@phigon/observer 8.1.0 → 8.3.0

package/dist/src/enroll.d.ts

@@ -0,0 +1,86 @@
+import type { ObserverConfig } from "./config.js";
+import { type CredentialStore } from "./credential-store.js";
+import { type ConsentProfile, type PairResult } from "./pair.js";
+/**
+ * Enrollment with a company's reusable enrollment code. Unlike pairing, the
+ * company gives consent for its computers: nobody at this computer is
+ * asked, the server answers with the profile the company chose, and that
+ * profile limits collection exactly as an owner's choice does.
+ *
+ * The code itself is never printed, logged or stored.
+ */
+/** The environment variable device management scripts pass the code in. */
+export declare const enrollmentCodeVariable = "PHIGON_ENROLLMENT_CODE";
+/**
+ * Exit codes of `pair` with an enrollment code, for device management
+ * scripts. Any other failure exits with 1.
+ */
+export declare const enrollmentExitCodes: Readonly<{
+    /** The server is busy, unavailable or unreachable: run it again later. */
+    retryLater: 20;
+    /** Expired, revoked, used up or outdated: the company needs a new code. */
+    newCodeNeeded: 21;
+    /** Not an enrollment code, or cut short. */
+    invalidCode: 22;
+    /** This computer enrolled with this code before and was removed since. */
+    alreadyUsed: 23;
+    /** This computer is already connected to the workspace. */
+    alreadyConnected: 24;
+}>;
+/** A failed enrollment: a plain sentence, the server's code and an exit code. */
+export declare class EnrollmentError extends Error {
+    readonly code: string;
+    readonly exitCode: number;
+    constructor(message: string, code: string, exitCode: number);
+}
+/**
+ * Retries for a busy server (HTTP 429 or 503): a few attempts, each after
+ * the server's Retry-After plus a little jitter so a fleet behind one
+ * address does not come back at the same second, within a bounded total.
+ */
+export declare const enrollmentRetry: Readonly<{
+    attempts: 4;
+    defaultWaitMs: 30000;
+    maxWaitMs: 120000;
+    totalWaitMs: 300000;
+    jitterMs: 10000;
+}>;
+/**
+ * Checks an enrollment code's shape before it is sent, so a mistyped code
+ * costs no request. Errors never repeat the code.
+ */
+export declare function checkedEnrollmentCode(value: string): string;
+/** The consent the company gave, as the server reported it. */
+export type CompanyConsent = Readonly<{
+    source: "company";
+    profile: ConsentProfile;
+    policyVersion: string;
+    grantedAt?: string;
+    enrollmentCodeId?: string;
+    enrollmentCodeLabel?: string;
+}>;
+export type EnrollResult = PairResult & Readonly<{
+    consent: CompanyConsent;
+}>;
+export type EnrollOptions = Readonly<{
+    config: ObserverConfig;
+    code: string;
+    displayName?: string;
+    observerVersion?: string;
+    credentialStore?: CredentialStore;
+    fetcher?: typeof fetch;
+    /** Called before each retry of a busy server, with the wait. */
+    onRetry?: (waitMs: number, attempt: number) => void;
+    sleep?: (ms: number) => Promise<void>;
+    random?: () => number;
+}>;
+/**
+ * Enrolls this computer with a company's enrollment code through
+ * `POST /v1/machines/enroll`, and stores the machine credential with the
+ * company's consent. A computer already paired with this server sends its
+ * stored key and keeps its machine; its consent moves to the company's.
+ */
+export declare function enrollMachine(options: EnrollOptions): Promise<EnrollResult>;
+/** Retry-After in seconds or as an HTTP date, within the retry bounds. */
+export declare function retryAfterMs(header: string | null, now?: number): number;
+//# sourceMappingURL=enroll.d.ts.map

package/dist/src/enroll.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enroll.d.ts","sourceRoot":"","sources":["../../src/enroll.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAQL,KAAK,cAAc,EAEnB,KAAK,UAAU,EAChB,MAAM,WAAW,CAAC;AAGnB;;;;;;;GAOG;AAEH,2EAA2E;AAC3E,eAAO,MAAM,sBAAsB,2BAA2B,CAAC;AAE/D;;;GAGG;AACH,eAAO,MAAM,mBAAmB;IAC9B,0EAA0E;;IAE1E,2EAA2E;;IAE3E,4CAA4C;;IAE5C,0EAA0E;;IAE1E,2DAA2D;;EAE3D,CAAC;AAeH,iFAAiF;AACjF,qBAAa,eAAgB,SAAQ,KAAK;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAEd,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;CAM5D;AAED;;;;GAIG;AACH,eAAO,MAAM,eAAe;;;;;;EAM1B,CAAC;AAIH;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAiB3D;AAED,+DAA+D;AAC/D,MAAM,MAAM,cAAc,GAAG,QAAQ,CAAC;IACpC,MAAM,EAAE,SAAS,CAAC;IAClB,OAAO,EAAE,cAAc,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,UAAU,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,cAAc,CAAA;CAAE,CAAC,CAAC;AAI9E,MAAM,MAAM,aAAa,GAAG,QAAQ,CAAC;IACnC,MAAM,EAAE,cAAc,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IACvB,gEAAgE;IAChE,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACpD,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,CAAC,EAAE,MAAM,MAAM,CAAC;CACvB,CAAC,CAAC;AAEH;;;;;GAKG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CAkCjF;AAuID,0EAA0E;AAC1E,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,GAAG,GAAE,MAAmB,GAAG,MAAM,CASpF"}

package/dist/src/enroll.js

@@ -0,0 +1,245 @@
+import { arch, hostname } from "node:os";
+import { setTimeout as delay } from "node:timers/promises";
+import { redactSecrets } from "./content-redaction.js";
+import { maxEnrollmentCodeLabelLength, } from "./credential-store.js";
+import { OBSERVER_CONSENT_POLICY_VERSION, apiError, connectMachine, credentialRejected, isConnectedMachine, normalizedOperatingSystem, } from "./pair.js";
+import { plainText } from "./user-notices.js";
+/**
+ * Enrollment with a company's reusable enrollment code. Unlike pairing, the
+ * company gives consent for its computers: nobody at this computer is
+ * asked, the server answers with the profile the company chose, and that
+ * profile limits collection exactly as an owner's choice does.
+ *
+ * The code itself is never printed, logged or stored.
+ */
+/** The environment variable device management scripts pass the code in. */
+export const enrollmentCodeVariable = "PHIGON_ENROLLMENT_CODE";
+/**
+ * Exit codes of `pair` with an enrollment code, for device management
+ * scripts. Any other failure exits with 1.
+ */
+export const enrollmentExitCodes = Object.freeze({
+    /** The server is busy, unavailable or unreachable: run it again later. */
+    retryLater: 20,
+    /** Expired, revoked, used up or outdated: the company needs a new code. */
+    newCodeNeeded: 21,
+    /** Not an enrollment code, or cut short. */
+    invalidCode: 22,
+    /** This computer enrolled with this code before and was removed since. */
+    alreadyUsed: 23,
+    /** This computer is already connected to the workspace. */
+    alreadyConnected: 24,
+});
+const exitCodeForServerCode = Object.freeze({
+    rate_limited: enrollmentExitCodes.retryLater,
+    rate_limit_unavailable: enrollmentExitCodes.retryLater,
+    enrollment_unavailable: enrollmentExitCodes.retryLater,
+    enrollment_code_expired: enrollmentExitCodes.newCodeNeeded,
+    enrollment_code_revoked: enrollmentExitCodes.newCodeNeeded,
+    enrollment_code_used_up: enrollmentExitCodes.newCodeNeeded,
+    enrollment_code_outdated: enrollmentExitCodes.newCodeNeeded,
+    invalid_enrollment_code: enrollmentExitCodes.invalidCode,
+    enrollment_code_already_used: enrollmentExitCodes.alreadyUsed,
+    installation_already_paired: enrollmentExitCodes.alreadyConnected,
+});
+/** A failed enrollment: a plain sentence, the server's code and an exit code. */
+export class EnrollmentError extends Error {
+    code;
+    exitCode;
+    constructor(message, code, exitCode) {
+        super(message);
+        this.name = "EnrollmentError";
+        this.code = code;
+        this.exitCode = exitCode;
+    }
+}
+/**
+ * Retries for a busy server (HTTP 429 or 503): a few attempts, each after
+ * the server's Retry-After plus a little jitter so a fleet behind one
+ * address does not come back at the same second, within a bounded total.
+ */
+export const enrollmentRetry = Object.freeze({
+    attempts: 4,
+    defaultWaitMs: 30_000,
+    maxWaitMs: 120_000,
+    totalWaitMs: 300_000,
+    jitterMs: 10_000,
+});
+const codePattern = /^phe_[A-Za-z0-9_-]{32}$/u;
+/**
+ * Checks an enrollment code's shape before it is sent, so a mistyped code
+ * costs no request. Errors never repeat the code.
+ */
+export function checkedEnrollmentCode(value) {
+    const code = value.trim();
+    if (!code.startsWith("phe_")) {
+        throw new EnrollmentError("This is not an enrollment code: enrollment codes start with phe_. For a one-time pairing code from Connect machine, use --code instead.", "invalid_enrollment_code", enrollmentExitCodes.invalidCode);
+    }
+    if (!codePattern.test(code)) {
+        throw new EnrollmentError("This enrollment code is not valid. Check that it was copied in full, or ask your administrator for a new one.", "invalid_enrollment_code", enrollmentExitCodes.invalidCode);
+    }
+    return code;
+}
+/**
+ * Enrolls this computer with a company's enrollment code through
+ * `POST /v1/machines/enroll`, and stores the machine credential with the
+ * company's consent. A computer already paired with this server sends its
+ * stored key and keeps its machine; its consent moves to the company's.
+ */
+export async function enrollMachine(options) {
+    const code = checkedEnrollmentCode(options.code);
+    const endpoint = new URL("/v1/machines/enroll", options.config.controlPlaneUrl);
+    const fetcher = options.fetcher ?? fetch;
+    const version = reportableVersion(options.observerVersion);
+    const connected = await connectMachine({
+        config: options.config,
+        endpoint,
+        fetcher,
+        ...(options.credentialStore === undefined ? {} : { credentialStore: options.credentialStore }),
+        exchange: (installationID, existingCredential) => exchangeWithRetries(options, fetcher, endpoint, {
+            enrollment_code: code,
+            installation_id: installationID,
+            display_name: options.displayName?.trim() || hostname(),
+            hostname: hostname(),
+            operating_system: normalizedOperatingSystem(),
+            architecture: arch(),
+            ...(version === undefined ? {} : { observer_version: version }),
+            ...(existingCredential === undefined ? {} : { existing_credential: existingCredential }),
+        }),
+        evidence: (enrolled, at) => ({
+            consentProfile: enrolled.consent.profile,
+            consentPolicyVersion: enrolled.consent.policyVersion,
+            consentedAt: enrolled.consent.grantedAt ?? at,
+            consentSource: "company",
+            ...(enrolled.consent.enrollmentCodeId === undefined
+                ? {}
+                : { enrollmentCodeId: enrolled.consent.enrollmentCodeId }),
+            ...(enrolled.consent.enrollmentCodeLabel === undefined
+                ? {}
+                : { enrollmentCodeLabel: enrolled.consent.enrollmentCodeLabel }),
+        }),
+    });
+    return Object.freeze({ ...connected.result, consent: connected.paired.consent });
+}
+async function exchangeWithRetries(options, fetcher, endpoint, body) {
+    const sleep = options.sleep ?? ((ms) => delay(ms));
+    const random = options.random ?? Math.random;
+    let waited = 0;
+    for (let attempt = 1;; attempt++) {
+        const outcome = await exchangeEnrollment(fetcher, endpoint, body);
+        if (!("retryAfterMs" in outcome))
+            return outcome;
+        const waitMs = Math.round(outcome.retryAfterMs + random() * enrollmentRetry.jitterMs);
+        if (attempt >= enrollmentRetry.attempts || waited + waitMs > enrollmentRetry.totalWaitMs) {
+            return { error: outcome.error, credentialRejected: false };
+        }
+        options.onRetry?.(waitMs, attempt);
+        await sleep(waitMs);
+        waited += waitMs;
+    }
+}
+async function exchangeEnrollment(fetcher, endpoint, body) {
+    let response;
+    try {
+        response = await fetcher(endpoint, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+                Accept: "application/json",
+            },
+            body: JSON.stringify(body),
+            redirect: "error",
+            signal: AbortSignal.timeout(15_000),
+        });
+    }
+    catch (error) {
+        throw new EnrollmentError(error instanceof Error && error.name === "TimeoutError"
+            ? `Enrollment timed out while contacting ${endpoint.origin}. Run the same command again; within 10 minutes it gets the same machine back.`
+            : `Could not reach ${endpoint.origin}. Check the network and the control-plane address, then try again.`, "unreachable", enrollmentExitCodes.retryLater);
+    }
+    if (!response.ok) {
+        const failure = await apiError(response);
+        const code = failure.code ?? `http_${response.status}`;
+        const error = new EnrollmentError(serverSentence(failure.message) ?? `Enrollment failed with HTTP ${response.status}. Try again later.`, code, exitCodeForServerCode[code] ??
+            (response.status >= 500 ? enrollmentExitCodes.retryLater : 1));
+        if (response.status === 429 || response.status === 503) {
+            return { error, retryAfterMs: retryAfterMs(response.headers.get("retry-after")) };
+        }
+        return { error, credentialRejected: credentialRejected(response.status, failure) };
+    }
+    let value;
+    try {
+        value = await response.json();
+    }
+    catch {
+        // A truncated response may contain a credential; parser errors must not
+        // print fragments. The server answers a repeat with the same machine.
+        throw new EnrollmentError("The enrollment response was incomplete. Run the same command again within 10 minutes and keep the data directory; the server answers with the same machine.", "invalid_response", enrollmentExitCodes.retryLater);
+    }
+    const consent = companyConsent(value);
+    if (!isConnectedMachine(value) || consent === undefined) {
+        throw new EnrollmentError("The control plane returned an enrollment this observer cannot use. Update the observer, then enroll again.", "invalid_response", 1);
+    }
+    return { paired: { machine: value.machine, credential: value.credential, consent } };
+}
+/**
+ * The company's consent from an enrollment response. A consent this
+ * observer cannot honour exactly, such as a newer policy version, is
+ * refused rather than stored.
+ */
+function companyConsent(value) {
+    if (typeof value !== "object" || value === null || !("consent" in value))
+        return undefined;
+    const consent = value.consent;
+    if (typeof consent !== "object" ||
+        consent === null ||
+        !("source" in consent) || consent.source !== "company" ||
+        !("profile" in consent) || (consent.profile !== "metadata" && consent.profile !== "full") ||
+        !("policy_version" in consent) || consent.policy_version !== OBSERVER_CONSENT_POLICY_VERSION) {
+        return undefined;
+    }
+    const grantedAt = "granted_at" in consent && typeof consent.granted_at === "string" &&
+        Number.isFinite(Date.parse(consent.granted_at))
+        ? new Date(consent.granted_at).toISOString()
+        : undefined;
+    const codeId = "enrollment_code_id" in consent && typeof consent.enrollment_code_id === "string" &&
+        /^[0-9A-Fa-f-]{1,64}$/u.test(consent.enrollment_code_id)
+        ? consent.enrollment_code_id
+        : undefined;
+    const label = "enrollment_code_label" in consent && typeof consent.enrollment_code_label === "string"
+        ? plainText(consent.enrollment_code_label, maxEnrollmentCodeLabelLength)
+        : "";
+    return Object.freeze({
+        source: "company",
+        profile: consent.profile,
+        policyVersion: consent.policy_version,
+        ...(grantedAt === undefined ? {} : { grantedAt }),
+        ...(codeId === undefined ? {} : { enrollmentCodeId: codeId }),
+        ...(label === "" ? {} : { enrollmentCodeLabel: label }),
+    });
+}
+/** The server's plain sentence, one bounded line with any secret removed. */
+function serverSentence(message) {
+    if (message === undefined)
+        return undefined;
+    const sentence = plainText(redactSecrets(message), 300);
+    return sentence === "" ? undefined : sentence;
+}
+/** Retry-After in seconds or as an HTTP date, within the retry bounds. */
+export function retryAfterMs(header, now = Date.now()) {
+    let wait = enrollmentRetry.defaultWaitMs;
+    const value = header?.trim() ?? "";
+    if (/^\d{1,6}$/u.test(value)) {
+        wait = Number(value) * 1_000;
+    }
+    else if (value !== "" && Number.isFinite(Date.parse(value))) {
+        wait = Date.parse(value) - now;
+    }
+    return Math.min(enrollmentRetry.maxWaitMs, Math.max(1_000, wait));
+}
+/** Printable ASCII of at most 64 bytes, as the server accepts. */
+function reportableVersion(version) {
+    const value = version?.trim() ?? "";
+    return /^[!-~]{1,64}$/u.test(value) ? value : undefined;
+}
+//# sourceMappingURL=enroll.js.map

package/dist/src/enroll.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enroll.js","sourceRoot":"","sources":["../../src/enroll.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EACL,4BAA4B,GAE7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,+BAA+B,EAC/B,QAAQ,EACR,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAClB,yBAAyB,GAK1B,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAE9C;;;;;;;GAOG;AAEH,2EAA2E;AAC3E,MAAM,CAAC,MAAM,sBAAsB,GAAG,wBAAwB,CAAC;AAE/D;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC/C,0EAA0E;IAC1E,UAAU,EAAE,EAAE;IACd,2EAA2E;IAC3E,aAAa,EAAE,EAAE;IACjB,4CAA4C;IAC5C,WAAW,EAAE,EAAE;IACf,0EAA0E;IAC1E,WAAW,EAAE,EAAE;IACf,2DAA2D;IAC3D,gBAAgB,EAAE,EAAE;CACrB,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAqC,MAAM,CAAC,MAAM,CAAC;IAC5E,YAAY,EAAE,mBAAmB,CAAC,UAAU;IAC5C,sBAAsB,EAAE,mBAAmB,CAAC,UAAU;IACtD,sBAAsB,EAAE,mBAAmB,CAAC,UAAU;IACtD,uBAAuB,EAAE,mBAAmB,CAAC,aAAa;IAC1D,uBAAuB,EAAE,mBAAmB,CAAC,aAAa;IAC1D,uBAAuB,EAAE,mBAAmB,CAAC,aAAa;IAC1D,wBAAwB,EAAE,mBAAmB,CAAC,aAAa;IAC3D,uBAAuB,EAAE,mBAAmB,CAAC,WAAW;IACxD,4BAA4B,EAAE,mBAAmB,CAAC,WAAW;IAC7D,2BAA2B,EAAE,mBAAmB,CAAC,gBAAgB;CAClE,CAAC,CAAC;AAEH,iFAAiF;AACjF,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAC/B,IAAI,CAAS;IACb,QAAQ,CAAS;IAE1B,YAAY,OAAe,EAAE,IAAY,EAAE,QAAgB;QACzD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC;IAC3C,QAAQ,EAAE,CAAC;IACX,aAAa,EAAE,MAAM;IACrB,SAAS,EAAE,OAAO;IAClB,WAAW,EAAE,OAAO;IACpB,QAAQ,EAAE,MAAM;CACjB,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,0BAA0B,CAAC;AAE/C;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC1B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,eAAe,CACvB,yIAAyI,EACzI,yBAAyB,EACzB,mBAAmB,CAAC,WAAW,CAChC,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,eAAe,CACvB,+GAA+G,EAC/G,yBAAyB,EACzB,mBAAmB,CAAC,WAAW,CAChC,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AA6BD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAsB;IACxD,MAAM,IAAI,GAAG,qBAAqB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,qBAAqB,EAAE,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAChF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC;IACzC,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,MAAM,cAAc,CAAkB;QACtD,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,QAAQ;QACR,OAAO;QACP,GAAG,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC;QAC9F,QAAQ,EAAE,CAAC,cAAc,EAAE,kBAAkB,EAAE,EAAE,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE;YAChG,eAAe,EAAE,IAAI;YACrB,eAAe,EAAE,cAAc;YAC/B,YAAY,EAAE,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,QAAQ,EAAE;YACvD,QAAQ,EAAE,QAAQ,EAAE;YACpB,gBAAgB,EAAE,yBAAyB,EAAE;YAC7C,YAAY,EAAE,IAAI,EAAE;YACpB,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC;YAC/D,GAAG,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,CAAC;SACzF,CAAC;QACF,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;YAC3B,cAAc,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO;YACxC,oBAAoB,EAAE,QAAQ,CAAC,OAAO,CAAC,aAAa;YACpD,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE;YAC7C,aAAa,EAAE,SAAS;YACxB,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS;gBACjD,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,gBAAgB,EAAE,QAAQ,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAC5D,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,mBAAmB,KAAK,SAAS;gBACpD,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,mBAAmB,EAAE,QAAQ,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC;SACnE,CAAC;KACH,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;AACnF,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,OAAsB,EACtB,OAAqB,EACrB,QAAa,EACb,IAAuC;IAEvC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;IAC7C,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QAClE,IAAI,CAAC,CAAC,cAAc,IAAI,OAAO,CAAC;YAAE,OAAO,OAAO,CAAC;QACjD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,GAAG,MAAM,EAAE,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QACtF,IAAI,OAAO,IAAI,eAAe,CAAC,QAAQ,IAAI,MAAM,GAAG,MAAM,GAAG,eAAe,CAAC,WAAW,EAAE,CAAC;YACzF,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC;QAC7D,CAAC;QACD,OAAO,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACnC,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;QACpB,MAAM,IAAI,MAAM,CAAC;IACnB,CAAC;AACH,CAAC;AAID,KAAK,UAAU,kBAAkB,CAC/B,OAAqB,EACrB,QAAa,EACb,IAAuC;IAEvC,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE;YACjC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,MAAM,EAAE,kBAAkB;aAC3B;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC1B,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,eAAe,CACvB,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;YACrD,CAAC,CAAC,yCAAyC,QAAQ,CAAC,MAAM,gFAAgF;YAC1I,CAAC,CAAC,mBAAmB,QAAQ,CAAC,MAAM,oEAAoE,EAC1G,aAAa,EACb,mBAAmB,CAAC,UAAU,CAC/B,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;QACvD,MAAM,KAAK,GAAG,IAAI,eAAe,CAC/B,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,+BAA+B,QAAQ,CAAC,MAAM,oBAAoB,EACrG,IAAI,EACJ,qBAAqB,CAAC,IAAI,CAAC;YACzB,CAAC,QAAQ,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAChE,CAAC;QACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvD,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;QACpF,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IACrF,CAAC;IACD,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;QACxE,sEAAsE;QACtE,MAAM,IAAI,eAAe,CACvB,6JAA6J,EAC7J,kBAAkB,EAClB,mBAAmB,CAAC,UAAU,CAC/B,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QACxD,MAAM,IAAI,eAAe,CACvB,4GAA4G,EAC5G,kBAAkB,EAClB,CAAC,CACF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC;AACvF,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3F,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,IACE,OAAO,OAAO,KAAK,QAAQ;QAC3B,OAAO,KAAK,IAAI;QAChB,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;QACtD,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,KAAK,UAAU,IAAI,OAAO,CAAC,OAAO,KAAK,MAAM,CAAC;QACzF,CAAC,CAAC,gBAAgB,IAAI,OAAO,CAAC,IAAI,OAAO,CAAC,cAAc,KAAK,+BAA+B,EAC5F,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,SAAS,GAAG,YAAY,IAAI,OAAO,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ;QAC/E,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACjD,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;QAC5C,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,MAAM,GAAG,oBAAoB,IAAI,OAAO,IAAI,OAAO,OAAO,CAAC,kBAAkB,KAAK,QAAQ;QAC5F,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC;QAC1D,CAAC,CAAC,OAAO,CAAC,kBAAkB;QAC5B,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,KAAK,GAAG,uBAAuB,IAAI,OAAO,IAAI,OAAO,OAAO,CAAC,qBAAqB,KAAK,QAAQ;QACnG,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,qBAAqB,EAAE,4BAA4B,CAAC;QACxE,CAAC,CAAC,EAAE,CAAC;IACP,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,aAAa,EAAE,OAAO,CAAC,cAAc;QACrC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;QACjD,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC;QAC7D,GAAG,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC;KACxD,CAAC,CAAC;AACL,CAAC;AAED,6EAA6E;AAC7E,SAAS,cAAc,CAAC,OAA2B;IACjD,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC5C,MAAM,QAAQ,GAAG,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;IACxD,OAAO,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;AAChD,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,YAAY,CAAC,MAAqB,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IAC1E,IAAI,IAAI,GAAG,eAAe,CAAC,aAAa,CAAC;IACzC,MAAM,KAAK,GAAG,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACnC,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;IAC/B,CAAC;SAAM,IAAI,KAAK,KAAK,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC9D,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC;IACjC,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,kEAAkE;AAClE,SAAS,iBAAiB,CAAC,OAA2B;IACpD,MAAM,KAAK,GAAG,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACpC,OAAO,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1D,CAAC"}

package/dist/src/entry.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=entry.d.ts.map

package/dist/src/entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entry.d.ts","sourceRoot":"","sources":["../../src/entry.ts"],"names":[],"mappings":""}

package/dist/src/entry.js

@@ -0,0 +1,14 @@
+#!/usr/bin/env node
+// The command's entry point. It checks the Node.js version before loading
+// the rest of the observer, which an older Node.js may not be able to load.
+import { nodeVersionProblem } from "./node-version.js";
+const problem = nodeVersionProblem(process.versions.node);
+if (problem === undefined) {
+    const { run } = await import("./cli.js");
+    process.exitCode = await run(process.argv.slice(2));
+}
+else {
+    process.stderr.write(`${problem}\n`);
+    process.exitCode = 1;
+}
+//# sourceMappingURL=entry.js.map

package/dist/src/entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entry.js","sourceRoot":"","sources":["../../src/entry.ts"],"names":[],"mappings":";AAEA,0EAA0E;AAC1E,4EAA4E;AAC5E,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEvD,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC1D,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;IAC1B,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;IACzC,OAAO,CAAC,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC;KAAM,CAAC;IACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;IACrC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC"}

package/dist/src/event-queue.d.ts

@@ -7,16 +7,24 @@ export type QueueMetrics = Readonly<{
     acknowledged: bigint;
     oldestSequence?: bigint;
     latestSequence?: bigint;
+    /** Stored size of the queued events, for a queue with a byte budget. */
+    bytes?: number;
+    /** The byte budget. A queue at its budget refuses new events. */
+    byteCapacity?: number;
 }>;
+/** Whether a queue still has room by bytes for another collection pass. */
+export declare function hasByteHeadroom(metrics: QueueMetrics): boolean;
 export type QueuedEvent<T> = Readonly<{
     value: T;
     sequence: bigint;
     coalesceKey?: string;
+    /** Stored size of the event, when the queue keeps a byte budget. */
+    bytes?: number;
 }>;
 export declare class BoundedEventQueue<T> {
     #private;
     constructor(capacity?: number);
-    enqueue(value: T, sequence: bigint, coalesceKey?: string): void;
+    enqueue(value: T, sequence: bigint, coalesceKey?: string, bytes?: number): void;
     canEnqueue(coalesceKey?: string): boolean;
     acknowledge(throughSequence: bigint): void;
     discard(sequence: bigint): boolean;
@@ -25,6 +33,10 @@ export declare class BoundedEventQueue<T> {
     entries(): readonly QueuedEvent<T>[];
     replacePending(replace: (value: T) => T): void;
     protected replaceState(source: BoundedEventQueue<T>): void;
+    /** Stored size of the queued events. */
+    protected queuedBytes(): number;
+    /** Replace the stored sizes of the queued events, oldest first. */
+    protected reweigh(bytes: readonly number[]): void;
     latestSequence(): bigint | undefined;
     pendingAfter(sequence: bigint, limit?: number): readonly T[];
     metrics(): QueueMetrics;

package/dist/src/event-queue.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"event-queue.d.ts","sourceRoot":"","sources":["../../src/event-queue.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,YAAY,GAAG,QAAQ,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC,CAAC;AAEH,MAAM,MAAM,WAAW,CAAC,CAAC,IAAI,QAAQ,CAAC;IACpC,KAAK,EAAE,CAAC,CAAC;IACT,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC,CAAC;AAEH,qBAAa,iBAAiB,CAAC,CAAC;;gBAOlB,QAAQ,SAAO;IAO3B,OAAO,CACL,KAAK,EAAE,CAAC,EACR,QAAQ,EAAE,MAAM,EAChB,WAAW,CAAC,EAAE,MAAM,GACnB,IAAI;IA0BP,UAAU,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO;IAQzC,WAAW,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI;IAQ1C,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAUlC,qBAAqB,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI;IAUpD,OAAO,IAAI,SAAS,CAAC,EAAE;IAIvB,OAAO,IAAI,SAAS,WAAW,CAAC,CAAC,CAAC,EAAE;IAIpC,cAAc,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,IAAI;IAO9C,SAAS,CAAC,YAAY,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC,GAAG,IAAI;IAU1D,cAAc,IAAI,MAAM,GAAG,SAAS;IAUpC,YAAY,CACV,QAAQ,EAAE,MAAM,EAChB,KAAK,SAAiB,GACrB,SAAS,CAAC,EAAE;IAUf,OAAO,IAAI,YAAY;CA4BxB"}
+{"version":3,"file":"event-queue.d.ts","sourceRoot":"","sources":["../../src/event-queue.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,YAAY,GAAG,QAAQ,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,wEAAwE;IACxE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iEAAiE;IACjE,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC,CAAC;AAUH,2EAA2E;AAC3E,wBAAgB,eAAe,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAM9D;AAED,MAAM,MAAM,WAAW,CAAC,CAAC,IAAI,QAAQ,CAAC;IACpC,KAAK,EAAE,CAAC,CAAC;IACT,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oEAAoE;IACpE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC,CAAC;AAEH,qBAAa,iBAAiB,CAAC,CAAC;;gBAelB,QAAQ,SAAO;IAO3B,OAAO,CACL,KAAK,EAAE,CAAC,EACR,QAAQ,EAAE,MAAM,EAChB,WAAW,CAAC,EAAE,MAAM,EACpB,KAAK,SAAI,GACR,IAAI;IAuCP,UAAU,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO;IASzC,WAAW,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI;IAM1C,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAWlC,qBAAqB,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI;IAQpD,OAAO,IAAI,SAAS,CAAC,EAAE;IAIvB,OAAO,IAAI,SAAS,WAAW,CAAC,CAAC,CAAC,EAAE;IAMpC,cAAc,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,IAAI;IAQ9C,SAAS,CAAC,YAAY,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC,GAAG,IAAI;IAc1D,wCAAwC;IACxC,SAAS,CAAC,WAAW,IAAI,MAAM;IAI/B,mEAAmE;IACnE,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI;IAiBjD,cAAc,IAAI,MAAM,GAAG,SAAS;IAIpC,YAAY,CACV,QAAQ,EAAE,MAAM,EAChB,KAAK,SAAiB,GACrB,SAAS,CAAC,EAAE;IAUf,OAAO,IAAI,YAAY;CA2DxB"}