@ixo/flow-work 0.5.0 → 0.7.0

package/dist/execution-service.js

@@ -0,0 +1,343 @@
+import { z } from 'zod';
+import { readBoundedRecord } from './bounded-codec.js';
+import { decodeDefinitionRecord, } from './bounded-definitions.js';
+import { bindingSchema, bounded, decodeBoundedJson, encodeBoundedJson, eventSchema, EVENT_TYPES, hash, parse, resultSchema, same, text, validateRequest, id, digest, operationIdentity, } from './bounded-protocol.js';
+export const workAuthorizationSchema = z.union([
+    z.object({ host: z.literal('builtin') }).strict(),
+    z
+        .object({ binding: bindingSchema, delegation: z.string().min(1).max(8192) })
+        .strict(),
+]);
+export const actionReferenceSchema = z
+    .object({
+    type: id,
+    can: id,
+    contractVersion: id,
+    contractDigest: digest,
+    manifestDigest: digest,
+})
+    .strict();
+const json = z.custom(() => true);
+const requestCodec = z.custom(() => true);
+/** Manager-side durable assign/ready/invoke/receipt state. No domain handler runs in this adapter. */
+export class HelperExecutionService {
+    options;
+    activePoll;
+    constructor(options) {
+        this.options = options;
+        options.storage.sql.exec(`CREATE TABLE IF NOT EXISTS helper_execution (
+      id TEXT PRIMARY KEY, flow_id TEXT NOT NULL, operation_id TEXT NOT NULL,
+      request TEXT NOT NULL, authorization TEXT NOT NULL, action_type TEXT NOT NULL,
+      capability TEXT NOT NULL, assign_event TEXT, ready_event TEXT, invoke_event TEXT,
+      result TEXT)`);
+        options.storage.sql.exec('CREATE INDEX IF NOT EXISTS helper_execution_operation ON helper_execution(flow_id,operation_id)');
+        options.storage.sql
+            .exec(`CREATE TABLE IF NOT EXISTS helper_execution_events (
+      event_id TEXT PRIMARY KEY, fingerprint TEXT NOT NULL, accepted INTEGER NOT NULL)`);
+    }
+    row(id) {
+        return this.options.storage.sql
+            .exec('SELECT * FROM helper_execution WHERE id=? LIMIT 1', id)
+            .toArray()[0];
+    }
+    async authorize(admission) {
+        const grant = await this.options.authority.authorizeExecution(admission.flowId, encodeBoundedJson(admission));
+        if (grant.stateVersion !== admission.stateVersion ||
+            grant.grantDigest !== admission.grantDigest ||
+            grant.expiresAt <= (this.options.now?.() ?? Date.now()))
+            throw new Error('EXECUTION_AUTHORITY_DENIED');
+    }
+    async submit(value) {
+        const request = await validateRequest(value);
+        const a = request.effect.admission;
+        const previous = this.row(a.id);
+        if (previous) {
+            const prior = parse(requestCodec, String(previous.request));
+            if (!same(prior.effect.admission, a) ||
+                !same(prior.inputs, request.inputs))
+                throw new Error('EXECUTION_REPLAY_CONFLICT');
+            return this.readback(request);
+        }
+        await this.authorize(a);
+        if (request.effect.state !== 'armed' ||
+            !request.effect.startEvent ||
+            !request.effect.owner ||
+            request.effect.expiresAt <= (this.options.now?.() ?? Date.now()))
+            throw new Error('ARMED_EFFECT_REQUIRED');
+        const definition = decodeDefinitionRecord(await this.options.definitions.readExecutionDefinition(a.flowId, a.id));
+        if (definition.category !== 'step' || definition.value.stepId !== a.stepId)
+            throw new Error('DEFINITION_STEP_MISMATCH');
+        const action = bounded(actionReferenceSchema, definition.value.action);
+        this.options.catalog.validate(action);
+        const metadata = this.options.catalog.describe(action.type, action.contractDigest, action.contractVersion);
+        if (metadata.safety !== a.safety)
+            throw new Error('EXECUTION_SAFETY_MISMATCH');
+        const authorization = workAuthorizationSchema.parse(decodeBoundedJson(await this.options.definitions.readExecutionAuthorization(a.flowId, a.id)));
+        if ('binding' in authorization) {
+            const b = authorization.binding;
+            if (metadata.host !== 'helper' ||
+                metadata.helperDid !== b.helperDid ||
+                metadata.helperMatrixId !== b.helperMatrixId ||
+                !same(b.admission, a) ||
+                b.actionType !== action.type ||
+                b.capability !== action.can ||
+                b.resource !== definition.value.resource)
+                throw new Error('WORK_AUTHORIZATION_MISMATCH');
+        }
+        else if (metadata.host !== 'builtin' || a.safety !== 'pure')
+            throw new Error('BUILTIN_PURE_ACTION_REQUIRED');
+        this.options.storage.transactionSync(() => {
+            const duplicate = this.row(a.id);
+            if (duplicate) {
+                if (duplicate.request !== text(request) ||
+                    duplicate.authorization !== text(authorization))
+                    throw new Error('EXECUTION_REPLAY_CONFLICT');
+                return;
+            }
+            const operation = this.options.storage.sql
+                .exec('SELECT authorization FROM helper_execution WHERE flow_id=? AND operation_id=? LIMIT 1', a.flowId, a.operationId)
+                .toArray()[0];
+            if (operation && 'binding' in authorization) {
+                const prior = parse(workAuthorizationSchema, String(operation.authorization));
+                if (!('binding' in prior) ||
+                    !same(operationIdentity(prior.binding), operationIdentity(authorization.binding)))
+                    throw new Error('OPERATION_IDENTITY_CONFLICT');
+            }
+            this.options.storage.sql.exec(`INSERT INTO helper_execution VALUES (?,?,?,?,?,?,?,NULL,NULL,NULL,NULL)`, a.id, a.flowId, a.operationId, text(request), text(authorization), action.type, action.can);
+        });
+        return this.advance(a.id);
+    }
+    async readback(value) {
+        const request = await validateRequest(value);
+        const a = request.effect.admission;
+        const row = this.row(a.id);
+        // A lost request that never reached this durable host has no evidence. Do not create new work here.
+        if (!row)
+            return { outcome: 'needs_verification' };
+        const prior = parse(requestCodec, String(row.request));
+        if (!same(prior.effect.admission, a) || !same(prior.inputs, request.inputs))
+            throw new Error('READBACK_BINDING_MISMATCH');
+        if (row.result)
+            return parse(resultSchema, String(row.result));
+        await this.poll();
+        return this.advance(a.id);
+    }
+    async advance(id) {
+        const row = this.row(id);
+        if (!row)
+            throw new Error('EXECUTION_NOT_FOUND');
+        if (row.result)
+            return parse(resultSchema, String(row.result));
+        const request = parse(requestCodec, String(row.request));
+        // Receipt recovery requires the immutable request and private transport, not a fresh execution grant.
+        // New work still requires current authority. An expired grant preserves uncertainty.
+        try {
+            await this.authorize(request.effect.admission);
+        }
+        catch {
+            return { outcome: 'needs_verification' };
+        }
+        const authorization = parse(workAuthorizationSchema, String(row.authorization));
+        if ('host' in authorization) {
+            const result = bounded(resultSchema, await this.options.builtin.execute(String(row.action_type), String(row.capability), request));
+            // Pure deterministic handlers may recompute after a crash; their durable result remains immutable.
+            if (result.outcome !== 'needs_verification')
+                this.saveResult(id, result);
+            return result;
+        }
+        const binding = authorization.binding;
+        if (binding.deadline <= (this.options.now?.() ?? Date.now()))
+            return { outcome: 'needs_verification' };
+        if (!row.assign_event) {
+            const eventId = await this.options.gateway.send({
+                transactionId: `assign:${binding.invocationId}:${binding.attempt}`,
+                roomId: binding.admission.roomId,
+                type: EVENT_TYPES.assign,
+                epoch: binding.admission.epoch,
+                content: {
+                    phase: 'assign',
+                    ...authorization,
+                },
+            });
+            this.options.storage.sql.exec('UPDATE helper_execution SET assign_event=? WHERE id=? AND assign_event IS NULL', eventId, id);
+        }
+        else if (row.ready_event && !row.invoke_event) {
+            const eventId = await this.options.gateway.send({
+                transactionId: `invoke:${binding.invocationId}:${binding.attempt}`,
+                roomId: binding.admission.roomId,
+                type: EVENT_TYPES.invoke,
+                epoch: binding.admission.epoch,
+                content: {
+                    phase: 'invoke',
+                    binding,
+                    requestEventId: String(row.ready_event),
+                    inputs: request.inputs,
+                },
+            });
+            this.options.storage.sql.exec('UPDATE helper_execution SET invoke_event=? WHERE id=? AND invoke_event IS NULL', eventId, id);
+        }
+        return { outcome: 'needs_verification' };
+    }
+    saveResult(id, result) {
+        const prior = this.row(id);
+        if (!prior || (prior.result !== null && prior.result !== text(result)))
+            throw new Error('RECEIPT_CONFLICT');
+        this.options.storage.sql.exec('UPDATE helper_execution SET result=? WHERE id=?', text(result), id);
+    }
+    async consume(event) {
+        const content = bounded(eventSchema, event.content);
+        if (content.phase !== 'ready' && content.phase !== 'receipt')
+            return;
+        const row = this.row(content.binding.admission.id);
+        if (!row)
+            throw new Error('UNRELATED_HELPER_EVENT');
+        const authorization = parse(workAuthorizationSchema, String(row.authorization));
+        if (!('binding' in authorization) ||
+            !same(authorization.binding, content.binding) ||
+            !event.encrypted ||
+            event.roomId !== content.binding.admission.roomId ||
+            event.sender !== content.binding.helperMatrixId ||
+            event.type !== EVENT_TYPES[content.phase])
+            throw new Error('HELPER_EVENT_AUTHORITY_DENIED');
+        this.options.storage.transactionSync(() => {
+            if (content.phase === 'ready') {
+                if (row.assign_event !== content.requestEventId ||
+                    (row.ready_event !== null && row.ready_event !== event.eventId))
+                    throw new Error('READY_RELATION_MISMATCH');
+                this.options.storage.sql.exec('UPDATE helper_execution SET ready_event=? WHERE id=?', event.eventId, String(row.id));
+            }
+            else {
+                if (row.invoke_event !== content.requestEventId)
+                    throw new Error('RECEIPT_RELATION_MISMATCH');
+                if (content.result.outcome !== 'needs_verification')
+                    this.saveResult(String(row.id), content.result);
+            }
+        });
+    }
+    async pollOnce() {
+        const page = await this.options.gateway.read();
+        for (const event of page.events) {
+            const fingerprint = await hash(event);
+            const old = this.options.storage.sql
+                .exec('SELECT fingerprint FROM helper_execution_events WHERE event_id=?', event.eventId)
+                .toArray()[0];
+            if (old && old.fingerprint !== fingerprint)
+                throw new Error('EVENT_REPLAY_CONFLICT');
+            if (!old) {
+                await this.consume(event);
+                this.options.storage.sql.exec('INSERT INTO helper_execution_events VALUES (?,?,1)', event.eventId, fingerprint);
+            }
+            await this.options.gateway.ack(event.eventId);
+        }
+    }
+    async poll() {
+        this.activePoll ??= this.pollOnce().finally(() => {
+            this.activePoll = undefined;
+        });
+        return this.activePoll;
+    }
+    /** Recover a bounded page. Every transition remains safe after a process restart. */
+    async recover(limit = 16) {
+        if (!Number.isSafeInteger(limit) || limit < 1 || limit > 32)
+            throw new Error('RECOVERY_LIMIT_INVALID');
+        await this.poll();
+        const rows = this.options.storage.sql
+            .exec('SELECT id FROM helper_execution WHERE result IS NULL ORDER BY id LIMIT ?', limit)
+            .toArray();
+        for (const row of rows)
+            await this.advance(String(row.id));
+    }
+    async done(value) {
+        const query = bounded(z.object({ flowId: id, commandId: id }).strict(), value);
+        const definition = decodeDefinitionRecord(await this.options.definitions.readExecutionDefinition(query.flowId, query.commandId));
+        if (definition.category !== 'step')
+            throw new Error('DEFINITION_STEP_REQUIRED');
+        const reference = bounded(actionReferenceSchema, definition.value.action);
+        this.options.catalog.validate(reference);
+        const bytes = await this.options.definitions.readProjection(query.flowId, query.commandId);
+        if (bytes === null)
+            return { done: false };
+        const projection = decodeBoundedJson(bytes);
+        if (!projection ||
+            typeof projection !== 'object' ||
+            Array.isArray(projection) ||
+            projection.id !== query.commandId ||
+            projection.flow_id !== query.flowId ||
+            projection.step_id !== definition.value.stepId)
+            throw new Error('PROJECTION_BINDING_MISMATCH');
+        if (projection.state !== 'succeeded')
+            return { done: false };
+        const result = bounded(z
+            .object({
+            outcome: z.literal('succeeded'),
+            outputDigest: digest,
+            outcomesDigest: digest,
+        })
+            .strict(), projection.result);
+        const outputBytes = await this.options.definitions.readExecutionOutput(query.flowId, query.commandId);
+        if (outputBytes === null)
+            return { done: false };
+        const output = decodeBoundedJson(outputBytes);
+        if ((await hash(output)) !== result.outputDigest ||
+            (await hash(result)) !== projection.result_digest)
+            throw new Error('PROJECTION_RECEIPT_MISMATCH');
+        return {
+            done: await this.options.catalog.done(reference, definition, {
+                ...projection,
+                result: { outcome: 'succeeded', output },
+            }),
+        };
+    }
+    /** Expose only on a private service binding or an authenticated Node server. */
+    async fetch(request) {
+        const path = new URL(request.url).pathname;
+        if (request.method !== 'POST' ||
+            ![
+                '/v1/execution/invoke',
+                '/v1/execution/readback',
+                '/v1/execution/describe',
+                '/v1/execution/done',
+                '/v1/execution/catalog',
+            ].includes(path))
+            return new Response(null, { status: 404 });
+        if (!request.body)
+            return new Response(null, { status: 400 });
+        try {
+            const payload = await readBoundedRecord(request.body);
+            let result;
+            if (path.endsWith('/catalog')) {
+                const query = bounded(z
+                    .object({
+                    cursor: z.number().int().safe().nonnegative().default(0),
+                })
+                    .strict(), payload);
+                result = this.options.catalog.page(query.cursor);
+            }
+            else if (path.endsWith('/describe')) {
+                const query = bounded(z
+                    .object({
+                    actionType: id,
+                    contractDigest: digest,
+                    contractVersion: id,
+                })
+                    .strict(), payload);
+                result = this.options.catalog.describe(query.actionType, query.contractDigest, query.contractVersion);
+            }
+            else if (path.endsWith('/done'))
+                result = await this.done(payload);
+            else
+                result = path.endsWith('/invoke')
+                    ? await this.submit(payload)
+                    : await this.readback(payload);
+            return new Response(encodeBoundedJson(result), { headers: { 'content-type': 'application/json' } });
+        }
+        catch {
+            // Transport rejection is deliberately distinct from a domain outcome.
+            return new Response('{"error":"EXECUTION_REQUEST_REJECTED"}', {
+                status: 409,
+                headers: { 'content-type': 'application/json' },
+            });
+        }
+    }
+}
+//# sourceMappingURL=execution-service.js.map

package/dist/execution-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-service.js","sourceRoot":"","sources":["../src/execution-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EACL,sBAAsB,GAEvB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,aAAa,EACb,OAAO,EACP,iBAAiB,EACjB,iBAAiB,EACjB,WAAW,EACX,WAAW,EACX,IAAI,EACJ,KAAK,EACL,YAAY,EACZ,IAAI,EACJ,IAAI,EACJ,eAAe,EACf,EAAE,EACF,MAAM,EACN,iBAAiB,GAMlB,MAAM,uBAAuB,CAAC;AAI/B,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC;IAC7C,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;IACjD,CAAC;SACE,MAAM,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;SAC3E,MAAM,EAAE;CACZ,CAAC,CAAC;AAgBH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,IAAI,EAAE,EAAE;IACR,GAAG,EAAE,EAAE;IACP,eAAe,EAAE,EAAE;IACnB,cAAc,EAAE,MAAM;IACtB,cAAc,EAAE,MAAM;CACvB,CAAC;KACD,MAAM,EAAE,CAAC;AAsCZ,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAc,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;AAC/C,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAmB,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;AAE5D,sGAAsG;AACtG,MAAM,OAAO,sBAAsB;IAGd;IAFX,UAAU,CAA4B;IAC9C,YACmB,OAQhB;QARgB,YAAO,GAAP,OAAO,CAQvB;QAED,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;;;;mBAIV,CAAC,CAAC;QACjB,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CACtB,iGAAiG,CAClG,CAAC;QACF,OAAO,CAAC,OAAO,CAAC,GAAG;aAChB,IAAI,CAAC;uFAC2E,CAAC,CAAC;IACvF,CAAC;IACO,GAAG,CAAC,EAAU;QACpB,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG;aAC5B,IAAI,CAAM,mDAAmD,EAAE,EAAE,CAAC;aAClE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACO,KAAK,CAAC,SAAS,CAAC,SAAoB;QAC1C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,kBAAkB,CAC3D,SAAS,CAAC,MAAM,EAChB,iBAAiB,CAAC,SAAmC,CAAC,CACvD,CAAC;QACF,IACE,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,YAAY;YAC7C,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,WAAW;YAC3C,KAAK,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YAEvD,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAClD,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,KAAc;QACzB,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChC,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,KAAK,CAAC,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YAC5D,IACE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;gBAChC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC;gBAEnC,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC/C,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAChC,CAAC;QACD,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACxB,IACE,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,OAAO;YAChC,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU;YAC1B,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK;YACrB,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YAEhE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC3C,MAAM,UAAU,GAAG,sBAAsB,CACvC,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,uBAAuB,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,CACvE,CAAC;QACF,IAAI,UAAU,CAAC,QAAQ,KAAK,MAAM,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;YACxE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,qBAAqB,EAAE,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACvE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAC5C,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,cAAc,EACrB,MAAM,CAAC,eAAe,CACvB,CAAC;QACF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;YAC9B,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,MAAM,aAAa,GAAG,uBAAuB,CAAC,KAAK,CACjD,iBAAiB,CACf,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,0BAA0B,CACvD,CAAC,CAAC,MAAM,EACR,CAAC,CAAC,EAAE,CACL,CACF,CACF,CAAC;QACF,IAAI,SAAS,IAAI,aAAa,EAAE,CAAC;YAC/B,MAAM,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC;YAChC,IACE,QAAQ,CAAC,IAAI,KAAK,QAAQ;gBAC1B,QAAQ,CAAC,SAAS,KAAK,CAAC,CAAC,SAAS;gBAClC,QAAQ,CAAC,cAAc,KAAK,CAAC,CAAC,cAAc;gBAC5C,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;gBACrB,CAAC,CAAC,UAAU,KAAK,MAAM,CAAC,IAAI;gBAC5B,CAAC,CAAC,UAAU,KAAK,MAAM,CAAC,GAAG;gBAC3B,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,KAAK,CAAC,QAAQ;gBAExC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACnD,CAAC;aAAM,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;YAC3D,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,EAAE;YACxC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACjC,IAAI,SAAS,EAAE,CAAC;gBACd,IACE,SAAS,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,CAAC;oBACnC,SAAS,CAAC,aAAa,KAAK,IAAI,CAAC,aAAa,CAAC;oBAE/C,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;gBAC/C,OAAO;YACT,CAAC;YACD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG;iBACvC,IAAI,CACH,uFAAuF,EACvF,CAAC,CAAC,MAAM,EACR,CAAC,CAAC,WAAW,CACd;iBACA,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;YAChB,IAAI,SAAS,IAAI,SAAS,IAAI,aAAa,EAAE,CAAC;gBAC5C,MAAM,KAAK,GAAG,KAAK,CACjB,uBAAuB,EACvB,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,CAChC,CAAC;gBACF,IACE,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC;oBACrB,CAAC,IAAI,CACH,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,EAChC,iBAAiB,CAAC,aAAa,CAAC,OAAO,CAAC,CACzC;oBAED,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YACnD,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAC3B,yEAAyE,EACzE,CAAC,CAAC,EAAE,EACJ,CAAC,CAAC,MAAM,EACR,CAAC,CAAC,WAAW,EACb,IAAI,CAAC,OAAO,CAAC,EACb,IAAI,CAAC,aAAa,CAAC,EACnB,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,GAAG,CACX,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5B,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,KAAc;QAC3B,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3B,oGAAoG;QACpG,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;QACnD,MAAM,KAAK,GAAG,KAAK,CAAC,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC;YACzE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,IAAI,GAAG,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/D,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5B,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,EAAU;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzB,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACjD,IAAI,GAAG,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,KAAK,CAAC,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QACzD,sGAAsG;QACtG,qFAAqF;QACrF,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;QAC3C,CAAC;QACD,MAAM,aAAa,GAAG,KAAK,CACzB,uBAAuB,EACvB,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAC1B,CAAC;QACF,IAAI,MAAM,IAAI,aAAa,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,OAAO,CACpB,YAAY,EACZ,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAChC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EACvB,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,EACtB,OAAO,CACR,CACF,CAAC;YACF,mGAAmG;YACnG,IAAI,MAAM,CAAC,OAAO,KAAK,oBAAoB;gBAAE,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YACzE,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC;QACtC,IAAI,OAAO,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YAC1D,OAAO,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;QAC3C,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;gBAC9C,aAAa,EAAE,UAAU,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,OAAO,EAAE;gBAClE,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM;gBAChC,IAAI,EAAE,WAAW,CAAC,MAAM;gBACxB,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK;gBAC9B,OAAO,EAAE;oBACP,KAAK,EAAE,QAAQ;oBACf,GAAG,aAAa;iBACS;aAC5B,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAC3B,gFAAgF,EAChF,OAAO,EACP,EAAE,CACH,CAAC;QACJ,CAAC;aAAM,IAAI,GAAG,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;YAChD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;gBAC9C,aAAa,EAAE,UAAU,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,OAAO,EAAE;gBAClE,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM;gBAChC,IAAI,EAAE,WAAW,CAAC,MAAM;gBACxB,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK;gBAC9B,OAAO,EAAE;oBACP,KAAK,EAAE,QAAQ;oBACf,OAAO;oBACP,cAAc,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC;oBACvC,MAAM,EAAE,OAAO,CAAC,MAAM;iBACG;aAC5B,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAC3B,gFAAgF,EAChF,OAAO,EACP,EAAE,CACH,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;IAC3C,CAAC;IACO,UAAU,CAAC,EAAU,EAAE,MAAuB;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3B,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC;YACpE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACtC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAC3B,iDAAiD,EACjD,IAAI,CAAC,MAAM,CAAC,EACZ,EAAE,CACH,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,KAAmB;QAC/B,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO;QACrE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACpD,MAAM,aAAa,GAAG,KAAK,CACzB,uBAAuB,EACvB,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAC1B,CAAC;QACF,IACE,CAAC,CAAC,SAAS,IAAI,aAAa,CAAC;YAC7B,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC;YAC7C,CAAC,KAAK,CAAC,SAAS;YAChB,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM;YACjD,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,cAAc;YAC/C,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;YAEzC,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,EAAE;YACxC,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;gBAC9B,IACE,GAAG,CAAC,YAAY,KAAK,OAAO,CAAC,cAAc;oBAC3C,CAAC,GAAG,CAAC,WAAW,KAAK,IAAI,IAAI,GAAG,CAAC,WAAW,KAAK,KAAK,CAAC,OAAO,CAAC;oBAE/D,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;gBAC7C,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAC3B,sDAAsD,EACtD,KAAK,CAAC,OAAO,EACb,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CACf,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAG,CAAC,YAAY,KAAK,OAAO,CAAC,cAAc;oBAC7C,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;gBAC/C,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,KAAK,oBAAoB;oBACjD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YACpD,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IACO,KAAK,CAAC,QAAQ;QACpB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAC/C,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC;YACtC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG;iBACjC,IAAI,CACH,kEAAkE,EAClE,KAAK,CAAC,OAAO,CACd;iBACA,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;YAChB,IAAI,GAAG,IAAI,GAAG,CAAC,WAAW,KAAK,WAAW;gBACxC,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC3C,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC1B,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAC3B,oDAAoD,EACpD,KAAK,CAAC,OAAO,EACb,WAAW,CACZ,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YAC/C,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC9B,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IACD,qFAAqF;IACrF,KAAK,CAAC,OAAO,CAAC,KAAK,GAAG,EAAE;QACtB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,EAAE;YACzD,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG;aAClC,IAAI,CACH,0EAA0E,EAC1E,KAAK,CACN;aACA,OAAO,EAAE,CAAC;QACb,KAAK,MAAM,GAAG,IAAI,IAAI;YAAE,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7D,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,KAAc;QACvB,MAAM,KAAK,GAAG,OAAO,CACnB,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAChD,KAAK,CACN,CAAC;QACF,MAAM,UAAU,GAAG,sBAAsB,CACvC,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,uBAAuB,CACpD,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,SAAS,CAChB,CACF,CAAC;QACF,IAAI,UAAU,CAAC,QAAQ,KAAK,MAAM;YAChC,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,qBAAqB,EAAE,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1E,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,cAAc,CACzD,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,SAAS,CAChB,CAAC;QACF,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QAC3C,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC5C,IACE,CAAC,UAAU;YACX,OAAO,UAAU,KAAK,QAAQ;YAC9B,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;YACzB,UAAU,CAAC,EAAE,KAAK,KAAK,CAAC,SAAS;YACjC,UAAU,CAAC,OAAO,KAAK,KAAK,CAAC,MAAM;YACnC,UAAU,CAAC,OAAO,KAAK,UAAU,CAAC,KAAK,CAAC,MAAM;YAE9C,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,IAAI,UAAU,CAAC,KAAK,KAAK,WAAW;YAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QAC7D,MAAM,MAAM,GAAG,OAAO,CACpB,CAAC;aACE,MAAM,CAAC;YACN,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;YAC/B,YAAY,EAAE,MAAM;YACpB,cAAc,EAAE,MAAM;SACvB,CAAC;aACD,MAAM,EAAE,EACX,UAAU,CAAC,MAAM,CAClB,CAAC;QACF,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,mBAAmB,CACpE,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,SAAS,CAChB,CAAC;QACF,IAAI,WAAW,KAAK,IAAI;YAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QACjD,MAAM,MAAM,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;QAC9C,IACE,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,MAAM,CAAC,YAAY;YAC5C,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,UAAU,CAAC,aAAa;YAEjD,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,OAAO;YACL,IAAI,EAAE,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE;gBAC3D,GAAG,UAAU;gBACb,MAAM,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE;aACzC,CAAC;SACH,CAAC;IACJ,CAAC;IACD,gFAAgF;IAChF,KAAK,CAAC,KAAK,CAAC,OAAgB;QAC1B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;QAC3C,IACE,OAAO,CAAC,MAAM,KAAK,MAAM;YACzB,CAAC;gBACC,sBAAsB;gBACtB,wBAAwB;gBACxB,wBAAwB;gBACxB,oBAAoB;gBACpB,uBAAuB;aACxB,CAAC,QAAQ,CAAC,IAAI,CAAC;YAEhB,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,CAAC,IAAI;YAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9D,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACtD,IAAI,MAAe,CAAC;YACpB,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC9B,MAAM,KAAK,GAAG,OAAO,CACnB,CAAC;qBACE,MAAM,CAAC;oBACN,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;iBACzD,CAAC;qBACD,MAAM,EAAE,EACX,OAAO,CACR,CAAC;gBACF,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACnD,CAAC;iBAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBACtC,MAAM,KAAK,GAAG,OAAO,CACnB,CAAC;qBACE,MAAM,CAAC;oBACN,UAAU,EAAE,EAAE;oBACd,cAAc,EAAE,MAAM;oBACtB,eAAe,EAAE,EAAE;iBACpB,CAAC;qBACD,MAAM,EAAE,EACX,OAAO,CACR,CAAC;gBACF,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CACpC,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,eAAe,CACtB,CAAC;YACJ,CAAC;iBAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;;gBAEnE,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;oBAC/B,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;oBAC5B,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACnC,OAAO,IAAI,QAAQ,CACjB,iBAAiB,CAAC,MAAgC,CAAa,EAC/D,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACpD,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,sEAAsE;YACtE,OAAO,IAAI,QAAQ,CAAC,wCAAwC,EAAE;gBAC5D,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;aAChD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}

package/dist/external-catalog.d.ts

@@ -0,0 +1,43 @@
+import { z } from 'zod';
+import { type BoundedJson } from './bounded-protocol.js';
+import type { PrivateBinding } from './gateway-client.js';
+import type { FlowWorkCapability } from './capability.js';
+export declare const externalContractSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"flow-work.external-contract">;
+    protocol: z.ZodLiteral<"bounded-v1">;
+    type: z.ZodString;
+    can: z.ZodString;
+    contractVersion: z.ZodString;
+    description: z.ZodString;
+    inputSchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    outputSchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    proof: z.ZodArray<z.ZodString>;
+    safety: z.ZodEnum<{
+        pure: "pure";
+        provider_idempotent: "provider_idempotent";
+        fenced: "fenced";
+        approval_only: "approval_only";
+    }>;
+    readback: z.ZodEnum<{
+        "provider-proof": "provider-proof";
+        "durable-receipt": "durable-receipt";
+        "pure-read": "pure-read";
+    }>;
+    completion: z.ZodEnum<{
+        never: "never";
+        proof: "proof";
+    }>;
+    events: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        fields: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>>;
+    contractDigest: z.ZodString;
+    manifestDigest: z.ZodString;
+}, z.core.$strict>;
+export type ExternalActionContract = z.infer<typeof externalContractSchema>;
+/** Generate a distinct contract from the real handler schemas. Never derive it from a neighboring Editor action. */
+export declare function externalContract(capability: FlowWorkCapability, policy: Pick<ExternalActionContract, 'contractVersion' | 'proof' | 'safety' | 'readback' | 'completion' | 'events'>): Promise<ExternalActionContract>;
+export declare function validateExternalContract(value: unknown): Promise<ExternalActionContract>;
+export declare function externalOutcomes(contract: ExternalActionContract, output: BoundedJson): BoundedJson;
+export declare function loadExternalContracts(binding: PrivateBinding): Promise<ExternalActionContract[]>;
+//# sourceMappingURL=external-catalog.d.ts.map

package/dist/external-catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-catalog.d.ts","sourceRoot":"","sources":["../src/external-catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAOL,KAAK,WAAW,EACjB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAqB1D,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAExB,CAAC;AACZ,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE5E,oHAAoH;AACpH,wBAAsB,gBAAgB,CACpC,UAAU,EAAE,kBAAkB,EAC9B,MAAM,EAAE,IAAI,CACV,sBAAsB,EACpB,iBAAiB,GACjB,OAAO,GACP,QAAQ,GACR,UAAU,GACV,YAAY,GACZ,QAAQ,CACX,GACA,OAAO,CAAC,sBAAsB,CAAC,CA+BjC;AACD,wBAAsB,wBAAwB,CAC5C,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,sBAAsB,CAAC,CAajC;AACD,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,sBAAsB,EAChC,MAAM,EAAE,WAAW,GAClB,WAAW,CAuBb;AACD,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAqCnC"}

package/dist/external-catalog.js

@@ -0,0 +1,121 @@
+import { z } from 'zod';
+import { bounded, hash, id, digest, encodeBoundedJson, readBoundedRecord, } from './bounded-protocol.js';
+const bodySchema = z
+    .object({
+    kind: z.literal('flow-work.external-contract'),
+    protocol: z.literal('bounded-v1'),
+    type: id,
+    can: id,
+    contractVersion: id,
+    description: z.string().max(4096),
+    inputSchema: z.record(z.string(), z.unknown()),
+    outputSchema: z.record(z.string(), z.unknown()),
+    proof: z.array(id).min(1).max(16),
+    safety: z.enum(['pure', 'fenced', 'approval_only', 'provider_idempotent']),
+    readback: z.enum(['provider-proof', 'durable-receipt', 'pure-read']),
+    completion: z.enum(['proof', 'never']),
+    events: z
+        .array(z.object({ name: id, fields: z.array(id).max(32) }).strict())
+        .max(16),
+})
+    .strict();
+export const externalContractSchema = bodySchema
+    .extend({ contractDigest: digest, manifestDigest: digest })
+    .strict();
+/** Generate a distinct contract from the real handler schemas. Never derive it from a neighboring Editor action. */
+export async function externalContract(capability, policy) {
+    if (!capability.outputSchema)
+        throw new Error('EXTERNAL_OUTPUT_SCHEMA_REQUIRED');
+    const body = bounded(bodySchema, {
+        kind: 'flow-work.external-contract',
+        protocol: 'bounded-v1',
+        type: capability.actionType,
+        can: capability.can,
+        description: capability.description,
+        inputSchema: z.toJSONSchema(capability.inputSchema, {
+            io: 'input',
+            unrepresentable: 'any',
+        }),
+        outputSchema: z.toJSONSchema(capability.outputSchema, {
+            io: 'output',
+            unrepresentable: 'any',
+        }),
+        ...policy,
+    });
+    const contractDigest = await hash(body);
+    // A single independently publishable capability has a one-entry external manifest.
+    const manifestDigest = await hash({
+        kind: 'flow-work.external-manifest',
+        protocol: 'bounded-v1',
+        contracts: [contractDigest],
+    });
+    return bounded(externalContractSchema, {
+        ...body,
+        contractDigest,
+        manifestDigest,
+    });
+}
+export async function validateExternalContract(value) {
+    const record = bounded(externalContractSchema, value);
+    const { contractDigest, manifestDigest, ...body } = record;
+    if ((await hash(body)) !== contractDigest ||
+        (await hash({
+            kind: 'flow-work.external-manifest',
+            protocol: 'bounded-v1',
+            contracts: [contractDigest],
+        })) !== manifestDigest)
+        throw new Error('EXTERNAL_CONTRACT_DIGEST_MISMATCH');
+    return record;
+}
+export function externalOutcomes(contract, output) {
+    if (!output || typeof output !== 'object' || Array.isArray(output))
+        throw new Error('EXTERNAL_OUTPUT_REQUIRED');
+    for (const field of contract.proof) {
+        const value = output[field];
+        if (value === null ||
+            value === undefined ||
+            value === '' ||
+            value === false)
+            throw new Error('EXTERNAL_PROOF_REQUIRED');
+    }
+    return contract.events.map((event) => ({
+        name: event.name,
+        payload: Object.fromEntries(event.fields.map((field) => {
+            if (!(field in output))
+                throw new Error('EXTERNAL_EVENT_FIELD_REQUIRED');
+            return [field, output[field]];
+        })),
+    }));
+}
+export async function loadExternalContracts(binding) {
+    const records = [];
+    let cursor = 0;
+    while (cursor !== null) {
+        if (records.length >= 32)
+            throw new Error('EXTERNAL_CATALOG_LIMIT');
+        const response = await binding.fetch('https://flow.internal/v1/execution/catalog', {
+            method: 'POST',
+            headers: { 'content-type': 'application/json' },
+            body: encodeBoundedJson({ cursor }),
+            signal: AbortSignal.timeout(25_000),
+        });
+        if (!response.ok || !response.body) {
+            await response.body?.cancel();
+            throw new Error('EXTERNAL_CATALOG_UNAVAILABLE');
+        }
+        const page = bounded(z
+            .object({
+            contract: externalContractSchema.nullable(),
+            nextCursor: z.number().int().safe().nonnegative().nullable(),
+        })
+            .strict(), await readBoundedRecord(response.body));
+        if (page.contract)
+            records.push(await validateExternalContract(page.contract));
+        if (page.nextCursor !== null &&
+            (page.nextCursor !== cursor + 1 || !page.contract))
+            throw new Error('EXTERNAL_CATALOG_CURSOR_INVALID');
+        cursor = page.nextCursor;
+    }
+    return records;
+}
+//# sourceMappingURL=external-catalog.js.map

package/dist/external-catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-catalog.js","sourceRoot":"","sources":["../src/external-catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,OAAO,EACP,IAAI,EACJ,EAAE,EACF,MAAM,EACN,iBAAiB,EACjB,iBAAiB,GAElB,MAAM,uBAAuB,CAAC;AAI/B,MAAM,UAAU,GAAG,CAAC;KACjB,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,6BAA6B,CAAC;IAC9C,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;IACjC,IAAI,EAAE,EAAE;IACR,GAAG,EAAE,EAAE;IACP,eAAe,EAAE,EAAE;IACnB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;IACjC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAC9C,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAC/C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACjC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,qBAAqB,CAAC,CAAC;IAC1E,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,WAAW,CAAC,CAAC;IACpE,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACtC,MAAM,EAAE,CAAC;SACN,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;SACnE,GAAG,CAAC,EAAE,CAAC;CACX,CAAC;KACD,MAAM,EAAE,CAAC;AACZ,MAAM,CAAC,MAAM,sBAAsB,GAAG,UAAU;KAC7C,MAAM,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;KAC1D,MAAM,EAAE,CAAC;AAGZ,oHAAoH;AACpH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,UAA8B,EAC9B,MAQC;IAED,IAAI,CAAC,UAAU,CAAC,YAAY;QAC1B,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,EAAE;QAC/B,IAAI,EAAE,6BAA6B;QACnC,QAAQ,EAAE,YAAY;QACtB,IAAI,EAAE,UAAU,CAAC,UAAU;QAC3B,GAAG,EAAE,UAAU,CAAC,GAAG;QACnB,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,WAAW,EAAE,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,WAAW,EAAE;YAClD,EAAE,EAAE,OAAO;YACX,eAAe,EAAE,KAAK;SACvB,CAAC;QACF,YAAY,EAAE,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,YAAY,EAAE;YACpD,EAAE,EAAE,QAAQ;YACZ,eAAe,EAAE,KAAK;SACvB,CAAC;QACF,GAAG,MAAM;KACV,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,mFAAmF;IACnF,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC;QAChC,IAAI,EAAE,6BAA6B;QACnC,QAAQ,EAAE,YAAY;QACtB,SAAS,EAAE,CAAC,cAAc,CAAC;KAC5B,CAAC,CAAC;IACH,OAAO,OAAO,CAAC,sBAAsB,EAAE;QACrC,GAAG,IAAI;QACP,cAAc;QACd,cAAc;KACf,CAAC,CAAC;AACL,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,KAAc;IAEd,MAAM,MAAM,GAAG,OAAO,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;IACtD,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;IAC3D,IACE,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,cAAc;QACrC,CAAC,MAAM,IAAI,CAAC;YACV,IAAI,EAAE,6BAA6B;YACnC,QAAQ,EAAE,YAAY;YACtB,SAAS,EAAE,CAAC,cAAc,CAAC;SAC5B,CAAC,CAAC,KAAK,cAAc;QAEtB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,MAAM,UAAU,gBAAgB,CAC9B,QAAgC,EAChC,MAAmB;IAEnB,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,IACE,KAAK,KAAK,IAAI;YACd,KAAK,KAAK,SAAS;YACnB,KAAK,KAAK,EAAE;YACZ,KAAK,KAAK,KAAK;YAEf,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACrC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,MAAM,CAAC,WAAW,CACzB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACzB,IAAI,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;YACnD,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAE,CAAC,CAAC;QACjC,CAAC,CAAC,CACH;KACF,CAAC,CAAC,CAAC;AACN,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAuB;IAEvB,MAAM,OAAO,GAA6B,EAAE,CAAC;IAC7C,IAAI,MAAM,GAAkB,CAAC,CAAC;IAC9B,OAAO,MAAM,KAAK,IAAI,EAAE,CAAC;QACvB,IAAI,OAAO,CAAC,MAAM,IAAI,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,CAClC,4CAA4C,EAC5C;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAa;YAC/C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CACF,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAClB,CAAC;aACE,MAAM,CAAC;YACN,QAAQ,EAAE,sBAAsB,CAAC,QAAQ,EAAE;YAC3C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;SAC7D,CAAC;aACD,MAAM,EAAE,EACX,MAAM,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,CACvC,CAAC;QACF,IAAI,IAAI,CAAC,QAAQ;YACf,OAAO,CAAC,IAAI,CAAC,MAAM,wBAAwB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC9D,IACE,IAAI,CAAC,UAAU,KAAK,IAAI;YACxB,CAAC,IAAI,CAAC,UAAU,KAAK,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;YAElD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;IAC3B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/gateway-client.d.ts

@@ -0,0 +1,30 @@
+import { type BoundedJson, type GatewayEvent } from './bounded-protocol.js';
+export interface PrivateBinding {
+    fetch(input: string | Request, init?: RequestInit): Promise<Response>;
+}
+export declare class GatewayClient {
+    private readonly binding;
+    readonly consumer: string;
+    constructor(binding: PrivateBinding, consumer: string);
+    call(path: string, body: unknown): Promise<BoundedJson>;
+    read(): Promise<{
+        events: GatewayEvent[];
+        hasMore: boolean;
+    }>;
+    ack(eventId: string): Promise<void>;
+    send(request: {
+        transactionId: string;
+        roomId: string;
+        type: string;
+        content: BoundedJson;
+        epoch: number;
+    }): Promise<string>;
+}
+/** Node hosts use a fixed configured service URL and a distinct private credential. */
+export declare class AuthenticatedServiceBinding implements PrivateBinding {
+    private readonly baseUrl;
+    private readonly credential;
+    constructor(baseUrl: string, credential: string);
+    fetch(input: string | Request, init?: RequestInit): Promise<Response>;
+}
+//# sourceMappingURL=gateway-client.d.ts.map

package/dist/gateway-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway-client.d.ts","sourceRoot":"","sources":["../src/gateway-client.ts"],"names":[],"mappings":"AAEA,OAAO,EAIL,KAAK,WAAW,EAChB,KAAK,YAAY,EAClB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CACvE;AAYD,qBAAa,aAAa;IAEtB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM;gBADR,OAAO,EAAE,cAAc,EAC/B,QAAQ,EAAE,MAAM;IAIrB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC;IA4BvD,IAAI,IAAI,OAAO,CAAC;QAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IAS7D,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMnC,IAAI,CAAC,OAAO,EAAE;QAClB,aAAa,EAAE,MAAM,CAAC;QACtB,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,WAAW,CAAC;QACrB,KAAK,EAAE,MAAM,CAAC;KACf,GAAG,OAAO,CAAC,MAAM,CAAC;CAOpB;AAED,uFAAuF;AACvF,qBAAa,2BAA4B,YAAW,cAAc;IAE9D,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,UAAU;gBADV,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM;IAiBrC,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC;CAWtE"}