@pome-sh/cli 0.11.0 → 0.13.0

package/node_modules/@pome-sh/twin-stripe/node_modules/@pome-sh/sdk/dist/recorder.js

@@ -1,368 +0,0 @@
-// SPDX-License-Identifier: Apache-2.0
-// Twin-core recorder (F-681 / F-720). Home: `packages/sdk/src/recorder.ts`
-// (`@pome-sh/sdk`); all first-party twins and the CLI harness consume it.
-// In-memory recorder + `handle()` helper. `handle({mutation}, fn)` wraps a
-// Hono handler so every wrapped route emits a `RecorderEvent` matching
-// `recording-spec.md` v1.0:
-//   - `latency_ms` boundary: start = Date.now() before request body parse,
-//     end = Date.now() immediately before c.json() writes the response.
-//   - `state_mutation` = the declared route/tool mutation flag.
-//   - `error` = response_body.message when status >= 400, null otherwise.
-//   - Memory is bounded by session timeout × max-rps.
-// ── Write-through contract (F-720) ──────────────────────────────────────────
-// Acceptance: an event is *accepted* once `RecorderStore.record()` returns.
-// Heap stores retain it in memory; durable stores queue it for append.
-// `flush()` / `close()` are the durability barrier; `record()` is not fsync.
-// Recording pipeline: optional `recordingProjection` (twin-supplied) runs
-// first, then `createRecorderHandle` redacts *before* every `store.record()`
-// call — including custom stores and direct `recorder.record()` — so no
-// store ever sees unredacted secrets. Stores must not re-emit raw bodies.
-// Persisted row shape (F-698): durable stores write one redacted
-// `TwinHttpEvent` NDJSON line per accepted event (shared-types
-// `twinHttpEventSchema`) so on-disk `events.jsonl` matches the uploaded
-// raw-trace byte shape. The in-memory mirror / `GET /_pome/events` still
-// exposes legacy `RecorderEvent` rows.
-// `flush()`: optional. When present, resolves after every accepted event is
-// durable on the store's backing medium (fsync for file-backed). In-memory
-// stores may omit it (no-op if called via a handle that forwards). Callers
-// that need crash-bounded loss (≤ in-flight event) must await `flush()`
-// before relying on the on-disk tape, or use a store that fsyncs on each
-// `record()` (F-698 production default).
-// `close()`: optional. When present, flushes pending writes, releases the
-// backing resource, and is idempotent. After `close()`, further `record()`
-// calls are undefined (stores should throw or no-op). Callers must await
-// `close()` (or at least `flush()`) before upload/finalize so every accepted
-// write has either landed on disk or surfaced as a flush/close error.
-// Bounded stores (`maxEvents`): the cap applies only to the in-memory mirror
-// used by `events()` / `GET /_pome/events` (memory pressure). The durable
-// NDJSON tape is append-only and retains every accepted write — including
-// rows later dropped from the heap mirror — so crash-safe upload reads the
-// tape, not `events()`.
-// Default runtime behavior: `createRecorderStore()` remains heap-only.
-// Set `POME_RECORDER_EVENTS_PATH` (or pass `createFileBackedRecorderStore`)
-// for durable write-through; twin boot resolves via `resolveRecorderStore()`.
-import { randomUUID } from "node:crypto";
-import { closeSync, createWriteStream, fsync, mkdirSync, openSync, } from "node:fs";
-import { dirname } from "node:path";
-import { envelopeFor } from "./errors.js";
-import { redactEvent } from "./redaction.js";
-export function createRecorderStore(options = {}) {
-    const items = [];
-    const cap = options.maxEvents !== undefined ? Math.max(1, options.maxEvents) : undefined;
-    let droppedCount = 0;
-    return {
-        record(event) {
-            items.push(event);
-            if (cap !== undefined) {
-                while (items.length > cap) {
-                    items.shift();
-                    droppedCount += 1;
-                }
-            }
-        },
-        events() {
-            return [...items];
-        },
-        count() {
-            return items.length;
-        },
-        dropped() {
-            return droppedCount;
-        },
-        async flush() {
-            // Heap-only: accepted === durable for this store.
-        },
-        async close() {
-            // No backing resource.
-        },
-    };
-}
-/**
- * Env key for the durable recorder tape. When set, twin boot paths and the
- * self-host harness use `createFileBackedRecorderStore` instead of heap-only.
- * Architecture (F-698 / §9 Q3): recorder *transport* lives in twin-core
- * (`packages/sdk`); twins inherit durability by reading this env.
- */
-export const POME_RECORDER_EVENTS_PATH = "POME_RECORDER_EVENTS_PATH";
-/**
- * Wrap a legacy `RecorderEvent` into the unified `TwinHttpEvent` NDJSON row
- * shape used by uploaded `events.jsonl` (FDRS-398). Pass-through only when
- * `kind` is already `"TwinHttpEvent"`; any other kind is re-wrapped so the
- * durable tape never persists a mismatched discriminator. Disk rows from the
- * durable store use this shape so finalize/upload does not need a second wrap
- * for crash-streamed events.
- */
-export function toTwinHttpEventRow(event) {
-    const maybeKind = event.kind;
-    if (maybeKind === "TwinHttpEvent") {
-        const existing = event;
-        return {
-            ...existing,
-            event_id: typeof existing.event_id === "string" ? existing.event_id : event.request_id,
-            parent_id: null,
-        };
-    }
-    return {
-        ...event,
-        kind: "TwinHttpEvent",
-        event_id: event.request_id,
-        parent_id: null,
-    };
-}
-/**
- * Durable recorder store (F-720 contract / F-698 implementation).
- *
- * Keeps an in-memory mirror of legacy `RecorderEvent` rows for `events()` /
- * `GET /_pome/events` (unchanged API), and appends each accepted event as a
- * `TwinHttpEvent` NDJSON line so on-disk `events.jsonl` matches the uploaded
- * raw-trace byte shape. `flush()` drains pending writes and rethrows the
- * first append/fsync failure; `fsync` (default true) bounds crash loss to
- * the in-flight event. `maxEvents` caps only the heap mirror — the NDJSON
- * tape stays append-only.
- */
-export function createFileBackedRecorderStore(options) {
-    const items = [];
-    const cap = options.maxEvents !== undefined ? Math.max(1, options.maxEvents) : undefined;
-    let droppedCount = 0;
-    let closed = false;
-    const doFsync = options.fsync !== false;
-    mkdirSync(dirname(options.path), { recursive: true });
-    // Open the fd synchronously so fsync never races createWriteStream's
-    // async open (which can leave `writer.fd` undefined and silently skip
-    // durability on the first write).
-    const fd = openSync(options.path, "a");
-    const writer = createWriteStream(options.path, { fd, autoClose: false });
-    const pending = new Set();
-    // First append/fsync failure is retained so a later flush()/close() still
-    // reports it even after the rejected promise leaves `pending`.
-    let writeFailure = null;
-    function enqueueWrite(line) {
-        const write = new Promise((resolve, reject) => {
-            writer.write(line, (err) => {
-                if (err) {
-                    reject(err);
-                    return;
-                }
-                if (!doFsync) {
-                    resolve();
-                    return;
-                }
-                fsync(fd, (fsyncErr) => (fsyncErr ? reject(fsyncErr) : resolve()));
-            });
-        });
-        pending.add(write);
-        // Handle rejection here so a failed write before flush() is not an
-        // unhandled rejection, and so flush() can still surface the error after
-        // the promise has left `pending`.
-        void write.then(() => {
-            pending.delete(write);
-        }, (err) => {
-            pending.delete(write);
-            if (!writeFailure) {
-                writeFailure = err instanceof Error ? err : new Error(String(err));
-            }
-        });
-    }
-    async function flush() {
-        while (pending.size > 0) {
-            // allSettled: individual failures are already captured in writeFailure;
-            // awaiting a rejected member of `pending` must not short-circuit drain.
-            await Promise.allSettled([...pending]);
-        }
-        if (writeFailure) {
-            const err = writeFailure;
-            writeFailure = null;
-            throw err;
-        }
-    }
-    return {
-        record(event) {
-            if (closed) {
-                throw new Error("RecorderStore.record() after close()");
-            }
-            items.push(event);
-            if (cap !== undefined) {
-                while (items.length > cap) {
-                    items.shift();
-                    droppedCount += 1;
-                }
-            }
-            enqueueWrite(`${JSON.stringify(toTwinHttpEventRow(event))}\n`);
-        },
-        events() {
-            return [...items];
-        },
-        count() {
-            return items.length;
-        },
-        dropped() {
-            return droppedCount;
-        },
-        flush,
-        async close() {
-            if (closed) {
-                await flush();
-                return;
-            }
-            closed = true;
-            await flush();
-            await new Promise((resolve, reject) => {
-                writer.end((err) => {
-                    try {
-                        closeSync(fd);
-                    }
-                    catch (closeErr) {
-                        reject(err ?? closeErr);
-                        return;
-                    }
-                    if (err)
-                        reject(err);
-                    else
-                        resolve();
-                });
-            });
-        },
-    };
-}
-/**
- * Resolve the recorder store for a twin boot: durable file-backed when
- * `POME_RECORDER_EVENTS_PATH` is set, otherwise the in-memory default.
- */
-export function resolveRecorderStore(options = {}) {
-    const path = process.env[POME_RECORDER_EVENTS_PATH]?.trim();
-    if (path) {
-        return createFileBackedRecorderStore({ ...options, path });
-    }
-    return createRecorderStore(options);
-}
-export function createRecorderHandle(options) {
-    const store = options.store ?? createRecorderStore();
-    const errorEnvelope = options.errorEnvelope ?? envelopeFor;
-    const project = options.recordingProjection;
-    function accept(event) {
-        // Projection (optional) → secret redaction (always). Order is load-bearing:
-        // Gmail replaces MIME/attachment bytes with digests before scrubbing.
-        store.record(redactEvent(project ? project(event) : event));
-    }
-    function emit(c, started, requestBody, result, mutation, fidelity, error) {
-        const requestId = `req_${randomUUID()}`;
-        // FDRS-402 / FDRS-653 stamping (F-683: engine parity with the per-twin
-        // recorders it replaces): correlation_id persists the adapter's
-        // x-pome-correlation-id (falling back to the request id), and the task
-        // author's x-pome-scenario-step-id lands as the canonical task_step_id
-        // plus the legacy scenario_step_id key (frozen v1 trace format —
-        // preserve semantics, tolerant readers accept either).
-        const stepId = c.req.header("x-pome-scenario-step-id") ?? null;
-        const correlationHeader = c.req.header("x-pome-correlation-id") ?? null;
-        // Redaction is unconditional at the engine layer (F-681 / F-720): every
-        // event that reaches any store — including custom stores — is already
-        // scrubbed. Optional recordingProjection runs immediately before that.
-        accept({
-            ts: new Date().toISOString(),
-            run_id: options.runId,
-            twin: options.twin,
-            request_id: requestId,
-            correlation_id: correlationHeader ?? requestId,
-            task_step_id: stepId,
-            scenario_step_id: stepId,
-            step_id: null,
-            // FDRS-402 adapter-rich path: only twins that pin `stampToolCallId`
-            // persist the header here (github); the default tape stamps null.
-            tool_call_id: options.stampToolCallId ? correlationHeader : null,
-            method: c.req.method,
-            path: new URL(c.req.url).pathname,
-            request_body: requestBody,
-            status: result.status,
-            response_body: result.body,
-            latency_ms: Date.now() - started,
-            fidelity,
-            state_mutation: mutation,
-            state_delta: result.delta ?? null,
-            error,
-        });
-    }
-    return {
-        record(event) {
-            accept(event);
-        },
-        events() {
-            return store.events();
-        },
-        count() {
-            return store.count?.() ?? store.events().length;
-        },
-        dropped() {
-            return store.dropped?.() ?? 0;
-        },
-        async flush() {
-            await store.flush?.();
-        },
-        async close() {
-            await store.close?.();
-        },
-        handle({ mutation, fidelity = "semantic", errorEnvelope: perCallEnvelope }, fn) {
-            const projectError = perCallEnvelope ?? errorEnvelope;
-            return async (c) => {
-                const started = Date.now();
-                let requestBody = null;
-                try {
-                    requestBody =
-                        c.req.method === "GET" || c.req.method === "HEAD"
-                            ? null
-                            : await readRequestJson(c);
-                    const result = await fn(c);
-                    const effectiveMutation = result.mutation ?? mutation;
-                    const errorMsg = result.status >= 400 ? extractMessage(result.body) ?? "request failed" : null;
-                    emit(c, started, requestBody, result, effectiveMutation, fidelity, errorMsg);
-                    return respondWith(c, result.status, result.body);
-                }
-                catch (caught) {
-                    const envelope = projectError(caught);
-                    // Failed routes never mutated state — record as state_mutation=false
-                    // regardless of the declared flag. Per recording-spec § state_mutation,
-                    // the field reflects whether the request *did* mutate state.
-                    const errMsg = extractMessage(envelope.body) ??
-                        (caught instanceof Error ? caught.message : "request failed");
-                    emit(c, started, requestBody, { status: envelope.status, body: envelope.body }, false, fidelity, errMsg);
-                    return respondWith(c, envelope.status, envelope.body);
-                }
-            };
-        },
-    };
-}
-// The Response constructor forbids a body on null-body statuses (204/205/
-// 304) — `c.json(null, 204)` throws and surfaces as a 500. github's frozen
-// surface answers deletes and the collaborator-membership check with a bare
-// 204 (F-682), so those statuses return an empty body.
-function respondWith(c, status, body) {
-    if (status === 204 || status === 205 || status === 304) {
-        return c.body(null, status);
-    }
-    return c.json(body, status);
-}
-// `clone()` throws synchronously once the body stream is disturbed — e.g.
-// after the form token resolver's parseBody() read a form-encoded POST
-// (F-683). A consumed or non-JSON body records as null, never a 500.
-async function readRequestJson(c) {
-    try {
-        return await c.req.raw.clone().json();
-    }
-    catch {
-        return null;
-    }
-}
-function extractMessage(body) {
-    if (!body || typeof body !== "object")
-        return undefined;
-    const record = body;
-    if (typeof record.message === "string")
-        return record.message;
-    // Gmail (and other Google-style) envelopes nest under `{ error: { message } }`.
-    if (record.error && typeof record.error === "object") {
-        const nested = record.error.message;
-        if (typeof nested === "string")
-            return nested;
-    }
-    return undefined;
-}
-//# sourceMappingURL=recorder.js.map

package/node_modules/@pome-sh/twin-stripe/node_modules/@pome-sh/sdk/dist/recorder.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"recorder.js","sourceRoot":"","sources":["../src/recorder.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,2EAA2E;AAC3E,0EAA0E;AAC1E,2EAA2E;AAC3E,uEAAuE;AACvE,4BAA4B;AAC5B,2EAA2E;AAC3E,wEAAwE;AACxE,gEAAgE;AAChE,0EAA0E;AAC1E,sDAAsD;AACtD,+EAA+E;AAC/E,4EAA4E;AAC5E,uEAAuE;AACvE,6EAA6E;AAC7E,0EAA0E;AAC1E,6EAA6E;AAC7E,wEAAwE;AACxE,0EAA0E;AAC1E,iEAAiE;AACjE,+DAA+D;AAC/D,wEAAwE;AACxE,yEAAyE;AACzE,uCAAuC;AACvC,4EAA4E;AAC5E,2EAA2E;AAC3E,2EAA2E;AAC3E,wEAAwE;AACxE,yEAAyE;AACzE,yCAAyC;AACzC,0EAA0E;AAC1E,2EAA2E;AAC3E,yEAAyE;AACzE,6EAA6E;AAC7E,sEAAsE;AACtE,6EAA6E;AAC7E,0EAA0E;AAC1E,0EAA0E;AAC1E,2EAA2E;AAC3E,wBAAwB;AACxB,uEAAuE;AACvE,4EAA4E;AAC5E,8EAA8E;AAE9E,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,SAAS,EACT,iBAAiB,EACjB,KAAK,EACL,SAAS,EACT,QAAQ,GAET,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIpC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AA6C7C,MAAM,UAAU,mBAAmB,CAAC,UAAgC,EAAE;IACpE,MAAM,KAAK,GAAoB,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzF,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,OAAO;QACL,MAAM,CAAC,KAAK;YACV,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,OAAO,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;oBAC1B,KAAK,CAAC,KAAK,EAAE,CAAC;oBACd,YAAY,IAAI,CAAC,CAAC;gBACpB,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM;YACJ,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;QACpB,CAAC;QACD,KAAK;YACH,OAAO,KAAK,CAAC,MAAM,CAAC;QACtB,CAAC;QACD,OAAO;YACL,OAAO,YAAY,CAAC;QACtB,CAAC;QACD,KAAK,CAAC,KAAK;YACT,kDAAkD;QACpD,CAAC;QACD,KAAK,CAAC,KAAK;YACT,uBAAuB;QACzB,CAAC;KACF,CAAC;AACJ,CAAC;AAeD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,2BAA2B,CAAC;AAErE;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAoB;IAEpB,MAAM,SAAS,GAAI,KAA4B,CAAC,IAAI,CAAC;IACrD,IAAI,SAAS,KAAK,eAAe,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,KAIhB,CAAC;QACF,OAAO;YACL,GAAG,QAAQ;YACX,QAAQ,EAAE,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU;YACtF,SAAS,EAAE,IAAI;SAChB,CAAC;IACJ,CAAC;IACD,OAAO;QACL,GAAG,KAAK;QACR,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,KAAK,CAAC,UAAU;QAC1B,SAAS,EAAE,IAAI;KAChB,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,6BAA6B,CAC3C,OAAuC;IAEvC,MAAM,KAAK,GAAoB,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzF,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC;IAExC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,qEAAqE;IACrE,sEAAsE;IACtE,kCAAkC;IAClC,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACvC,MAAM,MAAM,GAAgB,iBAAiB,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IACtF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAiB,CAAC;IACzC,0EAA0E;IAC1E,+DAA+D;IAC/D,IAAI,YAAY,GAAiB,IAAI,CAAC;IAEtC,SAAS,YAAY,CAAC,IAAY;QAChC,MAAM,KAAK,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAClD,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE;gBACzB,IAAI,GAAG,EAAE,CAAC;oBACR,MAAM,CAAC,GAAG,CAAC,CAAC;oBACZ,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO,EAAE,CAAC;oBACV,OAAO;gBACT,CAAC;gBACD,KAAK,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACrE,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnB,mEAAmE;QACnE,wEAAwE;QACxE,kCAAkC;QAClC,KAAK,KAAK,CAAC,IAAI,CACb,GAAG,EAAE;YACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC,EACD,CAAC,GAAY,EAAE,EAAE;YACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtB,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,YAAY,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACrE,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;IAED,KAAK,UAAU,KAAK;QAClB,OAAO,OAAO,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACxB,wEAAwE;YACxE,wEAAwE;YACxE,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,GAAG,GAAG,YAAY,CAAC;YACzB,YAAY,GAAG,IAAI,CAAC;YACpB,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM,CAAC,KAAK;YACV,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC1D,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,OAAO,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;oBAC1B,KAAK,CAAC,KAAK,EAAE,CAAC;oBACd,YAAY,IAAI,CAAC,CAAC;gBACpB,CAAC;YACH,CAAC;YACD,YAAY,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;QACjE,CAAC;QACD,MAAM;YACJ,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;QACpB,CAAC;QACD,KAAK;YACH,OAAO,KAAK,CAAC,MAAM,CAAC;QACtB,CAAC;QACD,OAAO;YACL,OAAO,YAAY,CAAC;QACtB,CAAC;QACD,KAAK;QACL,KAAK,CAAC,KAAK;YACT,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,KAAK,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YACD,MAAM,GAAG,IAAI,CAAC;YACd,MAAM,KAAK,EAAE,CAAC;YACd,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1C,MAAM,CAAC,GAAG,CAAC,CAAC,GAA6B,EAAE,EAAE;oBAC3C,IAAI,CAAC;wBACH,SAAS,CAAC,EAAE,CAAC,CAAC;oBAChB,CAAC;oBAAC,OAAO,QAAQ,EAAE,CAAC;wBAClB,MAAM,CAAC,GAAG,IAAK,QAAkB,CAAC,CAAC;wBACnC,OAAO;oBACT,CAAC;oBACD,IAAI,GAAG;wBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;wBAChB,OAAO,EAAE,CAAC;gBACjB,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,UAAgC,EAAE;IACrE,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,EAAE,IAAI,EAAE,CAAC;IAC5D,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,6BAA6B,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC;AACtC,CAAC;AA2BD,MAAM,UAAU,oBAAoB,CAAC,OAA8B;IACjE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,mBAAmB,EAAE,CAAC;IACrD,MAAM,aAAa,GAAoB,OAAO,CAAC,aAAa,IAAI,WAAW,CAAC;IAC5E,MAAM,OAAO,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAE5C,SAAS,MAAM,CAAC,KAAoB;QAClC,4EAA4E;QAC5E,sEAAsE;QACtE,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,SAAS,IAAI,CACX,CAAU,EACV,OAAe,EACf,WAAoB,EACpB,MAA6B,EAC7B,QAAiB,EACjB,QAAoC,EACpC,KAAoB;QAEpB,MAAM,SAAS,GAAG,OAAO,UAAU,EAAE,EAAE,CAAC;QACxC,uEAAuE;QACvE,gEAAgE;QAChE,uEAAuE;QACvE,uEAAuE;QACvE,iEAAiE;QACjE,uDAAuD;QACvD,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,yBAAyB,CAAC,IAAI,IAAI,CAAC;QAC/D,MAAM,iBAAiB,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,uBAAuB,CAAC,IAAI,IAAI,CAAC;QACxE,wEAAwE;QACxE,sEAAsE;QACtE,uEAAuE;QACvE,MAAM,CAAC;YACL,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,MAAM,EAAE,OAAO,CAAC,KAAK;YACrB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,UAAU,EAAE,SAAS;YACrB,cAAc,EAAE,iBAAiB,IAAI,SAAS;YAC9C,YAAY,EAAE,MAAM;YACpB,gBAAgB,EAAE,MAAM;YACxB,OAAO,EAAE,IAAI;YACb,oEAAoE;YACpE,kEAAkE;YAClE,YAAY,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI;YAChE,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM;YACpB,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ;YACjC,YAAY,EAAE,WAAW;YACzB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,aAAa,EAAE,MAAM,CAAC,IAAI;YAC1B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;YAChC,QAAQ;YACR,cAAc,EAAE,QAAQ;YACxB,WAAW,EAAE,MAAM,CAAC,KAAK,IAAI,IAAI;YACjC,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,MAAM,CAAC,KAAK;YACV,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC;QACD,MAAM;YACJ,OAAO,KAAK,CAAC,MAAM,EAAE,CAAC;QACxB,CAAC;QACD,KAAK;YACH,OAAO,KAAK,CAAC,KAAK,EAAE,EAAE,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC;QAClD,CAAC;QACD,OAAO;YACL,OAAO,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC;QAChC,CAAC;QACD,KAAK,CAAC,KAAK;YACT,MAAM,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QACxB,CAAC;QACD,KAAK,CAAC,KAAK;YACT,MAAM,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QACxB,CAAC;QACD,MAAM,CAAC,EAAE,QAAQ,EAAE,QAAQ,GAAG,UAAU,EAAE,aAAa,EAAE,eAAe,EAAE,EAAE,EAAE;YAC5E,MAAM,YAAY,GAAG,eAAe,IAAI,aAAa,CAAC;YACtD,OAAO,KAAK,EAAE,CAAC,EAAE,EAAE;gBACjB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC3B,IAAI,WAAW,GAAY,IAAI,CAAC;gBAChC,IAAI,CAAC;oBACH,WAAW;wBACT,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM;4BAC/C,CAAC,CAAC,IAAI;4BACN,CAAC,CAAC,MAAM,eAAe,CAAC,CAAC,CAAC,CAAC;oBAC/B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;oBAC3B,MAAM,iBAAiB,GAAG,MAAM,CAAC,QAAQ,IAAI,QAAQ,CAAC;oBACtD,MAAM,QAAQ,GACZ,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC;oBAChF,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,iBAAiB,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;oBAC7E,OAAO,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;gBACpD,CAAC;gBAAC,OAAO,MAAM,EAAE,CAAC;oBAChB,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;oBACtC,qEAAqE;oBACrE,wEAAwE;oBACxE,6DAA6D;oBAC7D,MAAM,MAAM,GACV,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC;wBAC7B,CAAC,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;oBAChE,IAAI,CACF,CAAC,EACD,OAAO,EACP,WAAW,EACX,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,EAChD,KAAK,EACL,QAAQ,EACR,MAAM,CACP,CAAC;oBACF,OAAO,WAAW,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACxD,CAAC;YACH,CAAC,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,2EAA2E;AAC3E,4EAA4E;AAC5E,uDAAuD;AACvD,SAAS,WAAW,CAAC,CAAU,EAAE,MAAc,EAAE,IAAa;IAC5D,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACvD,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,MAAe,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,CAAC,CAAC,IAAI,CAAC,IAAa,EAAE,MAAe,CAAC,CAAC;AAChD,CAAC;AAED,0EAA0E;AAC1E,uEAAuE;AACvE,qEAAqE;AACrE,KAAK,UAAU,eAAe,CAAC,CAAU;IACvC,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAAa;IACnC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACxD,MAAM,MAAM,GAAG,IAA8C,CAAC;IAC9D,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC;IAC9D,gFAAgF;IAChF,IAAI,MAAM,CAAC,KAAK,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrD,MAAM,MAAM,GAAI,MAAM,CAAC,KAA+B,CAAC,OAAO,CAAC;QAC/D,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC;IAChD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/node_modules/@pome-sh/twin-stripe/node_modules/@pome-sh/sdk/dist/redaction.d.ts

@@ -1 +0,0 @@
-export { redactEvent, redactSecrets } from "@pome-sh/shared-types/redaction";

package/node_modules/@pome-sh/twin-stripe/node_modules/@pome-sh/sdk/dist/redaction.js

@@ -1,3 +0,0 @@
-// SPDX-License-Identifier: Apache-2.0
-export { redactEvent, redactSecrets } from "@pome-sh/shared-types/redaction";
-//# sourceMappingURL=redaction.js.map

package/node_modules/@pome-sh/twin-stripe/node_modules/@pome-sh/sdk/dist/redaction.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"redaction.js","sourceRoot":"","sources":["../src/redaction.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC"}

package/node_modules/@pome-sh/twin-stripe/node_modules/@pome-sh/sdk/dist/server-helpers.d.ts

@@ -1,54 +0,0 @@
-import { type ToolSpec, type TwinDefinition } from "./index.js";
-export declare class TwinBootError extends Error {
-    constructor(message: string);
-}
-/** Engine-owned `/_pome/*` route names a twin's `pomeRoutes` may not shadow. */
-export declare const POME_CORE_ROUTE_NAMES: Set<string>;
-export declare function makeDeltaSink(): {
-    report(d: import("@pome-sh/shared-types").RecorderEvent["state_delta"]): void;
-    value(): {
-        before: Record<string, unknown> | null;
-        after: Record<string, unknown> | null;
-    } | null;
-};
-/** Hostnames the boot guard treats as loopback binds. */
-export declare function isLoopbackHost(value: string): boolean;
-/**
- * F-708: self-generate `TWIN_AUTH_SECRET` on first boot. An env-injected
- * secret always wins (pome-cloud injects per-tenant secrets — that contract
- * is untouched), and loopback binds keep the dev-fallback path. Otherwise
- * the secret persisted at the compose-era contract location
- * `.pome-data/<twin>/secret` (cwd-relative; `POME_TWIN_DATA_DIR` overrides
- * the directory) is reused, or a fresh 32-byte hex secret is generated,
- * persisted there, and printed once to stdout so the operator can mint JWTs.
- *
- * The resolved secret lands in `process.env.TWIN_AUTH_SECRET`, which is
- * process-global by design: the engine's auth (`resolveAuthSecret`) reads
- * the env, so one process serves one secret — the frozen boot contract is
- * one twin per process, and a multi-twin process shares the first secret.
- */
-export declare function ensureTwinAuthSecret(twin: string, host: string): void;
-export declare function shadowedPrefix(routePath: string): string | null;
-export declare function assertUniqueToolNames<TDomain>(tools: ReadonlyArray<ToolSpec<TDomain>>, twinId: string): void;
-export declare function findTool<TDb, TSeed, TDomain>(definition: TwinDefinition<TDb, TSeed, TDomain>, name: string): ToolSpec<TDomain>;
-export declare function readJson(req: Request): Promise<unknown>;
-/**
- * Convenience helper for `recorder.handle` inner functions. Returns a
- * 200 response with the supplied `mutation` flag (default: false). Mirrors
- * `packages/twin-github/src/app.ts:ok`.
- */
-export declare function ok(body: unknown, mutation?: boolean): {
-    status: 200;
-    body: unknown;
-    mutation: boolean;
-};
-/**
- * Convenience helper for `recorder.handle` inner functions. Returns a
- * 201 response with `mutation: true`. Mirrors
- * `packages/twin-github/src/app.ts:created`.
- */
-export declare function created(body: unknown): {
-    status: 201;
-    body: unknown;
-    mutation: true;
-};

package/node_modules/@pome-sh/twin-stripe/node_modules/@pome-sh/sdk/dist/server-helpers.js

@@ -1,181 +0,0 @@
-// SPDX-License-Identifier: Apache-2.0
-//
-// Internal helpers for `@pome-sh/sdk/server` (`createApp`/`serve`). Split
-// out of server.ts (F-685) purely for module-size hygiene; everything a twin
-// may import (TwinBootError, isLoopbackHost) is re-exported from server.ts,
-// which stays the only public entry.
-import { randomBytes } from "node:crypto";
-import { mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
-import { join } from "node:path";
-import { RESERVED_SESSION_PREFIXES } from "./index.js";
-import { UnknownToolError } from "./errors.js";
-export class TwinBootError extends Error {
-    constructor(message) {
-        super(message);
-        this.name = "TwinBootError";
-    }
-}
-/** Engine-owned `/_pome/*` route names a twin's `pomeRoutes` may not shadow. */
-export const POME_CORE_ROUTE_NAMES = new Set(["health", "state", "events"]);
-export function makeDeltaSink() {
-    let delta = null;
-    return {
-        report(d) {
-            delta = d;
-        },
-        value() {
-            return delta;
-        },
-    };
-}
-/** Hostnames the boot guard treats as loopback binds. */
-export function isLoopbackHost(value) {
-    return value === "127.0.0.1" || value === "::1" || value === "localhost";
-}
-/**
- * F-708: self-generate `TWIN_AUTH_SECRET` on first boot. An env-injected
- * secret always wins (pome-cloud injects per-tenant secrets — that contract
- * is untouched), and loopback binds keep the dev-fallback path. Otherwise
- * the secret persisted at the compose-era contract location
- * `.pome-data/<twin>/secret` (cwd-relative; `POME_TWIN_DATA_DIR` overrides
- * the directory) is reused, or a fresh 32-byte hex secret is generated,
- * persisted there, and printed once to stdout so the operator can mint JWTs.
- *
- * The resolved secret lands in `process.env.TWIN_AUTH_SECRET`, which is
- * process-global by design: the engine's auth (`resolveAuthSecret`) reads
- * the env, so one process serves one secret — the frozen boot contract is
- * one twin per process, and a multi-twin process shares the first secret.
- */
-export function ensureTwinAuthSecret(twin, host) {
-    if (process.env.TWIN_AUTH_SECRET)
-        return;
-    if (isLoopbackHost(host))
-        return;
-    const dataDir = process.env.POME_TWIN_DATA_DIR || join(".pome-data", twin);
-    const secretPath = join(dataDir, "secret");
-    try {
-        const persisted = readSecretFile(secretPath);
-        if (persisted) {
-            process.env.TWIN_AUTH_SECRET = persisted;
-            console.log(`[twin-${twin}] TWIN_AUTH_SECRET not set — using the persisted secret from ${secretPath}`);
-            return;
-        }
-        const secret = randomBytes(32).toString("hex");
-        mkdirSync(dataDir, { recursive: true });
-        try {
-            // Compose-era file format: hex secret + trailing newline, owner-only.
-            // "wx" never clobbers a secret written by a concurrent first boot.
-            writeFileSync(secretPath, `${secret}\n`, { mode: 0o600, flag: "wx" });
-        }
-        catch (err) {
-            if (err.code !== "EEXIST")
-                throw err;
-            const winner = readSecretFile(secretPath);
-            if (winner) {
-                process.env.TWIN_AUTH_SECRET = winner;
-                console.log(`[twin-${twin}] TWIN_AUTH_SECRET not set — using the persisted secret from ${secretPath}`);
-                return;
-            }
-            // A blank file is an aborted earlier write: remove it and retry the
-            // exclusive write, so a concurrent booter losing this second race
-            // adopts the winner's secret instead of overwriting it.
-            rmSync(secretPath, { force: true });
-            try {
-                writeFileSync(secretPath, `${secret}\n`, { mode: 0o600, flag: "wx" });
-            }
-            catch (err2) {
-                if (err2.code !== "EEXIST")
-                    throw err2;
-                const late = readSecretFile(secretPath);
-                if (!late)
-                    throw err2;
-                process.env.TWIN_AUTH_SECRET = late;
-                console.log(`[twin-${twin}] TWIN_AUTH_SECRET not set — using the persisted secret from ${secretPath}`);
-                return;
-            }
-        }
-        process.env.TWIN_AUTH_SECRET = secret;
-        console.log(`[twin-${twin}] TWIN_AUTH_SECRET not set — generated ${secret} (persisted to ${secretPath}; subsequent boots reuse it, an env-injected TWIN_AUTH_SECRET overrides it)`);
-    }
-    catch (err) {
-        if (err instanceof TwinBootError)
-            throw err;
-        throw new TwinBootError(`TWIN_AUTH_SECRET is not set and self-generating one at ${secretPath} failed: ${err.message}`);
-    }
-}
-/** The persisted secret, trimmed; undefined when absent or blank. */
-function readSecretFile(secretPath) {
-    let raw;
-    try {
-        raw = readFileSync(secretPath, "utf8");
-    }
-    catch (err) {
-        if (err.code === "ENOENT")
-            return undefined;
-        throw err;
-    }
-    const trimmed = raw.trim();
-    if (trimmed.length === 0)
-        return undefined;
-    // The compose-era contract documents >= 32 chars. A shorter file (hand
-    // edit, truncation) must fail the boot loudly — never silently serve a
-    // weak HS256 key, and never silently regenerate over operator content.
-    if (trimmed.length < 32) {
-        throw new TwinBootError(`TWIN_AUTH_SECRET is not set and the persisted secret at ${secretPath} is shorter than 32 chars — fix or delete the file, or inject TWIN_AUTH_SECRET.`);
-    }
-    return trimmed;
-}
-export function shadowedPrefix(routePath) {
-    for (const prefix of RESERVED_SESSION_PREFIXES) {
-        if (routePath === prefix || routePath.startsWith(`${prefix}/`))
-            return prefix;
-    }
-    return null;
-}
-export function assertUniqueToolNames(tools, twinId) {
-    const seen = new Set();
-    for (const tool of tools) {
-        if (seen.has(tool.name)) {
-            throw new TwinBootError(`Twin "${twinId}" has duplicate tool name: ${tool.name}`);
-        }
-        seen.add(tool.name);
-    }
-}
-export function findTool(definition, name) {
-    const tool = definition.tools.find((t) => t.name === name);
-    if (!tool) {
-        throw new UnknownToolError(name);
-    }
-    return tool;
-}
-export async function readJson(req) {
-    try {
-        const cloned = req.clone();
-        const text = await cloned.text();
-        if (!text)
-            return null;
-        return JSON.parse(text);
-    }
-    catch (err) {
-        if (err instanceof SyntaxError)
-            throw err;
-        return null;
-    }
-}
-/**
- * Convenience helper for `recorder.handle` inner functions. Returns a
- * 200 response with the supplied `mutation` flag (default: false). Mirrors
- * `packages/twin-github/src/app.ts:ok`.
- */
-export function ok(body, mutation = false) {
-    return { status: 200, body, mutation };
-}
-/**
- * Convenience helper for `recorder.handle` inner functions. Returns a
- * 201 response with `mutation: true`. Mirrors
- * `packages/twin-github/src/app.ts:created`.
- */
-export function created(body) {
-    return { status: 201, body, mutation: true };
-}
-//# sourceMappingURL=server-helpers.js.map

package/node_modules/@pome-sh/twin-stripe/node_modules/@pome-sh/sdk/dist/server-helpers.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"server-helpers.js","sourceRoot":"","sources":["../src/server-helpers.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,0EAA0E;AAC1E,6EAA6E;AAC7E,4EAA4E;AAC5E,qCAAqC;AAErC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACzE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,yBAAyB,EAAsC,MAAM,YAAY,CAAC;AAC3F,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C,MAAM,OAAO,aAAc,SAAQ,KAAK;IACtC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAED,gFAAgF;AAChF,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAE5E,MAAM,UAAU,aAAa;IAC3B,IAAI,KAAK,GAAiE,IAAI,CAAC;IAC/E,OAAO;QACL,MAAM,CAAC,CAA+D;YACpE,KAAK,GAAG,CAAC,CAAC;QACZ,CAAC;QACD,KAAK;YACH,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,OAAO,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,WAAW,CAAC;AAC3E,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,IAAY;IAC7D,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB;QAAE,OAAO;IACzC,IAAI,cAAc,CAAC,IAAI,CAAC;QAAE,OAAO;IAEjC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IAC3E,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAE3C,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;QAC7C,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,SAAS,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,gEAAgE,UAAU,EAAE,CAAC,CAAC;YACvG,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC/C,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC;YACH,sEAAsE;YACtE,mEAAmE;YACnE,aAAa,CAAC,UAAU,EAAE,GAAG,MAAM,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACxE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,GAAG,CAAC;YAChE,MAAM,MAAM,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;YAC1C,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,MAAM,CAAC;gBACtC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,gEAAgE,UAAU,EAAE,CAAC,CAAC;gBACvG,OAAO;YACT,CAAC;YACD,oEAAoE;YACpE,kEAAkE;YAClE,wDAAwD;YACxD,MAAM,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACpC,IAAI,CAAC;gBACH,aAAa,CAAC,UAAU,EAAE,GAAG,MAAM,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACxE,CAAC;YAAC,OAAO,IAAI,EAAE,CAAC;gBACd,IAAK,IAA8B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,IAAI,CAAC;gBAClE,MAAM,IAAI,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;gBACxC,IAAI,CAAC,IAAI;oBAAE,MAAM,IAAI,CAAC;gBACtB,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,IAAI,CAAC;gBACpC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,gEAAgE,UAAU,EAAE,CAAC,CAAC;gBACvG,OAAO;YACT,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,MAAM,CAAC;QACtC,OAAO,CAAC,GAAG,CACT,SAAS,IAAI,0CAA0C,MAAM,kBAAkB,UAAU,6EAA6E,CACvK,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,aAAa;YAAE,MAAM,GAAG,CAAC;QAC5C,MAAM,IAAI,aAAa,CACrB,0DAA0D,UAAU,YAAa,GAAa,CAAC,OAAO,EAAE,CACzG,CAAC;IACJ,CAAC;AACH,CAAC;AAED,qEAAqE;AACrE,SAAS,cAAc,CAAC,UAAkB;IACxC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACvE,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,uEAAuE;IACvE,uEAAuE;IACvE,uEAAuE;IACvE,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,aAAa,CACrB,2DAA2D,UAAU,iFAAiF,CACvJ,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC9C,KAAK,MAAM,MAAM,IAAI,yBAAyB,EAAE,CAAC;QAC/C,IAAI,SAAS,KAAK,MAAM,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC;YAAE,OAAO,MAAM,CAAC;IAChF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,KAAuC,EACvC,MAAc;IAEd,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,aAAa,CAAC,SAAS,MAAM,8BAA8B,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,QAAQ,CACtB,UAA+C,EAC/C,IAAY;IAEZ,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC3D,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,GAAY;IACzC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,WAAW;YAAE,MAAM,GAAG,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,EAAE,CAAC,IAAa,EAAE,QAAQ,GAAG,KAAK;IAChD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AACzC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,OAAO,CAAC,IAAa;IACnC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AAC/C,CAAC"}