@harrylabsj/kiwi 0.8.0 → 0.10.0

package/dist/merchant-core/network-checks.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * 网络注册与域名接入检查（V2 阶段四：F25 + F03）。
+ *
+ * F25 注册状态检查：catalog 可达性 + 注册信息有效性（/v1/agents/{id} 能解析
+ * 出本商家记录且指向的 Agent Card URL 非空）；失效可检测（结构化报告，
+ * ok:false + 各分项 error）。fail-closed：任何一步失败不假装已注册。
+ *
+ * F03 域名接入向导：产出结构化检查单（公开投影无私密字段 / public_url /
+ * 反代 TLS / DNS 人工核验项）——无法自动化的步骤显式标 manual，不假装完成。
+ */
+import type { AgentProfile } from "../config/profile.js";
+export interface NetworkRegistrationReport {
+    ok: boolean;
+    checked_at: string;
+    catalog: {
+        reachable: boolean;
+        base_url: string;
+        error?: string;
+    };
+    registration: {
+        registered: boolean;
+        agent_id: string;
+        agent_card_url?: string;
+        error?: string;
+    };
+}
+/** F25：注册状态检查（结构化、可查询；失效可检测）。 */
+export declare function checkNetworkRegistration(deps: {
+    catalogBaseUrl: string;
+    agentId: string;
+    fetchImpl?: typeof fetch;
+    now?: () => string;
+}): Promise<NetworkRegistrationReport>;
+export interface DomainChecklistItem {
+    id: string;
+    title: string;
+    status: "ok" | "pending" | "manual";
+    detail: string;
+}
+export interface DomainOnboardingChecklist {
+    ok: boolean;
+    merchant_id: string;
+    items: DomainChecklistItem[];
+}
+/**
+ * F03 域名接入向导检查单：自动可判定的给 ok/pending，DNS/TLS 等需人工的标
+ * manual（明确人工检查单）。公开投影分离检查：profile 的公开字段集合不包
+ * 含任何私密键（*_private / token / secret）。
+ */
+export declare function buildDomainOnboardingChecklist(profile: AgentProfile): DomainOnboardingChecklist;

package/dist/merchant-core/network-checks.js

@@ -0,0 +1,111 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/** F25：注册状态检查（结构化、可查询；失效可检测）。 */
+export async function checkNetworkRegistration(deps) {
+    const fetchImpl = deps.fetchImpl ?? globalThis.fetch;
+    const checkedAt = (deps.now ?? (() => new Date().toISOString()))();
+    const base = deps.catalogBaseUrl.replace(/\/+$/, "");
+    const report = {
+        ok: false,
+        checked_at: checkedAt,
+        catalog: { reachable: false, base_url: base },
+        registration: { registered: false, agent_id: deps.agentId },
+    };
+    try {
+        const res = await fetchImpl(`${base}/health`, { signal: AbortSignal.timeout(3_000) });
+        report.catalog.reachable = res.ok;
+        if (!res.ok)
+            report.catalog.error = `HTTP ${res.status}`;
+    }
+    catch (err) {
+        report.catalog.error = err instanceof Error ? err.message : String(err);
+        return report; // 不可达即失效（fail-closed）
+    }
+    try {
+        const res = await fetchImpl(`${base}/v1/agents/${encodeURIComponent(deps.agentId)}`, {
+            signal: AbortSignal.timeout(3_000),
+        });
+        if (!res.ok) {
+            report.registration.error = `HTTP ${res.status}（注册记录不可得或已失效）`;
+            return report;
+        }
+        const body = (await res.json());
+        const cardUrl = body.agent?.agent_card_url;
+        if (typeof cardUrl === "string" && cardUrl !== "") {
+            report.registration.registered = true;
+            report.registration.agent_card_url = cardUrl;
+            report.ok = true;
+        }
+        else {
+            report.registration.error = "注册记录缺 agent_card_url（无效注册）";
+        }
+    }
+    catch (err) {
+        report.registration.error = err instanceof Error ? err.message : String(err);
+    }
+    return report;
+}
+/**
+ * F03 域名接入向导检查单：自动可判定的给 ok/pending，DNS/TLS 等需人工的标
+ * manual（明确人工检查单）。公开投影分离检查：profile 的公开字段集合不包
+ * 含任何私密键（*_private / token / secret）。
+ */
+export function buildDomainOnboardingChecklist(profile) {
+    const items = [];
+    const publicUrl = profile.merchant_public?.public_url;
+    items.push({
+        id: "public-url",
+        title: "公网 A2A 域名已配置（merchant_public.public_url）",
+        status: publicUrl !== undefined && publicUrl !== "" ? "ok" : "pending",
+        detail: publicUrl ?? "未配置——kiwi merchant setup-public 引导",
+    });
+    // 公开投影分离：公开配置绝不携带私密键（底价/成本/token）
+    const PUBLIC_FORBIDDEN = /(_private|token|secret|password)/i;
+    const publicSection = JSON.stringify(profile.merchant_public ?? {});
+    items.push({
+        id: "public-projection-separation",
+        title: "公开投影与私有数据分离（公开配置无私密键）",
+        status: PUBLIC_FORBIDDEN.test(publicSection) ? "pending" : "ok",
+        detail: PUBLIC_FORBIDDEN.test(publicSection)
+            ? "merchant_public 段含疑似私密键——公开投影不得含 *_private/token/secret"
+            : "merchant_public 段无私密键",
+    });
+    items.push({
+        id: "dns",
+        title: "DNS 解析指向服务器（人工核验）",
+        status: "manual",
+        detail: "人工：dig <域名> 确认 A/AAAA 记录指向部署机；kiwi merchant setup-public --check 可辅助",
+    });
+    items.push({
+        id: "tls",
+        title: "TLS 证书有效（人工核验/反代自动续期）",
+        status: "manual",
+        detail: "人工：确认 Caddy/Nginx 反代 TLS 正常且自动续期；证书临期告警接 runtime 健康检查",
+    });
+    items.push({
+        id: "loopback-a2a",
+        title: "A2A 节点仅监听 loopback（反代前置）",
+        status: "ok",
+        detail: "startA2aNode 绑定 127.0.0.1，公网经反代；KIWI_A2A_AUTH 守卫 fail-closed（BUG-02）",
+    });
+    const ok = items.every((i) => i.status === "ok" || i.status === "manual");
+    return {
+        ok,
+        merchant_id: profile.owner_id,
+        items,
+    };
+}
+//# sourceMappingURL=network-checks.js.map

package/dist/merchant-core/network-checks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"network-checks.js","sourceRoot":"","sources":["../../src/merchant-core/network-checks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAsBH,iCAAiC;AACjC,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,IAK9C;IACC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC;IACrD,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC;IACnE,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,MAAM,GAA8B;QACxC,EAAE,EAAE,KAAK;QACT,UAAU,EAAE,SAAS;QACrB,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC7C,YAAY,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE;KAC5D,CAAC;IACF,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,IAAI,SAAS,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACtF,MAAM,CAAC,OAAO,CAAC,SAAS,GAAG,GAAG,CAAC,EAAE,CAAC;QAClC,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,CAAC,OAAO,CAAC,KAAK,GAAG,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;IAC3D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,OAAO,CAAC,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACxE,OAAO,MAAM,CAAC,CAAC,sBAAsB;IACvC,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,IAAI,cAAc,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE;YACnF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;SACnC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,CAAC,YAAY,CAAC,KAAK,GAAG,QAAQ,GAAG,CAAC,MAAM,eAAe,CAAC;YAC9D,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA6D,CAAC;QAC5F,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC;QAC3C,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;YAClD,MAAM,CAAC,YAAY,CAAC,UAAU,GAAG,IAAI,CAAC;YACtC,MAAM,CAAC,YAAY,CAAC,cAAc,GAAG,OAAO,CAAC;YAC7C,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,YAAY,CAAC,KAAK,GAAG,4BAA4B,CAAC;QAC3D,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,YAAY,CAAC,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAeD;;;;GAIG;AACH,MAAM,UAAU,8BAA8B,CAAC,OAAqB;IAClE,MAAM,KAAK,GAA0B,EAAE,CAAC;IACxC,MAAM,SAAS,GAAG,OAAO,CAAC,eAAe,EAAE,UAAU,CAAC;IACtD,KAAK,CAAC,IAAI,CAAC;QACT,EAAE,EAAE,YAAY;QAChB,KAAK,EAAE,0CAA0C;QACjD,MAAM,EAAE,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QACtE,MAAM,EAAE,SAAS,IAAI,oCAAoC;KAC1D,CAAC,CAAC;IACH,kCAAkC;IAClC,MAAM,gBAAgB,GAAG,mCAAmC,CAAC;IAC7D,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;IACpE,KAAK,CAAC,IAAI,CAAC;QACT,EAAE,EAAE,8BAA8B;QAClC,KAAK,EAAE,uBAAuB;QAC9B,MAAM,EAAE,gBAAgB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;QAC/D,MAAM,EAAE,gBAAgB,CAAC,IAAI,CAAC,aAAa,CAAC;YAC1C,CAAC,CAAC,yDAAyD;YAC3D,CAAC,CAAC,uBAAuB;KAC5B,CAAC,CAAC;IACH,KAAK,CAAC,IAAI,CAAC;QACT,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,mBAAmB;QAC1B,MAAM,EAAE,QAAQ;QAChB,MAAM,EACJ,sEAAsE;KACzE,CAAC,CAAC;IACH,KAAK,CAAC,IAAI,CAAC;QACT,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,uBAAuB;QAC9B,MAAM,EAAE,QAAQ;QAChB,MAAM,EAAE,uDAAuD;KAChE,CAAC,CAAC;IACH,KAAK,CAAC,IAAI,CAAC;QACT,EAAE,EAAE,cAAc;QAClB,KAAK,EAAE,0BAA0B;QACjC,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,sEAAsE;KAC/E,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;IAC1E,OAAO;QACL,EAAE;QACF,WAAW,EAAE,OAAO,CAAC,QAAQ;QAC7B,KAAK;KACN,CAAC;AACJ,CAAC"}

package/dist/merchant-core/operations.d.ts

@@ -0,0 +1,64 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { DatabaseSync } from "node:sqlite";
+/** running 状态的陈旧阈值（审查 P2）：超过该时长无更新视为进程中断残留，
+ *  同幂等键重入时标记 failed 并放行新任务。30 分钟 > 单行 HTTP 超时（10s）
+ *  × 批量行数的合理上限。 */
+export declare const RUNNING_STALE_MS: number;
+export declare const OPERATION_STATUSES: readonly ["queued", "running", "succeeded", "partially_failed", "failed"];
+export type OperationStatus = (typeof OPERATION_STATUSES)[number];
+export interface MerchantOperation {
+    operation_id: string;
+    kind: string;
+    idempotency_key: string;
+    status: OperationStatus;
+    /** 逐项回执（部分成功：哪行/哪项成功失败及原因）。 */
+    receipts: Array<{
+        item: string;
+        ok: boolean;
+        detail?: string;
+    }>;
+    error?: string;
+    created_at: string;
+    updated_at: string;
+}
+export declare class MerchantOperationStore {
+    private readonly db;
+    private readonly now;
+    constructor(options: {
+        db: DatabaseSync;
+        now?: () => string;
+    });
+    /** 幂等创建：同 (kind, idempotency_key) 返回既有 operation（created=false）。
+     *  审查 P2：命中 running 且长时间无更新（超过 RUNNING_STALE_MS，疑似进程
+     *  中断）→ 标 failed 后新建，避免同幂等键被永久卡死的 operation 吞掉。 */
+    createOrGet(input: {
+        kind: string;
+        idempotencyKey: string;
+    }): {
+        operation: MerchantOperation;
+        created: boolean;
+    };
+    get(operationId: string): MerchantOperation | undefined;
+    private set;
+    markRunning(operationId: string): MerchantOperation;
+    /** 终态：receipts 全 ok → succeeded；有成功有失败 → partially_failed；全失败/异常 → failed。 */
+    finish(operationId: string, receipts: Array<{
+        item: string;
+        ok: boolean;
+        detail?: string;
+    }>, error?: string): MerchantOperation;
+}

package/dist/merchant-core/operations.js

@@ -0,0 +1,136 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * 长任务 operation 机制（V2 阶段四：src/merchant-core/operations.ts）。
+ *
+ * 状态机：queued → running → succeeded / partially_failed / failed。
+ * 幂等：相同 idempotency_key 返回同一 operation，不重复执行
+ * （先记录执行意图；远端返回不确定时先对账，不盲目重发）。
+ * 落盘：与命令记录同一 state.sqlite（单 owner 写），表操作幂等建表。
+ */
+import { randomBytes } from "node:crypto";
+/** running 状态的陈旧阈值（审查 P2）：超过该时长无更新视为进程中断残留，
+ *  同幂等键重入时标记 failed 并放行新任务。30 分钟 > 单行 HTTP 超时（10s）
+ *  × 批量行数的合理上限。 */
+export const RUNNING_STALE_MS = 30 * 60 * 1000;
+export const OPERATION_STATUSES = ["queued",
+    "running",
+    "succeeded",
+    "partially_failed",
+    "failed",
+];
+const OPERATION_SCHEMA = `
+CREATE TABLE IF NOT EXISTS merchant_operations (
+  operation_id TEXT PRIMARY KEY,
+  kind TEXT NOT NULL,
+  idempotency_key TEXT NOT NULL,
+  status TEXT NOT NULL CHECK (status IN ('queued','running','succeeded','partially_failed','failed')),
+  receipts_json TEXT NOT NULL,
+  error TEXT,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);
+CREATE UNIQUE INDEX IF NOT EXISTS idx_merchant_operations_idem
+  ON merchant_operations (kind, idempotency_key);
+`;
+export class MerchantOperationStore {
+    db;
+    now;
+    constructor(options) {
+        this.db = options.db;
+        this.now = options.now ?? (() => new Date().toISOString());
+        this.db.exec(OPERATION_SCHEMA);
+    }
+    /** 幂等创建：同 (kind, idempotency_key) 返回既有 operation（created=false）。
+     *  审查 P2：命中 running 且长时间无更新（超过 RUNNING_STALE_MS，疑似进程
+     *  中断）→ 标 failed 后新建，避免同幂等键被永久卡死的 operation 吞掉。 */
+    createOrGet(input) {
+        const existing = this.db
+            .prepare("SELECT * FROM merchant_operations WHERE kind = ? AND idempotency_key = ?")
+            .get(input.kind, input.idempotencyKey);
+        if (existing !== undefined) {
+            if (existing.status === "running" &&
+                Date.parse(this.now()) - Date.parse(existing.updated_at) > RUNNING_STALE_MS) {
+                this.set(existing.operation_id, "failed", [
+                    {
+                        item: "(operation)",
+                        ok: false,
+                        detail: `任务在 running 状态停留超过 ${Math.round(RUNNING_STALE_MS / 60000)} 分钟（疑似进程中断），已标记失败`,
+                    },
+                ], "stale_running");
+            }
+            else {
+                return { operation: rowToOperation(existing), created: false };
+            }
+        }
+        const now = this.now();
+        const id = `op_${randomBytes(12).toString("hex")}`;
+        this.db
+            .prepare(`INSERT INTO merchant_operations (operation_id, kind, idempotency_key, status, receipts_json, created_at, updated_at)
+         VALUES (?, ?, ?, 'queued', '[]', ?, ?)`)
+            .run(id, input.kind, input.idempotencyKey, now, now);
+        return { operation: this.get(id), created: true };
+    }
+    get(operationId) {
+        const row = this.db
+            .prepare("SELECT * FROM merchant_operations WHERE operation_id = ?")
+            .get(operationId);
+        return row === undefined ? undefined : rowToOperation(row);
+    }
+    set(operationId, status, receipts, error) {
+        this.db
+            .prepare("UPDATE merchant_operations SET status = ?, receipts_json = ?, error = ?, updated_at = ? WHERE operation_id = ?")
+            .run(status, JSON.stringify(receipts), error ?? null, this.now(), operationId);
+        return this.get(operationId);
+    }
+    markRunning(operationId) {
+        const op = this.get(operationId);
+        return this.set(operationId, "running", op?.receipts ?? []);
+    }
+    /** 终态：receipts 全 ok → succeeded；有成功有失败 → partially_failed；全失败/异常 → failed。 */
+    finish(operationId, receipts, error) {
+        let status;
+        if (error !== undefined) {
+            status = "failed";
+        }
+        else if (receipts.length === 0) {
+            status = "succeeded";
+        }
+        else if (receipts.every((r) => r.ok)) {
+            status = "succeeded";
+        }
+        else if (receipts.some((r) => r.ok)) {
+            status = "partially_failed";
+        }
+        else {
+            status = "failed";
+        }
+        return this.set(operationId, status, receipts, error);
+    }
+}
+function rowToOperation(row) {
+    return {
+        operation_id: row.operation_id,
+        kind: row.kind,
+        idempotency_key: row.idempotency_key,
+        status: row.status,
+        receipts: JSON.parse(row.receipts_json),
+        ...(row.error !== null ? { error: row.error } : {}),
+        created_at: row.created_at,
+        updated_at: row.updated_at,
+    };
+}
+//# sourceMappingURL=operations.js.map

package/dist/merchant-core/operations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operations.js","sourceRoot":"","sources":["../../src/merchant-core/operations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;;;;;GAOG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG1C;;mBAEmB;AACnB,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE/C,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAG,QAAQ;IAC3C,SAAS;IACT,WAAW;IACX,kBAAkB;IAClB,QAAQ;CACA,CAAC;AAeX,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;CAaxB,CAAC;AAEF,MAAM,OAAO,sBAAsB;IAChB,EAAE,CAAe;IACjB,GAAG,CAAe;IAEnC,YAAY,OAAiD;QAC3D,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC;QACrB,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACjC,CAAC;IAED;;uDAEmD;IACnD,WAAW,CAAC,KAA+C;QAIzD,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE;aACrB,OAAO,CAAC,0EAA0E,CAAC;aACnF,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,cAAc,CAAwC,CAAC;QAChF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IACE,QAAQ,CAAC,MAAM,KAAK,SAAS;gBAC7B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,gBAAgB,EAC3E,CAAC;gBACD,IAAI,CAAC,GAAG,CACN,QAAQ,CAAC,YAAY,EACrB,QAAQ,EACR;oBACE;wBACE,IAAI,EAAE,aAAa;wBACnB,EAAE,EAAE,KAAK;wBACT,MAAM,EAAE,sBAAsB,IAAI,CAAC,KAAK,CAAC,gBAAgB,GAAG,KAAK,CAAC,mBAAmB;qBACtF;iBACF,EACD,eAAe,CAChB,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,OAAO,EAAE,SAAS,EAAE,cAAc,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YACjE,CAAC;QACH,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACnD,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;gDACwC,CACzC;aACA,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,cAAc,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QACvD,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAsB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACzE,CAAC;IAED,GAAG,CAAC,WAAmB;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CAAC,0DAA0D,CAAC;aACnE,GAAG,CAAC,WAAW,CAAwC,CAAC;QAC3D,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;IAC7D,CAAC;IAEO,GAAG,CACT,WAAmB,EACnB,MAAuB,EACvB,QAA+D,EAC/D,KAAc;QAEd,IAAI,CAAC,EAAE;aACJ,OAAO,CACN,gHAAgH,CACjH;aACA,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,KAAK,IAAI,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,WAAW,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,CAAsB,CAAC;IACpD,CAAC;IAED,WAAW,CAAC,WAAmB;QAC7B,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,8EAA8E;IAC9E,MAAM,CACJ,WAAmB,EACnB,QAA+D,EAC/D,KAAc;QAEd,IAAI,MAAuB,CAAC;QAC5B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,GAAG,QAAQ,CAAC;QACpB,CAAC;aAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,MAAM,GAAG,WAAW,CAAC;QACvB,CAAC;aAAM,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YACvC,MAAM,GAAG,WAAW,CAAC;QACvB,CAAC;aAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YACtC,MAAM,GAAG,kBAAkB,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,QAAQ,CAAC;QACpB,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IACxD,CAAC;CACF;AAaD,SAAS,cAAc,CAAC,GAAiB;IACvC,OAAO;QACL,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,eAAe,EAAE,GAAG,CAAC,eAAe;QACpC,MAAM,EAAE,GAAG,CAAC,MAAyB;QACrC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAkC;QACxE,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,UAAU,EAAE,GAAG,CAAC,UAAU;KAC3B,CAAC;AACJ,CAAC"}

package/dist/merchant-core/policy-runtime.d.ts

@@ -0,0 +1,70 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { type MerchantPolicy } from "../config/profile.js";
+/** 当前运行策略快照（读端/写端统一返回口径）。 */
+export interface RunningPolicy {
+    /** 当前生效策略（覆盖层文件内容；undefined = 尚未配置任何策略）。 */
+    policy: MerchantPolicy | undefined;
+    /** 单调递增版本（0 = 从未热更新过；持久化在覆盖层文件中）。 */
+    version: number;
+    /** 生效策略稳定序列化（键排序）的 sha256 hex。 */
+    digest: string;
+    updated_at: string;
+}
+/** applyPolicyOverride 的执行回执（进命令记录；不含策略数值本身——私密）。 */
+export interface ApplyPolicyResult {
+    version: number;
+    digest: string;
+    updated_at: string;
+    /** 本次 patch 涉及的顶层键（值不透出）。 */
+    applied_keys: string[];
+}
+export interface MerchantPolicyRuntimeOptions {
+    /** 启动 profile 的 merchant_policy（无覆盖层文件时的初始生效策略）。 */
+    basePolicy: MerchantPolicy | undefined;
+    /** 覆盖层文件绝对路径（`<merchantDataDir>/policy-overrides.json`）。 */
+    file: string;
+    now: () => string;
+    /** 读端告警出口（缺省 stderr）。 */
+    log?: (message: string) => void;
+}
+export declare class MerchantPolicyRuntime {
+    private readonly basePolicy;
+    private readonly file;
+    private readonly now;
+    private readonly log;
+    private state;
+    /** 上次成功加载/写入的文件签名（mtimeMs+size）；与缓存一致则不重读。 */
+    private lastSig;
+    /** 已告警过的坏文件签名（同一坏文件只告警一次）。 */
+    private warnedSig;
+    constructor(options: MerchantPolicyRuntimeOptions);
+    /** 当前生效策略快照（读端每请求调用：stat 缓存命中时 O(1)）。 */
+    current(): RunningPolicy;
+    /** 仅取生效策略（A2A handler provider 用）。 */
+    effective(): MerchantPolicy | undefined;
+    /**
+     * 应用策略 patch（写端）：合并 → 校验 → 原子写完整生效策略 → 更新内存。
+     * 校验失败抛错（ProfileError）：不落盘、不改内存、版本不前进。
+     */
+    apply(patch: Record<string, unknown>): ApplyPolicyResult;
+    private statSig;
+    /** 读端：文件签名变化才重载；坏文件保留上一个良好策略（同一坏文件告警一次）。
+     *  审查 P2：文件被删除（sig === undefined）→ 显式告警一次并保留最后良好
+     *  策略（内存态永不静默冻结——操作者删除覆盖层的语义是「回退 profile」，
+     *  需两个进程都重启或显式恢复，此处必须让告警可见）。 */
+    private reloadIfChanged;
+}

package/dist/merchant-core/policy-runtime.js

@@ -0,0 +1,181 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * 运行中商家策略提供器（BUG-07 修复）。
+ *
+ * 之前 `applyPolicyOverride` 只把 patch 落 `policy-overrides.json`，A2A handler
+ * 与写执行器仍用启动时加载的 profile.merchant_policy——商家看到"已生效"但报价
+ * 策略没变。现在：
+ *
+ *   - 写端（MCP/core 进程）：patch 与当前生效策略合并 → `parseMerchantPolicy`
+ *     校验（与 profile 同规则；未知/非法字段拒绝，失败不落盘不生效）→ 原子写
+ *     **完整生效策略**（tmp+rename，0600）→ 更新内存；
+ *   - 读端（A2A 进程，与写端不同进程）：每次 `current()` stat 文件 mtime/size，
+ *     变化才重载（每报价一次 stat，开销可忽略）；文件损坏/无效时保留上一个
+ *     良好策略并告警（fail-safe，不因覆盖层坏档拒绝报价）；
+ *   - 文件内容为完整生效策略（版本 + 时间 + policy）：一旦存在即完全接管
+ *     （重启后延续，profile 后续改动被覆盖层遮蔽——以文件为准）；版本单调
+ *     递增并持久化；digest 为生效策略的稳定序列化 sha256。
+ *
+ * patch 合并语义：顶层浅合并；值为 `null` 的键表示删除该键；per-SKU 映射
+ * （price_floors/sku_max_discount_percent/promos）整体替换。
+ */
+import { mkdirSync, readFileSync, renameSync, statSync, writeFileSync } from "node:fs";
+import { createHash } from "node:crypto";
+import path from "node:path";
+import { parseMerchantPolicy } from "../config/profile.js";
+/** 键排序的稳定 JSON 序列化（digest 与键序无关）。 */
+function stableStringify(value) {
+    if (value === null || typeof value !== "object")
+        return JSON.stringify(value) ?? "null";
+    if (Array.isArray(value))
+        return `[${value.map(stableStringify).join(",")}]`;
+    const entries = Object.entries(value)
+        .filter(([, v]) => v !== undefined)
+        .sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0));
+    return `{${entries.map(([k, v]) => `${JSON.stringify(k)}:${stableStringify(v)}`).join(",")}}`;
+}
+function digestOf(policy) {
+    return createHash("sha256").update(stableStringify(policy ?? {})).digest("hex");
+}
+export class MerchantPolicyRuntime {
+    basePolicy;
+    file;
+    now;
+    log;
+    state;
+    /** 上次成功加载/写入的文件签名（mtimeMs+size）；与缓存一致则不重读。 */
+    lastSig;
+    /** 已告警过的坏文件签名（同一坏文件只告警一次）。 */
+    warnedSig;
+    constructor(options) {
+        this.basePolicy = options.basePolicy;
+        this.file = options.file;
+        this.now = options.now;
+        this.log = options.log ?? ((m) => process.stderr.write(`${m}\n`));
+        this.state = {
+            policy: options.basePolicy,
+            version: 0,
+            digest: digestOf(options.basePolicy),
+            updated_at: options.now(),
+        };
+        this.reloadIfChanged();
+    }
+    /** 当前生效策略快照（读端每请求调用：stat 缓存命中时 O(1)）。 */
+    current() {
+        this.reloadIfChanged();
+        return this.state;
+    }
+    /** 仅取生效策略（A2A handler provider 用）。 */
+    effective() {
+        return this.current().policy;
+    }
+    /**
+     * 应用策略 patch（写端）：合并 → 校验 → 原子写完整生效策略 → 更新内存。
+     * 校验失败抛错（ProfileError）：不落盘、不改内存、版本不前进。
+     */
+    apply(patch) {
+        if (Object.keys(patch).length === 0) {
+            throw new Error("策略 patch 为空：至少提供一个待变更字段");
+        }
+        const currentPolicy = this.current().policy ?? {};
+        const merged = { ...currentPolicy };
+        for (const [key, value] of Object.entries(patch)) {
+            if (value === null)
+                delete merged[key];
+            else
+                merged[key] = value;
+        }
+        // 与 profile 启动加载同一套校验规则（BUG-07：拒绝未知/非法字段）。
+        const policy = parseMerchantPolicy(merged, "policy-overrides");
+        const version = this.state.version + 1;
+        const updated_at = this.now();
+        const next = { policy, version, digest: digestOf(policy), updated_at };
+        // 原子写完整生效策略（tmp + rename，0600）：读者要么看到旧文件要么看到
+        // 新文件，绝不读到半截 JSON。
+        mkdirSync(path.dirname(this.file), { recursive: true, mode: 0o700 });
+        const tmp = `${this.file}.tmp-${process.pid}-${Date.now()}`;
+        writeFileSync(tmp, `${JSON.stringify({ version, updated_at, policy }, null, 2)}\n`, { mode: 0o600 });
+        renameSync(tmp, this.file);
+        this.state = next;
+        this.lastSig = this.statSig();
+        this.warnedSig = undefined;
+        return {
+            version,
+            digest: next.digest,
+            updated_at,
+            applied_keys: Object.keys(patch),
+        };
+    }
+    statSig() {
+        try {
+            const st = statSync(this.file);
+            return `${st.mtimeMs}:${st.size}`;
+        }
+        catch {
+            return undefined;
+        }
+    }
+    /** 读端：文件签名变化才重载；坏文件保留上一个良好策略（同一坏文件告警一次）。
+     *  审查 P2：文件被删除（sig === undefined）→ 显式告警一次并保留最后良好
+     *  策略（内存态永不静默冻结——操作者删除覆盖层的语义是「回退 profile」，
+     *  需两个进程都重启或显式恢复，此处必须让告警可见）。 */
+    reloadIfChanged() {
+        const sig = this.statSig();
+        if (sig === undefined) {
+            if (this.lastSig !== undefined && sig !== this.warnedSig) {
+                this.log(`[policy-runtime] ${this.file} 已消失（被删除？）：保留最后良好策略；` +
+                    "如需回退 profile 策略请重启相关进程或重新写入完整策略文件");
+                this.warnedSig = sig;
+            }
+            return;
+        }
+        if (sig === this.lastSig)
+            return;
+        try {
+            const raw = JSON.parse(readFileSync(this.file, "utf8"));
+            // legacy（BUG-07 修复前只落 patch）：无 policy 字段 → 视为未生效，告警。
+            if (raw.policy === undefined) {
+                if (sig !== this.warnedSig) {
+                    this.log(`[policy-runtime] ${this.file} 为 legacy patch 格式或缺少 policy 字段，忽略（以 profile 策略为准）`);
+                    this.warnedSig = sig;
+                }
+                return;
+            }
+            const policy = parseMerchantPolicy(raw.policy, "policy-overrides");
+            const version = typeof raw.version === "number" && Number.isInteger(raw.version) && raw.version >= 1
+                ? raw.version
+                : 1;
+            this.state = {
+                policy,
+                version,
+                digest: digestOf(policy),
+                updated_at: typeof raw.updated_at === "string" && raw.updated_at.length > 0
+                    ? raw.updated_at
+                    : this.now(),
+            };
+            this.lastSig = sig;
+            this.warnedSig = undefined;
+        }
+        catch (error) {
+            if (sig !== this.warnedSig) {
+                this.log(`[policy-runtime] ${this.file} 读取/校验失败，保留上一个生效策略: ${error instanceof Error ? error.message : String(error)}`);
+                this.warnedSig = sig;
+            }
+        }
+    }
+}
+//# sourceMappingURL=policy-runtime.js.map

package/dist/merchant-core/policy-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-runtime.js","sourceRoot":"","sources":["../../src/merchant-core/policy-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACvF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAuB,MAAM,sBAAsB,CAAC;AA6BhF,qCAAqC;AACrC,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC;IACxF,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC7E,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;SAC7D,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC;SAClC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAChG,CAAC;AAED,SAAS,QAAQ,CAAC,MAAkC;IAClD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClF,CAAC;AAYD,MAAM,OAAO,qBAAqB;IACf,UAAU,CAA6B;IACvC,IAAI,CAAS;IACb,GAAG,CAAe;IAClB,GAAG,CAA4B;IAExC,KAAK,CAAgB;IAC7B,8CAA8C;IACtC,OAAO,CAAqB;IACpC,8BAA8B;IACtB,SAAS,CAAqB;IAEtC,YAAY,OAAqC;QAC/C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;QACvB,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAClE,IAAI,CAAC,KAAK,GAAG;YACX,MAAM,EAAE,OAAO,CAAC,UAAU;YAC1B,OAAO,EAAE,CAAC;YACV,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC;YACpC,UAAU,EAAE,OAAO,CAAC,GAAG,EAAE;SAC1B,CAAC;QACF,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;IAED,yCAAyC;IACzC,OAAO;QACL,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,sCAAsC;IACtC,SAAS;QACP,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC;IAC/B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAA8B;QAClC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC;QAClD,MAAM,MAAM,GAA4B,EAAE,GAAG,aAAa,EAAE,CAAC;QAC7D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,IAAI,KAAK,KAAK,IAAI;gBAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;;gBAClC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC3B,CAAC;QACD,2CAA2C;QAC3C,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC;QACvC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAkB,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC;QACtF,6CAA6C;QAC7C,mBAAmB;QACnB,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACrE,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,QAAQ,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC5D,aAAa,CACX,GAAG,EACH,GAAG,IAAI,CAAC,SAAS,CACf,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAgC,EAC7D,IAAI,EACJ,CAAC,CACF,IAAI,EACL,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;QACF,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,OAAO;YACL,OAAO;YACP,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,UAAU;YACV,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;SACjC,CAAC;IACJ,CAAC;IAEO,OAAO;QACb,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/B,OAAO,GAAG,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED;;;oCAGgC;IACxB,eAAe;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3B,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;gBACzD,IAAI,CAAC,GAAG,CACN,oBAAoB,IAAI,CAAC,IAAI,sBAAsB;oBACjD,mCAAmC,CACtC,CAAC;gBACF,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC;YACvB,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,GAAG,KAAK,IAAI,CAAC,OAAO;YAAE,OAAO;QACjC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAErD,CAAC;YACF,qDAAqD;YACrD,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC7B,IAAI,GAAG,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;oBAC3B,IAAI,CAAC,GAAG,CACN,oBAAoB,IAAI,CAAC,IAAI,oDAAoD,CAClF,CAAC;oBACF,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC;gBACvB,CAAC;gBACD,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;YACnE,MAAM,OAAO,GACX,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,OAAO,IAAI,CAAC;gBAClF,CAAC,CAAC,GAAG,CAAC,OAAO;gBACb,CAAC,CAAC,CAAC,CAAC;YACR,IAAI,CAAC,KAAK,GAAG;gBACX,MAAM;gBACN,OAAO;gBACP,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC;gBACxB,UAAU,EACR,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;oBAC7D,CAAC,CAAC,GAAG,CAAC,UAAU;oBAChB,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE;aACjB,CAAC;YACF,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC;YACnB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,GAAG,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;gBAC3B,IAAI,CAAC,GAAG,CACN,oBAAoB,IAAI,CAAC,IAAI,uBAC3B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE,CACH,CAAC;gBACF,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC;YACvB,CAAC;QACH,CAAC;IACH,CAAC;CACF"}