@trusty-squire/mcp 1.1.13 → 1.1.14-rc.10

package/dist/bot/broker/operator.js

@@ -0,0 +1,523 @@
+import { withBrokerAdmission } from "./admission-context.js";
+import { brokerBrowserCustody } from "./custody.js";
+import { timingSafeEqual, createHash, createHmac } from "node:crypto";
+import { z } from "zod";
+import { ApiClient } from "../../api-client.js";
+import { buildToolRegistry, findTool } from "../../tools/index.js";
+import { finishProvisionSession, forceFinishProvisionSession, sessionForCall, withProvisionSessionCall, } from "../session/lifecycle.js";
+import { preparePublicOAuthLoginTarget, withPreparedOAuthLoginTarget, } from "../provision-session.js";
+import { BrokerAuthority } from "./authority.js";
+import { BrokerRefusal, siteResources } from "./scheduler.js";
+import { forwarderId } from "./lineage.js";
+import { provenPreDispatchMutationFailure } from "../mutation-dispatch-evidence.js";
+class DeliveredPreDispatchFailure {
+    error;
+    constructor(error) {
+        this.error = error;
+    }
+}
+const capabilitySchema = z
+    .object({
+    cellId: z.string(),
+    browserEpoch: z.string(),
+    sessionId: z.string(),
+    targetId: z.string(),
+    leaseGeneration: z.string(),
+})
+    .strict();
+const callSchema = z
+    .object({
+    name: z.string(),
+    args: z.record(z.unknown()),
+    capability: capabilitySchema.optional(),
+})
+    .strict();
+const recoverySchema = callSchema.extend({
+    preDispatchFailure: z
+        .object({
+        requestId: z.string().min(1),
+        error: z.literal("stale_ref"),
+        dispatch: z.literal("not_dispatched"),
+    })
+        .strict()
+        .optional(),
+});
+const startConfirmationSchema = z.object({ capability: capabilitySchema }).strict();
+function remapSession(value, from, to) {
+    if (Array.isArray(value))
+        return value.map((item) => remapSession(item, from, to));
+    if (value !== null && typeof value === "object")
+        return Object.fromEntries(Object.entries(value).map(([key, item]) => [
+            key,
+            key === "session_id" && item === from ? to : remapSession(item, from, to),
+        ]));
+    return value;
+}
+function canonicalJson(value) {
+    if (Array.isArray(value))
+        return `[${value.map(canonicalJson).join(",")}]`;
+    if (value !== null && typeof value === "object") {
+        const record = value;
+        return `{${Object.keys(record)
+            .sort()
+            .map((key) => `${JSON.stringify(key)}:${canonicalJson(record[key])}`)
+            .join(",")}}`;
+    }
+    return JSON.stringify(value) ?? "null";
+}
+function journalForwarderId(principal) {
+    if (principal.forwarderId === undefined)
+        throw new BrokerRefusal("unauthorized", "Forwarder lineage is required for journal custody");
+    return principal.forwarderId;
+}
+function dispatchDetail(principal, operation, inputHashValue, start = false) {
+    return {
+        forwarderId: journalForwarderId(principal),
+        ...(start ? { start: true } : {}),
+        operation,
+        inputHash: inputHashValue,
+    };
+}
+async function withBrokerAuditContext(api, taskId, invocationId, operation) {
+    return await api.withAuditContext({ taskId, invocationId, purpose: taskId }, operation);
+}
+export function reconciliationOutcome(operation, result) {
+    if (operation !== "operate_pay" || result === null || typeof result !== "object")
+        return { status: "completed" };
+    const payment = result;
+    if (payment.status === "payment_submitted")
+        return { status: "done" };
+    if (payment.status !== "payment_3ds_required" && payment.status !== "payment_outcome_unknown")
+        return { status: "completed" };
+    const outcome = { status: payment.status };
+    if (payment.next !== null && typeof payment.next === "object") {
+        const next = payment.next;
+        if (next.tool === "operate_payment_status" &&
+            typeof next.wait_seconds === "number" &&
+            Number.isSafeInteger(next.wait_seconds) &&
+            next.wait_seconds >= 0)
+            outcome.next = { tool: "operate_payment_status", wait_seconds: next.wait_seconds };
+    }
+    return outcome;
+}
+export function brokerCommandMutates(name, args) {
+    return (!["operate_observe", "operate_screenshot", "operate_payment_status"].includes(name) &&
+        !(name === "operate_extract" && args.store === undefined));
+}
+/** Existing handlers and per-session payment state run unchanged INSIDE the
+ * broker. Every MCP connection gets its own pinned API client and capability. */
+export class OperatorBroker {
+    config;
+    journal;
+    legacyPreDispatchAuthorization;
+    authority;
+    apis = new Map();
+    inputBindingKeys = new Map();
+    tools = buildToolRegistry();
+    token;
+    constructor(config, cellId, journal, legacyPreDispatchAuthorization) {
+        this.config = config;
+        this.journal = journal;
+        this.legacyPreDispatchAuthorization = legacyPreDispatchAuthorization;
+        this.authority = new BrokerAuthority(config.accountId, cellId);
+        this.authority.setDetachedExpiryHandler(async (capability, principal) => {
+            if (principal.forwarderId !== undefined)
+                await this.journal?.recordDetachedPaymentUncertainty(capability.sessionId, principal.forwarderId);
+        });
+        this.token = createHash("sha256").update(config.agentSessionToken).digest();
+    }
+    refreshCredentials(session) {
+        if (session.account_id !== this.config.accountId || !session.agent_session_token)
+            throw new BrokerRefusal("account_mismatch", "Reconnect must preserve the enrolled account");
+        const inventory = this.authority.inventory();
+        if (inventory.active || inventory.quarantined || inventory.admitting)
+            throw new BrokerRefusal("maintenance", "Credential refresh requires drained sessions");
+        this.config.agentSessionToken = session.agent_session_token;
+        this.token = createHash("sha256").update(session.agent_session_token).digest();
+        this.apis.clear();
+    }
+    async authenticate(token, agentId, lineageCredential, supervisor = false) {
+        if (!timingSafeEqual(createHash("sha256").update(token).digest(), this.token))
+            return null;
+        if (supervisor)
+            return {
+                accountId: this.config.accountId,
+                agentId: "broker-supervisor",
+                supervisor: true,
+            };
+        if (lineageCredential === undefined)
+            return null;
+        const id = forwarderId(lineageCredential);
+        this.inputBindingKeys.set(id, createHash("sha256").update(lineageCredential).digest());
+        return {
+            accountId: this.config.accountId,
+            agentId: agentId ?? this.config.agentIdentity ?? "local-agent",
+            forwarderId: id,
+        };
+    }
+    inputHash(principal, input) {
+        const forwarder = principal.forwarderId;
+        const key = forwarder === undefined ? undefined : this.inputBindingKeys.get(forwarder);
+        if (key === undefined)
+            throw new BrokerRefusal("unauthorized", "Forwarder input binding is not authenticated");
+        return createHmac("sha256", key).update(canonicalJson(input)).digest("hex");
+    }
+    connected(principal) {
+        if (principal.supervisor)
+            return;
+        return this.authority.claimForwarder(principal);
+    }
+    async call(principal, method, params, requestId) {
+        if (method !== "tool")
+            throw new BrokerRefusal("unknown_method", "Unknown broker method");
+        const input = callSchema.parse(params);
+        const tool = findTool(input.name, this.tools);
+        if (tool === null || !tool.name.startsWith("operate_"))
+            throw new BrokerRefusal("unknown_tool", "Tool is not an operator command");
+        const args = tool.inputSchema.parse(input.args);
+        const starting = tool.name === "operate_start" ||
+            (tool.name === "operate_recipe_run" && args.session_id === undefined);
+        const dispatch = dispatchDetail(principal, tool.name, this.inputHash(principal, typeof args.session_id === "string"
+            ? { name: tool.name, args }
+            : { name: tool.name, args, capability: input.capability }), starting);
+        const completed = await this.journal?.completedOutcome(journalForwarderId(principal), requestId, dispatch);
+        if (completed !== undefined)
+            return {
+                result: {
+                    reconciliation: {
+                        request_id: completed.requestId,
+                        operation: completed.operation,
+                        ...completed.outcome,
+                    },
+                },
+            };
+        let api = this.apis.get(principal.clientId);
+        if (api === undefined) {
+            api = new ApiClient({ ...this.config, agentIdentity: principal.agentId });
+            this.apis.set(principal.clientId, api);
+        }
+        const pinnedApi = api;
+        if (starting) {
+            if (await this.journal?.hasPendingStartDelivery(journalForwarderId(principal)))
+                throw new BrokerRefusal("outcome_unknown", "Prior start result awaits caller delivery; recover it before starting another session");
+            if (input.capability !== undefined)
+                throw new BrokerRefusal("invalid_arguments", "Start takes no existing capability");
+            const hosts = [
+                ...(typeof args.service_url === "string" ? [args.service_url] : []),
+                ...(args.allowed_hosts ?? []),
+                ...(args.extra_allowed_hosts ?? []),
+            ];
+            let observation;
+            let internalId = "";
+            const capability = await this.authority.open(principal, siteResources(hosts), async (id, signal, reserve) => {
+                if (signal.aborted)
+                    throw new BrokerRefusal("cancelled", "Start cancelled");
+                const mutationCapableStart = tool.name === "operate_recipe_run";
+                if (mutationCapableStart)
+                    await this.journal?.record(id, requestId, "entered", dispatch);
+                observation = await withBrokerAdmission({ sessionId: id, reserve }, async () => await withBrokerAuditContext(pinnedApi, tool.name, requestId, async () => await tool.handler(args, pinnedApi)));
+                internalId = String(observation.session_id);
+                const session = sessionForCall(internalId);
+                if (session === undefined) {
+                    await finishProvisionSession(internalId);
+                    if (mutationCapableStart)
+                        await this.journal?.record(id, requestId, "settled", dispatch);
+                    return {
+                        targetId: "no-page",
+                        invoke: async () => {
+                            throw new BrokerRefusal("auth_required", "Connect before starting");
+                        },
+                        close: async () => true,
+                        orphan: async () => undefined,
+                    };
+                }
+                if (mutationCapableStart)
+                    await this.journal?.record(id, requestId, "outcome", {
+                        ...dispatch,
+                        outcome: reconciliationOutcome(tool.name, observation),
+                    });
+                const targetId = await session.browser.brokerTargetId();
+                return {
+                    targetId,
+                    prepare: async (name, commandArgs) => {
+                        const ref = commandArgs.ref;
+                        return name === "operate_login" &&
+                            typeof commandArgs.provider === "string" &&
+                            typeof ref === "string"
+                            ? await withProvisionSessionCall(internalId, async () => preparePublicOAuthLoginTarget(internalId, ref))
+                            : undefined;
+                    },
+                    invoke: async (name, commandArgs, _signal, commandId, prepared) => {
+                        if (!session.browser.isConnected())
+                            throw new BrokerRefusal("browser_lost", "Browser transport lost; do not replay mutations");
+                        const command = findTool(name, this.tools);
+                        if (command === null)
+                            throw new BrokerRefusal("unknown_tool", "Unknown operator command");
+                        const translated = { ...commandArgs, session_id: internalId };
+                        const executeHandler = async () => await withBrokerAuditContext(pinnedApi, name, commandId, async () => command.handler(translated, pinnedApi));
+                        const execute = async () => prepared === undefined
+                            ? await executeHandler()
+                            : await withPreparedOAuthLoginTarget(prepared, executeHandler);
+                        const mutating = brokerCommandMutates(name, commandArgs);
+                        const commandDispatch = dispatchDetail(principal, name, this.inputHash(principal, { name, args: commandArgs }));
+                        if (mutating)
+                            await this.journal?.record(id, commandId, "entered", commandDispatch);
+                        let result;
+                        try {
+                            result =
+                                name === "operate_finish"
+                                    ? await execute()
+                                    : await withProvisionSessionCall(internalId, execute);
+                        }
+                        catch (error) {
+                            const preDispatch = provenPreDispatchMutationFailure(error);
+                            if (mutating && name === "operate_login" && preDispatch !== null) {
+                                await this.journal?.record(id, commandId, "outcome", {
+                                    ...commandDispatch,
+                                    outcome: { status: "not_dispatched", error: preDispatch.code },
+                                });
+                                return new DeliveredPreDispatchFailure(preDispatch.code);
+                            }
+                            throw error;
+                        }
+                        await this.journal?.record(id, "payment-custody", session.pendingThreeDs === null ? "settled" : "entered", {
+                            forwarderId: journalForwarderId(principal),
+                        });
+                        if (mutating)
+                            await this.journal?.record(id, commandId, "outcome", {
+                                ...commandDispatch,
+                                outcome: reconciliationOutcome(name, result),
+                            });
+                        return remapSession(result, internalId, id);
+                    },
+                    close: async (reason) => {
+                        const forwarderId = journalForwarderId(principal);
+                        const detachedPaymentUncertainty = reason === "expiry" &&
+                            (await this.journal?.hasOnlyDetachedPaymentUncertainty(id, forwarderId));
+                        if (((await this.journal?.hasOutstanding(id)) && !detachedPaymentUncertainty) ||
+                            (await this.journal?.hasPendingStartDelivery(forwarderId, id)))
+                            return false;
+                        const pending = session.pendingThreeDs;
+                        if (reason === "disconnect" && pending !== null && Date.now() < pending.deadline) {
+                            const resolution = await session.browser.waitForThreeDsResolution(0);
+                            if (resolution !== "succeeded" && resolution !== "failed")
+                                return false;
+                        }
+                        if (sessionForCall(internalId) === undefined) {
+                            await brokerBrowserCustody()?.release(session.browser);
+                            return true;
+                        }
+                        if (reason === "expiry")
+                            return await forceFinishProvisionSession(internalId);
+                        const result = await finishProvisionSession(internalId);
+                        if (result.closed)
+                            await this.journal?.record(id, "payment-custody", "settled", {
+                                forwarderId: journalForwarderId(principal),
+                            });
+                        return result.closed;
+                    },
+                    orphan: async () => await brokerBrowserCustody()?.orphan(session.browser),
+                };
+            }, async (id) => {
+                const sessionId = internalId === "" ? id : internalId;
+                const session = sessionForCall(sessionId);
+                if (session !== undefined && !(await finishProvisionSession(sessionId)).closed)
+                    return false;
+                return (await brokerBrowserCustody()?.cleanupAdmission(id)) ?? false;
+            }, async (id) => {
+                const sessionId = internalId === "" ? id : internalId;
+                const session = sessionForCall(sessionId);
+                if (session !== undefined) {
+                    await brokerBrowserCustody()?.orphan(session.browser);
+                    return;
+                }
+                await brokerBrowserCustody()?.orphanAdmission(id);
+            });
+            if (capability.targetId === "no-page") {
+                await this.authority.close(principal, capability);
+                return { result: observation };
+            }
+            if (tool.name === "operate_start") {
+                try {
+                    await this.journal?.record(capability.sessionId, requestId, "outcome", {
+                        ...dispatch,
+                        outcome: { status: "completed" },
+                    });
+                }
+                catch (error) {
+                    await this.authority.close(principal, capability);
+                    throw error;
+                }
+            }
+            const result = remapSession(observation, internalId, capability.sessionId);
+            return {
+                capability,
+                result: {
+                    ...result,
+                    broker: {
+                        cellId: capability.cellId,
+                        browserEpoch: capability.browserEpoch,
+                        targetId: capability.targetId,
+                        pid: process.pid,
+                    },
+                },
+            };
+        }
+        const capability = input.capability;
+        if (capability === undefined || args.session_id !== capability.sessionId)
+            throw new BrokerRefusal("stale_lease", "An owned session capability is required");
+        const extra = tool.name === "operate_allow_host" ? siteResources([String(args.host)]) : [];
+        const lane = tool.name === "operate_login"
+            ? "oauth"
+            : ["operate_extract", "operate_fill_credential", "operate_pay"].includes(tool.name)
+                ? "interactive"
+                : undefined;
+        const result = await this.authority.invoke(principal, capability, requestId, tool.name, args, extra, lane);
+        if (result instanceof DeliveredPreDispatchFailure)
+            return {
+                preDispatchFailure: {
+                    error: result.error,
+                    dispatch: "not_dispatched",
+                },
+            };
+        if (tool.name === "operate_finish")
+            await this.authority.close(principal, capability);
+        return { result };
+    }
+    async recover(principal, params) {
+        const input = recoverySchema.parse(params);
+        const tool = findTool(input.name, this.tools);
+        if (tool === null || !tool.name.startsWith("operate_"))
+            throw new BrokerRefusal("unknown_tool", "Tool is not an operator command");
+        const args = tool.inputSchema.parse(input.args);
+        const explicitFailure = input.preDispatchFailure;
+        const sessionId = typeof args.session_id === "string" ? args.session_id : undefined;
+        const inputHash = this.inputHash(principal, { name: tool.name, args });
+        const authorization = this.legacyPreDispatchAuthorization;
+        const completed = explicitFailure !== undefined &&
+            sessionId !== undefined &&
+            authorization !== undefined &&
+            sessionId === authorization.sessionId &&
+            tool.name === authorization.operation &&
+            journalForwarderId(principal) === authorization.forwarderId &&
+            args.provider === "google" &&
+            args.ref === "reconciliation-only:no-dispatch"
+            ? await this.journal?.reconcileExplicitPreDispatchFailure(authorization, explicitFailure)
+            : await this.journal?.recoveryOutcome(journalForwarderId(principal), sessionId !== undefined
+                ? {
+                    operation: tool.name,
+                    sessionId,
+                    inputHash,
+                }
+                : {
+                    operation: tool.name,
+                    inputHash: this.inputHash(principal, {
+                        name: tool.name,
+                        args,
+                        capability: input.capability,
+                    }),
+                });
+        if (completed === undefined)
+            return null;
+        if (completed.alreadySettled !== true)
+            await this.journal?.recordRecovery(journalForwarderId(principal), completed);
+        if (completed.start === true) {
+            const capability = this.authority.recoverCapability(principal, completed.sessionId);
+            if (capability === undefined)
+                return {
+                    requestId: completed.requestId,
+                    result: {
+                        reconciliation: {
+                            request_id: completed.requestId,
+                            operation: completed.operation,
+                            ...completed.outcome,
+                        },
+                        recovery: {
+                            status: "session_unavailable",
+                            next_step: "Broker restart ended the session; reconcile this recorded outcome before any new work.",
+                        },
+                    },
+                };
+            return {
+                requestId: completed.requestId,
+                capability,
+                result: {
+                    session_id: capability.sessionId,
+                    broker: {
+                        cellId: capability.cellId,
+                        browserEpoch: capability.browserEpoch,
+                        targetId: capability.targetId,
+                        pid: process.pid,
+                    },
+                },
+            };
+        }
+        return {
+            requestId: completed.requestId,
+            result: {
+                reconciliation: {
+                    request_id: completed.requestId,
+                    operation: completed.operation,
+                    ...completed.outcome,
+                },
+            },
+        };
+    }
+    async reclaim(principal) {
+        return { capabilities: this.authority.reclaim(principal) };
+    }
+    async confirmStartDelivery(principal, params) {
+        const { capability } = startConfirmationSchema.parse(params);
+        if (!this.authority.hasCapability(principal, capability))
+            throw new BrokerRefusal("stale_lease", "Capability does not name an owned live session");
+        await this.journal?.confirmStartDelivery(capability.sessionId, journalForwarderId(principal));
+    }
+    async reap(now = Date.now()) {
+        await this.journal?.expirePendingStartDeliveries(now);
+        await this.authority.expireDetached(now);
+        await this.authority.retryQuarantined(async (capability, principal) => !(principal.forwarderId !== undefined &&
+            (await this.journal?.hasPendingStartDelivery(principal.forwarderId, capability.sessionId))));
+    }
+    async acknowledge(principal, requestId) {
+        if (await this.journal?.acknowledge(journalForwarderId(principal), requestId))
+            await this.authority.retryQuarantined();
+    }
+    async canContinuePaymentStatus(principal, params) {
+        const input = callSchema.safeParse(params);
+        if (!input.success || input.data.name !== "operate_payment_status")
+            return false;
+        const capability = input.data.capability;
+        if (capability === undefined ||
+            typeof input.data.args.session_id !== "string" ||
+            input.data.args.session_id !== capability.sessionId)
+            return false;
+        try {
+            if (!this.authority.hasCapability(principal, capability))
+                return false;
+        }
+        catch (error) {
+            if (error instanceof BrokerRefusal)
+                return false;
+            throw error;
+        }
+        if (this.journal === undefined)
+            return false;
+        return await this.journal.hasOnlyPaymentCustody(capability.sessionId, journalForwarderId(principal));
+    }
+    async disconnect(principal, explicit = false) {
+        this.authority.beginForwarderRelease(principal);
+        const forwarder = principal.forwarderId;
+        if (!explicit)
+            this.authority.detach(principal);
+        else if (forwarder !== undefined && (await this.journal?.hasOutstanding(undefined, forwarder)))
+            this.authority.detach(principal, Date.now(), 0);
+        else {
+            if (forwarder !== undefined)
+                await this.journal?.settleExplicitStartDeliveries(forwarder);
+            await this.authority.disconnect(principal);
+        }
+        this.authority.releaseForwarder(principal);
+        this.apis.delete(principal.clientId);
+    }
+}
+//# sourceMappingURL=operator.js.map

package/dist/bot/broker/operator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operator.js","sourceRoot":"","sources":["../../../src/bot/broker/operator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAMpD,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACtE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAwB,MAAM,qBAAqB,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EACL,sBAAsB,EACtB,2BAA2B,EAC3B,cAAc,EACd,wBAAwB,GACzB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,6BAA6B,EAC7B,4BAA4B,GAE7B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,eAAe,EAA4C,MAAM,gBAAgB,CAAC;AAC3F,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE9D,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,gCAAgC,EAAE,MAAM,kCAAkC,CAAC;AAEpF,MAAM,2BAA2B;IACV;IAArB,YAAqB,KAAkB;QAAlB,UAAK,GAAL,KAAK,CAAa;IAAG,CAAC;CAC5C;AAED,MAAM,gBAAgB,GAAG,CAAC;KACvB,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;CAC5B,CAAC;KACD,MAAM,EAAE,CAAC;AACZ,MAAM,UAAU,GAAG,CAAC;KACjB,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAC3B,UAAU,EAAE,gBAAgB,CAAC,QAAQ,EAAE;CACxC,CAAC;KACD,MAAM,EAAE,CAAC;AACZ,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC;IACvC,kBAAkB,EAAE,CAAC;SAClB,MAAM,CAAC;QACN,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5B,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QAC7B,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;KACtC,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;CACd,CAAC,CAAC;AACH,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AACpF,SAAS,YAAY,CAAC,KAAc,EAAE,IAAY,EAAE,EAAU;IAC5D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;IACnF,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAC7C,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;YACzC,GAAG;YACH,GAAG,KAAK,YAAY,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;SAC1E,CAAC,CACH,CAAC;IACJ,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3E,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;aAC3B,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;aACpE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC;AACzC,CAAC;AAED,SAAS,kBAAkB,CAAC,SAA0B;IACpD,IAAI,SAAS,CAAC,WAAW,KAAK,SAAS;QACrC,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,mDAAmD,CAAC,CAAC;IAC/F,OAAO,SAAS,CAAC,WAAW,CAAC;AAC/B,CAAC;AAED,SAAS,cAAc,CACrB,SAA0B,EAC1B,SAAiB,EACjB,cAAsB,EACtB,KAAK,GAAG,KAAK;IAEb,OAAO;QACL,WAAW,EAAE,kBAAkB,CAAC,SAAS,CAAC;QAC1C,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1C,SAAS;QACT,SAAS,EAAE,cAAc;KAC1B,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,GAAc,EACd,MAAc,EACd,YAAoB,EACpB,SAA2B;IAE3B,OAAO,MAAM,GAAG,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,SAAS,CAAC,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,SAAiB,EACjB,MAAe;IAEf,IAAI,SAAS,KAAK,aAAa,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ;QAC9E,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,MAAiC,CAAC;IAClD,IAAI,OAAO,CAAC,MAAM,KAAK,mBAAmB;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACtE,IAAI,OAAO,CAAC,MAAM,KAAK,sBAAsB,IAAI,OAAO,CAAC,MAAM,KAAK,yBAAyB;QAC3F,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACjC,MAAM,OAAO,GAA8B,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;IACtE,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9D,MAAM,IAAI,GAAG,OAAO,CAAC,IAA+B,CAAC;QACrD,IACE,IAAI,CAAC,IAAI,KAAK,wBAAwB;YACtC,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ;YACrC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC;YACvC,IAAI,CAAC,YAAY,IAAI,CAAC;YAEtB,OAAO,CAAC,IAAI,GAAG,EAAE,IAAI,EAAE,wBAAwB,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;IACvF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,IAA6B;IAC9E,OAAO,CACL,CAAC,CAAC,iBAAiB,EAAE,oBAAoB,EAAE,wBAAwB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QACnF,CAAC,CAAC,IAAI,KAAK,iBAAiB,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAC1D,CAAC;AACJ,CAAC;AAED;iFACiF;AACjF,MAAM,OAAO,cAAc;IAON;IAEA;IACA;IATV,SAAS,CAAkB;IACnB,IAAI,GAAG,IAAI,GAAG,EAAqB,CAAC;IACpC,gBAAgB,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC7C,KAAK,GAAG,iBAAiB,EAAE,CAAC;IACrC,KAAK,CAAS;IACtB,YACmB,MAA+C,EAChE,MAAc,EACG,OAAyB,EACzB,8BAA6D;QAH7D,WAAM,GAAN,MAAM,CAAyC;QAE/C,YAAO,GAAP,OAAO,CAAkB;QACzB,mCAA8B,GAA9B,8BAA8B,CAA+B;QAE9E,IAAI,CAAC,SAAS,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC/D,IAAI,CAAC,SAAS,CAAC,wBAAwB,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE;YACtE,IAAI,SAAS,CAAC,WAAW,KAAK,SAAS;gBACrC,MAAM,IAAI,CAAC,OAAO,EAAE,gCAAgC,CAClD,UAAU,CAAC,SAAS,EACpB,SAAS,CAAC,WAAW,CACtB,CAAC;QACN,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,MAAM,EAAE,CAAC;IAC9E,CAAC;IACD,kBAAkB,CAAC,OAA8D;QAC/E,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,mBAAmB;YAC9E,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,8CAA8C,CAAC,CAAC;QAC9F,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC;QAC7C,IAAI,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,WAAW,IAAI,SAAS,CAAC,SAAS;YAClE,MAAM,IAAI,aAAa,CAAC,aAAa,EAAE,8CAA8C,CAAC,CAAC;QACzF,IAAI,CAAC,MAAM,CAAC,iBAAiB,GAAG,OAAO,CAAC,mBAAmB,CAAC;QAC5D,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,MAAM,EAAE,CAAC;QAC/E,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC;IACD,KAAK,CAAC,YAAY,CAChB,KAAa,EACb,OAAgB,EAChB,iBAA0B,EAC1B,UAAU,GAAG,KAAK;QAElB,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3F,IAAI,UAAU;YACZ,OAAO;gBACL,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;gBAChC,OAAO,EAAE,mBAAmB;gBAC5B,UAAU,EAAE,IAAI;aACjB,CAAC;QACJ,IAAI,iBAAiB,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACjD,MAAM,EAAE,GAAG,WAAW,CAAC,iBAAiB,CAAC,CAAC;QAC1C,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACvF,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;YAChC,OAAO,EAAE,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,aAAa;YAC9D,WAAW,EAAE,EAAE;SAChB,CAAC;IACJ,CAAC;IACO,SAAS,CAAC,SAA0B,EAAE,KAAc;QAC1D,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,CAAC;QACxC,MAAM,GAAG,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvF,IAAI,GAAG,KAAK,SAAS;YACnB,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,8CAA8C,CAAC,CAAC;QAC1F,OAAO,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9E,CAAC;IACD,SAAS,CAAC,SAA0B;QAClC,IAAI,SAAS,CAAC,UAAU;YAAE,OAAO;QACjC,OAAO,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC;IACD,KAAK,CAAC,IAAI,CACR,SAA0B,EAC1B,MAAc,EACd,MAA+B,EAC/B,SAAiB;QAEjB,IAAI,MAAM,KAAK,MAAM;YAAE,MAAM,IAAI,aAAa,CAAC,gBAAgB,EAAE,uBAAuB,CAAC,CAAC;QAC1F,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;YACpD,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,iCAAiC,CAAC,CAAC;QAC7E,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;QAC3E,MAAM,QAAQ,GACZ,IAAI,CAAC,IAAI,KAAK,eAAe;YAC7B,CAAC,IAAI,CAAC,IAAI,KAAK,oBAAoB,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC;QACxE,MAAM,QAAQ,GAAG,cAAc,CAC7B,SAAS,EACT,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,SAAS,CACZ,SAAS,EACT,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;YACjC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE;YAC3B,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAC5D,EACD,QAAQ,CACT,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,gBAAgB,CACpD,kBAAkB,CAAC,SAAS,CAAC,EAC7B,SAAS,EACT,QAAQ,CACT,CAAC;QACF,IAAI,SAAS,KAAK,SAAS;YACzB,OAAO;gBACL,MAAM,EAAE;oBACN,cAAc,EAAE;wBACd,UAAU,EAAE,SAAS,CAAC,SAAS;wBAC/B,SAAS,EAAE,SAAS,CAAC,SAAS;wBAC9B,GAAG,SAAS,CAAC,OAAO;qBACrB;iBACF;aACF,CAAC;QACJ,IAAI,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,GAAG,GAAG,IAAI,SAAS,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;YAC1E,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACzC,CAAC;QACD,MAAM,SAAS,GAAG,GAAG,CAAC;QACtB,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,MAAM,IAAI,CAAC,OAAO,EAAE,uBAAuB,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;gBAC5E,MAAM,IAAI,aAAa,CACrB,iBAAiB,EACjB,uFAAuF,CACxF,CAAC;YACJ,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;gBAChC,MAAM,IAAI,aAAa,CAAC,mBAAmB,EAAE,oCAAoC,CAAC,CAAC;YACrF,MAAM,KAAK,GAAG;gBACZ,GAAG,CAAC,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnE,GAAI,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAc;gBAC3C,GAAI,CAAC,IAAI,CAAC,mBAAmB,IAAI,EAAE,CAAc;aAClD,CAAC;YACF,IAAI,WAAoB,CAAC;YACzB,IAAI,UAAU,GAAG,EAAE,CAAC;YACpB,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAC1C,SAAS,EACT,aAAa,CAAC,KAAK,CAAC,EACpB,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;gBAC5B,IAAI,MAAM,CAAC,OAAO;oBAAE,MAAM,IAAI,aAAa,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;gBAC5E,MAAM,oBAAoB,GAAG,IAAI,CAAC,IAAI,KAAK,oBAAoB,CAAC;gBAChE,IAAI,oBAAoB;oBAAE,MAAM,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;gBACzF,WAAW,GAAG,MAAM,mBAAmB,CACrC,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,EAC1B,KAAK,IAAI,EAAE,CACT,MAAM,sBAAsB,CAC1B,SAAS,EACT,IAAI,CAAC,IAAI,EACT,SAAS,EACT,KAAK,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAChD,CACJ,CAAC;gBACF,UAAU,GAAG,MAAM,CAAE,WAAsC,CAAC,UAAU,CAAC,CAAC;gBACxE,MAAM,OAAO,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;gBAC3C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC1B,MAAM,sBAAsB,CAAC,UAAU,CAAC,CAAC;oBACzC,IAAI,oBAAoB;wBACtB,MAAM,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;oBACjE,OAAO;wBACL,QAAQ,EAAE,SAAS;wBACnB,MAAM,EAAE,KAAK,IAAI,EAAE;4BACjB,MAAM,IAAI,aAAa,CAAC,eAAe,EAAE,yBAAyB,CAAC,CAAC;wBACtE,CAAC;wBACD,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI;wBACvB,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;qBAC9B,CAAC;gBACJ,CAAC;gBACD,IAAI,oBAAoB;oBACtB,MAAM,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE;wBACnD,GAAG,QAAQ;wBACX,OAAO,EAAE,qBAAqB,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;qBACvD,CAAC,CAAC;gBACL,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;gBACxD,OAAO;oBACL,QAAQ;oBACR,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE;wBACnC,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC;wBAC5B,OAAO,IAAI,KAAK,eAAe;4BAC7B,OAAO,WAAW,CAAC,QAAQ,KAAK,QAAQ;4BACxC,OAAO,GAAG,KAAK,QAAQ;4BACvB,CAAC,CAAC,MAAM,wBAAwB,CAAC,UAAU,EAAE,KAAK,IAAI,EAAE,CACpD,6BAA6B,CAAC,UAAU,EAAE,GAAG,CAAC,CAC/C;4BACH,CAAC,CAAC,SAAS,CAAC;oBAChB,CAAC;oBACD,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE;wBAChE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE;4BAChC,MAAM,IAAI,aAAa,CACrB,cAAc,EACd,iDAAiD,CAClD,CAAC;wBACJ,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;wBAC3C,IAAI,OAAO,KAAK,IAAI;4BAClB,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;wBACtE,MAAM,UAAU,GAAG,EAAE,GAAG,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;wBAC9D,MAAM,cAAc,GAAG,KAAK,IAAI,EAAE,CAChC,MAAM,sBAAsB,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE,CAClE,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC,CACvC,CAAC;wBACJ,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE,CACzB,QAAQ,KAAK,SAAS;4BACpB,CAAC,CAAC,MAAM,cAAc,EAAE;4BACxB,CAAC,CAAC,MAAM,4BAA4B,CAChC,QAAoC,EACpC,cAAc,CACf,CAAC;wBACR,MAAM,QAAQ,GAAG,oBAAoB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;wBACzD,MAAM,eAAe,GAAG,cAAc,CACpC,SAAS,EACT,IAAI,EACJ,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CACvD,CAAC;wBACF,IAAI,QAAQ;4BAAE,MAAM,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;wBACpF,IAAI,MAAe,CAAC;wBACpB,IAAI,CAAC;4BACH,MAAM;gCACJ,IAAI,KAAK,gBAAgB;oCACvB,CAAC,CAAC,MAAM,OAAO,EAAE;oCACjB,CAAC,CAAC,MAAM,wBAAwB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;wBAC5D,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BACf,MAAM,WAAW,GAAG,gCAAgC,CAAC,KAAK,CAAC,CAAC;4BAC5D,IAAI,QAAQ,IAAI,IAAI,KAAK,eAAe,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;gCACjE,MAAM,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE;oCACnD,GAAG,eAAe;oCAClB,OAAO,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,WAAW,CAAC,IAAI,EAAE;iCAC/D,CAAC,CAAC;gCACH,OAAO,IAAI,2BAA2B,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;4BAC3D,CAAC;4BACD,MAAM,KAAK,CAAC;wBACd,CAAC;wBACD,MAAM,IAAI,CAAC,OAAO,EAAE,MAAM,CACxB,EAAE,EACF,iBAAiB,EACjB,OAAO,CAAC,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EACvD;4BACE,WAAW,EAAE,kBAAkB,CAAC,SAAS,CAAC;yBAC3C,CACF,CAAC;wBACF,IAAI,QAAQ;4BACV,MAAM,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE;gCACnD,GAAG,eAAe;gCAClB,OAAO,EAAE,qBAAqB,CAAC,IAAI,EAAE,MAAM,CAAC;6BAC7C,CAAC,CAAC;wBACL,OAAO,YAAY,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;oBAC9C,CAAC;oBACD,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;wBACtB,MAAM,WAAW,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;wBAClD,MAAM,0BAA0B,GAC9B,MAAM,KAAK,QAAQ;4BACnB,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,iCAAiC,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;wBAC3E,IACE,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC;4BACzE,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,uBAAuB,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;4BAE9D,OAAO,KAAK,CAAC;wBACf,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC;wBACvC,IAAI,MAAM,KAAK,YAAY,IAAI,OAAO,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;4BACjF,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC;4BACrE,IAAI,UAAU,KAAK,WAAW,IAAI,UAAU,KAAK,QAAQ;gCAAE,OAAO,KAAK,CAAC;wBAC1E,CAAC;wBACD,IAAI,cAAc,CAAC,UAAU,CAAC,KAAK,SAAS,EAAE,CAAC;4BAC7C,MAAM,oBAAoB,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;4BACvD,OAAO,IAAI,CAAC;wBACd,CAAC;wBACD,IAAI,MAAM,KAAK,QAAQ;4BAAE,OAAO,MAAM,2BAA2B,CAAC,UAAU,CAAC,CAAC;wBAC9E,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,UAAU,CAAC,CAAC;wBACxD,IAAI,MAAM,CAAC,MAAM;4BACf,MAAM,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,iBAAiB,EAAE,SAAS,EAAE;gCAC3D,WAAW,EAAE,kBAAkB,CAAC,SAAS,CAAC;6BAC3C,CAAC,CAAC;wBACL,OAAO,MAAM,CAAC,MAAM,CAAC;oBACvB,CAAC;oBACD,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,oBAAoB,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;iBAC1E,CAAC;YACJ,CAAC,EACD,KAAK,EAAE,EAAE,EAAE,EAAE;gBACX,MAAM,SAAS,GAAG,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;gBACtD,MAAM,OAAO,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;gBAC1C,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,sBAAsB,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;oBAC5E,OAAO,KAAK,CAAC;gBACf,OAAO,CAAC,MAAM,oBAAoB,EAAE,EAAE,gBAAgB,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC;YACvE,CAAC,EACD,KAAK,EAAE,EAAE,EAAE,EAAE;gBACX,MAAM,SAAS,GAAG,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;gBACtD,MAAM,OAAO,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;gBAC1C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC1B,MAAM,oBAAoB,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;oBACtD,OAAO;gBACT,CAAC;gBACD,MAAM,oBAAoB,EAAE,EAAE,eAAe,CAAC,EAAE,CAAC,CAAC;YACpD,CAAC,CACF,CAAC;YACF,IAAI,UAAU,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBACtC,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;gBAClD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;YACjC,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;gBAClC,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE;wBACrE,GAAG,QAAQ;wBACX,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE;qBACjC,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;oBAClD,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;YACD,MAAM,MAAM,GAAG,YAAY,CAAC,WAAW,EAAE,UAAU,EAAE,UAAU,CAAC,SAAS,CAGxE,CAAC;YACF,OAAO;gBACL,UAAU;gBACV,MAAM,EAAE;oBACN,GAAG,MAAM;oBACT,MAAM,EAAE;wBACN,MAAM,EAAE,UAAU,CAAC,MAAM;wBACzB,YAAY,EAAE,UAAU,CAAC,YAAY;wBACrC,QAAQ,EAAE,UAAU,CAAC,QAAQ;wBAC7B,GAAG,EAAE,OAAO,CAAC,GAAG;qBACjB;iBACF;aACF,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;QACpC,IAAI,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,KAAK,UAAU,CAAC,SAAS;YACtE,MAAM,IAAI,aAAa,CAAC,aAAa,EAAE,yCAAyC,CAAC,CAAC;QACpF,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,KAAK,oBAAoB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3F,MAAM,IAAI,GACR,IAAI,CAAC,IAAI,KAAK,eAAe;YAC3B,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,CAAC,iBAAiB,EAAE,yBAAyB,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;gBACjF,CAAC,CAAC,aAAa;gBACf,CAAC,CAAC,SAAS,CAAC;QAClB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CACxC,SAAS,EACT,UAAU,EACV,SAAS,EACT,IAAI,CAAC,IAAI,EACT,IAAI,EACJ,KAAK,EACL,IAAI,CACL,CAAC;QACF,IAAI,MAAM,YAAY,2BAA2B;YAC/C,OAAO;gBACL,kBAAkB,EAAE;oBAClB,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,QAAQ,EAAE,gBAAyB;iBACpC;aACF,CAAC;QACJ,IAAI,IAAI,CAAC,IAAI,KAAK,gBAAgB;YAAE,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QACtF,OAAO,EAAE,MAAM,EAAE,CAAC;IACpB,CAAC;IACD,KAAK,CAAC,OAAO,CACX,SAA0B,EAC1B,MAA+B;QAU/B,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;YACpD,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,iCAAiC,CAAC,CAAC;QAC7E,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;QAC3E,MAAM,eAAe,GAAG,KAAK,CAAC,kBAAkB,CAAC;QACjD,MAAM,SAAS,GAAG,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;QACpF,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACvE,MAAM,aAAa,GAAG,IAAI,CAAC,8BAA8B,CAAC;QAC1D,MAAM,SAAS,GACb,eAAe,KAAK,SAAS;YAC7B,SAAS,KAAK,SAAS;YACvB,aAAa,KAAK,SAAS;YAC3B,SAAS,KAAK,aAAa,CAAC,SAAS;YACrC,IAAI,CAAC,IAAI,KAAK,aAAa,CAAC,SAAS;YACrC,kBAAkB,CAAC,SAAS,CAAC,KAAK,aAAa,CAAC,WAAW;YAC3D,IAAI,CAAC,QAAQ,KAAK,QAAQ;YAC1B,IAAI,CAAC,GAAG,KAAK,iCAAiC;YAC5C,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,mCAAmC,CAAC,aAAa,EAAE,eAAe,CAAC;YACzF,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,eAAe,CACjC,kBAAkB,CAAC,SAAS,CAAC,EAC7B,SAAS,KAAK,SAAS;gBACrB,CAAC,CAAC;oBACE,SAAS,EAAE,IAAI,CAAC,IAAI;oBACpB,SAAS;oBACT,SAAS;iBACV;gBACH,CAAC,CAAC;oBACE,SAAS,EAAE,IAAI,CAAC,IAAI;oBACpB,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE;wBACnC,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,IAAI;wBACJ,UAAU,EAAE,KAAK,CAAC,UAAU;qBAC7B,CAAC;iBACH,CACN,CAAC;QACR,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACzC,IAAI,SAAS,CAAC,cAAc,KAAK,IAAI;YACnC,MAAM,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;QAC/E,IAAI,SAAS,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YAC7B,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,SAAS,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;YACpF,IAAI,UAAU,KAAK,SAAS;gBAC1B,OAAO;oBACL,SAAS,EAAE,SAAS,CAAC,SAAS;oBAC9B,MAAM,EAAE;wBACN,cAAc,EAAE;4BACd,UAAU,EAAE,SAAS,CAAC,SAAS;4BAC/B,SAAS,EAAE,SAAS,CAAC,SAAS;4BAC9B,GAAG,SAAS,CAAC,OAAO;yBACrB;wBACD,QAAQ,EAAE;4BACR,MAAM,EAAE,qBAAqB;4BAC7B,SAAS,EACP,wFAAwF;yBAC3F;qBACF;iBACF,CAAC;YACJ,OAAO;gBACL,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,UAAU;gBACV,MAAM,EAAE;oBACN,UAAU,EAAE,UAAU,CAAC,SAAS;oBAChC,MAAM,EAAE;wBACN,MAAM,EAAE,UAAU,CAAC,MAAM;wBACzB,YAAY,EAAE,UAAU,CAAC,YAAY;wBACrC,QAAQ,EAAE,UAAU,CAAC,QAAQ;wBAC7B,GAAG,EAAE,OAAO,CAAC,GAAG;qBACjB;iBACF;aACF,CAAC;QACJ,CAAC;QACD,OAAO;YACL,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,MAAM,EAAE;gBACN,cAAc,EAAE;oBACd,UAAU,EAAE,SAAS,CAAC,SAAS;oBAC/B,SAAS,EAAE,SAAS,CAAC,SAAS;oBAC9B,GAAG,SAAS,CAAC,OAAO;iBACrB;aACF;SACF,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,SAA0B;QACtC,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;IAC7D,CAAC;IACD,KAAK,CAAC,oBAAoB,CACxB,SAA0B,EAC1B,MAA+B;QAE/B,MAAM,EAAE,UAAU,EAAE,GAAG,uBAAuB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7D,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,SAAS,EAAE,UAAU,CAAC;YACtD,MAAM,IAAI,aAAa,CAAC,aAAa,EAAE,gDAAgD,CAAC,CAAC;QAC3F,MAAM,IAAI,CAAC,OAAO,EAAE,oBAAoB,CAAC,UAAU,CAAC,SAAS,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAC,CAAC;IAChG,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QACzB,MAAM,IAAI,CAAC,OAAO,EAAE,4BAA4B,CAAC,GAAG,CAAC,CAAC;QACtD,MAAM,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QACzC,MAAM,IAAI,CAAC,SAAS,CAAC,gBAAgB,CACnC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,CAC9B,CAAC,CACC,SAAS,CAAC,WAAW,KAAK,SAAS;YACnC,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,uBAAuB,CAAC,SAAS,CAAC,WAAW,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAC3F,CACJ,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,WAAW,CAAC,SAA0B,EAAE,SAAiB;QAC7D,IAAI,MAAM,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;YAC3E,MAAM,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,CAAC;IAC5C,CAAC;IACD,KAAK,CAAC,wBAAwB,CAC5B,SAA0B,EAC1B,MAA+B;QAE/B,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,wBAAwB;YAAE,OAAO,KAAK,CAAC;QACjF,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC;QACzC,IACE,UAAU,KAAK,SAAS;YACxB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,KAAK,QAAQ;YAC9C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,KAAK,UAAU,CAAC,SAAS;YAEnD,OAAO,KAAK,CAAC;QACf,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,SAAS,EAAE,UAAU,CAAC;gBAAE,OAAO,KAAK,CAAC;QACzE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,aAAa;gBAAE,OAAO,KAAK,CAAC;YACjD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAC7C,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAC7C,UAAU,CAAC,SAAS,EACpB,kBAAkB,CAAC,SAAS,CAAC,CAC9B,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,SAA0B,EAAE,QAAQ,GAAG,KAAK;QAC3D,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC;QAChD,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,CAAC;QACxC,IAAI,CAAC,QAAQ;YAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;aAC3C,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAC5F,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;aAC7C,CAAC;YACJ,IAAI,SAAS,KAAK,SAAS;gBAAE,MAAM,IAAI,CAAC,OAAO,EAAE,6BAA6B,CAAC,SAAS,CAAC,CAAC;YAC1F,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC7C,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;CACF"}

package/dist/bot/broker/qualification.d.ts

@@ -0,0 +1,5 @@
+export declare function brokerQualificationPath(profileDir: string): string;
+export declare function beginBrokerQualification(profileDir: string, accountId: string): Promise<string>;
+export declare function recordBrokerQualificationEvidence(profileDir: string, accountId: string, runId: string, evidencePath: string, serviceHosts: readonly string[]): Promise<void>;
+export declare function abandonBrokerQualification(profileDir: string, accountId: string, runId: string): Promise<void>;
+//# sourceMappingURL=qualification.d.ts.map

package/dist/bot/broker/qualification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"qualification.d.ts","sourceRoot":"","sources":["../../../src/bot/broker/qualification.ts"],"names":[],"mappings":"AAiBA,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAElE;AA0BD,wBAAsB,wBAAwB,CAC5C,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC,CAajB;AAED,wBAAsB,iCAAiC,CACrD,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,SAAS,MAAM,EAAE,GAC9B,OAAO,CAAC,IAAI,CAAC,CA0Bf;AAED,wBAAsB,0BAA0B,CAC9C,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAIf"}

package/dist/bot/broker/qualification.js

@@ -0,0 +1,67 @@
+import { randomUUID } from "node:crypto";
+import { readFile, unlink, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+import { profilePathIdentity } from "../profile.js";
+const FILE = "trusty-squire-broker-qualification.json";
+export function brokerQualificationPath(profileDir) {
+    return join(profilePathIdentity(profileDir), FILE);
+}
+async function readQualification(profileDir) {
+    try {
+        const record = JSON.parse(await readFile(brokerQualificationPath(profileDir), "utf8"));
+        if (record.version !== 1 ||
+            typeof record.accountId !== "string" ||
+            !["qualifying", "evidence_recorded"].includes(record.state) ||
+            (record.runId !== undefined && typeof record.runId !== "string") ||
+            (record.completedAt !== undefined && typeof record.completedAt !== "string") ||
+            (record.evidencePath !== undefined && typeof record.evidencePath !== "string") ||
+            (record.serviceHosts !== undefined &&
+                (!Array.isArray(record.serviceHosts) ||
+                    !record.serviceHosts.every((host) => typeof host === "string"))))
+            return null;
+        return record;
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return null;
+        return null;
+    }
+}
+export async function beginBrokerQualification(profileDir, accountId) {
+    const runId = randomUUID();
+    await writeFile(brokerQualificationPath(profileDir), JSON.stringify({
+        version: 1,
+        accountId,
+        state: "qualifying",
+        runId,
+    }), { encoding: "utf8", mode: 0o600, flag: "wx" });
+    return runId;
+}
+export async function recordBrokerQualificationEvidence(profileDir, accountId, runId, evidencePath, serviceHosts) {
+    try {
+        await readFile(evidencePath);
+    }
+    catch {
+        throw new Error("Qualification evidence is missing");
+    }
+    const record = await readQualification(profileDir);
+    if (record?.state !== "qualifying" ||
+        record.accountId !== accountId ||
+        record.runId !== runId ||
+        new Set(serviceHosts).size !== 3)
+        throw new Error("Real-auth qualification record is not owned by this harness run");
+    await writeFile(brokerQualificationPath(profileDir), JSON.stringify({
+        version: 1,
+        accountId,
+        state: "evidence_recorded",
+        completedAt: new Date().toISOString(),
+        evidencePath,
+        serviceHosts: [...serviceHosts],
+    }), { encoding: "utf8", mode: 0o600 });
+}
+export async function abandonBrokerQualification(profileDir, accountId, runId) {
+    const record = await readQualification(profileDir);
+    if (record?.state === "qualifying" && record.accountId === accountId && record.runId === runId)
+        await unlink(brokerQualificationPath(profileDir));
+}
+//# sourceMappingURL=qualification.js.map

package/dist/bot/broker/qualification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"qualification.js","sourceRoot":"","sources":["../../../src/bot/broker/qualification.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAEpD,MAAM,IAAI,GAAG,yCAAyC,CAAC;AAYvD,MAAM,UAAU,uBAAuB,CAAC,UAAkB;IACxD,OAAO,IAAI,CAAC,mBAAmB,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,CAAC;AACrD,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,UAAkB;IACjD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CACvB,MAAM,QAAQ,CAAC,uBAAuB,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,CACrC,CAAC;QACzB,IACE,MAAM,CAAC,OAAO,KAAK,CAAC;YACpB,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;YACpC,CAAC,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC;YAC3D,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC;YAChE,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,CAAC;YAC5E,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,CAAC;YAC9E,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS;gBAChC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC;oBAClC,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC;YAEpE,OAAO,IAAI,CAAC;QACd,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,UAAkB,EAClB,SAAiB;IAEjB,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;IAC3B,MAAM,SAAS,CACb,uBAAuB,CAAC,UAAU,CAAC,EACnC,IAAI,CAAC,SAAS,CAAC;QACb,OAAO,EAAE,CAAC;QACV,SAAS;QACT,KAAK,EAAE,YAAY;QACnB,KAAK;KACwB,CAAC,EAChC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAC9C,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,UAAkB,EAClB,SAAiB,EACjB,KAAa,EACb,YAAoB,EACpB,YAA+B;IAE/B,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,UAAU,CAAC,CAAC;IACnD,IACE,MAAM,EAAE,KAAK,KAAK,YAAY;QAC9B,MAAM,CAAC,SAAS,KAAK,SAAS;QAC9B,MAAM,CAAC,KAAK,KAAK,KAAK;QACtB,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,KAAK,CAAC;QAEhC,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,MAAM,SAAS,CACb,uBAAuB,CAAC,UAAU,CAAC,EACnC,IAAI,CAAC,SAAS,CAAC;QACb,OAAO,EAAE,CAAC;QACV,SAAS;QACT,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,YAAY;QACZ,YAAY,EAAE,CAAC,GAAG,YAAY,CAAC;KACF,CAAC,EAChC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAClC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,UAAkB,EAClB,SAAiB,EACjB,KAAa;IAEb,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,UAAU,CAAC,CAAC;IACnD,IAAI,MAAM,EAAE,KAAK,KAAK,YAAY,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK;QAC5F,MAAM,MAAM,CAAC,uBAAuB,CAAC,UAAU,CAAC,CAAC,CAAC;AACtD,CAAC"}