@superbee/core 0.2.0-pre.4 → 0.2.0-pre.41

package/dist/hosted-client/client.js

@@ -0,0 +1,309 @@
+// The headless client of the hosted sync route family (`/sync/v1`): a bearer carrier over the
+// shared hosted transport, the identity and bundle-list reads a caller needs before it opens a
+// bundle, document reads and history, and operations run by id.
+//
+// Credentials come from the caller's provider, asked once per request through the carrier seam, so
+// a short-lived token can be renewed between requests. The client never logs them, and its errors
+// carry the route and code, never a credential. Failures are typed and never worded for a particular surface:
+// `HostedCarrierError` (transport), `MalformedAnswer` (an answer the contract does not admit),
+// `RemoteError` (a refusal, with the host's code and status) and `HostedRouteNotServed`.
+import { createFetchCarrier, createHostedReadAdapter, decodeHistoryAnswer, decodeOperationListing, decodeOperationRun, familyRefusal, historyInput, HOSTED_READ_BOUNDS, operationRunBody, readRefusal, statedDocumentInputBytes, } from "../hosted-transport/index.js";
+import { MalformedAnswer, RemoteError } from "../remote-error.js";
+import { HostedRouteNotServed } from "./errors.js";
+import { hostedBundleReferenceText, isWorkspaceSlug, parseHostedBundleReference } from "./reference.js";
+import { checkoutBindingDigest } from "./binding.js";
+import { mintRequestId } from "../uncertain-write.js";
+import { createCapabilitiesCache, createMemoryIntentStore, hostedHeldWrites, hostedLookupWrite, hostedSettleWrite, hostedWrite, } from "./write.js";
+import { createMemoryBlobJournal } from "../blob-journal.js";
+import { hostedBlobHead, hostedBlobHeads, hostedDeleteBlob, hostedForgetBlobWrite, hostedHeldBlobWrites, hostedLookupBlobWrite, hostedReadBlob, hostedSettleBlobWrite, hostedWriteBlob, } from "./blob-write.js";
+const IDENTITY_BYTES = 64 * 1024;
+const BUNDLES_BYTES = 256 * 1024;
+const AGENT_AUDIENCE_PATH = /^\/agents\/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\/mcp$/;
+/**
+ * A {@link HostedCredentialProvider} sending `Authorization: Bearer <token>`, asking `getToken`
+ * before every request. A value that is not a string is no credential (`denied`).
+ */
+export function bearerCredentials(getToken) {
+    return async (signal) => {
+        const token = await getToken(signal);
+        if (typeof token !== "string")
+            throw new TypeError("the token provider returned no bearer");
+        return { Authorization: `Bearer ${token}` };
+    };
+}
+/**
+ * The sync family under a protected resource's audience: `/sync/v1` for the Superbee API
+ * (`<origin>/mcp`), `/agents/<uuid>/sync/v1` for an agent connection. Null for any other
+ * audience, which has no sync family.
+ */
+export function syncRoutePrefix(resource) {
+    const { origin, audience } = resource;
+    // The audience must be on the origin itself, not on another host whose name merely starts the same.
+    if (!audience.startsWith(origin) || (audience.length > origin.length && audience[origin.length] !== "/"))
+        return null;
+    const audiencePath = audience.slice(origin.length);
+    if (audiencePath === "/mcp")
+        return "/sync/v1";
+    if (AGENT_AUDIENCE_PATH.test(audiencePath))
+        return `${audiencePath.slice(0, -"/mcp".length)}/sync/v1`;
+    return null;
+}
+function syncReadRoutes(prefix) {
+    return Object.freeze({
+        capabilities: `${prefix}/capabilities`,
+        heads: `${prefix}/heads`,
+        snapshot: `${prefix}/snapshot`,
+        read: `${prefix}/read`,
+    });
+}
+/**
+ * The sync routes whose body never names one bundle by reference: `whoami` and `bundles` span the
+ * person's workspaces, and `bundle-create` and the staged creation's four routes name their
+ * workspace in the body (the blob route in its headers) and a bundle that does not exist yet.
+ * Every other route under the family's prefix is bundle-scoped, the host's own rule, so a route
+ * added later is qualified by default rather than read as an absent bundle once an id collides.
+ */
+const UNSCOPED_ROUTES = Object.freeze([
+    "whoami",
+    "bundles",
+    "bundle-create",
+    "bundle-create-begin",
+    "bundle-create-stage",
+    "bundle-create-blob",
+    "bundle-create-commit",
+]);
+/**
+ * The carrier with a workspace: every bundle-scoped request names its bundle as
+ * `<slug>/<bundle-id>`, so the host selects that workspace's bundle. The host's answers still
+ * name the bare id. An id that already names a workspace is a caller's mistake (a `TypeError`),
+ * as is a raw body sent to a bundle-scoped route other than an ordinary blob create/replace.
+ */
+export function qualifyingCarrier(carrier, prefix, slug) {
+    const unscoped = new Set(UNSCOPED_ROUTES.map((route) => `${prefix}/${route}`));
+    const blobUploads = new Set([`${prefix}/blob-create`, `${prefix}/blob-replace`]);
+    const scoped = (route) => route.startsWith(`${prefix}/`) && !unscoped.has(route);
+    const qualify = (route, input) => {
+        if (!scoped(route) || input === null || typeof input !== "object" || Array.isArray(input))
+            return input;
+        const bundleId = input.bundleId;
+        if (typeof bundleId !== "string")
+            return input;
+        if (bundleId.includes("/"))
+            throw new TypeError("a qualified reference sent through a qualifying client");
+        return { ...input, bundleId: hostedBundleReferenceText({ slug, bundleId }) };
+    };
+    const bytes = carrier.bytes?.bind(carrier);
+    return {
+        json: async (route, input, signal, options) => carrier.json(route, qualify(route, input), signal, options),
+        stream: async (route, input, signal) => carrier.stream(route, qualify(route, input), signal),
+        // Ordinary blob uploads name their bundle in one route header, not in the binary body.
+        ...(bytes
+            ? {
+                bytes: async (route, body, signal, options) => {
+                    if (blobUploads.has(route)) {
+                        const entries = Object.entries(options.headers ?? {}).filter(([name]) => name.toLowerCase() === "x-superbee-bundle");
+                        if (entries.length !== 1)
+                            throw new TypeError("a blob upload must name exactly one bundle header");
+                        const [name, value] = entries[0];
+                        const reference = typeof value === "string" ? parseHostedBundleReference(value) : null;
+                        if (reference === null || reference.slug !== null)
+                            throw new TypeError("a blob upload through a qualifying client must name a bare hosted bundle id");
+                        return bytes(route, body, signal, { ...options, headers: { ...options.headers, [name]: hostedBundleReferenceText({ slug, bundleId: reference.bundleId }) } });
+                    }
+                    if (scoped(route))
+                        throw new TypeError(`a raw body sent to the bundle-scoped route ${route} through a qualifying client`);
+                    return bytes(route, body, signal, options);
+                },
+            }
+            : {}),
+    };
+}
+/** A client of the hosted sync family at `options.target`, authenticated by `options.credentials`. */
+export function createHostedClient(options) {
+    const { syncPrefix } = options.target;
+    if (typeof syncPrefix !== "string" || !syncPrefix.startsWith("/") || syncPrefix.endsWith("/")) {
+        throw new TypeError("a hosted client's sync prefix is an absolute path without a trailing slash");
+    }
+    if (typeof options.credentials !== "function")
+        throw new TypeError("a hosted client needs a credential provider");
+    // One binding per client instance, shared by its `within` clients: a digest of a random id, as a
+    // checkout's is, so the id itself never leaves.
+    const writes = {
+        binding: checkoutBindingDigest(mintRequestId()),
+        store: options.intentStore ?? createMemoryIntentStore(),
+        inFlight: new Map(),
+        capabilities: createCapabilitiesCache(options.capabilitiesTtlMs, options.now),
+        blobJournal: options.blobJournal ?? createMemoryBlobJournal(),
+        blobLocks: new Map(),
+    };
+    return clientIn(options, options.signal ?? new AbortController().signal, undefined, writes);
+}
+/** The client, naming its bundles in the workspace with `slug` when there is one. */
+function clientIn(options, signal, slug, writes) {
+    const { target } = options;
+    const prefix = target.syncPrefix;
+    const fetchCarrier = createFetchCarrier({
+        baseUrl: target.origin,
+        credentials: options.credentials,
+        ...(options.fetch ? { fetch: options.fetch } : {}),
+        ...(options.deadlineMs ? { deadlineMs: options.deadlineMs } : {}),
+    });
+    const carrier = slug === undefined ? fetchCarrier : qualifyingCarrier(fetchCarrier, prefix, slug);
+    const writeContext = {
+        ...writes,
+        prefix,
+        workspace: slug ?? null,
+        signal,
+        ...(options.writeRecovery?.lookupDelayMs !== undefined ? { lookupDelayMs: options.writeRecovery.lookupDelayMs } : {}),
+        readRoutes: syncReadRoutes(prefix),
+        // A recorded write is looked up in the workspace it was sent in, whichever client asks.
+        carrierFor: (workspace) => (workspace === null ? fetchCarrier : qualifyingCarrier(fetchCarrier, prefix, workspace)),
+        origin: new URL(target.origin).origin,
+    };
+    /** An unscoped read: the body on a `200`, otherwise the host's refusal as a `RemoteError`. */
+    async function json(route, maximum) {
+        const answer = await carrier.json(`${prefix}/${route}`, {}, signal, { maximum });
+        if (answer.status !== 200) {
+            const code = answer.body?.error;
+            const named = typeof code === "string" ? code : typeof code?.code === "string" ? code.code : undefined;
+            throw new RemoteError(`hosted ${route} answered ${answer.status}`, named ?? "RUNTIME", answer.status);
+        }
+        return answer.body;
+    }
+    /**
+     * One request of a route a gateway may not have yet. That gateway answers the family's
+     * unknown-route 404, which is {@link HostedRouteNotServed}. An answer larger than `maximum` is
+     * the carrier's `unavailable` whose cause is `HostedAnswerTooLarge` (see `isAnswerTooLarge`).
+     */
+    async function send(route, input, maximum) {
+        const answer = await carrier.json(route, input, signal, { maximum });
+        if (answer.status === 404 && isUnknownRoute(answer.body))
+            throw new HostedRouteNotServed(route);
+        return answer;
+    }
+    return {
+        target,
+        prefix,
+        carrier,
+        signal,
+        async whoami() {
+            const route = `${prefix}/whoami`;
+            const body = (await json("whoami", IDENTITY_BYTES));
+            if (typeof body?.principalId !== "string" ||
+                body.principalId === "" ||
+                !Array.isArray(body.tenantIds) ||
+                !body.tenantIds.every((id) => typeof id === "string")) {
+                throw new MalformedAnswer("not an identity", route);
+            }
+            const tenantIds = [...body.tenantIds].sort();
+            // A host from before qualified references names no slugs.
+            const slugs = new Map();
+            if (body.workspaces !== undefined) {
+                if (!Array.isArray(body.workspaces) ||
+                    body.workspaces.length !== tenantIds.length ||
+                    !body.workspaces.every((w) => typeof w?.tenantId === "string" &&
+                        tenantIds.includes(w.tenantId) &&
+                        (w.slug === null || isWorkspaceSlug(w.slug)))) {
+                    throw new MalformedAnswer("not an identity's workspaces", route);
+                }
+                for (const w of body.workspaces)
+                    slugs.set(w.tenantId, w.slug);
+                if (slugs.size !== tenantIds.length)
+                    throw new MalformedAnswer("an identity naming a workspace twice", route);
+            }
+            return {
+                principalId: body.principalId,
+                tenantIds,
+                workspaces: tenantIds.map((tenantId) => ({ tenantId, slug: slugs.get(tenantId) ?? null })),
+                documentInputBytes: statedDocumentInputBytes(body.limits),
+                email: typeof body.email === "string" && /^[^\s\p{Cc}\p{Cf}]{3,320}$/u.test(body.email) ? body.email : null,
+                ...(isAuthorityKey(body.targetAuthorityKey) ? { targetAuthorityKey: body.targetAuthorityKey } : {}),
+                ...directoryWorkspaces(body.notificationDirectoryWorkspaces, tenantIds),
+            };
+        },
+        async bundles() {
+            const body = (await json("bundles", BUNDLES_BYTES));
+            if (body?.ok === false) {
+                const code = typeof body.error?.code === "string" ? body.error.code : "RUNTIME";
+                throw new RemoteError(`hosted bundles answered ${code}`, code, code === "insufficient_scope" ? 403 : 422);
+            }
+            const rows = body?.data?.bundles;
+            if (body?.ok !== true || !Array.isArray(rows))
+                throw new MalformedAnswer("not a bundle list", `${prefix}/bundles`);
+            return rows
+                .filter((row) => typeof row?.bundleId === "string" && typeof row?.name === "string")
+                .map((row) => ({ bundleId: row.bundleId, name: row.name, lifecycle: typeof row.lifecycle === "string" ? row.lifecycle : null }));
+        },
+        reader(bundleId) {
+            return createHostedReadAdapter({ carrier, bundleId, routes: syncReadRoutes(prefix) });
+        },
+        within(workspace) {
+            return clientIn(options, signal, workspace, writes);
+        },
+        write: (bundleId, input, writeOptions) => hostedWrite(writeContext, bundleId, input, writeOptions),
+        lookupWrite: (requestId, lookupOptions) => hostedLookupWrite(writeContext, requestId, lookupOptions),
+        settleWrite: (requestId, settleOptions) => hostedSettleWrite(writeContext, requestId, settleOptions),
+        heldWrites: () => hostedHeldWrites(writeContext),
+        writeBlob: (bundleId, input, blobOptions) => hostedWriteBlob(writeContext, bundleId, input, blobOptions),
+        deleteBlob: (bundleId, input, blobOptions) => hostedDeleteBlob(writeContext, bundleId, input, blobOptions),
+        lookupBlobWrite: (requestId, lookupOptions) => hostedLookupBlobWrite(writeContext, requestId, lookupOptions),
+        settleBlobWrite: (requestId, settleOptions) => hostedSettleBlobWrite(writeContext, requestId, settleOptions),
+        forgetBlobWrite: (requestId, forgetOptions) => hostedForgetBlobWrite(writeContext, requestId, forgetOptions),
+        heldBlobWrites: () => hostedHeldBlobWrites(writeContext),
+        blobHeads: (bundleId, readOptions) => hostedBlobHeads(writeContext, bundleId, readOptions),
+        blobHead: (bundleId, key, readOptions) => hostedBlobHead(writeContext, bundleId, key, readOptions),
+        readBlob: (bundleId, key, readOptions) => hostedReadBlob(writeContext, bundleId, key, readOptions),
+        async history(bundleId, request) {
+            const route = `${prefix}/history`;
+            const answer = await send(route, historyInput(bundleId, request), HOSTED_READ_BOUNDS.historyBytes);
+            if (answer.status !== 200)
+                throw readRefusal(answer);
+            return decodeHistoryAnswer(request, answer.body, route);
+        },
+        async listOperations(bundleId) {
+            const route = `${prefix}/operations`;
+            const answer = await send(route, { bundleId }, HOSTED_READ_BOUNDS.operationsBytes);
+            if (answer.status !== 200) {
+                // The listing refuses a bundle as capabilities does: a 404 naming the code, never a 200.
+                const refusal = answer.status === 404 ? familyRefusal(answer) : undefined;
+                if (refusal?.code === "bundle_not_found")
+                    return { ok: false, refusal };
+                throw readRefusal(answer);
+            }
+            return { ok: true, listing: decodeOperationListing(answer.body, route) };
+        },
+        async runOperation(bundleId, operationId, input, runOptions = {}) {
+            const route = `${prefix}/run`;
+            const answer = await send(route, operationRunBody(bundleId, operationId, input), runOptions.maximumBytes ?? HOSTED_READ_BOUNDS.runBytes);
+            if (answer.status !== 200) {
+                // The route's own refusals of the request, before any operation ran: an id the host does
+                // not run by id, and an envelope or input it refuses. Both are typed, for the caller to word.
+                const refusal = answer.status === 400 ? familyRefusal(answer) : undefined;
+                if (refusal?.code === "unknown_operation" || refusal?.code === "invalid_input")
+                    return { ok: false, refusal };
+                throw readRefusal(answer);
+            }
+            return decodeOperationRun(operationId, answer.body, route);
+        },
+    };
+}
+/** The document target decoder's key rule: printable ASCII without a slash or backslash, at most 256 characters. */
+function isAuthorityKey(value) {
+    return typeof value === "string" && /^[\x21-\x7e]{1,256}$/.test(value) && !/[\\/]/.test(value);
+}
+/**
+ * The stated directory workspaces the identity belongs to, sorted and once each; nothing when the
+ * field is absent, not a list, or names none of them. An entry outside `tenantIds` is dropped: the
+ * directory is only ever offered in a workspace the person is in.
+ */
+function directoryWorkspaces(value, tenantIds) {
+    if (!Array.isArray(value))
+        return {};
+    const offered = tenantIds.filter((tenantId) => value.includes(tenantId));
+    return offered.length === 0 ? {} : { notificationDirectoryWorkspaces: offered };
+}
+/** The sync family's answer to a route it does not have: `404 {"error":"not_found"}`, nothing else. */
+function isUnknownRoute(body) {
+    return typeof body === "object" && body !== null && !Array.isArray(body) && Object.keys(body).length === 1 && body.error === "not_found";
+}
+//# sourceMappingURL=client.js.map

package/dist/hosted-client/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/hosted-client/client.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,+FAA+F;AAC/F,gEAAgE;AAChE,EAAE;AACF,mGAAmG;AACnG,kGAAkG;AAClG,8GAA8G;AAC9G,+FAA+F;AAC/F,yFAAyF;AACzF,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,mBAAmB,EACnB,sBAAsB,EACtB,kBAAkB,EAClB,aAAa,EACb,YAAY,EACZ,kBAAkB,EAClB,gBAAgB,EAChB,WAAW,EACX,wBAAwB,GAWzB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAElE,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,yBAAyB,EAAE,eAAe,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AACxG,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,WAAW,GAQZ,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,uBAAuB,EAA6B,MAAM,oBAAoB,CAAC;AAGxF,OAAO,EACL,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACrB,cAAc,EACd,qBAAqB,EACrB,eAAe,GAUhB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,CAAC;AACjC,MAAM,aAAa,GAAG,GAAG,GAAG,IAAI,CAAC;AACjC,MAAM,mBAAmB,GAAG,+EAA+E,CAAC;AAsB5G;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAA2D;IAC3F,OAAO,KAAK,EAAE,MAAM,EAAE,EAAE;QACtB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;QAC5F,OAAO,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC;IAC9C,CAAC,CAAC;AACJ,CAAC;AA6JD;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgE;IAC9F,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC;IACtC,oGAAoG;IACpG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACtH,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,YAAY,KAAK,MAAM;QAAE,OAAO,UAAU,CAAC;IAC/C,IAAI,mBAAmB,CAAC,IAAI,CAAC,YAAY,CAAC;QAAE,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;IACtG,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACpC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,YAAY,EAAE,GAAG,MAAM,eAAe;QACtC,KAAK,EAAE,GAAG,MAAM,QAAQ;QACxB,QAAQ,EAAE,GAAG,MAAM,WAAW;QAC9B,IAAI,EAAE,GAAG,MAAM,OAAO;KACvB,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC;IACpC,QAAQ;IACR,SAAS;IACT,eAAe;IACf,qBAAqB;IACrB,qBAAqB;IACrB,oBAAoB;IACpB,sBAAsB;CACd,CAAC,CAAC;AAEZ;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAsB,EAAE,MAAc,EAAE,IAAY;IACpF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,MAAM,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC;IAC/E,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,cAAc,EAAE,GAAG,MAAM,eAAe,CAAC,CAAC,CAAC;IACjF,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACzF,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,KAAc,EAAW,EAAE;QACzD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACxG,MAAM,QAAQ,GAAI,KAAgC,CAAC,QAAQ,CAAC;QAC5D,IAAI,OAAO,QAAQ,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC/C,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,wDAAwD,CAAC,CAAC;QAC1G,OAAO,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,yBAAyB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IAC/E,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3C,OAAO;QACL,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC;QAC1G,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAC5F,uFAAuF;QACvF,GAAG,CAAC,KAAK;YACP,CAAC,CAAC;gBACE,KAAK,EAAE,KAAK,EAAE,KAAa,EAAE,IAAgB,EAAE,MAAmB,EAAE,OAA2D,EAAE,EAAE;oBACjI,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;wBAC3B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,mBAAmB,CAAC,CAAC;wBACrH,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;4BAAE,MAAM,IAAI,SAAS,CAAC,mDAAmD,CAAC,CAAC;wBACnG,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;wBAClC,MAAM,SAAS,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;wBACvF,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,CAAC,IAAI,KAAK,IAAI;4BAAE,MAAM,IAAI,SAAS,CAAC,6EAA6E,CAAC,CAAC;wBACtJ,OAAO,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,yBAAyB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;oBAChK,CAAC;oBACD,IAAI,MAAM,CAAC,KAAK,CAAC;wBAAE,MAAM,IAAI,SAAS,CAAC,8CAA8C,KAAK,8BAA8B,CAAC,CAAC;oBAC1H,OAAO,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;gBAC7C,CAAC;aACF;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,kBAAkB,CAAC,OAA4B;IAC7D,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IACtC,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9F,MAAM,IAAI,SAAS,CAAC,4EAA4E,CAAC,CAAC;IACpG,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,UAAU;QAAE,MAAM,IAAI,SAAS,CAAC,6CAA6C,CAAC,CAAC;IAClH,iGAAiG;IACjG,gDAAgD;IAChD,MAAM,MAAM,GAAiB;QAC3B,OAAO,EAAE,qBAAqB,CAAC,aAAa,EAAE,CAAC;QAC/C,KAAK,EAAE,OAAO,CAAC,WAAW,IAAI,uBAAuB,EAAE;QACvD,QAAQ,EAAE,IAAI,GAAG,EAA4B;QAC7C,YAAY,EAAE,uBAAuB,CAAC,OAAO,CAAC,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC;QAC7E,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,uBAAuB,EAAE;QAC7D,SAAS,EAAE,IAAI,GAAG,EAA4B;KAC/C,CAAC;IACF,OAAO,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;AAC9F,CAAC;AAYD,qFAAqF;AACrF,SAAS,QAAQ,CAAC,OAA4B,EAAE,MAAmB,EAAE,IAAwB,EAAE,MAAoB;IACjH,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC;IACjC,MAAM,YAAY,GAAG,kBAAkB,CAAC;QACtC,OAAO,EAAE,MAAM,CAAC,MAAM;QACtB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClE,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAClG,MAAM,YAAY,GAAsB;QACtC,GAAG,MAAM;QACT,MAAM;QACN,SAAS,EAAE,IAAI,IAAI,IAAI;QACvB,MAAM;QACN,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrH,UAAU,EAAE,cAAc,CAAC,MAAM,CAAC;QAClC,wFAAwF;QACxF,UAAU,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QACnH,MAAM,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM;KACtC,CAAC;IAEF,8FAA8F;IAC9F,KAAK,UAAU,IAAI,CAAC,KAAa,EAAE,OAAe;QAChD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACjF,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAI,MAAM,CAAC,IAA6D,EAAE,KAAK,CAAC;YAC1F,MAAM,KAAK,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAQ,IAA2B,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACrJ,MAAM,IAAI,WAAW,CAAC,UAAU,KAAK,aAAa,MAAM,CAAC,MAAM,EAAE,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACxG,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IAED;;;;OAIG;IACH,KAAK,UAAU,IAAI,CAAC,KAAa,EAAE,KAAc,EAAE,OAAe;QAChE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACrE,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAChG,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO;QACL,MAAM;QACN,MAAM;QACN,OAAO;QACP,MAAM;QACN,KAAK,CAAC,MAAM;YACV,MAAM,KAAK,GAAG,GAAG,MAAM,SAAS,CAAC;YACjC,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAiM,CAAC;YACpP,IACE,OAAO,IAAI,EAAE,WAAW,KAAK,QAAQ;gBACrC,IAAI,CAAC,WAAW,KAAK,EAAE;gBACvB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;gBAC9B,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC,EACnE,CAAC;gBACD,MAAM,IAAI,eAAe,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;YACtD,CAAC;YACD,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;YAC7C,0DAA0D;YAC1D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAyB,CAAC;YAC/C,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;gBAClC,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;oBAC/B,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;oBAC3C,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CACpB,CAAC,CAAC,EAAE,EAAE,CACJ,OAAO,CAAC,EAAE,QAAQ,KAAK,QAAQ;wBAC/B,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;wBAC9B,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAC/C,EACD,CAAC;oBACD,MAAM,IAAI,eAAe,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;gBACnE,CAAC;gBACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,UAAyD;oBAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;gBAC9G,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,MAAM;oBAAE,MAAM,IAAI,eAAe,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAC;YAChH,CAAC;YACD,OAAO;gBACL,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,SAAS;gBACT,UAAU,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;gBAC1F,kBAAkB,EAAE,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC;gBACzD,KAAK,EAAE,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;gBAC3G,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnG,GAAG,mBAAmB,CAAC,IAAI,CAAC,+BAA+B,EAAE,SAAS,CAAC;aACxE,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,OAAO;YACX,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAErC,CAAC;YACd,IAAI,IAAI,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;gBACvB,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,KAAK,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;gBAChF,MAAM,IAAI,WAAW,CAAC,2BAA2B,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,KAAK,oBAAoB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAC5G,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC;YACjC,IAAI,IAAI,EAAE,EAAE,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,GAAG,MAAM,UAAU,CAAC,CAAC;YACnH,OAAO,IAAI;iBACR,MAAM,CAAC,CAAC,GAAG,EAAkE,EAAE,CAAC,OAAO,GAAG,EAAE,QAAQ,KAAK,QAAQ,IAAI,OAAO,GAAG,EAAE,IAAI,KAAK,QAAQ,CAAC;iBACnJ,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACrI,CAAC;QACD,MAAM,CAAC,QAAQ;YACb,OAAO,uBAAuB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACxF,CAAC;QACD,MAAM,CAAC,SAAS;YACd,OAAO,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QACtD,CAAC;QACD,KAAK,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC,WAAW,CAAC,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,CAAC;QAClG,WAAW,EAAE,CAAC,SAAS,EAAE,aAAa,EAAE,EAAE,CAAC,iBAAiB,CAAC,YAAY,EAAE,SAAS,EAAE,aAAa,CAAC;QACpG,WAAW,EAAE,CAAC,SAAS,EAAE,aAAa,EAAE,EAAE,CAAC,iBAAiB,CAAC,YAAY,EAAE,SAAS,EAAE,aAAa,CAAC;QACpG,UAAU,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,YAAY,CAAC;QAChD,SAAS,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC,eAAe,CAAC,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,CAAC;QACxG,UAAU,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC,gBAAgB,CAAC,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,CAAC;QAC1G,eAAe,EAAE,CAAC,SAAS,EAAE,aAAa,EAAE,EAAE,CAAC,qBAAqB,CAAC,YAAY,EAAE,SAAS,EAAE,aAAa,CAAC;QAC5G,eAAe,EAAE,CAAC,SAAS,EAAE,aAAa,EAAE,EAAE,CAAC,qBAAqB,CAAC,YAAY,EAAE,SAAS,EAAE,aAAa,CAAC;QAC5G,eAAe,EAAE,CAAC,SAAS,EAAE,aAAa,EAAE,EAAE,CAAC,qBAAqB,CAAC,YAAY,EAAE,SAAS,EAAE,aAAa,CAAC;QAC5G,cAAc,EAAE,GAAG,EAAE,CAAC,oBAAoB,CAAC,YAAY,CAAC;QACxD,SAAS,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,EAAE,CAAC,eAAe,CAAC,YAAY,EAAE,QAAQ,EAAE,WAAW,CAAC;QAC1F,QAAQ,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,CAAC,cAAc,CAAC,YAAY,EAAE,QAAQ,EAAE,GAAG,EAAE,WAAW,CAAC;QAClG,QAAQ,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,CAAC,cAAc,CAAC,YAAY,EAAE,QAAQ,EAAE,GAAG,EAAE,WAAW,CAAC;QAClG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO;YAC7B,MAAM,KAAK,GAAG,GAAG,MAAM,UAAU,CAAC;YAClC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,kBAAkB,CAAC,YAAY,CAAC,CAAC;YACnG,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG;gBAAE,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;YACrD,OAAO,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC1D,CAAC;QACD,KAAK,CAAC,cAAc,CAAC,QAAQ;YAC3B,MAAM,KAAK,GAAG,GAAG,MAAM,aAAa,CAAC;YACrC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,kBAAkB,CAAC,eAAe,CAAC,CAAC;YACnF,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC1B,yFAAyF;gBACzF,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC1E,IAAI,OAAO,EAAE,IAAI,KAAK,kBAAkB;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;gBACxE,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;YAC5B,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,sBAAsB,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;QAC3E,CAAC;QACD,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,GAAG,EAAE;YAC9D,MAAM,KAAK,GAAG,GAAG,MAAM,MAAM,CAAC;YAC9B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,CAAC,EAAE,UAAU,CAAC,YAAY,IAAI,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YACzI,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC1B,yFAAyF;gBACzF,8FAA8F;gBAC9F,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC1E,IAAI,OAAO,EAAE,IAAI,KAAK,mBAAmB,IAAI,OAAO,EAAE,IAAI,KAAK,eAAe;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;gBAC9G,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;YAC5B,CAAC;YACD,OAAO,kBAAkB,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC7D,CAAC;KACF,CAAC;AACJ,CAAC;AAED,oHAAoH;AACpH,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACjG,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,KAAc,EAAE,SAA4B;IACvE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzE,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,+BAA+B,EAAE,OAAO,EAAE,CAAC;AAClF,CAAC;AAED,uGAAuG;AACvG,SAAS,cAAc,CAAC,IAAa;IACnC,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAK,IAA4B,CAAC,KAAK,KAAK,WAAW,CAAC;AACpK,CAAC"}

package/dist/hosted-client/directory.d.ts

@@ -0,0 +1,46 @@
+import { type DirectoryMember, type HostedInbox } from "./inbox.js";
+/** The most directory pages {@link readDirectory} reads by default: 2,000 members. */
+export declare const DIRECTORY_PAGES_MAX = 20;
+export interface DirectoryListing {
+    readonly members: readonly DirectoryMember[];
+    /** False when the directory had more pages than were read: a match over it may miss a duplicate. */
+    readonly complete: boolean;
+}
+/** Every member the directory lists, page by page, up to `maxPages` pages. */
+export declare function readDirectory(inbox: Pick<HostedInbox, "directory">, options?: {
+    readonly maxPages?: number;
+}): Promise<DirectoryListing>;
+/** How a member matched exactly: its principal id, its email, or its whole name. */
+export type DirectoryMatchBy = "principal_id" | "email" | "name";
+export type DirectoryMatch = {
+    readonly outcome: "matched";
+    readonly member: DirectoryMember;
+    readonly by: DirectoryMatchBy;
+} | {
+    readonly outcome: "ambiguous";
+    readonly by: Exclude<DirectoryMatchBy, "principal_id">;
+    readonly candidates: readonly DirectoryMember[];
+}
+/** No exact match, but these names start with the query: suggestions, never a recipient. */
+ | {
+    readonly outcome: "prefix";
+    readonly candidates: readonly DirectoryMember[];
+}
+/** `emails` false: the query was an email and the directory shares none, so it cannot match one. */
+ | {
+    readonly outcome: "none";
+    readonly emails: boolean;
+};
+/**
+ * A name as matching compares it: control and format characters removed, NFC, runs of space
+ * folded to one, trimmed and lowercased.
+ */
+export declare function directoryNameKey(value: string): string;
+/**
+ * The one member `query` names, by these rules in order: an exact principal id; with an `@`, an
+ * exact email (any case) when the directory shares emails; else an exact display name (any case,
+ * spacing folded). Several at the first rule that matches any are ambiguous. With no exact name,
+ * the names that start with the query are returned as `prefix` suggestions; nothing at all is none.
+ */
+export declare function matchDirectoryMember(members: readonly DirectoryMember[], query: string): DirectoryMatch;
+//# sourceMappingURL=directory.d.ts.map

package/dist/hosted-client/directory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"directory.d.ts","sourceRoot":"","sources":["../../src/hosted-client/directory.ts"],"names":[],"mappings":"AAOA,OAAO,EAAsB,KAAK,eAAe,EAAE,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AAExF,sFAAsF;AACtF,eAAO,MAAM,mBAAmB,KAAK,CAAC;AAEtC,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,SAAS,eAAe,EAAE,CAAC;IAC7C,oGAAoG;IACpG,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AAED,8EAA8E;AAC9E,wBAAsB,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,OAAO,GAAE;IAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAkBlJ;AAED,oFAAoF;AACpF,MAAM,MAAM,gBAAgB,GAAG,cAAc,GAAG,OAAO,GAAG,MAAM,CAAC;AAEjE,MAAM,MAAM,cAAc,GACtB;IAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,gBAAgB,CAAA;CAAE,GAChG;IAAE,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,SAAS,eAAe,EAAE,CAAA;CAAE;AAC5I,4FAA4F;GAC1F;IAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,SAAS,eAAe,EAAE,CAAA;CAAE;AACjF,oGAAoG;GAClG;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAAC;AAE3D;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,SAAS,eAAe,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,cAAc,CAkBvG"}

package/dist/hosted-client/directory.js

@@ -0,0 +1,74 @@
+// Finding a teammate in a hosted workspace's notification directory (decision
+// notification-directory-2026-10-17): reading every page, and the one matching rule every client
+// uses to turn what a person typed (a principal id, an email, a name) into one member, or into a
+// refusal that names the candidates. A match never guesses: only an exact principal id, email or
+// name names a member; two that fit equally are ambiguous, and the start of a name only suggests
+// members, because someone who turned the directory off is not there to make it ambiguous.
+import { stripHostControls } from "../host-text.js";
+import { DIRECTORY_PAGE_MAX } from "./inbox.js";
+/** The most directory pages {@link readDirectory} reads by default: 2,000 members. */
+export const DIRECTORY_PAGES_MAX = 20;
+/** Every member the directory lists, page by page, up to `maxPages` pages. */
+export async function readDirectory(inbox, options = {}) {
+    const maxPages = Math.max(1, Math.floor(options.maxPages ?? DIRECTORY_PAGES_MAX));
+    const members = [];
+    const seen = new Set();
+    let after;
+    for (let page = 0; page < maxPages; page += 1) {
+        const answer = await inbox.directory({ limit: DIRECTORY_PAGE_MAX, ...(after === undefined ? {} : { after }) });
+        for (const member of answer.members) {
+            if (seen.has(member.principalId))
+                continue;
+            seen.add(member.principalId);
+            members.push(member);
+        }
+        // A cursor that does not move would page forever: stop and say the listing is not whole.
+        if (answer.nextAfter === null)
+            return { members, complete: true };
+        if (answer.nextAfter === after)
+            return { members, complete: false };
+        after = answer.nextAfter;
+    }
+    return { members, complete: false };
+}
+/**
+ * A name as matching compares it: control and format characters removed, NFC, runs of space
+ * folded to one, trimmed and lowercased.
+ */
+export function directoryNameKey(value) {
+    return stripHostControls(value).replace(/[\t\n\r]/g, " ").normalize("NFC").replace(/\s+/gu, " ").trim().toLowerCase();
+}
+/**
+ * The one member `query` names, by these rules in order: an exact principal id; with an `@`, an
+ * exact email (any case) when the directory shares emails; else an exact display name (any case,
+ * spacing folded). Several at the first rule that matches any are ambiguous. With no exact name,
+ * the names that start with the query are returned as `prefix` suggestions; nothing at all is none.
+ */
+export function matchDirectoryMember(members, query) {
+    const byId = members.find((member) => member.principalId === query);
+    if (byId)
+        return { outcome: "matched", member: byId, by: "principal_id" };
+    const key = directoryNameKey(query);
+    if (key === "")
+        return { outcome: "none", emails: true };
+    if (query.includes("@")) {
+        const shared = members.some((member) => typeof member.email === "string");
+        if (!shared)
+            return { outcome: "none", emails: false };
+        return settle(members.filter((member) => typeof member.email === "string" && directoryNameKey(member.email) === key), "email") ?? { outcome: "none", emails: true };
+    }
+    const named = members.filter((member) => member.displayName !== null);
+    return (settle(named.filter((member) => directoryNameKey(member.displayName) === key), "name") ??
+        suggest(named.filter((member) => directoryNameKey(member.displayName).startsWith(key))) ?? { outcome: "none", emails: true });
+}
+function suggest(found) {
+    return found.length === 0 ? null : { outcome: "prefix", candidates: found };
+}
+function settle(found, by) {
+    if (found.length === 0)
+        return null;
+    if (found.length === 1)
+        return { outcome: "matched", member: found[0], by };
+    return { outcome: "ambiguous", by, candidates: found };
+}
+//# sourceMappingURL=directory.js.map

package/dist/hosted-client/directory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"directory.js","sourceRoot":"","sources":["../../src/hosted-client/directory.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,iGAAiG;AACjG,iGAAiG;AACjG,iGAAiG;AACjG,iGAAiG;AACjG,2FAA2F;AAC3F,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAA0C,MAAM,YAAY,CAAC;AAExF,sFAAsF;AACtF,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAQtC,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAqC,EAAE,UAA0C,EAAE;IACrH,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,IAAI,mBAAmB,CAAC,CAAC,CAAC;IAClF,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,KAAyB,CAAC;IAC9B,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,QAAQ,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/G,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACpC,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC;gBAAE,SAAS;YAC3C,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QACD,yFAAyF;QACzF,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI;YAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAClE,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK;YAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACpE,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC;IAC3B,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AACtC,CAAC;AAaD;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACxH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAmC,EAAE,KAAa;IACrF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,KAAK,KAAK,CAAC,CAAC;IACpE,IAAI,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC;IAC1E,MAAM,GAAG,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACzD,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC;QAC1E,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QACvD,OAAO,MAAM,CACX,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EACtG,OAAO,CACR,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACzC,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAuD,EAAE,CAAC,MAAM,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC;IAC3H,OAAO,CACL,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,GAAG,CAAC,EAAE,MAAM,CAAC;QACtF,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAC7H,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,KAAiC;IAChD,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;AAC9E,CAAC;AAED,SAAS,MAAM,CAAC,KAAiC,EAAE,EAA6C;IAC9F,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,EAAE,EAAE,CAAC;IAC7E,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;AACzD,CAAC"}

package/dist/hosted-client/errors.d.ts

@@ -0,0 +1,26 @@
+import { RemoteError } from "../remote-error.js";
+/** The code of {@link HostedRouteNotServed}. */
+export declare const ROUTE_NOT_SERVED = "ROUTE_NOT_SERVED";
+/**
+ * The host does not have this route yet: the sync family's own unknown-route answer,
+ * `404 {"error":"not_found"}` and nothing else, which a gateway from before the route sends. It
+ * is deterministic for that host version, so it is never retried; a later host serves the route.
+ * Its status stays `404`, and it names the route asked for.
+ */
+export declare class HostedRouteNotServed extends RemoteError {
+    readonly route: string;
+    constructor(route: string);
+}
+/** True when `error` is a {@link HostedRouteNotServed}. */
+export declare function isRouteNotServed(error: unknown): error is HostedRouteNotServed;
+/**
+ * The host serves this bundle no blob writes (`blobWrites` is not `allowed` in its capabilities,
+ * as an older host's answer decodes). A {@link HostedRouteNotServed}, so `isRouteNotServed` is
+ * true; thrown before anything is journaled or sent. Unlike `write()`, whose bundle without
+ * writes is the result `refused: read_only`, a blob write throws: the blob routes are a newer
+ * capability a caller is expected to probe for, as it probes for any route a host may lack.
+ */
+export declare class HostedBlobWritesNotServed extends HostedRouteNotServed {
+    constructor(route: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/hosted-client/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/hosted-client/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD,gDAAgD;AAChD,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AAEnD;;;;;GAKG;AACH,qBAAa,oBAAqB,SAAQ,WAAW;IACnD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;gBACX,KAAK,EAAE,MAAM;CAK1B;AAED,2DAA2D;AAC3D,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,oBAAoB,CAE9E;AAED;;;;;;GAMG;AACH,qBAAa,yBAA0B,SAAQ,oBAAoB;gBACrD,KAAK,EAAE,MAAM;CAI1B"}

package/dist/hosted-client/errors.js

@@ -0,0 +1,35 @@
+import { RemoteError } from "../remote-error.js";
+/** The code of {@link HostedRouteNotServed}. */
+export const ROUTE_NOT_SERVED = "ROUTE_NOT_SERVED";
+/**
+ * The host does not have this route yet: the sync family's own unknown-route answer,
+ * `404 {"error":"not_found"}` and nothing else, which a gateway from before the route sends. It
+ * is deterministic for that host version, so it is never retried; a later host serves the route.
+ * Its status stays `404`, and it names the route asked for.
+ */
+export class HostedRouteNotServed extends RemoteError {
+    route;
+    constructor(route) {
+        super(`the host does not serve ${route}`, ROUTE_NOT_SERVED, 404);
+        this.name = "HostedRouteNotServed";
+        this.route = route;
+    }
+}
+/** True when `error` is a {@link HostedRouteNotServed}. */
+export function isRouteNotServed(error) {
+    return error instanceof HostedRouteNotServed;
+}
+/**
+ * The host serves this bundle no blob writes (`blobWrites` is not `allowed` in its capabilities,
+ * as an older host's answer decodes). A {@link HostedRouteNotServed}, so `isRouteNotServed` is
+ * true; thrown before anything is journaled or sent. Unlike `write()`, whose bundle without
+ * writes is the result `refused: read_only`, a blob write throws: the blob routes are a newer
+ * capability a caller is expected to probe for, as it probes for any route a host may lack.
+ */
+export class HostedBlobWritesNotServed extends HostedRouteNotServed {
+    constructor(route) {
+        super(route);
+        this.name = "HostedBlobWritesNotServed";
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/hosted-client/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/hosted-client/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD,gDAAgD;AAChD,MAAM,CAAC,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AAEnD;;;;;GAKG;AACH,MAAM,OAAO,oBAAqB,SAAQ,WAAW;IAC1C,KAAK,CAAS;IACvB,YAAY,KAAa;QACvB,KAAK,CAAC,2BAA2B,KAAK,EAAE,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAC;QACjE,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF;AAED,2DAA2D;AAC3D,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,KAAK,YAAY,oBAAoB,CAAC;AAC/C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,yBAA0B,SAAQ,oBAAoB;IACjE,YAAY,KAAa;QACvB,KAAK,CAAC,KAAK,CAAC,CAAC;QACb,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF"}