@sentropic/h2a-runtime 0.98.7-rc.1 → 0.98.7-rc.10
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/agent-launch-args.d.ts.map +1 -1
- package/dist/agent-launch-args.js +5 -5
- package/dist/agent-launch-args.js.map +1 -1
- package/dist/agy-claude.d.ts +42 -0
- package/dist/agy-claude.d.ts.map +1 -0
- package/dist/agy-claude.js +148 -0
- package/dist/agy-claude.js.map +1 -0
- package/dist/agy-headless.d.ts +11 -0
- package/dist/agy-headless.d.ts.map +1 -0
- package/dist/agy-headless.js +104 -0
- package/dist/agy-headless.js.map +1 -0
- package/dist/attach.d.ts +3 -0
- package/dist/attach.d.ts.map +1 -1
- package/dist/attach.js +2 -0
- package/dist/attach.js.map +1 -1
- package/dist/central-mcp.d.ts +32 -0
- package/dist/central-mcp.d.ts.map +1 -1
- package/dist/central-mcp.js +186 -69
- package/dist/central-mcp.js.map +1 -1
- package/dist/claude-code-cli-isolation.d.ts +53 -0
- package/dist/claude-code-cli-isolation.d.ts.map +1 -0
- package/dist/claude-code-cli-isolation.js +277 -0
- package/dist/claude-code-cli-isolation.js.map +1 -0
- package/dist/claude-code-cli-lifecycle.d.ts +80 -0
- package/dist/claude-code-cli-lifecycle.d.ts.map +1 -0
- package/dist/claude-code-cli-lifecycle.js +402 -0
- package/dist/claude-code-cli-lifecycle.js.map +1 -0
- package/dist/claude-code-cli-runner.d.ts +89 -0
- package/dist/claude-code-cli-runner.d.ts.map +1 -0
- package/dist/claude-code-cli-runner.js +659 -0
- package/dist/claude-code-cli-runner.js.map +1 -0
- package/dist/claude-seat-input.d.ts +47 -0
- package/dist/claude-seat-input.d.ts.map +1 -0
- package/dist/claude-seat-input.js +272 -0
- package/dist/claude-seat-input.js.map +1 -0
- package/dist/claude-seat-mesh-contract.d.ts +88 -0
- package/dist/claude-seat-mesh-contract.d.ts.map +1 -0
- package/dist/claude-seat-mesh-contract.js +13 -0
- package/dist/claude-seat-mesh-contract.js.map +1 -0
- package/dist/cli-seat-codecs.d.ts +86 -0
- package/dist/cli-seat-codecs.d.ts.map +1 -0
- package/dist/cli-seat-codecs.js +255 -0
- package/dist/cli-seat-codecs.js.map +1 -0
- package/dist/cli-seat-fixtures.d.ts +86 -0
- package/dist/cli-seat-fixtures.d.ts.map +1 -0
- package/dist/cli-seat-fixtures.js +114 -0
- package/dist/cli-seat-fixtures.js.map +1 -0
- package/dist/cli-seat-materialization.d.ts +245 -0
- package/dist/cli-seat-materialization.d.ts.map +1 -0
- package/dist/cli-seat-materialization.js +646 -0
- package/dist/cli-seat-materialization.js.map +1 -0
- package/dist/conv-guard.d.ts.map +1 -1
- package/dist/conv-guard.js +6 -2
- package/dist/conv-guard.js.map +1 -1
- package/dist/delegate.d.ts +10 -0
- package/dist/delegate.d.ts.map +1 -1
- package/dist/delegate.js +29 -0
- package/dist/delegate.js.map +1 -1
- package/dist/file-lock.d.ts +4 -2
- package/dist/file-lock.d.ts.map +1 -1
- package/dist/file-lock.js +24 -10
- package/dist/file-lock.js.map +1 -1
- package/dist/gateway-host/claude-seat-client.d.ts +32 -0
- package/dist/gateway-host/claude-seat-client.d.ts.map +1 -0
- package/dist/gateway-host/claude-seat-client.js +38 -0
- package/dist/gateway-host/claude-seat-client.js.map +1 -0
- package/dist/gateway-host/config-file.d.ts +2 -0
- package/dist/gateway-host/config-file.d.ts.map +1 -1
- package/dist/gateway-host/config-file.js +5 -1
- package/dist/gateway-host/config-file.js.map +1 -1
- package/dist/gateway-host/daemon.d.ts.map +1 -1
- package/dist/gateway-host/daemon.js +1 -2
- package/dist/gateway-host/daemon.js.map +1 -1
- package/dist/gateway-host/host.d.ts +6 -0
- package/dist/gateway-host/host.d.ts.map +1 -1
- package/dist/gateway-host/host.js +24 -3
- package/dist/gateway-host/host.js.map +1 -1
- package/dist/gateway-host/live-auth.d.ts +62 -0
- package/dist/gateway-host/live-auth.d.ts.map +1 -0
- package/dist/gateway-host/live-auth.js +87 -0
- package/dist/gateway-host/live-auth.js.map +1 -0
- package/dist/gateway-host/live-declarations.d.ts.map +1 -1
- package/dist/gateway-host/live-declarations.js +13 -7
- package/dist/gateway-host/live-declarations.js.map +1 -1
- package/dist/gateway-host/live-disclosure.d.ts +124 -0
- package/dist/gateway-host/live-disclosure.d.ts.map +1 -0
- package/dist/gateway-host/live-disclosure.js +347 -0
- package/dist/gateway-host/live-disclosure.js.map +1 -0
- package/dist/gateway-host/live-github.d.ts +11 -0
- package/dist/gateway-host/live-github.d.ts.map +1 -0
- package/dist/gateway-host/live-github.js +374 -0
- package/dist/gateway-host/live-github.js.map +1 -0
- package/dist/gateway-host/live-host.d.ts +20 -0
- package/dist/gateway-host/live-host.d.ts.map +1 -0
- package/dist/gateway-host/live-host.js +14 -0
- package/dist/gateway-host/live-host.js.map +1 -0
- package/dist/gateway-host/live-object-store.d.ts +35 -0
- package/dist/gateway-host/live-object-store.d.ts.map +1 -0
- package/dist/gateway-host/live-object-store.js +447 -0
- package/dist/gateway-host/live-object-store.js.map +1 -0
- package/dist/gateway-model-catalog/model-catalog.d.ts +38 -0
- package/dist/gateway-model-catalog/model-catalog.d.ts.map +1 -0
- package/dist/gateway-model-catalog/model-catalog.js +167 -0
- package/dist/gateway-model-catalog/model-catalog.js.map +1 -0
- package/dist/identity-cull/cull.js +1 -1
- package/dist/identity-cull/cull.js.map +1 -1
- package/dist/identity-cull/identity-fence.d.ts +48 -0
- package/dist/identity-cull/identity-fence.d.ts.map +1 -0
- package/dist/identity-cull/identity-fence.js +221 -0
- package/dist/identity-cull/identity-fence.js.map +1 -0
- package/dist/identity-operator-break.d.ts +43 -0
- package/dist/identity-operator-break.d.ts.map +1 -0
- package/dist/identity-operator-break.js +85 -0
- package/dist/identity-operator-break.js.map +1 -0
- package/dist/index.d.ts +8 -1
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +446 -131
- package/dist/index.js.map +1 -1
- package/dist/launch-layout.d.ts.map +1 -1
- package/dist/launch-layout.js +10 -2
- package/dist/launch-layout.js.map +1 -1
- package/dist/llm-mesh-accounts.d.ts +128 -6
- package/dist/llm-mesh-accounts.d.ts.map +1 -1
- package/dist/llm-mesh-accounts.js +370 -14
- package/dist/llm-mesh-accounts.js.map +1 -1
- package/dist/native-host.d.ts +25 -1
- package/dist/native-host.d.ts.map +1 -1
- package/dist/native-host.js +184 -23
- package/dist/native-host.js.map +1 -1
- package/dist/native-restart.d.ts +2 -0
- package/dist/native-restart.d.ts.map +1 -1
- package/dist/native-restart.js +7 -0
- package/dist/native-restart.js.map +1 -1
- package/dist/native-terminal/fleet.d.ts +11 -0
- package/dist/native-terminal/fleet.d.ts.map +1 -1
- package/dist/native-terminal/fleet.js +58 -1
- package/dist/native-terminal/fleet.js.map +1 -1
- package/dist/native-terminal/host-scope.d.ts +18 -0
- package/dist/native-terminal/host-scope.d.ts.map +1 -0
- package/dist/native-terminal/host-scope.js +65 -0
- package/dist/native-terminal/host-scope.js.map +1 -0
- package/dist/native-terminal/host.d.ts +7 -1
- package/dist/native-terminal/host.d.ts.map +1 -1
- package/dist/native-terminal/host.js +10 -26
- package/dist/native-terminal/host.js.map +1 -1
- package/dist/native-terminal/op.d.ts +36 -1
- package/dist/native-terminal/op.d.ts.map +1 -1
- package/dist/native-terminal/op.js +190 -33
- package/dist/native-terminal/op.js.map +1 -1
- package/dist/native-terminal/process.d.ts.map +1 -1
- package/dist/native-terminal/process.js +10 -1
- package/dist/native-terminal/process.js.map +1 -1
- package/dist/native-terminal/screen.d.ts.map +1 -1
- package/dist/native-terminal/screen.js +1 -1
- package/dist/native-terminal/screen.js.map +1 -1
- package/dist/native-terminal/server.d.ts +12 -2
- package/dist/native-terminal/server.d.ts.map +1 -1
- package/dist/native-terminal/server.js +143 -42
- package/dist/native-terminal/server.js.map +1 -1
- package/dist/native-terminal/session-scope.d.ts +2 -0
- package/dist/native-terminal/session-scope.d.ts.map +1 -0
- package/dist/native-terminal/session-scope.js +32 -0
- package/dist/native-terminal/session-scope.js.map +1 -0
- package/dist/proc-identity.d.ts +31 -0
- package/dist/proc-identity.d.ts.map +1 -1
- package/dist/proc-identity.js +54 -0
- package/dist/proc-identity.js.map +1 -1
- package/dist/prompt-delivery.d.ts +3 -0
- package/dist/prompt-delivery.d.ts.map +1 -1
- package/dist/prompt-delivery.js +8 -3
- package/dist/prompt-delivery.js.map +1 -1
- package/dist/protocol-local.d.ts +16 -0
- package/dist/protocol-local.d.ts.map +1 -1
- package/dist/protocol-local.js +14 -0
- package/dist/protocol-local.js.map +1 -1
- package/dist/registry.d.ts +16 -12
- package/dist/registry.d.ts.map +1 -1
- package/dist/registry.js +39 -5
- package/dist/registry.js.map +1 -1
- package/dist/relaunch.d.ts +16 -0
- package/dist/relaunch.d.ts.map +1 -1
- package/dist/relaunch.js +42 -1
- package/dist/relaunch.js.map +1 -1
- package/dist/restore.d.ts +4 -0
- package/dist/restore.d.ts.map +1 -1
- package/dist/restore.js +9 -37
- package/dist/restore.js.map +1 -1
- package/dist/resume-launch-options.d.ts +3 -3
- package/dist/resume-launch-options.d.ts.map +1 -1
- package/dist/resume-launch-options.js +7 -4
- package/dist/resume-launch-options.js.map +1 -1
- package/dist/run.d.ts +2 -0
- package/dist/run.d.ts.map +1 -1
- package/dist/run.js +9 -4
- package/dist/run.js.map +1 -1
- package/dist/soft-refresh.d.ts.map +1 -1
- package/dist/soft-refresh.js +6 -0
- package/dist/soft-refresh.js.map +1 -1
- package/dist/tmux.d.ts +31 -5
- package/dist/tmux.d.ts.map +1 -1
- package/dist/tmux.js +96 -20
- package/dist/tmux.js.map +1 -1
- package/dist/vendor/engram-live/contracts.d.ts +619 -2
- package/dist/vendor/engram-live/contracts.js +1201 -25
- package/dist/vendor/engram-live/integration.d.ts +44 -4
- package/dist/vendor/engram-live/integration.js +65 -5
- package/dist/vendor/engram-live/pr-sync.d.ts +144 -0
- package/dist/vendor/engram-live/pr-sync.js +411 -0
- package/dist/vendor/engram-live/registration.d.ts +2 -2
- package/dist/vendor/engram-live/registration.js +2 -4
- package/dist/vendor/engram-live/retention.d.ts +56 -0
- package/dist/vendor/engram-live/retention.js +179 -0
- package/package.json +5 -5
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"live-disclosure.d.ts","sourceRoot":"","sources":["../../src/gateway-host/live-disclosure.ts"],"names":[],"mappings":"AAMA,OAAO,EACG,KAAK,iBAAiB,EAAE,KAAK,kBAAkB,EACvD,KAAK,2BAA2B,EAA6B,KAAK,OAAO,EAC1E,MAAM,gBAAgB,CAAC;AAExB,eAAO,MAAM,mBAAmB,gGAAiG,CAAC;AAClI,MAAM,MAAM,iBAAiB,GAAG,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAC;AACnE,MAAM,WAAW,eAAe;IAC9B,mFAAmF;IACnF,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAC;CACjD;AACD,MAAM,WAAW,sBAAsB;IACrC,gFAAgF;IAChF,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,kFAAkF;IAClF,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AACD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,QAAQ,GAAG,cAAc,GAAG,QAAQ,CAAC;IAChE,6EAA6E;IAC7E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,iBAAiB,CAAC;CACrC;AACD,MAAM,WAAW,qBAAqB;IACpC,6FAA6F;IAC7F,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,gFAAgF;IAChF,IAAI,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACtD;AACD;;GAEG;AACH,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,aAAa,EAAE,2BAA2B,CAAC;IACpD,QAAQ,CAAC,mBAAmB,EAAE,2BAA2B,CAAC;IAC1D,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,SAAS,OAAO,EAAE,CAAC;QAAC,kBAAkB,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAC1G,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AACD,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,QAAQ,EAAE,8BAA8B,CAAC;IAClD,mFAAmF;IACnF,IAAI,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,OAAO,IAAI,IAAI,CAAC;CACjB;AACD,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,qFAAqF;IACrF,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,IAAI,CAAC;IACvD,QAAQ,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,SAAS,MAAM,EAAE,KAAK,OAAO,CAAC,SAAS,sBAAsB,EAAE,CAAC,CAAC;IAC9F,6EAA6E;IAC7E,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;QACvC,SAAS,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;KACzE,CAAC,KAAK,OAAO,CAAC;IACf,mFAAmF;IACnF,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,QAAQ,CAAC;QACtC,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,QAAQ,EAAE,sBAAsB,GAAG,OAAO,CAAC;KACpE,CAAC,GAAG,SAAS,CAAC;IACf,QAAQ,CAAC,SAAS,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,qBAAqB,GAAG,SAAS,CAAC;IAC9E;;;;;;;OAOG;IACH,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;QACpD,OAAO,EAAE,qBAAqB,CAAC;QAAC,iBAAiB,EAAE,OAAO,CAAC;QAC3D,QAAQ,EAAE,SAAS,sBAAsB,EAAE,CAAC;QAAC,SAAS,EAAE,qBAAqB,CAAC;KAC/E,CAAC,KAAK,2BAA2B,GAAG,OAAO,CAAC;CAC9C;AACD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,iFAAiF;IACjF,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AACD,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;CACzC;AACD,MAAM,WAAW,uBAAuB;IACtC,KAAK,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,GAAG,QAAQ,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7G,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IAC/E,IAAI,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,OAAO,GAAG,QAAQ,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC,CAAC;IAChF,0EAA0E;IAC1E,iBAAiB,IAAI,OAAO,CAAC;CAC9B;AA2BD,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,qBAAqB,GAAG,uBAAuB,CAiMrG"}
|
|
@@ -0,0 +1,347 @@
|
|
|
1
|
+
/** Δ-L7a: host-owned disclosure grants, independent of collection/read access.
|
|
2
|
+
* Evidence comes only from a host port (including cache provenance), never
|
|
3
|
+
* directly from an MCP caller. No content or old snapshot is retained; grants
|
|
4
|
+
* and their issuing proofs live only in memory and never resume after restart.
|
|
5
|
+
*/
|
|
6
|
+
import { randomUUID } from "node:crypto";
|
|
7
|
+
import { refuse, } from "./live-auth.js";
|
|
8
|
+
export const DISCLOSURE_SURFACES = ["prompt", "tool", "mcp", "summary", "symbol", "local-commit", "citation", "context"];
|
|
9
|
+
const validPath = (path) => typeof path === "string" && path.length > 0
|
|
10
|
+
&& !/[\\\0:*?\[\]{}]/.test(path) && path.split("/").every((p) => p !== "" && p !== "." && p !== "..");
|
|
11
|
+
const validProvider = (v) => typeof v === "string" && /^[a-z0-9][a-z0-9._:/-]{0,199}$/.test(v);
|
|
12
|
+
// Superset of engram e417c33c content-policy.ts L4b-2. Keep every normative
|
|
13
|
+
// secret rule, basename/prefix/suffix/segment, and secret-bearing path bytes.
|
|
14
|
+
const protectedPath = (p) => containsKnownSecret(p) || p.split("/").some((part) => /^\.env/i.test(part) || /^\.ssh$/i.test(part) || /^(id_(rsa|dsa|ecdsa|ed25519)|credentials)(\.|$)/i.test(part)
|
|
15
|
+
|| /^(secret|secrets|secrets\.json|service-account\.json)$/i.test(part) || /\.(pem|key|p12|pfx)$/i.test(part));
|
|
16
|
+
// Defence in depth; the current L4b policy remains mandatory. This cannot
|
|
17
|
+
// establish the absence of unknown secrets, nor override withheld provenance.
|
|
18
|
+
const containsKnownSecret = (text) => /-----BEGIN [A-Z0-9 ]*PRIVATE KEY-----|gh[pousr]_[A-Za-z0-9]{20,}|github_pat_[A-Za-z0-9_]{20,}|AKIA[A-Z0-9]{16}|sk-[A-Za-z0-9_-]{20,}/.test(text)
|
|
19
|
+
|| /(password|passwd|pwd|secret|api[_-]?key)\s*[:=]\s*\S+/i.test(text)
|
|
20
|
+
|| /:\/\/[^/\s:]+:[^/\s@]+@/.test(text);
|
|
21
|
+
const copy = (value) => JSON.parse(JSON.stringify(value));
|
|
22
|
+
export function createLiveDisclosureAuthority(options) {
|
|
23
|
+
const readNow = options.now ?? Date.now;
|
|
24
|
+
const now = () => { try {
|
|
25
|
+
return readNow();
|
|
26
|
+
}
|
|
27
|
+
catch {
|
|
28
|
+
return NaN;
|
|
29
|
+
} };
|
|
30
|
+
const grants = new Map();
|
|
31
|
+
const record = (action, grantId, reason, snapshotTime) => {
|
|
32
|
+
try {
|
|
33
|
+
if (!options.audit)
|
|
34
|
+
return false;
|
|
35
|
+
const at = snapshotTime ?? now();
|
|
36
|
+
if (!Number.isSafeInteger(at))
|
|
37
|
+
return false;
|
|
38
|
+
const receipt = options.audit(Object.freeze({ eventId: randomUUID(), at, action,
|
|
39
|
+
...(grantId === undefined ? {} : { grantId }), ...(reason === undefined ? {} : { reason }) }));
|
|
40
|
+
if (receipt !== undefined) {
|
|
41
|
+
// A void-typed async callback is legal TypeScript but cannot attest a
|
|
42
|
+
// durable synchronous append. Contain its rejection as well.
|
|
43
|
+
if (receipt instanceof Promise)
|
|
44
|
+
void receipt.catch(() => { });
|
|
45
|
+
return false;
|
|
46
|
+
}
|
|
47
|
+
return true;
|
|
48
|
+
}
|
|
49
|
+
catch {
|
|
50
|
+
return false;
|
|
51
|
+
}
|
|
52
|
+
};
|
|
53
|
+
const deny = (reason, requestedId) => record("refuse", requestedId !== undefined && grants.has(requestedId) ? requestedId : undefined, reason)
|
|
54
|
+
? refuse(reason) : refuse("audit-unavailable");
|
|
55
|
+
const authorize = (capability, operation, repositoryId) => {
|
|
56
|
+
try {
|
|
57
|
+
return options.auth.authorize(capability, operation, repositoryId);
|
|
58
|
+
}
|
|
59
|
+
catch {
|
|
60
|
+
return refuse("authority-unavailable");
|
|
61
|
+
}
|
|
62
|
+
};
|
|
63
|
+
const check = (r) => {
|
|
64
|
+
const auth = authorize(r.capability, "emit", r.repositoryId);
|
|
65
|
+
if (!auth.ok)
|
|
66
|
+
return auth;
|
|
67
|
+
const g = r.grantId === undefined ? undefined : grants.get(r.grantId);
|
|
68
|
+
if (!g)
|
|
69
|
+
return refuse("grant-required");
|
|
70
|
+
const issuer = authorize(g.issuingCapability, "grant", r.repositoryId);
|
|
71
|
+
if (!issuer.ok)
|
|
72
|
+
return issuer;
|
|
73
|
+
if (g.claims.repositoryId !== r.repositoryId || g.claims.principal !== auth.claims.principal
|
|
74
|
+
|| g.claims.hostId !== auth.claims.hostId || g.claims.tenant !== auth.claims.tenant
|
|
75
|
+
|| g.claims.declarationId !== auth.claims.declarationId || g.claims.declarationRevision !== auth.claims.declarationRevision
|
|
76
|
+
|| JSON.stringify(g.claims.authorizedRoots) !== JSON.stringify(auth.claims.authorizedRoots))
|
|
77
|
+
return refuse("scope-mismatch");
|
|
78
|
+
if (g.claims.policyVersion !== auth.claims.policyVersion)
|
|
79
|
+
return refuse("policy-changed");
|
|
80
|
+
if (g.revoked)
|
|
81
|
+
return refuse("grant-revoked");
|
|
82
|
+
const time = now();
|
|
83
|
+
if (!Number.isSafeInteger(time))
|
|
84
|
+
return refuse("authority-unavailable");
|
|
85
|
+
if (time >= g.expiresAt || time < g.startsAt)
|
|
86
|
+
return refuse("grant-expired");
|
|
87
|
+
if (g.providerId !== r.providerId)
|
|
88
|
+
return refuse("provider-mismatch");
|
|
89
|
+
try {
|
|
90
|
+
if (options.readAccess?.(Object.freeze({ principal: auth.claims.principal, repositoryId: r.repositoryId,
|
|
91
|
+
evidenceIds: Object.freeze([...r.evidenceIds]) })) !== true)
|
|
92
|
+
return refuse("read-denied");
|
|
93
|
+
}
|
|
94
|
+
catch {
|
|
95
|
+
return refuse("read-denied");
|
|
96
|
+
}
|
|
97
|
+
const lateIssuer = authorize(g.issuingCapability, "grant", r.repositoryId);
|
|
98
|
+
if (!lateIssuer.ok)
|
|
99
|
+
return lateIssuer;
|
|
100
|
+
const latest = authorize(r.capability, "emit", r.repositoryId);
|
|
101
|
+
if (!latest.ok)
|
|
102
|
+
return latest;
|
|
103
|
+
if (g.revoked)
|
|
104
|
+
return refuse("grant-revoked");
|
|
105
|
+
const finalTime = now();
|
|
106
|
+
if (!Number.isSafeInteger(finalTime))
|
|
107
|
+
return refuse("authority-unavailable");
|
|
108
|
+
if (finalTime >= g.expiresAt || finalTime < g.startsAt)
|
|
109
|
+
return refuse("grant-expired");
|
|
110
|
+
return { ok: true, grant: g, claims: latest.claims, stateRevision: latest.state.stateRevision };
|
|
111
|
+
};
|
|
112
|
+
return {
|
|
113
|
+
grant(input) {
|
|
114
|
+
let r;
|
|
115
|
+
try {
|
|
116
|
+
r = copy(input);
|
|
117
|
+
}
|
|
118
|
+
catch {
|
|
119
|
+
return deny("invalid-request");
|
|
120
|
+
}
|
|
121
|
+
if (!r || !validProvider(r.providerId) || !Number.isSafeInteger(r.expiresAt)
|
|
122
|
+
|| !r.scope || !Array.isArray(r.scope.paths) || r.scope.paths.length === 0 || !r.scope.paths.every(validPath)
|
|
123
|
+
|| !Array.isArray(r.scope.surfaces) || r.scope.surfaces.length === 0
|
|
124
|
+
|| !r.scope.surfaces.every((s) => DISCLOSURE_SURFACES.includes(s)))
|
|
125
|
+
return deny("invalid-request");
|
|
126
|
+
const auth = authorize(r.capability, "grant", r.repositoryId);
|
|
127
|
+
if (!auth.ok)
|
|
128
|
+
return deny(auth.reason);
|
|
129
|
+
const time = now();
|
|
130
|
+
if (!Number.isSafeInteger(time) || r.expiresAt <= time || r.expiresAt > auth.claims.expiresAt)
|
|
131
|
+
return deny("invalid-request");
|
|
132
|
+
const id = randomUUID();
|
|
133
|
+
const g = { issuingCapability: r.capability, claims: copy(auth.claims), providerId: r.providerId,
|
|
134
|
+
startsAt: time, expiresAt: r.expiresAt,
|
|
135
|
+
scope: { paths: Object.freeze([...r.scope.paths]), surfaces: Object.freeze([...r.scope.surfaces]) }, revoked: false };
|
|
136
|
+
grants.set(id, g);
|
|
137
|
+
if (!record("grant", id)) {
|
|
138
|
+
grants.delete(id);
|
|
139
|
+
return refuse("audit-unavailable");
|
|
140
|
+
}
|
|
141
|
+
return Object.freeze({ ok: true, grantId: id, expiresAt: g.expiresAt });
|
|
142
|
+
},
|
|
143
|
+
revoke(capability, id) {
|
|
144
|
+
const auth = authorize(capability, "revoke");
|
|
145
|
+
if (!auth.ok)
|
|
146
|
+
return deny(auth.reason, id);
|
|
147
|
+
const g = grants.get(id);
|
|
148
|
+
if (!g)
|
|
149
|
+
return deny("grant-required");
|
|
150
|
+
if (auth.claims.repositoryId !== g.claims.repositoryId || auth.claims.principal !== g.claims.principal || auth.claims.hostId !== g.claims.hostId
|
|
151
|
+
|| auth.claims.tenant !== g.claims.tenant)
|
|
152
|
+
return deny("scope-mismatch", id);
|
|
153
|
+
// Revocation takes effect even if its audit sink has failed.
|
|
154
|
+
g.revoked = true;
|
|
155
|
+
return record("revoke", id) ? Object.freeze({ ok: true }) : refuse("audit-unavailable");
|
|
156
|
+
},
|
|
157
|
+
async emit(input) {
|
|
158
|
+
let r;
|
|
159
|
+
try {
|
|
160
|
+
r = copy(input);
|
|
161
|
+
}
|
|
162
|
+
catch {
|
|
163
|
+
return deny("invalid-request");
|
|
164
|
+
}
|
|
165
|
+
const reject = (reason) => deny(reason, r?.grantId);
|
|
166
|
+
if (!r || !Array.isArray(r.evidenceIds) || r.evidenceIds.length === 0
|
|
167
|
+
|| r.evidenceIds.some((id) => typeof id !== "string" || id.length === 0))
|
|
168
|
+
return reject("invalid-request");
|
|
169
|
+
Object.freeze(r.evidenceIds);
|
|
170
|
+
Object.freeze(r);
|
|
171
|
+
const permitted = check(r);
|
|
172
|
+
if (!permitted.ok)
|
|
173
|
+
return reject(permitted.reason);
|
|
174
|
+
let evidence;
|
|
175
|
+
try {
|
|
176
|
+
evidence = copy(await options.loadEvidence(Object.freeze([...r.evidenceIds])));
|
|
177
|
+
}
|
|
178
|
+
catch {
|
|
179
|
+
return reject("evidence-unavailable");
|
|
180
|
+
}
|
|
181
|
+
// Freeze evidence before any policy/transport callback can mutate it.
|
|
182
|
+
try {
|
|
183
|
+
if (!Array.isArray(evidence) || evidence.length === 0)
|
|
184
|
+
return reject("evidence-unavailable");
|
|
185
|
+
for (const e of evidence) {
|
|
186
|
+
if (!e || !r.evidenceIds.includes(e.evidenceId) || typeof e.text !== "string" || typeof e.excluded !== "boolean"
|
|
187
|
+
|| !Array.isArray(e.originPaths) || e.originPaths.length === 0 || !e.originPaths.every(validPath))
|
|
188
|
+
return reject("evidence-unavailable");
|
|
189
|
+
Object.freeze(e.originPaths);
|
|
190
|
+
Object.freeze(e);
|
|
191
|
+
}
|
|
192
|
+
if (r.evidenceIds.some(id => !evidence.some(e => e.evidenceId === id)))
|
|
193
|
+
return reject("evidence-unavailable");
|
|
194
|
+
Object.freeze(evidence);
|
|
195
|
+
}
|
|
196
|
+
catch {
|
|
197
|
+
return reject("evidence-unavailable");
|
|
198
|
+
}
|
|
199
|
+
const screen = () => {
|
|
200
|
+
const current = check(r);
|
|
201
|
+
if (!current.ok)
|
|
202
|
+
return current;
|
|
203
|
+
const g = current.grant;
|
|
204
|
+
const policy = options.contentPolicy?.();
|
|
205
|
+
if (!policy || typeof policy.allows !== "function")
|
|
206
|
+
return refuse("policy-unavailable");
|
|
207
|
+
if (policy.version !== g.claims.policyVersion)
|
|
208
|
+
return refuse("policy-changed");
|
|
209
|
+
for (const e of evidence) {
|
|
210
|
+
if (e.repositoryId !== r.repositoryId || e.declarationId !== g.claims.declarationId
|
|
211
|
+
|| e.declarationRevision !== g.claims.declarationRevision)
|
|
212
|
+
return refuse("scope-mismatch");
|
|
213
|
+
if (e.policyVersion !== g.claims.policyVersion)
|
|
214
|
+
return refuse("policy-changed");
|
|
215
|
+
if (e.stateRevision !== current.stateRevision)
|
|
216
|
+
return refuse("stale-evidence");
|
|
217
|
+
if (!g.scope.surfaces.includes(e.surface) || e.originPaths.some((p) => !g.scope.paths.includes(p)))
|
|
218
|
+
return refuse("out-of-scope");
|
|
219
|
+
if (e.excluded || e.originPaths.some(protectedPath) || containsKnownSecret(e.text) || policy.allows(e) !== true)
|
|
220
|
+
return refuse("secret-excluded");
|
|
221
|
+
}
|
|
222
|
+
const text = evidence.map((e) => e.text).join("");
|
|
223
|
+
if (containsKnownSecret(text) || policy.allows(Object.freeze({ ...evidence[0], text,
|
|
224
|
+
originPaths: Object.freeze([...new Set(evidence.flatMap(e => e.originPaths))]) })) !== true)
|
|
225
|
+
return refuse("secret-excluded");
|
|
226
|
+
return undefined;
|
|
227
|
+
};
|
|
228
|
+
try {
|
|
229
|
+
const refusal = screen();
|
|
230
|
+
if (refusal)
|
|
231
|
+
return reject(refusal.reason);
|
|
232
|
+
}
|
|
233
|
+
catch {
|
|
234
|
+
return reject("policy-unavailable");
|
|
235
|
+
}
|
|
236
|
+
let transport;
|
|
237
|
+
try {
|
|
238
|
+
transport = options.transport(r.providerId);
|
|
239
|
+
if (!transport || transport.providerId !== r.providerId || typeof transport.send !== "function")
|
|
240
|
+
return reject("provider-mismatch");
|
|
241
|
+
}
|
|
242
|
+
catch {
|
|
243
|
+
return reject("transport-failed");
|
|
244
|
+
}
|
|
245
|
+
// Reordering mutable callbacks cannot make the decision atomic.
|
|
246
|
+
// Require a host snapshot lease; final validation uses data only.
|
|
247
|
+
if (!options.acquireEmissionSnapshot)
|
|
248
|
+
return reject("authority-unavailable");
|
|
249
|
+
let lease;
|
|
250
|
+
try {
|
|
251
|
+
const acquired = options.acquireEmissionSnapshot(Object.freeze({ request: r,
|
|
252
|
+
issuingCapability: permitted.grant.issuingCapability, evidence, transport }));
|
|
253
|
+
if ("ok" in acquired)
|
|
254
|
+
return reject(acquired.reason);
|
|
255
|
+
lease = acquired;
|
|
256
|
+
}
|
|
257
|
+
catch {
|
|
258
|
+
return reject("authority-unavailable");
|
|
259
|
+
}
|
|
260
|
+
let pending;
|
|
261
|
+
let releaseFailed = false;
|
|
262
|
+
try {
|
|
263
|
+
// Resolve accessors before validation, while the host fence is held.
|
|
264
|
+
const send = lease.send.bind(lease);
|
|
265
|
+
const snapshot = copy(lease.snapshot);
|
|
266
|
+
const auth = snapshot.authorization;
|
|
267
|
+
const issuer = snapshot.issuerAuthorization;
|
|
268
|
+
if (!auth.ok)
|
|
269
|
+
return reject(auth.reason);
|
|
270
|
+
if (!issuer.ok)
|
|
271
|
+
return reject(issuer.reason);
|
|
272
|
+
const g = permitted.grant;
|
|
273
|
+
if (auth.claims.id !== permitted.claims.id || issuer.claims.id !== g.claims.id)
|
|
274
|
+
return reject("scope-mismatch");
|
|
275
|
+
// Bind both proofs and their states to this grant. No live authority,
|
|
276
|
+
// read, clock, policy or route callbacks run during this validation.
|
|
277
|
+
for (const verified of [auth, issuer]) {
|
|
278
|
+
for (const key of ["principal", "hostId", "tenant", "repositoryId", "declarationId", "declarationRevision"]) {
|
|
279
|
+
if (verified.claims[key] !== g.claims[key] || verified.state[key] !== g.claims[key])
|
|
280
|
+
return reject("scope-mismatch");
|
|
281
|
+
}
|
|
282
|
+
if (JSON.stringify(verified.claims.authorizedRoots) !== JSON.stringify(g.claims.authorizedRoots)
|
|
283
|
+
|| JSON.stringify(verified.state.authorizedRoots) !== JSON.stringify(g.claims.authorizedRoots))
|
|
284
|
+
return reject("scope-mismatch");
|
|
285
|
+
if (verified.claims.policyVersion !== g.claims.policyVersion || verified.state.policyVersion !== g.claims.policyVersion)
|
|
286
|
+
return reject("policy-changed");
|
|
287
|
+
if (snapshot.at < verified.claims.issuedAt || snapshot.at >= verified.claims.expiresAt)
|
|
288
|
+
return reject("capability-expired");
|
|
289
|
+
}
|
|
290
|
+
if (g.revoked)
|
|
291
|
+
return reject("grant-revoked");
|
|
292
|
+
if (!Number.isSafeInteger(snapshot.at))
|
|
293
|
+
return reject("authority-unavailable");
|
|
294
|
+
if (snapshot.at < g.startsAt || snapshot.at >= g.expiresAt)
|
|
295
|
+
return reject("grant-expired");
|
|
296
|
+
if (snapshot.readAllowed !== true)
|
|
297
|
+
return reject("read-denied");
|
|
298
|
+
if (snapshot.providerId !== r.providerId)
|
|
299
|
+
return reject("provider-mismatch");
|
|
300
|
+
if (evidence.some(e => e.stateRevision !== auth.state.stateRevision || e.stateRevision !== issuer.state.stateRevision))
|
|
301
|
+
return reject("stale-evidence");
|
|
302
|
+
const policy = snapshot.policy;
|
|
303
|
+
if (!policy)
|
|
304
|
+
return reject("policy-unavailable");
|
|
305
|
+
if (policy.version !== g.claims.policyVersion)
|
|
306
|
+
return reject("policy-changed");
|
|
307
|
+
if (policy.allowed.length !== evidence.length || policy.allowed.some(allowed => allowed !== true)
|
|
308
|
+
|| policy.compositionAllowed !== true)
|
|
309
|
+
return reject("secret-excluded");
|
|
310
|
+
// All route/policy/state checks precede the receipt. The host fence
|
|
311
|
+
// covers audit; a reentrant revocation of our local grant still wins.
|
|
312
|
+
if (!record("emit-attempt", r.grantId, undefined, snapshot.at))
|
|
313
|
+
return refuse("audit-unavailable");
|
|
314
|
+
if (g.revoked)
|
|
315
|
+
return reject("grant-revoked");
|
|
316
|
+
try {
|
|
317
|
+
pending = send(Object.freeze(evidence.map(e => e.text)));
|
|
318
|
+
}
|
|
319
|
+
catch {
|
|
320
|
+
return reject("transport-failed");
|
|
321
|
+
}
|
|
322
|
+
}
|
|
323
|
+
catch {
|
|
324
|
+
return reject("authority-unavailable");
|
|
325
|
+
}
|
|
326
|
+
finally {
|
|
327
|
+
try {
|
|
328
|
+
lease.release();
|
|
329
|
+
}
|
|
330
|
+
catch {
|
|
331
|
+
releaseFailed = true;
|
|
332
|
+
}
|
|
333
|
+
}
|
|
334
|
+
try {
|
|
335
|
+
await pending;
|
|
336
|
+
}
|
|
337
|
+
catch {
|
|
338
|
+
return reject("transport-failed");
|
|
339
|
+
}
|
|
340
|
+
if (releaseFailed)
|
|
341
|
+
return reject("authority-unavailable");
|
|
342
|
+
return Object.freeze({ ok: true });
|
|
343
|
+
},
|
|
344
|
+
policyUnavailable: () => deny("policy-unavailable"),
|
|
345
|
+
};
|
|
346
|
+
}
|
|
347
|
+
//# sourceMappingURL=live-disclosure.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"live-disclosure.js","sourceRoot":"","sources":["../../src/gateway-host/live-disclosure.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,MAAM,GAEP,MAAM,gBAAgB,CAAC;AAExB,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,CAAU,CAAC;AAkHlI,MAAM,SAAS,GAAG,CAAC,IAAa,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;OAC3F,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;AACxG,MAAM,aAAa,GAAG,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,gCAAgC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACrH,4EAA4E;AAC5E,8EAA8E;AAC9E,MAAM,aAAa,GAAG,CAAC,CAAS,EAAW,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACjG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,kDAAkD,CAAC,IAAI,CAAC,IAAI,CAAC;OAC3G,yDAAyD,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACjH,0EAA0E;AAC1E,8EAA8E;AAC9E,MAAM,mBAAmB,GAAG,CAAC,IAAY,EAAW,EAAE,CACpD,sIAAsI,CAAC,IAAI,CAAC,IAAI,CAAC;OAC9I,wDAAwD,CAAC,IAAI,CAAC,IAAI,CAAC;OACnE,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1C,MAAM,IAAI,GAAG,CAAI,KAAQ,EAAK,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAM,CAAC;AAExE,MAAM,UAAU,6BAA6B,CAAC,OAA8B;IAC1E,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACxC,MAAM,GAAG,GAAG,GAAW,EAAE,GAAG,IAAI,CAAC;QAAC,OAAO,OAAO,EAAE,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,GAAG,CAAC;IAAC,CAAC,CAAC,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAG,IAAI,GAAG,EAAiB,CAAC;IACxC,MAAM,MAAM,GAAG,CAAC,MAAsC,EAAE,OAAgB,EAAE,MAA0B,EAAE,YAAqB,EAAW,EAAE;QACtI,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,KAAK;gBAAE,OAAO,KAAK,CAAC;YACjC,MAAM,EAAE,GAAG,YAAY,IAAI,GAAG,EAAE,CAAC;YAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC9E,MAAM,OAAO,GAAY,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,MAAM;gBACtF,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YACjG,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,sEAAsE;gBACtE,6DAA6D;gBAC7D,IAAI,OAAO,YAAY,OAAO;oBAAE,KAAK,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBAC7D,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IAC3B,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,MAAyB,EAAE,WAAoB,EAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,EACxF,WAAW,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC;QACvF,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,CAAC,UAAmB,EAAE,SAAsC,EAAE,YAAqB,EAA+B,EAAE;QACpI,IAAI,CAAC;YAAC,OAAO,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;QAAC,CAAC;QAC3E,MAAM,CAAC;YAAC,OAAO,MAAM,CAAC,uBAAuB,CAAC,CAAC;QAAC,CAAC;IACnD,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,CAAwB,EAA6F,EAAE;QACpI,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;QAC7D,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC1B,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACtE,IAAI,CAAC,CAAC;YAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,iBAAiB,EAAE,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;QACvE,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,CAAC,MAAM,CAAC,YAAY,KAAK,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,MAAM,CAAC,SAAS;eACvF,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM;eAChF,CAAC,CAAC,MAAM,CAAC,aAAa,KAAK,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC,MAAM,CAAC,mBAAmB,KAAK,IAAI,CAAC,MAAM,CAAC,mBAAmB;eACxH,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;YAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC/H,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,KAAK,IAAI,CAAC,MAAM,CAAC,aAAa;YAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC1F,IAAI,CAAC,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC;QAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC;YAAE,OAAO,MAAM,CAAC,uBAAuB,CAAC,CAAC;QAC5F,IAAI,IAAI,IAAI,CAAC,CAAC,SAAS,IAAI,IAAI,GAAG,CAAC,CAAC,QAAQ;YAAE,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC;QAC7E,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU;YAAE,OAAO,MAAM,CAAC,mBAAmB,CAAC,CAAC;QACtE,IAAI,CAAC;YACH,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY;gBACrG,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI;gBAAE,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC;QAC9F,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC;QAAC,CAAC;QACzC,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,iBAAiB,EAAE,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;QAC3E,IAAI,CAAC,UAAU,CAAC,EAAE;YAAE,OAAO,UAAU,CAAC;QACtC,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;QAC/D,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;QACxB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC;YAAE,OAAO,MAAM,CAAC,uBAAuB,CAAC,CAAC;QAC7E,IAAI,SAAS,IAAI,CAAC,CAAC,SAAS,IAAI,SAAS,GAAG,CAAC,CAAC,QAAQ;YAAE,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC;QACvF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;IAClG,CAAC,CAAC;IACF,OAAO;QACL,KAAK,CAAC,KAAK;YACT,IAAI,CAAyB,CAAC;YAC9B,IAAI,CAAC;gBAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAAC,CAAC;YAClE,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;mBACvE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;mBAC1G,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;mBACjE,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;YACrG,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;YAC9D,IAAI,CAAC,IAAI,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvC,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC;YACnB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,IAAI,IAAI,IAAI,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS;gBAAE,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAC9H,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;YACxB,MAAM,CAAC,GAAU,EAAE,iBAAiB,EAAE,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU;gBACrG,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtC,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YACxH,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;gBAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAAC,OAAO,MAAM,CAAC,mBAAmB,CAAC,CAAC;YAAC,CAAC;YACpF,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,CAAC,UAAU,EAAE,EAAE;YACnB,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YAC7C,IAAI,CAAC,IAAI,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC3C,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAAC,IAAI,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAChE,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,KAAK,CAAC,CAAC,MAAM,CAAC,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,KAAK,CAAC,CAAC,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM;mBAC3I,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;YAC/E,6DAA6D;YAC7D,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC;YACjB,OAAO,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAC1F,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,KAAK;YACd,IAAI,CAAwB,CAAC;YAC7B,IAAI,CAAC;gBAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAAC,CAAC;YAClE,MAAM,MAAM,GAAG,CAAC,MAAyB,EAAW,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;YAChF,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;mBAChE,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC;gBAAE,OAAO,MAAM,CAAC,iBAAiB,CAAC,CAAC;YAC7G,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC/C,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAAC,IAAI,CAAC,SAAS,CAAC,EAAE;gBAAE,OAAO,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC/E,IAAI,QAA2C,CAAC;YAChD,IAAI,CAAC;gBAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;YACvF,MAAM,CAAC;gBAAC,OAAO,MAAM,CAAC,sBAAsB,CAAC,CAAC;YAAC,CAAC;YAChD,sEAAsE;YACtE,IAAI,CAAC;gBACH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,MAAM,CAAC,sBAAsB,CAAC,CAAC;gBAC7F,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;oBACzB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,SAAS;2BAC3G,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC;wBAAE,OAAO,MAAM,CAAC,sBAAsB,CAAC,CAAC;oBAC3I,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;oBAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBACjD,CAAC;gBACD,IAAI,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC;oBAAE,OAAO,MAAM,CAAC,sBAAsB,CAAC,CAAC;gBAC9G,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,MAAM,CAAC,sBAAsB,CAAC,CAAC;YAAC,CAAC;YAClD,MAAM,MAAM,GAAG,GAAwB,EAAE;gBACvC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBAAC,IAAI,CAAC,OAAO,CAAC,EAAE;oBAAE,OAAO,OAAO,CAAC;gBAC1D,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC;gBACxB,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;gBACzC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,UAAU;oBAAE,OAAO,MAAM,CAAC,oBAAoB,CAAC,CAAC;gBACxF,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa;oBAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;gBAC/E,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;oBACzB,IAAI,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,aAAa,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa;2BAC9E,CAAC,CAAC,mBAAmB,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB;wBAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;oBAC7F,IAAI,CAAC,CAAC,aAAa,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa;wBAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;oBAChF,IAAI,CAAC,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa;wBAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;oBAC/E,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;wBAAE,OAAO,MAAM,CAAC,cAAc,CAAC,CAAC;oBAC1I,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;wBAAE,OAAO,MAAM,CAAC,iBAAiB,CAAC,CAAC;gBACpJ,CAAC;gBACD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAClD,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAE,EAAE,IAAI;oBAClF,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI;oBAAE,OAAO,MAAM,CAAC,iBAAiB,CAAC,CAAC;gBAChI,OAAO,SAAS,CAAC;YACnB,CAAC,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC;gBAAC,IAAI,OAAO;oBAAE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACvE,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,MAAM,CAAC,oBAAoB,CAAC,CAAC;YAAC,CAAC;YAChD,IAAI,SAA4C,CAAC;YACjD,IAAI,CAAC;gBACH,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;gBAC5C,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,IAAI,OAAO,SAAS,CAAC,IAAI,KAAK,UAAU;oBAAE,OAAO,MAAM,CAAC,mBAAmB,CAAC,CAAC;YACtI,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAAC,CAAC;YAC9C,gEAAgE;YAChE,kEAAkE;YAClE,IAAI,CAAC,OAAO,CAAC,uBAAuB;gBAAE,OAAO,MAAM,CAAC,uBAAuB,CAAC,CAAC;YAC7E,IAAI,KAAkC,CAAC;YACvC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,OAAO,CAAC,uBAAuB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC;oBACzE,iBAAiB,EAAE,SAAS,CAAC,KAAK,CAAC,iBAAiB,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;gBAChF,IAAI,IAAI,IAAI,QAAQ;oBAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACrD,KAAK,GAAG,QAAQ,CAAC;YACnB,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,MAAM,CAAC,uBAAuB,CAAC,CAAC;YAAC,CAAC;YACnD,IAAI,OAA6B,CAAC;YAClC,IAAI,aAAa,GAAG,KAAK,CAAC;YAC1B,IAAI,CAAC;gBACH,qEAAqE;gBACrE,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACtC,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC;gBACpC,MAAM,MAAM,GAAG,QAAQ,CAAC,mBAAmB,CAAC;gBAC5C,IAAI,CAAC,IAAI,CAAC,EAAE;oBAAE,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACzC,IAAI,CAAC,MAAM,CAAC,EAAE;oBAAE,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC7C,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC;gBAC1B,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE;oBAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;gBAChH,sEAAsE;gBACtE,qEAAqE;gBACrE,KAAK,MAAM,QAAQ,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;oBACtC,KAAK,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,eAAe,EAAE,qBAAqB,CAAU,EAAE,CAAC;wBACrH,IAAI,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;4BAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;oBACvH,CAAC;oBACD,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC;2BAC3F,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC;wBAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;oBAClI,IAAI,QAAQ,CAAC,MAAM,CAAC,aAAa,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,IAAI,QAAQ,CAAC,KAAK,CAAC,aAAa,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa;wBAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;oBACzJ,IAAI,QAAQ,CAAC,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,IAAI,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,MAAM,CAAC,SAAS;wBAAE,OAAO,MAAM,CAAC,oBAAoB,CAAC,CAAC;gBAC9H,CAAC;gBACD,IAAI,CAAC,CAAC,OAAO;oBAAE,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC;gBAC9C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAAE,OAAO,MAAM,CAAC,uBAAuB,CAAC,CAAC;gBAC/E,IAAI,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC,SAAS;oBAAE,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC;gBAC3F,IAAI,QAAQ,CAAC,WAAW,KAAK,IAAI;oBAAE,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC;gBAChE,IAAI,QAAQ,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU;oBAAE,OAAO,MAAM,CAAC,mBAAmB,CAAC,CAAC;gBAC7E,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,KAAK,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC,aAAa,KAAK,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC;oBAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;gBACxJ,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;gBAC/B,IAAI,CAAC,MAAM;oBAAE,OAAO,MAAM,CAAC,oBAAoB,CAAC,CAAC;gBACjD,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa;oBAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;gBAC/E,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,KAAK,IAAI,CAAC;uBAC5F,MAAM,CAAC,kBAAkB,KAAK,IAAI;oBAAE,OAAO,MAAM,CAAC,iBAAiB,CAAC,CAAC;gBAC1E,oEAAoE;gBACpE,sEAAsE;gBACtE,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC;oBAAE,OAAO,MAAM,CAAC,mBAAmB,CAAC,CAAC;gBACnG,IAAI,CAAC,CAAC,OAAO;oBAAE,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC;gBAC9C,IAAI,CAAC;oBAAC,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAC,CAAC;gBACjE,MAAM,CAAC;oBAAC,OAAO,MAAM,CAAC,kBAAkB,CAAC,CAAC;gBAAC,CAAC;YAC9C,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,MAAM,CAAC,uBAAuB,CAAC,CAAC;YAAC,CAAC;oBAC3C,CAAC;gBAAC,IAAI,CAAC;oBAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,aAAa,GAAG,IAAI,CAAC;gBAAC,CAAC;YAAC,CAAC;YACpE,IAAI,CAAC;gBAAC,MAAM,OAAO,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAAC,CAAC;YACnE,IAAI,aAAa;gBAAE,OAAO,MAAM,CAAC,uBAAuB,CAAC,CAAC;YAC1D,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,CAAC;QACD,iBAAiB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC;KACpD,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,11 @@
|
|
|
1
|
+
import type { GithubPrTransportPort } from "../vendor/engram-live/pr-sync.js";
|
|
2
|
+
export interface LiveGithubOptions {
|
|
3
|
+
readonly ghPath: string;
|
|
4
|
+
readonly hostDirectory: string;
|
|
5
|
+
readonly timeoutMs?: number;
|
|
6
|
+
readonly maxConcurrent?: number;
|
|
7
|
+
readonly now?: () => number;
|
|
8
|
+
}
|
|
9
|
+
/** The caller owns scheduling/durable backoff; a single call never sleeps. */
|
|
10
|
+
export declare function createLiveGithubTransport(options: LiveGithubOptions): GithubPrTransportPort;
|
|
11
|
+
//# sourceMappingURL=live-github.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"live-github.d.ts","sourceRoot":"","sources":["../../src/gateway-host/live-github.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EAAE,qBAAqB,EAAoC,MAAM,kCAAkC,CAAC;AAEhH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC7B;AA8KD,8EAA8E;AAC9E,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,iBAAiB,GAAG,qBAAqB,CAyH3F"}
|