@ixo/decision-oracle 0.0.0-stage → 0.2.1

package/dist/lib/api-lane/webhooks.js

@@ -0,0 +1,503 @@
+/**
+ * Webhook delivery (Go Prod §4.5, App. B; the wire is src/contracts/webhooks.ts). At-least-once: an
+ * event is ENQUEUED first — one `matrix_deliveries` row per target (`kind: webhook`,
+ * `wh:<eventId>:<endpointId|claim>`), the signed envelope frozen on it — and only then attempted,
+ * so a crash between the two leaves a row the retry cron finds (`nextAttemptAt = now`). Every
+ * attempt posts the row's own payload, so every retry carries the bytes `Oracle-Event-Id` promised.
+ *
+ * Targets: every active endpoint of the source subscribed to the type (`events` empty = all), and
+ * for `claim.*` the claim's own `webhookUrl` or else the source's default — whether or not any
+ * endpoint subscribes, and skipped only when it is exactly a subscribed endpoint's URL (one post,
+ * the endpoint's). The two without an endpoint are signed with the SOURCE's own signing secret (contracts v1.1 —
+ * plus the rotated-out one for its 24 h overlap); a source created before v1.1 has none until an
+ * owner rotates, so such a delivery is `dead` at once rather than posted unsigned.
+ *
+ * Schedule: 8 attempts over 24 h — at once, then 1 min, 5 min, 30 min, 2 h, 6 h, 12 h and 24 h
+ * after the first — then `dead` (the dead-letter the portal shows; `redeliver` re-queues). A
+ * receiver answering anything but 2xx within 10 s is a failed attempt; up to 3 redirects are
+ * followed, every hop held to https, a public host and the endpoint's own origin, the POST re-sent
+ * as a POST (§14) — a hop elsewhere is refused and the delivery `dead`. An endpoint's URL edit retargets its
+ * queued rows (the PATCH, in one batch); a redeliver re-reads its target — the endpoint's URL, the
+ * claim's `webhookUrl` or the source's CURRENT default — so a signed event never goes on posting to
+ * a URL its owner moved away from; a sent row's log keeps where it went. A disabled or deleted
+ * endpoint gets nothing more: its queued rows go `dead`, and a redeliver of one is refused.
+ */
+import { and, asc, eq, inArray, lte } from "drizzle-orm";
+import { ORACLE_EVENT_ID_HEADER, ORACLE_SIGNATURE_HEADER, WEBHOOK_API_VERSION, WEBHOOK_MAX_ATTEMPTS, WEBHOOK_TIMEOUT_MS, WebhookEnvelope, } from "../../contracts/index.js";
+import { apiClaims, apiSources, matrixDeliveries, webhookEndpoints, } from "../../db/schema.js";
+import { assertPublicHttpUrl, fetchGuarded, RedirectRefused } from "../http/client.js";
+import { reportAlert, reportError } from "../sentry.js";
+import { eventIdFor, newId } from "./ids.js";
+import { recordEvents } from "./timeline.js";
+import { decryptWebhookSecret, signatureHeader } from "./webhook-crypto.js";
+/**
+ * Minutes after attempt n (1-based) before attempt n + 1: attempts at 0, 1 min, 5 min, 30 min, 2 h,
+ * 6 h, 12 h and 24 h after the first — §4.5's 8 attempts over 24 hours.
+ */
+const RETRY_GAP_MINUTES = [1, 4, 25, 90, 240, 360, 720];
+/** An attempt's worst case — a 10 s timeout per hop, a few hops — with room to spare. */
+const LEASE_MS = 2 * 60_000;
+/** Attempts in flight at once, per tick and per notify step. */
+const PARALLEL = 10;
+/** Due deliveries per retry tick — bounded like the scan, so one tick never runs long. */
+export const WEBHOOK_BATCH = 50;
+/**
+ * Freeze the envelope onto one row per target (`onConflictDoNothing`: an event enqueued twice
+ * lands once); the keys of every row the event has, new or not.
+ */
+export async function enqueueWebhook(db, event) {
+    const payload = WebhookEnvelope.parse({
+        id: event.eventId,
+        type: event.type,
+        createdAt: event.createdAt.toISOString(),
+        apiVersion: WEBHOOK_API_VERSION,
+        data: event.data,
+    });
+    const [endpoints, source] = await Promise.all([
+        db.query.webhookEndpoints.findMany({
+            where: and(eq(webhookEndpoints.sourceId, event.sourceId), eq(webhookEndpoints.status, "active")),
+        }),
+        db.query.apiSources.findFirst({
+            columns: { webhookUrl: true },
+            where: eq(apiSources.sourceId, event.sourceId),
+        }),
+    ]);
+    const subscribed = endpoints.filter((e) => event.onlyEndpointId
+        ? e.endpointId === event.onlyEndpointId
+        : e.events.length === 0 || e.events.includes(event.type));
+    const targets = subscribed.map((e) => ({ key: e.endpointId, endpointId: e.endpointId, url: e.url }));
+    // The default receives every claim event whatever endpoints exist (an endpoint added beside it
+    // must never silence it); a URL an endpoint already gets is not posted twice — the endpoint's
+    // own delivery, under its own secret, stands.
+    if (event.type.startsWith("claim.") && !event.onlyEndpointId) {
+        const url = event.claimWebhookUrl ?? source?.webhookUrl ?? null;
+        if (url && !subscribed.some((e) => e.url === url)) {
+            targets.push({ key: "claim", endpointId: null, url });
+        }
+    }
+    const now = new Date();
+    const rows = targets.map((t) => ({
+        dedupeKey: `wh:${event.eventId}:${t.key}`,
+        kind: "webhook",
+        claimId: event.claimId,
+        sourceId: event.sourceId,
+        endpointId: t.endpointId,
+        targetUrl: t.url,
+        eventType: event.type,
+        payload,
+        status: "pending",
+        attempts: 0,
+        nextAttemptAt: now,
+    }));
+    for (const row of rows)
+        await db.insert(matrixDeliveries).values(row).onConflictDoNothing();
+    return rows.map((r) => r.dedupeKey);
+}
+/**
+ * One attempt of one row, if it is owed one now. The row is LEASED first — one conditional UPDATE
+ * that pushes `nextAttemptAt` past the attempt's own worst case — so an overlapping tick, the notify
+ * step's inline attempt and a redeliver can never post the same row at once; whoever lost the
+ * UPDATE skips. The attempt's outcome is then written only over that lease (`attempts` unchanged).
+ * Never throws: whatever goes wrong is this row's failed attempt, not the caller's.
+ */
+export async function deliverWebhook(deps, dedupeKey) {
+    const now = new Date();
+    const [row] = await deps.db
+        .update(matrixDeliveries)
+        .set({ nextAttemptAt: new Date(now.getTime() + LEASE_MS) })
+        .where(and(eq(matrixDeliveries.dedupeKey, dedupeKey), eq(matrixDeliveries.kind, "webhook"), inArray(matrixDeliveries.status, ["pending", "failed"]), lte(matrixDeliveries.nextAttemptAt, now)))
+        .returning();
+    if (!row)
+        return "skipped";
+    try {
+        return await attempt(deps, row);
+    }
+    catch (err) {
+        // Our own throw (D1, an endpoint's secret that will not decrypt) — the operator's to fix,
+        // never the receiver's.
+        reportError(err, {
+            lane: "api-lane",
+            step: "webhook-attempt",
+            context: { deliveryId: dedupeKey },
+        });
+        return finish(deps, row, "failed", null, err instanceof Error ? err.name : "error", null);
+    }
+}
+/** Every refused-redirect `lastError` starts so — the `webhook.post` metric labels it `redirects`. */
+const REDIRECT_ERROR = "redirect";
+async function attempt(deps, row) {
+    if (!row.payload || !row.targetUrl)
+        return finish(deps, row, "dead", null, "erased", null);
+    const key = deps.config.WEBHOOK_ENCRYPTION_KEY;
+    if (!key) {
+        // Unreachable with the lane on (config.ts requires the key), but the deps are a Pick: a
+        // caller that built them by hand still fails loudly rather than posting unsigned.
+        return finish(deps, row, "failed", null, "WEBHOOK_ENCRYPTION_KEY is not set", null);
+    }
+    const signing = await secretsFor(deps.db, key, row);
+    if (signing === "endpoint-gone") {
+        return finish(deps, row, "dead", null, "endpoint disabled or removed", null);
+    }
+    if (signing.length === 0) {
+        return finish(deps, row, "dead", null, "no signing secret — rotate the source's secret", null);
+    }
+    const body = JSON.stringify(row.payload);
+    const headers = {
+        "content-type": "application/json",
+        [ORACLE_SIGNATURE_HEADER]: await signatureHeader(signing, body, Math.floor(Date.now() / 1000)),
+        [ORACLE_EVENT_ID_HEADER]: row.payload.id,
+    };
+    // §14: https, public hosts, redirects followed a bounded number of hops, each hop re-checked. No
+    // `trace`: our trace ids are not the receiver's business.
+    const url = row.targetUrl;
+    try {
+        if (!url.startsWith("https://"))
+            throw new Error("not https");
+        assertPublicHttpUrl(url);
+    }
+    catch {
+        return finish(deps, row, "dead", null, "target refused: not a public https URL", null);
+    }
+    // `exact`: the signed envelope reaches the endpoint's own origin as a POST, or nobody — a
+    // cross-origin hop is refused, not followed with the signature stripped, because the body itself
+    // is the source's data and the receiver registered one origin. A refused hop is the same on
+    // every retry, so the delivery is dead at once (the source fixes its endpoint and redelivers).
+    const started = Date.now();
+    let res;
+    try {
+        res = await fetchGuarded(url, {
+            method: "POST",
+            timeoutMs: WEBHOOK_TIMEOUT_MS,
+            exact: true,
+            headers,
+            body,
+        });
+    }
+    catch (err) {
+        if (err instanceof RedirectRefused) {
+            // Name where the receiver pointed us, so the source knows the URL to register instead.
+            const why = err.target
+                ? `redirected to ${err.target} — cross-origin redirects are not followed; register the final URL`
+                : `redirect refused: ${err.message}`;
+            return finish(deps, row, "dead", null, why, started);
+        }
+        const reason = err instanceof Error ? err.name : "network error";
+        return finish(deps, row, "failed", null, reason, started);
+    }
+    await res.body?.cancel().catch(() => { });
+    return res.ok
+        ? finish(deps, row, "sent", res.status, null, started)
+        : finish(deps, row, "failed", res.status, `HTTP ${res.status}`, started);
+}
+/**
+ * The retry cron (every minute): the due rows, oldest due first, attempted a few at a time — each
+ * behind its own lease, so a tick that overlaps the last one only takes what nobody holds.
+ */
+export async function deliverDueWebhooks(deps, now = new Date()) {
+    const due = await deps.db
+        .select({ dedupeKey: matrixDeliveries.dedupeKey })
+        .from(matrixDeliveries)
+        .where(and(eq(matrixDeliveries.kind, "webhook"), inArray(matrixDeliveries.status, ["pending", "failed"]), lte(matrixDeliveries.nextAttemptAt, now)))
+        .orderBy(asc(matrixDeliveries.nextAttemptAt))
+        .limit(WEBHOOK_BATCH);
+    const keys = due.map((d) => d.dedupeKey);
+    await deliverAll(deps, keys);
+    return keys.length;
+}
+/** Attempt rows `PARALLEL` at a time — bounded, so one tick or one notify step stays short. */
+export async function deliverAll(deps, keys) {
+    for (let i = 0; i < keys.length; i += PARALLEL) {
+        await Promise.all(keys.slice(i, i + PARALLEL).map((k) => deliverWebhook(deps, k)));
+    }
+}
+/**
+ * `POST …/deliveries/:id/redeliver`: the same row back to the start of the ladder, attempted now,
+ * to where its target points NOW — an endpoint's row to the endpoint's current URL, a claim-URL row
+ * to the claim's `webhookUrl`, a default-URL row to the source's current default (both signed with
+ * the source's secret at attempt, as the original was). Null when the delivery is not this
+ * source's (the route answers 404); a `RedeliverRefusal` leaves the row as it was.
+ */
+export async function redeliverWebhook(deps, sourceId, deliveryId) {
+    const mine = and(eq(matrixDeliveries.dedupeKey, deliveryId), eq(matrixDeliveries.kind, "webhook"), eq(matrixDeliveries.sourceId, sourceId));
+    const current = await deps.db.query.matrixDeliveries.findFirst({
+        columns: { endpointId: true, targetUrl: true, claimId: true },
+        where: mine,
+    });
+    if (!current)
+        return null;
+    const target = await currentTarget(deps.db, sourceId, current);
+    if ("refused" in target)
+        return target.refused;
+    const [row] = await deps.db
+        .update(matrixDeliveries)
+        .set({
+        status: "pending",
+        attempts: 0,
+        nextAttemptAt: new Date(),
+        lastError: null,
+        ...(target.url !== null && { targetUrl: target.url }),
+    })
+        .where(mine)
+        .returning();
+    if (!row)
+        return null;
+    await deliverWebhook(deps, deliveryId);
+    return ((await deps.db.query.matrixDeliveries.findFirst({
+        where: eq(matrixDeliveries.dedupeKey, deliveryId),
+    })) ?? null);
+}
+/**
+ * Where a redeliver posts: re-read, never the URL frozen on the row, so a redeliver never goes to a
+ * URL its owner moved away from. `url` null for an erased row (`targetUrl` null): it stays erased and goes
+ * `dead`. A target without an endpoint is resolved as `enqueueWebhook` did — the claim's own
+ * `webhookUrl`, else the source's default.
+ */
+async function currentTarget(db, sourceId, row) {
+    if (row.endpointId) {
+        const endpoint = await db.query.webhookEndpoints.findFirst({
+            columns: { url: true, status: true },
+            where: eq(webhookEndpoints.endpointId, row.endpointId),
+        });
+        if (!endpoint)
+            return { refused: "endpoint-deleted" };
+        if (endpoint.status !== "active")
+            return { refused: "endpoint-disabled" };
+        return { url: row.targetUrl === null ? null : endpoint.url };
+    }
+    if (row.targetUrl === null)
+        return { url: null };
+    const [claim, source] = await Promise.all([
+        row.claimId
+            ? db.query.apiClaims.findFirst({
+                columns: { webhookUrl: true },
+                where: eq(apiClaims.claimId, row.claimId),
+            })
+            : undefined,
+        db.query.apiSources.findFirst({
+            columns: { webhookUrl: true },
+            where: eq(apiSources.sourceId, sourceId),
+        }),
+    ]);
+    const url = claim?.webhookUrl ?? source?.webhookUrl;
+    return url ? { url } : { refused: "no-webhook-url" };
+}
+/**
+ * The secrets that sign this row, each with the rotated-out one while it overlaps (24 h): its
+ * endpoint's — or `endpoint-gone` once that endpoint is disabled or deleted — or, for a target
+ * without an endpoint (a claim's `webhookUrl`, the source's default), the source's own. A secret
+ * that will not decrypt throws: that row's failed attempt, never an unsigned post.
+ */
+async function secretsFor(db, key, row) {
+    let sealed;
+    if (row.endpointId) {
+        const endpoint = await db.query.webhookEndpoints.findFirst({
+            where: eq(webhookEndpoints.endpointId, row.endpointId),
+        });
+        if (endpoint?.status !== "active")
+            return "endpoint-gone";
+        sealed = live(endpoint.secretCiphertext, endpoint.previousSecretCiphertext, endpoint.previousSecretExpiresAt);
+    }
+    else {
+        const source = await db.query.apiSources.findFirst({
+            columns: {
+                webhookSecretCiphertext: true,
+                previousWebhookSecretCiphertext: true,
+                previousWebhookSecretExpiresAt: true,
+            },
+            where: eq(apiSources.sourceId, row.sourceId ?? ""),
+        });
+        sealed = live(source?.webhookSecretCiphertext ?? null, source?.previousWebhookSecretCiphertext ?? null, source?.previousWebhookSecretExpiresAt ?? null);
+    }
+    return Promise.all(sealed.filter((s) => s !== null).map((s) => decryptWebhookSecret(s, key)));
+}
+/** A current secret, plus the previous one only while its overlap has not run out. */
+function live(current, previous, expiresAt) {
+    const overlapping = previous !== null && (expiresAt?.getTime() ?? 0) > Date.now();
+    return overlapping ? [current, previous] : [current];
+}
+/**
+ * Record the attempt over the lease this call holds (`attempts` still what it leased), and, for a
+ * claim's event, on its timeline. `postedAt` (when the POST began) is null when nothing reached
+ * the receiver (erased, no key, no secret, a refused target): the row and the timeline say why, but
+ * the delivery-failure metric (§16.3's alert) and `webhook.post` count only what was posted.
+ */
+async function finish(deps, row, outcome, statusCode, error, postedAt) {
+    // First, so the D1 writes below are not part of the receiver's time.
+    const postMs = postedAt === null ? null : Date.now() - postedAt;
+    const posted = postedAt !== null;
+    const attempts = row.attempts + 1;
+    const status = outcome === "failed" && attempts >= WEBHOOK_MAX_ATTEMPTS ? "dead" : outcome;
+    const nextAttemptAt = status === "failed"
+        ? new Date(Date.now() + RETRY_GAP_MINUTES[attempts - 1] * 60_000)
+        : null;
+    const [written] = await deps.db
+        .update(matrixDeliveries)
+        .set({ status, attempts, lastStatusCode: statusCode, lastError: error, nextAttemptAt })
+        .where(and(eq(matrixDeliveries.dedupeKey, row.dedupeKey), eq(matrixDeliveries.attempts, row.attempts)))
+        .returning({ dedupeKey: matrixDeliveries.dedupeKey });
+    // A redeliver reset the row while this attempt ran: its own attempt owns the row now.
+    if (!written)
+        return "skipped";
+    if (row.claimId && row.sourceId) {
+        await recordEvents(deps.db, [
+            {
+                key: `${row.dedupeKey}:${row.updatedAt.getTime()}:${attempts}`,
+                at: new Date(),
+                sourceId: row.sourceId,
+                claimId: row.claimId,
+                type: "webhook_attempt",
+                data: {
+                    deliveryId: row.dedupeKey,
+                    eventType: row.eventType,
+                    attempt: attempts,
+                    status: status === "sent" ? "delivered" : status,
+                    statusCode,
+                },
+            },
+        ]);
+    }
+    if (status === "sent" || posted) {
+        deps.metrics.count(status === "sent" ? "api.webhook.delivered" : "api.webhook.failed", 1, {
+            attempt: String(attempts),
+        });
+    }
+    if (postMs !== null) {
+        deps.metrics.timing("webhook.post", postMs, {
+            status: statusCode ?? (error?.startsWith(REDIRECT_ERROR) ? "redirects" : "network"),
+            outcome: status === "sent" ? "delivered" : status,
+            id: row.sourceId,
+        });
+    }
+    if (status === "dead")
+        deps.metrics.count("webhook.dead", 1, { id: row.sourceId });
+    if (status !== "sent") {
+        deps.logger.warn("api.webhook.attempt", {
+            deliveryId: row.dedupeKey,
+            eventType: row.eventType,
+            attempt: attempts,
+            status,
+            statusCode,
+            error,
+        });
+    }
+    // The one place a row becomes `dead`. Only a receiver that refused all 8 attempts pages: a row
+    // dead at once (erased, endpoint disabled or removed, no signing secret, a non-public target) is
+    // the customer's own configuration, which the portal's dead-letter already shows them.
+    if (status === "dead" && posted) {
+        await reportAlert(deps, "api.webhook.dead", {
+            sourceId: row.sourceId,
+            deliveryId: row.dedupeKey,
+            reason: error,
+        });
+    }
+    return status;
+}
+// --- events other lanes emit ----------------------------------------------------------------------
+/** A `claim.decided` with sample data — what a receiver sees from the "send test event" button. */
+const SAMPLE_RECORD = {
+    claimId: "apc_0000000000000000000000000000000000000000",
+    lane: "api",
+    collectionId: null,
+    protocolDid: "did:ixo:entity:sample",
+    submitter: null,
+    contentDigest: `sha256:${"0".repeat(64)}`,
+    submittedBy: null,
+    submittedVia: null,
+    status: "processed",
+    decision: {
+        status: "decided",
+        verdict: "approve",
+        rubricId: "0".repeat(64),
+        factsDigest: "0".repeat(64),
+        resultDigest: "0".repeat(64),
+        decision: null,
+        explanation: "A test event: no claim was evaluated.",
+        receipt: null,
+        chainStatus: "skipped",
+    },
+    review: null,
+    payment: null,
+    webhook: null,
+    error: null,
+    metadata: { test: true },
+    createdAt: "2026-01-01T00:00:00.000Z",
+    decidedAt: "2026-01-01T00:00:00.000Z",
+};
+/**
+ * `POST /v1/api/webhooks/:endpointId/test` (§4.5): one signed `claim.decided` with sample data to
+ * that endpoint alone, attempted now and logged like any delivery. `not_found` when the endpoint
+ * is not this source's (404); `disabled` when it is switched off (409 — enable it first).
+ */
+export async function sendTestEvent(deps, sourceId, endpointId) {
+    const endpoint = await deps.db.query.webhookEndpoints.findFirst({
+        where: and(eq(webhookEndpoints.endpointId, endpointId), eq(webhookEndpoints.sourceId, sourceId)),
+    });
+    if (!endpoint)
+        return "not_found";
+    if (endpoint.status !== "active")
+        return "disabled";
+    const [key] = await enqueueWebhook(deps.db, {
+        eventId: newId("evt"),
+        type: "claim.decided",
+        createdAt: new Date(),
+        sourceId,
+        claimId: null,
+        // The receiving source's own id, so the sample has the record's full shape.
+        data: { ...SAMPLE_RECORD, sourceId },
+        onlyEndpointId: endpointId,
+    });
+    if (!key)
+        throw new Error("test event enqueued no delivery for an active endpoint");
+    await deliverWebhook(deps, key);
+    const row = await deps.db.query.matrixDeliveries.findFirst({
+        where: eq(matrixDeliveries.dedupeKey, key),
+    });
+    if (!row)
+        throw new Error("test event delivery row vanished");
+    return row;
+}
+/**
+ * `payment.settled` (App. B) for S4's settle on the receipt: on the claim's timeline (`paid`) and to
+ * the source's subscribed endpoints. Called once per claim — on the settle that moved its charge
+ * off `reserved` (lib/payments/settle.ts); a replay announces nothing new.
+ */
+export async function emitPaymentSettled(db, charge) {
+    const [eventId] = await recordEvents(db, [
+        {
+            key: `${charge.claimId}:paid`,
+            at: charge.settledAt,
+            sourceId: charge.sourceId,
+            claimId: charge.claimId,
+            type: "paid",
+            data: { settlementId: charge.settlementId, ...charge.terms },
+        },
+    ]);
+    await enqueueWebhook(db, {
+        eventId: eventId,
+        type: "payment.settled",
+        createdAt: charge.settledAt,
+        sourceId: charge.sourceId,
+        claimId: null,
+        data: {
+            claimId: charge.claimId,
+            settlementId: charge.settlementId,
+            ...charge.terms,
+            status: "settled",
+        },
+    });
+}
+/**
+ * `balance.low` (App. B, §12.4) for S4's balance watch: one per crossing — `crossedAt` is the
+ * `api_sources.balanceLowAt` it stamped, so a watch tick that repeats the same crossing lands once.
+ */
+export async function emitBalanceLow(db, low) {
+    await enqueueWebhook(db, {
+        eventId: await eventIdFor(`${low.sourceId}:balance.low`, low.crossedAt),
+        type: "balance.low",
+        createdAt: low.crossedAt,
+        sourceId: low.sourceId,
+        claimId: null,
+        data: { sourceId: low.sourceId, balanceCents: low.balanceCents, floorCents: low.floorCents },
+    });
+}
+//# sourceMappingURL=webhooks.js.map

package/dist/lib/api-lane/webhooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.js","sourceRoot":"","sources":["../../../src/lib/api-lane/webhooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAEzD,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,EAClB,eAAe,GAEhB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,SAAS,EACT,UAAU,EAEV,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAIpF,OAAO,EAAkB,WAAW,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AASzE;;;GAGG;AACH,MAAM,iBAAiB,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;AACxD,yFAAyF;AACzF,MAAM,QAAQ,GAAG,CAAC,GAAG,MAAM,CAAC;AAC5B,gEAAgE;AAChE,MAAM,QAAQ,GAAG,EAAE,CAAC;AACpB,0FAA0F;AAC1F,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,CAAC;AAgBhC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EAAY,EAAE,KAAmB;IACpE,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC;QACpC,EAAE,EAAE,KAAK,CAAC,OAAO;QACjB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;QACxC,UAAU,EAAE,mBAAmB;QAC/B,IAAI,EAAE,KAAK,CAAC,IAAI;KACjB,CAAC,CAAC;IACH,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC5C,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC;YACjC,KAAK,EAAE,GAAG,CACR,EAAE,CAAC,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,EAC7C,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,QAAQ,CAAC,CACtC;SACF,CAAC;QACF,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;YAC5B,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE;YAC7B,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC;SAC/C,CAAC;KACH,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACxC,KAAK,CAAC,cAAc;QAClB,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,cAAc;QACvC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAC3D,CAAC;IACF,MAAM,OAAO,GAA8D,UAAU,CAAC,GAAG,CACvF,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CACrE,CAAC;IACF,+FAA+F;IAC/F,8FAA8F;IAC9F,8CAA8C;IAC9C,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;QAC7D,MAAM,GAAG,GAAG,KAAK,CAAC,eAAe,IAAI,MAAM,EAAE,UAAU,IAAI,IAAI,CAAC;QAChE,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,EAAE,CAAC;YAClD,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/B,SAAS,EAAE,MAAM,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,EAAE;QACzC,IAAI,EAAE,SAAkB;QACxB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,SAAS,EAAE,CAAC,CAAC,GAAG;QAChB,SAAS,EAAE,KAAK,CAAC,IAAI;QACrB,OAAO;QACP,MAAM,EAAE,SAAkB;QAC1B,QAAQ,EAAE,CAAC;QACX,aAAa,EAAE,GAAG;KACnB,CAAC,CAAC,CAAC;IACJ,KAAK,MAAM,GAAG,IAAI,IAAI;QAAE,MAAM,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,mBAAmB,EAAE,CAAC;IAC5F,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AACtC,CAAC;AAID;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAiB,EAAE,SAAiB;IACvE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE;SACxB,MAAM,CAAC,gBAAgB,CAAC;SACxB,GAAG,CAAC,EAAE,aAAa,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,EAAE,CAAC;SAC1D,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC,EACzC,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,SAAS,CAAC,EACpC,OAAO,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,EACvD,GAAG,CAAC,gBAAgB,CAAC,aAAa,EAAE,GAAG,CAAC,CACzC,CACF;SACA,SAAS,EAAE,CAAC;IACf,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,0FAA0F;QAC1F,wBAAwB;QACxB,WAAW,CAAC,GAAG,EAAE;YACf,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE;SACnC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC5F,CAAC;AACH,CAAC;AAED,sGAAsG;AACtG,MAAM,cAAc,GAAG,UAAU,CAAC;AAElC,KAAK,UAAU,OAAO,CAAC,IAAiB,EAAE,GAAmB;IAC3D,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS;QAAE,OAAO,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC3F,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC;IAC/C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,wFAAwF;QACxF,kFAAkF;QAClF,OAAO,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,mCAAmC,EAAE,IAAI,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACpD,IAAI,OAAO,KAAK,eAAe,EAAE,CAAC;QAChC,OAAO,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,8BAA8B,EAAE,IAAI,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,gDAAgD,EAAE,IAAI,CAAC,CAAC;IACjG,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG;QACd,cAAc,EAAE,kBAAkB;QAClC,CAAC,uBAAuB,CAAC,EAAE,MAAM,eAAe,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC9F,CAAC,sBAAsB,CAAC,EAAG,GAAG,CAAC,OAA0B,CAAC,EAAE;KAC7D,CAAC;IACF,iGAAiG;IACjG,0DAA0D;IAC1D,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC;IAC1B,IAAI,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC;QAC9D,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,wCAAwC,EAAE,IAAI,CAAC,CAAC;IACzF,CAAC;IACD,0FAA0F;IAC1F,iGAAiG;IACjG,4FAA4F;IAC5F,+FAA+F;IAC/F,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE;YAC5B,MAAM,EAAE,MAAM;YACd,SAAS,EAAE,kBAAkB;YAC7B,KAAK,EAAE,IAAI;YACX,OAAO;YACP,IAAI;SACL,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,eAAe,EAAE,CAAC;YACnC,uFAAuF;YACvF,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM;gBACpB,CAAC,CAAC,iBAAiB,GAAG,CAAC,MAAM,oEAAoE;gBACjG,CAAC,CAAC,qBAAqB,GAAG,CAAC,OAAO,EAAE,CAAC;YACvC,OAAO,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QACvD,CAAC;QACD,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC;QACjE,OAAO,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACzC,OAAO,GAAG,CAAC,EAAE;QACX,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC;QACtD,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,GAAG,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,CAAC;AAC7E,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAiB,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE;IAC1E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;SACtB,MAAM,CAAC,EAAE,SAAS,EAAE,gBAAgB,CAAC,SAAS,EAAE,CAAC;SACjD,IAAI,CAAC,gBAAgB,CAAC;SACtB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,SAAS,CAAC,EACpC,OAAO,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,EACvD,GAAG,CAAC,gBAAgB,CAAC,aAAa,EAAE,GAAG,CAAC,CACzC,CACF;SACA,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC;SAC5C,KAAK,CAAC,aAAa,CAAC,CAAC;IACxB,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7B,OAAO,IAAI,CAAC,MAAM,CAAC;AACrB,CAAC;AAED,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAiB,EAAE,IAAuB;IACzE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,QAAQ,EAAE,CAAC;QAC/C,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACrF,CAAC;AACH,CAAC;AAOD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAiB,EACjB,QAAgB,EAChB,UAAkB;IAElB,MAAM,IAAI,GAAG,GAAG,CACd,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,UAAU,CAAC,EAC1C,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,SAAS,CAAC,EACpC,EAAE,CAAC,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CACxC,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,SAAS,CAAC;QAC7D,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;QAC7D,KAAK,EAAE,IAAI;KACZ,CAAC,CAAC;IACH,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC/D,IAAI,SAAS,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC;IAC/C,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE;SACxB,MAAM,CAAC,gBAAgB,CAAC;SACxB,GAAG,CAAC;QACH,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,CAAC;QACX,aAAa,EAAE,IAAI,IAAI,EAAE;QACzB,SAAS,EAAE,IAAI;QACf,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK,IAAI,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;KACtD,CAAC;SACD,KAAK,CAAC,IAAI,CAAC;SACX,SAAS,EAAE,CAAC;IACf,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,cAAc,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACvC,OAAO,CACL,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,SAAS,CAAC;QAC9C,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,UAAU,CAAC;KAClD,CAAC,CAAC,IAAI,IAAI,CACZ,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,aAAa,CAC1B,EAAY,EACZ,QAAgB,EAChB,GAAiE;IAEjE,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QACnB,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,SAAS,CAAC;YACzD,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;YACpC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC;SACvD,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;QACtD,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;QAC1E,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;IAC/D,CAAC;IACD,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI;QAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IACjD,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACxC,GAAG,CAAC,OAAO;YACT,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC;gBAC3B,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE;gBAC7B,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC;aAC1C,CAAC;YACJ,CAAC,CAAC,SAAS;QACb,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;YAC5B,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE;YAC7B,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC;SACzC,CAAC;KACH,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,KAAK,EAAE,UAAU,IAAI,MAAM,EAAE,UAAU,CAAC;IACpD,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;AACvD,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,UAAU,CACvB,EAAY,EACZ,GAAW,EACX,GAAmB;IAEnB,IAAI,MAAyB,CAAC;IAC9B,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QACnB,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,SAAS,CAAC;YACzD,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC;SACvD,CAAC,CAAC;QACH,IAAI,QAAQ,EAAE,MAAM,KAAK,QAAQ;YAAE,OAAO,eAAe,CAAC;QAC1D,MAAM,GAAG,IAAI,CACX,QAAQ,CAAC,gBAAgB,EACzB,QAAQ,CAAC,wBAAwB,EACjC,QAAQ,CAAC,uBAAuB,CACjC,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;YACjD,OAAO,EAAE;gBACP,uBAAuB,EAAE,IAAI;gBAC7B,+BAA+B,EAAE,IAAI;gBACrC,8BAA8B,EAAE,IAAI;aACrC;YACD,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC;SACnD,CAAC,CAAC;QACH,MAAM,GAAG,IAAI,CACX,MAAM,EAAE,uBAAuB,IAAI,IAAI,EACvC,MAAM,EAAE,+BAA+B,IAAI,IAAI,EAC/C,MAAM,EAAE,8BAA8B,IAAI,IAAI,CAC/C,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,CAChB,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CACvF,CAAC;AACJ,CAAC;AAED,sFAAsF;AACtF,SAAS,IAAI,CAAC,OAAsB,EAAE,QAAuB,EAAE,SAAsB;IACnF,MAAM,WAAW,GAAG,QAAQ,KAAK,IAAI,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAClF,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AACvD,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,MAAM,CACnB,IAAiB,EACjB,GAAmB,EACnB,OAAmC,EACnC,UAAyB,EACzB,KAAoB,EACpB,QAAuB;IAEvB,qEAAqE;IACrE,MAAM,MAAM,GAAG,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC;IAChE,MAAM,MAAM,GAAG,QAAQ,KAAK,IAAI,CAAC;IACjC,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,OAAO,KAAK,QAAQ,IAAI,QAAQ,IAAI,oBAAoB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IAC3F,MAAM,aAAa,GACjB,MAAM,KAAK,QAAQ;QACjB,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAI,iBAAiB,CAAC,QAAQ,GAAG,CAAC,CAAY,GAAG,MAAM,CAAC;QAC7E,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE;SAC5B,MAAM,CAAC,gBAAgB,CAAC;SACxB,GAAG,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;SACtF,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,EAC7C,EAAE,CAAC,gBAAgB,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAC5C,CACF;SACA,SAAS,CAAC,EAAE,SAAS,EAAE,gBAAgB,CAAC,SAAS,EAAE,CAAC,CAAC;IACxD,sFAAsF;IACtF,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE;YAC1B;gBACE,GAAG,EAAE,GAAG,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,QAAQ,EAAE;gBAC9D,EAAE,EAAE,IAAI,IAAI,EAAE;gBACd,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,IAAI,EAAE,iBAAiB;gBACvB,IAAI,EAAE;oBACJ,UAAU,EAAE,GAAG,CAAC,SAAS;oBACzB,SAAS,EAAE,GAAG,CAAC,SAAS;oBACxB,OAAO,EAAE,QAAQ;oBACjB,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM;oBAChD,UAAU;iBACX;aACF;SACF,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,EAAE,CAAC;QAChC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,oBAAoB,EAAE,CAAC,EAAE;YACxF,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC;SAC1B,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,EAAE;YAC1C,MAAM,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACnF,OAAO,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM;YACjD,EAAE,EAAE,GAAG,CAAC,QAAQ;SACjB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,KAAK,MAAM;QAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IACnF,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE;YACtC,UAAU,EAAE,GAAG,CAAC,SAAS;YACzB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,OAAO,EAAE,QAAQ;YACjB,MAAM;YACN,UAAU;YACV,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IACD,+FAA+F;IAC/F,iGAAiG;IACjG,uFAAuF;IACvF,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,EAAE,CAAC;QAChC,MAAM,WAAW,CAAC,IAAI,EAAE,kBAAkB,EAAE;YAC1C,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,UAAU,EAAE,GAAG,CAAC,SAAS;YACzB,MAAM,EAAE,KAAK;SACd,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,qGAAqG;AAErG,mGAAmG;AACnG,MAAM,aAAa,GAAG;IACpB,OAAO,EAAE,8CAA8C;IACvD,IAAI,EAAE,KAAK;IACX,YAAY,EAAE,IAAI;IAClB,WAAW,EAAE,uBAAuB;IACpC,SAAS,EAAE,IAAI;IACf,aAAa,EAAE,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE;IACzC,WAAW,EAAE,IAAI;IACjB,YAAY,EAAE,IAAI;IAClB,MAAM,EAAE,WAAW;IACnB,QAAQ,EAAE;QACR,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,uCAAuC;QACpD,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,SAAS;KACvB;IACD,MAAM,EAAE,IAAI;IACZ,OAAO,EAAE,IAAI;IACb,OAAO,EAAE,IAAI;IACb,KAAK,EAAE,IAAI;IACX,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;IACxB,SAAS,EAAE,0BAA0B;IACrC,SAAS,EAAE,0BAA0B;CACtC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAiB,EACjB,QAAgB,EAChB,UAAkB;IAElB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,SAAS,CAAC;QAC9D,KAAK,EAAE,GAAG,CACR,EAAE,CAAC,gBAAgB,CAAC,UAAU,EAAE,UAAU,CAAC,EAC3C,EAAE,CAAC,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CACxC;KACF,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ;QAAE,OAAO,WAAW,CAAC;IAClC,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,UAAU,CAAC;IACpD,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE;QAC1C,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC;QACrB,IAAI,EAAE,eAAe;QACrB,SAAS,EAAE,IAAI,IAAI,EAAE;QACrB,QAAQ;QACR,OAAO,EAAE,IAAI;QACb,4EAA4E;QAC5E,IAAI,EAAE,EAAE,GAAG,aAAa,EAAE,QAAQ,EAAE;QACpC,cAAc,EAAE,UAAU;KAC3B,CAAC,CAAC;IACH,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IACpF,MAAM,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAChC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,SAAS,CAAC;QACzD,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,GAAG,CAAC;KAC3C,CAAC,CAAC;IACH,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAC9D,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,EAAY,EACZ,MAOC;IAED,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,YAAY,CAAC,EAAE,EAAE;QACvC;YACE,GAAG,EAAE,GAAG,MAAM,CAAC,OAAO,OAAO;YAC7B,EAAE,EAAE,MAAM,CAAC,SAAS;YACpB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE;SAC7D;KACF,CAAC,CAAC;IACH,MAAM,cAAc,CAAC,EAAE,EAAE;QACvB,OAAO,EAAE,OAAiB;QAC1B,IAAI,EAAE,iBAAiB;QACvB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE,IAAI;QACb,IAAI,EAAE;YACJ,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,GAAG,MAAM,CAAC,KAAK;YACf,MAAM,EAAE,SAAS;SAClB;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,EAAY,EACZ,GAAoF;IAEpF,MAAM,cAAc,CAAC,EAAE,EAAE;QACvB,OAAO,EAAE,MAAM,UAAU,CAAC,GAAG,GAAG,CAAC,QAAQ,cAAc,EAAE,GAAG,CAAC,SAAS,CAAC;QACvE,IAAI,EAAE,aAAa;QACnB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE;KAC7F,CAAC,CAAC;AACL,CAAC"}

package/dist/lib/archive.d.ts

@@ -0,0 +1,64 @@
+/**
+ * The answer archive — every ask, answer and photo this oracle evaluated, kept in the operator's
+ * own R2 bucket (`ANSWERS_ARCHIVE`) so the data outlives the stores it was pulled from. Opt-in: no
+ * binding ⇒ a no-op. R2 only, on purpose — no D1 index; list the bucket.
+ *
+ *   <askId>-<title-slug>/about.json              once per ask: what it asked, as people saw it
+ *   <askId>-<title-slug>/<claimId>/answer.json   the Q&A record; re-written on a fold and on payment
+ *   <askId>-<title-slug>/<claimId>/claim.json    the claim body, verbatim (nothing dropped)
+ *   <askId>-<title-slug>/<claimId>/<n>-<name>    each attachment's bytes, unchanged, once
+ *
+ * One bucket per oracle and one network per oracle, so no network in the path. `askId` is the
+ * claim's scope id as the ledger holds it: a chain collection's id, or an API source's
+ * `api:<sourceId>:<protocolDid>`; no title ⇒ the folder is `<askId>` alone. The folder is fixed by
+ * the ask's FIRST archived claim: later claims find it by listing `<askId>` (one R2 list, no
+ * Blocksync), so a retitled ask keeps its folder.
+ *
+ * `about.json` reads the ask's own PUBLIC documents (the deed's `#pro`, `#done`, …) — never the
+ * rubric; the provider's `archive.describe` (oracle.ts) turns them into the people-facing view.
+ * `answer.json`'s `checks` are the frozen `ext`/`ai` facts, its `why` the engine's reason lines.
+ * Every object carries `customMetadata` (askId, title, kind, place, oracle; answeredAt and verdict
+ * on a claim's records), a few hundred bytes against R2's 2 KB cap.
+ *
+ * Called from INSIDE the step that holds the body (`evaluate`, the fold), after the decision row
+ * landed: the body and the attachment bytes go to R2 and nowhere else — never a step result, never
+ * a log field. FAIL-SOFT: an archive failure is `reportError` + one log line and never fails or
+ * retries the evaluation (a retry finds the decision row and returns before reaching here, so a
+ * claim whose archive failed stays un-archived; the decision is what matters).
+ */
+import type { ActFacts } from "../act.js";
+import type { ClaimLaneKind } from "../contracts/index.js";
+import type { OracleEnv } from "../env.js";
+import type { ArchiveHooks } from "../oracle.js";
+import type { ClaimContent, DecideResponse } from "./engine/types.js";
+import type { PullDeps, PulledClaim } from "./ixo/index.js";
+export interface ArchiveInput {
+    lane: ClaimLaneKind;
+    claim: PulledClaim;
+    /** The engine's `claimContent`: a chain claim's exact stored bytes, when the read verified them. */
+    content?: ClaimContent;
+    /** chain: the agent's address; api: the erasure-proof submitter digest (`ClaimSource`). */
+    submitter: string | null;
+    response: DecideResponse;
+    /** The frozen `ext`/`ai` facts the decision was made on — `answer.json`'s checks. */
+    facts: ActFacts | null;
+    /** `archive` from the provider's `defineOracle` (absent ⇒ the defaults). */
+    hooks?: ArchiveHooks;
+    /** The fold's reviewer — absent on the first decision. */
+    reviewerDid?: string;
+}
+type Env = Pick<OracleEnv, "ANSWERS_ARCHIVE">;
+export declare function archiveAnswer(env: Env, deps: PullDeps, input: ArchiveInput): Promise<void>;
+/**
+ * The act lane signed an approved verdict on chain: `answer.json` says `paid: yes`. Fail-soft like
+ * the rest, and a no-op for a claim the archive never wrote.
+ */
+export declare function archivePaid(env: Env, deps: Pick<PullDeps, "logger">, claim: {
+    claimId: string;
+    collectionId: string;
+}): Promise<void>;
+export declare function folderOf(askId: string, title: string | null): string;
+/** Lowercase ASCII and dashes, at most 60 characters. */
+export declare function slugOf(title: string): string;
+export {};
+//# sourceMappingURL=archive.d.ts.map

package/dist/lib/archive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive.d.ts","sourceRoot":"","sources":["../../src/lib/archive.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAGH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AACvC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAExC,OAAO,KAAK,EAAwC,YAAY,EAAE,MAAM,WAAW,CAAC;AACpF,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEnE,OAAO,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,OAAO,CAAC;AAanD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,aAAa,CAAC;IACpB,KAAK,EAAE,WAAW,CAAC;IACnB,oGAAoG;IACpG,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB,2FAA2F;IAC3F,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,cAAc,CAAC;IACzB,qFAAqF;IACrF,KAAK,EAAE,QAAQ,GAAG,IAAI,CAAC;IACvB,4EAA4E;IAC5E,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,0DAA0D;IAC1D,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,KAAK,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;AAE9C,wBAAsB,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAyBhG;AAKD;;;GAGG;AACH,wBAAsB,WAAW,CAC/B,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAC9B,KAAK,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAC/C,OAAO,CAAC,IAAI,CAAC,CAqBf;AAiCD,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAGpE;AAED,yDAAyD;AACzD,wBAAgB,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAS5C"}