAAI,kBAAA,KAAuB,QAAW,OAAO,MAAA;AAC7C,IAAA,MAAM,MAAA,GAAS,MAAM,EAAA,CAAG,KAAA;AAAA,MACvB,CAAA,mCAAA,EAAsC,IAAA,CAAK,EAAA,CAAG,QAAQ;AAAA,qFAAA,CAAA;AAAA,MAEtD,CAAC,KAAA,CAAM,QAAA,EAAU,KAAA,CAAM,SAAS,kBAAkB;AAAA,KACnD;AACA,IAAA,OAAO,uBAAA,CAAwB,MAAA,CAAO,IAAA,CAAK,GAAA,CAAI,CAAC,GAAA,KAAQ,MAAA,CAAO,GAAA,CAAI,QAAQ,CAAA,EAAG,YAAY,CAAa,GAAG,MAAM,CAAA;AAAA,EACjH;AAAA,EAEA,MAAM,aAAA,CAAc,KAAA,EAAoD,OAAA,EAA+D;AACtI,IAAA,MAAM,IAAA,GAAO,aAAA,CAAc,KAAA,EAAO,OAAO,CAAA;AACzC,IAAA,OAAO,KAAK,KAAA,CAAM,eAAA,EAAiB,IAAA,CAAK,MAAA,EAAQ,OAAO,EAAA,KAAO;AAC7D,MAAA,MAAM,MAAA,GAAS,MAAM,EAAA,CAAG,KAAA;AAAA,QACvB,UAAU,OAAA,CAAQ,WAAW,CAAC,CAAA,MAAA,EAAS,IAAA,CAAK,GAAG,IAAI,CAAA,yDAAA,CAAA;AAAA,QACnD,CAAC,KAAK,OAAA,EAAS,IAAA,CAAK,MAAM,QAAA,EAAU,IAAA,CAAK,MAAM,OAAO;AAAA,OACvD;AACA,MAAA,OAAO,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,KAAM,SAAY,IAAA,GAAO,OAAA,CAA0B,MAAA,CAAO,OAAA,CAAQ,MAAA,CAAO,IAAA,CAAK,CAAC,CAAC,CAAC,CAAC,CAAA;AAAA,IACvG,CAAC,CAAA;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,oBAAA,CACL,MAAA,EACA,MAAA,EACA,OAAA,EACqC;AACrC,IAAA,MAAM,IAAA,GAAO,oBAAA,CAAqB,MAAA,EAAQ,MAAA,EAAQ,OAAO,CAAA;AACzD,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,MACX,sBAAA;AAAA,MACA,IAAA,CAAK,MAAA;AAAA,MACL,OAAO,EAAA,KAAO;AACb,QAAA,MAAM,eAAA,GAAkB,MAAM,IAAA,CAAK,YAAA,CAAa,IAAI,OAAO,CAAA;AAC3D,QAAA,MAAM,MAAM,MAAM,IAAA,CAAK,UAAA,CAAW,EAAA,EAAI,KAAK,MAAM,CAAA;AACjD,QAAA,MAAM,IAAA,CAAK,MAAA,CAAO,sBAAA,EAAwB,QAAQ,CAAA;AAIlD,QAAA,IAAI,GAAA,KAAQ,MAAA,IAAa,CAAC,OAAA,CAAQ,KAAK,IAAI,CAAA,EAAG,OAAO,EAAE,eAAA,EAAiB,GAAA,EAAK,SAAA,EAAW,KAAA,EAAO,UAAU,KAAA,EAAM;AAC/G,QAAA,MAAM,SAAA,GAAY,MAAM,IAAA,CAAK,gBAAA,CAAiB,IAAI,QAAA,EAAU,IAAA,EAAM,IAAI,QAAQ,CAAA;AAC9E,QAAA,MAAM,QAAA,GAAW,SAAA,IAAA,CAAc,MAAM,EAAA,CAAG,KAAA;AAAA,UACvC,CAAA,YAAA,EAAe,IAAA,CAAK,EAAA,CAAG,OAAO;AAAA;AAAA;AAAA;AAAA,gEAAA,CAAA;AAAA,UAK9B;AAAA,YAAC,IAAA,CAAK,UAAA;AAAA,YAAY,YAAA,CAAa,KAAK,UAAU,CAAA;AAAA,YAAG,IAAA,CAAK,cAAA;AAAA,YAAgB,IAAA,CAAK,OAAA;AAAA,YAAS,IAAA,CAAK,QAAA;AAAA,YAAU,IAAA,CAAK,OAAA;AAAA,YACvG,IAAA,CAAK,mBAAA;AAAA,YAAqB,aAAA,CAAc,KAAK,IAAI,CAAA;AAAA,YAAG,GAAA,CAAI,QAAA;AAAA,YAAU,IAAA,CAAK,aAAA;AAAA,YAAe,IAAA,CAAK,WAAA;AAAA,YAAa,IAAA,CAAK;AAAA;AAAoB,SACnI,EAAG,KAAK,MAAA,KAAW,CAAA;AACnB,QAAA,OAAO,EAAE,eAAA,EAAiB,GAAA,EAAK,SAAA,EAAW,QAAA,EAAS;AAAA,MACpD,CAAA;AAAA,MACA,OAAO,GAAA,EAAKA,MAAAA,EAAO,MAAA,EAAQ,OAAA,KAAY;AAEtC,QAAA,MAAM,MAAM,MAAA,CAAO,GAAA;AACnB,QAAA,IAAI,GAAA,KAAQ,MAAA,EAAW,OAAO,aAAA,CAAc,YAAY,CAAA;AAExD,QAAA,IAAI,CAAC,KAAA,CAAM,GAAA,EAAK,IAAA,CAAK,MAAA,CAAO,OAAO,IAAA,CAAK,MAAA,CAAO,KAAA,EAAOA,MAAK,CAAA,EAAG;AAC7D,UAAA,OAAA,CAAQ,OAAA,EAAQ;AAChB,UAAA,OAAO,cAAc,YAAY,CAAA;AAAA,QAClC;AACA,QAAA,IAAI,CAAC,QAAQ,GAAA,EAAK,IAAI,GAAG,MAAM,UAAA,CAAW,mBAAmB,iBAAiB,CAAA;AAC9E,QAAA,IAAI,IAAI,QAAA,GAAW,IAAA,CAAK,SAASA,MAAAA,EAAO,MAAA,CAAO,eAAe,CAAA,EAAG;AAChE,UAAA,OAAA,CAAQ,OAAA,EAAQ;AAChB,UAAA,OAAO,cAAc,cAAc,CAAA;AAAA,QACpC;AACA,QAAA,IAAI,CAAC,MAAA,CAAO,SAAA,EAAW,OAAO,cAAc,iBAAiB,CAAA;AAE7D,QAAA,IAAI,CAAC,MAAA,CAAO,QAAA,EAAU,MAAM,UAAA,CAAW,wBAAwB,mBAAmB,CAAA;AAClF,QAAA,MAAM,IAAA,CAAK,MAAA,CAAO,sBAAA,EAAwB,SAAS,CAAA;AACnD,QAAA,OAAO,cAAc,UAAU,CAAA;AAAA,MAChC;AAAA,KACD;AAAA,EACD;AAAA,EAEA,MAAM,qBAAA,CACLD,OAAAA,EACA,MAAA,EACA,OAAA,EACqC;AACrC,IAAA,MAAM,IAAA,GAAO,cAAA,CAAeA,OAAAA,EAAQ,MAAA,EAAQ,OAAO,CAAA;AACnD,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,MACX,uBAAA;AAAA,MACA,IAAA,CAAK,MAAA;AAAA,MACL,OAAO,EAAA,KAAO;AACb,QAAA,MAAM,eAAA,GAAkB,MAAM,IAAA,CAAK,YAAA,CAAa,IAAI,OAAO,CAAA;AAC3D,QAAA,MAAM,MAAM,MAAM,IAAA,CAAK,UAAA,CAAW,EAAA,EAAI,KAAK,MAAM,CAAA;AACjD,QAAA,MAAM,IAAA,CAAK,MAAA,CAAO,uBAAA,EAAyB,QAAQ,CAAA;AACnD,QAAA,IAAI,GAAA,KAAQ,MAAA,IAAa,CAAC,OAAA,CAAQ,GAAA,EAAK,IAAI,CAAA,EAAG,OAAO,EAAE,eAAA,EAAiB,GAAA,EAAK,SAAA,EAAW,KAAA,EAAM;AAG9F,QAAA,MAAM,SAAA,GAAY,MAAM,IAAA,CAAK,gBAAA,CAAiB,IAAI,QAAA,EAAU,IAAA,EAAM,IAAI,QAAQ,CAAA;AAC9E,QAAA,IAAI,SAAA,EAAW;AACd,UAAA,MAAM,EAAA,CAAG,KAAA;AAAA,YACR,CAAA,YAAA,EAAe,IAAA,CAAK,EAAA,CAAG,OAAO,CAAA;AAAA,gDAAA,CAAA;AAAA,YAE9B;AAAA,cAAC,IAAA,CAAK,cAAA;AAAA,cAAgB,IAAA,CAAK,OAAA;AAAA,cAAS,aAAa,SAAA,CAAU,IAAA,CAAK,cAAA,EAAgB,IAAA,CAAK,OAAO,CAAC,CAAA;AAAA,cAAG,IAAA,CAAK,QAAA;AAAA,cAAU,IAAA,CAAK,OAAA;AAAA,cACnH,aAAA,CAAc,YAAA,CAAa,IAAI,CAAC,CAAA;AAAA,cAAG,GAAA,CAAI;AAAA;AAAQ,WACjD;AAAA,QACD;AACA,QAAA,OAAO,EAAE,eAAA,EAAiB,GAAA,EAAK,SAAA,EAAU;AAAA,MAC1C,CAAA;AAAA,MACA,OAAO,GAAA,EAAKC,MAAAA,EAAO,MAAA,EAAQ,OAAA,KAAY;AACtC,QAAA,MAAM,MAAM,MAAA,CAAO,GAAA;AACnB,QAAA,IAAI,GAAA,KAAQ,MAAA,EAAW,OAAO,aAAA,CAAc,YAAY,CAAA;AAExD,QAAA,IAAI,CAAC,KAAA,CAAM,GAAA,EAAK,IAAA,CAAK,MAAA,CAAO,OAAO,IAAA,CAAK,MAAA,CAAO,KAAA,EAAOA,MAAK,CAAA,EAAG;AAC7D,UAAA,OAAA,CAAQ,OAAA,EAAQ;AAChB,UAAA,OAAO,cAAc,YAAY,CAAA;AAAA,QAClC;AACA,QAAA,IAAI,CAAC,QAAQ,GAAA,EAAK,IAAI,GAAG,MAAM,UAAA,CAAW,mBAAmB,iBAAiB,CAAA;AAC9E,QAAA,IAAI,IAAI,QAAA,GAAW,IAAA,CAAK,SAASA,MAAAA,EAAO,MAAA,CAAO,eAAe,CAAA,EAAG;AAChE,UAAA,OAAA,CAAQ,OAAA,EAAQ;AAChB,UAAA,OAAO,cAAc,cAAc,CAAA;AAAA,QACpC;AACA,QAAA,IAAI,CAAC,MAAA,CAAO,SAAA,EAAW,OAAO,cAAc,iBAAiB,CAAA;AAC7D,QAAA,MAAM,IAAA,CAAK,MAAA,CAAO,uBAAA,EAAyB,SAAS,CAAA;AACpD,QAAA,OAAO,cAAc,UAAU,CAAA;AAAA,MAChC;AAAA,KACD;AAAA,EACD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,UAAA,CAAW,EAAA,EAA8B,KAAA,EAA6D;AAC3G,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,SAAS,EAAA,EAAI,KAAA,CAAM,SAAS,OAAO,CAAA;AAC1D,IAAA,OAAO,GAAA,KAAQ,UAAa,UAAA,CAAW,GAAA,EAAK,MAAM,KAAA,EAAO,KAAA,CAAM,KAAK,CAAA,GAAI,GAAA,GAAM,MAAA;AAAA,EAC/E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,gBAAA,CACL,EAAA,EACA,IAAA,EACA,MACA,QAAA,EACmB;AACnB,IAAA,MAAM,MAAA,GAAS,MAAM,EAAA,CAAG,KAAA;AAAA,MACvB,CAAA,YAAA,EAAe,IAAA,CAAK,EAAA,CAAG,UAAU,CAAA;AAAA,yGAAA,CAAA;AAAA,MAEjC,CAAC,IAAA,CAAK,cAAA,EAAgB,IAAA,CAAK,OAAA,EAAS,MAAM,IAAA,CAAK,QAAA,EAAU,IAAA,CAAK,OAAA,EAAS,QAAQ;AAAA,KAChF;AACA,IAAA,OAAO,MAAA,CAAO,KAAK,MAAA,KAAW,CAAA;AAAA,EAC/B;AAAA,EAEA,MAAM,oBAAA,CAAqB,OAAA,EAA8B,OAAA,EAAwE;AAChI,IAAA,MAAM,IAAA,GAAO,aAAA,CAAc,OAAA,EAAS,OAAO,CAAA;AAC3C,IAAA,MAAM,QAAQ,IAAA,CAAK,KAAA;AACnB,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,MACX,sBAAA;AAAA,MACA,IAAA,CAAK,MAAA;AAAA;AAAA,MAEL,OAAO,EAAA,KAAA,CAAQ,MAAM,EAAA,CAAG,KAAA;AAAA,QACvB,CAAA,wBAAA,EAA2B,IAAA,CAAK,EAAA,CAAG,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA,2BAAA,CAAA;AAAA,QAM1C,CAAC,KAAA,CAAM,KAAA,EAAO,KAAA,CAAM,KAAK;AAAA,OAC1B,EAAG,IAAA,CAAK,GAAA,CAAI,CAAC,GAAA,KAAQ,OAAO,GAAA,CAAI,aAAa,CAAA,EAAG,iBAAiB,CAAC,CAAA;AAAA,MAClE,OAAO,EAAA,EAAI,MAAA,EAAQ,MAAA,KAAW;AAC7B,QAAA,IAAI,OAAO,MAAA,KAAW,CAAA,EAAG,OAAO,UAAA,CAAkC,EAAE,CAAA;AACpE,QAAA,MAAM,MAAA,GAAS,MAAM,EAAA,CAAG,KAAA;AAAA,UACvB,CAAA,OAAA,EAAU,IAAA,CAAK,EAAA,CAAG,OAAO,CAAA;AAAA;AAAA;AAAA,gBAAA,EAGZ,OAAA,CAAQ,cAAA,EAAgB,QAAQ,CAAC,CAAA,CAAA;AAAA,UAC9C,CAAC,MAAA,EAAQ,KAAA,CAAM,UAAU,KAAA,CAAM,KAAA,GAAQ,MAAM,eAAe;AAAA,SAC7D;AACA,QAAA,MAAM,SAAS,UAAA,CAAW,MAAA,CAAO,IAAA,CAAK,GAAA,CAAI,UAAU,CAAC,CAAA;AACrD,QAAA,OAAO,UAAA,CAAW,MAAA,CAAO,GAAA,CAAI,CAAC,KAAA,KAAU,QAA+B,SAAA,CAAU,KAAK,CAAC,CAAC,CAAC,CAAA;AAAA,MAC1F;AAAA,KACD;AAAA,EACD;AAAA,EAEA,MAAM,wBAAA,CACL,KAAA,EACA,OAAA,EACmB;AACnB,IAAA,MAAM,IAAA,GAAO,mBAAA,CAAoB,KAAA,EAAO,OAAO,CAAA;AAE/C,IAAA,OAAO,KAAK,MAAA,CAAO,0BAAA,EAA4B,IAAA,CAAK,MAAA,EAAQ,CAAC,EAAA,KAAO,IAAA,CAAK,WAAA,CAAY,EAAA,EAAI,KAAK,UAAU,CAAA,EAAG,OAAO,EAAA,EAAIA,QAAO,MAAA,KAAW;AACvI,MAAA,IAAI,MAAA,KAAW,MAAA,IAAa,CAAC,KAAA,CAAM,MAAA,EAAQ,IAAA,CAAK,MAAA,CAAO,KAAA,EAAO,IAAA,CAAK,MAAA,CAAO,KAAA,EAAOA,MAAK,GAAG,OAAO,KAAA;AAChG,MAAA,MAAM,EAAA,CAAG,KAAA;AAAA,QACR,CAAA,OAAA,EAAU,IAAA,CAAK,EAAA,CAAG,OAAO,CAAA,oDAAA,CAAA;AAAA,QACzB,CAAC,MAAA,CAAO,GAAA,EAAK,eAAA,CAAgB,MAAA,EAAQ,KAAK,MAAA,CAAO,KAAA,EAAO,IAAA,CAAK,eAAe,CAAC;AAAA,OAC9E;AACA,MAAA,OAAO,IAAA;AAAA,IACR,CAAC,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,kBAAA,CACL,KAAA,EACA,OAAA,EACqC;AACrC,IAAA,MAAM,IAAA,GAAO,kBAAA,CAAmB,KAAA,EAAO,OAAO,CAAA;AAG9C,IAAA,OAAO,KAAK,KAAA,CAAM,oBAAA,EAAsB,IAAA,CAAK,MAAA,EAAQ,OAAO,EAAA,KAAO;AAClE,MAAA,MAAM,SAAS,MAAM,EAAA,CAAG,KAAA,CAAM,CAAA,OAAA,EAAU,QAAQ,cAAc,CAAC,CAAA,MAAA,EAAS,IAAA,CAAK,GAAG,OAAO,CAAA,uBAAA,CAAA,EAA2B,CAAC,IAAA,CAAK,UAAU,CAAC,CAAA;AACnI,MAAA,OAAO,UAAA,CAAW,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,KAAM,MAAA,GAAY,MAAA,GAAY,UAAA,CAAW,MAAA,CAAO,IAAA,CAAK,CAAC,CAAC,GAAG,IAAI,CAAA;AAAA,IAC9F,CAAC,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,aAAA,CAAc,KAAA,EAAgF,OAAA,EAA+C;AAClJ,IAAA,MAAM,IAAA,GAAO,qBAAA,CAAsB,KAAA,EAAO,OAAO,CAAA;AACjD,IAAA,OAAO,KAAK,MAAA,CAAO,eAAA,EAAiB,IAAA,CAAK,MAAA,EAAQ,CAAC,EAAA,KAAO,IAAA,CAAK,WAAA,CAAY,EAAA,EAAI,KAAK,UAAU,CAAA,EAAG,OAAO,EAAA,EAAIA,QAAO,MAAA,KAAW;AAC5H,MAAA,IAAI,MAAA,KAAW,MAAA,IAAa,CAAC,KAAA,CAAM,MAAA,EAAQ,IAAA,CAAK,MAAA,CAAO,KAAA,EAAO,IAAA,CAAK,MAAA,CAAO,KAAA,EAAOA,MAAK,GAAG,OAAO,KAAA;AAChG,MAAA,IAAI,KAAK,cAAA,KAAmB,MAAA,CAAO,gBAAgB,MAAM,UAAA,CAAW,mBAAmB,8BAA8B,CAAA;AACrH,MAAA,IAAI,KAAK,OAAA,KAAY,MAAA,CAAO,SAAS,MAAM,UAAA,CAAW,mBAAmB,uBAAuB,CAAA;AAChG,MAAA,MAAM,EAAA,CAAG,KAAA;AAAA,QACR,CAAA,YAAA,EAAe,IAAA,CAAK,EAAA,CAAG,QAAQ,CAAA,yEAAA,CAAA;AAAA,QAC/B,CAAC,IAAA,CAAK,UAAA,EAAY,MAAA,CAAO,QAAA,EAAU,OAAO,OAAA,EAAS,aAAA,CAAc,IAAA,CAAK,MAAM,CAAC;AAAA,OAC9E;AACA,MAAA,OAAO,IAAA;AAAA,IACR,CAAC,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,YAAA,CAAa,KAAA,EAA+E,OAAA,EAAiE;AAClK,IAAA,MAAM,IAAA,GAAO,oBAAA,CAAqB,KAAA,EAAO,OAAO,CAAA;AAEhD,IAAA,MAAM,OAAA,GAAU,MAAM,SAAA,CAAU,iBAAiB,CAAA;AAKjD,IAAA,OAAO,KAAK,MAAA,CAAO,cAAA,EAAgB,IAAA,CAAK,MAAA,EAAQ,CAAC,EAAA,KAAO,IAAA,CAAK,WAAA,CAAY,EAAA,EAAI,KAAK,UAAU,CAAA,EAAG,OAAO,EAAA,EAAIA,QAAO,MAAA,KAAW;AAC3H,MAAA,IAAI,CAAC,SAAS,MAAA,EAAQ,IAAA,CAAK,QAAQA,MAAK,CAAA,EAAG,OAAO,WAAA,CAAY,MAAS,CAAA;AACvE,MAAA,IAAI,KAAK,cAAA,KAAmB,MAAA,CAAO,gBAAgB,MAAM,UAAA,CAAW,mBAAmB,8BAA8B,CAAA;AACrH,MAAA,IAAI,KAAK,OAAA,KAAY,MAAA,CAAO,SAAS,MAAM,UAAA,CAAW,mBAAmB,uBAAuB,CAAA;AAChG,MAAA,MAAM,QAAA,GAAW,MAAM,EAAA,CAAG,KAAA;AAAA,QACzB,CAAA,YAAA,EAAe,IAAA,CAAK,EAAA,CAAG,QAAQ,CAAA;AAAA,sFAAA,CAAA;AAAA,QAE/B,CAAC,IAAA,CAAK,UAAA,EAAY,MAAA,CAAO,UAAU,MAAA,CAAO,OAAA,EAAS,aAAA,CAAc,IAAA,CAAK,MAAM,CAAA,EAAG,IAAA,CAAK,MAAA,CAAO,KAAA,EAAO,QAAQ,MAAM;AAAA,OACjH;AACA,MAAA,OAAO,YAAY,QAAA,CAAS,IAAA,CAAK,WAAW,CAAA,GAAI,OAAA,CAAQ,UAAU,MAAS,CAAA;AAAA,IAC5E,CAAC,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,aAAA,CACL,KAAA,EACA,OAAA,EACmB;AACnB,IAAA,MAAM,IAAA,GAAO,qBAAA,CAAsB,KAAA,EAAO,OAAO,CAAA;AACjD,IAAA,MAAM,SAAS,MAAM,SAAA,CAAU,MAAM,oBAAA,CAAqB,IAAA,CAAK,OAAO,CAAC,CAAA;AACvE,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,MACX,eAAA;AAAA,MACA,IAAA,CAAK,MAAA;AAAA;AAAA;AAAA;AAAA,MAIL,OAAO,EAAA,KAAO;AACb,QAAA,MAAM,KAAA,GAAQ,MAAM,EAAA,CAAG,KAAA;AAAA,UACtB,CAAA,cAAA,EAAiB,IAAA,CAAK,EAAA,CAAG,QAAQ;AAAA,wGAAA,CAAA;AAAA,UAEjC,CAAC,IAAA,CAAK,UAAA,EAAY,IAAA,CAAK,KAAA,EAAO,IAAA,CAAK,KAAA,CAAM,QAAA,EAAU,IAAA,CAAK,KAAA,CAAM,OAAA,EAAS,MAAM;AAAA,SAC9E;AACA,QAAA,IAAI,KAAA,CAAM,IAAA,CAAK,MAAA,KAAW,CAAA,EAAG,OAAO,KAAA;AACpC,QAAA,MAAM,QAAA,GAAW,MAAM,EAAA,CAAG,KAAA;AAAA,UACzB,CAAA,YAAA,EAAe,IAAA,CAAK,EAAA,CAAG,QAAQ,CAAA;AAAA,iEAAA,CAAA;AAAA,UAE/B,CAAC,IAAA,CAAK,UAAA,EAAY,IAAA,CAAK,OAAO,IAAA,CAAK,KAAA,CAAM,QAAA,EAAU,IAAA,CAAK,KAAA,CAAM,OAAA,EAAS,aAAA,CAAc,IAAA,CAAK,MAAM,CAAC;AAAA,SAClG;AACA,QAAA,OAAO,QAAA,CAAS,KAAK,MAAA,KAAW,CAAA;AAAA,MACjC,CAAA;AAAA,MACA,OAAO,GAAA,EAAK,MAAA,EAAQ,QAAA,KAAa;AAAA,KAClC;AAAA,EACD;AAAA,EAEA,MAAM,oBAAA,CACL,KAAA,EACA,OAAA,EACmB;AACnB,IAAA,MAAM,IAAA,GAAO,cAAA,CAAe,KAAA,EAAO,OAAO,CAAA;AAC1C,IAAA,OAAO,KAAK,MAAA,CAAO,sBAAA,EAAwB,IAAA,CAAK,MAAA,EAAQ,CAAC,EAAA,KAAO,IAAA,CAAK,WAAA,CAAY,EAAA,EAAI,KAAK,UAAU,CAAA,EAAG,OAAO,EAAA,EAAIA,QAAO,MAAA,KAAW;AACnI,MAAA,IAAI,MAAA,KAAW,MAAA,IAAa,CAAC,KAAA,CAAM,MAAA,EAAQ,IAAA,CAAK,MAAA,CAAO,KAAA,EAAO,IAAA,CAAK,MAAA,CAAO,KAAA,EAAOA,MAAK,GAAG,OAAO,KAAA;AAChG,MAAA,eAAA,CAAgB,MAAA,EAAQ,KAAK,UAAU,CAAA;AACvC,MAAA,MAAM,EAAA,CAAG,KAAA;AAAA,QACR,CAAA,OAAA,EAAU,IAAA,CAAK,EAAA,CAAG,OAAO;AAAA;AAAA;AAAA,2BAAA,CAAA;AAAA,QAIzB;AAAA,UAAC,MAAA,CAAO,GAAA;AAAA,UAAK,MAAA,CAAO,MAAA;AAAA,UAAQ,MAAA,CAAO,YAAA;AAAA,UAAc,MAAA,CAAO,aAAA;AAAA,UAAe,MAAA,CAAO,aAAa,OAAA,IAAW,IAAA;AAAA,UACrG,MAAA,CAAO,aAAa,MAAA,IAAU,IAAA;AAAA,UAAM,OAAO,cAAA,IAAkB;AAAA;AAAI,OACnE;AACA,MAAA,OAAO,IAAA;AAAA,IACR,CAAC,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,oBAAA,CACL,KAAA,EACA,OAAA,EACkB;AAClB,IAAA,MAAM,IAAA,GAAO,cAAA,CAAe,KAAA,EAAO,OAAO,CAAA;AAC1C,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,MACX,sBAAA;AAAA,MACA,IAAA,CAAK,MAAA;AAAA;AAAA;AAAA,MAGL,OAAO,EAAA,KAAA,CAAQ,MAAM,EAAA,CAAG,KAAA;AAAA,QACvB,CAAA,wBAAA,EAA2B,IAAA,CAAK,EAAA,CAAG,OAAO;AAAA;AAAA,eAAA,CAAA;AAAA,QAG1C,CAAC,IAAA,CAAK,KAAA,CAAM,QAAA,EAAU,IAAA,CAAK,MAAM,OAAA,EAAS,IAAA,CAAK,cAAA,EAAgB,IAAA,CAAK,cAAc;AAAA,OACnF,EAAG,IAAA,CAAK,GAAA,CAAI,CAAC,GAAA,KAAQ,OAAO,GAAA,CAAI,aAAa,CAAA,EAAG,iBAAiB,CAAC,CAAA;AAAA,MAClE,OAAO,EAAA,EAAI,MAAA,EAAQ,MAAA,KAAW;AAC7B,QAAA,IAAI,MAAA,CAAO,MAAA,KAAW,CAAA,EAAG,OAAO,CAAA;AAChC,QAAA,MAAM,MAAA,GAAS,MAAM,EAAA,CAAG,KAAA;AAAA,UACvB,CAAA,OAAA,EAAU,IAAA,CAAK,EAAA,CAAG,OAAO;AAAA;AAAA;AAAA,2BAAA,CAAA;AAAA,UAIzB,CAAC,MAAA,EAAQ,IAAA,CAAK,MAAM;AAAA,SACrB;AACA,QAAA,OAAO,OAAO,IAAA,CAAK,MAAA;AAAA,MACpB;AAAA,KACD;AAAA,EACD;AAAA,EAEA,MAAM,qBAAA,CACL,KAAA,EACA,OAAA,EACgC;AAChC,IAAA,MAAM,IAAA,GAAO,qBAAA,CAAsB,KAAA,EAAO,OAAO,CAAA;AACjD,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,MACX,uBAAA;AAAA,MACA,IAAA,CAAK,MAAA;AAAA,MACL,OAAO,EAAA,KAAO;AACb,QAAA,MAAM,eAAA,GAAkB,MAAM,IAAA,CAAK,YAAA,CAAa,IAAI,OAAO,CAAA;AAC3D,QAAA,MAAM,SAAS,MAAM,IAAA,CAAK,WAAA,CAAY,EAAA,EAAI,KAAK,UAAU,CAAA;AACzD,QAAA,MAAM,QAAQ,MAAM,IAAA,CAAK,cAAA,CAAe,EAAA,EAAI,KAAK,KAAA,EAAO,IAAA,CAAK,OAAA,CAAQ,kBAAA,EAAoB,EAAE,MAAA,EAAQ,iBAAA,EAAmB,UAAA,EAAY,IAAA,CAAK,YAAY,CAAA;AACnJ,QAAA,MAAM,IAAA,CAAK,MAAA,CAAO,uBAAA,EAAyB,QAAQ,CAAA;AACnD,QAAA,OAAO,EAAE,eAAA,EAAiB,MAAA,EAAQ,KAAA,EAAM;AAAA,MACzC,CAAA;AAAA,MACA,OAAO,EAAA,EAAIA,MAAAA,EAAO,EAAE,eAAA,EAAiB,MAAA,EAAQ,OAAM,KAAM;AACxD,QAAA,IAAI,KAAA,KAAU,MAAA,EAAW,OAAO,cAAA,CAAqC,KAAK,CAAA;AAC1E,QAAA,IAAI,MAAA,KAAW,MAAA,IAAa,CAAC,OAAA,CAAQ,MAAA,EAAQ,KAAK,KAAK,CAAA,EAAG,OAAO,cAAA,CAAe,WAAW,CAAA;AAC3F,QAAA,MAAM,OAAA,GAAU,eAAe,MAAA,EAAQ,IAAA,CAAK,SAAS,IAAA,CAAK,QAAA,CAASA,MAAAA,EAAO,eAAe,CAAC,CAAA;AAC1F,QAAA,IAAI,OAAA,KAAY,MAAA,EAAW,OAAO,cAAA,CAAe,OAAO,CAAA;AACxD,QAAA,MAAM,QAAA,GAAW,qBAAA,CAAsB,MAAA,EAAQ,IAAA,CAAK,SAASA,MAAK,CAAA;AAClE,QAAA,MAAM,SAAS,OAAA,CAA8B,EAAE,OAAA,EAAS,IAAA,EAAM,UAAU,CAAA;AACxE,QAAA,YAAA,CAAa,MAAA,EAAQ,KAAK,OAAO,CAAA;AACjC,QAAA,MAAM,EAAA,CAAG,KAAA;AAAA,UACR,CAAA,OAAA,EAAU,IAAA,CAAK,EAAA,CAAG,OAAO;AAAA;AAAA;AAAA,4BAAA,CAAA;AAAA,UAIzB,CAAC,MAAA,CAAO,GAAA,EAAK,MAAA,CAAO,YAAA,EAAc,OAAO,aAAA,EAAe,MAAA,CAAO,oBAAA,EAAsB,MAAA,CAAO,KAAK;AAAA,SAClG;AACA,QAAA,MAAM,IAAA,CAAK,gBAAgB,EAAA,EAAI,MAAA,CAAO,SAAS,MAAA,CAAO,QAAA,EAAU,MAAA,CAAO,OAAA,EAAS,QAAQ,CAAA;AACxF,QAAA,MAAM,IAAA,CAAK,MAAA,CAAO,uBAAA,EAAyB,SAAS,CAAA;AACpD,QAAA,OAAO,MAAA;AAAA,MACR;AAAA,KACD;AAAA,EACD;AAAA,EAEA,MAAM,kBAAA,CAAmB,KAAA,EAAuD,OAAA,EAAoE;AACnJ,IAAA,MAAM,IAAA,GAAO,gBAAA,CAAiB,KAAA,EAAO,OAAO,CAAA;AAC5C,IAAA,OAAO,KAAK,KAAA,CAAM,oBAAA,EAAsB,IAAA,CAAK,MAAA,EAAQ,OAAO,EAAA,KAAO;AAClE,MAAA,MAAM,MAAA,GAAS,MAAM,EAAA,CAAG,KAAA;AAAA,QACvB,UAAU,OAAA,CAAQ,cAAc,CAAC,CAAA,MAAA,EAAS,IAAA,CAAK,GAAG,OAAO,CAAA,4DAAA,CAAA;AAAA,QACzD,CAAC,KAAK,UAAA,EAAY,IAAA,CAAK,MAAM,QAAA,EAAU,IAAA,CAAK,MAAM,OAAO;AAAA,OAC1D;AACA,MAAA,OAAO,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,KAAM,SAAY,IAAA,GAAO,OAAA,CAA+B,SAAA,CAAU,UAAA,CAAW,MAAA,CAAO,IAAA,CAAK,CAAC,CAAC,CAAC,CAAC,CAAA;AAAA,IAClH,CAAC,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,oBAAA,CACL,KAAA,EACA,OAAA,EACqD;AACrD,IAAA,MAAM,IAAA,GAAO,gBAAA,CAAiB,KAAA,EAAO,OAAO,CAAA;AAC5C,IAAA,OAAO,KAAK,KAAA,CAAM,sBAAA,EAAwB,IAAA,CAAK,MAAA,EAAQ,OAAO,EAAA,KAAO;AAEpE,MAAA,MAAM,MAAA,GAAS,MAAM,EAAA,CAAG,KAAA;AAAA,QACvB,CAAA;AAAA,UAAA,EACQ,IAAA,CAAK,GAAG,QAAQ,CAAA;AAAA,eAAA,EACX,IAAA,CAAK,GAAG,QAAQ,CAAA;AAAA,6GAAA,CAAA;AAAA,QAE7B,CAAC,KAAK,UAAA,EAAY,IAAA,CAAK,MAAM,QAAA,EAAU,IAAA,CAAK,MAAM,OAAO;AAAA,OAC1D;AACA,MAAA,OAAO,OAAA,CAAmD,MAAA,CAAO,IAAA,CAAK,GAAA,CAAI,CAAC,GAAA,KAAQ,eAAA;AAAA,QAClF,MAAA,CAAO,GAAA,CAAI,QAAQ,CAAA,EAAG,YAAY,CAAA;AAAA,QAClC,aAAA,CAAc,GAAA,CAAI,OAAO,CAAA,EAAG,WAAW,CAAA;AAAA,QACvC,GAAA,CAAI,SAAS,CAAA,KAAM,IAAA,IAAQ,GAAA,CAAI,SAAS,CAAA,KAAM,MAAA,GAAY,MAAA,GAAY,MAAA,CAAO,GAAA,CAAI,SAAS,GAAG,aAAa;AAAA,OAC1G,CAAC,CAAA;AAAA,IACH,CAAC,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,mBAAA,CAAoB,KAAA,EAAoD,OAAA,EAAyE;AACtJ,IAAA,MAAM,IAAA,GAAO,aAAA,CAAc,KAAA,EAAO,OAAO,CAAA;AACzC,IAAA,OAAO,KAAK,KAAA,CAAM,qBAAA,EAAuB,IAAA,CAAK,MAAA,EAAQ,OAAO,EAAA,KAAO;AACnE,MAAA,MAAM,MAAA,GAAS,MAAM,EAAA,CAAG,KAAA;AAAA,QACvB,CAAA,mCAAA,EAAsC,IAAA,CAAK,EAAA,CAAG,QAAQ;AAAA,0EAAA,CAAA;AAAA,QAEtD,CAAC,KAAK,OAAA,EAAS,IAAA,CAAK,MAAM,QAAA,EAAU,IAAA,CAAK,MAAM,OAAO;AAAA,OACvD;AACA,MAAA,OAAO,OAAA,CAA2C,MAAA,CAAO,IAAA,CAAK,GAAA,CAAI,CAAC,GAAA,KAAQ,MAAA,CAAO,GAAA,CAAI,QAAQ,CAAA,EAAG,YAAY,CAAC,CAAC,CAAA;AAAA,IAChH,CAAC,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,6BAAA,CACL,KAAA,EACA,OAAA,EAC6C;AAC7C,IAAA,MAAM,IAAA,GAAO,0BAAA,CAA2B,KAAA,EAAO,OAAO,CAAA;AACtD,IAAA,OAAO,KAAK,KAAA,CAAM,+BAAA,EAAiC,IAAA,CAAK,MAAA,EAAQ,OAAO,EAAA,KAAO;AAC7E,MAAA,MAAM,MAAA,GAAS,MAAM,EAAA,CAAG,KAAA;AAAA,QACvB,CAAA,mCAAA,EAAsC,IAAA,CAAK,EAAA,CAAG,QAAQ;AAAA,sFAAA,CAAA;AAAA,QAEtD,CAAC,KAAK,KAAA,CAAM,QAAA,EAAU,KAAK,KAAA,CAAM,OAAA,EAAS,KAAK,kBAAkB;AAAA,OAClE;AACA,MAAA,OAAO,OAAA,CAA2C,MAAA,CAAO,IAAA,CAAK,GAAA,CAAI,CAAC,GAAA,KAAQ,MAAA,CAAO,GAAA,CAAI,QAAQ,CAAA,EAAG,YAAY,CAAC,CAAC,CAAA;AAAA,IAChH,CAAC,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,aAAA,CACL,KAAA,EACA,OAAA,EACmC;AACnC,IAAA,MAAM,IAAA,GAAO,iBAAA,CAAkB,KAAA,EAAO,OAAO,CAAA;AAC7C,IAAA,OAAO,KAAK,KAAA,CAAM,eAAA,EAAiB,IAAA,CAAK,MAAA,EAAQ,OAAO,EAAA,KAAO;AAC7D,MAAA,MAAM,MAAA,GAAS,MAAM,EAAA,CAAG,KAAA;AAAA,QACvB,CAAA,+FAAA,EAAkG,IAAA,CAAK,EAAA,CAAG,UAAU;AAAA,sFAAA,CAAA;AAAA,QAEpH,CAAC,IAAA,CAAK,cAAA,EAAgB,IAAA,CAAK,OAAA,EAAS,KAAK,KAAA,CAAM,QAAA,EAAU,IAAA,CAAK,KAAA,CAAM,OAAO;AAAA,OAC5E;AACA,MAAA,MAAM,GAAA,GAAM,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA;AACzB,MAAA,IAAI,GAAA,KAAQ,QAAW,OAAO,IAAA;AAC9B,MAAA,MAAM,MAAA,GAAsB;AAAA,QAC3B,IAAA,EAAM,MAAA,CAAO,GAAA,CAAI,MAAM,GAAG,UAAU,CAAA;AAAA,QACpC,cAAA,EAAgB,MAAA,CAAO,GAAA,CAAI,iBAAiB,GAAG,qBAAqB,CAAA;AAAA,QACpE,OAAA,EAAS,MAAA,CAAO,GAAA,CAAI,UAAU,GAAG,cAAc,CAAA;AAAA,QAC/C,QAAA,EAAU,MAAA,CAAO,GAAA,CAAI,WAAW,GAAG,eAAe,CAAA;AAAA,QAClD,OAAA,EAAS,MAAA,CAAO,GAAA,CAAI,UAAU,GAAG,cAAc,CAAA;AAAA,QAC/C,QAAA,EAAU,KAAA,CAAM,GAAA,CAAI,WAAW,GAAG,eAAe;AAAA,OAClD;AACA,MAAA,OAAO,OAAA,CAA0B,YAAA,CAAa,MAAA,EAAQ,IAAA,CAAK,UAAU,CAAC,CAAA;AAAA,IACvE,CAAC,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,mBAAA,CAAoB,KAAA,EAAmC,OAAA,EAA0D;AACtH,IAAA,MAAM,IAAA,GAAO,aAAA,CAAc,KAAA,EAAO,OAAO,CAAA;AACzC,IAAA,OAAO,KAAK,MAAA,CAAO,qBAAA,EAAuB,IAAA,CAAK,MAAA,EAAQ,OAAO,EAAA,KAAO;AACpE,MAAA,MAAM,eAAA,GAAkB,MAAM,IAAA,CAAK,YAAA,CAAa,IAAI,WAAW,CAAA;AAC/D,MAAA,MAAM,IAAA,CAAK,MAAA,CAAO,qBAAA,EAAuB,QAAQ,CAAA;AACjD,MAAA,OAAO,eAAA;AAAA,IACR,CAAA,EAAG,OAAO,EAAA,EAAIA,MAAAA,EAAO,eAAA,KAAoB;AAOxC,MAAA,MAAM,QAAA,GAAW,IAAA,CAAK,QAAA,CAASA,MAAAA,EAAO,eAAe,CAAA;AACrD,MAAA,MAAM,MAAA,GAAS,MAAM,QAAQ,CAAA;AAI7B,MAAA,MAAM,UAAA,GAAa,MAAM,EAAA,CAAG,KAAA;AAAA,QAC3B,CAAA;AAAA;AAAA,UAAA,EAEQ,IAAA,CAAK,GAAG,IAAI,CAAA;AAAA;AAAA;AAAA,UAAA,EAGZ,IAAA,CAAK,GAAG,OAAO,CAAA;AAAA;AAAA;AAAA,UAAA,EAGf,IAAA,CAAK,GAAG,OAAO,CAAA;AAAA;AAAA;AAAA,YAAA,CAAA;AAAA,QAIvB,CAAC,QAAA,EAAU,IAAA,CAAK,KAAA,GAAQ,CAAA,EAAG,CAAC,GAAG,YAAY,CAAA,EAAG,CAAC,GAAG,eAAe,CAAC;AAAA,OACnE;AACA,MAAA,MAAM,IAAA,GAAO,WAAW,IAAA,CAAK,MAAA,GAAS,KAAK,KAAA,GAAQ,UAAA,CAAW,IAAA,CAAK,MAAA,GAAS,IAAA,CAAK,KAAA;AACjF,MAAA,MAAM,OAAiB,EAAC;AACxB,MAAA,MAAM,sBAAgC,EAAC;AACvC,MAAA,MAAM,eAAyB,EAAC;AAChC,MAAA,MAAM,UAAoB,EAAC;AAC3B,MAAA,KAAA,IAAS,KAAA,GAAQ,CAAA,EAAG,KAAA,GAAQ,IAAA,EAAM,SAAS,CAAA,EAAG;AAC7C,QAAA,MAAM,GAAA,GAAM,UAAA,CAAW,IAAA,CAAK,KAAK,CAAA;AACjC,QAAA,MAAM,IAAA,GAAO,KAAA,CAAM,GAAA,CAAI,MAAM,GAAG,UAAU,CAAA;AAC1C,QAAA,MAAM,GAAA,GAAM,MAAA,CAAO,GAAA,CAAI,KAAK,GAAG,SAAS,CAAA;AACxC,QAAA,IAAI,IAAA,KAAS,CAAA,EAAG,IAAA,CAAK,IAAA,CAAK,GAAG,CAAA;AAAA,aAAA,IACpB,SAAS,CAAA,EAAG;AACpB,UAAA,mBAAA,CAAoB,KAAK,MAAA,CAAO,GAAA,CAAI,iBAAiB,CAAA,EAAG,qBAAqB,CAAC,CAAA;AAC9E,UAAA,YAAA,CAAa,KAAK,GAAG,CAAA;AAAA,QACtB,CAAA,MAAO,OAAA,CAAQ,IAAA,CAAK,GAAG,CAAA;AAAA,MACxB;AAKA,MAAA,MAAM,UAAU,EAAE,UAAA,EAAY,GAAG,eAAA,EAAiB,CAAA,EAAG,kBAAkB,CAAA,EAAE;AACzE,MAAA,IAAI,IAAA,CAAK,SAAS,CAAA,EAAG;AACpB,QAAA,MAAM,OAAA,GAAU,MAAM,EAAA,CAAG,KAAA;AAAA,UACxB,CAAA,YAAA,EAAe,IAAA,CAAK,EAAA,CAAG,IAAI,CAAA,iFAAA,CAAA;AAAA,UAC3B,CAAC,IAAA,EAAM,CAAC,GAAG,YAAY,CAAC;AAAA,SACzB;AACA,QAAA,OAAA,CAAQ,UAAA,GAAa,QAAQ,IAAA,CAAK,MAAA;AAAA,MACnC;AACA,MAAA,IAAI,YAAA,CAAa,SAAS,CAAA,EAAG;AAC5B,QAAA,MAAM,OAAA,GAAU,MAAM,EAAA,CAAG,KAAA;AAAA,UACxB,CAAA;AAAA,kBAAA,EACe,IAAA,CAAK,GAAG,OAAO,CAAA;AAAA;AAAA;AAAA;AAAA,kBAAA,EAIf,IAAA,CAAK,GAAG,UAAU,CAAA;AAAA;AAAA;AAAA,kDAAA,CAAA;AAAA,UAIjC,CAAC,qBAAqB,YAAY;AAAA,SACnC;AACA,QAAA,OAAA,CAAQ,gBAAA,GAAmB,MAAM,OAAA,CAAQ,IAAA,CAAK,CAAC,CAAA,GAAI,SAAS,GAAG,aAAa,CAAA;AAAA,MAC7E;AACA,MAAA,IAAI,OAAA,CAAQ,SAAS,CAAA,EAAG;AACvB,QAAA,MAAM,OAAA,GAAU,MAAM,EAAA,CAAG,KAAA;AAAA,UACxB,CAAA;AAAA,kBAAA,EACe,IAAA,CAAK,GAAG,OAAO,CAAA;AAAA;AAAA;AAAA,kBAAA,EAGf,IAAA,CAAK,GAAG,UAAU,CAAA;AAAA;AAAA;AAAA,kDAAA,CAAA;AAAA,UAIjC,CAAC,OAAA,EAAS,CAAC,GAAG,eAAe,CAAC;AAAA,SAC/B;AACA,QAAA,OAAA,CAAQ,eAAA,GAAkB,MAAM,OAAA,CAAQ,IAAA,CAAK,CAAC,CAAA,GAAI,SAAS,GAAG,aAAa,CAAA;AAAA,MAC5E;AACA,MAAA,MAAM,MAAA,GAAS,OAAA,CAA4B,EAAE,MAAA,EAAQ,OAAA,EAAS,MAAM,UAAA,CAAW,IAAA,CAAK,MAAA,GAAS,IAAA,EAAM,CAAA;AAGnG,MAAA,MAAM,EAAA,CAAG,MAAM,CAAA,OAAA,EAAU,IAAA,CAAK,GAAG,OAAO,CAAA,2BAAA,CAAA,EAA+B,CAAC,QAAQ,CAAC,CAAA;AACjF,MAAA,MAAM,IAAA,CAAK,MAAA,CAAO,qBAAA,EAAuB,SAAS,CAAA;AAClD,MAAA,OAAO,MAAA;AAAA,IACR,CAAC,CAAA;AAAA,EACF;AACD;;;ACvtCA,IAAM,uBAAA,GAA+D,MAAA,CAAO,MAAA,CAAO,CAAC;AAAA,EACnF,OAAA,EAAS,CAAA;AAAA,EACT,IAAA,EAAM,uBAAA;AAAA,EACN,GAAA,EAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAgCN,CAAC,CAAC,CAAA;AAEF,SAAS,gBAAgB,KAAA,EAAuB;AAC/C,EAAA,OAAO,GAAG,KAAK,CAAA,6BAAA,EAAgC,KAAK,CAAA,SAAA,EAAY,KAAK,sDAAsD,KAAK,CAAA,6CAAA,CAAA;AACjI;AAEA,SAAS,qBAAqB,KAAA,EAAuB;AACpD,EAAA,OAAO,GAAG,KAAK,CAAA,2BAAA,EAA8B,KAAK,CAAA,2CAAA,EAA8C,KAAK,sBAAsB,KAAK,CAAA,+BAAA,CAAA;AACjI;AAIA,SAAS,aAAa,GAAA,EAAyB;AAC9C,EAAA,MAAM,QAAA,GAAW,MAAA,CAAO,GAAA,CAAI,qBAAqB,GAAG,yBAAyB,CAAA;AAC7E,EAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,QAAQ,CAAA,IAAK,CAAC,QAAA,CAAS,KAAA,CAAM,CAAC,OAAA,KAAY,OAAO,OAAA,KAAY,QAAQ,GAAG,MAAM,UAAA,CAAW,gBAAgB,yBAAyB,CAAA;AACrJ,EAAA,OAAO;AAAA,IACN,QAAA,EAAU,KAAA,CAAM,GAAA,CAAI,UAAU,GAAG,cAAc,CAAA;AAAA,IAC/C,MAAA,EAAQ,MAAA,CAAO,GAAA,CAAI,QAAQ,GAAG,YAAY,CAAA;AAAA,IAC1C,iBAAA,EAAmB,QAAA;AAAA,IACnB,eAAA,EAAiB,KAAA,CAAM,GAAA,CAAI,mBAAmB,GAAG,uBAAuB;AAAA,GACzE;AACD;AAEA,SAAS,iBAAA,CAAkB,QAAgB,GAAA,EAAwC;AAClF,EAAA,OAAO,iBAAiB,MAAA,EAAQ,KAAA,CAAM,IAAI,SAAS,CAAA,EAAG,aAAa,CAAA,EAAG;AAAA,IACrE,cAAA,EAAgB,OAAO,MAAA,CAAO,GAAA,CAAI,iBAAiB,CAAA,EAAG,qBAAqB,GAAG,qBAAqB,CAAA;AAAA,IACnG,eAAA,EAAiB,MAAA,CAAO,GAAA,CAAI,kBAAkB,GAAG,sBAAsB,CAAA;AAAA,IACvE,SAAA,EAAW,OAAO,MAAA,CAAO,GAAA,CAAI,YAAY,CAAA,EAAG,gBAAgB,GAAG,gBAAgB;AAAA,GAC/E,CAAA;AACF;AAWO,IAAM,mCAAN,MAAsG;AAAA,EACnG,KAAA;AAAA,EACA,MAAA;AAAA,EACA,OAAA;AAAA,EACA,EAAA;AAAA,EACA,iBAAA;AAAA,EAET,YAAY,OAAA,EAAkD;AAC7D,IAAA,IAAA,CAAK,MAAA,GAAS,MAAM,MAAM;AACzB,MAAA,IAAI,OAAA,KAAY,QAAQ,OAAO,OAAA,KAAY,UAAU,MAAM,UAAA,CAAW,iBAAiB,OAAO,CAAA;AAC9F,MAAA,OAAO,YAAA,CAAa,QAAQ,KAAK,CAAA;AAAA,IAClC,CAAA,EAAG,MAAM,UAAA,CAAW,eAAA,EAAiB,OAAO,CAAC,CAAA;AAC7C,IAAA,IAAA,CAAK,KAAA,GAAQ,eAAe,OAAO,CAAA;AACnC,IAAA,IAAA,CAAK,OAAA,GAAU,iBAAiB,OAAO,CAAA;AACvC,IAAA,IAAA,CAAK,EAAA,GAAK;AAAA,MACT,aAAA,EAAe,CAAA,EAAG,IAAA,CAAK,OAAO,CAAA,sBAAA,CAAA;AAAA,MAC9B,SAAA,EAAW,CAAA,EAAG,IAAA,CAAK,OAAO,CAAA,+BAAA,CAAA;AAAA,MAC1B,cAAA,EAAgB,CAAA,EAAG,IAAA,CAAK,OAAO,CAAA,oCAAA;AAAA,KAChC;AACA,IAAA,IAAA,CAAK,iBAAA,GAAoB,cAAA,CAAe,OAAA,EAAS,kBAAkB,CAAA;AAAA,EACpE;AAAA;AAAA,EAGA,MAAM,YAAA,GAA8B;AACnC,IAAA,MAAM,uBAAuB,IAAA,CAAK,KAAA,EAAO,IAAA,CAAK,OAAA,EAAS,iBAAiB,uBAAuB,CAAA;AAAA,EAChG;AAAA,EAEA,UAAU,SAAA,EAAkC;AAC3C,IAAA,MAAM,OAAO,IAAA,CAAK,iBAAA;AAClB,IAAA,OAAO,SAAA,CAAU,SAAS,KAAA,CAAA,GAAY,KAAA,CAAA,GAAY,MAAM,IAAA,CAAK,SAAS,GAAG,kBAAkB,CAAA;AAAA,EAC5F;AAAA,EAEA,MAAM,KAAA,CAAS,SAAA,EAAmB,MAAA,EAAoB,IAAA,EAAgE;AACrH,IAAA,MAAM,IAAA,CAAK,UAAU,SAAS,CAAA;AAC9B,IAAA,OAAO,OAAA,CAAQ,IAAA,CAAK,KAAA,EAAO,IAAA,CAAK,MAAA,EAAQ,QAAQ,CAAC,EAAA,KAAO,IAAA,CAAK,EAAE,CAAC,CAAA;AAAA,EACjE;AAAA;AAAA,EAGA,MAAM,SAAA,CAAU,EAAA,EAA8B,MAAA,EAAkC;AAC/E,IAAA,MAAM,MAAA,GAAS,MAAM,EAAA,CAAG,KAAA;AAAA,MACvB,CAAA,cAAA,EAAiB,IAAA,CAAK,EAAA,CAAG,aAAa,CAAA,2EAAA,CAAA;AAAA,MACtC,CAAC,MAAA,CAAO,QAAA,EAAU,MAAA,CAAO,OAAA,EAAS,OAAO,cAAc;AAAA,KACxD;AACA,IAAA,OAAO,MAAA,CAAO,KAAK,MAAA,KAAW,CAAA;AAAA,EAC/B;AAAA,EAEA,MAAM,gBAAA,CAAiB,EAAA,EAA8B,MAAA,EAAoD;AACxG,IAAA,MAAM,MAAA,GAAS,MAAM,EAAA,CAAG,KAAA;AAAA,MACvB,UAAU,eAAA,CAAgB,UAAU,CAAC,CAAA,MAAA,EAAS,IAAA,CAAK,GAAG,SAAS,CAAA;AAAA,2GAAA,CAAA;AAAA,MAE/D,CAAC,MAAA,CAAO,QAAA,EAAU,MAAA,CAAO,OAAA,EAAS,OAAO,cAAc;AAAA,KACxD;AACA,IAAA,OAAO,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,KAAM,MAAA,GAAY,SAAY,YAAA,CAAa,MAAA,CAAO,IAAA,CAAK,CAAC,CAAC,CAAA;AAAA,EAC9E;AAAA,EAEA,MAAM,qBAAA,CAAsB,EAAA,EAA8B,MAAA,EAAuD;AAChH,IAAA,MAAM,MAAA,GAAS,MAAM,EAAA,CAAG,KAAA;AAAA,MACvB,UAAU,oBAAA,CAAqB,eAAe,CAAC,CAAA,MAAA,EAAS,IAAA,CAAK,GAAG,cAAc,CAAA;AAAA,+GAAA,CAAA;AAAA,MAE9E,CAAC,MAAA,CAAO,QAAA,EAAU,MAAA,CAAO,OAAA,EAAS,OAAO,cAAc;AAAA,KACxD;AACA,IAAA,IAAI,MAAA,CAAO,KAAK,CAAC,CAAA,KAAM,QAAW,MAAM,UAAA,CAAW,gBAAgB,mBAAmB,CAAA;AACtF,IAAA,OAAO,iBAAA,CAAkB,MAAA,EAAQ,MAAA,CAAO,IAAA,CAAK,CAAC,CAAC,CAAA;AAAA,EAChD;AAAA,EAEA,MAAM,eAAA,CAAgB,EAAA,EAA8B,MAAA,EAAgB,QAAA,EAAwC;AAC3G,IAAA,MAAM,EAAA,CAAG,KAAA;AAAA,MACR,CAAA,YAAA,EAAe,IAAA,CAAK,EAAA,CAAG,SAAS,CAAA;AAAA,6CAAA,CAAA;AAAA,MAEhC,CAAC,MAAA,CAAO,QAAA,EAAU,MAAA,CAAO,OAAA,EAAS,OAAO,cAAA,EAAgB,QAAA,CAAS,QAAA,EAAU,QAAA,CAAS,QAAQ,aAAA,CAAc,QAAA,CAAS,iBAAiB,CAAA,EAAG,SAAS,eAAe;AAAA,KACjK;AAAA,EACD;AAAA,EAEA,MAAM,oBAAA,CAAqB,EAAA,EAA8B,MAAA,EAAgB,SAAiB,aAAA,EAAiE;AAC1J,IAAA,MAAM,EAAA,CAAG,KAAA;AAAA,MACR,CAAA,YAAA,EAAe,IAAA,CAAK,EAAA,CAAG,cAAc,CAAA;AAAA,mDAAA,CAAA;AAAA,MAErC,CAAC,MAAA,CAAO,QAAA,EAAU,MAAA,CAAO,OAAA,EAAS,OAAO,cAAA,EAAgB,OAAA,EAAS,aAAA,CAAc,aAAA,CAAc,cAAc,CAAA,EAAG,aAAA,CAAc,iBAAiB,aAAA,CAAc,aAAA,CAAc,SAAS,CAAC;AAAA,KACrL;AAAA,EACD;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,wBAAA,CACL,KAAA,EACA,OAAA,EACiD;AACjD,IAAA,MAAM,IAAA,GAAO,mBAAA,CAAoB,KAAA,EAAO,OAAO,CAAA;AAC/C,IAAA,OAAO,KAAK,KAAA,CAAM,0BAAA,EAA4B,IAAA,CAAK,MAAA,EAAQ,OAAO,EAAA,KAAO;AAGxE,MAAA,MAAM,MAAA,GAAS,MAAM,EAAA,CAAG,KAAA;AAAA,QACvB,CAAA;AAAA,+BAAA,EAC6B,eAAA,CAAgB,UAAU,CAAC,CAAA;AAAA,+CAAA,EACX,IAAA,CAAK,GAAG,SAAS,CAAA;AAAA;AAAA;AAAA,UAAA,EAGtD,IAAA,CAAK,GAAG,SAAS,CAAA;AAAA;AAAA,8DAAA,CAAA;AAAA,QAGzB,CAAC,IAAA,CAAK,QAAA,EAAU,IAAA,CAAK,OAAA,EAAS,KAAK,YAAY;AAAA,OAChD;AACA,MAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,IAAA,CAAK,GAAA,CAAI,CAAC,GAAA,MAAS;AAAA,QACvC,MAAA,EAAQ,EAAE,QAAA,EAAU,IAAA,CAAK,UAAU,OAAA,EAAS,IAAA,CAAK,OAAA,EAAS,cAAA,EAAgB,MAAA,CAAO,GAAA,CAAI,iBAAiB,CAAA,EAAG,qBAAqB,CAAA,EAAE;AAAA,QAChI,QAAA,EAAU,aAAa,GAAG,CAAA;AAAA,QAC1B,UAAA,EAAY,aAAA,CAAc,GAAA,CAAI,cAAc,GAAG,kBAAkB;AAAA,OAClE,CAAE,CAAA,CAEA,MAAA,CAAO,CAAC,IAAA,KAAS,KAAK,UAAA,KAAe,MAAA,IAAa,IAAA,CAAK,YAAA,GAAe,IAAA,CAAK,UAAU,EAErF,IAAA,CAAK,CAAC,IAAA,EAAM,KAAA,KAAUI,YAAAA,CAAY,IAAA,CAAK,OAAO,cAAA,EAAgB,KAAA,CAAM,MAAA,CAAO,cAAc,CAAC,CAAA;AAC5F,MAAA,OAAOF,QAAAA,CAA+C,KAAA,CAAM,GAAA,CAAI,CAAC,IAAA,KAAS,WAAA,CAAY,IAAA,CAAK,MAAA,EAAQ,IAAA,CAAK,QAAA,EAAU,IAAA,CAAK,UAAU,CAAC,CAAC,CAAA;AAAA,IACpI,CAAC,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,gBAAA,CACL,KAAA,EACA,OAAA,EAC8C;AAC9C,IAAA,MAAM,IAAA,GAAO,cAAA,CAAe,KAAA,EAAO,OAAO,CAAA;AAC1C,IAAA,OAAO,KAAK,KAAA,CAAM,kBAAA,EAAoB,IAAA,CAAK,MAAA,EAAQ,OAAO,EAAA,KAAO;AAChE,MAAA,MAAM,SAAS,IAAA,CAAK,MAAA;AACpB,MAAA,MAAM,MAAA,GAAS,MAAM,EAAA,CAAG,KAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAMvB,CAAA;AAAA,KAAA,EACG,oBAAA,CAAqB,uBAAuB,CAAC;AAAA,UAAA,EACxC,IAAA,CAAK,GAAG,aAAa,CAAA;AAAA;AAAA;AAAA;AAAA,uCAAA,EAIQ,IAAA,CAAK,GAAG,SAAS,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,yBAAA,EAK/B,IAAA,CAAK,GAAG,SAAS,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mBAAA,EAOvB,IAAA,CAAK,GAAG,cAAc,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,2GAAA,CAAA;AAAA,QAMvC,CAAC,MAAA,CAAO,QAAA,EAAU,MAAA,CAAO,OAAA,EAAS,OAAO,cAAc;AAAA,OACxD;AACA,MAAA,MAAM,GAAA,GAAM,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA;AACzB,MAAA,IAAI,GAAA,KAAQ,QAAW,OAAO,IAAA;AAC9B,MAAA,OAAOA,QAAAA,CAAqC;AAAA,QAC3C,gBAAgB,MAAA,CAAO,cAAA;AAAA,QACvB,UAAU,MAAA,CAAO,QAAA;AAAA,QACjB,SAAS,MAAA,CAAO,OAAA;AAAA,QAChB,MAAA,EAAQ,MAAA,CAAO,GAAA,CAAI,QAAQ,GAAG,YAAY,CAAA;AAAA,QAC1C,mBAAA,EAAqB,KAAA,CAAM,GAAA,CAAI,cAAc,GAAG,kBAAkB,CAAA;AAAA,QAClE,aAAA,EAAe,iBAAA,CAAkB,MAAA,EAAQ,GAAG;AAAA,OAC5C,CAAA;AAAA,IACF,CAAC,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,sBAAA,CACL,KAAA,EACA,OAAA,EACiD;AACjD,IAAA,MAAM,IAAA,GAAO,cAAA,CAAe,KAAA,EAAO,OAAO,CAAA;AAC1C,IAAA,OAAO,KAAK,KAAA,CAAM,wBAAA,EAA0B,IAAA,CAAK,MAAA,EAAQ,OAAO,EAAA,KAAO;AACtE,MAAA,MAAM,SAAS,IAAA,CAAK,MAAA;AACpB,MAAA,MAAM,MAAA,GAAS,MAAM,EAAA,CAAG,KAAA;AAAA,QACvB,UAAU,eAAA,CAAgB,UAAU,CAAC,CAAA,MAAA,EAAS,IAAA,CAAK,GAAG,SAAS,CAAA;AAAA,+FAAA,CAAA;AAAA,QAE/D,CAAC,MAAA,CAAO,QAAA,EAAU,MAAA,CAAO,OAAA,EAAS,OAAO,cAAc;AAAA,OACxD;AACA,MAAA,MAAM,SAAA,GAAY,MAAA,CAAO,IAAA,CAAK,GAAA,CAAI,YAAY,CAAA;AAC9C,MAAA,OAAOA,QAAAA,CAA+C,SAAA,CAAU,GAAA,CAAI,CAAC,UAAU,KAAA,KAAU,WAAA,CAAY,MAAA,EAAQ,QAAA,EAAU,UAAU,KAAA,GAAQ,CAAC,CAAA,EAAG,eAAe,CAAC,CAAC,CAAA;AAAA,IAC/J,CAAC,CAAA;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,kBAAA,CACL,KAAA,EAKA,OAAA,EAC0C;AAC1C,IAAA,MAAM,IAAA,GAAO,cAAA,CAAe,KAAA,EAAO,OAAO,CAAA;AAC1C,IAAA,MAAM,IAAA,CAAK,UAAU,oBAAoB,CAAA;AACzC,IAAA,MAAM,SAAS,IAAA,CAAK,MAAA;AAIpB,IAAA,OAAO,QAAA;AAAA,MACN,IAAA,CAAK,KAAA;AAAA,MACL,IAAA,CAAK,MAAA;AAAA,MACL,IAAA,CAAK,MAAA;AAAA,MACL,OAAO,EAAA,KAAA,CAAQ,MAAM,EAAA,CAAG,KAAA;AAAA,QACvB,CAAA,YAAA,EAAe,IAAA,CAAK,EAAA,CAAG,aAAa,CAAA;AAAA,qDAAA,CAAA;AAAA,QAEpC,CAAC,MAAA,CAAO,QAAA,EAAU,MAAA,CAAO,OAAA,EAAS,OAAO,cAAc;AAAA,OACxD,EAAG,KAAK,MAAA,KAAW,CAAA;AAAA,MACnB,OAAO,EAAA,EAAIF,MAAAA,EAAOQ,QAAAA,KAAY;AAC7B,QAAA,IAAI,CAACA,QAAAA,EAAS,OAAO,OAAA,CAAQ,gBAAgB,CAAA;AAC7C,QAAA,MAAM,QAAA,GAA0B,EAAE,QAAA,EAAU,CAAA,EAAG,MAAA,EAAQ,UAAU,iBAAA,EAAmB,IAAA,CAAK,QAAA,EAAU,eAAA,EAAiBR,MAAAA,EAAM;AAC1H,QAAA,MAAM,aAAA,GAAgB,gBAAA,CAAiB,MAAA,EAAQ,CAAA,EAAG,KAAK,aAAa,CAAA;AACpE,QAAA,MAAM,MAAA,GAASE,QAAAA,CAAwC,EAAE,OAAA,EAAS,IAAA,EAAM,QAAA,EAAU,WAAA,CAAY,MAAA,EAAQ,QAAA,EAAU,MAAS,CAAA,EAAG,aAAA,EAAe,CAAA;AAC3I,QAAA,MAAM,EAAA,CAAG,KAAA;AAAA,UACR,CAAA;AAAA,kBAAA,EACe,IAAA,CAAK,GAAG,SAAS,CAAA;AAAA;AAAA;AAAA,iBAAA,EAGlB,IAAA,CAAK,GAAG,cAAc,CAAA;AAAA,mDAAA,CAAA;AAAA,UAEpC;AAAA,YAAC,MAAA,CAAO,QAAA;AAAA,YAAU,MAAA,CAAO,OAAA;AAAA,YAAS,MAAA,CAAO,cAAA;AAAA,YAAgB,aAAA,CAAc,KAAK,QAAQ,CAAA;AAAA,YAAGF,MAAAA;AAAA,YACtF,aAAA,CAAc,IAAA,CAAK,aAAA,CAAc,cAAc,CAAA;AAAA,YAAG,KAAK,aAAA,CAAc,eAAA;AAAA,YAAiB,aAAA,CAAc,IAAA,CAAK,aAAA,CAAc,SAAS;AAAA;AAAC,SACnI;AACA,QAAA,OAAO,MAAA;AAAA,MACR;AAAA,KACD;AAAA,EACD;AAAA,EAEA,MAAM,uBAAA,CACL,KAAA,EACA,OAAA,EAC0C;AAC1C,IAAA,MAAM,IAAA,GAAO,sBAAA,CAAuB,KAAA,EAAO,OAAO,CAAA;AAClD,IAAA,MAAM,IAAA,CAAK,UAAU,yBAAyB,CAAA;AAC9C,IAAA,OAAO,KAAK,WAAA,CAAY,IAAA,CAAK,MAAA,EAAQ,IAAA,CAAK,QAAQ,IAAA,CAAK,gBAAA,EAAkB,CAAC,OAAA,MAAa,EAAE,MAAA,EAAQ,OAAA,CAAQ,QAAQ,QAAA,EAAU,IAAA,CAAK,UAAS,CAAE,CAAA;AAAA,EAC5I;AAAA,EAEA,MAAM,iBAAA,CAAkB,KAAA,EAA2C,OAAA,EAAsE;AACxI,IAAA,OAAO,IAAA,CAAK,aAAA,CAAc,mBAAA,EAAqB,KAAA,EAAO,SAAS,KAAK,CAAA;AAAA,EACrE;AAAA,EAEA,MAAM,kBAAA,CAAmB,KAAA,EAA2C,OAAA,EAAsE;AACzI,IAAA,OAAO,IAAA,CAAK,aAAA,CAAc,oBAAA,EAAsB,KAAA,EAAO,SAAS,MAAM,CAAA;AAAA,EACvE;AAAA,EAEA,MAAM,kBAAA,CAAmB,KAAA,EAA2C,OAAA,EAAsE;AACzI,IAAA,OAAO,IAAA,CAAK,aAAA,CAAc,oBAAA,EAAsB,KAAA,EAAO,SAAS,MAAM,CAAA;AAAA,EACvE;AAAA,EAEA,MAAM,4BAAA,CACL,KAAA,EACA,OAAA,EAC2C;AAC3C,IAAA,MAAM,IAAA,GAAO,4BAAA,CAA6B,KAAA,EAAO,OAAO,CAAA;AACxD,IAAA,MAAM,IAAA,CAAK,UAAU,8BAA8B,CAAA;AACnD,IAAA,MAAM,SAAS,IAAA,CAAK,MAAA;AACpB,IAAA,OAAO,SAAS,IAAA,CAAK,KAAA,EAAO,IAAA,CAAK,MAAA,EAAQ,KAAK,MAAA,EAAQ,CAAC,EAAA,KAAO,IAAA,CAAK,UAAU,EAAA,EAAI,MAAM,GAAG,OAAO,EAAA,EAAI,QAAQ,MAAA,KAAW;AACvH,MAAA,IAAI,CAAC,QAAQ,OAAOE,QAAAA,CAAyC,EAAE,OAAA,EAAS,KAAA,EAAO,OAAA,EAAS,WAAA,EAAa,CAAA;AACrG,MAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,gBAAA,CAAiB,IAAI,MAAM,CAAA;AACvD,MAAA,IAAI,QAAA,KAAa,MAAA,EAAW,MAAM,UAAA,CAAW,gBAAgB,cAAc,CAAA;AAC3E,MAAA,IAAI,QAAA,CAAS,MAAA,KAAW,SAAA,EAAW,OAAOA,QAAAA,CAAyC,EAAE,OAAA,EAAS,KAAA,EAAO,OAAA,EAAS,SAAA,EAAW,CAAA;AACzH,MAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,qBAAA,CAAsB,IAAI,MAAM,CAAA;AAC3D,MAAA,IAAI,KAAK,eAAA,KAAoB,MAAA,IAAa,IAAA,CAAK,eAAA,KAAoB,QAAQ,OAAA,EAAS;AACnF,QAAA,OAAOA,QAAAA,CAAyC,EAAE,OAAA,EAAS,KAAA,EAAO,SAAS,kBAAA,EAAoB,cAAA,EAAgB,OAAA,CAAQ,OAAA,EAAS,CAAA;AAAA,MACjI;AACA,MAAA,MAAM,gBAAgB,gBAAA,CAAiB,MAAA,EAAQ,QAAQ,OAAA,GAAU,CAAA,EAAG,KAAK,aAAa,CAAA;AACtF,MAAA,MAAM,SAASA,QAAAA,CAAyC,EAAE,OAAA,EAAS,IAAA,EAAM,eAAe,CAAA;AACxF,MAAA,MAAM,IAAA,CAAK,qBAAqB,EAAA,EAAI,MAAA,EAAQ,QAAQ,OAAA,GAAU,CAAA,EAAG,KAAK,aAAa,CAAA;AACnF,MAAA,OAAO,MAAA;AAAA,IACR,CAAC,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,aAAA,CACL,SAAA,EACA,KAAA,EACA,SACA,IAAA,EAC0C;AAC1C,IAAA,MAAM,IAAA,GAAO,oBAAA,CAAqB,KAAA,EAAO,OAAO,CAAA;AAChD,IAAA,MAAM,IAAA,CAAK,UAAU,SAAS,CAAA;AAC9B,IAAA,OAAO,IAAA,CAAK,WAAA,CAAY,IAAA,CAAK,MAAA,EAAQ,IAAA,CAAK,QAAQ,IAAA,CAAK,gBAAA,EAAkB,oBAAA,CAAqB,IAAI,CAAC,CAAA;AAAA,EACpG;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,WAAA,CAAY,MAAA,EAAoB,MAAA,EAAgB,gBAAA,EAAsC,MAAA,EAAiE;AACtJ,IAAA,OAAO,QAAA;AAAA,MACN,IAAA,CAAK,KAAA;AAAA,MACL,IAAA,CAAK,MAAA;AAAA,MACL,MAAA;AAAA,MACA,OAAO,EAAA,KAAO;AACb,QAAA,IAAI,CAAE,MAAM,IAAA,CAAK,UAAU,EAAA,EAAI,MAAM,GAAI,OAAO,MAAA;AAChD,QAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,gBAAA,CAAiB,IAAI,MAAM,CAAA;AACtD,QAAA,IAAI,OAAA,KAAY,MAAA,EAAW,MAAM,UAAA,CAAW,gBAAgB,cAAc,CAAA;AAC1E,QAAA,OAAO,EAAE,SAAS,aAAA,EAAe,MAAM,KAAK,qBAAA,CAAsB,EAAA,EAAI,MAAM,CAAA,EAAE;AAAA,MAC/E,CAAA;AAAA,MACA,OAAO,EAAA,EAAIF,MAAAA,EAAO,MAAA,KAAW;AAC5B,QAAA,MAAM,WAAW,gBAAA,CAAiB,MAAA,EAAQ,OAAA,EAAS,gBAAA,EAAkBA,QAAO,MAAM,CAAA;AAClF,QAAA,IAAI,SAAA,IAAa,QAAA,EAAU,OAAO,QAAA,CAAS,OAAA;AAC3C,QAAA,MAAM,MAAA,GAASE,QAAAA,CAAwC,EAAE,OAAA,EAAS,MAAM,QAAA,EAAU,WAAA,CAAY,MAAA,EAAQ,QAAA,CAAS,UAAU,MAAS,CAAA,EAAG,aAAA,EAAe,MAAA,CAAQ,eAAe,CAAA;AAC3K,QAAA,MAAM,IAAA,CAAK,eAAA,CAAgB,EAAA,EAAI,MAAA,EAAQ,SAAS,QAAQ,CAAA;AACxD,QAAA,OAAO,MAAA;AAAA,MACR;AAAA,KACD;AAAA,EACD;AACD;;;ACndA,IAAM,UAAA,GAAa,MAAa,UAAA,CAAW,MAAA,EAAQ,kBAAkB,CAAA;AACrE,IAAM,iBAAuB,MAAM;AAClC,EAAA,MAAM,UAAA,EAAW;AAClB,CAAA;AAkBO,SAAS,wBAAwB,OAAA,EAAsD;AAC7F,EAAA,OAAO,MAAM,MAAM;AAClB,IAAA,IAAI,CAAC,aAAA,CAAc,OAAO,CAAA,QAAS,UAAA,EAAW;AAC9C,IAAA,MAAM,SAAA,GAAY,cAAc,OAAA,CAAQ,OAAA,EAAS,YAAY,UAAA,EAAY,cAAc,CAAA,EAAG,UAAA,EAAY,cAAc,CAAA;AACpH,IAAA,MAAM,YAAY,SAAA,CAAU,OAAA,CAAQ,SAAS,aAAA,EAAe,aAAA,EAAe,cAAc,CAAC,CAAA;AAC1F,IAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,OAAA,EAAS,QAAA,EAAU,UAAU,cAAc,CAAA;AAClE,IAAA,MAAM,QAAA,GAAW,SAAA,KAAc,KAAA,CAAA,GAAY,+BAAA,CAAgC,qBAAA,GAAwB,SAAA;AACnG,IAAA,MAAM,WAAA,GAAc,SAAA,KAAc,KAAA,CAAA,GAAY,+BAAA,CAAgC,gBAAA,GAAmB,SAAA;AACjG,IAAA,mBAAA,CAAoB,UAAU,UAAU,CAAA;AACxC,IAAA,iBAAA,CAAkB,aAAa,aAAa,CAAA;AAC5C,IAAA,mCAAA,CAAoC,QAAA,EAAU,aAAa,UAAU,CAAA;AACrE,IAAA,IAAI,OAAO,MAAA,KAAW,UAAA,EAAY,MAAM,UAAA,CAAW,QAAQ,uBAAuB,CAAA;AAClF,IAAA,MAAM,KAAA,GAAQ,CAAC,OAAA,KACd,KAAA,CAAM,MAAM;AACX,MAAA,MAAM,KAAA,GAAQ,UAAU,OAAO,CAAA;AAC/B,MAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,CAAC,mBAAA,CAAoB,KAAK,CAAA,IAAK,KAAA,GAAQ,CAAA,EAAG,MAAM,UAAA,CAAW,OAAA,EAAS,iBAAiB,CAAA;AACtH,MAAA,MAAM,OAAO,QAAA,CAAS,OAAA,CAAQ,OAAO,QAAA,CAAS,MAAM,IAAI,CAAC,CAAA;AACzD,MAAA,MAAM,MAAA,GAAS,KAAA,CAAM,MAAA,EAAQ,KAAA,CAAA,EAAW,EAAE,CAAA;AAC1C,MAAA,IAAI,OAAO,MAAA,KAAW,QAAA,IAAY,EAAE,MAAA,IAAU,CAAA,IAAK,MAAA,GAAS,CAAA,CAAA,EAAI,MAAM,UAAA,CAAW,OAAA,EAAS,uBAAuB,CAAA;AACjH,MAAA,OAAO,IAAA,GAAO,SAAA,CAAU,IAAA,GAAO,WAAA,GAAc,MAAM,CAAA;AAAA,IACpD,CAAA,EAAG,MAAM,UAAA,CAAW,MAAA,EAAQ,sBAAsB,CAAC,CAAA;AACpD,IAAA,OAAO,OAAO,KAAK,CAAA;AAAA,EACpB,GAAG,UAAU,CAAA;AACd;;;ACCA,IAAMO,WAAAA,GAAa,MAAa,UAAA,CAAW,MAAA,EAAQ,kBAAkB,CAAA;AACrE,IAAMC,kBAAuB,MAAM;AAClC,EAAA,MAAMD,WAAAA,EAAW;AAClB,CAAA;AAuBO,SAAS,kCAAA,CACf,aACA,OAAA,EACgC;AAChC,EAAA,OAAO,MAAM,MAAM;AAClB,IAAA,MAAM,QAAA,GAAW,gBAAgB,OAAO,CAAA;AACxC,IAAA,IAAI,CAAC,aAAA,CAAc,WAAW,CAAA,QAASA,WAAAA,EAAW;AAClD,IAAA,MAAM,OAAO,SAAA,CAAU,OAAA,CAAQ,aAAa,MAAA,EAAQ,MAAA,EAAQC,eAAc,CAAC,CAAA;AAC3E,IAAA,IAAI,SAAS,UAAA,EAAY;AACxB,MAAA,MAAM,SAAS,SAAA,CAAU,OAAA,CAAQ,aAAa,QAAA,EAAU,QAAA,EAAUA,eAAc,CAAC,CAAA;AACjF,MAAA,MAAM,aAAa,SAAA,CAAU,OAAA,CAAQ,aAAa,YAAA,EAAc,YAAA,EAAcA,eAAc,CAAC,CAAA;AAC7F,MAAA,OAAO,cAAA,CAAe,MAAA,EAAQ,UAAA,EAAY,QAAQ,CAAA;AAAA,IACnD;AACA,IAAA,QAAQ,IAAA;AAAM,MACb,KAAK,eAAA;AAAA,MACL,KAAK,SAAA;AAAA,MACL,KAAK,aAAA;AAAA,MACL,KAAK,oBAAA;AACJ,QAAA,OAAO,OAAsC,EAAE,OAAA,EAAS,WAAA,EAAa,MAAA,EAAQ,MAAM,CAAA;AAAA,MACpF,KAAK,aAAA;AAAA,MACL,KAAK,iBAAA;AACJ,QAAA,OAAO,OAAsC,EAAE,OAAA,EAAS,aAAA,EAAe,MAAA,EAAQ,MAAM,CAAA;AAAA,MACtF,KAAK,uBAAA;AAAA,MACL,KAAK,qBAAA;AAAA,MACL,KAAK,sBAAA;AACJ,QAAA,OAAO,OAAsC,EAAE,OAAA,EAAS,WAAA,EAAa,MAAA,EAAQ,MAAM,CAAA;AAAA,MACpF;AACC,QAAA,MAAM,UAAA,CAAW,QAAQ,qBAAqB,CAAA;AAAA;AAChD,EACD,GAAGD,WAAU,CAAA;AACd;AAGA,SAAS,gBAAgB,OAAA,EAAmC;AAC3D,EAAA,IAAI,CAAC,aAAA,CAAc,OAAO,CAAA,QAASA,WAAAA,EAAW;AAC9C,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,OAAA,EAAS,KAAA,EAAO,OAAOC,eAAc,CAAA;AACzD,EAAA,MAAM,kBAAkB,SAAA,CAAU,OAAA,CAAQ,SAAS,iBAAA,EAAmB,iBAAA,EAAmBA,eAAc,CAAC,CAAA;AACxG,EAAA,oBAAA,CAAqB,iBAAiB,iBAAiB,CAAA;AACvD,EAAA,OAAO,OAAO,EAAE,KAAA,EAAO,OAAO,GAAG,CAAA,EAAG,iBAAiB,CAAA;AACtD;AAEA,SAAS,cAAA,CAAe,MAAA,EAAiB,UAAA,EAAqB,QAAA,EAA0D;AACvH,EAAA,IAAI,OAAO,MAAA,KAAW,QAAA,IAAY,CAAC,mBAAA,CAAoB,MAAM,CAAA,IAAK,MAAA,GAAS,GAAA,IAAO,MAAA,GAAS,GAAA,EAAK;AAC/F,IAAA,MAAM,UAAA,CAAW,SAAS,qBAAqB,CAAA;AAAA,EAChD;AACA,EAAA,MAAM,UAAA,GAAa,MAAA;AACnB,EAAA,MAAM,MAAA,GAAS,CAAC,MAAA,KAAyE,MAAA,CAAO,MAAM,CAAA;AACtG,EAAA,IAAI,MAAA,GAAS,GAAA,EAAK,OAAO,MAAA,CAAO,EAAE,SAAS,WAAA,EAAa,MAAA,EAAQ,UAAA,EAAY,UAAA,EAAY,CAAA;AACxF,EAAA,IAAI,MAAA,GAAS,GAAA,EAAK,OAAO,MAAA,CAAO,EAAE,SAAS,WAAA,EAAa,MAAA,EAAQ,UAAA,EAAY,UAAA,EAAY,CAAA;AACxF,EAAA,IAAI,MAAA,GAAS,GAAA,EAAK,OAAO,MAAA,CAAO,EAAE,SAAS,aAAA,EAAe,MAAA,EAAQ,UAAA,EAAY,UAAA,EAAY,CAAA;AAC1F,EAAA,IAAI,MAAA,IAAU,GAAA,EAAK,OAAO,MAAA,CAAO,EAAE,SAAS,WAAA,EAAa,MAAA,EAAQ,UAAA,EAAY,UAAA,EAAY,CAAA;AACzF,EAAA,QAAQ,MAAA;AAAQ,IACf,KAAK,GAAA;AACJ,MAAA,OAAO,MAAA,CAAO,EAAE,OAAA,EAAS,WAAA,EAAa,QAAQ,UAAA,EAAY,UAAA,EAAY,oBAAA,EAAsB,IAAA,EAAM,CAAA;AAAA,IACnG,KAAK,GAAA;AACJ,MAAA,OAAO,MAAA,CAAO,EAAE,OAAA,EAAS,WAAA,EAAa,QAAQ,UAAA,EAAY,UAAA,EAAY,oBAAA,EAAsB,IAAA,EAAM,CAAA;AAAA,IACnG,KAAK,GAAA;AACJ,MAAA,OAAO,OAAO,EAAE,OAAA,EAAS,aAAa,MAAA,EAAQ,UAAA,EAAY,YAAY,CAAA;AAAA,IACvE,KAAK,GAAA;AACJ,MAAA,OAAO,OAAO,EAAE,OAAA,EAAS,aAAa,MAAA,EAAQ,UAAA,EAAY,YAAY,CAAA;AAAA,IACvE,KAAK,GAAA;AACJ,MAAA,OAAO,MAAA,CAAO,EAAE,OAAA,EAAS,WAAA,EAAa,MAAA,EAAQ,UAAA,EAAY,UAAA,EAAY,YAAA,EAAc,gBAAA,CAAiB,UAAA,EAAY,QAAQ,CAAA,EAAG,CAAA;AAAA,IAC7H,KAAK,GAAA;AACJ,MAAA,OAAO,OAAO,EAAE,OAAA,EAAS,eAAe,MAAA,EAAQ,UAAA,EAAY,YAAY,CAAA;AAAA,IACzE;AACC,MAAA,OAAO,OAAO,EAAE,OAAA,EAAS,eAAe,MAAA,EAAQ,UAAA,EAAY,YAAY,CAAA;AAAA;AAE3E;AAEA,IAAM,WAAA,GAAc,0HAAA;AACpB,IAAM,aAAA,GAAgB,OAAA;AAWf,SAAS,iBAAA,CACf,OACA,OAAA,EACqB;AACrB,EAAA,OAAO,KAAA,CAAM,MAAM,gBAAA,CAAiB,SAAA,CAAU,KAAK,GAAG,eAAA,CAAgB,OAAO,CAAC,CAAA,EAAGD,WAAU,CAAA;AAC5F;AAEA,SAAS,gBAAA,CAAiB,OAAgB,QAAA,EAA+C;AACxF,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,EAAU,OAAO,MAAA;AACtC,EAAA,MAAM,OAAA,GAAU,KAAK,KAAK,CAAA;AAC1B,EAAA,IAAI,OAAA,KAAY,IAAI,OAAO,MAAA;AAC3B,EAAA,IAAI,OAAA;AACJ,EAAA,IAAI,OAAA,CAAQ,aAAA,EAAe,OAAO,CAAA,EAAG;AACpC,IAAA,OAAA,GAAU,iBAAA,CAAkB,OAAO,CAAA,GAAI,GAAA;AAAA,EACxC,CAAA,MAAO;AAGN,IAAA,IAAI,CAAC,OAAA,CAAQ,WAAA,EAAa,OAAO,GAAG,OAAO,MAAA;AAC3C,IAAA,MAAM,EAAA,GAAK,UAAU,OAAO,CAAA;AAC5B,IAAA,IAAI,CAAC,eAAe,EAAE,CAAA,IAAK,CAAC,cAAA,CAAe,QAAA,CAAS,KAAK,CAAA,EAAG,OAAO,MAAA;AACnE,IAAA,OAAA,GAAU,KAAK,QAAA,CAAS,KAAA;AAAA,EACzB;AACA,EAAA,IAAI,OAAA,KAAY,SAAS,OAAO,MAAA;AAChC,EAAA,OAAO,QAAQ,OAAA,CAAQ,OAAA,EAAS,CAAC,CAAA,EAAG,SAAS,eAAe,CAAA;AAC7D;;;AC/JA,IAAM,eAAgC,MAAA,CAAO,EAAE,OAAO,QAAA,EAAU,MAAA,EAAQ,UAAU,CAAA;AAQ3E,IAAM,QAAA,GAAiB,CAAC,KAAA,EAAOjB,MAAAA,KAAU;AAC/C,EAAA,MAAM,eAAA,CAAgB,KAAA,KAAU,UAAA,GAAa,mBAAA,GAAsB,oBAAoBA,MAAK,CAAA;AAC7F,CAAA;AAGO,IAAM,QAAA,GAAiB,CAAC,MAAA,EAAQA,MAAAA,KAAU;AAChD,EAAA,MAAM,eAAA,CAAgB,qBAAqBA,MAAK,CAAA;AACjD,CAAA;AAEA,SAAS,SAAS,IAAA,EAAwC;AACzD,EAAA,OAAO,CAAC,OAAOA,MAAAA,KAAU;AACxB,IAAA,MAAM,eAAA,CAAgB,KAAA,KAAU,UAAA,GAAa,mBAAA,GAAsB,MAAMA,MAAK,CAAA;AAAA,EAC/E,CAAA;AACD;AAGO,IAAM,WAAA,GAAc,SAAS,wBAAwB,CAAA;AAErD,IAAM,QAAA,GAAW,SAAS,qBAAqB,CAAA;AAG/C,SAAS,cAAcA,MAAAA,EAA4B;AACzD,EAAA,OAAO,MAAM,eAAA,CAAgB,mBAAA,EAAqBA,MAAK,CAAA;AACxD;AAuBO,SAAS,uBAAA,CACf,UACA,OAAA,EACwB;AACxB,EAAA,OAAO,KAAA,CAAM,MAAM,SAAA,CAAU,QAAA,EAAU,OAAO,CAAA,EAAG,aAAA,CAAc,UAAU,CAAC,CAAA;AAC3E;AAWO,SAAS,4BAA4B,QAAA,EAAyC;AACpF,EAAA,OAAO,MAAM,MAAM,qBAAA,CAAsB,QAAQ,CAAA,EAAG,aAAA,CAAc,UAAU,CAAC,CAAA;AAC9E;AAEA,SAAS,SAAA,CAAU,UAAmB,OAAA,EAAyC;AAG9E,EAAA,IAAI,CAAC,aAAA,CAAc,OAAO,GAAG,OAAO,QAAA,CAAS,aAAa,SAAS,CAAA;AACnE,EAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,OAAA,EAAS,QAAA,EAAU,UAAU,QAAQ,CAAA;AAC5D,EAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,OAAA,EAAS,OAAA,EAAS,SAAS,QAAQ,CAAA;AAC5D,EAAA,MAAM,KAAA,GAAQ,sBAAsB,QAAQ,CAAA;AAC5C,EAAA,MAAMW,MAAAA,GAAQ,mBAAA,CAAoB,MAAA,EAAQ,KAAA,CAAM,SAAS,CAAA;AACzD,EAAA,MAAM,KAAA,GAAQ,cAAc,QAAQ,CAAA;AACpC,EAAA,MAAM,sBAAA,GAAyB,KAAA,CAAM,qBAAA,KAA0B,YAAA,IAAgBA,QAAO,iBAAA,KAAsB,IAAA;AAE5G,EAAA,IAAI,OAAA,GAAoC,IAAA;AACxC,EAAA,IAAI,KAAA,GAA2B,KAAA;AAC/B,EAAA,IAAIA,UAAS,CAAC,sBAAA,KAA2BA,MAAAA,CAAM,MAAA,IAAUA,OAAM,KAAA,CAAA,EAAQ;AACtE,IAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,QAAA,EAAoB,SAAA,EAAW,WAAW,QAAQ,CAAA;AACzE,IAAA,IAAI,aAAA,CAAc,MAAM,CAAA,EAAG;AAC1B,MAAA,MAAM,SAAS,QAAA,EAA2B;AAC1C,MAAA,IAAIA,OAAM,MAAA,EAAQ,aAAA,CAAc,QAAQA,MAAAA,CAAM,MAAA,EAAQ,aAAa,MAAM,CAAA;AACzE,MAAA,IAAIA,OAAM,KAAA,EAAO,aAAA,CAAc,QAAQA,MAAAA,CAAM,KAAA,EAAO,UAAU,MAAM,CAAA;AACpE,MAAA,IAAIA,OAAM,MAAA,EAAQ,OAAA,GAAU,IAAA,CAAK,MAAA,EAAQA,OAAM,MAAM,CAAA;AACrD,MAAA,IAAIA,OAAM,KAAA,EAAO,KAAA,GAAQ,IAAA,CAAK,MAAA,EAAQA,OAAM,KAAK,CAAA;AAAA,IAClD;AAAA,EACD;AACA,EAAA,OAAO,MAAA,CAAO;AAAA,IACb,SAAS,KAAA,CAAM,OAAA;AAAA,IACf,UAAU,KAAA,CAAM,QAAA;AAAA,IAChB,SAAS,KAAA,CAAM,OAAA;AAAA,IACf,KAAA;AAAA,IACA,OAAA;AAAA,IACA,kBAAkB,OAAA,KAAY,IAAA;AAAA,IAC9B,KAAA;AAAA,IACA;AAAA,GACA,CAAA;AACF;AAEA,IAAM,KAAA,GAA2B,MAAA,CAAO,EAAE,CAAA;AAgBnC,SAAS,mBAAA,CAAoB,QAAiB,SAAA,EAAoD;AACxG,EAAA,IAAI,WAAW,IAAA,IAAQ,MAAA,KAAW,UAAa,OAAO,MAAA,KAAW,UAAU,OAAO,MAAA;AAClF,EAAA,IAAI,CAAC,aAAA,CAAc,MAAM,GAAG,OAAO,QAAA,CAAS,aAAa,QAAQ,CAAA;AACjE,EAAA,MAAMA,MAAAA,GAAQ,OAAA,CAAQ,MAAA,EAAQ,SAAA,EAAW,UAAU,QAAQ,CAAA;AAC3D,EAAA,IAAIA,WAAU,IAAA,IAAQA,MAAAA,KAAU,UAAa,OAAOA,MAAAA,KAAU,UAAU,OAAO,MAAA;AAC/E,EAAA,IAAI,CAAC,aAAA,CAAcA,MAAK,GAAG,OAAO,QAAA,CAAS,aAAa,QAAQ,CAAA;AAChE,EAAA,MAAM,MAAA,GAAS,WAAW,OAAA,CAAQA,MAAAA,EAAO,UAAU,QAAA,EAAU,QAAQ,CAAA,EAAG,QAAA,EAAU,QAAQ,CAAA;AAC1F,EAAA,MAAM,KAAA,GAAQ,WAAW,OAAA,CAAQA,MAAAA,EAAO,SAAS,QAAA,EAAU,QAAQ,CAAA,EAAG,QAAA,EAAU,QAAQ,CAAA;AACxF,EAAA,OAAO,MAAA,CAAO;AAAA,IACb,MAAA;AAAA,IACA,KAAA;AAAA,IACA,mBAAmB,OAAA,CAAQA,MAAAA,EAAO,mBAAA,EAAqB,QAAA,EAAU,QAAQ,CAAA,KAAM,IAAA;AAAA,IAC/E,QAAQ,OAAA,CAAQA,MAAAA,EAAO,QAAA,EAAU,QAAA,EAAU,QAAQ,CAAA,KAAM;AAAA,GACzD,CAAA;AACF;AASO,SAAS,aAAA,CAAc,MAAA,EAAgB,KAAA,EAA0B,IAAA,EAAY,MAAA,EAAgD;AACnI,EAAA,KAAA,IAAS,QAAQ,CAAA,EAAG,KAAA,GAAQ,KAAA,CAAM,MAAA,EAAQ,SAAS,CAAA,EAAG;AACrD,IAAA,MAAM,IAAA,GAAO,MAAM,KAAK,CAAA;AACxB,IAAA,IAAI,MAAA,CAAO,MAAA,EAAQ,IAAI,CAAA,EAAG;AAC1B,IAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,MAAA,EAAQ,IAAA,EAAM,MAAM,IAAI,CAAA;AAC9C,IAAA,IAAI,UAAU,MAAA,EAAW;AACzB,IAAA,MAAA,CAAO,QAAQ,IAAA,EAAM,YAAA,CAAa,KAAA,EAAO,IAAA,EAAM,IAAI,CAAC,CAAA;AAAA,EACrD;AACD;AAGO,SAAS,IAAA,CAAK,QAA0C,KAAA,EAA6C;AAC3G,EAAA,MAAM,SAAS,QAAA,EAA2B;AAC1C,EAAA,KAAA,IAAS,QAAQ,CAAA,EAAG,KAAA,GAAQ,KAAA,CAAM,MAAA,EAAQ,SAAS,CAAA,EAAG;AACrD,IAAA,MAAM,IAAA,GAAO,MAAM,KAAK,CAAA;AACxB,IAAA,IAAI,MAAA,CAAO,MAAA,EAAQ,IAAI,CAAA,IAAK,CAAC,MAAA,CAAO,MAAA,EAAQ,IAAI,CAAA,EAAG,MAAA,CAAO,MAAA,EAAQ,IAAA,EAAM,MAAA,CAAO,IAAI,CAAC,CAAA;AAAA,EACrF;AACA,EAAA,OAAO,OAAO,MAAM,CAAA;AACrB;AAEA,IAAM,gBAAgB,MAAA,CAAO;AAAA,EAC5B,SAAA;AAAA,EACA,WAAA;AAAA,EACA,oBAAA;AAAA,EACA,UAAA;AAAA,EACA,SAAA;AAAA,EACA,aAAA;AAAA,EACA,WAAA;AAAA,EACA,UAAA;AAAA,EACA,oBAAA;AAAA,EACA,eAAA;AAAA,EACA,aAAA;AAAA,EACA,YAAA;AAAA,EACA,YAAA;AAAA,EACA,uBAAA;AAAA,EACA,uBAAA;AAAA,EACA;AACD,CAAU,CAAA;AAMH,SAAS,sBAAsB,MAAA,EAAuC;AAC5E,EAAA,IAAI,MAAA,KAAW,QAAQ,OAAO,MAAA,KAAW,UAAU,OAAO,QAAA,CAAS,aAAa,UAAU,CAAA;AAC1F,EAAA,IAAI,CAAC,aAAA,CAAc,MAAM,GAAG,OAAO,QAAA,CAAS,aAAa,UAAU,CAAA;AACnE,EAAA,MAAMN,OAAM,QAAA,EAAkB;AAC9B,EAAA,KAAA,IAAS,QAAQ,CAAA,EAAG,KAAA,GAAQ,aAAA,CAAc,MAAA,EAAQ,SAAS,CAAA,EAAG;AAC7D,IAAA,MAAM,GAAA,GAAM,cAAc,KAAK,CAAA;AAC/B,IAAA,MAAA,CAAOA,MAAK,GAAA,EAAK,OAAA,CAAQ,QAAQ,GAAA,EAAK,GAAA,EAAK,QAAQ,CAAC,CAAA;AAAA,EACrD;AACA,EAAA,MAAM,iBAAiBA,IAAAA,CAAI,qBAAA;AAC3B,EAAA,IAAI,mBAAmB,QAAA,IAAY,cAAA,KAAmB,cAAc,cAAA,KAAmB,cAAA,IAAkB,mBAAmB,YAAA,EAAc;AACzI,IAAA,OAAO,QAAA,CAAS,YAAY,uBAAuB,CAAA;AAAA,EACpD;AACA,EAAA,MAAM,cAAcA,IAAAA,CAAI,WAAA;AACxB,EAAA,IAAI,WAAA,KAAgB,MAAA,IAAa,WAAA,KAAgB,mBAAA,IAAuB,gBAAgB,8BAAA,EAAgC;AACvH,IAAA,OAAO,QAAA,CAAS,YAAY,aAAa,CAAA;AAAA,EAC1C;AACA,EAAA,OAAO,MAAA,CAA6B;AAAA,IACnC,OAAA,EAAS,aAAA,CAAcA,IAAAA,CAAI,OAAA,EAAS,SAAS,CAAA;AAAA,IAC7C,SAAA,EAAW,aAAA,CAAcA,IAAAA,CAAI,SAAA,EAAW,WAAW,CAAA;AAAA,IACnD,kBAAA,EAAoB,cAAA,CAAeA,IAAAA,CAAI,kBAAA,EAAoB,oBAAoB,CAAA;AAAA,IAC/E,QAAA,EAAU,aAAA,CAAcA,IAAAA,CAAI,QAAA,EAAU,UAAU,CAAA;AAAA,IAChD,OAAA,EAAS,aAAA,CAAcA,IAAAA,CAAI,OAAA,EAAS,SAAS,CAAA;AAAA,IAC7C,WAAA,EAAa,aAAA,CAAcA,IAAAA,CAAI,WAAA,EAAa,aAAa,CAAA;AAAA,IACzD,SAAA,EAAW,aAAA,CAAcA,IAAAA,CAAI,SAAA,EAAW,WAAW,CAAA;AAAA,IACnD,QAAA,EAAU,cAAA,CAAeA,IAAAA,CAAI,QAAA,EAAU,UAAU,CAAA;AAAA,IACjD,kBAAA,EAAoB,cAAA,CAAeA,IAAAA,CAAI,kBAAA,EAAoB,oBAAoB,CAAA;AAAA,IAC/E,aAAA,EAAe,aAAA,CAAcA,IAAAA,CAAI,aAAA,EAAe,eAAe,CAAA;AAAA,IAC/D,WAAA,EAAa,cAAA,CAAeA,IAAAA,CAAI,WAAA,EAAa,aAAa,CAAA;AAAA,IAC1D,UAAA,EAAY,cAAA,CAAeA,IAAAA,CAAI,UAAA,EAAY,YAAY,CAAA;AAAA,IACvD,UAAA,EAAY,cAAA,CAAeA,IAAAA,CAAI,UAAA,EAAY,YAAY,CAAA;AAAA,IACvD,qBAAA,EAAuB,aAAA,CAAcA,IAAAA,CAAI,qBAAA,EAAuB,uBAAuB,CAAA;AAAA,IACvF,qBAAA,EAAuB,cAAA;AAAA,IACvB;AAAA,GACA,CAAA;AACF;AAEA,SAAS,cAAcA,IAAAA,EAA+B;AACrD,EAAA,IAAIA,IAAAA,KAAQ,QAAW,OAAO,YAAA;AAC9B,EAAA,IAAI,CAAC,aAAA,CAAcA,IAAG,GAAG,OAAO,QAAA,CAAS,aAAa,OAAO,CAAA;AAC7D,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAQA,IAAAA,EAAK,OAAA,EAAS,SAAS,QAAQ,CAAA;AACrD,EAAA,IAAI,UAAU,SAAA,EAAW;AACxB,IAAA,MAAM,OAAA,GAAU,OAAA,CAAQA,IAAAA,EAAK,SAAA,EAAW,WAAW,QAAQ,CAAA;AAC3D,IAAA,MAAM,SAAA,GAAY,OAAA,CAAQA,IAAAA,EAAK,WAAA,EAAa,aAAa,QAAQ,CAAA;AACjE,IAAA,OAAO,MAAA,CAAwB;AAAA,MAC9B,KAAA,EAAO,SAAA;AAAA,MACP,OAAA,EAAS,aAAA,CAAc,OAAA,EAAS,SAAS,CAAA;AAAA,MACzC,SAAA,EAAW,aAAA,CAAc,SAAA,EAAW,WAAW;AAAA,KAC/C,CAAA;AAAA,EACF;AACA,EAAA,MAAM,MAAA,GAAS,OAAA,CAAQA,IAAAA,EAAK,QAAA,EAAU,SAAS,QAAQ,CAAA;AACvD,EAAA,IAAI,KAAA,KAAU,YAAa,MAAA,KAAW,YAAA,IAAgB,WAAW,QAAA,EAAW,OAAO,QAAA,CAAS,UAAA,EAAY,OAAO,CAAA;AAC/G,EAAA,OAAO,MAAA,CAAwB,EAAE,KAAA,EAAO,QAAA,EAAU,QAAQ,CAAA;AAC3D;AAGO,SAAS,aAAA,CAAc,OAAgBL,MAAAA,EAAuB;AACpE,EAAA,IAAI,OAAO,UAAU,QAAA,IAAY,KAAA,CAAM,WAAW,CAAA,EAAG,OAAO,QAAA,CAAS,UAAA,EAAYA,MAAK,CAAA;AACtF,EAAA,OAAO,KAAA;AACR;AAEA,SAAS,cAAA,CAAe,OAAgBA,MAAAA,EAAmC;AAC1E,EAAA,OAAO,KAAA,KAAU,MAAA,GAAY,MAAA,GAAY,aAAA,CAAc,OAAOA,MAAK,CAAA;AACpE;AAEA,SAAS,cAAA,CAAe,OAAgBA,MAAAA,EAAuB;AAC9D,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,CAAC,mBAAA,CAAoB,KAAK,CAAA,EAAG,OAAO,QAAA,CAAS,UAAA,EAAYA,MAAK,CAAA;AAC/F,EAAA,OAAO,KAAA;AACR;AAGA,SAAS,cAAA,CAAe,OAAgBA,MAAAA,EAAuB;AAC9D,EAAA,MAAM,GAAA,GAAM,oBAAoB,KAAK,CAAA;AACrC,EAAA,IAAI,GAAA,KAAQ,MAAA,EAAW,OAAO,QAAA,CAAS,YAAYA,MAAK,CAAA;AACxD,EAAA,OAAO,GAAA;AACR;;;ACpRO,IAAM,0BAAA,GAA6B;AA4EnC,SAAS,4BAA4B,KAAA,EAA2D;AACtG,EAAA,OAAO,MAAM,MAAM;AAClB,IAAA,MAAM,MAAA,GAAS,YAAA,CAAa,cAAA,CAAe,KAAA,EAAO,KAAK,CAAC,CAAA;AACxD,IAAA,OAAO,MAAA,CAAO,EAAE,OAAA,EAAS,MAAA,CAAO,OAAA,EAAS,gBAAA,EAAkB,MAAA,CAAO,gBAAA,EAAkB,QAAA,EAAU,MAAA,CAAO,QAAA,EAAU,CAAA;AAAA,EAChH,CAAA,EAAG,aAAA,CAAc,KAAK,CAAC,CAAA;AACxB;AAEA,IAAMmB,MAAAA,GAA2B,MAAA,CAAO,EAAE,CAAA;AAE1C,SAAS,cAAA,CAAe,OAAgB,cAAA,EAAyC;AAChF,EAAA,IAAI,CAAC,aAAA,CAAc,KAAK,GAAG,OAAO,QAAA,CAAS,aAAa,OAAO,CAAA;AAC/D,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,KAAA,EAAO,KAAA,EAAO,OAAO,QAAQ,CAAA;AACjD,EAAA,MAAM,YAAA,GAAe,OAAA,CAAQ,KAAA,EAAO,cAAA,EAAgB,gBAAgB,QAAQ,CAAA;AAC5E,EAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,KAAA,EAAO,QAAA,EAAU,UAAU,QAAQ,CAAA;AAC1D,EAAA,MAAM,cAAA,GAAiB,OAAA,CAAQ,KAAA,EAAO,gBAAA,EAAkB,kBAAkB,QAAQ,CAAA;AAClF,EAAA,MAAM,gBAAgB,cAAA,GAAiB,OAAA,CAAQ,OAAO,YAAA,EAAc,YAAA,EAAc,QAAQ,CAAA,GAAI,MAAA;AAE9F,EAAA,IAAI,CAAC,aAAA,CAAc,GAAG,GAAG,OAAO,QAAA,CAAS,aAAa,KAAK,CAAA;AAC3D,EAAA,MAAM,QAAQ,qBAAA,CAAsB,OAAA,CAAQ,KAAK,OAAA,EAAS,OAAA,EAAS,QAAQ,CAAC,CAAA;AAC5E,EAAA,IAAI,CAAC,aAAA,CAAc,YAAY,GAAG,OAAO,QAAA,CAAS,aAAa,cAAc,CAAA;AAC7E,EAAA,MAAM,cAAA,GAAiB,cAAc,OAAA,CAAQ,YAAA,EAAc,kBAAkB,gBAAA,EAAkB,QAAQ,GAAG,gBAAgB,CAAA;AAC1H,EAAA,MAAM,QAAA,GAAW,cAAc,OAAA,CAAQ,YAAA,EAAc,YAAY,UAAA,EAAY,QAAQ,GAAG,UAAU,CAAA;AAClG,EAAA,MAAM,OAAA,GAAU,cAAc,OAAA,CAAQ,YAAA,EAAc,WAAW,SAAA,EAAW,QAAQ,GAAG,SAAS,CAAA;AAC9F,EAAA,IAAI,QAAA,KAAa,MAAM,QAAA,IAAY,OAAA,KAAY,MAAM,OAAA,EAAS,MAAM,eAAA,CAAgB,gBAAA,EAAkB,cAAc,CAAA;AACpH,EAAA,MAAM,UAAA,GAAa,cAAA,GAAiB,aAAA,CAAc,aAAA,EAAe,YAAY,CAAA,GAAI,MAAA;AAEjF,EAAA,MAAMR,MAAAA,GAAQ,mBAAA,CAAoB,MAAA,EAAQ,KAAA,CAAM,SAAS,CAAA;AACzD,EAAA,IAAI,gBAAA,GAAmB,KAAA;AACvB,EAAA,IAAI,gBAAA,GAAmB,KAAA;AACvB,EAAA,IAAI,OAAA;AACJ,EAAA,IAAI,KAAA,GAAQQ,MAAAA;AACZ,EAAA,IAAIR,QAAO,MAAA,EAAQ;AAClB,IAAA,gBAAA,GAAmB,OAAA,CAAQ,GAAA,EAAK,kBAAA,EAAoB,kBAAA,EAAoB,QAAQ,CAAA,KAAM,IAAA;AACtF,IAAA,MAAM,aAAA,GAAgB,OAAA,CAAQ,GAAA,EAAK,SAAA,EAAW,WAAW,QAAQ,CAAA;AACjE,IAAA,gBAAA,GAAmB,cAAc,aAAa,CAAA;AAC9C,IAAA,MAAM,UAAA,GAAa,KAAA,CAAM,qBAAA,KAA0B,YAAA,IAAgB,CAACA,MAAAA,CAAM,iBAAA;AAC1E,IAAA,IAAI,gBAAA,IAAoB,gBAAA,IAAoB,CAAC,UAAA,EAAY;AACxD,MAAA,MAAM,SAAS,QAAA,EAA2B;AAC1C,MAAA,aAAA,CAAc,aAAA,EAAyBA,MAAAA,CAAM,MAAA,EAAQ,WAAA,EAAa,MAAM,CAAA;AACxE,MAAA,OAAA,GAAU,IAAA,CAAK,MAAA,EAAQA,MAAAA,CAAM,MAAM,CAAA;AACnC,MAAA,IAAIA,MAAAA,CAAM,MAAA,IAAUA,MAAAA,CAAM,KAAA,EAAO;AAChC,QAAA,MAAM,WAAA,GAAc,OAAA,CAAQ,GAAA,EAAK,OAAA,EAAS,SAAS,QAAQ,CAAA;AAC3D,QAAA,IAAI,aAAA,CAAc,WAAW,CAAA,EAAG;AAC/B,UAAA,MAAM,aAAa,QAAA,EAA2B;AAC9C,UAAA,aAAA,CAAc,WAAA,EAAaA,MAAAA,CAAM,KAAA,EAAO,QAAA,EAAU,UAAU,CAAA;AAC5D,UAAA,KAAA,GAAQ,IAAA,CAAK,UAAA,EAAYA,MAAAA,CAAM,KAAK,CAAA;AAAA,QACrC;AAAA,MACD;AAAA,IACD;AAAA,EACD;AACA,EAAA,OAAO,MAAA,CAAuB;AAAA,IAC7B,KAAA;AAAA,IACA,cAAA;AAAA,IACA,QAAA;AAAA,IACA,OAAA;AAAA,IACA,UAAA;AAAA,IACA,KAAA,EAAAA,MAAAA;AAAA,IACA,gBAAA;AAAA,IACA,gBAAA;AAAA,IACA,OAAA;AAAA,IACA,KAAA;AAAA,IACA,cAAA,EAAgB,OAAO,cAAA,KAAmB,UAAA,GAAc,cAAA,GAA2C;AAAA,GACnG,CAAA;AACF;AAGA,SAAS,aAAa,QAAA,EAAkC;AACvD,EAAA,MAAM,EAAE,KAAA,EAAO,cAAA,EAAgB,KAAA,EAAAA,QAAM,GAAI,QAAA;AACzC,EAAA,MAAM,YAAA,GAAe,CAAC,MAAA,KAA6B,MAAA,CAAO,EAAE,KAAA,EAAO,cAAA,EAAgB,OAAA,EAAS,IAAA,EAAM,gBAAA,EAAkB,KAAA,EAAO,QAAA,EAAU,QAAQ,CAAA;AAC7I,EAAA,IAAI,CAACA,MAAAA,IAAS,CAACA,OAAM,MAAA,EAAQ,OAAO,aAAa,oBAAoB,CAAA;AACrE,EAAA,IAAI,CAAC,SAAS,gBAAA,IAAoB,CAAC,SAAS,gBAAA,EAAkB,OAAO,aAAa,eAAe,CAAA;AACjG,EAAA,IAAI,KAAA,CAAM,0BAA0B,YAAA,IAAgB,CAACA,OAAM,iBAAA,EAAmB,OAAO,aAAa,YAAY,CAAA;AAC9G,EAAA,IAAIA,OAAM,MAAA,EAAQ;AACjB,IAAA,MAAM,YAAY,QAAA,CAAS,cAAA;AAC3B,IAAA,IAAI,SAAA,KAAc,MAAA,EAAW,OAAO,YAAA,CAAa,yBAAyB,CAAA;AAC1E,IAAA,MAAM,aAAa,MAAA,CAA0B;AAAA,MAC5C,cAAA;AAAA,MACA,UAAU,QAAA,CAAS,QAAA;AAAA,MACnB,SAAS,QAAA,CAAS,OAAA;AAAA,MAClB,KAAA;AAAA,MACA,OAAO,QAAA,CAAS;AAAA,KAChB,CAAA;AACD,IAAA,IAAI,QAAA;AACJ,IAAA,IAAI;AACH,MAAA,QAAA,GAAW,KAAA,CAAM,SAAA,EAAW,KAAA,CAAA,EAAW,CAAC,UAAU,CAAC,CAAA;AAAA,IACpD,CAAA,CAAA,MAAQ;AAEP,MAAA,OAAO,aAAa,wBAAwB,CAAA;AAAA,IAC7C;AACA,IAAA,IAAI,QAAA,KAAa,IAAA,EAAM,OAAO,YAAA,CAAa,uBAAuB,CAAA;AAAA,EACnE;AACA,EAAA,OAAO,MAAA,CAAO,EAAE,KAAA,EAAO,cAAA,EAAgB,OAAA,EAAS,SAAS,OAAA,IAAWQ,MAAAA,EAAO,gBAAA,EAAkB,IAAA,EAAM,CAAA;AACpG;AAuBO,SAAS,4BAA4B,KAAA,EAAgD;AAC3F,EAAA,OAAO,MAAM,MAAM;AAClB,IAAA,MAAM,QAAA,GAAW,cAAA,CAAe,KAAA,EAAO,IAAI,CAAA;AAC3C,IAAA,MAAM,SAAA,GAAY,aAAa,QAAQ,CAAA;AACvC,IAAA,MAAM,EAAE,OAAM,GAAI,SAAA;AAClB,IAAA,MAAM,OAAO,MAAA,CAA8B;AAAA,MAC1C,MAAA,EAAQ,0BAAA;AAAA,MACR,SAAS,KAAA,CAAM,OAAA;AAAA,MACf,MAAM,KAAA,CAAM,SAAA;AAAA,MACZ,UAAU,KAAA,CAAM,QAAA;AAAA,MAChB,SAAS,KAAA,CAAM,OAAA;AAAA,MACf,eAAe,KAAA,CAAM,aAAA;AAAA,MACrB,YAAY,KAAA,CAAM,UAAA;AAAA,MAClB,OAAO,MAAA,CAAuC;AAAA,QAC7C,MAAM,KAAA,CAAM,SAAA;AAAA,QACZ,eAAe,KAAA,CAAM,kBAAA;AAAA,QACrB,aAAa,KAAA,CAAM,WAAA;AAAA,QACnB,WAAW,KAAA,CAAM,SAAA;AAAA,QACjB,UAAU,KAAA,CAAM,QAAA;AAAA,QAChB,YAAY,KAAA,CAAM,UAAA;AAAA,QAClB,oBAAoB,KAAA,CAAM,kBAAA;AAAA,QAC1B,WAAA,EAAa,KAAA,CAAM,WAAA,KAAgB,8BAAA,GAAiC,MAAM,WAAA,GAAc,KAAA,CAAA;AAAA,QACxF,SAAS,SAAA,CAAU,OAAA;AAAA,QACnB,kBAAkB,SAAA,CAAU;AAAA,OAC5B,CAAA;AAAA,MACD,UAAU,MAAA,CAAO;AAAA,QAChB,YAAY,QAAA,CAAS,UAAA;AAAA,QACrB,gBAAgB,SAAA,CAAU;AAAA,OAC1B;AAAA,KACD,CAAA;AACD,IAAA,OAAO,MAAA,CAAO,EAAE,IAAA,EAAM,OAAA,EAAS,aAAA,CAAc,IAAI,CAAA,EAAG,QAAA,EAAU,SAAA,CAAU,QAAA,EAAU,CAAA;AAAA,EACnF,CAAA,EAAG,aAAA,CAAc,KAAK,CAAC,CAAA;AACxB;;;ACrPO,IAAM,eAAA,GAAkB,OAAO,MAAA,CAAO;AAAA,EAC5C,SAAA,EAAW,oBAAA;AAAA,EACX,SAAA,EAAW,oBAAA;AAAA,EACX,OAAA,EAAS,mBAAA;AAAA,EACT,UAAA,EAAY,sBAAA;AAAA,EACZ,OAAA,EAAS,2BAAA;AAAA,EACT,WAAA,EAAa;AACd,CAAU;AAEV,IAAM,YAAA,GAAe,mBAAA;AAQrB,IAAM,cAAA,GAAiB,2CAAA;AAEvB,IAAMF,WAAAA,GAAa,MAAa,UAAA,CAAW,MAAA,EAAQ,kBAAkB,CAAA;AACrE,IAAMC,kBAAuB,MAAM;AAClC,EAAA,MAAMD,WAAAA,EAAW;AAClB,CAAA;AAUO,SAAS,sBAAA,CAAuB,kBAA0B,OAAA,EAAyB;AACzF,EAAA,OAAO,MAAM,MAAM;AAClB,IAAA,MAAM,SAAA,GAAY,UAAU,gBAAgB,CAAA;AAC5C,IAAA,MAAM,IAAA,GAAO,UAAU,OAAO,CAAA;AAC9B,IAAA,sBAAA,CAAuB,SAAS,CAAA;AAChC,IAAA,IAAI,OAAO,IAAA,KAAS,QAAA,EAAU,MAAM,UAAA,CAAW,QAAQ,qBAAqB,CAAA;AAC5E,IAAA,OAAO,CAAA,EAAG,SAAS,CAAA,CAAA,EAAI,IAAI,CAAA,CAAA;AAAA,EAC5B,GAAGA,WAAU,CAAA;AACd;AAyBO,SAAS,2BAA2B,KAAA,EAAoE;AAC9G,EAAA,OAAO,MAAM,MAAM;AAClB,IAAA,IAAI,CAAC,aAAA,CAAc,KAAK,CAAA,QAASA,WAAAA,EAAW;AAC5C,IAAA,MAAM,YAAY,SAAA,CAAU,OAAA,CAAQ,OAAO,WAAA,EAAa,WAAA,EAAaC,eAAc,CAAC,CAAA;AACpF,IAAA,MAAM,mBAAmB,SAAA,CAAU,OAAA,CAAQ,OAAO,kBAAA,EAAoB,kBAAA,EAAoBA,eAAc,CAAC,CAAA;AACzG,IAAA,MAAM,UAAU,SAAA,CAAU,OAAA,CAAQ,OAAO,SAAA,EAAW,SAAA,EAAWA,eAAc,CAAC,CAAA;AAC9E,IAAA,MAAM,aAAa,SAAA,CAAU,OAAA,CAAQ,OAAO,YAAA,EAAc,YAAA,EAAcA,eAAc,CAAC,CAAA;AACvF,IAAA,MAAM,UAAU,SAAA,CAAU,OAAA,CAAQ,OAAO,SAAA,EAAW,SAAA,EAAWA,eAAc,CAAC,CAAA;AAE9E,IAAA,IAAI,OAAO,SAAA,KAAc,QAAA,IAAY,CAAC,OAAA,CAAQ,YAAA,EAAc,SAAS,CAAA,EAAG,MAAM,UAAA,CAAW,MAAA,EAAQ,qBAAqB,CAAA;AACtH,IAAA,sBAAA,CAAuB,gBAAgB,CAAA;AACvC,IAAA,IAAI,OAAO,OAAA,KAAY,QAAA,IAAY,CAAC,OAAA,CAAQ,cAAA,EAAgB,OAAO,CAAA,EAAG,MAAM,UAAA,CAAW,MAAA,EAAQ,kBAAkB,CAAA;AACjH,IAAA,IAAI,OAAO,UAAA,KAAe,QAAA,IAAY,CAAC,OAAA,CAAQ,cAAA,EAAgB,UAAU,CAAA,EAAG,MAAM,UAAA,CAAW,MAAA,EAAQ,qBAAqB,CAAA;AAC1H,IAAA,IAAI,OAAO,OAAA,KAAY,QAAA,IAAY,CAAC,mBAAA,CAAoB,OAAO,CAAA,IAAK,OAAA,GAAU,CAAA,EAAG,MAAM,UAAA,CAAW,OAAA,EAAS,iBAAiB,CAAA;AAC5H,IAAA,OAAO,MAAA,CAA+B;AAAA,MACrC,CAAC,eAAA,CAAgB,WAAW,GAAG,kBAAA;AAAA,MAC/B,CAAC,eAAA,CAAgB,SAAS,GAAG,SAAA;AAAA,MAC7B,CAAC,eAAA,CAAgB,SAAS,GAAG,GAAG,gBAAgB,CAAA,CAAA;AAAA,MAChD,CAAC,eAAA,CAAgB,OAAO,GAAG,OAAA;AAAA,MAC3B,CAAC,eAAA,CAAgB,UAAU,GAAG,UAAA;AAAA,MAC9B,CAAC,eAAA,CAAgB,OAAO,GAAG,GAAG,OAAO,CAAA;AAAA,KACrC,CAAA;AAAA,EACF,GAAGD,WAAU,CAAA;AACd;AAEA,SAAS,uBAAuB,KAAA,EAAyC;AACxE,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,CAAC,mBAAA,CAAoB,KAAK,CAAA,IAAK,KAAA,GAAQ,CAAA,EAAG,MAAM,UAAA,CAAW,OAAA,EAAS,mBAAmB,CAAA;AACzH;;;AC/EA,IAAM,gBAAA,GAAmB,OAAO,SAAA,CAAU,UAAA;AAC1C,IAAM,aAAA,GAAgB,OAAO,SAAA,CAAU,OAAA;AACvC,IAAM,WAAA,GAAc,OAAO,SAAA,CAAU,KAAA;AACrC,IAAM,WAAA,GAAc,OAAO,SAAA,CAAU,KAAA;AAGrC,IAAM,kBAAA,GAAqB,EAAA;AAE3B,IAAM,eAAA,GAAkB,EAAA;AAExB,IAAM,UAAA,GAAa,yCAAA;AAEnB,IAAM,cAAc,IAAI,MAAA,CAAO,IAAI,UAAU,CAAA,MAAA,EAAS,UAAU,CAAA,KAAA,CAAO,CAAA;AACvE,IAAM,SAAA,GAAY,oBAAA;AAQlB,SAAS,SAAA,CAAU,CAAA,EAAW,CAAA,EAAW,CAAA,EAAW,GAAW,MAAA,EAA2B;AACzF,EAAA,OAAO,MAAA,CAAO,EAAE,IAAA,EAAA,CAAS,CAAA,IAAK,EAAA,GAAO,CAAA,IAAK,EAAA,GAAO,CAAA,IAAK,CAAA,GAAK,CAAA,MAAO,CAAA,EAAI,MAAA,EAAQ,CAAA;AAC/E;AAUA,IAAM,sBAA4C,MAAA,CAAO;AAAA,EACxD,SAAA,CAAU,CAAA,EAAG,CAAA,EAAG,CAAA,EAAG,GAAG,CAAC,CAAA;AAAA;AAAA,EACvB,SAAA,CAAU,EAAA,EAAI,CAAA,EAAG,CAAA,EAAG,GAAG,CAAC,CAAA;AAAA;AAAA,EACxB,SAAA,CAAU,GAAA,EAAK,EAAA,EAAI,CAAA,EAAG,GAAG,EAAE,CAAA;AAAA;AAAA,EAC3B,SAAA,CAAU,GAAA,EAAK,CAAA,EAAG,CAAA,EAAG,GAAG,CAAC,CAAA;AAAA;AAAA,EACzB,SAAA,CAAU,GAAA,EAAK,GAAA,EAAK,CAAA,EAAG,GAAG,EAAE,CAAA;AAAA;AAAA,EAC5B,SAAA,CAAU,GAAA,EAAK,EAAA,EAAI,CAAA,EAAG,GAAG,EAAE,CAAA;AAAA;AAAA,EAC3B,SAAA,CAAU,GAAA,EAAK,CAAA,EAAG,CAAA,EAAG,GAAG,EAAE,CAAA;AAAA;AAAA,EAC1B,SAAA,CAAU,GAAA,EAAK,CAAA,EAAG,CAAA,EAAG,GAAG,EAAE,CAAA;AAAA;AAAA,EAC1B,SAAA,CAAU,GAAA,EAAK,EAAA,EAAI,EAAA,EAAI,GAAG,EAAE,CAAA;AAAA;AAAA,EAC5B,SAAA,CAAU,GAAA,EAAK,GAAA,EAAK,CAAA,EAAG,GAAG,EAAE,CAAA;AAAA;AAAA,EAC5B,SAAA,CAAU,GAAA,EAAK,EAAA,EAAI,CAAA,EAAG,GAAG,EAAE,CAAA;AAAA;AAAA,EAC3B,SAAA,CAAU,GAAA,EAAK,EAAA,EAAI,GAAA,EAAK,GAAG,EAAE,CAAA;AAAA;AAAA,EAC7B,SAAA,CAAU,GAAA,EAAK,CAAA,EAAG,GAAA,EAAK,GAAG,EAAE,CAAA;AAAA;AAAA,EAC5B,SAAA,CAAU,GAAA,EAAK,CAAA,EAAG,CAAA,EAAG,GAAG,CAAC,CAAA;AAAA;AAAA,EACzB,SAAA,CAAU,GAAA,EAAK,CAAA,EAAG,CAAA,EAAG,GAAG,CAAC;AAAA;AAC1B,CAAC,CAAA;AAED,SAAS,WAAA,CAAY,OAAeG,MAAAA,EAA2B;AAC9D,EAAA,MAAM,IAAA,GAAOA,OAAM,MAAA,KAAW,CAAA,GAAI,IAAK,UAAA,IAAe,EAAA,GAAKA,OAAM,MAAA,KAAa,CAAA;AAC9E,EAAA,OAAA,CAAS,KAAA,GAAQ,IAAA,MAAU,CAAA,KAAOA,MAAAA,CAAM,IAAA;AACzC;AAGA,SAAS,kBAAkB,KAAA,EAAwB;AAClD,EAAA,KAAA,IAAS,QAAQ,CAAA,EAAG,KAAA,GAAQ,mBAAA,CAAoB,MAAA,EAAQ,SAAS,CAAA,EAAG;AACnE,IAAA,IAAI,YAAY,KAAA,EAAO,mBAAA,CAAoB,KAAK,CAAE,GAAG,OAAO,KAAA;AAAA,EAC7D;AACA,EAAA,OAAO,IAAA;AACR;AAGA,SAAS,UAAUlB,KAAAA,EAAkC;AACpD,EAAA,IAAI,CAAC,OAAA,CAAQ,WAAA,EAAaA,KAAI,GAAG,OAAO,MAAA;AACxC,EAAA,MAAM,QAAQ,KAAA,CAAM,WAAA,EAAaA,KAAAA,EAAM,CAAC,GAAG,CAAC,CAAA;AAC5C,EAAA,IAAI,KAAA,GAAQ,CAAA;AACZ,EAAA,KAAA,IAAS,KAAA,GAAQ,CAAA,EAAG,KAAA,GAAQ,CAAA,EAAG,KAAA,IAAS,CAAA,EAAG,KAAA,GAAQ,KAAA,GAAQ,GAAA,GAAM,OAAA,CAAQ,KAAA,CAAM,KAAK,CAAE,CAAA;AACtF,EAAA,OAAO,KAAA,KAAU,CAAA;AAClB;AAEA,SAAS,QAAQA,KAAAA,EAAsB;AACtC,EAAA,IAAI,KAAA,GAAQ,CAAA;AACZ,EAAA,KAAA,IAAS,QAAQ,CAAA,EAAG,KAAA,GAAQA,KAAAA,CAAK,MAAA,EAAQ,SAAS,CAAA,EAAG,KAAA,GAAQ,KAAA,GAAQ,EAAA,IAAO,MAAM,gBAAA,EAAkBA,KAAAA,EAAM,CAAC,KAAK,CAAC,CAAA,GAAe,EAAA,CAAA;AAChI,EAAA,OAAO,KAAA;AACR;AAEA,SAASmB,KAAInB,KAAAA,EAAsB;AAClC,EAAA,IAAI,KAAA,GAAQ,CAAA;AACZ,EAAA,KAAA,IAAS,QAAQ,CAAA,EAAG,KAAA,GAAQA,KAAAA,CAAK,MAAA,EAAQ,SAAS,CAAA,EAAG;AACpD,IAAA,MAAM,OAAO,KAAA,CAAM,gBAAA,EAAkBA,KAAAA,EAAM,CAAC,KAAK,CAAC,CAAA;AAClD,IAAA,MAAM,KAAA,GAAQ,QAAQ,EAAA,GAAK,IAAA,GAAO,KAAK,IAAA,IAAQ,EAAA,GAAK,IAAA,GAAO,EAAA,GAAK,IAAA,GAAO,EAAA;AACvE,IAAA,KAAA,GAAQ,QAAQ,EAAA,GAAK,KAAA;AAAA,EACtB;AACA,EAAA,OAAO,KAAA;AACR;AAGA,SAAS,eAAA,CAAgBA,OAAc,QAAA,EAAyC;AAC/E,EAAA,MAAM,QAAkB,EAAC;AACzB,EAAA,IAAIA,KAAAA,KAAS,IAAI,OAAO,KAAA;AACxB,EAAA,MAAM,SAAS,KAAA,CAAM,WAAA,EAAaA,KAAAA,EAAM,CAAC,GAAG,CAAC,CAAA;AAC7C,EAAA,KAAA,IAAS,QAAQ,CAAA,EAAG,KAAA,GAAQ,MAAA,CAAO,MAAA,EAAQ,SAAS,CAAA,EAAG;AACtD,IAAA,MAAM,KAAA,GAAQ,OAAO,KAAK,CAAA;AAC1B,IAAA,IAAI,QAAA,IAAY,KAAA,KAAU,MAAA,CAAO,MAAA,GAAS,CAAA,IAAM,KAAA,CAAM,aAAA,EAAe,KAAA,EAAO,CAAC,GAAG,CAAC,CAAA,KAAiB,EAAA,EAAI;AACrG,MAAA,MAAM,EAAA,GAAK,UAAU,KAAK,CAAA;AAC1B,MAAA,IAAI,EAAA,KAAO,QAAW,OAAO,MAAA;AAC7B,MAAA,KAAA,CAAM,KAAA,CAAM,MAAM,CAAA,GAAI,EAAA,KAAO,EAAA;AAC7B,MAAA,KAAA,CAAM,KAAA,CAAM,MAAM,CAAA,GAAI,EAAA,GAAK,KAAA;AAC3B,MAAA;AAAA,IACD;AACA,IAAA,IAAI,CAAC,OAAA,CAAQ,SAAA,EAAW,KAAK,GAAG,OAAO,MAAA;AACvC,IAAA,KAAA,CAAM,KAAA,CAAM,MAAM,CAAA,GAAImB,IAAAA,CAAI,KAAK,CAAA;AAAA,EAChC;AACA,EAAA,OAAO,KAAA;AACR;AAGA,SAAS,UAAUnB,KAAAA,EAAoC;AACtD,EAAA,MAAM,MAAM,KAAA,CAAM,aAAA,EAAeA,KAAAA,EAAM,CAAC,IAAI,CAAC,CAAA;AAC7C,EAAA,IAAI,QAAQ,EAAA,EAAI;AACf,IAAA,MAAMoB,MAAAA,GAAQ,eAAA,CAAgBpB,KAAAA,EAAM,IAAI,CAAA;AACxC,IAAA,OAAOoB,MAAAA,KAAU,MAAA,IAAaA,MAAAA,CAAM,MAAA,KAAW,IAAIA,MAAAA,GAAQ,MAAA;AAAA,EAC5D;AACA,EAAA,IAAK,KAAA,CAAM,aAAA,EAAepB,KAAAA,EAAM,CAAC,IAAA,EAAM,MAAM,CAAC,CAAC,CAAA,KAAiB,EAAA,EAAI,OAAO,MAAA;AAC3E,EAAA,MAAM,IAAA,GAAO,eAAA,CAAgB,KAAA,CAAM,WAAA,EAAaA,KAAAA,EAAM,CAAC,CAAA,EAAG,GAAG,CAAC,CAAA,EAAa,KAAK,CAAA;AAChF,EAAA,MAAM,IAAA,GAAO,eAAA,CAAgB,KAAA,CAAM,WAAA,EAAaA,KAAAA,EAAM,CAAC,GAAA,GAAM,CAAC,CAAC,CAAA,EAAa,IAAI,CAAA;AAChF,EAAA,IAAI,IAAA,KAAS,UAAa,IAAA,KAAS,MAAA,IAAa,KAAK,MAAA,GAAS,IAAA,CAAK,MAAA,GAAS,CAAA,EAAG,OAAO,MAAA;AACtF,EAAA,MAAM,QAAkB,EAAC;AACzB,EAAA,KAAA,IAAS,KAAA,GAAQ,CAAA,EAAG,KAAA,GAAQ,IAAA,CAAK,MAAA,EAAQ,KAAA,IAAS,CAAA,EAAG,KAAA,CAAM,KAAA,CAAM,MAAM,CAAA,GAAI,IAAA,CAAK,KAAK,CAAA;AACrF,EAAA,KAAA,IAAS,KAAA,GAAQ,IAAA,CAAK,MAAA,GAAS,IAAA,CAAK,MAAA,EAAQ,KAAA,GAAQ,CAAA,EAAG,KAAA,IAAS,CAAA,EAAG,KAAA,CAAM,KAAA,CAAM,MAAM,CAAA,GAAI,CAAA;AACzF,EAAA,KAAA,IAAS,KAAA,GAAQ,CAAA,EAAG,KAAA,GAAQ,IAAA,CAAK,MAAA,EAAQ,KAAA,IAAS,CAAA,EAAG,KAAA,CAAM,KAAA,CAAM,MAAM,CAAA,GAAI,IAAA,CAAK,KAAK,CAAA;AACrF,EAAA,OAAO,KAAA;AACR;AAGA,SAAS,YAAA,CAAa,MAAc,GAAA,EAAqB;AACxD,EAAA,OAAA,CAAS,IAAA,IAAQ,KAAM,GAAA,MAAS,CAAA;AACjC;AAGA,SAAS,kBAAkB,CAAA,EAA+B;AAMzD,EAAA,IAAI,CAAA,CAAE,CAAC,CAAA,KAAM,GAAA,IAAU,EAAE,CAAC,CAAA,KAAM,KAAA,IAAU,CAAA,CAAE,CAAC,CAAA,KAAM,KAAK,CAAA,CAAE,CAAC,CAAA,KAAM,CAAA,IAAK,CAAA,CAAE,CAAC,MAAM,CAAA,IAAK,CAAA,CAAE,CAAC,CAAA,KAAM,CAAA,EAAG;AAC/F,IAAA,OAAO,iBAAA,CAAkB,aAAa,CAAA,CAAE,CAAC,GAAI,CAAA,CAAE,CAAC,CAAE,CAAC,CAAA;AAAA,EACpD;AAEA,EAAA,IAAA,CAAK,CAAA,CAAE,CAAC,CAAA,GAAK,KAAA,MAAY,MAAQ,OAAO,KAAA;AACxC,EAAA,IAAI,CAAA,CAAE,CAAC,CAAA,KAAM,IAAA,IAAA,CAAW,EAAE,CAAC,CAAA,GAAK,WAAY,CAAA,EAAG;AAM9C,IAAA,IAAI,CAAA,CAAE,CAAC,CAAA,KAAM,CAAA,EAAG,OAAO,KAAA;AACvB,IAAA,MAAM,SAAS,YAAA,CAAa,CAAA,CAAE,CAAC,CAAA,EAAI,CAAA,CAAE,CAAC,CAAE,CAAA;AACxC,IAAA,MAAM,MAAA,GAAU,CAAC,YAAA,CAAa,CAAA,CAAE,CAAC,CAAA,EAAI,CAAA,CAAE,CAAC,CAAE,CAAA,KAAO,CAAA;AACjD,IAAA,OAAO,iBAAA,CAAkB,MAAM,CAAA,IAAK,iBAAA,CAAkB,MAAM,CAAA;AAAA,EAC7D;AACA,EAAA,IAAI,CAAA,CAAE,CAAC,CAAA,KAAM,IAAA,IAAU,EAAE,CAAC,CAAA,KAAM,MAAQ,OAAO,KAAA;AAC/C,EAAA,IAAI,CAAA,CAAE,CAAC,CAAA,KAAM,KAAA,IAAA,CAAW,EAAE,CAAC,CAAA,GAAK,KAAA,MAAY,CAAA,EAAG,OAAO,KAAA;AAEtD,EAAA,IAAI,CAAA,CAAE,CAAC,CAAA,KAAM,IAAA,EAAQ,OAAO,iBAAA,CAAkB,YAAA,CAAa,CAAA,CAAE,CAAC,CAAA,EAAI,CAAA,CAAE,CAAC,CAAE,CAAC,CAAA;AACxE,EAAA,OAAO,IAAA;AACR;AAGA,SAAS,WAAW,CAAA,EAA8B;AACjD,EAAA,IAAI,SAAA,GAAY,EAAA;AAChB,EAAA,IAAI,UAAA,GAAa,CAAA;AACjB,EAAA,KAAA,IAAS,KAAA,GAAQ,CAAA,EAAG,KAAA,GAAQ,CAAA,IAAK;AAChC,IAAA,IAAI,CAAA,CAAE,KAAK,CAAA,KAAM,CAAA,EAAG;AACnB,MAAA,KAAA,IAAS,CAAA;AACT,MAAA;AAAA,IACD;AACA,IAAA,IAAI,GAAA,GAAM,KAAA;AACV,IAAA,OAAO,MAAM,CAAA,IAAK,CAAA,CAAE,GAAG,CAAA,KAAM,GAAG,GAAA,IAAO,CAAA;AACvC,IAAA,IAAI,GAAA,GAAM,QAAQ,UAAA,EAAY;AAC7B,MAAA,SAAA,GAAY,KAAA;AACZ,MAAA,UAAA,GAAa,GAAA,GAAM,KAAA;AAAA,IACpB;AACA,IAAA,KAAA,GAAQ,GAAA;AAAA,EACT;AACA,EAAA,IAAI,UAAA,GAAa,GAAG,SAAA,GAAY,EAAA;AAChC,EAAA,IAAIA,KAAAA,GAAO,EAAA;AACX,EAAA,KAAA,IAAS,KAAA,GAAQ,CAAA,EAAG,KAAA,GAAQ,CAAA,EAAG,SAAS,CAAA,EAAG;AAC1C,IAAA,IAAI,UAAU,SAAA,EAAW;AACxB,MAAAA,KAAAA,IAAQ,IAAA;AACR,MAAA,KAAA,IAAS,UAAA,GAAa,CAAA;AACtB,MAAA;AAAA,IACD;AACA,IAAA,IAAIA,UAAS,EAAA,IAAM,CAAC,eAAeA,KAAI,CAAA,EAAGA,KAAAA,IAAQ,GAAA;AAClD,IAAAA,KAAAA,IAAQ,OAAA,CAAQ,CAAA,CAAE,KAAK,CAAE,CAAA;AAAA,EAC1B;AACA,EAAA,OAAOA,KAAAA;AACR;AAEA,SAAS,eAAeA,KAAAA,EAAuB;AAC9C,EAAA,OAAOA,KAAAA,CAAK,UAAU,CAAA,IAAM,KAAA,CAAM,aAAaA,KAAAA,EAAM,CAAC,EAAE,CAAC,CAAA,KAAiB,IAAA;AAC3E;AAEA,IAAM,UAAA,GAAa,kBAAA;AAEnB,SAAS,QAAQ,KAAA,EAAuB;AACvC,EAAA,IAAI,KAAA,KAAU,GAAG,OAAO,GAAA;AACxB,EAAA,IAAIA,KAAAA,GAAO,EAAA;AACX,EAAA,KAAA,IAAS,IAAA,GAAO,KAAA,EAAO,IAAA,GAAO,CAAA,EAAG,QAAQ,IAAA,GAAQ,IAAA,GAAO,EAAA,IAAO,EAAA,EAAIA,KAAAA,GAAO,UAAA,CAAW,IAAA,GAAO,EAAE,CAAA,GAAKA,KAAAA;AACnG,EAAA,OAAOA,KAAAA;AACR;AAEA,SAAS,WAAW,KAAA,EAAuB;AAC1C,EAAA,OAAO,CAAA,EAAG,KAAA,KAAU,EAAE,CAAA,CAAA,EAAK,KAAA,KAAU,EAAA,GAAM,GAAI,CAAA,CAAA,EAAK,KAAA,KAAU,CAAA,GAAK,GAAI,CAAA,CAAA,EAAI,QAAQ,GAAI,CAAA,CAAA;AACxF;AAaA,IAAM,gBAAuC,MAAA,CAAO,EAAE,MAAM,YAAA,EAAc,MAAA,EAAQ,GAAG,CAAA;AACrF,IAAM,gBAAuC,MAAA,CAAO,EAAE,MAAM,YAAA,EAAc,MAAA,EAAQ,GAAG,CAAA;AACrF,IAAM,SAAA,GAAmC,MAAA,CAAO,EAAE,IAAA,EAAM,aAAa,CAAA;AAG9D,SAAS,gBAAgBA,KAAAA,EAAsC;AACrE,EAAA,IAAI,OAAOA,UAAS,QAAA,IAAYA,KAAAA,CAAK,WAAW,CAAA,IAAKA,KAAAA,CAAK,MAAA,GAAS,eAAA,EAAiB,OAAO,SAAA;AAC3F,EAAA,MAAM,OAAO,KAAA,CAAM,aAAA,EAAeA,KAAAA,EAAM,CAAC,GAAG,CAAC,CAAA;AAC7C,EAAA,IAAI,IAAA,KAAS,EAAA,EAAI,OAAO,SAAA,CAAU,MAAM,WAAA,EAAaA,KAAAA,EAAM,CAAC,CAAA,EAAG,IAAI,CAAC,CAAW,CAAA,KAAM,SAAY,SAAA,GAAY,aAAA;AAC7G,EAAA,IAAIA,KAAAA,CAAK,MAAA,GAAS,kBAAA,EAAoB,OAAO,SAAA;AAC7C,EAAA,MAAM,EAAA,GAAK,UAAUA,KAAI,CAAA;AACzB,EAAA,IAAI,OAAO,MAAA,EAAW;AACrB,IAAA,OAAO,iBAAA,CAAkB,EAAE,CAAA,GAAI,MAAA,CAAO,EAAE,IAAA,EAAM,QAAA,EAAU,OAAA,EAAS,UAAA,CAAW,EAAE,CAAA,EAAG,MAAA,EAAQ,CAAA,EAAG,CAAA,GAAI,aAAA;AAAA,EACjG;AACA,EAAA,MAAM,EAAA,GAAK,UAAUA,KAAI,CAAA;AACzB,EAAA,IAAI,EAAA,KAAO,QAAW,OAAO,SAAA;AAC7B,EAAA,OAAO,iBAAA,CAAkB,EAAE,CAAA,GAAI,MAAA,CAAO,EAAE,IAAA,EAAM,QAAA,EAAU,OAAA,EAAS,UAAA,CAAW,EAAE,CAAA,EAAG,MAAA,EAAQ,CAAA,EAAG,CAAA,GAAI,aAAA;AACjG;AAGO,SAAS,cAAcA,KAAAA,EAAuB;AACpD,EAAA,OAAO,OAAA,CAAQ,aAAaA,KAAI,CAAA;AACjC;AAYO,SAAS,uBAAuB,OAAA,EAA0B;AAChE,EAAA,OAAO,eAAA,CAAgB,OAAO,CAAA,CAAE,IAAA,KAAS,QAAA;AAC1C;;;ACtQA,IAAMqB,mCAAkC,OAAA,CAAQ,wBAAA;AAChD,IAAMC,cAAAA,GAAgB,OAAO,WAAA,KAAgB,UAAA,GAAaD,iCAAgC,WAAA,CAAY,SAAA,EAAW,SAAS,CAAA,EAAG,GAAA,GAAM,MAAA;AACnI,IAAM,iBAAiB,OAAO,WAAA,KAAgB,UAAA,GAAa,WAAA,CAAY,UAAU,gBAAA,GAAmB,MAAA;AACpG,IAAM,oBAAoB,OAAO,WAAA,KAAgB,UAAA,GAAa,WAAA,CAAY,UAAU,mBAAA,GAAsB,MAAA;AAC1G,IAAM,QAAA,GAAW,UAAA;AACjB,IAAM,UAAA,GAAa,YAAA;AACnB,IAAM,UAAU,IAAA,CAAK,GAAA;AACrB,IAAME,WAAU,IAAA,CAAK,GAAA;AACrB,IAAMC,WAAU,IAAA,CAAK,GAAA;AAErB,IAAMT,WAAAA,GAAa,MAAa,UAAA,CAAW,MAAA,EAAQ,kBAAkB,CAAA;AACrE,IAAMC,kBAAuB,MAAM;AAClC,EAAA,MAAMD,WAAAA,EAAW;AAClB,CAAA;AAaO,SAAS,eAAe,OAAA,EAA8B;AAC5D,EAAA,IAAI,YAAY,IAAA,IAAQ,OAAO,OAAA,KAAY,QAAA,QAAgBA,WAAAA,EAAW;AACtE,EAAA,MAAM,aAAa,MAAA,CAAO,OAAA,CAAQ,SAAS,UAAA,EAAY,UAAA,EAAYC,eAAc,CAAC,CAAA;AAClF,EAAA,IAAI,EAAE,eAAe,UAAA,CAAA,IAAe,UAAA,KAAe,YAAY,UAAA,KAAe,CAAA,QAAA,QAAiBD,WAAAA,EAAW;AAC1G,EAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,OAAA,EAAS,QAAA,EAAU,UAAUC,eAAc,CAAA;AAClE,EAAA,IAAI,WAAW,IAAA,IAAQ,OAAO,MAAA,KAAW,QAAA,QAAgBD,WAAAA,EAAW;AACpE,EAAA,IAAI;AACH,IAAAU,WAAU,MAAqB,CAAA;AAAA,EAChC,CAAA,CAAA,MAAQ;AACP,IAAA,MAAMV,WAAAA,EAAW;AAAA,EAClB;AACA,EAAA,OAAO,EAAE,YAAY,MAAA,EAA8B;AACpD;AAMO,SAASU,WAAU,MAAA,EAA8B;AACvD,EAAA,IAAIH,cAAAA,KAAkB,MAAA,EAAW,MAAMP,WAAAA,EAAW;AAClD,EAAA,OAAO,KAAA,CAAMO,cAAAA,EAAe,MAAA,EAAQ,EAAE,CAAA,KAAM,IAAA;AAC7C;AAGO,SAAS,OAAA,CAAQ,QAAqB,QAAA,EAAkC;AAC9E,EAAA,IAAI,cAAA,KAAmB,MAAA,IAAa,iBAAA,KAAsB,MAAA,QAAiBP,WAAAA,EAAW;AACtF,EAAA,KAAA,CAAM,cAAA,EAAgB,QAAQ,CAAC,OAAA,EAAS,UAAU,EAAE,IAAA,EAAM,IAAA,EAAM,CAAC,CAAA;AACjE,EAAA,OAAO,MAAM;AACZ,IAAA,KAAA,CAAM,iBAAA,EAAmB,MAAA,EAAQ,CAAC,OAAA,EAAS,QAAQ,CAAC,CAAA;AAAA,EACrD,CAAA;AACD;AASO,SAAS,qBAAqB,KAAA,EAA+B;AACnE,EAAA,IAAI,UAAU,MAAA,EAAW,OAAO,EAAE,MAAA,EAAQ,MAAA,EAAW,KAAK,MAAA,EAAU;AACpE,EAAA,IAAI,UAAU,IAAA,IAAQ,OAAO,KAAA,KAAU,QAAA,QAAgBA,WAAAA,EAAW;AAClE,EAAA,MAAM,MAAO,KAAA,CAAgC,GAAA;AAC7C,EAAA,IAAI,OAAO,GAAA,KAAQ,UAAA,EAAY,MAAMA,WAAAA,EAAW;AAChD,EAAA,OAAO,EAAE,MAAA,EAAQ,KAAA,EAAO,GAAA,EAA0C;AACnE;AAGO,SAAS,WAAW,KAAA,EAA8B;AACxD,EAAA,IAAI,KAAA,CAAM,GAAA,KAAQ,MAAA,EAAW,OAAO,OAAA,EAAQ;AAC5C,EAAA,IAAI;AACH,IAAA,MAAM,EAAA,GAAK,OAAO,KAAA,CAAM,KAAA,CAAM,KAAK,KAAA,CAAM,MAAA,EAAQ,EAAE,CAAC,CAAA;AACpD,IAAA,OAAO,EAAA,KAAO,QAAA,IAAY,EAAA,KAAO,CAAA,QAAA,GAAY,GAAA,GAAM,EAAA;AAAA,EACpD,CAAA,CAAA,MAAQ;AACP,IAAA,OAAO,GAAA;AAAA,EACR;AACD;AAOO,SAAS,UAAA,CAAW,IAAY,IAAA,EAA8B;AACpE,EAAA,MAAM,MAAA,GAAS,SAAS,IAAA,EAAMQ,QAAAA,CAAQ,GAAGC,QAAAA,CAAQ,EAAA,EAAI,oBAAoB,CAAC,CAAC,CAAA;AAC3E,EAAA,OAAO,MAAM;AACZ,IAAA,UAAA,CAAW,MAAM,CAAA;AAAA,EAClB,CAAA;AACD;;;ACrFO,IAAM,kCAAA,GAAqC;AAE3C,IAAM,iCAAA,GAAoC;AAE1C,IAAM,iCAAA,GAAoC;AAEjD,IAAM,cAAA,GAAiB,GAAA;AACvB,IAAM,SAAA,GAAY,CAAC,IAAA,KAA0C;AAC5D,EAAA,MAAM,SAAS,OAAA,CAAQ,wBAAA,CAAyB,GAAA,CAAI,SAAA,EAAW,IAAI,CAAA,EAAG,GAAA;AACtE,EAAA,IAAI,WAAW,MAAA,EAAW,MAAM,IAAI,SAAA,CAAU,CAAA,cAAA,EAAiB,IAAI,CAAA,oBAAA,CAAsB,CAAA;AACzF,EAAA,OAAO,MAAA;AACR,CAAA;AACA,IAAM,WAAA,GAAc,UAAU,UAAU,CAAA;AACxC,IAAM,WAAA,GAAc,UAAU,UAAU,CAAA;AACxC,IAAM,WAAA,GAAc,UAAU,UAAU,CAAA;AACxC,IAAM,OAAA,GAAU,UAAU,MAAM,CAAA;AAChC,IAAM,WAAA,GAAc,UAAU,UAAU,CAAA;AACxC,IAAM,WAAA,GAAc,UAAU,UAAU,CAAA;AACxC,IAAM,SAAA,GAAY,UAAU,QAAQ,CAAA;AACpC,IAAME,YAAAA,GAAc,OAAO,SAAA,CAAU,KAAA;AACrC,IAAM,cAAA,GAAiB,OAAO,SAAA,CAAU,QAAA;AACxC,IAAM,kBAAA,GAAqB,OAAA;AAC3B,IAAM,WAAA,GAAc,QAAQ,SAAA,CAAU,IAAA;AACtC,IAAM,0BAAA,GAA6B,eAAA;AACnC,IAAM,oBAAA,GAAuB,gBAAgB,SAAA,CAAU,KAAA;AACvD,IAAM,wBAAwB,OAAA,CAAQ,wBAAA,CAAyB,eAAA,CAAgB,SAAA,EAAW,QAAQ,CAAA,CAAG,GAAA;AACrG,IAAMtB,gBAAAA,GAAkB,IAAA;AAGxB,IAAM,QAAA,GAAW,qBAAA;AAOjB,IAAM,UAAA,GAAa,uBAAA;AAenB,IAAM,cAA0C,MAAA,CAAO,EAAE,IAAI,KAAA,EAAO,IAAA,EAAM,eAAe,CAAA;AACzF,IAAM,cAA0C,MAAA,CAAO,EAAE,IAAI,KAAA,EAAO,IAAA,EAAM,mBAAmB,CAAA;AAiBtF,SAAS,2BAA2B,GAAA,EAAyC;AACnF,EAAA,OAAO,mBAAA,CAAoB,KAAK,KAAK,CAAA;AACtC;AAQO,SAAS,mBAAA,CAAoB,KAAc,cAAA,EAAqD;AACtG,EAAA,IAAI;AACH,IAAA,OAAO,QAAA,CAAS,SAAA,CAAU,GAAG,CAAA,EAAG,cAAc,CAAA;AAAA,EAC/C,CAAA,CAAA,MAAQ;AACP,IAAA,OAAO,WAAA;AAAA,EACR;AACD;AAEA,SAAS,QAAA,CAASJ,OAAe,cAAA,EAAqD;AACrF,EAAA,IAAI,OAAOA,UAAS,QAAA,IAAYA,KAAAA,CAAK,WAAW,CAAA,IAAKA,KAAAA,CAAK,MAAA,GAAS,kCAAA,EAAoC,OAAO,WAAA;AAC9G,EAAA,IAAI,CAAC,OAAA,CAAQ,QAAA,EAAUA,KAAI,CAAA,IAAK,CAAC,OAAA,CAAQ,UAAA,EAAYA,KAAI,CAAA,EAAG,OAAO,WAAA;AACnE,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACH,IAAA,MAAA,GAAS,IAAI,eAAeA,KAAI,CAAA;AAAA,EACjC,CAAA,CAAA,MAAQ;AACP,IAAA,OAAO,WAAA;AAAA,EACR;AACA,EAAA,IAAI,MAAM,WAAA,EAAa,MAAA,EAAQ,EAAE,CAAA,KAAM,UAAU,OAAO,WAAA;AACxD,EAAA,IAAI,KAAA,CAAM,WAAA,EAAa,MAAA,EAAQ,EAAE,CAAA,KAAM,EAAA,IAAM,KAAA,CAAM,WAAA,EAAa,MAAA,EAAQ,EAAE,CAAA,KAAM,IAAI,OAAO,WAAA;AAE3F,EAAA,IAAI,MAAM,OAAA,EAAS,MAAA,EAAQ,EAAE,CAAA,KAAM,IAAI,OAAO,WAAA;AAC9C,EAAA,MAAM,IAAA,GAAO,KAAA,CAAM,WAAA,EAAa,MAAA,EAAQ,EAAE,CAAA;AAC1C,EAAA,IAAI,IAAA,KAAS,MAAO,KAAA,CAAM,cAAA,EAAgB,MAAM,CAAC,GAAG,CAAC,CAAA,EAAe,OAAO,WAAA;AAC3E,EAAA,MAAM,MAAM,CAAA,QAAA,EAAW,IAAI,CAAA,EAAG,KAAA,CAAM,aAAa,MAAA,EAAQ,EAAE,CAAW,GAAG,KAAA,CAAM,SAAA,EAAW,MAAA,EAAQ,EAAE,CAAW,CAAA,CAAA;AAG/G,EAAA,MAAM,EAAA,GAAK,IAAA,CAAK,CAAC,CAAA,KAAM,GAAA;AACvB,EAAA,IAAI,EAAA,IAAM,aAAA,CAAc,IAAI,CAAA,EAAG;AAC9B,IAAA,MAAMA,KAAAA,GAAO,KAAM,KAAA,CAAM0B,YAAAA,EAAa,MAAM,CAAC,CAAA,EAAG,EAAE,CAAC,CAAA,GAAe,IAAA;AAClE,IAAA,MAAM,OAAA,GAAU,gBAAgB1B,KAAI,CAAA;AACpC,IAAA,IAAI,OAAA,CAAQ,IAAA,KAAS,WAAA,EAAa,OAAO,WAAA;AACzC,IAAA,IAAI,OAAA,CAAQ,IAAA,KAAS,YAAA,IAAgB,MAAiB,OAAO,WAAA;AAC7D,IAAA,MAAM,MAAA,GAAgB,KAAK,CAAA,GAAI,CAAA;AAC/B,IAAA,OAAO,MAAA,CAAO,EAAE,EAAA,EAAI,IAAA,EAAe,KAAK,QAAA,EAAUA,KAAAA,EAAM,OAAA,EAAS,MAAA,CAAO,EAAE,OAAA,EAASA,KAAAA,EAAM,MAAA,EAAQ,GAAG,CAAA;AAAA,EACrG;AAEA,EAAA,IAAK,CAAmB,IAAA,KAAS,WAAA,IAAgB,KAAA,CAAM,cAAA,EAAgB,IAAA,EAAM,CAAC,YAAY,CAAC,CAAA,CAAA,EAAgB,OAAO,WAAA;AAClH,EAAA,OAAO,OAAO,EAAE,EAAA,EAAI,MAAe,GAAA,EAAK,QAAA,EAAU,MAAM,CAAA;AACzD;AA0BA,IAAMe,WAAAA,GAAa,MAAa,UAAA,CAAW,MAAA,EAAQ,kBAAkB,CAAA;AACrE,IAAMC,kBAAuB,MAAM;AAClC,EAAA,MAAMD,WAAAA,EAAW;AAClB,CAAA;AAEA,IAAM,cAA4C,MAAA,CAAO,EAAE,IAAI,KAAA,EAAO,IAAA,EAAM,eAAe,CAAA;AAC3F,IAAM,kBAAgD,MAAA,CAAO,EAAE,IAAI,KAAA,EAAO,IAAA,EAAM,mBAAmB,CAAA;AA8B5F,SAAS,iCAAiC,OAAA,EAAwE;AACxH,EAAA,MAAM,WAAW,KAAA,CAAM,MAAM,mBAAA,CAAoB,OAAO,GAAGA,WAAU,CAAA;AACrE,EAAA,MAAM,QAAA,GAAW;AAAA,IAChB,OAAA,CAAQ,KAAa,WAAA,EAAwE;AAC5F,MAAA,IAAI;AACH,QAAA,OAAO,WAAA,CAAY,QAAA,EAAU,GAAA,EAAK,WAAW,CAAA;AAAA,MAC9C,CAAA,CAAA,MAAQ;AACP,QAAA,OAAO,kBAAA,CAAmB,MAAA,CAAOA,WAAAA,EAAY,CAAA;AAAA,MAC9C;AAAA,IACD;AAAA,GACD;AACA,EAAA,OAAO,OAAO,QAAQ,CAAA;AACvB;AAEA,SAAS,oBAAoB,OAAA,EAAoC;AAChE,EAAA,IAAI,CAAC,aAAA,CAAc,OAAO,CAAA,QAASA,WAAAA,EAAW;AAC9C,EAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,OAAA,EAAS,QAAA,EAAU,UAAUC,eAAc,CAAA;AAClE,EAAA,IAAI,OAAO,MAAA,KAAW,UAAA,EAAY,MAAMD,WAAAA,EAAW;AACnD,EAAA,MAAM,aAAa,SAAA,CAAU,OAAA,CAAQ,SAAS,iBAAA,EAAmB,iBAAA,EAAmBC,eAAc,CAAC,CAAA;AACnG,EAAA,MAAM,eAAA,GAAkB,UAAA,KAAe,MAAA,GAAY,iCAAA,GAAoC,UAAA;AACvF,EAAA,oBAAA,CAAqB,iBAAiB,iBAAiB,CAAA;AACvD,EAAA,IAAI,eAAA,GAAkB,oBAAA,EAAsB,MAAM,WAAA,CAAY,sBAAsB,iBAAiB,CAAA;AACrG,EAAA,MAAM,QAAQ,oBAAA,CAAqB,OAAA,CAAQ,SAAS,OAAA,EAAS,OAAA,EAASA,eAAc,CAAC,CAAA;AACrF,EAAA,OAAO,MAAA,CAAO,EAAE,MAAA,EAAiD,eAAA,EAAiB,OAAO,CAAA;AAC1F;AAEA,SAAS,WAAA,CAAY,QAAA,EAA4B,GAAA,EAAc,WAAA,EAA6D;AAC3H,EAAA,MAAM,MAAA,GAAS,eAAe,WAAW,CAAA;AACzC,EAAA,MAAM,KAAA,GAAQ,2BAA2B,GAAa,CAAA;AACtD,EAAA,IAAI,CAAC,KAAA,CAAM,EAAA,EAAI,OAAO,mBAAmB,OAAA,CAAQ,MAAA,CAAqC,EAAE,EAAA,EAAI,KAAA,EAAO,IAAA,EAAM,KAAA,CAAM,IAAA,EAAM,CAAC,CAAA;AAGtH,EAAA,MAAMV,MAAAA,GAAQ,UAAA,CAAW,QAAA,CAAS,KAAK,CAAA;AACvC,EAAA,IAAImB,UAAAA,CAAU,MAAA,CAAO,MAAM,CAAA,IAAK,EAAE,MAAA,CAAO,UAAA,GAAanB,MAAAA,CAAAA,EAAQ,OAAO,kBAAA,CAAmB,OAAA,CAAQ,WAAW,CAAA;AAC3G,EAAA,IAAI,KAAA,CAAM,YAAY,MAAA,EAAW;AAChC,IAAA,OAAO,kBAAA,CAAmB,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM,GAAA,EAAK,KAAA,CAAM,QAAA,EAAU,UAAA,CAAW,CAAC,KAAA,CAAM,OAAO,CAAC,CAAC,CAAC,CAAA;AAAA,EACjG;AACA,EAAA,MAAM,MAAA,GAAS,OAAO,UAAA,GAAaA,MAAAA,GAAQ,SAAS,eAAA,GAAkB,MAAA,CAAO,UAAA,GAAaA,MAAAA,GAAQ,QAAA,CAAS,eAAA;AAE3G,EAAA,MAAM,mBAAmBA,MAAAA,GAAQ,MAAA;AACjC,EAAA,MAAM,EAAE,GAAA,EAAK,SAAA,EAAW,QAAA,EAAS,GAAI,KAAA;AAIrC,EAAA,MAAM,WAAA,GAAc,MAAe,CAACmB,UAAAA,CAAU,MAAA,CAAO,MAAM,CAAA,IAAK,UAAA,CAAW,QAAA,CAAS,KAAK,CAAA,GAAI,gBAAA;AAE7F,EAAA,OAAO,IAAI,kBAAA,CAAiD,CAACE,OAAAA,KAAW;AACvE,IAAA,MAAM,UAAA,GAAa,IAAI,0BAAA,EAA2B;AAClD,IAAA,MAAM,YAAA,GAAe,KAAA,CAAM,qBAAA,EAAuB,UAAA,EAAY,EAAE,CAAA;AAChE,IAAA,IAAI,IAAA,GAAO,KAAA;AACX,IAAA,IAAI,cAA0B,MAAM;AAAA,IAAC,CAAA;AACrC,IAAA,IAAI,cAA0B,MAAM;AAAA,IAAC,CAAA;AACrC,IAAA,MAAMpB,OAAAA,GAAS,CAAC,MAAA,KAA+C;AAC9D,MAAA,IAAI,IAAA,EAAM;AACV,MAAA,IAAA,GAAO,IAAA;AACP,MAAA,WAAA,EAAY;AACZ,MAAA,WAAA,EAAY;AAEZ,MAAA,KAAA,CAAM,oBAAA,EAAsB,UAAA,EAAY,EAAE,CAAA;AAC1C,MAAAoB,QAAO,MAAM,CAAA;AAAA,IACd,CAAA;AACA,IAAA,WAAA,GAAc,UAAA,CAAW,MAAA,EAAQ,MAAMpB,OAAAA,CAAO,WAAW,CAAC,CAAA;AAC1D,IAAA,WAAA,GAAc,QAAQ,MAAA,CAAO,MAAA,EAAQ,MAAMA,OAAAA,CAAO,WAAW,CAAC,CAAA;AAC9D,IAAA,IAAI,IAAA,EAAM;AACV,IAAA,IAAI,OAAA;AACJ,IAAA,IAAI;AACH,MAAA,OAAA,GAAU,MAAM,QAAA,CAAS,MAAA,EAAQ,QAAW,CAAC,QAAA,EAAU,OAAO,EAAE,QAAA,EAAU,IAAIH,gBAAAA,CAAgBE,SAAQ,MAAM,CAAA,EAAG,QAAQ,YAAA,EAAc,CAAC,CAAY,CAAA;AAAA,IACnJ,CAAA,CAAA,MAAQ;AACP,MAAAC,QAAO,WAAW,CAAA;AAClB,MAAA;AAAA,IACD;AACA,IAAA,IAAI,YAAY,IAAA,IAAS,OAAO,YAAY,QAAA,IAAY,OAAO,YAAY,UAAA,EAAa;AACvF,MAAAA,QAAO,WAAW,CAAA;AAClB,MAAA;AAAA,IACD;AACA,IAAA,IAAI;AAGH,MAAA,KAAA,CAAM,WAAA,EAAa,kBAAA,CAAmB,OAAA,CAAQ,OAAO,CAAA,EAAG;AAAA,QACvD,CAAC,WAAoBA,OAAAA,CAAO,eAAA,CAAgB,WAAW,QAAA,EAAU,MAAA,EAAQ,WAAW,CAAC,CAAA;AAAA,QACrF,MAAMA,QAAO,WAAW;AAAA,OACxB,CAAA;AAAA,IACF,CAAA,CAAA,MAAQ;AACP,MAAAA,QAAO,WAAW,CAAA;AAAA,IACnB;AAAA,EACD,CAAC,CAAA;AACF;AAOA,SAAS,eAAA,CAAgB,GAAA,EAAa,QAAA,EAAkB,MAAA,EAAiB,WAAA,EAA0D;AAClI,EAAA,IAAI;AACH,IAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,GAAA,EAAK,QAAA,EAAU,MAAM,CAAA;AAC5C,IAAA,IAAI,MAAA,CAAO,EAAA,IAAM,CAAC,WAAA,IAAe,OAAO,WAAA;AACxC,IAAA,OAAO,MAAA;AAAA,EACR,CAAA,CAAA,MAAQ;AACP,IAAA,OAAO,WAAA;AAAA,EACR;AACD;AAGA,SAAS,OAAA,CAAQ,GAAA,EAAa,QAAA,EAAkB,MAAA,EAA+C;AAC9F,EAAA,IAAI,CAAC,OAAA,CAAQ,MAAM,CAAA,EAAG,OAAO,WAAA;AAC7B,EAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,MAAA,EAAQ,QAAA,EAAU,UAAUS,eAAc,CAAA;AACjE,EAAA,IAAI,OAAO,MAAA,KAAW,QAAA,IAAY,CAAC,mBAAA,CAAoB,MAAM,CAAA,IAAK,MAAA,GAAS,CAAA,IAAK,MAAA,GAAS,iCAAA,EAAmC,OAAO,WAAA;AACnI,EAAA,MAAM,OAAO,QAAA,EAAe;AAC5B,EAAA,MAAM,YAAsC,EAAC;AAC7C,EAAA,IAAI,SAAA,GAAY,KAAA;AAChB,EAAA,KAAA,IAAS,KAAA,GAAQ,CAAA,EAAG,KAAA,GAAQ,MAAA,EAAQ,SAAS,CAAA,EAAG;AAC/C,IAAA,MAAMP,SAAQ,OAAA,CAAQ,MAAA,EAAQ,GAAG,KAAK,CAAA,CAAA,EAAI,UAAUO,eAAc,CAAA;AAClE,IAAA,IAAI,CAAC,aAAA,CAAcP,MAAK,CAAA,EAAG;AAC1B,MAAA,SAAA,GAAY,IAAA;AACZ,MAAA;AAAA,IACD;AACA,IAAA,MAAM,UAAU,SAAA,CAAU,OAAA,CAAQA,QAAO,SAAA,EAAW,SAAA,EAAWO,eAAc,CAAC,CAAA;AAC9E,IAAA,MAAM,SAAS,SAAA,CAAU,OAAA,CAAQP,QAAO,QAAA,EAAU,QAAA,EAAUO,eAAc,CAAC,CAAA;AAC3E,IAAA,MAAM,MAAA,GAAS,gBAAgB,OAAO,CAAA;AACtC,IAAA,IAAI,MAAA,CAAO,IAAA,KAAS,YAAA,EAAc,OAAO,eAAA;AACzC,IAAA,IAAI,MAAA,CAAO,IAAA,KAAS,WAAA,IAAe,MAAA,CAAO,WAAW,MAAA,EAAQ;AAC5D,MAAA,SAAA,GAAY,IAAA;AACZ,MAAA;AAAA,IACD;AACA,IAAA,IAAI,IAAA,CAAK,MAAA,CAAO,OAAO,CAAA,KAAM,IAAA,EAAM;AACnC,IAAA,IAAA,CAAK,MAAA,CAAO,OAAO,CAAA,GAAI,IAAA;AACvB,IAAA,SAAA,CAAU,SAAA,CAAU,MAAM,CAAA,GAAI,MAAA,CAAO,EAAE,OAAA,EAAS,MAAA,CAAO,OAAA,EAAS,MAAA,EAAQ,MAAA,CAAO,MAAA,EAAQ,CAAA;AAAA,EACxF;AACA,EAAA,IAAI,WAAW,OAAO,WAAA;AACtB,EAAA,OAAO,MAAA,CAAO,GAAA,EAAK,QAAA,EAAU,UAAA,CAAW,SAAS,CAAC,CAAA;AACnD;AAEA,SAAS,MAAA,CAAO,GAAA,EAAa,QAAA,EAAkB,SAAA,EAA4E;AAC1H,EAAA,MAAM,WAAA,GAAc,OAAiC,EAAE,GAAA,EAAK,UAAU,IAAA,EAAM,GAAA,EAAK,WAAW,CAAA;AAC5F,EAAA,OAAO,MAAA,CAAqC,EAAE,EAAA,EAAI,IAAA,EAAM,aAAa,CAAA;AACtE;;;ACtUA,IAAM,KAAA,GAAkC,MAAA,CAAO,EAAE,QAAA,EAAU,SAAS,CAAA;AACpE,IAAM,qBAAA,GAAkD,MAAA,CAAO,EAAE,QAAA,EAAU,eAAe,CAAA;AAC1F,IAAM,UAAA,GAAmD,MAAA,CAAO,EAAE,QAAA,EAAU,cAAc,CAAA;AAC1F,IAAM,yBAAA,GAAkE,MAAA,CAAO,EAAE,QAAA,EAAU,eAAe,CAAA;AAG1G,IAAM,UAAA,GAAa,MAAA,iBAAO,MAAA,CAAO,MAAA,CAAO,IAAI,CAAW,CAAA;AACvD,IAAMA,kBAAuB,MAAM;AAClC,EAAA,MAAM,UAAA;AACP,CAAA;AAGO,SAAS,qBAAA,GAAkD;AACjE,EAAA,OAAO,KAAA;AACR;AAOO,SAAS,qBAAqB,IAAA,EAA4D;AAChG,EAAA,OAAO,MAAM,MAAM;AAClB,IAAA,MAAM,KAAA,GAAQ,UAAU,IAAI,CAAA;AAC5B,IAAA,IAAI,CAAC,QAAQ,8BAAA,EAAgC,KAAK,GAAG,MAAM,UAAA,CAAW,QAAQ,qBAAqB,CAAA;AACnG,IAAA,OAAO,OAAiC,EAAE,QAAA,EAAU,MAAA,EAAQ,IAAA,EAAM,OAAqC,CAAA;AAAA,EACxG,CAAA,EAAG,MAAM,UAAA,CAAW,MAAA,EAAQ,qBAAqB,CAAC,CAAA;AACnD;AAGO,SAAS,2BAAA,GAAwD;AACvE,EAAA,OAAO,qBAAA;AACR;AAGA,SAAS,eAAe,KAAA,EAAwE;AAC/F,EAAA,IAAI,CAAC,aAAA,CAAc,KAAK,CAAA,EAAG,MAAM,UAAA;AACjC,EAAA,MAAM,WAAW,SAAA,CAAU,OAAA,CAAQ,OAAO,UAAA,EAAY,UAAA,EAAYA,eAAc,CAAC,CAAA;AACjF,EAAA,MAAM,OAAO,SAAA,CAAU,OAAA,CAAQ,OAAO,MAAA,EAAQ,MAAA,EAAQA,eAAc,CAAC,CAAA;AACrE,EAAA,OAAO,MAAA,CAAO,EAAE,QAAA,EAAU,IAAA,EAAM,CAAA;AACjC;AASO,SAAS,kCAAkC,KAAA,EAA0C;AAC3F,EAAA,OAAO,QAAQ,MAAM;AACpB,IAAA,MAAM,EAAE,QAAA,EAAU,IAAA,EAAK,GAAI,eAAe,KAAK,CAAA;AAC/C,IAAA,IAAI,QAAA,KAAa,SAAS,OAAO,KAAA;AACjC,IAAA,IAAI,QAAA,KAAa,MAAA,IAAU,OAAA,CAAQ,8BAAA,EAAgC,IAAI,CAAA,EAAG;AACzE,MAAA,OAAO,MAAA,CAAiC,EAAE,QAAA,EAAU,MAAA,EAAQ,MAA0C,CAAA;AAAA,IACvG;AACA,IAAA,OAAO,qBAAA;AAAA,EACR,CAAA,EAAG,MAAM,qBAAqB,CAAA;AAC/B;AAQO,SAAS,8CAA8C,KAAA,EAAsD;AACnH,EAAA,OAAO,QAAQ,MAAM;AACpB,IAAA,MAAM,EAAE,QAAA,EAAU,IAAA,EAAK,GAAI,eAAe,KAAK,CAAA;AAC/C,IAAA,IAAI,QAAA,KAAa,cAAc,OAAO,UAAA;AACtC,IAAA,IAAI,QAAA,KAAa,SAAA,IAAa,OAAA,CAAQ,wBAAA,EAA0B,IAAI,CAAA,EAAG;AACtE,MAAA,OAAO,MAAA,CAA6C,EAAE,QAAA,EAAU,SAAA,EAAW,MAAqC,CAAA;AAAA,IACjH;AACA,IAAA,OAAO,yBAAA;AAAA,EACR,CAAA,EAAG,MAAM,yBAAyB,CAAA;AACnC;;;ACnDA,IAAMM,cAAAA,GAAgB,OAAO,WAAA,KAAgB,UAAA,GAAa,OAAA,CAAQ,yBAAyB,WAAA,CAAY,SAAA,EAAW,SAAS,CAAA,EAAG,GAAA,GAAM,MAAA;AAQ7H,SAAS,kBAAkB,OAAA,EAA2C;AAC5E,EAAA,IAAI;AACH,IAAA,IAAI,CAAC,aAAA,CAAc,OAAO,CAAA,IAAKA,cAAAA,KAAkB,QAAW,OAAO,KAAA,CAAA;AACnE,IAAA,MAAM,SAAS,OAAA,CAAQ,OAAA,EAAS,QAAA,EAAU,QAAA,EAAU,MAAM,KAAA,CAAkB,CAAA;AAC5E,IAAA,IAAI,MAAA,KAAW,IAAA,IAAQ,OAAO,MAAA,KAAW,UAAU,OAAO,KAAA,CAAA;AAC1D,IAAA,KAAA,CAAMA,cAAAA,EAAe,MAAA,EAAQ,EAAE,CAAA;AAC/B,IAAA,OAAO,MAAA;AAAA,EACR,CAAA,CAAA,MAAQ;AACP,IAAA,OAAO,MAAA;AAAA,EACR;AACD;AAOO,SAAS,cAAc,MAAA,EAA8B;AAC3D,EAAA,IAAIA,cAAAA,KAAkB,QAAW,OAAO,KAAA;AACxC,EAAA,IAAI;AACH,IAAA,OAAO,KAAA,CAAMA,cAAAA,EAAe,MAAA,EAAQ,EAAE,CAAA,KAAM,IAAA;AAAA,EAC7C,CAAA,CAAA,MAAQ;AACP,IAAA,OAAO,KAAA;AAAA,EACR;AACD;AAGO,SAAS,sBAAsB,OAAA,EAAoE;AACzG,EAAA,IAAI;AACH,IAAA,IAAI,CAAC,aAAA,CAAc,OAAO,CAAA,EAAG,OAAO,KAAA,CAAA;AACpC,IAAA,MAAM,aAAa,OAAA,CAAQ,OAAA,EAAS,iBAAA,EAAmB,iBAAA,EAAmB,MAAM,KAAA,CAAkB,CAAA;AAClG,IAAA,OAAO,eAAe,UAAA,IAAc,UAAA,KAAe,YAAA,IAAgB,UAAA,KAAe,WAAW,UAAA,GAAa,KAAA,CAAA;AAAA,EAC3G,CAAA,CAAA,MAAQ;AACP,IAAA,OAAO,MAAA;AAAA,EACR;AACD;AASO,SAAS,mBAAmB,KAAA,EAA8C;AAChF,EAAA,IAAI,KAAA,KAAU,QAAQ,OAAO,KAAA,KAAU,UAAU,MAAM,WAAA,CAAY,mBAAmB,OAAO,CAAA;AAC7F,EAAA,MAAM,MAAO,KAAA,CAA4B,GAAA;AACzC,EAAA,IAAI,OAAO,GAAA,KAAQ,UAAA,EAAY,MAAM,WAAA,CAAY,mBAAmB,WAAW,CAAA;AAC/E,EAAA,OAAO,EAAE,MAAA,EAAQ,KAAA,EAAO,GAAA,EAA0C;AACnE;AAGO,SAAS,gBAAgB,KAAA,EAA4B;AAC3D,EAAA,IAAI,KAAA;AACJ,EAAA,IAAI;AACH,IAAA,KAAA,GAAQ,MAAM,KAAA,CAAM,GAAA,EAAK,KAAA,CAAM,MAAA,EAAQ,EAAE,CAAA;AAAA,EAC1C,CAAA,CAAA,MAAQ;AACP,IAAA,MAAM,WAAA,CAAY,iBAAiB,OAAO,CAAA;AAAA,EAC3C;AACA,EAAA,MAAM,EAAA,GAAK,OAAO,KAAK,CAAA;AACvB,EAAA,IAAI,CAAC,cAAA,CAAe,EAAE,GAAG,MAAM,WAAA,CAAY,iBAAiB,OAAO,CAAA;AACnE,EAAA,OAAO,EAAA;AACR;AAEA,IAAM,cAAA,GAAiB,OAAO,WAAA,KAAgB,QAAA,IAAY,gBAAgB,IAAA,IAAQ,OAAO,WAAA,CAAY,GAAA,KAAQ,aAC1G,WAAA,CAAY,GAAA,CAAI,IAAA,CAAK,WAAW,IAChC,IAAA,CAAK,GAAA;AAER,IAAM,OAAA,GAA8D,OAAO,MAAA,CAAO,EAAE,IAAI,KAAA,EAAO,MAAA,EAAQ,WAAW,CAAA;AAClH,IAAM,OAAA,GAA8D,OAAO,MAAA,CAAO,EAAE,IAAI,KAAA,EAAO,MAAA,EAAQ,WAAW,CAAA;AAClH,IAAM,KAAA,GAA0D,OAAO,MAAA,CAAO,EAAE,IAAI,KAAA,EAAO,MAAA,EAAQ,SAAS,CAAA;AAqC5G,eAAsB,YACrBhB,MAAAA,EACA,SAAA,EACA,QACA,GAAA,EACA,OAAA,EACA,gBAAgB,CAAA,EACa;AAC7B,EAAA,IAAI,MAAA,EAAQ,SAAS,OAAO,OAAA;AAC5B,EAAA,MAAM,qBAAqB,cAAA,EAAe;AAC1C,EAAA,MAAM,iBAAiB,SAAA,GAAY,aAAA;AACnC,EAAA,MAAM,gBAAgBA,MAAAA,GAAQ,cAAA;AAC9B,EAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,EAAA,MAAM,OAAA,GAA8B,EAAE,QAAA,EAAU,IAAI,IAAA,CAAKA,SAAQ,SAAS,CAAA,EAAG,MAAA,EAAQ,UAAA,CAAW,MAAA,EAAO;AACvG,EAAA,IAAI,KAAA;AACJ,EAAA,IAAI,UAAA;AACJ,EAAA,IAAI,aAAA;AACJ,EAAA,MAAMsB,KAAAA,GAAO,IAAI,OAAA,CAA2B,CAAC,OAAA,KAAY;AACxD,IAAA,KAAA,GAAQ,WAAW,MAAM;AACxB,MAAA,UAAA,CAAW,KAAA,EAAM;AACjB,MAAA,IAAI,aAAA,GAAgB,GAAG,UAAA,GAAa,UAAA,CAAW,MAAM,OAAA,CAAQ,OAAO,GAAG,aAAa,CAAA;AAAA,mBACvE,OAAO,CAAA;AAAA,IACrB,GAAG,SAAS,CAAA;AACZ,IAAA,IAAI,MAAA,EAAQ;AACX,MAAA,aAAA,GAAgB,MAAM;AACrB,QAAA,UAAA,CAAW,KAAA,EAAM;AACjB,QAAA,OAAA,CAAQ,OAAO,CAAA;AAAA,MAChB,CAAA;AACA,MAAA,MAAA,CAAO,iBAAiB,OAAA,EAAS,aAAA,EAAe,EAAE,IAAA,EAAM,MAAM,CAAA;AAAA,IAC/D;AAAA,EACD,CAAC,CAAA;AAED,EAAA,MAAM,QAAA,GAAW,CAAC,OAAA,KAAkD;AACnE,IAAA,IAAI,EAAE,cAAA,EAAe,GAAI,kBAAA,GAAqB,iBAAiB,OAAO,OAAA;AACtE,IAAA,IAAI;AACH,MAAA,OAAO,OAAA,EAAQ,GAAI,aAAA,GAAgB,OAAA,GAAU,OAAA;AAAA,IAC9C,CAAA,CAAA,MAAQ;AACP,MAAA,OAAO,OAAA;AAAA,IACR;AAAA,EACD,CAAA;AACA,EAAA,IAAI;AACH,IAAA,IAAI,IAAA;AACJ,IAAA,IAAI;AAQH,MAAA,IAAA,GAAO,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,OAAO,CAAC,CAAA,CAAE,IAAA;AAAA,QACpC,CAAC,KAAA,KAAU,QAAA,CAAS,EAAE,EAAA,EAAI,IAAA,EAAM,OAAO,CAAA;AAAA,QACvC,MAAM,SAAS,KAAK;AAAA,OACrB;AAAA,IACD,CAAA,CAAA,MAAQ;AACP,MAAA,IAAA,GAAO,QAAQ,OAAA,EAAQ,CAAE,KAAK,MAAM,QAAA,CAAS,KAAK,CAAC,CAAA;AAAA,IACpD;AACA,IAAA,MAAM,UAAU,MAAM,OAAA,CAAQ,KAAK,CAAC,IAAA,EAAMA,KAAI,CAAC,CAAA;AAC/C,IAAA,IAAI,CAAC,OAAA,CAAQ,EAAA,IAAM,QAAQ,MAAA,KAAW,SAAA,aAAsB,KAAA,EAAM;AAClE,IAAA,OAAO,OAAA;AAAA,EACR,CAAA,SAAE;AACD,IAAA,IAAI,KAAA,KAAU,MAAA,EAAW,YAAA,CAAa,KAAK,CAAA;AAC3C,IAAA,IAAI,UAAA,KAAe,MAAA,EAAW,YAAA,CAAa,UAAU,CAAA;AACrD,IAAA,IAAI,MAAA,IAAU,aAAA,EAAe,MAAA,CAAO,mBAAA,CAAoB,SAAS,aAAa,CAAA;AAAA,EAC/E;AACD;;;ACjLA,IAAM,SAAe,MAAM;AAC1B,EAAA,MAAM,OAAA;AACP,CAAA;AACA,IAAM,UAAU,MAAA,CAAO,MAAA,iBAAO,MAAA,CAAO,MAAA,CAAO,IAAI,CAAW,CAAA;AAGpD,SAAS,WAAA,CAA8B,OAAgB,OAAA,EAAsC;AACnG,EAAA,IAAI;AACH,IAAA,IAAI,CAAC,aAAA,CAAc,KAAK,CAAA,EAAG,OAAO,KAAA,CAAA;AAClC,IAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,KAAA,EAAO,SAAA,EAAW,WAAW,MAAM,CAAA;AAC3D,IAAA,OAAO,OAAA,CAAQ,OAAA,EAAS,OAAO,CAAA,GAAK,OAAA,GAAgB,KAAA,CAAA;AAAA,EACrD,CAAA,CAAA,MAAQ;AACP,IAAA,OAAO,MAAA;AAAA,EACR;AACD;AAGA,SAAS,KAAA,CAAM,UAA6B,GAAA,EAA2C;AACtF,EAAA,OAAO,OAAA,CAAQ,QAAA,EAAU,GAAA,EAAK,GAAA,EAAK,MAAM,CAAA;AAC1C;AAEA,SAAS,OAAO,KAAA,EAAwD;AACvE,EAAA,IAAI,KAAA,KAAU,IAAA,IAAQ,KAAA,KAAU,MAAA,IAAa,OAAO,UAAU,QAAA,IAAY,OAAA,CAAQ,KAAK,CAAA,EAAG,MAAM,OAAA;AAChG,EAAA,OAAO,KAAA;AACR;AAEA,SAAS,SAAS,KAAA,EAA6C;AAC9D,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,IAAI,MAAM,OAAA;AACrD,EAAA,OAAO,KAAA;AACR;AAEA,SAAS,KAAA,CAAM,OAAqC,GAAA,EAAqB;AACxE,EAAA,IAAI,OAAO,UAAU,QAAA,IAAY,CAAC,oBAAoB,KAAK,CAAA,IAAK,KAAA,GAAQ,GAAA,EAAK,MAAM,OAAA;AACnF,EAAA,OAAO,KAAA;AACR;AAGA,SAAS,aAAa,KAAA,EAAyD;AAC9E,EAAA,MAAM,IAAA,GAAO,YAAA,CAAa,KAAA,EAAO,QAAA,EAAU,MAAM,CAAA;AACjD,EAAA,OAAO,OAAA,CAAQ,IAAI,CAAA,GAAI,IAAA,GAAO,MAAA;AAC/B;AAoCA,IAAM,gBAAgB,MAAA,CAAO,MAAA,CAAO,CAAC,YAAA,EAAc,QAAQ,CAAU,CAAA;AAErE,SAASC,WAAU,KAAA,EAAsD;AACxE,EAAA,MAAM,KAAA,GAAQ,OAAO,KAAK,CAAA;AAC1B,EAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,KAAA,EAAO,OAAO,CAAA;AAClC,EAAA,IAAI,UAAU,SAAA,EAAW;AACxB,IAAA,OAAO,OAAO,MAAA,CAAO,EAAE,OAAO,SAAA,EAAW,OAAA,EAAS,SAAS,KAAA,CAAM,KAAA,EAAO,SAAS,CAAC,CAAA,EAAG,WAAW,QAAA,CAAS,KAAA,CAAM,OAAO,WAAW,CAAC,GAAG,CAAA;AAAA,EACtI;AACA,EAAA,MAAM,MAAA,GAAS,KAAA,CAAM,KAAA,EAAO,QAAQ,CAAA;AACpC,EAAA,IAAI,UAAU,QAAA,IAAY,CAAC,QAAQ,aAAA,EAAe,MAAM,GAAG,MAAM,OAAA;AACjE,EAAA,OAAO,OAAO,MAAA,CAAO,EAAE,KAAA,EAAO,QAAA,EAAU,QAA2C,CAAA;AACpF;AAGA,SAAS,GAAA,CAAIxB,SAAgB,GAAA,EAAsB;AAClD,EAAA,OAAO,OAAA,CAAQA,OAAAA,EAAQ,GAAA,EAAK,GAAA,EAAK,MAAM,CAAA;AACxC;AAEA,SAAS,MAAM,KAAA,EAAwB;AACtC,EAAA,IAAI,CAAC,aAAA,CAAc,KAAK,CAAA,EAAG,MAAM,OAAA;AACjC,EAAA,OAAO,KAAA;AACR;AAOA,SAAS,WAAWA,OAAAA,EAAgC;AACnD,EAAA,MAAM,GAAA,GAAM,MAAMA,OAAM,CAAA;AACxB,EAAA,MAAM,OAAA,GAAU,QAAA,CAAS,GAAA,CAAI,GAAA,EAAK,SAAS,CAAiC,CAAA;AAC5E,EAAA,MAAM,QAAA,GAAW,QAAA,CAAS,GAAA,CAAI,GAAA,EAAK,UAAU,CAAiC,CAAA;AAC9E,EAAA,MAAM,OAAA,GAAU,QAAA,CAAS,GAAA,CAAI,GAAA,EAAK,SAAS,CAAiC,CAAA;AAC5E,EAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,GAAA,CAAI,GAAA,EAAK,OAAO,CAAC,CAAA;AACrC,EAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,GAAA,CAAI,KAAA,EAAO,OAAO,CAAiC,CAAA;AAC1E,EAAA,MAAM,QAAQ,KAAA,CAAM,GAAA,CAAI,KAAA,EAAO,OAAO,GAAmC,CAAC,CAAA;AAC1E,EAAA,OAAO,MAAA,CAAO,MAAA,CAAO,EAAE,OAAA,EAAS,UAAU,OAAA,EAAS,KAAA,EAAO,MAAA,CAAO,MAAA,CAAO,EAAE,KAAA,EAAO,KAAA,EAAO,GAAG,CAAA;AAC5F;AAOA,IAAM,sBAAA,GAAyB,CAAA;AAE/B,IAAM,iBAAA,GAAoB,CAAA;AAqB1B,SAAS,QAAA,CAASA,SAAiB,MAAA,EAAmC;AACrE,EAAA,MAAM,GAAA,GAAM,MAAMA,OAAM,CAAA;AAExB,EAAA,MAAM,KAAA,GAAQ,qBAAA,CAAsB,GAAA,CAAI,GAAA,EAAK,OAAO,CAAC,CAAA;AACrD,EAAA,IAAI,KAAA,CAAM,OAAA,KAAY,MAAA,CAAO,OAAA,IAAW,KAAA,CAAM,QAAA,KAAa,MAAA,CAAO,QAAA,IAAY,KAAA,CAAM,OAAA,KAAY,MAAA,CAAO,OAAA,EAAS,MAAM,OAAA;AACtH,EAAA,MAAM,MAAA,GAAyB,EAAE,KAAA,EAAO,sBAAA,EAAuB;AAC/D,EAAA,MAAM,aAAA,GAAgB,GAAA,CAAI,GAAA,EAAK,SAAS,CAAA;AACxC,EAAA,MAAM,OAAA,GAAU,aAAA,KAAkB,IAAA,GAAO,IAAA,GAAO,MAAA,CAAO,gBAAA,CAAiB,aAAA,EAAe,SAAA,EAAW,MAAA,EAAQ,iBAAA,EAAmB,MAAM,CAAC,CAAA;AACpI,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,gBAAA,CAAiB,GAAA,CAAI,GAAA,EAAK,OAAO,CAAA,EAAG,OAAA,EAAS,MAAA,EAAQ,iBAAA,EAAmB,MAAM,CAAC,CAAA;AACpG,EAAA,MAAM,KAAA,GAAQwB,UAAAA,CAAU,gBAAA,CAAiB,GAAA,CAAI,KAAK,OAAO,CAAA,EAAG,OAAA,EAAS,MAAA,EAAQ,iBAAA,EAAmB,EAAE,KAAA,EAAO,CAAA,EAAG,CAAC,CAAA;AAC7G,EAAA,MAAM,kBAAA,GAAqB,QAAA,CAAS,GAAA,CAAI,GAAA,EAAK,oBAAoB,CAAiC,CAAA;AAClG,EAAA,MAAM,oBAAA,GAAuB,UAAU,kBAAkB,CAAA;AACzD,EAAA,MAAM,YAAA,GAAe,SAAA,CAAU,KAAA,CAAM,UAAU,CAAA;AAC/C,EAAA,IAAI,CAAC,eAAe,oBAAoB,CAAA,IAAK,CAAC,cAAA,CAAe,YAAY,GAAG,MAAM,OAAA;AAClF,EAAA,OAAO,OAAO,MAAA,CAAO;AAAA,IACpB,GAAG,MAAA;AAAA,IACH,KAAA;AAAA,IACA,OAAA;AAAA,IACA,gBAAA,EAAkB,GAAA,CAAI,GAAA,EAAK,kBAAkB,CAAA,KAAM,IAAA;AAAA,IACnD,KAAA;AAAA,IACA,KAAA;AAAA,IACA,cAAc,KAAA,CAAM,GAAA,CAAI,GAAA,EAAK,cAAc,GAAmC,CAAC,CAAA;AAAA,IAC/E,kBAAA;AAAA,IACA,oBAAA;AAAA,IACA;AAAA,GACA,CAAA;AACF;AASO,SAAS,gBAAgB,KAAA,EAAqD;AACpF,EAAA,MAAM,QAAmB,EAAC;AAC1B,EAAA,IAAI;AAEH,IAAA,IAAI,CAAC,OAAA,CAAQ,KAAK,CAAA,EAAG,OAAO,KAAA,CAAA;AAC5B,IAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,KAAA,EAAO,QAAA,EAAU,UAAU,MAAM,CAAA;AACxD,IAAA,IAAI,OAAO,MAAA,KAAW,QAAA,IAAY,CAAC,mBAAA,CAAoB,MAAM,CAAA,IAAK,MAAA,GAAS,CAAA,IAAK,MAAA,GAAS,WAAA,EAAa,OAAO,KAAA,CAAA;AAC7G,IAAA,KAAA,IAAS,KAAA,GAAQ,CAAA,EAAG,KAAA,GAAQ,MAAA,EAAQ,SAAS,CAAA,EAAG,KAAA,CAAM,IAAA,CAAK,OAAA,CAAQ,OAAO,CAAA,EAAG,KAAK,CAAA,CAAA,EAAI,KAAA,EAAO,MAAM,CAAC,CAAA;AAAA,EACrG,CAAA,CAAA,MAAQ;AACP,IAAA,OAAO,MAAA;AAAA,EACR;AACA,EAAA,OAAO,MAAA,CAAO,MAAA,CAAO,KAAA,CAAM,GAAA,CAAI,CAAC,IAAA,KAAuB;AACtD,IAAA,IAAI,MAAA;AACJ,IAAA,IAAI;AACH,MAAA,MAAA,GAAS,WAAW,IAAI,CAAA;AAAA,IACzB,CAAA,CAAA,MAAQ;AACP,MAAA,OAAO,MAAA;AAAA,IACR;AACA,IAAA,IAAI;AACH,MAAA,OAAO,MAAA,CAAO,OAAO,EAAE,MAAA,EAAQ,KAAK,QAAA,CAAS,IAAA,EAAM,MAAM,CAAA,EAAG,CAAA;AAAA,IAC7D,CAAA,CAAA,MAAQ;AACP,MAAA,OAAO,OAAO,MAAA,CAAO,EAAE,MAAA,EAAQ,GAAA,EAAK,QAAW,CAAA;AAAA,IAChD;AAAA,EACD,CAAC,CAAC,CAAA;AACH;AAGA,IAAM,WAAA,GAAc,GAAA;AAEpB,IAAM,WAAW,MAAA,CAAO,MAAA,CAAO,CAAC,QAAA,EAAU,QAAA,EAAU,SAAS,CAAU,CAAA;AAGhE,SAAS,cAAc,KAAA,EAAmE;AAChG,EAAA,IAAI;AACH,IAAA,MAAM,IAAA,GAAO,aAAa,KAAK,CAAA;AAC/B,IAAA,IAAI,IAAA,KAAS,QAAW,OAAO,KAAA,CAAA;AAC/B,IAAA,OAAO,MAAA,CAAO,MAAA,CAAO,IAAA,CAAK,GAAA,CAAI,CAAC,IAAA,KAAS;AACvC,MAAA,MAAM,QAAA,GAAW,OAAO,IAAI,CAAA;AAC5B,MAAA,MAAM,QAAA,GAAW,KAAA,CAAM,QAAA,EAAU,mBAAmB,CAAA;AACpD,MAAA,IAAI,CAAC,OAAA,CAAQ,QAAQ,CAAA,EAAG,MAAM,OAAA;AAC9B,MAAA,MAAM,MAAA,GAAS,KAAA,CAAM,QAAA,EAAU,QAAQ,CAAA;AACvC,MAAA,IAAI,CAAC,OAAA,CAAQ,QAAA,EAAU,MAAM,GAAG,MAAM,OAAA;AACtC,MAAA,MAAM,cAAA,GAAiB,KAAA,CAAM,QAAA,EAAU,gBAAgB,CAAA;AACvD,MAAA,OAAO,OAAO,MAAA,CAAO;AAAA,QACpB,cAAA,EAAgB,QAAA,CAAS,KAAA,CAAM,QAAA,EAAU,gBAAgB,CAAC,CAAA;AAAA,QAC1D,UAAU,KAAA,CAAM,KAAA,CAAM,QAAA,EAAU,UAAU,GAAG,CAAC,CAAA;AAAA,QAC9C,QAAA,EAAU,QAAA,CAAS,KAAA,CAAM,QAAA,EAAU,UAAU,CAAC,CAAA;AAAA,QAC9C,OAAA,EAAS,QAAA,CAAS,KAAA,CAAM,QAAA,EAAU,SAAS,CAAC,CAAA;AAAA,QAC5C,MAAA;AAAA,QACA,mBAAmB,MAAA,CAAO,MAAA,CAAO,QAAA,CAAS,GAAA,CAAI,QAAQ,CAAC,CAAA;AAAA,QACvD,aAAA,EAAe,QAAA,CAAS,KAAA,CAAM,QAAA,EAAU,eAAe,CAAC,CAAA;AAAA,QACxD,gBAAgB,cAAA,KAAmB,IAAA,IAAQ,mBAAmB,KAAA,CAAA,GAAY,IAAA,GAAO,SAAS,cAAc;AAAA,OACxG,CAAA;AAAA,IACF,CAAC,CAAC,CAAA;AAAA,EACH,CAAA,CAAA,MAAQ;AACP,IAAA,OAAO,MAAA;AAAA,EACR;AACD;AAMO,SAAS,YAAY,KAAA,EAAqD;AAChF,EAAA,IAAI;AACH,IAAA,IAAI,KAAA,KAAU,MAAM,OAAO,WAAA;AAC3B,IAAA,IAAI,CAAC,aAAA,CAAc,KAAK,CAAA,EAAG,OAAO,KAAA,CAAA;AAClC,IAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,KAAA,EAAO,MAAA,EAAQ,QAAQ,MAAM,CAAA;AAClD,IAAA,OAAO,IAAA,KAAS,QAAA,IAAY,IAAA,KAAS,QAAA,GAAW,SAAA,GAAY,KAAA,CAAA;AAAA,EAC7D,CAAA,CAAA,MAAQ;AACP,IAAA,OAAO,MAAA;AAAA,EACR;AACD;;;AC9NA,SAAS,QAAA,CAAS,OAAgB,UAAA,EAAuE;AACxG,EAAA,IAAI,UAAA,KAAe,cAAc,OAAO,MAAA,CAAwB,EAAE,KAAA,EAAO,QAAA,EAAU,MAAA,EAAQ,YAAA,EAAc,CAAA;AACzG,EAAA,IAAI,UAAA,KAAe,UAAA,IAAc,aAAA,CAAc,KAAK,CAAA,EAAG;AACtD,IAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,KAAA,EAAO,SAAA,EAAW,WAAW,QAAQ,CAAA;AAC7D,IAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,KAAA,EAAO,WAAA,EAAa,aAAa,QAAQ,CAAA;AACnE,IAAA,IAAI,OAAO,YAAY,QAAA,IAAY,OAAA,KAAY,MAAM,OAAO,SAAA,KAAc,QAAA,IAAY,SAAA,KAAc,EAAA,EAAI;AACvG,MAAA,OAAO,OAAwB,EAAE,KAAA,EAAO,SAAA,EAAW,OAAA,EAAS,WAAW,CAAA;AAAA,IACxE;AAAA,EACD;AACA,EAAA,OAAO,OAAwB,EAAE,KAAA,EAAO,QAAA,EAAU,MAAA,EAAQ,UAAU,CAAA;AACrE;AAUA,SAAS,qBAAqB,OAAA,EAAyD;AACtF,EAAA,IAAI,OAAA,KAAY,QAAQ,OAAO,OAAA,KAAY,UAAU,MAAM,WAAA,CAAY,mBAAmB,SAAS,CAAA;AACnG,EAAA,MAAM,MAAA,GAAS,4BAAA,CAA6B,OAAA,CAAQ,MAAA,IAAU,EAAE,CAAA;AAChE,EAAA,MAAM,QAAQ,OAAA,CAAQ,KAAA;AACtB,EAAA,IAAI,KAAA,KAAU,QAAQ,OAAO,KAAA,KAAU,UAAU,MAAM,WAAA,CAAY,mBAAmB,OAAO,CAAA;AAC7F,EAAA,MAAM,kBAAkB,KAAA,CAAM,eAAA;AAC9B,EAAA,IAAI,OAAO,eAAA,KAAoB,UAAA,EAAY,MAAM,WAAA,CAAY,mBAAmB,OAAO,CAAA;AACvF,EAAA,OAAO,MAAA,CAAO,EAAE,MAAA,EAAQ,KAAA,EAAO,eAAA,EAAmE,KAAA,EAAO,kBAAA,CAAmB,OAAA,CAAQ,KAAK,CAAA,EAAG,MAAA,EAAQ,OAAA,CAAQ,QAAQ,CAAA;AACrK;AAEA,IAAM,kBAAkB,MAAA,CAAO,CAAC,UAAA,EAAY,iBAAA,EAAmB,cAAc,CAAU,CAAA;AAgChF,SAAS,6BAA6B,OAAA,EAAkE;AAC9G,EAAA,MAAM,MAAA,GAAS,KAAA,CAAM,MAAM,oBAAA,CAAqB,OAAO,GAAG,MAAM,WAAA,CAAY,iBAAA,EAAmB,SAAS,CAAC,CAAA;AACzG,EAAA,MAAM,EAAE,MAAA,EAAQ,KAAA,EAAO,eAAA,EAAiB,KAAA,EAAO,QAAO,GAAI,MAAA;AAE1D,EAAA,MAAM,OAAA,GAAU,OAAO,KAAA,EAAgC,OAAA,KAA2D;AACjH,IAAA,MAAM,UAAA,GAAa,sBAAsB,OAAO,CAAA;AAChD,IAAA,MAAM,KAAA,GAAQ,KAAA;AAAA,MACb,MAAM,uBAAA,CAAwB,KAAA,EAAO,EAAE,MAAA,EAAQ,OAAO,QAAA,CAAS,KAAA,EAAO,UAAU,CAAA,EAAG,CAAA;AAAA,MACnF,cAAc,UAAU;AAAA,KACzB;AACA,IAAA,MAAMvB,MAAAA,GAAQ,gBAAgB,KAAK,CAAA;AACnC,IAAA,MAAM,GAAA,GAAM,EAAE,GAAG,KAAA,EAAO,SAAA,EAAW,KAAA,CAAMA,MAAK,CAAA,EAAG,kBAAA,EAAoB,KAAA,CAAMA,MAAAA,GAAQ,MAAA,CAAO,gBAAgB,CAAA,EAAE;AAC5G,IAAA,MAAM,OAAA,GAAU,MAAM,WAAA,CAAYA,MAAAA,EAAO,OAAO,aAAA,EAAe,iBAAA,CAAkB,OAAO,CAAA,EAAG,CAAC,WAAA,KAC3F,MAAM,eAAA,EAAiB,KAAA,EAAO,CAAC,GAAA,EAAK,WAAW,CAAY,CAAA,EAAuB,MAAM,eAAA,CAAgB,KAAK,CAAC,CAAA;AAC/G,IAAA,IAAI,CAAC,QAAQ,EAAA,EAAI;AAChB,MAAA,MAAM,WAAA;AAAA,QACL,QAAQ,MAAA,KAAW,SAAA,GAAY,0BAA0B,OAAA,CAAQ,MAAA,KAAW,YAAY,iBAAA,GAAoB,sBAAA;AAAA,QAC5G;AAAA,OACD;AAAA,IACD;AACA,IAAA,MAAM,MAAA,GAAS,WAAA,CAAY,OAAA,CAAQ,KAAA,EAAO,eAAe,CAAA;AAGzD,IAAA,IAAI,MAAA,KAAW,UAAA,IAAc,MAAA,KAAW,iBAAA,EAAmB;AAI3D,IAAA,IAAI,MAAA,KAAW,cAAA,EAAgB,MAAM,WAAA,CAAY,6BAA6B,iBAAiB,CAAA;AAC/F,IAAA,MAAM,WAAA,CAAY,wBAAwB,iBAAiB,CAAA;AAAA,EAC5D,CAAA;AACA,EAAA,OAAO,MAAA,CAAO,EAAE,OAAA,EAAS,CAAA;AAC1B;AA+CA,IAAM,SAAA,GAAY,EAAA;AAClB,IAAM,SAAA,GAAY,qBAAA;AAClB,IAAM,uBAAA,GAA0B,GAAA;AAEhC,SAAS,cAAc,OAAA,EAAmF;AACzG,EAAA,IAAI,OAAA,KAAY,QAAQ,OAAO,OAAA,KAAY,UAAU,MAAM,WAAA,CAAY,mBAAmB,SAAS,CAAA;AACnG,EAAA,MAAM,UAAA,GAAa,SAAA,CAAW,OAAA,CAAwC,aAAa,CAAA;AACnF,EAAA,MAAM,SAAA,GAAY,UAAA,KAAe,MAAA,GAAY,uBAAA,GAA0B,UAAA;AACvE,EAAA,qBAAA,CAAsB,WAAW,eAAe,CAAA;AAChD,EAAA,IAAI,SAAA,GAAY,oBAAA,EAAsB,MAAM,WAAA,CAAY,sBAAsB,eAAe,CAAA;AAC7F,EAAA,MAAM,QAAS,OAAA,CAAgC,KAAA;AAC/C,EAAA,IAAI,CAAC,OAAA,CAAQ,KAAK,CAAA,IAAK,KAAA,CAAM,MAAA,KAAW,CAAA,IAAK,KAAA,CAAM,MAAA,GAAS,SAAA,EAAW,MAAM,WAAA,CAAY,mBAAmB,OAAO,CAAA;AACnH,EAAA,MAAM,OAAe,EAAC;AACtB,EAAA,MAAM,QAAkB,EAAC;AACzB,EAAA,KAAA,IAAS,QAAQ,CAAA,EAAG,KAAA,GAAQ,KAAA,CAAM,MAAA,EAAQ,SAAS,CAAA,EAAG;AACrD,IAAA,MAAM,IAAA,GAAO,MAAM,KAAK,CAAA;AACxB,IAAA,IAAI,IAAA,KAAS,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,QAAgB,WAAA,CAAY,iBAAA,EAAmB,CAAA,MAAA,EAAS,KAAK,CAAA,CAAA,CAAG,CAAA;AACrG,IAAA,MAAM,EAAE,IAAA,EAAM,SAAA,EAAW,YAAA,EAAc,UAAS,GAAI,IAAA;AACpD,IAAA,IAAI,OAAO,IAAA,KAAS,QAAA,IAAY,CAAC,SAAA,CAAU,KAAK,IAAI,CAAA,IAAK,KAAA,CAAM,QAAA,CAAS,IAAI,CAAA,EAAG,MAAM,YAAY,iBAAA,EAAmB,CAAA,MAAA,EAAS,KAAK,CAAA,MAAA,CAAQ,CAAA;AAC1I,IAAA,IAAI,SAAA,KAAc,QAAQ,OAAO,SAAA,KAAc,YAAY,OAAO,SAAA,CAAU,YAAY,UAAA,EAAY;AACnG,MAAA,MAAM,WAAA,CAAY,iBAAA,EAAmB,CAAA,MAAA,EAAS,KAAK,CAAA,WAAA,CAAa,CAAA;AAAA,IACjE;AACA,IAAA,IAAI,YAAA,KAAiB,MAAA,IAAa,OAAO,YAAA,KAAiB,SAAA,QAAiB,WAAA,CAAY,iBAAA,EAAmB,CAAA,MAAA,EAAS,KAAK,CAAA,cAAA,CAAgB,CAAA;AACxI,IAAA,IAAI,QAAA,KAAa,MAAA,IAAa,OAAO,QAAA,KAAa,SAAA,QAAiB,WAAA,CAAY,iBAAA,EAAmB,CAAA,MAAA,EAAS,KAAK,CAAA,UAAA,CAAY,CAAA;AAC5H,IAAA,KAAA,CAAM,KAAK,IAAI,CAAA;AACf,IAAA,IAAA,CAAK,KAAK,MAAA,CAAO,EAAE,IAAA,EAAM,MAAA,EAAQ,WAAW,OAAA,EAAS,SAAA,CAAU,OAAA,EAA0C,YAAA,EAAc,iBAAiB,IAAA,EAAM,QAAA,EAAU,QAAA,KAAa,KAAA,EAAO,CAAC,CAAA;AAAA,EAC9K;AACA,EAAA,OAAO,OAAO,EAAE,KAAA,EAAO,OAAO,IAAI,CAAA,EAAG,WAAW,CAAA;AACjD;AAsBA,IAAM,wBAAA,GAA2B,OAAO,eAAA,KAAoB,UAAA,GAAa,eAAA,GAAkB,MAAA;AAC3F,IAAM,cAAA,GAAiB,0BAA0B,SAAA,CAAU,KAAA;AAC3D,IAAM,sBAAA,GAAyB,6BAA6B,MAAA,GAAY,MAAA,GAAY,QAAQ,wBAAA,CAAyB,wBAAA,CAAyB,SAAA,EAAW,QAAQ,CAAA,EAAG,GAAA;AACpK,IAAM,uBAAuB,OAAO,WAAA,KAAgB,UAAA,GAAa,WAAA,CAAY,UAAU,gBAAA,GAAmB,MAAA;AAC1G,IAAM,0BAA0B,OAAO,WAAA,KAAgB,UAAA,GAAa,WAAA,CAAY,UAAU,mBAAA,GAAsB,MAAA;AAChH,IAAMwB,SAAAA,GAAW,UAAA;AACjB,IAAMC,WAAAA,GAAa,YAAA;AACnB,IAAM,gBAAA,GAAmB,OAAA;AACzB,IAAM,iBAAiB,OAAA,CAAQ,cAAA;AAC/B,IAAM,aAAA,GAAgB,IAAA;AACtB,IAAMC,kBAAiB,OAAA,CAAQ,OAAA;AAC/B,IAAMX,mCAAkC,OAAA,CAAQ,wBAAA;AAChD,IAAMpB,yBAAwB,OAAA,CAAQ,cAAA;AACtC,IAAMgC,kBAAiB,MAAA,CAAO,QAAA;AAE9B,SAAS,yBAAA,GAAqC;AAC7C,EAAA,OAAO,mBAAmB,MAAA,IAAa,sBAAA,KAA2B,MAAA,IAAa,oBAAA,KAAyB,UACvG,uBAAA,KAA4B,MAAA;AAC9B;AA6BA,SAAS,aAAA,CAAc,OAAgB,KAAA,EAA4D;AAClG,EAAA,IAAI,CAAC,aAAA,CAAc,KAAK,GAAG,MAAM,aAAA,CAAc,UAAU,CAAA,EAAE;AAC3D,EAAA,MAAM,MAAA,GAAyB,EAAE,KAAA,EAAO,CAAA,EAAE;AAC1C,EAAA,MAAM,IAAA,GAAOD,gBAAe,KAAK,CAAA;AACjC,EAAA,MAAM,WAAoC,QAAA,EAAkB;AAC5D,EAAA,KAAA,IAAS,QAAQ,CAAA,EAAG,KAAA,GAAQ,IAAA,CAAK,MAAA,EAAQ,SAAS,CAAA,EAAG;AACpD,IAAA,MAAM,GAAA,GAAM,KAAK,KAAK,CAAA;AACtB,IAAA,IAAI,OAAO,QAAQ,QAAA,EAAU;AAC7B,IAAA,MAAM,UAAA,GAAaX,gCAAAA,CAAgC,KAAA,EAAO,GAAG,CAAA;AAC7D,IAAA,IAAI,UAAA,KAAe,MAAA,IAAa,UAAA,CAAW,UAAA,KAAe,IAAA,EAAM;AAChE,IAAA,IAAI,CAAC,OAAO,UAAA,EAAY,OAAO,GAAG,OAAO,QAAA,CAAS,YAAY,UAAU,CAAA;AACxE,IAAA,IAAI,UAAA,CAAW,UAAU,MAAA,EAAW;AACpC,IAAA,IAAI,GAAA,KAAQ,YAAA,IAAgB,GAAA,KAAQ,YAAA,EAAc;AACjD,MAAA,MAAM,IAAA,GAAO,MAAA,CAAO,UAAA,CAAW,KAAK,CAAA;AACpC,MAAA,IAAI,CAACY,eAAAA,CAAe,IAAI,GAAG,OAAO,QAAA,CAAS,YAAY,UAAU,CAAA;AACjE,MAAA,MAAA,CAAO,QAAA,EAAU,KAAK,IAAI,CAAA;AAAA,IAC3B,CAAA,MAAO;AACN,MAAA,MAAA,CAAO,QAAA,EAAU,KAAK,gBAAA,CAAiB,UAAA,CAAW,OAAO,UAAA,EAAY,QAAA,EAAU,CAAA,EAAG,MAAM,CAAC,CAAA;AAAA,IAC1F;AAAA,EACD;AACA,EAAA,MAAM,SAAoC,EAAC;AAC3C,EAAA,KAAA,IAAS,QAAQ,CAAA,EAAG,KAAA,GAAQ,KAAA,CAAM,MAAA,EAAQ,SAAS,CAAA,EAAG;AACrD,IAAA,MAAM,IAAA,GAAO,KAAK,QAAQ,CAAA;AAC1B,IAAA,IAAI,OAAO,SAAS,UAAA,KAAe,QAAA,OAAe,UAAA,GAAa,IAAI,aAAA,CAAc,QAAA,CAAS,UAAU,CAAA;AACpG,IAAA,IAAI,OAAO,SAAS,UAAA,KAAe,QAAA,OAAe,UAAA,GAAa,IAAI,aAAA,CAAc,QAAA,CAAS,UAAU,CAAA;AACpG,IAAA,IAAI,CAAC,KAAA,CAAM,KAAK,CAAA,CAAG,YAAA,EAAc;AAChC,MAAA,cAAA,CAAe,MAAM,SAAS,CAAA;AAC9B,MAAA,cAAA,CAAe,MAAM,WAAW,CAAA;AAAA,IACjC;AACA,IAAA,MAAA,CAAO,KAAK,IAA0C,CAAA;AAAA,EACvD;AACA,EAAA,OAAO,MAAA;AACR;AAQA,SAAS,KAAK,KAAA,EAAyB;AACtC,EAAA,IAAI,KAAA,KAAU,IAAA,IAAQ,OAAO,KAAA,KAAU,UAAU,OAAO,KAAA;AACxD,EAAA,IAAI,OAAA,CAAQ,KAAK,CAAA,EAAG;AACnB,IAAA,MAAM,OAAkB,EAAC;AACzB,IAAA,KAAA,IAAS,KAAA,GAAQ,CAAA,EAAG,KAAA,GAAQ,KAAA,CAAM,MAAA,EAAQ,KAAA,IAAS,CAAA,EAAG,IAAA,CAAK,IAAA,CAAK,IAAA,CAAK,KAAA,CAAM,KAAK,CAAC,CAAC,CAAA;AAClF,IAAA,OAAO,IAAA;AAAA,EACR;AACA,EAAA,MAAM,IAAA,GAAOD,gBAAe,KAAK,CAAA;AACjC,EAAA,MAAM,MAA+B,EAAC;AACtC,EAAA,KAAA,IAAS,QAAQ,CAAA,EAAG,KAAA,GAAQ,IAAA,CAAK,MAAA,EAAQ,SAAS,CAAA,EAAG;AACpD,IAAA,MAAM,GAAA,GAAM,KAAK,KAAK,CAAA;AACtB,IAAA,aAAA,CAAc,KAAK,GAAA,EAAK,IAAA,CAAM,KAAA,CAAkC,GAAG,CAAC,CAAC,CAAA;AAAA,EACtE;AACA,EAAA,OAAO,GAAA;AACR;AAEA,SAAS,aAAA,CAAc,MAAA,EAAgB,GAAA,EAAa,KAAA,EAAsB;AACzE,EAAA/B,sBAAAA,CAAsB,MAAA,EAAQ,GAAA,EAAK,EAAE,KAAA,EAAO,UAAA,EAAY,IAAA,EAAM,QAAA,EAAU,IAAA,EAAM,YAAA,EAAc,IAAA,EAAM,CAAA;AACnG;AASA,IAAM,EAAA,GAAkB,MAAA,CAAO,EAAE,MAAA,EAAQ,MAAM,CAAA;AAC/C,IAAM,SAAA,GAAyB,MAAA,CAAO,EAAE,MAAA,EAAQ,WAAW,CAAA;AAC3D,IAAMiC,QAAAA,GAAuB,MAAA,CAAO,EAAE,MAAA,EAAQ,WAAW,CAAA;AAoCzD,SAAS,UAAA,CAAW,IAAA,EAAY,QAAA,EAAmC,UAAA,EAAgC,WAAmB,KAAA,EAA4B;AACjJ,EAAA,MAAM,UAAA,GAAa,IAAI,wBAAA,EAA0B;AACjD,EAAA,MAAM,MAAA,GAAS,KAAA,CAAM,sBAAA,EAAyB,UAAA,EAAY,EAAE,CAAA;AAC5D,EAAA,MAAM,OAAA,GAAW,eAAe,MAAA,GAAY,EAAE,QAAO,GAAI,EAAE,MAAA,EAAQ,eAAA,EAAiB,UAAA,EAAW;AAC/F,EAAA,IAAIP,UAAyC,MAAM,MAAA;AACnD,EAAA,MAAM,OAAA,GAAU,IAAI,gBAAA,CAA8B,CAAC,OAAA,KAAY;AAC9D,IAAAA,OAAAA,GAAS,OAAA;AAAA,EACV,CAAC,CAAA;AACD,EAAA,IAAI,KAAA,GAAQ,KAAA;AACZ,EAAA,IAAI,KAAA;AACJ,EAAA,MAAM,GAAA,GAAM,CAAC,MAAA,EAAqB,WAAA,KAA+B;AAChE,IAAA,IAAI,KAAA,EAAO;AACX,IAAA,KAAA,GAAQ,IAAA;AACR,IAAA,IAAI,UAAU,MAAA,EAAW;AACxB,MAAA,IAAI;AACH,QAAAI,YAAW,KAAK,CAAA;AAAA,MACjB,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACD;AACA,IAAA,IAAI;AACH,MAAA,KAAA,EAAM;AAAA,IACP,CAAA,CAAA,MAAQ;AAAA,IAER;AACA,IAAA,IAAI,WAAA,EAAa;AAChB,MAAA,IAAI;AACH,QAAA,KAAA,CAAM,cAAA,EAAiB,UAAA,EAAY,EAAE,CAAA;AAAA,MACtC,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACD;AACA,IAAAJ,QAAO,MAAM,CAAA;AAAA,EACd,CAAA;AACA,EAAA,MAAM,QAAQ,MAAY;AACzB,IAAA,IAAI,KAAA,EAAO;AACX,IAAA,KAAA,GAAQG,UAAS,MAAM,GAAA,CAAI,SAAA,EAAW,IAAI,GAAG,SAAS,CAAA;AACtD,IAAA,IAAI,CAAC,IAAA,CAAK,QAAA,EAAU,UAAA,CAAW,KAAK,CAAA;AACpC,IAAA,KAAA,CAAM,YAA2B;AAChC,MAAA,IAAI;AACH,QAAA,MAAO,KAAA,CAAM,KAAK,OAAA,EAAS,IAAA,CAAK,QAAQ,CAAC,QAAA,EAAU,OAAO,CAAY,CAAA;AACtE,QAAA,GAAA,CAAI,IAAI,KAAK,CAAA;AAAA,MACd,SAAS,MAAA,EAAQ;AAChB,QAAA,GAAA,CAAI,EAAE,MAAA,EAAQ,QAAA,EAAU,MAAA,IAAU,KAAK,CAAA;AAAA,MACxC;AAAA,IACD,CAAA,GAAG;AAAA,EACJ,CAAA;AACA,EAAA,OAAO,MAAA,CAAO,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,MAAM,GAAA,CAAII,QAAAA,EAAS,IAAI,CAAA,EAAG,CAAA;AAClE;AAGA,SAAS,WAAW,KAAA,EAAsB;AACzC,EAAA,IAAI;AACH,IAAA,IAAI,KAAA,KAAU,IAAA,IAAQ,OAAO,KAAA,KAAU,QAAA,EAAU;AACjD,IAAA,MAAM,QAAS,KAAA,CAA8B,KAAA;AAC7C,IAAA,IAAI,OAAO,KAAA,KAAU,UAAA,QAAkB,KAAA,EAAO,KAAA,EAAO,EAAE,CAAA;AAAA,EACxD,CAAA,CAAA,MAAQ;AAAA,EAER;AACD;AA2CO,SAAS,gCAAgC,OAAA,EAAqE;AACpH,EAAA,MAAM,EAAE,KAAA,EAAO,SAAA,EAAU,GAAI,KAAA,CAAM,MAAM,aAAA,CAAc,OAAO,CAAA,EAAG,MAAM,WAAA,CAAY,iBAAA,EAAmB,SAAS,CAAC,CAAA;AAChH,EAAA,IAAI,CAAC,yBAAA,EAA0B,EAAG,MAAM,WAAA,CAAY,mBAAmB,SAAS,CAAA;AAChF,EAAA,MAAM,OAAA,GAAU,OAAO,KAAA,EAAgC,OAAA,KAA2D;AACjH,IAAA,MAAM,MAAA,GAAS,kBAAkB,OAAO,CAAA;AACxC,IAAA,IAAI,MAAA,KAAW,UAAa,aAAA,CAAc,MAAM,GAAG,MAAM,WAAA,CAAY,mBAAmB,QAAQ,CAAA;AAChG,IAAA,MAAM,UAAA,GAAa,sBAAsB,OAAO,CAAA;AAChD,IAAA,MAAM,kBAAA,GAAqB,UAAA,KAAe,UAAA,GAAa,YAAA,GAAe,UAAA;AACtE,IAAA,MAAM,SAAA,GAAY,MAAM,MAAM,aAAA,CAAc,OAAO,KAAK,CAAA,EAAG,aAAA,CAAc,UAAU,CAAC,CAAA;AAKpF,IAAA,IAAI,OAAO,KAAA,CAAM,MAAA;AACjB,IAAA,MAAM,OAAkB,EAAC;AACzB,IAAA,MAAM,gBAAgB,MAAY;AACjC,MAAA,KAAA,IAAS,KAAA,GAAQ,CAAA,EAAG,KAAA,GAAQ,IAAA,CAAK,MAAA,EAAQ,SAAS,CAAA,EAAG,IAAA,CAAK,KAAK,CAAA,CAAG,KAAA,EAAM;AAAA,IACzE,CAAA;AACA,IAAA,MAAMC,WAAU,MAAY;AAC3B,MAAA,IAAA,IAAQ,CAAA;AACR,MAAA,IAAI,IAAA,KAAS,CAAA,IAAK,MAAA,KAAW,MAAA,EAAW;AACvC,QAAA,IAAI;AACH,UAAA,KAAA,CAAM,uBAAA,EAA0B,MAAA,EAAQ,CAAC,OAAA,EAAS,aAAa,CAAC,CAAA;AAAA,QACjE,CAAA,CAAA,MAAQ;AAAA,QAER;AAAA,MACD;AAAA,IACD,CAAA;AACA,IAAA,KAAA,IAAS,QAAQ,CAAA,EAAG,KAAA,GAAQ,KAAA,CAAM,MAAA,EAAQ,SAAS,CAAA,EAAG;AACrD,MAAA,MAAM,IAAA,GAAO,MAAM,KAAK,CAAA;AACxB,MAAA,IAAA,CAAK,IAAA,CAAK,UAAA,CAAW,IAAA,EAAM,SAAA,CAAU,KAAK,CAAA,EAAI,IAAA,CAAK,YAAA,GAAe,UAAA,GAAa,kBAAA,EAAoB,SAAA,EAAWA,QAAO,CAAC,CAAA;AAAA,IACvH;AACA,IAAA,IAAI,WAAW,MAAA,EAAW;AACzB,MAAA,IAAI,QAAA,GAAW,IAAA;AACf,MAAA,IAAI;AACH,QAAA,KAAA,CAAM,oBAAA,EAAuB,MAAA,EAAQ,CAAC,OAAA,EAAS,aAAa,CAAC,CAAA;AAAA,MAC9D,CAAA,CAAA,MAAQ;AACP,QAAA,QAAA,GAAW,KAAA;AAAA,MACZ;AAOA,MAAA,IAAI,CAAC,QAAA,IAAY,aAAA,CAAc,MAAM,CAAA,EAAG;AACvC,QAAA,aAAA,EAAc;AACd,QAAA,MAAM,WAAA,CAAY,mBAAmB,QAAQ,CAAA;AAAA,MAC9C;AAAA,IACD;AAGA,IAAA,KAAA,IAAS,KAAA,GAAQ,CAAA,EAAG,KAAA,GAAQ,IAAA,CAAK,MAAA,EAAQ,SAAS,CAAA,EAAG,IAAA,CAAK,KAAK,CAAA,CAAG,KAAA,EAAM;AAKxE,IAAA,MAAM,WAA0B,EAAC;AACjC,IAAA,KAAA,IAAS,QAAQ,CAAA,EAAG,KAAA,GAAQ,KAAA,CAAM,MAAA,EAAQ,SAAS,CAAA,EAAG;AACrD,MAAA,IAAI,KAAA,CAAM,KAAK,CAAA,CAAG,QAAA,EAAU,QAAA,CAAS,KAAK,MAAM,IAAA,CAAK,KAAK,CAAA,CAAG,OAAO,CAAA;AAAA,IACrE;AACA,IAAA,IAAI,QAAA,GAAW,CAAA;AACf,IAAA,IAAI,OAAA;AACJ,IAAA,KAAA,IAAS,QAAQ,CAAA,EAAG,KAAA,GAAQ,KAAA,CAAM,MAAA,EAAQ,SAAS,CAAA,EAAG;AACrD,MAAA,MAAM,IAAA,GAAO,MAAM,KAAK,CAAA;AACxB,MAAA,IAAI,CAAC,KAAK,QAAA,EAAU;AACpB,MAAA,MAAM,OAAA,GAAU,SAAS,QAAQ,CAAA;AACjC,MAAA,QAAA,IAAY,CAAA;AAEZ,MAAA,IAAI,QAAQ,MAAA,KAAW,SAAA,EAAW,MAAM,WAAA,CAAY,mBAAmB,QAAQ,CAAA;AAC/E,MAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,IAAA,IAAQ,OAAA,KAAY,MAAA,YAAqB,EAAE,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,OAAA,EAAQ;AAAA,IAC5F;AACA,IAAA,IAAI,YAAY,MAAA,EAAW;AAC3B,IAAA,IAAI,OAAA,CAAQ,QAAQ,MAAA,KAAW,SAAA,QAAiB,WAAA,CAAY,cAAA,EAAgB,QAAQ,IAAI,CAAA;AACxF,IAAA,MAAM,MAAA,GAAU,QAAQ,OAAA,CAAyC,MAAA;AAGjE,IAAA,KAAA,CAAM,MAAM;AACX,MAAA,MAAM,MAAA;AAAA,IACP,GAAG,MAAM,WAAA,CAAY,aAAA,EAAe,OAAA,CAAQ,IAAI,CAAC,CAAA;AAAA,EAClD,CAAA;AACA,EAAA,OAAO,MAAA,CAAO,EAAE,OAAA,EAAS,CAAA;AAC1B;;;AC7jBO,IAAM,mCAAA,GAAsC,OAAO,MAAA,CAAO;AAAA,EAChE,4BAAA;AAAA,EACA,4BAAA;AAAA,EACA,2BAAA;AAAA,EACA,4BAAA;AAAA,EACA,4BAAA;AAAA,EACA,sBAAA;AAAA,EACA,+BAAA;AAAA,EACA,0BAAA;AAAA,EACA;AACD,CAAU;AAKV,IAAM,QAAA,GAAW,MAAM,SAAA,CAAU,QAAA;AAG1B,SAAS,iCAAiC,SAAA,EAAiE;AACjH,EAAA,OAAO,OAAO,cAAc,QAAA,IAAY,KAAA,CAAM,UAAU,mCAAA,EAAqC,CAAC,SAAS,CAAC,CAAA,KAAM,IAAA;AAC/G;;;ACkKO,IAAM,gCAAgC,MAAA,CAAO;AAAA,EACnD,SAAA,EAAW,EAAA;AAAA,EACX,eAAA,EAAiB,GAAA;AAAA,EACjB,mBAAA,EAAqB;AACtB,CAAC;AAeM,SAAS,8BAAA,CAA+B,SAAiB,SAAA,EAA4B;AAC3F,EAAA,IAAI,OAAO,OAAA,KAAY,QAAA,IAAY,OAAO,SAAA,KAAc,UAAU,OAAO,KAAA;AACzE,EAAA,IAAI,gCAAA,CAAiC,SAAS,CAAA,EAAG,OAAO,KAAA;AACxD,EAAA,IAAI,OAAA,KAAY,KAAK,OAAO,IAAA;AAC5B,EAAA,IAAI,OAAA,CAAQ,MAAA,GAAS,CAAA,IAAK,OAAA,CAAQ,SAAS,IAAI,CAAA,EAAG,OAAO,SAAA,CAAU,UAAA,CAAW,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,EAAE,CAAC,CAAA;AAClG,EAAA,OAAO,OAAA,KAAY,SAAA;AACpB;AAEA,IAAM,UAAA,GACL,OAAO,UAAA,CAAW,MAAA,EAAQ,UAAA,KAAe,UAAA,GAAa,UAAA,CAAW,MAAA,CAAO,UAAA,CAAW,IAAA,CAAK,UAAA,CAAW,MAAM,CAAA,GAAI,MAAA;AAoB9G,SAAS,UAAA,CAAW,OAAgB,KAAA,EAAmC;AACtE,EAAA,IAAI,KAAA,KAAU,IAAA,IAAQ,OAAO,KAAA,KAAU,UAAU,OAAO,KAAA;AACxD,EAAA,KAAA,MAAW,IAAA,IAAQ,OAAO,IAAI,OAAQ,MAAkC,IAAI,CAAA,KAAM,YAAY,OAAO,KAAA;AACrG,EAAA,OAAO,IAAA;AACR;AAGA,SAAS,aAAA,CAAc,KAAA,EAAgB,QAAA,EAAkBrC,MAAAA,EAAuB;AAC/E,EAAA,MAAM,IAAA,GAAO,UAAU,KAAK,CAAA;AAC5B,EAAA,MAAM,QAAA,GAAW,IAAA,KAAS,MAAA,GAAY,QAAA,GAAW,IAAA;AACjD,EAAA,qBAAA,CAAsB,UAAUA,MAAK,CAAA;AACrC,EAAA,OAAO,QAAA;AACR;AAOA,SAAS,WAAW,OAAA,EAA4C;AAC/D,EAAA,OAAO,KAAA,CAAM,MAAM,mBAAA,CAAoB,OAAO,GAAG,MAAM,WAAA,CAAY,iBAAA,EAAmB,SAAS,CAAC,CAAA;AACjG;AAEA,SAAS,oBAAoB,OAAA,EAA4C;AACxE,EAAA,IAAI,OAAA,KAAY,QAAQ,OAAO,OAAA,KAAY,UAAU,MAAM,WAAA,CAAY,mBAAmB,SAAS,CAAA;AACnG,EAAA,MAAM,MAAA,GAAS,4BAAA,CAA6B,OAAA,CAAQ,MAAA,IAAU,EAAE,CAAA;AAChE,EAAA,MAAM,YAAY,aAAA,CAAc,OAAA,CAAQ,SAAA,EAAW,6BAAA,CAA8B,WAAW,WAAW,CAAA;AACvG,EAAA,MAAM,kBAAkB,aAAA,CAAc,OAAA,CAAQ,eAAA,EAAiB,6BAAA,CAA8B,iBAAiB,iBAAiB,CAAA;AAC/H,EAAA,MAAM,WAAW,aAAA,CAAc,OAAA,CAAQ,mBAAA,EAAqB,6BAAA,CAA8B,qBAAqB,qBAAqB,CAAA;AAGpI,EAAA,IAAI,eAAA,IAAA,CAAoB,qBAAqB,CAAA,IAAK,MAAA,CAAO,eAAe,MAAM,WAAA,CAAY,sBAAsB,iBAAiB,CAAA;AAEjI,EAAA,IAAI,YAAY,MAAA,CAAO,gBAAA,EAAkB,MAAM,WAAA,CAAY,sBAAsB,qBAAqB,CAAA;AACtG,EAAA,IAAI,CAAC,UAAA,CAAW,OAAA,CAAQ,UAAA,EAAY,CAAC,iBAAA,EAAmB,qBAAA,EAAuB,mBAAA,EAAqB,qBAAA,EAAuB,qBAAA,EAAuB,sBAAA,EAAwB,uBAAA,EAAyB,eAAe,CAAC,CAAA,EAAG;AACrN,IAAA,MAAM,WAAA,CAAY,mBAAmB,YAAY,CAAA;AAAA,EAClD;AACA,EAAA,IAAI,CAAC,UAAA,CAAW,OAAA,CAAQ,aAAA,EAAe,CAAC,0BAA0B,CAAC,CAAA,EAAG,MAAM,WAAA,CAAY,iBAAA,EAAmB,eAAe,CAAA;AAC1H,EAAA,IAAI,CAAC,UAAA,CAAW,OAAA,CAAQ,SAAA,EAAW,CAAC,OAAO,CAAC,CAAA,EAAG,MAAM,WAAA,CAAY,iBAAA,EAAmB,WAAW,CAAA;AAC/F,EAAA,IAAI,OAAO,OAAA,CAAQ,QAAA,KAAa,QAAA,IAAY,OAAA,CAAQ,aAAa,EAAA,EAAI,MAAM,WAAA,CAAY,iBAAA,EAAmB,UAAU,CAAA;AACpH,EAAA,MAAM,gBAAgB,OAAA,CAAQ,aAAA;AAC9B,EAAA,IAAI,OAAO,kBAAkB,SAAA,IAAa,OAAO,kBAAkB,UAAA,EAAY,MAAM,WAAA,CAAY,iBAAA,EAAmB,eAAe,CAAA;AACnI,EAAA,IAAI,OAAA,CAAQ,cAAA,KAAmB,MAAA,IAAa,OAAO,OAAA,CAAQ,mBAAmB,UAAA,EAAY,MAAM,WAAA,CAAY,iBAAA,EAAmB,gBAAgB,CAAA;AAC/I,EAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,MAAA,IAAa,EAAE,OAAA,CAAQ,kBAAkB,WAAA,CAAA,EAAc,MAAM,WAAA,CAAY,iBAAA,EAAmB,QAAQ,CAAA;AAC3H,EAAA,IAAI,UAAA;AACJ,EAAA,IAAI,OAAA,CAAQ,eAAe,MAAA,EAAW;AACrC,IAAA,IAAI,OAAO,OAAA,CAAQ,UAAA,KAAe,YAAY,MAAM,WAAA,CAAY,mBAAmB,YAAY,CAAA;AAC/F,IAAA,UAAA,GAAa,OAAA,CAAQ,UAAA;AAAA,EACtB,CAAA,MAAO;AACN,IAAA,UAAA,GAAa,uBAAA,CAAwB,EAAE,QAAA,EAAU,MAAA,CAAO,mBAAA,EAAqB,WAAA,EAAa,MAAA,CAAO,gBAAA,EAAkB,MAAA,EAAQ,OAAA,CAAQ,MAAA,EAAS,CAAA;AAAA,EAC7I;AACA,EAAA,IAAI,mBAAmB,OAAA,CAAQ,gBAAA;AAC/B,EAAA,IAAI,qBAAqB,MAAA,EAAW;AACnC,IAAA,IAAI,UAAA,KAAe,MAAA,EAAW,MAAM,WAAA,CAAY,mBAAmB,kBAAkB,CAAA;AACrF,IAAA,MAAM,IAAA,GAAO,UAAA;AACb,IAAA,gBAAA,GAAmB,MAAM,CAAA,IAAA,EAAO,IAAA,EAAM,CAAA,CAAA;AAAA,EACvC,CAAA,MAAA,IAAW,OAAO,gBAAA,KAAqB,UAAA,EAAY;AAClD,IAAA,MAAM,WAAA,CAAY,mBAAmB,kBAAkB,CAAA;AAAA,EACxD;AACA,EAAA,OAAO,MAAA,CAAO;AAAA,IACb,YAAY,OAAA,CAAQ,UAAA;AAAA,IACpB,eAAe,OAAA,CAAQ,aAAA;AAAA,IACvB,WAAW,OAAA,CAAQ,SAAA;AAAA,IACnB,KAAA,EAAO,kBAAA,CAAmB,OAAA,CAAQ,KAAK,CAAA;AAAA,IACvC,UAAU,OAAA,CAAQ,QAAA;AAAA,IAClB,QAAQ,OAAA,CAAQ,MAAA;AAAA,IAChB,gBAAgB,OAAA,CAAQ,cAAA;AAAA,IACxB,aAAA;AAAA,IACA,MAAA;AAAA,IACA,UAAA;AAAA,IACA,SAAA;AAAA,IACA,eAAA;AAAA,IACA,QAAA;AAAA,IACA,gBAAA;AAAA,IACA,QAAQ,OAAA,CAAQ;AAAA,GAChB,CAAA;AACF;AAoEA,eAAsB,sBAAsB,OAAA,EAAuE;AAClH,EAAA,MAAM,MAAA,GAAS,WAAW,OAAO,CAAA;AACjC,EAAA,MAAM,WAAqB,EAAE,OAAA,EAAS,GAAG,SAAA,EAAW,CAAA,EAAG,UAAU,CAAA,EAAG,WAAA,EAAa,GAAG,YAAA,EAAc,CAAA,EAAG,WAAW,CAAA,EAAG,SAAA,EAAW,GAAG,eAAA,EAAiB,CAAA,EAAG,iBAAiB,CAAA,EAAE;AACxK,EAAA,MAAMQ,MAAAA,GAAQ,eAAA,CAAgB,MAAA,CAAO,KAAK,CAAA;AAC1C,EAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAQ,MAAA,EAAQA,QAAO,CAAC,WAAA,KAAgB,MAAA,CAAO,UAAA,CAAW,eAAA,CAAgB;AAAA,IAC/F,UAAU,MAAA,CAAO,QAAA;AAAA,IACjB,iBAAiB,MAAA,CAAO,eAAA;AAAA,IACxB,OAAO,MAAA,CAAO,SAAA;AAAA,IACd,GAAA,EAAK,IAAI,IAAA,CAAKA,MAAK;AAAA,GACpB,EAAG,WAAW,CAAC,CAAA;AACf,EAAA,IAAI,CAAC,OAAA,CAAQ,EAAA,EAAI,MAAM,WAAA,CAAY,QAAQ,MAAA,KAAW,SAAA,GAAY,uBAAA,GAA0B,sBAAA,EAAwB,iBAAiB,CAAA;AACrI,EAAA,MAAM,IAAA,GAAO,eAAA,CAAgB,OAAA,CAAQ,KAAK,CAAA;AAC1C,EAAA,IAAI,IAAA,KAAS,MAAA,EAAW,MAAM,WAAA,CAAY,wBAAwB,iBAAiB,CAAA;AACnF,EAAA,QAAA,CAAS,UAAU,IAAA,CAAK,MAAA;AAExB,EAAA,MAAM,cAAA,GAAiBA,SAAQ,MAAA,CAAO,eAAA;AACtC,EAAA,KAAA,MAAWG,UAAS,IAAA,EAAM;AACzB,IAAA,IAAI,MAAA,CAAO,QAAQ,OAAA,EAAS;AAI5B,IAAA,IAAIA,WAAU,MAAA,IAAaA,MAAAA,CAAM,OAAO,KAAA,CAAM,KAAA,KAAU,OAAO,QAAA,EAAU;AACxE,MAAA,QAAA,CAAS,SAAA,IAAa,CAAA;AACtB,MAAA;AAAA,IACD;AACA,IAAA,IAAI;AAMH,MAAA,IAAIA,MAAAA,CAAM,QAAQ,KAAA,CAAA,EAAW;AAC5B,QAAA,MAAM,UAAA,CAAW,MAAA,EAAQ,QAAA,CAAS,MAAA,EAAQA,MAAAA,CAAM,QAAQ,cAAA,EAAgB,QAAQ,CAAA,EAAG,QAAA,EAAU,gBAAgB,CAAA;AAC7G,QAAA;AAAA,MACD;AACA,MAAA,MAAM,UAAA,CAAW,MAAA,EAAQA,MAAAA,CAAM,GAAA,EAAK,QAAA,CAAS,MAAA,EAAQA,MAAAA,CAAM,MAAA,EAAQ,cAAA,EAAgBA,MAAAA,CAAM,GAAA,CAAI,oBAAoB,GAAG,QAAQ,CAAA;AAAA,IAC7H,SAAS,OAAA,EAAS;AAEjB,MAAA,IAAI,OAAA,KAAY,YAAY,MAAM,OAAA;AAClC,MAAA,QAAA,CAAS,SAAA,IAAa,CAAA;AAAA,IACvB;AAAA,EACD;AACA,EAAA,OAAO,MAAA,CAAO,EAAE,GAAG,QAAA,EAAU,CAAA;AAC9B;AAGA,SAAS,OAAA,CAAW,MAAA,EAAgBH,MAAAA,EAAe,GAAA,EAA8E;AAChI,EAAA,OAAO,WAAA,CAAYA,MAAAA,EAAO,MAAA,CAAO,MAAA,CAAO,aAAA,EAAe,MAAA,CAAO,MAAA,EAAQ,GAAA,EAAK,MAAM,eAAA,CAAgB,MAAA,CAAO,KAAK,CAAC,CAAA;AAC/G;AAcA,SAAS,QAAA,CAAS,MAAA,EAAgB,MAAA,EAAuB,WAAA,EAAqB,UAAA,EAA8B;AAC3G,EAAA,OAAO,EAAE,MAAA,EAAQ,MAAA,CAAO,EAAE,OAAA,EAAS,OAAO,OAAA,EAAS,KAAA,EAAO,MAAA,CAAO,QAAA,EAAU,OAAO,MAAA,CAAO,KAAA,CAAM,OAAO,CAAA,EAAG,aAAa,UAAA,EAAW;AAClI;AAQA,IAAM,UAAA,GAAqB,MAAA,iBAAO,MAAA,CAAO,MAAA,CAAO,IAAI,CAAW,CAAA;AAG/D,IAAM,kBAAA,GAAqB,CAAA;AAQ3B,eAAe,SAAA,CAAU,QAAgB,KAAA,EAAgC;AACxE,EAAA,MAAMA,MAAAA,GAAQ,eAAA,CAAgB,MAAA,CAAO,KAAK,CAAA;AAC1C,EAAA,IAAI,MAAM,WAAA,GAAcA,MAAAA,IAAS,kBAAA,GAAqB,MAAA,CAAO,OAAO,aAAA,EAAe;AACnF,EAAA,MAAM,EAAE,QAAO,GAAI,KAAA;AACnB,EAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAQ,MAAA,EAAQA,QAAO,CAAC,WAAA,KAAgB,MAAA,CAAO,UAAA,CAAW,mBAAA,CAAoB;AAAA,IACnG,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,OAAO,MAAA,CAAO,KAAA;AAAA,IACd,OAAO,MAAA,CAAO,KAAA;AAAA,IACd,GAAA,EAAK,IAAI,IAAA,CAAKA,MAAK,CAAA;AAAA,IACnB,iBAAiB,MAAA,CAAO;AAAA,GACzB,EAAG,WAAW,CAAC,CAAA;AACf,EAAA,IAAI,OAAA,CAAQ,EAAA,IAAM,OAAA,CAAQ,KAAA,KAAU,IAAA,EAAM;AAEzC,IAAA,MAAM,UAAU,OAAA,CAAQA,MAAAA,GAAQ,MAAA,CAAO,eAAA,EAAiB,MAAM,UAAU,CAAA;AACxE,IAAA,IAAI,OAAA,GAAU,KAAA,CAAM,WAAA,EAAa,KAAA,CAAM,WAAA,GAAc,OAAA;AACrD,IAAA;AAAA,EACD;AACA,EAAA,IAAI,OAAA,CAAQ,EAAA,IAAM,OAAA,CAAQ,KAAA,KAAU,OAAO,MAAM,UAAA;AAClD;AAsBA,eAAe,OAAA,CAAW,KAAa,IAAA,EAA0F;AAChI,EAAA,IAAI,EAAE,GAAA,CAAI,UAAA,GAAa,eAAA,CAAgB,IAAI,MAAA,CAAO,KAAK,CAAA,GAAI,CAAA,CAAA,EAAI,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,QAAQ,UAAA,EAAW;AACtG,EAAA,MAAM,SAAA,CAAU,GAAA,CAAI,MAAA,EAAQ,GAAA,CAAI,KAAK,CAAA;AACrC,EAAA,MAAMA,MAAAA,GAAQ,eAAA,CAAgB,GAAA,CAAI,MAAA,CAAO,KAAK,CAAA;AAC9C,EAAA,MAAM,WAAA,GAAc,IAAI,UAAA,GAAaA,MAAAA;AACrC,EAAA,IAAI,EAAE,cAAc,CAAA,CAAA,EAAI,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,QAAQ,UAAA,EAAW;AAC/D,EAAA,MAAM,SAAA,GAAY,cAAc,GAAA,CAAI,MAAA,CAAO,OAAO,aAAA,GAAgB,WAAA,GAAc,GAAA,CAAI,MAAA,CAAO,MAAA,CAAO,aAAA;AAClG,EAAA,OAAO,YAAYA,MAAAA,EAAO,SAAA,EAAW,GAAA,CAAI,MAAA,CAAO,QAAQ,CAAC,OAAA,KAAY,IAAA,CAAK,OAAA,EAASA,MAAK,CAAA,EAAG,MAAM,gBAAgB,GAAA,CAAI,MAAA,CAAO,KAAK,CAAC,CAAA;AACnI;AAEA,SAAS,iBAAA,CAAkB,QAAsD,WAAA,EAA2D;AAC3I,EAAA,IAAI,MAAA,KAAW,YAAY,OAAO,8BAAA;AAClC,EAAA,OAAO,MAAA,KAAW,YAAY,cAAA,GAAiB,WAAA;AAChD;AAcA,eAAe,UAAA,CAAW,MAAA,EAAgB,GAAA,EAAiB,KAAA,EAAiB,QAAA,EAAmC;AAE9G,EAAA,MAAM,aAAa,GAAA,CAAI,oBAAA;AACvB,EAAA,MAAM,GAAA,GAAc,EAAE,MAAA,EAAQ,GAAA,EAAK,OAAO,MAAA,EAAQ,KAAA,CAAM,MAAA,EAAQ,UAAA,EAAY,QAAA,EAAS;AACrF,EAAA,MAAMA,MAAAA,GAAQ,eAAA,CAAgB,MAAA,CAAO,KAAK,CAAA;AAG1C,EAAA,IAAIA,MAAAA,IAAS,UAAA,EAAY,OAAO,aAAA,CAAc,KAAK,8BAA8B,CAAA;AAIjF,EAAA,MAAM,UAAA,GAAa,GAAA,CAAI,YAAA,GAAe,MAAA,CAAO,QAAA;AAC7C,EAAA,IAAIA,SAAQ,UAAA,EAAY;AACvB,IAAA,IAAI,UAAA,IAAc,UAAA,EAAY,OAAO,aAAA,CAAc,KAAK,8BAA8B,CAAA;AACtF,IAAA,OAAO,UAAA,CAAW,GAAA,EAAK,UAAA,EAAY,uBAAA,EAAyB,UAAU,CAAA;AAAA,EACvE;AAEA,EAAA,MAAM,SAAS,MAAM,OAAA,CAAQ,KAAK,CAAC,WAAA,KAAgB,OAAO,aAAA,CAAc,wBAAA;AAAA,IACvE,EAAE,QAAA,EAAU,GAAA,CAAI,QAAA,EAAU,OAAA,EAAS,IAAI,OAAA,EAAS,UAAA,EAAY,GAAA,CAAI,KAAA,CAAM,UAAA,EAAW;AAAA,IACjF;AAAA,GACA,CAAA;AACD,EAAA,IAAI,CAAC,MAAA,CAAO,EAAA,EAAI,OAAO,iBAAA,CAAkB,KAAK,iBAAA,CAAkB,MAAA,CAAO,MAAA,EAAQ,gCAAgC,CAAC,CAAA;AAChH,EAAA,MAAM,SAAA,GAAY,aAAA,CAAc,MAAA,CAAO,KAAK,CAAA;AAC5C,EAAA,IAAI,SAAA,KAAc,MAAA,EAAW,OAAO,iBAAA,CAAkB,KAAK,gCAAgC,CAAA;AAE3F,EAAA,IAAI,UAAA;AACJ,EAAA,KAAA,MAAW,YAAY,SAAA,EAAW;AACjC,IAAA,IAAI,CAAC,UAAA,CAAW,QAAA,EAAU,GAAG,CAAA,EAAG;AAChC,IAAA,MAAM,QAAA,GAAW,MAAM,MAAA,CAAO,GAAA,EAAK,QAAQ,CAAA;AAC3C,IAAA,IAAI,QAAA,CAAS,SAAS,SAAA,EAAW;AACjC,IAAA,IAAI,QAAA,CAAS,SAAS,aAAA,EAAe;AAGpC,MAAA,IAAI,QAAA,CAAS,UAAA,KAAe,8BAAA,IAAkC,QAAA,CAAS,eAAe,4BAAA,EAA8B;AACnH,QAAA,OAAO,iBAAA,CAAkB,GAAA,EAAK,QAAA,CAAS,UAAU,CAAA;AAAA,MAClD;AACA,MAAA,UAAA,KAAe,QAAA,CAAS,UAAA;AACxB,MAAA;AAAA,IACD;AACA,IAAA,MAAMsB,KAAAA,GAAO,QAAA,CAAS,IAAA,KAAS,OAAA,GAAU,MAAM,YAAA,CAAa,GAAA,EAAK,QAAQ,CAAA,GAAI,MAAM,YAAA,CAAa,GAAA,EAAK,QAAA,EAAU,SAAS,IAAI,CAAA;AAC5H,IAAA,IAAIA,UAAS,MAAA,EAAW;AACxB,IAAA,IAAIA,KAAAA,CAAK,SAAS,YAAA,EAAc;AAE/B,MAAA,QAAA,CAAS,SAAA,IAAa,CAAA;AACtB,MAAA;AAAA,IACD;AACA,IAAA,IAAIA,MAAK,IAAA,KAAS,cAAA,EAAgB,OAAO,aAAA,CAAc,KAAK,8BAA8B,CAAA;AAC1F,IAAA,IAAIA,KAAAA,CAAK,eAAe,qBAAA,EAAuB;AAC9C,MAAA,UAAA,KAAeA,KAAAA,CAAK,UAAA;AACpB,MAAA;AAAA,IACD;AACA,IAAA,OAAO,iBAAA,CAAkB,GAAA,EAAKA,KAAAA,CAAK,UAAU,CAAA;AAAA,EAC9C;AACA,EAAA,IAAI,UAAA,KAAe,MAAA,EAAW,OAAO,iBAAA,CAAkB,KAAK,UAAU,CAAA;AAGtE,EAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAAQ,GAAA,EAAK,CAAC,WAAA,EAAa,GAAA,KAC7C,MAAA,CAAO,UAAA,CAAW,iBAAA,CAAkB,EAAE,OAAA,EAAS,GAAA,CAAI,OAAA,EAAS,KAAA,EAAO,GAAA,CAAI,MAAA,CAAO,KAAA,EAAO,KAAA,EAAO,GAAA,CAAI,MAAA,CAAO,KAAA,EAAO,GAAA,EAAK,IAAI,IAAA,CAAK,GAAG,CAAA,EAAE,EAAG,WAAW,CAAC,CAAA;AAKjJ,EAAA,IAAI,CAAC,KAAK,EAAA,IAAM,IAAA,CAAK,WAAW,UAAA,EAAY,OAAO,aAAA,CAAc,GAAA,EAAK,8BAA8B,CAAA;AACpG,EAAA,WAAA,CAAY,IAAA,EAAM,UAAU,WAAW,CAAA;AACxC;AAGA,SAAS,UAAA,CAAW,UAAsC,GAAA,EAA0B;AACnF,EAAA,IAAI,QAAA,CAAS,MAAA,KAAW,QAAA,EAAU,OAAO,KAAA;AAEzC,EAAA,IAAI,QAAA,CAAS,aAAa,GAAA,CAAI,QAAA,IAAY,SAAS,OAAA,KAAY,GAAA,CAAI,SAAS,OAAO,KAAA;AACnF,EAAA,KAAA,MAAW,OAAA,IAAW,SAAS,iBAAA,EAAmB;AACjD,IAAA,IAAI,+BAA+B,OAAA,EAAS,GAAA,CAAI,KAAA,CAAM,SAAS,GAAG,OAAO,IAAA;AAAA,EAC1E;AACA,EAAA,OAAO,KAAA;AACR;AAEA,SAAS,gBAAA,CAAiB,MAAA,EAAgB,GAAA,EAAiB,QAAA,EAA+C;AACzG,EAAA,MAAM,WAAW,MAAA,CAAO,aAAA;AACxB,EAAA,IAAI,OAAO,QAAA,KAAa,SAAA,EAAW,OAAO,QAAA;AAC1C,EAAA,IAAI;AAEH,IAAA,OAAO,KAAA,CAAM,QAAA,EAAU,KAAA,CAAA,EAAW,CAAC,MAAA,CAAO;AAAA,MACzC,gBAAgB,QAAA,CAAS,cAAA;AAAA,MACzB,qBAAqB,QAAA,CAAS,QAAA;AAAA,MAC9B,UAAU,GAAA,CAAI,QAAA;AAAA,MACd,SAAS,GAAA,CAAI,OAAA;AAAA,MACb,OAAO,GAAA,CAAI;AAAA,KACX,CAAC,CAAC,CAAA,KAAM,KAAA;AAAA,EACV,CAAA,CAAA,MAAQ;AACP,IAAA,OAAO,IAAA;AAAA,EACR;AACD;AAEA,eAAe,MAAA,CAAO,KAAa,QAAA,EAAyD;AAC3F,EAAA,MAAM,EAAE,MAAA,EAAQ,GAAA,EAAI,GAAI,GAAA;AAIxB,EAAA,MAAM,SAAS,MAAM,OAAA,CAAQ,KAAK,CAAC,WAAA,KAAgB,OAAO,UAAA,CAAW,aAAA;AAAA,IACpE,EAAE,QAAA,EAAU,GAAA,CAAI,QAAA,EAAU,OAAA,EAAS,GAAA,CAAI,OAAA,EAAS,cAAA,EAAgB,QAAA,CAAS,cAAA,EAAgB,OAAA,EAAS,GAAA,CAAI,OAAA,EAAQ;AAAA,IAC9G;AAAA,GACA,CAAA;AACD,EAAA,IAAI,CAAC,MAAA,CAAO,EAAA,EAAI,OAAO,EAAE,IAAA,EAAM,aAAA,EAAe,UAAA,EAAY,iBAAA,CAAkB,MAAA,CAAO,MAAA,EAAQ,4BAA4B,CAAA,EAAE;AACzH,EAAA,MAAM,OAAA,GAAU,WAAA,CAAY,MAAA,CAAO,KAAK,CAAA;AACxC,EAAA,IAAI,YAAY,MAAA,EAAW,OAAO,EAAE,IAAA,EAAM,aAAA,EAAe,YAAY,4BAAA,EAA6B;AAClG,EAAA,IAAI,OAAA,KAAY,SAAA,EAAW,OAAO,EAAE,MAAM,SAAA,EAAU;AAIpD,EAAA,IAAI,GAAA,CAAI,MAAM,KAAA,KAAU,SAAA,IAAa,iBAAiB,MAAA,EAAQ,GAAA,EAAK,QAAQ,CAAA,EAAG;AAC7E,IAAA,OAAO,EAAE,IAAA,EAAM,aAAA,EAAe,UAAA,EAAY,uBAAA,EAAwB;AAAA,EACnE;AACA,EAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,GAAA,EAAK,CAAC,WAAA,KAAgB,MAAA,CAAO,UAAU,KAAA,CAAM;AAAA,IACzE,gBAAgB,QAAA,CAAS,cAAA;AAAA,IACzB,qBAAqB,QAAA,CAAS,QAAA;AAAA,IAC9B,OAAO,GAAA,CAAI,KAAA;AAAA,IACX,OAAO,GAAA,CAAI,KAAA;AAAA,IACX,OAAO,GAAA,CAAI;AAAA,GACZ,EAAG,WAAW,CAAC,CAAA;AAEf,EAAA,IAAI,CAAC,MAAA,CAAO,EAAA,EAAI,OAAO,EAAE,IAAA,EAAM,aAAA,EAAe,UAAA,EAAY,iBAAA,CAAkB,MAAA,CAAO,MAAA,EAAQ,uBAAuB,CAAA,EAAE;AAEpH,EAAA,MAAM,QAAA,GAAW,iCAAA,CAAkC,MAAA,CAAO,KAAK,CAAA;AAC/D,EAAA,IAAI,SAAS,QAAA,KAAa,OAAA,EAAS,OAAO,EAAE,MAAM,OAAA,EAAQ;AAC1D,EAAA,IAAI,QAAA,CAAS,aAAa,MAAA,EAAQ,OAAO,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,QAAA,CAAS,IAAA,EAAK;AAC7E,EAAA,OAAO,EAAE,IAAA,EAAM,aAAA,EAAe,UAAA,EAAY,uBAAA,EAAwB;AACnE;AAEA,IAAMQ,mBAAkB,MAAA,CAAO,CAAC,YAAY,iBAAA,EAAmB,YAAA,EAAc,cAAc,CAAU,CAAA;AAGrG,SAAS,WAAW,OAAA,EAA6D;AAChF,EAAA,IAAI,CAAC,OAAA,CAAQ,EAAA,EAAI,OAAO,EAAE,IAAA,EAAM,QAAA,EAAU,UAAA,EAAY,iBAAA,CAAkB,OAAA,CAAQ,MAAA,EAAQ,4BAA4B,CAAA,EAAE;AACtH,EAAA,MAAM,MAAA,GAAS,WAAA,CAAY,OAAA,CAAQ,KAAA,EAAOA,gBAAe,CAAA;AACzD,EAAA,IAAI,MAAA,KAAW,YAAY,OAAO,UAAA;AAClC,EAAA,IAAI,MAAA,KAAW,mBAAmB,OAAO,MAAA;AACzC,EAAA,IAAI,MAAA,KAAW,YAAA,EAAc,OAAO,EAAE,MAAM,YAAA,EAAa;AACzD,EAAA,IAAI,MAAA,KAAW,cAAA,EAAgB,OAAO,EAAE,MAAM,cAAA,EAAe;AAC7D,EAAA,OAAO,EAAE,IAAA,EAAM,QAAA,EAAU,UAAA,EAAY,4BAAA,EAA6B;AACnE;AAEA,eAAe,YAAA,CAAa,KAAa,QAAA,EAAiE;AACzG,EAAA,MAAM,EAAE,MAAA,EAAQ,GAAA,EAAI,GAAI,GAAA;AACxB,EAAA,IAAI,UAAA;AACJ,EAAA,IAAI,IAAA;AACJ,EAAA,IAAI;AACH,IAAA,UAAA,GAAa,KAAA,CAAM,MAAA,CAAO,gBAAA,EAAkB,KAAA,CAAA,EAAW,CAAC,MAAA,CAAO,EAAE,cAAA,EAAgB,QAAA,CAAS,gBAAgB,OAAA,EAAS,GAAA,CAAI,OAAA,EAAS,CAAC,CAAC,CAAA;AAClI,IAAA,IAAI,OAAO,UAAA,KAAe,QAAA,EAAU,MAAM,WAAA,CAAY,mBAAmB,kBAAkB,CAAA;AAC3F,IAAA,IAAA,GAAO,2BAAA,CAA4B;AAAA,MAClC,GAAA;AAAA,MACA,YAAA,EAAc,EAAE,cAAA,EAAgB,QAAA,CAAS,cAAA,EAAgB,UAAU,QAAA,CAAS,QAAA,EAAU,OAAA,EAAS,QAAA,CAAS,OAAA,EAAQ;AAAA,MAChH,QAAQ,MAAA,CAAO,MAAA;AAAA,MACf,gBAAgB,MAAA,CAAO,cAAA;AAAA,MACvB;AAAA,KACA,CAAA,CAAE,OAAA;AAAA,EACJ,CAAA,CAAA,MAAQ;AACP,IAAA,OAAO,EAAE,IAAA,EAAM,QAAA,EAAU,UAAA,EAAY,qBAAA,EAAsB;AAAA,EAC5D;AAEA,EAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAQ,GAAA,EAAK,CAAC,WAAA,EAAa9B,MAAAA,KAAU,MAAA,CAAO,UAAA,CAAW,oBAAA,CAAqB;AAAA,IACjG,UAAA;AAAA,IACA,gBAAgB,QAAA,CAAS,cAAA;AAAA,IACzB,SAAS,GAAA,CAAI,OAAA;AAAA,IACb,UAAU,GAAA,CAAI,QAAA;AAAA,IACd,SAAS,GAAA,CAAI,OAAA;AAAA,IACb,qBAAqB,QAAA,CAAS,QAAA;AAAA,IAC9B,IAAA;AAAA,IACA,WAAA,EAAa,MAAMA,MAAK,CAAA;AAAA,IACxB,kBAAA,EAAoB,KAAA,CAAMA,MAAAA,GAAQ,MAAA,CAAO,OAAO,kBAAkB,CAAA;AAAA,IAClE,SAAA,EAAW,MAAMA,MAAK;AAAA,GACvB,EAAG,GAAA,CAAI,MAAA,EAAQ,WAAW,CAAC,CAAA;AAC3B,EAAA,MAAMsB,KAAAA,GAAO,WAAW,OAAO,CAAA;AAC/B,EAAA,IAAIA,UAAS,UAAA,EAAY;AACxB,IAAA,GAAA,CAAI,SAAS,eAAA,IAAmB,CAAA;AAChC,IAAA,OAAO,MAAA;AAAA,EACR;AACA,EAAA,OAAOA,KAAAA;AACR;AAEA,eAAe,YAAA,CAAa,GAAA,EAAa,QAAA,EAAsC,IAAA,EAA6D;AAC3I,EAAA,MAAM,EAAE,MAAA,EAAQ,GAAA,EAAI,GAAI,GAAA;AACxB,EAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAQ,GAAA,EAAK,CAAC,WAAA,EAAatB,MAAAA,KAAU,MAAA,CAAO,UAAA,CAAW,qBAAA,CAAsB;AAAA,IAClG,gBAAgB,QAAA,CAAS,cAAA;AAAA,IACzB,SAAS,GAAA,CAAI,OAAA;AAAA,IACb,UAAU,GAAA,CAAI,QAAA;AAAA,IACd,SAAS,GAAA,CAAI,OAAA;AAAA,IACb,qBAAqB,QAAA,CAAS,QAAA;AAAA,IAC9B,IAAA;AAAA,IACA,UAAA,EAAY,MAAMA,MAAK;AAAA,GACxB,EAAG,GAAA,CAAI,MAAA,EAAQ,WAAW,CAAC,CAAA;AAC3B,EAAA,MAAMsB,KAAAA,GAAO,WAAW,OAAO,CAAA;AAC/B,EAAA,IAAIA,UAAS,UAAA,EAAY;AACxB,IAAA,GAAA,CAAI,SAAS,eAAA,IAAmB,CAAA;AAChC,IAAA,OAAO,MAAA;AAAA,EACR;AACA,EAAA,OAAOA,KAAAA;AACR;AAOA,SAAS,WAAA,CAAY,OAAA,EAA8B,QAAA,EAAoB,IAAA,EAAuE;AAC7I,EAAA,IAAI,QAAQ,EAAA,IAAM,OAAA,CAAQ,UAAU,IAAA,EAAM,QAAA,CAAS,IAAI,CAAA,IAAK,CAAA;AAAA,OAAA,IACnD,QAAQ,EAAA,IAAM,OAAA,CAAQ,KAAA,KAAU,KAAA,WAAgB,SAAA,IAAa,CAAA;AAAA,gBACxD,SAAA,IAAa,CAAA;AAC5B;AAEA,eAAe,iBAAA,CAAkB,KAAa,UAAA,EAAkD;AAC/F,EAAA,MAAM,EAAE,MAAA,EAAQ,GAAA,EAAI,GAAI,GAAA;AACxB,EAAA,MAAMtB,MAAAA,GAAQ,eAAA,CAAgB,MAAA,CAAO,KAAK,CAAA;AAC1C,EAAA,IAAIA,UAAS,GAAA,CAAI,UAAA,EAAY,OAAO,aAAA,CAAc,KAAK,8BAA8B,CAAA;AACrF,EAAA,MAAM,OAAA,GAAU,IAAI,YAAA,GAAe,CAAA;AACnC,EAAA,IAAI,WAAW,MAAA,CAAO,MAAA,CAAO,mBAAmB,OAAO,aAAA,CAAc,KAAK,UAAU,CAAA;AACpF,EAAA,IAAI,OAAA;AACJ,EAAA,IAAI;AACH,IAAA,OAAA,GAAU,MAAM,MAAA,CAAO,UAAA,EAAY,KAAA,CAAA,EAAW,CAAC,OAAO,CAAC,CAAA;AAAA,EACxD,CAAA,CAAA,MAAQ;AACP,IAAA,OAAA,GAAU,GAAA;AAAA,EACX;AAGA,EAAA,IAAI,OAAO,YAAY,QAAA,IAAY,CAAC,eAAe,OAAO,CAAA,IAAK,UAAU,CAAA,EAAG;AAC3E,IAAA,MAAM,MAAA,GAAS,OAAO,MAAA,CAAO,mBAAA;AAC7B,IAAA,OAAA,GAAU,MAAA,CAAO,MAAA,CAAO,MAAA,GAAS,CAAC,CAAA;AAAA,EACnC;AACA,EAAA,MAAM,gBAAgBA,MAAAA,GAAQ,OAAA;AAC9B,EAAA,IAAI,iBAAiB,GAAA,CAAI,UAAA,EAAY,OAAO,aAAA,CAAc,KAAK,8BAA8B,CAAA;AAC7F,EAAA,OAAO,UAAA,CAAW,GAAA,EAAK,aAAA,EAAe,UAAA,EAAY,aAAa,CAAA;AAChE;AAEA,eAAe,UAAA,CAAW,GAAA,EAAa,aAAA,EAAuB,UAAA,EAAmC,IAAA,EAAiD;AACjJ,EAAA,MAAM,EAAE,MAAA,EAAQ,GAAA,EAAK,MAAA,EAAO,GAAI,GAAA;AAChC,EAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAQ,GAAA,EAAK,CAAC,WAAA,EAAaA,MAAAA,KAAU,MAAA,CAAO,UAAA,CAAW,mBAAA,CAAoB;AAAA,IAChG,SAAS,GAAA,CAAI,OAAA;AAAA,IACb,OAAO,MAAA,CAAO,KAAA;AAAA,IACd,OAAO,MAAA,CAAO,KAAA;AAAA,IACd,GAAA,EAAK,IAAI,IAAA,CAAKA,MAAK,CAAA;AAAA,IACnB,WAAA,EAAa,IAAI,IAAA,CAAK,aAAa,CAAA;AAAA,IACnC;AAAA,GACD,EAAG,WAAW,CAAC,CAAA;AAGf,EAAA,IAAI,CAAC,QAAQ,EAAA,IAAM,OAAA,CAAQ,WAAW,UAAA,EAAY,OAAO,aAAA,CAAc,GAAA,EAAK,8BAA8B,CAAA;AAC1G,EAAA,WAAA,CAAY,OAAA,EAAS,GAAA,CAAI,QAAA,EAAU,IAAI,CAAA;AACxC;AAEA,SAAS,aAAA,CAAc,KAAa,UAAA,EAAkD;AACrF,EAAA,OAAO,WAAW,GAAA,CAAI,MAAA,EAAQ,IAAI,KAAA,EAAO,GAAA,CAAI,UAAU,UAAU,CAAA;AAClE;AAOA,eAAe,UAAA,CAAW,MAAA,EAAgB,KAAA,EAAiB,QAAA,EAAoB,UAAA,EAAkD;AAChI,EAAA,MAAM,SAAA,CAAU,QAAQ,KAAK,CAAA;AAC7B,EAAA,MAAM,SAAS,KAAA,CAAM,MAAA;AACrB,EAAA,MAAMA,MAAAA,GAAQ,eAAA,CAAgB,MAAA,CAAO,KAAK,CAAA;AAC1C,EAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAQ,MAAA,EAAQA,QAAO,CAAC,WAAA,KAAgB,MAAA,CAAO,UAAA,CAAW,mBAAA,CAAoB;AAAA,IACnG,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,OAAO,MAAA,CAAO,KAAA;AAAA,IACd,OAAO,MAAA,CAAO,KAAA;AAAA,IACd,GAAA,EAAK,IAAI,IAAA,CAAKA,MAAK,CAAA;AAAA,IACnB;AAAA,GACD,EAAG,WAAW,CAAC,CAAA;AACf,EAAA,WAAA,CAAY,OAAA,EAAS,UAAU,cAAc,CAAA;AAC9C;;;AClxBA,IAAM+B,QAAAA,GAAU,MAAA,iBAAO,MAAA,CAAO,MAAA,CAAO,IAAI,CAAW,CAAA;AACpD,IAAMC,UAAe,MAAM;AAC1B,EAAA,MAAMD,QAAAA;AACP,CAAA;AAEA,SAASlC,IAAAA,CAAI,QAAgB,GAAA,EAAsB;AAClD,EAAA,OAAO,OAAA,CAAQ,MAAA,EAAQ,GAAA,EAAK,GAAA,EAAKmC,OAAM,CAAA;AACxC;AAEA,SAASC,OAAM,KAAA,EAAwB;AACtC,EAAA,IAAI,CAAC,aAAA,CAAc,KAAK,CAAA,EAAG,MAAMF,QAAAA;AACjC,EAAA,OAAO,KAAA;AACR;AAEA,SAASG,UAAS,KAAA,EAAwB;AACzC,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,IAAI,MAAMH,QAAAA;AACrD,EAAA,OAAO,KAAA;AACR;AAEA,SAASI,MAAAA,CAAM,OAAgB,GAAA,EAAqB;AACnD,EAAA,IAAI,OAAO,UAAU,QAAA,IAAY,CAAC,oBAAoB,KAAK,CAAA,IAAK,KAAA,GAAQ,GAAA,EAAK,MAAMJ,QAAAA;AACnF,EAAA,OAAO,KAAA;AACR;AAEA,SAAS,UAAU,KAAA,EAAwB;AAC1C,EAAA,MAAM,EAAA,GAAK,SAAA,CAAUG,SAAAA,CAAS,KAAK,CAAC,CAAA;AACpC,EAAA,IAAI,CAAC,cAAA,CAAe,EAAE,CAAA,EAAG,MAAMH,QAAAA;AAC/B,EAAA,OAAO,EAAA;AACR;AAoCA,IAAMK,YAAAA,GAAc,GAAA;AAGpB,IAAM,qBAAA,GAAwB,CAAA,GAAA,EAAM,GAAA,CAAI,MAAA,CAAO,EAAE,CAAC,CAAA,CAAA;AAElD,SAAS,iBAAiB,IAAA,EAAoC;AAC7D,EAAA,MAAM,MAAA,GAASH,OAAM,IAAI,CAAA;AACzB,EAAA,MAAM,KAAA,GAAQA,MAAAA,CAAMpC,IAAAA,CAAI,MAAA,EAAQ,OAAO,CAAC,CAAA;AACxC,EAAA,OAAO,MAAA,CAAO;AAAA,IACb,UAAA,EAAYqC,SAAAA,CAASrC,IAAAA,CAAI,MAAA,EAAQ,YAAY,CAAC,CAAA;AAAA,IAC9C,QAAA,EAAUqC,SAAAA,CAASrC,IAAAA,CAAI,MAAA,EAAQ,UAAU,CAAC,CAAA;AAAA,IAC1C,OAAA,EAASqC,SAAAA,CAASrC,IAAAA,CAAI,MAAA,EAAQ,SAAS,CAAC,CAAA;AAAA,IACxC,OAAO,MAAA,CAAO,EAAE,OAAOqC,SAAAA,CAASrC,IAAAA,CAAI,OAAO,OAAO,CAAC,CAAA,EAAG,KAAA,EAAOsC,OAAMtC,IAAAA,CAAI,KAAA,EAAO,OAAO,CAAA,EAAG,CAAC,GAAG;AAAA,GAC5F,CAAA;AACF;AAEA,SAAS,cAAA,CAAe,MAAe,MAAA,EAA4C;AAClF,EAAA,MAAM,MAAA,GAASoC,OAAM,IAAI,CAAA;AACzB,EAAA,MAAM,IAAA,GAAOpC,IAAAA,CAAI,MAAA,EAAQ,MAAM,CAAA;AAC/B,EAAA,IAAI,OAAO,IAAA,KAAS,QAAA,EAAU,MAAMkC,QAAAA;AACpC,EAAA,MAAM,OAAA,GAAUG,SAAAA,CAASrC,IAAAA,CAAI,MAAA,EAAQ,SAAS,CAAC,CAAA;AAC/C,EAAA,MAAM,eAAesC,MAAAA,CAAMtC,IAAAA,CAAI,MAAA,EAAQ,cAAc,GAAG,CAAC,CAAA;AAGzD,EAAA,0BAAA,CAA2B,EAAE,SAAA,EAAW,qBAAA,EAAuB,gBAAA,EAAkB,CAAA,EAAG,OAAA,EAAS,UAAA,EAAY,MAAA,CAAO,UAAA,EAAY,OAAA,EAAS,YAAA,GAAe,CAAA,EAAG,CAAA;AACvJ,EAAA,OAAO,MAAA,CAAO;AAAA,IACb,GAAG,MAAA;AAAA,IACH,cAAA,EAAgBqC,SAAAA,CAASrC,IAAAA,CAAI,MAAA,EAAQ,gBAAgB,CAAC,CAAA;AAAA,IACtD,OAAA;AAAA,IACA,qBAAqBsC,MAAAA,CAAMtC,IAAAA,CAAI,MAAA,EAAQ,qBAAqB,GAAG,CAAC,CAAA;AAAA,IAChE,IAAA;AAAA,IACA,YAAA;AAAA,IACA,oBAAA,EAAsB,SAAA,CAAUA,IAAAA,CAAI,MAAA,EAAQ,oBAAoB,CAAC,CAAA;AAAA,IACjE,gBAAA,EAAkB,SAAA,CAAUA,IAAAA,CAAIoC,MAAAA,CAAMpC,IAAAA,CAAI,QAAQ,OAAO,CAAC,CAAA,EAAG,WAAW,CAAC;AAAA,GACzE,CAAA;AACF;AAOO,SAAS,mBAAmB,KAAA,EAA2D;AAC7F,EAAA,MAAM,QAAmB,EAAC;AAC1B,EAAA,IAAI;AACH,IAAA,IAAI,CAAC,OAAA,CAAQ,KAAK,CAAA,EAAG,OAAO,KAAA,CAAA;AAC5B,IAAA,MAAM,MAAA,GAASA,IAAAA,CAAI,KAAA,EAAO,QAAQ,CAAA;AAClC,IAAA,IAAI,OAAO,MAAA,KAAW,QAAA,IAAY,CAAC,mBAAA,CAAoB,MAAM,CAAA,IAAK,MAAA,GAAS,CAAA,IAAK,MAAA,GAASuC,YAAAA,EAAa,OAAO,KAAA,CAAA;AAC7G,IAAA,KAAA,IAAS,KAAA,GAAQ,CAAA,EAAG,KAAA,GAAQ,MAAA,EAAQ,KAAA,IAAS,CAAA,EAAG,KAAA,CAAM,IAAA,CAAKvC,IAAAA,CAAI,KAAA,EAAO,CAAA,EAAG,KAAK,EAAE,CAAC,CAAA;AAAA,EAClF,CAAA,CAAA,MAAQ;AACP,IAAA,OAAO,MAAA;AAAA,EACR;AACA,EAAA,OAAO,UAAA,CAAW,KAAA,CAAM,GAAA,CAAI,CAAC,IAAA,KAA6B;AACzD,IAAA,IAAI,MAAA;AACJ,IAAA,IAAI;AACH,MAAA,MAAA,GAAS,iBAAiB,IAAI,CAAA;AAAA,IAC/B,CAAA,CAAA,MAAQ;AACP,MAAA,OAAO,MAAA;AAAA,IACR;AACA,IAAA,IAAI;AACH,MAAA,OAAO,MAAA,CAAO,EAAE,MAAA,EAAQ,MAAA,EAAQ,eAAe,IAAA,EAAM,MAAM,GAAG,CAAA;AAAA,IAC/D,CAAA,CAAA,MAAQ;AACP,MAAA,OAAO,MAAA,CAAO,EAAE,MAAA,EAAQ,MAAA,EAAQ,QAAW,CAAA;AAAA,IAC5C;AAAA,EACD,CAAC,CAAC,CAAA;AACH;AAgCA,IAAMwC,YAAW,MAAA,CAAO,CAAC,QAAA,EAAU,QAAA,EAAU,SAAS,CAAU,CAAA;AAChE,IAAM,YAAA,GAAiC,MAAA,CAAO,EAAE,IAAA,EAAM,gBAAgB,CAAA;AACtE,IAAMC,WAAAA,GAA+B,MAAA,CAAO,EAAE,IAAA,EAAM,cAAc,CAAA;AAQ3D,SAAS,mBAAA,CAAoB,OAAgB,KAAA,EAAmH;AACtK,EAAA,IAAI;AACH,IAAA,IAAI,KAAA,KAAU,MAAM,OAAO,YAAA;AAC3B,IAAA,MAAM,QAAA,GAAWL,OAAM,KAAK,CAAA;AAC5B,IAAA,MAAM,aAAA,GAAgBA,MAAAA,CAAMpC,IAAAA,CAAI,QAAA,EAAU,eAAe,CAAC,CAAA;AAC1D,IAAA,MAAM,KAAA,GAAQ;AAAA,MAACA,IAAAA,CAAI,UAAU,gBAAgB,CAAA;AAAA,MAAGA,IAAAA,CAAI,UAAU,UAAU,CAAA;AAAA,MAAGA,IAAAA,CAAI,UAAU,SAAS,CAAA;AAAA,MACjGA,IAAAA,CAAI,eAAe,gBAAgB,CAAA;AAAA,MAAGA,IAAAA,CAAI,eAAe,UAAU,CAAA;AAAA,MAAGA,IAAAA,CAAI,eAAe,SAAS;AAAA,KAAC;AACpG,IAAA,KAAA,MAAW,IAAA,IAAQ,KAAA,EAAOqC,SAAAA,CAAS,IAAI,CAAA;AACvC,IAAA,IAAI,KAAA,CAAM,CAAC,CAAA,KAAM,KAAA,CAAM,cAAA,IAAkB,KAAA,CAAM,CAAC,CAAA,KAAM,KAAA,CAAM,QAAA,IAAY,KAAA,CAAM,CAAC,CAAA,KAAM,KAAA,CAAM,OAAA,IACvF,KAAA,CAAM,CAAC,CAAA,KAAM,KAAA,CAAM,cAAA,IAAkB,KAAA,CAAM,CAAC,CAAA,KAAM,KAAA,CAAM,QAAA,IAAY,KAAA,CAAM,CAAC,CAAA,KAAM,MAAM,OAAA,EAAS;AACnG,MAAA,OAAO,YAAA;AAAA,IACR;AACA,IAAA,MAAM,MAAA,GAASrC,IAAAA,CAAI,QAAA,EAAU,QAAQ,CAAA;AACrC,IAAA,IAAI,CAAC,OAAA,CAAQwC,SAAAA,EAAU,MAAM,GAAG,OAAOC,WAAAA;AACvC,IAAA,IAAIzC,IAAAA,CAAI,aAAA,EAAe,iBAAiB,CAAA,KAAM,MAAM,OAAOyC,WAAAA;AAC3D,IAAA,OAAO,MAAA,CAAO;AAAA,MACb,IAAA,EAAM,IAAA;AAAA,MACN,MAAA;AAAA,MACA,qBAAqBH,MAAAA,CAAMtC,IAAAA,CAAI,QAAA,EAAU,qBAAqB,GAAG,CAAC,CAAA;AAAA,MAClE,eAAe,MAAA,CAAO;AAAA,QACrB,SAASsC,MAAAA,CAAMtC,IAAAA,CAAI,aAAA,EAAe,SAAS,GAAG,CAAC,CAAA;AAAA,QAC/C,cAAA,EAAgBqC,SAAAA,CAASrC,IAAAA,CAAI,aAAA,EAAe,gBAAgB,CAAC,CAAA;AAAA,QAC7D,eAAA,EAAiB,IAAA;AAAA,QACjB,SAAA,EAAWqC,SAAAA,CAASrC,IAAAA,CAAI,aAAA,EAAe,WAAW,CAAC;AAAA,OACnD;AAAA,KACD,CAAA;AAAA,EACF,CAAA,CAAA,MAAQ;AACP,IAAA,OAAOyC,WAAAA;AAAA,EACR;AACD;AAWA,IAAM,mBAAmB,MAAA,CAAO,CAAC,aAAA,EAAe,iBAAA,EAAmB,aAAa,CAAU,CAAA;AAE1F,IAAM,aAAA,GAAgB,EAAA;AAGf,SAAS,eAAe,KAAA,EAA4C;AAC1E,EAAA,IAAI;AACH,IAAA,MAAM,MAAA,GAASL,OAAM,KAAK,CAAA;AAC1B,IAAA,MAAM,EAAA,GAAKpC,IAAAA,CAAI,MAAA,EAAQ,IAAI,CAAA;AAC3B,IAAA,IAAI,OAAO,KAAA,EAAO;AACjB,MAAA,MAAM,IAAA,GAAOA,IAAAA,CAAI,MAAA,EAAQ,MAAM,CAAA;AAC/B,MAAA,OAAO,OAAA,CAAQ,gBAAA,EAAkB,IAAI,CAAA,GAAI,MAAA,CAAO,EAAE,EAAA,EAAI,KAAA,EAAgB,IAAA,EAAiE,CAAA,GAAI,KAAA,CAAA;AAAA,IAC5I;AACA,IAAA,IAAI,EAAA,KAAO,MAAM,OAAO,KAAA,CAAA;AACxB,IAAA,MAAM,WAAA,GAAcoC,MAAAA,CAAMpC,IAAAA,CAAI,MAAA,EAAQ,aAAa,CAAC,CAAA;AACpD,IAAA,IAAIA,IAAAA,CAAI,WAAA,EAAa,MAAM,CAAA,KAAM,KAAK,OAAO,KAAA,CAAA;AAC7C,IAAA,MAAM,IAAA,GAAOA,IAAAA,CAAI,WAAA,EAAa,WAAW,CAAA;AACzC,IAAA,IAAI,CAAC,OAAA,CAAQ,IAAI,CAAA,EAAG,OAAO,KAAA,CAAA;AAC3B,IAAA,MAAM,MAAA,GAASA,IAAAA,CAAI,IAAA,EAAM,QAAQ,CAAA;AACjC,IAAA,IAAI,OAAO,MAAA,KAAW,QAAA,IAAY,CAAC,mBAAA,CAAoB,MAAM,CAAA,IAAK,MAAA,GAAS,CAAA,IAAK,MAAA,GAAS,aAAA,EAAe,OAAO,KAAA,CAAA;AAC/G,IAAA,MAAM,YAAsC,EAAC;AAC7C,IAAA,KAAA,IAAS,KAAA,GAAQ,CAAA,EAAG,KAAA,GAAQ,MAAA,EAAQ,SAAS,CAAA,EAAG;AAC/C,MAAA,MAAM,OAAOoC,MAAAA,CAAMpC,IAAAA,CAAI,MAAM,CAAA,EAAG,KAAK,EAAE,CAAC,CAAA;AACxC,MAAA,MAAM,MAAA,GAASA,IAAAA,CAAI,IAAA,EAAM,QAAQ,CAAA;AACjC,MAAA,IAAI,MAAA,KAAW,CAAA,IAAK,MAAA,KAAW,CAAA,EAAG,OAAO,KAAA,CAAA;AACzC,MAAA,SAAA,CAAU,IAAA,CAAK,MAAA,CAAO,EAAE,OAAA,EAASqC,SAAAA,CAASrC,IAAAA,CAAI,IAAA,EAAM,SAAS,CAAC,CAAA,EAAG,MAAA,EAAQ,CAAC,CAAA;AAAA,IAC3E;AACA,IAAA,OAAO,MAAA,CAAO;AAAA,MACb,EAAA,EAAI,IAAA;AAAA,MACJ,aAAa,MAAA,CAAiC;AAAA,QAC7C,GAAA,EAAKqC,SAAAA,CAASrC,IAAAA,CAAI,WAAA,EAAa,KAAK,CAAC,CAAA;AAAA,QACrC,QAAA,EAAUqC,SAAAA,CAASrC,IAAAA,CAAI,WAAA,EAAa,UAAU,CAAC,CAAA;AAAA,QAC/C,IAAA,EAAM,GAAA;AAAA,QACN,SAAA,EAAW,WAAW,SAAS;AAAA,OAC/B;AAAA,KACD,CAAA;AAAA,EACF,CAAA,CAAA,MAAQ;AACP,IAAA,OAAO,MAAA;AAAA,EACR;AACD;AAGA,IAAM,kBAAA,GAAqB,GAAA;AAOpB,SAAS,gBAAgB,KAAA,EAA4G;AAC3I,EAAA,IAAI;AACH,IAAA,MAAM,MAAA,GAASoC,OAAM,KAAK,CAAA;AAC1B,IAAA,MAAM,KAAA,GAAQpC,IAAAA,CAAI,MAAA,EAAQ,OAAO,CAAA;AACjC,IAAA,IAAI,UAAU,KAAA,EAAO,OAAO,OAAO,EAAE,KAAA,EAAO,OAAgB,CAAA;AAC5D,IAAA,IAAI,KAAA,KAAU,MAAM,OAAO,KAAA,CAAA;AAC3B,IAAA,MAAM,OAAA,GAAUqC,SAAAA,CAASrC,IAAAA,CAAI,MAAA,EAAQ,SAAS,CAAC,CAAA;AAC/C,IAAA,OAAO,OAAA,CAAQ,SAAS,kBAAA,GAAqB,KAAA,CAAA,GAAY,OAAO,EAAE,KAAA,EAAO,IAAA,EAAe,OAAA,EAAS,CAAA;AAAA,EAClG,CAAA,CAAA,MAAQ;AACP,IAAA,OAAO,MAAA;AAAA,EACR;AACD;AAGO,SAAS,cAAc,KAAA,EAAoC;AACjE,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,GAAW,KAAA,GAAQ,MAAA;AAC5C;AAEA,IAAM,iBAAA,GAAoB,OAAO,CAAC,eAAA,EAAiB,WAAW,aAAA,EAAe,aAAA,EAAe,iBAAiB,CAAU,CAAA;AACvH,IAAM,gBAAA,GAAmB,MAAA,CAAO,CAAC,kBAAA,EAAoB,SAAS,CAAU,CAAA;AAExE,IAAM,sBAAA,GAAyB,GAAA;AAQxB,SAAS,oBAAoB,KAAA,EAAoD;AACvF,EAAA,IAAI;AACH,IAAA,MAAM,MAAA,GAASoC,OAAM,KAAK,CAAA;AAC1B,IAAA,MAAM,IAAA,GAAOpC,IAAAA,CAAI,MAAA,EAAQ,MAAM,CAAA;AAC/B,IAAA,IAAI,SAAS,UAAA,EAAY;AACxB,MAAA,MAAM,MAAA,GAASA,IAAAA,CAAI,MAAA,EAAQ,QAAQ,CAAA;AACnC,MAAA,IAAI,OAAO,MAAA,KAAW,QAAA,IAAY,CAAC,mBAAA,CAAoB,MAAM,CAAA,IAAK,MAAA,GAAS,GAAA,IAAO,MAAA,GAAS,GAAA,EAAK,OAAO,KAAA,CAAA;AACvG,MAAA,MAAM,UAAA,GAAaA,IAAAA,CAAI,MAAA,EAAQ,YAAY,CAAA;AAC3C,MAAA,MAAM,OAAO,OAAO,UAAA,KAAe,YAAY,UAAA,CAAW,MAAA,IAAU,yBAAyB,UAAA,GAAa,IAAA;AAC1G,MAAA,OAAO,OAA+B,EAAE,IAAA,EAAM,YAAY,MAAA,EAAQ,UAAA,EAAY,MAAM,CAAA;AAAA,IACrF;AACA,IAAA,IAAI,SAAS,UAAA,EAAY;AACxB,MAAA,MAAM,MAAA,GAASA,IAAAA,CAAI,MAAA,EAAQ,QAAQ,CAAA;AACnC,MAAA,OAAO,OAAA,CAAQ,gBAAA,EAAkB,MAAM,CAAA,GAAI,MAAA,CAA+B,EAAE,IAAA,EAAM,UAAA,EAAY,MAAA,EAAkD,CAAA,GAAI,KAAA,CAAA;AAAA,IACrJ;AACA,IAAA,IAAI,OAAA,CAAQ,mBAAmB,IAAI,CAAA,SAAU,MAAA,CAA+B,EAAE,MAA+B,CAAA;AAC7G,IAAA,OAAO,KAAA,CAAA;AAAA,EACR,CAAA,CAAA,MAAQ;AACP,IAAA,OAAO,MAAA;AAAA,EACR;AACD;;;AChIA,IAAM,iBAAA,GAAoB,CAAA;AAW1B,IAAM,qBAAqB,CAAA,GAAI,iBAAA;AAGxB,IAAM,iCAAiC,MAAA,CAAO;AAAA,EACpD,SAAA,EAAW,EAAA;AAAA,EACX,eAAA,EAAiB;AAClB,CAAC;AAwBD,SAAS0C,WAAAA,CAAW,OAAgB,KAAA,EAAmC;AACtE,EAAA,IAAI,KAAA,KAAU,IAAA,IAAQ,OAAO,KAAA,KAAU,UAAU,OAAO,KAAA;AACxD,EAAA,KAAA,MAAW,IAAA,IAAQ,OAAO,IAAI,OAAQ,MAAkC,IAAI,CAAA,KAAM,YAAY,OAAO,KAAA;AACrG,EAAA,OAAO,IAAA;AACR;AAEA,SAASC,cAAAA,CAAc,KAAA,EAAgB,QAAA,EAAkBhD,MAAAA,EAAuB;AAC/E,EAAA,MAAM,IAAA,GAAO,UAAU,KAAK,CAAA;AAC5B,EAAA,MAAM,QAAA,GAAW,IAAA,KAAS,MAAA,GAAY,QAAA,GAAW,IAAA;AACjD,EAAA,qBAAA,CAAsB,UAAUA,MAAK,CAAA;AACrC,EAAA,OAAO,QAAA;AACR;AAOA,SAASiD,YAAW,OAAA,EAA8C;AACjE,EAAA,OAAO,KAAA,CAAM,MAAMC,oBAAAA,CAAoB,OAAO,GAAG,MAAM,aAAA,CAAc,iBAAA,EAAmB,SAAS,CAAC,CAAA;AACnG;AAEA,SAASA,qBAAoB,OAAA,EAA8C;AAC1E,EAAA,IAAI,OAAA,KAAY,QAAQ,OAAO,OAAA,KAAY,UAAU,MAAM,aAAA,CAAc,mBAAmB,SAAS,CAAA;AACrG,EAAA,MAAM,MAAA,GAAS,4BAAA,CAA6B,OAAA,CAAQ,MAAA,IAAU,EAAE,CAAA;AAChE,EAAA,MAAM,YAAYF,cAAAA,CAAc,OAAA,CAAQ,SAAA,EAAW,8BAAA,CAA+B,WAAW,WAAW,CAAA;AACxG,EAAA,MAAM,kBAAkBA,cAAAA,CAAc,OAAA,CAAQ,eAAA,EAAiB,8BAAA,CAA+B,iBAAiB,iBAAiB,CAAA;AAKhI,EAAA,IAAI,eAAA,IAAmB,MAAA,CAAO,gBAAA,GAAA,CAAoB,kBAAA,GAAqB,CAAA,IAAK,OAAO,aAAA,EAAe,MAAM,WAAA,CAAY,oBAAA,EAAsB,iBAAiB,CAAA;AAC3J,EAAA,IAAI,CAACD,WAAAA,CAAW,OAAA,CAAQ,UAAA,EAAY,CAAC,sBAAA,EAAwB,0BAAA,EAA4B,cAAA,EAAgB,eAAA,EAAiB,eAAA,EAAiB,sBAAsB,CAAC,CAAA,EAAG;AACpK,IAAA,MAAM,aAAA,CAAc,mBAAmB,YAAY,CAAA;AAAA,EACpD;AACA,EAAA,IAAI,CAACA,WAAAA,CAAW,OAAA,CAAQ,aAAA,EAAe,CAAC,kBAAkB,CAAC,CAAA,EAAG,MAAM,aAAA,CAAc,iBAAA,EAAmB,eAAe,CAAA;AACpH,EAAA,IAAI,CAACA,WAAAA,CAAW,OAAA,CAAQ,aAAA,EAAe,CAAC,WAAW,CAAC,CAAA,EAAG,MAAM,aAAA,CAAc,iBAAA,EAAmB,eAAe,CAAA;AAC7G,EAAA,IAAI,CAACA,WAAAA,CAAW,OAAA,CAAQ,MAAA,EAAQ,CAAC,MAAM,CAAC,CAAA,EAAG,MAAM,aAAA,CAAc,iBAAA,EAAmB,QAAQ,CAAA;AAC1F,EAAA,IAAI,CAACA,WAAAA,CAAW,OAAA,CAAQ,QAAA,EAAU,CAAC,SAAS,CAAC,CAAA,EAAG,MAAM,aAAA,CAAc,iBAAA,EAAmB,UAAU,CAAA;AACjG,EAAA,IAAI,CAACA,WAAAA,CAAW,OAAA,CAAQ,SAAA,EAAW,CAAC,MAAM,CAAC,CAAA,EAAG,MAAM,aAAA,CAAc,iBAAA,EAAmB,WAAW,CAAA;AAChG,EAAA,IAAI,OAAO,OAAA,CAAQ,QAAA,KAAa,QAAA,IAAY,OAAA,CAAQ,aAAa,EAAA,EAAI,MAAM,aAAA,CAAc,iBAAA,EAAmB,UAAU,CAAA;AACtH,EAAA,IAAI,OAAA,CAAQ,OAAA,KAAY,MAAA,IAAa,OAAO,OAAA,CAAQ,YAAY,UAAA,EAAY,MAAM,aAAA,CAAc,iBAAA,EAAmB,SAAS,CAAA;AAC5H,EAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,MAAA,IAAa,EAAE,OAAA,CAAQ,kBAAkB,WAAA,CAAA,EAAc,MAAM,aAAA,CAAc,iBAAA,EAAmB,QAAQ,CAAA;AAC7H,EAAA,MAAM,QAAQ,OAAA,CAAQ,KAAA;AACtB,EAAA,IAAI,KAAA,KAAU,QAAQ,OAAO,KAAA,KAAU,UAAU,MAAM,aAAA,CAAc,mBAAmB,OAAO,CAAA;AAC/F,EAAA,MAAM,MAAO,KAAA,CAA4B,GAAA;AACzC,EAAA,IAAI,OAAO,GAAA,KAAQ,UAAA,EAAY,MAAM,aAAA,CAAc,mBAAmB,WAAW,CAAA;AACjF,EAAA,IAAI,UAAA;AACJ,EAAA,IAAI,OAAA,CAAQ,eAAe,MAAA,EAAW;AACrC,IAAA,IAAI,OAAO,OAAA,CAAQ,UAAA,KAAe,YAAY,MAAM,aAAA,CAAc,mBAAmB,YAAY,CAAA;AACjG,IAAA,UAAA,GAAa,OAAA,CAAQ,UAAA;AAAA,EACtB,CAAA,MAAO;AACN,IAAA,UAAA,GAAa,uBAAA,CAAwB,EAAE,QAAA,EAAU,MAAA,CAAO,qBAAA,EAAuB,WAAA,EAAa,MAAA,CAAO,gBAAA,EAAkB,MAAA,EAAQ,OAAA,CAAQ,MAAA,EAAS,CAAA;AAAA,EAC/I;AACA,EAAA,OAAO,MAAA,CAAO;AAAA,IACb,YAAY,OAAA,CAAQ,UAAA;AAAA,IACpB,eAAe,OAAA,CAAQ,aAAA;AAAA,IACvB,eAAe,OAAA,CAAQ,aAAA;AAAA,IACvB,QAAQ,OAAA,CAAQ,MAAA;AAAA,IAChB,UAAU,OAAA,CAAQ,QAAA;AAAA,IAClB,WAAW,OAAA,CAAQ,SAAA;AAAA,IACnB,OAAO,MAAA,CAAO,EAAE,MAAA,EAAQ,KAAA,EAAO,KAA2C,CAAA;AAAA,IAC1E,UAAU,OAAA,CAAQ,QAAA;AAAA,IAClB,MAAA;AAAA,IACA,UAAA;AAAA,IACA,SAAA;AAAA,IACA,eAAA;AAAA,IACA,SAAS,OAAA,CAAQ,OAAA;AAAA,IACjB,QAAQ,OAAA,CAAQ;AAAA,GAChB,CAAA;AACF;AAGA,SAASI,WAAU,KAAA,EAAsB;AACxC,EAAA,IAAI,KAAA;AACJ,EAAA,IAAI;AACH,IAAA,KAAA,GAAQ,MAAM,KAAA,CAAM,GAAA,EAAK,KAAA,CAAM,MAAA,EAAQ,EAAE,CAAA;AAAA,EAC1C,CAAA,CAAA,MAAQ;AACP,IAAA,MAAM,aAAA,CAAc,iBAAiB,OAAO,CAAA;AAAA,EAC7C;AACA,EAAA,MAAM,EAAA,GAAK,OAAO,KAAK,CAAA;AACvB,EAAA,IAAI,CAAC,cAAA,CAAe,EAAE,GAAG,MAAM,aAAA,CAAc,iBAAiB,OAAO,CAAA;AACrE,EAAA,OAAO,EAAA;AACR;AA4BA,eAAsB,wBAAwB,OAAA,EAA2E;AACxH,EAAA,MAAM,MAAA,GAASF,YAAW,OAAO,CAAA;AACjC,EAAA,MAAM,WAAqB,EAAE,OAAA,EAAS,GAAG,SAAA,EAAW,CAAA,EAAG,SAAS,CAAA,EAAG,YAAA,EAAc,GAAG,SAAA,EAAW,CAAA,EAAG,UAAU,CAAA,EAAG,SAAA,EAAW,GAAG,SAAA,EAAW,CAAA,EAAG,WAAW,CAAA,EAAE;AACxJ,EAAA,MAAMzC,MAAAA,GAAQ2C,UAAAA,CAAU,MAAA,CAAO,KAAK,CAAA;AACpC,EAAA,MAAM,OAAA,GAAU,MAAM,WAAA,CAAY3C,MAAAA,EAAO,MAAA,CAAO,MAAA,CAAO,aAAA,EAAe,MAAA,CAAO,MAAA,EAAQ,CAAC,WAAA,KAAgB,MAAA,CAAO,WAAW,oBAAA,CAAqB;AAAA,IAC5I,UAAU,MAAA,CAAO,QAAA;AAAA,IACjB,iBAAiB,MAAA,CAAO,eAAA;AAAA,IACxB,OAAO,MAAA,CAAO,SAAA;AAAA,IACd,GAAA,EAAK,IAAI,IAAA,CAAKA,MAAK;AAAA,KACjB,WAAW,CAAA,EAAG,MAAM2C,UAAAA,CAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAC9C,EAAA,IAAI,CAAC,OAAA,CAAQ,EAAA,EAAI,MAAM,aAAA,CAAc,QAAQ,MAAA,KAAW,SAAA,GAAY,wBAAA,GAA2B,uBAAA,EAAyB,sBAAsB,CAAA;AAC9I,EAAA,MAAM,OAAA,GAAU,kBAAA,CAAmB,OAAA,CAAQ,KAAK,CAAA;AAChD,EAAA,IAAI,OAAA,KAAY,MAAA,EAAW,MAAM,aAAA,CAAc,yBAAyB,sBAAsB,CAAA;AAC9F,EAAA,QAAA,CAAS,UAAU,OAAA,CAAQ,MAAA;AAC3B,EAAA,KAAA,MAAWxC,UAAS,OAAA,EAAS;AAC5B,IAAA,IAAI,OAAO,MAAA,KAAW,MAAA,IAAa,aAAA,CAAc,MAAA,CAAO,MAAM,CAAA,EAAG;AAGjE,IAAA,IAAIA,WAAU,MAAA,EAAW;AACxB,MAAA,QAAA,CAAS,SAAA,IAAa,CAAA;AACtB,MAAA;AAAA,IACD;AACA,IAAA,MAAM,MAAM,MAAA,CAAO,MAAA,EAAQA,OAAM,MAAA,EAAQA,MAAAA,CAAM,QAAQ,QAAQ,CAAA;AAC/D,IAAA,IAAIA,MAAAA,CAAM,MAAA,CAAO,KAAA,CAAM,KAAA,KAAU,OAAO,QAAA,EAAU;AACjD,MAAA,MAAA,CAAO,KAAK,WAAW,CAAA;AACvB,MAAA;AAAA,IACD;AACA,IAAA,IAAIA,MAAAA,CAAM,WAAW,MAAA,EAAW;AAC/B,MAAA,MAAM,MAAA,CAAO,GAAA,EAAK,EAAE,IAAA,EAAM,aAAA,EAAe,MAAA,EAAQ,mBAAA,EAAoB,EAAG,eAAA,EAAiB,EAAE,UAAA,EAAY,mBAAA,EAAqB,CAAA;AAC5H,MAAA;AAAA,IACD;AACA,IAAA,MAAM,aAAA,CAAc,GAAA,EAAKA,MAAAA,CAAM,MAAM,CAAA;AAAA,EACtC;AACA,EAAA,OAAO,MAAA,CAAO,EAAE,GAAG,QAAA,EAAU,CAAA;AAC9B;AAgBA,SAAS,MAAA,CAAO,MAAA,EAAgB,MAAA,EAA6B,MAAA,EAAmC,QAAA,EAAyB;AACxH,EAAA,OAAO,EAAE,MAAA,EAAQ,MAAA,EAAQ,MAAA,EAAQ,QAAA,EAAU,SAAS,MAAA,EAAW,gBAAA,EAAkB,MAAA,KAAW,MAAA,GAAY,MAAM,MAAA,CAAO,gBAAA,EAAkB,SAAA,EAAW,KAAA,EAAO,UAAU,KAAA,EAAM;AAC1K;AAUA,SAAS,UAAA,CAAc,GAAA,EAAU,MAAA,EAAuB,IAAA,EAA0F;AACjJ,EAAA,MAAMH,MAAAA,GAAQ2C,UAAAA,CAAU,GAAA,CAAI,MAAA,CAAO,KAAK,CAAA;AACxC,EAAA,MAAM,WAAA,GAAc,OAAO,oBAAA,GAAuB3C,MAAAA;AAClD,EAAA,IAAI,EAAE,WAAA,GAAc,CAAA,CAAA,EAAI,OAAO,OAAA,CAAQ,OAAA,CAAQ,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,UAAA,EAAY,CAAA;AAChF,EAAA,MAAM,YAAY,OAAA,CAAQ,WAAA,EAAa,GAAA,CAAI,MAAA,CAAO,OAAO,aAAa,CAAA;AACtE,EAAA,OAAO,YAAYA,MAAAA,EAAO,SAAA,EAAW,GAAA,CAAI,MAAA,CAAO,QAAQ,CAAC,OAAA,KAAY,IAAA,CAAK,OAAA,EAASA,MAAK,CAAA,EAAG,MAAM2C,WAAU,GAAA,CAAI,MAAA,CAAO,KAAK,CAAC,CAAA;AAC7H;AAGA,SAAS,UAAA,CAAc,KAAU,IAAA,EAA8F;AAC9H,EAAA,MAAM3C,MAAAA,GAAQ2C,UAAAA,CAAU,GAAA,CAAI,MAAA,CAAO,KAAK,CAAA;AACxC,EAAA,OAAO,WAAA,CAAY3C,QAAO,GAAA,CAAI,MAAA,CAAO,OAAO,aAAA,EAAe,GAAA,CAAI,OAAO,MAAA,EAAQ,CAAC,YAAY,IAAA,CAAK,OAAA,EAASA,MAAK,CAAA,EAAG,MAAM2C,WAAU,GAAA,CAAI,MAAA,CAAO,KAAK,CAAC,CAAA;AACnJ;AAaA,eAAeC,UAAAA,CAAU,KAAU,MAAA,EAAyC;AAC3E,EAAA,MAAM,EAAE,QAAO,GAAI,GAAA;AACnB,EAAA,MAAM,EAAE,gBAAA,EAAkB,aAAA,EAAc,GAAI,MAAA,CAAO,MAAA;AACnD,EAAA,MAAM5C,MAAAA,GAAQ2C,UAAAA,CAAU,MAAA,CAAO,KAAK,CAAA;AACpC,EAAA,IAAI,IAAI,gBAAA,GAAmB3C,MAAAA,IAAS,gBAAA,GAAmB,kBAAA,GAAqB,eAAe,OAAO,IAAA;AAClG,EAAA,IAAI,SAAA,GAAYA,MAAAA;AAChB,EAAA,MAAM,UAAU,MAAM,UAAA,CAAW,GAAA,EAAK,CAAC,SAAS,SAAA,KAAc;AAC7D,IAAA,SAAA,GAAY,SAAA;AACZ,IAAA,OAAO,MAAA,CAAO,WAAW,wBAAA,CAAyB;AAAA,MACjD,YAAY,MAAA,CAAO,UAAA;AAAA,MACnB,KAAA,EAAO,OAAO,KAAA,CAAM,KAAA;AAAA,MACpB,KAAA,EAAO,OAAO,KAAA,CAAM,KAAA;AAAA,MACpB,GAAA,EAAK,IAAI,IAAA,CAAK,SAAS,CAAA;AAAA,MACvB,iBAAiB,MAAA,CAAO;AAAA,OACtB,OAAO,CAAA;AAAA,EACX,CAAC,CAAA;AACD,EAAA,IAAI,OAAA,CAAQ,EAAA,IAAM,OAAA,CAAQ,KAAA,KAAU,IAAA,EAAM;AAEzC,IAAA,MAAM,UAAU,OAAA,CAAQ,SAAA,GAAY,MAAA,CAAO,eAAA,EAAiB,OAAO,oBAAoB,CAAA;AACvF,IAAA,IAAI,OAAA,GAAU,GAAA,CAAI,gBAAA,EAAkB,GAAA,CAAI,gBAAA,GAAmB,OAAA;AAC3D,IAAA,OAAO,IAAA;AAAA,EACR;AACA,EAAA,IAAI,OAAA,CAAQ,EAAA,IAAM,OAAA,CAAQ,KAAA,KAAU,KAAA,EAAO;AAC1C,IAAA,MAAA,CAAO,GAAA,EAAK,YAAA,EAAc,EAAE,UAAA,EAAY,cAAc,CAAA;AACtD,IAAA,OAAO,KAAA;AAAA,EACR;AACA,EAAA,IAAI,CAAC,OAAA,CAAQ,EAAA,IAAM,OAAA,CAAQ,WAAW,SAAA,EAAW;AAChD,IAAA,MAAA,CAAO,KAAK,WAAW,CAAA;AACvB,IAAA,OAAO,KAAA;AAAA,EACR;AACA,EAAA,OAAO,IAAA;AACR;AAEA,eAAe,aAAA,CAAc,KAAU,MAAA,EAAsC;AAC5E,EAAA,MAAM,EAAE,QAAO,GAAI,GAAA;AACnB,EAAA,MAAM,OAAA,GAAU,OAAO,YAAA,GAAe,CAAA;AAGtC,EAAA,IAAI,CAAE,MAAM4C,UAAAA,CAAU,GAAA,EAAK,MAAM,CAAA,EAAI;AAOrC,EAAA,MAAM,KAAA,GAAQ,MAAM,SAAA,CAAU,GAAA,EAAK,MAAM,CAAA;AACzC,EAAA,IAAI,UAAU,MAAA,EAAW;AACzB,EAAA,MAAM,gBAAgB,KAAA,CAAM,aAAA;AAC5B,EAAA,GAAA,CAAI,UAAU,aAAA,CAAc,OAAA;AAG5B,EAAA,MAAM,QAAA,GAAW,MAAM,UAAA,CAAW,GAAA,EAAK,MAAA,EAAQ,CAAC,OAAA,KAAY,MAAA,CAAO,QAAA,CAAS,OAAA,CAAQ,aAAA,CAAc,cAAA,EAAgB,OAAO,CAAC,CAAA;AAC1H,EAAA,IAAI,CAAC,SAAS,EAAA,EAAI,OAAO,YAAY,GAAA,EAAK,QAAA,CAAS,QAAQ,sBAAsB,CAAA;AACjF,EAAA,MAAM,UAAA,GAAa,cAAA,CAAe,QAAA,CAAS,KAAK,CAAA;AAChD,EAAA,IAAI,eAAe,MAAA,EAAW,OAAO,OAAA,CAAQ,GAAA,EAAK,QAAQ,sBAAsB,CAAA;AAChF,EAAA,IAAI,CAAC,UAAA,CAAW,EAAA,EAAI,OAAO,WAAA,CAAY,GAAA,EAAK,MAAA,EAAQ,EAAE,IAAA,EAAM,UAAA,CAAW,IAAA,EAAM,CAAA;AAG7E,EAAA,MAAM,mBAAmB,SAAA,CAAUD,UAAAA,CAAU,MAAA,CAAO,KAAK,IAAI,GAAK,CAAA;AAClE,EAAA,MAAM,MAAA,GAAS,MAAM,UAAA,CAAW,GAAA,EAAK,QAAQ,CAAC,OAAA,KAAY,MAAA,CAAO,MAAA,CAAO,IAAA,CAAK;AAAA,IAC5E,QAAQ,aAAA,CAAc,eAAA;AAAA,IACtB,WAAW,aAAA,CAAc,SAAA;AAAA,IACzB,UAAU,MAAA,CAAO,QAAA;AAAA,IACjB,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,gBAAA;AAAA,IACA,SAAS,MAAA,CAAO;AAAA,GACjB,EAAG,OAAO,CAAC,CAAA;AACX,EAAA,IAAI,CAAC,MAAA,CAAO,EAAA,KAAO,MAAA,CAAO,WAAW,UAAA,IAAc,MAAA,CAAO,MAAA,KAAW,SAAA,CAAA,EAAY,OAAO,WAAA,CAAY,GAAA,EAAK,MAAA,CAAO,QAAQ,oBAAoB,CAAA;AAC5I,EAAA,IAAI,OAAA;AACJ,EAAA,IAAI;AAEH,IAAA,OAAA,GAAU,OAAO,EAAA,GACd,0BAAA,CAA2B,EAAE,SAAA,EAAW,aAAA,CAAc,OAAO,KAAK,CAAA,EAAI,gBAAA,EAAkB,OAAA,EAAS,OAAO,OAAA,EAAS,UAAA,EAAY,OAAO,UAAA,EAAY,OAAA,EAAS,CAAA,GACzJ,KAAA,CAAA;AAAA,EACJ,CAAA,CAAA,MAAQ;AACP,IAAA,OAAA,GAAU,MAAA;AAAA,EACX;AACA,EAAA,IAAI,OAAA,KAAY,QAAW,OAAO,WAAA,CAAY,KAAK,MAAA,EAAQ,EAAE,IAAA,EAAM,oBAAA,EAAsB,CAAA;AAGzF,EAAA,MAAM,UAAA,GAAa,MAAM,UAAA,CAAW,GAAA,EAAK,QAAQ,CAAC,OAAA,KAAY,MAAA,CAAO,aAAA,CAAc,SAAA,CAAU;AAAA,IAC5F,gBAAgB,MAAA,CAAO,cAAA;AAAA,IACvB,UAAU,MAAA,CAAO,QAAA;AAAA,IACjB,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,YAAY,MAAA,CAAO,UAAA;AAAA,IACnB,sBAAsB,aAAA,CAAc,OAAA;AAAA,IACpC;AAAA,GACD,EAAG,OAAO,CAAC,CAAA;AACX,EAAA,IAAI,CAAC,WAAW,EAAA,EAAI,OAAO,YAAY,GAAA,EAAK,UAAA,CAAW,QAAQ,2BAA2B,CAAA;AAC1F,EAAA,MAAM,QAAA,GAAW,6CAAA,CAA8C,UAAA,CAAW,KAAK,CAAA;AAC/E,EAAA,IAAI,SAAS,QAAA,KAAa,SAAA,EAAW,OAAO,MAAA,CAAO,KAAK,uBAAuB,CAAA;AAC/E,EAAA,IAAI,SAAS,QAAA,KAAa,aAAA,SAAsB,OAAA,CAAQ,GAAA,EAAK,QAAQ,2BAA2B,CAAA;AAGhG,EAAA,MAAM,MAAA,GAAS,MAAM,SAAA,CAAU,GAAA,EAAK,MAAM,CAAA;AAC1C,EAAA,IAAI,WAAW,MAAA,EAAW;AAC1B,EAAA,IAAI,MAAA,CAAO,cAAc,OAAA,KAAY,aAAA,CAAc,SAAS,OAAO,OAAA,CAAQ,GAAA,EAAK,MAAA,EAAQ,wBAAwB,CAAA;AAShH,EAAA,MAAM,EAAE,gBAAA,EAAkB,aAAA,EAAc,GAAI,MAAA,CAAO,MAAA;AACnD,EAAA,MAAM,cAAA,GAAiB,OAAA;AAAA,IACtBA,UAAAA,CAAU,MAAA,CAAO,KAAK,CAAA,GAAI,gBAAA;AAAA,IAC1B,MAAA,CAAO,YAAY,aAAA,GAAgB,gBAAA;AAAA,IACnC,MAAA,CAAO,oBAAA;AAAA,IACP,GAAA,CAAI,mBAAmB,iBAAA,GAAoB;AAAA,GAC5C;AAGA,EAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,CAAW,GAAA,EAAK,MAAA,EAAQ,CAAC,OAAA,EAAS3C,MAAAA,KAAU,MAAA,CAAO,UAAA,CAAW,YAAA,CAAa;AAAA,IAC9F,KAAA,EAAO,OAAO,KAAA,CAAM,KAAA;AAAA,IACpB,KAAA,EAAO,OAAO,KAAA,CAAM,KAAA;AAAA,IACpB,GAAA,EAAK,IAAI,IAAA,CAAKA,MAAK,CAAA;AAAA,IACnB,OAAA,EAAS;AAAA,MACR,YAAY,MAAA,CAAO,UAAA;AAAA,MACnB,gBAAgB,MAAA,CAAO,cAAA;AAAA,MACvB,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,OAAA;AAAA,MACA,sBAAsB,aAAA,CAAc,OAAA;AAAA,MACpC,SAAA,EAAW,MAAMA,MAAK;AAAA;AACvB,GACD,EAAG,OAAO,CAAC,CAAA;AACX,EAAA,IAAI,CAAC,MAAM,EAAA,EAAI,OAAO,YAAY,GAAA,EAAK,KAAA,CAAM,QAAQ,4BAA4B,CAAA;AACjF,EAAA,MAAM,MAAA,GAAS,eAAA,CAAgB,KAAA,CAAM,KAAK,CAAA;AAC1C,EAAA,IAAI,WAAW,MAAA,EAAW,OAAO,OAAA,CAAQ,GAAA,EAAK,QAAQ,4BAA4B,CAAA;AAClF,EAAA,IAAI,CAAC,MAAA,CAAO,KAAA,EAAO,OAAO,MAAA,CAAO,KAAK,YAAA,EAAc,EAAE,UAAA,EAAY,YAAA,EAAc,CAAA;AAEhF,EAAA,MAAM,UAAU,MAAA,CAAO,OAAA;AAIvB,EAAA,MAAM,OAAA,GAAmC,MAAA,CAAO,EAAE,WAAA,EAAa,UAAA,CAAW,WAAA,EAAa,MAAA,EAAQ,MAAA,EAAiB,OAAA,EAAS,IAAA,EAAM,MAAA,CAAO,IAAA,EAAM,CAAA;AAC5I,EAAA,MAAM,SAAA,GAAY2C,UAAAA,CAAU,MAAA,CAAO,KAAK,CAAA;AACxC,EAAA,MAAM,YAAY,cAAA,GAAiB,SAAA;AACnC,EAAA,IAAI,WAAA;AACJ,EAAA,IAAI,EAAE,YAAY,CAAA,CAAA,EAAI;AAErB,IAAA,OAAO,OAAA,CAAQ,GAAA,EAAK,MAAA,EAAQ,OAAO,CAAA;AAAA,EACpC;AACA,EAAA,GAAA,CAAI,SAAA,GAAY,IAAA;AAChB,EAAA,GAAA,CAAI,SAAS,SAAA,IAAa,CAAA;AAC1B,EAAA,MAAM,IAAA,GAAO,MAAM,WAAA,CAAY,SAAA,EAAW,WAAW,MAAA,CAAO,MAAA,EAAQ,CAAC,OAAA,KAAY,MAAA,CAAO,UAAU,IAAA,CAAK,OAAA,EAAS,OAAO,CAAA,EAAG,MAAMA,WAAU,MAAA,CAAO,KAAK,GAAG,aAAa,CAAA;AACtK,EAAA,IAAI,CAAC,KAAK,EAAA,IAAM,IAAA,CAAK,WAAW,SAAA,EAAW,OAAO,MAAA,CAAO,GAAA,EAAK,WAAW,CAAA;AACzE,EAAA,IAAI,CAAC,KAAK,EAAA,EAAI;AAEb,IAAA,WAAA,GAAc,EAAE,IAAA,EAAM,IAAA,CAAK,MAAA,KAAW,SAAA,GAAY,YAAY,eAAA,EAAgB;AAAA,EAC/E,CAAA,MAAO;AACN,IAAA,MAAM,MAAA,GAAS,mBAAA,CAAoB,IAAA,CAAK,KAAK,CAAA;AAC7C,IAAA,IAAI,MAAA,KAAW,UAAa,MAAA,CAAO,IAAA,KAAS,YAAY,OAAO,OAAA,CAAQ,GAAA,EAAK,MAAA,EAAQ,OAAO,CAAA;AAC3F,IAAA,WAAA,GAAc,MAAA,KAAW,MAAA,GAAY,EAAE,IAAA,EAAM,iBAAgB,GAAI,MAAA;AAAA,EAClE;AAOA,EAAA,MAAM,UAAA,GAAaA,UAAAA,CAAU,MAAA,CAAO,KAAK,CAAA;AACzC,EAAA,IAAI,cAAA;AACJ,EAAA,IAAI;AACH,IAAA,cAAA,GAAiB,kCAAA,CAAmC,WAAA,EAAa,EAAE,GAAA,EAAK,IAAI,IAAA,CAAK,UAAU,CAAA,EAAG,eAAA,EAAiB,MAAA,CAAO,MAAA,CAAO,eAAA,EAAiB,CAAA;AAAA,EAC/I,CAAA,CAAA,MAAQ;AACP,IAAA,cAAA,GAAiB,OAAO,EAAE,OAAA,EAAS,WAAA,EAAsB,MAAA,EAAQ,iBAA0B,CAAA;AAAA,EAC5F;AACA,EAAA,MAAM,WAAW,GAAA,EAAK,CAAC,OAAA,KAAY,MAAA,CAAO,WAAW,aAAA,CAAc;AAAA,IAClE,UAAU,MAAA,CAAO,QAAA;AAAA,IACjB,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,YAAY,MAAA,CAAO,UAAA;AAAA,IACnB,KAAA,EAAO,OAAO,KAAA,CAAM,KAAA;AAAA,IACpB,OAAA;AAAA,IACA,MAAA,EAAQ;AAAA,MACP,UAAA,EAAY,MAAM,UAAU,CAAA;AAAA,MAC5B,SAAS,cAAA,CAAe,OAAA;AAAA,MACxB,QAAQ,cAAA,CAAe,MAAA;AAAA,MACvB,GAAI,eAAe,UAAA,KAAe,MAAA,GAAY,EAAC,GAAI,EAAE,UAAA,EAAY,cAAA,CAAe,UAAA;AAAW;AAC5F,GACD,EAAG,OAAO,CAAC,CAAA;AACX,EAAA,OAAO,mBAAA,CAAoB,GAAA,EAAK,MAAA,EAAQ,cAAc,CAAA;AACvD;AAQA,eAAe,SAAA,CAAU,KAAU,MAAA,EAA2H;AAC7J,EAAA,IAAI,YAAY,MAAA,CAAO,GAAA;AACvB,EAAA,MAAM,SAAS,MAAM,UAAA,CAAW,KAAK,MAAA,EAAQ,CAAC,SAAS3C,MAAAA,KAAU;AAChE,IAAA,SAAA,GAAYA,MAAAA;AACZ,IAAA,OAAO,GAAA,CAAI,OAAO,aAAA,CAAc,gBAAA;AAAA,MAC/B,EAAE,UAAU,MAAA,CAAO,QAAA,EAAU,SAAS,MAAA,CAAO,OAAA,EAAS,cAAA,EAAgB,MAAA,CAAO,cAAA,EAAe;AAAA,MAC5F;AAAA,KACD;AAAA,EACD,CAAC,CAAA;AACD,EAAA,IAAI,CAAC,OAAO,EAAA,EAAI;AACf,IAAA,MAAM,WAAA,CAAY,GAAA,EAAK,MAAA,CAAO,MAAA,EAAQ,gCAAgC,CAAA;AACtE,IAAA,OAAO,MAAA;AAAA,EACR;AACA,EAAA,MAAM,KAAA,GAAQ,mBAAA,CAAoB,MAAA,CAAO,KAAA,EAAO,MAAM,CAAA;AACtD,EAAA,IAAI,KAAA,CAAM,SAAS,cAAA,EAAgB;AAClC,IAAA,MAAM6C,WAAAA,CAAW,KAAK,2BAA2B,CAAA;AACjD,IAAA,OAAO,MAAA;AAAA,EACR;AACA,EAAA,IAAI,KAAA,CAAM,SAAS,YAAA,EAAc;AAChC,IAAA,MAAM,OAAA,CAAQ,GAAA,EAAK,MAAA,EAAQ,gCAAgC,CAAA;AAC3D,IAAA,OAAO,MAAA;AAAA,EACR;AACA,EAAA,IAAI,KAAA,CAAM,WAAW,QAAA,EAAU;AAC9B,IAAA,MAAM,MAAA,CAAO,KAAK,qBAAqB,CAAA;AACvC,IAAA,OAAO,MAAA;AAAA,EACR;AACA,EAAA,IAAI,KAAA,CAAM,WAAW,SAAA,EAAW;AAC/B,IAAA,MAAM,MAAA,CAAO,KAAK,sBAAsB,CAAA;AACxC,IAAA,OAAO,MAAA;AAAA,EACR;AAKA,EAAA,IAAI,MAAA,CAAO,mBAAA,GAAsB,KAAA,CAAM,mBAAA,EAAqB;AAC3D,IAAA,MAAM,MAAA,CAAO,KAAK,qBAAqB,CAAA;AACvC,IAAA,OAAO,MAAA;AAAA,EACR;AACA,EAAA,OAAO,EAAE,aAAA,EAAe,KAAA,CAAM,aAAA,EAAe,SAAA,EAAU;AACxD;AAGA,SAAS,WAAA,CAAY,GAAA,EAAU,MAAA,EAAqB,WAAA,EAAmD;AACtG,EAAA,IAAI,MAAA,KAAW,UAAA,EAAY,OAAOA,WAAAA,CAAW,KAAK,8BAA8B,CAAA;AAChF,EAAA,IAAI,WAAW,SAAA,EAAW;AACzB,IAAA,MAAA,CAAO,KAAK,WAAW,CAAA;AACvB,IAAA,OAAO,QAAQ,OAAA,EAAQ;AAAA,EACxB;AACA,EAAA,OAAO,QAAQ,GAAA,EAAK,GAAA,CAAI,QAAS,MAAA,KAAW,SAAA,GAAY,iBAAiB,WAAW,CAAA;AACrF;AAWA,eAAe,WAAA,CAAY,GAAA,EAAU,MAAA,EAAuB,WAAA,EAAwD;AACnH,EAAA,MAAM7C,MAAAA,GAAQ2C,UAAAA,CAAU,GAAA,CAAI,MAAA,CAAO,KAAK,CAAA;AACxC,EAAA,MAAM,cAAA,GAAiB,kCAAA,CAAmC,WAAA,EAAa,EAAE,KAAK,IAAI,IAAA,CAAK3C,MAAK,CAAA,EAAG,eAAA,EAAiB,GAAA,CAAI,MAAA,CAAO,MAAA,CAAO,iBAAiB,CAAA;AACnJ,EAAA,MAAM,MAAA,GAAS,MAAM,UAAA,CAAW,GAAA,EAAK,CAAC,OAAA,KAAY,GAAA,CAAI,MAAA,CAAO,UAAA,CAAW,aAAA,CAAc;AAAA,IACrF,KAAA,EAAO,OAAO,KAAA,CAAM,KAAA;AAAA,IACpB,KAAA,EAAO,OAAO,KAAA,CAAM,KAAA;AAAA,IACpB,GAAA,EAAK,IAAI,IAAA,CAAKA,MAAK,CAAA;AAAA,IACnB,OAAA,EAAS;AAAA,MACR,YAAY,MAAA,CAAO,UAAA;AAAA,MACnB,gBAAgB,MAAA,CAAO,cAAA;AAAA,MACvB,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,OAAA,EAAS,OAAO,YAAA,GAAe,CAAA;AAAA,MAC/B,sBAAsB,GAAA,CAAI,OAAA;AAAA,MAC1B,SAAA,EAAW,MAAMA,MAAK,CAAA;AAAA,MACtB,UAAA,EAAY,MAAMA,MAAK,CAAA;AAAA,MACvB,SAAS,cAAA,CAAe,OAAA;AAAA,MACxB,QAAQ,cAAA,CAAe;AAAA;AACxB,GACD,EAAG,OAAO,CAAC,CAAA;AACX,EAAA,IAAI,MAAA,CAAO,EAAA,IAAM,MAAA,CAAO,KAAA,KAAU,KAAA,EAAO,OAAO,MAAA,CAAO,GAAA,EAAK,YAAA,EAAc,EAAE,UAAA,EAAY,YAAA,EAAc,CAAA;AACtG,EAAA,IAAI,CAAC,OAAO,EAAA,IAAM,MAAA,CAAO,WAAW,SAAA,EAAW,OAAO,MAAA,CAAO,GAAA,EAAK,WAAW,CAAA;AAC7E,EAAA,IAAI,CAAC,MAAA,CAAO,EAAA,IAAM,MAAA,CAAO,KAAA,KAAU,MAAM,OAAO,OAAA,CAAQ,GAAA,EAAK,MAAA,EAAQ,OAAO,EAAA,GAAK,4BAAA,GAA+B,OAAO,MAAA,KAAW,SAAA,GAAY,iBAAiB,4BAA4B,CAAA;AAC3L,EAAA,OAAO,mBAAA,CAAoB,GAAA,EAAK,MAAA,EAAQ,cAAc,CAAA;AACvD;AAGA,eAAe,OAAA,CAAQ,GAAA,EAAU,MAAA,EAAuB,OAAA,EAAgC;AACvF,EAAA,MAAMA,MAAAA,GAAQ2C,UAAAA,CAAU,GAAA,CAAI,MAAA,CAAO,KAAK,CAAA;AACxC,EAAA,MAAM,WAAW,GAAA,EAAK,CAAC,YAAY,GAAA,CAAI,MAAA,CAAO,WAAW,aAAA,CAAc;AAAA,IACtE,UAAU,MAAA,CAAO,QAAA;AAAA,IACjB,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,YAAY,MAAA,CAAO,UAAA;AAAA,IACnB,KAAA,EAAO,OAAO,KAAA,CAAM,KAAA;AAAA,IACpB,OAAA;AAAA,IACA,MAAA,EAAQ,EAAE,UAAA,EAAY,KAAA,CAAM3C,MAAK,CAAA,EAAG,OAAA,EAAS,UAAA,EAAY,MAAA,EAAQ,UAAA;AAAW,GAC7E,EAAG,OAAO,CAAC,CAAA;AACX,EAAA,OAAO,OAAA,CAAQ,GAAA,EAAK,MAAA,EAAQ,oBAAoB,CAAA;AACjD;AAGA,SAAS,mBAAA,CAAoB,GAAA,EAAU,MAAA,EAAuB,cAAA,EAA8D;AAC3H,EAAA,MAAM,KAAA,GAAQ,EAAE,MAAA,EAAQ,cAAA,CAAe,MAAA,EAAQ,YAAY,cAAA,CAAe,UAAA,EAAY,oBAAA,EAAsB,cAAA,CAAe,oBAAA,EAAqB;AAChJ,EAAA,QAAQ,eAAe,OAAA;AAAS,IAC/B,KAAK,WAAA;AACJ,MAAA,OAAO,OAAO,GAAA,EAAK,EAAE,MAAM,WAAA,EAAY,EAAG,aAAa,KAAK,CAAA;AAAA,IAC7D,KAAK,aAAA;AACJ,MAAA,OAAO,MAAA,CAAO,GAAA,EAAK,EAAE,IAAA,EAAM,aAAA,EAAe,QAAQ,cAAA,CAAe,MAAA,EAAO,EAAG,eAAA,EAAiB,KAAK,CAAA;AAAA,IAClG,KAAK,WAAA;AACJ,MAAA,OAAO,MAAA,CAAO,GAAA,EAAK,EAAE,IAAA,EAAM,WAAA,EAAa,QAAQ,cAAA,CAAe,MAAA,EAAO,EAAG,WAAA,EAAa,KAAK,CAAA;AAAA,IAC5F;AACC,MAAA,OAAO8C,kBAAAA,CAAkB,GAAA,EAAK,MAAA,EAAQ,cAAA,EAAgB,KAAK,CAAA;AAAA;AAE9D;AAGA,SAAS,UAAA,CAAW,KAAU,OAAA,EAAyB;AACtD,EAAA,IAAI,OAAA;AACJ,EAAA,IAAI;AACH,IAAA,OAAA,GAAU,MAAM,GAAA,CAAI,MAAA,CAAO,YAAY,KAAA,CAAA,EAAW,CAAC,OAAO,CAAC,CAAA;AAAA,EAC5D,CAAA,CAAA,MAAQ;AACP,IAAA,OAAA,GAAU,GAAA;AAAA,EACX;AACA,EAAA,IAAI,OAAO,YAAY,QAAA,IAAY,CAAC,eAAe,OAAO,CAAA,IAAK,UAAU,CAAA,EAAG;AAC3E,IAAA,MAAM,MAAA,GAAS,GAAA,CAAI,MAAA,CAAO,MAAA,CAAO,qBAAA;AACjC,IAAA,OAAA,GAAU,MAAA,CAAO,MAAA,CAAO,MAAA,GAAS,CAAC,CAAA;AAAA,EACnC;AACA,EAAA,OAAO,OAAA;AACR;AAEA,SAASA,kBAAAA,CACR,GAAA,EACA,MAAA,EACA,cAAA,EACA,KAAA,EACgB;AAChB,EAAA,MAAM,OAAA,GAAU,OAAO,YAAA,GAAe,CAAA;AACtC,EAAA,IAAI,OAAA,IAAW,GAAA,CAAI,MAAA,CAAO,MAAA,CAAO,mBAAA,EAAqB;AACrD,IAAA,OAAO,MAAA,CAAO,GAAA,EAAK,EAAE,IAAA,EAAM,aAAA,EAAe,QAAQ,cAAA,CAAe,MAAA,EAAO,EAAG,eAAA,EAAiB,KAAK,CAAA;AAAA,EAClG;AACA,EAAA,MAAM9C,MAAAA,GAAQ2C,UAAAA,CAAU,GAAA,CAAI,MAAA,CAAO,KAAK,CAAA;AAExC,EAAA,MAAM,OAAA,GAAU,QAAQ,UAAA,CAAW,GAAA,EAAK,OAAO,CAAA,EAAG,cAAA,CAAe,gBAAgB,CAAC,CAAA;AAClF,EAAA,MAAM,gBAAgB3C,MAAAA,GAAQ,OAAA;AAC9B,EAAA,IAAI,iBAAiB,MAAA,CAAO,oBAAA,SAA6B6C,WAAAA,CAAW,GAAA,EAAK,gCAAgC,KAAK,CAAA;AAC9G,EAAA,OAAO,OAAO,GAAA,EAAK,EAAE,IAAA,EAAM,OAAA,EAAS,aAAa,IAAI,IAAA,CAAK,aAAa,CAAA,EAAG,SAAS,WAAA,EAAa,MAAA,EAAQ,eAAe,MAAA,EAAO,EAAG,mBAAmB,KAAK,CAAA;AAC1J;AAQA,SAAS,OAAA,CAAQ,GAAA,EAAU,MAAA,EAAuB,UAAA,EAAkD;AACnG,EAAA,MAAM7C,MAAAA,GAAQ2C,UAAAA,CAAU,GAAA,CAAI,MAAA,CAAO,KAAK,CAAA;AACxC,EAAA,MAAM,gBAAgB3C,MAAAA,GAAQ,UAAA,CAAW,GAAA,EAAK,MAAA,CAAO,eAAe,CAAC,CAAA;AACrE,EAAA,IAAI,aAAA,IAAiB,OAAO,oBAAA,EAAsB,OAAO6C,YAAW,GAAA,EAAK,8BAAA,EAAgC,EAAE,UAAA,EAAY,CAAA;AACvH,EAAA,OAAO,MAAA,CAAO,GAAA,EAAK,EAAE,IAAA,EAAM,WAAW,WAAA,EAAa,IAAI,IAAA,CAAK,aAAa,GAAG,UAAA,EAAW,EAAG,UAAA,EAAY,EAAE,YAAY,CAAA;AACrH;AAEA,SAAS,MAAA,CAAO,KAAU,MAAA,EAAiG;AAC1H,EAAA,OAAO,MAAA,CAAO,GAAA,EAAK,EAAE,IAAA,EAAM,WAAA,EAAa,QAAO,EAAG,WAAA,EAAa,EAAE,MAAA,EAAQ,CAAA;AAC1E;AAEA,SAASA,WAAAA,CAAW,GAAA,EAAU,UAAA,EAAmC,KAAA,GAA4C,EAAC,EAAkB;AAC/H,EAAA,OAAO,MAAA,CAAO,GAAA,EAAK,EAAE,IAAA,EAAM,aAAA,EAAe,MAAA,EAAQ,UAAA,EAAW,EAAG,eAAA,EAAiB,EAAE,GAAG,KAAA,EAAO,YAAY,CAAA;AAC1G;AAaA,eAAe,MAAA,CACd,GAAA,EACA,UAAA,EACA,MAAA,EACA,KAAA,EACgB;AAChB,EAAA,MAAM,OAAA,GAAU,MAAM,UAAA,CAAW,GAAA,EAAK,CAAC,SAAS7C,MAAAA,KAAU,GAAA,CAAI,MAAA,CAAO,UAAA,CAAW,oBAAA,CAAqB;AAAA,IACpG,UAAA,EAAY,IAAI,MAAA,CAAO,UAAA;AAAA,IACvB,KAAA,EAAO,GAAA,CAAI,MAAA,CAAO,KAAA,CAAM,KAAA;AAAA,IACxB,KAAA,EAAO,GAAA,CAAI,MAAA,CAAO,KAAA,CAAM,KAAA;AAAA,IACxB,GAAA,EAAK,IAAI,IAAA,CAAKA,MAAK,CAAA;AAAA,IACnB;AAAA,GACD,EAAG,OAAO,CAAC,CAAA;AACX,EAAA,IAAI,OAAA,CAAQ,MAAM,OAAA,CAAQ,KAAA,KAAU,MAAM,OAAO,MAAA,CAAO,GAAA,EAAK,MAAA,EAAQ,KAAK,CAAA;AAC1E,EAAA,IAAI,OAAA,CAAQ,EAAA,IAAM,OAAA,CAAQ,KAAA,KAAU,OAAO,OAAO,MAAA,CAAO,GAAA,EAAK,YAAA,EAAc,EAAE,GAAG,KAAA,EAAO,UAAA,EAAY,cAAc,CAAA;AAClH,EAAA,OAAO,MAAA,CAAO,GAAA,EAAK,WAAA,EAAa,KAAK,CAAA;AACtC;AAEA,IAAM,UAA4E,MAAA,CAAO;AAAA,EACxF,SAAA,EAAW,WAAA;AAAA,EACX,eAAA,EAAiB,SAAA;AAAA,EACjB,aAAA,EAAe,cAAA;AAAA,EACf,SAAA,EAAW,WAAA;AAAA,EACX,QAAA,EAAU,UAAA;AAAA,EACV,UAAA,EAAY,WAAA;AAAA,EACZ,SAAA,EAAW;AACZ,CAAC,CAAA;AAGD,SAAS,MAAA,CAAO,GAAA,EAAU,MAAA,EAAwC,KAAA,GAA4C,EAAC,EAAS;AACvH,EAAA,IAAI,IAAI,QAAA,EAAU;AAClB,EAAA,GAAA,CAAI,QAAA,GAAW,IAAA;AACf,EAAA,GAAA,CAAI,QAAA,CAAS,OAAA,CAAQ,MAAM,CAAC,CAAA,IAAK,CAAA;AACjC,EAAA,MAAM,OAAA,GAAU,IAAI,MAAA,CAAO,OAAA;AAC3B,EAAA,IAAI,YAAY,MAAA,EAAW;AAC3B,EAAA,MAAM,SAAS,GAAA,CAAI,MAAA;AACnB,EAAA,MAAM,QAAQ,MAAA,CAAkC;AAAA,IAC/C,UAAA,EAAY,IAAI,MAAA,CAAO,UAAA;AAAA,IACvB,QAAA,EAAU,IAAI,MAAA,CAAO,QAAA;AAAA,IACrB,OAAA,EAAS,IAAI,MAAA,CAAO,OAAA;AAAA,IACpB,gBAAgB,MAAA,EAAQ,cAAA;AAAA,IACxB,SAAS,MAAA,EAAQ,OAAA;AAAA,IACjB,OAAA,EAAS,MAAA,KAAW,MAAA,GAAY,MAAA,GAAY,OAAO,YAAA,GAAe,CAAA;AAAA,IAClE,sBAAsB,GAAA,CAAI,OAAA;AAAA,IAC1B,MAAA;AAAA,IACA,WAAW,GAAA,CAAI,SAAA;AAAA,IACf,QAAQ,KAAA,CAAM,MAAA;AAAA,IACd,YAAY,KAAA,CAAM,UAAA;AAAA,IAClB,YAAY,KAAA,CAAM,UAAA;AAAA,IAClB,sBAAsB,KAAA,CAAM;AAAA,GAC5B,CAAA;AACD,EAAA,IAAI;AACH,IAAA,KAAA,CAAM,OAAA,EAAS,KAAA,CAAA,EAAW,CAAC,KAAK,CAAC,CAAA;AAAA,EAClC,CAAA,CAAA,MAAQ;AAAA,EAER;AACD;;;ACz0BO,IAAM,gCAAgC,MAAA,CAAO;AAAA,EACnD,qBAAA;AAAA,EACA,qBAAA;AAAA,EACA,oBAAA;AAAA,EACA,qBAAA;AAAA,EACA,qBAAA;AAAA,EACA,sBAAA;AAAA,EACA,yBAAA;AAAA,EACA,yBAAA;AAAA,EACA,qBAAA;AAAA,EACA;AACD,CAAU;AAeH,IAAM,iCAAiC,MAAA,CAAO;AAAA,EACpD,oBAAA;AAAA,EACA,mBAAA;AAAA,EACA,oBAAA;AAAA,EACA,qBAAA;AAAA,EACA,4BAAA;AAAA,EACA;AACD,CAAU;AAmFH,IAAM,6BAAA,GAAgC;AAEtC,IAAM,8BAAA,GAAiC;AAE9C,IAAM,gBAAA,GAAmB,8CAAA;AACzB,IAAM,uBAAA,GAA0B,sBAAA;AAkBzB,SAAS,yBAAyB,KAAA,EAAiC;AACzE,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,CAAM,MAAA,IAAU,6BAAA,IACnD,OAAA,CAAQ,gBAAA,EAAkB,KAAK,CAAA,IAAK,CAAC,OAAA,CAAQ,yBAAyB,KAAK,CAAA;AAC7E;AAGO,IAAM,+BAAA,GAAkC;AAE/C,IAAM,aAAA,GAAgB,yDAAA;AAQf,SAAS,0BAA0B,KAAA,EAAiC;AAC1E,EAAA,OAAO,OAAO,UAAU,QAAA,IAAY,KAAA,CAAM,UAAU,GAAA,IAAO,OAAA,CAAQ,eAAe,KAAK,CAAA;AACxF;AAgBA,IAAM,UAAN,MAAc;AAAA,EACJ,MAAA,GAAS,IAAA;AAAA,EACT,IAAA;AAAA,EACA,KAAA;AAAA,EAET,WAAA,CAAY,MAAkCR,MAAAA,EAAe;AAC5D,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,KAAA,GAAQA,MAAAA;AACb,IAAA,MAAA,CAAO,IAAI,CAAA;AAAA,EACZ;AAAA;AAAA,EAGA,OAAO,GAAG,KAAA,EAAkC;AAC3C,IAAA,OAAO,KAAA,KAAU,IAAA,IAAQ,OAAO,KAAA,KAAU,YAAY,MAAA,IAAU,KAAA;AAAA,EACjE;AACD,CAAA;AAEA,IAAM,aAAa,MAAA,CAAO,IAAA;AAE1B,SAASwC,OAAAA,CAAO,MAAkCxC,MAAAA,EAAsB;AACvE,EAAA,MAAM,IAAI,OAAA,CAAQ,IAAA,EAAMA,MAAK,CAAA;AAC9B;AAEA,IAAM,YAAA,GAAqB,MAAMwC,OAAAA,CAAO,oBAAA,EAAsB,YAAY,CAAA;AAI1E,IAAM,eAAiF,MAAA,CAAO;AAAA,EAC7F,mBAAA,EAAqB,OAAO,CAAC,gBAAA,EAAkB,qBAAqB,gBAAA,EAAkB,WAAA,EAAa,iBAAiB,CAAC,CAAA;AAAA,EACrH,mBAAA,EAAqB,OAAO,CAAC,gBAAA,EAAkB,qBAAqB,kBAAA,EAAoB,gBAAA,EAAkB,iBAAiB,CAAC,CAAA;AAAA,EAC5H,kBAAA,EAAoB,MAAA,CAAO,CAAC,gBAAA,EAAkB,kBAAkB,CAAC,CAAA;AAAA,EACjE,mBAAA,EAAqB,MAAA,CAAO,CAAC,gBAAA,EAAkB,kBAAkB,CAAC,CAAA;AAAA,EAClE,mBAAA,EAAqB,MAAA,CAAO,CAAC,gBAAA,EAAkB,kBAAkB,CAAC,CAAA;AAAA,EAClE,sBAAsB,MAAA,CAAO,CAAC,kBAAkB,WAAA,EAAa,iBAAA,EAAmB,2BAA2B,CAAC,CAAA;AAAA,EAC5G,yBAAyB,MAAA,CAAO,CAAC,gBAAA,EAAkB,WAAA,EAAa,iBAAiB,CAAC,CAAA;AAAA,EAClF,uBAAA,EAAyB,MAAA,CAAO,CAAC,YAAA,EAAc,eAAe,CAAC,CAAA;AAAA,EAC/D,mBAAA,EAAqB,MAAA,CAAO,CAAC,SAAA,EAAW,eAAe,CAAC,CAAA;AAAA,EACxD,wBAAA,EAA0B,MAAA,CAAO,CAAC,SAAA,EAAW,eAAe,CAAC;AAC9D,CAAC,CAAA;AAED,SAAS,mBAAmB,KAAA,EAAwB;AACnD,EAAA,MAAM,IAAA,GAAO,YAAA,CAAa,KAAA,EAAO,YAAA,EAAc,YAAY,CAAA;AAC3D,EAAA,IAAI,IAAA,KAAS,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,IAAY,OAAA,CAAQ,IAAI,CAAA,EAAGA,OAAAA,CAAO,oBAAA,EAAsB,YAAY,CAAA;AACzG,EAAA,OAAO,IAAA;AACR;AAEA,SAAS,OAAA,CAAQ,QAAgB,GAAA,EAAqB;AACrD,EAAA,MAAM,KAAA,GAAQ,OAAO,GAAG,CAAA;AACxB,EAAA,IAAI,CAAC,mBAAA,CAAoB,KAAK,GAAGA,OAAAA,CAAO,sBAAsB,GAAG,CAAA;AACjE,EAAA,OAAO,KAAA;AACR;AAEA,SAAS,aAAA,CAAc,MAAA,EAAgB,GAAA,EAAa,GAAA,EAAiC;AACpF,EAAA,MAAM,KAAA,GAAQ,OAAO,GAAG,CAAA;AACxB,EAAA,IAAI,KAAA,KAAU,QAAW,OAAO,MAAA;AAChC,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,CAAC,mBAAA,CAAoB,KAAK,CAAA,IAAK,KAAA,GAAQ,GAAA,EAAKA,OAAAA,CAAO,oBAAA,EAAsB,GAAG,CAAA;AAC7G,EAAA,OAAO,KAAA;AACR;AAEA,SAASG,MAAAA,CAAM,MAAA,EAAgB,GAAA,EAAa,GAAA,EAAqB;AAChE,EAAA,MAAM,KAAA,GAAQ,aAAA,CAAc,MAAA,EAAQ,GAAA,EAAK,GAAG,CAAA;AAC5C,EAAA,IAAI,KAAA,KAAU,MAAA,EAAWH,OAAAA,CAAO,sBAAsB,GAAG,CAAA;AACzD,EAAA,OAAO,KAAA;AACR;AAEA,SAAS,eAAe,MAAA,EAAwB;AAC/C,EAAA,MAAM,KAAA,GAAQ,OAAO,WAAW,CAAA;AAChC,EAAA,IAAI,CAAC,wBAAA,CAAyB,KAAK,GAAGA,OAAAA,CAAO,sBAAsB,WAAW,CAAA;AAC9E,EAAA,OAAO,KAAA;AACR;AAEA,SAAS,iBAAiB,MAAA,EAAwB;AACjD,EAAA,MAAM,KAAA,GAAQ,OAAO,gBAAgB,CAAA;AACrC,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,EAAUA,OAAAA,CAAO,uBAAuB,gBAAgB,CAAA;AAC7E,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,MAAM,0BAAA,CAA2B,KAAK,CAAA,EAAG,OAAO,EAAE,EAAA,EAAI,KAAA,EAAgB,IAAA,EAAM,aAAA,EAAuB,CAAE,CAAA;AAC3H,EAAA,IAAI,CAAC,KAAA,CAAM,EAAA,EAAIA,OAAAA,CAAO,uBAAuB,gBAAgB,CAAA;AAC7D,EAAA,OAAO,KAAA;AACR;AAEA,SAAS,cAAc,MAAA,EAAmC;AACzD,EAAA,MAAM,KAAA,GAAQ,OAAO,mBAAmB,CAAA;AACxC,EAAA,IAAI,CAAC,OAAA,CAAQ,KAAK,CAAA,IAAK,KAAA,CAAM,MAAA,KAAW,CAAA,IAAK,KAAA,CAAM,MAAA,GAAS,+BAAA,EAAiCA,OAAAA,CAAO,8BAA8B,mBAAmB,CAAA;AACrJ,EAAA,MAAM,MAAgB,EAAC;AACvB,EAAA,KAAA,IAAS,QAAQ,CAAA,EAAG,KAAA,GAAQ,KAAA,CAAM,MAAA,EAAQ,SAAS,CAAA,EAAG;AACrD,IAAA,MAAM,OAAA,GAAU,MAAM,KAAK,CAAA;AAC3B,IAAA,IAAI,CAAC,yBAAA,CAA0B,OAAO,GAAGA,OAAAA,CAAO,8BAA8B,mBAAmB,CAAA;AACjG,IAAA,GAAA,CAAI,KAAK,CAAA,GAAI,OAAA;AAAA,EACd;AACA,EAAA,OAAO,OAAO,GAAG,CAAA;AAClB;AAGA,SAAS,aAAA,CAAc,QAAgB,IAAA,EAAuC;AAC7E,EAAA,MAAM,IAAA,GAAO,WAAW,MAAM,CAAA;AAC9B,EAAA,KAAA,IAAS,QAAQ,CAAA,EAAG,KAAA,GAAQ,IAAA,CAAK,MAAA,EAAQ,SAAS,CAAA,EAAG;AACpD,IAAA,IAAI,CAAC,OAAA,CAAQ,YAAA,CAAa,IAAI,CAAA,EAAG,IAAA,CAAK,KAAK,CAAC,CAAA,EAAGA,OAAAA,CAAO,mBAAA,EAAqB,YAAY,CAAA;AAAA,EACxF;AACD;AAEA,SAAS,UAAA,CAAW,MAAiC,MAAA,EAAwB;AAC5E,EAAA,QAAQ,IAAA;AAAM,IACb,KAAK,qBAAA,EAAuB;AAC3B,MAAA,MAAM,MAAA,GAAS,OAAO,iBAAiB,CAAA;AACvC,MAAA,IAAI,WAAW,MAAA,IAAa,MAAA,KAAW,MAAMA,OAAAA,CAAO,sBAAsB,iBAAiB,CAAA;AAC3F,MAAA,OAAO;AAAA,QACN,cAAA,EAAgB,OAAA,CAAQ,MAAA,EAAQ,gBAAgB,CAAA;AAAA,QAChD,iBAAA,EAAmB,cAAc,MAAM,CAAA;AAAA,QACvC,cAAA,EAAgB,iBAAiB,MAAM,CAAA;AAAA,QACvC,SAAA,EAAW,eAAe,MAAM,CAAA;AAAA,QAChC,GAAI,MAAA,KAAW,MAAA,GAAY,EAAC,GAAI,EAAE,iBAAiB,IAAA;AAAK,OACzD;AAAA,IACD;AAAA,IACA,KAAK,qBAAA,EAAuB;AAC3B,MAAA,MAAM,QAAA,GAAW,MAAA,CAAO,mBAAmB,CAAA,KAAM,MAAA;AACjD,MAAA,MAAM,WAAA,GAAc,MAAA,CAAO,gBAAgB,CAAA,KAAM,MAAA;AACjD,MAAA,IAAI,QAAA,KAAa,WAAA,EAAaA,OAAAA,CAAO,oBAAoB,YAAY,CAAA;AACrE,MAAA,MAAM,cAAA,GAAiB,OAAA,CAAQ,MAAA,EAAQ,gBAAgB,CAAA;AACvD,MAAA,IAAI,QAAA,EAAU;AACb,QAAA,IAAI,OAAO,iBAAiB,CAAA,KAAM,QAAWA,OAAAA,CAAO,sBAAsB,iBAAiB,CAAA;AAC3F,QAAA,MAAM,gBAAA,GAAmB,aAAA,CAAc,MAAA,EAAQ,kBAAA,EAAoB,CAAC,CAAA;AACpE,QAAA,OAAO,EAAE,cAAA,EAAgB,iBAAA,EAAmB,aAAA,CAAc,MAAM,CAAA,EAAG,GAAI,gBAAA,KAAqB,MAAA,GAAY,EAAC,GAAI,EAAE,kBAAiB,EAAG;AAAA,MACpI;AACA,MAAA,IAAI,OAAO,kBAAkB,CAAA,KAAM,QAAWA,OAAAA,CAAO,sBAAsB,kBAAkB,CAAA;AAC7F,MAAA,MAAM,eAAA,GAAkB,aAAA,CAAc,MAAA,EAAQ,iBAAA,EAAmB,CAAC,CAAA;AAClE,MAAA,OAAO,EAAE,cAAA,EAAgB,cAAA,EAAgB,gBAAA,CAAiB,MAAM,CAAA,EAAG,GAAI,eAAA,KAAoB,MAAA,GAAY,EAAC,GAAI,EAAE,iBAAgB,EAAG;AAAA,IAClI;AAAA,IACA,KAAK,oBAAA;AAAA,IACL,KAAK,qBAAA;AAAA,IACL,KAAK,qBAAA,EAAuB;AAC3B,MAAA,MAAM,gBAAA,GAAmB,aAAA,CAAc,MAAA,EAAQ,kBAAA,EAAoB,CAAC,CAAA;AACpE,MAAA,OAAO,EAAE,cAAA,EAAgB,OAAA,CAAQ,MAAA,EAAQ,gBAAgB,CAAA,EAAG,GAAI,gBAAA,KAAqB,MAAA,GAAY,EAAC,GAAI,EAAE,kBAAiB,EAAG;AAAA,IAC7H;AAAA,IACA,KAAK,sBAAA,EAAwB;AAC5B,MAAA,IAAI,OAAO,2BAA2B,CAAA,KAAM,MAAMA,OAAAA,CAAO,sBAAsB,2BAA2B,CAAA;AAC1G,MAAA,OAAO;AAAA,QACN,cAAA,EAAgB,OAAA,CAAQ,MAAA,EAAQ,gBAAgB,CAAA;AAAA,QAChD,SAAA,EAAW,eAAe,MAAM,CAAA;AAAA,QAChC,eAAA,EAAiBG,MAAAA,CAAM,MAAA,EAAQ,iBAAA,EAAmB,CAAC,CAAA;AAAA,QACnD,yBAAA,EAA2B;AAAA,OAC5B;AAAA,IACD;AAAA,IACA,KAAK,yBAAA,EAA2B;AAC/B,MAAA,MAAM,eAAA,GAAkB,aAAA,CAAc,MAAA,EAAQ,iBAAA,EAAmB,CAAC,CAAA;AAClE,MAAA,OAAO,EAAE,cAAA,EAAgB,OAAA,CAAQ,MAAA,EAAQ,gBAAgB,GAAG,SAAA,EAAW,cAAA,CAAe,MAAM,CAAA,EAAG,GAAI,eAAA,KAAoB,MAAA,GAAY,EAAC,GAAI,EAAE,iBAAgB,EAAG;AAAA,IAC9J;AAAA,IACA,KAAK,yBAAA;AACJ,MAAA,OAAO,EAAE,UAAA,EAAY,OAAA,CAAQ,MAAA,EAAQ,YAAY,CAAA,EAAG,aAAA,EAAeA,MAAAA,CAAM,MAAA,EAAQ,eAAA,EAAiB,CAAC,CAAA,EAAE;AAAA,IACtG,KAAK,qBAAA;AAAA,IACL,KAAK,0BAAA;AACJ,MAAA,OAAO,EAAE,OAAA,EAAS,OAAA,CAAQ,MAAA,EAAQ,SAAS,CAAA,EAAG,aAAA,EAAeA,MAAAA,CAAM,MAAA,EAAQ,eAAA,EAAiB,CAAC,CAAA,EAAE;AAAA;AAElG;AAGA,SAAS,YAAA,CAAa,MAAe3C,MAAAA,EAA2G;AAC/I,EAAA,OAAO,MAAA,CAAO;AAAA,IACb,EAAA,EAAI,KAAA;AAAA,IACJ,IAAA,EAAM,OAAA,CAAQ,8BAAA,EAAgC,IAAI,IAAK,IAAA,GAAsC,oBAAA;AAAA,IAC7F,OAAO,OAAOA,MAAAA,KAAU,YAAY,cAAA,CAAeA,MAAK,IAAIA,MAAAA,GAAQ;AAAA,GACpE,CAAA;AACF;AAEA,IAAM,kBAAA,GAAqB,YAAA,CAAa,oBAAA,EAAsB,YAAY,CAAA;AAWnE,SAAS,2BAAA,CAAiE,MAAS,KAAA,EAA+C;AACxI,EAAA,IAAI;AACH,IAAA,MAAM,MAAA,GAAS,mBAAmB,KAAK,CAAA;AACvC,IAAA,aAAA,CAAc,QAAQ,IAAI,CAAA;AAC1B,IAAA,OAAO,MAAA,CAAO,EAAE,EAAA,EAAI,IAAA,EAAe,KAAA,EAAO,MAAA,CAAO,UAAA,CAAW,IAAA,EAAM,MAAM,CAAC,CAAA,EAAyC,CAAA;AAAA,EACnH,SAAS,MAAA,EAAQ;AAChB,IAAA,OAAO,OAAA,CAAQ,GAAG,MAAM,CAAA,GAAI,aAAa,MAAA,CAAO,IAAA,EAAM,MAAA,CAAO,KAAK,CAAA,GAAI,kBAAA;AAAA,EACvE;AACD;AAGA,SAAS,eAAeA,MAAAA,EAAwB;AAC/C,EAAA,IAAIA,MAAAA,KAAU,cAAc,OAAO,IAAA;AACnC,EAAA,KAAA,MAAW,IAAA,IAAQ,+BAA+B,IAAI,OAAA,CAAQ,aAAa,IAAI,CAAA,EAAGA,MAAK,CAAA,EAAG,OAAO,IAAA;AACjG,EAAA,OAAO,KAAA;AACR;AAGO,SAAS,8BAAA,CAA+B,MAAkCA,MAAAA,EAAuB;AACvG,EAAA,OAAO,GAAG,IAAI,CAAA,EAAA,EAAK,eAAeA,MAAK,CAAA,GAAIA,SAAQ,YAAY,CAAA,CAAA,CAAA;AAChE;AAeA,IAAM,SAAA,GAAY,OAAO,EAAE,IAAA,EAAM,UAAU,SAAA,EAAW,CAAA,EAAG,SAAA,EAAW,GAAA,EAAK,CAAA;AACzE,IAAM,eAAe,MAAA,CAAO,EAAE,MAAM,SAAA,EAAW,OAAA,EAAS,GAAG,CAAA;AAC3D,IAAM,kBAAkB,MAAA,CAAO,EAAE,MAAM,SAAA,EAAW,OAAA,EAAS,GAAG,CAAA;AAC9D,IAAM,oBAAoB,MAAA,CAAO;AAAA,EAChC,IAAA,EAAM,QAAA;AAAA,EACN,SAAA,EAAW,6BAAA;AAAA,EACX,OAAA,EAAS,8CAAA;AAAA,EACT,WAAA,EAAa;AACd,CAAC,CAAA;AACD,IAAM,kBAAkB,MAAA,CAAO;AAAA,EAC9B,IAAA,EAAM,OAAA;AAAA,EACN,QAAA,EAAU,CAAA;AAAA,EACV,QAAA,EAAU,+BAAA;AAAA,EACV,OAAO,EAAE,IAAA,EAAM,UAAU,SAAA,EAAW,GAAA,EAAK,SAAS,6DAAA;AACnD,CAAC,CAAA;AACD,IAAM,UAAA,GAAa,OAAO,EAAE,IAAA,EAAM,UAAU,SAAA,EAAW,IAAA,EAAM,OAAA,EAAS,WAAA,EAAa,CAAA;AAEnF,SAAS,YAAA,CAAa,YAAoC,QAAA,EAAqC;AAC9F,EAAA,OAAO,EAAE,IAAA,EAAM,QAAA,EAAU,UAAA,EAAY,QAAA,EAAU,CAAC,GAAG,QAAQ,CAAA,EAAG,oBAAA,EAAsB,KAAA,EAAM;AAC3F;AAEA,IAAM,eAA4E,MAAA,CAAO;AAAA,EACxF,qBAAqB,MAAM,YAAA;AAAA,IAC1B,EAAE,cAAA,EAAgB,SAAA,EAAW,iBAAA,EAAmB,eAAA,EAAiB,gBAAgB,UAAA,EAAY,SAAA,EAAW,iBAAA,EAAmB,eAAA,EAAiB,EAAE,IAAA,EAAM,QAAA,EAAU,MAAM,CAAC,IAAI,GAAE,EAAE;AAAA,IAC7K,CAAC,gBAAA,EAAkB,mBAAA,EAAqB,gBAAA,EAAkB,WAAW;AAAA,GACtE;AAAA,EACA,qBAAqB,OAAO;AAAA,IAC3B,GAAG,YAAA,CAAa,EAAE,cAAA,EAAgB,SAAA,EAAW,mBAAmB,eAAA,EAAiB,gBAAA,EAAkB,eAAA,EAAiB,cAAA,EAAgB,YAAY,eAAA,EAAiB,eAAA,EAAgB,EAAG,CAAC,gBAAgB,CAAC,CAAA;AAAA,IACtM,KAAA,EAAO,CAAC,EAAE,QAAA,EAAU,CAAC,mBAAmB,CAAA,EAAE,EAAG,EAAE,QAAA,EAAU,CAAC,gBAAgB,GAAG;AAAA,GAC9E,CAAA;AAAA,EACA,kBAAA,EAAoB,MAAM,YAAA,CAAa,EAAE,cAAA,EAAgB,SAAA,EAAW,gBAAA,EAAkB,eAAA,EAAgB,EAAG,CAAC,gBAAgB,CAAC,CAAA;AAAA,EAC3H,mBAAA,EAAqB,MAAM,YAAA,CAAa,EAAE,cAAA,EAAgB,SAAA,EAAW,gBAAA,EAAkB,eAAA,EAAgB,EAAG,CAAC,gBAAgB,CAAC,CAAA;AAAA,EAC5H,mBAAA,EAAqB,MAAM,YAAA,CAAa,EAAE,cAAA,EAAgB,SAAA,EAAW,gBAAA,EAAkB,eAAA,EAAgB,EAAG,CAAC,gBAAgB,CAAC,CAAA;AAAA,EAC5H,sBAAsB,MAAM,YAAA;AAAA,IAC3B,EAAE,cAAA,EAAgB,SAAA,EAAW,SAAA,EAAW,iBAAA,EAAmB,eAAA,EAAiB,eAAA,EAAiB,yBAAA,EAA2B,EAAE,IAAA,EAAM,SAAA,EAAW,KAAA,EAAO,MAAK,EAAE;AAAA,IACzJ,CAAC,gBAAA,EAAkB,WAAA,EAAa,iBAAA,EAAmB,2BAA2B;AAAA,GAC/E;AAAA,EACA,uBAAA,EAAyB,MAAM,YAAA,CAAa,EAAE,gBAAgB,SAAA,EAAW,SAAA,EAAW,iBAAA,EAAmB,eAAA,EAAiB,eAAA,EAAgB,EAAG,CAAC,gBAAA,EAAkB,WAAW,CAAC,CAAA;AAAA,EAC1K,uBAAA,EAAyB,MAAM,YAAA,CAAa,EAAE,UAAA,EAAY,SAAA,EAAW,aAAA,EAAe,YAAA,EAAa,EAAG,CAAC,YAAA,EAAc,eAAe,CAAC,CAAA;AAAA,EACnI,mBAAA,EAAqB,MAAM,YAAA,CAAa,EAAE,OAAA,EAAS,SAAA,EAAW,aAAA,EAAe,YAAA,EAAa,EAAG,CAAC,SAAA,EAAW,eAAe,CAAC,CAAA;AAAA,EACzH,wBAAA,EAA0B,MAAM,YAAA,CAAa,EAAE,OAAA,EAAS,SAAA,EAAW,aAAA,EAAe,YAAA,EAAa,EAAG,CAAC,SAAA,EAAW,eAAe,CAAC;AAC/H,CAAC,CAAA;AAGD,IAAM,2BAAA,GAAN,cAA0C,KAAA,CAAM;AAAA,EAC/C,YAAY,OAAA,EAAiB;AAC5B,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,6BAAA;AAAA,EACb;AACD,CAAA;AAOO,SAAS,oBAAyD,IAAA,EAAkE;AAC1I,EAAA,MAAM,SAAA,GAAY,CAAC,KAAA,KAAmB;AACrC,IAAA,MAAM,IAAA,GAAO,2BAAA,CAA4B,IAAA,EAAM,KAAK,CAAA;AACpD,IAAA,IAAI,IAAA,CAAK,IAAI,OAAO,EAAE,SAAS,IAAA,EAAe,IAAA,EAAM,KAAK,KAAA,EAAM;AAC/D,IAAA,OAAO,EAAE,SAAS,KAAA,EAAgB,KAAA,EAAO,EAAE,MAAA,EAAQ,CAAC,EAAE,IAAA,EAAM,IAAqB,OAAA,EAAS,8BAAA,CAA+B,KAAK,IAAA,EAAM,IAAA,CAAK,KAAK,CAAA,EAAG,GAAE,EAAE;AAAA,EACtJ,CAAA;AACA,EAAA,OAAO,MAAA,CAAO;AAAA,IACb,MAAM,KAAA,EAAgB;AACrB,MAAA,MAAM,MAAA,GAAS,UAAU,KAAK,CAAA;AAC9B,MAAA,IAAI,MAAA,CAAO,OAAA,EAAS,OAAO,MAAA,CAAO,IAAA;AAClC,MAAA,MAAM,IAAI,2BAAA,CAA4B,MAAA,CAAO,MAAM,MAAA,CAAO,CAAC,EAAG,OAAO,CAAA;AAAA,IACtE,CAAA;AAAA,IACA,SAAA;AAAA,IACA,YAAA,EAAc,aAAa,IAAI;AAAA,GAC/B,CAAA;AACF;AAMA,IAAM,eAAA,GAAkB,wBAAA;AAGjB,IAAM,kCAAA,GAAqC;AAG3C,SAAS,2BAA2B,KAAA,EAAiC;AAC3E,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,IAAY,OAAA,CAAQ,iBAAiB,KAAK,CAAA;AACnE;AAGO,SAAS,mBAAA,CAAoB,WAAmB,QAAA,EAA0D;AAChH,EAAA,IAAI,OAAO,QAAA,KAAa,QAAA,IAAY,QAAA,CAAS,MAAA,IAAU,SAAA,CAAU,MAAA,GAAS,CAAA,IAAK,QAAA,CAAS,SAAA,CAAU,MAAM,CAAA,KAAM,KAAK,OAAO,MAAA;AAC1H,EAAA,IAAI,SAAS,KAAA,CAAM,CAAA,EAAG,UAAU,MAAM,CAAA,KAAM,WAAW,OAAO,MAAA;AAC9D,EAAA,MAAM,IAAA,GAAO,QAAA,CAAS,KAAA,CAAM,SAAA,CAAU,SAAS,CAAC,CAAA;AAChD,EAAA,KAAA,MAAW,SAAA,IAAa,6BAAA,EAA+B,IAAI,SAAA,KAAc,MAAM,OAAO,SAAA;AACtF,EAAA,OAAO,MAAA;AACR;;;ACzUO,SAAS,uBAAA,CAAwB,YAAoB,kCAAA,EAA4D;AACvH,EAAA,OAAO,GAAG,SAAS,CAAA,uBAAA,CAAA;AACpB;AAmBA,IAAM,YAAA,GAAe,qBAAA;AACrB,IAAM,MAAA,GAAS,uBAAA;AACf,IAAM,GAAA,GAAM,kBAAA;AAGZ,SAASuD,SAAQ,IAAA,EAA8C;AAC9D,EAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,CAAA,uBAAA,EAA0B,IAAI,CAAA,CAAA,EAAG;AAClE;AAGA,SAAS,OAAA,CAAQ,SAAA,EAA2C,WAAA,EAAqB,SAAA,EAAmB,OAAA,EAAgD;AACnJ,EAAA,OAAO;AAAA,IACN,OAAA,EAAS,IAAA;AAAA,IACT,IAAA,EAAM,EAAE,GAAG,OAAA,EAAS,SAAS,CAAC,EAAE,SAAA,EAAW,kBAAA,EAAoB,CAAA,EAAG,WAAA,EAAa,SAAA,EAAW,OAAA,EAAS,CAAA;AAAE,GACtG;AACD;AAUA,IAAM,OAAN,MAAW;AAAA,EACD,MAAA,GAAS,IAAA;AAAA,EACT,IAAA;AAAA,EAET,YAAY,IAAA,EAAgC;AAC3C,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,MAAA,CAAO,IAAI,CAAA;AAAA,EACZ;AAAA;AAAA,EAGA,OAAO,GAAG,KAAA,EAA+B;AACxC,IAAA,OAAO,KAAA,KAAU,IAAA,IAAQ,OAAO,KAAA,KAAU,YAAY,MAAA,IAAU,KAAA;AAAA,EACjE;AACD,CAAA;AAEA,SAAS,KAAK,IAAA,EAAuC;AACpD,EAAA,MAAM,IAAI,KAAK,IAAI,CAAA;AACpB;AAEA,IAAM,2BAA2B,OAAA,CAAQ,wBAAA;AAGzC,SAAS,IAAA,CAAK,OAAgB,GAAA,EAAsB;AACnD,EAAA,IAAI,KAAA,KAAU,IAAA,IAAQ,OAAO,KAAA,KAAU,UAAU,OAAO,MAAA;AACxD,EAAA,IAAI;AACH,IAAA,MAAM,UAAA,GAAa,wBAAA,CAAyB,KAAA,EAAO,GAAG,CAAA;AACtD,IAAA,OAAO,UAAA,KAAe,KAAA,CAAA,IAAa,OAAA,IAAW,UAAA,GAAa,WAAW,KAAA,GAAQ,KAAA,CAAA;AAAA,EAC/E,CAAA,CAAA,MAAQ;AACP,IAAA,OAAO,MAAA;AAAA,EACR;AACD;AAEA,SAASZ,OAAM,KAAA,EAAoC;AAClD,EAAA,OAAO,OAAO,UAAU,QAAA,IAAY,mBAAA,CAAoB,KAAK,CAAA,IAAK,KAAA,IAAS,IAAI,KAAA,GAAQ,MAAA;AACxF;AAEA,SAAS,MAAM,IAAA,EAAoB;AAClC,EAAA,IAAI;AACH,IAAA,OAAO,eAAA,CAAgB,KAAK,KAAK,CAAA;AAAA,EAClC,CAAA,CAAA,MAAQ;AACP,IAAA,OAAO,KAAK,eAAe,CAAA;AAAA,EAC5B;AACD;AAOA,eAAe,IAAA,CAAQ,IAAA,EAAY,GAAA,EAAkD,MAAA,EAAkE;AACtJ,EAAA,MAAM,OAAA,GAAU,MAAM,WAAA,CAAY,KAAA,CAAM,IAAI,CAAA,EAAG,IAAA,CAAK,MAAA,CAAO,aAAA,EAAe,QAAQ,GAAA,EAAK,MAAM,eAAA,CAAgB,IAAA,CAAK,KAAK,CAAC,CAAA;AACxH,EAAA,OAAO,QAAQ,EAAA,GAAK,EAAE,KAAA,EAAO,OAAA,CAAQ,OAAM,GAAI,MAAA;AAChD;AAOA,SAAS,QAAQ,GAAA,EAA2C;AAC3D,EAAA,MAAM,QAAA,GAAW,IAAA,CAAK,GAAA,EAAK,UAAU,CAAA;AACrC,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,GAAA,EAAK,SAAS,CAAA;AACnC,EAAA,IAAI,CAAC,oBAAoB,QAAQ,CAAA,IAAK,CAAC,mBAAA,CAAoB,OAAO,CAAA,EAAG,IAAA,CAAK,eAAe,CAAA;AACzF,EAAA,OAAO,MAAA,CAAO,EAAE,QAAA,EAAU,OAAA,EAAS,CAAA;AACpC;AAEA,SAAS,QAAQ,GAAA,EAAqC;AACrD,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,GAAA,EAAK,SAAS,CAAA;AACnC,EAAA,IAAI,CAAC,mBAAA,CAAoB,OAAO,CAAA,OAAQ,eAAe,CAAA;AACvD,EAAA,OAAO,OAAA;AACR;AAEA,SAAS,aAAa,GAAA,EAAiD;AACtE,EAAA,MAAM,EAAA,GAAK,IAAA,CAAK,GAAA,EAAK,oBAAoB,CAAA;AACzC,EAAA,OAAO,mBAAA,CAAoB,EAAE,CAAA,GAAI,EAAA,GAAK,MAAA;AACvC;AAaA,eAAe,mBAAA,CAAoB,IAAA,EAAY,KAAA,EAAqB,cAAA,EAAmD;AACtH,EAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,IAAA,EAAM,CAAC,OAAA,KAAY,IAAA,CAAK,aAAA,CAAc,gBAAA,CAAiB,EAAE,GAAG,KAAA,EAAO,cAAA,EAAe,EAAG,OAAO,CAAC,CAAA;AACvH,EAAA,IAAI,MAAA,KAAW,MAAA,EAAW,OAAO,IAAA,CAAK,mBAAmB,CAAA;AACzD,EAAA,IAAI,MAAA,CAAO,KAAA,KAAU,IAAA,EAAM,OAAO,KAAK,wBAAwB,CAAA;AAC/D,EAAA,MAAM,aAAA,GAAgB,IAAA,CAAK,MAAA,CAAO,KAAA,EAAO,eAAe,CAAA;AACxD,EAAA,MAAM,IAAA,GAAO;AAAA,IACZ,MAAA,EAAQ,IAAA,CAAK,MAAA,CAAO,KAAA,EAAO,QAAQ,CAAA;AAAA,IACnC,qBAAqBA,MAAAA,CAAM,IAAA,CAAK,MAAA,CAAO,KAAA,EAAO,qBAAqB,CAAC,CAAA;AAAA,IACpE,OAAA,EAASA,MAAAA,CAAM,IAAA,CAAK,aAAA,EAAe,SAAS,CAAC,CAAA;AAAA,IAC7C,cAAA,EAAgB,IAAA,CAAK,aAAA,EAAe,gBAAgB,CAAA;AAAA,IACpD,eAAA,EAAiB,IAAA,CAAK,aAAA,EAAe,iBAAiB,CAAA;AAAA,IACtD,SAAA,EAAW,IAAA,CAAK,aAAA,EAAe,WAAW;AAAA,GAC3C;AAEA,EAAA,IAAI,KAAK,MAAA,CAAO,KAAA,EAAO,gBAAgB,CAAA,KAAM,cAAA,IAAkB,KAAK,MAAA,CAAO,KAAA,EAAO,UAAU,CAAA,KAAM,KAAA,CAAM,YAAY,IAAA,CAAK,MAAA,CAAO,OAAO,SAAS,CAAA,KAAM,MAAM,OAAA,EAAS;AACpK,IAAA,OAAO,KAAK,wBAAwB,CAAA;AAAA,EACrC;AACA,EAAA,IAAI,CAAC,OAAA,CAAQ,CAAC,QAAA,EAAU,QAAA,EAAU,SAAS,CAAA,EAAG,IAAA,CAAK,MAAM,CAAA,IAAK,IAAA,CAAK,mBAAA,KAAwB,MAAA,IAAa,IAAA,CAAK,mBAAA,GAAsB,CAAA,IAClI,IAAA,CAAK,OAAA,KAAY,MAAA,IAAa,OAAO,IAAA,CAAK,cAAA,KAAmB,QAAA,IAC7D,IAAA,CAAK,eAAA,KAAoB,IAAA,IAAQ,OAAO,IAAA,CAAK,cAAc,QAAA,EAAU;AACrE,IAAA,OAAO,KAAK,mBAAmB,CAAA;AAAA,EAChC;AACA,EAAA,OAAO,IAAA;AACR;AAGA,eAAe,eAAA,CAAgB,IAAA,EAAY,KAAA,EAAqB,SAAA,EAAmB,MAAA,EAAqC;AACvH,EAAA,MAAM,SAAS,MAAM,IAAA,CAAK,IAAA,EAAM,CAAC,YAAY,IAAA,CAAK,gBAAA,CAAiB,MAAA,CAAO,EAAE,GAAG,KAAA,EAAO,SAAA,EAAU,EAAG,OAAO,GAAG,MAAM,CAAA;AACnH,EAAA,IAAI,MAAA,KAAW,MAAA,EAAW,IAAA,CAAK,uBAAuB,CAAA;AACtD,EAAA,IAAI,MAAA,CAAO,KAAA,KAAU,SAAA,EAAW,IAAA,CAAK,oBAAoB,CAAA;AACzD,EAAA,IAAI,MAAA,CAAO,KAAA,KAAU,OAAA,EAAS,IAAA,CAAK,uBAAuB,CAAA;AAC3D;AAGA,eAAe,cAAA,CAAe,MAAY,GAAA,EAA4B;AACrE,EAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,IAAA,EAAM,CAAC,OAAA,KAAY,IAAA,CAAK,QAAA,CAAS,OAAA,CAAQ,GAAA,EAAK,OAAO,CAAC,CAAA;AAChF,EAAA,IAAI,MAAA,KAAW,MAAA,EAAW,IAAA,CAAK,wBAAwB,CAAA;AACvD,EAAA,IAAI,IAAA,CAAK,MAAA,CAAO,KAAA,EAAO,IAAI,MAAM,IAAA,EAAM;AACvC,EAAA,MAAM,IAAA,GAAO,IAAA,CAAK,MAAA,CAAO,KAAA,EAAO,MAAM,CAAA;AACtC,EAAA,IAAA,CAAK,IAAA,KAAS,aAAA,IAAiB,IAAA,KAAS,iBAAA,GAAoB,wBAAwB,wBAAwB,CAAA;AAC7G;AAEA,IAAM,wBAAkF,MAAA,CAAO;AAAA,EAC9F,SAAA,EAAW,wBAAA;AAAA,EACX,cAAA,EAAgB,qBAAA;AAAA,EAChB,OAAA,EAAS,sBAAA;AAAA,EACT,kBAAA,EAAoB,oBAAA;AAAA,EACpB,iBAAA,EAAmB,mBAAA;AAAA,EACnB,gBAAA,EAAkB;AACnB,CAAC,CAAA;AAED,IAAM,oBAA8E,MAAA,CAAO;AAAA,EAC1F,SAAA,EAAW,WAAA;AAAA,EACX,KAAA,EAAO,OAAA;AAAA,EACP,eAAA,EAAiB,iBAAA;AAAA,EACjB,YAAA,EAAc,qBAAA;AAAA,EACd,cAAA,EAAgB,gBAAA;AAAA,EAChB,aAAA,EAAe,eAAA;AAAA,EACf,gBAAA,EAAkB;AACnB,CAAC,CAAA;AAED,SAAS,UAAA,CAAW,OAAiE,OAAA,EAA4C;AAChI,EAAA,OAAO,OAAO,OAAA,KAAY,QAAA,IAAY,OAAA,CAAQ,MAAA,CAAO,IAAA,CAAK,KAAK,CAAA,EAAG,OAAO,CAAA,GAAI,KAAA,CAAM,OAAO,CAAA,GAAK,uBAAA;AAChG;AAOA,SAAS,OAAA,CAAQ,QAAiD,QAAA,EAA6E;AAC9I,EAAA,IAAI,MAAA,KAAW,MAAA,EAAW,OAAO,IAAA,CAAK,uBAAuB,CAAA;AAC7D,EAAA,MAAMa,KAAAA,GAAO,IAAA,CAAK,MAAA,CAAO,KAAA,EAAO,SAAS,CAAA;AACzC,EAAA,IAAIA,KAAAA,KAAS,IAAA,EAAM,OAAO,MAAA,CAAO,KAAA;AACjC,EAAA,IAAIA,KAAAA,KAAS,KAAA,EAAO,OAAO,IAAA,CAAK,UAAA,CAAW,QAAA,EAAU,IAAA,CAAK,MAAA,CAAO,KAAA,EAAO,SAAS,CAAC,CAAC,CAAA;AACnF,EAAA,OAAO,KAAK,uBAAuB,CAAA;AACpC;AAYA,eAAe,aAAA,CAAc,IAAA,EAAY,KAAA,EAAqB,YAAA,EAAkC,MAAA,EAA0C;AACzI,EAAA,IAAI,YAAA,KAAiB,QAAW,OAAO,MAAA;AACvC,EAAA,MAAM,SAAS,MAAM,IAAA,CAAK,IAAA,EAAM,CAAC,YAAY,IAAA,CAAK,UAAA,CAAW,6BAAA,CAA8B,EAAE,GAAG,KAAA,EAAO,kBAAA,EAAoB,YAAA,EAAa,EAAG,OAAO,CAAC,CAAA;AACnJ,EAAA,IAAI,MAAA,KAAW,MAAA,EAAW,OAAO,IAAA,CAAK,mBAAmB,CAAA;AACzD,EAAA,MAAM,OAAO,MAAA,CAAO,KAAA;AACpB,EAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA,EAAG,OAAO,KAAK,mBAAmB,CAAA;AACzD,EAAA,KAAA,MAAW,YAAY,IAAA,EAAM;AAC5B,IAAA,IAAI,IAAA,CAAK,QAAA,EAAU,oBAAoB,CAAA,KAAM,YAAA,IAAgB,KAAK,QAAA,EAAU,QAAQ,CAAA,KAAM,MAAA,CAAO,MAAA,EAAQ;AACzG,IAAA,IAAI,IAAA,CAAK,QAAA,EAAU,UAAU,CAAA,KAAM,KAAA,CAAM,QAAA,IAAY,IAAA,CAAK,QAAA,EAAU,SAAS,CAAA,KAAM,KAAA,CAAM,OAAA,EAAS;AAClG,IAAA,IAAI,MAAA,CAAO,MAAA,KAAW,iBAAA,GAAoB,IAAA,CAAK,UAAU,YAAY,CAAA,KAAM,MAAA,CAAO,UAAA,GAAa,KAAK,QAAA,EAAU,SAAS,CAAA,KAAM,MAAA,CAAO,SAAS,OAAO,QAAA;AAAA,EACrJ;AACA,EAAA,OAAO,MAAA;AACR;AA6BA,eAAe,iBAAA,CACd,IAAA,EACA,KAAA,EACA,YAAA,EACA,QACAC,MAAAA,EACmB;AACnB,EAAA,MAAM,QAAQ,MAAM,aAAA,CAAc,IAAA,EAAM,KAAA,EAAO,cAAc,MAAM,CAAA;AACnE,EAAA,IAAI,KAAA,KAAU,QAAW,OAAO,KAAA;AAChC,EAAA,IAAI;AACH,IAAA,OAAO,MAAMA,MAAAA,EAAM;AAAA,EACpB,SAAS,MAAA,EAAQ;AAChB,IAAA,IAAI,YAAA,KAAiB,QAAW,MAAM,MAAA;AACtC,IAAA,IAAI,SAAA;AACJ,IAAA,IAAI;AACH,MAAA,SAAA,GAAY,MAAM,aAAA,CAAc,IAAA,EAAM,KAAA,EAAO,cAAc,MAAM,CAAA;AAAA,IAClE,CAAA,CAAA,MAAQ;AACP,MAAA,MAAM,MAAA;AAAA,IACP;AACA,IAAA,IAAI,SAAA,KAAc,QAAW,OAAO,SAAA;AACpC,IAAA,MAAM,MAAA;AAAA,EACP;AACD;AAeA,SAAS,iBAAA,CACR,SAAA,EACA,cAAA,EACA,OAAA,EACe;AACf,EAAA,OAAO,OAAA,CAAQ,WAAW,YAAA,EAAc,cAAA,EAAgB,EAAE,cAAA,EAAgB,GAAG,SAAS,CAAA;AACvF;AAEA,SAAS,WAAW,MAAA,EAAyB;AAC5C,EAAA,MAAM,QAAA,GAAWd,OAAM,IAAA,CAAK,IAAA,CAAK,QAAQ,UAAU,CAAA,EAAG,UAAU,CAAC,CAAA;AACjE,EAAA,OAAO,QAAA,IAAY,KAAK,uBAAuB,CAAA;AAChD;AAEA,SAAS,UAAU,MAAA,EAAyB;AAC3C,EAAA,MAAM,OAAA,GAAUA,OAAM,IAAA,CAAK,IAAA,CAAK,QAAQ,eAAe,CAAA,EAAG,SAAS,CAAC,CAAA;AACpE,EAAA,OAAO,OAAA,IAAW,KAAK,uBAAuB,CAAA;AAC/C;AAGA,eAAe,gBAAA,CACd,IAAA,EACA,KAAA,EACA,MAAA,EACA,IAAA,EACwB;AACxB,EAAA,MAAM,KAAA,GAAQ,IAAA,KAAS,OAAA,GACpB,CAAC,OAAA,KAAgC,IAAA,CAAK,aAAA,CAAc,iBAAA,CAAkB,EAAE,GAAG,KAAA,EAAO,GAAG,MAAA,EAAO,EAAG,OAAO,CAAA,GACtG,CAAC,OAAA,KAAgC,IAAA,CAAK,aAAA,CAAc,kBAAA,CAAmB,EAAE,GAAG,KAAA,EAAO,GAAG,MAAA,EAAO,EAAG,OAAO,CAAA;AAC1G,EAAA,MAAM,QAAA,GAAW,WAAW,OAAA,CAAQ,MAAM,KAAK,IAAA,EAAM,KAAK,CAAA,EAAG,qBAAqB,CAAC,CAAA;AACnF,EAAA,MAAM,uBAAA,GAA0B,MAAM,OAAA,CAAQ,IAAA,EAAM,KAAA,EAAO,MAAA,CAAO,cAAA,EAAgB,IAAA,KAAS,OAAA,GAAU,qBAAA,GAAwB,sBAAA,EAAwB,QAAQ,CAAA;AAC7J,EAAA,OAAO,kBAAkB,IAAA,KAAS,OAAA,GAAU,2BAAA,GAA8B,4BAAA,EAA8B,OAAO,cAAA,EAAgB;AAAA,IAC9H,QAAA;AAAA,IACA;AAAA,GACA,CAAA;AACF;AAaA,eAAe,OAAA,CACd,IAAA,EACA,KAAA,EACA,cAAA,EACA,QACA,cAAA,EACyB;AACzB,EAAA,MAAM,SAAA,GAAY,MAAM,IAAA,CAAK,IAAA,EAAM,CAAC,OAAA,KAAY,IAAA,CAAK,WAAW,oBAAA,CAAqB;AAAA,IACpF,GAAG,KAAA;AAAA,IACH,cAAA;AAAA,IACA,MAAA;AAAA,IACA,cAAA;AAAA,IACA,GAAA,EAAK,IAAI,IAAA,CAAK,KAAA,CAAM,IAAI,CAAC;AAAA,GAC1B,EAAG,OAAO,CAAC,CAAA;AACX,EAAA,OAAA,CAAQ,cAAc,MAAA,GAAY,MAAA,GAAYA,MAAAA,CAAM,SAAA,CAAU,KAAK,CAAA,KAAM,IAAA;AAC1E;AAGA,eAAe,MAAA,CACd,IAAA,EACA,KAAA,EACA,MAAA,EACA,IAAA,EACwB;AACxB,EAAA,MAAM,UAAU,MAAM,mBAAA,CAAoB,IAAA,EAAM,KAAA,EAAO,OAAO,cAAc,CAAA;AAC5E,EAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,SAAA,EAAW,IAAA,CAAK,sBAAsB,CAAA;AAC7D,EAAA,IAAI,MAAA,CAAO,oBAAoB,MAAA,IAAa,MAAA,CAAO,oBAAoB,OAAA,CAAQ,OAAA,OAAc,kBAAkB,CAAA;AAC/G,EAAA,IAAI,MAAA,CAAO,SAAA,KAAc,OAAA,CAAQ,SAAA,OAAgB,sBAAsB,CAAA;AACvE,EAAA,MAAM,eAAA,CAAgB,IAAA,EAAM,KAAA,EAAO,MAAA,CAAO,SAAS,CAAA;AACnD,EAAA,MAAM,MAAA,GAAS,QAAQ,MAAM,IAAA,CAAK,MAAM,CAAC,OAAA,KAAY,IAAA,CAAK,aAAA,CAAc,4BAAA,CAA6B;AAAA,IACpG,GAAG,KAAA;AAAA,IACH,gBAAgB,MAAA,CAAO,cAAA;AAAA,IACvB,aAAA,EAAe,EAAE,cAAA,EAAgB,OAAA,CAAQ,cAAA,EAAgB,iBAAiB,OAAA,CAAQ,eAAA,EAAiB,SAAA,EAAW,MAAA,CAAO,SAAA,EAAU;AAAA;AAAA;AAAA,IAG/H,eAAA,EAAiB,MAAA,CAAO,eAAA,IAAmB,OAAA,CAAQ;AAAA,GACpD,EAAG,OAAO,CAAC,CAAA,EAAG,qBAAqB,CAAA;AACnC,EAAA,MAAM,oBAAA,GAAuB,UAAU,MAAM,CAAA;AAC7C,EAAA,MAAM,aAAA,GAAgB,MAAM,IAAI,CAAA;AAIhC,EAAA,MAAM,WAAW,IAAA,CAAK,MAAA,CAAO,gBAAgB,IAAA,CAAK,MAAA,CAAO,mBAAmB,IAAA,CAAK,mBAAA;AACjF,EAAA,OAAO,iBAAA,CAAkB,sBAAA,EAAwB,MAAA,CAAO,cAAA,EAAgB;AAAA,IACvE,IAAA;AAAA,IACA,oBAAA;AAAA,IACA,WAAA,EAAa,MAAM,aAAa,CAAA;AAAA,IAChC,2BAA2B,IAAA,KAAS,QAAA,GAAW,KAAA,CAAM,aAAA,GAAgB,QAAQ,CAAA,GAAI;AAAA,GACjF,CAAA;AACF;AAEA,IAAM,WAAqB,MAAA,CAAO;AAAA,EACjC,MAAM,mBAAA,CAAoB,IAAA,EAAM,IAAA,EAAM,OAAO,MAAA,EAAQ;AACpD,IAAA,MAAM,eAAA,CAAgB,IAAA,EAAM,KAAA,EAAO,MAAA,CAAO,SAAS,CAAA;AACnD,IAAA,MAAM,cAAA,CAAe,IAAA,EAAM,MAAA,CAAO,cAAc,CAAA;AAChD,IAAA,MAAM,MAAA,GAAS,QAAQ,MAAM,IAAA,CAAK,MAAM,CAAC,OAAA,KAAY,IAAA,CAAK,aAAA,CAAc,kBAAA,CAAmB;AAAA,MAC1F,GAAG,KAAA;AAAA,MACH,gBAAgB,MAAA,CAAO,cAAA;AAAA,MACvB,mBAAmB,MAAA,CAAO,iBAAA;AAAA,MAC1B,aAAA,EAAe,EAAE,cAAA,EAAgB,MAAA,CAAO,gBAAgB,eAAA,EAAiB,IAAA,EAAM,SAAA,EAAW,MAAA,CAAO,SAAA;AAAU,KAC5G,EAAG,OAAO,CAAC,CAAA,EAAG,qBAAqB,CAAA;AACnC,IAAA,OAAO,iBAAA,CAAkB,4BAAA,EAA8B,MAAA,CAAO,cAAA,EAAgB;AAAA,MAC7E,QAAA,EAAU,WAAW,MAAM,CAAA;AAAA,MAC3B,oBAAA,EAAsB,UAAU,MAAM,CAAA;AAAA,MACtC,iBAAA,EAAmB,CAAC,GAAG,MAAA,CAAO,iBAAiB;AAAA,KAC/C,CAAA;AAAA,EACF,CAAA;AAAA,EAEA,MAAM,mBAAA,CAAoB,IAAA,EAAM,IAAA,EAAM,OAAO,MAAA,EAAQ;AACpD,IAAA,IAAI,uBAAuB,MAAA,EAAQ;AAClC,MAAA,MAAMe,UAAS,OAAA,CAAQ,MAAM,KAAK,IAAA,EAAM,CAAC,YAAY,IAAA,CAAK,aAAA,CAAc,wBAAwB,EAAE,GAAG,OAAO,GAAG,MAAA,IAAU,OAAO,CAAC,GAAG,qBAAqB,CAAA;AACzJ,MAAA,OAAO,iBAAA,CAAkB,4BAAA,EAA8B,MAAA,CAAO,cAAA,EAAgB;AAAA,QAC7E,MAAA,EAAQ,qBAAA;AAAA,QACR,QAAA,EAAU,WAAWA,OAAM,CAAA;AAAA,QAC3B,iBAAA,EAAmB,CAAC,GAAG,MAAA,CAAO,iBAAiB;AAAA,OAC/C,CAAA;AAAA,IACF;AACA,IAAA,MAAM,UAAU,MAAM,mBAAA,CAAoB,IAAA,EAAM,KAAA,EAAO,OAAO,cAAc,CAAA;AAC5E,IAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,SAAA,EAAW,IAAA,CAAK,sBAAsB,CAAA;AAC7D,IAAA,IAAI,MAAA,CAAO,oBAAoB,MAAA,IAAa,MAAA,CAAO,oBAAoB,OAAA,CAAQ,OAAA,OAAc,kBAAkB,CAAA;AAC/G,IAAA,MAAM,cAAA,CAAe,IAAA,EAAM,MAAA,CAAO,cAAc,CAAA;AAChD,IAAA,MAAM,MAAA,GAAS,QAAQ,MAAM,IAAA,CAAK,MAAM,CAAC,OAAA,KAAY,IAAA,CAAK,aAAA,CAAc,4BAAA,CAA6B;AAAA,MACpG,GAAG,KAAA;AAAA,MACH,gBAAgB,MAAA,CAAO,cAAA;AAAA,MACvB,aAAA,EAAe,EAAE,cAAA,EAAgB,MAAA,CAAO,cAAA,EAAgB,iBAAiB,OAAA,CAAQ,eAAA,EAAiB,SAAA,EAAW,OAAA,CAAQ,SAAA,EAAU;AAAA,MAC/H,eAAA,EAAiB,MAAA,CAAO,eAAA,IAAmB,OAAA,CAAQ;AAAA,KACpD,EAAG,OAAO,CAAC,CAAA,EAAG,qBAAqB,CAAA;AACnC,IAAA,OAAO,iBAAA,CAAkB,4BAAA,EAA8B,MAAA,CAAO,cAAA,EAAgB;AAAA,MAC7E,MAAA,EAAQ,aAAA;AAAA,MACR,oBAAA,EAAsB,UAAU,MAAM;AAAA,KACtC,CAAA;AAAA,EACF,CAAA;AAAA,EAEA,kBAAA,EAAoB,CAAC,IAAA,EAAM,IAAA,EAAM,KAAA,EAAO,WAAW,gBAAA,CAAiB,IAAA,EAAM,KAAA,EAAO,MAAA,EAAQ,OAAO,CAAA;AAAA,EAEhG,MAAM,mBAAA,CAAoB,IAAA,EAAM,IAAA,EAAM,OAAO,MAAA,EAAQ;AAOpD,IAAA,MAAM,SAAS,OAAA,CAAQ,MAAM,KAAK,IAAA,EAAM,CAAC,YAAY,IAAA,CAAK,aAAA,CAAc,mBAAmB,EAAE,GAAG,OAAO,GAAG,MAAA,IAAU,OAAO,CAAC,GAAG,qBAAqB,CAAA;AACpJ,IAAA,MAAM,QAAA,GAAW,WAAW,MAAM,CAAA;AAClC,IAAA,MAAM,uBAAA,GAA0B,MAAM,OAAA,CAAQ,IAAA,EAAM,OAAO,MAAA,CAAO,cAAA,EAAgB,uBAAuB,QAAQ,CAAA;AACjH,IAAA,OAAO,kBAAkB,4BAAA,EAA8B,MAAA,CAAO,gBAAgB,EAAE,QAAA,EAAU,yBAAyB,CAAA;AAAA,EACpH,CAAA;AAAA,EAEA,mBAAA,EAAqB,CAAC,IAAA,EAAM,IAAA,EAAM,KAAA,EAAO,WAAW,gBAAA,CAAiB,IAAA,EAAM,KAAA,EAAO,MAAA,EAAQ,QAAQ,CAAA;AAAA,EAElG,oBAAA,EAAsB,CAAC,IAAA,EAAM,IAAA,EAAM,KAAA,EAAO,WAAW,MAAA,CAAO,IAAA,EAAM,KAAA,EAAO,MAAA,EAAQ,QAAQ,CAAA;AAAA,EAEzF,uBAAA,EAAyB,CAAC,IAAA,EAAM,IAAA,EAAM,KAAA,EAAO,WAAW,MAAA,CAAO,IAAA,EAAM,KAAA,EAAO,MAAA,EAAQ,WAAW,CAAA;AAAA,EAE/F,MAAM,uBAAA,CAAwB,IAAA,EAAM,GAAA,EAAK,OAAO,MAAA,EAAQ;AACvD,IAAA,MAAM,WAAA,GAAc,QAAQ,GAAG,CAAA;AAC/B,IAAA,MAAM,YAAA,GAAe,aAAa,GAAG,CAAA;AACrC,IAAA,MAAM,QAAA,GAAW,MAAM,iBAAA,CAAkB,IAAA,EAAM,KAAA,EAAO,YAAA,EAAc,EAAE,MAAA,EAAQ,iBAAA,EAAmB,UAAA,EAAY,MAAA,CAAO,UAAA,IAAc,YAAY;AAC7I,MAAA,MAAM,OAAO,MAAM,IAAA,CAAK,IAAA,EAAM,CAAC,YAAY,IAAA,CAAK,UAAA,CAAW,kBAAA,CAAmB,EAAE,GAAG,KAAA,EAAO,UAAA,EAAY,OAAO,UAAA,EAAW,EAAG,OAAO,CAAC,CAAA;AACnI,MAAA,IAAI,IAAA,KAAS,KAAA,CAAA,EAAW,OAAO,IAAA,CAAK,mBAAmB,CAAA;AACvD,MAAA,IAAI,IAAA,CAAK,KAAA,KAAU,IAAA,EAAM,OAAO,KAAK,WAAW,CAAA;AAChD,MAAA,MAAMC,eAAAA,GAAiB,IAAA,CAAK,IAAA,CAAK,KAAA,EAAO,gBAAgB,CAAA;AACxD,MAAA,MAAM,sBAAsBhB,MAAAA,CAAM,IAAA,CAAK,IAAA,CAAK,KAAA,EAAO,qBAAqB,CAAC,CAAA;AACzE,MAAA,IAAI,CAAC,oBAAoBgB,eAAc,CAAA,IAAK,wBAAwB,KAAA,CAAA,EAAW,OAAO,KAAK,mBAAmB,CAAA;AAG9G,MAAA,MAAM,YAAA,GAAe,MAAM,mBAAA,CAAoB,IAAA,EAAM,OAAOA,eAAc,CAAA;AAC1E,MAAA,IAAI,YAAA,CAAa,MAAA,KAAW,QAAA,EAAU,IAAA,CAAK,yBAAyB,CAAA;AAIpE,MAAA,IAAI,mBAAA,GAAsB,YAAA,CAAa,mBAAA,EAAqB,IAAA,CAAK,qBAAqB,CAAA;AACtF,MAAA,MAAM,cAAA,CAAe,IAAA,EAAM,YAAA,CAAa,cAAc,CAAA;AACtD,MAAA,MAAM,GAAA,GAAM,MAAM,IAAI,CAAA;AACtB,MAAA,OAAO,IAAA,CAAK,QAAQ,MAAM,IAAA,CAAK,MAAM,CAAC,OAAA,KAAY,IAAA,CAAK,UAAA,CAAW,qBAAA,CAAsB;AAAA,QACvF,GAAG,KAAA;AAAA,QACH,YAAY,MAAA,CAAO,UAAA;AAAA;AAAA;AAAA,QAGnB,OAAA,EAAS;AAAA,UACR,cAAA,EAAgB,aAAA;AAAA,UAChB,eAAe,MAAA,CAAO,aAAA;AAAA,UACtB,WAAA;AAAA,UACA,WAAA,EAAa,IAAI,IAAA,CAAK,GAAG,CAAA;AAAA,UACzB,oBAAoB,IAAI,IAAA,CAAK,GAAA,GAAM,IAAA,CAAK,OAAO,kBAAkB,CAAA;AAAA,UACjE,GAAI,YAAA,KAAiB,KAAA,CAAA,GAAY,EAAC,GAAI,EAAE,oBAAoB,YAAA;AAAa;AAC1E,SACE,OAAO,CAAC,CAAA,EAAG,iBAAiB,GAAG,UAAU,CAAA;AAAA,IAC7C,CAAC,CAAA;AAED,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,QAAA,EAAU,SAAS,CAAA;AACxC,IAAA,IAAI,CAAC,mBAAA,CAAoB,OAAO,CAAA,EAAG,OAAO,KAAK,uBAAuB,CAAA;AACtE,IAAA,MAAM,cAAA,GAAiB,IAAA,CAAK,QAAA,EAAU,gBAAgB,CAAA,IAAK,MAAM,wBAAA,CAAyB,IAAA,EAAM,KAAA,EAAO,MAAA,CAAO,UAAA,EAAY,OAAO,CAAA;AACjI,IAAA,IAAI,CAAC,mBAAA,CAAoB,cAAc,CAAA,EAAG,OAAO,KAAK,uBAAuB,CAAA;AAC7E,IAAA,OAAO,OAAA,CAAQ,+BAAA,EAAiC,MAAA,EAAQ,MAAA,CAAO,UAAA,EAAY;AAAA,MAC1E,YAAY,MAAA,CAAO,UAAA;AAAA,MACnB,cAAA;AAAA,MACA,OAAA;AAAA,MACA,GAAG,eAAe,QAAQ;AAAA,KAC1B,CAAA;AAAA,EACF,CAAA;AAAA,EAEA,MAAM,mBAAA,CAAoB,IAAA,EAAM,GAAA,EAAK,OAAO,MAAA,EAAQ;AACnD,IAAA,MAAM,WAAA,GAAc,QAAQ,GAAG,CAAA;AAC/B,IAAA,MAAM,YAAA,GAAe,aAAa,GAAG,CAAA;AACrC,IAAA,MAAM,QAAA,GAAW,MAAM,iBAAA,CAAkB,IAAA,EAAM,KAAA,EAAO,YAAA,EAAc,EAAE,MAAA,EAAQ,aAAA,EAAe,OAAA,EAAS,MAAA,CAAO,OAAA,IAAW,YAAY;AACnI,MAAA,MAAM,GAAA,GAAM,MAAM,IAAI,CAAA;AACtB,MAAA,OAAO,IAAA,CAAK,QAAQ,MAAM,IAAA,CAAK,MAAM,CAAC,OAAA,KAAY,IAAA,CAAK,UAAA,CAAW,gBAAA,CAAiB;AAAA,QAClF,GAAG,KAAA;AAAA,QACH,SAAS,MAAA,CAAO,OAAA;AAAA,QAChB,OAAA,EAAS;AAAA,UACR,cAAA,EAAgB,aAAA;AAAA,UAChB,eAAe,MAAA,CAAO,aAAA;AAAA,UACtB,WAAA;AAAA,UACA,WAAA,EAAa,IAAI,IAAA,CAAK,GAAG,CAAA;AAAA,UACzB,oBAAoB,IAAI,IAAA,CAAK,GAAA,GAAM,IAAA,CAAK,OAAO,gBAAgB,CAAA;AAAA,UAC/D,GAAI,YAAA,KAAiB,KAAA,CAAA,GAAY,EAAC,GAAI,EAAE,oBAAoB,YAAA;AAAa;AAC1E,SACE,OAAO,CAAC,CAAA,EAAG,iBAAiB,GAAG,UAAU,CAAA;AAAA,IAC7C,CAAC,CAAA;AACD,IAAA,OAAO,OAAA,CAAQ,0BAAA,EAA4B,GAAA,EAAK,MAAA,CAAO,OAAA,EAAS,EAAE,OAAA,EAAS,MAAA,CAAO,OAAA,EAAS,GAAG,cAAA,CAAe,QAAQ,GAAG,CAAA;AAAA,EACzH,CAAA;AAAA,EAEA,MAAM,wBAAA,CAAyB,IAAA,EAAM,GAAA,EAAK,OAAO,MAAA,EAAQ;AACxD,IAAA,MAAM,WAAA,GAAc,QAAQ,GAAG,CAAA;AAC/B,IAAA,MAAM,YAAA,GAAe,aAAa,GAAG,CAAA;AACrC,IAAA,MAAM,QAAA,GAAW,MAAM,iBAAA,CAAkB,IAAA,EAAM,KAAA,EAAO,YAAA,EAAc,EAAE,MAAA,EAAQ,mBAAA,EAAqB,OAAA,EAAS,MAAA,CAAO,OAAA,IAAW,YAAY;AACzI,MAAA,MAAM,OAAO,MAAM,IAAA,CAAK,IAAA,EAAM,CAAC,YAAY,IAAA,CAAK,UAAA,CAAW,aAAA,CAAc,EAAE,GAAG,KAAA,EAAO,OAAA,EAAS,OAAO,OAAA,EAAQ,EAAG,OAAO,CAAC,CAAA;AACxH,MAAA,IAAI,IAAA,KAAS,KAAA,CAAA,EAAW,OAAO,IAAA,CAAK,mBAAmB,CAAA;AACvD,MAAA,IAAI,IAAA,CAAK,KAAA,KAAU,IAAA,EAAM,OAAO,KAAK,WAAW,CAAA;AAIhD,MAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,IAAA,CAAK,KAAA,EAAO,OAAO,CAAA;AACtC,MAAA,IAAI,IAAA,CAAK,KAAK,KAAA,EAAO,QAAQ,MAAM,WAAA,EAAa,OAAO,KAAK,gBAAgB,CAAA;AAC5E,MAAA,IAAI,KAAK,KAAA,EAAO,OAAO,MAAM,SAAA,EAAW,OAAO,KAAK,eAAe,CAAA;AACnE,MAAA,IAAI,KAAK,KAAA,EAAO,QAAQ,MAAM,YAAA,EAAc,OAAO,KAAK,kBAAkB,CAAA;AAC1E,MAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,IAAA,CAAK,KAAA,EAAO,OAAO,CAAA;AACtC,MAAA,MAAM,SAAA,GAAY,IAAA,CAAK,KAAA,EAAO,WAAW,CAAA;AACzC,MAAA,MAAM,qBAAA,GAAwB,IAAA,CAAK,KAAA,EAAO,uBAAuB,CAAA;AACjE,MAAA,IAAI,OAAO,cAAc,QAAA,IAAY,OAAO,0BAA0B,QAAA,EAAU,OAAO,KAAK,mBAAmB,CAAA;AAC/G,MAAA,MAAM,QAAQ,MAAM,IAAA,CAAK,MAAM,CAAC,OAAA,KAAY,KAAK,WAAA,CAAY,cAAA,CAAe,EAAE,GAAG,KAAA,EAAO,SAAS,MAAA,CAAO,OAAA,EAAS,WAAW,qBAAA,EAAsB,EAAG,OAAO,CAAC,CAAA;AAC7J,MAAA,IAAI,KAAA,KAAU,KAAA,CAAA,EAAW,OAAO,IAAA,CAAK,mBAAmB,CAAA;AACxD,MAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,CAAM,KAAA,EAAO,OAAO,CAAA;AACvC,MAAA,IAAI,KAAA,KAAU,UAAA,EAAY,OAAO,IAAA,CAAK,gBAAgB,CAAA;AACtD,MAAA,IAAI,KAAA,KAAU,WAAA,EAAa,OAAO,IAAA,CAAK,iBAAiB,CAAA;AACxD,MAAA,MAAM,OAAA,GAAU,IAAA,CAAK,KAAA,CAAM,KAAA,EAAO,SAAS,CAAA;AAC3C,MAAA,MAAM,SAAA,GAAY,IAAA,CAAK,KAAA,CAAM,KAAA,EAAO,WAAW,CAAA;AAC/C,MAAA,IAAI,KAAA,KAAU,OAAA,IAAW,CAAC,mBAAA,CAAoB,OAAO,CAAA,IAAK,CAAC,mBAAA,CAAoB,SAAS,CAAA,EAAG,OAAO,IAAA,CAAK,mBAAmB,CAAA;AAC1H,MAAA,MAAM,GAAA,GAAM,MAAM,IAAI,CAAA;AACtB,MAAA,OAAO,IAAA,CAAK,QAAQ,MAAM,IAAA,CAAK,MAAM,CAAC,OAAA,KAAY,IAAA,CAAK,UAAA,CAAW,oBAAA,CAAqB;AAAA,QACtF,GAAG,KAAA;AAAA,QACH,SAAS,MAAA,CAAO,OAAA;AAAA,QAChB,OAAA,EAAS;AAAA,UACR,eAAe,MAAA,CAAO,aAAA;AAAA,UACtB,KAAA,EAAO,EAAE,OAAA,EAAS,SAAA,EAAU;AAAA,UAC5B,WAAA;AAAA,UACA,WAAA,EAAa,IAAI,IAAA,CAAK,GAAG,CAAA;AAAA,UACzB,oBAAoB,IAAI,IAAA,CAAK,GAAA,GAAM,IAAA,CAAK,OAAO,gBAAgB,CAAA;AAAA,UAC/D,GAAI,YAAA,KAAiB,KAAA,CAAA,GAAY,EAAC,GAAI,EAAE,oBAAoB,YAAA;AAAa;AAC1E,SACE,OAAO,CAAC,CAAA,EAAG,iBAAiB,GAAG,UAAU,CAAA;AAAA,IAC7C,CAAC,CAAA;AAED,IAAA,OAAO,OAAA,CAAQ,+BAAA,EAAiC,GAAA,EAAK,MAAA,CAAO,OAAA,EAAS,EAAE,OAAA,EAAS,MAAA,CAAO,OAAA,EAAS,GAAG,cAAA,CAAe,QAAQ,GAAG,CAAA;AAAA,EAC9H;AACD,CAAC,CAAA;AAUD,eAAe,wBAAA,CAAyB,IAAA,EAAY,KAAA,EAAqB,UAAA,EAAoB,OAAA,EAAkC;AAC9H,EAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,IAAA,EAAM,CAAC,OAAA,KAAY,IAAA,CAAK,UAAA,CAAW,kBAAA,CAAmB,EAAE,GAAG,KAAA,EAAO,UAAA,EAAW,EAAG,OAAO,CAAC,CAAA;AAChH,EAAA,MAAM,cAAA,GAAiB,IAAA,CAAK,IAAA,EAAM,KAAA,EAAO,gBAAgB,CAAA;AACzD,EAAA,IAAI,IAAA,KAAS,MAAA,IAAa,IAAA,CAAK,KAAA,KAAU,QAAQ,IAAA,CAAK,IAAA,CAAK,KAAA,EAAO,SAAS,CAAA,KAAM,OAAA,IAAW,CAAC,mBAAA,CAAoB,cAAc,CAAA,EAAG;AACjI,IAAA,OAAO,KAAK,uBAAuB,CAAA;AAAA,EACpC;AACA,EAAA,OAAO,cAAA;AACR;AAGA,SAAS,eAAe,QAAA,EAA4C;AACnE,EAAA,MAAM,UAAA,GAAahB,MAAAA,CAAM,IAAA,CAAK,QAAA,EAAU,YAAY,CAAC,CAAA;AACrD,EAAA,MAAM,iBAAA,GAAoBA,MAAAA,CAAM,IAAA,CAAK,QAAA,EAAU,mBAAmB,CAAC,CAAA;AACnE,EAAA,MAAM,kBAAA,GAAqB,IAAA,CAAK,QAAA,EAAU,oBAAoB,CAAA;AAC9D,EAAA,IAAI,UAAA,KAAe,UAAa,iBAAA,KAAsB,MAAA,IAAa,OAAO,kBAAA,KAAuB,QAAA,EAAU,OAAO,IAAA,CAAK,uBAAuB,CAAA;AAC9I,EAAA,OAAO,EAAE,UAAA,EAAY,iBAAA,EAAmB,kBAAA,EAAmB;AAC5D;AAEA,IAAMiB,YAAAA,GAAc,KAAK,SAAA,CAAU,OAAA;AAQnC,SAAS,iBAAiB,GAAA,EAAmC;AAC5D,EAAA,MAAM,UAAA,GAAa,IAAA,CAAK,GAAA,EAAK,YAAY,CAAA;AACzC,EAAA,IAAI,EAAE,UAAA,YAAsB,IAAA,CAAA,IAAS,CAAC,OAAO,QAAA,CAAS,OAAA,CAAQ,KAAA,CAAMA,YAAAA,EAAa,YAAY,EAAE,CAAC,CAAA,OAAQ,wBAAwB,CAAA;AACjI;AAGA,SAAS,UAAA,CAAgD,MAAY,IAAA,EAAS;AAC7E,EAAA,MAAM,GAAA,GAAM,SAAS,IAAI,CAAA;AACzB,EAAA,OAAO,OAAO,KAA6B,UAAA,KAA+C;AACzF,IAAA,IAAI;AACH,MAAA,gBAAA,CAAiB,GAAG,CAAA;AACpB,MAAA,MAAM,IAAA,GAAO,2BAAA,CAA4B,IAAA,EAAM,UAAU,CAAA;AACzD,MAAA,IAAI,CAAC,IAAA,CAAK,EAAA,EAAI,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,CAAA,2BAAA,EAA8B,IAAA,CAAK,IAAI,CAAA,CAAA,EAAG;AACxF,MAAA,OAAO,MAAM,IAAI,IAAA,EAAM,GAAA,EAAK,QAAQ,GAAG,CAAA,EAAG,KAAK,KAAK,CAAA;AAAA,IACrD,SAAS,MAAA,EAAQ;AAGhB,MAAA,OAAOL,QAAAA,CAAQ,IAAA,CAAK,EAAA,CAAG,MAAM,CAAA,IAAK,OAAA,CAAQ,4BAAA,EAA8B,MAAA,CAAO,IAAI,CAAA,GAAI,MAAA,CAAO,IAAA,GAAO,eAAe,CAAA;AAAA,IACrH;AAAA,EACD,CAAA;AACD;AAOA,IAAM,mBAAyD,MAAA,CAAO,CAAC,qBAAA,EAAuB,sBAAA,EAAwB,yBAAyB,CAAU,CAAA;AAEzJ,SAAS,iBAAiB,IAAA,EAAuC;AAChE,EAAA,OAAO,MAAA,CAAO,EAAE,QAAA,EAAU,KAAA,EAAgB,MAAM,CAAA;AACjD;AAEA,IAAM,QAAA,GAAoC,MAAA,CAAO,EAAE,QAAA,EAAU,MAAe,CAAA;AAc5E,SAAS,YAAA,CAAa,MAAY,IAAA,EAAkD;AACnF,EAAA,MAAM,cAAA,GAAiB,gBAAA,CAAiB,QAAA,CAAS,IAAI,CAAA;AACrD,EAAA,OAAO,OAAO,KAAA,KAAU;AACvB,IAAA,IAAI;AACH,MAAA,MAAM,OAAO,2BAAA,CAA4B,IAAA,EAAM,IAAA,CAAK,KAAA,EAAO,YAAY,CAAC,CAAA;AACxE,MAAA,IAAI,CAAC,IAAA,CAAK,EAAA,EAAI,OAAO,gBAAA,CAAiB,CAAA,2BAAA,EAA8B,IAAA,CAAK,IAAI,CAAA,CAAA,EAAI,IAAA,CAAK,KAAK,CAAA,CAAE,CAAA;AAC7F,MAAA,IAAI,cAAA,EAAgB;AACnB,QAAA,MAAM,QAAA,GAAW,IAAA,CAAK,KAAA,EAAO,UAAU,CAAA;AACvC,QAAA,MAAM,OAAA,GAAU,IAAA,CAAK,KAAA,EAAO,SAAS,CAAA;AACrC,QAAA,IAAI,CAAC,oBAAoB,QAAQ,CAAA,IAAK,CAAC,mBAAA,CAAoB,OAAO,CAAA,EAAG,IAAA,CAAK,eAAe,CAAA;AACzF,QAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,EAAO,QAAQ,CAAA;AACnC,QAAA,MAAM,eAAA,CAAgB,IAAA,EAAM,MAAA,CAAO,EAAE,UAAU,OAAA,EAAS,CAAA,EAAI,IAAA,CAAK,KAAA,CAAyC,SAAA,EAAW,MAAA,YAAkB,WAAA,GAAc,SAAS,KAAA,CAAS,CAAA;AAAA,MACxK;AACA,MAAA,OAAO,QAAA;AAAA,IACR,SAAS,MAAA,EAAQ;AAChB,MAAA,OAAO,gBAAA,CAAiB,CAAA,uBAAA,EAA0B,IAAA,CAAK,EAAA,CAAG,MAAM,CAAA,IAAK,OAAA,CAAQ,4BAAA,EAA8B,MAAA,CAAO,IAAI,CAAA,GAAI,MAAA,CAAO,IAAA,GAAO,eAAe,CAAA,CAAE,CAAA;AAAA,IAC1J;AAAA,EACD,CAAA;AACD;AAMA,SAAS,KAAA,CAAM,UAAkC,MAAA,EAA+B;AAC/E,EAAA,OAAO,EAAE,UAAU,aAAA,EAAe,CAAA,EAAG,YAAY,MAAA,EAAQ,MAAA,EAAQ,SAAS,MAAA,EAAO;AAClF;AAEA,SAAS,eAAe,IAAA,EAA6B;AACpD,EAAA,MAAM,QAAA,GAAW,uBAAA,CAAwB,IAAA,CAAK,SAAS,CAAA;AACvD,EAAA,OAAO,MAAA,CAAO;AAAA,IACb,QAAA;AAAA,IACA,OAAA,EAAS,CAAA;AAAA,IACT,IAAA,EAAM,MAAA;AAAA,IACN,MAAM,SAAS,GAAA,EAA4C;AAC1D,MAAA,IAAI;AACH,QAAA,MAAM,MAAA,GAAS,mBAAA,CAAoB,IAAA,CAAK,SAAA,EAAW,IAAI,QAAQ,CAAA;AAC/D,QAAA,IAAI,MAAA,KAAW,KAAA,CAAA,EAAW,OAAO,KAAA,CAAM,UAAU,sBAAsB,CAAA;AACvE,QAAA,MAAM,IAAA,GAAO,2BAAA,CAA4B,MAAA,EAAQ,GAAA,CAAI,UAAU,CAAA;AAC/D,QAAA,IAAI,CAAC,IAAA,CAAK,EAAA,EAAI,OAAO,KAAA,CAAM,UAAU,oBAAoB,CAAA;AACzD,QAAA,MAAM,EAAE,QAAA,EAAU,OAAA,EAAS,OAAA,EAAS,WAAU,GAAI,GAAA;AAClD,QAAA,IAAI,CAAC,mBAAA,CAAoB,QAAQ,CAAA,IAAK,CAAC,mBAAA,CAAoB,OAAO,CAAA,IAAK,CAAC,mBAAA,CAAoB,OAAO,CAAA,IAAK,OAAO,cAAc,QAAA,EAAU;AACtI,UAAA,OAAO,KAAA,CAAM,UAAU,+BAA+B,CAAA;AAAA,QACvD;AACA,QAAA,MAAM,QAAQ,IAAA,CAAK,KAAA;AACnB,QAAA,MAAM,SAAS,MAAA,CAAO;AAAA,UACrB,GAAI,OAAO,KAAA,CAAM,gBAAgB,CAAA,KAAM,QAAA,GAAW,EAAE,cAAA,EAAgB,KAAA,CAAM,gBAAgB,CAAA,EAAE,GAAI,EAAC;AAAA,UACjG,GAAI,OAAO,KAAA,CAAM,YAAY,CAAA,KAAM,QAAA,GAAW,EAAE,UAAA,EAAY,KAAA,CAAM,YAAY,CAAA,EAAE,GAAI,EAAC;AAAA,UACrF,GAAI,OAAO,KAAA,CAAM,SAAS,CAAA,KAAM,QAAA,GAAW,EAAE,OAAA,EAAS,KAAA,CAAM,SAAS,CAAA,EAAE,GAAI;AAAC,SAC5E,CAAA;AACD,QAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,EAAE,QAAA,EAAU,GAAA,CAAI,QAAA,EAAU,MAAA,EAAQ,QAAA,EAAU,OAAA,EAAS,OAAA,EAAS,SAAA,EAAW,MAAA,EAAQ,CAAA;AACtG,QAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,IAAA,EAAM,OAAO,OAAA,KAAY,KAAA,CAAM,IAAA,CAAK,SAAA,EAAW,KAAA,CAAA,EAAW,CAAC,KAAA,EAAO,OAAO,CAAC,CAAC,CAAA;AACrG,QAAA,IAAI,MAAA,KAAW,KAAA,CAAA,EAAW,OAAO,KAAA,CAAM,UAAU,oCAAoC,CAAA;AACrF,QAAA,IAAI,OAAO,KAAA,KAAU,IAAA,EAAM,OAAO,KAAA,CAAM,UAAU,yBAAyB,CAAA;AAC3E,QAAA,OAAO,EAAE,QAAA,EAAU,aAAA,EAAe,GAAG,UAAA,EAAY,MAAA,EAAQ,QAAQ,MAAA,EAAO;AAAA,MACzE,CAAA,CAAA,MAAQ;AACP,QAAA,OAAO,KAAA,CAAM,UAAU,oCAAoC,CAAA;AAAA,MAC5D;AAAA,IACD;AAAA,GACA,CAAA;AACF;AAMA,IAAM,YAAsG,MAAA,CAAO;AAAA,EAClH,mBAAA,EAAqB,MAAA,CAAO,CAAC,4BAA4B,CAAU,CAAA;AAAA,EACnE,mBAAA,EAAqB,MAAA,CAAO,CAAC,4BAA4B,CAAU,CAAA;AAAA,EACnE,kBAAA,EAAoB,MAAA,CAAO,CAAC,2BAA2B,CAAU,CAAA;AAAA,EACjE,mBAAA,EAAqB,MAAA,CAAO,CAAC,4BAA4B,CAAU,CAAA;AAAA,EACnE,mBAAA,EAAqB,MAAA,CAAO,CAAC,4BAA4B,CAAU,CAAA;AAAA,EACnE,oBAAA,EAAsB,MAAA,CAAO,CAAC,sBAAsB,CAAU,CAAA;AAAA,EAC9D,uBAAA,EAAyB,MAAA,CAAO,CAAC,sBAAsB,CAAU,CAAA;AAAA,EACjE,uBAAA,EAAyB,MAAA,CAAO,CAAC,+BAA+B,CAAU,CAAA;AAAA,EAC1E,mBAAA,EAAqB,MAAA,CAAO,CAAC,0BAA0B,CAAU,CAAA;AAAA,EACjE,wBAAA,EAA0B,MAAA,CAAO,CAAC,+BAA+B,CAAU;AAC5E,CAAC,CAAA;AAGD,IAAM,aAAmD,MAAA,CAAO,CAAC,yBAAA,EAA2B,qBAAA,EAAuB,0BAA0B,CAAU,CAAA;AAEvJ,SAAS,SAAS,OAAA,EAA6C;AAC9D,EAAA,MAAM,IAAA,GAAO,CAACvD,MAAAA,KAAyB;AACtC,IAAA,MAAM,mBAAA,CAAoB,mBAAmBA,MAAK,CAAA;AAAA,EACnD,CAAA;AACA,EAAA,IAAI,YAAY,IAAA,IAAQ,OAAO,OAAA,KAAY,QAAA,OAAe,SAAS,CAAA;AACnE,EAAA,MAAM,SAAA,GAAY,QAAQ,SAAA,IAAa,kCAAA;AACvC,EAAA,IAAI,CAAC,0BAAA,CAA2B,SAAS,CAAA,OAAQ,WAAW,CAAA;AAC5D,EAAA,MAAM,KAAA,GAAQ,CAAC,KAAA,EAAgBA,MAAAA,EAAe,OAAA,KAA+B;AAC5E,IAAA,IAAI,UAAU,IAAA,IAAQ,OAAO,KAAA,KAAU,QAAA,OAAeA,MAAK,CAAA;AAC3D,IAAA,KAAA,MAAW,MAAA,IAAU,OAAA,EAAS,IAAI,OAAQ,KAAA,CAAkC,MAAM,CAAA,KAAM,UAAA,EAAY,IAAA,CAAK,CAAA,EAAGA,MAAK,CAAA,CAAA,EAAI,MAAM,CAAA,CAAE,CAAA;AAAA,EAC9H,CAAA;AACA,EAAA,KAAA,CAAM,OAAA,CAAQ,eAAe,eAAA,EAAiB;AAAA,IAC7C,kBAAA;AAAA,IAAoB,oBAAA;AAAA,IAAsB,yBAAA;AAAA,IAA2B,mBAAA;AAAA,IAAqB,oBAAA;AAAA,IAAsB,oBAAA;AAAA,IAAsB;AAAA,GACtI,CAAA;AACD,EAAA,KAAA,CAAM,OAAA,CAAQ,YAAY,YAAA,EAAc;AAAA,IACvC,oBAAA;AAAA,IAAsB,eAAA;AAAA,IAAiB,uBAAA;AAAA,IAAyB,kBAAA;AAAA,IAAoB,sBAAA;AAAA,IAAwB,sBAAA;AAAA,IAAwB;AAAA,GACpI,CAAA;AACD,EAAA,KAAA,CAAM,OAAA,CAAQ,QAAA,EAAU,UAAA,EAAY,CAAC,SAAS,CAAC,CAAA;AAC/C,EAAA,KAAA,CAAM,OAAA,CAAQ,gBAAA,EAAkB,kBAAA,EAAoB,CAAC,QAAQ,CAAC,CAAA;AAC9D,EAAA,KAAA,CAAM,OAAA,CAAQ,WAAA,EAAa,aAAA,EAAe,CAAC,gBAAgB,CAAC,CAAA;AAC5D,EAAA,IAAI,OAAO,OAAA,CAAQ,uBAAA,KAA4B,UAAA,OAAiB,yBAAyB,CAAA;AACzF,EAAA,IAAI,KAAA;AACJ,EAAA,IAAI;AACH,IAAA,KAAA,GAAQ,kBAAA,CAAmB,QAAQ,KAAK,CAAA;AAAA,EACzC,CAAA,CAAA,MAAQ;AACP,IAAA,OAAO,KAAK,OAAO,CAAA;AAAA,EACpB;AACA,EAAA,MAAM,MAAA,GAAS,4BAAA,CAA6B,OAAA,CAAQ,MAAA,IAAU,EAAE,CAAA;AAChE,EAAA,MAAM,mBAAA,GAAsB,QAAQ,mBAAA,IAAuB,GAAA;AAC3D,EAAA,qBAAA,CAAsB,qBAAqB,qBAAqB,CAAA;AAChE,EAAA,OAAO,MAAA,CAAO;AAAA,IACb,SAAA;AAAA,IACA,eAAe,OAAA,CAAQ,aAAA;AAAA,IACvB,YAAY,OAAA,CAAQ,UAAA;AAAA,IACpB,UAAU,OAAA,CAAQ,QAAA;AAAA,IAClB,kBAAkB,OAAA,CAAQ,gBAAA;AAAA,IAC1B,aAAa,OAAA,CAAQ,WAAA;AAAA,IACrB,WAAW,OAAA,CAAQ,uBAAA;AAAA,IACnB,KAAA;AAAA,IACA,MAAA;AAAA,IACA;AAAA,GACA,CAAA;AACF;AAgBO,SAAS,4BAA2C,OAAA,EAA0D;AACpH,EAAA,MAAM,IAAA,GAAO,SAAS,OAAO,CAAA;AAC7B,EAAA,MAAM,MAAA,GAAS,eAAe,IAAI,CAAA;AAClC,EAAA,MAAM,OAAA,GAAmC,6BAAA,CAA8B,GAAA,CAAI,CAAC,IAAA,KAAS;AACpF,IAAA,MAAM,UAAA,GAAa,UAAA,CAAW,QAAA,CAAS,IAAI,CAAA;AAC3C,IAAA,MAAM,UAAA,GAAoC;AAAA,MACzC,QAAA,EAAU,CAAA,EAAG,IAAA,CAAK,SAAS,IAAI,IAAI,CAAA,CAAA;AAAA,MACnC,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,OAAA,EAAS,CAAA;AAAA,MACT,IAAA,EAAM,QAAA;AAAA,MACN,MAAA,EAAQ,oBAAoB,IAAI,CAAA;AAAA,MAChC,eAAA,EAAiB,YAAA,CAAa,IAAA,EAAM,IAAI,CAAA;AAAA,MACxC,QAAA,EAAU,CAAC,MAAA,CAAO,QAAQ,CAAA;AAAA,MAC1B,WAAA,EAAa,CAAC,GAAG,SAAA,CAAU,IAAI,CAAC,CAAA;AAAA,MAChC,UAAA;AAAA,MACA,aAAA,EAAe,IAAA;AAAA,MACf,SAAA,EAAW;AAAA,QACV,YAAA,EAAc,iBAAA;AAAA,QACd,eAAA,EAAiB,WAAA;AAAA,QACjB,WAAA,EAAa,WAAA;AAAA,QACb,UAAA,EAAY,WAAA;AAAA,QACZ,WAAA,EAAa,mBAAA;AAAA,QACb,WAAA,EAAa;AAAA,OACd;AAAA,MACA,OAAA,EAAS,UAAA;AAAA,MACT,aAAA,EAAe,kEAAA;AAAA,MACf,OAAA,EAAS,UAAA,CAAW,IAAA,EAAM,IAAI;AAAA,KAC/B;AACA,IAAA,OAAO,UAAA;AAAA,EACR,CAAC,CAAA;AACD,EAAA,OAAO;AAAA,IACN,WAAW,IAAA,CAAK,SAAA;AAAA,IAChB,OAAA,EAAS,OAAA;AAAA,IACT,WAAA,EAAa,kBAAA;AAAA,IACb,WAAA,EAAa,gHAAA;AAAA,IACb,YAAA,EAAc,CAAC,YAAA,EAAc,MAAA,EAAQ,GAAG,CAAA;AAAA,IACxC,UAAA,EAAY,oCAAoC,GAAA,CAAI,CAAC,eAAe,EAAE,SAAA,EAAW,aAAA,EAAe,CAAA,EAAE,CAAE,CAAA;AAAA,IACpG,OAAA;AAAA,IACA,QAAA,EAAU,CAAC,MAAM;AAAA,GAClB;AACD","file":"index.js","sourcesContent":["/**\n * Fixed code sets. Stored diagnostics, denial reasons and attempt outcomes are\n * typed as one of these codes rather than a free string or a port's error\n * message (ADR 0018 decision 2), so a thrown error has no field through which\n * to carry payload, secret or response-body text into a durable record. The\n * arrays are frozen, so no caller can widen a set at runtime.\n */\n\n/** Reasons an admission port may give for `deny`. */\nexport const WEBHOOK_ADMISSION_DENIAL_CODES = Object.freeze([\n\t\"actor_not_permitted\",\n\t\"scope_not_permitted\",\n\t\"event_type_not_permitted\",\n\t\"classification_not_permitted\",\n\t\"policy_denied\",\n] as const);\n\n/** A reason code carried by an admission `deny` decision and stored on its denial record. */\nexport type WebhookAdmissionDenialCode = (typeof WEBHOOK_ADMISSION_DENIAL_CODES)[number];\n\n/** Reasons a delivery authorization port may give for `revoked`. */\nexport const WEBHOOK_REVOCATION_CODES = Object.freeze([\n\t\"grant_expired\",\n\t\"scope_revoked\",\n\t\"registration_inactive\",\n] as const);\n\n/** A reason code carried by a delivery authorization `revoked` decision. */\nexport type WebhookRevocationCode = (typeof WEBHOOK_REVOCATION_CODES)[number];\n\n/**\n * Diagnostics stored on a fan-out job or delivery intent when a port failed,\n * timed out or a coordination check refused the work. A port exception is\n * stored as the code for that port, not as its message.\n *\n * Three are written only by the fan-out cycle: `eligibility_unsettled` when\n * it defers a job until its event's eligibility is settled (README,\n * \"Fan-out\"), `intent_build_failed` when it could not render a body or\n * create a delivery id for an admitted subscription, and `job_unreadable`\n * when it dead-letters a claimed job whose identity and lease it could read\n * but whose body it could not.\n *\n * Three are written only by the delivery cycle (README, \"Delivery\"):\n * `intent_unreadable` when it dead-letters a claimed intent whose identity\n * and lease it could read but whose body it could not,\n * `subscription_not_in_scope` when the intent's subscription does not exist\n * in the intent's tenant and space, or the store's answer names another\n * one, and `transport_not_sent` when the transport returned `not_sent` for\n * a request it never started.\n */\nexport const WEBHOOK_DIAGNOSTIC_CODES = Object.freeze([\n\t\"admission_unavailable\",\n\t\"authorization_unavailable\",\n\t\"subscription_store_unavailable\",\n\t\"delivery_store_unavailable\",\n\t\"signer_unavailable\",\n\t\"resolver_unavailable\",\n\t\"port_timeout\",\n\t\"scope_predicate_failed\",\n\t\"configuration_conflict\",\n\t\"lease_lost\",\n\t\"intent_not_pending\",\n\t\"processing_deadline_exceeded\",\n\t\"eligibility_unsettled\",\n\t\"intent_build_failed\",\n\t\"job_unreadable\",\n\t\"intent_unreadable\",\n\t\"subscription_not_in_scope\",\n\t\"transport_not_sent\",\n] as const);\n\n/** A stored diagnostic code for a port failure or refused coordination check. */\nexport type WebhookDiagnosticCode = (typeof WEBHOOK_DIAGNOSTIC_CODES)[number];\n\n/**\n * What a delivery attempt's observation means for its intent (ADR 0018\n * decision 10). `not_sent` is never a classification: the delivery cycle\n * records it, with the reason `not_sent`, on an attempt it began under the\n * intent's lease and handed to the transport, when the transport answered\n * that it never started the request (its deadline had passed or its signal\n * had aborted while the request was queued). Such an attempt spends no budget.\n */\nexport const WEBHOOK_ATTEMPT_OUTCOMES = Object.freeze([\n\t\"delivered\",\n\t\"retryable\",\n\t\"dead_letter\",\n\t\"cancelled\",\n\t\"not_sent\",\n] as const);\n\n/**\n * The classified result of one attempt. A 401 or 403 is `retryable` like any\n * other row of that kind; its `http_401` / `http_403` reason and the\n * classification's `receiverActionLikely` flag let the caller surface it to\n * operators before the retry budget is exhausted.\n */\nexport type WebhookAttemptOutcome = (typeof WEBHOOK_ATTEMPT_OUTCOMES)[number];\n\n/** The row of decision 10's table an observation matched. */\nexport const WEBHOOK_ATTEMPT_REASON_CODES = Object.freeze([\n\t\"http_2xx\",\n\t\"network_error\",\n\t\"timeout\",\n\t\"dns_failure\",\n\t\"http_408\",\n\t\"http_425\",\n\t\"http_429\",\n\t\"http_5xx\",\n\t\"signer_unavailable\",\n\t\"http_401\",\n\t\"http_403\",\n\t\"http_1xx\",\n\t\"http_3xx\",\n\t\"http_410\",\n\t\"http_4xx\",\n\t\"invalid_url\",\n\t\"private_address\",\n\t\"authorization_revoked\",\n\t\"subscription_paused\",\n\t\"subscription_deleted\",\n\t\"not_sent\",\n] as const);\n\n/** The reason code recorded with an attempt outcome. */\nexport type WebhookAttemptReasonCode = (typeof WEBHOOK_ATTEMPT_REASON_CODES)[number];\n\n/** Codes on {@link WebhookDeliveryConfigError}. */\nexport const WEBHOOK_CONFIG_ERROR_CODES = Object.freeze([\n\t\"limit_not_positive_finite\",\n\t\"limit_not_integer\",\n\t\"limit_out_of_range\",\n\t\"retry_schedule_empty\",\n\t\"limit_unreadable\",\n] as const);\n\n/** Why a configured limit was rejected. */\nexport type WebhookConfigErrorCode = (typeof WEBHOOK_CONFIG_ERROR_CODES)[number];\n\n/** Codes on {@link WebhookProjectionError}. */\nexport const WEBHOOK_PROJECTION_ERROR_CODES = Object.freeze([\n\t\"invalid_envelope\",\n\t\"payload_field_not_json\",\n\t\"fact_field_not_json\",\n\t\"accessor_property\",\n\t\"inspection_failed\",\n\t\"scope_mismatch\",\n] as const);\n\n/** Why an envelope could not be projected. */\nexport type WebhookProjectionErrorCode = (typeof WEBHOOK_PROJECTION_ERROR_CODES)[number];\n\n/**\n * Codes on the `TypeError` and `RangeError` instances this package throws\n * for malformed call input (headers, classification, retry, admission).\n * Each code has one constant message; neither repeats the input.\n */\nexport const WEBHOOK_INPUT_ERROR_CODES = Object.freeze([\n\t\"input_unreadable\",\n\t\"observation_unknown\",\n\t\"status_out_of_range\",\n\t\"signature_malformed\",\n\t\"timestamp_invalid\",\n\t\"event_id_invalid\",\n\t\"delivery_id_invalid\",\n\t\"attempt_invalid\",\n\t\"raw_body_not_string\",\n\t\"random_source_missing\",\n\t\"random_sample_invalid\",\n\t\"random_source_failed\",\n\t\"denial_code_unknown\",\n] as const);\n\n/** Why call input was refused. */\nexport type WebhookInputErrorCode = (typeof WEBHOOK_INPUT_ERROR_CODES)[number];\n\n/**\n * Codes on {@link WebhookStoreError}: a store call that was malformed, broke\n * a store invariant, or was no longer wanted when the store reached its\n * write. Refusals the caller is expected to handle (a lost lease, an\n * existing key, a replay past the horizon, a requeue of a record that is not\n * dead-lettered) are results, not errors.\n */\nexport const WEBHOOK_STORE_ERROR_CODES = Object.freeze([\n\t\"input_invalid\",\n\t\"record_mismatch\",\n\t\"delivery_id_conflict\",\n\t\"call_aborted\",\n\t\"deadline_passed\",\n\t\"clock_invalid\",\n\t\"store_failed\",\n] as const);\n\n/** Why a store call was refused. */\nexport type WebhookStoreErrorCode = (typeof WEBHOOK_STORE_ERROR_CODES)[number];\n\n/**\n * Codes on {@link WebhookFanOutError}: why the fan-out publisher, the\n * composite publisher or the fan-out cycle refused or failed. A publisher\n * rejection makes the Host relay retry and, once its budget is spent,\n * dead-letter the outbox record, so a failed publish stays visible there.\n *\n * - `event_past_replay_horizon`: `insertFanOutJob` answered `past_horizon`.\n * The event is older than the replay horizon (R5), so no job can be stored\n * and the publish fails rather than counting as delivered.\n * - `fan_out_store_failed` / `fan_out_store_timeout`: the publisher's job\n * insert or the cycle's claim threw, or did not settle within\n * `portTimeoutMs`. Store failures later in a cycle reschedule the job\n * with a diagnostic instead.\n * - `publish_aborted`: the caller's signal aborted before the store answered.\n * - `sink_failed`: a required sink of a composite publisher rejected with an\n * error this package did not create.\n * - `sink_timeout`: a required sink of a composite publisher did not settle\n * within the composite's `sinkTimeoutMs`.\n * - `clock_invalid`: the injected clock threw or returned an invalid time.\n * - `options_invalid`: an option is missing or has the wrong shape.\n */\nexport const WEBHOOK_FAN_OUT_ERROR_CODES = Object.freeze([\n\t\"event_past_replay_horizon\",\n\t\"fan_out_store_failed\",\n\t\"fan_out_store_timeout\",\n\t\"publish_aborted\",\n\t\"sink_failed\",\n\t\"sink_timeout\",\n\t\"clock_invalid\",\n\t\"options_invalid\",\n] as const);\n\n/** Why a fan-out publish or cycle failed. */\nexport type WebhookFanOutErrorCode = (typeof WEBHOOK_FAN_OUT_ERROR_CODES)[number];\n\n/**\n * Codes on {@link WebhookDeliveryError}: why the delivery cycle could not\n * run. Everything that goes wrong while one claimed intent is processed is\n * settled on that intent with a fixed code instead (README, \"Delivery\").\n *\n * - `delivery_store_failed` / `delivery_store_timeout`: the claim threw or\n * answered something unreadable, or did not settle within `portTimeoutMs`.\n * - `clock_invalid`: the injected clock threw or returned an invalid time.\n * - `options_invalid`: an option or port is missing or has the wrong shape.\n */\nexport const WEBHOOK_DELIVERY_ERROR_CODES = Object.freeze([\n\t\"delivery_store_failed\",\n\t\"delivery_store_timeout\",\n\t\"clock_invalid\",\n\t\"options_invalid\",\n] as const);\n\n/** Why a delivery cycle failed. */\nexport type WebhookDeliveryErrorCode = (typeof WEBHOOK_DELIVERY_ERROR_CODES)[number];\n\n/**\n * Why a governed action (PR 9; README, \"Governed actions\") refused. At\n * submission, the action's admission check refuses with\n * `webhook_action_refused:<code>` (or `webhook_parameters_refused:<code>:<field>`\n * with a code from `WEBHOOK_ACTION_PARAMETER_CODES`) and Host records nothing.\n * At execution, the action fails with Host's `error` set to\n * `webhook_action_refused:<code>`, writes nothing more and emits no event.\n *\n * - `admission_not_enforced`: the handler ran without Host's record that the\n * submission was admitted (`ActionContext.admittedAt`), as under a Host\n * older than 7.3.0, which ignores `admitSubmission`. Nothing is written.\n * - `scope_invalid` / `actor_invalid`: Host's trusted context names a tenant,\n * space or actor that breaks the store identifier rule.\n * - `secret_ref_invalid`: the application's secret store says the reference\n * names no secret of this tenant. `secret_ref_unverified`: the check threw,\n * timed out or answered something unreadable.\n * - `secret_ref_unchanged`: a rotation named the reference already in use.\n * - `destination_refused`: the resolver refused the URL (`invalid_url`,\n * `private_address`). `destination_unresolved`: it answered `dns_failure`,\n * threw or timed out. Neither writes anything.\n * - `subscription_not_found`, `subscription_exists`, `subscription_deleted`,\n * `invalid_transition`, `revision_conflict`, `version_conflict`: the\n * subscription store refused the write, or the action's own read found\n * the same. `subscription_not_active`: an intent requeue for a paused or\n * deleted subscription. `paused_since_intent`: an intent requeue for an\n * active subscription that was paused and resumed after the intent's\n * eligibility revision; dispatch would cancel it (decision 3).\n * - `not_found`, `stale`, `not_dead_letter`, `past_replay_horizon`: the\n * delivery store refused a requeue or enrichment (decision 10, R5).\n * - `not_enrichable`, `actor_present`, `actor_suppressed`: enrichment of a\n * completed job, or of a job whose actor is not `legacy` (decision 5).\n * `actor_withheld`, `actor_not_found`, `actor_unavailable`: the\n * application's actor reader withheld the actor, found no such event, or\n * threw, timed out or answered something unreadable.\n * - `store_unavailable`: a read threw, timed out or answered something\n * unreadable; nothing was written. `store_outcome_unknown`: a write threw,\n * timed out or answered something unreadable, so it may have applied\n * (README, \"A store write that timed out is unknown\"); also a re-run of an\n * intent requeue whose evidence predates `subscriptionId` and whose intent\n * can no longer be read, so the applied requeue has no event (README,\n * \"Atomicity and re-runs\").\n * - `action_failed`: anything else, such as a failing clock; nothing it\n * threw is read.\n */\nexport const WEBHOOK_ACTION_REFUSAL_CODES = Object.freeze([\n\t\"admission_not_enforced\",\n\t\"scope_invalid\",\n\t\"actor_invalid\",\n\t\"secret_ref_invalid\",\n\t\"secret_ref_unverified\",\n\t\"secret_ref_unchanged\",\n\t\"destination_refused\",\n\t\"destination_unresolved\",\n\t\"subscription_not_found\",\n\t\"subscription_exists\",\n\t\"subscription_deleted\",\n\t\"subscription_not_active\",\n\t\"paused_since_intent\",\n\t\"invalid_transition\",\n\t\"revision_conflict\",\n\t\"version_conflict\",\n\t\"not_found\",\n\t\"stale\",\n\t\"not_dead_letter\",\n\t\"past_replay_horizon\",\n\t\"not_enrichable\",\n\t\"actor_present\",\n\t\"actor_suppressed\",\n\t\"actor_withheld\",\n\t\"actor_not_found\",\n\t\"actor_unavailable\",\n\t\"store_unavailable\",\n\t\"store_outcome_unknown\",\n\t\"action_failed\",\n] as const);\n\n/** Why a governed action refused. */\nexport type WebhookActionRefusalCode = (typeof WEBHOOK_ACTION_REFUSAL_CODES)[number];\n\n/**\n * Codes on {@link WebhookGovernedActionError}: `options_invalid`, a module\n * option or port is missing or has the wrong shape.\n */\nexport const WEBHOOK_GOVERNED_ACTION_ERROR_CODES = Object.freeze([\"options_invalid\"] as const);\n\n/** Why the governed-action module could not be built. */\nexport type WebhookGovernedActionErrorCode = (typeof WEBHOOK_GOVERNED_ACTION_ERROR_CODES)[number];\n","import type { WebhookJsonValue } from \"./types\";\n\n/*\n * The one place caller-supplied values are read (README, \"Security\n * properties\", P1). Every exported function copies the inputs it needs into\n * a package-owned snapshot here, at entry, and works on the snapshot only;\n * nothing is read after the snapshot is complete.\n *\n * - Properties are read through own property descriptors. An accessor is\n * refused without being called; a value is never read through `[[Get]]`.\n * - Records must be plain: prototype `Object.prototype` or `null`.\n * - Dates are read with the `Date.prototype` intrinsics, never the value's\n * own methods; arrays by index from their own `length`, never through an\n * iterator or their own methods.\n * - Every object the snapshot builds has a `null` prototype or is a fresh\n * array, is frozen, and was populated with `defineProperty` and\n * null-prototype descriptors, so nothing installed on `Object.prototype`\n * or `Array.prototype` is consulted when it is built, read or serialized.\n * - Every built-in the package calls after load is captured below, at module\n * load, and called through the captured `Reflect.apply`; replacing a\n * global or a prototype method later, including from a Proxy trap during\n * a call, does not change what the package runs.\n *\n * For plain data the snapshot is a faithful copy: most properties are read\n * once, and the few read again (a repeated allowlist name whose first read\n * found nothing, a nested object reachable along two paths) give the same\n * answer. A Proxy gets no such promise: its traps execute while the\n * snapshot is taken, possibly more than once for one property in those\n * cases, and the values they return need not agree. The snapshot holds whichever values were read,\n * and only the snapshot is used afterwards. Whatever a trap throws is\n * replaced by the entry point's guard (errors.ts) with a package-created,\n * constant error.\n */\n\nconst reflectApply = Reflect.apply;\nconst reflectOwnKeys = Reflect.ownKeys;\nconst reflectGetOwnPropertyDescriptor = Reflect.getOwnPropertyDescriptor;\nconst reflectGetPrototypeOf = Reflect.getPrototypeOf;\nconst reflectDefineProperty = Reflect.defineProperty;\nconst objectCreate = Object.create;\nconst objectFreeze = Object.freeze;\nconst objectHasOwn = Object.hasOwn;\nconst objectPrototype = Object.prototype;\nconst arrayIsArray = Array.isArray;\nconst dateGetTime = Date.prototype.getTime;\nconst dateToISOString = Date.prototype.toISOString;\nconst DateConstructor = Date;\nconst regExpExec = RegExp.prototype.exec;\nconst stringTrim = String.prototype.trim;\nconst jsonStringify = JSON.stringify;\n\n/** Captured `Reflect.apply`, so a replaced `Function.prototype.call` is never used. */\nexport const apply = reflectApply;\n/** Captured numeric intrinsics. */\nexport const numberIsFinite = Number.isFinite;\nexport const numberIsSafeInteger = Number.isSafeInteger;\nexport const NumberConstructor = Number;\nexport const mathFloor = Math.floor;\nexport const mathMin = Math.min;\nexport const mathMax = Math.max;\nexport const dateParse = Date.parse;\nexport const freeze = objectFreeze;\nexport const hasOwn = objectHasOwn;\nexport const isArray = arrayIsArray;\n\n/** The longest option list (allowlist, retry schedule) a snapshot copies. */\nexport const MAX_LIST_LENGTH = 1_024;\n/** The deepest nesting a JSON snapshot copies; also bounds a cyclic value. */\nexport const MAX_JSON_DEPTH = 64;\n/** The most objects, arrays and dates one JSON snapshot copies. */\nexport const MAX_JSON_NODES = 100_000;\n\n/** Why a snapshot refused a value. The caller's `Fail` maps it to a public error. */\nexport type SnapshotFault = \"accessor\" | \"not_plain\" | \"hole\" | \"not_json\" | \"too_deep\" | \"too_large\";\n\n/** Throws the entry point's public error for a fault at a package-named field. */\nexport type Fail = (fault: SnapshotFault, field: string) => never;\n\n/** Stands in for a non-primitive where an option must be a primitive, so validation rejects it. */\nexport const NOT_PRIMITIVE: unique symbol = Symbol(\"webhook-delivery.not-primitive\");\n\n/** A null-prototype data descriptor, so `defineProperty` reads nothing from `Object.prototype`. */\nfunction dataDescriptor(value: unknown): PropertyDescriptor {\n\tconst descriptor = objectCreate(null) as { value?: unknown; enumerable?: boolean; writable?: boolean; configurable?: boolean };\n\tdescriptor.value = value;\n\tdescriptor.enumerable = true;\n\tdescriptor.writable = false;\n\tdescriptor.configurable = false;\n\treturn descriptor;\n}\n\n/** Define an own, enumerable, read-only data property without consulting any prototype. */\nexport function define(target: object, key: string | number, value: unknown): void {\n\treflectDefineProperty(target, key, dataDescriptor(value));\n}\n\n/** A fresh array holding `values`' elements in order, frozen. `values` must be package-owned. */\nexport function frozenList<T>(values: readonly T[]): readonly T[] {\n\tconst list: T[] = [];\n\tfor (let index = 0; index < values.length; index += 1) define(list, index, values[index]);\n\treturn objectFreeze(list);\n}\n\n/**\n * A frozen null-prototype copy of a package-built object literal. Keys whose\n * value is `undefined` are left out, so optional fields are absent rather\n * than present-and-undefined.\n */\nexport function record<T extends object>(fields: T): T {\n\tconst out = objectCreate(null) as T;\n\tconst keys = reflectOwnKeys(fields);\n\tfor (let index = 0; index < keys.length; index += 1) {\n\t\tconst key = keys[index] as string;\n\t\tconst descriptor = reflectGetOwnPropertyDescriptor(fields, key);\n\t\tif (descriptor !== undefined && objectHasOwn(descriptor, \"value\") && descriptor.value !== undefined) define(out, key, descriptor.value);\n\t}\n\treturn objectFreeze(out);\n}\n\n/** A mutable null-prototype map for package-internal bookkeeping. */\nexport function emptyMap<T>(): Record<string, T> {\n\treturn objectCreate(null) as Record<string, T>;\n}\n\n/** `true` when `re` matches `value`, using the captured `RegExp.prototype.exec`. */\nexport function matches(re: RegExp, value: string): boolean {\n\treturn reflectApply(regExpExec, re, [value]) !== null;\n}\n\n/** `value.trim()` with the captured intrinsic. */\nexport function trim(value: string): string {\n\treturn reflectApply(stringTrim, value, []) as string;\n}\n\n/** `true` when `value` is one of the frozen package `codes`. */\nexport function isOneOf(codes: readonly string[], value: unknown): boolean {\n\tif (typeof value !== \"string\") return false;\n\tfor (let index = 0; index < codes.length; index += 1) if (codes[index] === value) return true;\n\treturn false;\n}\n\n/** `true` for a non-array object whose prototype is `Object.prototype` or `null`. A Proxy's trap may run. */\nexport function isPlainRecord(value: unknown): value is object {\n\tif (value === null || typeof value !== \"object\" || arrayIsArray(value)) return false;\n\tconst prototype = reflectGetPrototypeOf(value);\n\treturn prototype === objectPrototype || prototype === null;\n}\n\n/**\n * Read one own data property. Absent is `undefined`; an accessor is refused\n * through `fail` without being called.\n */\nexport function readOwn(target: object, key: string, field: string, fail: Fail): unknown {\n\tconst descriptor = reflectGetOwnPropertyDescriptor(target, key);\n\tif (descriptor === undefined) return undefined;\n\tif (!objectHasOwn(descriptor, \"value\")) return fail(\"accessor\", field);\n\treturn descriptor.value;\n}\n\n/** `undefined` for an absent value, the value for a primitive, {@link NOT_PRIMITIVE} otherwise. */\nexport function primitive(value: unknown): unknown {\n\tif (value === null || (typeof value !== \"object\" && typeof value !== \"function\")) return value;\n\treturn NOT_PRIMITIVE;\n}\n\n/**\n * The ISO-8601 form of a real `Date` with a finite time, or `undefined`.\n * Computed with the intrinsics, so an overridden `toISOString`, `getTime`,\n * `toJSON` or `Symbol.toPrimitive` is never called; a Proxy is not a date.\n */\nexport function isoDate(value: unknown): string | undefined {\n\tconst time = timeOf(value);\n\tif (!numberIsFinite(time)) return undefined;\n\treturn reflectApply(dateToISOString, value, []) as string;\n}\n\n/** The time value of a real `Date`, or `NaN` for anything else. */\nexport function timeOf(value: unknown): number {\n\tif (value === null || typeof value !== \"object\") return NaN;\n\ttry {\n\t\t// Throws for anything without a [[DateValue]] slot, a Proxy included,\n\t\t// before any of the value's own code could run.\n\t\treturn reflectApply(dateGetTime, value, []) as number;\n\t} catch {\n\t\treturn NaN;\n\t}\n}\n\n/** A real `Date` or a date string as ISO-8601, or `undefined`. */\nexport function isoFromDateOrString(value: unknown): string | undefined {\n\tif (typeof value === \"string\") return isoDate(new DateConstructor(value));\n\treturn isoDate(value);\n}\n\n/**\n * Copy an option list by index from its own `length`. Holes and\n * non-primitive elements are kept as `undefined` and {@link NOT_PRIMITIVE}\n * so validation can name the index; a non-array is {@link NOT_PRIMITIVE}.\n */\nexport function primitiveList(value: unknown, field: string, fail: Fail): unknown {\n\tif (!arrayIsArray(value)) return value === undefined ? undefined : NOT_PRIMITIVE;\n\tconst length = listLength(value, field, fail);\n\tconst copy: unknown[] = [];\n\tfor (let index = 0; index < length; index += 1) {\n\t\tdefine(copy, index, primitive(readOwn(value, `${index}`, `${field}[${index}]`, fail)));\n\t}\n\treturn objectFreeze(copy);\n}\n\n/** The strings of an option list, in order; other elements and holes are skipped. `undefined` for a non-array. */\nexport function stringList(value: unknown, field: string, fail: Fail): readonly string[] | undefined {\n\tconst copy = primitiveList(value, field, fail);\n\tif (!arrayIsArray(copy)) return undefined;\n\tconst strings: string[] = [];\n\tfor (let index = 0; index < copy.length; index += 1) {\n\t\tconst item = copy[index];\n\t\tif (typeof item === \"string\") define(strings, strings.length, item);\n\t}\n\treturn objectFreeze(strings);\n}\n\nfunction listLength(value: object, field: string, fail: Fail): number {\n\tconst length = readOwn(value, \"length\", field, fail);\n\tif (typeof length !== \"number\" || !numberIsSafeInteger(length) || length < 0) return fail(\"not_json\", field);\n\tif (length > MAX_LIST_LENGTH) return fail(\"too_large\", field);\n\treturn length;\n}\n\n/**\n * Snapshot a JSON value: primitives as they are (finite numbers only), a\n * real `Date` as its ISO string, arrays as fresh frozen arrays, plain objects\n * as frozen null-prototype objects holding their own enumerable data\n * properties (`undefined` values skipped, as `JSON.stringify` does).\n * Functions, symbols, bigints, non-finite numbers, holes, accessors,\n * non-plain objects, nesting deeper than {@link MAX_JSON_DEPTH} (a cycle\n * included) and more than {@link MAX_JSON_NODES} containers are refused\n * through `fail`, naming `field` only.\n */\nexport function snapshotJson(value: unknown, field: string, fail: Fail): WebhookJsonValue {\n\treturn copyJson(value, field, fail, 0, { nodes: 0 });\n}\n\n/** The container count several {@link snapshotJsonPart} calls share. */\nexport interface JsonNodeBudget {\n\tnodes: number;\n}\n\n/**\n * Snapshot one part of a larger JSON value as if {@link snapshotJson} had\n * reached it at `depth` with `budget.nodes` containers already counted, so\n * several parts read separately are held to the same depth and node limits\n * as the whole value read at once.\n */\nexport function snapshotJsonPart(value: unknown, field: string, fail: Fail, depth: number, budget: JsonNodeBudget): WebhookJsonValue {\n\treturn copyJson(value, field, fail, depth, budget);\n}\n\nfunction copyJson(value: unknown, field: string, fail: Fail, depth: number, budget: JsonNodeBudget): WebhookJsonValue {\n\tif (value === null || typeof value === \"string\" || typeof value === \"boolean\") return value;\n\tif (typeof value === \"number\") return numberIsFinite(value) ? value : fail(\"not_json\", field);\n\tif (typeof value !== \"object\") return fail(\"not_json\", field);\n\tif (depth >= MAX_JSON_DEPTH) return fail(\"too_deep\", field);\n\tbudget.nodes += 1;\n\tif (budget.nodes > MAX_JSON_NODES) return fail(\"too_large\", field);\n\tconst iso = isoDate(value);\n\tif (iso !== undefined) return iso;\n\tif (arrayIsArray(value)) {\n\t\tconst length = readOwn(value, \"length\", field, fail);\n\t\tif (typeof length !== \"number\" || !numberIsSafeInteger(length) || length < 0) return fail(\"not_json\", field);\n\t\tif (length > MAX_JSON_NODES) return fail(\"too_large\", field);\n\t\tconst copy: WebhookJsonValue[] = [];\n\t\tfor (let index = 0; index < length; index += 1) {\n\t\t\tconst item = readOwn(value, `${index}`, field, fail);\n\t\t\tif (item === undefined) return fail(\"hole\", field);\n\t\t\tdefine(copy, index, copyJson(item, field, fail, depth + 1, budget));\n\t\t}\n\t\treturn objectFreeze(copy);\n\t}\n\tif (!isPlainRecord(value)) return fail(\"not_plain\", field);\n\tconst keys = reflectOwnKeys(value);\n\tconst copy = objectCreate(null) as Record<string, WebhookJsonValue>;\n\tfor (let index = 0; index < keys.length; index += 1) {\n\t\tconst key = keys[index];\n\t\tif (typeof key !== \"string\") continue;\n\t\tconst descriptor = reflectGetOwnPropertyDescriptor(value, key);\n\t\tif (descriptor === undefined || descriptor.enumerable !== true) continue;\n\t\tif (!objectHasOwn(descriptor, \"value\")) return fail(\"accessor\", field);\n\t\tif (descriptor.value === undefined) continue;\n\t\tdefine(copy, key, copyJson(descriptor.value, field, fail, depth + 1, budget));\n\t}\n\treturn objectFreeze(copy);\n}\n\n/**\n * Serialize a snapshot to JSON text. It walks only package-built values\n * (frozen null-prototype objects, frozen fresh arrays, primitives), so no\n * `toJSON`, getter or prototype member is ever consulted. Strings are quoted\n * with the captured `JSON.stringify`, which reads no property of a string\n * primitive. The output is what `JSON.stringify` gives for the same data.\n */\nexport function serializeJson(value: unknown): string {\n\tif (value === null) return \"null\";\n\tif (typeof value === \"string\") return jsonStringify(value) as string;\n\tif (typeof value === \"number\") return numberIsFinite(value) ? `${value}` : \"null\";\n\tif (typeof value === \"boolean\") return value ? \"true\" : \"false\";\n\tif (typeof value !== \"object\") return \"null\";\n\tif (arrayIsArray(value)) {\n\t\tlet text = \"[\";\n\t\tfor (let index = 0; index < value.length; index += 1) {\n\t\t\tif (index > 0) text += \",\";\n\t\t\ttext += serializeJson(value[index]);\n\t\t}\n\t\treturn `${text}]`;\n\t}\n\tconst keys = reflectOwnKeys(value);\n\tlet text = \"{\";\n\tlet first = true;\n\tfor (let index = 0; index < keys.length; index += 1) {\n\t\tconst key = keys[index];\n\t\tif (typeof key !== \"string\") continue;\n\t\tconst item = (value as Record<string, unknown>)[key];\n\t\tif (item === undefined) continue;\n\t\ttext += `${first ? \"\" : \",\"}${jsonStringify(key) as string}:${serializeJson(item)}`;\n\t\tfirst = false;\n\t}\n\treturn `${text}}`;\n}\n","import type { WebhookConfigErrorCode, WebhookDeliveryErrorCode, WebhookFanOutErrorCode, WebhookGovernedActionErrorCode, WebhookInputErrorCode, WebhookProjectionErrorCode, WebhookStoreErrorCode } from \"./codes\";\nimport { apply, define, freeze, hasOwn } from \"./snapshot\";\n\n/*\n * Package errors and the one guard every exported function runs inside\n * (README, \"Security properties\", P2).\n *\n * Every error this package throws is created by a factory below, which\n * gives it a fixed code and that code's constant message, replaces its\n * native stack with fixed text, records it in a module-private WeakSet and\n * freezes it. The public constructors never touch\n * the WeakSet, so a caller constructing a `WebhookProjectionError` cannot make\n * it pass for one of ours. The guard tells the two apart with\n * `WeakSet.prototype.has` alone, which runs no Proxy trap and reads no\n * property of the thrown value; anything not in the set is dropped unread and\n * replaced by a fresh error from the entry point's factory.\n *\n * The WeakSet is per copy of the module. It is not a registry of ports or\n * predicates (ADR 0018 decision 6): it holds only errors this copy created,\n * and a second copy of the package (ESM and CommonJS loaded together) treats\n * the first copy's errors as foreign and replaces them with its own.\n */\n\nconst PROJECTION_MESSAGES: Readonly<Record<WebhookProjectionErrorCode, string>> = freeze({\n\tinvalid_envelope: \"Webhook projection failed: a required envelope or job field is missing or invalid.\",\n\tpayload_field_not_json: \"Webhook projection failed: an allowlisted payload field is not plain JSON.\",\n\tfact_field_not_json: \"Webhook projection failed: a declared fact field is not plain JSON.\",\n\taccessor_property: \"Webhook projection failed: accessor properties are not read.\",\n\tinspection_failed: \"Webhook projection failed: an input could not be inspected.\",\n\tscope_mismatch: \"Webhook projection failed: the subscription's scope does not match the event's tenant and space.\",\n});\n\nconst CONFIG_MESSAGES: Readonly<Record<WebhookConfigErrorCode, string>> = freeze({\n\tlimit_not_positive_finite: \"Webhook delivery limit must be a positive, finite number.\",\n\tlimit_not_integer: \"Webhook delivery limit must be a whole number.\",\n\tlimit_out_of_range: \"Webhook delivery limit is outside its allowed range.\",\n\tretry_schedule_empty: \"Webhook delivery retry schedule must list at least one delay.\",\n\tlimit_unreadable: \"Webhook delivery limits could not be read.\",\n});\n\nconst INPUT_MESSAGES: Readonly<Record<WebhookInputErrorCode, string>> = freeze({\n\tinput_unreadable: \"Webhook delivery input could not be read.\",\n\tobservation_unknown: \"Webhook delivery observation is not one decision 10 classifies.\",\n\tstatus_out_of_range: \"Webhook response status must be a whole number from 100 to 599.\",\n\tsignature_malformed: \"Webhook signature must be a v1=<64 lowercase hex> value.\",\n\ttimestamp_invalid: \"Webhook timestamp must be a non-negative whole number of seconds.\",\n\tevent_id_invalid: \"Webhook eventId must be printable ASCII with no control characters or surrounding spaces.\",\n\tdelivery_id_invalid: \"Webhook deliveryId must be printable ASCII with no control characters or surrounding spaces.\",\n\tattempt_invalid: \"Webhook attempt must be a positive whole number.\",\n\traw_body_not_string: \"Webhook raw body must be a string.\",\n\trandom_source_missing: \"createWebhookRetryDelay requires a random source.\",\n\trandom_sample_invalid: \"Webhook retry random source must return a number in [0, 1).\",\n\trandom_source_failed: \"Webhook retry random source failed.\",\n\tdenial_code_unknown: \"Webhook admission denial code is not in WEBHOOK_ADMISSION_DENIAL_CODES.\",\n});\n\nconst STORE_MESSAGES: Readonly<Record<WebhookStoreErrorCode, string>> = freeze({\n\tinput_invalid: \"Webhook store input is missing, malformed or not plain data.\",\n\trecord_mismatch: \"Webhook store record does not match its parent's event, tenant, space or delivery.\",\n\tdelivery_id_conflict: \"Webhook store deliveryId is already used by another subscription and event.\",\n\tcall_aborted: \"Webhook store call was aborted before the store acted.\",\n\tdeadline_passed: \"Webhook store call deadline passed before the store acted.\",\n\tclock_invalid: \"Webhook store clock failed or returned an invalid time.\",\n\tstore_failed: \"Webhook store failed.\",\n});\n\nconst FAN_OUT_MESSAGES: Readonly<Record<WebhookFanOutErrorCode, string>> = freeze({\n\tevent_past_replay_horizon: \"Webhook fan-out refused the event: it is older than the replay horizon, so no fan-out job can be stored.\",\n\tfan_out_store_failed: \"Webhook fan-out store call failed.\",\n\tfan_out_store_timeout: \"Webhook fan-out store call did not settle in time.\",\n\tpublish_aborted: \"Webhook fan-out publish was aborted before the job was stored.\",\n\tsink_failed: \"A required sink of the composite event publisher failed.\",\n\tsink_timeout: \"A required sink of the composite event publisher did not settle in time.\",\n\tclock_invalid: \"Webhook fan-out clock failed or returned an invalid time.\",\n\toptions_invalid: \"Webhook fan-out options are missing or malformed.\",\n});\n\nconst DELIVERY_MESSAGES: Readonly<Record<WebhookDeliveryErrorCode, string>> = freeze({\n\tdelivery_store_failed: \"Webhook delivery store call failed.\",\n\tdelivery_store_timeout: \"Webhook delivery store call did not settle in time.\",\n\tclock_invalid: \"Webhook delivery clock failed or returned an invalid time.\",\n\toptions_invalid: \"Webhook delivery options are missing or malformed.\",\n});\n\nconst GOVERNED_ACTION_MESSAGES: Readonly<Record<WebhookGovernedActionErrorCode, string>> = freeze({\n\toptions_invalid: \"Webhook governed-action module options are missing or malformed.\",\n});\n\nfunction messageFor(table: Readonly<Record<string, string>>, code: unknown, fallback: string): string {\n\treturn typeof code === \"string\" && hasOwn(table, code) ? table[code]! : fallback;\n}\n\nconst reflectDefineProperty = Reflect.defineProperty;\nconst objectCreate = Object.create;\n\n/**\n * An own, enumerable, writable data property, defined with a null-prototype\n * descriptor so neither `Error.prototype` nor `Object.prototype` is consulted.\n * Errors the package throws are frozen afterwards.\n */\nfunction defineField(target: object, key: string, value: unknown): void {\n\tconst descriptor = objectCreate(null) as PropertyDescriptor;\n\tdescriptor.value = value;\n\tdescriptor.enumerable = true;\n\tdescriptor.writable = true;\n\tdescriptor.configurable = true;\n\treflectDefineProperty(target, key, descriptor);\n}\n\n/**\n * A configured limit was not usable: zero, negative, `NaN`, infinite, not an\n * integer where a count is required, outside its documented range, or not\n * readable as plain data. The message is constant for the code; `field`\n * names the limit, for example `deliveryRetryDelaysMs[2]`.\n */\nexport class WebhookDeliveryConfigError extends Error {\n\tdeclare readonly code: WebhookConfigErrorCode;\n\t/** The limit that was rejected, for example `deliveryRetryDelaysMs[2]`. */\n\tdeclare readonly field: string;\n\n\tconstructor(code: WebhookConfigErrorCode, field: string) {\n\t\tsuper(messageFor(CONFIG_MESSAGES, code, \"Webhook delivery limit was rejected.\"));\n\t\tdefineField(this, \"name\", \"WebhookDeliveryConfigError\");\n\t\tdefineField(this, \"code\", code);\n\t\tdefineField(this, \"field\", field);\n\t}\n}\n\n/**\n * An envelope, job or subscription could not be projected. The message is\n * constant for the code. `field` names an envelope or job field, an option,\n * or a field name from the caller's own allowlist; never a value.\n */\nexport class WebhookProjectionError extends Error {\n\tdeclare readonly code: WebhookProjectionErrorCode;\n\t/** The envelope, job, option or allowlisted payload field at fault. */\n\tdeclare readonly field: string;\n\n\tconstructor(code: WebhookProjectionErrorCode, field: string) {\n\t\tsuper(messageFor(PROJECTION_MESSAGES, code, \"Webhook projection failed.\"));\n\t\tdefineField(this, \"name\", \"WebhookProjectionError\");\n\t\tdefineField(this, \"code\", code);\n\t\tdefineField(this, \"field\", field);\n\t}\n}\n\n/**\n * A store call was refused: its input was malformed or not plain data\n * (`input_invalid`), it broke a store invariant (`record_mismatch`,\n * `delivery_id_conflict`), it was aborted or past its deadline when the\n * store reached its write (`call_aborted`, `deadline_passed`), or the\n * store's clock failed (`clock_invalid`). Nothing was written. The message\n * is constant for the code; `field` names an input field, never a value.\n */\nexport class WebhookStoreError extends Error {\n\tdeclare readonly code: WebhookStoreErrorCode;\n\t/** The input field at fault, for example `intent.eventId`. */\n\tdeclare readonly field: string;\n\n\tconstructor(code: WebhookStoreErrorCode, field: string) {\n\t\tsuper(messageFor(STORE_MESSAGES, code, \"Webhook store call was refused.\"));\n\t\tdefineField(this, \"name\", \"WebhookStoreError\");\n\t\tdefineField(this, \"code\", code);\n\t\tdefineField(this, \"field\", field);\n\t}\n}\n\n/**\n * The fan-out publisher, the composite publisher or the fan-out cycle refused\n * or failed (`WEBHOOK_FAN_OUT_ERROR_CODES`). The message is constant for the\n * code; `field` names an option, a store method or a sink name from the\n * application's own configuration, never an event value.\n */\nexport class WebhookFanOutError extends Error {\n\tdeclare readonly code: WebhookFanOutErrorCode;\n\t/** The option, store method or sink at fault, for example `insertFanOutJob`. */\n\tdeclare readonly field: string;\n\n\tconstructor(code: WebhookFanOutErrorCode, field: string) {\n\t\tsuper(messageFor(FAN_OUT_MESSAGES, code, \"Webhook fan-out failed.\"));\n\t\tdefineField(this, \"name\", \"WebhookFanOutError\");\n\t\tdefineField(this, \"code\", code);\n\t\tdefineField(this, \"field\", field);\n\t}\n}\n\n/**\n * The delivery cycle could not run (`WEBHOOK_DELIVERY_ERROR_CODES`). The\n * message is constant for the code; `field` names an option or a store\n * method, never a value.\n */\nexport class WebhookDeliveryError extends Error {\n\tdeclare readonly code: WebhookDeliveryErrorCode;\n\t/** The option or store method at fault, for example `claimDeliveryIntents`. */\n\tdeclare readonly field: string;\n\n\tconstructor(code: WebhookDeliveryErrorCode, field: string) {\n\t\tsuper(messageFor(DELIVERY_MESSAGES, code, \"Webhook delivery failed.\"));\n\t\tdefineField(this, \"name\", \"WebhookDeliveryError\");\n\t\tdefineField(this, \"code\", code);\n\t\tdefineField(this, \"field\", field);\n\t}\n}\n\n/**\n * The governed-action module could not be built\n * (`WEBHOOK_GOVERNED_ACTION_ERROR_CODES`). The message is constant for the\n * code; `field` names an option, never a value.\n */\nexport class WebhookGovernedActionError extends Error {\n\tdeclare readonly code: WebhookGovernedActionErrorCode;\n\t/** The option at fault, for example `secretReferences.verify`. */\n\tdeclare readonly field: string;\n\n\tconstructor(code: WebhookGovernedActionErrorCode, field: string) {\n\t\tsuper(messageFor(GOVERNED_ACTION_MESSAGES, code, \"Webhook governed-action module could not be built.\"));\n\t\tdefineField(this, \"name\", \"WebhookGovernedActionError\");\n\t\tdefineField(this, \"code\", code);\n\t\tdefineField(this, \"field\", field);\n\t}\n}\n\nconst created = new WeakSet<object>();\nconst weakSetAdd = WeakSet.prototype.add;\nconst weakSetHas = WeakSet.prototype.has;\nconst TypeErrorConstructor = TypeError;\nconst RangeErrorConstructor = RangeError;\n\n/**\n * Register a factory-made error and freeze it. Its native `stack` is\n * replaced first with fixed package text: V8 frames name the functions on\n * the call stack, and a caller can name its own function (a Proxy trap, a\n * getter, a callback that calls a package helper) after a secret. Replacing\n * it before anything reads it also means `Error.prepareStackTrace` is never\n * consulted for a package error.\n */\nfunction mark<E extends Error>(error: E, name: string, code: string): E {\n\tconst stack = objectCreate(null) as PropertyDescriptor;\n\tstack.value = `${name}: ${code}`;\n\tstack.enumerable = false;\n\tstack.writable = false;\n\tstack.configurable = false;\n\tif (!reflectDefineProperty(error, \"stack\", stack)) throw new TypeErrorConstructor(\"Webhook delivery could not seal an error.\");\n\tapply(weakSetAdd, created, [error]);\n\treturn freeze(error);\n}\n\n/** `true` only for an error one of this module's factories created. Runs no code of `value`. */\nfunction isPackageError(value: unknown): boolean {\n\treturn (typeof value === \"object\" || typeof value === \"function\") && value !== null && apply(weakSetHas, created, [value]) === true;\n}\n\n/** @internal A package-created, frozen projection error. */\nexport function projectionError(code: WebhookProjectionErrorCode, field: string): WebhookProjectionError {\n\treturn mark(new WebhookProjectionError(code, field), \"WebhookProjectionError\", code);\n}\n\n/** @internal A package-created, frozen limit error. */\nexport function configError(code: WebhookConfigErrorCode, field: string): WebhookDeliveryConfigError {\n\treturn mark(new WebhookDeliveryConfigError(code, field), \"WebhookDeliveryConfigError\", code);\n}\n\n/** @internal A package-created, frozen store error. */\nexport function storeError(code: WebhookStoreErrorCode, field: string): WebhookStoreError {\n\treturn mark(new WebhookStoreError(code, field), \"WebhookStoreError\", code);\n}\n\n/** @internal A package-created, frozen fan-out error. */\nexport function fanOutError(code: WebhookFanOutErrorCode, field: string): WebhookFanOutError {\n\treturn mark(new WebhookFanOutError(code, field), \"WebhookFanOutError\", code);\n}\n\n/** @internal A package-created, frozen delivery-cycle error. */\nexport function deliveryError(code: WebhookDeliveryErrorCode, field: string): WebhookDeliveryError {\n\treturn mark(new WebhookDeliveryError(code, field), \"WebhookDeliveryError\", code);\n}\n\n/** @internal A package-created, frozen governed-action module error. */\nexport function governedActionError(code: WebhookGovernedActionErrorCode, field: string): WebhookGovernedActionError {\n\treturn mark(new WebhookGovernedActionError(code, field), \"WebhookGovernedActionError\", code);\n}\n\n/** @internal A package-created, frozen `TypeError` or `RangeError` carrying `code`. */\nexport function inputError(kind: \"type\" | \"range\", code: WebhookInputErrorCode): TypeError | RangeError {\n\tconst message = INPUT_MESSAGES[code];\n\tconst error = kind === \"type\" ? new TypeErrorConstructor(message) : new RangeErrorConstructor(message);\n\tdefine(error, \"code\", code);\n\treturn mark(error, kind === \"type\" ? \"TypeError\" : \"RangeError\", code);\n}\n\n/**\n * @internal Run an entry point. A package-created error passes through\n * unchanged; anything else thrown (by a Proxy trap, an injected callback or\n * the engine) is never inspected and is replaced by `replacement()`.\n */\nexport function guard<T>(run: () => T, replacement: () => Error): T {\n\ttry {\n\t\treturn run();\n\t} catch (thrown) {\n\t\tif (isPackageError(thrown)) throw thrown;\n\t\tthrow replacement();\n\t}\n}\n\n/** @internal Run a total function: any throw, package-created or not, yields `fallback()` unread. */\nexport function guardOr<T>(run: () => T, fallback: () => T): T {\n\ttry {\n\t\treturn run();\n\t} catch {\n\t\treturn fallback();\n\t}\n}\n","import { configError, guard } from \"./errors\";\nimport {\n\tdefine,\n\temptyMap,\n\tfreeze,\n\tisArray,\n\tisPlainRecord,\n\tnumberIsFinite,\n\tnumberIsSafeInteger,\n\tprimitive,\n\tprimitiveList,\n\treadOwn,\n\ttype Fail,\n} from \"./snapshot\";\n\n/**\n * Every bound the delivery lifecycle relies on (R4). All values are\n * milliseconds or counts and must be positive and finite;\n * {@link resolveWebhookDeliveryLimits} enforces that.\n */\nexport interface WebhookDeliveryLimits {\n\t/** Attempts per delivery intent before dead letter, including the first. */\n\treadonly maxDeliveryAttempts: number;\n\t/** Delays before attempts 2, 3, ...; the last entry repeats if attempts outnumber it. */\n\treadonly deliveryRetryDelaysMs: readonly number[];\n\t/** Processing deadline persisted on an intent at creation. */\n\treadonly deliveryDeadlineMs: number;\n\t/** Attempts per fan-out job before dead letter. */\n\treadonly maxFanOutAttempts: number;\n\t/** Fan-out retry delays; the last entry repeats. */\n\treadonly fanOutRetryDelaysMs: readonly number[];\n\t/** Processing deadline persisted on a fan-out job at creation. */\n\treadonly fanOutDeadlineMs: number;\n\t/** Bound on one transport call, from handoff to settled response. */\n\treadonly attemptTimeoutMs: number;\n\t/** Bound on every other awaited port call, stores included. */\n\treadonly portTimeoutMs: number;\n\t/** Jitter added to a retry delay, as a fraction of it, in `(0, 1]`. */\n\treadonly retryJitterRatio: number;\n\t/** The longest `Retry-After` honoured; longer requests are clamped to it. */\n\treadonly maxRetryAfterMs: number;\n\t/**\n\t * The replay horizon (R5): how long after an event's `recordedAt` the\n\t * delivery store accepts a fan-out job, intent or denial for it, accepts a\n\t * requeue of one, and keeps its records and tombstones. A replay older\n\t * than this is rejected as `past_horizon`. It must be a whole number of\n\t * milliseconds no shorter than `fanOutDeadlineMs + deliveryDeadlineMs`,\n\t * and should be much longer: it also has to cover the Host relay budget,\n\t * how long a Host outbox dead letter may wait for requeue, and how long an\n\t * operator may take to requeue a webhook dead letter. Pass the same value\n\t * to the delivery store.\n\t */\n\treadonly replayHorizonMs: number;\n}\n\nconst MINUTE = 60_000;\nconst HOUR = 60 * MINUTE;\nconst DAY = 24 * HOUR;\n\n/** The largest millisecond offset a JavaScript `Date` represents, so `now - horizon` stays a valid time. */\nexport const WEBHOOK_MAX_REPLAY_HORIZON_MS = 8_640_000_000_000_000;\n\n/** The largest delay a JavaScript timer accepts without overflowing. */\nexport const WEBHOOK_MAX_TIMER_MS = 2_147_483_647;\n\n/**\n * Defaults. Delivery: eight attempts with AutoRefi's first seven delays\n * (1m, 5m, 15m, 1h, 6h, 12h, 24h), per ADR 0018 decision 10.\n */\nexport const DEFAULT_WEBHOOK_DELIVERY_LIMITS: WebhookDeliveryLimits = Object.freeze({\n\tmaxDeliveryAttempts: 8,\n\tdeliveryRetryDelaysMs: Object.freeze([MINUTE, 5 * MINUTE, 15 * MINUTE, HOUR, 6 * HOUR, 12 * HOUR, 24 * HOUR]),\n\tdeliveryDeadlineMs: 72 * HOUR,\n\tmaxFanOutAttempts: 24,\n\tfanOutRetryDelaysMs: Object.freeze([1_000, 5_000, 30_000, MINUTE, 5 * MINUTE, 15 * MINUTE]),\n\tfanOutDeadlineMs: 24 * HOUR,\n\tattemptTimeoutMs: 15_000,\n\tportTimeoutMs: 5_000,\n\tretryJitterRatio: 0.1,\n\tmaxRetryAfterMs: HOUR,\n\treplayHorizonMs: 30 * DAY,\n});\n\n/** Every limit, in {@link WebhookDeliveryLimits} order. */\nconst LIMIT_KEYS = Object.freeze([\n\t\"maxDeliveryAttempts\",\n\t\"deliveryRetryDelaysMs\",\n\t\"deliveryDeadlineMs\",\n\t\"maxFanOutAttempts\",\n\t\"fanOutRetryDelaysMs\",\n\t\"fanOutDeadlineMs\",\n\t\"attemptTimeoutMs\",\n\t\"portTimeoutMs\",\n\t\"retryJitterRatio\",\n\t\"maxRetryAfterMs\",\n\t\"replayHorizonMs\",\n] as const satisfies readonly (keyof WebhookDeliveryLimits)[]);\n\nconst MAX_SAFE_INTEGER = Number.MAX_SAFE_INTEGER;\n\nconst limitFail: Fail = (fault, field) => {\n\tthrow configError(fault === \"too_large\" ? \"limit_out_of_range\" : \"limit_unreadable\", field);\n};\n\n/**\n * Merge overrides onto {@link DEFAULT_WEBHOOK_DELIVERY_LIMITS} and validate\n * every limit. An override left `undefined` keeps the default. The\n * overrides are copied at entry into a snapshot, one descriptor read per\n * limit (an accessor is refused, not called), and schedules are copied by\n * index; the snapshot is validated and is what is returned, frozen. Keys\n * that are not limits are ignored.\n *\n * @throws {WebhookDeliveryConfigError} when any limit is zero, negative,\n * `NaN`, infinite, fractional where a count is required, out of range, or\n * cannot be read as plain data (`limit_unreadable`).\n */\nexport function resolveWebhookDeliveryLimits(\n\toverrides: Partial<WebhookDeliveryLimits> = {},\n): WebhookDeliveryLimits {\n\treturn guard(() => resolveLimits(overrides), () => configError(\"limit_unreadable\", \"overrides\"));\n}\n\nfunction resolveLimits(overrides: unknown): WebhookDeliveryLimits {\n\tif (!isPlainRecord(overrides)) return limitFail(\"not_plain\", \"overrides\");\n\tconst merged = emptyMap<unknown>();\n\tfor (let index = 0; index < LIMIT_KEYS.length; index += 1) {\n\t\tconst key = LIMIT_KEYS[index]!;\n\t\tconst raw = readOwn(overrides, key, key, limitFail);\n\t\tconst value = key === \"deliveryRetryDelaysMs\" || key === \"fanOutRetryDelaysMs\" ? primitiveList(raw, key, limitFail) : primitive(raw);\n\t\tdefine(merged, key, value === undefined ? DEFAULT_WEBHOOK_DELIVERY_LIMITS[key] : value);\n\t}\n\tconst limits = merged as unknown as WebhookDeliveryLimits;\n\tassertPositiveInteger(limits.maxDeliveryAttempts, \"maxDeliveryAttempts\");\n\tassertDelaySchedule(limits.deliveryRetryDelaysMs, \"deliveryRetryDelaysMs\");\n\tassertPositiveFinite(limits.deliveryDeadlineMs, \"deliveryDeadlineMs\");\n\tassertPositiveInteger(limits.maxFanOutAttempts, \"maxFanOutAttempts\");\n\tassertDelaySchedule(limits.fanOutRetryDelaysMs, \"fanOutRetryDelaysMs\");\n\tassertPositiveFinite(limits.fanOutDeadlineMs, \"fanOutDeadlineMs\");\n\tassertTimerBound(limits.attemptTimeoutMs, \"attemptTimeoutMs\");\n\tassertTimerBound(limits.portTimeoutMs, \"portTimeoutMs\");\n\tassertJitterRatio(limits.retryJitterRatio, \"retryJitterRatio\");\n\tassertPositiveFinite(limits.maxRetryAfterMs, \"maxRetryAfterMs\");\n\tassertJitteredScheduleRepresentable(limits.deliveryRetryDelaysMs, limits.retryJitterRatio, \"deliveryRetryDelaysMs\");\n\tassertJitteredScheduleRepresentable(limits.fanOutRetryDelaysMs, limits.retryJitterRatio, \"fanOutRetryDelaysMs\");\n\tassertReplayHorizon(limits.replayHorizonMs, \"replayHorizonMs\");\n\t// A job and its intents legitimately stay pending for up to both\n\t// processing deadlines; a shorter horizon would reject their own writes.\n\tif (limits.replayHorizonMs < limits.fanOutDeadlineMs + limits.deliveryDeadlineMs) {\n\t\tthrow configError(\"limit_out_of_range\", \"replayHorizonMs\");\n\t}\n\t// The snapshot's schedules are already frozen copies; freezing the map\n\t// makes the validated snapshot the returned value.\n\treturn freeze(merged) as unknown as WebhookDeliveryLimits;\n}\n\n/** @internal `value` must come from a snapshot (a primitive). */\nexport function assertPositiveFinite(value: unknown, field: string): asserts value is number {\n\tif (typeof value !== \"number\" || !numberIsFinite(value) || value <= 0) {\n\t\tthrow configError(\"limit_not_positive_finite\", field);\n\t}\n}\n\n/** @internal */\nexport function assertPositiveInteger(value: unknown, field: string): asserts value is number {\n\tassertPositiveFinite(value, field);\n\tif (!numberIsSafeInteger(value)) {\n\t\tthrow configError(\"limit_not_integer\", field);\n\t}\n}\n\n/** @internal `value` must be a snapshot list (see `primitiveList`) or a package constant. */\nexport function assertDelaySchedule(value: unknown, field: string): asserts value is readonly number[] {\n\tif (!isArray(value) || value.length === 0) {\n\t\tthrow configError(\"retry_schedule_empty\", field);\n\t}\n\t// Indexed: a hole in the input is `undefined` in the snapshot.\n\tfor (let index = 0; index < value.length; index += 1) {\n\t\tassertPositiveFinite(value[index], `${field}[${index}]`);\n\t}\n}\n\n/**\n * Every delay, with the largest jitter added, must stay a safe integer, so\n * the jittered delay is finite and exactly representable.\n *\n * @internal\n */\nexport function assertJitteredScheduleRepresentable(delays: readonly number[], jitterRatio: number, field: string): void {\n\tfor (let index = 0; index < delays.length; index += 1) {\n\t\tif (!(delays[index]! * (1 + jitterRatio) <= MAX_SAFE_INTEGER)) {\n\t\t\tthrow configError(\"limit_out_of_range\", `${field}[${index}]`);\n\t\t}\n\t}\n}\n\n/** @internal */\nexport function assertJitterRatio(value: unknown, field: string): asserts value is number {\n\tassertPositiveFinite(value, field);\n\tif (value > 1) {\n\t\tthrow configError(\"limit_out_of_range\", field);\n\t}\n}\n\n/**\n * A replay horizon must be a positive whole number of milliseconds no larger\n * than {@link WEBHOOK_MAX_REPLAY_HORIZON_MS}. The delivery stores run this at\n * construction.\n *\n * @internal `value` must be a primitive.\n */\nexport function assertReplayHorizon(value: unknown, field: string): asserts value is number {\n\tassertPositiveInteger(value, field);\n\tif (value > WEBHOOK_MAX_REPLAY_HORIZON_MS) {\n\t\tthrow configError(\"limit_out_of_range\", field);\n\t}\n}\n\nfunction assertTimerBound(value: unknown, field: string): asserts value is number {\n\tassertPositiveFinite(value, field);\n\tif (value > WEBHOOK_MAX_TIMER_MS) {\n\t\tthrow configError(\"limit_out_of_range\", field);\n\t}\n}\n","import { storeError } from \"./errors\";\nimport type { WebhookClock } from \"./ports\";\nimport {\n\tapply,\n\tdateParse,\n\tfreeze,\n\tisArray,\n\tisoDate,\n\tisoFromDateOrString,\n\tisOneOf,\n\tmatches,\n\tnumberIsSafeInteger,\n\treadOwn,\n\tserializeJson,\n\tsnapshotJson,\n\ttimeOf,\n\ttype Fail,\n} from \"./snapshot\";\nimport type { WebhookJsonObject, WebhookJsonValue } from \"./types\";\n\n/*\n * Input reading for the memory stores. A store method copies its arguments\n * into a package-owned snapshot at entry, with the same readers the pure\n * functions use (`src/snapshot.ts`): own data properties only, accessors\n * refused uncalled, `Date`s read with the intrinsics and turned into\n * ISO-8601 strings. The method then reads only the snapshot. Every refusal\n * is a package-created `WebhookStoreError` naming a field, never a value.\n */\n\nconst DateConstructor = Date;\n\nconst inputFail: Fail = (_fault, field) => {\n\tthrow storeError(\"input_invalid\", field);\n};\n\n/** A snapshot of a plain-data input record: frozen, null-prototype, dates as ISO strings. */\nexport type Snapshot = WebhookJsonObject;\n\n/** Snapshot a plain-data record argument. */\nexport function snapshotRecord(value: unknown, field: string): Snapshot {\n\tconst copy = snapshotJson(value, field, inputFail);\n\tif (copy === null || typeof copy !== \"object\" || isArray(copy)) throw storeError(\"input_invalid\", field);\n\treturn copy as Snapshot;\n}\n\n/** A nested record of a snapshot. */\nexport function nestedRecord(record: Snapshot, key: string, field: string): Snapshot {\n\tconst value = own(record, key);\n\tif (value === null || typeof value !== \"object\" || isArray(value)) throw storeError(\"input_invalid\", field);\n\treturn value as Snapshot;\n}\n\nfunction own(record: Snapshot, key: string): WebhookJsonValue | undefined {\n\treturn readOwn(record, key, key, inputFail) as WebhookJsonValue | undefined;\n}\n\n/** A non-empty string field. */\nexport function text(record: Snapshot, key: string, field: string): string {\n\tconst value = own(record, key);\n\tif (typeof value !== \"string\" || value.length === 0) throw storeError(\"input_invalid\", field);\n\treturn value;\n}\n\n/** The longest identifier a store accepts (tenant, space, subscription, event, delivery, worker and actor ids). */\nexport const MAX_IDENTIFIER_LENGTH = 256;\n\n/** C0 controls, DEL and C1 controls. */\nconst CONTROL_CHARACTER = /[\\u0000-\\u001f\\u007f-\\u009f]/;\n\n/**\n * A UTF-16 surrogate that is not half of a pair. Without the `u` flag the\n * pattern works on code units, which is what it has to inspect.\n */\nconst LONE_SURROGATE = /[\\ud800-\\udbff](?![\\udc00-\\udfff])|(?<![\\ud800-\\udbff])[\\udc00-\\udfff]/;\n\n/**\n * An identifier field: a non-empty string of at most\n * {@link MAX_IDENTIFIER_LENGTH} UTF-16 code units with no control\n * characters and no lone surrogates. Both stores read identifiers through\n * this function, so an identifier one store accepts the other accepts too.\n * No identifier contains the NUL a text key might be tempted to use as a\n * separator. Lone surrogates are refused because they have no UTF-8 form: a\n * PostgreSQL driver encodes each one as U+FFFD, so `\"t\\ud800\"` and\n * `\"t\\udc00\"` would be stored as the same tenant (`tests/postgres-live.test.ts`\n * shows the driver doing that).\n */\nexport function identifier(record: Snapshot, key: string, field: string): string {\n\tconst value = text(record, key, field);\n\tif (!isWebhookIdentifier(value)) throw storeError(\"input_invalid\", field);\n\treturn value;\n}\n\n/**\n * The identifier rule of {@link identifier} as a predicate: a non-empty\n * string of at most {@link MAX_IDENTIFIER_LENGTH} UTF-16 code units with no\n * control character and no lone surrogate. The governed actions' parameter\n * readers (src/action-parameters.ts) use it, so an id an action accepts is\n * one every store accepts.\n */\nexport function isWebhookIdentifier(value: unknown): value is string {\n\treturn typeof value === \"string\" && value.length > 0 && value.length <= MAX_IDENTIFIER_LENGTH &&\n\t\t!matches(CONTROL_CHARACTER, value) && !matches(LONE_SURROGATE, value);\n}\n\n/** An optional identifier field. */\nexport function optionalIdentifier(record: Snapshot, key: string, field: string): string | undefined {\n\treturn own(record, key) === undefined ? undefined : identifier(record, key, field);\n}\n\n/**\n * A collision-free key for a tuple of strings: the tuple's JSON encoding.\n * Distinct tuples always encode differently, whatever characters the parts\n * hold, because JSON quotes and escapes each part.\n */\nexport function compositeKey(...parts: readonly string[]): string {\n\treturn serializeJson(parts);\n}\n\n/**\n * A fresh frozen deep copy of a value the store built from snapshots:\n * null-prototype objects, arrays and primitives. It has no depth or size\n * limit, so a record the store accepted can always be copied out; the\n * input snapshot already bounded it.\n */\nexport function cloneOut<T>(value: unknown): T {\n\treturn copyTree(value) as T;\n}\n\nfunction copyTree(value: unknown): unknown {\n\tif (value === null || typeof value !== \"object\") return value;\n\tif (isArray(value)) {\n\t\tconst list: unknown[] = [];\n\t\tfor (let index = 0; index < value.length; index += 1) list[index] = copyTree(value[index]);\n\t\treturn freeze(list);\n\t}\n\tconst out = Object.create(null) as Record<string, unknown>;\n\tconst keys = Object.keys(value);\n\tfor (let index = 0; index < keys.length; index += 1) {\n\t\tconst key = keys[index]!;\n\t\tconst item = (value as Record<string, unknown>)[key];\n\t\tif (item !== undefined) out[key] = copyTree(item);\n\t}\n\treturn freeze(out);\n}\n\n/** An optional non-empty string field. */\nexport function optionalText(record: Snapshot, key: string, field: string): string | undefined {\n\treturn own(record, key) === undefined ? undefined : text(record, key, field);\n}\n\n/** A safe integer field at least `min`. */\nexport function wholeNumber(record: Snapshot, key: string, field: string, min: number): number {\n\tconst value = own(record, key);\n\tif (typeof value !== \"number\" || !numberIsSafeInteger(value) || value < min) throw storeError(\"input_invalid\", field);\n\treturn value;\n}\n\n/** An optional safe integer field at least `min`. */\nexport function optionalWholeNumber(record: Snapshot, key: string, field: string, min: number): number | undefined {\n\treturn own(record, key) === undefined ? undefined : wholeNumber(record, key, field, min);\n}\n\n/** A boolean field. */\nexport function flag(record: Snapshot, key: string, field: string): boolean {\n\tconst value = own(record, key);\n\tif (typeof value !== \"boolean\") throw storeError(\"input_invalid\", field);\n\treturn value;\n}\n\n/** A timestamp field (a `Date` or a date string in the input), as epoch milliseconds. */\nexport function instant(record: Snapshot, key: string, field: string): number {\n\tconst value = own(record, key);\n\tconst iso = typeof value === \"string\" ? isoFromDateOrString(value) : undefined;\n\tif (iso === undefined) throw storeError(\"input_invalid\", field);\n\treturn dateParse(iso);\n}\n\n/** A field that must be one of the frozen package `codes`. */\nexport function codeOf<T extends string>(record: Snapshot, key: string, codes: readonly T[], field: string): T {\n\tconst value = own(record, key);\n\tif (!isOneOf(codes, value)) throw storeError(\"input_invalid\", field);\n\treturn value as T;\n}\n\n/** A non-empty list of non-empty strings, at most 1,024 long (the snapshot's list bound applies to JSON arrays too). */\nexport function textList(record: Snapshot, key: string, field: string): readonly string[] {\n\tconst value = own(record, key);\n\tif (!isArray(value) || value.length === 0 || value.length > 1_024) throw storeError(\"input_invalid\", field);\n\tfor (let index = 0; index < value.length; index += 1) {\n\t\tconst item = value[index];\n\t\tif (typeof item !== \"string\" || item.length === 0) throw storeError(\"input_invalid\", `${field}[${index}]`);\n\t}\n\treturn value as readonly string[];\n}\n\n/** The largest epoch-millisecond value a `Date` holds. */\nexport const MAX_TIME_MS = 8_640_000_000_000_000;\n\n/** The ISO-8601 form of epoch milliseconds. */\nexport function isoOf(ms: number): string {\n\tconst iso = isoDate(new DateConstructor(ms));\n\tif (iso === undefined) throw storeError(\"store_failed\", \"time\");\n\treturn iso;\n}\n\n// ---------------------------------------------------------------------------\n// Call options\n// ---------------------------------------------------------------------------\n\nconst abortedDescriptor = typeof AbortSignal === \"function\" ? Reflect.getOwnPropertyDescriptor(AbortSignal.prototype, \"aborted\") : undefined;\nconst abortedGetter = abortedDescriptor?.get;\n\n/** The parts of {@link WebhookCallOptions} a store checks when it reaches its write. */\nexport interface CallBounds {\n\treadonly deadlineMs: number;\n\treadonly signal: object;\n}\n\nfunction isAborted(signal: object): boolean {\n\tif (abortedGetter === undefined) throw storeError(\"input_invalid\", \"options.signal\");\n\t// The intrinsic getter reads the signal's internal slot; it throws for\n\t// anything that is not a real AbortSignal and runs none of its code.\n\treturn apply(abortedGetter, signal, []) === true;\n}\n\n/** Read `{ deadline, signal }` at entry. The signal must be a real `AbortSignal`. */\nexport function readCallOptions(options: unknown): CallBounds {\n\tif (options === null || typeof options !== \"object\") throw storeError(\"input_invalid\", \"options\");\n\tconst deadline = readOwn(options, \"deadline\", \"options.deadline\", inputFail);\n\tconst deadlineMs = timeOf(deadline);\n\tif (!(deadlineMs === deadlineMs) || deadlineMs === Infinity || deadlineMs === -Infinity) throw storeError(\"input_invalid\", \"options.deadline\");\n\tconst signal = readOwn(options, \"signal\", \"options.signal\", inputFail);\n\tif (signal === null || typeof signal !== \"object\") throw storeError(\"input_invalid\", \"options.signal\");\n\ttry {\n\t\tisAborted(signal);\n\t} catch {\n\t\tthrow storeError(\"input_invalid\", \"options.signal\");\n\t}\n\treturn { deadlineMs, signal };\n}\n\n/**\n * Refuse a call that is no longer wanted at the moment the store would\n * write: its signal aborted, or its deadline is not after the store's\n * `nowMs`. Nothing has been written when this throws.\n */\nexport function assertCallWanted(bounds: CallBounds, nowMs: number): void {\n\tif (isAborted(bounds.signal)) throw storeError(\"call_aborted\", \"options.signal\");\n\tif (!(bounds.deadlineMs > nowMs)) throw storeError(\"deadline_passed\", \"options.deadline\");\n}\n\n// ---------------------------------------------------------------------------\n// Clock\n// ---------------------------------------------------------------------------\n\n/** A clock captured at construction: the object and its `now` function. */\nexport interface CapturedClock {\n\treadonly target: object;\n\treadonly now: (...args: never[]) => unknown;\n}\n\n/** Capture an injected {@link WebhookClock} at construction. */\nexport function captureClock(clock: WebhookClock | undefined): CapturedClock {\n\tif (clock === null || typeof clock !== \"object\") throw storeError(\"clock_invalid\", \"clock\");\n\tconst now = (clock as { now?: unknown }).now;\n\tif (typeof now !== \"function\") throw storeError(\"clock_invalid\", \"clock.now\");\n\treturn { target: clock, now: now as (...args: never[]) => unknown };\n}\n\n/** Read the store's clock as epoch milliseconds; a throw or an invalid `Date` is `clock_invalid`. */\nexport function readClock(clock: CapturedClock): number {\n\tlet value: unknown;\n\ttry {\n\t\tvalue = apply(clock.now, clock.target, []);\n\t} catch {\n\t\tthrow storeError(\"clock_invalid\", \"clock.now\");\n\t}\n\tconst ms = timeOf(value);\n\tif (!(ms === ms) || ms === Infinity || ms === -Infinity) throw storeError(\"clock_invalid\", \"clock.now\");\n\treturn ms;\n}\n","import {\n\tWEBHOOK_ADMISSION_DENIAL_CODES,\n\tWEBHOOK_ATTEMPT_OUTCOMES,\n\tWEBHOOK_ATTEMPT_REASON_CODES,\n\tWEBHOOK_DIAGNOSTIC_CODES,\n\ttype WebhookAdmissionDenialCode,\n\ttype WebhookAttemptOutcome,\n\ttype WebhookAttemptReasonCode,\n\ttype WebhookDiagnosticCode,\n} from \"./codes\";\nimport { configError, guard, storeError } from \"./errors\";\nimport { assertReplayHorizon, WEBHOOK_MAX_REPLAY_HORIZON_MS } from \"./limits\";\nimport type {\n\tWebhookAttemptBeginResult,\n\tWebhookDeliveryLeaseCheck,\n\tWebhookFanOutJobFence,\n\tWebhookActorEnrichmentResult,\n\tWebhookFencedInsertResult,\n\tWebhookRequeueResult,\n} from \"./ports\";\nimport { mathMin, primitive, readOwn } from \"./snapshot\";\nimport {\n\tcloneOut,\n\tcodeOf,\n\tcompositeKey,\n\tflag,\n\tidentifier,\n\tinstant,\n\tisoOf,\n\tMAX_TIME_MS,\n\tnestedRecord,\n\toptionalIdentifier,\n\toptionalWholeNumber,\n\treadCallOptions,\n\tsnapshotRecord,\n\ttext,\n\twholeNumber,\n\ttype CallBounds,\n\ttype Snapshot,\n} from \"./store-input\";\nimport type {\n\tWebhookDeliveryIntentStatus,\n\tWebhookFanOutJobStatus,\n\tWebhookRequeueEvidence,\n} from \"./types\";\n\n/*\n * What the memory and PostgreSQL delivery stores share: the readers that\n * copy and validate each method's arguments at entry, the in-memory shape of\n * a job and an intent, and the functions that render records, requeue\n * evidence and settlements from that shape. Both stores call these, so the\n * input they accept, the identifier fields they validate and the records\n * they return cannot drift apart (README, \"Stores\"). Internal: not exported\n * from the package entry point.\n */\n\nexport interface LeaseState {\n\treadonly owner: string;\n\treadonly fence: number;\n\treadonly expiresAtMs: number;\n}\n\nexport interface Leased {\n\treadonly key: string;\n\tstatus: string;\n\tavailableAtMs: number;\n\treadonly createdAtMs: number;\n\tfence: number;\n\tlease: LeaseState | undefined;\n}\n\nexport interface JobState extends Leased {\n\t/** Replaced, never mutated, by an actor enrichment; otherwise as inserted. */\n\tdraft: Snapshot;\n\treadonly tenantId: string;\n\treadonly spaceId: string;\n\treadonly anchorMs: number;\n\tstatus: WebhookFanOutJobStatus;\n\tattemptCount: number;\n\tprocessingDeadlineMs: number;\n\tcompletedAtMs: number | undefined;\n\tlastDiagnostic: WebhookDiagnosticCode | undefined;\n}\n\nexport interface IntentState extends Leased {\n\treadonly subscriptionId: string;\n\treadonly eventId: string;\n\treadonly tenantId: string;\n\treadonly spaceId: string;\n\treadonly eligibilityRevision: number;\n\treadonly body: string;\n\treadonly anchorMs: number;\n\tstatus: WebhookDeliveryIntentStatus;\n\tattemptCount: number;\n\tprocessingDeadlineMs: number;\n\tlastOutcome: { readonly outcome: WebhookAttemptOutcome; readonly reason: WebhookAttemptReasonCode } | undefined;\n\tlastDiagnostic: WebhookDiagnosticCode | undefined;\n}\n\n/** The uniqueness marker for one (subscriptionId, eventId): the tombstone. */\nexport interface MarkerState {\n\treadonly kind: \"intent\" | \"denial\";\n\treadonly subscriptionId: string;\n\treadonly eventId: string;\n\treadonly tenantId: string;\n\treadonly spaceId: string;\n\treadonly anchorMs: number;\n}\n\nexport const TERMINAL_JOB: readonly string[] = Object.freeze([\"completed\", \"dead_letter\"]);\nexport const TERMINAL_INTENT: readonly string[] = Object.freeze([\"delivered\", \"dead_letter\", \"cancelled\"]);\nconst SETTLEMENT_KINDS = Object.freeze([\"delivered\", \"retry\", \"release\", \"dead_letter\", \"cancelled\"] as const);\nconst CANCEL_REASONS = Object.freeze([\"subscription_paused\", \"subscription_deleted\"] as const);\nconst DEAD_LETTER_REASONS: readonly string[] = Object.freeze([...WEBHOOK_ATTEMPT_REASON_CODES, ...WEBHOOK_DIAGNOSTIC_CODES]);\nconst EXPECTED_STATUS = Object.freeze([\"dead_letter\"] as const);\n\n/**\n * A fresh, frozen, null-prototype deep copy of a value the store built. It\n * has no depth or size limit, so every record the store accepted can be\n * returned (`cloneOut` in src/store-input.ts).\n */\nexport function copyOut<T>(value: object): T {\n\treturn cloneOut<T>(value);\n}\n\n/** The key of one (subscriptionId, eventId) pair; JSON-encoded, so distinct pairs never collide. */\nexport function markerKey(subscriptionId: string, eventId: string): string {\n\treturn compositeKey(subscriptionId, eventId);\n}\n\nexport interface Scope {\n\treadonly tenantId: string;\n\treadonly spaceId: string;\n}\n\nexport function inScope(record: { readonly tenantId: string; readonly spaceId: string }, scope: Scope): boolean {\n\treturn record.tenantId === scope.tenantId && record.spaceId === scope.spaceId;\n}\n\n/**\n * `true` when `owner` holds the record's lease at `fence`, ignoring expiry. A\n * lease's fence is always the record's fence. Only for a decision made\n * before the store's clock is read (the PostgreSQL lock phase's tentative\n * inserts); the decision itself is {@link holds}.\n */\nexport function holdsFence(state: Leased, owner: string, fence: number): boolean {\n\treturn state.status === \"pending\" && state.lease !== undefined && state.lease.owner === owner && state.lease.fence === fence;\n}\n\n/**\n * `true` when `owner` holds the record's lease at `fence` and the lease has\n * not expired at `storeNowMs`, the store's own clock read inside the atomic\n * step (memory) or after every lock is held (PostgreSQL). Every fenced write\n * decides with it, so a write after the lease expired is refused even when\n * no other worker has reclaimed the record yet.\n */\nexport function holds(state: Leased, owner: string, fence: number, storeNowMs: number): boolean {\n\treturn holdsFence(state, owner, fence) && state.lease!.expiresAtMs > storeNowMs;\n}\n\n/** UTF-16 code unit order, as JavaScript's `<` compares strings. */\nexport function compareText(left: string, right: string): number {\n\treturn left < right ? -1 : left > right ? 1 : 0;\n}\n\n/** Entry: snapshot the arguments. Anything not package-made becomes `input_invalid`. */\nfunction entry<T>(read: () => T): T {\n\treturn guard(read, () => storeError(\"input_invalid\", \"input\"));\n}\n\n/**\n * Read a store's `replayHorizonMs` option, as the constructor of either\n * store does: an own data property, never a getter, validated by\n * `assertReplayHorizon`.\n */\nexport function readHorizonOption(options: unknown): number {\n\treturn guard(\n\t\t() => {\n\t\t\tif (options === null || typeof options !== \"object\") throw configError(\"limit_unreadable\", \"options\");\n\t\t\tconst value = primitive(readOwn(options, \"replayHorizonMs\", \"replayHorizonMs\", () => {\n\t\t\t\tthrow configError(\"limit_unreadable\", \"replayHorizonMs\");\n\t\t\t}));\n\t\t\tassertReplayHorizon(value, \"replayHorizonMs\");\n\t\t\treturn value;\n\t\t},\n\t\t() => configError(\"limit_unreadable\", \"replayHorizonMs\"),\n\t);\n}\n\n/** Read an optional test-seam function option; anything else is `input_invalid`. */\nexport function readHookOption<T extends (...args: never[]) => unknown>(options: unknown, key: string): T | undefined {\n\treturn guard(() => {\n\t\tconst hook = (options as Record<string, unknown>)[key];\n\t\tif (hook !== undefined && typeof hook !== \"function\") throw storeError(\"input_invalid\", key);\n\t\treturn hook as T | undefined;\n\t}, () => storeError(\"input_invalid\", key));\n}\n\nfunction readScope(input: Snapshot, field: string): Scope {\n\treturn { tenantId: identifier(input, \"tenantId\", `${field}.tenantId`), spaceId: identifier(input, \"spaceId\", `${field}.spaceId`) };\n}\n\nexport interface FencedInput {\n\treadonly owner: string;\n\treadonly fence: number;\n\treadonly nowMs: number;\n}\n\nfunction readFenced(input: Snapshot): FencedInput {\n\treturn { owner: identifier(input, \"owner\", \"input.owner\"), fence: wholeNumber(input, \"fence\", \"input.fence\", 0), nowMs: instant(input, \"now\", \"input.now\") };\n}\n\nexport interface ClaimInput {\n\treadonly workerId: string;\n\treadonly leaseDurationMs: number;\n\treadonly limit: number;\n\treadonly nowMs: number;\n}\n\nfunction readClaim(request: unknown): ClaimInput {\n\tconst input = snapshotRecord(request, \"request\");\n\tconst claim: ClaimInput = {\n\t\tworkerId: identifier(input, \"workerId\", \"request.workerId\"),\n\t\tleaseDurationMs: wholeNumber(input, \"leaseDurationMs\", \"request.leaseDurationMs\", 1),\n\t\tlimit: wholeNumber(input, \"limit\", \"request.limit\", 1),\n\t\tnowMs: instant(input, \"now\", \"request.now\"),\n\t};\n\t// The lease expiry must be a representable time, checked before anything is leased.\n\tif (claim.nowMs + claim.leaseDurationMs > MAX_TIME_MS) throw storeError(\"input_invalid\", \"request.leaseDurationMs\");\n\treturn claim;\n}\n\nexport interface RequeueInput {\n\treadonly expectedFence: number;\n\treadonly requestedBy: string;\n\treadonly requestedAtMs: number;\n\treadonly processingDeadlineMs: number;\n\treadonly actionInvocationId: string | undefined;\n}\n\nfunction readRequeueRequest(input: Snapshot): RequeueInput {\n\tconst request = nestedRecord(input, \"request\", \"input.request\");\n\tcodeOf(request, \"expectedStatus\", EXPECTED_STATUS, \"input.request.expectedStatus\");\n\treturn {\n\t\texpectedFence: wholeNumber(request, \"expectedFence\", \"input.request.expectedFence\", 0),\n\t\trequestedBy: identifier(request, \"requestedBy\", \"input.request.requestedBy\"),\n\t\trequestedAtMs: instant(request, \"requestedAt\", \"input.request.requestedAt\"),\n\t\tprocessingDeadlineMs: instant(request, \"processingDeadline\", \"input.request.processingDeadline\"),\n\t\tactionInvocationId: optionalIdentifier(request, \"actionInvocationId\", \"input.request.actionInvocationId\"),\n\t};\n}\n\nfunction readParent(parent: unknown): WebhookFanOutJobFence {\n\tconst input = snapshotRecord(parent, \"parent\");\n\treturn { eventId: identifier(input, \"eventId\", \"parent.eventId\"), owner: identifier(input, \"owner\", \"parent.owner\"), fence: wholeNumber(input, \"fence\", \"parent.fence\", 0) };\n}\n\n// ---------------------------------------------------------------------------\n// Per-method entry readers. Each copies and validates every argument, the\n// call options included, and refuses malformed input as `input_invalid`\n// before the store does anything else.\n// ---------------------------------------------------------------------------\n\nexport function readInsertFanOutJobCall(job: unknown, options: unknown) {\n\treturn entry(() => ({ bounds: readCallOptions(options), job: readJobDraft(job) }));\n}\n\nexport function readClaimCall(request: unknown, options: unknown) {\n\treturn entry(() => ({ bounds: readCallOptions(options), claim: readClaim(request) }));\n}\n\nexport function readJobFencedCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\treturn { bounds: readCallOptions(options), fenced: readFenced(snap), eventId: identifier(snap, \"eventId\", \"input.eventId\") };\n\t});\n}\n\nexport function readRescheduleCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\treturn {\n\t\t\tbounds: readCallOptions(options),\n\t\t\tfenced: readFenced(snap),\n\t\t\teventId: identifier(snap, \"eventId\", \"input.eventId\"),\n\t\t\tavailableAtMs: instant(snap, \"availableAt\", \"input.availableAt\"),\n\t\t\tdiagnostic: codeOf(snap, \"diagnostic\", WEBHOOK_DIAGNOSTIC_CODES, \"input.diagnostic\"),\n\t\t};\n\t});\n}\n\n/** The lease duration a renewal asks for: a whole number of ms whose expiry from `now` is a representable time. */\nfunction readRenewal(snap: Snapshot, fenced: FencedInput): number {\n\tconst leaseDurationMs = wholeNumber(snap, \"leaseDurationMs\", \"input.leaseDurationMs\", 1);\n\tif (fenced.nowMs + leaseDurationMs > MAX_TIME_MS) throw storeError(\"input_invalid\", \"input.leaseDurationMs\");\n\treturn leaseDurationMs;\n}\n\nexport function readRenewJobCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\tconst fenced = readFenced(snap);\n\t\treturn { bounds: readCallOptions(options), fenced, eventId: identifier(snap, \"eventId\", \"input.eventId\"), leaseDurationMs: readRenewal(snap, fenced) };\n\t});\n}\n\nexport function readRenewIntentCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\tconst fenced = readFenced(snap);\n\t\treturn { bounds: readCallOptions(options), fenced, deliveryId: identifier(snap, \"deliveryId\", \"input.deliveryId\"), leaseDurationMs: readRenewal(snap, fenced) };\n\t});\n}\n\n/**\n * The expiry a renewal sets on a lease the caller holds: the later of the\n * current expiry and the earlier of `nowMs + leaseDurationMs` (the caller's\n * `now`, as a claim uses it) and the record's processing deadline. So a\n * renewal never shortens a lease and never extends one past the deadline.\n * Whether the caller holds the lease is decided by {@link holds} first.\n */\nexport function renewedExpiryMs(state: Leased & { readonly processingDeadlineMs: number }, nowMs: number, leaseDurationMs: number): number {\n\tconst asked = mathMin(nowMs + leaseDurationMs, state.processingDeadlineMs);\n\tconst current = state.lease!.expiresAtMs;\n\treturn asked > current ? asked : current;\n}\n\nexport function readDeadLetterJobCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\treturn {\n\t\t\tbounds: readCallOptions(options),\n\t\t\tfenced: readFenced(snap),\n\t\t\teventId: identifier(snap, \"eventId\", \"input.eventId\"),\n\t\t\tdiagnostic: codeOf(snap, \"diagnostic\", WEBHOOK_DIAGNOSTIC_CODES, \"input.diagnostic\"),\n\t\t};\n\t});\n}\n\nexport interface EnrichmentInput extends RequeueInput {\n\treadonly actorId: string;\n\treadonly actorType: string;\n}\n\n/** `enrichFanOutJobActor`: a scope, an `eventId` and the request, with the actor read field by field. */\nexport function readJobEnrichmentCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\tconst request = nestedRecord(snap, \"request\", \"input.request\");\n\t\tconst actor = nestedRecord(request, \"actor\", \"input.request.actor\");\n\t\tconst read: EnrichmentInput = {\n\t\t\texpectedFence: wholeNumber(request, \"expectedFence\", \"input.request.expectedFence\", 0),\n\t\t\trequestedBy: identifier(request, \"requestedBy\", \"input.request.requestedBy\"),\n\t\t\trequestedAtMs: instant(request, \"requestedAt\", \"input.request.requestedAt\"),\n\t\t\tprocessingDeadlineMs: instant(request, \"processingDeadline\", \"input.request.processingDeadline\"),\n\t\t\tactionInvocationId: optionalIdentifier(request, \"actionInvocationId\", \"input.request.actionInvocationId\"),\n\t\t\tactorId: identifier(actor, \"actorId\", \"input.request.actor.actorId\"),\n\t\t\tactorType: identifier(actor, \"actorType\", \"input.request.actor.actorType\"),\n\t\t};\n\t\treturn { bounds: readCallOptions(options), scope: readScope(snap, \"input\"), eventId: identifier(snap, \"eventId\", \"input.eventId\"), request: read };\n\t});\n}\n\nexport function readJobRequeueCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\treturn { bounds: readCallOptions(options), scope: readScope(snap, \"input\"), eventId: identifier(snap, \"eventId\", \"input.eventId\"), request: readRequeueRequest(snap) };\n\t});\n}\n\n/** `readFanOutJob` and `listRequeueEvidence`: a scope and an `eventId`. */\nexport function readEventCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\treturn { bounds: readCallOptions(options), scope: readScope(snap, \"input\"), eventId: identifier(snap, \"eventId\", \"input.eventId\") };\n\t});\n}\n\nexport function readInsertIntentCall(intent: unknown, parent: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(intent, \"intent\");\n\t\tconst fence = readParent(parent);\n\t\tconst read = {\n\t\t\tbounds: readCallOptions(options),\n\t\t\tparent: fence,\n\t\t\tdeliveryId: identifier(snap, \"deliveryId\", \"intent.deliveryId\"),\n\t\t\tsubscriptionId: identifier(snap, \"subscriptionId\", \"intent.subscriptionId\"),\n\t\t\teventId: identifier(snap, \"eventId\", \"intent.eventId\"),\n\t\t\ttenantId: identifier(snap, \"tenantId\", \"intent.tenantId\"),\n\t\t\tspaceId: identifier(snap, \"spaceId\", \"intent.spaceId\"),\n\t\t\teligibilityRevision: wholeNumber(snap, \"eligibilityRevision\", \"intent.eligibilityRevision\", 1),\n\t\t\tbody: text(snap, \"body\", \"intent.body\"),\n\t\t\tavailableAtMs: instant(snap, \"availableAt\", \"intent.availableAt\"),\n\t\t\tprocessingDeadlineMs: instant(snap, \"processingDeadline\", \"intent.processingDeadline\"),\n\t\t\tcreatedAtMs: instant(snap, \"createdAt\", \"intent.createdAt\"),\n\t\t};\n\t\tif (read.eventId !== fence.eventId) throw storeError(\"record_mismatch\", \"intent.eventId\");\n\t\treturn read;\n\t});\n}\n\nexport function readDenialCall(record: unknown, parent: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(record, \"record\");\n\t\tconst fence = readParent(parent);\n\t\tconst read = {\n\t\t\tbounds: readCallOptions(options),\n\t\t\tparent: fence,\n\t\t\tsubscriptionId: identifier(snap, \"subscriptionId\", \"record.subscriptionId\"),\n\t\t\teventId: identifier(snap, \"eventId\", \"record.eventId\"),\n\t\t\ttenantId: identifier(snap, \"tenantId\", \"record.tenantId\"),\n\t\t\tspaceId: identifier(snap, \"spaceId\", \"record.spaceId\"),\n\t\t\teligibilityRevision: wholeNumber(snap, \"eligibilityRevision\", \"record.eligibilityRevision\", 1),\n\t\t\tcode: codeOf<WebhookAdmissionDenialCode>(snap, \"code\", WEBHOOK_ADMISSION_DENIAL_CODES, \"record.code\"),\n\t\t\trecordedAtMs: instant(snap, \"recordedAt\", \"record.recordedAt\"),\n\t\t};\n\t\tif (read.eventId !== fence.eventId) throw storeError(\"record_mismatch\", \"record.eventId\");\n\t\treturn read;\n\t});\n}\n\n/** The denial record a store keeps, built from a validated call. */\nexport function denialRecord(call: ReturnType<typeof readDenialCall>): Snapshot {\n\treturn copyOut<Snapshot>({\n\t\tsubscriptionId: call.subscriptionId,\n\t\teventId: call.eventId,\n\t\ttenantId: call.tenantId,\n\t\tspaceId: call.spaceId,\n\t\teligibilityRevision: call.eligibilityRevision,\n\t\tcode: call.code,\n\t\trecordedAt: isoOf(call.recordedAtMs),\n\t});\n}\n\nexport function readLeaseCheckCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\treturn {\n\t\t\tbounds: readCallOptions(options),\n\t\t\tscope: readScope(snap, \"input\"),\n\t\t\tdeliveryId: identifier(snap, \"deliveryId\", \"input.deliveryId\"),\n\t\t\tfenced: readFenced(snap),\n\t\t};\n\t});\n}\n\nexport function readAppendAttemptCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\tconst attempt = nestedRecord(snap, \"attempt\", \"input.attempt\");\n\t\tconst httpStatus = optionalWholeNumber(attempt, \"httpStatus\", \"input.attempt.httpStatus\", 100);\n\t\tif (httpStatus !== undefined && httpStatus > 599) throw storeError(\"input_invalid\", \"input.attempt.httpStatus\");\n\t\tconst record = copyOut<Snapshot>({\n\t\t\tdeliveryId: identifier(attempt, \"deliveryId\", \"input.attempt.deliveryId\"),\n\t\t\tsubscriptionId: identifier(attempt, \"subscriptionId\", \"input.attempt.subscriptionId\"),\n\t\t\teventId: identifier(attempt, \"eventId\", \"input.attempt.eventId\"),\n\t\t\tattempt: wholeNumber(attempt, \"attempt\", \"input.attempt.attempt\", 1),\n\t\t\tconfigurationVersion: wholeNumber(attempt, \"configurationVersion\", \"input.attempt.configurationVersion\", 1),\n\t\t\tstartedAt: isoOf(instant(attempt, \"startedAt\", \"input.attempt.startedAt\")),\n\t\t\tfinishedAt: isoOf(instant(attempt, \"finishedAt\", \"input.attempt.finishedAt\")),\n\t\t\toutcome: codeOf(attempt, \"outcome\", WEBHOOK_ATTEMPT_OUTCOMES, \"input.attempt.outcome\"),\n\t\t\treason: codeOf(attempt, \"reason\", WEBHOOK_ATTEMPT_REASON_CODES, \"input.attempt.reason\"),\n\t\t\thttpStatus,\n\t\t});\n\t\treturn {\n\t\t\tbounds: readCallOptions(options),\n\t\t\tfenced: readFenced(snap),\n\t\t\trecord,\n\t\t\tdeliveryId: record[\"deliveryId\"] as string,\n\t\t\tsubscriptionId: record[\"subscriptionId\"] as string,\n\t\t\teventId: record[\"eventId\"] as string,\n\t\t};\n\t});\n}\n\n/**\n * `beginAttempt`: the fence, and the start of the attempt. The record kept\n * holds only the `WebhookDeliveryAttemptStart` fields, read one by one.\n */\nexport function readBeginAttemptCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\tconst attempt = nestedRecord(snap, \"attempt\", \"input.attempt\");\n\t\tconst record = copyOut<Snapshot>({\n\t\t\tdeliveryId: identifier(attempt, \"deliveryId\", \"input.attempt.deliveryId\"),\n\t\t\tsubscriptionId: identifier(attempt, \"subscriptionId\", \"input.attempt.subscriptionId\"),\n\t\t\teventId: identifier(attempt, \"eventId\", \"input.attempt.eventId\"),\n\t\t\tattempt: wholeNumber(attempt, \"attempt\", \"input.attempt.attempt\", 1),\n\t\t\tconfigurationVersion: wholeNumber(attempt, \"configurationVersion\", \"input.attempt.configurationVersion\", 1),\n\t\t\tstartedAt: isoOf(instant(attempt, \"startedAt\", \"input.attempt.startedAt\")),\n\t\t});\n\t\treturn {\n\t\t\tbounds: readCallOptions(options),\n\t\t\tfenced: readFenced(snap),\n\t\t\trecord,\n\t\t\tdeliveryId: record[\"deliveryId\"] as string,\n\t\t\tsubscriptionId: record[\"subscriptionId\"] as string,\n\t\t\teventId: record[\"eventId\"] as string,\n\t\t};\n\t});\n}\n\n/** `finishAttempt`: a scope, the begun attempt's key, and its outcome. */\nexport function readFinishAttemptCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\tconst finish = nestedRecord(snap, \"finish\", \"input.finish\");\n\t\tconst httpStatus = optionalWholeNumber(finish, \"httpStatus\", \"input.finish.httpStatus\", 100);\n\t\tif (httpStatus !== undefined && httpStatus > 599) throw storeError(\"input_invalid\", \"input.finish.httpStatus\");\n\t\treturn {\n\t\t\tbounds: readCallOptions(options),\n\t\t\tscope: readScope(snap, \"input\"),\n\t\t\tdeliveryId: identifier(snap, \"deliveryId\", \"input.deliveryId\"),\n\t\t\tfence: wholeNumber(snap, \"fence\", \"input.fence\", 0),\n\t\t\t// Read like an identifier; an error names the field, never the value.\n\t\t\treceipt: identifier(snap, \"receipt\", \"input.receipt\"),\n\t\t\trecord: copyOut<Snapshot>({\n\t\t\t\tfinishedAt: isoOf(instant(finish, \"finishedAt\", \"input.finish.finishedAt\")),\n\t\t\t\toutcome: codeOf(finish, \"outcome\", WEBHOOK_ATTEMPT_OUTCOMES, \"input.finish.outcome\"),\n\t\t\t\treason: codeOf(finish, \"reason\", WEBHOOK_ATTEMPT_REASON_CODES, \"input.finish.reason\"),\n\t\t\t\thttpStatus,\n\t\t\t}),\n\t\t};\n\t});\n}\n\n/** The key of the attempt begun under one lease of one intent. */\nexport function attemptKey(deliveryId: string, fence: number): string {\n\treturn compositeKey(deliveryId, `${fence}`);\n}\n\n/**\n * Whether `beginAttempt` may record an attempt on `intent`: pending, leased\n * to the caller at its fence, and the lease not expired at the store's\n * clock read in the atomic step.\n */\nexport function mayBegin(intent: IntentState | undefined, fenced: FencedInput, storeNowMs: number): intent is IntentState {\n\treturn intent !== undefined && holds(intent, fenced.owner, fenced.fence, storeNowMs);\n}\n\n/**\n * One attempt log entry as `listDeliveryAttempts` returns it. `fence` is\n * `undefined` for an entry appended whole; otherwise the entry was begun\n * under that fence and `finish` is its outcome, or `undefined` while none is\n * recorded.\n */\nexport function attemptEntryOut(start: Snapshot, fence: number | undefined, finish: Snapshot | undefined): object {\n\tif (fence === undefined) return start;\n\tif (finish === undefined) return { ...start, fence, outcome: \"in_flight\" };\n\treturn { ...start, ...finish, fence };\n}\n\nexport function beginResult(receipt: string | undefined): WebhookAttemptBeginResult {\n\treturn copyOut<WebhookAttemptBeginResult>(receipt === undefined ? { begun: false } : { begun: true, receipt });\n}\n\nexport function readSettleCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\treturn { bounds: readCallOptions(options), fenced: readFenced(snap), deliveryId: identifier(snap, \"deliveryId\", \"input.deliveryId\"), settlement: readSettlement(snap) };\n\t});\n}\n\nexport function readCancelCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\tinstant(snap, \"now\", \"input.now\");\n\t\treturn {\n\t\t\tbounds: readCallOptions(options),\n\t\t\tscope: readScope(snap, \"input\"),\n\t\t\tsubscriptionId: identifier(snap, \"subscriptionId\", \"input.subscriptionId\"),\n\t\t\treason: codeOf(snap, \"reason\", CANCEL_REASONS, \"input.reason\"),\n\t\t\tbeforeRevision: wholeNumber(snap, \"beforeRevision\", \"input.beforeRevision\", 1),\n\t\t};\n\t});\n}\n\nexport function readIntentRequeueCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\treturn { bounds: readCallOptions(options), scope: readScope(snap, \"input\"), deliveryId: identifier(snap, \"deliveryId\", \"input.deliveryId\"), request: readRequeueRequest(snap) };\n\t});\n}\n\n/** `readDeliveryIntent` and `listDeliveryAttempts`: a scope and a `deliveryId`. */\nexport function readDeliveryCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\treturn { bounds: readCallOptions(options), scope: readScope(snap, \"input\"), deliveryId: identifier(snap, \"deliveryId\", \"input.deliveryId\") };\n\t});\n}\n\nexport function readTombstoneCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\treturn {\n\t\t\tbounds: readCallOptions(options),\n\t\t\tscope: readScope(snap, \"input\"),\n\t\t\tsubscriptionId: identifier(snap, \"subscriptionId\", \"input.subscriptionId\"),\n\t\t\teventId: identifier(snap, \"eventId\", \"input.eventId\"),\n\t\t};\n\t});\n}\n\nexport function readPurgeCall(input: unknown, options: unknown): { readonly bounds: CallBounds; readonly limit: number } {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\treturn { bounds: readCallOptions(options), limit: wholeNumber(snap, \"limit\", \"input.limit\", 1) };\n\t});\n}\n\n// ---------------------------------------------------------------------------\n// Job drafts\n// ---------------------------------------------------------------------------\n\nexport interface JobDraftInput {\n\treadonly draft: Snapshot;\n\treadonly eventId: string;\n\treadonly tenantId: string;\n\treadonly spaceId: string;\n\treadonly anchorMs: number;\n\treadonly createdAtMs: number;\n\treadonly processingDeadlineMs: number;\n}\n\nconst ACTOR_STATES = Object.freeze([\"present\", \"absent\"] as const);\n\nconst PAYLOAD_CLASSIFICATIONS = Object.freeze([\"public\", \"internal\", \"confidential\", \"restricted\"] as const);\nconst CONSISTENCIES = Object.freeze([\"authoritative-now\", \"provisional-until-reconciled\"] as const);\nconst ABSENT_REASONS = Object.freeze([\"suppressed\", \"legacy\"] as const);\nconst ANY_INTEGER = Number.MIN_SAFE_INTEGER;\n\n/**\n * Rebuild the event metadata from an explicit allowlist of\n * `WebhookEventMetadata` fields (R7). Nothing else on the caller's object,\n * such as a payload, trace context, provenance or a secret, is copied.\n */\nfunction readEventMetadata(event: Snapshot): object {\n\tconst consistency = event[\"consistency\"] === undefined ? undefined : codeOf(event, \"consistency\", CONSISTENCIES, \"job.event.consistency\");\n\treturn {\n\t\teventId: identifier(event, \"eventId\", \"job.event.eventId\"),\n\t\teventType: identifier(event, \"eventType\", \"job.event.eventType\"),\n\t\teventSchemaVersion: wholeNumber(event, \"eventSchemaVersion\", \"job.event.eventSchemaVersion\", ANY_INTEGER),\n\t\ttenantId: identifier(event, \"tenantId\", \"job.event.tenantId\"),\n\t\tspaceId: identifier(event, \"spaceId\", \"job.event.spaceId\"),\n\t\tsubjectType: identifier(event, \"subjectType\", \"job.event.subjectType\"),\n\t\tsubjectId: identifier(event, \"subjectId\", \"job.event.subjectId\"),\n\t\tsequence: wholeNumber(event, \"sequence\", \"job.event.sequence\", ANY_INTEGER),\n\t\tactionInvocationId: optionalIdentifier(event, \"actionInvocationId\", \"job.event.actionInvocationId\"),\n\t\tcorrelationId: identifier(event, \"correlationId\", \"job.event.correlationId\"),\n\t\tcausationId: optionalIdentifier(event, \"causationId\", \"job.event.causationId\"),\n\t\toccurredAt: isoOf(instant(event, \"occurredAt\", \"job.event.occurredAt\")),\n\t\trecordedAt: isoOf(instant(event, \"recordedAt\", \"job.event.recordedAt\")),\n\t\tproducerModuleVersion: identifier(event, \"producerModuleVersion\", \"job.event.producerModuleVersion\"),\n\t\tpayloadClassification: codeOf(event, \"payloadClassification\", PAYLOAD_CLASSIFICATIONS, \"job.event.payloadClassification\"),\n\t\tconsistency,\n\t};\n}\n\n/** Rebuild the job actor as one member of the `WebhookJobActor` union, nothing more. */\nfunction readActor(actor: Snapshot): object {\n\tconst state = codeOf(actor, \"state\", ACTOR_STATES, \"job.actor.state\");\n\tif (state === \"present\") {\n\t\treturn { state, actorId: identifier(actor, \"actorId\", \"job.actor.actorId\"), actorType: identifier(actor, \"actorType\", \"job.actor.actorType\") };\n\t}\n\treturn { state, reason: codeOf(actor, \"reason\", ABSENT_REASONS, \"job.actor.reason\") };\n}\n\nfunction readJobDraft(job: unknown): JobDraftInput {\n\tconst snap = snapshotRecord(job, \"job\");\n\tconst eventId = identifier(snap, \"eventId\", \"job.eventId\");\n\tconst tenantId = identifier(snap, \"tenantId\", \"job.tenantId\");\n\tconst spaceId = identifier(snap, \"spaceId\", \"job.spaceId\");\n\tconst event = nestedRecord(snap, \"event\", \"job.event\");\n\tif (identifier(event, \"eventId\", \"job.event.eventId\") !== eventId) throw storeError(\"record_mismatch\", \"job.event.eventId\");\n\tif (identifier(event, \"tenantId\", \"job.event.tenantId\") !== tenantId) throw storeError(\"record_mismatch\", \"job.event.tenantId\");\n\tif (identifier(event, \"spaceId\", \"job.event.spaceId\") !== spaceId) throw storeError(\"record_mismatch\", \"job.event.spaceId\");\n\tconst anchorMs = instant(event, \"recordedAt\", \"job.event.recordedAt\");\n\tconst payloadProjected = flag(snap, \"payloadProjected\", \"job.payloadProjected\");\n\tlet payload: Snapshot | null = null;\n\tif (payloadProjected) payload = nestedRecord(snap, \"payload\", \"job.payload\");\n\telse if (snap[\"payload\"] !== null) throw storeError(\"input_invalid\", \"job.payload\");\n\t// Only the fields WebhookFanOutJobDraft declares are kept. `payload` and\n\t// `facts` are the projection's allowlisted JSON and are kept whole.\n\tconst draft = copyOut<Snapshot>({\n\t\tevent: readEventMetadata(event),\n\t\tpayload,\n\t\tpayloadProjected,\n\t\tfacts: nestedRecord(snap, \"facts\", \"job.facts\"),\n\t\tactor: readActor(nestedRecord(snap, \"actor\", \"job.actor\")),\n\t});\n\treturn {\n\t\tdraft,\n\t\teventId,\n\t\ttenantId,\n\t\tspaceId,\n\t\tanchorMs,\n\t\tcreatedAtMs: instant(snap, \"createdAt\", \"job.createdAt\"),\n\t\tprocessingDeadlineMs: instant(snap, \"processingDeadline\", \"job.processingDeadline\"),\n\t};\n}\n\n// ---------------------------------------------------------------------------\n// Settlements\n// ---------------------------------------------------------------------------\n\nexport type Settlement =\n\t| { readonly kind: \"delivered\" }\n\t| { readonly kind: \"retry\"; readonly availableAtMs: number; readonly outcome: WebhookAttemptOutcome; readonly reason: WebhookAttemptReasonCode }\n\t| { readonly kind: \"release\"; readonly availableAtMs: number; readonly diagnostic: WebhookDiagnosticCode }\n\t| { readonly kind: \"dead_letter\"; readonly reason: WebhookAttemptReasonCode | WebhookDiagnosticCode }\n\t| { readonly kind: \"cancelled\"; readonly reason: WebhookAttemptReasonCode };\n\nfunction readSettlement(input: Snapshot): Settlement {\n\tconst settlement = nestedRecord(input, \"settlement\", \"input.settlement\");\n\tconst kind = codeOf(settlement, \"kind\", SETTLEMENT_KINDS, \"input.settlement.kind\");\n\tswitch (kind) {\n\t\tcase \"delivered\":\n\t\t\treturn { kind };\n\t\tcase \"retry\":\n\t\t\treturn {\n\t\t\t\tkind,\n\t\t\t\tavailableAtMs: instant(settlement, \"availableAt\", \"input.settlement.availableAt\"),\n\t\t\t\toutcome: codeOf(settlement, \"outcome\", WEBHOOK_ATTEMPT_OUTCOMES, \"input.settlement.outcome\"),\n\t\t\t\treason: codeOf(settlement, \"reason\", WEBHOOK_ATTEMPT_REASON_CODES, \"input.settlement.reason\"),\n\t\t\t};\n\t\tcase \"release\":\n\t\t\treturn {\n\t\t\t\tkind,\n\t\t\t\tavailableAtMs: instant(settlement, \"availableAt\", \"input.settlement.availableAt\"),\n\t\t\t\tdiagnostic: codeOf(settlement, \"diagnostic\", WEBHOOK_DIAGNOSTIC_CODES, \"input.settlement.diagnostic\"),\n\t\t\t};\n\t\tcase \"dead_letter\":\n\t\t\treturn { kind, reason: codeOf(settlement, \"reason\", DEAD_LETTER_REASONS, \"input.settlement.reason\") as WebhookAttemptReasonCode | WebhookDiagnosticCode };\n\t\tcase \"cancelled\":\n\t\t\treturn { kind, reason: codeOf(settlement, \"reason\", WEBHOOK_ATTEMPT_REASON_CODES, \"input.settlement.reason\") };\n\t}\n}\n\nfunction isAttemptReason(value: string): value is WebhookAttemptReasonCode {\n\treturn (WEBHOOK_ATTEMPT_REASON_CODES as readonly string[]).includes(value);\n}\n\n/**\n * Apply a settlement to an intent the caller holds, clearing its lease.\n * `release` spends no budget, `retry` spends one attempt, and the terminal\n * kinds leave the attempt count as it was.\n */\nexport function applySettlement(intent: IntentState, settlement: Settlement): void {\n\tswitch (settlement.kind) {\n\t\tcase \"delivered\":\n\t\t\tintent.status = \"delivered\";\n\t\t\tintent.lastOutcome = { outcome: \"delivered\", reason: \"http_2xx\" };\n\t\t\tbreak;\n\t\tcase \"retry\":\n\t\t\tintent.attemptCount += 1;\n\t\t\tintent.availableAtMs = settlement.availableAtMs;\n\t\t\tintent.lastOutcome = { outcome: settlement.outcome, reason: settlement.reason };\n\t\t\tbreak;\n\t\tcase \"release\":\n\t\t\tintent.availableAtMs = settlement.availableAtMs;\n\t\t\tintent.lastDiagnostic = settlement.diagnostic;\n\t\t\tbreak;\n\t\tcase \"dead_letter\":\n\t\t\tintent.status = \"dead_letter\";\n\t\t\tif (isAttemptReason(settlement.reason)) intent.lastOutcome = { outcome: \"dead_letter\", reason: settlement.reason };\n\t\t\telse intent.lastDiagnostic = settlement.reason;\n\t\t\tbreak;\n\t\tcase \"cancelled\":\n\t\t\tintent.status = \"cancelled\";\n\t\t\tintent.lastOutcome = { outcome: \"cancelled\", reason: settlement.reason };\n\t\t\tbreak;\n\t}\n\tintent.lease = undefined;\n}\n\n// ---------------------------------------------------------------------------\n// Requeue\n// ---------------------------------------------------------------------------\n\n/** The first refusal a requeue meets, in the port's order, or `undefined` when it applies. */\nexport function requeueRefusal(\n\tstate: { readonly fence: number; readonly status: string; readonly anchorMs: number },\n\trequest: RequeueInput,\n\tfloorMs: number,\n): \"stale\" | \"not_dead_letter\" | \"past_horizon\" | undefined {\n\t// The dead-letter generation the operator saw, in the same step as the\n\t// transition: a second request from that read finds the advanced fence.\n\tif (state.fence !== request.expectedFence) return \"stale\";\n\tif (state.status !== \"dead_letter\") return \"not_dead_letter\";\n\tif (state.anchorMs < floorMs) return \"past_horizon\";\n\treturn undefined;\n}\n\nexport function jobRequeueEvidence(job: JobState, request: RequeueInput, nowMs: number): WebhookRequeueEvidence {\n\treturn copyOut<WebhookRequeueEvidence>({\n\t\ttarget: \"fan_out_job\",\n\t\teventId: job.key,\n\t\ttenantId: job.tenantId,\n\t\tspaceId: job.spaceId,\n\t\trequestedBy: request.requestedBy,\n\t\trequestedAt: isoOf(request.requestedAtMs),\n\t\tactionInvocationId: request.actionInvocationId,\n\t\tappliedAt: isoOf(nowMs),\n\t\tpriorAttemptCount: job.attemptCount,\n\t\tpriorAvailableAt: isoOf(job.availableAtMs),\n\t\tpriorProcessingDeadline: isoOf(job.processingDeadlineMs),\n\t\tpriorFence: job.fence,\n\t\tpriorLastDiagnostic: job.lastDiagnostic,\n\t\tprocessingDeadline: isoOf(request.processingDeadlineMs),\n\t});\n}\n\nexport function intentRequeueEvidence(intent: IntentState, request: RequeueInput, nowMs: number): WebhookRequeueEvidence {\n\treturn copyOut<WebhookRequeueEvidence>({\n\t\ttarget: \"delivery_intent\",\n\t\teventId: intent.eventId,\n\t\tdeliveryId: intent.key,\n\t\tsubscriptionId: intent.subscriptionId,\n\t\ttenantId: intent.tenantId,\n\t\tspaceId: intent.spaceId,\n\t\trequestedBy: request.requestedBy,\n\t\trequestedAt: isoOf(request.requestedAtMs),\n\t\tactionInvocationId: request.actionInvocationId,\n\t\tappliedAt: isoOf(nowMs),\n\t\tpriorAttemptCount: intent.attemptCount,\n\t\tpriorAvailableAt: isoOf(intent.availableAtMs),\n\t\tpriorProcessingDeadline: isoOf(intent.processingDeadlineMs),\n\t\tpriorFence: intent.fence,\n\t\tpriorLastDiagnostic: intent.lastDiagnostic,\n\t\tpriorLastOutcome: intent.lastOutcome,\n\t\tprocessingDeadline: isoOf(request.processingDeadlineMs),\n\t});\n}\n\n/**\n * The first refusal an actor enrichment meets, in the port's order, or\n * `undefined` when it applies. Run inside the atomic step, so the actor\n * state checked is the stored one: a `suppressed` or `present` actor is\n * refused here whatever the caller read before.\n */\nexport function enrichmentRefusal(\n\tjob: JobState,\n\trequest: EnrichmentInput,\n\tfloorMs: number,\n): Exclude<Extract<WebhookActorEnrichmentResult, { readonly applied: false }>[\"refusal\"], \"not_found\"> | undefined {\n\tif (job.fence !== request.expectedFence) return \"stale\";\n\tif (job.status === \"completed\") return \"not_enrichable\";\n\tconst actor = job.draft[\"actor\"] as Snapshot;\n\tif (actor[\"state\"] !== \"absent\") return \"actor_present\";\n\tif (actor[\"reason\"] !== \"legacy\") return \"actor_suppressed\";\n\tif (job.anchorMs < floorMs) return \"past_horizon\";\n\treturn undefined;\n}\n\nexport function jobEnrichmentEvidence(job: JobState, request: EnrichmentInput, nowMs: number): WebhookRequeueEvidence {\n\treturn copyOut<WebhookRequeueEvidence>({\n\t\t...(jobRequeueEvidence(job, request, nowMs) as object),\n\t\ttarget: \"fan_out_job_actor\",\n\t\tactor: { actorId: request.actorId, actorType: request.actorType },\n\t});\n}\n\n/**\n * Apply an enrichment to a job the atomic step accepted: the stored draft is\n * replaced by a copy whose actor is the one read from the canonical event,\n * and the job is requeued exactly as {@link applyRequeue} does, so its fence\n * advances and any lease is cleared.\n */\nexport function applyEnrichment(job: JobState, request: EnrichmentInput): void {\n\tjob.draft = copyOut<Snapshot>({ ...(job.draft as object), actor: { state: \"present\", actorId: request.actorId, actorType: request.actorType } });\n\tapplyRequeue(job, request);\n}\n\nexport function enrichmentRefused(reason: Extract<WebhookActorEnrichmentResult, { readonly applied: false }>[\"refusal\"]): WebhookActorEnrichmentResult {\n\treturn copyOut<WebhookActorEnrichmentResult>({ applied: false, refusal: reason });\n}\n\n/** Move a dead letter back to pending with a restored budget, advancing its fence. */\nexport function applyRequeue(state: JobState | IntentState, request: RequeueInput): void {\n\tstate.status = \"pending\";\n\tstate.attemptCount = 0;\n\tstate.availableAtMs = request.requestedAtMs;\n\tstate.processingDeadlineMs = request.processingDeadlineMs;\n\tstate.fence += 1;\n\tstate.lease = undefined;\n}\n\n// ---------------------------------------------------------------------------\n// Rendering\n// ---------------------------------------------------------------------------\n\nfunction leaseOut(lease: LeaseState | undefined): object | undefined {\n\treturn lease === undefined ? undefined : { owner: lease.owner, fence: lease.fence, expiresAt: isoOf(lease.expiresAtMs) };\n}\n\nexport function jobOut(job: JobState, lease: LeaseState | undefined = job.lease): object {\n\tconst draft = job.draft;\n\treturn {\n\t\teventId: job.key,\n\t\ttenantId: job.tenantId,\n\t\tspaceId: job.spaceId,\n\t\tevent: draft[\"event\"],\n\t\tpayload: draft[\"payload\"],\n\t\tpayloadProjected: draft[\"payloadProjected\"],\n\t\tfacts: draft[\"facts\"],\n\t\tactor: draft[\"actor\"],\n\t\tstatus: job.status,\n\t\tattemptCount: job.attemptCount,\n\t\tavailableAt: isoOf(job.availableAtMs),\n\t\tprocessingDeadline: isoOf(job.processingDeadlineMs),\n\t\tcreatedAt: isoOf(job.createdAtMs),\n\t\tcompletedAt: job.completedAtMs === undefined ? undefined : isoOf(job.completedAtMs),\n\t\tlastDiagnostic: job.lastDiagnostic,\n\t\tfence: lease === undefined ? job.fence : lease.fence,\n\t\tlease: leaseOut(lease),\n\t};\n}\n\nexport function intentOut(intent: IntentState, lease: LeaseState | undefined = intent.lease): object {\n\treturn {\n\t\tdeliveryId: intent.key,\n\t\tsubscriptionId: intent.subscriptionId,\n\t\teventId: intent.eventId,\n\t\ttenantId: intent.tenantId,\n\t\tspaceId: intent.spaceId,\n\t\teligibilityRevision: intent.eligibilityRevision,\n\t\teventRecordedAt: isoOf(intent.anchorMs),\n\t\tbody: intent.body,\n\t\tstatus: intent.status,\n\t\tattemptCount: intent.attemptCount,\n\t\tavailableAt: isoOf(intent.availableAtMs),\n\t\tprocessingDeadline: isoOf(intent.processingDeadlineMs),\n\t\tcreatedAt: isoOf(intent.createdAtMs),\n\t\tlastOutcome: intent.lastOutcome,\n\t\tlastDiagnostic: intent.lastDiagnostic,\n\t\tfence: lease === undefined ? intent.fence : lease.fence,\n\t\tlease: leaseOut(lease),\n\t};\n}\n\n/** A tombstone as `readTombstone` returns it; `retainUntil` is the anchor plus the horizon, capped at the `Date` range. */\nexport function tombstoneOut(marker: MarkerState, horizonMs: number): object {\n\treturn {\n\t\tkind: marker.kind,\n\t\tsubscriptionId: marker.subscriptionId,\n\t\teventId: marker.eventId,\n\t\ttenantId: marker.tenantId,\n\t\tspaceId: marker.spaceId,\n\t\tretainUntil: isoOf(mathMin(marker.anchorMs + horizonMs, WEBHOOK_MAX_REPLAY_HORIZON_MS)),\n\t};\n}\n\n/**\n * The pre-handoff lease check: `valid` only when the intent is pending,\n * leased to this owner at this fence, in this scope, and the lease has not\n * expired at the caller's `now`.\n */\nexport function leaseCheck(intent: IntentState | undefined, call: ReturnType<typeof readLeaseCheckCall>): WebhookDeliveryLeaseCheck {\n\tif (intent === undefined || !inScope(intent, call.scope)) return copyOut<WebhookDeliveryLeaseCheck>({ valid: false, reason: \"not_found\" });\n\tif (intent.status !== \"pending\") return copyOut<WebhookDeliveryLeaseCheck>({ valid: false, reason: \"intent_not_pending\" });\n\tif (!holdsFence(intent, call.fenced.owner, call.fenced.fence) || intent.lease!.expiresAtMs <= call.fenced.nowMs) {\n\t\treturn copyOut<WebhookDeliveryLeaseCheck>({ valid: false, reason: \"lease_lost\" });\n\t}\n\treturn copyOut<WebhookDeliveryLeaseCheck>({ valid: true });\n}\n\nexport function requeueRefused(reason: \"not_found\" | \"stale\" | \"not_dead_letter\" | \"past_horizon\"): WebhookRequeueResult {\n\treturn copyOut<WebhookRequeueResult>({ applied: false, refusal: reason });\n}\n\n/** The record a governed requeue or enrichment names: a delivery intent's `deliveryId`, or a job's `eventId`. */\nexport type InvocationTarget =\n\t| { readonly target: \"delivery_intent\"; readonly deliveryId: string }\n\t| { readonly target: \"fan_out_job\" | \"fan_out_job_actor\"; readonly eventId: string };\n\n/**\n * Of `records`, the evidence of one scope appended under one\n * `actionInvocationId` (in append order), the first for `target` and its\n * record, or `undefined`. A store calls this inside the atomic step of a\n * requeue or enrichment, before any other check, so a request of the same\n * governed invocation is recognized whether or not the record still exists\n * or still matches the request.\n */\nexport function priorInvocationEvidence(records: readonly Snapshot[], target: InvocationTarget): Snapshot | undefined {\n\tfor (const record of records) {\n\t\tif (record[\"target\"] !== target.target) continue;\n\t\tif (target.target === \"delivery_intent\" ? record[\"deliveryId\"] === target.deliveryId : record[\"eventId\"] === target.eventId) return record;\n\t}\n\treturn undefined;\n}\n\n/** The answer to a request whose invocation already applied: that application's evidence, unchanged. */\nexport function replayedResult<T extends WebhookRequeueResult | WebhookActorEnrichmentResult>(evidence: Snapshot): T {\n\treturn copyOut<T>({ applied: true, replayed: true, evidence });\n}\n\n/** `listInvocationRequeueEvidence`: a scope and an `actionInvocationId`. */\nexport function readInvocationEvidenceCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\treturn { bounds: readCallOptions(options), scope: readScope(snap, \"input\"), actionInvocationId: identifier(snap, \"actionInvocationId\", \"input.actionInvocationId\") };\n\t});\n}\n\nexport function fencedOutcome(outcome: WebhookFencedInsertResult[\"outcome\"]): WebhookFencedInsertResult {\n\treturn copyOut<WebhookFencedInsertResult>({ outcome });\n}\n","import { storeError } from \"./errors\";\n\n/*\n * Attempt receipts (PR 8). `beginAttempt` creates one per begun attempt and\n * returns it to the worker that began it; `finishAttempt` accepts an\n * outcome only with that receipt. The stores keep only its SHA-256 digest,\n * so a receipt cannot be read back out of a store, and no store read,\n * error or log carries it. Portable: Web Crypto only, which Node 20 and\n * current browsers provide on `globalThis.crypto`.\n */\n\nconst textEncoder = new TextEncoder();\nconst RECEIPT_BYTES = 32;\n\n/** The two Web Crypto members used, typed structurally so the package needs no DOM types. */\ninterface WebCrypto {\n\tgetRandomValues(array: Uint8Array): Uint8Array;\n\treadonly subtle: { digest(algorithm: string, data: Uint8Array): Promise<ArrayBuffer> };\n}\n\nfunction webCrypto(field: string): WebCrypto {\n\tconst crypto = (globalThis as { crypto?: WebCrypto }).crypto;\n\tif (crypto === undefined || typeof crypto.getRandomValues !== \"function\" || crypto.subtle === undefined) throw storeError(\"store_failed\", field);\n\treturn crypto;\n}\n\nfunction hex(bytes: Uint8Array): string {\n\tlet text = \"\";\n\tfor (const byte of bytes) text += byte.toString(16).padStart(2, \"0\");\n\treturn text;\n}\n\n/** @internal Lower-case hex SHA-256 of `text` as UTF-8. Throws `store_failed` naming `field` when Web Crypto is missing. */\nexport async function sha256Hex(text: string, field: string): Promise<string> {\n\treturn hex(new Uint8Array(await webCrypto(field).subtle.digest(\"SHA-256\", textEncoder.encode(text))));\n}\n\n/** @internal A new receipt (`rcpt_` and 32 random bytes in hex) and the digest a store keeps of it. */\nexport async function newAttemptReceipt(): Promise<{ readonly receipt: string; readonly digest: string }> {\n\tconst bytes = new Uint8Array(RECEIPT_BYTES);\n\twebCrypto(\"beginAttempt.receipt\").getRandomValues(bytes);\n\tconst receipt = `rcpt_${hex(bytes)}`;\n\treturn { receipt, digest: await sha256Hex(receipt, \"beginAttempt.receipt\") };\n}\n\n/** @internal The digest of a presented receipt, compared with the one stored at begin. */\nexport function attemptReceiptDigest(receipt: string): Promise<string> {\n\treturn sha256Hex(receipt, \"finishAttempt.receipt\");\n}\n","import type { WebhookDiagnosticCode } from \"./codes\";\nimport {\n\tapplyEnrichment,\n\tapplyRequeue,\n\tapplySettlement,\n\tattemptEntryOut,\n\tattemptKey,\n\tbeginResult,\n\tcompareText,\n\tcopyOut,\n\tdenialRecord,\n\tenrichmentRefusal,\n\tenrichmentRefused,\n\tfencedOutcome,\n\tholds,\n\tinScope,\n\tintentOut,\n\tintentRequeueEvidence,\n\tjobEnrichmentEvidence,\n\tjobOut,\n\tjobRequeueEvidence,\n\tleaseCheck,\n\tpriorInvocationEvidence,\n\tmarkerKey,\n\tmayBegin,\n\treadAppendAttemptCall,\n\treadBeginAttemptCall,\n\treadCancelCall,\n\treadClaimCall,\n\treadDeadLetterJobCall,\n\treadDeliveryCall,\n\treadDenialCall,\n\treadEventCall,\n\treadFinishAttemptCall,\n\treadHookOption,\n\treadHorizonOption,\n\treadInsertFanOutJobCall,\n\treadInsertIntentCall,\n\treadIntentRequeueCall,\n\treadInvocationEvidenceCall,\n\treadJobEnrichmentCall,\n\treadJobFencedCall,\n\treadJobRequeueCall,\n\treadLeaseCheckCall,\n\treadPurgeCall,\n\treadRenewIntentCall,\n\treadRenewJobCall,\n\treadRescheduleCall,\n\treadSettleCall,\n\treadTombstoneCall,\n\trenewedExpiryMs,\n\trequeueRefusal,\n\trequeueRefused,\n\treplayedResult,\n\ttype InvocationTarget,\n\tTERMINAL_INTENT,\n\tTERMINAL_JOB,\n\ttombstoneOut,\n\ttype ClaimInput,\n\ttype IntentState,\n\ttype JobState,\n\ttype Leased,\n\ttype LeaseState,\n\ttype MarkerState,\n} from \"./delivery-store-core\";\nimport { guard, storeError } from \"./errors\";\nimport { attemptReceiptDigest, newAttemptReceipt } from \"./receipt\";\nimport type {\n\tWebhookActorEnrichmentResult,\n\tWebhookAttemptBeginResult,\n\tWebhookCallOptions,\n\tWebhookClaimRequest,\n\tWebhookClock,\n\tWebhookDeliveryLeaseCheck,\n\tWebhookDeliveryStore,\n\tWebhookFanOutJobFence,\n\tWebhookFencedInsertResult,\n\tWebhookFencedWrite,\n\tWebhookInsertResult,\n\tWebhookPurgeResult,\n\tWebhookRequeueResult,\n\tWebhookScope,\n} from \"./ports\";\nimport { frozenList, mathMax } from \"./snapshot\";\nimport {\n\tassertCallWanted,\n\tcaptureClock,\n\tisoOf,\n\treadClock,\n\ttype CallBounds,\n\ttype CapturedClock,\n\ttype Snapshot,\n} from \"./store-input\";\nimport type {\n\tWebhookActorEnrichmentRequest,\n\tWebhookAdmissionDenialRecord,\n\tWebhookDeliveryAttemptFinish,\n\tWebhookDeliveryAttemptLogEntry,\n\tWebhookDeliveryAttemptRecord,\n\tWebhookDeliveryAttemptStart,\n\tWebhookDeliveryIntent,\n\tWebhookFanOutJob,\n\tWebhookFanOutJobDraft,\n\tWebhookRequeueEvidence,\n\tWebhookRequeueRequest,\n\tWebhookTombstone,\n} from \"./types\";\n\n/*\n * In-memory WebhookDeliveryStore, for tests and explicit local development.\n * It holds the same contract as the PostgreSQL store (tests/store-contract.ts)\n * so it does not hide ordering, idempotency or recovery bugs. Both stores\n * read their input and render their records through src/delivery-store-core.ts.\n *\n * Every method has the same shape:\n *\n * 1. Entry: copy the arguments into a package-owned snapshot\n * (src/delivery-store-core.ts, src/store-input.ts). Malformed input is\n * refused here, before anything else happens.\n * 2. One `await`, standing where a real store does I/O, so concurrent\n * calls interleave the way they do against a database.\n * 3. One synchronous step, `#atomic`: read the store's clock, refuse a call\n * whose signal aborted or whose deadline passed, then every check\n * (fence, replay horizon, uniqueness, status) and the write. There is\n * no `await` inside it, and JavaScript runs a synchronous block to\n * completion, so no other call on this store can run between its\n * checks and its write: it plays the part of one transaction.\n *\n * State lives in ECMAScript private fields of the instance; nothing is kept\n * in module scope. Reads return fresh frozen copies built from that state,\n * never the state itself.\n */\n\n/** Options for {@link MemoryWebhookDeliveryStore}. */\nexport interface MemoryWebhookDeliveryStoreOptions {\n\t/** The store's clock: it timestamps requeue evidence and decides the replay horizon. */\n\treadonly clock: WebhookClock;\n\t/** The replay horizon in milliseconds; see `WebhookDeliveryLimits.replayHorizonMs`. */\n\treadonly replayHorizonMs: number;\n\t/**\n\t * Test seam. Awaited at each call's I/O boundary, after its input is read\n\t * and before its atomic step, with the method name. A contract test uses\n\t * it to hold one call there while another runs to completion, forcing an\n\t * interleaving. A throw or rejection fails the call as `store_failed`,\n\t * with nothing written. Leave it unset outside tests.\n\t */\n\treadonly beforeAtomicStep?: (operation: string) => Promise<void> | void;\n}\n\ninterface DenialState {\n\treadonly key: string;\n\treadonly record: Snapshot;\n\treadonly anchorMs: number;\n}\n\ninterface AttemptState {\n\treadonly tenantId: string;\n\treadonly spaceId: string;\n\treadonly deliveryId: string;\n\t/** The whole entry (`appendAttempt`) or the start of a begun attempt (`beginAttempt`). */\n\treadonly record: Snapshot;\n\t/** The lease fence a begun attempt was recorded under; `undefined` for an entry appended whole. */\n\treadonly fence: number | undefined;\n\t/** The SHA-256 digest of a begun attempt's receipt; never the receipt itself. */\n\treadonly receiptDigest: string | undefined;\n}\n\ninterface EvidenceState {\n\treadonly tenantId: string;\n\treadonly spaceId: string;\n\treadonly eventId: string;\n\treadonly record: Snapshot;\n}\n\n/** Run an async step; a package error passes through, anything else becomes `store_failed`. */\nasync function guardedAsync<T>(run: () => Promise<T>): Promise<T> {\n\ttry {\n\t\treturn await run();\n\t} catch (thrown) {\n\t\treturn guard<T>(() => {\n\t\t\tthrow thrown;\n\t\t}, () => storeError(\"store_failed\", \"store\"));\n\t}\n}\n\n/** Where a database store would do I/O; lets concurrent calls interleave. */\nfunction ioBoundary(): Promise<void> {\n\treturn Promise.resolve();\n}\n\n/**\n * An in-memory {@link WebhookDeliveryStore}. Construct one per test or local\n * process; instances share nothing.\n *\n * @throws {WebhookDeliveryConfigError} when `replayHorizonMs` is not a\n * positive whole number of milliseconds within `WEBHOOK_MAX_REPLAY_HORIZON_MS`.\n * @throws {WebhookStoreError} `clock_invalid` when `clock` has no `now` function.\n */\nexport class MemoryWebhookDeliveryStore implements WebhookDeliveryStore {\n\treadonly #clock: CapturedClock;\n\treadonly #beforeAtomicStep: ((operation: string) => Promise<void> | void) | undefined;\n\treadonly #horizonMs: number;\n\treadonly #jobs = new Map<string, JobState>();\n\treadonly #intents = new Map<string, IntentState>();\n\treadonly #denials = new Map<string, DenialState>();\n\treadonly #markers = new Map<string, MarkerState>();\n\treadonly #attempts: AttemptState[] = [];\n\t/** Begun attempts by (deliveryId, fence); each is also in `#attempts`. */\n\treadonly #begun = new Map<string, AttemptState>();\n\t/** Outcomes of begun attempts by (deliveryId, fence). Written once, never changed. */\n\treadonly #outcomes = new Map<string, Snapshot>();\n\treadonly #evidence: EvidenceState[] = [];\n\t/** The highest cutoff any purge has used; inserts and requeues below it are refused. */\n\t#purgedThroughMs = -Infinity;\n\n\tconstructor(options: MemoryWebhookDeliveryStoreOptions) {\n\t\tthis.#horizonMs = readHorizonOption(options);\n\t\tthis.#clock = guard(() => captureClock((options as { clock?: WebhookClock }).clock), () => storeError(\"clock_invalid\", \"clock\"));\n\t\tthis.#beforeAtomicStep = readHookOption(options, \"beforeAtomicStep\");\n\t}\n\n\t/** The replay horizon this store enforces, in milliseconds. */\n\tget replayHorizonMs(): number {\n\t\treturn this.#horizonMs;\n\t}\n\n\t/** The I/O boundary: the injected seam, or one resolved turn. */\n\tasync #boundary(operation: string): Promise<void> {\n\t\tconst hook = this.#beforeAtomicStep;\n\t\tif (hook === undefined) return ioBoundary();\n\t\ttry {\n\t\t\tawait hook(operation);\n\t\t} catch {\n\t\t\tthrow storeError(\"store_failed\", \"beforeAtomicStep\");\n\t\t}\n\t}\n\n\t/**\n\t * The atomic step. Reads the store clock, refuses an unwanted call, then\n\t * runs `body` synchronously. A package error passes through; anything\n\t * else becomes `store_failed`.\n\t */\n\t#atomic<T>(bounds: CallBounds, body: (nowMs: number) => T): T {\n\t\treturn guard(() => {\n\t\t\tconst nowMs = readClock(this.#clock);\n\t\t\tassertCallWanted(bounds, nowMs);\n\t\t\treturn body(nowMs);\n\t\t}, () => storeError(\"store_failed\", \"store\"));\n\t}\n\n\t/** The horizon floor at `nowMs`: anchors earlier than this are past the horizon. */\n\t#floorMs(nowMs: number): number {\n\t\treturn mathMax(nowMs - this.#horizonMs, this.#purgedThroughMs);\n\t}\n\n\t#pastHorizon(anchorMs: number, nowMs: number): boolean {\n\t\treturn anchorMs < this.#floorMs(nowMs);\n\t}\n\n\t/**\n\t * Evidence `scope` holds under `actionInvocationId` for `target`, or\n\t * `undefined` (always, without an id). Called first in the atomic step of\n\t * a requeue or enrichment: see \"Re-runs of one invocation\" in src/ports.ts.\n\t */\n\t#priorEvidence(scope: WebhookScope, actionInvocationId: string | undefined, target: InvocationTarget): Snapshot | undefined {\n\t\tif (actionInvocationId === undefined) return undefined;\n\t\tconst records = this.#evidence\n\t\t\t.filter((item) => inScope(item, scope) && item.record[\"actionInvocationId\"] === actionInvocationId)\n\t\t\t.map((item) => item.record);\n\t\treturn priorInvocationEvidence(records, target);\n\t}\n\n\t// -------------------------------------------------------------------------\n\t// Fan-out jobs\n\t// -------------------------------------------------------------------------\n\n\tasync insertFanOutJob(\n\t\tjob: WebhookFanOutJobDraft & { readonly processingDeadline: string; readonly createdAt: string },\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookInsertResult> {\n\t\tconst call = readInsertFanOutJobCall(job, options);\n\t\tawait this.#boundary(\"insertFanOutJob\");\n\t\treturn this.#atomic(call.bounds, (nowMs) => {\n\t\t\tconst draft = call.job;\n\t\t\t// Horizon first, so the answer for an old event does not depend on\n\t\t\t// whether a purge has removed its job yet.\n\t\t\tif (this.#pastHorizon(draft.anchorMs, nowMs)) return copyOut<WebhookInsertResult>({ outcome: \"past_horizon\" });\n\t\t\tif (this.#jobs.has(draft.eventId)) return copyOut<WebhookInsertResult>({ outcome: \"already_present\" });\n\t\t\tthis.#jobs.set(draft.eventId, {\n\t\t\t\tkey: draft.eventId,\n\t\t\t\tdraft: draft.draft,\n\t\t\t\ttenantId: draft.tenantId,\n\t\t\t\tspaceId: draft.spaceId,\n\t\t\t\tanchorMs: draft.anchorMs,\n\t\t\t\tstatus: \"pending\",\n\t\t\t\tattemptCount: 0,\n\t\t\t\tavailableAtMs: draft.createdAtMs,\n\t\t\t\tcreatedAtMs: draft.createdAtMs,\n\t\t\t\tprocessingDeadlineMs: draft.processingDeadlineMs,\n\t\t\t\tcompletedAtMs: undefined,\n\t\t\t\tlastDiagnostic: undefined,\n\t\t\t\tfence: 0,\n\t\t\t\tlease: undefined,\n\t\t\t});\n\t\t\treturn copyOut<WebhookInsertResult>({ outcome: \"inserted\" });\n\t\t});\n\t}\n\n\tasync claimFanOutJobs(request: WebhookClaimRequest, options: WebhookCallOptions): Promise<readonly WebhookFanOutJob[]> {\n\t\tconst call = readClaimCall(request, options);\n\t\tawait this.#boundary(\"claimFanOutJobs\");\n\t\treturn this.#atomic(call.bounds, () =>\n\t\t\tclaimFrom([...this.#jobs.values()], call.claim, jobOut) as readonly WebhookFanOutJob[]);\n\t}\n\n\tasync completeFanOutJob(input: WebhookFencedWrite & { readonly eventId: string }, options: WebhookCallOptions): Promise<boolean> {\n\t\tconst call = readJobFencedCall(input, options);\n\t\tawait this.#boundary(\"completeFanOutJob\");\n\t\treturn this.#atomic(call.bounds, (nowMs) => {\n\t\t\tconst job = this.#jobs.get(call.eventId);\n\t\t\tif (job === undefined || !holds(job, call.fenced.owner, call.fenced.fence, nowMs)) return false;\n\t\t\tjob.status = \"completed\";\n\t\t\tjob.completedAtMs = call.fenced.nowMs;\n\t\t\tjob.lease = undefined;\n\t\t\treturn true;\n\t\t});\n\t}\n\n\tasync rescheduleFanOutJob(\n\t\tinput: WebhookFencedWrite & { readonly eventId: string; readonly availableAt: Date; readonly diagnostic: WebhookDiagnosticCode },\n\t\toptions: WebhookCallOptions,\n\t): Promise<boolean> {\n\t\tconst call = readRescheduleCall(input, options);\n\t\tawait this.#boundary(\"rescheduleFanOutJob\");\n\t\treturn this.#atomic(call.bounds, (nowMs) => {\n\t\t\tconst job = this.#jobs.get(call.eventId);\n\t\t\tif (job === undefined || !holds(job, call.fenced.owner, call.fenced.fence, nowMs)) return false;\n\t\t\tjob.attemptCount += 1;\n\t\t\tjob.availableAtMs = call.availableAtMs;\n\t\t\tjob.lastDiagnostic = call.diagnostic;\n\t\t\tjob.lease = undefined;\n\t\t\treturn true;\n\t\t});\n\t}\n\n\tasync renewFanOutJobLease(\n\t\tinput: WebhookFencedWrite & { readonly eventId: string; readonly leaseDurationMs: number },\n\t\toptions: WebhookCallOptions,\n\t): Promise<boolean> {\n\t\tconst call = readRenewJobCall(input, options);\n\t\tawait this.#boundary(\"renewFanOutJobLease\");\n\t\treturn this.#atomic(call.bounds, (nowMs) => {\n\t\t\tconst job = this.#jobs.get(call.eventId);\n\t\t\tif (job === undefined || !holds(job, call.fenced.owner, call.fenced.fence, nowMs)) return false;\n\t\t\tjob.lease = { ...job.lease!, expiresAtMs: renewedExpiryMs(job, call.fenced.nowMs, call.leaseDurationMs) };\n\t\t\treturn true;\n\t\t});\n\t}\n\n\tasync deadLetterFanOutJob(\n\t\tinput: WebhookFencedWrite & { readonly eventId: string; readonly diagnostic: WebhookDiagnosticCode },\n\t\toptions: WebhookCallOptions,\n\t): Promise<boolean> {\n\t\tconst call = readDeadLetterJobCall(input, options);\n\t\tawait this.#boundary(\"deadLetterFanOutJob\");\n\t\treturn this.#atomic(call.bounds, (nowMs) => {\n\t\t\tconst job = this.#jobs.get(call.eventId);\n\t\t\tif (job === undefined || !holds(job, call.fenced.owner, call.fenced.fence, nowMs)) return false;\n\t\t\tjob.status = \"dead_letter\";\n\t\t\tjob.lastDiagnostic = call.diagnostic;\n\t\t\tjob.lease = undefined;\n\t\t\treturn true;\n\t\t});\n\t}\n\n\tasync requeueFanOutJob(\n\t\tinput: WebhookScope & { readonly eventId: string; readonly request: WebhookRequeueRequest },\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookRequeueResult> {\n\t\tconst call = readJobRequeueCall(input, options);\n\t\tawait this.#boundary(\"requeueFanOutJob\");\n\t\treturn this.#atomic(call.bounds, (nowMs) => {\n\t\t\tconst prior = this.#priorEvidence(call.scope, call.request.actionInvocationId, { target: \"fan_out_job\", eventId: call.eventId });\n\t\t\tif (prior !== undefined) return replayedResult<WebhookRequeueResult>(prior);\n\t\t\tconst job = this.#jobs.get(call.eventId);\n\t\t\tif (job === undefined || !inScope(job, call.scope)) return requeueRefused(\"not_found\");\n\t\t\tconst refusal = requeueRefusal(job, call.request, this.#floorMs(nowMs));\n\t\t\tif (refusal !== undefined) return requeueRefused(refusal);\n\t\t\tconst evidence = jobRequeueEvidence(job, call.request, nowMs);\n\t\t\tconst result = copyOut<WebhookRequeueResult>({ applied: true, evidence });\n\t\t\tapplyRequeue(job, call.request);\n\t\t\tthis.#evidence.push({ tenantId: job.tenantId, spaceId: job.spaceId, eventId: job.key, record: evidence as unknown as Snapshot });\n\t\t\treturn result;\n\t\t});\n\t}\n\n\tasync enrichFanOutJobActor(\n\t\tinput: WebhookScope & { readonly eventId: string; readonly request: WebhookActorEnrichmentRequest },\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookActorEnrichmentResult> {\n\t\tconst call = readJobEnrichmentCall(input, options);\n\t\tawait this.#boundary(\"enrichFanOutJobActor\");\n\t\treturn this.#atomic(call.bounds, (nowMs) => {\n\t\t\tconst prior = this.#priorEvidence(call.scope, call.request.actionInvocationId, { target: \"fan_out_job_actor\", eventId: call.eventId });\n\t\t\tif (prior !== undefined) return replayedResult<WebhookActorEnrichmentResult>(prior);\n\t\t\tconst job = this.#jobs.get(call.eventId);\n\t\t\tif (job === undefined || !inScope(job, call.scope)) return enrichmentRefused(\"not_found\");\n\t\t\tconst refusal = enrichmentRefusal(job, call.request, this.#floorMs(nowMs));\n\t\t\tif (refusal !== undefined) return enrichmentRefused(refusal);\n\t\t\tconst evidence = jobEnrichmentEvidence(job, call.request, nowMs);\n\t\t\tconst result = copyOut<WebhookActorEnrichmentResult>({ applied: true, evidence });\n\t\t\tapplyEnrichment(job, call.request);\n\t\t\tthis.#evidence.push({ tenantId: job.tenantId, spaceId: job.spaceId, eventId: job.key, record: evidence as unknown as Snapshot });\n\t\t\treturn result;\n\t\t});\n\t}\n\n\tasync readFanOutJob(input: WebhookScope & { readonly eventId: string }, options: WebhookCallOptions): Promise<WebhookFanOutJob | null> {\n\t\tconst call = readEventCall(input, options);\n\t\tawait this.#boundary(\"readFanOutJob\");\n\t\treturn this.#atomic(call.bounds, () => {\n\t\t\tconst job = this.#jobs.get(call.eventId);\n\t\t\treturn job === undefined || !inScope(job, call.scope) ? null : copyOut<WebhookFanOutJob>(jobOut(job));\n\t\t});\n\t}\n\n\t// -------------------------------------------------------------------------\n\t// Intents and denials\n\t// -------------------------------------------------------------------------\n\n\tasync insertDeliveryIntent(\n\t\tintent: Omit<WebhookDeliveryIntent, \"status\" | \"attemptCount\" | \"lastOutcome\" | \"lastDiagnostic\" | \"lease\" | \"eventRecordedAt\" | \"fence\">,\n\t\tparent: WebhookFanOutJobFence,\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookFencedInsertResult> {\n\t\tconst call = readInsertIntentCall(intent, parent, options);\n\t\tawait this.#boundary(\"insertDeliveryIntent\");\n\t\treturn this.#atomic(call.bounds, (nowMs) => {\n\t\t\tconst job = this.#parentJob(call.parent, nowMs);\n\t\t\tif (job === undefined) return fencedOutcome(\"lease_lost\");\n\t\t\tif (!inScope(job, call)) throw storeError(\"record_mismatch\", \"intent.tenantId\");\n\t\t\tif (this.#pastHorizon(job.anchorMs, nowMs)) return fencedOutcome(\"past_horizon\");\n\t\t\tconst key = markerKey(call.subscriptionId, call.eventId);\n\t\t\tif (this.#markers.has(key)) return fencedOutcome(\"already_present\");\n\t\t\tif (this.#intents.has(call.deliveryId)) throw storeError(\"delivery_id_conflict\", \"intent.deliveryId\");\n\t\t\tthis.#intents.set(call.deliveryId, {\n\t\t\t\tkey: call.deliveryId,\n\t\t\t\tsubscriptionId: call.subscriptionId,\n\t\t\t\teventId: call.eventId,\n\t\t\t\ttenantId: call.tenantId,\n\t\t\t\tspaceId: call.spaceId,\n\t\t\t\teligibilityRevision: call.eligibilityRevision,\n\t\t\t\tbody: call.body,\n\t\t\t\tanchorMs: job.anchorMs,\n\t\t\t\tstatus: \"pending\",\n\t\t\t\tattemptCount: 0,\n\t\t\t\tavailableAtMs: call.availableAtMs,\n\t\t\t\tcreatedAtMs: call.createdAtMs,\n\t\t\t\tprocessingDeadlineMs: call.processingDeadlineMs,\n\t\t\t\tlastOutcome: undefined,\n\t\t\t\tlastDiagnostic: undefined,\n\t\t\t\tfence: 0,\n\t\t\t\tlease: undefined,\n\t\t\t});\n\t\t\tthis.#markers.set(key, { kind: \"intent\", subscriptionId: call.subscriptionId, eventId: call.eventId, tenantId: call.tenantId, spaceId: call.spaceId, anchorMs: job.anchorMs });\n\t\t\treturn fencedOutcome(\"inserted\");\n\t\t});\n\t}\n\n\tasync recordAdmissionDenial(\n\t\trecord: WebhookAdmissionDenialRecord,\n\t\tparent: WebhookFanOutJobFence,\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookFencedInsertResult> {\n\t\tconst call = readDenialCall(record, parent, options);\n\t\tawait this.#boundary(\"recordAdmissionDenial\");\n\t\treturn this.#atomic(call.bounds, (nowMs) => {\n\t\t\tconst job = this.#parentJob(call.parent, nowMs);\n\t\t\tif (job === undefined) return fencedOutcome(\"lease_lost\");\n\t\t\tif (!inScope(job, call)) throw storeError(\"record_mismatch\", \"record.tenantId\");\n\t\t\tif (this.#pastHorizon(job.anchorMs, nowMs)) return fencedOutcome(\"past_horizon\");\n\t\t\tconst key = markerKey(call.subscriptionId, call.eventId);\n\t\t\tif (this.#markers.has(key)) return fencedOutcome(\"already_present\");\n\t\t\tthis.#denials.set(key, { key, record: denialRecord(call), anchorMs: job.anchorMs });\n\t\t\tthis.#markers.set(key, { kind: \"denial\", subscriptionId: call.subscriptionId, eventId: call.eventId, tenantId: call.tenantId, spaceId: call.spaceId, anchorMs: job.anchorMs });\n\t\t\treturn fencedOutcome(\"inserted\");\n\t\t});\n\t}\n\n\t/** The parent job if `fence` still holds its unexpired lease at the store's `nowMs`. */\n\t#parentJob(fence: WebhookFanOutJobFence, nowMs: number): JobState | undefined {\n\t\tconst job = this.#jobs.get(fence.eventId);\n\t\treturn job !== undefined && holds(job, fence.owner, fence.fence, nowMs) ? job : undefined;\n\t}\n\n\tasync claimDeliveryIntents(request: WebhookClaimRequest, options: WebhookCallOptions): Promise<readonly WebhookDeliveryIntent[]> {\n\t\tconst call = readClaimCall(request, options);\n\t\tawait this.#boundary(\"claimDeliveryIntents\");\n\t\treturn this.#atomic(call.bounds, () =>\n\t\t\tclaimFrom([...this.#intents.values()], call.claim, intentOut) as readonly WebhookDeliveryIntent[]);\n\t}\n\n\tasync renewDeliveryIntentLease(\n\t\tinput: WebhookFencedWrite & { readonly deliveryId: string; readonly leaseDurationMs: number },\n\t\toptions: WebhookCallOptions,\n\t): Promise<boolean> {\n\t\tconst call = readRenewIntentCall(input, options);\n\t\tawait this.#boundary(\"renewDeliveryIntentLease\");\n\t\treturn this.#atomic(call.bounds, (nowMs) => {\n\t\t\tconst intent = this.#intents.get(call.deliveryId);\n\t\t\tif (intent === undefined || !holds(intent, call.fenced.owner, call.fenced.fence, nowMs)) return false;\n\t\t\tintent.lease = { ...intent.lease!, expiresAtMs: renewedExpiryMs(intent, call.fenced.nowMs, call.leaseDurationMs) };\n\t\t\treturn true;\n\t\t});\n\t}\n\n\tasync checkDeliveryLease(\n\t\tinput: WebhookScope & { readonly deliveryId: string; readonly owner: string; readonly fence: number; readonly now: Date },\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookDeliveryLeaseCheck> {\n\t\tconst call = readLeaseCheckCall(input, options);\n\t\tawait this.#boundary(\"checkDeliveryLease\");\n\t\treturn this.#atomic(call.bounds, () => leaseCheck(this.#intents.get(call.deliveryId), call));\n\t}\n\n\tasync appendAttempt(input: WebhookFencedWrite & { readonly attempt: WebhookDeliveryAttemptRecord }, options: WebhookCallOptions): Promise<boolean> {\n\t\tconst call = readAppendAttemptCall(input, options);\n\t\tawait this.#boundary(\"appendAttempt\");\n\t\treturn this.#atomic(call.bounds, (nowMs) => {\n\t\t\tconst intent = this.#intents.get(call.deliveryId);\n\t\t\tif (intent === undefined || !holds(intent, call.fenced.owner, call.fenced.fence, nowMs)) return false;\n\t\t\tif (call.subscriptionId !== intent.subscriptionId) throw storeError(\"record_mismatch\", \"input.attempt.subscriptionId\");\n\t\t\tif (call.eventId !== intent.eventId) throw storeError(\"record_mismatch\", \"input.attempt.eventId\");\n\t\t\tthis.#attempts.push({ tenantId: intent.tenantId, spaceId: intent.spaceId, deliveryId: call.deliveryId, record: call.record, fence: undefined, receiptDigest: undefined });\n\t\t\treturn true;\n\t\t});\n\t}\n\n\tasync beginAttempt(input: WebhookFencedWrite & { readonly attempt: WebhookDeliveryAttemptStart }, options: WebhookCallOptions): Promise<WebhookAttemptBeginResult> {\n\t\tconst call = readBeginAttemptCall(input, options);\n\t\t// Made before the atomic step, which has no await; kept only as a digest.\n\t\tconst receipt = await guardedAsync(newAttemptReceipt);\n\t\tawait this.#boundary(\"beginAttempt\");\n\t\treturn this.#atomic(call.bounds, (nowMs) => {\n\t\t\tconst intent = this.#intents.get(call.deliveryId);\n\t\t\tif (!mayBegin(intent, call.fenced, nowMs)) return beginResult(undefined);\n\t\t\tif (call.subscriptionId !== intent.subscriptionId) throw storeError(\"record_mismatch\", \"input.attempt.subscriptionId\");\n\t\t\tif (call.eventId !== intent.eventId) throw storeError(\"record_mismatch\", \"input.attempt.eventId\");\n\t\t\tconst key = attemptKey(call.deliveryId, call.fenced.fence);\n\t\t\tif (this.#begun.has(key)) return beginResult(undefined);\n\t\t\tconst state: AttemptState = {\n\t\t\t\ttenantId: intent.tenantId, spaceId: intent.spaceId, deliveryId: call.deliveryId, record: call.record,\n\t\t\t\tfence: call.fenced.fence, receiptDigest: receipt.digest,\n\t\t\t};\n\t\t\tthis.#attempts.push(state);\n\t\t\tthis.#begun.set(key, state);\n\t\t\treturn beginResult(receipt.receipt);\n\t\t});\n\t}\n\n\tasync finishAttempt(\n\t\tinput: WebhookScope & { readonly deliveryId: string; readonly fence: number; readonly receipt: string; readonly finish: WebhookDeliveryAttemptFinish },\n\t\toptions: WebhookCallOptions,\n\t): Promise<boolean> {\n\t\tconst call = readFinishAttemptCall(input, options);\n\t\tconst digest = await guardedAsync(() => attemptReceiptDigest(call.receipt));\n\t\tawait this.#boundary(\"finishAttempt\");\n\t\treturn this.#atomic(call.bounds, () => {\n\t\t\tconst key = attemptKey(call.deliveryId, call.fence);\n\t\t\tconst begun = this.#begun.get(key);\n\t\t\t// Unfenced: the begun attempt's key, scope and receipt are checked, and\n\t\t\t// nothing of the intent is read or changed.\n\t\t\tif (begun === undefined || !inScope(begun, call.scope) || begun.receiptDigest !== digest || this.#outcomes.has(key)) return false;\n\t\t\tthis.#outcomes.set(key, call.record);\n\t\t\treturn true;\n\t\t});\n\t}\n\n\tasync settleDeliveryIntent(\n\t\tinput: Parameters<WebhookDeliveryStore[\"settleDeliveryIntent\"]>[0],\n\t\toptions: WebhookCallOptions,\n\t): Promise<boolean> {\n\t\tconst call = readSettleCall(input, options);\n\t\tawait this.#boundary(\"settleDeliveryIntent\");\n\t\treturn this.#atomic(call.bounds, (nowMs) => {\n\t\t\tconst intent = this.#intents.get(call.deliveryId);\n\t\t\tif (intent === undefined || !holds(intent, call.fenced.owner, call.fenced.fence, nowMs)) return false;\n\t\t\tapplySettlement(intent, call.settlement);\n\t\t\treturn true;\n\t\t});\n\t}\n\n\tasync cancelPendingIntents(\n\t\tinput: Parameters<WebhookDeliveryStore[\"cancelPendingIntents\"]>[0],\n\t\toptions: WebhookCallOptions,\n\t): Promise<number> {\n\t\tconst call = readCancelCall(input, options);\n\t\tawait this.#boundary(\"cancelPendingIntents\");\n\t\treturn this.#atomic(call.bounds, () => {\n\t\t\tlet cancelled = 0;\n\t\t\tfor (const intent of this.#intents.values()) {\n\t\t\t\tif (intent.status !== \"pending\" || intent.subscriptionId !== call.subscriptionId || !inScope(intent, call.scope)) continue;\n\t\t\t\tif (intent.eligibilityRevision >= call.beforeRevision) continue;\n\t\t\t\tintent.status = \"cancelled\";\n\t\t\t\tintent.lastOutcome = { outcome: \"cancelled\", reason: call.reason };\n\t\t\t\tintent.lease = undefined;\n\t\t\t\tcancelled += 1;\n\t\t\t}\n\t\t\treturn cancelled;\n\t\t});\n\t}\n\n\tasync requeueDeliveryIntent(\n\t\tinput: WebhookScope & { readonly deliveryId: string; readonly request: WebhookRequeueRequest },\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookRequeueResult> {\n\t\tconst call = readIntentRequeueCall(input, options);\n\t\tawait this.#boundary(\"requeueDeliveryIntent\");\n\t\treturn this.#atomic(call.bounds, (nowMs) => {\n\t\t\tconst prior = this.#priorEvidence(call.scope, call.request.actionInvocationId, { target: \"delivery_intent\", deliveryId: call.deliveryId });\n\t\t\tif (prior !== undefined) return replayedResult<WebhookRequeueResult>(prior);\n\t\t\tconst intent = this.#intents.get(call.deliveryId);\n\t\t\tif (intent === undefined || !inScope(intent, call.scope)) return requeueRefused(\"not_found\");\n\t\t\tconst refusal = requeueRefusal(intent, call.request, this.#floorMs(nowMs));\n\t\t\tif (refusal !== undefined) return requeueRefused(refusal);\n\t\t\tconst evidence = intentRequeueEvidence(intent, call.request, nowMs);\n\t\t\tconst result = copyOut<WebhookRequeueResult>({ applied: true, evidence });\n\t\t\tapplyRequeue(intent, call.request);\n\t\t\tthis.#evidence.push({ tenantId: intent.tenantId, spaceId: intent.spaceId, eventId: intent.eventId, record: evidence as unknown as Snapshot });\n\t\t\treturn result;\n\t\t});\n\t}\n\n\tasync readDeliveryIntent(input: WebhookScope & { readonly deliveryId: string }, options: WebhookCallOptions): Promise<WebhookDeliveryIntent | null> {\n\t\tconst call = readDeliveryCall(input, options);\n\t\tawait this.#boundary(\"readDeliveryIntent\");\n\t\treturn this.#atomic(call.bounds, () => {\n\t\t\tconst intent = this.#intents.get(call.deliveryId);\n\t\t\treturn intent === undefined || !inScope(intent, call.scope) ? null : copyOut<WebhookDeliveryIntent>(intentOut(intent));\n\t\t});\n\t}\n\n\tasync listDeliveryAttempts(\n\t\tinput: WebhookScope & { readonly deliveryId: string },\n\t\toptions: WebhookCallOptions,\n\t): Promise<readonly WebhookDeliveryAttemptLogEntry[]> {\n\t\tconst call = readDeliveryCall(input, options);\n\t\tawait this.#boundary(\"listDeliveryAttempts\");\n\t\treturn this.#atomic(call.bounds, () => copyOut<readonly WebhookDeliveryAttemptLogEntry[]>(\n\t\t\tthis.#attempts\n\t\t\t\t.filter((item) => item.deliveryId === call.deliveryId && inScope(item, call.scope))\n\t\t\t\t.map((item) => attemptEntryOut(\n\t\t\t\t\titem.record,\n\t\t\t\t\titem.fence,\n\t\t\t\t\titem.fence === undefined ? undefined : this.#outcomes.get(attemptKey(item.deliveryId, item.fence)),\n\t\t\t\t)),\n\t\t));\n\t}\n\n\tasync listRequeueEvidence(input: WebhookScope & { readonly eventId: string }, options: WebhookCallOptions): Promise<readonly WebhookRequeueEvidence[]> {\n\t\tconst call = readEventCall(input, options);\n\t\tawait this.#boundary(\"listRequeueEvidence\");\n\t\treturn this.#atomic(call.bounds, () => copyOut<readonly WebhookRequeueEvidence[]>(\n\t\t\tthis.#evidence.filter((item) => item.eventId === call.eventId && inScope(item, call.scope)).map((item) => item.record),\n\t\t));\n\t}\n\n\tasync listInvocationRequeueEvidence(\n\t\tinput: WebhookScope & { readonly actionInvocationId: string },\n\t\toptions: WebhookCallOptions,\n\t): Promise<readonly WebhookRequeueEvidence[]> {\n\t\tconst call = readInvocationEvidenceCall(input, options);\n\t\tawait this.#boundary(\"listInvocationRequeueEvidence\");\n\t\treturn this.#atomic(call.bounds, () => copyOut<readonly WebhookRequeueEvidence[]>(\n\t\t\tthis.#evidence\n\t\t\t\t.filter((item) => inScope(item, call.scope) && item.record[\"actionInvocationId\"] === call.actionInvocationId)\n\t\t\t\t.map((item) => item.record),\n\t\t));\n\t}\n\n\tasync readTombstone(\n\t\tinput: WebhookScope & { readonly subscriptionId: string; readonly eventId: string },\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookTombstone | null> {\n\t\tconst call = readTombstoneCall(input, options);\n\t\tawait this.#boundary(\"readTombstone\");\n\t\treturn this.#atomic(call.bounds, () => {\n\t\t\tconst marker = this.#markers.get(markerKey(call.subscriptionId, call.eventId));\n\t\t\tif (marker === undefined || !inScope(marker, call.scope)) return null;\n\t\t\treturn copyOut<WebhookTombstone>(tombstoneOut(marker, this.#horizonMs));\n\t\t});\n\t}\n\n\tasync purgeExpiredRecords(input: { readonly limit: number }, options: WebhookCallOptions): Promise<WebhookPurgeResult> {\n\t\tconst call = readPurgeCall(input, options);\n\t\tawait this.#boundary(\"purgeExpiredRecords\");\n\t\treturn this.#atomic(call.bounds, (nowMs) => {\n\t\t\tconst cutoffMs = this.#floorMs(nowMs);\n\t\t\tconst cutoff = isoOf(cutoffMs);\n\t\t\tconst candidates: { readonly anchorMs: number; readonly rank: number; readonly key: string }[] = [];\n\t\t\tfor (const job of this.#jobs.values()) {\n\t\t\t\tif (job.anchorMs < cutoffMs && TERMINAL_JOB.includes(job.status)) candidates.push({ anchorMs: job.anchorMs, rank: 0, key: job.key });\n\t\t\t}\n\t\t\tfor (const denial of this.#denials.values()) {\n\t\t\t\tif (denial.anchorMs < cutoffMs) candidates.push({ anchorMs: denial.anchorMs, rank: 1, key: denial.key });\n\t\t\t}\n\t\t\tfor (const intent of this.#intents.values()) {\n\t\t\t\tif (intent.anchorMs < cutoffMs && TERMINAL_INTENT.includes(intent.status)) candidates.push({ anchorMs: intent.anchorMs, rank: 2, key: intent.key });\n\t\t\t}\n\t\t\tcandidates.sort((left, right) => left.anchorMs - right.anchorMs || left.rank - right.rank || compareText(left.key, right.key));\n\t\t\tconst take = candidates.length < call.limit ? candidates.length : call.limit;\n\t\t\tconst removed = { fanOutJobs: 0, deliveryIntents: 0, admissionDenials: 0 };\n\t\t\tfor (let index = 0; index < take; index += 1) {\n\t\t\t\tconst rank = candidates[index]!.rank;\n\t\t\t\tif (rank === 0) removed.fanOutJobs += 1;\n\t\t\t\telse if (rank === 1) removed.admissionDenials += 1;\n\t\t\t\telse removed.deliveryIntents += 1;\n\t\t\t}\n\t\t\tconst result = copyOut<WebhookPurgeResult>({ cutoff, removed, more: candidates.length > take });\n\t\t\t// Compute, then commit. Raise the floor in the same step as the\n\t\t\t// removals: from here on no insert or requeue can recreate anything\n\t\t\t// below it.\n\t\t\tthis.#purgedThroughMs = cutoffMs;\n\t\t\tfor (let index = 0; index < take; index += 1) {\n\t\t\t\tconst candidate = candidates[index]!;\n\t\t\t\tif (candidate.rank === 0) {\n\t\t\t\t\tthis.#jobs.delete(candidate.key);\n\t\t\t\t} else if (candidate.rank === 1) {\n\t\t\t\t\tthis.#denials.delete(candidate.key);\n\t\t\t\t\tthis.#markers.delete(candidate.key);\n\t\t\t\t} else {\n\t\t\t\t\tconst intent = this.#intents.get(candidate.key)!;\n\t\t\t\t\tthis.#intents.delete(candidate.key);\n\t\t\t\t\tthis.#markers.delete(markerKey(intent.subscriptionId, intent.eventId));\n\t\t\t\t}\n\t\t\t}\n\t\t\treturn result;\n\t\t});\n\t}\n}\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/**\n * Lease up to `claim.limit` claimable records, oldest `availableAt` first\n * (then `createdAt`, then key), advancing each one's fence. Returns the\n * leased states. Sorting is explicit, so the order never depends on Map\n * insertion order.\n */\nfunction claimFrom<T extends Leased>(records: T[], claim: ClaimInput, render: (record: T, lease: LeaseState) => object): readonly unknown[] {\n\tconst claimable = records.filter((record) =>\n\t\trecord.status === \"pending\" &&\n\t\trecord.availableAtMs <= claim.nowMs &&\n\t\t(record.lease === undefined || record.lease.expiresAtMs <= claim.nowMs));\n\tclaimable.sort((left, right) => left.availableAtMs - right.availableAtMs || left.createdAtMs - right.createdAtMs || compareText(left.key, right.key));\n\tconst leased = claimable.slice(0, claim.limit);\n\t// Compute, then commit: every lease and every returned record is built\n\t// before any record changes, so a failure here leaves the store as it was.\n\tconst plan = leased.map((record) => ({\n\t\trecord,\n\t\tlease: { owner: claim.workerId, fence: record.fence + 1, expiresAtMs: claim.nowMs + claim.leaseDurationMs },\n\t}));\n\tconst out = plan.map(({ record, lease }) => copyOut<object>(render(record, lease)));\n\tfor (const { record, lease } of plan) {\n\t\trecord.fence = lease.fence;\n\t\trecord.lease = lease;\n\t}\n\treturn frozenList(out);\n}\n","import { guard, storeError } from \"./errors\";\nimport type { WebhookScope, WebhookSubscriptionWriteRefusal, WebhookSubscriptionWriteResult } from \"./ports\";\nimport { mathMax } from \"./snapshot\";\nimport {\n\tcloneOut,\n\tcodeOf,\n\tidentifier,\n\tinstant,\n\tisoOf,\n\tnestedRecord,\n\toptionalWholeNumber,\n\treadCallOptions,\n\tsnapshotRecord,\n\ttext,\n\ttextList,\n} from \"./store-input\";\nimport type {\n\tWebhookDeliveryConfiguration,\n\tWebhookDeliveryConfigurationInput,\n\tWebhookSignatureScheme,\n\tWebhookSubscriptionStatus,\n} from \"./types\";\n\n/*\n * What the memory and PostgreSQL subscription stores share: the entry\n * readers, the revision shape, the transition rules and the record\n * renderers. Internal: not exported from the package entry point.\n */\n\nexport interface RevisionState {\n\treadonly revision: number;\n\treadonly status: WebhookSubscriptionStatus;\n\treadonly eventTypePatterns: readonly string[];\n\treadonly effectiveFromMs: number;\n}\n\nexport interface Target extends WebhookScope {\n\treadonly subscriptionId: string;\n}\n\nconst SCHEMES = Object.freeze([\"v1\"] as const);\n\n/** A fresh frozen deep copy with no depth or size limit (`cloneOut`). */\nexport function copyOut<T>(value: object): T {\n\treturn cloneOut<T>(value);\n}\n\nfunction entry<T>(read: () => T): T {\n\treturn guard(read, () => storeError(\"input_invalid\", \"input\"));\n}\n\nfunction readTarget(snap: ReturnType<typeof snapshotRecord>): Target {\n\treturn {\n\t\ttenantId: identifier(snap, \"tenantId\", \"input.tenantId\"),\n\t\tspaceId: identifier(snap, \"spaceId\", \"input.spaceId\"),\n\t\tsubscriptionId: identifier(snap, \"subscriptionId\", \"input.subscriptionId\"),\n\t};\n}\n\nfunction readConfiguration(snap: ReturnType<typeof snapshotRecord>): WebhookDeliveryConfigurationInput {\n\tconst configuration = nestedRecord(snap, \"configuration\", \"input.configuration\");\n\treturn {\n\t\tdestinationUrl: text(configuration, \"destinationUrl\", \"input.configuration.destinationUrl\"),\n\t\tsignatureScheme: codeOf<WebhookSignatureScheme>(configuration, \"signatureScheme\", SCHEMES, \"input.configuration.signatureScheme\"),\n\t\tsecretRef: text(configuration, \"secretRef\", \"input.configuration.secretRef\"),\n\t};\n}\n\n// ---------------------------------------------------------------------------\n// Per-method entry readers\n// ---------------------------------------------------------------------------\n\nexport function readRevisionsAtCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\treturn {\n\t\t\tbounds: readCallOptions(options),\n\t\t\ttenantId: identifier(snap, \"tenantId\", \"input.tenantId\"),\n\t\t\tspaceId: identifier(snap, \"spaceId\", \"input.spaceId\"),\n\t\t\trecordedAtMs: instant(snap, \"recordedAt\", \"input.recordedAt\"),\n\t\t};\n\t});\n}\n\n/** `readSubscription` and `listEligibilityHistory`: one subscription in a scope. */\nexport function readTargetCall(input: unknown, options: unknown) {\n\treturn entry(() => ({ bounds: readCallOptions(options), target: readTarget(snapshotRecord(input, \"input\")) }));\n}\n\nexport function readCreateCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\treturn {\n\t\t\tbounds: readCallOptions(options),\n\t\t\ttarget: readTarget(snap),\n\t\t\tpatterns: textList(snap, \"eventTypePatterns\", \"input.eventTypePatterns\"),\n\t\t\tconfiguration: readConfiguration(snap),\n\t\t};\n\t});\n}\n\nexport function readChangePatternsCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\treturn {\n\t\t\tbounds: readCallOptions(options),\n\t\t\ttarget: readTarget(snap),\n\t\t\texpectedRevision: optionalWholeNumber(snap, \"expectedRevision\", \"input.expectedRevision\", 1),\n\t\t\tpatterns: textList(snap, \"eventTypePatterns\", \"input.eventTypePatterns\"),\n\t\t};\n\t});\n}\n\nexport function readStatusChangeCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\treturn { bounds: readCallOptions(options), target: readTarget(snap), expectedRevision: optionalWholeNumber(snap, \"expectedRevision\", \"input.expectedRevision\", 1) };\n\t});\n}\n\nexport function readReplaceConfigurationCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\treturn {\n\t\t\tbounds: readCallOptions(options),\n\t\t\ttarget: readTarget(snap),\n\t\t\texpectedVersion: optionalWholeNumber(snap, \"expectedVersion\", \"input.expectedVersion\", 1),\n\t\t\tconfiguration: readConfiguration(snap),\n\t\t};\n\t});\n}\n\n// ---------------------------------------------------------------------------\n// Transitions\n// ---------------------------------------------------------------------------\n\n/** The status a pause, resume or delete moves to from `status`, or `undefined` when it is not allowed. */\nexport type StatusChange = (status: WebhookSubscriptionStatus) => WebhookSubscriptionStatus | undefined;\n\nexport const PAUSE: StatusChange = (status) => (status === \"active\" ? \"paused\" : undefined);\nexport const RESUME: StatusChange = (status) => (status === \"paused\" ? \"active\" : undefined);\nexport const DELETE: StatusChange = () => \"deleted\";\n\nexport type RevisionChange = (current: RevisionState) => { readonly status: WebhookSubscriptionStatus; readonly patterns: readonly string[] } | undefined;\n\nexport function statusRevisionChange(next: StatusChange): RevisionChange {\n\treturn (current) => {\n\t\tconst status = next(current.status);\n\t\treturn status === undefined ? undefined : { status, patterns: current.eventTypePatterns };\n\t};\n}\n\n/**\n * Decide one transition against the store's current revision: a refusal, or\n * the revision to append. The new revision takes effect at the store's\n * clock, or at the previous revision's start if the clock is behind it, so\n * intervals never invert.\n */\nexport function decideTransition(\n\tcurrent: RevisionState | undefined,\n\texpectedRevision: number | undefined,\n\tnowMs: number,\n\tchange: RevisionChange,\n): { readonly refusal: WebhookSubscriptionWriteResult } | { readonly appended: RevisionState } {\n\tif (current === undefined) return { refusal: refused(\"not_found\") };\n\tif (current.status === \"deleted\") return { refusal: refused(\"deleted\", current.revision) };\n\tif (expectedRevision !== undefined && expectedRevision !== current.revision) return { refusal: refused(\"revision_conflict\", current.revision) };\n\tconst next = change(current);\n\tif (next === undefined) return { refusal: refused(\"invalid_transition\", current.revision) };\n\treturn {\n\t\tappended: {\n\t\t\trevision: current.revision + 1,\n\t\t\tstatus: next.status,\n\t\t\teventTypePatterns: next.patterns,\n\t\t\teffectiveFromMs: mathMax(nowMs, current.effectiveFromMs),\n\t\t},\n\t};\n}\n\nexport function refused(refusal: WebhookSubscriptionWriteRefusal, currentRevision?: number): WebhookSubscriptionWriteResult {\n\treturn copyOut<WebhookSubscriptionWriteResult>({ applied: false, refusal, currentRevision });\n}\n\n// ---------------------------------------------------------------------------\n// Rendering\n// ---------------------------------------------------------------------------\n\n/** A revision as the read port returns it; `nextEffectiveFromMs` is its successor's start, if any. */\nexport function revisionOut(target: Target, revision: RevisionState, nextEffectiveFromMs: number | undefined): object {\n\treturn {\n\t\tsubscriptionId: target.subscriptionId,\n\t\trevision: revision.revision,\n\t\ttenantId: target.tenantId,\n\t\tspaceId: target.spaceId,\n\t\tstatus: revision.status,\n\t\teventTypePatterns: revision.eventTypePatterns,\n\t\teffectiveFrom: isoOf(revision.effectiveFromMs),\n\t\teffectiveUntil: nextEffectiveFromMs === undefined ? null : isoOf(nextEffectiveFromMs),\n\t};\n}\n\n/**\n * The snapshot's `statusSinceRevision`: the revision at which the latest\n * revision's status began, i.e. one past the last revision with another\n * status, or 1. Revisions are numbered 1, 2, 3 … with no gaps\n * (`decideTransition` appends `current.revision + 1`); the PostgreSQL\n * store computes the same in SQL (`readSubscription`), and the contract\n * case \"readSubscription reports the revision the current status began at …\"\n * holds both to it.\n */\nexport function statusSinceRevision(revisions: readonly RevisionState[]): number {\n\tconst current = revisions[revisions.length - 1]!;\n\tfor (let index = revisions.length - 1; index >= 0; index -= 1) {\n\t\tif (revisions[index]!.status !== current.status) return revisions[index]!.revision + 1;\n\t}\n\treturn 1;\n}\n\nexport function configurationOut(target: Target, version: number, configuration: WebhookDeliveryConfigurationInput): WebhookDeliveryConfiguration {\n\treturn copyOut<WebhookDeliveryConfiguration>({\n\t\tsubscriptionId: target.subscriptionId,\n\t\ttenantId: target.tenantId,\n\t\tspaceId: target.spaceId,\n\t\tversion,\n\t\t...configuration,\n\t});\n}\n\n/** UTF-16 code unit order, as JavaScript's `<` compares strings. */\nexport function compareText(left: string, right: string): number {\n\treturn left < right ? -1 : left > right ? 1 : 0;\n}\n","import { readHookOption } from \"./delivery-store-core\";\nimport { guard, storeError } from \"./errors\";\nimport type {\n\tWebhookCallOptions,\n\tWebhookClock,\n\tWebhookConfigurationWriteResult,\n\tWebhookScope,\n\tWebhookSubscriptionStore,\n\tWebhookSubscriptionTransitionInput,\n\tWebhookSubscriptionWriteResult,\n\tWebhookSubscriptionWriter,\n} from \"./ports\";\nimport {\n\tassertCallWanted,\n\tcaptureClock,\n\tcompositeKey,\n\treadClock,\n\ttype CallBounds,\n\ttype CapturedClock,\n} from \"./store-input\";\nimport {\n\tcompareText,\n\tconfigurationOut,\n\tcopyOut,\n\tdecideTransition,\n\tDELETE,\n\tPAUSE,\n\treadChangePatternsCall,\n\treadCreateCall,\n\treadReplaceConfigurationCall,\n\treadRevisionsAtCall,\n\treadStatusChangeCall,\n\treadTargetCall,\n\trefused,\n\tRESUME,\n\trevisionOut,\n\tstatusRevisionChange,\n\tstatusSinceRevision,\n\ttype RevisionChange,\n\ttype RevisionState,\n\ttype StatusChange,\n\ttype Target,\n} from \"./subscription-store-core\";\nimport type {\n\tWebhookDeliveryConfiguration,\n\tWebhookDeliveryConfigurationInput,\n\tWebhookEligibilityRevision,\n\tWebhookSubscriptionSnapshot,\n} from \"./types\";\n\n/*\n * In-memory subscription store: the read port the cycles use and the writer\n * port the governed actions use, in one instance so a test or local process\n * can share state between them. Same method shape as the memory delivery\n * store: snapshot at entry, one I/O boundary, then one synchronous step\n * that reads the store's clock, checks the transition against the store's\n * own current state and appends. Revisions and configuration versions are\n * append-only; a revision's `effectiveUntil` is derived from its\n * successor's `effectiveFrom` on read, so no stored revision is ever changed.\n * Input reading and the transition rules are shared with the PostgreSQL\n * store (src/subscription-store-core.ts).\n */\n\n/** Options for {@link MemoryWebhookSubscriptionStore}. */\nexport interface MemoryWebhookSubscriptionStoreOptions {\n\t/** The store's clock: every revision takes effect at its time (decision 3). */\n\treadonly clock: WebhookClock;\n\t/**\n\t * Test seam. Awaited at each call's I/O boundary, after its input is read\n\t * and before its atomic step, with the method name. A contract test uses\n\t * it to hold one call there while another runs to completion, forcing an\n\t * interleaving. A throw or rejection fails the call as `store_failed`,\n\t * with nothing written. Leave it unset outside tests.\n\t */\n\treadonly beforeAtomicStep?: (operation: string) => Promise<void> | void;\n}\n\ninterface SubscriptionState extends Target {\n\treadonly revisions: RevisionState[];\n\treadonly configurations: WebhookDeliveryConfiguration[];\n}\n\n/** The key of one (tenantId, spaceId, subscriptionId); JSON-encoded, so distinct tuples never collide. */\nfunction subscriptionKey(tenantId: string, spaceId: string, subscriptionId: string): string {\n\treturn compositeKey(tenantId, spaceId, subscriptionId);\n}\n\nfunction ioBoundary(): Promise<void> {\n\treturn Promise.resolve();\n}\n\nfunction revisionAt(subscription: SubscriptionState, index: number): object {\n\treturn revisionOut(subscription, subscription.revisions[index]!, subscription.revisions[index + 1]?.effectiveFromMs);\n}\n\n/**\n * An in-memory {@link WebhookSubscriptionStore} and {@link WebhookSubscriptionWriter}.\n * Subscriptions are keyed by (tenantId, spaceId, subscriptionId); a read or\n * write in another scope does not see them.\n *\n * @throws {WebhookStoreError} `clock_invalid` when `clock` has no `now` function.\n */\nexport class MemoryWebhookSubscriptionStore implements WebhookSubscriptionStore, WebhookSubscriptionWriter {\n\treadonly #clock: CapturedClock;\n\treadonly #beforeAtomicStep: ((operation: string) => Promise<void> | void) | undefined;\n\treadonly #subscriptions = new Map<string, SubscriptionState>();\n\n\tconstructor(options: MemoryWebhookSubscriptionStoreOptions) {\n\t\tthis.#clock = guard(() => {\n\t\t\tif (options === null || typeof options !== \"object\") throw storeError(\"clock_invalid\", \"clock\");\n\t\t\treturn captureClock(options.clock);\n\t\t}, () => storeError(\"clock_invalid\", \"clock\"));\n\t\tthis.#beforeAtomicStep = readHookOption(options, \"beforeAtomicStep\");\n\t}\n\n\t/** The I/O boundary: the injected seam, or one resolved turn. */\n\tasync #boundary(operation: string): Promise<void> {\n\t\tconst hook = this.#beforeAtomicStep;\n\t\tif (hook === undefined) return ioBoundary();\n\t\ttry {\n\t\t\tawait hook(operation);\n\t\t} catch {\n\t\t\tthrow storeError(\"store_failed\", \"beforeAtomicStep\");\n\t\t}\n\t}\n\n\t#atomic<T>(bounds: CallBounds, body: (nowMs: number) => T): T {\n\t\treturn guard(() => {\n\t\t\tconst nowMs = readClock(this.#clock);\n\t\t\tassertCallWanted(bounds, nowMs);\n\t\t\treturn body(nowMs);\n\t\t}, () => storeError(\"store_failed\", \"store\"));\n\t}\n\n\t#find(target: Target): SubscriptionState | undefined {\n\t\treturn this.#subscriptions.get(subscriptionKey(target.tenantId, target.spaceId, target.subscriptionId));\n\t}\n\n\t// -------------------------------------------------------------------------\n\t// Reads\n\t// -------------------------------------------------------------------------\n\n\tasync listEligibilityRevisions(\n\t\tinput: WebhookScope & { readonly recordedAt: string },\n\t\toptions: WebhookCallOptions,\n\t): Promise<readonly WebhookEligibilityRevision[]> {\n\t\tconst call = readRevisionsAtCall(input, options);\n\t\tawait this.#boundary(\"listEligibilityRevisions\");\n\t\treturn this.#atomic(call.bounds, () => {\n\t\t\tconst found: object[] = [];\n\t\t\tconst subscriptions = [...this.#subscriptions.values()]\n\t\t\t\t.filter((subscription) => subscription.tenantId === call.tenantId && subscription.spaceId === call.spaceId)\n\t\t\t\t.sort((left, right) => compareText(left.subscriptionId, right.subscriptionId));\n\t\t\tfor (const subscription of subscriptions) {\n\t\t\t\t// Half-open: effectiveFrom <= recordedAt < next.effectiveFrom.\n\t\t\t\tfor (let index = subscription.revisions.length - 1; index >= 0; index -= 1) {\n\t\t\t\t\tif (subscription.revisions[index]!.effectiveFromMs <= call.recordedAtMs) {\n\t\t\t\t\t\tconst next = subscription.revisions[index + 1];\n\t\t\t\t\t\tif (next === undefined || call.recordedAtMs < next.effectiveFromMs) found.push(revisionAt(subscription, index));\n\t\t\t\t\t\tbreak;\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t\treturn copyOut<readonly WebhookEligibilityRevision[]>(found);\n\t\t});\n\t}\n\n\tasync readSubscription(\n\t\tinput: WebhookScope & { readonly subscriptionId: string },\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookSubscriptionSnapshot | null> {\n\t\tconst call = readTargetCall(input, options);\n\t\tawait this.#boundary(\"readSubscription\");\n\t\treturn this.#atomic(call.bounds, () => {\n\t\t\tconst subscription = this.#find(call.target);\n\t\t\tif (subscription === undefined) return null;\n\t\t\treturn copyOut<WebhookSubscriptionSnapshot>({\n\t\t\t\tsubscriptionId: subscription.subscriptionId,\n\t\t\t\ttenantId: subscription.tenantId,\n\t\t\t\tspaceId: subscription.spaceId,\n\t\t\t\tstatus: subscription.revisions[subscription.revisions.length - 1]!.status,\n\t\t\t\tstatusSinceRevision: statusSinceRevision(subscription.revisions),\n\t\t\t\tconfiguration: subscription.configurations[subscription.configurations.length - 1]!,\n\t\t\t});\n\t\t});\n\t}\n\n\tasync listEligibilityHistory(\n\t\tinput: WebhookScope & { readonly subscriptionId: string },\n\t\toptions: WebhookCallOptions,\n\t): Promise<readonly WebhookEligibilityRevision[]> {\n\t\tconst call = readTargetCall(input, options);\n\t\tawait this.#boundary(\"listEligibilityHistory\");\n\t\treturn this.#atomic(call.bounds, () => {\n\t\t\tconst subscription = this.#find(call.target);\n\t\t\tif (subscription === undefined) return copyOut<readonly WebhookEligibilityRevision[]>([]);\n\t\t\treturn copyOut<readonly WebhookEligibilityRevision[]>(subscription.revisions.map((_revision, index) => revisionAt(subscription, index)));\n\t\t});\n\t}\n\n\t// -------------------------------------------------------------------------\n\t// Writes\n\t// -------------------------------------------------------------------------\n\n\tasync createSubscription(\n\t\tinput: WebhookScope & {\n\t\t\treadonly subscriptionId: string;\n\t\t\treadonly eventTypePatterns: readonly string[];\n\t\t\treadonly configuration: WebhookDeliveryConfigurationInput;\n\t\t},\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookSubscriptionWriteResult> {\n\t\tconst call = readCreateCall(input, options);\n\t\tawait this.#boundary(\"createSubscription\");\n\t\treturn this.#atomic(call.bounds, (nowMs) => {\n\t\t\tif (this.#find(call.target) !== undefined) return refused(\"already_exists\");\n\t\t\tconst { tenantId, spaceId, subscriptionId } = call.target;\n\t\t\tconst configuration = configurationOut(call.target, 1, call.configuration);\n\t\t\tconst subscription: SubscriptionState = {\n\t\t\t\tsubscriptionId,\n\t\t\t\ttenantId,\n\t\t\t\tspaceId,\n\t\t\t\trevisions: [{ revision: 1, status: \"active\", eventTypePatterns: call.patterns, effectiveFromMs: nowMs }],\n\t\t\t\tconfigurations: [configuration],\n\t\t\t};\n\t\t\tconst result = copyOut<WebhookSubscriptionWriteResult>({ applied: true, revision: revisionAt(subscription, 0), configuration });\n\t\t\tthis.#subscriptions.set(subscriptionKey(tenantId, spaceId, subscriptionId), subscription);\n\t\t\treturn result;\n\t\t});\n\t}\n\n\tasync changeEventTypePatterns(\n\t\tinput: WebhookSubscriptionTransitionInput & { readonly eventTypePatterns: readonly string[] },\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookSubscriptionWriteResult> {\n\t\tconst call = readChangePatternsCall(input, options);\n\t\tawait this.#boundary(\"changeEventTypePatterns\");\n\t\treturn this.#atomic(call.bounds, (nowMs) =>\n\t\t\tthis.#transition(call.target, call.expectedRevision, nowMs, (current) => ({ status: current.status, patterns: call.patterns })));\n\t}\n\n\tasync pauseSubscription(input: WebhookSubscriptionTransitionInput, options: WebhookCallOptions): Promise<WebhookSubscriptionWriteResult> {\n\t\treturn this.#statusChange(\"pauseSubscription\", input, options, PAUSE);\n\t}\n\n\tasync resumeSubscription(input: WebhookSubscriptionTransitionInput, options: WebhookCallOptions): Promise<WebhookSubscriptionWriteResult> {\n\t\treturn this.#statusChange(\"resumeSubscription\", input, options, RESUME);\n\t}\n\n\tasync deleteSubscription(input: WebhookSubscriptionTransitionInput, options: WebhookCallOptions): Promise<WebhookSubscriptionWriteResult> {\n\t\treturn this.#statusChange(\"deleteSubscription\", input, options, DELETE);\n\t}\n\n\tasync replaceDeliveryConfiguration(\n\t\tinput: WebhookScope & { readonly subscriptionId: string; readonly configuration: WebhookDeliveryConfigurationInput; readonly expectedVersion?: number },\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookConfigurationWriteResult> {\n\t\tconst call = readReplaceConfigurationCall(input, options);\n\t\tawait this.#boundary(\"replaceDeliveryConfiguration\");\n\t\treturn this.#atomic(call.bounds, () => {\n\t\t\tconst subscription = this.#find(call.target);\n\t\t\tif (subscription === undefined) return copyOut<WebhookConfigurationWriteResult>({ applied: false, refusal: \"not_found\" });\n\t\t\tif (subscription.revisions[subscription.revisions.length - 1]!.status === \"deleted\") {\n\t\t\t\treturn copyOut<WebhookConfigurationWriteResult>({ applied: false, refusal: \"deleted\" });\n\t\t\t}\n\t\t\tconst current = subscription.configurations[subscription.configurations.length - 1]!;\n\t\t\tif (call.expectedVersion !== undefined && call.expectedVersion !== current.version) {\n\t\t\t\treturn copyOut<WebhookConfigurationWriteResult>({ applied: false, refusal: \"version_conflict\", currentVersion: current.version });\n\t\t\t}\n\t\t\tconst configuration = configurationOut(subscription, current.version + 1, call.configuration);\n\t\t\tconst result = copyOut<WebhookConfigurationWriteResult>({ applied: true, configuration });\n\t\t\tsubscription.configurations.push(configuration);\n\t\t\treturn result;\n\t\t});\n\t}\n\n\tasync #statusChange(\n\t\toperation: string,\n\t\tinput: WebhookSubscriptionTransitionInput,\n\t\toptions: WebhookCallOptions,\n\t\tnext: StatusChange,\n\t): Promise<WebhookSubscriptionWriteResult> {\n\t\tconst call = readStatusChangeCall(input, options);\n\t\tawait this.#boundary(operation);\n\t\treturn this.#atomic(call.bounds, (nowMs) => this.#transition(call.target, call.expectedRevision, nowMs, statusRevisionChange(next)));\n\t}\n\n\t/**\n\t * Append one revision, checked against the store's current state. Runs\n\t * inside the atomic step.\n\t */\n\t#transition(target: Target, expectedRevision: number | undefined, nowMs: number, change: RevisionChange): WebhookSubscriptionWriteResult {\n\t\tconst subscription = this.#find(target);\n\t\tconst decision = decideTransition(subscription?.revisions[subscription.revisions.length - 1], expectedRevision, nowMs, change);\n\t\tif (\"refusal\" in decision) return decision.refusal;\n\t\tconst current = subscription!;\n\t\t// Compute, then commit: the result is built from the would-be history\n\t\t// before the revision is appended.\n\t\tconst result = copyOut<WebhookSubscriptionWriteResult>({\n\t\t\tapplied: true,\n\t\t\trevision: revisionOut(current, decision.appended, undefined),\n\t\t\tconfiguration: current.configurations[current.configurations.length - 1]!,\n\t\t});\n\t\tcurrent.revisions.push(decision.appended);\n\t\treturn result;\n\t}\n}\n","import { guard, storeError } from \"./errors\";\nimport { sha256Hex } from \"./receipt\";\nimport { matches } from \"./snapshot\";\nimport { assertCallWanted, readClock, type CallBounds, type CapturedClock } from \"./store-input\";\n\n/*\n * What the PostgreSQL stores need from a database client, and the\n * transaction, migration and row-reading helpers both stores share.\n *\n * The client is injected and structural, like Host's `PlatformHostSqlClient`:\n * `pg.Pool` satisfies it, and the package has no runtime dependency on `pg`.\n * Unlike Host's interface it also needs `connect()`, because a store method\n * that checks and then writes runs several statements, with the store's\n * clock read between them, on one connection inside one transaction.\n */\n\n/** The rows a query returned. */\nexport interface WebhookPostgresResult<Row = Record<string, unknown>> {\n\trows: Row[];\n}\n\n/** Anything that runs one parameterized statement. */\nexport interface WebhookPostgresQueryable {\n\tquery<Row = Record<string, unknown>>(sql: string, values?: unknown[]): Promise<WebhookPostgresResult<Row>>;\n}\n\n/** One checked-out connection. `release(true)` discards it instead of returning it to the pool. */\nexport interface WebhookPostgresConnection extends WebhookPostgresQueryable {\n\trelease(destroy?: boolean): void;\n}\n\n/** A connection pool: `pg.Pool`, or a Lakebase-compatible client with the same two methods. */\nexport interface WebhookPostgresPool extends WebhookPostgresQueryable {\n\tconnect(): Promise<WebhookPostgresConnection>;\n}\n\n/** Where the store pauses inside a transaction, for the serialization tests only. */\nexport type WebhookTransactionCheckpointStage = \"locked\" | \"written\";\n\n/**\n * A schema name the stores accept: lower-case ASCII letters, digits and\n * underscores, starting with a letter or underscore, at most 63 bytes (the\n * PostgreSQL identifier limit). It is double-quoted wherever it is used, so\n * the pattern, not quoting, is what keeps it from being read as SQL.\n */\nconst SCHEMA_NAME = /^[a-z_][a-z0-9_]{0,62}$/;\n\nexport const DEFAULT_WEBHOOK_SCHEMA = \"fabric_webhook_delivery\";\n\n/** Read the optional `schema` option; anything but a valid name is `input_invalid`. */\nexport function readSchemaOption(options: unknown): string {\n\treturn guard(() => {\n\t\tconst schema = (options as { schema?: unknown }).schema;\n\t\tif (schema === undefined) return `\"${DEFAULT_WEBHOOK_SCHEMA}\"`;\n\t\tif (typeof schema !== \"string\" || !matches(SCHEMA_NAME, schema)) throw storeError(\"input_invalid\", \"schema\");\n\t\treturn `\"${schema}\"`;\n\t}, () => storeError(\"input_invalid\", \"schema\"));\n}\n\n/** Read the required `pool` option: an object with `query` and `connect` functions. */\nexport function readPoolOption(options: unknown): WebhookPostgresPool {\n\treturn guard(() => {\n\t\tconst pool = (options as { pool?: unknown }).pool;\n\t\tif (pool === null || typeof pool !== \"object\") throw storeError(\"input_invalid\", \"pool\");\n\t\tconst { query, connect } = pool as { query?: unknown; connect?: unknown };\n\t\tif (typeof query !== \"function\" || typeof connect !== \"function\") throw storeError(\"input_invalid\", \"pool\");\n\t\treturn pool as WebhookPostgresPool;\n\t}, () => storeError(\"input_invalid\", \"pool\"));\n}\n\n/**\n * Run `run` and map whatever it throws: a package error passes through, and\n * anything else (a driver error, a lost connection, a constraint violation)\n * becomes `store_failed` without being read.\n */\nexport async function storeCall<T>(run: () => Promise<T>): Promise<T> {\n\ttry {\n\t\treturn await run();\n\t} catch (thrown) {\n\t\treturn guard<T>(() => {\n\t\t\tthrow thrown;\n\t\t}, () => storeError(\"store_failed\", \"store\"));\n\t}\n}\n\n/** Lets a transaction body end in ROLLBACK while still returning its result. */\nexport interface WebhookTransactionControl {\n\t/** Roll back instead of committing; the body's return value is still returned. */\n\tabandon(): void;\n}\n\n/**\n * Run `run` inside one READ COMMITTED transaction on one connection. The\n * isolation level is named rather than inherited, because the locking\n * argument in the README (\"PostgreSQL stores\") assumes it. The transaction\n * commits unless `run` throws or calls `control.abandon()`. Any throw rolls\n * back; if the rollback itself fails the connection is discarded rather\n * than returned to the pool in an unknown state.\n */\nexport async function inTransaction<T>(\n\tpool: WebhookPostgresPool,\n\trun: (tx: WebhookPostgresQueryable, control: WebhookTransactionControl) => Promise<T>,\n): Promise<T> {\n\tconst connection = await pool.connect();\n\tlet destroy = false;\n\tlet abandoned = false;\n\ttry {\n\t\tawait connection.query(\"BEGIN ISOLATION LEVEL READ COMMITTED\");\n\t\tconst result = await run(connection, { abandon: () => { abandoned = true; } });\n\t\tawait connection.query(abandoned ? \"ROLLBACK\" : \"COMMIT\");\n\t\treturn result;\n\t} catch (error) {\n\t\ttry {\n\t\t\tawait connection.query(\"ROLLBACK\");\n\t\t} catch {\n\t\t\tdestroy = true;\n\t\t}\n\t\tthrow error;\n\t} finally {\n\t\tconnection.release(destroy);\n\t}\n}\n\n/**\n * One store write, in one transaction, in three phases:\n *\n * 1. `lock` runs every statement that can wait on another transaction:\n * the horizon table lock, `SELECT … FOR UPDATE` / `FOR SHARE` on the\n * records the write reads, and a tentative insert-if-absent, whose\n * conflict check waits on a concurrent uncommitted insert of the same\n * key. It decides nothing.\n * 2. With every lock held, the store's clock is read and a call whose\n * signal aborted or whose deadline passed is refused, rolling back. A\n * call that waited for a lock is therefore judged, and its horizon\n * floor computed, at the time it decides, not before it waited.\n * 3. `body` decides from what `lock` read and finishes the write. It may\n * call `control.abandon()` to roll back a tentative write and still\n * return its result (an insert that turned out past the horizon).\n *\n * Immediately before COMMIT the clock is read and the bounds are checked\n * once more, so nothing commits if the signal aborted or the deadline\n * passed while `body` ran. The purge is the only write whose `body` can\n * wait on another transaction (its deletes wait for row locks). Every other\n * body writes only rows its `lock` phase already holds, rows it inserted\n * there, rows keyed by a fresh identity value (attempts, requeue evidence),\n * a begun attempt keyed by its intent's current fence (no other transaction\n * can insert that key while this one holds the intent row), or a\n * subscription's next revision or configuration version, which no other\n * transaction can insert while this one holds the head row.\n */\nexport function runWrite<L, T>(\n\tpool: WebhookPostgresPool,\n\tclock: CapturedClock,\n\tbounds: CallBounds,\n\tlock: (tx: WebhookPostgresQueryable) => Promise<L>,\n\tbody: (tx: WebhookPostgresQueryable, nowMs: number, locked: L, control: WebhookTransactionControl) => Promise<T>,\n): Promise<T> {\n\treturn storeCall(() => inTransaction(pool, async (tx, control) => {\n\t\tconst locked = await lock(tx);\n\t\tconst nowMs = readClock(clock);\n\t\tassertCallWanted(bounds, nowMs);\n\t\tconst result = await body(tx, nowMs, locked, control);\n\t\tassertCallWanted(bounds, readClock(clock));\n\t\treturn result;\n\t}));\n}\n\n/** One store read: one statement (its own transaction) after the call-bounds check. */\nexport function runRead<T>(\n\tpool: WebhookPostgresPool,\n\tclock: CapturedClock,\n\tbounds: CallBounds,\n\tbody: (db: WebhookPostgresQueryable, nowMs: number) => Promise<T>,\n): Promise<T> {\n\treturn storeCall(async () => {\n\t\tconst nowMs = readClock(clock);\n\t\tassertCallWanted(bounds, nowMs);\n\t\treturn body(pool, nowMs);\n\t});\n}\n\n/** Await a test seam; a throw or rejection fails the call as `store_failed` naming the seam. */\nexport async function awaitHook(hook: (() => Promise<void> | void) | undefined, field: string): Promise<void> {\n\tif (hook === undefined) return;\n\ttry {\n\t\tawait hook();\n\t} catch {\n\t\tthrow storeError(\"store_failed\", field);\n\t}\n}\n\n// ---------------------------------------------------------------------------\n// Migrations\n// ---------------------------------------------------------------------------\n\n/** One immutable migration. `sql` names the schema as `{{schema}}`. */\nexport interface WebhookPostgresMigration {\n\treadonly version: number;\n\treadonly name: string;\n\treadonly sql: string;\n}\n\n\n/**\n * Apply `component`'s migrations to `schema`, in version order, in one\n * transaction, mirroring Host's `applyPostgresMigrations`: a\n * transaction-scoped advisory lock serializes concurrent callers, each\n * applied version is recorded with the SHA-256 of its SQL template, and a\n * recorded version whose template has since changed fails as `store_failed`\n * (`ensureSchema.checksum`) instead of being re-run. The checksum is taken\n * before the schema name is substituted, so the same migration has the same\n * checksum in every schema.\n */\nexport async function applyWebhookMigrations(\n\tpool: WebhookPostgresPool,\n\tschema: string,\n\tcomponent: string,\n\tmigrations: readonly WebhookPostgresMigration[],\n): Promise<void> {\n\tconst ordered = [...migrations].sort((left, right) => left.version - right.version);\n\tconst checksums = await Promise.all(ordered.map((migration) => sha256Hex(migration.sql, \"ensureSchema.crypto\")));\n\tawait storeCall(() => inTransaction(pool, async (tx) => {\n\t\tawait tx.query(\"SELECT pg_advisory_xact_lock(hashtext($1))\", [`fabric_webhook_delivery.schema_migrations:${schema}`]);\n\t\tawait tx.query(`CREATE SCHEMA IF NOT EXISTS ${schema}`);\n\t\tawait tx.query(`CREATE TABLE IF NOT EXISTS ${schema}.webhook_schema_migrations (\n\t\t\tcomponent text NOT NULL,\n\t\t\tversion integer NOT NULL,\n\t\t\tname text NOT NULL,\n\t\t\tchecksum text NOT NULL,\n\t\t\tapplied_at timestamptz NOT NULL DEFAULT now(),\n\t\t\tPRIMARY KEY (component, version)\n\t\t)`);\n\t\tfor (let index = 0; index < ordered.length; index += 1) {\n\t\t\tconst migration = ordered[index]!;\n\t\t\tconst checksum = checksums[index]!;\n\t\t\tconst recorded = await tx.query<{ checksum: string }>(\n\t\t\t\t`SELECT checksum FROM ${schema}.webhook_schema_migrations WHERE component = $1 AND version = $2`,\n\t\t\t\t[component, migration.version],\n\t\t\t);\n\t\t\tconst row = recorded.rows[0];\n\t\t\tif (row !== undefined) {\n\t\t\t\tif (row.checksum !== checksum) throw storeError(\"store_failed\", \"ensureSchema.checksum\");\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tawait tx.query(migration.sql.replaceAll(\"{{schema}}\", schema));\n\t\t\tawait tx.query(\n\t\t\t\t`INSERT INTO ${schema}.webhook_schema_migrations (component, version, name, checksum) VALUES ($1, $2, $3, $4)`,\n\t\t\t\t[component, migration.version, migration.name, checksum],\n\t\t\t);\n\t\t}\n\t}));\n}\n\n// ---------------------------------------------------------------------------\n// Values in and out\n// ---------------------------------------------------------------------------\n\nconst jsonParse = JSON.parse;\nconst numberIsSafeInteger = Number.isSafeInteger;\nconst NumberConstructor = Number;\n\n/**\n * A sort key whose byte order (under `COLLATE \"C\"`) is the UTF-16 code unit\n * order JavaScript's `<` uses: four hex digits per code unit. PostgreSQL's\n * own text orders compare code points or follow a locale, which would put a\n * few strings in a different order from the memory store's sort.\n */\nexport function utf16SortKey(value: string): string {\n\tlet key = \"\";\n\tfor (let index = 0; index < value.length; index += 1) key += value.charCodeAt(index).toString(16).padStart(4, \"0\");\n\treturn key;\n}\n\n/** A whole number read from a row; `bigint` columns are selected as text so every client returns the same thing. */\nexport function intOf(value: unknown, field: string): number {\n\tconst number = typeof value === \"number\" ? value : typeof value === \"string\" ? NumberConstructor(value) : Number.NaN;\n\tif (!numberIsSafeInteger(number)) throw storeError(\"store_failed\", field);\n\treturn number;\n}\n\nexport function optionalIntOf(value: unknown, field: string): number | undefined {\n\treturn value === null || value === undefined ? undefined : intOf(value, field);\n}\n\nexport function textOf(value: unknown, field: string): string {\n\tif (typeof value !== \"string\") throw storeError(\"store_failed\", field);\n\treturn value;\n}\n\nexport function optionalTextOf(value: unknown, field: string): string | undefined {\n\treturn value === null || value === undefined ? undefined : textOf(value, field);\n}\n\n/**\n * Parse a `json` column selected as text. The stores write JSON text with\n * the package serializer and keep it in `json` columns, not `jsonb`: `json`\n * keeps the text as written, so key order and every string, lone\n * surrogates included, come back exactly as the memory store would return\n * them.\n */\nexport function jsonOf(value: unknown, field: string): unknown {\n\tconst text = textOf(value, field);\n\ttry {\n\t\treturn jsonParse(text) as unknown;\n\t} catch {\n\t\tthrow storeError(\"store_failed\", field);\n\t}\n}\n","import type { WebhookDiagnosticCode } from \"./codes\";\nimport {\n\tapplyEnrichment,\n\tapplyRequeue,\n\tapplySettlement,\n\tattemptEntryOut,\n\tbeginResult,\n\tcompareText,\n\tcopyOut,\n\tdenialRecord,\n\tfencedOutcome,\n\tholds,\n\tholdsFence,\n\tinScope,\n\tintentOut,\n\tenrichmentRefusal,\n\tenrichmentRefused,\n\tintentRequeueEvidence,\n\tjobOut,\n\tjobEnrichmentEvidence,\n\tjobRequeueEvidence,\n\tleaseCheck,\n\tpriorInvocationEvidence,\n\tmarkerKey,\n\tmayBegin,\n\treadAppendAttemptCall,\n\treadBeginAttemptCall,\n\treadCancelCall,\n\treadClaimCall,\n\treadDeadLetterJobCall,\n\treadDeliveryCall,\n\treadDenialCall,\n\treadEventCall,\n\treadFinishAttemptCall,\n\treadHookOption,\n\treadHorizonOption,\n\treadInsertFanOutJobCall,\n\treadInsertIntentCall,\n\treadIntentRequeueCall,\n\treadInvocationEvidenceCall,\n\treadJobFencedCall,\n\treadJobEnrichmentCall,\n\treadJobRequeueCall,\n\treadLeaseCheckCall,\n\treadPurgeCall,\n\treadRenewIntentCall,\n\treadRenewJobCall,\n\treadRescheduleCall,\n\treadSettleCall,\n\treadTombstoneCall,\n\trenewedExpiryMs,\n\trequeueRefusal,\n\trequeueRefused,\n\treplayedResult,\n\ttype InvocationTarget,\n\tTERMINAL_INTENT,\n\tTERMINAL_JOB,\n\ttombstoneOut,\n\ttype IntentState,\n\ttype JobState,\n\ttype MarkerState,\n} from \"./delivery-store-core\";\nimport { guard, storeError } from \"./errors\";\nimport { attemptReceiptDigest, newAttemptReceipt } from \"./receipt\";\nimport type {\n\tWebhookActorEnrichmentResult,\n\tWebhookAttemptBeginResult,\n\tWebhookCallOptions,\n\tWebhookClaimRequest,\n\tWebhookClock,\n\tWebhookDeliveryLeaseCheck,\n\tWebhookDeliveryStore,\n\tWebhookFanOutJobFence,\n\tWebhookFencedInsertResult,\n\tWebhookFencedWrite,\n\tWebhookInsertResult,\n\tWebhookPurgeResult,\n\tWebhookRequeueResult,\n\tWebhookScope,\n} from \"./ports\";\nimport {\n\tapplyWebhookMigrations,\n\tawaitHook,\n\tintOf,\n\tjsonOf,\n\toptionalIntOf,\n\toptionalTextOf,\n\treadPoolOption,\n\treadSchemaOption,\n\trunRead,\n\trunWrite,\n\tstoreCall,\n\ttextOf,\n\tutf16SortKey,\n\ttype WebhookPostgresMigration,\n\ttype WebhookPostgresPool,\n\ttype WebhookPostgresQueryable,\n\ttype WebhookTransactionCheckpointStage,\n\ttype WebhookTransactionControl,\n} from \"./postgres-sql\";\nimport { frozenList, mathMax, serializeJson } from \"./snapshot\";\nimport { captureClock, isoOf, type CallBounds, type CapturedClock, type Snapshot } from \"./store-input\";\nimport type {\n\tWebhookActorEnrichmentRequest,\n\tWebhookAdmissionDenialRecord,\n\tWebhookDeliveryAttemptFinish,\n\tWebhookDeliveryAttemptLogEntry,\n\tWebhookDeliveryAttemptRecord,\n\tWebhookDeliveryAttemptStart,\n\tWebhookDeliveryIntent,\n\tWebhookFanOutJob,\n\tWebhookFanOutJobDraft,\n\tWebhookRequeueEvidence,\n\tWebhookRequeueRequest,\n\tWebhookTombstone,\n} from \"./types\";\n\n/*\n * PostgreSQL WebhookDeliveryStore. It holds the same contract as the memory\n * store (tests/store-contract.ts runs against both) and reads its input and\n * renders its records through the same functions (src/delivery-store-core.ts).\n *\n * Every method has the memory store's shape, with the synchronous atomic\n * step replaced by one transaction:\n *\n * 1. Entry: the shared reader copies and validates the arguments.\n * 2. The `beforeAtomicStep` test seam, awaited before any connection is\n * taken or transaction opened.\n * 3. For a write, one READ COMMITTED transaction on one connection\n * (`runWrite` in src/postgres-sql.ts), in this order:\n * a. every lock, in a fixed order: the horizon table lock first (when\n * the method takes it), then the record rows (`FOR UPDATE`, or\n * `FOR SHARE` on an insert's parent job), then any tentative\n * insert-if-absent, whose conflict check can wait on a concurrent\n * insert of the same key;\n * b. the store's clock, and the refusal of a call whose signal\n * aborted or whose deadline passed, possibly while it waited in (a);\n * c. every check (lease, scope, horizon floor, uniqueness, status) and\n * the write, or a rollback of the tentative insert;\n * d. the clock and the call bounds once more, then COMMIT.\n * A read is one statement after the bounds check.\n *\n * Replay-horizon serialization. A purge and a horizon-checked write (job,\n * intent and denial inserts, job and intent requeues, actor enrichment)\n * must not interleave\n * between the write's read of the purge floor and its write; otherwise a\n * purge could remove a key after an insert read the old floor, and the\n * insert would re-create it. The mechanism is a table-level lock on the\n * store's one-row horizon table, `webhook_delivery_horizon`:\n *\n * - every horizon-checked write takes `LOCK TABLE ... IN SHARE MODE` as its\n * first statement and reads the highest purge cutoff, then takes its\n * record locks, and only then reads the clock;\n * - `purgeExpiredRecords` takes `LOCK TABLE ... IN EXCLUSIVE MODE` as its\n * first statement and reads the cutoff, then reads the clock, removes,\n * and raises the floor before it commits.\n *\n * SHARE conflicts with EXCLUSIVE and not with itself, so writes do not\n * serialize against each other, and a write and a purge cannot both hold the\n * lock: whichever transaction gets it first commits (or rolls back) before\n * the other reads anything. Both orders are then serial, which is all the\n * horizon rules need. A table lock rather than a row lock (`FOR SHARE` /\n * `FOR UPDATE` on the horizon row) because PostgreSQL's lock manager queues\n * a SHARE request behind a waiting EXCLUSIVE one, so a steady stream of\n * inserts cannot keep a purge waiting; a new `FOR SHARE` row lock joins the\n * existing share lockers and can. `tests/postgres-live.test.ts` checks both\n * orders with a pause inside the transaction (\"check-to-write\n * serialization\"), and that a later write queues behind a waiting purge.\n *\n * Other writes take only row locks. A claim takes `FOR UPDATE SKIP LOCKED`\n * on the rows it leases, which never waits, so concurrent claims never\n * lease one record twice. Fenced writes and settlements lock the record with\n * `FOR UPDATE`; an intent or denial insert locks its parent job with\n * `FOR SHARE`, so a reclaim (an UPDATE) cannot advance the parent's fence\n * between the lease check and the insert. \"call bounds while waiting for a\n * lock\" in the live tests holds each of these locks from another connection\n * and checks that an abort or an expired deadline during the wait commits\n * nothing.\n */\n\n/** Options for {@link PostgresWebhookDeliveryStore}. */\nexport interface PostgresWebhookDeliveryStoreOptions {\n\t/** The connection pool, for example a `pg.Pool`. The store never ends it. */\n\treadonly pool: WebhookPostgresPool;\n\t/** The store's clock: it timestamps requeue evidence and decides the replay horizon. */\n\treadonly clock: WebhookClock;\n\t/** The replay horizon in milliseconds; see `WebhookDeliveryLimits.replayHorizonMs`. */\n\treadonly replayHorizonMs: number;\n\t/**\n\t * The schema the tables live in, default `fabric_webhook_delivery`.\n\t * Lower-case letters, digits and underscores only. The horizon floor is\n\t * per schema: two stores on one schema share one floor.\n\t */\n\treadonly schema?: string;\n\t/**\n\t * Test seam, with the memory store's meaning: awaited once per call,\n\t * with the method name, after the input is read and before a connection\n\t * is taken. Leave it unset outside tests.\n\t */\n\treadonly beforeAtomicStep?: (operation: string) => Promise<void> | void;\n\t/**\n\t * Test seam for the serialization tests. Awaited inside the transaction\n\t * of each horizon-checked method and of the purge: at `locked`, after the\n\t * horizon lock, the purge-cutoff read and the record locks, and before\n\t * the clock is read or anything is written; and at `written`, after the\n\t * write and before the commit (a call that returns a refusal does not\n\t * reach it). A throw or rejection rolls the transaction back and fails\n\t * the call as `store_failed`. Leave it unset outside tests.\n\t */\n\treadonly transactionCheckpoint?: (operation: string, stage: WebhookTransactionCheckpointStage) => Promise<void> | void;\n}\n\ntype HorizonLock = \"share\" | \"exclusive\";\n\ninterface Tables {\n\treadonly horizon: string;\n\treadonly jobs: string;\n\treadonly intents: string;\n\treadonly tombstones: string;\n\treadonly denials: string;\n\treadonly attempts: string;\n\treadonly outcomes: string;\n\treadonly evidence: string;\n}\n\nfunction tablesIn(schema: string): Tables {\n\treturn {\n\t\thorizon: `${schema}.webhook_delivery_horizon`,\n\t\tjobs: `${schema}.webhook_fan_out_jobs`,\n\t\tintents: `${schema}.webhook_delivery_intents`,\n\t\ttombstones: `${schema}.webhook_delivery_tombstones`,\n\t\tdenials: `${schema}.webhook_admission_denials`,\n\t\tattempts: `${schema}.webhook_delivery_attempts`,\n\t\toutcomes: `${schema}.webhook_delivery_attempt_outcomes`,\n\t\tevidence: `${schema}.webhook_requeue_evidence`,\n\t};\n}\n\n/**\n * The delivery store's schema. Times are `bigint` epoch milliseconds, so\n * every instant a JavaScript `Date` can hold is stored exactly (a\n * `timestamptz` cannot hold years before 4713 BC, which a `Date` can).\n * Documents and free text are `json` columns holding the package\n * serializer's output (see `jsonOf`). `sort_key` columns hold\n * `utf16SortKey` of the record's key, so ties sort as in the memory store.\n */\nconst DELIVERY_MIGRATIONS: readonly WebhookPostgresMigration[] = Object.freeze([{\n\tversion: 1,\n\tname: \"delivery_baseline\",\n\tsql: `\n\t\tCREATE TABLE {{schema}}.webhook_delivery_horizon (\n\t\t\tsingleton boolean PRIMARY KEY DEFAULT true CHECK (singleton),\n\t\t\tpurged_through_ms bigint\n\t\t);\n\t\tINSERT INTO {{schema}}.webhook_delivery_horizon (singleton, purged_through_ms) VALUES (true, NULL);\n\t\tCREATE TABLE {{schema}}.webhook_fan_out_jobs (\n\t\t\tevent_id text PRIMARY KEY,\n\t\t\tsort_key text COLLATE \"C\" NOT NULL,\n\t\t\ttenant_id text NOT NULL,\n\t\t\tspace_id text NOT NULL,\n\t\t\tdraft json NOT NULL,\n\t\t\tanchor_ms bigint NOT NULL,\n\t\t\tstatus text NOT NULL CHECK (status IN ('pending', 'completed', 'dead_letter')),\n\t\t\tattempt_count integer NOT NULL,\n\t\t\tavailable_at_ms bigint NOT NULL,\n\t\t\tcreated_at_ms bigint NOT NULL,\n\t\t\tprocessing_deadline_ms bigint NOT NULL,\n\t\t\tcompleted_at_ms bigint,\n\t\t\tlast_diagnostic text,\n\t\t\tfence bigint NOT NULL,\n\t\t\tlease_owner text,\n\t\t\tlease_expires_at_ms bigint,\n\t\t\tCHECK ((lease_owner IS NULL) = (lease_expires_at_ms IS NULL))\n\t\t);\n\t\tCREATE INDEX webhook_fan_out_jobs_claim_idx ON {{schema}}.webhook_fan_out_jobs (available_at_ms, created_at_ms, sort_key) WHERE status = 'pending';\n\t\tCREATE INDEX webhook_fan_out_jobs_purge_idx ON {{schema}}.webhook_fan_out_jobs (anchor_ms) WHERE status <> 'pending';\n\t\tCREATE TABLE {{schema}}.webhook_delivery_intents (\n\t\t\tdelivery_id text PRIMARY KEY,\n\t\t\tsort_key text COLLATE \"C\" NOT NULL,\n\t\t\tsubscription_id text NOT NULL,\n\t\t\tevent_id text NOT NULL,\n\t\t\ttenant_id text NOT NULL,\n\t\t\tspace_id text NOT NULL,\n\t\t\teligibility_revision bigint NOT NULL,\n\t\t\tbody json NOT NULL,\n\t\t\tanchor_ms bigint NOT NULL,\n\t\t\tstatus text NOT NULL CHECK (status IN ('pending', 'delivered', 'dead_letter', 'cancelled')),\n\t\t\tattempt_count integer NOT NULL,\n\t\t\tavailable_at_ms bigint NOT NULL,\n\t\t\tcreated_at_ms bigint NOT NULL,\n\t\t\tprocessing_deadline_ms bigint NOT NULL,\n\t\t\tlast_outcome text,\n\t\t\tlast_reason text,\n\t\t\tlast_diagnostic text,\n\t\t\tfence bigint NOT NULL,\n\t\t\tlease_owner text,\n\t\t\tlease_expires_at_ms bigint,\n\t\t\tCHECK ((lease_owner IS NULL) = (lease_expires_at_ms IS NULL)),\n\t\t\tCHECK ((last_outcome IS NULL) = (last_reason IS NULL))\n\t\t);\n\t\tCREATE INDEX webhook_delivery_intents_claim_idx ON {{schema}}.webhook_delivery_intents (available_at_ms, created_at_ms, sort_key) WHERE status = 'pending';\n\t\tCREATE INDEX webhook_delivery_intents_purge_idx ON {{schema}}.webhook_delivery_intents (anchor_ms) WHERE status <> 'pending';\n\t\tCREATE INDEX webhook_delivery_intents_subscription_idx ON {{schema}}.webhook_delivery_intents (tenant_id, space_id, subscription_id) WHERE status = 'pending';\n\t\tCREATE TABLE {{schema}}.webhook_delivery_tombstones (\n\t\t\tsubscription_id text NOT NULL,\n\t\t\tevent_id text NOT NULL,\n\t\t\tkind text NOT NULL CHECK (kind IN ('intent', 'denial')),\n\t\t\ttenant_id text NOT NULL,\n\t\t\tspace_id text NOT NULL,\n\t\t\tanchor_ms bigint NOT NULL,\n\t\t\tPRIMARY KEY (subscription_id, event_id)\n\t\t);\n\t\tCREATE TABLE {{schema}}.webhook_admission_denials (\n\t\t\tsubscription_id text NOT NULL,\n\t\t\tevent_id text NOT NULL,\n\t\t\tsort_key text COLLATE \"C\" NOT NULL,\n\t\t\ttenant_id text NOT NULL,\n\t\t\tspace_id text NOT NULL,\n\t\t\trecord json NOT NULL,\n\t\t\tanchor_ms bigint NOT NULL,\n\t\t\tPRIMARY KEY (subscription_id, event_id)\n\t\t);\n\t\tCREATE INDEX webhook_admission_denials_purge_idx ON {{schema}}.webhook_admission_denials (anchor_ms);\n\t\tCREATE TABLE {{schema}}.webhook_delivery_attempts (\n\t\t\tseq bigint GENERATED ALWAYS AS IDENTITY PRIMARY KEY,\n\t\t\tdelivery_id text NOT NULL,\n\t\t\ttenant_id text NOT NULL,\n\t\t\tspace_id text NOT NULL,\n\t\t\trecord json NOT NULL\n\t\t);\n\t\tCREATE INDEX webhook_delivery_attempts_intent_idx ON {{schema}}.webhook_delivery_attempts (delivery_id, seq);\n\t\tCREATE TABLE {{schema}}.webhook_requeue_evidence (\n\t\t\tseq bigint GENERATED ALWAYS AS IDENTITY PRIMARY KEY,\n\t\t\tevent_id text NOT NULL,\n\t\t\ttenant_id text NOT NULL,\n\t\t\tspace_id text NOT NULL,\n\t\t\trecord json NOT NULL\n\t\t);\n\t\tCREATE INDEX webhook_requeue_evidence_event_idx ON {{schema}}.webhook_requeue_evidence (event_id, seq);\n\t`,\n}, {\n\t// PR 8: an attempt begun under the intent's lease before the transport\n\t// handoff (fence and the SHA-256 digest of its receipt set), and its\n\t// outcome, appended once, unfenced, by the holder of the receipt.\n\tversion: 2,\n\tname: \"delivery_attempt_begin_finish\",\n\tsql: `\n\t\tALTER TABLE {{schema}}.webhook_delivery_attempts ADD COLUMN fence bigint;\n\t\tALTER TABLE {{schema}}.webhook_delivery_attempts ADD COLUMN receipt_digest text;\n\t\tALTER TABLE {{schema}}.webhook_delivery_attempts ADD CONSTRAINT webhook_delivery_attempts_receipt_check CHECK ((fence IS NULL) = (receipt_digest IS NULL));\n\t\tCREATE UNIQUE INDEX webhook_delivery_attempts_begun_idx ON {{schema}}.webhook_delivery_attempts (delivery_id, fence) WHERE fence IS NOT NULL;\n\t\tCREATE TABLE {{schema}}.webhook_delivery_attempt_outcomes (\n\t\t\tdelivery_id text NOT NULL,\n\t\t\tfence bigint NOT NULL,\n\t\t\ttenant_id text NOT NULL,\n\t\t\tspace_id text NOT NULL,\n\t\t\trecord json NOT NULL,\n\t\t\tPRIMARY KEY (delivery_id, fence)\n\t\t);\n\t`,\n}, {\n\t// PR 9: requeue and enrichment evidence indexed by the governed\n\t// invocation that appended it, so a re-run of that invocation finds it\n\t// inside its own transaction, and after the record it names is purged.\n\t// Rows written before this migration are backfilled from the record.\n\tversion: 3,\n\tname: \"requeue_evidence_invocation\",\n\tsql: `\n\t\tALTER TABLE {{schema}}.webhook_requeue_evidence ADD COLUMN action_invocation_id text;\n\t\tUPDATE {{schema}}.webhook_requeue_evidence SET action_invocation_id = record->>'actionInvocationId';\n\t\tCREATE INDEX webhook_requeue_evidence_invocation_idx ON {{schema}}.webhook_requeue_evidence (tenant_id, space_id, action_invocation_id, seq)\n\t\t\tWHERE action_invocation_id IS NOT NULL;\n\t`,\n}]);\n\nconst JOB_COLUMNS = [\n\t\"event_id\", \"tenant_id\", \"space_id\", \"draft::text AS draft\", \"anchor_ms::text AS anchor_ms\", \"status\",\n\t\"attempt_count::text AS attempt_count\", \"available_at_ms::text AS available_at_ms\", \"created_at_ms::text AS created_at_ms\",\n\t\"processing_deadline_ms::text AS processing_deadline_ms\", \"completed_at_ms::text AS completed_at_ms\", \"last_diagnostic\",\n\t\"fence::text AS fence\", \"lease_owner\", \"lease_expires_at_ms::text AS lease_expires_at_ms\",\n];\n\nconst INTENT_COLUMNS = [\n\t\"delivery_id\", \"subscription_id\", \"event_id\", \"tenant_id\", \"space_id\", \"eligibility_revision::text AS eligibility_revision\",\n\t\"body::text AS body\", \"anchor_ms::text AS anchor_ms\", \"status\", \"attempt_count::text AS attempt_count\",\n\t\"available_at_ms::text AS available_at_ms\", \"created_at_ms::text AS created_at_ms\",\n\t\"processing_deadline_ms::text AS processing_deadline_ms\", \"last_outcome\", \"last_reason\", \"last_diagnostic\",\n\t\"fence::text AS fence\", \"lease_owner\", \"lease_expires_at_ms::text AS lease_expires_at_ms\",\n];\n\nfunction columns(list: readonly string[], alias?: string): string {\n\treturn list.map((column) => (alias === undefined ? column : `${alias}.${column}`)).join(\", \");\n}\n\ntype Row = Record<string, unknown>;\n\n/** Hydrate a job row into the shared state shape, copying each field. */\nfunction jobFrom(row: Row): JobState {\n\tconst fence = intOf(row[\"fence\"], \"row.fence\");\n\tconst owner = optionalTextOf(row[\"lease_owner\"], \"row.lease_owner\");\n\treturn {\n\t\tkey: textOf(row[\"event_id\"], \"row.event_id\"),\n\t\tdraft: jsonOf(row[\"draft\"], \"row.draft\") as Snapshot,\n\t\ttenantId: textOf(row[\"tenant_id\"], \"row.tenant_id\"),\n\t\tspaceId: textOf(row[\"space_id\"], \"row.space_id\"),\n\t\tanchorMs: intOf(row[\"anchor_ms\"], \"row.anchor_ms\"),\n\t\tstatus: textOf(row[\"status\"], \"row.status\") as JobState[\"status\"],\n\t\tattemptCount: intOf(row[\"attempt_count\"], \"row.attempt_count\"),\n\t\tavailableAtMs: intOf(row[\"available_at_ms\"], \"row.available_at_ms\"),\n\t\tcreatedAtMs: intOf(row[\"created_at_ms\"], \"row.created_at_ms\"),\n\t\tprocessingDeadlineMs: intOf(row[\"processing_deadline_ms\"], \"row.processing_deadline_ms\"),\n\t\tcompletedAtMs: optionalIntOf(row[\"completed_at_ms\"], \"row.completed_at_ms\"),\n\t\tlastDiagnostic: optionalTextOf(row[\"last_diagnostic\"], \"row.last_diagnostic\") as WebhookDiagnosticCode | undefined,\n\t\tfence,\n\t\tlease: owner === undefined ? undefined : { owner, fence, expiresAtMs: intOf(row[\"lease_expires_at_ms\"], \"row.lease_expires_at_ms\") },\n\t};\n}\n\n/** Hydrate an intent row into the shared state shape, copying each field. */\nfunction intentFrom(row: Row): IntentState {\n\tconst fence = intOf(row[\"fence\"], \"row.fence\");\n\tconst owner = optionalTextOf(row[\"lease_owner\"], \"row.lease_owner\");\n\tconst outcome = optionalTextOf(row[\"last_outcome\"], \"row.last_outcome\");\n\treturn {\n\t\tkey: textOf(row[\"delivery_id\"], \"row.delivery_id\"),\n\t\tsubscriptionId: textOf(row[\"subscription_id\"], \"row.subscription_id\"),\n\t\teventId: textOf(row[\"event_id\"], \"row.event_id\"),\n\t\ttenantId: textOf(row[\"tenant_id\"], \"row.tenant_id\"),\n\t\tspaceId: textOf(row[\"space_id\"], \"row.space_id\"),\n\t\teligibilityRevision: intOf(row[\"eligibility_revision\"], \"row.eligibility_revision\"),\n\t\tbody: textOf(jsonOf(row[\"body\"], \"row.body\"), \"row.body\"),\n\t\tanchorMs: intOf(row[\"anchor_ms\"], \"row.anchor_ms\"),\n\t\tstatus: textOf(row[\"status\"], \"row.status\") as IntentState[\"status\"],\n\t\tattemptCount: intOf(row[\"attempt_count\"], \"row.attempt_count\"),\n\t\tavailableAtMs: intOf(row[\"available_at_ms\"], \"row.available_at_ms\"),\n\t\tcreatedAtMs: intOf(row[\"created_at_ms\"], \"row.created_at_ms\"),\n\t\tprocessingDeadlineMs: intOf(row[\"processing_deadline_ms\"], \"row.processing_deadline_ms\"),\n\t\tlastOutcome: outcome === undefined\n\t\t\t? undefined\n\t\t\t: { outcome: outcome as NonNullable<IntentState[\"lastOutcome\"]>[\"outcome\"], reason: textOf(row[\"last_reason\"], \"row.last_reason\") as NonNullable<IntentState[\"lastOutcome\"]>[\"reason\"] },\n\t\tlastDiagnostic: optionalTextOf(row[\"last_diagnostic\"], \"row.last_diagnostic\") as WebhookDiagnosticCode | undefined,\n\t\tfence,\n\t\tlease: owner === undefined ? undefined : { owner, fence, expiresAtMs: intOf(row[\"lease_expires_at_ms\"], \"row.lease_expires_at_ms\") },\n\t};\n}\n\n/** Claimed rows in the memory store's claim order: `availableAt`, then `createdAt`, then key. */\nfunction claimOrder<T extends { readonly availableAtMs: number; readonly createdAtMs: number; readonly key: string }>(states: T[]): T[] {\n\treturn states.sort((left, right) => left.availableAtMs - right.availableAtMs || left.createdAtMs - right.createdAtMs || compareText(left.key, right.key));\n}\n\n/**\n * A PostgreSQL {@link WebhookDeliveryStore}. Call {@link ensureSchema} once\n * before use, at startup or from a migration step.\n *\n * @throws {WebhookDeliveryConfigError} when `replayHorizonMs` is not a\n * positive whole number of milliseconds within `WEBHOOK_MAX_REPLAY_HORIZON_MS`.\n * @throws {WebhookStoreError} `clock_invalid` when `clock` has no `now`\n * function; `input_invalid` when `pool`, `schema` or a test seam is not usable.\n */\nexport class PostgresWebhookDeliveryStore implements WebhookDeliveryStore {\n\treadonly #pool: WebhookPostgresPool;\n\treadonly #clock: CapturedClock;\n\treadonly #horizonMs: number;\n\treadonly #schema: string;\n\treadonly #t: Tables;\n\treadonly #beforeAtomicStep: ((operation: string) => Promise<void> | void) | undefined;\n\treadonly #checkpoint: ((operation: string, stage: WebhookTransactionCheckpointStage) => Promise<void> | void) | undefined;\n\n\tconstructor(options: PostgresWebhookDeliveryStoreOptions) {\n\t\tthis.#horizonMs = readHorizonOption(options);\n\t\tthis.#clock = guard(() => captureClock((options as { clock?: WebhookClock }).clock), () => storeError(\"clock_invalid\", \"clock\"));\n\t\tthis.#pool = readPoolOption(options);\n\t\tthis.#schema = readSchemaOption(options);\n\t\tthis.#t = tablesIn(this.#schema);\n\t\tthis.#beforeAtomicStep = readHookOption(options, \"beforeAtomicStep\");\n\t\tthis.#checkpoint = readHookOption(options, \"transactionCheckpoint\");\n\t}\n\n\t/** The replay horizon this store enforces, in milliseconds. */\n\tget replayHorizonMs(): number {\n\t\treturn this.#horizonMs;\n\t}\n\n\t/**\n\t * Create the schema and tables, or check that the applied migrations are\n\t * unchanged. Safe to call concurrently and repeatedly: an advisory lock\n\t * serializes callers and each migration is recorded once\n\t * (`applyWebhookMigrations` in src/postgres-sql.ts).\n\t */\n\tasync ensureSchema(): Promise<void> {\n\t\tawait applyWebhookMigrations(this.#pool, this.#schema, \"delivery\", DELIVERY_MIGRATIONS);\n\t}\n\n\t#boundary(operation: string): Promise<void> {\n\t\tconst hook = this.#beforeAtomicStep;\n\t\treturn awaitHook(hook === undefined ? undefined : () => hook(operation), \"beforeAtomicStep\");\n\t}\n\n\t#pause(operation: string, stage: WebhookTransactionCheckpointStage): Promise<void> {\n\t\tconst hook = this.#checkpoint;\n\t\treturn awaitHook(hook === undefined ? undefined : () => hook(operation, stage), \"transactionCheckpoint\");\n\t}\n\n\t/**\n\t * One write (`runWrite` in src/postgres-sql.ts). `lock` takes every lock\n\t * and runs every statement that can wait; the clock and the call bounds\n\t * are read only after it returns; `body` decides and finishes.\n\t */\n\tasync #write<L, T>(\n\t\toperation: string,\n\t\tbounds: CallBounds,\n\t\tlock: (tx: WebhookPostgresQueryable) => Promise<L>,\n\t\tbody: (tx: WebhookPostgresQueryable, nowMs: number, locked: L, control: WebhookTransactionControl) => Promise<T>,\n\t): Promise<T> {\n\t\tawait this.#boundary(operation);\n\t\treturn runWrite(this.#pool, this.#clock, bounds, lock, body);\n\t}\n\n\t/**\n\t * The horizon table lock, always the first statement of the transaction\n\t * that takes it, then the highest purge cutoff. While the lock is held the\n\t * cutoff cannot change, so it can be read before the record locks.\n\t */\n\tasync #lockHorizon(tx: WebhookPostgresQueryable, mode: HorizonLock): Promise<number> {\n\t\tawait tx.query(`LOCK TABLE ${this.#t.horizon} IN ${mode === \"share\" ? \"SHARE\" : \"EXCLUSIVE\"} MODE`);\n\t\tconst result = await tx.query(`SELECT purged_through_ms::text AS purged_through_ms FROM ${this.#t.horizon}`);\n\t\tconst row = result.rows[0];\n\t\tif (row === undefined) throw storeError(\"store_failed\", \"horizon\");\n\t\treturn optionalIntOf(row[\"purged_through_ms\"], \"horizon.purged_through_ms\") ?? -Infinity;\n\t}\n\n\t/** The horizon floor at `nowMs`, given the highest purge cutoff read under the horizon lock. */\n\t#floorMs(nowMs: number, purgedThroughMs: number): number {\n\t\treturn mathMax(nowMs - this.#horizonMs, purgedThroughMs);\n\t}\n\n\tasync #read<T>(operation: string, bounds: CallBounds, body: (db: WebhookPostgresQueryable) => Promise<T>): Promise<T> {\n\t\tawait this.#boundary(operation);\n\t\treturn runRead(this.#pool, this.#clock, bounds, (db) => body(db));\n\t}\n\n\tasync #lockJob(tx: WebhookPostgresQueryable, eventId: string, lock: \"UPDATE\" | \"SHARE\"): Promise<JobState | undefined> {\n\t\tconst result = await tx.query(`SELECT ${columns(JOB_COLUMNS)} FROM ${this.#t.jobs} WHERE event_id = $1 FOR ${lock}`, [eventId]);\n\t\treturn result.rows[0] === undefined ? undefined : jobFrom(result.rows[0]);\n\t}\n\n\tasync #lockIntent(tx: WebhookPostgresQueryable, deliveryId: string): Promise<IntentState | undefined> {\n\t\tconst result = await tx.query(`SELECT ${columns(INTENT_COLUMNS)} FROM ${this.#t.intents} WHERE delivery_id = $1 FOR UPDATE`, [deliveryId]);\n\t\treturn result.rows[0] === undefined ? undefined : intentFrom(result.rows[0]);\n\t}\n\n\t// -------------------------------------------------------------------------\n\t// Fan-out jobs\n\t// -------------------------------------------------------------------------\n\n\tasync insertFanOutJob(\n\t\tjob: WebhookFanOutJobDraft & { readonly processingDeadline: string; readonly createdAt: string },\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookInsertResult> {\n\t\tconst call = readInsertFanOutJobCall(job, options);\n\t\tconst draft = call.job;\n\t\treturn this.#write(\n\t\t\t\"insertFanOutJob\",\n\t\t\tcall.bounds,\n\t\t\tasync (tx) => {\n\t\t\t\tconst purgedThroughMs = await this.#lockHorizon(tx, \"share\");\n\t\t\t\tawait this.#pause(\"insertFanOutJob\", \"locked\");\n\t\t\t\t// Tentative: the conflict check can wait on a concurrent insert of\n\t\t\t\t// the same eventId, so it runs before the clock is read. The body\n\t\t\t\t// rolls it back if the event turns out past the horizon.\n\t\t\t\tconst inserted = await tx.query(\n\t\t\t\t\t`INSERT INTO ${this.#t.jobs}\n\t\t\t\t\t (event_id, sort_key, tenant_id, space_id, draft, anchor_ms, status, attempt_count,\n\t\t\t\t\t available_at_ms, created_at_ms, processing_deadline_ms, fence)\n\t\t\t\t\t VALUES ($1, $2, $3, $4, $5::json, $6, 'pending', 0, $7, $7, $8, 0)\n\t\t\t\t\t ON CONFLICT (event_id) DO NOTHING RETURNING event_id`,\n\t\t\t\t\t[draft.eventId, utf16SortKey(draft.eventId), draft.tenantId, draft.spaceId, serializeJson(draft.draft), draft.anchorMs, draft.createdAtMs, draft.processingDeadlineMs],\n\t\t\t\t);\n\t\t\t\treturn { purgedThroughMs, inserted: inserted.rows.length === 1 };\n\t\t\t},\n\t\t\tasync (_tx, nowMs, locked, control) => {\n\t\t\t\t// Horizon first, so the answer for an old event does not depend on\n\t\t\t\t// whether a purge has removed its job yet.\n\t\t\t\tif (draft.anchorMs < this.#floorMs(nowMs, locked.purgedThroughMs)) {\n\t\t\t\t\tcontrol.abandon();\n\t\t\t\t\treturn copyOut<WebhookInsertResult>({ outcome: \"past_horizon\" });\n\t\t\t\t}\n\t\t\t\tawait this.#pause(\"insertFanOutJob\", \"written\");\n\t\t\t\treturn copyOut<WebhookInsertResult>({ outcome: locked.inserted ? \"inserted\" : \"already_present\" });\n\t\t\t},\n\t\t);\n\t}\n\n\tasync claimFanOutJobs(request: WebhookClaimRequest, options: WebhookCallOptions): Promise<readonly WebhookFanOutJob[]> {\n\t\tconst call = readClaimCall(request, options);\n\t\tconst claim = call.claim;\n\t\treturn this.#write(\n\t\t\t\"claimFanOutJobs\",\n\t\t\tcall.bounds,\n\t\t\t// SKIP LOCKED never waits; it leaves rows another transaction holds.\n\t\t\tasync (tx) => (await tx.query(\n\t\t\t\t`SELECT event_id FROM ${this.#t.jobs}\n\t\t\t\t WHERE status = 'pending' AND available_at_ms <= $1\n\t\t\t\t AND (lease_owner IS NULL OR lease_expires_at_ms <= $1)\n\t\t\t\t ORDER BY available_at_ms, created_at_ms, sort_key\n\t\t\t\t LIMIT $2\n\t\t\t\t FOR UPDATE SKIP LOCKED`,\n\t\t\t\t[claim.nowMs, claim.limit],\n\t\t\t)).rows.map((row) => textOf(row[\"event_id\"], \"row.event_id\")),\n\t\t\tasync (tx, _nowMs, picked) => {\n\t\t\t\tif (picked.length === 0) return frozenList<WebhookFanOutJob>([]);\n\t\t\t\tconst result = await tx.query(\n\t\t\t\t\t`UPDATE ${this.#t.jobs} AS job\n\t\t\t\t\t SET fence = job.fence + 1, lease_owner = $2, lease_expires_at_ms = $3\n\t\t\t\t\t WHERE job.event_id = ANY($1::text[])\n\t\t\t\t\t RETURNING ${columns(JOB_COLUMNS, \"job\")}`,\n\t\t\t\t\t[picked, claim.workerId, claim.nowMs + claim.leaseDurationMs],\n\t\t\t\t);\n\t\t\t\tconst states = claimOrder(result.rows.map(jobFrom));\n\t\t\t\treturn frozenList(states.map((state) => copyOut<WebhookFanOutJob>(jobOut(state))));\n\t\t\t},\n\t\t);\n\t}\n\n\t/**\n\t * A fenced job write: the job is locked `FOR UPDATE` before the clock is\n\t * read; `change` runs only when the caller still holds the lease.\n\t */\n\t#fencedJobWrite(\n\t\toperation: string,\n\t\tbounds: CallBounds,\n\t\teventId: string,\n\t\tfenced: { readonly owner: string; readonly fence: number },\n\t\tchange: (tx: WebhookPostgresQueryable, job: JobState) => Promise<void>,\n\t): Promise<boolean> {\n\t\treturn this.#write(operation, bounds, (tx) => this.#lockJob(tx, eventId, \"UPDATE\"), async (tx, nowMs, job) => {\n\t\t\tif (job === undefined || !holds(job, fenced.owner, fenced.fence, nowMs)) return false;\n\t\t\tawait change(tx, job);\n\t\t\treturn true;\n\t\t});\n\t}\n\n\tasync completeFanOutJob(input: WebhookFencedWrite & { readonly eventId: string }, options: WebhookCallOptions): Promise<boolean> {\n\t\tconst call = readJobFencedCall(input, options);\n\t\treturn this.#fencedJobWrite(\"completeFanOutJob\", call.bounds, call.eventId, call.fenced, async (tx) => {\n\t\t\tawait tx.query(\n\t\t\t\t`UPDATE ${this.#t.jobs}\n\t\t\t\t SET status = 'completed', completed_at_ms = $2, lease_owner = NULL, lease_expires_at_ms = NULL\n\t\t\t\t WHERE event_id = $1`,\n\t\t\t\t[call.eventId, call.fenced.nowMs],\n\t\t\t);\n\t\t});\n\t}\n\n\tasync rescheduleFanOutJob(\n\t\tinput: WebhookFencedWrite & { readonly eventId: string; readonly availableAt: Date; readonly diagnostic: WebhookDiagnosticCode },\n\t\toptions: WebhookCallOptions,\n\t): Promise<boolean> {\n\t\tconst call = readRescheduleCall(input, options);\n\t\treturn this.#fencedJobWrite(\"rescheduleFanOutJob\", call.bounds, call.eventId, call.fenced, async (tx) => {\n\t\t\tawait tx.query(\n\t\t\t\t`UPDATE ${this.#t.jobs}\n\t\t\t\t SET attempt_count = attempt_count + 1, available_at_ms = $2, last_diagnostic = $3,\n\t\t\t\t lease_owner = NULL, lease_expires_at_ms = NULL\n\t\t\t\t WHERE event_id = $1`,\n\t\t\t\t[call.eventId, call.availableAtMs, call.diagnostic],\n\t\t\t);\n\t\t});\n\t}\n\n\tasync renewFanOutJobLease(\n\t\tinput: WebhookFencedWrite & { readonly eventId: string; readonly leaseDurationMs: number },\n\t\toptions: WebhookCallOptions,\n\t): Promise<boolean> {\n\t\tconst call = readRenewJobCall(input, options);\n\t\treturn this.#fencedJobWrite(\"renewFanOutJobLease\", call.bounds, call.eventId, call.fenced, async (tx, job) => {\n\t\t\tawait tx.query(\n\t\t\t\t`UPDATE ${this.#t.jobs} SET lease_expires_at_ms = $2 WHERE event_id = $1`,\n\t\t\t\t[call.eventId, renewedExpiryMs(job, call.fenced.nowMs, call.leaseDurationMs)],\n\t\t\t);\n\t\t});\n\t}\n\n\tasync deadLetterFanOutJob(\n\t\tinput: WebhookFencedWrite & { readonly eventId: string; readonly diagnostic: WebhookDiagnosticCode },\n\t\toptions: WebhookCallOptions,\n\t): Promise<boolean> {\n\t\tconst call = readDeadLetterJobCall(input, options);\n\t\treturn this.#fencedJobWrite(\"deadLetterFanOutJob\", call.bounds, call.eventId, call.fenced, async (tx) => {\n\t\t\tawait tx.query(\n\t\t\t\t`UPDATE ${this.#t.jobs}\n\t\t\t\t SET status = 'dead_letter', last_diagnostic = $2, lease_owner = NULL, lease_expires_at_ms = NULL\n\t\t\t\t WHERE event_id = $1`,\n\t\t\t\t[call.eventId, call.diagnostic],\n\t\t\t);\n\t\t});\n\t}\n\n\tasync requeueFanOutJob(\n\t\tinput: WebhookScope & { readonly eventId: string; readonly request: WebhookRequeueRequest },\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookRequeueResult> {\n\t\tconst call = readJobRequeueCall(input, options);\n\t\treturn this.#write(\n\t\t\t\"requeueFanOutJob\",\n\t\t\tcall.bounds,\n\t\t\tasync (tx) => {\n\t\t\t\tconst purgedThroughMs = await this.#lockHorizon(tx, \"share\");\n\t\t\t\tconst job = await this.#lockJob(tx, call.eventId, \"UPDATE\");\n\t\t\t\tconst prior = await this.#priorEvidence(tx, call.scope, call.request.actionInvocationId, { target: \"fan_out_job\", eventId: call.eventId });\n\t\t\t\tawait this.#pause(\"requeueFanOutJob\", \"locked\");\n\t\t\t\treturn { purgedThroughMs, job, prior };\n\t\t\t},\n\t\t\tasync (tx, nowMs, { purgedThroughMs, job, prior }) => {\n\t\t\t\tif (prior !== undefined) return replayedResult<WebhookRequeueResult>(prior);\n\t\t\t\tif (job === undefined || !inScope(job, call.scope)) return requeueRefused(\"not_found\");\n\t\t\t\tconst refusal = requeueRefusal(job, call.request, this.#floorMs(nowMs, purgedThroughMs));\n\t\t\t\tif (refusal !== undefined) return requeueRefused(refusal);\n\t\t\t\tconst evidence = jobRequeueEvidence(job, call.request, nowMs);\n\t\t\t\tconst result = copyOut<WebhookRequeueResult>({ applied: true, evidence });\n\t\t\t\tapplyRequeue(job, call.request);\n\t\t\t\tawait tx.query(\n\t\t\t\t\t`UPDATE ${this.#t.jobs}\n\t\t\t\t\t SET status = 'pending', attempt_count = $2, available_at_ms = $3, processing_deadline_ms = $4,\n\t\t\t\t\t fence = $5, lease_owner = NULL, lease_expires_at_ms = NULL\n\t\t\t\t\t WHERE event_id = $1`,\n\t\t\t\t\t[job.key, job.attemptCount, job.availableAtMs, job.processingDeadlineMs, job.fence],\n\t\t\t\t);\n\t\t\t\tawait this.#appendEvidence(tx, job.key, job.tenantId, job.spaceId, evidence);\n\t\t\t\tawait this.#pause(\"requeueFanOutJob\", \"written\");\n\t\t\t\treturn result;\n\t\t\t},\n\t\t);\n\t}\n\tasync enrichFanOutJobActor(\n\t\tinput: WebhookScope & { readonly eventId: string; readonly request: WebhookActorEnrichmentRequest },\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookActorEnrichmentResult> {\n\t\tconst call = readJobEnrichmentCall(input, options);\n\t\treturn this.#write(\n\t\t\t\"enrichFanOutJobActor\",\n\t\t\tcall.bounds,\n\t\t\tasync (tx) => {\n\t\t\t\tconst purgedThroughMs = await this.#lockHorizon(tx, \"share\");\n\t\t\t\tconst job = await this.#lockJob(tx, call.eventId, \"UPDATE\");\n\t\t\t\tconst prior = await this.#priorEvidence(tx, call.scope, call.request.actionInvocationId, { target: \"fan_out_job_actor\", eventId: call.eventId });\n\t\t\t\tawait this.#pause(\"enrichFanOutJobActor\", \"locked\");\n\t\t\t\treturn { purgedThroughMs, job, prior };\n\t\t\t},\n\t\t\tasync (tx, nowMs, { purgedThroughMs, job, prior }) => {\n\t\t\t\tif (prior !== undefined) return replayedResult<WebhookActorEnrichmentResult>(prior);\n\t\t\t\tif (job === undefined || !inScope(job, call.scope)) return enrichmentRefused(\"not_found\");\n\t\t\t\tconst refusal = enrichmentRefusal(job, call.request, this.#floorMs(nowMs, purgedThroughMs));\n\t\t\t\tif (refusal !== undefined) return enrichmentRefused(refusal);\n\t\t\t\tconst evidence = jobEnrichmentEvidence(job, call.request, nowMs);\n\t\t\t\tconst result = copyOut<WebhookActorEnrichmentResult>({ applied: true, evidence });\n\t\t\t\tapplyEnrichment(job, call.request);\n\t\t\t\tawait tx.query(\n\t\t\t\t\t`UPDATE ${this.#t.jobs}\n\t\t\t\t\t SET draft = $2::json, status = 'pending', attempt_count = $3, available_at_ms = $4, processing_deadline_ms = $5,\n\t\t\t\t\t fence = $6, lease_owner = NULL, lease_expires_at_ms = NULL\n\t\t\t\t\t WHERE event_id = $1`,\n\t\t\t\t\t[job.key, serializeJson(job.draft), job.attemptCount, job.availableAtMs, job.processingDeadlineMs, job.fence],\n\t\t\t\t);\n\t\t\t\tawait this.#appendEvidence(tx, job.key, job.tenantId, job.spaceId, evidence);\n\t\t\t\tawait this.#pause(\"enrichFanOutJobActor\", \"written\");\n\t\t\t\treturn result;\n\t\t\t},\n\t\t);\n\t}\n\n\tasync #appendEvidence(tx: WebhookPostgresQueryable, eventId: string, tenantId: string, spaceId: string, evidence: WebhookRequeueEvidence): Promise<void> {\n\t\tawait tx.query(\n\t\t\t`INSERT INTO ${this.#t.evidence} (event_id, tenant_id, space_id, record, action_invocation_id) VALUES ($1, $2, $3, $4::json, $5)`,\n\t\t\t[eventId, tenantId, spaceId, serializeJson(evidence), evidence.actionInvocationId ?? null],\n\t\t);\n\t}\n\n\t/**\n\t * Evidence `scope` holds under `actionInvocationId` for `target`, or\n\t * `undefined` (always, without an id). Called in a requeue's or\n\t * enrichment's transaction after its record lock: a concurrent request of\n\t * the same invocation that applied holds that lock until it commits, and\n\t * under READ COMMITTED this statement then sees its evidence. See\n\t * \"Re-runs of one invocation\" in src/ports.ts.\n\t */\n\tasync #priorEvidence(tx: WebhookPostgresQueryable, scope: WebhookScope, actionInvocationId: string | undefined, target: InvocationTarget): Promise<Snapshot | undefined> {\n\t\tif (actionInvocationId === undefined) return undefined;\n\t\tconst result = await tx.query(\n\t\t\t`SELECT record::text AS record FROM ${this.#t.evidence}\n\t\t\t WHERE tenant_id = $1 AND space_id = $2 AND action_invocation_id = $3 ORDER BY seq`,\n\t\t\t[scope.tenantId, scope.spaceId, actionInvocationId],\n\t\t);\n\t\treturn priorInvocationEvidence(result.rows.map((row) => jsonOf(row[\"record\"], \"row.record\") as Snapshot), target);\n\t}\n\n\tasync readFanOutJob(input: WebhookScope & { readonly eventId: string }, options: WebhookCallOptions): Promise<WebhookFanOutJob | null> {\n\t\tconst call = readEventCall(input, options);\n\t\treturn this.#read(\"readFanOutJob\", call.bounds, async (db) => {\n\t\t\tconst result = await db.query(\n\t\t\t\t`SELECT ${columns(JOB_COLUMNS)} FROM ${this.#t.jobs} WHERE event_id = $1 AND tenant_id = $2 AND space_id = $3`,\n\t\t\t\t[call.eventId, call.scope.tenantId, call.scope.spaceId],\n\t\t\t);\n\t\t\treturn result.rows[0] === undefined ? null : copyOut<WebhookFanOutJob>(jobOut(jobFrom(result.rows[0])));\n\t\t});\n\t}\n\n\t// -------------------------------------------------------------------------\n\t// Intents and denials\n\t// -------------------------------------------------------------------------\n\n\tasync insertDeliveryIntent(\n\t\tintent: Omit<WebhookDeliveryIntent, \"status\" | \"attemptCount\" | \"lastOutcome\" | \"lastDiagnostic\" | \"lease\" | \"eventRecordedAt\" | \"fence\">,\n\t\tparent: WebhookFanOutJobFence,\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookFencedInsertResult> {\n\t\tconst call = readInsertIntentCall(intent, parent, options);\n\t\treturn this.#write(\n\t\t\t\"insertDeliveryIntent\",\n\t\t\tcall.bounds,\n\t\t\tasync (tx) => {\n\t\t\t\tconst purgedThroughMs = await this.#lockHorizon(tx, \"share\");\n\t\t\t\tconst job = await this.#parentJob(tx, call.parent);\n\t\t\t\tawait this.#pause(\"insertDeliveryIntent\", \"locked\");\n\t\t\t\t// Tentative inserts, only when the clock-free checks pass: the\n\t\t\t\t// tombstone's and the intent's conflict checks can wait on a\n\t\t\t\t// concurrent insert, so they run before the clock is read.\n\t\t\t\tif (job === undefined || !inScope(job, call)) return { purgedThroughMs, job, tombstone: false, inserted: false };\n\t\t\t\tconst tombstone = await this.#insertTombstone(tx, \"intent\", call, job.anchorMs);\n\t\t\t\tconst inserted = tombstone && (await tx.query(\n\t\t\t\t\t`INSERT INTO ${this.#t.intents}\n\t\t\t\t\t (delivery_id, sort_key, subscription_id, event_id, tenant_id, space_id, eligibility_revision, body,\n\t\t\t\t\t anchor_ms, status, attempt_count, available_at_ms, created_at_ms, processing_deadline_ms, fence)\n\t\t\t\t\t VALUES ($1, $2, $3, $4, $5, $6, $7, $8::json, $9, 'pending', 0, $10, $11, $12, 0)\n\t\t\t\t\t ON CONFLICT (delivery_id) DO NOTHING RETURNING delivery_id`,\n\t\t\t\t\t[call.deliveryId, utf16SortKey(call.deliveryId), call.subscriptionId, call.eventId, call.tenantId, call.spaceId,\n\t\t\t\t\t\tcall.eligibilityRevision, serializeJson(call.body), job.anchorMs, call.availableAtMs, call.createdAtMs, call.processingDeadlineMs],\n\t\t\t\t)).rows.length === 1;\n\t\t\t\treturn { purgedThroughMs, job, tombstone, inserted };\n\t\t\t},\n\t\t\tasync (_tx, nowMs, locked, control) => {\n\t\t\t\t// The memory store's order: lease, scope, horizon, uniqueness, deliveryId.\n\t\t\t\tconst job = locked.job;\n\t\t\t\tif (job === undefined) return fencedOutcome(\"lease_lost\");\n\t\t\t\t// Expiry is judged here, on the store's clock read after every lock.\n\t\t\t\tif (!holds(job, call.parent.owner, call.parent.fence, nowMs)) {\n\t\t\t\t\tcontrol.abandon();\n\t\t\t\t\treturn fencedOutcome(\"lease_lost\");\n\t\t\t\t}\n\t\t\t\tif (!inScope(job, call)) throw storeError(\"record_mismatch\", \"intent.tenantId\");\n\t\t\t\tif (job.anchorMs < this.#floorMs(nowMs, locked.purgedThroughMs)) {\n\t\t\t\t\tcontrol.abandon();\n\t\t\t\t\treturn fencedOutcome(\"past_horizon\");\n\t\t\t\t}\n\t\t\t\tif (!locked.tombstone) return fencedOutcome(\"already_present\");\n\t\t\t\t// The tombstone written above is rolled back with this throw.\n\t\t\t\tif (!locked.inserted) throw storeError(\"delivery_id_conflict\", \"intent.deliveryId\");\n\t\t\t\tawait this.#pause(\"insertDeliveryIntent\", \"written\");\n\t\t\t\treturn fencedOutcome(\"inserted\");\n\t\t\t},\n\t\t);\n\t}\n\n\tasync recordAdmissionDenial(\n\t\trecord: WebhookAdmissionDenialRecord,\n\t\tparent: WebhookFanOutJobFence,\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookFencedInsertResult> {\n\t\tconst call = readDenialCall(record, parent, options);\n\t\treturn this.#write(\n\t\t\t\"recordAdmissionDenial\",\n\t\t\tcall.bounds,\n\t\t\tasync (tx) => {\n\t\t\t\tconst purgedThroughMs = await this.#lockHorizon(tx, \"share\");\n\t\t\t\tconst job = await this.#parentJob(tx, call.parent);\n\t\t\t\tawait this.#pause(\"recordAdmissionDenial\", \"locked\");\n\t\t\t\tif (job === undefined || !inScope(job, call)) return { purgedThroughMs, job, tombstone: false };\n\t\t\t\t// Tentative, as in insertDeliveryIntent. Once the tombstone is ours,\n\t\t\t\t// no other transaction can be inserting this pair's denial.\n\t\t\t\tconst tombstone = await this.#insertTombstone(tx, \"denial\", call, job.anchorMs);\n\t\t\t\tif (tombstone) {\n\t\t\t\t\tawait tx.query(\n\t\t\t\t\t\t`INSERT INTO ${this.#t.denials} (subscription_id, event_id, sort_key, tenant_id, space_id, record, anchor_ms)\n\t\t\t\t\t\t VALUES ($1, $2, $3, $4, $5, $6::json, $7)`,\n\t\t\t\t\t\t[call.subscriptionId, call.eventId, utf16SortKey(markerKey(call.subscriptionId, call.eventId)), call.tenantId, call.spaceId,\n\t\t\t\t\t\t\tserializeJson(denialRecord(call)), job.anchorMs],\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\treturn { purgedThroughMs, job, tombstone };\n\t\t\t},\n\t\t\tasync (_tx, nowMs, locked, control) => {\n\t\t\t\tconst job = locked.job;\n\t\t\t\tif (job === undefined) return fencedOutcome(\"lease_lost\");\n\t\t\t\t// Expiry is judged here, on the store's clock read after every lock.\n\t\t\t\tif (!holds(job, call.parent.owner, call.parent.fence, nowMs)) {\n\t\t\t\t\tcontrol.abandon();\n\t\t\t\t\treturn fencedOutcome(\"lease_lost\");\n\t\t\t\t}\n\t\t\t\tif (!inScope(job, call)) throw storeError(\"record_mismatch\", \"record.tenantId\");\n\t\t\t\tif (job.anchorMs < this.#floorMs(nowMs, locked.purgedThroughMs)) {\n\t\t\t\t\tcontrol.abandon();\n\t\t\t\t\treturn fencedOutcome(\"past_horizon\");\n\t\t\t\t}\n\t\t\t\tif (!locked.tombstone) return fencedOutcome(\"already_present\");\n\t\t\t\tawait this.#pause(\"recordAdmissionDenial\", \"written\");\n\t\t\t\treturn fencedOutcome(\"inserted\");\n\t\t\t},\n\t\t);\n\t}\n\n\t/**\n\t * The parent job if `fence` still holds its lease, expiry not yet\n\t * judged: that needs the store's clock, which is read only after every\n\t * lock is held, so the insert's body checks it (`holds`) and rolls the\n\t * tentative insert back when the lease has expired. `FOR SHARE` keeps a\n\t * reclaim, a completion or any other update of the job waiting until\n\t * this transaction ends, while other inserts under the same lease proceed.\n\t */\n\tasync #parentJob(tx: WebhookPostgresQueryable, fence: WebhookFanOutJobFence): Promise<JobState | undefined> {\n\t\tconst job = await this.#lockJob(tx, fence.eventId, \"SHARE\");\n\t\treturn job !== undefined && holdsFence(job, fence.owner, fence.fence) ? job : undefined;\n\t}\n\n\t/**\n\t * Insert the (subscriptionId, eventId) tombstone, or report that one\n\t * exists. A concurrent insert of the same pair waits on the primary key\n\t * and then finds it, so of two racing inserts exactly one gets `true`.\n\t */\n\tasync #insertTombstone(\n\t\ttx: WebhookPostgresQueryable,\n\t\tkind: MarkerState[\"kind\"],\n\t\tcall: { readonly subscriptionId: string; readonly eventId: string; readonly tenantId: string; readonly spaceId: string },\n\t\tanchorMs: number,\n\t): Promise<boolean> {\n\t\tconst result = await tx.query(\n\t\t\t`INSERT INTO ${this.#t.tombstones} (subscription_id, event_id, kind, tenant_id, space_id, anchor_ms)\n\t\t\t VALUES ($1, $2, $3, $4, $5, $6) ON CONFLICT (subscription_id, event_id) DO NOTHING RETURNING event_id`,\n\t\t\t[call.subscriptionId, call.eventId, kind, call.tenantId, call.spaceId, anchorMs],\n\t\t);\n\t\treturn result.rows.length === 1;\n\t}\n\n\tasync claimDeliveryIntents(request: WebhookClaimRequest, options: WebhookCallOptions): Promise<readonly WebhookDeliveryIntent[]> {\n\t\tconst call = readClaimCall(request, options);\n\t\tconst claim = call.claim;\n\t\treturn this.#write(\n\t\t\t\"claimDeliveryIntents\",\n\t\t\tcall.bounds,\n\t\t\t// SKIP LOCKED never waits; it leaves rows another transaction holds.\n\t\t\tasync (tx) => (await tx.query(\n\t\t\t\t`SELECT delivery_id FROM ${this.#t.intents}\n\t\t\t\t WHERE status = 'pending' AND available_at_ms <= $1\n\t\t\t\t AND (lease_owner IS NULL OR lease_expires_at_ms <= $1)\n\t\t\t\t ORDER BY available_at_ms, created_at_ms, sort_key\n\t\t\t\t LIMIT $2\n\t\t\t\t FOR UPDATE SKIP LOCKED`,\n\t\t\t\t[claim.nowMs, claim.limit],\n\t\t\t)).rows.map((row) => textOf(row[\"delivery_id\"], \"row.delivery_id\")),\n\t\t\tasync (tx, _nowMs, picked) => {\n\t\t\t\tif (picked.length === 0) return frozenList<WebhookDeliveryIntent>([]);\n\t\t\t\tconst result = await tx.query(\n\t\t\t\t\t`UPDATE ${this.#t.intents} AS intent\n\t\t\t\t\t SET fence = intent.fence + 1, lease_owner = $2, lease_expires_at_ms = $3\n\t\t\t\t\t WHERE intent.delivery_id = ANY($1::text[])\n\t\t\t\t\t RETURNING ${columns(INTENT_COLUMNS, \"intent\")}`,\n\t\t\t\t\t[picked, claim.workerId, claim.nowMs + claim.leaseDurationMs],\n\t\t\t\t);\n\t\t\t\tconst states = claimOrder(result.rows.map(intentFrom));\n\t\t\t\treturn frozenList(states.map((state) => copyOut<WebhookDeliveryIntent>(intentOut(state))));\n\t\t\t},\n\t\t);\n\t}\n\n\tasync renewDeliveryIntentLease(\n\t\tinput: WebhookFencedWrite & { readonly deliveryId: string; readonly leaseDurationMs: number },\n\t\toptions: WebhookCallOptions,\n\t): Promise<boolean> {\n\t\tconst call = readRenewIntentCall(input, options);\n\t\t// Locked FOR UPDATE first; whether the caller holds the lease is decided on the store's clock read after the lock.\n\t\treturn this.#write(\"renewDeliveryIntentLease\", call.bounds, (tx) => this.#lockIntent(tx, call.deliveryId), async (tx, nowMs, intent) => {\n\t\t\tif (intent === undefined || !holds(intent, call.fenced.owner, call.fenced.fence, nowMs)) return false;\n\t\t\tawait tx.query(\n\t\t\t\t`UPDATE ${this.#t.intents} SET lease_expires_at_ms = $2 WHERE delivery_id = $1`,\n\t\t\t\t[intent.key, renewedExpiryMs(intent, call.fenced.nowMs, call.leaseDurationMs)],\n\t\t\t);\n\t\t\treturn true;\n\t\t});\n\t}\n\n\tasync checkDeliveryLease(\n\t\tinput: WebhookScope & { readonly deliveryId: string; readonly owner: string; readonly fence: number; readonly now: Date },\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookDeliveryLeaseCheck> {\n\t\tconst call = readLeaseCheckCall(input, options);\n\t\t// One statement on the pool: it reads the committed current row on the\n\t\t// primary the pool is connected to, and changes nothing.\n\t\treturn this.#read(\"checkDeliveryLease\", call.bounds, async (db) => {\n\t\t\tconst result = await db.query(`SELECT ${columns(INTENT_COLUMNS)} FROM ${this.#t.intents} WHERE delivery_id = $1`, [call.deliveryId]);\n\t\t\treturn leaseCheck(result.rows[0] === undefined ? undefined : intentFrom(result.rows[0]), call);\n\t\t});\n\t}\n\n\tasync appendAttempt(input: WebhookFencedWrite & { readonly attempt: WebhookDeliveryAttemptRecord }, options: WebhookCallOptions): Promise<boolean> {\n\t\tconst call = readAppendAttemptCall(input, options);\n\t\treturn this.#write(\"appendAttempt\", call.bounds, (tx) => this.#lockIntent(tx, call.deliveryId), async (tx, nowMs, intent) => {\n\t\t\tif (intent === undefined || !holds(intent, call.fenced.owner, call.fenced.fence, nowMs)) return false;\n\t\t\tif (call.subscriptionId !== intent.subscriptionId) throw storeError(\"record_mismatch\", \"input.attempt.subscriptionId\");\n\t\t\tif (call.eventId !== intent.eventId) throw storeError(\"record_mismatch\", \"input.attempt.eventId\");\n\t\t\tawait tx.query(\n\t\t\t\t`INSERT INTO ${this.#t.attempts} (delivery_id, tenant_id, space_id, record) VALUES ($1, $2, $3, $4::json)`,\n\t\t\t\t[call.deliveryId, intent.tenantId, intent.spaceId, serializeJson(call.record)],\n\t\t\t);\n\t\t\treturn true;\n\t\t});\n\t}\n\n\tasync beginAttempt(input: WebhookFencedWrite & { readonly attempt: WebhookDeliveryAttemptStart }, options: WebhookCallOptions): Promise<WebhookAttemptBeginResult> {\n\t\tconst call = readBeginAttemptCall(input, options);\n\t\t// Made before the transaction; only its digest is stored.\n\t\tconst receipt = await storeCall(newAttemptReceipt);\n\t\t// The intent row is locked FOR UPDATE first, so a concurrent begin, settle,\n\t\t// cancel or reclaim of this intent waits; lease expiry is then judged on\n\t\t// the store's clock read after the lock. The begun row is keyed by\n\t\t// (delivery_id, fence) and only this lease holder can insert it.\n\t\treturn this.#write(\"beginAttempt\", call.bounds, (tx) => this.#lockIntent(tx, call.deliveryId), async (tx, nowMs, intent) => {\n\t\t\tif (!mayBegin(intent, call.fenced, nowMs)) return beginResult(undefined);\n\t\t\tif (call.subscriptionId !== intent.subscriptionId) throw storeError(\"record_mismatch\", \"input.attempt.subscriptionId\");\n\t\t\tif (call.eventId !== intent.eventId) throw storeError(\"record_mismatch\", \"input.attempt.eventId\");\n\t\t\tconst inserted = await tx.query(\n\t\t\t\t`INSERT INTO ${this.#t.attempts} (delivery_id, tenant_id, space_id, record, fence, receipt_digest) VALUES ($1, $2, $3, $4::json, $5, $6)\n\t\t\t\t ON CONFLICT (delivery_id, fence) WHERE fence IS NOT NULL DO NOTHING RETURNING seq`,\n\t\t\t\t[call.deliveryId, intent.tenantId, intent.spaceId, serializeJson(call.record), call.fenced.fence, receipt.digest],\n\t\t\t);\n\t\t\treturn beginResult(inserted.rows.length === 1 ? receipt.receipt : undefined);\n\t\t});\n\t}\n\n\tasync finishAttempt(\n\t\tinput: WebhookScope & { readonly deliveryId: string; readonly fence: number; readonly receipt: string; readonly finish: WebhookDeliveryAttemptFinish },\n\t\toptions: WebhookCallOptions,\n\t): Promise<boolean> {\n\t\tconst call = readFinishAttemptCall(input, options);\n\t\tconst digest = await storeCall(() => attemptReceiptDigest(call.receipt));\n\t\treturn this.#write(\n\t\t\t\"finishAttempt\",\n\t\t\tcall.bounds,\n\t\t\t// Unfenced: it reads only the begun attempt (rows that never change)\n\t\t\t// and never touches the intent row. The outcome insert can wait on a\n\t\t\t// concurrent insert of the same key, so it runs here, before the clock.\n\t\t\tasync (tx) => {\n\t\t\t\tconst begun = await tx.query(\n\t\t\t\t\t`SELECT 1 FROM ${this.#t.attempts}\n\t\t\t\t\t WHERE delivery_id = $1 AND fence = $2 AND tenant_id = $3 AND space_id = $4 AND receipt_digest = $5`,\n\t\t\t\t\t[call.deliveryId, call.fence, call.scope.tenantId, call.scope.spaceId, digest],\n\t\t\t\t);\n\t\t\t\tif (begun.rows.length === 0) return false;\n\t\t\t\tconst inserted = await tx.query(\n\t\t\t\t\t`INSERT INTO ${this.#t.outcomes} (delivery_id, fence, tenant_id, space_id, record) VALUES ($1, $2, $3, $4, $5::json)\n\t\t\t\t\t ON CONFLICT (delivery_id, fence) DO NOTHING RETURNING fence`,\n\t\t\t\t\t[call.deliveryId, call.fence, call.scope.tenantId, call.scope.spaceId, serializeJson(call.record)],\n\t\t\t\t);\n\t\t\t\treturn inserted.rows.length === 1;\n\t\t\t},\n\t\t\tasync (_tx, _nowMs, inserted) => inserted,\n\t\t);\n\t}\n\n\tasync settleDeliveryIntent(\n\t\tinput: Parameters<WebhookDeliveryStore[\"settleDeliveryIntent\"]>[0],\n\t\toptions: WebhookCallOptions,\n\t): Promise<boolean> {\n\t\tconst call = readSettleCall(input, options);\n\t\treturn this.#write(\"settleDeliveryIntent\", call.bounds, (tx) => this.#lockIntent(tx, call.deliveryId), async (tx, nowMs, intent) => {\n\t\t\tif (intent === undefined || !holds(intent, call.fenced.owner, call.fenced.fence, nowMs)) return false;\n\t\t\tapplySettlement(intent, call.settlement);\n\t\t\tawait tx.query(\n\t\t\t\t`UPDATE ${this.#t.intents}\n\t\t\t\t SET status = $2, attempt_count = $3, available_at_ms = $4, last_outcome = $5, last_reason = $6,\n\t\t\t\t last_diagnostic = $7, lease_owner = NULL, lease_expires_at_ms = NULL\n\t\t\t\t WHERE delivery_id = $1`,\n\t\t\t\t[intent.key, intent.status, intent.attemptCount, intent.availableAtMs, intent.lastOutcome?.outcome ?? null,\n\t\t\t\t\tintent.lastOutcome?.reason ?? null, intent.lastDiagnostic ?? null],\n\t\t\t);\n\t\t\treturn true;\n\t\t});\n\t}\n\n\tasync cancelPendingIntents(\n\t\tinput: Parameters<WebhookDeliveryStore[\"cancelPendingIntents\"]>[0],\n\t\toptions: WebhookCallOptions,\n\t): Promise<number> {\n\t\tconst call = readCancelCall(input, options);\n\t\treturn this.#write(\n\t\t\t\"cancelPendingIntents\",\n\t\t\tcall.bounds,\n\t\t\t// Lock every matching pending intent first. A row another transaction\n\t\t\t// settles while this waits is re-checked by PostgreSQL and left out.\n\t\t\tasync (tx) => (await tx.query(\n\t\t\t\t`SELECT delivery_id FROM ${this.#t.intents}\n\t\t\t\t WHERE tenant_id = $1 AND space_id = $2 AND subscription_id = $3 AND status = 'pending' AND eligibility_revision < $4\n\t\t\t\t FOR UPDATE`,\n\t\t\t\t[call.scope.tenantId, call.scope.spaceId, call.subscriptionId, call.beforeRevision],\n\t\t\t)).rows.map((row) => textOf(row[\"delivery_id\"], \"row.delivery_id\")),\n\t\t\tasync (tx, _nowMs, locked) => {\n\t\t\t\tif (locked.length === 0) return 0;\n\t\t\t\tconst result = await tx.query(\n\t\t\t\t\t`UPDATE ${this.#t.intents}\n\t\t\t\t\t SET status = 'cancelled', last_outcome = 'cancelled', last_reason = $2, lease_owner = NULL, lease_expires_at_ms = NULL\n\t\t\t\t\t WHERE delivery_id = ANY($1::text[]) AND status = 'pending'\n\t\t\t\t\t RETURNING delivery_id`,\n\t\t\t\t\t[locked, call.reason],\n\t\t\t\t);\n\t\t\t\treturn result.rows.length;\n\t\t\t},\n\t\t);\n\t}\n\n\tasync requeueDeliveryIntent(\n\t\tinput: WebhookScope & { readonly deliveryId: string; readonly request: WebhookRequeueRequest },\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookRequeueResult> {\n\t\tconst call = readIntentRequeueCall(input, options);\n\t\treturn this.#write(\n\t\t\t\"requeueDeliveryIntent\",\n\t\t\tcall.bounds,\n\t\t\tasync (tx) => {\n\t\t\t\tconst purgedThroughMs = await this.#lockHorizon(tx, \"share\");\n\t\t\t\tconst intent = await this.#lockIntent(tx, call.deliveryId);\n\t\t\t\tconst prior = await this.#priorEvidence(tx, call.scope, call.request.actionInvocationId, { target: \"delivery_intent\", deliveryId: call.deliveryId });\n\t\t\t\tawait this.#pause(\"requeueDeliveryIntent\", \"locked\");\n\t\t\t\treturn { purgedThroughMs, intent, prior };\n\t\t\t},\n\t\t\tasync (tx, nowMs, { purgedThroughMs, intent, prior }) => {\n\t\t\t\tif (prior !== undefined) return replayedResult<WebhookRequeueResult>(prior);\n\t\t\t\tif (intent === undefined || !inScope(intent, call.scope)) return requeueRefused(\"not_found\");\n\t\t\t\tconst refusal = requeueRefusal(intent, call.request, this.#floorMs(nowMs, purgedThroughMs));\n\t\t\t\tif (refusal !== undefined) return requeueRefused(refusal);\n\t\t\t\tconst evidence = intentRequeueEvidence(intent, call.request, nowMs);\n\t\t\t\tconst result = copyOut<WebhookRequeueResult>({ applied: true, evidence });\n\t\t\t\tapplyRequeue(intent, call.request);\n\t\t\t\tawait tx.query(\n\t\t\t\t\t`UPDATE ${this.#t.intents}\n\t\t\t\t\t SET status = 'pending', attempt_count = $2, available_at_ms = $3, processing_deadline_ms = $4,\n\t\t\t\t\t fence = $5, lease_owner = NULL, lease_expires_at_ms = NULL\n\t\t\t\t\t WHERE delivery_id = $1`,\n\t\t\t\t\t[intent.key, intent.attemptCount, intent.availableAtMs, intent.processingDeadlineMs, intent.fence],\n\t\t\t\t);\n\t\t\t\tawait this.#appendEvidence(tx, intent.eventId, intent.tenantId, intent.spaceId, evidence);\n\t\t\t\tawait this.#pause(\"requeueDeliveryIntent\", \"written\");\n\t\t\t\treturn result;\n\t\t\t},\n\t\t);\n\t}\n\n\tasync readDeliveryIntent(input: WebhookScope & { readonly deliveryId: string }, options: WebhookCallOptions): Promise<WebhookDeliveryIntent | null> {\n\t\tconst call = readDeliveryCall(input, options);\n\t\treturn this.#read(\"readDeliveryIntent\", call.bounds, async (db) => {\n\t\t\tconst result = await db.query(\n\t\t\t\t`SELECT ${columns(INTENT_COLUMNS)} FROM ${this.#t.intents} WHERE delivery_id = $1 AND tenant_id = $2 AND space_id = $3`,\n\t\t\t\t[call.deliveryId, call.scope.tenantId, call.scope.spaceId],\n\t\t\t);\n\t\t\treturn result.rows[0] === undefined ? null : copyOut<WebhookDeliveryIntent>(intentOut(intentFrom(result.rows[0])));\n\t\t});\n\t}\n\n\tasync listDeliveryAttempts(\n\t\tinput: WebhookScope & { readonly deliveryId: string },\n\t\toptions: WebhookCallOptions,\n\t): Promise<readonly WebhookDeliveryAttemptLogEntry[]> {\n\t\tconst call = readDeliveryCall(input, options);\n\t\treturn this.#read(\"listDeliveryAttempts\", call.bounds, async (db) => {\n\t\t\t// One statement, so the log and the outcomes come from one snapshot.\n\t\t\tconst result = await db.query(\n\t\t\t\t`SELECT attempt.record::text AS record, attempt.fence::text AS fence, outcome.record::text AS outcome\n\t\t\t\t FROM ${this.#t.attempts} AS attempt\n\t\t\t\t LEFT JOIN ${this.#t.outcomes} AS outcome ON outcome.delivery_id = attempt.delivery_id AND outcome.fence = attempt.fence\n\t\t\t\t WHERE attempt.delivery_id = $1 AND attempt.tenant_id = $2 AND attempt.space_id = $3 ORDER BY attempt.seq`,\n\t\t\t\t[call.deliveryId, call.scope.tenantId, call.scope.spaceId],\n\t\t\t);\n\t\t\treturn copyOut<readonly WebhookDeliveryAttemptLogEntry[]>(result.rows.map((row) => attemptEntryOut(\n\t\t\t\tjsonOf(row[\"record\"], \"row.record\") as Snapshot,\n\t\t\t\toptionalIntOf(row[\"fence\"], \"row.fence\"),\n\t\t\t\trow[\"outcome\"] === null || row[\"outcome\"] === undefined ? undefined : jsonOf(row[\"outcome\"], \"row.outcome\") as Snapshot,\n\t\t\t)));\n\t\t});\n\t}\n\n\tasync listRequeueEvidence(input: WebhookScope & { readonly eventId: string }, options: WebhookCallOptions): Promise<readonly WebhookRequeueEvidence[]> {\n\t\tconst call = readEventCall(input, options);\n\t\treturn this.#read(\"listRequeueEvidence\", call.bounds, async (db) => {\n\t\t\tconst result = await db.query(\n\t\t\t\t`SELECT record::text AS record FROM ${this.#t.evidence}\n\t\t\t\t WHERE event_id = $1 AND tenant_id = $2 AND space_id = $3 ORDER BY seq`,\n\t\t\t\t[call.eventId, call.scope.tenantId, call.scope.spaceId],\n\t\t\t);\n\t\t\treturn copyOut<readonly WebhookRequeueEvidence[]>(result.rows.map((row) => jsonOf(row[\"record\"], \"row.record\")));\n\t\t});\n\t}\n\n\tasync listInvocationRequeueEvidence(\n\t\tinput: WebhookScope & { readonly actionInvocationId: string },\n\t\toptions: WebhookCallOptions,\n\t): Promise<readonly WebhookRequeueEvidence[]> {\n\t\tconst call = readInvocationEvidenceCall(input, options);\n\t\treturn this.#read(\"listInvocationRequeueEvidence\", call.bounds, async (db) => {\n\t\t\tconst result = await db.query(\n\t\t\t\t`SELECT record::text AS record FROM ${this.#t.evidence}\n\t\t\t\t WHERE tenant_id = $1 AND space_id = $2 AND action_invocation_id = $3 ORDER BY seq`,\n\t\t\t\t[call.scope.tenantId, call.scope.spaceId, call.actionInvocationId],\n\t\t\t);\n\t\t\treturn copyOut<readonly WebhookRequeueEvidence[]>(result.rows.map((row) => jsonOf(row[\"record\"], \"row.record\")));\n\t\t});\n\t}\n\n\tasync readTombstone(\n\t\tinput: WebhookScope & { readonly subscriptionId: string; readonly eventId: string },\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookTombstone | null> {\n\t\tconst call = readTombstoneCall(input, options);\n\t\treturn this.#read(\"readTombstone\", call.bounds, async (db) => {\n\t\t\tconst result = await db.query(\n\t\t\t\t`SELECT kind, subscription_id, event_id, tenant_id, space_id, anchor_ms::text AS anchor_ms FROM ${this.#t.tombstones}\n\t\t\t\t WHERE subscription_id = $1 AND event_id = $2 AND tenant_id = $3 AND space_id = $4`,\n\t\t\t\t[call.subscriptionId, call.eventId, call.scope.tenantId, call.scope.spaceId],\n\t\t\t);\n\t\t\tconst row = result.rows[0];\n\t\t\tif (row === undefined) return null;\n\t\t\tconst marker: MarkerState = {\n\t\t\t\tkind: textOf(row[\"kind\"], \"row.kind\") as MarkerState[\"kind\"],\n\t\t\t\tsubscriptionId: textOf(row[\"subscription_id\"], \"row.subscription_id\"),\n\t\t\t\teventId: textOf(row[\"event_id\"], \"row.event_id\"),\n\t\t\t\ttenantId: textOf(row[\"tenant_id\"], \"row.tenant_id\"),\n\t\t\t\tspaceId: textOf(row[\"space_id\"], \"row.space_id\"),\n\t\t\t\tanchorMs: intOf(row[\"anchor_ms\"], \"row.anchor_ms\"),\n\t\t\t};\n\t\t\treturn copyOut<WebhookTombstone>(tombstoneOut(marker, this.#horizonMs));\n\t\t});\n\t}\n\n\tasync purgeExpiredRecords(input: { readonly limit: number }, options: WebhookCallOptions): Promise<WebhookPurgeResult> {\n\t\tconst call = readPurgeCall(input, options);\n\t\treturn this.#write(\"purgeExpiredRecords\", call.bounds, async (tx) => {\n\t\t\tconst purgedThroughMs = await this.#lockHorizon(tx, \"exclusive\");\n\t\t\tawait this.#pause(\"purgeExpiredRecords\", \"locked\");\n\t\t\treturn purgedThroughMs;\n\t\t}, async (tx, nowMs, purgedThroughMs) => {\n\t\t\t// Which records to remove depends on the cutoff, and so on the clock,\n\t\t\t// so the purge cannot lock them before reading it. Its DELETEs can\n\t\t\t// wait on a row lock (a settle or append holding a terminal record);\n\t\t\t// runWrite's check before COMMIT refuses the purge if its signal\n\t\t\t// aborted or its deadline passed meanwhile. A wait only makes the\n\t\t\t// cutoff older than the clock at commit, which removes less, never more.\n\t\t\tconst cutoffMs = this.#floorMs(nowMs, purgedThroughMs);\n\t\t\tconst cutoff = isoOf(cutoffMs);\n\t\t\t// The memory store's candidate order: oldest anchor, then jobs,\n\t\t\t// denials and intents, then key in UTF-16 order. One more than the\n\t\t\t// limit is read, to answer `more`.\n\t\t\tconst candidates = await tx.query(\n\t\t\t\t`SELECT rank, key, subscription_id FROM (\n\t\t\t\t\tSELECT 0 AS rank, event_id AS key, NULL::text AS subscription_id, anchor_ms, sort_key\n\t\t\t\t\tFROM ${this.#t.jobs} WHERE anchor_ms < $1 AND status = ANY($3::text[])\n\t\t\t\t\tUNION ALL\n\t\t\t\t\tSELECT 1, event_id, subscription_id, anchor_ms, sort_key\n\t\t\t\t\tFROM ${this.#t.denials} WHERE anchor_ms < $1\n\t\t\t\t\tUNION ALL\n\t\t\t\t\tSELECT 2, delivery_id, NULL::text, anchor_ms, sort_key\n\t\t\t\t\tFROM ${this.#t.intents} WHERE anchor_ms < $1 AND status = ANY($4::text[])\n\t\t\t\t) AS candidate\n\t\t\t\tORDER BY anchor_ms, rank, sort_key\n\t\t\t\tLIMIT $2`,\n\t\t\t\t[cutoffMs, call.limit + 1, [...TERMINAL_JOB], [...TERMINAL_INTENT]],\n\t\t\t);\n\t\t\tconst take = candidates.rows.length < call.limit ? candidates.rows.length : call.limit;\n\t\t\tconst jobs: string[] = [];\n\t\t\tconst denialSubscriptions: string[] = [];\n\t\t\tconst denialEvents: string[] = [];\n\t\t\tconst intents: string[] = [];\n\t\t\tfor (let index = 0; index < take; index += 1) {\n\t\t\t\tconst row = candidates.rows[index]!;\n\t\t\t\tconst rank = intOf(row[\"rank\"], \"row.rank\");\n\t\t\t\tconst key = textOf(row[\"key\"], \"row.key\");\n\t\t\t\tif (rank === 0) jobs.push(key);\n\t\t\t\telse if (rank === 1) {\n\t\t\t\t\tdenialSubscriptions.push(textOf(row[\"subscription_id\"], \"row.subscription_id\"));\n\t\t\t\t\tdenialEvents.push(key);\n\t\t\t\t} else intents.push(key);\n\t\t\t}\n\t\t\t// Each DELETE repeats the terminal-status condition and the counts\n\t\t\t// are what was deleted. Under the horizon lock no requeue can move a\n\t\t\t// candidate back to pending in between, so they equal the candidate\n\t\t\t// counts; the repeat keeps a pending record from ever being removed.\n\t\t\tconst removed = { fanOutJobs: 0, deliveryIntents: 0, admissionDenials: 0 };\n\t\t\tif (jobs.length > 0) {\n\t\t\t\tconst deleted = await tx.query(\n\t\t\t\t\t`DELETE FROM ${this.#t.jobs} WHERE event_id = ANY($1::text[]) AND status = ANY($2::text[]) RETURNING event_id`,\n\t\t\t\t\t[jobs, [...TERMINAL_JOB]],\n\t\t\t\t);\n\t\t\t\tremoved.fanOutJobs = deleted.rows.length;\n\t\t\t}\n\t\t\tif (denialEvents.length > 0) {\n\t\t\t\tconst deleted = await tx.query(\n\t\t\t\t\t`WITH removed AS (\n\t\t\t\t\t\tDELETE FROM ${this.#t.denials} AS target USING unnest($1::text[], $2::text[]) AS pair(subscription_id, event_id)\n\t\t\t\t\t\tWHERE target.subscription_id = pair.subscription_id AND target.event_id = pair.event_id\n\t\t\t\t\t\tRETURNING target.subscription_id, target.event_id\n\t\t\t\t\t), tombstones AS (\n\t\t\t\t\t\tDELETE FROM ${this.#t.tombstones} AS target USING removed\n\t\t\t\t\t\tWHERE target.subscription_id = removed.subscription_id AND target.event_id = removed.event_id\n\t\t\t\t\t)\n\t\t\t\t\tSELECT count(*)::text AS removed FROM removed`,\n\t\t\t\t\t[denialSubscriptions, denialEvents],\n\t\t\t\t);\n\t\t\t\tremoved.admissionDenials = intOf(deleted.rows[0]?.[\"removed\"], \"row.removed\");\n\t\t\t}\n\t\t\tif (intents.length > 0) {\n\t\t\t\tconst deleted = await tx.query(\n\t\t\t\t\t`WITH removed AS (\n\t\t\t\t\t\tDELETE FROM ${this.#t.intents} WHERE delivery_id = ANY($1::text[]) AND status = ANY($2::text[])\n\t\t\t\t\t\tRETURNING subscription_id, event_id\n\t\t\t\t\t), tombstones AS (\n\t\t\t\t\t\tDELETE FROM ${this.#t.tombstones} AS target USING removed\n\t\t\t\t\t\tWHERE target.subscription_id = removed.subscription_id AND target.event_id = removed.event_id\n\t\t\t\t\t)\n\t\t\t\t\tSELECT count(*)::text AS removed FROM removed`,\n\t\t\t\t\t[intents, [...TERMINAL_INTENT]],\n\t\t\t\t);\n\t\t\t\tremoved.deliveryIntents = intOf(deleted.rows[0]?.[\"removed\"], \"row.removed\");\n\t\t\t}\n\t\t\tconst result = copyOut<WebhookPurgeResult>({ cutoff, removed, more: candidates.rows.length > take });\n\t\t\t// Raise the floor in the same transaction as the removals: once this\n\t\t\t// commits, no insert or requeue can recreate anything below it.\n\t\t\tawait tx.query(`UPDATE ${this.#t.horizon} SET purged_through_ms = $1`, [cutoffMs]);\n\t\t\tawait this.#pause(\"purgeExpiredRecords\", \"written\");\n\t\t\treturn result;\n\t\t});\n\t}\n}\n","import { readHookOption } from \"./delivery-store-core\";\nimport { guard, storeError } from \"./errors\";\nimport type {\n\tWebhookCallOptions,\n\tWebhookClock,\n\tWebhookConfigurationWriteResult,\n\tWebhookScope,\n\tWebhookSubscriptionStore,\n\tWebhookSubscriptionTransitionInput,\n\tWebhookSubscriptionWriteResult,\n\tWebhookSubscriptionWriter,\n} from \"./ports\";\nimport {\n\tapplyWebhookMigrations,\n\tawaitHook,\n\tintOf,\n\tjsonOf,\n\toptionalIntOf,\n\treadPoolOption,\n\treadSchemaOption,\n\trunRead,\n\trunWrite,\n\ttextOf,\n\ttype WebhookPostgresMigration,\n\ttype WebhookPostgresPool,\n\ttype WebhookPostgresQueryable,\n} from \"./postgres-sql\";\nimport { serializeJson } from \"./snapshot\";\nimport { captureClock, type CallBounds, type CapturedClock } from \"./store-input\";\nimport {\n\tcompareText,\n\tconfigurationOut,\n\tcopyOut,\n\tdecideTransition,\n\tDELETE,\n\tPAUSE,\n\treadChangePatternsCall,\n\treadCreateCall,\n\treadReplaceConfigurationCall,\n\treadRevisionsAtCall,\n\treadStatusChangeCall,\n\treadTargetCall,\n\trefused,\n\tRESUME,\n\trevisionOut,\n\tstatusRevisionChange,\n\ttype RevisionChange,\n\ttype RevisionState,\n\ttype StatusChange,\n\ttype Target,\n} from \"./subscription-store-core\";\nimport type {\n\tWebhookDeliveryConfiguration,\n\tWebhookDeliveryConfigurationInput,\n\tWebhookEligibilityRevision,\n\tWebhookSignatureScheme,\n\tWebhookSubscriptionSnapshot,\n\tWebhookSubscriptionStatus,\n} from \"./types\";\n\n/*\n * PostgreSQL subscription store: the read port and the writer port, like\n * the memory subscription store, with the same input readers and transition\n * rules (src/subscription-store-core.ts). Each write is one READ COMMITTED\n * transaction (`runWrite` in src/postgres-sql.ts) that first locks the\n * subscription's head row with `SELECT ... FOR UPDATE`, then reads the\n * store's clock and refuses an aborted or expired call, then checks the\n * transition against the current revision and appends, and checks the call\n * bounds once more before COMMIT. Two writes to one subscription therefore\n * run one after the other, so of several racing transitions with the same\n * `expectedRevision` exactly one applies. Create inserts the head row with\n * `ON CONFLICT DO NOTHING` before reading the clock (that insert can wait on\n * a racing create), so of two racing creates exactly one applies. A call\n * whose signal aborts or deadline passes while it waits for the head row\n * commits nothing (\"call bounds while waiting for a lock\" in\n * tests/postgres-live.test.ts). Revisions and configuration versions are\n * only ever inserted; `effectiveUntil` is derived from the next revision\n * when read. This store keeps no replay horizon.\n */\n\n/** Options for {@link PostgresWebhookSubscriptionStore}. */\nexport interface PostgresWebhookSubscriptionStoreOptions {\n\t/** The connection pool, for example a `pg.Pool`. The store never ends it. */\n\treadonly pool: WebhookPostgresPool;\n\t/** The store's clock: every revision takes effect at its time (decision 3). */\n\treadonly clock: WebhookClock;\n\t/** The schema the tables live in, default `fabric_webhook_delivery`. It may be the delivery store's schema. */\n\treadonly schema?: string;\n\t/** Test seam, with the memory store's meaning. Leave it unset outside tests. */\n\treadonly beforeAtomicStep?: (operation: string) => Promise<void> | void;\n}\n\ninterface Tables {\n\treadonly subscriptions: string;\n\treadonly revisions: string;\n\treadonly configurations: string;\n}\n\nconst SUBSCRIPTION_MIGRATIONS: readonly WebhookPostgresMigration[] = Object.freeze([{\n\tversion: 1,\n\tname: \"subscription_baseline\",\n\tsql: `\n\t\tCREATE TABLE {{schema}}.webhook_subscriptions (\n\t\t\ttenant_id text NOT NULL,\n\t\t\tspace_id text NOT NULL,\n\t\t\tsubscription_id text NOT NULL,\n\t\t\tPRIMARY KEY (tenant_id, space_id, subscription_id)\n\t\t);\n\t\tCREATE TABLE {{schema}}.webhook_subscription_revisions (\n\t\t\ttenant_id text NOT NULL,\n\t\t\tspace_id text NOT NULL,\n\t\t\tsubscription_id text NOT NULL,\n\t\t\trevision bigint NOT NULL,\n\t\t\tstatus text NOT NULL CHECK (status IN ('active', 'paused', 'deleted')),\n\t\t\tevent_type_patterns json NOT NULL,\n\t\t\teffective_from_ms bigint NOT NULL,\n\t\t\tPRIMARY KEY (tenant_id, space_id, subscription_id, revision),\n\t\t\tFOREIGN KEY (tenant_id, space_id, subscription_id) REFERENCES {{schema}}.webhook_subscriptions\n\t\t);\n\t\tCREATE INDEX webhook_subscription_revisions_at_idx\n\t\t\tON {{schema}}.webhook_subscription_revisions (tenant_id, space_id, effective_from_ms);\n\t\tCREATE TABLE {{schema}}.webhook_subscription_configurations (\n\t\t\ttenant_id text NOT NULL,\n\t\t\tspace_id text NOT NULL,\n\t\t\tsubscription_id text NOT NULL,\n\t\t\tversion bigint NOT NULL,\n\t\t\tdestination_url json NOT NULL,\n\t\t\tsignature_scheme text NOT NULL,\n\t\t\tsecret_ref json NOT NULL,\n\t\t\tPRIMARY KEY (tenant_id, space_id, subscription_id, version),\n\t\t\tFOREIGN KEY (tenant_id, space_id, subscription_id) REFERENCES {{schema}}.webhook_subscriptions\n\t\t);\n\t`,\n}]);\n\nfunction revisionColumns(alias: string): string {\n\treturn `${alias}.revision::text AS revision, ${alias}.status, ${alias}.event_type_patterns::text AS event_type_patterns, ${alias}.effective_from_ms::text AS effective_from_ms`;\n}\n\nfunction configurationColumns(alias: string): string {\n\treturn `${alias}.version::text AS version, ${alias}.destination_url::text AS destination_url, ${alias}.signature_scheme, ${alias}.secret_ref::text AS secret_ref`;\n}\n\ntype Row = Record<string, unknown>;\n\nfunction revisionFrom(row: Row): RevisionState {\n\tconst patterns = jsonOf(row[\"event_type_patterns\"], \"row.event_type_patterns\");\n\tif (!Array.isArray(patterns) || !patterns.every((pattern) => typeof pattern === \"string\")) throw storeError(\"store_failed\", \"row.event_type_patterns\");\n\treturn {\n\t\trevision: intOf(row[\"revision\"], \"row.revision\"),\n\t\tstatus: textOf(row[\"status\"], \"row.status\") as WebhookSubscriptionStatus,\n\t\teventTypePatterns: patterns as string[],\n\t\teffectiveFromMs: intOf(row[\"effective_from_ms\"], \"row.effective_from_ms\"),\n\t};\n}\n\nfunction configurationFrom(target: Target, row: Row): WebhookDeliveryConfiguration {\n\treturn configurationOut(target, intOf(row[\"version\"], \"row.version\"), {\n\t\tdestinationUrl: textOf(jsonOf(row[\"destination_url\"], \"row.destination_url\"), \"row.destination_url\"),\n\t\tsignatureScheme: textOf(row[\"signature_scheme\"], \"row.signature_scheme\") as WebhookSignatureScheme,\n\t\tsecretRef: textOf(jsonOf(row[\"secret_ref\"], \"row.secret_ref\"), \"row.secret_ref\"),\n\t});\n}\n\n/**\n * A PostgreSQL {@link WebhookSubscriptionStore} and {@link WebhookSubscriptionWriter}.\n * Subscriptions are keyed by (tenantId, spaceId, subscriptionId); a read or\n * write in another scope does not see them. Call {@link ensureSchema} once\n * before use.\n *\n * @throws {WebhookStoreError} `clock_invalid` when `clock` has no `now`\n * function; `input_invalid` when `pool`, `schema` or the test seam is not usable.\n */\nexport class PostgresWebhookSubscriptionStore implements WebhookSubscriptionStore, WebhookSubscriptionWriter {\n\treadonly #pool: WebhookPostgresPool;\n\treadonly #clock: CapturedClock;\n\treadonly #schema: string;\n\treadonly #t: Tables;\n\treadonly #beforeAtomicStep: ((operation: string) => Promise<void> | void) | undefined;\n\n\tconstructor(options: PostgresWebhookSubscriptionStoreOptions) {\n\t\tthis.#clock = guard(() => {\n\t\t\tif (options === null || typeof options !== \"object\") throw storeError(\"clock_invalid\", \"clock\");\n\t\t\treturn captureClock(options.clock);\n\t\t}, () => storeError(\"clock_invalid\", \"clock\"));\n\t\tthis.#pool = readPoolOption(options);\n\t\tthis.#schema = readSchemaOption(options);\n\t\tthis.#t = {\n\t\t\tsubscriptions: `${this.#schema}.webhook_subscriptions`,\n\t\t\trevisions: `${this.#schema}.webhook_subscription_revisions`,\n\t\t\tconfigurations: `${this.#schema}.webhook_subscription_configurations`,\n\t\t};\n\t\tthis.#beforeAtomicStep = readHookOption(options, \"beforeAtomicStep\");\n\t}\n\n\t/** Create the schema and tables, or check the applied migrations. Safe to call concurrently and repeatedly. */\n\tasync ensureSchema(): Promise<void> {\n\t\tawait applyWebhookMigrations(this.#pool, this.#schema, \"subscriptions\", SUBSCRIPTION_MIGRATIONS);\n\t}\n\n\t#boundary(operation: string): Promise<void> {\n\t\tconst hook = this.#beforeAtomicStep;\n\t\treturn awaitHook(hook === undefined ? undefined : () => hook(operation), \"beforeAtomicStep\");\n\t}\n\n\tasync #read<T>(operation: string, bounds: CallBounds, body: (db: WebhookPostgresQueryable) => Promise<T>): Promise<T> {\n\t\tawait this.#boundary(operation);\n\t\treturn runRead(this.#pool, this.#clock, bounds, (db) => body(db));\n\t}\n\n\t/** Lock the subscription's head row; `false` when it does not exist in this scope. */\n\tasync #lockHead(tx: WebhookPostgresQueryable, target: Target): Promise<boolean> {\n\t\tconst result = await tx.query(\n\t\t\t`SELECT 1 FROM ${this.#t.subscriptions} WHERE tenant_id = $1 AND space_id = $2 AND subscription_id = $3 FOR UPDATE`,\n\t\t\t[target.tenantId, target.spaceId, target.subscriptionId],\n\t\t);\n\t\treturn result.rows.length === 1;\n\t}\n\n\tasync #currentRevision(db: WebhookPostgresQueryable, target: Target): Promise<RevisionState | undefined> {\n\t\tconst result = await db.query(\n\t\t\t`SELECT ${revisionColumns(\"revision\")} FROM ${this.#t.revisions} AS revision\n\t\t\t WHERE tenant_id = $1 AND space_id = $2 AND subscription_id = $3 ORDER BY revision.revision DESC LIMIT 1`,\n\t\t\t[target.tenantId, target.spaceId, target.subscriptionId],\n\t\t);\n\t\treturn result.rows[0] === undefined ? undefined : revisionFrom(result.rows[0]);\n\t}\n\n\tasync #currentConfiguration(db: WebhookPostgresQueryable, target: Target): Promise<WebhookDeliveryConfiguration> {\n\t\tconst result = await db.query(\n\t\t\t`SELECT ${configurationColumns(\"configuration\")} FROM ${this.#t.configurations} AS configuration\n\t\t\t WHERE tenant_id = $1 AND space_id = $2 AND subscription_id = $3 ORDER BY configuration.version DESC LIMIT 1`,\n\t\t\t[target.tenantId, target.spaceId, target.subscriptionId],\n\t\t);\n\t\tif (result.rows[0] === undefined) throw storeError(\"store_failed\", \"row.configuration\");\n\t\treturn configurationFrom(target, result.rows[0]);\n\t}\n\n\tasync #insertRevision(tx: WebhookPostgresQueryable, target: Target, revision: RevisionState): Promise<void> {\n\t\tawait tx.query(\n\t\t\t`INSERT INTO ${this.#t.revisions} (tenant_id, space_id, subscription_id, revision, status, event_type_patterns, effective_from_ms)\n\t\t\t VALUES ($1, $2, $3, $4, $5, $6::json, $7)`,\n\t\t\t[target.tenantId, target.spaceId, target.subscriptionId, revision.revision, revision.status, serializeJson(revision.eventTypePatterns), revision.effectiveFromMs],\n\t\t);\n\t}\n\n\tasync #insertConfiguration(tx: WebhookPostgresQueryable, target: Target, version: number, configuration: WebhookDeliveryConfigurationInput): Promise<void> {\n\t\tawait tx.query(\n\t\t\t`INSERT INTO ${this.#t.configurations} (tenant_id, space_id, subscription_id, version, destination_url, signature_scheme, secret_ref)\n\t\t\t VALUES ($1, $2, $3, $4, $5::json, $6, $7::json)`,\n\t\t\t[target.tenantId, target.spaceId, target.subscriptionId, version, serializeJson(configuration.destinationUrl), configuration.signatureScheme, serializeJson(configuration.secretRef)],\n\t\t);\n\t}\n\n\t// -------------------------------------------------------------------------\n\t// Reads\n\t// -------------------------------------------------------------------------\n\n\tasync listEligibilityRevisions(\n\t\tinput: WebhookScope & { readonly recordedAt: string },\n\t\toptions: WebhookCallOptions,\n\t): Promise<readonly WebhookEligibilityRevision[]> {\n\t\tconst call = readRevisionsAtCall(input, options);\n\t\treturn this.#read(\"listEligibilityRevisions\", call.bounds, async (db) => {\n\t\t\t// Per subscription, the latest revision in effect at recordedAt\n\t\t\t// (effectiveFrom <= recordedAt), with its successor's start.\n\t\t\tconst result = await db.query(\n\t\t\t\t`SELECT DISTINCT ON (revision.subscription_id)\n\t\t\t\t\trevision.subscription_id, ${revisionColumns(\"revision\")},\n\t\t\t\t\t(SELECT next.effective_from_ms::text FROM ${this.#t.revisions} AS next\n\t\t\t\t\t WHERE next.tenant_id = revision.tenant_id AND next.space_id = revision.space_id\n\t\t\t\t\t AND next.subscription_id = revision.subscription_id AND next.revision = revision.revision + 1) AS next_from_ms\n\t\t\t\t FROM ${this.#t.revisions} AS revision\n\t\t\t\t WHERE revision.tenant_id = $1 AND revision.space_id = $2 AND revision.effective_from_ms <= $3\n\t\t\t\t ORDER BY revision.subscription_id, revision.revision DESC`,\n\t\t\t\t[call.tenantId, call.spaceId, call.recordedAtMs],\n\t\t\t);\n\t\t\tconst found = result.rows.map((row) => ({\n\t\t\t\ttarget: { tenantId: call.tenantId, spaceId: call.spaceId, subscriptionId: textOf(row[\"subscription_id\"], \"row.subscription_id\") },\n\t\t\t\trevision: revisionFrom(row),\n\t\t\t\tnextFromMs: optionalIntOf(row[\"next_from_ms\"], \"row.next_from_ms\"),\n\t\t\t}))\n\t\t\t\t// Half-open: effectiveFrom <= recordedAt < next.effectiveFrom.\n\t\t\t\t.filter((item) => item.nextFromMs === undefined || call.recordedAtMs < item.nextFromMs)\n\t\t\t\t// The memory store's order (UTF-16 code units), not the database collation.\n\t\t\t\t.sort((left, right) => compareText(left.target.subscriptionId, right.target.subscriptionId));\n\t\t\treturn copyOut<readonly WebhookEligibilityRevision[]>(found.map((item) => revisionOut(item.target, item.revision, item.nextFromMs)));\n\t\t});\n\t}\n\n\tasync readSubscription(\n\t\tinput: WebhookScope & { readonly subscriptionId: string },\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookSubscriptionSnapshot | null> {\n\t\tconst call = readTargetCall(input, options);\n\t\treturn this.#read(\"readSubscription\", call.bounds, async (db) => {\n\t\t\tconst target = call.target;\n\t\t\tconst result = await db.query(\n\t\t\t\t// One statement, so the status and the revision it began at are\n\t\t\t\t// read from one snapshot. `status_since` is one past the last\n\t\t\t\t// revision with another status, or 1 (revisions are numbered\n\t\t\t\t// 1, 2, 3 … with no gaps; subscription-store-core.ts,\n\t\t\t\t// `statusSinceRevision`, is the memory store's twin).\n\t\t\t\t`SELECT current_revision.status, current_revision.status_since::text AS status_since,\n\t\t\t\t\t${configurationColumns(\"current_configuration\")}\n\t\t\t\t FROM ${this.#t.subscriptions} AS subscription\n\t\t\t\t CROSS JOIN LATERAL (\n\t\t\t\t\tSELECT latest.status,\n\t\t\t\t\t\tCOALESCE((\n\t\t\t\t\t\t\tSELECT max(prior.revision) FROM ${this.#t.revisions} AS prior\n\t\t\t\t\t\t\tWHERE prior.tenant_id = subscription.tenant_id AND prior.space_id = subscription.space_id\n\t\t\t\t\t\t\t AND prior.subscription_id = subscription.subscription_id AND prior.status <> latest.status\n\t\t\t\t\t\t), 0) + 1 AS status_since\n\t\t\t\t\tFROM (\n\t\t\t\t\t\tSELECT status FROM ${this.#t.revisions} AS revision\n\t\t\t\t\t\tWHERE revision.tenant_id = subscription.tenant_id AND revision.space_id = subscription.space_id\n\t\t\t\t\t\t AND revision.subscription_id = subscription.subscription_id\n\t\t\t\t\t\tORDER BY revision.revision DESC LIMIT 1\n\t\t\t\t\t) AS latest\n\t\t\t\t ) AS current_revision\n\t\t\t\t CROSS JOIN LATERAL (\n\t\t\t\t\tSELECT * FROM ${this.#t.configurations} AS configuration\n\t\t\t\t\tWHERE configuration.tenant_id = subscription.tenant_id AND configuration.space_id = subscription.space_id\n\t\t\t\t\t AND configuration.subscription_id = subscription.subscription_id\n\t\t\t\t\tORDER BY configuration.version DESC LIMIT 1\n\t\t\t\t ) AS current_configuration\n\t\t\t\t WHERE subscription.tenant_id = $1 AND subscription.space_id = $2 AND subscription.subscription_id = $3`,\n\t\t\t\t[target.tenantId, target.spaceId, target.subscriptionId],\n\t\t\t);\n\t\t\tconst row = result.rows[0];\n\t\t\tif (row === undefined) return null;\n\t\t\treturn copyOut<WebhookSubscriptionSnapshot>({\n\t\t\t\tsubscriptionId: target.subscriptionId,\n\t\t\t\ttenantId: target.tenantId,\n\t\t\t\tspaceId: target.spaceId,\n\t\t\t\tstatus: textOf(row[\"status\"], \"row.status\"),\n\t\t\t\tstatusSinceRevision: intOf(row[\"status_since\"], \"row.status_since\"),\n\t\t\t\tconfiguration: configurationFrom(target, row),\n\t\t\t});\n\t\t});\n\t}\n\n\tasync listEligibilityHistory(\n\t\tinput: WebhookScope & { readonly subscriptionId: string },\n\t\toptions: WebhookCallOptions,\n\t): Promise<readonly WebhookEligibilityRevision[]> {\n\t\tconst call = readTargetCall(input, options);\n\t\treturn this.#read(\"listEligibilityHistory\", call.bounds, async (db) => {\n\t\t\tconst target = call.target;\n\t\t\tconst result = await db.query(\n\t\t\t\t`SELECT ${revisionColumns(\"revision\")} FROM ${this.#t.revisions} AS revision\n\t\t\t\t WHERE tenant_id = $1 AND space_id = $2 AND subscription_id = $3 ORDER BY revision.revision`,\n\t\t\t\t[target.tenantId, target.spaceId, target.subscriptionId],\n\t\t\t);\n\t\t\tconst revisions = result.rows.map(revisionFrom);\n\t\t\treturn copyOut<readonly WebhookEligibilityRevision[]>(revisions.map((revision, index) => revisionOut(target, revision, revisions[index + 1]?.effectiveFromMs)));\n\t\t});\n\t}\n\n\t// -------------------------------------------------------------------------\n\t// Writes\n\t// -------------------------------------------------------------------------\n\n\tasync createSubscription(\n\t\tinput: WebhookScope & {\n\t\t\treadonly subscriptionId: string;\n\t\t\treadonly eventTypePatterns: readonly string[];\n\t\t\treadonly configuration: WebhookDeliveryConfigurationInput;\n\t\t},\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookSubscriptionWriteResult> {\n\t\tconst call = readCreateCall(input, options);\n\t\tawait this.#boundary(\"createSubscription\");\n\t\tconst target = call.target;\n\t\t// The head row is inserted before the clock is read, so the only work\n\t\t// between the clock read and the commit is one statement that writes\n\t\t// revision 1 and configuration version 1 together.\n\t\treturn runWrite(\n\t\t\tthis.#pool,\n\t\t\tthis.#clock,\n\t\t\tcall.bounds,\n\t\t\tasync (tx) => (await tx.query(\n\t\t\t\t`INSERT INTO ${this.#t.subscriptions} (tenant_id, space_id, subscription_id) VALUES ($1, $2, $3)\n\t\t\t\t ON CONFLICT DO NOTHING RETURNING subscription_id`,\n\t\t\t\t[target.tenantId, target.spaceId, target.subscriptionId],\n\t\t\t)).rows.length === 1,\n\t\t\tasync (tx, nowMs, created) => {\n\t\t\t\tif (!created) return refused(\"already_exists\");\n\t\t\t\tconst revision: RevisionState = { revision: 1, status: \"active\", eventTypePatterns: call.patterns, effectiveFromMs: nowMs };\n\t\t\t\tconst configuration = configurationOut(target, 1, call.configuration);\n\t\t\t\tconst result = copyOut<WebhookSubscriptionWriteResult>({ applied: true, revision: revisionOut(target, revision, undefined), configuration });\n\t\t\t\tawait tx.query(\n\t\t\t\t\t`WITH revision AS (\n\t\t\t\t\t\tINSERT INTO ${this.#t.revisions} (tenant_id, space_id, subscription_id, revision, status, event_type_patterns, effective_from_ms)\n\t\t\t\t\t\tVALUES ($1, $2, $3, 1, 'active', $4::json, $5)\n\t\t\t\t\t)\n\t\t\t\t\tINSERT INTO ${this.#t.configurations} (tenant_id, space_id, subscription_id, version, destination_url, signature_scheme, secret_ref)\n\t\t\t\t\tVALUES ($1, $2, $3, 1, $6::json, $7, $8::json)`,\n\t\t\t\t\t[target.tenantId, target.spaceId, target.subscriptionId, serializeJson(call.patterns), nowMs,\n\t\t\t\t\t\tserializeJson(call.configuration.destinationUrl), call.configuration.signatureScheme, serializeJson(call.configuration.secretRef)],\n\t\t\t\t);\n\t\t\t\treturn result;\n\t\t\t},\n\t\t);\n\t}\n\n\tasync changeEventTypePatterns(\n\t\tinput: WebhookSubscriptionTransitionInput & { readonly eventTypePatterns: readonly string[] },\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookSubscriptionWriteResult> {\n\t\tconst call = readChangePatternsCall(input, options);\n\t\tawait this.#boundary(\"changeEventTypePatterns\");\n\t\treturn this.#transition(call.bounds, call.target, call.expectedRevision, (current) => ({ status: current.status, patterns: call.patterns }));\n\t}\n\n\tasync pauseSubscription(input: WebhookSubscriptionTransitionInput, options: WebhookCallOptions): Promise<WebhookSubscriptionWriteResult> {\n\t\treturn this.#statusChange(\"pauseSubscription\", input, options, PAUSE);\n\t}\n\n\tasync resumeSubscription(input: WebhookSubscriptionTransitionInput, options: WebhookCallOptions): Promise<WebhookSubscriptionWriteResult> {\n\t\treturn this.#statusChange(\"resumeSubscription\", input, options, RESUME);\n\t}\n\n\tasync deleteSubscription(input: WebhookSubscriptionTransitionInput, options: WebhookCallOptions): Promise<WebhookSubscriptionWriteResult> {\n\t\treturn this.#statusChange(\"deleteSubscription\", input, options, DELETE);\n\t}\n\n\tasync replaceDeliveryConfiguration(\n\t\tinput: WebhookScope & { readonly subscriptionId: string; readonly configuration: WebhookDeliveryConfigurationInput; readonly expectedVersion?: number },\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookConfigurationWriteResult> {\n\t\tconst call = readReplaceConfigurationCall(input, options);\n\t\tawait this.#boundary(\"replaceDeliveryConfiguration\");\n\t\tconst target = call.target;\n\t\treturn runWrite(this.#pool, this.#clock, call.bounds, (tx) => this.#lockHead(tx, target), async (tx, _nowMs, exists) => {\n\t\t\tif (!exists) return copyOut<WebhookConfigurationWriteResult>({ applied: false, refusal: \"not_found\" });\n\t\t\tconst revision = await this.#currentRevision(tx, target);\n\t\t\tif (revision === undefined) throw storeError(\"store_failed\", \"row.revision\");\n\t\t\tif (revision.status === \"deleted\") return copyOut<WebhookConfigurationWriteResult>({ applied: false, refusal: \"deleted\" });\n\t\t\tconst current = await this.#currentConfiguration(tx, target);\n\t\t\tif (call.expectedVersion !== undefined && call.expectedVersion !== current.version) {\n\t\t\t\treturn copyOut<WebhookConfigurationWriteResult>({ applied: false, refusal: \"version_conflict\", currentVersion: current.version });\n\t\t\t}\n\t\t\tconst configuration = configurationOut(target, current.version + 1, call.configuration);\n\t\t\tconst result = copyOut<WebhookConfigurationWriteResult>({ applied: true, configuration });\n\t\t\tawait this.#insertConfiguration(tx, target, current.version + 1, call.configuration);\n\t\t\treturn result;\n\t\t});\n\t}\n\n\tasync #statusChange(\n\t\toperation: string,\n\t\tinput: WebhookSubscriptionTransitionInput,\n\t\toptions: WebhookCallOptions,\n\t\tnext: StatusChange,\n\t): Promise<WebhookSubscriptionWriteResult> {\n\t\tconst call = readStatusChangeCall(input, options);\n\t\tawait this.#boundary(operation);\n\t\treturn this.#transition(call.bounds, call.target, call.expectedRevision, statusRevisionChange(next));\n\t}\n\n\t/**\n\t * Append one revision, checked against the current revision. The head\n\t * row is locked and the current revision and configuration are read\n\t * before the clock, so the clock read that stamps `effectiveFrom` is\n\t * followed only by the INSERT and the COMMIT.\n\t */\n\t#transition(bounds: CallBounds, target: Target, expectedRevision: number | undefined, change: RevisionChange): Promise<WebhookSubscriptionWriteResult> {\n\t\treturn runWrite(\n\t\t\tthis.#pool,\n\t\t\tthis.#clock,\n\t\t\tbounds,\n\t\t\tasync (tx) => {\n\t\t\t\tif (!(await this.#lockHead(tx, target))) return undefined;\n\t\t\t\tconst current = await this.#currentRevision(tx, target);\n\t\t\t\tif (current === undefined) throw storeError(\"store_failed\", \"row.revision\");\n\t\t\t\treturn { current, configuration: await this.#currentConfiguration(tx, target) };\n\t\t\t},\n\t\t\tasync (tx, nowMs, locked) => {\n\t\t\t\tconst decision = decideTransition(locked?.current, expectedRevision, nowMs, change);\n\t\t\t\tif (\"refusal\" in decision) return decision.refusal;\n\t\t\t\tconst result = copyOut<WebhookSubscriptionWriteResult>({ applied: true, revision: revisionOut(target, decision.appended, undefined), configuration: locked!.configuration });\n\t\t\t\tawait this.#insertRevision(tx, target, decision.appended);\n\t\t\t\treturn result;\n\t\t\t},\n\t\t);\n\t}\n}\n","import { guard, inputError } from \"./errors\";\nimport {\n\tassertDelaySchedule,\n\tassertJitteredScheduleRepresentable,\n\tassertJitterRatio,\n\tDEFAULT_WEBHOOK_DELIVERY_LIMITS,\n} from \"./limits\";\nimport type { WebhookRandomSource, WebhookRetryDelay } from \"./ports\";\nimport { apply, freeze, isPlainRecord, mathFloor, mathMin, numberIsSafeInteger, primitive, primitiveList, readOwn, type Fail } from \"./snapshot\";\n\n/** Options for {@link createWebhookRetryDelay}. */\nexport interface WebhookRetryDelayOptions {\n\t/** Base delays before attempts 2, 3, ...; defaults to the delivery schedule. The last entry repeats. */\n\treadonly delaysMs?: readonly number[];\n\t/** Jitter as a fraction of the base delay, in `(0, 1]`; defaults to 0.1. */\n\treadonly jitterRatio?: number;\n\t/** Random source in `[0, 1)`. Required so jitter is never hidden process state. */\n\treadonly random: WebhookRandomSource;\n}\n\nconst unreadable = (): Error => inputError(\"type\", \"input_unreadable\");\nconst unreadableFail: Fail = () => {\n\tthrow unreadable();\n};\n\n/**\n * Build the retry delay port. For the 1-based number of the attempt that just\n * failed, it returns `base + floor(base * jitterRatio * random())`, so a delay\n * lies in `[base, base * (1 + jitterRatio))` and never shortens the schedule.\n * Exhaustion is decided by `maxDeliveryAttempts`, not here. The options are\n * copied at entry into a snapshot, one descriptor read per option, and the\n * schedule copied by index; the port uses only that validated copy.\n *\n * @throws {WebhookDeliveryConfigError} for an empty or non-positive schedule or jitter.\n * @throws {TypeError} `random_source_missing` without a random source, or\n * `input_unreadable` for options that cannot be read.\n *\n * The port throws `RangeError` `attempt_invalid` or `random_sample_invalid`,\n * and `TypeError` `random_source_failed` when the random source throws; the\n * source's exception is dropped unread.\n */\nexport function createWebhookRetryDelay(options: WebhookRetryDelayOptions): WebhookRetryDelay {\n\treturn guard(() => {\n\t\tif (!isPlainRecord(options)) throw unreadable();\n\t\tconst rawDelays = primitiveList(readOwn(options, \"delaysMs\", \"delaysMs\", unreadableFail), \"delaysMs\", unreadableFail);\n\t\tconst rawJitter = primitive(readOwn(options, \"jitterRatio\", \"jitterRatio\", unreadableFail));\n\t\tconst random = readOwn(options, \"random\", \"random\", unreadableFail);\n\t\tconst delaysMs = rawDelays === undefined ? DEFAULT_WEBHOOK_DELIVERY_LIMITS.deliveryRetryDelaysMs : rawDelays;\n\t\tconst jitterRatio = rawJitter === undefined ? DEFAULT_WEBHOOK_DELIVERY_LIMITS.retryJitterRatio : rawJitter;\n\t\tassertDelaySchedule(delaysMs, \"delaysMs\");\n\t\tassertJitterRatio(jitterRatio, \"jitterRatio\");\n\t\tassertJitteredScheduleRepresentable(delaysMs, jitterRatio, \"delaysMs\");\n\t\tif (typeof random !== \"function\") throw inputError(\"type\", \"random_source_missing\");\n\t\tconst delay = (attempt: number): number =>\n\t\t\tguard(() => {\n\t\t\t\tconst value = primitive(attempt);\n\t\t\t\tif (typeof value !== \"number\" || !numberIsSafeInteger(value) || value < 1) throw inputError(\"range\", \"attempt_invalid\");\n\t\t\t\tconst base = delaysMs[mathMin(value, delaysMs.length) - 1]!;\n\t\t\t\tconst sample = apply(random, undefined, []) as unknown;\n\t\t\t\tif (typeof sample !== \"number\" || !(sample >= 0 && sample < 1)) throw inputError(\"range\", \"random_sample_invalid\");\n\t\t\t\treturn base + mathFloor(base * jitterRatio * sample);\n\t\t\t}, () => inputError(\"type\", \"random_source_failed\"));\n\t\treturn freeze(delay);\n\t}, unreadable);\n}\n","import type { WebhookAttemptOutcome, WebhookAttemptReasonCode } from \"./codes\";\nimport { guard, inputError } from \"./errors\";\nimport { assertPositiveFinite } from \"./limits\";\nimport type { WebhookTransportResult } from \"./ports\";\nimport {\n\tdateParse,\n\tisPlainRecord,\n\tmatches,\n\tmathMax,\n\tmathMin,\n\tNumberConstructor,\n\tnumberIsFinite,\n\tnumberIsSafeInteger,\n\tprimitive,\n\treadOwn,\n\trecord,\n\ttimeOf,\n\ttrim,\n\ttype Fail,\n} from \"./snapshot\";\n\n/**\n * Everything decision 10's table classifies: a transport observation that\n * reached the network, or a check that stopped the attempt. A transport\n * `not_sent` result is not here: the dispatcher releases that intent unsent\n * without spending budget.\n */\nexport type WebhookDeliveryObservation =\n\t| Exclude<WebhookTransportResult, { readonly kind: \"not_sent\" }>\n\t| { readonly kind: \"signer_unavailable\" | \"authorization_revoked\" | \"subscription_paused\" | \"subscription_deleted\" };\n\n/** The classified attempt. */\nexport interface WebhookDeliveryClassification {\n\treadonly outcome: WebhookAttemptOutcome;\n\treadonly reason: WebhookAttemptReasonCode;\n\t/** The HTTP status, when a response was received. */\n\treadonly httpStatus?: number;\n\t/**\n\t * For a 429 with a parseable `Retry-After`: the requested delay, clamped\n\t * to `[0, maxRetryAfterMs]`. The dispatcher is expected to schedule the\n\t * later of this and the retry schedule's delay.\n\t */\n\treadonly retryAfterMs?: number;\n\t/**\n\t * `true` for 401 and 403: still `retryable`, but usually needing the\n\t * receiver to act, so the caller surfaces it to operators before the retry\n\t * budget is exhausted.\n\t */\n\treadonly receiverActionLikely?: true;\n}\n\n/** Inputs the classifier needs beyond the observation. */\nexport interface WebhookClassifyOptions {\n\t/** Used to turn an HTTP-date `Retry-After` into a delay. */\n\treadonly now: Date;\n\t/** Upper bound on an honoured `Retry-After`. */\n\treadonly maxRetryAfterMs: number;\n}\n\n/** The classifier options as snapshotted. `nowMs` is `NaN` unless `now` is a real `Date`. */\ninterface OptionsSnapshot {\n\treadonly nowMs: number;\n\treadonly maxRetryAfterMs: number;\n}\n\nconst unreadable = (): Error => inputError(\"type\", \"input_unreadable\");\nconst unreadableFail: Fail = () => {\n\tthrow unreadable();\n};\n\n/**\n * Classify one attempt by ADR 0018 decision 10:\n *\n * | Observation | Outcome |\n * | --- | --- |\n * | 2xx | `delivered` |\n * | network error, timeout, DNS failure, 408, 425, 429, 5xx, signer unavailable | `retryable` |\n * | 401, 403 | `retryable`, with `receiverActionLikely: true` |\n * | 3xx, 410, other 4xx, invalid URL, private or reserved address | `dead_letter` |\n * | authorization revoked, subscription paused or deleted | `cancelled` |\n *\n * A final 1xx, which the table does not list, is `retryable` (`http_1xx`).\n * The options and the observation are copied into a snapshot at entry,\n * one descriptor read per field; an accessor is refused, not called.\n *\n * @throws {RangeError} `status_out_of_range` for a status that is not a whole number in 100-599.\n * @throws {TypeError} `observation_unknown` for an unknown kind, or\n * `input_unreadable` for an observation or options that cannot be read. The\n * message is constant and never repeats the input.\n * @throws {WebhookDeliveryConfigError} when `maxRetryAfterMs` is not positive and finite.\n */\nexport function classifyWebhookDeliveryObservation(\n\tobservation: WebhookDeliveryObservation,\n\toptions: WebhookClassifyOptions,\n): WebhookDeliveryClassification {\n\treturn guard(() => {\n\t\tconst settings = snapshotOptions(options);\n\t\tif (!isPlainRecord(observation)) throw unreadable();\n\t\tconst kind = primitive(readOwn(observation, \"kind\", \"kind\", unreadableFail));\n\t\tif (kind === \"response\") {\n\t\t\tconst status = primitive(readOwn(observation, \"status\", \"status\", unreadableFail));\n\t\t\tconst retryAfter = primitive(readOwn(observation, \"retryAfter\", \"retryAfter\", unreadableFail));\n\t\t\treturn classifyStatus(status, retryAfter, settings);\n\t\t}\n\t\tswitch (kind) {\n\t\t\tcase \"network_error\":\n\t\t\tcase \"timeout\":\n\t\t\tcase \"dns_failure\":\n\t\t\tcase \"signer_unavailable\":\n\t\t\t\treturn record<WebhookDeliveryClassification>({ outcome: \"retryable\", reason: kind });\n\t\t\tcase \"invalid_url\":\n\t\t\tcase \"private_address\":\n\t\t\t\treturn record<WebhookDeliveryClassification>({ outcome: \"dead_letter\", reason: kind });\n\t\t\tcase \"authorization_revoked\":\n\t\t\tcase \"subscription_paused\":\n\t\t\tcase \"subscription_deleted\":\n\t\t\t\treturn record<WebhookDeliveryClassification>({ outcome: \"cancelled\", reason: kind });\n\t\t\tdefault:\n\t\t\t\tthrow inputError(\"type\", \"observation_unknown\");\n\t\t}\n\t}, unreadable);\n}\n\n/** Snapshot the options and validate the cap. */\nfunction snapshotOptions(options: unknown): OptionsSnapshot {\n\tif (!isPlainRecord(options)) throw unreadable();\n\tconst now = readOwn(options, \"now\", \"now\", unreadableFail);\n\tconst maxRetryAfterMs = primitive(readOwn(options, \"maxRetryAfterMs\", \"maxRetryAfterMs\", unreadableFail));\n\tassertPositiveFinite(maxRetryAfterMs, \"maxRetryAfterMs\");\n\treturn record({ nowMs: timeOf(now), maxRetryAfterMs });\n}\n\nfunction classifyStatus(status: unknown, retryAfter: unknown, settings: OptionsSnapshot): WebhookDeliveryClassification {\n\tif (typeof status !== \"number\" || !numberIsSafeInteger(status) || status < 100 || status > 599) {\n\t\tthrow inputError(\"range\", \"status_out_of_range\");\n\t}\n\tconst httpStatus = status;\n\tconst result = (fields: WebhookDeliveryClassification): WebhookDeliveryClassification => record(fields);\n\tif (status < 200) return result({ outcome: \"retryable\", reason: \"http_1xx\", httpStatus });\n\tif (status < 300) return result({ outcome: \"delivered\", reason: \"http_2xx\", httpStatus });\n\tif (status < 400) return result({ outcome: \"dead_letter\", reason: \"http_3xx\", httpStatus });\n\tif (status >= 500) return result({ outcome: \"retryable\", reason: \"http_5xx\", httpStatus });\n\tswitch (status) {\n\t\tcase 401:\n\t\t\treturn result({ outcome: \"retryable\", reason: \"http_401\", httpStatus, receiverActionLikely: true });\n\t\tcase 403:\n\t\t\treturn result({ outcome: \"retryable\", reason: \"http_403\", httpStatus, receiverActionLikely: true });\n\t\tcase 408:\n\t\t\treturn result({ outcome: \"retryable\", reason: \"http_408\", httpStatus });\n\t\tcase 425:\n\t\t\treturn result({ outcome: \"retryable\", reason: \"http_425\", httpStatus });\n\t\tcase 429:\n\t\t\treturn result({ outcome: \"retryable\", reason: \"http_429\", httpStatus, retryAfterMs: retryAfterMsFrom(retryAfter, settings) });\n\t\tcase 410:\n\t\t\treturn result({ outcome: \"dead_letter\", reason: \"http_410\", httpStatus });\n\t\tdefault:\n\t\t\treturn result({ outcome: \"dead_letter\", reason: \"http_4xx\", httpStatus });\n\t}\n}\n\nconst IMF_FIXDATE = /^(?:Mon|Tue|Wed|Thu|Fri|Sat|Sun), \\d{2} (?:Jan|Feb|Mar|Apr|May|Jun|Jul|Aug|Sep|Oct|Nov|Dec) \\d{4} \\d{2}:\\d{2}:\\d{2} GMT$/;\nconst DELTA_SECONDS = /^\\d+$/;\n\n/**\n * Parse `Retry-After` as delta-seconds or an IMF-fixdate HTTP-date and clamp\n * it to `[0, maxRetryAfterMs]`. An absent or unparseable value returns\n * `undefined`, leaving the retry schedule in charge. The options are\n * snapshotted as {@link classifyWebhookDeliveryObservation} snapshots them.\n *\n * @throws {WebhookDeliveryConfigError} when `maxRetryAfterMs` is not positive and finite.\n * @throws {TypeError} `input_unreadable` for options that cannot be read.\n */\nexport function parseRetryAfterMs(\n\tvalue: string | null | undefined,\n\toptions: WebhookClassifyOptions,\n): number | undefined {\n\treturn guard(() => retryAfterMsFrom(primitive(value), snapshotOptions(options)), unreadable);\n}\n\nfunction retryAfterMsFrom(value: unknown, settings: OptionsSnapshot): number | undefined {\n\tif (typeof value !== \"string\") return undefined;\n\tconst trimmed = trim(value);\n\tif (trimmed === \"\") return undefined;\n\tlet delayMs: number;\n\tif (matches(DELTA_SECONDS, trimmed)) {\n\t\tdelayMs = NumberConstructor(trimmed) * 1000;\n\t} else {\n\t\t// Only the IMF-fixdate form senders must generate (RFC 9110 5.6.7);\n\t\t// Date.parse alone would accept \"-5\" or \"1.5\" as dates.\n\t\tif (!matches(IMF_FIXDATE, trimmed)) return undefined;\n\t\tconst at = dateParse(trimmed);\n\t\tif (!numberIsFinite(at) || !numberIsFinite(settings.nowMs)) return undefined;\n\t\tdelayMs = at - settings.nowMs;\n\t}\n\tif (delayMs !== delayMs) return undefined;\n\treturn mathMin(mathMax(delayMs, 0), settings.maxRetryAfterMs);\n}\n","import type { WebhookProjectionErrorCode } from \"./codes\";\nimport { guard, projectionError } from \"./errors\";\nimport {\n\tdefine,\n\temptyMap,\n\tfreeze,\n\thasOwn,\n\tisoFromDateOrString,\n\tisPlainRecord,\n\tnumberIsSafeInteger,\n\treadOwn,\n\trecord,\n\tsnapshotJson,\n\tstringList,\n\ttype Fail,\n} from \"./snapshot\";\nimport type {\n\tWebhookEventMetadata,\n\tWebhookFanOutJobDraft,\n\tWebhookJobActor,\n\tWebhookJsonObject,\n\tWebhookJsonValue,\n\tWebhookPayloadPolicy,\n\tWebhookSourceEnvelope,\n} from \"./types\";\n\n/** Inputs to {@link projectWebhookFanOutJob}. */\nexport interface WebhookPersistenceProjectionOptions {\n\t/** The application's per-event-type egress allowlist and declared facts. */\n\treadonly policy: WebhookPayloadPolicy;\n\t/**\n\t * The actor Host passed with the envelope, or why it is absent. Defaults to\n\t * `{ state: \"absent\", reason: \"legacy\" }`.\n\t */\n\treadonly actor?: WebhookJobActor;\n}\n\nconst LEGACY_ACTOR: WebhookJobActor = record({ state: \"absent\", reason: \"legacy\" });\n\n/* Fault mapping. Data records (envelope, job, subscription, actor) report\n * accessors as `accessor_property` and anything else as `invalid_envelope`;\n * call and configuration records (options, input, policy) report\n * `inspection_failed`; JSON values report the code of the list naming them. */\n\n/** @internal */\nexport const dataFail: Fail = (fault, field) => {\n\tthrow projectionError(fault === \"accessor\" ? \"accessor_property\" : \"invalid_envelope\", field);\n};\n\n/** @internal */\nexport const callFail: Fail = (_fault, field) => {\n\tthrow projectionError(\"inspection_failed\", field);\n};\n\nfunction jsonFail(code: WebhookProjectionErrorCode): Fail {\n\treturn (fault, field) => {\n\t\tthrow projectionError(fault === \"accessor\" ? \"accessor_property\" : code, field);\n\t};\n}\n\n/** @internal */\nexport const payloadFail = jsonFail(\"payload_field_not_json\");\n/** @internal */\nexport const factFail = jsonFail(\"fact_field_not_json\");\n\n/** @internal Replacement for anything a projection did not throw itself. */\nexport function uninspectable(field: string): () => Error {\n\treturn () => projectionError(\"inspection_failed\", field);\n}\n\n/**\n * The persistence projection (ADR 0018 decision 2). Host copies\n * `event.payload` into the outbox unchanged, so the fan-out job keeps only:\n *\n * - envelope metadata (no trace context, provenance or payload);\n * - the payload fields allowlisted for the event type, when it has an entry;\n * - the payload fields the entry declares as admission and scope facts.\n *\n * A `restricted` event keeps neither payload fields nor facts unless its\n * entry sets `includeRestricted`. Everything else in the payload is dropped\n * before anything is stored, and the package never asks for it. The\n * envelope and options are copied at entry, through own data property\n * descriptors, into a snapshot (a faithful copy for plain data; a Proxy's\n * traps may run more than once, see README, P1); the job is built\n * from the snapshot and is frozen, with null-prototype records.\n *\n * @throws {WebhookProjectionError} when the envelope lacks a required field,\n * a kept field is not JSON or is an accessor, or an input cannot be\n * inspected. The message is constant for the code; no error keeps an input\n * value or an input-raised error.\n */\nexport function projectWebhookFanOutJob(\n\tenvelope: WebhookSourceEnvelope,\n\toptions: WebhookPersistenceProjectionOptions,\n): WebhookFanOutJobDraft {\n\treturn guard(() => fanOutJob(envelope, options), uninspectable(\"envelope\"));\n}\n\n/**\n * Envelope metadata as a serializable record: identifiers, ordering,\n * classification and consistency. Dates become ISO-8601 strings computed\n * with the `Date.prototype` intrinsics. Only own data properties are read.\n * The renderer runs a stored job's metadata through it again.\n *\n * @throws {WebhookProjectionError} for a missing identifier, an invalid\n * date, an accessor property or a value that cannot be inspected.\n */\nexport function projectWebhookEventMetadata(envelope: unknown): WebhookEventMetadata {\n\treturn guard(() => snapshotEventMetadata(envelope), uninspectable(\"envelope\"));\n}\n\nfunction fanOutJob(envelope: unknown, options: unknown): WebhookFanOutJobDraft {\n\t// Snapshot: options, then envelope metadata, then the policy entry and\n\t// actor, then only the payload fields that entry names.\n\tif (!isPlainRecord(options)) return callFail(\"not_plain\", \"options\");\n\tconst policy = readOwn(options, \"policy\", \"policy\", callFail);\n\tconst rawActor = readOwn(options, \"actor\", \"actor\", callFail);\n\tconst event = snapshotEventMetadata(envelope);\n\tconst entry = snapshotPolicyEntry(policy, event.eventType);\n\tconst actor = snapshotActor(rawActor);\n\tconst restrictedWithoutOptIn = event.payloadClassification === \"restricted\" && entry?.includeRestricted !== true;\n\n\tlet payload: WebhookJsonObject | null = null;\n\tlet facts: WebhookJsonObject = EMPTY;\n\tif (entry && !restrictedWithoutOptIn && (entry.fields || entry.facts)) {\n\t\tconst source = readOwn(envelope as object, \"payload\", \"payload\", dataFail);\n\t\tif (isPlainRecord(source)) {\n\t\t\tconst copies = emptyMap<WebhookJsonValue>();\n\t\t\tif (entry.fields) snapshotNamed(source, entry.fields, payloadFail, copies);\n\t\t\tif (entry.facts) snapshotNamed(source, entry.facts, factFail, copies);\n\t\t\tif (entry.fields) payload = pick(copies, entry.fields);\n\t\t\tif (entry.facts) facts = pick(copies, entry.facts);\n\t\t}\n\t}\n\treturn record({\n\t\teventId: event.eventId,\n\t\ttenantId: event.tenantId,\n\t\tspaceId: event.spaceId,\n\t\tevent,\n\t\tpayload,\n\t\tpayloadProjected: payload !== null,\n\t\tfacts,\n\t\tactor,\n\t});\n}\n\nconst EMPTY: WebhookJsonObject = record({});\n\n/** @internal The policy entry for one event type, as a snapshot. */\nexport interface PolicyEntrySnapshot {\n\t/** `undefined` when the entry has no `fields` list. */\n\treadonly fields?: readonly string[];\n\treadonly facts?: readonly string[];\n\treadonly includeRestricted: boolean;\n\treadonly scoped: boolean;\n}\n\n/**\n * @internal Read the entry for `eventType` from a policy, own data\n * properties only. A missing policy or entry, or a non-object entry, is no\n * entry.\n */\nexport function snapshotPolicyEntry(policy: unknown, eventType: string): PolicyEntrySnapshot | undefined {\n\tif (policy === null || policy === undefined || typeof policy !== \"object\") return undefined;\n\tif (!isPlainRecord(policy)) return callFail(\"not_plain\", \"policy\");\n\tconst entry = readOwn(policy, eventType, \"policy\", callFail);\n\tif (entry === null || entry === undefined || typeof entry !== \"object\") return undefined;\n\tif (!isPlainRecord(entry)) return callFail(\"not_plain\", \"policy\");\n\tconst fields = stringList(readOwn(entry, \"fields\", \"policy\", callFail), \"policy\", callFail);\n\tconst facts = stringList(readOwn(entry, \"facts\", \"policy\", callFail), \"policy\", callFail);\n\treturn record({\n\t\tfields,\n\t\tfacts,\n\t\tincludeRestricted: readOwn(entry, \"includeRestricted\", \"policy\", callFail) === true,\n\t\tscoped: readOwn(entry, \"scoped\", \"policy\", callFail) === true,\n\t});\n}\n\n/**\n * @internal Snapshot each named field of `source` into `copies` (absent\n * and `undefined` fields are left out). A name whose value was already\n * copied is not read again. A repeated name whose first read found nothing\n * is read again, so a Proxy source may answer the second read differently;\n * plain data cannot.\n */\nexport function snapshotNamed(source: object, names: readonly string[], fail: Fail, copies: Record<string, WebhookJsonValue>): void {\n\tfor (let index = 0; index < names.length; index += 1) {\n\t\tconst name = names[index]!;\n\t\tif (hasOwn(copies, name)) continue;\n\t\tconst value = readOwn(source, name, name, fail);\n\t\tif (value === undefined) continue;\n\t\tdefine(copies, name, snapshotJson(value, name, fail));\n\t}\n}\n\n/** @internal A frozen null-prototype object of the named copies, in `names` order. */\nexport function pick(copies: Record<string, WebhookJsonValue>, names: readonly string[]): WebhookJsonObject {\n\tconst picked = emptyMap<WebhookJsonValue>();\n\tfor (let index = 0; index < names.length; index += 1) {\n\t\tconst name = names[index]!;\n\t\tif (hasOwn(copies, name) && !hasOwn(picked, name)) define(picked, name, copies[name]);\n\t}\n\treturn freeze(picked);\n}\n\nconst METADATA_KEYS = freeze([\n\t\"eventId\",\n\t\"eventType\",\n\t\"eventSchemaVersion\",\n\t\"tenantId\",\n\t\"spaceId\",\n\t\"subjectType\",\n\t\"subjectId\",\n\t\"sequence\",\n\t\"actionInvocationId\",\n\t\"correlationId\",\n\t\"causationId\",\n\t\"occurredAt\",\n\t\"recordedAt\",\n\t\"producerModuleVersion\",\n\t\"payloadClassification\",\n\t\"consistency\",\n] as const);\n\n/**\n * @internal Snapshot and validate envelope (or stored job) metadata: every\n * metadata field is read with one descriptor read, then checked.\n */\nexport function snapshotEventMetadata(source: unknown): WebhookEventMetadata {\n\tif (source === null || typeof source !== \"object\") return dataFail(\"not_plain\", \"envelope\");\n\tif (!isPlainRecord(source)) return dataFail(\"not_plain\", \"envelope\");\n\tconst raw = emptyMap<unknown>();\n\tfor (let index = 0; index < METADATA_KEYS.length; index += 1) {\n\t\tconst key = METADATA_KEYS[index]!;\n\t\tdefine(raw, key, readOwn(source, key, key, dataFail));\n\t}\n\tconst classification = raw.payloadClassification;\n\tif (classification !== \"public\" && classification !== \"internal\" && classification !== \"confidential\" && classification !== \"restricted\") {\n\t\treturn dataFail(\"not_json\", \"payloadClassification\");\n\t}\n\tconst consistency = raw.consistency;\n\tif (consistency !== undefined && consistency !== \"authoritative-now\" && consistency !== \"provisional-until-reconciled\") {\n\t\treturn dataFail(\"not_json\", \"consistency\");\n\t}\n\treturn record<WebhookEventMetadata>({\n\t\teventId: requireString(raw.eventId, \"eventId\"),\n\t\teventType: requireString(raw.eventType, \"eventType\"),\n\t\teventSchemaVersion: requireInteger(raw.eventSchemaVersion, \"eventSchemaVersion\"),\n\t\ttenantId: requireString(raw.tenantId, \"tenantId\"),\n\t\tspaceId: requireString(raw.spaceId, \"spaceId\"),\n\t\tsubjectType: requireString(raw.subjectType, \"subjectType\"),\n\t\tsubjectId: requireString(raw.subjectId, \"subjectId\"),\n\t\tsequence: requireInteger(raw.sequence, \"sequence\"),\n\t\tactionInvocationId: optionalString(raw.actionInvocationId, \"actionInvocationId\"),\n\t\tcorrelationId: requireString(raw.correlationId, \"correlationId\"),\n\t\tcausationId: optionalString(raw.causationId, \"causationId\"),\n\t\toccurredAt: requireIsoDate(raw.occurredAt, \"occurredAt\"),\n\t\trecordedAt: requireIsoDate(raw.recordedAt, \"recordedAt\"),\n\t\tproducerModuleVersion: requireString(raw.producerModuleVersion, \"producerModuleVersion\"),\n\t\tpayloadClassification: classification,\n\t\tconsistency,\n\t});\n}\n\nfunction snapshotActor(raw: unknown): WebhookJobActor {\n\tif (raw === undefined) return LEGACY_ACTOR;\n\tif (!isPlainRecord(raw)) return dataFail(\"not_plain\", \"actor\");\n\tconst state = readOwn(raw, \"state\", \"actor\", dataFail);\n\tif (state === \"present\") {\n\t\tconst actorId = readOwn(raw, \"actorId\", \"actorId\", dataFail);\n\t\tconst actorType = readOwn(raw, \"actorType\", \"actorType\", dataFail);\n\t\treturn record<WebhookJobActor>({\n\t\t\tstate: \"present\",\n\t\t\tactorId: requireString(actorId, \"actorId\"),\n\t\t\tactorType: requireString(actorType, \"actorType\"),\n\t\t});\n\t}\n\tconst reason = readOwn(raw, \"reason\", \"actor\", dataFail);\n\tif (state !== \"absent\" || (reason !== \"suppressed\" && reason !== \"legacy\")) return dataFail(\"not_json\", \"actor\");\n\treturn record<WebhookJobActor>({ state: \"absent\", reason });\n}\n\n/** @internal */\nexport function requireString(value: unknown, field: string): string {\n\tif (typeof value !== \"string\" || value.length === 0) return dataFail(\"not_json\", field);\n\treturn value;\n}\n\nfunction optionalString(value: unknown, field: string): string | undefined {\n\treturn value === undefined ? undefined : requireString(value, field);\n}\n\nfunction requireInteger(value: unknown, field: string): number {\n\tif (typeof value !== \"number\" || !numberIsSafeInteger(value)) return dataFail(\"not_json\", field);\n\treturn value;\n}\n\n/** A real `Date` or a date string, read with the intrinsics; never calls the value's own methods. */\nfunction requireIsoDate(value: unknown, field: string): string {\n\tconst iso = isoFromDateOrString(value);\n\tif (iso === undefined) return dataFail(\"not_json\", field);\n\treturn iso;\n}\n","import { guard, projectionError } from \"./errors\";\nimport {\n\tcallFail,\n\tdataFail,\n\tfactFail,\n\tpayloadFail,\n\tpick,\n\trequireString,\n\tsnapshotEventMetadata,\n\tsnapshotNamed,\n\tsnapshotPolicyEntry,\n\tuninspectable,\n\ttype PolicyEntrySnapshot,\n} from \"./persistence-projection\";\nimport type { WebhookScopeInput, WebhookScopePredicate } from \"./ports\";\nimport { apply, emptyMap, isPlainRecord, readOwn, record, serializeJson } from \"./snapshot\";\nimport type {\n\tWebhookDeliveryBodyV1,\n\tWebhookEventMetadata,\n\tWebhookFanOutJobDraft,\n\tWebhookJsonObject,\n\tWebhookJsonValue,\n\tWebhookPayloadPolicy,\n} from \"./types\";\n\n/** The v1 body's `format` value. Receivers read it from the raw body. */\nexport const WEBHOOK_DELIVERY_FORMAT_V1 = \"fabric.webhook-delivery.v1\" as const;\n\n/** The subscription a body is rendered for. */\nexport interface WebhookEgressSubscription {\n\treadonly subscriptionId: string;\n\treadonly tenantId: string;\n\treadonly spaceId: string;\n}\n\n/** Inputs to {@link projectWebhookEgressPayload}. */\nexport interface WebhookEgressProjectionInput {\n\t/** The fan-out job; only what the persistence projection kept can leave. */\n\treadonly job: WebhookFanOutJobDraft;\n\treadonly subscription: WebhookEgressSubscription;\n\t/** The current allowlist; it is re-applied, so a narrowed entry takes effect. */\n\treadonly policy: WebhookPayloadPolicy;\n\t/** Consulted only for event types whose entry sets `scoped`. */\n\treadonly scopePredicate?: WebhookScopePredicate;\n}\n\n/** The payload that may leave for one subscription, and why it is metadata-only when it is. */\nexport interface WebhookEgressPayload {\n\treadonly payload: WebhookJsonObject | null;\n\treadonly payloadProjected: boolean;\n\t/**\n\t * Why the payload was withheld: no allowlist entry, nothing persisted, a\n\t * restricted event without opt-in, or a scoped type whose predicate was\n\t * missing, threw, or did not return `true`.\n\t */\n\treadonly withheld?:\n\t\t| \"no_allowlist_entry\"\n\t\t| \"not_persisted\"\n\t\t| \"restricted\"\n\t\t| \"scope_predicate_missing\"\n\t\t| \"scope_predicate_failed\"\n\t\t| \"scope_predicate_false\";\n}\n\ninterface Egress extends WebhookEgressPayload {\n\treadonly event: WebhookEventMetadata;\n\treadonly subscriptionId: string;\n}\n\ntype Withheld = NonNullable<WebhookEgressPayload[\"withheld\"]>;\n\n/** Everything the egress decision and the renderer use, snapshotted at entry. */\ninterface EgressSnapshot {\n\treadonly event: WebhookEventMetadata;\n\treadonly subscriptionId: string;\n\treadonly tenantId: string;\n\treadonly spaceId: string;\n\treadonly deliveryId?: string;\n\treadonly entry?: PolicyEntrySnapshot;\n\treadonly payloadProjected: boolean;\n\treadonly payloadPersisted: boolean;\n\t/** The entry's fields copied from the stored payload; only when it may leave. */\n\treadonly payload?: WebhookJsonObject;\n\treadonly facts: WebhookJsonObject;\n\treadonly scopePredicate?: WebhookScopePredicate;\n}\n\n/**\n * The egress projection (ADR 0018 decision 9). The payload leaves only when\n * the event type has an allowlist entry, the job persisted a payload, a\n * `restricted` event's entry opted in, and, for a scoped type, the injected\n * predicate returned exactly `true`. Otherwise the body is metadata-only:\n * `payload: null, payloadProjected: false`. The job is treated as input: it\n * is copied at entry, through own data property descriptors, into a\n * snapshot (a faithful copy for plain data; README, P1); its\n * metadata is re-derived and its payload re-copied from that snapshot. The\n * predicate runs after the snapshot is complete and sees frozen copies.\n *\n * @throws {WebhookProjectionError} `scope_mismatch` when the subscription\n * names another tenant or space than the job; other codes when the job or\n * subscription cannot be read safely.\n */\nexport function projectWebhookEgressPayload(input: WebhookEgressProjectionInput): WebhookEgressPayload {\n\treturn guard(() => {\n\t\tconst egress = decideEgress(snapshotEgress(input, false));\n\t\treturn record({ payload: egress.payload, payloadProjected: egress.payloadProjected, withheld: egress.withheld });\n\t}, uninspectable(\"job\"));\n}\n\nconst EMPTY: WebhookJsonObject = record({});\n\nfunction snapshotEgress(input: unknown, withDeliveryId: boolean): EgressSnapshot {\n\tif (!isPlainRecord(input)) return callFail(\"not_plain\", \"input\");\n\tconst job = readOwn(input, \"job\", \"job\", callFail);\n\tconst subscription = readOwn(input, \"subscription\", \"subscription\", callFail);\n\tconst policy = readOwn(input, \"policy\", \"policy\", callFail);\n\tconst scopePredicate = readOwn(input, \"scopePredicate\", \"scopePredicate\", callFail);\n\tconst rawDeliveryId = withDeliveryId ? readOwn(input, \"deliveryId\", \"deliveryId\", callFail) : undefined;\n\n\tif (!isPlainRecord(job)) return dataFail(\"not_plain\", \"job\");\n\tconst event = snapshotEventMetadata(readOwn(job, \"event\", \"event\", dataFail));\n\tif (!isPlainRecord(subscription)) return dataFail(\"not_plain\", \"subscription\");\n\tconst subscriptionId = requireString(readOwn(subscription, \"subscriptionId\", \"subscriptionId\", dataFail), \"subscriptionId\");\n\tconst tenantId = requireString(readOwn(subscription, \"tenantId\", \"tenantId\", dataFail), \"tenantId\");\n\tconst spaceId = requireString(readOwn(subscription, \"spaceId\", \"spaceId\", dataFail), \"spaceId\");\n\tif (tenantId !== event.tenantId || spaceId !== event.spaceId) throw projectionError(\"scope_mismatch\", \"subscription\");\n\tconst deliveryId = withDeliveryId ? requireString(rawDeliveryId, \"deliveryId\") : undefined;\n\n\tconst entry = snapshotPolicyEntry(policy, event.eventType);\n\tlet payloadProjected = false;\n\tlet payloadPersisted = false;\n\tlet payload: WebhookJsonObject | undefined;\n\tlet facts = EMPTY;\n\tif (entry?.fields) {\n\t\tpayloadProjected = readOwn(job, \"payloadProjected\", \"payloadProjected\", dataFail) === true;\n\t\tconst storedPayload = readOwn(job, \"payload\", \"payload\", dataFail);\n\t\tpayloadPersisted = isPlainRecord(storedPayload);\n\t\tconst restricted = event.payloadClassification === \"restricted\" && !entry.includeRestricted;\n\t\tif (payloadProjected && payloadPersisted && !restricted) {\n\t\t\tconst copies = emptyMap<WebhookJsonValue>();\n\t\t\tsnapshotNamed(storedPayload as object, entry.fields, payloadFail, copies);\n\t\t\tpayload = pick(copies, entry.fields);\n\t\t\tif (entry.scoped && entry.facts) {\n\t\t\t\tconst storedFacts = readOwn(job, \"facts\", \"facts\", dataFail);\n\t\t\t\tif (isPlainRecord(storedFacts)) {\n\t\t\t\t\tconst factCopies = emptyMap<WebhookJsonValue>();\n\t\t\t\t\tsnapshotNamed(storedFacts, entry.facts, factFail, factCopies);\n\t\t\t\t\tfacts = pick(factCopies, entry.facts);\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n\treturn record<EgressSnapshot>({\n\t\tevent,\n\t\tsubscriptionId,\n\t\ttenantId,\n\t\tspaceId,\n\t\tdeliveryId,\n\t\tentry,\n\t\tpayloadProjected,\n\t\tpayloadPersisted,\n\t\tpayload,\n\t\tfacts,\n\t\tscopePredicate: typeof scopePredicate === \"function\" ? (scopePredicate as WebhookScopePredicate) : undefined,\n\t});\n}\n\n/** The egress decision over a snapshot. The scope predicate is the only code it calls. */\nfunction decideEgress(snapshot: EgressSnapshot): Egress {\n\tconst { event, subscriptionId, entry } = snapshot;\n\tconst metadataOnly = (reason: Withheld): Egress => record({ event, subscriptionId, payload: null, payloadProjected: false, withheld: reason });\n\tif (!entry || !entry.fields) return metadataOnly(\"no_allowlist_entry\");\n\tif (!snapshot.payloadProjected || !snapshot.payloadPersisted) return metadataOnly(\"not_persisted\");\n\tif (event.payloadClassification === \"restricted\" && !entry.includeRestricted) return metadataOnly(\"restricted\");\n\tif (entry.scoped) {\n\t\tconst predicate = snapshot.scopePredicate;\n\t\tif (predicate === undefined) return metadataOnly(\"scope_predicate_missing\");\n\t\tconst scopeInput = record<WebhookScopeInput>({\n\t\t\tsubscriptionId,\n\t\t\ttenantId: snapshot.tenantId,\n\t\t\tspaceId: snapshot.spaceId,\n\t\t\tevent,\n\t\t\tfacts: snapshot.facts,\n\t\t});\n\t\tlet admitted: unknown;\n\t\ttry {\n\t\t\tadmitted = apply(predicate, undefined, [scopeInput]);\n\t\t} catch {\n\t\t\t// The thrown value is dropped unread.\n\t\t\treturn metadataOnly(\"scope_predicate_failed\");\n\t\t}\n\t\tif (admitted !== true) return metadataOnly(\"scope_predicate_false\");\n\t}\n\treturn record({ event, subscriptionId, payload: snapshot.payload ?? EMPTY, payloadProjected: true });\n}\n\n/** Inputs to {@link renderWebhookDeliveryBodyV1}. */\nexport interface WebhookRenderInput extends WebhookEgressProjectionInput {\n\treadonly deliveryId: string;\n}\n\n/** A rendered v1 body: the object and the exact string that is stored, signed and sent. */\nexport interface WebhookRenderedBody {\n\treadonly body: WebhookDeliveryBodyV1;\n\treadonly rawBody: string;\n\treadonly withheld?: WebhookEgressPayload[\"withheld\"];\n}\n\n/**\n * Render the `fabric.webhook-delivery.v1` body (ADR 0018 decision 7) in the\n * ADR's field order. `consistency` appears only for provisional events;\n * `actionInvocationId` only when the event has one. The body names no\n * eligibility revision, configuration version or actor. Every value in it\n * comes from the input's snapshot (see {@link projectWebhookEgressPayload}),\n * and `rawBody` is serialized by the package from that snapshot, so no\n * `toJSON`, getter or prototype member of any object takes part.\n */\nexport function renderWebhookDeliveryBodyV1(input: WebhookRenderInput): WebhookRenderedBody {\n\treturn guard(() => {\n\t\tconst snapshot = snapshotEgress(input, true);\n\t\tconst projected = decideEgress(snapshot);\n\t\tconst { event } = projected;\n\t\tconst body = record<WebhookDeliveryBodyV1>({\n\t\t\tformat: WEBHOOK_DELIVERY_FORMAT_V1,\n\t\t\teventId: event.eventId,\n\t\t\ttype: event.eventType,\n\t\t\ttenantId: event.tenantId,\n\t\t\tspaceId: event.spaceId,\n\t\t\tcorrelationId: event.correlationId,\n\t\t\toccurredAt: event.occurredAt,\n\t\t\tevent: record<WebhookDeliveryBodyV1[\"event\"]>({\n\t\t\t\ttype: event.eventType,\n\t\t\t\tschemaVersion: event.eventSchemaVersion,\n\t\t\t\tsubjectType: event.subjectType,\n\t\t\t\tsubjectId: event.subjectId,\n\t\t\t\tsequence: event.sequence,\n\t\t\t\trecordedAt: event.recordedAt,\n\t\t\t\tactionInvocationId: event.actionInvocationId,\n\t\t\t\tconsistency: event.consistency === \"provisional-until-reconciled\" ? event.consistency : undefined,\n\t\t\t\tpayload: projected.payload,\n\t\t\t\tpayloadProjected: projected.payloadProjected,\n\t\t\t}),\n\t\t\tdelivery: record({\n\t\t\t\tdeliveryId: snapshot.deliveryId!,\n\t\t\t\tsubscriptionId: projected.subscriptionId,\n\t\t\t}),\n\t\t});\n\t\treturn record({ body, rawBody: serializeJson(body), withheld: projected.withheld });\n\t}, uninspectable(\"job\"));\n}\n","import { guard, inputError } from \"./errors\";\nimport { isPlainRecord, matches, numberIsSafeInteger, primitive, readOwn, record, type Fail } from \"./snapshot\";\n\n/** Header names of a v1 delivery (ADR 0018 decision 7). Only the signature and timestamp are signed. */\nexport const WEBHOOK_HEADERS = Object.freeze({\n\tsignature: \"X-Fabric-Signature\",\n\ttimestamp: \"X-Fabric-Timestamp\",\n\teventId: \"X-Fabric-Event-Id\",\n\tdeliveryId: \"X-Fabric-Delivery-Id\",\n\tattempt: \"X-Fabric-Delivery-Attempt\",\n\tcontentType: \"Content-Type\",\n} as const);\n\nconst V1_SIGNATURE = /^v1=[0-9a-f]{64}$/;\n\n/**\n * A header-safe identifier: visible ASCII, inner spaces allowed, no CR, LF,\n * NUL or other control characters, and no leading or trailing space (which a\n * receiver's header parser would trim, making the header disagree with the\n * signed body).\n */\nconst HEADER_SAFE_ID = /^[\\x21-\\x7e](?:[\\x20-\\x7e]*[\\x21-\\x7e])?$/;\n\nconst unreadable = (): Error => inputError(\"type\", \"input_unreadable\");\nconst unreadableFail: Fail = () => {\n\tthrow unreadable();\n};\n\n/**\n * The exact string a `v1` signer MACs: `\"<timestampSeconds>.<rawBody>\"`. The\n * signature is `v1=` + hex(HMAC-SHA256(secret, this string as UTF-8)).\n *\n * @throws {RangeError} `timestamp_invalid` when the timestamp is not a\n * non-negative whole number of seconds.\n * @throws {TypeError} `raw_body_not_string` when the body is not a string.\n */\nexport function webhookSignedContentV1(timestampSeconds: number, rawBody: string): string {\n\treturn guard(() => {\n\t\tconst timestamp = primitive(timestampSeconds);\n\t\tconst body = primitive(rawBody);\n\t\tassertTimestampSeconds(timestamp);\n\t\tif (typeof body !== \"string\") throw inputError(\"type\", \"raw_body_not_string\");\n\t\treturn `${timestamp}.${body}`;\n\t}, unreadable);\n}\n\n/** Inputs to {@link buildWebhookRequestHeaders}. */\nexport interface WebhookRequestHeaderInput {\n\t/** The signer's `v1=<64 lowercase hex>` value. */\n\treadonly signature: string;\n\treadonly timestampSeconds: number;\n\treadonly eventId: string;\n\treadonly deliveryId: string;\n\t/** 1-based attempt number. */\n\treadonly attempt: number;\n}\n\n/**\n * Build the headers of one attempt. A signature that is not a well-formed\n * `v1` value is refused rather than sent, so a misbehaving signer cannot put\n * arbitrary text on the wire. The input is copied at entry into a snapshot,\n * one descriptor read per field (an accessor is refused, not called); the\n * headers are built from the snapshot values that were validated, never\n * from a second read.\n *\n * @throws {TypeError | RangeError} with a constant message and a `code` from\n * `WEBHOOK_INPUT_ERROR_CODES` for a malformed signature, timestamp,\n * identifier or attempt, or an input that cannot be read.\n */\nexport function buildWebhookRequestHeaders(input: WebhookRequestHeaderInput): Readonly<Record<string, string>> {\n\treturn guard(() => {\n\t\tif (!isPlainRecord(input)) throw unreadable();\n\t\tconst signature = primitive(readOwn(input, \"signature\", \"signature\", unreadableFail));\n\t\tconst timestampSeconds = primitive(readOwn(input, \"timestampSeconds\", \"timestampSeconds\", unreadableFail));\n\t\tconst eventId = primitive(readOwn(input, \"eventId\", \"eventId\", unreadableFail));\n\t\tconst deliveryId = primitive(readOwn(input, \"deliveryId\", \"deliveryId\", unreadableFail));\n\t\tconst attempt = primitive(readOwn(input, \"attempt\", \"attempt\", unreadableFail));\n\n\t\tif (typeof signature !== \"string\" || !matches(V1_SIGNATURE, signature)) throw inputError(\"type\", \"signature_malformed\");\n\t\tassertTimestampSeconds(timestampSeconds);\n\t\tif (typeof eventId !== \"string\" || !matches(HEADER_SAFE_ID, eventId)) throw inputError(\"type\", \"event_id_invalid\");\n\t\tif (typeof deliveryId !== \"string\" || !matches(HEADER_SAFE_ID, deliveryId)) throw inputError(\"type\", \"delivery_id_invalid\");\n\t\tif (typeof attempt !== \"number\" || !numberIsSafeInteger(attempt) || attempt < 1) throw inputError(\"range\", \"attempt_invalid\");\n\t\treturn record<Record<string, string>>({\n\t\t\t[WEBHOOK_HEADERS.contentType]: \"application/json\",\n\t\t\t[WEBHOOK_HEADERS.signature]: signature,\n\t\t\t[WEBHOOK_HEADERS.timestamp]: `${timestampSeconds}`,\n\t\t\t[WEBHOOK_HEADERS.eventId]: eventId,\n\t\t\t[WEBHOOK_HEADERS.deliveryId]: deliveryId,\n\t\t\t[WEBHOOK_HEADERS.attempt]: `${attempt}`,\n\t\t});\n\t}, unreadable);\n}\n\nfunction assertTimestampSeconds(value: unknown): asserts value is number {\n\tif (typeof value !== \"number\" || !numberIsSafeInteger(value) || value < 0) throw inputError(\"range\", \"timestamp_invalid\");\n}\n","import { apply, freeze, matches } from \"./snapshot\";\n\n/*\n * Which IP addresses a webhook may be sent to (ADR 0018 decision 6, R8).\n * Portable: no Node built-ins, so the main entry stays runtime-neutral.\n *\n * IPv4 is a deny list of every special-purpose block IANA marks as not\n * globally reachable, plus multicast and the reserved 240/4. IPv6 is an\n * allow list: only global unicast (2000::/3) can pass, so any block outside\n * it (unspecified, loopback, IPv4-mapped, IPv4-compatible, SIIT, the\n * local-use NAT64 prefix, discard-only, SRv6, unique-local, site-local,\n * link-local, multicast) is refused without being listed. Inside 2000::/3 the\n * non-global blocks are refused, and the three that embed an IPv4 address\n * (NAT64 well-known prefix, 6to4, Teredo) pass only when every embedded\n * address is itself public.\n */\n\nconst stringCharCodeAt = String.prototype.charCodeAt;\nconst stringIndexOf = String.prototype.indexOf;\nconst stringSlice = String.prototype.slice;\nconst stringSplit = String.prototype.split;\n\n/** Longest address text parsed: a full IPv6 form with an embedded IPv4 tail is 45 characters. */\nconst MAX_ADDRESS_LENGTH = 45;\n/** Longest text inspected at all, leaving room for a zone index. */\nconst MAX_TEXT_LENGTH = 64;\n\nconst IPV4_OCTET = \"(?:25[0-5]|2[0-4]\\\\d|1\\\\d\\\\d|[1-9]?\\\\d)\";\n/** Canonical dotted-quad only: no leading zeros, no shorthand, no hex. */\nconst IPV4_DOTTED = new RegExp(`^${IPV4_OCTET}(?:\\\\.${IPV4_OCTET}){3}$`);\nconst HEX_GROUP = /^[0-9A-Fa-f]{1,4}$/;\n\n/** An IPv4 block: network address as an unsigned 32-bit integer and prefix length. */\ninterface Ipv4Block {\n\treadonly base: number;\n\treadonly prefix: number;\n}\n\nfunction ipv4Block(a: number, b: number, c: number, d: number, prefix: number): Ipv4Block {\n\treturn freeze({ base: (((a << 24) | (b << 16) | (c << 8) | d) >>> 0), prefix });\n}\n\n/**\n * IPv4 blocks that are never a webhook destination. The IANA IPv4\n * Special-Purpose Address Registry's not-globally-reachable entries, plus\n * multicast (224.0.0.0/4) and reserved space (240.0.0.0/4, which holds the\n * limited broadcast address). 192.0.0.0/24 is refused whole, including the\n * two anycast /32s in it that IANA marks reachable; neither is a webhook\n * receiver.\n */\nconst REFUSED_IPV4_BLOCKS: readonly Ipv4Block[] = freeze([\n\tipv4Block(0, 0, 0, 0, 8), // \"this network\", including the unspecified 0.0.0.0\n\tipv4Block(10, 0, 0, 0, 8), // private\n\tipv4Block(100, 64, 0, 0, 10), // shared address space (CGNAT)\n\tipv4Block(127, 0, 0, 0, 8), // loopback\n\tipv4Block(169, 254, 0, 0, 16), // link-local, including cloud metadata endpoints\n\tipv4Block(172, 16, 0, 0, 12), // private\n\tipv4Block(192, 0, 0, 0, 24), // IETF protocol assignments\n\tipv4Block(192, 0, 2, 0, 24), // documentation (TEST-NET-1)\n\tipv4Block(192, 88, 99, 0, 24), // deprecated 6to4 relay anycast\n\tipv4Block(192, 168, 0, 0, 16), // private\n\tipv4Block(198, 18, 0, 0, 15), // benchmarking\n\tipv4Block(198, 51, 100, 0, 24), // documentation (TEST-NET-2)\n\tipv4Block(203, 0, 113, 0, 24), // documentation (TEST-NET-3)\n\tipv4Block(224, 0, 0, 0, 4), // multicast\n\tipv4Block(240, 0, 0, 0, 4), // reserved, including 255.255.255.255\n]);\n\nfunction inIpv4Block(value: number, block: Ipv4Block): boolean {\n\tconst mask = block.prefix === 0 ? 0 : (0xffffffff << (32 - block.prefix)) >>> 0;\n\treturn ((value & mask) >>> 0) === block.base;\n}\n\n/** `true` when an IPv4 address, as an unsigned 32-bit integer, is publicly routable. */\nfunction isPublicIpv4Value(value: number): boolean {\n\tfor (let index = 0; index < REFUSED_IPV4_BLOCKS.length; index += 1) {\n\t\tif (inIpv4Block(value, REFUSED_IPV4_BLOCKS[index]!)) return false;\n\t}\n\treturn true;\n}\n\n/** Parse a canonical dotted-quad to an unsigned 32-bit integer, or `undefined`. */\nfunction parseIpv4(text: string): number | undefined {\n\tif (!matches(IPV4_DOTTED, text)) return undefined;\n\tconst parts = apply(stringSplit, text, [\".\"]) as string[];\n\tlet value = 0;\n\tfor (let index = 0; index < 4; index += 1) value = value * 256 + decimal(parts[index]!);\n\treturn value >>> 0;\n}\n\nfunction decimal(text: string): number {\n\tlet value = 0;\n\tfor (let index = 0; index < text.length; index += 1) value = value * 10 + ((apply(stringCharCodeAt, text, [index]) as number) - 48);\n\treturn value;\n}\n\nfunction hex(text: string): number {\n\tlet value = 0;\n\tfor (let index = 0; index < text.length; index += 1) {\n\t\tconst code = apply(stringCharCodeAt, text, [index]) as number;\n\t\tconst digit = code <= 57 ? code - 48 : code <= 70 ? code - 55 : code - 87;\n\t\tvalue = value * 16 + digit;\n\t}\n\treturn value;\n}\n\n/** Parse one side of an IPv6 address (no `::`) into 16-bit words; `tailIpv4` allows a dotted last group. */\nfunction parseIpv6Groups(text: string, tailIpv4: boolean): number[] | undefined {\n\tconst words: number[] = [];\n\tif (text === \"\") return words;\n\tconst groups = apply(stringSplit, text, [\":\"]) as string[];\n\tfor (let index = 0; index < groups.length; index += 1) {\n\t\tconst group = groups[index]!;\n\t\tif (tailIpv4 && index === groups.length - 1 && (apply(stringIndexOf, group, [\".\"]) as number) !== -1) {\n\t\t\tconst v4 = parseIpv4(group);\n\t\t\tif (v4 === undefined) return undefined;\n\t\t\twords[words.length] = v4 >>> 16;\n\t\t\twords[words.length] = v4 & 0xffff;\n\t\t\tcontinue;\n\t\t}\n\t\tif (!matches(HEX_GROUP, group)) return undefined;\n\t\twords[words.length] = hex(group);\n\t}\n\treturn words;\n}\n\n/** Parse an IPv6 address (no brackets, no zone) into eight 16-bit words, or `undefined`. */\nfunction parseIpv6(text: string): number[] | undefined {\n\tconst gap = apply(stringIndexOf, text, [\"::\"]) as number;\n\tif (gap === -1) {\n\t\tconst words = parseIpv6Groups(text, true);\n\t\treturn words !== undefined && words.length === 8 ? words : undefined;\n\t}\n\tif ((apply(stringIndexOf, text, [\"::\", gap + 1]) as number) !== -1) return undefined;\n\tconst head = parseIpv6Groups(apply(stringSlice, text, [0, gap]) as string, false);\n\tconst tail = parseIpv6Groups(apply(stringSlice, text, [gap + 2]) as string, true);\n\tif (head === undefined || tail === undefined || head.length + tail.length > 7) return undefined;\n\tconst words: number[] = [];\n\tfor (let index = 0; index < head.length; index += 1) words[words.length] = head[index]!;\n\tfor (let index = head.length + tail.length; index < 8; index += 1) words[words.length] = 0;\n\tfor (let index = 0; index < tail.length; index += 1) words[words.length] = tail[index]!;\n\treturn words;\n}\n\n/** The IPv4 address held in two consecutive 16-bit words. */\nfunction embeddedIpv4(high: number, low: number): number {\n\treturn ((high << 16) | low) >>> 0;\n}\n\n/** `true` when an IPv6 address, as eight 16-bit words, is publicly routable. */\nfunction isPublicIpv6Words(w: readonly number[]): boolean {\n\t// NAT64 well-known prefix 64:ff9b::/96 (RFC 6052): public only when the\n\t// IPv4 address in its last 32 bits is. The local-use prefix\n\t// 64:ff9b:1::/48 (RFC 8215) is outside 2000::/3 and refused below: the\n\t// operator picks the prefix length inside it, so the embedded address\n\t// cannot be decoded from the address alone.\n\tif (w[0] === 0x0064 && w[1] === 0xff9b && w[2] === 0 && w[3] === 0 && w[4] === 0 && w[5] === 0) {\n\t\treturn isPublicIpv4Value(embeddedIpv4(w[6]!, w[7]!));\n\t}\n\t// Only global unicast can pass.\n\tif ((w[0]! & 0xe000) !== 0x2000) return false;\n\tif (w[0] === 0x2001 && (w[1]! & 0xfe00) === 0) {\n\t\t// 2001::/23, IETF protocol assignments. Teredo (2001::/32, RFC 4380)\n\t\t// carries its server's IPv4 address in words 2-3 and its client's,\n\t\t// bit-inverted, in words 6-7; both must be public. The rest of the /23\n\t\t// (benchmarking, ORCHID, AMT, AS112 and later assignments) is not a\n\t\t// webhook destination.\n\t\tif (w[1] !== 0) return false;\n\t\tconst server = embeddedIpv4(w[2]!, w[3]!);\n\t\tconst client = (~embeddedIpv4(w[6]!, w[7]!)) >>> 0;\n\t\treturn isPublicIpv4Value(server) && isPublicIpv4Value(client);\n\t}\n\tif (w[0] === 0x2001 && w[1] === 0x0db8) return false; // documentation, 2001:db8::/32\n\tif (w[0] === 0x3fff && (w[1]! & 0xf000) === 0) return false; // documentation, 3fff::/20 (RFC 9637)\n\t// 6to4 (2002::/16, RFC 3056): the IPv4 address in words 1-2 must be public.\n\tif (w[0] === 0x2002) return isPublicIpv4Value(embeddedIpv4(w[1]!, w[2]!));\n\treturn true;\n}\n\n/** RFC 5952 text for eight 16-bit words: lowercase, no leading zeros, the longest zero run of two or more compressed. */\nfunction formatIpv6(w: readonly number[]): string {\n\tlet bestStart = -1;\n\tlet bestLength = 0;\n\tfor (let index = 0; index < 8; ) {\n\t\tif (w[index] !== 0) {\n\t\t\tindex += 1;\n\t\t\tcontinue;\n\t\t}\n\t\tlet end = index;\n\t\twhile (end < 8 && w[end] === 0) end += 1;\n\t\tif (end - index > bestLength) {\n\t\t\tbestStart = index;\n\t\t\tbestLength = end - index;\n\t\t}\n\t\tindex = end;\n\t}\n\tif (bestLength < 2) bestStart = -1;\n\tlet text = \"\";\n\tfor (let index = 0; index < 8; index += 1) {\n\t\tif (index === bestStart) {\n\t\t\ttext += \"::\";\n\t\t\tindex += bestLength - 1;\n\t\t\tcontinue;\n\t\t}\n\t\tif (text !== \"\" && !endsWithColons(text)) text += \":\";\n\t\ttext += hexText(w[index]!);\n\t}\n\treturn text;\n}\n\nfunction endsWithColons(text: string): boolean {\n\treturn text.length >= 2 && (apply(stringSlice, text, [-2]) as string) === \"::\";\n}\n\nconst HEX_DIGITS = \"0123456789abcdef\";\n\nfunction hexText(value: number): string {\n\tif (value === 0) return \"0\";\n\tlet text = \"\";\n\tfor (let rest = value; rest > 0; rest = (rest - (rest % 16)) / 16) text = HEX_DIGITS[rest % 16]! + text;\n\treturn text;\n}\n\nfunction formatIpv4(value: number): string {\n\treturn `${value >>> 24}.${(value >>> 16) & 0xff}.${(value >>> 8) & 0xff}.${value & 0xff}`;\n}\n\n/**\n * @internal What one textual IP address is, for the destination rules.\n * `malformed` is anything that is not a canonical dotted-quad or a valid\n * IPv6 address; a zone index (`%eth0`) makes an address `non_public`, since\n * only link-scoped addresses carry one.\n */\nexport type WebhookAddressVerdict =\n\t| { readonly kind: \"public\"; readonly address: string; readonly family: 4 | 6 }\n\t| { readonly kind: \"non_public\"; readonly family: 4 | 6 }\n\t| { readonly kind: \"malformed\" };\n\nconst NON_PUBLIC_V4: WebhookAddressVerdict = freeze({ kind: \"non_public\", family: 4 });\nconst NON_PUBLIC_V6: WebhookAddressVerdict = freeze({ kind: \"non_public\", family: 6 });\nconst MALFORMED: WebhookAddressVerdict = freeze({ kind: \"malformed\" });\n\n/** @internal Classify a textual IP address (no brackets). The `address` of a public verdict is canonical. */\nexport function classifyAddress(text: unknown): WebhookAddressVerdict {\n\tif (typeof text !== \"string\" || text.length === 0 || text.length > MAX_TEXT_LENGTH) return MALFORMED;\n\tconst zone = apply(stringIndexOf, text, [\"%\"]) as number;\n\tif (zone !== -1) return parseIpv6(apply(stringSlice, text, [0, zone]) as string) === undefined ? MALFORMED : NON_PUBLIC_V6;\n\tif (text.length > MAX_ADDRESS_LENGTH) return MALFORMED;\n\tconst v4 = parseIpv4(text);\n\tif (v4 !== undefined) {\n\t\treturn isPublicIpv4Value(v4) ? freeze({ kind: \"public\", address: formatIpv4(v4), family: 4 }) : NON_PUBLIC_V4;\n\t}\n\tconst v6 = parseIpv6(text);\n\tif (v6 === undefined) return MALFORMED;\n\treturn isPublicIpv6Words(v6) ? freeze({ kind: \"public\", address: formatIpv6(v6), family: 6 }) : NON_PUBLIC_V6;\n}\n\n/** @internal `true` for a canonical dotted-quad, the form WHATWG URL parsing gives an IPv4 host. */\nexport function isIpv4Literal(text: string): boolean {\n\treturn matches(IPV4_DOTTED, text);\n}\n\n/**\n * `true` when `address` is a well-formed IPv4 (canonical dotted-quad) or\n * IPv6 address that a webhook may be sent to: not loopback, private,\n * link-local, shared (CGNAT), multicast, reserved, unspecified,\n * documentation, benchmarking, unique-local, site-local, IPv4-mapped,\n * IPv4-compatible, or outside IPv6 global unicast; and, for NAT64\n * (`64:ff9b::/96`), 6to4 (`2002::/16`) and Teredo (`2001::/32`), only when\n * every embedded IPv4 address is public. Anything that does not parse is\n * `false`. The README lists every refused block.\n */\nexport function isPublicWebhookAddress(address: string): boolean {\n\treturn classifyAddress(address).kind === \"public\";\n}\n","import { inputError } from \"./errors\";\nimport { WEBHOOK_MAX_TIMER_MS } from \"./limits\";\nimport type { WebhookClock } from \"./ports\";\nimport { apply, readOwn, timeOf, type Fail } from \"./snapshot\";\n\n/*\n * Deadline, signal, clock and timer handling shared by the destination\n * resolver and the Node transport. Portable: it uses only the WHATWG\n * `AbortSignal`/`EventTarget` and the timer globals every supported runtime\n * has, captured at module load.\n */\n\nconst reflectGetOwnPropertyDescriptor = Reflect.getOwnPropertyDescriptor;\nconst abortedGetter = typeof AbortSignal === \"function\" ? reflectGetOwnPropertyDescriptor(AbortSignal.prototype, \"aborted\")?.get : undefined;\nconst eventTargetAdd = typeof EventTarget === \"function\" ? EventTarget.prototype.addEventListener : undefined;\nconst eventTargetRemove = typeof EventTarget === \"function\" ? EventTarget.prototype.removeEventListener : undefined;\nconst setTimer = setTimeout;\nconst clearTimer = clearTimeout;\nconst dateNow = Date.now;\nconst mathMax = Math.max;\nconst mathMin = Math.min;\n\nconst unreadable = (): Error => inputError(\"type\", \"input_unreadable\");\nconst unreadableFail: Fail = () => {\n\tthrow unreadable();\n};\n\n/** @internal The `{ deadline, signal }` of one call, read at entry. */\nexport interface CallBounds {\n\treadonly deadlineMs: number;\n\treadonly signal: AbortSignal;\n}\n\n/**\n * @internal Read `{ deadline, signal }` at entry, one descriptor read each.\n * The deadline must be a real `Date` with a finite time and the signal a real\n * `AbortSignal`; anything else throws `input_unreadable`.\n */\nexport function readCallBounds(options: unknown): CallBounds {\n\tif (options === null || typeof options !== \"object\") throw unreadable();\n\tconst deadlineMs = timeOf(readOwn(options, \"deadline\", \"deadline\", unreadableFail));\n\tif (!(deadlineMs === deadlineMs) || deadlineMs === Infinity || deadlineMs === -Infinity) throw unreadable();\n\tconst signal = readOwn(options, \"signal\", \"signal\", unreadableFail);\n\tif (signal === null || typeof signal !== \"object\") throw unreadable();\n\ttry {\n\t\tisAborted(signal as AbortSignal);\n\t} catch {\n\t\tthrow unreadable();\n\t}\n\treturn { deadlineMs, signal: signal as AbortSignal };\n}\n\n/**\n * @internal Whether a real `AbortSignal` has aborted, read through the\n * intrinsic getter (it throws for anything else and runs none of its code).\n */\nexport function isAborted(signal: AbortSignal): boolean {\n\tif (abortedGetter === undefined) throw unreadable();\n\treturn apply(abortedGetter, signal, []) === true;\n}\n\n/** @internal Call `listener` once when `signal` aborts; the returned function removes it. */\nexport function onAbort(signal: AbortSignal, listener: () => void): () => void {\n\tif (eventTargetAdd === undefined || eventTargetRemove === undefined) throw unreadable();\n\tapply(eventTargetAdd, signal, [\"abort\", listener, { once: true }]);\n\treturn () => {\n\t\tapply(eventTargetRemove, signal, [\"abort\", listener]);\n\t};\n}\n\n/** @internal A clock captured at construction, or the system clock when none was injected. */\nexport interface CapturedClock {\n\treadonly target: object | undefined;\n\treadonly now: ((...args: never[]) => unknown) | undefined;\n}\n\n/** @internal Capture an optional {@link WebhookClock}; a non-object or a missing `now` throws `input_unreadable`. */\nexport function captureOptionalClock(clock: unknown): CapturedClock {\n\tif (clock === undefined) return { target: undefined, now: undefined };\n\tif (clock === null || typeof clock !== \"object\") throw unreadable();\n\tconst now = (clock as Partial<WebhookClock>).now;\n\tif (typeof now !== \"function\") throw unreadable();\n\treturn { target: clock, now: now as (...args: never[]) => unknown };\n}\n\n/** @internal Epoch milliseconds from the clock, or `NaN` when it throws or returns no valid `Date`. Never throws. */\nexport function clockNowMs(clock: CapturedClock): number {\n\tif (clock.now === undefined) return dateNow();\n\ttry {\n\t\tconst ms = timeOf(apply(clock.now, clock.target, []));\n\t\treturn ms === Infinity || ms === -Infinity ? NaN : ms;\n\t} catch {\n\t\treturn NaN;\n\t}\n}\n\n/**\n * @internal Run `fire` after `ms`, clamped to `[0, WEBHOOK_MAX_TIMER_MS]` so a\n * far deadline cannot overflow into an immediate timer. Returns a cancel\n * function.\n */\nexport function startTimer(ms: number, fire: () => void): () => void {\n\tconst handle = setTimer(fire, mathMax(0, mathMin(ms, WEBHOOK_MAX_TIMER_MS)));\n\treturn () => {\n\t\tclearTimer(handle);\n\t};\n}\n","import { classifyAddress, isIpv4Literal } from \"./address\";\nimport { readCallBounds, captureOptionalClock, clockNowMs, isAborted, onAbort, startTimer, type CapturedClock } from \"./call-bounds\";\nimport { configError, guard, inputError } from \"./errors\";\nimport { WEBHOOK_MAX_TIMER_MS, assertPositiveFinite } from \"./limits\";\nimport type {\n\tWebhookCallOptions,\n\tWebhookClock,\n\tWebhookDestinationResolution,\n\tWebhookDestinationResolver,\n\tWebhookResolvedAddress,\n\tWebhookVettedDestination,\n} from \"./ports\";\nimport { apply, emptyMap, freeze, frozenList, isArray, isPlainRecord, matches, numberIsSafeInteger, primitive, readOwn, record, type Fail } from \"./snapshot\";\n\n/*\n * Destination rules and resolution (ADR 0018 decision 6, R8). Portable: the\n * DNS lookup is injected, so the main entry needs no Node built-in. The Node\n * lookup and transport are at `@fabricorg/webhook-delivery/node`.\n */\n\n/** The longest destination URL accepted, in UTF-16 code units. */\nexport const WEBHOOK_DESTINATION_MAX_URL_LENGTH = 2_048;\n/** The most addresses one lookup may return; a longer answer is refused as `dns_failure`. */\nexport const WEBHOOK_DESTINATION_MAX_ADDRESSES = 32;\n/** The default bound on one DNS lookup. */\nexport const DEFAULT_WEBHOOK_LOOKUP_TIMEOUT_MS = 5_000;\n\nconst URLConstructor = URL;\nconst urlGetter = (name: string): ((this: URL) => string) => {\n\tconst getter = Reflect.getOwnPropertyDescriptor(URL.prototype, name)?.get;\n\tif (getter === undefined) throw new TypeError(`URL.prototype.${name} is not an accessor.`);\n\treturn getter as (this: URL) => string;\n};\nconst urlProtocol = urlGetter(\"protocol\");\nconst urlUsername = urlGetter(\"username\");\nconst urlPassword = urlGetter(\"password\");\nconst urlPort = urlGetter(\"port\");\nconst urlHostname = urlGetter(\"hostname\");\nconst urlPathname = urlGetter(\"pathname\");\nconst urlSearch = urlGetter(\"search\");\nconst stringSlice = String.prototype.slice;\nconst stringEndsWith = String.prototype.endsWith;\nconst PromiseConstructor = Promise;\nconst promiseThen = Promise.prototype.then;\nconst AbortControllerConstructor = AbortController;\nconst abortControllerAbort = AbortController.prototype.abort;\nconst abortControllerSignal = Reflect.getOwnPropertyDescriptor(AbortController.prototype, \"signal\")!.get!;\nconst DateConstructor = Date;\n\n/** No ASCII control character or space anywhere: WHATWG parsing would strip or drop them silently. */\nconst URL_TEXT = /^[^\\x00-\\x20\\x7f]+$/;\n/**\n * `https://` then a host character. WHATWG parsing also accepts\n * `https:host`, `https:///host` and backslashes for a special scheme and\n * finds a host in them; requiring the plain form keeps the host an operator\n * sees in the URL the one that is checked.\n */\nconst URL_PREFIX = /^https:\\/\\/[^/\\\\?#@]/i;\n\n/** The result of checking a destination URL's rules, before any DNS lookup. */\nexport type WebhookDestinationUrlCheck =\n\t| {\n\t\t\treadonly ok: true;\n\t\t\t/** `https://<host><path><query>`: normalized by WHATWG URL parsing, fragment dropped. */\n\t\t\treadonly url: string;\n\t\t\t/** The host without IPv6 brackets: the SNI name and certificate identity. */\n\t\t\treadonly hostname: string;\n\t\t\t/** Set when the host is an IP literal; it is the only address the destination may use. */\n\t\t\treadonly literal?: WebhookResolvedAddress;\n\t }\n\t| { readonly ok: false; readonly code: \"invalid_url\" | \"private_address\" };\n\nconst INVALID_URL: WebhookDestinationUrlCheck = freeze({ ok: false, code: \"invalid_url\" });\nconst PRIVATE_URL: WebhookDestinationUrlCheck = freeze({ ok: false, code: \"private_address\" });\n\n/**\n * Check a destination URL against decision 6's rules without resolving it.\n * `invalid_url` when it is not a string of at most\n * {@link WEBHOOK_DESTINATION_MAX_URL_LENGTH} characters with no ASCII\n * control character or space, does not start with `https://` and a host\n * character (WHATWG would find a host in `https:host` or `https:///host`),\n * does not parse, is not `https:`, names a port\n * other than 443 (an explicit `:443` is the default and accepted), carries\n * userinfo, or has an empty host or one ending in `.`. `private_address` when\n * the host is `localhost` or a `.localhost` name, or an IP literal that is not\n * public ({@link isPublicWebhookAddress}). A public IP literal passes and is\n * returned as `literal`. IPv4 literals in decimal, hex, octal or shorthand\n * form are normalized to dotted-quad by URL parsing before they are checked.\n * Never throws.\n */\nexport function checkWebhookDestinationUrl(url: string): WebhookDestinationUrlCheck {\n\treturn checkDestinationUrl(url, false);\n}\n\n/**\n * @internal {@link checkWebhookDestinationUrl}, optionally accepting a\n * non-public host (an IP literal or a `localhost` name) while every other\n * rule still applies. `true` is passed only when the Node transport was built\n * by the internal test factory with its public-address re-check off.\n */\nexport function checkDestinationUrl(url: unknown, allowNonPublic: boolean): WebhookDestinationUrlCheck {\n\ttry {\n\t\treturn checkUrl(primitive(url), allowNonPublic);\n\t} catch {\n\t\treturn INVALID_URL;\n\t}\n}\n\nfunction checkUrl(text: unknown, allowNonPublic: boolean): WebhookDestinationUrlCheck {\n\tif (typeof text !== \"string\" || text.length === 0 || text.length > WEBHOOK_DESTINATION_MAX_URL_LENGTH) return INVALID_URL;\n\tif (!matches(URL_TEXT, text) || !matches(URL_PREFIX, text)) return INVALID_URL;\n\tlet parsed: URL;\n\ttry {\n\t\tparsed = new URLConstructor(text);\n\t} catch {\n\t\treturn INVALID_URL;\n\t}\n\tif (apply(urlProtocol, parsed, []) !== \"https:\") return INVALID_URL;\n\tif (apply(urlUsername, parsed, []) !== \"\" || apply(urlPassword, parsed, []) !== \"\") return INVALID_URL;\n\t// WHATWG parsing drops the scheme's default port, so `:443` reads as \"\".\n\tif (apply(urlPort, parsed, []) !== \"\") return INVALID_URL;\n\tconst host = apply(urlHostname, parsed, []) as string;\n\tif (host === \"\" || (apply(stringEndsWith, host, [\".\"]) as boolean)) return INVALID_URL;\n\tconst url = `https://${host}${apply(urlPathname, parsed, []) as string}${apply(urlSearch, parsed, []) as string}`;\n\t// WHATWG parsing serializes an IP-literal host canonically: IPv6 in\n\t// brackets (RFC 5952 form), IPv4 as a dotted-quad.\n\tconst v6 = host[0] === \"[\";\n\tif (v6 || isIpv4Literal(host)) {\n\t\tconst text = v6 ? (apply(stringSlice, host, [1, -1]) as string) : host;\n\t\tconst literal = classifyAddress(text);\n\t\tif (literal.kind === \"malformed\") return INVALID_URL;\n\t\tif (literal.kind === \"non_public\" && !allowNonPublic) return PRIVATE_URL;\n\t\tconst family: 4 | 6 = v6 ? 6 : 4;\n\t\treturn record({ ok: true as const, url, hostname: text, literal: record({ address: text, family }) });\n\t}\n\t// RFC 6761: these names resolve to loopback by definition.\n\tif (!allowNonPublic && (host === \"localhost\" || (apply(stringEndsWith, host, [\".localhost\"]) as boolean))) return PRIVATE_URL;\n\treturn record({ ok: true as const, url, hostname: host });\n}\n\n/**\n * Looks up a hostname's addresses. It is passed `{ deadline, signal }`; the\n * resolver aborts `signal` when it stops waiting, and ignores any answer that\n * arrives after that. Each answer is `{ address, family }` with a textual IPv4\n * or IPv6 address. `createNodeWebhookDnsLookup()` at\n * `@fabricorg/webhook-delivery/node` is one implementation.\n */\nexport type WebhookDnsLookup = (hostname: string, options: WebhookCallOptions) => Promise<readonly WebhookResolvedAddress[]>;\n\n/** Options for {@link createWebhookDestinationResolver}. */\nexport interface WebhookDestinationResolverOptions {\n\treadonly lookup: WebhookDnsLookup;\n\t/** The longest one lookup may take; default {@link DEFAULT_WEBHOOK_LOOKUP_TIMEOUT_MS}. The call's own deadline also applies. */\n\treadonly lookupTimeoutMs?: number;\n\t/** The clock the call's deadline is compared with; the system clock by default. */\n\treadonly clock?: WebhookClock;\n}\n\ninterface ResolverSettings {\n\treadonly lookup: (...args: never[]) => unknown;\n\treadonly lookupTimeoutMs: number;\n\treadonly clock: CapturedClock;\n}\n\nconst unreadable = (): Error => inputError(\"type\", \"input_unreadable\");\nconst unreadableFail: Fail = () => {\n\tthrow unreadable();\n};\n\nconst DNS_FAILURE: WebhookDestinationResolution = freeze({ ok: false, code: \"dns_failure\" });\nconst PRIVATE_ADDRESS: WebhookDestinationResolution = freeze({ ok: false, code: \"private_address\" });\n\n/**\n * A {@link WebhookDestinationResolver} that applies\n * {@link checkWebhookDestinationUrl}, then resolves the host through the\n * injected lookup and requires every answer to be public. The vetted\n * destination it returns carries the addresses the transport must connect\n * to; the transport never resolves the name again, so a later answer (a DNS\n * rebinding) cannot change where the request goes.\n *\n * A URL that passes the rules resolves to `dns_failure`, never a pass, when\n * the call's signal has aborted, its deadline has passed or the clock cannot\n * be read (no lookup is made; this applies to IP literals too), when the\n * lookup throws, rejects, or has not answered within `lookupTimeoutMs` or by\n * the deadline (its signal is then aborted and a late answer ignored), when\n * an answer arrives but, once read, the signal has aborted, the clock cannot\n * be read or that lookup deadline has passed, or when its answer is empty,\n * longer than {@link WEBHOOK_DESTINATION_MAX_ADDRESSES}, or not a list of\n * `{ address, family }` records whose family matches the address. It is\n * `private_address` when any answer is a well-formed address that is not\n * public, whatever the others are. A public IP-literal host is returned\n * without a lookup.\n *\n * @throws {TypeError} `input_unreadable` at construction when `lookup` is not\n * a function or `clock` has no `now` function, and from `resolve` (as a\n * rejected promise) when `{ deadline, signal }` is not a real `Date` and\n * `AbortSignal`.\n * @throws {WebhookDeliveryConfigError} when `lookupTimeoutMs` is not positive,\n * finite and at most `WEBHOOK_MAX_TIMER_MS`.\n */\nexport function createWebhookDestinationResolver(options: WebhookDestinationResolverOptions): WebhookDestinationResolver {\n\tconst settings = guard(() => readResolverOptions(options), unreadable);\n\tconst resolver = {\n\t\tresolve(url: string, callOptions: WebhookCallOptions): Promise<WebhookDestinationResolution> {\n\t\t\ttry {\n\t\t\t\treturn resolveWith(settings, url, callOptions);\n\t\t\t} catch {\n\t\t\t\treturn PromiseConstructor.reject(unreadable());\n\t\t\t}\n\t\t},\n\t};\n\treturn freeze(resolver);\n}\n\nfunction readResolverOptions(options: unknown): ResolverSettings {\n\tif (!isPlainRecord(options)) throw unreadable();\n\tconst lookup = readOwn(options, \"lookup\", \"lookup\", unreadableFail);\n\tif (typeof lookup !== \"function\") throw unreadable();\n\tconst rawTimeout = primitive(readOwn(options, \"lookupTimeoutMs\", \"lookupTimeoutMs\", unreadableFail));\n\tconst lookupTimeoutMs = rawTimeout === undefined ? DEFAULT_WEBHOOK_LOOKUP_TIMEOUT_MS : rawTimeout;\n\tassertPositiveFinite(lookupTimeoutMs, \"lookupTimeoutMs\");\n\tif (lookupTimeoutMs > WEBHOOK_MAX_TIMER_MS) throw configError(\"limit_out_of_range\", \"lookupTimeoutMs\");\n\tconst clock = captureOptionalClock(readOwn(options, \"clock\", \"clock\", unreadableFail));\n\treturn freeze({ lookup: lookup as (...args: never[]) => unknown, lookupTimeoutMs, clock });\n}\n\nfunction resolveWith(settings: ResolverSettings, url: unknown, callOptions: unknown): Promise<WebhookDestinationResolution> {\n\tconst bounds = readCallBounds(callOptions);\n\tconst check = checkWebhookDestinationUrl(url as string);\n\tif (!check.ok) return PromiseConstructor.resolve(record<WebhookDestinationResolution>({ ok: false, code: check.code }));\n\t// No success, a literal's included, for a call that is aborted, past its\n\t// deadline, or whose clock cannot be read.\n\tconst nowMs = clockNowMs(settings.clock);\n\tif (isAborted(bounds.signal) || !(bounds.deadlineMs > nowMs)) return PromiseConstructor.resolve(DNS_FAILURE);\n\tif (check.literal !== undefined) {\n\t\treturn PromiseConstructor.resolve(vetted(check.url, check.hostname, frozenList([check.literal])));\n\t}\n\tconst waitMs = bounds.deadlineMs - nowMs < settings.lookupTimeoutMs ? bounds.deadlineMs - nowMs : settings.lookupTimeoutMs;\n\t/** The earlier of the lookup timeout and the call's deadline. */\n\tconst lookupDeadlineMs = nowMs + waitMs;\n\tconst { url: vettedUrl, hostname } = check;\n\t// Checked again when an answer arrives: a lookup that blocks past the\n\t// deadline and then fulfils would otherwise win, because its fulfilment\n\t// runs as a microtask before the overdue timer.\n\tconst stillWanted = (): boolean => !isAborted(bounds.signal) && clockNowMs(settings.clock) < lookupDeadlineMs;\n\n\treturn new PromiseConstructor<WebhookDestinationResolution>((settle) => {\n\t\tconst controller = new AbortControllerConstructor();\n\t\tconst lookupSignal = apply(abortControllerSignal, controller, []) as AbortSignal;\n\t\tlet done = false;\n\t\tlet cancelTimer: () => void = () => {};\n\t\tlet removeAbort: () => void = () => {};\n\t\tconst finish = (result: WebhookDestinationResolution): void => {\n\t\t\tif (done) return;\n\t\t\tdone = true;\n\t\t\tcancelTimer();\n\t\t\tremoveAbort();\n\t\t\t// Tell the lookup to stop; whatever it answers later is ignored.\n\t\t\tapply(abortControllerAbort, controller, []);\n\t\t\tsettle(result);\n\t\t};\n\t\tcancelTimer = startTimer(waitMs, () => finish(DNS_FAILURE));\n\t\tremoveAbort = onAbort(bounds.signal, () => finish(DNS_FAILURE));\n\t\tif (done) return;\n\t\tlet pending: unknown;\n\t\ttry {\n\t\t\tpending = apply(settings.lookup, undefined, [hostname, freeze({ deadline: new DateConstructor(nowMs + waitMs), signal: lookupSignal })] as never[]);\n\t\t} catch {\n\t\t\tfinish(DNS_FAILURE);\n\t\t\treturn;\n\t\t}\n\t\tif (pending === null || (typeof pending !== \"object\" && typeof pending !== \"function\")) {\n\t\t\tfinish(DNS_FAILURE);\n\t\t\treturn;\n\t\t}\n\t\ttry {\n\t\t\t// Adopt the lookup's result through the intrinsic `then` of a fresh\n\t\t\t// promise, so a thenable's own code runs only as the lookup's code.\n\t\t\tapply(promiseThen, PromiseConstructor.resolve(pending), [\n\t\t\t\t(answer: unknown) => finish(acceptedVerdict(vettedUrl, hostname, answer, stillWanted)),\n\t\t\t\t() => finish(DNS_FAILURE),\n\t\t\t]);\n\t\t} catch {\n\t\t\tfinish(DNS_FAILURE);\n\t\t}\n\t});\n}\n\n/**\n * Judge an answer, then accept a pass only if the call is still wanted at\n * that moment (not aborted, clock valid, before the lookup deadline). The\n * check runs after the answer is read, so time spent reading it counts.\n */\nfunction acceptedVerdict(url: string, hostname: string, answer: unknown, stillWanted: () => boolean): WebhookDestinationResolution {\n\ttry {\n\t\tconst judged = verdict(url, hostname, answer);\n\t\tif (judged.ok && !stillWanted()) return DNS_FAILURE;\n\t\treturn judged;\n\t} catch {\n\t\treturn DNS_FAILURE;\n\t}\n}\n\n/** Judge a lookup answer: any non-public address refuses it; anything unreadable is `dns_failure`. */\nfunction verdict(url: string, hostname: string, answer: unknown): WebhookDestinationResolution {\n\tif (!isArray(answer)) return DNS_FAILURE;\n\tconst length = readOwn(answer, \"length\", \"length\", unreadableFail);\n\tif (typeof length !== \"number\" || !numberIsSafeInteger(length) || length < 1 || length > WEBHOOK_DESTINATION_MAX_ADDRESSES) return DNS_FAILURE;\n\tconst seen = emptyMap<true>();\n\tconst addresses: WebhookResolvedAddress[] = [];\n\tlet malformed = false;\n\tfor (let index = 0; index < length; index += 1) {\n\t\tconst entry = readOwn(answer, `${index}`, \"answer\", unreadableFail);\n\t\tif (!isPlainRecord(entry)) {\n\t\t\tmalformed = true;\n\t\t\tcontinue;\n\t\t}\n\t\tconst address = primitive(readOwn(entry, \"address\", \"address\", unreadableFail));\n\t\tconst family = primitive(readOwn(entry, \"family\", \"family\", unreadableFail));\n\t\tconst judged = classifyAddress(address);\n\t\tif (judged.kind === \"non_public\") return PRIVATE_ADDRESS;\n\t\tif (judged.kind === \"malformed\" || judged.family !== family) {\n\t\t\tmalformed = true;\n\t\t\tcontinue;\n\t\t}\n\t\tif (seen[judged.address] === true) continue;\n\t\tseen[judged.address] = true;\n\t\taddresses[addresses.length] = record({ address: judged.address, family: judged.family });\n\t}\n\tif (malformed) return DNS_FAILURE;\n\treturn vetted(url, hostname, frozenList(addresses));\n}\n\nfunction vetted(url: string, hostname: string, addresses: readonly WebhookResolvedAddress[]): WebhookDestinationResolution {\n\tconst destination = record<WebhookVettedDestination>({ url, hostname, port: 443, addresses });\n\treturn record<WebhookDestinationResolution>({ ok: true, destination });\n}\n","import {\n\tWEBHOOK_ADMISSION_DENIAL_CODES,\n\tWEBHOOK_REVOCATION_CODES,\n\ttype WebhookAdmissionDenialCode,\n\ttype WebhookRevocationCode,\n} from \"./codes\";\nimport { guard, guardOr, inputError } from \"./errors\";\nimport type { WebhookAdmissionDecision, WebhookDeliveryAuthorizationDecision } from \"./ports\";\nimport { freeze, isOneOf, isPlainRecord, primitive, readOwn, record, type Fail } from \"./snapshot\";\n\nconst ALLOW: WebhookAdmissionDecision = record({ decision: \"allow\" });\nconst ADMISSION_UNAVAILABLE: WebhookAdmissionDecision = record({ decision: \"unavailable\" });\nconst AUTHORIZED: WebhookDeliveryAuthorizationDecision = record({ decision: \"authorized\" });\nconst AUTHORIZATION_UNAVAILABLE: WebhookDeliveryAuthorizationDecision = record({ decision: \"unavailable\" });\n\n/** Thrown inside a normalizer only, and always caught there. */\nconst UNREADABLE = freeze(Object.create(null) as object);\nconst unreadableFail: Fail = () => {\n\tthrow UNREADABLE;\n};\n\n/** Admission allows the event. */\nexport function webhookAdmissionAllow(): WebhookAdmissionDecision {\n\treturn ALLOW;\n}\n\n/**\n * Admission denies the event with a fixed reason code; the denial is recorded.\n *\n * @throws {TypeError} `denial_code_unknown` for a code outside `WEBHOOK_ADMISSION_DENIAL_CODES`.\n */\nexport function webhookAdmissionDeny(code: WebhookAdmissionDenialCode): WebhookAdmissionDecision {\n\treturn guard(() => {\n\t\tconst value = primitive(code);\n\t\tif (!isOneOf(WEBHOOK_ADMISSION_DENIAL_CODES, value)) throw inputError(\"type\", \"denial_code_unknown\");\n\t\treturn record<WebhookAdmissionDecision>({ decision: \"deny\", code: value as WebhookAdmissionDenialCode });\n\t}, () => inputError(\"type\", \"denial_code_unknown\"));\n}\n\n/** Admission cannot decide now; the job retries without an intent. */\nexport function webhookAdmissionUnavailable(): WebhookAdmissionDecision {\n\treturn ADMISSION_UNAVAILABLE;\n}\n\n/** Snapshot `decision` and `code` from a plain answer; anything unreadable throws, to be caught. */\nfunction snapshotAnswer(value: unknown): { readonly decision: unknown; readonly code: unknown } {\n\tif (!isPlainRecord(value)) throw UNREADABLE;\n\tconst decision = primitive(readOwn(value, \"decision\", \"decision\", unreadableFail));\n\tconst code = primitive(readOwn(value, \"code\", \"code\", unreadableFail));\n\treturn record({ decision, code });\n}\n\n/**\n * Read an admission port's answer fail-closed. Anything other than a\n * well-formed `allow`, `deny` with a known code, or `unavailable`, including\n * a `deny` with an unknown code, an accessor, a non-plain object or an\n * answer whose inspection throws, becomes `unavailable`: it never becomes\n * `allow`, an unknown code is never stored, and this function never throws.\n */\nexport function normalizeWebhookAdmissionDecision(value: unknown): WebhookAdmissionDecision {\n\treturn guardOr(() => {\n\t\tconst { decision, code } = snapshotAnswer(value);\n\t\tif (decision === \"allow\") return ALLOW;\n\t\tif (decision === \"deny\" && isOneOf(WEBHOOK_ADMISSION_DENIAL_CODES, code)) {\n\t\t\treturn record<WebhookAdmissionDecision>({ decision: \"deny\", code: code as WebhookAdmissionDenialCode });\n\t\t}\n\t\treturn ADMISSION_UNAVAILABLE;\n\t}, () => ADMISSION_UNAVAILABLE);\n}\n\n/**\n * Read a delivery authorization port's answer fail-closed. Anything other\n * than a well-formed `authorized`, `revoked` with a known code, or\n * `unavailable`, including an unreadable answer, becomes `unavailable`,\n * which defers the intent unsent. This function never throws.\n */\nexport function normalizeWebhookDeliveryAuthorizationDecision(value: unknown): WebhookDeliveryAuthorizationDecision {\n\treturn guardOr(() => {\n\t\tconst { decision, code } = snapshotAnswer(value);\n\t\tif (decision === \"authorized\") return AUTHORIZED;\n\t\tif (decision === \"revoked\" && isOneOf(WEBHOOK_REVOCATION_CODES, code)) {\n\t\t\treturn record<WebhookDeliveryAuthorizationDecision>({ decision: \"revoked\", code: code as WebhookRevocationCode });\n\t\t}\n\t\treturn AUTHORIZATION_UNAVAILABLE;\n\t}, () => AUTHORIZATION_UNAVAILABLE);\n}\n","import { fanOutError } from \"./errors\";\nimport type { WebhookCallOptions, WebhookClock } from \"./ports\";\nimport { apply, isPlainRecord, numberIsFinite, readOwn, timeOf } from \"./snapshot\";\n\n/*\n * Bounded port calls for the fan-out publisher and cycle and the delivery\n * cycle (R4: each awaited port, stores included, is bounded).\n *\n * Each call gets an absolute `deadline` and its own `AbortSignal`. The\n * caller stops waiting at `timeoutMs` and aborts the signal, so a port that\n * honours it stops work; an answer that settles at or after the bound is a\n * timeout and is dropped (`boundedCall` says how the settle time is taken).\n * A store write that timed out may still have committed, so the cycles\n * treat it as unknown and never follow it with a second, conflicting\n * transition on the strength of the timeout. Every write the cycles make is\n * insert-if-absent or fenced, so a late write either lands once or is\n * refused. The transport\n * call (R3) is not only raced: the transport itself takes the deadline and\n * the signal, refuses an expired or cancelled handoff and stops a started\n * request at the deadline; the delivery cycle waits `settleGraceMs` past\n * the deadline for it to report what it observed (src/delivery-cycle.ts).\n *\n * A thrown value is never read: the outcome records only that it threw.\n * The port's promise has a rejection handler attached as soon as it is\n * returned (`work` in `boundedCall`), so a\n * port that rejects after the caller stopped waiting raises no unhandled\n * rejection.\n */\n\n/** How a bounded call ended. A thrown value is dropped unread. */\nexport type BoundedOutcome<T> =\n\t| { readonly ok: true; readonly value: T }\n\t| { readonly ok: false; readonly reason: \"threw\" | \"timeout\" | \"aborted\" };\n\nconst abortedGetter = typeof AbortSignal === \"function\" ? Reflect.getOwnPropertyDescriptor(AbortSignal.prototype, \"aborted\")?.get : undefined;\n\n/**\n * The caller's `signal` from a publish context, or `undefined`. Read as an\n * own data property; it counts only when the intrinsic `aborted` getter\n * accepts it, which is true of real `AbortSignal`s only and runs none of the\n * value's code. Anything that throws while it is read is dropped unread.\n */\nexport function readContextSignal(context: unknown): AbortSignal | undefined {\n\ttry {\n\t\tif (!isPlainRecord(context) || abortedGetter === undefined) return undefined;\n\t\tconst signal = readOwn(context, \"signal\", \"signal\", () => undefined as never);\n\t\tif (signal === null || typeof signal !== \"object\") return undefined;\n\t\tapply(abortedGetter, signal, []);\n\t\treturn signal as AbortSignal;\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\n/**\n * Whether a signal {@link readContextSignal} returned has aborted, read with\n * the intrinsic `aborted` getter, so an own `aborted` property on the\n * signal object is never consulted.\n */\nexport function signalAborted(signal: AbortSignal): boolean {\n\tif (abortedGetter === undefined) return false;\n\ttry {\n\t\treturn apply(abortedGetter, signal, []) === true;\n\t} catch {\n\t\treturn false;\n\t}\n}\n\n/** The context's `actorDisclosure` when it is one of Host's three values, else `undefined`; never throws. */\nexport function readContextDisclosure(context: unknown): \"included\" | \"suppressed\" | \"legacy\" | undefined {\n\ttry {\n\t\tif (!isPlainRecord(context)) return undefined;\n\t\tconst disclosure = readOwn(context, \"actorDisclosure\", \"actorDisclosure\", () => undefined as never);\n\t\treturn disclosure === \"included\" || disclosure === \"suppressed\" || disclosure === \"legacy\" ? disclosure : undefined;\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\n/** An injected clock captured at construction: the object and its `now` function. */\nexport interface FanOutClock {\n\treadonly target: object;\n\treadonly now: (...args: never[]) => unknown;\n}\n\n/** Capture an injected clock at construction; anything without a `now` function is `options_invalid`. */\nexport function captureFanOutClock(clock: WebhookClock | undefined): FanOutClock {\n\tif (clock === null || typeof clock !== \"object\") throw fanOutError(\"options_invalid\", \"clock\");\n\tconst now = (clock as { now?: unknown }).now;\n\tif (typeof now !== \"function\") throw fanOutError(\"options_invalid\", \"clock.now\");\n\treturn { target: clock, now: now as (...args: never[]) => unknown };\n}\n\n/** Read the captured clock, refusing a throw or an invalid time as `clock_invalid`. */\nexport function readFanOutClock(clock: FanOutClock): number {\n\tlet value: unknown;\n\ttry {\n\t\tvalue = apply(clock.now, clock.target, []);\n\t} catch {\n\t\tthrow fanOutError(\"clock_invalid\", \"clock\");\n\t}\n\tconst ms = timeOf(value);\n\tif (!numberIsFinite(ms)) throw fanOutError(\"clock_invalid\", \"clock\");\n\treturn ms;\n}\n\nconst performanceNow = typeof performance === \"object\" && performance !== null && typeof performance.now === \"function\"\n\t? performance.now.bind(performance)\n\t: Date.now;\n\nconst TIMEOUT: { readonly ok: false; readonly reason: \"timeout\" } = Object.freeze({ ok: false, reason: \"timeout\" });\nconst ABORTED: { readonly ok: false; readonly reason: \"aborted\" } = Object.freeze({ ok: false, reason: \"aborted\" });\nconst THREW: { readonly ok: false; readonly reason: \"threw\" } = Object.freeze({ ok: false, reason: \"threw\" });\n\n/**\n * Run `run` with an absolute deadline `nowMs + timeoutMs` and a signal that\n * aborts at the timeout or when `parent` aborts. Resolves with the outcome;\n * never rejects.\n *\n * An answer (a value or a throw) is classed by when a handler attached\n * directly to the port's promise runs, not by when this function's\n * continuation resumes. That handler records the time: an answer is accepted\n * when, at that handler, `readNow()` (the clock `nowMs` came from) is still\n * before `nowMs + timeoutMs + settleGraceMs` and fewer than\n * `timeoutMs + settleGraceMs` milliseconds have passed on the monotonic\n * clock since the call started. Otherwise it is a `timeout`, and so is an\n * answer whose `readNow()` throws. The classed answer settles the race as\n * soon as that handler returns, so a timer that fires later, or other work\n * that delays this function's own continuation after the handler ran, cannot\n * turn an answer the handler classed as on time into a timeout.\n * `settleGraceMs` (default 0) is the one stated exception, for the\n * transport: its answer is still accepted for that long after its deadline,\n * because the transport itself stops the request at the deadline and\n * reports what it saw.\n *\n * A parent abort settles the race at once, ahead of any answer whose\n * handler has not yet returned, so such an answer is `aborted`.\n *\n * The handler is attached as soon as the port returns, so it runs once the\n * promise settles and the microtasks already queued ahead of it (including\n * any handlers the port itself attached) have run. That delay counts\n * against the answer: it can make an answer late, never early.\n *\n * Whenever this resolves `timeout`, for any reason, the call's signal has\n * already been aborted (`controller.abort()` below runs before it returns),\n * so a port that honours the signal stops, and a store that has not yet\n * reached its atomic step refuses the write. A store write that times out\n * may still have committed: callers treat a timed-out write as unknown.\n */\nexport async function boundedCall<T>(\n\tnowMs: number,\n\ttimeoutMs: number,\n\tparent: AbortSignal | undefined,\n\trun: (options: WebhookCallOptions) => Promise<T>,\n\treadNow: () => number,\n\tsettleGraceMs = 0,\n): Promise<BoundedOutcome<T>> {\n\tif (parent?.aborted) return ABORTED;\n\tconst startedMonotonicMs = performanceNow();\n\tconst acceptWithinMs = timeoutMs + settleGraceMs;\n\tconst acceptUntilMs = nowMs + acceptWithinMs;\n\tconst controller = new AbortController();\n\tconst options: WebhookCallOptions = { deadline: new Date(nowMs + timeoutMs), signal: controller.signal };\n\tlet timer: ReturnType<typeof setTimeout> | undefined;\n\tlet graceTimer: ReturnType<typeof setTimeout> | undefined;\n\tlet onParentAbort: (() => void) | undefined;\n\tconst stop = new Promise<BoundedOutcome<T>>((resolve) => {\n\t\ttimer = setTimeout(() => {\n\t\t\tcontroller.abort();\n\t\t\tif (settleGraceMs > 0) graceTimer = setTimeout(() => resolve(TIMEOUT), settleGraceMs);\n\t\t\telse resolve(TIMEOUT);\n\t\t}, timeoutMs);\n\t\tif (parent) {\n\t\t\tonParentAbort = () => {\n\t\t\t\tcontroller.abort();\n\t\t\t\tresolve(ABORTED);\n\t\t\t};\n\t\t\tparent.addEventListener(\"abort\", onParentAbort, { once: true });\n\t\t}\n\t});\n\t/** Class an answer when its handler runs (see above). */\n\tconst classify = (outcome: BoundedOutcome<T>): BoundedOutcome<T> => {\n\t\tif (!(performanceNow() - startedMonotonicMs < acceptWithinMs)) return TIMEOUT;\n\t\ttry {\n\t\t\treturn readNow() < acceptUntilMs ? outcome : TIMEOUT;\n\t\t} catch {\n\t\t\treturn TIMEOUT;\n\t\t}\n\t};\n\ttry {\n\t\tlet work: Promise<BoundedOutcome<T>>;\n\t\ttry {\n\t\t\t// The handler is attached directly to what the port returned (a\n\t\t\t// thenable is adopted first, one turn later), so a rejection is\n\t\t\t// always handled. Adoption is inside this guard because it can throw\n\t\t\t// too (a promise whose `constructor` getter throws); that throw is\n\t\t\t// dropped unread, like any other, and cleanup below still runs. Such\n\t\t\t// a promise is outside the port contract (src/ports.ts): no handler\n\t\t\t// can be attached to it, so a rejection it carries stays unhandled.\n\t\t\twork = Promise.resolve(run(options)).then(\n\t\t\t\t(value) => classify({ ok: true, value }),\n\t\t\t\t() => classify(THREW),\n\t\t\t);\n\t\t} catch {\n\t\t\twork = Promise.resolve().then(() => classify(THREW));\n\t\t}\n\t\tconst outcome = await Promise.race([work, stop]);\n\t\tif (!outcome.ok && outcome.reason === \"timeout\") controller.abort();\n\t\treturn outcome;\n\t} finally {\n\t\tif (timer !== undefined) clearTimeout(timer);\n\t\tif (graceTimer !== undefined) clearTimeout(graceTimer);\n\t\tif (parent && onParentAbort) parent.removeEventListener(\"abort\", onParentAbort);\n\t}\n}\n","import { snapshotEventMetadata } from \"./persistence-projection\";\nimport {\n\tdateParse,\n\tisArray,\n\tisOneOf,\n\tisPlainRecord,\n\tnumberIsFinite,\n\tnumberIsSafeInteger,\n\treadOwn,\n\tsnapshotJson,\n\tsnapshotJsonPart,\n\ttype Fail,\n\ttype JsonNodeBudget,\n} from \"./snapshot\";\nimport type {\n\tWebhookEligibilityRevision,\n\tWebhookEventMetadata,\n\tWebhookJobActor,\n\tWebhookJsonObject,\n\tWebhookJsonValue,\n\tWebhookSubscriptionStatus,\n} from \"./types\";\n\n/*\n * Reading what a port returned, for the fan-out publisher and cycle.\n *\n * `boundedCall` (fan-out-call.ts) already turns a port's rejection into a\n * bare reason. A resolved value is still the port's object: inspecting it\n * through ordinary property access could run a getter or a Proxy trap whose\n * error, with whatever text it carries, would escape. So every result is\n * read here, inside one try/catch per reader: own data properties only,\n * through descriptors (an accessor is refused uncalled), copied into\n * package-owned frozen snapshots (`snapshotJson`). Anything that cannot be\n * read this way is `undefined`, and the caller maps that to a fixed code.\n * Nothing thrown inside a reader is kept or read.\n */\n\nconst refuse: Fail = () => {\n\tthrow REFUSED;\n};\nconst REFUSED = Object.freeze(Object.create(null) as object);\n\n/** The `outcome` field of an insert result when it is one of `allowed`, else `undefined`. */\nexport function readOutcome<T extends string>(value: unknown, allowed: readonly T[]): T | undefined {\n\ttry {\n\t\tif (!isPlainRecord(value)) return undefined;\n\t\tconst outcome = readOwn(value, \"outcome\", \"outcome\", refuse);\n\t\treturn isOneOf(allowed, outcome) ? (outcome as T) : undefined;\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\n/** Own data property `key` of a snapshot (which is plain, frozen, null-prototype data). */\nfunction field(snapshot: WebhookJsonObject, key: string): WebhookJsonValue | undefined {\n\treturn readOwn(snapshot, key, key, refuse) as WebhookJsonValue | undefined;\n}\n\nfunction object(value: WebhookJsonValue | undefined): WebhookJsonObject {\n\tif (value === null || value === undefined || typeof value !== \"object\" || isArray(value)) throw REFUSED;\n\treturn value as WebhookJsonObject;\n}\n\nfunction nonEmpty(value: WebhookJsonValue | undefined): string {\n\tif (typeof value !== \"string\" || value === \"\") throw REFUSED;\n\treturn value;\n}\n\nfunction whole(value: WebhookJsonValue | undefined, min: number): number {\n\tif (typeof value !== \"number\" || !numberIsSafeInteger(value) || value < min) throw REFUSED;\n\treturn value;\n}\n\n/** A list result copied into a frozen snapshot, or `undefined`. */\nfunction snapshotList(value: unknown): readonly WebhookJsonValue[] | undefined {\n\tconst copy = snapshotJson(value, \"result\", refuse);\n\treturn isArray(copy) ? copy : undefined;\n}\n\n/**\n * What identifies a claimed record and the lease it was claimed under: the\n * fields a fenced transition needs. Read before, and independently of, the\n * rest of the record ({@link readClaimedJobs}).\n */\nexport interface ClaimedHeader {\n\treadonly eventId: string;\n\treadonly tenantId: string;\n\treadonly spaceId: string;\n\treadonly lease: { readonly owner: string; readonly fence: number };\n}\n\n/** A claimed fan-out job, as the cycle uses it: every field read from the record and validated. */\nexport interface ClaimedJob extends ClaimedHeader {\n\treadonly event: WebhookEventMetadata;\n\treadonly payload: WebhookJsonObject | null;\n\treadonly payloadProjected: boolean;\n\treadonly facts: WebhookJsonObject;\n\treadonly actor: WebhookJobActor;\n\treadonly attemptCount: number;\n\treadonly processingDeadline: string;\n\t/** `processingDeadline` and `event.recordedAt` as epoch milliseconds, both finite. */\n\treadonly processingDeadlineMs: number;\n\treadonly recordedAtMs: number;\n}\n\n/**\n * One entry of a claim result. `undefined`: the record's identity or lease\n * cannot be read, so no fenced write can name it. `job: undefined`: the\n * header was read but the rest of the record cannot be, so the cycle can\n * still end the job through its fenced dead-letter transition.\n */\nexport type ClaimedEntry = { readonly header: ClaimedHeader; readonly job: ClaimedJob | undefined } | undefined;\n\nconst ACTOR_REASONS = Object.freeze([\"suppressed\", \"legacy\"] as const);\n\nfunction readActor(value: WebhookJsonValue | undefined): WebhookJobActor {\n\tconst actor = object(value);\n\tconst state = field(actor, \"state\");\n\tif (state === \"present\") {\n\t\treturn Object.freeze({ state: \"present\", actorId: nonEmpty(field(actor, \"actorId\")), actorType: nonEmpty(field(actor, \"actorType\")) });\n\t}\n\tconst reason = field(actor, \"reason\");\n\tif (state !== \"absent\" || !isOneOf(ACTOR_REASONS, reason)) throw REFUSED;\n\treturn Object.freeze({ state: \"absent\", reason: reason as \"suppressed\" | \"legacy\" });\n}\n\n/** Own data property `key` of a port's record, read once through its descriptor. */\nfunction raw(record: object, key: string): unknown {\n\treturn readOwn(record, key, key, refuse);\n}\n\nfunction plain(value: unknown): object {\n\tif (!isPlainRecord(value)) throw REFUSED;\n\treturn value;\n}\n\n/**\n * The header: identity and lease, each an own data property read once. A\n * store adds the lease when it claims; it is read here as two scalars, with\n * no size budget, so nothing the store adds can make the header unreadable.\n */\nfunction readHeader(record: unknown): ClaimedHeader {\n\tconst job = plain(record);\n\tconst eventId = nonEmpty(raw(job, \"eventId\") as WebhookJsonValue | undefined);\n\tconst tenantId = nonEmpty(raw(job, \"tenantId\") as WebhookJsonValue | undefined);\n\tconst spaceId = nonEmpty(raw(job, \"spaceId\") as WebhookJsonValue | undefined);\n\tconst lease = plain(raw(job, \"lease\"));\n\tconst owner = nonEmpty(raw(lease, \"owner\") as WebhookJsonValue | undefined);\n\tconst fence = whole(raw(lease, \"fence\") as WebhookJsonValue | undefined, 0);\n\treturn Object.freeze({ eventId, tenantId, spaceId, lease: Object.freeze({ owner, fence }) });\n}\n\n/**\n * Containers the insert-side snapshot counted besides `payload` and `facts`:\n * the job record itself, `event` and `actor`. `event` and `actor` hold only\n * scalars once projected, so each is one container.\n */\nconst DRAFT_FIXED_CONTAINERS = 3;\n/** The depth at which the insert-side snapshot reached `payload` and `facts`: one below the job record. */\nconst DRAFT_FIELD_DEPTH = 1;\n\n/**\n * The rest of the record: the projected draft and the scalars the store\n * added (`attemptCount`, `processingDeadline`).\n *\n * Why this cannot refuse a record the store accepted (A1). The insert\n * (`readJobDraft` in the memory store, via `snapshotRecord`) holds the whole\n * submitted job to `snapshotJson`'s limits: at most `MAX_JSON_NODES`\n * containers and `MAX_JSON_DEPTH` levels, counted from the job record. A\n * claimed record is that draft plus whatever the store adds (a lease, a\n * fence, timestamps, an attempt count, a diagnostic), so budgeting the whole\n * claimed record would refuse a draft accepted at the limit. Instead only\n * the draft's open-ended parts, `payload` and `facts`, are snapshotted, with\n * one shared budget seeded with the draft's other containers and starting\n * at the depth the insert reached them. For a store that returns the draft\n * it accepted, the count and depth here are therefore at most the insert's\n * for that draft, whatever the store added; store-added fields are read as\n * scalars and never budgeted. Test:\n * \"a draft accepted at the node limit round-trips through a claim\".\n */\nfunction readBody(record: unknown, header: ClaimedHeader): ClaimedJob {\n\tconst job = plain(record);\n\t// The same validation the projection applies to an envelope.\n\tconst event = snapshotEventMetadata(raw(job, \"event\"));\n\tif (event.eventId !== header.eventId || event.tenantId !== header.tenantId || event.spaceId !== header.spaceId) throw REFUSED;\n\tconst budget: JsonNodeBudget = { nodes: DRAFT_FIXED_CONTAINERS };\n\tconst storedPayload = raw(job, \"payload\");\n\tconst payload = storedPayload === null ? null : object(snapshotJsonPart(storedPayload, \"payload\", refuse, DRAFT_FIELD_DEPTH, budget));\n\tconst facts = object(snapshotJsonPart(raw(job, \"facts\"), \"facts\", refuse, DRAFT_FIELD_DEPTH, budget));\n\tconst actor = readActor(snapshotJsonPart(raw(job, \"actor\"), \"actor\", refuse, DRAFT_FIELD_DEPTH, { nodes: 0 }));\n\tconst processingDeadline = nonEmpty(raw(job, \"processingDeadline\") as WebhookJsonValue | undefined);\n\tconst processingDeadlineMs = dateParse(processingDeadline);\n\tconst recordedAtMs = dateParse(event.recordedAt);\n\tif (!numberIsFinite(processingDeadlineMs) || !numberIsFinite(recordedAtMs)) throw REFUSED;\n\treturn Object.freeze({\n\t\t...header,\n\t\tevent,\n\t\tpayload,\n\t\tpayloadProjected: raw(job, \"payloadProjected\") === true,\n\t\tfacts,\n\t\tactor,\n\t\tattemptCount: whole(raw(job, \"attemptCount\") as WebhookJsonValue | undefined, 0),\n\t\tprocessingDeadline,\n\t\tprocessingDeadlineMs,\n\t\trecordedAtMs,\n\t});\n}\n\n/**\n * The claim result: `undefined` when the list itself cannot be read, and\n * otherwise one {@link ClaimedEntry} per claimed record. Each record's\n * header is read first, in its own try/catch, and its body after, in\n * another, so a body that cannot be read still leaves a header the cycle\n * can dead-letter by (A2). Whatever either read throws is dropped unread.\n */\nexport function readClaimedJobs(value: unknown): readonly ClaimedEntry[] | undefined {\n\tconst items: unknown[] = [];\n\ttry {\n\t\t// The list shallowly, so one unreadable job does not hide the others.\n\t\tif (!isArray(value)) return undefined;\n\t\tconst length = readOwn(value, \"length\", \"length\", refuse);\n\t\tif (typeof length !== \"number\" || !numberIsSafeInteger(length) || length < 0 || length > MAX_CLAIMED) return undefined;\n\t\tfor (let index = 0; index < length; index += 1) items.push(readOwn(value, `${index}`, \"job\", refuse));\n\t} catch {\n\t\treturn undefined;\n\t}\n\treturn Object.freeze(items.map((item): ClaimedEntry => {\n\t\tlet header: ClaimedHeader;\n\t\ttry {\n\t\t\theader = readHeader(item);\n\t\t} catch {\n\t\t\treturn undefined;\n\t\t}\n\t\ttry {\n\t\t\treturn Object.freeze({ header, job: readBody(item, header) });\n\t\t} catch {\n\t\t\treturn Object.freeze({ header, job: undefined });\n\t\t}\n\t}));\n}\n\n/** More jobs than any claim limit a cycle sends; a longer answer is not a claim result. */\nconst MAX_CLAIMED = 100_000;\n\nconst STATUSES = Object.freeze([\"active\", \"paused\", \"deleted\"] as const);\n\n/** The revision listing, or `undefined` when any part of it cannot be read: eligibility is then unknown. */\nexport function readRevisions(value: unknown): readonly WebhookEligibilityRevision[] | undefined {\n\ttry {\n\t\tconst list = snapshotList(value);\n\t\tif (list === undefined) return undefined;\n\t\treturn Object.freeze(list.map((item) => {\n\t\t\tconst revision = object(item);\n\t\t\tconst patterns = field(revision, \"eventTypePatterns\");\n\t\t\tif (!isArray(patterns)) throw REFUSED;\n\t\t\tconst status = field(revision, \"status\");\n\t\t\tif (!isOneOf(STATUSES, status)) throw REFUSED;\n\t\t\tconst effectiveUntil = field(revision, \"effectiveUntil\");\n\t\t\treturn Object.freeze({\n\t\t\t\tsubscriptionId: nonEmpty(field(revision, \"subscriptionId\")),\n\t\t\t\trevision: whole(field(revision, \"revision\"), 1),\n\t\t\t\ttenantId: nonEmpty(field(revision, \"tenantId\")),\n\t\t\t\tspaceId: nonEmpty(field(revision, \"spaceId\")),\n\t\t\t\tstatus: status as WebhookSubscriptionStatus,\n\t\t\t\teventTypePatterns: Object.freeze(patterns.map(nonEmpty)),\n\t\t\t\teffectiveFrom: nonEmpty(field(revision, \"effectiveFrom\")),\n\t\t\t\teffectiveUntil: effectiveUntil === null || effectiveUntil === undefined ? null : nonEmpty(effectiveUntil),\n\t\t\t});\n\t\t}));\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\n/**\n * A tombstone read: `\"decided\"` when an intent or denial marker exists for\n * the pair, `\"undecided\"` for `null`, `undefined` when the answer cannot be read.\n */\nexport function readDecided(value: unknown): \"decided\" | \"undecided\" | undefined {\n\ttry {\n\t\tif (value === null) return \"undecided\";\n\t\tif (!isPlainRecord(value)) return undefined;\n\t\tconst kind = readOwn(value, \"kind\", \"kind\", refuse);\n\t\treturn kind === \"intent\" || kind === \"denial\" ? \"decided\" : undefined;\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n","import type {\n\tEnterpriseEventEnvelope,\n\tEnterpriseEventPublishContext,\n\tEnterpriseEventPublisher,\n} from \"@fabricorg/platform-host\";\n\nimport { configError, fanOutError, guard } from \"./errors\";\nimport { boundedCall, captureFanOutClock, readContextDisclosure, readContextSignal, readFanOutClock, signalAborted, type FanOutClock } from \"./fan-out-call\";\nimport { readOutcome } from \"./fan-out-read\";\nimport { assertPositiveInteger, resolveWebhookDeliveryLimits, WEBHOOK_MAX_TIMER_MS, type WebhookDeliveryLimits } from \"./limits\";\nimport { callFail, dataFail, projectWebhookFanOutJob, uninspectable } from \"./persistence-projection\";\nimport type { WebhookDeliveryStore } from \"./ports\";\nimport { apply, define, emptyMap, freeze, hasOwn, isArray, isPlainRecord, primitive, readOwn, record, snapshotJsonPart, timeOf, type JsonNodeBudget } from \"./snapshot\";\nimport { isoOf } from \"./store-input\";\nimport type { WebhookJobActor, WebhookPayloadPolicy } from \"./types\";\n\n/*\n * Stage one of the two-stage fan-out (ADR 0018 decision 2), and the\n * composite publisher that lets the Host relay feed webhooks and a bus from\n * one outbox (decisions 2 and 5).\n *\n * The fan-out publisher resolves subscriptions not at all. It projects the\n * envelope (persistence projection) and inserts one fan-out job keyed by\n * `eventId`, insert-if-absent, and resolves only after the store answers\n * `inserted` or `already_present`. The Host relay marks the outbox record\n * published only after `publish()` resolves (`runOutboxRelayCycle`,\n * packages/platform-host/src/outbox.ts), so an acknowledged record has a\n * stored job. A crash between the insert and the acknowledgement leaves\n * the record for lease expiry; the relay republishes it under the same\n * `eventId`, the insert answers `already_present`, and nothing is added\n * (test \"crash before acknowledgement ...\", tests/fan-out-host.test.ts).\n *\n * Nothing a port, the caller's context or a sink throws reaches an error\n * this module throws: a rejection is dropped by `boundedCall`, a resolved\n * value is read by `src/fan-out-read.ts`, the context by the readers in\n * `src/fan-out-call.ts`, and the envelope inside the projection's guard.\n * Every failure is a package error with a fixed code.\n */\n\n/** Options for {@link createWebhookFanOutPublisher}. */\nexport interface WebhookFanOutPublisherOptions {\n\t/** Where jobs are inserted. Only `insertFanOutJob` is called. */\n\treadonly store: Pick<WebhookDeliveryStore, \"insertFanOutJob\">;\n\t/** Stamps the job's `createdAt` and processing deadline, and bounds the store call. */\n\treadonly clock: { now(): Date };\n\t/** The persistence projection's allowlist and declared facts (decision 9). */\n\treadonly policy: WebhookPayloadPolicy;\n\t/**\n\t * Overrides of {@link WebhookDeliveryLimits}; every limit is validated as\n\t * positive and finite at construction (R4). The publisher uses\n\t * `fanOutDeadlineMs` (the job's processing deadline) and `portTimeoutMs`\n\t * (the bound on the insert).\n\t */\n\treadonly limits?: Partial<WebhookDeliveryLimits>;\n}\n\n/**\n * The actor a job records, from the relay's disclosure (decision 5). Only an\n * explicit `included` disclosure with both fields present yields an actor.\n * `suppressed` stays `suppressed`. Anything else, including a missing\n * context (a bridge that passed none) and an `included` record whose\n * envelope lacks the fields, is `legacy`: the reason actor enrichment\n * (PR 9) repairs. An `actorId` on an envelope whose disclosure is not\n * `included` is ignored. Runs inside the projection's guard.\n */\nfunction jobActor(event: unknown, disclosure: ReturnType<typeof readContextDisclosure>): WebhookJobActor {\n\tif (disclosure === \"suppressed\") return record<WebhookJobActor>({ state: \"absent\", reason: \"suppressed\" });\n\tif (disclosure === \"included\" && isPlainRecord(event)) {\n\t\tconst actorId = readOwn(event, \"actorId\", \"actorId\", dataFail);\n\t\tconst actorType = readOwn(event, \"actorType\", \"actorType\", dataFail);\n\t\tif (typeof actorId === \"string\" && actorId !== \"\" && typeof actorType === \"string\" && actorType !== \"\") {\n\t\t\treturn record<WebhookJobActor>({ state: \"present\", actorId, actorType });\n\t\t}\n\t}\n\treturn record<WebhookJobActor>({ state: \"absent\", reason: \"legacy\" });\n}\n\ninterface PublisherConfig {\n\treadonly limits: WebhookDeliveryLimits;\n\treadonly store: object;\n\treadonly insertFanOutJob: (...args: never[]) => unknown;\n\treadonly clock: FanOutClock;\n\treadonly policy: WebhookPayloadPolicy;\n}\n\nfunction readPublisherOptions(options: WebhookFanOutPublisherOptions): PublisherConfig {\n\tif (options === null || typeof options !== \"object\") throw fanOutError(\"options_invalid\", \"options\");\n\tconst limits = resolveWebhookDeliveryLimits(options.limits ?? {});\n\tconst store = options.store;\n\tif (store === null || typeof store !== \"object\") throw fanOutError(\"options_invalid\", \"store\");\n\tconst insertFanOutJob = store.insertFanOutJob;\n\tif (typeof insertFanOutJob !== \"function\") throw fanOutError(\"options_invalid\", \"store\");\n\treturn freeze({ limits, store, insertFanOutJob: insertFanOutJob as (...args: never[]) => unknown, clock: captureFanOutClock(options.clock), policy: options.policy });\n}\n\nconst INSERT_OUTCOMES = freeze([\"inserted\", \"already_present\", \"past_horizon\"] as const);\n\n/**\n * Build the stage-one publisher: an `EnterpriseEventPublisher` to hand to\n * `runOutboxRelayCycle()` (alone or inside {@link createWebhookCompositePublisher}),\n * or to call from a bridge for events that do not reach the Host outbox.\n *\n * `publish(event, context)`:\n *\n * 1. projects the envelope with `projectWebhookFanOutJob()`, recording the\n * actor as the relay's `context.actorDisclosure` describes it;\n * 2. inserts the job with `createdAt` now and a processing deadline\n * `fanOutDeadlineMs` later, bounded by `portTimeoutMs` and the caller's\n * signal;\n * 3. resolves on `inserted` or `already_present` (a replay or a bridge\n * overlap: the first insert wins, and the stored job is not changed).\n *\n * It rejects, so the Host relay retries the record and eventually\n * dead-letters it, with a `WebhookProjectionError` when the envelope cannot\n * be projected, or a `WebhookFanOutError`:\n * `event_past_replay_horizon` when the store answered `past_horizon`,\n * `fan_out_store_failed` when the insert threw or its answer cannot be read,\n * `fan_out_store_timeout` when it timed out, `publish_aborted` when the\n * caller's signal aborted first, and `clock_invalid` for a failing clock.\n * An insert that threw, timed out or was aborted may still have committed;\n * the relay's retry of the same `eventId` then answers `already_present`.\n *\n * @throws {WebhookDeliveryConfigError} at construction, for any limit that\n * is not positive and finite.\n * @throws {WebhookFanOutError} `options_invalid` at construction, for a\n * missing or unreadable store, clock or options object.\n */\nexport function createWebhookFanOutPublisher(options: WebhookFanOutPublisherOptions): EnterpriseEventPublisher {\n\tconst config = guard(() => readPublisherOptions(options), () => fanOutError(\"options_invalid\", \"options\"));\n\tconst { limits, store, insertFanOutJob, clock, policy } = config;\n\n\tconst publish = async (event: EnterpriseEventEnvelope, context?: EnterpriseEventPublishContext): Promise<void> => {\n\t\tconst disclosure = readContextDisclosure(context);\n\t\tconst draft = guard(\n\t\t\t() => projectWebhookFanOutJob(event, { policy, actor: jobActor(event, disclosure) }),\n\t\t\tuninspectable(\"envelope\"),\n\t\t);\n\t\tconst nowMs = readFanOutClock(clock);\n\t\tconst job = { ...draft, createdAt: isoOf(nowMs), processingDeadline: isoOf(nowMs + limits.fanOutDeadlineMs) };\n\t\tconst outcome = await boundedCall(nowMs, limits.portTimeoutMs, readContextSignal(context), (callOptions) =>\n\t\t\tapply(insertFanOutJob, store, [job, callOptions] as never[]) as Promise<unknown>, () => readFanOutClock(clock));\n\t\tif (!outcome.ok) {\n\t\t\tthrow fanOutError(\n\t\t\t\toutcome.reason === \"timeout\" ? \"fan_out_store_timeout\" : outcome.reason === \"aborted\" ? \"publish_aborted\" : \"fan_out_store_failed\",\n\t\t\t\t\"insertFanOutJob\",\n\t\t\t);\n\t\t}\n\t\tconst answer = readOutcome(outcome.value, INSERT_OUTCOMES);\n\t\t// Acknowledge only a durable job: a new one, or the one a replay or a\n\t\t// bridge stored first.\n\t\tif (answer === \"inserted\" || answer === \"already_present\") return;\n\t\t// R5, carried from PR 4: an event older than the replay horizon cannot\n\t\t// get a job, so the publish fails and the Host record dead-letters\n\t\t// instead of counting as delivered.\n\t\tif (answer === \"past_horizon\") throw fanOutError(\"event_past_replay_horizon\", \"insertFanOutJob\");\n\t\tthrow fanOutError(\"fan_out_store_failed\", \"insertFanOutJob\");\n\t};\n\treturn freeze({ publish });\n}\n\n// ---------------------------------------------------------------------------\n// Composite\n// ---------------------------------------------------------------------------\n\n/** One sink of a composite publisher. */\nexport interface WebhookCompositeSink {\n\t/** Names the sink in a `sink_failed` or `sink_timeout` error: 1 to 64 printable ASCII characters, unique in the composite. */\n\treadonly name: string;\n\treadonly publisher: EnterpriseEventPublisher;\n\t/**\n\t * Only `true` passes `actorId` and `actorType` to this sink, with the\n\t * relay's `actorDisclosure` unchanged. Any other value gives the sink a\n\t * copy of the envelope without those keys, and reports an `included`\n\t * disclosure to it as `suppressed` (decision 5).\n\t */\n\treadonly includeActor?: boolean;\n\t/**\n\t * Defaults to `true`. The composite resolves only after every required\n\t * sink resolves. A sink with `required: false` is started with the others\n\t * but never waited for: its outcome, timeout included, is ignored, so an\n\t * event it fails is not retried for it.\n\t */\n\treadonly required?: boolean;\n}\n\n/** Options for {@link createWebhookCompositePublisher}. */\nexport interface WebhookCompositePublisherOptions {\n\t/** At least one sink, at most 16, called concurrently. */\n\treadonly sinks: readonly WebhookCompositeSink[];\n\t/**\n\t * How long each sink is given, in ms, before its signal is aborted and\n\t * it counts as timed out. A positive whole number up to\n\t * `WEBHOOK_MAX_TIMER_MS`; default 10 000, Host's default publish timeout.\n\t */\n\treadonly sinkTimeoutMs?: number;\n}\n\ninterface Sink {\n\treadonly name: string;\n\treadonly target: object;\n\treadonly publish: (...args: never[]) => unknown;\n\treadonly includeActor: boolean;\n\treadonly required: boolean;\n}\n\nconst MAX_SINKS = 16;\nconst SINK_NAME = /^[\\x21-\\x7e]{1,64}$/;\nconst DEFAULT_SINK_TIMEOUT_MS = 10_000;\n\nfunction readComposite(options: unknown): { readonly sinks: readonly Sink[]; readonly timeoutMs: number } {\n\tif (options === null || typeof options !== \"object\") throw fanOutError(\"options_invalid\", \"options\");\n\tconst rawTimeout = primitive((options as { sinkTimeoutMs?: unknown }).sinkTimeoutMs);\n\tconst timeoutMs = rawTimeout === undefined ? DEFAULT_SINK_TIMEOUT_MS : rawTimeout;\n\tassertPositiveInteger(timeoutMs, \"sinkTimeoutMs\");\n\tif (timeoutMs > WEBHOOK_MAX_TIMER_MS) throw configError(\"limit_out_of_range\", \"sinkTimeoutMs\");\n\tconst sinks = (options as { sinks?: unknown }).sinks;\n\tif (!isArray(sinks) || sinks.length === 0 || sinks.length > MAX_SINKS) throw fanOutError(\"options_invalid\", \"sinks\");\n\tconst read: Sink[] = [];\n\tconst names: string[] = [];\n\tfor (let index = 0; index < sinks.length; index += 1) {\n\t\tconst sink = sinks[index] as Partial<WebhookCompositeSink> | undefined;\n\t\tif (sink === null || typeof sink !== \"object\") throw fanOutError(\"options_invalid\", `sinks[${index}]`);\n\t\tconst { name, publisher, includeActor, required } = sink;\n\t\tif (typeof name !== \"string\" || !SINK_NAME.test(name) || names.includes(name)) throw fanOutError(\"options_invalid\", `sinks[${index}].name`);\n\t\tif (publisher === null || typeof publisher !== \"object\" || typeof publisher.publish !== \"function\") {\n\t\t\tthrow fanOutError(\"options_invalid\", `sinks[${index}].publisher`);\n\t\t}\n\t\tif (includeActor !== undefined && typeof includeActor !== \"boolean\") throw fanOutError(\"options_invalid\", `sinks[${index}].includeActor`);\n\t\tif (required !== undefined && typeof required !== \"boolean\") throw fanOutError(\"options_invalid\", `sinks[${index}].required`);\n\t\tnames.push(name);\n\t\tread.push(freeze({ name, target: publisher, publish: publisher.publish as (...args: never[]) => unknown, includeActor: includeActor === true, required: required !== false }));\n\t}\n\treturn freeze({ sinks: freeze(read), timeoutMs });\n}\n\n/*\n * Trust model. Sinks are trusted application code wired at the composition\n * root, like Host's adapters. The composite isolates sinks from ordinary\n * sink behaviour: mutating the envelope or context it was handed, throwing\n * synchronously, returning a rejected promise or a thenable that calls its\n * reject callback, rejecting late, ignoring its signal, and hanging. It does\n * not confine code that subverts intrinsics: a returned promise with a\n * poisoned `constructor` getter, a thenable whose `then` throws\n * asynchronously, or a replaced `dispatchEvent` or other\n * `EventTarget` method on the signal it was handed (the intrinsic `abort`\n * below dispatches the abort event on that signal, so such a replacement\n * runs). Those are outside the composite's guarantees.\n *\n * The runtime functions the composite calls are captured when this module\n * loads, in keeping with the rest of the package (src/snapshot.ts). This is\n * consistency, not confinement. The composite installs no listener on a\n * sink's signal and its cleanup calls nothing on the envelope, context or\n * signal it handed a sink. Each capture is `undefined` on a runtime without\n * it, and construction then refuses the composite as `options_invalid`.\n */\nconst AbortControllerIntrinsic = typeof AbortController === \"function\" ? AbortController : undefined;\nconst abortIntrinsic = AbortControllerIntrinsic?.prototype.abort;\nconst controllerSignalGetter = AbortControllerIntrinsic === undefined ? undefined : Reflect.getOwnPropertyDescriptor(AbortControllerIntrinsic.prototype, \"signal\")?.get;\nconst addListenerIntrinsic = typeof EventTarget === \"function\" ? EventTarget.prototype.addEventListener : undefined;\nconst removeListenerIntrinsic = typeof EventTarget === \"function\" ? EventTarget.prototype.removeEventListener : undefined;\nconst setTimer = setTimeout;\nconst clearTimer = clearTimeout;\nconst PromiseIntrinsic = Promise;\nconst deleteProperty = Reflect.deleteProperty;\nconst DateIntrinsic = Date;\nconst reflectOwnKeys = Reflect.ownKeys;\nconst reflectGetOwnPropertyDescriptor = Reflect.getOwnPropertyDescriptor;\nconst reflectDefineProperty = Reflect.defineProperty;\nconst numberIsFinite = Number.isFinite;\n\nfunction compositeRuntimeAvailable(): boolean {\n\treturn abortIntrinsic !== undefined && controllerSignalGetter !== undefined && addListenerIntrinsic !== undefined &&\n\t\tremoveListenerIntrinsic !== undefined;\n}\n\n/**\n * One envelope per sink (B1): no two sinks, and no sink and the caller, share\n * a mutable object through the envelope. What enforces it is an allowlist,\n * not a list of refused types. The caller's envelope is read once by the\n * package's plain-data snapshot (src/snapshot.ts: own data properties only,\n * no getter is called, depth and node budgets), which accepts `null`,\n * booleans, finite numbers, strings, arrays, plain objects and the envelope's\n * two top-level dates, and refuses everything else (typed arrays,\n * `ArrayBuffer`, `SharedArrayBuffer`, `Map`, `Set`, `Error`, class instances,\n * `WebAssembly.Memory`, functions, symbols, accessors, and proxies over any\n * of those; a proxy over plain data cannot be told apart and its traps run\n * while the envelope is read). A refusal\n * fails the publish as `inspection_failed` before any sink starts. A value\n * the snapshot accepts holds no reference to memory outside itself, so each\n * sink's copy, built from the snapshot by `thaw`, shares nothing with another\n * sink's copy or the caller.\n *\n * `occurredAt` and `recordedAt` are copied as new `Date`s. A `Date` anywhere\n * else (in `payload`, say) becomes its ISO-8601 string, as the persistence\n * projection treats it. Host types `payload` as `unknown` and does not\n * guarantee JSON, so an envelope whose payload is not plain data is refused,\n * not passed through. A sink without `includeActor` gets its copy with\n * `actorId` and `actorType` deleted, so the keys are absent, not `undefined`.\n * All copies exist before any sink runs, so a sink mutating its envelope\n * cannot change what another receives (tests \"a sink mutating its envelope\n * ...\", \"an envelope holding ... is refused\").\n */\nfunction sinkEnvelopes(event: unknown, sinks: readonly Sink[]): readonly EnterpriseEventEnvelope[] {\n\tif (!isPlainRecord(event)) throw uninspectable(\"envelope\")();\n\tconst budget: JsonNodeBudget = { nodes: 0 };\n\tconst keys = reflectOwnKeys(event);\n\tconst snapshot: Record<string, unknown> = emptyMap<unknown>();\n\tfor (let index = 0; index < keys.length; index += 1) {\n\t\tconst key = keys[index];\n\t\tif (typeof key !== \"string\") continue;\n\t\tconst descriptor = reflectGetOwnPropertyDescriptor(event, key);\n\t\tif (descriptor === undefined || descriptor.enumerable !== true) continue;\n\t\tif (!hasOwn(descriptor, \"value\")) return callFail(\"accessor\", \"envelope\");\n\t\tif (descriptor.value === undefined) continue;\n\t\tif (key === \"occurredAt\" || key === \"recordedAt\") {\n\t\t\tconst time = timeOf(descriptor.value);\n\t\t\tif (!numberIsFinite(time)) return callFail(\"not_json\", \"envelope\");\n\t\t\tdefine(snapshot, key, time);\n\t\t} else {\n\t\t\tdefine(snapshot, key, snapshotJsonPart(descriptor.value, \"envelope\", callFail, 1, budget));\n\t\t}\n\t}\n\tconst copies: EnterpriseEventEnvelope[] = [];\n\tfor (let index = 0; index < sinks.length; index += 1) {\n\t\tconst copy = thaw(snapshot) as Record<string, unknown>;\n\t\tif (typeof snapshot.occurredAt === \"number\") copy.occurredAt = new DateIntrinsic(snapshot.occurredAt);\n\t\tif (typeof snapshot.recordedAt === \"number\") copy.recordedAt = new DateIntrinsic(snapshot.recordedAt);\n\t\tif (!sinks[index]!.includeActor) {\n\t\t\tdeleteProperty(copy, \"actorId\");\n\t\t\tdeleteProperty(copy, \"actorType\");\n\t\t}\n\t\tcopies.push(copy as unknown as EnterpriseEventEnvelope);\n\t}\n\treturn copies;\n}\n\n/**\n * A fresh, mutable, ordinary copy of a package-built snapshot (arrays,\n * null-prototype objects, primitives). It walks only snapshot values, whose\n * depth the snapshot already bounded. A key such as `__proto__` is defined\n * as an own property, never assigned.\n */\nfunction thaw(value: unknown): unknown {\n\tif (value === null || typeof value !== \"object\") return value;\n\tif (isArray(value)) {\n\t\tconst list: unknown[] = [];\n\t\tfor (let index = 0; index < value.length; index += 1) list.push(thaw(value[index]));\n\t\treturn list;\n\t}\n\tconst keys = reflectOwnKeys(value);\n\tconst out: Record<string, unknown> = {};\n\tfor (let index = 0; index < keys.length; index += 1) {\n\t\tconst key = keys[index] as string;\n\t\tdefineMutable(out, key, thaw((value as Record<string, unknown>)[key]));\n\t}\n\treturn out;\n}\n\nfunction defineMutable(target: object, key: string, value: unknown): void {\n\treflectDefineProperty(target, key, { value, enumerable: true, writable: true, configurable: true });\n}\n\n/** How one sink's run ended. A rejection reason is kept only to be passed to `guard`, which runs none of its code. */\ntype SinkOutcome =\n\t| { readonly status: \"ok\" }\n\t| { readonly status: \"failed\"; readonly reason: unknown }\n\t| { readonly status: \"timeout\" }\n\t| { readonly status: \"aborted\" };\n\nconst OK: SinkOutcome = freeze({ status: \"ok\" });\nconst TIMED_OUT: SinkOutcome = freeze({ status: \"timeout\" });\nconst ABORTED: SinkOutcome = freeze({ status: \"aborted\" });\n\n/** One sink's run: its outcome, and the two ways the composite drives it. */\ninterface SinkRun {\n\t/** Resolves once, with how the run ended. Never rejects. */\n\treadonly outcome: Promise<SinkOutcome>;\n\t/** Start the sink's timer and call it, unless the run already ended. */\n\treadonly start: () => void;\n\t/** End the run as aborted and abort the sink's signal; nothing once it ended. */\n\treadonly abort: () => void;\n}\n\n/**\n * Prepare one sink's run: its own controller and signal, its own context\n * object, and an outcome promise settled by `end` exactly once, by whichever\n * comes first of the sink settling, the timeout and `abort`.\n *\n * Rejections from ordinary sink behaviour are handled (B3, within the trust\n * model above). `outcome` is resolve-only. The sink is called inside an\n * `async` body whose `try` covers the call, a synchronous throw, and the\n * `await` of what it returned: a rejected promise, early or late, or a\n * thenable that calls its reject callback lands in that `catch`, and the\n * body itself never rejects. `end` catches every error its own cleanup\n * could throw. A returned value that subverts the promise machinery (a\n * poisoned `constructor` getter, a `then` that throws asynchronously) is\n * outside that guarantee.\n *\n * `end` clears the timer and calls `onEnd`, which releases the composite's\n * watch on the caller's signal once every run has ended (B4). A run the\n * composite does not wait for has its timer `unref()`'d where the runtime\n * supports it, so an optional sink still running after `publish()` settled\n * keeps both its timeout and its abort forwarding without keeping the\n * process alive. Tests: the \"fixed outcomes and handled rejections\" and\n * \"optional sinks after publish() settled\" blocks of\n * tests/fan-out-composite.test.ts.\n */\nfunction prepareRun(sink: Sink, envelope: EnterpriseEventEnvelope, disclosure: string | undefined, timeoutMs: number, onEnd: () => void): SinkRun {\n\tconst controller = new AbortControllerIntrinsic!();\n\tconst signal = apply(controllerSignalGetter!, controller, []) as AbortSignal;\n\tconst context = (disclosure === undefined ? { signal } : { signal, actorDisclosure: disclosure }) as EnterpriseEventPublishContext;\n\tlet settle: (outcome: SinkOutcome) => void = () => undefined;\n\tconst outcome = new PromiseIntrinsic<SinkOutcome>((resolve) => {\n\t\tsettle = resolve;\n\t});\n\tlet ended = false;\n\tlet timer: ReturnType<typeof setTimeout> | undefined;\n\tconst end = (result: SinkOutcome, abortSignal: boolean): void => {\n\t\tif (ended) return;\n\t\tended = true;\n\t\tif (timer !== undefined) {\n\t\t\ttry {\n\t\t\t\tclearTimer(timer);\n\t\t\t} catch {\n\t\t\t\t// Nothing to do: the run has ended either way.\n\t\t\t}\n\t\t}\n\t\ttry {\n\t\t\tonEnd();\n\t\t} catch {\n\t\t\t// As above.\n\t\t}\n\t\tif (abortSignal) {\n\t\t\ttry {\n\t\t\t\tapply(abortIntrinsic!, controller, []);\n\t\t\t} catch {\n\t\t\t\t// As above.\n\t\t\t}\n\t\t}\n\t\tsettle(result);\n\t};\n\tconst start = (): void => {\n\t\tif (ended) return;\n\t\ttimer = setTimer(() => end(TIMED_OUT, true), timeoutMs);\n\t\tif (!sink.required) unrefTimer(timer);\n\t\tvoid (async (): Promise<void> => {\n\t\t\ttry {\n\t\t\t\tawait (apply(sink.publish, sink.target, [envelope, context] as never[]) as unknown);\n\t\t\t\tend(OK, false);\n\t\t\t} catch (reason) {\n\t\t\t\tend({ status: \"failed\", reason }, false);\n\t\t\t}\n\t\t})();\n\t};\n\treturn freeze({ outcome, start, abort: () => end(ABORTED, true) });\n}\n\n/** `timer.unref()` on runtimes whose timers have it (Node); a number timer (browsers) is left alone. */\nfunction unrefTimer(timer: unknown): void {\n\ttry {\n\t\tif (timer === null || typeof timer !== \"object\") return;\n\t\tconst unref = (timer as { unref?: unknown }).unref;\n\t\tif (typeof unref === \"function\") apply(unref, timer, []);\n\t} catch {\n\t\t// A timer that cannot be unref'd still fires and is still cleared.\n\t}\n}\n\n/**\n * Build a publisher that hands each event to several sinks, for example the\n * webhook fan-out publisher and a message bus, from one Host relay. A second\n * relay on the same outbox claims the same records, so it is no substitute\n * (decision 2).\n *\n * Sinks are trusted application code; see the trust model above for what\n * the isolation below covers. Every sink is called concurrently, each with\n * its own envelope copy, its own context and its own signal, which aborts\n * when the caller's signal aborts or the sink's `sinkTimeoutMs` runs out. That holds for an optional\n * sink still running after `publish()` settled, too. The composite resolves\n * once every required sink resolved; optional sinks are not waited for. It\n * rejects:\n *\n * - with `publish_aborted`, and no sink started, when the caller's signal\n * aborts at any point before the sinks start, copying the envelope\n * included;\n * - with `publish_aborted` as soon as the caller's signal aborts while a\n * required sink is still running;\n * - otherwise, once every required sink has settled, for the first required\n * sink in sink order that did not resolve: with that sink's error when\n * this package created it (for example `event_past_replay_horizon`),\n * `sink_failed` for any other error, dropped unread, and `sink_timeout`\n * when it did not settle in time;\n * - with a `WebhookProjectionError` (`inspection_failed`) when the envelope\n * is not plain data (see `sinkEnvelopes`) or cannot be read, before any sink is called.\n *\n * The relay then retries the whole record, so every sink sees the event\n * again under the same `eventId`: each sink must treat a repeated `eventId`\n * as a no-op, as the fan-out publisher does.\n *\n * Actor identity reaches only sinks with `includeActor: true` (decision 5;\n * test \"the composite strips actor identity ...\").\n *\n * @throws {WebhookFanOutError} `options_invalid` at construction for an\n * empty or oversized sink list, a duplicate or malformed name, a sink\n * without a `publish` function, or a runtime without `AbortController`,\n * or `EventTarget`.\n * @throws {WebhookDeliveryConfigError} at construction for a `sinkTimeoutMs`\n * that is not a positive whole number within the timer range.\n */\nexport function createWebhookCompositePublisher(options: WebhookCompositePublisherOptions): EnterpriseEventPublisher {\n\tconst { sinks, timeoutMs } = guard(() => readComposite(options), () => fanOutError(\"options_invalid\", \"options\"));\n\tif (!compositeRuntimeAvailable()) throw fanOutError(\"options_invalid\", \"runtime\");\n\tconst publish = async (event: EnterpriseEventEnvelope, context?: EnterpriseEventPublishContext): Promise<void> => {\n\t\tconst parent = readContextSignal(context);\n\t\tif (parent !== undefined && signalAborted(parent)) throw fanOutError(\"publish_aborted\", \"signal\");\n\t\tconst disclosure = readContextDisclosure(context);\n\t\tconst strippedDisclosure = disclosure === \"included\" ? \"suppressed\" : disclosure;\n\t\tconst envelopes = guard(() => sinkEnvelopes(event, sinks), uninspectable(\"envelope\"));\n\n\t\t// One listener on the caller's signal forwards its abort to every run\n\t\t// still going, and is removed when the last run ends, which may be\n\t\t// after `publish()` settled (B4).\n\t\tlet live = sinks.length;\n\t\tconst runs: SinkRun[] = [];\n\t\tconst onParentAbort = (): void => {\n\t\t\tfor (let index = 0; index < runs.length; index += 1) runs[index]!.abort();\n\t\t};\n\t\tconst release = (): void => {\n\t\t\tlive -= 1;\n\t\t\tif (live === 0 && parent !== undefined) {\n\t\t\t\ttry {\n\t\t\t\t\tapply(removeListenerIntrinsic!, parent, [\"abort\", onParentAbort]);\n\t\t\t\t} catch {\n\t\t\t\t\t// The listener only aborts runs that have all ended.\n\t\t\t\t}\n\t\t\t}\n\t\t};\n\t\tfor (let index = 0; index < sinks.length; index += 1) {\n\t\t\tconst sink = sinks[index]!;\n\t\t\truns.push(prepareRun(sink, envelopes[index]!, sink.includeActor ? disclosure : strippedDisclosure, timeoutMs, release));\n\t\t}\n\t\tif (parent !== undefined) {\n\t\t\tlet watching = true;\n\t\t\ttry {\n\t\t\t\tapply(addListenerIntrinsic!, parent, [\"abort\", onParentAbort]);\n\t\t\t} catch {\n\t\t\t\twatching = false;\n\t\t\t}\n\t\t\t// The caller's signal may have aborted after the entry check, for\n\t\t\t// example from a proxy trap that ran while the snapshot copied the\n\t\t\t// envelope (getters are refused, not called), before the listener\n\t\t\t// existed. A caller abort that cannot\n\t\t\t// be watched is treated the same way. Either ends every run before\n\t\t\t// any starts, which also releases the listener.\n\t\t\tif (!watching || signalAborted(parent)) {\n\t\t\t\tonParentAbort();\n\t\t\t\tthrow fanOutError(\"publish_aborted\", \"signal\");\n\t\t\t}\n\t\t}\n\t\t// A sink's synchronous code may abort the caller's signal; a run the\n\t\t// forwarding already ended is then not started.\n\t\tfor (let index = 0; index < runs.length; index += 1) runs[index]!.start();\n\n\t\t// Only required runs are awaited. Each outcome promise is resolved by\n\t\t// its sink, its timer or the caller's abort, so the waits end promptly\n\t\t// on an abort (B5).\n\t\tconst outcomes: SinkOutcome[] = [];\n\t\tfor (let index = 0; index < sinks.length; index += 1) {\n\t\t\tif (sinks[index]!.required) outcomes.push(await runs[index]!.outcome);\n\t\t}\n\t\tlet position = 0;\n\t\tlet failure: { readonly name: string; readonly outcome: SinkOutcome } | undefined;\n\t\tfor (let index = 0; index < sinks.length; index += 1) {\n\t\t\tconst sink = sinks[index]!;\n\t\t\tif (!sink.required) continue;\n\t\t\tconst outcome = outcomes[position]!;\n\t\t\tposition += 1;\n\t\t\t// Only the forwarding of the caller's abort ends a run as aborted.\n\t\t\tif (outcome.status === \"aborted\") throw fanOutError(\"publish_aborted\", \"signal\");\n\t\t\tif (outcome.status !== \"ok\" && failure === undefined) failure = { name: sink.name, outcome };\n\t\t}\n\t\tif (failure === undefined) return;\n\t\tif (failure.outcome.status === \"timeout\") throw fanOutError(\"sink_timeout\", failure.name);\n\t\tconst reason = (failure.outcome as { readonly reason: unknown }).reason;\n\t\t// A package-made error passes through with its code; anything else is\n\t\t// replaced unread.\n\t\tguard(() => {\n\t\t\tthrow reason;\n\t\t}, () => fanOutError(\"sink_failed\", failure.name));\n\t};\n\treturn freeze({ publish });\n}\n","/**\n * The event types the package's governed actions emit (PR 9; README,\n * \"Governed actions\"). They are package constants, the same for every\n * module instance whatever its namespace, so the exclusion below does not\n * depend on how an application composed the module.\n *\n * ADR 0018 decision 9: these types are excluded from fan-out matching.\n * {@link matchesWebhookEventTypePattern} (src/fan-out-cycle.ts), the one\n * function that compares a subscription pattern with an event type, answers\n * `false` for each of them before it looks at the pattern, so no\n * subscription, `*` included, gets an intent or a denial for one. Test:\n * \"own-event exclusion: …\" in tests/governed-actions.test.ts.\n *\n * Kept free of `@fabricorg/platform` imports so the fan-out cycle can use it\n * without loading the module factory.\n */\nimport { apply } from \"./snapshot\";\n\nexport const WEBHOOK_DELIVERY_ACTION_EVENT_TYPES = Object.freeze([\n\t\"WebhookSubscriptionCreated\",\n\t\"WebhookSubscriptionUpdated\",\n\t\"WebhookSubscriptionPaused\",\n\t\"WebhookSubscriptionResumed\",\n\t\"WebhookSubscriptionDeleted\",\n\t\"WebhookSecretRotated\",\n\t\"WebhookDeliveryIntentRequeued\",\n\t\"WebhookFanOutJobRequeued\",\n\t\"WebhookFanOutJobActorEnriched\",\n] as const);\n\n/** An event type one of the package's governed actions emits. */\nexport type WebhookDeliveryActionEventType = (typeof WEBHOOK_DELIVERY_ACTION_EVENT_TYPES)[number];\n\nconst includes = Array.prototype.includes;\n\n/** `true` when `eventType` is emitted by one of the package's governed actions. */\nexport function isWebhookDeliveryActionEventType(eventType: unknown): eventType is WebhookDeliveryActionEventType {\n\treturn typeof eventType === \"string\" && apply(includes, WEBHOOK_DELIVERY_ACTION_EVENT_TYPES, [eventType]) === true;\n}\n","import { isWebhookDeliveryActionEventType } from \"./action-events\";\nimport type { WebhookAdmissionDenialCode, WebhookDiagnosticCode } from \"./codes\";\nimport { normalizeWebhookAdmissionDecision } from \"./decisions\";\nimport { renderWebhookDeliveryBodyV1 } from \"./egress\";\nimport { configError, fanOutError, guard } from \"./errors\";\nimport { boundedCall, captureFanOutClock, readFanOutClock, type BoundedOutcome, type FanOutClock } from \"./fan-out-call\";\nimport { readClaimedJobs, readDecided, readOutcome, readRevisions, type ClaimedHeader, type ClaimedJob } from \"./fan-out-read\";\nimport { assertPositiveInteger, resolveWebhookDeliveryLimits, type WebhookDeliveryLimits } from \"./limits\";\nimport type {\n\tWebhookCallOptions,\n\tWebhookDeliveryStore,\n\tWebhookEventAdmission,\n\tWebhookFanOutJobFence,\n\tWebhookRandomSource,\n\tWebhookRetryDelay,\n\tWebhookScopePredicate,\n\tWebhookSubscriptionStore,\n} from \"./ports\";\nimport { createWebhookRetryDelay } from \"./retry\";\nimport { apply, freeze, mathMin, numberIsFinite, primitive } from \"./snapshot\";\nimport { isoOf } from \"./store-input\";\nimport type { WebhookEligibilityRevision, WebhookEventMetadata, WebhookPayloadPolicy } from \"./types\";\n\n/*\n * Stage two of the two-stage fan-out (ADR 0018 decisions 2, 3, 4 and 5).\n *\n * Completeness boundary (R1). A job binds each intent or denial to the\n * eligibility revision whose half-open interval contains the event's\n * `recordedAt`. Host stamps `recordedAt` with its clock; the subscription\n * store stamps each revision's `effectiveFrom` with its own. Until the\n * subscription store's clock has passed `recordedAt`, a pattern change,\n * pause, resume or create written now can still take effect at or before\n * `recordedAt` and change which revision contains it: a late-effective\n * revision. So the cycle evaluates a job only once its eligibility is\n * settled: the cycle's clock is at or past `recordedAt + eligibilitySettleMs`\n * (`settleAtMs` in `processJob` below). Before that it defers the job\n * unprocessed, writing no intent or denial.\n *\n * Two assumptions about clocks, which this package cannot enforce:\n *\n * - Skew. `eligibilitySettleMs` exceeds the skew between this worker's\n * clock and the subscription store's clock, plus the longest time a\n * revision write takes from reading that clock to becoming visible to\n * `listEligibilityRevisions` (a database store's transaction).\n * - No regression. The subscription store's clock never moves backward past\n * an event time this worker has already settled: in practice a monotonic,\n * NTP-slewed clock. A step backward larger than `eligibilitySettleMs` voids\n * the boundary for events settled inside the step.\n *\n * Host's clock does not enter either: `recordedAt` is only compared with\n * this worker's clock, so a Host clock running ahead delays evaluation and\n * nothing else.\n *\n * Under both assumptions the selection is final once settled: a revision\n * written later starts at the subscription store's clock\n * (WebhookSubscriptionWriter; `mathMax(nowMs, ...)` in the memory store's\n * `#transition`), which is then past `recordedAt`, so it cannot contain it.\n * If an assumption is broken and a revision is stamped at or before the\n * `recordedAt` of an event whose job already completed, the revision is not\n * applied to that event retroactively: the completed job stays completed\n * (test \"a revision stamped behind an already-settled event ...\"). The\n * job is complete when `completeFanOutJob` succeeds, which the cycle calls only\n * after every eligible revision has an intent or a recorded denial. After\n * that point nothing adds or removes intents for the event: claims take only\n * pending jobs, a job requeue accepts only dead letters, intent and denial\n * inserts are insert-if-absent per (subscriptionId, eventId), and a Host\n * outbox replay or a bridge insert of the same `eventId` answers\n * `already_present`. A pause, delete or resume written after `recordedAt`\n * does not change the event's revision; it acts on delivery instead\n * (`cancelPendingIntents` and the delivery cycle's pre-handoff check,\n * src/delivery-cycle.ts).\n * If the job cannot complete, it is rescheduled and finally dead-lettered: a\n * visible, recoverable failure (R1, decision 2).\n *\n * Processing deadline (R4). No intent, denial or completion is written for a\n * job at or after its persisted `processingDeadline`, on the store's clock.\n * Every port call made while processing a job is bounded by the smaller of\n * `portTimeoutMs` and the job's remaining lifetime, and its absolute\n * `deadline` is at most the processing deadline (`jobCall` below). The store\n * contract refuses a write whose call deadline has passed when it reaches the\n * write (store contract case \"a call whose signal aborted or whose deadline\n * passed writes nothing\"), and the cycle also rechecks the deadline before\n * each intent or denial write and before completion. Once the deadline has\n * passed, the job goes to the fenced dead-letter transition as\n * `processing_deadline_exceeded`, bounded by `portTimeoutMs` alone.\n *\n * Lease renewal (changed in PR 8). Every fenced write is refused once the\n * lease has expired on the store's clock, and a pass over a job can take\n * longer than one lease: it reads one tombstone per eligible revision on\n * every pass, decided pairs included. So before each port call made for a\n * job (`jobCall`, and the dead-letter transition), the worker renews the\n * job's lease when less than `RENEW_MARGIN_CALLS * portTimeoutMs` of it is\n * left (`keepLease`): enough for that call and the renewal before it. A\n * worker that keeps making calls therefore keeps its job, and each pass\n * gets as far as its port answers allow; a worker that stops (a crash, a\n * stalled event loop) stops renewing and loses the job when the lease runs\n * out. The store decides the renewal like any fenced write, on its own\n * clock, and never extends a lease past the job's processing deadline, so\n * that deadline still bounds the whole job. A refused renewal (literal\n * `false`) means the lease is gone: the pass stops on that job at once and\n * writes nothing more for it (`LEASE_LOST`). A renewal that throws, times\n * out or answers unreadably is unknown; the worker carries on with the\n * lease it last knew of, and the store's fence check decides its next\n * write. The worker tracks the lease's expiry on its own clock from the\n * `now` and `leaseDurationMs` it sent with the claim and each renewal; a\n * store clock running ahead of the worker's by more than `portTimeoutMs`\n * can still expire a lease the worker thinks it holds, which the store's\n * fence check then refuses (`lease_lost`).\n */\n\n/** What decides whether a subscription revision needs the event's actor identity. */\nexport interface WebhookActorRequirementInput {\n\treadonly subscriptionId: string;\n\treadonly eligibilityRevision: number;\n\treadonly tenantId: string;\n\treadonly spaceId: string;\n\treadonly event: WebhookEventMetadata;\n}\n\n/** Options for {@link runWebhookFanOutCycle}. */\nexport interface WebhookFanOutCycleOptions {\n\treadonly deliveries: WebhookDeliveryStore;\n\treadonly subscriptions: WebhookSubscriptionStore;\n\treadonly admission: WebhookEventAdmission;\n\treadonly clock: { now(): Date };\n\t/** The lease owner this worker claims jobs as. */\n\treadonly workerId: string;\n\t/** The egress allowlist the intent bodies are rendered with (decision 9). */\n\treadonly policy: WebhookPayloadPolicy;\n\t/** Consulted for scoped event types when rendering a body. */\n\treadonly scopePredicate?: WebhookScopePredicate;\n\t/**\n\t * Whether admission for a revision needs actor identity (decision 5).\n\t * Required, so the choice is explicit. `true`, or a function returning\n\t * anything but a literal `false` (a throw included), makes a job whose\n\t * actor is `suppressed` or `legacy` `unavailable` for that revision\n\t * without calling admission: the job retries and finally dead-letters,\n\t * and actor enrichment (PR 9) repairs a legacy one.\n\t */\n\treadonly actorRequired: boolean | ((input: WebhookActorRequirementInput) => boolean);\n\t/**\n\t * Overrides of {@link WebhookDeliveryLimits}, all validated positive and\n\t * finite (R4). Used: `maxFanOutAttempts`, `fanOutRetryDelaysMs`,\n\t * `retryJitterRatio`, `portTimeoutMs`, `deliveryDeadlineMs` (each new\n\t * intent's processing deadline).\n\t */\n\treadonly limits?: Partial<WebhookDeliveryLimits>;\n\t/** Delay before the next attempt; defaults to `fanOutRetryDelaysMs` with jitter from `random`. */\n\treadonly retryDelay?: WebhookRetryDelay;\n\t/** Random source for the default retry delay's jitter; required when `retryDelay` is absent. */\n\treadonly random?: WebhookRandomSource;\n\t/** Jobs claimed per cycle. A positive whole number; default 25. */\n\treadonly batchSize?: number;\n\t/**\n\t * Lease on each claimed job, in ms; renewed while the job is processed\n\t * (see \"Lease renewal\" above). A positive whole number above\n\t * `3 * portTimeoutMs`; default 60 000.\n\t */\n\treadonly leaseDurationMs?: number;\n\t/**\n\t * How long after `recordedAt`, on this worker's clock, an event's\n\t * eligibility is treated as settled (see the completeness boundary\n\t * above). It must exceed the skew between this worker's clock and the\n\t * subscription store's, plus the longest revision write. A positive whole\n\t * number of ms below `fanOutDeadlineMs`; default 5 000.\n\t */\n\treadonly eligibilitySettleMs?: number;\n\t/** Creates each intent's `deliveryId`; defaults to `dlv_` plus a random UUID. */\n\treadonly createDeliveryId?: (input: { readonly subscriptionId: string; readonly eventId: string }) => string;\n\t/** Stops the cycle between jobs; the rest of the claimed jobs are reclaimed after their leases expire. */\n\treadonly signal?: AbortSignal;\n}\n\n/** What one cycle did. */\nexport interface WebhookFanOutCycleResult {\n\treadonly claimed: number;\n\t/** Jobs marked complete. */\n\treadonly completed: number;\n\t/** Jobs deferred unprocessed because their eligibility was not yet settled. */\n\treadonly deferred: number;\n\t/** Jobs returned to pending after an unavailable admission or a failed port. */\n\treadonly rescheduled: number;\n\treadonly deadLettered: number;\n\t/** Jobs this worker stopped on because a fenced write or a lease renewal found its lease gone. */\n\treadonly leaseLost: number;\n\t/**\n\t * Jobs left for lease expiry, with nothing more written: a record whose\n\t * identity or lease could not be read, one leased to another owner, or\n\t * one whose final fenced write threw or timed out. A final write that\n\t * timed out may have committed (README, \"Bounds and late results\"); the\n\t * job is then completed, rescheduled or dead-lettered as that write said.\n\t */\n\treadonly abandoned: number;\n\t/** Intent inserts the store confirmed. One that timed out may have committed and is not counted. */\n\treadonly intentsInserted: number;\n\t/** Denial inserts the store confirmed, counted like `intentsInserted`. */\n\treadonly denialsRecorded: number;\n}\n\n/** Defaults for the cycle's own options. */\nexport const DEFAULT_WEBHOOK_FAN_OUT_CYCLE = freeze({\n\tbatchSize: 25,\n\tleaseDurationMs: 60_000,\n\teligibilitySettleMs: 5_000,\n});\n\n/**\n * Whether an event type matches one subscription pattern. `*` matches every\n * type; a pattern ending in `.*` matches every type that starts with the\n * part before `*` (so `orders.*` matches `orders.OrderAccepted` and\n * `orders.lines.Added`, not `orders`); any other pattern must equal the type.\n * A `*` anywhere else is literal.\n *\n * The event types the package's own governed actions emit\n * (`WEBHOOK_DELIVERY_ACTION_EVENT_TYPES`) match no pattern, `*` included\n * (ADR 0018 decision 9). This is the only place a pattern is compared with\n * an event type (`isEligible` below calls it), so the exclusion holds for\n * every subscription whatever its patterns.\n */\nexport function matchesWebhookEventTypePattern(pattern: string, eventType: string): boolean {\n\tif (typeof pattern !== \"string\" || typeof eventType !== \"string\") return false;\n\tif (isWebhookDeliveryActionEventType(eventType)) return false;\n\tif (pattern === \"*\") return true;\n\tif (pattern.length > 2 && pattern.endsWith(\".*\")) return eventType.startsWith(pattern.slice(0, -1));\n\treturn pattern === eventType;\n}\n\nconst randomUUID: (() => string) | undefined =\n\ttypeof globalThis.crypto?.randomUUID === \"function\" ? globalThis.crypto.randomUUID.bind(globalThis.crypto) : undefined;\n\ninterface Config {\n\treadonly deliveries: WebhookDeliveryStore;\n\treadonly subscriptions: WebhookSubscriptionStore;\n\treadonly admission: WebhookEventAdmission;\n\treadonly clock: FanOutClock;\n\treadonly workerId: string;\n\treadonly policy: WebhookPayloadPolicy;\n\treadonly scopePredicate: WebhookScopePredicate | undefined;\n\treadonly actorRequired: boolean | ((input: WebhookActorRequirementInput) => boolean);\n\treadonly limits: WebhookDeliveryLimits;\n\treadonly retryDelay: WebhookRetryDelay;\n\treadonly batchSize: number;\n\treadonly leaseDurationMs: number;\n\treadonly settleMs: number;\n\treadonly createDeliveryId: (input: { readonly subscriptionId: string; readonly eventId: string }) => string;\n\treadonly signal: AbortSignal | undefined;\n}\n\nfunction hasMethods(value: unknown, names: readonly string[]): boolean {\n\tif (value === null || typeof value !== \"object\") return false;\n\tfor (const name of names) if (typeof (value as Record<string, unknown>)[name] !== \"function\") return false;\n\treturn true;\n}\n\n/** A cycle option that must be a positive whole number (R4), or its default. */\nfunction positiveWhole(value: unknown, fallback: number, field: string): number {\n\tconst read = primitive(value);\n\tconst resolved = read === undefined ? fallback : read;\n\tassertPositiveInteger(resolved, field);\n\treturn resolved;\n}\n\n/**\n * Read and validate the options. A package error (a limit, a missing port)\n * passes through with its code; anything else thrown while reading them, by\n * a getter or a Proxy trap, is replaced unread with `options_invalid`.\n */\nfunction readConfig(options: WebhookFanOutCycleOptions): Config {\n\treturn guard(() => readConfigUnguarded(options), () => fanOutError(\"options_invalid\", \"options\"));\n}\n\nfunction readConfigUnguarded(options: WebhookFanOutCycleOptions): Config {\n\tif (options === null || typeof options !== \"object\") throw fanOutError(\"options_invalid\", \"options\");\n\tconst limits = resolveWebhookDeliveryLimits(options.limits ?? {});\n\tconst batchSize = positiveWhole(options.batchSize, DEFAULT_WEBHOOK_FAN_OUT_CYCLE.batchSize, \"batchSize\");\n\tconst leaseDurationMs = positiveWhole(options.leaseDurationMs, DEFAULT_WEBHOOK_FAN_OUT_CYCLE.leaseDurationMs, \"leaseDurationMs\");\n\tconst settleMs = positiveWhole(options.eligibilitySettleMs, DEFAULT_WEBHOOK_FAN_OUT_CYCLE.eligibilitySettleMs, \"eligibilitySettleMs\");\n\t// A renewed lease must outlast the renewal call and the margin after it,\n\t// or the worker would renew before every call (see \"Lease renewal\").\n\tif (leaseDurationMs <= (RENEW_MARGIN_CALLS + 1) * limits.portTimeoutMs) throw configError(\"limit_out_of_range\", \"leaseDurationMs\");\n\t// A job whose settle point is past its processing deadline could never be evaluated.\n\tif (settleMs >= limits.fanOutDeadlineMs) throw configError(\"limit_out_of_range\", \"eligibilitySettleMs\");\n\tif (!hasMethods(options.deliveries, [\"claimFanOutJobs\", \"renewFanOutJobLease\", \"completeFanOutJob\", \"rescheduleFanOutJob\", \"deadLetterFanOutJob\", \"insertDeliveryIntent\", \"recordAdmissionDenial\", \"readTombstone\"])) {\n\t\tthrow fanOutError(\"options_invalid\", \"deliveries\");\n\t}\n\tif (!hasMethods(options.subscriptions, [\"listEligibilityRevisions\"])) throw fanOutError(\"options_invalid\", \"subscriptions\");\n\tif (!hasMethods(options.admission, [\"admit\"])) throw fanOutError(\"options_invalid\", \"admission\");\n\tif (typeof options.workerId !== \"string\" || options.workerId === \"\") throw fanOutError(\"options_invalid\", \"workerId\");\n\tconst actorRequired = options.actorRequired;\n\tif (typeof actorRequired !== \"boolean\" && typeof actorRequired !== \"function\") throw fanOutError(\"options_invalid\", \"actorRequired\");\n\tif (options.scopePredicate !== undefined && typeof options.scopePredicate !== \"function\") throw fanOutError(\"options_invalid\", \"scopePredicate\");\n\tif (options.signal !== undefined && !(options.signal instanceof AbortSignal)) throw fanOutError(\"options_invalid\", \"signal\");\n\tlet retryDelay: WebhookRetryDelay;\n\tif (options.retryDelay !== undefined) {\n\t\tif (typeof options.retryDelay !== \"function\") throw fanOutError(\"options_invalid\", \"retryDelay\");\n\t\tretryDelay = options.retryDelay;\n\t} else {\n\t\tretryDelay = createWebhookRetryDelay({ delaysMs: limits.fanOutRetryDelaysMs, jitterRatio: limits.retryJitterRatio, random: options.random! });\n\t}\n\tlet createDeliveryId = options.createDeliveryId;\n\tif (createDeliveryId === undefined) {\n\t\tif (randomUUID === undefined) throw fanOutError(\"options_invalid\", \"createDeliveryId\");\n\t\tconst uuid = randomUUID;\n\t\tcreateDeliveryId = () => `dlv_${uuid()}`;\n\t} else if (typeof createDeliveryId !== \"function\") {\n\t\tthrow fanOutError(\"options_invalid\", \"createDeliveryId\");\n\t}\n\treturn freeze({\n\t\tdeliveries: options.deliveries,\n\t\tsubscriptions: options.subscriptions,\n\t\tadmission: options.admission,\n\t\tclock: captureFanOutClock(options.clock),\n\t\tworkerId: options.workerId,\n\t\tpolicy: options.policy,\n\t\tscopePredicate: options.scopePredicate,\n\t\tactorRequired,\n\t\tlimits,\n\t\tretryDelay,\n\t\tbatchSize,\n\t\tleaseDurationMs,\n\t\tsettleMs,\n\t\tcreateDeliveryId,\n\t\tsignal: options.signal,\n\t});\n}\n\ninterface Counters {\n\tclaimed: number;\n\tcompleted: number;\n\tdeferred: number;\n\trescheduled: number;\n\tdeadLettered: number;\n\tleaseLost: number;\n\tabandoned: number;\n\tintentsInserted: number;\n\tdenialsRecorded: number;\n}\n\n/**\n * Run one fan-out cycle: claim up to `batchSize` pending jobs under a fenced\n * lease and process each in turn. A claimed record whose `eventId`,\n * `tenantId`, `spaceId` or lease cannot be read is left for lease expiry\n * (`abandoned`); one whose identity and lease can be read but whose body\n * cannot is dead-lettered as `job_unreadable` without being processed. For\n * each readable job, in order:\n *\n * 1. Past its processing deadline (persisted at creation; deferrals and\n * reclaims count toward it, R4): dead-letter `processing_deadline_exceeded`.\n * 2. Eligibility not yet settled (`recordedAt + eligibilitySettleMs` still\n * ahead): defer it to that time, unprocessed, as `eligibility_unsettled`.\n * The store's reschedule spends one attempt, so a deferred job has one\n * attempt fewer for failures.\n * 3. List the revisions containing `recordedAt` in the job's tenant and\n * space. Each `active` revision whose patterns match the event type is\n * eligible; a paused or deleted one gets neither intent nor denial.\n * 4. For each eligible revision, in `subscriptionId` order: a pair that\n * already has an intent or a denial (its tombstone) is decided and\n * admission is not asked again. Otherwise, when the revision needs an\n * actor and the job has none (`suppressed` or `legacy`), it is\n * `unavailable`; else admission decides, with a throw, a timeout or an\n * unreadable answer read as `unavailable`. `allow` renders the v1 body and\n * inserts an intent; `deny` records a denial with its code; `unavailable`\n * writes nothing and leaves the job incomplete.\n * 5. Every eligible revision decided: complete the job. Otherwise\n * reschedule it after `retryDelay(attempt)`, or dead-letter it when the\n * attempts are spent or the next attempt would fall past its deadline.\n *\n * Every port call in steps 3 to 5, except the dead-letter transition (bounded\n * by `portTimeoutMs` alone), is bounded by the smaller of\n * `portTimeoutMs` and the job's remaining lifetime; once the processing\n * deadline has passed the job is dead-lettered and nothing else is written\n * for it (see \"Processing deadline\" above). Every port result is read through\n * `src/fan-out-read.ts`, so a getter or Proxy trap in it cannot throw out of\n * the cycle; an unreadable result counts as that port being unavailable.\n *\n * Every write is fenced by the job's lease, which the worker renews while\n * it works (see \"Lease renewal\" above). When the store answers\n * `lease_lost`, a fenced transition answers `false`, or a renewal is\n * refused, the worker stops on that job and writes nothing more for it. A\n * read or an insert that throws or times out stops the job and reschedules\n * it; an insert that timed out may have committed, and the next attempt\n * finds it `already_present`. A final transition (completion, reschedule,\n * dead letter) that throws or times out may have committed too, so nothing\n * follows it: the job is `abandoned`, and a later claim finds it as that\n * transition left it. Inserts already made stay.\n *\n * @throws {WebhookDeliveryConfigError} for a limit or cycle option that is\n * not positive and finite (R4).\n * @throws {WebhookFanOutError} `options_invalid` for a missing port or\n * option; `fan_out_store_failed` or `fan_out_store_timeout` when the claim\n * fails; `clock_invalid` for a failing clock.\n */\nexport async function runWebhookFanOutCycle(options: WebhookFanOutCycleOptions): Promise<WebhookFanOutCycleResult> {\n\tconst config = readConfig(options);\n\tconst counters: Counters = { claimed: 0, completed: 0, deferred: 0, rescheduled: 0, deadLettered: 0, leaseLost: 0, abandoned: 0, intentsInserted: 0, denialsRecorded: 0 };\n\tconst nowMs = readFanOutClock(config.clock);\n\tconst claimed = await bounded(config, nowMs, (callOptions) => config.deliveries.claimFanOutJobs({\n\t\tworkerId: config.workerId,\n\t\tleaseDurationMs: config.leaseDurationMs,\n\t\tlimit: config.batchSize,\n\t\tnow: new Date(nowMs),\n\t}, callOptions));\n\tif (!claimed.ok) throw fanOutError(claimed.reason === \"timeout\" ? \"fan_out_store_timeout\" : \"fan_out_store_failed\", \"claimFanOutJobs\");\n\tconst jobs = readClaimedJobs(claimed.value);\n\tif (jobs === undefined) throw fanOutError(\"fan_out_store_failed\", \"claimFanOutJobs\");\n\tcounters.claimed = jobs.length;\n\t// The expiry this worker asked for; the store sets it from the same `now`.\n\tconst claimedUntilMs = nowMs + config.leaseDurationMs;\n\tfor (const entry of jobs) {\n\t\tif (config.signal?.aborted) break;\n\t\t// A record whose identity or lease cannot be read cannot be named by a\n\t\t// fenced write, and one leased to another owner is not this worker's:\n\t\t// either is left for lease expiry, with nothing written.\n\t\tif (entry === undefined || entry.header.lease.owner !== config.workerId) {\n\t\t\tcounters.abandoned += 1;\n\t\t\tcontinue;\n\t\t}\n\t\ttry {\n\t\t\t// A readable header with a body that cannot be read (A2): the job can\n\t\t\t// never be processed, so it ends now through the fenced dead-letter\n\t\t\t// transition, instead of returning to pending on every lease expiry.\n\t\t\t// Its processing deadline is in the body, so it is unknown here; the\n\t\t\t// store still caps a renewal at it.\n\t\t\tif (entry.job === undefined) {\n\t\t\t\tawait deadLetter(config, jobLease(config, entry.header, claimedUntilMs, Infinity), counters, \"job_unreadable\");\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tawait processJob(config, entry.job, jobLease(config, entry.header, claimedUntilMs, entry.job.processingDeadlineMs), counters);\n\t\t} catch (stopped) {\n\t\t\t// A refused renewal: the lease is gone, and nothing more is written for this job.\n\t\t\tif (stopped !== LEASE_LOST) throw stopped;\n\t\t\tcounters.leaseLost += 1;\n\t\t}\n\t}\n\treturn freeze({ ...counters });\n}\n\n/** A port call bounded by `portTimeoutMs` only: the claim, and the dead-letter transition. */\nfunction bounded<T>(config: Config, nowMs: number, run: (options: WebhookCallOptions) => Promise<T>): Promise<BoundedOutcome<T>> {\n\treturn boundedCall(nowMs, config.limits.portTimeoutMs, config.signal, run, () => readFanOutClock(config.clock));\n}\n\n/**\n * The lease this worker holds on one claimed job: the fence every write for\n * it carries (its `eventId`, this worker, the claim's fence), the expiry\n * this worker last asked for, on its own clock, and the job's processing\n * deadline (`Infinity` when the body that holds it could not be read).\n */\ninterface JobLease {\n\treadonly parent: WebhookFanOutJobFence;\n\texpiresAtMs: number;\n\treadonly deadlineMs: number;\n}\n\nfunction jobLease(config: Config, header: ClaimedHeader, expiresAtMs: number, deadlineMs: number): JobLease {\n\treturn { parent: freeze({ eventId: header.eventId, owner: config.workerId, fence: header.lease.fence }), expiresAtMs, deadlineMs };\n}\n\n/**\n * Thrown by {@link keepLease} when the store refuses a renewal, and caught\n * only by `runWebhookFanOutCycle`'s loop: it unwinds the job's processing\n * at once, so nothing more is written for that job. A package-owned object,\n * so no port can throw it.\n */\nconst LEASE_LOST: object = freeze(Object.create(null) as object);\n\n/** Renew when less than this many `portTimeoutMs` of the lease is left: the renewal, then the call it precedes. */\nconst RENEW_MARGIN_CALLS = 2;\n\n/**\n * Keep the job's lease for the next call (see \"Lease renewal\" above). Renews\n * when less than `RENEW_MARGIN_CALLS * portTimeoutMs` is left. Throws\n * {@link LEASE_LOST} on a refusal; carries on when the renewal's outcome is\n * unknown.\n */\nasync function keepLease(config: Config, lease: JobLease): Promise<void> {\n\tconst nowMs = readFanOutClock(config.clock);\n\tif (lease.expiresAtMs - nowMs >= RENEW_MARGIN_CALLS * config.limits.portTimeoutMs) return;\n\tconst { parent } = lease;\n\tconst renewed = await bounded(config, nowMs, (callOptions) => config.deliveries.renewFanOutJobLease({\n\t\teventId: parent.eventId,\n\t\towner: parent.owner,\n\t\tfence: parent.fence,\n\t\tnow: new Date(nowMs),\n\t\tleaseDurationMs: config.leaseDurationMs,\n\t}, callOptions));\n\tif (renewed.ok && renewed.value === true) {\n\t\t// The store's rule: never shorter than before, never past the processing deadline.\n\t\tconst untilMs = mathMin(nowMs + config.leaseDurationMs, lease.deadlineMs);\n\t\tif (untilMs > lease.expiresAtMs) lease.expiresAtMs = untilMs;\n\t\treturn;\n\t}\n\tif (renewed.ok && renewed.value === false) throw LEASE_LOST;\n}\n\n/** One job being processed: its lease and its persisted processing deadline. */\ninterface JobRun {\n\treadonly config: Config;\n\treadonly job: ClaimedJob;\n\treadonly lease: JobLease;\n\treadonly parent: WebhookFanOutJobFence;\n\treadonly deadlineMs: number;\n\treadonly counters: Counters;\n}\n\ntype JobOutcome<T> = BoundedOutcome<T> | { readonly ok: false; readonly reason: \"deadline\" };\n\n/**\n * A port call made while processing a job (R4). It is not made at all once\n * the job's processing deadline has passed, and otherwise it is bounded by\n * the smaller of `portTimeoutMs` and the job's remaining lifetime, so its\n * absolute `deadline`, which the store checks at its write, is never later\n * than the processing deadline. The job's lease is renewed first when it\n * must be (`keepLease`), so the call can finish inside the lease.\n */\nasync function jobCall<T>(run: JobRun, call: (options: WebhookCallOptions, nowMs: number) => Promise<T>): Promise<JobOutcome<T>> {\n\tif (!(run.deadlineMs - readFanOutClock(run.config.clock) > 0)) return { ok: false, reason: \"deadline\" };\n\tawait keepLease(run.config, run.lease);\n\tconst nowMs = readFanOutClock(run.config.clock);\n\tconst remainingMs = run.deadlineMs - nowMs;\n\tif (!(remainingMs > 0)) return { ok: false, reason: \"deadline\" };\n\tconst timeoutMs = remainingMs < run.config.limits.portTimeoutMs ? remainingMs : run.config.limits.portTimeoutMs;\n\treturn boundedCall(nowMs, timeoutMs, run.config.signal, (options) => call(options, nowMs), () => readFanOutClock(run.config.clock));\n}\n\nfunction failureDiagnostic(reason: \"threw\" | \"timeout\" | \"aborted\" | \"deadline\", unavailable: WebhookDiagnosticCode): WebhookDiagnosticCode {\n\tif (reason === \"deadline\") return \"processing_deadline_exceeded\";\n\treturn reason === \"timeout\" ? \"port_timeout\" : unavailable;\n}\n\ntype Decision =\n\t| { readonly kind: \"allow\" }\n\t| { readonly kind: \"deny\"; readonly code: WebhookAdmissionDenialCode }\n\t| { readonly kind: \"decided\" }\n\t| { readonly kind: \"unavailable\"; readonly diagnostic: WebhookDiagnosticCode };\n\n/** Why processing a job stopped early. */\ntype Stop =\n\t| { readonly kind: \"lease_lost\" }\n\t| { readonly kind: \"past_horizon\" }\n\t| { readonly kind: \"failed\"; readonly diagnostic: WebhookDiagnosticCode };\n\nasync function processJob(config: Config, job: ClaimedJob, lease: JobLease, counters: Counters): Promise<void> {\n\t// Both are finite: `readClaimedJobs` refuses a body whose dates do not parse.\n\tconst deadlineMs = job.processingDeadlineMs;\n\tconst run: JobRun = { config, job, lease, parent: lease.parent, deadlineMs, counters };\n\tconst nowMs = readFanOutClock(config.clock);\n\n\t// R4: the processing deadline was persisted when the job was created.\n\tif (nowMs >= deadlineMs) return deadLetterRun(run, \"processing_deadline_exceeded\");\n\n\t// R1: the completeness boundary. Nothing is decided for this event until\n\t// no revision written from now on can take effect at or before recordedAt.\n\tconst settleAtMs = job.recordedAtMs + config.settleMs;\n\tif (nowMs < settleAtMs) {\n\t\tif (settleAtMs >= deadlineMs) return deadLetterRun(run, \"processing_deadline_exceeded\");\n\t\treturn reschedule(run, settleAtMs, \"eligibility_unsettled\", \"deferred\");\n\t}\n\n\tconst listed = await jobCall(run, (callOptions) => config.subscriptions.listEligibilityRevisions(\n\t\t{ tenantId: job.tenantId, spaceId: job.spaceId, recordedAt: job.event.recordedAt },\n\t\tcallOptions,\n\t));\n\tif (!listed.ok) return retryOrDeadLetter(run, failureDiagnostic(listed.reason, \"subscription_store_unavailable\"));\n\tconst revisions = readRevisions(listed.value);\n\tif (revisions === undefined) return retryOrDeadLetter(run, \"subscription_store_unavailable\");\n\n\tlet incomplete: WebhookDiagnosticCode | undefined;\n\tfor (const revision of revisions) {\n\t\tif (!isEligible(revision, job)) continue;\n\t\tconst decision = await decide(run, revision);\n\t\tif (decision.kind === \"decided\") continue;\n\t\tif (decision.kind === \"unavailable\") {\n\t\t\t// A store failure or the deadline stops the job; an admission outage\n\t\t\t// leaves this pair open and moves on to the next one.\n\t\t\tif (decision.diagnostic === \"processing_deadline_exceeded\" || decision.diagnostic === \"delivery_store_unavailable\") {\n\t\t\t\treturn retryOrDeadLetter(run, decision.diagnostic);\n\t\t\t}\n\t\t\tincomplete ??= decision.diagnostic;\n\t\t\tcontinue;\n\t\t}\n\t\tconst stop = decision.kind === \"allow\" ? await insertIntent(run, revision) : await recordDenial(run, revision, decision.code);\n\t\tif (stop === undefined) continue;\n\t\tif (stop.kind === \"lease_lost\") {\n\t\t\t// Another worker holds the job now; this one writes nothing more for it.\n\t\t\tcounters.leaseLost += 1;\n\t\t\treturn;\n\t\t}\n\t\tif (stop.kind === \"past_horizon\") return deadLetterRun(run, \"processing_deadline_exceeded\");\n\t\tif (stop.diagnostic === \"intent_build_failed\") {\n\t\t\tincomplete ??= stop.diagnostic;\n\t\t\tcontinue;\n\t\t}\n\t\treturn retryOrDeadLetter(run, stop.diagnostic);\n\t}\n\tif (incomplete !== undefined) return retryOrDeadLetter(run, incomplete);\n\n\t// `jobCall` rechecks the deadline here, and the store checks the call deadline again at its write.\n\tconst done = await jobCall(run, (callOptions, now) =>\n\t\tconfig.deliveries.completeFanOutJob({ eventId: job.eventId, owner: run.parent.owner, fence: run.parent.fence, now: new Date(now) }, callOptions));\n\t// Only a completion that was never sent is followed by the dead letter. One\n\t// that threw or timed out may have committed, so nothing follows it: the\n\t// job is `abandoned`, and if it is still pending a later claim finds it\n\t// past its deadline and dead-letters it then.\n\tif (!done.ok && done.reason === \"deadline\") return deadLetterRun(run, \"processing_deadline_exceeded\");\n\tsettleCount(done, counters, \"completed\");\n}\n\n/** An `active` revision in the job's own scope whose patterns match the event type. */\nfunction isEligible(revision: WebhookEligibilityRevision, job: ClaimedJob): boolean {\n\tif (revision.status !== \"active\") return false;\n\t// Decision 9: a job reads revisions only for its own tenant and space.\n\tif (revision.tenantId !== job.tenantId || revision.spaceId !== job.spaceId) return false;\n\tfor (const pattern of revision.eventTypePatterns) {\n\t\tif (matchesWebhookEventTypePattern(pattern, job.event.eventType)) return true;\n\t}\n\treturn false;\n}\n\nfunction actorRequiredFor(config: Config, job: ClaimedJob, revision: WebhookEligibilityRevision): boolean {\n\tconst required = config.actorRequired;\n\tif (typeof required === \"boolean\") return required;\n\ttry {\n\t\t// Fail closed: only a literal `false` waives the actor.\n\t\treturn apply(required, undefined, [freeze({\n\t\t\tsubscriptionId: revision.subscriptionId,\n\t\t\teligibilityRevision: revision.revision,\n\t\t\ttenantId: job.tenantId,\n\t\t\tspaceId: job.spaceId,\n\t\t\tevent: job.event,\n\t\t})]) !== false;\n\t} catch {\n\t\treturn true;\n\t}\n}\n\nasync function decide(run: JobRun, revision: WebhookEligibilityRevision): Promise<Decision> {\n\tconst { config, job } = run;\n\t// A pair with an intent or a denial (their tombstone) is decided: a retry\n\t// or a re-claim does not ask admission again, so an admission outage\n\t// after the decision cannot hold the job open.\n\tconst marker = await jobCall(run, (callOptions) => config.deliveries.readTombstone(\n\t\t{ tenantId: job.tenantId, spaceId: job.spaceId, subscriptionId: revision.subscriptionId, eventId: job.eventId },\n\t\tcallOptions,\n\t));\n\tif (!marker.ok) return { kind: \"unavailable\", diagnostic: failureDiagnostic(marker.reason, \"delivery_store_unavailable\") };\n\tconst decided = readDecided(marker.value);\n\tif (decided === undefined) return { kind: \"unavailable\", diagnostic: \"delivery_store_unavailable\" };\n\tif (decided === \"decided\") return { kind: \"decided\" };\n\n\t// Decision 5: suppressed and legacy absence are both `unavailable` for a\n\t// revision that needs the actor; admission is not asked.\n\tif (job.actor.state !== \"present\" && actorRequiredFor(config, job, revision)) {\n\t\treturn { kind: \"unavailable\", diagnostic: \"admission_unavailable\" };\n\t}\n\tconst answer = await jobCall(run, (callOptions) => config.admission.admit({\n\t\tsubscriptionId: revision.subscriptionId,\n\t\teligibilityRevision: revision.revision,\n\t\tevent: job.event,\n\t\tfacts: job.facts,\n\t\tactor: job.actor,\n\t}, callOptions));\n\t// Decision 4: a throw or a timeout is `unavailable`, and no intent is written.\n\tif (!answer.ok) return { kind: \"unavailable\", diagnostic: failureDiagnostic(answer.reason, \"admission_unavailable\") };\n\t// Total: an answer that cannot be read is `unavailable`, never `allow`.\n\tconst decision = normalizeWebhookAdmissionDecision(answer.value);\n\tif (decision.decision === \"allow\") return { kind: \"allow\" };\n\tif (decision.decision === \"deny\") return { kind: \"deny\", code: decision.code };\n\treturn { kind: \"unavailable\", diagnostic: \"admission_unavailable\" };\n}\n\nconst INSERT_OUTCOMES = freeze([\"inserted\", \"already_present\", \"lease_lost\", \"past_horizon\"] as const);\n\n/** Read a fenced insert's answer: `\"inserted\"`, `undefined` to continue, or why to stop. */\nfunction insertStop(outcome: JobOutcome<unknown>): Stop | undefined | \"inserted\" {\n\tif (!outcome.ok) return { kind: \"failed\", diagnostic: failureDiagnostic(outcome.reason, \"delivery_store_unavailable\") };\n\tconst answer = readOutcome(outcome.value, INSERT_OUTCOMES);\n\tif (answer === \"inserted\") return \"inserted\";\n\tif (answer === \"already_present\") return undefined;\n\tif (answer === \"lease_lost\") return { kind: \"lease_lost\" };\n\tif (answer === \"past_horizon\") return { kind: \"past_horizon\" };\n\treturn { kind: \"failed\", diagnostic: \"delivery_store_unavailable\" };\n}\n\nasync function insertIntent(run: JobRun, revision: WebhookEligibilityRevision): Promise<Stop | undefined> {\n\tconst { config, job } = run;\n\tlet deliveryId: string;\n\tlet body: string;\n\ttry {\n\t\tdeliveryId = apply(config.createDeliveryId, undefined, [freeze({ subscriptionId: revision.subscriptionId, eventId: job.eventId })]) as string;\n\t\tif (typeof deliveryId !== \"string\") throw fanOutError(\"options_invalid\", \"createDeliveryId\");\n\t\tbody = renderWebhookDeliveryBodyV1({\n\t\t\tjob,\n\t\t\tsubscription: { subscriptionId: revision.subscriptionId, tenantId: revision.tenantId, spaceId: revision.spaceId },\n\t\t\tpolicy: config.policy,\n\t\t\tscopePredicate: config.scopePredicate,\n\t\t\tdeliveryId,\n\t\t}).rawBody;\n\t} catch {\n\t\treturn { kind: \"failed\", diagnostic: \"intent_build_failed\" };\n\t}\n\t// `jobCall` refuses to start once the deadline has passed and caps the call deadline at it.\n\tconst outcome = await jobCall(run, (callOptions, nowMs) => config.deliveries.insertDeliveryIntent({\n\t\tdeliveryId,\n\t\tsubscriptionId: revision.subscriptionId,\n\t\teventId: job.eventId,\n\t\ttenantId: job.tenantId,\n\t\tspaceId: job.spaceId,\n\t\teligibilityRevision: revision.revision,\n\t\tbody,\n\t\tavailableAt: isoOf(nowMs),\n\t\tprocessingDeadline: isoOf(nowMs + config.limits.deliveryDeadlineMs),\n\t\tcreatedAt: isoOf(nowMs),\n\t}, run.parent, callOptions));\n\tconst stop = insertStop(outcome);\n\tif (stop === \"inserted\") {\n\t\trun.counters.intentsInserted += 1;\n\t\treturn undefined;\n\t}\n\treturn stop;\n}\n\nasync function recordDenial(run: JobRun, revision: WebhookEligibilityRevision, code: WebhookAdmissionDenialCode): Promise<Stop | undefined> {\n\tconst { config, job } = run;\n\tconst outcome = await jobCall(run, (callOptions, nowMs) => config.deliveries.recordAdmissionDenial({\n\t\tsubscriptionId: revision.subscriptionId,\n\t\teventId: job.eventId,\n\t\ttenantId: job.tenantId,\n\t\tspaceId: job.spaceId,\n\t\teligibilityRevision: revision.revision,\n\t\tcode,\n\t\trecordedAt: isoOf(nowMs),\n\t}, run.parent, callOptions));\n\tconst stop = insertStop(outcome);\n\tif (stop === \"inserted\") {\n\t\trun.counters.denialsRecorded += 1;\n\t\treturn undefined;\n\t}\n\treturn stop;\n}\n\n/**\n * Count a fenced transition. Only a literal `true` is done and a literal\n * `false` is a lost lease; anything else, a failed call included, leaves the\n * job for lease expiry. The comparisons run no code of the value.\n */\nfunction settleCount(outcome: JobOutcome<unknown>, counters: Counters, done: \"completed\" | \"deferred\" | \"rescheduled\" | \"deadLettered\"): void {\n\tif (outcome.ok && outcome.value === true) counters[done] += 1;\n\telse if (outcome.ok && outcome.value === false) counters.leaseLost += 1;\n\telse counters.abandoned += 1;\n}\n\nasync function retryOrDeadLetter(run: JobRun, diagnostic: WebhookDiagnosticCode): Promise<void> {\n\tconst { config, job } = run;\n\tconst nowMs = readFanOutClock(config.clock);\n\tif (nowMs >= run.deadlineMs) return deadLetterRun(run, \"processing_deadline_exceeded\");\n\tconst attempt = job.attemptCount + 1;\n\tif (attempt >= config.limits.maxFanOutAttempts) return deadLetterRun(run, diagnostic);\n\tlet delayMs: number;\n\ttry {\n\t\tdelayMs = apply(config.retryDelay, undefined, [attempt]) as number;\n\t} catch {\n\t\tdelayMs = NaN;\n\t}\n\t// A retry delay that is not a non-negative finite number falls back to\n\t// the longest configured delay rather than retrying at once.\n\tif (typeof delayMs !== \"number\" || !numberIsFinite(delayMs) || delayMs < 0) {\n\t\tconst delays = config.limits.fanOutRetryDelaysMs;\n\t\tdelayMs = delays[delays.length - 1]!;\n\t}\n\tconst availableAtMs = nowMs + delayMs;\n\tif (availableAtMs >= run.deadlineMs) return deadLetterRun(run, \"processing_deadline_exceeded\");\n\treturn reschedule(run, availableAtMs, diagnostic, \"rescheduled\");\n}\n\nasync function reschedule(run: JobRun, availableAtMs: number, diagnostic: WebhookDiagnosticCode, done: \"deferred\" | \"rescheduled\"): Promise<void> {\n\tconst { config, job, parent } = run;\n\tconst outcome = await jobCall(run, (callOptions, nowMs) => config.deliveries.rescheduleFanOutJob({\n\t\teventId: job.eventId,\n\t\towner: parent.owner,\n\t\tfence: parent.fence,\n\t\tnow: new Date(nowMs),\n\t\tavailableAt: new Date(availableAtMs),\n\t\tdiagnostic,\n\t}, callOptions));\n\t// As for completion: only a reschedule that was never sent is followed by\n\t// the dead letter; one that threw or timed out may have committed.\n\tif (!outcome.ok && outcome.reason === \"deadline\") return deadLetterRun(run, \"processing_deadline_exceeded\");\n\tsettleCount(outcome, run.counters, done);\n}\n\nfunction deadLetterRun(run: JobRun, diagnostic: WebhookDiagnosticCode): Promise<void> {\n\treturn deadLetter(run.config, run.lease, run.counters, diagnostic);\n}\n\n/**\n * The fenced dead-letter transition, bounded by `portTimeoutMs` alone: it is\n * how a job past its deadline ends, and how a job whose body cannot be read\n * ends (`job_unreadable`). It needs only the job's fence, never its body.\n */\nasync function deadLetter(config: Config, lease: JobLease, counters: Counters, diagnostic: WebhookDiagnosticCode): Promise<void> {\n\tawait keepLease(config, lease);\n\tconst parent = lease.parent;\n\tconst nowMs = readFanOutClock(config.clock);\n\tconst outcome = await bounded(config, nowMs, (callOptions) => config.deliveries.deadLetterFanOutJob({\n\t\teventId: parent.eventId,\n\t\towner: parent.owner,\n\t\tfence: parent.fence,\n\t\tnow: new Date(nowMs),\n\t\tdiagnostic,\n\t}, callOptions));\n\tsettleCount(outcome, counters, \"deadLettered\");\n}\n","import { buildWebhookRequestHeaders } from \"./headers\";\nimport type { WebhookResolvedAddress, WebhookTransportResult, WebhookVettedDestination } from \"./ports\";\nimport {\n\tdateParse,\n\tfreeze,\n\tfrozenList,\n\tisArray,\n\tisOneOf,\n\tisPlainRecord,\n\tnumberIsFinite,\n\tnumberIsSafeInteger,\n\treadOwn,\n\trecord,\n\ttype Fail,\n} from \"./snapshot\";\nimport type { WebhookSubscriptionStatus } from \"./types\";\n\n/*\n * Reading what a port returned, for the delivery cycle. The same rules as\n * src/fan-out-read.ts: own data properties only, read through descriptors\n * (an accessor is refused uncalled), copied into package-owned frozen\n * values, one try/catch per reader, and whatever a reader catches is\n * dropped unread. Anything that cannot be read is `undefined`, and the\n * cycle maps that to a fixed code.\n */\n\nconst REFUSED = freeze(Object.create(null) as object);\nconst refuse: Fail = () => {\n\tthrow REFUSED;\n};\n\nfunction raw(target: object, key: string): unknown {\n\treturn readOwn(target, key, key, refuse);\n}\n\nfunction plain(value: unknown): object {\n\tif (!isPlainRecord(value)) throw REFUSED;\n\treturn value;\n}\n\nfunction nonEmpty(value: unknown): string {\n\tif (typeof value !== \"string\" || value === \"\") throw REFUSED;\n\treturn value;\n}\n\nfunction whole(value: unknown, min: number): number {\n\tif (typeof value !== \"number\" || !numberIsSafeInteger(value) || value < min) throw REFUSED;\n\treturn value;\n}\n\nfunction instantMs(value: unknown): number {\n\tconst ms = dateParse(nonEmpty(value));\n\tif (!numberIsFinite(ms)) throw REFUSED;\n\treturn ms;\n}\n\n// ---------------------------------------------------------------------------\n// Claimed intents\n// ---------------------------------------------------------------------------\n\n/** What names a claimed intent and its lease: all a fenced settlement needs. */\nexport interface ClaimedIntentHeader {\n\treadonly deliveryId: string;\n\treadonly tenantId: string;\n\treadonly spaceId: string;\n\treadonly lease: { readonly owner: string; readonly fence: number };\n}\n\n/** A claimed intent as the cycle uses it, every field read and validated. */\nexport interface ClaimedIntent extends ClaimedIntentHeader {\n\treadonly subscriptionId: string;\n\treadonly eventId: string;\n\t/** The eligibility revision fan-out bound the intent to (decision 3); dispatch compares it with the snapshot's `statusSinceRevision`. */\n\treadonly eligibilityRevision: number;\n\t/** The rendered v1 body, signed and sent byte for byte. */\n\treadonly body: string;\n\treadonly attemptCount: number;\n\treadonly processingDeadlineMs: number;\n\treadonly leaseExpiresAtMs: number;\n}\n\n/**\n * One entry of a claim result. `undefined`: identity or lease cannot be\n * read, so no fenced write can name it. `intent: undefined`: the header\n * was read but the rest cannot be, so the cycle dead-letters it by its\n * header (`intent_unreadable`).\n */\nexport type ClaimedIntentEntry = { readonly header: ClaimedIntentHeader; readonly intent: ClaimedIntent | undefined } | undefined;\n\n/** More intents than any claim limit a cycle sends; a longer answer is not a claim result. */\nconst MAX_CLAIMED = 100_000;\n\n/** A placeholder `v1` value, used only to check that the intent's ids are header-safe before anything is signed. */\nconst PLACEHOLDER_SIGNATURE = `v1=${\"0\".repeat(64)}`;\n\nfunction readIntentHeader(item: unknown): ClaimedIntentHeader {\n\tconst intent = plain(item);\n\tconst lease = plain(raw(intent, \"lease\"));\n\treturn freeze({\n\t\tdeliveryId: nonEmpty(raw(intent, \"deliveryId\")),\n\t\ttenantId: nonEmpty(raw(intent, \"tenantId\")),\n\t\tspaceId: nonEmpty(raw(intent, \"spaceId\")),\n\t\tlease: freeze({ owner: nonEmpty(raw(lease, \"owner\")), fence: whole(raw(lease, \"fence\"), 0) }),\n\t});\n}\n\nfunction readIntentBody(item: unknown, header: ClaimedIntentHeader): ClaimedIntent {\n\tconst intent = plain(item);\n\tconst body = raw(intent, \"body\");\n\tif (typeof body !== \"string\") throw REFUSED;\n\tconst eventId = nonEmpty(raw(intent, \"eventId\"));\n\tconst attemptCount = whole(raw(intent, \"attemptCount\"), 0);\n\t// An intent whose ids cannot go into the unsigned headers can never be\n\t// sent; refusing it here keeps a header error from being blamed on the signer.\n\tbuildWebhookRequestHeaders({ signature: PLACEHOLDER_SIGNATURE, timestampSeconds: 0, eventId, deliveryId: header.deliveryId, attempt: attemptCount + 1 });\n\treturn freeze({\n\t\t...header,\n\t\tsubscriptionId: nonEmpty(raw(intent, \"subscriptionId\")),\n\t\teventId,\n\t\teligibilityRevision: whole(raw(intent, \"eligibilityRevision\"), 1),\n\t\tbody,\n\t\tattemptCount,\n\t\tprocessingDeadlineMs: instantMs(raw(intent, \"processingDeadline\")),\n\t\tleaseExpiresAtMs: instantMs(raw(plain(raw(intent, \"lease\")), \"expiresAt\")),\n\t});\n}\n\n/**\n * The claim result: `undefined` when the list itself cannot be read, and\n * otherwise one {@link ClaimedIntentEntry} per record. Each record's header\n * is read first, in its own try/catch, and its body after, in another.\n */\nexport function readClaimedIntents(value: unknown): readonly ClaimedIntentEntry[] | undefined {\n\tconst items: unknown[] = [];\n\ttry {\n\t\tif (!isArray(value)) return undefined;\n\t\tconst length = raw(value, \"length\");\n\t\tif (typeof length !== \"number\" || !numberIsSafeInteger(length) || length < 0 || length > MAX_CLAIMED) return undefined;\n\t\tfor (let index = 0; index < length; index += 1) items.push(raw(value, `${index}`));\n\t} catch {\n\t\treturn undefined;\n\t}\n\treturn frozenList(items.map((item): ClaimedIntentEntry => {\n\t\tlet header: ClaimedIntentHeader;\n\t\ttry {\n\t\t\theader = readIntentHeader(item);\n\t\t} catch {\n\t\t\treturn undefined;\n\t\t}\n\t\ttry {\n\t\t\treturn freeze({ header, intent: readIntentBody(item, header) });\n\t\t} catch {\n\t\t\treturn freeze({ header, intent: undefined });\n\t\t}\n\t}));\n}\n\n// ---------------------------------------------------------------------------\n// Subscription state\n// ---------------------------------------------------------------------------\n\n/** The delivery configuration the cycle signs and addresses one attempt with. */\nexport interface DispatchConfiguration {\n\treadonly version: number;\n\treadonly destinationUrl: string;\n\treadonly signatureScheme: \"v1\";\n\treadonly secretRef: string;\n}\n\n/**\n * What a `readSubscription` answer means for one intent.\n * `not_in_scope`: `null` (no such subscription in the intent's tenant and\n * space), or an answer naming another subscription, tenant or space.\n * `unreadable`: anything else that is not a well-formed snapshot, a\n * missing or malformed `statusSinceRevision` included.\n */\nexport type SubscriptionRead =\n\t| {\n\t\treadonly kind: \"ok\";\n\t\treadonly status: WebhookSubscriptionStatus;\n\t\t/** The snapshot's `statusSinceRevision`, read from the same answer as `status`. */\n\t\treadonly statusSinceRevision: number;\n\t\treadonly configuration: DispatchConfiguration;\n\t}\n\t| { readonly kind: \"not_in_scope\" }\n\t| { readonly kind: \"unreadable\" };\n\nconst STATUSES = freeze([\"active\", \"paused\", \"deleted\"] as const);\nconst NOT_IN_SCOPE: SubscriptionRead = freeze({ kind: \"not_in_scope\" });\nconst UNREADABLE: SubscriptionRead = freeze({ kind: \"unreadable\" });\n\n/**\n * Read a `readSubscription` answer for the intent `owner`. The snapshot and\n * its configuration must both name the intent's subscription, tenant and\n * space (decision 9: the worker refuses an intent whose subscription now\n * names another tenant or space).\n */\nexport function readSubscriptionFor(value: unknown, owner: { readonly subscriptionId: string; readonly tenantId: string; readonly spaceId: string }): SubscriptionRead {\n\ttry {\n\t\tif (value === null) return NOT_IN_SCOPE;\n\t\tconst snapshot = plain(value);\n\t\tconst configuration = plain(raw(snapshot, \"configuration\"));\n\t\tconst named = [raw(snapshot, \"subscriptionId\"), raw(snapshot, \"tenantId\"), raw(snapshot, \"spaceId\"),\n\t\t\traw(configuration, \"subscriptionId\"), raw(configuration, \"tenantId\"), raw(configuration, \"spaceId\")];\n\t\tfor (const name of named) nonEmpty(name);\n\t\tif (named[0] !== owner.subscriptionId || named[1] !== owner.tenantId || named[2] !== owner.spaceId\n\t\t\t|| named[3] !== owner.subscriptionId || named[4] !== owner.tenantId || named[5] !== owner.spaceId) {\n\t\t\treturn NOT_IN_SCOPE;\n\t\t}\n\t\tconst status = raw(snapshot, \"status\");\n\t\tif (!isOneOf(STATUSES, status)) return UNREADABLE;\n\t\tif (raw(configuration, \"signatureScheme\") !== \"v1\") return UNREADABLE;\n\t\treturn freeze({\n\t\t\tkind: \"ok\",\n\t\t\tstatus: status as WebhookSubscriptionStatus,\n\t\t\tstatusSinceRevision: whole(raw(snapshot, \"statusSinceRevision\"), 1),\n\t\t\tconfiguration: freeze({\n\t\t\t\tversion: whole(raw(configuration, \"version\"), 1),\n\t\t\t\tdestinationUrl: nonEmpty(raw(configuration, \"destinationUrl\")),\n\t\t\t\tsignatureScheme: \"v1\" as const,\n\t\t\t\tsecretRef: nonEmpty(raw(configuration, \"secretRef\")),\n\t\t\t}),\n\t\t});\n\t} catch {\n\t\treturn UNREADABLE;\n\t}\n}\n\n// ---------------------------------------------------------------------------\n// Destination, signature and transport results\n// ---------------------------------------------------------------------------\n\n/** A resolver answer copied into package-owned frozen values. */\nexport type ResolutionRead =\n\t| { readonly ok: true; readonly destination: WebhookVettedDestination }\n\t| { readonly ok: false; readonly code: \"invalid_url\" | \"private_address\" | \"dns_failure\" };\n\nconst RESOLUTION_CODES = freeze([\"invalid_url\", \"private_address\", \"dns_failure\"] as const);\n/** The most addresses a destination may carry (the resolver's own cap). */\nconst MAX_ADDRESSES = 32;\n\n/** A resolver answer, or `undefined` when it cannot be read. */\nexport function readResolution(value: unknown): ResolutionRead | undefined {\n\ttry {\n\t\tconst answer = plain(value);\n\t\tconst ok = raw(answer, \"ok\");\n\t\tif (ok === false) {\n\t\t\tconst code = raw(answer, \"code\");\n\t\t\treturn isOneOf(RESOLUTION_CODES, code) ? freeze({ ok: false as const, code: code as \"invalid_url\" | \"private_address\" | \"dns_failure\" }) : undefined;\n\t\t}\n\t\tif (ok !== true) return undefined;\n\t\tconst destination = plain(raw(answer, \"destination\"));\n\t\tif (raw(destination, \"port\") !== 443) return undefined;\n\t\tconst list = raw(destination, \"addresses\");\n\t\tif (!isArray(list)) return undefined;\n\t\tconst length = raw(list, \"length\");\n\t\tif (typeof length !== \"number\" || !numberIsSafeInteger(length) || length < 1 || length > MAX_ADDRESSES) return undefined;\n\t\tconst addresses: WebhookResolvedAddress[] = [];\n\t\tfor (let index = 0; index < length; index += 1) {\n\t\t\tconst item = plain(raw(list, `${index}`));\n\t\t\tconst family = raw(item, \"family\");\n\t\t\tif (family !== 4 && family !== 6) return undefined;\n\t\t\taddresses.push(record({ address: nonEmpty(raw(item, \"address\")), family }));\n\t\t}\n\t\treturn freeze({\n\t\t\tok: true as const,\n\t\t\tdestination: record<WebhookVettedDestination>({\n\t\t\t\turl: nonEmpty(raw(destination, \"url\")),\n\t\t\t\thostname: nonEmpty(raw(destination, \"hostname\")),\n\t\t\t\tport: 443,\n\t\t\t\taddresses: frozenList(addresses),\n\t\t\t}),\n\t\t});\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\n/** Longer than any receipt a package store makes (69 characters); a longer one is not a receipt. */\nconst MAX_RECEIPT_LENGTH = 256;\n\n/**\n * A `beginAttempt` answer: `{ begun: true, receipt }` with a non-empty\n * receipt, `{ begun: false }`, or `undefined` when it is neither. Only a\n * well-formed `begun: true` lets the cycle hand off.\n */\nexport function readBeginAnswer(value: unknown): { readonly begun: true; readonly receipt: string } | { readonly begun: false } | undefined {\n\ttry {\n\t\tconst answer = plain(value);\n\t\tconst begun = raw(answer, \"begun\");\n\t\tif (begun === false) return freeze({ begun: false as const });\n\t\tif (begun !== true) return undefined;\n\t\tconst receipt = nonEmpty(raw(answer, \"receipt\"));\n\t\treturn receipt.length > MAX_RECEIPT_LENGTH ? undefined : freeze({ begun: true as const, receipt });\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\n/** A signer answer: the string it returned, or `undefined`. Its format is checked when the headers are built. */\nexport function readSignature(value: unknown): string | undefined {\n\treturn typeof value === \"string\" ? value : undefined;\n}\n\nconst OBSERVATION_KINDS = freeze([\"network_error\", \"timeout\", \"dns_failure\", \"invalid_url\", \"private_address\"] as const);\nconst NOT_SENT_REASONS = freeze([\"deadline_expired\", \"aborted\"] as const);\n/** Longer than any `Retry-After` the Node transport returns (128); a longer value is dropped, not truncated. */\nconst MAX_RETRY_AFTER_LENGTH = 256;\n\n/**\n * A transport answer copied into a package-owned frozen value, or\n * `undefined` when it cannot be read. Only `kind`, `status`, `retryAfter`\n * and a `not_sent` reason are read; anything else the transport put on its\n * answer, a response body included, is never read.\n */\nexport function readTransportResult(value: unknown): WebhookTransportResult | undefined {\n\ttry {\n\t\tconst answer = plain(value);\n\t\tconst kind = raw(answer, \"kind\");\n\t\tif (kind === \"response\") {\n\t\t\tconst status = raw(answer, \"status\");\n\t\t\tif (typeof status !== \"number\" || !numberIsSafeInteger(status) || status < 100 || status > 599) return undefined;\n\t\t\tconst retryAfter = raw(answer, \"retryAfter\");\n\t\t\tconst kept = typeof retryAfter === \"string\" && retryAfter.length <= MAX_RETRY_AFTER_LENGTH ? retryAfter : null;\n\t\t\treturn record<WebhookTransportResult>({ kind: \"response\", status, retryAfter: kept });\n\t\t}\n\t\tif (kind === \"not_sent\") {\n\t\t\tconst reason = raw(answer, \"reason\");\n\t\t\treturn isOneOf(NOT_SENT_REASONS, reason) ? record<WebhookTransportResult>({ kind: \"not_sent\", reason: reason as \"deadline_expired\" | \"aborted\" }) : undefined;\n\t\t}\n\t\tif (isOneOf(OBSERVATION_KINDS, kind)) return record<WebhookTransportResult>({ kind: kind as \"network_error\" });\n\t\treturn undefined;\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n","import { classifyWebhookDeliveryObservation, type WebhookDeliveryClassification, type WebhookDeliveryObservation } from \"./classify\";\nimport type { WebhookAttemptReasonCode, WebhookDiagnosticCode } from \"./codes\";\nimport { normalizeWebhookDeliveryAuthorizationDecision } from \"./decisions\";\nimport {\n\treadBeginAnswer,\n\treadClaimedIntents,\n\treadResolution,\n\treadSignature,\n\treadSubscriptionFor,\n\treadTransportResult,\n\ttype ClaimedIntent,\n\ttype ClaimedIntentHeader,\n\ttype DispatchConfiguration,\n} from \"./delivery-read\";\nimport { configError, deliveryError, guard } from \"./errors\";\nimport { boundedCall, signalAborted, type BoundedOutcome } from \"./fan-out-call\";\nimport { buildWebhookRequestHeaders } from \"./headers\";\nimport { assertPositiveInteger, resolveWebhookDeliveryLimits, type WebhookDeliveryLimits } from \"./limits\";\nimport type {\n\tWebhookCallOptions,\n\tWebhookClock,\n\tWebhookDeliveryAuthorization,\n\tWebhookDeliveryStore,\n\tWebhookDestinationResolver,\n\tWebhookRandomSource,\n\tWebhookRetryDelay,\n\tWebhookSigner,\n\tWebhookSubscriptionStore,\n\tWebhookTransport,\n\tWebhookTransportRequest,\n} from \"./ports\";\nimport { createWebhookRetryDelay } from \"./retry\";\nimport { apply, freeze, mathFloor, mathMax, mathMin, numberIsFinite, primitive, record, timeOf } from \"./snapshot\";\nimport { isoOf } from \"./store-input\";\n\n/*\n * The delivery cycle (ADR 0018 decisions 3, 4, 8 and 10; R2, R4, R6, R7).\n *\n * Check order. For each claimed intent, in this order:\n *\n * 0. The claim: a fenced lease, the intent's fence advanced (store).\n * Then the lease is renewed when less than one whole attempt is left\n * of it (`keepLease`): an intent late in a batch has waited for the\n * ones before it under a lease taken at the claim.\n * 1. Processing deadline, persisted when fan-out created the intent: no\n * call before the handoff (preparation and guard calls, `intentCall`)\n * is started at or after it, and the first call it refuses\n * dead-letters the intent `processing_deadline_exceeded`. Outcome,\n * settlement and attempt-log writes after a handoff are not held to it.\n * 2. `readSubscription` in the intent's tenant and space: not there, or\n * naming another subscription, tenant or space, dead-letters it\n * `subscription_not_in_scope`; paused or deleted cancels it, and so\n * does an active subscription whose `statusSinceRevision` is above the\n * intent's `eligibilityRevision` (paused and resumed since the intent's\n * interval: `subscription_paused`). Otherwise it yields the\n * configuration version `v` this attempt uses.\n * 3. Resolve `v`'s destination and sign the body with `v`'s secret\n * reference (preparation; a refused destination or a failed signer\n * spends an attempt, per decision 10's table, without sending).\n * 4. Guards, immediately before the handoff, with nothing between them but\n * clock reads:\n * a. delivery authorization for this attempt and `v`: revoked cancels,\n * unavailable releases unsent;\n * b. `readSubscription` again: paused, deleted, resumed since the\n * intent's revision or out of scope as in 2;\n * a configuration version other than `v` releases unsent as\n * `configuration_conflict`;\n * c. the transport's deadline: the clock now plus `attemptTimeoutMs`,\n * and at most 4b's start plus `portTimeoutMs + attemptTimeoutMs`,\n * the processing deadline, and the lease's expiry (as claimed or\n * renewed in step 0) less three `portTimeoutMs` (the answer's\n * grace, the outcome write, the settlement);\n * d. `beginAttempt`: in one atomic store step, the lease is still this\n * worker's at this fence and unexpired on the store's clock, and an\n * in-flight attempt entry is written for (deliveryId, fence). The\n * store returns a receipt that only this worker holds.\n * 5. Handoff: `transport.send()` with the signed request. This is the\n * irrevocable point. A change committed after 4b's read (a revocation,\n * a pause, a configuration replacement), or after 4d's begin (a\n * reclaim), may race with the request, which can then reach the old\n * destination with the old secret (R2, decision 3). The transport may\n * still answer `not_sent` when its deadline passed or its signal\n * aborted before it started the request (R3); that attempt is\n * recorded `not_sent` and the intent released.\n * 6. Classify (decision 10), append the attempt's outcome with the\n * receipt (not fenced, so a worker that lost its lease during the\n * request still records it, and nobody else can), then settle under\n * the fence: delivered, retry, dead letter. A settlement the store\n * refuses (lease expired or reclaimed) leaves the intent to be sent\n * again after a reclaim: delivery is at least once.\n *\n * Releases (deferrals) spend no attempt; every deferral, reclaim and\n * configuration conflict counts toward the persisted processing deadline\n * (R4). Each port call before the handoff is bounded by the smaller of\n * `portTimeoutMs` and the intent's remaining lifetime; the transport by its\n * deadline from 4c plus a `portTimeoutMs` grace for its answer; each\n * outcome, settlement and attempt write by `portTimeoutMs`. `boundedCall`\n * accepts no answer that settles at or after its bound, on the injected\n * clock or on the monotonic clock, timed when the port's promise settles,\n * so a late result is dropped and nothing is written from it.\n *\n * A store write that timed out may have committed. The cycle never follows\n * one with a second transition of the intent on the strength of the\n * timeout: a timed-out settlement ends the intent's processing\n * (`abandoned`); a timed-out `beginAttempt` is followed by a release (begin\n * does not change the intent, so the release is the only transition, and a\n * begin that did commit leaves an `in_flight` entry with no request behind\n * it); a timed-out `appendAttempt` is followed by a release, so the log may\n * hold an entry for an attempt that spent nothing, and the next pass logs\n * the same attempt number again.\n */\n\n/** One intent's outcome, as reported to {@link WebhookDeliveryCycleOptions.observe}. */\nexport type WebhookDeliveryCycleResultKind =\n\t| \"delivered\"\n\t| \"retry_scheduled\"\n\t| \"dead_lettered\"\n\t| \"cancelled\"\n\t| \"released\"\n\t| \"lease_lost\"\n\t| \"abandoned\";\n\n/**\n * What the cycle reports for one claimed intent. Every field is an\n * identifier the store already holds, a number, or a fixed code: never a\n * destination, secret reference, signature, header, body or port error.\n */\nexport interface WebhookDeliveryCycleEvent {\n\treadonly deliveryId: string;\n\treadonly tenantId: string;\n\treadonly spaceId: string;\n\treadonly subscriptionId?: string;\n\treadonly eventId?: string;\n\t/** The 1-based attempt number this processing was for. */\n\treadonly attempt?: number;\n\t/** The configuration version the attempt was prepared with, once read. */\n\treadonly configurationVersion?: number;\n\treadonly result: WebhookDeliveryCycleResultKind;\n\t/** `true` once the request was handed to the transport. */\n\treadonly handedOff: boolean;\n\treadonly reason?: WebhookAttemptReasonCode;\n\treadonly diagnostic?: WebhookDiagnosticCode;\n\treadonly httpStatus?: number;\n\t/** 401 or 403: still retried, but usually needing the receiver to act (decision 10). */\n\treadonly receiverActionLikely?: true;\n}\n\n/** Options for {@link runWebhookDeliveryCycle}. */\nexport interface WebhookDeliveryCycleOptions {\n\treadonly deliveries: WebhookDeliveryStore;\n\treadonly subscriptions: WebhookSubscriptionStore;\n\treadonly authorization: WebhookDeliveryAuthorization;\n\treadonly signer: WebhookSigner;\n\treadonly resolver: WebhookDestinationResolver;\n\treadonly transport: WebhookTransport;\n\treadonly clock: WebhookClock;\n\t/** The lease owner this worker claims intents as. */\n\treadonly workerId: string;\n\t/**\n\t * Overrides of {@link WebhookDeliveryLimits}, all validated positive and\n\t * finite (R4). Used: `maxDeliveryAttempts`, `deliveryRetryDelaysMs`,\n\t * `retryJitterRatio`, `attemptTimeoutMs`, `portTimeoutMs`, `maxRetryAfterMs`.\n\t */\n\treadonly limits?: Partial<WebhookDeliveryLimits>;\n\t/** Delay before the next attempt; defaults to `deliveryRetryDelaysMs` with jitter from `random`. */\n\treadonly retryDelay?: WebhookRetryDelay;\n\t/** Random source for the default retry delay's jitter; required when `retryDelay` is absent. */\n\treadonly random?: WebhookRandomSource;\n\t/** Intents claimed per cycle. A positive whole number; default 10. */\n\treadonly batchSize?: number;\n\t/**\n\t * Lease on each claimed intent, in ms. A positive whole number above\n\t * `attemptTimeoutMs + 10 * portTimeoutMs` (one whole attempt and the\n\t * renewal before it; see `ATTEMPT_PORT_CALLS`); default 120 000.\n\t */\n\treadonly leaseDurationMs?: number;\n\t/** Called once per claimed intent with fixed-code telemetry. A throw is ignored. */\n\treadonly observe?: (event: WebhookDeliveryCycleEvent) => void;\n\t/** Stops the cycle; intents not yet settled are reclaimed after their leases expire. */\n\treadonly signal?: AbortSignal;\n}\n\n/** What one cycle did. */\nexport interface WebhookDeliveryCycleResult {\n\treadonly claimed: number;\n\treadonly delivered: number;\n\t/** Settled for a later attempt, spending one. */\n\treadonly retried: number;\n\treadonly deadLettered: number;\n\treadonly cancelled: number;\n\t/** Returned to pending unsent, spending no attempt. */\n\treadonly released: number;\n\t/** Intents this worker stopped on because a fenced write found its lease gone. */\n\treadonly leaseLost: number;\n\t/** Intents left for lease expiry: unreadable, another owner's, or whose final write failed. */\n\treadonly abandoned: number;\n\t/** Requests handed to the transport. */\n\treadonly handedOff: number;\n}\n\n/**\n * What may follow the transport's deadline, in units of `portTimeoutMs`: the\n * grace the cycle waits for the transport's answer, then the outcome write\n * and the settlement, each bounded by `portTimeoutMs`. The transport's\n * deadline is kept this far inside the lease, so a request that answers in\n * time can be settled before the lease expires.\n */\nconst SETTLEMENT_WRITES = 3;\n\n/**\n * The port calls one attempt makes besides the transport, each bounded by\n * `portTimeoutMs`: before the handoff, `readSubscription`, the resolver, the\n * signer, authorization, `readSubscription` again and `beginAttempt` (6);\n * after it, the {@link SETTLEMENT_WRITES} (3). Each is cut off at its bound\n * by a timer, so one whole attempt takes about\n * `attemptTimeoutMs + ATTEMPT_PORT_CALLS * portTimeoutMs` at most, more\n * only when timers fire late.\n */\nconst ATTEMPT_PORT_CALLS = 6 + SETTLEMENT_WRITES;\n\n/** Defaults for the cycle's own options. */\nexport const DEFAULT_WEBHOOK_DELIVERY_CYCLE = freeze({\n\tbatchSize: 10,\n\tleaseDurationMs: 120_000,\n});\n\ninterface Clock {\n\treadonly target: object;\n\treadonly now: (...args: never[]) => unknown;\n}\n\ninterface Config {\n\treadonly deliveries: WebhookDeliveryStore;\n\treadonly subscriptions: WebhookSubscriptionStore;\n\treadonly authorization: WebhookDeliveryAuthorization;\n\treadonly signer: WebhookSigner;\n\treadonly resolver: WebhookDestinationResolver;\n\treadonly transport: WebhookTransport;\n\treadonly clock: Clock;\n\treadonly workerId: string;\n\treadonly limits: WebhookDeliveryLimits;\n\treadonly retryDelay: WebhookRetryDelay;\n\treadonly batchSize: number;\n\treadonly leaseDurationMs: number;\n\treadonly observe: ((event: WebhookDeliveryCycleEvent) => void) | undefined;\n\treadonly signal: AbortSignal | undefined;\n}\n\nfunction hasMethods(value: unknown, names: readonly string[]): boolean {\n\tif (value === null || typeof value !== \"object\") return false;\n\tfor (const name of names) if (typeof (value as Record<string, unknown>)[name] !== \"function\") return false;\n\treturn true;\n}\n\nfunction positiveWhole(value: unknown, fallback: number, field: string): number {\n\tconst read = primitive(value);\n\tconst resolved = read === undefined ? fallback : read;\n\tassertPositiveInteger(resolved, field);\n\treturn resolved;\n}\n\n/**\n * Read and validate the options. A package error (a limit, a missing random\n * source) passes through with its code; anything else thrown while reading\n * them, by a getter or a Proxy trap, is replaced unread with `options_invalid`.\n */\nfunction readConfig(options: WebhookDeliveryCycleOptions): Config {\n\treturn guard(() => readConfigUnguarded(options), () => deliveryError(\"options_invalid\", \"options\"));\n}\n\nfunction readConfigUnguarded(options: WebhookDeliveryCycleOptions): Config {\n\tif (options === null || typeof options !== \"object\") throw deliveryError(\"options_invalid\", \"options\");\n\tconst limits = resolveWebhookDeliveryLimits(options.limits ?? {});\n\tconst batchSize = positiveWhole(options.batchSize, DEFAULT_WEBHOOK_DELIVERY_CYCLE.batchSize, \"batchSize\");\n\tconst leaseDurationMs = positiveWhole(options.leaseDurationMs, DEFAULT_WEBHOOK_DELIVERY_CYCLE.leaseDurationMs, \"leaseDurationMs\");\n\t// The lease must fit one whole attempt (the calls before the handoff, the\n\t// transport call, its answer's grace, and the outcome and settlement\n\t// writes) after the renewal that precedes it; a shorter one would leave\n\t// an intent too little lease to hand off, on every claim.\n\tif (leaseDurationMs <= limits.attemptTimeoutMs + (ATTEMPT_PORT_CALLS + 1) * limits.portTimeoutMs) throw configError(\"limit_out_of_range\", \"leaseDurationMs\");\n\tif (!hasMethods(options.deliveries, [\"claimDeliveryIntents\", \"renewDeliveryIntentLease\", \"beginAttempt\", \"finishAttempt\", \"appendAttempt\", \"settleDeliveryIntent\"])) {\n\t\tthrow deliveryError(\"options_invalid\", \"deliveries\");\n\t}\n\tif (!hasMethods(options.subscriptions, [\"readSubscription\"])) throw deliveryError(\"options_invalid\", \"subscriptions\");\n\tif (!hasMethods(options.authorization, [\"authorize\"])) throw deliveryError(\"options_invalid\", \"authorization\");\n\tif (!hasMethods(options.signer, [\"sign\"])) throw deliveryError(\"options_invalid\", \"signer\");\n\tif (!hasMethods(options.resolver, [\"resolve\"])) throw deliveryError(\"options_invalid\", \"resolver\");\n\tif (!hasMethods(options.transport, [\"send\"])) throw deliveryError(\"options_invalid\", \"transport\");\n\tif (typeof options.workerId !== \"string\" || options.workerId === \"\") throw deliveryError(\"options_invalid\", \"workerId\");\n\tif (options.observe !== undefined && typeof options.observe !== \"function\") throw deliveryError(\"options_invalid\", \"observe\");\n\tif (options.signal !== undefined && !(options.signal instanceof AbortSignal)) throw deliveryError(\"options_invalid\", \"signal\");\n\tconst clock = options.clock as unknown;\n\tif (clock === null || typeof clock !== \"object\") throw deliveryError(\"options_invalid\", \"clock\");\n\tconst now = (clock as { now?: unknown }).now;\n\tif (typeof now !== \"function\") throw deliveryError(\"options_invalid\", \"clock.now\");\n\tlet retryDelay: WebhookRetryDelay;\n\tif (options.retryDelay !== undefined) {\n\t\tif (typeof options.retryDelay !== \"function\") throw deliveryError(\"options_invalid\", \"retryDelay\");\n\t\tretryDelay = options.retryDelay;\n\t} else {\n\t\tretryDelay = createWebhookRetryDelay({ delaysMs: limits.deliveryRetryDelaysMs, jitterRatio: limits.retryJitterRatio, random: options.random! });\n\t}\n\treturn freeze({\n\t\tdeliveries: options.deliveries,\n\t\tsubscriptions: options.subscriptions,\n\t\tauthorization: options.authorization,\n\t\tsigner: options.signer,\n\t\tresolver: options.resolver,\n\t\ttransport: options.transport,\n\t\tclock: freeze({ target: clock, now: now as (...args: never[]) => unknown }),\n\t\tworkerId: options.workerId,\n\t\tlimits,\n\t\tretryDelay,\n\t\tbatchSize,\n\t\tleaseDurationMs,\n\t\tobserve: options.observe,\n\t\tsignal: options.signal,\n\t});\n}\n\n/** Read the clock; a throw or an invalid time is `clock_invalid`. */\nfunction readClock(clock: Clock): number {\n\tlet value: unknown;\n\ttry {\n\t\tvalue = apply(clock.now, clock.target, []);\n\t} catch {\n\t\tthrow deliveryError(\"clock_invalid\", \"clock\");\n\t}\n\tconst ms = timeOf(value);\n\tif (!numberIsFinite(ms)) throw deliveryError(\"clock_invalid\", \"clock\");\n\treturn ms;\n}\n\ninterface Counters {\n\tclaimed: number;\n\tdelivered: number;\n\tretried: number;\n\tdeadLettered: number;\n\tcancelled: number;\n\treleased: number;\n\tleaseLost: number;\n\tabandoned: number;\n\thandedOff: number;\n}\n\n/**\n * Run one delivery cycle: claim up to `batchSize` pending intents under a\n * fenced lease and process each in turn, in the check order described at\n * the top of this file (and in the README, \"Delivery\"). A claimed record\n * whose `deliveryId`, `tenantId`, `spaceId` or lease cannot be read, or\n * that is leased to another owner, is left for lease expiry (`abandoned`);\n * one whose identity and lease can be read but whose body cannot is\n * dead-lettered as `intent_unreadable`.\n *\n * @throws {WebhookDeliveryConfigError} for a limit or cycle option that is not positive and finite (R4).\n * @throws {WebhookDeliveryError} `options_invalid` for a missing port or\n * option; `delivery_store_failed` or `delivery_store_timeout` when the claim\n * fails; `clock_invalid` for a failing clock.\n */\nexport async function runWebhookDeliveryCycle(options: WebhookDeliveryCycleOptions): Promise<WebhookDeliveryCycleResult> {\n\tconst config = readConfig(options);\n\tconst counters: Counters = { claimed: 0, delivered: 0, retried: 0, deadLettered: 0, cancelled: 0, released: 0, leaseLost: 0, abandoned: 0, handedOff: 0 };\n\tconst nowMs = readClock(config.clock);\n\tconst claimed = await boundedCall(nowMs, config.limits.portTimeoutMs, config.signal, (callOptions) => config.deliveries.claimDeliveryIntents({\n\t\tworkerId: config.workerId,\n\t\tleaseDurationMs: config.leaseDurationMs,\n\t\tlimit: config.batchSize,\n\t\tnow: new Date(nowMs),\n\t}, callOptions), () => readClock(config.clock));\n\tif (!claimed.ok) throw deliveryError(claimed.reason === \"timeout\" ? \"delivery_store_timeout\" : \"delivery_store_failed\", \"claimDeliveryIntents\");\n\tconst entries = readClaimedIntents(claimed.value);\n\tif (entries === undefined) throw deliveryError(\"delivery_store_failed\", \"claimDeliveryIntents\");\n\tcounters.claimed = entries.length;\n\tfor (const entry of entries) {\n\t\tif (config.signal !== undefined && signalAborted(config.signal)) break;\n\t\t// A record whose identity or lease cannot be read cannot be named by a\n\t\t// fenced write, and one leased to another owner is not this worker's.\n\t\tif (entry === undefined) {\n\t\t\tcounters.abandoned += 1;\n\t\t\tcontinue;\n\t\t}\n\t\tconst run = newRun(config, entry.header, entry.intent, counters);\n\t\tif (entry.header.lease.owner !== config.workerId) {\n\t\t\tfinish(run, \"abandoned\");\n\t\t\tcontinue;\n\t\t}\n\t\tif (entry.intent === undefined) {\n\t\t\tawait settle(run, { kind: \"dead_letter\", reason: \"intent_unreadable\" }, \"dead_lettered\", { diagnostic: \"intent_unreadable\" });\n\t\t\tcontinue;\n\t\t}\n\t\tawait processIntent(run, entry.intent);\n\t}\n\treturn freeze({ ...counters });\n}\n\n/** One claimed intent being processed. */\ninterface Run {\n\treadonly config: Config;\n\treadonly header: ClaimedIntentHeader;\n\treadonly intent: ClaimedIntent | undefined;\n\treadonly counters: Counters;\n\t/** The configuration version read at step 2, once read. */\n\tversion: number | undefined;\n\t/** The lease's expiry as this worker last set it (claim or renewal), on its own clock. */\n\tleaseExpiresAtMs: number;\n\thandedOff: boolean;\n\treported: boolean;\n}\n\nfunction newRun(config: Config, header: ClaimedIntentHeader, intent: ClaimedIntent | undefined, counters: Counters): Run {\n\treturn { config, header, intent, counters, version: undefined, leaseExpiresAtMs: intent === undefined ? NaN : intent.leaseExpiresAtMs, handedOff: false, reported: false };\n}\n\ntype CallFailure = \"threw\" | \"timeout\" | \"aborted\" | \"deadline\";\ntype RunOutcome<T> = BoundedOutcome<T> | { readonly ok: false; readonly reason: \"deadline\" };\n\n/**\n * A port call made before the handoff (R4). It is not made at all once the\n * intent's processing deadline has passed, and otherwise it is bounded by\n * the smaller of `portTimeoutMs` and the intent's remaining lifetime.\n */\nfunction intentCall<T>(run: Run, intent: ClaimedIntent, call: (options: WebhookCallOptions, nowMs: number) => Promise<T>): Promise<RunOutcome<T>> {\n\tconst nowMs = readClock(run.config.clock);\n\tconst remainingMs = intent.processingDeadlineMs - nowMs;\n\tif (!(remainingMs > 0)) return Promise.resolve({ ok: false, reason: \"deadline\" });\n\tconst timeoutMs = mathMin(remainingMs, run.config.limits.portTimeoutMs);\n\treturn boundedCall(nowMs, timeoutMs, run.config.signal, (options) => call(options, nowMs), () => readClock(run.config.clock));\n}\n\n/** A settlement or attempt write: bounded by `portTimeoutMs` alone, so an outcome can be recorded after the deadline. */\nfunction storeWrite<T>(run: Run, call: (options: WebhookCallOptions, nowMs: number) => Promise<T>): Promise<BoundedOutcome<T>> {\n\tconst nowMs = readClock(run.config.clock);\n\treturn boundedCall(nowMs, run.config.limits.portTimeoutMs, run.config.signal, (options) => call(options, nowMs), () => readClock(run.config.clock));\n}\n\n/**\n * Step 0: make sure one whole attempt fits in what is left of the lease,\n * renewing it when it does not. Returns `false` when the intent is done\n * for this cycle: the store refused the renewal (the lease is gone, and\n * nothing more is written) or the cycle's signal aborted. A renewal whose\n * outcome is unknown (it threw, timed out or answered unreadably) is not a\n * refusal: the intent goes ahead under the lease last known, and the\n * transport deadline's lease cap (4c) and the store's fence check bound it.\n * The store never extends a lease past the processing deadline; an intent\n * past it is dead-lettered by its first guard call.\n */\nasync function keepLease(run: Run, intent: ClaimedIntent): Promise<boolean> {\n\tconst { config } = run;\n\tconst { attemptTimeoutMs, portTimeoutMs } = config.limits;\n\tconst nowMs = readClock(config.clock);\n\tif (run.leaseExpiresAtMs - nowMs >= attemptTimeoutMs + ATTEMPT_PORT_CALLS * portTimeoutMs) return true;\n\tlet askedAtMs = nowMs;\n\tconst renewed = await storeWrite(run, (options, callNowMs) => {\n\t\taskedAtMs = callNowMs;\n\t\treturn config.deliveries.renewDeliveryIntentLease({\n\t\t\tdeliveryId: intent.deliveryId,\n\t\t\towner: intent.lease.owner,\n\t\t\tfence: intent.lease.fence,\n\t\t\tnow: new Date(callNowMs),\n\t\t\tleaseDurationMs: config.leaseDurationMs,\n\t\t}, options);\n\t});\n\tif (renewed.ok && renewed.value === true) {\n\t\t// The store's rule: never shorter than before, never past the processing deadline.\n\t\tconst untilMs = mathMin(askedAtMs + config.leaseDurationMs, intent.processingDeadlineMs);\n\t\tif (untilMs > run.leaseExpiresAtMs) run.leaseExpiresAtMs = untilMs;\n\t\treturn true;\n\t}\n\tif (renewed.ok && renewed.value === false) {\n\t\tfinish(run, \"lease_lost\", { diagnostic: \"lease_lost\" });\n\t\treturn false;\n\t}\n\tif (!renewed.ok && renewed.reason === \"aborted\") {\n\t\tfinish(run, \"abandoned\");\n\t\treturn false;\n\t}\n\treturn true;\n}\n\nasync function processIntent(run: Run, intent: ClaimedIntent): Promise<void> {\n\tconst { config } = run;\n\tconst attempt = intent.attemptCount + 1;\n\n\t// 0. Enough lease for one whole attempt, renewed if need be.\n\tif (!(await keepLease(run, intent))) return;\n\n\t// 1. The processing deadline persisted at creation (R4) is checked on every\n\t// claim by `intentCall`: no port call is made at or after it, and the first\n\t// refusal dead-letters the intent.\n\n\t// 2. Subscription state, scope and the configuration this attempt uses.\n\tconst first = await readState(run, intent);\n\tif (first === undefined) return;\n\tconst configuration = first.configuration;\n\trun.version = configuration.version;\n\n\t// 3a. Destination for that configuration.\n\tconst resolved = await intentCall(run, intent, (options) => config.resolver.resolve(configuration.destinationUrl, options));\n\tif (!resolved.ok) return portFailure(run, resolved.reason, \"resolver_unavailable\");\n\tconst resolution = readResolution(resolved.value);\n\tif (resolution === undefined) return release(run, intent, \"resolver_unavailable\");\n\tif (!resolution.ok) return spendUnsent(run, intent, { kind: resolution.code });\n\n\t// 3b. Sign this attempt with that configuration's secret reference (decision 7: per attempt, at send time).\n\tconst timestampSeconds = mathFloor(readClock(config.clock) / 1_000);\n\tconst signed = await intentCall(run, intent, (options) => config.signer.sign({\n\t\tscheme: configuration.signatureScheme,\n\t\tsecretRef: configuration.secretRef,\n\t\ttenantId: intent.tenantId,\n\t\tspaceId: intent.spaceId,\n\t\ttimestampSeconds,\n\t\trawBody: intent.body,\n\t}, options));\n\tif (!signed.ok && (signed.reason === \"deadline\" || signed.reason === \"aborted\")) return portFailure(run, signed.reason, \"signer_unavailable\");\n\tlet headers: Readonly<Record<string, string>> | undefined;\n\ttry {\n\t\t// A malformed signature is refused here rather than sent (headers.ts).\n\t\theaders = signed.ok\n\t\t\t? buildWebhookRequestHeaders({ signature: readSignature(signed.value)!, timestampSeconds, eventId: intent.eventId, deliveryId: intent.deliveryId, attempt })\n\t\t\t: undefined;\n\t} catch {\n\t\theaders = undefined;\n\t}\n\tif (headers === undefined) return spendUnsent(run, intent, { kind: \"signer_unavailable\" });\n\n\t// 4a. Guard: delivery authorization for this attempt (decision 4).\n\tconst authorized = await intentCall(run, intent, (options) => config.authorization.authorize({\n\t\tsubscriptionId: intent.subscriptionId,\n\t\ttenantId: intent.tenantId,\n\t\tspaceId: intent.spaceId,\n\t\teventId: intent.eventId,\n\t\tdeliveryId: intent.deliveryId,\n\t\tconfigurationVersion: configuration.version,\n\t\tattempt,\n\t}, options));\n\tif (!authorized.ok) return portFailure(run, authorized.reason, \"authorization_unavailable\");\n\tconst decision = normalizeWebhookDeliveryAuthorizationDecision(authorized.value);\n\tif (decision.decision === \"revoked\") return cancel(run, \"authorization_revoked\");\n\tif (decision.decision === \"unavailable\") return release(run, intent, \"authorization_unavailable\");\n\n\t// 4b. Guard: subscription state and configuration version, re-read (decision 3).\n\tconst second = await readState(run, intent);\n\tif (second === undefined) return;\n\tif (second.configuration.version !== configuration.version) return release(run, intent, \"configuration_conflict\");\n\n\t// 4c. The transport's deadline: the clock now plus `attemptTimeoutMs`, and\n\t// never later than the guard read's start plus `portTimeoutMs +\n\t// attemptTimeoutMs` (the old-secret retention bound, R6, holds even when a\n\t// continuation runs late), the processing deadline, or the lease's expiry\n\t// (as last claimed or renewed, step 0) less the answer's grace and the outcome and settlement writes, so a\n\t// request that answers in time can still be settled under the lease. (The\n\t// processing deadline itself is checked again by `intentCall` below.)\n\tconst { attemptTimeoutMs, portTimeoutMs } = config.limits;\n\tconst sendDeadlineMs = mathMin(\n\t\treadClock(config.clock) + attemptTimeoutMs,\n\t\tsecond.startedMs + portTimeoutMs + attemptTimeoutMs,\n\t\tintent.processingDeadlineMs,\n\t\trun.leaseExpiresAtMs - SETTLEMENT_WRITES * portTimeoutMs,\n\t);\n\n\t// 4d. Guard: the lease, checked and the attempt recorded in one atomic store step.\n\tconst begun = await intentCall(run, intent, (options, nowMs) => config.deliveries.beginAttempt({\n\t\towner: intent.lease.owner,\n\t\tfence: intent.lease.fence,\n\t\tnow: new Date(nowMs),\n\t\tattempt: {\n\t\t\tdeliveryId: intent.deliveryId,\n\t\t\tsubscriptionId: intent.subscriptionId,\n\t\t\teventId: intent.eventId,\n\t\t\tattempt,\n\t\t\tconfigurationVersion: configuration.version,\n\t\t\tstartedAt: isoOf(nowMs),\n\t\t},\n\t}, options));\n\tif (!begun.ok) return portFailure(run, begun.reason, \"delivery_store_unavailable\");\n\tconst answer = readBeginAnswer(begun.value);\n\tif (answer === undefined) return release(run, intent, \"delivery_store_unavailable\");\n\tif (!answer.begun) return finish(run, \"lease_lost\", { diagnostic: \"lease_lost\" });\n\t// The proof that this worker began the attempt: kept here only, never logged or reported.\n\tconst receipt = answer.receipt;\n\n\t// 5. The handoff: the irrevocable point. Nothing is awaited between the\n\t// begin above and this call except the clock read.\n\tconst request: WebhookTransportRequest = record({ destination: resolution.destination, method: \"POST\" as const, headers, body: intent.body });\n\tconst handoffMs = readClock(config.clock);\n\tconst timeoutMs = sendDeadlineMs - handoffMs;\n\tlet observation: WebhookDeliveryObservation;\n\tif (!(timeoutMs > 0)) {\n\t\t// Expired before the handoff: the transport would refuse it (R3), so it is not called.\n\t\treturn notSent(run, intent, receipt);\n\t}\n\trun.handedOff = true;\n\trun.counters.handedOff += 1;\n\tconst sent = await boundedCall(handoffMs, timeoutMs, config.signal, (options) => config.transport.send(request, options), () => readClock(config.clock), portTimeoutMs);\n\tif (!sent.ok && sent.reason === \"aborted\") return finish(run, \"abandoned\");\n\tif (!sent.ok) {\n\t\t// A throw or no answer by the deadline: the request may have been sent.\n\t\tobservation = { kind: sent.reason === \"timeout\" ? \"timeout\" : \"network_error\" };\n\t} else {\n\t\tconst result = readTransportResult(sent.value);\n\t\tif (result !== undefined && result.kind === \"not_sent\") return notSent(run, intent, receipt);\n\t\tobservation = result === undefined ? { kind: \"network_error\" } : result;\n\t}\n\n\t// 6. Classify, record the outcome (unfenced, with the receipt), settle\n\t// (fenced). The outcome is written first: if the settlement is refused\n\t// because the lease expired or was reclaimed, the attempt and what it\n\t// observed are still on record, and the intent is sent again after it is\n\t// reclaimed (at least once; receivers deduplicate by deliveryId).\n\tconst finishedMs = readClock(config.clock);\n\tlet classification: WebhookDeliveryClassification;\n\ttry {\n\t\tclassification = classifyWebhookDeliveryObservation(observation, { now: new Date(finishedMs), maxRetryAfterMs: config.limits.maxRetryAfterMs });\n\t} catch {\n\t\tclassification = record({ outcome: \"retryable\" as const, reason: \"network_error\" as const });\n\t}\n\tawait storeWrite(run, (options) => config.deliveries.finishAttempt({\n\t\ttenantId: intent.tenantId,\n\t\tspaceId: intent.spaceId,\n\t\tdeliveryId: intent.deliveryId,\n\t\tfence: intent.lease.fence,\n\t\treceipt,\n\t\tfinish: {\n\t\t\tfinishedAt: isoOf(finishedMs),\n\t\t\toutcome: classification.outcome,\n\t\t\treason: classification.reason,\n\t\t\t...(classification.httpStatus === undefined ? {} : { httpStatus: classification.httpStatus }),\n\t\t},\n\t}, options));\n\treturn applyClassification(run, intent, classification);\n}\n\n/**\n * Steps 2 and 4b: the subscription's state for this intent. Returns the\n * configuration when the subscription is active, in scope, and has been\n * active since the intent's eligibility revision or earlier; otherwise\n * settles the intent and returns `undefined`.\n */\nasync function readState(run: Run, intent: ClaimedIntent): Promise<{ readonly configuration: DispatchConfiguration; readonly startedMs: number } | undefined> {\n\tlet startedMs = Number.NaN;\n\tconst answer = await intentCall(run, intent, (options, nowMs) => {\n\t\tstartedMs = nowMs;\n\t\treturn run.config.subscriptions.readSubscription(\n\t\t\t{ tenantId: intent.tenantId, spaceId: intent.spaceId, subscriptionId: intent.subscriptionId },\n\t\t\toptions,\n\t\t);\n\t});\n\tif (!answer.ok) {\n\t\tawait portFailure(run, answer.reason, \"subscription_store_unavailable\");\n\t\treturn undefined;\n\t}\n\tconst state = readSubscriptionFor(answer.value, intent);\n\tif (state.kind === \"not_in_scope\") {\n\t\tawait deadLetter(run, \"subscription_not_in_scope\");\n\t\treturn undefined;\n\t}\n\tif (state.kind === \"unreadable\") {\n\t\tawait release(run, intent, \"subscription_store_unavailable\");\n\t\treturn undefined;\n\t}\n\tif (state.status === \"paused\") {\n\t\tawait cancel(run, \"subscription_paused\");\n\t\treturn undefined;\n\t}\n\tif (state.status === \"deleted\") {\n\t\tawait cancel(run, \"subscription_deleted\");\n\t\treturn undefined;\n\t}\n\t// Active, but since a revision later than the intent's: a pause ended the\n\t// intent's interval and a resume began a new one, which does not reopen\n\t// it (decision 3). This holds whatever the pause's `cancelPendingIntents`\n\t// did, and for intents fan-out wrote after it ran.\n\tif (intent.eligibilityRevision < state.statusSinceRevision) {\n\t\tawait cancel(run, \"subscription_paused\");\n\t\treturn undefined;\n\t}\n\treturn { configuration: state.configuration, startedMs };\n}\n\n/** A pre-handoff port call that did not answer: past the deadline, aborted, timed out or threw. */\nfunction portFailure(run: Run, reason: CallFailure, unavailable: WebhookDiagnosticCode): Promise<void> {\n\tif (reason === \"deadline\") return deadLetter(run, \"processing_deadline_exceeded\");\n\tif (reason === \"aborted\") {\n\t\tfinish(run, \"abandoned\");\n\t\treturn Promise.resolve();\n\t}\n\treturn release(run, run.intent!, reason === \"timeout\" ? \"port_timeout\" : unavailable);\n}\n\n/**\n * Decision 10 rows that end an attempt before the transport is reached (a\n * refused destination, a failed signer): logged as a complete attempt\n * under the lease, then settled. If the log write fails, nothing is spent:\n * the intent is released instead, so every spent attempt has a log entry.\n * A log write that timed out may still have committed; the release then\n * leaves an entry for an attempt that spent nothing (see the top of this\n * file).\n */\nasync function spendUnsent(run: Run, intent: ClaimedIntent, observation: WebhookDeliveryObservation): Promise<void> {\n\tconst nowMs = readClock(run.config.clock);\n\tconst classification = classifyWebhookDeliveryObservation(observation, { now: new Date(nowMs), maxRetryAfterMs: run.config.limits.maxRetryAfterMs });\n\tconst logged = await storeWrite(run, (options) => run.config.deliveries.appendAttempt({\n\t\towner: intent.lease.owner,\n\t\tfence: intent.lease.fence,\n\t\tnow: new Date(nowMs),\n\t\tattempt: {\n\t\t\tdeliveryId: intent.deliveryId,\n\t\t\tsubscriptionId: intent.subscriptionId,\n\t\t\teventId: intent.eventId,\n\t\t\tattempt: intent.attemptCount + 1,\n\t\t\tconfigurationVersion: run.version!,\n\t\t\tstartedAt: isoOf(nowMs),\n\t\t\tfinishedAt: isoOf(nowMs),\n\t\t\toutcome: classification.outcome,\n\t\t\treason: classification.reason,\n\t\t},\n\t}, options));\n\tif (logged.ok && logged.value === false) return finish(run, \"lease_lost\", { diagnostic: \"lease_lost\" });\n\tif (!logged.ok && logged.reason === \"aborted\") return finish(run, \"abandoned\");\n\tif (!logged.ok || logged.value !== true) return release(run, intent, logged.ok ? \"delivery_store_unavailable\" : logged.reason === \"timeout\" ? \"port_timeout\" : \"delivery_store_unavailable\");\n\treturn applyClassification(run, intent, classification);\n}\n\n/** The transport never started the request: record it `not_sent` and release, spending nothing. */\nasync function notSent(run: Run, intent: ClaimedIntent, receipt: string): Promise<void> {\n\tconst nowMs = readClock(run.config.clock);\n\tawait storeWrite(run, (options) => run.config.deliveries.finishAttempt({\n\t\ttenantId: intent.tenantId,\n\t\tspaceId: intent.spaceId,\n\t\tdeliveryId: intent.deliveryId,\n\t\tfence: intent.lease.fence,\n\t\treceipt,\n\t\tfinish: { finishedAt: isoOf(nowMs), outcome: \"not_sent\", reason: \"not_sent\" },\n\t}, options));\n\treturn release(run, intent, \"transport_not_sent\");\n}\n\n/** Settle an attempt's classification (decision 10). */\nfunction applyClassification(run: Run, intent: ClaimedIntent, classification: WebhookDeliveryClassification): Promise<void> {\n\tconst extra = { reason: classification.reason, httpStatus: classification.httpStatus, receiverActionLikely: classification.receiverActionLikely };\n\tswitch (classification.outcome) {\n\t\tcase \"delivered\":\n\t\t\treturn settle(run, { kind: \"delivered\" }, \"delivered\", extra);\n\t\tcase \"dead_letter\":\n\t\t\treturn settle(run, { kind: \"dead_letter\", reason: classification.reason }, \"dead_lettered\", extra);\n\t\tcase \"cancelled\":\n\t\t\treturn settle(run, { kind: \"cancelled\", reason: classification.reason }, \"cancelled\", extra);\n\t\tdefault:\n\t\t\treturn retryOrDeadLetter(run, intent, classification, extra);\n\t}\n}\n\n/** The delay before attempt `attempt + 1`, falling back to the longest configured delay when the port misbehaves. */\nfunction delayAfter(run: Run, attempt: number): number {\n\tlet delayMs: number;\n\ttry {\n\t\tdelayMs = apply(run.config.retryDelay, undefined, [attempt]) as number;\n\t} catch {\n\t\tdelayMs = NaN;\n\t}\n\tif (typeof delayMs !== \"number\" || !numberIsFinite(delayMs) || delayMs < 0) {\n\t\tconst delays = run.config.limits.deliveryRetryDelaysMs;\n\t\tdelayMs = delays[delays.length - 1]!;\n\t}\n\treturn delayMs;\n}\n\nfunction retryOrDeadLetter(\n\trun: Run,\n\tintent: ClaimedIntent,\n\tclassification: WebhookDeliveryClassification,\n\textra: Partial<WebhookDeliveryCycleEvent>,\n): Promise<void> {\n\tconst attempt = intent.attemptCount + 1;\n\tif (attempt >= run.config.limits.maxDeliveryAttempts) {\n\t\treturn settle(run, { kind: \"dead_letter\", reason: classification.reason }, \"dead_lettered\", extra);\n\t}\n\tconst nowMs = readClock(run.config.clock);\n\t// A 429's bounded Retry-After is honoured when it is longer than the schedule.\n\tconst delayMs = mathMax(delayAfter(run, attempt), classification.retryAfterMs ?? 0);\n\tconst availableAtMs = nowMs + delayMs;\n\tif (availableAtMs >= intent.processingDeadlineMs) return deadLetter(run, \"processing_deadline_exceeded\", extra);\n\treturn settle(run, { kind: \"retry\", availableAt: new Date(availableAtMs), outcome: \"retryable\", reason: classification.reason }, \"retry_scheduled\", extra);\n}\n\n/**\n * Return the intent to pending unsent, spending no attempt (decision 3).\n * It is available again after the delay the next attempt would wait; when\n * that falls at or past the processing deadline it is dead-lettered now,\n * because deferrals count toward that deadline (R4).\n */\nfunction release(run: Run, intent: ClaimedIntent, diagnostic: WebhookDiagnosticCode): Promise<void> {\n\tconst nowMs = readClock(run.config.clock);\n\tconst availableAtMs = nowMs + delayAfter(run, intent.attemptCount + 1);\n\tif (availableAtMs >= intent.processingDeadlineMs) return deadLetter(run, \"processing_deadline_exceeded\", { diagnostic });\n\treturn settle(run, { kind: \"release\", availableAt: new Date(availableAtMs), diagnostic }, \"released\", { diagnostic });\n}\n\nfunction cancel(run: Run, reason: \"authorization_revoked\" | \"subscription_paused\" | \"subscription_deleted\"): Promise<void> {\n\treturn settle(run, { kind: \"cancelled\", reason }, \"cancelled\", { reason });\n}\n\nfunction deadLetter(run: Run, diagnostic: WebhookDiagnosticCode, extra: Partial<WebhookDeliveryCycleEvent> = {}): Promise<void> {\n\treturn settle(run, { kind: \"dead_letter\", reason: diagnostic }, \"dead_lettered\", { ...extra, diagnostic });\n}\n\ntype Settlement = Parameters<WebhookDeliveryStore[\"settleDeliveryIntent\"]>[0][\"settlement\"];\n\n/**\n * The fenced settlement that ends this worker's hold on the intent. Only a\n * literal `true` counts as done and a literal `false` as a lost lease.\n * Anything else, a failed or late call included, is `abandoned`: the\n * settlement may or may not have applied, and nothing more is written\n * either way. If it did not apply, the intent is reclaimed after its lease\n * expires. The store clears the lease on every settlement, so at most one\n * settlement per claim applies.\n */\nasync function settle(\n\trun: Run,\n\tsettlement: Settlement,\n\tresult: Exclude<WebhookDeliveryCycleResultKind, \"lease_lost\" | \"abandoned\">,\n\textra: Partial<WebhookDeliveryCycleEvent>,\n): Promise<void> {\n\tconst outcome = await storeWrite(run, (options, nowMs) => run.config.deliveries.settleDeliveryIntent({\n\t\tdeliveryId: run.header.deliveryId,\n\t\towner: run.header.lease.owner,\n\t\tfence: run.header.lease.fence,\n\t\tnow: new Date(nowMs),\n\t\tsettlement,\n\t}, options));\n\tif (outcome.ok && outcome.value === true) return finish(run, result, extra);\n\tif (outcome.ok && outcome.value === false) return finish(run, \"lease_lost\", { ...extra, diagnostic: \"lease_lost\" });\n\treturn finish(run, \"abandoned\", extra);\n}\n\nconst COUNTER: Readonly<Record<WebhookDeliveryCycleResultKind, keyof Counters>> = freeze({\n\tdelivered: \"delivered\",\n\tretry_scheduled: \"retried\",\n\tdead_lettered: \"deadLettered\",\n\tcancelled: \"cancelled\",\n\treleased: \"released\",\n\tlease_lost: \"leaseLost\",\n\tabandoned: \"abandoned\",\n});\n\n/** Count the intent's result and report it once. A throwing observer is ignored. */\nfunction finish(run: Run, result: WebhookDeliveryCycleResultKind, extra: Partial<WebhookDeliveryCycleEvent> = {}): void {\n\tif (run.reported) return;\n\trun.reported = true;\n\trun.counters[COUNTER[result]] += 1;\n\tconst observe = run.config.observe;\n\tif (observe === undefined) return;\n\tconst intent = run.intent;\n\tconst event = record<WebhookDeliveryCycleEvent>({\n\t\tdeliveryId: run.header.deliveryId,\n\t\ttenantId: run.header.tenantId,\n\t\tspaceId: run.header.spaceId,\n\t\tsubscriptionId: intent?.subscriptionId,\n\t\teventId: intent?.eventId,\n\t\tattempt: intent === undefined ? undefined : intent.attemptCount + 1,\n\t\tconfigurationVersion: run.version,\n\t\tresult,\n\t\thandedOff: run.handedOff,\n\t\treason: extra.reason,\n\t\tdiagnostic: extra.diagnostic,\n\t\thttpStatus: extra.httpStatus,\n\t\treceiverActionLikely: extra.receiverActionLikely,\n\t});\n\ttry {\n\t\tapply(observe, undefined, [event]);\n\t} catch {\n\t\t// Telemetry never changes what the cycle did.\n\t}\n}\n","import { checkWebhookDestinationUrl } from \"./destination\";\nimport { guardOr } from \"./errors\";\nimport { freeze, isArray, isOneOf, matches, numberIsSafeInteger, snapshotJson, type Fail } from \"./snapshot\";\nimport { isWebhookIdentifier } from \"./store-input\";\n\n/*\n * Parameters of the governed actions (PR 9; README, \"Governed actions\").\n *\n * Each action's parameters are read here and nowhere else: by the action's\n * admission check (`admitSubmission`, src/governed-actions.ts), which Host\n * runs on every submission before it records anything, by the action's\n * schema (which Host runs before policies and the handler), and by the\n * handler itself (which reads again rather than trusting what it was handed).\n *\n * The reader copies the input with the package's plain-data snapshot (own\n * data properties only, accessors refused uncalled), refuses any key the\n * action does not declare, and checks every field. A refusal carries a fixed\n * code and the name of a declared field or `parameters`\n * (`webhookParameterRefusalMessage` keeps only those), not a caller value or\n * a caller key: Host writes a schema issue into the invocation's durable\n * `error` as `<path>: <message>`, and the path is always the root.\n *\n * Secret references (ADR 0018 decision 8, R7). Fields named `secretRef` take\n * a reference only. {@link isWebhookSecretReference} refuses the shapes key\n * material and ciphertext usually arrive in; it cannot tell an opaque\n * reference from random bytes of the same shape, so the actions also ask the\n * application's `secretReferences.verify` port, which must confirm that the\n * reference names a secret in the tenant's own secret store: at admission,\n * before Host persists the submission, and again before the handler writes.\n */\n\n/** The governed actions, by the name after the module namespace (`<namespace>.<name>`). */\nexport const WEBHOOK_DELIVERY_ACTION_NAMES = freeze([\n\t\"create_subscription\",\n\t\"update_subscription\",\n\t\"pause_subscription\",\n\t\"resume_subscription\",\n\t\"delete_subscription\",\n\t\"rotate_secret_staged\",\n\t\"rotate_secret_emergency\",\n\t\"requeue_delivery_intent\",\n\t\"requeue_fan_out_job\",\n\t\"enrich_fan_out_job_actor\",\n] as const);\n\n/** One governed action name. */\nexport type WebhookDeliveryActionName = (typeof WEBHOOK_DELIVERY_ACTION_NAMES)[number];\n\n/**\n * Why parameters were refused. `parameters_invalid`: not a plain-data\n * object, a field missing or malformed, or an id breaking the store\n * identifier rule. `unknown_parameter`: a key the action does not declare\n * (named in no message). `secret_ref_invalid`: a `secretRef` that is not a\n * secret reference. `destination_invalid`: a destination URL breaking the\n * URL rules (README, \"URL rules\"). `event_type_pattern_invalid`: a pattern\n * outside the pattern grammar. `update_ambiguous`: an update naming both or\n * neither of patterns and destination.\n */\nexport const WEBHOOK_ACTION_PARAMETER_CODES = freeze([\n\t\"parameters_invalid\",\n\t\"unknown_parameter\",\n\t\"secret_ref_invalid\",\n\t\"destination_invalid\",\n\t\"event_type_pattern_invalid\",\n\t\"update_ambiguous\",\n] as const);\n\n/** Why an action's parameters were refused. */\nexport type WebhookActionParameterCode = (typeof WEBHOOK_ACTION_PARAMETER_CODES)[number];\n\n/** `<namespace>.create_subscription` */\nexport interface WebhookCreateSubscriptionParameters {\n\treadonly subscriptionId: string;\n\treadonly eventTypePatterns: readonly string[];\n\treadonly destinationUrl: string;\n\t/** A secret reference, not key material or ciphertext (`isWebhookSecretReference`, then the verifier). */\n\treadonly secretRef: string;\n\t/** Only `v1` exists (decision 7); the default. */\n\treadonly signatureScheme?: \"v1\";\n}\n\n/** `<namespace>.update_subscription`: exactly one of the two changes per invocation. */\nexport type WebhookUpdateSubscriptionParameters =\n\t| { readonly subscriptionId: string; readonly eventTypePatterns: readonly string[]; readonly expectedRevision?: number }\n\t| { readonly subscriptionId: string; readonly destinationUrl: string; readonly expectedVersion?: number };\n\n/** `<namespace>.pause_subscription`, `resume_subscription` and `delete_subscription`. */\nexport interface WebhookSubscriptionTransitionParameters {\n\treadonly subscriptionId: string;\n\treadonly expectedRevision?: number;\n}\n\n/** `<namespace>.rotate_secret_staged` */\nexport interface WebhookStagedRotationParameters {\n\treadonly subscriptionId: string;\n\t/** The next secret's reference, not key material or ciphertext (`isWebhookSecretReference`, then the verifier). */\n\treadonly secretRef: string;\n\t/** The configuration version the operator read; the rotation applies only on it. */\n\treadonly expectedVersion: number;\n\t/** The operator's statement that the receiver already accepts the next secret (decision 8). */\n\treadonly receiverAcceptsNextSecret: true;\n}\n\n/** `<namespace>.rotate_secret_emergency` */\nexport interface WebhookEmergencyRotationParameters {\n\treadonly subscriptionId: string;\n\treadonly secretRef: string;\n\treadonly expectedVersion?: number;\n}\n\n/** `<namespace>.requeue_delivery_intent` */\nexport interface WebhookIntentRequeueParameters {\n\treadonly deliveryId: string;\n\t/** The intent's `fence` as the operator read it. */\n\treadonly expectedFence: number;\n}\n\n/** `<namespace>.requeue_fan_out_job` and `enrich_fan_out_job_actor`. */\nexport interface WebhookJobParameters {\n\treadonly eventId: string;\n\t/** The job's `fence` as the operator read it. */\n\treadonly expectedFence: number;\n}\n\n/** The parameters of each action, by name. */\nexport interface WebhookDeliveryActionParameters {\n\treadonly create_subscription: WebhookCreateSubscriptionParameters;\n\treadonly update_subscription: WebhookUpdateSubscriptionParameters;\n\treadonly pause_subscription: WebhookSubscriptionTransitionParameters;\n\treadonly resume_subscription: WebhookSubscriptionTransitionParameters;\n\treadonly delete_subscription: WebhookSubscriptionTransitionParameters;\n\treadonly rotate_secret_staged: WebhookStagedRotationParameters;\n\treadonly rotate_secret_emergency: WebhookEmergencyRotationParameters;\n\treadonly requeue_delivery_intent: WebhookIntentRequeueParameters;\n\treadonly requeue_fan_out_job: WebhookJobParameters;\n\treadonly enrich_fan_out_job_actor: WebhookJobParameters;\n}\n\n/** What reading one action's parameters found. */\nexport type WebhookActionParameterRead<N extends WebhookDeliveryActionName> =\n\t| { readonly ok: true; readonly value: WebhookDeliveryActionParameters[N] }\n\t| { readonly ok: false; readonly code: WebhookActionParameterCode; readonly field: string };\n\n// ---------------------------------------------------------------------------\n// Secret references and patterns\n// ---------------------------------------------------------------------------\n\n/** The longest secret reference accepted. */\nexport const WEBHOOK_SECRET_REF_MAX_LENGTH = 256;\n/** The longest run of characters between two separators (`:`, `/`, `@`, `#`) in a secret reference. */\nexport const WEBHOOK_SECRET_REF_MAX_SEGMENT = 64;\n\nconst SECRET_REF_SHAPE = /^[a-z][a-z0-9.-]{0,31}:[A-Za-z0-9._~:/@#-]+$/;\nconst SECRET_REF_LONG_SEGMENT = /[A-Za-z0-9._~-]{65,}/;\n\n/**\n * Whether `value` has the shape of a secret reference (ADR 0018 decision 8):\n * a lower-case scheme and `:` (`kms:`, `vault:`, `arn:`, `secret:` …), then\n * only `A–Z a–z 0–9 . _ ~ : / @ # -`, at most\n * {@link WEBHOOK_SECRET_REF_MAX_LENGTH} characters, with no run longer than\n * {@link WEBHOOK_SECRET_REF_MAX_SEGMENT} between separators.\n *\n * That refuses raw key bytes and their usual encodings: hex, base64 and\n * `whsec_…` values (no scheme), padded or standard base64 (`=`, `+`), PEM\n * armour and anything with whitespace or control characters, and long\n * encoded runs such as wrapped ciphertext. It cannot recognise key material\n * deliberately shaped like a reference (`x:` followed by 64 hex digits\n * passes), which is why the actions also require the application's\n * `secretReferences.verify` port to confirm the reference resolves in the\n * tenant's secret store.\n */\nexport function isWebhookSecretReference(value: unknown): value is string {\n\treturn typeof value === \"string\" && value.length <= WEBHOOK_SECRET_REF_MAX_LENGTH &&\n\t\tmatches(SECRET_REF_SHAPE, value) && !matches(SECRET_REF_LONG_SEGMENT, value);\n}\n\n/** The most patterns one subscription takes. */\nexport const WEBHOOK_MAX_EVENT_TYPE_PATTERNS = 64;\n\nconst PATTERN_SHAPE = /^(?:\\*|[A-Za-z0-9_:-]+(?:\\.[A-Za-z0-9_:-]+)*(?:\\.\\*)?)$/;\n\n/**\n * Whether `value` is an event type pattern the matcher understands: `*`,\n * `prefix.*`, or an exact type, built from `A–Z a–z 0–9 _ : -` segments\n * joined by `.`, at most 256 characters. A `*` anywhere else is refused,\n * since the matcher would treat it as a literal.\n */\nexport function isWebhookEventTypePattern(value: unknown): value is string {\n\treturn typeof value === \"string\" && value.length <= 256 && matches(PATTERN_SHAPE, value);\n}\n\n// ---------------------------------------------------------------------------\n// Reading\n// ---------------------------------------------------------------------------\n\ntype Read<T> = { readonly ok: true; readonly value: T } | { readonly ok: false; readonly code: WebhookActionParameterCode; readonly field: string };\n\n/**\n * Thrown inside a reader to stop it; `readWebhookActionParameters` catches\n * it. Recognized by its private field (`Refusal.is`), which only this class\n * can create and which a brand check reads without running any of the\n * value's code (no getter, no Proxy trap), so a caller's input that throws\n * a look-alike `{ refusal: true, code, … }` from a trap is not taken for\n * one. The class is not exported and keeps no registry (Boundary Guard G5).\n */\nclass Refusal {\n\treadonly #brand = true;\n\treadonly code: WebhookActionParameterCode;\n\treadonly field: string;\n\n\tconstructor(code: WebhookActionParameterCode, field: string) {\n\t\tthis.code = code;\n\t\tthis.field = field;\n\t\tfreeze(this);\n\t}\n\n\t/** Whether `value` was made by this class's constructor. Reads nothing of `value`. */\n\tstatic is(value: unknown): value is Refusal {\n\t\treturn value !== null && typeof value === \"object\" && #brand in value;\n\t}\n}\n\nconst objectKeys = Object.keys;\n\nfunction refuse(code: WebhookActionParameterCode, field: string): never {\n\tthrow new Refusal(code, field);\n}\n\nconst snapshotFail: Fail = () => refuse(\"parameters_invalid\", \"parameters\");\n\ntype Fields = { readonly [key: string]: unknown };\n\nconst ALLOWED_KEYS: { readonly [N in WebhookDeliveryActionName]: readonly string[] } = freeze({\n\tcreate_subscription: freeze([\"subscriptionId\", \"eventTypePatterns\", \"destinationUrl\", \"secretRef\", \"signatureScheme\"]),\n\tupdate_subscription: freeze([\"subscriptionId\", \"eventTypePatterns\", \"expectedRevision\", \"destinationUrl\", \"expectedVersion\"]),\n\tpause_subscription: freeze([\"subscriptionId\", \"expectedRevision\"]),\n\tresume_subscription: freeze([\"subscriptionId\", \"expectedRevision\"]),\n\tdelete_subscription: freeze([\"subscriptionId\", \"expectedRevision\"]),\n\trotate_secret_staged: freeze([\"subscriptionId\", \"secretRef\", \"expectedVersion\", \"receiverAcceptsNextSecret\"]),\n\trotate_secret_emergency: freeze([\"subscriptionId\", \"secretRef\", \"expectedVersion\"]),\n\trequeue_delivery_intent: freeze([\"deliveryId\", \"expectedFence\"]),\n\trequeue_fan_out_job: freeze([\"eventId\", \"expectedFence\"]),\n\tenrich_fan_out_job_actor: freeze([\"eventId\", \"expectedFence\"]),\n});\n\nfunction snapshotParameters(input: unknown): Fields {\n\tconst copy = snapshotJson(input, \"parameters\", snapshotFail);\n\tif (copy === null || typeof copy !== \"object\" || isArray(copy)) refuse(\"parameters_invalid\", \"parameters\");\n\treturn copy as Fields;\n}\n\nfunction idField(fields: Fields, key: string): string {\n\tconst value = fields[key];\n\tif (!isWebhookIdentifier(value)) refuse(\"parameters_invalid\", key);\n\treturn value;\n}\n\nfunction optionalWhole(fields: Fields, key: string, min: number): number | undefined {\n\tconst value = fields[key];\n\tif (value === undefined) return undefined;\n\tif (typeof value !== \"number\" || !numberIsSafeInteger(value) || value < min) refuse(\"parameters_invalid\", key);\n\treturn value;\n}\n\nfunction whole(fields: Fields, key: string, min: number): number {\n\tconst value = optionalWhole(fields, key, min);\n\tif (value === undefined) refuse(\"parameters_invalid\", key);\n\treturn value;\n}\n\nfunction secretRefField(fields: Fields): string {\n\tconst value = fields[\"secretRef\"];\n\tif (!isWebhookSecretReference(value)) refuse(\"secret_ref_invalid\", \"secretRef\");\n\treturn value;\n}\n\nfunction destinationField(fields: Fields): string {\n\tconst value = fields[\"destinationUrl\"];\n\tif (typeof value !== \"string\") refuse(\"destination_invalid\", \"destinationUrl\");\n\tconst check = guardOr(() => checkWebhookDestinationUrl(value), () => ({ ok: false as const, code: \"invalid_url\" as const }));\n\tif (!check.ok) refuse(\"destination_invalid\", \"destinationUrl\");\n\treturn value;\n}\n\nfunction patternsField(fields: Fields): readonly string[] {\n\tconst value = fields[\"eventTypePatterns\"];\n\tif (!isArray(value) || value.length === 0 || value.length > WEBHOOK_MAX_EVENT_TYPE_PATTERNS) refuse(\"event_type_pattern_invalid\", \"eventTypePatterns\");\n\tconst out: string[] = [];\n\tfor (let index = 0; index < value.length; index += 1) {\n\t\tconst pattern = value[index];\n\t\tif (!isWebhookEventTypePattern(pattern)) refuse(\"event_type_pattern_invalid\", \"eventTypePatterns\");\n\t\tout[index] = pattern;\n\t}\n\treturn freeze(out);\n}\n\n/** Refuse any key the action does not declare, without naming it. */\nfunction onlyKnownKeys(fields: Fields, name: WebhookDeliveryActionName): void {\n\tconst keys = objectKeys(fields);\n\tfor (let index = 0; index < keys.length; index += 1) {\n\t\tif (!isOneOf(ALLOWED_KEYS[name], keys[index])) refuse(\"unknown_parameter\", \"parameters\");\n\t}\n}\n\nfunction readFields(name: WebhookDeliveryActionName, fields: Fields): object {\n\tswitch (name) {\n\t\tcase \"create_subscription\": {\n\t\t\tconst scheme = fields[\"signatureScheme\"];\n\t\t\tif (scheme !== undefined && scheme !== \"v1\") refuse(\"parameters_invalid\", \"signatureScheme\");\n\t\t\treturn {\n\t\t\t\tsubscriptionId: idField(fields, \"subscriptionId\"),\n\t\t\t\teventTypePatterns: patternsField(fields),\n\t\t\t\tdestinationUrl: destinationField(fields),\n\t\t\t\tsecretRef: secretRefField(fields),\n\t\t\t\t...(scheme === undefined ? {} : { signatureScheme: \"v1\" }),\n\t\t\t};\n\t\t}\n\t\tcase \"update_subscription\": {\n\t\t\tconst patterns = fields[\"eventTypePatterns\"] !== undefined;\n\t\t\tconst destination = fields[\"destinationUrl\"] !== undefined;\n\t\t\tif (patterns === destination) refuse(\"update_ambiguous\", \"parameters\");\n\t\t\tconst subscriptionId = idField(fields, \"subscriptionId\");\n\t\t\tif (patterns) {\n\t\t\t\tif (fields[\"expectedVersion\"] !== undefined) refuse(\"parameters_invalid\", \"expectedVersion\");\n\t\t\t\tconst expectedRevision = optionalWhole(fields, \"expectedRevision\", 1);\n\t\t\t\treturn { subscriptionId, eventTypePatterns: patternsField(fields), ...(expectedRevision === undefined ? {} : { expectedRevision }) };\n\t\t\t}\n\t\t\tif (fields[\"expectedRevision\"] !== undefined) refuse(\"parameters_invalid\", \"expectedRevision\");\n\t\t\tconst expectedVersion = optionalWhole(fields, \"expectedVersion\", 1);\n\t\t\treturn { subscriptionId, destinationUrl: destinationField(fields), ...(expectedVersion === undefined ? {} : { expectedVersion }) };\n\t\t}\n\t\tcase \"pause_subscription\":\n\t\tcase \"resume_subscription\":\n\t\tcase \"delete_subscription\": {\n\t\t\tconst expectedRevision = optionalWhole(fields, \"expectedRevision\", 1);\n\t\t\treturn { subscriptionId: idField(fields, \"subscriptionId\"), ...(expectedRevision === undefined ? {} : { expectedRevision }) };\n\t\t}\n\t\tcase \"rotate_secret_staged\": {\n\t\t\tif (fields[\"receiverAcceptsNextSecret\"] !== true) refuse(\"parameters_invalid\", \"receiverAcceptsNextSecret\");\n\t\t\treturn {\n\t\t\t\tsubscriptionId: idField(fields, \"subscriptionId\"),\n\t\t\t\tsecretRef: secretRefField(fields),\n\t\t\t\texpectedVersion: whole(fields, \"expectedVersion\", 1),\n\t\t\t\treceiverAcceptsNextSecret: true,\n\t\t\t};\n\t\t}\n\t\tcase \"rotate_secret_emergency\": {\n\t\t\tconst expectedVersion = optionalWhole(fields, \"expectedVersion\", 1);\n\t\t\treturn { subscriptionId: idField(fields, \"subscriptionId\"), secretRef: secretRefField(fields), ...(expectedVersion === undefined ? {} : { expectedVersion }) };\n\t\t}\n\t\tcase \"requeue_delivery_intent\":\n\t\t\treturn { deliveryId: idField(fields, \"deliveryId\"), expectedFence: whole(fields, \"expectedFence\", 0) };\n\t\tcase \"requeue_fan_out_job\":\n\t\tcase \"enrich_fan_out_job_actor\":\n\t\t\treturn { eventId: idField(fields, \"eventId\"), expectedFence: whole(fields, \"expectedFence\", 0) };\n\t}\n}\n\n/** The refusal `code` and `field` with each held to its fixed set: a parameter code, and a declared field or `parameters`. */\nfunction fixedRefusal(code: unknown, field: unknown): { readonly ok: false; readonly code: WebhookActionParameterCode; readonly field: string } {\n\treturn freeze({\n\t\tok: false as const,\n\t\tcode: isOneOf(WEBHOOK_ACTION_PARAMETER_CODES, code) ? (code as WebhookActionParameterCode) : \"parameters_invalid\",\n\t\tfield: typeof field === \"string\" && isPackageField(field) ? field : \"parameters\",\n\t});\n}\n\nconst PARAMETERS_INVALID = fixedRefusal(\"parameters_invalid\", \"parameters\");\n\n/**\n * Read one action's parameters. Never throws: the only thrown value whose\n * properties are read is the package's own `Refusal` (recognized by\n * `Refusal.is`, which runs none of a value's code); anything else thrown\n * while the input is read (an accessor, a Proxy trap, a look-alike refusal)\n * is dropped unread and reported as `parameters_invalid`. The code and field\n * returned are each checked against their fixed set (`fixedRefusal`). Tests:\n * \"forged refusals: …\".\n */\nexport function readWebhookActionParameters<N extends WebhookDeliveryActionName>(name: N, input: unknown): WebhookActionParameterRead<N> {\n\ttry {\n\t\tconst fields = snapshotParameters(input);\n\t\tonlyKnownKeys(fields, name);\n\t\treturn freeze({ ok: true as const, value: freeze(readFields(name, fields)) as WebhookDeliveryActionParameters[N] });\n\t} catch (thrown) {\n\t\treturn Refusal.is(thrown) ? fixedRefusal(thrown.code, thrown.field) : PARAMETERS_INVALID;\n\t}\n}\n\n/** A field name the reader itself reports: one of the declared keys, or `parameters`. */\nfunction isPackageField(field: string): boolean {\n\tif (field === \"parameters\") return true;\n\tfor (const name of WEBHOOK_DELIVERY_ACTION_NAMES) if (isOneOf(ALLOWED_KEYS[name], field)) return true;\n\treturn false;\n}\n\n/** The fixed text of a refusal: `<code> (<package field>)`. Never a caller value or key. */\nexport function webhookParameterRefusalMessage(code: WebhookActionParameterCode, field: string): string {\n\treturn `${code} (${isPackageField(field) ? field : \"parameters\"})`;\n}\n\n// ---------------------------------------------------------------------------\n// Schemas\n// ---------------------------------------------------------------------------\n\n/** A Platform `SchemaValidator`, structurally, with the portable JSON Schema discovery reads. */\nexport interface WebhookActionSchema<T> {\n\tparse(input: unknown): T;\n\tsafeParse(input: unknown):\n\t\t| { success: true; data: T }\n\t\t| { success: false; error: { issues: { path: PropertyKey[]; message: string }[] } };\n\ttoJSONSchema(): object;\n}\n\nconst ID_SCHEMA = freeze({ type: \"string\", minLength: 1, maxLength: 256 });\nconst FENCE_SCHEMA = freeze({ type: \"integer\", minimum: 0 });\nconst REVISION_SCHEMA = freeze({ type: \"integer\", minimum: 1 });\nconst SECRET_REF_SCHEMA = freeze({\n\ttype: \"string\",\n\tmaxLength: WEBHOOK_SECRET_REF_MAX_LENGTH,\n\tpattern: \"^[a-z][a-z0-9.-]{0,31}:[A-Za-z0-9._~:/@#-]+$\",\n\tdescription: \"A secret reference resolved in the tenant's secret store, not key material or ciphertext. No run between separators may exceed 64 characters.\",\n});\nconst PATTERNS_SCHEMA = freeze({\n\ttype: \"array\",\n\tminItems: 1,\n\tmaxItems: WEBHOOK_MAX_EVENT_TYPE_PATTERNS,\n\titems: { type: \"string\", maxLength: 256, pattern: \"^(?:\\\\*|[A-Za-z0-9_:-]+(?:\\\\.[A-Za-z0-9_:-]+)*(?:\\\\.\\\\*)?)$\" },\n});\nconst URL_SCHEMA = freeze({ type: \"string\", maxLength: 2048, pattern: \"^https://\" });\n\nfunction objectSchema(properties: Record<string, object>, required: readonly string[]): object {\n\treturn { type: \"object\", properties, required: [...required], additionalProperties: false };\n}\n\nconst JSON_SCHEMAS: { readonly [N in WebhookDeliveryActionName]: () => object } = freeze({\n\tcreate_subscription: () => objectSchema(\n\t\t{ subscriptionId: ID_SCHEMA, eventTypePatterns: PATTERNS_SCHEMA, destinationUrl: URL_SCHEMA, secretRef: SECRET_REF_SCHEMA, signatureScheme: { type: \"string\", enum: [\"v1\"] } },\n\t\t[\"subscriptionId\", \"eventTypePatterns\", \"destinationUrl\", \"secretRef\"],\n\t),\n\tupdate_subscription: () => ({\n\t\t...objectSchema({ subscriptionId: ID_SCHEMA, eventTypePatterns: PATTERNS_SCHEMA, expectedRevision: REVISION_SCHEMA, destinationUrl: URL_SCHEMA, expectedVersion: REVISION_SCHEMA }, [\"subscriptionId\"]),\n\t\toneOf: [{ required: [\"eventTypePatterns\"] }, { required: [\"destinationUrl\"] }],\n\t}),\n\tpause_subscription: () => objectSchema({ subscriptionId: ID_SCHEMA, expectedRevision: REVISION_SCHEMA }, [\"subscriptionId\"]),\n\tresume_subscription: () => objectSchema({ subscriptionId: ID_SCHEMA, expectedRevision: REVISION_SCHEMA }, [\"subscriptionId\"]),\n\tdelete_subscription: () => objectSchema({ subscriptionId: ID_SCHEMA, expectedRevision: REVISION_SCHEMA }, [\"subscriptionId\"]),\n\trotate_secret_staged: () => objectSchema(\n\t\t{ subscriptionId: ID_SCHEMA, secretRef: SECRET_REF_SCHEMA, expectedVersion: REVISION_SCHEMA, receiverAcceptsNextSecret: { type: \"boolean\", const: true } },\n\t\t[\"subscriptionId\", \"secretRef\", \"expectedVersion\", \"receiverAcceptsNextSecret\"],\n\t),\n\trotate_secret_emergency: () => objectSchema({ subscriptionId: ID_SCHEMA, secretRef: SECRET_REF_SCHEMA, expectedVersion: REVISION_SCHEMA }, [\"subscriptionId\", \"secretRef\"]),\n\trequeue_delivery_intent: () => objectSchema({ deliveryId: ID_SCHEMA, expectedFence: FENCE_SCHEMA }, [\"deliveryId\", \"expectedFence\"]),\n\trequeue_fan_out_job: () => objectSchema({ eventId: ID_SCHEMA, expectedFence: FENCE_SCHEMA }, [\"eventId\", \"expectedFence\"]),\n\tenrich_fan_out_job_actor: () => objectSchema({ eventId: ID_SCHEMA, expectedFence: FENCE_SCHEMA }, [\"eventId\", \"expectedFence\"]),\n});\n\n/** A thrown `parse` failure: fixed text only. */\nclass WebhookActionParameterError extends Error {\n\tconstructor(message: string) {\n\t\tsuper(message);\n\t\tthis.name = \"WebhookActionParameterError\";\n\t}\n}\n\n/**\n * The schema of one action. `safeParse` reports a refusal as one issue at\n * the root path whose message is {@link webhookParameterRefusalMessage}, so\n * Host's durable `validation_failed` error holds package text only.\n */\nexport function webhookActionSchema<N extends WebhookDeliveryActionName>(name: N): WebhookActionSchema<WebhookDeliveryActionParameters[N]> {\n\tconst safeParse = (input: unknown) => {\n\t\tconst read = readWebhookActionParameters(name, input);\n\t\tif (read.ok) return { success: true as const, data: read.value };\n\t\treturn { success: false as const, error: { issues: [{ path: [] as PropertyKey[], message: webhookParameterRefusalMessage(read.code, read.field) }] } };\n\t};\n\treturn freeze({\n\t\tparse(input: unknown) {\n\t\t\tconst result = safeParse(input);\n\t\t\tif (result.success) return result.data;\n\t\t\tthrow new WebhookActionParameterError(result.error.issues[0]!.message);\n\t\t},\n\t\tsafeParse,\n\t\ttoJSONSchema: JSON_SCHEMAS[name],\n\t});\n}\n\n// ---------------------------------------------------------------------------\n// Namespaces and action ids\n// ---------------------------------------------------------------------------\n\nconst NAMESPACE_SHAPE = /^[a-z][a-z0-9-]{0,63}$/;\n\n/** The default module namespace. */\nexport const DEFAULT_WEBHOOK_DELIVERY_NAMESPACE = \"webhook-delivery\";\n\n/** Whether `value` is a module namespace this package accepts (Platform's rule, at most 64 characters). */\nexport function isWebhookDeliveryNamespace(value: unknown): value is string {\n\treturn typeof value === \"string\" && matches(NAMESPACE_SHAPE, value);\n}\n\n/** The action name of `actionId` when it is one of this namespace's governed actions. */\nexport function webhookActionNameOf(namespace: string, actionId: unknown): WebhookDeliveryActionName | undefined {\n\tif (typeof actionId !== \"string\" || actionId.length <= namespace.length + 1 || actionId[namespace.length] !== \".\") return undefined;\n\tif (actionId.slice(0, namespace.length) !== namespace) return undefined;\n\tconst name = actionId.slice(namespace.length + 1);\n\tfor (const candidate of WEBHOOK_DELIVERY_ACTION_NAMES) if (candidate === name) return candidate;\n\treturn undefined;\n}\n","import type {\n\tActionAdmission,\n\tActionAdmissionDecision,\n\tActionContext,\n\tActionDefinition,\n\tActionResult,\n\tFabricModule,\n\tPolicyContext,\n\tPolicyEvaluator,\n\tPolicyOutcome,\n} from \"@fabricorg/platform\";\n\nimport { WEBHOOK_DELIVERY_ACTION_EVENT_TYPES, type WebhookDeliveryActionEventType } from \"./action-events\";\nimport {\n\tDEFAULT_WEBHOOK_DELIVERY_NAMESPACE,\n\tisWebhookDeliveryNamespace,\n\treadWebhookActionParameters,\n\tWEBHOOK_DELIVERY_ACTION_NAMES,\n\twebhookActionNameOf,\n\twebhookActionSchema,\n\ttype WebhookDeliveryActionName,\n\ttype WebhookDeliveryActionParameters,\n} from \"./action-parameters\";\nimport { WEBHOOK_ACTION_REFUSAL_CODES, type WebhookActionRefusalCode } from \"./codes\";\nimport { governedActionError } from \"./errors\";\nimport { boundedCall, captureFanOutClock, readFanOutClock, type FanOutClock } from \"./fan-out-call\";\nimport { assertPositiveInteger, resolveWebhookDeliveryLimits, type WebhookDeliveryLimits } from \"./limits\";\nimport type {\n\tWebhookCallOptions,\n\tWebhookClock,\n\tWebhookDeliveryStore,\n\tWebhookDestinationResolver,\n\tWebhookScope,\n\tWebhookSubscriptionStore,\n\tWebhookSubscriptionWriter,\n} from \"./ports\";\nimport { apply, freeze, isOneOf, numberIsSafeInteger } from \"./snapshot\";\nimport { isoOf, isWebhookIdentifier } from \"./store-input\";\n\n/*\n * The governed operator actions (ADR 0018 decisions 5, 8 and 10;\n * Consequences; README, \"Governed actions\"). `createWebhookDeliveryModule()`\n * builds one `FabricModule` from the ports it is given at the composition\n * root; nothing is registered in module scope (decision 6, ADR 0008), so two\n * modules built in one process share nothing but this code.\n *\n * Every action:\n *\n * - declares `admitSubmission` (`admissionFor`), which Host (7.3.0 and\n * later) runs on every submission before it records anything: it reads\n * the parameters with the package reader and, for an action that takes a\n * `secretRef`, asks the application's `secretReferences.verify` with\n * Host's trusted tenant and space. A refused submission leaves no\n * invocation, idempotency key, event or error in Host's store (tests\n * \"secret material in a secretRef is refused at admission …\" and \"key\n * material shaped like a reference …\" in tests/governed-actions.test.ts);\n * - refuses to run (`admission_not_enforced`, `handlerFor`) unless Host\n * hands it `ActionContext.admittedAt`, so under a Host that skipped the\n * check, nothing is written;\n * - runs through Host's governed path: Host validates the parameters with\n * the action's schema, records the module policy's decision, runs the\n * handler and appends the declared event;\n * - acts only in Host's trusted tenant and space: parameters declare no\n * tenant or space (`ALLOWED_KEYS`, src/action-parameters.ts), and\n * `handlerFor` hands each handler `scopeOf(ctx)` as the only scope its\n * store calls use, so a subscription, job or intent of another scope is\n * `not_found` to the store and the action refuses (test \"every action\n * that names a subscription, intent or job refuses one from another tenant\n * or space …\");\n * - makes at most one write to the subscription store and at most one\n * compare-and-set to the delivery store (each handler in `HANDLERS`), so\n * the change is one atomic store step; pause, resume and delete add\n * `cancelPendingIntents` as a best-effort cleanup (`cleanUp`), which\n * dispatch does not depend on;\n * - fails with `webhook_action_refused:<code>` (`WEBHOOK_ACTION_REFUSAL_CODES`)\n * and nothing else in the error (`refused`), emits no event when it\n * refuses, and builds events from ids, numbers, patterns and timestamps\n * only (test \"no secret bytes, reference or URL reaches an event …\").\n *\n * The stores are not Host's store, so a store write and Host's event append\n * are not one transaction. If Host fails after the handler's write (its\n * event append, or a crash before it commits), the write stands without its\n * event; the invocation is left `failed` or `running` for an operator to\n * reconcile. Subscription and rotation actions are declared not idempotent,\n * so Host refuses to re-run an interrupted one (\"manual reconciliation is\n * required\"). The requeue and enrichment actions are idempotent: every\n * attempt of one invocation, one after another or overlapping, reports the\n * change some attempt of it committed, from that change's evidence, even\n * after the record it names was purged (`oncePerInvocation`; the stores\n * recognize the invocation in their compare-and-set's atomic step).\n */\n\n// ---------------------------------------------------------------------------\n// Public options and ports\n// ---------------------------------------------------------------------------\n\n/** What the module's operator policy asks the application about one invocation. */\nexport interface WebhookOperatorAuthorizationInput {\n\t/** `<namespace>.<action name>`. */\n\treadonly actionId: string;\n\treadonly action: WebhookDeliveryActionName;\n\treadonly tenantId: string;\n\treadonly spaceId: string;\n\treadonly actorId: string;\n\treadonly actorType: string;\n\t/** The ids the action names, copied from three id fields by `operatorPolicy`; no URL or secret reference. */\n\treadonly target: {\n\t\treadonly subscriptionId?: string;\n\t\treadonly deliveryId?: string;\n\t\treadonly eventId?: string;\n\t};\n}\n\n/**\n * The module policy's question (`<namespace>.operator_authorized.v1`). Only a\n * literal `true` passes; `false`, any other answer, a throw or a timeout\n * blocks the invocation. Deny by default: the module cannot be built\n * without it.\n */\nexport type WebhookOperatorAuthorization = (\n\tinput: WebhookOperatorAuthorizationInput,\n\toptions: WebhookCallOptions,\n) => boolean | Promise<boolean>;\n\n/**\n * Confirms that a secret reference names a secret of this tenant in the\n * application's secret store (decision 8): at admission, before Host records\n * the submission, and again before the action writes it. Only a literal\n * `\"valid\"` passes. It must not return or log the secret, and it should honour\n * `options.signal`, which Host aborts at its admission deadline.\n */\nexport interface WebhookSecretReferenceVerifier {\n\tverify(input: WebhookScope & { readonly secretRef: string }, options: WebhookCallOptions): Promise<\"valid\" | \"invalid\">;\n}\n\n/**\n * What the application's actor reader found on the canonical event\n * (decision 5). `withheld`: the application's own actor-disclosure rule for\n * this event (the same rule as Host's `includeActor` hook) excludes the\n * actor, so enrichment must not add it. `not_found`: no such event in this\n * tenant and space.\n */\nexport type WebhookEventActorReading =\n\t| { readonly state: \"found\"; readonly actorId: string; readonly actorType: string }\n\t| { readonly state: \"withheld\" }\n\t| { readonly state: \"not_found\" };\n\n/** Reads the actor of the canonical event for a legacy job's tenant, space and `eventId` (decision 5). */\nexport interface WebhookEventActorReader {\n\treadEventActor(\n\t\tinput: WebhookScope & {\n\t\t\treadonly eventId: string;\n\t\t\treadonly eventType: string;\n\t\t\treadonly payloadClassification: string;\n\t\t},\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookEventActorReading>;\n}\n\n/** Options for {@link createWebhookDeliveryModule}. */\nexport interface WebhookDeliveryModuleOptions {\n\t/** The module namespace; actions are `<namespace>.<name>`. Default `webhook-delivery`. */\n\treadonly namespace?: string;\n\treadonly subscriptions: WebhookSubscriptionStore & WebhookSubscriptionWriter;\n\treadonly deliveries: WebhookDeliveryStore;\n\t/** Re-validates a destination at configuration change and at intent requeue (decision 6). */\n\treadonly resolver: WebhookDestinationResolver;\n\treadonly secretReferences: WebhookSecretReferenceVerifier;\n\treadonly actorReader: WebhookEventActorReader;\n\treadonly authorizeOperatorAction: WebhookOperatorAuthorization;\n\treadonly clock: WebhookClock;\n\t/** `portTimeoutMs` bounds every port call; `fanOutDeadlineMs` and `deliveryDeadlineMs` set requeued deadlines; `attemptTimeoutMs` enters the staged rotation's retention. */\n\treadonly limits?: Partial<WebhookDeliveryLimits>;\n\t/** The receivers' signature timestamp tolerance, for a staged rotation's `previousSecretRetainUntil`. Default 300 000 (R6). */\n\treadonly verifierToleranceMs?: number;\n}\n\n/** The module policy's id for a namespace. */\nexport function webhookOperatorPolicyId(namespace: string = DEFAULT_WEBHOOK_DELIVERY_NAMESPACE): `${string}.v${number}` {\n\treturn `${namespace}.operator_authorized.v1`;\n}\n\n// ---------------------------------------------------------------------------\n// Internals\n// ---------------------------------------------------------------------------\n\ninterface Deps {\n\treadonly namespace: string;\n\treadonly subscriptions: WebhookSubscriptionStore & WebhookSubscriptionWriter;\n\treadonly deliveries: WebhookDeliveryStore;\n\treadonly resolver: WebhookDestinationResolver;\n\treadonly secretReferences: WebhookSecretReferenceVerifier;\n\treadonly actorReader: WebhookEventActorReader;\n\treadonly authorize: WebhookOperatorAuthorization;\n\treadonly clock: FanOutClock;\n\treadonly limits: WebhookDeliveryLimits;\n\treadonly verifierToleranceMs: number;\n}\n\nconst SUBSCRIPTION = \"WebhookSubscription\";\nconst INTENT = \"WebhookDeliveryIntent\";\nconst JOB = \"WebhookFanOutJob\";\n\n/** A refusal: the handler's result and Host's durable error. */\nfunction refused(code: WebhookActionRefusalCode): ActionResult {\n\treturn { success: false, error: `webhook_action_refused:${code}` };\n}\n\n/** A success with its one event (Host's default `_events` result field). */\nfunction emitted(eventType: WebhookDeliveryActionEventType, subjectType: string, subjectId: string, payload: Record<string, unknown>): ActionResult {\n\treturn {\n\t\tsuccess: true,\n\t\tdata: { ...payload, _events: [{ eventType, eventSchemaVersion: 1, subjectType, subjectId, payload }] },\n\t};\n}\n\n/**\n * A thrown marker that ends a handler with a refusal; `handlerFor`'s catch\n * turns it into the result. Recognized by its private field (`Stop.is`),\n * which only this class can create and which a brand check reads without\n * running any of the value's code, so a port answer that throws a\n * look-alike `{ stop: … }` (from an iterator or a Proxy trap) is not taken\n * for one. Not exported; keeps no registry (Boundary Guard G5).\n */\nclass Stop {\n\treadonly #brand = true;\n\treadonly code: WebhookActionRefusalCode;\n\n\tconstructor(code: WebhookActionRefusalCode) {\n\t\tthis.code = code;\n\t\tfreeze(this);\n\t}\n\n\t/** Whether `value` was made by this class's constructor. Reads nothing of `value`. */\n\tstatic is(value: unknown): value is Stop {\n\t\treturn value !== null && typeof value === \"object\" && #brand in value;\n\t}\n}\n\nfunction stop(code: WebhookActionRefusalCode): never {\n\tthrow new Stop(code);\n}\n\nconst getOwnPropertyDescriptor = Reflect.getOwnPropertyDescriptor;\n\n/** An own data property of a port's answer, or `undefined`; a getter is not called, and a throwing Proxy trap reads as `undefined`. */\nfunction prop(value: unknown, key: string): unknown {\n\tif (value === null || typeof value !== \"object\") return undefined;\n\ttry {\n\t\tconst descriptor = getOwnPropertyDescriptor(value, key);\n\t\treturn descriptor !== undefined && \"value\" in descriptor ? descriptor.value : undefined;\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\nfunction whole(value: unknown): number | undefined {\n\treturn typeof value === \"number\" && numberIsSafeInteger(value) && value >= 0 ? value : undefined;\n}\n\nfunction nowMs(deps: Deps): number {\n\ttry {\n\t\treturn readFanOutClock(deps.clock);\n\t} catch {\n\t\treturn stop(\"action_failed\");\n\t}\n}\n\n/**\n * One port call, bounded by `portTimeoutMs` (R4) and aborted with `parent`.\n * `undefined` when it threw, timed out or was aborted; the thrown value is\n * never read.\n */\nasync function port<T>(deps: Deps, run: (options: WebhookCallOptions) => Promise<T>, parent?: AbortSignal): Promise<{ readonly value: T } | undefined> {\n\tconst outcome = await boundedCall(nowMs(deps), deps.limits.portTimeoutMs, parent, run, () => readFanOutClock(deps.clock));\n\treturn outcome.ok ? { value: outcome.value } : undefined;\n}\n\n/**\n * Host's trusted scope for the invocation. Every store call an action makes\n * is given this scope and no other: no action parameter names a tenant or a\n * space (`ALLOWED_KEYS` in src/action-parameters.ts refuses the keys).\n */\nfunction scopeOf(ctx: ActionContext<unknown>): WebhookScope {\n\tconst tenantId = prop(ctx, \"tenantId\");\n\tconst spaceId = prop(ctx, \"spaceId\");\n\tif (!isWebhookIdentifier(tenantId) || !isWebhookIdentifier(spaceId)) stop(\"scope_invalid\");\n\treturn freeze({ tenantId, spaceId });\n}\n\nfunction actorOf(ctx: ActionContext<unknown>): string {\n\tconst actorId = prop(ctx, \"actorId\");\n\tif (!isWebhookIdentifier(actorId)) stop(\"actor_invalid\");\n\treturn actorId;\n}\n\nfunction invocationOf(ctx: ActionContext<unknown>): string | undefined {\n\tconst id = prop(ctx, \"actionInvocationId\");\n\treturn isWebhookIdentifier(id) ? id : undefined;\n}\n\ninterface SubscriptionRead {\n\treadonly status: string;\n\t/** The revision the current status began at (`WebhookSubscriptionSnapshot.statusSinceRevision`). */\n\treadonly statusSinceRevision: number;\n\treadonly version: number;\n\treadonly destinationUrl: string;\n\treadonly signatureScheme: \"v1\";\n\treadonly secretRef: string;\n}\n\n/** The subscription's current status and configuration in `scope`; refuses when absent or unreadable. */\nasync function currentSubscription(deps: Deps, scope: WebhookScope, subscriptionId: string): Promise<SubscriptionRead> {\n\tconst answer = await port(deps, (options) => deps.subscriptions.readSubscription({ ...scope, subscriptionId }, options));\n\tif (answer === undefined) return stop(\"store_unavailable\");\n\tif (answer.value === null) return stop(\"subscription_not_found\");\n\tconst configuration = prop(answer.value, \"configuration\");\n\tconst read = {\n\t\tstatus: prop(answer.value, \"status\"),\n\t\tstatusSinceRevision: whole(prop(answer.value, \"statusSinceRevision\")),\n\t\tversion: whole(prop(configuration, \"version\")),\n\t\tdestinationUrl: prop(configuration, \"destinationUrl\"),\n\t\tsignatureScheme: prop(configuration, \"signatureScheme\"),\n\t\tsecretRef: prop(configuration, \"secretRef\"),\n\t};\n\t// The answer must be the subscription asked for, in this scope.\n\tif (prop(answer.value, \"subscriptionId\") !== subscriptionId || prop(answer.value, \"tenantId\") !== scope.tenantId || prop(answer.value, \"spaceId\") !== scope.spaceId) {\n\t\treturn stop(\"subscription_not_found\");\n\t}\n\tif (!isOneOf([\"active\", \"paused\", \"deleted\"], read.status) || read.statusSinceRevision === undefined || read.statusSinceRevision < 1 ||\n\t\tread.version === undefined || typeof read.destinationUrl !== \"string\" ||\n\t\tread.signatureScheme !== \"v1\" || typeof read.secretRef !== \"string\") {\n\t\treturn stop(\"store_unavailable\");\n\t}\n\treturn read as SubscriptionRead;\n}\n\n/** Ask the application's secret store whether `secretRef` names one of this tenant's secrets. */\nasync function verifySecretRef(deps: Deps, scope: WebhookScope, secretRef: string, parent?: AbortSignal): Promise<void> {\n\tconst answer = await port(deps, (options) => deps.secretReferences.verify({ ...scope, secretRef }, options), parent);\n\tif (answer === undefined) stop(\"secret_ref_unverified\");\n\tif (answer.value === \"invalid\") stop(\"secret_ref_invalid\");\n\tif (answer.value !== \"valid\") stop(\"secret_ref_unverified\");\n}\n\n/** Re-validate a destination with the resolver (decision 6): only a vetted answer passes. */\nasync function vetDestination(deps: Deps, url: string): Promise<void> {\n\tconst answer = await port(deps, (options) => deps.resolver.resolve(url, options));\n\tif (answer === undefined) stop(\"destination_unresolved\");\n\tif (prop(answer.value, \"ok\") === true) return;\n\tconst code = prop(answer.value, \"code\");\n\tstop(code === \"invalid_url\" || code === \"private_address\" ? \"destination_refused\" : \"destination_unresolved\");\n}\n\nconst SUBSCRIPTION_REFUSALS: { readonly [refusal: string]: WebhookActionRefusalCode } = freeze({\n\tnot_found: \"subscription_not_found\",\n\talready_exists: \"subscription_exists\",\n\tdeleted: \"subscription_deleted\",\n\tinvalid_transition: \"invalid_transition\",\n\trevision_conflict: \"revision_conflict\",\n\tversion_conflict: \"version_conflict\",\n});\n\nconst DELIVERY_REFUSALS: { readonly [refusal: string]: WebhookActionRefusalCode } = freeze({\n\tnot_found: \"not_found\",\n\tstale: \"stale\",\n\tnot_dead_letter: \"not_dead_letter\",\n\tpast_horizon: \"past_replay_horizon\",\n\tnot_enrichable: \"not_enrichable\",\n\tactor_present: \"actor_present\",\n\tactor_suppressed: \"actor_suppressed\",\n});\n\nfunction mapRefusal(table: { readonly [refusal: string]: WebhookActionRefusalCode }, refusal: unknown): WebhookActionRefusalCode {\n\treturn typeof refusal === \"string\" && isOneOf(Object.keys(table), refusal) ? table[refusal]! : \"store_outcome_unknown\";\n}\n\n/**\n * The answer of a store write. `undefined` (the write threw, timed out or\n * answered something unreadable) is `store_outcome_unknown`: it may have\n * applied, so nothing follows it.\n */\nfunction applied(answer: { readonly value: unknown } | undefined, refusals: { readonly [refusal: string]: WebhookActionRefusalCode }): unknown {\n\tif (answer === undefined) return stop(\"store_outcome_unknown\");\n\tconst flag = prop(answer.value, \"applied\");\n\tif (flag === true) return answer.value;\n\tif (flag === false) return stop(mapRefusal(refusals, prop(answer.value, \"refusal\")));\n\treturn stop(\"store_outcome_unknown\");\n}\n\n/** The record an idempotent action names, as its evidence names it. */\ntype EvidenceTarget =\n\t| { readonly target: \"delivery_intent\"; readonly deliveryId: string }\n\t| { readonly target: \"fan_out_job\" | \"fan_out_job_actor\"; readonly eventId: string };\n\n/**\n * Evidence this invocation appended for `target`, by any attempt of it, or\n * `undefined` (always, without an invocation id). Read with the invocation\n * id alone, so it is found whether or not the record it names still exists.\n */\nasync function priorEvidence(deps: Deps, scope: WebhookScope, invocationId: string | undefined, target: EvidenceTarget): Promise<unknown> {\n\tif (invocationId === undefined) return undefined;\n\tconst answer = await port(deps, (options) => deps.deliveries.listInvocationRequeueEvidence({ ...scope, actionInvocationId: invocationId }, options));\n\tif (answer === undefined) return stop(\"store_unavailable\");\n\tconst list = answer.value as unknown;\n\tif (!Array.isArray(list)) return stop(\"store_unavailable\");\n\tfor (const evidence of list) {\n\t\tif (prop(evidence, \"actionInvocationId\") !== invocationId || prop(evidence, \"target\") !== target.target) continue;\n\t\tif (prop(evidence, \"tenantId\") !== scope.tenantId || prop(evidence, \"spaceId\") !== scope.spaceId) continue;\n\t\tif (target.target === \"delivery_intent\" ? prop(evidence, \"deliveryId\") === target.deliveryId : prop(evidence, \"eventId\") === target.eventId) return evidence;\n\t}\n\treturn undefined;\n}\n\n/**\n * One attempt of an idempotent action (requeue, enrichment). Host may run\n * several attempts of one invocation, one after another or overlapping (a\n * worker whose lease expired is still running when recovery starts\n * another). An attempt reports the invocation's change when that change's\n * evidence is visible to one of its evidence reads (steps 1 and 3) or to its\n * store's atomic step (step 2); only the evidence decides it. Not covered:\n * an attempt that ended in a refusal while an older attempt was between its\n * checks and its compare-and-set, and the older attempt commits later. That\n * change stands while Host has recorded the refusal; the evidence names the\n * invocation for an operator to reconcile (README, \"Atomicity and re-runs\").\n * The steps:\n *\n * 1. Before anything about the record is read, the invocation's evidence:\n * the record may since have been claimed, delivered or purged, and the\n * subscription paused or deleted.\n * 2. Otherwise `apply` runs the action's checks and the store's\n * compare-and-set. The store answers a request of an invocation that\n * already applied with that evidence (`replayed`), in the same atomic step\n * as the compare (src/ports.ts, \"Re-runs of one invocation\").\n * 3. An attempt that `apply` ends with a refusal reads the evidence once\n * more: another attempt that committed after step 1 is why a check before\n * the compare-and-set saw the record or subscription changed. If that read\n * fails, the refusal stands.\n *\n * Returns the evidence of the change the invocation made.\n */\nasync function oncePerInvocation(\n\tdeps: Deps,\n\tscope: WebhookScope,\n\tinvocationId: string | undefined,\n\ttarget: EvidenceTarget,\n\tapply: () => Promise<unknown>,\n): Promise<unknown> {\n\tconst prior = await priorEvidence(deps, scope, invocationId, target);\n\tif (prior !== undefined) return prior;\n\ttry {\n\t\treturn await apply();\n\t} catch (thrown) {\n\t\tif (invocationId === undefined) throw thrown;\n\t\tlet committed: unknown;\n\t\ttry {\n\t\t\tcommitted = await priorEvidence(deps, scope, invocationId, target);\n\t\t} catch {\n\t\t\tthrow thrown;\n\t\t}\n\t\tif (committed !== undefined) return committed;\n\t\tthrow thrown;\n\t}\n}\n\n// ---------------------------------------------------------------------------\n// Handlers\n// ---------------------------------------------------------------------------\n\ntype Handler<N extends WebhookDeliveryActionName> = (\n\tdeps: Deps,\n\tctx: ActionContext<unknown>,\n\tscope: WebhookScope,\n\tparams: WebhookDeliveryActionParameters[N],\n) => Promise<ActionResult>;\n\ntype Handlers = { readonly [N in WebhookDeliveryActionName]: Handler<N> };\n\nfunction subscriptionEvent(\n\teventType: WebhookDeliveryActionEventType,\n\tsubscriptionId: string,\n\tpayload: Record<string, unknown>,\n): ActionResult {\n\treturn emitted(eventType, SUBSCRIPTION, subscriptionId, { subscriptionId, ...payload });\n}\n\nfunction revisionOf(result: unknown): number {\n\tconst revision = whole(prop(prop(result, \"revision\"), \"revision\"));\n\treturn revision ?? stop(\"store_outcome_unknown\");\n}\n\nfunction versionOf(result: unknown): number {\n\tconst version = whole(prop(prop(result, \"configuration\"), \"version\"));\n\treturn version ?? stop(\"store_outcome_unknown\");\n}\n\n/** Pause and delete: the transition, then `cancelPendingIntents` for the intents of the revisions it ended. */\nasync function stopSubscription(\n\tdeps: Deps,\n\tscope: WebhookScope,\n\tparams: WebhookDeliveryActionParameters[\"pause_subscription\"],\n\tkind: \"pause\" | \"delete\",\n): Promise<ActionResult> {\n\tconst write = kind === \"pause\"\n\t\t? (options: WebhookCallOptions) => deps.subscriptions.pauseSubscription({ ...scope, ...params }, options)\n\t\t: (options: WebhookCallOptions) => deps.subscriptions.deleteSubscription({ ...scope, ...params }, options);\n\tconst revision = revisionOf(applied(await port(deps, write), SUBSCRIPTION_REFUSALS));\n\tconst cancelledPendingIntents = await cleanUp(deps, scope, params.subscriptionId, kind === \"pause\" ? \"subscription_paused\" : \"subscription_deleted\", revision);\n\treturn subscriptionEvent(kind === \"pause\" ? \"WebhookSubscriptionPaused\" : \"WebhookSubscriptionDeleted\", params.subscriptionId, {\n\t\trevision,\n\t\tcancelledPendingIntents,\n\t});\n}\n\n/**\n * Pause, resume and delete: after the revision is written, cancel the\n * subscription's pending intents bound to revisions before it. A cleanup,\n * not the guarantee: the count, or `null` when the call threw, timed out or\n * answered something unreadable, and the action stands either way. What\n * stops those intents is dispatch (src/delivery-cycle.ts, `readState`):\n * it cancels an intent while the subscription is paused or deleted, and\n * while it is active since a revision later than the intent's (README,\n * \"Pause and resume are enforced at dispatch\"). Passing the revision just\n * written leaves intents of any later revision alone.\n */\nasync function cleanUp(\n\tdeps: Deps,\n\tscope: WebhookScope,\n\tsubscriptionId: string,\n\treason: \"subscription_paused\" | \"subscription_deleted\",\n\tbeforeRevision: number,\n): Promise<number | null> {\n\tconst cancelled = await port(deps, (options) => deps.deliveries.cancelPendingIntents({\n\t\t...scope,\n\t\tsubscriptionId,\n\t\treason,\n\t\tbeforeRevision,\n\t\tnow: new Date(nowMs(deps)),\n\t}, options));\n\treturn (cancelled === undefined ? undefined : whole(cancelled.value)) ?? null;\n}\n\n/** Staged and emergency rotation: a new configuration version with the same destination and scheme, and the next secret reference. */\nasync function rotate(\n\tdeps: Deps,\n\tscope: WebhookScope,\n\tparams: { readonly subscriptionId: string; readonly secretRef: string; readonly expectedVersion?: number },\n\tmode: \"staged\" | \"emergency\",\n): Promise<ActionResult> {\n\tconst current = await currentSubscription(deps, scope, params.subscriptionId);\n\tif (current.status === \"deleted\") stop(\"subscription_deleted\");\n\tif (params.expectedVersion !== undefined && params.expectedVersion !== current.version) stop(\"version_conflict\");\n\tif (params.secretRef === current.secretRef) stop(\"secret_ref_unchanged\");\n\tawait verifySecretRef(deps, scope, params.secretRef);\n\tconst result = applied(await port(deps, (options) => deps.subscriptions.replaceDeliveryConfiguration({\n\t\t...scope,\n\t\tsubscriptionId: params.subscriptionId,\n\t\tconfiguration: { destinationUrl: current.destinationUrl, signatureScheme: current.signatureScheme, secretRef: params.secretRef },\n\t\t// The version read above, so a concurrent change between the read and\n\t\t// the write is refused by the store's compare-and-set.\n\t\texpectedVersion: params.expectedVersion ?? current.version,\n\t}, options)), SUBSCRIPTION_REFUSALS);\n\tconst configurationVersion = versionOf(result);\n\tconst activatedAtMs = nowMs(deps);\n\t// R6 and README, \"Old-secret retention\": a request signed with the old\n\t// secret reaches a receiver at most portTimeoutMs + attemptTimeoutMs after\n\t// activation (worker's clock), plus the receiver's timestamp tolerance.\n\tconst retainMs = deps.limits.portTimeoutMs + deps.limits.attemptTimeoutMs + deps.verifierToleranceMs;\n\treturn subscriptionEvent(\"WebhookSecretRotated\", params.subscriptionId, {\n\t\tmode,\n\t\tconfigurationVersion,\n\t\tactivatedAt: isoOf(activatedAtMs),\n\t\tpreviousSecretRetainUntil: mode === \"staged\" ? isoOf(activatedAtMs + retainMs) : null,\n\t});\n}\n\nconst HANDLERS: Handlers = freeze({\n\tasync create_subscription(deps, _ctx, scope, params) {\n\t\tawait verifySecretRef(deps, scope, params.secretRef);\n\t\tawait vetDestination(deps, params.destinationUrl);\n\t\tconst result = applied(await port(deps, (options) => deps.subscriptions.createSubscription({\n\t\t\t...scope,\n\t\t\tsubscriptionId: params.subscriptionId,\n\t\t\teventTypePatterns: params.eventTypePatterns,\n\t\t\tconfiguration: { destinationUrl: params.destinationUrl, signatureScheme: \"v1\", secretRef: params.secretRef },\n\t\t}, options)), SUBSCRIPTION_REFUSALS);\n\t\treturn subscriptionEvent(\"WebhookSubscriptionCreated\", params.subscriptionId, {\n\t\t\trevision: revisionOf(result),\n\t\t\tconfigurationVersion: versionOf(result),\n\t\t\teventTypePatterns: [...params.eventTypePatterns],\n\t\t});\n\t},\n\n\tasync update_subscription(deps, _ctx, scope, params) {\n\t\tif (\"eventTypePatterns\" in params) {\n\t\t\tconst result = applied(await port(deps, (options) => deps.subscriptions.changeEventTypePatterns({ ...scope, ...params }, options)), SUBSCRIPTION_REFUSALS);\n\t\t\treturn subscriptionEvent(\"WebhookSubscriptionUpdated\", params.subscriptionId, {\n\t\t\t\tchange: \"event_type_patterns\",\n\t\t\t\trevision: revisionOf(result),\n\t\t\t\teventTypePatterns: [...params.eventTypePatterns],\n\t\t\t});\n\t\t}\n\t\tconst current = await currentSubscription(deps, scope, params.subscriptionId);\n\t\tif (current.status === \"deleted\") stop(\"subscription_deleted\");\n\t\tif (params.expectedVersion !== undefined && params.expectedVersion !== current.version) stop(\"version_conflict\");\n\t\tawait vetDestination(deps, params.destinationUrl);\n\t\tconst result = applied(await port(deps, (options) => deps.subscriptions.replaceDeliveryConfiguration({\n\t\t\t...scope,\n\t\t\tsubscriptionId: params.subscriptionId,\n\t\t\tconfiguration: { destinationUrl: params.destinationUrl, signatureScheme: current.signatureScheme, secretRef: current.secretRef },\n\t\t\texpectedVersion: params.expectedVersion ?? current.version,\n\t\t}, options)), SUBSCRIPTION_REFUSALS);\n\t\treturn subscriptionEvent(\"WebhookSubscriptionUpdated\", params.subscriptionId, {\n\t\t\tchange: \"destination\",\n\t\t\tconfigurationVersion: versionOf(result),\n\t\t});\n\t},\n\n\tpause_subscription: (deps, _ctx, scope, params) => stopSubscription(deps, scope, params, \"pause\"),\n\n\tasync resume_subscription(deps, _ctx, scope, params) {\n\t\t// Resume does not resurrect (decision 3): a cancelled intent is\n\t\t// terminal, dispatch cancels any intent bound to a revision before\n\t\t// this one (the pause's cleanup may have missed it, or fan-out written\n\t\t// it late), and intent requeue refuses one (`paused_since_intent`).\n\t\t// The cleanup below cancels what is pending now, so it does not sit\n\t\t// until a worker claims it.\n\t\tconst result = applied(await port(deps, (options) => deps.subscriptions.resumeSubscription({ ...scope, ...params }, options)), SUBSCRIPTION_REFUSALS);\n\t\tconst revision = revisionOf(result);\n\t\tconst cancelledPendingIntents = await cleanUp(deps, scope, params.subscriptionId, \"subscription_paused\", revision);\n\t\treturn subscriptionEvent(\"WebhookSubscriptionResumed\", params.subscriptionId, { revision, cancelledPendingIntents });\n\t},\n\n\tdelete_subscription: (deps, _ctx, scope, params) => stopSubscription(deps, scope, params, \"delete\"),\n\n\trotate_secret_staged: (deps, _ctx, scope, params) => rotate(deps, scope, params, \"staged\"),\n\n\trotate_secret_emergency: (deps, _ctx, scope, params) => rotate(deps, scope, params, \"emergency\"),\n\n\tasync requeue_delivery_intent(deps, ctx, scope, params) {\n\t\tconst requestedBy = actorOf(ctx);\n\t\tconst invocationId = invocationOf(ctx);\n\t\tconst evidence = await oncePerInvocation(deps, scope, invocationId, { target: \"delivery_intent\", deliveryId: params.deliveryId }, async () => {\n\t\t\tconst read = await port(deps, (options) => deps.deliveries.readDeliveryIntent({ ...scope, deliveryId: params.deliveryId }, options));\n\t\t\tif (read === undefined) return stop(\"store_unavailable\");\n\t\t\tif (read.value === null) return stop(\"not_found\");\n\t\t\tconst subscriptionId = prop(read.value, \"subscriptionId\");\n\t\t\tconst eligibilityRevision = whole(prop(read.value, \"eligibilityRevision\"));\n\t\t\tif (!isWebhookIdentifier(subscriptionId) || eligibilityRevision === undefined) return stop(\"store_unavailable\");\n\t\t\t// Decision 10: the destination is re-validated at requeue. Dispatch\n\t\t\t// resolves it again before every attempt regardless.\n\t\t\tconst subscription = await currentSubscription(deps, scope, subscriptionId);\n\t\t\tif (subscription.status !== \"active\") stop(\"subscription_not_active\");\n\t\t\t// Paused and resumed since the intent's revision: dispatch would\n\t\t\t// cancel it, so it is not requeued (decision 3). A pause and resume\n\t\t\t// between this read and the compare-and-set is still caught there.\n\t\t\tif (eligibilityRevision < subscription.statusSinceRevision) stop(\"paused_since_intent\");\n\t\t\tawait vetDestination(deps, subscription.destinationUrl);\n\t\t\tconst now = nowMs(deps);\n\t\t\treturn prop(applied(await port(deps, (options) => deps.deliveries.requeueDeliveryIntent({\n\t\t\t\t...scope,\n\t\t\t\tdeliveryId: params.deliveryId,\n\t\t\t\t// The compare-and-set is the store's: fence and status are checked\n\t\t\t\t// in the same atomic step as the transition (src/ports.ts).\n\t\t\t\trequest: {\n\t\t\t\t\texpectedStatus: \"dead_letter\",\n\t\t\t\t\texpectedFence: params.expectedFence,\n\t\t\t\t\trequestedBy,\n\t\t\t\t\trequestedAt: new Date(now),\n\t\t\t\t\tprocessingDeadline: new Date(now + deps.limits.deliveryDeadlineMs),\n\t\t\t\t\t...(invocationId === undefined ? {} : { actionInvocationId: invocationId }),\n\t\t\t\t},\n\t\t\t}, options)), DELIVERY_REFUSALS), \"evidence\");\n\t\t});\n\t\t// From the evidence, not the intent, which a re-run may find purged.\n\t\tconst eventId = prop(evidence, \"eventId\");\n\t\tif (!isWebhookIdentifier(eventId)) return stop(\"store_outcome_unknown\");\n\t\tconst subscriptionId = prop(evidence, \"subscriptionId\") ?? await legacyIntentSubscription(deps, scope, params.deliveryId, eventId);\n\t\tif (!isWebhookIdentifier(subscriptionId)) return stop(\"store_outcome_unknown\");\n\t\treturn emitted(\"WebhookDeliveryIntentRequeued\", INTENT, params.deliveryId, {\n\t\t\tdeliveryId: params.deliveryId,\n\t\t\tsubscriptionId,\n\t\t\teventId,\n\t\t\t...evidenceFields(evidence),\n\t\t});\n\t},\n\n\tasync requeue_fan_out_job(deps, ctx, scope, params) {\n\t\tconst requestedBy = actorOf(ctx);\n\t\tconst invocationId = invocationOf(ctx);\n\t\tconst evidence = await oncePerInvocation(deps, scope, invocationId, { target: \"fan_out_job\", eventId: params.eventId }, async () => {\n\t\t\tconst now = nowMs(deps);\n\t\t\treturn prop(applied(await port(deps, (options) => deps.deliveries.requeueFanOutJob({\n\t\t\t\t...scope,\n\t\t\t\teventId: params.eventId,\n\t\t\t\trequest: {\n\t\t\t\t\texpectedStatus: \"dead_letter\",\n\t\t\t\t\texpectedFence: params.expectedFence,\n\t\t\t\t\trequestedBy,\n\t\t\t\t\trequestedAt: new Date(now),\n\t\t\t\t\tprocessingDeadline: new Date(now + deps.limits.fanOutDeadlineMs),\n\t\t\t\t\t...(invocationId === undefined ? {} : { actionInvocationId: invocationId }),\n\t\t\t\t},\n\t\t\t}, options)), DELIVERY_REFUSALS), \"evidence\");\n\t\t});\n\t\treturn emitted(\"WebhookFanOutJobRequeued\", JOB, params.eventId, { eventId: params.eventId, ...evidenceFields(evidence) });\n\t},\n\n\tasync enrich_fan_out_job_actor(deps, ctx, scope, params) {\n\t\tconst requestedBy = actorOf(ctx);\n\t\tconst invocationId = invocationOf(ctx);\n\t\tconst evidence = await oncePerInvocation(deps, scope, invocationId, { target: \"fan_out_job_actor\", eventId: params.eventId }, async () => {\n\t\t\tconst read = await port(deps, (options) => deps.deliveries.readFanOutJob({ ...scope, eventId: params.eventId }, options));\n\t\t\tif (read === undefined) return stop(\"store_unavailable\");\n\t\t\tif (read.value === null) return stop(\"not_found\");\n\t\t\t// Early refusals, so the application's reader is not asked for an\n\t\t\t// actor that would be refused. The store re-checks each in its\n\t\t\t// atomic step; these are not the guard.\n\t\t\tconst actor = prop(read.value, \"actor\");\n\t\t\tif (prop(read.value, \"status\") === \"completed\") return stop(\"not_enrichable\");\n\t\t\tif (prop(actor, \"state\") === \"present\") return stop(\"actor_present\");\n\t\t\tif (prop(actor, \"reason\") === \"suppressed\") return stop(\"actor_suppressed\");\n\t\t\tconst event = prop(read.value, \"event\");\n\t\t\tconst eventType = prop(event, \"eventType\");\n\t\t\tconst payloadClassification = prop(event, \"payloadClassification\");\n\t\t\tif (typeof eventType !== \"string\" || typeof payloadClassification !== \"string\") return stop(\"store_unavailable\");\n\t\t\tconst found = await port(deps, (options) => deps.actorReader.readEventActor({ ...scope, eventId: params.eventId, eventType, payloadClassification }, options));\n\t\t\tif (found === undefined) return stop(\"actor_unavailable\");\n\t\t\tconst state = prop(found.value, \"state\");\n\t\t\tif (state === \"withheld\") return stop(\"actor_withheld\");\n\t\t\tif (state === \"not_found\") return stop(\"actor_not_found\");\n\t\t\tconst actorId = prop(found.value, \"actorId\");\n\t\t\tconst actorType = prop(found.value, \"actorType\");\n\t\t\tif (state !== \"found\" || !isWebhookIdentifier(actorId) || !isWebhookIdentifier(actorType)) return stop(\"actor_unavailable\");\n\t\t\tconst now = nowMs(deps);\n\t\t\treturn prop(applied(await port(deps, (options) => deps.deliveries.enrichFanOutJobActor({\n\t\t\t\t...scope,\n\t\t\t\teventId: params.eventId,\n\t\t\t\trequest: {\n\t\t\t\t\texpectedFence: params.expectedFence,\n\t\t\t\t\tactor: { actorId, actorType },\n\t\t\t\t\trequestedBy,\n\t\t\t\t\trequestedAt: new Date(now),\n\t\t\t\t\tprocessingDeadline: new Date(now + deps.limits.fanOutDeadlineMs),\n\t\t\t\t\t...(invocationId === undefined ? {} : { actionInvocationId: invocationId }),\n\t\t\t\t},\n\t\t\t}, options)), DELIVERY_REFUSALS), \"evidence\");\n\t\t});\n\t\t// The actor itself stays in the store's evidence, not in the event.\n\t\treturn emitted(\"WebhookFanOutJobActorEnriched\", JOB, params.eventId, { eventId: params.eventId, ...evidenceFields(evidence) });\n\t},\n});\n\n/**\n * The subscription of a requeued intent whose evidence was written before\n * evidence named it (`WebhookRequeueEvidence.subscriptionId`), read from the\n * intent in the invocation's scope. The requeue has applied, so a purged\n * intent, one of another event, or a read that fails is\n * `store_outcome_unknown`: the change stands without its event, for an\n * operator to reconcile from the evidence (README, \"Atomicity and re-runs\").\n */\nasync function legacyIntentSubscription(deps: Deps, scope: WebhookScope, deliveryId: string, eventId: string): Promise<string> {\n\tconst read = await port(deps, (options) => deps.deliveries.readDeliveryIntent({ ...scope, deliveryId }, options));\n\tconst subscriptionId = prop(read?.value, \"subscriptionId\");\n\tif (read === undefined || read.value === null || prop(read.value, \"eventId\") !== eventId || !isWebhookIdentifier(subscriptionId)) {\n\t\treturn stop(\"store_outcome_unknown\");\n\t}\n\treturn subscriptionId;\n}\n\n/** The event fields taken from requeue or enrichment evidence: numbers and timestamps only. */\nfunction evidenceFields(evidence: unknown): Record<string, unknown> {\n\tconst priorFence = whole(prop(evidence, \"priorFence\"));\n\tconst priorAttemptCount = whole(prop(evidence, \"priorAttemptCount\"));\n\tconst processingDeadline = prop(evidence, \"processingDeadline\");\n\tif (priorFence === undefined || priorAttemptCount === undefined || typeof processingDeadline !== \"string\") return stop(\"store_outcome_unknown\");\n\treturn { priorFence, priorAttemptCount, processingDeadline };\n}\n\nconst dateGetTime = Date.prototype.getTime;\n\n/**\n * Host's record that this invocation's submission passed the action's\n * admission check. A Host older than 7.3.0 ignores `admitSubmission` and\n * passes no `admittedAt`; such a Host may already have persisted unchecked\n * parameters, so the action refuses rather than act on them.\n */\nfunction requireAdmission(ctx: ActionContext<unknown>): void {\n\tconst admittedAt = prop(ctx, \"admittedAt\");\n\tif (!(admittedAt instanceof Date) || !Number.isFinite(Reflect.apply(dateGetTime, admittedAt, []))) stop(\"admission_not_enforced\");\n}\n\n/** The handler Host calls: requires Host's admission record, re-reads the parameters, takes the scope from Host's context, never lets a throw out. */\nfunction handlerFor<N extends WebhookDeliveryActionName>(deps: Deps, name: N) {\n\tconst run = HANDLERS[name] as Handler<N>;\n\treturn async (ctx: ActionContext<unknown>, parameters: unknown): Promise<ActionResult> => {\n\t\ttry {\n\t\t\trequireAdmission(ctx);\n\t\t\tconst read = readWebhookActionParameters(name, parameters);\n\t\t\tif (!read.ok) return { success: false, error: `webhook_parameters_refused:${read.code}` };\n\t\t\treturn await run(deps, ctx, scopeOf(ctx), read.value);\n\t\t} catch (thrown) {\n\t\t\t// Only a package `Stop` is read, and its code is checked against the\n\t\t\t// fixed set again; anything else is dropped unread.\n\t\t\treturn refused(Stop.is(thrown) && isOneOf(WEBHOOK_ACTION_REFUSAL_CODES, thrown.code) ? thrown.code : \"action_failed\");\n\t\t}\n\t};\n}\n\n// ---------------------------------------------------------------------------\n// Admission\n// ---------------------------------------------------------------------------\n\n/** The actions whose parameters carry a secret reference, verified at admission and again before the write. */\nconst TAKES_SECRET_REF: readonly WebhookDeliveryActionName[] = freeze([\"create_subscription\", \"rotate_secret_staged\", \"rotate_secret_emergency\"] as const);\n\nfunction refusedAdmission(code: string): ActionAdmissionDecision {\n\treturn freeze({ admitted: false as const, code });\n}\n\nconst ADMITTED: ActionAdmissionDecision = freeze({ admitted: true as const });\n\n/**\n * The action's `admitSubmission` (ADR 0018 decision 8). Host runs it on\n * every submission, after authorizing the submitter and before it records\n * anything, with its own copy of the parameters and the submission's trusted\n * tenant, space and actor. It admits only parameters the package reader\n * accepts and, for an action that takes a `secretRef`, only a reference the\n * application's `secretReferences.verify` confirms for that tenant and space.\n * A refusal's code is fixed text: `webhook_parameters_refused:<code>:<field>`\n * (`WEBHOOK_ACTION_PARAMETER_CODES`, a declared field or `parameters`) or\n * `webhook_action_refused:<code>` (`WEBHOOK_ACTION_REFUSAL_CODES`). Never\n * throws; nothing a port throws is read.\n */\nfunction admissionFor(deps: Deps, name: WebhookDeliveryActionName): ActionAdmission {\n\tconst takesSecretRef = TAKES_SECRET_REF.includes(name);\n\treturn async (input) => {\n\t\ttry {\n\t\t\tconst read = readWebhookActionParameters(name, prop(input, \"parameters\"));\n\t\t\tif (!read.ok) return refusedAdmission(`webhook_parameters_refused:${read.code}:${read.field}`);\n\t\t\tif (takesSecretRef) {\n\t\t\t\tconst tenantId = prop(input, \"tenantId\");\n\t\t\t\tconst spaceId = prop(input, \"spaceId\");\n\t\t\t\tif (!isWebhookIdentifier(tenantId) || !isWebhookIdentifier(spaceId)) stop(\"scope_invalid\");\n\t\t\t\tconst signal = prop(input, \"signal\");\n\t\t\t\tawait verifySecretRef(deps, freeze({ tenantId, spaceId }), (read.value as { readonly secretRef: string }).secretRef, signal instanceof AbortSignal ? signal : undefined);\n\t\t\t}\n\t\t\treturn ADMITTED;\n\t\t} catch (thrown) {\n\t\t\treturn refusedAdmission(`webhook_action_refused:${Stop.is(thrown) && isOneOf(WEBHOOK_ACTION_REFUSAL_CODES, thrown.code) ? thrown.code : \"action_failed\"}`);\n\t\t}\n\t};\n}\n\n// ---------------------------------------------------------------------------\n// Policy\n// ---------------------------------------------------------------------------\n\nfunction block(policyId: `${string}.v${number}`, reason: string): PolicyOutcome {\n\treturn { policyId, policyVersion: 1, policyKind: \"code\", result: \"block\", reason };\n}\n\nfunction operatorPolicy(deps: Deps): PolicyEvaluator {\n\tconst policyId = webhookOperatorPolicyId(deps.namespace);\n\treturn freeze({\n\t\tpolicyId,\n\t\tversion: 1,\n\t\tkind: \"code\" as const,\n\t\tasync evaluate(ctx: PolicyContext): Promise<PolicyOutcome> {\n\t\t\ttry {\n\t\t\t\tconst action = webhookActionNameOf(deps.namespace, ctx.actionId);\n\t\t\t\tif (action === undefined) return block(policyId, \"action_not_in_module\");\n\t\t\t\tconst read = readWebhookActionParameters(action, ctx.parameters);\n\t\t\t\tif (!read.ok) return block(policyId, \"parameters_invalid\");\n\t\t\t\tconst { tenantId, spaceId, actorId, actorType } = ctx;\n\t\t\t\tif (!isWebhookIdentifier(tenantId) || !isWebhookIdentifier(spaceId) || !isWebhookIdentifier(actorId) || typeof actorType !== \"string\") {\n\t\t\t\t\treturn block(policyId, \"operator_identity_unavailable\");\n\t\t\t\t}\n\t\t\t\tconst value = read.value as Record<string, unknown>;\n\t\t\t\tconst target = freeze({\n\t\t\t\t\t...(typeof value[\"subscriptionId\"] === \"string\" ? { subscriptionId: value[\"subscriptionId\"] } : {}),\n\t\t\t\t\t...(typeof value[\"deliveryId\"] === \"string\" ? { deliveryId: value[\"deliveryId\"] } : {}),\n\t\t\t\t\t...(typeof value[\"eventId\"] === \"string\" ? { eventId: value[\"eventId\"] } : {}),\n\t\t\t\t});\n\t\t\t\tconst input = freeze({ actionId: ctx.actionId, action, tenantId, spaceId, actorId, actorType, target });\n\t\t\t\tconst answer = await port(deps, async (options) => apply(deps.authorize, undefined, [input, options]));\n\t\t\t\tif (answer === undefined) return block(policyId, \"operator_authorization_unavailable\");\n\t\t\t\tif (answer.value !== true) return block(policyId, \"operator_not_authorized\");\n\t\t\t\treturn { policyId, policyVersion: 1, policyKind: \"code\", result: \"pass\" };\n\t\t\t} catch {\n\t\t\t\treturn block(policyId, \"operator_authorization_unavailable\");\n\t\t\t}\n\t\t},\n\t});\n}\n\n// ---------------------------------------------------------------------------\n// The module\n// ---------------------------------------------------------------------------\n\nconst EVENT_FOR: { readonly [N in WebhookDeliveryActionName]: readonly WebhookDeliveryActionEventType[] } = freeze({\n\tcreate_subscription: freeze([\"WebhookSubscriptionCreated\"] as const),\n\tupdate_subscription: freeze([\"WebhookSubscriptionUpdated\"] as const),\n\tpause_subscription: freeze([\"WebhookSubscriptionPaused\"] as const),\n\tresume_subscription: freeze([\"WebhookSubscriptionResumed\"] as const),\n\tdelete_subscription: freeze([\"WebhookSubscriptionDeleted\"] as const),\n\trotate_secret_staged: freeze([\"WebhookSecretRotated\"] as const),\n\trotate_secret_emergency: freeze([\"WebhookSecretRotated\"] as const),\n\trequeue_delivery_intent: freeze([\"WebhookDeliveryIntentRequeued\"] as const),\n\trequeue_fan_out_job: freeze([\"WebhookFanOutJobRequeued\"] as const),\n\tenrich_fan_out_job_actor: freeze([\"WebhookFanOutJobActorEnriched\"] as const),\n});\n\n/** An attempt of one invocation of these reports the change another attempt committed when its evidence reads or the store's atomic step see it (`oncePerInvocation`, with its one exception); the others are not re-run by Host. */\nconst IDEMPOTENT: readonly WebhookDeliveryActionName[] = freeze([\"requeue_delivery_intent\", \"requeue_fan_out_job\", \"enrich_fan_out_job_actor\"] as const);\n\nfunction readDeps(options: WebhookDeliveryModuleOptions): Deps {\n\tconst fail = (field: string): never => {\n\t\tthrow governedActionError(\"options_invalid\", field);\n\t};\n\tif (options === null || typeof options !== \"object\") fail(\"options\");\n\tconst namespace = options.namespace ?? DEFAULT_WEBHOOK_DELIVERY_NAMESPACE;\n\tif (!isWebhookDeliveryNamespace(namespace)) fail(\"namespace\");\n\tconst needs = (value: unknown, field: string, methods: readonly string[]) => {\n\t\tif (value === null || typeof value !== \"object\") fail(field);\n\t\tfor (const method of methods) if (typeof (value as Record<string, unknown>)[method] !== \"function\") fail(`${field}.${method}`);\n\t};\n\tneeds(options.subscriptions, \"subscriptions\", [\n\t\t\"readSubscription\", \"createSubscription\", \"changeEventTypePatterns\", \"pauseSubscription\", \"resumeSubscription\", \"deleteSubscription\", \"replaceDeliveryConfiguration\",\n\t]);\n\tneeds(options.deliveries, \"deliveries\", [\n\t\t\"readDeliveryIntent\", \"readFanOutJob\", \"requeueDeliveryIntent\", \"requeueFanOutJob\", \"enrichFanOutJobActor\", \"cancelPendingIntents\", \"listInvocationRequeueEvidence\",\n\t]);\n\tneeds(options.resolver, \"resolver\", [\"resolve\"]);\n\tneeds(options.secretReferences, \"secretReferences\", [\"verify\"]);\n\tneeds(options.actorReader, \"actorReader\", [\"readEventActor\"]);\n\tif (typeof options.authorizeOperatorAction !== \"function\") fail(\"authorizeOperatorAction\");\n\tlet clock: FanOutClock;\n\ttry {\n\t\tclock = captureFanOutClock(options.clock);\n\t} catch {\n\t\treturn fail(\"clock\");\n\t}\n\tconst limits = resolveWebhookDeliveryLimits(options.limits ?? {});\n\tconst verifierToleranceMs = options.verifierToleranceMs ?? 300_000;\n\tassertPositiveInteger(verifierToleranceMs, \"verifierToleranceMs\");\n\treturn freeze({\n\t\tnamespace,\n\t\tsubscriptions: options.subscriptions,\n\t\tdeliveries: options.deliveries,\n\t\tresolver: options.resolver,\n\t\tsecretReferences: options.secretReferences,\n\t\tactorReader: options.actorReader,\n\t\tauthorize: options.authorizeOperatorAction,\n\t\tclock,\n\t\tlimits,\n\t\tverifierToleranceMs,\n\t});\n}\n\n/**\n * Build the package's governed operator actions as one `FabricModule`\n * (README, \"Governed actions\"). Register it with `createModuleRegistry()`\n * and run it through `createGovernedActionHost()` from\n * `@fabricorg/platform-host` 7.3.0 or later: every action declares\n * `admitSubmission`, which that Host runs before it records a submission,\n * and refuses to run without Host's admission record. Nothing needs wiring\n * into Host for it.\n *\n * @throws {WebhookGovernedActionError} `options_invalid` when a port or\n * option is missing or malformed.\n * @throws {WebhookDeliveryConfigError} when a limit or `verifierToleranceMs`\n * is not a positive whole number.\n */\nexport function createWebhookDeliveryModule<TDb = unknown>(options: WebhookDeliveryModuleOptions): FabricModule<TDb> {\n\tconst deps = readDeps(options);\n\tconst policy = operatorPolicy(deps);\n\tconst actions: ActionDefinition<TDb>[] = WEBHOOK_DELIVERY_ACTION_NAMES.map((name) => {\n\t\tconst idempotent = IDEMPOTENT.includes(name);\n\t\tconst definition: ActionDefinition<TDb> = {\n\t\t\tactionId: `${deps.namespace}.${name}`,\n\t\t\tnamespace: deps.namespace,\n\t\t\tversion: 1,\n\t\t\tkind: \"atomic\",\n\t\t\tschema: webhookActionSchema(name),\n\t\t\tadmitSubmission: admissionFor(deps, name),\n\t\t\tpolicies: [policy.policyId],\n\t\t\temitsEvents: [...EVENT_FOR[name]],\n\t\t\tidempotent,\n\t\t\tmutatesDomain: true,\n\t\t\texecution: {\n\t\t\t\tconnectivity: \"online-required\",\n\t\t\t\tauthorityMoment: \"execution\",\n\t\t\t\tidempotency: \"supported\",\n\t\t\t\tcompletion: \"immediate\",\n\t\t\t\tconsistency: \"authoritative-now\",\n\t\t\t\tsensitivity: \"confidential\",\n\t\t\t},\n\t\t\tsurface: \"internal\",\n\t\t\tsurfaceReason: \"Operator mutation of webhook subscriptions and delivery records.\",\n\t\t\thandler: handlerFor(deps, name) as ActionDefinition<TDb>[\"handler\"],\n\t\t};\n\t\treturn definition;\n\t});\n\treturn {\n\t\tnamespace: deps.namespace,\n\t\tversion: \"1.0.0\",\n\t\tdisplayName: \"Webhook delivery\",\n\t\tdescription: \"Governed operator actions for webhook subscriptions, secret rotation, requeue and actor enrichment (ADR 0018).\",\n\t\tsubjectTypes: [SUBSCRIPTION, INTENT, JOB],\n\t\teventTypes: WEBHOOK_DELIVERY_ACTION_EVENT_TYPES.map((eventType) => ({ eventType, schemaVersion: 1 })),\n\t\tactions,\n\t\tpolicies: [policy],\n\t};\n}\n"]}
1
+ {"version":3,"file":"index.js","names":["reflectOwnKeys","reflectGetOwnPropertyDescriptor","reflectDefineProperty","objectCreate","dateGetTime","DateConstructor","numberIsFinite","numberIsSafeInteger","NumberConstructor","mathMin","mathMax","reflectDefineProperty","numberIsFinite","numberIsSafeInteger","DateConstructor","numberIsSafeInteger","abortedGetter","isAborted","readClock","copyOut","compareText","entry","mathMin","readActor","hex","ioBoundary","readClock","mathMax","copyOut","compareText","refused","mathMax","readClock","refused","readClock","compareText","mathMax","copyOut","refused","unreadable","unreadableFail","numberIsSafeInteger","mathMin","unreadable","unreadableFail","numberIsSafeInteger","NumberConstructor","numberIsFinite","mathMin","mathMax","EMPTY","numberIsSafeInteger","unreadable","unreadableFail","numberIsSafeInteger","stringSlice","reflectGetOwnPropertyDescriptor","abortedGetter","setTimer","clearTimer","unreadable","unreadableFail","unreadableFail","numberIsSafeInteger","UNREADABLE","numberIsFinite","ABORTED","refuse","REFUSED","nonEmpty","whole","numberIsSafeInteger","raw","plain","numberIsFinite","MAX_CLAIMED","STATUSES","INSERT_OUTCOMES","hasMethods","positiveWhole","readConfig","readConfigUnguarded","deadLetter","keepLease","mathMin","retryOrDeadLetter","numberIsFinite","refuse","whole","numberIsSafeInteger","numberIsFinite","numberIsFinite","mathMin","mathMax","numberIsSafeInteger","whole","numberIsSafeInteger"],"sources":["../src/codes.ts","../src/snapshot.ts","../src/errors.ts","../src/limits.ts","../src/store-input.ts","../src/delivery-store-core.ts","../src/receipt.ts","../src/memory-delivery-store.ts","../src/subscription-store-core.ts","../src/memory-subscription-store.ts","../src/postgres-sql.ts","../src/postgres-delivery-store.ts","../src/postgres-subscription-store.ts","../src/retry.ts","../src/classify.ts","../src/persistence-projection.ts","../src/egress.ts","../src/headers.ts","../src/address.ts","../src/call-bounds.ts","../src/destination.ts","../src/decisions.ts","../src/fan-out-call.ts","../src/fan-out-read.ts","../src/fan-out-publisher.ts","../src/action-events.ts","../src/fan-out-cycle.ts","../src/delivery-read.ts","../src/delivery-cycle.ts","../src/action-parameters.ts","../src/governed-actions.ts"],"sourcesContent":["/**\n * Fixed code sets. Stored diagnostics, denial reasons and attempt outcomes are\n * typed as one of these codes rather than a free string or a port's error\n * message (ADR 0018 decision 2), so a thrown error has no field through which\n * to carry payload, secret or response-body text into a durable record. The\n * arrays are frozen, so no caller can widen a set at runtime.\n */\n\n/** Reasons an admission port may give for `deny`. */\nexport const WEBHOOK_ADMISSION_DENIAL_CODES = Object.freeze([\n\t\"actor_not_permitted\",\n\t\"scope_not_permitted\",\n\t\"event_type_not_permitted\",\n\t\"classification_not_permitted\",\n\t\"policy_denied\",\n] as const);\n\n/** A reason code carried by an admission `deny` decision and stored on its denial record. */\nexport type WebhookAdmissionDenialCode = (typeof WEBHOOK_ADMISSION_DENIAL_CODES)[number];\n\n/** Reasons a delivery authorization port may give for `revoked`. */\nexport const WEBHOOK_REVOCATION_CODES = Object.freeze([\n\t\"grant_expired\",\n\t\"scope_revoked\",\n\t\"registration_inactive\",\n] as const);\n\n/** A reason code carried by a delivery authorization `revoked` decision. */\nexport type WebhookRevocationCode = (typeof WEBHOOK_REVOCATION_CODES)[number];\n\n/**\n * Diagnostics stored on a fan-out job or delivery intent when a port failed,\n * timed out or a coordination check refused the work. A port exception is\n * stored as the code for that port, not as its message.\n *\n * Three are written only by the fan-out cycle: `eligibility_unsettled` when\n * it defers a job until its event's eligibility is settled (README,\n * \"Fan-out\"), `intent_build_failed` when it could not render a body or\n * create a delivery id for an admitted subscription, and `job_unreadable`\n * when it dead-letters a claimed job whose identity and lease it could read\n * but whose body it could not.\n *\n * Three are written only by the delivery cycle (README, \"Delivery\"):\n * `intent_unreadable` when it dead-letters a claimed intent whose identity\n * and lease it could read but whose body it could not,\n * `subscription_not_in_scope` when the intent's subscription does not exist\n * in the intent's tenant and space, or the store's answer names another\n * one, and `transport_not_sent` when the transport returned `not_sent` for\n * a request it never started.\n */\nexport const WEBHOOK_DIAGNOSTIC_CODES = Object.freeze([\n\t\"admission_unavailable\",\n\t\"authorization_unavailable\",\n\t\"subscription_store_unavailable\",\n\t\"delivery_store_unavailable\",\n\t\"signer_unavailable\",\n\t\"resolver_unavailable\",\n\t\"port_timeout\",\n\t\"scope_predicate_failed\",\n\t\"configuration_conflict\",\n\t\"lease_lost\",\n\t\"intent_not_pending\",\n\t\"processing_deadline_exceeded\",\n\t\"eligibility_unsettled\",\n\t\"intent_build_failed\",\n\t\"job_unreadable\",\n\t\"intent_unreadable\",\n\t\"subscription_not_in_scope\",\n\t\"transport_not_sent\",\n] as const);\n\n/** A stored diagnostic code for a port failure or refused coordination check. */\nexport type WebhookDiagnosticCode = (typeof WEBHOOK_DIAGNOSTIC_CODES)[number];\n\n/**\n * What a delivery attempt's observation means for its intent (ADR 0018\n * decision 10). `not_sent` is never a classification: the delivery cycle\n * records it, with the reason `not_sent`, on an attempt it began under the\n * intent's lease and handed to the transport, when the transport answered\n * that it never started the request (its deadline had passed or its signal\n * had aborted while the request was queued). Such an attempt spends no budget.\n */\nexport const WEBHOOK_ATTEMPT_OUTCOMES = Object.freeze([\n\t\"delivered\",\n\t\"retryable\",\n\t\"dead_letter\",\n\t\"cancelled\",\n\t\"not_sent\",\n] as const);\n\n/**\n * The classified result of one attempt. A 401 or 403 is `retryable` like any\n * other row of that kind; its `http_401` / `http_403` reason and the\n * classification's `receiverActionLikely` flag let the caller surface it to\n * operators before the retry budget is exhausted.\n */\nexport type WebhookAttemptOutcome = (typeof WEBHOOK_ATTEMPT_OUTCOMES)[number];\n\n/** The row of decision 10's table an observation matched. */\nexport const WEBHOOK_ATTEMPT_REASON_CODES = Object.freeze([\n\t\"http_2xx\",\n\t\"network_error\",\n\t\"timeout\",\n\t\"dns_failure\",\n\t\"http_408\",\n\t\"http_425\",\n\t\"http_429\",\n\t\"http_5xx\",\n\t\"signer_unavailable\",\n\t\"http_401\",\n\t\"http_403\",\n\t\"http_1xx\",\n\t\"http_3xx\",\n\t\"http_410\",\n\t\"http_4xx\",\n\t\"invalid_url\",\n\t\"private_address\",\n\t\"authorization_revoked\",\n\t\"subscription_paused\",\n\t\"subscription_deleted\",\n\t\"not_sent\",\n] as const);\n\n/** The reason code recorded with an attempt outcome. */\nexport type WebhookAttemptReasonCode = (typeof WEBHOOK_ATTEMPT_REASON_CODES)[number];\n\n/** Codes on {@link WebhookDeliveryConfigError}. */\nexport const WEBHOOK_CONFIG_ERROR_CODES = Object.freeze([\n\t\"limit_not_positive_finite\",\n\t\"limit_not_integer\",\n\t\"limit_out_of_range\",\n\t\"retry_schedule_empty\",\n\t\"limit_unreadable\",\n] as const);\n\n/** Why a configured limit was rejected. */\nexport type WebhookConfigErrorCode = (typeof WEBHOOK_CONFIG_ERROR_CODES)[number];\n\n/** Codes on {@link WebhookProjectionError}. */\nexport const WEBHOOK_PROJECTION_ERROR_CODES = Object.freeze([\n\t\"invalid_envelope\",\n\t\"payload_field_not_json\",\n\t\"fact_field_not_json\",\n\t\"accessor_property\",\n\t\"inspection_failed\",\n\t\"scope_mismatch\",\n] as const);\n\n/** Why an envelope could not be projected. */\nexport type WebhookProjectionErrorCode = (typeof WEBHOOK_PROJECTION_ERROR_CODES)[number];\n\n/**\n * Codes on the `TypeError` and `RangeError` instances this package throws\n * for malformed call input (headers, classification, retry, admission).\n * Each code has one constant message; neither repeats the input.\n */\nexport const WEBHOOK_INPUT_ERROR_CODES = Object.freeze([\n\t\"input_unreadable\",\n\t\"observation_unknown\",\n\t\"status_out_of_range\",\n\t\"signature_malformed\",\n\t\"timestamp_invalid\",\n\t\"event_id_invalid\",\n\t\"delivery_id_invalid\",\n\t\"attempt_invalid\",\n\t\"raw_body_not_string\",\n\t\"random_source_missing\",\n\t\"random_sample_invalid\",\n\t\"random_source_failed\",\n\t\"denial_code_unknown\",\n] as const);\n\n/** Why call input was refused. */\nexport type WebhookInputErrorCode = (typeof WEBHOOK_INPUT_ERROR_CODES)[number];\n\n/**\n * Codes on {@link WebhookStoreError}: a store call that was malformed, broke\n * a store invariant, or was no longer wanted when the store reached its\n * write. Refusals the caller is expected to handle (a lost lease, an\n * existing key, a replay past the horizon, a requeue of a record that is not\n * dead-lettered) are results, not errors.\n */\nexport const WEBHOOK_STORE_ERROR_CODES = Object.freeze([\n\t\"input_invalid\",\n\t\"record_mismatch\",\n\t\"delivery_id_conflict\",\n\t\"call_aborted\",\n\t\"deadline_passed\",\n\t\"clock_invalid\",\n\t\"store_failed\",\n] as const);\n\n/** Why a store call was refused. */\nexport type WebhookStoreErrorCode = (typeof WEBHOOK_STORE_ERROR_CODES)[number];\n\n/**\n * Codes on {@link WebhookFanOutError}: why the fan-out publisher, the\n * composite publisher or the fan-out cycle refused or failed. A publisher\n * rejection makes the Host relay retry and, once its budget is spent,\n * dead-letter the outbox record, so a failed publish stays visible there.\n *\n * - `event_past_replay_horizon`: `insertFanOutJob` answered `past_horizon`.\n * The event is older than the replay horizon (R5), so no job can be stored\n * and the publish fails rather than counting as delivered.\n * - `fan_out_store_failed` / `fan_out_store_timeout`: the publisher's job\n * insert or the cycle's claim threw, or did not settle within\n * `portTimeoutMs`. Store failures later in a cycle reschedule the job\n * with a diagnostic instead.\n * - `publish_aborted`: the caller's signal aborted before the store answered.\n * - `sink_failed`: a required sink of a composite publisher rejected with an\n * error this package did not create.\n * - `sink_timeout`: a required sink of a composite publisher did not settle\n * within the composite's `sinkTimeoutMs`.\n * - `clock_invalid`: the injected clock threw or returned an invalid time.\n * - `options_invalid`: an option is missing or has the wrong shape.\n */\nexport const WEBHOOK_FAN_OUT_ERROR_CODES = Object.freeze([\n\t\"event_past_replay_horizon\",\n\t\"fan_out_store_failed\",\n\t\"fan_out_store_timeout\",\n\t\"publish_aborted\",\n\t\"sink_failed\",\n\t\"sink_timeout\",\n\t\"clock_invalid\",\n\t\"options_invalid\",\n] as const);\n\n/** Why a fan-out publish or cycle failed. */\nexport type WebhookFanOutErrorCode = (typeof WEBHOOK_FAN_OUT_ERROR_CODES)[number];\n\n/**\n * Codes on {@link WebhookDeliveryError}: why the delivery cycle could not\n * run. Everything that goes wrong while one claimed intent is processed is\n * settled on that intent with a fixed code instead (README, \"Delivery\").\n *\n * - `delivery_store_failed` / `delivery_store_timeout`: the claim threw or\n * answered something unreadable, or did not settle within `portTimeoutMs`.\n * - `clock_invalid`: the injected clock threw or returned an invalid time.\n * - `options_invalid`: an option or port is missing or has the wrong shape.\n */\nexport const WEBHOOK_DELIVERY_ERROR_CODES = Object.freeze([\n\t\"delivery_store_failed\",\n\t\"delivery_store_timeout\",\n\t\"clock_invalid\",\n\t\"options_invalid\",\n] as const);\n\n/** Why a delivery cycle failed. */\nexport type WebhookDeliveryErrorCode = (typeof WEBHOOK_DELIVERY_ERROR_CODES)[number];\n\n/**\n * Why a governed action (PR 9; README, \"Governed actions\") refused. At\n * submission, the action's admission check refuses with\n * `webhook_action_refused:<code>` (or `webhook_parameters_refused:<code>:<field>`\n * with a code from `WEBHOOK_ACTION_PARAMETER_CODES`) and Host records nothing.\n * At execution, the action fails with Host's `error` set to\n * `webhook_action_refused:<code>`, writes nothing more and emits no event.\n *\n * - `admission_not_enforced`: the handler ran without Host's record that the\n * submission was admitted (`ActionContext.admittedAt`), as under a Host\n * older than 7.3.0, which ignores `admitSubmission`. Nothing is written.\n * - `scope_invalid` / `actor_invalid`: Host's trusted context names a tenant,\n * space or actor that breaks the store identifier rule.\n * - `secret_ref_invalid`: the application's secret store says the reference\n * names no secret of this tenant. `secret_ref_unverified`: the check threw,\n * timed out or answered something unreadable.\n * - `secret_ref_unchanged`: a rotation named the reference already in use.\n * - `destination_refused`: the resolver refused the URL (`invalid_url`,\n * `private_address`). `destination_unresolved`: it answered `dns_failure`,\n * threw or timed out. Neither writes anything.\n * - `subscription_not_found`, `subscription_exists`, `subscription_deleted`,\n * `invalid_transition`, `revision_conflict`, `version_conflict`: the\n * subscription store refused the write, or the action's own read found\n * the same. `subscription_not_active`: an intent requeue for a paused or\n * deleted subscription. `paused_since_intent`: an intent requeue for an\n * active subscription that was paused and resumed after the intent's\n * eligibility revision; dispatch would cancel it (decision 3).\n * - `not_found`, `stale`, `not_dead_letter`, `past_replay_horizon`: the\n * delivery store refused a requeue or enrichment (decision 10, R5).\n * - `not_enrichable`, `actor_present`, `actor_suppressed`: enrichment of a\n * completed job, or of a job whose actor is not `legacy` (decision 5).\n * `actor_withheld`, `actor_not_found`, `actor_unavailable`: the\n * application's actor reader withheld the actor, found no such event, or\n * threw, timed out or answered something unreadable.\n * - `store_unavailable`: a read threw, timed out or answered something\n * unreadable; nothing was written. `store_outcome_unknown`: a write threw,\n * timed out or answered something unreadable, so it may have applied\n * (README, \"A store write that timed out is unknown\"); also a re-run of an\n * intent requeue whose evidence predates `subscriptionId` and whose intent\n * can no longer be read, so the applied requeue has no event (README,\n * \"Atomicity and re-runs\").\n * - `action_failed`: anything else, such as a failing clock; nothing it\n * threw is read.\n */\nexport const WEBHOOK_ACTION_REFUSAL_CODES = Object.freeze([\n\t\"admission_not_enforced\",\n\t\"scope_invalid\",\n\t\"actor_invalid\",\n\t\"secret_ref_invalid\",\n\t\"secret_ref_unverified\",\n\t\"secret_ref_unchanged\",\n\t\"destination_refused\",\n\t\"destination_unresolved\",\n\t\"subscription_not_found\",\n\t\"subscription_exists\",\n\t\"subscription_deleted\",\n\t\"subscription_not_active\",\n\t\"paused_since_intent\",\n\t\"invalid_transition\",\n\t\"revision_conflict\",\n\t\"version_conflict\",\n\t\"not_found\",\n\t\"stale\",\n\t\"not_dead_letter\",\n\t\"past_replay_horizon\",\n\t\"not_enrichable\",\n\t\"actor_present\",\n\t\"actor_suppressed\",\n\t\"actor_withheld\",\n\t\"actor_not_found\",\n\t\"actor_unavailable\",\n\t\"store_unavailable\",\n\t\"store_outcome_unknown\",\n\t\"action_failed\",\n] as const);\n\n/** Why a governed action refused. */\nexport type WebhookActionRefusalCode = (typeof WEBHOOK_ACTION_REFUSAL_CODES)[number];\n\n/**\n * Codes on {@link WebhookGovernedActionError}: `options_invalid`, a module\n * option or port is missing or has the wrong shape.\n */\nexport const WEBHOOK_GOVERNED_ACTION_ERROR_CODES = Object.freeze([\"options_invalid\"] as const);\n\n/** Why the governed-action module could not be built. */\nexport type WebhookGovernedActionErrorCode = (typeof WEBHOOK_GOVERNED_ACTION_ERROR_CODES)[number];\n","import type { WebhookJsonValue } from \"./types\";\n\n/*\n * The one place caller-supplied values are read (README, \"Security\n * properties\", P1). Every exported function copies the inputs it needs into\n * a package-owned snapshot here, at entry, and works on the snapshot only;\n * nothing is read after the snapshot is complete.\n *\n * - Properties are read through own property descriptors. An accessor is\n * refused without being called; a value is never read through `[[Get]]`.\n * - Records must be plain: prototype `Object.prototype` or `null`.\n * - Dates are read with the `Date.prototype` intrinsics, never the value's\n * own methods; arrays by index from their own `length`, never through an\n * iterator or their own methods.\n * - Every object the snapshot builds has a `null` prototype or is a fresh\n * array, is frozen, and was populated with `defineProperty` and\n * null-prototype descriptors, so nothing installed on `Object.prototype`\n * or `Array.prototype` is consulted when it is built, read or serialized.\n * - Every built-in the package calls after load is captured below, at module\n * load, and called through the captured `Reflect.apply`; replacing a\n * global or a prototype method later, including from a Proxy trap during\n * a call, does not change what the package runs.\n *\n * For plain data the snapshot is a faithful copy: most properties are read\n * once, and the few read again (a repeated allowlist name whose first read\n * found nothing, a nested object reachable along two paths) give the same\n * answer. A Proxy gets no such promise: its traps execute while the\n * snapshot is taken, possibly more than once for one property in those\n * cases, and the values they return need not agree. The snapshot holds whichever values were read,\n * and only the snapshot is used afterwards. Whatever a trap throws is\n * replaced by the entry point's guard (errors.ts) with a package-created,\n * constant error.\n */\n\nconst reflectApply = Reflect.apply;\nconst reflectOwnKeys = Reflect.ownKeys;\nconst reflectGetOwnPropertyDescriptor = Reflect.getOwnPropertyDescriptor;\nconst reflectGetPrototypeOf = Reflect.getPrototypeOf;\nconst reflectDefineProperty = Reflect.defineProperty;\nconst objectCreate = Object.create;\nconst objectFreeze = Object.freeze;\nconst objectHasOwn = Object.hasOwn;\nconst objectPrototype = Object.prototype;\nconst arrayIsArray = Array.isArray;\nconst dateGetTime = Date.prototype.getTime;\nconst dateToISOString = Date.prototype.toISOString;\nconst DateConstructor = Date;\nconst regExpExec = RegExp.prototype.exec;\nconst stringTrim = String.prototype.trim;\nconst jsonStringify = JSON.stringify;\n\n/** Captured `Reflect.apply`, so a replaced `Function.prototype.call` is never used. */\nexport const apply = reflectApply;\n/** Captured numeric intrinsics. */\nexport const numberIsFinite = Number.isFinite;\nexport const numberIsSafeInteger = Number.isSafeInteger;\nexport const NumberConstructor = Number;\nexport const mathFloor = Math.floor;\nexport const mathMin = Math.min;\nexport const mathMax = Math.max;\nexport const dateParse = Date.parse;\nexport const freeze = objectFreeze;\nexport const hasOwn = objectHasOwn;\nexport const isArray = arrayIsArray;\n\n/** The longest option list (allowlist, retry schedule) a snapshot copies. */\nexport const MAX_LIST_LENGTH = 1_024;\n/** The deepest nesting a JSON snapshot copies; also bounds a cyclic value. */\nexport const MAX_JSON_DEPTH = 64;\n/** The most objects, arrays and dates one JSON snapshot copies. */\nexport const MAX_JSON_NODES = 100_000;\n\n/** Why a snapshot refused a value. The caller's `Fail` maps it to a public error. */\nexport type SnapshotFault = \"accessor\" | \"not_plain\" | \"hole\" | \"not_json\" | \"too_deep\" | \"too_large\";\n\n/** Throws the entry point's public error for a fault at a package-named field. */\nexport type Fail = (fault: SnapshotFault, field: string) => never;\n\n/** Stands in for a non-primitive where an option must be a primitive, so validation rejects it. */\nexport const NOT_PRIMITIVE: unique symbol = Symbol(\"webhook-delivery.not-primitive\");\n\n/** A null-prototype data descriptor, so `defineProperty` reads nothing from `Object.prototype`. */\nfunction dataDescriptor(value: unknown): PropertyDescriptor {\n\tconst descriptor = objectCreate(null) as { value?: unknown; enumerable?: boolean; writable?: boolean; configurable?: boolean };\n\tdescriptor.value = value;\n\tdescriptor.enumerable = true;\n\tdescriptor.writable = false;\n\tdescriptor.configurable = false;\n\treturn descriptor;\n}\n\n/** Define an own, enumerable, read-only data property without consulting any prototype. */\nexport function define(target: object, key: string | number, value: unknown): void {\n\treflectDefineProperty(target, key, dataDescriptor(value));\n}\n\n/** A fresh array holding `values`' elements in order, frozen. `values` must be package-owned. */\nexport function frozenList<T>(values: readonly T[]): readonly T[] {\n\tconst list: T[] = [];\n\tfor (let index = 0; index < values.length; index += 1) define(list, index, values[index]);\n\treturn objectFreeze(list);\n}\n\n/**\n * A frozen null-prototype copy of a package-built object literal. Keys whose\n * value is `undefined` are left out, so optional fields are absent rather\n * than present-and-undefined.\n */\nexport function record<T extends object>(fields: T): T {\n\tconst out = objectCreate(null) as T;\n\tconst keys = reflectOwnKeys(fields);\n\tfor (let index = 0; index < keys.length; index += 1) {\n\t\tconst key = keys[index] as string;\n\t\tconst descriptor = reflectGetOwnPropertyDescriptor(fields, key);\n\t\tif (descriptor !== undefined && objectHasOwn(descriptor, \"value\") && descriptor.value !== undefined) define(out, key, descriptor.value);\n\t}\n\treturn objectFreeze(out);\n}\n\n/** A mutable null-prototype map for package-internal bookkeeping. */\nexport function emptyMap<T>(): Record<string, T> {\n\treturn objectCreate(null) as Record<string, T>;\n}\n\n/** `true` when `re` matches `value`, using the captured `RegExp.prototype.exec`. */\nexport function matches(re: RegExp, value: string): boolean {\n\treturn reflectApply(regExpExec, re, [value]) !== null;\n}\n\n/** `value.trim()` with the captured intrinsic. */\nexport function trim(value: string): string {\n\treturn reflectApply(stringTrim, value, []) as string;\n}\n\n/** `true` when `value` is one of the frozen package `codes`. */\nexport function isOneOf(codes: readonly string[], value: unknown): boolean {\n\tif (typeof value !== \"string\") return false;\n\tfor (let index = 0; index < codes.length; index += 1) if (codes[index] === value) return true;\n\treturn false;\n}\n\n/** `true` for a non-array object whose prototype is `Object.prototype` or `null`. A Proxy's trap may run. */\nexport function isPlainRecord(value: unknown): value is object {\n\tif (value === null || typeof value !== \"object\" || arrayIsArray(value)) return false;\n\tconst prototype = reflectGetPrototypeOf(value);\n\treturn prototype === objectPrototype || prototype === null;\n}\n\n/**\n * Read one own data property. Absent is `undefined`; an accessor is refused\n * through `fail` without being called.\n */\nexport function readOwn(target: object, key: string, field: string, fail: Fail): unknown {\n\tconst descriptor = reflectGetOwnPropertyDescriptor(target, key);\n\tif (descriptor === undefined) return undefined;\n\tif (!objectHasOwn(descriptor, \"value\")) return fail(\"accessor\", field);\n\treturn descriptor.value;\n}\n\n/** `undefined` for an absent value, the value for a primitive, {@link NOT_PRIMITIVE} otherwise. */\nexport function primitive(value: unknown): unknown {\n\tif (value === null || (typeof value !== \"object\" && typeof value !== \"function\")) return value;\n\treturn NOT_PRIMITIVE;\n}\n\n/**\n * The ISO-8601 form of a real `Date` with a finite time, or `undefined`.\n * Computed with the intrinsics, so an overridden `toISOString`, `getTime`,\n * `toJSON` or `Symbol.toPrimitive` is never called; a Proxy is not a date.\n */\nexport function isoDate(value: unknown): string | undefined {\n\tconst time = timeOf(value);\n\tif (!numberIsFinite(time)) return undefined;\n\treturn reflectApply(dateToISOString, value, []) as string;\n}\n\n/** The time value of a real `Date`, or `NaN` for anything else. */\nexport function timeOf(value: unknown): number {\n\tif (value === null || typeof value !== \"object\") return NaN;\n\ttry {\n\t\t// Throws for anything without a [[DateValue]] slot, a Proxy included,\n\t\t// before any of the value's own code could run.\n\t\treturn reflectApply(dateGetTime, value, []) as number;\n\t} catch {\n\t\treturn NaN;\n\t}\n}\n\n/** A real `Date` or a date string as ISO-8601, or `undefined`. */\nexport function isoFromDateOrString(value: unknown): string | undefined {\n\tif (typeof value === \"string\") return isoDate(new DateConstructor(value));\n\treturn isoDate(value);\n}\n\n/**\n * Copy an option list by index from its own `length`. Holes and\n * non-primitive elements are kept as `undefined` and {@link NOT_PRIMITIVE}\n * so validation can name the index; a non-array is {@link NOT_PRIMITIVE}.\n */\nexport function primitiveList(value: unknown, field: string, fail: Fail): unknown {\n\tif (!arrayIsArray(value)) return value === undefined ? undefined : NOT_PRIMITIVE;\n\tconst length = listLength(value, field, fail);\n\tconst copy: unknown[] = [];\n\tfor (let index = 0; index < length; index += 1) {\n\t\tdefine(copy, index, primitive(readOwn(value, `${index}`, `${field}[${index}]`, fail)));\n\t}\n\treturn objectFreeze(copy);\n}\n\n/** The strings of an option list, in order; other elements and holes are skipped. `undefined` for a non-array. */\nexport function stringList(value: unknown, field: string, fail: Fail): readonly string[] | undefined {\n\tconst copy = primitiveList(value, field, fail);\n\tif (!arrayIsArray(copy)) return undefined;\n\tconst strings: string[] = [];\n\tfor (let index = 0; index < copy.length; index += 1) {\n\t\tconst item = copy[index];\n\t\tif (typeof item === \"string\") define(strings, strings.length, item);\n\t}\n\treturn objectFreeze(strings);\n}\n\nfunction listLength(value: object, field: string, fail: Fail): number {\n\tconst length = readOwn(value, \"length\", field, fail);\n\tif (typeof length !== \"number\" || !numberIsSafeInteger(length) || length < 0) return fail(\"not_json\", field);\n\tif (length > MAX_LIST_LENGTH) return fail(\"too_large\", field);\n\treturn length;\n}\n\n/**\n * Snapshot a JSON value: primitives as they are (finite numbers only), a\n * real `Date` as its ISO string, arrays as fresh frozen arrays, plain objects\n * as frozen null-prototype objects holding their own enumerable data\n * properties (`undefined` values skipped, as `JSON.stringify` does).\n * Functions, symbols, bigints, non-finite numbers, holes, accessors,\n * non-plain objects, nesting deeper than {@link MAX_JSON_DEPTH} (a cycle\n * included) and more than {@link MAX_JSON_NODES} containers are refused\n * through `fail`, naming `field` only.\n */\nexport function snapshotJson(value: unknown, field: string, fail: Fail): WebhookJsonValue {\n\treturn copyJson(value, field, fail, 0, { nodes: 0 });\n}\n\n/** The container count several {@link snapshotJsonPart} calls share. */\nexport interface JsonNodeBudget {\n\tnodes: number;\n}\n\n/**\n * Snapshot one part of a larger JSON value as if {@link snapshotJson} had\n * reached it at `depth` with `budget.nodes` containers already counted, so\n * several parts read separately are held to the same depth and node limits\n * as the whole value read at once.\n */\nexport function snapshotJsonPart(value: unknown, field: string, fail: Fail, depth: number, budget: JsonNodeBudget): WebhookJsonValue {\n\treturn copyJson(value, field, fail, depth, budget);\n}\n\nfunction copyJson(value: unknown, field: string, fail: Fail, depth: number, budget: JsonNodeBudget): WebhookJsonValue {\n\tif (value === null || typeof value === \"string\" || typeof value === \"boolean\") return value;\n\tif (typeof value === \"number\") return numberIsFinite(value) ? value : fail(\"not_json\", field);\n\tif (typeof value !== \"object\") return fail(\"not_json\", field);\n\tif (depth >= MAX_JSON_DEPTH) return fail(\"too_deep\", field);\n\tbudget.nodes += 1;\n\tif (budget.nodes > MAX_JSON_NODES) return fail(\"too_large\", field);\n\tconst iso = isoDate(value);\n\tif (iso !== undefined) return iso;\n\tif (arrayIsArray(value)) {\n\t\tconst length = readOwn(value, \"length\", field, fail);\n\t\tif (typeof length !== \"number\" || !numberIsSafeInteger(length) || length < 0) return fail(\"not_json\", field);\n\t\tif (length > MAX_JSON_NODES) return fail(\"too_large\", field);\n\t\tconst copy: WebhookJsonValue[] = [];\n\t\tfor (let index = 0; index < length; index += 1) {\n\t\t\tconst item = readOwn(value, `${index}`, field, fail);\n\t\t\tif (item === undefined) return fail(\"hole\", field);\n\t\t\tdefine(copy, index, copyJson(item, field, fail, depth + 1, budget));\n\t\t}\n\t\treturn objectFreeze(copy);\n\t}\n\tif (!isPlainRecord(value)) return fail(\"not_plain\", field);\n\tconst keys = reflectOwnKeys(value);\n\tconst copy = objectCreate(null) as Record<string, WebhookJsonValue>;\n\tfor (let index = 0; index < keys.length; index += 1) {\n\t\tconst key = keys[index];\n\t\tif (typeof key !== \"string\") continue;\n\t\tconst descriptor = reflectGetOwnPropertyDescriptor(value, key);\n\t\tif (descriptor === undefined || descriptor.enumerable !== true) continue;\n\t\tif (!objectHasOwn(descriptor, \"value\")) return fail(\"accessor\", field);\n\t\tif (descriptor.value === undefined) continue;\n\t\tdefine(copy, key, copyJson(descriptor.value, field, fail, depth + 1, budget));\n\t}\n\treturn objectFreeze(copy);\n}\n\n/**\n * Serialize a snapshot to JSON text. It walks only package-built values\n * (frozen null-prototype objects, frozen fresh arrays, primitives), so no\n * `toJSON`, getter or prototype member is ever consulted. Strings are quoted\n * with the captured `JSON.stringify`, which reads no property of a string\n * primitive. The output is what `JSON.stringify` gives for the same data.\n */\nexport function serializeJson(value: unknown): string {\n\tif (value === null) return \"null\";\n\tif (typeof value === \"string\") return jsonStringify(value) as string;\n\tif (typeof value === \"number\") return numberIsFinite(value) ? `${value}` : \"null\";\n\tif (typeof value === \"boolean\") return value ? \"true\" : \"false\";\n\tif (typeof value !== \"object\") return \"null\";\n\tif (arrayIsArray(value)) {\n\t\tlet text = \"[\";\n\t\tfor (let index = 0; index < value.length; index += 1) {\n\t\t\tif (index > 0) text += \",\";\n\t\t\ttext += serializeJson(value[index]);\n\t\t}\n\t\treturn `${text}]`;\n\t}\n\tconst keys = reflectOwnKeys(value);\n\tlet text = \"{\";\n\tlet first = true;\n\tfor (let index = 0; index < keys.length; index += 1) {\n\t\tconst key = keys[index];\n\t\tif (typeof key !== \"string\") continue;\n\t\tconst item = (value as Record<string, unknown>)[key];\n\t\tif (item === undefined) continue;\n\t\ttext += `${first ? \"\" : \",\"}${jsonStringify(key) as string}:${serializeJson(item)}`;\n\t\tfirst = false;\n\t}\n\treturn `${text}}`;\n}\n","import type { WebhookConfigErrorCode, WebhookDeliveryErrorCode, WebhookFanOutErrorCode, WebhookGovernedActionErrorCode, WebhookInputErrorCode, WebhookProjectionErrorCode, WebhookStoreErrorCode } from \"./codes\";\nimport { apply, define, freeze, hasOwn } from \"./snapshot\";\n\n/*\n * Package errors and the one guard every exported function runs inside\n * (README, \"Security properties\", P2).\n *\n * Every error this package throws is created by a factory below, which\n * gives it a fixed code and that code's constant message, replaces its\n * native stack with fixed text, records it in a module-private WeakSet and\n * freezes it. The public constructors never touch\n * the WeakSet, so a caller constructing a `WebhookProjectionError` cannot make\n * it pass for one of ours. The guard tells the two apart with\n * `WeakSet.prototype.has` alone, which runs no Proxy trap and reads no\n * property of the thrown value; anything not in the set is dropped unread and\n * replaced by a fresh error from the entry point's factory.\n *\n * The WeakSet is per copy of the module. It is not a registry of ports or\n * predicates (ADR 0018 decision 6): it holds only errors this copy created,\n * and a second copy of the package (ESM and CommonJS loaded together) treats\n * the first copy's errors as foreign and replaces them with its own.\n */\n\nconst PROJECTION_MESSAGES: Readonly<Record<WebhookProjectionErrorCode, string>> = freeze({\n\tinvalid_envelope: \"Webhook projection failed: a required envelope or job field is missing or invalid.\",\n\tpayload_field_not_json: \"Webhook projection failed: an allowlisted payload field is not plain JSON.\",\n\tfact_field_not_json: \"Webhook projection failed: a declared fact field is not plain JSON.\",\n\taccessor_property: \"Webhook projection failed: accessor properties are not read.\",\n\tinspection_failed: \"Webhook projection failed: an input could not be inspected.\",\n\tscope_mismatch: \"Webhook projection failed: the subscription's scope does not match the event's tenant and space.\",\n});\n\nconst CONFIG_MESSAGES: Readonly<Record<WebhookConfigErrorCode, string>> = freeze({\n\tlimit_not_positive_finite: \"Webhook delivery limit must be a positive, finite number.\",\n\tlimit_not_integer: \"Webhook delivery limit must be a whole number.\",\n\tlimit_out_of_range: \"Webhook delivery limit is outside its allowed range.\",\n\tretry_schedule_empty: \"Webhook delivery retry schedule must list at least one delay.\",\n\tlimit_unreadable: \"Webhook delivery limits could not be read.\",\n});\n\nconst INPUT_MESSAGES: Readonly<Record<WebhookInputErrorCode, string>> = freeze({\n\tinput_unreadable: \"Webhook delivery input could not be read.\",\n\tobservation_unknown: \"Webhook delivery observation is not one decision 10 classifies.\",\n\tstatus_out_of_range: \"Webhook response status must be a whole number from 100 to 599.\",\n\tsignature_malformed: \"Webhook signature must be a v1=<64 lowercase hex> value.\",\n\ttimestamp_invalid: \"Webhook timestamp must be a non-negative whole number of seconds.\",\n\tevent_id_invalid: \"Webhook eventId must be printable ASCII with no control characters or surrounding spaces.\",\n\tdelivery_id_invalid: \"Webhook deliveryId must be printable ASCII with no control characters or surrounding spaces.\",\n\tattempt_invalid: \"Webhook attempt must be a positive whole number.\",\n\traw_body_not_string: \"Webhook raw body must be a string.\",\n\trandom_source_missing: \"createWebhookRetryDelay requires a random source.\",\n\trandom_sample_invalid: \"Webhook retry random source must return a number in [0, 1).\",\n\trandom_source_failed: \"Webhook retry random source failed.\",\n\tdenial_code_unknown: \"Webhook admission denial code is not in WEBHOOK_ADMISSION_DENIAL_CODES.\",\n});\n\nconst STORE_MESSAGES: Readonly<Record<WebhookStoreErrorCode, string>> = freeze({\n\tinput_invalid: \"Webhook store input is missing, malformed or not plain data.\",\n\trecord_mismatch: \"Webhook store record does not match its parent's event, tenant, space or delivery.\",\n\tdelivery_id_conflict: \"Webhook store deliveryId is already used by another subscription and event.\",\n\tcall_aborted: \"Webhook store call was aborted before the store acted.\",\n\tdeadline_passed: \"Webhook store call deadline passed before the store acted.\",\n\tclock_invalid: \"Webhook store clock failed or returned an invalid time.\",\n\tstore_failed: \"Webhook store failed.\",\n});\n\nconst FAN_OUT_MESSAGES: Readonly<Record<WebhookFanOutErrorCode, string>> = freeze({\n\tevent_past_replay_horizon: \"Webhook fan-out refused the event: it is older than the replay horizon, so no fan-out job can be stored.\",\n\tfan_out_store_failed: \"Webhook fan-out store call failed.\",\n\tfan_out_store_timeout: \"Webhook fan-out store call did not settle in time.\",\n\tpublish_aborted: \"Webhook fan-out publish was aborted before the job was stored.\",\n\tsink_failed: \"A required sink of the composite event publisher failed.\",\n\tsink_timeout: \"A required sink of the composite event publisher did not settle in time.\",\n\tclock_invalid: \"Webhook fan-out clock failed or returned an invalid time.\",\n\toptions_invalid: \"Webhook fan-out options are missing or malformed.\",\n});\n\nconst DELIVERY_MESSAGES: Readonly<Record<WebhookDeliveryErrorCode, string>> = freeze({\n\tdelivery_store_failed: \"Webhook delivery store call failed.\",\n\tdelivery_store_timeout: \"Webhook delivery store call did not settle in time.\",\n\tclock_invalid: \"Webhook delivery clock failed or returned an invalid time.\",\n\toptions_invalid: \"Webhook delivery options are missing or malformed.\",\n});\n\nconst GOVERNED_ACTION_MESSAGES: Readonly<Record<WebhookGovernedActionErrorCode, string>> = freeze({\n\toptions_invalid: \"Webhook governed-action module options are missing or malformed.\",\n});\n\nfunction messageFor(table: Readonly<Record<string, string>>, code: unknown, fallback: string): string {\n\treturn typeof code === \"string\" && hasOwn(table, code) ? table[code]! : fallback;\n}\n\nconst reflectDefineProperty = Reflect.defineProperty;\nconst objectCreate = Object.create;\n\n/**\n * An own, enumerable, writable data property, defined with a null-prototype\n * descriptor so neither `Error.prototype` nor `Object.prototype` is consulted.\n * Errors the package throws are frozen afterwards.\n */\nfunction defineField(target: object, key: string, value: unknown): void {\n\tconst descriptor = objectCreate(null) as PropertyDescriptor;\n\tdescriptor.value = value;\n\tdescriptor.enumerable = true;\n\tdescriptor.writable = true;\n\tdescriptor.configurable = true;\n\treflectDefineProperty(target, key, descriptor);\n}\n\n/**\n * A configured limit was not usable: zero, negative, `NaN`, infinite, not an\n * integer where a count is required, outside its documented range, or not\n * readable as plain data. The message is constant for the code; `field`\n * names the limit, for example `deliveryRetryDelaysMs[2]`.\n */\nexport class WebhookDeliveryConfigError extends Error {\n\tdeclare readonly code: WebhookConfigErrorCode;\n\t/** The limit that was rejected, for example `deliveryRetryDelaysMs[2]`. */\n\tdeclare readonly field: string;\n\n\tconstructor(code: WebhookConfigErrorCode, field: string) {\n\t\tsuper(messageFor(CONFIG_MESSAGES, code, \"Webhook delivery limit was rejected.\"));\n\t\tdefineField(this, \"name\", \"WebhookDeliveryConfigError\");\n\t\tdefineField(this, \"code\", code);\n\t\tdefineField(this, \"field\", field);\n\t}\n}\n\n/**\n * An envelope, job or subscription could not be projected. The message is\n * constant for the code. `field` names an envelope or job field, an option,\n * or a field name from the caller's own allowlist; never a value.\n */\nexport class WebhookProjectionError extends Error {\n\tdeclare readonly code: WebhookProjectionErrorCode;\n\t/** The envelope, job, option or allowlisted payload field at fault. */\n\tdeclare readonly field: string;\n\n\tconstructor(code: WebhookProjectionErrorCode, field: string) {\n\t\tsuper(messageFor(PROJECTION_MESSAGES, code, \"Webhook projection failed.\"));\n\t\tdefineField(this, \"name\", \"WebhookProjectionError\");\n\t\tdefineField(this, \"code\", code);\n\t\tdefineField(this, \"field\", field);\n\t}\n}\n\n/**\n * A store call was refused: its input was malformed or not plain data\n * (`input_invalid`), it broke a store invariant (`record_mismatch`,\n * `delivery_id_conflict`), it was aborted or past its deadline when the\n * store reached its write (`call_aborted`, `deadline_passed`), or the\n * store's clock failed (`clock_invalid`). Nothing was written. The message\n * is constant for the code; `field` names an input field, never a value.\n */\nexport class WebhookStoreError extends Error {\n\tdeclare readonly code: WebhookStoreErrorCode;\n\t/** The input field at fault, for example `intent.eventId`. */\n\tdeclare readonly field: string;\n\n\tconstructor(code: WebhookStoreErrorCode, field: string) {\n\t\tsuper(messageFor(STORE_MESSAGES, code, \"Webhook store call was refused.\"));\n\t\tdefineField(this, \"name\", \"WebhookStoreError\");\n\t\tdefineField(this, \"code\", code);\n\t\tdefineField(this, \"field\", field);\n\t}\n}\n\n/**\n * The fan-out publisher, the composite publisher or the fan-out cycle refused\n * or failed (`WEBHOOK_FAN_OUT_ERROR_CODES`). The message is constant for the\n * code; `field` names an option, a store method or a sink name from the\n * application's own configuration, never an event value.\n */\nexport class WebhookFanOutError extends Error {\n\tdeclare readonly code: WebhookFanOutErrorCode;\n\t/** The option, store method or sink at fault, for example `insertFanOutJob`. */\n\tdeclare readonly field: string;\n\n\tconstructor(code: WebhookFanOutErrorCode, field: string) {\n\t\tsuper(messageFor(FAN_OUT_MESSAGES, code, \"Webhook fan-out failed.\"));\n\t\tdefineField(this, \"name\", \"WebhookFanOutError\");\n\t\tdefineField(this, \"code\", code);\n\t\tdefineField(this, \"field\", field);\n\t}\n}\n\n/**\n * The delivery cycle could not run (`WEBHOOK_DELIVERY_ERROR_CODES`). The\n * message is constant for the code; `field` names an option or a store\n * method, never a value.\n */\nexport class WebhookDeliveryError extends Error {\n\tdeclare readonly code: WebhookDeliveryErrorCode;\n\t/** The option or store method at fault, for example `claimDeliveryIntents`. */\n\tdeclare readonly field: string;\n\n\tconstructor(code: WebhookDeliveryErrorCode, field: string) {\n\t\tsuper(messageFor(DELIVERY_MESSAGES, code, \"Webhook delivery failed.\"));\n\t\tdefineField(this, \"name\", \"WebhookDeliveryError\");\n\t\tdefineField(this, \"code\", code);\n\t\tdefineField(this, \"field\", field);\n\t}\n}\n\n/**\n * The governed-action module could not be built\n * (`WEBHOOK_GOVERNED_ACTION_ERROR_CODES`). The message is constant for the\n * code; `field` names an option, never a value.\n */\nexport class WebhookGovernedActionError extends Error {\n\tdeclare readonly code: WebhookGovernedActionErrorCode;\n\t/** The option at fault, for example `secretReferences.verify`. */\n\tdeclare readonly field: string;\n\n\tconstructor(code: WebhookGovernedActionErrorCode, field: string) {\n\t\tsuper(messageFor(GOVERNED_ACTION_MESSAGES, code, \"Webhook governed-action module could not be built.\"));\n\t\tdefineField(this, \"name\", \"WebhookGovernedActionError\");\n\t\tdefineField(this, \"code\", code);\n\t\tdefineField(this, \"field\", field);\n\t}\n}\n\nconst created = new WeakSet<object>();\nconst weakSetAdd = WeakSet.prototype.add;\nconst weakSetHas = WeakSet.prototype.has;\nconst TypeErrorConstructor = TypeError;\nconst RangeErrorConstructor = RangeError;\n\n/**\n * Register a factory-made error and freeze it. Its native `stack` is\n * replaced first with fixed package text: V8 frames name the functions on\n * the call stack, and a caller can name its own function (a Proxy trap, a\n * getter, a callback that calls a package helper) after a secret. Replacing\n * it before anything reads it also means `Error.prepareStackTrace` is never\n * consulted for a package error.\n */\nfunction mark<E extends Error>(error: E, name: string, code: string): E {\n\tconst stack = objectCreate(null) as PropertyDescriptor;\n\tstack.value = `${name}: ${code}`;\n\tstack.enumerable = false;\n\tstack.writable = false;\n\tstack.configurable = false;\n\tif (!reflectDefineProperty(error, \"stack\", stack)) throw new TypeErrorConstructor(\"Webhook delivery could not seal an error.\");\n\tapply(weakSetAdd, created, [error]);\n\treturn freeze(error);\n}\n\n/** `true` only for an error one of this module's factories created. Runs no code of `value`. */\nfunction isPackageError(value: unknown): boolean {\n\treturn (typeof value === \"object\" || typeof value === \"function\") && value !== null && apply(weakSetHas, created, [value]) === true;\n}\n\n/** @internal A package-created, frozen projection error. */\nexport function projectionError(code: WebhookProjectionErrorCode, field: string): WebhookProjectionError {\n\treturn mark(new WebhookProjectionError(code, field), \"WebhookProjectionError\", code);\n}\n\n/** @internal A package-created, frozen limit error. */\nexport function configError(code: WebhookConfigErrorCode, field: string): WebhookDeliveryConfigError {\n\treturn mark(new WebhookDeliveryConfigError(code, field), \"WebhookDeliveryConfigError\", code);\n}\n\n/** @internal A package-created, frozen store error. */\nexport function storeError(code: WebhookStoreErrorCode, field: string): WebhookStoreError {\n\treturn mark(new WebhookStoreError(code, field), \"WebhookStoreError\", code);\n}\n\n/** @internal A package-created, frozen fan-out error. */\nexport function fanOutError(code: WebhookFanOutErrorCode, field: string): WebhookFanOutError {\n\treturn mark(new WebhookFanOutError(code, field), \"WebhookFanOutError\", code);\n}\n\n/** @internal A package-created, frozen delivery-cycle error. */\nexport function deliveryError(code: WebhookDeliveryErrorCode, field: string): WebhookDeliveryError {\n\treturn mark(new WebhookDeliveryError(code, field), \"WebhookDeliveryError\", code);\n}\n\n/** @internal A package-created, frozen governed-action module error. */\nexport function governedActionError(code: WebhookGovernedActionErrorCode, field: string): WebhookGovernedActionError {\n\treturn mark(new WebhookGovernedActionError(code, field), \"WebhookGovernedActionError\", code);\n}\n\n/** @internal A package-created, frozen `TypeError` or `RangeError` carrying `code`. */\nexport function inputError(kind: \"type\" | \"range\", code: WebhookInputErrorCode): TypeError | RangeError {\n\tconst message = INPUT_MESSAGES[code];\n\tconst error = kind === \"type\" ? new TypeErrorConstructor(message) : new RangeErrorConstructor(message);\n\tdefine(error, \"code\", code);\n\treturn mark(error, kind === \"type\" ? \"TypeError\" : \"RangeError\", code);\n}\n\n/**\n * @internal Run an entry point. A package-created error passes through\n * unchanged; anything else thrown (by a Proxy trap, an injected callback or\n * the engine) is never inspected and is replaced by `replacement()`.\n */\nexport function guard<T>(run: () => T, replacement: () => Error): T {\n\ttry {\n\t\treturn run();\n\t} catch (thrown) {\n\t\tif (isPackageError(thrown)) throw thrown;\n\t\tthrow replacement();\n\t}\n}\n\n/** @internal Run a total function: any throw, package-created or not, yields `fallback()` unread. */\nexport function guardOr<T>(run: () => T, fallback: () => T): T {\n\ttry {\n\t\treturn run();\n\t} catch {\n\t\treturn fallback();\n\t}\n}\n","import { configError, guard } from \"./errors\";\nimport {\n\tdefine,\n\temptyMap,\n\tfreeze,\n\tisArray,\n\tisPlainRecord,\n\tnumberIsFinite,\n\tnumberIsSafeInteger,\n\tprimitive,\n\tprimitiveList,\n\treadOwn,\n\ttype Fail,\n} from \"./snapshot\";\n\n/**\n * Every bound the delivery lifecycle relies on (R4). All values are\n * milliseconds or counts and must be positive and finite;\n * {@link resolveWebhookDeliveryLimits} enforces that.\n */\nexport interface WebhookDeliveryLimits {\n\t/** Attempts per delivery intent before dead letter, including the first. */\n\treadonly maxDeliveryAttempts: number;\n\t/** Delays before attempts 2, 3, ...; the last entry repeats if attempts outnumber it. */\n\treadonly deliveryRetryDelaysMs: readonly number[];\n\t/** Processing deadline persisted on an intent at creation. */\n\treadonly deliveryDeadlineMs: number;\n\t/** Attempts per fan-out job before dead letter. */\n\treadonly maxFanOutAttempts: number;\n\t/** Fan-out retry delays; the last entry repeats. */\n\treadonly fanOutRetryDelaysMs: readonly number[];\n\t/** Processing deadline persisted on a fan-out job at creation. */\n\treadonly fanOutDeadlineMs: number;\n\t/** Bound on one transport call, from handoff to settled response. */\n\treadonly attemptTimeoutMs: number;\n\t/** Bound on every other awaited port call, stores included. */\n\treadonly portTimeoutMs: number;\n\t/** Jitter added to a retry delay, as a fraction of it, in `(0, 1]`. */\n\treadonly retryJitterRatio: number;\n\t/** The longest `Retry-After` honoured; longer requests are clamped to it. */\n\treadonly maxRetryAfterMs: number;\n\t/**\n\t * The replay horizon (R5): how long after an event's `recordedAt` the\n\t * delivery store accepts a fan-out job, intent or denial for it, accepts a\n\t * requeue of one, and keeps its records and tombstones. A replay older\n\t * than this is rejected as `past_horizon`. It must be a whole number of\n\t * milliseconds no shorter than `fanOutDeadlineMs + deliveryDeadlineMs`,\n\t * and should be much longer: it also has to cover the Host relay budget,\n\t * how long a Host outbox dead letter may wait for requeue, and how long an\n\t * operator may take to requeue a webhook dead letter. Pass the same value\n\t * to the delivery store.\n\t */\n\treadonly replayHorizonMs: number;\n}\n\nconst MINUTE = 60_000;\nconst HOUR = 60 * MINUTE;\nconst DAY = 24 * HOUR;\n\n/** The largest millisecond offset a JavaScript `Date` represents, so `now - horizon` stays a valid time. */\nexport const WEBHOOK_MAX_REPLAY_HORIZON_MS = 8_640_000_000_000_000;\n\n/** The largest delay a JavaScript timer accepts without overflowing. */\nexport const WEBHOOK_MAX_TIMER_MS = 2_147_483_647;\n\n/**\n * Defaults. Delivery: eight attempts with AutoRefi's first seven delays\n * (1m, 5m, 15m, 1h, 6h, 12h, 24h), per ADR 0018 decision 10.\n */\nexport const DEFAULT_WEBHOOK_DELIVERY_LIMITS: WebhookDeliveryLimits = Object.freeze({\n\tmaxDeliveryAttempts: 8,\n\tdeliveryRetryDelaysMs: Object.freeze([MINUTE, 5 * MINUTE, 15 * MINUTE, HOUR, 6 * HOUR, 12 * HOUR, 24 * HOUR]),\n\tdeliveryDeadlineMs: 72 * HOUR,\n\tmaxFanOutAttempts: 24,\n\tfanOutRetryDelaysMs: Object.freeze([1_000, 5_000, 30_000, MINUTE, 5 * MINUTE, 15 * MINUTE]),\n\tfanOutDeadlineMs: 24 * HOUR,\n\tattemptTimeoutMs: 15_000,\n\tportTimeoutMs: 5_000,\n\tretryJitterRatio: 0.1,\n\tmaxRetryAfterMs: HOUR,\n\treplayHorizonMs: 30 * DAY,\n});\n\n/** Every limit, in {@link WebhookDeliveryLimits} order. */\nconst LIMIT_KEYS = Object.freeze([\n\t\"maxDeliveryAttempts\",\n\t\"deliveryRetryDelaysMs\",\n\t\"deliveryDeadlineMs\",\n\t\"maxFanOutAttempts\",\n\t\"fanOutRetryDelaysMs\",\n\t\"fanOutDeadlineMs\",\n\t\"attemptTimeoutMs\",\n\t\"portTimeoutMs\",\n\t\"retryJitterRatio\",\n\t\"maxRetryAfterMs\",\n\t\"replayHorizonMs\",\n] as const satisfies readonly (keyof WebhookDeliveryLimits)[]);\n\nconst MAX_SAFE_INTEGER = Number.MAX_SAFE_INTEGER;\n\nconst limitFail: Fail = (fault, field) => {\n\tthrow configError(fault === \"too_large\" ? \"limit_out_of_range\" : \"limit_unreadable\", field);\n};\n\n/**\n * Merge overrides onto {@link DEFAULT_WEBHOOK_DELIVERY_LIMITS} and validate\n * every limit. An override left `undefined` keeps the default. The\n * overrides are copied at entry into a snapshot, one descriptor read per\n * limit (an accessor is refused, not called), and schedules are copied by\n * index; the snapshot is validated and is what is returned, frozen. Keys\n * that are not limits are ignored.\n *\n * @throws {WebhookDeliveryConfigError} when any limit is zero, negative,\n * `NaN`, infinite, fractional where a count is required, out of range, or\n * cannot be read as plain data (`limit_unreadable`).\n */\nexport function resolveWebhookDeliveryLimits(\n\toverrides: Partial<WebhookDeliveryLimits> = {},\n): WebhookDeliveryLimits {\n\treturn guard(() => resolveLimits(overrides), () => configError(\"limit_unreadable\", \"overrides\"));\n}\n\nfunction resolveLimits(overrides: unknown): WebhookDeliveryLimits {\n\tif (!isPlainRecord(overrides)) return limitFail(\"not_plain\", \"overrides\");\n\tconst merged = emptyMap<unknown>();\n\tfor (let index = 0; index < LIMIT_KEYS.length; index += 1) {\n\t\tconst key = LIMIT_KEYS[index]!;\n\t\tconst raw = readOwn(overrides, key, key, limitFail);\n\t\tconst value = key === \"deliveryRetryDelaysMs\" || key === \"fanOutRetryDelaysMs\" ? primitiveList(raw, key, limitFail) : primitive(raw);\n\t\tdefine(merged, key, value === undefined ? DEFAULT_WEBHOOK_DELIVERY_LIMITS[key] : value);\n\t}\n\tconst limits = merged as unknown as WebhookDeliveryLimits;\n\tassertPositiveInteger(limits.maxDeliveryAttempts, \"maxDeliveryAttempts\");\n\tassertDelaySchedule(limits.deliveryRetryDelaysMs, \"deliveryRetryDelaysMs\");\n\tassertPositiveFinite(limits.deliveryDeadlineMs, \"deliveryDeadlineMs\");\n\tassertPositiveInteger(limits.maxFanOutAttempts, \"maxFanOutAttempts\");\n\tassertDelaySchedule(limits.fanOutRetryDelaysMs, \"fanOutRetryDelaysMs\");\n\tassertPositiveFinite(limits.fanOutDeadlineMs, \"fanOutDeadlineMs\");\n\tassertTimerBound(limits.attemptTimeoutMs, \"attemptTimeoutMs\");\n\tassertTimerBound(limits.portTimeoutMs, \"portTimeoutMs\");\n\tassertJitterRatio(limits.retryJitterRatio, \"retryJitterRatio\");\n\tassertPositiveFinite(limits.maxRetryAfterMs, \"maxRetryAfterMs\");\n\tassertJitteredScheduleRepresentable(limits.deliveryRetryDelaysMs, limits.retryJitterRatio, \"deliveryRetryDelaysMs\");\n\tassertJitteredScheduleRepresentable(limits.fanOutRetryDelaysMs, limits.retryJitterRatio, \"fanOutRetryDelaysMs\");\n\tassertReplayHorizon(limits.replayHorizonMs, \"replayHorizonMs\");\n\t// A job and its intents legitimately stay pending for up to both\n\t// processing deadlines; a shorter horizon would reject their own writes.\n\tif (limits.replayHorizonMs < limits.fanOutDeadlineMs + limits.deliveryDeadlineMs) {\n\t\tthrow configError(\"limit_out_of_range\", \"replayHorizonMs\");\n\t}\n\t// The snapshot's schedules are already frozen copies; freezing the map\n\t// makes the validated snapshot the returned value.\n\treturn freeze(merged) as unknown as WebhookDeliveryLimits;\n}\n\n/** @internal `value` must come from a snapshot (a primitive). */\nexport function assertPositiveFinite(value: unknown, field: string): asserts value is number {\n\tif (typeof value !== \"number\" || !numberIsFinite(value) || value <= 0) {\n\t\tthrow configError(\"limit_not_positive_finite\", field);\n\t}\n}\n\n/** @internal */\nexport function assertPositiveInteger(value: unknown, field: string): asserts value is number {\n\tassertPositiveFinite(value, field);\n\tif (!numberIsSafeInteger(value)) {\n\t\tthrow configError(\"limit_not_integer\", field);\n\t}\n}\n\n/** @internal `value` must be a snapshot list (see `primitiveList`) or a package constant. */\nexport function assertDelaySchedule(value: unknown, field: string): asserts value is readonly number[] {\n\tif (!isArray(value) || value.length === 0) {\n\t\tthrow configError(\"retry_schedule_empty\", field);\n\t}\n\t// Indexed: a hole in the input is `undefined` in the snapshot.\n\tfor (let index = 0; index < value.length; index += 1) {\n\t\tassertPositiveFinite(value[index], `${field}[${index}]`);\n\t}\n}\n\n/**\n * Every delay, with the largest jitter added, must stay a safe integer, so\n * the jittered delay is finite and exactly representable.\n *\n * @internal\n */\nexport function assertJitteredScheduleRepresentable(delays: readonly number[], jitterRatio: number, field: string): void {\n\tfor (let index = 0; index < delays.length; index += 1) {\n\t\tif (!(delays[index]! * (1 + jitterRatio) <= MAX_SAFE_INTEGER)) {\n\t\t\tthrow configError(\"limit_out_of_range\", `${field}[${index}]`);\n\t\t}\n\t}\n}\n\n/** @internal */\nexport function assertJitterRatio(value: unknown, field: string): asserts value is number {\n\tassertPositiveFinite(value, field);\n\tif (value > 1) {\n\t\tthrow configError(\"limit_out_of_range\", field);\n\t}\n}\n\n/**\n * A replay horizon must be a positive whole number of milliseconds no larger\n * than {@link WEBHOOK_MAX_REPLAY_HORIZON_MS}. The delivery stores run this at\n * construction.\n *\n * @internal `value` must be a primitive.\n */\nexport function assertReplayHorizon(value: unknown, field: string): asserts value is number {\n\tassertPositiveInteger(value, field);\n\tif (value > WEBHOOK_MAX_REPLAY_HORIZON_MS) {\n\t\tthrow configError(\"limit_out_of_range\", field);\n\t}\n}\n\nfunction assertTimerBound(value: unknown, field: string): asserts value is number {\n\tassertPositiveFinite(value, field);\n\tif (value > WEBHOOK_MAX_TIMER_MS) {\n\t\tthrow configError(\"limit_out_of_range\", field);\n\t}\n}\n","import { storeError } from \"./errors\";\nimport type { WebhookClock } from \"./ports\";\nimport {\n\tapply,\n\tdateParse,\n\tfreeze,\n\tisArray,\n\tisoDate,\n\tisoFromDateOrString,\n\tisOneOf,\n\tmatches,\n\tnumberIsSafeInteger,\n\treadOwn,\n\tserializeJson,\n\tsnapshotJson,\n\ttimeOf,\n\ttype Fail,\n} from \"./snapshot\";\nimport type { WebhookJsonObject, WebhookJsonValue } from \"./types\";\n\n/*\n * Input reading for the memory stores. A store method copies its arguments\n * into a package-owned snapshot at entry, with the same readers the pure\n * functions use (`src/snapshot.ts`): own data properties only, accessors\n * refused uncalled, `Date`s read with the intrinsics and turned into\n * ISO-8601 strings. The method then reads only the snapshot. Every refusal\n * is a package-created `WebhookStoreError` naming a field, never a value.\n */\n\nconst DateConstructor = Date;\n\nconst inputFail: Fail = (_fault, field) => {\n\tthrow storeError(\"input_invalid\", field);\n};\n\n/** A snapshot of a plain-data input record: frozen, null-prototype, dates as ISO strings. */\nexport type Snapshot = WebhookJsonObject;\n\n/** Snapshot a plain-data record argument. */\nexport function snapshotRecord(value: unknown, field: string): Snapshot {\n\tconst copy = snapshotJson(value, field, inputFail);\n\tif (copy === null || typeof copy !== \"object\" || isArray(copy)) throw storeError(\"input_invalid\", field);\n\treturn copy as Snapshot;\n}\n\n/** A nested record of a snapshot. */\nexport function nestedRecord(record: Snapshot, key: string, field: string): Snapshot {\n\tconst value = own(record, key);\n\tif (value === null || typeof value !== \"object\" || isArray(value)) throw storeError(\"input_invalid\", field);\n\treturn value as Snapshot;\n}\n\nfunction own(record: Snapshot, key: string): WebhookJsonValue | undefined {\n\treturn readOwn(record, key, key, inputFail) as WebhookJsonValue | undefined;\n}\n\n/** A non-empty string field. */\nexport function text(record: Snapshot, key: string, field: string): string {\n\tconst value = own(record, key);\n\tif (typeof value !== \"string\" || value.length === 0) throw storeError(\"input_invalid\", field);\n\treturn value;\n}\n\n/** The longest identifier a store accepts (tenant, space, subscription, event, delivery, worker and actor ids). */\nexport const MAX_IDENTIFIER_LENGTH = 256;\n\n/** C0 controls, DEL and C1 controls. */\nconst CONTROL_CHARACTER = /[\\u0000-\\u001f\\u007f-\\u009f]/;\n\n/**\n * A UTF-16 surrogate that is not half of a pair. Without the `u` flag the\n * pattern works on code units, which is what it has to inspect.\n */\nconst LONE_SURROGATE = /[\\ud800-\\udbff](?![\\udc00-\\udfff])|(?<![\\ud800-\\udbff])[\\udc00-\\udfff]/;\n\n/**\n * An identifier field: a non-empty string of at most\n * {@link MAX_IDENTIFIER_LENGTH} UTF-16 code units with no control\n * characters and no lone surrogates. Both stores read identifiers through\n * this function, so an identifier one store accepts the other accepts too.\n * No identifier contains the NUL a text key might be tempted to use as a\n * separator. Lone surrogates are refused because they have no UTF-8 form: a\n * PostgreSQL driver encodes each one as U+FFFD, so `\"t\\ud800\"` and\n * `\"t\\udc00\"` would be stored as the same tenant (`tests/postgres-live.test.ts`\n * shows the driver doing that).\n */\nexport function identifier(record: Snapshot, key: string, field: string): string {\n\tconst value = text(record, key, field);\n\tif (!isWebhookIdentifier(value)) throw storeError(\"input_invalid\", field);\n\treturn value;\n}\n\n/**\n * The identifier rule of {@link identifier} as a predicate: a non-empty\n * string of at most {@link MAX_IDENTIFIER_LENGTH} UTF-16 code units with no\n * control character and no lone surrogate. The governed actions' parameter\n * readers (src/action-parameters.ts) use it, so an id an action accepts is\n * one every store accepts.\n */\nexport function isWebhookIdentifier(value: unknown): value is string {\n\treturn typeof value === \"string\" && value.length > 0 && value.length <= MAX_IDENTIFIER_LENGTH &&\n\t\t!matches(CONTROL_CHARACTER, value) && !matches(LONE_SURROGATE, value);\n}\n\n/** An optional identifier field. */\nexport function optionalIdentifier(record: Snapshot, key: string, field: string): string | undefined {\n\treturn own(record, key) === undefined ? undefined : identifier(record, key, field);\n}\n\n/**\n * A collision-free key for a tuple of strings: the tuple's JSON encoding.\n * Distinct tuples always encode differently, whatever characters the parts\n * hold, because JSON quotes and escapes each part.\n */\nexport function compositeKey(...parts: readonly string[]): string {\n\treturn serializeJson(parts);\n}\n\n/**\n * A fresh frozen deep copy of a value the store built from snapshots:\n * null-prototype objects, arrays and primitives. It has no depth or size\n * limit, so a record the store accepted can always be copied out; the\n * input snapshot already bounded it.\n */\nexport function cloneOut<T>(value: unknown): T {\n\treturn copyTree(value) as T;\n}\n\nfunction copyTree(value: unknown): unknown {\n\tif (value === null || typeof value !== \"object\") return value;\n\tif (isArray(value)) {\n\t\tconst list: unknown[] = [];\n\t\tfor (let index = 0; index < value.length; index += 1) list[index] = copyTree(value[index]);\n\t\treturn freeze(list);\n\t}\n\tconst out = Object.create(null) as Record<string, unknown>;\n\tconst keys = Object.keys(value);\n\tfor (let index = 0; index < keys.length; index += 1) {\n\t\tconst key = keys[index]!;\n\t\tconst item = (value as Record<string, unknown>)[key];\n\t\tif (item !== undefined) out[key] = copyTree(item);\n\t}\n\treturn freeze(out);\n}\n\n/** An optional non-empty string field. */\nexport function optionalText(record: Snapshot, key: string, field: string): string | undefined {\n\treturn own(record, key) === undefined ? undefined : text(record, key, field);\n}\n\n/** A safe integer field at least `min`. */\nexport function wholeNumber(record: Snapshot, key: string, field: string, min: number): number {\n\tconst value = own(record, key);\n\tif (typeof value !== \"number\" || !numberIsSafeInteger(value) || value < min) throw storeError(\"input_invalid\", field);\n\treturn value;\n}\n\n/** An optional safe integer field at least `min`. */\nexport function optionalWholeNumber(record: Snapshot, key: string, field: string, min: number): number | undefined {\n\treturn own(record, key) === undefined ? undefined : wholeNumber(record, key, field, min);\n}\n\n/** A boolean field. */\nexport function flag(record: Snapshot, key: string, field: string): boolean {\n\tconst value = own(record, key);\n\tif (typeof value !== \"boolean\") throw storeError(\"input_invalid\", field);\n\treturn value;\n}\n\n/** A timestamp field (a `Date` or a date string in the input), as epoch milliseconds. */\nexport function instant(record: Snapshot, key: string, field: string): number {\n\tconst value = own(record, key);\n\tconst iso = typeof value === \"string\" ? isoFromDateOrString(value) : undefined;\n\tif (iso === undefined) throw storeError(\"input_invalid\", field);\n\treturn dateParse(iso);\n}\n\n/** A field that must be one of the frozen package `codes`. */\nexport function codeOf<T extends string>(record: Snapshot, key: string, codes: readonly T[], field: string): T {\n\tconst value = own(record, key);\n\tif (!isOneOf(codes, value)) throw storeError(\"input_invalid\", field);\n\treturn value as T;\n}\n\n/** A non-empty list of non-empty strings, at most 1,024 long (the snapshot's list bound applies to JSON arrays too). */\nexport function textList(record: Snapshot, key: string, field: string): readonly string[] {\n\tconst value = own(record, key);\n\tif (!isArray(value) || value.length === 0 || value.length > 1_024) throw storeError(\"input_invalid\", field);\n\tfor (let index = 0; index < value.length; index += 1) {\n\t\tconst item = value[index];\n\t\tif (typeof item !== \"string\" || item.length === 0) throw storeError(\"input_invalid\", `${field}[${index}]`);\n\t}\n\treturn value as readonly string[];\n}\n\n/** The largest epoch-millisecond value a `Date` holds. */\nexport const MAX_TIME_MS = 8_640_000_000_000_000;\n\n/** The ISO-8601 form of epoch milliseconds. */\nexport function isoOf(ms: number): string {\n\tconst iso = isoDate(new DateConstructor(ms));\n\tif (iso === undefined) throw storeError(\"store_failed\", \"time\");\n\treturn iso;\n}\n\n// ---------------------------------------------------------------------------\n// Call options\n// ---------------------------------------------------------------------------\n\nconst abortedDescriptor = typeof AbortSignal === \"function\" ? Reflect.getOwnPropertyDescriptor(AbortSignal.prototype, \"aborted\") : undefined;\nconst abortedGetter = abortedDescriptor?.get;\n\n/** The parts of {@link WebhookCallOptions} a store checks when it reaches its write. */\nexport interface CallBounds {\n\treadonly deadlineMs: number;\n\treadonly signal: object;\n}\n\nfunction isAborted(signal: object): boolean {\n\tif (abortedGetter === undefined) throw storeError(\"input_invalid\", \"options.signal\");\n\t// The intrinsic getter reads the signal's internal slot; it throws for\n\t// anything that is not a real AbortSignal and runs none of its code.\n\treturn apply(abortedGetter, signal, []) === true;\n}\n\n/** Read `{ deadline, signal }` at entry. The signal must be a real `AbortSignal`. */\nexport function readCallOptions(options: unknown): CallBounds {\n\tif (options === null || typeof options !== \"object\") throw storeError(\"input_invalid\", \"options\");\n\tconst deadline = readOwn(options, \"deadline\", \"options.deadline\", inputFail);\n\tconst deadlineMs = timeOf(deadline);\n\tif (!(deadlineMs === deadlineMs) || deadlineMs === Infinity || deadlineMs === -Infinity) throw storeError(\"input_invalid\", \"options.deadline\");\n\tconst signal = readOwn(options, \"signal\", \"options.signal\", inputFail);\n\tif (signal === null || typeof signal !== \"object\") throw storeError(\"input_invalid\", \"options.signal\");\n\ttry {\n\t\tisAborted(signal);\n\t} catch {\n\t\tthrow storeError(\"input_invalid\", \"options.signal\");\n\t}\n\treturn { deadlineMs, signal };\n}\n\n/**\n * Refuse a call that is no longer wanted at the moment the store would\n * write: its signal aborted, or its deadline is not after the store's\n * `nowMs`. Nothing has been written when this throws.\n */\nexport function assertCallWanted(bounds: CallBounds, nowMs: number): void {\n\tif (isAborted(bounds.signal)) throw storeError(\"call_aborted\", \"options.signal\");\n\tif (!(bounds.deadlineMs > nowMs)) throw storeError(\"deadline_passed\", \"options.deadline\");\n}\n\n// ---------------------------------------------------------------------------\n// Clock\n// ---------------------------------------------------------------------------\n\n/** A clock captured at construction: the object and its `now` function. */\nexport interface CapturedClock {\n\treadonly target: object;\n\treadonly now: (...args: never[]) => unknown;\n}\n\n/** Capture an injected {@link WebhookClock} at construction. */\nexport function captureClock(clock: WebhookClock | undefined): CapturedClock {\n\tif (clock === null || typeof clock !== \"object\") throw storeError(\"clock_invalid\", \"clock\");\n\tconst now = (clock as { now?: unknown }).now;\n\tif (typeof now !== \"function\") throw storeError(\"clock_invalid\", \"clock.now\");\n\treturn { target: clock, now: now as (...args: never[]) => unknown };\n}\n\n/** Read the store's clock as epoch milliseconds; a throw or an invalid `Date` is `clock_invalid`. */\nexport function readClock(clock: CapturedClock): number {\n\tlet value: unknown;\n\ttry {\n\t\tvalue = apply(clock.now, clock.target, []);\n\t} catch {\n\t\tthrow storeError(\"clock_invalid\", \"clock.now\");\n\t}\n\tconst ms = timeOf(value);\n\tif (!(ms === ms) || ms === Infinity || ms === -Infinity) throw storeError(\"clock_invalid\", \"clock.now\");\n\treturn ms;\n}\n","import {\n\tWEBHOOK_ADMISSION_DENIAL_CODES,\n\tWEBHOOK_ATTEMPT_OUTCOMES,\n\tWEBHOOK_ATTEMPT_REASON_CODES,\n\tWEBHOOK_DIAGNOSTIC_CODES,\n\ttype WebhookAdmissionDenialCode,\n\ttype WebhookAttemptOutcome,\n\ttype WebhookAttemptReasonCode,\n\ttype WebhookDiagnosticCode,\n} from \"./codes\";\nimport { configError, guard, storeError } from \"./errors\";\nimport { assertReplayHorizon, WEBHOOK_MAX_REPLAY_HORIZON_MS } from \"./limits\";\nimport type {\n\tWebhookAttemptBeginResult,\n\tWebhookDeliveryLeaseCheck,\n\tWebhookFanOutJobFence,\n\tWebhookActorEnrichmentResult,\n\tWebhookFencedInsertResult,\n\tWebhookRequeueResult,\n} from \"./ports\";\nimport { mathMin, primitive, readOwn } from \"./snapshot\";\nimport {\n\tcloneOut,\n\tcodeOf,\n\tcompositeKey,\n\tflag,\n\tidentifier,\n\tinstant,\n\tisoOf,\n\tMAX_TIME_MS,\n\tnestedRecord,\n\toptionalIdentifier,\n\toptionalWholeNumber,\n\treadCallOptions,\n\tsnapshotRecord,\n\ttext,\n\twholeNumber,\n\ttype CallBounds,\n\ttype Snapshot,\n} from \"./store-input\";\nimport type {\n\tWebhookDeliveryIntentStatus,\n\tWebhookFanOutJobStatus,\n\tWebhookRequeueEvidence,\n} from \"./types\";\n\n/*\n * What the memory and PostgreSQL delivery stores share: the readers that\n * copy and validate each method's arguments at entry, the in-memory shape of\n * a job and an intent, and the functions that render records, requeue\n * evidence and settlements from that shape. Both stores call these, so the\n * input they accept, the identifier fields they validate and the records\n * they return cannot drift apart (README, \"Stores\"). Internal: not exported\n * from the package entry point.\n */\n\nexport interface LeaseState {\n\treadonly owner: string;\n\treadonly fence: number;\n\treadonly expiresAtMs: number;\n}\n\nexport interface Leased {\n\treadonly key: string;\n\tstatus: string;\n\tavailableAtMs: number;\n\treadonly createdAtMs: number;\n\tfence: number;\n\tlease: LeaseState | undefined;\n}\n\nexport interface JobState extends Leased {\n\t/** Replaced, never mutated, by an actor enrichment; otherwise as inserted. */\n\tdraft: Snapshot;\n\treadonly tenantId: string;\n\treadonly spaceId: string;\n\treadonly anchorMs: number;\n\tstatus: WebhookFanOutJobStatus;\n\tattemptCount: number;\n\tprocessingDeadlineMs: number;\n\tcompletedAtMs: number | undefined;\n\tlastDiagnostic: WebhookDiagnosticCode | undefined;\n}\n\nexport interface IntentState extends Leased {\n\treadonly subscriptionId: string;\n\treadonly eventId: string;\n\treadonly tenantId: string;\n\treadonly spaceId: string;\n\treadonly eligibilityRevision: number;\n\treadonly body: string;\n\treadonly anchorMs: number;\n\tstatus: WebhookDeliveryIntentStatus;\n\tattemptCount: number;\n\tprocessingDeadlineMs: number;\n\tlastOutcome: { readonly outcome: WebhookAttemptOutcome; readonly reason: WebhookAttemptReasonCode } | undefined;\n\tlastDiagnostic: WebhookDiagnosticCode | undefined;\n}\n\n/** The uniqueness marker for one (subscriptionId, eventId): the tombstone. */\nexport interface MarkerState {\n\treadonly kind: \"intent\" | \"denial\";\n\treadonly subscriptionId: string;\n\treadonly eventId: string;\n\treadonly tenantId: string;\n\treadonly spaceId: string;\n\treadonly anchorMs: number;\n}\n\nexport const TERMINAL_JOB: readonly string[] = Object.freeze([\"completed\", \"dead_letter\"]);\nexport const TERMINAL_INTENT: readonly string[] = Object.freeze([\"delivered\", \"dead_letter\", \"cancelled\"]);\nconst SETTLEMENT_KINDS = Object.freeze([\"delivered\", \"retry\", \"release\", \"dead_letter\", \"cancelled\"] as const);\nconst CANCEL_REASONS = Object.freeze([\"subscription_paused\", \"subscription_deleted\"] as const);\nconst DEAD_LETTER_REASONS: readonly string[] = Object.freeze([...WEBHOOK_ATTEMPT_REASON_CODES, ...WEBHOOK_DIAGNOSTIC_CODES]);\nconst EXPECTED_STATUS = Object.freeze([\"dead_letter\"] as const);\n\n/**\n * A fresh, frozen, null-prototype deep copy of a value the store built. It\n * has no depth or size limit, so every record the store accepted can be\n * returned (`cloneOut` in src/store-input.ts).\n */\nexport function copyOut<T>(value: object): T {\n\treturn cloneOut<T>(value);\n}\n\n/** The key of one (subscriptionId, eventId) pair; JSON-encoded, so distinct pairs never collide. */\nexport function markerKey(subscriptionId: string, eventId: string): string {\n\treturn compositeKey(subscriptionId, eventId);\n}\n\nexport interface Scope {\n\treadonly tenantId: string;\n\treadonly spaceId: string;\n}\n\nexport function inScope(record: { readonly tenantId: string; readonly spaceId: string }, scope: Scope): boolean {\n\treturn record.tenantId === scope.tenantId && record.spaceId === scope.spaceId;\n}\n\n/**\n * `true` when `owner` holds the record's lease at `fence`, ignoring expiry. A\n * lease's fence is always the record's fence. Only for a decision made\n * before the store's clock is read (the PostgreSQL lock phase's tentative\n * inserts); the decision itself is {@link holds}.\n */\nexport function holdsFence(state: Leased, owner: string, fence: number): boolean {\n\treturn state.status === \"pending\" && state.lease !== undefined && state.lease.owner === owner && state.lease.fence === fence;\n}\n\n/**\n * `true` when `owner` holds the record's lease at `fence` and the lease has\n * not expired at `storeNowMs`, the store's own clock read inside the atomic\n * step (memory) or after every lock is held (PostgreSQL). Every fenced write\n * decides with it, so a write after the lease expired is refused even when\n * no other worker has reclaimed the record yet.\n */\nexport function holds(state: Leased, owner: string, fence: number, storeNowMs: number): boolean {\n\treturn holdsFence(state, owner, fence) && state.lease!.expiresAtMs > storeNowMs;\n}\n\n/** UTF-16 code unit order, as JavaScript's `<` compares strings. */\nexport function compareText(left: string, right: string): number {\n\treturn left < right ? -1 : left > right ? 1 : 0;\n}\n\n/** Entry: snapshot the arguments. Anything not package-made becomes `input_invalid`. */\nfunction entry<T>(read: () => T): T {\n\treturn guard(read, () => storeError(\"input_invalid\", \"input\"));\n}\n\n/**\n * Read a store's `replayHorizonMs` option, as the constructor of either\n * store does: an own data property, never a getter, validated by\n * `assertReplayHorizon`.\n */\nexport function readHorizonOption(options: unknown): number {\n\treturn guard(\n\t\t() => {\n\t\t\tif (options === null || typeof options !== \"object\") throw configError(\"limit_unreadable\", \"options\");\n\t\t\tconst value = primitive(readOwn(options, \"replayHorizonMs\", \"replayHorizonMs\", () => {\n\t\t\t\tthrow configError(\"limit_unreadable\", \"replayHorizonMs\");\n\t\t\t}));\n\t\t\tassertReplayHorizon(value, \"replayHorizonMs\");\n\t\t\treturn value;\n\t\t},\n\t\t() => configError(\"limit_unreadable\", \"replayHorizonMs\"),\n\t);\n}\n\n/** Read an optional test-seam function option; anything else is `input_invalid`. */\nexport function readHookOption<T extends (...args: never[]) => unknown>(options: unknown, key: string): T | undefined {\n\treturn guard(() => {\n\t\tconst hook = (options as Record<string, unknown>)[key];\n\t\tif (hook !== undefined && typeof hook !== \"function\") throw storeError(\"input_invalid\", key);\n\t\treturn hook as T | undefined;\n\t}, () => storeError(\"input_invalid\", key));\n}\n\nfunction readScope(input: Snapshot, field: string): Scope {\n\treturn { tenantId: identifier(input, \"tenantId\", `${field}.tenantId`), spaceId: identifier(input, \"spaceId\", `${field}.spaceId`) };\n}\n\nexport interface FencedInput {\n\treadonly owner: string;\n\treadonly fence: number;\n\treadonly nowMs: number;\n}\n\nfunction readFenced(input: Snapshot): FencedInput {\n\treturn { owner: identifier(input, \"owner\", \"input.owner\"), fence: wholeNumber(input, \"fence\", \"input.fence\", 0), nowMs: instant(input, \"now\", \"input.now\") };\n}\n\nexport interface ClaimInput {\n\treadonly workerId: string;\n\treadonly leaseDurationMs: number;\n\treadonly limit: number;\n\treadonly nowMs: number;\n}\n\nfunction readClaim(request: unknown): ClaimInput {\n\tconst input = snapshotRecord(request, \"request\");\n\tconst claim: ClaimInput = {\n\t\tworkerId: identifier(input, \"workerId\", \"request.workerId\"),\n\t\tleaseDurationMs: wholeNumber(input, \"leaseDurationMs\", \"request.leaseDurationMs\", 1),\n\t\tlimit: wholeNumber(input, \"limit\", \"request.limit\", 1),\n\t\tnowMs: instant(input, \"now\", \"request.now\"),\n\t};\n\t// The lease expiry must be a representable time, checked before anything is leased.\n\tif (claim.nowMs + claim.leaseDurationMs > MAX_TIME_MS) throw storeError(\"input_invalid\", \"request.leaseDurationMs\");\n\treturn claim;\n}\n\nexport interface RequeueInput {\n\treadonly expectedFence: number;\n\treadonly requestedBy: string;\n\treadonly requestedAtMs: number;\n\treadonly processingDeadlineMs: number;\n\treadonly actionInvocationId: string | undefined;\n}\n\nfunction readRequeueRequest(input: Snapshot): RequeueInput {\n\tconst request = nestedRecord(input, \"request\", \"input.request\");\n\tcodeOf(request, \"expectedStatus\", EXPECTED_STATUS, \"input.request.expectedStatus\");\n\treturn {\n\t\texpectedFence: wholeNumber(request, \"expectedFence\", \"input.request.expectedFence\", 0),\n\t\trequestedBy: identifier(request, \"requestedBy\", \"input.request.requestedBy\"),\n\t\trequestedAtMs: instant(request, \"requestedAt\", \"input.request.requestedAt\"),\n\t\tprocessingDeadlineMs: instant(request, \"processingDeadline\", \"input.request.processingDeadline\"),\n\t\tactionInvocationId: optionalIdentifier(request, \"actionInvocationId\", \"input.request.actionInvocationId\"),\n\t};\n}\n\nfunction readParent(parent: unknown): WebhookFanOutJobFence {\n\tconst input = snapshotRecord(parent, \"parent\");\n\treturn { eventId: identifier(input, \"eventId\", \"parent.eventId\"), owner: identifier(input, \"owner\", \"parent.owner\"), fence: wholeNumber(input, \"fence\", \"parent.fence\", 0) };\n}\n\n// ---------------------------------------------------------------------------\n// Per-method entry readers. Each copies and validates every argument, the\n// call options included, and refuses malformed input as `input_invalid`\n// before the store does anything else.\n// ---------------------------------------------------------------------------\n\nexport function readInsertFanOutJobCall(job: unknown, options: unknown) {\n\treturn entry(() => ({ bounds: readCallOptions(options), job: readJobDraft(job) }));\n}\n\nexport function readClaimCall(request: unknown, options: unknown) {\n\treturn entry(() => ({ bounds: readCallOptions(options), claim: readClaim(request) }));\n}\n\nexport function readJobFencedCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\treturn { bounds: readCallOptions(options), fenced: readFenced(snap), eventId: identifier(snap, \"eventId\", \"input.eventId\") };\n\t});\n}\n\nexport function readRescheduleCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\treturn {\n\t\t\tbounds: readCallOptions(options),\n\t\t\tfenced: readFenced(snap),\n\t\t\teventId: identifier(snap, \"eventId\", \"input.eventId\"),\n\t\t\tavailableAtMs: instant(snap, \"availableAt\", \"input.availableAt\"),\n\t\t\tdiagnostic: codeOf(snap, \"diagnostic\", WEBHOOK_DIAGNOSTIC_CODES, \"input.diagnostic\"),\n\t\t};\n\t});\n}\n\n/** The lease duration a renewal asks for: a whole number of ms whose expiry from `now` is a representable time. */\nfunction readRenewal(snap: Snapshot, fenced: FencedInput): number {\n\tconst leaseDurationMs = wholeNumber(snap, \"leaseDurationMs\", \"input.leaseDurationMs\", 1);\n\tif (fenced.nowMs + leaseDurationMs > MAX_TIME_MS) throw storeError(\"input_invalid\", \"input.leaseDurationMs\");\n\treturn leaseDurationMs;\n}\n\nexport function readRenewJobCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\tconst fenced = readFenced(snap);\n\t\treturn { bounds: readCallOptions(options), fenced, eventId: identifier(snap, \"eventId\", \"input.eventId\"), leaseDurationMs: readRenewal(snap, fenced) };\n\t});\n}\n\nexport function readRenewIntentCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\tconst fenced = readFenced(snap);\n\t\treturn { bounds: readCallOptions(options), fenced, deliveryId: identifier(snap, \"deliveryId\", \"input.deliveryId\"), leaseDurationMs: readRenewal(snap, fenced) };\n\t});\n}\n\n/**\n * The expiry a renewal sets on a lease the caller holds: the later of the\n * current expiry and the earlier of `nowMs + leaseDurationMs` (the caller's\n * `now`, as a claim uses it) and the record's processing deadline. So a\n * renewal never shortens a lease and never extends one past the deadline.\n * Whether the caller holds the lease is decided by {@link holds} first.\n */\nexport function renewedExpiryMs(state: Leased & { readonly processingDeadlineMs: number }, nowMs: number, leaseDurationMs: number): number {\n\tconst asked = mathMin(nowMs + leaseDurationMs, state.processingDeadlineMs);\n\tconst current = state.lease!.expiresAtMs;\n\treturn asked > current ? asked : current;\n}\n\nexport function readDeadLetterJobCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\treturn {\n\t\t\tbounds: readCallOptions(options),\n\t\t\tfenced: readFenced(snap),\n\t\t\teventId: identifier(snap, \"eventId\", \"input.eventId\"),\n\t\t\tdiagnostic: codeOf(snap, \"diagnostic\", WEBHOOK_DIAGNOSTIC_CODES, \"input.diagnostic\"),\n\t\t};\n\t});\n}\n\nexport interface EnrichmentInput extends RequeueInput {\n\treadonly actorId: string;\n\treadonly actorType: string;\n}\n\n/** `enrichFanOutJobActor`: a scope, an `eventId` and the request, with the actor read field by field. */\nexport function readJobEnrichmentCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\tconst request = nestedRecord(snap, \"request\", \"input.request\");\n\t\tconst actor = nestedRecord(request, \"actor\", \"input.request.actor\");\n\t\tconst read: EnrichmentInput = {\n\t\t\texpectedFence: wholeNumber(request, \"expectedFence\", \"input.request.expectedFence\", 0),\n\t\t\trequestedBy: identifier(request, \"requestedBy\", \"input.request.requestedBy\"),\n\t\t\trequestedAtMs: instant(request, \"requestedAt\", \"input.request.requestedAt\"),\n\t\t\tprocessingDeadlineMs: instant(request, \"processingDeadline\", \"input.request.processingDeadline\"),\n\t\t\tactionInvocationId: optionalIdentifier(request, \"actionInvocationId\", \"input.request.actionInvocationId\"),\n\t\t\tactorId: identifier(actor, \"actorId\", \"input.request.actor.actorId\"),\n\t\t\tactorType: identifier(actor, \"actorType\", \"input.request.actor.actorType\"),\n\t\t};\n\t\treturn { bounds: readCallOptions(options), scope: readScope(snap, \"input\"), eventId: identifier(snap, \"eventId\", \"input.eventId\"), request: read };\n\t});\n}\n\nexport function readJobRequeueCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\treturn { bounds: readCallOptions(options), scope: readScope(snap, \"input\"), eventId: identifier(snap, \"eventId\", \"input.eventId\"), request: readRequeueRequest(snap) };\n\t});\n}\n\n/** `readFanOutJob` and `listRequeueEvidence`: a scope and an `eventId`. */\nexport function readEventCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\treturn { bounds: readCallOptions(options), scope: readScope(snap, \"input\"), eventId: identifier(snap, \"eventId\", \"input.eventId\") };\n\t});\n}\n\nexport function readInsertIntentCall(intent: unknown, parent: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(intent, \"intent\");\n\t\tconst fence = readParent(parent);\n\t\tconst read = {\n\t\t\tbounds: readCallOptions(options),\n\t\t\tparent: fence,\n\t\t\tdeliveryId: identifier(snap, \"deliveryId\", \"intent.deliveryId\"),\n\t\t\tsubscriptionId: identifier(snap, \"subscriptionId\", \"intent.subscriptionId\"),\n\t\t\teventId: identifier(snap, \"eventId\", \"intent.eventId\"),\n\t\t\ttenantId: identifier(snap, \"tenantId\", \"intent.tenantId\"),\n\t\t\tspaceId: identifier(snap, \"spaceId\", \"intent.spaceId\"),\n\t\t\teligibilityRevision: wholeNumber(snap, \"eligibilityRevision\", \"intent.eligibilityRevision\", 1),\n\t\t\tbody: text(snap, \"body\", \"intent.body\"),\n\t\t\tavailableAtMs: instant(snap, \"availableAt\", \"intent.availableAt\"),\n\t\t\tprocessingDeadlineMs: instant(snap, \"processingDeadline\", \"intent.processingDeadline\"),\n\t\t\tcreatedAtMs: instant(snap, \"createdAt\", \"intent.createdAt\"),\n\t\t};\n\t\tif (read.eventId !== fence.eventId) throw storeError(\"record_mismatch\", \"intent.eventId\");\n\t\treturn read;\n\t});\n}\n\nexport function readDenialCall(record: unknown, parent: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(record, \"record\");\n\t\tconst fence = readParent(parent);\n\t\tconst read = {\n\t\t\tbounds: readCallOptions(options),\n\t\t\tparent: fence,\n\t\t\tsubscriptionId: identifier(snap, \"subscriptionId\", \"record.subscriptionId\"),\n\t\t\teventId: identifier(snap, \"eventId\", \"record.eventId\"),\n\t\t\ttenantId: identifier(snap, \"tenantId\", \"record.tenantId\"),\n\t\t\tspaceId: identifier(snap, \"spaceId\", \"record.spaceId\"),\n\t\t\teligibilityRevision: wholeNumber(snap, \"eligibilityRevision\", \"record.eligibilityRevision\", 1),\n\t\t\tcode: codeOf<WebhookAdmissionDenialCode>(snap, \"code\", WEBHOOK_ADMISSION_DENIAL_CODES, \"record.code\"),\n\t\t\trecordedAtMs: instant(snap, \"recordedAt\", \"record.recordedAt\"),\n\t\t};\n\t\tif (read.eventId !== fence.eventId) throw storeError(\"record_mismatch\", \"record.eventId\");\n\t\treturn read;\n\t});\n}\n\n/** The denial record a store keeps, built from a validated call. */\nexport function denialRecord(call: ReturnType<typeof readDenialCall>): Snapshot {\n\treturn copyOut<Snapshot>({\n\t\tsubscriptionId: call.subscriptionId,\n\t\teventId: call.eventId,\n\t\ttenantId: call.tenantId,\n\t\tspaceId: call.spaceId,\n\t\teligibilityRevision: call.eligibilityRevision,\n\t\tcode: call.code,\n\t\trecordedAt: isoOf(call.recordedAtMs),\n\t});\n}\n\nexport function readLeaseCheckCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\treturn {\n\t\t\tbounds: readCallOptions(options),\n\t\t\tscope: readScope(snap, \"input\"),\n\t\t\tdeliveryId: identifier(snap, \"deliveryId\", \"input.deliveryId\"),\n\t\t\tfenced: readFenced(snap),\n\t\t};\n\t});\n}\n\nexport function readAppendAttemptCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\tconst attempt = nestedRecord(snap, \"attempt\", \"input.attempt\");\n\t\tconst httpStatus = optionalWholeNumber(attempt, \"httpStatus\", \"input.attempt.httpStatus\", 100);\n\t\tif (httpStatus !== undefined && httpStatus > 599) throw storeError(\"input_invalid\", \"input.attempt.httpStatus\");\n\t\tconst record = copyOut<Snapshot>({\n\t\t\tdeliveryId: identifier(attempt, \"deliveryId\", \"input.attempt.deliveryId\"),\n\t\t\tsubscriptionId: identifier(attempt, \"subscriptionId\", \"input.attempt.subscriptionId\"),\n\t\t\teventId: identifier(attempt, \"eventId\", \"input.attempt.eventId\"),\n\t\t\tattempt: wholeNumber(attempt, \"attempt\", \"input.attempt.attempt\", 1),\n\t\t\tconfigurationVersion: wholeNumber(attempt, \"configurationVersion\", \"input.attempt.configurationVersion\", 1),\n\t\t\tstartedAt: isoOf(instant(attempt, \"startedAt\", \"input.attempt.startedAt\")),\n\t\t\tfinishedAt: isoOf(instant(attempt, \"finishedAt\", \"input.attempt.finishedAt\")),\n\t\t\toutcome: codeOf(attempt, \"outcome\", WEBHOOK_ATTEMPT_OUTCOMES, \"input.attempt.outcome\"),\n\t\t\treason: codeOf(attempt, \"reason\", WEBHOOK_ATTEMPT_REASON_CODES, \"input.attempt.reason\"),\n\t\t\thttpStatus,\n\t\t});\n\t\treturn {\n\t\t\tbounds: readCallOptions(options),\n\t\t\tfenced: readFenced(snap),\n\t\t\trecord,\n\t\t\tdeliveryId: record[\"deliveryId\"] as string,\n\t\t\tsubscriptionId: record[\"subscriptionId\"] as string,\n\t\t\teventId: record[\"eventId\"] as string,\n\t\t};\n\t});\n}\n\n/**\n * `beginAttempt`: the fence, and the start of the attempt. The record kept\n * holds only the `WebhookDeliveryAttemptStart` fields, read one by one.\n */\nexport function readBeginAttemptCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\tconst attempt = nestedRecord(snap, \"attempt\", \"input.attempt\");\n\t\tconst record = copyOut<Snapshot>({\n\t\t\tdeliveryId: identifier(attempt, \"deliveryId\", \"input.attempt.deliveryId\"),\n\t\t\tsubscriptionId: identifier(attempt, \"subscriptionId\", \"input.attempt.subscriptionId\"),\n\t\t\teventId: identifier(attempt, \"eventId\", \"input.attempt.eventId\"),\n\t\t\tattempt: wholeNumber(attempt, \"attempt\", \"input.attempt.attempt\", 1),\n\t\t\tconfigurationVersion: wholeNumber(attempt, \"configurationVersion\", \"input.attempt.configurationVersion\", 1),\n\t\t\tstartedAt: isoOf(instant(attempt, \"startedAt\", \"input.attempt.startedAt\")),\n\t\t});\n\t\treturn {\n\t\t\tbounds: readCallOptions(options),\n\t\t\tfenced: readFenced(snap),\n\t\t\trecord,\n\t\t\tdeliveryId: record[\"deliveryId\"] as string,\n\t\t\tsubscriptionId: record[\"subscriptionId\"] as string,\n\t\t\teventId: record[\"eventId\"] as string,\n\t\t};\n\t});\n}\n\n/** `finishAttempt`: a scope, the begun attempt's key, and its outcome. */\nexport function readFinishAttemptCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\tconst finish = nestedRecord(snap, \"finish\", \"input.finish\");\n\t\tconst httpStatus = optionalWholeNumber(finish, \"httpStatus\", \"input.finish.httpStatus\", 100);\n\t\tif (httpStatus !== undefined && httpStatus > 599) throw storeError(\"input_invalid\", \"input.finish.httpStatus\");\n\t\treturn {\n\t\t\tbounds: readCallOptions(options),\n\t\t\tscope: readScope(snap, \"input\"),\n\t\t\tdeliveryId: identifier(snap, \"deliveryId\", \"input.deliveryId\"),\n\t\t\tfence: wholeNumber(snap, \"fence\", \"input.fence\", 0),\n\t\t\t// Read like an identifier; an error names the field, never the value.\n\t\t\treceipt: identifier(snap, \"receipt\", \"input.receipt\"),\n\t\t\trecord: copyOut<Snapshot>({\n\t\t\t\tfinishedAt: isoOf(instant(finish, \"finishedAt\", \"input.finish.finishedAt\")),\n\t\t\t\toutcome: codeOf(finish, \"outcome\", WEBHOOK_ATTEMPT_OUTCOMES, \"input.finish.outcome\"),\n\t\t\t\treason: codeOf(finish, \"reason\", WEBHOOK_ATTEMPT_REASON_CODES, \"input.finish.reason\"),\n\t\t\t\thttpStatus,\n\t\t\t}),\n\t\t};\n\t});\n}\n\n/** The key of the attempt begun under one lease of one intent. */\nexport function attemptKey(deliveryId: string, fence: number): string {\n\treturn compositeKey(deliveryId, `${fence}`);\n}\n\n/**\n * Whether `beginAttempt` may record an attempt on `intent`: pending, leased\n * to the caller at its fence, and the lease not expired at the store's\n * clock read in the atomic step.\n */\nexport function mayBegin(intent: IntentState | undefined, fenced: FencedInput, storeNowMs: number): intent is IntentState {\n\treturn intent !== undefined && holds(intent, fenced.owner, fenced.fence, storeNowMs);\n}\n\n/**\n * One attempt log entry as `listDeliveryAttempts` returns it. `fence` is\n * `undefined` for an entry appended whole; otherwise the entry was begun\n * under that fence and `finish` is its outcome, or `undefined` while none is\n * recorded.\n */\nexport function attemptEntryOut(start: Snapshot, fence: number | undefined, finish: Snapshot | undefined): object {\n\tif (fence === undefined) return start;\n\tif (finish === undefined) return { ...start, fence, outcome: \"in_flight\" };\n\treturn { ...start, ...finish, fence };\n}\n\nexport function beginResult(receipt: string | undefined): WebhookAttemptBeginResult {\n\treturn copyOut<WebhookAttemptBeginResult>(receipt === undefined ? { begun: false } : { begun: true, receipt });\n}\n\nexport function readSettleCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\treturn { bounds: readCallOptions(options), fenced: readFenced(snap), deliveryId: identifier(snap, \"deliveryId\", \"input.deliveryId\"), settlement: readSettlement(snap) };\n\t});\n}\n\nexport function readCancelCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\tinstant(snap, \"now\", \"input.now\");\n\t\treturn {\n\t\t\tbounds: readCallOptions(options),\n\t\t\tscope: readScope(snap, \"input\"),\n\t\t\tsubscriptionId: identifier(snap, \"subscriptionId\", \"input.subscriptionId\"),\n\t\t\treason: codeOf(snap, \"reason\", CANCEL_REASONS, \"input.reason\"),\n\t\t\tbeforeRevision: wholeNumber(snap, \"beforeRevision\", \"input.beforeRevision\", 1),\n\t\t};\n\t});\n}\n\nexport function readIntentRequeueCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\treturn { bounds: readCallOptions(options), scope: readScope(snap, \"input\"), deliveryId: identifier(snap, \"deliveryId\", \"input.deliveryId\"), request: readRequeueRequest(snap) };\n\t});\n}\n\n/** `readDeliveryIntent` and `listDeliveryAttempts`: a scope and a `deliveryId`. */\nexport function readDeliveryCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\treturn { bounds: readCallOptions(options), scope: readScope(snap, \"input\"), deliveryId: identifier(snap, \"deliveryId\", \"input.deliveryId\") };\n\t});\n}\n\nexport function readTombstoneCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\treturn {\n\t\t\tbounds: readCallOptions(options),\n\t\t\tscope: readScope(snap, \"input\"),\n\t\t\tsubscriptionId: identifier(snap, \"subscriptionId\", \"input.subscriptionId\"),\n\t\t\teventId: identifier(snap, \"eventId\", \"input.eventId\"),\n\t\t};\n\t});\n}\n\nexport function readPurgeCall(input: unknown, options: unknown): { readonly bounds: CallBounds; readonly limit: number } {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\treturn { bounds: readCallOptions(options), limit: wholeNumber(snap, \"limit\", \"input.limit\", 1) };\n\t});\n}\n\n// ---------------------------------------------------------------------------\n// Job drafts\n// ---------------------------------------------------------------------------\n\nexport interface JobDraftInput {\n\treadonly draft: Snapshot;\n\treadonly eventId: string;\n\treadonly tenantId: string;\n\treadonly spaceId: string;\n\treadonly anchorMs: number;\n\treadonly createdAtMs: number;\n\treadonly processingDeadlineMs: number;\n}\n\nconst ACTOR_STATES = Object.freeze([\"present\", \"absent\"] as const);\n\nconst PAYLOAD_CLASSIFICATIONS = Object.freeze([\"public\", \"internal\", \"confidential\", \"restricted\"] as const);\nconst CONSISTENCIES = Object.freeze([\"authoritative-now\", \"provisional-until-reconciled\"] as const);\nconst ABSENT_REASONS = Object.freeze([\"suppressed\", \"legacy\"] as const);\nconst ANY_INTEGER = Number.MIN_SAFE_INTEGER;\n\n/**\n * Rebuild the event metadata from an explicit allowlist of\n * `WebhookEventMetadata` fields (R7). Nothing else on the caller's object,\n * such as a payload, trace context, provenance or a secret, is copied.\n */\nfunction readEventMetadata(event: Snapshot): object {\n\tconst consistency = event[\"consistency\"] === undefined ? undefined : codeOf(event, \"consistency\", CONSISTENCIES, \"job.event.consistency\");\n\treturn {\n\t\teventId: identifier(event, \"eventId\", \"job.event.eventId\"),\n\t\teventType: identifier(event, \"eventType\", \"job.event.eventType\"),\n\t\teventSchemaVersion: wholeNumber(event, \"eventSchemaVersion\", \"job.event.eventSchemaVersion\", ANY_INTEGER),\n\t\ttenantId: identifier(event, \"tenantId\", \"job.event.tenantId\"),\n\t\tspaceId: identifier(event, \"spaceId\", \"job.event.spaceId\"),\n\t\tsubjectType: identifier(event, \"subjectType\", \"job.event.subjectType\"),\n\t\tsubjectId: identifier(event, \"subjectId\", \"job.event.subjectId\"),\n\t\tsequence: wholeNumber(event, \"sequence\", \"job.event.sequence\", ANY_INTEGER),\n\t\tactionInvocationId: optionalIdentifier(event, \"actionInvocationId\", \"job.event.actionInvocationId\"),\n\t\tcorrelationId: identifier(event, \"correlationId\", \"job.event.correlationId\"),\n\t\tcausationId: optionalIdentifier(event, \"causationId\", \"job.event.causationId\"),\n\t\toccurredAt: isoOf(instant(event, \"occurredAt\", \"job.event.occurredAt\")),\n\t\trecordedAt: isoOf(instant(event, \"recordedAt\", \"job.event.recordedAt\")),\n\t\tproducerModuleVersion: identifier(event, \"producerModuleVersion\", \"job.event.producerModuleVersion\"),\n\t\tpayloadClassification: codeOf(event, \"payloadClassification\", PAYLOAD_CLASSIFICATIONS, \"job.event.payloadClassification\"),\n\t\tconsistency,\n\t};\n}\n\n/** Rebuild the job actor as one member of the `WebhookJobActor` union, nothing more. */\nfunction readActor(actor: Snapshot): object {\n\tconst state = codeOf(actor, \"state\", ACTOR_STATES, \"job.actor.state\");\n\tif (state === \"present\") {\n\t\treturn { state, actorId: identifier(actor, \"actorId\", \"job.actor.actorId\"), actorType: identifier(actor, \"actorType\", \"job.actor.actorType\") };\n\t}\n\treturn { state, reason: codeOf(actor, \"reason\", ABSENT_REASONS, \"job.actor.reason\") };\n}\n\nfunction readJobDraft(job: unknown): JobDraftInput {\n\tconst snap = snapshotRecord(job, \"job\");\n\tconst eventId = identifier(snap, \"eventId\", \"job.eventId\");\n\tconst tenantId = identifier(snap, \"tenantId\", \"job.tenantId\");\n\tconst spaceId = identifier(snap, \"spaceId\", \"job.spaceId\");\n\tconst event = nestedRecord(snap, \"event\", \"job.event\");\n\tif (identifier(event, \"eventId\", \"job.event.eventId\") !== eventId) throw storeError(\"record_mismatch\", \"job.event.eventId\");\n\tif (identifier(event, \"tenantId\", \"job.event.tenantId\") !== tenantId) throw storeError(\"record_mismatch\", \"job.event.tenantId\");\n\tif (identifier(event, \"spaceId\", \"job.event.spaceId\") !== spaceId) throw storeError(\"record_mismatch\", \"job.event.spaceId\");\n\tconst anchorMs = instant(event, \"recordedAt\", \"job.event.recordedAt\");\n\tconst payloadProjected = flag(snap, \"payloadProjected\", \"job.payloadProjected\");\n\tlet payload: Snapshot | null = null;\n\tif (payloadProjected) payload = nestedRecord(snap, \"payload\", \"job.payload\");\n\telse if (snap[\"payload\"] !== null) throw storeError(\"input_invalid\", \"job.payload\");\n\t// Only the fields WebhookFanOutJobDraft declares are kept. `payload` and\n\t// `facts` are the projection's allowlisted JSON and are kept whole.\n\tconst draft = copyOut<Snapshot>({\n\t\tevent: readEventMetadata(event),\n\t\tpayload,\n\t\tpayloadProjected,\n\t\tfacts: nestedRecord(snap, \"facts\", \"job.facts\"),\n\t\tactor: readActor(nestedRecord(snap, \"actor\", \"job.actor\")),\n\t});\n\treturn {\n\t\tdraft,\n\t\teventId,\n\t\ttenantId,\n\t\tspaceId,\n\t\tanchorMs,\n\t\tcreatedAtMs: instant(snap, \"createdAt\", \"job.createdAt\"),\n\t\tprocessingDeadlineMs: instant(snap, \"processingDeadline\", \"job.processingDeadline\"),\n\t};\n}\n\n// ---------------------------------------------------------------------------\n// Settlements\n// ---------------------------------------------------------------------------\n\nexport type Settlement =\n\t| { readonly kind: \"delivered\" }\n\t| { readonly kind: \"retry\"; readonly availableAtMs: number; readonly outcome: WebhookAttemptOutcome; readonly reason: WebhookAttemptReasonCode }\n\t| { readonly kind: \"release\"; readonly availableAtMs: number; readonly diagnostic: WebhookDiagnosticCode }\n\t| { readonly kind: \"dead_letter\"; readonly reason: WebhookAttemptReasonCode | WebhookDiagnosticCode }\n\t| { readonly kind: \"cancelled\"; readonly reason: WebhookAttemptReasonCode };\n\nfunction readSettlement(input: Snapshot): Settlement {\n\tconst settlement = nestedRecord(input, \"settlement\", \"input.settlement\");\n\tconst kind = codeOf(settlement, \"kind\", SETTLEMENT_KINDS, \"input.settlement.kind\");\n\tswitch (kind) {\n\t\tcase \"delivered\":\n\t\t\treturn { kind };\n\t\tcase \"retry\":\n\t\t\treturn {\n\t\t\t\tkind,\n\t\t\t\tavailableAtMs: instant(settlement, \"availableAt\", \"input.settlement.availableAt\"),\n\t\t\t\toutcome: codeOf(settlement, \"outcome\", WEBHOOK_ATTEMPT_OUTCOMES, \"input.settlement.outcome\"),\n\t\t\t\treason: codeOf(settlement, \"reason\", WEBHOOK_ATTEMPT_REASON_CODES, \"input.settlement.reason\"),\n\t\t\t};\n\t\tcase \"release\":\n\t\t\treturn {\n\t\t\t\tkind,\n\t\t\t\tavailableAtMs: instant(settlement, \"availableAt\", \"input.settlement.availableAt\"),\n\t\t\t\tdiagnostic: codeOf(settlement, \"diagnostic\", WEBHOOK_DIAGNOSTIC_CODES, \"input.settlement.diagnostic\"),\n\t\t\t};\n\t\tcase \"dead_letter\":\n\t\t\treturn { kind, reason: codeOf(settlement, \"reason\", DEAD_LETTER_REASONS, \"input.settlement.reason\") as WebhookAttemptReasonCode | WebhookDiagnosticCode };\n\t\tcase \"cancelled\":\n\t\t\treturn { kind, reason: codeOf(settlement, \"reason\", WEBHOOK_ATTEMPT_REASON_CODES, \"input.settlement.reason\") };\n\t}\n}\n\nfunction isAttemptReason(value: string): value is WebhookAttemptReasonCode {\n\treturn (WEBHOOK_ATTEMPT_REASON_CODES as readonly string[]).includes(value);\n}\n\n/**\n * Apply a settlement to an intent the caller holds, clearing its lease.\n * `release` spends no budget, `retry` spends one attempt, and the terminal\n * kinds leave the attempt count as it was.\n */\nexport function applySettlement(intent: IntentState, settlement: Settlement): void {\n\tswitch (settlement.kind) {\n\t\tcase \"delivered\":\n\t\t\tintent.status = \"delivered\";\n\t\t\tintent.lastOutcome = { outcome: \"delivered\", reason: \"http_2xx\" };\n\t\t\tbreak;\n\t\tcase \"retry\":\n\t\t\tintent.attemptCount += 1;\n\t\t\tintent.availableAtMs = settlement.availableAtMs;\n\t\t\tintent.lastOutcome = { outcome: settlement.outcome, reason: settlement.reason };\n\t\t\tbreak;\n\t\tcase \"release\":\n\t\t\tintent.availableAtMs = settlement.availableAtMs;\n\t\t\tintent.lastDiagnostic = settlement.diagnostic;\n\t\t\tbreak;\n\t\tcase \"dead_letter\":\n\t\t\tintent.status = \"dead_letter\";\n\t\t\tif (isAttemptReason(settlement.reason)) intent.lastOutcome = { outcome: \"dead_letter\", reason: settlement.reason };\n\t\t\telse intent.lastDiagnostic = settlement.reason;\n\t\t\tbreak;\n\t\tcase \"cancelled\":\n\t\t\tintent.status = \"cancelled\";\n\t\t\tintent.lastOutcome = { outcome: \"cancelled\", reason: settlement.reason };\n\t\t\tbreak;\n\t}\n\tintent.lease = undefined;\n}\n\n// ---------------------------------------------------------------------------\n// Requeue\n// ---------------------------------------------------------------------------\n\n/** The first refusal a requeue meets, in the port's order, or `undefined` when it applies. */\nexport function requeueRefusal(\n\tstate: { readonly fence: number; readonly status: string; readonly anchorMs: number },\n\trequest: RequeueInput,\n\tfloorMs: number,\n): \"stale\" | \"not_dead_letter\" | \"past_horizon\" | undefined {\n\t// The dead-letter generation the operator saw, in the same step as the\n\t// transition: a second request from that read finds the advanced fence.\n\tif (state.fence !== request.expectedFence) return \"stale\";\n\tif (state.status !== \"dead_letter\") return \"not_dead_letter\";\n\tif (state.anchorMs < floorMs) return \"past_horizon\";\n\treturn undefined;\n}\n\nexport function jobRequeueEvidence(job: JobState, request: RequeueInput, nowMs: number): WebhookRequeueEvidence {\n\treturn copyOut<WebhookRequeueEvidence>({\n\t\ttarget: \"fan_out_job\",\n\t\teventId: job.key,\n\t\ttenantId: job.tenantId,\n\t\tspaceId: job.spaceId,\n\t\trequestedBy: request.requestedBy,\n\t\trequestedAt: isoOf(request.requestedAtMs),\n\t\tactionInvocationId: request.actionInvocationId,\n\t\tappliedAt: isoOf(nowMs),\n\t\tpriorAttemptCount: job.attemptCount,\n\t\tpriorAvailableAt: isoOf(job.availableAtMs),\n\t\tpriorProcessingDeadline: isoOf(job.processingDeadlineMs),\n\t\tpriorFence: job.fence,\n\t\tpriorLastDiagnostic: job.lastDiagnostic,\n\t\tprocessingDeadline: isoOf(request.processingDeadlineMs),\n\t});\n}\n\nexport function intentRequeueEvidence(intent: IntentState, request: RequeueInput, nowMs: number): WebhookRequeueEvidence {\n\treturn copyOut<WebhookRequeueEvidence>({\n\t\ttarget: \"delivery_intent\",\n\t\teventId: intent.eventId,\n\t\tdeliveryId: intent.key,\n\t\tsubscriptionId: intent.subscriptionId,\n\t\ttenantId: intent.tenantId,\n\t\tspaceId: intent.spaceId,\n\t\trequestedBy: request.requestedBy,\n\t\trequestedAt: isoOf(request.requestedAtMs),\n\t\tactionInvocationId: request.actionInvocationId,\n\t\tappliedAt: isoOf(nowMs),\n\t\tpriorAttemptCount: intent.attemptCount,\n\t\tpriorAvailableAt: isoOf(intent.availableAtMs),\n\t\tpriorProcessingDeadline: isoOf(intent.processingDeadlineMs),\n\t\tpriorFence: intent.fence,\n\t\tpriorLastDiagnostic: intent.lastDiagnostic,\n\t\tpriorLastOutcome: intent.lastOutcome,\n\t\tprocessingDeadline: isoOf(request.processingDeadlineMs),\n\t});\n}\n\n/**\n * The first refusal an actor enrichment meets, in the port's order, or\n * `undefined` when it applies. Run inside the atomic step, so the actor\n * state checked is the stored one: a `suppressed` or `present` actor is\n * refused here whatever the caller read before.\n */\nexport function enrichmentRefusal(\n\tjob: JobState,\n\trequest: EnrichmentInput,\n\tfloorMs: number,\n): Exclude<Extract<WebhookActorEnrichmentResult, { readonly applied: false }>[\"refusal\"], \"not_found\"> | undefined {\n\tif (job.fence !== request.expectedFence) return \"stale\";\n\tif (job.status === \"completed\") return \"not_enrichable\";\n\tconst actor = job.draft[\"actor\"] as Snapshot;\n\tif (actor[\"state\"] !== \"absent\") return \"actor_present\";\n\tif (actor[\"reason\"] !== \"legacy\") return \"actor_suppressed\";\n\tif (job.anchorMs < floorMs) return \"past_horizon\";\n\treturn undefined;\n}\n\nexport function jobEnrichmentEvidence(job: JobState, request: EnrichmentInput, nowMs: number): WebhookRequeueEvidence {\n\treturn copyOut<WebhookRequeueEvidence>({\n\t\t...(jobRequeueEvidence(job, request, nowMs) as object),\n\t\ttarget: \"fan_out_job_actor\",\n\t\tactor: { actorId: request.actorId, actorType: request.actorType },\n\t});\n}\n\n/**\n * Apply an enrichment to a job the atomic step accepted: the stored draft is\n * replaced by a copy whose actor is the one read from the canonical event,\n * and the job is requeued exactly as {@link applyRequeue} does, so its fence\n * advances and any lease is cleared.\n */\nexport function applyEnrichment(job: JobState, request: EnrichmentInput): void {\n\tjob.draft = copyOut<Snapshot>({ ...(job.draft as object), actor: { state: \"present\", actorId: request.actorId, actorType: request.actorType } });\n\tapplyRequeue(job, request);\n}\n\nexport function enrichmentRefused(reason: Extract<WebhookActorEnrichmentResult, { readonly applied: false }>[\"refusal\"]): WebhookActorEnrichmentResult {\n\treturn copyOut<WebhookActorEnrichmentResult>({ applied: false, refusal: reason });\n}\n\n/** Move a dead letter back to pending with a restored budget, advancing its fence. */\nexport function applyRequeue(state: JobState | IntentState, request: RequeueInput): void {\n\tstate.status = \"pending\";\n\tstate.attemptCount = 0;\n\tstate.availableAtMs = request.requestedAtMs;\n\tstate.processingDeadlineMs = request.processingDeadlineMs;\n\tstate.fence += 1;\n\tstate.lease = undefined;\n}\n\n// ---------------------------------------------------------------------------\n// Rendering\n// ---------------------------------------------------------------------------\n\nfunction leaseOut(lease: LeaseState | undefined): object | undefined {\n\treturn lease === undefined ? undefined : { owner: lease.owner, fence: lease.fence, expiresAt: isoOf(lease.expiresAtMs) };\n}\n\nexport function jobOut(job: JobState, lease: LeaseState | undefined = job.lease): object {\n\tconst draft = job.draft;\n\treturn {\n\t\teventId: job.key,\n\t\ttenantId: job.tenantId,\n\t\tspaceId: job.spaceId,\n\t\tevent: draft[\"event\"],\n\t\tpayload: draft[\"payload\"],\n\t\tpayloadProjected: draft[\"payloadProjected\"],\n\t\tfacts: draft[\"facts\"],\n\t\tactor: draft[\"actor\"],\n\t\tstatus: job.status,\n\t\tattemptCount: job.attemptCount,\n\t\tavailableAt: isoOf(job.availableAtMs),\n\t\tprocessingDeadline: isoOf(job.processingDeadlineMs),\n\t\tcreatedAt: isoOf(job.createdAtMs),\n\t\tcompletedAt: job.completedAtMs === undefined ? undefined : isoOf(job.completedAtMs),\n\t\tlastDiagnostic: job.lastDiagnostic,\n\t\tfence: lease === undefined ? job.fence : lease.fence,\n\t\tlease: leaseOut(lease),\n\t};\n}\n\nexport function intentOut(intent: IntentState, lease: LeaseState | undefined = intent.lease): object {\n\treturn {\n\t\tdeliveryId: intent.key,\n\t\tsubscriptionId: intent.subscriptionId,\n\t\teventId: intent.eventId,\n\t\ttenantId: intent.tenantId,\n\t\tspaceId: intent.spaceId,\n\t\teligibilityRevision: intent.eligibilityRevision,\n\t\teventRecordedAt: isoOf(intent.anchorMs),\n\t\tbody: intent.body,\n\t\tstatus: intent.status,\n\t\tattemptCount: intent.attemptCount,\n\t\tavailableAt: isoOf(intent.availableAtMs),\n\t\tprocessingDeadline: isoOf(intent.processingDeadlineMs),\n\t\tcreatedAt: isoOf(intent.createdAtMs),\n\t\tlastOutcome: intent.lastOutcome,\n\t\tlastDiagnostic: intent.lastDiagnostic,\n\t\tfence: lease === undefined ? intent.fence : lease.fence,\n\t\tlease: leaseOut(lease),\n\t};\n}\n\n/** A tombstone as `readTombstone` returns it; `retainUntil` is the anchor plus the horizon, capped at the `Date` range. */\nexport function tombstoneOut(marker: MarkerState, horizonMs: number): object {\n\treturn {\n\t\tkind: marker.kind,\n\t\tsubscriptionId: marker.subscriptionId,\n\t\teventId: marker.eventId,\n\t\ttenantId: marker.tenantId,\n\t\tspaceId: marker.spaceId,\n\t\tretainUntil: isoOf(mathMin(marker.anchorMs + horizonMs, WEBHOOK_MAX_REPLAY_HORIZON_MS)),\n\t};\n}\n\n/**\n * The pre-handoff lease check: `valid` only when the intent is pending,\n * leased to this owner at this fence, in this scope, and the lease has not\n * expired at the caller's `now`.\n */\nexport function leaseCheck(intent: IntentState | undefined, call: ReturnType<typeof readLeaseCheckCall>): WebhookDeliveryLeaseCheck {\n\tif (intent === undefined || !inScope(intent, call.scope)) return copyOut<WebhookDeliveryLeaseCheck>({ valid: false, reason: \"not_found\" });\n\tif (intent.status !== \"pending\") return copyOut<WebhookDeliveryLeaseCheck>({ valid: false, reason: \"intent_not_pending\" });\n\tif (!holdsFence(intent, call.fenced.owner, call.fenced.fence) || intent.lease!.expiresAtMs <= call.fenced.nowMs) {\n\t\treturn copyOut<WebhookDeliveryLeaseCheck>({ valid: false, reason: \"lease_lost\" });\n\t}\n\treturn copyOut<WebhookDeliveryLeaseCheck>({ valid: true });\n}\n\nexport function requeueRefused(reason: \"not_found\" | \"stale\" | \"not_dead_letter\" | \"past_horizon\"): WebhookRequeueResult {\n\treturn copyOut<WebhookRequeueResult>({ applied: false, refusal: reason });\n}\n\n/** The record a governed requeue or enrichment names: a delivery intent's `deliveryId`, or a job's `eventId`. */\nexport type InvocationTarget =\n\t| { readonly target: \"delivery_intent\"; readonly deliveryId: string }\n\t| { readonly target: \"fan_out_job\" | \"fan_out_job_actor\"; readonly eventId: string };\n\n/**\n * Of `records`, the evidence of one scope appended under one\n * `actionInvocationId` (in append order), the first for `target` and its\n * record, or `undefined`. A store calls this inside the atomic step of a\n * requeue or enrichment, before any other check, so a request of the same\n * governed invocation is recognized whether or not the record still exists\n * or still matches the request.\n */\nexport function priorInvocationEvidence(records: readonly Snapshot[], target: InvocationTarget): Snapshot | undefined {\n\tfor (const record of records) {\n\t\tif (record[\"target\"] !== target.target) continue;\n\t\tif (target.target === \"delivery_intent\" ? record[\"deliveryId\"] === target.deliveryId : record[\"eventId\"] === target.eventId) return record;\n\t}\n\treturn undefined;\n}\n\n/** The answer to a request whose invocation already applied: that application's evidence, unchanged. */\nexport function replayedResult<T extends WebhookRequeueResult | WebhookActorEnrichmentResult>(evidence: Snapshot): T {\n\treturn copyOut<T>({ applied: true, replayed: true, evidence });\n}\n\n/** `listInvocationRequeueEvidence`: a scope and an `actionInvocationId`. */\nexport function readInvocationEvidenceCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\treturn { bounds: readCallOptions(options), scope: readScope(snap, \"input\"), actionInvocationId: identifier(snap, \"actionInvocationId\", \"input.actionInvocationId\") };\n\t});\n}\n\nexport function fencedOutcome(outcome: WebhookFencedInsertResult[\"outcome\"]): WebhookFencedInsertResult {\n\treturn copyOut<WebhookFencedInsertResult>({ outcome });\n}\n","import { storeError } from \"./errors\";\n\n/*\n * Attempt receipts (PR 8). `beginAttempt` creates one per begun attempt and\n * returns it to the worker that began it; `finishAttempt` accepts an\n * outcome only with that receipt. The stores keep only its SHA-256 digest,\n * so a receipt cannot be read back out of a store, and no store read,\n * error or log carries it. Portable: Web Crypto only, which Node 20 and\n * current browsers provide on `globalThis.crypto`.\n */\n\nconst textEncoder = new TextEncoder();\nconst RECEIPT_BYTES = 32;\n\n/** The two Web Crypto members used, typed structurally so the package needs no DOM types. */\ninterface WebCrypto {\n\tgetRandomValues(array: Uint8Array): Uint8Array;\n\treadonly subtle: { digest(algorithm: string, data: Uint8Array): Promise<ArrayBuffer> };\n}\n\nfunction webCrypto(field: string): WebCrypto {\n\tconst crypto = (globalThis as { crypto?: WebCrypto }).crypto;\n\tif (crypto === undefined || typeof crypto.getRandomValues !== \"function\" || crypto.subtle === undefined) throw storeError(\"store_failed\", field);\n\treturn crypto;\n}\n\nfunction hex(bytes: Uint8Array): string {\n\tlet text = \"\";\n\tfor (const byte of bytes) text += byte.toString(16).padStart(2, \"0\");\n\treturn text;\n}\n\n/** @internal Lower-case hex SHA-256 of `text` as UTF-8. Throws `store_failed` naming `field` when Web Crypto is missing. */\nexport async function sha256Hex(text: string, field: string): Promise<string> {\n\treturn hex(new Uint8Array(await webCrypto(field).subtle.digest(\"SHA-256\", textEncoder.encode(text))));\n}\n\n/** @internal A new receipt (`rcpt_` and 32 random bytes in hex) and the digest a store keeps of it. */\nexport async function newAttemptReceipt(): Promise<{ readonly receipt: string; readonly digest: string }> {\n\tconst bytes = new Uint8Array(RECEIPT_BYTES);\n\twebCrypto(\"beginAttempt.receipt\").getRandomValues(bytes);\n\tconst receipt = `rcpt_${hex(bytes)}`;\n\treturn { receipt, digest: await sha256Hex(receipt, \"beginAttempt.receipt\") };\n}\n\n/** @internal The digest of a presented receipt, compared with the one stored at begin. */\nexport function attemptReceiptDigest(receipt: string): Promise<string> {\n\treturn sha256Hex(receipt, \"finishAttempt.receipt\");\n}\n","import type { WebhookDiagnosticCode } from \"./codes\";\nimport {\n\tapplyEnrichment,\n\tapplyRequeue,\n\tapplySettlement,\n\tattemptEntryOut,\n\tattemptKey,\n\tbeginResult,\n\tcompareText,\n\tcopyOut,\n\tdenialRecord,\n\tenrichmentRefusal,\n\tenrichmentRefused,\n\tfencedOutcome,\n\tholds,\n\tinScope,\n\tintentOut,\n\tintentRequeueEvidence,\n\tjobEnrichmentEvidence,\n\tjobOut,\n\tjobRequeueEvidence,\n\tleaseCheck,\n\tpriorInvocationEvidence,\n\tmarkerKey,\n\tmayBegin,\n\treadAppendAttemptCall,\n\treadBeginAttemptCall,\n\treadCancelCall,\n\treadClaimCall,\n\treadDeadLetterJobCall,\n\treadDeliveryCall,\n\treadDenialCall,\n\treadEventCall,\n\treadFinishAttemptCall,\n\treadHookOption,\n\treadHorizonOption,\n\treadInsertFanOutJobCall,\n\treadInsertIntentCall,\n\treadIntentRequeueCall,\n\treadInvocationEvidenceCall,\n\treadJobEnrichmentCall,\n\treadJobFencedCall,\n\treadJobRequeueCall,\n\treadLeaseCheckCall,\n\treadPurgeCall,\n\treadRenewIntentCall,\n\treadRenewJobCall,\n\treadRescheduleCall,\n\treadSettleCall,\n\treadTombstoneCall,\n\trenewedExpiryMs,\n\trequeueRefusal,\n\trequeueRefused,\n\treplayedResult,\n\ttype InvocationTarget,\n\tTERMINAL_INTENT,\n\tTERMINAL_JOB,\n\ttombstoneOut,\n\ttype ClaimInput,\n\ttype IntentState,\n\ttype JobState,\n\ttype Leased,\n\ttype LeaseState,\n\ttype MarkerState,\n} from \"./delivery-store-core\";\nimport { guard, storeError } from \"./errors\";\nimport { attemptReceiptDigest, newAttemptReceipt } from \"./receipt\";\nimport type {\n\tWebhookActorEnrichmentResult,\n\tWebhookAttemptBeginResult,\n\tWebhookCallOptions,\n\tWebhookClaimRequest,\n\tWebhookClock,\n\tWebhookDeliveryLeaseCheck,\n\tWebhookDeliveryStore,\n\tWebhookFanOutJobFence,\n\tWebhookFencedInsertResult,\n\tWebhookFencedWrite,\n\tWebhookInsertResult,\n\tWebhookPurgeResult,\n\tWebhookRequeueResult,\n\tWebhookScope,\n} from \"./ports\";\nimport { frozenList, mathMax } from \"./snapshot\";\nimport {\n\tassertCallWanted,\n\tcaptureClock,\n\tisoOf,\n\treadClock,\n\ttype CallBounds,\n\ttype CapturedClock,\n\ttype Snapshot,\n} from \"./store-input\";\nimport type {\n\tWebhookActorEnrichmentRequest,\n\tWebhookAdmissionDenialRecord,\n\tWebhookDeliveryAttemptFinish,\n\tWebhookDeliveryAttemptLogEntry,\n\tWebhookDeliveryAttemptRecord,\n\tWebhookDeliveryAttemptStart,\n\tWebhookDeliveryIntent,\n\tWebhookFanOutJob,\n\tWebhookFanOutJobDraft,\n\tWebhookRequeueEvidence,\n\tWebhookRequeueRequest,\n\tWebhookTombstone,\n} from \"./types\";\n\n/*\n * In-memory WebhookDeliveryStore, for tests and explicit local development.\n * It holds the same contract as the PostgreSQL store (tests/store-contract.ts)\n * so it does not hide ordering, idempotency or recovery bugs. Both stores\n * read their input and render their records through src/delivery-store-core.ts.\n *\n * Every method has the same shape:\n *\n * 1. Entry: copy the arguments into a package-owned snapshot\n * (src/delivery-store-core.ts, src/store-input.ts). Malformed input is\n * refused here, before anything else happens.\n * 2. One `await`, standing where a real store does I/O, so concurrent\n * calls interleave the way they do against a database.\n * 3. One synchronous step, `#atomic`: read the store's clock, refuse a call\n * whose signal aborted or whose deadline passed, then every check\n * (fence, replay horizon, uniqueness, status) and the write. There is\n * no `await` inside it, and JavaScript runs a synchronous block to\n * completion, so no other call on this store can run between its\n * checks and its write: it plays the part of one transaction.\n *\n * State lives in ECMAScript private fields of the instance; nothing is kept\n * in module scope. Reads return fresh frozen copies built from that state,\n * never the state itself.\n */\n\n/** Options for {@link MemoryWebhookDeliveryStore}. */\nexport interface MemoryWebhookDeliveryStoreOptions {\n\t/** The store's clock: it timestamps requeue evidence and decides the replay horizon. */\n\treadonly clock: WebhookClock;\n\t/** The replay horizon in milliseconds; see `WebhookDeliveryLimits.replayHorizonMs`. */\n\treadonly replayHorizonMs: number;\n\t/**\n\t * Test seam. Awaited at each call's I/O boundary, after its input is read\n\t * and before its atomic step, with the method name. A contract test uses\n\t * it to hold one call there while another runs to completion, forcing an\n\t * interleaving. A throw or rejection fails the call as `store_failed`,\n\t * with nothing written. Leave it unset outside tests.\n\t */\n\treadonly beforeAtomicStep?: (operation: string) => Promise<void> | void;\n}\n\ninterface DenialState {\n\treadonly key: string;\n\treadonly record: Snapshot;\n\treadonly anchorMs: number;\n}\n\ninterface AttemptState {\n\treadonly tenantId: string;\n\treadonly spaceId: string;\n\treadonly deliveryId: string;\n\t/** The whole entry (`appendAttempt`) or the start of a begun attempt (`beginAttempt`). */\n\treadonly record: Snapshot;\n\t/** The lease fence a begun attempt was recorded under; `undefined` for an entry appended whole. */\n\treadonly fence: number | undefined;\n\t/** The SHA-256 digest of a begun attempt's receipt; never the receipt itself. */\n\treadonly receiptDigest: string | undefined;\n}\n\ninterface EvidenceState {\n\treadonly tenantId: string;\n\treadonly spaceId: string;\n\treadonly eventId: string;\n\treadonly record: Snapshot;\n}\n\n/** Run an async step; a package error passes through, anything else becomes `store_failed`. */\nasync function guardedAsync<T>(run: () => Promise<T>): Promise<T> {\n\ttry {\n\t\treturn await run();\n\t} catch (thrown) {\n\t\treturn guard<T>(() => {\n\t\t\tthrow thrown;\n\t\t}, () => storeError(\"store_failed\", \"store\"));\n\t}\n}\n\n/** Where a database store would do I/O; lets concurrent calls interleave. */\nfunction ioBoundary(): Promise<void> {\n\treturn Promise.resolve();\n}\n\n/**\n * An in-memory {@link WebhookDeliveryStore}. Construct one per test or local\n * process; instances share nothing.\n *\n * @throws {WebhookDeliveryConfigError} when `replayHorizonMs` is not a\n * positive whole number of milliseconds within `WEBHOOK_MAX_REPLAY_HORIZON_MS`.\n * @throws {WebhookStoreError} `clock_invalid` when `clock` has no `now` function.\n */\nexport class MemoryWebhookDeliveryStore implements WebhookDeliveryStore {\n\treadonly #clock: CapturedClock;\n\treadonly #beforeAtomicStep: ((operation: string) => Promise<void> | void) | undefined;\n\treadonly #horizonMs: number;\n\treadonly #jobs = new Map<string, JobState>();\n\treadonly #intents = new Map<string, IntentState>();\n\treadonly #denials = new Map<string, DenialState>();\n\treadonly #markers = new Map<string, MarkerState>();\n\treadonly #attempts: AttemptState[] = [];\n\t/** Begun attempts by (deliveryId, fence); each is also in `#attempts`. */\n\treadonly #begun = new Map<string, AttemptState>();\n\t/** Outcomes of begun attempts by (deliveryId, fence). Written once, never changed. */\n\treadonly #outcomes = new Map<string, Snapshot>();\n\treadonly #evidence: EvidenceState[] = [];\n\t/** The highest cutoff any purge has used; inserts and requeues below it are refused. */\n\t#purgedThroughMs = -Infinity;\n\n\tconstructor(options: MemoryWebhookDeliveryStoreOptions) {\n\t\tthis.#horizonMs = readHorizonOption(options);\n\t\tthis.#clock = guard(() => captureClock((options as { clock?: WebhookClock }).clock), () => storeError(\"clock_invalid\", \"clock\"));\n\t\tthis.#beforeAtomicStep = readHookOption(options, \"beforeAtomicStep\");\n\t}\n\n\t/** The replay horizon this store enforces, in milliseconds. */\n\tget replayHorizonMs(): number {\n\t\treturn this.#horizonMs;\n\t}\n\n\t/** The I/O boundary: the injected seam, or one resolved turn. */\n\tasync #boundary(operation: string): Promise<void> {\n\t\tconst hook = this.#beforeAtomicStep;\n\t\tif (hook === undefined) return ioBoundary();\n\t\ttry {\n\t\t\tawait hook(operation);\n\t\t} catch {\n\t\t\tthrow storeError(\"store_failed\", \"beforeAtomicStep\");\n\t\t}\n\t}\n\n\t/**\n\t * The atomic step. Reads the store clock, refuses an unwanted call, then\n\t * runs `body` synchronously. A package error passes through; anything\n\t * else becomes `store_failed`.\n\t */\n\t#atomic<T>(bounds: CallBounds, body: (nowMs: number) => T): T {\n\t\treturn guard(() => {\n\t\t\tconst nowMs = readClock(this.#clock);\n\t\t\tassertCallWanted(bounds, nowMs);\n\t\t\treturn body(nowMs);\n\t\t}, () => storeError(\"store_failed\", \"store\"));\n\t}\n\n\t/** The horizon floor at `nowMs`: anchors earlier than this are past the horizon. */\n\t#floorMs(nowMs: number): number {\n\t\treturn mathMax(nowMs - this.#horizonMs, this.#purgedThroughMs);\n\t}\n\n\t#pastHorizon(anchorMs: number, nowMs: number): boolean {\n\t\treturn anchorMs < this.#floorMs(nowMs);\n\t}\n\n\t/**\n\t * Evidence `scope` holds under `actionInvocationId` for `target`, or\n\t * `undefined` (always, without an id). Called first in the atomic step of\n\t * a requeue or enrichment: see \"Re-runs of one invocation\" in src/ports.ts.\n\t */\n\t#priorEvidence(scope: WebhookScope, actionInvocationId: string | undefined, target: InvocationTarget): Snapshot | undefined {\n\t\tif (actionInvocationId === undefined) return undefined;\n\t\tconst records = this.#evidence\n\t\t\t.filter((item) => inScope(item, scope) && item.record[\"actionInvocationId\"] === actionInvocationId)\n\t\t\t.map((item) => item.record);\n\t\treturn priorInvocationEvidence(records, target);\n\t}\n\n\t// -------------------------------------------------------------------------\n\t// Fan-out jobs\n\t// -------------------------------------------------------------------------\n\n\tasync insertFanOutJob(\n\t\tjob: WebhookFanOutJobDraft & { readonly processingDeadline: string; readonly createdAt: string },\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookInsertResult> {\n\t\tconst call = readInsertFanOutJobCall(job, options);\n\t\tawait this.#boundary(\"insertFanOutJob\");\n\t\treturn this.#atomic(call.bounds, (nowMs) => {\n\t\t\tconst draft = call.job;\n\t\t\t// Horizon first, so the answer for an old event does not depend on\n\t\t\t// whether a purge has removed its job yet.\n\t\t\tif (this.#pastHorizon(draft.anchorMs, nowMs)) return copyOut<WebhookInsertResult>({ outcome: \"past_horizon\" });\n\t\t\tif (this.#jobs.has(draft.eventId)) return copyOut<WebhookInsertResult>({ outcome: \"already_present\" });\n\t\t\tthis.#jobs.set(draft.eventId, {\n\t\t\t\tkey: draft.eventId,\n\t\t\t\tdraft: draft.draft,\n\t\t\t\ttenantId: draft.tenantId,\n\t\t\t\tspaceId: draft.spaceId,\n\t\t\t\tanchorMs: draft.anchorMs,\n\t\t\t\tstatus: \"pending\",\n\t\t\t\tattemptCount: 0,\n\t\t\t\tavailableAtMs: draft.createdAtMs,\n\t\t\t\tcreatedAtMs: draft.createdAtMs,\n\t\t\t\tprocessingDeadlineMs: draft.processingDeadlineMs,\n\t\t\t\tcompletedAtMs: undefined,\n\t\t\t\tlastDiagnostic: undefined,\n\t\t\t\tfence: 0,\n\t\t\t\tlease: undefined,\n\t\t\t});\n\t\t\treturn copyOut<WebhookInsertResult>({ outcome: \"inserted\" });\n\t\t});\n\t}\n\n\tasync claimFanOutJobs(request: WebhookClaimRequest, options: WebhookCallOptions): Promise<readonly WebhookFanOutJob[]> {\n\t\tconst call = readClaimCall(request, options);\n\t\tawait this.#boundary(\"claimFanOutJobs\");\n\t\treturn this.#atomic(call.bounds, () =>\n\t\t\tclaimFrom([...this.#jobs.values()], call.claim, jobOut) as readonly WebhookFanOutJob[]);\n\t}\n\n\tasync completeFanOutJob(input: WebhookFencedWrite & { readonly eventId: string }, options: WebhookCallOptions): Promise<boolean> {\n\t\tconst call = readJobFencedCall(input, options);\n\t\tawait this.#boundary(\"completeFanOutJob\");\n\t\treturn this.#atomic(call.bounds, (nowMs) => {\n\t\t\tconst job = this.#jobs.get(call.eventId);\n\t\t\tif (job === undefined || !holds(job, call.fenced.owner, call.fenced.fence, nowMs)) return false;\n\t\t\tjob.status = \"completed\";\n\t\t\tjob.completedAtMs = call.fenced.nowMs;\n\t\t\tjob.lease = undefined;\n\t\t\treturn true;\n\t\t});\n\t}\n\n\tasync rescheduleFanOutJob(\n\t\tinput: WebhookFencedWrite & { readonly eventId: string; readonly availableAt: Date; readonly diagnostic: WebhookDiagnosticCode },\n\t\toptions: WebhookCallOptions,\n\t): Promise<boolean> {\n\t\tconst call = readRescheduleCall(input, options);\n\t\tawait this.#boundary(\"rescheduleFanOutJob\");\n\t\treturn this.#atomic(call.bounds, (nowMs) => {\n\t\t\tconst job = this.#jobs.get(call.eventId);\n\t\t\tif (job === undefined || !holds(job, call.fenced.owner, call.fenced.fence, nowMs)) return false;\n\t\t\tjob.attemptCount += 1;\n\t\t\tjob.availableAtMs = call.availableAtMs;\n\t\t\tjob.lastDiagnostic = call.diagnostic;\n\t\t\tjob.lease = undefined;\n\t\t\treturn true;\n\t\t});\n\t}\n\n\tasync renewFanOutJobLease(\n\t\tinput: WebhookFencedWrite & { readonly eventId: string; readonly leaseDurationMs: number },\n\t\toptions: WebhookCallOptions,\n\t): Promise<boolean> {\n\t\tconst call = readRenewJobCall(input, options);\n\t\tawait this.#boundary(\"renewFanOutJobLease\");\n\t\treturn this.#atomic(call.bounds, (nowMs) => {\n\t\t\tconst job = this.#jobs.get(call.eventId);\n\t\t\tif (job === undefined || !holds(job, call.fenced.owner, call.fenced.fence, nowMs)) return false;\n\t\t\tjob.lease = { ...job.lease!, expiresAtMs: renewedExpiryMs(job, call.fenced.nowMs, call.leaseDurationMs) };\n\t\t\treturn true;\n\t\t});\n\t}\n\n\tasync deadLetterFanOutJob(\n\t\tinput: WebhookFencedWrite & { readonly eventId: string; readonly diagnostic: WebhookDiagnosticCode },\n\t\toptions: WebhookCallOptions,\n\t): Promise<boolean> {\n\t\tconst call = readDeadLetterJobCall(input, options);\n\t\tawait this.#boundary(\"deadLetterFanOutJob\");\n\t\treturn this.#atomic(call.bounds, (nowMs) => {\n\t\t\tconst job = this.#jobs.get(call.eventId);\n\t\t\tif (job === undefined || !holds(job, call.fenced.owner, call.fenced.fence, nowMs)) return false;\n\t\t\tjob.status = \"dead_letter\";\n\t\t\tjob.lastDiagnostic = call.diagnostic;\n\t\t\tjob.lease = undefined;\n\t\t\treturn true;\n\t\t});\n\t}\n\n\tasync requeueFanOutJob(\n\t\tinput: WebhookScope & { readonly eventId: string; readonly request: WebhookRequeueRequest },\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookRequeueResult> {\n\t\tconst call = readJobRequeueCall(input, options);\n\t\tawait this.#boundary(\"requeueFanOutJob\");\n\t\treturn this.#atomic(call.bounds, (nowMs) => {\n\t\t\tconst prior = this.#priorEvidence(call.scope, call.request.actionInvocationId, { target: \"fan_out_job\", eventId: call.eventId });\n\t\t\tif (prior !== undefined) return replayedResult<WebhookRequeueResult>(prior);\n\t\t\tconst job = this.#jobs.get(call.eventId);\n\t\t\tif (job === undefined || !inScope(job, call.scope)) return requeueRefused(\"not_found\");\n\t\t\tconst refusal = requeueRefusal(job, call.request, this.#floorMs(nowMs));\n\t\t\tif (refusal !== undefined) return requeueRefused(refusal);\n\t\t\tconst evidence = jobRequeueEvidence(job, call.request, nowMs);\n\t\t\tconst result = copyOut<WebhookRequeueResult>({ applied: true, evidence });\n\t\t\tapplyRequeue(job, call.request);\n\t\t\tthis.#evidence.push({ tenantId: job.tenantId, spaceId: job.spaceId, eventId: job.key, record: evidence as unknown as Snapshot });\n\t\t\treturn result;\n\t\t});\n\t}\n\n\tasync enrichFanOutJobActor(\n\t\tinput: WebhookScope & { readonly eventId: string; readonly request: WebhookActorEnrichmentRequest },\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookActorEnrichmentResult> {\n\t\tconst call = readJobEnrichmentCall(input, options);\n\t\tawait this.#boundary(\"enrichFanOutJobActor\");\n\t\treturn this.#atomic(call.bounds, (nowMs) => {\n\t\t\tconst prior = this.#priorEvidence(call.scope, call.request.actionInvocationId, { target: \"fan_out_job_actor\", eventId: call.eventId });\n\t\t\tif (prior !== undefined) return replayedResult<WebhookActorEnrichmentResult>(prior);\n\t\t\tconst job = this.#jobs.get(call.eventId);\n\t\t\tif (job === undefined || !inScope(job, call.scope)) return enrichmentRefused(\"not_found\");\n\t\t\tconst refusal = enrichmentRefusal(job, call.request, this.#floorMs(nowMs));\n\t\t\tif (refusal !== undefined) return enrichmentRefused(refusal);\n\t\t\tconst evidence = jobEnrichmentEvidence(job, call.request, nowMs);\n\t\t\tconst result = copyOut<WebhookActorEnrichmentResult>({ applied: true, evidence });\n\t\t\tapplyEnrichment(job, call.request);\n\t\t\tthis.#evidence.push({ tenantId: job.tenantId, spaceId: job.spaceId, eventId: job.key, record: evidence as unknown as Snapshot });\n\t\t\treturn result;\n\t\t});\n\t}\n\n\tasync readFanOutJob(input: WebhookScope & { readonly eventId: string }, options: WebhookCallOptions): Promise<WebhookFanOutJob | null> {\n\t\tconst call = readEventCall(input, options);\n\t\tawait this.#boundary(\"readFanOutJob\");\n\t\treturn this.#atomic(call.bounds, () => {\n\t\t\tconst job = this.#jobs.get(call.eventId);\n\t\t\treturn job === undefined || !inScope(job, call.scope) ? null : copyOut<WebhookFanOutJob>(jobOut(job));\n\t\t});\n\t}\n\n\t// -------------------------------------------------------------------------\n\t// Intents and denials\n\t// -------------------------------------------------------------------------\n\n\tasync insertDeliveryIntent(\n\t\tintent: Omit<WebhookDeliveryIntent, \"status\" | \"attemptCount\" | \"lastOutcome\" | \"lastDiagnostic\" | \"lease\" | \"eventRecordedAt\" | \"fence\">,\n\t\tparent: WebhookFanOutJobFence,\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookFencedInsertResult> {\n\t\tconst call = readInsertIntentCall(intent, parent, options);\n\t\tawait this.#boundary(\"insertDeliveryIntent\");\n\t\treturn this.#atomic(call.bounds, (nowMs) => {\n\t\t\tconst job = this.#parentJob(call.parent, nowMs);\n\t\t\tif (job === undefined) return fencedOutcome(\"lease_lost\");\n\t\t\tif (!inScope(job, call)) throw storeError(\"record_mismatch\", \"intent.tenantId\");\n\t\t\tif (this.#pastHorizon(job.anchorMs, nowMs)) return fencedOutcome(\"past_horizon\");\n\t\t\tconst key = markerKey(call.subscriptionId, call.eventId);\n\t\t\tif (this.#markers.has(key)) return fencedOutcome(\"already_present\");\n\t\t\tif (this.#intents.has(call.deliveryId)) throw storeError(\"delivery_id_conflict\", \"intent.deliveryId\");\n\t\t\tthis.#intents.set(call.deliveryId, {\n\t\t\t\tkey: call.deliveryId,\n\t\t\t\tsubscriptionId: call.subscriptionId,\n\t\t\t\teventId: call.eventId,\n\t\t\t\ttenantId: call.tenantId,\n\t\t\t\tspaceId: call.spaceId,\n\t\t\t\teligibilityRevision: call.eligibilityRevision,\n\t\t\t\tbody: call.body,\n\t\t\t\tanchorMs: job.anchorMs,\n\t\t\t\tstatus: \"pending\",\n\t\t\t\tattemptCount: 0,\n\t\t\t\tavailableAtMs: call.availableAtMs,\n\t\t\t\tcreatedAtMs: call.createdAtMs,\n\t\t\t\tprocessingDeadlineMs: call.processingDeadlineMs,\n\t\t\t\tlastOutcome: undefined,\n\t\t\t\tlastDiagnostic: undefined,\n\t\t\t\tfence: 0,\n\t\t\t\tlease: undefined,\n\t\t\t});\n\t\t\tthis.#markers.set(key, { kind: \"intent\", subscriptionId: call.subscriptionId, eventId: call.eventId, tenantId: call.tenantId, spaceId: call.spaceId, anchorMs: job.anchorMs });\n\t\t\treturn fencedOutcome(\"inserted\");\n\t\t});\n\t}\n\n\tasync recordAdmissionDenial(\n\t\trecord: WebhookAdmissionDenialRecord,\n\t\tparent: WebhookFanOutJobFence,\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookFencedInsertResult> {\n\t\tconst call = readDenialCall(record, parent, options);\n\t\tawait this.#boundary(\"recordAdmissionDenial\");\n\t\treturn this.#atomic(call.bounds, (nowMs) => {\n\t\t\tconst job = this.#parentJob(call.parent, nowMs);\n\t\t\tif (job === undefined) return fencedOutcome(\"lease_lost\");\n\t\t\tif (!inScope(job, call)) throw storeError(\"record_mismatch\", \"record.tenantId\");\n\t\t\tif (this.#pastHorizon(job.anchorMs, nowMs)) return fencedOutcome(\"past_horizon\");\n\t\t\tconst key = markerKey(call.subscriptionId, call.eventId);\n\t\t\tif (this.#markers.has(key)) return fencedOutcome(\"already_present\");\n\t\t\tthis.#denials.set(key, { key, record: denialRecord(call), anchorMs: job.anchorMs });\n\t\t\tthis.#markers.set(key, { kind: \"denial\", subscriptionId: call.subscriptionId, eventId: call.eventId, tenantId: call.tenantId, spaceId: call.spaceId, anchorMs: job.anchorMs });\n\t\t\treturn fencedOutcome(\"inserted\");\n\t\t});\n\t}\n\n\t/** The parent job if `fence` still holds its unexpired lease at the store's `nowMs`. */\n\t#parentJob(fence: WebhookFanOutJobFence, nowMs: number): JobState | undefined {\n\t\tconst job = this.#jobs.get(fence.eventId);\n\t\treturn job !== undefined && holds(job, fence.owner, fence.fence, nowMs) ? job : undefined;\n\t}\n\n\tasync claimDeliveryIntents(request: WebhookClaimRequest, options: WebhookCallOptions): Promise<readonly WebhookDeliveryIntent[]> {\n\t\tconst call = readClaimCall(request, options);\n\t\tawait this.#boundary(\"claimDeliveryIntents\");\n\t\treturn this.#atomic(call.bounds, () =>\n\t\t\tclaimFrom([...this.#intents.values()], call.claim, intentOut) as readonly WebhookDeliveryIntent[]);\n\t}\n\n\tasync renewDeliveryIntentLease(\n\t\tinput: WebhookFencedWrite & { readonly deliveryId: string; readonly leaseDurationMs: number },\n\t\toptions: WebhookCallOptions,\n\t): Promise<boolean> {\n\t\tconst call = readRenewIntentCall(input, options);\n\t\tawait this.#boundary(\"renewDeliveryIntentLease\");\n\t\treturn this.#atomic(call.bounds, (nowMs) => {\n\t\t\tconst intent = this.#intents.get(call.deliveryId);\n\t\t\tif (intent === undefined || !holds(intent, call.fenced.owner, call.fenced.fence, nowMs)) return false;\n\t\t\tintent.lease = { ...intent.lease!, expiresAtMs: renewedExpiryMs(intent, call.fenced.nowMs, call.leaseDurationMs) };\n\t\t\treturn true;\n\t\t});\n\t}\n\n\tasync checkDeliveryLease(\n\t\tinput: WebhookScope & { readonly deliveryId: string; readonly owner: string; readonly fence: number; readonly now: Date },\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookDeliveryLeaseCheck> {\n\t\tconst call = readLeaseCheckCall(input, options);\n\t\tawait this.#boundary(\"checkDeliveryLease\");\n\t\treturn this.#atomic(call.bounds, () => leaseCheck(this.#intents.get(call.deliveryId), call));\n\t}\n\n\tasync appendAttempt(input: WebhookFencedWrite & { readonly attempt: WebhookDeliveryAttemptRecord }, options: WebhookCallOptions): Promise<boolean> {\n\t\tconst call = readAppendAttemptCall(input, options);\n\t\tawait this.#boundary(\"appendAttempt\");\n\t\treturn this.#atomic(call.bounds, (nowMs) => {\n\t\t\tconst intent = this.#intents.get(call.deliveryId);\n\t\t\tif (intent === undefined || !holds(intent, call.fenced.owner, call.fenced.fence, nowMs)) return false;\n\t\t\tif (call.subscriptionId !== intent.subscriptionId) throw storeError(\"record_mismatch\", \"input.attempt.subscriptionId\");\n\t\t\tif (call.eventId !== intent.eventId) throw storeError(\"record_mismatch\", \"input.attempt.eventId\");\n\t\t\tthis.#attempts.push({ tenantId: intent.tenantId, spaceId: intent.spaceId, deliveryId: call.deliveryId, record: call.record, fence: undefined, receiptDigest: undefined });\n\t\t\treturn true;\n\t\t});\n\t}\n\n\tasync beginAttempt(input: WebhookFencedWrite & { readonly attempt: WebhookDeliveryAttemptStart }, options: WebhookCallOptions): Promise<WebhookAttemptBeginResult> {\n\t\tconst call = readBeginAttemptCall(input, options);\n\t\t// Made before the atomic step, which has no await; kept only as a digest.\n\t\tconst receipt = await guardedAsync(newAttemptReceipt);\n\t\tawait this.#boundary(\"beginAttempt\");\n\t\treturn this.#atomic(call.bounds, (nowMs) => {\n\t\t\tconst intent = this.#intents.get(call.deliveryId);\n\t\t\tif (!mayBegin(intent, call.fenced, nowMs)) return beginResult(undefined);\n\t\t\tif (call.subscriptionId !== intent.subscriptionId) throw storeError(\"record_mismatch\", \"input.attempt.subscriptionId\");\n\t\t\tif (call.eventId !== intent.eventId) throw storeError(\"record_mismatch\", \"input.attempt.eventId\");\n\t\t\tconst key = attemptKey(call.deliveryId, call.fenced.fence);\n\t\t\tif (this.#begun.has(key)) return beginResult(undefined);\n\t\t\tconst state: AttemptState = {\n\t\t\t\ttenantId: intent.tenantId, spaceId: intent.spaceId, deliveryId: call.deliveryId, record: call.record,\n\t\t\t\tfence: call.fenced.fence, receiptDigest: receipt.digest,\n\t\t\t};\n\t\t\tthis.#attempts.push(state);\n\t\t\tthis.#begun.set(key, state);\n\t\t\treturn beginResult(receipt.receipt);\n\t\t});\n\t}\n\n\tasync finishAttempt(\n\t\tinput: WebhookScope & { readonly deliveryId: string; readonly fence: number; readonly receipt: string; readonly finish: WebhookDeliveryAttemptFinish },\n\t\toptions: WebhookCallOptions,\n\t): Promise<boolean> {\n\t\tconst call = readFinishAttemptCall(input, options);\n\t\tconst digest = await guardedAsync(() => attemptReceiptDigest(call.receipt));\n\t\tawait this.#boundary(\"finishAttempt\");\n\t\treturn this.#atomic(call.bounds, () => {\n\t\t\tconst key = attemptKey(call.deliveryId, call.fence);\n\t\t\tconst begun = this.#begun.get(key);\n\t\t\t// Unfenced: the begun attempt's key, scope and receipt are checked, and\n\t\t\t// nothing of the intent is read or changed.\n\t\t\tif (begun === undefined || !inScope(begun, call.scope) || begun.receiptDigest !== digest || this.#outcomes.has(key)) return false;\n\t\t\tthis.#outcomes.set(key, call.record);\n\t\t\treturn true;\n\t\t});\n\t}\n\n\tasync settleDeliveryIntent(\n\t\tinput: Parameters<WebhookDeliveryStore[\"settleDeliveryIntent\"]>[0],\n\t\toptions: WebhookCallOptions,\n\t): Promise<boolean> {\n\t\tconst call = readSettleCall(input, options);\n\t\tawait this.#boundary(\"settleDeliveryIntent\");\n\t\treturn this.#atomic(call.bounds, (nowMs) => {\n\t\t\tconst intent = this.#intents.get(call.deliveryId);\n\t\t\tif (intent === undefined || !holds(intent, call.fenced.owner, call.fenced.fence, nowMs)) return false;\n\t\t\tapplySettlement(intent, call.settlement);\n\t\t\treturn true;\n\t\t});\n\t}\n\n\tasync cancelPendingIntents(\n\t\tinput: Parameters<WebhookDeliveryStore[\"cancelPendingIntents\"]>[0],\n\t\toptions: WebhookCallOptions,\n\t): Promise<number> {\n\t\tconst call = readCancelCall(input, options);\n\t\tawait this.#boundary(\"cancelPendingIntents\");\n\t\treturn this.#atomic(call.bounds, () => {\n\t\t\tlet cancelled = 0;\n\t\t\tfor (const intent of this.#intents.values()) {\n\t\t\t\tif (intent.status !== \"pending\" || intent.subscriptionId !== call.subscriptionId || !inScope(intent, call.scope)) continue;\n\t\t\t\tif (intent.eligibilityRevision >= call.beforeRevision) continue;\n\t\t\t\tintent.status = \"cancelled\";\n\t\t\t\tintent.lastOutcome = { outcome: \"cancelled\", reason: call.reason };\n\t\t\t\tintent.lease = undefined;\n\t\t\t\tcancelled += 1;\n\t\t\t}\n\t\t\treturn cancelled;\n\t\t});\n\t}\n\n\tasync requeueDeliveryIntent(\n\t\tinput: WebhookScope & { readonly deliveryId: string; readonly request: WebhookRequeueRequest },\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookRequeueResult> {\n\t\tconst call = readIntentRequeueCall(input, options);\n\t\tawait this.#boundary(\"requeueDeliveryIntent\");\n\t\treturn this.#atomic(call.bounds, (nowMs) => {\n\t\t\tconst prior = this.#priorEvidence(call.scope, call.request.actionInvocationId, { target: \"delivery_intent\", deliveryId: call.deliveryId });\n\t\t\tif (prior !== undefined) return replayedResult<WebhookRequeueResult>(prior);\n\t\t\tconst intent = this.#intents.get(call.deliveryId);\n\t\t\tif (intent === undefined || !inScope(intent, call.scope)) return requeueRefused(\"not_found\");\n\t\t\tconst refusal = requeueRefusal(intent, call.request, this.#floorMs(nowMs));\n\t\t\tif (refusal !== undefined) return requeueRefused(refusal);\n\t\t\tconst evidence = intentRequeueEvidence(intent, call.request, nowMs);\n\t\t\tconst result = copyOut<WebhookRequeueResult>({ applied: true, evidence });\n\t\t\tapplyRequeue(intent, call.request);\n\t\t\tthis.#evidence.push({ tenantId: intent.tenantId, spaceId: intent.spaceId, eventId: intent.eventId, record: evidence as unknown as Snapshot });\n\t\t\treturn result;\n\t\t});\n\t}\n\n\tasync readDeliveryIntent(input: WebhookScope & { readonly deliveryId: string }, options: WebhookCallOptions): Promise<WebhookDeliveryIntent | null> {\n\t\tconst call = readDeliveryCall(input, options);\n\t\tawait this.#boundary(\"readDeliveryIntent\");\n\t\treturn this.#atomic(call.bounds, () => {\n\t\t\tconst intent = this.#intents.get(call.deliveryId);\n\t\t\treturn intent === undefined || !inScope(intent, call.scope) ? null : copyOut<WebhookDeliveryIntent>(intentOut(intent));\n\t\t});\n\t}\n\n\tasync listDeliveryAttempts(\n\t\tinput: WebhookScope & { readonly deliveryId: string },\n\t\toptions: WebhookCallOptions,\n\t): Promise<readonly WebhookDeliveryAttemptLogEntry[]> {\n\t\tconst call = readDeliveryCall(input, options);\n\t\tawait this.#boundary(\"listDeliveryAttempts\");\n\t\treturn this.#atomic(call.bounds, () => copyOut<readonly WebhookDeliveryAttemptLogEntry[]>(\n\t\t\tthis.#attempts\n\t\t\t\t.filter((item) => item.deliveryId === call.deliveryId && inScope(item, call.scope))\n\t\t\t\t.map((item) => attemptEntryOut(\n\t\t\t\t\titem.record,\n\t\t\t\t\titem.fence,\n\t\t\t\t\titem.fence === undefined ? undefined : this.#outcomes.get(attemptKey(item.deliveryId, item.fence)),\n\t\t\t\t)),\n\t\t));\n\t}\n\n\tasync listRequeueEvidence(input: WebhookScope & { readonly eventId: string }, options: WebhookCallOptions): Promise<readonly WebhookRequeueEvidence[]> {\n\t\tconst call = readEventCall(input, options);\n\t\tawait this.#boundary(\"listRequeueEvidence\");\n\t\treturn this.#atomic(call.bounds, () => copyOut<readonly WebhookRequeueEvidence[]>(\n\t\t\tthis.#evidence.filter((item) => item.eventId === call.eventId && inScope(item, call.scope)).map((item) => item.record),\n\t\t));\n\t}\n\n\tasync listInvocationRequeueEvidence(\n\t\tinput: WebhookScope & { readonly actionInvocationId: string },\n\t\toptions: WebhookCallOptions,\n\t): Promise<readonly WebhookRequeueEvidence[]> {\n\t\tconst call = readInvocationEvidenceCall(input, options);\n\t\tawait this.#boundary(\"listInvocationRequeueEvidence\");\n\t\treturn this.#atomic(call.bounds, () => copyOut<readonly WebhookRequeueEvidence[]>(\n\t\t\tthis.#evidence\n\t\t\t\t.filter((item) => inScope(item, call.scope) && item.record[\"actionInvocationId\"] === call.actionInvocationId)\n\t\t\t\t.map((item) => item.record),\n\t\t));\n\t}\n\n\tasync readTombstone(\n\t\tinput: WebhookScope & { readonly subscriptionId: string; readonly eventId: string },\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookTombstone | null> {\n\t\tconst call = readTombstoneCall(input, options);\n\t\tawait this.#boundary(\"readTombstone\");\n\t\treturn this.#atomic(call.bounds, () => {\n\t\t\tconst marker = this.#markers.get(markerKey(call.subscriptionId, call.eventId));\n\t\t\tif (marker === undefined || !inScope(marker, call.scope)) return null;\n\t\t\treturn copyOut<WebhookTombstone>(tombstoneOut(marker, this.#horizonMs));\n\t\t});\n\t}\n\n\tasync purgeExpiredRecords(input: { readonly limit: number }, options: WebhookCallOptions): Promise<WebhookPurgeResult> {\n\t\tconst call = readPurgeCall(input, options);\n\t\tawait this.#boundary(\"purgeExpiredRecords\");\n\t\treturn this.#atomic(call.bounds, (nowMs) => {\n\t\t\tconst cutoffMs = this.#floorMs(nowMs);\n\t\t\tconst cutoff = isoOf(cutoffMs);\n\t\t\tconst candidates: { readonly anchorMs: number; readonly rank: number; readonly key: string }[] = [];\n\t\t\tfor (const job of this.#jobs.values()) {\n\t\t\t\tif (job.anchorMs < cutoffMs && TERMINAL_JOB.includes(job.status)) candidates.push({ anchorMs: job.anchorMs, rank: 0, key: job.key });\n\t\t\t}\n\t\t\tfor (const denial of this.#denials.values()) {\n\t\t\t\tif (denial.anchorMs < cutoffMs) candidates.push({ anchorMs: denial.anchorMs, rank: 1, key: denial.key });\n\t\t\t}\n\t\t\tfor (const intent of this.#intents.values()) {\n\t\t\t\tif (intent.anchorMs < cutoffMs && TERMINAL_INTENT.includes(intent.status)) candidates.push({ anchorMs: intent.anchorMs, rank: 2, key: intent.key });\n\t\t\t}\n\t\t\tcandidates.sort((left, right) => left.anchorMs - right.anchorMs || left.rank - right.rank || compareText(left.key, right.key));\n\t\t\tconst take = candidates.length < call.limit ? candidates.length : call.limit;\n\t\t\tconst removed = { fanOutJobs: 0, deliveryIntents: 0, admissionDenials: 0 };\n\t\t\tfor (let index = 0; index < take; index += 1) {\n\t\t\t\tconst rank = candidates[index]!.rank;\n\t\t\t\tif (rank === 0) removed.fanOutJobs += 1;\n\t\t\t\telse if (rank === 1) removed.admissionDenials += 1;\n\t\t\t\telse removed.deliveryIntents += 1;\n\t\t\t}\n\t\t\tconst result = copyOut<WebhookPurgeResult>({ cutoff, removed, more: candidates.length > take });\n\t\t\t// Compute, then commit. Raise the floor in the same step as the\n\t\t\t// removals: from here on no insert or requeue can recreate anything\n\t\t\t// below it.\n\t\t\tthis.#purgedThroughMs = cutoffMs;\n\t\t\tfor (let index = 0; index < take; index += 1) {\n\t\t\t\tconst candidate = candidates[index]!;\n\t\t\t\tif (candidate.rank === 0) {\n\t\t\t\t\tthis.#jobs.delete(candidate.key);\n\t\t\t\t} else if (candidate.rank === 1) {\n\t\t\t\t\tthis.#denials.delete(candidate.key);\n\t\t\t\t\tthis.#markers.delete(candidate.key);\n\t\t\t\t} else {\n\t\t\t\t\tconst intent = this.#intents.get(candidate.key)!;\n\t\t\t\t\tthis.#intents.delete(candidate.key);\n\t\t\t\t\tthis.#markers.delete(markerKey(intent.subscriptionId, intent.eventId));\n\t\t\t\t}\n\t\t\t}\n\t\t\treturn result;\n\t\t});\n\t}\n}\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/**\n * Lease up to `claim.limit` claimable records, oldest `availableAt` first\n * (then `createdAt`, then key), advancing each one's fence. Returns the\n * leased states. Sorting is explicit, so the order never depends on Map\n * insertion order.\n */\nfunction claimFrom<T extends Leased>(records: T[], claim: ClaimInput, render: (record: T, lease: LeaseState) => object): readonly unknown[] {\n\tconst claimable = records.filter((record) =>\n\t\trecord.status === \"pending\" &&\n\t\trecord.availableAtMs <= claim.nowMs &&\n\t\t(record.lease === undefined || record.lease.expiresAtMs <= claim.nowMs));\n\tclaimable.sort((left, right) => left.availableAtMs - right.availableAtMs || left.createdAtMs - right.createdAtMs || compareText(left.key, right.key));\n\tconst leased = claimable.slice(0, claim.limit);\n\t// Compute, then commit: every lease and every returned record is built\n\t// before any record changes, so a failure here leaves the store as it was.\n\tconst plan = leased.map((record) => ({\n\t\trecord,\n\t\tlease: { owner: claim.workerId, fence: record.fence + 1, expiresAtMs: claim.nowMs + claim.leaseDurationMs },\n\t}));\n\tconst out = plan.map(({ record, lease }) => copyOut<object>(render(record, lease)));\n\tfor (const { record, lease } of plan) {\n\t\trecord.fence = lease.fence;\n\t\trecord.lease = lease;\n\t}\n\treturn frozenList(out);\n}\n","import { guard, storeError } from \"./errors\";\nimport type { WebhookScope, WebhookSubscriptionWriteRefusal, WebhookSubscriptionWriteResult } from \"./ports\";\nimport { mathMax } from \"./snapshot\";\nimport {\n\tcloneOut,\n\tcodeOf,\n\tidentifier,\n\tinstant,\n\tisoOf,\n\tnestedRecord,\n\toptionalWholeNumber,\n\treadCallOptions,\n\tsnapshotRecord,\n\ttext,\n\ttextList,\n} from \"./store-input\";\nimport type {\n\tWebhookDeliveryConfiguration,\n\tWebhookDeliveryConfigurationInput,\n\tWebhookSignatureScheme,\n\tWebhookSubscriptionStatus,\n} from \"./types\";\n\n/*\n * What the memory and PostgreSQL subscription stores share: the entry\n * readers, the revision shape, the transition rules and the record\n * renderers. Internal: not exported from the package entry point.\n */\n\nexport interface RevisionState {\n\treadonly revision: number;\n\treadonly status: WebhookSubscriptionStatus;\n\treadonly eventTypePatterns: readonly string[];\n\treadonly effectiveFromMs: number;\n}\n\nexport interface Target extends WebhookScope {\n\treadonly subscriptionId: string;\n}\n\nconst SCHEMES = Object.freeze([\"v1\"] as const);\n\n/** A fresh frozen deep copy with no depth or size limit (`cloneOut`). */\nexport function copyOut<T>(value: object): T {\n\treturn cloneOut<T>(value);\n}\n\nfunction entry<T>(read: () => T): T {\n\treturn guard(read, () => storeError(\"input_invalid\", \"input\"));\n}\n\nfunction readTarget(snap: ReturnType<typeof snapshotRecord>): Target {\n\treturn {\n\t\ttenantId: identifier(snap, \"tenantId\", \"input.tenantId\"),\n\t\tspaceId: identifier(snap, \"spaceId\", \"input.spaceId\"),\n\t\tsubscriptionId: identifier(snap, \"subscriptionId\", \"input.subscriptionId\"),\n\t};\n}\n\nfunction readConfiguration(snap: ReturnType<typeof snapshotRecord>): WebhookDeliveryConfigurationInput {\n\tconst configuration = nestedRecord(snap, \"configuration\", \"input.configuration\");\n\treturn {\n\t\tdestinationUrl: text(configuration, \"destinationUrl\", \"input.configuration.destinationUrl\"),\n\t\tsignatureScheme: codeOf<WebhookSignatureScheme>(configuration, \"signatureScheme\", SCHEMES, \"input.configuration.signatureScheme\"),\n\t\tsecretRef: text(configuration, \"secretRef\", \"input.configuration.secretRef\"),\n\t};\n}\n\n// ---------------------------------------------------------------------------\n// Per-method entry readers\n// ---------------------------------------------------------------------------\n\nexport function readRevisionsAtCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\treturn {\n\t\t\tbounds: readCallOptions(options),\n\t\t\ttenantId: identifier(snap, \"tenantId\", \"input.tenantId\"),\n\t\t\tspaceId: identifier(snap, \"spaceId\", \"input.spaceId\"),\n\t\t\trecordedAtMs: instant(snap, \"recordedAt\", \"input.recordedAt\"),\n\t\t};\n\t});\n}\n\n/** `readSubscription` and `listEligibilityHistory`: one subscription in a scope. */\nexport function readTargetCall(input: unknown, options: unknown) {\n\treturn entry(() => ({ bounds: readCallOptions(options), target: readTarget(snapshotRecord(input, \"input\")) }));\n}\n\nexport function readCreateCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\treturn {\n\t\t\tbounds: readCallOptions(options),\n\t\t\ttarget: readTarget(snap),\n\t\t\tpatterns: textList(snap, \"eventTypePatterns\", \"input.eventTypePatterns\"),\n\t\t\tconfiguration: readConfiguration(snap),\n\t\t};\n\t});\n}\n\nexport function readChangePatternsCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\treturn {\n\t\t\tbounds: readCallOptions(options),\n\t\t\ttarget: readTarget(snap),\n\t\t\texpectedRevision: optionalWholeNumber(snap, \"expectedRevision\", \"input.expectedRevision\", 1),\n\t\t\tpatterns: textList(snap, \"eventTypePatterns\", \"input.eventTypePatterns\"),\n\t\t};\n\t});\n}\n\nexport function readStatusChangeCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\treturn { bounds: readCallOptions(options), target: readTarget(snap), expectedRevision: optionalWholeNumber(snap, \"expectedRevision\", \"input.expectedRevision\", 1) };\n\t});\n}\n\nexport function readReplaceConfigurationCall(input: unknown, options: unknown) {\n\treturn entry(() => {\n\t\tconst snap = snapshotRecord(input, \"input\");\n\t\treturn {\n\t\t\tbounds: readCallOptions(options),\n\t\t\ttarget: readTarget(snap),\n\t\t\texpectedVersion: optionalWholeNumber(snap, \"expectedVersion\", \"input.expectedVersion\", 1),\n\t\t\tconfiguration: readConfiguration(snap),\n\t\t};\n\t});\n}\n\n// ---------------------------------------------------------------------------\n// Transitions\n// ---------------------------------------------------------------------------\n\n/** The status a pause, resume or delete moves to from `status`, or `undefined` when it is not allowed. */\nexport type StatusChange = (status: WebhookSubscriptionStatus) => WebhookSubscriptionStatus | undefined;\n\nexport const PAUSE: StatusChange = (status) => (status === \"active\" ? \"paused\" : undefined);\nexport const RESUME: StatusChange = (status) => (status === \"paused\" ? \"active\" : undefined);\nexport const DELETE: StatusChange = () => \"deleted\";\n\nexport type RevisionChange = (current: RevisionState) => { readonly status: WebhookSubscriptionStatus; readonly patterns: readonly string[] } | undefined;\n\nexport function statusRevisionChange(next: StatusChange): RevisionChange {\n\treturn (current) => {\n\t\tconst status = next(current.status);\n\t\treturn status === undefined ? undefined : { status, patterns: current.eventTypePatterns };\n\t};\n}\n\n/**\n * Decide one transition against the store's current revision: a refusal, or\n * the revision to append. The new revision takes effect at the store's\n * clock, or at the previous revision's start if the clock is behind it, so\n * intervals never invert.\n */\nexport function decideTransition(\n\tcurrent: RevisionState | undefined,\n\texpectedRevision: number | undefined,\n\tnowMs: number,\n\tchange: RevisionChange,\n): { readonly refusal: WebhookSubscriptionWriteResult } | { readonly appended: RevisionState } {\n\tif (current === undefined) return { refusal: refused(\"not_found\") };\n\tif (current.status === \"deleted\") return { refusal: refused(\"deleted\", current.revision) };\n\tif (expectedRevision !== undefined && expectedRevision !== current.revision) return { refusal: refused(\"revision_conflict\", current.revision) };\n\tconst next = change(current);\n\tif (next === undefined) return { refusal: refused(\"invalid_transition\", current.revision) };\n\treturn {\n\t\tappended: {\n\t\t\trevision: current.revision + 1,\n\t\t\tstatus: next.status,\n\t\t\teventTypePatterns: next.patterns,\n\t\t\teffectiveFromMs: mathMax(nowMs, current.effectiveFromMs),\n\t\t},\n\t};\n}\n\nexport function refused(refusal: WebhookSubscriptionWriteRefusal, currentRevision?: number): WebhookSubscriptionWriteResult {\n\treturn copyOut<WebhookSubscriptionWriteResult>({ applied: false, refusal, currentRevision });\n}\n\n// ---------------------------------------------------------------------------\n// Rendering\n// ---------------------------------------------------------------------------\n\n/** A revision as the read port returns it; `nextEffectiveFromMs` is its successor's start, if any. */\nexport function revisionOut(target: Target, revision: RevisionState, nextEffectiveFromMs: number | undefined): object {\n\treturn {\n\t\tsubscriptionId: target.subscriptionId,\n\t\trevision: revision.revision,\n\t\ttenantId: target.tenantId,\n\t\tspaceId: target.spaceId,\n\t\tstatus: revision.status,\n\t\teventTypePatterns: revision.eventTypePatterns,\n\t\teffectiveFrom: isoOf(revision.effectiveFromMs),\n\t\teffectiveUntil: nextEffectiveFromMs === undefined ? null : isoOf(nextEffectiveFromMs),\n\t};\n}\n\n/**\n * The snapshot's `statusSinceRevision`: the revision at which the latest\n * revision's status began, i.e. one past the last revision with another\n * status, or 1. Revisions are numbered 1, 2, 3 … with no gaps\n * (`decideTransition` appends `current.revision + 1`); the PostgreSQL\n * store computes the same in SQL (`readSubscription`), and the contract\n * case \"readSubscription reports the revision the current status began at …\"\n * holds both to it.\n */\nexport function statusSinceRevision(revisions: readonly RevisionState[]): number {\n\tconst current = revisions[revisions.length - 1]!;\n\tfor (let index = revisions.length - 1; index >= 0; index -= 1) {\n\t\tif (revisions[index]!.status !== current.status) return revisions[index]!.revision + 1;\n\t}\n\treturn 1;\n}\n\nexport function configurationOut(target: Target, version: number, configuration: WebhookDeliveryConfigurationInput): WebhookDeliveryConfiguration {\n\treturn copyOut<WebhookDeliveryConfiguration>({\n\t\tsubscriptionId: target.subscriptionId,\n\t\ttenantId: target.tenantId,\n\t\tspaceId: target.spaceId,\n\t\tversion,\n\t\t...configuration,\n\t});\n}\n\n/** UTF-16 code unit order, as JavaScript's `<` compares strings. */\nexport function compareText(left: string, right: string): number {\n\treturn left < right ? -1 : left > right ? 1 : 0;\n}\n","import { readHookOption } from \"./delivery-store-core\";\nimport { guard, storeError } from \"./errors\";\nimport type {\n\tWebhookCallOptions,\n\tWebhookClock,\n\tWebhookConfigurationWriteResult,\n\tWebhookScope,\n\tWebhookSubscriptionStore,\n\tWebhookSubscriptionTransitionInput,\n\tWebhookSubscriptionWriteResult,\n\tWebhookSubscriptionWriter,\n} from \"./ports\";\nimport {\n\tassertCallWanted,\n\tcaptureClock,\n\tcompositeKey,\n\treadClock,\n\ttype CallBounds,\n\ttype CapturedClock,\n} from \"./store-input\";\nimport {\n\tcompareText,\n\tconfigurationOut,\n\tcopyOut,\n\tdecideTransition,\n\tDELETE,\n\tPAUSE,\n\treadChangePatternsCall,\n\treadCreateCall,\n\treadReplaceConfigurationCall,\n\treadRevisionsAtCall,\n\treadStatusChangeCall,\n\treadTargetCall,\n\trefused,\n\tRESUME,\n\trevisionOut,\n\tstatusRevisionChange,\n\tstatusSinceRevision,\n\ttype RevisionChange,\n\ttype RevisionState,\n\ttype StatusChange,\n\ttype Target,\n} from \"./subscription-store-core\";\nimport type {\n\tWebhookDeliveryConfiguration,\n\tWebhookDeliveryConfigurationInput,\n\tWebhookEligibilityRevision,\n\tWebhookSubscriptionSnapshot,\n} from \"./types\";\n\n/*\n * In-memory subscription store: the read port the cycles use and the writer\n * port the governed actions use, in one instance so a test or local process\n * can share state between them. Same method shape as the memory delivery\n * store: snapshot at entry, one I/O boundary, then one synchronous step\n * that reads the store's clock, checks the transition against the store's\n * own current state and appends. Revisions and configuration versions are\n * append-only; a revision's `effectiveUntil` is derived from its\n * successor's `effectiveFrom` on read, so no stored revision is ever changed.\n * Input reading and the transition rules are shared with the PostgreSQL\n * store (src/subscription-store-core.ts).\n */\n\n/** Options for {@link MemoryWebhookSubscriptionStore}. */\nexport interface MemoryWebhookSubscriptionStoreOptions {\n\t/** The store's clock: every revision takes effect at its time (decision 3). */\n\treadonly clock: WebhookClock;\n\t/**\n\t * Test seam. Awaited at each call's I/O boundary, after its input is read\n\t * and before its atomic step, with the method name. A contract test uses\n\t * it to hold one call there while another runs to completion, forcing an\n\t * interleaving. A throw or rejection fails the call as `store_failed`,\n\t * with nothing written. Leave it unset outside tests.\n\t */\n\treadonly beforeAtomicStep?: (operation: string) => Promise<void> | void;\n}\n\ninterface SubscriptionState extends Target {\n\treadonly revisions: RevisionState[];\n\treadonly configurations: WebhookDeliveryConfiguration[];\n}\n\n/** The key of one (tenantId, spaceId, subscriptionId); JSON-encoded, so distinct tuples never collide. */\nfunction subscriptionKey(tenantId: string, spaceId: string, subscriptionId: string): string {\n\treturn compositeKey(tenantId, spaceId, subscriptionId);\n}\n\nfunction ioBoundary(): Promise<void> {\n\treturn Promise.resolve();\n}\n\nfunction revisionAt(subscription: SubscriptionState, index: number): object {\n\treturn revisionOut(subscription, subscription.revisions[index]!, subscription.revisions[index + 1]?.effectiveFromMs);\n}\n\n/**\n * An in-memory {@link WebhookSubscriptionStore} and {@link WebhookSubscriptionWriter}.\n * Subscriptions are keyed by (tenantId, spaceId, subscriptionId); a read or\n * write in another scope does not see them.\n *\n * @throws {WebhookStoreError} `clock_invalid` when `clock` has no `now` function.\n */\nexport class MemoryWebhookSubscriptionStore implements WebhookSubscriptionStore, WebhookSubscriptionWriter {\n\treadonly #clock: CapturedClock;\n\treadonly #beforeAtomicStep: ((operation: string) => Promise<void> | void) | undefined;\n\treadonly #subscriptions = new Map<string, SubscriptionState>();\n\n\tconstructor(options: MemoryWebhookSubscriptionStoreOptions) {\n\t\tthis.#clock = guard(() => {\n\t\t\tif (options === null || typeof options !== \"object\") throw storeError(\"clock_invalid\", \"clock\");\n\t\t\treturn captureClock(options.clock);\n\t\t}, () => storeError(\"clock_invalid\", \"clock\"));\n\t\tthis.#beforeAtomicStep = readHookOption(options, \"beforeAtomicStep\");\n\t}\n\n\t/** The I/O boundary: the injected seam, or one resolved turn. */\n\tasync #boundary(operation: string): Promise<void> {\n\t\tconst hook = this.#beforeAtomicStep;\n\t\tif (hook === undefined) return ioBoundary();\n\t\ttry {\n\t\t\tawait hook(operation);\n\t\t} catch {\n\t\t\tthrow storeError(\"store_failed\", \"beforeAtomicStep\");\n\t\t}\n\t}\n\n\t#atomic<T>(bounds: CallBounds, body: (nowMs: number) => T): T {\n\t\treturn guard(() => {\n\t\t\tconst nowMs = readClock(this.#clock);\n\t\t\tassertCallWanted(bounds, nowMs);\n\t\t\treturn body(nowMs);\n\t\t}, () => storeError(\"store_failed\", \"store\"));\n\t}\n\n\t#find(target: Target): SubscriptionState | undefined {\n\t\treturn this.#subscriptions.get(subscriptionKey(target.tenantId, target.spaceId, target.subscriptionId));\n\t}\n\n\t// -------------------------------------------------------------------------\n\t// Reads\n\t// -------------------------------------------------------------------------\n\n\tasync listEligibilityRevisions(\n\t\tinput: WebhookScope & { readonly recordedAt: string },\n\t\toptions: WebhookCallOptions,\n\t): Promise<readonly WebhookEligibilityRevision[]> {\n\t\tconst call = readRevisionsAtCall(input, options);\n\t\tawait this.#boundary(\"listEligibilityRevisions\");\n\t\treturn this.#atomic(call.bounds, () => {\n\t\t\tconst found: object[] = [];\n\t\t\tconst subscriptions = [...this.#subscriptions.values()]\n\t\t\t\t.filter((subscription) => subscription.tenantId === call.tenantId && subscription.spaceId === call.spaceId)\n\t\t\t\t.sort((left, right) => compareText(left.subscriptionId, right.subscriptionId));\n\t\t\tfor (const subscription of subscriptions) {\n\t\t\t\t// Half-open: effectiveFrom <= recordedAt < next.effectiveFrom.\n\t\t\t\tfor (let index = subscription.revisions.length - 1; index >= 0; index -= 1) {\n\t\t\t\t\tif (subscription.revisions[index]!.effectiveFromMs <= call.recordedAtMs) {\n\t\t\t\t\t\tconst next = subscription.revisions[index + 1];\n\t\t\t\t\t\tif (next === undefined || call.recordedAtMs < next.effectiveFromMs) found.push(revisionAt(subscription, index));\n\t\t\t\t\t\tbreak;\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t\treturn copyOut<readonly WebhookEligibilityRevision[]>(found);\n\t\t});\n\t}\n\n\tasync readSubscription(\n\t\tinput: WebhookScope & { readonly subscriptionId: string },\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookSubscriptionSnapshot | null> {\n\t\tconst call = readTargetCall(input, options);\n\t\tawait this.#boundary(\"readSubscription\");\n\t\treturn this.#atomic(call.bounds, () => {\n\t\t\tconst subscription = this.#find(call.target);\n\t\t\tif (subscription === undefined) return null;\n\t\t\treturn copyOut<WebhookSubscriptionSnapshot>({\n\t\t\t\tsubscriptionId: subscription.subscriptionId,\n\t\t\t\ttenantId: subscription.tenantId,\n\t\t\t\tspaceId: subscription.spaceId,\n\t\t\t\tstatus: subscription.revisions[subscription.revisions.length - 1]!.status,\n\t\t\t\tstatusSinceRevision: statusSinceRevision(subscription.revisions),\n\t\t\t\tconfiguration: subscription.configurations[subscription.configurations.length - 1]!,\n\t\t\t});\n\t\t});\n\t}\n\n\tasync listEligibilityHistory(\n\t\tinput: WebhookScope & { readonly subscriptionId: string },\n\t\toptions: WebhookCallOptions,\n\t): Promise<readonly WebhookEligibilityRevision[]> {\n\t\tconst call = readTargetCall(input, options);\n\t\tawait this.#boundary(\"listEligibilityHistory\");\n\t\treturn this.#atomic(call.bounds, () => {\n\t\t\tconst subscription = this.#find(call.target);\n\t\t\tif (subscription === undefined) return copyOut<readonly WebhookEligibilityRevision[]>([]);\n\t\t\treturn copyOut<readonly WebhookEligibilityRevision[]>(subscription.revisions.map((_revision, index) => revisionAt(subscription, index)));\n\t\t});\n\t}\n\n\t// -------------------------------------------------------------------------\n\t// Writes\n\t// -------------------------------------------------------------------------\n\n\tasync createSubscription(\n\t\tinput: WebhookScope & {\n\t\t\treadonly subscriptionId: string;\n\t\t\treadonly eventTypePatterns: readonly string[];\n\t\t\treadonly configuration: WebhookDeliveryConfigurationInput;\n\t\t},\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookSubscriptionWriteResult> {\n\t\tconst call = readCreateCall(input, options);\n\t\tawait this.#boundary(\"createSubscription\");\n\t\treturn this.#atomic(call.bounds, (nowMs) => {\n\t\t\tif (this.#find(call.target) !== undefined) return refused(\"already_exists\");\n\t\t\tconst { tenantId, spaceId, subscriptionId } = call.target;\n\t\t\tconst configuration = configurationOut(call.target, 1, call.configuration);\n\t\t\tconst subscription: SubscriptionState = {\n\t\t\t\tsubscriptionId,\n\t\t\t\ttenantId,\n\t\t\t\tspaceId,\n\t\t\t\trevisions: [{ revision: 1, status: \"active\", eventTypePatterns: call.patterns, effectiveFromMs: nowMs }],\n\t\t\t\tconfigurations: [configuration],\n\t\t\t};\n\t\t\tconst result = copyOut<WebhookSubscriptionWriteResult>({ applied: true, revision: revisionAt(subscription, 0), configuration });\n\t\t\tthis.#subscriptions.set(subscriptionKey(tenantId, spaceId, subscriptionId), subscription);\n\t\t\treturn result;\n\t\t});\n\t}\n\n\tasync changeEventTypePatterns(\n\t\tinput: WebhookSubscriptionTransitionInput & { readonly eventTypePatterns: readonly string[] },\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookSubscriptionWriteResult> {\n\t\tconst call = readChangePatternsCall(input, options);\n\t\tawait this.#boundary(\"changeEventTypePatterns\");\n\t\treturn this.#atomic(call.bounds, (nowMs) =>\n\t\t\tthis.#transition(call.target, call.expectedRevision, nowMs, (current) => ({ status: current.status, patterns: call.patterns })));\n\t}\n\n\tasync pauseSubscription(input: WebhookSubscriptionTransitionInput, options: WebhookCallOptions): Promise<WebhookSubscriptionWriteResult> {\n\t\treturn this.#statusChange(\"pauseSubscription\", input, options, PAUSE);\n\t}\n\n\tasync resumeSubscription(input: WebhookSubscriptionTransitionInput, options: WebhookCallOptions): Promise<WebhookSubscriptionWriteResult> {\n\t\treturn this.#statusChange(\"resumeSubscription\", input, options, RESUME);\n\t}\n\n\tasync deleteSubscription(input: WebhookSubscriptionTransitionInput, options: WebhookCallOptions): Promise<WebhookSubscriptionWriteResult> {\n\t\treturn this.#statusChange(\"deleteSubscription\", input, options, DELETE);\n\t}\n\n\tasync replaceDeliveryConfiguration(\n\t\tinput: WebhookScope & { readonly subscriptionId: string; readonly configuration: WebhookDeliveryConfigurationInput; readonly expectedVersion?: number },\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookConfigurationWriteResult> {\n\t\tconst call = readReplaceConfigurationCall(input, options);\n\t\tawait this.#boundary(\"replaceDeliveryConfiguration\");\n\t\treturn this.#atomic(call.bounds, () => {\n\t\t\tconst subscription = this.#find(call.target);\n\t\t\tif (subscription === undefined) return copyOut<WebhookConfigurationWriteResult>({ applied: false, refusal: \"not_found\" });\n\t\t\tif (subscription.revisions[subscription.revisions.length - 1]!.status === \"deleted\") {\n\t\t\t\treturn copyOut<WebhookConfigurationWriteResult>({ applied: false, refusal: \"deleted\" });\n\t\t\t}\n\t\t\tconst current = subscription.configurations[subscription.configurations.length - 1]!;\n\t\t\tif (call.expectedVersion !== undefined && call.expectedVersion !== current.version) {\n\t\t\t\treturn copyOut<WebhookConfigurationWriteResult>({ applied: false, refusal: \"version_conflict\", currentVersion: current.version });\n\t\t\t}\n\t\t\tconst configuration = configurationOut(subscription, current.version + 1, call.configuration);\n\t\t\tconst result = copyOut<WebhookConfigurationWriteResult>({ applied: true, configuration });\n\t\t\tsubscription.configurations.push(configuration);\n\t\t\treturn result;\n\t\t});\n\t}\n\n\tasync #statusChange(\n\t\toperation: string,\n\t\tinput: WebhookSubscriptionTransitionInput,\n\t\toptions: WebhookCallOptions,\n\t\tnext: StatusChange,\n\t): Promise<WebhookSubscriptionWriteResult> {\n\t\tconst call = readStatusChangeCall(input, options);\n\t\tawait this.#boundary(operation);\n\t\treturn this.#atomic(call.bounds, (nowMs) => this.#transition(call.target, call.expectedRevision, nowMs, statusRevisionChange(next)));\n\t}\n\n\t/**\n\t * Append one revision, checked against the store's current state. Runs\n\t * inside the atomic step.\n\t */\n\t#transition(target: Target, expectedRevision: number | undefined, nowMs: number, change: RevisionChange): WebhookSubscriptionWriteResult {\n\t\tconst subscription = this.#find(target);\n\t\tconst decision = decideTransition(subscription?.revisions[subscription.revisions.length - 1], expectedRevision, nowMs, change);\n\t\tif (\"refusal\" in decision) return decision.refusal;\n\t\tconst current = subscription!;\n\t\t// Compute, then commit: the result is built from the would-be history\n\t\t// before the revision is appended.\n\t\tconst result = copyOut<WebhookSubscriptionWriteResult>({\n\t\t\tapplied: true,\n\t\t\trevision: revisionOut(current, decision.appended, undefined),\n\t\t\tconfiguration: current.configurations[current.configurations.length - 1]!,\n\t\t});\n\t\tcurrent.revisions.push(decision.appended);\n\t\treturn result;\n\t}\n}\n","import { guard, storeError } from \"./errors\";\nimport { sha256Hex } from \"./receipt\";\nimport { matches } from \"./snapshot\";\nimport { assertCallWanted, readClock, type CallBounds, type CapturedClock } from \"./store-input\";\n\n/*\n * What the PostgreSQL stores need from a database client, and the\n * transaction, migration and row-reading helpers both stores share.\n *\n * The client is injected and structural, like Host's `PlatformHostSqlClient`:\n * `pg.Pool` satisfies it, and the package has no runtime dependency on `pg`.\n * Unlike Host's interface it also needs `connect()`, because a store method\n * that checks and then writes runs several statements, with the store's\n * clock read between them, on one connection inside one transaction.\n */\n\n/** The rows a query returned. */\nexport interface WebhookPostgresResult<Row = Record<string, unknown>> {\n\trows: Row[];\n}\n\n/** Anything that runs one parameterized statement. */\nexport interface WebhookPostgresQueryable {\n\tquery<Row = Record<string, unknown>>(sql: string, values?: unknown[]): Promise<WebhookPostgresResult<Row>>;\n}\n\n/** One checked-out connection. `release(true)` discards it instead of returning it to the pool. */\nexport interface WebhookPostgresConnection extends WebhookPostgresQueryable {\n\trelease(destroy?: boolean): void;\n}\n\n/** A connection pool: `pg.Pool`, or a Lakebase-compatible client with the same two methods. */\nexport interface WebhookPostgresPool extends WebhookPostgresQueryable {\n\tconnect(): Promise<WebhookPostgresConnection>;\n}\n\n/** Where the store pauses inside a transaction, for the serialization tests only. */\nexport type WebhookTransactionCheckpointStage = \"locked\" | \"written\";\n\n/**\n * A schema name the stores accept: lower-case ASCII letters, digits and\n * underscores, starting with a letter or underscore, at most 63 bytes (the\n * PostgreSQL identifier limit). It is double-quoted wherever it is used, so\n * the pattern, not quoting, is what keeps it from being read as SQL.\n */\nconst SCHEMA_NAME = /^[a-z_][a-z0-9_]{0,62}$/;\n\nexport const DEFAULT_WEBHOOK_SCHEMA = \"fabric_webhook_delivery\";\n\n/** Read the optional `schema` option; anything but a valid name is `input_invalid`. */\nexport function readSchemaOption(options: unknown): string {\n\treturn guard(() => {\n\t\tconst schema = (options as { schema?: unknown }).schema;\n\t\tif (schema === undefined) return `\"${DEFAULT_WEBHOOK_SCHEMA}\"`;\n\t\tif (typeof schema !== \"string\" || !matches(SCHEMA_NAME, schema)) throw storeError(\"input_invalid\", \"schema\");\n\t\treturn `\"${schema}\"`;\n\t}, () => storeError(\"input_invalid\", \"schema\"));\n}\n\n/** Read the required `pool` option: an object with `query` and `connect` functions. */\nexport function readPoolOption(options: unknown): WebhookPostgresPool {\n\treturn guard(() => {\n\t\tconst pool = (options as { pool?: unknown }).pool;\n\t\tif (pool === null || typeof pool !== \"object\") throw storeError(\"input_invalid\", \"pool\");\n\t\tconst { query, connect } = pool as { query?: unknown; connect?: unknown };\n\t\tif (typeof query !== \"function\" || typeof connect !== \"function\") throw storeError(\"input_invalid\", \"pool\");\n\t\treturn pool as WebhookPostgresPool;\n\t}, () => storeError(\"input_invalid\", \"pool\"));\n}\n\n/**\n * Run `run` and map whatever it throws: a package error passes through, and\n * anything else (a driver error, a lost connection, a constraint violation)\n * becomes `store_failed` without being read.\n */\nexport async function storeCall<T>(run: () => Promise<T>): Promise<T> {\n\ttry {\n\t\treturn await run();\n\t} catch (thrown) {\n\t\treturn guard<T>(() => {\n\t\t\tthrow thrown;\n\t\t}, () => storeError(\"store_failed\", \"store\"));\n\t}\n}\n\n/** Lets a transaction body end in ROLLBACK while still returning its result. */\nexport interface WebhookTransactionControl {\n\t/** Roll back instead of committing; the body's return value is still returned. */\n\tabandon(): void;\n}\n\n/**\n * Run `run` inside one READ COMMITTED transaction on one connection. The\n * isolation level is named rather than inherited, because the locking\n * argument in the README (\"PostgreSQL stores\") assumes it. The transaction\n * commits unless `run` throws or calls `control.abandon()`. Any throw rolls\n * back; if the rollback itself fails the connection is discarded rather\n * than returned to the pool in an unknown state.\n */\nexport async function inTransaction<T>(\n\tpool: WebhookPostgresPool,\n\trun: (tx: WebhookPostgresQueryable, control: WebhookTransactionControl) => Promise<T>,\n): Promise<T> {\n\tconst connection = await pool.connect();\n\tlet destroy = false;\n\tlet abandoned = false;\n\ttry {\n\t\tawait connection.query(\"BEGIN ISOLATION LEVEL READ COMMITTED\");\n\t\tconst result = await run(connection, { abandon: () => { abandoned = true; } });\n\t\tawait connection.query(abandoned ? \"ROLLBACK\" : \"COMMIT\");\n\t\treturn result;\n\t} catch (error) {\n\t\ttry {\n\t\t\tawait connection.query(\"ROLLBACK\");\n\t\t} catch {\n\t\t\tdestroy = true;\n\t\t}\n\t\tthrow error;\n\t} finally {\n\t\tconnection.release(destroy);\n\t}\n}\n\n/**\n * One store write, in one transaction, in three phases:\n *\n * 1. `lock` runs every statement that can wait on another transaction:\n * the horizon table lock, `SELECT … FOR UPDATE` / `FOR SHARE` on the\n * records the write reads, and a tentative insert-if-absent, whose\n * conflict check waits on a concurrent uncommitted insert of the same\n * key. It decides nothing.\n * 2. With every lock held, the store's clock is read and a call whose\n * signal aborted or whose deadline passed is refused, rolling back. A\n * call that waited for a lock is therefore judged, and its horizon\n * floor computed, at the time it decides, not before it waited.\n * 3. `body` decides from what `lock` read and finishes the write. It may\n * call `control.abandon()` to roll back a tentative write and still\n * return its result (an insert that turned out past the horizon).\n *\n * Immediately before COMMIT the clock is read and the bounds are checked\n * once more, so nothing commits if the signal aborted or the deadline\n * passed while `body` ran. The purge is the only write whose `body` can\n * wait on another transaction (its deletes wait for row locks). Every other\n * body writes only rows its `lock` phase already holds, rows it inserted\n * there, rows keyed by a fresh identity value (attempts, requeue evidence),\n * a begun attempt keyed by its intent's current fence (no other transaction\n * can insert that key while this one holds the intent row), or a\n * subscription's next revision or configuration version, which no other\n * transaction can insert while this one holds the head row.\n */\nexport function runWrite<L, T>(\n\tpool: WebhookPostgresPool,\n\tclock: CapturedClock,\n\tbounds: CallBounds,\n\tlock: (tx: WebhookPostgresQueryable) => Promise<L>,\n\tbody: (tx: WebhookPostgresQueryable, nowMs: number, locked: L, control: WebhookTransactionControl) => Promise<T>,\n): Promise<T> {\n\treturn storeCall(() => inTransaction(pool, async (tx, control) => {\n\t\tconst locked = await lock(tx);\n\t\tconst nowMs = readClock(clock);\n\t\tassertCallWanted(bounds, nowMs);\n\t\tconst result = await body(tx, nowMs, locked, control);\n\t\tassertCallWanted(bounds, readClock(clock));\n\t\treturn result;\n\t}));\n}\n\n/** One store read: one statement (its own transaction) after the call-bounds check. */\nexport function runRead<T>(\n\tpool: WebhookPostgresPool,\n\tclock: CapturedClock,\n\tbounds: CallBounds,\n\tbody: (db: WebhookPostgresQueryable, nowMs: number) => Promise<T>,\n): Promise<T> {\n\treturn storeCall(async () => {\n\t\tconst nowMs = readClock(clock);\n\t\tassertCallWanted(bounds, nowMs);\n\t\treturn body(pool, nowMs);\n\t});\n}\n\n/** Await a test seam; a throw or rejection fails the call as `store_failed` naming the seam. */\nexport async function awaitHook(hook: (() => Promise<void> | void) | undefined, field: string): Promise<void> {\n\tif (hook === undefined) return;\n\ttry {\n\t\tawait hook();\n\t} catch {\n\t\tthrow storeError(\"store_failed\", field);\n\t}\n}\n\n// ---------------------------------------------------------------------------\n// Migrations\n// ---------------------------------------------------------------------------\n\n/** One immutable migration. `sql` names the schema as `{{schema}}`. */\nexport interface WebhookPostgresMigration {\n\treadonly version: number;\n\treadonly name: string;\n\treadonly sql: string;\n}\n\n\n/**\n * Apply `component`'s migrations to `schema`, in version order, in one\n * transaction, mirroring Host's `applyPostgresMigrations`: a\n * transaction-scoped advisory lock serializes concurrent callers, each\n * applied version is recorded with the SHA-256 of its SQL template, and a\n * recorded version whose template has since changed fails as `store_failed`\n * (`ensureSchema.checksum`) instead of being re-run. The checksum is taken\n * before the schema name is substituted, so the same migration has the same\n * checksum in every schema.\n */\nexport async function applyWebhookMigrations(\n\tpool: WebhookPostgresPool,\n\tschema: string,\n\tcomponent: string,\n\tmigrations: readonly WebhookPostgresMigration[],\n): Promise<void> {\n\tconst ordered = [...migrations].sort((left, right) => left.version - right.version);\n\tconst checksums = await Promise.all(ordered.map((migration) => sha256Hex(migration.sql, \"ensureSchema.crypto\")));\n\tawait storeCall(() => inTransaction(pool, async (tx) => {\n\t\tawait tx.query(\"SELECT pg_advisory_xact_lock(hashtext($1))\", [`fabric_webhook_delivery.schema_migrations:${schema}`]);\n\t\tawait tx.query(`CREATE SCHEMA IF NOT EXISTS ${schema}`);\n\t\tawait tx.query(`CREATE TABLE IF NOT EXISTS ${schema}.webhook_schema_migrations (\n\t\t\tcomponent text NOT NULL,\n\t\t\tversion integer NOT NULL,\n\t\t\tname text NOT NULL,\n\t\t\tchecksum text NOT NULL,\n\t\t\tapplied_at timestamptz NOT NULL DEFAULT now(),\n\t\t\tPRIMARY KEY (component, version)\n\t\t)`);\n\t\tfor (let index = 0; index < ordered.length; index += 1) {\n\t\t\tconst migration = ordered[index]!;\n\t\t\tconst checksum = checksums[index]!;\n\t\t\tconst recorded = await tx.query<{ checksum: string }>(\n\t\t\t\t`SELECT checksum FROM ${schema}.webhook_schema_migrations WHERE component = $1 AND version = $2`,\n\t\t\t\t[component, migration.version],\n\t\t\t);\n\t\t\tconst row = recorded.rows[0];\n\t\t\tif (row !== undefined) {\n\t\t\t\tif (row.checksum !== checksum) throw storeError(\"store_failed\", \"ensureSchema.checksum\");\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tawait tx.query(migration.sql.replaceAll(\"{{schema}}\", schema));\n\t\t\tawait tx.query(\n\t\t\t\t`INSERT INTO ${schema}.webhook_schema_migrations (component, version, name, checksum) VALUES ($1, $2, $3, $4)`,\n\t\t\t\t[component, migration.version, migration.name, checksum],\n\t\t\t);\n\t\t}\n\t}));\n}\n\n// ---------------------------------------------------------------------------\n// Values in and out\n// ---------------------------------------------------------------------------\n\nconst jsonParse = JSON.parse;\nconst numberIsSafeInteger = Number.isSafeInteger;\nconst NumberConstructor = Number;\n\n/**\n * A sort key whose byte order (under `COLLATE \"C\"`) is the UTF-16 code unit\n * order JavaScript's `<` uses: four hex digits per code unit. PostgreSQL's\n * own text orders compare code points or follow a locale, which would put a\n * few strings in a different order from the memory store's sort.\n */\nexport function utf16SortKey(value: string): string {\n\tlet key = \"\";\n\tfor (let index = 0; index < value.length; index += 1) key += value.charCodeAt(index).toString(16).padStart(4, \"0\");\n\treturn key;\n}\n\n/** A whole number read from a row; `bigint` columns are selected as text so every client returns the same thing. */\nexport function intOf(value: unknown, field: string): number {\n\tconst number = typeof value === \"number\" ? value : typeof value === \"string\" ? NumberConstructor(value) : Number.NaN;\n\tif (!numberIsSafeInteger(number)) throw storeError(\"store_failed\", field);\n\treturn number;\n}\n\nexport function optionalIntOf(value: unknown, field: string): number | undefined {\n\treturn value === null || value === undefined ? undefined : intOf(value, field);\n}\n\nexport function textOf(value: unknown, field: string): string {\n\tif (typeof value !== \"string\") throw storeError(\"store_failed\", field);\n\treturn value;\n}\n\nexport function optionalTextOf(value: unknown, field: string): string | undefined {\n\treturn value === null || value === undefined ? undefined : textOf(value, field);\n}\n\n/**\n * Parse a `json` column selected as text. The stores write JSON text with\n * the package serializer and keep it in `json` columns, not `jsonb`: `json`\n * keeps the text as written, so key order and every string, lone\n * surrogates included, come back exactly as the memory store would return\n * them.\n */\nexport function jsonOf(value: unknown, field: string): unknown {\n\tconst text = textOf(value, field);\n\ttry {\n\t\treturn jsonParse(text) as unknown;\n\t} catch {\n\t\tthrow storeError(\"store_failed\", field);\n\t}\n}\n","import type { WebhookDiagnosticCode } from \"./codes\";\nimport {\n\tapplyEnrichment,\n\tapplyRequeue,\n\tapplySettlement,\n\tattemptEntryOut,\n\tbeginResult,\n\tcompareText,\n\tcopyOut,\n\tdenialRecord,\n\tfencedOutcome,\n\tholds,\n\tholdsFence,\n\tinScope,\n\tintentOut,\n\tenrichmentRefusal,\n\tenrichmentRefused,\n\tintentRequeueEvidence,\n\tjobOut,\n\tjobEnrichmentEvidence,\n\tjobRequeueEvidence,\n\tleaseCheck,\n\tpriorInvocationEvidence,\n\tmarkerKey,\n\tmayBegin,\n\treadAppendAttemptCall,\n\treadBeginAttemptCall,\n\treadCancelCall,\n\treadClaimCall,\n\treadDeadLetterJobCall,\n\treadDeliveryCall,\n\treadDenialCall,\n\treadEventCall,\n\treadFinishAttemptCall,\n\treadHookOption,\n\treadHorizonOption,\n\treadInsertFanOutJobCall,\n\treadInsertIntentCall,\n\treadIntentRequeueCall,\n\treadInvocationEvidenceCall,\n\treadJobFencedCall,\n\treadJobEnrichmentCall,\n\treadJobRequeueCall,\n\treadLeaseCheckCall,\n\treadPurgeCall,\n\treadRenewIntentCall,\n\treadRenewJobCall,\n\treadRescheduleCall,\n\treadSettleCall,\n\treadTombstoneCall,\n\trenewedExpiryMs,\n\trequeueRefusal,\n\trequeueRefused,\n\treplayedResult,\n\ttype InvocationTarget,\n\tTERMINAL_INTENT,\n\tTERMINAL_JOB,\n\ttombstoneOut,\n\ttype IntentState,\n\ttype JobState,\n\ttype MarkerState,\n} from \"./delivery-store-core\";\nimport { guard, storeError } from \"./errors\";\nimport { attemptReceiptDigest, newAttemptReceipt } from \"./receipt\";\nimport type {\n\tWebhookActorEnrichmentResult,\n\tWebhookAttemptBeginResult,\n\tWebhookCallOptions,\n\tWebhookClaimRequest,\n\tWebhookClock,\n\tWebhookDeliveryLeaseCheck,\n\tWebhookDeliveryStore,\n\tWebhookFanOutJobFence,\n\tWebhookFencedInsertResult,\n\tWebhookFencedWrite,\n\tWebhookInsertResult,\n\tWebhookPurgeResult,\n\tWebhookRequeueResult,\n\tWebhookScope,\n} from \"./ports\";\nimport {\n\tapplyWebhookMigrations,\n\tawaitHook,\n\tintOf,\n\tjsonOf,\n\toptionalIntOf,\n\toptionalTextOf,\n\treadPoolOption,\n\treadSchemaOption,\n\trunRead,\n\trunWrite,\n\tstoreCall,\n\ttextOf,\n\tutf16SortKey,\n\ttype WebhookPostgresMigration,\n\ttype WebhookPostgresPool,\n\ttype WebhookPostgresQueryable,\n\ttype WebhookTransactionCheckpointStage,\n\ttype WebhookTransactionControl,\n} from \"./postgres-sql\";\nimport { frozenList, mathMax, serializeJson } from \"./snapshot\";\nimport { captureClock, isoOf, type CallBounds, type CapturedClock, type Snapshot } from \"./store-input\";\nimport type {\n\tWebhookActorEnrichmentRequest,\n\tWebhookAdmissionDenialRecord,\n\tWebhookDeliveryAttemptFinish,\n\tWebhookDeliveryAttemptLogEntry,\n\tWebhookDeliveryAttemptRecord,\n\tWebhookDeliveryAttemptStart,\n\tWebhookDeliveryIntent,\n\tWebhookFanOutJob,\n\tWebhookFanOutJobDraft,\n\tWebhookRequeueEvidence,\n\tWebhookRequeueRequest,\n\tWebhookTombstone,\n} from \"./types\";\n\n/*\n * PostgreSQL WebhookDeliveryStore. It holds the same contract as the memory\n * store (tests/store-contract.ts runs against both) and reads its input and\n * renders its records through the same functions (src/delivery-store-core.ts).\n *\n * Every method has the memory store's shape, with the synchronous atomic\n * step replaced by one transaction:\n *\n * 1. Entry: the shared reader copies and validates the arguments.\n * 2. The `beforeAtomicStep` test seam, awaited before any connection is\n * taken or transaction opened.\n * 3. For a write, one READ COMMITTED transaction on one connection\n * (`runWrite` in src/postgres-sql.ts), in this order:\n * a. every lock, in a fixed order: the horizon table lock first (when\n * the method takes it), then the record rows (`FOR UPDATE`, or\n * `FOR SHARE` on an insert's parent job), then any tentative\n * insert-if-absent, whose conflict check can wait on a concurrent\n * insert of the same key;\n * b. the store's clock, and the refusal of a call whose signal\n * aborted or whose deadline passed, possibly while it waited in (a);\n * c. every check (lease, scope, horizon floor, uniqueness, status) and\n * the write, or a rollback of the tentative insert;\n * d. the clock and the call bounds once more, then COMMIT.\n * A read is one statement after the bounds check.\n *\n * Replay-horizon serialization. A purge and a horizon-checked write (job,\n * intent and denial inserts, job and intent requeues, actor enrichment)\n * must not interleave\n * between the write's read of the purge floor and its write; otherwise a\n * purge could remove a key after an insert read the old floor, and the\n * insert would re-create it. The mechanism is a table-level lock on the\n * store's one-row horizon table, `webhook_delivery_horizon`:\n *\n * - every horizon-checked write takes `LOCK TABLE ... IN SHARE MODE` as its\n * first statement and reads the highest purge cutoff, then takes its\n * record locks, and only then reads the clock;\n * - `purgeExpiredRecords` takes `LOCK TABLE ... IN EXCLUSIVE MODE` as its\n * first statement and reads the cutoff, then reads the clock, removes,\n * and raises the floor before it commits.\n *\n * SHARE conflicts with EXCLUSIVE and not with itself, so writes do not\n * serialize against each other, and a write and a purge cannot both hold the\n * lock: whichever transaction gets it first commits (or rolls back) before\n * the other reads anything. Both orders are then serial, which is all the\n * horizon rules need. A table lock rather than a row lock (`FOR SHARE` /\n * `FOR UPDATE` on the horizon row) because PostgreSQL's lock manager queues\n * a SHARE request behind a waiting EXCLUSIVE one, so a steady stream of\n * inserts cannot keep a purge waiting; a new `FOR SHARE` row lock joins the\n * existing share lockers and can. `tests/postgres-live.test.ts` checks both\n * orders with a pause inside the transaction (\"check-to-write\n * serialization\"), and that a later write queues behind a waiting purge.\n *\n * Other writes take only row locks. A claim takes `FOR UPDATE SKIP LOCKED`\n * on the rows it leases, which never waits, so concurrent claims never\n * lease one record twice. Fenced writes and settlements lock the record with\n * `FOR UPDATE`; an intent or denial insert locks its parent job with\n * `FOR SHARE`, so a reclaim (an UPDATE) cannot advance the parent's fence\n * between the lease check and the insert. \"call bounds while waiting for a\n * lock\" in the live tests holds each of these locks from another connection\n * and checks that an abort or an expired deadline during the wait commits\n * nothing.\n */\n\n/** Options for {@link PostgresWebhookDeliveryStore}. */\nexport interface PostgresWebhookDeliveryStoreOptions {\n\t/** The connection pool, for example a `pg.Pool`. The store never ends it. */\n\treadonly pool: WebhookPostgresPool;\n\t/** The store's clock: it timestamps requeue evidence and decides the replay horizon. */\n\treadonly clock: WebhookClock;\n\t/** The replay horizon in milliseconds; see `WebhookDeliveryLimits.replayHorizonMs`. */\n\treadonly replayHorizonMs: number;\n\t/**\n\t * The schema the tables live in, default `fabric_webhook_delivery`.\n\t * Lower-case letters, digits and underscores only. The horizon floor is\n\t * per schema: two stores on one schema share one floor.\n\t */\n\treadonly schema?: string;\n\t/**\n\t * Test seam, with the memory store's meaning: awaited once per call,\n\t * with the method name, after the input is read and before a connection\n\t * is taken. Leave it unset outside tests.\n\t */\n\treadonly beforeAtomicStep?: (operation: string) => Promise<void> | void;\n\t/**\n\t * Test seam for the serialization tests. Awaited inside the transaction\n\t * of each horizon-checked method and of the purge: at `locked`, after the\n\t * horizon lock, the purge-cutoff read and the record locks, and before\n\t * the clock is read or anything is written; and at `written`, after the\n\t * write and before the commit (a call that returns a refusal does not\n\t * reach it). A throw or rejection rolls the transaction back and fails\n\t * the call as `store_failed`. Leave it unset outside tests.\n\t */\n\treadonly transactionCheckpoint?: (operation: string, stage: WebhookTransactionCheckpointStage) => Promise<void> | void;\n}\n\ntype HorizonLock = \"share\" | \"exclusive\";\n\ninterface Tables {\n\treadonly horizon: string;\n\treadonly jobs: string;\n\treadonly intents: string;\n\treadonly tombstones: string;\n\treadonly denials: string;\n\treadonly attempts: string;\n\treadonly outcomes: string;\n\treadonly evidence: string;\n}\n\nfunction tablesIn(schema: string): Tables {\n\treturn {\n\t\thorizon: `${schema}.webhook_delivery_horizon`,\n\t\tjobs: `${schema}.webhook_fan_out_jobs`,\n\t\tintents: `${schema}.webhook_delivery_intents`,\n\t\ttombstones: `${schema}.webhook_delivery_tombstones`,\n\t\tdenials: `${schema}.webhook_admission_denials`,\n\t\tattempts: `${schema}.webhook_delivery_attempts`,\n\t\toutcomes: `${schema}.webhook_delivery_attempt_outcomes`,\n\t\tevidence: `${schema}.webhook_requeue_evidence`,\n\t};\n}\n\n/**\n * The delivery store's schema. Times are `bigint` epoch milliseconds, so\n * every instant a JavaScript `Date` can hold is stored exactly (a\n * `timestamptz` cannot hold years before 4713 BC, which a `Date` can).\n * Documents and free text are `json` columns holding the package\n * serializer's output (see `jsonOf`). `sort_key` columns hold\n * `utf16SortKey` of the record's key, so ties sort as in the memory store.\n */\nconst DELIVERY_MIGRATIONS: readonly WebhookPostgresMigration[] = Object.freeze([{\n\tversion: 1,\n\tname: \"delivery_baseline\",\n\tsql: `\n\t\tCREATE TABLE {{schema}}.webhook_delivery_horizon (\n\t\t\tsingleton boolean PRIMARY KEY DEFAULT true CHECK (singleton),\n\t\t\tpurged_through_ms bigint\n\t\t);\n\t\tINSERT INTO {{schema}}.webhook_delivery_horizon (singleton, purged_through_ms) VALUES (true, NULL);\n\t\tCREATE TABLE {{schema}}.webhook_fan_out_jobs (\n\t\t\tevent_id text PRIMARY KEY,\n\t\t\tsort_key text COLLATE \"C\" NOT NULL,\n\t\t\ttenant_id text NOT NULL,\n\t\t\tspace_id text NOT NULL,\n\t\t\tdraft json NOT NULL,\n\t\t\tanchor_ms bigint NOT NULL,\n\t\t\tstatus text NOT NULL CHECK (status IN ('pending', 'completed', 'dead_letter')),\n\t\t\tattempt_count integer NOT NULL,\n\t\t\tavailable_at_ms bigint NOT NULL,\n\t\t\tcreated_at_ms bigint NOT NULL,\n\t\t\tprocessing_deadline_ms bigint NOT NULL,\n\t\t\tcompleted_at_ms bigint,\n\t\t\tlast_diagnostic text,\n\t\t\tfence bigint NOT NULL,\n\t\t\tlease_owner text,\n\t\t\tlease_expires_at_ms bigint,\n\t\t\tCHECK ((lease_owner IS NULL) = (lease_expires_at_ms IS NULL))\n\t\t);\n\t\tCREATE INDEX webhook_fan_out_jobs_claim_idx ON {{schema}}.webhook_fan_out_jobs (available_at_ms, created_at_ms, sort_key) WHERE status = 'pending';\n\t\tCREATE INDEX webhook_fan_out_jobs_purge_idx ON {{schema}}.webhook_fan_out_jobs (anchor_ms) WHERE status <> 'pending';\n\t\tCREATE TABLE {{schema}}.webhook_delivery_intents (\n\t\t\tdelivery_id text PRIMARY KEY,\n\t\t\tsort_key text COLLATE \"C\" NOT NULL,\n\t\t\tsubscription_id text NOT NULL,\n\t\t\tevent_id text NOT NULL,\n\t\t\ttenant_id text NOT NULL,\n\t\t\tspace_id text NOT NULL,\n\t\t\teligibility_revision bigint NOT NULL,\n\t\t\tbody json NOT NULL,\n\t\t\tanchor_ms bigint NOT NULL,\n\t\t\tstatus text NOT NULL CHECK (status IN ('pending', 'delivered', 'dead_letter', 'cancelled')),\n\t\t\tattempt_count integer NOT NULL,\n\t\t\tavailable_at_ms bigint NOT NULL,\n\t\t\tcreated_at_ms bigint NOT NULL,\n\t\t\tprocessing_deadline_ms bigint NOT NULL,\n\t\t\tlast_outcome text,\n\t\t\tlast_reason text,\n\t\t\tlast_diagnostic text,\n\t\t\tfence bigint NOT NULL,\n\t\t\tlease_owner text,\n\t\t\tlease_expires_at_ms bigint,\n\t\t\tCHECK ((lease_owner IS NULL) = (lease_expires_at_ms IS NULL)),\n\t\t\tCHECK ((last_outcome IS NULL) = (last_reason IS NULL))\n\t\t);\n\t\tCREATE INDEX webhook_delivery_intents_claim_idx ON {{schema}}.webhook_delivery_intents (available_at_ms, created_at_ms, sort_key) WHERE status = 'pending';\n\t\tCREATE INDEX webhook_delivery_intents_purge_idx ON {{schema}}.webhook_delivery_intents (anchor_ms) WHERE status <> 'pending';\n\t\tCREATE INDEX webhook_delivery_intents_subscription_idx ON {{schema}}.webhook_delivery_intents (tenant_id, space_id, subscription_id) WHERE status = 'pending';\n\t\tCREATE TABLE {{schema}}.webhook_delivery_tombstones (\n\t\t\tsubscription_id text NOT NULL,\n\t\t\tevent_id text NOT NULL,\n\t\t\tkind text NOT NULL CHECK (kind IN ('intent', 'denial')),\n\t\t\ttenant_id text NOT NULL,\n\t\t\tspace_id text NOT NULL,\n\t\t\tanchor_ms bigint NOT NULL,\n\t\t\tPRIMARY KEY (subscription_id, event_id)\n\t\t);\n\t\tCREATE TABLE {{schema}}.webhook_admission_denials (\n\t\t\tsubscription_id text NOT NULL,\n\t\t\tevent_id text NOT NULL,\n\t\t\tsort_key text COLLATE \"C\" NOT NULL,\n\t\t\ttenant_id text NOT NULL,\n\t\t\tspace_id text NOT NULL,\n\t\t\trecord json NOT NULL,\n\t\t\tanchor_ms bigint NOT NULL,\n\t\t\tPRIMARY KEY (subscription_id, event_id)\n\t\t);\n\t\tCREATE INDEX webhook_admission_denials_purge_idx ON {{schema}}.webhook_admission_denials (anchor_ms);\n\t\tCREATE TABLE {{schema}}.webhook_delivery_attempts (\n\t\t\tseq bigint GENERATED ALWAYS AS IDENTITY PRIMARY KEY,\n\t\t\tdelivery_id text NOT NULL,\n\t\t\ttenant_id text NOT NULL,\n\t\t\tspace_id text NOT NULL,\n\t\t\trecord json NOT NULL\n\t\t);\n\t\tCREATE INDEX webhook_delivery_attempts_intent_idx ON {{schema}}.webhook_delivery_attempts (delivery_id, seq);\n\t\tCREATE TABLE {{schema}}.webhook_requeue_evidence (\n\t\t\tseq bigint GENERATED ALWAYS AS IDENTITY PRIMARY KEY,\n\t\t\tevent_id text NOT NULL,\n\t\t\ttenant_id text NOT NULL,\n\t\t\tspace_id text NOT NULL,\n\t\t\trecord json NOT NULL\n\t\t);\n\t\tCREATE INDEX webhook_requeue_evidence_event_idx ON {{schema}}.webhook_requeue_evidence (event_id, seq);\n\t`,\n}, {\n\t// PR 8: an attempt begun under the intent's lease before the transport\n\t// handoff (fence and the SHA-256 digest of its receipt set), and its\n\t// outcome, appended once, unfenced, by the holder of the receipt.\n\tversion: 2,\n\tname: \"delivery_attempt_begin_finish\",\n\tsql: `\n\t\tALTER TABLE {{schema}}.webhook_delivery_attempts ADD COLUMN fence bigint;\n\t\tALTER TABLE {{schema}}.webhook_delivery_attempts ADD COLUMN receipt_digest text;\n\t\tALTER TABLE {{schema}}.webhook_delivery_attempts ADD CONSTRAINT webhook_delivery_attempts_receipt_check CHECK ((fence IS NULL) = (receipt_digest IS NULL));\n\t\tCREATE UNIQUE INDEX webhook_delivery_attempts_begun_idx ON {{schema}}.webhook_delivery_attempts (delivery_id, fence) WHERE fence IS NOT NULL;\n\t\tCREATE TABLE {{schema}}.webhook_delivery_attempt_outcomes (\n\t\t\tdelivery_id text NOT NULL,\n\t\t\tfence bigint NOT NULL,\n\t\t\ttenant_id text NOT NULL,\n\t\t\tspace_id text NOT NULL,\n\t\t\trecord json NOT NULL,\n\t\t\tPRIMARY KEY (delivery_id, fence)\n\t\t);\n\t`,\n}, {\n\t// PR 9: requeue and enrichment evidence indexed by the governed\n\t// invocation that appended it, so a re-run of that invocation finds it\n\t// inside its own transaction, and after the record it names is purged.\n\t// Rows written before this migration are backfilled from the record.\n\tversion: 3,\n\tname: \"requeue_evidence_invocation\",\n\tsql: `\n\t\tALTER TABLE {{schema}}.webhook_requeue_evidence ADD COLUMN action_invocation_id text;\n\t\tUPDATE {{schema}}.webhook_requeue_evidence SET action_invocation_id = record->>'actionInvocationId';\n\t\tCREATE INDEX webhook_requeue_evidence_invocation_idx ON {{schema}}.webhook_requeue_evidence (tenant_id, space_id, action_invocation_id, seq)\n\t\t\tWHERE action_invocation_id IS NOT NULL;\n\t`,\n}]);\n\nconst JOB_COLUMNS = [\n\t\"event_id\", \"tenant_id\", \"space_id\", \"draft::text AS draft\", \"anchor_ms::text AS anchor_ms\", \"status\",\n\t\"attempt_count::text AS attempt_count\", \"available_at_ms::text AS available_at_ms\", \"created_at_ms::text AS created_at_ms\",\n\t\"processing_deadline_ms::text AS processing_deadline_ms\", \"completed_at_ms::text AS completed_at_ms\", \"last_diagnostic\",\n\t\"fence::text AS fence\", \"lease_owner\", \"lease_expires_at_ms::text AS lease_expires_at_ms\",\n];\n\nconst INTENT_COLUMNS = [\n\t\"delivery_id\", \"subscription_id\", \"event_id\", \"tenant_id\", \"space_id\", \"eligibility_revision::text AS eligibility_revision\",\n\t\"body::text AS body\", \"anchor_ms::text AS anchor_ms\", \"status\", \"attempt_count::text AS attempt_count\",\n\t\"available_at_ms::text AS available_at_ms\", \"created_at_ms::text AS created_at_ms\",\n\t\"processing_deadline_ms::text AS processing_deadline_ms\", \"last_outcome\", \"last_reason\", \"last_diagnostic\",\n\t\"fence::text AS fence\", \"lease_owner\", \"lease_expires_at_ms::text AS lease_expires_at_ms\",\n];\n\nfunction columns(list: readonly string[], alias?: string): string {\n\treturn list.map((column) => (alias === undefined ? column : `${alias}.${column}`)).join(\", \");\n}\n\ntype Row = Record<string, unknown>;\n\n/** Hydrate a job row into the shared state shape, copying each field. */\nfunction jobFrom(row: Row): JobState {\n\tconst fence = intOf(row[\"fence\"], \"row.fence\");\n\tconst owner = optionalTextOf(row[\"lease_owner\"], \"row.lease_owner\");\n\treturn {\n\t\tkey: textOf(row[\"event_id\"], \"row.event_id\"),\n\t\tdraft: jsonOf(row[\"draft\"], \"row.draft\") as Snapshot,\n\t\ttenantId: textOf(row[\"tenant_id\"], \"row.tenant_id\"),\n\t\tspaceId: textOf(row[\"space_id\"], \"row.space_id\"),\n\t\tanchorMs: intOf(row[\"anchor_ms\"], \"row.anchor_ms\"),\n\t\tstatus: textOf(row[\"status\"], \"row.status\") as JobState[\"status\"],\n\t\tattemptCount: intOf(row[\"attempt_count\"], \"row.attempt_count\"),\n\t\tavailableAtMs: intOf(row[\"available_at_ms\"], \"row.available_at_ms\"),\n\t\tcreatedAtMs: intOf(row[\"created_at_ms\"], \"row.created_at_ms\"),\n\t\tprocessingDeadlineMs: intOf(row[\"processing_deadline_ms\"], \"row.processing_deadline_ms\"),\n\t\tcompletedAtMs: optionalIntOf(row[\"completed_at_ms\"], \"row.completed_at_ms\"),\n\t\tlastDiagnostic: optionalTextOf(row[\"last_diagnostic\"], \"row.last_diagnostic\") as WebhookDiagnosticCode | undefined,\n\t\tfence,\n\t\tlease: owner === undefined ? undefined : { owner, fence, expiresAtMs: intOf(row[\"lease_expires_at_ms\"], \"row.lease_expires_at_ms\") },\n\t};\n}\n\n/** Hydrate an intent row into the shared state shape, copying each field. */\nfunction intentFrom(row: Row): IntentState {\n\tconst fence = intOf(row[\"fence\"], \"row.fence\");\n\tconst owner = optionalTextOf(row[\"lease_owner\"], \"row.lease_owner\");\n\tconst outcome = optionalTextOf(row[\"last_outcome\"], \"row.last_outcome\");\n\treturn {\n\t\tkey: textOf(row[\"delivery_id\"], \"row.delivery_id\"),\n\t\tsubscriptionId: textOf(row[\"subscription_id\"], \"row.subscription_id\"),\n\t\teventId: textOf(row[\"event_id\"], \"row.event_id\"),\n\t\ttenantId: textOf(row[\"tenant_id\"], \"row.tenant_id\"),\n\t\tspaceId: textOf(row[\"space_id\"], \"row.space_id\"),\n\t\teligibilityRevision: intOf(row[\"eligibility_revision\"], \"row.eligibility_revision\"),\n\t\tbody: textOf(jsonOf(row[\"body\"], \"row.body\"), \"row.body\"),\n\t\tanchorMs: intOf(row[\"anchor_ms\"], \"row.anchor_ms\"),\n\t\tstatus: textOf(row[\"status\"], \"row.status\") as IntentState[\"status\"],\n\t\tattemptCount: intOf(row[\"attempt_count\"], \"row.attempt_count\"),\n\t\tavailableAtMs: intOf(row[\"available_at_ms\"], \"row.available_at_ms\"),\n\t\tcreatedAtMs: intOf(row[\"created_at_ms\"], \"row.created_at_ms\"),\n\t\tprocessingDeadlineMs: intOf(row[\"processing_deadline_ms\"], \"row.processing_deadline_ms\"),\n\t\tlastOutcome: outcome === undefined\n\t\t\t? undefined\n\t\t\t: { outcome: outcome as NonNullable<IntentState[\"lastOutcome\"]>[\"outcome\"], reason: textOf(row[\"last_reason\"], \"row.last_reason\") as NonNullable<IntentState[\"lastOutcome\"]>[\"reason\"] },\n\t\tlastDiagnostic: optionalTextOf(row[\"last_diagnostic\"], \"row.last_diagnostic\") as WebhookDiagnosticCode | undefined,\n\t\tfence,\n\t\tlease: owner === undefined ? undefined : { owner, fence, expiresAtMs: intOf(row[\"lease_expires_at_ms\"], \"row.lease_expires_at_ms\") },\n\t};\n}\n\n/** Claimed rows in the memory store's claim order: `availableAt`, then `createdAt`, then key. */\nfunction claimOrder<T extends { readonly availableAtMs: number; readonly createdAtMs: number; readonly key: string }>(states: T[]): T[] {\n\treturn states.sort((left, right) => left.availableAtMs - right.availableAtMs || left.createdAtMs - right.createdAtMs || compareText(left.key, right.key));\n}\n\n/**\n * A PostgreSQL {@link WebhookDeliveryStore}. Call {@link ensureSchema} once\n * before use, at startup or from a migration step.\n *\n * @throws {WebhookDeliveryConfigError} when `replayHorizonMs` is not a\n * positive whole number of milliseconds within `WEBHOOK_MAX_REPLAY_HORIZON_MS`.\n * @throws {WebhookStoreError} `clock_invalid` when `clock` has no `now`\n * function; `input_invalid` when `pool`, `schema` or a test seam is not usable.\n */\nexport class PostgresWebhookDeliveryStore implements WebhookDeliveryStore {\n\treadonly #pool: WebhookPostgresPool;\n\treadonly #clock: CapturedClock;\n\treadonly #horizonMs: number;\n\treadonly #schema: string;\n\treadonly #t: Tables;\n\treadonly #beforeAtomicStep: ((operation: string) => Promise<void> | void) | undefined;\n\treadonly #checkpoint: ((operation: string, stage: WebhookTransactionCheckpointStage) => Promise<void> | void) | undefined;\n\n\tconstructor(options: PostgresWebhookDeliveryStoreOptions) {\n\t\tthis.#horizonMs = readHorizonOption(options);\n\t\tthis.#clock = guard(() => captureClock((options as { clock?: WebhookClock }).clock), () => storeError(\"clock_invalid\", \"clock\"));\n\t\tthis.#pool = readPoolOption(options);\n\t\tthis.#schema = readSchemaOption(options);\n\t\tthis.#t = tablesIn(this.#schema);\n\t\tthis.#beforeAtomicStep = readHookOption(options, \"beforeAtomicStep\");\n\t\tthis.#checkpoint = readHookOption(options, \"transactionCheckpoint\");\n\t}\n\n\t/** The replay horizon this store enforces, in milliseconds. */\n\tget replayHorizonMs(): number {\n\t\treturn this.#horizonMs;\n\t}\n\n\t/**\n\t * Create the schema and tables, or check that the applied migrations are\n\t * unchanged. Safe to call concurrently and repeatedly: an advisory lock\n\t * serializes callers and each migration is recorded once\n\t * (`applyWebhookMigrations` in src/postgres-sql.ts).\n\t */\n\tasync ensureSchema(): Promise<void> {\n\t\tawait applyWebhookMigrations(this.#pool, this.#schema, \"delivery\", DELIVERY_MIGRATIONS);\n\t}\n\n\t#boundary(operation: string): Promise<void> {\n\t\tconst hook = this.#beforeAtomicStep;\n\t\treturn awaitHook(hook === undefined ? undefined : () => hook(operation), \"beforeAtomicStep\");\n\t}\n\n\t#pause(operation: string, stage: WebhookTransactionCheckpointStage): Promise<void> {\n\t\tconst hook = this.#checkpoint;\n\t\treturn awaitHook(hook === undefined ? undefined : () => hook(operation, stage), \"transactionCheckpoint\");\n\t}\n\n\t/**\n\t * One write (`runWrite` in src/postgres-sql.ts). `lock` takes every lock\n\t * and runs every statement that can wait; the clock and the call bounds\n\t * are read only after it returns; `body` decides and finishes.\n\t */\n\tasync #write<L, T>(\n\t\toperation: string,\n\t\tbounds: CallBounds,\n\t\tlock: (tx: WebhookPostgresQueryable) => Promise<L>,\n\t\tbody: (tx: WebhookPostgresQueryable, nowMs: number, locked: L, control: WebhookTransactionControl) => Promise<T>,\n\t): Promise<T> {\n\t\tawait this.#boundary(operation);\n\t\treturn runWrite(this.#pool, this.#clock, bounds, lock, body);\n\t}\n\n\t/**\n\t * The horizon table lock, always the first statement of the transaction\n\t * that takes it, then the highest purge cutoff. While the lock is held the\n\t * cutoff cannot change, so it can be read before the record locks.\n\t */\n\tasync #lockHorizon(tx: WebhookPostgresQueryable, mode: HorizonLock): Promise<number> {\n\t\tawait tx.query(`LOCK TABLE ${this.#t.horizon} IN ${mode === \"share\" ? \"SHARE\" : \"EXCLUSIVE\"} MODE`);\n\t\tconst result = await tx.query(`SELECT purged_through_ms::text AS purged_through_ms FROM ${this.#t.horizon}`);\n\t\tconst row = result.rows[0];\n\t\tif (row === undefined) throw storeError(\"store_failed\", \"horizon\");\n\t\treturn optionalIntOf(row[\"purged_through_ms\"], \"horizon.purged_through_ms\") ?? -Infinity;\n\t}\n\n\t/** The horizon floor at `nowMs`, given the highest purge cutoff read under the horizon lock. */\n\t#floorMs(nowMs: number, purgedThroughMs: number): number {\n\t\treturn mathMax(nowMs - this.#horizonMs, purgedThroughMs);\n\t}\n\n\tasync #read<T>(operation: string, bounds: CallBounds, body: (db: WebhookPostgresQueryable) => Promise<T>): Promise<T> {\n\t\tawait this.#boundary(operation);\n\t\treturn runRead(this.#pool, this.#clock, bounds, (db) => body(db));\n\t}\n\n\tasync #lockJob(tx: WebhookPostgresQueryable, eventId: string, lock: \"UPDATE\" | \"SHARE\"): Promise<JobState | undefined> {\n\t\tconst result = await tx.query(`SELECT ${columns(JOB_COLUMNS)} FROM ${this.#t.jobs} WHERE event_id = $1 FOR ${lock}`, [eventId]);\n\t\treturn result.rows[0] === undefined ? undefined : jobFrom(result.rows[0]);\n\t}\n\n\tasync #lockIntent(tx: WebhookPostgresQueryable, deliveryId: string): Promise<IntentState | undefined> {\n\t\tconst result = await tx.query(`SELECT ${columns(INTENT_COLUMNS)} FROM ${this.#t.intents} WHERE delivery_id = $1 FOR UPDATE`, [deliveryId]);\n\t\treturn result.rows[0] === undefined ? undefined : intentFrom(result.rows[0]);\n\t}\n\n\t// -------------------------------------------------------------------------\n\t// Fan-out jobs\n\t// -------------------------------------------------------------------------\n\n\tasync insertFanOutJob(\n\t\tjob: WebhookFanOutJobDraft & { readonly processingDeadline: string; readonly createdAt: string },\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookInsertResult> {\n\t\tconst call = readInsertFanOutJobCall(job, options);\n\t\tconst draft = call.job;\n\t\treturn this.#write(\n\t\t\t\"insertFanOutJob\",\n\t\t\tcall.bounds,\n\t\t\tasync (tx) => {\n\t\t\t\tconst purgedThroughMs = await this.#lockHorizon(tx, \"share\");\n\t\t\t\tawait this.#pause(\"insertFanOutJob\", \"locked\");\n\t\t\t\t// Tentative: the conflict check can wait on a concurrent insert of\n\t\t\t\t// the same eventId, so it runs before the clock is read. The body\n\t\t\t\t// rolls it back if the event turns out past the horizon.\n\t\t\t\tconst inserted = await tx.query(\n\t\t\t\t\t`INSERT INTO ${this.#t.jobs}\n\t\t\t\t\t (event_id, sort_key, tenant_id, space_id, draft, anchor_ms, status, attempt_count,\n\t\t\t\t\t available_at_ms, created_at_ms, processing_deadline_ms, fence)\n\t\t\t\t\t VALUES ($1, $2, $3, $4, $5::json, $6, 'pending', 0, $7, $7, $8, 0)\n\t\t\t\t\t ON CONFLICT (event_id) DO NOTHING RETURNING event_id`,\n\t\t\t\t\t[draft.eventId, utf16SortKey(draft.eventId), draft.tenantId, draft.spaceId, serializeJson(draft.draft), draft.anchorMs, draft.createdAtMs, draft.processingDeadlineMs],\n\t\t\t\t);\n\t\t\t\treturn { purgedThroughMs, inserted: inserted.rows.length === 1 };\n\t\t\t},\n\t\t\tasync (_tx, nowMs, locked, control) => {\n\t\t\t\t// Horizon first, so the answer for an old event does not depend on\n\t\t\t\t// whether a purge has removed its job yet.\n\t\t\t\tif (draft.anchorMs < this.#floorMs(nowMs, locked.purgedThroughMs)) {\n\t\t\t\t\tcontrol.abandon();\n\t\t\t\t\treturn copyOut<WebhookInsertResult>({ outcome: \"past_horizon\" });\n\t\t\t\t}\n\t\t\t\tawait this.#pause(\"insertFanOutJob\", \"written\");\n\t\t\t\treturn copyOut<WebhookInsertResult>({ outcome: locked.inserted ? \"inserted\" : \"already_present\" });\n\t\t\t},\n\t\t);\n\t}\n\n\tasync claimFanOutJobs(request: WebhookClaimRequest, options: WebhookCallOptions): Promise<readonly WebhookFanOutJob[]> {\n\t\tconst call = readClaimCall(request, options);\n\t\tconst claim = call.claim;\n\t\treturn this.#write(\n\t\t\t\"claimFanOutJobs\",\n\t\t\tcall.bounds,\n\t\t\t// SKIP LOCKED never waits; it leaves rows another transaction holds.\n\t\t\tasync (tx) => (await tx.query(\n\t\t\t\t`SELECT event_id FROM ${this.#t.jobs}\n\t\t\t\t WHERE status = 'pending' AND available_at_ms <= $1\n\t\t\t\t AND (lease_owner IS NULL OR lease_expires_at_ms <= $1)\n\t\t\t\t ORDER BY available_at_ms, created_at_ms, sort_key\n\t\t\t\t LIMIT $2\n\t\t\t\t FOR UPDATE SKIP LOCKED`,\n\t\t\t\t[claim.nowMs, claim.limit],\n\t\t\t)).rows.map((row) => textOf(row[\"event_id\"], \"row.event_id\")),\n\t\t\tasync (tx, _nowMs, picked) => {\n\t\t\t\tif (picked.length === 0) return frozenList<WebhookFanOutJob>([]);\n\t\t\t\tconst result = await tx.query(\n\t\t\t\t\t`UPDATE ${this.#t.jobs} AS job\n\t\t\t\t\t SET fence = job.fence + 1, lease_owner = $2, lease_expires_at_ms = $3\n\t\t\t\t\t WHERE job.event_id = ANY($1::text[])\n\t\t\t\t\t RETURNING ${columns(JOB_COLUMNS, \"job\")}`,\n\t\t\t\t\t[picked, claim.workerId, claim.nowMs + claim.leaseDurationMs],\n\t\t\t\t);\n\t\t\t\tconst states = claimOrder(result.rows.map(jobFrom));\n\t\t\t\treturn frozenList(states.map((state) => copyOut<WebhookFanOutJob>(jobOut(state))));\n\t\t\t},\n\t\t);\n\t}\n\n\t/**\n\t * A fenced job write: the job is locked `FOR UPDATE` before the clock is\n\t * read; `change` runs only when the caller still holds the lease.\n\t */\n\t#fencedJobWrite(\n\t\toperation: string,\n\t\tbounds: CallBounds,\n\t\teventId: string,\n\t\tfenced: { readonly owner: string; readonly fence: number },\n\t\tchange: (tx: WebhookPostgresQueryable, job: JobState) => Promise<void>,\n\t): Promise<boolean> {\n\t\treturn this.#write(operation, bounds, (tx) => this.#lockJob(tx, eventId, \"UPDATE\"), async (tx, nowMs, job) => {\n\t\t\tif (job === undefined || !holds(job, fenced.owner, fenced.fence, nowMs)) return false;\n\t\t\tawait change(tx, job);\n\t\t\treturn true;\n\t\t});\n\t}\n\n\tasync completeFanOutJob(input: WebhookFencedWrite & { readonly eventId: string }, options: WebhookCallOptions): Promise<boolean> {\n\t\tconst call = readJobFencedCall(input, options);\n\t\treturn this.#fencedJobWrite(\"completeFanOutJob\", call.bounds, call.eventId, call.fenced, async (tx) => {\n\t\t\tawait tx.query(\n\t\t\t\t`UPDATE ${this.#t.jobs}\n\t\t\t\t SET status = 'completed', completed_at_ms = $2, lease_owner = NULL, lease_expires_at_ms = NULL\n\t\t\t\t WHERE event_id = $1`,\n\t\t\t\t[call.eventId, call.fenced.nowMs],\n\t\t\t);\n\t\t});\n\t}\n\n\tasync rescheduleFanOutJob(\n\t\tinput: WebhookFencedWrite & { readonly eventId: string; readonly availableAt: Date; readonly diagnostic: WebhookDiagnosticCode },\n\t\toptions: WebhookCallOptions,\n\t): Promise<boolean> {\n\t\tconst call = readRescheduleCall(input, options);\n\t\treturn this.#fencedJobWrite(\"rescheduleFanOutJob\", call.bounds, call.eventId, call.fenced, async (tx) => {\n\t\t\tawait tx.query(\n\t\t\t\t`UPDATE ${this.#t.jobs}\n\t\t\t\t SET attempt_count = attempt_count + 1, available_at_ms = $2, last_diagnostic = $3,\n\t\t\t\t lease_owner = NULL, lease_expires_at_ms = NULL\n\t\t\t\t WHERE event_id = $1`,\n\t\t\t\t[call.eventId, call.availableAtMs, call.diagnostic],\n\t\t\t);\n\t\t});\n\t}\n\n\tasync renewFanOutJobLease(\n\t\tinput: WebhookFencedWrite & { readonly eventId: string; readonly leaseDurationMs: number },\n\t\toptions: WebhookCallOptions,\n\t): Promise<boolean> {\n\t\tconst call = readRenewJobCall(input, options);\n\t\treturn this.#fencedJobWrite(\"renewFanOutJobLease\", call.bounds, call.eventId, call.fenced, async (tx, job) => {\n\t\t\tawait tx.query(\n\t\t\t\t`UPDATE ${this.#t.jobs} SET lease_expires_at_ms = $2 WHERE event_id = $1`,\n\t\t\t\t[call.eventId, renewedExpiryMs(job, call.fenced.nowMs, call.leaseDurationMs)],\n\t\t\t);\n\t\t});\n\t}\n\n\tasync deadLetterFanOutJob(\n\t\tinput: WebhookFencedWrite & { readonly eventId: string; readonly diagnostic: WebhookDiagnosticCode },\n\t\toptions: WebhookCallOptions,\n\t): Promise<boolean> {\n\t\tconst call = readDeadLetterJobCall(input, options);\n\t\treturn this.#fencedJobWrite(\"deadLetterFanOutJob\", call.bounds, call.eventId, call.fenced, async (tx) => {\n\t\t\tawait tx.query(\n\t\t\t\t`UPDATE ${this.#t.jobs}\n\t\t\t\t SET status = 'dead_letter', last_diagnostic = $2, lease_owner = NULL, lease_expires_at_ms = NULL\n\t\t\t\t WHERE event_id = $1`,\n\t\t\t\t[call.eventId, call.diagnostic],\n\t\t\t);\n\t\t});\n\t}\n\n\tasync requeueFanOutJob(\n\t\tinput: WebhookScope & { readonly eventId: string; readonly request: WebhookRequeueRequest },\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookRequeueResult> {\n\t\tconst call = readJobRequeueCall(input, options);\n\t\treturn this.#write(\n\t\t\t\"requeueFanOutJob\",\n\t\t\tcall.bounds,\n\t\t\tasync (tx) => {\n\t\t\t\tconst purgedThroughMs = await this.#lockHorizon(tx, \"share\");\n\t\t\t\tconst job = await this.#lockJob(tx, call.eventId, \"UPDATE\");\n\t\t\t\tconst prior = await this.#priorEvidence(tx, call.scope, call.request.actionInvocationId, { target: \"fan_out_job\", eventId: call.eventId });\n\t\t\t\tawait this.#pause(\"requeueFanOutJob\", \"locked\");\n\t\t\t\treturn { purgedThroughMs, job, prior };\n\t\t\t},\n\t\t\tasync (tx, nowMs, { purgedThroughMs, job, prior }) => {\n\t\t\t\tif (prior !== undefined) return replayedResult<WebhookRequeueResult>(prior);\n\t\t\t\tif (job === undefined || !inScope(job, call.scope)) return requeueRefused(\"not_found\");\n\t\t\t\tconst refusal = requeueRefusal(job, call.request, this.#floorMs(nowMs, purgedThroughMs));\n\t\t\t\tif (refusal !== undefined) return requeueRefused(refusal);\n\t\t\t\tconst evidence = jobRequeueEvidence(job, call.request, nowMs);\n\t\t\t\tconst result = copyOut<WebhookRequeueResult>({ applied: true, evidence });\n\t\t\t\tapplyRequeue(job, call.request);\n\t\t\t\tawait tx.query(\n\t\t\t\t\t`UPDATE ${this.#t.jobs}\n\t\t\t\t\t SET status = 'pending', attempt_count = $2, available_at_ms = $3, processing_deadline_ms = $4,\n\t\t\t\t\t fence = $5, lease_owner = NULL, lease_expires_at_ms = NULL\n\t\t\t\t\t WHERE event_id = $1`,\n\t\t\t\t\t[job.key, job.attemptCount, job.availableAtMs, job.processingDeadlineMs, job.fence],\n\t\t\t\t);\n\t\t\t\tawait this.#appendEvidence(tx, job.key, job.tenantId, job.spaceId, evidence);\n\t\t\t\tawait this.#pause(\"requeueFanOutJob\", \"written\");\n\t\t\t\treturn result;\n\t\t\t},\n\t\t);\n\t}\n\tasync enrichFanOutJobActor(\n\t\tinput: WebhookScope & { readonly eventId: string; readonly request: WebhookActorEnrichmentRequest },\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookActorEnrichmentResult> {\n\t\tconst call = readJobEnrichmentCall(input, options);\n\t\treturn this.#write(\n\t\t\t\"enrichFanOutJobActor\",\n\t\t\tcall.bounds,\n\t\t\tasync (tx) => {\n\t\t\t\tconst purgedThroughMs = await this.#lockHorizon(tx, \"share\");\n\t\t\t\tconst job = await this.#lockJob(tx, call.eventId, \"UPDATE\");\n\t\t\t\tconst prior = await this.#priorEvidence(tx, call.scope, call.request.actionInvocationId, { target: \"fan_out_job_actor\", eventId: call.eventId });\n\t\t\t\tawait this.#pause(\"enrichFanOutJobActor\", \"locked\");\n\t\t\t\treturn { purgedThroughMs, job, prior };\n\t\t\t},\n\t\t\tasync (tx, nowMs, { purgedThroughMs, job, prior }) => {\n\t\t\t\tif (prior !== undefined) return replayedResult<WebhookActorEnrichmentResult>(prior);\n\t\t\t\tif (job === undefined || !inScope(job, call.scope)) return enrichmentRefused(\"not_found\");\n\t\t\t\tconst refusal = enrichmentRefusal(job, call.request, this.#floorMs(nowMs, purgedThroughMs));\n\t\t\t\tif (refusal !== undefined) return enrichmentRefused(refusal);\n\t\t\t\tconst evidence = jobEnrichmentEvidence(job, call.request, nowMs);\n\t\t\t\tconst result = copyOut<WebhookActorEnrichmentResult>({ applied: true, evidence });\n\t\t\t\tapplyEnrichment(job, call.request);\n\t\t\t\tawait tx.query(\n\t\t\t\t\t`UPDATE ${this.#t.jobs}\n\t\t\t\t\t SET draft = $2::json, status = 'pending', attempt_count = $3, available_at_ms = $4, processing_deadline_ms = $5,\n\t\t\t\t\t fence = $6, lease_owner = NULL, lease_expires_at_ms = NULL\n\t\t\t\t\t WHERE event_id = $1`,\n\t\t\t\t\t[job.key, serializeJson(job.draft), job.attemptCount, job.availableAtMs, job.processingDeadlineMs, job.fence],\n\t\t\t\t);\n\t\t\t\tawait this.#appendEvidence(tx, job.key, job.tenantId, job.spaceId, evidence);\n\t\t\t\tawait this.#pause(\"enrichFanOutJobActor\", \"written\");\n\t\t\t\treturn result;\n\t\t\t},\n\t\t);\n\t}\n\n\tasync #appendEvidence(tx: WebhookPostgresQueryable, eventId: string, tenantId: string, spaceId: string, evidence: WebhookRequeueEvidence): Promise<void> {\n\t\tawait tx.query(\n\t\t\t`INSERT INTO ${this.#t.evidence} (event_id, tenant_id, space_id, record, action_invocation_id) VALUES ($1, $2, $3, $4::json, $5)`,\n\t\t\t[eventId, tenantId, spaceId, serializeJson(evidence), evidence.actionInvocationId ?? null],\n\t\t);\n\t}\n\n\t/**\n\t * Evidence `scope` holds under `actionInvocationId` for `target`, or\n\t * `undefined` (always, without an id). Called in a requeue's or\n\t * enrichment's transaction after its record lock: a concurrent request of\n\t * the same invocation that applied holds that lock until it commits, and\n\t * under READ COMMITTED this statement then sees its evidence. See\n\t * \"Re-runs of one invocation\" in src/ports.ts.\n\t */\n\tasync #priorEvidence(tx: WebhookPostgresQueryable, scope: WebhookScope, actionInvocationId: string | undefined, target: InvocationTarget): Promise<Snapshot | undefined> {\n\t\tif (actionInvocationId === undefined) return undefined;\n\t\tconst result = await tx.query(\n\t\t\t`SELECT record::text AS record FROM ${this.#t.evidence}\n\t\t\t WHERE tenant_id = $1 AND space_id = $2 AND action_invocation_id = $3 ORDER BY seq`,\n\t\t\t[scope.tenantId, scope.spaceId, actionInvocationId],\n\t\t);\n\t\treturn priorInvocationEvidence(result.rows.map((row) => jsonOf(row[\"record\"], \"row.record\") as Snapshot), target);\n\t}\n\n\tasync readFanOutJob(input: WebhookScope & { readonly eventId: string }, options: WebhookCallOptions): Promise<WebhookFanOutJob | null> {\n\t\tconst call = readEventCall(input, options);\n\t\treturn this.#read(\"readFanOutJob\", call.bounds, async (db) => {\n\t\t\tconst result = await db.query(\n\t\t\t\t`SELECT ${columns(JOB_COLUMNS)} FROM ${this.#t.jobs} WHERE event_id = $1 AND tenant_id = $2 AND space_id = $3`,\n\t\t\t\t[call.eventId, call.scope.tenantId, call.scope.spaceId],\n\t\t\t);\n\t\t\treturn result.rows[0] === undefined ? null : copyOut<WebhookFanOutJob>(jobOut(jobFrom(result.rows[0])));\n\t\t});\n\t}\n\n\t// -------------------------------------------------------------------------\n\t// Intents and denials\n\t// -------------------------------------------------------------------------\n\n\tasync insertDeliveryIntent(\n\t\tintent: Omit<WebhookDeliveryIntent, \"status\" | \"attemptCount\" | \"lastOutcome\" | \"lastDiagnostic\" | \"lease\" | \"eventRecordedAt\" | \"fence\">,\n\t\tparent: WebhookFanOutJobFence,\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookFencedInsertResult> {\n\t\tconst call = readInsertIntentCall(intent, parent, options);\n\t\treturn this.#write(\n\t\t\t\"insertDeliveryIntent\",\n\t\t\tcall.bounds,\n\t\t\tasync (tx) => {\n\t\t\t\tconst purgedThroughMs = await this.#lockHorizon(tx, \"share\");\n\t\t\t\tconst job = await this.#parentJob(tx, call.parent);\n\t\t\t\tawait this.#pause(\"insertDeliveryIntent\", \"locked\");\n\t\t\t\t// Tentative inserts, only when the clock-free checks pass: the\n\t\t\t\t// tombstone's and the intent's conflict checks can wait on a\n\t\t\t\t// concurrent insert, so they run before the clock is read.\n\t\t\t\tif (job === undefined || !inScope(job, call)) return { purgedThroughMs, job, tombstone: false, inserted: false };\n\t\t\t\tconst tombstone = await this.#insertTombstone(tx, \"intent\", call, job.anchorMs);\n\t\t\t\tconst inserted = tombstone && (await tx.query(\n\t\t\t\t\t`INSERT INTO ${this.#t.intents}\n\t\t\t\t\t (delivery_id, sort_key, subscription_id, event_id, tenant_id, space_id, eligibility_revision, body,\n\t\t\t\t\t anchor_ms, status, attempt_count, available_at_ms, created_at_ms, processing_deadline_ms, fence)\n\t\t\t\t\t VALUES ($1, $2, $3, $4, $5, $6, $7, $8::json, $9, 'pending', 0, $10, $11, $12, 0)\n\t\t\t\t\t ON CONFLICT (delivery_id) DO NOTHING RETURNING delivery_id`,\n\t\t\t\t\t[call.deliveryId, utf16SortKey(call.deliveryId), call.subscriptionId, call.eventId, call.tenantId, call.spaceId,\n\t\t\t\t\t\tcall.eligibilityRevision, serializeJson(call.body), job.anchorMs, call.availableAtMs, call.createdAtMs, call.processingDeadlineMs],\n\t\t\t\t)).rows.length === 1;\n\t\t\t\treturn { purgedThroughMs, job, tombstone, inserted };\n\t\t\t},\n\t\t\tasync (_tx, nowMs, locked, control) => {\n\t\t\t\t// The memory store's order: lease, scope, horizon, uniqueness, deliveryId.\n\t\t\t\tconst job = locked.job;\n\t\t\t\tif (job === undefined) return fencedOutcome(\"lease_lost\");\n\t\t\t\t// Expiry is judged here, on the store's clock read after every lock.\n\t\t\t\tif (!holds(job, call.parent.owner, call.parent.fence, nowMs)) {\n\t\t\t\t\tcontrol.abandon();\n\t\t\t\t\treturn fencedOutcome(\"lease_lost\");\n\t\t\t\t}\n\t\t\t\tif (!inScope(job, call)) throw storeError(\"record_mismatch\", \"intent.tenantId\");\n\t\t\t\tif (job.anchorMs < this.#floorMs(nowMs, locked.purgedThroughMs)) {\n\t\t\t\t\tcontrol.abandon();\n\t\t\t\t\treturn fencedOutcome(\"past_horizon\");\n\t\t\t\t}\n\t\t\t\tif (!locked.tombstone) return fencedOutcome(\"already_present\");\n\t\t\t\t// The tombstone written above is rolled back with this throw.\n\t\t\t\tif (!locked.inserted) throw storeError(\"delivery_id_conflict\", \"intent.deliveryId\");\n\t\t\t\tawait this.#pause(\"insertDeliveryIntent\", \"written\");\n\t\t\t\treturn fencedOutcome(\"inserted\");\n\t\t\t},\n\t\t);\n\t}\n\n\tasync recordAdmissionDenial(\n\t\trecord: WebhookAdmissionDenialRecord,\n\t\tparent: WebhookFanOutJobFence,\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookFencedInsertResult> {\n\t\tconst call = readDenialCall(record, parent, options);\n\t\treturn this.#write(\n\t\t\t\"recordAdmissionDenial\",\n\t\t\tcall.bounds,\n\t\t\tasync (tx) => {\n\t\t\t\tconst purgedThroughMs = await this.#lockHorizon(tx, \"share\");\n\t\t\t\tconst job = await this.#parentJob(tx, call.parent);\n\t\t\t\tawait this.#pause(\"recordAdmissionDenial\", \"locked\");\n\t\t\t\tif (job === undefined || !inScope(job, call)) return { purgedThroughMs, job, tombstone: false };\n\t\t\t\t// Tentative, as in insertDeliveryIntent. Once the tombstone is ours,\n\t\t\t\t// no other transaction can be inserting this pair's denial.\n\t\t\t\tconst tombstone = await this.#insertTombstone(tx, \"denial\", call, job.anchorMs);\n\t\t\t\tif (tombstone) {\n\t\t\t\t\tawait tx.query(\n\t\t\t\t\t\t`INSERT INTO ${this.#t.denials} (subscription_id, event_id, sort_key, tenant_id, space_id, record, anchor_ms)\n\t\t\t\t\t\t VALUES ($1, $2, $3, $4, $5, $6::json, $7)`,\n\t\t\t\t\t\t[call.subscriptionId, call.eventId, utf16SortKey(markerKey(call.subscriptionId, call.eventId)), call.tenantId, call.spaceId,\n\t\t\t\t\t\t\tserializeJson(denialRecord(call)), job.anchorMs],\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\treturn { purgedThroughMs, job, tombstone };\n\t\t\t},\n\t\t\tasync (_tx, nowMs, locked, control) => {\n\t\t\t\tconst job = locked.job;\n\t\t\t\tif (job === undefined) return fencedOutcome(\"lease_lost\");\n\t\t\t\t// Expiry is judged here, on the store's clock read after every lock.\n\t\t\t\tif (!holds(job, call.parent.owner, call.parent.fence, nowMs)) {\n\t\t\t\t\tcontrol.abandon();\n\t\t\t\t\treturn fencedOutcome(\"lease_lost\");\n\t\t\t\t}\n\t\t\t\tif (!inScope(job, call)) throw storeError(\"record_mismatch\", \"record.tenantId\");\n\t\t\t\tif (job.anchorMs < this.#floorMs(nowMs, locked.purgedThroughMs)) {\n\t\t\t\t\tcontrol.abandon();\n\t\t\t\t\treturn fencedOutcome(\"past_horizon\");\n\t\t\t\t}\n\t\t\t\tif (!locked.tombstone) return fencedOutcome(\"already_present\");\n\t\t\t\tawait this.#pause(\"recordAdmissionDenial\", \"written\");\n\t\t\t\treturn fencedOutcome(\"inserted\");\n\t\t\t},\n\t\t);\n\t}\n\n\t/**\n\t * The parent job if `fence` still holds its lease, expiry not yet\n\t * judged: that needs the store's clock, which is read only after every\n\t * lock is held, so the insert's body checks it (`holds`) and rolls the\n\t * tentative insert back when the lease has expired. `FOR SHARE` keeps a\n\t * reclaim, a completion or any other update of the job waiting until\n\t * this transaction ends, while other inserts under the same lease proceed.\n\t */\n\tasync #parentJob(tx: WebhookPostgresQueryable, fence: WebhookFanOutJobFence): Promise<JobState | undefined> {\n\t\tconst job = await this.#lockJob(tx, fence.eventId, \"SHARE\");\n\t\treturn job !== undefined && holdsFence(job, fence.owner, fence.fence) ? job : undefined;\n\t}\n\n\t/**\n\t * Insert the (subscriptionId, eventId) tombstone, or report that one\n\t * exists. A concurrent insert of the same pair waits on the primary key\n\t * and then finds it, so of two racing inserts exactly one gets `true`.\n\t */\n\tasync #insertTombstone(\n\t\ttx: WebhookPostgresQueryable,\n\t\tkind: MarkerState[\"kind\"],\n\t\tcall: { readonly subscriptionId: string; readonly eventId: string; readonly tenantId: string; readonly spaceId: string },\n\t\tanchorMs: number,\n\t): Promise<boolean> {\n\t\tconst result = await tx.query(\n\t\t\t`INSERT INTO ${this.#t.tombstones} (subscription_id, event_id, kind, tenant_id, space_id, anchor_ms)\n\t\t\t VALUES ($1, $2, $3, $4, $5, $6) ON CONFLICT (subscription_id, event_id) DO NOTHING RETURNING event_id`,\n\t\t\t[call.subscriptionId, call.eventId, kind, call.tenantId, call.spaceId, anchorMs],\n\t\t);\n\t\treturn result.rows.length === 1;\n\t}\n\n\tasync claimDeliveryIntents(request: WebhookClaimRequest, options: WebhookCallOptions): Promise<readonly WebhookDeliveryIntent[]> {\n\t\tconst call = readClaimCall(request, options);\n\t\tconst claim = call.claim;\n\t\treturn this.#write(\n\t\t\t\"claimDeliveryIntents\",\n\t\t\tcall.bounds,\n\t\t\t// SKIP LOCKED never waits; it leaves rows another transaction holds.\n\t\t\tasync (tx) => (await tx.query(\n\t\t\t\t`SELECT delivery_id FROM ${this.#t.intents}\n\t\t\t\t WHERE status = 'pending' AND available_at_ms <= $1\n\t\t\t\t AND (lease_owner IS NULL OR lease_expires_at_ms <= $1)\n\t\t\t\t ORDER BY available_at_ms, created_at_ms, sort_key\n\t\t\t\t LIMIT $2\n\t\t\t\t FOR UPDATE SKIP LOCKED`,\n\t\t\t\t[claim.nowMs, claim.limit],\n\t\t\t)).rows.map((row) => textOf(row[\"delivery_id\"], \"row.delivery_id\")),\n\t\t\tasync (tx, _nowMs, picked) => {\n\t\t\t\tif (picked.length === 0) return frozenList<WebhookDeliveryIntent>([]);\n\t\t\t\tconst result = await tx.query(\n\t\t\t\t\t`UPDATE ${this.#t.intents} AS intent\n\t\t\t\t\t SET fence = intent.fence + 1, lease_owner = $2, lease_expires_at_ms = $3\n\t\t\t\t\t WHERE intent.delivery_id = ANY($1::text[])\n\t\t\t\t\t RETURNING ${columns(INTENT_COLUMNS, \"intent\")}`,\n\t\t\t\t\t[picked, claim.workerId, claim.nowMs + claim.leaseDurationMs],\n\t\t\t\t);\n\t\t\t\tconst states = claimOrder(result.rows.map(intentFrom));\n\t\t\t\treturn frozenList(states.map((state) => copyOut<WebhookDeliveryIntent>(intentOut(state))));\n\t\t\t},\n\t\t);\n\t}\n\n\tasync renewDeliveryIntentLease(\n\t\tinput: WebhookFencedWrite & { readonly deliveryId: string; readonly leaseDurationMs: number },\n\t\toptions: WebhookCallOptions,\n\t): Promise<boolean> {\n\t\tconst call = readRenewIntentCall(input, options);\n\t\t// Locked FOR UPDATE first; whether the caller holds the lease is decided on the store's clock read after the lock.\n\t\treturn this.#write(\"renewDeliveryIntentLease\", call.bounds, (tx) => this.#lockIntent(tx, call.deliveryId), async (tx, nowMs, intent) => {\n\t\t\tif (intent === undefined || !holds(intent, call.fenced.owner, call.fenced.fence, nowMs)) return false;\n\t\t\tawait tx.query(\n\t\t\t\t`UPDATE ${this.#t.intents} SET lease_expires_at_ms = $2 WHERE delivery_id = $1`,\n\t\t\t\t[intent.key, renewedExpiryMs(intent, call.fenced.nowMs, call.leaseDurationMs)],\n\t\t\t);\n\t\t\treturn true;\n\t\t});\n\t}\n\n\tasync checkDeliveryLease(\n\t\tinput: WebhookScope & { readonly deliveryId: string; readonly owner: string; readonly fence: number; readonly now: Date },\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookDeliveryLeaseCheck> {\n\t\tconst call = readLeaseCheckCall(input, options);\n\t\t// One statement on the pool: it reads the committed current row on the\n\t\t// primary the pool is connected to, and changes nothing.\n\t\treturn this.#read(\"checkDeliveryLease\", call.bounds, async (db) => {\n\t\t\tconst result = await db.query(`SELECT ${columns(INTENT_COLUMNS)} FROM ${this.#t.intents} WHERE delivery_id = $1`, [call.deliveryId]);\n\t\t\treturn leaseCheck(result.rows[0] === undefined ? undefined : intentFrom(result.rows[0]), call);\n\t\t});\n\t}\n\n\tasync appendAttempt(input: WebhookFencedWrite & { readonly attempt: WebhookDeliveryAttemptRecord }, options: WebhookCallOptions): Promise<boolean> {\n\t\tconst call = readAppendAttemptCall(input, options);\n\t\treturn this.#write(\"appendAttempt\", call.bounds, (tx) => this.#lockIntent(tx, call.deliveryId), async (tx, nowMs, intent) => {\n\t\t\tif (intent === undefined || !holds(intent, call.fenced.owner, call.fenced.fence, nowMs)) return false;\n\t\t\tif (call.subscriptionId !== intent.subscriptionId) throw storeError(\"record_mismatch\", \"input.attempt.subscriptionId\");\n\t\t\tif (call.eventId !== intent.eventId) throw storeError(\"record_mismatch\", \"input.attempt.eventId\");\n\t\t\tawait tx.query(\n\t\t\t\t`INSERT INTO ${this.#t.attempts} (delivery_id, tenant_id, space_id, record) VALUES ($1, $2, $3, $4::json)`,\n\t\t\t\t[call.deliveryId, intent.tenantId, intent.spaceId, serializeJson(call.record)],\n\t\t\t);\n\t\t\treturn true;\n\t\t});\n\t}\n\n\tasync beginAttempt(input: WebhookFencedWrite & { readonly attempt: WebhookDeliveryAttemptStart }, options: WebhookCallOptions): Promise<WebhookAttemptBeginResult> {\n\t\tconst call = readBeginAttemptCall(input, options);\n\t\t// Made before the transaction; only its digest is stored.\n\t\tconst receipt = await storeCall(newAttemptReceipt);\n\t\t// The intent row is locked FOR UPDATE first, so a concurrent begin, settle,\n\t\t// cancel or reclaim of this intent waits; lease expiry is then judged on\n\t\t// the store's clock read after the lock. The begun row is keyed by\n\t\t// (delivery_id, fence) and only this lease holder can insert it.\n\t\treturn this.#write(\"beginAttempt\", call.bounds, (tx) => this.#lockIntent(tx, call.deliveryId), async (tx, nowMs, intent) => {\n\t\t\tif (!mayBegin(intent, call.fenced, nowMs)) return beginResult(undefined);\n\t\t\tif (call.subscriptionId !== intent.subscriptionId) throw storeError(\"record_mismatch\", \"input.attempt.subscriptionId\");\n\t\t\tif (call.eventId !== intent.eventId) throw storeError(\"record_mismatch\", \"input.attempt.eventId\");\n\t\t\tconst inserted = await tx.query(\n\t\t\t\t`INSERT INTO ${this.#t.attempts} (delivery_id, tenant_id, space_id, record, fence, receipt_digest) VALUES ($1, $2, $3, $4::json, $5, $6)\n\t\t\t\t ON CONFLICT (delivery_id, fence) WHERE fence IS NOT NULL DO NOTHING RETURNING seq`,\n\t\t\t\t[call.deliveryId, intent.tenantId, intent.spaceId, serializeJson(call.record), call.fenced.fence, receipt.digest],\n\t\t\t);\n\t\t\treturn beginResult(inserted.rows.length === 1 ? receipt.receipt : undefined);\n\t\t});\n\t}\n\n\tasync finishAttempt(\n\t\tinput: WebhookScope & { readonly deliveryId: string; readonly fence: number; readonly receipt: string; readonly finish: WebhookDeliveryAttemptFinish },\n\t\toptions: WebhookCallOptions,\n\t): Promise<boolean> {\n\t\tconst call = readFinishAttemptCall(input, options);\n\t\tconst digest = await storeCall(() => attemptReceiptDigest(call.receipt));\n\t\treturn this.#write(\n\t\t\t\"finishAttempt\",\n\t\t\tcall.bounds,\n\t\t\t// Unfenced: it reads only the begun attempt (rows that never change)\n\t\t\t// and never touches the intent row. The outcome insert can wait on a\n\t\t\t// concurrent insert of the same key, so it runs here, before the clock.\n\t\t\tasync (tx) => {\n\t\t\t\tconst begun = await tx.query(\n\t\t\t\t\t`SELECT 1 FROM ${this.#t.attempts}\n\t\t\t\t\t WHERE delivery_id = $1 AND fence = $2 AND tenant_id = $3 AND space_id = $4 AND receipt_digest = $5`,\n\t\t\t\t\t[call.deliveryId, call.fence, call.scope.tenantId, call.scope.spaceId, digest],\n\t\t\t\t);\n\t\t\t\tif (begun.rows.length === 0) return false;\n\t\t\t\tconst inserted = await tx.query(\n\t\t\t\t\t`INSERT INTO ${this.#t.outcomes} (delivery_id, fence, tenant_id, space_id, record) VALUES ($1, $2, $3, $4, $5::json)\n\t\t\t\t\t ON CONFLICT (delivery_id, fence) DO NOTHING RETURNING fence`,\n\t\t\t\t\t[call.deliveryId, call.fence, call.scope.tenantId, call.scope.spaceId, serializeJson(call.record)],\n\t\t\t\t);\n\t\t\t\treturn inserted.rows.length === 1;\n\t\t\t},\n\t\t\tasync (_tx, _nowMs, inserted) => inserted,\n\t\t);\n\t}\n\n\tasync settleDeliveryIntent(\n\t\tinput: Parameters<WebhookDeliveryStore[\"settleDeliveryIntent\"]>[0],\n\t\toptions: WebhookCallOptions,\n\t): Promise<boolean> {\n\t\tconst call = readSettleCall(input, options);\n\t\treturn this.#write(\"settleDeliveryIntent\", call.bounds, (tx) => this.#lockIntent(tx, call.deliveryId), async (tx, nowMs, intent) => {\n\t\t\tif (intent === undefined || !holds(intent, call.fenced.owner, call.fenced.fence, nowMs)) return false;\n\t\t\tapplySettlement(intent, call.settlement);\n\t\t\tawait tx.query(\n\t\t\t\t`UPDATE ${this.#t.intents}\n\t\t\t\t SET status = $2, attempt_count = $3, available_at_ms = $4, last_outcome = $5, last_reason = $6,\n\t\t\t\t last_diagnostic = $7, lease_owner = NULL, lease_expires_at_ms = NULL\n\t\t\t\t WHERE delivery_id = $1`,\n\t\t\t\t[intent.key, intent.status, intent.attemptCount, intent.availableAtMs, intent.lastOutcome?.outcome ?? null,\n\t\t\t\t\tintent.lastOutcome?.reason ?? null, intent.lastDiagnostic ?? null],\n\t\t\t);\n\t\t\treturn true;\n\t\t});\n\t}\n\n\tasync cancelPendingIntents(\n\t\tinput: Parameters<WebhookDeliveryStore[\"cancelPendingIntents\"]>[0],\n\t\toptions: WebhookCallOptions,\n\t): Promise<number> {\n\t\tconst call = readCancelCall(input, options);\n\t\treturn this.#write(\n\t\t\t\"cancelPendingIntents\",\n\t\t\tcall.bounds,\n\t\t\t// Lock every matching pending intent first. A row another transaction\n\t\t\t// settles while this waits is re-checked by PostgreSQL and left out.\n\t\t\tasync (tx) => (await tx.query(\n\t\t\t\t`SELECT delivery_id FROM ${this.#t.intents}\n\t\t\t\t WHERE tenant_id = $1 AND space_id = $2 AND subscription_id = $3 AND status = 'pending' AND eligibility_revision < $4\n\t\t\t\t FOR UPDATE`,\n\t\t\t\t[call.scope.tenantId, call.scope.spaceId, call.subscriptionId, call.beforeRevision],\n\t\t\t)).rows.map((row) => textOf(row[\"delivery_id\"], \"row.delivery_id\")),\n\t\t\tasync (tx, _nowMs, locked) => {\n\t\t\t\tif (locked.length === 0) return 0;\n\t\t\t\tconst result = await tx.query(\n\t\t\t\t\t`UPDATE ${this.#t.intents}\n\t\t\t\t\t SET status = 'cancelled', last_outcome = 'cancelled', last_reason = $2, lease_owner = NULL, lease_expires_at_ms = NULL\n\t\t\t\t\t WHERE delivery_id = ANY($1::text[]) AND status = 'pending'\n\t\t\t\t\t RETURNING delivery_id`,\n\t\t\t\t\t[locked, call.reason],\n\t\t\t\t);\n\t\t\t\treturn result.rows.length;\n\t\t\t},\n\t\t);\n\t}\n\n\tasync requeueDeliveryIntent(\n\t\tinput: WebhookScope & { readonly deliveryId: string; readonly request: WebhookRequeueRequest },\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookRequeueResult> {\n\t\tconst call = readIntentRequeueCall(input, options);\n\t\treturn this.#write(\n\t\t\t\"requeueDeliveryIntent\",\n\t\t\tcall.bounds,\n\t\t\tasync (tx) => {\n\t\t\t\tconst purgedThroughMs = await this.#lockHorizon(tx, \"share\");\n\t\t\t\tconst intent = await this.#lockIntent(tx, call.deliveryId);\n\t\t\t\tconst prior = await this.#priorEvidence(tx, call.scope, call.request.actionInvocationId, { target: \"delivery_intent\", deliveryId: call.deliveryId });\n\t\t\t\tawait this.#pause(\"requeueDeliveryIntent\", \"locked\");\n\t\t\t\treturn { purgedThroughMs, intent, prior };\n\t\t\t},\n\t\t\tasync (tx, nowMs, { purgedThroughMs, intent, prior }) => {\n\t\t\t\tif (prior !== undefined) return replayedResult<WebhookRequeueResult>(prior);\n\t\t\t\tif (intent === undefined || !inScope(intent, call.scope)) return requeueRefused(\"not_found\");\n\t\t\t\tconst refusal = requeueRefusal(intent, call.request, this.#floorMs(nowMs, purgedThroughMs));\n\t\t\t\tif (refusal !== undefined) return requeueRefused(refusal);\n\t\t\t\tconst evidence = intentRequeueEvidence(intent, call.request, nowMs);\n\t\t\t\tconst result = copyOut<WebhookRequeueResult>({ applied: true, evidence });\n\t\t\t\tapplyRequeue(intent, call.request);\n\t\t\t\tawait tx.query(\n\t\t\t\t\t`UPDATE ${this.#t.intents}\n\t\t\t\t\t SET status = 'pending', attempt_count = $2, available_at_ms = $3, processing_deadline_ms = $4,\n\t\t\t\t\t fence = $5, lease_owner = NULL, lease_expires_at_ms = NULL\n\t\t\t\t\t WHERE delivery_id = $1`,\n\t\t\t\t\t[intent.key, intent.attemptCount, intent.availableAtMs, intent.processingDeadlineMs, intent.fence],\n\t\t\t\t);\n\t\t\t\tawait this.#appendEvidence(tx, intent.eventId, intent.tenantId, intent.spaceId, evidence);\n\t\t\t\tawait this.#pause(\"requeueDeliveryIntent\", \"written\");\n\t\t\t\treturn result;\n\t\t\t},\n\t\t);\n\t}\n\n\tasync readDeliveryIntent(input: WebhookScope & { readonly deliveryId: string }, options: WebhookCallOptions): Promise<WebhookDeliveryIntent | null> {\n\t\tconst call = readDeliveryCall(input, options);\n\t\treturn this.#read(\"readDeliveryIntent\", call.bounds, async (db) => {\n\t\t\tconst result = await db.query(\n\t\t\t\t`SELECT ${columns(INTENT_COLUMNS)} FROM ${this.#t.intents} WHERE delivery_id = $1 AND tenant_id = $2 AND space_id = $3`,\n\t\t\t\t[call.deliveryId, call.scope.tenantId, call.scope.spaceId],\n\t\t\t);\n\t\t\treturn result.rows[0] === undefined ? null : copyOut<WebhookDeliveryIntent>(intentOut(intentFrom(result.rows[0])));\n\t\t});\n\t}\n\n\tasync listDeliveryAttempts(\n\t\tinput: WebhookScope & { readonly deliveryId: string },\n\t\toptions: WebhookCallOptions,\n\t): Promise<readonly WebhookDeliveryAttemptLogEntry[]> {\n\t\tconst call = readDeliveryCall(input, options);\n\t\treturn this.#read(\"listDeliveryAttempts\", call.bounds, async (db) => {\n\t\t\t// One statement, so the log and the outcomes come from one snapshot.\n\t\t\tconst result = await db.query(\n\t\t\t\t`SELECT attempt.record::text AS record, attempt.fence::text AS fence, outcome.record::text AS outcome\n\t\t\t\t FROM ${this.#t.attempts} AS attempt\n\t\t\t\t LEFT JOIN ${this.#t.outcomes} AS outcome ON outcome.delivery_id = attempt.delivery_id AND outcome.fence = attempt.fence\n\t\t\t\t WHERE attempt.delivery_id = $1 AND attempt.tenant_id = $2 AND attempt.space_id = $3 ORDER BY attempt.seq`,\n\t\t\t\t[call.deliveryId, call.scope.tenantId, call.scope.spaceId],\n\t\t\t);\n\t\t\treturn copyOut<readonly WebhookDeliveryAttemptLogEntry[]>(result.rows.map((row) => attemptEntryOut(\n\t\t\t\tjsonOf(row[\"record\"], \"row.record\") as Snapshot,\n\t\t\t\toptionalIntOf(row[\"fence\"], \"row.fence\"),\n\t\t\t\trow[\"outcome\"] === null || row[\"outcome\"] === undefined ? undefined : jsonOf(row[\"outcome\"], \"row.outcome\") as Snapshot,\n\t\t\t)));\n\t\t});\n\t}\n\n\tasync listRequeueEvidence(input: WebhookScope & { readonly eventId: string }, options: WebhookCallOptions): Promise<readonly WebhookRequeueEvidence[]> {\n\t\tconst call = readEventCall(input, options);\n\t\treturn this.#read(\"listRequeueEvidence\", call.bounds, async (db) => {\n\t\t\tconst result = await db.query(\n\t\t\t\t`SELECT record::text AS record FROM ${this.#t.evidence}\n\t\t\t\t WHERE event_id = $1 AND tenant_id = $2 AND space_id = $3 ORDER BY seq`,\n\t\t\t\t[call.eventId, call.scope.tenantId, call.scope.spaceId],\n\t\t\t);\n\t\t\treturn copyOut<readonly WebhookRequeueEvidence[]>(result.rows.map((row) => jsonOf(row[\"record\"], \"row.record\")));\n\t\t});\n\t}\n\n\tasync listInvocationRequeueEvidence(\n\t\tinput: WebhookScope & { readonly actionInvocationId: string },\n\t\toptions: WebhookCallOptions,\n\t): Promise<readonly WebhookRequeueEvidence[]> {\n\t\tconst call = readInvocationEvidenceCall(input, options);\n\t\treturn this.#read(\"listInvocationRequeueEvidence\", call.bounds, async (db) => {\n\t\t\tconst result = await db.query(\n\t\t\t\t`SELECT record::text AS record FROM ${this.#t.evidence}\n\t\t\t\t WHERE tenant_id = $1 AND space_id = $2 AND action_invocation_id = $3 ORDER BY seq`,\n\t\t\t\t[call.scope.tenantId, call.scope.spaceId, call.actionInvocationId],\n\t\t\t);\n\t\t\treturn copyOut<readonly WebhookRequeueEvidence[]>(result.rows.map((row) => jsonOf(row[\"record\"], \"row.record\")));\n\t\t});\n\t}\n\n\tasync readTombstone(\n\t\tinput: WebhookScope & { readonly subscriptionId: string; readonly eventId: string },\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookTombstone | null> {\n\t\tconst call = readTombstoneCall(input, options);\n\t\treturn this.#read(\"readTombstone\", call.bounds, async (db) => {\n\t\t\tconst result = await db.query(\n\t\t\t\t`SELECT kind, subscription_id, event_id, tenant_id, space_id, anchor_ms::text AS anchor_ms FROM ${this.#t.tombstones}\n\t\t\t\t WHERE subscription_id = $1 AND event_id = $2 AND tenant_id = $3 AND space_id = $4`,\n\t\t\t\t[call.subscriptionId, call.eventId, call.scope.tenantId, call.scope.spaceId],\n\t\t\t);\n\t\t\tconst row = result.rows[0];\n\t\t\tif (row === undefined) return null;\n\t\t\tconst marker: MarkerState = {\n\t\t\t\tkind: textOf(row[\"kind\"], \"row.kind\") as MarkerState[\"kind\"],\n\t\t\t\tsubscriptionId: textOf(row[\"subscription_id\"], \"row.subscription_id\"),\n\t\t\t\teventId: textOf(row[\"event_id\"], \"row.event_id\"),\n\t\t\t\ttenantId: textOf(row[\"tenant_id\"], \"row.tenant_id\"),\n\t\t\t\tspaceId: textOf(row[\"space_id\"], \"row.space_id\"),\n\t\t\t\tanchorMs: intOf(row[\"anchor_ms\"], \"row.anchor_ms\"),\n\t\t\t};\n\t\t\treturn copyOut<WebhookTombstone>(tombstoneOut(marker, this.#horizonMs));\n\t\t});\n\t}\n\n\tasync purgeExpiredRecords(input: { readonly limit: number }, options: WebhookCallOptions): Promise<WebhookPurgeResult> {\n\t\tconst call = readPurgeCall(input, options);\n\t\treturn this.#write(\"purgeExpiredRecords\", call.bounds, async (tx) => {\n\t\t\tconst purgedThroughMs = await this.#lockHorizon(tx, \"exclusive\");\n\t\t\tawait this.#pause(\"purgeExpiredRecords\", \"locked\");\n\t\t\treturn purgedThroughMs;\n\t\t}, async (tx, nowMs, purgedThroughMs) => {\n\t\t\t// Which records to remove depends on the cutoff, and so on the clock,\n\t\t\t// so the purge cannot lock them before reading it. Its DELETEs can\n\t\t\t// wait on a row lock (a settle or append holding a terminal record);\n\t\t\t// runWrite's check before COMMIT refuses the purge if its signal\n\t\t\t// aborted or its deadline passed meanwhile. A wait only makes the\n\t\t\t// cutoff older than the clock at commit, which removes less, never more.\n\t\t\tconst cutoffMs = this.#floorMs(nowMs, purgedThroughMs);\n\t\t\tconst cutoff = isoOf(cutoffMs);\n\t\t\t// The memory store's candidate order: oldest anchor, then jobs,\n\t\t\t// denials and intents, then key in UTF-16 order. One more than the\n\t\t\t// limit is read, to answer `more`.\n\t\t\tconst candidates = await tx.query(\n\t\t\t\t`SELECT rank, key, subscription_id FROM (\n\t\t\t\t\tSELECT 0 AS rank, event_id AS key, NULL::text AS subscription_id, anchor_ms, sort_key\n\t\t\t\t\tFROM ${this.#t.jobs} WHERE anchor_ms < $1 AND status = ANY($3::text[])\n\t\t\t\t\tUNION ALL\n\t\t\t\t\tSELECT 1, event_id, subscription_id, anchor_ms, sort_key\n\t\t\t\t\tFROM ${this.#t.denials} WHERE anchor_ms < $1\n\t\t\t\t\tUNION ALL\n\t\t\t\t\tSELECT 2, delivery_id, NULL::text, anchor_ms, sort_key\n\t\t\t\t\tFROM ${this.#t.intents} WHERE anchor_ms < $1 AND status = ANY($4::text[])\n\t\t\t\t) AS candidate\n\t\t\t\tORDER BY anchor_ms, rank, sort_key\n\t\t\t\tLIMIT $2`,\n\t\t\t\t[cutoffMs, call.limit + 1, [...TERMINAL_JOB], [...TERMINAL_INTENT]],\n\t\t\t);\n\t\t\tconst take = candidates.rows.length < call.limit ? candidates.rows.length : call.limit;\n\t\t\tconst jobs: string[] = [];\n\t\t\tconst denialSubscriptions: string[] = [];\n\t\t\tconst denialEvents: string[] = [];\n\t\t\tconst intents: string[] = [];\n\t\t\tfor (let index = 0; index < take; index += 1) {\n\t\t\t\tconst row = candidates.rows[index]!;\n\t\t\t\tconst rank = intOf(row[\"rank\"], \"row.rank\");\n\t\t\t\tconst key = textOf(row[\"key\"], \"row.key\");\n\t\t\t\tif (rank === 0) jobs.push(key);\n\t\t\t\telse if (rank === 1) {\n\t\t\t\t\tdenialSubscriptions.push(textOf(row[\"subscription_id\"], \"row.subscription_id\"));\n\t\t\t\t\tdenialEvents.push(key);\n\t\t\t\t} else intents.push(key);\n\t\t\t}\n\t\t\t// Each DELETE repeats the terminal-status condition and the counts\n\t\t\t// are what was deleted. Under the horizon lock no requeue can move a\n\t\t\t// candidate back to pending in between, so they equal the candidate\n\t\t\t// counts; the repeat keeps a pending record from ever being removed.\n\t\t\tconst removed = { fanOutJobs: 0, deliveryIntents: 0, admissionDenials: 0 };\n\t\t\tif (jobs.length > 0) {\n\t\t\t\tconst deleted = await tx.query(\n\t\t\t\t\t`DELETE FROM ${this.#t.jobs} WHERE event_id = ANY($1::text[]) AND status = ANY($2::text[]) RETURNING event_id`,\n\t\t\t\t\t[jobs, [...TERMINAL_JOB]],\n\t\t\t\t);\n\t\t\t\tremoved.fanOutJobs = deleted.rows.length;\n\t\t\t}\n\t\t\tif (denialEvents.length > 0) {\n\t\t\t\tconst deleted = await tx.query(\n\t\t\t\t\t`WITH removed AS (\n\t\t\t\t\t\tDELETE FROM ${this.#t.denials} AS target USING unnest($1::text[], $2::text[]) AS pair(subscription_id, event_id)\n\t\t\t\t\t\tWHERE target.subscription_id = pair.subscription_id AND target.event_id = pair.event_id\n\t\t\t\t\t\tRETURNING target.subscription_id, target.event_id\n\t\t\t\t\t), tombstones AS (\n\t\t\t\t\t\tDELETE FROM ${this.#t.tombstones} AS target USING removed\n\t\t\t\t\t\tWHERE target.subscription_id = removed.subscription_id AND target.event_id = removed.event_id\n\t\t\t\t\t)\n\t\t\t\t\tSELECT count(*)::text AS removed FROM removed`,\n\t\t\t\t\t[denialSubscriptions, denialEvents],\n\t\t\t\t);\n\t\t\t\tremoved.admissionDenials = intOf(deleted.rows[0]?.[\"removed\"], \"row.removed\");\n\t\t\t}\n\t\t\tif (intents.length > 0) {\n\t\t\t\tconst deleted = await tx.query(\n\t\t\t\t\t`WITH removed AS (\n\t\t\t\t\t\tDELETE FROM ${this.#t.intents} WHERE delivery_id = ANY($1::text[]) AND status = ANY($2::text[])\n\t\t\t\t\t\tRETURNING subscription_id, event_id\n\t\t\t\t\t), tombstones AS (\n\t\t\t\t\t\tDELETE FROM ${this.#t.tombstones} AS target USING removed\n\t\t\t\t\t\tWHERE target.subscription_id = removed.subscription_id AND target.event_id = removed.event_id\n\t\t\t\t\t)\n\t\t\t\t\tSELECT count(*)::text AS removed FROM removed`,\n\t\t\t\t\t[intents, [...TERMINAL_INTENT]],\n\t\t\t\t);\n\t\t\t\tremoved.deliveryIntents = intOf(deleted.rows[0]?.[\"removed\"], \"row.removed\");\n\t\t\t}\n\t\t\tconst result = copyOut<WebhookPurgeResult>({ cutoff, removed, more: candidates.rows.length > take });\n\t\t\t// Raise the floor in the same transaction as the removals: once this\n\t\t\t// commits, no insert or requeue can recreate anything below it.\n\t\t\tawait tx.query(`UPDATE ${this.#t.horizon} SET purged_through_ms = $1`, [cutoffMs]);\n\t\t\tawait this.#pause(\"purgeExpiredRecords\", \"written\");\n\t\t\treturn result;\n\t\t});\n\t}\n}\n","import { readHookOption } from \"./delivery-store-core\";\nimport { guard, storeError } from \"./errors\";\nimport type {\n\tWebhookCallOptions,\n\tWebhookClock,\n\tWebhookConfigurationWriteResult,\n\tWebhookScope,\n\tWebhookSubscriptionStore,\n\tWebhookSubscriptionTransitionInput,\n\tWebhookSubscriptionWriteResult,\n\tWebhookSubscriptionWriter,\n} from \"./ports\";\nimport {\n\tapplyWebhookMigrations,\n\tawaitHook,\n\tintOf,\n\tjsonOf,\n\toptionalIntOf,\n\treadPoolOption,\n\treadSchemaOption,\n\trunRead,\n\trunWrite,\n\ttextOf,\n\ttype WebhookPostgresMigration,\n\ttype WebhookPostgresPool,\n\ttype WebhookPostgresQueryable,\n} from \"./postgres-sql\";\nimport { serializeJson } from \"./snapshot\";\nimport { captureClock, type CallBounds, type CapturedClock } from \"./store-input\";\nimport {\n\tcompareText,\n\tconfigurationOut,\n\tcopyOut,\n\tdecideTransition,\n\tDELETE,\n\tPAUSE,\n\treadChangePatternsCall,\n\treadCreateCall,\n\treadReplaceConfigurationCall,\n\treadRevisionsAtCall,\n\treadStatusChangeCall,\n\treadTargetCall,\n\trefused,\n\tRESUME,\n\trevisionOut,\n\tstatusRevisionChange,\n\ttype RevisionChange,\n\ttype RevisionState,\n\ttype StatusChange,\n\ttype Target,\n} from \"./subscription-store-core\";\nimport type {\n\tWebhookDeliveryConfiguration,\n\tWebhookDeliveryConfigurationInput,\n\tWebhookEligibilityRevision,\n\tWebhookSignatureScheme,\n\tWebhookSubscriptionSnapshot,\n\tWebhookSubscriptionStatus,\n} from \"./types\";\n\n/*\n * PostgreSQL subscription store: the read port and the writer port, like\n * the memory subscription store, with the same input readers and transition\n * rules (src/subscription-store-core.ts). Each write is one READ COMMITTED\n * transaction (`runWrite` in src/postgres-sql.ts) that first locks the\n * subscription's head row with `SELECT ... FOR UPDATE`, then reads the\n * store's clock and refuses an aborted or expired call, then checks the\n * transition against the current revision and appends, and checks the call\n * bounds once more before COMMIT. Two writes to one subscription therefore\n * run one after the other, so of several racing transitions with the same\n * `expectedRevision` exactly one applies. Create inserts the head row with\n * `ON CONFLICT DO NOTHING` before reading the clock (that insert can wait on\n * a racing create), so of two racing creates exactly one applies. A call\n * whose signal aborts or deadline passes while it waits for the head row\n * commits nothing (\"call bounds while waiting for a lock\" in\n * tests/postgres-live.test.ts). Revisions and configuration versions are\n * only ever inserted; `effectiveUntil` is derived from the next revision\n * when read. This store keeps no replay horizon.\n */\n\n/** Options for {@link PostgresWebhookSubscriptionStore}. */\nexport interface PostgresWebhookSubscriptionStoreOptions {\n\t/** The connection pool, for example a `pg.Pool`. The store never ends it. */\n\treadonly pool: WebhookPostgresPool;\n\t/** The store's clock: every revision takes effect at its time (decision 3). */\n\treadonly clock: WebhookClock;\n\t/** The schema the tables live in, default `fabric_webhook_delivery`. It may be the delivery store's schema. */\n\treadonly schema?: string;\n\t/** Test seam, with the memory store's meaning. Leave it unset outside tests. */\n\treadonly beforeAtomicStep?: (operation: string) => Promise<void> | void;\n}\n\ninterface Tables {\n\treadonly subscriptions: string;\n\treadonly revisions: string;\n\treadonly configurations: string;\n}\n\nconst SUBSCRIPTION_MIGRATIONS: readonly WebhookPostgresMigration[] = Object.freeze([{\n\tversion: 1,\n\tname: \"subscription_baseline\",\n\tsql: `\n\t\tCREATE TABLE {{schema}}.webhook_subscriptions (\n\t\t\ttenant_id text NOT NULL,\n\t\t\tspace_id text NOT NULL,\n\t\t\tsubscription_id text NOT NULL,\n\t\t\tPRIMARY KEY (tenant_id, space_id, subscription_id)\n\t\t);\n\t\tCREATE TABLE {{schema}}.webhook_subscription_revisions (\n\t\t\ttenant_id text NOT NULL,\n\t\t\tspace_id text NOT NULL,\n\t\t\tsubscription_id text NOT NULL,\n\t\t\trevision bigint NOT NULL,\n\t\t\tstatus text NOT NULL CHECK (status IN ('active', 'paused', 'deleted')),\n\t\t\tevent_type_patterns json NOT NULL,\n\t\t\teffective_from_ms bigint NOT NULL,\n\t\t\tPRIMARY KEY (tenant_id, space_id, subscription_id, revision),\n\t\t\tFOREIGN KEY (tenant_id, space_id, subscription_id) REFERENCES {{schema}}.webhook_subscriptions\n\t\t);\n\t\tCREATE INDEX webhook_subscription_revisions_at_idx\n\t\t\tON {{schema}}.webhook_subscription_revisions (tenant_id, space_id, effective_from_ms);\n\t\tCREATE TABLE {{schema}}.webhook_subscription_configurations (\n\t\t\ttenant_id text NOT NULL,\n\t\t\tspace_id text NOT NULL,\n\t\t\tsubscription_id text NOT NULL,\n\t\t\tversion bigint NOT NULL,\n\t\t\tdestination_url json NOT NULL,\n\t\t\tsignature_scheme text NOT NULL,\n\t\t\tsecret_ref json NOT NULL,\n\t\t\tPRIMARY KEY (tenant_id, space_id, subscription_id, version),\n\t\t\tFOREIGN KEY (tenant_id, space_id, subscription_id) REFERENCES {{schema}}.webhook_subscriptions\n\t\t);\n\t`,\n}]);\n\nfunction revisionColumns(alias: string): string {\n\treturn `${alias}.revision::text AS revision, ${alias}.status, ${alias}.event_type_patterns::text AS event_type_patterns, ${alias}.effective_from_ms::text AS effective_from_ms`;\n}\n\nfunction configurationColumns(alias: string): string {\n\treturn `${alias}.version::text AS version, ${alias}.destination_url::text AS destination_url, ${alias}.signature_scheme, ${alias}.secret_ref::text AS secret_ref`;\n}\n\ntype Row = Record<string, unknown>;\n\nfunction revisionFrom(row: Row): RevisionState {\n\tconst patterns = jsonOf(row[\"event_type_patterns\"], \"row.event_type_patterns\");\n\tif (!Array.isArray(patterns) || !patterns.every((pattern) => typeof pattern === \"string\")) throw storeError(\"store_failed\", \"row.event_type_patterns\");\n\treturn {\n\t\trevision: intOf(row[\"revision\"], \"row.revision\"),\n\t\tstatus: textOf(row[\"status\"], \"row.status\") as WebhookSubscriptionStatus,\n\t\teventTypePatterns: patterns as string[],\n\t\teffectiveFromMs: intOf(row[\"effective_from_ms\"], \"row.effective_from_ms\"),\n\t};\n}\n\nfunction configurationFrom(target: Target, row: Row): WebhookDeliveryConfiguration {\n\treturn configurationOut(target, intOf(row[\"version\"], \"row.version\"), {\n\t\tdestinationUrl: textOf(jsonOf(row[\"destination_url\"], \"row.destination_url\"), \"row.destination_url\"),\n\t\tsignatureScheme: textOf(row[\"signature_scheme\"], \"row.signature_scheme\") as WebhookSignatureScheme,\n\t\tsecretRef: textOf(jsonOf(row[\"secret_ref\"], \"row.secret_ref\"), \"row.secret_ref\"),\n\t});\n}\n\n/**\n * A PostgreSQL {@link WebhookSubscriptionStore} and {@link WebhookSubscriptionWriter}.\n * Subscriptions are keyed by (tenantId, spaceId, subscriptionId); a read or\n * write in another scope does not see them. Call {@link ensureSchema} once\n * before use.\n *\n * @throws {WebhookStoreError} `clock_invalid` when `clock` has no `now`\n * function; `input_invalid` when `pool`, `schema` or the test seam is not usable.\n */\nexport class PostgresWebhookSubscriptionStore implements WebhookSubscriptionStore, WebhookSubscriptionWriter {\n\treadonly #pool: WebhookPostgresPool;\n\treadonly #clock: CapturedClock;\n\treadonly #schema: string;\n\treadonly #t: Tables;\n\treadonly #beforeAtomicStep: ((operation: string) => Promise<void> | void) | undefined;\n\n\tconstructor(options: PostgresWebhookSubscriptionStoreOptions) {\n\t\tthis.#clock = guard(() => {\n\t\t\tif (options === null || typeof options !== \"object\") throw storeError(\"clock_invalid\", \"clock\");\n\t\t\treturn captureClock(options.clock);\n\t\t}, () => storeError(\"clock_invalid\", \"clock\"));\n\t\tthis.#pool = readPoolOption(options);\n\t\tthis.#schema = readSchemaOption(options);\n\t\tthis.#t = {\n\t\t\tsubscriptions: `${this.#schema}.webhook_subscriptions`,\n\t\t\trevisions: `${this.#schema}.webhook_subscription_revisions`,\n\t\t\tconfigurations: `${this.#schema}.webhook_subscription_configurations`,\n\t\t};\n\t\tthis.#beforeAtomicStep = readHookOption(options, \"beforeAtomicStep\");\n\t}\n\n\t/** Create the schema and tables, or check the applied migrations. Safe to call concurrently and repeatedly. */\n\tasync ensureSchema(): Promise<void> {\n\t\tawait applyWebhookMigrations(this.#pool, this.#schema, \"subscriptions\", SUBSCRIPTION_MIGRATIONS);\n\t}\n\n\t#boundary(operation: string): Promise<void> {\n\t\tconst hook = this.#beforeAtomicStep;\n\t\treturn awaitHook(hook === undefined ? undefined : () => hook(operation), \"beforeAtomicStep\");\n\t}\n\n\tasync #read<T>(operation: string, bounds: CallBounds, body: (db: WebhookPostgresQueryable) => Promise<T>): Promise<T> {\n\t\tawait this.#boundary(operation);\n\t\treturn runRead(this.#pool, this.#clock, bounds, (db) => body(db));\n\t}\n\n\t/** Lock the subscription's head row; `false` when it does not exist in this scope. */\n\tasync #lockHead(tx: WebhookPostgresQueryable, target: Target): Promise<boolean> {\n\t\tconst result = await tx.query(\n\t\t\t`SELECT 1 FROM ${this.#t.subscriptions} WHERE tenant_id = $1 AND space_id = $2 AND subscription_id = $3 FOR UPDATE`,\n\t\t\t[target.tenantId, target.spaceId, target.subscriptionId],\n\t\t);\n\t\treturn result.rows.length === 1;\n\t}\n\n\tasync #currentRevision(db: WebhookPostgresQueryable, target: Target): Promise<RevisionState | undefined> {\n\t\tconst result = await db.query(\n\t\t\t`SELECT ${revisionColumns(\"revision\")} FROM ${this.#t.revisions} AS revision\n\t\t\t WHERE tenant_id = $1 AND space_id = $2 AND subscription_id = $3 ORDER BY revision.revision DESC LIMIT 1`,\n\t\t\t[target.tenantId, target.spaceId, target.subscriptionId],\n\t\t);\n\t\treturn result.rows[0] === undefined ? undefined : revisionFrom(result.rows[0]);\n\t}\n\n\tasync #currentConfiguration(db: WebhookPostgresQueryable, target: Target): Promise<WebhookDeliveryConfiguration> {\n\t\tconst result = await db.query(\n\t\t\t`SELECT ${configurationColumns(\"configuration\")} FROM ${this.#t.configurations} AS configuration\n\t\t\t WHERE tenant_id = $1 AND space_id = $2 AND subscription_id = $3 ORDER BY configuration.version DESC LIMIT 1`,\n\t\t\t[target.tenantId, target.spaceId, target.subscriptionId],\n\t\t);\n\t\tif (result.rows[0] === undefined) throw storeError(\"store_failed\", \"row.configuration\");\n\t\treturn configurationFrom(target, result.rows[0]);\n\t}\n\n\tasync #insertRevision(tx: WebhookPostgresQueryable, target: Target, revision: RevisionState): Promise<void> {\n\t\tawait tx.query(\n\t\t\t`INSERT INTO ${this.#t.revisions} (tenant_id, space_id, subscription_id, revision, status, event_type_patterns, effective_from_ms)\n\t\t\t VALUES ($1, $2, $3, $4, $5, $6::json, $7)`,\n\t\t\t[target.tenantId, target.spaceId, target.subscriptionId, revision.revision, revision.status, serializeJson(revision.eventTypePatterns), revision.effectiveFromMs],\n\t\t);\n\t}\n\n\tasync #insertConfiguration(tx: WebhookPostgresQueryable, target: Target, version: number, configuration: WebhookDeliveryConfigurationInput): Promise<void> {\n\t\tawait tx.query(\n\t\t\t`INSERT INTO ${this.#t.configurations} (tenant_id, space_id, subscription_id, version, destination_url, signature_scheme, secret_ref)\n\t\t\t VALUES ($1, $2, $3, $4, $5::json, $6, $7::json)`,\n\t\t\t[target.tenantId, target.spaceId, target.subscriptionId, version, serializeJson(configuration.destinationUrl), configuration.signatureScheme, serializeJson(configuration.secretRef)],\n\t\t);\n\t}\n\n\t// -------------------------------------------------------------------------\n\t// Reads\n\t// -------------------------------------------------------------------------\n\n\tasync listEligibilityRevisions(\n\t\tinput: WebhookScope & { readonly recordedAt: string },\n\t\toptions: WebhookCallOptions,\n\t): Promise<readonly WebhookEligibilityRevision[]> {\n\t\tconst call = readRevisionsAtCall(input, options);\n\t\treturn this.#read(\"listEligibilityRevisions\", call.bounds, async (db) => {\n\t\t\t// Per subscription, the latest revision in effect at recordedAt\n\t\t\t// (effectiveFrom <= recordedAt), with its successor's start.\n\t\t\tconst result = await db.query(\n\t\t\t\t`SELECT DISTINCT ON (revision.subscription_id)\n\t\t\t\t\trevision.subscription_id, ${revisionColumns(\"revision\")},\n\t\t\t\t\t(SELECT next.effective_from_ms::text FROM ${this.#t.revisions} AS next\n\t\t\t\t\t WHERE next.tenant_id = revision.tenant_id AND next.space_id = revision.space_id\n\t\t\t\t\t AND next.subscription_id = revision.subscription_id AND next.revision = revision.revision + 1) AS next_from_ms\n\t\t\t\t FROM ${this.#t.revisions} AS revision\n\t\t\t\t WHERE revision.tenant_id = $1 AND revision.space_id = $2 AND revision.effective_from_ms <= $3\n\t\t\t\t ORDER BY revision.subscription_id, revision.revision DESC`,\n\t\t\t\t[call.tenantId, call.spaceId, call.recordedAtMs],\n\t\t\t);\n\t\t\tconst found = result.rows.map((row) => ({\n\t\t\t\ttarget: { tenantId: call.tenantId, spaceId: call.spaceId, subscriptionId: textOf(row[\"subscription_id\"], \"row.subscription_id\") },\n\t\t\t\trevision: revisionFrom(row),\n\t\t\t\tnextFromMs: optionalIntOf(row[\"next_from_ms\"], \"row.next_from_ms\"),\n\t\t\t}))\n\t\t\t\t// Half-open: effectiveFrom <= recordedAt < next.effectiveFrom.\n\t\t\t\t.filter((item) => item.nextFromMs === undefined || call.recordedAtMs < item.nextFromMs)\n\t\t\t\t// The memory store's order (UTF-16 code units), not the database collation.\n\t\t\t\t.sort((left, right) => compareText(left.target.subscriptionId, right.target.subscriptionId));\n\t\t\treturn copyOut<readonly WebhookEligibilityRevision[]>(found.map((item) => revisionOut(item.target, item.revision, item.nextFromMs)));\n\t\t});\n\t}\n\n\tasync readSubscription(\n\t\tinput: WebhookScope & { readonly subscriptionId: string },\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookSubscriptionSnapshot | null> {\n\t\tconst call = readTargetCall(input, options);\n\t\treturn this.#read(\"readSubscription\", call.bounds, async (db) => {\n\t\t\tconst target = call.target;\n\t\t\tconst result = await db.query(\n\t\t\t\t// One statement, so the status and the revision it began at are\n\t\t\t\t// read from one snapshot. `status_since` is one past the last\n\t\t\t\t// revision with another status, or 1 (revisions are numbered\n\t\t\t\t// 1, 2, 3 … with no gaps; subscription-store-core.ts,\n\t\t\t\t// `statusSinceRevision`, is the memory store's twin).\n\t\t\t\t`SELECT current_revision.status, current_revision.status_since::text AS status_since,\n\t\t\t\t\t${configurationColumns(\"current_configuration\")}\n\t\t\t\t FROM ${this.#t.subscriptions} AS subscription\n\t\t\t\t CROSS JOIN LATERAL (\n\t\t\t\t\tSELECT latest.status,\n\t\t\t\t\t\tCOALESCE((\n\t\t\t\t\t\t\tSELECT max(prior.revision) FROM ${this.#t.revisions} AS prior\n\t\t\t\t\t\t\tWHERE prior.tenant_id = subscription.tenant_id AND prior.space_id = subscription.space_id\n\t\t\t\t\t\t\t AND prior.subscription_id = subscription.subscription_id AND prior.status <> latest.status\n\t\t\t\t\t\t), 0) + 1 AS status_since\n\t\t\t\t\tFROM (\n\t\t\t\t\t\tSELECT status FROM ${this.#t.revisions} AS revision\n\t\t\t\t\t\tWHERE revision.tenant_id = subscription.tenant_id AND revision.space_id = subscription.space_id\n\t\t\t\t\t\t AND revision.subscription_id = subscription.subscription_id\n\t\t\t\t\t\tORDER BY revision.revision DESC LIMIT 1\n\t\t\t\t\t) AS latest\n\t\t\t\t ) AS current_revision\n\t\t\t\t CROSS JOIN LATERAL (\n\t\t\t\t\tSELECT * FROM ${this.#t.configurations} AS configuration\n\t\t\t\t\tWHERE configuration.tenant_id = subscription.tenant_id AND configuration.space_id = subscription.space_id\n\t\t\t\t\t AND configuration.subscription_id = subscription.subscription_id\n\t\t\t\t\tORDER BY configuration.version DESC LIMIT 1\n\t\t\t\t ) AS current_configuration\n\t\t\t\t WHERE subscription.tenant_id = $1 AND subscription.space_id = $2 AND subscription.subscription_id = $3`,\n\t\t\t\t[target.tenantId, target.spaceId, target.subscriptionId],\n\t\t\t);\n\t\t\tconst row = result.rows[0];\n\t\t\tif (row === undefined) return null;\n\t\t\treturn copyOut<WebhookSubscriptionSnapshot>({\n\t\t\t\tsubscriptionId: target.subscriptionId,\n\t\t\t\ttenantId: target.tenantId,\n\t\t\t\tspaceId: target.spaceId,\n\t\t\t\tstatus: textOf(row[\"status\"], \"row.status\"),\n\t\t\t\tstatusSinceRevision: intOf(row[\"status_since\"], \"row.status_since\"),\n\t\t\t\tconfiguration: configurationFrom(target, row),\n\t\t\t});\n\t\t});\n\t}\n\n\tasync listEligibilityHistory(\n\t\tinput: WebhookScope & { readonly subscriptionId: string },\n\t\toptions: WebhookCallOptions,\n\t): Promise<readonly WebhookEligibilityRevision[]> {\n\t\tconst call = readTargetCall(input, options);\n\t\treturn this.#read(\"listEligibilityHistory\", call.bounds, async (db) => {\n\t\t\tconst target = call.target;\n\t\t\tconst result = await db.query(\n\t\t\t\t`SELECT ${revisionColumns(\"revision\")} FROM ${this.#t.revisions} AS revision\n\t\t\t\t WHERE tenant_id = $1 AND space_id = $2 AND subscription_id = $3 ORDER BY revision.revision`,\n\t\t\t\t[target.tenantId, target.spaceId, target.subscriptionId],\n\t\t\t);\n\t\t\tconst revisions = result.rows.map(revisionFrom);\n\t\t\treturn copyOut<readonly WebhookEligibilityRevision[]>(revisions.map((revision, index) => revisionOut(target, revision, revisions[index + 1]?.effectiveFromMs)));\n\t\t});\n\t}\n\n\t// -------------------------------------------------------------------------\n\t// Writes\n\t// -------------------------------------------------------------------------\n\n\tasync createSubscription(\n\t\tinput: WebhookScope & {\n\t\t\treadonly subscriptionId: string;\n\t\t\treadonly eventTypePatterns: readonly string[];\n\t\t\treadonly configuration: WebhookDeliveryConfigurationInput;\n\t\t},\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookSubscriptionWriteResult> {\n\t\tconst call = readCreateCall(input, options);\n\t\tawait this.#boundary(\"createSubscription\");\n\t\tconst target = call.target;\n\t\t// The head row is inserted before the clock is read, so the only work\n\t\t// between the clock read and the commit is one statement that writes\n\t\t// revision 1 and configuration version 1 together.\n\t\treturn runWrite(\n\t\t\tthis.#pool,\n\t\t\tthis.#clock,\n\t\t\tcall.bounds,\n\t\t\tasync (tx) => (await tx.query(\n\t\t\t\t`INSERT INTO ${this.#t.subscriptions} (tenant_id, space_id, subscription_id) VALUES ($1, $2, $3)\n\t\t\t\t ON CONFLICT DO NOTHING RETURNING subscription_id`,\n\t\t\t\t[target.tenantId, target.spaceId, target.subscriptionId],\n\t\t\t)).rows.length === 1,\n\t\t\tasync (tx, nowMs, created) => {\n\t\t\t\tif (!created) return refused(\"already_exists\");\n\t\t\t\tconst revision: RevisionState = { revision: 1, status: \"active\", eventTypePatterns: call.patterns, effectiveFromMs: nowMs };\n\t\t\t\tconst configuration = configurationOut(target, 1, call.configuration);\n\t\t\t\tconst result = copyOut<WebhookSubscriptionWriteResult>({ applied: true, revision: revisionOut(target, revision, undefined), configuration });\n\t\t\t\tawait tx.query(\n\t\t\t\t\t`WITH revision AS (\n\t\t\t\t\t\tINSERT INTO ${this.#t.revisions} (tenant_id, space_id, subscription_id, revision, status, event_type_patterns, effective_from_ms)\n\t\t\t\t\t\tVALUES ($1, $2, $3, 1, 'active', $4::json, $5)\n\t\t\t\t\t)\n\t\t\t\t\tINSERT INTO ${this.#t.configurations} (tenant_id, space_id, subscription_id, version, destination_url, signature_scheme, secret_ref)\n\t\t\t\t\tVALUES ($1, $2, $3, 1, $6::json, $7, $8::json)`,\n\t\t\t\t\t[target.tenantId, target.spaceId, target.subscriptionId, serializeJson(call.patterns), nowMs,\n\t\t\t\t\t\tserializeJson(call.configuration.destinationUrl), call.configuration.signatureScheme, serializeJson(call.configuration.secretRef)],\n\t\t\t\t);\n\t\t\t\treturn result;\n\t\t\t},\n\t\t);\n\t}\n\n\tasync changeEventTypePatterns(\n\t\tinput: WebhookSubscriptionTransitionInput & { readonly eventTypePatterns: readonly string[] },\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookSubscriptionWriteResult> {\n\t\tconst call = readChangePatternsCall(input, options);\n\t\tawait this.#boundary(\"changeEventTypePatterns\");\n\t\treturn this.#transition(call.bounds, call.target, call.expectedRevision, (current) => ({ status: current.status, patterns: call.patterns }));\n\t}\n\n\tasync pauseSubscription(input: WebhookSubscriptionTransitionInput, options: WebhookCallOptions): Promise<WebhookSubscriptionWriteResult> {\n\t\treturn this.#statusChange(\"pauseSubscription\", input, options, PAUSE);\n\t}\n\n\tasync resumeSubscription(input: WebhookSubscriptionTransitionInput, options: WebhookCallOptions): Promise<WebhookSubscriptionWriteResult> {\n\t\treturn this.#statusChange(\"resumeSubscription\", input, options, RESUME);\n\t}\n\n\tasync deleteSubscription(input: WebhookSubscriptionTransitionInput, options: WebhookCallOptions): Promise<WebhookSubscriptionWriteResult> {\n\t\treturn this.#statusChange(\"deleteSubscription\", input, options, DELETE);\n\t}\n\n\tasync replaceDeliveryConfiguration(\n\t\tinput: WebhookScope & { readonly subscriptionId: string; readonly configuration: WebhookDeliveryConfigurationInput; readonly expectedVersion?: number },\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookConfigurationWriteResult> {\n\t\tconst call = readReplaceConfigurationCall(input, options);\n\t\tawait this.#boundary(\"replaceDeliveryConfiguration\");\n\t\tconst target = call.target;\n\t\treturn runWrite(this.#pool, this.#clock, call.bounds, (tx) => this.#lockHead(tx, target), async (tx, _nowMs, exists) => {\n\t\t\tif (!exists) return copyOut<WebhookConfigurationWriteResult>({ applied: false, refusal: \"not_found\" });\n\t\t\tconst revision = await this.#currentRevision(tx, target);\n\t\t\tif (revision === undefined) throw storeError(\"store_failed\", \"row.revision\");\n\t\t\tif (revision.status === \"deleted\") return copyOut<WebhookConfigurationWriteResult>({ applied: false, refusal: \"deleted\" });\n\t\t\tconst current = await this.#currentConfiguration(tx, target);\n\t\t\tif (call.expectedVersion !== undefined && call.expectedVersion !== current.version) {\n\t\t\t\treturn copyOut<WebhookConfigurationWriteResult>({ applied: false, refusal: \"version_conflict\", currentVersion: current.version });\n\t\t\t}\n\t\t\tconst configuration = configurationOut(target, current.version + 1, call.configuration);\n\t\t\tconst result = copyOut<WebhookConfigurationWriteResult>({ applied: true, configuration });\n\t\t\tawait this.#insertConfiguration(tx, target, current.version + 1, call.configuration);\n\t\t\treturn result;\n\t\t});\n\t}\n\n\tasync #statusChange(\n\t\toperation: string,\n\t\tinput: WebhookSubscriptionTransitionInput,\n\t\toptions: WebhookCallOptions,\n\t\tnext: StatusChange,\n\t): Promise<WebhookSubscriptionWriteResult> {\n\t\tconst call = readStatusChangeCall(input, options);\n\t\tawait this.#boundary(operation);\n\t\treturn this.#transition(call.bounds, call.target, call.expectedRevision, statusRevisionChange(next));\n\t}\n\n\t/**\n\t * Append one revision, checked against the current revision. The head\n\t * row is locked and the current revision and configuration are read\n\t * before the clock, so the clock read that stamps `effectiveFrom` is\n\t * followed only by the INSERT and the COMMIT.\n\t */\n\t#transition(bounds: CallBounds, target: Target, expectedRevision: number | undefined, change: RevisionChange): Promise<WebhookSubscriptionWriteResult> {\n\t\treturn runWrite(\n\t\t\tthis.#pool,\n\t\t\tthis.#clock,\n\t\t\tbounds,\n\t\t\tasync (tx) => {\n\t\t\t\tif (!(await this.#lockHead(tx, target))) return undefined;\n\t\t\t\tconst current = await this.#currentRevision(tx, target);\n\t\t\t\tif (current === undefined) throw storeError(\"store_failed\", \"row.revision\");\n\t\t\t\treturn { current, configuration: await this.#currentConfiguration(tx, target) };\n\t\t\t},\n\t\t\tasync (tx, nowMs, locked) => {\n\t\t\t\tconst decision = decideTransition(locked?.current, expectedRevision, nowMs, change);\n\t\t\t\tif (\"refusal\" in decision) return decision.refusal;\n\t\t\t\tconst result = copyOut<WebhookSubscriptionWriteResult>({ applied: true, revision: revisionOut(target, decision.appended, undefined), configuration: locked!.configuration });\n\t\t\t\tawait this.#insertRevision(tx, target, decision.appended);\n\t\t\t\treturn result;\n\t\t\t},\n\t\t);\n\t}\n}\n","import { guard, inputError } from \"./errors\";\nimport {\n\tassertDelaySchedule,\n\tassertJitteredScheduleRepresentable,\n\tassertJitterRatio,\n\tDEFAULT_WEBHOOK_DELIVERY_LIMITS,\n} from \"./limits\";\nimport type { WebhookRandomSource, WebhookRetryDelay } from \"./ports\";\nimport { apply, freeze, isPlainRecord, mathFloor, mathMin, numberIsSafeInteger, primitive, primitiveList, readOwn, type Fail } from \"./snapshot\";\n\n/** Options for {@link createWebhookRetryDelay}. */\nexport interface WebhookRetryDelayOptions {\n\t/** Base delays before attempts 2, 3, ...; defaults to the delivery schedule. The last entry repeats. */\n\treadonly delaysMs?: readonly number[];\n\t/** Jitter as a fraction of the base delay, in `(0, 1]`; defaults to 0.1. */\n\treadonly jitterRatio?: number;\n\t/** Random source in `[0, 1)`. Required so jitter is never hidden process state. */\n\treadonly random: WebhookRandomSource;\n}\n\nconst unreadable = (): Error => inputError(\"type\", \"input_unreadable\");\nconst unreadableFail: Fail = () => {\n\tthrow unreadable();\n};\n\n/**\n * Build the retry delay port. For the 1-based number of the attempt that just\n * failed, it returns `base + floor(base * jitterRatio * random())`, so a delay\n * lies in `[base, base * (1 + jitterRatio))` and never shortens the schedule.\n * Exhaustion is decided by `maxDeliveryAttempts`, not here. The options are\n * copied at entry into a snapshot, one descriptor read per option, and the\n * schedule copied by index; the port uses only that validated copy.\n *\n * @throws {WebhookDeliveryConfigError} for an empty or non-positive schedule or jitter.\n * @throws {TypeError} `random_source_missing` without a random source, or\n * `input_unreadable` for options that cannot be read.\n *\n * The port throws `RangeError` `attempt_invalid` or `random_sample_invalid`,\n * and `TypeError` `random_source_failed` when the random source throws; the\n * source's exception is dropped unread.\n */\nexport function createWebhookRetryDelay(options: WebhookRetryDelayOptions): WebhookRetryDelay {\n\treturn guard(() => {\n\t\tif (!isPlainRecord(options)) throw unreadable();\n\t\tconst rawDelays = primitiveList(readOwn(options, \"delaysMs\", \"delaysMs\", unreadableFail), \"delaysMs\", unreadableFail);\n\t\tconst rawJitter = primitive(readOwn(options, \"jitterRatio\", \"jitterRatio\", unreadableFail));\n\t\tconst random = readOwn(options, \"random\", \"random\", unreadableFail);\n\t\tconst delaysMs = rawDelays === undefined ? DEFAULT_WEBHOOK_DELIVERY_LIMITS.deliveryRetryDelaysMs : rawDelays;\n\t\tconst jitterRatio = rawJitter === undefined ? DEFAULT_WEBHOOK_DELIVERY_LIMITS.retryJitterRatio : rawJitter;\n\t\tassertDelaySchedule(delaysMs, \"delaysMs\");\n\t\tassertJitterRatio(jitterRatio, \"jitterRatio\");\n\t\tassertJitteredScheduleRepresentable(delaysMs, jitterRatio, \"delaysMs\");\n\t\tif (typeof random !== \"function\") throw inputError(\"type\", \"random_source_missing\");\n\t\tconst delay = (attempt: number): number =>\n\t\t\tguard(() => {\n\t\t\t\tconst value = primitive(attempt);\n\t\t\t\tif (typeof value !== \"number\" || !numberIsSafeInteger(value) || value < 1) throw inputError(\"range\", \"attempt_invalid\");\n\t\t\t\tconst base = delaysMs[mathMin(value, delaysMs.length) - 1]!;\n\t\t\t\tconst sample = apply(random, undefined, []) as unknown;\n\t\t\t\tif (typeof sample !== \"number\" || !(sample >= 0 && sample < 1)) throw inputError(\"range\", \"random_sample_invalid\");\n\t\t\t\treturn base + mathFloor(base * jitterRatio * sample);\n\t\t\t}, () => inputError(\"type\", \"random_source_failed\"));\n\t\treturn freeze(delay);\n\t}, unreadable);\n}\n","import type { WebhookAttemptOutcome, WebhookAttemptReasonCode } from \"./codes\";\nimport { guard, inputError } from \"./errors\";\nimport { assertPositiveFinite } from \"./limits\";\nimport type { WebhookTransportResult } from \"./ports\";\nimport {\n\tdateParse,\n\tisPlainRecord,\n\tmatches,\n\tmathMax,\n\tmathMin,\n\tNumberConstructor,\n\tnumberIsFinite,\n\tnumberIsSafeInteger,\n\tprimitive,\n\treadOwn,\n\trecord,\n\ttimeOf,\n\ttrim,\n\ttype Fail,\n} from \"./snapshot\";\n\n/**\n * Everything decision 10's table classifies: a transport observation that\n * reached the network, or a check that stopped the attempt. A transport\n * `not_sent` result is not here: the dispatcher releases that intent unsent\n * without spending budget.\n */\nexport type WebhookDeliveryObservation =\n\t| Exclude<WebhookTransportResult, { readonly kind: \"not_sent\" }>\n\t| { readonly kind: \"signer_unavailable\" | \"authorization_revoked\" | \"subscription_paused\" | \"subscription_deleted\" };\n\n/** The classified attempt. */\nexport interface WebhookDeliveryClassification {\n\treadonly outcome: WebhookAttemptOutcome;\n\treadonly reason: WebhookAttemptReasonCode;\n\t/** The HTTP status, when a response was received. */\n\treadonly httpStatus?: number;\n\t/**\n\t * For a 429 with a parseable `Retry-After`: the requested delay, clamped\n\t * to `[0, maxRetryAfterMs]`. The dispatcher is expected to schedule the\n\t * later of this and the retry schedule's delay.\n\t */\n\treadonly retryAfterMs?: number;\n\t/**\n\t * `true` for 401 and 403: still `retryable`, but usually needing the\n\t * receiver to act, so the caller surfaces it to operators before the retry\n\t * budget is exhausted.\n\t */\n\treadonly receiverActionLikely?: true;\n}\n\n/** Inputs the classifier needs beyond the observation. */\nexport interface WebhookClassifyOptions {\n\t/** Used to turn an HTTP-date `Retry-After` into a delay. */\n\treadonly now: Date;\n\t/** Upper bound on an honoured `Retry-After`. */\n\treadonly maxRetryAfterMs: number;\n}\n\n/** The classifier options as snapshotted. `nowMs` is `NaN` unless `now` is a real `Date`. */\ninterface OptionsSnapshot {\n\treadonly nowMs: number;\n\treadonly maxRetryAfterMs: number;\n}\n\nconst unreadable = (): Error => inputError(\"type\", \"input_unreadable\");\nconst unreadableFail: Fail = () => {\n\tthrow unreadable();\n};\n\n/**\n * Classify one attempt by ADR 0018 decision 10:\n *\n * | Observation | Outcome |\n * | --- | --- |\n * | 2xx | `delivered` |\n * | network error, timeout, DNS failure, 408, 425, 429, 5xx, signer unavailable | `retryable` |\n * | 401, 403 | `retryable`, with `receiverActionLikely: true` |\n * | 3xx, 410, other 4xx, invalid URL, private or reserved address | `dead_letter` |\n * | authorization revoked, subscription paused or deleted | `cancelled` |\n *\n * A final 1xx, which the table does not list, is `retryable` (`http_1xx`).\n * The options and the observation are copied into a snapshot at entry,\n * one descriptor read per field; an accessor is refused, not called.\n *\n * @throws {RangeError} `status_out_of_range` for a status that is not a whole number in 100-599.\n * @throws {TypeError} `observation_unknown` for an unknown kind, or\n * `input_unreadable` for an observation or options that cannot be read. The\n * message is constant and never repeats the input.\n * @throws {WebhookDeliveryConfigError} when `maxRetryAfterMs` is not positive and finite.\n */\nexport function classifyWebhookDeliveryObservation(\n\tobservation: WebhookDeliveryObservation,\n\toptions: WebhookClassifyOptions,\n): WebhookDeliveryClassification {\n\treturn guard(() => {\n\t\tconst settings = snapshotOptions(options);\n\t\tif (!isPlainRecord(observation)) throw unreadable();\n\t\tconst kind = primitive(readOwn(observation, \"kind\", \"kind\", unreadableFail));\n\t\tif (kind === \"response\") {\n\t\t\tconst status = primitive(readOwn(observation, \"status\", \"status\", unreadableFail));\n\t\t\tconst retryAfter = primitive(readOwn(observation, \"retryAfter\", \"retryAfter\", unreadableFail));\n\t\t\treturn classifyStatus(status, retryAfter, settings);\n\t\t}\n\t\tswitch (kind) {\n\t\t\tcase \"network_error\":\n\t\t\tcase \"timeout\":\n\t\t\tcase \"dns_failure\":\n\t\t\tcase \"signer_unavailable\":\n\t\t\t\treturn record<WebhookDeliveryClassification>({ outcome: \"retryable\", reason: kind });\n\t\t\tcase \"invalid_url\":\n\t\t\tcase \"private_address\":\n\t\t\t\treturn record<WebhookDeliveryClassification>({ outcome: \"dead_letter\", reason: kind });\n\t\t\tcase \"authorization_revoked\":\n\t\t\tcase \"subscription_paused\":\n\t\t\tcase \"subscription_deleted\":\n\t\t\t\treturn record<WebhookDeliveryClassification>({ outcome: \"cancelled\", reason: kind });\n\t\t\tdefault:\n\t\t\t\tthrow inputError(\"type\", \"observation_unknown\");\n\t\t}\n\t}, unreadable);\n}\n\n/** Snapshot the options and validate the cap. */\nfunction snapshotOptions(options: unknown): OptionsSnapshot {\n\tif (!isPlainRecord(options)) throw unreadable();\n\tconst now = readOwn(options, \"now\", \"now\", unreadableFail);\n\tconst maxRetryAfterMs = primitive(readOwn(options, \"maxRetryAfterMs\", \"maxRetryAfterMs\", unreadableFail));\n\tassertPositiveFinite(maxRetryAfterMs, \"maxRetryAfterMs\");\n\treturn record({ nowMs: timeOf(now), maxRetryAfterMs });\n}\n\nfunction classifyStatus(status: unknown, retryAfter: unknown, settings: OptionsSnapshot): WebhookDeliveryClassification {\n\tif (typeof status !== \"number\" || !numberIsSafeInteger(status) || status < 100 || status > 599) {\n\t\tthrow inputError(\"range\", \"status_out_of_range\");\n\t}\n\tconst httpStatus = status;\n\tconst result = (fields: WebhookDeliveryClassification): WebhookDeliveryClassification => record(fields);\n\tif (status < 200) return result({ outcome: \"retryable\", reason: \"http_1xx\", httpStatus });\n\tif (status < 300) return result({ outcome: \"delivered\", reason: \"http_2xx\", httpStatus });\n\tif (status < 400) return result({ outcome: \"dead_letter\", reason: \"http_3xx\", httpStatus });\n\tif (status >= 500) return result({ outcome: \"retryable\", reason: \"http_5xx\", httpStatus });\n\tswitch (status) {\n\t\tcase 401:\n\t\t\treturn result({ outcome: \"retryable\", reason: \"http_401\", httpStatus, receiverActionLikely: true });\n\t\tcase 403:\n\t\t\treturn result({ outcome: \"retryable\", reason: \"http_403\", httpStatus, receiverActionLikely: true });\n\t\tcase 408:\n\t\t\treturn result({ outcome: \"retryable\", reason: \"http_408\", httpStatus });\n\t\tcase 425:\n\t\t\treturn result({ outcome: \"retryable\", reason: \"http_425\", httpStatus });\n\t\tcase 429:\n\t\t\treturn result({ outcome: \"retryable\", reason: \"http_429\", httpStatus, retryAfterMs: retryAfterMsFrom(retryAfter, settings) });\n\t\tcase 410:\n\t\t\treturn result({ outcome: \"dead_letter\", reason: \"http_410\", httpStatus });\n\t\tdefault:\n\t\t\treturn result({ outcome: \"dead_letter\", reason: \"http_4xx\", httpStatus });\n\t}\n}\n\nconst IMF_FIXDATE = /^(?:Mon|Tue|Wed|Thu|Fri|Sat|Sun), \\d{2} (?:Jan|Feb|Mar|Apr|May|Jun|Jul|Aug|Sep|Oct|Nov|Dec) \\d{4} \\d{2}:\\d{2}:\\d{2} GMT$/;\nconst DELTA_SECONDS = /^\\d+$/;\n\n/**\n * Parse `Retry-After` as delta-seconds or an IMF-fixdate HTTP-date and clamp\n * it to `[0, maxRetryAfterMs]`. An absent or unparseable value returns\n * `undefined`, leaving the retry schedule in charge. The options are\n * snapshotted as {@link classifyWebhookDeliveryObservation} snapshots them.\n *\n * @throws {WebhookDeliveryConfigError} when `maxRetryAfterMs` is not positive and finite.\n * @throws {TypeError} `input_unreadable` for options that cannot be read.\n */\nexport function parseRetryAfterMs(\n\tvalue: string | null | undefined,\n\toptions: WebhookClassifyOptions,\n): number | undefined {\n\treturn guard(() => retryAfterMsFrom(primitive(value), snapshotOptions(options)), unreadable);\n}\n\nfunction retryAfterMsFrom(value: unknown, settings: OptionsSnapshot): number | undefined {\n\tif (typeof value !== \"string\") return undefined;\n\tconst trimmed = trim(value);\n\tif (trimmed === \"\") return undefined;\n\tlet delayMs: number;\n\tif (matches(DELTA_SECONDS, trimmed)) {\n\t\tdelayMs = NumberConstructor(trimmed) * 1000;\n\t} else {\n\t\t// Only the IMF-fixdate form senders must generate (RFC 9110 5.6.7);\n\t\t// Date.parse alone would accept \"-5\" or \"1.5\" as dates.\n\t\tif (!matches(IMF_FIXDATE, trimmed)) return undefined;\n\t\tconst at = dateParse(trimmed);\n\t\tif (!numberIsFinite(at) || !numberIsFinite(settings.nowMs)) return undefined;\n\t\tdelayMs = at - settings.nowMs;\n\t}\n\tif (delayMs !== delayMs) return undefined;\n\treturn mathMin(mathMax(delayMs, 0), settings.maxRetryAfterMs);\n}\n","import type { WebhookProjectionErrorCode } from \"./codes\";\nimport { guard, projectionError } from \"./errors\";\nimport {\n\tdefine,\n\temptyMap,\n\tfreeze,\n\thasOwn,\n\tisoFromDateOrString,\n\tisPlainRecord,\n\tnumberIsSafeInteger,\n\treadOwn,\n\trecord,\n\tsnapshotJson,\n\tstringList,\n\ttype Fail,\n} from \"./snapshot\";\nimport type {\n\tWebhookEventMetadata,\n\tWebhookFanOutJobDraft,\n\tWebhookJobActor,\n\tWebhookJsonObject,\n\tWebhookJsonValue,\n\tWebhookPayloadPolicy,\n\tWebhookSourceEnvelope,\n} from \"./types\";\n\n/** Inputs to {@link projectWebhookFanOutJob}. */\nexport interface WebhookPersistenceProjectionOptions {\n\t/** The application's per-event-type egress allowlist and declared facts. */\n\treadonly policy: WebhookPayloadPolicy;\n\t/**\n\t * The actor Host passed with the envelope, or why it is absent. Defaults to\n\t * `{ state: \"absent\", reason: \"legacy\" }`.\n\t */\n\treadonly actor?: WebhookJobActor;\n}\n\nconst LEGACY_ACTOR: WebhookJobActor = record({ state: \"absent\", reason: \"legacy\" });\n\n/* Fault mapping. Data records (envelope, job, subscription, actor) report\n * accessors as `accessor_property` and anything else as `invalid_envelope`;\n * call and configuration records (options, input, policy) report\n * `inspection_failed`; JSON values report the code of the list naming them. */\n\n/** @internal */\nexport const dataFail: Fail = (fault, field) => {\n\tthrow projectionError(fault === \"accessor\" ? \"accessor_property\" : \"invalid_envelope\", field);\n};\n\n/** @internal */\nexport const callFail: Fail = (_fault, field) => {\n\tthrow projectionError(\"inspection_failed\", field);\n};\n\nfunction jsonFail(code: WebhookProjectionErrorCode): Fail {\n\treturn (fault, field) => {\n\t\tthrow projectionError(fault === \"accessor\" ? \"accessor_property\" : code, field);\n\t};\n}\n\n/** @internal */\nexport const payloadFail = jsonFail(\"payload_field_not_json\");\n/** @internal */\nexport const factFail = jsonFail(\"fact_field_not_json\");\n\n/** @internal Replacement for anything a projection did not throw itself. */\nexport function uninspectable(field: string): () => Error {\n\treturn () => projectionError(\"inspection_failed\", field);\n}\n\n/**\n * The persistence projection (ADR 0018 decision 2). Host copies\n * `event.payload` into the outbox unchanged, so the fan-out job keeps only:\n *\n * - envelope metadata (no trace context, provenance or payload);\n * - the payload fields allowlisted for the event type, when it has an entry;\n * - the payload fields the entry declares as admission and scope facts.\n *\n * A `restricted` event keeps neither payload fields nor facts unless its\n * entry sets `includeRestricted`. Everything else in the payload is dropped\n * before anything is stored, and the package never asks for it. The\n * envelope and options are copied at entry, through own data property\n * descriptors, into a snapshot (a faithful copy for plain data; a Proxy's\n * traps may run more than once, see README, P1); the job is built\n * from the snapshot and is frozen, with null-prototype records.\n *\n * @throws {WebhookProjectionError} when the envelope lacks a required field,\n * a kept field is not JSON or is an accessor, or an input cannot be\n * inspected. The message is constant for the code; no error keeps an input\n * value or an input-raised error.\n */\nexport function projectWebhookFanOutJob(\n\tenvelope: WebhookSourceEnvelope,\n\toptions: WebhookPersistenceProjectionOptions,\n): WebhookFanOutJobDraft {\n\treturn guard(() => fanOutJob(envelope, options), uninspectable(\"envelope\"));\n}\n\n/**\n * Envelope metadata as a serializable record: identifiers, ordering,\n * classification and consistency. Dates become ISO-8601 strings computed\n * with the `Date.prototype` intrinsics. Only own data properties are read.\n * The renderer runs a stored job's metadata through it again.\n *\n * @throws {WebhookProjectionError} for a missing identifier, an invalid\n * date, an accessor property or a value that cannot be inspected.\n */\nexport function projectWebhookEventMetadata(envelope: unknown): WebhookEventMetadata {\n\treturn guard(() => snapshotEventMetadata(envelope), uninspectable(\"envelope\"));\n}\n\nfunction fanOutJob(envelope: unknown, options: unknown): WebhookFanOutJobDraft {\n\t// Snapshot: options, then envelope metadata, then the policy entry and\n\t// actor, then only the payload fields that entry names.\n\tif (!isPlainRecord(options)) return callFail(\"not_plain\", \"options\");\n\tconst policy = readOwn(options, \"policy\", \"policy\", callFail);\n\tconst rawActor = readOwn(options, \"actor\", \"actor\", callFail);\n\tconst event = snapshotEventMetadata(envelope);\n\tconst entry = snapshotPolicyEntry(policy, event.eventType);\n\tconst actor = snapshotActor(rawActor);\n\tconst restrictedWithoutOptIn = event.payloadClassification === \"restricted\" && entry?.includeRestricted !== true;\n\n\tlet payload: WebhookJsonObject | null = null;\n\tlet facts: WebhookJsonObject = EMPTY;\n\tif (entry && !restrictedWithoutOptIn && (entry.fields || entry.facts)) {\n\t\tconst source = readOwn(envelope as object, \"payload\", \"payload\", dataFail);\n\t\tif (isPlainRecord(source)) {\n\t\t\tconst copies = emptyMap<WebhookJsonValue>();\n\t\t\tif (entry.fields) snapshotNamed(source, entry.fields, payloadFail, copies);\n\t\t\tif (entry.facts) snapshotNamed(source, entry.facts, factFail, copies);\n\t\t\tif (entry.fields) payload = pick(copies, entry.fields);\n\t\t\tif (entry.facts) facts = pick(copies, entry.facts);\n\t\t}\n\t}\n\treturn record({\n\t\teventId: event.eventId,\n\t\ttenantId: event.tenantId,\n\t\tspaceId: event.spaceId,\n\t\tevent,\n\t\tpayload,\n\t\tpayloadProjected: payload !== null,\n\t\tfacts,\n\t\tactor,\n\t});\n}\n\nconst EMPTY: WebhookJsonObject = record({});\n\n/** @internal The policy entry for one event type, as a snapshot. */\nexport interface PolicyEntrySnapshot {\n\t/** `undefined` when the entry has no `fields` list. */\n\treadonly fields?: readonly string[];\n\treadonly facts?: readonly string[];\n\treadonly includeRestricted: boolean;\n\treadonly scoped: boolean;\n}\n\n/**\n * @internal Read the entry for `eventType` from a policy, own data\n * properties only. A missing policy or entry, or a non-object entry, is no\n * entry.\n */\nexport function snapshotPolicyEntry(policy: unknown, eventType: string): PolicyEntrySnapshot | undefined {\n\tif (policy === null || policy === undefined || typeof policy !== \"object\") return undefined;\n\tif (!isPlainRecord(policy)) return callFail(\"not_plain\", \"policy\");\n\tconst entry = readOwn(policy, eventType, \"policy\", callFail);\n\tif (entry === null || entry === undefined || typeof entry !== \"object\") return undefined;\n\tif (!isPlainRecord(entry)) return callFail(\"not_plain\", \"policy\");\n\tconst fields = stringList(readOwn(entry, \"fields\", \"policy\", callFail), \"policy\", callFail);\n\tconst facts = stringList(readOwn(entry, \"facts\", \"policy\", callFail), \"policy\", callFail);\n\treturn record({\n\t\tfields,\n\t\tfacts,\n\t\tincludeRestricted: readOwn(entry, \"includeRestricted\", \"policy\", callFail) === true,\n\t\tscoped: readOwn(entry, \"scoped\", \"policy\", callFail) === true,\n\t});\n}\n\n/**\n * @internal Snapshot each named field of `source` into `copies` (absent\n * and `undefined` fields are left out). A name whose value was already\n * copied is not read again. A repeated name whose first read found nothing\n * is read again, so a Proxy source may answer the second read differently;\n * plain data cannot.\n */\nexport function snapshotNamed(source: object, names: readonly string[], fail: Fail, copies: Record<string, WebhookJsonValue>): void {\n\tfor (let index = 0; index < names.length; index += 1) {\n\t\tconst name = names[index]!;\n\t\tif (hasOwn(copies, name)) continue;\n\t\tconst value = readOwn(source, name, name, fail);\n\t\tif (value === undefined) continue;\n\t\tdefine(copies, name, snapshotJson(value, name, fail));\n\t}\n}\n\n/** @internal A frozen null-prototype object of the named copies, in `names` order. */\nexport function pick(copies: Record<string, WebhookJsonValue>, names: readonly string[]): WebhookJsonObject {\n\tconst picked = emptyMap<WebhookJsonValue>();\n\tfor (let index = 0; index < names.length; index += 1) {\n\t\tconst name = names[index]!;\n\t\tif (hasOwn(copies, name) && !hasOwn(picked, name)) define(picked, name, copies[name]);\n\t}\n\treturn freeze(picked);\n}\n\nconst METADATA_KEYS = freeze([\n\t\"eventId\",\n\t\"eventType\",\n\t\"eventSchemaVersion\",\n\t\"tenantId\",\n\t\"spaceId\",\n\t\"subjectType\",\n\t\"subjectId\",\n\t\"sequence\",\n\t\"actionInvocationId\",\n\t\"correlationId\",\n\t\"causationId\",\n\t\"occurredAt\",\n\t\"recordedAt\",\n\t\"producerModuleVersion\",\n\t\"payloadClassification\",\n\t\"consistency\",\n] as const);\n\n/**\n * @internal Snapshot and validate envelope (or stored job) metadata: every\n * metadata field is read with one descriptor read, then checked.\n */\nexport function snapshotEventMetadata(source: unknown): WebhookEventMetadata {\n\tif (source === null || typeof source !== \"object\") return dataFail(\"not_plain\", \"envelope\");\n\tif (!isPlainRecord(source)) return dataFail(\"not_plain\", \"envelope\");\n\tconst raw = emptyMap<unknown>();\n\tfor (let index = 0; index < METADATA_KEYS.length; index += 1) {\n\t\tconst key = METADATA_KEYS[index]!;\n\t\tdefine(raw, key, readOwn(source, key, key, dataFail));\n\t}\n\tconst classification = raw.payloadClassification;\n\tif (classification !== \"public\" && classification !== \"internal\" && classification !== \"confidential\" && classification !== \"restricted\") {\n\t\treturn dataFail(\"not_json\", \"payloadClassification\");\n\t}\n\tconst consistency = raw.consistency;\n\tif (consistency !== undefined && consistency !== \"authoritative-now\" && consistency !== \"provisional-until-reconciled\") {\n\t\treturn dataFail(\"not_json\", \"consistency\");\n\t}\n\treturn record<WebhookEventMetadata>({\n\t\teventId: requireString(raw.eventId, \"eventId\"),\n\t\teventType: requireString(raw.eventType, \"eventType\"),\n\t\teventSchemaVersion: requireInteger(raw.eventSchemaVersion, \"eventSchemaVersion\"),\n\t\ttenantId: requireString(raw.tenantId, \"tenantId\"),\n\t\tspaceId: requireString(raw.spaceId, \"spaceId\"),\n\t\tsubjectType: requireString(raw.subjectType, \"subjectType\"),\n\t\tsubjectId: requireString(raw.subjectId, \"subjectId\"),\n\t\tsequence: requireInteger(raw.sequence, \"sequence\"),\n\t\tactionInvocationId: optionalString(raw.actionInvocationId, \"actionInvocationId\"),\n\t\tcorrelationId: requireString(raw.correlationId, \"correlationId\"),\n\t\tcausationId: optionalString(raw.causationId, \"causationId\"),\n\t\toccurredAt: requireIsoDate(raw.occurredAt, \"occurredAt\"),\n\t\trecordedAt: requireIsoDate(raw.recordedAt, \"recordedAt\"),\n\t\tproducerModuleVersion: requireString(raw.producerModuleVersion, \"producerModuleVersion\"),\n\t\tpayloadClassification: classification,\n\t\tconsistency,\n\t});\n}\n\nfunction snapshotActor(raw: unknown): WebhookJobActor {\n\tif (raw === undefined) return LEGACY_ACTOR;\n\tif (!isPlainRecord(raw)) return dataFail(\"not_plain\", \"actor\");\n\tconst state = readOwn(raw, \"state\", \"actor\", dataFail);\n\tif (state === \"present\") {\n\t\tconst actorId = readOwn(raw, \"actorId\", \"actorId\", dataFail);\n\t\tconst actorType = readOwn(raw, \"actorType\", \"actorType\", dataFail);\n\t\treturn record<WebhookJobActor>({\n\t\t\tstate: \"present\",\n\t\t\tactorId: requireString(actorId, \"actorId\"),\n\t\t\tactorType: requireString(actorType, \"actorType\"),\n\t\t});\n\t}\n\tconst reason = readOwn(raw, \"reason\", \"actor\", dataFail);\n\tif (state !== \"absent\" || (reason !== \"suppressed\" && reason !== \"legacy\")) return dataFail(\"not_json\", \"actor\");\n\treturn record<WebhookJobActor>({ state: \"absent\", reason });\n}\n\n/** @internal */\nexport function requireString(value: unknown, field: string): string {\n\tif (typeof value !== \"string\" || value.length === 0) return dataFail(\"not_json\", field);\n\treturn value;\n}\n\nfunction optionalString(value: unknown, field: string): string | undefined {\n\treturn value === undefined ? undefined : requireString(value, field);\n}\n\nfunction requireInteger(value: unknown, field: string): number {\n\tif (typeof value !== \"number\" || !numberIsSafeInteger(value)) return dataFail(\"not_json\", field);\n\treturn value;\n}\n\n/** A real `Date` or a date string, read with the intrinsics; never calls the value's own methods. */\nfunction requireIsoDate(value: unknown, field: string): string {\n\tconst iso = isoFromDateOrString(value);\n\tif (iso === undefined) return dataFail(\"not_json\", field);\n\treturn iso;\n}\n","import { guard, projectionError } from \"./errors\";\nimport {\n\tcallFail,\n\tdataFail,\n\tfactFail,\n\tpayloadFail,\n\tpick,\n\trequireString,\n\tsnapshotEventMetadata,\n\tsnapshotNamed,\n\tsnapshotPolicyEntry,\n\tuninspectable,\n\ttype PolicyEntrySnapshot,\n} from \"./persistence-projection\";\nimport type { WebhookScopeInput, WebhookScopePredicate } from \"./ports\";\nimport { apply, emptyMap, isPlainRecord, readOwn, record, serializeJson } from \"./snapshot\";\nimport type {\n\tWebhookDeliveryBodyV1,\n\tWebhookEventMetadata,\n\tWebhookFanOutJobDraft,\n\tWebhookJsonObject,\n\tWebhookJsonValue,\n\tWebhookPayloadPolicy,\n} from \"./types\";\n\n/** The v1 body's `format` value. Receivers read it from the raw body. */\nexport const WEBHOOK_DELIVERY_FORMAT_V1 = \"fabric.webhook-delivery.v1\" as const;\n\n/** The subscription a body is rendered for. */\nexport interface WebhookEgressSubscription {\n\treadonly subscriptionId: string;\n\treadonly tenantId: string;\n\treadonly spaceId: string;\n}\n\n/** Inputs to {@link projectWebhookEgressPayload}. */\nexport interface WebhookEgressProjectionInput {\n\t/** The fan-out job; only what the persistence projection kept can leave. */\n\treadonly job: WebhookFanOutJobDraft;\n\treadonly subscription: WebhookEgressSubscription;\n\t/** The current allowlist; it is re-applied, so a narrowed entry takes effect. */\n\treadonly policy: WebhookPayloadPolicy;\n\t/** Consulted only for event types whose entry sets `scoped`. */\n\treadonly scopePredicate?: WebhookScopePredicate;\n}\n\n/** The payload that may leave for one subscription, and why it is metadata-only when it is. */\nexport interface WebhookEgressPayload {\n\treadonly payload: WebhookJsonObject | null;\n\treadonly payloadProjected: boolean;\n\t/**\n\t * Why the payload was withheld: no allowlist entry, nothing persisted, a\n\t * restricted event without opt-in, or a scoped type whose predicate was\n\t * missing, threw, or did not return `true`.\n\t */\n\treadonly withheld?:\n\t\t| \"no_allowlist_entry\"\n\t\t| \"not_persisted\"\n\t\t| \"restricted\"\n\t\t| \"scope_predicate_missing\"\n\t\t| \"scope_predicate_failed\"\n\t\t| \"scope_predicate_false\";\n}\n\ninterface Egress extends WebhookEgressPayload {\n\treadonly event: WebhookEventMetadata;\n\treadonly subscriptionId: string;\n}\n\ntype Withheld = NonNullable<WebhookEgressPayload[\"withheld\"]>;\n\n/** Everything the egress decision and the renderer use, snapshotted at entry. */\ninterface EgressSnapshot {\n\treadonly event: WebhookEventMetadata;\n\treadonly subscriptionId: string;\n\treadonly tenantId: string;\n\treadonly spaceId: string;\n\treadonly deliveryId?: string;\n\treadonly entry?: PolicyEntrySnapshot;\n\treadonly payloadProjected: boolean;\n\treadonly payloadPersisted: boolean;\n\t/** The entry's fields copied from the stored payload; only when it may leave. */\n\treadonly payload?: WebhookJsonObject;\n\treadonly facts: WebhookJsonObject;\n\treadonly scopePredicate?: WebhookScopePredicate;\n}\n\n/**\n * The egress projection (ADR 0018 decision 9). The payload leaves only when\n * the event type has an allowlist entry, the job persisted a payload, a\n * `restricted` event's entry opted in, and, for a scoped type, the injected\n * predicate returned exactly `true`. Otherwise the body is metadata-only:\n * `payload: null, payloadProjected: false`. The job is treated as input: it\n * is copied at entry, through own data property descriptors, into a\n * snapshot (a faithful copy for plain data; README, P1); its\n * metadata is re-derived and its payload re-copied from that snapshot. The\n * predicate runs after the snapshot is complete and sees frozen copies.\n *\n * @throws {WebhookProjectionError} `scope_mismatch` when the subscription\n * names another tenant or space than the job; other codes when the job or\n * subscription cannot be read safely.\n */\nexport function projectWebhookEgressPayload(input: WebhookEgressProjectionInput): WebhookEgressPayload {\n\treturn guard(() => {\n\t\tconst egress = decideEgress(snapshotEgress(input, false));\n\t\treturn record({ payload: egress.payload, payloadProjected: egress.payloadProjected, withheld: egress.withheld });\n\t}, uninspectable(\"job\"));\n}\n\nconst EMPTY: WebhookJsonObject = record({});\n\nfunction snapshotEgress(input: unknown, withDeliveryId: boolean): EgressSnapshot {\n\tif (!isPlainRecord(input)) return callFail(\"not_plain\", \"input\");\n\tconst job = readOwn(input, \"job\", \"job\", callFail);\n\tconst subscription = readOwn(input, \"subscription\", \"subscription\", callFail);\n\tconst policy = readOwn(input, \"policy\", \"policy\", callFail);\n\tconst scopePredicate = readOwn(input, \"scopePredicate\", \"scopePredicate\", callFail);\n\tconst rawDeliveryId = withDeliveryId ? readOwn(input, \"deliveryId\", \"deliveryId\", callFail) : undefined;\n\n\tif (!isPlainRecord(job)) return dataFail(\"not_plain\", \"job\");\n\tconst event = snapshotEventMetadata(readOwn(job, \"event\", \"event\", dataFail));\n\tif (!isPlainRecord(subscription)) return dataFail(\"not_plain\", \"subscription\");\n\tconst subscriptionId = requireString(readOwn(subscription, \"subscriptionId\", \"subscriptionId\", dataFail), \"subscriptionId\");\n\tconst tenantId = requireString(readOwn(subscription, \"tenantId\", \"tenantId\", dataFail), \"tenantId\");\n\tconst spaceId = requireString(readOwn(subscription, \"spaceId\", \"spaceId\", dataFail), \"spaceId\");\n\tif (tenantId !== event.tenantId || spaceId !== event.spaceId) throw projectionError(\"scope_mismatch\", \"subscription\");\n\tconst deliveryId = withDeliveryId ? requireString(rawDeliveryId, \"deliveryId\") : undefined;\n\n\tconst entry = snapshotPolicyEntry(policy, event.eventType);\n\tlet payloadProjected = false;\n\tlet payloadPersisted = false;\n\tlet payload: WebhookJsonObject | undefined;\n\tlet facts = EMPTY;\n\tif (entry?.fields) {\n\t\tpayloadProjected = readOwn(job, \"payloadProjected\", \"payloadProjected\", dataFail) === true;\n\t\tconst storedPayload = readOwn(job, \"payload\", \"payload\", dataFail);\n\t\tpayloadPersisted = isPlainRecord(storedPayload);\n\t\tconst restricted = event.payloadClassification === \"restricted\" && !entry.includeRestricted;\n\t\tif (payloadProjected && payloadPersisted && !restricted) {\n\t\t\tconst copies = emptyMap<WebhookJsonValue>();\n\t\t\tsnapshotNamed(storedPayload as object, entry.fields, payloadFail, copies);\n\t\t\tpayload = pick(copies, entry.fields);\n\t\t\tif (entry.scoped && entry.facts) {\n\t\t\t\tconst storedFacts = readOwn(job, \"facts\", \"facts\", dataFail);\n\t\t\t\tif (isPlainRecord(storedFacts)) {\n\t\t\t\t\tconst factCopies = emptyMap<WebhookJsonValue>();\n\t\t\t\t\tsnapshotNamed(storedFacts, entry.facts, factFail, factCopies);\n\t\t\t\t\tfacts = pick(factCopies, entry.facts);\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n\treturn record<EgressSnapshot>({\n\t\tevent,\n\t\tsubscriptionId,\n\t\ttenantId,\n\t\tspaceId,\n\t\tdeliveryId,\n\t\tentry,\n\t\tpayloadProjected,\n\t\tpayloadPersisted,\n\t\tpayload,\n\t\tfacts,\n\t\tscopePredicate: typeof scopePredicate === \"function\" ? (scopePredicate as WebhookScopePredicate) : undefined,\n\t});\n}\n\n/** The egress decision over a snapshot. The scope predicate is the only code it calls. */\nfunction decideEgress(snapshot: EgressSnapshot): Egress {\n\tconst { event, subscriptionId, entry } = snapshot;\n\tconst metadataOnly = (reason: Withheld): Egress => record({ event, subscriptionId, payload: null, payloadProjected: false, withheld: reason });\n\tif (!entry || !entry.fields) return metadataOnly(\"no_allowlist_entry\");\n\tif (!snapshot.payloadProjected || !snapshot.payloadPersisted) return metadataOnly(\"not_persisted\");\n\tif (event.payloadClassification === \"restricted\" && !entry.includeRestricted) return metadataOnly(\"restricted\");\n\tif (entry.scoped) {\n\t\tconst predicate = snapshot.scopePredicate;\n\t\tif (predicate === undefined) return metadataOnly(\"scope_predicate_missing\");\n\t\tconst scopeInput = record<WebhookScopeInput>({\n\t\t\tsubscriptionId,\n\t\t\ttenantId: snapshot.tenantId,\n\t\t\tspaceId: snapshot.spaceId,\n\t\t\tevent,\n\t\t\tfacts: snapshot.facts,\n\t\t});\n\t\tlet admitted: unknown;\n\t\ttry {\n\t\t\tadmitted = apply(predicate, undefined, [scopeInput]);\n\t\t} catch {\n\t\t\t// The thrown value is dropped unread.\n\t\t\treturn metadataOnly(\"scope_predicate_failed\");\n\t\t}\n\t\tif (admitted !== true) return metadataOnly(\"scope_predicate_false\");\n\t}\n\treturn record({ event, subscriptionId, payload: snapshot.payload ?? EMPTY, payloadProjected: true });\n}\n\n/** Inputs to {@link renderWebhookDeliveryBodyV1}. */\nexport interface WebhookRenderInput extends WebhookEgressProjectionInput {\n\treadonly deliveryId: string;\n}\n\n/** A rendered v1 body: the object and the exact string that is stored, signed and sent. */\nexport interface WebhookRenderedBody {\n\treadonly body: WebhookDeliveryBodyV1;\n\treadonly rawBody: string;\n\treadonly withheld?: WebhookEgressPayload[\"withheld\"];\n}\n\n/**\n * Render the `fabric.webhook-delivery.v1` body (ADR 0018 decision 7) in the\n * ADR's field order. `consistency` appears only for provisional events;\n * `actionInvocationId` only when the event has one. The body names no\n * eligibility revision, configuration version or actor. Every value in it\n * comes from the input's snapshot (see {@link projectWebhookEgressPayload}),\n * and `rawBody` is serialized by the package from that snapshot, so no\n * `toJSON`, getter or prototype member of any object takes part.\n */\nexport function renderWebhookDeliveryBodyV1(input: WebhookRenderInput): WebhookRenderedBody {\n\treturn guard(() => {\n\t\tconst snapshot = snapshotEgress(input, true);\n\t\tconst projected = decideEgress(snapshot);\n\t\tconst { event } = projected;\n\t\tconst body = record<WebhookDeliveryBodyV1>({\n\t\t\tformat: WEBHOOK_DELIVERY_FORMAT_V1,\n\t\t\teventId: event.eventId,\n\t\t\ttype: event.eventType,\n\t\t\ttenantId: event.tenantId,\n\t\t\tspaceId: event.spaceId,\n\t\t\tcorrelationId: event.correlationId,\n\t\t\toccurredAt: event.occurredAt,\n\t\t\tevent: record<WebhookDeliveryBodyV1[\"event\"]>({\n\t\t\t\ttype: event.eventType,\n\t\t\t\tschemaVersion: event.eventSchemaVersion,\n\t\t\t\tsubjectType: event.subjectType,\n\t\t\t\tsubjectId: event.subjectId,\n\t\t\t\tsequence: event.sequence,\n\t\t\t\trecordedAt: event.recordedAt,\n\t\t\t\tactionInvocationId: event.actionInvocationId,\n\t\t\t\tconsistency: event.consistency === \"provisional-until-reconciled\" ? event.consistency : undefined,\n\t\t\t\tpayload: projected.payload,\n\t\t\t\tpayloadProjected: projected.payloadProjected,\n\t\t\t}),\n\t\t\tdelivery: record({\n\t\t\t\tdeliveryId: snapshot.deliveryId!,\n\t\t\t\tsubscriptionId: projected.subscriptionId,\n\t\t\t}),\n\t\t});\n\t\treturn record({ body, rawBody: serializeJson(body), withheld: projected.withheld });\n\t}, uninspectable(\"job\"));\n}\n","import { guard, inputError } from \"./errors\";\nimport { isPlainRecord, matches, numberIsSafeInteger, primitive, readOwn, record, type Fail } from \"./snapshot\";\n\n/** Header names of a v1 delivery (ADR 0018 decision 7). Only the signature and timestamp are signed. */\nexport const WEBHOOK_HEADERS = Object.freeze({\n\tsignature: \"X-Fabric-Signature\",\n\ttimestamp: \"X-Fabric-Timestamp\",\n\teventId: \"X-Fabric-Event-Id\",\n\tdeliveryId: \"X-Fabric-Delivery-Id\",\n\tattempt: \"X-Fabric-Delivery-Attempt\",\n\tcontentType: \"Content-Type\",\n} as const);\n\nconst V1_SIGNATURE = /^v1=[0-9a-f]{64}$/;\n\n/**\n * A header-safe identifier: visible ASCII, inner spaces allowed, no CR, LF,\n * NUL or other control characters, and no leading or trailing space (which a\n * receiver's header parser would trim, making the header disagree with the\n * signed body).\n */\nconst HEADER_SAFE_ID = /^[\\x21-\\x7e](?:[\\x20-\\x7e]*[\\x21-\\x7e])?$/;\n\nconst unreadable = (): Error => inputError(\"type\", \"input_unreadable\");\nconst unreadableFail: Fail = () => {\n\tthrow unreadable();\n};\n\n/**\n * The exact string a `v1` signer MACs: `\"<timestampSeconds>.<rawBody>\"`. The\n * signature is `v1=` + hex(HMAC-SHA256(secret, this string as UTF-8)).\n *\n * @throws {RangeError} `timestamp_invalid` when the timestamp is not a\n * non-negative whole number of seconds.\n * @throws {TypeError} `raw_body_not_string` when the body is not a string.\n */\nexport function webhookSignedContentV1(timestampSeconds: number, rawBody: string): string {\n\treturn guard(() => {\n\t\tconst timestamp = primitive(timestampSeconds);\n\t\tconst body = primitive(rawBody);\n\t\tassertTimestampSeconds(timestamp);\n\t\tif (typeof body !== \"string\") throw inputError(\"type\", \"raw_body_not_string\");\n\t\treturn `${timestamp}.${body}`;\n\t}, unreadable);\n}\n\n/** Inputs to {@link buildWebhookRequestHeaders}. */\nexport interface WebhookRequestHeaderInput {\n\t/** The signer's `v1=<64 lowercase hex>` value. */\n\treadonly signature: string;\n\treadonly timestampSeconds: number;\n\treadonly eventId: string;\n\treadonly deliveryId: string;\n\t/** 1-based attempt number. */\n\treadonly attempt: number;\n}\n\n/**\n * Build the headers of one attempt. A signature that is not a well-formed\n * `v1` value is refused rather than sent, so a misbehaving signer cannot put\n * arbitrary text on the wire. The input is copied at entry into a snapshot,\n * one descriptor read per field (an accessor is refused, not called); the\n * headers are built from the snapshot values that were validated, never\n * from a second read.\n *\n * @throws {TypeError | RangeError} with a constant message and a `code` from\n * `WEBHOOK_INPUT_ERROR_CODES` for a malformed signature, timestamp,\n * identifier or attempt, or an input that cannot be read.\n */\nexport function buildWebhookRequestHeaders(input: WebhookRequestHeaderInput): Readonly<Record<string, string>> {\n\treturn guard(() => {\n\t\tif (!isPlainRecord(input)) throw unreadable();\n\t\tconst signature = primitive(readOwn(input, \"signature\", \"signature\", unreadableFail));\n\t\tconst timestampSeconds = primitive(readOwn(input, \"timestampSeconds\", \"timestampSeconds\", unreadableFail));\n\t\tconst eventId = primitive(readOwn(input, \"eventId\", \"eventId\", unreadableFail));\n\t\tconst deliveryId = primitive(readOwn(input, \"deliveryId\", \"deliveryId\", unreadableFail));\n\t\tconst attempt = primitive(readOwn(input, \"attempt\", \"attempt\", unreadableFail));\n\n\t\tif (typeof signature !== \"string\" || !matches(V1_SIGNATURE, signature)) throw inputError(\"type\", \"signature_malformed\");\n\t\tassertTimestampSeconds(timestampSeconds);\n\t\tif (typeof eventId !== \"string\" || !matches(HEADER_SAFE_ID, eventId)) throw inputError(\"type\", \"event_id_invalid\");\n\t\tif (typeof deliveryId !== \"string\" || !matches(HEADER_SAFE_ID, deliveryId)) throw inputError(\"type\", \"delivery_id_invalid\");\n\t\tif (typeof attempt !== \"number\" || !numberIsSafeInteger(attempt) || attempt < 1) throw inputError(\"range\", \"attempt_invalid\");\n\t\treturn record<Record<string, string>>({\n\t\t\t[WEBHOOK_HEADERS.contentType]: \"application/json\",\n\t\t\t[WEBHOOK_HEADERS.signature]: signature,\n\t\t\t[WEBHOOK_HEADERS.timestamp]: `${timestampSeconds}`,\n\t\t\t[WEBHOOK_HEADERS.eventId]: eventId,\n\t\t\t[WEBHOOK_HEADERS.deliveryId]: deliveryId,\n\t\t\t[WEBHOOK_HEADERS.attempt]: `${attempt}`,\n\t\t});\n\t}, unreadable);\n}\n\nfunction assertTimestampSeconds(value: unknown): asserts value is number {\n\tif (typeof value !== \"number\" || !numberIsSafeInteger(value) || value < 0) throw inputError(\"range\", \"timestamp_invalid\");\n}\n","import { apply, freeze, matches } from \"./snapshot\";\n\n/*\n * Which IP addresses a webhook may be sent to (ADR 0018 decision 6, R8).\n * Portable: no Node built-ins, so the main entry stays runtime-neutral.\n *\n * IPv4 is a deny list of every special-purpose block IANA marks as not\n * globally reachable, plus multicast and the reserved 240/4. IPv6 is an\n * allow list: only global unicast (2000::/3) can pass, so any block outside\n * it (unspecified, loopback, IPv4-mapped, IPv4-compatible, SIIT, the\n * local-use NAT64 prefix, discard-only, SRv6, unique-local, site-local,\n * link-local, multicast) is refused without being listed. Inside 2000::/3 the\n * non-global blocks are refused, and the three that embed an IPv4 address\n * (NAT64 well-known prefix, 6to4, Teredo) pass only when every embedded\n * address is itself public.\n */\n\nconst stringCharCodeAt = String.prototype.charCodeAt;\nconst stringIndexOf = String.prototype.indexOf;\nconst stringSlice = String.prototype.slice;\nconst stringSplit = String.prototype.split;\n\n/** Longest address text parsed: a full IPv6 form with an embedded IPv4 tail is 45 characters. */\nconst MAX_ADDRESS_LENGTH = 45;\n/** Longest text inspected at all, leaving room for a zone index. */\nconst MAX_TEXT_LENGTH = 64;\n\nconst IPV4_OCTET = \"(?:25[0-5]|2[0-4]\\\\d|1\\\\d\\\\d|[1-9]?\\\\d)\";\n/** Canonical dotted-quad only: no leading zeros, no shorthand, no hex. */\nconst IPV4_DOTTED = new RegExp(`^${IPV4_OCTET}(?:\\\\.${IPV4_OCTET}){3}$`);\nconst HEX_GROUP = /^[0-9A-Fa-f]{1,4}$/;\n\n/** An IPv4 block: network address as an unsigned 32-bit integer and prefix length. */\ninterface Ipv4Block {\n\treadonly base: number;\n\treadonly prefix: number;\n}\n\nfunction ipv4Block(a: number, b: number, c: number, d: number, prefix: number): Ipv4Block {\n\treturn freeze({ base: (((a << 24) | (b << 16) | (c << 8) | d) >>> 0), prefix });\n}\n\n/**\n * IPv4 blocks that are never a webhook destination. The IANA IPv4\n * Special-Purpose Address Registry's not-globally-reachable entries, plus\n * multicast (224.0.0.0/4) and reserved space (240.0.0.0/4, which holds the\n * limited broadcast address). 192.0.0.0/24 is refused whole, including the\n * two anycast /32s in it that IANA marks reachable; neither is a webhook\n * receiver.\n */\nconst REFUSED_IPV4_BLOCKS: readonly Ipv4Block[] = freeze([\n\tipv4Block(0, 0, 0, 0, 8), // \"this network\", including the unspecified 0.0.0.0\n\tipv4Block(10, 0, 0, 0, 8), // private\n\tipv4Block(100, 64, 0, 0, 10), // shared address space (CGNAT)\n\tipv4Block(127, 0, 0, 0, 8), // loopback\n\tipv4Block(169, 254, 0, 0, 16), // link-local, including cloud metadata endpoints\n\tipv4Block(172, 16, 0, 0, 12), // private\n\tipv4Block(192, 0, 0, 0, 24), // IETF protocol assignments\n\tipv4Block(192, 0, 2, 0, 24), // documentation (TEST-NET-1)\n\tipv4Block(192, 88, 99, 0, 24), // deprecated 6to4 relay anycast\n\tipv4Block(192, 168, 0, 0, 16), // private\n\tipv4Block(198, 18, 0, 0, 15), // benchmarking\n\tipv4Block(198, 51, 100, 0, 24), // documentation (TEST-NET-2)\n\tipv4Block(203, 0, 113, 0, 24), // documentation (TEST-NET-3)\n\tipv4Block(224, 0, 0, 0, 4), // multicast\n\tipv4Block(240, 0, 0, 0, 4), // reserved, including 255.255.255.255\n]);\n\nfunction inIpv4Block(value: number, block: Ipv4Block): boolean {\n\tconst mask = block.prefix === 0 ? 0 : (0xffffffff << (32 - block.prefix)) >>> 0;\n\treturn ((value & mask) >>> 0) === block.base;\n}\n\n/** `true` when an IPv4 address, as an unsigned 32-bit integer, is publicly routable. */\nfunction isPublicIpv4Value(value: number): boolean {\n\tfor (let index = 0; index < REFUSED_IPV4_BLOCKS.length; index += 1) {\n\t\tif (inIpv4Block(value, REFUSED_IPV4_BLOCKS[index]!)) return false;\n\t}\n\treturn true;\n}\n\n/** Parse a canonical dotted-quad to an unsigned 32-bit integer, or `undefined`. */\nfunction parseIpv4(text: string): number | undefined {\n\tif (!matches(IPV4_DOTTED, text)) return undefined;\n\tconst parts = apply(stringSplit, text, [\".\"]) as string[];\n\tlet value = 0;\n\tfor (let index = 0; index < 4; index += 1) value = value * 256 + decimal(parts[index]!);\n\treturn value >>> 0;\n}\n\nfunction decimal(text: string): number {\n\tlet value = 0;\n\tfor (let index = 0; index < text.length; index += 1) value = value * 10 + ((apply(stringCharCodeAt, text, [index]) as number) - 48);\n\treturn value;\n}\n\nfunction hex(text: string): number {\n\tlet value = 0;\n\tfor (let index = 0; index < text.length; index += 1) {\n\t\tconst code = apply(stringCharCodeAt, text, [index]) as number;\n\t\tconst digit = code <= 57 ? code - 48 : code <= 70 ? code - 55 : code - 87;\n\t\tvalue = value * 16 + digit;\n\t}\n\treturn value;\n}\n\n/** Parse one side of an IPv6 address (no `::`) into 16-bit words; `tailIpv4` allows a dotted last group. */\nfunction parseIpv6Groups(text: string, tailIpv4: boolean): number[] | undefined {\n\tconst words: number[] = [];\n\tif (text === \"\") return words;\n\tconst groups = apply(stringSplit, text, [\":\"]) as string[];\n\tfor (let index = 0; index < groups.length; index += 1) {\n\t\tconst group = groups[index]!;\n\t\tif (tailIpv4 && index === groups.length - 1 && (apply(stringIndexOf, group, [\".\"]) as number) !== -1) {\n\t\t\tconst v4 = parseIpv4(group);\n\t\t\tif (v4 === undefined) return undefined;\n\t\t\twords[words.length] = v4 >>> 16;\n\t\t\twords[words.length] = v4 & 0xffff;\n\t\t\tcontinue;\n\t\t}\n\t\tif (!matches(HEX_GROUP, group)) return undefined;\n\t\twords[words.length] = hex(group);\n\t}\n\treturn words;\n}\n\n/** Parse an IPv6 address (no brackets, no zone) into eight 16-bit words, or `undefined`. */\nfunction parseIpv6(text: string): number[] | undefined {\n\tconst gap = apply(stringIndexOf, text, [\"::\"]) as number;\n\tif (gap === -1) {\n\t\tconst words = parseIpv6Groups(text, true);\n\t\treturn words !== undefined && words.length === 8 ? words : undefined;\n\t}\n\tif ((apply(stringIndexOf, text, [\"::\", gap + 1]) as number) !== -1) return undefined;\n\tconst head = parseIpv6Groups(apply(stringSlice, text, [0, gap]) as string, false);\n\tconst tail = parseIpv6Groups(apply(stringSlice, text, [gap + 2]) as string, true);\n\tif (head === undefined || tail === undefined || head.length + tail.length > 7) return undefined;\n\tconst words: number[] = [];\n\tfor (let index = 0; index < head.length; index += 1) words[words.length] = head[index]!;\n\tfor (let index = head.length + tail.length; index < 8; index += 1) words[words.length] = 0;\n\tfor (let index = 0; index < tail.length; index += 1) words[words.length] = tail[index]!;\n\treturn words;\n}\n\n/** The IPv4 address held in two consecutive 16-bit words. */\nfunction embeddedIpv4(high: number, low: number): number {\n\treturn ((high << 16) | low) >>> 0;\n}\n\n/** `true` when an IPv6 address, as eight 16-bit words, is publicly routable. */\nfunction isPublicIpv6Words(w: readonly number[]): boolean {\n\t// NAT64 well-known prefix 64:ff9b::/96 (RFC 6052): public only when the\n\t// IPv4 address in its last 32 bits is. The local-use prefix\n\t// 64:ff9b:1::/48 (RFC 8215) is outside 2000::/3 and refused below: the\n\t// operator picks the prefix length inside it, so the embedded address\n\t// cannot be decoded from the address alone.\n\tif (w[0] === 0x0064 && w[1] === 0xff9b && w[2] === 0 && w[3] === 0 && w[4] === 0 && w[5] === 0) {\n\t\treturn isPublicIpv4Value(embeddedIpv4(w[6]!, w[7]!));\n\t}\n\t// Only global unicast can pass.\n\tif ((w[0]! & 0xe000) !== 0x2000) return false;\n\tif (w[0] === 0x2001 && (w[1]! & 0xfe00) === 0) {\n\t\t// 2001::/23, IETF protocol assignments. Teredo (2001::/32, RFC 4380)\n\t\t// carries its server's IPv4 address in words 2-3 and its client's,\n\t\t// bit-inverted, in words 6-7; both must be public. The rest of the /23\n\t\t// (benchmarking, ORCHID, AMT, AS112 and later assignments) is not a\n\t\t// webhook destination.\n\t\tif (w[1] !== 0) return false;\n\t\tconst server = embeddedIpv4(w[2]!, w[3]!);\n\t\tconst client = (~embeddedIpv4(w[6]!, w[7]!)) >>> 0;\n\t\treturn isPublicIpv4Value(server) && isPublicIpv4Value(client);\n\t}\n\tif (w[0] === 0x2001 && w[1] === 0x0db8) return false; // documentation, 2001:db8::/32\n\tif (w[0] === 0x3fff && (w[1]! & 0xf000) === 0) return false; // documentation, 3fff::/20 (RFC 9637)\n\t// 6to4 (2002::/16, RFC 3056): the IPv4 address in words 1-2 must be public.\n\tif (w[0] === 0x2002) return isPublicIpv4Value(embeddedIpv4(w[1]!, w[2]!));\n\treturn true;\n}\n\n/** RFC 5952 text for eight 16-bit words: lowercase, no leading zeros, the longest zero run of two or more compressed. */\nfunction formatIpv6(w: readonly number[]): string {\n\tlet bestStart = -1;\n\tlet bestLength = 0;\n\tfor (let index = 0; index < 8; ) {\n\t\tif (w[index] !== 0) {\n\t\t\tindex += 1;\n\t\t\tcontinue;\n\t\t}\n\t\tlet end = index;\n\t\twhile (end < 8 && w[end] === 0) end += 1;\n\t\tif (end - index > bestLength) {\n\t\t\tbestStart = index;\n\t\t\tbestLength = end - index;\n\t\t}\n\t\tindex = end;\n\t}\n\tif (bestLength < 2) bestStart = -1;\n\tlet text = \"\";\n\tfor (let index = 0; index < 8; index += 1) {\n\t\tif (index === bestStart) {\n\t\t\ttext += \"::\";\n\t\t\tindex += bestLength - 1;\n\t\t\tcontinue;\n\t\t}\n\t\tif (text !== \"\" && !endsWithColons(text)) text += \":\";\n\t\ttext += hexText(w[index]!);\n\t}\n\treturn text;\n}\n\nfunction endsWithColons(text: string): boolean {\n\treturn text.length >= 2 && (apply(stringSlice, text, [-2]) as string) === \"::\";\n}\n\nconst HEX_DIGITS = \"0123456789abcdef\";\n\nfunction hexText(value: number): string {\n\tif (value === 0) return \"0\";\n\tlet text = \"\";\n\tfor (let rest = value; rest > 0; rest = (rest - (rest % 16)) / 16) text = HEX_DIGITS[rest % 16]! + text;\n\treturn text;\n}\n\nfunction formatIpv4(value: number): string {\n\treturn `${value >>> 24}.${(value >>> 16) & 0xff}.${(value >>> 8) & 0xff}.${value & 0xff}`;\n}\n\n/**\n * @internal What one textual IP address is, for the destination rules.\n * `malformed` is anything that is not a canonical dotted-quad or a valid\n * IPv6 address; a zone index (`%eth0`) makes an address `non_public`, since\n * only link-scoped addresses carry one.\n */\nexport type WebhookAddressVerdict =\n\t| { readonly kind: \"public\"; readonly address: string; readonly family: 4 | 6 }\n\t| { readonly kind: \"non_public\"; readonly family: 4 | 6 }\n\t| { readonly kind: \"malformed\" };\n\nconst NON_PUBLIC_V4: WebhookAddressVerdict = freeze({ kind: \"non_public\", family: 4 });\nconst NON_PUBLIC_V6: WebhookAddressVerdict = freeze({ kind: \"non_public\", family: 6 });\nconst MALFORMED: WebhookAddressVerdict = freeze({ kind: \"malformed\" });\n\n/** @internal Classify a textual IP address (no brackets). The `address` of a public verdict is canonical. */\nexport function classifyAddress(text: unknown): WebhookAddressVerdict {\n\tif (typeof text !== \"string\" || text.length === 0 || text.length > MAX_TEXT_LENGTH) return MALFORMED;\n\tconst zone = apply(stringIndexOf, text, [\"%\"]) as number;\n\tif (zone !== -1) return parseIpv6(apply(stringSlice, text, [0, zone]) as string) === undefined ? MALFORMED : NON_PUBLIC_V6;\n\tif (text.length > MAX_ADDRESS_LENGTH) return MALFORMED;\n\tconst v4 = parseIpv4(text);\n\tif (v4 !== undefined) {\n\t\treturn isPublicIpv4Value(v4) ? freeze({ kind: \"public\", address: formatIpv4(v4), family: 4 }) : NON_PUBLIC_V4;\n\t}\n\tconst v6 = parseIpv6(text);\n\tif (v6 === undefined) return MALFORMED;\n\treturn isPublicIpv6Words(v6) ? freeze({ kind: \"public\", address: formatIpv6(v6), family: 6 }) : NON_PUBLIC_V6;\n}\n\n/** @internal `true` for a canonical dotted-quad, the form WHATWG URL parsing gives an IPv4 host. */\nexport function isIpv4Literal(text: string): boolean {\n\treturn matches(IPV4_DOTTED, text);\n}\n\n/**\n * `true` when `address` is a well-formed IPv4 (canonical dotted-quad) or\n * IPv6 address that a webhook may be sent to: not loopback, private,\n * link-local, shared (CGNAT), multicast, reserved, unspecified,\n * documentation, benchmarking, unique-local, site-local, IPv4-mapped,\n * IPv4-compatible, or outside IPv6 global unicast; and, for NAT64\n * (`64:ff9b::/96`), 6to4 (`2002::/16`) and Teredo (`2001::/32`), only when\n * every embedded IPv4 address is public. Anything that does not parse is\n * `false`. The README lists every refused block.\n */\nexport function isPublicWebhookAddress(address: string): boolean {\n\treturn classifyAddress(address).kind === \"public\";\n}\n","import { inputError } from \"./errors\";\nimport { WEBHOOK_MAX_TIMER_MS } from \"./limits\";\nimport type { WebhookClock } from \"./ports\";\nimport { apply, readOwn, timeOf, type Fail } from \"./snapshot\";\n\n/*\n * Deadline, signal, clock and timer handling shared by the destination\n * resolver and the Node transport. Portable: it uses only the WHATWG\n * `AbortSignal`/`EventTarget` and the timer globals every supported runtime\n * has, captured at module load.\n */\n\nconst reflectGetOwnPropertyDescriptor = Reflect.getOwnPropertyDescriptor;\nconst abortedGetter = typeof AbortSignal === \"function\" ? reflectGetOwnPropertyDescriptor(AbortSignal.prototype, \"aborted\")?.get : undefined;\nconst eventTargetAdd = typeof EventTarget === \"function\" ? EventTarget.prototype.addEventListener : undefined;\nconst eventTargetRemove = typeof EventTarget === \"function\" ? EventTarget.prototype.removeEventListener : undefined;\nconst setTimer = setTimeout;\nconst clearTimer = clearTimeout;\nconst dateNow = Date.now;\nconst mathMax = Math.max;\nconst mathMin = Math.min;\n\nconst unreadable = (): Error => inputError(\"type\", \"input_unreadable\");\nconst unreadableFail: Fail = () => {\n\tthrow unreadable();\n};\n\n/** @internal The `{ deadline, signal }` of one call, read at entry. */\nexport interface CallBounds {\n\treadonly deadlineMs: number;\n\treadonly signal: AbortSignal;\n}\n\n/**\n * @internal Read `{ deadline, signal }` at entry, one descriptor read each.\n * The deadline must be a real `Date` with a finite time and the signal a real\n * `AbortSignal`; anything else throws `input_unreadable`.\n */\nexport function readCallBounds(options: unknown): CallBounds {\n\tif (options === null || typeof options !== \"object\") throw unreadable();\n\tconst deadlineMs = timeOf(readOwn(options, \"deadline\", \"deadline\", unreadableFail));\n\tif (!(deadlineMs === deadlineMs) || deadlineMs === Infinity || deadlineMs === -Infinity) throw unreadable();\n\tconst signal = readOwn(options, \"signal\", \"signal\", unreadableFail);\n\tif (signal === null || typeof signal !== \"object\") throw unreadable();\n\ttry {\n\t\tisAborted(signal as AbortSignal);\n\t} catch {\n\t\tthrow unreadable();\n\t}\n\treturn { deadlineMs, signal: signal as AbortSignal };\n}\n\n/**\n * @internal Whether a real `AbortSignal` has aborted, read through the\n * intrinsic getter (it throws for anything else and runs none of its code).\n */\nexport function isAborted(signal: AbortSignal): boolean {\n\tif (abortedGetter === undefined) throw unreadable();\n\treturn apply(abortedGetter, signal, []) === true;\n}\n\n/** @internal Call `listener` once when `signal` aborts; the returned function removes it. */\nexport function onAbort(signal: AbortSignal, listener: () => void): () => void {\n\tif (eventTargetAdd === undefined || eventTargetRemove === undefined) throw unreadable();\n\tapply(eventTargetAdd, signal, [\"abort\", listener, { once: true }]);\n\treturn () => {\n\t\tapply(eventTargetRemove, signal, [\"abort\", listener]);\n\t};\n}\n\n/** @internal A clock captured at construction, or the system clock when none was injected. */\nexport interface CapturedClock {\n\treadonly target: object | undefined;\n\treadonly now: ((...args: never[]) => unknown) | undefined;\n}\n\n/** @internal Capture an optional {@link WebhookClock}; a non-object or a missing `now` throws `input_unreadable`. */\nexport function captureOptionalClock(clock: unknown): CapturedClock {\n\tif (clock === undefined) return { target: undefined, now: undefined };\n\tif (clock === null || typeof clock !== \"object\") throw unreadable();\n\tconst now = (clock as Partial<WebhookClock>).now;\n\tif (typeof now !== \"function\") throw unreadable();\n\treturn { target: clock, now: now as (...args: never[]) => unknown };\n}\n\n/** @internal Epoch milliseconds from the clock, or `NaN` when it throws or returns no valid `Date`. Never throws. */\nexport function clockNowMs(clock: CapturedClock): number {\n\tif (clock.now === undefined) return dateNow();\n\ttry {\n\t\tconst ms = timeOf(apply(clock.now, clock.target, []));\n\t\treturn ms === Infinity || ms === -Infinity ? NaN : ms;\n\t} catch {\n\t\treturn NaN;\n\t}\n}\n\n/**\n * @internal Run `fire` after `ms`, clamped to `[0, WEBHOOK_MAX_TIMER_MS]` so a\n * far deadline cannot overflow into an immediate timer. Returns a cancel\n * function.\n */\nexport function startTimer(ms: number, fire: () => void): () => void {\n\tconst handle = setTimer(fire, mathMax(0, mathMin(ms, WEBHOOK_MAX_TIMER_MS)));\n\treturn () => {\n\t\tclearTimer(handle);\n\t};\n}\n","import { classifyAddress, isIpv4Literal } from \"./address\";\nimport { readCallBounds, captureOptionalClock, clockNowMs, isAborted, onAbort, startTimer, type CapturedClock } from \"./call-bounds\";\nimport { configError, guard, inputError } from \"./errors\";\nimport { WEBHOOK_MAX_TIMER_MS, assertPositiveFinite } from \"./limits\";\nimport type {\n\tWebhookCallOptions,\n\tWebhookClock,\n\tWebhookDestinationResolution,\n\tWebhookDestinationResolver,\n\tWebhookResolvedAddress,\n\tWebhookVettedDestination,\n} from \"./ports\";\nimport { apply, emptyMap, freeze, frozenList, isArray, isPlainRecord, matches, numberIsSafeInteger, primitive, readOwn, record, type Fail } from \"./snapshot\";\n\n/*\n * Destination rules and resolution (ADR 0018 decision 6, R8). Portable: the\n * DNS lookup is injected, so the main entry needs no Node built-in. The Node\n * lookup and transport are at `@fabricorg/webhook-delivery/node`.\n */\n\n/** The longest destination URL accepted, in UTF-16 code units. */\nexport const WEBHOOK_DESTINATION_MAX_URL_LENGTH = 2_048;\n/** The most addresses one lookup may return; a longer answer is refused as `dns_failure`. */\nexport const WEBHOOK_DESTINATION_MAX_ADDRESSES = 32;\n/** The default bound on one DNS lookup. */\nexport const DEFAULT_WEBHOOK_LOOKUP_TIMEOUT_MS = 5_000;\n\nconst URLConstructor = URL;\nconst urlGetter = (name: string): ((this: URL) => string) => {\n\tconst getter = Reflect.getOwnPropertyDescriptor(URL.prototype, name)?.get;\n\tif (getter === undefined) throw new TypeError(`URL.prototype.${name} is not an accessor.`);\n\treturn getter as (this: URL) => string;\n};\nconst urlProtocol = urlGetter(\"protocol\");\nconst urlUsername = urlGetter(\"username\");\nconst urlPassword = urlGetter(\"password\");\nconst urlPort = urlGetter(\"port\");\nconst urlHostname = urlGetter(\"hostname\");\nconst urlPathname = urlGetter(\"pathname\");\nconst urlSearch = urlGetter(\"search\");\nconst stringSlice = String.prototype.slice;\nconst stringEndsWith = String.prototype.endsWith;\nconst PromiseConstructor = Promise;\nconst promiseThen = Promise.prototype.then;\nconst AbortControllerConstructor = AbortController;\nconst abortControllerAbort = AbortController.prototype.abort;\nconst abortControllerSignal = Reflect.getOwnPropertyDescriptor(AbortController.prototype, \"signal\")!.get!;\nconst DateConstructor = Date;\n\n/** No ASCII control character or space anywhere: WHATWG parsing would strip or drop them silently. */\nconst URL_TEXT = /^[^\\x00-\\x20\\x7f]+$/;\n/**\n * `https://` then a host character. WHATWG parsing also accepts\n * `https:host`, `https:///host` and backslashes for a special scheme and\n * finds a host in them; requiring the plain form keeps the host an operator\n * sees in the URL the one that is checked.\n */\nconst URL_PREFIX = /^https:\\/\\/[^/\\\\?#@]/i;\n\n/** The result of checking a destination URL's rules, before any DNS lookup. */\nexport type WebhookDestinationUrlCheck =\n\t| {\n\t\t\treadonly ok: true;\n\t\t\t/** `https://<host><path><query>`: normalized by WHATWG URL parsing, fragment dropped. */\n\t\t\treadonly url: string;\n\t\t\t/** The host without IPv6 brackets: the SNI name and certificate identity. */\n\t\t\treadonly hostname: string;\n\t\t\t/** Set when the host is an IP literal; it is the only address the destination may use. */\n\t\t\treadonly literal?: WebhookResolvedAddress;\n\t }\n\t| { readonly ok: false; readonly code: \"invalid_url\" | \"private_address\" };\n\nconst INVALID_URL: WebhookDestinationUrlCheck = freeze({ ok: false, code: \"invalid_url\" });\nconst PRIVATE_URL: WebhookDestinationUrlCheck = freeze({ ok: false, code: \"private_address\" });\n\n/**\n * Check a destination URL against decision 6's rules without resolving it.\n * `invalid_url` when it is not a string of at most\n * {@link WEBHOOK_DESTINATION_MAX_URL_LENGTH} characters with no ASCII\n * control character or space, does not start with `https://` and a host\n * character (WHATWG would find a host in `https:host` or `https:///host`),\n * does not parse, is not `https:`, names a port\n * other than 443 (an explicit `:443` is the default and accepted), carries\n * userinfo, or has an empty host or one ending in `.`. `private_address` when\n * the host is `localhost` or a `.localhost` name, or an IP literal that is not\n * public ({@link isPublicWebhookAddress}). A public IP literal passes and is\n * returned as `literal`. IPv4 literals in decimal, hex, octal or shorthand\n * form are normalized to dotted-quad by URL parsing before they are checked.\n * Never throws.\n */\nexport function checkWebhookDestinationUrl(url: string): WebhookDestinationUrlCheck {\n\treturn checkDestinationUrl(url, false);\n}\n\n/**\n * @internal {@link checkWebhookDestinationUrl}, optionally accepting a\n * non-public host (an IP literal or a `localhost` name) while every other\n * rule still applies. `true` is passed only when the Node transport was built\n * by the internal test factory with its public-address re-check off.\n */\nexport function checkDestinationUrl(url: unknown, allowNonPublic: boolean): WebhookDestinationUrlCheck {\n\ttry {\n\t\treturn checkUrl(primitive(url), allowNonPublic);\n\t} catch {\n\t\treturn INVALID_URL;\n\t}\n}\n\nfunction checkUrl(text: unknown, allowNonPublic: boolean): WebhookDestinationUrlCheck {\n\tif (typeof text !== \"string\" || text.length === 0 || text.length > WEBHOOK_DESTINATION_MAX_URL_LENGTH) return INVALID_URL;\n\tif (!matches(URL_TEXT, text) || !matches(URL_PREFIX, text)) return INVALID_URL;\n\tlet parsed: URL;\n\ttry {\n\t\tparsed = new URLConstructor(text);\n\t} catch {\n\t\treturn INVALID_URL;\n\t}\n\tif (apply(urlProtocol, parsed, []) !== \"https:\") return INVALID_URL;\n\tif (apply(urlUsername, parsed, []) !== \"\" || apply(urlPassword, parsed, []) !== \"\") return INVALID_URL;\n\t// WHATWG parsing drops the scheme's default port, so `:443` reads as \"\".\n\tif (apply(urlPort, parsed, []) !== \"\") return INVALID_URL;\n\tconst host = apply(urlHostname, parsed, []) as string;\n\tif (host === \"\" || (apply(stringEndsWith, host, [\".\"]) as boolean)) return INVALID_URL;\n\tconst url = `https://${host}${apply(urlPathname, parsed, []) as string}${apply(urlSearch, parsed, []) as string}`;\n\t// WHATWG parsing serializes an IP-literal host canonically: IPv6 in\n\t// brackets (RFC 5952 form), IPv4 as a dotted-quad.\n\tconst v6 = host[0] === \"[\";\n\tif (v6 || isIpv4Literal(host)) {\n\t\tconst text = v6 ? (apply(stringSlice, host, [1, -1]) as string) : host;\n\t\tconst literal = classifyAddress(text);\n\t\tif (literal.kind === \"malformed\") return INVALID_URL;\n\t\tif (literal.kind === \"non_public\" && !allowNonPublic) return PRIVATE_URL;\n\t\tconst family: 4 | 6 = v6 ? 6 : 4;\n\t\treturn record({ ok: true as const, url, hostname: text, literal: record({ address: text, family }) });\n\t}\n\t// RFC 6761: these names resolve to loopback by definition.\n\tif (!allowNonPublic && (host === \"localhost\" || (apply(stringEndsWith, host, [\".localhost\"]) as boolean))) return PRIVATE_URL;\n\treturn record({ ok: true as const, url, hostname: host });\n}\n\n/**\n * Looks up a hostname's addresses. It is passed `{ deadline, signal }`; the\n * resolver aborts `signal` when it stops waiting, and ignores any answer that\n * arrives after that. Each answer is `{ address, family }` with a textual IPv4\n * or IPv6 address. `createNodeWebhookDnsLookup()` at\n * `@fabricorg/webhook-delivery/node` is one implementation.\n */\nexport type WebhookDnsLookup = (hostname: string, options: WebhookCallOptions) => Promise<readonly WebhookResolvedAddress[]>;\n\n/** Options for {@link createWebhookDestinationResolver}. */\nexport interface WebhookDestinationResolverOptions {\n\treadonly lookup: WebhookDnsLookup;\n\t/** The longest one lookup may take; default {@link DEFAULT_WEBHOOK_LOOKUP_TIMEOUT_MS}. The call's own deadline also applies. */\n\treadonly lookupTimeoutMs?: number;\n\t/** The clock the call's deadline is compared with; the system clock by default. */\n\treadonly clock?: WebhookClock;\n}\n\ninterface ResolverSettings {\n\treadonly lookup: (...args: never[]) => unknown;\n\treadonly lookupTimeoutMs: number;\n\treadonly clock: CapturedClock;\n}\n\nconst unreadable = (): Error => inputError(\"type\", \"input_unreadable\");\nconst unreadableFail: Fail = () => {\n\tthrow unreadable();\n};\n\nconst DNS_FAILURE: WebhookDestinationResolution = freeze({ ok: false, code: \"dns_failure\" });\nconst PRIVATE_ADDRESS: WebhookDestinationResolution = freeze({ ok: false, code: \"private_address\" });\n\n/**\n * A {@link WebhookDestinationResolver} that applies\n * {@link checkWebhookDestinationUrl}, then resolves the host through the\n * injected lookup and requires every answer to be public. The vetted\n * destination it returns carries the addresses the transport must connect\n * to; the transport never resolves the name again, so a later answer (a DNS\n * rebinding) cannot change where the request goes.\n *\n * A URL that passes the rules resolves to `dns_failure`, never a pass, when\n * the call's signal has aborted, its deadline has passed or the clock cannot\n * be read (no lookup is made; this applies to IP literals too), when the\n * lookup throws, rejects, or has not answered within `lookupTimeoutMs` or by\n * the deadline (its signal is then aborted and a late answer ignored), when\n * an answer arrives but, once read, the signal has aborted, the clock cannot\n * be read or that lookup deadline has passed, or when its answer is empty,\n * longer than {@link WEBHOOK_DESTINATION_MAX_ADDRESSES}, or not a list of\n * `{ address, family }` records whose family matches the address. It is\n * `private_address` when any answer is a well-formed address that is not\n * public, whatever the others are. A public IP-literal host is returned\n * without a lookup.\n *\n * @throws {TypeError} `input_unreadable` at construction when `lookup` is not\n * a function or `clock` has no `now` function, and from `resolve` (as a\n * rejected promise) when `{ deadline, signal }` is not a real `Date` and\n * `AbortSignal`.\n * @throws {WebhookDeliveryConfigError} when `lookupTimeoutMs` is not positive,\n * finite and at most `WEBHOOK_MAX_TIMER_MS`.\n */\nexport function createWebhookDestinationResolver(options: WebhookDestinationResolverOptions): WebhookDestinationResolver {\n\tconst settings = guard(() => readResolverOptions(options), unreadable);\n\tconst resolver = {\n\t\tresolve(url: string, callOptions: WebhookCallOptions): Promise<WebhookDestinationResolution> {\n\t\t\ttry {\n\t\t\t\treturn resolveWith(settings, url, callOptions);\n\t\t\t} catch {\n\t\t\t\treturn PromiseConstructor.reject(unreadable());\n\t\t\t}\n\t\t},\n\t};\n\treturn freeze(resolver);\n}\n\nfunction readResolverOptions(options: unknown): ResolverSettings {\n\tif (!isPlainRecord(options)) throw unreadable();\n\tconst lookup = readOwn(options, \"lookup\", \"lookup\", unreadableFail);\n\tif (typeof lookup !== \"function\") throw unreadable();\n\tconst rawTimeout = primitive(readOwn(options, \"lookupTimeoutMs\", \"lookupTimeoutMs\", unreadableFail));\n\tconst lookupTimeoutMs = rawTimeout === undefined ? DEFAULT_WEBHOOK_LOOKUP_TIMEOUT_MS : rawTimeout;\n\tassertPositiveFinite(lookupTimeoutMs, \"lookupTimeoutMs\");\n\tif (lookupTimeoutMs > WEBHOOK_MAX_TIMER_MS) throw configError(\"limit_out_of_range\", \"lookupTimeoutMs\");\n\tconst clock = captureOptionalClock(readOwn(options, \"clock\", \"clock\", unreadableFail));\n\treturn freeze({ lookup: lookup as (...args: never[]) => unknown, lookupTimeoutMs, clock });\n}\n\nfunction resolveWith(settings: ResolverSettings, url: unknown, callOptions: unknown): Promise<WebhookDestinationResolution> {\n\tconst bounds = readCallBounds(callOptions);\n\tconst check = checkWebhookDestinationUrl(url as string);\n\tif (!check.ok) return PromiseConstructor.resolve(record<WebhookDestinationResolution>({ ok: false, code: check.code }));\n\t// No success, a literal's included, for a call that is aborted, past its\n\t// deadline, or whose clock cannot be read.\n\tconst nowMs = clockNowMs(settings.clock);\n\tif (isAborted(bounds.signal) || !(bounds.deadlineMs > nowMs)) return PromiseConstructor.resolve(DNS_FAILURE);\n\tif (check.literal !== undefined) {\n\t\treturn PromiseConstructor.resolve(vetted(check.url, check.hostname, frozenList([check.literal])));\n\t}\n\tconst waitMs = bounds.deadlineMs - nowMs < settings.lookupTimeoutMs ? bounds.deadlineMs - nowMs : settings.lookupTimeoutMs;\n\t/** The earlier of the lookup timeout and the call's deadline. */\n\tconst lookupDeadlineMs = nowMs + waitMs;\n\tconst { url: vettedUrl, hostname } = check;\n\t// Checked again when an answer arrives: a lookup that blocks past the\n\t// deadline and then fulfils would otherwise win, because its fulfilment\n\t// runs as a microtask before the overdue timer.\n\tconst stillWanted = (): boolean => !isAborted(bounds.signal) && clockNowMs(settings.clock) < lookupDeadlineMs;\n\n\treturn new PromiseConstructor<WebhookDestinationResolution>((settle) => {\n\t\tconst controller = new AbortControllerConstructor();\n\t\tconst lookupSignal = apply(abortControllerSignal, controller, []) as AbortSignal;\n\t\tlet done = false;\n\t\tlet cancelTimer: () => void = () => {};\n\t\tlet removeAbort: () => void = () => {};\n\t\tconst finish = (result: WebhookDestinationResolution): void => {\n\t\t\tif (done) return;\n\t\t\tdone = true;\n\t\t\tcancelTimer();\n\t\t\tremoveAbort();\n\t\t\t// Tell the lookup to stop; whatever it answers later is ignored.\n\t\t\tapply(abortControllerAbort, controller, []);\n\t\t\tsettle(result);\n\t\t};\n\t\tcancelTimer = startTimer(waitMs, () => finish(DNS_FAILURE));\n\t\tremoveAbort = onAbort(bounds.signal, () => finish(DNS_FAILURE));\n\t\tif (done) return;\n\t\tlet pending: unknown;\n\t\ttry {\n\t\t\tpending = apply(settings.lookup, undefined, [hostname, freeze({ deadline: new DateConstructor(nowMs + waitMs), signal: lookupSignal })] as never[]);\n\t\t} catch {\n\t\t\tfinish(DNS_FAILURE);\n\t\t\treturn;\n\t\t}\n\t\tif (pending === null || (typeof pending !== \"object\" && typeof pending !== \"function\")) {\n\t\t\tfinish(DNS_FAILURE);\n\t\t\treturn;\n\t\t}\n\t\ttry {\n\t\t\t// Adopt the lookup's result through the intrinsic `then` of a fresh\n\t\t\t// promise, so a thenable's own code runs only as the lookup's code.\n\t\t\tapply(promiseThen, PromiseConstructor.resolve(pending), [\n\t\t\t\t(answer: unknown) => finish(acceptedVerdict(vettedUrl, hostname, answer, stillWanted)),\n\t\t\t\t() => finish(DNS_FAILURE),\n\t\t\t]);\n\t\t} catch {\n\t\t\tfinish(DNS_FAILURE);\n\t\t}\n\t});\n}\n\n/**\n * Judge an answer, then accept a pass only if the call is still wanted at\n * that moment (not aborted, clock valid, before the lookup deadline). The\n * check runs after the answer is read, so time spent reading it counts.\n */\nfunction acceptedVerdict(url: string, hostname: string, answer: unknown, stillWanted: () => boolean): WebhookDestinationResolution {\n\ttry {\n\t\tconst judged = verdict(url, hostname, answer);\n\t\tif (judged.ok && !stillWanted()) return DNS_FAILURE;\n\t\treturn judged;\n\t} catch {\n\t\treturn DNS_FAILURE;\n\t}\n}\n\n/** Judge a lookup answer: any non-public address refuses it; anything unreadable is `dns_failure`. */\nfunction verdict(url: string, hostname: string, answer: unknown): WebhookDestinationResolution {\n\tif (!isArray(answer)) return DNS_FAILURE;\n\tconst length = readOwn(answer, \"length\", \"length\", unreadableFail);\n\tif (typeof length !== \"number\" || !numberIsSafeInteger(length) || length < 1 || length > WEBHOOK_DESTINATION_MAX_ADDRESSES) return DNS_FAILURE;\n\tconst seen = emptyMap<true>();\n\tconst addresses: WebhookResolvedAddress[] = [];\n\tlet malformed = false;\n\tfor (let index = 0; index < length; index += 1) {\n\t\tconst entry = readOwn(answer, `${index}`, \"answer\", unreadableFail);\n\t\tif (!isPlainRecord(entry)) {\n\t\t\tmalformed = true;\n\t\t\tcontinue;\n\t\t}\n\t\tconst address = primitive(readOwn(entry, \"address\", \"address\", unreadableFail));\n\t\tconst family = primitive(readOwn(entry, \"family\", \"family\", unreadableFail));\n\t\tconst judged = classifyAddress(address);\n\t\tif (judged.kind === \"non_public\") return PRIVATE_ADDRESS;\n\t\tif (judged.kind === \"malformed\" || judged.family !== family) {\n\t\t\tmalformed = true;\n\t\t\tcontinue;\n\t\t}\n\t\tif (seen[judged.address] === true) continue;\n\t\tseen[judged.address] = true;\n\t\taddresses[addresses.length] = record({ address: judged.address, family: judged.family });\n\t}\n\tif (malformed) return DNS_FAILURE;\n\treturn vetted(url, hostname, frozenList(addresses));\n}\n\nfunction vetted(url: string, hostname: string, addresses: readonly WebhookResolvedAddress[]): WebhookDestinationResolution {\n\tconst destination = record<WebhookVettedDestination>({ url, hostname, port: 443, addresses });\n\treturn record<WebhookDestinationResolution>({ ok: true, destination });\n}\n","import {\n\tWEBHOOK_ADMISSION_DENIAL_CODES,\n\tWEBHOOK_REVOCATION_CODES,\n\ttype WebhookAdmissionDenialCode,\n\ttype WebhookRevocationCode,\n} from \"./codes\";\nimport { guard, guardOr, inputError } from \"./errors\";\nimport type { WebhookAdmissionDecision, WebhookDeliveryAuthorizationDecision } from \"./ports\";\nimport { freeze, isOneOf, isPlainRecord, primitive, readOwn, record, type Fail } from \"./snapshot\";\n\nconst ALLOW: WebhookAdmissionDecision = record({ decision: \"allow\" });\nconst ADMISSION_UNAVAILABLE: WebhookAdmissionDecision = record({ decision: \"unavailable\" });\nconst AUTHORIZED: WebhookDeliveryAuthorizationDecision = record({ decision: \"authorized\" });\nconst AUTHORIZATION_UNAVAILABLE: WebhookDeliveryAuthorizationDecision = record({ decision: \"unavailable\" });\n\n/** Thrown inside a normalizer only, and always caught there. */\nconst UNREADABLE = freeze(Object.create(null) as object);\nconst unreadableFail: Fail = () => {\n\tthrow UNREADABLE;\n};\n\n/** Admission allows the event. */\nexport function webhookAdmissionAllow(): WebhookAdmissionDecision {\n\treturn ALLOW;\n}\n\n/**\n * Admission denies the event with a fixed reason code; the denial is recorded.\n *\n * @throws {TypeError} `denial_code_unknown` for a code outside `WEBHOOK_ADMISSION_DENIAL_CODES`.\n */\nexport function webhookAdmissionDeny(code: WebhookAdmissionDenialCode): WebhookAdmissionDecision {\n\treturn guard(() => {\n\t\tconst value = primitive(code);\n\t\tif (!isOneOf(WEBHOOK_ADMISSION_DENIAL_CODES, value)) throw inputError(\"type\", \"denial_code_unknown\");\n\t\treturn record<WebhookAdmissionDecision>({ decision: \"deny\", code: value as WebhookAdmissionDenialCode });\n\t}, () => inputError(\"type\", \"denial_code_unknown\"));\n}\n\n/** Admission cannot decide now; the job retries without an intent. */\nexport function webhookAdmissionUnavailable(): WebhookAdmissionDecision {\n\treturn ADMISSION_UNAVAILABLE;\n}\n\n/** Snapshot `decision` and `code` from a plain answer; anything unreadable throws, to be caught. */\nfunction snapshotAnswer(value: unknown): { readonly decision: unknown; readonly code: unknown } {\n\tif (!isPlainRecord(value)) throw UNREADABLE;\n\tconst decision = primitive(readOwn(value, \"decision\", \"decision\", unreadableFail));\n\tconst code = primitive(readOwn(value, \"code\", \"code\", unreadableFail));\n\treturn record({ decision, code });\n}\n\n/**\n * Read an admission port's answer fail-closed. Anything other than a\n * well-formed `allow`, `deny` with a known code, or `unavailable`, including\n * a `deny` with an unknown code, an accessor, a non-plain object or an\n * answer whose inspection throws, becomes `unavailable`: it never becomes\n * `allow`, an unknown code is never stored, and this function never throws.\n */\nexport function normalizeWebhookAdmissionDecision(value: unknown): WebhookAdmissionDecision {\n\treturn guardOr(() => {\n\t\tconst { decision, code } = snapshotAnswer(value);\n\t\tif (decision === \"allow\") return ALLOW;\n\t\tif (decision === \"deny\" && isOneOf(WEBHOOK_ADMISSION_DENIAL_CODES, code)) {\n\t\t\treturn record<WebhookAdmissionDecision>({ decision: \"deny\", code: code as WebhookAdmissionDenialCode });\n\t\t}\n\t\treturn ADMISSION_UNAVAILABLE;\n\t}, () => ADMISSION_UNAVAILABLE);\n}\n\n/**\n * Read a delivery authorization port's answer fail-closed. Anything other\n * than a well-formed `authorized`, `revoked` with a known code, or\n * `unavailable`, including an unreadable answer, becomes `unavailable`,\n * which defers the intent unsent. This function never throws.\n */\nexport function normalizeWebhookDeliveryAuthorizationDecision(value: unknown): WebhookDeliveryAuthorizationDecision {\n\treturn guardOr(() => {\n\t\tconst { decision, code } = snapshotAnswer(value);\n\t\tif (decision === \"authorized\") return AUTHORIZED;\n\t\tif (decision === \"revoked\" && isOneOf(WEBHOOK_REVOCATION_CODES, code)) {\n\t\t\treturn record<WebhookDeliveryAuthorizationDecision>({ decision: \"revoked\", code: code as WebhookRevocationCode });\n\t\t}\n\t\treturn AUTHORIZATION_UNAVAILABLE;\n\t}, () => AUTHORIZATION_UNAVAILABLE);\n}\n","import { fanOutError } from \"./errors\";\nimport type { WebhookCallOptions, WebhookClock } from \"./ports\";\nimport { apply, isPlainRecord, numberIsFinite, readOwn, timeOf } from \"./snapshot\";\n\n/*\n * Bounded port calls for the fan-out publisher and cycle and the delivery\n * cycle (R4: each awaited port, stores included, is bounded).\n *\n * Each call gets an absolute `deadline` and its own `AbortSignal`. The\n * caller stops waiting at `timeoutMs` and aborts the signal, so a port that\n * honours it stops work; an answer that settles at or after the bound is a\n * timeout and is dropped (`boundedCall` says how the settle time is taken).\n * A store write that timed out may still have committed, so the cycles\n * treat it as unknown and never follow it with a second, conflicting\n * transition on the strength of the timeout. Every write the cycles make is\n * insert-if-absent or fenced, so a late write either lands once or is\n * refused. The transport\n * call (R3) is not only raced: the transport itself takes the deadline and\n * the signal, refuses an expired or cancelled handoff and stops a started\n * request at the deadline; the delivery cycle waits `settleGraceMs` past\n * the deadline for it to report what it observed (src/delivery-cycle.ts).\n *\n * A thrown value is never read: the outcome records only that it threw.\n * The port's promise has a rejection handler attached as soon as it is\n * returned (`work` in `boundedCall`), so a\n * port that rejects after the caller stopped waiting raises no unhandled\n * rejection.\n */\n\n/** How a bounded call ended. A thrown value is dropped unread. */\nexport type BoundedOutcome<T> =\n\t| { readonly ok: true; readonly value: T }\n\t| { readonly ok: false; readonly reason: \"threw\" | \"timeout\" | \"aborted\" };\n\nconst abortedGetter = typeof AbortSignal === \"function\" ? Reflect.getOwnPropertyDescriptor(AbortSignal.prototype, \"aborted\")?.get : undefined;\n\n/**\n * The caller's `signal` from a publish context, or `undefined`. Read as an\n * own data property; it counts only when the intrinsic `aborted` getter\n * accepts it, which is true of real `AbortSignal`s only and runs none of the\n * value's code. Anything that throws while it is read is dropped unread.\n */\nexport function readContextSignal(context: unknown): AbortSignal | undefined {\n\ttry {\n\t\tif (!isPlainRecord(context) || abortedGetter === undefined) return undefined;\n\t\tconst signal = readOwn(context, \"signal\", \"signal\", () => undefined as never);\n\t\tif (signal === null || typeof signal !== \"object\") return undefined;\n\t\tapply(abortedGetter, signal, []);\n\t\treturn signal as AbortSignal;\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\n/**\n * Whether a signal {@link readContextSignal} returned has aborted, read with\n * the intrinsic `aborted` getter, so an own `aborted` property on the\n * signal object is never consulted.\n */\nexport function signalAborted(signal: AbortSignal): boolean {\n\tif (abortedGetter === undefined) return false;\n\ttry {\n\t\treturn apply(abortedGetter, signal, []) === true;\n\t} catch {\n\t\treturn false;\n\t}\n}\n\n/** The context's `actorDisclosure` when it is one of Host's three values, else `undefined`; never throws. */\nexport function readContextDisclosure(context: unknown): \"included\" | \"suppressed\" | \"legacy\" | undefined {\n\ttry {\n\t\tif (!isPlainRecord(context)) return undefined;\n\t\tconst disclosure = readOwn(context, \"actorDisclosure\", \"actorDisclosure\", () => undefined as never);\n\t\treturn disclosure === \"included\" || disclosure === \"suppressed\" || disclosure === \"legacy\" ? disclosure : undefined;\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\n/** An injected clock captured at construction: the object and its `now` function. */\nexport interface FanOutClock {\n\treadonly target: object;\n\treadonly now: (...args: never[]) => unknown;\n}\n\n/** Capture an injected clock at construction; anything without a `now` function is `options_invalid`. */\nexport function captureFanOutClock(clock: WebhookClock | undefined): FanOutClock {\n\tif (clock === null || typeof clock !== \"object\") throw fanOutError(\"options_invalid\", \"clock\");\n\tconst now = (clock as { now?: unknown }).now;\n\tif (typeof now !== \"function\") throw fanOutError(\"options_invalid\", \"clock.now\");\n\treturn { target: clock, now: now as (...args: never[]) => unknown };\n}\n\n/** Read the captured clock, refusing a throw or an invalid time as `clock_invalid`. */\nexport function readFanOutClock(clock: FanOutClock): number {\n\tlet value: unknown;\n\ttry {\n\t\tvalue = apply(clock.now, clock.target, []);\n\t} catch {\n\t\tthrow fanOutError(\"clock_invalid\", \"clock\");\n\t}\n\tconst ms = timeOf(value);\n\tif (!numberIsFinite(ms)) throw fanOutError(\"clock_invalid\", \"clock\");\n\treturn ms;\n}\n\nconst performanceNow = typeof performance === \"object\" && performance !== null && typeof performance.now === \"function\"\n\t? performance.now.bind(performance)\n\t: Date.now;\n\nconst TIMEOUT: { readonly ok: false; readonly reason: \"timeout\" } = Object.freeze({ ok: false, reason: \"timeout\" });\nconst ABORTED: { readonly ok: false; readonly reason: \"aborted\" } = Object.freeze({ ok: false, reason: \"aborted\" });\nconst THREW: { readonly ok: false; readonly reason: \"threw\" } = Object.freeze({ ok: false, reason: \"threw\" });\n\n/**\n * Run `run` with an absolute deadline `nowMs + timeoutMs` and a signal that\n * aborts at the timeout or when `parent` aborts. Resolves with the outcome;\n * never rejects.\n *\n * An answer (a value or a throw) is classed by when a handler attached\n * directly to the port's promise runs, not by when this function's\n * continuation resumes. That handler records the time: an answer is accepted\n * when, at that handler, `readNow()` (the clock `nowMs` came from) is still\n * before `nowMs + timeoutMs + settleGraceMs` and fewer than\n * `timeoutMs + settleGraceMs` milliseconds have passed on the monotonic\n * clock since the call started. Otherwise it is a `timeout`, and so is an\n * answer whose `readNow()` throws. The classed answer settles the race as\n * soon as that handler returns, so a timer that fires later, or other work\n * that delays this function's own continuation after the handler ran, cannot\n * turn an answer the handler classed as on time into a timeout.\n * `settleGraceMs` (default 0) is the one stated exception, for the\n * transport: its answer is still accepted for that long after its deadline,\n * because the transport itself stops the request at the deadline and\n * reports what it saw.\n *\n * A parent abort settles the race at once, ahead of any answer whose\n * handler has not yet returned, so such an answer is `aborted`.\n *\n * The handler is attached as soon as the port returns, so it runs once the\n * promise settles and the microtasks already queued ahead of it (including\n * any handlers the port itself attached) have run. That delay counts\n * against the answer: it can make an answer late, never early.\n *\n * Whenever this resolves `timeout`, for any reason, the call's signal has\n * already been aborted (`controller.abort()` below runs before it returns),\n * so a port that honours the signal stops, and a store that has not yet\n * reached its atomic step refuses the write. A store write that times out\n * may still have committed: callers treat a timed-out write as unknown.\n */\nexport async function boundedCall<T>(\n\tnowMs: number,\n\ttimeoutMs: number,\n\tparent: AbortSignal | undefined,\n\trun: (options: WebhookCallOptions) => Promise<T>,\n\treadNow: () => number,\n\tsettleGraceMs = 0,\n): Promise<BoundedOutcome<T>> {\n\tif (parent?.aborted) return ABORTED;\n\tconst startedMonotonicMs = performanceNow();\n\tconst acceptWithinMs = timeoutMs + settleGraceMs;\n\tconst acceptUntilMs = nowMs + acceptWithinMs;\n\tconst controller = new AbortController();\n\tconst options: WebhookCallOptions = { deadline: new Date(nowMs + timeoutMs), signal: controller.signal };\n\tlet timer: ReturnType<typeof setTimeout> | undefined;\n\tlet graceTimer: ReturnType<typeof setTimeout> | undefined;\n\tlet onParentAbort: (() => void) | undefined;\n\tconst stop = new Promise<BoundedOutcome<T>>((resolve) => {\n\t\ttimer = setTimeout(() => {\n\t\t\tcontroller.abort();\n\t\t\tif (settleGraceMs > 0) graceTimer = setTimeout(() => resolve(TIMEOUT), settleGraceMs);\n\t\t\telse resolve(TIMEOUT);\n\t\t}, timeoutMs);\n\t\tif (parent) {\n\t\t\tonParentAbort = () => {\n\t\t\t\tcontroller.abort();\n\t\t\t\tresolve(ABORTED);\n\t\t\t};\n\t\t\tparent.addEventListener(\"abort\", onParentAbort, { once: true });\n\t\t}\n\t});\n\t/** Class an answer when its handler runs (see above). */\n\tconst classify = (outcome: BoundedOutcome<T>): BoundedOutcome<T> => {\n\t\tif (!(performanceNow() - startedMonotonicMs < acceptWithinMs)) return TIMEOUT;\n\t\ttry {\n\t\t\treturn readNow() < acceptUntilMs ? outcome : TIMEOUT;\n\t\t} catch {\n\t\t\treturn TIMEOUT;\n\t\t}\n\t};\n\ttry {\n\t\tlet work: Promise<BoundedOutcome<T>>;\n\t\ttry {\n\t\t\t// The handler is attached directly to what the port returned (a\n\t\t\t// thenable is adopted first, one turn later), so a rejection is\n\t\t\t// always handled. Adoption is inside this guard because it can throw\n\t\t\t// too (a promise whose `constructor` getter throws); that throw is\n\t\t\t// dropped unread, like any other, and cleanup below still runs. Such\n\t\t\t// a promise is outside the port contract (src/ports.ts): no handler\n\t\t\t// can be attached to it, so a rejection it carries stays unhandled.\n\t\t\twork = Promise.resolve(run(options)).then(\n\t\t\t\t(value) => classify({ ok: true, value }),\n\t\t\t\t() => classify(THREW),\n\t\t\t);\n\t\t} catch {\n\t\t\twork = Promise.resolve().then(() => classify(THREW));\n\t\t}\n\t\tconst outcome = await Promise.race([work, stop]);\n\t\tif (!outcome.ok && outcome.reason === \"timeout\") controller.abort();\n\t\treturn outcome;\n\t} finally {\n\t\tif (timer !== undefined) clearTimeout(timer);\n\t\tif (graceTimer !== undefined) clearTimeout(graceTimer);\n\t\tif (parent && onParentAbort) parent.removeEventListener(\"abort\", onParentAbort);\n\t}\n}\n","import { snapshotEventMetadata } from \"./persistence-projection\";\nimport {\n\tdateParse,\n\tisArray,\n\tisOneOf,\n\tisPlainRecord,\n\tnumberIsFinite,\n\tnumberIsSafeInteger,\n\treadOwn,\n\tsnapshotJson,\n\tsnapshotJsonPart,\n\ttype Fail,\n\ttype JsonNodeBudget,\n} from \"./snapshot\";\nimport type {\n\tWebhookEligibilityRevision,\n\tWebhookEventMetadata,\n\tWebhookJobActor,\n\tWebhookJsonObject,\n\tWebhookJsonValue,\n\tWebhookSubscriptionStatus,\n} from \"./types\";\n\n/*\n * Reading what a port returned, for the fan-out publisher and cycle.\n *\n * `boundedCall` (fan-out-call.ts) already turns a port's rejection into a\n * bare reason. A resolved value is still the port's object: inspecting it\n * through ordinary property access could run a getter or a Proxy trap whose\n * error, with whatever text it carries, would escape. So every result is\n * read here, inside one try/catch per reader: own data properties only,\n * through descriptors (an accessor is refused uncalled), copied into\n * package-owned frozen snapshots (`snapshotJson`). Anything that cannot be\n * read this way is `undefined`, and the caller maps that to a fixed code.\n * Nothing thrown inside a reader is kept or read.\n */\n\nconst refuse: Fail = () => {\n\tthrow REFUSED;\n};\nconst REFUSED = Object.freeze(Object.create(null) as object);\n\n/** The `outcome` field of an insert result when it is one of `allowed`, else `undefined`. */\nexport function readOutcome<T extends string>(value: unknown, allowed: readonly T[]): T | undefined {\n\ttry {\n\t\tif (!isPlainRecord(value)) return undefined;\n\t\tconst outcome = readOwn(value, \"outcome\", \"outcome\", refuse);\n\t\treturn isOneOf(allowed, outcome) ? (outcome as T) : undefined;\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\n/** Own data property `key` of a snapshot (which is plain, frozen, null-prototype data). */\nfunction field(snapshot: WebhookJsonObject, key: string): WebhookJsonValue | undefined {\n\treturn readOwn(snapshot, key, key, refuse) as WebhookJsonValue | undefined;\n}\n\nfunction object(value: WebhookJsonValue | undefined): WebhookJsonObject {\n\tif (value === null || value === undefined || typeof value !== \"object\" || isArray(value)) throw REFUSED;\n\treturn value as WebhookJsonObject;\n}\n\nfunction nonEmpty(value: WebhookJsonValue | undefined): string {\n\tif (typeof value !== \"string\" || value === \"\") throw REFUSED;\n\treturn value;\n}\n\nfunction whole(value: WebhookJsonValue | undefined, min: number): number {\n\tif (typeof value !== \"number\" || !numberIsSafeInteger(value) || value < min) throw REFUSED;\n\treturn value;\n}\n\n/** A list result copied into a frozen snapshot, or `undefined`. */\nfunction snapshotList(value: unknown): readonly WebhookJsonValue[] | undefined {\n\tconst copy = snapshotJson(value, \"result\", refuse);\n\treturn isArray(copy) ? copy : undefined;\n}\n\n/**\n * What identifies a claimed record and the lease it was claimed under: the\n * fields a fenced transition needs. Read before, and independently of, the\n * rest of the record ({@link readClaimedJobs}).\n */\nexport interface ClaimedHeader {\n\treadonly eventId: string;\n\treadonly tenantId: string;\n\treadonly spaceId: string;\n\treadonly lease: { readonly owner: string; readonly fence: number };\n}\n\n/** A claimed fan-out job, as the cycle uses it: every field read from the record and validated. */\nexport interface ClaimedJob extends ClaimedHeader {\n\treadonly event: WebhookEventMetadata;\n\treadonly payload: WebhookJsonObject | null;\n\treadonly payloadProjected: boolean;\n\treadonly facts: WebhookJsonObject;\n\treadonly actor: WebhookJobActor;\n\treadonly attemptCount: number;\n\treadonly processingDeadline: string;\n\t/** `processingDeadline` and `event.recordedAt` as epoch milliseconds, both finite. */\n\treadonly processingDeadlineMs: number;\n\treadonly recordedAtMs: number;\n}\n\n/**\n * One entry of a claim result. `undefined`: the record's identity or lease\n * cannot be read, so no fenced write can name it. `job: undefined`: the\n * header was read but the rest of the record cannot be, so the cycle can\n * still end the job through its fenced dead-letter transition.\n */\nexport type ClaimedEntry = { readonly header: ClaimedHeader; readonly job: ClaimedJob | undefined } | undefined;\n\nconst ACTOR_REASONS = Object.freeze([\"suppressed\", \"legacy\"] as const);\n\nfunction readActor(value: WebhookJsonValue | undefined): WebhookJobActor {\n\tconst actor = object(value);\n\tconst state = field(actor, \"state\");\n\tif (state === \"present\") {\n\t\treturn Object.freeze({ state: \"present\", actorId: nonEmpty(field(actor, \"actorId\")), actorType: nonEmpty(field(actor, \"actorType\")) });\n\t}\n\tconst reason = field(actor, \"reason\");\n\tif (state !== \"absent\" || !isOneOf(ACTOR_REASONS, reason)) throw REFUSED;\n\treturn Object.freeze({ state: \"absent\", reason: reason as \"suppressed\" | \"legacy\" });\n}\n\n/** Own data property `key` of a port's record, read once through its descriptor. */\nfunction raw(record: object, key: string): unknown {\n\treturn readOwn(record, key, key, refuse);\n}\n\nfunction plain(value: unknown): object {\n\tif (!isPlainRecord(value)) throw REFUSED;\n\treturn value;\n}\n\n/**\n * The header: identity and lease, each an own data property read once. A\n * store adds the lease when it claims; it is read here as two scalars, with\n * no size budget, so nothing the store adds can make the header unreadable.\n */\nfunction readHeader(record: unknown): ClaimedHeader {\n\tconst job = plain(record);\n\tconst eventId = nonEmpty(raw(job, \"eventId\") as WebhookJsonValue | undefined);\n\tconst tenantId = nonEmpty(raw(job, \"tenantId\") as WebhookJsonValue | undefined);\n\tconst spaceId = nonEmpty(raw(job, \"spaceId\") as WebhookJsonValue | undefined);\n\tconst lease = plain(raw(job, \"lease\"));\n\tconst owner = nonEmpty(raw(lease, \"owner\") as WebhookJsonValue | undefined);\n\tconst fence = whole(raw(lease, \"fence\") as WebhookJsonValue | undefined, 0);\n\treturn Object.freeze({ eventId, tenantId, spaceId, lease: Object.freeze({ owner, fence }) });\n}\n\n/**\n * Containers the insert-side snapshot counted besides `payload` and `facts`:\n * the job record itself, `event` and `actor`. `event` and `actor` hold only\n * scalars once projected, so each is one container.\n */\nconst DRAFT_FIXED_CONTAINERS = 3;\n/** The depth at which the insert-side snapshot reached `payload` and `facts`: one below the job record. */\nconst DRAFT_FIELD_DEPTH = 1;\n\n/**\n * The rest of the record: the projected draft and the scalars the store\n * added (`attemptCount`, `processingDeadline`).\n *\n * Why this cannot refuse a record the store accepted (A1). The insert\n * (`readJobDraft` in the memory store, via `snapshotRecord`) holds the whole\n * submitted job to `snapshotJson`'s limits: at most `MAX_JSON_NODES`\n * containers and `MAX_JSON_DEPTH` levels, counted from the job record. A\n * claimed record is that draft plus whatever the store adds (a lease, a\n * fence, timestamps, an attempt count, a diagnostic), so budgeting the whole\n * claimed record would refuse a draft accepted at the limit. Instead only\n * the draft's open-ended parts, `payload` and `facts`, are snapshotted, with\n * one shared budget seeded with the draft's other containers and starting\n * at the depth the insert reached them. For a store that returns the draft\n * it accepted, the count and depth here are therefore at most the insert's\n * for that draft, whatever the store added; store-added fields are read as\n * scalars and never budgeted. Test:\n * \"a draft accepted at the node limit round-trips through a claim\".\n */\nfunction readBody(record: unknown, header: ClaimedHeader): ClaimedJob {\n\tconst job = plain(record);\n\t// The same validation the projection applies to an envelope.\n\tconst event = snapshotEventMetadata(raw(job, \"event\"));\n\tif (event.eventId !== header.eventId || event.tenantId !== header.tenantId || event.spaceId !== header.spaceId) throw REFUSED;\n\tconst budget: JsonNodeBudget = { nodes: DRAFT_FIXED_CONTAINERS };\n\tconst storedPayload = raw(job, \"payload\");\n\tconst payload = storedPayload === null ? null : object(snapshotJsonPart(storedPayload, \"payload\", refuse, DRAFT_FIELD_DEPTH, budget));\n\tconst facts = object(snapshotJsonPart(raw(job, \"facts\"), \"facts\", refuse, DRAFT_FIELD_DEPTH, budget));\n\tconst actor = readActor(snapshotJsonPart(raw(job, \"actor\"), \"actor\", refuse, DRAFT_FIELD_DEPTH, { nodes: 0 }));\n\tconst processingDeadline = nonEmpty(raw(job, \"processingDeadline\") as WebhookJsonValue | undefined);\n\tconst processingDeadlineMs = dateParse(processingDeadline);\n\tconst recordedAtMs = dateParse(event.recordedAt);\n\tif (!numberIsFinite(processingDeadlineMs) || !numberIsFinite(recordedAtMs)) throw REFUSED;\n\treturn Object.freeze({\n\t\t...header,\n\t\tevent,\n\t\tpayload,\n\t\tpayloadProjected: raw(job, \"payloadProjected\") === true,\n\t\tfacts,\n\t\tactor,\n\t\tattemptCount: whole(raw(job, \"attemptCount\") as WebhookJsonValue | undefined, 0),\n\t\tprocessingDeadline,\n\t\tprocessingDeadlineMs,\n\t\trecordedAtMs,\n\t});\n}\n\n/**\n * The claim result: `undefined` when the list itself cannot be read, and\n * otherwise one {@link ClaimedEntry} per claimed record. Each record's\n * header is read first, in its own try/catch, and its body after, in\n * another, so a body that cannot be read still leaves a header the cycle\n * can dead-letter by (A2). Whatever either read throws is dropped unread.\n */\nexport function readClaimedJobs(value: unknown): readonly ClaimedEntry[] | undefined {\n\tconst items: unknown[] = [];\n\ttry {\n\t\t// The list shallowly, so one unreadable job does not hide the others.\n\t\tif (!isArray(value)) return undefined;\n\t\tconst length = readOwn(value, \"length\", \"length\", refuse);\n\t\tif (typeof length !== \"number\" || !numberIsSafeInteger(length) || length < 0 || length > MAX_CLAIMED) return undefined;\n\t\tfor (let index = 0; index < length; index += 1) items.push(readOwn(value, `${index}`, \"job\", refuse));\n\t} catch {\n\t\treturn undefined;\n\t}\n\treturn Object.freeze(items.map((item): ClaimedEntry => {\n\t\tlet header: ClaimedHeader;\n\t\ttry {\n\t\t\theader = readHeader(item);\n\t\t} catch {\n\t\t\treturn undefined;\n\t\t}\n\t\ttry {\n\t\t\treturn Object.freeze({ header, job: readBody(item, header) });\n\t\t} catch {\n\t\t\treturn Object.freeze({ header, job: undefined });\n\t\t}\n\t}));\n}\n\n/** More jobs than any claim limit a cycle sends; a longer answer is not a claim result. */\nconst MAX_CLAIMED = 100_000;\n\nconst STATUSES = Object.freeze([\"active\", \"paused\", \"deleted\"] as const);\n\n/** The revision listing, or `undefined` when any part of it cannot be read: eligibility is then unknown. */\nexport function readRevisions(value: unknown): readonly WebhookEligibilityRevision[] | undefined {\n\ttry {\n\t\tconst list = snapshotList(value);\n\t\tif (list === undefined) return undefined;\n\t\treturn Object.freeze(list.map((item) => {\n\t\t\tconst revision = object(item);\n\t\t\tconst patterns = field(revision, \"eventTypePatterns\");\n\t\t\tif (!isArray(patterns)) throw REFUSED;\n\t\t\tconst status = field(revision, \"status\");\n\t\t\tif (!isOneOf(STATUSES, status)) throw REFUSED;\n\t\t\tconst effectiveUntil = field(revision, \"effectiveUntil\");\n\t\t\treturn Object.freeze({\n\t\t\t\tsubscriptionId: nonEmpty(field(revision, \"subscriptionId\")),\n\t\t\t\trevision: whole(field(revision, \"revision\"), 1),\n\t\t\t\ttenantId: nonEmpty(field(revision, \"tenantId\")),\n\t\t\t\tspaceId: nonEmpty(field(revision, \"spaceId\")),\n\t\t\t\tstatus: status as WebhookSubscriptionStatus,\n\t\t\t\teventTypePatterns: Object.freeze(patterns.map(nonEmpty)),\n\t\t\t\teffectiveFrom: nonEmpty(field(revision, \"effectiveFrom\")),\n\t\t\t\teffectiveUntil: effectiveUntil === null || effectiveUntil === undefined ? null : nonEmpty(effectiveUntil),\n\t\t\t});\n\t\t}));\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\n/**\n * A tombstone read: `\"decided\"` when an intent or denial marker exists for\n * the pair, `\"undecided\"` for `null`, `undefined` when the answer cannot be read.\n */\nexport function readDecided(value: unknown): \"decided\" | \"undecided\" | undefined {\n\ttry {\n\t\tif (value === null) return \"undecided\";\n\t\tif (!isPlainRecord(value)) return undefined;\n\t\tconst kind = readOwn(value, \"kind\", \"kind\", refuse);\n\t\treturn kind === \"intent\" || kind === \"denial\" ? \"decided\" : undefined;\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n","import type {\n\tEnterpriseEventEnvelope,\n\tEnterpriseEventPublishContext,\n\tEnterpriseEventPublisher,\n} from \"@fabricorg/platform-host\";\n\nimport { configError, fanOutError, guard } from \"./errors\";\nimport { boundedCall, captureFanOutClock, readContextDisclosure, readContextSignal, readFanOutClock, signalAborted, type FanOutClock } from \"./fan-out-call\";\nimport { readOutcome } from \"./fan-out-read\";\nimport { assertPositiveInteger, resolveWebhookDeliveryLimits, WEBHOOK_MAX_TIMER_MS, type WebhookDeliveryLimits } from \"./limits\";\nimport { callFail, dataFail, projectWebhookFanOutJob, uninspectable } from \"./persistence-projection\";\nimport type { WebhookDeliveryStore } from \"./ports\";\nimport { apply, define, emptyMap, freeze, hasOwn, isArray, isPlainRecord, primitive, readOwn, record, snapshotJsonPart, timeOf, type JsonNodeBudget } from \"./snapshot\";\nimport { isoOf } from \"./store-input\";\nimport type { WebhookJobActor, WebhookPayloadPolicy } from \"./types\";\n\n/*\n * Stage one of the two-stage fan-out (ADR 0018 decision 2), and the\n * composite publisher that lets the Host relay feed webhooks and a bus from\n * one outbox (decisions 2 and 5).\n *\n * The fan-out publisher resolves subscriptions not at all. It projects the\n * envelope (persistence projection) and inserts one fan-out job keyed by\n * `eventId`, insert-if-absent, and resolves only after the store answers\n * `inserted` or `already_present`. The Host relay marks the outbox record\n * published only after `publish()` resolves (`runOutboxRelayCycle`,\n * packages/platform-host/src/outbox.ts), so an acknowledged record has a\n * stored job. A crash between the insert and the acknowledgement leaves\n * the record for lease expiry; the relay republishes it under the same\n * `eventId`, the insert answers `already_present`, and nothing is added\n * (test \"crash before acknowledgement ...\", tests/fan-out-host.test.ts).\n *\n * Nothing a port, the caller's context or a sink throws reaches an error\n * this module throws: a rejection is dropped by `boundedCall`, a resolved\n * value is read by `src/fan-out-read.ts`, the context by the readers in\n * `src/fan-out-call.ts`, and the envelope inside the projection's guard.\n * Every failure is a package error with a fixed code.\n */\n\n/** Options for {@link createWebhookFanOutPublisher}. */\nexport interface WebhookFanOutPublisherOptions {\n\t/** Where jobs are inserted. Only `insertFanOutJob` is called. */\n\treadonly store: Pick<WebhookDeliveryStore, \"insertFanOutJob\">;\n\t/** Stamps the job's `createdAt` and processing deadline, and bounds the store call. */\n\treadonly clock: { now(): Date };\n\t/** The persistence projection's allowlist and declared facts (decision 9). */\n\treadonly policy: WebhookPayloadPolicy;\n\t/**\n\t * Overrides of {@link WebhookDeliveryLimits}; every limit is validated as\n\t * positive and finite at construction (R4). The publisher uses\n\t * `fanOutDeadlineMs` (the job's processing deadline) and `portTimeoutMs`\n\t * (the bound on the insert).\n\t */\n\treadonly limits?: Partial<WebhookDeliveryLimits>;\n}\n\n/**\n * The actor a job records, from the relay's disclosure (decision 5). Only an\n * explicit `included` disclosure with both fields present yields an actor.\n * `suppressed` stays `suppressed`. Anything else, including a missing\n * context (a bridge that passed none) and an `included` record whose\n * envelope lacks the fields, is `legacy`: the reason actor enrichment\n * (PR 9) repairs. An `actorId` on an envelope whose disclosure is not\n * `included` is ignored. Runs inside the projection's guard.\n */\nfunction jobActor(event: unknown, disclosure: ReturnType<typeof readContextDisclosure>): WebhookJobActor {\n\tif (disclosure === \"suppressed\") return record<WebhookJobActor>({ state: \"absent\", reason: \"suppressed\" });\n\tif (disclosure === \"included\" && isPlainRecord(event)) {\n\t\tconst actorId = readOwn(event, \"actorId\", \"actorId\", dataFail);\n\t\tconst actorType = readOwn(event, \"actorType\", \"actorType\", dataFail);\n\t\tif (typeof actorId === \"string\" && actorId !== \"\" && typeof actorType === \"string\" && actorType !== \"\") {\n\t\t\treturn record<WebhookJobActor>({ state: \"present\", actorId, actorType });\n\t\t}\n\t}\n\treturn record<WebhookJobActor>({ state: \"absent\", reason: \"legacy\" });\n}\n\ninterface PublisherConfig {\n\treadonly limits: WebhookDeliveryLimits;\n\treadonly store: object;\n\treadonly insertFanOutJob: (...args: never[]) => unknown;\n\treadonly clock: FanOutClock;\n\treadonly policy: WebhookPayloadPolicy;\n}\n\nfunction readPublisherOptions(options: WebhookFanOutPublisherOptions): PublisherConfig {\n\tif (options === null || typeof options !== \"object\") throw fanOutError(\"options_invalid\", \"options\");\n\tconst limits = resolveWebhookDeliveryLimits(options.limits ?? {});\n\tconst store = options.store;\n\tif (store === null || typeof store !== \"object\") throw fanOutError(\"options_invalid\", \"store\");\n\tconst insertFanOutJob = store.insertFanOutJob;\n\tif (typeof insertFanOutJob !== \"function\") throw fanOutError(\"options_invalid\", \"store\");\n\treturn freeze({ limits, store, insertFanOutJob: insertFanOutJob as (...args: never[]) => unknown, clock: captureFanOutClock(options.clock), policy: options.policy });\n}\n\nconst INSERT_OUTCOMES = freeze([\"inserted\", \"already_present\", \"past_horizon\"] as const);\n\n/**\n * Build the stage-one publisher: an `EnterpriseEventPublisher` to hand to\n * `runOutboxRelayCycle()` (alone or inside {@link createWebhookCompositePublisher}),\n * or to call from a bridge for events that do not reach the Host outbox.\n *\n * `publish(event, context)`:\n *\n * 1. projects the envelope with `projectWebhookFanOutJob()`, recording the\n * actor as the relay's `context.actorDisclosure` describes it;\n * 2. inserts the job with `createdAt` now and a processing deadline\n * `fanOutDeadlineMs` later, bounded by `portTimeoutMs` and the caller's\n * signal;\n * 3. resolves on `inserted` or `already_present` (a replay or a bridge\n * overlap: the first insert wins, and the stored job is not changed).\n *\n * It rejects, so the Host relay retries the record and eventually\n * dead-letters it, with a `WebhookProjectionError` when the envelope cannot\n * be projected, or a `WebhookFanOutError`:\n * `event_past_replay_horizon` when the store answered `past_horizon`,\n * `fan_out_store_failed` when the insert threw or its answer cannot be read,\n * `fan_out_store_timeout` when it timed out, `publish_aborted` when the\n * caller's signal aborted first, and `clock_invalid` for a failing clock.\n * An insert that threw, timed out or was aborted may still have committed;\n * the relay's retry of the same `eventId` then answers `already_present`.\n *\n * @throws {WebhookDeliveryConfigError} at construction, for any limit that\n * is not positive and finite.\n * @throws {WebhookFanOutError} `options_invalid` at construction, for a\n * missing or unreadable store, clock or options object.\n */\nexport function createWebhookFanOutPublisher(options: WebhookFanOutPublisherOptions): EnterpriseEventPublisher {\n\tconst config = guard(() => readPublisherOptions(options), () => fanOutError(\"options_invalid\", \"options\"));\n\tconst { limits, store, insertFanOutJob, clock, policy } = config;\n\n\tconst publish = async (event: EnterpriseEventEnvelope, context?: EnterpriseEventPublishContext): Promise<void> => {\n\t\tconst disclosure = readContextDisclosure(context);\n\t\tconst draft = guard(\n\t\t\t() => projectWebhookFanOutJob(event, { policy, actor: jobActor(event, disclosure) }),\n\t\t\tuninspectable(\"envelope\"),\n\t\t);\n\t\tconst nowMs = readFanOutClock(clock);\n\t\tconst job = { ...draft, createdAt: isoOf(nowMs), processingDeadline: isoOf(nowMs + limits.fanOutDeadlineMs) };\n\t\tconst outcome = await boundedCall(nowMs, limits.portTimeoutMs, readContextSignal(context), (callOptions) =>\n\t\t\tapply(insertFanOutJob, store, [job, callOptions] as never[]) as Promise<unknown>, () => readFanOutClock(clock));\n\t\tif (!outcome.ok) {\n\t\t\tthrow fanOutError(\n\t\t\t\toutcome.reason === \"timeout\" ? \"fan_out_store_timeout\" : outcome.reason === \"aborted\" ? \"publish_aborted\" : \"fan_out_store_failed\",\n\t\t\t\t\"insertFanOutJob\",\n\t\t\t);\n\t\t}\n\t\tconst answer = readOutcome(outcome.value, INSERT_OUTCOMES);\n\t\t// Acknowledge only a durable job: a new one, or the one a replay or a\n\t\t// bridge stored first.\n\t\tif (answer === \"inserted\" || answer === \"already_present\") return;\n\t\t// R5, carried from PR 4: an event older than the replay horizon cannot\n\t\t// get a job, so the publish fails and the Host record dead-letters\n\t\t// instead of counting as delivered.\n\t\tif (answer === \"past_horizon\") throw fanOutError(\"event_past_replay_horizon\", \"insertFanOutJob\");\n\t\tthrow fanOutError(\"fan_out_store_failed\", \"insertFanOutJob\");\n\t};\n\treturn freeze({ publish });\n}\n\n// ---------------------------------------------------------------------------\n// Composite\n// ---------------------------------------------------------------------------\n\n/** One sink of a composite publisher. */\nexport interface WebhookCompositeSink {\n\t/** Names the sink in a `sink_failed` or `sink_timeout` error: 1 to 64 printable ASCII characters, unique in the composite. */\n\treadonly name: string;\n\treadonly publisher: EnterpriseEventPublisher;\n\t/**\n\t * Only `true` passes `actorId` and `actorType` to this sink, with the\n\t * relay's `actorDisclosure` unchanged. Any other value gives the sink a\n\t * copy of the envelope without those keys, and reports an `included`\n\t * disclosure to it as `suppressed` (decision 5).\n\t */\n\treadonly includeActor?: boolean;\n\t/**\n\t * Defaults to `true`. The composite resolves only after every required\n\t * sink resolves. A sink with `required: false` is started with the others\n\t * but never waited for: its outcome, timeout included, is ignored, so an\n\t * event it fails is not retried for it.\n\t */\n\treadonly required?: boolean;\n}\n\n/** Options for {@link createWebhookCompositePublisher}. */\nexport interface WebhookCompositePublisherOptions {\n\t/** At least one sink, at most 16, called concurrently. */\n\treadonly sinks: readonly WebhookCompositeSink[];\n\t/**\n\t * How long each sink is given, in ms, before its signal is aborted and\n\t * it counts as timed out. A positive whole number up to\n\t * `WEBHOOK_MAX_TIMER_MS`; default 10 000, Host's default publish timeout.\n\t */\n\treadonly sinkTimeoutMs?: number;\n}\n\ninterface Sink {\n\treadonly name: string;\n\treadonly target: object;\n\treadonly publish: (...args: never[]) => unknown;\n\treadonly includeActor: boolean;\n\treadonly required: boolean;\n}\n\nconst MAX_SINKS = 16;\nconst SINK_NAME = /^[\\x21-\\x7e]{1,64}$/;\nconst DEFAULT_SINK_TIMEOUT_MS = 10_000;\n\nfunction readComposite(options: unknown): { readonly sinks: readonly Sink[]; readonly timeoutMs: number } {\n\tif (options === null || typeof options !== \"object\") throw fanOutError(\"options_invalid\", \"options\");\n\tconst rawTimeout = primitive((options as { sinkTimeoutMs?: unknown }).sinkTimeoutMs);\n\tconst timeoutMs = rawTimeout === undefined ? DEFAULT_SINK_TIMEOUT_MS : rawTimeout;\n\tassertPositiveInteger(timeoutMs, \"sinkTimeoutMs\");\n\tif (timeoutMs > WEBHOOK_MAX_TIMER_MS) throw configError(\"limit_out_of_range\", \"sinkTimeoutMs\");\n\tconst sinks = (options as { sinks?: unknown }).sinks;\n\tif (!isArray(sinks) || sinks.length === 0 || sinks.length > MAX_SINKS) throw fanOutError(\"options_invalid\", \"sinks\");\n\tconst read: Sink[] = [];\n\tconst names: string[] = [];\n\tfor (let index = 0; index < sinks.length; index += 1) {\n\t\tconst sink = sinks[index] as Partial<WebhookCompositeSink> | undefined;\n\t\tif (sink === null || typeof sink !== \"object\") throw fanOutError(\"options_invalid\", `sinks[${index}]`);\n\t\tconst { name, publisher, includeActor, required } = sink;\n\t\tif (typeof name !== \"string\" || !SINK_NAME.test(name) || names.includes(name)) throw fanOutError(\"options_invalid\", `sinks[${index}].name`);\n\t\tif (publisher === null || typeof publisher !== \"object\" || typeof publisher.publish !== \"function\") {\n\t\t\tthrow fanOutError(\"options_invalid\", `sinks[${index}].publisher`);\n\t\t}\n\t\tif (includeActor !== undefined && typeof includeActor !== \"boolean\") throw fanOutError(\"options_invalid\", `sinks[${index}].includeActor`);\n\t\tif (required !== undefined && typeof required !== \"boolean\") throw fanOutError(\"options_invalid\", `sinks[${index}].required`);\n\t\tnames.push(name);\n\t\tread.push(freeze({ name, target: publisher, publish: publisher.publish as (...args: never[]) => unknown, includeActor: includeActor === true, required: required !== false }));\n\t}\n\treturn freeze({ sinks: freeze(read), timeoutMs });\n}\n\n/*\n * Trust model. Sinks are trusted application code wired at the composition\n * root, like Host's adapters. The composite isolates sinks from ordinary\n * sink behaviour: mutating the envelope or context it was handed, throwing\n * synchronously, returning a rejected promise or a thenable that calls its\n * reject callback, rejecting late, ignoring its signal, and hanging. It does\n * not confine code that subverts intrinsics: a returned promise with a\n * poisoned `constructor` getter, a thenable whose `then` throws\n * asynchronously, or a replaced `dispatchEvent` or other\n * `EventTarget` method on the signal it was handed (the intrinsic `abort`\n * below dispatches the abort event on that signal, so such a replacement\n * runs). Those are outside the composite's guarantees.\n *\n * The runtime functions the composite calls are captured when this module\n * loads, in keeping with the rest of the package (src/snapshot.ts). This is\n * consistency, not confinement. The composite installs no listener on a\n * sink's signal and its cleanup calls nothing on the envelope, context or\n * signal it handed a sink. Each capture is `undefined` on a runtime without\n * it, and construction then refuses the composite as `options_invalid`.\n */\nconst AbortControllerIntrinsic = typeof AbortController === \"function\" ? AbortController : undefined;\nconst abortIntrinsic = AbortControllerIntrinsic?.prototype.abort;\nconst controllerSignalGetter = AbortControllerIntrinsic === undefined ? undefined : Reflect.getOwnPropertyDescriptor(AbortControllerIntrinsic.prototype, \"signal\")?.get;\nconst addListenerIntrinsic = typeof EventTarget === \"function\" ? EventTarget.prototype.addEventListener : undefined;\nconst removeListenerIntrinsic = typeof EventTarget === \"function\" ? EventTarget.prototype.removeEventListener : undefined;\nconst setTimer = setTimeout;\nconst clearTimer = clearTimeout;\nconst PromiseIntrinsic = Promise;\nconst deleteProperty = Reflect.deleteProperty;\nconst DateIntrinsic = Date;\nconst reflectOwnKeys = Reflect.ownKeys;\nconst reflectGetOwnPropertyDescriptor = Reflect.getOwnPropertyDescriptor;\nconst reflectDefineProperty = Reflect.defineProperty;\nconst numberIsFinite = Number.isFinite;\n\nfunction compositeRuntimeAvailable(): boolean {\n\treturn abortIntrinsic !== undefined && controllerSignalGetter !== undefined && addListenerIntrinsic !== undefined &&\n\t\tremoveListenerIntrinsic !== undefined;\n}\n\n/**\n * One envelope per sink (B1): no two sinks, and no sink and the caller, share\n * a mutable object through the envelope. What enforces it is an allowlist,\n * not a list of refused types. The caller's envelope is read once by the\n * package's plain-data snapshot (src/snapshot.ts: own data properties only,\n * no getter is called, depth and node budgets), which accepts `null`,\n * booleans, finite numbers, strings, arrays, plain objects and the envelope's\n * two top-level dates, and refuses everything else (typed arrays,\n * `ArrayBuffer`, `SharedArrayBuffer`, `Map`, `Set`, `Error`, class instances,\n * `WebAssembly.Memory`, functions, symbols, accessors, and proxies over any\n * of those; a proxy over plain data cannot be told apart and its traps run\n * while the envelope is read). A refusal\n * fails the publish as `inspection_failed` before any sink starts. A value\n * the snapshot accepts holds no reference to memory outside itself, so each\n * sink's copy, built from the snapshot by `thaw`, shares nothing with another\n * sink's copy or the caller.\n *\n * `occurredAt` and `recordedAt` are copied as new `Date`s. A `Date` anywhere\n * else (in `payload`, say) becomes its ISO-8601 string, as the persistence\n * projection treats it. Host types `payload` as `unknown` and does not\n * guarantee JSON, so an envelope whose payload is not plain data is refused,\n * not passed through. A sink without `includeActor` gets its copy with\n * `actorId` and `actorType` deleted, so the keys are absent, not `undefined`.\n * All copies exist before any sink runs, so a sink mutating its envelope\n * cannot change what another receives (tests \"a sink mutating its envelope\n * ...\", \"an envelope holding ... is refused\").\n */\nfunction sinkEnvelopes(event: unknown, sinks: readonly Sink[]): readonly EnterpriseEventEnvelope[] {\n\tif (!isPlainRecord(event)) throw uninspectable(\"envelope\")();\n\tconst budget: JsonNodeBudget = { nodes: 0 };\n\tconst keys = reflectOwnKeys(event);\n\tconst snapshot: Record<string, unknown> = emptyMap<unknown>();\n\tfor (let index = 0; index < keys.length; index += 1) {\n\t\tconst key = keys[index];\n\t\tif (typeof key !== \"string\") continue;\n\t\tconst descriptor = reflectGetOwnPropertyDescriptor(event, key);\n\t\tif (descriptor === undefined || descriptor.enumerable !== true) continue;\n\t\tif (!hasOwn(descriptor, \"value\")) return callFail(\"accessor\", \"envelope\");\n\t\tif (descriptor.value === undefined) continue;\n\t\tif (key === \"occurredAt\" || key === \"recordedAt\") {\n\t\t\tconst time = timeOf(descriptor.value);\n\t\t\tif (!numberIsFinite(time)) return callFail(\"not_json\", \"envelope\");\n\t\t\tdefine(snapshot, key, time);\n\t\t} else {\n\t\t\tdefine(snapshot, key, snapshotJsonPart(descriptor.value, \"envelope\", callFail, 1, budget));\n\t\t}\n\t}\n\tconst copies: EnterpriseEventEnvelope[] = [];\n\tfor (let index = 0; index < sinks.length; index += 1) {\n\t\tconst copy = thaw(snapshot) as Record<string, unknown>;\n\t\tif (typeof snapshot.occurredAt === \"number\") copy.occurredAt = new DateIntrinsic(snapshot.occurredAt);\n\t\tif (typeof snapshot.recordedAt === \"number\") copy.recordedAt = new DateIntrinsic(snapshot.recordedAt);\n\t\tif (!sinks[index]!.includeActor) {\n\t\t\tdeleteProperty(copy, \"actorId\");\n\t\t\tdeleteProperty(copy, \"actorType\");\n\t\t}\n\t\tcopies.push(copy as unknown as EnterpriseEventEnvelope);\n\t}\n\treturn copies;\n}\n\n/**\n * A fresh, mutable, ordinary copy of a package-built snapshot (arrays,\n * null-prototype objects, primitives). It walks only snapshot values, whose\n * depth the snapshot already bounded. A key such as `__proto__` is defined\n * as an own property, never assigned.\n */\nfunction thaw(value: unknown): unknown {\n\tif (value === null || typeof value !== \"object\") return value;\n\tif (isArray(value)) {\n\t\tconst list: unknown[] = [];\n\t\tfor (let index = 0; index < value.length; index += 1) list.push(thaw(value[index]));\n\t\treturn list;\n\t}\n\tconst keys = reflectOwnKeys(value);\n\tconst out: Record<string, unknown> = {};\n\tfor (let index = 0; index < keys.length; index += 1) {\n\t\tconst key = keys[index] as string;\n\t\tdefineMutable(out, key, thaw((value as Record<string, unknown>)[key]));\n\t}\n\treturn out;\n}\n\nfunction defineMutable(target: object, key: string, value: unknown): void {\n\treflectDefineProperty(target, key, { value, enumerable: true, writable: true, configurable: true });\n}\n\n/** How one sink's run ended. A rejection reason is kept only to be passed to `guard`, which runs none of its code. */\ntype SinkOutcome =\n\t| { readonly status: \"ok\" }\n\t| { readonly status: \"failed\"; readonly reason: unknown }\n\t| { readonly status: \"timeout\" }\n\t| { readonly status: \"aborted\" };\n\nconst OK: SinkOutcome = freeze({ status: \"ok\" });\nconst TIMED_OUT: SinkOutcome = freeze({ status: \"timeout\" });\nconst ABORTED: SinkOutcome = freeze({ status: \"aborted\" });\n\n/** One sink's run: its outcome, and the two ways the composite drives it. */\ninterface SinkRun {\n\t/** Resolves once, with how the run ended. Never rejects. */\n\treadonly outcome: Promise<SinkOutcome>;\n\t/** Start the sink's timer and call it, unless the run already ended. */\n\treadonly start: () => void;\n\t/** End the run as aborted and abort the sink's signal; nothing once it ended. */\n\treadonly abort: () => void;\n}\n\n/**\n * Prepare one sink's run: its own controller and signal, its own context\n * object, and an outcome promise settled by `end` exactly once, by whichever\n * comes first of the sink settling, the timeout and `abort`.\n *\n * Rejections from ordinary sink behaviour are handled (B3, within the trust\n * model above). `outcome` is resolve-only. The sink is called inside an\n * `async` body whose `try` covers the call, a synchronous throw, and the\n * `await` of what it returned: a rejected promise, early or late, or a\n * thenable that calls its reject callback lands in that `catch`, and the\n * body itself never rejects. `end` catches every error its own cleanup\n * could throw. A returned value that subverts the promise machinery (a\n * poisoned `constructor` getter, a `then` that throws asynchronously) is\n * outside that guarantee.\n *\n * `end` clears the timer and calls `onEnd`, which releases the composite's\n * watch on the caller's signal once every run has ended (B4). A run the\n * composite does not wait for has its timer `unref()`'d where the runtime\n * supports it, so an optional sink still running after `publish()` settled\n * keeps both its timeout and its abort forwarding without keeping the\n * process alive. Tests: the \"fixed outcomes and handled rejections\" and\n * \"optional sinks after publish() settled\" blocks of\n * tests/fan-out-composite.test.ts.\n */\nfunction prepareRun(sink: Sink, envelope: EnterpriseEventEnvelope, disclosure: string | undefined, timeoutMs: number, onEnd: () => void): SinkRun {\n\tconst controller = new AbortControllerIntrinsic!();\n\tconst signal = apply(controllerSignalGetter!, controller, []) as AbortSignal;\n\tconst context = (disclosure === undefined ? { signal } : { signal, actorDisclosure: disclosure }) as EnterpriseEventPublishContext;\n\tlet settle: (outcome: SinkOutcome) => void = () => undefined;\n\tconst outcome = new PromiseIntrinsic<SinkOutcome>((resolve) => {\n\t\tsettle = resolve;\n\t});\n\tlet ended = false;\n\tlet timer: ReturnType<typeof setTimeout> | undefined;\n\tconst end = (result: SinkOutcome, abortSignal: boolean): void => {\n\t\tif (ended) return;\n\t\tended = true;\n\t\tif (timer !== undefined) {\n\t\t\ttry {\n\t\t\t\tclearTimer(timer);\n\t\t\t} catch {\n\t\t\t\t// Nothing to do: the run has ended either way.\n\t\t\t}\n\t\t}\n\t\ttry {\n\t\t\tonEnd();\n\t\t} catch {\n\t\t\t// As above.\n\t\t}\n\t\tif (abortSignal) {\n\t\t\ttry {\n\t\t\t\tapply(abortIntrinsic!, controller, []);\n\t\t\t} catch {\n\t\t\t\t// As above.\n\t\t\t}\n\t\t}\n\t\tsettle(result);\n\t};\n\tconst start = (): void => {\n\t\tif (ended) return;\n\t\ttimer = setTimer(() => end(TIMED_OUT, true), timeoutMs);\n\t\tif (!sink.required) unrefTimer(timer);\n\t\tvoid (async (): Promise<void> => {\n\t\t\ttry {\n\t\t\t\tawait (apply(sink.publish, sink.target, [envelope, context] as never[]) as unknown);\n\t\t\t\tend(OK, false);\n\t\t\t} catch (reason) {\n\t\t\t\tend({ status: \"failed\", reason }, false);\n\t\t\t}\n\t\t})();\n\t};\n\treturn freeze({ outcome, start, abort: () => end(ABORTED, true) });\n}\n\n/** `timer.unref()` on runtimes whose timers have it (Node); a number timer (browsers) is left alone. */\nfunction unrefTimer(timer: unknown): void {\n\ttry {\n\t\tif (timer === null || typeof timer !== \"object\") return;\n\t\tconst unref = (timer as { unref?: unknown }).unref;\n\t\tif (typeof unref === \"function\") apply(unref, timer, []);\n\t} catch {\n\t\t// A timer that cannot be unref'd still fires and is still cleared.\n\t}\n}\n\n/**\n * Build a publisher that hands each event to several sinks, for example the\n * webhook fan-out publisher and a message bus, from one Host relay. A second\n * relay on the same outbox claims the same records, so it is no substitute\n * (decision 2).\n *\n * Sinks are trusted application code; see the trust model above for what\n * the isolation below covers. Every sink is called concurrently, each with\n * its own envelope copy, its own context and its own signal, which aborts\n * when the caller's signal aborts or the sink's `sinkTimeoutMs` runs out. That holds for an optional\n * sink still running after `publish()` settled, too. The composite resolves\n * once every required sink resolved; optional sinks are not waited for. It\n * rejects:\n *\n * - with `publish_aborted`, and no sink started, when the caller's signal\n * aborts at any point before the sinks start, copying the envelope\n * included;\n * - with `publish_aborted` as soon as the caller's signal aborts while a\n * required sink is still running;\n * - otherwise, once every required sink has settled, for the first required\n * sink in sink order that did not resolve: with that sink's error when\n * this package created it (for example `event_past_replay_horizon`),\n * `sink_failed` for any other error, dropped unread, and `sink_timeout`\n * when it did not settle in time;\n * - with a `WebhookProjectionError` (`inspection_failed`) when the envelope\n * is not plain data (see `sinkEnvelopes`) or cannot be read, before any sink is called.\n *\n * The relay then retries the whole record, so every sink sees the event\n * again under the same `eventId`: each sink must treat a repeated `eventId`\n * as a no-op, as the fan-out publisher does.\n *\n * Actor identity reaches only sinks with `includeActor: true` (decision 5;\n * test \"the composite strips actor identity ...\").\n *\n * @throws {WebhookFanOutError} `options_invalid` at construction for an\n * empty or oversized sink list, a duplicate or malformed name, a sink\n * without a `publish` function, or a runtime without `AbortController`,\n * or `EventTarget`.\n * @throws {WebhookDeliveryConfigError} at construction for a `sinkTimeoutMs`\n * that is not a positive whole number within the timer range.\n */\nexport function createWebhookCompositePublisher(options: WebhookCompositePublisherOptions): EnterpriseEventPublisher {\n\tconst { sinks, timeoutMs } = guard(() => readComposite(options), () => fanOutError(\"options_invalid\", \"options\"));\n\tif (!compositeRuntimeAvailable()) throw fanOutError(\"options_invalid\", \"runtime\");\n\tconst publish = async (event: EnterpriseEventEnvelope, context?: EnterpriseEventPublishContext): Promise<void> => {\n\t\tconst parent = readContextSignal(context);\n\t\tif (parent !== undefined && signalAborted(parent)) throw fanOutError(\"publish_aborted\", \"signal\");\n\t\tconst disclosure = readContextDisclosure(context);\n\t\tconst strippedDisclosure = disclosure === \"included\" ? \"suppressed\" : disclosure;\n\t\tconst envelopes = guard(() => sinkEnvelopes(event, sinks), uninspectable(\"envelope\"));\n\n\t\t// One listener on the caller's signal forwards its abort to every run\n\t\t// still going, and is removed when the last run ends, which may be\n\t\t// after `publish()` settled (B4).\n\t\tlet live = sinks.length;\n\t\tconst runs: SinkRun[] = [];\n\t\tconst onParentAbort = (): void => {\n\t\t\tfor (let index = 0; index < runs.length; index += 1) runs[index]!.abort();\n\t\t};\n\t\tconst release = (): void => {\n\t\t\tlive -= 1;\n\t\t\tif (live === 0 && parent !== undefined) {\n\t\t\t\ttry {\n\t\t\t\t\tapply(removeListenerIntrinsic!, parent, [\"abort\", onParentAbort]);\n\t\t\t\t} catch {\n\t\t\t\t\t// The listener only aborts runs that have all ended.\n\t\t\t\t}\n\t\t\t}\n\t\t};\n\t\tfor (let index = 0; index < sinks.length; index += 1) {\n\t\t\tconst sink = sinks[index]!;\n\t\t\truns.push(prepareRun(sink, envelopes[index]!, sink.includeActor ? disclosure : strippedDisclosure, timeoutMs, release));\n\t\t}\n\t\tif (parent !== undefined) {\n\t\t\tlet watching = true;\n\t\t\ttry {\n\t\t\t\tapply(addListenerIntrinsic!, parent, [\"abort\", onParentAbort]);\n\t\t\t} catch {\n\t\t\t\twatching = false;\n\t\t\t}\n\t\t\t// The caller's signal may have aborted after the entry check, for\n\t\t\t// example from a proxy trap that ran while the snapshot copied the\n\t\t\t// envelope (getters are refused, not called), before the listener\n\t\t\t// existed. A caller abort that cannot\n\t\t\t// be watched is treated the same way. Either ends every run before\n\t\t\t// any starts, which also releases the listener.\n\t\t\tif (!watching || signalAborted(parent)) {\n\t\t\t\tonParentAbort();\n\t\t\t\tthrow fanOutError(\"publish_aborted\", \"signal\");\n\t\t\t}\n\t\t}\n\t\t// A sink's synchronous code may abort the caller's signal; a run the\n\t\t// forwarding already ended is then not started.\n\t\tfor (let index = 0; index < runs.length; index += 1) runs[index]!.start();\n\n\t\t// Only required runs are awaited. Each outcome promise is resolved by\n\t\t// its sink, its timer or the caller's abort, so the waits end promptly\n\t\t// on an abort (B5).\n\t\tconst outcomes: SinkOutcome[] = [];\n\t\tfor (let index = 0; index < sinks.length; index += 1) {\n\t\t\tif (sinks[index]!.required) outcomes.push(await runs[index]!.outcome);\n\t\t}\n\t\tlet position = 0;\n\t\tlet failure: { readonly name: string; readonly outcome: SinkOutcome } | undefined;\n\t\tfor (let index = 0; index < sinks.length; index += 1) {\n\t\t\tconst sink = sinks[index]!;\n\t\t\tif (!sink.required) continue;\n\t\t\tconst outcome = outcomes[position]!;\n\t\t\tposition += 1;\n\t\t\t// Only the forwarding of the caller's abort ends a run as aborted.\n\t\t\tif (outcome.status === \"aborted\") throw fanOutError(\"publish_aborted\", \"signal\");\n\t\t\tif (outcome.status !== \"ok\" && failure === undefined) failure = { name: sink.name, outcome };\n\t\t}\n\t\tif (failure === undefined) return;\n\t\tif (failure.outcome.status === \"timeout\") throw fanOutError(\"sink_timeout\", failure.name);\n\t\tconst reason = (failure.outcome as { readonly reason: unknown }).reason;\n\t\t// A package-made error passes through with its code; anything else is\n\t\t// replaced unread.\n\t\tguard(() => {\n\t\t\tthrow reason;\n\t\t}, () => fanOutError(\"sink_failed\", failure.name));\n\t};\n\treturn freeze({ publish });\n}\n","/**\n * The event types the package's governed actions emit (PR 9; README,\n * \"Governed actions\"). They are package constants, the same for every\n * module instance whatever its namespace, so the exclusion below does not\n * depend on how an application composed the module.\n *\n * ADR 0018 decision 9: these types are excluded from fan-out matching.\n * {@link matchesWebhookEventTypePattern} (src/fan-out-cycle.ts), the one\n * function that compares a subscription pattern with an event type, answers\n * `false` for each of them before it looks at the pattern, so no\n * subscription, `*` included, gets an intent or a denial for one. Test:\n * \"own-event exclusion: …\" in tests/governed-actions.test.ts.\n *\n * Kept free of `@fabricorg/platform` imports so the fan-out cycle can use it\n * without loading the module factory.\n */\nimport { apply } from \"./snapshot\";\n\nexport const WEBHOOK_DELIVERY_ACTION_EVENT_TYPES = Object.freeze([\n\t\"WebhookSubscriptionCreated\",\n\t\"WebhookSubscriptionUpdated\",\n\t\"WebhookSubscriptionPaused\",\n\t\"WebhookSubscriptionResumed\",\n\t\"WebhookSubscriptionDeleted\",\n\t\"WebhookSecretRotated\",\n\t\"WebhookDeliveryIntentRequeued\",\n\t\"WebhookFanOutJobRequeued\",\n\t\"WebhookFanOutJobActorEnriched\",\n] as const);\n\n/** An event type one of the package's governed actions emits. */\nexport type WebhookDeliveryActionEventType = (typeof WEBHOOK_DELIVERY_ACTION_EVENT_TYPES)[number];\n\nconst includes = Array.prototype.includes;\n\n/** `true` when `eventType` is emitted by one of the package's governed actions. */\nexport function isWebhookDeliveryActionEventType(eventType: unknown): eventType is WebhookDeliveryActionEventType {\n\treturn typeof eventType === \"string\" && apply(includes, WEBHOOK_DELIVERY_ACTION_EVENT_TYPES, [eventType]) === true;\n}\n","import { isWebhookDeliveryActionEventType } from \"./action-events\";\nimport type { WebhookAdmissionDenialCode, WebhookDiagnosticCode } from \"./codes\";\nimport { normalizeWebhookAdmissionDecision } from \"./decisions\";\nimport { renderWebhookDeliveryBodyV1 } from \"./egress\";\nimport { configError, fanOutError, guard } from \"./errors\";\nimport { boundedCall, captureFanOutClock, readFanOutClock, type BoundedOutcome, type FanOutClock } from \"./fan-out-call\";\nimport { readClaimedJobs, readDecided, readOutcome, readRevisions, type ClaimedHeader, type ClaimedJob } from \"./fan-out-read\";\nimport { assertPositiveInteger, resolveWebhookDeliveryLimits, type WebhookDeliveryLimits } from \"./limits\";\nimport type {\n\tWebhookCallOptions,\n\tWebhookDeliveryStore,\n\tWebhookEventAdmission,\n\tWebhookFanOutJobFence,\n\tWebhookRandomSource,\n\tWebhookRetryDelay,\n\tWebhookScopePredicate,\n\tWebhookSubscriptionStore,\n} from \"./ports\";\nimport { createWebhookRetryDelay } from \"./retry\";\nimport { apply, freeze, mathMin, numberIsFinite, primitive } from \"./snapshot\";\nimport { isoOf } from \"./store-input\";\nimport type { WebhookEligibilityRevision, WebhookEventMetadata, WebhookPayloadPolicy } from \"./types\";\n\n/*\n * Stage two of the two-stage fan-out (ADR 0018 decisions 2, 3, 4 and 5).\n *\n * Completeness boundary (R1). A job binds each intent or denial to the\n * eligibility revision whose half-open interval contains the event's\n * `recordedAt`. Host stamps `recordedAt` with its clock; the subscription\n * store stamps each revision's `effectiveFrom` with its own. Until the\n * subscription store's clock has passed `recordedAt`, a pattern change,\n * pause, resume or create written now can still take effect at or before\n * `recordedAt` and change which revision contains it: a late-effective\n * revision. So the cycle evaluates a job only once its eligibility is\n * settled: the cycle's clock is at or past `recordedAt + eligibilitySettleMs`\n * (`settleAtMs` in `processJob` below). Before that it defers the job\n * unprocessed, writing no intent or denial.\n *\n * Two assumptions about clocks, which this package cannot enforce:\n *\n * - Skew. `eligibilitySettleMs` exceeds the skew between this worker's\n * clock and the subscription store's clock, plus the longest time a\n * revision write takes from reading that clock to becoming visible to\n * `listEligibilityRevisions` (a database store's transaction).\n * - No regression. The subscription store's clock never moves backward past\n * an event time this worker has already settled: in practice a monotonic,\n * NTP-slewed clock. A step backward larger than `eligibilitySettleMs` voids\n * the boundary for events settled inside the step.\n *\n * Host's clock does not enter either: `recordedAt` is only compared with\n * this worker's clock, so a Host clock running ahead delays evaluation and\n * nothing else.\n *\n * Under both assumptions the selection is final once settled: a revision\n * written later starts at the subscription store's clock\n * (WebhookSubscriptionWriter; `mathMax(nowMs, ...)` in the memory store's\n * `#transition`), which is then past `recordedAt`, so it cannot contain it.\n * If an assumption is broken and a revision is stamped at or before the\n * `recordedAt` of an event whose job already completed, the revision is not\n * applied to that event retroactively: the completed job stays completed\n * (test \"a revision stamped behind an already-settled event ...\"). The\n * job is complete when `completeFanOutJob` succeeds, which the cycle calls only\n * after every eligible revision has an intent or a recorded denial. After\n * that point nothing adds or removes intents for the event: claims take only\n * pending jobs, a job requeue accepts only dead letters, intent and denial\n * inserts are insert-if-absent per (subscriptionId, eventId), and a Host\n * outbox replay or a bridge insert of the same `eventId` answers\n * `already_present`. A pause, delete or resume written after `recordedAt`\n * does not change the event's revision; it acts on delivery instead\n * (`cancelPendingIntents` and the delivery cycle's pre-handoff check,\n * src/delivery-cycle.ts).\n * If the job cannot complete, it is rescheduled and finally dead-lettered: a\n * visible, recoverable failure (R1, decision 2).\n *\n * Processing deadline (R4). No intent, denial or completion is written for a\n * job at or after its persisted `processingDeadline`, on the store's clock.\n * Every port call made while processing a job is bounded by the smaller of\n * `portTimeoutMs` and the job's remaining lifetime, and its absolute\n * `deadline` is at most the processing deadline (`jobCall` below). The store\n * contract refuses a write whose call deadline has passed when it reaches the\n * write (store contract case \"a call whose signal aborted or whose deadline\n * passed writes nothing\"), and the cycle also rechecks the deadline before\n * each intent or denial write and before completion. Once the deadline has\n * passed, the job goes to the fenced dead-letter transition as\n * `processing_deadline_exceeded`, bounded by `portTimeoutMs` alone.\n *\n * Lease renewal (changed in PR 8). Every fenced write is refused once the\n * lease has expired on the store's clock, and a pass over a job can take\n * longer than one lease: it reads one tombstone per eligible revision on\n * every pass, decided pairs included. So before each port call made for a\n * job (`jobCall`, and the dead-letter transition), the worker renews the\n * job's lease when less than `RENEW_MARGIN_CALLS * portTimeoutMs` of it is\n * left (`keepLease`): enough for that call and the renewal before it. A\n * worker that keeps making calls therefore keeps its job, and each pass\n * gets as far as its port answers allow; a worker that stops (a crash, a\n * stalled event loop) stops renewing and loses the job when the lease runs\n * out. The store decides the renewal like any fenced write, on its own\n * clock, and never extends a lease past the job's processing deadline, so\n * that deadline still bounds the whole job. A refused renewal (literal\n * `false`) means the lease is gone: the pass stops on that job at once and\n * writes nothing more for it (`LEASE_LOST`). A renewal that throws, times\n * out or answers unreadably is unknown; the worker carries on with the\n * lease it last knew of, and the store's fence check decides its next\n * write. The worker tracks the lease's expiry on its own clock from the\n * `now` and `leaseDurationMs` it sent with the claim and each renewal; a\n * store clock running ahead of the worker's by more than `portTimeoutMs`\n * can still expire a lease the worker thinks it holds, which the store's\n * fence check then refuses (`lease_lost`).\n */\n\n/** What decides whether a subscription revision needs the event's actor identity. */\nexport interface WebhookActorRequirementInput {\n\treadonly subscriptionId: string;\n\treadonly eligibilityRevision: number;\n\treadonly tenantId: string;\n\treadonly spaceId: string;\n\treadonly event: WebhookEventMetadata;\n}\n\n/** Options for {@link runWebhookFanOutCycle}. */\nexport interface WebhookFanOutCycleOptions {\n\treadonly deliveries: WebhookDeliveryStore;\n\treadonly subscriptions: WebhookSubscriptionStore;\n\treadonly admission: WebhookEventAdmission;\n\treadonly clock: { now(): Date };\n\t/** The lease owner this worker claims jobs as. */\n\treadonly workerId: string;\n\t/** The egress allowlist the intent bodies are rendered with (decision 9). */\n\treadonly policy: WebhookPayloadPolicy;\n\t/** Consulted for scoped event types when rendering a body. */\n\treadonly scopePredicate?: WebhookScopePredicate;\n\t/**\n\t * Whether admission for a revision needs actor identity (decision 5).\n\t * Required, so the choice is explicit. `true`, or a function returning\n\t * anything but a literal `false` (a throw included), makes a job whose\n\t * actor is `suppressed` or `legacy` `unavailable` for that revision\n\t * without calling admission: the job retries and finally dead-letters,\n\t * and actor enrichment (PR 9) repairs a legacy one.\n\t */\n\treadonly actorRequired: boolean | ((input: WebhookActorRequirementInput) => boolean);\n\t/**\n\t * Overrides of {@link WebhookDeliveryLimits}, all validated positive and\n\t * finite (R4). Used: `maxFanOutAttempts`, `fanOutRetryDelaysMs`,\n\t * `retryJitterRatio`, `portTimeoutMs`, `deliveryDeadlineMs` (each new\n\t * intent's processing deadline).\n\t */\n\treadonly limits?: Partial<WebhookDeliveryLimits>;\n\t/** Delay before the next attempt; defaults to `fanOutRetryDelaysMs` with jitter from `random`. */\n\treadonly retryDelay?: WebhookRetryDelay;\n\t/** Random source for the default retry delay's jitter; required when `retryDelay` is absent. */\n\treadonly random?: WebhookRandomSource;\n\t/** Jobs claimed per cycle. A positive whole number; default 25. */\n\treadonly batchSize?: number;\n\t/**\n\t * Lease on each claimed job, in ms; renewed while the job is processed\n\t * (see \"Lease renewal\" above). A positive whole number above\n\t * `3 * portTimeoutMs`; default 60 000.\n\t */\n\treadonly leaseDurationMs?: number;\n\t/**\n\t * How long after `recordedAt`, on this worker's clock, an event's\n\t * eligibility is treated as settled (see the completeness boundary\n\t * above). It must exceed the skew between this worker's clock and the\n\t * subscription store's, plus the longest revision write. A positive whole\n\t * number of ms below `fanOutDeadlineMs`; default 5 000.\n\t */\n\treadonly eligibilitySettleMs?: number;\n\t/** Creates each intent's `deliveryId`; defaults to `dlv_` plus a random UUID. */\n\treadonly createDeliveryId?: (input: { readonly subscriptionId: string; readonly eventId: string }) => string;\n\t/** Stops the cycle between jobs; the rest of the claimed jobs are reclaimed after their leases expire. */\n\treadonly signal?: AbortSignal;\n}\n\n/** What one cycle did. */\nexport interface WebhookFanOutCycleResult {\n\treadonly claimed: number;\n\t/** Jobs marked complete. */\n\treadonly completed: number;\n\t/** Jobs deferred unprocessed because their eligibility was not yet settled. */\n\treadonly deferred: number;\n\t/** Jobs returned to pending after an unavailable admission or a failed port. */\n\treadonly rescheduled: number;\n\treadonly deadLettered: number;\n\t/** Jobs this worker stopped on because a fenced write or a lease renewal found its lease gone. */\n\treadonly leaseLost: number;\n\t/**\n\t * Jobs left for lease expiry, with nothing more written: a record whose\n\t * identity or lease could not be read, one leased to another owner, or\n\t * one whose final fenced write threw or timed out. A final write that\n\t * timed out may have committed (README, \"Bounds and late results\"); the\n\t * job is then completed, rescheduled or dead-lettered as that write said.\n\t */\n\treadonly abandoned: number;\n\t/** Intent inserts the store confirmed. One that timed out may have committed and is not counted. */\n\treadonly intentsInserted: number;\n\t/** Denial inserts the store confirmed, counted like `intentsInserted`. */\n\treadonly denialsRecorded: number;\n}\n\n/** Defaults for the cycle's own options. */\nexport const DEFAULT_WEBHOOK_FAN_OUT_CYCLE = freeze({\n\tbatchSize: 25,\n\tleaseDurationMs: 60_000,\n\teligibilitySettleMs: 5_000,\n});\n\n/**\n * Whether an event type matches one subscription pattern. `*` matches every\n * type; a pattern ending in `.*` matches every type that starts with the\n * part before `*` (so `orders.*` matches `orders.OrderAccepted` and\n * `orders.lines.Added`, not `orders`); any other pattern must equal the type.\n * A `*` anywhere else is literal.\n *\n * The event types the package's own governed actions emit\n * (`WEBHOOK_DELIVERY_ACTION_EVENT_TYPES`) match no pattern, `*` included\n * (ADR 0018 decision 9). This is the only place a pattern is compared with\n * an event type (`isEligible` below calls it), so the exclusion holds for\n * every subscription whatever its patterns.\n */\nexport function matchesWebhookEventTypePattern(pattern: string, eventType: string): boolean {\n\tif (typeof pattern !== \"string\" || typeof eventType !== \"string\") return false;\n\tif (isWebhookDeliveryActionEventType(eventType)) return false;\n\tif (pattern === \"*\") return true;\n\tif (pattern.length > 2 && pattern.endsWith(\".*\")) return eventType.startsWith(pattern.slice(0, -1));\n\treturn pattern === eventType;\n}\n\nconst randomUUID: (() => string) | undefined =\n\ttypeof globalThis.crypto?.randomUUID === \"function\" ? globalThis.crypto.randomUUID.bind(globalThis.crypto) : undefined;\n\ninterface Config {\n\treadonly deliveries: WebhookDeliveryStore;\n\treadonly subscriptions: WebhookSubscriptionStore;\n\treadonly admission: WebhookEventAdmission;\n\treadonly clock: FanOutClock;\n\treadonly workerId: string;\n\treadonly policy: WebhookPayloadPolicy;\n\treadonly scopePredicate: WebhookScopePredicate | undefined;\n\treadonly actorRequired: boolean | ((input: WebhookActorRequirementInput) => boolean);\n\treadonly limits: WebhookDeliveryLimits;\n\treadonly retryDelay: WebhookRetryDelay;\n\treadonly batchSize: number;\n\treadonly leaseDurationMs: number;\n\treadonly settleMs: number;\n\treadonly createDeliveryId: (input: { readonly subscriptionId: string; readonly eventId: string }) => string;\n\treadonly signal: AbortSignal | undefined;\n}\n\nfunction hasMethods(value: unknown, names: readonly string[]): boolean {\n\tif (value === null || typeof value !== \"object\") return false;\n\tfor (const name of names) if (typeof (value as Record<string, unknown>)[name] !== \"function\") return false;\n\treturn true;\n}\n\n/** A cycle option that must be a positive whole number (R4), or its default. */\nfunction positiveWhole(value: unknown, fallback: number, field: string): number {\n\tconst read = primitive(value);\n\tconst resolved = read === undefined ? fallback : read;\n\tassertPositiveInteger(resolved, field);\n\treturn resolved;\n}\n\n/**\n * Read and validate the options. A package error (a limit, a missing port)\n * passes through with its code; anything else thrown while reading them, by\n * a getter or a Proxy trap, is replaced unread with `options_invalid`.\n */\nfunction readConfig(options: WebhookFanOutCycleOptions): Config {\n\treturn guard(() => readConfigUnguarded(options), () => fanOutError(\"options_invalid\", \"options\"));\n}\n\nfunction readConfigUnguarded(options: WebhookFanOutCycleOptions): Config {\n\tif (options === null || typeof options !== \"object\") throw fanOutError(\"options_invalid\", \"options\");\n\tconst limits = resolveWebhookDeliveryLimits(options.limits ?? {});\n\tconst batchSize = positiveWhole(options.batchSize, DEFAULT_WEBHOOK_FAN_OUT_CYCLE.batchSize, \"batchSize\");\n\tconst leaseDurationMs = positiveWhole(options.leaseDurationMs, DEFAULT_WEBHOOK_FAN_OUT_CYCLE.leaseDurationMs, \"leaseDurationMs\");\n\tconst settleMs = positiveWhole(options.eligibilitySettleMs, DEFAULT_WEBHOOK_FAN_OUT_CYCLE.eligibilitySettleMs, \"eligibilitySettleMs\");\n\t// A renewed lease must outlast the renewal call and the margin after it,\n\t// or the worker would renew before every call (see \"Lease renewal\").\n\tif (leaseDurationMs <= (RENEW_MARGIN_CALLS + 1) * limits.portTimeoutMs) throw configError(\"limit_out_of_range\", \"leaseDurationMs\");\n\t// A job whose settle point is past its processing deadline could never be evaluated.\n\tif (settleMs >= limits.fanOutDeadlineMs) throw configError(\"limit_out_of_range\", \"eligibilitySettleMs\");\n\tif (!hasMethods(options.deliveries, [\"claimFanOutJobs\", \"renewFanOutJobLease\", \"completeFanOutJob\", \"rescheduleFanOutJob\", \"deadLetterFanOutJob\", \"insertDeliveryIntent\", \"recordAdmissionDenial\", \"readTombstone\"])) {\n\t\tthrow fanOutError(\"options_invalid\", \"deliveries\");\n\t}\n\tif (!hasMethods(options.subscriptions, [\"listEligibilityRevisions\"])) throw fanOutError(\"options_invalid\", \"subscriptions\");\n\tif (!hasMethods(options.admission, [\"admit\"])) throw fanOutError(\"options_invalid\", \"admission\");\n\tif (typeof options.workerId !== \"string\" || options.workerId === \"\") throw fanOutError(\"options_invalid\", \"workerId\");\n\tconst actorRequired = options.actorRequired;\n\tif (typeof actorRequired !== \"boolean\" && typeof actorRequired !== \"function\") throw fanOutError(\"options_invalid\", \"actorRequired\");\n\tif (options.scopePredicate !== undefined && typeof options.scopePredicate !== \"function\") throw fanOutError(\"options_invalid\", \"scopePredicate\");\n\tif (options.signal !== undefined && !(options.signal instanceof AbortSignal)) throw fanOutError(\"options_invalid\", \"signal\");\n\tlet retryDelay: WebhookRetryDelay;\n\tif (options.retryDelay !== undefined) {\n\t\tif (typeof options.retryDelay !== \"function\") throw fanOutError(\"options_invalid\", \"retryDelay\");\n\t\tretryDelay = options.retryDelay;\n\t} else {\n\t\tretryDelay = createWebhookRetryDelay({ delaysMs: limits.fanOutRetryDelaysMs, jitterRatio: limits.retryJitterRatio, random: options.random! });\n\t}\n\tlet createDeliveryId = options.createDeliveryId;\n\tif (createDeliveryId === undefined) {\n\t\tif (randomUUID === undefined) throw fanOutError(\"options_invalid\", \"createDeliveryId\");\n\t\tconst uuid = randomUUID;\n\t\tcreateDeliveryId = () => `dlv_${uuid()}`;\n\t} else if (typeof createDeliveryId !== \"function\") {\n\t\tthrow fanOutError(\"options_invalid\", \"createDeliveryId\");\n\t}\n\treturn freeze({\n\t\tdeliveries: options.deliveries,\n\t\tsubscriptions: options.subscriptions,\n\t\tadmission: options.admission,\n\t\tclock: captureFanOutClock(options.clock),\n\t\tworkerId: options.workerId,\n\t\tpolicy: options.policy,\n\t\tscopePredicate: options.scopePredicate,\n\t\tactorRequired,\n\t\tlimits,\n\t\tretryDelay,\n\t\tbatchSize,\n\t\tleaseDurationMs,\n\t\tsettleMs,\n\t\tcreateDeliveryId,\n\t\tsignal: options.signal,\n\t});\n}\n\ninterface Counters {\n\tclaimed: number;\n\tcompleted: number;\n\tdeferred: number;\n\trescheduled: number;\n\tdeadLettered: number;\n\tleaseLost: number;\n\tabandoned: number;\n\tintentsInserted: number;\n\tdenialsRecorded: number;\n}\n\n/**\n * Run one fan-out cycle: claim up to `batchSize` pending jobs under a fenced\n * lease and process each in turn. A claimed record whose `eventId`,\n * `tenantId`, `spaceId` or lease cannot be read is left for lease expiry\n * (`abandoned`); one whose identity and lease can be read but whose body\n * cannot is dead-lettered as `job_unreadable` without being processed. For\n * each readable job, in order:\n *\n * 1. Past its processing deadline (persisted at creation; deferrals and\n * reclaims count toward it, R4): dead-letter `processing_deadline_exceeded`.\n * 2. Eligibility not yet settled (`recordedAt + eligibilitySettleMs` still\n * ahead): defer it to that time, unprocessed, as `eligibility_unsettled`.\n * The store's reschedule spends one attempt, so a deferred job has one\n * attempt fewer for failures.\n * 3. List the revisions containing `recordedAt` in the job's tenant and\n * space. Each `active` revision whose patterns match the event type is\n * eligible; a paused or deleted one gets neither intent nor denial.\n * 4. For each eligible revision, in `subscriptionId` order: a pair that\n * already has an intent or a denial (its tombstone) is decided and\n * admission is not asked again. Otherwise, when the revision needs an\n * actor and the job has none (`suppressed` or `legacy`), it is\n * `unavailable`; else admission decides, with a throw, a timeout or an\n * unreadable answer read as `unavailable`. `allow` renders the v1 body and\n * inserts an intent; `deny` records a denial with its code; `unavailable`\n * writes nothing and leaves the job incomplete.\n * 5. Every eligible revision decided: complete the job. Otherwise\n * reschedule it after `retryDelay(attempt)`, or dead-letter it when the\n * attempts are spent or the next attempt would fall past its deadline.\n *\n * Every port call in steps 3 to 5, except the dead-letter transition (bounded\n * by `portTimeoutMs` alone), is bounded by the smaller of\n * `portTimeoutMs` and the job's remaining lifetime; once the processing\n * deadline has passed the job is dead-lettered and nothing else is written\n * for it (see \"Processing deadline\" above). Every port result is read through\n * `src/fan-out-read.ts`, so a getter or Proxy trap in it cannot throw out of\n * the cycle; an unreadable result counts as that port being unavailable.\n *\n * Every write is fenced by the job's lease, which the worker renews while\n * it works (see \"Lease renewal\" above). When the store answers\n * `lease_lost`, a fenced transition answers `false`, or a renewal is\n * refused, the worker stops on that job and writes nothing more for it. A\n * read or an insert that throws or times out stops the job and reschedules\n * it; an insert that timed out may have committed, and the next attempt\n * finds it `already_present`. A final transition (completion, reschedule,\n * dead letter) that throws or times out may have committed too, so nothing\n * follows it: the job is `abandoned`, and a later claim finds it as that\n * transition left it. Inserts already made stay.\n *\n * @throws {WebhookDeliveryConfigError} for a limit or cycle option that is\n * not positive and finite (R4).\n * @throws {WebhookFanOutError} `options_invalid` for a missing port or\n * option; `fan_out_store_failed` or `fan_out_store_timeout` when the claim\n * fails; `clock_invalid` for a failing clock.\n */\nexport async function runWebhookFanOutCycle(options: WebhookFanOutCycleOptions): Promise<WebhookFanOutCycleResult> {\n\tconst config = readConfig(options);\n\tconst counters: Counters = { claimed: 0, completed: 0, deferred: 0, rescheduled: 0, deadLettered: 0, leaseLost: 0, abandoned: 0, intentsInserted: 0, denialsRecorded: 0 };\n\tconst nowMs = readFanOutClock(config.clock);\n\tconst claimed = await bounded(config, nowMs, (callOptions) => config.deliveries.claimFanOutJobs({\n\t\tworkerId: config.workerId,\n\t\tleaseDurationMs: config.leaseDurationMs,\n\t\tlimit: config.batchSize,\n\t\tnow: new Date(nowMs),\n\t}, callOptions));\n\tif (!claimed.ok) throw fanOutError(claimed.reason === \"timeout\" ? \"fan_out_store_timeout\" : \"fan_out_store_failed\", \"claimFanOutJobs\");\n\tconst jobs = readClaimedJobs(claimed.value);\n\tif (jobs === undefined) throw fanOutError(\"fan_out_store_failed\", \"claimFanOutJobs\");\n\tcounters.claimed = jobs.length;\n\t// The expiry this worker asked for; the store sets it from the same `now`.\n\tconst claimedUntilMs = nowMs + config.leaseDurationMs;\n\tfor (const entry of jobs) {\n\t\tif (config.signal?.aborted) break;\n\t\t// A record whose identity or lease cannot be read cannot be named by a\n\t\t// fenced write, and one leased to another owner is not this worker's:\n\t\t// either is left for lease expiry, with nothing written.\n\t\tif (entry === undefined || entry.header.lease.owner !== config.workerId) {\n\t\t\tcounters.abandoned += 1;\n\t\t\tcontinue;\n\t\t}\n\t\ttry {\n\t\t\t// A readable header with a body that cannot be read (A2): the job can\n\t\t\t// never be processed, so it ends now through the fenced dead-letter\n\t\t\t// transition, instead of returning to pending on every lease expiry.\n\t\t\t// Its processing deadline is in the body, so it is unknown here; the\n\t\t\t// store still caps a renewal at it.\n\t\t\tif (entry.job === undefined) {\n\t\t\t\tawait deadLetter(config, jobLease(config, entry.header, claimedUntilMs, Infinity), counters, \"job_unreadable\");\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tawait processJob(config, entry.job, jobLease(config, entry.header, claimedUntilMs, entry.job.processingDeadlineMs), counters);\n\t\t} catch (stopped) {\n\t\t\t// A refused renewal: the lease is gone, and nothing more is written for this job.\n\t\t\tif (stopped !== LEASE_LOST) throw stopped;\n\t\t\tcounters.leaseLost += 1;\n\t\t}\n\t}\n\treturn freeze({ ...counters });\n}\n\n/** A port call bounded by `portTimeoutMs` only: the claim, and the dead-letter transition. */\nfunction bounded<T>(config: Config, nowMs: number, run: (options: WebhookCallOptions) => Promise<T>): Promise<BoundedOutcome<T>> {\n\treturn boundedCall(nowMs, config.limits.portTimeoutMs, config.signal, run, () => readFanOutClock(config.clock));\n}\n\n/**\n * The lease this worker holds on one claimed job: the fence every write for\n * it carries (its `eventId`, this worker, the claim's fence), the expiry\n * this worker last asked for, on its own clock, and the job's processing\n * deadline (`Infinity` when the body that holds it could not be read).\n */\ninterface JobLease {\n\treadonly parent: WebhookFanOutJobFence;\n\texpiresAtMs: number;\n\treadonly deadlineMs: number;\n}\n\nfunction jobLease(config: Config, header: ClaimedHeader, expiresAtMs: number, deadlineMs: number): JobLease {\n\treturn { parent: freeze({ eventId: header.eventId, owner: config.workerId, fence: header.lease.fence }), expiresAtMs, deadlineMs };\n}\n\n/**\n * Thrown by {@link keepLease} when the store refuses a renewal, and caught\n * only by `runWebhookFanOutCycle`'s loop: it unwinds the job's processing\n * at once, so nothing more is written for that job. A package-owned object,\n * so no port can throw it.\n */\nconst LEASE_LOST: object = freeze(Object.create(null) as object);\n\n/** Renew when less than this many `portTimeoutMs` of the lease is left: the renewal, then the call it precedes. */\nconst RENEW_MARGIN_CALLS = 2;\n\n/**\n * Keep the job's lease for the next call (see \"Lease renewal\" above). Renews\n * when less than `RENEW_MARGIN_CALLS * portTimeoutMs` is left. Throws\n * {@link LEASE_LOST} on a refusal; carries on when the renewal's outcome is\n * unknown.\n */\nasync function keepLease(config: Config, lease: JobLease): Promise<void> {\n\tconst nowMs = readFanOutClock(config.clock);\n\tif (lease.expiresAtMs - nowMs >= RENEW_MARGIN_CALLS * config.limits.portTimeoutMs) return;\n\tconst { parent } = lease;\n\tconst renewed = await bounded(config, nowMs, (callOptions) => config.deliveries.renewFanOutJobLease({\n\t\teventId: parent.eventId,\n\t\towner: parent.owner,\n\t\tfence: parent.fence,\n\t\tnow: new Date(nowMs),\n\t\tleaseDurationMs: config.leaseDurationMs,\n\t}, callOptions));\n\tif (renewed.ok && renewed.value === true) {\n\t\t// The store's rule: never shorter than before, never past the processing deadline.\n\t\tconst untilMs = mathMin(nowMs + config.leaseDurationMs, lease.deadlineMs);\n\t\tif (untilMs > lease.expiresAtMs) lease.expiresAtMs = untilMs;\n\t\treturn;\n\t}\n\tif (renewed.ok && renewed.value === false) throw LEASE_LOST;\n}\n\n/** One job being processed: its lease and its persisted processing deadline. */\ninterface JobRun {\n\treadonly config: Config;\n\treadonly job: ClaimedJob;\n\treadonly lease: JobLease;\n\treadonly parent: WebhookFanOutJobFence;\n\treadonly deadlineMs: number;\n\treadonly counters: Counters;\n}\n\ntype JobOutcome<T> = BoundedOutcome<T> | { readonly ok: false; readonly reason: \"deadline\" };\n\n/**\n * A port call made while processing a job (R4). It is not made at all once\n * the job's processing deadline has passed, and otherwise it is bounded by\n * the smaller of `portTimeoutMs` and the job's remaining lifetime, so its\n * absolute `deadline`, which the store checks at its write, is never later\n * than the processing deadline. The job's lease is renewed first when it\n * must be (`keepLease`), so the call can finish inside the lease.\n */\nasync function jobCall<T>(run: JobRun, call: (options: WebhookCallOptions, nowMs: number) => Promise<T>): Promise<JobOutcome<T>> {\n\tif (!(run.deadlineMs - readFanOutClock(run.config.clock) > 0)) return { ok: false, reason: \"deadline\" };\n\tawait keepLease(run.config, run.lease);\n\tconst nowMs = readFanOutClock(run.config.clock);\n\tconst remainingMs = run.deadlineMs - nowMs;\n\tif (!(remainingMs > 0)) return { ok: false, reason: \"deadline\" };\n\tconst timeoutMs = remainingMs < run.config.limits.portTimeoutMs ? remainingMs : run.config.limits.portTimeoutMs;\n\treturn boundedCall(nowMs, timeoutMs, run.config.signal, (options) => call(options, nowMs), () => readFanOutClock(run.config.clock));\n}\n\nfunction failureDiagnostic(reason: \"threw\" | \"timeout\" | \"aborted\" | \"deadline\", unavailable: WebhookDiagnosticCode): WebhookDiagnosticCode {\n\tif (reason === \"deadline\") return \"processing_deadline_exceeded\";\n\treturn reason === \"timeout\" ? \"port_timeout\" : unavailable;\n}\n\ntype Decision =\n\t| { readonly kind: \"allow\" }\n\t| { readonly kind: \"deny\"; readonly code: WebhookAdmissionDenialCode }\n\t| { readonly kind: \"decided\" }\n\t| { readonly kind: \"unavailable\"; readonly diagnostic: WebhookDiagnosticCode };\n\n/** Why processing a job stopped early. */\ntype Stop =\n\t| { readonly kind: \"lease_lost\" }\n\t| { readonly kind: \"past_horizon\" }\n\t| { readonly kind: \"failed\"; readonly diagnostic: WebhookDiagnosticCode };\n\nasync function processJob(config: Config, job: ClaimedJob, lease: JobLease, counters: Counters): Promise<void> {\n\t// Both are finite: `readClaimedJobs` refuses a body whose dates do not parse.\n\tconst deadlineMs = job.processingDeadlineMs;\n\tconst run: JobRun = { config, job, lease, parent: lease.parent, deadlineMs, counters };\n\tconst nowMs = readFanOutClock(config.clock);\n\n\t// R4: the processing deadline was persisted when the job was created.\n\tif (nowMs >= deadlineMs) return deadLetterRun(run, \"processing_deadline_exceeded\");\n\n\t// R1: the completeness boundary. Nothing is decided for this event until\n\t// no revision written from now on can take effect at or before recordedAt.\n\tconst settleAtMs = job.recordedAtMs + config.settleMs;\n\tif (nowMs < settleAtMs) {\n\t\tif (settleAtMs >= deadlineMs) return deadLetterRun(run, \"processing_deadline_exceeded\");\n\t\treturn reschedule(run, settleAtMs, \"eligibility_unsettled\", \"deferred\");\n\t}\n\n\tconst listed = await jobCall(run, (callOptions) => config.subscriptions.listEligibilityRevisions(\n\t\t{ tenantId: job.tenantId, spaceId: job.spaceId, recordedAt: job.event.recordedAt },\n\t\tcallOptions,\n\t));\n\tif (!listed.ok) return retryOrDeadLetter(run, failureDiagnostic(listed.reason, \"subscription_store_unavailable\"));\n\tconst revisions = readRevisions(listed.value);\n\tif (revisions === undefined) return retryOrDeadLetter(run, \"subscription_store_unavailable\");\n\n\tlet incomplete: WebhookDiagnosticCode | undefined;\n\tfor (const revision of revisions) {\n\t\tif (!isEligible(revision, job)) continue;\n\t\tconst decision = await decide(run, revision);\n\t\tif (decision.kind === \"decided\") continue;\n\t\tif (decision.kind === \"unavailable\") {\n\t\t\t// A store failure or the deadline stops the job; an admission outage\n\t\t\t// leaves this pair open and moves on to the next one.\n\t\t\tif (decision.diagnostic === \"processing_deadline_exceeded\" || decision.diagnostic === \"delivery_store_unavailable\") {\n\t\t\t\treturn retryOrDeadLetter(run, decision.diagnostic);\n\t\t\t}\n\t\t\tincomplete ??= decision.diagnostic;\n\t\t\tcontinue;\n\t\t}\n\t\tconst stop = decision.kind === \"allow\" ? await insertIntent(run, revision) : await recordDenial(run, revision, decision.code);\n\t\tif (stop === undefined) continue;\n\t\tif (stop.kind === \"lease_lost\") {\n\t\t\t// Another worker holds the job now; this one writes nothing more for it.\n\t\t\tcounters.leaseLost += 1;\n\t\t\treturn;\n\t\t}\n\t\tif (stop.kind === \"past_horizon\") return deadLetterRun(run, \"processing_deadline_exceeded\");\n\t\tif (stop.diagnostic === \"intent_build_failed\") {\n\t\t\tincomplete ??= stop.diagnostic;\n\t\t\tcontinue;\n\t\t}\n\t\treturn retryOrDeadLetter(run, stop.diagnostic);\n\t}\n\tif (incomplete !== undefined) return retryOrDeadLetter(run, incomplete);\n\n\t// `jobCall` rechecks the deadline here, and the store checks the call deadline again at its write.\n\tconst done = await jobCall(run, (callOptions, now) =>\n\t\tconfig.deliveries.completeFanOutJob({ eventId: job.eventId, owner: run.parent.owner, fence: run.parent.fence, now: new Date(now) }, callOptions));\n\t// Only a completion that was never sent is followed by the dead letter. One\n\t// that threw or timed out may have committed, so nothing follows it: the\n\t// job is `abandoned`, and if it is still pending a later claim finds it\n\t// past its deadline and dead-letters it then.\n\tif (!done.ok && done.reason === \"deadline\") return deadLetterRun(run, \"processing_deadline_exceeded\");\n\tsettleCount(done, counters, \"completed\");\n}\n\n/** An `active` revision in the job's own scope whose patterns match the event type. */\nfunction isEligible(revision: WebhookEligibilityRevision, job: ClaimedJob): boolean {\n\tif (revision.status !== \"active\") return false;\n\t// Decision 9: a job reads revisions only for its own tenant and space.\n\tif (revision.tenantId !== job.tenantId || revision.spaceId !== job.spaceId) return false;\n\tfor (const pattern of revision.eventTypePatterns) {\n\t\tif (matchesWebhookEventTypePattern(pattern, job.event.eventType)) return true;\n\t}\n\treturn false;\n}\n\nfunction actorRequiredFor(config: Config, job: ClaimedJob, revision: WebhookEligibilityRevision): boolean {\n\tconst required = config.actorRequired;\n\tif (typeof required === \"boolean\") return required;\n\ttry {\n\t\t// Fail closed: only a literal `false` waives the actor.\n\t\treturn apply(required, undefined, [freeze({\n\t\t\tsubscriptionId: revision.subscriptionId,\n\t\t\teligibilityRevision: revision.revision,\n\t\t\ttenantId: job.tenantId,\n\t\t\tspaceId: job.spaceId,\n\t\t\tevent: job.event,\n\t\t})]) !== false;\n\t} catch {\n\t\treturn true;\n\t}\n}\n\nasync function decide(run: JobRun, revision: WebhookEligibilityRevision): Promise<Decision> {\n\tconst { config, job } = run;\n\t// A pair with an intent or a denial (their tombstone) is decided: a retry\n\t// or a re-claim does not ask admission again, so an admission outage\n\t// after the decision cannot hold the job open.\n\tconst marker = await jobCall(run, (callOptions) => config.deliveries.readTombstone(\n\t\t{ tenantId: job.tenantId, spaceId: job.spaceId, subscriptionId: revision.subscriptionId, eventId: job.eventId },\n\t\tcallOptions,\n\t));\n\tif (!marker.ok) return { kind: \"unavailable\", diagnostic: failureDiagnostic(marker.reason, \"delivery_store_unavailable\") };\n\tconst decided = readDecided(marker.value);\n\tif (decided === undefined) return { kind: \"unavailable\", diagnostic: \"delivery_store_unavailable\" };\n\tif (decided === \"decided\") return { kind: \"decided\" };\n\n\t// Decision 5: suppressed and legacy absence are both `unavailable` for a\n\t// revision that needs the actor; admission is not asked.\n\tif (job.actor.state !== \"present\" && actorRequiredFor(config, job, revision)) {\n\t\treturn { kind: \"unavailable\", diagnostic: \"admission_unavailable\" };\n\t}\n\tconst answer = await jobCall(run, (callOptions) => config.admission.admit({\n\t\tsubscriptionId: revision.subscriptionId,\n\t\teligibilityRevision: revision.revision,\n\t\tevent: job.event,\n\t\tfacts: job.facts,\n\t\tactor: job.actor,\n\t}, callOptions));\n\t// Decision 4: a throw or a timeout is `unavailable`, and no intent is written.\n\tif (!answer.ok) return { kind: \"unavailable\", diagnostic: failureDiagnostic(answer.reason, \"admission_unavailable\") };\n\t// Total: an answer that cannot be read is `unavailable`, never `allow`.\n\tconst decision = normalizeWebhookAdmissionDecision(answer.value);\n\tif (decision.decision === \"allow\") return { kind: \"allow\" };\n\tif (decision.decision === \"deny\") return { kind: \"deny\", code: decision.code };\n\treturn { kind: \"unavailable\", diagnostic: \"admission_unavailable\" };\n}\n\nconst INSERT_OUTCOMES = freeze([\"inserted\", \"already_present\", \"lease_lost\", \"past_horizon\"] as const);\n\n/** Read a fenced insert's answer: `\"inserted\"`, `undefined` to continue, or why to stop. */\nfunction insertStop(outcome: JobOutcome<unknown>): Stop | undefined | \"inserted\" {\n\tif (!outcome.ok) return { kind: \"failed\", diagnostic: failureDiagnostic(outcome.reason, \"delivery_store_unavailable\") };\n\tconst answer = readOutcome(outcome.value, INSERT_OUTCOMES);\n\tif (answer === \"inserted\") return \"inserted\";\n\tif (answer === \"already_present\") return undefined;\n\tif (answer === \"lease_lost\") return { kind: \"lease_lost\" };\n\tif (answer === \"past_horizon\") return { kind: \"past_horizon\" };\n\treturn { kind: \"failed\", diagnostic: \"delivery_store_unavailable\" };\n}\n\nasync function insertIntent(run: JobRun, revision: WebhookEligibilityRevision): Promise<Stop | undefined> {\n\tconst { config, job } = run;\n\tlet deliveryId: string;\n\tlet body: string;\n\ttry {\n\t\tdeliveryId = apply(config.createDeliveryId, undefined, [freeze({ subscriptionId: revision.subscriptionId, eventId: job.eventId })]) as string;\n\t\tif (typeof deliveryId !== \"string\") throw fanOutError(\"options_invalid\", \"createDeliveryId\");\n\t\tbody = renderWebhookDeliveryBodyV1({\n\t\t\tjob,\n\t\t\tsubscription: { subscriptionId: revision.subscriptionId, tenantId: revision.tenantId, spaceId: revision.spaceId },\n\t\t\tpolicy: config.policy,\n\t\t\tscopePredicate: config.scopePredicate,\n\t\t\tdeliveryId,\n\t\t}).rawBody;\n\t} catch {\n\t\treturn { kind: \"failed\", diagnostic: \"intent_build_failed\" };\n\t}\n\t// `jobCall` refuses to start once the deadline has passed and caps the call deadline at it.\n\tconst outcome = await jobCall(run, (callOptions, nowMs) => config.deliveries.insertDeliveryIntent({\n\t\tdeliveryId,\n\t\tsubscriptionId: revision.subscriptionId,\n\t\teventId: job.eventId,\n\t\ttenantId: job.tenantId,\n\t\tspaceId: job.spaceId,\n\t\teligibilityRevision: revision.revision,\n\t\tbody,\n\t\tavailableAt: isoOf(nowMs),\n\t\tprocessingDeadline: isoOf(nowMs + config.limits.deliveryDeadlineMs),\n\t\tcreatedAt: isoOf(nowMs),\n\t}, run.parent, callOptions));\n\tconst stop = insertStop(outcome);\n\tif (stop === \"inserted\") {\n\t\trun.counters.intentsInserted += 1;\n\t\treturn undefined;\n\t}\n\treturn stop;\n}\n\nasync function recordDenial(run: JobRun, revision: WebhookEligibilityRevision, code: WebhookAdmissionDenialCode): Promise<Stop | undefined> {\n\tconst { config, job } = run;\n\tconst outcome = await jobCall(run, (callOptions, nowMs) => config.deliveries.recordAdmissionDenial({\n\t\tsubscriptionId: revision.subscriptionId,\n\t\teventId: job.eventId,\n\t\ttenantId: job.tenantId,\n\t\tspaceId: job.spaceId,\n\t\teligibilityRevision: revision.revision,\n\t\tcode,\n\t\trecordedAt: isoOf(nowMs),\n\t}, run.parent, callOptions));\n\tconst stop = insertStop(outcome);\n\tif (stop === \"inserted\") {\n\t\trun.counters.denialsRecorded += 1;\n\t\treturn undefined;\n\t}\n\treturn stop;\n}\n\n/**\n * Count a fenced transition. Only a literal `true` is done and a literal\n * `false` is a lost lease; anything else, a failed call included, leaves the\n * job for lease expiry. The comparisons run no code of the value.\n */\nfunction settleCount(outcome: JobOutcome<unknown>, counters: Counters, done: \"completed\" | \"deferred\" | \"rescheduled\" | \"deadLettered\"): void {\n\tif (outcome.ok && outcome.value === true) counters[done] += 1;\n\telse if (outcome.ok && outcome.value === false) counters.leaseLost += 1;\n\telse counters.abandoned += 1;\n}\n\nasync function retryOrDeadLetter(run: JobRun, diagnostic: WebhookDiagnosticCode): Promise<void> {\n\tconst { config, job } = run;\n\tconst nowMs = readFanOutClock(config.clock);\n\tif (nowMs >= run.deadlineMs) return deadLetterRun(run, \"processing_deadline_exceeded\");\n\tconst attempt = job.attemptCount + 1;\n\tif (attempt >= config.limits.maxFanOutAttempts) return deadLetterRun(run, diagnostic);\n\tlet delayMs: number;\n\ttry {\n\t\tdelayMs = apply(config.retryDelay, undefined, [attempt]) as number;\n\t} catch {\n\t\tdelayMs = NaN;\n\t}\n\t// A retry delay that is not a non-negative finite number falls back to\n\t// the longest configured delay rather than retrying at once.\n\tif (typeof delayMs !== \"number\" || !numberIsFinite(delayMs) || delayMs < 0) {\n\t\tconst delays = config.limits.fanOutRetryDelaysMs;\n\t\tdelayMs = delays[delays.length - 1]!;\n\t}\n\tconst availableAtMs = nowMs + delayMs;\n\tif (availableAtMs >= run.deadlineMs) return deadLetterRun(run, \"processing_deadline_exceeded\");\n\treturn reschedule(run, availableAtMs, diagnostic, \"rescheduled\");\n}\n\nasync function reschedule(run: JobRun, availableAtMs: number, diagnostic: WebhookDiagnosticCode, done: \"deferred\" | \"rescheduled\"): Promise<void> {\n\tconst { config, job, parent } = run;\n\tconst outcome = await jobCall(run, (callOptions, nowMs) => config.deliveries.rescheduleFanOutJob({\n\t\teventId: job.eventId,\n\t\towner: parent.owner,\n\t\tfence: parent.fence,\n\t\tnow: new Date(nowMs),\n\t\tavailableAt: new Date(availableAtMs),\n\t\tdiagnostic,\n\t}, callOptions));\n\t// As for completion: only a reschedule that was never sent is followed by\n\t// the dead letter; one that threw or timed out may have committed.\n\tif (!outcome.ok && outcome.reason === \"deadline\") return deadLetterRun(run, \"processing_deadline_exceeded\");\n\tsettleCount(outcome, run.counters, done);\n}\n\nfunction deadLetterRun(run: JobRun, diagnostic: WebhookDiagnosticCode): Promise<void> {\n\treturn deadLetter(run.config, run.lease, run.counters, diagnostic);\n}\n\n/**\n * The fenced dead-letter transition, bounded by `portTimeoutMs` alone: it is\n * how a job past its deadline ends, and how a job whose body cannot be read\n * ends (`job_unreadable`). It needs only the job's fence, never its body.\n */\nasync function deadLetter(config: Config, lease: JobLease, counters: Counters, diagnostic: WebhookDiagnosticCode): Promise<void> {\n\tawait keepLease(config, lease);\n\tconst parent = lease.parent;\n\tconst nowMs = readFanOutClock(config.clock);\n\tconst outcome = await bounded(config, nowMs, (callOptions) => config.deliveries.deadLetterFanOutJob({\n\t\teventId: parent.eventId,\n\t\towner: parent.owner,\n\t\tfence: parent.fence,\n\t\tnow: new Date(nowMs),\n\t\tdiagnostic,\n\t}, callOptions));\n\tsettleCount(outcome, counters, \"deadLettered\");\n}\n","import { buildWebhookRequestHeaders } from \"./headers\";\nimport type { WebhookResolvedAddress, WebhookTransportResult, WebhookVettedDestination } from \"./ports\";\nimport {\n\tdateParse,\n\tfreeze,\n\tfrozenList,\n\tisArray,\n\tisOneOf,\n\tisPlainRecord,\n\tnumberIsFinite,\n\tnumberIsSafeInteger,\n\treadOwn,\n\trecord,\n\ttype Fail,\n} from \"./snapshot\";\nimport type { WebhookSubscriptionStatus } from \"./types\";\n\n/*\n * Reading what a port returned, for the delivery cycle. The same rules as\n * src/fan-out-read.ts: own data properties only, read through descriptors\n * (an accessor is refused uncalled), copied into package-owned frozen\n * values, one try/catch per reader, and whatever a reader catches is\n * dropped unread. Anything that cannot be read is `undefined`, and the\n * cycle maps that to a fixed code.\n */\n\nconst REFUSED = freeze(Object.create(null) as object);\nconst refuse: Fail = () => {\n\tthrow REFUSED;\n};\n\nfunction raw(target: object, key: string): unknown {\n\treturn readOwn(target, key, key, refuse);\n}\n\nfunction plain(value: unknown): object {\n\tif (!isPlainRecord(value)) throw REFUSED;\n\treturn value;\n}\n\nfunction nonEmpty(value: unknown): string {\n\tif (typeof value !== \"string\" || value === \"\") throw REFUSED;\n\treturn value;\n}\n\nfunction whole(value: unknown, min: number): number {\n\tif (typeof value !== \"number\" || !numberIsSafeInteger(value) || value < min) throw REFUSED;\n\treturn value;\n}\n\nfunction instantMs(value: unknown): number {\n\tconst ms = dateParse(nonEmpty(value));\n\tif (!numberIsFinite(ms)) throw REFUSED;\n\treturn ms;\n}\n\n// ---------------------------------------------------------------------------\n// Claimed intents\n// ---------------------------------------------------------------------------\n\n/** What names a claimed intent and its lease: all a fenced settlement needs. */\nexport interface ClaimedIntentHeader {\n\treadonly deliveryId: string;\n\treadonly tenantId: string;\n\treadonly spaceId: string;\n\treadonly lease: { readonly owner: string; readonly fence: number };\n}\n\n/** A claimed intent as the cycle uses it, every field read and validated. */\nexport interface ClaimedIntent extends ClaimedIntentHeader {\n\treadonly subscriptionId: string;\n\treadonly eventId: string;\n\t/** The eligibility revision fan-out bound the intent to (decision 3); dispatch compares it with the snapshot's `statusSinceRevision`. */\n\treadonly eligibilityRevision: number;\n\t/** The rendered v1 body, signed and sent byte for byte. */\n\treadonly body: string;\n\treadonly attemptCount: number;\n\treadonly processingDeadlineMs: number;\n\treadonly leaseExpiresAtMs: number;\n}\n\n/**\n * One entry of a claim result. `undefined`: identity or lease cannot be\n * read, so no fenced write can name it. `intent: undefined`: the header\n * was read but the rest cannot be, so the cycle dead-letters it by its\n * header (`intent_unreadable`).\n */\nexport type ClaimedIntentEntry = { readonly header: ClaimedIntentHeader; readonly intent: ClaimedIntent | undefined } | undefined;\n\n/** More intents than any claim limit a cycle sends; a longer answer is not a claim result. */\nconst MAX_CLAIMED = 100_000;\n\n/** A placeholder `v1` value, used only to check that the intent's ids are header-safe before anything is signed. */\nconst PLACEHOLDER_SIGNATURE = `v1=${\"0\".repeat(64)}`;\n\nfunction readIntentHeader(item: unknown): ClaimedIntentHeader {\n\tconst intent = plain(item);\n\tconst lease = plain(raw(intent, \"lease\"));\n\treturn freeze({\n\t\tdeliveryId: nonEmpty(raw(intent, \"deliveryId\")),\n\t\ttenantId: nonEmpty(raw(intent, \"tenantId\")),\n\t\tspaceId: nonEmpty(raw(intent, \"spaceId\")),\n\t\tlease: freeze({ owner: nonEmpty(raw(lease, \"owner\")), fence: whole(raw(lease, \"fence\"), 0) }),\n\t});\n}\n\nfunction readIntentBody(item: unknown, header: ClaimedIntentHeader): ClaimedIntent {\n\tconst intent = plain(item);\n\tconst body = raw(intent, \"body\");\n\tif (typeof body !== \"string\") throw REFUSED;\n\tconst eventId = nonEmpty(raw(intent, \"eventId\"));\n\tconst attemptCount = whole(raw(intent, \"attemptCount\"), 0);\n\t// An intent whose ids cannot go into the unsigned headers can never be\n\t// sent; refusing it here keeps a header error from being blamed on the signer.\n\tbuildWebhookRequestHeaders({ signature: PLACEHOLDER_SIGNATURE, timestampSeconds: 0, eventId, deliveryId: header.deliveryId, attempt: attemptCount + 1 });\n\treturn freeze({\n\t\t...header,\n\t\tsubscriptionId: nonEmpty(raw(intent, \"subscriptionId\")),\n\t\teventId,\n\t\teligibilityRevision: whole(raw(intent, \"eligibilityRevision\"), 1),\n\t\tbody,\n\t\tattemptCount,\n\t\tprocessingDeadlineMs: instantMs(raw(intent, \"processingDeadline\")),\n\t\tleaseExpiresAtMs: instantMs(raw(plain(raw(intent, \"lease\")), \"expiresAt\")),\n\t});\n}\n\n/**\n * The claim result: `undefined` when the list itself cannot be read, and\n * otherwise one {@link ClaimedIntentEntry} per record. Each record's header\n * is read first, in its own try/catch, and its body after, in another.\n */\nexport function readClaimedIntents(value: unknown): readonly ClaimedIntentEntry[] | undefined {\n\tconst items: unknown[] = [];\n\ttry {\n\t\tif (!isArray(value)) return undefined;\n\t\tconst length = raw(value, \"length\");\n\t\tif (typeof length !== \"number\" || !numberIsSafeInteger(length) || length < 0 || length > MAX_CLAIMED) return undefined;\n\t\tfor (let index = 0; index < length; index += 1) items.push(raw(value, `${index}`));\n\t} catch {\n\t\treturn undefined;\n\t}\n\treturn frozenList(items.map((item): ClaimedIntentEntry => {\n\t\tlet header: ClaimedIntentHeader;\n\t\ttry {\n\t\t\theader = readIntentHeader(item);\n\t\t} catch {\n\t\t\treturn undefined;\n\t\t}\n\t\ttry {\n\t\t\treturn freeze({ header, intent: readIntentBody(item, header) });\n\t\t} catch {\n\t\t\treturn freeze({ header, intent: undefined });\n\t\t}\n\t}));\n}\n\n// ---------------------------------------------------------------------------\n// Subscription state\n// ---------------------------------------------------------------------------\n\n/** The delivery configuration the cycle signs and addresses one attempt with. */\nexport interface DispatchConfiguration {\n\treadonly version: number;\n\treadonly destinationUrl: string;\n\treadonly signatureScheme: \"v1\";\n\treadonly secretRef: string;\n}\n\n/**\n * What a `readSubscription` answer means for one intent.\n * `not_in_scope`: `null` (no such subscription in the intent's tenant and\n * space), or an answer naming another subscription, tenant or space.\n * `unreadable`: anything else that is not a well-formed snapshot, a\n * missing or malformed `statusSinceRevision` included.\n */\nexport type SubscriptionRead =\n\t| {\n\t\treadonly kind: \"ok\";\n\t\treadonly status: WebhookSubscriptionStatus;\n\t\t/** The snapshot's `statusSinceRevision`, read from the same answer as `status`. */\n\t\treadonly statusSinceRevision: number;\n\t\treadonly configuration: DispatchConfiguration;\n\t}\n\t| { readonly kind: \"not_in_scope\" }\n\t| { readonly kind: \"unreadable\" };\n\nconst STATUSES = freeze([\"active\", \"paused\", \"deleted\"] as const);\nconst NOT_IN_SCOPE: SubscriptionRead = freeze({ kind: \"not_in_scope\" });\nconst UNREADABLE: SubscriptionRead = freeze({ kind: \"unreadable\" });\n\n/**\n * Read a `readSubscription` answer for the intent `owner`. The snapshot and\n * its configuration must both name the intent's subscription, tenant and\n * space (decision 9: the worker refuses an intent whose subscription now\n * names another tenant or space).\n */\nexport function readSubscriptionFor(value: unknown, owner: { readonly subscriptionId: string; readonly tenantId: string; readonly spaceId: string }): SubscriptionRead {\n\ttry {\n\t\tif (value === null) return NOT_IN_SCOPE;\n\t\tconst snapshot = plain(value);\n\t\tconst configuration = plain(raw(snapshot, \"configuration\"));\n\t\tconst named = [raw(snapshot, \"subscriptionId\"), raw(snapshot, \"tenantId\"), raw(snapshot, \"spaceId\"),\n\t\t\traw(configuration, \"subscriptionId\"), raw(configuration, \"tenantId\"), raw(configuration, \"spaceId\")];\n\t\tfor (const name of named) nonEmpty(name);\n\t\tif (named[0] !== owner.subscriptionId || named[1] !== owner.tenantId || named[2] !== owner.spaceId\n\t\t\t|| named[3] !== owner.subscriptionId || named[4] !== owner.tenantId || named[5] !== owner.spaceId) {\n\t\t\treturn NOT_IN_SCOPE;\n\t\t}\n\t\tconst status = raw(snapshot, \"status\");\n\t\tif (!isOneOf(STATUSES, status)) return UNREADABLE;\n\t\tif (raw(configuration, \"signatureScheme\") !== \"v1\") return UNREADABLE;\n\t\treturn freeze({\n\t\t\tkind: \"ok\",\n\t\t\tstatus: status as WebhookSubscriptionStatus,\n\t\t\tstatusSinceRevision: whole(raw(snapshot, \"statusSinceRevision\"), 1),\n\t\t\tconfiguration: freeze({\n\t\t\t\tversion: whole(raw(configuration, \"version\"), 1),\n\t\t\t\tdestinationUrl: nonEmpty(raw(configuration, \"destinationUrl\")),\n\t\t\t\tsignatureScheme: \"v1\" as const,\n\t\t\t\tsecretRef: nonEmpty(raw(configuration, \"secretRef\")),\n\t\t\t}),\n\t\t});\n\t} catch {\n\t\treturn UNREADABLE;\n\t}\n}\n\n// ---------------------------------------------------------------------------\n// Destination, signature and transport results\n// ---------------------------------------------------------------------------\n\n/** A resolver answer copied into package-owned frozen values. */\nexport type ResolutionRead =\n\t| { readonly ok: true; readonly destination: WebhookVettedDestination }\n\t| { readonly ok: false; readonly code: \"invalid_url\" | \"private_address\" | \"dns_failure\" };\n\nconst RESOLUTION_CODES = freeze([\"invalid_url\", \"private_address\", \"dns_failure\"] as const);\n/** The most addresses a destination may carry (the resolver's own cap). */\nconst MAX_ADDRESSES = 32;\n\n/** A resolver answer, or `undefined` when it cannot be read. */\nexport function readResolution(value: unknown): ResolutionRead | undefined {\n\ttry {\n\t\tconst answer = plain(value);\n\t\tconst ok = raw(answer, \"ok\");\n\t\tif (ok === false) {\n\t\t\tconst code = raw(answer, \"code\");\n\t\t\treturn isOneOf(RESOLUTION_CODES, code) ? freeze({ ok: false as const, code: code as \"invalid_url\" | \"private_address\" | \"dns_failure\" }) : undefined;\n\t\t}\n\t\tif (ok !== true) return undefined;\n\t\tconst destination = plain(raw(answer, \"destination\"));\n\t\tif (raw(destination, \"port\") !== 443) return undefined;\n\t\tconst list = raw(destination, \"addresses\");\n\t\tif (!isArray(list)) return undefined;\n\t\tconst length = raw(list, \"length\");\n\t\tif (typeof length !== \"number\" || !numberIsSafeInteger(length) || length < 1 || length > MAX_ADDRESSES) return undefined;\n\t\tconst addresses: WebhookResolvedAddress[] = [];\n\t\tfor (let index = 0; index < length; index += 1) {\n\t\t\tconst item = plain(raw(list, `${index}`));\n\t\t\tconst family = raw(item, \"family\");\n\t\t\tif (family !== 4 && family !== 6) return undefined;\n\t\t\taddresses.push(record({ address: nonEmpty(raw(item, \"address\")), family }));\n\t\t}\n\t\treturn freeze({\n\t\t\tok: true as const,\n\t\t\tdestination: record<WebhookVettedDestination>({\n\t\t\t\turl: nonEmpty(raw(destination, \"url\")),\n\t\t\t\thostname: nonEmpty(raw(destination, \"hostname\")),\n\t\t\t\tport: 443,\n\t\t\t\taddresses: frozenList(addresses),\n\t\t\t}),\n\t\t});\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\n/** Longer than any receipt a package store makes (69 characters); a longer one is not a receipt. */\nconst MAX_RECEIPT_LENGTH = 256;\n\n/**\n * A `beginAttempt` answer: `{ begun: true, receipt }` with a non-empty\n * receipt, `{ begun: false }`, or `undefined` when it is neither. Only a\n * well-formed `begun: true` lets the cycle hand off.\n */\nexport function readBeginAnswer(value: unknown): { readonly begun: true; readonly receipt: string } | { readonly begun: false } | undefined {\n\ttry {\n\t\tconst answer = plain(value);\n\t\tconst begun = raw(answer, \"begun\");\n\t\tif (begun === false) return freeze({ begun: false as const });\n\t\tif (begun !== true) return undefined;\n\t\tconst receipt = nonEmpty(raw(answer, \"receipt\"));\n\t\treturn receipt.length > MAX_RECEIPT_LENGTH ? undefined : freeze({ begun: true as const, receipt });\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\n/** A signer answer: the string it returned, or `undefined`. Its format is checked when the headers are built. */\nexport function readSignature(value: unknown): string | undefined {\n\treturn typeof value === \"string\" ? value : undefined;\n}\n\nconst OBSERVATION_KINDS = freeze([\"network_error\", \"timeout\", \"dns_failure\", \"invalid_url\", \"private_address\"] as const);\nconst NOT_SENT_REASONS = freeze([\"deadline_expired\", \"aborted\"] as const);\n/** Longer than any `Retry-After` the Node transport returns (128); a longer value is dropped, not truncated. */\nconst MAX_RETRY_AFTER_LENGTH = 256;\n\n/**\n * A transport answer copied into a package-owned frozen value, or\n * `undefined` when it cannot be read. Only `kind`, `status`, `retryAfter`\n * and a `not_sent` reason are read; anything else the transport put on its\n * answer, a response body included, is never read.\n */\nexport function readTransportResult(value: unknown): WebhookTransportResult | undefined {\n\ttry {\n\t\tconst answer = plain(value);\n\t\tconst kind = raw(answer, \"kind\");\n\t\tif (kind === \"response\") {\n\t\t\tconst status = raw(answer, \"status\");\n\t\t\tif (typeof status !== \"number\" || !numberIsSafeInteger(status) || status < 100 || status > 599) return undefined;\n\t\t\tconst retryAfter = raw(answer, \"retryAfter\");\n\t\t\tconst kept = typeof retryAfter === \"string\" && retryAfter.length <= MAX_RETRY_AFTER_LENGTH ? retryAfter : null;\n\t\t\treturn record<WebhookTransportResult>({ kind: \"response\", status, retryAfter: kept });\n\t\t}\n\t\tif (kind === \"not_sent\") {\n\t\t\tconst reason = raw(answer, \"reason\");\n\t\t\treturn isOneOf(NOT_SENT_REASONS, reason) ? record<WebhookTransportResult>({ kind: \"not_sent\", reason: reason as \"deadline_expired\" | \"aborted\" }) : undefined;\n\t\t}\n\t\tif (isOneOf(OBSERVATION_KINDS, kind)) return record<WebhookTransportResult>({ kind: kind as \"network_error\" });\n\t\treturn undefined;\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n","import { classifyWebhookDeliveryObservation, type WebhookDeliveryClassification, type WebhookDeliveryObservation } from \"./classify\";\nimport type { WebhookAttemptReasonCode, WebhookDiagnosticCode } from \"./codes\";\nimport { normalizeWebhookDeliveryAuthorizationDecision } from \"./decisions\";\nimport {\n\treadBeginAnswer,\n\treadClaimedIntents,\n\treadResolution,\n\treadSignature,\n\treadSubscriptionFor,\n\treadTransportResult,\n\ttype ClaimedIntent,\n\ttype ClaimedIntentHeader,\n\ttype DispatchConfiguration,\n} from \"./delivery-read\";\nimport { configError, deliveryError, guard } from \"./errors\";\nimport { boundedCall, signalAborted, type BoundedOutcome } from \"./fan-out-call\";\nimport { buildWebhookRequestHeaders } from \"./headers\";\nimport { assertPositiveInteger, resolveWebhookDeliveryLimits, type WebhookDeliveryLimits } from \"./limits\";\nimport type {\n\tWebhookCallOptions,\n\tWebhookClock,\n\tWebhookDeliveryAuthorization,\n\tWebhookDeliveryStore,\n\tWebhookDestinationResolver,\n\tWebhookRandomSource,\n\tWebhookRetryDelay,\n\tWebhookSigner,\n\tWebhookSubscriptionStore,\n\tWebhookTransport,\n\tWebhookTransportRequest,\n} from \"./ports\";\nimport { createWebhookRetryDelay } from \"./retry\";\nimport { apply, freeze, mathFloor, mathMax, mathMin, numberIsFinite, primitive, record, timeOf } from \"./snapshot\";\nimport { isoOf } from \"./store-input\";\n\n/*\n * The delivery cycle (ADR 0018 decisions 3, 4, 8 and 10; R2, R4, R6, R7).\n *\n * Check order. For each claimed intent, in this order:\n *\n * 0. The claim: a fenced lease, the intent's fence advanced (store).\n * Then the lease is renewed when less than one whole attempt is left\n * of it (`keepLease`): an intent late in a batch has waited for the\n * ones before it under a lease taken at the claim.\n * 1. Processing deadline, persisted when fan-out created the intent: no\n * call before the handoff (preparation and guard calls, `intentCall`)\n * is started at or after it, and the first call it refuses\n * dead-letters the intent `processing_deadline_exceeded`. Outcome,\n * settlement and attempt-log writes after a handoff are not held to it.\n * 2. `readSubscription` in the intent's tenant and space: not there, or\n * naming another subscription, tenant or space, dead-letters it\n * `subscription_not_in_scope`; paused or deleted cancels it, and so\n * does an active subscription whose `statusSinceRevision` is above the\n * intent's `eligibilityRevision` (paused and resumed since the intent's\n * interval: `subscription_paused`). Otherwise it yields the\n * configuration version `v` this attempt uses.\n * 3. Resolve `v`'s destination and sign the body with `v`'s secret\n * reference (preparation; a refused destination or a failed signer\n * spends an attempt, per decision 10's table, without sending).\n * 4. Guards, immediately before the handoff, with nothing between them but\n * clock reads:\n * a. delivery authorization for this attempt and `v`: revoked cancels,\n * unavailable releases unsent;\n * b. `readSubscription` again: paused, deleted, resumed since the\n * intent's revision or out of scope as in 2;\n * a configuration version other than `v` releases unsent as\n * `configuration_conflict`;\n * c. the transport's deadline: the clock now plus `attemptTimeoutMs`,\n * and at most 4b's start plus `portTimeoutMs + attemptTimeoutMs`,\n * the processing deadline, and the lease's expiry (as claimed or\n * renewed in step 0) less three `portTimeoutMs` (the answer's\n * grace, the outcome write, the settlement);\n * d. `beginAttempt`: in one atomic store step, the lease is still this\n * worker's at this fence and unexpired on the store's clock, and an\n * in-flight attempt entry is written for (deliveryId, fence). The\n * store returns a receipt that only this worker holds.\n * 5. Handoff: `transport.send()` with the signed request. This is the\n * irrevocable point. A change committed after 4b's read (a revocation,\n * a pause, a configuration replacement), or after 4d's begin (a\n * reclaim), may race with the request, which can then reach the old\n * destination with the old secret (R2, decision 3). The transport may\n * still answer `not_sent` when its deadline passed or its signal\n * aborted before it started the request (R3); that attempt is\n * recorded `not_sent` and the intent released.\n * 6. Classify (decision 10), append the attempt's outcome with the\n * receipt (not fenced, so a worker that lost its lease during the\n * request still records it, and nobody else can), then settle under\n * the fence: delivered, retry, dead letter. A settlement the store\n * refuses (lease expired or reclaimed) leaves the intent to be sent\n * again after a reclaim: delivery is at least once.\n *\n * Releases (deferrals) spend no attempt; every deferral, reclaim and\n * configuration conflict counts toward the persisted processing deadline\n * (R4). Each port call before the handoff is bounded by the smaller of\n * `portTimeoutMs` and the intent's remaining lifetime; the transport by its\n * deadline from 4c plus a `portTimeoutMs` grace for its answer; each\n * outcome, settlement and attempt write by `portTimeoutMs`. `boundedCall`\n * accepts no answer that settles at or after its bound, on the injected\n * clock or on the monotonic clock, timed when the port's promise settles,\n * so a late result is dropped and nothing is written from it.\n *\n * A store write that timed out may have committed. The cycle never follows\n * one with a second transition of the intent on the strength of the\n * timeout: a timed-out settlement ends the intent's processing\n * (`abandoned`); a timed-out `beginAttempt` is followed by a release (begin\n * does not change the intent, so the release is the only transition, and a\n * begin that did commit leaves an `in_flight` entry with no request behind\n * it); a timed-out `appendAttempt` is followed by a release, so the log may\n * hold an entry for an attempt that spent nothing, and the next pass logs\n * the same attempt number again.\n */\n\n/** One intent's outcome, as reported to {@link WebhookDeliveryCycleOptions.observe}. */\nexport type WebhookDeliveryCycleResultKind =\n\t| \"delivered\"\n\t| \"retry_scheduled\"\n\t| \"dead_lettered\"\n\t| \"cancelled\"\n\t| \"released\"\n\t| \"lease_lost\"\n\t| \"abandoned\";\n\n/**\n * What the cycle reports for one claimed intent. Every field is an\n * identifier the store already holds, a number, or a fixed code: never a\n * destination, secret reference, signature, header, body or port error.\n */\nexport interface WebhookDeliveryCycleEvent {\n\treadonly deliveryId: string;\n\treadonly tenantId: string;\n\treadonly spaceId: string;\n\treadonly subscriptionId?: string;\n\treadonly eventId?: string;\n\t/** The 1-based attempt number this processing was for. */\n\treadonly attempt?: number;\n\t/** The configuration version the attempt was prepared with, once read. */\n\treadonly configurationVersion?: number;\n\treadonly result: WebhookDeliveryCycleResultKind;\n\t/** `true` once the request was handed to the transport. */\n\treadonly handedOff: boolean;\n\treadonly reason?: WebhookAttemptReasonCode;\n\treadonly diagnostic?: WebhookDiagnosticCode;\n\treadonly httpStatus?: number;\n\t/** 401 or 403: still retried, but usually needing the receiver to act (decision 10). */\n\treadonly receiverActionLikely?: true;\n}\n\n/** Options for {@link runWebhookDeliveryCycle}. */\nexport interface WebhookDeliveryCycleOptions {\n\treadonly deliveries: WebhookDeliveryStore;\n\treadonly subscriptions: WebhookSubscriptionStore;\n\treadonly authorization: WebhookDeliveryAuthorization;\n\treadonly signer: WebhookSigner;\n\treadonly resolver: WebhookDestinationResolver;\n\treadonly transport: WebhookTransport;\n\treadonly clock: WebhookClock;\n\t/** The lease owner this worker claims intents as. */\n\treadonly workerId: string;\n\t/**\n\t * Overrides of {@link WebhookDeliveryLimits}, all validated positive and\n\t * finite (R4). Used: `maxDeliveryAttempts`, `deliveryRetryDelaysMs`,\n\t * `retryJitterRatio`, `attemptTimeoutMs`, `portTimeoutMs`, `maxRetryAfterMs`.\n\t */\n\treadonly limits?: Partial<WebhookDeliveryLimits>;\n\t/** Delay before the next attempt; defaults to `deliveryRetryDelaysMs` with jitter from `random`. */\n\treadonly retryDelay?: WebhookRetryDelay;\n\t/** Random source for the default retry delay's jitter; required when `retryDelay` is absent. */\n\treadonly random?: WebhookRandomSource;\n\t/** Intents claimed per cycle. A positive whole number; default 10. */\n\treadonly batchSize?: number;\n\t/**\n\t * Lease on each claimed intent, in ms. A positive whole number above\n\t * `attemptTimeoutMs + 10 * portTimeoutMs` (one whole attempt and the\n\t * renewal before it; see `ATTEMPT_PORT_CALLS`); default 120 000.\n\t */\n\treadonly leaseDurationMs?: number;\n\t/** Called once per claimed intent with fixed-code telemetry. A throw is ignored. */\n\treadonly observe?: (event: WebhookDeliveryCycleEvent) => void;\n\t/** Stops the cycle; intents not yet settled are reclaimed after their leases expire. */\n\treadonly signal?: AbortSignal;\n}\n\n/** What one cycle did. */\nexport interface WebhookDeliveryCycleResult {\n\treadonly claimed: number;\n\treadonly delivered: number;\n\t/** Settled for a later attempt, spending one. */\n\treadonly retried: number;\n\treadonly deadLettered: number;\n\treadonly cancelled: number;\n\t/** Returned to pending unsent, spending no attempt. */\n\treadonly released: number;\n\t/** Intents this worker stopped on because a fenced write found its lease gone. */\n\treadonly leaseLost: number;\n\t/** Intents left for lease expiry: unreadable, another owner's, or whose final write failed. */\n\treadonly abandoned: number;\n\t/** Requests handed to the transport. */\n\treadonly handedOff: number;\n}\n\n/**\n * What may follow the transport's deadline, in units of `portTimeoutMs`: the\n * grace the cycle waits for the transport's answer, then the outcome write\n * and the settlement, each bounded by `portTimeoutMs`. The transport's\n * deadline is kept this far inside the lease, so a request that answers in\n * time can be settled before the lease expires.\n */\nconst SETTLEMENT_WRITES = 3;\n\n/**\n * The port calls one attempt makes besides the transport, each bounded by\n * `portTimeoutMs`: before the handoff, `readSubscription`, the resolver, the\n * signer, authorization, `readSubscription` again and `beginAttempt` (6);\n * after it, the {@link SETTLEMENT_WRITES} (3). Each is cut off at its bound\n * by a timer, so one whole attempt takes about\n * `attemptTimeoutMs + ATTEMPT_PORT_CALLS * portTimeoutMs` at most, more\n * only when timers fire late.\n */\nconst ATTEMPT_PORT_CALLS = 6 + SETTLEMENT_WRITES;\n\n/** Defaults for the cycle's own options. */\nexport const DEFAULT_WEBHOOK_DELIVERY_CYCLE = freeze({\n\tbatchSize: 10,\n\tleaseDurationMs: 120_000,\n});\n\ninterface Clock {\n\treadonly target: object;\n\treadonly now: (...args: never[]) => unknown;\n}\n\ninterface Config {\n\treadonly deliveries: WebhookDeliveryStore;\n\treadonly subscriptions: WebhookSubscriptionStore;\n\treadonly authorization: WebhookDeliveryAuthorization;\n\treadonly signer: WebhookSigner;\n\treadonly resolver: WebhookDestinationResolver;\n\treadonly transport: WebhookTransport;\n\treadonly clock: Clock;\n\treadonly workerId: string;\n\treadonly limits: WebhookDeliveryLimits;\n\treadonly retryDelay: WebhookRetryDelay;\n\treadonly batchSize: number;\n\treadonly leaseDurationMs: number;\n\treadonly observe: ((event: WebhookDeliveryCycleEvent) => void) | undefined;\n\treadonly signal: AbortSignal | undefined;\n}\n\nfunction hasMethods(value: unknown, names: readonly string[]): boolean {\n\tif (value === null || typeof value !== \"object\") return false;\n\tfor (const name of names) if (typeof (value as Record<string, unknown>)[name] !== \"function\") return false;\n\treturn true;\n}\n\nfunction positiveWhole(value: unknown, fallback: number, field: string): number {\n\tconst read = primitive(value);\n\tconst resolved = read === undefined ? fallback : read;\n\tassertPositiveInteger(resolved, field);\n\treturn resolved;\n}\n\n/**\n * Read and validate the options. A package error (a limit, a missing random\n * source) passes through with its code; anything else thrown while reading\n * them, by a getter or a Proxy trap, is replaced unread with `options_invalid`.\n */\nfunction readConfig(options: WebhookDeliveryCycleOptions): Config {\n\treturn guard(() => readConfigUnguarded(options), () => deliveryError(\"options_invalid\", \"options\"));\n}\n\nfunction readConfigUnguarded(options: WebhookDeliveryCycleOptions): Config {\n\tif (options === null || typeof options !== \"object\") throw deliveryError(\"options_invalid\", \"options\");\n\tconst limits = resolveWebhookDeliveryLimits(options.limits ?? {});\n\tconst batchSize = positiveWhole(options.batchSize, DEFAULT_WEBHOOK_DELIVERY_CYCLE.batchSize, \"batchSize\");\n\tconst leaseDurationMs = positiveWhole(options.leaseDurationMs, DEFAULT_WEBHOOK_DELIVERY_CYCLE.leaseDurationMs, \"leaseDurationMs\");\n\t// The lease must fit one whole attempt (the calls before the handoff, the\n\t// transport call, its answer's grace, and the outcome and settlement\n\t// writes) after the renewal that precedes it; a shorter one would leave\n\t// an intent too little lease to hand off, on every claim.\n\tif (leaseDurationMs <= limits.attemptTimeoutMs + (ATTEMPT_PORT_CALLS + 1) * limits.portTimeoutMs) throw configError(\"limit_out_of_range\", \"leaseDurationMs\");\n\tif (!hasMethods(options.deliveries, [\"claimDeliveryIntents\", \"renewDeliveryIntentLease\", \"beginAttempt\", \"finishAttempt\", \"appendAttempt\", \"settleDeliveryIntent\"])) {\n\t\tthrow deliveryError(\"options_invalid\", \"deliveries\");\n\t}\n\tif (!hasMethods(options.subscriptions, [\"readSubscription\"])) throw deliveryError(\"options_invalid\", \"subscriptions\");\n\tif (!hasMethods(options.authorization, [\"authorize\"])) throw deliveryError(\"options_invalid\", \"authorization\");\n\tif (!hasMethods(options.signer, [\"sign\"])) throw deliveryError(\"options_invalid\", \"signer\");\n\tif (!hasMethods(options.resolver, [\"resolve\"])) throw deliveryError(\"options_invalid\", \"resolver\");\n\tif (!hasMethods(options.transport, [\"send\"])) throw deliveryError(\"options_invalid\", \"transport\");\n\tif (typeof options.workerId !== \"string\" || options.workerId === \"\") throw deliveryError(\"options_invalid\", \"workerId\");\n\tif (options.observe !== undefined && typeof options.observe !== \"function\") throw deliveryError(\"options_invalid\", \"observe\");\n\tif (options.signal !== undefined && !(options.signal instanceof AbortSignal)) throw deliveryError(\"options_invalid\", \"signal\");\n\tconst clock = options.clock as unknown;\n\tif (clock === null || typeof clock !== \"object\") throw deliveryError(\"options_invalid\", \"clock\");\n\tconst now = (clock as { now?: unknown }).now;\n\tif (typeof now !== \"function\") throw deliveryError(\"options_invalid\", \"clock.now\");\n\tlet retryDelay: WebhookRetryDelay;\n\tif (options.retryDelay !== undefined) {\n\t\tif (typeof options.retryDelay !== \"function\") throw deliveryError(\"options_invalid\", \"retryDelay\");\n\t\tretryDelay = options.retryDelay;\n\t} else {\n\t\tretryDelay = createWebhookRetryDelay({ delaysMs: limits.deliveryRetryDelaysMs, jitterRatio: limits.retryJitterRatio, random: options.random! });\n\t}\n\treturn freeze({\n\t\tdeliveries: options.deliveries,\n\t\tsubscriptions: options.subscriptions,\n\t\tauthorization: options.authorization,\n\t\tsigner: options.signer,\n\t\tresolver: options.resolver,\n\t\ttransport: options.transport,\n\t\tclock: freeze({ target: clock, now: now as (...args: never[]) => unknown }),\n\t\tworkerId: options.workerId,\n\t\tlimits,\n\t\tretryDelay,\n\t\tbatchSize,\n\t\tleaseDurationMs,\n\t\tobserve: options.observe,\n\t\tsignal: options.signal,\n\t});\n}\n\n/** Read the clock; a throw or an invalid time is `clock_invalid`. */\nfunction readClock(clock: Clock): number {\n\tlet value: unknown;\n\ttry {\n\t\tvalue = apply(clock.now, clock.target, []);\n\t} catch {\n\t\tthrow deliveryError(\"clock_invalid\", \"clock\");\n\t}\n\tconst ms = timeOf(value);\n\tif (!numberIsFinite(ms)) throw deliveryError(\"clock_invalid\", \"clock\");\n\treturn ms;\n}\n\ninterface Counters {\n\tclaimed: number;\n\tdelivered: number;\n\tretried: number;\n\tdeadLettered: number;\n\tcancelled: number;\n\treleased: number;\n\tleaseLost: number;\n\tabandoned: number;\n\thandedOff: number;\n}\n\n/**\n * Run one delivery cycle: claim up to `batchSize` pending intents under a\n * fenced lease and process each in turn, in the check order described at\n * the top of this file (and in the README, \"Delivery\"). A claimed record\n * whose `deliveryId`, `tenantId`, `spaceId` or lease cannot be read, or\n * that is leased to another owner, is left for lease expiry (`abandoned`);\n * one whose identity and lease can be read but whose body cannot is\n * dead-lettered as `intent_unreadable`.\n *\n * @throws {WebhookDeliveryConfigError} for a limit or cycle option that is not positive and finite (R4).\n * @throws {WebhookDeliveryError} `options_invalid` for a missing port or\n * option; `delivery_store_failed` or `delivery_store_timeout` when the claim\n * fails; `clock_invalid` for a failing clock.\n */\nexport async function runWebhookDeliveryCycle(options: WebhookDeliveryCycleOptions): Promise<WebhookDeliveryCycleResult> {\n\tconst config = readConfig(options);\n\tconst counters: Counters = { claimed: 0, delivered: 0, retried: 0, deadLettered: 0, cancelled: 0, released: 0, leaseLost: 0, abandoned: 0, handedOff: 0 };\n\tconst nowMs = readClock(config.clock);\n\tconst claimed = await boundedCall(nowMs, config.limits.portTimeoutMs, config.signal, (callOptions) => config.deliveries.claimDeliveryIntents({\n\t\tworkerId: config.workerId,\n\t\tleaseDurationMs: config.leaseDurationMs,\n\t\tlimit: config.batchSize,\n\t\tnow: new Date(nowMs),\n\t}, callOptions), () => readClock(config.clock));\n\tif (!claimed.ok) throw deliveryError(claimed.reason === \"timeout\" ? \"delivery_store_timeout\" : \"delivery_store_failed\", \"claimDeliveryIntents\");\n\tconst entries = readClaimedIntents(claimed.value);\n\tif (entries === undefined) throw deliveryError(\"delivery_store_failed\", \"claimDeliveryIntents\");\n\tcounters.claimed = entries.length;\n\tfor (const entry of entries) {\n\t\tif (config.signal !== undefined && signalAborted(config.signal)) break;\n\t\t// A record whose identity or lease cannot be read cannot be named by a\n\t\t// fenced write, and one leased to another owner is not this worker's.\n\t\tif (entry === undefined) {\n\t\t\tcounters.abandoned += 1;\n\t\t\tcontinue;\n\t\t}\n\t\tconst run = newRun(config, entry.header, entry.intent, counters);\n\t\tif (entry.header.lease.owner !== config.workerId) {\n\t\t\tfinish(run, \"abandoned\");\n\t\t\tcontinue;\n\t\t}\n\t\tif (entry.intent === undefined) {\n\t\t\tawait settle(run, { kind: \"dead_letter\", reason: \"intent_unreadable\" }, \"dead_lettered\", { diagnostic: \"intent_unreadable\" });\n\t\t\tcontinue;\n\t\t}\n\t\tawait processIntent(run, entry.intent);\n\t}\n\treturn freeze({ ...counters });\n}\n\n/** One claimed intent being processed. */\ninterface Run {\n\treadonly config: Config;\n\treadonly header: ClaimedIntentHeader;\n\treadonly intent: ClaimedIntent | undefined;\n\treadonly counters: Counters;\n\t/** The configuration version read at step 2, once read. */\n\tversion: number | undefined;\n\t/** The lease's expiry as this worker last set it (claim or renewal), on its own clock. */\n\tleaseExpiresAtMs: number;\n\thandedOff: boolean;\n\treported: boolean;\n}\n\nfunction newRun(config: Config, header: ClaimedIntentHeader, intent: ClaimedIntent | undefined, counters: Counters): Run {\n\treturn { config, header, intent, counters, version: undefined, leaseExpiresAtMs: intent === undefined ? NaN : intent.leaseExpiresAtMs, handedOff: false, reported: false };\n}\n\ntype CallFailure = \"threw\" | \"timeout\" | \"aborted\" | \"deadline\";\ntype RunOutcome<T> = BoundedOutcome<T> | { readonly ok: false; readonly reason: \"deadline\" };\n\n/**\n * A port call made before the handoff (R4). It is not made at all once the\n * intent's processing deadline has passed, and otherwise it is bounded by\n * the smaller of `portTimeoutMs` and the intent's remaining lifetime.\n */\nfunction intentCall<T>(run: Run, intent: ClaimedIntent, call: (options: WebhookCallOptions, nowMs: number) => Promise<T>): Promise<RunOutcome<T>> {\n\tconst nowMs = readClock(run.config.clock);\n\tconst remainingMs = intent.processingDeadlineMs - nowMs;\n\tif (!(remainingMs > 0)) return Promise.resolve({ ok: false, reason: \"deadline\" });\n\tconst timeoutMs = mathMin(remainingMs, run.config.limits.portTimeoutMs);\n\treturn boundedCall(nowMs, timeoutMs, run.config.signal, (options) => call(options, nowMs), () => readClock(run.config.clock));\n}\n\n/** A settlement or attempt write: bounded by `portTimeoutMs` alone, so an outcome can be recorded after the deadline. */\nfunction storeWrite<T>(run: Run, call: (options: WebhookCallOptions, nowMs: number) => Promise<T>): Promise<BoundedOutcome<T>> {\n\tconst nowMs = readClock(run.config.clock);\n\treturn boundedCall(nowMs, run.config.limits.portTimeoutMs, run.config.signal, (options) => call(options, nowMs), () => readClock(run.config.clock));\n}\n\n/**\n * Step 0: make sure one whole attempt fits in what is left of the lease,\n * renewing it when it does not. Returns `false` when the intent is done\n * for this cycle: the store refused the renewal (the lease is gone, and\n * nothing more is written) or the cycle's signal aborted. A renewal whose\n * outcome is unknown (it threw, timed out or answered unreadably) is not a\n * refusal: the intent goes ahead under the lease last known, and the\n * transport deadline's lease cap (4c) and the store's fence check bound it.\n * The store never extends a lease past the processing deadline; an intent\n * past it is dead-lettered by its first guard call.\n */\nasync function keepLease(run: Run, intent: ClaimedIntent): Promise<boolean> {\n\tconst { config } = run;\n\tconst { attemptTimeoutMs, portTimeoutMs } = config.limits;\n\tconst nowMs = readClock(config.clock);\n\tif (run.leaseExpiresAtMs - nowMs >= attemptTimeoutMs + ATTEMPT_PORT_CALLS * portTimeoutMs) return true;\n\tlet askedAtMs = nowMs;\n\tconst renewed = await storeWrite(run, (options, callNowMs) => {\n\t\taskedAtMs = callNowMs;\n\t\treturn config.deliveries.renewDeliveryIntentLease({\n\t\t\tdeliveryId: intent.deliveryId,\n\t\t\towner: intent.lease.owner,\n\t\t\tfence: intent.lease.fence,\n\t\t\tnow: new Date(callNowMs),\n\t\t\tleaseDurationMs: config.leaseDurationMs,\n\t\t}, options);\n\t});\n\tif (renewed.ok && renewed.value === true) {\n\t\t// The store's rule: never shorter than before, never past the processing deadline.\n\t\tconst untilMs = mathMin(askedAtMs + config.leaseDurationMs, intent.processingDeadlineMs);\n\t\tif (untilMs > run.leaseExpiresAtMs) run.leaseExpiresAtMs = untilMs;\n\t\treturn true;\n\t}\n\tif (renewed.ok && renewed.value === false) {\n\t\tfinish(run, \"lease_lost\", { diagnostic: \"lease_lost\" });\n\t\treturn false;\n\t}\n\tif (!renewed.ok && renewed.reason === \"aborted\") {\n\t\tfinish(run, \"abandoned\");\n\t\treturn false;\n\t}\n\treturn true;\n}\n\nasync function processIntent(run: Run, intent: ClaimedIntent): Promise<void> {\n\tconst { config } = run;\n\tconst attempt = intent.attemptCount + 1;\n\n\t// 0. Enough lease for one whole attempt, renewed if need be.\n\tif (!(await keepLease(run, intent))) return;\n\n\t// 1. The processing deadline persisted at creation (R4) is checked on every\n\t// claim by `intentCall`: no port call is made at or after it, and the first\n\t// refusal dead-letters the intent.\n\n\t// 2. Subscription state, scope and the configuration this attempt uses.\n\tconst first = await readState(run, intent);\n\tif (first === undefined) return;\n\tconst configuration = first.configuration;\n\trun.version = configuration.version;\n\n\t// 3a. Destination for that configuration.\n\tconst resolved = await intentCall(run, intent, (options) => config.resolver.resolve(configuration.destinationUrl, options));\n\tif (!resolved.ok) return portFailure(run, resolved.reason, \"resolver_unavailable\");\n\tconst resolution = readResolution(resolved.value);\n\tif (resolution === undefined) return release(run, intent, \"resolver_unavailable\");\n\tif (!resolution.ok) return spendUnsent(run, intent, { kind: resolution.code });\n\n\t// 3b. Sign this attempt with that configuration's secret reference (decision 7: per attempt, at send time).\n\tconst timestampSeconds = mathFloor(readClock(config.clock) / 1_000);\n\tconst signed = await intentCall(run, intent, (options) => config.signer.sign({\n\t\tscheme: configuration.signatureScheme,\n\t\tsecretRef: configuration.secretRef,\n\t\ttenantId: intent.tenantId,\n\t\tspaceId: intent.spaceId,\n\t\ttimestampSeconds,\n\t\trawBody: intent.body,\n\t}, options));\n\tif (!signed.ok && (signed.reason === \"deadline\" || signed.reason === \"aborted\")) return portFailure(run, signed.reason, \"signer_unavailable\");\n\tlet headers: Readonly<Record<string, string>> | undefined;\n\ttry {\n\t\t// A malformed signature is refused here rather than sent (headers.ts).\n\t\theaders = signed.ok\n\t\t\t? buildWebhookRequestHeaders({ signature: readSignature(signed.value)!, timestampSeconds, eventId: intent.eventId, deliveryId: intent.deliveryId, attempt })\n\t\t\t: undefined;\n\t} catch {\n\t\theaders = undefined;\n\t}\n\tif (headers === undefined) return spendUnsent(run, intent, { kind: \"signer_unavailable\" });\n\n\t// 4a. Guard: delivery authorization for this attempt (decision 4).\n\tconst authorized = await intentCall(run, intent, (options) => config.authorization.authorize({\n\t\tsubscriptionId: intent.subscriptionId,\n\t\ttenantId: intent.tenantId,\n\t\tspaceId: intent.spaceId,\n\t\teventId: intent.eventId,\n\t\tdeliveryId: intent.deliveryId,\n\t\tconfigurationVersion: configuration.version,\n\t\tattempt,\n\t}, options));\n\tif (!authorized.ok) return portFailure(run, authorized.reason, \"authorization_unavailable\");\n\tconst decision = normalizeWebhookDeliveryAuthorizationDecision(authorized.value);\n\tif (decision.decision === \"revoked\") return cancel(run, \"authorization_revoked\");\n\tif (decision.decision === \"unavailable\") return release(run, intent, \"authorization_unavailable\");\n\n\t// 4b. Guard: subscription state and configuration version, re-read (decision 3).\n\tconst second = await readState(run, intent);\n\tif (second === undefined) return;\n\tif (second.configuration.version !== configuration.version) return release(run, intent, \"configuration_conflict\");\n\n\t// 4c. The transport's deadline: the clock now plus `attemptTimeoutMs`, and\n\t// never later than the guard read's start plus `portTimeoutMs +\n\t// attemptTimeoutMs` (the old-secret retention bound, R6, holds even when a\n\t// continuation runs late), the processing deadline, or the lease's expiry\n\t// (as last claimed or renewed, step 0) less the answer's grace and the outcome and settlement writes, so a\n\t// request that answers in time can still be settled under the lease. (The\n\t// processing deadline itself is checked again by `intentCall` below.)\n\tconst { attemptTimeoutMs, portTimeoutMs } = config.limits;\n\tconst sendDeadlineMs = mathMin(\n\t\treadClock(config.clock) + attemptTimeoutMs,\n\t\tsecond.startedMs + portTimeoutMs + attemptTimeoutMs,\n\t\tintent.processingDeadlineMs,\n\t\trun.leaseExpiresAtMs - SETTLEMENT_WRITES * portTimeoutMs,\n\t);\n\n\t// 4d. Guard: the lease, checked and the attempt recorded in one atomic store step.\n\tconst begun = await intentCall(run, intent, (options, nowMs) => config.deliveries.beginAttempt({\n\t\towner: intent.lease.owner,\n\t\tfence: intent.lease.fence,\n\t\tnow: new Date(nowMs),\n\t\tattempt: {\n\t\t\tdeliveryId: intent.deliveryId,\n\t\t\tsubscriptionId: intent.subscriptionId,\n\t\t\teventId: intent.eventId,\n\t\t\tattempt,\n\t\t\tconfigurationVersion: configuration.version,\n\t\t\tstartedAt: isoOf(nowMs),\n\t\t},\n\t}, options));\n\tif (!begun.ok) return portFailure(run, begun.reason, \"delivery_store_unavailable\");\n\tconst answer = readBeginAnswer(begun.value);\n\tif (answer === undefined) return release(run, intent, \"delivery_store_unavailable\");\n\tif (!answer.begun) return finish(run, \"lease_lost\", { diagnostic: \"lease_lost\" });\n\t// The proof that this worker began the attempt: kept here only, never logged or reported.\n\tconst receipt = answer.receipt;\n\n\t// 5. The handoff: the irrevocable point. Nothing is awaited between the\n\t// begin above and this call except the clock read.\n\tconst request: WebhookTransportRequest = record({ destination: resolution.destination, method: \"POST\" as const, headers, body: intent.body });\n\tconst handoffMs = readClock(config.clock);\n\tconst timeoutMs = sendDeadlineMs - handoffMs;\n\tlet observation: WebhookDeliveryObservation;\n\tif (!(timeoutMs > 0)) {\n\t\t// Expired before the handoff: the transport would refuse it (R3), so it is not called.\n\t\treturn notSent(run, intent, receipt);\n\t}\n\trun.handedOff = true;\n\trun.counters.handedOff += 1;\n\tconst sent = await boundedCall(handoffMs, timeoutMs, config.signal, (options) => config.transport.send(request, options), () => readClock(config.clock), portTimeoutMs);\n\tif (!sent.ok && sent.reason === \"aborted\") return finish(run, \"abandoned\");\n\tif (!sent.ok) {\n\t\t// A throw or no answer by the deadline: the request may have been sent.\n\t\tobservation = { kind: sent.reason === \"timeout\" ? \"timeout\" : \"network_error\" };\n\t} else {\n\t\tconst result = readTransportResult(sent.value);\n\t\tif (result !== undefined && result.kind === \"not_sent\") return notSent(run, intent, receipt);\n\t\tobservation = result === undefined ? { kind: \"network_error\" } : result;\n\t}\n\n\t// 6. Classify, record the outcome (unfenced, with the receipt), settle\n\t// (fenced). The outcome is written first: if the settlement is refused\n\t// because the lease expired or was reclaimed, the attempt and what it\n\t// observed are still on record, and the intent is sent again after it is\n\t// reclaimed (at least once; receivers deduplicate by deliveryId).\n\tconst finishedMs = readClock(config.clock);\n\tlet classification: WebhookDeliveryClassification;\n\ttry {\n\t\tclassification = classifyWebhookDeliveryObservation(observation, { now: new Date(finishedMs), maxRetryAfterMs: config.limits.maxRetryAfterMs });\n\t} catch {\n\t\tclassification = record({ outcome: \"retryable\" as const, reason: \"network_error\" as const });\n\t}\n\tawait storeWrite(run, (options) => config.deliveries.finishAttempt({\n\t\ttenantId: intent.tenantId,\n\t\tspaceId: intent.spaceId,\n\t\tdeliveryId: intent.deliveryId,\n\t\tfence: intent.lease.fence,\n\t\treceipt,\n\t\tfinish: {\n\t\t\tfinishedAt: isoOf(finishedMs),\n\t\t\toutcome: classification.outcome,\n\t\t\treason: classification.reason,\n\t\t\t...(classification.httpStatus === undefined ? {} : { httpStatus: classification.httpStatus }),\n\t\t},\n\t}, options));\n\treturn applyClassification(run, intent, classification);\n}\n\n/**\n * Steps 2 and 4b: the subscription's state for this intent. Returns the\n * configuration when the subscription is active, in scope, and has been\n * active since the intent's eligibility revision or earlier; otherwise\n * settles the intent and returns `undefined`.\n */\nasync function readState(run: Run, intent: ClaimedIntent): Promise<{ readonly configuration: DispatchConfiguration; readonly startedMs: number } | undefined> {\n\tlet startedMs = Number.NaN;\n\tconst answer = await intentCall(run, intent, (options, nowMs) => {\n\t\tstartedMs = nowMs;\n\t\treturn run.config.subscriptions.readSubscription(\n\t\t\t{ tenantId: intent.tenantId, spaceId: intent.spaceId, subscriptionId: intent.subscriptionId },\n\t\t\toptions,\n\t\t);\n\t});\n\tif (!answer.ok) {\n\t\tawait portFailure(run, answer.reason, \"subscription_store_unavailable\");\n\t\treturn undefined;\n\t}\n\tconst state = readSubscriptionFor(answer.value, intent);\n\tif (state.kind === \"not_in_scope\") {\n\t\tawait deadLetter(run, \"subscription_not_in_scope\");\n\t\treturn undefined;\n\t}\n\tif (state.kind === \"unreadable\") {\n\t\tawait release(run, intent, \"subscription_store_unavailable\");\n\t\treturn undefined;\n\t}\n\tif (state.status === \"paused\") {\n\t\tawait cancel(run, \"subscription_paused\");\n\t\treturn undefined;\n\t}\n\tif (state.status === \"deleted\") {\n\t\tawait cancel(run, \"subscription_deleted\");\n\t\treturn undefined;\n\t}\n\t// Active, but since a revision later than the intent's: a pause ended the\n\t// intent's interval and a resume began a new one, which does not reopen\n\t// it (decision 3). This holds whatever the pause's `cancelPendingIntents`\n\t// did, and for intents fan-out wrote after it ran.\n\tif (intent.eligibilityRevision < state.statusSinceRevision) {\n\t\tawait cancel(run, \"subscription_paused\");\n\t\treturn undefined;\n\t}\n\treturn { configuration: state.configuration, startedMs };\n}\n\n/** A pre-handoff port call that did not answer: past the deadline, aborted, timed out or threw. */\nfunction portFailure(run: Run, reason: CallFailure, unavailable: WebhookDiagnosticCode): Promise<void> {\n\tif (reason === \"deadline\") return deadLetter(run, \"processing_deadline_exceeded\");\n\tif (reason === \"aborted\") {\n\t\tfinish(run, \"abandoned\");\n\t\treturn Promise.resolve();\n\t}\n\treturn release(run, run.intent!, reason === \"timeout\" ? \"port_timeout\" : unavailable);\n}\n\n/**\n * Decision 10 rows that end an attempt before the transport is reached (a\n * refused destination, a failed signer): logged as a complete attempt\n * under the lease, then settled. If the log write fails, nothing is spent:\n * the intent is released instead, so every spent attempt has a log entry.\n * A log write that timed out may still have committed; the release then\n * leaves an entry for an attempt that spent nothing (see the top of this\n * file).\n */\nasync function spendUnsent(run: Run, intent: ClaimedIntent, observation: WebhookDeliveryObservation): Promise<void> {\n\tconst nowMs = readClock(run.config.clock);\n\tconst classification = classifyWebhookDeliveryObservation(observation, { now: new Date(nowMs), maxRetryAfterMs: run.config.limits.maxRetryAfterMs });\n\tconst logged = await storeWrite(run, (options) => run.config.deliveries.appendAttempt({\n\t\towner: intent.lease.owner,\n\t\tfence: intent.lease.fence,\n\t\tnow: new Date(nowMs),\n\t\tattempt: {\n\t\t\tdeliveryId: intent.deliveryId,\n\t\t\tsubscriptionId: intent.subscriptionId,\n\t\t\teventId: intent.eventId,\n\t\t\tattempt: intent.attemptCount + 1,\n\t\t\tconfigurationVersion: run.version!,\n\t\t\tstartedAt: isoOf(nowMs),\n\t\t\tfinishedAt: isoOf(nowMs),\n\t\t\toutcome: classification.outcome,\n\t\t\treason: classification.reason,\n\t\t},\n\t}, options));\n\tif (logged.ok && logged.value === false) return finish(run, \"lease_lost\", { diagnostic: \"lease_lost\" });\n\tif (!logged.ok && logged.reason === \"aborted\") return finish(run, \"abandoned\");\n\tif (!logged.ok || logged.value !== true) return release(run, intent, logged.ok ? \"delivery_store_unavailable\" : logged.reason === \"timeout\" ? \"port_timeout\" : \"delivery_store_unavailable\");\n\treturn applyClassification(run, intent, classification);\n}\n\n/** The transport never started the request: record it `not_sent` and release, spending nothing. */\nasync function notSent(run: Run, intent: ClaimedIntent, receipt: string): Promise<void> {\n\tconst nowMs = readClock(run.config.clock);\n\tawait storeWrite(run, (options) => run.config.deliveries.finishAttempt({\n\t\ttenantId: intent.tenantId,\n\t\tspaceId: intent.spaceId,\n\t\tdeliveryId: intent.deliveryId,\n\t\tfence: intent.lease.fence,\n\t\treceipt,\n\t\tfinish: { finishedAt: isoOf(nowMs), outcome: \"not_sent\", reason: \"not_sent\" },\n\t}, options));\n\treturn release(run, intent, \"transport_not_sent\");\n}\n\n/** Settle an attempt's classification (decision 10). */\nfunction applyClassification(run: Run, intent: ClaimedIntent, classification: WebhookDeliveryClassification): Promise<void> {\n\tconst extra = { reason: classification.reason, httpStatus: classification.httpStatus, receiverActionLikely: classification.receiverActionLikely };\n\tswitch (classification.outcome) {\n\t\tcase \"delivered\":\n\t\t\treturn settle(run, { kind: \"delivered\" }, \"delivered\", extra);\n\t\tcase \"dead_letter\":\n\t\t\treturn settle(run, { kind: \"dead_letter\", reason: classification.reason }, \"dead_lettered\", extra);\n\t\tcase \"cancelled\":\n\t\t\treturn settle(run, { kind: \"cancelled\", reason: classification.reason }, \"cancelled\", extra);\n\t\tdefault:\n\t\t\treturn retryOrDeadLetter(run, intent, classification, extra);\n\t}\n}\n\n/** The delay before attempt `attempt + 1`, falling back to the longest configured delay when the port misbehaves. */\nfunction delayAfter(run: Run, attempt: number): number {\n\tlet delayMs: number;\n\ttry {\n\t\tdelayMs = apply(run.config.retryDelay, undefined, [attempt]) as number;\n\t} catch {\n\t\tdelayMs = NaN;\n\t}\n\tif (typeof delayMs !== \"number\" || !numberIsFinite(delayMs) || delayMs < 0) {\n\t\tconst delays = run.config.limits.deliveryRetryDelaysMs;\n\t\tdelayMs = delays[delays.length - 1]!;\n\t}\n\treturn delayMs;\n}\n\nfunction retryOrDeadLetter(\n\trun: Run,\n\tintent: ClaimedIntent,\n\tclassification: WebhookDeliveryClassification,\n\textra: Partial<WebhookDeliveryCycleEvent>,\n): Promise<void> {\n\tconst attempt = intent.attemptCount + 1;\n\tif (attempt >= run.config.limits.maxDeliveryAttempts) {\n\t\treturn settle(run, { kind: \"dead_letter\", reason: classification.reason }, \"dead_lettered\", extra);\n\t}\n\tconst nowMs = readClock(run.config.clock);\n\t// A 429's bounded Retry-After is honoured when it is longer than the schedule.\n\tconst delayMs = mathMax(delayAfter(run, attempt), classification.retryAfterMs ?? 0);\n\tconst availableAtMs = nowMs + delayMs;\n\tif (availableAtMs >= intent.processingDeadlineMs) return deadLetter(run, \"processing_deadline_exceeded\", extra);\n\treturn settle(run, { kind: \"retry\", availableAt: new Date(availableAtMs), outcome: \"retryable\", reason: classification.reason }, \"retry_scheduled\", extra);\n}\n\n/**\n * Return the intent to pending unsent, spending no attempt (decision 3).\n * It is available again after the delay the next attempt would wait; when\n * that falls at or past the processing deadline it is dead-lettered now,\n * because deferrals count toward that deadline (R4).\n */\nfunction release(run: Run, intent: ClaimedIntent, diagnostic: WebhookDiagnosticCode): Promise<void> {\n\tconst nowMs = readClock(run.config.clock);\n\tconst availableAtMs = nowMs + delayAfter(run, intent.attemptCount + 1);\n\tif (availableAtMs >= intent.processingDeadlineMs) return deadLetter(run, \"processing_deadline_exceeded\", { diagnostic });\n\treturn settle(run, { kind: \"release\", availableAt: new Date(availableAtMs), diagnostic }, \"released\", { diagnostic });\n}\n\nfunction cancel(run: Run, reason: \"authorization_revoked\" | \"subscription_paused\" | \"subscription_deleted\"): Promise<void> {\n\treturn settle(run, { kind: \"cancelled\", reason }, \"cancelled\", { reason });\n}\n\nfunction deadLetter(run: Run, diagnostic: WebhookDiagnosticCode, extra: Partial<WebhookDeliveryCycleEvent> = {}): Promise<void> {\n\treturn settle(run, { kind: \"dead_letter\", reason: diagnostic }, \"dead_lettered\", { ...extra, diagnostic });\n}\n\ntype Settlement = Parameters<WebhookDeliveryStore[\"settleDeliveryIntent\"]>[0][\"settlement\"];\n\n/**\n * The fenced settlement that ends this worker's hold on the intent. Only a\n * literal `true` counts as done and a literal `false` as a lost lease.\n * Anything else, a failed or late call included, is `abandoned`: the\n * settlement may or may not have applied, and nothing more is written\n * either way. If it did not apply, the intent is reclaimed after its lease\n * expires. The store clears the lease on every settlement, so at most one\n * settlement per claim applies.\n */\nasync function settle(\n\trun: Run,\n\tsettlement: Settlement,\n\tresult: Exclude<WebhookDeliveryCycleResultKind, \"lease_lost\" | \"abandoned\">,\n\textra: Partial<WebhookDeliveryCycleEvent>,\n): Promise<void> {\n\tconst outcome = await storeWrite(run, (options, nowMs) => run.config.deliveries.settleDeliveryIntent({\n\t\tdeliveryId: run.header.deliveryId,\n\t\towner: run.header.lease.owner,\n\t\tfence: run.header.lease.fence,\n\t\tnow: new Date(nowMs),\n\t\tsettlement,\n\t}, options));\n\tif (outcome.ok && outcome.value === true) return finish(run, result, extra);\n\tif (outcome.ok && outcome.value === false) return finish(run, \"lease_lost\", { ...extra, diagnostic: \"lease_lost\" });\n\treturn finish(run, \"abandoned\", extra);\n}\n\nconst COUNTER: Readonly<Record<WebhookDeliveryCycleResultKind, keyof Counters>> = freeze({\n\tdelivered: \"delivered\",\n\tretry_scheduled: \"retried\",\n\tdead_lettered: \"deadLettered\",\n\tcancelled: \"cancelled\",\n\treleased: \"released\",\n\tlease_lost: \"leaseLost\",\n\tabandoned: \"abandoned\",\n});\n\n/** Count the intent's result and report it once. A throwing observer is ignored. */\nfunction finish(run: Run, result: WebhookDeliveryCycleResultKind, extra: Partial<WebhookDeliveryCycleEvent> = {}): void {\n\tif (run.reported) return;\n\trun.reported = true;\n\trun.counters[COUNTER[result]] += 1;\n\tconst observe = run.config.observe;\n\tif (observe === undefined) return;\n\tconst intent = run.intent;\n\tconst event = record<WebhookDeliveryCycleEvent>({\n\t\tdeliveryId: run.header.deliveryId,\n\t\ttenantId: run.header.tenantId,\n\t\tspaceId: run.header.spaceId,\n\t\tsubscriptionId: intent?.subscriptionId,\n\t\teventId: intent?.eventId,\n\t\tattempt: intent === undefined ? undefined : intent.attemptCount + 1,\n\t\tconfigurationVersion: run.version,\n\t\tresult,\n\t\thandedOff: run.handedOff,\n\t\treason: extra.reason,\n\t\tdiagnostic: extra.diagnostic,\n\t\thttpStatus: extra.httpStatus,\n\t\treceiverActionLikely: extra.receiverActionLikely,\n\t});\n\ttry {\n\t\tapply(observe, undefined, [event]);\n\t} catch {\n\t\t// Telemetry never changes what the cycle did.\n\t}\n}\n","import { checkWebhookDestinationUrl } from \"./destination\";\nimport { guardOr } from \"./errors\";\nimport { freeze, isArray, isOneOf, matches, numberIsSafeInteger, snapshotJson, type Fail } from \"./snapshot\";\nimport { isWebhookIdentifier } from \"./store-input\";\n\n/*\n * Parameters of the governed actions (PR 9; README, \"Governed actions\").\n *\n * Each action's parameters are read here and nowhere else: by the action's\n * admission check (`admitSubmission`, src/governed-actions.ts), which Host\n * runs on every submission before it records anything, by the action's\n * schema (which Host runs before policies and the handler), and by the\n * handler itself (which reads again rather than trusting what it was handed).\n *\n * The reader copies the input with the package's plain-data snapshot (own\n * data properties only, accessors refused uncalled), refuses any key the\n * action does not declare, and checks every field. A refusal carries a fixed\n * code and the name of a declared field or `parameters`\n * (`webhookParameterRefusalMessage` keeps only those), not a caller value or\n * a caller key: Host writes a schema issue into the invocation's durable\n * `error` as `<path>: <message>`, and the path is always the root.\n *\n * Secret references (ADR 0018 decision 8, R7). Fields named `secretRef` take\n * a reference only. {@link isWebhookSecretReference} refuses the shapes key\n * material and ciphertext usually arrive in; it cannot tell an opaque\n * reference from random bytes of the same shape, so the actions also ask the\n * application's `secretReferences.verify` port, which must confirm that the\n * reference names a secret in the tenant's own secret store: at admission,\n * before Host persists the submission, and again before the handler writes.\n */\n\n/** The governed actions, by the name after the module namespace (`<namespace>.<name>`). */\nexport const WEBHOOK_DELIVERY_ACTION_NAMES = freeze([\n\t\"create_subscription\",\n\t\"update_subscription\",\n\t\"pause_subscription\",\n\t\"resume_subscription\",\n\t\"delete_subscription\",\n\t\"rotate_secret_staged\",\n\t\"rotate_secret_emergency\",\n\t\"requeue_delivery_intent\",\n\t\"requeue_fan_out_job\",\n\t\"enrich_fan_out_job_actor\",\n] as const);\n\n/** One governed action name. */\nexport type WebhookDeliveryActionName = (typeof WEBHOOK_DELIVERY_ACTION_NAMES)[number];\n\n/**\n * Why parameters were refused. `parameters_invalid`: not a plain-data\n * object, a field missing or malformed, or an id breaking the store\n * identifier rule. `unknown_parameter`: a key the action does not declare\n * (named in no message). `secret_ref_invalid`: a `secretRef` that is not a\n * secret reference. `destination_invalid`: a destination URL breaking the\n * URL rules (README, \"URL rules\"). `event_type_pattern_invalid`: a pattern\n * outside the pattern grammar. `update_ambiguous`: an update naming both or\n * neither of patterns and destination.\n */\nexport const WEBHOOK_ACTION_PARAMETER_CODES = freeze([\n\t\"parameters_invalid\",\n\t\"unknown_parameter\",\n\t\"secret_ref_invalid\",\n\t\"destination_invalid\",\n\t\"event_type_pattern_invalid\",\n\t\"update_ambiguous\",\n] as const);\n\n/** Why an action's parameters were refused. */\nexport type WebhookActionParameterCode = (typeof WEBHOOK_ACTION_PARAMETER_CODES)[number];\n\n/** `<namespace>.create_subscription` */\nexport interface WebhookCreateSubscriptionParameters {\n\treadonly subscriptionId: string;\n\treadonly eventTypePatterns: readonly string[];\n\treadonly destinationUrl: string;\n\t/** A secret reference, not key material or ciphertext (`isWebhookSecretReference`, then the verifier). */\n\treadonly secretRef: string;\n\t/** Only `v1` exists (decision 7); the default. */\n\treadonly signatureScheme?: \"v1\";\n}\n\n/** `<namespace>.update_subscription`: exactly one of the two changes per invocation. */\nexport type WebhookUpdateSubscriptionParameters =\n\t| { readonly subscriptionId: string; readonly eventTypePatterns: readonly string[]; readonly expectedRevision?: number }\n\t| { readonly subscriptionId: string; readonly destinationUrl: string; readonly expectedVersion?: number };\n\n/** `<namespace>.pause_subscription`, `resume_subscription` and `delete_subscription`. */\nexport interface WebhookSubscriptionTransitionParameters {\n\treadonly subscriptionId: string;\n\treadonly expectedRevision?: number;\n}\n\n/** `<namespace>.rotate_secret_staged` */\nexport interface WebhookStagedRotationParameters {\n\treadonly subscriptionId: string;\n\t/** The next secret's reference, not key material or ciphertext (`isWebhookSecretReference`, then the verifier). */\n\treadonly secretRef: string;\n\t/** The configuration version the operator read; the rotation applies only on it. */\n\treadonly expectedVersion: number;\n\t/** The operator's statement that the receiver already accepts the next secret (decision 8). */\n\treadonly receiverAcceptsNextSecret: true;\n}\n\n/** `<namespace>.rotate_secret_emergency` */\nexport interface WebhookEmergencyRotationParameters {\n\treadonly subscriptionId: string;\n\treadonly secretRef: string;\n\treadonly expectedVersion?: number;\n}\n\n/** `<namespace>.requeue_delivery_intent` */\nexport interface WebhookIntentRequeueParameters {\n\treadonly deliveryId: string;\n\t/** The intent's `fence` as the operator read it. */\n\treadonly expectedFence: number;\n}\n\n/** `<namespace>.requeue_fan_out_job` and `enrich_fan_out_job_actor`. */\nexport interface WebhookJobParameters {\n\treadonly eventId: string;\n\t/** The job's `fence` as the operator read it. */\n\treadonly expectedFence: number;\n}\n\n/** The parameters of each action, by name. */\nexport interface WebhookDeliveryActionParameters {\n\treadonly create_subscription: WebhookCreateSubscriptionParameters;\n\treadonly update_subscription: WebhookUpdateSubscriptionParameters;\n\treadonly pause_subscription: WebhookSubscriptionTransitionParameters;\n\treadonly resume_subscription: WebhookSubscriptionTransitionParameters;\n\treadonly delete_subscription: WebhookSubscriptionTransitionParameters;\n\treadonly rotate_secret_staged: WebhookStagedRotationParameters;\n\treadonly rotate_secret_emergency: WebhookEmergencyRotationParameters;\n\treadonly requeue_delivery_intent: WebhookIntentRequeueParameters;\n\treadonly requeue_fan_out_job: WebhookJobParameters;\n\treadonly enrich_fan_out_job_actor: WebhookJobParameters;\n}\n\n/** What reading one action's parameters found. */\nexport type WebhookActionParameterRead<N extends WebhookDeliveryActionName> =\n\t| { readonly ok: true; readonly value: WebhookDeliveryActionParameters[N] }\n\t| { readonly ok: false; readonly code: WebhookActionParameterCode; readonly field: string };\n\n// ---------------------------------------------------------------------------\n// Secret references and patterns\n// ---------------------------------------------------------------------------\n\n/** The longest secret reference accepted. */\nexport const WEBHOOK_SECRET_REF_MAX_LENGTH = 256;\n/** The longest run of characters between two separators (`:`, `/`, `@`, `#`) in a secret reference. */\nexport const WEBHOOK_SECRET_REF_MAX_SEGMENT = 64;\n\nconst SECRET_REF_SHAPE = /^[a-z][a-z0-9.-]{0,31}:[A-Za-z0-9._~:/@#-]+$/;\nconst SECRET_REF_LONG_SEGMENT = /[A-Za-z0-9._~-]{65,}/;\n\n/**\n * Whether `value` has the shape of a secret reference (ADR 0018 decision 8):\n * a lower-case scheme and `:` (`kms:`, `vault:`, `arn:`, `secret:` …), then\n * only `A–Z a–z 0–9 . _ ~ : / @ # -`, at most\n * {@link WEBHOOK_SECRET_REF_MAX_LENGTH} characters, with no run longer than\n * {@link WEBHOOK_SECRET_REF_MAX_SEGMENT} between separators.\n *\n * That refuses raw key bytes and their usual encodings: hex, base64 and\n * `whsec_…` values (no scheme), padded or standard base64 (`=`, `+`), PEM\n * armour and anything with whitespace or control characters, and long\n * encoded runs such as wrapped ciphertext. It cannot recognise key material\n * deliberately shaped like a reference (`x:` followed by 64 hex digits\n * passes), which is why the actions also require the application's\n * `secretReferences.verify` port to confirm the reference resolves in the\n * tenant's secret store.\n */\nexport function isWebhookSecretReference(value: unknown): value is string {\n\treturn typeof value === \"string\" && value.length <= WEBHOOK_SECRET_REF_MAX_LENGTH &&\n\t\tmatches(SECRET_REF_SHAPE, value) && !matches(SECRET_REF_LONG_SEGMENT, value);\n}\n\n/** The most patterns one subscription takes. */\nexport const WEBHOOK_MAX_EVENT_TYPE_PATTERNS = 64;\n\nconst PATTERN_SHAPE = /^(?:\\*|[A-Za-z0-9_:-]+(?:\\.[A-Za-z0-9_:-]+)*(?:\\.\\*)?)$/;\n\n/**\n * Whether `value` is an event type pattern the matcher understands: `*`,\n * `prefix.*`, or an exact type, built from `A–Z a–z 0–9 _ : -` segments\n * joined by `.`, at most 256 characters. A `*` anywhere else is refused,\n * since the matcher would treat it as a literal.\n */\nexport function isWebhookEventTypePattern(value: unknown): value is string {\n\treturn typeof value === \"string\" && value.length <= 256 && matches(PATTERN_SHAPE, value);\n}\n\n// ---------------------------------------------------------------------------\n// Reading\n// ---------------------------------------------------------------------------\n\ntype Read<T> = { readonly ok: true; readonly value: T } | { readonly ok: false; readonly code: WebhookActionParameterCode; readonly field: string };\n\n/**\n * Thrown inside a reader to stop it; `readWebhookActionParameters` catches\n * it. Recognized by its private field (`Refusal.is`), which only this class\n * can create and which a brand check reads without running any of the\n * value's code (no getter, no Proxy trap), so a caller's input that throws\n * a look-alike `{ refusal: true, code, … }` from a trap is not taken for\n * one. The class is not exported and keeps no registry (Boundary Guard G5).\n */\nclass Refusal {\n\treadonly #brand = true;\n\treadonly code: WebhookActionParameterCode;\n\treadonly field: string;\n\n\tconstructor(code: WebhookActionParameterCode, field: string) {\n\t\tthis.code = code;\n\t\tthis.field = field;\n\t\tfreeze(this);\n\t}\n\n\t/** Whether `value` was made by this class's constructor. Reads nothing of `value`. */\n\tstatic is(value: unknown): value is Refusal {\n\t\treturn value !== null && typeof value === \"object\" && #brand in value;\n\t}\n}\n\nconst objectKeys = Object.keys;\n\nfunction refuse(code: WebhookActionParameterCode, field: string): never {\n\tthrow new Refusal(code, field);\n}\n\nconst snapshotFail: Fail = () => refuse(\"parameters_invalid\", \"parameters\");\n\ntype Fields = { readonly [key: string]: unknown };\n\nconst ALLOWED_KEYS: { readonly [N in WebhookDeliveryActionName]: readonly string[] } = freeze({\n\tcreate_subscription: freeze([\"subscriptionId\", \"eventTypePatterns\", \"destinationUrl\", \"secretRef\", \"signatureScheme\"]),\n\tupdate_subscription: freeze([\"subscriptionId\", \"eventTypePatterns\", \"expectedRevision\", \"destinationUrl\", \"expectedVersion\"]),\n\tpause_subscription: freeze([\"subscriptionId\", \"expectedRevision\"]),\n\tresume_subscription: freeze([\"subscriptionId\", \"expectedRevision\"]),\n\tdelete_subscription: freeze([\"subscriptionId\", \"expectedRevision\"]),\n\trotate_secret_staged: freeze([\"subscriptionId\", \"secretRef\", \"expectedVersion\", \"receiverAcceptsNextSecret\"]),\n\trotate_secret_emergency: freeze([\"subscriptionId\", \"secretRef\", \"expectedVersion\"]),\n\trequeue_delivery_intent: freeze([\"deliveryId\", \"expectedFence\"]),\n\trequeue_fan_out_job: freeze([\"eventId\", \"expectedFence\"]),\n\tenrich_fan_out_job_actor: freeze([\"eventId\", \"expectedFence\"]),\n});\n\nfunction snapshotParameters(input: unknown): Fields {\n\tconst copy = snapshotJson(input, \"parameters\", snapshotFail);\n\tif (copy === null || typeof copy !== \"object\" || isArray(copy)) refuse(\"parameters_invalid\", \"parameters\");\n\treturn copy as Fields;\n}\n\nfunction idField(fields: Fields, key: string): string {\n\tconst value = fields[key];\n\tif (!isWebhookIdentifier(value)) refuse(\"parameters_invalid\", key);\n\treturn value;\n}\n\nfunction optionalWhole(fields: Fields, key: string, min: number): number | undefined {\n\tconst value = fields[key];\n\tif (value === undefined) return undefined;\n\tif (typeof value !== \"number\" || !numberIsSafeInteger(value) || value < min) refuse(\"parameters_invalid\", key);\n\treturn value;\n}\n\nfunction whole(fields: Fields, key: string, min: number): number {\n\tconst value = optionalWhole(fields, key, min);\n\tif (value === undefined) refuse(\"parameters_invalid\", key);\n\treturn value;\n}\n\nfunction secretRefField(fields: Fields): string {\n\tconst value = fields[\"secretRef\"];\n\tif (!isWebhookSecretReference(value)) refuse(\"secret_ref_invalid\", \"secretRef\");\n\treturn value;\n}\n\nfunction destinationField(fields: Fields): string {\n\tconst value = fields[\"destinationUrl\"];\n\tif (typeof value !== \"string\") refuse(\"destination_invalid\", \"destinationUrl\");\n\tconst check = guardOr(() => checkWebhookDestinationUrl(value), () => ({ ok: false as const, code: \"invalid_url\" as const }));\n\tif (!check.ok) refuse(\"destination_invalid\", \"destinationUrl\");\n\treturn value;\n}\n\nfunction patternsField(fields: Fields): readonly string[] {\n\tconst value = fields[\"eventTypePatterns\"];\n\tif (!isArray(value) || value.length === 0 || value.length > WEBHOOK_MAX_EVENT_TYPE_PATTERNS) refuse(\"event_type_pattern_invalid\", \"eventTypePatterns\");\n\tconst out: string[] = [];\n\tfor (let index = 0; index < value.length; index += 1) {\n\t\tconst pattern = value[index];\n\t\tif (!isWebhookEventTypePattern(pattern)) refuse(\"event_type_pattern_invalid\", \"eventTypePatterns\");\n\t\tout[index] = pattern;\n\t}\n\treturn freeze(out);\n}\n\n/** Refuse any key the action does not declare, without naming it. */\nfunction onlyKnownKeys(fields: Fields, name: WebhookDeliveryActionName): void {\n\tconst keys = objectKeys(fields);\n\tfor (let index = 0; index < keys.length; index += 1) {\n\t\tif (!isOneOf(ALLOWED_KEYS[name], keys[index])) refuse(\"unknown_parameter\", \"parameters\");\n\t}\n}\n\nfunction readFields(name: WebhookDeliveryActionName, fields: Fields): object {\n\tswitch (name) {\n\t\tcase \"create_subscription\": {\n\t\t\tconst scheme = fields[\"signatureScheme\"];\n\t\t\tif (scheme !== undefined && scheme !== \"v1\") refuse(\"parameters_invalid\", \"signatureScheme\");\n\t\t\treturn {\n\t\t\t\tsubscriptionId: idField(fields, \"subscriptionId\"),\n\t\t\t\teventTypePatterns: patternsField(fields),\n\t\t\t\tdestinationUrl: destinationField(fields),\n\t\t\t\tsecretRef: secretRefField(fields),\n\t\t\t\t...(scheme === undefined ? {} : { signatureScheme: \"v1\" }),\n\t\t\t};\n\t\t}\n\t\tcase \"update_subscription\": {\n\t\t\tconst patterns = fields[\"eventTypePatterns\"] !== undefined;\n\t\t\tconst destination = fields[\"destinationUrl\"] !== undefined;\n\t\t\tif (patterns === destination) refuse(\"update_ambiguous\", \"parameters\");\n\t\t\tconst subscriptionId = idField(fields, \"subscriptionId\");\n\t\t\tif (patterns) {\n\t\t\t\tif (fields[\"expectedVersion\"] !== undefined) refuse(\"parameters_invalid\", \"expectedVersion\");\n\t\t\t\tconst expectedRevision = optionalWhole(fields, \"expectedRevision\", 1);\n\t\t\t\treturn { subscriptionId, eventTypePatterns: patternsField(fields), ...(expectedRevision === undefined ? {} : { expectedRevision }) };\n\t\t\t}\n\t\t\tif (fields[\"expectedRevision\"] !== undefined) refuse(\"parameters_invalid\", \"expectedRevision\");\n\t\t\tconst expectedVersion = optionalWhole(fields, \"expectedVersion\", 1);\n\t\t\treturn { subscriptionId, destinationUrl: destinationField(fields), ...(expectedVersion === undefined ? {} : { expectedVersion }) };\n\t\t}\n\t\tcase \"pause_subscription\":\n\t\tcase \"resume_subscription\":\n\t\tcase \"delete_subscription\": {\n\t\t\tconst expectedRevision = optionalWhole(fields, \"expectedRevision\", 1);\n\t\t\treturn { subscriptionId: idField(fields, \"subscriptionId\"), ...(expectedRevision === undefined ? {} : { expectedRevision }) };\n\t\t}\n\t\tcase \"rotate_secret_staged\": {\n\t\t\tif (fields[\"receiverAcceptsNextSecret\"] !== true) refuse(\"parameters_invalid\", \"receiverAcceptsNextSecret\");\n\t\t\treturn {\n\t\t\t\tsubscriptionId: idField(fields, \"subscriptionId\"),\n\t\t\t\tsecretRef: secretRefField(fields),\n\t\t\t\texpectedVersion: whole(fields, \"expectedVersion\", 1),\n\t\t\t\treceiverAcceptsNextSecret: true,\n\t\t\t};\n\t\t}\n\t\tcase \"rotate_secret_emergency\": {\n\t\t\tconst expectedVersion = optionalWhole(fields, \"expectedVersion\", 1);\n\t\t\treturn { subscriptionId: idField(fields, \"subscriptionId\"), secretRef: secretRefField(fields), ...(expectedVersion === undefined ? {} : { expectedVersion }) };\n\t\t}\n\t\tcase \"requeue_delivery_intent\":\n\t\t\treturn { deliveryId: idField(fields, \"deliveryId\"), expectedFence: whole(fields, \"expectedFence\", 0) };\n\t\tcase \"requeue_fan_out_job\":\n\t\tcase \"enrich_fan_out_job_actor\":\n\t\t\treturn { eventId: idField(fields, \"eventId\"), expectedFence: whole(fields, \"expectedFence\", 0) };\n\t}\n}\n\n/** The refusal `code` and `field` with each held to its fixed set: a parameter code, and a declared field or `parameters`. */\nfunction fixedRefusal(code: unknown, field: unknown): { readonly ok: false; readonly code: WebhookActionParameterCode; readonly field: string } {\n\treturn freeze({\n\t\tok: false as const,\n\t\tcode: isOneOf(WEBHOOK_ACTION_PARAMETER_CODES, code) ? (code as WebhookActionParameterCode) : \"parameters_invalid\",\n\t\tfield: typeof field === \"string\" && isPackageField(field) ? field : \"parameters\",\n\t});\n}\n\nconst PARAMETERS_INVALID = fixedRefusal(\"parameters_invalid\", \"parameters\");\n\n/**\n * Read one action's parameters. Never throws: the only thrown value whose\n * properties are read is the package's own `Refusal` (recognized by\n * `Refusal.is`, which runs none of a value's code); anything else thrown\n * while the input is read (an accessor, a Proxy trap, a look-alike refusal)\n * is dropped unread and reported as `parameters_invalid`. The code and field\n * returned are each checked against their fixed set (`fixedRefusal`). Tests:\n * \"forged refusals: …\".\n */\nexport function readWebhookActionParameters<N extends WebhookDeliveryActionName>(name: N, input: unknown): WebhookActionParameterRead<N> {\n\ttry {\n\t\tconst fields = snapshotParameters(input);\n\t\tonlyKnownKeys(fields, name);\n\t\treturn freeze({ ok: true as const, value: freeze(readFields(name, fields)) as WebhookDeliveryActionParameters[N] });\n\t} catch (thrown) {\n\t\treturn Refusal.is(thrown) ? fixedRefusal(thrown.code, thrown.field) : PARAMETERS_INVALID;\n\t}\n}\n\n/** A field name the reader itself reports: one of the declared keys, or `parameters`. */\nfunction isPackageField(field: string): boolean {\n\tif (field === \"parameters\") return true;\n\tfor (const name of WEBHOOK_DELIVERY_ACTION_NAMES) if (isOneOf(ALLOWED_KEYS[name], field)) return true;\n\treturn false;\n}\n\n/** The fixed text of a refusal: `<code> (<package field>)`. Never a caller value or key. */\nexport function webhookParameterRefusalMessage(code: WebhookActionParameterCode, field: string): string {\n\treturn `${code} (${isPackageField(field) ? field : \"parameters\"})`;\n}\n\n// ---------------------------------------------------------------------------\n// Schemas\n// ---------------------------------------------------------------------------\n\n/** A Platform `SchemaValidator`, structurally, with the portable JSON Schema discovery reads. */\nexport interface WebhookActionSchema<T> {\n\tparse(input: unknown): T;\n\tsafeParse(input: unknown):\n\t\t| { success: true; data: T }\n\t\t| { success: false; error: { issues: { path: PropertyKey[]; message: string }[] } };\n\ttoJSONSchema(): object;\n}\n\nconst ID_SCHEMA = freeze({ type: \"string\", minLength: 1, maxLength: 256 });\nconst FENCE_SCHEMA = freeze({ type: \"integer\", minimum: 0 });\nconst REVISION_SCHEMA = freeze({ type: \"integer\", minimum: 1 });\nconst SECRET_REF_SCHEMA = freeze({\n\ttype: \"string\",\n\tmaxLength: WEBHOOK_SECRET_REF_MAX_LENGTH,\n\tpattern: \"^[a-z][a-z0-9.-]{0,31}:[A-Za-z0-9._~:/@#-]+$\",\n\tdescription: \"A secret reference resolved in the tenant's secret store, not key material or ciphertext. No run between separators may exceed 64 characters.\",\n});\nconst PATTERNS_SCHEMA = freeze({\n\ttype: \"array\",\n\tminItems: 1,\n\tmaxItems: WEBHOOK_MAX_EVENT_TYPE_PATTERNS,\n\titems: { type: \"string\", maxLength: 256, pattern: \"^(?:\\\\*|[A-Za-z0-9_:-]+(?:\\\\.[A-Za-z0-9_:-]+)*(?:\\\\.\\\\*)?)$\" },\n});\nconst URL_SCHEMA = freeze({ type: \"string\", maxLength: 2048, pattern: \"^https://\" });\n\nfunction objectSchema(properties: Record<string, object>, required: readonly string[]): object {\n\treturn { type: \"object\", properties, required: [...required], additionalProperties: false };\n}\n\nconst JSON_SCHEMAS: { readonly [N in WebhookDeliveryActionName]: () => object } = freeze({\n\tcreate_subscription: () => objectSchema(\n\t\t{ subscriptionId: ID_SCHEMA, eventTypePatterns: PATTERNS_SCHEMA, destinationUrl: URL_SCHEMA, secretRef: SECRET_REF_SCHEMA, signatureScheme: { type: \"string\", enum: [\"v1\"] } },\n\t\t[\"subscriptionId\", \"eventTypePatterns\", \"destinationUrl\", \"secretRef\"],\n\t),\n\tupdate_subscription: () => ({\n\t\t...objectSchema({ subscriptionId: ID_SCHEMA, eventTypePatterns: PATTERNS_SCHEMA, expectedRevision: REVISION_SCHEMA, destinationUrl: URL_SCHEMA, expectedVersion: REVISION_SCHEMA }, [\"subscriptionId\"]),\n\t\toneOf: [{ required: [\"eventTypePatterns\"] }, { required: [\"destinationUrl\"] }],\n\t}),\n\tpause_subscription: () => objectSchema({ subscriptionId: ID_SCHEMA, expectedRevision: REVISION_SCHEMA }, [\"subscriptionId\"]),\n\tresume_subscription: () => objectSchema({ subscriptionId: ID_SCHEMA, expectedRevision: REVISION_SCHEMA }, [\"subscriptionId\"]),\n\tdelete_subscription: () => objectSchema({ subscriptionId: ID_SCHEMA, expectedRevision: REVISION_SCHEMA }, [\"subscriptionId\"]),\n\trotate_secret_staged: () => objectSchema(\n\t\t{ subscriptionId: ID_SCHEMA, secretRef: SECRET_REF_SCHEMA, expectedVersion: REVISION_SCHEMA, receiverAcceptsNextSecret: { type: \"boolean\", const: true } },\n\t\t[\"subscriptionId\", \"secretRef\", \"expectedVersion\", \"receiverAcceptsNextSecret\"],\n\t),\n\trotate_secret_emergency: () => objectSchema({ subscriptionId: ID_SCHEMA, secretRef: SECRET_REF_SCHEMA, expectedVersion: REVISION_SCHEMA }, [\"subscriptionId\", \"secretRef\"]),\n\trequeue_delivery_intent: () => objectSchema({ deliveryId: ID_SCHEMA, expectedFence: FENCE_SCHEMA }, [\"deliveryId\", \"expectedFence\"]),\n\trequeue_fan_out_job: () => objectSchema({ eventId: ID_SCHEMA, expectedFence: FENCE_SCHEMA }, [\"eventId\", \"expectedFence\"]),\n\tenrich_fan_out_job_actor: () => objectSchema({ eventId: ID_SCHEMA, expectedFence: FENCE_SCHEMA }, [\"eventId\", \"expectedFence\"]),\n});\n\n/** A thrown `parse` failure: fixed text only. */\nclass WebhookActionParameterError extends Error {\n\tconstructor(message: string) {\n\t\tsuper(message);\n\t\tthis.name = \"WebhookActionParameterError\";\n\t}\n}\n\n/**\n * The schema of one action. `safeParse` reports a refusal as one issue at\n * the root path whose message is {@link webhookParameterRefusalMessage}, so\n * Host's durable `validation_failed` error holds package text only.\n */\nexport function webhookActionSchema<N extends WebhookDeliveryActionName>(name: N): WebhookActionSchema<WebhookDeliveryActionParameters[N]> {\n\tconst safeParse = (input: unknown) => {\n\t\tconst read = readWebhookActionParameters(name, input);\n\t\tif (read.ok) return { success: true as const, data: read.value };\n\t\treturn { success: false as const, error: { issues: [{ path: [] as PropertyKey[], message: webhookParameterRefusalMessage(read.code, read.field) }] } };\n\t};\n\treturn freeze({\n\t\tparse(input: unknown) {\n\t\t\tconst result = safeParse(input);\n\t\t\tif (result.success) return result.data;\n\t\t\tthrow new WebhookActionParameterError(result.error.issues[0]!.message);\n\t\t},\n\t\tsafeParse,\n\t\ttoJSONSchema: JSON_SCHEMAS[name],\n\t});\n}\n\n// ---------------------------------------------------------------------------\n// Namespaces and action ids\n// ---------------------------------------------------------------------------\n\nconst NAMESPACE_SHAPE = /^[a-z][a-z0-9-]{0,63}$/;\n\n/** The default module namespace. */\nexport const DEFAULT_WEBHOOK_DELIVERY_NAMESPACE = \"webhook-delivery\";\n\n/** Whether `value` is a module namespace this package accepts (Platform's rule, at most 64 characters). */\nexport function isWebhookDeliveryNamespace(value: unknown): value is string {\n\treturn typeof value === \"string\" && matches(NAMESPACE_SHAPE, value);\n}\n\n/** The action name of `actionId` when it is one of this namespace's governed actions. */\nexport function webhookActionNameOf(namespace: string, actionId: unknown): WebhookDeliveryActionName | undefined {\n\tif (typeof actionId !== \"string\" || actionId.length <= namespace.length + 1 || actionId[namespace.length] !== \".\") return undefined;\n\tif (actionId.slice(0, namespace.length) !== namespace) return undefined;\n\tconst name = actionId.slice(namespace.length + 1);\n\tfor (const candidate of WEBHOOK_DELIVERY_ACTION_NAMES) if (candidate === name) return candidate;\n\treturn undefined;\n}\n","import type {\n\tActionAdmission,\n\tActionAdmissionDecision,\n\tActionContext,\n\tActionDefinition,\n\tActionResult,\n\tFabricModule,\n\tPolicyContext,\n\tPolicyEvaluator,\n\tPolicyOutcome,\n} from \"@fabricorg/platform\";\n\nimport { WEBHOOK_DELIVERY_ACTION_EVENT_TYPES, type WebhookDeliveryActionEventType } from \"./action-events\";\nimport {\n\tDEFAULT_WEBHOOK_DELIVERY_NAMESPACE,\n\tisWebhookDeliveryNamespace,\n\treadWebhookActionParameters,\n\tWEBHOOK_DELIVERY_ACTION_NAMES,\n\twebhookActionNameOf,\n\twebhookActionSchema,\n\ttype WebhookDeliveryActionName,\n\ttype WebhookDeliveryActionParameters,\n} from \"./action-parameters\";\nimport { WEBHOOK_ACTION_REFUSAL_CODES, type WebhookActionRefusalCode } from \"./codes\";\nimport { governedActionError } from \"./errors\";\nimport { boundedCall, captureFanOutClock, readFanOutClock, type FanOutClock } from \"./fan-out-call\";\nimport { assertPositiveInteger, resolveWebhookDeliveryLimits, type WebhookDeliveryLimits } from \"./limits\";\nimport type {\n\tWebhookCallOptions,\n\tWebhookClock,\n\tWebhookDeliveryStore,\n\tWebhookDestinationResolver,\n\tWebhookScope,\n\tWebhookSubscriptionStore,\n\tWebhookSubscriptionWriter,\n} from \"./ports\";\nimport { apply, freeze, isOneOf, numberIsSafeInteger } from \"./snapshot\";\nimport { isoOf, isWebhookIdentifier } from \"./store-input\";\n\n/*\n * The governed operator actions (ADR 0018 decisions 5, 8 and 10;\n * Consequences; README, \"Governed actions\"). `createWebhookDeliveryModule()`\n * builds one `FabricModule` from the ports it is given at the composition\n * root; nothing is registered in module scope (decision 6, ADR 0008), so two\n * modules built in one process share nothing but this code.\n *\n * Every action:\n *\n * - declares `admitSubmission` (`admissionFor`), which Host (7.3.0 and\n * later) runs on every submission before it records anything: it reads\n * the parameters with the package reader and, for an action that takes a\n * `secretRef`, asks the application's `secretReferences.verify` with\n * Host's trusted tenant and space. A refused submission leaves no\n * invocation, idempotency key, event or error in Host's store (tests\n * \"secret material in a secretRef is refused at admission …\" and \"key\n * material shaped like a reference …\" in tests/governed-actions.test.ts);\n * - refuses to run (`admission_not_enforced`, `handlerFor`) unless Host\n * hands it `ActionContext.admittedAt`, so under a Host that skipped the\n * check, nothing is written;\n * - runs through Host's governed path: Host validates the parameters with\n * the action's schema, records the module policy's decision, runs the\n * handler and appends the declared event;\n * - acts only in Host's trusted tenant and space: parameters declare no\n * tenant or space (`ALLOWED_KEYS`, src/action-parameters.ts), and\n * `handlerFor` hands each handler `scopeOf(ctx)` as the only scope its\n * store calls use, so a subscription, job or intent of another scope is\n * `not_found` to the store and the action refuses (test \"every action\n * that names a subscription, intent or job refuses one from another tenant\n * or space …\");\n * - makes at most one write to the subscription store and at most one\n * compare-and-set to the delivery store (each handler in `HANDLERS`), so\n * the change is one atomic store step; pause, resume and delete add\n * `cancelPendingIntents` as a best-effort cleanup (`cleanUp`), which\n * dispatch does not depend on;\n * - fails with `webhook_action_refused:<code>` (`WEBHOOK_ACTION_REFUSAL_CODES`)\n * and nothing else in the error (`refused`), emits no event when it\n * refuses, and builds events from ids, numbers, patterns and timestamps\n * only (test \"no secret bytes, reference or URL reaches an event …\").\n *\n * The stores are not Host's store, so a store write and Host's event append\n * are not one transaction. If Host fails after the handler's write (its\n * event append, or a crash before it commits), the write stands without its\n * event; the invocation is left `failed` or `running` for an operator to\n * reconcile. Subscription and rotation actions are declared not idempotent,\n * so Host refuses to re-run an interrupted one (\"manual reconciliation is\n * required\"). The requeue and enrichment actions are idempotent: every\n * attempt of one invocation, one after another or overlapping, reports the\n * change some attempt of it committed, from that change's evidence, even\n * after the record it names was purged (`oncePerInvocation`; the stores\n * recognize the invocation in their compare-and-set's atomic step).\n */\n\n// ---------------------------------------------------------------------------\n// Public options and ports\n// ---------------------------------------------------------------------------\n\n/** What the module's operator policy asks the application about one invocation. */\nexport interface WebhookOperatorAuthorizationInput {\n\t/** `<namespace>.<action name>`. */\n\treadonly actionId: string;\n\treadonly action: WebhookDeliveryActionName;\n\treadonly tenantId: string;\n\treadonly spaceId: string;\n\treadonly actorId: string;\n\treadonly actorType: string;\n\t/** The ids the action names, copied from three id fields by `operatorPolicy`; no URL or secret reference. */\n\treadonly target: {\n\t\treadonly subscriptionId?: string;\n\t\treadonly deliveryId?: string;\n\t\treadonly eventId?: string;\n\t};\n}\n\n/**\n * The module policy's question (`<namespace>.operator_authorized.v1`). Only a\n * literal `true` passes; `false`, any other answer, a throw or a timeout\n * blocks the invocation. Deny by default: the module cannot be built\n * without it.\n */\nexport type WebhookOperatorAuthorization = (\n\tinput: WebhookOperatorAuthorizationInput,\n\toptions: WebhookCallOptions,\n) => boolean | Promise<boolean>;\n\n/**\n * Confirms that a secret reference names a secret of this tenant in the\n * application's secret store (decision 8): at admission, before Host records\n * the submission, and again before the action writes it. Only a literal\n * `\"valid\"` passes. It must not return or log the secret, and it should honour\n * `options.signal`, which Host aborts at its admission deadline.\n */\nexport interface WebhookSecretReferenceVerifier {\n\tverify(input: WebhookScope & { readonly secretRef: string }, options: WebhookCallOptions): Promise<\"valid\" | \"invalid\">;\n}\n\n/**\n * What the application's actor reader found on the canonical event\n * (decision 5). `withheld`: the application's own actor-disclosure rule for\n * this event (the same rule as Host's `includeActor` hook) excludes the\n * actor, so enrichment must not add it. `not_found`: no such event in this\n * tenant and space.\n */\nexport type WebhookEventActorReading =\n\t| { readonly state: \"found\"; readonly actorId: string; readonly actorType: string }\n\t| { readonly state: \"withheld\" }\n\t| { readonly state: \"not_found\" };\n\n/** Reads the actor of the canonical event for a legacy job's tenant, space and `eventId` (decision 5). */\nexport interface WebhookEventActorReader {\n\treadEventActor(\n\t\tinput: WebhookScope & {\n\t\t\treadonly eventId: string;\n\t\t\treadonly eventType: string;\n\t\t\treadonly payloadClassification: string;\n\t\t},\n\t\toptions: WebhookCallOptions,\n\t): Promise<WebhookEventActorReading>;\n}\n\n/** Options for {@link createWebhookDeliveryModule}. */\nexport interface WebhookDeliveryModuleOptions {\n\t/** The module namespace; actions are `<namespace>.<name>`. Default `webhook-delivery`. */\n\treadonly namespace?: string;\n\treadonly subscriptions: WebhookSubscriptionStore & WebhookSubscriptionWriter;\n\treadonly deliveries: WebhookDeliveryStore;\n\t/** Re-validates a destination at configuration change and at intent requeue (decision 6). */\n\treadonly resolver: WebhookDestinationResolver;\n\treadonly secretReferences: WebhookSecretReferenceVerifier;\n\treadonly actorReader: WebhookEventActorReader;\n\treadonly authorizeOperatorAction: WebhookOperatorAuthorization;\n\treadonly clock: WebhookClock;\n\t/** `portTimeoutMs` bounds every port call; `fanOutDeadlineMs` and `deliveryDeadlineMs` set requeued deadlines; `attemptTimeoutMs` enters the staged rotation's retention. */\n\treadonly limits?: Partial<WebhookDeliveryLimits>;\n\t/** The receivers' signature timestamp tolerance, for a staged rotation's `previousSecretRetainUntil`. Default 300 000 (R6). */\n\treadonly verifierToleranceMs?: number;\n}\n\n/** The module policy's id for a namespace. */\nexport function webhookOperatorPolicyId(namespace: string = DEFAULT_WEBHOOK_DELIVERY_NAMESPACE): `${string}.v${number}` {\n\treturn `${namespace}.operator_authorized.v1`;\n}\n\n// ---------------------------------------------------------------------------\n// Internals\n// ---------------------------------------------------------------------------\n\ninterface Deps {\n\treadonly namespace: string;\n\treadonly subscriptions: WebhookSubscriptionStore & WebhookSubscriptionWriter;\n\treadonly deliveries: WebhookDeliveryStore;\n\treadonly resolver: WebhookDestinationResolver;\n\treadonly secretReferences: WebhookSecretReferenceVerifier;\n\treadonly actorReader: WebhookEventActorReader;\n\treadonly authorize: WebhookOperatorAuthorization;\n\treadonly clock: FanOutClock;\n\treadonly limits: WebhookDeliveryLimits;\n\treadonly verifierToleranceMs: number;\n}\n\nconst SUBSCRIPTION = \"WebhookSubscription\";\nconst INTENT = \"WebhookDeliveryIntent\";\nconst JOB = \"WebhookFanOutJob\";\n\n/** A refusal: the handler's result and Host's durable error. */\nfunction refused(code: WebhookActionRefusalCode): ActionResult {\n\treturn { success: false, error: `webhook_action_refused:${code}` };\n}\n\n/** A success with its one event (Host's default `_events` result field). */\nfunction emitted(eventType: WebhookDeliveryActionEventType, subjectType: string, subjectId: string, payload: Record<string, unknown>): ActionResult {\n\treturn {\n\t\tsuccess: true,\n\t\tdata: { ...payload, _events: [{ eventType, eventSchemaVersion: 1, subjectType, subjectId, payload }] },\n\t};\n}\n\n/**\n * A thrown marker that ends a handler with a refusal; `handlerFor`'s catch\n * turns it into the result. Recognized by its private field (`Stop.is`),\n * which only this class can create and which a brand check reads without\n * running any of the value's code, so a port answer that throws a\n * look-alike `{ stop: … }` (from an iterator or a Proxy trap) is not taken\n * for one. Not exported; keeps no registry (Boundary Guard G5).\n */\nclass Stop {\n\treadonly #brand = true;\n\treadonly code: WebhookActionRefusalCode;\n\n\tconstructor(code: WebhookActionRefusalCode) {\n\t\tthis.code = code;\n\t\tfreeze(this);\n\t}\n\n\t/** Whether `value` was made by this class's constructor. Reads nothing of `value`. */\n\tstatic is(value: unknown): value is Stop {\n\t\treturn value !== null && typeof value === \"object\" && #brand in value;\n\t}\n}\n\nfunction stop(code: WebhookActionRefusalCode): never {\n\tthrow new Stop(code);\n}\n\nconst getOwnPropertyDescriptor = Reflect.getOwnPropertyDescriptor;\n\n/** An own data property of a port's answer, or `undefined`; a getter is not called, and a throwing Proxy trap reads as `undefined`. */\nfunction prop(value: unknown, key: string): unknown {\n\tif (value === null || typeof value !== \"object\") return undefined;\n\ttry {\n\t\tconst descriptor = getOwnPropertyDescriptor(value, key);\n\t\treturn descriptor !== undefined && \"value\" in descriptor ? descriptor.value : undefined;\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\nfunction whole(value: unknown): number | undefined {\n\treturn typeof value === \"number\" && numberIsSafeInteger(value) && value >= 0 ? value : undefined;\n}\n\nfunction nowMs(deps: Deps): number {\n\ttry {\n\t\treturn readFanOutClock(deps.clock);\n\t} catch {\n\t\treturn stop(\"action_failed\");\n\t}\n}\n\n/**\n * One port call, bounded by `portTimeoutMs` (R4) and aborted with `parent`.\n * `undefined` when it threw, timed out or was aborted; the thrown value is\n * never read.\n */\nasync function port<T>(deps: Deps, run: (options: WebhookCallOptions) => Promise<T>, parent?: AbortSignal): Promise<{ readonly value: T } | undefined> {\n\tconst outcome = await boundedCall(nowMs(deps), deps.limits.portTimeoutMs, parent, run, () => readFanOutClock(deps.clock));\n\treturn outcome.ok ? { value: outcome.value } : undefined;\n}\n\n/**\n * Host's trusted scope for the invocation. Every store call an action makes\n * is given this scope and no other: no action parameter names a tenant or a\n * space (`ALLOWED_KEYS` in src/action-parameters.ts refuses the keys).\n */\nfunction scopeOf(ctx: ActionContext<unknown>): WebhookScope {\n\tconst tenantId = prop(ctx, \"tenantId\");\n\tconst spaceId = prop(ctx, \"spaceId\");\n\tif (!isWebhookIdentifier(tenantId) || !isWebhookIdentifier(spaceId)) stop(\"scope_invalid\");\n\treturn freeze({ tenantId, spaceId });\n}\n\nfunction actorOf(ctx: ActionContext<unknown>): string {\n\tconst actorId = prop(ctx, \"actorId\");\n\tif (!isWebhookIdentifier(actorId)) stop(\"actor_invalid\");\n\treturn actorId;\n}\n\nfunction invocationOf(ctx: ActionContext<unknown>): string | undefined {\n\tconst id = prop(ctx, \"actionInvocationId\");\n\treturn isWebhookIdentifier(id) ? id : undefined;\n}\n\ninterface SubscriptionRead {\n\treadonly status: string;\n\t/** The revision the current status began at (`WebhookSubscriptionSnapshot.statusSinceRevision`). */\n\treadonly statusSinceRevision: number;\n\treadonly version: number;\n\treadonly destinationUrl: string;\n\treadonly signatureScheme: \"v1\";\n\treadonly secretRef: string;\n}\n\n/** The subscription's current status and configuration in `scope`; refuses when absent or unreadable. */\nasync function currentSubscription(deps: Deps, scope: WebhookScope, subscriptionId: string): Promise<SubscriptionRead> {\n\tconst answer = await port(deps, (options) => deps.subscriptions.readSubscription({ ...scope, subscriptionId }, options));\n\tif (answer === undefined) return stop(\"store_unavailable\");\n\tif (answer.value === null) return stop(\"subscription_not_found\");\n\tconst configuration = prop(answer.value, \"configuration\");\n\tconst read = {\n\t\tstatus: prop(answer.value, \"status\"),\n\t\tstatusSinceRevision: whole(prop(answer.value, \"statusSinceRevision\")),\n\t\tversion: whole(prop(configuration, \"version\")),\n\t\tdestinationUrl: prop(configuration, \"destinationUrl\"),\n\t\tsignatureScheme: prop(configuration, \"signatureScheme\"),\n\t\tsecretRef: prop(configuration, \"secretRef\"),\n\t};\n\t// The answer must be the subscription asked for, in this scope.\n\tif (prop(answer.value, \"subscriptionId\") !== subscriptionId || prop(answer.value, \"tenantId\") !== scope.tenantId || prop(answer.value, \"spaceId\") !== scope.spaceId) {\n\t\treturn stop(\"subscription_not_found\");\n\t}\n\tif (!isOneOf([\"active\", \"paused\", \"deleted\"], read.status) || read.statusSinceRevision === undefined || read.statusSinceRevision < 1 ||\n\t\tread.version === undefined || typeof read.destinationUrl !== \"string\" ||\n\t\tread.signatureScheme !== \"v1\" || typeof read.secretRef !== \"string\") {\n\t\treturn stop(\"store_unavailable\");\n\t}\n\treturn read as SubscriptionRead;\n}\n\n/** Ask the application's secret store whether `secretRef` names one of this tenant's secrets. */\nasync function verifySecretRef(deps: Deps, scope: WebhookScope, secretRef: string, parent?: AbortSignal): Promise<void> {\n\tconst answer = await port(deps, (options) => deps.secretReferences.verify({ ...scope, secretRef }, options), parent);\n\tif (answer === undefined) stop(\"secret_ref_unverified\");\n\tif (answer.value === \"invalid\") stop(\"secret_ref_invalid\");\n\tif (answer.value !== \"valid\") stop(\"secret_ref_unverified\");\n}\n\n/** Re-validate a destination with the resolver (decision 6): only a vetted answer passes. */\nasync function vetDestination(deps: Deps, url: string): Promise<void> {\n\tconst answer = await port(deps, (options) => deps.resolver.resolve(url, options));\n\tif (answer === undefined) stop(\"destination_unresolved\");\n\tif (prop(answer.value, \"ok\") === true) return;\n\tconst code = prop(answer.value, \"code\");\n\tstop(code === \"invalid_url\" || code === \"private_address\" ? \"destination_refused\" : \"destination_unresolved\");\n}\n\nconst SUBSCRIPTION_REFUSALS: { readonly [refusal: string]: WebhookActionRefusalCode } = freeze({\n\tnot_found: \"subscription_not_found\",\n\talready_exists: \"subscription_exists\",\n\tdeleted: \"subscription_deleted\",\n\tinvalid_transition: \"invalid_transition\",\n\trevision_conflict: \"revision_conflict\",\n\tversion_conflict: \"version_conflict\",\n});\n\nconst DELIVERY_REFUSALS: { readonly [refusal: string]: WebhookActionRefusalCode } = freeze({\n\tnot_found: \"not_found\",\n\tstale: \"stale\",\n\tnot_dead_letter: \"not_dead_letter\",\n\tpast_horizon: \"past_replay_horizon\",\n\tnot_enrichable: \"not_enrichable\",\n\tactor_present: \"actor_present\",\n\tactor_suppressed: \"actor_suppressed\",\n});\n\nfunction mapRefusal(table: { readonly [refusal: string]: WebhookActionRefusalCode }, refusal: unknown): WebhookActionRefusalCode {\n\treturn typeof refusal === \"string\" && isOneOf(Object.keys(table), refusal) ? table[refusal]! : \"store_outcome_unknown\";\n}\n\n/**\n * The answer of a store write. `undefined` (the write threw, timed out or\n * answered something unreadable) is `store_outcome_unknown`: it may have\n * applied, so nothing follows it.\n */\nfunction applied(answer: { readonly value: unknown } | undefined, refusals: { readonly [refusal: string]: WebhookActionRefusalCode }): unknown {\n\tif (answer === undefined) return stop(\"store_outcome_unknown\");\n\tconst flag = prop(answer.value, \"applied\");\n\tif (flag === true) return answer.value;\n\tif (flag === false) return stop(mapRefusal(refusals, prop(answer.value, \"refusal\")));\n\treturn stop(\"store_outcome_unknown\");\n}\n\n/** The record an idempotent action names, as its evidence names it. */\ntype EvidenceTarget =\n\t| { readonly target: \"delivery_intent\"; readonly deliveryId: string }\n\t| { readonly target: \"fan_out_job\" | \"fan_out_job_actor\"; readonly eventId: string };\n\n/**\n * Evidence this invocation appended for `target`, by any attempt of it, or\n * `undefined` (always, without an invocation id). Read with the invocation\n * id alone, so it is found whether or not the record it names still exists.\n */\nasync function priorEvidence(deps: Deps, scope: WebhookScope, invocationId: string | undefined, target: EvidenceTarget): Promise<unknown> {\n\tif (invocationId === undefined) return undefined;\n\tconst answer = await port(deps, (options) => deps.deliveries.listInvocationRequeueEvidence({ ...scope, actionInvocationId: invocationId }, options));\n\tif (answer === undefined) return stop(\"store_unavailable\");\n\tconst list = answer.value as unknown;\n\tif (!Array.isArray(list)) return stop(\"store_unavailable\");\n\tfor (const evidence of list) {\n\t\tif (prop(evidence, \"actionInvocationId\") !== invocationId || prop(evidence, \"target\") !== target.target) continue;\n\t\tif (prop(evidence, \"tenantId\") !== scope.tenantId || prop(evidence, \"spaceId\") !== scope.spaceId) continue;\n\t\tif (target.target === \"delivery_intent\" ? prop(evidence, \"deliveryId\") === target.deliveryId : prop(evidence, \"eventId\") === target.eventId) return evidence;\n\t}\n\treturn undefined;\n}\n\n/**\n * One attempt of an idempotent action (requeue, enrichment). Host may run\n * several attempts of one invocation, one after another or overlapping (a\n * worker whose lease expired is still running when recovery starts\n * another). An attempt reports the invocation's change when that change's\n * evidence is visible to one of its evidence reads (steps 1 and 3) or to its\n * store's atomic step (step 2); only the evidence decides it. Not covered:\n * an attempt that ended in a refusal while an older attempt was between its\n * checks and its compare-and-set, and the older attempt commits later. That\n * change stands while Host has recorded the refusal; the evidence names the\n * invocation for an operator to reconcile (README, \"Atomicity and re-runs\").\n * The steps:\n *\n * 1. Before anything about the record is read, the invocation's evidence:\n * the record may since have been claimed, delivered or purged, and the\n * subscription paused or deleted.\n * 2. Otherwise `apply` runs the action's checks and the store's\n * compare-and-set. The store answers a request of an invocation that\n * already applied with that evidence (`replayed`), in the same atomic step\n * as the compare (src/ports.ts, \"Re-runs of one invocation\").\n * 3. An attempt that `apply` ends with a refusal reads the evidence once\n * more: another attempt that committed after step 1 is why a check before\n * the compare-and-set saw the record or subscription changed. If that read\n * fails, the refusal stands.\n *\n * Returns the evidence of the change the invocation made.\n */\nasync function oncePerInvocation(\n\tdeps: Deps,\n\tscope: WebhookScope,\n\tinvocationId: string | undefined,\n\ttarget: EvidenceTarget,\n\tapply: () => Promise<unknown>,\n): Promise<unknown> {\n\tconst prior = await priorEvidence(deps, scope, invocationId, target);\n\tif (prior !== undefined) return prior;\n\ttry {\n\t\treturn await apply();\n\t} catch (thrown) {\n\t\tif (invocationId === undefined) throw thrown;\n\t\tlet committed: unknown;\n\t\ttry {\n\t\t\tcommitted = await priorEvidence(deps, scope, invocationId, target);\n\t\t} catch {\n\t\t\tthrow thrown;\n\t\t}\n\t\tif (committed !== undefined) return committed;\n\t\tthrow thrown;\n\t}\n}\n\n// ---------------------------------------------------------------------------\n// Handlers\n// ---------------------------------------------------------------------------\n\ntype Handler<N extends WebhookDeliveryActionName> = (\n\tdeps: Deps,\n\tctx: ActionContext<unknown>,\n\tscope: WebhookScope,\n\tparams: WebhookDeliveryActionParameters[N],\n) => Promise<ActionResult>;\n\ntype Handlers = { readonly [N in WebhookDeliveryActionName]: Handler<N> };\n\nfunction subscriptionEvent(\n\teventType: WebhookDeliveryActionEventType,\n\tsubscriptionId: string,\n\tpayload: Record<string, unknown>,\n): ActionResult {\n\treturn emitted(eventType, SUBSCRIPTION, subscriptionId, { subscriptionId, ...payload });\n}\n\nfunction revisionOf(result: unknown): number {\n\tconst revision = whole(prop(prop(result, \"revision\"), \"revision\"));\n\treturn revision ?? stop(\"store_outcome_unknown\");\n}\n\nfunction versionOf(result: unknown): number {\n\tconst version = whole(prop(prop(result, \"configuration\"), \"version\"));\n\treturn version ?? stop(\"store_outcome_unknown\");\n}\n\n/** Pause and delete: the transition, then `cancelPendingIntents` for the intents of the revisions it ended. */\nasync function stopSubscription(\n\tdeps: Deps,\n\tscope: WebhookScope,\n\tparams: WebhookDeliveryActionParameters[\"pause_subscription\"],\n\tkind: \"pause\" | \"delete\",\n): Promise<ActionResult> {\n\tconst write = kind === \"pause\"\n\t\t? (options: WebhookCallOptions) => deps.subscriptions.pauseSubscription({ ...scope, ...params }, options)\n\t\t: (options: WebhookCallOptions) => deps.subscriptions.deleteSubscription({ ...scope, ...params }, options);\n\tconst revision = revisionOf(applied(await port(deps, write), SUBSCRIPTION_REFUSALS));\n\tconst cancelledPendingIntents = await cleanUp(deps, scope, params.subscriptionId, kind === \"pause\" ? \"subscription_paused\" : \"subscription_deleted\", revision);\n\treturn subscriptionEvent(kind === \"pause\" ? \"WebhookSubscriptionPaused\" : \"WebhookSubscriptionDeleted\", params.subscriptionId, {\n\t\trevision,\n\t\tcancelledPendingIntents,\n\t});\n}\n\n/**\n * Pause, resume and delete: after the revision is written, cancel the\n * subscription's pending intents bound to revisions before it. A cleanup,\n * not the guarantee: the count, or `null` when the call threw, timed out or\n * answered something unreadable, and the action stands either way. What\n * stops those intents is dispatch (src/delivery-cycle.ts, `readState`):\n * it cancels an intent while the subscription is paused or deleted, and\n * while it is active since a revision later than the intent's (README,\n * \"Pause and resume are enforced at dispatch\"). Passing the revision just\n * written leaves intents of any later revision alone.\n */\nasync function cleanUp(\n\tdeps: Deps,\n\tscope: WebhookScope,\n\tsubscriptionId: string,\n\treason: \"subscription_paused\" | \"subscription_deleted\",\n\tbeforeRevision: number,\n): Promise<number | null> {\n\tconst cancelled = await port(deps, (options) => deps.deliveries.cancelPendingIntents({\n\t\t...scope,\n\t\tsubscriptionId,\n\t\treason,\n\t\tbeforeRevision,\n\t\tnow: new Date(nowMs(deps)),\n\t}, options));\n\treturn (cancelled === undefined ? undefined : whole(cancelled.value)) ?? null;\n}\n\n/** Staged and emergency rotation: a new configuration version with the same destination and scheme, and the next secret reference. */\nasync function rotate(\n\tdeps: Deps,\n\tscope: WebhookScope,\n\tparams: { readonly subscriptionId: string; readonly secretRef: string; readonly expectedVersion?: number },\n\tmode: \"staged\" | \"emergency\",\n): Promise<ActionResult> {\n\tconst current = await currentSubscription(deps, scope, params.subscriptionId);\n\tif (current.status === \"deleted\") stop(\"subscription_deleted\");\n\tif (params.expectedVersion !== undefined && params.expectedVersion !== current.version) stop(\"version_conflict\");\n\tif (params.secretRef === current.secretRef) stop(\"secret_ref_unchanged\");\n\tawait verifySecretRef(deps, scope, params.secretRef);\n\tconst result = applied(await port(deps, (options) => deps.subscriptions.replaceDeliveryConfiguration({\n\t\t...scope,\n\t\tsubscriptionId: params.subscriptionId,\n\t\tconfiguration: { destinationUrl: current.destinationUrl, signatureScheme: current.signatureScheme, secretRef: params.secretRef },\n\t\t// The version read above, so a concurrent change between the read and\n\t\t// the write is refused by the store's compare-and-set.\n\t\texpectedVersion: params.expectedVersion ?? current.version,\n\t}, options)), SUBSCRIPTION_REFUSALS);\n\tconst configurationVersion = versionOf(result);\n\tconst activatedAtMs = nowMs(deps);\n\t// R6 and README, \"Old-secret retention\": a request signed with the old\n\t// secret reaches a receiver at most portTimeoutMs + attemptTimeoutMs after\n\t// activation (worker's clock), plus the receiver's timestamp tolerance.\n\tconst retainMs = deps.limits.portTimeoutMs + deps.limits.attemptTimeoutMs + deps.verifierToleranceMs;\n\treturn subscriptionEvent(\"WebhookSecretRotated\", params.subscriptionId, {\n\t\tmode,\n\t\tconfigurationVersion,\n\t\tactivatedAt: isoOf(activatedAtMs),\n\t\tpreviousSecretRetainUntil: mode === \"staged\" ? isoOf(activatedAtMs + retainMs) : null,\n\t});\n}\n\nconst HANDLERS: Handlers = freeze({\n\tasync create_subscription(deps, _ctx, scope, params) {\n\t\tawait verifySecretRef(deps, scope, params.secretRef);\n\t\tawait vetDestination(deps, params.destinationUrl);\n\t\tconst result = applied(await port(deps, (options) => deps.subscriptions.createSubscription({\n\t\t\t...scope,\n\t\t\tsubscriptionId: params.subscriptionId,\n\t\t\teventTypePatterns: params.eventTypePatterns,\n\t\t\tconfiguration: { destinationUrl: params.destinationUrl, signatureScheme: \"v1\", secretRef: params.secretRef },\n\t\t}, options)), SUBSCRIPTION_REFUSALS);\n\t\treturn subscriptionEvent(\"WebhookSubscriptionCreated\", params.subscriptionId, {\n\t\t\trevision: revisionOf(result),\n\t\t\tconfigurationVersion: versionOf(result),\n\t\t\teventTypePatterns: [...params.eventTypePatterns],\n\t\t});\n\t},\n\n\tasync update_subscription(deps, _ctx, scope, params) {\n\t\tif (\"eventTypePatterns\" in params) {\n\t\t\tconst result = applied(await port(deps, (options) => deps.subscriptions.changeEventTypePatterns({ ...scope, ...params }, options)), SUBSCRIPTION_REFUSALS);\n\t\t\treturn subscriptionEvent(\"WebhookSubscriptionUpdated\", params.subscriptionId, {\n\t\t\t\tchange: \"event_type_patterns\",\n\t\t\t\trevision: revisionOf(result),\n\t\t\t\teventTypePatterns: [...params.eventTypePatterns],\n\t\t\t});\n\t\t}\n\t\tconst current = await currentSubscription(deps, scope, params.subscriptionId);\n\t\tif (current.status === \"deleted\") stop(\"subscription_deleted\");\n\t\tif (params.expectedVersion !== undefined && params.expectedVersion !== current.version) stop(\"version_conflict\");\n\t\tawait vetDestination(deps, params.destinationUrl);\n\t\tconst result = applied(await port(deps, (options) => deps.subscriptions.replaceDeliveryConfiguration({\n\t\t\t...scope,\n\t\t\tsubscriptionId: params.subscriptionId,\n\t\t\tconfiguration: { destinationUrl: params.destinationUrl, signatureScheme: current.signatureScheme, secretRef: current.secretRef },\n\t\t\texpectedVersion: params.expectedVersion ?? current.version,\n\t\t}, options)), SUBSCRIPTION_REFUSALS);\n\t\treturn subscriptionEvent(\"WebhookSubscriptionUpdated\", params.subscriptionId, {\n\t\t\tchange: \"destination\",\n\t\t\tconfigurationVersion: versionOf(result),\n\t\t});\n\t},\n\n\tpause_subscription: (deps, _ctx, scope, params) => stopSubscription(deps, scope, params, \"pause\"),\n\n\tasync resume_subscription(deps, _ctx, scope, params) {\n\t\t// Resume does not resurrect (decision 3): a cancelled intent is\n\t\t// terminal, dispatch cancels any intent bound to a revision before\n\t\t// this one (the pause's cleanup may have missed it, or fan-out written\n\t\t// it late), and intent requeue refuses one (`paused_since_intent`).\n\t\t// The cleanup below cancels what is pending now, so it does not sit\n\t\t// until a worker claims it.\n\t\tconst result = applied(await port(deps, (options) => deps.subscriptions.resumeSubscription({ ...scope, ...params }, options)), SUBSCRIPTION_REFUSALS);\n\t\tconst revision = revisionOf(result);\n\t\tconst cancelledPendingIntents = await cleanUp(deps, scope, params.subscriptionId, \"subscription_paused\", revision);\n\t\treturn subscriptionEvent(\"WebhookSubscriptionResumed\", params.subscriptionId, { revision, cancelledPendingIntents });\n\t},\n\n\tdelete_subscription: (deps, _ctx, scope, params) => stopSubscription(deps, scope, params, \"delete\"),\n\n\trotate_secret_staged: (deps, _ctx, scope, params) => rotate(deps, scope, params, \"staged\"),\n\n\trotate_secret_emergency: (deps, _ctx, scope, params) => rotate(deps, scope, params, \"emergency\"),\n\n\tasync requeue_delivery_intent(deps, ctx, scope, params) {\n\t\tconst requestedBy = actorOf(ctx);\n\t\tconst invocationId = invocationOf(ctx);\n\t\tconst evidence = await oncePerInvocation(deps, scope, invocationId, { target: \"delivery_intent\", deliveryId: params.deliveryId }, async () => {\n\t\t\tconst read = await port(deps, (options) => deps.deliveries.readDeliveryIntent({ ...scope, deliveryId: params.deliveryId }, options));\n\t\t\tif (read === undefined) return stop(\"store_unavailable\");\n\t\t\tif (read.value === null) return stop(\"not_found\");\n\t\t\tconst subscriptionId = prop(read.value, \"subscriptionId\");\n\t\t\tconst eligibilityRevision = whole(prop(read.value, \"eligibilityRevision\"));\n\t\t\tif (!isWebhookIdentifier(subscriptionId) || eligibilityRevision === undefined) return stop(\"store_unavailable\");\n\t\t\t// Decision 10: the destination is re-validated at requeue. Dispatch\n\t\t\t// resolves it again before every attempt regardless.\n\t\t\tconst subscription = await currentSubscription(deps, scope, subscriptionId);\n\t\t\tif (subscription.status !== \"active\") stop(\"subscription_not_active\");\n\t\t\t// Paused and resumed since the intent's revision: dispatch would\n\t\t\t// cancel it, so it is not requeued (decision 3). A pause and resume\n\t\t\t// between this read and the compare-and-set is still caught there.\n\t\t\tif (eligibilityRevision < subscription.statusSinceRevision) stop(\"paused_since_intent\");\n\t\t\tawait vetDestination(deps, subscription.destinationUrl);\n\t\t\tconst now = nowMs(deps);\n\t\t\treturn prop(applied(await port(deps, (options) => deps.deliveries.requeueDeliveryIntent({\n\t\t\t\t...scope,\n\t\t\t\tdeliveryId: params.deliveryId,\n\t\t\t\t// The compare-and-set is the store's: fence and status are checked\n\t\t\t\t// in the same atomic step as the transition (src/ports.ts).\n\t\t\t\trequest: {\n\t\t\t\t\texpectedStatus: \"dead_letter\",\n\t\t\t\t\texpectedFence: params.expectedFence,\n\t\t\t\t\trequestedBy,\n\t\t\t\t\trequestedAt: new Date(now),\n\t\t\t\t\tprocessingDeadline: new Date(now + deps.limits.deliveryDeadlineMs),\n\t\t\t\t\t...(invocationId === undefined ? {} : { actionInvocationId: invocationId }),\n\t\t\t\t},\n\t\t\t}, options)), DELIVERY_REFUSALS), \"evidence\");\n\t\t});\n\t\t// From the evidence, not the intent, which a re-run may find purged.\n\t\tconst eventId = prop(evidence, \"eventId\");\n\t\tif (!isWebhookIdentifier(eventId)) return stop(\"store_outcome_unknown\");\n\t\tconst subscriptionId = prop(evidence, \"subscriptionId\") ?? await legacyIntentSubscription(deps, scope, params.deliveryId, eventId);\n\t\tif (!isWebhookIdentifier(subscriptionId)) return stop(\"store_outcome_unknown\");\n\t\treturn emitted(\"WebhookDeliveryIntentRequeued\", INTENT, params.deliveryId, {\n\t\t\tdeliveryId: params.deliveryId,\n\t\t\tsubscriptionId,\n\t\t\teventId,\n\t\t\t...evidenceFields(evidence),\n\t\t});\n\t},\n\n\tasync requeue_fan_out_job(deps, ctx, scope, params) {\n\t\tconst requestedBy = actorOf(ctx);\n\t\tconst invocationId = invocationOf(ctx);\n\t\tconst evidence = await oncePerInvocation(deps, scope, invocationId, { target: \"fan_out_job\", eventId: params.eventId }, async () => {\n\t\t\tconst now = nowMs(deps);\n\t\t\treturn prop(applied(await port(deps, (options) => deps.deliveries.requeueFanOutJob({\n\t\t\t\t...scope,\n\t\t\t\teventId: params.eventId,\n\t\t\t\trequest: {\n\t\t\t\t\texpectedStatus: \"dead_letter\",\n\t\t\t\t\texpectedFence: params.expectedFence,\n\t\t\t\t\trequestedBy,\n\t\t\t\t\trequestedAt: new Date(now),\n\t\t\t\t\tprocessingDeadline: new Date(now + deps.limits.fanOutDeadlineMs),\n\t\t\t\t\t...(invocationId === undefined ? {} : { actionInvocationId: invocationId }),\n\t\t\t\t},\n\t\t\t}, options)), DELIVERY_REFUSALS), \"evidence\");\n\t\t});\n\t\treturn emitted(\"WebhookFanOutJobRequeued\", JOB, params.eventId, { eventId: params.eventId, ...evidenceFields(evidence) });\n\t},\n\n\tasync enrich_fan_out_job_actor(deps, ctx, scope, params) {\n\t\tconst requestedBy = actorOf(ctx);\n\t\tconst invocationId = invocationOf(ctx);\n\t\tconst evidence = await oncePerInvocation(deps, scope, invocationId, { target: \"fan_out_job_actor\", eventId: params.eventId }, async () => {\n\t\t\tconst read = await port(deps, (options) => deps.deliveries.readFanOutJob({ ...scope, eventId: params.eventId }, options));\n\t\t\tif (read === undefined) return stop(\"store_unavailable\");\n\t\t\tif (read.value === null) return stop(\"not_found\");\n\t\t\t// Early refusals, so the application's reader is not asked for an\n\t\t\t// actor that would be refused. The store re-checks each in its\n\t\t\t// atomic step; these are not the guard.\n\t\t\tconst actor = prop(read.value, \"actor\");\n\t\t\tif (prop(read.value, \"status\") === \"completed\") return stop(\"not_enrichable\");\n\t\t\tif (prop(actor, \"state\") === \"present\") return stop(\"actor_present\");\n\t\t\tif (prop(actor, \"reason\") === \"suppressed\") return stop(\"actor_suppressed\");\n\t\t\tconst event = prop(read.value, \"event\");\n\t\t\tconst eventType = prop(event, \"eventType\");\n\t\t\tconst payloadClassification = prop(event, \"payloadClassification\");\n\t\t\tif (typeof eventType !== \"string\" || typeof payloadClassification !== \"string\") return stop(\"store_unavailable\");\n\t\t\tconst found = await port(deps, (options) => deps.actorReader.readEventActor({ ...scope, eventId: params.eventId, eventType, payloadClassification }, options));\n\t\t\tif (found === undefined) return stop(\"actor_unavailable\");\n\t\t\tconst state = prop(found.value, \"state\");\n\t\t\tif (state === \"withheld\") return stop(\"actor_withheld\");\n\t\t\tif (state === \"not_found\") return stop(\"actor_not_found\");\n\t\t\tconst actorId = prop(found.value, \"actorId\");\n\t\t\tconst actorType = prop(found.value, \"actorType\");\n\t\t\tif (state !== \"found\" || !isWebhookIdentifier(actorId) || !isWebhookIdentifier(actorType)) return stop(\"actor_unavailable\");\n\t\t\tconst now = nowMs(deps);\n\t\t\treturn prop(applied(await port(deps, (options) => deps.deliveries.enrichFanOutJobActor({\n\t\t\t\t...scope,\n\t\t\t\teventId: params.eventId,\n\t\t\t\trequest: {\n\t\t\t\t\texpectedFence: params.expectedFence,\n\t\t\t\t\tactor: { actorId, actorType },\n\t\t\t\t\trequestedBy,\n\t\t\t\t\trequestedAt: new Date(now),\n\t\t\t\t\tprocessingDeadline: new Date(now + deps.limits.fanOutDeadlineMs),\n\t\t\t\t\t...(invocationId === undefined ? {} : { actionInvocationId: invocationId }),\n\t\t\t\t},\n\t\t\t}, options)), DELIVERY_REFUSALS), \"evidence\");\n\t\t});\n\t\t// The actor itself stays in the store's evidence, not in the event.\n\t\treturn emitted(\"WebhookFanOutJobActorEnriched\", JOB, params.eventId, { eventId: params.eventId, ...evidenceFields(evidence) });\n\t},\n});\n\n/**\n * The subscription of a requeued intent whose evidence was written before\n * evidence named it (`WebhookRequeueEvidence.subscriptionId`), read from the\n * intent in the invocation's scope. The requeue has applied, so a purged\n * intent, one of another event, or a read that fails is\n * `store_outcome_unknown`: the change stands without its event, for an\n * operator to reconcile from the evidence (README, \"Atomicity and re-runs\").\n */\nasync function legacyIntentSubscription(deps: Deps, scope: WebhookScope, deliveryId: string, eventId: string): Promise<string> {\n\tconst read = await port(deps, (options) => deps.deliveries.readDeliveryIntent({ ...scope, deliveryId }, options));\n\tconst subscriptionId = prop(read?.value, \"subscriptionId\");\n\tif (read === undefined || read.value === null || prop(read.value, \"eventId\") !== eventId || !isWebhookIdentifier(subscriptionId)) {\n\t\treturn stop(\"store_outcome_unknown\");\n\t}\n\treturn subscriptionId;\n}\n\n/** The event fields taken from requeue or enrichment evidence: numbers and timestamps only. */\nfunction evidenceFields(evidence: unknown): Record<string, unknown> {\n\tconst priorFence = whole(prop(evidence, \"priorFence\"));\n\tconst priorAttemptCount = whole(prop(evidence, \"priorAttemptCount\"));\n\tconst processingDeadline = prop(evidence, \"processingDeadline\");\n\tif (priorFence === undefined || priorAttemptCount === undefined || typeof processingDeadline !== \"string\") return stop(\"store_outcome_unknown\");\n\treturn { priorFence, priorAttemptCount, processingDeadline };\n}\n\nconst dateGetTime = Date.prototype.getTime;\n\n/**\n * Host's record that this invocation's submission passed the action's\n * admission check. A Host older than 7.3.0 ignores `admitSubmission` and\n * passes no `admittedAt`; such a Host may already have persisted unchecked\n * parameters, so the action refuses rather than act on them.\n */\nfunction requireAdmission(ctx: ActionContext<unknown>): void {\n\tconst admittedAt = prop(ctx, \"admittedAt\");\n\tif (!(admittedAt instanceof Date) || !Number.isFinite(Reflect.apply(dateGetTime, admittedAt, []))) stop(\"admission_not_enforced\");\n}\n\n/** The handler Host calls: requires Host's admission record, re-reads the parameters, takes the scope from Host's context, never lets a throw out. */\nfunction handlerFor<N extends WebhookDeliveryActionName>(deps: Deps, name: N) {\n\tconst run = HANDLERS[name] as Handler<N>;\n\treturn async (ctx: ActionContext<unknown>, parameters: unknown): Promise<ActionResult> => {\n\t\ttry {\n\t\t\trequireAdmission(ctx);\n\t\t\tconst read = readWebhookActionParameters(name, parameters);\n\t\t\tif (!read.ok) return { success: false, error: `webhook_parameters_refused:${read.code}` };\n\t\t\treturn await run(deps, ctx, scopeOf(ctx), read.value);\n\t\t} catch (thrown) {\n\t\t\t// Only a package `Stop` is read, and its code is checked against the\n\t\t\t// fixed set again; anything else is dropped unread.\n\t\t\treturn refused(Stop.is(thrown) && isOneOf(WEBHOOK_ACTION_REFUSAL_CODES, thrown.code) ? thrown.code : \"action_failed\");\n\t\t}\n\t};\n}\n\n// ---------------------------------------------------------------------------\n// Admission\n// ---------------------------------------------------------------------------\n\n/** The actions whose parameters carry a secret reference, verified at admission and again before the write. */\nconst TAKES_SECRET_REF: readonly WebhookDeliveryActionName[] = freeze([\"create_subscription\", \"rotate_secret_staged\", \"rotate_secret_emergency\"] as const);\n\nfunction refusedAdmission(code: string): ActionAdmissionDecision {\n\treturn freeze({ admitted: false as const, code });\n}\n\nconst ADMITTED: ActionAdmissionDecision = freeze({ admitted: true as const });\n\n/**\n * The action's `admitSubmission` (ADR 0018 decision 8). Host runs it on\n * every submission, after authorizing the submitter and before it records\n * anything, with its own copy of the parameters and the submission's trusted\n * tenant, space and actor. It admits only parameters the package reader\n * accepts and, for an action that takes a `secretRef`, only a reference the\n * application's `secretReferences.verify` confirms for that tenant and space.\n * A refusal's code is fixed text: `webhook_parameters_refused:<code>:<field>`\n * (`WEBHOOK_ACTION_PARAMETER_CODES`, a declared field or `parameters`) or\n * `webhook_action_refused:<code>` (`WEBHOOK_ACTION_REFUSAL_CODES`). Never\n * throws; nothing a port throws is read.\n */\nfunction admissionFor(deps: Deps, name: WebhookDeliveryActionName): ActionAdmission {\n\tconst takesSecretRef = TAKES_SECRET_REF.includes(name);\n\treturn async (input) => {\n\t\ttry {\n\t\t\tconst read = readWebhookActionParameters(name, prop(input, \"parameters\"));\n\t\t\tif (!read.ok) return refusedAdmission(`webhook_parameters_refused:${read.code}:${read.field}`);\n\t\t\tif (takesSecretRef) {\n\t\t\t\tconst tenantId = prop(input, \"tenantId\");\n\t\t\t\tconst spaceId = prop(input, \"spaceId\");\n\t\t\t\tif (!isWebhookIdentifier(tenantId) || !isWebhookIdentifier(spaceId)) stop(\"scope_invalid\");\n\t\t\t\tconst signal = prop(input, \"signal\");\n\t\t\t\tawait verifySecretRef(deps, freeze({ tenantId, spaceId }), (read.value as { readonly secretRef: string }).secretRef, signal instanceof AbortSignal ? signal : undefined);\n\t\t\t}\n\t\t\treturn ADMITTED;\n\t\t} catch (thrown) {\n\t\t\treturn refusedAdmission(`webhook_action_refused:${Stop.is(thrown) && isOneOf(WEBHOOK_ACTION_REFUSAL_CODES, thrown.code) ? thrown.code : \"action_failed\"}`);\n\t\t}\n\t};\n}\n\n// ---------------------------------------------------------------------------\n// Policy\n// ---------------------------------------------------------------------------\n\nfunction block(policyId: `${string}.v${number}`, reason: string): PolicyOutcome {\n\treturn { policyId, policyVersion: 1, policyKind: \"code\", result: \"block\", reason };\n}\n\nfunction operatorPolicy(deps: Deps): PolicyEvaluator {\n\tconst policyId = webhookOperatorPolicyId(deps.namespace);\n\treturn freeze({\n\t\tpolicyId,\n\t\tversion: 1,\n\t\tkind: \"code\" as const,\n\t\tasync evaluate(ctx: PolicyContext): Promise<PolicyOutcome> {\n\t\t\ttry {\n\t\t\t\tconst action = webhookActionNameOf(deps.namespace, ctx.actionId);\n\t\t\t\tif (action === undefined) return block(policyId, \"action_not_in_module\");\n\t\t\t\tconst read = readWebhookActionParameters(action, ctx.parameters);\n\t\t\t\tif (!read.ok) return block(policyId, \"parameters_invalid\");\n\t\t\t\tconst { tenantId, spaceId, actorId, actorType } = ctx;\n\t\t\t\tif (!isWebhookIdentifier(tenantId) || !isWebhookIdentifier(spaceId) || !isWebhookIdentifier(actorId) || typeof actorType !== \"string\") {\n\t\t\t\t\treturn block(policyId, \"operator_identity_unavailable\");\n\t\t\t\t}\n\t\t\t\tconst value = read.value as Record<string, unknown>;\n\t\t\t\tconst target = freeze({\n\t\t\t\t\t...(typeof value[\"subscriptionId\"] === \"string\" ? { subscriptionId: value[\"subscriptionId\"] } : {}),\n\t\t\t\t\t...(typeof value[\"deliveryId\"] === \"string\" ? { deliveryId: value[\"deliveryId\"] } : {}),\n\t\t\t\t\t...(typeof value[\"eventId\"] === \"string\" ? { eventId: value[\"eventId\"] } : {}),\n\t\t\t\t});\n\t\t\t\tconst input = freeze({ actionId: ctx.actionId, action, tenantId, spaceId, actorId, actorType, target });\n\t\t\t\tconst answer = await port(deps, async (options) => apply(deps.authorize, undefined, [input, options]));\n\t\t\t\tif (answer === undefined) return block(policyId, \"operator_authorization_unavailable\");\n\t\t\t\tif (answer.value !== true) return block(policyId, \"operator_not_authorized\");\n\t\t\t\treturn { policyId, policyVersion: 1, policyKind: \"code\", result: \"pass\" };\n\t\t\t} catch {\n\t\t\t\treturn block(policyId, \"operator_authorization_unavailable\");\n\t\t\t}\n\t\t},\n\t});\n}\n\n// ---------------------------------------------------------------------------\n// The module\n// ---------------------------------------------------------------------------\n\nconst EVENT_FOR: { readonly [N in WebhookDeliveryActionName]: readonly WebhookDeliveryActionEventType[] } = freeze({\n\tcreate_subscription: freeze([\"WebhookSubscriptionCreated\"] as const),\n\tupdate_subscription: freeze([\"WebhookSubscriptionUpdated\"] as const),\n\tpause_subscription: freeze([\"WebhookSubscriptionPaused\"] as const),\n\tresume_subscription: freeze([\"WebhookSubscriptionResumed\"] as const),\n\tdelete_subscription: freeze([\"WebhookSubscriptionDeleted\"] as const),\n\trotate_secret_staged: freeze([\"WebhookSecretRotated\"] as const),\n\trotate_secret_emergency: freeze([\"WebhookSecretRotated\"] as const),\n\trequeue_delivery_intent: freeze([\"WebhookDeliveryIntentRequeued\"] as const),\n\trequeue_fan_out_job: freeze([\"WebhookFanOutJobRequeued\"] as const),\n\tenrich_fan_out_job_actor: freeze([\"WebhookFanOutJobActorEnriched\"] as const),\n});\n\n/** An attempt of one invocation of these reports the change another attempt committed when its evidence reads or the store's atomic step see it (`oncePerInvocation`, with its one exception); the others are not re-run by Host. */\nconst IDEMPOTENT: readonly WebhookDeliveryActionName[] = freeze([\"requeue_delivery_intent\", \"requeue_fan_out_job\", \"enrich_fan_out_job_actor\"] as const);\n\nfunction readDeps(options: WebhookDeliveryModuleOptions): Deps {\n\tconst fail = (field: string): never => {\n\t\tthrow governedActionError(\"options_invalid\", field);\n\t};\n\tif (options === null || typeof options !== \"object\") fail(\"options\");\n\tconst namespace = options.namespace ?? DEFAULT_WEBHOOK_DELIVERY_NAMESPACE;\n\tif (!isWebhookDeliveryNamespace(namespace)) fail(\"namespace\");\n\tconst needs = (value: unknown, field: string, methods: readonly string[]) => {\n\t\tif (value === null || typeof value !== \"object\") fail(field);\n\t\tfor (const method of methods) if (typeof (value as Record<string, unknown>)[method] !== \"function\") fail(`${field}.${method}`);\n\t};\n\tneeds(options.subscriptions, \"subscriptions\", [\n\t\t\"readSubscription\", \"createSubscription\", \"changeEventTypePatterns\", \"pauseSubscription\", \"resumeSubscription\", \"deleteSubscription\", \"replaceDeliveryConfiguration\",\n\t]);\n\tneeds(options.deliveries, \"deliveries\", [\n\t\t\"readDeliveryIntent\", \"readFanOutJob\", \"requeueDeliveryIntent\", \"requeueFanOutJob\", \"enrichFanOutJobActor\", \"cancelPendingIntents\", \"listInvocationRequeueEvidence\",\n\t]);\n\tneeds(options.resolver, \"resolver\", [\"resolve\"]);\n\tneeds(options.secretReferences, \"secretReferences\", [\"verify\"]);\n\tneeds(options.actorReader, \"actorReader\", [\"readEventActor\"]);\n\tif (typeof options.authorizeOperatorAction !== \"function\") fail(\"authorizeOperatorAction\");\n\tlet clock: FanOutClock;\n\ttry {\n\t\tclock = captureFanOutClock(options.clock);\n\t} catch {\n\t\treturn fail(\"clock\");\n\t}\n\tconst limits = resolveWebhookDeliveryLimits(options.limits ?? {});\n\tconst verifierToleranceMs = options.verifierToleranceMs ?? 300_000;\n\tassertPositiveInteger(verifierToleranceMs, \"verifierToleranceMs\");\n\treturn freeze({\n\t\tnamespace,\n\t\tsubscriptions: options.subscriptions,\n\t\tdeliveries: options.deliveries,\n\t\tresolver: options.resolver,\n\t\tsecretReferences: options.secretReferences,\n\t\tactorReader: options.actorReader,\n\t\tauthorize: options.authorizeOperatorAction,\n\t\tclock,\n\t\tlimits,\n\t\tverifierToleranceMs,\n\t});\n}\n\n/**\n * Build the package's governed operator actions as one `FabricModule`\n * (README, \"Governed actions\"). Register it with `createModuleRegistry()`\n * and run it through `createGovernedActionHost()` from\n * `@fabricorg/platform-host` 7.3.0 or later: every action declares\n * `admitSubmission`, which that Host runs before it records a submission,\n * and refuses to run without Host's admission record. Nothing needs wiring\n * into Host for it.\n *\n * @throws {WebhookGovernedActionError} `options_invalid` when a port or\n * option is missing or malformed.\n * @throws {WebhookDeliveryConfigError} when a limit or `verifierToleranceMs`\n * is not a positive whole number.\n */\nexport function createWebhookDeliveryModule<TDb = unknown>(options: WebhookDeliveryModuleOptions): FabricModule<TDb> {\n\tconst deps = readDeps(options);\n\tconst policy = operatorPolicy(deps);\n\tconst actions: ActionDefinition<TDb>[] = WEBHOOK_DELIVERY_ACTION_NAMES.map((name) => {\n\t\tconst idempotent = IDEMPOTENT.includes(name);\n\t\tconst definition: ActionDefinition<TDb> = {\n\t\t\tactionId: `${deps.namespace}.${name}`,\n\t\t\tnamespace: deps.namespace,\n\t\t\tversion: 1,\n\t\t\tkind: \"atomic\",\n\t\t\tschema: webhookActionSchema(name),\n\t\t\tadmitSubmission: admissionFor(deps, name),\n\t\t\tpolicies: [policy.policyId],\n\t\t\temitsEvents: [...EVENT_FOR[name]],\n\t\t\tidempotent,\n\t\t\tmutatesDomain: true,\n\t\t\texecution: {\n\t\t\t\tconnectivity: \"online-required\",\n\t\t\t\tauthorityMoment: \"execution\",\n\t\t\t\tidempotency: \"supported\",\n\t\t\t\tcompletion: \"immediate\",\n\t\t\t\tconsistency: \"authoritative-now\",\n\t\t\t\tsensitivity: \"confidential\",\n\t\t\t},\n\t\t\tsurface: \"internal\",\n\t\t\tsurfaceReason: \"Operator mutation of webhook subscriptions and delivery records.\",\n\t\t\thandler: handlerFor(deps, name) as ActionDefinition<TDb>[\"handler\"],\n\t\t};\n\t\treturn definition;\n\t});\n\treturn {\n\t\tnamespace: deps.namespace,\n\t\tversion: \"1.0.0\",\n\t\tdisplayName: \"Webhook delivery\",\n\t\tdescription: \"Governed operator actions for webhook subscriptions, secret rotation, requeue and actor enrichment (ADR 0018).\",\n\t\tsubjectTypes: [SUBSCRIPTION, INTENT, JOB],\n\t\teventTypes: WEBHOOK_DELIVERY_ACTION_EVENT_TYPES.map((eventType) => ({ eventType, schemaVersion: 1 })),\n\t\tactions,\n\t\tpolicies: [policy],\n\t};\n}\n"],"mappings":";;;;;;;;;AASA,MAAa,iCAAiC,OAAO,OAAO;CAC3D;CACA;CACA;CACA;CACA;AACD,CAAU;;AAMV,MAAa,2BAA2B,OAAO,OAAO;CACrD;CACA;CACA;AACD,CAAU;;;;;;;;;;;;;;;;;;;;;AAyBV,MAAa,2BAA2B,OAAO,OAAO;CACrD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACD,CAAU;;;;;;;;;AAaV,MAAa,2BAA2B,OAAO,OAAO;CACrD;CACA;CACA;CACA;CACA;AACD,CAAU;;AAWV,MAAa,+BAA+B,OAAO,OAAO;CACzD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACD,CAAU;;AAMV,MAAa,6BAA6B,OAAO,OAAO;CACvD;CACA;CACA;CACA;CACA;AACD,CAAU;;AAMV,MAAa,iCAAiC,OAAO,OAAO;CAC3D;CACA;CACA;CACA;CACA;CACA;AACD,CAAU;;;;;;AAUV,MAAa,4BAA4B,OAAO,OAAO;CACtD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACD,CAAU;;;;;;;;AAYV,MAAa,4BAA4B,OAAO,OAAO;CACtD;CACA;CACA;CACA;CACA;CACA;CACA;AACD,CAAU;;;;;;;;;;;;;;;;;;;;;;AA0BV,MAAa,8BAA8B,OAAO,OAAO;CACxD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACD,CAAU;;;;;;;;;;;AAeV,MAAa,+BAA+B,OAAO,OAAO;CACzD;CACA;CACA;CACA;AACD,CAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiDV,MAAa,+BAA+B,OAAO,OAAO;CACzD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACD,CAAU;;;;;AASV,MAAa,sCAAsC,OAAO,OAAO,CAAC,iBAAiB,CAAU;;;AC3S7F,MAAM,eAAe,QAAQ;AAC7B,MAAMA,mBAAiB,QAAQ;AAC/B,MAAMC,oCAAkC,QAAQ;AAChD,MAAM,wBAAwB,QAAQ;AACtC,MAAMC,0BAAwB,QAAQ;AACtC,MAAMC,iBAAe,OAAO;AAC5B,MAAM,eAAe,OAAO;AAC5B,MAAM,eAAe,OAAO;AAC5B,MAAM,kBAAkB,OAAO;AAC/B,MAAM,eAAe,MAAM;AAC3B,MAAMC,gBAAc,KAAK,UAAU;AACnC,MAAM,kBAAkB,KAAK,UAAU;AACvC,MAAMC,oBAAkB;AACxB,MAAM,aAAa,OAAO,UAAU;AACpC,MAAM,aAAa,OAAO,UAAU;AACpC,MAAM,gBAAgB,KAAK;;AAG3B,MAAa,QAAQ;;AAErB,MAAaC,mBAAiB,OAAO;AACrC,MAAaC,wBAAsB,OAAO;AAC1C,MAAaC,sBAAoB;AACjC,MAAa,YAAY,KAAK;AAC9B,MAAaC,YAAU,KAAK;AAC5B,MAAaC,YAAU,KAAK;AAC5B,MAAa,YAAY,KAAK;AAC9B,MAAa,SAAS;AACtB,MAAa,SAAS;AACtB,MAAa,UAAU;;AAgBvB,MAAa,gBAA+B,OAAO,gCAAgC;;AAGnF,SAAS,eAAe,OAAoC;CAC3D,MAAM,aAAaP,eAAa,IAAI;CACpC,WAAW,QAAQ;CACnB,WAAW,aAAa;CACxB,WAAW,WAAW;CACtB,WAAW,eAAe;CAC1B,OAAO;AACR;;AAGA,SAAgB,OAAO,QAAgB,KAAsB,OAAsB;CAClF,wBAAsB,QAAQ,KAAK,eAAe,KAAK,CAAC;AACzD;;AAGA,SAAgB,WAAc,QAAoC;CACjE,MAAM,OAAY,CAAC;CACnB,KAAK,IAAI,QAAQ,GAAG,QAAQ,OAAO,QAAQ,SAAS,GAAG,OAAO,MAAM,OAAO,OAAO,MAAM;CACxF,OAAO,aAAa,IAAI;AACzB;;;;;;AAOA,SAAgB,OAAyB,QAAc;CACtD,MAAM,MAAMA,eAAa,IAAI;CAC7B,MAAM,OAAOH,iBAAe,MAAM;CAClC,KAAK,IAAI,QAAQ,GAAG,QAAQ,KAAK,QAAQ,SAAS,GAAG;EACpD,MAAM,MAAM,KAAK;EACjB,MAAM,aAAaC,kCAAgC,QAAQ,GAAG;EAC9D,IAAI,eAAe,KAAA,KAAa,aAAa,YAAY,OAAO,KAAK,WAAW,UAAU,KAAA,GAAW,OAAO,KAAK,KAAK,WAAW,KAAK;CACvI;CACA,OAAO,aAAa,GAAG;AACxB;;AAGA,SAAgB,WAAiC;CAChD,OAAOE,eAAa,IAAI;AACzB;;AAGA,SAAgB,QAAQ,IAAY,OAAwB;CAC3D,OAAO,aAAa,YAAY,IAAI,CAAC,KAAK,CAAC,MAAM;AAClD;;AAGA,SAAgB,KAAK,OAAuB;CAC3C,OAAO,aAAa,YAAY,OAAO,CAAC,CAAC;AAC1C;;AAGA,SAAgB,QAAQ,OAA0B,OAAyB;CAC1E,IAAI,OAAO,UAAU,UAAU,OAAO;CACtC,KAAK,IAAI,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS,GAAG,IAAI,MAAM,WAAW,OAAO,OAAO;CACzF,OAAO;AACR;;AAGA,SAAgB,cAAc,OAAiC;CAC9D,IAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,aAAa,KAAK,GAAG,OAAO;CAC/E,MAAM,YAAY,sBAAsB,KAAK;CAC7C,OAAO,cAAc,mBAAmB,cAAc;AACvD;;;;;AAMA,SAAgB,QAAQ,QAAgB,KAAa,OAAe,MAAqB;CACxF,MAAM,aAAaF,kCAAgC,QAAQ,GAAG;CAC9D,IAAI,eAAe,KAAA,GAAW,OAAO,KAAA;CACrC,IAAI,CAAC,aAAa,YAAY,OAAO,GAAG,OAAO,KAAK,YAAY,KAAK;CACrE,OAAO,WAAW;AACnB;;AAGA,SAAgB,UAAU,OAAyB;CAClD,IAAI,UAAU,QAAS,OAAO,UAAU,YAAY,OAAO,UAAU,YAAa,OAAO;CACzF,OAAO;AACR;;;;;;AAOA,SAAgB,QAAQ,OAAoC;CAC3D,MAAM,OAAO,OAAO,KAAK;CACzB,IAAI,CAACK,iBAAe,IAAI,GAAG,OAAO,KAAA;CAClC,OAAO,aAAa,iBAAiB,OAAO,CAAC,CAAC;AAC/C;;AAGA,SAAgB,OAAO,OAAwB;CAC9C,IAAI,UAAU,QAAQ,OAAO,UAAU,UAAU,OAAO;CACxD,IAAI;EAGH,OAAO,aAAaF,eAAa,OAAO,CAAC,CAAC;CAC3C,QAAQ;EACP,OAAO;CACR;AACD;;AAGA,SAAgB,oBAAoB,OAAoC;CACvE,IAAI,OAAO,UAAU,UAAU,OAAO,QAAQ,IAAIC,kBAAgB,KAAK,CAAC;CACxE,OAAO,QAAQ,KAAK;AACrB;;;;;;AAOA,SAAgB,cAAc,OAAgB,OAAe,MAAqB;CACjF,IAAI,CAAC,aAAa,KAAK,GAAG,OAAO,UAAU,KAAA,IAAY,KAAA,IAAY;CACnE,MAAM,SAAS,WAAW,OAAO,OAAO,IAAI;CAC5C,MAAM,OAAkB,CAAC;CACzB,KAAK,IAAI,QAAQ,GAAG,QAAQ,QAAQ,SAAS,GAC5C,OAAO,MAAM,OAAO,UAAU,QAAQ,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,IAAI,IAAI,CAAC,CAAC;CAEtF,OAAO,aAAa,IAAI;AACzB;;AAGA,SAAgB,WAAW,OAAgB,OAAe,MAA2C;CACpG,MAAM,OAAO,cAAc,OAAO,OAAO,IAAI;CAC7C,IAAI,CAAC,aAAa,IAAI,GAAG,OAAO,KAAA;CAChC,MAAM,UAAoB,CAAC;CAC3B,KAAK,IAAI,QAAQ,GAAG,QAAQ,KAAK,QAAQ,SAAS,GAAG;EACpD,MAAM,OAAO,KAAK;EAClB,IAAI,OAAO,SAAS,UAAU,OAAO,SAAS,QAAQ,QAAQ,IAAI;CACnE;CACA,OAAO,aAAa,OAAO;AAC5B;AAEA,SAAS,WAAW,OAAe,OAAe,MAAoB;CACrE,MAAM,SAAS,QAAQ,OAAO,UAAU,OAAO,IAAI;CACnD,IAAI,OAAO,WAAW,YAAY,CAACE,sBAAoB,MAAM,KAAK,SAAS,GAAG,OAAO,KAAK,YAAY,KAAK;CAC3G,IAAI,SAAA,MAA0B,OAAO,KAAK,aAAa,KAAK;CAC5D,OAAO;AACR;;;;;;;;;;;AAYA,SAAgB,aAAa,OAAgB,OAAe,MAA8B;CACzF,OAAO,SAAS,OAAO,OAAO,MAAM,GAAG,EAAE,OAAO,EAAE,CAAC;AACpD;;;;;;;AAaA,SAAgB,iBAAiB,OAAgB,OAAe,MAAY,OAAe,QAA0C;CACpI,OAAO,SAAS,OAAO,OAAO,MAAM,OAAO,MAAM;AAClD;AAEA,SAAS,SAAS,OAAgB,OAAe,MAAY,OAAe,QAA0C;CACrH,IAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,OAAO,UAAU,WAAW,OAAO;CACtF,IAAI,OAAO,UAAU,UAAU,OAAOD,iBAAe,KAAK,IAAI,QAAQ,KAAK,YAAY,KAAK;CAC5F,IAAI,OAAO,UAAU,UAAU,OAAO,KAAK,YAAY,KAAK;CAC5D,IAAI,SAAA,IAAyB,OAAO,KAAK,YAAY,KAAK;CAC1D,OAAO,SAAS;CAChB,IAAI,OAAO,QAAA,KAAwB,OAAO,KAAK,aAAa,KAAK;CACjE,MAAM,MAAM,QAAQ,KAAK;CACzB,IAAI,QAAQ,KAAA,GAAW,OAAO;CAC9B,IAAI,aAAa,KAAK,GAAG;EACxB,MAAM,SAAS,QAAQ,OAAO,UAAU,OAAO,IAAI;EACnD,IAAI,OAAO,WAAW,YAAY,CAACC,sBAAoB,MAAM,KAAK,SAAS,GAAG,OAAO,KAAK,YAAY,KAAK;EAC3G,IAAI,SAAA,KAAyB,OAAO,KAAK,aAAa,KAAK;EAC3D,MAAM,OAA2B,CAAC;EAClC,KAAK,IAAI,QAAQ,GAAG,QAAQ,QAAQ,SAAS,GAAG;GAC/C,MAAM,OAAO,QAAQ,OAAO,GAAG,SAAS,OAAO,IAAI;GACnD,IAAI,SAAS,KAAA,GAAW,OAAO,KAAK,QAAQ,KAAK;GACjD,OAAO,MAAM,OAAO,SAAS,MAAM,OAAO,MAAM,QAAQ,GAAG,MAAM,CAAC;EACnE;EACA,OAAO,aAAa,IAAI;CACzB;CACA,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO,KAAK,aAAa,KAAK;CACzD,MAAM,OAAOP,iBAAe,KAAK;CACjC,MAAM,OAAOG,eAAa,IAAI;CAC9B,KAAK,IAAI,QAAQ,GAAG,QAAQ,KAAK,QAAQ,SAAS,GAAG;EACpD,MAAM,MAAM,KAAK;EACjB,IAAI,OAAO,QAAQ,UAAU;EAC7B,MAAM,aAAaF,kCAAgC,OAAO,GAAG;EAC7D,IAAI,eAAe,KAAA,KAAa,WAAW,eAAe,MAAM;EAChE,IAAI,CAAC,aAAa,YAAY,OAAO,GAAG,OAAO,KAAK,YAAY,KAAK;EACrE,IAAI,WAAW,UAAU,KAAA,GAAW;EACpC,OAAO,MAAM,KAAK,SAAS,WAAW,OAAO,OAAO,MAAM,QAAQ,GAAG,MAAM,CAAC;CAC7E;CACA,OAAO,aAAa,IAAI;AACzB;;;;;;;;AASA,SAAgB,cAAc,OAAwB;CACrD,IAAI,UAAU,MAAM,OAAO;CAC3B,IAAI,OAAO,UAAU,UAAU,OAAO,cAAc,KAAK;CACzD,IAAI,OAAO,UAAU,UAAU,OAAOK,iBAAe,KAAK,IAAI,GAAG,UAAU;CAC3E,IAAI,OAAO,UAAU,WAAW,OAAO,QAAQ,SAAS;CACxD,IAAI,OAAO,UAAU,UAAU,OAAO;CACtC,IAAI,aAAa,KAAK,GAAG;EACxB,IAAI,OAAO;EACX,KAAK,IAAI,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS,GAAG;GACrD,IAAI,QAAQ,GAAG,QAAQ;GACvB,QAAQ,cAAc,MAAM,MAAM;EACnC;EACA,OAAO,GAAG,KAAK;CAChB;CACA,MAAM,OAAON,iBAAe,KAAK;CACjC,IAAI,OAAO;CACX,IAAI,QAAQ;CACZ,KAAK,IAAI,QAAQ,GAAG,QAAQ,KAAK,QAAQ,SAAS,GAAG;EACpD,MAAM,MAAM,KAAK;EACjB,IAAI,OAAO,QAAQ,UAAU;EAC7B,MAAM,OAAQ,MAAkC;EAChD,IAAI,SAAS,KAAA,GAAW;EACxB,QAAQ,GAAG,QAAQ,KAAK,MAAM,cAAc,GAAG,EAAY,GAAG,cAAc,IAAI;EAChF,QAAQ;CACT;CACA,OAAO,GAAG,KAAK;AAChB;;;AC/SA,MAAM,sBAA4E,OAAO;CACxF,kBAAkB;CAClB,wBAAwB;CACxB,qBAAqB;CACrB,mBAAmB;CACnB,mBAAmB;CACnB,gBAAgB;AACjB,CAAC;AAED,MAAM,kBAAoE,OAAO;CAChF,2BAA2B;CAC3B,mBAAmB;CACnB,oBAAoB;CACpB,sBAAsB;CACtB,kBAAkB;AACnB,CAAC;AAED,MAAM,iBAAkE,OAAO;CAC9E,kBAAkB;CAClB,qBAAqB;CACrB,qBAAqB;CACrB,qBAAqB;CACrB,mBAAmB;CACnB,kBAAkB;CAClB,qBAAqB;CACrB,iBAAiB;CACjB,qBAAqB;CACrB,uBAAuB;CACvB,uBAAuB;CACvB,sBAAsB;CACtB,qBAAqB;AACtB,CAAC;AAED,MAAM,iBAAkE,OAAO;CAC9E,eAAe;CACf,iBAAiB;CACjB,sBAAsB;CACtB,cAAc;CACd,iBAAiB;CACjB,eAAe;CACf,cAAc;AACf,CAAC;AAED,MAAM,mBAAqE,OAAO;CACjF,2BAA2B;CAC3B,sBAAsB;CACtB,uBAAuB;CACvB,iBAAiB;CACjB,aAAa;CACb,cAAc;CACd,eAAe;CACf,iBAAiB;AAClB,CAAC;AAED,MAAM,oBAAwE,OAAO;CACpF,uBAAuB;CACvB,wBAAwB;CACxB,eAAe;CACf,iBAAiB;AAClB,CAAC;AAED,MAAM,2BAAqF,OAAO,EACjG,iBAAiB,mEAClB,CAAC;AAED,SAAS,WAAW,OAAyC,MAAe,UAA0B;CACrG,OAAO,OAAO,SAAS,YAAY,OAAO,OAAO,IAAI,IAAI,MAAM,QAAS;AACzE;AAEA,MAAMW,0BAAwB,QAAQ;AACtC,MAAM,eAAe,OAAO;;;;;;AAO5B,SAAS,YAAY,QAAgB,KAAa,OAAsB;CACvE,MAAM,aAAa,aAAa,IAAI;CACpC,WAAW,QAAQ;CACnB,WAAW,aAAa;CACxB,WAAW,WAAW;CACtB,WAAW,eAAe;CAC1B,wBAAsB,QAAQ,KAAK,UAAU;AAC9C;;;;;;;AAQA,IAAa,6BAAb,cAAgD,MAAM;CAKrD,YAAY,MAA8B,OAAe;EACxD,MAAM,WAAW,iBAAiB,MAAM,sCAAsC,CAAC;EAC/E,YAAY,MAAM,QAAQ,4BAA4B;EACtD,YAAY,MAAM,QAAQ,IAAI;EAC9B,YAAY,MAAM,SAAS,KAAK;CACjC;AACD;;;;;;AAOA,IAAa,yBAAb,cAA4C,MAAM;CAKjD,YAAY,MAAkC,OAAe;EAC5D,MAAM,WAAW,qBAAqB,MAAM,4BAA4B,CAAC;EACzE,YAAY,MAAM,QAAQ,wBAAwB;EAClD,YAAY,MAAM,QAAQ,IAAI;EAC9B,YAAY,MAAM,SAAS,KAAK;CACjC;AACD;;;;;;;;;AAUA,IAAa,oBAAb,cAAuC,MAAM;CAK5C,YAAY,MAA6B,OAAe;EACvD,MAAM,WAAW,gBAAgB,MAAM,iCAAiC,CAAC;EACzE,YAAY,MAAM,QAAQ,mBAAmB;EAC7C,YAAY,MAAM,QAAQ,IAAI;EAC9B,YAAY,MAAM,SAAS,KAAK;CACjC;AACD;;;;;;;AAQA,IAAa,qBAAb,cAAwC,MAAM;CAK7C,YAAY,MAA8B,OAAe;EACxD,MAAM,WAAW,kBAAkB,MAAM,yBAAyB,CAAC;EACnE,YAAY,MAAM,QAAQ,oBAAoB;EAC9C,YAAY,MAAM,QAAQ,IAAI;EAC9B,YAAY,MAAM,SAAS,KAAK;CACjC;AACD;;;;;;AAOA,IAAa,uBAAb,cAA0C,MAAM;CAK/C,YAAY,MAAgC,OAAe;EAC1D,MAAM,WAAW,mBAAmB,MAAM,0BAA0B,CAAC;EACrE,YAAY,MAAM,QAAQ,sBAAsB;EAChD,YAAY,MAAM,QAAQ,IAAI;EAC9B,YAAY,MAAM,SAAS,KAAK;CACjC;AACD;;;;;;AAOA,IAAa,6BAAb,cAAgD,MAAM;CAKrD,YAAY,MAAsC,OAAe;EAChE,MAAM,WAAW,0BAA0B,MAAM,oDAAoD,CAAC;EACtG,YAAY,MAAM,QAAQ,4BAA4B;EACtD,YAAY,MAAM,QAAQ,IAAI;EAC9B,YAAY,MAAM,SAAS,KAAK;CACjC;AACD;AAEA,MAAM,0BAAU,IAAI,QAAgB;AACpC,MAAM,aAAa,QAAQ,UAAU;AACrC,MAAM,aAAa,QAAQ,UAAU;AACrC,MAAM,uBAAuB;AAC7B,MAAM,wBAAwB;;;;;;;;;AAU9B,SAAS,KAAsB,OAAU,MAAc,MAAiB;CACvE,MAAM,QAAQ,aAAa,IAAI;CAC/B,MAAM,QAAQ,GAAG,KAAK,IAAI;CAC1B,MAAM,aAAa;CACnB,MAAM,WAAW;CACjB,MAAM,eAAe;CACrB,IAAI,CAACA,wBAAsB,OAAO,SAAS,KAAK,GAAG,MAAM,IAAI,qBAAqB,2CAA2C;CAC7H,MAAM,YAAY,SAAS,CAAC,KAAK,CAAC;CAClC,OAAO,OAAO,KAAK;AACpB;;AAGA,SAAS,eAAe,OAAyB;CAChD,QAAQ,OAAO,UAAU,YAAY,OAAO,UAAU,eAAe,UAAU,QAAQ,MAAM,YAAY,SAAS,CAAC,KAAK,CAAC,MAAM;AAChI;;AAGA,SAAgB,gBAAgB,MAAkC,OAAuC;CACxG,OAAO,KAAK,IAAI,uBAAuB,MAAM,KAAK,GAAG,0BAA0B,IAAI;AACpF;;AAGA,SAAgB,YAAY,MAA8B,OAA2C;CACpG,OAAO,KAAK,IAAI,2BAA2B,MAAM,KAAK,GAAG,8BAA8B,IAAI;AAC5F;;AAGA,SAAgB,WAAW,MAA6B,OAAkC;CACzF,OAAO,KAAK,IAAI,kBAAkB,MAAM,KAAK,GAAG,qBAAqB,IAAI;AAC1E;;AAGA,SAAgB,YAAY,MAA8B,OAAmC;CAC5F,OAAO,KAAK,IAAI,mBAAmB,MAAM,KAAK,GAAG,sBAAsB,IAAI;AAC5E;;AAGA,SAAgB,cAAc,MAAgC,OAAqC;CAClG,OAAO,KAAK,IAAI,qBAAqB,MAAM,KAAK,GAAG,wBAAwB,IAAI;AAChF;;AAGA,SAAgB,oBAAoB,MAAsC,OAA2C;CACpH,OAAO,KAAK,IAAI,2BAA2B,MAAM,KAAK,GAAG,8BAA8B,IAAI;AAC5F;;AAGA,SAAgB,WAAW,MAAwB,MAAqD;CACvG,MAAM,UAAU,eAAe;CAC/B,MAAM,QAAQ,SAAS,SAAS,IAAI,qBAAqB,OAAO,IAAI,IAAI,sBAAsB,OAAO;CACrG,OAAO,OAAO,QAAQ,IAAI;CAC1B,OAAO,KAAK,OAAO,SAAS,SAAS,cAAc,cAAc,IAAI;AACtE;;;;;;AAOA,SAAgB,MAAS,KAAc,aAA6B;CACnE,IAAI;EACH,OAAO,IAAI;CACZ,SAAS,QAAQ;EAChB,IAAI,eAAe,MAAM,GAAG,MAAM;EAClC,MAAM,YAAY;CACnB;AACD;;AAGA,SAAgB,QAAW,KAAc,UAAsB;CAC9D,IAAI;EACH,OAAO,IAAI;CACZ,QAAQ;EACP,OAAO,SAAS;CACjB;AACD;;;AChQA,MAAM,SAAS;AACf,MAAM,OAAO,KAAK;AAClB,MAAM,MAAM,KAAK;;AAGjB,MAAa,gCAAgC;;AAG7C,MAAa,uBAAuB;;;;;AAMpC,MAAa,kCAAyD,OAAO,OAAO;CACnF,qBAAqB;CACrB,uBAAuB,OAAO,OAAO;EAAC;EAAQ,IAAI;EAAQ,KAAK;EAAQ;EAAM,IAAI;EAAM,KAAK;EAAM,KAAK;CAAI,CAAC;CAC5G,oBAAoB,KAAK;CACzB,mBAAmB;CACnB,qBAAqB,OAAO,OAAO;EAAC;EAAO;EAAO;EAAQ;EAAQ,IAAI;EAAQ,KAAK;CAAM,CAAC;CAC1F,kBAAkB,KAAK;CACvB,kBAAkB;CAClB,eAAe;CACf,kBAAkB;CAClB,iBAAiB;CACjB,iBAAiB,KAAK;AACvB,CAAC;;AAGD,MAAM,aAAa,OAAO,OAAO;CAChC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACD,CAA6D;AAE7D,MAAM,mBAAmB,OAAO;AAEhC,MAAM,aAAmB,OAAO,UAAU;CACzC,MAAM,YAAY,UAAU,cAAc,uBAAuB,oBAAoB,KAAK;AAC3F;;;;;;;;;;;;;AAcA,SAAgB,6BACf,YAA4C,CAAC,GACrB;CACxB,OAAO,YAAY,cAAc,SAAS,SAAS,YAAY,oBAAoB,WAAW,CAAC;AAChG;AAEA,SAAS,cAAc,WAA2C;CACjE,IAAI,CAAC,cAAc,SAAS,GAAG,OAAO,UAAU,aAAa,WAAW;CACxE,MAAM,SAAS,SAAkB;CACjC,KAAK,IAAI,QAAQ,GAAG,QAAQ,WAAW,QAAQ,SAAS,GAAG;EAC1D,MAAM,MAAM,WAAW;EACvB,MAAM,MAAM,QAAQ,WAAW,KAAK,KAAK,SAAS;EAClD,MAAM,QAAQ,QAAQ,2BAA2B,QAAQ,wBAAwB,cAAc,KAAK,KAAK,SAAS,IAAI,UAAU,GAAG;EACnI,OAAO,QAAQ,KAAK,UAAU,KAAA,IAAY,gCAAgC,OAAO,KAAK;CACvF;CACA,MAAM,SAAS;CACf,sBAAsB,OAAO,qBAAqB,qBAAqB;CACvE,oBAAoB,OAAO,uBAAuB,uBAAuB;CACzE,qBAAqB,OAAO,oBAAoB,oBAAoB;CACpE,sBAAsB,OAAO,mBAAmB,mBAAmB;CACnE,oBAAoB,OAAO,qBAAqB,qBAAqB;CACrE,qBAAqB,OAAO,kBAAkB,kBAAkB;CAChE,iBAAiB,OAAO,kBAAkB,kBAAkB;CAC5D,iBAAiB,OAAO,eAAe,eAAe;CACtD,kBAAkB,OAAO,kBAAkB,kBAAkB;CAC7D,qBAAqB,OAAO,iBAAiB,iBAAiB;CAC9D,oCAAoC,OAAO,uBAAuB,OAAO,kBAAkB,uBAAuB;CAClH,oCAAoC,OAAO,qBAAqB,OAAO,kBAAkB,qBAAqB;CAC9G,oBAAoB,OAAO,iBAAiB,iBAAiB;CAG7D,IAAI,OAAO,kBAAkB,OAAO,mBAAmB,OAAO,oBAC7D,MAAM,YAAY,sBAAsB,iBAAiB;CAI1D,OAAO,OAAO,MAAM;AACrB;;AAGA,SAAgB,qBAAqB,OAAgB,OAAwC;CAC5F,IAAI,OAAO,UAAU,YAAY,CAACC,iBAAe,KAAK,KAAK,SAAS,GACnE,MAAM,YAAY,6BAA6B,KAAK;AAEtD;;AAGA,SAAgB,sBAAsB,OAAgB,OAAwC;CAC7F,qBAAqB,OAAO,KAAK;CACjC,IAAI,CAACC,sBAAoB,KAAK,GAC7B,MAAM,YAAY,qBAAqB,KAAK;AAE9C;;AAGA,SAAgB,oBAAoB,OAAgB,OAAmD;CACtG,IAAI,CAAC,QAAQ,KAAK,KAAK,MAAM,WAAW,GACvC,MAAM,YAAY,wBAAwB,KAAK;CAGhD,KAAK,IAAI,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS,GAClD,qBAAqB,MAAM,QAAQ,GAAG,MAAM,GAAG,MAAM,EAAE;AAEzD;;;;;;;AAQA,SAAgB,oCAAoC,QAA2B,aAAqB,OAAqB;CACxH,KAAK,IAAI,QAAQ,GAAG,QAAQ,OAAO,QAAQ,SAAS,GACnD,IAAI,EAAE,OAAO,UAAW,IAAI,gBAAgB,mBAC3C,MAAM,YAAY,sBAAsB,GAAG,MAAM,GAAG,MAAM,EAAE;AAG/D;;AAGA,SAAgB,kBAAkB,OAAgB,OAAwC;CACzF,qBAAqB,OAAO,KAAK;CACjC,IAAI,QAAQ,GACX,MAAM,YAAY,sBAAsB,KAAK;AAE/C;;;;;;;;AASA,SAAgB,oBAAoB,OAAgB,OAAwC;CAC3F,sBAAsB,OAAO,KAAK;CAClC,IAAI,QAAA,QACH,MAAM,YAAY,sBAAsB,KAAK;AAE/C;AAEA,SAAS,iBAAiB,OAAgB,OAAwC;CACjF,qBAAqB,OAAO,KAAK;CACjC,IAAI,QAAA,YACH,MAAM,YAAY,sBAAsB,KAAK;AAE/C;;;ACjMA,MAAMC,oBAAkB;AAExB,MAAM,aAAmB,QAAQ,UAAU;CAC1C,MAAM,WAAW,iBAAiB,KAAK;AACxC;;AAMA,SAAgB,eAAe,OAAgB,OAAyB;CACvE,MAAM,OAAO,aAAa,OAAO,OAAO,SAAS;CACjD,IAAI,SAAS,QAAQ,OAAO,SAAS,YAAY,QAAQ,IAAI,GAAG,MAAM,WAAW,iBAAiB,KAAK;CACvG,OAAO;AACR;;AAGA,SAAgB,aAAa,QAAkB,KAAa,OAAyB;CACpF,MAAM,QAAQ,IAAI,QAAQ,GAAG;CAC7B,IAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,QAAQ,KAAK,GAAG,MAAM,WAAW,iBAAiB,KAAK;CAC1G,OAAO;AACR;AAEA,SAAS,IAAI,QAAkB,KAA2C;CACzE,OAAO,QAAQ,QAAQ,KAAK,KAAK,SAAS;AAC3C;;AAGA,SAAgB,KAAK,QAAkB,KAAa,OAAuB;CAC1E,MAAM,QAAQ,IAAI,QAAQ,GAAG;CAC7B,IAAI,OAAO,UAAU,YAAY,MAAM,WAAW,GAAG,MAAM,WAAW,iBAAiB,KAAK;CAC5F,OAAO;AACR;;AAMA,MAAM,oBAAoB;;;;;AAM1B,MAAM,iBAAiB;;;;;;;;;;;;AAavB,SAAgB,WAAW,QAAkB,KAAa,OAAuB;CAChF,MAAM,QAAQ,KAAK,QAAQ,KAAK,KAAK;CACrC,IAAI,CAAC,oBAAoB,KAAK,GAAG,MAAM,WAAW,iBAAiB,KAAK;CACxE,OAAO;AACR;;;;;;;;AASA,SAAgB,oBAAoB,OAAiC;CACpE,OAAO,OAAO,UAAU,YAAY,MAAM,SAAS,KAAK,MAAM,UAAA,OAC7D,CAAC,QAAQ,mBAAmB,KAAK,KAAK,CAAC,QAAQ,gBAAgB,KAAK;AACtE;;AAGA,SAAgB,mBAAmB,QAAkB,KAAa,OAAmC;CACpG,OAAO,IAAI,QAAQ,GAAG,MAAM,KAAA,IAAY,KAAA,IAAY,WAAW,QAAQ,KAAK,KAAK;AAClF;;;;;;AAOA,SAAgB,aAAa,GAAG,OAAkC;CACjE,OAAO,cAAc,KAAK;AAC3B;;;;;;;AAQA,SAAgB,SAAY,OAAmB;CAC9C,OAAO,SAAS,KAAK;AACtB;AAEA,SAAS,SAAS,OAAyB;CAC1C,IAAI,UAAU,QAAQ,OAAO,UAAU,UAAU,OAAO;CACxD,IAAI,QAAQ,KAAK,GAAG;EACnB,MAAM,OAAkB,CAAC;EACzB,KAAK,IAAI,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS,GAAG,KAAK,SAAS,SAAS,MAAM,MAAM;EACzF,OAAO,OAAO,IAAI;CACnB;CACA,MAAM,MAAM,OAAO,OAAO,IAAI;CAC9B,MAAM,OAAO,OAAO,KAAK,KAAK;CAC9B,KAAK,IAAI,QAAQ,GAAG,QAAQ,KAAK,QAAQ,SAAS,GAAG;EACpD,MAAM,MAAM,KAAK;EACjB,MAAM,OAAQ,MAAkC;EAChD,IAAI,SAAS,KAAA,GAAW,IAAI,OAAO,SAAS,IAAI;CACjD;CACA,OAAO,OAAO,GAAG;AAClB;;AAQA,SAAgB,YAAY,QAAkB,KAAa,OAAe,KAAqB;CAC9F,MAAM,QAAQ,IAAI,QAAQ,GAAG;CAC7B,IAAI,OAAO,UAAU,YAAY,CAACC,sBAAoB,KAAK,KAAK,QAAQ,KAAK,MAAM,WAAW,iBAAiB,KAAK;CACpH,OAAO;AACR;;AAGA,SAAgB,oBAAoB,QAAkB,KAAa,OAAe,KAAiC;CAClH,OAAO,IAAI,QAAQ,GAAG,MAAM,KAAA,IAAY,KAAA,IAAY,YAAY,QAAQ,KAAK,OAAO,GAAG;AACxF;;AAGA,SAAgB,KAAK,QAAkB,KAAa,OAAwB;CAC3E,MAAM,QAAQ,IAAI,QAAQ,GAAG;CAC7B,IAAI,OAAO,UAAU,WAAW,MAAM,WAAW,iBAAiB,KAAK;CACvE,OAAO;AACR;;AAGA,SAAgB,QAAQ,QAAkB,KAAa,OAAuB;CAC7E,MAAM,QAAQ,IAAI,QAAQ,GAAG;CAC7B,MAAM,MAAM,OAAO,UAAU,WAAW,oBAAoB,KAAK,IAAI,KAAA;CACrE,IAAI,QAAQ,KAAA,GAAW,MAAM,WAAW,iBAAiB,KAAK;CAC9D,OAAO,UAAU,GAAG;AACrB;;AAGA,SAAgB,OAAyB,QAAkB,KAAa,OAAqB,OAAkB;CAC9G,MAAM,QAAQ,IAAI,QAAQ,GAAG;CAC7B,IAAI,CAAC,QAAQ,OAAO,KAAK,GAAG,MAAM,WAAW,iBAAiB,KAAK;CACnE,OAAO;AACR;;AAGA,SAAgB,SAAS,QAAkB,KAAa,OAAkC;CACzF,MAAM,QAAQ,IAAI,QAAQ,GAAG;CAC7B,IAAI,CAAC,QAAQ,KAAK,KAAK,MAAM,WAAW,KAAK,MAAM,SAAS,MAAO,MAAM,WAAW,iBAAiB,KAAK;CAC1G,KAAK,IAAI,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS,GAAG;EACrD,MAAM,OAAO,MAAM;EACnB,IAAI,OAAO,SAAS,YAAY,KAAK,WAAW,GAAG,MAAM,WAAW,iBAAiB,GAAG,MAAM,GAAG,MAAM,EAAE;CAC1G;CACA,OAAO;AACR;;AAMA,SAAgB,MAAM,IAAoB;CACzC,MAAM,MAAM,QAAQ,IAAID,kBAAgB,EAAE,CAAC;CAC3C,IAAI,QAAQ,KAAA,GAAW,MAAM,WAAW,gBAAgB,MAAM;CAC9D,OAAO;AACR;AAOA,MAAME,mBADoB,OAAO,gBAAgB,aAAa,QAAQ,yBAAyB,YAAY,WAAW,SAAS,IAAI,KAAA,EAAA,EAC1F;AAQzC,SAASC,YAAU,QAAyB;CAC3C,IAAID,oBAAkB,KAAA,GAAW,MAAM,WAAW,iBAAiB,gBAAgB;CAGnF,OAAO,MAAMA,iBAAe,QAAQ,CAAC,CAAC,MAAM;AAC7C;;AAGA,SAAgB,gBAAgB,SAA8B;CAC7D,IAAI,YAAY,QAAQ,OAAO,YAAY,UAAU,MAAM,WAAW,iBAAiB,SAAS;CAEhG,MAAM,aAAa,OADF,QAAQ,SAAS,YAAY,oBAAoB,SACxC,CAAQ;CAClC,IAAI,EAAE,eAAe,eAAe,eAAe,YAAY,eAAe,WAAW,MAAM,WAAW,iBAAiB,kBAAkB;CAC7I,MAAM,SAAS,QAAQ,SAAS,UAAU,kBAAkB,SAAS;CACrE,IAAI,WAAW,QAAQ,OAAO,WAAW,UAAU,MAAM,WAAW,iBAAiB,gBAAgB;CACrG,IAAI;EACH,YAAU,MAAM;CACjB,QAAQ;EACP,MAAM,WAAW,iBAAiB,gBAAgB;CACnD;CACA,OAAO;EAAE;EAAY;CAAO;AAC7B;;;;;;AAOA,SAAgB,iBAAiB,QAAoB,OAAqB;CACzE,IAAIC,YAAU,OAAO,MAAM,GAAG,MAAM,WAAW,gBAAgB,gBAAgB;CAC/E,IAAI,EAAE,OAAO,aAAa,QAAQ,MAAM,WAAW,mBAAmB,kBAAkB;AACzF;;AAaA,SAAgB,aAAa,OAAgD;CAC5E,IAAI,UAAU,QAAQ,OAAO,UAAU,UAAU,MAAM,WAAW,iBAAiB,OAAO;CAC1F,MAAM,MAAO,MAA4B;CACzC,IAAI,OAAO,QAAQ,YAAY,MAAM,WAAW,iBAAiB,WAAW;CAC5E,OAAO;EAAE,QAAQ;EAAY;CAAqC;AACnE;;AAGA,SAAgBC,YAAU,OAA8B;CACvD,IAAI;CACJ,IAAI;EACH,QAAQ,MAAM,MAAM,KAAK,MAAM,QAAQ,CAAC,CAAC;CAC1C,QAAQ;EACP,MAAM,WAAW,iBAAiB,WAAW;CAC9C;CACA,MAAM,KAAK,OAAO,KAAK;CACvB,IAAI,EAAE,OAAO,OAAO,OAAO,YAAY,OAAO,WAAW,MAAM,WAAW,iBAAiB,WAAW;CACtG,OAAO;AACR;;;AC3KA,MAAa,eAAkC,OAAO,OAAO,CAAC,aAAa,aAAa,CAAC;AACzF,MAAa,kBAAqC,OAAO,OAAO;CAAC;CAAa;CAAe;AAAW,CAAC;AACzG,MAAM,mBAAmB,OAAO,OAAO;CAAC;CAAa;CAAS;CAAW;CAAe;AAAW,CAAU;AAC7G,MAAM,iBAAiB,OAAO,OAAO,CAAC,uBAAuB,sBAAsB,CAAU;AAC7F,MAAM,sBAAyC,OAAO,OAAO,CAAC,GAAG,8BAA8B,GAAG,wBAAwB,CAAC;AAC3H,MAAM,kBAAkB,OAAO,OAAO,CAAC,aAAa,CAAU;;;;;;AAO9D,SAAgBC,UAAW,OAAkB;CAC5C,OAAO,SAAY,KAAK;AACzB;;AAGA,SAAgB,UAAU,gBAAwB,SAAyB;CAC1E,OAAO,aAAa,gBAAgB,OAAO;AAC5C;AAOA,SAAgB,QAAQ,QAAiE,OAAuB;CAC/G,OAAO,OAAO,aAAa,MAAM,YAAY,OAAO,YAAY,MAAM;AACvE;;;;;;;AAQA,SAAgB,WAAW,OAAe,OAAe,OAAwB;CAChF,OAAO,MAAM,WAAW,aAAa,MAAM,UAAU,KAAA,KAAa,MAAM,MAAM,UAAU,SAAS,MAAM,MAAM,UAAU;AACxH;;;;;;;;AASA,SAAgB,MAAM,OAAe,OAAe,OAAe,YAA6B;CAC/F,OAAO,WAAW,OAAO,OAAO,KAAK,KAAK,MAAM,MAAO,cAAc;AACtE;;AAGA,SAAgBC,cAAY,MAAc,OAAuB;CAChE,OAAO,OAAO,QAAQ,KAAK,OAAO,QAAQ,IAAI;AAC/C;;AAGA,SAASC,QAAS,MAAkB;CACnC,OAAO,MAAM,YAAY,WAAW,iBAAiB,OAAO,CAAC;AAC9D;;;;;;AAOA,SAAgB,kBAAkB,SAA0B;CAC3D,OAAO,YACA;EACL,IAAI,YAAY,QAAQ,OAAO,YAAY,UAAU,MAAM,YAAY,oBAAoB,SAAS;EACpG,MAAM,QAAQ,UAAU,QAAQ,SAAS,mBAAmB,yBAAyB;GACpF,MAAM,YAAY,oBAAoB,iBAAiB;EACxD,CAAC,CAAC;EACF,oBAAoB,OAAO,iBAAiB;EAC5C,OAAO;CACR,SACM,YAAY,oBAAoB,iBAAiB,CACxD;AACD;;AAGA,SAAgB,eAAwD,SAAkB,KAA4B;CACrH,OAAO,YAAY;EAClB,MAAM,OAAQ,QAAoC;EAClD,IAAI,SAAS,KAAA,KAAa,OAAO,SAAS,YAAY,MAAM,WAAW,iBAAiB,GAAG;EAC3F,OAAO;CACR,SAAS,WAAW,iBAAiB,GAAG,CAAC;AAC1C;AAEA,SAAS,UAAU,OAAiB,OAAsB;CACzD,OAAO;EAAE,UAAU,WAAW,OAAO,YAAY,GAAG,MAAM,UAAU;EAAG,SAAS,WAAW,OAAO,WAAW,GAAG,MAAM,SAAS;CAAE;AAClI;AAQA,SAAS,WAAW,OAA8B;CACjD,OAAO;EAAE,OAAO,WAAW,OAAO,SAAS,aAAa;EAAG,OAAO,YAAY,OAAO,SAAS,eAAe,CAAC;EAAG,OAAO,QAAQ,OAAO,OAAO,WAAW;CAAE;AAC5J;AASA,SAAS,UAAU,SAA8B;CAChD,MAAM,QAAQ,eAAe,SAAS,SAAS;CAC/C,MAAM,QAAoB;EACzB,UAAU,WAAW,OAAO,YAAY,kBAAkB;EAC1D,iBAAiB,YAAY,OAAO,mBAAmB,2BAA2B,CAAC;EACnF,OAAO,YAAY,OAAO,SAAS,iBAAiB,CAAC;EACrD,OAAO,QAAQ,OAAO,OAAO,aAAa;CAC3C;CAEA,IAAI,MAAM,QAAQ,MAAM,kBAAA,QAA+B,MAAM,WAAW,iBAAiB,yBAAyB;CAClH,OAAO;AACR;AAUA,SAAS,mBAAmB,OAA+B;CAC1D,MAAM,UAAU,aAAa,OAAO,WAAW,eAAe;CAC9D,OAAO,SAAS,kBAAkB,iBAAiB,8BAA8B;CACjF,OAAO;EACN,eAAe,YAAY,SAAS,iBAAiB,+BAA+B,CAAC;EACrF,aAAa,WAAW,SAAS,eAAe,2BAA2B;EAC3E,eAAe,QAAQ,SAAS,eAAe,2BAA2B;EAC1E,sBAAsB,QAAQ,SAAS,sBAAsB,kCAAkC;EAC/F,oBAAoB,mBAAmB,SAAS,sBAAsB,kCAAkC;CACzG;AACD;AAEA,SAAS,WAAW,QAAwC;CAC3D,MAAM,QAAQ,eAAe,QAAQ,QAAQ;CAC7C,OAAO;EAAE,SAAS,WAAW,OAAO,WAAW,gBAAgB;EAAG,OAAO,WAAW,OAAO,SAAS,cAAc;EAAG,OAAO,YAAY,OAAO,SAAS,gBAAgB,CAAC;CAAE;AAC5K;AAQA,SAAgB,wBAAwB,KAAc,SAAkB;CACvE,OAAOA,eAAa;EAAE,QAAQ,gBAAgB,OAAO;EAAG,KAAK,aAAa,GAAG;CAAE,EAAE;AAClF;AAEA,SAAgB,cAAc,SAAkB,SAAkB;CACjE,OAAOA,eAAa;EAAE,QAAQ,gBAAgB,OAAO;EAAG,OAAO,UAAU,OAAO;CAAE,EAAE;AACrF;AAEA,SAAgB,kBAAkB,OAAgB,SAAkB;CACnE,OAAOA,cAAY;EAClB,MAAM,OAAO,eAAe,OAAO,OAAO;EAC1C,OAAO;GAAE,QAAQ,gBAAgB,OAAO;GAAG,QAAQ,WAAW,IAAI;GAAG,SAAS,WAAW,MAAM,WAAW,eAAe;EAAE;CAC5H,CAAC;AACF;AAEA,SAAgB,mBAAmB,OAAgB,SAAkB;CACpE,OAAOA,cAAY;EAClB,MAAM,OAAO,eAAe,OAAO,OAAO;EAC1C,OAAO;GACN,QAAQ,gBAAgB,OAAO;GAC/B,QAAQ,WAAW,IAAI;GACvB,SAAS,WAAW,MAAM,WAAW,eAAe;GACpD,eAAe,QAAQ,MAAM,eAAe,mBAAmB;GAC/D,YAAY,OAAO,MAAM,cAAc,0BAA0B,kBAAkB;EACpF;CACD,CAAC;AACF;;AAGA,SAAS,YAAY,MAAgB,QAA6B;CACjE,MAAM,kBAAkB,YAAY,MAAM,mBAAmB,yBAAyB,CAAC;CACvF,IAAI,OAAO,QAAQ,kBAAA,QAA+B,MAAM,WAAW,iBAAiB,uBAAuB;CAC3G,OAAO;AACR;AAEA,SAAgB,iBAAiB,OAAgB,SAAkB;CAClE,OAAOA,cAAY;EAClB,MAAM,OAAO,eAAe,OAAO,OAAO;EAC1C,MAAM,SAAS,WAAW,IAAI;EAC9B,OAAO;GAAE,QAAQ,gBAAgB,OAAO;GAAG;GAAQ,SAAS,WAAW,MAAM,WAAW,eAAe;GAAG,iBAAiB,YAAY,MAAM,MAAM;EAAE;CACtJ,CAAC;AACF;AAEA,SAAgB,oBAAoB,OAAgB,SAAkB;CACrE,OAAOA,cAAY;EAClB,MAAM,OAAO,eAAe,OAAO,OAAO;EAC1C,MAAM,SAAS,WAAW,IAAI;EAC9B,OAAO;GAAE,QAAQ,gBAAgB,OAAO;GAAG;GAAQ,YAAY,WAAW,MAAM,cAAc,kBAAkB;GAAG,iBAAiB,YAAY,MAAM,MAAM;EAAE;CAC/J,CAAC;AACF;;;;;;;;AASA,SAAgB,gBAAgB,OAA2D,OAAe,iBAAiC;CAC1I,MAAM,QAAQC,UAAQ,QAAQ,iBAAiB,MAAM,oBAAoB;CACzE,MAAM,UAAU,MAAM,MAAO;CAC7B,OAAO,QAAQ,UAAU,QAAQ;AAClC;AAEA,SAAgB,sBAAsB,OAAgB,SAAkB;CACvE,OAAOD,cAAY;EAClB,MAAM,OAAO,eAAe,OAAO,OAAO;EAC1C,OAAO;GACN,QAAQ,gBAAgB,OAAO;GAC/B,QAAQ,WAAW,IAAI;GACvB,SAAS,WAAW,MAAM,WAAW,eAAe;GACpD,YAAY,OAAO,MAAM,cAAc,0BAA0B,kBAAkB;EACpF;CACD,CAAC;AACF;;AAQA,SAAgB,sBAAsB,OAAgB,SAAkB;CACvE,OAAOA,cAAY;EAClB,MAAM,OAAO,eAAe,OAAO,OAAO;EAC1C,MAAM,UAAU,aAAa,MAAM,WAAW,eAAe;EAC7D,MAAM,QAAQ,aAAa,SAAS,SAAS,qBAAqB;EAClE,MAAM,OAAwB;GAC7B,eAAe,YAAY,SAAS,iBAAiB,+BAA+B,CAAC;GACrF,aAAa,WAAW,SAAS,eAAe,2BAA2B;GAC3E,eAAe,QAAQ,SAAS,eAAe,2BAA2B;GAC1E,sBAAsB,QAAQ,SAAS,sBAAsB,kCAAkC;GAC/F,oBAAoB,mBAAmB,SAAS,sBAAsB,kCAAkC;GACxG,SAAS,WAAW,OAAO,WAAW,6BAA6B;GACnE,WAAW,WAAW,OAAO,aAAa,+BAA+B;EAC1E;EACA,OAAO;GAAE,QAAQ,gBAAgB,OAAO;GAAG,OAAO,UAAU,MAAM,OAAO;GAAG,SAAS,WAAW,MAAM,WAAW,eAAe;GAAG,SAAS;EAAK;CAClJ,CAAC;AACF;AAEA,SAAgB,mBAAmB,OAAgB,SAAkB;CACpE,OAAOA,cAAY;EAClB,MAAM,OAAO,eAAe,OAAO,OAAO;EAC1C,OAAO;GAAE,QAAQ,gBAAgB,OAAO;GAAG,OAAO,UAAU,MAAM,OAAO;GAAG,SAAS,WAAW,MAAM,WAAW,eAAe;GAAG,SAAS,mBAAmB,IAAI;EAAE;CACtK,CAAC;AACF;;AAGA,SAAgB,cAAc,OAAgB,SAAkB;CAC/D,OAAOA,cAAY;EAClB,MAAM,OAAO,eAAe,OAAO,OAAO;EAC1C,OAAO;GAAE,QAAQ,gBAAgB,OAAO;GAAG,OAAO,UAAU,MAAM,OAAO;GAAG,SAAS,WAAW,MAAM,WAAW,eAAe;EAAE;CACnI,CAAC;AACF;AAEA,SAAgB,qBAAqB,QAAiB,QAAiB,SAAkB;CACxF,OAAOA,cAAY;EAClB,MAAM,OAAO,eAAe,QAAQ,QAAQ;EAC5C,MAAM,QAAQ,WAAW,MAAM;EAC/B,MAAM,OAAO;GACZ,QAAQ,gBAAgB,OAAO;GAC/B,QAAQ;GACR,YAAY,WAAW,MAAM,cAAc,mBAAmB;GAC9D,gBAAgB,WAAW,MAAM,kBAAkB,uBAAuB;GAC1E,SAAS,WAAW,MAAM,WAAW,gBAAgB;GACrD,UAAU,WAAW,MAAM,YAAY,iBAAiB;GACxD,SAAS,WAAW,MAAM,WAAW,gBAAgB;GACrD,qBAAqB,YAAY,MAAM,uBAAuB,8BAA8B,CAAC;GAC7F,MAAM,KAAK,MAAM,QAAQ,aAAa;GACtC,eAAe,QAAQ,MAAM,eAAe,oBAAoB;GAChE,sBAAsB,QAAQ,MAAM,sBAAsB,2BAA2B;GACrF,aAAa,QAAQ,MAAM,aAAa,kBAAkB;EAC3D;EACA,IAAI,KAAK,YAAY,MAAM,SAAS,MAAM,WAAW,mBAAmB,gBAAgB;EACxF,OAAO;CACR,CAAC;AACF;AAEA,SAAgB,eAAe,QAAiB,QAAiB,SAAkB;CAClF,OAAOA,cAAY;EAClB,MAAM,OAAO,eAAe,QAAQ,QAAQ;EAC5C,MAAM,QAAQ,WAAW,MAAM;EAC/B,MAAM,OAAO;GACZ,QAAQ,gBAAgB,OAAO;GAC/B,QAAQ;GACR,gBAAgB,WAAW,MAAM,kBAAkB,uBAAuB;GAC1E,SAAS,WAAW,MAAM,WAAW,gBAAgB;GACrD,UAAU,WAAW,MAAM,YAAY,iBAAiB;GACxD,SAAS,WAAW,MAAM,WAAW,gBAAgB;GACrD,qBAAqB,YAAY,MAAM,uBAAuB,8BAA8B,CAAC;GAC7F,MAAM,OAAmC,MAAM,QAAQ,gCAAgC,aAAa;GACpG,cAAc,QAAQ,MAAM,cAAc,mBAAmB;EAC9D;EACA,IAAI,KAAK,YAAY,MAAM,SAAS,MAAM,WAAW,mBAAmB,gBAAgB;EACxF,OAAO;CACR,CAAC;AACF;;AAGA,SAAgB,aAAa,MAAmD;CAC/E,OAAOF,UAAkB;EACxB,gBAAgB,KAAK;EACrB,SAAS,KAAK;EACd,UAAU,KAAK;EACf,SAAS,KAAK;EACd,qBAAqB,KAAK;EAC1B,MAAM,KAAK;EACX,YAAY,MAAM,KAAK,YAAY;CACpC,CAAC;AACF;AAEA,SAAgB,mBAAmB,OAAgB,SAAkB;CACpE,OAAOE,cAAY;EAClB,MAAM,OAAO,eAAe,OAAO,OAAO;EAC1C,OAAO;GACN,QAAQ,gBAAgB,OAAO;GAC/B,OAAO,UAAU,MAAM,OAAO;GAC9B,YAAY,WAAW,MAAM,cAAc,kBAAkB;GAC7D,QAAQ,WAAW,IAAI;EACxB;CACD,CAAC;AACF;AAEA,SAAgB,sBAAsB,OAAgB,SAAkB;CACvE,OAAOA,cAAY;EAClB,MAAM,OAAO,eAAe,OAAO,OAAO;EAC1C,MAAM,UAAU,aAAa,MAAM,WAAW,eAAe;EAC7D,MAAM,aAAa,oBAAoB,SAAS,cAAc,4BAA4B,GAAG;EAC7F,IAAI,eAAe,KAAA,KAAa,aAAa,KAAK,MAAM,WAAW,iBAAiB,0BAA0B;EAC9G,MAAM,SAASF,UAAkB;GAChC,YAAY,WAAW,SAAS,cAAc,0BAA0B;GACxE,gBAAgB,WAAW,SAAS,kBAAkB,8BAA8B;GACpF,SAAS,WAAW,SAAS,WAAW,uBAAuB;GAC/D,SAAS,YAAY,SAAS,WAAW,yBAAyB,CAAC;GACnE,sBAAsB,YAAY,SAAS,wBAAwB,sCAAsC,CAAC;GAC1G,WAAW,MAAM,QAAQ,SAAS,aAAa,yBAAyB,CAAC;GACzE,YAAY,MAAM,QAAQ,SAAS,cAAc,0BAA0B,CAAC;GAC5E,SAAS,OAAO,SAAS,WAAW,0BAA0B,uBAAuB;GACrF,QAAQ,OAAO,SAAS,UAAU,8BAA8B,sBAAsB;GACtF;EACD,CAAC;EACD,OAAO;GACN,QAAQ,gBAAgB,OAAO;GAC/B,QAAQ,WAAW,IAAI;GACvB;GACA,YAAY,OAAO;GACnB,gBAAgB,OAAO;GACvB,SAAS,OAAO;EACjB;CACD,CAAC;AACF;;;;;AAMA,SAAgB,qBAAqB,OAAgB,SAAkB;CACtE,OAAOE,cAAY;EAClB,MAAM,OAAO,eAAe,OAAO,OAAO;EAC1C,MAAM,UAAU,aAAa,MAAM,WAAW,eAAe;EAC7D,MAAM,SAASF,UAAkB;GAChC,YAAY,WAAW,SAAS,cAAc,0BAA0B;GACxE,gBAAgB,WAAW,SAAS,kBAAkB,8BAA8B;GACpF,SAAS,WAAW,SAAS,WAAW,uBAAuB;GAC/D,SAAS,YAAY,SAAS,WAAW,yBAAyB,CAAC;GACnE,sBAAsB,YAAY,SAAS,wBAAwB,sCAAsC,CAAC;GAC1G,WAAW,MAAM,QAAQ,SAAS,aAAa,yBAAyB,CAAC;EAC1E,CAAC;EACD,OAAO;GACN,QAAQ,gBAAgB,OAAO;GAC/B,QAAQ,WAAW,IAAI;GACvB;GACA,YAAY,OAAO;GACnB,gBAAgB,OAAO;GACvB,SAAS,OAAO;EACjB;CACD,CAAC;AACF;;AAGA,SAAgB,sBAAsB,OAAgB,SAAkB;CACvE,OAAOE,cAAY;EAClB,MAAM,OAAO,eAAe,OAAO,OAAO;EAC1C,MAAM,SAAS,aAAa,MAAM,UAAU,cAAc;EAC1D,MAAM,aAAa,oBAAoB,QAAQ,cAAc,2BAA2B,GAAG;EAC3F,IAAI,eAAe,KAAA,KAAa,aAAa,KAAK,MAAM,WAAW,iBAAiB,yBAAyB;EAC7G,OAAO;GACN,QAAQ,gBAAgB,OAAO;GAC/B,OAAO,UAAU,MAAM,OAAO;GAC9B,YAAY,WAAW,MAAM,cAAc,kBAAkB;GAC7D,OAAO,YAAY,MAAM,SAAS,eAAe,CAAC;GAElD,SAAS,WAAW,MAAM,WAAW,eAAe;GACpD,QAAQF,UAAkB;IACzB,YAAY,MAAM,QAAQ,QAAQ,cAAc,yBAAyB,CAAC;IAC1E,SAAS,OAAO,QAAQ,WAAW,0BAA0B,sBAAsB;IACnF,QAAQ,OAAO,QAAQ,UAAU,8BAA8B,qBAAqB;IACpF;GACD,CAAC;EACF;CACD,CAAC;AACF;;AAGA,SAAgB,WAAW,YAAoB,OAAuB;CACrE,OAAO,aAAa,YAAY,GAAG,OAAO;AAC3C;;;;;;AAOA,SAAgB,SAAS,QAAiC,QAAqB,YAA2C;CACzH,OAAO,WAAW,KAAA,KAAa,MAAM,QAAQ,OAAO,OAAO,OAAO,OAAO,UAAU;AACpF;;;;;;;AAQA,SAAgB,gBAAgB,OAAiB,OAA2B,QAAsC;CACjH,IAAI,UAAU,KAAA,GAAW,OAAO;CAChC,IAAI,WAAW,KAAA,GAAW,OAAO;EAAE,GAAG;EAAO;EAAO,SAAS;CAAY;CACzE,OAAO;EAAE,GAAG;EAAO,GAAG;EAAQ;CAAM;AACrC;AAEA,SAAgB,YAAY,SAAwD;CACnF,OAAOA,UAAmC,YAAY,KAAA,IAAY,EAAE,OAAO,MAAM,IAAI;EAAE,OAAO;EAAM;CAAQ,CAAC;AAC9G;AAEA,SAAgB,eAAe,OAAgB,SAAkB;CAChE,OAAOE,cAAY;EAClB,MAAM,OAAO,eAAe,OAAO,OAAO;EAC1C,OAAO;GAAE,QAAQ,gBAAgB,OAAO;GAAG,QAAQ,WAAW,IAAI;GAAG,YAAY,WAAW,MAAM,cAAc,kBAAkB;GAAG,YAAY,eAAe,IAAI;EAAE;CACvK,CAAC;AACF;AAEA,SAAgB,eAAe,OAAgB,SAAkB;CAChE,OAAOA,cAAY;EAClB,MAAM,OAAO,eAAe,OAAO,OAAO;EAC1C,QAAQ,MAAM,OAAO,WAAW;EAChC,OAAO;GACN,QAAQ,gBAAgB,OAAO;GAC/B,OAAO,UAAU,MAAM,OAAO;GAC9B,gBAAgB,WAAW,MAAM,kBAAkB,sBAAsB;GACzE,QAAQ,OAAO,MAAM,UAAU,gBAAgB,cAAc;GAC7D,gBAAgB,YAAY,MAAM,kBAAkB,wBAAwB,CAAC;EAC9E;CACD,CAAC;AACF;AAEA,SAAgB,sBAAsB,OAAgB,SAAkB;CACvE,OAAOA,cAAY;EAClB,MAAM,OAAO,eAAe,OAAO,OAAO;EAC1C,OAAO;GAAE,QAAQ,gBAAgB,OAAO;GAAG,OAAO,UAAU,MAAM,OAAO;GAAG,YAAY,WAAW,MAAM,cAAc,kBAAkB;GAAG,SAAS,mBAAmB,IAAI;EAAE;CAC/K,CAAC;AACF;;AAGA,SAAgB,iBAAiB,OAAgB,SAAkB;CAClE,OAAOA,cAAY;EAClB,MAAM,OAAO,eAAe,OAAO,OAAO;EAC1C,OAAO;GAAE,QAAQ,gBAAgB,OAAO;GAAG,OAAO,UAAU,MAAM,OAAO;GAAG,YAAY,WAAW,MAAM,cAAc,kBAAkB;EAAE;CAC5I,CAAC;AACF;AAEA,SAAgB,kBAAkB,OAAgB,SAAkB;CACnE,OAAOA,cAAY;EAClB,MAAM,OAAO,eAAe,OAAO,OAAO;EAC1C,OAAO;GACN,QAAQ,gBAAgB,OAAO;GAC/B,OAAO,UAAU,MAAM,OAAO;GAC9B,gBAAgB,WAAW,MAAM,kBAAkB,sBAAsB;GACzE,SAAS,WAAW,MAAM,WAAW,eAAe;EACrD;CACD,CAAC;AACF;AAEA,SAAgB,cAAc,OAAgB,SAA2E;CACxH,OAAOA,cAAY;EAClB,MAAM,OAAO,eAAe,OAAO,OAAO;EAC1C,OAAO;GAAE,QAAQ,gBAAgB,OAAO;GAAG,OAAO,YAAY,MAAM,SAAS,eAAe,CAAC;EAAE;CAChG,CAAC;AACF;AAgBA,MAAM,eAAe,OAAO,OAAO,CAAC,WAAW,QAAQ,CAAU;AAEjE,MAAM,0BAA0B,OAAO,OAAO;CAAC;CAAU;CAAY;CAAgB;AAAY,CAAU;AAC3G,MAAM,gBAAgB,OAAO,OAAO,CAAC,qBAAqB,8BAA8B,CAAU;AAClG,MAAM,iBAAiB,OAAO,OAAO,CAAC,cAAc,QAAQ,CAAU;AACtE,MAAM,cAAc,OAAO;;;;;;AAO3B,SAAS,kBAAkB,OAAyB;CACnD,MAAM,cAAc,MAAM,mBAAmB,KAAA,IAAY,KAAA,IAAY,OAAO,OAAO,eAAe,eAAe,uBAAuB;CACxI,OAAO;EACN,SAAS,WAAW,OAAO,WAAW,mBAAmB;EACzD,WAAW,WAAW,OAAO,aAAa,qBAAqB;EAC/D,oBAAoB,YAAY,OAAO,sBAAsB,gCAAgC,WAAW;EACxG,UAAU,WAAW,OAAO,YAAY,oBAAoB;EAC5D,SAAS,WAAW,OAAO,WAAW,mBAAmB;EACzD,aAAa,WAAW,OAAO,eAAe,uBAAuB;EACrE,WAAW,WAAW,OAAO,aAAa,qBAAqB;EAC/D,UAAU,YAAY,OAAO,YAAY,sBAAsB,WAAW;EAC1E,oBAAoB,mBAAmB,OAAO,sBAAsB,8BAA8B;EAClG,eAAe,WAAW,OAAO,iBAAiB,yBAAyB;EAC3E,aAAa,mBAAmB,OAAO,eAAe,uBAAuB;EAC7E,YAAY,MAAM,QAAQ,OAAO,cAAc,sBAAsB,CAAC;EACtE,YAAY,MAAM,QAAQ,OAAO,cAAc,sBAAsB,CAAC;EACtE,uBAAuB,WAAW,OAAO,yBAAyB,iCAAiC;EACnG,uBAAuB,OAAO,OAAO,yBAAyB,yBAAyB,iCAAiC;EACxH;CACD;AACD;;AAGA,SAASE,YAAU,OAAyB;CAC3C,MAAM,QAAQ,OAAO,OAAO,SAAS,cAAc,iBAAiB;CACpE,IAAI,UAAU,WACb,OAAO;EAAE;EAAO,SAAS,WAAW,OAAO,WAAW,mBAAmB;EAAG,WAAW,WAAW,OAAO,aAAa,qBAAqB;CAAE;CAE9I,OAAO;EAAE;EAAO,QAAQ,OAAO,OAAO,UAAU,gBAAgB,kBAAkB;CAAE;AACrF;AAEA,SAAS,aAAa,KAA6B;CAClD,MAAM,OAAO,eAAe,KAAK,KAAK;CACtC,MAAM,UAAU,WAAW,MAAM,WAAW,aAAa;CACzD,MAAM,WAAW,WAAW,MAAM,YAAY,cAAc;CAC5D,MAAM,UAAU,WAAW,MAAM,WAAW,aAAa;CACzD,MAAM,QAAQ,aAAa,MAAM,SAAS,WAAW;CACrD,IAAI,WAAW,OAAO,WAAW,mBAAmB,MAAM,SAAS,MAAM,WAAW,mBAAmB,mBAAmB;CAC1H,IAAI,WAAW,OAAO,YAAY,oBAAoB,MAAM,UAAU,MAAM,WAAW,mBAAmB,oBAAoB;CAC9H,IAAI,WAAW,OAAO,WAAW,mBAAmB,MAAM,SAAS,MAAM,WAAW,mBAAmB,mBAAmB;CAC1H,MAAM,WAAW,QAAQ,OAAO,cAAc,sBAAsB;CACpE,MAAM,mBAAmB,KAAK,MAAM,oBAAoB,sBAAsB;CAC9E,IAAI,UAA2B;CAC/B,IAAI,kBAAkB,UAAU,aAAa,MAAM,WAAW,aAAa;MACtE,IAAI,KAAK,eAAe,MAAM,MAAM,WAAW,iBAAiB,aAAa;CAUlF,OAAO;EACN,OARaJ,UAAkB;GAC/B,OAAO,kBAAkB,KAAK;GAC9B;GACA;GACA,OAAO,aAAa,MAAM,SAAS,WAAW;GAC9C,OAAOI,YAAU,aAAa,MAAM,SAAS,WAAW,CAAC;EAC1D,CAEK;EACJ;EACA;EACA;EACA;EACA,aAAa,QAAQ,MAAM,aAAa,eAAe;EACvD,sBAAsB,QAAQ,MAAM,sBAAsB,wBAAwB;CACnF;AACD;AAaA,SAAS,eAAe,OAA6B;CACpD,MAAM,aAAa,aAAa,OAAO,cAAc,kBAAkB;CACvE,MAAM,OAAO,OAAO,YAAY,QAAQ,kBAAkB,uBAAuB;CACjF,QAAQ,MAAR;EACC,KAAK,aACJ,OAAO,EAAE,KAAK;EACf,KAAK,SACJ,OAAO;GACN;GACA,eAAe,QAAQ,YAAY,eAAe,8BAA8B;GAChF,SAAS,OAAO,YAAY,WAAW,0BAA0B,0BAA0B;GAC3F,QAAQ,OAAO,YAAY,UAAU,8BAA8B,yBAAyB;EAC7F;EACD,KAAK,WACJ,OAAO;GACN;GACA,eAAe,QAAQ,YAAY,eAAe,8BAA8B;GAChF,YAAY,OAAO,YAAY,cAAc,0BAA0B,6BAA6B;EACrG;EACD,KAAK,eACJ,OAAO;GAAE;GAAM,QAAQ,OAAO,YAAY,UAAU,qBAAqB,yBAAyB;EAAsD;EACzJ,KAAK,aACJ,OAAO;GAAE;GAAM,QAAQ,OAAO,YAAY,UAAU,8BAA8B,yBAAyB;EAAE;CAC/G;AACD;AAEA,SAAS,gBAAgB,OAAkD;CAC1E,OAAQ,6BAAmD,SAAS,KAAK;AAC1E;;;;;;AAOA,SAAgB,gBAAgB,QAAqB,YAA8B;CAClF,QAAQ,WAAW,MAAnB;EACC,KAAK;GACJ,OAAO,SAAS;GAChB,OAAO,cAAc;IAAE,SAAS;IAAa,QAAQ;GAAW;GAChE;EACD,KAAK;GACJ,OAAO,gBAAgB;GACvB,OAAO,gBAAgB,WAAW;GAClC,OAAO,cAAc;IAAE,SAAS,WAAW;IAAS,QAAQ,WAAW;GAAO;GAC9E;EACD,KAAK;GACJ,OAAO,gBAAgB,WAAW;GAClC,OAAO,iBAAiB,WAAW;GACnC;EACD,KAAK;GACJ,OAAO,SAAS;GAChB,IAAI,gBAAgB,WAAW,MAAM,GAAG,OAAO,cAAc;IAAE,SAAS;IAAe,QAAQ,WAAW;GAAO;QAC5G,OAAO,iBAAiB,WAAW;GACxC;EACD,KAAK;GACJ,OAAO,SAAS;GAChB,OAAO,cAAc;IAAE,SAAS;IAAa,QAAQ,WAAW;GAAO;CAEzE;CACA,OAAO,QAAQ,KAAA;AAChB;;AAOA,SAAgB,eACf,OACA,SACA,SAC2D;CAG3D,IAAI,MAAM,UAAU,QAAQ,eAAe,OAAO;CAClD,IAAI,MAAM,WAAW,eAAe,OAAO;CAC3C,IAAI,MAAM,WAAW,SAAS,OAAO;AAEtC;AAEA,SAAgB,mBAAmB,KAAe,SAAuB,OAAuC;CAC/G,OAAOJ,UAAgC;EACtC,QAAQ;EACR,SAAS,IAAI;EACb,UAAU,IAAI;EACd,SAAS,IAAI;EACb,aAAa,QAAQ;EACrB,aAAa,MAAM,QAAQ,aAAa;EACxC,oBAAoB,QAAQ;EAC5B,WAAW,MAAM,KAAK;EACtB,mBAAmB,IAAI;EACvB,kBAAkB,MAAM,IAAI,aAAa;EACzC,yBAAyB,MAAM,IAAI,oBAAoB;EACvD,YAAY,IAAI;EAChB,qBAAqB,IAAI;EACzB,oBAAoB,MAAM,QAAQ,oBAAoB;CACvD,CAAC;AACF;AAEA,SAAgB,sBAAsB,QAAqB,SAAuB,OAAuC;CACxH,OAAOA,UAAgC;EACtC,QAAQ;EACR,SAAS,OAAO;EAChB,YAAY,OAAO;EACnB,gBAAgB,OAAO;EACvB,UAAU,OAAO;EACjB,SAAS,OAAO;EAChB,aAAa,QAAQ;EACrB,aAAa,MAAM,QAAQ,aAAa;EACxC,oBAAoB,QAAQ;EAC5B,WAAW,MAAM,KAAK;EACtB,mBAAmB,OAAO;EAC1B,kBAAkB,MAAM,OAAO,aAAa;EAC5C,yBAAyB,MAAM,OAAO,oBAAoB;EAC1D,YAAY,OAAO;EACnB,qBAAqB,OAAO;EAC5B,kBAAkB,OAAO;EACzB,oBAAoB,MAAM,QAAQ,oBAAoB;CACvD,CAAC;AACF;;;;;;;AAQA,SAAgB,kBACf,KACA,SACA,SACkH;CAClH,IAAI,IAAI,UAAU,QAAQ,eAAe,OAAO;CAChD,IAAI,IAAI,WAAW,aAAa,OAAO;CACvC,MAAM,QAAQ,IAAI,MAAM;CACxB,IAAI,MAAM,aAAa,UAAU,OAAO;CACxC,IAAI,MAAM,cAAc,UAAU,OAAO;CACzC,IAAI,IAAI,WAAW,SAAS,OAAO;AAEpC;AAEA,SAAgB,sBAAsB,KAAe,SAA0B,OAAuC;CACrH,OAAOA,UAAgC;EACtC,GAAI,mBAAmB,KAAK,SAAS,KAAK;EAC1C,QAAQ;EACR,OAAO;GAAE,SAAS,QAAQ;GAAS,WAAW,QAAQ;EAAU;CACjE,CAAC;AACF;;;;;;;AAQA,SAAgB,gBAAgB,KAAe,SAAgC;CAC9E,IAAI,QAAQA,UAAkB;EAAE,GAAI,IAAI;EAAkB,OAAO;GAAE,OAAO;GAAW,SAAS,QAAQ;GAAS,WAAW,QAAQ;EAAU;CAAE,CAAC;CAC/I,aAAa,KAAK,OAAO;AAC1B;AAEA,SAAgB,kBAAkB,QAAqH;CACtJ,OAAOA,UAAsC;EAAE,SAAS;EAAO,SAAS;CAAO,CAAC;AACjF;;AAGA,SAAgB,aAAa,OAA+B,SAA6B;CACxF,MAAM,SAAS;CACf,MAAM,eAAe;CACrB,MAAM,gBAAgB,QAAQ;CAC9B,MAAM,uBAAuB,QAAQ;CACrC,MAAM,SAAS;CACf,MAAM,QAAQ,KAAA;AACf;AAMA,SAAS,SAAS,OAAmD;CACpE,OAAO,UAAU,KAAA,IAAY,KAAA,IAAY;EAAE,OAAO,MAAM;EAAO,OAAO,MAAM;EAAO,WAAW,MAAM,MAAM,WAAW;CAAE;AACxH;AAEA,SAAgB,OAAO,KAAe,QAAgC,IAAI,OAAe;CACxF,MAAM,QAAQ,IAAI;CAClB,OAAO;EACN,SAAS,IAAI;EACb,UAAU,IAAI;EACd,SAAS,IAAI;EACb,OAAO,MAAM;EACb,SAAS,MAAM;EACf,kBAAkB,MAAM;EACxB,OAAO,MAAM;EACb,OAAO,MAAM;EACb,QAAQ,IAAI;EACZ,cAAc,IAAI;EAClB,aAAa,MAAM,IAAI,aAAa;EACpC,oBAAoB,MAAM,IAAI,oBAAoB;EAClD,WAAW,MAAM,IAAI,WAAW;EAChC,aAAa,IAAI,kBAAkB,KAAA,IAAY,KAAA,IAAY,MAAM,IAAI,aAAa;EAClF,gBAAgB,IAAI;EACpB,OAAO,UAAU,KAAA,IAAY,IAAI,QAAQ,MAAM;EAC/C,OAAO,SAAS,KAAK;CACtB;AACD;AAEA,SAAgB,UAAU,QAAqB,QAAgC,OAAO,OAAe;CACpG,OAAO;EACN,YAAY,OAAO;EACnB,gBAAgB,OAAO;EACvB,SAAS,OAAO;EAChB,UAAU,OAAO;EACjB,SAAS,OAAO;EAChB,qBAAqB,OAAO;EAC5B,iBAAiB,MAAM,OAAO,QAAQ;EACtC,MAAM,OAAO;EACb,QAAQ,OAAO;EACf,cAAc,OAAO;EACrB,aAAa,MAAM,OAAO,aAAa;EACvC,oBAAoB,MAAM,OAAO,oBAAoB;EACrD,WAAW,MAAM,OAAO,WAAW;EACnC,aAAa,OAAO;EACpB,gBAAgB,OAAO;EACvB,OAAO,UAAU,KAAA,IAAY,OAAO,QAAQ,MAAM;EAClD,OAAO,SAAS,KAAK;CACtB;AACD;;AAGA,SAAgB,aAAa,QAAqB,WAA2B;CAC5E,OAAO;EACN,MAAM,OAAO;EACb,gBAAgB,OAAO;EACvB,SAAS,OAAO;EAChB,UAAU,OAAO;EACjB,SAAS,OAAO;EAChB,aAAa,MAAMG,UAAQ,OAAO,WAAW,WAAW,6BAA6B,CAAC;CACvF;AACD;;;;;;AAOA,SAAgB,WAAW,QAAiC,MAAwE;CACnI,IAAI,WAAW,KAAA,KAAa,CAAC,QAAQ,QAAQ,KAAK,KAAK,GAAG,OAAOH,UAAmC;EAAE,OAAO;EAAO,QAAQ;CAAY,CAAC;CACzI,IAAI,OAAO,WAAW,WAAW,OAAOA,UAAmC;EAAE,OAAO;EAAO,QAAQ;CAAqB,CAAC;CACzH,IAAI,CAAC,WAAW,QAAQ,KAAK,OAAO,OAAO,KAAK,OAAO,KAAK,KAAK,OAAO,MAAO,eAAe,KAAK,OAAO,OACzG,OAAOA,UAAmC;EAAE,OAAO;EAAO,QAAQ;CAAa,CAAC;CAEjF,OAAOA,UAAmC,EAAE,OAAO,KAAK,CAAC;AAC1D;AAEA,SAAgB,eAAe,QAA0F;CACxH,OAAOA,UAA8B;EAAE,SAAS;EAAO,SAAS;CAAO,CAAC;AACzE;;;;;;;;;AAeA,SAAgB,wBAAwB,SAA8B,QAAgD;CACrH,KAAK,MAAM,UAAU,SAAS;EAC7B,IAAI,OAAO,cAAc,OAAO,QAAQ;EACxC,IAAI,OAAO,WAAW,oBAAoB,OAAO,kBAAkB,OAAO,aAAa,OAAO,eAAe,OAAO,SAAS,OAAO;CACrI;AAED;;AAGA,SAAgB,eAA8E,UAAuB;CACpH,OAAOA,UAAW;EAAE,SAAS;EAAM,UAAU;EAAM;CAAS,CAAC;AAC9D;;AAGA,SAAgB,2BAA2B,OAAgB,SAAkB;CAC5E,OAAOE,cAAY;EAClB,MAAM,OAAO,eAAe,OAAO,OAAO;EAC1C,OAAO;GAAE,QAAQ,gBAAgB,OAAO;GAAG,OAAO,UAAU,MAAM,OAAO;GAAG,oBAAoB,WAAW,MAAM,sBAAsB,0BAA0B;EAAE;CACpK,CAAC;AACF;AAEA,SAAgB,cAAc,SAA0E;CACvG,OAAOF,UAAmC,EAAE,QAAQ,CAAC;AACtD;;;ACp+BA,MAAM,cAAc,IAAI,YAAY;AACpC,MAAM,gBAAgB;AAQtB,SAAS,UAAU,OAA0B;CAC5C,MAAM,SAAU,WAAsC;CACtD,IAAI,WAAW,KAAA,KAAa,OAAO,OAAO,oBAAoB,cAAc,OAAO,WAAW,KAAA,GAAW,MAAM,WAAW,gBAAgB,KAAK;CAC/I,OAAO;AACR;AAEA,SAASK,MAAI,OAA2B;CACvC,IAAI,OAAO;CACX,KAAK,MAAM,QAAQ,OAAO,QAAQ,KAAK,SAAS,EAAE,CAAC,CAAC,SAAS,GAAG,GAAG;CACnE,OAAO;AACR;;AAGA,eAAsB,UAAU,MAAc,OAAgC;CAC7E,OAAOA,MAAI,IAAI,WAAW,MAAM,UAAU,KAAK,CAAC,CAAC,OAAO,OAAO,WAAW,YAAY,OAAO,IAAI,CAAC,CAAC,CAAC;AACrG;;AAGA,eAAsB,oBAAoF;CACzG,MAAM,QAAQ,IAAI,WAAW,aAAa;CAC1C,UAAU,sBAAsB,CAAC,CAAC,gBAAgB,KAAK;CACvD,MAAM,UAAU,QAAQA,MAAI,KAAK;CACjC,OAAO;EAAE;EAAS,QAAQ,MAAM,UAAU,SAAS,sBAAsB;CAAE;AAC5E;;AAGA,SAAgB,qBAAqB,SAAkC;CACtE,OAAO,UAAU,SAAS,uBAAuB;AAClD;;;;AC+HA,eAAe,aAAgB,KAAmC;CACjE,IAAI;EACH,OAAO,MAAM,IAAI;CAClB,SAAS,QAAQ;EAChB,OAAO,YAAe;GACrB,MAAM;EACP,SAAS,WAAW,gBAAgB,OAAO,CAAC;CAC7C;AACD;;AAGA,SAASC,eAA4B;CACpC,OAAO,QAAQ,QAAQ;AACxB;;;;;;;;;AAUA,IAAa,6BAAb,MAAwE;CACvE;CACA;CACA;CACA,wBAAiB,IAAI,IAAsB;CAC3C,2BAAoB,IAAI,IAAyB;CACjD,2BAAoB,IAAI,IAAyB;CACjD,2BAAoB,IAAI,IAAyB;CACjD,YAAqC,CAAC;;CAEtC,yBAAkB,IAAI,IAA0B;;CAEhD,4BAAqB,IAAI,IAAsB;CAC/C,YAAsC,CAAC;;CAEvC,mBAAmB;CAEnB,YAAY,SAA4C;EACvD,KAAK,aAAa,kBAAkB,OAAO;EAC3C,KAAK,SAAS,YAAY,aAAc,QAAqC,KAAK,SAAS,WAAW,iBAAiB,OAAO,CAAC;EAC/H,KAAK,oBAAoB,eAAe,SAAS,kBAAkB;CACpE;;CAGA,IAAI,kBAA0B;EAC7B,OAAO,KAAK;CACb;;CAGA,MAAM,UAAU,WAAkC;EACjD,MAAM,OAAO,KAAK;EAClB,IAAI,SAAS,KAAA,GAAW,OAAOA,aAAW;EAC1C,IAAI;GACH,MAAM,KAAK,SAAS;EACrB,QAAQ;GACP,MAAM,WAAW,gBAAgB,kBAAkB;EACpD;CACD;;;;;;CAOA,QAAW,QAAoB,MAA+B;EAC7D,OAAO,YAAY;GAClB,MAAM,QAAQC,YAAU,KAAK,MAAM;GACnC,iBAAiB,QAAQ,KAAK;GAC9B,OAAO,KAAK,KAAK;EAClB,SAAS,WAAW,gBAAgB,OAAO,CAAC;CAC7C;;CAGA,SAAS,OAAuB;EAC/B,OAAOC,UAAQ,QAAQ,KAAK,YAAY,KAAK,gBAAgB;CAC9D;CAEA,aAAa,UAAkB,OAAwB;EACtD,OAAO,WAAW,KAAK,SAAS,KAAK;CACtC;;;;;;CAOA,eAAe,OAAqB,oBAAwC,QAAgD;EAC3H,IAAI,uBAAuB,KAAA,GAAW,OAAO,KAAA;EAI7C,OAAO,wBAHS,KAAK,UACnB,QAAQ,SAAS,QAAQ,MAAM,KAAK,KAAK,KAAK,OAAO,0BAA0B,kBAAkB,CAAC,CAClG,KAAK,SAAS,KAAK,MACU,GAAS,MAAM;CAC/C;CAMA,MAAM,gBACL,KACA,SAC+B;EAC/B,MAAM,OAAO,wBAAwB,KAAK,OAAO;EACjD,MAAM,KAAK,UAAU,iBAAiB;EACtC,OAAO,KAAK,QAAQ,KAAK,SAAS,UAAU;GAC3C,MAAM,QAAQ,KAAK;GAGnB,IAAI,KAAK,aAAa,MAAM,UAAU,KAAK,GAAG,OAAOC,UAA6B,EAAE,SAAS,eAAe,CAAC;GAC7G,IAAI,KAAK,MAAM,IAAI,MAAM,OAAO,GAAG,OAAOA,UAA6B,EAAE,SAAS,kBAAkB,CAAC;GACrG,KAAK,MAAM,IAAI,MAAM,SAAS;IAC7B,KAAK,MAAM;IACX,OAAO,MAAM;IACb,UAAU,MAAM;IAChB,SAAS,MAAM;IACf,UAAU,MAAM;IAChB,QAAQ;IACR,cAAc;IACd,eAAe,MAAM;IACrB,aAAa,MAAM;IACnB,sBAAsB,MAAM;IAC5B,eAAe,KAAA;IACf,gBAAgB,KAAA;IAChB,OAAO;IACP,OAAO,KAAA;GACR,CAAC;GACD,OAAOA,UAA6B,EAAE,SAAS,WAAW,CAAC;EAC5D,CAAC;CACF;CAEA,MAAM,gBAAgB,SAA8B,SAAmE;EACtH,MAAM,OAAO,cAAc,SAAS,OAAO;EAC3C,MAAM,KAAK,UAAU,iBAAiB;EACtC,OAAO,KAAK,QAAQ,KAAK,cACxB,UAAU,CAAC,GAAG,KAAK,MAAM,OAAO,CAAC,GAAG,KAAK,OAAO,MAAM,CAAgC;CACxF;CAEA,MAAM,kBAAkB,OAA0D,SAA+C;EAChI,MAAM,OAAO,kBAAkB,OAAO,OAAO;EAC7C,MAAM,KAAK,UAAU,mBAAmB;EACxC,OAAO,KAAK,QAAQ,KAAK,SAAS,UAAU;GAC3C,MAAM,MAAM,KAAK,MAAM,IAAI,KAAK,OAAO;GACvC,IAAI,QAAQ,KAAA,KAAa,CAAC,MAAM,KAAK,KAAK,OAAO,OAAO,KAAK,OAAO,OAAO,KAAK,GAAG,OAAO;GAC1F,IAAI,SAAS;GACb,IAAI,gBAAgB,KAAK,OAAO;GAChC,IAAI,QAAQ,KAAA;GACZ,OAAO;EACR,CAAC;CACF;CAEA,MAAM,oBACL,OACA,SACmB;EACnB,MAAM,OAAO,mBAAmB,OAAO,OAAO;EAC9C,MAAM,KAAK,UAAU,qBAAqB;EAC1C,OAAO,KAAK,QAAQ,KAAK,SAAS,UAAU;GAC3C,MAAM,MAAM,KAAK,MAAM,IAAI,KAAK,OAAO;GACvC,IAAI,QAAQ,KAAA,KAAa,CAAC,MAAM,KAAK,KAAK,OAAO,OAAO,KAAK,OAAO,OAAO,KAAK,GAAG,OAAO;GAC1F,IAAI,gBAAgB;GACpB,IAAI,gBAAgB,KAAK;GACzB,IAAI,iBAAiB,KAAK;GAC1B,IAAI,QAAQ,KAAA;GACZ,OAAO;EACR,CAAC;CACF;CAEA,MAAM,oBACL,OACA,SACmB;EACnB,MAAM,OAAO,iBAAiB,OAAO,OAAO;EAC5C,MAAM,KAAK,UAAU,qBAAqB;EAC1C,OAAO,KAAK,QAAQ,KAAK,SAAS,UAAU;GAC3C,MAAM,MAAM,KAAK,MAAM,IAAI,KAAK,OAAO;GACvC,IAAI,QAAQ,KAAA,KAAa,CAAC,MAAM,KAAK,KAAK,OAAO,OAAO,KAAK,OAAO,OAAO,KAAK,GAAG,OAAO;GAC1F,IAAI,QAAQ;IAAE,GAAG,IAAI;IAAQ,aAAa,gBAAgB,KAAK,KAAK,OAAO,OAAO,KAAK,eAAe;GAAE;GACxG,OAAO;EACR,CAAC;CACF;CAEA,MAAM,oBACL,OACA,SACmB;EACnB,MAAM,OAAO,sBAAsB,OAAO,OAAO;EACjD,MAAM,KAAK,UAAU,qBAAqB;EAC1C,OAAO,KAAK,QAAQ,KAAK,SAAS,UAAU;GAC3C,MAAM,MAAM,KAAK,MAAM,IAAI,KAAK,OAAO;GACvC,IAAI,QAAQ,KAAA,KAAa,CAAC,MAAM,KAAK,KAAK,OAAO,OAAO,KAAK,OAAO,OAAO,KAAK,GAAG,OAAO;GAC1F,IAAI,SAAS;GACb,IAAI,iBAAiB,KAAK;GAC1B,IAAI,QAAQ,KAAA;GACZ,OAAO;EACR,CAAC;CACF;CAEA,MAAM,iBACL,OACA,SACgC;EAChC,MAAM,OAAO,mBAAmB,OAAO,OAAO;EAC9C,MAAM,KAAK,UAAU,kBAAkB;EACvC,OAAO,KAAK,QAAQ,KAAK,SAAS,UAAU;GAC3C,MAAM,QAAQ,KAAK,eAAe,KAAK,OAAO,KAAK,QAAQ,oBAAoB;IAAE,QAAQ;IAAe,SAAS,KAAK;GAAQ,CAAC;GAC/H,IAAI,UAAU,KAAA,GAAW,OAAO,eAAqC,KAAK;GAC1E,MAAM,MAAM,KAAK,MAAM,IAAI,KAAK,OAAO;GACvC,IAAI,QAAQ,KAAA,KAAa,CAAC,QAAQ,KAAK,KAAK,KAAK,GAAG,OAAO,eAAe,WAAW;GACrF,MAAM,UAAU,eAAe,KAAK,KAAK,SAAS,KAAK,SAAS,KAAK,CAAC;GACtE,IAAI,YAAY,KAAA,GAAW,OAAO,eAAe,OAAO;GACxD,MAAM,WAAW,mBAAmB,KAAK,KAAK,SAAS,KAAK;GAC5D,MAAM,SAASA,UAA8B;IAAE,SAAS;IAAM;GAAS,CAAC;GACxE,aAAa,KAAK,KAAK,OAAO;GAC9B,KAAK,UAAU,KAAK;IAAE,UAAU,IAAI;IAAU,SAAS,IAAI;IAAS,SAAS,IAAI;IAAK,QAAQ;GAAgC,CAAC;GAC/H,OAAO;EACR,CAAC;CACF;CAEA,MAAM,qBACL,OACA,SACwC;EACxC,MAAM,OAAO,sBAAsB,OAAO,OAAO;EACjD,MAAM,KAAK,UAAU,sBAAsB;EAC3C,OAAO,KAAK,QAAQ,KAAK,SAAS,UAAU;GAC3C,MAAM,QAAQ,KAAK,eAAe,KAAK,OAAO,KAAK,QAAQ,oBAAoB;IAAE,QAAQ;IAAqB,SAAS,KAAK;GAAQ,CAAC;GACrI,IAAI,UAAU,KAAA,GAAW,OAAO,eAA6C,KAAK;GAClF,MAAM,MAAM,KAAK,MAAM,IAAI,KAAK,OAAO;GACvC,IAAI,QAAQ,KAAA,KAAa,CAAC,QAAQ,KAAK,KAAK,KAAK,GAAG,OAAO,kBAAkB,WAAW;GACxF,MAAM,UAAU,kBAAkB,KAAK,KAAK,SAAS,KAAK,SAAS,KAAK,CAAC;GACzE,IAAI,YAAY,KAAA,GAAW,OAAO,kBAAkB,OAAO;GAC3D,MAAM,WAAW,sBAAsB,KAAK,KAAK,SAAS,KAAK;GAC/D,MAAM,SAASA,UAAsC;IAAE,SAAS;IAAM;GAAS,CAAC;GAChF,gBAAgB,KAAK,KAAK,OAAO;GACjC,KAAK,UAAU,KAAK;IAAE,UAAU,IAAI;IAAU,SAAS,IAAI;IAAS,SAAS,IAAI;IAAK,QAAQ;GAAgC,CAAC;GAC/H,OAAO;EACR,CAAC;CACF;CAEA,MAAM,cAAc,OAAoD,SAA+D;EACtI,MAAM,OAAO,cAAc,OAAO,OAAO;EACzC,MAAM,KAAK,UAAU,eAAe;EACpC,OAAO,KAAK,QAAQ,KAAK,cAAc;GACtC,MAAM,MAAM,KAAK,MAAM,IAAI,KAAK,OAAO;GACvC,OAAO,QAAQ,KAAA,KAAa,CAAC,QAAQ,KAAK,KAAK,KAAK,IAAI,OAAOA,UAA0B,OAAO,GAAG,CAAC;EACrG,CAAC;CACF;CAMA,MAAM,qBACL,QACA,QACA,SACqC;EACrC,MAAM,OAAO,qBAAqB,QAAQ,QAAQ,OAAO;EACzD,MAAM,KAAK,UAAU,sBAAsB;EAC3C,OAAO,KAAK,QAAQ,KAAK,SAAS,UAAU;GAC3C,MAAM,MAAM,KAAK,WAAW,KAAK,QAAQ,KAAK;GAC9C,IAAI,QAAQ,KAAA,GAAW,OAAO,cAAc,YAAY;GACxD,IAAI,CAAC,QAAQ,KAAK,IAAI,GAAG,MAAM,WAAW,mBAAmB,iBAAiB;GAC9E,IAAI,KAAK,aAAa,IAAI,UAAU,KAAK,GAAG,OAAO,cAAc,cAAc;GAC/E,MAAM,MAAM,UAAU,KAAK,gBAAgB,KAAK,OAAO;GACvD,IAAI,KAAK,SAAS,IAAI,GAAG,GAAG,OAAO,cAAc,iBAAiB;GAClE,IAAI,KAAK,SAAS,IAAI,KAAK,UAAU,GAAG,MAAM,WAAW,wBAAwB,mBAAmB;GACpG,KAAK,SAAS,IAAI,KAAK,YAAY;IAClC,KAAK,KAAK;IACV,gBAAgB,KAAK;IACrB,SAAS,KAAK;IACd,UAAU,KAAK;IACf,SAAS,KAAK;IACd,qBAAqB,KAAK;IAC1B,MAAM,KAAK;IACX,UAAU,IAAI;IACd,QAAQ;IACR,cAAc;IACd,eAAe,KAAK;IACpB,aAAa,KAAK;IAClB,sBAAsB,KAAK;IAC3B,aAAa,KAAA;IACb,gBAAgB,KAAA;IAChB,OAAO;IACP,OAAO,KAAA;GACR,CAAC;GACD,KAAK,SAAS,IAAI,KAAK;IAAE,MAAM;IAAU,gBAAgB,KAAK;IAAgB,SAAS,KAAK;IAAS,UAAU,KAAK;IAAU,SAAS,KAAK;IAAS,UAAU,IAAI;GAAS,CAAC;GAC7K,OAAO,cAAc,UAAU;EAChC,CAAC;CACF;CAEA,MAAM,sBACL,QACA,QACA,SACqC;EACrC,MAAM,OAAO,eAAe,QAAQ,QAAQ,OAAO;EACnD,MAAM,KAAK,UAAU,uBAAuB;EAC5C,OAAO,KAAK,QAAQ,KAAK,SAAS,UAAU;GAC3C,MAAM,MAAM,KAAK,WAAW,KAAK,QAAQ,KAAK;GAC9C,IAAI,QAAQ,KAAA,GAAW,OAAO,cAAc,YAAY;GACxD,IAAI,CAAC,QAAQ,KAAK,IAAI,GAAG,MAAM,WAAW,mBAAmB,iBAAiB;GAC9E,IAAI,KAAK,aAAa,IAAI,UAAU,KAAK,GAAG,OAAO,cAAc,cAAc;GAC/E,MAAM,MAAM,UAAU,KAAK,gBAAgB,KAAK,OAAO;GACvD,IAAI,KAAK,SAAS,IAAI,GAAG,GAAG,OAAO,cAAc,iBAAiB;GAClE,KAAK,SAAS,IAAI,KAAK;IAAE;IAAK,QAAQ,aAAa,IAAI;IAAG,UAAU,IAAI;GAAS,CAAC;GAClF,KAAK,SAAS,IAAI,KAAK;IAAE,MAAM;IAAU,gBAAgB,KAAK;IAAgB,SAAS,KAAK;IAAS,UAAU,KAAK;IAAU,SAAS,KAAK;IAAS,UAAU,IAAI;GAAS,CAAC;GAC7K,OAAO,cAAc,UAAU;EAChC,CAAC;CACF;;CAGA,WAAW,OAA8B,OAAqC;EAC7E,MAAM,MAAM,KAAK,MAAM,IAAI,MAAM,OAAO;EACxC,OAAO,QAAQ,KAAA,KAAa,MAAM,KAAK,MAAM,OAAO,MAAM,OAAO,KAAK,IAAI,MAAM,KAAA;CACjF;CAEA,MAAM,qBAAqB,SAA8B,SAAwE;EAChI,MAAM,OAAO,cAAc,SAAS,OAAO;EAC3C,MAAM,KAAK,UAAU,sBAAsB;EAC3C,OAAO,KAAK,QAAQ,KAAK,cACxB,UAAU,CAAC,GAAG,KAAK,SAAS,OAAO,CAAC,GAAG,KAAK,OAAO,SAAS,CAAqC;CACnG;CAEA,MAAM,yBACL,OACA,SACmB;EACnB,MAAM,OAAO,oBAAoB,OAAO,OAAO;EAC/C,MAAM,KAAK,UAAU,0BAA0B;EAC/C,OAAO,KAAK,QAAQ,KAAK,SAAS,UAAU;GAC3C,MAAM,SAAS,KAAK,SAAS,IAAI,KAAK,UAAU;GAChD,IAAI,WAAW,KAAA,KAAa,CAAC,MAAM,QAAQ,KAAK,OAAO,OAAO,KAAK,OAAO,OAAO,KAAK,GAAG,OAAO;GAChG,OAAO,QAAQ;IAAE,GAAG,OAAO;IAAQ,aAAa,gBAAgB,QAAQ,KAAK,OAAO,OAAO,KAAK,eAAe;GAAE;GACjH,OAAO;EACR,CAAC;CACF;CAEA,MAAM,mBACL,OACA,SACqC;EACrC,MAAM,OAAO,mBAAmB,OAAO,OAAO;EAC9C,MAAM,KAAK,UAAU,oBAAoB;EACzC,OAAO,KAAK,QAAQ,KAAK,cAAc,WAAW,KAAK,SAAS,IAAI,KAAK,UAAU,GAAG,IAAI,CAAC;CAC5F;CAEA,MAAM,cAAc,OAAgF,SAA+C;EAClJ,MAAM,OAAO,sBAAsB,OAAO,OAAO;EACjD,MAAM,KAAK,UAAU,eAAe;EACpC,OAAO,KAAK,QAAQ,KAAK,SAAS,UAAU;GAC3C,MAAM,SAAS,KAAK,SAAS,IAAI,KAAK,UAAU;GAChD,IAAI,WAAW,KAAA,KAAa,CAAC,MAAM,QAAQ,KAAK,OAAO,OAAO,KAAK,OAAO,OAAO,KAAK,GAAG,OAAO;GAChG,IAAI,KAAK,mBAAmB,OAAO,gBAAgB,MAAM,WAAW,mBAAmB,8BAA8B;GACrH,IAAI,KAAK,YAAY,OAAO,SAAS,MAAM,WAAW,mBAAmB,uBAAuB;GAChG,KAAK,UAAU,KAAK;IAAE,UAAU,OAAO;IAAU,SAAS,OAAO;IAAS,YAAY,KAAK;IAAY,QAAQ,KAAK;IAAQ,OAAO,KAAA;IAAW,eAAe,KAAA;GAAU,CAAC;GACxK,OAAO;EACR,CAAC;CACF;CAEA,MAAM,aAAa,OAA+E,SAAiE;EAClK,MAAM,OAAO,qBAAqB,OAAO,OAAO;EAEhD,MAAM,UAAU,MAAM,aAAa,iBAAiB;EACpD,MAAM,KAAK,UAAU,cAAc;EACnC,OAAO,KAAK,QAAQ,KAAK,SAAS,UAAU;GAC3C,MAAM,SAAS,KAAK,SAAS,IAAI,KAAK,UAAU;GAChD,IAAI,CAAC,SAAS,QAAQ,KAAK,QAAQ,KAAK,GAAG,OAAO,YAAY,KAAA,CAAS;GACvE,IAAI,KAAK,mBAAmB,OAAO,gBAAgB,MAAM,WAAW,mBAAmB,8BAA8B;GACrH,IAAI,KAAK,YAAY,OAAO,SAAS,MAAM,WAAW,mBAAmB,uBAAuB;GAChG,MAAM,MAAM,WAAW,KAAK,YAAY,KAAK,OAAO,KAAK;GACzD,IAAI,KAAK,OAAO,IAAI,GAAG,GAAG,OAAO,YAAY,KAAA,CAAS;GACtD,MAAM,QAAsB;IAC3B,UAAU,OAAO;IAAU,SAAS,OAAO;IAAS,YAAY,KAAK;IAAY,QAAQ,KAAK;IAC9F,OAAO,KAAK,OAAO;IAAO,eAAe,QAAQ;GAClD;GACA,KAAK,UAAU,KAAK,KAAK;GACzB,KAAK,OAAO,IAAI,KAAK,KAAK;GAC1B,OAAO,YAAY,QAAQ,OAAO;EACnC,CAAC;CACF;CAEA,MAAM,cACL,OACA,SACmB;EACnB,MAAM,OAAO,sBAAsB,OAAO,OAAO;EACjD,MAAM,SAAS,MAAM,mBAAmB,qBAAqB,KAAK,OAAO,CAAC;EAC1E,MAAM,KAAK,UAAU,eAAe;EACpC,OAAO,KAAK,QAAQ,KAAK,cAAc;GACtC,MAAM,MAAM,WAAW,KAAK,YAAY,KAAK,KAAK;GAClD,MAAM,QAAQ,KAAK,OAAO,IAAI,GAAG;GAGjC,IAAI,UAAU,KAAA,KAAa,CAAC,QAAQ,OAAO,KAAK,KAAK,KAAK,MAAM,kBAAkB,UAAU,KAAK,UAAU,IAAI,GAAG,GAAG,OAAO;GAC5H,KAAK,UAAU,IAAI,KAAK,KAAK,MAAM;GACnC,OAAO;EACR,CAAC;CACF;CAEA,MAAM,qBACL,OACA,SACmB;EACnB,MAAM,OAAO,eAAe,OAAO,OAAO;EAC1C,MAAM,KAAK,UAAU,sBAAsB;EAC3C,OAAO,KAAK,QAAQ,KAAK,SAAS,UAAU;GAC3C,MAAM,SAAS,KAAK,SAAS,IAAI,KAAK,UAAU;GAChD,IAAI,WAAW,KAAA,KAAa,CAAC,MAAM,QAAQ,KAAK,OAAO,OAAO,KAAK,OAAO,OAAO,KAAK,GAAG,OAAO;GAChG,gBAAgB,QAAQ,KAAK,UAAU;GACvC,OAAO;EACR,CAAC;CACF;CAEA,MAAM,qBACL,OACA,SACkB;EAClB,MAAM,OAAO,eAAe,OAAO,OAAO;EAC1C,MAAM,KAAK,UAAU,sBAAsB;EAC3C,OAAO,KAAK,QAAQ,KAAK,cAAc;GACtC,IAAI,YAAY;GAChB,KAAK,MAAM,UAAU,KAAK,SAAS,OAAO,GAAG;IAC5C,IAAI,OAAO,WAAW,aAAa,OAAO,mBAAmB,KAAK,kBAAkB,CAAC,QAAQ,QAAQ,KAAK,KAAK,GAAG;IAClH,IAAI,OAAO,uBAAuB,KAAK,gBAAgB;IACvD,OAAO,SAAS;IAChB,OAAO,cAAc;KAAE,SAAS;KAAa,QAAQ,KAAK;IAAO;IACjE,OAAO,QAAQ,KAAA;IACf,aAAa;GACd;GACA,OAAO;EACR,CAAC;CACF;CAEA,MAAM,sBACL,OACA,SACgC;EAChC,MAAM,OAAO,sBAAsB,OAAO,OAAO;EACjD,MAAM,KAAK,UAAU,uBAAuB;EAC5C,OAAO,KAAK,QAAQ,KAAK,SAAS,UAAU;GAC3C,MAAM,QAAQ,KAAK,eAAe,KAAK,OAAO,KAAK,QAAQ,oBAAoB;IAAE,QAAQ;IAAmB,YAAY,KAAK;GAAW,CAAC;GACzI,IAAI,UAAU,KAAA,GAAW,OAAO,eAAqC,KAAK;GAC1E,MAAM,SAAS,KAAK,SAAS,IAAI,KAAK,UAAU;GAChD,IAAI,WAAW,KAAA,KAAa,CAAC,QAAQ,QAAQ,KAAK,KAAK,GAAG,OAAO,eAAe,WAAW;GAC3F,MAAM,UAAU,eAAe,QAAQ,KAAK,SAAS,KAAK,SAAS,KAAK,CAAC;GACzE,IAAI,YAAY,KAAA,GAAW,OAAO,eAAe,OAAO;GACxD,MAAM,WAAW,sBAAsB,QAAQ,KAAK,SAAS,KAAK;GAClE,MAAM,SAASA,UAA8B;IAAE,SAAS;IAAM;GAAS,CAAC;GACxE,aAAa,QAAQ,KAAK,OAAO;GACjC,KAAK,UAAU,KAAK;IAAE,UAAU,OAAO;IAAU,SAAS,OAAO;IAAS,SAAS,OAAO;IAAS,QAAQ;GAAgC,CAAC;GAC5I,OAAO;EACR,CAAC;CACF;CAEA,MAAM,mBAAmB,OAAuD,SAAoE;EACnJ,MAAM,OAAO,iBAAiB,OAAO,OAAO;EAC5C,MAAM,KAAK,UAAU,oBAAoB;EACzC,OAAO,KAAK,QAAQ,KAAK,cAAc;GACtC,MAAM,SAAS,KAAK,SAAS,IAAI,KAAK,UAAU;GAChD,OAAO,WAAW,KAAA,KAAa,CAAC,QAAQ,QAAQ,KAAK,KAAK,IAAI,OAAOA,UAA+B,UAAU,MAAM,CAAC;EACtH,CAAC;CACF;CAEA,MAAM,qBACL,OACA,SACqD;EACrD,MAAM,OAAO,iBAAiB,OAAO,OAAO;EAC5C,MAAM,KAAK,UAAU,sBAAsB;EAC3C,OAAO,KAAK,QAAQ,KAAK,cAAcA,UACtC,KAAK,UACH,QAAQ,SAAS,KAAK,eAAe,KAAK,cAAc,QAAQ,MAAM,KAAK,KAAK,CAAC,CAAC,CAClF,KAAK,SAAS,gBACd,KAAK,QACL,KAAK,OACL,KAAK,UAAU,KAAA,IAAY,KAAA,IAAY,KAAK,UAAU,IAAI,WAAW,KAAK,YAAY,KAAK,KAAK,CAAC,CAClG,CAAC,CACH,CAAC;CACF;CAEA,MAAM,oBAAoB,OAAoD,SAAyE;EACtJ,MAAM,OAAO,cAAc,OAAO,OAAO;EACzC,MAAM,KAAK,UAAU,qBAAqB;EAC1C,OAAO,KAAK,QAAQ,KAAK,cAAcA,UACtC,KAAK,UAAU,QAAQ,SAAS,KAAK,YAAY,KAAK,WAAW,QAAQ,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,KAAK,MAAM,CACtH,CAAC;CACF;CAEA,MAAM,8BACL,OACA,SAC6C;EAC7C,MAAM,OAAO,2BAA2B,OAAO,OAAO;EACtD,MAAM,KAAK,UAAU,+BAA+B;EACpD,OAAO,KAAK,QAAQ,KAAK,cAAcA,UACtC,KAAK,UACH,QAAQ,SAAS,QAAQ,MAAM,KAAK,KAAK,KAAK,KAAK,OAAO,0BAA0B,KAAK,kBAAkB,CAAC,CAC5G,KAAK,SAAS,KAAK,MAAM,CAC5B,CAAC;CACF;CAEA,MAAM,cACL,OACA,SACmC;EACnC,MAAM,OAAO,kBAAkB,OAAO,OAAO;EAC7C,MAAM,KAAK,UAAU,eAAe;EACpC,OAAO,KAAK,QAAQ,KAAK,cAAc;GACtC,MAAM,SAAS,KAAK,SAAS,IAAI,UAAU,KAAK,gBAAgB,KAAK,OAAO,CAAC;GAC7E,IAAI,WAAW,KAAA,KAAa,CAAC,QAAQ,QAAQ,KAAK,KAAK,GAAG,OAAO;GACjE,OAAOA,UAA0B,aAAa,QAAQ,KAAK,UAAU,CAAC;EACvE,CAAC;CACF;CAEA,MAAM,oBAAoB,OAAmC,SAA0D;EACtH,MAAM,OAAO,cAAc,OAAO,OAAO;EACzC,MAAM,KAAK,UAAU,qBAAqB;EAC1C,OAAO,KAAK,QAAQ,KAAK,SAAS,UAAU;GAC3C,MAAM,WAAW,KAAK,SAAS,KAAK;GACpC,MAAM,SAAS,MAAM,QAAQ;GAC7B,MAAM,aAA2F,CAAC;GAClG,KAAK,MAAM,OAAO,KAAK,MAAM,OAAO,GACnC,IAAI,IAAI,WAAW,YAAY,aAAa,SAAS,IAAI,MAAM,GAAG,WAAW,KAAK;IAAE,UAAU,IAAI;IAAU,MAAM;IAAG,KAAK,IAAI;GAAI,CAAC;GAEpI,KAAK,MAAM,UAAU,KAAK,SAAS,OAAO,GACzC,IAAI,OAAO,WAAW,UAAU,WAAW,KAAK;IAAE,UAAU,OAAO;IAAU,MAAM;IAAG,KAAK,OAAO;GAAI,CAAC;GAExG,KAAK,MAAM,UAAU,KAAK,SAAS,OAAO,GACzC,IAAI,OAAO,WAAW,YAAY,gBAAgB,SAAS,OAAO,MAAM,GAAG,WAAW,KAAK;IAAE,UAAU,OAAO;IAAU,MAAM;IAAG,KAAK,OAAO;GAAI,CAAC;GAEnJ,WAAW,MAAM,MAAM,UAAU,KAAK,WAAW,MAAM,YAAY,KAAK,OAAO,MAAM,QAAQC,cAAY,KAAK,KAAK,MAAM,GAAG,CAAC;GAC7H,MAAM,OAAO,WAAW,SAAS,KAAK,QAAQ,WAAW,SAAS,KAAK;GACvE,MAAM,UAAU;IAAE,YAAY;IAAG,iBAAiB;IAAG,kBAAkB;GAAE;GACzE,KAAK,IAAI,QAAQ,GAAG,QAAQ,MAAM,SAAS,GAAG;IAC7C,MAAM,OAAO,WAAW,MAAM,CAAE;IAChC,IAAI,SAAS,GAAG,QAAQ,cAAc;SACjC,IAAI,SAAS,GAAG,QAAQ,oBAAoB;SAC5C,QAAQ,mBAAmB;GACjC;GACA,MAAM,SAASD,UAA4B;IAAE;IAAQ;IAAS,MAAM,WAAW,SAAS;GAAK,CAAC;GAI9F,KAAK,mBAAmB;GACxB,KAAK,IAAI,QAAQ,GAAG,QAAQ,MAAM,SAAS,GAAG;IAC7C,MAAM,YAAY,WAAW;IAC7B,IAAI,UAAU,SAAS,GACtB,KAAK,MAAM,OAAO,UAAU,GAAG;SACzB,IAAI,UAAU,SAAS,GAAG;KAChC,KAAK,SAAS,OAAO,UAAU,GAAG;KAClC,KAAK,SAAS,OAAO,UAAU,GAAG;IACnC,OAAO;KACN,MAAM,SAAS,KAAK,SAAS,IAAI,UAAU,GAAG;KAC9C,KAAK,SAAS,OAAO,UAAU,GAAG;KAClC,KAAK,SAAS,OAAO,UAAU,OAAO,gBAAgB,OAAO,OAAO,CAAC;IACtE;GACD;GACA,OAAO;EACR,CAAC;CACF;AACD;;;;;;;AAYA,SAAS,UAA4B,SAAc,OAAmB,QAAsE;CAC3I,MAAM,YAAY,QAAQ,QAAQ,WACjC,OAAO,WAAW,aAClB,OAAO,iBAAiB,MAAM,UAC7B,OAAO,UAAU,KAAA,KAAa,OAAO,MAAM,eAAe,MAAM,MAAM;CACxE,UAAU,MAAM,MAAM,UAAU,KAAK,gBAAgB,MAAM,iBAAiB,KAAK,cAAc,MAAM,eAAeC,cAAY,KAAK,KAAK,MAAM,GAAG,CAAC;CAIpJ,MAAM,OAHS,UAAU,MAAM,GAAG,MAAM,KAGtB,CAAC,CAAC,KAAK,YAAY;EACpC;EACA,OAAO;GAAE,OAAO,MAAM;GAAU,OAAO,OAAO,QAAQ;GAAG,aAAa,MAAM,QAAQ,MAAM;EAAgB;CAC3G,EAAE;CACF,MAAM,MAAM,KAAK,KAAK,EAAE,QAAQ,YAAYD,UAAgB,OAAO,QAAQ,KAAK,CAAC,CAAC;CAClF,KAAK,MAAM,EAAE,QAAQ,WAAW,MAAM;EACrC,OAAO,QAAQ,MAAM;EACrB,OAAO,QAAQ;CAChB;CACA,OAAO,WAAW,GAAG;AACtB;;;AC1tBA,MAAM,UAAU,OAAO,OAAO,CAAC,IAAI,CAAU;;AAG7C,SAAgB,QAAW,OAAkB;CAC5C,OAAO,SAAY,KAAK;AACzB;AAEA,SAAS,MAAS,MAAkB;CACnC,OAAO,MAAM,YAAY,WAAW,iBAAiB,OAAO,CAAC;AAC9D;AAEA,SAAS,WAAW,MAAiD;CACpE,OAAO;EACN,UAAU,WAAW,MAAM,YAAY,gBAAgB;EACvD,SAAS,WAAW,MAAM,WAAW,eAAe;EACpD,gBAAgB,WAAW,MAAM,kBAAkB,sBAAsB;CAC1E;AACD;AAEA,SAAS,kBAAkB,MAA4E;CACtG,MAAM,gBAAgB,aAAa,MAAM,iBAAiB,qBAAqB;CAC/E,OAAO;EACN,gBAAgB,KAAK,eAAe,kBAAkB,oCAAoC;EAC1F,iBAAiB,OAA+B,eAAe,mBAAmB,SAAS,qCAAqC;EAChI,WAAW,KAAK,eAAe,aAAa,+BAA+B;CAC5E;AACD;AAMA,SAAgB,oBAAoB,OAAgB,SAAkB;CACrE,OAAO,YAAY;EAClB,MAAM,OAAO,eAAe,OAAO,OAAO;EAC1C,OAAO;GACN,QAAQ,gBAAgB,OAAO;GAC/B,UAAU,WAAW,MAAM,YAAY,gBAAgB;GACvD,SAAS,WAAW,MAAM,WAAW,eAAe;GACpD,cAAc,QAAQ,MAAM,cAAc,kBAAkB;EAC7D;CACD,CAAC;AACF;;AAGA,SAAgB,eAAe,OAAgB,SAAkB;CAChE,OAAO,aAAa;EAAE,QAAQ,gBAAgB,OAAO;EAAG,QAAQ,WAAW,eAAe,OAAO,OAAO,CAAC;CAAE,EAAE;AAC9G;AAEA,SAAgB,eAAe,OAAgB,SAAkB;CAChE,OAAO,YAAY;EAClB,MAAM,OAAO,eAAe,OAAO,OAAO;EAC1C,OAAO;GACN,QAAQ,gBAAgB,OAAO;GAC/B,QAAQ,WAAW,IAAI;GACvB,UAAU,SAAS,MAAM,qBAAqB,yBAAyB;GACvE,eAAe,kBAAkB,IAAI;EACtC;CACD,CAAC;AACF;AAEA,SAAgB,uBAAuB,OAAgB,SAAkB;CACxE,OAAO,YAAY;EAClB,MAAM,OAAO,eAAe,OAAO,OAAO;EAC1C,OAAO;GACN,QAAQ,gBAAgB,OAAO;GAC/B,QAAQ,WAAW,IAAI;GACvB,kBAAkB,oBAAoB,MAAM,oBAAoB,0BAA0B,CAAC;GAC3F,UAAU,SAAS,MAAM,qBAAqB,yBAAyB;EACxE;CACD,CAAC;AACF;AAEA,SAAgB,qBAAqB,OAAgB,SAAkB;CACtE,OAAO,YAAY;EAClB,MAAM,OAAO,eAAe,OAAO,OAAO;EAC1C,OAAO;GAAE,QAAQ,gBAAgB,OAAO;GAAG,QAAQ,WAAW,IAAI;GAAG,kBAAkB,oBAAoB,MAAM,oBAAoB,0BAA0B,CAAC;EAAE;CACnK,CAAC;AACF;AAEA,SAAgB,6BAA6B,OAAgB,SAAkB;CAC9E,OAAO,YAAY;EAClB,MAAM,OAAO,eAAe,OAAO,OAAO;EAC1C,OAAO;GACN,QAAQ,gBAAgB,OAAO;GAC/B,QAAQ,WAAW,IAAI;GACvB,iBAAiB,oBAAoB,MAAM,mBAAmB,yBAAyB,CAAC;GACxF,eAAe,kBAAkB,IAAI;EACtC;CACD,CAAC;AACF;AASA,MAAa,SAAuB,WAAY,WAAW,WAAW,WAAW,KAAA;AACjF,MAAa,UAAwB,WAAY,WAAW,WAAW,WAAW,KAAA;AAClF,MAAa,eAA6B;AAI1C,SAAgB,qBAAqB,MAAoC;CACxE,QAAQ,YAAY;EACnB,MAAM,SAAS,KAAK,QAAQ,MAAM;EAClC,OAAO,WAAW,KAAA,IAAY,KAAA,IAAY;GAAE;GAAQ,UAAU,QAAQ;EAAkB;CACzF;AACD;;;;;;;AAQA,SAAgB,iBACf,SACA,kBACA,OACA,QAC8F;CAC9F,IAAI,YAAY,KAAA,GAAW,OAAO,EAAE,SAASE,UAAQ,WAAW,EAAE;CAClE,IAAI,QAAQ,WAAW,WAAW,OAAO,EAAE,SAASA,UAAQ,WAAW,QAAQ,QAAQ,EAAE;CACzF,IAAI,qBAAqB,KAAA,KAAa,qBAAqB,QAAQ,UAAU,OAAO,EAAE,SAASA,UAAQ,qBAAqB,QAAQ,QAAQ,EAAE;CAC9I,MAAM,OAAO,OAAO,OAAO;CAC3B,IAAI,SAAS,KAAA,GAAW,OAAO,EAAE,SAASA,UAAQ,sBAAsB,QAAQ,QAAQ,EAAE;CAC1F,OAAO,EACN,UAAU;EACT,UAAU,QAAQ,WAAW;EAC7B,QAAQ,KAAK;EACb,mBAAmB,KAAK;EACxB,iBAAiBC,UAAQ,OAAO,QAAQ,eAAe;CACxD,EACD;AACD;AAEA,SAAgBD,UAAQ,SAA0C,iBAA0D;CAC3H,OAAO,QAAwC;EAAE,SAAS;EAAO;EAAS;CAAgB,CAAC;AAC5F;;AAOA,SAAgB,YAAY,QAAgB,UAAyB,qBAAiD;CACrH,OAAO;EACN,gBAAgB,OAAO;EACvB,UAAU,SAAS;EACnB,UAAU,OAAO;EACjB,SAAS,OAAO;EAChB,QAAQ,SAAS;EACjB,mBAAmB,SAAS;EAC5B,eAAe,MAAM,SAAS,eAAe;EAC7C,gBAAgB,wBAAwB,KAAA,IAAY,OAAO,MAAM,mBAAmB;CACrF;AACD;;;;;;;;;;AAWA,SAAgB,oBAAoB,WAA6C;CAChF,MAAM,UAAU,UAAU,UAAU,SAAS;CAC7C,KAAK,IAAI,QAAQ,UAAU,SAAS,GAAG,SAAS,GAAG,SAAS,GAC3D,IAAI,UAAU,MAAM,CAAE,WAAW,QAAQ,QAAQ,OAAO,UAAU,MAAM,CAAE,WAAW;CAEtF,OAAO;AACR;AAEA,SAAgB,iBAAiB,QAAgB,SAAiB,eAAgF;CACjJ,OAAO,QAAsC;EAC5C,gBAAgB,OAAO;EACvB,UAAU,OAAO;EACjB,SAAS,OAAO;EAChB;EACA,GAAG;CACJ,CAAC;AACF;;AAGA,SAAgB,YAAY,MAAc,OAAuB;CAChE,OAAO,OAAO,QAAQ,KAAK,OAAO,QAAQ,IAAI;AAC/C;;;;ACpJA,SAAS,gBAAgB,UAAkB,SAAiB,gBAAgC;CAC3F,OAAO,aAAa,UAAU,SAAS,cAAc;AACtD;AAEA,SAAS,aAA4B;CACpC,OAAO,QAAQ,QAAQ;AACxB;AAEA,SAAS,WAAW,cAAiC,OAAuB;CAC3E,OAAO,YAAY,cAAc,aAAa,UAAU,QAAS,aAAa,UAAU,QAAQ,EAAE,EAAE,eAAe;AACpH;;;;;;;;AASA,IAAa,iCAAb,MAA2G;CAC1G;CACA;CACA,iCAA0B,IAAI,IAA+B;CAE7D,YAAY,SAAgD;EAC3D,KAAK,SAAS,YAAY;GACzB,IAAI,YAAY,QAAQ,OAAO,YAAY,UAAU,MAAM,WAAW,iBAAiB,OAAO;GAC9F,OAAO,aAAa,QAAQ,KAAK;EAClC,SAAS,WAAW,iBAAiB,OAAO,CAAC;EAC7C,KAAK,oBAAoB,eAAe,SAAS,kBAAkB;CACpE;;CAGA,MAAM,UAAU,WAAkC;EACjD,MAAM,OAAO,KAAK;EAClB,IAAI,SAAS,KAAA,GAAW,OAAO,WAAW;EAC1C,IAAI;GACH,MAAM,KAAK,SAAS;EACrB,QAAQ;GACP,MAAM,WAAW,gBAAgB,kBAAkB;EACpD;CACD;CAEA,QAAW,QAAoB,MAA+B;EAC7D,OAAO,YAAY;GAClB,MAAM,QAAQE,YAAU,KAAK,MAAM;GACnC,iBAAiB,QAAQ,KAAK;GAC9B,OAAO,KAAK,KAAK;EAClB,SAAS,WAAW,gBAAgB,OAAO,CAAC;CAC7C;CAEA,MAAM,QAA+C;EACpD,OAAO,KAAK,eAAe,IAAI,gBAAgB,OAAO,UAAU,OAAO,SAAS,OAAO,cAAc,CAAC;CACvG;CAMA,MAAM,yBACL,OACA,SACiD;EACjD,MAAM,OAAO,oBAAoB,OAAO,OAAO;EAC/C,MAAM,KAAK,UAAU,0BAA0B;EAC/C,OAAO,KAAK,QAAQ,KAAK,cAAc;GACtC,MAAM,QAAkB,CAAC;GACzB,MAAM,gBAAgB,CAAC,GAAG,KAAK,eAAe,OAAO,CAAC,CAAC,CACrD,QAAQ,iBAAiB,aAAa,aAAa,KAAK,YAAY,aAAa,YAAY,KAAK,OAAO,CAAC,CAC1G,MAAM,MAAM,UAAU,YAAY,KAAK,gBAAgB,MAAM,cAAc,CAAC;GAC9E,KAAK,MAAM,gBAAgB,eAE1B,KAAK,IAAI,QAAQ,aAAa,UAAU,SAAS,GAAG,SAAS,GAAG,SAAS,GACxE,IAAI,aAAa,UAAU,MAAM,CAAE,mBAAmB,KAAK,cAAc;IACxE,MAAM,OAAO,aAAa,UAAU,QAAQ;IAC5C,IAAI,SAAS,KAAA,KAAa,KAAK,eAAe,KAAK,iBAAiB,MAAM,KAAK,WAAW,cAAc,KAAK,CAAC;IAC9G;GACD;GAGF,OAAO,QAA+C,KAAK;EAC5D,CAAC;CACF;CAEA,MAAM,iBACL,OACA,SAC8C;EAC9C,MAAM,OAAO,eAAe,OAAO,OAAO;EAC1C,MAAM,KAAK,UAAU,kBAAkB;EACvC,OAAO,KAAK,QAAQ,KAAK,cAAc;GACtC,MAAM,eAAe,KAAK,MAAM,KAAK,MAAM;GAC3C,IAAI,iBAAiB,KAAA,GAAW,OAAO;GACvC,OAAO,QAAqC;IAC3C,gBAAgB,aAAa;IAC7B,UAAU,aAAa;IACvB,SAAS,aAAa;IACtB,QAAQ,aAAa,UAAU,aAAa,UAAU,SAAS,EAAE,CAAE;IACnE,qBAAqB,oBAAoB,aAAa,SAAS;IAC/D,eAAe,aAAa,eAAe,aAAa,eAAe,SAAS;GACjF,CAAC;EACF,CAAC;CACF;CAEA,MAAM,uBACL,OACA,SACiD;EACjD,MAAM,OAAO,eAAe,OAAO,OAAO;EAC1C,MAAM,KAAK,UAAU,wBAAwB;EAC7C,OAAO,KAAK,QAAQ,KAAK,cAAc;GACtC,MAAM,eAAe,KAAK,MAAM,KAAK,MAAM;GAC3C,IAAI,iBAAiB,KAAA,GAAW,OAAO,QAA+C,CAAC,CAAC;GACxF,OAAO,QAA+C,aAAa,UAAU,KAAK,WAAW,UAAU,WAAW,cAAc,KAAK,CAAC,CAAC;EACxI,CAAC;CACF;CAMA,MAAM,mBACL,OAKA,SAC0C;EAC1C,MAAM,OAAO,eAAe,OAAO,OAAO;EAC1C,MAAM,KAAK,UAAU,oBAAoB;EACzC,OAAO,KAAK,QAAQ,KAAK,SAAS,UAAU;GAC3C,IAAI,KAAK,MAAM,KAAK,MAAM,MAAM,KAAA,GAAW,OAAOC,UAAQ,gBAAgB;GAC1E,MAAM,EAAE,UAAU,SAAS,mBAAmB,KAAK;GACnD,MAAM,gBAAgB,iBAAiB,KAAK,QAAQ,GAAG,KAAK,aAAa;GACzE,MAAM,eAAkC;IACvC;IACA;IACA;IACA,WAAW,CAAC;KAAE,UAAU;KAAG,QAAQ;KAAU,mBAAmB,KAAK;KAAU,iBAAiB;IAAM,CAAC;IACvG,gBAAgB,CAAC,aAAa;GAC/B;GACA,MAAM,SAAS,QAAwC;IAAE,SAAS;IAAM,UAAU,WAAW,cAAc,CAAC;IAAG;GAAc,CAAC;GAC9H,KAAK,eAAe,IAAI,gBAAgB,UAAU,SAAS,cAAc,GAAG,YAAY;GACxF,OAAO;EACR,CAAC;CACF;CAEA,MAAM,wBACL,OACA,SAC0C;EAC1C,MAAM,OAAO,uBAAuB,OAAO,OAAO;EAClD,MAAM,KAAK,UAAU,yBAAyB;EAC9C,OAAO,KAAK,QAAQ,KAAK,SAAS,UACjC,KAAK,YAAY,KAAK,QAAQ,KAAK,kBAAkB,QAAQ,aAAa;GAAE,QAAQ,QAAQ;GAAQ,UAAU,KAAK;EAAS,EAAE,CAAC;CACjI;CAEA,MAAM,kBAAkB,OAA2C,SAAsE;EACxI,OAAO,KAAK,cAAc,qBAAqB,OAAO,SAAS,KAAK;CACrE;CAEA,MAAM,mBAAmB,OAA2C,SAAsE;EACzI,OAAO,KAAK,cAAc,sBAAsB,OAAO,SAAS,MAAM;CACvE;CAEA,MAAM,mBAAmB,OAA2C,SAAsE;EACzI,OAAO,KAAK,cAAc,sBAAsB,OAAO,SAAS,MAAM;CACvE;CAEA,MAAM,6BACL,OACA,SAC2C;EAC3C,MAAM,OAAO,6BAA6B,OAAO,OAAO;EACxD,MAAM,KAAK,UAAU,8BAA8B;EACnD,OAAO,KAAK,QAAQ,KAAK,cAAc;GACtC,MAAM,eAAe,KAAK,MAAM,KAAK,MAAM;GAC3C,IAAI,iBAAiB,KAAA,GAAW,OAAO,QAAyC;IAAE,SAAS;IAAO,SAAS;GAAY,CAAC;GACxH,IAAI,aAAa,UAAU,aAAa,UAAU,SAAS,EAAE,CAAE,WAAW,WACzE,OAAO,QAAyC;IAAE,SAAS;IAAO,SAAS;GAAU,CAAC;GAEvF,MAAM,UAAU,aAAa,eAAe,aAAa,eAAe,SAAS;GACjF,IAAI,KAAK,oBAAoB,KAAA,KAAa,KAAK,oBAAoB,QAAQ,SAC1E,OAAO,QAAyC;IAAE,SAAS;IAAO,SAAS;IAAoB,gBAAgB,QAAQ;GAAQ,CAAC;GAEjI,MAAM,gBAAgB,iBAAiB,cAAc,QAAQ,UAAU,GAAG,KAAK,aAAa;GAC5F,MAAM,SAAS,QAAyC;IAAE,SAAS;IAAM;GAAc,CAAC;GACxF,aAAa,eAAe,KAAK,aAAa;GAC9C,OAAO;EACR,CAAC;CACF;CAEA,MAAM,cACL,WACA,OACA,SACA,MAC0C;EAC1C,MAAM,OAAO,qBAAqB,OAAO,OAAO;EAChD,MAAM,KAAK,UAAU,SAAS;EAC9B,OAAO,KAAK,QAAQ,KAAK,SAAS,UAAU,KAAK,YAAY,KAAK,QAAQ,KAAK,kBAAkB,OAAO,qBAAqB,IAAI,CAAC,CAAC;CACpI;;;;;CAMA,YAAY,QAAgB,kBAAsC,OAAe,QAAwD;EACxI,MAAM,eAAe,KAAK,MAAM,MAAM;EACtC,MAAM,WAAW,iBAAiB,cAAc,UAAU,aAAa,UAAU,SAAS,IAAI,kBAAkB,OAAO,MAAM;EAC7H,IAAI,aAAa,UAAU,OAAO,SAAS;EAC3C,MAAM,UAAU;EAGhB,MAAM,SAAS,QAAwC;GACtD,SAAS;GACT,UAAU,YAAY,SAAS,SAAS,UAAU,KAAA,CAAS;GAC3D,eAAe,QAAQ,eAAe,QAAQ,eAAe,SAAS;EACvE,CAAC;EACD,QAAQ,UAAU,KAAK,SAAS,QAAQ;EACxC,OAAO;CACR;AACD;;;;;;;;;ACrQA,MAAM,cAAc;AAEpB,MAAa,yBAAyB;;AAGtC,SAAgB,iBAAiB,SAA0B;CAC1D,OAAO,YAAY;EAClB,MAAM,SAAU,QAAiC;EACjD,IAAI,WAAW,KAAA,GAAW,OAAO,IAAI,uBAAuB;EAC5D,IAAI,OAAO,WAAW,YAAY,CAAC,QAAQ,aAAa,MAAM,GAAG,MAAM,WAAW,iBAAiB,QAAQ;EAC3G,OAAO,IAAI,OAAO;CACnB,SAAS,WAAW,iBAAiB,QAAQ,CAAC;AAC/C;;AAGA,SAAgB,eAAe,SAAuC;CACrE,OAAO,YAAY;EAClB,MAAM,OAAQ,QAA+B;EAC7C,IAAI,SAAS,QAAQ,OAAO,SAAS,UAAU,MAAM,WAAW,iBAAiB,MAAM;EACvF,MAAM,EAAE,OAAO,YAAY;EAC3B,IAAI,OAAO,UAAU,cAAc,OAAO,YAAY,YAAY,MAAM,WAAW,iBAAiB,MAAM;EAC1G,OAAO;CACR,SAAS,WAAW,iBAAiB,MAAM,CAAC;AAC7C;;;;;;AAOA,eAAsB,UAAa,KAAmC;CACrE,IAAI;EACH,OAAO,MAAM,IAAI;CAClB,SAAS,QAAQ;EAChB,OAAO,YAAe;GACrB,MAAM;EACP,SAAS,WAAW,gBAAgB,OAAO,CAAC;CAC7C;AACD;;;;;;;;;AAgBA,eAAsB,cACrB,MACA,KACa;CACb,MAAM,aAAa,MAAM,KAAK,QAAQ;CACtC,IAAI,UAAU;CACd,IAAI,YAAY;CAChB,IAAI;EACH,MAAM,WAAW,MAAM,sCAAsC;EAC7D,MAAM,SAAS,MAAM,IAAI,YAAY,EAAE,eAAe;GAAE,YAAY;EAAM,EAAE,CAAC;EAC7E,MAAM,WAAW,MAAM,YAAY,aAAa,QAAQ;EACxD,OAAO;CACR,SAAS,OAAO;EACf,IAAI;GACH,MAAM,WAAW,MAAM,UAAU;EAClC,QAAQ;GACP,UAAU;EACX;EACA,MAAM;CACP,UAAU;EACT,WAAW,QAAQ,OAAO;CAC3B;AACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6BA,SAAgB,SACf,MACA,OACA,QACA,MACA,MACa;CACb,OAAO,gBAAgB,cAAc,MAAM,OAAO,IAAI,YAAY;EACjE,MAAM,SAAS,MAAM,KAAK,EAAE;EAC5B,MAAM,QAAQC,YAAU,KAAK;EAC7B,iBAAiB,QAAQ,KAAK;EAC9B,MAAM,SAAS,MAAM,KAAK,IAAI,OAAO,QAAQ,OAAO;EACpD,iBAAiB,QAAQA,YAAU,KAAK,CAAC;EACzC,OAAO;CACR,CAAC,CAAC;AACH;;AAGA,SAAgB,QACf,MACA,OACA,QACA,MACa;CACb,OAAO,UAAU,YAAY;EAC5B,MAAM,QAAQA,YAAU,KAAK;EAC7B,iBAAiB,QAAQ,KAAK;EAC9B,OAAO,KAAK,MAAM,KAAK;CACxB,CAAC;AACF;;AAGA,eAAsB,UAAU,MAAgD,OAA8B;CAC7G,IAAI,SAAS,KAAA,GAAW;CACxB,IAAI;EACH,MAAM,KAAK;CACZ,QAAQ;EACP,MAAM,WAAW,gBAAgB,KAAK;CACvC;AACD;;;;;;;;;;;AAwBA,eAAsB,uBACrB,MACA,QACA,WACA,YACgB;CAChB,MAAM,UAAU,CAAC,GAAG,UAAU,CAAC,CAAC,MAAM,MAAM,UAAU,KAAK,UAAU,MAAM,OAAO;CAClF,MAAM,YAAY,MAAM,QAAQ,IAAI,QAAQ,KAAK,cAAc,UAAU,UAAU,KAAK,qBAAqB,CAAC,CAAC;CAC/G,MAAM,gBAAgB,cAAc,MAAM,OAAO,OAAO;EACvD,MAAM,GAAG,MAAM,8CAA8C,CAAC,6CAA6C,QAAQ,CAAC;EACpH,MAAM,GAAG,MAAM,+BAA+B,QAAQ;EACtD,MAAM,GAAG,MAAM,8BAA8B,OAAO;;;;;;;IAOlD;EACF,KAAK,IAAI,QAAQ,GAAG,QAAQ,QAAQ,QAAQ,SAAS,GAAG;GACvD,MAAM,YAAY,QAAQ;GAC1B,MAAM,WAAW,UAAU;GAK3B,MAAM,OAAM,MAJW,GAAG,MACzB,wBAAwB,OAAO,mEAC/B,CAAC,WAAW,UAAU,OAAO,CAC9B,EAAA,CACqB,KAAK;GAC1B,IAAI,QAAQ,KAAA,GAAW;IACtB,IAAI,IAAI,aAAa,UAAU,MAAM,WAAW,gBAAgB,uBAAuB;IACvF;GACD;GACA,MAAM,GAAG,MAAM,UAAU,IAAI,WAAW,cAAc,MAAM,CAAC;GAC7D,MAAM,GAAG,MACR,eAAe,OAAO,0FACtB;IAAC;IAAW,UAAU;IAAS,UAAU;IAAM;GAAQ,CACxD;EACD;CACD,CAAC,CAAC;AACH;AAMA,MAAM,YAAY,KAAK;AACvB,MAAM,sBAAsB,OAAO;AACnC,MAAM,oBAAoB;;;;;;;AAQ1B,SAAgB,aAAa,OAAuB;CACnD,IAAI,MAAM;CACV,KAAK,IAAI,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS,GAAG,OAAO,MAAM,WAAW,KAAK,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,SAAS,GAAG,GAAG;CACjH,OAAO;AACR;;AAGA,SAAgB,MAAM,OAAgB,OAAuB;CAC5D,MAAM,SAAS,OAAO,UAAU,WAAW,QAAQ,OAAO,UAAU,WAAW,kBAAkB,KAAK,IAAI;CAC1G,IAAI,CAAC,oBAAoB,MAAM,GAAG,MAAM,WAAW,gBAAgB,KAAK;CACxE,OAAO;AACR;AAEA,SAAgB,cAAc,OAAgB,OAAmC;CAChF,OAAO,UAAU,QAAQ,UAAU,KAAA,IAAY,KAAA,IAAY,MAAM,OAAO,KAAK;AAC9E;AAEA,SAAgB,OAAO,OAAgB,OAAuB;CAC7D,IAAI,OAAO,UAAU,UAAU,MAAM,WAAW,gBAAgB,KAAK;CACrE,OAAO;AACR;AAEA,SAAgB,eAAe,OAAgB,OAAmC;CACjF,OAAO,UAAU,QAAQ,UAAU,KAAA,IAAY,KAAA,IAAY,OAAO,OAAO,KAAK;AAC/E;;;;;;;;AASA,SAAgB,OAAO,OAAgB,OAAwB;CAC9D,MAAM,OAAO,OAAO,OAAO,KAAK;CAChC,IAAI;EACH,OAAO,UAAU,IAAI;CACtB,QAAQ;EACP,MAAM,WAAW,gBAAgB,KAAK;CACvC;AACD;;;AClFA,SAAS,SAAS,QAAwB;CACzC,OAAO;EACN,SAAS,GAAG,OAAO;EACnB,MAAM,GAAG,OAAO;EAChB,SAAS,GAAG,OAAO;EACnB,YAAY,GAAG,OAAO;EACtB,SAAS,GAAG,OAAO;EACnB,UAAU,GAAG,OAAO;EACpB,UAAU,GAAG,OAAO;EACpB,UAAU,GAAG,OAAO;CACrB;AACD;;;;;;;;;AAUA,MAAM,sBAA2D,OAAO,OAAO;CAAC;EAC/E,SAAS;EACT,MAAM;EACN,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2FN;CAAG;EAIF,SAAS;EACT,MAAM;EACN,KAAK;;;;;;;;;;;;;;CAcN;CAAG;EAKF,SAAS;EACT,MAAM;EACN,KAAK;;;;;;CAMN;AAAC,CAAC;AAEF,MAAM,cAAc;CACnB;CAAY;CAAa;CAAY;CAAwB;CAAgC;CAC7F;CAAwC;CAA4C;CACpF;CAA0D;CAA4C;CACtG;CAAwB;CAAe;AACxC;AAEA,MAAM,iBAAiB;CACtB;CAAe;CAAmB;CAAY;CAAa;CAAY;CACvE;CAAsB;CAAgC;CAAU;CAChE;CAA4C;CAC5C;CAA0D;CAAgB;CAAe;CACzF;CAAwB;CAAe;AACxC;AAEA,SAAS,QAAQ,MAAyB,OAAwB;CACjE,OAAO,KAAK,KAAK,WAAY,UAAU,KAAA,IAAY,SAAS,GAAG,MAAM,GAAG,QAAS,CAAC,CAAC,KAAK,IAAI;AAC7F;;AAKA,SAAS,QAAQ,KAAoB;CACpC,MAAM,QAAQ,MAAM,IAAI,UAAU,WAAW;CAC7C,MAAM,QAAQ,eAAe,IAAI,gBAAgB,iBAAiB;CAClE,OAAO;EACN,KAAK,OAAO,IAAI,aAAa,cAAc;EAC3C,OAAO,OAAO,IAAI,UAAU,WAAW;EACvC,UAAU,OAAO,IAAI,cAAc,eAAe;EAClD,SAAS,OAAO,IAAI,aAAa,cAAc;EAC/C,UAAU,MAAM,IAAI,cAAc,eAAe;EACjD,QAAQ,OAAO,IAAI,WAAW,YAAY;EAC1C,cAAc,MAAM,IAAI,kBAAkB,mBAAmB;EAC7D,eAAe,MAAM,IAAI,oBAAoB,qBAAqB;EAClE,aAAa,MAAM,IAAI,kBAAkB,mBAAmB;EAC5D,sBAAsB,MAAM,IAAI,2BAA2B,4BAA4B;EACvF,eAAe,cAAc,IAAI,oBAAoB,qBAAqB;EAC1E,gBAAgB,eAAe,IAAI,oBAAoB,qBAAqB;EAC5E;EACA,OAAO,UAAU,KAAA,IAAY,KAAA,IAAY;GAAE;GAAO;GAAO,aAAa,MAAM,IAAI,wBAAwB,yBAAyB;EAAE;CACpI;AACD;;AAGA,SAAS,WAAW,KAAuB;CAC1C,MAAM,QAAQ,MAAM,IAAI,UAAU,WAAW;CAC7C,MAAM,QAAQ,eAAe,IAAI,gBAAgB,iBAAiB;CAClE,MAAM,UAAU,eAAe,IAAI,iBAAiB,kBAAkB;CACtE,OAAO;EACN,KAAK,OAAO,IAAI,gBAAgB,iBAAiB;EACjD,gBAAgB,OAAO,IAAI,oBAAoB,qBAAqB;EACpE,SAAS,OAAO,IAAI,aAAa,cAAc;EAC/C,UAAU,OAAO,IAAI,cAAc,eAAe;EAClD,SAAS,OAAO,IAAI,aAAa,cAAc;EAC/C,qBAAqB,MAAM,IAAI,yBAAyB,0BAA0B;EAClF,MAAM,OAAO,OAAO,IAAI,SAAS,UAAU,GAAG,UAAU;EACxD,UAAU,MAAM,IAAI,cAAc,eAAe;EACjD,QAAQ,OAAO,IAAI,WAAW,YAAY;EAC1C,cAAc,MAAM,IAAI,kBAAkB,mBAAmB;EAC7D,eAAe,MAAM,IAAI,oBAAoB,qBAAqB;EAClE,aAAa,MAAM,IAAI,kBAAkB,mBAAmB;EAC5D,sBAAsB,MAAM,IAAI,2BAA2B,4BAA4B;EACvF,aAAa,YAAY,KAAA,IACtB,KAAA,IACA;GAAW;GAA+D,QAAQ,OAAO,IAAI,gBAAgB,iBAAiB;EAAuD;EACxL,gBAAgB,eAAe,IAAI,oBAAoB,qBAAqB;EAC5E;EACA,OAAO,UAAU,KAAA,IAAY,KAAA,IAAY;GAAE;GAAO;GAAO,aAAa,MAAM,IAAI,wBAAwB,yBAAyB;EAAE;CACpI;AACD;;AAGA,SAAS,WAA6G,QAAkB;CACvI,OAAO,OAAO,MAAM,MAAM,UAAU,KAAK,gBAAgB,MAAM,iBAAiB,KAAK,cAAc,MAAM,eAAeC,cAAY,KAAK,KAAK,MAAM,GAAG,CAAC;AACzJ;;;;;;;;;;AAWA,IAAa,+BAAb,MAA0E;CACzE;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YAAY,SAA8C;EACzD,KAAK,aAAa,kBAAkB,OAAO;EAC3C,KAAK,SAAS,YAAY,aAAc,QAAqC,KAAK,SAAS,WAAW,iBAAiB,OAAO,CAAC;EAC/H,KAAK,QAAQ,eAAe,OAAO;EACnC,KAAK,UAAU,iBAAiB,OAAO;EACvC,KAAK,KAAK,SAAS,KAAK,OAAO;EAC/B,KAAK,oBAAoB,eAAe,SAAS,kBAAkB;EACnE,KAAK,cAAc,eAAe,SAAS,uBAAuB;CACnE;;CAGA,IAAI,kBAA0B;EAC7B,OAAO,KAAK;CACb;;;;;;;CAQA,MAAM,eAA8B;EACnC,MAAM,uBAAuB,KAAK,OAAO,KAAK,SAAS,YAAY,mBAAmB;CACvF;CAEA,UAAU,WAAkC;EAC3C,MAAM,OAAO,KAAK;EAClB,OAAO,UAAU,SAAS,KAAA,IAAY,KAAA,UAAkB,KAAK,SAAS,GAAG,kBAAkB;CAC5F;CAEA,OAAO,WAAmB,OAAyD;EAClF,MAAM,OAAO,KAAK;EAClB,OAAO,UAAU,SAAS,KAAA,IAAY,KAAA,UAAkB,KAAK,WAAW,KAAK,GAAG,uBAAuB;CACxG;;;;;;CAOA,MAAM,OACL,WACA,QACA,MACA,MACa;EACb,MAAM,KAAK,UAAU,SAAS;EAC9B,OAAO,SAAS,KAAK,OAAO,KAAK,QAAQ,QAAQ,MAAM,IAAI;CAC5D;;;;;;CAOA,MAAM,aAAa,IAA8B,MAAoC;EACpF,MAAM,GAAG,MAAM,cAAc,KAAK,GAAG,QAAQ,MAAM,SAAS,UAAU,UAAU,YAAY,MAAM;EAElG,MAAM,OAAM,MADS,GAAG,MAAM,4DAA4D,KAAK,GAAG,SAAS,EAAA,CACxF,KAAK;EACxB,IAAI,QAAQ,KAAA,GAAW,MAAM,WAAW,gBAAgB,SAAS;EACjE,OAAO,cAAc,IAAI,sBAAsB,2BAA2B,KAAK;CAChF;;CAGA,SAAS,OAAe,iBAAiC;EACxD,OAAOC,UAAQ,QAAQ,KAAK,YAAY,eAAe;CACxD;CAEA,MAAM,MAAS,WAAmB,QAAoB,MAAgE;EACrH,MAAM,KAAK,UAAU,SAAS;EAC9B,OAAO,QAAQ,KAAK,OAAO,KAAK,QAAQ,SAAS,OAAO,KAAK,EAAE,CAAC;CACjE;CAEA,MAAM,SAAS,IAA8B,SAAiB,MAAyD;EACtH,MAAM,SAAS,MAAM,GAAG,MAAM,UAAU,QAAQ,WAAW,EAAE,QAAQ,KAAK,GAAG,KAAK,2BAA2B,QAAQ,CAAC,OAAO,CAAC;EAC9H,OAAO,OAAO,KAAK,OAAO,KAAA,IAAY,KAAA,IAAY,QAAQ,OAAO,KAAK,EAAE;CACzE;CAEA,MAAM,YAAY,IAA8B,YAAsD;EACrG,MAAM,SAAS,MAAM,GAAG,MAAM,UAAU,QAAQ,cAAc,EAAE,QAAQ,KAAK,GAAG,QAAQ,qCAAqC,CAAC,UAAU,CAAC;EACzI,OAAO,OAAO,KAAK,OAAO,KAAA,IAAY,KAAA,IAAY,WAAW,OAAO,KAAK,EAAE;CAC5E;CAMA,MAAM,gBACL,KACA,SAC+B;EAC/B,MAAM,OAAO,wBAAwB,KAAK,OAAO;EACjD,MAAM,QAAQ,KAAK;EACnB,OAAO,KAAK,OACX,mBACA,KAAK,QACL,OAAO,OAAO;GACb,MAAM,kBAAkB,MAAM,KAAK,aAAa,IAAI,OAAO;GAC3D,MAAM,KAAK,OAAO,mBAAmB,QAAQ;GAY7C,OAAO;IAAE;IAAiB,WAAU,MARb,GAAG,MACzB,eAAe,KAAK,GAAG,KAAK;;;;6DAK5B;KAAC,MAAM;KAAS,aAAa,MAAM,OAAO;KAAG,MAAM;KAAU,MAAM;KAAS,cAAc,MAAM,KAAK;KAAG,MAAM;KAAU,MAAM;KAAa,MAAM;IAAoB,CACtK,EAAA,CAC6C,KAAK,WAAW;GAAE;EAChE,GACA,OAAO,KAAK,OAAO,QAAQ,YAAY;GAGtC,IAAI,MAAM,WAAW,KAAK,SAAS,OAAO,OAAO,eAAe,GAAG;IAClE,QAAQ,QAAQ;IAChB,OAAOC,UAA6B,EAAE,SAAS,eAAe,CAAC;GAChE;GACA,MAAM,KAAK,OAAO,mBAAmB,SAAS;GAC9C,OAAOA,UAA6B,EAAE,SAAS,OAAO,WAAW,aAAa,kBAAkB,CAAC;EAClG,CACD;CACD;CAEA,MAAM,gBAAgB,SAA8B,SAAmE;EACtH,MAAM,OAAO,cAAc,SAAS,OAAO;EAC3C,MAAM,QAAQ,KAAK;EACnB,OAAO,KAAK,OACX,mBACA,KAAK,QAEL,OAAO,QAAQ,MAAM,GAAG,MACvB,wBAAwB,KAAK,GAAG,KAAK;;;;;8BAMrC,CAAC,MAAM,OAAO,MAAM,KAAK,CAC1B,EAAA,CAAG,KAAK,KAAK,QAAQ,OAAO,IAAI,aAAa,cAAc,CAAC,GAC5D,OAAO,IAAI,QAAQ,WAAW;GAC7B,IAAI,OAAO,WAAW,GAAG,OAAO,WAA6B,CAAC,CAAC;GAS/D,OAAO,WADQ,YAAW,MAPL,GAAG,MACvB,UAAU,KAAK,GAAG,KAAK;;;kBAGV,QAAQ,aAAa,KAAK,KACvC;IAAC;IAAQ,MAAM;IAAU,MAAM,QAAQ,MAAM;GAAe,CAC7D,EAAA,CACiC,KAAK,IAAI,OAAO,CAC/B,CAAA,CAAO,KAAK,UAAUA,UAA0B,OAAO,KAAK,CAAC,CAAC,CAAC;EAClF,CACD;CACD;;;;;CAMA,gBACC,WACA,QACA,SACA,QACA,QACmB;EACnB,OAAO,KAAK,OAAO,WAAW,SAAS,OAAO,KAAK,SAAS,IAAI,SAAS,QAAQ,GAAG,OAAO,IAAI,OAAO,QAAQ;GAC7G,IAAI,QAAQ,KAAA,KAAa,CAAC,MAAM,KAAK,OAAO,OAAO,OAAO,OAAO,KAAK,GAAG,OAAO;GAChF,MAAM,OAAO,IAAI,GAAG;GACpB,OAAO;EACR,CAAC;CACF;CAEA,MAAM,kBAAkB,OAA0D,SAA+C;EAChI,MAAM,OAAO,kBAAkB,OAAO,OAAO;EAC7C,OAAO,KAAK,gBAAgB,qBAAqB,KAAK,QAAQ,KAAK,SAAS,KAAK,QAAQ,OAAO,OAAO;GACtG,MAAM,GAAG,MACR,UAAU,KAAK,GAAG,KAAK;;2BAGvB,CAAC,KAAK,SAAS,KAAK,OAAO,KAAK,CACjC;EACD,CAAC;CACF;CAEA,MAAM,oBACL,OACA,SACmB;EACnB,MAAM,OAAO,mBAAmB,OAAO,OAAO;EAC9C,OAAO,KAAK,gBAAgB,uBAAuB,KAAK,QAAQ,KAAK,SAAS,KAAK,QAAQ,OAAO,OAAO;GACxG,MAAM,GAAG,MACR,UAAU,KAAK,GAAG,KAAK;;;2BAIvB;IAAC,KAAK;IAAS,KAAK;IAAe,KAAK;GAAU,CACnD;EACD,CAAC;CACF;CAEA,MAAM,oBACL,OACA,SACmB;EACnB,MAAM,OAAO,iBAAiB,OAAO,OAAO;EAC5C,OAAO,KAAK,gBAAgB,uBAAuB,KAAK,QAAQ,KAAK,SAAS,KAAK,QAAQ,OAAO,IAAI,QAAQ;GAC7G,MAAM,GAAG,MACR,UAAU,KAAK,GAAG,KAAK,oDACvB,CAAC,KAAK,SAAS,gBAAgB,KAAK,KAAK,OAAO,OAAO,KAAK,eAAe,CAAC,CAC7E;EACD,CAAC;CACF;CAEA,MAAM,oBACL,OACA,SACmB;EACnB,MAAM,OAAO,sBAAsB,OAAO,OAAO;EACjD,OAAO,KAAK,gBAAgB,uBAAuB,KAAK,QAAQ,KAAK,SAAS,KAAK,QAAQ,OAAO,OAAO;GACxG,MAAM,GAAG,MACR,UAAU,KAAK,GAAG,KAAK;;2BAGvB,CAAC,KAAK,SAAS,KAAK,UAAU,CAC/B;EACD,CAAC;CACF;CAEA,MAAM,iBACL,OACA,SACgC;EAChC,MAAM,OAAO,mBAAmB,OAAO,OAAO;EAC9C,OAAO,KAAK,OACX,oBACA,KAAK,QACL,OAAO,OAAO;GACb,MAAM,kBAAkB,MAAM,KAAK,aAAa,IAAI,OAAO;GAC3D,MAAM,MAAM,MAAM,KAAK,SAAS,IAAI,KAAK,SAAS,QAAQ;GAC1D,MAAM,QAAQ,MAAM,KAAK,eAAe,IAAI,KAAK,OAAO,KAAK,QAAQ,oBAAoB;IAAE,QAAQ;IAAe,SAAS,KAAK;GAAQ,CAAC;GACzI,MAAM,KAAK,OAAO,oBAAoB,QAAQ;GAC9C,OAAO;IAAE;IAAiB;IAAK;GAAM;EACtC,GACA,OAAO,IAAI,OAAO,EAAE,iBAAiB,KAAK,YAAY;GACrD,IAAI,UAAU,KAAA,GAAW,OAAO,eAAqC,KAAK;GAC1E,IAAI,QAAQ,KAAA,KAAa,CAAC,QAAQ,KAAK,KAAK,KAAK,GAAG,OAAO,eAAe,WAAW;GACrF,MAAM,UAAU,eAAe,KAAK,KAAK,SAAS,KAAK,SAAS,OAAO,eAAe,CAAC;GACvF,IAAI,YAAY,KAAA,GAAW,OAAO,eAAe,OAAO;GACxD,MAAM,WAAW,mBAAmB,KAAK,KAAK,SAAS,KAAK;GAC5D,MAAM,SAASA,UAA8B;IAAE,SAAS;IAAM;GAAS,CAAC;GACxE,aAAa,KAAK,KAAK,OAAO;GAC9B,MAAM,GAAG,MACR,UAAU,KAAK,GAAG,KAAK;;;4BAIvB;IAAC,IAAI;IAAK,IAAI;IAAc,IAAI;IAAe,IAAI;IAAsB,IAAI;GAAK,CACnF;GACA,MAAM,KAAK,gBAAgB,IAAI,IAAI,KAAK,IAAI,UAAU,IAAI,SAAS,QAAQ;GAC3E,MAAM,KAAK,OAAO,oBAAoB,SAAS;GAC/C,OAAO;EACR,CACD;CACD;CACA,MAAM,qBACL,OACA,SACwC;EACxC,MAAM,OAAO,sBAAsB,OAAO,OAAO;EACjD,OAAO,KAAK,OACX,wBACA,KAAK,QACL,OAAO,OAAO;GACb,MAAM,kBAAkB,MAAM,KAAK,aAAa,IAAI,OAAO;GAC3D,MAAM,MAAM,MAAM,KAAK,SAAS,IAAI,KAAK,SAAS,QAAQ;GAC1D,MAAM,QAAQ,MAAM,KAAK,eAAe,IAAI,KAAK,OAAO,KAAK,QAAQ,oBAAoB;IAAE,QAAQ;IAAqB,SAAS,KAAK;GAAQ,CAAC;GAC/I,MAAM,KAAK,OAAO,wBAAwB,QAAQ;GAClD,OAAO;IAAE;IAAiB;IAAK;GAAM;EACtC,GACA,OAAO,IAAI,OAAO,EAAE,iBAAiB,KAAK,YAAY;GACrD,IAAI,UAAU,KAAA,GAAW,OAAO,eAA6C,KAAK;GAClF,IAAI,QAAQ,KAAA,KAAa,CAAC,QAAQ,KAAK,KAAK,KAAK,GAAG,OAAO,kBAAkB,WAAW;GACxF,MAAM,UAAU,kBAAkB,KAAK,KAAK,SAAS,KAAK,SAAS,OAAO,eAAe,CAAC;GAC1F,IAAI,YAAY,KAAA,GAAW,OAAO,kBAAkB,OAAO;GAC3D,MAAM,WAAW,sBAAsB,KAAK,KAAK,SAAS,KAAK;GAC/D,MAAM,SAASA,UAAsC;IAAE,SAAS;IAAM;GAAS,CAAC;GAChF,gBAAgB,KAAK,KAAK,OAAO;GACjC,MAAM,GAAG,MACR,UAAU,KAAK,GAAG,KAAK;;;4BAIvB;IAAC,IAAI;IAAK,cAAc,IAAI,KAAK;IAAG,IAAI;IAAc,IAAI;IAAe,IAAI;IAAsB,IAAI;GAAK,CAC7G;GACA,MAAM,KAAK,gBAAgB,IAAI,IAAI,KAAK,IAAI,UAAU,IAAI,SAAS,QAAQ;GAC3E,MAAM,KAAK,OAAO,wBAAwB,SAAS;GACnD,OAAO;EACR,CACD;CACD;CAEA,MAAM,gBAAgB,IAA8B,SAAiB,UAAkB,SAAiB,UAAiD;EACxJ,MAAM,GAAG,MACR,eAAe,KAAK,GAAG,SAAS,mGAChC;GAAC;GAAS;GAAU;GAAS,cAAc,QAAQ;GAAG,SAAS,sBAAsB;EAAI,CAC1F;CACD;;;;;;;;;CAUA,MAAM,eAAe,IAA8B,OAAqB,oBAAwC,QAAyD;EACxK,IAAI,uBAAuB,KAAA,GAAW,OAAO,KAAA;EAM7C,OAAO,yBAAwB,MALV,GAAG,MACvB,sCAAsC,KAAK,GAAG,SAAS;wFAEvD;GAAC,MAAM;GAAU,MAAM;GAAS;EAAkB,CACnD,EAC+B,CAAO,KAAK,KAAK,QAAQ,OAAO,IAAI,WAAW,YAAY,CAAa,GAAG,MAAM;CACjH;CAEA,MAAM,cAAc,OAAoD,SAA+D;EACtI,MAAM,OAAO,cAAc,OAAO,OAAO;EACzC,OAAO,KAAK,MAAM,iBAAiB,KAAK,QAAQ,OAAO,OAAO;GAC7D,MAAM,SAAS,MAAM,GAAG,MACvB,UAAU,QAAQ,WAAW,EAAE,QAAQ,KAAK,GAAG,KAAK,4DACpD;IAAC,KAAK;IAAS,KAAK,MAAM;IAAU,KAAK,MAAM;GAAO,CACvD;GACA,OAAO,OAAO,KAAK,OAAO,KAAA,IAAY,OAAOA,UAA0B,OAAO,QAAQ,OAAO,KAAK,EAAE,CAAC,CAAC;EACvG,CAAC;CACF;CAMA,MAAM,qBACL,QACA,QACA,SACqC;EACrC,MAAM,OAAO,qBAAqB,QAAQ,QAAQ,OAAO;EACzD,OAAO,KAAK,OACX,wBACA,KAAK,QACL,OAAO,OAAO;GACb,MAAM,kBAAkB,MAAM,KAAK,aAAa,IAAI,OAAO;GAC3D,MAAM,MAAM,MAAM,KAAK,WAAW,IAAI,KAAK,MAAM;GACjD,MAAM,KAAK,OAAO,wBAAwB,QAAQ;GAIlD,IAAI,QAAQ,KAAA,KAAa,CAAC,QAAQ,KAAK,IAAI,GAAG,OAAO;IAAE;IAAiB;IAAK,WAAW;IAAO,UAAU;GAAM;GAC/G,MAAM,YAAY,MAAM,KAAK,iBAAiB,IAAI,UAAU,MAAM,IAAI,QAAQ;GAU9E,OAAO;IAAE;IAAiB;IAAK;IAAW,UATzB,cAAc,MAAM,GAAG,MACvC,eAAe,KAAK,GAAG,QAAQ;;;;mEAK/B;KAAC,KAAK;KAAY,aAAa,KAAK,UAAU;KAAG,KAAK;KAAgB,KAAK;KAAS,KAAK;KAAU,KAAK;KACvG,KAAK;KAAqB,cAAc,KAAK,IAAI;KAAG,IAAI;KAAU,KAAK;KAAe,KAAK;KAAa,KAAK;IAAoB,CACnI,EAAA,CAAG,KAAK,WAAW;GACgC;EACpD,GACA,OAAO,KAAK,OAAO,QAAQ,YAAY;GAEtC,MAAM,MAAM,OAAO;GACnB,IAAI,QAAQ,KAAA,GAAW,OAAO,cAAc,YAAY;GAExD,IAAI,CAAC,MAAM,KAAK,KAAK,OAAO,OAAO,KAAK,OAAO,OAAO,KAAK,GAAG;IAC7D,QAAQ,QAAQ;IAChB,OAAO,cAAc,YAAY;GAClC;GACA,IAAI,CAAC,QAAQ,KAAK,IAAI,GAAG,MAAM,WAAW,mBAAmB,iBAAiB;GAC9E,IAAI,IAAI,WAAW,KAAK,SAAS,OAAO,OAAO,eAAe,GAAG;IAChE,QAAQ,QAAQ;IAChB,OAAO,cAAc,cAAc;GACpC;GACA,IAAI,CAAC,OAAO,WAAW,OAAO,cAAc,iBAAiB;GAE7D,IAAI,CAAC,OAAO,UAAU,MAAM,WAAW,wBAAwB,mBAAmB;GAClF,MAAM,KAAK,OAAO,wBAAwB,SAAS;GACnD,OAAO,cAAc,UAAU;EAChC,CACD;CACD;CAEA,MAAM,sBACL,QACA,QACA,SACqC;EACrC,MAAM,OAAO,eAAe,QAAQ,QAAQ,OAAO;EACnD,OAAO,KAAK,OACX,yBACA,KAAK,QACL,OAAO,OAAO;GACb,MAAM,kBAAkB,MAAM,KAAK,aAAa,IAAI,OAAO;GAC3D,MAAM,MAAM,MAAM,KAAK,WAAW,IAAI,KAAK,MAAM;GACjD,MAAM,KAAK,OAAO,yBAAyB,QAAQ;GACnD,IAAI,QAAQ,KAAA,KAAa,CAAC,QAAQ,KAAK,IAAI,GAAG,OAAO;IAAE;IAAiB;IAAK,WAAW;GAAM;GAG9F,MAAM,YAAY,MAAM,KAAK,iBAAiB,IAAI,UAAU,MAAM,IAAI,QAAQ;GAC9E,IAAI,WACH,MAAM,GAAG,MACR,eAAe,KAAK,GAAG,QAAQ;mDAE/B;IAAC,KAAK;IAAgB,KAAK;IAAS,aAAa,UAAU,KAAK,gBAAgB,KAAK,OAAO,CAAC;IAAG,KAAK;IAAU,KAAK;IACnH,cAAc,aAAa,IAAI,CAAC;IAAG,IAAI;GAAQ,CACjD;GAED,OAAO;IAAE;IAAiB;IAAK;GAAU;EAC1C,GACA,OAAO,KAAK,OAAO,QAAQ,YAAY;GACtC,MAAM,MAAM,OAAO;GACnB,IAAI,QAAQ,KAAA,GAAW,OAAO,cAAc,YAAY;GAExD,IAAI,CAAC,MAAM,KAAK,KAAK,OAAO,OAAO,KAAK,OAAO,OAAO,KAAK,GAAG;IAC7D,QAAQ,QAAQ;IAChB,OAAO,cAAc,YAAY;GAClC;GACA,IAAI,CAAC,QAAQ,KAAK,IAAI,GAAG,MAAM,WAAW,mBAAmB,iBAAiB;GAC9E,IAAI,IAAI,WAAW,KAAK,SAAS,OAAO,OAAO,eAAe,GAAG;IAChE,QAAQ,QAAQ;IAChB,OAAO,cAAc,cAAc;GACpC;GACA,IAAI,CAAC,OAAO,WAAW,OAAO,cAAc,iBAAiB;GAC7D,MAAM,KAAK,OAAO,yBAAyB,SAAS;GACpD,OAAO,cAAc,UAAU;EAChC,CACD;CACD;;;;;;;;;CAUA,MAAM,WAAW,IAA8B,OAA6D;EAC3G,MAAM,MAAM,MAAM,KAAK,SAAS,IAAI,MAAM,SAAS,OAAO;EAC1D,OAAO,QAAQ,KAAA,KAAa,WAAW,KAAK,MAAM,OAAO,MAAM,KAAK,IAAI,MAAM,KAAA;CAC/E;;;;;;CAOA,MAAM,iBACL,IACA,MACA,MACA,UACmB;EAMnB,QAAO,MALc,GAAG,MACvB,eAAe,KAAK,GAAG,WAAW;4GAElC;GAAC,KAAK;GAAgB,KAAK;GAAS;GAAM,KAAK;GAAU,KAAK;GAAS;EAAQ,CAChF,EAAA,CACc,KAAK,WAAW;CAC/B;CAEA,MAAM,qBAAqB,SAA8B,SAAwE;EAChI,MAAM,OAAO,cAAc,SAAS,OAAO;EAC3C,MAAM,QAAQ,KAAK;EACnB,OAAO,KAAK,OACX,wBACA,KAAK,QAEL,OAAO,QAAQ,MAAM,GAAG,MACvB,2BAA2B,KAAK,GAAG,QAAQ;;;;;8BAM3C,CAAC,MAAM,OAAO,MAAM,KAAK,CAC1B,EAAA,CAAG,KAAK,KAAK,QAAQ,OAAO,IAAI,gBAAgB,iBAAiB,CAAC,GAClE,OAAO,IAAI,QAAQ,WAAW;GAC7B,IAAI,OAAO,WAAW,GAAG,OAAO,WAAkC,CAAC,CAAC;GASpE,OAAO,WADQ,YAAW,MAPL,GAAG,MACvB,UAAU,KAAK,GAAG,QAAQ;;;kBAGb,QAAQ,gBAAgB,QAAQ,KAC7C;IAAC;IAAQ,MAAM;IAAU,MAAM,QAAQ,MAAM;GAAe,CAC7D,EAAA,CACiC,KAAK,IAAI,UAAU,CAClC,CAAA,CAAO,KAAK,UAAUA,UAA+B,UAAU,KAAK,CAAC,CAAC,CAAC;EAC1F,CACD;CACD;CAEA,MAAM,yBACL,OACA,SACmB;EACnB,MAAM,OAAO,oBAAoB,OAAO,OAAO;EAE/C,OAAO,KAAK,OAAO,4BAA4B,KAAK,SAAS,OAAO,KAAK,YAAY,IAAI,KAAK,UAAU,GAAG,OAAO,IAAI,OAAO,WAAW;GACvI,IAAI,WAAW,KAAA,KAAa,CAAC,MAAM,QAAQ,KAAK,OAAO,OAAO,KAAK,OAAO,OAAO,KAAK,GAAG,OAAO;GAChG,MAAM,GAAG,MACR,UAAU,KAAK,GAAG,QAAQ,uDAC1B,CAAC,OAAO,KAAK,gBAAgB,QAAQ,KAAK,OAAO,OAAO,KAAK,eAAe,CAAC,CAC9E;GACA,OAAO;EACR,CAAC;CACF;CAEA,MAAM,mBACL,OACA,SACqC;EACrC,MAAM,OAAO,mBAAmB,OAAO,OAAO;EAG9C,OAAO,KAAK,MAAM,sBAAsB,KAAK,QAAQ,OAAO,OAAO;GAClE,MAAM,SAAS,MAAM,GAAG,MAAM,UAAU,QAAQ,cAAc,EAAE,QAAQ,KAAK,GAAG,QAAQ,0BAA0B,CAAC,KAAK,UAAU,CAAC;GACnI,OAAO,WAAW,OAAO,KAAK,OAAO,KAAA,IAAY,KAAA,IAAY,WAAW,OAAO,KAAK,EAAE,GAAG,IAAI;EAC9F,CAAC;CACF;CAEA,MAAM,cAAc,OAAgF,SAA+C;EAClJ,MAAM,OAAO,sBAAsB,OAAO,OAAO;EACjD,OAAO,KAAK,OAAO,iBAAiB,KAAK,SAAS,OAAO,KAAK,YAAY,IAAI,KAAK,UAAU,GAAG,OAAO,IAAI,OAAO,WAAW;GAC5H,IAAI,WAAW,KAAA,KAAa,CAAC,MAAM,QAAQ,KAAK,OAAO,OAAO,KAAK,OAAO,OAAO,KAAK,GAAG,OAAO;GAChG,IAAI,KAAK,mBAAmB,OAAO,gBAAgB,MAAM,WAAW,mBAAmB,8BAA8B;GACrH,IAAI,KAAK,YAAY,OAAO,SAAS,MAAM,WAAW,mBAAmB,uBAAuB;GAChG,MAAM,GAAG,MACR,eAAe,KAAK,GAAG,SAAS,4EAChC;IAAC,KAAK;IAAY,OAAO;IAAU,OAAO;IAAS,cAAc,KAAK,MAAM;GAAC,CAC9E;GACA,OAAO;EACR,CAAC;CACF;CAEA,MAAM,aAAa,OAA+E,SAAiE;EAClK,MAAM,OAAO,qBAAqB,OAAO,OAAO;EAEhD,MAAM,UAAU,MAAM,UAAU,iBAAiB;EAKjD,OAAO,KAAK,OAAO,gBAAgB,KAAK,SAAS,OAAO,KAAK,YAAY,IAAI,KAAK,UAAU,GAAG,OAAO,IAAI,OAAO,WAAW;GAC3H,IAAI,CAAC,SAAS,QAAQ,KAAK,QAAQ,KAAK,GAAG,OAAO,YAAY,KAAA,CAAS;GACvE,IAAI,KAAK,mBAAmB,OAAO,gBAAgB,MAAM,WAAW,mBAAmB,8BAA8B;GACrH,IAAI,KAAK,YAAY,OAAO,SAAS,MAAM,WAAW,mBAAmB,uBAAuB;GAMhG,OAAO,aAAY,MALI,GAAG,MACzB,eAAe,KAAK,GAAG,SAAS;yFAEhC;IAAC,KAAK;IAAY,OAAO;IAAU,OAAO;IAAS,cAAc,KAAK,MAAM;IAAG,KAAK,OAAO;IAAO,QAAQ;GAAM,CACjH,EACmB,CAAS,KAAK,WAAW,IAAI,QAAQ,UAAU,KAAA,CAAS;EAC5E,CAAC;CACF;CAEA,MAAM,cACL,OACA,SACmB;EACnB,MAAM,OAAO,sBAAsB,OAAO,OAAO;EACjD,MAAM,SAAS,MAAM,gBAAgB,qBAAqB,KAAK,OAAO,CAAC;EACvE,OAAO,KAAK,OACX,iBACA,KAAK,QAIL,OAAO,OAAO;GAMb,KAAI,MALgB,GAAG,MACtB,iBAAiB,KAAK,GAAG,SAAS;2GAElC;IAAC,KAAK;IAAY,KAAK;IAAO,KAAK,MAAM;IAAU,KAAK,MAAM;IAAS;GAAM,CAC9E,EAAA,CACU,KAAK,WAAW,GAAG,OAAO;GAMpC,QAAO,MALgB,GAAG,MACzB,eAAe,KAAK,GAAG,SAAS;oEAEhC;IAAC,KAAK;IAAY,KAAK;IAAO,KAAK,MAAM;IAAU,KAAK,MAAM;IAAS,cAAc,KAAK,MAAM;GAAC,CAClG,EAAA,CACgB,KAAK,WAAW;EACjC,GACA,OAAO,KAAK,QAAQ,aAAa,QAClC;CACD;CAEA,MAAM,qBACL,OACA,SACmB;EACnB,MAAM,OAAO,eAAe,OAAO,OAAO;EAC1C,OAAO,KAAK,OAAO,wBAAwB,KAAK,SAAS,OAAO,KAAK,YAAY,IAAI,KAAK,UAAU,GAAG,OAAO,IAAI,OAAO,WAAW;GACnI,IAAI,WAAW,KAAA,KAAa,CAAC,MAAM,QAAQ,KAAK,OAAO,OAAO,KAAK,OAAO,OAAO,KAAK,GAAG,OAAO;GAChG,gBAAgB,QAAQ,KAAK,UAAU;GACvC,MAAM,GAAG,MACR,UAAU,KAAK,GAAG,QAAQ;;;8BAI1B;IAAC,OAAO;IAAK,OAAO;IAAQ,OAAO;IAAc,OAAO;IAAe,OAAO,aAAa,WAAW;IACrG,OAAO,aAAa,UAAU;IAAM,OAAO,kBAAkB;GAAI,CACnE;GACA,OAAO;EACR,CAAC;CACF;CAEA,MAAM,qBACL,OACA,SACkB;EAClB,MAAM,OAAO,eAAe,OAAO,OAAO;EAC1C,OAAO,KAAK,OACX,wBACA,KAAK,QAGL,OAAO,QAAQ,MAAM,GAAG,MACvB,2BAA2B,KAAK,GAAG,QAAQ;;kBAG3C;GAAC,KAAK,MAAM;GAAU,KAAK,MAAM;GAAS,KAAK;GAAgB,KAAK;EAAc,CACnF,EAAA,CAAG,KAAK,KAAK,QAAQ,OAAO,IAAI,gBAAgB,iBAAiB,CAAC,GAClE,OAAO,IAAI,QAAQ,WAAW;GAC7B,IAAI,OAAO,WAAW,GAAG,OAAO;GAQhC,QAAO,MAPc,GAAG,MACvB,UAAU,KAAK,GAAG,QAAQ;;;8BAI1B,CAAC,QAAQ,KAAK,MAAM,CACrB,EAAA,CACc,KAAK;EACpB,CACD;CACD;CAEA,MAAM,sBACL,OACA,SACgC;EAChC,MAAM,OAAO,sBAAsB,OAAO,OAAO;EACjD,OAAO,KAAK,OACX,yBACA,KAAK,QACL,OAAO,OAAO;GACb,MAAM,kBAAkB,MAAM,KAAK,aAAa,IAAI,OAAO;GAC3D,MAAM,SAAS,MAAM,KAAK,YAAY,IAAI,KAAK,UAAU;GACzD,MAAM,QAAQ,MAAM,KAAK,eAAe,IAAI,KAAK,OAAO,KAAK,QAAQ,oBAAoB;IAAE,QAAQ;IAAmB,YAAY,KAAK;GAAW,CAAC;GACnJ,MAAM,KAAK,OAAO,yBAAyB,QAAQ;GACnD,OAAO;IAAE;IAAiB;IAAQ;GAAM;EACzC,GACA,OAAO,IAAI,OAAO,EAAE,iBAAiB,QAAQ,YAAY;GACxD,IAAI,UAAU,KAAA,GAAW,OAAO,eAAqC,KAAK;GAC1E,IAAI,WAAW,KAAA,KAAa,CAAC,QAAQ,QAAQ,KAAK,KAAK,GAAG,OAAO,eAAe,WAAW;GAC3F,MAAM,UAAU,eAAe,QAAQ,KAAK,SAAS,KAAK,SAAS,OAAO,eAAe,CAAC;GAC1F,IAAI,YAAY,KAAA,GAAW,OAAO,eAAe,OAAO;GACxD,MAAM,WAAW,sBAAsB,QAAQ,KAAK,SAAS,KAAK;GAClE,MAAM,SAASA,UAA8B;IAAE,SAAS;IAAM;GAAS,CAAC;GACxE,aAAa,QAAQ,KAAK,OAAO;GACjC,MAAM,GAAG,MACR,UAAU,KAAK,GAAG,QAAQ;;;+BAI1B;IAAC,OAAO;IAAK,OAAO;IAAc,OAAO;IAAe,OAAO;IAAsB,OAAO;GAAK,CAClG;GACA,MAAM,KAAK,gBAAgB,IAAI,OAAO,SAAS,OAAO,UAAU,OAAO,SAAS,QAAQ;GACxF,MAAM,KAAK,OAAO,yBAAyB,SAAS;GACpD,OAAO;EACR,CACD;CACD;CAEA,MAAM,mBAAmB,OAAuD,SAAoE;EACnJ,MAAM,OAAO,iBAAiB,OAAO,OAAO;EAC5C,OAAO,KAAK,MAAM,sBAAsB,KAAK,QAAQ,OAAO,OAAO;GAClE,MAAM,SAAS,MAAM,GAAG,MACvB,UAAU,QAAQ,cAAc,EAAE,QAAQ,KAAK,GAAG,QAAQ,+DAC1D;IAAC,KAAK;IAAY,KAAK,MAAM;IAAU,KAAK,MAAM;GAAO,CAC1D;GACA,OAAO,OAAO,KAAK,OAAO,KAAA,IAAY,OAAOA,UAA+B,UAAU,WAAW,OAAO,KAAK,EAAE,CAAC,CAAC;EAClH,CAAC;CACF;CAEA,MAAM,qBACL,OACA,SACqD;EACrD,MAAM,OAAO,iBAAiB,OAAO,OAAO;EAC5C,OAAO,KAAK,MAAM,wBAAwB,KAAK,QAAQ,OAAO,OAAO;GASpE,OAAOA,WAAmD,MAPrC,GAAG,MACvB;YACQ,KAAK,GAAG,SAAS;iBACZ,KAAK,GAAG,SAAS;gHAE9B;IAAC,KAAK;IAAY,KAAK,MAAM;IAAU,KAAK,MAAM;GAAO,CAC1D,EAC0D,CAAO,KAAK,KAAK,QAAQ,gBAClF,OAAO,IAAI,WAAW,YAAY,GAClC,cAAc,IAAI,UAAU,WAAW,GACvC,IAAI,eAAe,QAAQ,IAAI,eAAe,KAAA,IAAY,KAAA,IAAY,OAAO,IAAI,YAAY,aAAa,CAC3G,CAAC,CAAC;EACH,CAAC;CACF;CAEA,MAAM,oBAAoB,OAAoD,SAAyE;EACtJ,MAAM,OAAO,cAAc,OAAO,OAAO;EACzC,OAAO,KAAK,MAAM,uBAAuB,KAAK,QAAQ,OAAO,OAAO;GAMnE,OAAOA,WAA2C,MAL7B,GAAG,MACvB,sCAAsC,KAAK,GAAG,SAAS;6EAEvD;IAAC,KAAK;IAAS,KAAK,MAAM;IAAU,KAAK,MAAM;GAAO,CACvD,EACkD,CAAO,KAAK,KAAK,QAAQ,OAAO,IAAI,WAAW,YAAY,CAAC,CAAC;EAChH,CAAC;CACF;CAEA,MAAM,8BACL,OACA,SAC6C;EAC7C,MAAM,OAAO,2BAA2B,OAAO,OAAO;EACtD,OAAO,KAAK,MAAM,iCAAiC,KAAK,QAAQ,OAAO,OAAO;GAM7E,OAAOA,WAA2C,MAL7B,GAAG,MACvB,sCAAsC,KAAK,GAAG,SAAS;yFAEvD;IAAC,KAAK,MAAM;IAAU,KAAK,MAAM;IAAS,KAAK;GAAkB,CAClE,EACkD,CAAO,KAAK,KAAK,QAAQ,OAAO,IAAI,WAAW,YAAY,CAAC,CAAC;EAChH,CAAC;CACF;CAEA,MAAM,cACL,OACA,SACmC;EACnC,MAAM,OAAO,kBAAkB,OAAO,OAAO;EAC7C,OAAO,KAAK,MAAM,iBAAiB,KAAK,QAAQ,OAAO,OAAO;GAM7D,MAAM,OAAM,MALS,GAAG,MACvB,kGAAkG,KAAK,GAAG,WAAW;yFAErH;IAAC,KAAK;IAAgB,KAAK;IAAS,KAAK,MAAM;IAAU,KAAK,MAAM;GAAO,CAC5E,EAAA,CACmB,KAAK;GACxB,IAAI,QAAQ,KAAA,GAAW,OAAO;GAS9B,OAAOA,UAA0B,aAAa;IAP7C,MAAM,OAAO,IAAI,SAAS,UAAU;IACpC,gBAAgB,OAAO,IAAI,oBAAoB,qBAAqB;IACpE,SAAS,OAAO,IAAI,aAAa,cAAc;IAC/C,UAAU,OAAO,IAAI,cAAc,eAAe;IAClD,SAAS,OAAO,IAAI,aAAa,cAAc;IAC/C,UAAU,MAAM,IAAI,cAAc,eAAe;GAEJ,GAAQ,KAAK,UAAU,CAAC;EACvE,CAAC;CACF;CAEA,MAAM,oBAAoB,OAAmC,SAA0D;EACtH,MAAM,OAAO,cAAc,OAAO,OAAO;EACzC,OAAO,KAAK,OAAO,uBAAuB,KAAK,QAAQ,OAAO,OAAO;GACpE,MAAM,kBAAkB,MAAM,KAAK,aAAa,IAAI,WAAW;GAC/D,MAAM,KAAK,OAAO,uBAAuB,QAAQ;GACjD,OAAO;EACR,GAAG,OAAO,IAAI,OAAO,oBAAoB;GAOxC,MAAM,WAAW,KAAK,SAAS,OAAO,eAAe;GACrD,MAAM,SAAS,MAAM,QAAQ;GAI7B,MAAM,aAAa,MAAM,GAAG,MAC3B;;YAEQ,KAAK,GAAG,KAAK;;;YAGb,KAAK,GAAG,QAAQ;;;YAGhB,KAAK,GAAG,QAAQ;;;eAIxB;IAAC;IAAU,KAAK,QAAQ;IAAG,CAAC,GAAG,YAAY;IAAG,CAAC,GAAG,eAAe;GAAC,CACnE;GACA,MAAM,OAAO,WAAW,KAAK,SAAS,KAAK,QAAQ,WAAW,KAAK,SAAS,KAAK;GACjF,MAAM,OAAiB,CAAC;GACxB,MAAM,sBAAgC,CAAC;GACvC,MAAM,eAAyB,CAAC;GAChC,MAAM,UAAoB,CAAC;GAC3B,KAAK,IAAI,QAAQ,GAAG,QAAQ,MAAM,SAAS,GAAG;IAC7C,MAAM,MAAM,WAAW,KAAK;IAC5B,MAAM,OAAO,MAAM,IAAI,SAAS,UAAU;IAC1C,MAAM,MAAM,OAAO,IAAI,QAAQ,SAAS;IACxC,IAAI,SAAS,GAAG,KAAK,KAAK,GAAG;SACxB,IAAI,SAAS,GAAG;KACpB,oBAAoB,KAAK,OAAO,IAAI,oBAAoB,qBAAqB,CAAC;KAC9E,aAAa,KAAK,GAAG;IACtB,OAAO,QAAQ,KAAK,GAAG;GACxB;GAKA,MAAM,UAAU;IAAE,YAAY;IAAG,iBAAiB;IAAG,kBAAkB;GAAE;GACzE,IAAI,KAAK,SAAS,GAKjB,QAAQ,cAAa,MAJC,GAAG,MACxB,eAAe,KAAK,GAAG,KAAK,oFAC5B,CAAC,MAAM,CAAC,GAAG,YAAY,CAAC,CACzB,EAAA,CAC6B,KAAK;GAEnC,IAAI,aAAa,SAAS,GAazB,QAAQ,mBAAmB,OAAM,MAZX,GAAG,MACxB;oBACe,KAAK,GAAG,QAAQ;;;;oBAIhB,KAAK,GAAG,WAAW;;;qDAIlC,CAAC,qBAAqB,YAAY,CACnC,EACiC,CAAQ,KAAK,EAAE,GAAG,YAAY,aAAa;GAE7E,IAAI,QAAQ,SAAS,GAYpB,QAAQ,kBAAkB,OAAM,MAXV,GAAG,MACxB;oBACe,KAAK,GAAG,QAAQ;;;oBAGhB,KAAK,GAAG,WAAW;;;qDAIlC,CAAC,SAAS,CAAC,GAAG,eAAe,CAAC,CAC/B,EACgC,CAAQ,KAAK,EAAE,GAAG,YAAY,aAAa;GAE5E,MAAM,SAASA,UAA4B;IAAE;IAAQ;IAAS,MAAM,WAAW,KAAK,SAAS;GAAK,CAAC;GAGnG,MAAM,GAAG,MAAM,UAAU,KAAK,GAAG,QAAQ,8BAA8B,CAAC,QAAQ,CAAC;GACjF,MAAM,KAAK,OAAO,uBAAuB,SAAS;GAClD,OAAO;EACR,CAAC;CACF;AACD;;;ACvtCA,MAAM,0BAA+D,OAAO,OAAO,CAAC;CACnF,SAAS;CACT,MAAM;CACN,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgCN,CAAC,CAAC;AAEF,SAAS,gBAAgB,OAAuB;CAC/C,OAAO,GAAG,MAAM,+BAA+B,MAAM,WAAW,MAAM,qDAAqD,MAAM;AAClI;AAEA,SAAS,qBAAqB,OAAuB;CACpD,OAAO,GAAG,MAAM,6BAA6B,MAAM,6CAA6C,MAAM,qBAAqB,MAAM;AAClI;AAIA,SAAS,aAAa,KAAyB;CAC9C,MAAM,WAAW,OAAO,IAAI,wBAAwB,yBAAyB;CAC7E,IAAI,CAAC,MAAM,QAAQ,QAAQ,KAAK,CAAC,SAAS,OAAO,YAAY,OAAO,YAAY,QAAQ,GAAG,MAAM,WAAW,gBAAgB,yBAAyB;CACrJ,OAAO;EACN,UAAU,MAAM,IAAI,aAAa,cAAc;EAC/C,QAAQ,OAAO,IAAI,WAAW,YAAY;EAC1C,mBAAmB;EACnB,iBAAiB,MAAM,IAAI,sBAAsB,uBAAuB;CACzE;AACD;AAEA,SAAS,kBAAkB,QAAgB,KAAwC;CAClF,OAAO,iBAAiB,QAAQ,MAAM,IAAI,YAAY,aAAa,GAAG;EACrE,gBAAgB,OAAO,OAAO,IAAI,oBAAoB,qBAAqB,GAAG,qBAAqB;EACnG,iBAAiB,OAAO,IAAI,qBAAqB,sBAAsB;EACvE,WAAW,OAAO,OAAO,IAAI,eAAe,gBAAgB,GAAG,gBAAgB;CAChF,CAAC;AACF;;;;;;;;;;AAWA,IAAa,mCAAb,MAA6G;CAC5G;CACA;CACA;CACA;CACA;CAEA,YAAY,SAAkD;EAC7D,KAAK,SAAS,YAAY;GACzB,IAAI,YAAY,QAAQ,OAAO,YAAY,UAAU,MAAM,WAAW,iBAAiB,OAAO;GAC9F,OAAO,aAAa,QAAQ,KAAK;EAClC,SAAS,WAAW,iBAAiB,OAAO,CAAC;EAC7C,KAAK,QAAQ,eAAe,OAAO;EACnC,KAAK,UAAU,iBAAiB,OAAO;EACvC,KAAK,KAAK;GACT,eAAe,GAAG,KAAK,QAAQ;GAC/B,WAAW,GAAG,KAAK,QAAQ;GAC3B,gBAAgB,GAAG,KAAK,QAAQ;EACjC;EACA,KAAK,oBAAoB,eAAe,SAAS,kBAAkB;CACpE;;CAGA,MAAM,eAA8B;EACnC,MAAM,uBAAuB,KAAK,OAAO,KAAK,SAAS,iBAAiB,uBAAuB;CAChG;CAEA,UAAU,WAAkC;EAC3C,MAAM,OAAO,KAAK;EAClB,OAAO,UAAU,SAAS,KAAA,IAAY,KAAA,UAAkB,KAAK,SAAS,GAAG,kBAAkB;CAC5F;CAEA,MAAM,MAAS,WAAmB,QAAoB,MAAgE;EACrH,MAAM,KAAK,UAAU,SAAS;EAC9B,OAAO,QAAQ,KAAK,OAAO,KAAK,QAAQ,SAAS,OAAO,KAAK,EAAE,CAAC;CACjE;;CAGA,MAAM,UAAU,IAA8B,QAAkC;EAK/E,QAAO,MAJc,GAAG,MACvB,iBAAiB,KAAK,GAAG,cAAc,8EACvC;GAAC,OAAO;GAAU,OAAO;GAAS,OAAO;EAAc,CACxD,EAAA,CACc,KAAK,WAAW;CAC/B;CAEA,MAAM,iBAAiB,IAA8B,QAAoD;EACxG,MAAM,SAAS,MAAM,GAAG,MACvB,UAAU,gBAAgB,UAAU,EAAE,QAAQ,KAAK,GAAG,UAAU;8GAEhE;GAAC,OAAO;GAAU,OAAO;GAAS,OAAO;EAAc,CACxD;EACA,OAAO,OAAO,KAAK,OAAO,KAAA,IAAY,KAAA,IAAY,aAAa,OAAO,KAAK,EAAE;CAC9E;CAEA,MAAM,sBAAsB,IAA8B,QAAuD;EAChH,MAAM,SAAS,MAAM,GAAG,MACvB,UAAU,qBAAqB,eAAe,EAAE,QAAQ,KAAK,GAAG,eAAe;kHAE/E;GAAC,OAAO;GAAU,OAAO;GAAS,OAAO;EAAc,CACxD;EACA,IAAI,OAAO,KAAK,OAAO,KAAA,GAAW,MAAM,WAAW,gBAAgB,mBAAmB;EACtF,OAAO,kBAAkB,QAAQ,OAAO,KAAK,EAAE;CAChD;CAEA,MAAM,gBAAgB,IAA8B,QAAgB,UAAwC;EAC3G,MAAM,GAAG,MACR,eAAe,KAAK,GAAG,UAAU;gDAEjC;GAAC,OAAO;GAAU,OAAO;GAAS,OAAO;GAAgB,SAAS;GAAU,SAAS;GAAQ,cAAc,SAAS,iBAAiB;GAAG,SAAS;EAAe,CACjK;CACD;CAEA,MAAM,qBAAqB,IAA8B,QAAgB,SAAiB,eAAiE;EAC1J,MAAM,GAAG,MACR,eAAe,KAAK,GAAG,eAAe;sDAEtC;GAAC,OAAO;GAAU,OAAO;GAAS,OAAO;GAAgB;GAAS,cAAc,cAAc,cAAc;GAAG,cAAc;GAAiB,cAAc,cAAc,SAAS;EAAC,CACrL;CACD;CAMA,MAAM,yBACL,OACA,SACiD;EACjD,MAAM,OAAO,oBAAoB,OAAO,OAAO;EAC/C,OAAO,KAAK,MAAM,4BAA4B,KAAK,QAAQ,OAAO,OAAO;GAuBxE,OAAO,SATO,MAXO,GAAG,MACvB;iCAC6B,gBAAgB,UAAU,EAAE;iDACZ,KAAK,GAAG,UAAU;;;YAGvD,KAAK,GAAG,UAAU;;iEAG1B;IAAC,KAAK;IAAU,KAAK;IAAS,KAAK;GAAY,CAChD,EAAA,CACqB,KAAK,KAAK,SAAS;IACvC,QAAQ;KAAE,UAAU,KAAK;KAAU,SAAS,KAAK;KAAS,gBAAgB,OAAO,IAAI,oBAAoB,qBAAqB;IAAE;IAChI,UAAU,aAAa,GAAG;IAC1B,YAAY,cAAc,IAAI,iBAAiB,kBAAkB;GAClE,EAAE,CAAC,CAED,QAAQ,SAAS,KAAK,eAAe,KAAA,KAAa,KAAK,eAAe,KAAK,UAAU,CAAC,CAEtF,MAAM,MAAM,UAAU,YAAY,KAAK,OAAO,gBAAgB,MAAM,OAAO,cAAc,CACrC,CAAA,CAAM,KAAK,SAAS,YAAY,KAAK,QAAQ,KAAK,UAAU,KAAK,UAAU,CAAC,CAAC;EACpI,CAAC;CACF;CAEA,MAAM,iBACL,OACA,SAC8C;EAC9C,MAAM,OAAO,eAAe,OAAO,OAAO;EAC1C,OAAO,KAAK,MAAM,oBAAoB,KAAK,QAAQ,OAAO,OAAO;GAChE,MAAM,SAAS,KAAK;GAiCpB,MAAM,OAAM,MAhCS,GAAG,MAMvB;OACG,qBAAqB,uBAAuB,EAAE;YACzC,KAAK,GAAG,cAAc;;;;yCAIO,KAAK,GAAG,UAAU;;;;;2BAKhC,KAAK,GAAG,UAAU;;;;;;;qBAOxB,KAAK,GAAG,eAAe;;;;;8GAMxC;IAAC,OAAO;IAAU,OAAO;IAAS,OAAO;GAAc,CACxD,EAAA,CACmB,KAAK;GACxB,IAAI,QAAQ,KAAA,GAAW,OAAO;GAC9B,OAAO,QAAqC;IAC3C,gBAAgB,OAAO;IACvB,UAAU,OAAO;IACjB,SAAS,OAAO;IAChB,QAAQ,OAAO,IAAI,WAAW,YAAY;IAC1C,qBAAqB,MAAM,IAAI,iBAAiB,kBAAkB;IAClE,eAAe,kBAAkB,QAAQ,GAAG;GAC7C,CAAC;EACF,CAAC;CACF;CAEA,MAAM,uBACL,OACA,SACiD;EACjD,MAAM,OAAO,eAAe,OAAO,OAAO;EAC1C,OAAO,KAAK,MAAM,0BAA0B,KAAK,QAAQ,OAAO,OAAO;GACtE,MAAM,SAAS,KAAK;GAMpB,MAAM,aAAY,MALG,GAAG,MACvB,UAAU,gBAAgB,UAAU,EAAE,QAAQ,KAAK,GAAG,UAAU;kGAEhE;IAAC,OAAO;IAAU,OAAO;IAAS,OAAO;GAAc,CACxD,EAAA,CACyB,KAAK,IAAI,YAAY;GAC9C,OAAO,QAA+C,UAAU,KAAK,UAAU,UAAU,YAAY,QAAQ,UAAU,UAAU,QAAQ,EAAE,EAAE,eAAe,CAAC,CAAC;EAC/J,CAAC;CACF;CAMA,MAAM,mBACL,OAKA,SAC0C;EAC1C,MAAM,OAAO,eAAe,OAAO,OAAO;EAC1C,MAAM,KAAK,UAAU,oBAAoB;EACzC,MAAM,SAAS,KAAK;EAIpB,OAAO,SACN,KAAK,OACL,KAAK,QACL,KAAK,QACL,OAAO,QAAQ,MAAM,GAAG,MACvB,eAAe,KAAK,GAAG,cAAc;wDAErC;GAAC,OAAO;GAAU,OAAO;GAAS,OAAO;EAAc,CACxD,EAAA,CAAG,KAAK,WAAW,GACnB,OAAO,IAAI,OAAO,YAAY;GAC7B,IAAI,CAAC,SAAS,OAAOC,UAAQ,gBAAgB;GAC7C,MAAM,WAA0B;IAAE,UAAU;IAAG,QAAQ;IAAU,mBAAmB,KAAK;IAAU,iBAAiB;GAAM;GAC1H,MAAM,gBAAgB,iBAAiB,QAAQ,GAAG,KAAK,aAAa;GACpE,MAAM,SAAS,QAAwC;IAAE,SAAS;IAAM,UAAU,YAAY,QAAQ,UAAU,KAAA,CAAS;IAAG;GAAc,CAAC;GAC3I,MAAM,GAAG,MACR;oBACe,KAAK,GAAG,UAAU;;;mBAGnB,KAAK,GAAG,eAAe;sDAErC;IAAC,OAAO;IAAU,OAAO;IAAS,OAAO;IAAgB,cAAc,KAAK,QAAQ;IAAG;IACtF,cAAc,KAAK,cAAc,cAAc;IAAG,KAAK,cAAc;IAAiB,cAAc,KAAK,cAAc,SAAS;GAAC,CACnI;GACA,OAAO;EACR,CACD;CACD;CAEA,MAAM,wBACL,OACA,SAC0C;EAC1C,MAAM,OAAO,uBAAuB,OAAO,OAAO;EAClD,MAAM,KAAK,UAAU,yBAAyB;EAC9C,OAAO,KAAK,YAAY,KAAK,QAAQ,KAAK,QAAQ,KAAK,mBAAmB,aAAa;GAAE,QAAQ,QAAQ;GAAQ,UAAU,KAAK;EAAS,EAAE;CAC5I;CAEA,MAAM,kBAAkB,OAA2C,SAAsE;EACxI,OAAO,KAAK,cAAc,qBAAqB,OAAO,SAAS,KAAK;CACrE;CAEA,MAAM,mBAAmB,OAA2C,SAAsE;EACzI,OAAO,KAAK,cAAc,sBAAsB,OAAO,SAAS,MAAM;CACvE;CAEA,MAAM,mBAAmB,OAA2C,SAAsE;EACzI,OAAO,KAAK,cAAc,sBAAsB,OAAO,SAAS,MAAM;CACvE;CAEA,MAAM,6BACL,OACA,SAC2C;EAC3C,MAAM,OAAO,6BAA6B,OAAO,OAAO;EACxD,MAAM,KAAK,UAAU,8BAA8B;EACnD,MAAM,SAAS,KAAK;EACpB,OAAO,SAAS,KAAK,OAAO,KAAK,QAAQ,KAAK,SAAS,OAAO,KAAK,UAAU,IAAI,MAAM,GAAG,OAAO,IAAI,QAAQ,WAAW;GACvH,IAAI,CAAC,QAAQ,OAAO,QAAyC;IAAE,SAAS;IAAO,SAAS;GAAY,CAAC;GACrG,MAAM,WAAW,MAAM,KAAK,iBAAiB,IAAI,MAAM;GACvD,IAAI,aAAa,KAAA,GAAW,MAAM,WAAW,gBAAgB,cAAc;GAC3E,IAAI,SAAS,WAAW,WAAW,OAAO,QAAyC;IAAE,SAAS;IAAO,SAAS;GAAU,CAAC;GACzH,MAAM,UAAU,MAAM,KAAK,sBAAsB,IAAI,MAAM;GAC3D,IAAI,KAAK,oBAAoB,KAAA,KAAa,KAAK,oBAAoB,QAAQ,SAC1E,OAAO,QAAyC;IAAE,SAAS;IAAO,SAAS;IAAoB,gBAAgB,QAAQ;GAAQ,CAAC;GAGjI,MAAM,SAAS,QAAyC;IAAE,SAAS;IAAM,eADnD,iBAAiB,QAAQ,QAAQ,UAAU,GAAG,KAAK,aACA;GAAc,CAAC;GACxF,MAAM,KAAK,qBAAqB,IAAI,QAAQ,QAAQ,UAAU,GAAG,KAAK,aAAa;GACnF,OAAO;EACR,CAAC;CACF;CAEA,MAAM,cACL,WACA,OACA,SACA,MAC0C;EAC1C,MAAM,OAAO,qBAAqB,OAAO,OAAO;EAChD,MAAM,KAAK,UAAU,SAAS;EAC9B,OAAO,KAAK,YAAY,KAAK,QAAQ,KAAK,QAAQ,KAAK,kBAAkB,qBAAqB,IAAI,CAAC;CACpG;;;;;;;CAQA,YAAY,QAAoB,QAAgB,kBAAsC,QAAiE;EACtJ,OAAO,SACN,KAAK,OACL,KAAK,QACL,QACA,OAAO,OAAO;GACb,IAAI,CAAE,MAAM,KAAK,UAAU,IAAI,MAAM,GAAI,OAAO,KAAA;GAChD,MAAM,UAAU,MAAM,KAAK,iBAAiB,IAAI,MAAM;GACtD,IAAI,YAAY,KAAA,GAAW,MAAM,WAAW,gBAAgB,cAAc;GAC1E,OAAO;IAAE;IAAS,eAAe,MAAM,KAAK,sBAAsB,IAAI,MAAM;GAAE;EAC/E,GACA,OAAO,IAAI,OAAO,WAAW;GAC5B,MAAM,WAAW,iBAAiB,QAAQ,SAAS,kBAAkB,OAAO,MAAM;GAClF,IAAI,aAAa,UAAU,OAAO,SAAS;GAC3C,MAAM,SAAS,QAAwC;IAAE,SAAS;IAAM,UAAU,YAAY,QAAQ,SAAS,UAAU,KAAA,CAAS;IAAG,eAAe,OAAQ;GAAc,CAAC;GAC3K,MAAM,KAAK,gBAAgB,IAAI,QAAQ,SAAS,QAAQ;GACxD,OAAO;EACR,CACD;CACD;AACD;;;ACndA,MAAMC,qBAA0B,WAAW,QAAQ,kBAAkB;AACrE,MAAMC,yBAA6B;CAClC,MAAMD,aAAW;AAClB;;;;;;;;;;;;;;;;;AAkBA,SAAgB,wBAAwB,SAAsD;CAC7F,OAAO,YAAY;EAClB,IAAI,CAAC,cAAc,OAAO,GAAG,MAAMA,aAAW;EAC9C,MAAM,YAAY,cAAc,QAAQ,SAAS,YAAY,YAAYC,gBAAc,GAAG,YAAYA,gBAAc;EACpH,MAAM,YAAY,UAAU,QAAQ,SAAS,eAAe,eAAeA,gBAAc,CAAC;EAC1F,MAAM,SAAS,QAAQ,SAAS,UAAU,UAAUA,gBAAc;EAClE,MAAM,WAAW,cAAc,KAAA,IAAY,gCAAgC,wBAAwB;EACnG,MAAM,cAAc,cAAc,KAAA,IAAY,gCAAgC,mBAAmB;EACjG,oBAAoB,UAAU,UAAU;EACxC,kBAAkB,aAAa,aAAa;EAC5C,oCAAoC,UAAU,aAAa,UAAU;EACrE,IAAI,OAAO,WAAW,YAAY,MAAM,WAAW,QAAQ,uBAAuB;EAClF,MAAM,SAAS,YACd,YAAY;GACX,MAAM,QAAQ,UAAU,OAAO;GAC/B,IAAI,OAAO,UAAU,YAAY,CAACC,sBAAoB,KAAK,KAAK,QAAQ,GAAG,MAAM,WAAW,SAAS,iBAAiB;GACtH,MAAM,OAAO,SAASC,UAAQ,OAAO,SAAS,MAAM,IAAI;GACxD,MAAM,SAAS,MAAM,QAAQ,KAAA,GAAW,CAAC,CAAC;GAC1C,IAAI,OAAO,WAAW,YAAY,EAAE,UAAU,KAAK,SAAS,IAAI,MAAM,WAAW,SAAS,uBAAuB;GACjH,OAAO,OAAO,UAAU,OAAO,cAAc,MAAM;EACpD,SAAS,WAAW,QAAQ,sBAAsB,CAAC;EACpD,OAAO,OAAO,KAAK;CACpB,GAAGH,YAAU;AACd;;;ACCA,MAAMI,qBAA0B,WAAW,QAAQ,kBAAkB;AACrE,MAAMC,yBAA6B;CAClC,MAAMD,aAAW;AAClB;;;;;;;;;;;;;;;;;;;;;;AAuBA,SAAgB,mCACf,aACA,SACgC;CAChC,OAAO,YAAY;EAClB,MAAM,WAAW,gBAAgB,OAAO;EACxC,IAAI,CAAC,cAAc,WAAW,GAAG,MAAMA,aAAW;EAClD,MAAM,OAAO,UAAU,QAAQ,aAAa,QAAQ,QAAQC,gBAAc,CAAC;EAC3E,IAAI,SAAS,YAGZ,OAAO,eAFQ,UAAU,QAAQ,aAAa,UAAU,UAAUA,gBAAc,CAErD,GADR,UAAU,QAAQ,aAAa,cAAc,cAAcA,gBAAc,CACrD,GAAG,QAAQ;EAEnD,QAAQ,MAAR;GACC,KAAK;GACL,KAAK;GACL,KAAK;GACL,KAAK,sBACJ,OAAO,OAAsC;IAAE,SAAS;IAAa,QAAQ;GAAK,CAAC;GACpF,KAAK;GACL,KAAK,mBACJ,OAAO,OAAsC;IAAE,SAAS;IAAe,QAAQ;GAAK,CAAC;GACtF,KAAK;GACL,KAAK;GACL,KAAK,wBACJ,OAAO,OAAsC;IAAE,SAAS;IAAa,QAAQ;GAAK,CAAC;GACpF,SACC,MAAM,WAAW,QAAQ,qBAAqB;EAChD;CACD,GAAGD,YAAU;AACd;;AAGA,SAAS,gBAAgB,SAAmC;CAC3D,IAAI,CAAC,cAAc,OAAO,GAAG,MAAMA,aAAW;CAC9C,MAAM,MAAM,QAAQ,SAAS,OAAO,OAAOC,gBAAc;CACzD,MAAM,kBAAkB,UAAU,QAAQ,SAAS,mBAAmB,mBAAmBA,gBAAc,CAAC;CACxG,qBAAqB,iBAAiB,iBAAiB;CACvD,OAAO,OAAO;EAAE,OAAO,OAAO,GAAG;EAAG;CAAgB,CAAC;AACtD;AAEA,SAAS,eAAe,QAAiB,YAAqB,UAA0D;CACvH,IAAI,OAAO,WAAW,YAAY,CAACC,sBAAoB,MAAM,KAAK,SAAS,OAAO,SAAS,KAC1F,MAAM,WAAW,SAAS,qBAAqB;CAEhD,MAAM,aAAa;CACnB,MAAM,UAAU,WAAyE,OAAO,MAAM;CACtG,IAAI,SAAS,KAAK,OAAO,OAAO;EAAE,SAAS;EAAa,QAAQ;EAAY;CAAW,CAAC;CACxF,IAAI,SAAS,KAAK,OAAO,OAAO;EAAE,SAAS;EAAa,QAAQ;EAAY;CAAW,CAAC;CACxF,IAAI,SAAS,KAAK,OAAO,OAAO;EAAE,SAAS;EAAe,QAAQ;EAAY;CAAW,CAAC;CAC1F,IAAI,UAAU,KAAK,OAAO,OAAO;EAAE,SAAS;EAAa,QAAQ;EAAY;CAAW,CAAC;CACzF,QAAQ,QAAR;EACC,KAAK,KACJ,OAAO,OAAO;GAAE,SAAS;GAAa,QAAQ;GAAY;GAAY,sBAAsB;EAAK,CAAC;EACnG,KAAK,KACJ,OAAO,OAAO;GAAE,SAAS;GAAa,QAAQ;GAAY;GAAY,sBAAsB;EAAK,CAAC;EACnG,KAAK,KACJ,OAAO,OAAO;GAAE,SAAS;GAAa,QAAQ;GAAY;EAAW,CAAC;EACvE,KAAK,KACJ,OAAO,OAAO;GAAE,SAAS;GAAa,QAAQ;GAAY;EAAW,CAAC;EACvE,KAAK,KACJ,OAAO,OAAO;GAAE,SAAS;GAAa,QAAQ;GAAY;GAAY,cAAc,iBAAiB,YAAY,QAAQ;EAAE,CAAC;EAC7H,KAAK,KACJ,OAAO,OAAO;GAAE,SAAS;GAAe,QAAQ;GAAY;EAAW,CAAC;EACzE,SACC,OAAO,OAAO;GAAE,SAAS;GAAe,QAAQ;GAAY;EAAW,CAAC;CAC1E;AACD;AAEA,MAAM,cAAc;AACpB,MAAM,gBAAgB;;;;;;;;;;AAWtB,SAAgB,kBACf,OACA,SACqB;CACrB,OAAO,YAAY,iBAAiB,UAAU,KAAK,GAAG,gBAAgB,OAAO,CAAC,GAAGF,YAAU;AAC5F;AAEA,SAAS,iBAAiB,OAAgB,UAA+C;CACxF,IAAI,OAAO,UAAU,UAAU,OAAO,KAAA;CACtC,MAAM,UAAU,KAAK,KAAK;CAC1B,IAAI,YAAY,IAAI,OAAO,KAAA;CAC3B,IAAI;CACJ,IAAI,QAAQ,eAAe,OAAO,GACjC,UAAUG,oBAAkB,OAAO,IAAI;MACjC;EAGN,IAAI,CAAC,QAAQ,aAAa,OAAO,GAAG,OAAO,KAAA;EAC3C,MAAM,KAAK,UAAU,OAAO;EAC5B,IAAI,CAACC,iBAAe,EAAE,KAAK,CAACA,iBAAe,SAAS,KAAK,GAAG,OAAO,KAAA;EACnE,UAAU,KAAK,SAAS;CACzB;CACA,IAAI,YAAY,SAAS,OAAO,KAAA;CAChC,OAAOC,UAAQC,UAAQ,SAAS,CAAC,GAAG,SAAS,eAAe;AAC7D;;;AC/JA,MAAM,eAAgC,OAAO;CAAE,OAAO;CAAU,QAAQ;AAAS,CAAC;;AAQlF,MAAa,YAAkB,OAAO,UAAU;CAC/C,MAAM,gBAAgB,UAAU,aAAa,sBAAsB,oBAAoB,KAAK;AAC7F;;AAGA,MAAa,YAAkB,QAAQ,UAAU;CAChD,MAAM,gBAAgB,qBAAqB,KAAK;AACjD;AAEA,SAAS,SAAS,MAAwC;CACzD,QAAQ,OAAO,UAAU;EACxB,MAAM,gBAAgB,UAAU,aAAa,sBAAsB,MAAM,KAAK;CAC/E;AACD;;AAGA,MAAa,cAAc,SAAS,wBAAwB;;AAE5D,MAAa,WAAW,SAAS,qBAAqB;;AAGtD,SAAgB,cAAc,OAA4B;CACzD,aAAa,gBAAgB,qBAAqB,KAAK;AACxD;;;;;;;;;;;;;;;;;;;;;;AAuBA,SAAgB,wBACf,UACA,SACwB;CACxB,OAAO,YAAY,UAAU,UAAU,OAAO,GAAG,cAAc,UAAU,CAAC;AAC3E;;;;;;;;;;AAWA,SAAgB,4BAA4B,UAAyC;CACpF,OAAO,YAAY,sBAAsB,QAAQ,GAAG,cAAc,UAAU,CAAC;AAC9E;AAEA,SAAS,UAAU,UAAmB,SAAyC;CAG9E,IAAI,CAAC,cAAc,OAAO,GAAG,OAAO,SAAS,aAAa,SAAS;CACnE,MAAM,SAAS,QAAQ,SAAS,UAAU,UAAU,QAAQ;CAC5D,MAAM,WAAW,QAAQ,SAAS,SAAS,SAAS,QAAQ;CAC5D,MAAM,QAAQ,sBAAsB,QAAQ;CAC5C,MAAM,QAAQ,oBAAoB,QAAQ,MAAM,SAAS;CACzD,MAAM,QAAQ,cAAc,QAAQ;CACpC,MAAM,yBAAyB,MAAM,0BAA0B,gBAAgB,OAAO,sBAAsB;CAE5G,IAAI,UAAoC;CACxC,IAAI,QAA2BC;CAC/B,IAAI,SAAS,CAAC,2BAA2B,MAAM,UAAU,MAAM,QAAQ;EACtE,MAAM,SAAS,QAAQ,UAAoB,WAAW,WAAW,QAAQ;EACzE,IAAI,cAAc,MAAM,GAAG;GAC1B,MAAM,SAAS,SAA2B;GAC1C,IAAI,MAAM,QAAQ,cAAc,QAAQ,MAAM,QAAQ,aAAa,MAAM;GACzE,IAAI,MAAM,OAAO,cAAc,QAAQ,MAAM,OAAO,UAAU,MAAM;GACpE,IAAI,MAAM,QAAQ,UAAU,KAAK,QAAQ,MAAM,MAAM;GACrD,IAAI,MAAM,OAAO,QAAQ,KAAK,QAAQ,MAAM,KAAK;EAClD;CACD;CACA,OAAO,OAAO;EACb,SAAS,MAAM;EACf,UAAU,MAAM;EAChB,SAAS,MAAM;EACf;EACA;EACA,kBAAkB,YAAY;EAC9B;EACA;CACD,CAAC;AACF;AAEA,MAAMA,UAA2B,OAAO,CAAC,CAAC;;;;;;AAgB1C,SAAgB,oBAAoB,QAAiB,WAAoD;CACxG,IAAI,WAAW,QAAQ,WAAW,KAAA,KAAa,OAAO,WAAW,UAAU,OAAO,KAAA;CAClF,IAAI,CAAC,cAAc,MAAM,GAAG,OAAO,SAAS,aAAa,QAAQ;CACjE,MAAM,QAAQ,QAAQ,QAAQ,WAAW,UAAU,QAAQ;CAC3D,IAAI,UAAU,QAAQ,UAAU,KAAA,KAAa,OAAO,UAAU,UAAU,OAAO,KAAA;CAC/E,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO,SAAS,aAAa,QAAQ;CAGhE,OAAO,OAAO;EACb,QAHc,WAAW,QAAQ,OAAO,UAAU,UAAU,QAAQ,GAAG,UAAU,QAGjF;EACA,OAHa,WAAW,QAAQ,OAAO,SAAS,UAAU,QAAQ,GAAG,UAAU,QAG/E;EACA,mBAAmB,QAAQ,OAAO,qBAAqB,UAAU,QAAQ,MAAM;EAC/E,QAAQ,QAAQ,OAAO,UAAU,UAAU,QAAQ,MAAM;CAC1D,CAAC;AACF;;;;;;;;AASA,SAAgB,cAAc,QAAgB,OAA0B,MAAY,QAAgD;CACnI,KAAK,IAAI,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS,GAAG;EACrD,MAAM,OAAO,MAAM;EACnB,IAAI,OAAO,QAAQ,IAAI,GAAG;EAC1B,MAAM,QAAQ,QAAQ,QAAQ,MAAM,MAAM,IAAI;EAC9C,IAAI,UAAU,KAAA,GAAW;EACzB,OAAO,QAAQ,MAAM,aAAa,OAAO,MAAM,IAAI,CAAC;CACrD;AACD;;AAGA,SAAgB,KAAK,QAA0C,OAA6C;CAC3G,MAAM,SAAS,SAA2B;CAC1C,KAAK,IAAI,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS,GAAG;EACrD,MAAM,OAAO,MAAM;EACnB,IAAI,OAAO,QAAQ,IAAI,KAAK,CAAC,OAAO,QAAQ,IAAI,GAAG,OAAO,QAAQ,MAAM,OAAO,KAAK;CACrF;CACA,OAAO,OAAO,MAAM;AACrB;AAEA,MAAM,gBAAgB,OAAO;CAC5B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACD,CAAU;;;;;AAMV,SAAgB,sBAAsB,QAAuC;CAC5E,IAAI,WAAW,QAAQ,OAAO,WAAW,UAAU,OAAO,SAAS,aAAa,UAAU;CAC1F,IAAI,CAAC,cAAc,MAAM,GAAG,OAAO,SAAS,aAAa,UAAU;CACnE,MAAM,MAAM,SAAkB;CAC9B,KAAK,IAAI,QAAQ,GAAG,QAAQ,cAAc,QAAQ,SAAS,GAAG;EAC7D,MAAM,MAAM,cAAc;EAC1B,OAAO,KAAK,KAAK,QAAQ,QAAQ,KAAK,KAAK,QAAQ,CAAC;CACrD;CACA,MAAM,iBAAiB,IAAI;CAC3B,IAAI,mBAAmB,YAAY,mBAAmB,cAAc,mBAAmB,kBAAkB,mBAAmB,cAC3H,OAAO,SAAS,YAAY,uBAAuB;CAEpD,MAAM,cAAc,IAAI;CACxB,IAAI,gBAAgB,KAAA,KAAa,gBAAgB,uBAAuB,gBAAgB,gCACvF,OAAO,SAAS,YAAY,aAAa;CAE1C,OAAO,OAA6B;EACnC,SAAS,cAAc,IAAI,SAAS,SAAS;EAC7C,WAAW,cAAc,IAAI,WAAW,WAAW;EACnD,oBAAoB,eAAe,IAAI,oBAAoB,oBAAoB;EAC/E,UAAU,cAAc,IAAI,UAAU,UAAU;EAChD,SAAS,cAAc,IAAI,SAAS,SAAS;EAC7C,aAAa,cAAc,IAAI,aAAa,aAAa;EACzD,WAAW,cAAc,IAAI,WAAW,WAAW;EACnD,UAAU,eAAe,IAAI,UAAU,UAAU;EACjD,oBAAoB,eAAe,IAAI,oBAAoB,oBAAoB;EAC/E,eAAe,cAAc,IAAI,eAAe,eAAe;EAC/D,aAAa,eAAe,IAAI,aAAa,aAAa;EAC1D,YAAY,eAAe,IAAI,YAAY,YAAY;EACvD,YAAY,eAAe,IAAI,YAAY,YAAY;EACvD,uBAAuB,cAAc,IAAI,uBAAuB,uBAAuB;EACvF,uBAAuB;EACvB;CACD,CAAC;AACF;AAEA,SAAS,cAAc,KAA+B;CACrD,IAAI,QAAQ,KAAA,GAAW,OAAO;CAC9B,IAAI,CAAC,cAAc,GAAG,GAAG,OAAO,SAAS,aAAa,OAAO;CAC7D,MAAM,QAAQ,QAAQ,KAAK,SAAS,SAAS,QAAQ;CACrD,IAAI,UAAU,WAAW;EACxB,MAAM,UAAU,QAAQ,KAAK,WAAW,WAAW,QAAQ;EAC3D,MAAM,YAAY,QAAQ,KAAK,aAAa,aAAa,QAAQ;EACjE,OAAO,OAAwB;GAC9B,OAAO;GACP,SAAS,cAAc,SAAS,SAAS;GACzC,WAAW,cAAc,WAAW,WAAW;EAChD,CAAC;CACF;CACA,MAAM,SAAS,QAAQ,KAAK,UAAU,SAAS,QAAQ;CACvD,IAAI,UAAU,YAAa,WAAW,gBAAgB,WAAW,UAAW,OAAO,SAAS,YAAY,OAAO;CAC/G,OAAO,OAAwB;EAAE,OAAO;EAAU;CAAO,CAAC;AAC3D;;AAGA,SAAgB,cAAc,OAAgB,OAAuB;CACpE,IAAI,OAAO,UAAU,YAAY,MAAM,WAAW,GAAG,OAAO,SAAS,YAAY,KAAK;CACtF,OAAO;AACR;AAEA,SAAS,eAAe,OAAgB,OAAmC;CAC1E,OAAO,UAAU,KAAA,IAAY,KAAA,IAAY,cAAc,OAAO,KAAK;AACpE;AAEA,SAAS,eAAe,OAAgB,OAAuB;CAC9D,IAAI,OAAO,UAAU,YAAY,CAACC,sBAAoB,KAAK,GAAG,OAAO,SAAS,YAAY,KAAK;CAC/F,OAAO;AACR;;AAGA,SAAS,eAAe,OAAgB,OAAuB;CAC9D,MAAM,MAAM,oBAAoB,KAAK;CACrC,IAAI,QAAQ,KAAA,GAAW,OAAO,SAAS,YAAY,KAAK;CACxD,OAAO;AACR;;;;ACpRA,MAAa,6BAA6B;;;;;;;;;;;;;;;;AA4E1C,SAAgB,4BAA4B,OAA2D;CACtG,OAAO,YAAY;EAClB,MAAM,SAAS,aAAa,eAAe,OAAO,KAAK,CAAC;EACxD,OAAO,OAAO;GAAE,SAAS,OAAO;GAAS,kBAAkB,OAAO;GAAkB,UAAU,OAAO;EAAS,CAAC;CAChH,GAAG,cAAc,KAAK,CAAC;AACxB;AAEA,MAAM,QAA2B,OAAO,CAAC,CAAC;AAE1C,SAAS,eAAe,OAAgB,gBAAyC;CAChF,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO,SAAS,aAAa,OAAO;CAC/D,MAAM,MAAM,QAAQ,OAAO,OAAO,OAAO,QAAQ;CACjD,MAAM,eAAe,QAAQ,OAAO,gBAAgB,gBAAgB,QAAQ;CAC5E,MAAM,SAAS,QAAQ,OAAO,UAAU,UAAU,QAAQ;CAC1D,MAAM,iBAAiB,QAAQ,OAAO,kBAAkB,kBAAkB,QAAQ;CAClF,MAAM,gBAAgB,iBAAiB,QAAQ,OAAO,cAAc,cAAc,QAAQ,IAAI,KAAA;CAE9F,IAAI,CAAC,cAAc,GAAG,GAAG,OAAO,SAAS,aAAa,KAAK;CAC3D,MAAM,QAAQ,sBAAsB,QAAQ,KAAK,SAAS,SAAS,QAAQ,CAAC;CAC5E,IAAI,CAAC,cAAc,YAAY,GAAG,OAAO,SAAS,aAAa,cAAc;CAC7E,MAAM,iBAAiB,cAAc,QAAQ,cAAc,kBAAkB,kBAAkB,QAAQ,GAAG,gBAAgB;CAC1H,MAAM,WAAW,cAAc,QAAQ,cAAc,YAAY,YAAY,QAAQ,GAAG,UAAU;CAClG,MAAM,UAAU,cAAc,QAAQ,cAAc,WAAW,WAAW,QAAQ,GAAG,SAAS;CAC9F,IAAI,aAAa,MAAM,YAAY,YAAY,MAAM,SAAS,MAAM,gBAAgB,kBAAkB,cAAc;CACpH,MAAM,aAAa,iBAAiB,cAAc,eAAe,YAAY,IAAI,KAAA;CAEjF,MAAM,QAAQ,oBAAoB,QAAQ,MAAM,SAAS;CACzD,IAAI,mBAAmB;CACvB,IAAI,mBAAmB;CACvB,IAAI;CACJ,IAAI,QAAQ;CACZ,IAAI,OAAO,QAAQ;EAClB,mBAAmB,QAAQ,KAAK,oBAAoB,oBAAoB,QAAQ,MAAM;EACtF,MAAM,gBAAgB,QAAQ,KAAK,WAAW,WAAW,QAAQ;EACjE,mBAAmB,cAAc,aAAa;EAC9C,MAAM,aAAa,MAAM,0BAA0B,gBAAgB,CAAC,MAAM;EAC1E,IAAI,oBAAoB,oBAAoB,CAAC,YAAY;GACxD,MAAM,SAAS,SAA2B;GAC1C,cAAc,eAAyB,MAAM,QAAQ,aAAa,MAAM;GACxE,UAAU,KAAK,QAAQ,MAAM,MAAM;GACnC,IAAI,MAAM,UAAU,MAAM,OAAO;IAChC,MAAM,cAAc,QAAQ,KAAK,SAAS,SAAS,QAAQ;IAC3D,IAAI,cAAc,WAAW,GAAG;KAC/B,MAAM,aAAa,SAA2B;KAC9C,cAAc,aAAa,MAAM,OAAO,UAAU,UAAU;KAC5D,QAAQ,KAAK,YAAY,MAAM,KAAK;IACrC;GACD;EACD;CACD;CACA,OAAO,OAAuB;EAC7B;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,gBAAgB,OAAO,mBAAmB,aAAc,iBAA2C,KAAA;CACpG,CAAC;AACF;;AAGA,SAAS,aAAa,UAAkC;CACvD,MAAM,EAAE,OAAO,gBAAgB,UAAU;CACzC,MAAM,gBAAgB,WAA6B,OAAO;EAAE;EAAO;EAAgB,SAAS;EAAM,kBAAkB;EAAO,UAAU;CAAO,CAAC;CAC7I,IAAI,CAAC,SAAS,CAAC,MAAM,QAAQ,OAAO,aAAa,oBAAoB;CACrE,IAAI,CAAC,SAAS,oBAAoB,CAAC,SAAS,kBAAkB,OAAO,aAAa,eAAe;CACjG,IAAI,MAAM,0BAA0B,gBAAgB,CAAC,MAAM,mBAAmB,OAAO,aAAa,YAAY;CAC9G,IAAI,MAAM,QAAQ;EACjB,MAAM,YAAY,SAAS;EAC3B,IAAI,cAAc,KAAA,GAAW,OAAO,aAAa,yBAAyB;EAC1E,MAAM,aAAa,OAA0B;GAC5C;GACA,UAAU,SAAS;GACnB,SAAS,SAAS;GAClB;GACA,OAAO,SAAS;EACjB,CAAC;EACD,IAAI;EACJ,IAAI;GACH,WAAW,MAAM,WAAW,KAAA,GAAW,CAAC,UAAU,CAAC;EACpD,QAAQ;GAEP,OAAO,aAAa,wBAAwB;EAC7C;EACA,IAAI,aAAa,MAAM,OAAO,aAAa,uBAAuB;CACnE;CACA,OAAO,OAAO;EAAE;EAAO;EAAgB,SAAS,SAAS,WAAW;EAAO,kBAAkB;CAAK,CAAC;AACpG;;;;;;;;;;AAuBA,SAAgB,4BAA4B,OAAgD;CAC3F,OAAO,YAAY;EAClB,MAAM,WAAW,eAAe,OAAO,IAAI;EAC3C,MAAM,YAAY,aAAa,QAAQ;EACvC,MAAM,EAAE,UAAU;EAClB,MAAM,OAAO,OAA8B;GAC1C,QAAQ;GACR,SAAS,MAAM;GACf,MAAM,MAAM;GACZ,UAAU,MAAM;GAChB,SAAS,MAAM;GACf,eAAe,MAAM;GACrB,YAAY,MAAM;GAClB,OAAO,OAAuC;IAC7C,MAAM,MAAM;IACZ,eAAe,MAAM;IACrB,aAAa,MAAM;IACnB,WAAW,MAAM;IACjB,UAAU,MAAM;IAChB,YAAY,MAAM;IAClB,oBAAoB,MAAM;IAC1B,aAAa,MAAM,gBAAgB,iCAAiC,MAAM,cAAc,KAAA;IACxF,SAAS,UAAU;IACnB,kBAAkB,UAAU;GAC7B,CAAC;GACD,UAAU,OAAO;IAChB,YAAY,SAAS;IACrB,gBAAgB,UAAU;GAC3B,CAAC;EACF,CAAC;EACD,OAAO,OAAO;GAAE;GAAM,SAAS,cAAc,IAAI;GAAG,UAAU,UAAU;EAAS,CAAC;CACnF,GAAG,cAAc,KAAK,CAAC;AACxB;;;;ACrPA,MAAa,kBAAkB,OAAO,OAAO;CAC5C,WAAW;CACX,WAAW;CACX,SAAS;CACT,YAAY;CACZ,SAAS;CACT,aAAa;AACd,CAAU;AAEV,MAAM,eAAe;;;;;;;AAQrB,MAAM,iBAAiB;AAEvB,MAAMC,qBAA0B,WAAW,QAAQ,kBAAkB;AACrE,MAAMC,yBAA6B;CAClC,MAAMD,aAAW;AAClB;;;;;;;;;AAUA,SAAgB,uBAAuB,kBAA0B,SAAyB;CACzF,OAAO,YAAY;EAClB,MAAM,YAAY,UAAU,gBAAgB;EAC5C,MAAM,OAAO,UAAU,OAAO;EAC9B,uBAAuB,SAAS;EAChC,IAAI,OAAO,SAAS,UAAU,MAAM,WAAW,QAAQ,qBAAqB;EAC5E,OAAO,GAAG,UAAU,GAAG;CACxB,GAAGA,YAAU;AACd;;;;;;;;;;;;;AAyBA,SAAgB,2BAA2B,OAAoE;CAC9G,OAAO,YAAY;EAClB,IAAI,CAAC,cAAc,KAAK,GAAG,MAAMA,aAAW;EAC5C,MAAM,YAAY,UAAU,QAAQ,OAAO,aAAa,aAAaC,gBAAc,CAAC;EACpF,MAAM,mBAAmB,UAAU,QAAQ,OAAO,oBAAoB,oBAAoBA,gBAAc,CAAC;EACzG,MAAM,UAAU,UAAU,QAAQ,OAAO,WAAW,WAAWA,gBAAc,CAAC;EAC9E,MAAM,aAAa,UAAU,QAAQ,OAAO,cAAc,cAAcA,gBAAc,CAAC;EACvF,MAAM,UAAU,UAAU,QAAQ,OAAO,WAAW,WAAWA,gBAAc,CAAC;EAE9E,IAAI,OAAO,cAAc,YAAY,CAAC,QAAQ,cAAc,SAAS,GAAG,MAAM,WAAW,QAAQ,qBAAqB;EACtH,uBAAuB,gBAAgB;EACvC,IAAI,OAAO,YAAY,YAAY,CAAC,QAAQ,gBAAgB,OAAO,GAAG,MAAM,WAAW,QAAQ,kBAAkB;EACjH,IAAI,OAAO,eAAe,YAAY,CAAC,QAAQ,gBAAgB,UAAU,GAAG,MAAM,WAAW,QAAQ,qBAAqB;EAC1H,IAAI,OAAO,YAAY,YAAY,CAACC,sBAAoB,OAAO,KAAK,UAAU,GAAG,MAAM,WAAW,SAAS,iBAAiB;EAC5H,OAAO,OAA+B;IACpC,gBAAgB,cAAc;IAC9B,gBAAgB,YAAY;IAC5B,gBAAgB,YAAY,GAAG;IAC/B,gBAAgB,UAAU;IAC1B,gBAAgB,aAAa;IAC7B,gBAAgB,UAAU,GAAG;EAC/B,CAAC;CACF,GAAGF,YAAU;AACd;AAEA,SAAS,uBAAuB,OAAyC;CACxE,IAAI,OAAO,UAAU,YAAY,CAACE,sBAAoB,KAAK,KAAK,QAAQ,GAAG,MAAM,WAAW,SAAS,mBAAmB;AACzH;;;AC/EA,MAAM,mBAAmB,OAAO,UAAU;AAC1C,MAAM,gBAAgB,OAAO,UAAU;AACvC,MAAMC,gBAAc,OAAO,UAAU;AACrC,MAAM,cAAc,OAAO,UAAU;;AAGrC,MAAM,qBAAqB;;AAE3B,MAAM,kBAAkB;AAExB,MAAM,aAAa;;AAEnB,MAAM,cAAc,IAAI,OAAO,IAAI,WAAW,QAAQ,WAAW,MAAM;AACvE,MAAM,YAAY;AAQlB,SAAS,UAAU,GAAW,GAAW,GAAW,GAAW,QAA2B;CACzF,OAAO,OAAO;EAAE,OAAS,KAAK,KAAO,KAAK,KAAO,KAAK,IAAK,OAAO;EAAI;CAAO,CAAC;AAC/E;;;;;;;;;AAUA,MAAM,sBAA4C,OAAO;CACxD,UAAU,GAAG,GAAG,GAAG,GAAG,CAAC;CACvB,UAAU,IAAI,GAAG,GAAG,GAAG,CAAC;CACxB,UAAU,KAAK,IAAI,GAAG,GAAG,EAAE;CAC3B,UAAU,KAAK,GAAG,GAAG,GAAG,CAAC;CACzB,UAAU,KAAK,KAAK,GAAG,GAAG,EAAE;CAC5B,UAAU,KAAK,IAAI,GAAG,GAAG,EAAE;CAC3B,UAAU,KAAK,GAAG,GAAG,GAAG,EAAE;CAC1B,UAAU,KAAK,GAAG,GAAG,GAAG,EAAE;CAC1B,UAAU,KAAK,IAAI,IAAI,GAAG,EAAE;CAC5B,UAAU,KAAK,KAAK,GAAG,GAAG,EAAE;CAC5B,UAAU,KAAK,IAAI,GAAG,GAAG,EAAE;CAC3B,UAAU,KAAK,IAAI,KAAK,GAAG,EAAE;CAC7B,UAAU,KAAK,GAAG,KAAK,GAAG,EAAE;CAC5B,UAAU,KAAK,GAAG,GAAG,GAAG,CAAC;CACzB,UAAU,KAAK,GAAG,GAAG,GAAG,CAAC;AAC1B,CAAC;AAED,SAAS,YAAY,OAAe,OAA2B;CAE9D,QAAS,SADI,MAAM,WAAW,IAAI,IAAK,cAAe,KAAK,MAAM,WAAa,QACnD,MAAO,MAAM;AACzC;;AAGA,SAAS,kBAAkB,OAAwB;CAClD,KAAK,IAAI,QAAQ,GAAG,QAAQ,oBAAoB,QAAQ,SAAS,GAChE,IAAI,YAAY,OAAO,oBAAoB,MAAO,GAAG,OAAO;CAE7D,OAAO;AACR;;AAGA,SAAS,UAAU,MAAkC;CACpD,IAAI,CAAC,QAAQ,aAAa,IAAI,GAAG,OAAO,KAAA;CACxC,MAAM,QAAQ,MAAM,aAAa,MAAM,CAAC,GAAG,CAAC;CAC5C,IAAI,QAAQ;CACZ,KAAK,IAAI,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,QAAQ,MAAM,QAAQ,MAAM,MAAO;CACtF,OAAO,UAAU;AAClB;AAEA,SAAS,QAAQ,MAAsB;CACtC,IAAI,QAAQ;CACZ,KAAK,IAAI,QAAQ,GAAG,QAAQ,KAAK,QAAQ,SAAS,GAAG,QAAQ,QAAQ,MAAO,MAAM,kBAAkB,MAAM,CAAC,KAAK,CAAC,IAAe;CAChI,OAAO;AACR;AAEA,SAAS,IAAI,MAAsB;CAClC,IAAI,QAAQ;CACZ,KAAK,IAAI,QAAQ,GAAG,QAAQ,KAAK,QAAQ,SAAS,GAAG;EACpD,MAAM,OAAO,MAAM,kBAAkB,MAAM,CAAC,KAAK,CAAC;EAClD,MAAM,QAAQ,QAAQ,KAAK,OAAO,KAAK,QAAQ,KAAK,OAAO,KAAK,OAAO;EACvE,QAAQ,QAAQ,KAAK;CACtB;CACA,OAAO;AACR;;AAGA,SAAS,gBAAgB,MAAc,UAAyC;CAC/E,MAAM,QAAkB,CAAC;CACzB,IAAI,SAAS,IAAI,OAAO;CACxB,MAAM,SAAS,MAAM,aAAa,MAAM,CAAC,GAAG,CAAC;CAC7C,KAAK,IAAI,QAAQ,GAAG,QAAQ,OAAO,QAAQ,SAAS,GAAG;EACtD,MAAM,QAAQ,OAAO;EACrB,IAAI,YAAY,UAAU,OAAO,SAAS,KAAM,MAAM,eAAe,OAAO,CAAC,GAAG,CAAC,MAAiB,IAAI;GACrG,MAAM,KAAK,UAAU,KAAK;GAC1B,IAAI,OAAO,KAAA,GAAW,OAAO,KAAA;GAC7B,MAAM,MAAM,UAAU,OAAO;GAC7B,MAAM,MAAM,UAAU,KAAK;GAC3B;EACD;EACA,IAAI,CAAC,QAAQ,WAAW,KAAK,GAAG,OAAO,KAAA;EACvC,MAAM,MAAM,UAAU,IAAI,KAAK;CAChC;CACA,OAAO;AACR;;AAGA,SAAS,UAAU,MAAoC;CACtD,MAAM,MAAM,MAAM,eAAe,MAAM,CAAC,IAAI,CAAC;CAC7C,IAAI,QAAQ,IAAI;EACf,MAAM,QAAQ,gBAAgB,MAAM,IAAI;EACxC,OAAO,UAAU,KAAA,KAAa,MAAM,WAAW,IAAI,QAAQ,KAAA;CAC5D;CACA,IAAK,MAAM,eAAe,MAAM,CAAC,MAAM,MAAM,CAAC,CAAC,MAAiB,IAAI,OAAO,KAAA;CAC3E,MAAM,OAAO,gBAAgB,MAAMA,eAAa,MAAM,CAAC,GAAG,GAAG,CAAC,GAAa,KAAK;CAChF,MAAM,OAAO,gBAAgB,MAAMA,eAAa,MAAM,CAAC,MAAM,CAAC,CAAC,GAAa,IAAI;CAChF,IAAI,SAAS,KAAA,KAAa,SAAS,KAAA,KAAa,KAAK,SAAS,KAAK,SAAS,GAAG,OAAO,KAAA;CACtF,MAAM,QAAkB,CAAC;CACzB,KAAK,IAAI,QAAQ,GAAG,QAAQ,KAAK,QAAQ,SAAS,GAAG,MAAM,MAAM,UAAU,KAAK;CAChF,KAAK,IAAI,QAAQ,KAAK,SAAS,KAAK,QAAQ,QAAQ,GAAG,SAAS,GAAG,MAAM,MAAM,UAAU;CACzF,KAAK,IAAI,QAAQ,GAAG,QAAQ,KAAK,QAAQ,SAAS,GAAG,MAAM,MAAM,UAAU,KAAK;CAChF,OAAO;AACR;;AAGA,SAAS,aAAa,MAAc,KAAqB;CACxD,QAAS,QAAQ,KAAM,SAAS;AACjC;;AAGA,SAAS,kBAAkB,GAA+B;CAMzD,IAAI,EAAE,OAAO,OAAU,EAAE,OAAO,SAAU,EAAE,OAAO,KAAK,EAAE,OAAO,KAAK,EAAE,OAAO,KAAK,EAAE,OAAO,GAC5F,OAAO,kBAAkB,aAAa,EAAE,IAAK,EAAE,EAAG,CAAC;CAGpD,KAAK,EAAE,KAAM,WAAY,MAAQ,OAAO;CACxC,IAAI,EAAE,OAAO,SAAW,EAAE,KAAM,WAAY,GAAG;EAM9C,IAAI,EAAE,OAAO,GAAG,OAAO;EACvB,MAAM,SAAS,aAAa,EAAE,IAAK,EAAE,EAAG;EACxC,MAAM,SAAU,CAAC,aAAa,EAAE,IAAK,EAAE,EAAG,MAAO;EACjD,OAAO,kBAAkB,MAAM,KAAK,kBAAkB,MAAM;CAC7D;CACA,IAAI,EAAE,OAAO,QAAU,EAAE,OAAO,MAAQ,OAAO;CAC/C,IAAI,EAAE,OAAO,UAAW,EAAE,KAAM,WAAY,GAAG,OAAO;CAEtD,IAAI,EAAE,OAAO,MAAQ,OAAO,kBAAkB,aAAa,EAAE,IAAK,EAAE,EAAG,CAAC;CACxE,OAAO;AACR;;AAGA,SAAS,WAAW,GAA8B;CACjD,IAAI,YAAY;CAChB,IAAI,aAAa;CACjB,KAAK,IAAI,QAAQ,GAAG,QAAQ,IAAK;EAChC,IAAI,EAAE,WAAW,GAAG;GACnB,SAAS;GACT;EACD;EACA,IAAI,MAAM;EACV,OAAO,MAAM,KAAK,EAAE,SAAS,GAAG,OAAO;EACvC,IAAI,MAAM,QAAQ,YAAY;GAC7B,YAAY;GACZ,aAAa,MAAM;EACpB;EACA,QAAQ;CACT;CACA,IAAI,aAAa,GAAG,YAAY;CAChC,IAAI,OAAO;CACX,KAAK,IAAI,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG;EAC1C,IAAI,UAAU,WAAW;GACxB,QAAQ;GACR,SAAS,aAAa;GACtB;EACD;EACA,IAAI,SAAS,MAAM,CAAC,eAAe,IAAI,GAAG,QAAQ;EAClD,QAAQ,QAAQ,EAAE,MAAO;CAC1B;CACA,OAAO;AACR;AAEA,SAAS,eAAe,MAAuB;CAC9C,OAAO,KAAK,UAAU,KAAM,MAAMA,eAAa,MAAM,CAAC,EAAE,CAAC,MAAiB;AAC3E;AAEA,MAAM,aAAa;AAEnB,SAAS,QAAQ,OAAuB;CACvC,IAAI,UAAU,GAAG,OAAO;CACxB,IAAI,OAAO;CACX,KAAK,IAAI,OAAO,OAAO,OAAO,GAAG,QAAQ,OAAQ,OAAO,MAAO,IAAI,OAAO,WAAW,OAAO,MAAO;CACnG,OAAO;AACR;AAEA,SAAS,WAAW,OAAuB;CAC1C,OAAO,GAAG,UAAU,GAAG,GAAI,UAAU,KAAM,IAAK,GAAI,UAAU,IAAK,IAAK,GAAG,QAAQ;AACpF;AAaA,MAAM,gBAAuC,OAAO;CAAE,MAAM;CAAc,QAAQ;AAAE,CAAC;AACrF,MAAM,gBAAuC,OAAO;CAAE,MAAM;CAAc,QAAQ;AAAE,CAAC;AACrF,MAAM,YAAmC,OAAO,EAAE,MAAM,YAAY,CAAC;;AAGrE,SAAgB,gBAAgB,MAAsC;CACrE,IAAI,OAAO,SAAS,YAAY,KAAK,WAAW,KAAK,KAAK,SAAS,iBAAiB,OAAO;CAC3F,MAAM,OAAO,MAAM,eAAe,MAAM,CAAC,GAAG,CAAC;CAC7C,IAAI,SAAS,IAAI,OAAO,UAAU,MAAMA,eAAa,MAAM,CAAC,GAAG,IAAI,CAAC,CAAW,MAAM,KAAA,IAAY,YAAY;CAC7G,IAAI,KAAK,SAAS,oBAAoB,OAAO;CAC7C,MAAM,KAAK,UAAU,IAAI;CACzB,IAAI,OAAO,KAAA,GACV,OAAO,kBAAkB,EAAE,IAAI,OAAO;EAAE,MAAM;EAAU,SAAS,WAAW,EAAE;EAAG,QAAQ;CAAE,CAAC,IAAI;CAEjG,MAAM,KAAK,UAAU,IAAI;CACzB,IAAI,OAAO,KAAA,GAAW,OAAO;CAC7B,OAAO,kBAAkB,EAAE,IAAI,OAAO;EAAE,MAAM;EAAU,SAAS,WAAW,EAAE;EAAG,QAAQ;CAAE,CAAC,IAAI;AACjG;;AAGA,SAAgB,cAAc,MAAuB;CACpD,OAAO,QAAQ,aAAa,IAAI;AACjC;;;;;;;;;;;AAYA,SAAgB,uBAAuB,SAA0B;CAChE,OAAO,gBAAgB,OAAO,CAAC,CAAC,SAAS;AAC1C;;;ACtQA,MAAMC,oCAAkC,QAAQ;AAChD,MAAMC,kBAAgB,OAAO,gBAAgB,aAAaD,kCAAgC,YAAY,WAAW,SAAS,CAAC,EAAE,MAAM,KAAA;AACnI,MAAM,iBAAiB,OAAO,gBAAgB,aAAa,YAAY,UAAU,mBAAmB,KAAA;AACpG,MAAM,oBAAoB,OAAO,gBAAgB,aAAa,YAAY,UAAU,sBAAsB,KAAA;AAC1G,MAAME,aAAW;AACjB,MAAMC,eAAa;AACnB,MAAM,UAAU,KAAK;AACrB,MAAM,UAAU,KAAK;AACrB,MAAM,UAAU,KAAK;AAErB,MAAMC,qBAA0B,WAAW,QAAQ,kBAAkB;AACrE,MAAMC,yBAA6B;CAClC,MAAMD,aAAW;AAClB;;;;;;AAaA,SAAgB,eAAe,SAA8B;CAC5D,IAAI,YAAY,QAAQ,OAAO,YAAY,UAAU,MAAMA,aAAW;CACtE,MAAM,aAAa,OAAO,QAAQ,SAAS,YAAY,YAAYC,gBAAc,CAAC;CAClF,IAAI,EAAE,eAAe,eAAe,eAAe,YAAY,eAAe,WAAW,MAAMD,aAAW;CAC1G,MAAM,SAAS,QAAQ,SAAS,UAAU,UAAUC,gBAAc;CAClE,IAAI,WAAW,QAAQ,OAAO,WAAW,UAAU,MAAMD,aAAW;CACpE,IAAI;EACH,UAAU,MAAqB;CAChC,QAAQ;EACP,MAAMA,aAAW;CAClB;CACA,OAAO;EAAE;EAAoB;CAAsB;AACpD;;;;;AAMA,SAAgB,UAAU,QAA8B;CACvD,IAAIH,oBAAkB,KAAA,GAAW,MAAMG,aAAW;CAClD,OAAO,MAAMH,iBAAe,QAAQ,CAAC,CAAC,MAAM;AAC7C;;AAGA,SAAgB,QAAQ,QAAqB,UAAkC;CAC9E,IAAI,mBAAmB,KAAA,KAAa,sBAAsB,KAAA,GAAW,MAAMG,aAAW;CACtF,MAAM,gBAAgB,QAAQ;EAAC;EAAS;EAAU,EAAE,MAAM,KAAK;CAAC,CAAC;CACjE,aAAa;EACZ,MAAM,mBAAmB,QAAQ,CAAC,SAAS,QAAQ,CAAC;CACrD;AACD;;AASA,SAAgB,qBAAqB,OAA+B;CACnE,IAAI,UAAU,KAAA,GAAW,OAAO;EAAE,QAAQ,KAAA;EAAW,KAAK,KAAA;CAAU;CACpE,IAAI,UAAU,QAAQ,OAAO,UAAU,UAAU,MAAMA,aAAW;CAClE,MAAM,MAAO,MAAgC;CAC7C,IAAI,OAAO,QAAQ,YAAY,MAAMA,aAAW;CAChD,OAAO;EAAE,QAAQ;EAAY;CAAqC;AACnE;;AAGA,SAAgB,WAAW,OAA8B;CACxD,IAAI,MAAM,QAAQ,KAAA,GAAW,OAAO,QAAQ;CAC5C,IAAI;EACH,MAAM,KAAK,OAAO,MAAM,MAAM,KAAK,MAAM,QAAQ,CAAC,CAAC,CAAC;EACpD,OAAO,OAAO,YAAY,OAAO,YAAY,MAAM;CACpD,QAAQ;EACP,OAAO;CACR;AACD;;;;;;AAOA,SAAgB,WAAW,IAAY,MAA8B;CACpE,MAAM,SAASF,WAAS,MAAM,QAAQ,GAAG,QAAQ,IAAI,oBAAoB,CAAC,CAAC;CAC3E,aAAa;EACZ,aAAW,MAAM;CAClB;AACD;;;;ACrFA,MAAa,qCAAqC;;AAElD,MAAa,oCAAoC;;AAEjD,MAAa,oCAAoC;AAEjD,MAAM,iBAAiB;AACvB,MAAM,aAAa,SAA0C;CAC5D,MAAM,SAAS,QAAQ,yBAAyB,IAAI,WAAW,IAAI,CAAC,EAAE;CACtE,IAAI,WAAW,KAAA,GAAW,MAAM,IAAI,UAAU,iBAAiB,KAAK,qBAAqB;CACzF,OAAO;AACR;AACA,MAAM,cAAc,UAAU,UAAU;AACxC,MAAM,cAAc,UAAU,UAAU;AACxC,MAAM,cAAc,UAAU,UAAU;AACxC,MAAM,UAAU,UAAU,MAAM;AAChC,MAAM,cAAc,UAAU,UAAU;AACxC,MAAM,cAAc,UAAU,UAAU;AACxC,MAAM,YAAY,UAAU,QAAQ;AACpC,MAAM,cAAc,OAAO,UAAU;AACrC,MAAM,iBAAiB,OAAO,UAAU;AACxC,MAAM,qBAAqB;AAC3B,MAAM,cAAc,QAAQ,UAAU;AACtC,MAAM,6BAA6B;AACnC,MAAM,uBAAuB,gBAAgB,UAAU;AACvD,MAAM,wBAAwB,QAAQ,yBAAyB,gBAAgB,WAAW,QAAQ,CAAC,CAAE;AACrG,MAAM,kBAAkB;;AAGxB,MAAM,WAAW;;;;;;;AAOjB,MAAM,aAAa;AAenB,MAAM,cAA0C,OAAO;CAAE,IAAI;CAAO,MAAM;AAAc,CAAC;AACzF,MAAM,cAA0C,OAAO;CAAE,IAAI;CAAO,MAAM;AAAkB,CAAC;;;;;;;;;;;;;;;;AAiB7F,SAAgB,2BAA2B,KAAyC;CACnF,OAAO,oBAAoB,KAAK,KAAK;AACtC;;;;;;;AAQA,SAAgB,oBAAoB,KAAc,gBAAqD;CACtG,IAAI;EACH,OAAO,SAAS,UAAU,GAAG,GAAG,cAAc;CAC/C,QAAQ;EACP,OAAO;CACR;AACD;AAEA,SAAS,SAAS,MAAe,gBAAqD;CACrF,IAAI,OAAO,SAAS,YAAY,KAAK,WAAW,KAAK,KAAK,SAAA,MAA6C,OAAO;CAC9G,IAAI,CAAC,QAAQ,UAAU,IAAI,KAAK,CAAC,QAAQ,YAAY,IAAI,GAAG,OAAO;CACnE,IAAI;CACJ,IAAI;EACH,SAAS,IAAI,eAAe,IAAI;CACjC,QAAQ;EACP,OAAO;CACR;CACA,IAAI,MAAM,aAAa,QAAQ,CAAC,CAAC,MAAM,UAAU,OAAO;CACxD,IAAI,MAAM,aAAa,QAAQ,CAAC,CAAC,MAAM,MAAM,MAAM,aAAa,QAAQ,CAAC,CAAC,MAAM,IAAI,OAAO;CAE3F,IAAI,MAAM,SAAS,QAAQ,CAAC,CAAC,MAAM,IAAI,OAAO;CAC9C,MAAM,OAAO,MAAM,aAAa,QAAQ,CAAC,CAAC;CAC1C,IAAI,SAAS,MAAO,MAAM,gBAAgB,MAAM,CAAC,GAAG,CAAC,GAAe,OAAO;CAC3E,MAAM,MAAM,WAAW,OAAO,MAAM,aAAa,QAAQ,CAAC,CAAC,IAAc,MAAM,WAAW,QAAQ,CAAC,CAAC;CAGpG,MAAM,KAAK,KAAK,OAAO;CACvB,IAAI,MAAM,cAAc,IAAI,GAAG;EAC9B,MAAM,OAAO,KAAM,MAAM,aAAa,MAAM,CAAC,GAAG,EAAE,CAAC,IAAe;EAClE,MAAM,UAAU,gBAAgB,IAAI;EACpC,IAAI,QAAQ,SAAS,aAAa,OAAO;EACzC,IAAI,QAAQ,SAAS,gBAAgB,CAAC,gBAAgB,OAAO;EAE7D,OAAO,OAAO;GAAE,IAAI;GAAe;GAAK,UAAU;GAAM,SAAS,OAAO;IAAE,SAAS;IAAM,QADnE,KAAK,IAAI;GACiE,CAAC;EAAE,CAAC;CACrG;CAEA,IAAI,CAAC,mBAAmB,SAAS,eAAgB,MAAM,gBAAgB,MAAM,CAAC,YAAY,CAAC,IAAgB,OAAO;CAClH,OAAO,OAAO;EAAE,IAAI;EAAe;EAAK,UAAU;CAAK,CAAC;AACzD;AA0BA,MAAM,mBAA0B,WAAW,QAAQ,kBAAkB;AACrE,MAAMI,yBAA6B;CAClC,MAAM,WAAW;AAClB;AAEA,MAAM,cAA4C,OAAO;CAAE,IAAI;CAAO,MAAM;AAAc,CAAC;AAC3F,MAAM,kBAAgD,OAAO;CAAE,IAAI;CAAO,MAAM;AAAkB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BnG,SAAgB,iCAAiC,SAAwE;CACxH,MAAM,WAAW,YAAY,oBAAoB,OAAO,GAAG,UAAU;CAUrE,OAAO,OAAO,EARb,QAAQ,KAAa,aAAwE;EAC5F,IAAI;GACH,OAAO,YAAY,UAAU,KAAK,WAAW;EAC9C,QAAQ;GACP,OAAO,mBAAmB,OAAO,WAAW,CAAC;EAC9C;CACD,EAEoB,CAAC;AACvB;AAEA,SAAS,oBAAoB,SAAoC;CAChE,IAAI,CAAC,cAAc,OAAO,GAAG,MAAM,WAAW;CAC9C,MAAM,SAAS,QAAQ,SAAS,UAAU,UAAUA,gBAAc;CAClE,IAAI,OAAO,WAAW,YAAY,MAAM,WAAW;CACnD,MAAM,aAAa,UAAU,QAAQ,SAAS,mBAAmB,mBAAmBA,gBAAc,CAAC;CACnG,MAAM,kBAAkB,eAAe,KAAA,IAAY,oCAAoC;CACvF,qBAAqB,iBAAiB,iBAAiB;CACvD,IAAI,kBAAA,YAAwC,MAAM,YAAY,sBAAsB,iBAAiB;CACrG,MAAM,QAAQ,qBAAqB,QAAQ,SAAS,SAAS,SAASA,gBAAc,CAAC;CACrF,OAAO,OAAO;EAAU;EAAyC;EAAiB;CAAM,CAAC;AAC1F;AAEA,SAAS,YAAY,UAA4B,KAAc,aAA6D;CAC3H,MAAM,SAAS,eAAe,WAAW;CACzC,MAAM,QAAQ,2BAA2B,GAAa;CACtD,IAAI,CAAC,MAAM,IAAI,OAAO,mBAAmB,QAAQ,OAAqC;EAAE,IAAI;EAAO,MAAM,MAAM;CAAK,CAAC,CAAC;CAGtH,MAAM,QAAQ,WAAW,SAAS,KAAK;CACvC,IAAI,UAAU,OAAO,MAAM,KAAK,EAAE,OAAO,aAAa,QAAQ,OAAO,mBAAmB,QAAQ,WAAW;CAC3G,IAAI,MAAM,YAAY,KAAA,GACrB,OAAO,mBAAmB,QAAQ,OAAO,MAAM,KAAK,MAAM,UAAU,WAAW,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC;CAEjG,MAAM,SAAS,OAAO,aAAa,QAAQ,SAAS,kBAAkB,OAAO,aAAa,QAAQ,SAAS;;CAE3G,MAAM,mBAAmB,QAAQ;CACjC,MAAM,EAAE,KAAK,WAAW,aAAa;CAIrC,MAAM,oBAA6B,CAAC,UAAU,OAAO,MAAM,KAAK,WAAW,SAAS,KAAK,IAAI;CAE7F,OAAO,IAAI,oBAAkD,WAAW;EACvE,MAAM,aAAa,IAAI,2BAA2B;EAClD,MAAM,eAAe,MAAM,uBAAuB,YAAY,CAAC,CAAC;EAChE,IAAI,OAAO;EACX,IAAI,oBAAgC,CAAC;EACrC,IAAI,oBAAgC,CAAC;EACrC,MAAM,UAAU,WAA+C;GAC9D,IAAI,MAAM;GACV,OAAO;GACP,YAAY;GACZ,YAAY;GAEZ,MAAM,sBAAsB,YAAY,CAAC,CAAC;GAC1C,OAAO,MAAM;EACd;EACA,cAAc,WAAW,cAAc,OAAO,WAAW,CAAC;EAC1D,cAAc,QAAQ,OAAO,cAAc,OAAO,WAAW,CAAC;EAC9D,IAAI,MAAM;EACV,IAAI;EACJ,IAAI;GACH,UAAU,MAAM,SAAS,QAAQ,KAAA,GAAW,CAAC,UAAU,OAAO;IAAE,UAAU,IAAI,gBAAgB,QAAQ,MAAM;IAAG,QAAQ;GAAa,CAAC,CAAC,CAAY;EACnJ,QAAQ;GACP,OAAO,WAAW;GAClB;EACD;EACA,IAAI,YAAY,QAAS,OAAO,YAAY,YAAY,OAAO,YAAY,YAAa;GACvF,OAAO,WAAW;GAClB;EACD;EACA,IAAI;GAGH,MAAM,aAAa,mBAAmB,QAAQ,OAAO,GAAG,EACtD,WAAoB,OAAO,gBAAgB,WAAW,UAAU,QAAQ,WAAW,CAAC,SAC/E,OAAO,WAAW,CACzB,CAAC;EACF,QAAQ;GACP,OAAO,WAAW;EACnB;CACD,CAAC;AACF;;;;;;AAOA,SAAS,gBAAgB,KAAa,UAAkB,QAAiB,aAA0D;CAClI,IAAI;EACH,MAAM,SAAS,QAAQ,KAAK,UAAU,MAAM;EAC5C,IAAI,OAAO,MAAM,CAAC,YAAY,GAAG,OAAO;EACxC,OAAO;CACR,QAAQ;EACP,OAAO;CACR;AACD;;AAGA,SAAS,QAAQ,KAAa,UAAkB,QAA+C;CAC9F,IAAI,CAAC,QAAQ,MAAM,GAAG,OAAO;CAC7B,MAAM,SAAS,QAAQ,QAAQ,UAAU,UAAUA,gBAAc;CACjE,IAAI,OAAO,WAAW,YAAY,CAACC,sBAAoB,MAAM,KAAK,SAAS,KAAK,SAAA,IAA4C,OAAO;CACnI,MAAM,OAAO,SAAe;CAC5B,MAAM,YAAsC,CAAC;CAC7C,IAAI,YAAY;CAChB,KAAK,IAAI,QAAQ,GAAG,QAAQ,QAAQ,SAAS,GAAG;EAC/C,MAAM,QAAQ,QAAQ,QAAQ,GAAG,SAAS,UAAUD,gBAAc;EAClE,IAAI,CAAC,cAAc,KAAK,GAAG;GAC1B,YAAY;GACZ;EACD;EACA,MAAM,UAAU,UAAU,QAAQ,OAAO,WAAW,WAAWA,gBAAc,CAAC;EAC9E,MAAM,SAAS,UAAU,QAAQ,OAAO,UAAU,UAAUA,gBAAc,CAAC;EAC3E,MAAM,SAAS,gBAAgB,OAAO;EACtC,IAAI,OAAO,SAAS,cAAc,OAAO;EACzC,IAAI,OAAO,SAAS,eAAe,OAAO,WAAW,QAAQ;GAC5D,YAAY;GACZ;EACD;EACA,IAAI,KAAK,OAAO,aAAa,MAAM;EACnC,KAAK,OAAO,WAAW;EACvB,UAAU,UAAU,UAAU,OAAO;GAAE,SAAS,OAAO;GAAS,QAAQ,OAAO;EAAO,CAAC;CACxF;CACA,IAAI,WAAW,OAAO;CACtB,OAAO,OAAO,KAAK,UAAU,WAAW,SAAS,CAAC;AACnD;AAEA,SAAS,OAAO,KAAa,UAAkB,WAA4E;CAE1H,OAAO,OAAqC;EAAE,IAAI;EAAM,aADpC,OAAiC;GAAE;GAAK;GAAU,MAAM;GAAK;EAAU,CACnC;CAAY,CAAC;AACtE;;;ACtUA,MAAM,QAAkC,OAAO,EAAE,UAAU,QAAQ,CAAC;AACpE,MAAM,wBAAkD,OAAO,EAAE,UAAU,cAAc,CAAC;AAC1F,MAAM,aAAmD,OAAO,EAAE,UAAU,aAAa,CAAC;AAC1F,MAAM,4BAAkE,OAAO,EAAE,UAAU,cAAc,CAAC;;AAG1G,MAAME,eAAa,OAAO,OAAO,OAAO,IAAI,CAAW;AACvD,MAAM,uBAA6B;CAClC,MAAMA;AACP;;AAGA,SAAgB,wBAAkD;CACjE,OAAO;AACR;;;;;;AAOA,SAAgB,qBAAqB,MAA4D;CAChG,OAAO,YAAY;EAClB,MAAM,QAAQ,UAAU,IAAI;EAC5B,IAAI,CAAC,QAAQ,gCAAgC,KAAK,GAAG,MAAM,WAAW,QAAQ,qBAAqB;EACnG,OAAO,OAAiC;GAAE,UAAU;GAAQ,MAAM;EAAoC,CAAC;CACxG,SAAS,WAAW,QAAQ,qBAAqB,CAAC;AACnD;;AAGA,SAAgB,8BAAwD;CACvE,OAAO;AACR;;AAGA,SAAS,eAAe,OAAwE;CAC/F,IAAI,CAAC,cAAc,KAAK,GAAG,MAAMA;CAGjC,OAAO,OAAO;EAAE,UAFC,UAAU,QAAQ,OAAO,YAAY,YAAY,cAAc,CAEhE;EAAU,MADb,UAAU,QAAQ,OAAO,QAAQ,QAAQ,cAAc,CAC1C;CAAK,CAAC;AACjC;;;;;;;;AASA,SAAgB,kCAAkC,OAA0C;CAC3F,OAAO,cAAc;EACpB,MAAM,EAAE,UAAU,SAAS,eAAe,KAAK;EAC/C,IAAI,aAAa,SAAS,OAAO;EACjC,IAAI,aAAa,UAAU,QAAQ,gCAAgC,IAAI,GACtE,OAAO,OAAiC;GAAE,UAAU;GAAc;EAAmC,CAAC;EAEvG,OAAO;CACR,SAAS,qBAAqB;AAC/B;;;;;;;AAQA,SAAgB,8CAA8C,OAAsD;CACnH,OAAO,cAAc;EACpB,MAAM,EAAE,UAAU,SAAS,eAAe,KAAK;EAC/C,IAAI,aAAa,cAAc,OAAO;EACtC,IAAI,aAAa,aAAa,QAAQ,0BAA0B,IAAI,GACnE,OAAO,OAA6C;GAAE,UAAU;GAAiB;EAA8B,CAAC;EAEjH,OAAO;CACR,SAAS,yBAAyB;AACnC;;;ACnDA,MAAM,gBAAgB,OAAO,gBAAgB,aAAa,QAAQ,yBAAyB,YAAY,WAAW,SAAS,CAAC,EAAE,MAAM,KAAA;;;;;;;AAQpI,SAAgB,kBAAkB,SAA2C;CAC5E,IAAI;EACH,IAAI,CAAC,cAAc,OAAO,KAAK,kBAAkB,KAAA,GAAW,OAAO,KAAA;EACnE,MAAM,SAAS,QAAQ,SAAS,UAAU,gBAAgB,KAAA,CAAkB;EAC5E,IAAI,WAAW,QAAQ,OAAO,WAAW,UAAU,OAAO,KAAA;EAC1D,MAAM,eAAe,QAAQ,CAAC,CAAC;EAC/B,OAAO;CACR,QAAQ;EACP;CACD;AACD;;;;;;AAOA,SAAgB,cAAc,QAA8B;CAC3D,IAAI,kBAAkB,KAAA,GAAW,OAAO;CACxC,IAAI;EACH,OAAO,MAAM,eAAe,QAAQ,CAAC,CAAC,MAAM;CAC7C,QAAQ;EACP,OAAO;CACR;AACD;;AAGA,SAAgB,sBAAsB,SAAoE;CACzG,IAAI;EACH,IAAI,CAAC,cAAc,OAAO,GAAG,OAAO,KAAA;EACpC,MAAM,aAAa,QAAQ,SAAS,mBAAmB,yBAAyB,KAAA,CAAkB;EAClG,OAAO,eAAe,cAAc,eAAe,gBAAgB,eAAe,WAAW,aAAa,KAAA;CAC3G,QAAQ;EACP;CACD;AACD;;AASA,SAAgB,mBAAmB,OAA8C;CAChF,IAAI,UAAU,QAAQ,OAAO,UAAU,UAAU,MAAM,YAAY,mBAAmB,OAAO;CAC7F,MAAM,MAAO,MAA4B;CACzC,IAAI,OAAO,QAAQ,YAAY,MAAM,YAAY,mBAAmB,WAAW;CAC/E,OAAO;EAAE,QAAQ;EAAY;CAAqC;AACnE;;AAGA,SAAgB,gBAAgB,OAA4B;CAC3D,IAAI;CACJ,IAAI;EACH,QAAQ,MAAM,MAAM,KAAK,MAAM,QAAQ,CAAC,CAAC;CAC1C,QAAQ;EACP,MAAM,YAAY,iBAAiB,OAAO;CAC3C;CACA,MAAM,KAAK,OAAO,KAAK;CACvB,IAAI,CAACC,iBAAe,EAAE,GAAG,MAAM,YAAY,iBAAiB,OAAO;CACnE,OAAO;AACR;AAEA,MAAM,iBAAiB,OAAO,gBAAgB,YAAY,gBAAgB,QAAQ,OAAO,YAAY,QAAQ,aAC1G,YAAY,IAAI,KAAK,WAAW,IAChC,KAAK;AAER,MAAM,UAA8D,OAAO,OAAO;CAAE,IAAI;CAAO,QAAQ;AAAU,CAAC;AAClH,MAAMC,YAA8D,OAAO,OAAO;CAAE,IAAI;CAAO,QAAQ;AAAU,CAAC;AAClH,MAAM,QAA0D,OAAO,OAAO;CAAE,IAAI;CAAO,QAAQ;AAAQ,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqC5G,eAAsB,YACrB,OACA,WACA,QACA,KACA,SACA,gBAAgB,GACa;CAC7B,IAAI,QAAQ,SAAS,OAAOA;CAC5B,MAAM,qBAAqB,eAAe;CAC1C,MAAM,iBAAiB,YAAY;CACnC,MAAM,gBAAgB,QAAQ;CAC9B,MAAM,aAAa,IAAI,gBAAgB;CACvC,MAAM,UAA8B;EAAE,UAAU,IAAI,KAAK,QAAQ,SAAS;EAAG,QAAQ,WAAW;CAAO;CACvG,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,MAAM,OAAO,IAAI,SAA4B,YAAY;EACxD,QAAQ,iBAAiB;GACxB,WAAW,MAAM;GACjB,IAAI,gBAAgB,GAAG,aAAa,iBAAiB,QAAQ,OAAO,GAAG,aAAa;QAC/E,QAAQ,OAAO;EACrB,GAAG,SAAS;EACZ,IAAI,QAAQ;GACX,sBAAsB;IACrB,WAAW,MAAM;IACjB,QAAQA,SAAO;GAChB;GACA,OAAO,iBAAiB,SAAS,eAAe,EAAE,MAAM,KAAK,CAAC;EAC/D;CACD,CAAC;;CAED,MAAM,YAAY,YAAkD;EACnE,IAAI,EAAE,eAAe,IAAI,qBAAqB,iBAAiB,OAAO;EACtE,IAAI;GACH,OAAO,QAAQ,IAAI,gBAAgB,UAAU;EAC9C,QAAQ;GACP,OAAO;EACR;CACD;CACA,IAAI;EACH,IAAI;EACJ,IAAI;GAQH,OAAO,QAAQ,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,MACnC,UAAU,SAAS;IAAE,IAAI;IAAM;GAAM,CAAC,SACjC,SAAS,KAAK,CACrB;EACD,QAAQ;GACP,OAAO,QAAQ,QAAQ,CAAC,CAAC,WAAW,SAAS,KAAK,CAAC;EACpD;EACA,MAAM,UAAU,MAAM,QAAQ,KAAK,CAAC,MAAM,IAAI,CAAC;EAC/C,IAAI,CAAC,QAAQ,MAAM,QAAQ,WAAW,WAAW,WAAW,MAAM;EAClE,OAAO;CACR,UAAU;EACT,IAAI,UAAU,KAAA,GAAW,aAAa,KAAK;EAC3C,IAAI,eAAe,KAAA,GAAW,aAAa,UAAU;EACrD,IAAI,UAAU,eAAe,OAAO,oBAAoB,SAAS,aAAa;CAC/E;AACD;;;ACjLA,MAAMC,iBAAqB;CAC1B,MAAMC;AACP;AACA,MAAMA,YAAU,OAAO,OAAO,OAAO,OAAO,IAAI,CAAW;;AAG3D,SAAgB,YAA8B,OAAgB,SAAsC;CACnG,IAAI;EACH,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO,KAAA;EAClC,MAAM,UAAU,QAAQ,OAAO,WAAW,WAAWD,QAAM;EAC3D,OAAO,QAAQ,SAAS,OAAO,IAAK,UAAgB,KAAA;CACrD,QAAQ;EACP;CACD;AACD;;AAGA,SAAS,MAAM,UAA6B,KAA2C;CACtF,OAAO,QAAQ,UAAU,KAAK,KAAKA,QAAM;AAC1C;AAEA,SAAS,OAAO,OAAwD;CACvE,IAAI,UAAU,QAAQ,UAAU,KAAA,KAAa,OAAO,UAAU,YAAY,QAAQ,KAAK,GAAG,MAAMC;CAChG,OAAO;AACR;AAEA,SAASC,WAAS,OAA6C;CAC9D,IAAI,OAAO,UAAU,YAAY,UAAU,IAAI,MAAMD;CACrD,OAAO;AACR;AAEA,SAASE,QAAM,OAAqC,KAAqB;CACxE,IAAI,OAAO,UAAU,YAAY,CAACC,sBAAoB,KAAK,KAAK,QAAQ,KAAK,MAAMH;CACnF,OAAO;AACR;;AAGA,SAAS,aAAa,OAAyD;CAC9E,MAAM,OAAO,aAAa,OAAO,UAAUD,QAAM;CACjD,OAAO,QAAQ,IAAI,IAAI,OAAO,KAAA;AAC/B;AAoCA,MAAM,gBAAgB,OAAO,OAAO,CAAC,cAAc,QAAQ,CAAU;AAErE,SAAS,UAAU,OAAsD;CACxE,MAAM,QAAQ,OAAO,KAAK;CAC1B,MAAM,QAAQ,MAAM,OAAO,OAAO;CAClC,IAAI,UAAU,WACb,OAAO,OAAO,OAAO;EAAE,OAAO;EAAW,SAASE,WAAS,MAAM,OAAO,SAAS,CAAC;EAAG,WAAWA,WAAS,MAAM,OAAO,WAAW,CAAC;CAAE,CAAC;CAEtI,MAAM,SAAS,MAAM,OAAO,QAAQ;CACpC,IAAI,UAAU,YAAY,CAAC,QAAQ,eAAe,MAAM,GAAG,MAAMD;CACjE,OAAO,OAAO,OAAO;EAAE,OAAO;EAAkB;CAAkC,CAAC;AACpF;;AAGA,SAASI,MAAI,QAAgB,KAAsB;CAClD,OAAO,QAAQ,QAAQ,KAAK,KAAKL,QAAM;AACxC;AAEA,SAASM,QAAM,OAAwB;CACtC,IAAI,CAAC,cAAc,KAAK,GAAG,MAAML;CACjC,OAAO;AACR;;;;;;AAOA,SAAS,WAAW,QAAgC;CACnD,MAAM,MAAMK,QAAM,MAAM;CACxB,MAAM,UAAUJ,WAASG,MAAI,KAAK,SAAS,CAAiC;CAC5E,MAAM,WAAWH,WAASG,MAAI,KAAK,UAAU,CAAiC;CAC9E,MAAM,UAAUH,WAASG,MAAI,KAAK,SAAS,CAAiC;CAC5E,MAAM,QAAQC,QAAMD,MAAI,KAAK,OAAO,CAAC;CACrC,MAAM,QAAQH,WAASG,MAAI,OAAO,OAAO,CAAiC;CAC1E,MAAM,QAAQF,QAAME,MAAI,OAAO,OAAO,GAAmC,CAAC;CAC1E,OAAO,OAAO,OAAO;EAAE;EAAS;EAAU;EAAS,OAAO,OAAO,OAAO;GAAE;GAAO;EAAM,CAAC;CAAE,CAAC;AAC5F;;;;;;AAOA,MAAM,yBAAyB;;AAE/B,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;AAqB1B,SAAS,SAAS,QAAiB,QAAmC;CACrE,MAAM,MAAMC,QAAM,MAAM;CAExB,MAAM,QAAQ,sBAAsBD,MAAI,KAAK,OAAO,CAAC;CACrD,IAAI,MAAM,YAAY,OAAO,WAAW,MAAM,aAAa,OAAO,YAAY,MAAM,YAAY,OAAO,SAAS,MAAMJ;CACtH,MAAM,SAAyB,EAAE,OAAO,uBAAuB;CAC/D,MAAM,gBAAgBI,MAAI,KAAK,SAAS;CACxC,MAAM,UAAU,kBAAkB,OAAO,OAAO,OAAO,iBAAiB,eAAe,WAAWL,UAAQ,mBAAmB,MAAM,CAAC;CACpI,MAAM,QAAQ,OAAO,iBAAiBK,MAAI,KAAK,OAAO,GAAG,SAASL,UAAQ,mBAAmB,MAAM,CAAC;CACpG,MAAM,QAAQ,UAAU,iBAAiBK,MAAI,KAAK,OAAO,GAAG,SAASL,UAAQ,mBAAmB,EAAE,OAAO,EAAE,CAAC,CAAC;CAC7G,MAAM,qBAAqBE,WAASG,MAAI,KAAK,oBAAoB,CAAiC;CAClG,MAAM,uBAAuB,UAAU,kBAAkB;CACzD,MAAM,eAAe,UAAU,MAAM,UAAU;CAC/C,IAAI,CAACE,iBAAe,oBAAoB,KAAK,CAACA,iBAAe,YAAY,GAAG,MAAMN;CAClF,OAAO,OAAO,OAAO;EACpB,GAAG;EACH;EACA;EACA,kBAAkBI,MAAI,KAAK,kBAAkB,MAAM;EACnD;EACA;EACA,cAAcF,QAAME,MAAI,KAAK,cAAc,GAAmC,CAAC;EAC/E;EACA;EACA;CACD,CAAC;AACF;;;;;;;;AASA,SAAgB,gBAAgB,OAAqD;CACpF,MAAM,QAAmB,CAAC;CAC1B,IAAI;EAEH,IAAI,CAAC,QAAQ,KAAK,GAAG,OAAO,KAAA;EAC5B,MAAM,SAAS,QAAQ,OAAO,UAAU,UAAUL,QAAM;EACxD,IAAI,OAAO,WAAW,YAAY,CAACI,sBAAoB,MAAM,KAAK,SAAS,KAAK,SAASI,eAAa,OAAO,KAAA;EAC7G,KAAK,IAAI,QAAQ,GAAG,QAAQ,QAAQ,SAAS,GAAG,MAAM,KAAK,QAAQ,OAAO,GAAG,SAAS,OAAOR,QAAM,CAAC;CACrG,QAAQ;EACP;CACD;CACA,OAAO,OAAO,OAAO,MAAM,KAAK,SAAuB;EACtD,IAAI;EACJ,IAAI;GACH,SAAS,WAAW,IAAI;EACzB,QAAQ;GACP;EACD;EACA,IAAI;GACH,OAAO,OAAO,OAAO;IAAE;IAAQ,KAAK,SAAS,MAAM,MAAM;GAAE,CAAC;EAC7D,QAAQ;GACP,OAAO,OAAO,OAAO;IAAE;IAAQ,KAAK,KAAA;GAAU,CAAC;EAChD;CACD,CAAC,CAAC;AACH;;AAGA,MAAMQ,gBAAc;AAEpB,MAAMC,aAAW,OAAO,OAAO;CAAC;CAAU;CAAU;AAAS,CAAU;;AAGvE,SAAgB,cAAc,OAAmE;CAChG,IAAI;EACH,MAAM,OAAO,aAAa,KAAK;EAC/B,IAAI,SAAS,KAAA,GAAW,OAAO,KAAA;EAC/B,OAAO,OAAO,OAAO,KAAK,KAAK,SAAS;GACvC,MAAM,WAAW,OAAO,IAAI;GAC5B,MAAM,WAAW,MAAM,UAAU,mBAAmB;GACpD,IAAI,CAAC,QAAQ,QAAQ,GAAG,MAAMR;GAC9B,MAAM,SAAS,MAAM,UAAU,QAAQ;GACvC,IAAI,CAAC,QAAQQ,YAAU,MAAM,GAAG,MAAMR;GACtC,MAAM,iBAAiB,MAAM,UAAU,gBAAgB;GACvD,OAAO,OAAO,OAAO;IACpB,gBAAgBC,WAAS,MAAM,UAAU,gBAAgB,CAAC;IAC1D,UAAUC,QAAM,MAAM,UAAU,UAAU,GAAG,CAAC;IAC9C,UAAUD,WAAS,MAAM,UAAU,UAAU,CAAC;IAC9C,SAASA,WAAS,MAAM,UAAU,SAAS,CAAC;IACpC;IACR,mBAAmB,OAAO,OAAO,SAAS,IAAIA,UAAQ,CAAC;IACvD,eAAeA,WAAS,MAAM,UAAU,eAAe,CAAC;IACxD,gBAAgB,mBAAmB,QAAQ,mBAAmB,KAAA,IAAY,OAAOA,WAAS,cAAc;GACzG,CAAC;EACF,CAAC,CAAC;CACH,QAAQ;EACP;CACD;AACD;;;;;AAMA,SAAgB,YAAY,OAAqD;CAChF,IAAI;EACH,IAAI,UAAU,MAAM,OAAO;EAC3B,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO,KAAA;EAClC,MAAM,OAAO,QAAQ,OAAO,QAAQ,QAAQF,QAAM;EAClD,OAAO,SAAS,YAAY,SAAS,WAAW,YAAY,KAAA;CAC7D,QAAQ;EACP;CACD;AACD;;;;;;;;;;;;AC9NA,SAAS,SAAS,OAAgB,YAAuE;CACxG,IAAI,eAAe,cAAc,OAAO,OAAwB;EAAE,OAAO;EAAU,QAAQ;CAAa,CAAC;CACzG,IAAI,eAAe,cAAc,cAAc,KAAK,GAAG;EACtD,MAAM,UAAU,QAAQ,OAAO,WAAW,WAAW,QAAQ;EAC7D,MAAM,YAAY,QAAQ,OAAO,aAAa,aAAa,QAAQ;EACnE,IAAI,OAAO,YAAY,YAAY,YAAY,MAAM,OAAO,cAAc,YAAY,cAAc,IACnG,OAAO,OAAwB;GAAE,OAAO;GAAW;GAAS;EAAU,CAAC;CAEzE;CACA,OAAO,OAAwB;EAAE,OAAO;EAAU,QAAQ;CAAS,CAAC;AACrE;AAUA,SAAS,qBAAqB,SAAyD;CACtF,IAAI,YAAY,QAAQ,OAAO,YAAY,UAAU,MAAM,YAAY,mBAAmB,SAAS;CACnG,MAAM,SAAS,6BAA6B,QAAQ,UAAU,CAAC,CAAC;CAChE,MAAM,QAAQ,QAAQ;CACtB,IAAI,UAAU,QAAQ,OAAO,UAAU,UAAU,MAAM,YAAY,mBAAmB,OAAO;CAC7F,MAAM,kBAAkB,MAAM;CAC9B,IAAI,OAAO,oBAAoB,YAAY,MAAM,YAAY,mBAAmB,OAAO;CACvF,OAAO,OAAO;EAAE;EAAQ;EAAwB;EAAkD,OAAO,mBAAmB,QAAQ,KAAK;EAAG,QAAQ,QAAQ;CAAO,CAAC;AACrK;AAEA,MAAMU,oBAAkB,OAAO;CAAC;CAAY;CAAmB;AAAc,CAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgCvF,SAAgB,6BAA6B,SAAkE;CAE9G,MAAM,EAAE,QAAQ,OAAO,iBAAiB,OAAO,WADhC,YAAY,qBAAqB,OAAO,SAAS,YAAY,mBAAmB,SAAS,CACzC;CAE/D,MAAM,UAAU,OAAO,OAAgC,YAA2D;EACjH,MAAM,aAAa,sBAAsB,OAAO;EAChD,MAAM,QAAQ,YACP,wBAAwB,OAAO;GAAE;GAAQ,OAAO,SAAS,OAAO,UAAU;EAAE,CAAC,GACnF,cAAc,UAAU,CACzB;EACA,MAAM,QAAQ,gBAAgB,KAAK;EACnC,MAAM,MAAM;GAAE,GAAG;GAAO,WAAW,MAAM,KAAK;GAAG,oBAAoB,MAAM,QAAQ,OAAO,gBAAgB;EAAE;EAC5G,MAAM,UAAU,MAAM,YAAY,OAAO,OAAO,eAAe,kBAAkB,OAAO,IAAI,gBAC3F,MAAM,iBAAiB,OAAO,CAAC,KAAK,WAAW,CAAY,SAA6B,gBAAgB,KAAK,CAAC;EAC/G,IAAI,CAAC,QAAQ,IACZ,MAAM,YACL,QAAQ,WAAW,YAAY,0BAA0B,QAAQ,WAAW,YAAY,oBAAoB,wBAC5G,iBACD;EAED,MAAM,SAAS,YAAY,QAAQ,OAAOA,iBAAe;EAGzD,IAAI,WAAW,cAAc,WAAW,mBAAmB;EAI3D,IAAI,WAAW,gBAAgB,MAAM,YAAY,6BAA6B,iBAAiB;EAC/F,MAAM,YAAY,wBAAwB,iBAAiB;CAC5D;CACA,OAAO,OAAO,EAAE,QAAQ,CAAC;AAC1B;AA+CA,MAAM,YAAY;AAClB,MAAM,YAAY;AAClB,MAAM,0BAA0B;AAEhC,SAAS,cAAc,SAAmF;CACzG,IAAI,YAAY,QAAQ,OAAO,YAAY,UAAU,MAAM,YAAY,mBAAmB,SAAS;CACnG,MAAM,aAAa,UAAW,QAAwC,aAAa;CACnF,MAAM,YAAY,eAAe,KAAA,IAAY,0BAA0B;CACvE,sBAAsB,WAAW,eAAe;CAChD,IAAI,YAAA,YAAkC,MAAM,YAAY,sBAAsB,eAAe;CAC7F,MAAM,QAAS,QAAgC;CAC/C,IAAI,CAAC,QAAQ,KAAK,KAAK,MAAM,WAAW,KAAK,MAAM,SAAS,WAAW,MAAM,YAAY,mBAAmB,OAAO;CACnH,MAAM,OAAe,CAAC;CACtB,MAAM,QAAkB,CAAC;CACzB,KAAK,IAAI,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS,GAAG;EACrD,MAAM,OAAO,MAAM;EACnB,IAAI,SAAS,QAAQ,OAAO,SAAS,UAAU,MAAM,YAAY,mBAAmB,SAAS,MAAM,EAAE;EACrG,MAAM,EAAE,MAAM,WAAW,cAAc,aAAa;EACpD,IAAI,OAAO,SAAS,YAAY,CAAC,UAAU,KAAK,IAAI,KAAK,MAAM,SAAS,IAAI,GAAG,MAAM,YAAY,mBAAmB,SAAS,MAAM,OAAO;EAC1I,IAAI,cAAc,QAAQ,OAAO,cAAc,YAAY,OAAO,UAAU,YAAY,YACvF,MAAM,YAAY,mBAAmB,SAAS,MAAM,YAAY;EAEjE,IAAI,iBAAiB,KAAA,KAAa,OAAO,iBAAiB,WAAW,MAAM,YAAY,mBAAmB,SAAS,MAAM,eAAe;EACxI,IAAI,aAAa,KAAA,KAAa,OAAO,aAAa,WAAW,MAAM,YAAY,mBAAmB,SAAS,MAAM,WAAW;EAC5H,MAAM,KAAK,IAAI;EACf,KAAK,KAAK,OAAO;GAAE;GAAM,QAAQ;GAAW,SAAS,UAAU;GAA0C,cAAc,iBAAiB;GAAM,UAAU,aAAa;EAAM,CAAC,CAAC;CAC9K;CACA,OAAO,OAAO;EAAE,OAAO,OAAO,IAAI;EAAG;CAAU,CAAC;AACjD;AAsBA,MAAM,2BAA2B,OAAO,oBAAoB,aAAa,kBAAkB,KAAA;AAC3F,MAAM,iBAAiB,0BAA0B,UAAU;AAC3D,MAAM,yBAAyB,6BAA6B,KAAA,IAAY,KAAA,IAAY,QAAQ,yBAAyB,yBAAyB,WAAW,QAAQ,CAAC,EAAE;AACpK,MAAM,uBAAuB,OAAO,gBAAgB,aAAa,YAAY,UAAU,mBAAmB,KAAA;AAC1G,MAAM,0BAA0B,OAAO,gBAAgB,aAAa,YAAY,UAAU,sBAAsB,KAAA;AAChH,MAAM,WAAW;AACjB,MAAM,aAAa;AACnB,MAAM,mBAAmB;AACzB,MAAM,iBAAiB,QAAQ;AAC/B,MAAM,gBAAgB;AACtB,MAAM,iBAAiB,QAAQ;AAC/B,MAAM,kCAAkC,QAAQ;AAChD,MAAM,wBAAwB,QAAQ;AACtC,MAAM,iBAAiB,OAAO;AAE9B,SAAS,4BAAqC;CAC7C,OAAO,mBAAmB,KAAA,KAAa,2BAA2B,KAAA,KAAa,yBAAyB,KAAA,KACvG,4BAA4B,KAAA;AAC9B;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6BA,SAAS,cAAc,OAAgB,OAA4D;CAClG,IAAI,CAAC,cAAc,KAAK,GAAG,MAAM,cAAc,UAAU,CAAC,CAAC;CAC3D,MAAM,SAAyB,EAAE,OAAO,EAAE;CAC1C,MAAM,OAAO,eAAe,KAAK;CACjC,MAAM,WAAoC,SAAkB;CAC5D,KAAK,IAAI,QAAQ,GAAG,QAAQ,KAAK,QAAQ,SAAS,GAAG;EACpD,MAAM,MAAM,KAAK;EACjB,IAAI,OAAO,QAAQ,UAAU;EAC7B,MAAM,aAAa,gCAAgC,OAAO,GAAG;EAC7D,IAAI,eAAe,KAAA,KAAa,WAAW,eAAe,MAAM;EAChE,IAAI,CAAC,OAAO,YAAY,OAAO,GAAG,OAAO,SAAS,YAAY,UAAU;EACxE,IAAI,WAAW,UAAU,KAAA,GAAW;EACpC,IAAI,QAAQ,gBAAgB,QAAQ,cAAc;GACjD,MAAM,OAAO,OAAO,WAAW,KAAK;GACpC,IAAI,CAAC,eAAe,IAAI,GAAG,OAAO,SAAS,YAAY,UAAU;GACjE,OAAO,UAAU,KAAK,IAAI;EAC3B,OACC,OAAO,UAAU,KAAK,iBAAiB,WAAW,OAAO,YAAY,UAAU,GAAG,MAAM,CAAC;CAE3F;CACA,MAAM,SAAoC,CAAC;CAC3C,KAAK,IAAI,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS,GAAG;EACrD,MAAM,OAAO,KAAK,QAAQ;EAC1B,IAAI,OAAO,SAAS,eAAe,UAAU,KAAK,aAAa,IAAI,cAAc,SAAS,UAAU;EACpG,IAAI,OAAO,SAAS,eAAe,UAAU,KAAK,aAAa,IAAI,cAAc,SAAS,UAAU;EACpG,IAAI,CAAC,MAAM,MAAM,CAAE,cAAc;GAChC,eAAe,MAAM,SAAS;GAC9B,eAAe,MAAM,WAAW;EACjC;EACA,OAAO,KAAK,IAA0C;CACvD;CACA,OAAO;AACR;;;;;;;AAQA,SAAS,KAAK,OAAyB;CACtC,IAAI,UAAU,QAAQ,OAAO,UAAU,UAAU,OAAO;CACxD,IAAI,QAAQ,KAAK,GAAG;EACnB,MAAM,OAAkB,CAAC;EACzB,KAAK,IAAI,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS,GAAG,KAAK,KAAK,KAAK,MAAM,MAAM,CAAC;EAClF,OAAO;CACR;CACA,MAAM,OAAO,eAAe,KAAK;CACjC,MAAM,MAA+B,CAAC;CACtC,KAAK,IAAI,QAAQ,GAAG,QAAQ,KAAK,QAAQ,SAAS,GAAG;EACpD,MAAM,MAAM,KAAK;EACjB,cAAc,KAAK,KAAK,KAAM,MAAkC,IAAI,CAAC;CACtE;CACA,OAAO;AACR;AAEA,SAAS,cAAc,QAAgB,KAAa,OAAsB;CACzE,sBAAsB,QAAQ,KAAK;EAAE;EAAO,YAAY;EAAM,UAAU;EAAM,cAAc;CAAK,CAAC;AACnG;AASA,MAAM,KAAkB,OAAO,EAAE,QAAQ,KAAK,CAAC;AAC/C,MAAM,YAAyB,OAAO,EAAE,QAAQ,UAAU,CAAC;AAC3D,MAAM,UAAuB,OAAO,EAAE,QAAQ,UAAU,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;AAoCzD,SAAS,WAAW,MAAY,UAAmC,YAAgC,WAAmB,OAA4B;CACjJ,MAAM,aAAa,IAAI,yBAA0B;CACjD,MAAM,SAAS,MAAM,wBAAyB,YAAY,CAAC,CAAC;CAC5D,MAAM,UAAW,eAAe,KAAA,IAAY,EAAE,OAAO,IAAI;EAAE;EAAQ,iBAAiB;CAAW;CAC/F,IAAI,eAA+C,KAAA;CACnD,MAAM,UAAU,IAAI,kBAA+B,YAAY;EAC9D,SAAS;CACV,CAAC;CACD,IAAI,QAAQ;CACZ,IAAI;CACJ,MAAM,OAAO,QAAqB,gBAA+B;EAChE,IAAI,OAAO;EACX,QAAQ;EACR,IAAI,UAAU,KAAA,GACb,IAAI;GACH,WAAW,KAAK;EACjB,QAAQ,CAER;EAED,IAAI;GACH,MAAM;EACP,QAAQ,CAER;EACA,IAAI,aACH,IAAI;GACH,MAAM,gBAAiB,YAAY,CAAC,CAAC;EACtC,QAAQ,CAER;EAED,OAAO,MAAM;CACd;CACA,MAAM,cAAoB;EACzB,IAAI,OAAO;EACX,QAAQ,eAAe,IAAI,WAAW,IAAI,GAAG,SAAS;EACtD,IAAI,CAAC,KAAK,UAAU,WAAW,KAAK;EACpC,CAAM,YAA2B;GAChC,IAAI;IACH,MAAO,MAAM,KAAK,SAAS,KAAK,QAAQ,CAAC,UAAU,OAAO,CAAY;IACtE,IAAI,IAAI,KAAK;GACd,SAAS,QAAQ;IAChB,IAAI;KAAE,QAAQ;KAAU;IAAO,GAAG,KAAK;GACxC;EACD,EAAA,CAAG;CACJ;CACA,OAAO,OAAO;EAAE;EAAS;EAAO,aAAa,IAAI,SAAS,IAAI;CAAE,CAAC;AAClE;;AAGA,SAAS,WAAW,OAAsB;CACzC,IAAI;EACH,IAAI,UAAU,QAAQ,OAAO,UAAU,UAAU;EACjD,MAAM,QAAS,MAA8B;EAC7C,IAAI,OAAO,UAAU,YAAY,MAAM,OAAO,OAAO,CAAC,CAAC;CACxD,QAAQ,CAER;AACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2CA,SAAgB,gCAAgC,SAAqE;CACpH,MAAM,EAAE,OAAO,cAAc,YAAY,cAAc,OAAO,SAAS,YAAY,mBAAmB,SAAS,CAAC;CAChH,IAAI,CAAC,0BAA0B,GAAG,MAAM,YAAY,mBAAmB,SAAS;CAChF,MAAM,UAAU,OAAO,OAAgC,YAA2D;EACjH,MAAM,SAAS,kBAAkB,OAAO;EACxC,IAAI,WAAW,KAAA,KAAa,cAAc,MAAM,GAAG,MAAM,YAAY,mBAAmB,QAAQ;EAChG,MAAM,aAAa,sBAAsB,OAAO;EAChD,MAAM,qBAAqB,eAAe,aAAa,eAAe;EACtE,MAAM,YAAY,YAAY,cAAc,OAAO,KAAK,GAAG,cAAc,UAAU,CAAC;EAKpF,IAAI,OAAO,MAAM;EACjB,MAAM,OAAkB,CAAC;EACzB,MAAM,sBAA4B;GACjC,KAAK,IAAI,QAAQ,GAAG,QAAQ,KAAK,QAAQ,SAAS,GAAG,KAAK,MAAM,CAAE,MAAM;EACzE;EACA,MAAM,gBAAsB;GAC3B,QAAQ;GACR,IAAI,SAAS,KAAK,WAAW,KAAA,GAC5B,IAAI;IACH,MAAM,yBAA0B,QAAQ,CAAC,SAAS,aAAa,CAAC;GACjE,QAAQ,CAER;EAEF;EACA,KAAK,IAAI,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS,GAAG;GACrD,MAAM,OAAO,MAAM;GACnB,KAAK,KAAK,WAAW,MAAM,UAAU,QAAS,KAAK,eAAe,aAAa,oBAAoB,WAAW,OAAO,CAAC;EACvH;EACA,IAAI,WAAW,KAAA,GAAW;GACzB,IAAI,WAAW;GACf,IAAI;IACH,MAAM,sBAAuB,QAAQ,CAAC,SAAS,aAAa,CAAC;GAC9D,QAAQ;IACP,WAAW;GACZ;GAOA,IAAI,CAAC,YAAY,cAAc,MAAM,GAAG;IACvC,cAAc;IACd,MAAM,YAAY,mBAAmB,QAAQ;GAC9C;EACD;EAGA,KAAK,IAAI,QAAQ,GAAG,QAAQ,KAAK,QAAQ,SAAS,GAAG,KAAK,MAAM,CAAE,MAAM;EAKxE,MAAM,WAA0B,CAAC;EACjC,KAAK,IAAI,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS,GAClD,IAAI,MAAM,MAAM,CAAE,UAAU,SAAS,KAAK,MAAM,KAAK,MAAM,CAAE,OAAO;EAErE,IAAI,WAAW;EACf,IAAI;EACJ,KAAK,IAAI,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS,GAAG;GACrD,MAAM,OAAO,MAAM;GACnB,IAAI,CAAC,KAAK,UAAU;GACpB,MAAM,UAAU,SAAS;GACzB,YAAY;GAEZ,IAAI,QAAQ,WAAW,WAAW,MAAM,YAAY,mBAAmB,QAAQ;GAC/E,IAAI,QAAQ,WAAW,QAAQ,YAAY,KAAA,GAAW,UAAU;IAAE,MAAM,KAAK;IAAM;GAAQ;EAC5F;EACA,IAAI,YAAY,KAAA,GAAW;EAC3B,IAAI,QAAQ,QAAQ,WAAW,WAAW,MAAM,YAAY,gBAAgB,QAAQ,IAAI;EACxF,MAAM,SAAU,QAAQ,QAAyC;EAGjE,YAAY;GACX,MAAM;EACP,SAAS,YAAY,eAAe,QAAQ,IAAI,CAAC;CAClD;CACA,OAAO,OAAO,EAAE,QAAQ,CAAC;AAC1B;;;;;;;;;;;;;;;;;;;AC7jBA,MAAa,sCAAsC,OAAO,OAAO;CAChE;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACD,CAAU;AAKV,MAAM,WAAW,MAAM,UAAU;;AAGjC,SAAgB,iCAAiC,WAAiE;CACjH,OAAO,OAAO,cAAc,YAAY,MAAM,UAAU,qCAAqC,CAAC,SAAS,CAAC,MAAM;AAC/G;;;;ACkKA,MAAa,gCAAgC,OAAO;CACnD,WAAW;CACX,iBAAiB;CACjB,qBAAqB;AACtB,CAAC;;;;;;;;;;;;;;AAeD,SAAgB,+BAA+B,SAAiB,WAA4B;CAC3F,IAAI,OAAO,YAAY,YAAY,OAAO,cAAc,UAAU,OAAO;CACzE,IAAI,iCAAiC,SAAS,GAAG,OAAO;CACxD,IAAI,YAAY,KAAK,OAAO;CAC5B,IAAI,QAAQ,SAAS,KAAK,QAAQ,SAAS,IAAI,GAAG,OAAO,UAAU,WAAW,QAAQ,MAAM,GAAG,EAAE,CAAC;CAClG,OAAO,YAAY;AACpB;AAEA,MAAM,aACL,OAAO,WAAW,QAAQ,eAAe,aAAa,WAAW,OAAO,WAAW,KAAK,WAAW,MAAM,IAAI,KAAA;AAoB9G,SAASC,aAAW,OAAgB,OAAmC;CACtE,IAAI,UAAU,QAAQ,OAAO,UAAU,UAAU,OAAO;CACxD,KAAK,MAAM,QAAQ,OAAO,IAAI,OAAQ,MAAkC,UAAU,YAAY,OAAO;CACrG,OAAO;AACR;;AAGA,SAASC,gBAAc,OAAgB,UAAkB,OAAuB;CAC/E,MAAM,OAAO,UAAU,KAAK;CAC5B,MAAM,WAAW,SAAS,KAAA,IAAY,WAAW;CACjD,sBAAsB,UAAU,KAAK;CACrC,OAAO;AACR;;;;;;AAOA,SAASC,aAAW,SAA4C;CAC/D,OAAO,YAAYC,sBAAoB,OAAO,SAAS,YAAY,mBAAmB,SAAS,CAAC;AACjG;AAEA,SAASA,sBAAoB,SAA4C;CACxE,IAAI,YAAY,QAAQ,OAAO,YAAY,UAAU,MAAM,YAAY,mBAAmB,SAAS;CACnG,MAAM,SAAS,6BAA6B,QAAQ,UAAU,CAAC,CAAC;CAChE,MAAM,YAAYF,gBAAc,QAAQ,WAAW,8BAA8B,WAAW,WAAW;CACvG,MAAM,kBAAkBA,gBAAc,QAAQ,iBAAiB,8BAA8B,iBAAiB,iBAAiB;CAC/H,MAAM,WAAWA,gBAAc,QAAQ,qBAAqB,8BAA8B,qBAAqB,qBAAqB;CAGpI,IAAI,oBAAoB,qBAAqB,KAAK,OAAO,eAAe,MAAM,YAAY,sBAAsB,iBAAiB;CAEjI,IAAI,YAAY,OAAO,kBAAkB,MAAM,YAAY,sBAAsB,qBAAqB;CACtG,IAAI,CAACD,aAAW,QAAQ,YAAY;EAAC;EAAmB;EAAuB;EAAqB;EAAuB;EAAuB;EAAwB;EAAyB;CAAe,CAAC,GAClN,MAAM,YAAY,mBAAmB,YAAY;CAElD,IAAI,CAACA,aAAW,QAAQ,eAAe,CAAC,0BAA0B,CAAC,GAAG,MAAM,YAAY,mBAAmB,eAAe;CAC1H,IAAI,CAACA,aAAW,QAAQ,WAAW,CAAC,OAAO,CAAC,GAAG,MAAM,YAAY,mBAAmB,WAAW;CAC/F,IAAI,OAAO,QAAQ,aAAa,YAAY,QAAQ,aAAa,IAAI,MAAM,YAAY,mBAAmB,UAAU;CACpH,MAAM,gBAAgB,QAAQ;CAC9B,IAAI,OAAO,kBAAkB,aAAa,OAAO,kBAAkB,YAAY,MAAM,YAAY,mBAAmB,eAAe;CACnI,IAAI,QAAQ,mBAAmB,KAAA,KAAa,OAAO,QAAQ,mBAAmB,YAAY,MAAM,YAAY,mBAAmB,gBAAgB;CAC/I,IAAI,QAAQ,WAAW,KAAA,KAAa,EAAE,QAAQ,kBAAkB,cAAc,MAAM,YAAY,mBAAmB,QAAQ;CAC3H,IAAI;CACJ,IAAI,QAAQ,eAAe,KAAA,GAAW;EACrC,IAAI,OAAO,QAAQ,eAAe,YAAY,MAAM,YAAY,mBAAmB,YAAY;EAC/F,aAAa,QAAQ;CACtB,OACC,aAAa,wBAAwB;EAAE,UAAU,OAAO;EAAqB,aAAa,OAAO;EAAkB,QAAQ,QAAQ;CAAQ,CAAC;CAE7I,IAAI,mBAAmB,QAAQ;CAC/B,IAAI,qBAAqB,KAAA,GAAW;EACnC,IAAI,eAAe,KAAA,GAAW,MAAM,YAAY,mBAAmB,kBAAkB;EACrF,MAAM,OAAO;EACb,yBAAyB,OAAO,KAAK;CACtC,OAAO,IAAI,OAAO,qBAAqB,YACtC,MAAM,YAAY,mBAAmB,kBAAkB;CAExD,OAAO,OAAO;EACb,YAAY,QAAQ;EACpB,eAAe,QAAQ;EACvB,WAAW,QAAQ;EACnB,OAAO,mBAAmB,QAAQ,KAAK;EACvC,UAAU,QAAQ;EAClB,QAAQ,QAAQ;EAChB,gBAAgB,QAAQ;EACxB;EACA;EACA;EACA;EACA;EACA;EACA;EACA,QAAQ,QAAQ;CACjB,CAAC;AACF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoEA,eAAsB,sBAAsB,SAAuE;CAClH,MAAM,SAASE,aAAW,OAAO;CACjC,MAAM,WAAqB;EAAE,SAAS;EAAG,WAAW;EAAG,UAAU;EAAG,aAAa;EAAG,cAAc;EAAG,WAAW;EAAG,WAAW;EAAG,iBAAiB;EAAG,iBAAiB;CAAE;CACxK,MAAM,QAAQ,gBAAgB,OAAO,KAAK;CAC1C,MAAM,UAAU,MAAM,QAAQ,QAAQ,QAAQ,gBAAgB,OAAO,WAAW,gBAAgB;EAC/F,UAAU,OAAO;EACjB,iBAAiB,OAAO;EACxB,OAAO,OAAO;EACd,KAAK,IAAI,KAAK,KAAK;CACpB,GAAG,WAAW,CAAC;CACf,IAAI,CAAC,QAAQ,IAAI,MAAM,YAAY,QAAQ,WAAW,YAAY,0BAA0B,wBAAwB,iBAAiB;CACrI,MAAM,OAAO,gBAAgB,QAAQ,KAAK;CAC1C,IAAI,SAAS,KAAA,GAAW,MAAM,YAAY,wBAAwB,iBAAiB;CACnF,SAAS,UAAU,KAAK;CAExB,MAAM,iBAAiB,QAAQ,OAAO;CACtC,KAAK,MAAM,SAAS,MAAM;EACzB,IAAI,OAAO,QAAQ,SAAS;EAI5B,IAAI,UAAU,KAAA,KAAa,MAAM,OAAO,MAAM,UAAU,OAAO,UAAU;GACxE,SAAS,aAAa;GACtB;EACD;EACA,IAAI;GAMH,IAAI,MAAM,QAAQ,KAAA,GAAW;IAC5B,MAAME,aAAW,QAAQ,SAAS,QAAQ,MAAM,QAAQ,gBAAgB,QAAQ,GAAG,UAAU,gBAAgB;IAC7G;GACD;GACA,MAAM,WAAW,QAAQ,MAAM,KAAK,SAAS,QAAQ,MAAM,QAAQ,gBAAgB,MAAM,IAAI,oBAAoB,GAAG,QAAQ;EAC7H,SAAS,SAAS;GAEjB,IAAI,YAAY,YAAY,MAAM;GAClC,SAAS,aAAa;EACvB;CACD;CACA,OAAO,OAAO,EAAE,GAAG,SAAS,CAAC;AAC9B;;AAGA,SAAS,QAAW,QAAgB,OAAe,KAA8E;CAChI,OAAO,YAAY,OAAO,OAAO,OAAO,eAAe,OAAO,QAAQ,WAAW,gBAAgB,OAAO,KAAK,CAAC;AAC/G;AAcA,SAAS,SAAS,QAAgB,QAAuB,aAAqB,YAA8B;CAC3G,OAAO;EAAE,QAAQ,OAAO;GAAE,SAAS,OAAO;GAAS,OAAO,OAAO;GAAU,OAAO,OAAO,MAAM;EAAM,CAAC;EAAG;EAAa;CAAW;AAClI;;;;;;;AAQA,MAAM,aAAqB,OAAO,OAAO,OAAO,IAAI,CAAW;;AAG/D,MAAM,qBAAqB;;;;;;;AAQ3B,eAAeC,YAAU,QAAgB,OAAgC;CACxE,MAAM,QAAQ,gBAAgB,OAAO,KAAK;CAC1C,IAAI,MAAM,cAAc,SAAS,qBAAqB,OAAO,OAAO,eAAe;CACnF,MAAM,EAAE,WAAW;CACnB,MAAM,UAAU,MAAM,QAAQ,QAAQ,QAAQ,gBAAgB,OAAO,WAAW,oBAAoB;EACnG,SAAS,OAAO;EAChB,OAAO,OAAO;EACd,OAAO,OAAO;EACd,KAAK,IAAI,KAAK,KAAK;EACnB,iBAAiB,OAAO;CACzB,GAAG,WAAW,CAAC;CACf,IAAI,QAAQ,MAAM,QAAQ,UAAU,MAAM;EAEzC,MAAM,UAAUC,UAAQ,QAAQ,OAAO,iBAAiB,MAAM,UAAU;EACxE,IAAI,UAAU,MAAM,aAAa,MAAM,cAAc;EACrD;CACD;CACA,IAAI,QAAQ,MAAM,QAAQ,UAAU,OAAO,MAAM;AAClD;;;;;;;;;AAsBA,eAAe,QAAW,KAAa,MAA0F;CAChI,IAAI,EAAE,IAAI,aAAa,gBAAgB,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO;EAAE,IAAI;EAAO,QAAQ;CAAW;CACtG,MAAMD,YAAU,IAAI,QAAQ,IAAI,KAAK;CACrC,MAAM,QAAQ,gBAAgB,IAAI,OAAO,KAAK;CAC9C,MAAM,cAAc,IAAI,aAAa;CACrC,IAAI,EAAE,cAAc,IAAI,OAAO;EAAE,IAAI;EAAO,QAAQ;CAAW;CAE/D,OAAO,YAAY,OADD,cAAc,IAAI,OAAO,OAAO,gBAAgB,cAAc,IAAI,OAAO,OAAO,eAC7D,IAAI,OAAO,SAAS,YAAY,KAAK,SAAS,KAAK,SAAS,gBAAgB,IAAI,OAAO,KAAK,CAAC;AACnI;AAEA,SAAS,kBAAkB,QAAsD,aAA2D;CAC3I,IAAI,WAAW,YAAY,OAAO;CAClC,OAAO,WAAW,YAAY,iBAAiB;AAChD;AAcA,eAAe,WAAW,QAAgB,KAAiB,OAAiB,UAAmC;CAE9G,MAAM,aAAa,IAAI;CACvB,MAAM,MAAc;EAAE;EAAQ;EAAK;EAAO,QAAQ,MAAM;EAAQ;EAAY;CAAS;CACrF,MAAM,QAAQ,gBAAgB,OAAO,KAAK;CAG1C,IAAI,SAAS,YAAY,OAAO,cAAc,KAAK,8BAA8B;CAIjF,MAAM,aAAa,IAAI,eAAe,OAAO;CAC7C,IAAI,QAAQ,YAAY;EACvB,IAAI,cAAc,YAAY,OAAO,cAAc,KAAK,8BAA8B;EACtF,OAAO,WAAW,KAAK,YAAY,yBAAyB,UAAU;CACvE;CAEA,MAAM,SAAS,MAAM,QAAQ,MAAM,gBAAgB,OAAO,cAAc,yBACvE;EAAE,UAAU,IAAI;EAAU,SAAS,IAAI;EAAS,YAAY,IAAI,MAAM;CAAW,GACjF,WACD,CAAC;CACD,IAAI,CAAC,OAAO,IAAI,OAAOE,oBAAkB,KAAK,kBAAkB,OAAO,QAAQ,gCAAgC,CAAC;CAChH,MAAM,YAAY,cAAc,OAAO,KAAK;CAC5C,IAAI,cAAc,KAAA,GAAW,OAAOA,oBAAkB,KAAK,gCAAgC;CAE3F,IAAI;CACJ,KAAK,MAAM,YAAY,WAAW;EACjC,IAAI,CAAC,WAAW,UAAU,GAAG,GAAG;EAChC,MAAM,WAAW,MAAM,OAAO,KAAK,QAAQ;EAC3C,IAAI,SAAS,SAAS,WAAW;EACjC,IAAI,SAAS,SAAS,eAAe;GAGpC,IAAI,SAAS,eAAe,kCAAkC,SAAS,eAAe,8BACrF,OAAOA,oBAAkB,KAAK,SAAS,UAAU;GAElD,eAAe,SAAS;GACxB;EACD;EACA,MAAM,OAAO,SAAS,SAAS,UAAU,MAAM,aAAa,KAAK,QAAQ,IAAI,MAAM,aAAa,KAAK,UAAU,SAAS,IAAI;EAC5H,IAAI,SAAS,KAAA,GAAW;EACxB,IAAI,KAAK,SAAS,cAAc;GAE/B,SAAS,aAAa;GACtB;EACD;EACA,IAAI,KAAK,SAAS,gBAAgB,OAAO,cAAc,KAAK,8BAA8B;EAC1F,IAAI,KAAK,eAAe,uBAAuB;GAC9C,eAAe,KAAK;GACpB;EACD;EACA,OAAOA,oBAAkB,KAAK,KAAK,UAAU;CAC9C;CACA,IAAI,eAAe,KAAA,GAAW,OAAOA,oBAAkB,KAAK,UAAU;CAGtE,MAAM,OAAO,MAAM,QAAQ,MAAM,aAAa,QAC7C,OAAO,WAAW,kBAAkB;EAAE,SAAS,IAAI;EAAS,OAAO,IAAI,OAAO;EAAO,OAAO,IAAI,OAAO;EAAO,KAAK,IAAI,KAAK,GAAG;CAAE,GAAG,WAAW,CAAC;CAKjJ,IAAI,CAAC,KAAK,MAAM,KAAK,WAAW,YAAY,OAAO,cAAc,KAAK,8BAA8B;CACpG,YAAY,MAAM,UAAU,WAAW;AACxC;;AAGA,SAAS,WAAW,UAAsC,KAA0B;CACnF,IAAI,SAAS,WAAW,UAAU,OAAO;CAEzC,IAAI,SAAS,aAAa,IAAI,YAAY,SAAS,YAAY,IAAI,SAAS,OAAO;CACnF,KAAK,MAAM,WAAW,SAAS,mBAC9B,IAAI,+BAA+B,SAAS,IAAI,MAAM,SAAS,GAAG,OAAO;CAE1E,OAAO;AACR;AAEA,SAAS,iBAAiB,QAAgB,KAAiB,UAA+C;CACzG,MAAM,WAAW,OAAO;CACxB,IAAI,OAAO,aAAa,WAAW,OAAO;CAC1C,IAAI;EAEH,OAAO,MAAM,UAAU,KAAA,GAAW,CAAC,OAAO;GACzC,gBAAgB,SAAS;GACzB,qBAAqB,SAAS;GAC9B,UAAU,IAAI;GACd,SAAS,IAAI;GACb,OAAO,IAAI;EACZ,CAAC,CAAC,CAAC,MAAM;CACV,QAAQ;EACP,OAAO;CACR;AACD;AAEA,eAAe,OAAO,KAAa,UAAyD;CAC3F,MAAM,EAAE,QAAQ,QAAQ;CAIxB,MAAM,SAAS,MAAM,QAAQ,MAAM,gBAAgB,OAAO,WAAW,cACpE;EAAE,UAAU,IAAI;EAAU,SAAS,IAAI;EAAS,gBAAgB,SAAS;EAAgB,SAAS,IAAI;CAAQ,GAC9G,WACD,CAAC;CACD,IAAI,CAAC,OAAO,IAAI,OAAO;EAAE,MAAM;EAAe,YAAY,kBAAkB,OAAO,QAAQ,4BAA4B;CAAE;CACzH,MAAM,UAAU,YAAY,OAAO,KAAK;CACxC,IAAI,YAAY,KAAA,GAAW,OAAO;EAAE,MAAM;EAAe,YAAY;CAA6B;CAClG,IAAI,YAAY,WAAW,OAAO,EAAE,MAAM,UAAU;CAIpD,IAAI,IAAI,MAAM,UAAU,aAAa,iBAAiB,QAAQ,KAAK,QAAQ,GAC1E,OAAO;EAAE,MAAM;EAAe,YAAY;CAAwB;CAEnE,MAAM,SAAS,MAAM,QAAQ,MAAM,gBAAgB,OAAO,UAAU,MAAM;EACzE,gBAAgB,SAAS;EACzB,qBAAqB,SAAS;EAC9B,OAAO,IAAI;EACX,OAAO,IAAI;EACX,OAAO,IAAI;CACZ,GAAG,WAAW,CAAC;CAEf,IAAI,CAAC,OAAO,IAAI,OAAO;EAAE,MAAM;EAAe,YAAY,kBAAkB,OAAO,QAAQ,uBAAuB;CAAE;CAEpH,MAAM,WAAW,kCAAkC,OAAO,KAAK;CAC/D,IAAI,SAAS,aAAa,SAAS,OAAO,EAAE,MAAM,QAAQ;CAC1D,IAAI,SAAS,aAAa,QAAQ,OAAO;EAAE,MAAM;EAAQ,MAAM,SAAS;CAAK;CAC7E,OAAO;EAAE,MAAM;EAAe,YAAY;CAAwB;AACnE;AAEA,MAAM,kBAAkB,OAAO;CAAC;CAAY;CAAmB;CAAc;AAAc,CAAU;;AAGrG,SAAS,WAAW,SAA6D;CAChF,IAAI,CAAC,QAAQ,IAAI,OAAO;EAAE,MAAM;EAAU,YAAY,kBAAkB,QAAQ,QAAQ,4BAA4B;CAAE;CACtH,MAAM,SAAS,YAAY,QAAQ,OAAO,eAAe;CACzD,IAAI,WAAW,YAAY,OAAO;CAClC,IAAI,WAAW,mBAAmB,OAAO,KAAA;CACzC,IAAI,WAAW,cAAc,OAAO,EAAE,MAAM,aAAa;CACzD,IAAI,WAAW,gBAAgB,OAAO,EAAE,MAAM,eAAe;CAC7D,OAAO;EAAE,MAAM;EAAU,YAAY;CAA6B;AACnE;AAEA,eAAe,aAAa,KAAa,UAAiE;CACzG,MAAM,EAAE,QAAQ,QAAQ;CACxB,IAAI;CACJ,IAAI;CACJ,IAAI;EACH,aAAa,MAAM,OAAO,kBAAkB,KAAA,GAAW,CAAC,OAAO;GAAE,gBAAgB,SAAS;GAAgB,SAAS,IAAI;EAAQ,CAAC,CAAC,CAAC;EAClI,IAAI,OAAO,eAAe,UAAU,MAAM,YAAY,mBAAmB,kBAAkB;EAC3F,OAAO,4BAA4B;GAClC;GACA,cAAc;IAAE,gBAAgB,SAAS;IAAgB,UAAU,SAAS;IAAU,SAAS,SAAS;GAAQ;GAChH,QAAQ,OAAO;GACf,gBAAgB,OAAO;GACvB;EACD,CAAC,CAAC,CAAC;CACJ,QAAQ;EACP,OAAO;GAAE,MAAM;GAAU,YAAY;EAAsB;CAC5D;CAcA,MAAM,OAAO,WAAW,MAZF,QAAQ,MAAM,aAAa,UAAU,OAAO,WAAW,qBAAqB;EACjG;EACA,gBAAgB,SAAS;EACzB,SAAS,IAAI;EACb,UAAU,IAAI;EACd,SAAS,IAAI;EACb,qBAAqB,SAAS;EAC9B;EACA,aAAa,MAAM,KAAK;EACxB,oBAAoB,MAAM,QAAQ,OAAO,OAAO,kBAAkB;EAClE,WAAW,MAAM,KAAK;CACvB,GAAG,IAAI,QAAQ,WAAW,CAAC,CACI;CAC/B,IAAI,SAAS,YAAY;EACxB,IAAI,SAAS,mBAAmB;EAChC;CACD;CACA,OAAO;AACR;AAEA,eAAe,aAAa,KAAa,UAAsC,MAA6D;CAC3I,MAAM,EAAE,QAAQ,QAAQ;CAUxB,MAAM,OAAO,WAAW,MATF,QAAQ,MAAM,aAAa,UAAU,OAAO,WAAW,sBAAsB;EAClG,gBAAgB,SAAS;EACzB,SAAS,IAAI;EACb,UAAU,IAAI;EACd,SAAS,IAAI;EACb,qBAAqB,SAAS;EAC9B;EACA,YAAY,MAAM,KAAK;CACxB,GAAG,IAAI,QAAQ,WAAW,CAAC,CACI;CAC/B,IAAI,SAAS,YAAY;EACxB,IAAI,SAAS,mBAAmB;EAChC;CACD;CACA,OAAO;AACR;;;;;;AAOA,SAAS,YAAY,SAA8B,UAAoB,MAAuE;CAC7I,IAAI,QAAQ,MAAM,QAAQ,UAAU,MAAM,SAAS,SAAS;MACvD,IAAI,QAAQ,MAAM,QAAQ,UAAU,OAAO,SAAS,aAAa;MACjE,SAAS,aAAa;AAC5B;AAEA,eAAeA,oBAAkB,KAAa,YAAkD;CAC/F,MAAM,EAAE,QAAQ,QAAQ;CACxB,MAAM,QAAQ,gBAAgB,OAAO,KAAK;CAC1C,IAAI,SAAS,IAAI,YAAY,OAAO,cAAc,KAAK,8BAA8B;CACrF,MAAM,UAAU,IAAI,eAAe;CACnC,IAAI,WAAW,OAAO,OAAO,mBAAmB,OAAO,cAAc,KAAK,UAAU;CACpF,IAAI;CACJ,IAAI;EACH,UAAU,MAAM,OAAO,YAAY,KAAA,GAAW,CAAC,OAAO,CAAC;CACxD,QAAQ;EACP,UAAU;CACX;CAGA,IAAI,OAAO,YAAY,YAAY,CAACC,iBAAe,OAAO,KAAK,UAAU,GAAG;EAC3E,MAAM,SAAS,OAAO,OAAO;EAC7B,UAAU,OAAO,OAAO,SAAS;CAClC;CACA,MAAM,gBAAgB,QAAQ;CAC9B,IAAI,iBAAiB,IAAI,YAAY,OAAO,cAAc,KAAK,8BAA8B;CAC7F,OAAO,WAAW,KAAK,eAAe,YAAY,aAAa;AAChE;AAEA,eAAe,WAAW,KAAa,eAAuB,YAAmC,MAAiD;CACjJ,MAAM,EAAE,QAAQ,KAAK,WAAW;CAChC,MAAM,UAAU,MAAM,QAAQ,MAAM,aAAa,UAAU,OAAO,WAAW,oBAAoB;EAChG,SAAS,IAAI;EACb,OAAO,OAAO;EACd,OAAO,OAAO;EACd,KAAK,IAAI,KAAK,KAAK;EACnB,aAAa,IAAI,KAAK,aAAa;EACnC;CACD,GAAG,WAAW,CAAC;CAGf,IAAI,CAAC,QAAQ,MAAM,QAAQ,WAAW,YAAY,OAAO,cAAc,KAAK,8BAA8B;CAC1G,YAAY,SAAS,IAAI,UAAU,IAAI;AACxC;AAEA,SAAS,cAAc,KAAa,YAAkD;CACrF,OAAOJ,aAAW,IAAI,QAAQ,IAAI,OAAO,IAAI,UAAU,UAAU;AAClE;;;;;;AAOA,eAAeA,aAAW,QAAgB,OAAiB,UAAoB,YAAkD;CAChI,MAAMC,YAAU,QAAQ,KAAK;CAC7B,MAAM,SAAS,MAAM;CACrB,MAAM,QAAQ,gBAAgB,OAAO,KAAK;CAQ1C,YAAY,MAPU,QAAQ,QAAQ,QAAQ,gBAAgB,OAAO,WAAW,oBAAoB;EACnG,SAAS,OAAO;EAChB,OAAO,OAAO;EACd,OAAO,OAAO;EACd,KAAK,IAAI,KAAK,KAAK;EACnB;CACD,GAAG,WAAW,CAAC,GACM,UAAU,cAAc;AAC9C;;;AClxBA,MAAM,UAAU,OAAO,OAAO,OAAO,IAAI,CAAW;AACpD,MAAMI,iBAAqB;CAC1B,MAAM;AACP;AAEA,SAAS,IAAI,QAAgB,KAAsB;CAClD,OAAO,QAAQ,QAAQ,KAAK,KAAKA,QAAM;AACxC;AAEA,SAAS,MAAM,OAAwB;CACtC,IAAI,CAAC,cAAc,KAAK,GAAG,MAAM;CACjC,OAAO;AACR;AAEA,SAAS,SAAS,OAAwB;CACzC,IAAI,OAAO,UAAU,YAAY,UAAU,IAAI,MAAM;CACrD,OAAO;AACR;AAEA,SAASC,QAAM,OAAgB,KAAqB;CACnD,IAAI,OAAO,UAAU,YAAY,CAACC,sBAAoB,KAAK,KAAK,QAAQ,KAAK,MAAM;CACnF,OAAO;AACR;AAEA,SAAS,UAAU,OAAwB;CAC1C,MAAM,KAAK,UAAU,SAAS,KAAK,CAAC;CACpC,IAAI,CAACC,iBAAe,EAAE,GAAG,MAAM;CAC/B,OAAO;AACR;;AAoCA,MAAM,cAAc;;AAGpB,MAAM,wBAAwB,MAAM,IAAI,OAAO,EAAE;AAEjD,SAAS,iBAAiB,MAAoC;CAC7D,MAAM,SAAS,MAAM,IAAI;CACzB,MAAM,QAAQ,MAAM,IAAI,QAAQ,OAAO,CAAC;CACxC,OAAO,OAAO;EACb,YAAY,SAAS,IAAI,QAAQ,YAAY,CAAC;EAC9C,UAAU,SAAS,IAAI,QAAQ,UAAU,CAAC;EAC1C,SAAS,SAAS,IAAI,QAAQ,SAAS,CAAC;EACxC,OAAO,OAAO;GAAE,OAAO,SAAS,IAAI,OAAO,OAAO,CAAC;GAAG,OAAOF,QAAM,IAAI,OAAO,OAAO,GAAG,CAAC;EAAE,CAAC;CAC7F,CAAC;AACF;AAEA,SAAS,eAAe,MAAe,QAA4C;CAClF,MAAM,SAAS,MAAM,IAAI;CACzB,MAAM,OAAO,IAAI,QAAQ,MAAM;CAC/B,IAAI,OAAO,SAAS,UAAU,MAAM;CACpC,MAAM,UAAU,SAAS,IAAI,QAAQ,SAAS,CAAC;CAC/C,MAAM,eAAeA,QAAM,IAAI,QAAQ,cAAc,GAAG,CAAC;CAGzD,2BAA2B;EAAE,WAAW;EAAuB,kBAAkB;EAAG;EAAS,YAAY,OAAO;EAAY,SAAS,eAAe;CAAE,CAAC;CACvJ,OAAO,OAAO;EACb,GAAG;EACH,gBAAgB,SAAS,IAAI,QAAQ,gBAAgB,CAAC;EACtD;EACA,qBAAqBA,QAAM,IAAI,QAAQ,qBAAqB,GAAG,CAAC;EAChE;EACA;EACA,sBAAsB,UAAU,IAAI,QAAQ,oBAAoB,CAAC;EACjE,kBAAkB,UAAU,IAAI,MAAM,IAAI,QAAQ,OAAO,CAAC,GAAG,WAAW,CAAC;CAC1E,CAAC;AACF;;;;;;AAOA,SAAgB,mBAAmB,OAA2D;CAC7F,MAAM,QAAmB,CAAC;CAC1B,IAAI;EACH,IAAI,CAAC,QAAQ,KAAK,GAAG,OAAO,KAAA;EAC5B,MAAM,SAAS,IAAI,OAAO,QAAQ;EAClC,IAAI,OAAO,WAAW,YAAY,CAACC,sBAAoB,MAAM,KAAK,SAAS,KAAK,SAAS,aAAa,OAAO,KAAA;EAC7G,KAAK,IAAI,QAAQ,GAAG,QAAQ,QAAQ,SAAS,GAAG,MAAM,KAAK,IAAI,OAAO,GAAG,OAAO,CAAC;CAClF,QAAQ;EACP;CACD;CACA,OAAO,WAAW,MAAM,KAAK,SAA6B;EACzD,IAAI;EACJ,IAAI;GACH,SAAS,iBAAiB,IAAI;EAC/B,QAAQ;GACP;EACD;EACA,IAAI;GACH,OAAO,OAAO;IAAE;IAAQ,QAAQ,eAAe,MAAM,MAAM;GAAE,CAAC;EAC/D,QAAQ;GACP,OAAO,OAAO;IAAE;IAAQ,QAAQ,KAAA;GAAU,CAAC;EAC5C;CACD,CAAC,CAAC;AACH;AAgCA,MAAM,WAAW,OAAO;CAAC;CAAU;CAAU;AAAS,CAAU;AAChE,MAAM,eAAiC,OAAO,EAAE,MAAM,eAAe,CAAC;AACtE,MAAM,aAA+B,OAAO,EAAE,MAAM,aAAa,CAAC;;;;;;;AAQlE,SAAgB,oBAAoB,OAAgB,OAAmH;CACtK,IAAI;EACH,IAAI,UAAU,MAAM,OAAO;EAC3B,MAAM,WAAW,MAAM,KAAK;EAC5B,MAAM,gBAAgB,MAAM,IAAI,UAAU,eAAe,CAAC;EAC1D,MAAM,QAAQ;GAAC,IAAI,UAAU,gBAAgB;GAAG,IAAI,UAAU,UAAU;GAAG,IAAI,UAAU,SAAS;GACjG,IAAI,eAAe,gBAAgB;GAAG,IAAI,eAAe,UAAU;GAAG,IAAI,eAAe,SAAS;EAAC;EACpG,KAAK,MAAM,QAAQ,OAAO,SAAS,IAAI;EACvC,IAAI,MAAM,OAAO,MAAM,kBAAkB,MAAM,OAAO,MAAM,YAAY,MAAM,OAAO,MAAM,WACvF,MAAM,OAAO,MAAM,kBAAkB,MAAM,OAAO,MAAM,YAAY,MAAM,OAAO,MAAM,SAC1F,OAAO;EAER,MAAM,SAAS,IAAI,UAAU,QAAQ;EACrC,IAAI,CAAC,QAAQ,UAAU,MAAM,GAAG,OAAO;EACvC,IAAI,IAAI,eAAe,iBAAiB,MAAM,MAAM,OAAO;EAC3D,OAAO,OAAO;GACb,MAAM;GACE;GACR,qBAAqBD,QAAM,IAAI,UAAU,qBAAqB,GAAG,CAAC;GAClE,eAAe,OAAO;IACrB,SAASA,QAAM,IAAI,eAAe,SAAS,GAAG,CAAC;IAC/C,gBAAgB,SAAS,IAAI,eAAe,gBAAgB,CAAC;IAC7D,iBAAiB;IACjB,WAAW,SAAS,IAAI,eAAe,WAAW,CAAC;GACpD,CAAC;EACF,CAAC;CACF,QAAQ;EACP,OAAO;CACR;AACD;AAWA,MAAM,mBAAmB,OAAO;CAAC;CAAe;CAAmB;AAAa,CAAU;;AAE1F,MAAM,gBAAgB;;AAGtB,SAAgB,eAAe,OAA4C;CAC1E,IAAI;EACH,MAAM,SAAS,MAAM,KAAK;EAC1B,MAAM,KAAK,IAAI,QAAQ,IAAI;EAC3B,IAAI,OAAO,OAAO;GACjB,MAAM,OAAO,IAAI,QAAQ,MAAM;GAC/B,OAAO,QAAQ,kBAAkB,IAAI,IAAI,OAAO;IAAE,IAAI;IAAsB;GAA0D,CAAC,IAAI,KAAA;EAC5I;EACA,IAAI,OAAO,MAAM,OAAO,KAAA;EACxB,MAAM,cAAc,MAAM,IAAI,QAAQ,aAAa,CAAC;EACpD,IAAI,IAAI,aAAa,MAAM,MAAM,KAAK,OAAO,KAAA;EAC7C,MAAM,OAAO,IAAI,aAAa,WAAW;EACzC,IAAI,CAAC,QAAQ,IAAI,GAAG,OAAO,KAAA;EAC3B,MAAM,SAAS,IAAI,MAAM,QAAQ;EACjC,IAAI,OAAO,WAAW,YAAY,CAACC,sBAAoB,MAAM,KAAK,SAAS,KAAK,SAAS,eAAe,OAAO,KAAA;EAC/G,MAAM,YAAsC,CAAC;EAC7C,KAAK,IAAI,QAAQ,GAAG,QAAQ,QAAQ,SAAS,GAAG;GAC/C,MAAM,OAAO,MAAM,IAAI,MAAM,GAAG,OAAO,CAAC;GACxC,MAAM,SAAS,IAAI,MAAM,QAAQ;GACjC,IAAI,WAAW,KAAK,WAAW,GAAG,OAAO,KAAA;GACzC,UAAU,KAAK,OAAO;IAAE,SAAS,SAAS,IAAI,MAAM,SAAS,CAAC;IAAG;GAAO,CAAC,CAAC;EAC3E;EACA,OAAO,OAAO;GACb,IAAI;GACJ,aAAa,OAAiC;IAC7C,KAAK,SAAS,IAAI,aAAa,KAAK,CAAC;IACrC,UAAU,SAAS,IAAI,aAAa,UAAU,CAAC;IAC/C,MAAM;IACN,WAAW,WAAW,SAAS;GAChC,CAAC;EACF,CAAC;CACF,QAAQ;EACP;CACD;AACD;;AAGA,MAAM,qBAAqB;;;;;;AAO3B,SAAgB,gBAAgB,OAA4G;CAC3I,IAAI;EACH,MAAM,SAAS,MAAM,KAAK;EAC1B,MAAM,QAAQ,IAAI,QAAQ,OAAO;EACjC,IAAI,UAAU,OAAO,OAAO,OAAO,EAAE,OAAO,MAAe,CAAC;EAC5D,IAAI,UAAU,MAAM,OAAO,KAAA;EAC3B,MAAM,UAAU,SAAS,IAAI,QAAQ,SAAS,CAAC;EAC/C,OAAO,QAAQ,SAAS,qBAAqB,KAAA,IAAY,OAAO;GAAE,OAAO;GAAe;EAAQ,CAAC;CAClG,QAAQ;EACP;CACD;AACD;;AAGA,SAAgB,cAAc,OAAoC;CACjE,OAAO,OAAO,UAAU,WAAW,QAAQ,KAAA;AAC5C;AAEA,MAAM,oBAAoB,OAAO;CAAC;CAAiB;CAAW;CAAe;CAAe;AAAiB,CAAU;AACvH,MAAM,mBAAmB,OAAO,CAAC,oBAAoB,SAAS,CAAU;;AAExE,MAAM,yBAAyB;;;;;;;AAQ/B,SAAgB,oBAAoB,OAAoD;CACvF,IAAI;EACH,MAAM,SAAS,MAAM,KAAK;EAC1B,MAAM,OAAO,IAAI,QAAQ,MAAM;EAC/B,IAAI,SAAS,YAAY;GACxB,MAAM,SAAS,IAAI,QAAQ,QAAQ;GACnC,IAAI,OAAO,WAAW,YAAY,CAACA,sBAAoB,MAAM,KAAK,SAAS,OAAO,SAAS,KAAK,OAAO,KAAA;GACvG,MAAM,aAAa,IAAI,QAAQ,YAAY;GAE3C,OAAO,OAA+B;IAAE,MAAM;IAAY;IAAQ,YADrD,OAAO,eAAe,YAAY,WAAW,UAAU,yBAAyB,aAAa;GACvB,CAAC;EACrF;EACA,IAAI,SAAS,YAAY;GACxB,MAAM,SAAS,IAAI,QAAQ,QAAQ;GACnC,OAAO,QAAQ,kBAAkB,MAAM,IAAI,OAA+B;IAAE,MAAM;IAAoB;GAAyC,CAAC,IAAI,KAAA;EACrJ;EACA,IAAI,QAAQ,mBAAmB,IAAI,GAAG,OAAO,OAA+B,EAAQ,KAAwB,CAAC;EAC7G;CACD,QAAQ;EACP;CACD;AACD;;;;;;;;;;AChIA,MAAM,oBAAoB;;;;;;;;;;AAW1B,MAAM,qBAAqB;;AAG3B,MAAa,iCAAiC,OAAO;CACpD,WAAW;CACX,iBAAiB;AAClB,CAAC;AAwBD,SAAS,WAAW,OAAgB,OAAmC;CACtE,IAAI,UAAU,QAAQ,OAAO,UAAU,UAAU,OAAO;CACxD,KAAK,MAAM,QAAQ,OAAO,IAAI,OAAQ,MAAkC,UAAU,YAAY,OAAO;CACrG,OAAO;AACR;AAEA,SAAS,cAAc,OAAgB,UAAkB,OAAuB;CAC/E,MAAM,OAAO,UAAU,KAAK;CAC5B,MAAM,WAAW,SAAS,KAAA,IAAY,WAAW;CACjD,sBAAsB,UAAU,KAAK;CACrC,OAAO;AACR;;;;;;AAOA,SAAS,WAAW,SAA8C;CACjE,OAAO,YAAY,oBAAoB,OAAO,SAAS,cAAc,mBAAmB,SAAS,CAAC;AACnG;AAEA,SAAS,oBAAoB,SAA8C;CAC1E,IAAI,YAAY,QAAQ,OAAO,YAAY,UAAU,MAAM,cAAc,mBAAmB,SAAS;CACrG,MAAM,SAAS,6BAA6B,QAAQ,UAAU,CAAC,CAAC;CAChE,MAAM,YAAY,cAAc,QAAQ,WAAW,+BAA+B,WAAW,WAAW;CACxG,MAAM,kBAAkB,cAAc,QAAQ,iBAAiB,+BAA+B,iBAAiB,iBAAiB;CAKhI,IAAI,mBAAmB,OAAO,mBAAoB,KAA0B,OAAO,eAAe,MAAM,YAAY,sBAAsB,iBAAiB;CAC3J,IAAI,CAAC,WAAW,QAAQ,YAAY;EAAC;EAAwB;EAA4B;EAAgB;EAAiB;EAAiB;CAAsB,CAAC,GACjK,MAAM,cAAc,mBAAmB,YAAY;CAEpD,IAAI,CAAC,WAAW,QAAQ,eAAe,CAAC,kBAAkB,CAAC,GAAG,MAAM,cAAc,mBAAmB,eAAe;CACpH,IAAI,CAAC,WAAW,QAAQ,eAAe,CAAC,WAAW,CAAC,GAAG,MAAM,cAAc,mBAAmB,eAAe;CAC7G,IAAI,CAAC,WAAW,QAAQ,QAAQ,CAAC,MAAM,CAAC,GAAG,MAAM,cAAc,mBAAmB,QAAQ;CAC1F,IAAI,CAAC,WAAW,QAAQ,UAAU,CAAC,SAAS,CAAC,GAAG,MAAM,cAAc,mBAAmB,UAAU;CACjG,IAAI,CAAC,WAAW,QAAQ,WAAW,CAAC,MAAM,CAAC,GAAG,MAAM,cAAc,mBAAmB,WAAW;CAChG,IAAI,OAAO,QAAQ,aAAa,YAAY,QAAQ,aAAa,IAAI,MAAM,cAAc,mBAAmB,UAAU;CACtH,IAAI,QAAQ,YAAY,KAAA,KAAa,OAAO,QAAQ,YAAY,YAAY,MAAM,cAAc,mBAAmB,SAAS;CAC5H,IAAI,QAAQ,WAAW,KAAA,KAAa,EAAE,QAAQ,kBAAkB,cAAc,MAAM,cAAc,mBAAmB,QAAQ;CAC7H,MAAM,QAAQ,QAAQ;CACtB,IAAI,UAAU,QAAQ,OAAO,UAAU,UAAU,MAAM,cAAc,mBAAmB,OAAO;CAC/F,MAAM,MAAO,MAA4B;CACzC,IAAI,OAAO,QAAQ,YAAY,MAAM,cAAc,mBAAmB,WAAW;CACjF,IAAI;CACJ,IAAI,QAAQ,eAAe,KAAA,GAAW;EACrC,IAAI,OAAO,QAAQ,eAAe,YAAY,MAAM,cAAc,mBAAmB,YAAY;EACjG,aAAa,QAAQ;CACtB,OACC,aAAa,wBAAwB;EAAE,UAAU,OAAO;EAAuB,aAAa,OAAO;EAAkB,QAAQ,QAAQ;CAAQ,CAAC;CAE/I,OAAO,OAAO;EACb,YAAY,QAAQ;EACpB,eAAe,QAAQ;EACvB,eAAe,QAAQ;EACvB,QAAQ,QAAQ;EAChB,UAAU,QAAQ;EAClB,WAAW,QAAQ;EACnB,OAAO,OAAO;GAAE,QAAQ;GAAY;EAAqC,CAAC;EAC1E,UAAU,QAAQ;EAClB;EACA;EACA;EACA;EACA,SAAS,QAAQ;EACjB,QAAQ,QAAQ;CACjB,CAAC;AACF;;AAGA,SAAS,UAAU,OAAsB;CACxC,IAAI;CACJ,IAAI;EACH,QAAQ,MAAM,MAAM,KAAK,MAAM,QAAQ,CAAC,CAAC;CAC1C,QAAQ;EACP,MAAM,cAAc,iBAAiB,OAAO;CAC7C;CACA,MAAM,KAAK,OAAO,KAAK;CACvB,IAAI,CAACE,iBAAe,EAAE,GAAG,MAAM,cAAc,iBAAiB,OAAO;CACrE,OAAO;AACR;;;;;;;;;;;;;;;AA4BA,eAAsB,wBAAwB,SAA2E;CACxH,MAAM,SAAS,WAAW,OAAO;CACjC,MAAM,WAAqB;EAAE,SAAS;EAAG,WAAW;EAAG,SAAS;EAAG,cAAc;EAAG,WAAW;EAAG,UAAU;EAAG,WAAW;EAAG,WAAW;EAAG,WAAW;CAAE;CACxJ,MAAM,QAAQ,UAAU,OAAO,KAAK;CACpC,MAAM,UAAU,MAAM,YAAY,OAAO,OAAO,OAAO,eAAe,OAAO,SAAS,gBAAgB,OAAO,WAAW,qBAAqB;EAC5I,UAAU,OAAO;EACjB,iBAAiB,OAAO;EACxB,OAAO,OAAO;EACd,KAAK,IAAI,KAAK,KAAK;CACpB,GAAG,WAAW,SAAS,UAAU,OAAO,KAAK,CAAC;CAC9C,IAAI,CAAC,QAAQ,IAAI,MAAM,cAAc,QAAQ,WAAW,YAAY,2BAA2B,yBAAyB,sBAAsB;CAC9I,MAAM,UAAU,mBAAmB,QAAQ,KAAK;CAChD,IAAI,YAAY,KAAA,GAAW,MAAM,cAAc,yBAAyB,sBAAsB;CAC9F,SAAS,UAAU,QAAQ;CAC3B,KAAK,MAAM,SAAS,SAAS;EAC5B,IAAI,OAAO,WAAW,KAAA,KAAa,cAAc,OAAO,MAAM,GAAG;EAGjE,IAAI,UAAU,KAAA,GAAW;GACxB,SAAS,aAAa;GACtB;EACD;EACA,MAAM,MAAM,OAAO,QAAQ,MAAM,QAAQ,MAAM,QAAQ,QAAQ;EAC/D,IAAI,MAAM,OAAO,MAAM,UAAU,OAAO,UAAU;GACjD,OAAO,KAAK,WAAW;GACvB;EACD;EACA,IAAI,MAAM,WAAW,KAAA,GAAW;GAC/B,MAAM,OAAO,KAAK;IAAE,MAAM;IAAe,QAAQ;GAAoB,GAAG,iBAAiB,EAAE,YAAY,oBAAoB,CAAC;GAC5H;EACD;EACA,MAAM,cAAc,KAAK,MAAM,MAAM;CACtC;CACA,OAAO,OAAO,EAAE,GAAG,SAAS,CAAC;AAC9B;AAgBA,SAAS,OAAO,QAAgB,QAA6B,QAAmC,UAAyB;CACxH,OAAO;EAAE;EAAQ;EAAQ;EAAQ;EAAU,SAAS,KAAA;EAAW,kBAAkB,WAAW,KAAA,IAAY,MAAM,OAAO;EAAkB,WAAW;EAAO,UAAU;CAAM;AAC1K;;;;;;AAUA,SAAS,WAAc,KAAU,QAAuB,MAA0F;CACjJ,MAAM,QAAQ,UAAU,IAAI,OAAO,KAAK;CACxC,MAAM,cAAc,OAAO,uBAAuB;CAClD,IAAI,EAAE,cAAc,IAAI,OAAO,QAAQ,QAAQ;EAAE,IAAI;EAAO,QAAQ;CAAW,CAAC;CAEhF,OAAO,YAAY,OADDC,UAAQ,aAAa,IAAI,OAAO,OAAO,aAC/B,GAAW,IAAI,OAAO,SAAS,YAAY,KAAK,SAAS,KAAK,SAAS,UAAU,IAAI,OAAO,KAAK,CAAC;AAC7H;;AAGA,SAAS,WAAc,KAAU,MAA8F;CAC9H,MAAM,QAAQ,UAAU,IAAI,OAAO,KAAK;CACxC,OAAO,YAAY,OAAO,IAAI,OAAO,OAAO,eAAe,IAAI,OAAO,SAAS,YAAY,KAAK,SAAS,KAAK,SAAS,UAAU,IAAI,OAAO,KAAK,CAAC;AACnJ;;;;;;;;;;;;AAaA,eAAe,UAAU,KAAU,QAAyC;CAC3E,MAAM,EAAE,WAAW;CACnB,MAAM,EAAE,kBAAkB,kBAAkB,OAAO;CACnD,MAAM,QAAQ,UAAU,OAAO,KAAK;CACpC,IAAI,IAAI,mBAAmB,SAAS,mBAAmB,qBAAqB,eAAe,OAAO;CAClG,IAAI,YAAY;CAChB,MAAM,UAAU,MAAM,WAAW,MAAM,SAAS,cAAc;EAC7D,YAAY;EACZ,OAAO,OAAO,WAAW,yBAAyB;GACjD,YAAY,OAAO;GACnB,OAAO,OAAO,MAAM;GACpB,OAAO,OAAO,MAAM;GACpB,KAAK,IAAI,KAAK,SAAS;GACvB,iBAAiB,OAAO;EACzB,GAAG,OAAO;CACX,CAAC;CACD,IAAI,QAAQ,MAAM,QAAQ,UAAU,MAAM;EAEzC,MAAM,UAAUA,UAAQ,YAAY,OAAO,iBAAiB,OAAO,oBAAoB;EACvF,IAAI,UAAU,IAAI,kBAAkB,IAAI,mBAAmB;EAC3D,OAAO;CACR;CACA,IAAI,QAAQ,MAAM,QAAQ,UAAU,OAAO;EAC1C,OAAO,KAAK,cAAc,EAAE,YAAY,aAAa,CAAC;EACtD,OAAO;CACR;CACA,IAAI,CAAC,QAAQ,MAAM,QAAQ,WAAW,WAAW;EAChD,OAAO,KAAK,WAAW;EACvB,OAAO;CACR;CACA,OAAO;AACR;AAEA,eAAe,cAAc,KAAU,QAAsC;CAC5E,MAAM,EAAE,WAAW;CACnB,MAAM,UAAU,OAAO,eAAe;CAGtC,IAAI,CAAE,MAAM,UAAU,KAAK,MAAM,GAAI;CAOrC,MAAM,QAAQ,MAAM,UAAU,KAAK,MAAM;CACzC,IAAI,UAAU,KAAA,GAAW;CACzB,MAAM,gBAAgB,MAAM;CAC5B,IAAI,UAAU,cAAc;CAG5B,MAAM,WAAW,MAAM,WAAW,KAAK,SAAS,YAAY,OAAO,SAAS,QAAQ,cAAc,gBAAgB,OAAO,CAAC;CAC1H,IAAI,CAAC,SAAS,IAAI,OAAO,YAAY,KAAK,SAAS,QAAQ,sBAAsB;CACjF,MAAM,aAAa,eAAe,SAAS,KAAK;CAChD,IAAI,eAAe,KAAA,GAAW,OAAO,QAAQ,KAAK,QAAQ,sBAAsB;CAChF,IAAI,CAAC,WAAW,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,MAAM,WAAW,KAAK,CAAC;CAG7E,MAAM,mBAAmB,UAAU,UAAU,OAAO,KAAK,IAAI,GAAK;CAClE,MAAM,SAAS,MAAM,WAAW,KAAK,SAAS,YAAY,OAAO,OAAO,KAAK;EAC5E,QAAQ,cAAc;EACtB,WAAW,cAAc;EACzB,UAAU,OAAO;EACjB,SAAS,OAAO;EAChB;EACA,SAAS,OAAO;CACjB,GAAG,OAAO,CAAC;CACX,IAAI,CAAC,OAAO,OAAO,OAAO,WAAW,cAAc,OAAO,WAAW,YAAY,OAAO,YAAY,KAAK,OAAO,QAAQ,oBAAoB;CAC5I,IAAI;CACJ,IAAI;EAEH,UAAU,OAAO,KACd,2BAA2B;GAAE,WAAW,cAAc,OAAO,KAAK;GAAI;GAAkB,SAAS,OAAO;GAAS,YAAY,OAAO;GAAY;EAAQ,CAAC,IACzJ,KAAA;CACJ,QAAQ;EACP,UAAU,KAAA;CACX;CACA,IAAI,YAAY,KAAA,GAAW,OAAO,YAAY,KAAK,QAAQ,EAAE,MAAM,qBAAqB,CAAC;CAGzF,MAAM,aAAa,MAAM,WAAW,KAAK,SAAS,YAAY,OAAO,cAAc,UAAU;EAC5F,gBAAgB,OAAO;EACvB,UAAU,OAAO;EACjB,SAAS,OAAO;EAChB,SAAS,OAAO;EAChB,YAAY,OAAO;EACnB,sBAAsB,cAAc;EACpC;CACD,GAAG,OAAO,CAAC;CACX,IAAI,CAAC,WAAW,IAAI,OAAO,YAAY,KAAK,WAAW,QAAQ,2BAA2B;CAC1F,MAAM,WAAW,8CAA8C,WAAW,KAAK;CAC/E,IAAI,SAAS,aAAa,WAAW,OAAO,OAAO,KAAK,uBAAuB;CAC/E,IAAI,SAAS,aAAa,eAAe,OAAO,QAAQ,KAAK,QAAQ,2BAA2B;CAGhG,MAAM,SAAS,MAAM,UAAU,KAAK,MAAM;CAC1C,IAAI,WAAW,KAAA,GAAW;CAC1B,IAAI,OAAO,cAAc,YAAY,cAAc,SAAS,OAAO,QAAQ,KAAK,QAAQ,wBAAwB;CAShH,MAAM,EAAE,kBAAkB,kBAAkB,OAAO;CACnD,MAAM,iBAAiBA,UACtB,UAAU,OAAO,KAAK,IAAI,kBAC1B,OAAO,YAAY,gBAAgB,kBACnC,OAAO,sBACP,IAAI,mBAAmB,oBAAoB,aAC5C;CAGA,MAAM,QAAQ,MAAM,WAAW,KAAK,SAAS,SAAS,UAAU,OAAO,WAAW,aAAa;EAC9F,OAAO,OAAO,MAAM;EACpB,OAAO,OAAO,MAAM;EACpB,KAAK,IAAI,KAAK,KAAK;EACnB,SAAS;GACR,YAAY,OAAO;GACnB,gBAAgB,OAAO;GACvB,SAAS,OAAO;GAChB;GACA,sBAAsB,cAAc;GACpC,WAAW,MAAM,KAAK;EACvB;CACD,GAAG,OAAO,CAAC;CACX,IAAI,CAAC,MAAM,IAAI,OAAO,YAAY,KAAK,MAAM,QAAQ,4BAA4B;CACjF,MAAM,SAAS,gBAAgB,MAAM,KAAK;CAC1C,IAAI,WAAW,KAAA,GAAW,OAAO,QAAQ,KAAK,QAAQ,4BAA4B;CAClF,IAAI,CAAC,OAAO,OAAO,OAAO,OAAO,KAAK,cAAc,EAAE,YAAY,aAAa,CAAC;CAEhF,MAAM,UAAU,OAAO;CAIvB,MAAM,UAAmC,OAAO;EAAE,aAAa,WAAW;EAAa,QAAQ;EAAiB;EAAS,MAAM,OAAO;CAAK,CAAC;CAC5I,MAAM,YAAY,UAAU,OAAO,KAAK;CACxC,MAAM,YAAY,iBAAiB;CACnC,IAAI;CACJ,IAAI,EAAE,YAAY,IAEjB,OAAO,QAAQ,KAAK,QAAQ,OAAO;CAEpC,IAAI,YAAY;CAChB,IAAI,SAAS,aAAa;CAC1B,MAAM,OAAO,MAAM,YAAY,WAAW,WAAW,OAAO,SAAS,YAAY,OAAO,UAAU,KAAK,SAAS,OAAO,SAAS,UAAU,OAAO,KAAK,GAAG,aAAa;CACtK,IAAI,CAAC,KAAK,MAAM,KAAK,WAAW,WAAW,OAAO,OAAO,KAAK,WAAW;CACzE,IAAI,CAAC,KAAK,IAET,cAAc,EAAE,MAAM,KAAK,WAAW,YAAY,YAAY,gBAAgB;MACxE;EACN,MAAM,SAAS,oBAAoB,KAAK,KAAK;EAC7C,IAAI,WAAW,KAAA,KAAa,OAAO,SAAS,YAAY,OAAO,QAAQ,KAAK,QAAQ,OAAO;EAC3F,cAAc,WAAW,KAAA,IAAY,EAAE,MAAM,gBAAgB,IAAI;CAClE;CAOA,MAAM,aAAa,UAAU,OAAO,KAAK;CACzC,IAAI;CACJ,IAAI;EACH,iBAAiB,mCAAmC,aAAa;GAAE,KAAK,IAAI,KAAK,UAAU;GAAG,iBAAiB,OAAO,OAAO;EAAgB,CAAC;CAC/I,QAAQ;EACP,iBAAiB,OAAO;GAAE,SAAS;GAAsB,QAAQ;EAAyB,CAAC;CAC5F;CACA,MAAM,WAAW,MAAM,YAAY,OAAO,WAAW,cAAc;EAClE,UAAU,OAAO;EACjB,SAAS,OAAO;EAChB,YAAY,OAAO;EACnB,OAAO,OAAO,MAAM;EACpB;EACA,QAAQ;GACP,YAAY,MAAM,UAAU;GAC5B,SAAS,eAAe;GACxB,QAAQ,eAAe;GACvB,GAAI,eAAe,eAAe,KAAA,IAAY,CAAC,IAAI,EAAE,YAAY,eAAe,WAAW;EAC5F;CACD,GAAG,OAAO,CAAC;CACX,OAAO,oBAAoB,KAAK,QAAQ,cAAc;AACvD;;;;;;;AAQA,eAAe,UAAU,KAAU,QAA2H;CAC7J,IAAI,YAAY;CAChB,MAAM,SAAS,MAAM,WAAW,KAAK,SAAS,SAAS,UAAU;EAChE,YAAY;EACZ,OAAO,IAAI,OAAO,cAAc,iBAC/B;GAAE,UAAU,OAAO;GAAU,SAAS,OAAO;GAAS,gBAAgB,OAAO;EAAe,GAC5F,OACD;CACD,CAAC;CACD,IAAI,CAAC,OAAO,IAAI;EACf,MAAM,YAAY,KAAK,OAAO,QAAQ,gCAAgC;EACtE;CACD;CACA,MAAM,QAAQ,oBAAoB,OAAO,OAAO,MAAM;CACtD,IAAI,MAAM,SAAS,gBAAgB;EAClC,MAAM,WAAW,KAAK,2BAA2B;EACjD;CACD;CACA,IAAI,MAAM,SAAS,cAAc;EAChC,MAAM,QAAQ,KAAK,QAAQ,gCAAgC;EAC3D;CACD;CACA,IAAI,MAAM,WAAW,UAAU;EAC9B,MAAM,OAAO,KAAK,qBAAqB;EACvC;CACD;CACA,IAAI,MAAM,WAAW,WAAW;EAC/B,MAAM,OAAO,KAAK,sBAAsB;EACxC;CACD;CAKA,IAAI,OAAO,sBAAsB,MAAM,qBAAqB;EAC3D,MAAM,OAAO,KAAK,qBAAqB;EACvC;CACD;CACA,OAAO;EAAE,eAAe,MAAM;EAAe;CAAU;AACxD;;AAGA,SAAS,YAAY,KAAU,QAAqB,aAAmD;CACtG,IAAI,WAAW,YAAY,OAAO,WAAW,KAAK,8BAA8B;CAChF,IAAI,WAAW,WAAW;EACzB,OAAO,KAAK,WAAW;EACvB,OAAO,QAAQ,QAAQ;CACxB;CACA,OAAO,QAAQ,KAAK,IAAI,QAAS,WAAW,YAAY,iBAAiB,WAAW;AACrF;;;;;;;;;;AAWA,eAAe,YAAY,KAAU,QAAuB,aAAwD;CACnH,MAAM,QAAQ,UAAU,IAAI,OAAO,KAAK;CACxC,MAAM,iBAAiB,mCAAmC,aAAa;EAAE,KAAK,IAAI,KAAK,KAAK;EAAG,iBAAiB,IAAI,OAAO,OAAO;CAAgB,CAAC;CACnJ,MAAM,SAAS,MAAM,WAAW,MAAM,YAAY,IAAI,OAAO,WAAW,cAAc;EACrF,OAAO,OAAO,MAAM;EACpB,OAAO,OAAO,MAAM;EACpB,KAAK,IAAI,KAAK,KAAK;EACnB,SAAS;GACR,YAAY,OAAO;GACnB,gBAAgB,OAAO;GACvB,SAAS,OAAO;GAChB,SAAS,OAAO,eAAe;GAC/B,sBAAsB,IAAI;GAC1B,WAAW,MAAM,KAAK;GACtB,YAAY,MAAM,KAAK;GACvB,SAAS,eAAe;GACxB,QAAQ,eAAe;EACxB;CACD,GAAG,OAAO,CAAC;CACX,IAAI,OAAO,MAAM,OAAO,UAAU,OAAO,OAAO,OAAO,KAAK,cAAc,EAAE,YAAY,aAAa,CAAC;CACtG,IAAI,CAAC,OAAO,MAAM,OAAO,WAAW,WAAW,OAAO,OAAO,KAAK,WAAW;CAC7E,IAAI,CAAC,OAAO,MAAM,OAAO,UAAU,MAAM,OAAO,QAAQ,KAAK,QAAQ,OAAO,KAAK,+BAA+B,OAAO,WAAW,YAAY,iBAAiB,4BAA4B;CAC3L,OAAO,oBAAoB,KAAK,QAAQ,cAAc;AACvD;;AAGA,eAAe,QAAQ,KAAU,QAAuB,SAAgC;CACvF,MAAM,QAAQ,UAAU,IAAI,OAAO,KAAK;CACxC,MAAM,WAAW,MAAM,YAAY,IAAI,OAAO,WAAW,cAAc;EACtE,UAAU,OAAO;EACjB,SAAS,OAAO;EAChB,YAAY,OAAO;EACnB,OAAO,OAAO,MAAM;EACpB;EACA,QAAQ;GAAE,YAAY,MAAM,KAAK;GAAG,SAAS;GAAY,QAAQ;EAAW;CAC7E,GAAG,OAAO,CAAC;CACX,OAAO,QAAQ,KAAK,QAAQ,oBAAoB;AACjD;;AAGA,SAAS,oBAAoB,KAAU,QAAuB,gBAA8D;CAC3H,MAAM,QAAQ;EAAE,QAAQ,eAAe;EAAQ,YAAY,eAAe;EAAY,sBAAsB,eAAe;CAAqB;CAChJ,QAAQ,eAAe,SAAvB;EACC,KAAK,aACJ,OAAO,OAAO,KAAK,EAAE,MAAM,YAAY,GAAG,aAAa,KAAK;EAC7D,KAAK,eACJ,OAAO,OAAO,KAAK;GAAE,MAAM;GAAe,QAAQ,eAAe;EAAO,GAAG,iBAAiB,KAAK;EAClG,KAAK,aACJ,OAAO,OAAO,KAAK;GAAE,MAAM;GAAa,QAAQ,eAAe;EAAO,GAAG,aAAa,KAAK;EAC5F,SACC,OAAO,kBAAkB,KAAK,QAAQ,gBAAgB,KAAK;CAC7D;AACD;;AAGA,SAAS,WAAW,KAAU,SAAyB;CACtD,IAAI;CACJ,IAAI;EACH,UAAU,MAAM,IAAI,OAAO,YAAY,KAAA,GAAW,CAAC,OAAO,CAAC;CAC5D,QAAQ;EACP,UAAU;CACX;CACA,IAAI,OAAO,YAAY,YAAY,CAACD,iBAAe,OAAO,KAAK,UAAU,GAAG;EAC3E,MAAM,SAAS,IAAI,OAAO,OAAO;EACjC,UAAU,OAAO,OAAO,SAAS;CAClC;CACA,OAAO;AACR;AAEA,SAAS,kBACR,KACA,QACA,gBACA,OACgB;CAChB,MAAM,UAAU,OAAO,eAAe;CACtC,IAAI,WAAW,IAAI,OAAO,OAAO,qBAChC,OAAO,OAAO,KAAK;EAAE,MAAM;EAAe,QAAQ,eAAe;CAAO,GAAG,iBAAiB,KAAK;CAKlG,MAAM,gBAHQ,UAAU,IAAI,OAAO,KAGT,IADVE,UAAQ,WAAW,KAAK,OAAO,GAAG,eAAe,gBAAgB,CAC7C;CACpC,IAAI,iBAAiB,OAAO,sBAAsB,OAAO,WAAW,KAAK,gCAAgC,KAAK;CAC9G,OAAO,OAAO,KAAK;EAAE,MAAM;EAAS,aAAa,IAAI,KAAK,aAAa;EAAG,SAAS;EAAa,QAAQ,eAAe;CAAO,GAAG,mBAAmB,KAAK;AAC1J;;;;;;;AAQA,SAAS,QAAQ,KAAU,QAAuB,YAAkD;CAEnG,MAAM,gBADQ,UAAU,IAAI,OAAO,KACT,IAAI,WAAW,KAAK,OAAO,eAAe,CAAC;CACrE,IAAI,iBAAiB,OAAO,sBAAsB,OAAO,WAAW,KAAK,gCAAgC,EAAE,WAAW,CAAC;CACvH,OAAO,OAAO,KAAK;EAAE,MAAM;EAAW,aAAa,IAAI,KAAK,aAAa;EAAG;CAAW,GAAG,YAAY,EAAE,WAAW,CAAC;AACrH;AAEA,SAAS,OAAO,KAAU,QAAiG;CAC1H,OAAO,OAAO,KAAK;EAAE,MAAM;EAAa;CAAO,GAAG,aAAa,EAAE,OAAO,CAAC;AAC1E;AAEA,SAAS,WAAW,KAAU,YAAmC,QAA4C,CAAC,GAAkB;CAC/H,OAAO,OAAO,KAAK;EAAE,MAAM;EAAe,QAAQ;CAAW,GAAG,iBAAiB;EAAE,GAAG;EAAO;CAAW,CAAC;AAC1G;;;;;;;;;;AAaA,eAAe,OACd,KACA,YACA,QACA,OACgB;CAChB,MAAM,UAAU,MAAM,WAAW,MAAM,SAAS,UAAU,IAAI,OAAO,WAAW,qBAAqB;EACpG,YAAY,IAAI,OAAO;EACvB,OAAO,IAAI,OAAO,MAAM;EACxB,OAAO,IAAI,OAAO,MAAM;EACxB,KAAK,IAAI,KAAK,KAAK;EACnB;CACD,GAAG,OAAO,CAAC;CACX,IAAI,QAAQ,MAAM,QAAQ,UAAU,MAAM,OAAO,OAAO,KAAK,QAAQ,KAAK;CAC1E,IAAI,QAAQ,MAAM,QAAQ,UAAU,OAAO,OAAO,OAAO,KAAK,cAAc;EAAE,GAAG;EAAO,YAAY;CAAa,CAAC;CAClH,OAAO,OAAO,KAAK,aAAa,KAAK;AACtC;AAEA,MAAM,UAA4E,OAAO;CACxF,WAAW;CACX,iBAAiB;CACjB,eAAe;CACf,WAAW;CACX,UAAU;CACV,YAAY;CACZ,WAAW;AACZ,CAAC;;AAGD,SAAS,OAAO,KAAU,QAAwC,QAA4C,CAAC,GAAS;CACvH,IAAI,IAAI,UAAU;CAClB,IAAI,WAAW;CACf,IAAI,SAAS,QAAQ,YAAY;CACjC,MAAM,UAAU,IAAI,OAAO;CAC3B,IAAI,YAAY,KAAA,GAAW;CAC3B,MAAM,SAAS,IAAI;CACnB,MAAM,QAAQ,OAAkC;EAC/C,YAAY,IAAI,OAAO;EACvB,UAAU,IAAI,OAAO;EACrB,SAAS,IAAI,OAAO;EACpB,gBAAgB,QAAQ;EACxB,SAAS,QAAQ;EACjB,SAAS,WAAW,KAAA,IAAY,KAAA,IAAY,OAAO,eAAe;EAClE,sBAAsB,IAAI;EAC1B;EACA,WAAW,IAAI;EACf,QAAQ,MAAM;EACd,YAAY,MAAM;EAClB,YAAY,MAAM;EAClB,sBAAsB,MAAM;CAC7B,CAAC;CACD,IAAI;EACH,MAAM,SAAS,KAAA,GAAW,CAAC,KAAK,CAAC;CAClC,QAAQ,CAER;AACD;;;;ACz0BA,MAAa,gCAAgC,OAAO;CACnD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACD,CAAU;;;;;;;;;;;AAeV,MAAa,iCAAiC,OAAO;CACpD;CACA;CACA;CACA;CACA;CACA;AACD,CAAU;;AAmFV,MAAa,gCAAgC;;AAE7C,MAAa,iCAAiC;AAE9C,MAAM,mBAAmB;AACzB,MAAM,0BAA0B;;;;;;;;;;;;;;;;;AAkBhC,SAAgB,yBAAyB,OAAiC;CACzE,OAAO,OAAO,UAAU,YAAY,MAAM,UAAA,OACzC,QAAQ,kBAAkB,KAAK,KAAK,CAAC,QAAQ,yBAAyB,KAAK;AAC7E;;AAGA,MAAa,kCAAkC;AAE/C,MAAM,gBAAgB;;;;;;;AAQtB,SAAgB,0BAA0B,OAAiC;CAC1E,OAAO,OAAO,UAAU,YAAY,MAAM,UAAU,OAAO,QAAQ,eAAe,KAAK;AACxF;;;;;;;;;AAgBA,IAAM,UAAN,MAAc;CACb,SAAkB;CAClB;CACA;CAEA,YAAY,MAAkC,OAAe;EAC5D,KAAK,OAAO;EACZ,KAAK,QAAQ;EACb,OAAO,IAAI;CACZ;;CAGA,OAAO,GAAG,OAAkC;EAC3C,OAAO,UAAU,QAAQ,OAAO,UAAU,YAAY,UAAU;CACjE;AACD;AAEA,MAAM,aAAa,OAAO;AAE1B,SAAS,OAAO,MAAkC,OAAsB;CACvE,MAAM,IAAI,QAAQ,MAAM,KAAK;AAC9B;AAEA,MAAM,qBAA2B,OAAO,sBAAsB,YAAY;AAI1E,MAAM,eAAiF,OAAO;CAC7F,qBAAqB,OAAO;EAAC;EAAkB;EAAqB;EAAkB;EAAa;CAAiB,CAAC;CACrH,qBAAqB,OAAO;EAAC;EAAkB;EAAqB;EAAoB;EAAkB;CAAiB,CAAC;CAC5H,oBAAoB,OAAO,CAAC,kBAAkB,kBAAkB,CAAC;CACjE,qBAAqB,OAAO,CAAC,kBAAkB,kBAAkB,CAAC;CAClE,qBAAqB,OAAO,CAAC,kBAAkB,kBAAkB,CAAC;CAClE,sBAAsB,OAAO;EAAC;EAAkB;EAAa;EAAmB;CAA2B,CAAC;CAC5G,yBAAyB,OAAO;EAAC;EAAkB;EAAa;CAAiB,CAAC;CAClF,yBAAyB,OAAO,CAAC,cAAc,eAAe,CAAC;CAC/D,qBAAqB,OAAO,CAAC,WAAW,eAAe,CAAC;CACxD,0BAA0B,OAAO,CAAC,WAAW,eAAe,CAAC;AAC9D,CAAC;AAED,SAAS,mBAAmB,OAAwB;CACnD,MAAM,OAAO,aAAa,OAAO,cAAc,YAAY;CAC3D,IAAI,SAAS,QAAQ,OAAO,SAAS,YAAY,QAAQ,IAAI,GAAG,OAAO,sBAAsB,YAAY;CACzG,OAAO;AACR;AAEA,SAAS,QAAQ,QAAgB,KAAqB;CACrD,MAAM,QAAQ,OAAO;CACrB,IAAI,CAAC,oBAAoB,KAAK,GAAG,OAAO,sBAAsB,GAAG;CACjE,OAAO;AACR;AAEA,SAAS,cAAc,QAAgB,KAAa,KAAiC;CACpF,MAAM,QAAQ,OAAO;CACrB,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,IAAI,OAAO,UAAU,YAAY,CAACC,sBAAoB,KAAK,KAAK,QAAQ,KAAK,OAAO,sBAAsB,GAAG;CAC7G,OAAO;AACR;AAEA,SAASC,QAAM,QAAgB,KAAa,KAAqB;CAChE,MAAM,QAAQ,cAAc,QAAQ,KAAK,GAAG;CAC5C,IAAI,UAAU,KAAA,GAAW,OAAO,sBAAsB,GAAG;CACzD,OAAO;AACR;AAEA,SAAS,eAAe,QAAwB;CAC/C,MAAM,QAAQ,OAAO;CACrB,IAAI,CAAC,yBAAyB,KAAK,GAAG,OAAO,sBAAsB,WAAW;CAC9E,OAAO;AACR;AAEA,SAAS,iBAAiB,QAAwB;CACjD,MAAM,QAAQ,OAAO;CACrB,IAAI,OAAO,UAAU,UAAU,OAAO,uBAAuB,gBAAgB;CAE7E,IAAI,CADU,cAAc,2BAA2B,KAAK,UAAU;EAAE,IAAI;EAAgB,MAAM;CAAuB,EAChH,CAAC,CAAC,IAAI,OAAO,uBAAuB,gBAAgB;CAC7D,OAAO;AACR;AAEA,SAAS,cAAc,QAAmC;CACzD,MAAM,QAAQ,OAAO;CACrB,IAAI,CAAC,QAAQ,KAAK,KAAK,MAAM,WAAW,KAAK,MAAM,SAAA,IAA0C,OAAO,8BAA8B,mBAAmB;CACrJ,MAAM,MAAgB,CAAC;CACvB,KAAK,IAAI,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS,GAAG;EACrD,MAAM,UAAU,MAAM;EACtB,IAAI,CAAC,0BAA0B,OAAO,GAAG,OAAO,8BAA8B,mBAAmB;EACjG,IAAI,SAAS;CACd;CACA,OAAO,OAAO,GAAG;AAClB;;AAGA,SAAS,cAAc,QAAgB,MAAuC;CAC7E,MAAM,OAAO,WAAW,MAAM;CAC9B,KAAK,IAAI,QAAQ,GAAG,QAAQ,KAAK,QAAQ,SAAS,GACjD,IAAI,CAAC,QAAQ,aAAa,OAAO,KAAK,MAAM,GAAG,OAAO,qBAAqB,YAAY;AAEzF;AAEA,SAAS,WAAW,MAAiC,QAAwB;CAC5E,QAAQ,MAAR;EACC,KAAK,uBAAuB;GAC3B,MAAM,SAAS,OAAO;GACtB,IAAI,WAAW,KAAA,KAAa,WAAW,MAAM,OAAO,sBAAsB,iBAAiB;GAC3F,OAAO;IACN,gBAAgB,QAAQ,QAAQ,gBAAgB;IAChD,mBAAmB,cAAc,MAAM;IACvC,gBAAgB,iBAAiB,MAAM;IACvC,WAAW,eAAe,MAAM;IAChC,GAAI,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,iBAAiB,KAAK;GACzD;EACD;EACA,KAAK,uBAAuB;GAC3B,MAAM,WAAW,OAAO,yBAAyB,KAAA;GAEjD,IAAI,cADgB,OAAO,sBAAsB,KAAA,IACnB,OAAO,oBAAoB,YAAY;GACrE,MAAM,iBAAiB,QAAQ,QAAQ,gBAAgB;GACvD,IAAI,UAAU;IACb,IAAI,OAAO,uBAAuB,KAAA,GAAW,OAAO,sBAAsB,iBAAiB;IAC3F,MAAM,mBAAmB,cAAc,QAAQ,oBAAoB,CAAC;IACpE,OAAO;KAAE;KAAgB,mBAAmB,cAAc,MAAM;KAAG,GAAI,qBAAqB,KAAA,IAAY,CAAC,IAAI,EAAE,iBAAiB;IAAG;GACpI;GACA,IAAI,OAAO,wBAAwB,KAAA,GAAW,OAAO,sBAAsB,kBAAkB;GAC7F,MAAM,kBAAkB,cAAc,QAAQ,mBAAmB,CAAC;GAClE,OAAO;IAAE;IAAgB,gBAAgB,iBAAiB,MAAM;IAAG,GAAI,oBAAoB,KAAA,IAAY,CAAC,IAAI,EAAE,gBAAgB;GAAG;EAClI;EACA,KAAK;EACL,KAAK;EACL,KAAK,uBAAuB;GAC3B,MAAM,mBAAmB,cAAc,QAAQ,oBAAoB,CAAC;GACpE,OAAO;IAAE,gBAAgB,QAAQ,QAAQ,gBAAgB;IAAG,GAAI,qBAAqB,KAAA,IAAY,CAAC,IAAI,EAAE,iBAAiB;GAAG;EAC7H;EACA,KAAK;GACJ,IAAI,OAAO,iCAAiC,MAAM,OAAO,sBAAsB,2BAA2B;GAC1G,OAAO;IACN,gBAAgB,QAAQ,QAAQ,gBAAgB;IAChD,WAAW,eAAe,MAAM;IAChC,iBAAiBA,QAAM,QAAQ,mBAAmB,CAAC;IACnD,2BAA2B;GAC5B;EAED,KAAK,2BAA2B;GAC/B,MAAM,kBAAkB,cAAc,QAAQ,mBAAmB,CAAC;GAClE,OAAO;IAAE,gBAAgB,QAAQ,QAAQ,gBAAgB;IAAG,WAAW,eAAe,MAAM;IAAG,GAAI,oBAAoB,KAAA,IAAY,CAAC,IAAI,EAAE,gBAAgB;GAAG;EAC9J;EACA,KAAK,2BACJ,OAAO;GAAE,YAAY,QAAQ,QAAQ,YAAY;GAAG,eAAeA,QAAM,QAAQ,iBAAiB,CAAC;EAAE;EACtG,KAAK;EACL,KAAK,4BACJ,OAAO;GAAE,SAAS,QAAQ,QAAQ,SAAS;GAAG,eAAeA,QAAM,QAAQ,iBAAiB,CAAC;EAAE;CACjG;AACD;;AAGA,SAAS,aAAa,MAAe,OAA2G;CAC/I,OAAO,OAAO;EACb,IAAI;EACJ,MAAM,QAAQ,gCAAgC,IAAI,IAAK,OAAsC;EAC7F,OAAO,OAAO,UAAU,YAAY,eAAe,KAAK,IAAI,QAAQ;CACrE,CAAC;AACF;AAEA,MAAM,qBAAqB,aAAa,sBAAsB,YAAY;;;;;;;;;;AAW1E,SAAgB,4BAAiE,MAAS,OAA+C;CACxI,IAAI;EACH,MAAM,SAAS,mBAAmB,KAAK;EACvC,cAAc,QAAQ,IAAI;EAC1B,OAAO,OAAO;GAAE,IAAI;GAAe,OAAO,OAAO,WAAW,MAAM,MAAM,CAAC;EAAwC,CAAC;CACnH,SAAS,QAAQ;EAChB,OAAO,QAAQ,GAAG,MAAM,IAAI,aAAa,OAAO,MAAM,OAAO,KAAK,IAAI;CACvE;AACD;;AAGA,SAAS,eAAe,OAAwB;CAC/C,IAAI,UAAU,cAAc,OAAO;CACnC,KAAK,MAAM,QAAQ,+BAA+B,IAAI,QAAQ,aAAa,OAAO,KAAK,GAAG,OAAO;CACjG,OAAO;AACR;;AAGA,SAAgB,+BAA+B,MAAkC,OAAuB;CACvG,OAAO,GAAG,KAAK,IAAI,eAAe,KAAK,IAAI,QAAQ,aAAa;AACjE;AAeA,MAAM,YAAY,OAAO;CAAE,MAAM;CAAU,WAAW;CAAG,WAAW;AAAI,CAAC;AACzE,MAAM,eAAe,OAAO;CAAE,MAAM;CAAW,SAAS;AAAE,CAAC;AAC3D,MAAM,kBAAkB,OAAO;CAAE,MAAM;CAAW,SAAS;AAAE,CAAC;AAC9D,MAAM,oBAAoB,OAAO;CAChC,MAAM;CACN,WAAA;CACA,SAAS;CACT,aAAa;AACd,CAAC;AACD,MAAM,kBAAkB,OAAO;CAC9B,MAAM;CACN,UAAU;CACV,UAAA;CACA,OAAO;EAAE,MAAM;EAAU,WAAW;EAAK,SAAS;CAA8D;AACjH,CAAC;AACD,MAAM,aAAa,OAAO;CAAE,MAAM;CAAU,WAAW;CAAM,SAAS;AAAY,CAAC;AAEnF,SAAS,aAAa,YAAoC,UAAqC;CAC9F,OAAO;EAAE,MAAM;EAAU;EAAY,UAAU,CAAC,GAAG,QAAQ;EAAG,sBAAsB;CAAM;AAC3F;AAEA,MAAM,eAA4E,OAAO;CACxF,2BAA2B,aAC1B;EAAE,gBAAgB;EAAW,mBAAmB;EAAiB,gBAAgB;EAAY,WAAW;EAAmB,iBAAiB;GAAE,MAAM;GAAU,MAAM,CAAC,IAAI;EAAE;CAAE,GAC7K;EAAC;EAAkB;EAAqB;EAAkB;CAAW,CACtE;CACA,4BAA4B;EAC3B,GAAG,aAAa;GAAE,gBAAgB;GAAW,mBAAmB;GAAiB,kBAAkB;GAAiB,gBAAgB;GAAY,iBAAiB;EAAgB,GAAG,CAAC,gBAAgB,CAAC;EACtM,OAAO,CAAC,EAAE,UAAU,CAAC,mBAAmB,EAAE,GAAG,EAAE,UAAU,CAAC,gBAAgB,EAAE,CAAC;CAC9E;CACA,0BAA0B,aAAa;EAAE,gBAAgB;EAAW,kBAAkB;CAAgB,GAAG,CAAC,gBAAgB,CAAC;CAC3H,2BAA2B,aAAa;EAAE,gBAAgB;EAAW,kBAAkB;CAAgB,GAAG,CAAC,gBAAgB,CAAC;CAC5H,2BAA2B,aAAa;EAAE,gBAAgB;EAAW,kBAAkB;CAAgB,GAAG,CAAC,gBAAgB,CAAC;CAC5H,4BAA4B,aAC3B;EAAE,gBAAgB;EAAW,WAAW;EAAmB,iBAAiB;EAAiB,2BAA2B;GAAE,MAAM;GAAW,OAAO;EAAK;CAAE,GACzJ;EAAC;EAAkB;EAAa;EAAmB;CAA2B,CAC/E;CACA,+BAA+B,aAAa;EAAE,gBAAgB;EAAW,WAAW;EAAmB,iBAAiB;CAAgB,GAAG,CAAC,kBAAkB,WAAW,CAAC;CAC1K,+BAA+B,aAAa;EAAE,YAAY;EAAW,eAAe;CAAa,GAAG,CAAC,cAAc,eAAe,CAAC;CACnI,2BAA2B,aAAa;EAAE,SAAS;EAAW,eAAe;CAAa,GAAG,CAAC,WAAW,eAAe,CAAC;CACzH,gCAAgC,aAAa;EAAE,SAAS;EAAW,eAAe;CAAa,GAAG,CAAC,WAAW,eAAe,CAAC;AAC/H,CAAC;;AAGD,IAAM,8BAAN,cAA0C,MAAM;CAC/C,YAAY,SAAiB;EAC5B,MAAM,OAAO;EACb,KAAK,OAAO;CACb;AACD;;;;;;AAOA,SAAgB,oBAAyD,MAAkE;CAC1I,MAAM,aAAa,UAAmB;EACrC,MAAM,OAAO,4BAA4B,MAAM,KAAK;EACpD,IAAI,KAAK,IAAI,OAAO;GAAE,SAAS;GAAe,MAAM,KAAK;EAAM;EAC/D,OAAO;GAAE,SAAS;GAAgB,OAAO,EAAE,QAAQ,CAAC;IAAE,MAAM,CAAC;IAAoB,SAAS,+BAA+B,KAAK,MAAM,KAAK,KAAK;GAAE,CAAC,EAAE;EAAE;CACtJ;CACA,OAAO,OAAO;EACb,MAAM,OAAgB;GACrB,MAAM,SAAS,UAAU,KAAK;GAC9B,IAAI,OAAO,SAAS,OAAO,OAAO;GAClC,MAAM,IAAI,4BAA4B,OAAO,MAAM,OAAO,EAAE,CAAE,OAAO;EACtE;EACA;EACA,cAAc,aAAa;CAC5B,CAAC;AACF;AAMA,MAAM,kBAAkB;;AAGxB,MAAa,qCAAqC;;AAGlD,SAAgB,2BAA2B,OAAiC;CAC3E,OAAO,OAAO,UAAU,YAAY,QAAQ,iBAAiB,KAAK;AACnE;;AAGA,SAAgB,oBAAoB,WAAmB,UAA0D;CAChH,IAAI,OAAO,aAAa,YAAY,SAAS,UAAU,UAAU,SAAS,KAAK,SAAS,UAAU,YAAY,KAAK,OAAO,KAAA;CAC1H,IAAI,SAAS,MAAM,GAAG,UAAU,MAAM,MAAM,WAAW,OAAO,KAAA;CAC9D,MAAM,OAAO,SAAS,MAAM,UAAU,SAAS,CAAC;CAChD,KAAK,MAAM,aAAa,+BAA+B,IAAI,cAAc,MAAM,OAAO;AAEvF;;;;ACzUA,SAAgB,wBAAwB,YAAoB,oCAA4D;CACvH,OAAO,GAAG,UAAU;AACrB;AAmBA,MAAM,eAAe;AACrB,MAAM,SAAS;AACf,MAAM,MAAM;;AAGZ,SAAS,QAAQ,MAA8C;CAC9D,OAAO;EAAE,SAAS;EAAO,OAAO,0BAA0B;CAAO;AAClE;;AAGA,SAAS,QAAQ,WAA2C,aAAqB,WAAmB,SAAgD;CACnJ,OAAO;EACN,SAAS;EACT,MAAM;GAAE,GAAG;GAAS,SAAS,CAAC;IAAE;IAAW,oBAAoB;IAAG;IAAa;IAAW;GAAQ,CAAC;EAAE;CACtG;AACD;;;;;;;;;AAUA,IAAM,OAAN,MAAW;CACV,SAAkB;CAClB;CAEA,YAAY,MAAgC;EAC3C,KAAK,OAAO;EACZ,OAAO,IAAI;CACZ;;CAGA,OAAO,GAAG,OAA+B;EACxC,OAAO,UAAU,QAAQ,OAAO,UAAU,YAAY,UAAU;CACjE;AACD;AAEA,SAAS,KAAK,MAAuC;CACpD,MAAM,IAAI,KAAK,IAAI;AACpB;AAEA,MAAM,2BAA2B,QAAQ;;AAGzC,SAAS,KAAK,OAAgB,KAAsB;CACnD,IAAI,UAAU,QAAQ,OAAO,UAAU,UAAU,OAAO,KAAA;CACxD,IAAI;EACH,MAAM,aAAa,yBAAyB,OAAO,GAAG;EACtD,OAAO,eAAe,KAAA,KAAa,WAAW,aAAa,WAAW,QAAQ,KAAA;CAC/E,QAAQ;EACP;CACD;AACD;AAEA,SAAS,MAAM,OAAoC;CAClD,OAAO,OAAO,UAAU,YAAYC,sBAAoB,KAAK,KAAK,SAAS,IAAI,QAAQ,KAAA;AACxF;AAEA,SAAS,MAAM,MAAoB;CAClC,IAAI;EACH,OAAO,gBAAgB,KAAK,KAAK;CAClC,QAAQ;EACP,OAAO,KAAK,eAAe;CAC5B;AACD;;;;;;AAOA,eAAe,KAAQ,MAAY,KAAkD,QAAkE;CACtJ,MAAM,UAAU,MAAM,YAAY,MAAM,IAAI,GAAG,KAAK,OAAO,eAAe,QAAQ,WAAW,gBAAgB,KAAK,KAAK,CAAC;CACxH,OAAO,QAAQ,KAAK,EAAE,OAAO,QAAQ,MAAM,IAAI,KAAA;AAChD;;;;;;AAOA,SAAS,QAAQ,KAA2C;CAC3D,MAAM,WAAW,KAAK,KAAK,UAAU;CACrC,MAAM,UAAU,KAAK,KAAK,SAAS;CACnC,IAAI,CAAC,oBAAoB,QAAQ,KAAK,CAAC,oBAAoB,OAAO,GAAG,KAAK,eAAe;CACzF,OAAO,OAAO;EAAE;EAAU;CAAQ,CAAC;AACpC;AAEA,SAAS,QAAQ,KAAqC;CACrD,MAAM,UAAU,KAAK,KAAK,SAAS;CACnC,IAAI,CAAC,oBAAoB,OAAO,GAAG,KAAK,eAAe;CACvD,OAAO;AACR;AAEA,SAAS,aAAa,KAAiD;CACtE,MAAM,KAAK,KAAK,KAAK,oBAAoB;CACzC,OAAO,oBAAoB,EAAE,IAAI,KAAK,KAAA;AACvC;;AAaA,eAAe,oBAAoB,MAAY,OAAqB,gBAAmD;CACtH,MAAM,SAAS,MAAM,KAAK,OAAO,YAAY,KAAK,cAAc,iBAAiB;EAAE,GAAG;EAAO;CAAe,GAAG,OAAO,CAAC;CACvH,IAAI,WAAW,KAAA,GAAW,OAAO,KAAK,mBAAmB;CACzD,IAAI,OAAO,UAAU,MAAM,OAAO,KAAK,wBAAwB;CAC/D,MAAM,gBAAgB,KAAK,OAAO,OAAO,eAAe;CACxD,MAAM,OAAO;EACZ,QAAQ,KAAK,OAAO,OAAO,QAAQ;EACnC,qBAAqB,MAAM,KAAK,OAAO,OAAO,qBAAqB,CAAC;EACpE,SAAS,MAAM,KAAK,eAAe,SAAS,CAAC;EAC7C,gBAAgB,KAAK,eAAe,gBAAgB;EACpD,iBAAiB,KAAK,eAAe,iBAAiB;EACtD,WAAW,KAAK,eAAe,WAAW;CAC3C;CAEA,IAAI,KAAK,OAAO,OAAO,gBAAgB,MAAM,kBAAkB,KAAK,OAAO,OAAO,UAAU,MAAM,MAAM,YAAY,KAAK,OAAO,OAAO,SAAS,MAAM,MAAM,SAC3J,OAAO,KAAK,wBAAwB;CAErC,IAAI,CAAC,QAAQ;EAAC;EAAU;EAAU;CAAS,GAAG,KAAK,MAAM,KAAK,KAAK,wBAAwB,KAAA,KAAa,KAAK,sBAAsB,KAClI,KAAK,YAAY,KAAA,KAAa,OAAO,KAAK,mBAAmB,YAC7D,KAAK,oBAAoB,QAAQ,OAAO,KAAK,cAAc,UAC3D,OAAO,KAAK,mBAAmB;CAEhC,OAAO;AACR;;AAGA,eAAe,gBAAgB,MAAY,OAAqB,WAAmB,QAAqC;CACvH,MAAM,SAAS,MAAM,KAAK,OAAO,YAAY,KAAK,iBAAiB,OAAO;EAAE,GAAG;EAAO;CAAU,GAAG,OAAO,GAAG,MAAM;CACnH,IAAI,WAAW,KAAA,GAAW,KAAK,uBAAuB;CACtD,IAAI,OAAO,UAAU,WAAW,KAAK,oBAAoB;CACzD,IAAI,OAAO,UAAU,SAAS,KAAK,uBAAuB;AAC3D;;AAGA,eAAe,eAAe,MAAY,KAA4B;CACrE,MAAM,SAAS,MAAM,KAAK,OAAO,YAAY,KAAK,SAAS,QAAQ,KAAK,OAAO,CAAC;CAChF,IAAI,WAAW,KAAA,GAAW,KAAK,wBAAwB;CACvD,IAAI,KAAK,OAAO,OAAO,IAAI,MAAM,MAAM;CACvC,MAAM,OAAO,KAAK,OAAO,OAAO,MAAM;CACtC,KAAK,SAAS,iBAAiB,SAAS,oBAAoB,wBAAwB,wBAAwB;AAC7G;AAEA,MAAM,wBAAkF,OAAO;CAC9F,WAAW;CACX,gBAAgB;CAChB,SAAS;CACT,oBAAoB;CACpB,mBAAmB;CACnB,kBAAkB;AACnB,CAAC;AAED,MAAM,oBAA8E,OAAO;CAC1F,WAAW;CACX,OAAO;CACP,iBAAiB;CACjB,cAAc;CACd,gBAAgB;CAChB,eAAe;CACf,kBAAkB;AACnB,CAAC;AAED,SAAS,WAAW,OAAiE,SAA4C;CAChI,OAAO,OAAO,YAAY,YAAY,QAAQ,OAAO,KAAK,KAAK,GAAG,OAAO,IAAI,MAAM,WAAY;AAChG;;;;;;AAOA,SAAS,QAAQ,QAAiD,UAA6E;CAC9I,IAAI,WAAW,KAAA,GAAW,OAAO,KAAK,uBAAuB;CAC7D,MAAM,OAAO,KAAK,OAAO,OAAO,SAAS;CACzC,IAAI,SAAS,MAAM,OAAO,OAAO;CACjC,IAAI,SAAS,OAAO,OAAO,KAAK,WAAW,UAAU,KAAK,OAAO,OAAO,SAAS,CAAC,CAAC;CACnF,OAAO,KAAK,uBAAuB;AACpC;;;;;;AAYA,eAAe,cAAc,MAAY,OAAqB,cAAkC,QAA0C;CACzI,IAAI,iBAAiB,KAAA,GAAW,OAAO,KAAA;CACvC,MAAM,SAAS,MAAM,KAAK,OAAO,YAAY,KAAK,WAAW,8BAA8B;EAAE,GAAG;EAAO,oBAAoB;CAAa,GAAG,OAAO,CAAC;CACnJ,IAAI,WAAW,KAAA,GAAW,OAAO,KAAK,mBAAmB;CACzD,MAAM,OAAO,OAAO;CACpB,IAAI,CAAC,MAAM,QAAQ,IAAI,GAAG,OAAO,KAAK,mBAAmB;CACzD,KAAK,MAAM,YAAY,MAAM;EAC5B,IAAI,KAAK,UAAU,oBAAoB,MAAM,gBAAgB,KAAK,UAAU,QAAQ,MAAM,OAAO,QAAQ;EACzG,IAAI,KAAK,UAAU,UAAU,MAAM,MAAM,YAAY,KAAK,UAAU,SAAS,MAAM,MAAM,SAAS;EAClG,IAAI,OAAO,WAAW,oBAAoB,KAAK,UAAU,YAAY,MAAM,OAAO,aAAa,KAAK,UAAU,SAAS,MAAM,OAAO,SAAS,OAAO;CACrJ;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6BA,eAAe,kBACd,MACA,OACA,cACA,QACA,OACmB;CACnB,MAAM,QAAQ,MAAM,cAAc,MAAM,OAAO,cAAc,MAAM;CACnE,IAAI,UAAU,KAAA,GAAW,OAAO;CAChC,IAAI;EACH,OAAO,MAAM,MAAM;CACpB,SAAS,QAAQ;EAChB,IAAI,iBAAiB,KAAA,GAAW,MAAM;EACtC,IAAI;EACJ,IAAI;GACH,YAAY,MAAM,cAAc,MAAM,OAAO,cAAc,MAAM;EAClE,QAAQ;GACP,MAAM;EACP;EACA,IAAI,cAAc,KAAA,GAAW,OAAO;EACpC,MAAM;CACP;AACD;AAeA,SAAS,kBACR,WACA,gBACA,SACe;CACf,OAAO,QAAQ,WAAW,cAAc,gBAAgB;EAAE;EAAgB,GAAG;CAAQ,CAAC;AACvF;AAEA,SAAS,WAAW,QAAyB;CAE5C,OADiB,MAAM,KAAK,KAAK,QAAQ,UAAU,GAAG,UAAU,CAClD,KAAK,KAAK,uBAAuB;AAChD;AAEA,SAAS,UAAU,QAAyB;CAE3C,OADgB,MAAM,KAAK,KAAK,QAAQ,eAAe,GAAG,SAAS,CACtD,KAAK,KAAK,uBAAuB;AAC/C;;AAGA,eAAe,iBACd,MACA,OACA,QACA,MACwB;CAIxB,MAAM,WAAW,WAAW,QAAQ,MAAM,KAAK,MAHjC,SAAS,WACnB,YAAgC,KAAK,cAAc,kBAAkB;EAAE,GAAG;EAAO,GAAG;CAAO,GAAG,OAAO,KACrG,YAAgC,KAAK,cAAc,mBAAmB;EAAE,GAAG;EAAO,GAAG;CAAO,GAAG,OAAO,CAChD,GAAG,qBAAqB,CAAC;CACnF,MAAM,0BAA0B,MAAM,QAAQ,MAAM,OAAO,OAAO,gBAAgB,SAAS,UAAU,wBAAwB,wBAAwB,QAAQ;CAC7J,OAAO,kBAAkB,SAAS,UAAU,8BAA8B,8BAA8B,OAAO,gBAAgB;EAC9H;EACA;CACD,CAAC;AACF;;;;;;;;;;;;AAaA,eAAe,QACd,MACA,OACA,gBACA,QACA,gBACyB;CACzB,MAAM,YAAY,MAAM,KAAK,OAAO,YAAY,KAAK,WAAW,qBAAqB;EACpF,GAAG;EACH;EACA;EACA;EACA,KAAK,IAAI,KAAK,MAAM,IAAI,CAAC;CAC1B,GAAG,OAAO,CAAC;CACX,QAAQ,cAAc,KAAA,IAAY,KAAA,IAAY,MAAM,UAAU,KAAK,MAAM;AAC1E;;AAGA,eAAe,OACd,MACA,OACA,QACA,MACwB;CACxB,MAAM,UAAU,MAAM,oBAAoB,MAAM,OAAO,OAAO,cAAc;CAC5E,IAAI,QAAQ,WAAW,WAAW,KAAK,sBAAsB;CAC7D,IAAI,OAAO,oBAAoB,KAAA,KAAa,OAAO,oBAAoB,QAAQ,SAAS,KAAK,kBAAkB;CAC/G,IAAI,OAAO,cAAc,QAAQ,WAAW,KAAK,sBAAsB;CACvE,MAAM,gBAAgB,MAAM,OAAO,OAAO,SAAS;CASnD,MAAM,uBAAuB,UARd,QAAQ,MAAM,KAAK,OAAO,YAAY,KAAK,cAAc,6BAA6B;EACpG,GAAG;EACH,gBAAgB,OAAO;EACvB,eAAe;GAAE,gBAAgB,QAAQ;GAAgB,iBAAiB,QAAQ;GAAiB,WAAW,OAAO;EAAU;EAG/H,iBAAiB,OAAO,mBAAmB,QAAQ;CACpD,GAAG,OAAO,CAAC,GAAG,qBAC8B,CAAC;CAC7C,MAAM,gBAAgB,MAAM,IAAI;CAIhC,MAAM,WAAW,KAAK,OAAO,gBAAgB,KAAK,OAAO,mBAAmB,KAAK;CACjF,OAAO,kBAAkB,wBAAwB,OAAO,gBAAgB;EACvE;EACA;EACA,aAAa,MAAM,aAAa;EAChC,2BAA2B,SAAS,WAAW,MAAM,gBAAgB,QAAQ,IAAI;CAClF,CAAC;AACF;AAEA,MAAM,WAAqB,OAAO;CACjC,MAAM,oBAAoB,MAAM,MAAM,OAAO,QAAQ;EACpD,MAAM,gBAAgB,MAAM,OAAO,OAAO,SAAS;EACnD,MAAM,eAAe,MAAM,OAAO,cAAc;EAChD,MAAM,SAAS,QAAQ,MAAM,KAAK,OAAO,YAAY,KAAK,cAAc,mBAAmB;GAC1F,GAAG;GACH,gBAAgB,OAAO;GACvB,mBAAmB,OAAO;GAC1B,eAAe;IAAE,gBAAgB,OAAO;IAAgB,iBAAiB;IAAM,WAAW,OAAO;GAAU;EAC5G,GAAG,OAAO,CAAC,GAAG,qBAAqB;EACnC,OAAO,kBAAkB,8BAA8B,OAAO,gBAAgB;GAC7E,UAAU,WAAW,MAAM;GAC3B,sBAAsB,UAAU,MAAM;GACtC,mBAAmB,CAAC,GAAG,OAAO,iBAAiB;EAChD,CAAC;CACF;CAEA,MAAM,oBAAoB,MAAM,MAAM,OAAO,QAAQ;EACpD,IAAI,uBAAuB,QAAQ;GAClC,MAAM,SAAS,QAAQ,MAAM,KAAK,OAAO,YAAY,KAAK,cAAc,wBAAwB;IAAE,GAAG;IAAO,GAAG;GAAO,GAAG,OAAO,CAAC,GAAG,qBAAqB;GACzJ,OAAO,kBAAkB,8BAA8B,OAAO,gBAAgB;IAC7E,QAAQ;IACR,UAAU,WAAW,MAAM;IAC3B,mBAAmB,CAAC,GAAG,OAAO,iBAAiB;GAChD,CAAC;EACF;EACA,MAAM,UAAU,MAAM,oBAAoB,MAAM,OAAO,OAAO,cAAc;EAC5E,IAAI,QAAQ,WAAW,WAAW,KAAK,sBAAsB;EAC7D,IAAI,OAAO,oBAAoB,KAAA,KAAa,OAAO,oBAAoB,QAAQ,SAAS,KAAK,kBAAkB;EAC/G,MAAM,eAAe,MAAM,OAAO,cAAc;EAChD,MAAM,SAAS,QAAQ,MAAM,KAAK,OAAO,YAAY,KAAK,cAAc,6BAA6B;GACpG,GAAG;GACH,gBAAgB,OAAO;GACvB,eAAe;IAAE,gBAAgB,OAAO;IAAgB,iBAAiB,QAAQ;IAAiB,WAAW,QAAQ;GAAU;GAC/H,iBAAiB,OAAO,mBAAmB,QAAQ;EACpD,GAAG,OAAO,CAAC,GAAG,qBAAqB;EACnC,OAAO,kBAAkB,8BAA8B,OAAO,gBAAgB;GAC7E,QAAQ;GACR,sBAAsB,UAAU,MAAM;EACvC,CAAC;CACF;CAEA,qBAAqB,MAAM,MAAM,OAAO,WAAW,iBAAiB,MAAM,OAAO,QAAQ,OAAO;CAEhG,MAAM,oBAAoB,MAAM,MAAM,OAAO,QAAQ;EAQpD,MAAM,WAAW,WADF,QAAQ,MAAM,KAAK,OAAO,YAAY,KAAK,cAAc,mBAAmB;GAAE,GAAG;GAAO,GAAG;EAAO,GAAG,OAAO,CAAC,GAAG,qBAC9F,CAAC;EAClC,MAAM,0BAA0B,MAAM,QAAQ,MAAM,OAAO,OAAO,gBAAgB,uBAAuB,QAAQ;EACjH,OAAO,kBAAkB,8BAA8B,OAAO,gBAAgB;GAAE;GAAU;EAAwB,CAAC;CACpH;CAEA,sBAAsB,MAAM,MAAM,OAAO,WAAW,iBAAiB,MAAM,OAAO,QAAQ,QAAQ;CAElG,uBAAuB,MAAM,MAAM,OAAO,WAAW,OAAO,MAAM,OAAO,QAAQ,QAAQ;CAEzF,0BAA0B,MAAM,MAAM,OAAO,WAAW,OAAO,MAAM,OAAO,QAAQ,WAAW;CAE/F,MAAM,wBAAwB,MAAM,KAAK,OAAO,QAAQ;EACvD,MAAM,cAAc,QAAQ,GAAG;EAC/B,MAAM,eAAe,aAAa,GAAG;EACrC,MAAM,WAAW,MAAM,kBAAkB,MAAM,OAAO,cAAc;GAAE,QAAQ;GAAmB,YAAY,OAAO;EAAW,GAAG,YAAY;GAC7I,MAAM,OAAO,MAAM,KAAK,OAAO,YAAY,KAAK,WAAW,mBAAmB;IAAE,GAAG;IAAO,YAAY,OAAO;GAAW,GAAG,OAAO,CAAC;GACnI,IAAI,SAAS,KAAA,GAAW,OAAO,KAAK,mBAAmB;GACvD,IAAI,KAAK,UAAU,MAAM,OAAO,KAAK,WAAW;GAChD,MAAM,iBAAiB,KAAK,KAAK,OAAO,gBAAgB;GACxD,MAAM,sBAAsB,MAAM,KAAK,KAAK,OAAO,qBAAqB,CAAC;GACzE,IAAI,CAAC,oBAAoB,cAAc,KAAK,wBAAwB,KAAA,GAAW,OAAO,KAAK,mBAAmB;GAG9G,MAAM,eAAe,MAAM,oBAAoB,MAAM,OAAO,cAAc;GAC1E,IAAI,aAAa,WAAW,UAAU,KAAK,yBAAyB;GAIpE,IAAI,sBAAsB,aAAa,qBAAqB,KAAK,qBAAqB;GACtF,MAAM,eAAe,MAAM,aAAa,cAAc;GACtD,MAAM,MAAM,MAAM,IAAI;GACtB,OAAO,KAAK,QAAQ,MAAM,KAAK,OAAO,YAAY,KAAK,WAAW,sBAAsB;IACvF,GAAG;IACH,YAAY,OAAO;IAGnB,SAAS;KACR,gBAAgB;KAChB,eAAe,OAAO;KACtB;KACA,aAAa,IAAI,KAAK,GAAG;KACzB,oBAAoB,IAAI,KAAK,MAAM,KAAK,OAAO,kBAAkB;KACjE,GAAI,iBAAiB,KAAA,IAAY,CAAC,IAAI,EAAE,oBAAoB,aAAa;IAC1E;GACD,GAAG,OAAO,CAAC,GAAG,iBAAiB,GAAG,UAAU;EAC7C,CAAC;EAED,MAAM,UAAU,KAAK,UAAU,SAAS;EACxC,IAAI,CAAC,oBAAoB,OAAO,GAAG,OAAO,KAAK,uBAAuB;EACtE,MAAM,iBAAiB,KAAK,UAAU,gBAAgB,KAAK,MAAM,yBAAyB,MAAM,OAAO,OAAO,YAAY,OAAO;EACjI,IAAI,CAAC,oBAAoB,cAAc,GAAG,OAAO,KAAK,uBAAuB;EAC7E,OAAO,QAAQ,iCAAiC,QAAQ,OAAO,YAAY;GAC1E,YAAY,OAAO;GACnB;GACA;GACA,GAAG,eAAe,QAAQ;EAC3B,CAAC;CACF;CAEA,MAAM,oBAAoB,MAAM,KAAK,OAAO,QAAQ;EACnD,MAAM,cAAc,QAAQ,GAAG;EAC/B,MAAM,eAAe,aAAa,GAAG;EACrC,MAAM,WAAW,MAAM,kBAAkB,MAAM,OAAO,cAAc;GAAE,QAAQ;GAAe,SAAS,OAAO;EAAQ,GAAG,YAAY;GACnI,MAAM,MAAM,MAAM,IAAI;GACtB,OAAO,KAAK,QAAQ,MAAM,KAAK,OAAO,YAAY,KAAK,WAAW,iBAAiB;IAClF,GAAG;IACH,SAAS,OAAO;IAChB,SAAS;KACR,gBAAgB;KAChB,eAAe,OAAO;KACtB;KACA,aAAa,IAAI,KAAK,GAAG;KACzB,oBAAoB,IAAI,KAAK,MAAM,KAAK,OAAO,gBAAgB;KAC/D,GAAI,iBAAiB,KAAA,IAAY,CAAC,IAAI,EAAE,oBAAoB,aAAa;IAC1E;GACD,GAAG,OAAO,CAAC,GAAG,iBAAiB,GAAG,UAAU;EAC7C,CAAC;EACD,OAAO,QAAQ,4BAA4B,KAAK,OAAO,SAAS;GAAE,SAAS,OAAO;GAAS,GAAG,eAAe,QAAQ;EAAE,CAAC;CACzH;CAEA,MAAM,yBAAyB,MAAM,KAAK,OAAO,QAAQ;EACxD,MAAM,cAAc,QAAQ,GAAG;EAC/B,MAAM,eAAe,aAAa,GAAG;EACrC,MAAM,WAAW,MAAM,kBAAkB,MAAM,OAAO,cAAc;GAAE,QAAQ;GAAqB,SAAS,OAAO;EAAQ,GAAG,YAAY;GACzI,MAAM,OAAO,MAAM,KAAK,OAAO,YAAY,KAAK,WAAW,cAAc;IAAE,GAAG;IAAO,SAAS,OAAO;GAAQ,GAAG,OAAO,CAAC;GACxH,IAAI,SAAS,KAAA,GAAW,OAAO,KAAK,mBAAmB;GACvD,IAAI,KAAK,UAAU,MAAM,OAAO,KAAK,WAAW;GAIhD,MAAM,QAAQ,KAAK,KAAK,OAAO,OAAO;GACtC,IAAI,KAAK,KAAK,OAAO,QAAQ,MAAM,aAAa,OAAO,KAAK,gBAAgB;GAC5E,IAAI,KAAK,OAAO,OAAO,MAAM,WAAW,OAAO,KAAK,eAAe;GACnE,IAAI,KAAK,OAAO,QAAQ,MAAM,cAAc,OAAO,KAAK,kBAAkB;GAC1E,MAAM,QAAQ,KAAK,KAAK,OAAO,OAAO;GACtC,MAAM,YAAY,KAAK,OAAO,WAAW;GACzC,MAAM,wBAAwB,KAAK,OAAO,uBAAuB;GACjE,IAAI,OAAO,cAAc,YAAY,OAAO,0BAA0B,UAAU,OAAO,KAAK,mBAAmB;GAC/G,MAAM,QAAQ,MAAM,KAAK,OAAO,YAAY,KAAK,YAAY,eAAe;IAAE,GAAG;IAAO,SAAS,OAAO;IAAS;IAAW;GAAsB,GAAG,OAAO,CAAC;GAC7J,IAAI,UAAU,KAAA,GAAW,OAAO,KAAK,mBAAmB;GACxD,MAAM,QAAQ,KAAK,MAAM,OAAO,OAAO;GACvC,IAAI,UAAU,YAAY,OAAO,KAAK,gBAAgB;GACtD,IAAI,UAAU,aAAa,OAAO,KAAK,iBAAiB;GACxD,MAAM,UAAU,KAAK,MAAM,OAAO,SAAS;GAC3C,MAAM,YAAY,KAAK,MAAM,OAAO,WAAW;GAC/C,IAAI,UAAU,WAAW,CAAC,oBAAoB,OAAO,KAAK,CAAC,oBAAoB,SAAS,GAAG,OAAO,KAAK,mBAAmB;GAC1H,MAAM,MAAM,MAAM,IAAI;GACtB,OAAO,KAAK,QAAQ,MAAM,KAAK,OAAO,YAAY,KAAK,WAAW,qBAAqB;IACtF,GAAG;IACH,SAAS,OAAO;IAChB,SAAS;KACR,eAAe,OAAO;KACtB,OAAO;MAAE;MAAS;KAAU;KAC5B;KACA,aAAa,IAAI,KAAK,GAAG;KACzB,oBAAoB,IAAI,KAAK,MAAM,KAAK,OAAO,gBAAgB;KAC/D,GAAI,iBAAiB,KAAA,IAAY,CAAC,IAAI,EAAE,oBAAoB,aAAa;IAC1E;GACD,GAAG,OAAO,CAAC,GAAG,iBAAiB,GAAG,UAAU;EAC7C,CAAC;EAED,OAAO,QAAQ,iCAAiC,KAAK,OAAO,SAAS;GAAE,SAAS,OAAO;GAAS,GAAG,eAAe,QAAQ;EAAE,CAAC;CAC9H;AACD,CAAC;;;;;;;;;AAUD,eAAe,yBAAyB,MAAY,OAAqB,YAAoB,SAAkC;CAC9H,MAAM,OAAO,MAAM,KAAK,OAAO,YAAY,KAAK,WAAW,mBAAmB;EAAE,GAAG;EAAO;CAAW,GAAG,OAAO,CAAC;CAChH,MAAM,iBAAiB,KAAK,MAAM,OAAO,gBAAgB;CACzD,IAAI,SAAS,KAAA,KAAa,KAAK,UAAU,QAAQ,KAAK,KAAK,OAAO,SAAS,MAAM,WAAW,CAAC,oBAAoB,cAAc,GAC9H,OAAO,KAAK,uBAAuB;CAEpC,OAAO;AACR;;AAGA,SAAS,eAAe,UAA4C;CACnE,MAAM,aAAa,MAAM,KAAK,UAAU,YAAY,CAAC;CACrD,MAAM,oBAAoB,MAAM,KAAK,UAAU,mBAAmB,CAAC;CACnE,MAAM,qBAAqB,KAAK,UAAU,oBAAoB;CAC9D,IAAI,eAAe,KAAA,KAAa,sBAAsB,KAAA,KAAa,OAAO,uBAAuB,UAAU,OAAO,KAAK,uBAAuB;CAC9I,OAAO;EAAE;EAAY;EAAmB;CAAmB;AAC5D;AAEA,MAAM,cAAc,KAAK,UAAU;;;;;;;AAQnC,SAAS,iBAAiB,KAAmC;CAC5D,MAAM,aAAa,KAAK,KAAK,YAAY;CACzC,IAAI,EAAE,sBAAsB,SAAS,CAAC,OAAO,SAAS,QAAQ,MAAM,aAAa,YAAY,CAAC,CAAC,CAAC,GAAG,KAAK,wBAAwB;AACjI;;AAGA,SAAS,WAAgD,MAAY,MAAS;CAC7E,MAAM,MAAM,SAAS;CACrB,OAAO,OAAO,KAA6B,eAA+C;EACzF,IAAI;GACH,iBAAiB,GAAG;GACpB,MAAM,OAAO,4BAA4B,MAAM,UAAU;GACzD,IAAI,CAAC,KAAK,IAAI,OAAO;IAAE,SAAS;IAAO,OAAO,8BAA8B,KAAK;GAAO;GACxF,OAAO,MAAM,IAAI,MAAM,KAAK,QAAQ,GAAG,GAAG,KAAK,KAAK;EACrD,SAAS,QAAQ;GAGhB,OAAO,QAAQ,KAAK,GAAG,MAAM,KAAK,QAAQ,8BAA8B,OAAO,IAAI,IAAI,OAAO,OAAO,eAAe;EACrH;CACD;AACD;;AAOA,MAAM,mBAAyD,OAAO;CAAC;CAAuB;CAAwB;AAAyB,CAAU;AAEzJ,SAAS,iBAAiB,MAAuC;CAChE,OAAO,OAAO;EAAE,UAAU;EAAgB;CAAK,CAAC;AACjD;AAEA,MAAM,WAAoC,OAAO,EAAE,UAAU,KAAc,CAAC;;;;;;;;;;;;;AAc5E,SAAS,aAAa,MAAY,MAAkD;CACnF,MAAM,iBAAiB,iBAAiB,SAAS,IAAI;CACrD,OAAO,OAAO,UAAU;EACvB,IAAI;GACH,MAAM,OAAO,4BAA4B,MAAM,KAAK,OAAO,YAAY,CAAC;GACxE,IAAI,CAAC,KAAK,IAAI,OAAO,iBAAiB,8BAA8B,KAAK,KAAK,GAAG,KAAK,OAAO;GAC7F,IAAI,gBAAgB;IACnB,MAAM,WAAW,KAAK,OAAO,UAAU;IACvC,MAAM,UAAU,KAAK,OAAO,SAAS;IACrC,IAAI,CAAC,oBAAoB,QAAQ,KAAK,CAAC,oBAAoB,OAAO,GAAG,KAAK,eAAe;IACzF,MAAM,SAAS,KAAK,OAAO,QAAQ;IACnC,MAAM,gBAAgB,MAAM,OAAO;KAAE;KAAU;IAAQ,CAAC,GAAI,KAAK,MAAyC,WAAW,kBAAkB,cAAc,SAAS,KAAA,CAAS;GACxK;GACA,OAAO;EACR,SAAS,QAAQ;GAChB,OAAO,iBAAiB,0BAA0B,KAAK,GAAG,MAAM,KAAK,QAAQ,8BAA8B,OAAO,IAAI,IAAI,OAAO,OAAO,iBAAiB;EAC1J;CACD;AACD;AAMA,SAAS,MAAM,UAAkC,QAA+B;CAC/E,OAAO;EAAE;EAAU,eAAe;EAAG,YAAY;EAAQ,QAAQ;EAAS;CAAO;AAClF;AAEA,SAAS,eAAe,MAA6B;CACpD,MAAM,WAAW,wBAAwB,KAAK,SAAS;CACvD,OAAO,OAAO;EACb;EACA,SAAS;EACT,MAAM;EACN,MAAM,SAAS,KAA4C;GAC1D,IAAI;IACH,MAAM,SAAS,oBAAoB,KAAK,WAAW,IAAI,QAAQ;IAC/D,IAAI,WAAW,KAAA,GAAW,OAAO,MAAM,UAAU,sBAAsB;IACvE,MAAM,OAAO,4BAA4B,QAAQ,IAAI,UAAU;IAC/D,IAAI,CAAC,KAAK,IAAI,OAAO,MAAM,UAAU,oBAAoB;IACzD,MAAM,EAAE,UAAU,SAAS,SAAS,cAAc;IAClD,IAAI,CAAC,oBAAoB,QAAQ,KAAK,CAAC,oBAAoB,OAAO,KAAK,CAAC,oBAAoB,OAAO,KAAK,OAAO,cAAc,UAC5H,OAAO,MAAM,UAAU,+BAA+B;IAEvD,MAAM,QAAQ,KAAK;IACnB,MAAM,SAAS,OAAO;KACrB,GAAI,OAAO,MAAM,sBAAsB,WAAW,EAAE,gBAAgB,MAAM,kBAAkB,IAAI,CAAC;KACjG,GAAI,OAAO,MAAM,kBAAkB,WAAW,EAAE,YAAY,MAAM,cAAc,IAAI,CAAC;KACrF,GAAI,OAAO,MAAM,eAAe,WAAW,EAAE,SAAS,MAAM,WAAW,IAAI,CAAC;IAC7E,CAAC;IACD,MAAM,QAAQ,OAAO;KAAE,UAAU,IAAI;KAAU;KAAQ;KAAU;KAAS;KAAS;KAAW;IAAO,CAAC;IACtG,MAAM,SAAS,MAAM,KAAK,MAAM,OAAO,YAAY,MAAM,KAAK,WAAW,KAAA,GAAW,CAAC,OAAO,OAAO,CAAC,CAAC;IACrG,IAAI,WAAW,KAAA,GAAW,OAAO,MAAM,UAAU,oCAAoC;IACrF,IAAI,OAAO,UAAU,MAAM,OAAO,MAAM,UAAU,yBAAyB;IAC3E,OAAO;KAAE;KAAU,eAAe;KAAG,YAAY;KAAQ,QAAQ;IAAO;GACzE,QAAQ;IACP,OAAO,MAAM,UAAU,oCAAoC;GAC5D;EACD;CACD,CAAC;AACF;AAMA,MAAM,YAAsG,OAAO;CAClH,qBAAqB,OAAO,CAAC,4BAA4B,CAAU;CACnE,qBAAqB,OAAO,CAAC,4BAA4B,CAAU;CACnE,oBAAoB,OAAO,CAAC,2BAA2B,CAAU;CACjE,qBAAqB,OAAO,CAAC,4BAA4B,CAAU;CACnE,qBAAqB,OAAO,CAAC,4BAA4B,CAAU;CACnE,sBAAsB,OAAO,CAAC,sBAAsB,CAAU;CAC9D,yBAAyB,OAAO,CAAC,sBAAsB,CAAU;CACjE,yBAAyB,OAAO,CAAC,+BAA+B,CAAU;CAC1E,qBAAqB,OAAO,CAAC,0BAA0B,CAAU;CACjE,0BAA0B,OAAO,CAAC,+BAA+B,CAAU;AAC5E,CAAC;;AAGD,MAAM,aAAmD,OAAO;CAAC;CAA2B;CAAuB;AAA0B,CAAU;AAEvJ,SAAS,SAAS,SAA6C;CAC9D,MAAM,QAAQ,UAAyB;EACtC,MAAM,oBAAoB,mBAAmB,KAAK;CACnD;CACA,IAAI,YAAY,QAAQ,OAAO,YAAY,UAAU,KAAK,SAAS;CACnE,MAAM,YAAY,QAAQ,aAAA;CAC1B,IAAI,CAAC,2BAA2B,SAAS,GAAG,KAAK,WAAW;CAC5D,MAAM,SAAS,OAAgB,OAAe,YAA+B;EAC5E,IAAI,UAAU,QAAQ,OAAO,UAAU,UAAU,KAAK,KAAK;EAC3D,KAAK,MAAM,UAAU,SAAS,IAAI,OAAQ,MAAkC,YAAY,YAAY,KAAK,GAAG,MAAM,GAAG,QAAQ;CAC9H;CACA,MAAM,QAAQ,eAAe,iBAAiB;EAC7C;EAAoB;EAAsB;EAA2B;EAAqB;EAAsB;EAAsB;CACvI,CAAC;CACD,MAAM,QAAQ,YAAY,cAAc;EACvC;EAAsB;EAAiB;EAAyB;EAAoB;EAAwB;EAAwB;CACrI,CAAC;CACD,MAAM,QAAQ,UAAU,YAAY,CAAC,SAAS,CAAC;CAC/C,MAAM,QAAQ,kBAAkB,oBAAoB,CAAC,QAAQ,CAAC;CAC9D,MAAM,QAAQ,aAAa,eAAe,CAAC,gBAAgB,CAAC;CAC5D,IAAI,OAAO,QAAQ,4BAA4B,YAAY,KAAK,yBAAyB;CACzF,IAAI;CACJ,IAAI;EACH,QAAQ,mBAAmB,QAAQ,KAAK;CACzC,QAAQ;EACP,OAAO,KAAK,OAAO;CACpB;CACA,MAAM,SAAS,6BAA6B,QAAQ,UAAU,CAAC,CAAC;CAChE,MAAM,sBAAsB,QAAQ,uBAAuB;CAC3D,sBAAsB,qBAAqB,qBAAqB;CAChE,OAAO,OAAO;EACb;EACA,eAAe,QAAQ;EACvB,YAAY,QAAQ;EACpB,UAAU,QAAQ;EAClB,kBAAkB,QAAQ;EAC1B,aAAa,QAAQ;EACrB,WAAW,QAAQ;EACnB;EACA;EACA;CACD,CAAC;AACF;;;;;;;;;;;;;;;AAgBA,SAAgB,4BAA2C,SAA0D;CACpH,MAAM,OAAO,SAAS,OAAO;CAC7B,MAAM,SAAS,eAAe,IAAI;CAClC,MAAM,UAAmC,8BAA8B,KAAK,SAAS;EACpF,MAAM,aAAa,WAAW,SAAS,IAAI;EAwB3C,OAAO;GAtBN,UAAU,GAAG,KAAK,UAAU,GAAG;GAC/B,WAAW,KAAK;GAChB,SAAS;GACT,MAAM;GACN,QAAQ,oBAAoB,IAAI;GAChC,iBAAiB,aAAa,MAAM,IAAI;GACxC,UAAU,CAAC,OAAO,QAAQ;GAC1B,aAAa,CAAC,GAAG,UAAU,KAAK;GAChC;GACA,eAAe;GACf,WAAW;IACV,cAAc;IACd,iBAAiB;IACjB,aAAa;IACb,YAAY;IACZ,aAAa;IACb,aAAa;GACd;GACA,SAAS;GACT,eAAe;GACf,SAAS,WAAW,MAAM,IAAI;EAEf;CACjB,CAAC;CACD,OAAO;EACN,WAAW,KAAK;EAChB,SAAS;EACT,aAAa;EACb,aAAa;EACb,cAAc;GAAC;GAAc;GAAQ;EAAG;EACxC,YAAY,oCAAoC,KAAK,eAAe;GAAE;GAAW,eAAe;EAAE,EAAE;EACpG;EACA,UAAU,CAAC,MAAM;CAClB;AACD"}