@superblocksteam/gateway 2.0.0-SNAPSHOT.1d4c72c0ab174c21

package/dist/sabs/agent-facing-text.js

@@ -0,0 +1,165 @@
+/**
+ * Sanitize text that may be echoed into Claude / MCP tool results.
+ *
+ * Downstream orchestrator and integration payloads can carry secrets, control
+ * characters, and prompt-injection wrappers. Strip those before any agent sees
+ * the string.
+ */
+/** JWT / opaque bearer-ish tokens and common vendor API key shapes. */
+const SECRET_PATTERNS = [
+    /\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\b/g,
+    // Vendor keys often embed hyphens inside the secret (sk-proj-..., sk-ant-...).
+    /\b(?:sk|rk|pk)[-_][A-Za-z0-9_-]{16,}\b/gi,
+    /\bsbp_[A-Za-z0-9]{16,}\b/g,
+    /\bAKIA[0-9A-Z]{16}\b/g,
+    /\bBearer\s+[A-Za-z0-9._~+/=-]{16,}\b/gi,
+    // Plain assignments: password=... / api_key: ...
+    /(?<=(?:password|passwd|secret|token|api[_-]?key)\s*[:=]\s*)["']?[^\s"',;]{8,}["']?/gi,
+    // JSON-ish quoted keys: "password": "..."
+    /(?<=["'](?:password|passwd|secret|token|api[_-]?key)["']\s*:\s*)["'][^"']{4,}["']/gi,
+];
+const SECRET_FIELD_KEYS = new Set([
+    "api_key",
+    "apikey",
+    "authorization",
+    "ca",
+    "cert",
+    "connectionstring",
+    "dsn",
+    "googleserviceaccount",
+    "masterkey",
+    "passwd",
+    "password",
+    "secret",
+    "token",
+    "urlstring",
+]);
+/**
+ * Field names that end in a credential word but carry a cursor or a count.
+ * Redacting these would hide the paging state Clark needs to keep listing.
+ */
+const CURSOR_FIELD_KEYS = new Set([
+    "continuationtoken",
+    "nextpagetoken",
+    "nexttoken",
+    "pagetoken",
+    "pagingtoken",
+    "resumetoken",
+    "synctoken",
+    "tokencount",
+]);
+const REDACTED = "[REDACTED]";
+/**
+ * Removes C0 control characters (keeps tab/LF/CR) so logs and prompts stay printable.
+ * Implemented without a control-character regex so eslint no-control-regex stays clean.
+ */
+export function stripUnsafeChars(text) {
+    let out = "";
+    for (let i = 0; i < text.length; i += 1) {
+        const code = text.charCodeAt(i);
+        if (code === 9 || code === 10 || code === 13) {
+            out += text[i];
+            continue;
+        }
+        if (code < 32 || code === 127) {
+            continue;
+        }
+        out += text[i];
+    }
+    return out;
+}
+/**
+ * Replaces common secret-shaped substrings with a fixed redaction token.
+ */
+export function scrubSecrets(text) {
+    let next = text;
+    for (const pattern of SECRET_PATTERNS) {
+        next = next.replace(pattern, REDACTED);
+    }
+    return next;
+}
+/**
+ * Full agent-facing sanitize: scrub secrets, strip controls, neutralize backticks.
+ */
+export function sanitizeAgentFacingText(text) {
+    return scrubSecrets(stripUnsafeChars(text)).replace(/`/g, "'");
+}
+function isSecretFieldKey(key) {
+    const normalized = key.toLowerCase().replace(/[^a-z0-9]/g, "");
+    if (CURSOR_FIELD_KEYS.has(normalized)) {
+        return false;
+    }
+    return (SECRET_FIELD_KEYS.has(key.toLowerCase()) ||
+        SECRET_FIELD_KEYS.has(normalized) ||
+        normalized.endsWith("password") ||
+        normalized.endsWith("passphrase") ||
+        normalized.endsWith("secret") ||
+        normalized.endsWith("token") ||
+        normalized.endsWith("apikey") ||
+        normalized.includes("accesskey") ||
+        normalized.includes("certificate") ||
+        normalized.includes("password") ||
+        normalized.includes("privatekey") ||
+        normalized.includes("secret"));
+}
+/**
+ * Deep-sanitize string leaves in tool results returned to Clark / MCP.
+ *
+ * A secret-named field is redacted whole, since the value need not look like a
+ * secret to be one, and a wrapper around it is no safer than the bare value: an
+ * object or array under `password` is replaced rather than walked, or its leaves
+ * would pass under names of their own that read as harmless.
+ *
+ * Booleans are the exception. A flag such as `hasPassword` reports whether a
+ * credential exists rather than carrying it, and redacting it hides state Clark
+ * needs without hiding a secret.
+ */
+export function sanitizeAgentFacingValue(value) {
+    if (typeof value === "string") {
+        return sanitizeAgentFacingText(value);
+    }
+    if (Array.isArray(value)) {
+        return value.map((entry) => sanitizeAgentFacingValue(entry));
+    }
+    if (value && typeof value === "object") {
+        const out = {};
+        for (const [key, entry] of Object.entries(value)) {
+            const carriesNoSecret = typeof entry === "boolean" || entry == null;
+            if (!carriesNoSecret && isSecretFieldKey(key)) {
+                out[key] = REDACTED;
+                continue;
+            }
+            out[key] = sanitizeAgentFacingValue(entry);
+        }
+        return out;
+    }
+    return value;
+}
+function isPemMaterial(value) {
+    return typeof value === "string" && /-----BEGIN [A-Z0-9 ]+-----/.test(value);
+}
+/** Deep-sanitize a configuration while omitting credential fields entirely. */
+export function sanitizeAgentFacingConfiguration(value) {
+    return sanitizeConfigurationValue(value);
+}
+function sanitizeConfigurationValue(value) {
+    if (Array.isArray(value)) {
+        return value
+            .filter((entry) => !isPemMaterial(entry))
+            .map(sanitizeConfigurationValue);
+    }
+    if (!value || typeof value !== "object") {
+        return sanitizeAgentFacingValue(value);
+    }
+    const out = {};
+    for (const [key, entry] of Object.entries(value)) {
+        if (typeof entry !== "boolean" &&
+            entry != null &&
+            (isSecretFieldKey(key) || isPemMaterial(entry))) {
+            continue;
+        }
+        out[key] = sanitizeConfigurationValue(entry);
+    }
+    return out;
+}
+//# sourceMappingURL=agent-facing-text.js.map

package/dist/sabs/agent-facing-text.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-facing-text.js","sourceRoot":"","sources":["../../src/sabs/agent-facing-text.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,uEAAuE;AACvE,MAAM,eAAe,GAAa;IAChC,oEAAoE;IACpE,+EAA+E;IAC/E,0CAA0C;IAC1C,2BAA2B;IAC3B,uBAAuB;IACvB,wCAAwC;IACxC,iDAAiD;IACjD,sFAAsF;IACtF,0CAA0C;IAC1C,qFAAqF;CACtF,CAAC;AAEF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,SAAS;IACT,QAAQ;IACR,eAAe;IACf,IAAI;IACJ,MAAM;IACN,kBAAkB;IAClB,KAAK;IACL,sBAAsB;IACtB,WAAW;IACX,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,OAAO;IACP,WAAW;CACZ,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,mBAAmB;IACnB,eAAe;IACf,WAAW;IACX,WAAW;IACX,aAAa;IACb,aAAa;IACb,WAAW;IACX,YAAY;CACb,CAAC,CAAC;AAEH,MAAM,QAAQ,GAAG,YAAY,CAAC;AAE9B;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;YAC7C,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,IAAI,GAAG,EAAE,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAC9B,SAAS;QACX,CAAC;QACD,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,IAAI,GAAG,IAAI,CAAC;IAChB,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAY;IAClD,OAAO,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW;IACnC,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAC/D,IAAI,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,CACL,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QACxC,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC;QACjC,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC/B,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC;QACjC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC7B,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC;QAC5B,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC7B,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC;QAChC,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC;QAClC,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC/B,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC;QACjC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAC9B,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAAc;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,uBAAuB,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CACvC,KAAgC,CACjC,EAAE,CAAC;YACF,MAAM,eAAe,GAAG,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,IAAI,IAAI,CAAC;YACpE,IAAI,CAAC,eAAe,IAAI,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC9C,GAAG,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC;gBACpB,SAAS;YACX,CAAC;YACD,GAAG,CAAC,GAAG,CAAC,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,4BAA4B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC/E,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,gCAAgC,CAC9C,KAA8B;IAE9B,OAAO,0BAA0B,CAAC,KAAK,CAA4B,CAAC;AACtE,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAc;IAChD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK;aACT,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;aACxC,GAAG,CAAC,0BAA0B,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,wBAAwB,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QAC5E,IACE,OAAO,KAAK,KAAK,SAAS;YAC1B,KAAK,IAAI,IAAI;YACb,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC,EAC/C,CAAC;YACD,SAAS;QACX,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/sabs/app-state.d.ts

@@ -0,0 +1,126 @@
+import type { RecentToolRun } from "../capabilities/types.js";
+import type { FinishedTurn, RetryAction, TurnDecision } from "./session-peer.js";
+/**
+ * How long a dead start stays the answer for an application.
+ *
+ * Long enough to outlive the poll that follows a failed prompt, short enough
+ * that an app abandoned after a failure is not still reporting it later.
+ */
+export declare const DEFAULT_FAILED_START_TTL_MS: number;
+/**
+ * Cap on remembered dead starts, because nothing else evicts: an app whose
+ * start failed and that is never retried would otherwise hold its entry for
+ * the life of the process.
+ */
+export declare const MAX_FAILED_STARTS = 256;
+/**
+ * How long an acknowledged start may go without its live owner renewing it.
+ * Long enough for a cold sandbox boot, short enough that a background start
+ * killed without recording anything stops pinning the app at "building".
+ */
+export declare const DEFAULT_PENDING_START_TTL_MS: number;
+/**
+ * Whose prompt died. Scoped to the caller because `connectLiveEdit` is where
+ * Superblocks authorizes them, per application - so a caller with no rights to
+ * this one still reaches that path, and a record keyed any wider becomes the
+ * status everyone who does have rights reads.
+ */
+export type FailedStartScope = {
+    applicationId: string;
+    branch?: string;
+    organizationId: string;
+    userId: string;
+};
+type FailedStart = FinishedTurn & {
+    branch?: string;
+};
+export type PendingPlan = {
+    branch?: string;
+    messageId?: string;
+    plan: string;
+    title?: string;
+};
+export type PendingDecision = {
+    branch?: string;
+    decision: TurnDecision;
+    recentRuns?: RecentToolRun[];
+    reply: string;
+};
+export type AppStateOptions = {
+    failedStartTtlMs?: number;
+    maxFailedStarts?: number;
+    now?: () => number;
+    pendingStartTtlMs?: number;
+};
+/**
+ * What Gateway remembers about an application between turns.
+ *
+ * None of this is transport state, and none of it can be pushed onto the
+ * caller. Each entry compensates for something the protocol does not carry:
+ *
+ * - The plan, because approving one means re-sending it as `planContext`, and
+ *   a caller asked to echo markdown back paraphrases it - which silently
+ *   changes what gets built.
+ * - The dead start, because the call that failed has already returned. It is
+ *   the *next* call - a poll, or `get_app` - that would otherwise report
+ *   `unknown` and preview the untouched starter template as a finished app.
+ *
+ * It lives here rather than on the session peer so a socket owns a socket. It
+ * is a concrete class with no optional members: a collaborator that is always
+ * present cannot be confused at a call site with a fact that is absent.
+ */
+export declare class AppState {
+    private readonly acceptedStarts;
+    private readonly plans;
+    private readonly decisions;
+    private readonly publishes;
+    private readonly failedStarts;
+    private readonly pendingStarts;
+    private readonly failedStartTtlMs;
+    private readonly maxFailedStarts;
+    private readonly now;
+    private readonly pendingStartTtlMs;
+    private revision;
+    constructor(options?: AppStateOptions);
+    pendingPlan(applicationId: string, requestedBranch?: string): PendingPlan | undefined;
+    setPendingPlan(applicationId: string, plan: PendingPlan): void;
+    pendingDecision(applicationId: string, requestedBranch?: string): PendingDecision | undefined;
+    setPendingDecision(applicationId: string, decision: PendingDecision): void;
+    /**
+     * The commit whose deploy `publish_app` handed back still running, so
+     * `check_publish_progress` can follow it without the caller carrying the id.
+     */
+    publishInFlight(applicationId: string): string | undefined;
+    publishStartedAtMs(applicationId: string, claim: number): number | undefined;
+    setPublishInFlight(applicationId: string, commitId: string, startedAtMs?: number): number;
+    claimPublishInFlight(applicationId: string, commitId: string, startedAtMs?: number): number;
+    noteMissingPublishStatus(applicationId: string, claim: number, atMs: number): number | undefined;
+    noteVisiblePublishStatus(applicationId: string, claim: number): void;
+    clearPublishInFlight(applicationId: string, claim: number): void;
+    /**
+     * Drop the plan alone, for a turn that ended on a decision that is not one.
+     * The decision it ended on is written separately and must survive this.
+     */
+    clearPendingPlan(applicationId: string): void;
+    /** Both go together: a plan is one kind of decision Clark waits on. */
+    clearPending(applicationId: string): void;
+    markTurnStarted(): number;
+    failedStart(scope: FailedStartScope, newerThanRevision?: number): FailedStart | undefined;
+    recordFailedStart(scope: FailedStartScope, turn: FinishedTurn, revision?: number): void;
+    claimReplacementEntitlement(scope: Omit<FailedStartScope, "branch">, replyWhileClaimed: string): (() => void) | undefined;
+    /** Forget every caller's dead start for the accepted application branch. */
+    clearFailedStarts(applicationId: string, branch?: string, throughRevision?: number): void;
+    pendingStart(scope: FailedStartScope, idempotencyKey?: string, token?: number): {
+        idempotencyKey?: string;
+        retryAction?: RetryAction;
+        token: number;
+    } | undefined;
+    recordPendingStart(scope: FailedStartScope, value?: {
+        idempotencyKey?: string;
+        retryAction?: RetryAction;
+    }): number;
+    keepPendingStartAlive(scope: FailedStartScope, token: number): () => void;
+    clearPendingStart(scope: FailedStartScope, idempotencyKey?: string, throughRevision?: number, token?: number): boolean;
+    clearPendingStartsThrough(applicationId: string, revision: number): void;
+}
+export {};

package/dist/sabs/app-state.js

@@ -0,0 +1,332 @@
+/**
+ * How long a dead start stays the answer for an application.
+ *
+ * Long enough to outlive the poll that follows a failed prompt, short enough
+ * that an app abandoned after a failure is not still reporting it later.
+ */
+export const DEFAULT_FAILED_START_TTL_MS = 30 * 60 * 1000;
+/**
+ * Cap on remembered dead starts, because nothing else evicts: an app whose
+ * start failed and that is never retried would otherwise hold its entry for
+ * the life of the process.
+ */
+export const MAX_FAILED_STARTS = 256;
+const DEFAULT_BRANCH_KEY = "default";
+/**
+ * How long an acknowledged start may go without its live owner renewing it.
+ * Long enough for a cold sandbox boot, short enough that a background start
+ * killed without recording anything stops pinning the app at "building".
+ */
+export const DEFAULT_PENDING_START_TTL_MS = 5 * 60 * 1000;
+/**
+ * What Gateway remembers about an application between turns.
+ *
+ * None of this is transport state, and none of it can be pushed onto the
+ * caller. Each entry compensates for something the protocol does not carry:
+ *
+ * - The plan, because approving one means re-sending it as `planContext`, and
+ *   a caller asked to echo markdown back paraphrases it - which silently
+ *   changes what gets built.
+ * - The dead start, because the call that failed has already returned. It is
+ *   the *next* call - a poll, or `get_app` - that would otherwise report
+ *   `unknown` and preview the untouched starter template as a finished app.
+ *
+ * It lives here rather than on the session peer so a socket owns a socket. It
+ * is a concrete class with no optional members: a collaborator that is always
+ * present cannot be confused at a call site with a fact that is absent.
+ */
+export class AppState {
+    acceptedStarts = new Map();
+    plans = new Map();
+    decisions = new Map();
+    publishes = new Map();
+    failedStarts = new Map();
+    pendingStarts = new Map();
+    failedStartTtlMs;
+    maxFailedStarts;
+    now;
+    pendingStartTtlMs;
+    revision = 0;
+    constructor(options = {}) {
+        this.failedStartTtlMs =
+            options.failedStartTtlMs ?? DEFAULT_FAILED_START_TTL_MS;
+        this.maxFailedStarts = options.maxFailedStarts ?? MAX_FAILED_STARTS;
+        this.now = options.now ?? (() => Date.now());
+        this.pendingStartTtlMs =
+            options.pendingStartTtlMs ?? DEFAULT_PENDING_START_TTL_MS;
+    }
+    pendingPlan(applicationId, requestedBranch) {
+        const plan = this.plans.get(applicationId);
+        return requestedBranch === undefined || plan?.branch === requestedBranch
+            ? plan
+            : undefined;
+    }
+    setPendingPlan(applicationId, plan) {
+        this.plans.set(applicationId, plan);
+    }
+    pendingDecision(applicationId, requestedBranch) {
+        const decision = this.decisions.get(applicationId);
+        return requestedBranch === undefined || decision?.branch === requestedBranch
+            ? decision
+            : undefined;
+    }
+    setPendingDecision(applicationId, decision) {
+        this.decisions.set(applicationId, decision);
+    }
+    /**
+     * The commit whose deploy `publish_app` handed back still running, so
+     * `check_publish_progress` can follow it without the caller carrying the id.
+     */
+    publishInFlight(applicationId) {
+        return this.publishes.get(applicationId)?.commitId;
+    }
+    publishStartedAtMs(applicationId, claim) {
+        const publish = this.publishes.get(applicationId);
+        return publish?.claim === claim ? publish.startedAtMs : undefined;
+    }
+    setPublishInFlight(applicationId, commitId, startedAtMs = this.now()) {
+        const claim = ++this.revision;
+        this.publishes.set(applicationId, {
+            claim,
+            commitId,
+            missingSinceMs: undefined,
+            startedAtMs,
+        });
+        return claim;
+    }
+    claimPublishInFlight(applicationId, commitId, startedAtMs = this.now()) {
+        const current = this.publishes.get(applicationId);
+        const claim = ++this.revision;
+        this.publishes.set(applicationId, {
+            claim,
+            commitId,
+            missingSinceMs: current?.commitId === commitId ? current.missingSinceMs : undefined,
+            startedAtMs: current?.commitId === commitId ? current.startedAtMs : startedAtMs,
+        });
+        return claim;
+    }
+    noteMissingPublishStatus(applicationId, claim, atMs) {
+        const publish = this.publishes.get(applicationId);
+        if (publish?.claim !== claim) {
+            return undefined;
+        }
+        publish.missingSinceMs ??= atMs;
+        return Math.max(0, atMs - publish.missingSinceMs);
+    }
+    noteVisiblePublishStatus(applicationId, claim) {
+        const publish = this.publishes.get(applicationId);
+        if (publish?.claim === claim) {
+            publish.missingSinceMs = undefined;
+        }
+    }
+    clearPublishInFlight(applicationId, claim) {
+        if (this.publishes.get(applicationId)?.claim === claim) {
+            this.publishes.delete(applicationId);
+        }
+    }
+    /**
+     * Drop the plan alone, for a turn that ended on a decision that is not one.
+     * The decision it ended on is written separately and must survive this.
+     */
+    clearPendingPlan(applicationId) {
+        this.plans.delete(applicationId);
+    }
+    /** Both go together: a plan is one kind of decision Clark waits on. */
+    clearPending(applicationId) {
+        this.plans.delete(applicationId);
+        this.decisions.delete(applicationId);
+    }
+    markTurnStarted() {
+        return ++this.revision;
+    }
+    failedStart(scope, newerThanRevision) {
+        const keys = scope.branch === undefined
+            ? [...this.failedStarts.keys()].reverse()
+            : [failedStartKey(scope)];
+        const prefix = failedStartPrefix(scope);
+        let latest;
+        let latestRevision = Number.NEGATIVE_INFINITY;
+        for (const key of keys) {
+            if (!key.startsWith(prefix)) {
+                continue;
+            }
+            const entry = this.failedStarts.get(key);
+            if (!entry) {
+                continue;
+            }
+            if (this.now() - entry.atMs >= this.failedStartTtlMs) {
+                this.failedStarts.delete(key);
+                continue;
+            }
+            if (newerThanRevision !== undefined &&
+                entry.revision <= newerThanRevision) {
+                continue;
+            }
+            if (entry.revision > latestRevision) {
+                latest = entry.turn;
+                latestRevision = entry.revision;
+            }
+        }
+        return latest;
+    }
+    recordFailedStart(scope, turn, revision = this.markTurnStarted()) {
+        const key = failedStartKey(scope);
+        const acceptedRevision = this.acceptedStarts.get(acceptedStartKey(scope.applicationId, scope.branch));
+        if (acceptedRevision !== undefined && revision <= acceptedRevision) {
+            return;
+        }
+        const current = this.failedStarts.get(key);
+        if (current && current.revision > revision) {
+            return;
+        }
+        // Re-inserted rather than updated in place, so this key becomes the newest
+        // and the eviction below stays in insertion order.
+        this.failedStarts.delete(key);
+        this.failedStarts.set(key, {
+            atMs: this.now(),
+            revision,
+            turn: {
+                ...(scope.branch === undefined ? {} : { branch: scope.branch }),
+                ...turn,
+            },
+        });
+        for (const oldest of this.failedStarts.keys()) {
+            if (this.failedStarts.size <= this.maxFailedStarts) {
+                break;
+            }
+            this.failedStarts.delete(oldest);
+        }
+    }
+    claimReplacementEntitlement(scope, replyWhileClaimed) {
+        const turn = this.failedStart(scope);
+        if (turn?.recoveryAction !== "start_new_app") {
+            return undefined;
+        }
+        const replyBeforeConsumption = turn.reply;
+        delete turn.recoveryAction;
+        turn.reply = replyWhileClaimed;
+        return () => {
+            turn.recoveryAction = "start_new_app";
+            turn.reply = replyBeforeConsumption;
+        };
+    }
+    /** Forget every caller's dead start for the accepted application branch. */
+    clearFailedStarts(applicationId, branch, throughRevision = Number.POSITIVE_INFINITY) {
+        const acceptedKey = acceptedStartKey(applicationId, branch);
+        const acceptedRevision = this.acceptedStarts.get(acceptedKey);
+        if (acceptedRevision === undefined || throughRevision > acceptedRevision) {
+            this.acceptedStarts.delete(acceptedKey);
+            this.acceptedStarts.set(acceptedKey, throughRevision);
+        }
+        const suffix = `\u0000${failedStartBranchKey(branch)}`;
+        for (const key of [...this.failedStarts.keys()]) {
+            const entry = this.failedStarts.get(key);
+            if (entry &&
+                entry.revision <= throughRevision &&
+                key.startsWith(`${applicationId}\u0000`) &&
+                key.endsWith(suffix)) {
+                this.failedStarts.delete(key);
+            }
+        }
+    }
+    pendingStart(scope, idempotencyKey, token) {
+        const keys = scope.branch === undefined
+            ? [...this.pendingStarts.keys()].reverse()
+            : [failedStartKey(scope)];
+        const prefix = failedStartPrefix(scope);
+        for (const key of keys) {
+            if (!key.startsWith(prefix)) {
+                continue;
+            }
+            const entry = this.pendingStarts.get(key);
+            if (!entry) {
+                continue;
+            }
+            if (this.now() - entry.atMs >= this.pendingStartTtlMs) {
+                this.pendingStarts.delete(key);
+                continue;
+            }
+            if ((idempotencyKey !== undefined &&
+                entry.idempotencyKey !== idempotencyKey) ||
+                (token !== undefined && entry.revision !== token)) {
+                continue;
+            }
+            return {
+                ...(entry.idempotencyKey === undefined
+                    ? {}
+                    : { idempotencyKey: entry.idempotencyKey }),
+                ...(entry.retryAction ? { retryAction: entry.retryAction } : {}),
+                token: entry.revision,
+            };
+        }
+        return undefined;
+    }
+    recordPendingStart(scope, value = {}) {
+        const now = this.now();
+        for (const [pendingKey, pending] of this.pendingStarts) {
+            if (now - pending.atMs >= this.pendingStartTtlMs) {
+                this.pendingStarts.delete(pendingKey);
+            }
+        }
+        const key = failedStartKey(scope);
+        this.pendingStarts.delete(key);
+        const revision = ++this.revision;
+        this.pendingStarts.set(key, {
+            atMs: now,
+            revision,
+            ...value,
+        });
+        return revision;
+    }
+    keepPendingStartAlive(scope, token) {
+        const key = failedStartKey(scope);
+        const timer = setInterval(() => {
+            const pending = this.pendingStarts.get(key);
+            if (pending?.revision !== token) {
+                clearInterval(timer);
+                return;
+            }
+            pending.atMs = this.now();
+        }, Math.max(1, Math.floor(this.pendingStartTtlMs / 2)));
+        timer.unref();
+        return () => clearInterval(timer);
+    }
+    clearPendingStart(scope, idempotencyKey, throughRevision = Number.POSITIVE_INFINITY, token) {
+        const key = failedStartKey(scope);
+        const pending = this.pendingStarts.get(key);
+        if (pending &&
+            pending.revision <= throughRevision &&
+            (token === undefined || pending.revision === token) &&
+            (idempotencyKey === undefined ||
+                pending.idempotencyKey === idempotencyKey)) {
+            return this.pendingStarts.delete(key);
+        }
+        return false;
+    }
+    clearPendingStartsThrough(applicationId, revision) {
+        for (const [key, pending] of this.pendingStarts) {
+            if (pending.revision <= revision &&
+                key.startsWith(`${applicationId}\u0000`)) {
+                this.pendingStarts.delete(key);
+            }
+        }
+    }
+}
+/**
+ * Separated by NUL because no id can contain one. Any printable separator is a
+ * character an id could carry, and an id that carried it would key two
+ * different callers to the same entry.
+ */
+function failedStartKey(scope) {
+    return `${failedStartPrefix(scope)}${failedStartBranchKey(scope.branch)}`;
+}
+function acceptedStartKey(applicationId, branch) {
+    return `${applicationId}\u0000${failedStartBranchKey(branch)}`;
+}
+function failedStartPrefix(scope) {
+    return `${scope.applicationId}\u0000${scope.organizationId}\u0000${scope.userId}\u0000`;
+}
+function failedStartBranchKey(branch) {
+    return branch === undefined ? DEFAULT_BRANCH_KEY : `branch:${branch}`;
+}
+//# sourceMappingURL=app-state.js.map

package/dist/sabs/app-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-state.js","sourceRoot":"","sources":["../../src/sabs/app-state.ts"],"names":[],"mappings":"AAOA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE1D;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAErC,MAAM,kBAAkB,GAAG,SAAS,CAAC;AAErC;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAsC1D;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,QAAQ;IACF,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;IACvC,SAAS,GAAG,IAAI,GAAG,EAA2B,CAAC;IAC/C,SAAS,GAAG,IAAI,GAAG,EAQjC,CAAC;IACa,YAAY,GAAG,IAAI,GAAG,EAGpC,CAAC;IACa,aAAa,GAAG,IAAI,GAAG,EAQrC,CAAC;IACa,gBAAgB,CAAS;IACzB,eAAe,CAAS;IACxB,GAAG,CAAe;IAClB,iBAAiB,CAAS;IACnC,QAAQ,GAAG,CAAC,CAAC;IAErB,YAAY,UAA2B,EAAE;QACvC,IAAI,CAAC,gBAAgB;YACnB,OAAO,CAAC,gBAAgB,IAAI,2BAA2B,CAAC;QAC1D,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,iBAAiB,CAAC;QACpE,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,iBAAiB;YACpB,OAAO,CAAC,iBAAiB,IAAI,4BAA4B,CAAC;IAC9D,CAAC;IAED,WAAW,CACT,aAAqB,EACrB,eAAwB;QAExB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC3C,OAAO,eAAe,KAAK,SAAS,IAAI,IAAI,EAAE,MAAM,KAAK,eAAe;YACtE,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAED,cAAc,CAAC,aAAqB,EAAE,IAAiB;QACrD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC;IAED,eAAe,CACb,aAAqB,EACrB,eAAwB;QAExB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACnD,OAAO,eAAe,KAAK,SAAS,IAAI,QAAQ,EAAE,MAAM,KAAK,eAAe;YAC1E,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAED,kBAAkB,CAAC,aAAqB,EAAE,QAAyB;QACjE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAED;;;OAGG;IACH,eAAe,CAAC,aAAqB;QACnC,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,QAAQ,CAAC;IACrD,CAAC;IAED,kBAAkB,CAAC,aAAqB,EAAE,KAAa;QACrD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAClD,OAAO,OAAO,EAAE,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;IACpE,CAAC;IAED,kBAAkB,CAChB,aAAqB,EACrB,QAAgB,EAChB,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE;QAExB,MAAM,KAAK,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,aAAa,EAAE;YAChC,KAAK;YACL,QAAQ;YACR,cAAc,EAAE,SAAS;YACzB,WAAW;SACZ,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACf,CAAC;IAED,oBAAoB,CAClB,aAAqB,EACrB,QAAgB,EAChB,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE;QAExB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,aAAa,EAAE;YAChC,KAAK;YACL,QAAQ;YACR,cAAc,EACZ,OAAO,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS;YACrE,WAAW,EACT,OAAO,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW;SACrE,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACf,CAAC;IAED,wBAAwB,CACtB,aAAqB,EACrB,KAAa,EACb,IAAY;QAEZ,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAClD,IAAI,OAAO,EAAE,KAAK,KAAK,KAAK,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,CAAC,cAAc,KAAK,IAAI,CAAC;QAChC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACpD,CAAC;IAED,wBAAwB,CAAC,aAAqB,EAAE,KAAa;QAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAClD,IAAI,OAAO,EAAE,KAAK,KAAK,KAAK,EAAE,CAAC;YAC7B,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC;QACrC,CAAC;IACH,CAAC;IAED,oBAAoB,CAAC,aAAqB,EAAE,KAAa;QACvD,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,KAAK,KAAK,KAAK,EAAE,CAAC;YACvD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,gBAAgB,CAAC,aAAqB;QACpC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IACnC,CAAC;IAED,uEAAuE;IACvE,YAAY,CAAC,aAAqB;QAChC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACjC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IACvC,CAAC;IAED,eAAe;QACb,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC;IACzB,CAAC;IAED,WAAW,CACT,KAAuB,EACvB,iBAA0B;QAE1B,MAAM,IAAI,GACR,KAAK,CAAC,MAAM,KAAK,SAAS;YACxB,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;YACzC,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9B,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,MAA+B,CAAC;QACpC,IAAI,cAAc,GAAG,MAAM,CAAC,iBAAiB,CAAC;QAC9C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5B,SAAS;YACX,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACzC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACrD,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC9B,SAAS;YACX,CAAC;YACD,IACE,iBAAiB,KAAK,SAAS;gBAC/B,KAAK,CAAC,QAAQ,IAAI,iBAAiB,EACnC,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IAAI,KAAK,CAAC,QAAQ,GAAG,cAAc,EAAE,CAAC;gBACpC,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC;gBACpB,cAAc,GAAG,KAAK,CAAC,QAAQ,CAAC;YAClC,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,iBAAiB,CACf,KAAuB,EACvB,IAAkB,EAClB,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE;QAEjC,MAAM,GAAG,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,gBAAgB,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAC9C,gBAAgB,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,CACpD,CAAC;QACF,IAAI,gBAAgB,KAAK,SAAS,IAAI,QAAQ,IAAI,gBAAgB,EAAE,CAAC;YACnE,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,OAAO,IAAI,OAAO,CAAC,QAAQ,GAAG,QAAQ,EAAE,CAAC;YAC3C,OAAO;QACT,CAAC;QACD,2EAA2E;QAC3E,mDAAmD;QACnD,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE;YACzB,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE;YAChB,QAAQ;YACR,IAAI,EAAE;gBACJ,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC/D,GAAG,IAAI;aACR;SACF,CAAC,CAAC;QACH,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;YAC9C,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;gBACnD,MAAM;YACR,CAAC;YACD,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,2BAA2B,CACzB,KAAuC,EACvC,iBAAyB;QAEzB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,IAAI,EAAE,cAAc,KAAK,eAAe,EAAE,CAAC;YAC7C,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,sBAAsB,GAAG,IAAI,CAAC,KAAK,CAAC;QAC1C,OAAO,IAAI,CAAC,cAAc,CAAC;QAC3B,IAAI,CAAC,KAAK,GAAG,iBAAiB,CAAC;QAC/B,OAAO,GAAG,EAAE;YACV,IAAI,CAAC,cAAc,GAAG,eAAe,CAAC;YACtC,IAAI,CAAC,KAAK,GAAG,sBAAsB,CAAC;QACtC,CAAC,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,iBAAiB,CACf,aAAqB,EACrB,MAAe,EACf,eAAe,GAAG,MAAM,CAAC,iBAAiB;QAE1C,MAAM,WAAW,GAAG,gBAAgB,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QAC5D,MAAM,gBAAgB,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC9D,IAAI,gBAAgB,KAAK,SAAS,IAAI,eAAe,GAAG,gBAAgB,EAAE,CAAC;YACzE,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACxC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,MAAM,GAAG,SAAS,oBAAoB,CAAC,MAAM,CAAC,EAAE,CAAC;QACvD,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAChD,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACzC,IACE,KAAK;gBACL,KAAK,CAAC,QAAQ,IAAI,eAAe;gBACjC,GAAG,CAAC,UAAU,CAAC,GAAG,aAAa,QAAQ,CAAC;gBACxC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EACpB,CAAC;gBACD,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;IACH,CAAC;IAED,YAAY,CACV,KAAuB,EACvB,cAAuB,EACvB,KAAc;QAId,MAAM,IAAI,GACR,KAAK,CAAC,MAAM,KAAK,SAAS;YACxB,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;YAC1C,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9B,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACxC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5B,SAAS;YACX,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACtD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC/B,SAAS;YACX,CAAC;YACD,IACE,CAAC,cAAc,KAAK,SAAS;gBAC3B,KAAK,CAAC,cAAc,KAAK,cAAc,CAAC;gBAC1C,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,EACjD,CAAC;gBACD,SAAS;YACX,CAAC;YACD,OAAO;gBACL,GAAG,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS;oBACpC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC;gBAC7C,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChE,KAAK,EAAE,KAAK,CAAC,QAAQ;aACtB,CAAC;QACJ,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,kBAAkB,CAChB,KAAuB,EACvB,QAAgE,EAAE;QAElE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvD,IAAI,GAAG,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACjD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QACD,MAAM,GAAG,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,QAAQ,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE;YAC1B,IAAI,EAAE,GAAG;YACT,QAAQ;YACR,GAAG,KAAK;SACT,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,qBAAqB,CAAC,KAAuB,EAAE,KAAa;QAC1D,MAAM,GAAG,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,WAAW,CACvB,GAAG,EAAE;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5C,IAAI,OAAO,EAAE,QAAQ,KAAK,KAAK,EAAE,CAAC;gBAChC,aAAa,CAAC,KAAK,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YACD,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5B,CAAC,EACD,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,GAAG,CAAC,CAAC,CAAC,CACpD,CAAC;QACF,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,OAAO,GAAG,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,iBAAiB,CACf,KAAuB,EACvB,cAAuB,EACvB,eAAe,GAAG,MAAM,CAAC,iBAAiB,EAC1C,KAAc;QAEd,MAAM,GAAG,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5C,IACE,OAAO;YACP,OAAO,CAAC,QAAQ,IAAI,eAAe;YACnC,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC;YACnD,CAAC,cAAc,KAAK,SAAS;gBAC3B,OAAO,CAAC,cAAc,KAAK,cAAc,CAAC,EAC5C,CAAC;YACD,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,yBAAyB,CAAC,aAAqB,EAAE,QAAgB;QAC/D,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAChD,IACE,OAAO,CAAC,QAAQ,IAAI,QAAQ;gBAC5B,GAAG,CAAC,UAAU,CAAC,GAAG,aAAa,QAAQ,CAAC,EACxC,CAAC;gBACD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,KAAuB;IAC7C,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,GAAG,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;AAC5E,CAAC;AAED,SAAS,gBAAgB,CAAC,aAAqB,EAAE,MAAe;IAC9D,OAAO,GAAG,aAAa,SAAS,oBAAoB,CAAC,MAAM,CAAC,EAAE,CAAC;AACjE,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAuB;IAChD,OAAO,GAAG,KAAK,CAAC,aAAa,SAAS,KAAK,CAAC,cAAc,SAAS,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC1F,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAe;IAC3C,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,UAAU,MAAM,EAAE,CAAC;AACxE,CAAC"}