@maiaos/node 0.1.0-canary.44938d4.manual.1

package/dist/runtime/process/resource/host-protocol.d.ts

@@ -0,0 +1,5 @@
+export { decodeProcessHostFrame, encodeProcessHostFrame, } from "./host-frame.js";
+export { decodeProcessHostMessage, encodeProcessHostMessage, makeProcessHostPreparedReceipt, } from "./host-message.js";
+export { PROCESS_HOST_FRAME_HEADER_BYTES, PROCESS_HOST_KNOWN_CAPABILITY_BITMAP, PROCESS_HOST_MAX_CONTROL_MESSAGES, PROCESS_HOST_MAX_DIAGNOSTIC_BYTES, PROCESS_HOST_MAX_PAYLOAD_BYTES, PROCESS_HOST_NONCE_BYTES, PROCESS_HOST_PROTOCOL_MAGIC, PROCESS_HOST_PROTOCOL_VERSION, processHostCapabilityBit, type ProcessHostCleanupProof, type ProcessHostFailureCode, type ProcessHostFailurePhase, type ProcessHostFrame, type ProcessHostLaunchPayload, type ProcessHostMessage, type ProcessHostMessageType, processHostMessageType, type ProcessHostMetricUnavailableReason, type ProcessHostMetricValue, ProcessHostProtocolError, type ProcessHostProtocolFailureReason, type ProcessHostResourceMetrics, type ProcessHostSignal, type ProcessHostSnapshotPayload, type ProcessHostTargetTriple, } from "./host-protocol-contract.js";
+export { ProcessHostProtocolSequence } from "./host-protocol-sequence.js";
+//# sourceMappingURL=host-protocol.d.ts.map

package/dist/runtime/process/resource/host-protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-protocol.d.ts","sourceRoot":"","sources":["../../../../src/runtime/process/resource/host-protocol.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,8BAA8B,GAC/B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,+BAA+B,EAC/B,oCAAoC,EACpC,iCAAiC,EACjC,iCAAiC,EACjC,8BAA8B,EAC9B,wBAAwB,EACxB,2BAA2B,EAC3B,6BAA6B,EAC7B,wBAAwB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,EACrB,KAAK,wBAAwB,EAC7B,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAC3B,sBAAsB,EACtB,KAAK,kCAAkC,EACvC,KAAK,sBAAsB,EAC3B,wBAAwB,EACxB,KAAK,gCAAgC,EACrC,KAAK,0BAA0B,EAC/B,KAAK,iBAAiB,EACtB,KAAK,0BAA0B,EAC/B,KAAK,uBAAuB,GAC7B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC"}

package/dist/runtime/process/resource/host-protocol.js

@@ -0,0 +1,5 @@
+export { decodeProcessHostFrame, encodeProcessHostFrame, } from "./host-frame.js";
+export { decodeProcessHostMessage, encodeProcessHostMessage, makeProcessHostPreparedReceipt, } from "./host-message.js";
+export { PROCESS_HOST_FRAME_HEADER_BYTES, PROCESS_HOST_KNOWN_CAPABILITY_BITMAP, PROCESS_HOST_MAX_CONTROL_MESSAGES, PROCESS_HOST_MAX_DIAGNOSTIC_BYTES, PROCESS_HOST_MAX_PAYLOAD_BYTES, PROCESS_HOST_NONCE_BYTES, PROCESS_HOST_PROTOCOL_MAGIC, PROCESS_HOST_PROTOCOL_VERSION, processHostCapabilityBit, processHostMessageType, ProcessHostProtocolError, } from "./host-protocol-contract.js";
+export { ProcessHostProtocolSequence } from "./host-protocol-sequence.js";
+//# sourceMappingURL=host-protocol.js.map

package/dist/runtime/process/resource/host-protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-protocol.js","sourceRoot":"","sources":["../../../../src/runtime/process/resource/host-protocol.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,8BAA8B,GAC/B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,+BAA+B,EAC/B,oCAAoC,EACpC,iCAAiC,EACjC,iCAAiC,EACjC,8BAA8B,EAC9B,wBAAwB,EACxB,2BAA2B,EAC3B,6BAA6B,EAC7B,wBAAwB,EAQxB,sBAAsB,EAGtB,wBAAwB,GAMzB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC"}

package/dist/runtime/process/resource/host-snapshot.d.ts

@@ -0,0 +1,11 @@
+import { ProcessHostPayloadReader } from "./host-frame.js";
+import { type ProcessHostResourceMetrics, type ProcessHostSnapshotPayload } from "./host-protocol-contract.js";
+export declare const PROCESS_HOST_SNAPSHOT_PAYLOAD_BYTES: number;
+export type ProcessHostSamplingMetrics = Pick<ProcessHostResourceMetrics, "cpuTimeMilliseconds" | "fileDescriptorCount" | "observedPeakRssBytes">;
+export declare const validateEncodedProcessHostSnapshotPayload: (payload: Buffer) => bigint;
+export declare const copyProcessHostSnapshotPayloadInto: (snapshot: ProcessHostSnapshotPayload, destination: Buffer, offset: number) => void;
+export declare const encodeProcessHostSnapshotPayload: (snapshot: ProcessHostSnapshotPayload) => Buffer;
+export declare const decodeProcessHostSnapshotPayload: (reader: ProcessHostPayloadReader, compact?: boolean) => ProcessHostSnapshotPayload;
+export declare const decodeStoredProcessHostSnapshotPayload: (payload: Buffer) => ProcessHostSnapshotPayload;
+export declare const decodeStoredHostSamplingMetrics: (payload: Buffer) => ProcessHostSamplingMetrics;
+//# sourceMappingURL=host-snapshot.d.ts.map

package/dist/runtime/process/resource/host-snapshot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-snapshot.d.ts","sourceRoot":"","sources":["../../../../src/runtime/process/resource/host-snapshot.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,wBAAwB,EAEzB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAKL,KAAK,0BAA0B,EAC/B,KAAK,0BAA0B,EAChC,MAAM,6BAA6B,CAAC;AAuDrC,eAAO,MAAM,mCAAmC,QAChB,CAAC;AAEjC,MAAM,MAAM,0BAA0B,GAAG,IAAI,CAC3C,0BAA0B,EAC1B,qBAAqB,GAAG,qBAAqB,GAAG,sBAAsB,CACvE,CAAC;AA4BF,eAAO,MAAM,yCAAyC,GACpD,SAAS,MAAM,KACd,MAqBF,CAAC;AAkJF,eAAO,MAAM,kCAAkC,GAC7C,UAAU,0BAA0B,EACpC,aAAa,MAAM,EACnB,QAAQ,MAAM,KACb,IAeF,CAAC;AAEF,eAAO,MAAM,gCAAgC,GAC3C,UAAU,0BAA0B,KACnC,MAIF,CAAC;AAmBF,eAAO,MAAM,gCAAgC,GAC3C,QAAQ,wBAAwB,EAChC,iBAAe,KACd,0BAkBF,CAAC;AAEF,eAAO,MAAM,sCAAsC,GACjD,SAAS,MAAM,KACd,0BAQF,CAAC;AAmBF,eAAO,MAAM,+BAA+B,GAC1C,SAAS,MAAM,KACd,0BAID,CAAC"}

package/dist/runtime/process/resource/host-snapshot.js

@@ -0,0 +1,239 @@
+import { failProcessHostProtocol, makeProcessHostEnumCodec, ProcessHostPayloadReader, processHostSafeNumber, } from "./host-frame.js";
+import { PROCESS_HOST_KNOWN_CAPABILITY_BITMAP, processHostCapabilityBit, } from "./host-protocol-contract.js";
+const SNAPSHOT_METRIC_BITMAP = 511n;
+const snapshotMetricBits = [1n, 2n, 4n, 8n, 16n, 32n, 64n, 128n, 256n];
+const metricUnavailableReasonCodec = makeProcessHostEnumCodec([
+    ["not_exposed", 1],
+    ["permission_denied", 2],
+    ["platform_unsupported", 3],
+    ["process_churn", 4],
+]);
+const snapshotFields = [
+    "cpuTimeMilliseconds",
+    "memoryBytes",
+    "rssBytes",
+    "observedPeakRssBytes",
+    "processCount",
+    "fileDescriptorCount",
+    "ioReadBytes",
+    "ioWriteBytes",
+    "wallTimeMilliseconds",
+];
+const targetMetricCapabilityBits = [
+    processHostCapabilityBit.targetCpuTimeMetric,
+    processHostCapabilityBit.targetMemoryMetric,
+    processHostCapabilityBit.targetRssMetric,
+    processHostCapabilityBit.targetObservedPeakRssMetric,
+    processHostCapabilityBit.targetProcessCountMetric,
+    processHostCapabilityBit.targetFileDescriptorMetric,
+    processHostCapabilityBit.targetIoReadMetric,
+    processHostCapabilityBit.targetIoWriteMetric,
+    processHostCapabilityBit.targetWallTimeMetric,
+];
+const hostMetricCapabilityBits = [
+    processHostCapabilityBit.hostCpuTimeMetric,
+    processHostCapabilityBit.hostMemoryMetric,
+    processHostCapabilityBit.hostRssMetric,
+    processHostCapabilityBit.hostObservedPeakRssMetric,
+    processHostCapabilityBit.hostProcessCountMetric,
+    processHostCapabilityBit.hostFileDescriptorMetric,
+    processHostCapabilityBit.hostIoReadMetric,
+    processHostCapabilityBit.hostIoWriteMetric,
+    processHostCapabilityBit.hostWallTimeMetric,
+];
+const SNAPSHOT_METRIC_VALUES_BYTES = snapshotMetricBits.length * 8;
+const SNAPSHOT_METRICS_BYTES = 8 + SNAPSHOT_METRIC_VALUES_BYTES;
+const HOST_METRICS_OFFSET = 8 + SNAPSHOT_METRICS_BYTES;
+const HOST_METRIC_VALUES_OFFSET = HOST_METRICS_OFFSET + 8;
+export const PROCESS_HOST_SNAPSHOT_PAYLOAD_BYTES = 8 + SNAPSHOT_METRICS_BYTES * 2;
+const validateEncodedSnapshotMetrics = (input) => {
+    const { capabilityBitmap, capabilityBits, offset, payload } = input;
+    const metricBitmap = payload.readBigUInt64BE(offset);
+    if ((metricBitmap & ~SNAPSHOT_METRIC_BITMAP) !== 0n) {
+        throw failProcessHostProtocol("message_invalid");
+    }
+    snapshotMetricBits.forEach((bit, index) => {
+        const available = (metricBitmap & bit) !== 0n;
+        const raw = payload.readBigUInt64BE(offset + 8 + index * 8);
+        if (!available) {
+            metricUnavailableReasonCodec.decode(processHostSafeNumber(raw));
+        }
+        else if ((capabilityBitmap & (capabilityBits[index] ?? 0n)) === 0n) {
+            throw failProcessHostProtocol("capability_invalid");
+        }
+    });
+};
+export const validateEncodedProcessHostSnapshotPayload = (payload) => {
+    if (payload.byteLength !== PROCESS_HOST_SNAPSHOT_PAYLOAD_BYTES) {
+        throw failProcessHostProtocol("message_invalid");
+    }
+    const capabilityBitmap = payload.readBigUInt64BE(0);
+    if ((capabilityBitmap & ~PROCESS_HOST_KNOWN_CAPABILITY_BITMAP) !== 0n) {
+        throw failProcessHostProtocol("message_invalid");
+    }
+    validateEncodedSnapshotMetrics({
+        capabilityBitmap,
+        capabilityBits: targetMetricCapabilityBits,
+        offset: 8,
+        payload,
+    });
+    validateEncodedSnapshotMetrics({
+        capabilityBitmap,
+        capabilityBits: hostMetricCapabilityBits,
+        offset: HOST_METRICS_OFFSET,
+        payload,
+    });
+    return capabilityBitmap;
+};
+const decodedSnapshotMetric = (raw, available) => available
+    ? { state: "available", value: raw }
+    : {
+        reason: metricUnavailableReasonCodec.decode(processHostSafeNumber(raw)),
+        state: "unavailable",
+    };
+class DecodedProcessHostResourceMetrics {
+    constructor(metricBitmap, values) {
+        Object.defineProperties(this, {
+            metricBitmap: { value: metricBitmap },
+            values: { value: values },
+        });
+    }
+    get cpuTimeMilliseconds() {
+        return this.metric(0);
+    }
+    get fileDescriptorCount() {
+        return this.metric(5);
+    }
+    get ioReadBytes() {
+        return this.metric(6);
+    }
+    get ioWriteBytes() {
+        return this.metric(7);
+    }
+    get memoryBytes() {
+        return this.metric(1);
+    }
+    get observedPeakRssBytes() {
+        return this.metric(3);
+    }
+    get processCount() {
+        return this.metric(4);
+    }
+    get rssBytes() {
+        return this.metric(2);
+    }
+    get wallTimeMilliseconds() {
+        return this.metric(8);
+    }
+    matchesCapability(capabilityBitmap, bits) {
+        return snapshotMetricBits.every((bit, index) => (this.metricBitmap & bit) === 0n ||
+            (capabilityBitmap & (bits[index] ?? 0n)) !== 0n);
+    }
+    writeInto(destination, offset) {
+        destination.writeBigUInt64BE(this.metricBitmap, offset);
+        this.values.copy(destination, offset + 8);
+    }
+    metric(index) {
+        return decodedSnapshotMetric(this.values.readBigUInt64BE(index * 8), (this.metricBitmap & (snapshotMetricBits[index] ?? 0n)) !== 0n);
+    }
+}
+const metricsMatchCapability = (metrics, capabilityBitmap, bits) => {
+    if (metrics instanceof DecodedProcessHostResourceMetrics) {
+        return metrics.matchesCapability(capabilityBitmap, bits);
+    }
+    return snapshotFields.every((field, index) => metrics[field].state === "unavailable" ||
+        (capabilityBitmap & (bits[index] ?? 0n)) !== 0n);
+};
+const materializeDecodedMetrics = (metrics) => ({
+    cpuTimeMilliseconds: metrics.cpuTimeMilliseconds,
+    fileDescriptorCount: metrics.fileDescriptorCount,
+    ioReadBytes: metrics.ioReadBytes,
+    ioWriteBytes: metrics.ioWriteBytes,
+    memoryBytes: metrics.memoryBytes,
+    observedPeakRssBytes: metrics.observedPeakRssBytes,
+    processCount: metrics.processCount,
+    rssBytes: metrics.rssBytes,
+    wallTimeMilliseconds: metrics.wallTimeMilliseconds,
+});
+const writeSnapshotMetricsInto = (destination, offset, metrics) => {
+    if (metrics instanceof DecodedProcessHostResourceMetrics) {
+        metrics.writeInto(destination, offset);
+        return;
+    }
+    const metricBitmap = snapshotFields.reduce((bitmap, field, index) => metrics[field].state === "unavailable"
+        ? bitmap
+        : bitmap | (1n << BigInt(index)), 0n);
+    destination.writeBigUInt64BE(metricBitmap, offset);
+    snapshotFields.forEach((field) => {
+        const metric = metrics[field];
+        destination.writeBigUInt64BE(metric.state === "available"
+            ? metric.value
+            : BigInt(metricUnavailableReasonCodec.encode(metric.reason)), offset + 8 + snapshotFields.indexOf(field) * 8);
+    });
+};
+const validSnapshotPayload = (snapshot) => (snapshot.capabilityBitmap & ~PROCESS_HOST_KNOWN_CAPABILITY_BITMAP) === 0n &&
+    metricsMatchCapability(snapshot.target, snapshot.capabilityBitmap, targetMetricCapabilityBits) &&
+    metricsMatchCapability(snapshot.host, snapshot.capabilityBitmap, hostMetricCapabilityBits);
+export const copyProcessHostSnapshotPayloadInto = (snapshot, destination, offset) => {
+    if (offset < 0 ||
+        offset + PROCESS_HOST_SNAPSHOT_PAYLOAD_BYTES > destination.byteLength ||
+        !validSnapshotPayload(snapshot)) {
+        throw failProcessHostProtocol("message_invalid");
+    }
+    destination.writeBigUInt64BE(snapshot.capabilityBitmap, offset);
+    writeSnapshotMetricsInto(destination, offset + 8, snapshot.target);
+    writeSnapshotMetricsInto(destination, offset + HOST_METRICS_OFFSET, snapshot.host);
+};
+export const encodeProcessHostSnapshotPayload = (snapshot) => {
+    const destination = Buffer.allocUnsafe(PROCESS_HOST_SNAPSHOT_PAYLOAD_BYTES);
+    copyProcessHostSnapshotPayloadInto(snapshot, destination, 0);
+    return destination;
+};
+const readSnapshotMetrics = (reader, compact) => {
+    const metricBitmap = reader.u64();
+    if ((metricBitmap & ~SNAPSHOT_METRIC_BITMAP) !== 0n) {
+        throw failProcessHostProtocol("message_invalid");
+    }
+    const decoded = new DecodedProcessHostResourceMetrics(metricBitmap, compact
+        ? reader.ownedBytesView(SNAPSHOT_METRIC_VALUES_BYTES)
+        : reader.bytes(SNAPSHOT_METRIC_VALUES_BYTES));
+    return compact ? decoded : materializeDecodedMetrics(decoded);
+};
+export const decodeProcessHostSnapshotPayload = (reader, compact = false) => {
+    const capabilityBitmap = reader.u64();
+    if ((capabilityBitmap & ~PROCESS_HOST_KNOWN_CAPABILITY_BITMAP) !== 0n) {
+        throw failProcessHostProtocol("message_invalid");
+    }
+    const target = readSnapshotMetrics(reader, compact);
+    const host = readSnapshotMetrics(reader, compact);
+    if (!metricsMatchCapability(target, capabilityBitmap, targetMetricCapabilityBits) ||
+        !metricsMatchCapability(host, capabilityBitmap, hostMetricCapabilityBits)) {
+        throw failProcessHostProtocol("capability_invalid");
+    }
+    return { capabilityBitmap, host, target };
+};
+export const decodeStoredProcessHostSnapshotPayload = (payload) => {
+    if (payload.byteLength !== PROCESS_HOST_SNAPSHOT_PAYLOAD_BYTES) {
+        throw failProcessHostProtocol("message_invalid");
+    }
+    const reader = new ProcessHostPayloadReader(payload);
+    const snapshot = decodeProcessHostSnapshotPayload(reader);
+    reader.finish();
+    return snapshot;
+};
+const storedHostMetric = (payload, index) => {
+    if (payload.byteLength !== PROCESS_HOST_SNAPSHOT_PAYLOAD_BYTES) {
+        throw failProcessHostProtocol("message_invalid");
+    }
+    const bitmap = payload.readBigUInt64BE(HOST_METRICS_OFFSET);
+    if ((bitmap & ~SNAPSHOT_METRIC_BITMAP) !== 0n) {
+        throw failProcessHostProtocol("message_invalid");
+    }
+    return decodedSnapshotMetric(payload.readBigUInt64BE(HOST_METRIC_VALUES_OFFSET + index * 8), (bitmap & (snapshotMetricBits[index] ?? 0n)) !== 0n);
+};
+export const decodeStoredHostSamplingMetrics = (payload) => ({
+    cpuTimeMilliseconds: storedHostMetric(payload, 0),
+    fileDescriptorCount: storedHostMetric(payload, 5),
+    observedPeakRssBytes: storedHostMetric(payload, 3),
+});
+//# sourceMappingURL=host-snapshot.js.map

package/dist/runtime/process/resource/host-snapshot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-snapshot.js","sourceRoot":"","sources":["../../../../src/runtime/process/resource/host-snapshot.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,oCAAoC,EACpC,wBAAwB,GAKzB,MAAM,6BAA6B,CAAC;AAErC,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAEpC,MAAM,kBAAkB,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAU,CAAC;AAEhF,MAAM,4BAA4B,GAChC,wBAAwB,CAAqC;IAC3D,CAAC,aAAa,EAAE,CAAC,CAAC;IAClB,CAAC,mBAAmB,EAAE,CAAC,CAAC;IACxB,CAAC,sBAAsB,EAAE,CAAC,CAAC;IAC3B,CAAC,eAAe,EAAE,CAAC,CAAC;CACrB,CAAC,CAAC;AAEL,MAAM,cAAc,GAAG;IACrB,qBAAqB;IACrB,aAAa;IACb,UAAU;IACV,sBAAsB;IACtB,cAAc;IACd,qBAAqB;IACrB,aAAa;IACb,cAAc;IACd,sBAAsB;CAC0C,CAAC;AAEnE,MAAM,0BAA0B,GAAG;IACjC,wBAAwB,CAAC,mBAAmB;IAC5C,wBAAwB,CAAC,kBAAkB;IAC3C,wBAAwB,CAAC,eAAe;IACxC,wBAAwB,CAAC,2BAA2B;IACpD,wBAAwB,CAAC,wBAAwB;IACjD,wBAAwB,CAAC,0BAA0B;IACnD,wBAAwB,CAAC,kBAAkB;IAC3C,wBAAwB,CAAC,mBAAmB;IAC5C,wBAAwB,CAAC,oBAAoB;CACrC,CAAC;AAEX,MAAM,wBAAwB,GAAG;IAC/B,wBAAwB,CAAC,iBAAiB;IAC1C,wBAAwB,CAAC,gBAAgB;IACzC,wBAAwB,CAAC,aAAa;IACtC,wBAAwB,CAAC,yBAAyB;IAClD,wBAAwB,CAAC,sBAAsB;IAC/C,wBAAwB,CAAC,wBAAwB;IACjD,wBAAwB,CAAC,gBAAgB;IACzC,wBAAwB,CAAC,iBAAiB;IAC1C,wBAAwB,CAAC,kBAAkB;CACnC,CAAC;AAEX,MAAM,4BAA4B,GAAG,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC;AACnE,MAAM,sBAAsB,GAAG,CAAC,GAAG,4BAA4B,CAAC;AAChE,MAAM,mBAAmB,GAAG,CAAC,GAAG,sBAAsB,CAAC;AACvD,MAAM,yBAAyB,GAAG,mBAAmB,GAAG,CAAC,CAAC;AAE1D,MAAM,CAAC,MAAM,mCAAmC,GAC9C,CAAC,GAAG,sBAAsB,GAAG,CAAC,CAAC;AAcjC,MAAM,8BAA8B,GAAG,CACrC,KAA+B,EACzB,EAAE;IACR,MAAM,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IACpE,MAAM,YAAY,GAAG,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACrD,IAAI,CAAC,YAAY,GAAG,CAAC,sBAAsB,CAAC,KAAK,EAAE,EAAE,CAAC;QACpD,MAAM,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;IACnD,CAAC;IACD,kBAAkB,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;QACxC,MAAM,SAAS,GAAG,CAAC,YAAY,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC;QAC9C,MAAM,GAAG,GAAG,OAAO,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,4BAA4B,CAAC,MAAM,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC;QAClE,CAAC;aAAM,IAAI,CAAC,gBAAgB,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YACrE,MAAM,uBAAuB,CAAC,oBAAoB,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,yCAAyC,GAAG,CACvD,OAAe,EACP,EAAE;IACV,IAAI,OAAO,CAAC,UAAU,KAAK,mCAAmC,EAAE,CAAC;QAC/D,MAAM,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACpD,IAAI,CAAC,gBAAgB,GAAG,CAAC,oCAAoC,CAAC,KAAK,EAAE,EAAE,CAAC;QACtE,MAAM,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;IACnD,CAAC;IACD,8BAA8B,CAAC;QAC7B,gBAAgB;QAChB,cAAc,EAAE,0BAA0B;QAC1C,MAAM,EAAE,CAAC;QACT,OAAO;KACR,CAAC,CAAC;IACH,8BAA8B,CAAC;QAC7B,gBAAgB;QAChB,cAAc,EAAE,wBAAwB;QACxC,MAAM,EAAE,mBAAmB;QAC3B,OAAO;KACR,CAAC,CAAC;IACH,OAAO,gBAAgB,CAAC;AAC1B,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAC5B,GAAW,EACX,SAAkB,EACM,EAAE,CAC1B,SAAS;IACP,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE;IACpC,CAAC,CAAC;QACE,MAAM,EAAE,4BAA4B,CAAC,MAAM,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;QACvE,KAAK,EAAE,aAAa;KACrB,CAAC;AAER,MAAM,iCAAiC;IAIrC,YAAY,YAAoB,EAAE,MAAc;QAC9C,MAAM,CAAC,gBAAgB,CAAC,IAAI,EAAE;YAC5B,YAAY,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE;YACrC,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,IAAI,mBAAmB;QACrB,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IACD,IAAI,mBAAmB;QACrB,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IACD,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IACD,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IACD,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IACD,IAAI,oBAAoB;QACtB,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IACD,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IACD,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IACD,IAAI,oBAAoB;QACtB,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IAED,iBAAiB,CACf,gBAAwB,EACxB,IAAuB;QAEvB,OAAO,kBAAkB,CAAC,KAAK,CAC7B,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CACb,CAAC,IAAI,CAAC,YAAY,GAAG,GAAG,CAAC,KAAK,EAAE;YAChC,CAAC,gBAAgB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,CAClD,CAAC;IACJ,CAAC;IAED,SAAS,CAAC,WAAmB,EAAE,MAAc;QAC3C,WAAW,CAAC,gBAAgB,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC;IAC5C,CAAC;IAEO,MAAM,CAAC,KAAa;QAC1B,OAAO,qBAAqB,CAC1B,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,GAAG,CAAC,CAAC,EACtC,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,CAC/D,CAAC;IACJ,CAAC;CACF;AAED,MAAM,sBAAsB,GAAG,CAC7B,OAAmC,EACnC,gBAAwB,EACxB,IAAuB,EACd,EAAE;IACX,IAAI,OAAO,YAAY,iCAAiC,EAAE,CAAC;QACzD,OAAO,OAAO,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,cAAc,CAAC,KAAK,CACzB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CACf,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,KAAK,aAAa;QACtC,CAAC,gBAAgB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,CAClD,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,yBAAyB,GAAG,CAChC,OAA0C,EACd,EAAE,CAAC,CAAC;IAChC,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;IAChD,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;IAChD,WAAW,EAAE,OAAO,CAAC,WAAW;IAChC,YAAY,EAAE,OAAO,CAAC,YAAY;IAClC,WAAW,EAAE,OAAO,CAAC,WAAW;IAChC,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;IAClD,YAAY,EAAE,OAAO,CAAC,YAAY;IAClC,QAAQ,EAAE,OAAO,CAAC,QAAQ;IAC1B,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;CACnD,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG,CAC/B,WAAmB,EACnB,MAAc,EACd,OAAmC,EAC7B,EAAE;IACR,IAAI,OAAO,YAAY,iCAAiC,EAAE,CAAC;QACzD,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACvC,OAAO;IACT,CAAC;IACD,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,CACxC,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CACvB,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,KAAK,aAAa;QACpC,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EACpC,EAAE,CACH,CAAC;IACF,WAAW,CAAC,gBAAgB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACnD,cAAc,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9B,WAAW,CAAC,gBAAgB,CAC1B,MAAM,CAAC,KAAK,KAAK,WAAW;YAC1B,CAAC,CAAC,MAAM,CAAC,KAAK;YACd,CAAC,CAAC,MAAM,CAAC,4BAA4B,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAC9D,MAAM,GAAG,CAAC,GAAG,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAC/C,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAAC,QAAoC,EAAW,EAAE,CAC7E,CAAC,QAAQ,CAAC,gBAAgB,GAAG,CAAC,oCAAoC,CAAC,KAAK,EAAE;IAC1E,sBAAsB,CACpB,QAAQ,CAAC,MAAM,EACf,QAAQ,CAAC,gBAAgB,EACzB,0BAA0B,CAC3B;IACD,sBAAsB,CACpB,QAAQ,CAAC,IAAI,EACb,QAAQ,CAAC,gBAAgB,EACzB,wBAAwB,CACzB,CAAC;AAEJ,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAChD,QAAoC,EACpC,WAAmB,EACnB,MAAc,EACR,EAAE;IACR,IACE,MAAM,GAAG,CAAC;QACV,MAAM,GAAG,mCAAmC,GAAG,WAAW,CAAC,UAAU;QACrE,CAAC,oBAAoB,CAAC,QAAQ,CAAC,EAC/B,CAAC;QACD,MAAM,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;IACnD,CAAC;IACD,WAAW,CAAC,gBAAgB,CAAC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;IAChE,wBAAwB,CAAC,WAAW,EAAE,MAAM,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACnE,wBAAwB,CACtB,WAAW,EACX,MAAM,GAAG,mBAAmB,EAC5B,QAAQ,CAAC,IAAI,CACd,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAC9C,QAAoC,EAC5B,EAAE;IACV,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC,mCAAmC,CAAC,CAAC;IAC5E,kCAAkC,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;IAC7D,OAAO,WAAW,CAAC;AACrB,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAC1B,MAAgC,EAChC,OAAgB,EACY,EAAE;IAC9B,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC;IAClC,IAAI,CAAC,YAAY,GAAG,CAAC,sBAAsB,CAAC,KAAK,EAAE,EAAE,CAAC;QACpD,MAAM,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,iCAAiC,CACnD,YAAY,EACZ,OAAO;QACL,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,4BAA4B,CAAC;QACrD,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAC/C,CAAC;IACF,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC;AAChE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAC9C,MAAgC,EAChC,OAAO,GAAG,KAAK,EACa,EAAE;IAC9B,MAAM,gBAAgB,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC;IACtC,IAAI,CAAC,gBAAgB,GAAG,CAAC,oCAAoC,CAAC,KAAK,EAAE,EAAE,CAAC;QACtE,MAAM,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClD,IACE,CAAC,sBAAsB,CACrB,MAAM,EACN,gBAAgB,EAChB,0BAA0B,CAC3B;QACD,CAAC,sBAAsB,CAAC,IAAI,EAAE,gBAAgB,EAAE,wBAAwB,CAAC,EACzE,CAAC;QACD,MAAM,uBAAuB,CAAC,oBAAoB,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC5C,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,sCAAsC,GAAG,CACpD,OAAe,EACa,EAAE;IAC9B,IAAI,OAAO,CAAC,UAAU,KAAK,mCAAmC,EAAE,CAAC;QAC/D,MAAM,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,wBAAwB,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,gCAAgC,CAAC,MAAM,CAAC,CAAC;IAC1D,MAAM,CAAC,MAAM,EAAE,CAAC;IAChB,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,CACvB,OAAe,EACf,KAAa,EACW,EAAE;IAC1B,IAAI,OAAO,CAAC,UAAU,KAAK,mCAAmC,EAAE,CAAC;QAC/D,MAAM,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,mBAAmB,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,GAAG,CAAC,sBAAsB,CAAC,KAAK,EAAE,EAAE,CAAC;QAC9C,MAAM,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,qBAAqB,CAC1B,OAAO,CAAC,eAAe,CAAC,yBAAyB,GAAG,KAAK,GAAG,CAAC,CAAC,EAC9D,CAAC,MAAM,GAAG,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,CACpD,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAC7C,OAAe,EACa,EAAE,CAAC,CAAC;IAChC,mBAAmB,EAAE,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC;IACjD,mBAAmB,EAAE,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC;IACjD,oBAAoB,EAAE,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC;CACnD,CAAC,CAAC"}

package/dist/runtime/process/resource/integration-authorization/authorization-store.d.ts

@@ -0,0 +1,48 @@
+import type { DatabaseSync } from "node:sqlite";
+import { type AuthorizationProjection, type CodexPolicyRevisionSnapshot, type CommandInput, type ReplayResult } from "./types.js";
+type ApplyInput = CommandInput & {
+    readonly onNewResult?: (result: ApplyAuthorizationResult) => void;
+    readonly planId: string;
+    readonly policy: CodexPolicyRevisionSnapshot;
+};
+type BeginRevocationInput = CommandInput & {
+    readonly onNewResult?: (result: BeginRevocationResult) => void;
+};
+type SettleRevocationInput = CommandInput & {
+    readonly outcome: "cleanup_unknown" | "revoked";
+};
+type ApplyAuthorizationResult = {
+    readonly authorization: AuthorizationProjection;
+    readonly method: "integration.apply.codex";
+    readonly recordedAt: string;
+};
+type BeginRevocationResult = {
+    readonly authorization: AuthorizationProjection;
+    readonly invalidatedIssuedPermits: number;
+    readonly method: "integration.remove.codex";
+    readonly recordedAt: string;
+};
+export declare const applyCodexIntegrationAuthorization: (database: DatabaseSync, input: ApplyInput) => ReplayResult<{
+    readonly authorization: AuthorizationProjection;
+    readonly method: "integration.apply.codex";
+    readonly recordedAt: string;
+}>;
+export declare const beginCodexIntegrationRevocation: (database: DatabaseSync, input: BeginRevocationInput) => ReplayResult<{
+    readonly authorization: AuthorizationProjection;
+    readonly invalidatedIssuedPermits: number;
+    readonly method: "integration.remove.codex";
+    readonly recordedAt: string;
+}>;
+export declare const settleCodexIntegrationRevocation: (database: DatabaseSync, input: SettleRevocationInput) => ReplayResult<{
+    readonly authorization: AuthorizationProjection;
+    readonly method: "integration.remove.settle.codex";
+    readonly recordedAt: string;
+    readonly remainingUnsettledPermits: number;
+}>;
+export declare const showCodexIntegrationAuthorization: (database: DatabaseSync) => undefined | {
+    readonly activeUnsettledPermits: number;
+    readonly authorization: AuthorizationProjection;
+    readonly revokingUnsettledPermits: number;
+};
+export {};
+//# sourceMappingURL=authorization-store.d.ts.map

package/dist/runtime/process/resource/integration-authorization/authorization-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization-store.d.ts","sourceRoot":"","sources":["../../../../../src/runtime/process/resource/integration-authorization/authorization-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAoBhD,OAAO,EACL,KAAK,uBAAuB,EAG5B,KAAK,2BAA2B,EAChC,KAAK,YAAY,EAEjB,KAAK,YAAY,EAClB,MAAM,YAAY,CAAC;AAEpB,KAAK,UAAU,GAAG,YAAY,GAAG;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,wBAAwB,KAAK,IAAI,CAAC;IAClE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,2BAA2B,CAAC;CAC9C,CAAC;AAEF,KAAK,oBAAoB,GAAG,YAAY,GAAG;IACzC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,qBAAqB,KAAK,IAAI,CAAC;CAChE,CAAC;AAEF,KAAK,qBAAqB,GAAG,YAAY,GAAG;IAC1C,QAAQ,CAAC,OAAO,EAAE,iBAAiB,GAAG,SAAS,CAAC;CACjD,CAAC;AAEF,KAAK,wBAAwB,GAAG;IAC9B,QAAQ,CAAC,aAAa,EAAE,uBAAuB,CAAC;IAChD,QAAQ,CAAC,MAAM,EAAE,yBAAyB,CAAC;IAC3C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEF,KAAK,qBAAqB,GAAG;IAC3B,QAAQ,CAAC,aAAa,EAAE,uBAAuB,CAAC;IAChD,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;IAC5C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,CAAC;AA8SF,eAAO,MAAM,kCAAkC,GAC7C,UAAU,YAAY,EACtB,OAAO,UAAU,KAChB,YAAY,CAAC;IACd,QAAQ,CAAC,aAAa,EAAE,uBAAuB,CAAC;IAChD,QAAQ,CAAC,MAAM,EAAE,yBAAyB,CAAC;IAC3C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,CAQE,CAAC;AAiHJ,eAAO,MAAM,+BAA+B,GAC1C,UAAU,YAAY,EACtB,OAAO,oBAAoB,KAC1B,YAAY,CAAC;IACd,QAAQ,CAAC,aAAa,EAAE,uBAAuB,CAAC;IAChD,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;IAC5C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,CAQE,CAAC;AA0IJ,eAAO,MAAM,gCAAgC,GAC3C,UAAU,YAAY,EACtB,OAAO,qBAAqB,KAC3B,YAAY,CAAC;IACd,QAAQ,CAAC,aAAa,EAAE,uBAAuB,CAAC;IAChD,QAAQ,CAAC,MAAM,EAAE,iCAAiC,CAAC;IACnD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAC;CAC5C,CAKE,CAAC;AAEJ,eAAO,MAAM,iCAAiC,GAC5C,UAAU,YAAY,KAEpB,SAAS,GACT;IACE,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,aAAa,EAAE,uBAAuB,CAAC;IAChD,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;CAgB/C,CAAC"}

package/dist/runtime/process/resource/integration-authorization/authorization-store.js

@@ -0,0 +1,269 @@
+import { makeNodeRuntimeError } from "../../../errors.js";
+import { activeAuthorization, countUnsettledPermits, latestAuthorization, maxPermitLifecycleTimestampMs, readPlan, } from "./database.js";
+import { compactTerminalPermits } from "./permit-compaction-store.js";
+import { parseNodeClockRecordedAtMs, requireBoundedIdentifier, requireBoundedRevision, requireMonotonicTimestamp, } from "./policy.js";
+import { projectAuthorization } from "./projection.js";
+import { withReplay } from "./replay-store.js";
+import { CODEX_INTEGRATION, } from "./types.js";
+const replayOperation = (run, onNewResult) => (onNewResult === undefined ? run : { onNewResult, run });
+const requirePolicyMatch = (input, expected) => {
+    if (input.adapterVersion === expected.adapterVersion &&
+        input.sandboxPolicyRevision === expected.sandboxPolicyRevision &&
+        input.vouchPolicyRevision === expected.vouchPolicyRevision) {
+        return;
+    }
+    throw makeNodeRuntimeError("storage_conflict", "The integration authorization policy revision is stale.", true);
+};
+const validatePolicy = (policy) => ({
+    adapterVersion: requireBoundedRevision(policy.adapterVersion, "The Codex adapter version"),
+    sandboxPolicyRevision: requireBoundedRevision(policy.sandboxPolicyRevision, "The Codex sandbox policy revision"),
+    vouchPolicyRevision: requireBoundedRevision(policy.vouchPolicyRevision, "The Codex vouch policy revision"),
+});
+const readPlanForApply = (database, planId) => {
+    const plan = readPlan(database, planId);
+    if (plan !== undefined) {
+        return plan;
+    }
+    throw makeNodeRuntimeError("resource_not_found", "The integration plan was not found.");
+};
+const assertApplyPlanTiming = (recordedAtMs, plan) => {
+    requireMonotonicTimestamp(recordedAtMs, plan.createdAtMs, "The integration apply timestamp");
+    if (recordedAtMs < plan.expiresAtMs) {
+        return;
+    }
+    throw makeNodeRuntimeError("storage_conflict", "The integration plan expired before apply.", true);
+};
+const assertApplyAuthorizationGate = (database, latest) => {
+    if (latest?.state === "cleanup_unknown" || latest?.state === "revoking") {
+        throw makeNodeRuntimeError("storage_conflict", "The previous integration authorization is revoking or cleanup_unknown.", true);
+    }
+    if (latest?.state !== "active") {
+        return;
+    }
+    const unsettled = countUnsettledPermits(database, latest.authorizationRevision);
+    if (unsettled === 0) {
+        return;
+    }
+    throw makeNodeRuntimeError("storage_conflict", "The active integration authorization cannot be replaced while permits are unsettled.", true);
+};
+const markAuthorizationReplaced = (database, input) => {
+    database
+        .prepare(`UPDATE integration_authorization_revisions
+         SET state = 'replaced',
+             replaced_by_revision = ?,
+             updated_at = ?
+         WHERE authorization_revision = ?`)
+        .run(input.nextRevision, input.recordedAt, input.latest.authorizationRevision);
+};
+const insertActiveAuthorization = (database, input, plan) => {
+    database
+        .prepare(`INSERT INTO integration_authorization_revisions(
+          authorization_revision, integration, state, plan_id, plan_digest,
+          executable_path, executable_sha256, adapter_version, owner_kinds_json,
+          sandbox_policy_revision, vouch_policy_revision, created_at, updated_at
+        ) VALUES (?, ?, 'active', ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`)
+        .run(input.nextRevision, CODEX_INTEGRATION, plan.planId, plan.planDigest, plan.executablePath, plan.executableSha256, plan.adapterVersion, plan.ownerKindsJson, plan.sandboxPolicyRevision, plan.vouchPolicyRevision, input.recordedAt, input.recordedAt);
+};
+const readLatestAuthorizationOrThrow = (database, expectedRevision) => {
+    const inserted = latestAuthorization(database);
+    if (inserted?.authorizationRevision === expectedRevision) {
+        return inserted;
+    }
+    throw makeNodeRuntimeError("storage_corrupt", "The integration authorization revision could not be persisted.");
+};
+const resolveApplyContext = (database, input) => {
+    const planId = requireBoundedIdentifier(input.planId, "The integration plan identifier");
+    const policy = validatePolicy(input.policy);
+    const plan = readPlanForApply(database, planId);
+    const recordedAtMs = parseNodeClockRecordedAtMs(input.recordedAt, "The integration apply timestamp");
+    assertApplyPlanTiming(recordedAtMs, plan);
+    requirePolicyMatch(policy, {
+        adapterVersion: plan.adapterVersion,
+        sandboxPolicyRevision: plan.sandboxPolicyRevision,
+        vouchPolicyRevision: plan.vouchPolicyRevision,
+    });
+    const latest = latestAuthorization(database);
+    assertApplyAuthorizationGate(database, latest);
+    return {
+        latest,
+        nextRevision: (latest?.authorizationRevision ?? 0) + 1,
+        plan,
+    };
+};
+const finalizeAppliedAuthorization = (database, input, context) => {
+    if (context.latest?.state === "active") {
+        markAuthorizationReplaced(database, {
+            latest: context.latest,
+            nextRevision: context.nextRevision,
+            recordedAt: input.recordedAt,
+        });
+    }
+    insertActiveAuthorization(database, { nextRevision: context.nextRevision, recordedAt: input.recordedAt }, context.plan);
+    return {
+        authorization: projectAuthorization(readLatestAuthorizationOrThrow(database, context.nextRevision)),
+        method: "integration.apply.codex",
+        recordedAt: input.recordedAt,
+    };
+};
+const runApplyCodexIntegrationAuthorization = (database, input) => finalizeAppliedAuthorization(database, input, resolveApplyContext(database, input));
+const parseBeginRevocationContext = (database, input) => ({
+    active: readActiveAuthorizationForRevocation(database),
+    recordedAtMs: parseNodeClockRecordedAtMs(input.recordedAt, "The integration remove timestamp"),
+});
+const assertBeginRevocationMonotonicity = (database, context) => {
+    requireMonotonicTimestamp(context.recordedAtMs, parseAuthorizationCreatedAtMs(context.active), "The integration remove timestamp");
+    requireRevocationTimestampNotBeforePermitLifecycle({
+        authorizationRevision: context.active.authorizationRevision,
+        database,
+        label: "The integration remove timestamp",
+        recordedAtMs: context.recordedAtMs,
+    });
+};
+const prepareBeginRevocation = (database, input) => {
+    const context = parseBeginRevocationContext(database, input);
+    assertBeginRevocationMonotonicity(database, context);
+    markAuthorizationRevoking(database, context.active.authorizationRevision, input.recordedAt);
+    const invalidatedIssuedPermits = invalidateIssuedPermits(database, context.active.authorizationRevision, { recordedAt: input.recordedAt, recordedAtMs: context.recordedAtMs });
+    compactTerminalPermits(database, context.recordedAtMs);
+    return { active: context.active, invalidatedIssuedPermits };
+};
+export const applyCodexIntegrationAuthorization = (database, input) => withReplay(database, { ...input, method: "integration.apply.codex" }, replayOperation(() => runApplyCodexIntegrationAuthorization(database, input), input.onNewResult));
+const readActiveAuthorizationForRevocation = (database) => {
+    const active = activeAuthorization(database);
+    if (active !== undefined) {
+        return active;
+    }
+    throw makeNodeRuntimeError("resource_not_found", "The Codex integration authorization is not active.");
+};
+const parseAuthorizationCreatedAtMs = (authorization) => parseNodeClockRecordedAtMs(authorization.createdAt, "The authorization creation timestamp");
+const markAuthorizationRevoking = (database, authorizationRevision, recordedAt) => {
+    database
+        .prepare(`UPDATE integration_authorization_revisions
+         SET state = 'revoking',
+             revocation_started_at = ?,
+             updated_at = ?
+         WHERE authorization_revision = ?`)
+        .run(recordedAt, recordedAt, authorizationRevision);
+};
+const requireRevocationTimestampNotBeforePermitLifecycle = (input) => {
+    const latestPermitTimestampMs = maxPermitLifecycleTimestampMs(input.database, input.authorizationRevision);
+    if (latestPermitTimestampMs === undefined) {
+        return;
+    }
+    requireMonotonicTimestamp(input.recordedAtMs, latestPermitTimestampMs, input.label);
+};
+const invalidateIssuedPermits = (database, authorizationRevision, input) => Number(database
+    .prepare(`UPDATE integration_authorization_permits
+           SET state = 'terminal',
+               terminal_reason = 'revoked_before_start',
+               terminal_at = ?,
+               terminal_at_ms = ?
+           WHERE authorization_revision = ? AND state = 'issued'`)
+    .run(input.recordedAt, input.recordedAtMs, authorizationRevision).changes);
+const readRevokingAuthorizationOrCorrupt = (database, authorizationRevision) => {
+    const revision = latestAuthorization(database);
+    if (revision?.authorizationRevision === authorizationRevision &&
+        revision.state === "revoking") {
+        return revision;
+    }
+    throw makeNodeRuntimeError("storage_corrupt", "The integration authorization revocation state was not persisted.");
+};
+const runBeginCodexIntegrationRevocation = (database, input) => {
+    const prepared = prepareBeginRevocation(database, input);
+    const authorization = projectAuthorization(readRevokingAuthorizationOrCorrupt(database, prepared.active.authorizationRevision));
+    return {
+        authorization,
+        invalidatedIssuedPermits: prepared.invalidatedIssuedPermits,
+        method: "integration.remove.codex",
+        recordedAt: input.recordedAt,
+    };
+};
+export const beginCodexIntegrationRevocation = (database, input) => withReplay(database, { ...input, method: "integration.remove.codex" }, replayOperation(() => runBeginCodexIntegrationRevocation(database, input), input.onNewResult));
+const readLatestRevokingAuthorization = (database) => {
+    const latest = latestAuthorization(database);
+    if (latest?.state === "revoking") {
+        return latest;
+    }
+    throw makeNodeRuntimeError("storage_conflict", "The integration authorization is not in revoking state.", true);
+};
+const parseRevocationStartedAtMs = (authorization) => {
+    if (authorization.revocationStartedAt !== null) {
+        return parseNodeClockRecordedAtMs(authorization.revocationStartedAt, "The integration revocation start timestamp");
+    }
+    throw makeNodeRuntimeError("storage_corrupt", "The revoking authorization is missing revocation_started_at.");
+};
+const assertRevocationOutcomeAllowed = (outcome, remainingUnsettledPermits) => {
+    if (outcome !== "revoked" || remainingUnsettledPermits === 0) {
+        return;
+    }
+    throw makeNodeRuntimeError("storage_conflict", "Revocation cannot complete while dispatching or started permits remain.", true);
+};
+const persistRevocationOutcome = (database, authorizationRevision, input) => {
+    if (input.outcome === "revoked") {
+        database
+            .prepare(`UPDATE integration_authorization_revisions
+         SET state = 'revoked',
+             terminalized_at = ?,
+             updated_at = ?
+         WHERE authorization_revision = ?`)
+            .run(input.recordedAt, input.recordedAt, authorizationRevision);
+        return;
+    }
+    database
+        .prepare(`UPDATE integration_authorization_revisions
+       SET state = 'cleanup_unknown',
+           cleanup_unknown_at = ?,
+           updated_at = ?
+       WHERE authorization_revision = ?`)
+        .run(input.recordedAt, input.recordedAt, authorizationRevision);
+};
+const readUpdatedAuthorizationOrCorrupt = (database) => {
+    const updated = latestAuthorization(database);
+    if (updated !== undefined) {
+        return updated;
+    }
+    throw makeNodeRuntimeError("storage_corrupt", "The integration authorization revision disappeared after revocation settlement.");
+};
+const runSettleCodexIntegrationRevocation = (database, input) => {
+    const latest = readLatestRevokingAuthorization(database);
+    const remaining = settleRevocationTimeline(database, input, latest);
+    persistRevocationOutcome(database, latest.authorizationRevision, {
+        outcome: input.outcome,
+        recordedAt: input.recordedAt,
+    });
+    const authorization = projectAuthorization(readUpdatedAuthorizationOrCorrupt(database));
+    return {
+        authorization,
+        method: "integration.remove.settle.codex",
+        recordedAt: input.recordedAt,
+        remainingUnsettledPermits: remaining,
+    };
+};
+const settleRevocationTimeline = (database, input, latest) => {
+    const recordedAtMs = parseNodeClockRecordedAtMs(input.recordedAt, "The integration remove settlement timestamp");
+    requireMonotonicTimestamp(recordedAtMs, parseRevocationStartedAtMs(latest), "The integration remove settlement timestamp");
+    requireRevocationTimestampNotBeforePermitLifecycle({
+        authorizationRevision: latest.authorizationRevision,
+        database,
+        label: "The integration remove settlement timestamp",
+        recordedAtMs,
+    });
+    const remaining = countUnsettledPermits(database, latest.authorizationRevision);
+    assertRevocationOutcomeAllowed(input.outcome, remaining);
+    return remaining;
+};
+export const settleCodexIntegrationRevocation = (database, input) => withReplay(database, { ...input, method: "integration.remove.settle.codex" }, () => runSettleCodexIntegrationRevocation(database, input));
+export const showCodexIntegrationAuthorization = (database) => {
+    const latest = latestAuthorization(database);
+    if (latest === undefined)
+        return undefined;
+    const unsettled = countUnsettledPermits(database, latest.authorizationRevision);
+    return {
+        activeUnsettledPermits: latest.state === "active" ? unsettled : 0,
+        authorization: projectAuthorization(latest),
+        revokingUnsettledPermits: latest.state === "revoking" || latest.state === "cleanup_unknown"
+            ? unsettled
+            : 0,
+    };
+};
+//# sourceMappingURL=authorization-store.js.map

package/dist/runtime/process/resource/integration-authorization/authorization-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization-store.js","sourceRoot":"","sources":["../../../../../src/runtime/process/resource/integration-authorization/authorization-store.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE1D,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,mBAAmB,EACnB,6BAA6B,EAC7B,QAAQ,GACT,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EACL,0BAA0B,EAC1B,wBAAwB,EACxB,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAGL,iBAAiB,GAKlB,MAAM,YAAY,CAAC;AAoCpB,MAAM,eAAe,GAAG,CACtB,GAAkB,EAClB,WAAuC,EAMnC,EAAE,CAAC,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;AAalE,MAAM,kBAAkB,GAAG,CACzB,KAAkC,EAClC,QAAqC,EAC/B,EAAE;IACR,IACE,KAAK,CAAC,cAAc,KAAK,QAAQ,CAAC,cAAc;QAChD,KAAK,CAAC,qBAAqB,KAAK,QAAQ,CAAC,qBAAqB;QAC9D,KAAK,CAAC,mBAAmB,KAAK,QAAQ,CAAC,mBAAmB,EAC1D,CAAC;QACD,OAAO;IACT,CAAC;IACD,MAAM,oBAAoB,CACxB,kBAAkB,EAClB,yDAAyD,EACzD,IAAI,CACL,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CACrB,MAAmC,EACN,EAAE,CAAC,CAAC;IACjC,cAAc,EAAE,sBAAsB,CACpC,MAAM,CAAC,cAAc,EACrB,2BAA2B,CAC5B;IACD,qBAAqB,EAAE,sBAAsB,CAC3C,MAAM,CAAC,qBAAqB,EAC5B,mCAAmC,CACpC;IACD,mBAAmB,EAAE,sBAAsB,CACzC,MAAM,CAAC,mBAAmB,EAC1B,iCAAiC,CAClC;CACF,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,QAAsB,EAAE,MAAc,EAAW,EAAE;IAC3E,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,oBAAoB,CACxB,oBAAoB,EACpB,qCAAqC,CACtC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAAC,YAAoB,EAAE,IAAa,EAAQ,EAAE;IAC1E,yBAAyB,CACvB,YAAY,EACZ,IAAI,CAAC,WAAW,EAChB,iCAAiC,CAClC,CAAC;IACF,IAAI,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACpC,OAAO;IACT,CAAC;IACD,MAAM,oBAAoB,CACxB,kBAAkB,EAClB,4CAA4C,EAC5C,IAAI,CACL,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,4BAA4B,GAAG,CACnC,QAAsB,EACtB,MAAoC,EAC9B,EAAE;IACR,IAAI,MAAM,EAAE,KAAK,KAAK,iBAAiB,IAAI,MAAM,EAAE,KAAK,KAAK,UAAU,EAAE,CAAC;QACxE,MAAM,oBAAoB,CACxB,kBAAkB,EAClB,wEAAwE,EACxE,IAAI,CACL,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,EAAE,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO;IACT,CAAC;IACD,MAAM,SAAS,GAAG,qBAAqB,CACrC,QAAQ,EACR,MAAM,CAAC,qBAAqB,CAC7B,CAAC;IACF,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;QACpB,OAAO;IACT,CAAC;IACD,MAAM,oBAAoB,CACxB,kBAAkB,EAClB,sFAAsF,EACtF,IAAI,CACL,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,yBAAyB,GAAG,CAChC,QAAsB,EACtB,KAIC,EACK,EAAE;IACR,QAAQ;SACL,OAAO,CACN;;;;0CAIoC,CACrC;SACA,GAAG,CACF,KAAK,CAAC,YAAY,EAClB,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,MAAM,CAAC,qBAAqB,CACnC,CAAC;AACN,CAAC,CAAC;AAEF,MAAM,yBAAyB,GAAG,CAChC,QAAsB,EACtB,KAAqE,EACrE,IAAa,EACP,EAAE;IACR,QAAQ;SACL,OAAO,CACN;;;;gEAI0D,CAC3D;SACA,GAAG,CACF,KAAK,CAAC,YAAY,EAClB,iBAAiB,EACjB,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,qBAAqB,EAC1B,IAAI,CAAC,mBAAmB,EACxB,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,UAAU,CACjB,CAAC;AACN,CAAC,CAAC;AAEF,MAAM,8BAA8B,GAAG,CACrC,QAAsB,EACtB,gBAAwB,EACN,EAAE;IACpB,MAAM,QAAQ,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAC/C,IAAI,QAAQ,EAAE,qBAAqB,KAAK,gBAAgB,EAAE,CAAC;QACzD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,oBAAoB,CACxB,iBAAiB,EACjB,gEAAgE,CACjE,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAC1B,QAAsB,EACtB,KAAiB,EACH,EAAE;IAChB,MAAM,MAAM,GAAG,wBAAwB,CACrC,KAAK,CAAC,MAAM,EACZ,iCAAiC,CAClC,CAAC;IACF,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,YAAY,GAAG,0BAA0B,CAC7C,KAAK,CAAC,UAAU,EAChB,iCAAiC,CAClC,CAAC;IACF,qBAAqB,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IAC1C,kBAAkB,CAAC,MAAM,EAAE;QACzB,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;QACjD,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;KAC9C,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAC7C,4BAA4B,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC/C,OAAO;QACL,MAAM;QACN,YAAY,EAAE,CAAC,MAAM,EAAE,qBAAqB,IAAI,CAAC,CAAC,GAAG,CAAC;QACtD,IAAI;KACL,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,4BAA4B,GAAG,CACnC,QAAsB,EACtB,KAAiB,EACjB,OAAqB,EACK,EAAE;IAC5B,IAAI,OAAO,CAAC,MAAM,EAAE,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,yBAAyB,CAAC,QAAQ,EAAE;YAClC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC,CAAC;IACL,CAAC;IACD,yBAAyB,CACvB,QAAQ,EACR,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,EACpE,OAAO,CAAC,IAAI,CACb,CAAC;IACF,OAAO;QACL,aAAa,EAAE,oBAAoB,CACjC,8BAA8B,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,CAC/D;QACD,MAAM,EAAE,yBAAyB;QACjC,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,qCAAqC,GAAG,CAC5C,QAAsB,EACtB,KAAiB,EACS,EAAE,CAC5B,4BAA4B,CAC1B,QAAQ,EACR,KAAK,EACL,mBAAmB,CAAC,QAAQ,EAAE,KAAK,CAAC,CACrC,CAAC;AAEJ,MAAM,2BAA2B,GAAG,CAClC,QAAsB,EACtB,KAAmB,EACK,EAAE,CAAC,CAAC;IAC5B,MAAM,EAAE,oCAAoC,CAAC,QAAQ,CAAC;IACtD,YAAY,EAAE,0BAA0B,CACtC,KAAK,CAAC,UAAU,EAChB,kCAAkC,CACnC;CACF,CAAC,CAAC;AAEH,MAAM,iCAAiC,GAAG,CACxC,QAAsB,EACtB,OAA+B,EACzB,EAAE;IACR,yBAAyB,CACvB,OAAO,CAAC,YAAY,EACpB,6BAA6B,CAAC,OAAO,CAAC,MAAM,CAAC,EAC7C,kCAAkC,CACnC,CAAC;IACF,kDAAkD,CAAC;QACjD,qBAAqB,EAAE,OAAO,CAAC,MAAM,CAAC,qBAAqB;QAC3D,QAAQ;QACR,KAAK,EAAE,kCAAkC;QACzC,YAAY,EAAE,OAAO,CAAC,YAAY;KACnC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAC7B,QAAsB,EACtB,KAAmB,EAInB,EAAE;IACF,MAAM,OAAO,GAAG,2BAA2B,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC7D,iCAAiC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACrD,yBAAyB,CACvB,QAAQ,EACR,OAAO,CAAC,MAAM,CAAC,qBAAqB,EACpC,KAAK,CAAC,UAAU,CACjB,CAAC;IACF,MAAM,wBAAwB,GAAG,uBAAuB,CACtD,QAAQ,EACR,OAAO,CAAC,MAAM,CAAC,qBAAqB,EACpC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CACrE,CAAC;IACF,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IACvD,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,wBAAwB,EAAE,CAAC;AAC9D,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAChD,QAAsB,EACtB,KAAiB,EAKhB,EAAE,CACH,UAAU,CACR,QAAQ,EACR,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,EAC/C,eAAe,CACb,GAAG,EAAE,CAAC,qCAAqC,CAAC,QAAQ,EAAE,KAAK,CAAC,EAC5D,KAAK,CAAC,WAAW,CAClB,CACF,CAAC;AAEJ,MAAM,oCAAoC,GAAG,CAC3C,QAAsB,EACJ,EAAE;IACpB,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,oBAAoB,CACxB,oBAAoB,EACpB,oDAAoD,CACrD,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,6BAA6B,GAAG,CACpC,aAA+B,EACvB,EAAE,CACV,0BAA0B,CACxB,aAAa,CAAC,SAAS,EACvB,sCAAsC,CACvC,CAAC;AAEJ,MAAM,yBAAyB,GAAG,CAChC,QAAsB,EACtB,qBAA6B,EAC7B,UAAkB,EACZ,EAAE;IACR,QAAQ;SACL,OAAO,CACN;;;;0CAIoC,CACrC;SACA,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,qBAAqB,CAAC,CAAC;AACxD,CAAC,CAAC;AAEF,MAAM,kDAAkD,GAAG,CAAC,KAK3D,EAAQ,EAAE;IACT,MAAM,uBAAuB,GAAG,6BAA6B,CAC3D,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,qBAAqB,CAC5B,CAAC;IACF,IAAI,uBAAuB,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO;IACT,CAAC;IACD,yBAAyB,CACvB,KAAK,CAAC,YAAY,EAClB,uBAAuB,EACvB,KAAK,CAAC,KAAK,CACZ,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,uBAAuB,GAAG,CAC9B,QAAsB,EACtB,qBAA6B,EAC7B,KAAqE,EAC7D,EAAE,CACV,MAAM,CACJ,QAAQ;KACL,OAAO,CACN;;;;;iEAKyD,CAC1D;KACA,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC,OAAO,CAC5E,CAAC;AAEJ,MAAM,kCAAkC,GAAG,CACzC,QAAsB,EACtB,qBAA6B,EACX,EAAE;IACpB,MAAM,QAAQ,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAC/C,IACE,QAAQ,EAAE,qBAAqB,KAAK,qBAAqB;QACzD,QAAQ,CAAC,KAAK,KAAK,UAAU,EAC7B,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,oBAAoB,CACxB,iBAAiB,EACjB,mEAAmE,CACpE,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,kCAAkC,GAAG,CACzC,QAAsB,EACtB,KAAmB,EACI,EAAE;IACzB,MAAM,QAAQ,GAAG,sBAAsB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACzD,MAAM,aAAa,GAAG,oBAAoB,CACxC,kCAAkC,CAChC,QAAQ,EACR,QAAQ,CAAC,MAAM,CAAC,qBAAqB,CACtC,CACF,CAAC;IACF,OAAO;QACL,aAAa;QACb,wBAAwB,EAAE,QAAQ,CAAC,wBAAwB;QAC3D,MAAM,EAAE,0BAA0B;QAClC,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAC7C,QAAsB,EACtB,KAA2B,EAM1B,EAAE,CACH,UAAU,CACR,QAAQ,EACR,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,EAChD,eAAe,CACb,GAAG,EAAE,CAAC,kCAAkC,CAAC,QAAQ,EAAE,KAAK,CAAC,EACzD,KAAK,CAAC,WAAW,CAClB,CACF,CAAC;AAEJ,MAAM,+BAA+B,GAAG,CACtC,QAAsB,EACJ,EAAE;IACpB,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,MAAM,EAAE,KAAK,KAAK,UAAU,EAAE,CAAC;QACjC,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,oBAAoB,CACxB,kBAAkB,EAClB,yDAAyD,EACzD,IAAI,CACL,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,0BAA0B,GAAG,CACjC,aAA+B,EACvB,EAAE;IACV,IAAI,aAAa,CAAC,mBAAmB,KAAK,IAAI,EAAE,CAAC;QAC/C,OAAO,0BAA0B,CAC/B,aAAa,CAAC,mBAAmB,EACjC,4CAA4C,CAC7C,CAAC;IACJ,CAAC;IACD,MAAM,oBAAoB,CACxB,iBAAiB,EACjB,8DAA8D,CAC/D,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,8BAA8B,GAAG,CACrC,OAAsC,EACtC,yBAAiC,EAC3B,EAAE;IACR,IAAI,OAAO,KAAK,SAAS,IAAI,yBAAyB,KAAK,CAAC,EAAE,CAAC;QAC7D,OAAO;IACT,CAAC;IACD,MAAM,oBAAoB,CACxB,kBAAkB,EAClB,yEAAyE,EACzE,IAAI,CACL,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,wBAAwB,GAAG,CAC/B,QAAsB,EACtB,qBAA6B,EAC7B,KAGC,EACK,EAAE;IACR,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAChC,QAAQ;aACL,OAAO,CACN;;;;0CAIkC,CACnC;aACA,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC;QAClE,OAAO;IACT,CAAC;IACD,QAAQ;SACL,OAAO,CACN;;;;wCAIkC,CACnC;SACA,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC;AACpE,CAAC,CAAC;AAEF,MAAM,iCAAiC,GAAG,CACxC,QAAsB,EACJ,EAAE;IACpB,MAAM,OAAO,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,oBAAoB,CACxB,iBAAiB,EACjB,iFAAiF,CAClF,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,mCAAmC,GAAG,CAC1C,QAAsB,EACtB,KAA4B,EACJ,EAAE;IAC1B,MAAM,MAAM,GAAG,+BAA+B,CAAC,QAAQ,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,wBAAwB,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACpE,wBAAwB,CAAC,QAAQ,EAAE,MAAM,CAAC,qBAAqB,EAAE;QAC/D,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC,CAAC;IACH,MAAM,aAAa,GAAG,oBAAoB,CACxC,iCAAiC,CAAC,QAAQ,CAAC,CAC5C,CAAC;IACF,OAAO;QACL,aAAa;QACb,MAAM,EAAE,iCAAiC;QACzC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,yBAAyB,EAAE,SAAS;KACrC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,wBAAwB,GAAG,CAC/B,QAAsB,EACtB,KAA4B,EAC5B,MAAwB,EAChB,EAAE;IACV,MAAM,YAAY,GAAG,0BAA0B,CAC7C,KAAK,CAAC,UAAU,EAChB,6CAA6C,CAC9C,CAAC;IACF,yBAAyB,CACvB,YAAY,EACZ,0BAA0B,CAAC,MAAM,CAAC,EAClC,6CAA6C,CAC9C,CAAC;IACF,kDAAkD,CAAC;QACjD,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;QACnD,QAAQ;QACR,KAAK,EAAE,6CAA6C;QACpD,YAAY;KACb,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,qBAAqB,CACrC,QAAQ,EACR,MAAM,CAAC,qBAAqB,CAC7B,CAAC;IACF,8BAA8B,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACzD,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAC9C,QAAsB,EACtB,KAA4B,EAM3B,EAAE,CACH,UAAU,CACR,QAAQ,EACR,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE,EACvD,GAAG,EAAE,CAAC,mCAAmC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAC3D,CAAC;AAEJ,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAC/C,QAAsB,EAOlB,EAAE;IACN,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,MAAM,SAAS,GAAG,qBAAqB,CACrC,QAAQ,EACR,MAAM,CAAC,qBAAqB,CAC7B,CAAC;IACF,OAAO;QACL,sBAAsB,EAAE,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACjE,aAAa,EAAE,oBAAoB,CAAC,MAAM,CAAC;QAC3C,wBAAwB,EACtB,MAAM,CAAC,KAAK,KAAK,UAAU,IAAI,MAAM,CAAC,KAAK,KAAK,iBAAiB;YAC/D,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,CAAC;KACR,CAAC;AACJ,CAAC,CAAC"}