@relayplane/proxy 1.8.10 → 1.8.12

package/dist/osmosis-store.js

@@ -0,0 +1,181 @@
+"use strict";
+/**
+ * Osmosis Phase 1 — KnowledgeAtom capture
+ *
+ * Stores per-request atoms in ~/.relayplane/osmosis.db (SQLite via better-sqlite3).
+ * Falls back to ~/.relayplane/osmosis.jsonl if SQLite is unavailable.
+ *
+ * All writes are fire-and-forget; errors are silently swallowed.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.captureAtom = captureAtom;
+exports._resetStore = _resetStore;
+const fs = __importStar(require("node:fs"));
+const os = __importStar(require("node:os"));
+const path = __importStar(require("node:path"));
+const SCHEMA_SQL = `
+CREATE TABLE IF NOT EXISTS knowledge_atoms (
+  id INTEGER PRIMARY KEY AUTOINCREMENT,
+  type TEXT NOT NULL,
+  model TEXT,
+  task_type TEXT,
+  latency_ms INTEGER,
+  input_tokens INTEGER,
+  output_tokens INTEGER,
+  error_type TEXT,
+  fallback_taken INTEGER,
+  timestamp INTEGER NOT NULL
+);
+`;
+/** Lazy-initialised SQLite database handle, or null if unavailable. */
+let _db = undefined;
+let _jsonlPath = null;
+let _insertStmt = null;
+function getRelayplaneDir() {
+    // RELAYPLANE_HOME_OVERRIDE is used in tests to avoid writing to ~/.relayplane
+    const override = process.env['RELAYPLANE_HOME_OVERRIDE'];
+    const base = override ?? os.homedir();
+    return path.join(base, '.relayplane');
+}
+function ensureDir(dir) {
+    fs.mkdirSync(dir, { recursive: true });
+}
+function initDb() {
+    try {
+        // eslint-disable-next-line @typescript-eslint/no-require-imports
+        const Database = require('better-sqlite3');
+        const dir = getRelayplaneDir();
+        ensureDir(dir);
+        const dbPath = path.join(dir, 'osmosis.db');
+        const db = new Database(dbPath);
+        db.pragma('journal_mode = WAL');
+        db.exec(SCHEMA_SQL);
+        return db;
+    }
+    catch {
+        return null;
+    }
+}
+function getDb() {
+    if (_db !== undefined)
+        return _db;
+    _db = initDb();
+    if (_db) {
+        _insertStmt = _db.prepare(`
+      INSERT INTO knowledge_atoms
+        (type, model, task_type, latency_ms, input_tokens, output_tokens, error_type, fallback_taken, timestamp)
+      VALUES
+        (@type, @model, @task_type, @latency_ms, @input_tokens, @output_tokens, @error_type, @fallback_taken, @timestamp)
+    `);
+    }
+    return _db;
+}
+function getJsonlPath() {
+    if (_jsonlPath)
+        return _jsonlPath;
+    const dir = getRelayplaneDir();
+    ensureDir(dir);
+    _jsonlPath = path.join(dir, 'osmosis.jsonl');
+    return _jsonlPath;
+}
+function writeToJsonl(atom) {
+    try {
+        fs.appendFileSync(getJsonlPath(), JSON.stringify(atom) + '\n', 'utf-8');
+    }
+    catch {
+        // best-effort
+    }
+}
+/**
+ * Capture a KnowledgeAtom (fire-and-forget).
+ * Never throws. Writes to SQLite; falls back to JSONL.
+ */
+function captureAtom(atom) {
+    try {
+        const db = getDb();
+        if (db && _insertStmt) {
+            if (atom.type === 'success') {
+                _insertStmt.run({
+                    type: atom.type,
+                    model: atom.model ?? null,
+                    task_type: atom.taskType ?? null,
+                    latency_ms: atom.latencyMs,
+                    input_tokens: atom.inputTokens,
+                    output_tokens: atom.outputTokens,
+                    error_type: null,
+                    fallback_taken: null,
+                    timestamp: atom.timestamp,
+                });
+            }
+            else {
+                _insertStmt.run({
+                    type: atom.type,
+                    model: atom.model ?? null,
+                    task_type: null,
+                    latency_ms: null,
+                    input_tokens: null,
+                    output_tokens: null,
+                    error_type: atom.errorType ?? null,
+                    fallback_taken: atom.fallbackTaken ? 1 : 0,
+                    timestamp: atom.timestamp,
+                });
+            }
+            return;
+        }
+        // SQLite unavailable — fall back to JSONL
+        writeToJsonl(atom);
+    }
+    catch {
+        // best-effort fallback
+        try {
+            writeToJsonl(atom);
+        }
+        catch { /* ignore */ }
+    }
+}
+/** Exposed for testing — reset singleton state. */
+function _resetStore() {
+    if (_db) {
+        try {
+            _db.close();
+        }
+        catch { /* ignore */ }
+    }
+    _db = undefined;
+    _insertStmt = null;
+    _jsonlPath = null;
+}
+//# sourceMappingURL=osmosis-store.js.map

package/dist/osmosis-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"osmosis-store.js","sourceRoot":"","sources":["../src/osmosis-store.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2GH,kCAqCC;AAGD,kCAOC;AAxJD,4CAA8B;AAC9B,4CAA8B;AAC9B,gDAAkC;AAsBlC,MAAM,UAAU,GAAG;;;;;;;;;;;;;CAalB,CAAC;AAEF,uEAAuE;AACvE,IAAI,GAAG,GAAyD,SAAS,CAAC;AAC1E,IAAI,UAAU,GAAkB,IAAI,CAAC;AACrC,IAAI,WAAW,GAA8C,IAAI,CAAC;AAElE,SAAS,gBAAgB;IACvB,8EAA8E;IAC9E,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;IACzD,MAAM,IAAI,GAAG,QAAQ,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IACtC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,MAAM;IACb,IAAI,CAAC;QACH,iEAAiE;QACjE,MAAM,QAAQ,GAAG,OAAO,CAAC,gBAAgB,CAAoC,CAAC;QAC9E,MAAM,GAAG,GAAG,gBAAgB,EAAE,CAAC;QAC/B,SAAS,CAAC,GAAG,CAAC,CAAC;QACf,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAC5C,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;QAChC,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAChC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACpB,OAAO,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,KAAK;IACZ,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC;IAClC,GAAG,GAAG,MAAM,EAAE,CAAC;IACf,IAAI,GAAG,EAAE,CAAC;QACR,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC;;;;;KAKzB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY;IACnB,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAClC,MAAM,GAAG,GAAG,gBAAgB,EAAE,CAAC;IAC/B,SAAS,CAAC,GAAG,CAAC,CAAC;IACf,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IAC7C,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,YAAY,CAAC,IAAmB;IACvC,IAAI,CAAC;QACH,EAAE,CAAC,cAAc,CAAC,YAAY,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,cAAc;IAChB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAgB,WAAW,CAAC,IAAmB;IAC7C,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;QACnB,IAAI,EAAE,IAAI,WAAW,EAAE,CAAC;YACtB,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC5B,WAAW,CAAC,GAAG,CAAC;oBACd,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI;oBACzB,SAAS,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI;oBAChC,UAAU,EAAE,IAAI,CAAC,SAAS;oBAC1B,YAAY,EAAE,IAAI,CAAC,WAAW;oBAC9B,aAAa,EAAE,IAAI,CAAC,YAAY;oBAChC,UAAU,EAAE,IAAI;oBAChB,cAAc,EAAE,IAAI;oBACpB,SAAS,EAAE,IAAI,CAAC,SAAS;iBAC1B,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,WAAW,CAAC,GAAG,CAAC;oBACd,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI;oBACzB,SAAS,EAAE,IAAI;oBACf,UAAU,EAAE,IAAI;oBAChB,YAAY,EAAE,IAAI;oBAClB,aAAa,EAAE,IAAI;oBACnB,UAAU,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;oBAClC,cAAc,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC1C,SAAS,EAAE,IAAI,CAAC,SAAS;iBAC1B,CAAC,CAAC;YACL,CAAC;YACD,OAAO;QACT,CAAC;QACD,0CAA0C;QAC1C,YAAY,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,uBAAuB;QACvB,IAAI,CAAC;YAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED,mDAAmD;AACnD,SAAgB,WAAW;IACzB,IAAI,GAAG,EAAE,CAAC;QACR,IAAI,CAAC;YAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IAC7C,CAAC;IACD,GAAG,GAAG,SAAS,CAAC;IAChB,WAAW,GAAG,IAAI,CAAC;IACnB,UAAU,GAAG,IAAI,CAAC;AACpB,CAAC"}

package/dist/recovery-mesh-server.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Mesh server routes for recovery atom sharing.
+ *
+ * Provides HTTP endpoints for proxy instances to contribute,
+ * query, and confirm recovery patterns via the mesh.
+ *
+ * @packageDocumentation
+ */
+import { type Server } from 'node:http';
+import { MeshRecoveryAtomStore } from './recovery-mesh.js';
+export interface RecoveryMeshServerConfig {
+    /** Port to listen on */
+    port: number;
+    /** API keys that can write (empty = deny all writes unless allowUnauthenticated is true) */
+    writeKeys: string[];
+    /** API keys that can read (empty = no auth required) */
+    readKeys: string[];
+    /** Rate limit per key/IP per hour */
+    rateLimitPerHour: number;
+    /** Pattern expiry in days */
+    expiryDays: number;
+    /**
+     * When true and writeKeys is empty, allow unauthenticated writes.
+     * Requires explicit opt-in — empty writeKeys alone no longer grants open write access.
+     * /confirm always requires a writeKey regardless of this flag.
+     */
+    allowUnauthenticated?: boolean;
+}
+export declare const DEFAULT_RECOVERY_MESH_CONFIG: RecoveryMeshServerConfig;
+export interface RecoveryMeshServerHandle {
+    store: MeshRecoveryAtomStore;
+    server: Server;
+    stop(): void;
+}
+/**
+ * Create an HTTP server that handles recovery atom mesh endpoints.
+ *
+ * Routes:
+ *   POST /mesh/recovery/contribute      — submit recovery atoms
+ *   GET  /mesh/recovery/atoms?since=    — get recovery atoms (incremental)
+ *   POST /mesh/recovery/confirm         — report confirmation/denial (always requires writeKey)
+ *   GET  /mesh/recovery/stats           — mesh recovery statistics
+ */
+export declare function createRecoveryMeshServer(store: MeshRecoveryAtomStore, config: RecoveryMeshServerConfig): Server;
+/**
+ * Start a recovery mesh server with a fresh store.
+ */
+export declare function startRecoveryMeshServer(config?: Partial<RecoveryMeshServerConfig>): RecoveryMeshServerHandle;
+//# sourceMappingURL=recovery-mesh-server.d.ts.map

package/dist/recovery-mesh-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery-mesh-server.d.ts","sourceRoot":"","sources":["../src/recovery-mesh-server.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAA+E,KAAK,MAAM,EAAE,MAAM,WAAW,CAAC;AACrH,OAAO,EAEL,qBAAqB,EAGtB,MAAM,oBAAoB,CAAC;AAI5B,MAAM,WAAW,wBAAwB;IACvC,wBAAwB;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,4FAA4F;IAC5F,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,wDAAwD;IACxD,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,qCAAqC;IACrC,gBAAgB,EAAE,MAAM,CAAC;IACzB,6BAA6B;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAED,eAAO,MAAM,4BAA4B,EAAE,wBAO1C,CAAC;AAEF,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,qBAAqB,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,IAAI,IAAI,CAAC;CACd;AAiGD;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,qBAAqB,EAC5B,MAAM,EAAE,wBAAwB,GAC/B,MAAM,CAiOR;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,CAAC,EAAE,OAAO,CAAC,wBAAwB,CAAC,GACzC,wBAAwB,CAY1B"}

package/dist/recovery-mesh-server.js

@@ -0,0 +1,333 @@
+"use strict";
+/**
+ * Mesh server routes for recovery atom sharing.
+ *
+ * Provides HTTP endpoints for proxy instances to contribute,
+ * query, and confirm recovery patterns via the mesh.
+ *
+ * @packageDocumentation
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_RECOVERY_MESH_CONFIG = void 0;
+exports.createRecoveryMeshServer = createRecoveryMeshServer;
+exports.startRecoveryMeshServer = startRecoveryMeshServer;
+const node_http_1 = require("node:http");
+const recovery_mesh_js_1 = require("./recovery-mesh.js");
+exports.DEFAULT_RECOVERY_MESH_CONFIG = {
+    port: 19600,
+    writeKeys: [],
+    readKeys: [],
+    rateLimitPerHour: 100,
+    expiryDays: 30,
+    allowUnauthenticated: false,
+};
+// ─── Constants ────────────────────────────────────────────────────────────────
+/** Maximum request body size (1 MB) */
+const MAX_BODY_BYTES = 1_048_576;
+/** Maximum atoms allowed in a single /contribute request */
+const MAX_ATOMS_PER_REQUEST = 100;
+/** Maximum allowed value for count fields */
+const MAX_COUNT = 10_000;
+/** Valid atom type values */
+const VALID_ATOM_TYPES = new Set([
+    'auth-header',
+    'model-rename',
+    'timeout-tune',
+    'provider-fallback',
+]);
+/** Valid authHeader values */
+const VALID_AUTH_HEADERS = new Set(['Authorization', 'x-api-key']);
+/** Known provider names */
+const KNOWN_PROVIDERS = new Set([
+    'anthropic',
+    'openai',
+    'google',
+    'azure',
+    'openrouter',
+    'cohere',
+    'mistral',
+    'bedrock',
+    'vertex',
+    'groq',
+    'together',
+    'fireworks',
+    'perplexity',
+    'deepseek',
+    'xai',
+    'meta',
+    'ollama',
+]);
+// ─── Helpers ──────────────────────────────────────────────────────────────────
+function json(res, status, data) {
+    res.writeHead(status, { 'Content-Type': 'application/json' });
+    res.end(JSON.stringify(data));
+}
+function extractKey(req, url) {
+    const authHeader = req.headers['authorization'];
+    if (authHeader?.startsWith('Bearer '))
+        return authHeader.slice(7);
+    return url.searchParams.get('key');
+}
+function makeRateLimiter() {
+    const buckets = new Map();
+    return function checkRateLimit(key, limit) {
+        const now = Date.now();
+        const bucket = buckets.get(key);
+        if (!bucket || now > bucket.resetAt) {
+            buckets.set(key, { count: 1, resetAt: now + 3600_000 });
+            return true;
+        }
+        if (bucket.count >= limit)
+            return false;
+        bucket.count++;
+        return true;
+    };
+}
+function readBody(req) {
+    return new Promise((resolve, reject) => {
+        const chunks = [];
+        let total = 0;
+        let oversized = false;
+        req.on('data', (c) => {
+            if (oversized)
+                return; // discard additional data without buffering
+            total += c.length;
+            if (total > MAX_BODY_BYTES) {
+                oversized = true;
+                chunks.length = 0; // free already-buffered chunks
+                return reject(new Error('Payload too large'));
+            }
+            chunks.push(c);
+        });
+        req.on('end', () => {
+            if (!oversized)
+                resolve(Buffer.concat(chunks).toString());
+        });
+        req.on('error', reject);
+    });
+}
+// ─── Server ───────────────────────────────────────────────────────────────────
+/**
+ * Create an HTTP server that handles recovery atom mesh endpoints.
+ *
+ * Routes:
+ *   POST /mesh/recovery/contribute      — submit recovery atoms
+ *   GET  /mesh/recovery/atoms?since=    — get recovery atoms (incremental)
+ *   POST /mesh/recovery/confirm         — report confirmation/denial (always requires writeKey)
+ *   GET  /mesh/recovery/stats           — mesh recovery statistics
+ */
+function createRecoveryMeshServer(store, config) {
+    // Per-server rate limiter (not module-level) to avoid cross-test interference
+    const checkRateLimit = makeRateLimiter();
+    const server = (0, node_http_1.createServer)(async (req, res) => {
+        const url = new URL(req.url ?? '/', `http://localhost:${config.port}`);
+        const path = url.pathname;
+        const method = req.method ?? 'GET';
+        try {
+            const apiKey = extractKey(req, url);
+            // ── Auth: /confirm always requires a valid writeKey (H3)
+            // Not exempted by allowUnauthenticated — prevents unauthenticated confidence flooding.
+            if (method === 'POST' && path === '/mesh/recovery/confirm') {
+                if (!apiKey || config.writeKeys.length === 0 || !config.writeKeys.includes(apiKey)) {
+                    return json(res, 401, { error: 'Authentication required for confirmations' });
+                }
+            }
+            // ── Auth: all other POSTs (/contribute, etc.) (H1)
+            // allowUnauthenticated: true → skip key check (even if writeKeys is set)
+            else if (method === 'POST') {
+                if (config.allowUnauthenticated) {
+                    // Explicit opt-in: open write access (e.g., private cluster deployments)
+                    // /confirm is still always authenticated above
+                }
+                else if (config.writeKeys.length > 0) {
+                    // writeKeys configured — validate the key
+                    if (!apiKey || !config.writeKeys.includes(apiKey)) {
+                        return json(res, 401, { error: 'Invalid or missing API key' });
+                    }
+                }
+                else {
+                    // No writeKeys and no explicit opt-in → deny-by-default (H1)
+                    return json(res, 401, { error: 'Write access requires authentication' });
+                }
+            }
+            // ── Auth: reads (C2 rate limit applies before this for GETs? No — reads are separate)
+            if (method === 'GET' && config.readKeys.length > 0 && path !== '/mesh/recovery/stats') {
+                if (!apiKey || !config.readKeys.includes(apiKey)) {
+                    return json(res, 401, { error: 'Invalid or missing API key' });
+                }
+            }
+            // ── Rate limiting for writes (C2: use IP when no API key)
+            if (method === 'POST') {
+                const rateLimitKey = apiKey ?? req.socket.remoteAddress ?? 'unknown';
+                if (!checkRateLimit(rateLimitKey, config.rateLimitPerHour)) {
+                    return json(res, 429, { error: 'Rate limit exceeded' });
+                }
+            }
+            // POST /mesh/recovery/contribute — accept recovery atoms
+            if (method === 'POST' && path === '/mesh/recovery/contribute') {
+                let body;
+                try {
+                    body = JSON.parse(await readBody(req));
+                }
+                catch (err) {
+                    if (err.message === 'Payload too large') {
+                        return json(res, 413, { error: 'Payload too large' });
+                    }
+                    return json(res, 400, { error: 'Invalid JSON' });
+                }
+                const rawAtoms = Array.isArray(body) ? body : [body];
+                // M3: Limit atoms per request
+                if (rawAtoms.length > MAX_ATOMS_PER_REQUEST) {
+                    return json(res, 400, { error: `Too many atoms: max ${MAX_ATOMS_PER_REQUEST} per request` });
+                }
+                const results = [];
+                for (const atom of rawAtoms) {
+                    // Validate required fields
+                    if (!atom.type || !atom.provider || !atom.trigger || !atom.fix) {
+                        results.push({ id: atom.id ?? 'unknown', status: 'rejected' });
+                        continue;
+                    }
+                    // M3: Validate atom type against enum
+                    if (!VALID_ATOM_TYPES.has(atom.type)) {
+                        results.push({ id: atom.id ?? 'unknown', status: 'rejected' });
+                        continue;
+                    }
+                    // M3: Validate errorCode is a number in valid HTTP range
+                    const errorCode = atom.trigger?.errorCode;
+                    if (typeof errorCode !== 'number' || errorCode < 100 || errorCode > 599) {
+                        results.push({ id: atom.id ?? 'unknown', status: 'rejected' });
+                        continue;
+                    }
+                    // M3: Validate authHeader if present
+                    if (atom.fix?.authHeader && !VALID_AUTH_HEADERS.has(atom.fix.authHeader)) {
+                        results.push({ id: atom.id ?? 'unknown', status: 'rejected' });
+                        continue;
+                    }
+                    // M2: Strip unknown fix.provider
+                    if (atom.fix?.provider && !KNOWN_PROVIDERS.has(atom.fix.provider)) {
+                        delete atom.fix.provider;
+                    }
+                    // H2: Cap numeric fields
+                    if (typeof atom.confirmCount === 'number') {
+                        atom.confirmCount = Math.min(atom.confirmCount, MAX_COUNT);
+                    }
+                    if (typeof atom.denyCount === 'number') {
+                        atom.denyCount = Math.min(atom.denyCount, MAX_COUNT);
+                    }
+                    if (typeof atom.reportCount === 'number') {
+                        atom.reportCount = Math.min(atom.reportCount, MAX_COUNT);
+                    }
+                    // H2: Recalculate confidence from counts (don't trust client-provided value)
+                    const totalAttempts = (atom.confirmCount ?? 0) + (atom.denyCount ?? 0);
+                    atom.confidence = totalAttempts > 0 ? (atom.confirmCount ?? 0) / totalAttempts : 0;
+                    // Ensure atom has an ID
+                    if (!atom.id) {
+                        atom.id = (0, recovery_mesh_js_1.recoveryAtomId)(atom.type, atom.provider, atom.trigger);
+                    }
+                    // Force recovery atom type
+                    atom.atomType = 'recovery';
+                    const existing = store.get(atom.id);
+                    store.upsert(atom);
+                    results.push({
+                        id: atom.id,
+                        status: existing ? 'merged' : 'created',
+                    });
+                }
+                const accepted = results.filter(r => r.status !== 'rejected').length;
+                return json(res, 200, { accepted, results });
+            }
+            // GET /mesh/recovery/atoms?since=<ISO>
+            if (method === 'GET' && path === '/mesh/recovery/atoms') {
+                const since = url.searchParams.get('since');
+                const atoms = since ? store.getSince(since) : store.getAll();
+                return json(res, 200, atoms);
+            }
+            // POST /mesh/recovery/confirm — report confirmation or denial
+            if (method === 'POST' && path === '/mesh/recovery/confirm') {
+                let body;
+                try {
+                    body = JSON.parse(await readBody(req));
+                }
+                catch (err) {
+                    if (err.message === 'Payload too large') {
+                        return json(res, 413, { error: 'Payload too large' });
+                    }
+                    return json(res, 400, { error: 'Invalid JSON' });
+                }
+                const { patternId, instanceHash, success } = body;
+                if (!patternId) {
+                    return json(res, 400, { error: 'patternId is required' });
+                }
+                const atom = store.get(patternId);
+                if (!atom) {
+                    return json(res, 404, { error: 'Pattern not found' });
+                }
+                if (success) {
+                    store.recordConfirmation(patternId);
+                }
+                else {
+                    store.recordDenial(patternId);
+                }
+                return json(res, 200, {
+                    id: patternId,
+                    confidence: store.get(patternId).confidence,
+                    confirmCount: store.get(patternId).confirmCount,
+                    denyCount: store.get(patternId).denyCount,
+                });
+            }
+            // GET /mesh/recovery/stats
+            if (method === 'GET' && path === '/mesh/recovery/stats') {
+                const stats = store.stats();
+                const all = store.getAll();
+                // Group by type
+                const byType = {};
+                const byProvider = {};
+                for (const atom of all) {
+                    byType[atom.type] = (byType[atom.type] ?? 0) + 1;
+                    byProvider[atom.provider] = (byProvider[atom.provider] ?? 0) + 1;
+                }
+                return json(res, 200, {
+                    ...stats,
+                    byType,
+                    byProvider,
+                    topPatterns: all
+                        .sort((a, b) => b.reportCount - a.reportCount)
+                        .slice(0, 10)
+                        .map(a => ({
+                        id: a.id,
+                        type: a.type,
+                        provider: a.provider,
+                        confidence: a.confidence,
+                        reportCount: a.reportCount,
+                        confirmCount: a.confirmCount,
+                    })),
+                });
+            }
+            json(res, 404, { error: 'Not found' });
+        }
+        catch (err) {
+            if (err.message === 'Payload too large') {
+                return json(res, 413, { error: 'Payload too large' });
+            }
+            json(res, 500, { error: err.message ?? 'Internal error' });
+        }
+    });
+    server.listen(config.port);
+    return server;
+}
+/**
+ * Start a recovery mesh server with a fresh store.
+ */
+function startRecoveryMeshServer(config) {
+    const fullConfig = { ...exports.DEFAULT_RECOVERY_MESH_CONFIG, ...config };
+    const store = new recovery_mesh_js_1.MeshRecoveryAtomStore(fullConfig.expiryDays);
+    const server = createRecoveryMeshServer(store, fullConfig);
+    return {
+        store,
+        server,
+        stop() {
+            server.close();
+        },
+    };
+}
+//# sourceMappingURL=recovery-mesh-server.js.map

package/dist/recovery-mesh-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery-mesh-server.js","sourceRoot":"","sources":["../src/recovery-mesh-server.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAsJH,4DAoOC;AAKD,0DAcC;AA3YD,yCAAqH;AACrH,yDAK4B;AAuBf,QAAA,4BAA4B,GAA6B;IACpE,IAAI,EAAE,KAAK;IACX,SAAS,EAAE,EAAE;IACb,QAAQ,EAAE,EAAE;IACZ,gBAAgB,EAAE,GAAG;IACrB,UAAU,EAAE,EAAE;IACd,oBAAoB,EAAE,KAAK;CAC5B,CAAC;AAQF,iFAAiF;AAEjF,uCAAuC;AACvC,MAAM,cAAc,GAAG,SAAS,CAAC;AAEjC,4DAA4D;AAC5D,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAElC,6CAA6C;AAC7C,MAAM,SAAS,GAAG,MAAM,CAAC;AAEzB,6BAA6B;AAC7B,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAS;IACvC,aAAa;IACb,cAAc;IACd,cAAc;IACd,mBAAmB;CACpB,CAAC,CAAC;AAEH,8BAA8B;AAC9B,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAS,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC,CAAC;AAE3E,2BAA2B;AAC3B,MAAM,eAAe,GAAG,IAAI,GAAG,CAAS;IACtC,WAAW;IACX,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,YAAY;IACZ,QAAQ;IACR,SAAS;IACT,SAAS;IACT,QAAQ;IACR,MAAM;IACN,UAAU;IACV,WAAW;IACX,YAAY;IACZ,UAAU;IACV,KAAK;IACL,MAAM;IACN,QAAQ;CACT,CAAC,CAAC;AAEH,iFAAiF;AAEjF,SAAS,IAAI,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa;IAC9D,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC9D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,UAAU,CAAC,GAAoB,EAAE,GAAQ;IAChD,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAChD,IAAI,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAClE,OAAO,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,eAAe;IACtB,MAAM,OAAO,GAAG,IAAI,GAAG,EAA8C,CAAC;IACtE,OAAO,SAAS,cAAc,CAAC,GAAW,EAAE,KAAa;QACvD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,QAAQ,EAAE,CAAC,CAAC;YACxD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;QACxC,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,GAAoB;IACpC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;YAC3B,IAAI,SAAS;gBAAE,OAAO,CAAC,4CAA4C;YACnE,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;YAClB,IAAI,KAAK,GAAG,cAAc,EAAE,CAAC;gBAC3B,SAAS,GAAG,IAAI,CAAC;gBACjB,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,+BAA+B;gBAClD,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;YAChD,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,IAAI,CAAC,SAAS;gBAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,iFAAiF;AAEjF;;;;;;;;GAQG;AACH,SAAgB,wBAAwB,CACtC,KAA4B,EAC5B,MAAgC;IAEhC,8EAA8E;IAC9E,MAAM,cAAc,GAAG,eAAe,EAAE,CAAC;IAEzC,MAAM,MAAM,GAAG,IAAA,wBAAgB,EAAC,KAAK,EAAE,GAAoB,EAAE,GAAmB,EAAE,EAAE;QAClF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,oBAAoB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACvE,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC;QAC1B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;QAEnC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAEpC,0DAA0D;YAC1D,uFAAuF;YACvF,IAAI,MAAM,KAAK,MAAM,IAAI,IAAI,KAAK,wBAAwB,EAAE,CAAC;gBAC3D,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBACnF,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,2CAA2C,EAAE,CAAC,CAAC;gBAChF,CAAC;YACH,CAAC;YACD,oDAAoD;YACpD,yEAAyE;iBACpE,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC3B,IAAI,MAAM,CAAC,oBAAoB,EAAE,CAAC;oBAChC,yEAAyE;oBACzE,+CAA+C;gBACjD,CAAC;qBAAM,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACvC,0CAA0C;oBAC1C,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;wBAClD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;oBACjE,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,6DAA6D;oBAC7D,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC,CAAC;gBAC3E,CAAC;YACH,CAAC;YAED,uFAAuF;YACvF,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,KAAK,sBAAsB,EAAE,CAAC;gBACtF,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBACjD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;gBACjE,CAAC;YACH,CAAC;YAED,2DAA2D;YAC3D,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACtB,MAAM,YAAY,GAAG,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC;gBACrE,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;oBAC3D,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;gBAC1D,CAAC;YACH,CAAC;YAED,yDAAyD;YACzD,IAAI,MAAM,KAAK,MAAM,IAAI,IAAI,KAAK,2BAA2B,EAAE,CAAC;gBAC9D,IAAI,IAAa,CAAC;gBAClB,IAAI,CAAC;oBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;gBACzC,CAAC;gBAAC,OAAO,GAAQ,EAAE,CAAC;oBAClB,IAAI,GAAG,CAAC,OAAO,KAAK,mBAAmB,EAAE,CAAC;wBACxC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;oBACxD,CAAC;oBACD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;gBACnD,CAAC;gBAED,MAAM,QAAQ,GAAmB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBAErE,8BAA8B;gBAC9B,IAAI,QAAQ,CAAC,MAAM,GAAG,qBAAqB,EAAE,CAAC;oBAC5C,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,qBAAqB,cAAc,EAAE,CAAC,CAAC;gBAC/F,CAAC;gBAED,MAAM,OAAO,GAAqE,EAAE,CAAC;gBAErF,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;oBAC5B,2BAA2B;oBAC3B,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;wBAC/D,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;wBAC/D,SAAS;oBACX,CAAC;oBAED,sCAAsC;oBACtC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;wBACrC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;wBAC/D,SAAS;oBACX,CAAC;oBAED,yDAAyD;oBACzD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC;oBAC1C,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,GAAG,GAAG,IAAI,SAAS,GAAG,GAAG,EAAE,CAAC;wBACxE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;wBAC/D,SAAS;oBACX,CAAC;oBAED,qCAAqC;oBACrC,IAAI,IAAI,CAAC,GAAG,EAAE,UAAU,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;wBACzE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;wBAC/D,SAAS;oBACX,CAAC;oBAED,iCAAiC;oBACjC,IAAI,IAAI,CAAC,GAAG,EAAE,QAAQ,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAClE,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;oBAC3B,CAAC;oBAED,yBAAyB;oBACzB,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;wBAC1C,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;oBAC7D,CAAC;oBACD,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;wBACvC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;oBACvD,CAAC;oBACD,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;wBACzC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;oBAC3D,CAAC;oBAED,6EAA6E;oBAC7E,MAAM,aAAa,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC;oBACvE,IAAI,CAAC,UAAU,GAAG,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;oBAEnF,wBAAwB;oBACxB,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;wBACb,IAAI,CAAC,EAAE,GAAG,IAAA,iCAAc,EAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;oBACnE,CAAC;oBAED,2BAA2B;oBAC3B,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC;oBAE3B,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBACpC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;oBAEnB,OAAO,CAAC,IAAI,CAAC;wBACX,EAAE,EAAE,IAAI,CAAC,EAAE;wBACX,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;qBACxC,CAAC,CAAC;gBACL,CAAC;gBAED,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;gBACrE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YAC/C,CAAC;YAED,uCAAuC;YACvC,IAAI,MAAM,KAAK,KAAK,IAAI,IAAI,KAAK,sBAAsB,EAAE,CAAC;gBACxD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC7D,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;YAC/B,CAAC;YAED,8DAA8D;YAC9D,IAAI,MAAM,KAAK,MAAM,IAAI,IAAI,KAAK,wBAAwB,EAAE,CAAC;gBAC3D,IAAI,IAAa,CAAC;gBAClB,IAAI,CAAC;oBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;gBACzC,CAAC;gBAAC,OAAO,GAAQ,EAAE,CAAC;oBAClB,IAAI,GAAG,CAAC,OAAO,KAAK,mBAAmB,EAAE,CAAC;wBACxC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;oBACxD,CAAC;oBACD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;gBACnD,CAAC;gBAED,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,IAA+B,CAAC;gBAE7E,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;gBAC5D,CAAC;gBAED,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,SAAmB,CAAC,CAAC;gBAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBACxD,CAAC;gBAED,IAAI,OAAO,EAAE,CAAC;oBACZ,KAAK,CAAC,kBAAkB,CAAC,SAAmB,CAAC,CAAC;gBAChD,CAAC;qBAAM,CAAC;oBACN,KAAK,CAAC,YAAY,CAAC,SAAmB,CAAC,CAAC;gBAC1C,CAAC;gBAED,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;oBACpB,EAAE,EAAE,SAAS;oBACb,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,SAAmB,CAAE,CAAC,UAAU;oBACtD,YAAY,EAAE,KAAK,CAAC,GAAG,CAAC,SAAmB,CAAE,CAAC,YAAY;oBAC1D,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,SAAmB,CAAE,CAAC,SAAS;iBACrD,CAAC,CAAC;YACL,CAAC;YAED,2BAA2B;YAC3B,IAAI,MAAM,KAAK,KAAK,IAAI,IAAI,KAAK,sBAAsB,EAAE,CAAC;gBACxD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;gBAC5B,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;gBAE3B,gBAAgB;gBAChB,MAAM,MAAM,GAA2B,EAAE,CAAC;gBAC1C,MAAM,UAAU,GAA2B,EAAE,CAAC;gBAC9C,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;oBACvB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;oBACjD,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;gBACnE,CAAC;gBAED,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;oBACpB,GAAG,KAAK;oBACR,MAAM;oBACN,UAAU;oBACV,WAAW,EAAE,GAAG;yBACb,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC;yBAC7C,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;yBACZ,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;wBACT,EAAE,EAAE,CAAC,CAAC,EAAE;wBACR,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;wBACpB,UAAU,EAAE,CAAC,CAAC,UAAU;wBACxB,WAAW,EAAE,CAAC,CAAC,WAAW;wBAC1B,YAAY,EAAE,CAAC,CAAC,YAAY;qBAC7B,CAAC,CAAC;iBACN,CAAC,CAAC;YACL,CAAC;YAED,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,IAAI,GAAG,CAAC,OAAO,KAAK,mBAAmB,EAAE,CAAC;gBACxC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACxD,CAAC;YACD,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,IAAI,gBAAgB,EAAE,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAgB,uBAAuB,CACrC,MAA0C;IAE1C,MAAM,UAAU,GAAG,EAAE,GAAG,oCAA4B,EAAE,GAAG,MAAM,EAAE,CAAC;IAClE,MAAM,KAAK,GAAG,IAAI,wCAAqB,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,wBAAwB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAE3D,OAAO;QACL,KAAK;QACL,MAAM;QACN,IAAI;YACF,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC"}