@pome-sh/cli 0.9.0 → 0.10.0

package/node_modules/@pome-sh/twin-slack/node_modules/@pome-sh/sdk/dist/server.d.ts

@@ -0,0 +1,46 @@
+import { Hono } from "hono";
+import { type TwinDefinition } from "./index.js";
+import { type RecorderStore } from "./recorder.js";
+export { TwinBootError, ensureTwinAuthSecret, isLoopbackHost, created, ok } from "./server-helpers.js";
+export { createRecorderHandle, createRecorderStore, createFileBackedRecorderStore, resolveRecorderStore, toTwinHttpEventRow, POME_RECORDER_EVENTS_PATH, } from "./recorder.js";
+export type { RecorderStore, RecorderStoreOptions, FileBackedRecorderStoreOptions, ErrorEnvelopeFn, } from "./recorder.js";
+export { bearerAuth, requireAdminAuth, resolveAuthSecret } from "./auth.js";
+export { createAdminGate, setClientIp } from "./admin-gate.js";
+export type { AdminGateOptions } from "./admin-gate.js";
+export { TwinError, UnknownToolError } from "./errors.js";
+export { redactEvent, redactSecrets } from "./redaction.js";
+export { FAILURE_INJECTION_OVERRIDE_KEY, createFailureInjectionStore, failureInjectionMiddleware, failureInjectionRuleSchema, } from "./failure-injection.js";
+export type { FailureInjectionMiddlewareOptions, FailureInjectionMode, FailureInjectionOverride, FailureInjectionRule, FailureInjectionStore, } from "./failure-injection.js";
+export { PROVIDER_SHAPED_TEAM_ID, formTokenResolver, mintProviderToken, queryTokenResolver, verifyProviderToken, } from "./auth.js";
+export type { AuthEnvelope, BearerAuthOptions, MintProviderTokenOptions, ProviderTokenSpec, SessionClaims, SessionValue, TokenResolver, UnauthorizedKind, } from "./auth.js";
+export { twinBuildInfo } from "./build-info.js";
+export type { TwinBuildInfo } from "./build-info.js";
+export interface ServeOptions<TDb = unknown, TSeed = unknown> {
+    /** Optional. When set, `serve()` binds a Node HTTP server. */
+    port?: number;
+    /** Bind hostname. Defaults to "127.0.0.1". */
+    hostname?: string;
+    /** Opaque database handle forwarded to `definition.domain({ db })`. */
+    db?: TDb;
+    /** Initial seed forwarded to `definition.domain({ seed })`. Validated against `definition.seed` if provided. */
+    seed?: TSeed;
+    /** Custom recorder store. Defaults to `resolveRecorderStore()` (durable when `POME_RECORDER_EVENTS_PATH` is set). */
+    recorder?: RecorderStore;
+    /** Run identifier embedded in every recorder event. Defaults to "local". */
+    runId?: string;
+}
+export declare function createApp<TDb, TSeed, TDomain>(definition: TwinDefinition<TDb, TSeed, TDomain>, options?: ServeOptions<TDb, TSeed>): Hono;
+export interface ServeResult {
+    app: Hono;
+    /**
+     * Stop the bound HTTP server (if any), then flush+close the recorder store
+     * so durable tapes drain before process exit (F-698).
+     */
+    close(): Promise<void>;
+}
+/**
+ * Build the app and bind a Node HTTP server. If `port` is omitted, no
+ * server is bound — `close()` still flushes the recorder store.
+ */
+export declare function serve<TDb, TSeed, TDomain>(definition: TwinDefinition<TDb, TSeed, TDomain>, options?: ServeOptions<TDb, TSeed>): Promise<ServeResult>;
+/** Engine-owned `/_pome/*` route names a twin's `pomeRoutes` may not shadow. */

package/node_modules/@pome-sh/twin-slack/node_modules/@pome-sh/sdk/dist/server.js

@@ -0,0 +1,394 @@
+// file-size: server engine intentionally centralizes TwinDefinition boot, reserved routes, recorder shutdown, and auth wiring.
+// SPDX-License-Identifier: Apache-2.0
+//
+// `@pome-sh/sdk/server` — boot a `TwinDefinition` into a Hono app and
+// optionally bind a Node HTTP server. `createApp()` returns the bare app
+// (no port binding) for tests; `serve()` wraps it with `@hono/node-server`.
+//
+// Auto-mounted routes:
+//   GET  /healthz                          (root, no auth)
+//   POST /admin/reset                      (localhost-only)
+//   POST /admin/seed                       (localhost-only)
+//   GET  /s/:sid/healthz                   (bearer)
+//   GET  /s/:sid/_pome/health              (bearer)
+//   GET  /s/:sid/_pome/state               (bearer)
+//   GET  /s/:sid/_pome/events              (bearer)
+//   GET  /s/:sid/mcp/tools                 (bearer)
+//   POST /s/:sid/mcp/tools/:name           (bearer)
+//   POST /s/:sid/mcp/call                  (bearer)
+//
+// User routes registered via `definition.routes(app, ctx)` are mounted under
+// `/s/:sid/*`. The SDK refuses to boot if any user route shadows the
+// `/_pome/*` or `/mcp/*` prefixes (OQ-B6 invariant).
+import { Hono } from "hono";
+import { z } from "zod";
+import { toolInputSchema, toolListExtras, } from "./index.js";
+import { bearerAuth, requireAdminAuth } from "./auth.js";
+import { createAdminGate } from "./admin-gate.js";
+import { makeToolCallContext } from "./tool-context.js";
+import { twinBuildInfo } from "./build-info.js";
+import { handleMcpJsonRpc, mcpMethodNotAllowed } from "./mcp-jsonrpc.js";
+import { createRecorderHandle, resolveRecorderStore } from "./recorder.js";
+import { redactSecrets } from "./redaction.js";
+import { TwinError, envelopeFor } from "./errors.js";
+import { POME_CORE_ROUTE_NAMES, TwinBootError, assertUniqueToolNames, ensureTwinAuthSecret, findTool, isLoopbackHost, makeDeltaSink, readJson, shadowedPrefix, } from "./server-helpers.js";
+// Public boot surface consumed by twin entrypoints
+// (`import { ensureTwinAuthSecret, serve } from "@pome-sh/sdk/server"`).
+export { TwinBootError, ensureTwinAuthSecret, isLoopbackHost, created, ok } from "./server-helpers.js";
+export { createRecorderHandle, createRecorderStore, createFileBackedRecorderStore, resolveRecorderStore, toTwinHttpEventRow, POME_RECORDER_EVENTS_PATH, } from "./recorder.js";
+export { bearerAuth, requireAdminAuth, resolveAuthSecret } from "./auth.js";
+// Alternate serving bridges (anything that isn't @hono/node-server) must feed
+// the gate the transport-level peer address via setClientIp from an upstream
+// middleware; createAdminGate lets custom twins mount the gate with their own
+// 403 envelope. See the SECURITY note on setClientIp — never derive the value
+// from request headers.
+export { createAdminGate, setClientIp } from "./admin-gate.js";
+export { TwinError, UnknownToolError } from "./errors.js";
+export { redactEvent, redactSecrets } from "./redaction.js";
+export { FAILURE_INJECTION_OVERRIDE_KEY, createFailureInjectionStore, failureInjectionMiddleware, failureInjectionRuleSchema, } from "./failure-injection.js";
+export { PROVIDER_SHAPED_TEAM_ID, formTokenResolver, mintProviderToken, queryTokenResolver, verifyProviderToken, } from "./auth.js";
+export { twinBuildInfo } from "./build-info.js";
+const jsonRecord = z.record(z.string(), z.unknown());
+export function createApp(definition, options = {}) {
+    // 1. Validate + build seed
+    let seed;
+    if (options.seed !== undefined) {
+        if (definition.seed) {
+            seed = definition.seed.parse(options.seed);
+        }
+        else {
+            seed = options.seed;
+        }
+    }
+    // 2. Build domain
+    const domain = definition.domain({ db: options.db, seed });
+    // 3. Build recorder. The manifest's `errorEnvelope` (if set) is forwarded
+    //    here so API-mirroring twins control their error shape without
+    //    bypassing the recorder middleware.
+    const runId = options.runId ?? "local";
+    const recorder = createRecorderHandle({
+        runId,
+        twin: definition.id,
+        store: options.recorder ?? resolveRecorderStore(),
+        errorEnvelope: definition.errorEnvelope,
+        stampToolCallId: definition.stampToolCallId,
+        recordingProjection: definition.recordingProjection,
+    });
+    // 4. Boot-time invariant: user routes must not shadow reserved prefixes.
+    const userApp = new Hono();
+    if (definition.routes) {
+        definition.routes(userApp, { domain, recorder, runId, twin: definition.id });
+        for (const route of userApp.routes) {
+            const shadowed = shadowedPrefix(route.path);
+            if (shadowed) {
+                throw new TwinBootError(`Twin "${definition.id}" route ${route.method} ${route.path} shadows reserved SDK prefix ${shadowed}/*`);
+            }
+        }
+    }
+    // 5. Tool name uniqueness sanity (defineTwin already enforces, but a
+    //    test that hand-builds a TwinDefinition could bypass it).
+    assertUniqueToolNames(definition.tools, definition.id);
+    // 6. Build root app
+    const root = new Hono();
+    // Contract core: {ok, twin, implementation, tools, runtime}. Extras
+    // default to the pre-F-681 fields; a twin with a frozen healthz shape
+    // supplies its own (possibly empty) extras via `definition.healthz`.
+    const healthzExtras = definition.healthz ??
+        (() => ({ version: definition.version, fidelity: definition.fidelity.default }));
+    root.get("/healthz", (c) => c.json({
+        ok: true,
+        twin: definition.id,
+        implementation: definition.implementation ?? `${definition.id}_clone`,
+        tools: definition.tools.length,
+        runtime: twinBuildInfo(definition.packageName ?? `@pome-sh/twin-${definition.id}`),
+        ...healthzExtras(),
+    }));
+    // Per-twin body reader for the engine-owned JSON surfaces. Default is
+    // strict JSON (malformed → SyntaxError into the twin's errorEnvelope);
+    // twins with frozen tolerant/form parsing (slack, stripe) declare theirs.
+    const readBody = definition.bodyReader ?? ((c) => readJson(c.req.raw));
+    // 7. Admin sub-app. Gate mechanism is the engine's; a twin with a frozen
+    //    403 body declares it via `admin.forbidden` (F-683).
+    const adminForbidden = definition.admin?.forbidden;
+    const adminApp = new Hono();
+    adminApp.use("*", adminForbidden
+        ? createAdminGate({
+            forbidden: () => {
+                const envelope = adminForbidden();
+                return Response.json(envelope.body, { status: envelope.status });
+            },
+        })
+        : requireAdminAuth());
+    const adminEnvelope = definition.admin?.errorEnvelope;
+    // stripe pin: its pre-port recorder never saw admin traffic, so
+    // admin.recorded=false serves the same handlers without emitting events.
+    const wrapAdmin = definition.admin?.recorded !== false
+        ? (fn) => recorder.handle({ mutation: true, errorEnvelope: adminEnvelope }, fn)
+        : (fn) => async (c) => {
+            try {
+                const result = await fn(c);
+                return c.json(result.body, result.status);
+            }
+            catch (err) {
+                const envelope = (adminEnvelope ?? definition.errorEnvelope ?? envelopeFor)(err);
+                return c.json(envelope.body, envelope.status);
+            }
+        };
+    adminApp.post("/reset", wrapAdmin(async () => {
+        if (!definition.admin?.reset) {
+            throw new TwinError("admin.reset is not configured for this twin", 501);
+        }
+        const delta = makeDeltaSink();
+        const body = (await definition.admin.reset({ domain, reportDelta: delta.report })) ?? { ok: true };
+        return { status: 200, body, delta: delta.value() };
+    }));
+    adminApp.post("/seed", wrapAdmin(async (c) => {
+        if (!definition.admin?.seed) {
+            throw new TwinError("admin.seed is not configured for this twin", 501);
+        }
+        if (!definition.seed) {
+            throw new TwinError("Twin manifest has no `seed` schema; cannot accept POST /admin/seed", 501);
+        }
+        const raw = await readBody(c);
+        const parsed = definition.seed.parse(raw);
+        const delta = makeDeltaSink();
+        const body = (await definition.admin.seed({ domain, seed: parsed, reportDelta: delta.report })) ?? { ok: true };
+        return { status: 200, body, delta: delta.value() };
+    }));
+    root.route("/admin", adminApp);
+    // 8. Session sub-app. Auth mechanism is the engine's; the twin's declared
+    //    shape (F-712) rides in via `definition.auth`.
+    const session = new Hono();
+    session.use("*", bearerAuth(definition.auth));
+    // Session-wide middleware slot — the pre-port `session.use("*")` position,
+    // mounted BEFORE the engine's MCP / `/_pome/*` routes so twin middleware
+    // (stripe failure-injection, idempotency) covers MCP dispatch too.
+    if (definition.middleware) {
+        definition.middleware(session, { domain, recorder, runId, twin: definition.id });
+    }
+    // Per-session healthz is contract-frozen per twin: github/slack answer
+    // 200 {ok, sid}; stripe has NO such route (falls to the 501 catch-all).
+    if (definition.sessionHealthz !== false) {
+        session.get("/healthz", (c) => c.json({ ok: true, sid: c.req.param("sid") }));
+    }
+    // `pomeHealth` extras replace the default {version, fidelity} for twins
+    // with a frozen per-session health shape (slack: bare {ok, twin};
+    // github: no version; stripe adds recorder counters).
+    const pomeHealthExtras = definition.pomeHealth ??
+        (() => ({ version: definition.version, fidelity: definition.fidelity.default }));
+    session.get("/_pome/health", (c) => c.json({
+        ok: true,
+        twin: definition.id,
+        ...pomeHealthExtras({ recorder }),
+    }));
+    // NOT recorder-wrapped: no pre-port twin recorded /_pome/state fetches on
+    // the tape (F-683 review pin) — the export is a read-side probe, and
+    // recording it would embed the full state as an event response_body.
+    session.get("/_pome/state", async (c) => {
+        try {
+            if (!definition.state) {
+                throw new TwinError("state introspection is not configured for this twin", 501);
+            }
+            const session = c.get("session");
+            const state = await definition.state({ domain, session });
+            // Central redaction: the state export feeds cloud-side scoring and the
+            // CLI trace; a twin must not be able to leak secrets by omission.
+            return c.json(redactSecrets(state));
+        }
+        catch (err) {
+            const envelope = (definition.errorEnvelope ?? envelopeFor)(err);
+            return c.json(envelope.body, envelope.status);
+        }
+    });
+    session.get("/_pome/events", (c) => c.json(recorder.events()));
+    // 8b. Extra per-twin `/_pome/*` routes (github's frozen
+    //     GET /s/:sid/_pome/access-control, F-682). Registered after the core
+    //     routes so the platform surface can never be shadowed; core names are
+    //     rejected outright at boot.
+    if (definition.pomeRoutes) {
+        for (const [name, handler] of Object.entries(definition.pomeRoutes)) {
+            if (POME_CORE_ROUTE_NAMES.has(name)) {
+                throw new TwinBootError(`Twin "${definition.id}" pome route "/_pome/${name}" shadows a reserved engine route`);
+            }
+            session.get(`/_pome/${name}`, async (c) => c.json((await handler({ domain }))));
+        }
+    }
+    // 9. MCP routes from tool registry. `/mcp` is the streamable-HTTP
+    //    JSON-RPC endpoint (stateless — GET/DELETE answer 405); `/mcp/tools`,
+    //    `/mcp/tools/:name`, `/mcp/call` are the legacy dispatch surface.
+    session.post("/mcp", (c) => handleMcpJsonRpc(c, { definition, domain, recorder, runId }));
+    session.get("/mcp", (c) => mcpMethodNotAllowed(c));
+    session.delete("/mcp", (c) => mcpMethodNotAllowed(c));
+    session.get("/mcp/tools", (c) => c.json({
+        tools: definition.tools.map((tool) => ({
+            name: tool.name,
+            description: tool.description,
+            input_schema: toolInputSchema(tool),
+            ...toolListExtras(tool),
+        })),
+    }));
+    session.post("/mcp/tools/:name", recorder.handle({ mutation: false }, async (c) => {
+        const name = c.req.param("name") ?? "";
+        const tool = findTool(definition, name);
+        const args = await readBody(c);
+        const parsed = tool.schema.parse(args ?? {});
+        const call = makeToolCallContext(c);
+        const result = await tool.handler(domain, parsed, call.ctx);
+        const delta = call.delta();
+        const mutation = tool.mutation && (!call.reportedDelta() || delta !== null);
+        return { status: 200, body: result, mutation, delta };
+    }));
+    session.post("/mcp/call", recorder.handle({ mutation: false }, async (c) => {
+        const raw = await readBody(c);
+        let call;
+        if (definition.legacyMcp?.aliases) {
+            // Frozen slack surface: {name}/{params} alias {tool}/{arguments};
+            // a body naming no tool answers the twin's own envelope (400
+            // invalid_arguments) instead of the strict-parse error.
+            const rec = (raw && typeof raw === "object" && !Array.isArray(raw) ? raw : {});
+            const name = rec.tool ?? rec.name;
+            if (typeof name !== "string" || name.length === 0) {
+                const missing = definition.legacyMcp.missingTool;
+                if (missing) {
+                    const envelope = missing();
+                    return { status: envelope.status, body: envelope.body };
+                }
+                z.object({ tool: z.string().min(1) }).parse(rec); // throws the strict-parse error
+            }
+            call = {
+                tool: name,
+                arguments: (rec.arguments ?? rec.params ?? {}),
+            };
+        }
+        else {
+            call = z
+                .object({ tool: z.string().min(1), arguments: jsonRecord.default({}) })
+                .parse(raw);
+        }
+        const tool = findTool(definition, call.tool);
+        const parsed = tool.schema.parse(call.arguments);
+        const toolCall = makeToolCallContext(c);
+        const result = await tool.handler(domain, parsed, toolCall.ctx);
+        const delta = toolCall.delta();
+        const mutation = tool.mutation && (!toolCall.reportedDelta() || delta !== null);
+        return { status: 200, body: result, mutation, delta };
+    }));
+    // 10. User routes
+    if (definition.routes) {
+        session.route("/", userApp);
+    }
+    // 11. Catch-all for unsupported surfaces. Recorder records
+    //     fidelity:"unsupported" and returns 501 so unmatched routes surface
+    //     as a fidelity-gap signal in the trace instead of silently 404'ing.
+    //     Not opt-out per OQ-B6: every community twin auto-surfaces fidelity
+    //     gaps in the trace.
+    session.all("*", recorder.handle({ mutation: false, fidelity: "unsupported" }, async (c) => {
+        const ctx = { method: c.req.method, path: new URL(c.req.url).pathname };
+        if (definition.unsupported)
+            return definition.unsupported(ctx);
+        return {
+            status: 501,
+            body: {
+                message: `Endpoint not modeled by twin "${definition.id}".`,
+                fidelity: "unsupported",
+                method: ctx.method,
+                path: ctx.path,
+            },
+        };
+    }));
+    root.route("/s/:sid", session);
+    // 11b. SDK-compat root mount (stripe F3, F-684): the same session router
+    //      answers at the root path. Root /healthz + /admin/* were registered
+    //      first and stay first-match; unknown root paths hit the twin's auth
+    //      wall (bearerAuth answers 401 before the 501 catch-all). Pair with
+    //      `auth.requirePathSid: false` so the bearer alone resolves the sid.
+    if (definition.mountSessionAtRoot) {
+        root.route("/", session);
+    }
+    // 12. Footgun warning: clean-state-per-test workflows rely on
+    //     /admin/reset. Warn loudly if a twin ships without it so authors
+    //     don't discover the gap mid-CI-debug.
+    if (!definition.admin?.reset) {
+        console.warn(`[@pome-sh/sdk] twin "${definition.id}" has no admin.reset configured — POST /admin/reset returns 501. Most CI workflows rely on this for clean-state-per-test.`);
+    }
+    return root;
+}
+/**
+ * Build the app and bind a Node HTTP server. If `port` is omitted, no
+ * server is bound — `close()` still flushes the recorder store.
+ */
+export async function serve(definition, options = {}) {
+    const hostname = options.hostname ?? "127.0.0.1";
+    // Contract boot guard: a twin must never serve real traffic with the dev
+    // fallback secret. Since F-708 a non-loopback bind with no env-injected
+    // secret self-generates + persists one instead of refusing to boot; a
+    // failed generation still throws before the app is built, so the process
+    // exits non-zero without ever listening.
+    if (options.port !== undefined && !isLoopbackHost(hostname)) {
+        ensureTwinAuthSecret(definition.id, hostname);
+    }
+    // Resolve the store once so `close()` can flush the same instance the app
+    // records into (durable when POME_RECORDER_EVENTS_PATH is set).
+    const store = options.recorder ?? resolveRecorderStore();
+    const app = createApp(definition, { ...options, recorder: store });
+    const closeRecorder = async () => {
+        await store.flush?.();
+        await store.close?.();
+    };
+    if (options.port === undefined) {
+        return { app, close: closeRecorder };
+    }
+    const { serve: nodeServe } = await import("@hono/node-server");
+    const server = await new Promise((resolve) => {
+        const bound = nodeServe({
+            fetch: app.fetch,
+            port: options.port,
+            hostname,
+        }, () => resolve(bound));
+    });
+    let closed = false;
+    const close = async () => {
+        if (closed) {
+            await closeRecorder();
+            return;
+        }
+        closed = true;
+        unregisterServeShutdown(close);
+        await new Promise((resolve, reject) => {
+            server.close((err) => (err ? reject(err) : resolve()));
+        });
+        await closeRecorder();
+    };
+    // Twin boot scripts (`await serve(...)`) never call close() themselves.
+    // Drain the durable recorder on graceful process signals so hosted twins
+    // with POME_RECORDER_EVENTS_PATH set do not lose the last accepted events.
+    // Shared registry: every served twin flushes before a single process.exit,
+    // so multi-twin processes cannot lose sibling recorder tapes.
+    registerServeShutdown(close);
+    return { app, close };
+}
+/** Active `serve({ port })` close hooks — drained together on SIGINT/SIGTERM. */
+const serveShutdownHooks = new Set();
+let serveSignalHandlersInstalled = false;
+function registerServeShutdown(close) {
+    serveShutdownHooks.add(close);
+    if (serveSignalHandlersInstalled)
+        return;
+    serveSignalHandlersInstalled = true;
+    const onSignal = () => {
+        void (async () => {
+            const hooks = [...serveShutdownHooks];
+            serveShutdownHooks.clear();
+            await Promise.allSettled(hooks.map((hook) => hook()));
+            process.exit(0);
+        })();
+    };
+    process.once("SIGINT", onSignal);
+    process.once("SIGTERM", onSignal);
+}
+function unregisterServeShutdown(close) {
+    serveShutdownHooks.delete(close);
+}
+// ─── Helpers ────────────────────────────────────────────────────────────────
+/** Engine-owned `/_pome/*` route names a twin's `pomeRoutes` may not shadow. */
+//# sourceMappingURL=server.js.map

package/node_modules/@pome-sh/twin-slack/node_modules/@pome-sh/sdk/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,+HAA+H;AAC/H,sCAAsC;AACtC,EAAE;AACF,sEAAsE;AACtE,yEAAyE;AACzE,4EAA4E;AAC5E,EAAE;AACF,uBAAuB;AACvB,2DAA2D;AAC3D,4DAA4D;AAC5D,4DAA4D;AAC5D,oDAAoD;AACpD,oDAAoD;AACpD,oDAAoD;AACpD,oDAAoD;AACpD,oDAAoD;AACpD,oDAAoD;AACpD,oDAAoD;AACpD,EAAE;AACF,6EAA6E;AAC7E,qEAAqE;AACrE,qDAAqD;AAErD,OAAO,EAAE,IAAI,EAAgB,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAEL,eAAe,EACf,cAAc,GAIf,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAsB,MAAM,eAAe,CAAC;AAC/F,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAoB,WAAW,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EACL,qBAAqB,EACrB,aAAa,EACb,qBAAqB,EACrB,oBAAoB,EACpB,QAAQ,EACR,cAAc,EACd,aAAa,EACb,QAAQ,EACR,cAAc,GACf,MAAM,qBAAqB,CAAC;AAE7B,mDAAmD;AACnD,yEAAyE;AACzE,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,qBAAqB,CAAC;AAEvG,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,6BAA6B,EAC7B,oBAAoB,EACpB,kBAAkB,EAClB,yBAAyB,GAC1B,MAAM,eAAe,CAAC;AAOvB,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC5E,8EAA8E;AAC9E,6EAA6E;AAC7E,8EAA8E;AAC9E,8EAA8E;AAC9E,wBAAwB;AACxB,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE/D,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EACL,8BAA8B,EAC9B,2BAA2B,EAC3B,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,wBAAwB,CAAC;AAQhC,OAAO,EACL,uBAAuB,EACvB,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,WAAW,CAAC;AAWnB,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAkBhD,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AAErD,MAAM,UAAU,SAAS,CACvB,UAA+C,EAC/C,UAAoC,EAAE;IAEtC,2BAA2B;IAC3B,IAAI,IAAuB,CAAC;IAC5B,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;YACpB,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7C,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACtB,CAAC;IACH,CAAC;IAED,kBAAkB;IAClB,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAElE,0EAA0E;IAC1E,mEAAmE;IACnE,wCAAwC;IACxC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC;IACvC,MAAM,QAAQ,GAAG,oBAAoB,CAAC;QACpC,KAAK;QACL,IAAI,EAAE,UAAU,CAAC,EAAE;QACnB,KAAK,EAAE,OAAO,CAAC,QAAQ,IAAI,oBAAoB,EAAE;QACjD,aAAa,EAAE,UAAU,CAAC,aAAa;QACvC,eAAe,EAAE,UAAU,CAAC,eAAe;QAC3C,mBAAmB,EAAE,UAAU,CAAC,mBAAmB;KACpD,CAAC,CAAC;IAEH,yEAAyE;IACzE,MAAM,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC;IAC3B,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QACtB,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7E,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,IAAI,aAAa,CACrB,SAAS,UAAU,CAAC,EAAE,WAAW,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,gCAAgC,QAAQ,IAAI,CACxG,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,8DAA8D;IAC9D,qBAAqB,CAAC,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;IAEvD,oBAAoB;IACpB,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;IAExB,oEAAoE;IACpE,sEAAsE;IACtE,qEAAqE;IACrE,MAAM,aAAa,GACjB,UAAU,CAAC,OAAO;QAClB,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACnF,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CACzB,CAAC,CAAC,IAAI,CAAC;QACL,EAAE,EAAE,IAAI;QACR,IAAI,EAAE,UAAU,CAAC,EAAE;QACnB,cAAc,EAAE,UAAU,CAAC,cAAc,IAAI,GAAG,UAAU,CAAC,EAAE,QAAQ;QACrE,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,MAAM;QAC9B,OAAO,EAAE,aAAa,CAAC,UAAU,CAAC,WAAW,IAAI,iBAAiB,UAAU,CAAC,EAAE,EAAE,CAAC;QAClF,GAAG,aAAa,EAAE;KACnB,CAAC,CACH,CAAC;IAEF,sEAAsE;IACtE,uEAAuE;IACvE,0EAA0E;IAC1E,MAAM,QAAQ,GAAG,UAAU,CAAC,UAAU,IAAI,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAEhF,yEAAyE;IACzE,yDAAyD;IACzD,MAAM,cAAc,GAAG,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC;IACnD,MAAM,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC;IAC5B,QAAQ,CAAC,GAAG,CACV,GAAG,EACH,cAAc;QACZ,CAAC,CAAC,eAAe,CAAC;YACd,SAAS,EAAE,GAAG,EAAE;gBACd,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;gBAClC,OAAO,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YACnE,CAAC;SACF,CAAC;QACJ,CAAC,CAAC,gBAAgB,EAAE,CACvB,CAAC;IACF,MAAM,aAAa,GAAG,UAAU,CAAC,KAAK,EAAE,aAAa,CAAC;IACtD,gEAAgE;IAChE,yEAAyE;IACzE,MAAM,SAAS,GACb,UAAU,CAAC,KAAK,EAAE,QAAQ,KAAK,KAAK;QAClC,CAAC,CAAC,CAAC,EAA+E,EAAE,EAAE,CAClF,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,aAAa,EAAE,EAAE,EAAW,CAAC;QAClF,CAAC,CAAC,CAAC,EAA+E,EAAE,EAAE,CAClF,KAAK,EAAE,CAAU,EAAE,EAAE;YACnB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC3B,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAa,EAAE,MAAM,CAAC,MAAe,CAAC,CAAC;YAC9D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,QAAQ,GAAG,CAAC,aAAa,IAAI,UAAU,CAAC,aAAa,IAAI,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC;gBACjF,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAa,EAAE,QAAQ,CAAC,MAAe,CAAC,CAAC;YAClE,CAAC;QACH,CAAC,CAAC;IACV,QAAQ,CAAC,IAAI,CACX,QAAQ,EACR,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC;YAC7B,MAAM,IAAI,SAAS,CAAC,6CAA6C,EAAE,GAAG,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,CAAC,MAAM,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACnG,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IACrD,CAAC,CAAC,CACH,CAAC;IACF,QAAQ,CAAC,IAAI,CACX,OAAO,EACP,SAAS,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QACpB,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;YAC5B,MAAM,IAAI,SAAS,CAAC,4CAA4C,EAAE,GAAG,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;YACrB,MAAM,IAAI,SAAS,CACjB,oEAAoE,EACpE,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAU,CAAC;QACnD,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;QAC9B,MAAM,IAAI,GACR,CAAC,MAAM,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACrG,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IACrD,CAAC,CAAC,CACH,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAE/B,0EAA0E;IAC1E,mDAAmD;IACnD,MAAM,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC;IAC3B,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAE9C,2EAA2E;IAC3E,yEAAyE;IACzE,mEAAmE;IACnE,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;QAC1B,UAAU,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,uEAAuE;IACvE,wEAAwE;IACxE,IAAI,UAAU,CAAC,cAAc,KAAK,KAAK,EAAE,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAChF,CAAC;IACD,wEAAwE;IACxE,kEAAkE;IAClE,sDAAsD;IACtD,MAAM,gBAAgB,GACpB,UAAU,CAAC,UAAU;QACrB,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACnF,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CACjC,CAAC,CAAC,IAAI,CAAC;QACL,EAAE,EAAE,IAAI;QACR,IAAI,EAAE,UAAU,CAAC,EAAE;QACnB,GAAG,gBAAgB,CAAC,EAAE,QAAQ,EAAE,CAAC;KAClC,CAAC,CACH,CAAC;IACF,0EAA0E;IAC1E,qEAAqE;IACrE,qEAAqE;IACrE,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,EAAE,CAAU,EAAE,EAAE;QAC/C,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;gBACtB,MAAM,IAAI,SAAS,CAAC,qDAAqD,EAAE,GAAG,CAAC,CAAC;YAClF,CAAC;YACD,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAiD,CAAC;YACjF,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;YAC1D,uEAAuE;YACvE,kEAAkE;YAClE,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAU,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,QAAQ,GAAG,CAAC,UAAU,CAAC,aAAa,IAAI,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC;YAChE,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAa,EAAE,QAAQ,CAAC,MAAe,CAAC,CAAC;QAClE,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAE/D,wDAAwD;IACxD,0EAA0E;IAC1E,2EAA2E;IAC3E,iCAAiC;IACjC,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;QAC1B,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YACpE,IAAI,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,aAAa,CACrB,SAAS,UAAU,CAAC,EAAE,wBAAwB,IAAI,mCAAmC,CACtF,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,CAAU,CAAC,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IAED,kEAAkE;IAClE,0EAA0E;IAC1E,sEAAsE;IACtE,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAC1F,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAC9B,CAAC,CAAC,IAAI,CAAC;QACL,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACrC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,YAAY,EAAE,eAAe,CAAC,IAAI,CAAC;YACnC,GAAG,cAAc,CAAC,IAAI,CAAC;SACxB,CAAC,CAAC;KACJ,CAAC,CACH,CAAC;IACF,OAAO,CAAC,IAAI,CACV,kBAAkB,EAClB,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC/C,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC;QAC5E,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACxD,CAAC,CAAC,CACH,CAAC;IACF,OAAO,CAAC,IAAI,CACV,WAAW,EACX,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC/C,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,IAA0D,CAAC;QAC/D,IAAI,UAAU,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC;YAClC,kEAAkE;YAClE,6DAA6D;YAC7D,wDAAwD;YACxD,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAA4B,CAAC;YAC1G,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC;YAClC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAClD,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,WAAW,CAAC;gBACjD,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,QAAQ,GAAG,OAAO,EAAE,CAAC;oBAC3B,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAC1D,CAAC;gBACD,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,gCAAgC;YACpF,CAAC;YACD,IAAI,GAAG;gBACL,IAAI,EAAE,IAAc;gBACpB,SAAS,EAAE,CAAC,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE,CAA4B;aAC1E,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,CAAC;iBACL,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;iBACtE,KAAK,CAAC,GAAG,CAAyD,CAAC;QACxE,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC;QAChF,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACxD,CAAC,CAAC,CACH,CAAC;IAEF,kBAAkB;IAClB,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC9B,CAAC;IAED,2DAA2D;IAC3D,yEAAyE;IACzE,yEAAyE;IACzE,yEAAyE;IACzE,yBAAyB;IACzB,OAAO,CAAC,GAAG,CACT,GAAG,EACH,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACxE,MAAM,GAAG,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;QACxE,IAAI,UAAU,CAAC,WAAW;YAAE,OAAO,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC/D,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE;gBACJ,OAAO,EAAE,iCAAiC,UAAU,CAAC,EAAE,IAAI;gBAC3D,QAAQ,EAAE,aAAa;gBACvB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,IAAI,EAAE,GAAG,CAAC,IAAI;aACf;SACF,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;IAEF,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAE/B,yEAAyE;IACzE,0EAA0E;IAC1E,0EAA0E;IAC1E,yEAAyE;IACzE,0EAA0E;IAC1E,IAAI,UAAU,CAAC,kBAAkB,EAAE,CAAC;QAClC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC3B,CAAC;IAED,8DAA8D;IAC9D,sEAAsE;IACtE,2CAA2C;IAC3C,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC;QAC7B,OAAO,CAAC,IAAI,CACV,wBAAwB,UAAU,CAAC,EAAE,2HAA2H,CACjK,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAWD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,KAAK,CACzB,UAA+C,EAC/C,UAAoC,EAAE;IAEtC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,WAAW,CAAC;IACjD,yEAAyE;IACzE,wEAAwE;IACxE,sEAAsE;IACtE,yEAAyE;IACzE,yCAAyC;IACzC,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5D,oBAAoB,CAAC,UAAU,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IAChD,CAAC;IACD,0EAA0E;IAC1E,gEAAgE;IAChE,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,IAAI,oBAAoB,EAAE,CAAC;IACzD,MAAM,GAAG,GAAG,SAAS,CAAC,UAAU,EAAE,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IACnE,MAAM,aAAa,GAAG,KAAK,IAAI,EAAE;QAC/B,MAAM,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QACtB,MAAM,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IACxB,CAAC,CAAC;IACF,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;IACvC,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAA+B,CAAC,OAAO,EAAE,EAAE;QACzE,MAAM,KAAK,GAAG,SAAS,CACrB;YACE,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,QAAQ;SACT,EACD,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CACrB,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,MAAM,KAAK,GAAG,KAAK,IAAI,EAAE;QACvB,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,aAAa,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QACD,MAAM,GAAG,IAAI,CAAC;QACd,uBAAuB,CAAC,KAAK,CAAC,CAAC;QAC/B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,CAAC,KAAK,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QACH,MAAM,aAAa,EAAE,CAAC;IACxB,CAAC,CAAC;IACF,wEAAwE;IACxE,yEAAyE;IACzE,2EAA2E;IAC3E,2EAA2E;IAC3E,8DAA8D;IAC9D,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;AACxB,CAAC;AAED,iFAAiF;AACjF,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAuB,CAAC;AAC1D,IAAI,4BAA4B,GAAG,KAAK,CAAC;AAEzC,SAAS,qBAAqB,CAAC,KAA0B;IACvD,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,4BAA4B;QAAE,OAAO;IACzC,4BAA4B,GAAG,IAAI,CAAC;IACpC,MAAM,QAAQ,GAAG,GAAG,EAAE;QACpB,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,MAAM,KAAK,GAAG,CAAC,GAAG,kBAAkB,CAAC,CAAC;YACtC,kBAAkB,CAAC,KAAK,EAAE,CAAC;YAC3B,MAAM,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACtD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACjC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,uBAAuB,CAAC,KAA0B;IACzD,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnC,CAAC;AAED,+EAA+E;AAE/E,gFAAgF"}

package/node_modules/@pome-sh/twin-slack/node_modules/@pome-sh/sdk/dist/tool-context.d.ts

@@ -0,0 +1,8 @@
+import type { Context } from "hono";
+import type { RecorderEvent, ToolCallContext } from "./index.js";
+export declare function makeToolCallContext(c: Context): {
+    ctx: ToolCallContext;
+    delta: () => RecorderEvent["state_delta"];
+    /** True once the handler invoked `reportDelta` (including with `null`). */
+    reportedDelta: () => boolean;
+};

package/node_modules/@pome-sh/twin-slack/node_modules/@pome-sh/sdk/dist/tool-context.js

@@ -0,0 +1,22 @@
+// SPDX-License-Identifier: Apache-2.0
+//
+// Per-call ToolCallContext factory shared by every MCP dispatch surface
+// (server.ts legacy routes + mcp-jsonrpc.ts tools/call). Exposes the
+// authenticated session and captures a handler-reported state delta for the
+// recorded event (F-683).
+export function makeToolCallContext(c) {
+    let reported = null;
+    let didReport = false;
+    return {
+        ctx: {
+            session: c.get("session"),
+            reportDelta: (delta) => {
+                reported = delta;
+                didReport = true;
+            },
+        },
+        delta: () => reported,
+        reportedDelta: () => didReport,
+    };
+}
+//# sourceMappingURL=tool-context.js.map

package/node_modules/@pome-sh/twin-slack/node_modules/@pome-sh/sdk/dist/tool-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-context.js","sourceRoot":"","sources":["../src/tool-context.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,wEAAwE;AACxE,qEAAqE;AACrE,4EAA4E;AAC5E,0BAA0B;AAM1B,MAAM,UAAU,mBAAmB,CAAC,CAAU;IAM5C,IAAI,QAAQ,GAAiC,IAAI,CAAC;IAClD,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,OAAO;QACL,GAAG,EAAE;YACH,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAA6B;YACrD,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE;gBACrB,QAAQ,GAAG,KAAK,CAAC;gBACjB,SAAS,GAAG,IAAI,CAAC;YACnB,CAAC;SACF;QACD,KAAK,EAAE,GAAG,EAAE,CAAC,QAAQ;QACrB,aAAa,EAAE,GAAG,EAAE,CAAC,SAAS;KAC/B,CAAC;AACJ,CAAC"}

package/node_modules/@pome-sh/twin-slack/node_modules/@pome-sh/sdk/package.json

@@ -0,0 +1,54 @@
+{
+  "name": "@pome-sh/sdk",
+  "version": "0.5.1",
+  "description": "Twin engine for Pome digital twins — defineTwin() + serve(): HTTP mounting, bearer auth, trace recorder, MCP dispatch, SQLite-backed state.",
+  "private": false,
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./server": {
+      "types": "./dist/server.d.ts",
+      "default": "./dist/server.js"
+    },
+    "./parity": {
+      "types": "./dist/parity.d.ts",
+      "default": "./dist/parity.js"
+    }
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/pome-sh/digital-twins.git",
+    "directory": "packages/sdk"
+  },
+  "homepage": "https://github.com/pome-sh/digital-twins/tree/main/packages/sdk",
+  "bugs": {
+    "url": "https://github.com/pome-sh/digital-twins/issues"
+  },
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "@pome-sh/shared-types": "0.12.0",
+    "hono": "^4.12.27",
+    "zod": "^4.1.13"
+  },
+  "peerDependencies": {
+    "@hono/node-server": "^2.0.8"
+  },
+  "peerDependenciesMeta": {
+    "@hono/node-server": {
+      "optional": true
+    }
+  },
+  "engines": {
+    "node": ">=24"
+  }
+}

package/node_modules/@pome-sh/twin-stripe/node_modules/@pome-sh/sdk/dist/admin-gate.d.ts

@@ -0,0 +1,35 @@
+import type { Context, MiddlewareHandler } from "hono";
+/** Context variable consulted first by getClientIp(). */
+export declare const CLIENT_IP_VAR = "pomeClientIp";
+/**
+ * Explicitly record the peer address for this request. Alternate serving
+ * bridges (or tests) call this from an upstream middleware so the gate never
+ * reaches into runtime-private internals.
+ *
+ * SECURITY: the value passed here MUST be the transport-level peer address
+ * (the socket's remote address as reported by the serving bridge). It takes
+ * precedence over getConnInfo, so deriving it from any request-controlled
+ * input — X-Forwarded-For or any other client-supplied header — would make
+ * the loopback-only admin gate spoofable by whoever sets that header. If you
+ * are behind a reverse proxy, use TWIN_ADMIN_TOKEN instead of trying to
+ * recover the "real" client IP.
+ */
+export declare function setClientIp(c: Context, ip: string): void;
+/**
+ * Runtime-neutral client-IP accessor (FDRS-587). Resolution order:
+ *   1. Explicit override set via setClientIp() (alternate bridges / tests).
+ *   2. The node serving bridge's official getConnInfo helper.
+ *   3. undefined — no live socket (e.g. app.request() in-process tests).
+ */
+export declare function getClientIp(c: Context): Promise<string | undefined>;
+export declare function isLoopbackAddress(remote: string): boolean;
+export interface AdminGateOptions {
+    /** 403 response factory so each twin keeps its own error envelope. */
+    forbidden?: () => Response;
+}
+/**
+ * Admin endpoint protection shared by every twin (FDRS-616). Each twin's
+ * auth.ts wraps this with its own `forbidden` envelope. Semantics are
+ * identical to the per-twin requireAdminAuth() copies this replaces.
+ */
+export declare function createAdminGate(options?: AdminGateOptions): MiddlewareHandler;