@powerhousedao/switchboard 6.0.0-dev.207 → 6.0.0-dev.209

package/test/attachments/routes.test.ts

@@ -0,0 +1,501 @@
+import { PGlite } from "@electric-sql/pglite";
+import {
+  AttachmentBuilder,
+  type AttachmentBuildResult,
+} from "@powerhousedao/reactor-attachments";
+import { Kysely } from "kysely";
+import { PGliteDialect } from "kysely-pglite-dialect";
+import { mkdtemp, rm } from "node:fs/promises";
+import type { IncomingMessage, ServerResponse } from "node:http";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { Readable, Writable } from "node:stream";
+import { afterEach, beforeEach, describe, expect, it } from "vitest";
+import {
+  buildContentDisposition,
+  makeDownloadHandler,
+  makeReserveHandler,
+  makeUploadHandler,
+  parseReserveOptions,
+  quoteFilename,
+} from "../../src/attachments/routes.js";
+
+type CapturedRes = ServerResponse & {
+  _headers: Record<string, string>;
+  _body: Buffer;
+  _done: Promise<void>;
+};
+
+function makeReq(opts: {
+  method: string;
+  url?: string;
+  body?: Buffer | string;
+  params?: Record<string, string>;
+}): IncomingMessage {
+  const buf =
+    typeof opts.body === "string"
+      ? Buffer.from(opts.body, "utf8")
+      : (opts.body ?? Buffer.alloc(0));
+  const req = Readable.from(buf.length === 0 ? [] : [buf]) as Readable & {
+    method: string;
+    url?: string;
+    headers: Record<string, string>;
+    params?: Record<string, string>;
+  };
+  req.method = opts.method;
+  req.url = opts.url ?? "/";
+  req.headers = {};
+  if (opts.params) req.params = opts.params;
+  return req as unknown as IncomingMessage;
+}
+
+function makeRes(): CapturedRes {
+  const chunks: Buffer[] = [];
+  const headers: Record<string, string> = {};
+  const writable = new Writable({
+    write(chunk: string | Buffer, _encoding, callback) {
+      chunks.push(
+        typeof chunk === "string" ? Buffer.from(chunk, "utf8") : chunk,
+      );
+      callback();
+    },
+  });
+  const done = new Promise<void>((resolve) => {
+    writable.once("finish", resolve);
+  });
+  Object.assign(writable, {
+    statusCode: 200,
+    _headers: headers,
+    setHeader(name: string, value: string | number | readonly string[]) {
+      headers[name.toLowerCase()] = String(value);
+    },
+    getHeader(name: string) {
+      return headers[name.toLowerCase()];
+    },
+    _done: done,
+  });
+  Object.defineProperty(writable, "_body", {
+    get(): Buffer {
+      return Buffer.concat(chunks);
+    },
+  });
+  return writable as unknown as CapturedRes;
+}
+
+async function waitFor(res: CapturedRes): Promise<void> {
+  await res._done;
+}
+
+describe("attachment routes", () => {
+  let attachments: AttachmentBuildResult;
+  let storagePath: string;
+  let kysely: Kysely<unknown>;
+  let cleanup: () => Promise<void>;
+
+  beforeEach(async () => {
+    const pglite = new PGlite();
+    kysely = new Kysely<unknown>({ dialect: new PGliteDialect(pglite) });
+    storagePath = await mkdtemp(join(tmpdir(), "switchboard-attach-"));
+    attachments = await new AttachmentBuilder(kysely, storagePath).build();
+    cleanup = async () => {
+      await kysely.destroy();
+      await rm(storagePath, { recursive: true, force: true });
+    };
+  });
+
+  afterEach(async () => {
+    await cleanup();
+  });
+
+  it("POST reserve returns 201 with reservationId for valid body", async () => {
+    const handler = makeReserveHandler(attachments);
+    const req = makeReq({
+      method: "POST",
+      body: JSON.stringify({ mimeType: "text/plain", fileName: "hello.txt" }),
+    });
+    const res = makeRes();
+    await handler(req, res);
+    await waitFor(res);
+    expect(res.statusCode).toBe(201);
+    const body = JSON.parse(res._body.toString("utf8")) as {
+      reservationId: string;
+    };
+    expect(body.reservationId).toMatch(/.+/);
+  });
+
+  it("POST reserve returns 400 for missing fields", async () => {
+    const handler = makeReserveHandler(attachments);
+    const req = makeReq({
+      method: "POST",
+      body: JSON.stringify({ mimeType: "text/plain" }),
+    });
+    const res = makeRes();
+    await handler(req, res);
+    await waitFor(res);
+    expect(res.statusCode).toBe(400);
+  });
+
+  it("PUT upload returns 404 for unknown reservation", async () => {
+    const handler = makeUploadHandler(attachments);
+    const req = makeReq({
+      method: "PUT",
+      params: { reservationId: "00000000-0000-0000-0000-000000000000" },
+      body: "hello",
+    });
+    const res = makeRes();
+    await handler(req, res);
+    await waitFor(res);
+    expect(res.statusCode).toBe(404);
+  });
+
+  it("full reserve -> upload -> download cycle round-trips bytes", async () => {
+    // Reserve
+    const reserveHandler = makeReserveHandler(attachments);
+    const reserveReq = makeReq({
+      method: "POST",
+      body: JSON.stringify({
+        mimeType: "text/plain",
+        fileName: "hello.txt",
+        extension: "txt",
+      }),
+    });
+    const reserveRes = makeRes();
+    await reserveHandler(reserveReq, reserveRes);
+    await waitFor(reserveRes);
+    expect(reserveRes.statusCode).toBe(201);
+    const { reservationId } = JSON.parse(reserveRes._body.toString("utf8")) as {
+      reservationId: string;
+    };
+
+    // Upload
+    const uploadHandler = makeUploadHandler(attachments);
+    const payload = "hello world";
+    const uploadReq = makeReq({
+      method: "PUT",
+      params: { reservationId },
+      body: payload,
+    });
+    const uploadRes = makeRes();
+    await uploadHandler(uploadReq, uploadRes);
+    await waitFor(uploadRes);
+    expect(uploadRes.statusCode).toBe(200);
+    const upload = JSON.parse(uploadRes._body.toString("utf8")) as {
+      hash: string;
+      ref: string;
+      header: { mimeType: string; fileName: string; sizeBytes: number };
+    };
+    expect(upload.hash).toMatch(/^[a-f0-9]{64}$/);
+    expect(upload.ref).toBe(`attachment://v1:${upload.hash}`);
+    expect(upload.header.sizeBytes).toBe(payload.length);
+
+    // Reservation should be cleaned up
+    await expect(attachments.reservations.get(reservationId)).rejects.toThrow();
+
+    // Download
+    const downloadHandler = makeDownloadHandler(attachments);
+    const downloadReq = makeReq({
+      method: "GET",
+      params: { hash: upload.hash },
+    });
+    const downloadRes = makeRes();
+    await downloadHandler(downloadReq, downloadRes);
+    await waitFor(downloadRes);
+    expect(downloadRes.statusCode).toBe(200);
+    expect(downloadRes._body.toString("utf8")).toBe(payload);
+    expect(downloadRes.getHeader("content-type")).toBe("text/plain");
+    expect(downloadRes.getHeader("content-length")).toBe(
+      String(payload.length),
+    );
+    expect(downloadRes.getHeader("content-disposition")).toContain("hello.txt");
+    const meta = JSON.parse(
+      downloadRes.getHeader("x-attachment-metadata") as string,
+    ) as { fileName: string; mimeType: string; sizeBytes: number };
+    expect(meta.fileName).toBe("hello.txt");
+    expect(meta.mimeType).toBe("text/plain");
+    expect(meta.sizeBytes).toBe(payload.length);
+  });
+
+  it("GET download returns 404 for unknown hash", async () => {
+    const handler = makeDownloadHandler(attachments);
+    const req = makeReq({
+      method: "GET",
+      params: { hash: "a".repeat(64) },
+    });
+    const res = makeRes();
+    await handler(req, res);
+    await waitFor(res);
+    expect(res.statusCode).toBe(404);
+  });
+
+  it("GET download returns 400 for malformed hash", async () => {
+    const handler = makeDownloadHandler(attachments);
+    const req = makeReq({
+      method: "GET",
+      params: { hash: "not-a-hash" },
+    });
+    const res = makeRes();
+    await handler(req, res);
+    await waitFor(res);
+    expect(res.statusCode).toBe(400);
+  });
+
+  it("GET download returns 400 for uppercase hash", async () => {
+    const handler = makeDownloadHandler(attachments);
+    const req = makeReq({
+      method: "GET",
+      params: { hash: "A".repeat(64) },
+    });
+    const res = makeRes();
+    await handler(req, res);
+    await waitFor(res);
+    expect(res.statusCode).toBe(400);
+    expect(JSON.parse(res._body.toString("utf8"))).toEqual({
+      error: "Invalid attachment hash",
+    });
+  });
+
+  it("PUT upload returns opaque 500 when reservation lookup throws an unmapped error", async () => {
+    const secret = "INTERNAL_DB_PATH=/var/secret/db.sock";
+    const originalGet = attachments.reservations.get.bind(
+      attachments.reservations,
+    );
+    attachments.reservations.get = () => {
+      throw new Error(secret);
+    };
+    try {
+      const handler = makeUploadHandler(attachments);
+      const req = makeReq({
+        method: "PUT",
+        params: { reservationId: "00000000-0000-0000-0000-000000000000" },
+        body: "hello",
+      });
+      const res = makeRes();
+      await handler(req, res);
+      await waitFor(res);
+      expect(res.statusCode).toBe(500);
+      const bodyText = res._body.toString("utf8");
+      expect(JSON.parse(bodyText)).toEqual({ error: "Internal error" });
+      expect(bodyText).not.toContain(secret);
+    } finally {
+      attachments.reservations.get = originalGet;
+    }
+  });
+
+  it("GET download returns opaque 500 when store throws an unmapped error", async () => {
+    const secret = "INTERNAL_FS_PATH=/var/secret/blobs";
+    const originalGet = attachments.store.get.bind(attachments.store);
+    attachments.store.get = () => {
+      throw new Error(secret);
+    };
+    try {
+      const handler = makeDownloadHandler(attachments);
+      const req = makeReq({
+        method: "GET",
+        params: { hash: "a".repeat(64) },
+      });
+      const res = makeRes();
+      await handler(req, res);
+      await waitFor(res);
+      expect(res.statusCode).toBe(500);
+      const bodyText = res._body.toString("utf8");
+      expect(JSON.parse(bodyText)).toEqual({ error: "Internal error" });
+      expect(bodyText).not.toContain(secret);
+    } finally {
+      attachments.store.get = originalGet;
+    }
+  });
+
+  it("identical uploads dedupe to the same hash", async () => {
+    const reserveHandler = makeReserveHandler(attachments);
+    const uploadHandler = makeUploadHandler(attachments);
+
+    const doRoundTrip = async (): Promise<string> => {
+      const r1 = makeReq({
+        method: "POST",
+        body: JSON.stringify({ mimeType: "text/plain", fileName: "x.txt" }),
+      });
+      const r1res = makeRes();
+      await reserveHandler(r1, r1res);
+      await waitFor(r1res);
+      const { reservationId } = JSON.parse(r1res._body.toString()) as {
+        reservationId: string;
+      };
+
+      const u1 = makeReq({
+        method: "PUT",
+        params: { reservationId },
+        body: "same content",
+      });
+      const u1res = makeRes();
+      await uploadHandler(u1, u1res);
+      await waitFor(u1res);
+      const { hash } = JSON.parse(u1res._body.toString()) as { hash: string };
+      return hash;
+    };
+
+    const h1 = await doRoundTrip();
+    const h2 = await doRoundTrip();
+    expect(h1).toBe(h2);
+  });
+
+  describe("validation and header encoding", () => {
+    it("parseReserveOptions rejects fileName with CR/LF", () => {
+      expect(
+        parseReserveOptions({
+          mimeType: "text/plain",
+          fileName: "evil\r\nX-Inj: foo",
+        }),
+      ).toBeNull();
+    });
+
+    it("parseReserveOptions rejects fileName with NUL", () => {
+      expect(
+        parseReserveOptions({
+          mimeType: "text/plain",
+          fileName: "a\x00b",
+        }),
+      ).toBeNull();
+    });
+
+    it("parseReserveOptions rejects oversized fileName", () => {
+      expect(
+        parseReserveOptions({
+          mimeType: "text/plain",
+          fileName: "x".repeat(256),
+        }),
+      ).toBeNull();
+    });
+
+    it("parseReserveOptions rejects empty fileName", () => {
+      expect(
+        parseReserveOptions({
+          mimeType: "text/plain",
+          fileName: "",
+        }),
+      ).toBeNull();
+    });
+
+    it("parseReserveOptions rejects malformed mimeType", () => {
+      for (const mimeType of ["", "plain", "text/plain\r\nX: y", "text/"]) {
+        expect(
+          parseReserveOptions({ mimeType, fileName: "ok.txt" }),
+        ).toBeNull();
+      }
+    });
+
+    it("parseReserveOptions accepts non-ASCII fileName", () => {
+      const opts = parseReserveOptions({
+        mimeType: "application/pdf",
+        fileName: "résumé.pdf",
+      });
+      expect(opts).toEqual({
+        mimeType: "application/pdf",
+        fileName: "résumé.pdf",
+        extension: null,
+      });
+    });
+
+    it("parseReserveOptions accepts mimeType with parameters", () => {
+      const opts = parseReserveOptions({
+        mimeType: "text/plain; charset=utf-8",
+        fileName: "ok.txt",
+      });
+      expect(opts?.mimeType).toBe("text/plain; charset=utf-8");
+    });
+
+    it("quoteFilename escapes backslash and double-quote", () => {
+      expect(quoteFilename(`a"b\\c`)).toBe(`"a\\"b\\\\c"`);
+    });
+
+    it("buildContentDisposition emits ASCII fallback and RFC 5987 form for non-ASCII", () => {
+      const value = buildContentDisposition("résumé.pdf");
+      expect(value).toMatch(
+        /^attachment; filename="[^"]*\.pdf"; filename\*=UTF-8''/,
+      );
+      expect(value).toContain("filename*=UTF-8''r%C3%A9sum%C3%A9.pdf");
+    });
+
+    it("buildContentDisposition produces a header Node accepts even for CR/LF/NUL input", () => {
+      const res = makeRes();
+      for (const fileName of [
+        "evil\r\nX-Inj: foo",
+        "a\x00b.txt",
+        "name\twith\ttabs",
+      ]) {
+        expect(() =>
+          res.setHeader(
+            "Content-Disposition",
+            buildContentDisposition(fileName),
+          ),
+        ).not.toThrow();
+      }
+    });
+
+    it("buildContentDisposition encodes RFC-5987-reserved chars in the encoded form", () => {
+      const value = buildContentDisposition("a'b(c)*!.txt");
+      expect(value).toContain("filename*=UTF-8''a%27b%28c%29%2A%21.txt");
+    });
+
+    it("POST reserve with CRLF in fileName returns 400 and persists no row", async () => {
+      const handler = makeReserveHandler(attachments);
+      const req = makeReq({
+        method: "POST",
+        body: JSON.stringify({
+          mimeType: "text/plain",
+          fileName: "evil\r\nX-Inj: foo",
+        }),
+      });
+      const res = makeRes();
+      await handler(req, res);
+      await waitFor(res);
+      expect(res.statusCode).toBe(400);
+    });
+
+    it("download with non-ASCII fileName produces RFC 6266 Content-Disposition", async () => {
+      const reserveHandler = makeReserveHandler(attachments);
+      const uploadHandler = makeUploadHandler(attachments);
+      const downloadHandler = makeDownloadHandler(attachments);
+
+      const reserveReq = makeReq({
+        method: "POST",
+        body: JSON.stringify({
+          mimeType: "application/pdf",
+          fileName: "résumé.pdf",
+        }),
+      });
+      const reserveRes = makeRes();
+      await reserveHandler(reserveReq, reserveRes);
+      await waitFor(reserveRes);
+      expect(reserveRes.statusCode).toBe(201);
+      const { reservationId } = JSON.parse(
+        reserveRes._body.toString("utf8"),
+      ) as { reservationId: string };
+
+      const uploadReq = makeReq({
+        method: "PUT",
+        params: { reservationId },
+        body: "pdf-bytes",
+      });
+      const uploadRes = makeRes();
+      await uploadHandler(uploadReq, uploadRes);
+      await waitFor(uploadRes);
+      expect(uploadRes.statusCode).toBe(200);
+      const { hash } = JSON.parse(uploadRes._body.toString("utf8")) as {
+        hash: string;
+      };
+
+      const downloadReq = makeReq({ method: "GET", params: { hash } });
+      const downloadRes = makeRes();
+      await downloadHandler(downloadReq, downloadRes);
+      await waitFor(downloadRes);
+      expect(downloadRes.statusCode).toBe(200);
+      const cd = downloadRes.getHeader("content-disposition") as string;
+      expect(cd).toContain("filename*=UTF-8''r%C3%A9sum%C3%A9.pdf");
+      expect(cd).toMatch(/filename="[^"]*\.pdf"/);
+      const meta = JSON.parse(
+        downloadRes.getHeader("x-attachment-metadata") as string,
+      ) as { fileName: string };
+      expect(meta.fileName).toBe("résumé.pdf");
+    });
+  });
+});

package/tsconfig.json

@@ -2,9 +2,13 @@
   "extends": "../../tsconfig.options.json",
   "compilerOptions": {
     "outDir": "./dist",
-    "lib": ["ESNext"]
+    "lib": [
+      "ESNext"
+    ]
   },
-  "include": ["**/*"],
+  "include": [
+    "**/*"
+  ],
   "references": [
     {
       "path": "../../packages/config"
@@ -21,6 +25,9 @@
     {
       "path": "../../packages/reactor-api"
     },
+    {
+      "path": "../../packages/reactor-attachments"
+    },
     {
       "path": "../../packages/renown"
     },

package/dist/server-BMtyzhoR.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"server-BMtyzhoR.mjs","names":["vetraDocumentModels","documentModels","vetraProcessorFactory"],"sources":["../src/feature-flags.ts","../src/renown.ts","../src/server.mts"],"sourcesContent":["import { EnvVarProvider } from \"@openfeature/env-var-provider\";\nimport { OpenFeature } from \"@openfeature/server-sdk\";\n\nexport async function initFeatureFlags() {\n  // for now, we're only using env vars for feature flags\n  const provider = new EnvVarProvider();\n\n  await OpenFeature.setProviderAndWait(provider);\n\n  return OpenFeature.getClient();\n}\n","import type { SignerConfig } from \"@powerhousedao/reactor\";\nimport {\n  createSignatureVerifier,\n  DEFAULT_RENOWN_URL,\n  NodeKeyStorage,\n  RenownBuilder,\n  RenownCryptoBuilder,\n  type IRenown,\n} from \"@renown/sdk/node\";\nimport { childLogger } from \"document-model\";\n\nconst logger = childLogger([\"switchboard\", \"renown\"]);\n\nexport interface RenownOptions {\n  /** Path to the keypair file. Defaults to .ph/.keypair.json in cwd */\n  keypairPath?: string;\n  /** If true, won't generate a new keypair if none exists */\n  requireExisting?: boolean;\n  /** Base url of the Renown instance to use */\n  baseUrl?: string;\n}\n\n/**\n * Initialize Renown for the Switchboard instance.\n * This allows Switchboard to authenticate with remote services\n * using the same identity established during `ph login`.\n */\nexport async function initRenown(\n  options: RenownOptions = {},\n): Promise<IRenown | null> {\n  const {\n    keypairPath,\n    requireExisting = false,\n    baseUrl = DEFAULT_RENOWN_URL,\n  } = options;\n\n  const keyStorage = new NodeKeyStorage(keypairPath, {\n    logger,\n  });\n\n  // Check if we have an existing keypair\n  const existingKeyPair = await keyStorage.loadKeyPair();\n\n  if (!existingKeyPair && requireExisting) {\n    throw new Error(\n      \"No existing keypair found and requireExisting is true. \" +\n        'Run \"ph login\" to create one.',\n    );\n  }\n\n  if (!existingKeyPair) {\n    logger.info(\"No existing keypair found. A new one will be generated.\");\n  }\n\n  const renownCrypto = await new RenownCryptoBuilder()\n    .withKeyPairStorage(keyStorage)\n    .build();\n\n  const renown = await new RenownBuilder(\"switchboard\", {})\n    .withCrypto(renownCrypto)\n    .withBaseUrl(baseUrl)\n    .build();\n\n  logger.info(\"Switchboard identity initialized: @did\", renownCrypto.did);\n\n  return renown;\n}\n\n/**\n * Get the signer config for the given renown instance.\n *\n * @param renown - The renown instance\n * @param requireSignature - If true, unsigned actions are rejected\n */\nexport function getRenownSignerConfig(\n  renown: IRenown,\n  requireSignature?: boolean,\n): SignerConfig {\n  return {\n    signer: renown.signer,\n    verifier: createSignatureVerifier(requireSignature),\n  };\n}\n","#!/usr/bin/env node\nimport { PGlite } from \"@electric-sql/pglite\";\nimport { metrics } from \"@opentelemetry/api\";\nimport { getConfig } from \"@powerhousedao/config/node\";\nimport { ReactorInstrumentation } from \"@powerhousedao/opentelemetry-instrumentation-reactor\";\nimport {\n  ChannelScheme,\n  EventBus,\n  ReactorBuilder,\n  ReactorClientBuilder,\n  driveCollectionId,\n  parseDriveUrl,\n  type Database,\n} from \"@powerhousedao/reactor\";\nimport {\n  HttpPackageLoader,\n  ImportPackageLoader,\n  PackageManagementService,\n  PackagesSubgraph,\n  getUniqueDocumentModels,\n  initializeAndStartAPI,\n  type IPackageLoader,\n} from \"@powerhousedao/reactor-api\";\nimport { httpsHooksPath } from \"@powerhousedao/reactor-api/https-hooks\";\nimport {\n  VitePackageLoader,\n  createViteLogger,\n  startViteServer,\n} from \"@powerhousedao/reactor-api/vite\";\nimport { driveDocumentModelModule } from \"@powerhousedao/shared/document-drive\";\nimport type { DocumentModelModule } from \"@powerhousedao/shared/document-model\";\nimport { documentModels as vetraDocumentModels } from \"@powerhousedao/vetra\";\nimport { processorFactory as vetraProcessorFactory } from \"@powerhousedao/vetra/processors\";\nimport type { IRenown } from \"@renown/sdk/node\";\nimport * as Sentry from \"@sentry/node\";\nimport {\n  childLogger,\n  documentModelDocumentModelModule,\n  setLogLevel,\n  type ILogger,\n} from \"document-model\";\nimport dotenv from \"dotenv\";\nimport { Kysely, PostgresDialect } from \"kysely\";\nimport { PGliteDialect } from \"kysely-pglite-dialect\";\nimport net from \"node:net\";\nimport { register } from \"node:module\";\nimport path from \"path\";\nimport { Pool } from \"pg\";\nimport { initFeatureFlags } from \"./feature-flags.js\";\nimport { getRenownSignerConfig, initRenown } from \"./renown.js\";\nimport type { StartServerOptions, SwitchboardReactor } from \"./types.js\";\nimport { addDefaultDrive, isPostgresUrl } from \"./utils.mjs\";\n\nconst defaultLogger = childLogger([\"switchboard\"]);\n\nconst LogLevel = (process.env.LOG_LEVEL as ILogger[\"level\"] | \"\") || \"info\";\nsetLogLevel(LogLevel);\n\ndotenv.config();\n\n// Feature flag constants\nconst DOCUMENT_MODEL_SUBGRAPHS_ENABLED = \"DOCUMENT_MODEL_SUBGRAPHS_ENABLED\";\nconst DOCUMENT_MODEL_SUBGRAPHS_ENABLED_DEFAULT = true;\nconst REQUIRE_SIGNATURES = \"REQUIRE_SIGNATURES\";\nconst REQUIRE_SIGNATURES_DEFAULT = false;\n\nif (process.env.SENTRY_DSN) {\n  defaultLogger.info(\n    \"Initialized Sentry with env: @env\",\n    process.env.SENTRY_ENV,\n  );\n  Sentry.init({\n    dsn: process.env.SENTRY_DSN,\n    environment: process.env.SENTRY_ENV,\n    // Match the version tag uploaded by release-branch.yml so source maps\n    // resolve. Populated by the CI (WORKSPACE_VERSION) or npm at runtime.\n    release:\n      process.env.SENTRY_RELEASE ||\n      (process.env.npm_package_version\n        ? `v${process.env.npm_package_version}`\n        : undefined),\n  });\n}\n\nconst DEFAULT_PORT = process.env.PORT ? Number(process.env.PORT) : 4001;\n\n// How many ports forward from the requested one we will try before giving up.\nconst PORT_FALLBACK_ATTEMPTS = 20;\n\n/**\n * Attempt to bind a throwaway TCP server to the given port. Resolves true if\n * the port is free, false if the OS reports it in use. Any other error is\n * surfaced so we don't silently mask real issues (permissions, bad host, …).\n */\nexport function isPortAvailable(port: number): Promise<boolean> {\n  return new Promise((resolve, reject) => {\n    const tester = net.createServer();\n    tester.once(\"error\", (err: NodeJS.ErrnoException) => {\n      if (err.code === \"EADDRINUSE\" || err.code === \"EACCES\") {\n        resolve(false);\n      } else {\n        reject(err);\n      }\n    });\n    tester.once(\"listening\", () => {\n      tester.close(() => resolve(true));\n    });\n    // Bind on the unspecified IPv6 address so we detect collisions with both\n    // IPv6 and IPv4 listeners (Node maps `::` to dual-stack on most systems).\n    tester.listen({ port, host: \"::\" });\n  });\n}\n\nasync function resolveServerPort(\n  requested: number,\n  strictPort: boolean,\n  logger: ILogger,\n): Promise<number> {\n  if (strictPort) return requested;\n  for (let i = 0; i < PORT_FALLBACK_ATTEMPTS; i++) {\n    const candidate = requested + i;\n    if (await isPortAvailable(candidate)) {\n      if (candidate !== requested) {\n        logger.info(\n          `Port ${requested} is in use. Falling back to port ${candidate}.`,\n        );\n      }\n      return candidate;\n    }\n  }\n  // Couldn't find a free port in the window; let the caller surface the\n  // original EADDRINUSE when the real bind attempts runs.\n  return requested;\n}\n\nasync function initServer(\n  serverPort: number,\n  options: StartServerOptions,\n  renown: IRenown | null,\n) {\n  // Register the global MeterProvider before ReactorInstrumentation is\n  // constructed. setGlobalMeterProvider is a one-way door — once set it cannot\n  // be unset — so this must happen before initializeClient calls\n  // instrumentation.start() → createMetrics() → metrics.getMeter().\n  if (options.meterProvider) {\n    metrics.setGlobalMeterProvider(options.meterProvider);\n  }\n\n  const {\n    dev,\n    packages = [],\n    remoteDrives = [],\n    logger = defaultLogger,\n  } = options;\n  logger.level = LogLevel;\n  const dbPath = options.dbPath ?? process.env.DATABASE_URL;\n\n  // use postgres url for read model storage if available, otherwise use local PGlite path\n  const readModelPath = dbPath || \".ph/read-storage\";\n\n  // HTTP registry package loading\n  const configPath =\n    options.configFile ?? path.join(process.cwd(), \"powerhouse.config.json\");\n  const config = getConfig(configPath);\n  const registryUrl = process.env.PH_REGISTRY_URL ?? config.packageRegistryUrl;\n  const registryPackages = process.env.PH_REGISTRY_PACKAGES;\n  const dynamicModelLoading =\n    options.dynamicModelLoading ?? process.env.DYNAMIC_MODEL_LOADING === \"true\";\n  let httpLoader: HttpPackageLoader | undefined;\n\n  if (registryUrl) {\n    // Register HTTP/HTTPS module loader hooks for dynamic package imports\n    register(httpsHooksPath, import.meta.url);\n    httpLoader = new HttpPackageLoader({ registryUrl });\n    registryPackages?.split(\",\").forEach((p) => {\n      const name = p.trim();\n      if (!packages.includes(name)) {\n        packages.push(name);\n      }\n    });\n  }\n\n  const reactorLogger = logger.child([\"reactor\"]);\n  const initializeClient = async (documentModels: DocumentModelModule[]) => {\n    const eventBus = new EventBus();\n    const builder = new ReactorBuilder()\n      .withEventBus(eventBus)\n      .withDocumentModels(\n        getUniqueDocumentModels([\n          documentModelDocumentModelModule,\n          driveDocumentModelModule,\n          ...vetraDocumentModels,\n          ...documentModels,\n        ]),\n      )\n      .withChannelScheme(ChannelScheme.SWITCHBOARD)\n      .withSignalHandlers()\n      .withLogger(reactorLogger);\n\n    const maxSkipThreshold = parseInt(process.env.MAX_SKIP_THRESHOLD ?? \"\", 10);\n    if (!isNaN(maxSkipThreshold) && maxSkipThreshold > 0) {\n      builder.withExecutorConfig({ maxSkipThreshold });\n      logger.info(`Reactor maxSkipThreshold set to ${maxSkipThreshold}`);\n    }\n\n    const reactorDbUrl = process.env.PH_REACTOR_DATABASE_URL;\n    if (reactorDbUrl && isPostgresUrl(reactorDbUrl)) {\n      const connectionString = reactorDbUrl.includes(\"?\")\n        ? reactorDbUrl\n        : `${reactorDbUrl}?sslmode=disable`;\n      const pool = new Pool({ connectionString });\n      const kysely = new Kysely<Database>({\n        dialect: new PostgresDialect({ pool }),\n      });\n      builder.withKysely(kysely);\n      logger.info(\"Using PostgreSQL for reactor storage\");\n    } else {\n      const pglitePath = \"./.ph/reactor-storage\";\n      const pglite = new PGlite(pglitePath);\n      const kysely = new Kysely<Database>({\n        dialect: new PGliteDialect(pglite),\n      });\n      builder.withKysely(kysely);\n      logger.info(\"Using PGlite for reactor storage\");\n    }\n\n    if (httpLoader && dynamicModelLoading) {\n      builder.withDocumentModelLoader(httpLoader.documentModelLoader);\n    }\n\n    const clientBuilder = new ReactorClientBuilder().withReactorBuilder(\n      builder,\n    );\n\n    if (renown) {\n      const signerConfig = getRenownSignerConfig(\n        renown,\n        options.identity?.requireSignatures,\n      );\n      clientBuilder.withSigner(signerConfig);\n    }\n\n    const module = await clientBuilder.buildModule();\n\n    if (module.reactorModule) {\n      const instrumentation = new ReactorInstrumentation(module.reactorModule);\n      instrumentation.start();\n      reactorLogger.info(\"Reactor metrics instrumentation started\");\n    }\n\n    return module;\n  };\n\n  let defaultDriveUrl: undefined | string = undefined;\n\n  // TODO get path from powerhouse config\n  // start vite server if dev mode is enabled\n  const basePath = process.cwd();\n  const viteLogger = createViteLogger(logger);\n  const vite = dev\n    ? await startViteServer(process.cwd(), viteLogger)\n    : undefined;\n\n  // get paths to local document models\n  if (!options.disableLocalPackages) {\n    packages.push(basePath);\n  }\n\n  // create loaders\n  const packageLoaders: IPackageLoader[] = [];\n  if (vite) {\n    packageLoaders.push(VitePackageLoader.build(vite));\n  } else {\n    packageLoaders.push(new ImportPackageLoader());\n  }\n  if (httpLoader) {\n    packageLoaders.push(httpLoader);\n    registryPackages?.split(\",\").forEach((p) => {\n      const name = p.trim();\n      if (!packages.includes(name)) {\n        packages.push(name);\n      }\n    });\n  }\n\n  const apiLogger = logger.child([\"reactor-api\"]);\n  const api = await initializeAndStartAPI(\n    initializeClient,\n    {\n      port: serverPort,\n      dbPath: readModelPath,\n      https: options.https,\n      packageLoaders: packageLoaders.length > 0 ? packageLoaders : undefined,\n      packages: packages,\n      processorConfig: options.processorConfig,\n      processors: {\n        \"@powerhousedao/vetra\": [vetraProcessorFactory],\n      },\n      configFile:\n        options.configFile ??\n        path.join(process.cwd(), \"powerhouse.config.json\"),\n      mcp: options.mcp ?? true,\n      logger: apiLogger,\n      enableDocumentModelSubgraphs: options.enableDocumentModelSubgraphs,\n    },\n    \"switchboard\",\n  );\n\n  if (process.env.SENTRY_DSN) {\n    // Register Sentry error handler after all routes are established.\n    // The adapter calls the framework-specific Sentry setup internally.\n    api.httpAdapter.setupSentryErrorHandler(Sentry);\n  }\n\n  const { client, graphqlManager, documentModelRegistry } = api;\n\n  // Wire up dynamic package management if HTTP loader is configured\n  if (httpLoader) {\n    const packageManagementService = new PackageManagementService({\n      defaultRegistryUrl: registryUrl,\n      httpLoader,\n      documentModelRegistry,\n    });\n\n    packageManagementService.setOnModelsChanged(() => {\n      graphqlManager.regenerateDocumentModelSubgraphs().catch(logger.error);\n    });\n\n    const packagesSubgraph = new PackagesSubgraph({\n      relationalDb: undefined as never,\n      analyticsStore: undefined as never,\n      reactorClient: client,\n      graphqlManager,\n      syncManager: api.syncManager,\n      path: graphqlManager.getBasePath(),\n      packageManagementService,\n    });\n\n    void graphqlManager\n      .registerSubgraphInstance(packagesSubgraph, \"graphql\", false)\n      .then(() => graphqlManager.updateRouter())\n      .catch((error: unknown) => {\n        logger.error(\"Failed to register packages subgraph: @error\", error);\n      });\n  }\n\n  // Create default drive if provided\n  if (options.drive) {\n    if (!renown) {\n      throw new Error(\"Cannot create default drive without Renown identity\");\n    }\n\n    defaultDriveUrl = await addDefaultDrive(client, options.drive, serverPort);\n  }\n\n  // add vite middleware after express app is initialized if applicable\n  if (vite) {\n    api.httpAdapter.mountRawMiddleware(vite.middlewares);\n  }\n\n  // Connect to remote drives AFTER packages are loaded\n  if (remoteDrives.length > 0) {\n    for (const remoteDriveUrl of remoteDrives) {\n      let driveId: string | undefined;\n\n      try {\n        const { syncManager } = api;\n        const parsed = parseDriveUrl(remoteDriveUrl);\n        driveId = parsed.driveId;\n        const remoteName = `remote-drive-${driveId}-${crypto.randomUUID()}`;\n        await syncManager.add(remoteName, driveCollectionId(\"main\", driveId), {\n          type: \"gql\",\n          parameters: { url: parsed.graphqlEndpoint },\n        });\n        logger.debug(\"Remote drive @remoteDriveUrl synced\", remoteDriveUrl);\n      } catch (error) {\n        if (\n          error instanceof Error &&\n          error.message.includes(\"already exists\")\n        ) {\n          logger.debug(\n            \"Remote drive already added: @remoteDriveUrl\",\n            remoteDriveUrl,\n          );\n          driveId = remoteDriveUrl.split(\"/\").pop();\n        } else {\n          logger.error(\n            \"Failed to connect to remote drive @remoteDriveUrl: @error\",\n            remoteDriveUrl,\n            error,\n          );\n        }\n      } finally {\n        // Construct local URL once in finally block\n        if (!defaultDriveUrl && driveId) {\n          const protocol = options.https ? \"https\" : \"http\";\n          defaultDriveUrl = `${protocol}://localhost:${serverPort}/d/${driveId}`;\n        }\n      }\n    }\n  }\n\n  return {\n    defaultDriveUrl,\n    api,\n    reactor: client,\n    renown,\n    port: serverPort,\n  };\n}\n\nexport const startSwitchboard = async (\n  options: StartServerOptions = {},\n): Promise<SwitchboardReactor> => {\n  const requestedPort = options.port ?? DEFAULT_PORT;\n  const logger = options.logger ?? defaultLogger;\n  const serverPort = await resolveServerPort(\n    requestedPort,\n    options.strictPort ?? false,\n    logger,\n  );\n\n  // Initialize feature flags\n  const featureFlags = await initFeatureFlags();\n\n  const enableDocumentModelSubgraphs = await featureFlags.getBooleanValue(\n    DOCUMENT_MODEL_SUBGRAPHS_ENABLED,\n    options.enableDocumentModelSubgraphs ??\n      DOCUMENT_MODEL_SUBGRAPHS_ENABLED_DEFAULT,\n  );\n\n  options.enableDocumentModelSubgraphs = enableDocumentModelSubgraphs;\n\n  const requireSignatures =\n    options.identity?.requireSignatures ??\n    (await featureFlags.getBooleanValue(\n      REQUIRE_SIGNATURES,\n      REQUIRE_SIGNATURES_DEFAULT,\n    ));\n  options.identity = { ...options.identity, requireSignatures };\n\n  logger.info(\n    \"Feature flags: @flags\",\n    JSON.stringify(\n      {\n        DOCUMENT_MODEL_SUBGRAPHS_ENABLED: enableDocumentModelSubgraphs,\n        REQUIRE_SIGNATURES: requireSignatures,\n      },\n      null,\n      2,\n    ),\n  );\n\n  // Initialize Renown if identity options are provided or keypair exists\n  let renown: IRenown | null = null;\n  try {\n    renown = await initRenown(options.identity);\n  } catch (e) {\n    logger.warn(\"Failed to initialize ConnectCrypto: @error\", e);\n    if (options.identity?.requireExisting) {\n      throw new Error(\n        'Identity required but failed to initialize. Run \"ph login\" first.',\n      );\n    }\n  }\n\n  try {\n    return await initServer(serverPort, options, renown);\n  } catch (e) {\n    Sentry.captureException(e);\n    logger.error(\"App crashed: @error\", e);\n    throw e;\n  }\n};\n\nexport * from \"./types.js\";\n\nif (import.meta.main) {\n  await startSwitchboard();\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAGA,eAAsB,mBAAmB;CAEvC,MAAM,WAAW,IAAI,gBAAgB;AAErC,OAAM,YAAY,mBAAmB,SAAS;AAE9C,QAAO,YAAY,WAAW;;;;ACEhC,MAAM,SAAS,YAAY,CAAC,eAAe,SAAS,CAAC;;;;;;AAgBrD,eAAsB,WACpB,UAAyB,EAAE,EACF;CACzB,MAAM,EACJ,aACA,kBAAkB,OAClB,UAAU,uBACR;CAEJ,MAAM,aAAa,IAAI,eAAe,aAAa,EACjD,QACD,CAAC;CAGF,MAAM,kBAAkB,MAAM,WAAW,aAAa;AAEtD,KAAI,CAAC,mBAAmB,gBACtB,OAAM,IAAI,MACR,yFAED;AAGH,KAAI,CAAC,gBACH,QAAO,KAAK,0DAA0D;CAGxE,MAAM,eAAe,MAAM,IAAI,qBAAqB,CACjD,mBAAmB,WAAW,CAC9B,OAAO;CAEV,MAAM,SAAS,MAAM,IAAI,cAAc,eAAe,EAAE,CAAC,CACtD,WAAW,aAAa,CACxB,YAAY,QAAQ,CACpB,OAAO;AAEV,QAAO,KAAK,0CAA0C,aAAa,IAAI;AAEvE,QAAO;;;;;;;;AAST,SAAgB,sBACd,QACA,kBACc;AACd,QAAO;EACL,QAAQ,OAAO;EACf,UAAU,wBAAwB,iBAAiB;EACpD;;;;AC5BH,MAAM,gBAAgB,YAAY,CAAC,cAAc,CAAC;AAElD,MAAM,WAAY,QAAQ,IAAI,aAAuC;AACrE,YAAY,SAAS;AAErB,OAAO,QAAQ;AAGf,MAAM,mCAAmC;AACzC,MAAM,2CAA2C;AACjD,MAAM,qBAAqB;AAC3B,MAAM,6BAA6B;AAEnC,IAAI,QAAQ,IAAI,YAAY;AAC1B,eAAc,KACZ,qCACA,QAAQ,IAAI,WACb;AACD,QAAO,KAAK;EACV,KAAK,QAAQ,IAAI;EACjB,aAAa,QAAQ,IAAI;EAGzB,SACE,QAAQ,IAAI,mBACX,QAAQ,IAAI,sBACT,IAAI,QAAQ,IAAI,wBAChB,KAAA;EACP,CAAC;;AAGJ,MAAM,eAAe,QAAQ,IAAI,OAAO,OAAO,QAAQ,IAAI,KAAK,GAAG;AAGnE,MAAM,yBAAyB;;;;;;AAO/B,SAAgB,gBAAgB,MAAgC;AAC9D,QAAO,IAAI,SAAS,SAAS,WAAW;EACtC,MAAM,SAAS,IAAI,cAAc;AACjC,SAAO,KAAK,UAAU,QAA+B;AACnD,OAAI,IAAI,SAAS,gBAAgB,IAAI,SAAS,SAC5C,SAAQ,MAAM;OAEd,QAAO,IAAI;IAEb;AACF,SAAO,KAAK,mBAAmB;AAC7B,UAAO,YAAY,QAAQ,KAAK,CAAC;IACjC;AAGF,SAAO,OAAO;GAAE;GAAM,MAAM;GAAM,CAAC;GACnC;;AAGJ,eAAe,kBACb,WACA,YACA,QACiB;AACjB,KAAI,WAAY,QAAO;AACvB,MAAK,IAAI,IAAI,GAAG,IAAI,wBAAwB,KAAK;EAC/C,MAAM,YAAY,YAAY;AAC9B,MAAI,MAAM,gBAAgB,UAAU,EAAE;AACpC,OAAI,cAAc,UAChB,QAAO,KACL,QAAQ,UAAU,mCAAmC,UAAU,GAChE;AAEH,UAAO;;;AAKX,QAAO;;AAGT,eAAe,WACb,YACA,SACA,QACA;AAKA,KAAI,QAAQ,cACV,SAAQ,uBAAuB,QAAQ,cAAc;CAGvD,MAAM,EACJ,KACA,WAAW,EAAE,EACb,eAAe,EAAE,EACjB,SAAS,kBACP;AACJ,QAAO,QAAQ;CAIf,MAAM,iBAHS,QAAQ,UAAU,QAAQ,IAAI,iBAGb;CAKhC,MAAM,SAAS,UADb,QAAQ,cAAc,KAAK,KAAK,QAAQ,KAAK,EAAE,yBAAyB,CACtC;CACpC,MAAM,cAAc,QAAQ,IAAI,mBAAmB,OAAO;CAC1D,MAAM,mBAAmB,QAAQ,IAAI;CACrC,MAAM,sBACJ,QAAQ,uBAAuB,QAAQ,IAAI,0BAA0B;CACvE,IAAI;AAEJ,KAAI,aAAa;AAEf,WAAS,gBAAgB,OAAO,KAAK,IAAI;AACzC,eAAa,IAAI,kBAAkB,EAAE,aAAa,CAAC;AACnD,oBAAkB,MAAM,IAAI,CAAC,SAAS,MAAM;GAC1C,MAAM,OAAO,EAAE,MAAM;AACrB,OAAI,CAAC,SAAS,SAAS,KAAK,CAC1B,UAAS,KAAK,KAAK;IAErB;;CAGJ,MAAM,gBAAgB,OAAO,MAAM,CAAC,UAAU,CAAC;CAC/C,MAAM,mBAAmB,OAAO,qBAA0C;EACxE,MAAM,WAAW,IAAI,UAAU;EAC/B,MAAM,UAAU,IAAI,gBAAgB,CACjC,aAAa,SAAS,CACtB,mBACC,wBAAwB;GACtB;GACA;GACA,GAAGA;GACH,GAAGC;GACJ,CAAC,CACH,CACA,kBAAkB,cAAc,YAAY,CAC5C,oBAAoB,CACpB,WAAW,cAAc;EAE5B,MAAM,mBAAmB,SAAS,QAAQ,IAAI,sBAAsB,IAAI,GAAG;AAC3E,MAAI,CAAC,MAAM,iBAAiB,IAAI,mBAAmB,GAAG;AACpD,WAAQ,mBAAmB,EAAE,kBAAkB,CAAC;AAChD,UAAO,KAAK,mCAAmC,mBAAmB;;EAGpE,MAAM,eAAe,QAAQ,IAAI;AACjC,MAAI,gBAAgB,cAAc,aAAa,EAAE;GAK/C,MAAM,SAAS,IAAI,OAAiB,EAClC,SAAS,IAAI,gBAAgB,EAAE,MAFpB,IAAI,KAAK,EAAE,kBAHC,aAAa,SAAS,IAAI,GAC/C,eACA,GAAG,aAAa,mBACsB,CAAC,EAEJ,CAAC,EACvC,CAAC;AACF,WAAQ,WAAW,OAAO;AAC1B,UAAO,KAAK,uCAAuC;SAC9C;GAGL,MAAM,SAAS,IAAI,OAAiB,EAClC,SAAS,IAAI,cAFA,IAAI,OADA,wBACkB,CAED,EACnC,CAAC;AACF,WAAQ,WAAW,OAAO;AAC1B,UAAO,KAAK,mCAAmC;;AAGjD,MAAI,cAAc,oBAChB,SAAQ,wBAAwB,WAAW,oBAAoB;EAGjE,MAAM,gBAAgB,IAAI,sBAAsB,CAAC,mBAC/C,QACD;AAED,MAAI,QAAQ;GACV,MAAM,eAAe,sBACnB,QACA,QAAQ,UAAU,kBACnB;AACD,iBAAc,WAAW,aAAa;;EAGxC,MAAM,SAAS,MAAM,cAAc,aAAa;AAEhD,MAAI,OAAO,eAAe;AACA,OAAI,uBAAuB,OAAO,cAAc,CACxD,OAAO;AACvB,iBAAc,KAAK,0CAA0C;;AAG/D,SAAO;;CAGT,IAAI,kBAAsC,KAAA;CAI1C,MAAM,WAAW,QAAQ,KAAK;CAC9B,MAAM,aAAa,iBAAiB,OAAO;CAC3C,MAAM,OAAO,MACT,MAAM,gBAAgB,QAAQ,KAAK,EAAE,WAAW,GAChD,KAAA;AAGJ,KAAI,CAAC,QAAQ,qBACX,UAAS,KAAK,SAAS;CAIzB,MAAM,iBAAmC,EAAE;AAC3C,KAAI,KACF,gBAAe,KAAK,kBAAkB,MAAM,KAAK,CAAC;KAElD,gBAAe,KAAK,IAAI,qBAAqB,CAAC;AAEhD,KAAI,YAAY;AACd,iBAAe,KAAK,WAAW;AAC/B,oBAAkB,MAAM,IAAI,CAAC,SAAS,MAAM;GAC1C,MAAM,OAAO,EAAE,MAAM;AACrB,OAAI,CAAC,SAAS,SAAS,KAAK,CAC1B,UAAS,KAAK,KAAK;IAErB;;CAGJ,MAAM,YAAY,OAAO,MAAM,CAAC,cAAc,CAAC;CAC/C,MAAM,MAAM,MAAM,sBAChB,kBACA;EACE,MAAM;EACN,QAAQ;EACR,OAAO,QAAQ;EACf,gBAAgB,eAAe,SAAS,IAAI,iBAAiB,KAAA;EACnD;EACV,iBAAiB,QAAQ;EACzB,YAAY,EACV,wBAAwB,CAACC,iBAAsB,EAChD;EACD,YACE,QAAQ,cACR,KAAK,KAAK,QAAQ,KAAK,EAAE,yBAAyB;EACpD,KAAK,QAAQ,OAAO;EACpB,QAAQ;EACR,8BAA8B,QAAQ;EACvC,EACD,cACD;AAED,KAAI,QAAQ,IAAI,WAGd,KAAI,YAAY,wBAAwB,OAAO;CAGjD,MAAM,EAAE,QAAQ,gBAAgB,0BAA0B;AAG1D,KAAI,YAAY;EACd,MAAM,2BAA2B,IAAI,yBAAyB;GAC5D,oBAAoB;GACpB;GACA;GACD,CAAC;AAEF,2BAAyB,yBAAyB;AAChD,kBAAe,kCAAkC,CAAC,MAAM,OAAO,MAAM;IACrE;EAEF,MAAM,mBAAmB,IAAI,iBAAiB;GAC5C,cAAc,KAAA;GACd,gBAAgB,KAAA;GAChB,eAAe;GACf;GACA,aAAa,IAAI;GACjB,MAAM,eAAe,aAAa;GAClC;GACD,CAAC;AAEG,iBACF,yBAAyB,kBAAkB,WAAW,MAAM,CAC5D,WAAW,eAAe,cAAc,CAAC,CACzC,OAAO,UAAmB;AACzB,UAAO,MAAM,gDAAgD,MAAM;IACnE;;AAIN,KAAI,QAAQ,OAAO;AACjB,MAAI,CAAC,OACH,OAAM,IAAI,MAAM,sDAAsD;AAGxE,oBAAkB,MAAM,gBAAgB,QAAQ,QAAQ,OAAO,WAAW;;AAI5E,KAAI,KACF,KAAI,YAAY,mBAAmB,KAAK,YAAY;AAItD,KAAI,aAAa,SAAS,EACxB,MAAK,MAAM,kBAAkB,cAAc;EACzC,IAAI;AAEJ,MAAI;GACF,MAAM,EAAE,gBAAgB;GACxB,MAAM,SAAS,cAAc,eAAe;AAC5C,aAAU,OAAO;GACjB,MAAM,aAAa,gBAAgB,QAAQ,GAAG,OAAO,YAAY;AACjE,SAAM,YAAY,IAAI,YAAY,kBAAkB,QAAQ,QAAQ,EAAE;IACpE,MAAM;IACN,YAAY,EAAE,KAAK,OAAO,iBAAiB;IAC5C,CAAC;AACF,UAAO,MAAM,uCAAuC,eAAe;WAC5D,OAAO;AACd,OACE,iBAAiB,SACjB,MAAM,QAAQ,SAAS,iBAAiB,EACxC;AACA,WAAO,MACL,+CACA,eACD;AACD,cAAU,eAAe,MAAM,IAAI,CAAC,KAAK;SAEzC,QAAO,MACL,6DACA,gBACA,MACD;YAEK;AAER,OAAI,CAAC,mBAAmB,QAEtB,mBAAkB,GADD,QAAQ,QAAQ,UAAU,OACb,eAAe,WAAW,KAAK;;;AAMrE,QAAO;EACL;EACA;EACA,SAAS;EACT;EACA,MAAM;EACP;;AAGH,MAAa,mBAAmB,OAC9B,UAA8B,EAAE,KACA;CAChC,MAAM,gBAAgB,QAAQ,QAAQ;CACtC,MAAM,SAAS,QAAQ,UAAU;CACjC,MAAM,aAAa,MAAM,kBACvB,eACA,QAAQ,cAAc,OACtB,OACD;CAGD,MAAM,eAAe,MAAM,kBAAkB;CAE7C,MAAM,+BAA+B,MAAM,aAAa,gBACtD,kCACA,QAAQ,gCACN,yCACH;AAED,SAAQ,+BAA+B;CAEvC,MAAM,oBACJ,QAAQ,UAAU,qBACjB,MAAM,aAAa,gBAClB,oBACA,2BACD;AACH,SAAQ,WAAW;EAAE,GAAG,QAAQ;EAAU;EAAmB;AAE7D,QAAO,KACL,yBACA,KAAK,UACH;EACE,kCAAkC;EAClC,oBAAoB;EACrB,EACD,MACA,EACD,CACF;CAGD,IAAI,SAAyB;AAC7B,KAAI;AACF,WAAS,MAAM,WAAW,QAAQ,SAAS;UACpC,GAAG;AACV,SAAO,KAAK,8CAA8C,EAAE;AAC5D,MAAI,QAAQ,UAAU,gBACpB,OAAM,IAAI,MACR,sEACD;;AAIL,KAAI;AACF,SAAO,MAAM,WAAW,YAAY,SAAS,OAAO;UAC7C,GAAG;AACV,SAAO,iBAAiB,EAAE;AAC1B,SAAO,MAAM,uBAAuB,EAAE;AACtC,QAAM;;;AAMV,IAAI,OAAO,KAAK,KACd,OAAM,kBAAkB"}