@rapidmx/activesync-plugin 1.0.0-beta.2 → 1.0.0-beta.3

package/dist/lib/commands/PingCommand.js

@@ -13,29 +13,61 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 ///////////////////////////////////////////////////////////////////////////////
 import { createClient } from "redis";
 import { ObjectDecorators } from "@rapidrest/core";
-import { ACLAction, ACLUtils } from "@rapidrest/service-core";
+import { ACLAction, ACLUtils, RepoUtils } from "@rapidrest/service-core";
+import { RecoverableRepoUtils } from "@rapidmx/restapi";
 import { WbxmlCodePage } from "../codec/WbxmlCodePages.js";
 import { childText, element, findChild, findChildren, textElement } from "../codec/WbxmlElement.js";
-const { Config, Inject } = ObjectDecorators;
+import { compareCursor, cursorOf, isListableUid, scanAfter } from "../EasSyncKeyUtils.js";
+const { Config, Init, Inject } = ObjectDecorators;
 /** MS-ASCMD `Ping` `Status` codes this pragmatic subset distinguishes - not the full enumeration the real
- * spec defines (e.g. it also has codes for "too many folders", "folder hierarchy changed", etc.), matching
- * this library's "pragmatic subset, not full fidelity" precedent elsewhere. */
+ * spec defines (e.g. it also has a code for "folder hierarchy changed"), matching this library's "pragmatic
+ * subset, not full fidelity" precedent elsewhere. */
 const STATUS_NO_CHANGES = "1";
 const STATUS_CHANGES_FOUND = "2";
 const STATUS_MISSING_PARAMETERS = "3";
+const STATUS_TOO_MANY_FOLDERS = "6";
+/** How many `ACLUtils.hasPermission()` checks run concurrently. */
+const ACL_CHECK_CHUNK_SIZE = 25;
+/** Rows read per folder when looking for changes a device hasn't synced yet - enough to see past a few of the
+ * device's own writes (`echoes`); a full page is reported as a change regardless. */
+const PENDING_CHANGE_SCAN_LIMIT = 5;
+/** Most per-folder fallback scans (`scanAfter`) `pendingInClass` runs at once. */
+const FALLBACK_SCAN_CHUNK_SIZE = 25;
+/** Folder uids per batched `EasCollectionState` lookup, and folders per batched pending-change check. */
+const STATE_LOOKUP_CHUNK = 500;
+/** Rows per stream (live, soft-deleted) one batched pending-change check reads before falling back to per-folder scans. */
+const PENDING_BATCH_ROW_LIMIT = 500;
+/** The `(dateModified, uid)` stream order, as `scanAfter()` reads it. */
+const PENDING_BATCH_SORT = JSON.stringify({ dateModified: "ASC", uid: "ASC" });
 /**
  * Handles EAS `Ping`: a long-poll HTTP request that blocks for up to `HeartbeatInterval` seconds waiting for a
- * change in any of the client-specified folders, then reports which (if any) actually changed. No websocket
- * needed - subscribes a plain, request-scoped Redis client (the same construction `BasePushRoute.connect()`
- * uses, minus its own per-socket bookkeeping this one-shot request doesn't need) directly to the requested
- * `folderUid` channels. Every `Message`/`CalendarEvent`/etc. mutation already publishes to exactly these
- * channels via `BaseScopedChildRoute.notify()`/`RepoUtils`'s own push - `Ping` needs no new publish call site
- * of its own, only a subscriber.
+ * change in any of the client-specified folders, then reports which (if any) actually changed. Every
+ * `Message`/`CalendarEvent`/etc. mutation already publishes to the `folderUid` channels via
+ * `BaseScopedChildRoute.notify()`/`RepoUtils`'s own push - `Ping` only needs a subscriber.
+ *
+ * Resource bounds:
+ * - One shared Redis subscriber client per process (per Redis URL), lazily connected once. Each `Ping` attaches
+ * its own listener to its channels and removes exactly that listener when it settles. A connect/subscribe
+ * failure fails open (the `Ping` just waits out its heartbeat and reports no changes) and a failed connect is
+ * forgotten so a later `Ping` retries it.
+ * - At most one active `Ping` per (mailbox, device) per process: a newer one supersedes (answers Status 1) the
+ * older one.
+ * - The wait ends as soon as the HTTP response finishes (including a client abort).
+ * - More than `mail:eas:ping_max_folders` folders is rejected with Status 6 before any ACL work, and the ACL
+ * checks themselves run in bounded concurrent chunks.
+ * - Without a `datastores:events` config the `Ping` still waits the full (clamped) heartbeat before answering
+ * Status 1, so a device can't hot-loop against it.
+ *
+ * **Changes made before the `Ping` started**: a publish only reaches a subscriber that exists at that moment, so a
+ * change landing between the device's last `Sync` and this `Ping`'s subscribe would otherwise go unnoticed until
+ * the next change. Once subscribed (or right away, without Redis), each folder's stream is checked for a row after
+ * the cursor its `EasCollectionState` recorded, and any folder with one is answered with Status 2 immediately. This
+ * needs `collectionStateClass`/`collectionBindings` (set by `PingCommandMongo`/`PingCommandSQL`); a folder the
+ * device never synced has no cursor and isn't checked.
  *
  * Requested folder uids are filtered down to only those the caller currently has `READ` on before subscribing -
- * matching every other command's ownership check on a client-supplied id, since without it a device could
- * long-poll indefinitely on any folder uid it happens to know (including one it used to have legitimate access
- * to and no longer does) and learn purely from this channel when that other mailbox's data changes.
+ * without it a device could long-poll on any folder uid it happens to know (including one whose share was since
+ * revoked) and learn from this channel when that other mailbox's data changes.
  *
  * @author Jean-Philippe Steinmetz
  */
@@ -44,6 +76,26 @@ export class PingCommand {
         this.command = "Ping";
         this.minHeartbeatSeconds = 60;
         this.maxHeartbeatSeconds = 1740;
+        this.maxFolders = 300;
+        this.collectionBindings = {};
+        this.repos = new Map();
+    }
+    async init() {
+        if (!this.collectionStateClass) {
+            return;
+        }
+        this.collectionStateRepo = await this._objectFactory.newInstance(RepoUtils, {
+            name: this.collectionStateClass.name,
+            args: [this.collectionStateClass],
+        });
+        for (const [collectionClass, binding] of Object.entries(this.collectionBindings)) {
+            this.repos.set(collectionClass, await this._objectFactory.newInstance(RecoverableRepoUtils, { name: binding.entityClass.name, args: [binding.entityClass] }));
+        }
+    }
+    /** Forgets all process-wide shared state (subscriber clients and active pings). Intended for tests. */
+    static resetSharedState() {
+        PingCommand.subscribers.clear();
+        PingCommand.activePings.clear();
     }
     async handle(ctx) {
         if (!ctx.request) {
@@ -58,20 +110,21 @@ export class PingCommand {
         if (requestedFolderUids.length === 0) {
             return this.statusResponse(STATUS_MISSING_PARAMETERS);
         }
-        // Every other command checks ownership before acting on a client-supplied folder id - `Ping` must too,
-        // or a device that once had a folder shared with it (and so learned its real uid) could keep watching
-        // that folder's live activity via this long-poll indefinitely, even after the share is later revoked.
+        if (requestedFolderUids.length > this.maxFolders) {
+            return element(WbxmlCodePage.Ping, "Ping", [
+                textElement(WbxmlCodePage.Ping, "Status", STATUS_TOO_MANY_FOLDERS),
+                textElement(WbxmlCodePage.Ping, "MaxFolders", String(this.maxFolders)),
+            ]);
+        }
         // Filtered down to the permitted subset rather than failing the whole request: `Ping`'s wire response
-        // has no per-folder status to report a partial denial through, and a client legitimately re-sends the
-        // same folder list across requests regardless of access changes it has no way to know about yet.
-        const permitted = await Promise.all(requestedFolderUids.map((uid) => this.aclUtils.hasPermission(ctx.user, uid, ACLAction.READ)));
-        const folderUids = requestedFolderUids.filter((_uid, i) => permitted[i]);
+        // has no per-folder status to report a partial denial through.
+        const folderUids = await this.filterPermitted(ctx, requestedFolderUids);
         if (folderUids.length === 0) {
             return this.statusResponse(STATUS_MISSING_PARAMETERS);
         }
         const requestedSeconds = Number(childText(ctx.request, "HeartbeatInterval") ?? this.minHeartbeatSeconds);
         const heartbeatSeconds = Math.min(Math.max(Number.isFinite(requestedSeconds) ? requestedSeconds : this.minHeartbeatSeconds, this.minHeartbeatSeconds), this.maxHeartbeatSeconds);
-        const changedFolderUids = await this.waitForChange(folderUids, heartbeatSeconds);
+        const changedFolderUids = await this.waitForChange(ctx, folderUids, heartbeatSeconds);
         if (changedFolderUids.length === 0) {
             return this.statusResponse(STATUS_NO_CHANGES);
         }
@@ -83,49 +136,218 @@ export class PingCommand {
     statusResponse(status) {
         return element(WbxmlCodePage.Ping, "Ping", [textElement(WbxmlCodePage.Ping, "Status", status)]);
     }
-    /** Subscribes to `folderUids` and resolves with whichever of them published a change first, or `[]` if
-     * `timeoutSeconds` elapses with no publish. A missing `datastores:events` config (Redis pub/sub not set up
-     * for this deployment) fails open to "no changes" rather than blocking forever or throwing - `Ping` is a
-     * best-effort low-latency notification path, not the only way a client ever discovers new mail (it will
-     * eventually poll a real `Sync`/`FolderSync` regardless). */
-    async waitForChange(folderUids, timeoutSeconds) {
-        if (!this.redisConfig) {
+    /** Returns the subset of `folderUids` the caller has `READ` on, checking at most `ACL_CHECK_CHUNK_SIZE` at once. */
+    async filterPermitted(ctx, folderUids) {
+        const result = [];
+        for (let i = 0; i < folderUids.length; i += ACL_CHECK_CHUNK_SIZE) {
+            const chunk = folderUids.slice(i, i + ACL_CHECK_CHUNK_SIZE);
+            const permitted = await Promise.all(chunk.map((uid) => this.aclUtils.hasPermission(ctx.user, uid, ACLAction.READ)));
+            result.push(...chunk.filter((_uid, j) => permitted[j]));
+        }
+        return result;
+    }
+    /**
+     * The subset of `folderUids` whose change stream has a row the device hasn't synced yet (after its collection's
+     * recorded cursor, other than the device's own writes). A failed lookup counts as "no pending change".
+     *
+     * Batched, so a `Ping` watching hundreds of folders costs a handful of queries rather than three per folder: every
+     * folder's `EasCollectionState` is read in one `in(...)` query per `STATE_LOOKUP_CHUNK`, and each collection class's
+     * folders are checked together (`pendingInClass()`); only a folder that batch can't decide is scanned on its own.
+     */
+    async pendingChanges(ctx, folderUids) {
+        if (!this.collectionStateRepo) {
             return [];
         }
-        const client = createClient({ url: this.redisConfig.url });
-        await client.connect();
+        let states;
         try {
-            return await new Promise((resolve) => {
-                let settled = false;
-                const timer = setTimeout(() => {
-                    if (!settled) {
-                        settled = true;
-                        resolve([]);
-                    }
-                }, timeoutSeconds * 1000);
-                client
-                    .subscribe(folderUids, (_message, channel) => {
-                    if (!settled) {
-                        settled = true;
-                        clearTimeout(timer);
-                        resolve([channel]);
-                    }
-                })
-                    .catch(() => {
-                    if (!settled) {
-                        settled = true;
-                        clearTimeout(timer);
-                        resolve([]);
+            states = await this.loadStates(ctx, folderUids);
+        }
+        catch {
+            return [];
+        }
+        const byClass = new Map();
+        for (const folderUid of folderUids) {
+            const state = states.get(folderUid);
+            if (state && this.repos.has(state.collectionClass)) {
+                byClass.set(state.collectionClass, [...(byClass.get(state.collectionClass) ?? []), state]);
+            }
+        }
+        const changed = new Set();
+        for (const [collectionClass, classStates] of byClass) {
+            for (let i = 0; i < classStates.length; i += STATE_LOOKUP_CHUNK) {
+                const found = await this.pendingInClass(this.repos.get(collectionClass), classStates.slice(i, i + STATE_LOOKUP_CHUNK)).catch(() => []);
+                found.forEach((uid) => changed.add(uid));
+            }
+        }
+        return folderUids.filter((uid) => changed.has(uid));
+    }
+    /** Every requested folder's collection state for this device, keyed by folder uid - one query per chunk of plain
+     * folder uids (exact-matched in memory), and one query per folder uid that can't be listed in `in(...)`. */
+    async loadStates(ctx, folderUids) {
+        const wanted = new Set(folderUids);
+        const states = new Map();
+        const keep = (rows) => {
+            for (const row of rows) {
+                if (wanted.has(row.folderUid) && row.mailboxUid === ctx.mailboxUid && row.deviceId === ctx.deviceId && !states.has(row.folderUid)) {
+                    states.set(row.folderUid, row);
+                }
+            }
+        };
+        const listable = folderUids.filter(isListableUid);
+        for (let i = 0; i < listable.length; i += STATE_LOOKUP_CHUNK) {
+            const chunk = listable.slice(i, i + STATE_LOOKUP_CHUNK);
+            const limit = Math.min(chunk.length * 2, 1000);
+            keep(await this.collectionStateRepo.find({ mailboxUid: ctx.mailboxUid, deviceId: ctx.deviceId, folderUid: `in(${chunk.join(",")})`, limit }, { ignoreACL: true, limit }));
+        }
+        for (const folderUid of folderUids.filter((uid) => !isListableUid(uid))) {
+            keep(await this.collectionStateRepo.find({ mailboxUid: ctx.mailboxUid, deviceId: ctx.deviceId, folderUid }, { ignoreACL: true, limit: 1 }));
+        }
+        return states;
+    }
+    /**
+     * The folders among `states` (all of one collection class, stored in `repo`) with a pending change. One pair of
+     * queries (live and soft-deleted rows) reads, across all of them, the rows at or after the earliest cursor, in
+     * stream order, up to `PENDING_BATCH_ROW_LIMIT`. When neither page is full, that is every row that could be pending
+     * for any of the folders, so each folder is decided exactly in memory - the same rule as a per-folder `scanAfter()`.
+     * When a page is full, a folder with a pending row among the rows read is still pending; any other folder is scanned
+     * on its own, as before. A folder uid that can't be listed in `in(...)` is always scanned on its own.
+     */
+    async pendingInClass(repo, states) {
+        const cursorFor = (state) => ({ date: new Date(state.cursorDate), uid: state.cursorUid });
+        const isPending = (state, rows, complete) => {
+            const echoes = state.echoes ?? {};
+            const after = rows.filter((row) => row.folderUid === state.folderUid && compareCursor(cursorOf(row), cursorFor(state)) > 0);
+            if (after.length > PENDING_CHANGE_SCAN_LIMIT || after.some((row) => echoes[row.uid] !== new Date(row.dateModified).toISOString())) {
+                return true;
+            }
+            return complete ? false : undefined;
+        };
+        const listed = states.filter((state) => isListableUid(state.folderUid));
+        let rows = [];
+        let complete = false;
+        if (listed.length > 0) {
+            const earliest = new Date(Math.min(...listed.map((state) => new Date(state.cursorDate).getTime())));
+            const query = {
+                folderUid: `in(${listed.map((state) => state.folderUid).join(",")})`,
+                dateModified: `gte(${earliest.toISOString()})`,
+                sort: PENDING_BATCH_SORT,
+                limit: PENDING_BATCH_ROW_LIMIT + 1,
+            };
+            const options = { ignoreACL: true, limit: PENDING_BATCH_ROW_LIMIT + 1 };
+            const [live, deleted] = await Promise.all([repo.find(query, options), repo.find({ ...query, deleted: true }, options)]);
+            rows = [...live, ...deleted];
+            complete = live.length <= PENDING_BATCH_ROW_LIMIT && deleted.length <= PENDING_BATCH_ROW_LIMIT;
+        }
+        const decided = states.map((state) => (isListableUid(state.folderUid) ? isPending(state, rows, complete) : undefined));
+        // Undecided folders fall back to their own scan, `FALLBACK_SCAN_CHUNK_SIZE` at a time rather than one by one.
+        const undecided = decided.flatMap((pending, index) => (pending === undefined ? [index] : []));
+        for (let i = 0; i < undecided.length; i += FALLBACK_SCAN_CHUNK_SIZE) {
+            await Promise.all(undecided.slice(i, i + FALLBACK_SCAN_CHUNK_SIZE).map(async (index) => {
+                const state = states[index];
+                const scanned = await scanAfter(repo, { folderUid: state.folderUid }, cursorFor(state), PENDING_CHANGE_SCAN_LIMIT);
+                decided[index] = isPending(state, scanned.rows, true) || scanned.more;
+            }));
+        }
+        return states.filter((_state, index) => decided[index]).map((state) => state.folderUid);
+    }
+    /** Returns the process-wide subscriber client for `url`, connecting it on first use. A failed connect is
+     * evicted from the cache (and the client destroyed) so a later call retries. */
+    static getSubscriber(url) {
+        let pending = PingCommand.subscribers.get(url);
+        if (!pending) {
+            const client = createClient({ url });
+            // An unhandled `error` event would crash the process; the client reconnects on its own.
+            client.on("error", () => undefined);
+            const connecting = client.connect().then(() => client);
+            connecting.catch(() => {
+                if (PingCommand.subscribers.get(url) === connecting) {
+                    PingCommand.subscribers.delete(url);
+                }
+                try {
+                    client.destroy();
+                }
+                catch {
+                    // ignored
+                }
+            });
+            PingCommand.subscribers.set(url, connecting);
+            pending = connecting;
+        }
+        return pending;
+    }
+    /** Waits up to `timeoutSeconds` for a publish on any of `folderUids`, resolving with the channel that changed,
+     * or `[]` on timeout, supersede by a newer `Ping` from the same device, request close, or Redis being
+     * unavailable (in which case the full heartbeat is still waited). */
+    waitForChange(ctx, folderUids, timeoutSeconds) {
+        const key = JSON.stringify([ctx.mailboxUid, ctx.deviceId]);
+        const redisUrl = this.redisConfig ? this.redisConfig.url : undefined;
+        return new Promise((resolve) => {
+            let settled = false;
+            let unsubscribe;
+            const finish = (changed) => {
+                if (settled) {
+                    return;
+                }
+                settled = true;
+                clearTimeout(timer);
+                if (PingCommand.activePings.get(key) === cancel) {
+                    PingCommand.activePings.delete(key);
+                }
+                if (unsubscribe) {
+                    void unsubscribe();
+                }
+                resolve(changed);
+            };
+            const cancel = () => finish([]);
+            const checkPending = () => {
+                void this.pendingChanges(ctx, folderUids).then((changed) => {
+                    if (changed.length > 0) {
+                        finish(changed);
                     }
                 });
+            };
+            PingCommand.activePings.get(key)?.();
+            PingCommand.activePings.set(key, cancel);
+            const timer = setTimeout(cancel, timeoutSeconds * 1000);
+            ctx.res?.onFinish(cancel);
+            if (redisUrl === undefined) {
+                checkPending();
+                return;
+            }
+            const listener = (_message, channel) => finish([channel]);
+            PingCommand.getSubscriber(redisUrl)
+                .then(async (client) => {
+                if (settled) {
+                    return;
+                }
+                const release = () => client.unsubscribe(folderUids, listener).catch(() => undefined);
+                try {
+                    await client.subscribe(folderUids, listener);
+                }
+                catch {
+                    // Fail open: keep waiting out the heartbeat, just without notifications.
+                }
+                if (settled) {
+                    // Settled while the subscribe was in flight - `finish()` had nothing to release yet.
+                    await release();
+                }
+                else {
+                    unsubscribe = release;
+                    // Subscribed: every later change is published to the listener, so this covers the ones before.
+                    checkPending();
+                }
+            })
+                .catch(() => {
+                // Connect failed - fail open, the timer/cancel still answers Status 1.
+                checkPending();
             });
-        }
-        finally {
-            await client.unsubscribe(folderUids).catch(() => undefined);
-            await client.disconnect().catch(() => undefined);
-        }
+        });
     }
 }
+/** Shared subscriber connections, keyed by Redis URL - each value resolves once that client is connected. */
+PingCommand.subscribers = new Map();
+/** The cancel function of the currently active `Ping` for each (mailbox, device) pair. */
+PingCommand.activePings = new Map();
 __decorate([
     Config("datastores:events", null),
     __metadata("design:type", Object)
@@ -138,8 +360,18 @@ __decorate([
     Config("mail:eas:ping_max_heartbeat_seconds", 1740),
     __metadata("design:type", Number)
 ], PingCommand.prototype, "maxHeartbeatSeconds", void 0);
+__decorate([
+    Config("mail:eas:ping_max_folders", 300),
+    __metadata("design:type", Number)
+], PingCommand.prototype, "maxFolders", void 0);
 __decorate([
     Inject(ACLUtils),
     __metadata("design:type", ACLUtils)
 ], PingCommand.prototype, "aclUtils", void 0);
+__decorate([
+    Init,
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], PingCommand.prototype, "init", null);
 //# sourceMappingURL=PingCommand.js.map

package/dist/lib/commands/PingCommand.js.map

@@ -1 +1 @@
-{"version":3,"file":"PingCommand.js","sourceRoot":"","sources":["../../../src/commands/PingCommand.ts"],"names":[],"mappings":";;;;;;;;;AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAAE,YAAY,EAAwB,MAAM,OAAO,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAqB,MAAM,0BAA0B,CAAC;AAEvH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC;AAE5C;;+EAE+E;AAC/E,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACjC,MAAM,yBAAyB,GAAG,GAAG,CAAC;AAEtC;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,WAAW;IAAxB;QACoB,YAAO,GAAG,MAAM,CAAC;QAUzB,wBAAmB,GAAW,EAAE,CAAC;QAGjC,wBAAmB,GAAW,IAAI,CAAC;IAsG/C,CAAC;IAjGU,KAAK,CAAC,MAAM,CAAC,GAAsB;QACtC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,cAAc,CAAC,yBAAyB,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACpD,MAAM,mBAAmB,GAAa,SAAS;YAC3C,CAAC,CAAC,YAAY,CAAC,SAAS,EAAE,QAAQ,CAAC;iBAC5B,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;iBAClD,MAAM,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;YAC5C,CAAC,CAAC,EAAE,CAAC;QACT,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC,cAAc,CAAC,yBAAyB,CAAC,CAAC;QAC1D,CAAC;QAED,uGAAuG;QACvG,sGAAsG;QACtG,sGAAsG;QACtG,sGAAsG;QACtG,sGAAsG;QACtG,iGAAiG;QACjG,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,mBAAmB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,QAAS,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAChG,CAAC;QACF,MAAM,UAAU,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QACzE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC,cAAc,CAAC,yBAAyB,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,gBAAgB,GAAW,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,mBAAmB,CAAC,IAAI,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACjH,MAAM,gBAAgB,GAAW,IAAI,CAAC,GAAG,CACrC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,CAAC,EACnH,IAAI,CAAC,mBAAmB,CAC3B,CAAC;QAEF,MAAM,iBAAiB,GAAa,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;QAC3F,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;QAClD,CAAC;QAED,OAAO,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE;YACvC,WAAW,CAAC,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,oBAAoB,CAAC;YAC/D,OAAO,CACH,aAAa,CAAC,IAAI,EAClB,SAAS,EACT,iBAAiB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,CACjF;SACJ,CAAC,CAAC;IACP,CAAC;IAEO,cAAc,CAAC,MAAc;QACjC,OAAO,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACpG,CAAC;IAED;;;;iEAI6D;IACrD,KAAK,CAAC,aAAa,CAAC,UAAoB,EAAE,cAAsB;QACpE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACpB,OAAO,EAAE,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAoB,YAAY,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;QAC5E,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;QACvB,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,OAAO,CAAW,CAAC,OAAO,EAAE,EAAE;gBAC3C,IAAI,OAAO,GAAG,KAAK,CAAC;gBACpB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC1B,IAAI,CAAC,OAAO,EAAE,CAAC;wBACX,OAAO,GAAG,IAAI,CAAC;wBACf,OAAO,CAAC,EAAE,CAAC,CAAC;oBAChB,CAAC;gBACL,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC,CAAC;gBAE1B,MAAM;qBACD,SAAS,CAAC,UAAU,EAAE,CAAC,QAAgB,EAAE,OAAe,EAAE,EAAE;oBACzD,IAAI,CAAC,OAAO,EAAE,CAAC;wBACX,OAAO,GAAG,IAAI,CAAC;wBACf,YAAY,CAAC,KAAK,CAAC,CAAC;wBACpB,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;oBACvB,CAAC;gBACL,CAAC,CAAC;qBACD,KAAK,CAAC,GAAG,EAAE;oBACR,IAAI,CAAC,OAAO,EAAE,CAAC;wBACX,OAAO,GAAG,IAAI,CAAC;wBACf,YAAY,CAAC,KAAK,CAAC,CAAC;wBACpB,OAAO,CAAC,EAAE,CAAC,CAAC;oBAChB,CAAC;gBACL,CAAC,CAAC,CAAC;YACX,CAAC,CAAC,CAAC;QACP,CAAC;gBAAS,CAAC;YACP,MAAM,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC5D,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACrD,CAAC;IACL,CAAC;CACJ;AA5GW;IADP,MAAM,CAAC,mBAAmB,EAAE,IAAI,CAAC;;gDACT;AAGjB;IADP,MAAM,CAAC,qCAAqC,EAAE,EAAE,CAAC;;wDACT;AAGjC;IADP,MAAM,CAAC,qCAAqC,EAAE,IAAI,CAAC;;wDACT;AAGnC;IADP,MAAM,CAAC,QAAQ,CAAC;8BACE,QAAQ;6CAAC"}
+{"version":3,"file":"PingCommand.js","sourceRoot":"","sources":["../../../src/commands/PingCommand.ts"],"names":[],"mappings":";;;;;;;;;AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAAE,YAAY,EAAwB,MAAM,OAAO,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAiB,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACxF,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAqB,MAAM,0BAA0B,CAAC;AAEvH,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAE1F,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC;AAElD;;qDAEqD;AACrD,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACjC,MAAM,yBAAyB,GAAG,GAAG,CAAC;AACtC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAEpC,mEAAmE;AACnE,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAEhC;qFACqF;AACrF,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAEpC,kFAAkF;AAClF,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAEpC,yGAAyG;AACzG,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAE/B,2HAA2H;AAC3H,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAEpC,yEAAyE;AACzE,MAAM,kBAAkB,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;AAS/E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,OAAO,WAAW;IAAxB;QAMoB,YAAO,GAAG,MAAM,CAAC;QASzB,wBAAmB,GAAW,EAAE,CAAC;QAGjC,wBAAmB,GAAW,IAAI,CAAC;QAGnC,eAAU,GAAW,GAAG,CAAC;QAOvB,uBAAkB,GAA0C,EAAE,CAAC;QAMjE,UAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;IAgTtD,CAAC;IA7SgB,AAAN,KAAK,CAAC,IAAI;QACb,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC7B,OAAO;QACX,CAAC;QACD,IAAI,CAAC,mBAAmB,GAAG,MAAM,IAAI,CAAC,cAAe,CAAC,WAAW,CAAC,SAAS,EAAE;YACzE,IAAI,EAAE,IAAI,CAAC,oBAAoB,CAAC,IAAI;YACpC,IAAI,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC;SACpC,CAAC,CAAC;QACH,KAAK,MAAM,CAAC,eAAe,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC/E,IAAI,CAAC,KAAK,CAAC,GAAG,CACV,eAAe,EACf,MAAM,IAAI,CAAC,cAAe,CAAC,WAAW,CAAC,oBAAoB,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAChI,CAAC;QACN,CAAC;IACL,CAAC;IAED,uGAAuG;IAChG,MAAM,CAAC,gBAAgB;QAC1B,WAAW,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QAChC,WAAW,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;IACpC,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,GAAsB;QACtC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,cAAc,CAAC,yBAAyB,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACpD,MAAM,mBAAmB,GAAa,SAAS;YAC3C,CAAC,CAAC,YAAY,CAAC,SAAS,EAAE,QAAQ,CAAC;iBAC5B,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;iBAClD,MAAM,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;YAC5C,CAAC,CAAC,EAAE,CAAC;QACT,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC,cAAc,CAAC,yBAAyB,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,mBAAmB,CAAC,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YAC/C,OAAO,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE;gBACvC,WAAW,CAAC,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,uBAAuB,CAAC;gBAClE,WAAW,CAAC,aAAa,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;aACzE,CAAC,CAAC;QACP,CAAC;QAED,sGAAsG;QACtG,+DAA+D;QAC/D,MAAM,UAAU,GAAa,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QAClF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC,cAAc,CAAC,yBAAyB,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,gBAAgB,GAAW,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,mBAAmB,CAAC,IAAI,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACjH,MAAM,gBAAgB,GAAW,IAAI,CAAC,GAAG,CACrC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,CAAC,EACnH,IAAI,CAAC,mBAAmB,CAC3B,CAAC;QAEF,MAAM,iBAAiB,GAAa,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAC;QAChG,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;QAClD,CAAC;QAED,OAAO,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE;YACvC,WAAW,CAAC,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,oBAAoB,CAAC;YAC/D,OAAO,CACH,aAAa,CAAC,IAAI,EAClB,SAAS,EACT,iBAAiB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,CACjF;SACJ,CAAC,CAAC;IACP,CAAC;IAEO,cAAc,CAAC,MAAc;QACjC,OAAO,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACpG,CAAC;IAED,oHAAoH;IAC5G,KAAK,CAAC,eAAe,CAAC,GAAsB,EAAE,UAAoB;QACtE,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,IAAI,oBAAoB,EAAE,CAAC;YAC/D,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,oBAAoB,CAAC,CAAC;YAC5D,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,QAAS,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAClF,CAAC;YACF,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,cAAc,CAAC,GAAsB,EAAE,UAAoB;QACrE,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC5B,OAAO,EAAE,CAAC;QACd,CAAC;QACD,IAAI,MAAuC,CAAC;QAC5C,IAAI,CAAC;YACD,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,EAAE,CAAC;QACd,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAgC,CAAC;QACxD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACjC,MAAM,KAAK,GAAmC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACpE,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;gBACjD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;YAC/F,CAAC;QACL,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,KAAK,MAAM,CAAC,eAAe,EAAE,WAAW,CAAC,IAAI,OAAO,EAAE,CAAC;YACnD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,IAAI,kBAAkB,EAAE,CAAC;gBAC9D,MAAM,KAAK,GAAa,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,CAAE,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC,KAAK,CACnI,GAAG,EAAE,CAAC,EAAE,CACX,CAAC;gBACF,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7C,CAAC;QACL,CAAC;QACD,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACxD,CAAC;IAED;gHAC4G;IACpG,KAAK,CAAC,UAAU,CAAC,GAAsB,EAAE,UAAoB;QACjE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,IAAI,GAAG,EAA8B,CAAC;QACrD,MAAM,IAAI,GAAG,CAAC,IAA0B,EAAQ,EAAE;YAC9C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACrB,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;oBAChI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;gBACnC,CAAC;YACL,CAAC;QACL,CAAC,CAAC;QACF,MAAM,QAAQ,GAAa,UAAU,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAC5D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,kBAAkB,EAAE,CAAC;YAC3D,MAAM,KAAK,GAAa,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,kBAAkB,CAAC,CAAC;YAClE,MAAM,KAAK,GAAW,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;YACvD,IAAI,CACA,MAAM,IAAI,CAAC,mBAAoB,CAAC,IAAI,CAChC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAS,EACzG,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAC7B,CACJ,CAAC;QACN,CAAC;QACD,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACtE,IAAI,CAAC,MAAM,IAAI,CAAC,mBAAoB,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACxJ,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,cAAc,CAAC,IAAoB,EAAE,MAA4B;QAC3E,MAAM,SAAS,GAAG,CAAC,KAAyB,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;QAC9G,MAAM,SAAS,GAAG,CAAC,KAAyB,EAAE,IAAW,EAAE,QAAiB,EAAuB,EAAE;YACjG,MAAM,MAAM,GAA2B,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;YAC1D,MAAM,KAAK,GAAU,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,IAAI,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACnI,IAAI,KAAK,CAAC,MAAM,GAAG,yBAAyB,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAChI,OAAO,IAAI,CAAC;YAChB,CAAC;YACD,OAAO,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QACxC,CAAC,CAAC;QAEF,MAAM,MAAM,GAAyB,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QAC9F,IAAI,IAAI,GAAU,EAAE,CAAC;QACrB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,QAAQ,GAAS,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;YAC1G,MAAM,KAAK,GAAQ;gBACf,SAAS,EAAE,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;gBACpE,YAAY,EAAE,OAAO,QAAQ,CAAC,WAAW,EAAE,GAAG;gBAC9C,IAAI,EAAE,kBAAkB;gBACxB,KAAK,EAAE,uBAAuB,GAAG,CAAC;aACrC,CAAC;YACF,MAAM,OAAO,GAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,uBAAuB,GAAG,CAAC,EAAE,CAAC;YAC7E,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;YACxH,IAAI,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC,CAAC;YAC7B,QAAQ,GAAG,IAAI,CAAC,MAAM,IAAI,uBAAuB,IAAI,OAAO,CAAC,MAAM,IAAI,uBAAuB,CAAC;QACnG,CAAC;QAED,MAAM,OAAO,GAA4B,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QAChJ,8GAA8G;QAC9G,MAAM,SAAS,GAAa,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACxG,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,IAAI,wBAAwB,EAAE,CAAC;YAClE,MAAM,OAAO,CAAC,GAAG,CACb,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,wBAAwB,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;gBACjE,MAAM,KAAK,GAAuB,MAAM,CAAC,KAAK,CAAC,CAAC;gBAChD,MAAM,OAAO,GAAG,MAAM,SAAS,CAAM,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,yBAAyB,CAAC,CAAC;gBACxH,OAAO,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC;YAC1E,CAAC,CAAC,CACL,CAAC;QACN,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC5F,CAAC;IAED;oFACgF;IACxE,MAAM,CAAC,aAAa,CAAC,GAAW;QACpC,IAAI,OAAO,GAAG,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,GAAG,EAAE,CAAoB,CAAC;YACxD,wFAAwF;YACxF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACpC,MAAM,UAAU,GAA6B,MAAM,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;YACjF,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE;gBAClB,IAAI,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,UAAU,EAAE,CAAC;oBAClD,WAAW,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACxC,CAAC;gBACD,IAAI,CAAC;oBACD,MAAM,CAAC,OAAO,EAAE,CAAC;gBACrB,CAAC;gBAAC,MAAM,CAAC;oBACL,UAAU;gBACd,CAAC;YACL,CAAC,CAAC,CAAC;YACH,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;YAC7C,OAAO,GAAG,UAAU,CAAC;QACzB,CAAC;QACD,OAAO,OAAO,CAAC;IACnB,CAAC;IAED;;yEAEqE;IAC7D,aAAa,CAAC,GAAsB,EAAE,UAAoB,EAAE,cAAsB;QACtF,MAAM,GAAG,GAAW,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;QACnE,MAAM,QAAQ,GAAuB,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QAEzF,OAAO,IAAI,OAAO,CAAW,CAAC,OAAO,EAAE,EAAE;YACrC,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,IAAI,WAA8C,CAAC;YAEnD,MAAM,MAAM,GAAG,CAAC,OAAiB,EAAQ,EAAE;gBACvC,IAAI,OAAO,EAAE,CAAC;oBACV,OAAO;gBACX,CAAC;gBACD,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,MAAM,EAAE,CAAC;oBAC9C,WAAW,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACxC,CAAC;gBACD,IAAI,WAAW,EAAE,CAAC;oBACd,KAAK,WAAW,EAAE,CAAC;gBACvB,CAAC;gBACD,OAAO,CAAC,OAAO,CAAC,CAAC;YACrB,CAAC,CAAC;YACF,MAAM,MAAM,GAAG,GAAS,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACtC,MAAM,YAAY,GAAG,GAAS,EAAE;gBAC5B,KAAK,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;oBACvD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACrB,MAAM,CAAC,OAAO,CAAC,CAAC;oBACpB,CAAC;gBACL,CAAC,CAAC,CAAC;YACP,CAAC,CAAC;YAEF,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACrC,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACzC,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAAC,CAAC;YACxD,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;YAE1B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBACzB,YAAY,EAAE,CAAC;gBACf,OAAO;YACX,CAAC;YAED,MAAM,QAAQ,GAAiB,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;YACxE,WAAW,CAAC,aAAa,CAAC,QAAQ,CAAC;iBAC9B,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;gBACnB,IAAI,OAAO,EAAE,CAAC;oBACV,OAAO;gBACX,CAAC;gBACD,MAAM,OAAO,GAAG,GAAkB,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBACrG,IAAI,CAAC;oBACD,MAAM,MAAM,CAAC,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;gBACjD,CAAC;gBAAC,MAAM,CAAC;oBACL,yEAAyE;gBAC7E,CAAC;gBACD,IAAI,OAAO,EAAE,CAAC;oBACV,qFAAqF;oBACrF,MAAM,OAAO,EAAE,CAAC;gBACpB,CAAC;qBAAM,CAAC;oBACJ,WAAW,GAAG,OAAO,CAAC;oBACtB,+FAA+F;oBAC/F,YAAY,EAAE,CAAC;gBACnB,CAAC;YACL,CAAC,CAAC;iBACD,KAAK,CAAC,GAAG,EAAE;gBACR,uEAAuE;gBACvE,YAAY,EAAE,CAAC;YACnB,CAAC,CAAC,CAAC;QACX,CAAC,CAAC,CAAC;IACP,CAAC;;AAhVD,6GAA6G;AACrF,uBAAW,GAA0C,IAAI,GAAG,EAAE,AAAnD,CAAoD;AACvF,0FAA0F;AAClE,uBAAW,GAA4B,IAAI,GAAG,EAAE,AAArC,CAAsC;AAQjE;IADP,MAAM,CAAC,mBAAmB,EAAE,IAAI,CAAC;;gDACT;AAGjB;IADP,MAAM,CAAC,qCAAqC,EAAE,EAAE,CAAC;;wDACT;AAGjC;IADP,MAAM,CAAC,qCAAqC,EAAE,IAAI,CAAC;;wDACT;AAGnC;IADP,MAAM,CAAC,2BAA2B,EAAE,GAAG,CAAC;;+CACR;AAGzB;IADP,MAAM,CAAC,QAAQ,CAAC;8BACE,QAAQ;6CAAC;AAaf;IADZ,IAAI;;;;uCAeJ"}

package/dist/lib/commands/ProvisionCommand.js

@@ -18,6 +18,8 @@ import { childText, element, findChild, textElement } from "../codec/WbxmlElemen
 import { persistDeviceSyncState } from "../EasSyncKeyUtils.js";
 const { Config } = ObjectDecorators;
 const DEFAULT_POLICY_TYPE = "MS-EAS-Provisioning-WBXML";
+/** [MS-ASCMD] common status 129 (DeviceIsBlockedForThisUser). */
+const STATUS_DEVICE_BLOCKED = "129";
 /**
  * Handles the two-request EAS `Provision` handshake (MS-ASPROV) every client must complete before any other
  * command is honored (see `BaseEasRoute`'s provisioning gate), plus the three-step `RemoteWipe` sub-flow that
@@ -33,19 +35,25 @@ const DEFAULT_POLICY_TYPE = "MS-EAS-Provisioning-WBXML";
  * no way for the server to inspect device state directly either).
  *
  * - **Request 1** (no `PolicyKey` in the body): mint a new policy key, store it on `DeviceSyncState` (not yet
- * provisioned), and send back the policy document under that key. If a `RemoteWipe` was requested for this
- * device (`DeviceSyncState.remoteWipeRequested`, set by an admin - see the remote-wipe route), skip normal
- * policy issuance entirely and send the `RemoteWipe` directive instead.
+ * provisioned), and send back the policy document under that key.
  * - **Request 2** (client echoes the `PolicyKey` back, acknowledging the policy): if the key matches what was
  * minted in request 1 *and* the client's own `Status` is `1`, mark the device provisioned and re-confirm the
  * same key; anything else (a stale/replayed key, a device that never actually saw request 1's response, or a
  * device reporting it could not comply) is rejected without provisioning.
+ * - **While a wipe is pending**, every other Provision request (a policy request *or* an acknowledgement of an
+ * older key) gets the `RemoteWipe` directive and never provisions. Requesting the wipe also clears the stored
+ * policy key (`BaseDeviceSyncStateRoute.remoteWipe`), and `BaseEasRoute` refuses any command whose presented
+ * `X-MS-PolicyKey` doesn't match the stored key, so a device can't keep syncing on its old key.
  * - **RemoteWipe acknowledgement**: after wiping itself, a device sends a bare `<Provision><RemoteWipe>
  * <Status>1</Status></RemoteWipe></Provision>` (no `Policies`). Detected first, ahead of the normal
- * issue/acknowledge branching. Clears `remoteWipeRequested` and stamps `remoteWipeAcknowledgedAt` for audit,
- * but deliberately leaves `provisioned` untouched (`false`, from when the wipe was requested) - the device
- * must complete a genuine fresh Provision handshake to re-add the account, it does not fall straight back into
- * "provisioned". `remoteWipeAccountOnly` is recorded for admin audit only; the wire directive sent to the
+ * issue/acknowledge branching, and ignored (Status 2) unless a wipe is actually pending. Clears `remoteWipeRequested`,
+ * stamps `remoteWipeAcknowledgedAt` for audit and sets `blocked`, leaving `provisioned` `false`.
+ * - **A blocked device** (one that acknowledged a wipe) is refused every Provision request with Status 129
+ * (DeviceIsBlockedForThisUser) - and `BaseEasRoute` refuses its other commands - until an administrator clears the
+ * flag (`BaseDeviceSyncStateRoute.unblock`). Otherwise a device (or whoever holds it) could acknowledge the wipe
+ * without wiping anything and simply provision again. The block (like the wipe itself) is keyed on the client-supplied
+ * `DeviceId`: a client that ignores the directive can pair again under another `DeviceId` with the same credentials -
+ * see `DeviceSyncState.blocked`; revoking the account's credentials is what stops that. `remoteWipeAccountOnly` is recorded for admin audit only; the wire directive sent to the
  * device is identical either way (a real "wipe just this account's data" vs. "wipe the whole device"
  * distinction would require an MDM-capable client extension this library doesn't implement).
  *
@@ -61,9 +69,20 @@ export class ProvisionCommand {
         this.allowSimplePassword = false;
     }
     async handle(ctx) {
+        if (ctx.deviceSyncState.blocked) {
+            return element(WbxmlCodePage.Provision, "Provision", [textElement(WbxmlCodePage.Provision, "Status", STATUS_DEVICE_BLOCKED)]);
+        }
         if (ctx.request && findChild(ctx.request, "RemoteWipe")) {
             return await this.acknowledgeRemoteWipe(ctx);
         }
+        // While a wipe is pending, no Provision request - neither a fresh policy request nor an acknowledgement of a
+        // key issued before the wipe was requested - may (re)provision the device: every one gets the directive.
+        if (ctx.deviceSyncState.remoteWipeRequested) {
+            return element(WbxmlCodePage.Provision, "Provision", [
+                textElement(WbxmlCodePage.Provision, "Status", "1"),
+                element(WbxmlCodePage.Provision, "RemoteWipe", [textElement(WbxmlCodePage.Provision, "Status", "1")]),
+            ]);
+        }
         const policiesEl = ctx.request ? findChild(ctx.request, "Policies") : undefined;
         const policyEl = policiesEl ? findChild(policiesEl, "Policy") : undefined;
         const policyType = (policyEl ? childText(policyEl, "PolicyType") : undefined) ?? DEFAULT_POLICY_TYPE;
@@ -74,15 +93,8 @@ export class ProvisionCommand {
         }
         return await this.acknowledgePolicy(ctx, policyType, clientPolicyKey, clientStatus);
     }
-    /** Request 1: mint and store a new policy key, send the policy document - or, if a remote wipe is
-     * pending for this device, the `RemoteWipe` directive instead. */
+    /** Request 1: mint and store a new policy key and send the policy document. */
     async issuePolicy(ctx, policyType) {
-        if (ctx.deviceSyncState.remoteWipeRequested) {
-            return element(WbxmlCodePage.Provision, "Provision", [
-                textElement(WbxmlCodePage.Provision, "Status", "1"),
-                element(WbxmlCodePage.Provision, "RemoteWipe", [textElement(WbxmlCodePage.Provision, "Status", "1")]),
-            ]);
-        }
         const policyKey = crypto.randomBytes(8).toString("hex");
         await this.persist(ctx, { policyKey, provisioned: false });
         return element(WbxmlCodePage.Provision, "Provision", [
@@ -128,12 +140,17 @@ export class ProvisionCommand {
             ]),
         ]);
     }
-    /** The device has wiped itself and is acknowledging - clear the pending flag but leave `provisioned`
-     * alone (still `false`, from when the wipe was requested) so a genuine re-provision is required. */
+    /** The device has wiped itself and is acknowledging - clear the pending flag and block the device until an
+     * administrator unblocks it; `provisioned` stays `false` (from when the wipe was requested). */
     async acknowledgeRemoteWipe(ctx) {
+        // Only a wipe that was actually requested can be acknowledged; an unsolicited acknowledgement changes nothing.
+        if (!ctx.deviceSyncState.remoteWipeRequested) {
+            return element(WbxmlCodePage.Provision, "Provision", [textElement(WbxmlCodePage.Provision, "Status", "2")]);
+        }
         await persistDeviceSyncState(ctx.deviceSyncState, ctx.deviceSyncStateRepo, {
             remoteWipeRequested: false,
             remoteWipeAcknowledgedAt: new Date(),
+            blocked: true,
         });
         return element(WbxmlCodePage.Provision, "Provision", [textElement(WbxmlCodePage.Provision, "Status", "1")]);
     }

package/dist/lib/commands/ProvisionCommand.js.map

@@ -1 +1 @@
-{"version":3,"file":"ProvisionCommand.js","sourceRoot":"","sources":["../../../src/commands/ProvisionCommand.ts"],"names":[],"mappings":";;;;;;;;;AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAqB,MAAM,0BAA0B,CAAC;AACzG,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAE/D,MAAM,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC;AAEpC,MAAM,mBAAmB,GAAG,2BAA2B,CAAC;AAExD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,OAAO,gBAAgB;IAA7B;QACoB,YAAO,GAAG,WAAW,CAAC;QAG9B,oBAAe,GAAY,IAAI,CAAC;QAGhC,sBAAiB,GAAW,CAAC,CAAC;QAG9B,sBAAiB,GAAW,CAAC,CAAC;QAG9B,4BAAuB,GAAY,IAAI,CAAC;QAGxC,wBAAmB,GAAY,KAAK,CAAC;IA6GjD,CAAC;IA3GU,KAAK,CAAC,MAAM,CAAC,GAAsB;QACtC,IAAI,GAAG,CAAC,OAAO,IAAI,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,CAAC;YACtD,OAAO,MAAM,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAChF,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1E,MAAM,UAAU,GAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,mBAAmB,CAAC;QAC7G,MAAM,eAAe,GAAuB,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACpG,MAAM,YAAY,GAAuB,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAE9F,IAAI,CAAC,eAAe,EAAE,CAAC;YACnB,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,UAAU,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC;IACxF,CAAC;IAED;sEACkE;IAC1D,KAAK,CAAC,WAAW,CAAC,GAAsB,EAAE,UAAkB;QAChE,IAAI,GAAG,CAAC,eAAe,CAAC,mBAAmB,EAAE,CAAC;YAC1C,OAAO,OAAO,CAAC,aAAa,CAAC,SAAS,EAAE,WAAW,EAAE;gBACjD,WAAW,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC;gBACnD,OAAO,CAAC,aAAa,CAAC,SAAS,EAAE,YAAY,EAAE,CAAC,WAAW,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;aACxG,CAAC,CAAC;QACP,CAAC;QAED,MAAM,SAAS,GAAW,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAChE,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;QAE3D,OAAO,OAAO,CAAC,aAAa,CAAC,SAAS,EAAE,WAAW,EAAE;YACjD,WAAW,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC;YACnD,OAAO,CAAC,aAAa,CAAC,SAAS,EAAE,UAAU,EAAE;gBACzC,OAAO,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE;oBACvC,WAAW,CAAC,aAAa,CAAC,SAAS,EAAE,YAAY,EAAE,UAAU,CAAC;oBAC9D,WAAW,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC;oBACnD,WAAW,CAAC,aAAa,CAAC,SAAS,EAAE,WAAW,EAAE,SAAS,CAAC;oBAC5D,OAAO,CAAC,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE;wBACrC,OAAO,CAAC,aAAa,CAAC,SAAS,EAAE,iBAAiB,EAAE;4BAChD,WAAW,CAAC,aAAa,CAAC,SAAS,EAAE,uBAAuB,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;4BAC/F,WAAW,CAAC,aAAa,CAAC,SAAS,EAAE,yBAAyB,EAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;4BAC/F,WAAW,CACP,aAAa,CAAC,SAAS,EACvB,iCAAiC,EACjC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CACjC;4BACD,WAAW,CACP,aAAa,CAAC,SAAS,EACvB,2BAA2B,EAC3B,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CACvC;4BACD,WAAW,CACP,aAAa,CAAC,SAAS,EACvB,yBAAyB,EACzB,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAC3C;4BACD,WAAW,CAAC,aAAa,CAAC,SAAS,EAAE,oBAAoB,EAAE,GAAG,CAAC;yBAClE,CAAC;qBACL,CAAC;iBACL,CAAC;aACL,CAAC;SACL,CAAC,CAAC;IACP,CAAC;IAED;8DAC0D;IAClD,KAAK,CAAC,iBAAiB,CAC3B,GAAsB,EACtB,UAAkB,EAClB,eAAuB,EACvB,YAAgC;QAEhC,IAAI,eAAe,KAAK,GAAG,CAAC,eAAe,CAAC,SAAS,IAAI,YAAY,KAAK,GAAG,EAAE,CAAC;YAC5E,gGAAgG;YAChG,kGAAkG;YAClG,iGAAiG;YACjG,mFAAmF;YACnF,OAAO,OAAO,CAAC,aAAa,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC,WAAW,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QAChH,CAAC;QAED,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,eAAe,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QAE3E,OAAO,OAAO,CAAC,aAAa,CAAC,SAAS,EAAE,WAAW,EAAE;YACjD,WAAW,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC;YACnD,OAAO,CAAC,aAAa,CAAC,SAAS,EAAE,UAAU,EAAE;gBACzC,OAAO,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE;oBACvC,WAAW,CAAC,aAAa,CAAC,SAAS,EAAE,YAAY,EAAE,UAAU,CAAC;oBAC9D,WAAW,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC;oBACnD,WAAW,CAAC,aAAa,CAAC,SAAS,EAAE,WAAW,EAAE,eAAe,CAAC;iBACrE,CAAC;aACL,CAAC;SACL,CAAC,CAAC;IACP,CAAC;IAED;wGACoG;IAC5F,KAAK,CAAC,qBAAqB,CAAC,GAAsB;QACtD,MAAM,sBAAsB,CAAC,GAAG,CAAC,eAAe,EAAE,GAAG,CAAC,mBAAmB,EAAE;YACvE,mBAAmB,EAAE,KAAK;YAC1B,wBAAwB,EAAE,IAAI,IAAI,EAAE;SACvC,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,aAAa,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC,WAAW,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAChH,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,GAAsB,EAAE,OAAoD;QAC9F,MAAM,sBAAsB,CAAC,GAAG,CAAC,eAAe,EAAE,GAAG,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;IACxF,CAAC;CACJ;AAzHW;IADP,MAAM,CAAC,qCAAqC,EAAE,IAAI,CAAC;;yDACZ;AAGhC;IADP,MAAM,CAAC,wCAAwC,EAAE,CAAC,CAAC;;2DACd;AAG9B;IADP,MAAM,CAAC,wCAAwC,EAAE,CAAC,CAAC;;2DACd;AAG9B;IADP,MAAM,CAAC,8CAA8C,EAAE,IAAI,CAAC;;iEACb;AAGxC;IADP,MAAM,CAAC,0CAA0C,EAAE,KAAK,CAAC;;6DACb"}
+{"version":3,"file":"ProvisionCommand.js","sourceRoot":"","sources":["../../../src/commands/ProvisionCommand.ts"],"names":[],"mappings":";;;;;;;;;AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAqB,MAAM,0BAA0B,CAAC;AACzG,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAE/D,MAAM,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC;AAEpC,MAAM,mBAAmB,GAAG,2BAA2B,CAAC;AAExD,iEAAiE;AACjE,MAAM,qBAAqB,GAAG,KAAK,CAAC;AAEpC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,MAAM,OAAO,gBAAgB;IAA7B;QACoB,YAAO,GAAG,WAAW,CAAC;QAG9B,oBAAe,GAAY,IAAI,CAAC;QAGhC,sBAAiB,GAAW,CAAC,CAAC;QAG9B,sBAAiB,GAAW,CAAC,CAAC;QAG9B,4BAAuB,GAAY,IAAI,CAAC;QAGxC,wBAAmB,GAAY,KAAK,CAAC;IAsHjD,CAAC;IApHU,KAAK,CAAC,MAAM,CAAC,GAAsB;QACtC,IAAI,GAAG,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC;YAC9B,OAAO,OAAO,CAAC,aAAa,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC,WAAW,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAClI,CAAC;QACD,IAAI,GAAG,CAAC,OAAO,IAAI,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,CAAC;YACtD,OAAO,MAAM,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;QACjD,CAAC;QAED,6GAA6G;QAC7G,yGAAyG;QACzG,IAAI,GAAG,CAAC,eAAe,CAAC,mBAAmB,EAAE,CAAC;YAC1C,OAAO,OAAO,CAAC,aAAa,CAAC,SAAS,EAAE,WAAW,EAAE;gBACjD,WAAW,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC;gBACnD,OAAO,CAAC,aAAa,CAAC,SAAS,EAAE,YAAY,EAAE,CAAC,WAAW,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;aACxG,CAAC,CAAC;QACP,CAAC;QAED,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAChF,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1E,MAAM,UAAU,GAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,mBAAmB,CAAC;QAC7G,MAAM,eAAe,GAAuB,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACpG,MAAM,YAAY,GAAuB,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAE9F,IAAI,CAAC,eAAe,EAAE,CAAC;YACnB,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,UAAU,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC;IACxF,CAAC;IAED,+EAA+E;IACvE,KAAK,CAAC,WAAW,CAAC,GAAsB,EAAE,UAAkB;QAChE,MAAM,SAAS,GAAW,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAChE,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;QAE3D,OAAO,OAAO,CAAC,aAAa,CAAC,SAAS,EAAE,WAAW,EAAE;YACjD,WAAW,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC;YACnD,OAAO,CAAC,aAAa,CAAC,SAAS,EAAE,UAAU,EAAE;gBACzC,OAAO,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE;oBACvC,WAAW,CAAC,aAAa,CAAC,SAAS,EAAE,YAAY,EAAE,UAAU,CAAC;oBAC9D,WAAW,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC;oBACnD,WAAW,CAAC,aAAa,CAAC,SAAS,EAAE,WAAW,EAAE,SAAS,CAAC;oBAC5D,OAAO,CAAC,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE;wBACrC,OAAO,CAAC,aAAa,CAAC,SAAS,EAAE,iBAAiB,EAAE;4BAChD,WAAW,CAAC,aAAa,CAAC,SAAS,EAAE,uBAAuB,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;4BAC/F,WAAW,CAAC,aAAa,CAAC,SAAS,EAAE,yBAAyB,EAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;4BAC/F,WAAW,CACP,aAAa,CAAC,SAAS,EACvB,iCAAiC,EACjC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CACjC;4BACD,WAAW,CACP,aAAa,CAAC,SAAS,EACvB,2BAA2B,EAC3B,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CACvC;4BACD,WAAW,CACP,aAAa,CAAC,SAAS,EACvB,yBAAyB,EACzB,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAC3C;4BACD,WAAW,CAAC,aAAa,CAAC,SAAS,EAAE,oBAAoB,EAAE,GAAG,CAAC;yBAClE,CAAC;qBACL,CAAC;iBACL,CAAC;aACL,CAAC;SACL,CAAC,CAAC;IACP,CAAC;IAED;8DAC0D;IAClD,KAAK,CAAC,iBAAiB,CAC3B,GAAsB,EACtB,UAAkB,EAClB,eAAuB,EACvB,YAAgC;QAEhC,IAAI,eAAe,KAAK,GAAG,CAAC,eAAe,CAAC,SAAS,IAAI,YAAY,KAAK,GAAG,EAAE,CAAC;YAC5E,gGAAgG;YAChG,kGAAkG;YAClG,iGAAiG;YACjG,mFAAmF;YACnF,OAAO,OAAO,CAAC,aAAa,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC,WAAW,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QAChH,CAAC;QAED,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,eAAe,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QAE3E,OAAO,OAAO,CAAC,aAAa,CAAC,SAAS,EAAE,WAAW,EAAE;YACjD,WAAW,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC;YACnD,OAAO,CAAC,aAAa,CAAC,SAAS,EAAE,UAAU,EAAE;gBACzC,OAAO,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE;oBACvC,WAAW,CAAC,aAAa,CAAC,SAAS,EAAE,YAAY,EAAE,UAAU,CAAC;oBAC9D,WAAW,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC;oBACnD,WAAW,CAAC,aAAa,CAAC,SAAS,EAAE,WAAW,EAAE,eAAe,CAAC;iBACrE,CAAC;aACL,CAAC;SACL,CAAC,CAAC;IACP,CAAC;IAED;oGACgG;IACxF,KAAK,CAAC,qBAAqB,CAAC,GAAsB;QACtD,+GAA+G;QAC/G,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,mBAAmB,EAAE,CAAC;YAC3C,OAAO,OAAO,CAAC,aAAa,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC,WAAW,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QAChH,CAAC;QACD,MAAM,sBAAsB,CAAC,GAAG,CAAC,eAAe,EAAE,GAAG,CAAC,mBAAmB,EAAE;YACvE,mBAAmB,EAAE,KAAK;YAC1B,wBAAwB,EAAE,IAAI,IAAI,EAAE;YACpC,OAAO,EAAE,IAAI;SAChB,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,aAAa,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC,WAAW,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAChH,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,GAAsB,EAAE,OAAoD;QAC9F,MAAM,sBAAsB,CAAC,GAAG,CAAC,eAAe,EAAE,GAAG,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;IACxF,CAAC;CACJ;AAlIW;IADP,MAAM,CAAC,qCAAqC,EAAE,IAAI,CAAC;;yDACZ;AAGhC;IADP,MAAM,CAAC,wCAAwC,EAAE,CAAC,CAAC;;2DACd;AAG9B;IADP,MAAM,CAAC,wCAAwC,EAAE,CAAC,CAAC;;2DACd;AAG9B;IADP,MAAM,CAAC,8CAA8C,EAAE,IAAI,CAAC;;iEACb;AAGxC;IADP,MAAM,CAAC,0CAA0C,EAAE,KAAK,CAAC;;6DACb"}