@pome-sh/cli 0.4.0 → 0.7.0

package/node_modules/@pome-sh/twin-slack/node_modules/@pome-sh/sdk/dist/server.d.ts

@@ -1,46 +0,0 @@
-import { Hono } from "hono";
-import { type TwinDefinition } from "./index.js";
-import { type RecorderStore } from "./recorder.js";
-export { TwinBootError, ensureTwinAuthSecret, isLoopbackHost, created, ok } from "./server-helpers.js";
-export { createRecorderHandle, createRecorderStore, createFileBackedRecorderStore, resolveRecorderStore, toTwinHttpEventRow, POME_RECORDER_EVENTS_PATH, } from "./recorder.js";
-export type { RecorderStore, RecorderStoreOptions, FileBackedRecorderStoreOptions, ErrorEnvelopeFn, } from "./recorder.js";
-export { bearerAuth, requireAdminAuth, resolveAuthSecret } from "./auth.js";
-export { createAdminGate, setClientIp } from "./admin-gate.js";
-export type { AdminGateOptions } from "./admin-gate.js";
-export { TwinError, UnknownToolError } from "./errors.js";
-export { redactEvent, redactSecrets } from "./redaction.js";
-export { FAILURE_INJECTION_OVERRIDE_KEY, createFailureInjectionStore, failureInjectionMiddleware, failureInjectionRuleSchema, } from "./failure-injection.js";
-export type { FailureInjectionMiddlewareOptions, FailureInjectionMode, FailureInjectionOverride, FailureInjectionRule, FailureInjectionStore, } from "./failure-injection.js";
-export { PROVIDER_SHAPED_TEAM_ID, formTokenResolver, mintProviderToken, queryTokenResolver, verifyProviderToken, } from "./auth.js";
-export type { AuthEnvelope, BearerAuthOptions, MintProviderTokenOptions, ProviderTokenSpec, SessionClaims, SessionValue, TokenResolver, UnauthorizedKind, } from "./auth.js";
-export { twinBuildInfo } from "./build-info.js";
-export type { TwinBuildInfo } from "./build-info.js";
-export interface ServeOptions<TDb = unknown, TSeed = unknown> {
-    /** Optional. When set, `serve()` binds a Node HTTP server. */
-    port?: number;
-    /** Bind hostname. Defaults to "127.0.0.1". */
-    hostname?: string;
-    /** Opaque database handle forwarded to `definition.domain({ db })`. */
-    db?: TDb;
-    /** Initial seed forwarded to `definition.domain({ seed })`. Validated against `definition.seed` if provided. */
-    seed?: TSeed;
-    /** Custom recorder store. Defaults to `resolveRecorderStore()` (durable when `POME_RECORDER_EVENTS_PATH` is set). */
-    recorder?: RecorderStore;
-    /** Run identifier embedded in every recorder event. Defaults to "local". */
-    runId?: string;
-}
-export declare function createApp<TDb, TSeed, TDomain>(definition: TwinDefinition<TDb, TSeed, TDomain>, options?: ServeOptions<TDb, TSeed>): Hono;
-export interface ServeResult {
-    app: Hono;
-    /**
-     * Stop the bound HTTP server (if any), then flush+close the recorder store
-     * so durable tapes drain before process exit (F-698).
-     */
-    close(): Promise<void>;
-}
-/**
- * Build the app and bind a Node HTTP server. If `port` is omitted, no
- * server is bound — `close()` still flushes the recorder store.
- */
-export declare function serve<TDb, TSeed, TDomain>(definition: TwinDefinition<TDb, TSeed, TDomain>, options?: ServeOptions<TDb, TSeed>): Promise<ServeResult>;
-/** Engine-owned `/_pome/*` route names a twin's `pomeRoutes` may not shadow. */

package/node_modules/@pome-sh/twin-slack/node_modules/@pome-sh/sdk/dist/server.js

@@ -1,394 +0,0 @@
-// file-size: server engine intentionally centralizes TwinDefinition boot, reserved routes, recorder shutdown, and auth wiring.
-// SPDX-License-Identifier: Apache-2.0
-//
-// `@pome-sh/sdk/server` — boot a `TwinDefinition` into a Hono app and
-// optionally bind a Node HTTP server. `createApp()` returns the bare app
-// (no port binding) for tests; `serve()` wraps it with `@hono/node-server`.
-//
-// Auto-mounted routes:
-//   GET  /healthz                          (root, no auth)
-//   POST /admin/reset                      (localhost-only)
-//   POST /admin/seed                       (localhost-only)
-//   GET  /s/:sid/healthz                   (bearer)
-//   GET  /s/:sid/_pome/health              (bearer)
-//   GET  /s/:sid/_pome/state               (bearer)
-//   GET  /s/:sid/_pome/events              (bearer)
-//   GET  /s/:sid/mcp/tools                 (bearer)
-//   POST /s/:sid/mcp/tools/:name           (bearer)
-//   POST /s/:sid/mcp/call                  (bearer)
-//
-// User routes registered via `definition.routes(app, ctx)` are mounted under
-// `/s/:sid/*`. The SDK refuses to boot if any user route shadows the
-// `/_pome/*` or `/mcp/*` prefixes (OQ-B6 invariant).
-import { Hono } from "hono";
-import { z } from "zod";
-import { toolInputSchema, toolListExtras, } from "./index.js";
-import { bearerAuth, requireAdminAuth } from "./auth.js";
-import { createAdminGate } from "./admin-gate.js";
-import { makeToolCallContext } from "./tool-context.js";
-import { twinBuildInfo } from "./build-info.js";
-import { handleMcpJsonRpc, mcpMethodNotAllowed } from "./mcp-jsonrpc.js";
-import { createRecorderHandle, resolveRecorderStore } from "./recorder.js";
-import { redactSecrets } from "./redaction.js";
-import { TwinError, envelopeFor } from "./errors.js";
-import { POME_CORE_ROUTE_NAMES, TwinBootError, assertUniqueToolNames, ensureTwinAuthSecret, findTool, isLoopbackHost, makeDeltaSink, readJson, shadowedPrefix, } from "./server-helpers.js";
-// Public boot surface consumed by twin entrypoints
-// (`import { ensureTwinAuthSecret, serve } from "@pome-sh/sdk/server"`).
-export { TwinBootError, ensureTwinAuthSecret, isLoopbackHost, created, ok } from "./server-helpers.js";
-export { createRecorderHandle, createRecorderStore, createFileBackedRecorderStore, resolveRecorderStore, toTwinHttpEventRow, POME_RECORDER_EVENTS_PATH, } from "./recorder.js";
-export { bearerAuth, requireAdminAuth, resolveAuthSecret } from "./auth.js";
-// Alternate serving bridges (anything that isn't @hono/node-server) must feed
-// the gate the transport-level peer address via setClientIp from an upstream
-// middleware; createAdminGate lets custom twins mount the gate with their own
-// 403 envelope. See the SECURITY note on setClientIp — never derive the value
-// from request headers.
-export { createAdminGate, setClientIp } from "./admin-gate.js";
-export { TwinError, UnknownToolError } from "./errors.js";
-export { redactEvent, redactSecrets } from "./redaction.js";
-export { FAILURE_INJECTION_OVERRIDE_KEY, createFailureInjectionStore, failureInjectionMiddleware, failureInjectionRuleSchema, } from "./failure-injection.js";
-export { PROVIDER_SHAPED_TEAM_ID, formTokenResolver, mintProviderToken, queryTokenResolver, verifyProviderToken, } from "./auth.js";
-export { twinBuildInfo } from "./build-info.js";
-const jsonRecord = z.record(z.string(), z.unknown());
-export function createApp(definition, options = {}) {
-    // 1. Validate + build seed
-    let seed;
-    if (options.seed !== undefined) {
-        if (definition.seed) {
-            seed = definition.seed.parse(options.seed);
-        }
-        else {
-            seed = options.seed;
-        }
-    }
-    // 2. Build domain
-    const domain = definition.domain({ db: options.db, seed });
-    // 3. Build recorder. The manifest's `errorEnvelope` (if set) is forwarded
-    //    here so API-mirroring twins control their error shape without
-    //    bypassing the recorder middleware.
-    const runId = options.runId ?? "local";
-    const recorder = createRecorderHandle({
-        runId,
-        twin: definition.id,
-        store: options.recorder ?? resolveRecorderStore(),
-        errorEnvelope: definition.errorEnvelope,
-        stampToolCallId: definition.stampToolCallId,
-        recordingProjection: definition.recordingProjection,
-    });
-    // 4. Boot-time invariant: user routes must not shadow reserved prefixes.
-    const userApp = new Hono();
-    if (definition.routes) {
-        definition.routes(userApp, { domain, recorder, runId, twin: definition.id });
-        for (const route of userApp.routes) {
-            const shadowed = shadowedPrefix(route.path);
-            if (shadowed) {
-                throw new TwinBootError(`Twin "${definition.id}" route ${route.method} ${route.path} shadows reserved SDK prefix ${shadowed}/*`);
-            }
-        }
-    }
-    // 5. Tool name uniqueness sanity (defineTwin already enforces, but a
-    //    test that hand-builds a TwinDefinition could bypass it).
-    assertUniqueToolNames(definition.tools, definition.id);
-    // 6. Build root app
-    const root = new Hono();
-    // Contract core: {ok, twin, implementation, tools, runtime}. Extras
-    // default to the pre-F-681 fields; a twin with a frozen healthz shape
-    // supplies its own (possibly empty) extras via `definition.healthz`.
-    const healthzExtras = definition.healthz ??
-        (() => ({ version: definition.version, fidelity: definition.fidelity.default }));
-    root.get("/healthz", (c) => c.json({
-        ok: true,
-        twin: definition.id,
-        implementation: definition.implementation ?? `${definition.id}_clone`,
-        tools: definition.tools.length,
-        runtime: twinBuildInfo(definition.packageName ?? `@pome-sh/twin-${definition.id}`),
-        ...healthzExtras(),
-    }));
-    // Per-twin body reader for the engine-owned JSON surfaces. Default is
-    // strict JSON (malformed → SyntaxError into the twin's errorEnvelope);
-    // twins with frozen tolerant/form parsing (slack, stripe) declare theirs.
-    const readBody = definition.bodyReader ?? ((c) => readJson(c.req.raw));
-    // 7. Admin sub-app. Gate mechanism is the engine's; a twin with a frozen
-    //    403 body declares it via `admin.forbidden` (F-683).
-    const adminForbidden = definition.admin?.forbidden;
-    const adminApp = new Hono();
-    adminApp.use("*", adminForbidden
-        ? createAdminGate({
-            forbidden: () => {
-                const envelope = adminForbidden();
-                return Response.json(envelope.body, { status: envelope.status });
-            },
-        })
-        : requireAdminAuth());
-    const adminEnvelope = definition.admin?.errorEnvelope;
-    // stripe pin: its pre-port recorder never saw admin traffic, so
-    // admin.recorded=false serves the same handlers without emitting events.
-    const wrapAdmin = definition.admin?.recorded !== false
-        ? (fn) => recorder.handle({ mutation: true, errorEnvelope: adminEnvelope }, fn)
-        : (fn) => async (c) => {
-            try {
-                const result = await fn(c);
-                return c.json(result.body, result.status);
-            }
-            catch (err) {
-                const envelope = (adminEnvelope ?? definition.errorEnvelope ?? envelopeFor)(err);
-                return c.json(envelope.body, envelope.status);
-            }
-        };
-    adminApp.post("/reset", wrapAdmin(async () => {
-        if (!definition.admin?.reset) {
-            throw new TwinError("admin.reset is not configured for this twin", 501);
-        }
-        const delta = makeDeltaSink();
-        const body = (await definition.admin.reset({ domain, reportDelta: delta.report })) ?? { ok: true };
-        return { status: 200, body, delta: delta.value() };
-    }));
-    adminApp.post("/seed", wrapAdmin(async (c) => {
-        if (!definition.admin?.seed) {
-            throw new TwinError("admin.seed is not configured for this twin", 501);
-        }
-        if (!definition.seed) {
-            throw new TwinError("Twin manifest has no `seed` schema; cannot accept POST /admin/seed", 501);
-        }
-        const raw = await readBody(c);
-        const parsed = definition.seed.parse(raw);
-        const delta = makeDeltaSink();
-        const body = (await definition.admin.seed({ domain, seed: parsed, reportDelta: delta.report })) ?? { ok: true };
-        return { status: 200, body, delta: delta.value() };
-    }));
-    root.route("/admin", adminApp);
-    // 8. Session sub-app. Auth mechanism is the engine's; the twin's declared
-    //    shape (F-712) rides in via `definition.auth`.
-    const session = new Hono();
-    session.use("*", bearerAuth(definition.auth));
-    // Session-wide middleware slot — the pre-port `session.use("*")` position,
-    // mounted BEFORE the engine's MCP / `/_pome/*` routes so twin middleware
-    // (stripe failure-injection, idempotency) covers MCP dispatch too.
-    if (definition.middleware) {
-        definition.middleware(session, { domain, recorder, runId, twin: definition.id });
-    }
-    // Per-session healthz is contract-frozen per twin: github/slack answer
-    // 200 {ok, sid}; stripe has NO such route (falls to the 501 catch-all).
-    if (definition.sessionHealthz !== false) {
-        session.get("/healthz", (c) => c.json({ ok: true, sid: c.req.param("sid") }));
-    }
-    // `pomeHealth` extras replace the default {version, fidelity} for twins
-    // with a frozen per-session health shape (slack: bare {ok, twin};
-    // github: no version; stripe adds recorder counters).
-    const pomeHealthExtras = definition.pomeHealth ??
-        (() => ({ version: definition.version, fidelity: definition.fidelity.default }));
-    session.get("/_pome/health", (c) => c.json({
-        ok: true,
-        twin: definition.id,
-        ...pomeHealthExtras({ recorder }),
-    }));
-    // NOT recorder-wrapped: no pre-port twin recorded /_pome/state fetches on
-    // the tape (F-683 review pin) — the export is a read-side probe, and
-    // recording it would embed the full state as an event response_body.
-    session.get("/_pome/state", async (c) => {
-        try {
-            if (!definition.state) {
-                throw new TwinError("state introspection is not configured for this twin", 501);
-            }
-            const session = c.get("session");
-            const state = await definition.state({ domain, session });
-            // Central redaction: the state export feeds cloud-side scoring and the
-            // CLI trace; a twin must not be able to leak secrets by omission.
-            return c.json(redactSecrets(state));
-        }
-        catch (err) {
-            const envelope = (definition.errorEnvelope ?? envelopeFor)(err);
-            return c.json(envelope.body, envelope.status);
-        }
-    });
-    session.get("/_pome/events", (c) => c.json(recorder.events()));
-    // 8b. Extra per-twin `/_pome/*` routes (github's frozen
-    //     GET /s/:sid/_pome/access-control, F-682). Registered after the core
-    //     routes so the platform surface can never be shadowed; core names are
-    //     rejected outright at boot.
-    if (definition.pomeRoutes) {
-        for (const [name, handler] of Object.entries(definition.pomeRoutes)) {
-            if (POME_CORE_ROUTE_NAMES.has(name)) {
-                throw new TwinBootError(`Twin "${definition.id}" pome route "/_pome/${name}" shadows a reserved engine route`);
-            }
-            session.get(`/_pome/${name}`, async (c) => c.json((await handler({ domain }))));
-        }
-    }
-    // 9. MCP routes from tool registry. `/mcp` is the streamable-HTTP
-    //    JSON-RPC endpoint (stateless — GET/DELETE answer 405); `/mcp/tools`,
-    //    `/mcp/tools/:name`, `/mcp/call` are the legacy dispatch surface.
-    session.post("/mcp", (c) => handleMcpJsonRpc(c, { definition, domain, recorder, runId }));
-    session.get("/mcp", (c) => mcpMethodNotAllowed(c));
-    session.delete("/mcp", (c) => mcpMethodNotAllowed(c));
-    session.get("/mcp/tools", (c) => c.json({
-        tools: definition.tools.map((tool) => ({
-            name: tool.name,
-            description: tool.description,
-            input_schema: toolInputSchema(tool),
-            ...toolListExtras(tool),
-        })),
-    }));
-    session.post("/mcp/tools/:name", recorder.handle({ mutation: false }, async (c) => {
-        const name = c.req.param("name") ?? "";
-        const tool = findTool(definition, name);
-        const args = await readBody(c);
-        const parsed = tool.schema.parse(args ?? {});
-        const call = makeToolCallContext(c);
-        const result = await tool.handler(domain, parsed, call.ctx);
-        const delta = call.delta();
-        const mutation = tool.mutation && (!call.reportedDelta() || delta !== null);
-        return { status: 200, body: result, mutation, delta };
-    }));
-    session.post("/mcp/call", recorder.handle({ mutation: false }, async (c) => {
-        const raw = await readBody(c);
-        let call;
-        if (definition.legacyMcp?.aliases) {
-            // Frozen slack surface: {name}/{params} alias {tool}/{arguments};
-            // a body naming no tool answers the twin's own envelope (400
-            // invalid_arguments) instead of the strict-parse error.
-            const rec = (raw && typeof raw === "object" && !Array.isArray(raw) ? raw : {});
-            const name = rec.tool ?? rec.name;
-            if (typeof name !== "string" || name.length === 0) {
-                const missing = definition.legacyMcp.missingTool;
-                if (missing) {
-                    const envelope = missing();
-                    return { status: envelope.status, body: envelope.body };
-                }
-                z.object({ tool: z.string().min(1) }).parse(rec); // throws the strict-parse error
-            }
-            call = {
-                tool: name,
-                arguments: (rec.arguments ?? rec.params ?? {}),
-            };
-        }
-        else {
-            call = z
-                .object({ tool: z.string().min(1), arguments: jsonRecord.default({}) })
-                .parse(raw);
-        }
-        const tool = findTool(definition, call.tool);
-        const parsed = tool.schema.parse(call.arguments);
-        const toolCall = makeToolCallContext(c);
-        const result = await tool.handler(domain, parsed, toolCall.ctx);
-        const delta = toolCall.delta();
-        const mutation = tool.mutation && (!toolCall.reportedDelta() || delta !== null);
-        return { status: 200, body: result, mutation, delta };
-    }));
-    // 10. User routes
-    if (definition.routes) {
-        session.route("/", userApp);
-    }
-    // 11. Catch-all for unsupported surfaces. Recorder records
-    //     fidelity:"unsupported" and returns 501 so unmatched routes surface
-    //     as a fidelity-gap signal in the trace instead of silently 404'ing.
-    //     Not opt-out per OQ-B6: every community twin auto-surfaces fidelity
-    //     gaps in the trace.
-    session.all("*", recorder.handle({ mutation: false, fidelity: "unsupported" }, async (c) => {
-        const ctx = { method: c.req.method, path: new URL(c.req.url).pathname };
-        if (definition.unsupported)
-            return definition.unsupported(ctx);
-        return {
-            status: 501,
-            body: {
-                message: `Endpoint not modeled by twin "${definition.id}".`,
-                fidelity: "unsupported",
-                method: ctx.method,
-                path: ctx.path,
-            },
-        };
-    }));
-    root.route("/s/:sid", session);
-    // 11b. SDK-compat root mount (stripe F3, F-684): the same session router
-    //      answers at the root path. Root /healthz + /admin/* were registered
-    //      first and stay first-match; unknown root paths hit the twin's auth
-    //      wall (bearerAuth answers 401 before the 501 catch-all). Pair with
-    //      `auth.requirePathSid: false` so the bearer alone resolves the sid.
-    if (definition.mountSessionAtRoot) {
-        root.route("/", session);
-    }
-    // 12. Footgun warning: clean-state-per-test workflows rely on
-    //     /admin/reset. Warn loudly if a twin ships without it so authors
-    //     don't discover the gap mid-CI-debug.
-    if (!definition.admin?.reset) {
-        console.warn(`[@pome-sh/sdk] twin "${definition.id}" has no admin.reset configured — POST /admin/reset returns 501. Most CI workflows rely on this for clean-state-per-test.`);
-    }
-    return root;
-}
-/**
- * Build the app and bind a Node HTTP server. If `port` is omitted, no
- * server is bound — `close()` still flushes the recorder store.
- */
-export async function serve(definition, options = {}) {
-    const hostname = options.hostname ?? "127.0.0.1";
-    // Contract boot guard: a twin must never serve real traffic with the dev
-    // fallback secret. Since F-708 a non-loopback bind with no env-injected
-    // secret self-generates + persists one instead of refusing to boot; a
-    // failed generation still throws before the app is built, so the process
-    // exits non-zero without ever listening.
-    if (options.port !== undefined && !isLoopbackHost(hostname)) {
-        ensureTwinAuthSecret(definition.id, hostname);
-    }
-    // Resolve the store once so `close()` can flush the same instance the app
-    // records into (durable when POME_RECORDER_EVENTS_PATH is set).
-    const store = options.recorder ?? resolveRecorderStore();
-    const app = createApp(definition, { ...options, recorder: store });
-    const closeRecorder = async () => {
-        await store.flush?.();
-        await store.close?.();
-    };
-    if (options.port === undefined) {
-        return { app, close: closeRecorder };
-    }
-    const { serve: nodeServe } = await import("@hono/node-server");
-    const server = await new Promise((resolve) => {
-        const bound = nodeServe({
-            fetch: app.fetch,
-            port: options.port,
-            hostname,
-        }, () => resolve(bound));
-    });
-    let closed = false;
-    const close = async () => {
-        if (closed) {
-            await closeRecorder();
-            return;
-        }
-        closed = true;
-        unregisterServeShutdown(close);
-        await new Promise((resolve, reject) => {
-            server.close((err) => (err ? reject(err) : resolve()));
-        });
-        await closeRecorder();
-    };
-    // Twin boot scripts (`await serve(...)`) never call close() themselves.
-    // Drain the durable recorder on graceful process signals so hosted twins
-    // with POME_RECORDER_EVENTS_PATH set do not lose the last accepted events.
-    // Shared registry: every served twin flushes before a single process.exit,
-    // so multi-twin processes cannot lose sibling recorder tapes.
-    registerServeShutdown(close);
-    return { app, close };
-}
-/** Active `serve({ port })` close hooks — drained together on SIGINT/SIGTERM. */
-const serveShutdownHooks = new Set();
-let serveSignalHandlersInstalled = false;
-function registerServeShutdown(close) {
-    serveShutdownHooks.add(close);
-    if (serveSignalHandlersInstalled)
-        return;
-    serveSignalHandlersInstalled = true;
-    const onSignal = () => {
-        void (async () => {
-            const hooks = [...serveShutdownHooks];
-            serveShutdownHooks.clear();
-            await Promise.allSettled(hooks.map((hook) => hook()));
-            process.exit(0);
-        })();
-    };
-    process.once("SIGINT", onSignal);
-    process.once("SIGTERM", onSignal);
-}
-function unregisterServeShutdown(close) {
-    serveShutdownHooks.delete(close);
-}
-// ─── Helpers ────────────────────────────────────────────────────────────────
-/** Engine-owned `/_pome/*` route names a twin's `pomeRoutes` may not shadow. */
-//# sourceMappingURL=server.js.map

package/node_modules/@pome-sh/twin-slack/node_modules/@pome-sh/sdk/dist/server.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,+HAA+H;AAC/H,sCAAsC;AACtC,EAAE;AACF,sEAAsE;AACtE,yEAAyE;AACzE,4EAA4E;AAC5E,EAAE;AACF,uBAAuB;AACvB,2DAA2D;AAC3D,4DAA4D;AAC5D,4DAA4D;AAC5D,oDAAoD;AACpD,oDAAoD;AACpD,oDAAoD;AACpD,oDAAoD;AACpD,oDAAoD;AACpD,oDAAoD;AACpD,oDAAoD;AACpD,EAAE;AACF,6EAA6E;AAC7E,qEAAqE;AACrE,qDAAqD;AAErD,OAAO,EAAE,IAAI,EAAgB,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAEL,eAAe,EACf,cAAc,GAIf,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAsB,MAAM,eAAe,CAAC;AAC/F,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAoB,WAAW,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EACL,qBAAqB,EACrB,aAAa,EACb,qBAAqB,EACrB,oBAAoB,EACpB,QAAQ,EACR,cAAc,EACd,aAAa,EACb,QAAQ,EACR,cAAc,GACf,MAAM,qBAAqB,CAAC;AAE7B,mDAAmD;AACnD,yEAAyE;AACzE,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,qBAAqB,CAAC;AAEvG,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,6BAA6B,EAC7B,oBAAoB,EACpB,kBAAkB,EAClB,yBAAyB,GAC1B,MAAM,eAAe,CAAC;AAOvB,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC5E,8EAA8E;AAC9E,6EAA6E;AAC7E,8EAA8E;AAC9E,8EAA8E;AAC9E,wBAAwB;AACxB,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE/D,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EACL,8BAA8B,EAC9B,2BAA2B,EAC3B,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,wBAAwB,CAAC;AAQhC,OAAO,EACL,uBAAuB,EACvB,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,WAAW,CAAC;AAWnB,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAkBhD,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AAErD,MAAM,UAAU,SAAS,CACvB,UAA+C,EAC/C,UAAoC,EAAE;IAEtC,2BAA2B;IAC3B,IAAI,IAAuB,CAAC;IAC5B,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;YACpB,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7C,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACtB,CAAC;IACH,CAAC;IAED,kBAAkB;IAClB,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAElE,0EAA0E;IAC1E,mEAAmE;IACnE,wCAAwC;IACxC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC;IACvC,MAAM,QAAQ,GAAG,oBAAoB,CAAC;QACpC,KAAK;QACL,IAAI,EAAE,UAAU,CAAC,EAAE;QACnB,KAAK,EAAE,OAAO,CAAC,QAAQ,IAAI,oBAAoB,EAAE;QACjD,aAAa,EAAE,UAAU,CAAC,aAAa;QACvC,eAAe,EAAE,UAAU,CAAC,eAAe;QAC3C,mBAAmB,EAAE,UAAU,CAAC,mBAAmB;KACpD,CAAC,CAAC;IAEH,yEAAyE;IACzE,MAAM,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC;IAC3B,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QACtB,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7E,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,IAAI,aAAa,CACrB,SAAS,UAAU,CAAC,EAAE,WAAW,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,gCAAgC,QAAQ,IAAI,CACxG,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,8DAA8D;IAC9D,qBAAqB,CAAC,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;IAEvD,oBAAoB;IACpB,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;IAExB,oEAAoE;IACpE,sEAAsE;IACtE,qEAAqE;IACrE,MAAM,aAAa,GACjB,UAAU,CAAC,OAAO;QAClB,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACnF,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CACzB,CAAC,CAAC,IAAI,CAAC;QACL,EAAE,EAAE,IAAI;QACR,IAAI,EAAE,UAAU,CAAC,EAAE;QACnB,cAAc,EAAE,UAAU,CAAC,cAAc,IAAI,GAAG,UAAU,CAAC,EAAE,QAAQ;QACrE,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,MAAM;QAC9B,OAAO,EAAE,aAAa,CAAC,UAAU,CAAC,WAAW,IAAI,iBAAiB,UAAU,CAAC,EAAE,EAAE,CAAC;QAClF,GAAG,aAAa,EAAE;KACnB,CAAC,CACH,CAAC;IAEF,sEAAsE;IACtE,uEAAuE;IACvE,0EAA0E;IAC1E,MAAM,QAAQ,GAAG,UAAU,CAAC,UAAU,IAAI,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAEhF,yEAAyE;IACzE,yDAAyD;IACzD,MAAM,cAAc,GAAG,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC;IACnD,MAAM,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC;IAC5B,QAAQ,CAAC,GAAG,CACV,GAAG,EACH,cAAc;QACZ,CAAC,CAAC,eAAe,CAAC;YACd,SAAS,EAAE,GAAG,EAAE;gBACd,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;gBAClC,OAAO,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YACnE,CAAC;SACF,CAAC;QACJ,CAAC,CAAC,gBAAgB,EAAE,CACvB,CAAC;IACF,MAAM,aAAa,GAAG,UAAU,CAAC,KAAK,EAAE,aAAa,CAAC;IACtD,gEAAgE;IAChE,yEAAyE;IACzE,MAAM,SAAS,GACb,UAAU,CAAC,KAAK,EAAE,QAAQ,KAAK,KAAK;QAClC,CAAC,CAAC,CAAC,EAA+E,EAAE,EAAE,CAClF,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,aAAa,EAAE,EAAE,EAAW,CAAC;QAClF,CAAC,CAAC,CAAC,EAA+E,EAAE,EAAE,CAClF,KAAK,EAAE,CAAU,EAAE,EAAE;YACnB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC3B,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAa,EAAE,MAAM,CAAC,MAAe,CAAC,CAAC;YAC9D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,QAAQ,GAAG,CAAC,aAAa,IAAI,UAAU,CAAC,aAAa,IAAI,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC;gBACjF,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAa,EAAE,QAAQ,CAAC,MAAe,CAAC,CAAC;YAClE,CAAC;QACH,CAAC,CAAC;IACV,QAAQ,CAAC,IAAI,CACX,QAAQ,EACR,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC;YAC7B,MAAM,IAAI,SAAS,CAAC,6CAA6C,EAAE,GAAG,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,CAAC,MAAM,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACnG,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IACrD,CAAC,CAAC,CACH,CAAC;IACF,QAAQ,CAAC,IAAI,CACX,OAAO,EACP,SAAS,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QACpB,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;YAC5B,MAAM,IAAI,SAAS,CAAC,4CAA4C,EAAE,GAAG,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;YACrB,MAAM,IAAI,SAAS,CACjB,oEAAoE,EACpE,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAU,CAAC;QACnD,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;QAC9B,MAAM,IAAI,GACR,CAAC,MAAM,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACrG,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IACrD,CAAC,CAAC,CACH,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAE/B,0EAA0E;IAC1E,mDAAmD;IACnD,MAAM,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC;IAC3B,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAE9C,2EAA2E;IAC3E,yEAAyE;IACzE,mEAAmE;IACnE,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;QAC1B,UAAU,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,uEAAuE;IACvE,wEAAwE;IACxE,IAAI,UAAU,CAAC,cAAc,KAAK,KAAK,EAAE,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAChF,CAAC;IACD,wEAAwE;IACxE,kEAAkE;IAClE,sDAAsD;IACtD,MAAM,gBAAgB,GACpB,UAAU,CAAC,UAAU;QACrB,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACnF,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CACjC,CAAC,CAAC,IAAI,CAAC;QACL,EAAE,EAAE,IAAI;QACR,IAAI,EAAE,UAAU,CAAC,EAAE;QACnB,GAAG,gBAAgB,CAAC,EAAE,QAAQ,EAAE,CAAC;KAClC,CAAC,CACH,CAAC;IACF,0EAA0E;IAC1E,qEAAqE;IACrE,qEAAqE;IACrE,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,EAAE,CAAU,EAAE,EAAE;QAC/C,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;gBACtB,MAAM,IAAI,SAAS,CAAC,qDAAqD,EAAE,GAAG,CAAC,CAAC;YAClF,CAAC;YACD,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAiD,CAAC;YACjF,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;YAC1D,uEAAuE;YACvE,kEAAkE;YAClE,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAU,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,QAAQ,GAAG,CAAC,UAAU,CAAC,aAAa,IAAI,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC;YAChE,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAa,EAAE,QAAQ,CAAC,MAAe,CAAC,CAAC;QAClE,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAE/D,wDAAwD;IACxD,0EAA0E;IAC1E,2EAA2E;IAC3E,iCAAiC;IACjC,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;QAC1B,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YACpE,IAAI,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,aAAa,CACrB,SAAS,UAAU,CAAC,EAAE,wBAAwB,IAAI,mCAAmC,CACtF,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,CAAU,CAAC,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IAED,kEAAkE;IAClE,0EAA0E;IAC1E,sEAAsE;IACtE,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAC1F,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAC9B,CAAC,CAAC,IAAI,CAAC;QACL,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACrC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,YAAY,EAAE,eAAe,CAAC,IAAI,CAAC;YACnC,GAAG,cAAc,CAAC,IAAI,CAAC;SACxB,CAAC,CAAC;KACJ,CAAC,CACH,CAAC;IACF,OAAO,CAAC,IAAI,CACV,kBAAkB,EAClB,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC/C,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC;QAC5E,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACxD,CAAC,CAAC,CACH,CAAC;IACF,OAAO,CAAC,IAAI,CACV,WAAW,EACX,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC/C,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,IAA0D,CAAC;QAC/D,IAAI,UAAU,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC;YAClC,kEAAkE;YAClE,6DAA6D;YAC7D,wDAAwD;YACxD,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAA4B,CAAC;YAC1G,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC;YAClC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAClD,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,WAAW,CAAC;gBACjD,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,QAAQ,GAAG,OAAO,EAAE,CAAC;oBAC3B,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAC1D,CAAC;gBACD,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,gCAAgC;YACpF,CAAC;YACD,IAAI,GAAG;gBACL,IAAI,EAAE,IAAc;gBACpB,SAAS,EAAE,CAAC,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE,CAA4B;aAC1E,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,CAAC;iBACL,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;iBACtE,KAAK,CAAC,GAAG,CAAyD,CAAC;QACxE,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC;QAChF,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACxD,CAAC,CAAC,CACH,CAAC;IAEF,kBAAkB;IAClB,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC9B,CAAC;IAED,2DAA2D;IAC3D,yEAAyE;IACzE,yEAAyE;IACzE,yEAAyE;IACzE,yBAAyB;IACzB,OAAO,CAAC,GAAG,CACT,GAAG,EACH,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACxE,MAAM,GAAG,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;QACxE,IAAI,UAAU,CAAC,WAAW;YAAE,OAAO,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC/D,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE;gBACJ,OAAO,EAAE,iCAAiC,UAAU,CAAC,EAAE,IAAI;gBAC3D,QAAQ,EAAE,aAAa;gBACvB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,IAAI,EAAE,GAAG,CAAC,IAAI;aACf;SACF,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;IAEF,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAE/B,yEAAyE;IACzE,0EAA0E;IAC1E,0EAA0E;IAC1E,yEAAyE;IACzE,0EAA0E;IAC1E,IAAI,UAAU,CAAC,kBAAkB,EAAE,CAAC;QAClC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC3B,CAAC;IAED,8DAA8D;IAC9D,sEAAsE;IACtE,2CAA2C;IAC3C,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC;QAC7B,OAAO,CAAC,IAAI,CACV,wBAAwB,UAAU,CAAC,EAAE,2HAA2H,CACjK,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAWD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,KAAK,CACzB,UAA+C,EAC/C,UAAoC,EAAE;IAEtC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,WAAW,CAAC;IACjD,yEAAyE;IACzE,wEAAwE;IACxE,sEAAsE;IACtE,yEAAyE;IACzE,yCAAyC;IACzC,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5D,oBAAoB,CAAC,UAAU,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IAChD,CAAC;IACD,0EAA0E;IAC1E,gEAAgE;IAChE,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,IAAI,oBAAoB,EAAE,CAAC;IACzD,MAAM,GAAG,GAAG,SAAS,CAAC,UAAU,EAAE,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IACnE,MAAM,aAAa,GAAG,KAAK,IAAI,EAAE;QAC/B,MAAM,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QACtB,MAAM,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IACxB,CAAC,CAAC;IACF,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;IACvC,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAA+B,CAAC,OAAO,EAAE,EAAE;QACzE,MAAM,KAAK,GAAG,SAAS,CACrB;YACE,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,QAAQ;SACT,EACD,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CACrB,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,MAAM,KAAK,GAAG,KAAK,IAAI,EAAE;QACvB,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,aAAa,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QACD,MAAM,GAAG,IAAI,CAAC;QACd,uBAAuB,CAAC,KAAK,CAAC,CAAC;QAC/B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,CAAC,KAAK,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QACH,MAAM,aAAa,EAAE,CAAC;IACxB,CAAC,CAAC;IACF,wEAAwE;IACxE,yEAAyE;IACzE,2EAA2E;IAC3E,2EAA2E;IAC3E,8DAA8D;IAC9D,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;AACxB,CAAC;AAED,iFAAiF;AACjF,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAuB,CAAC;AAC1D,IAAI,4BAA4B,GAAG,KAAK,CAAC;AAEzC,SAAS,qBAAqB,CAAC,KAA0B;IACvD,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,4BAA4B;QAAE,OAAO;IACzC,4BAA4B,GAAG,IAAI,CAAC;IACpC,MAAM,QAAQ,GAAG,GAAG,EAAE;QACpB,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,MAAM,KAAK,GAAG,CAAC,GAAG,kBAAkB,CAAC,CAAC;YACtC,kBAAkB,CAAC,KAAK,EAAE,CAAC;YAC3B,MAAM,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACtD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACjC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,uBAAuB,CAAC,KAA0B;IACzD,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnC,CAAC;AAED,+EAA+E;AAE/E,gFAAgF"}

package/node_modules/@pome-sh/twin-slack/node_modules/@pome-sh/sdk/dist/tool-context.d.ts

@@ -1,8 +0,0 @@
-import type { Context } from "hono";
-import type { RecorderEvent, ToolCallContext } from "./index.js";
-export declare function makeToolCallContext(c: Context): {
-    ctx: ToolCallContext;
-    delta: () => RecorderEvent["state_delta"];
-    /** True once the handler invoked `reportDelta` (including with `null`). */
-    reportedDelta: () => boolean;
-};

package/node_modules/@pome-sh/twin-slack/node_modules/@pome-sh/sdk/dist/tool-context.js

@@ -1,22 +0,0 @@
-// SPDX-License-Identifier: Apache-2.0
-//
-// Per-call ToolCallContext factory shared by every MCP dispatch surface
-// (server.ts legacy routes + mcp-jsonrpc.ts tools/call). Exposes the
-// authenticated session and captures a handler-reported state delta for the
-// recorded event (F-683).
-export function makeToolCallContext(c) {
-    let reported = null;
-    let didReport = false;
-    return {
-        ctx: {
-            session: c.get("session"),
-            reportDelta: (delta) => {
-                reported = delta;
-                didReport = true;
-            },
-        },
-        delta: () => reported,
-        reportedDelta: () => didReport,
-    };
-}
-//# sourceMappingURL=tool-context.js.map

package/node_modules/@pome-sh/twin-slack/node_modules/@pome-sh/sdk/dist/tool-context.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"tool-context.js","sourceRoot":"","sources":["../src/tool-context.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,wEAAwE;AACxE,qEAAqE;AACrE,4EAA4E;AAC5E,0BAA0B;AAM1B,MAAM,UAAU,mBAAmB,CAAC,CAAU;IAM5C,IAAI,QAAQ,GAAiC,IAAI,CAAC;IAClD,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,OAAO;QACL,GAAG,EAAE;YACH,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAA6B;YACrD,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE;gBACrB,QAAQ,GAAG,KAAK,CAAC;gBACjB,SAAS,GAAG,IAAI,CAAC;YACnB,CAAC;SACF;QACD,KAAK,EAAE,GAAG,EAAE,CAAC,QAAQ;QACrB,aAAa,EAAE,GAAG,EAAE,CAAC,SAAS;KAC/B,CAAC;AACJ,CAAC"}

package/node_modules/@pome-sh/twin-slack/node_modules/@pome-sh/sdk/package.json

@@ -1,54 +0,0 @@
-{
-  "name": "@pome-sh/sdk",
-  "version": "0.5.0",
-  "description": "Twin engine for Pome digital twins — defineTwin() + serve(): HTTP mounting, bearer auth, trace recorder, MCP dispatch, SQLite-backed state.",
-  "private": false,
-  "type": "module",
-  "main": "./dist/index.js",
-  "types": "./dist/index.d.d.ts",
-  "exports": {
-    ".": {
-      "types": "./dist/index.d.ts",
-      "default": "./dist/index.js"
-    },
-    "./server": {
-      "types": "./dist/server.d.ts",
-      "default": "./dist/server.js"
-    },
-    "./parity": {
-      "types": "./dist/parity.d.ts",
-      "default": "./dist/parity.js"
-    }
-  },
-  "publishConfig": {
-    "access": "public"
-  },
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/pome-sh/digital-twins.git",
-    "directory": "packages/sdk"
-  },
-  "homepage": "https://github.com/pome-sh/digital-twins/tree/main/packages/sdk",
-  "bugs": {
-    "url": "https://github.com/pome-sh/digital-twins/issues"
-  },
-  "files": [
-    "dist"
-  ],
-  "dependencies": {
-    "@pome-sh/shared-types": "0.11.0",
-    "hono": "^4.12.27",
-    "zod": "^4.1.13"
-  },
-  "peerDependencies": {
-    "@hono/node-server": "^2.0.8"
-  },
-  "peerDependenciesMeta": {
-    "@hono/node-server": {
-      "optional": true
-    }
-  },
-  "engines": {
-    "node": ">=24"
-  }
-}

package/node_modules/@pome-sh/twin-stripe/node_modules/@pome-sh/sdk/dist/admin-gate.d.ts

@@ -1,35 +0,0 @@
-import type { Context, MiddlewareHandler } from "hono";
-/** Context variable consulted first by getClientIp(). */
-export declare const CLIENT_IP_VAR = "pomeClientIp";
-/**
- * Explicitly record the peer address for this request. Alternate serving
- * bridges (or tests) call this from an upstream middleware so the gate never
- * reaches into runtime-private internals.
- *
- * SECURITY: the value passed here MUST be the transport-level peer address
- * (the socket's remote address as reported by the serving bridge). It takes
- * precedence over getConnInfo, so deriving it from any request-controlled
- * input — X-Forwarded-For or any other client-supplied header — would make
- * the loopback-only admin gate spoofable by whoever sets that header. If you
- * are behind a reverse proxy, use TWIN_ADMIN_TOKEN instead of trying to
- * recover the "real" client IP.
- */
-export declare function setClientIp(c: Context, ip: string): void;
-/**
- * Runtime-neutral client-IP accessor (FDRS-587). Resolution order:
- *   1. Explicit override set via setClientIp() (alternate bridges / tests).
- *   2. The node serving bridge's official getConnInfo helper.
- *   3. undefined — no live socket (e.g. app.request() in-process tests).
- */
-export declare function getClientIp(c: Context): Promise<string | undefined>;
-export declare function isLoopbackAddress(remote: string): boolean;
-export interface AdminGateOptions {
-    /** 403 response factory so each twin keeps its own error envelope. */
-    forbidden?: () => Response;
-}
-/**
- * Admin endpoint protection shared by every twin (FDRS-616). Each twin's
- * auth.ts wraps this with its own `forbidden` envelope. Semantics are
- * identical to the per-twin requireAdminAuth() copies this replaces.
- */
-export declare function createAdminGate(options?: AdminGateOptions): MiddlewareHandler;