@wirecat/cli-core 0.20.0 → 0.262.0

package/dist/sends/guard.d.ts

@@ -0,0 +1,96 @@
+import type { AppIdentity } from "../cli/app.js";
+import type { Settings } from "../cli/settings.js";
+import type { Id } from "../domain/models.js";
+import { FloodMemory } from "./flood.js";
+import { type AccountAction, type ChatAction, type SendEntry, SendJournal, type SendKind } from "./journal.js";
+import { type Level, type Permission, type PermissionKey } from "./permissions.js";
+import { RecipientList } from "./recipients.js";
+/** One write, as the guard is asked about it. `personIds` are checked and never journaled. */
+export interface GuardRequest {
+    /** `null` for a chat that does not exist yet — joining or creating one — or for the account itself: no list can name either. */
+    chatId: Id | null;
+    kind?: SendKind;
+    action?: ChatAction | AccountAction;
+    /** Messages a deletion names, or people a chat change adds. */
+    count?: number;
+    sendId?: string;
+    sendAs?: Id;
+    operationId?: string;
+    scheduledFor?: string;
+    notify?: boolean;
+    personIds?: Id[];
+    forEveryone?: boolean;
+    /** The command path, where the kind alone does not say it — a poll's vote is not a reaction's. */
+    key?: PermissionKey;
+}
+/**
+ * Asked when a write's level is `ask`: resolves when the owner said yes — a flag, or an answer at
+ * the terminal — and rejects with `confirmation_required` or `cancelled` otherwise.
+ */
+export type Asker = (key: PermissionKey, request: GuardRequest) => Promise<void>;
+/** What `MaxClient.messages.send` asks before it sends, and tells after — on every outcome. */
+export interface SendGuard {
+    /**
+     * Refuses, or lets the write through. One that counts toward the limit is also given a place in
+     * the journal under a lock, unless `reserve` is false — over a background server, the server holds it.
+     */
+    check(request: GuardRequest, options?: {
+        reserve?: boolean;
+    }): void;
+    /**
+     * The question a write at level `ask` needs, before `check`: `check` refuses such a write unless
+     * this request was answered yes, so a caller that skips it is refused rather than let through.
+     */
+    ask?(request: GuardRequest): Promise<void>;
+    record(entry: Omit<SendEntry, "at" | "profile">): void;
+}
+export interface SendGuardOptions {
+    profile: string;
+    /** The program's word, for the hints that say what to type; the recipient list's when not given. */
+    command?: string;
+    readOnly: boolean;
+    /** Named in the refusal, so the owner can find what decided it. */
+    readOnlyFrom: string;
+    /** A variable that refuses every write, whatever `permissions` or a flag say (a scheduled agent's). */
+    readOnlyLock?: string;
+    /** `undefined` allows every action; a list only those (`CLI-37`). */
+    allow?: readonly Permission[];
+    allowFrom?: string;
+    /** The command that changes `allow`, when the CLI's configuration has more places than profiles and defaults. */
+    allowFix?: string;
+    /**
+     * The levels by command path, defaults included. Without it, `readOnly` and `allow` alone decide
+     * and nothing asks — the guard a CLI built before levels existed.
+     */
+    permissions?: Readonly<Record<PermissionKey, Level>> | (() => Readonly<Record<PermissionKey, Level>>);
+    permissionSources?: Readonly<Record<PermissionKey, string>>;
+    permissionDefaults?: Readonly<Record<PermissionKey, Level>>;
+    permissionFix?: (request: GuardRequest, key: PermissionKey) => string;
+    ask?: Asker;
+    sendsPerHour: number;
+    journal: SendJournal;
+    recipients: RecipientList;
+    /** Where a messenger's "this account may not write" is remembered; without it nothing is held. */
+    flood?: FloodMemory;
+    warn: (message: string) => void;
+    now?: () => Date;
+}
+/**
+ * These stop a model that was talked into sending by a message it read. They do **not** stop an
+ * agent that edits the configuration itself — that needs a boundary outside this process
+ * (`docs/security.md`).
+ */
+export declare const sendGuard: ({ profile, recipients, command, readOnly, readOnlyFrom, readOnlyLock, allow, allowFrom, allowFix, permissions, permissionSources, permissionDefaults, permissionFix, ask, sendsPerHour, journal, flood, warn, now, }: SendGuardOptions) => SendGuard;
+/**
+ * The guard a profile's configuration asks for — the command's, and a background server's for every
+ * write it forwards. Built per request there, so `config set readOnly true` needs no restart.
+ */
+export declare const guardFor: (app: AppIdentity, settings: Settings, warn: (message: string) => void, env?: NodeJS.ProcessEnv, ask?: Asker) => SendGuard;
+/**
+ * Over a background server, the server journals what it forwards, with the outcome it saw; the command
+ * writes only the refusals of its own check, which never reached the server.
+ */
+export declare const sharedJournal: (guard: SendGuard, wire: {
+    readonly journals: boolean;
+} | undefined) => SendGuard;
+//# sourceMappingURL=guard.d.ts.map

package/dist/sends/guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../../src/sends/guard.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAChD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAClD,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,qBAAqB,CAAA;AAC7C,OAAO,EAAE,WAAW,EAAgB,MAAM,YAAY,CAAA;AACtD,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,SAAS,EACd,WAAW,EACX,KAAK,QAAQ,EAEd,MAAM,cAAc,CAAA;AACrB,OAAO,EAEL,KAAK,KAAK,EAEV,KAAK,UAAU,EACf,KAAK,aAAa,EAGnB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,aAAa,EAAqB,MAAM,iBAAiB,CAAA;AAIlE,8FAA8F;AAC9F,MAAM,WAAW,YAAY;IAC3B,gIAAgI;IAChI,MAAM,EAAE,EAAE,GAAG,IAAI,CAAA;IACjB,IAAI,CAAC,EAAE,QAAQ,CAAA;IACf,MAAM,CAAC,EAAE,UAAU,GAAG,aAAa,CAAA;IACnC,+DAA+D;IAC/D,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,EAAE,CAAA;IACX,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,SAAS,CAAC,EAAE,EAAE,EAAE,CAAA;IAChB,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,kGAAkG;IAClG,GAAG,CAAC,EAAE,aAAa,CAAA;CACpB;AAED;;;GAGG;AACH,MAAM,MAAM,KAAK,GAAG,CAAC,GAAG,EAAE,aAAa,EAAE,OAAO,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;AAEhF,+FAA+F;AAC/F,MAAM,WAAW,SAAS;IACxB;;;OAGG;IACH,KAAK,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAA;IACnE;;;OAGG;IACH,GAAG,CAAC,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1C,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,GAAG,SAAS,CAAC,GAAG,IAAI,CAAA;CACvD;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAA;IACf,oGAAoG;IACpG,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,OAAO,CAAA;IACjB,mEAAmE;IACnE,YAAY,EAAE,MAAM,CAAA;IACpB,uGAAuG;IACvG,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,qEAAqE;IACrE,KAAK,CAAC,EAAE,SAAS,UAAU,EAAE,CAAA;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,iHAAiH;IACjH,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB;;;OAGG;IACH,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;IACrG,iBAAiB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAA;IAC3D,kBAAkB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,CAAA;IAC3D,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,EAAE,aAAa,KAAK,MAAM,CAAA;IACrE,GAAG,CAAC,EAAE,KAAK,CAAA;IACX,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,WAAW,CAAA;IACpB,UAAU,EAAE,aAAa,CAAA;IACzB,kGAAkG;IAClG,KAAK,CAAC,EAAE,WAAW,CAAA;IACnB,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;IAC/B,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;CACjB;AAqCD;;;;GAIG;AACH,eAAO,MAAM,SAAS,yNAoBnB,gBAAgB,KAAG,SAyNrB,CAAA;AAUD;;;GAGG;AACH,eAAO,MAAM,QAAQ,QACd,WAAW,YACN,QAAQ,QACZ,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,QAC1B,MAAM,CAAC,UAAU,QAChB,KAAK,KACV,SAgBC,CAAA;AAEJ;;;GAGG;AACH,eAAO,MAAM,aAAa,UAAW,SAAS,QAAQ;IAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,GAAG,SAAS,KAAG,SAWxF,CAAA"}

package/dist/sends/guard.js

@@ -0,0 +1,250 @@
+import { randomUUID } from "node:crypto";
+import { CliError } from "@wirecat/cli-base";
+import { FloodMemory, floodPathFor } from "./flood.js";
+import { SendJournal, sendsPathFor, } from "./journal.js";
+import { keyForWrite, levelFor, permissionFor, skipFlagFor, } from "./permissions.js";
+import { RecipientList, recipientsPathFor } from "./recipients.js";
+const HOUR_MS = 60 * 60 * 1000;
+/**
+ * What puts something in front of somebody (max-cli `NEED-168`, widened by `NEED-282`). A message, a
+ * forward, an edit, a pin that notifies, a new group and people added to one all do. A reaction,
+ * a quiet pin or a change of title wakes nobody. A deletion wakes nobody either, but many at once
+ * is what a ban for automation looks like. An accepted join request adds a person, as `members.add` does.
+ * Joining chats and importing phone numbers in bulk wake nobody either, but are what spam accounts do first.
+ */
+const countsTowardLimit = ({ kind = "message", action, notify }) => kind === "message" ||
+    kind === "forward" ||
+    kind === "edit" ||
+    kind === "delete" ||
+    (kind === "pin" && notify === true) ||
+    action === "create" ||
+    action === "members.add" ||
+    action === "requests.accept" ||
+    action === "join" ||
+    action === "contact-import";
+/**
+ * Each deleted message, each person added to a group or let in by a request, and each imported number
+ * counts as one.
+ */
+const weightOf = ({ kind, action, count, people }) => kind === "delete"
+    ? (count ?? 1)
+    : action === "create" || action === "members.add" || action === "requests.accept" || action === "contact-import"
+        ? Math.max(1, people ?? count ?? 1)
+        : 1;
+/** A scheduled message counts in the hour the provider sends it. */
+const timeOf = (entry) => Date.parse(entry.scheduledFor ?? entry.at);
+/**
+ * These stop a model that was talked into sending by a message it read. They do **not** stop an
+ * agent that edits the configuration itself — that needs a boundary outside this process
+ * (`docs/security.md`).
+ */
+export const sendGuard = ({ profile, recipients, command = recipients.command, readOnly, readOnlyFrom, readOnlyLock, allow, allowFrom = "default", allowFix, permissions, permissionSources = {}, permissionDefaults, permissionFix, ask = refuseToAsk, sendsPerHour, journal, flood, warn, now = () => new Date(), }) => {
+    const currentPermissions = () => (typeof permissions === "function" ? permissions() : permissions);
+    let reservation;
+    const answered = new WeakSet();
+    const permitted = (request) => {
+        const { chatId, kind = "message", action, personIds } = request;
+        if (readOnlyLock) {
+            throw new CliError("permission_error", `this process is read-only (${readOnlyLock}) — it cannot send, react, change chats or change the account`);
+        }
+        const levels = currentPermissions();
+        if (levels === undefined) {
+            if (readOnly) {
+                throw new CliError("permission_error", `profile ${profile} is read-only (readOnly, from the ${readOnlyFrom}) — it cannot send, react, change chats or change the account`);
+            }
+            const permission = permissionFor(kind, action);
+            if (allow && !allow.includes(permission)) {
+                const fix = allowFix ??
+                    (allowFrom === "config defaults"
+                        ? `${command} config set --defaults allow`
+                        : `${command} ${profile} config set allow`);
+                throw new CliError("permission_error", `profile ${profile} does not allow ${permission} (allow: ${allow.join(", ") || "nothing"} — from the ${allowFrom}); ` +
+                    `to allow it: ${fix} ${[...allow, permission].join(",")}`, { permission });
+            }
+        }
+        else {
+            const key = request.key ?? keyForWrite(kind, action);
+            const { level, key: named } = levelFor(levels, key, permissionDefaults);
+            if (level === "deny" || level === "readonly") {
+                const fix = permissionFix?.(request, key) ?? `${command} ${profile} config set permissions.${key} allow`;
+                throw new CliError("permission_error", `profile ${profile} does not let ${key} write (permissions.${named} is ${level}, from the ` +
+                    `${permissionSources[named ?? ""] ?? "default"}); to allow it: ${fix}`, { permission: key });
+            }
+            if (level === "ask" && !answered.has(request)) {
+                throw new CliError("confirmation_required", `${key} asks before it acts, and it was not asked`);
+            }
+        }
+        const allowed = recipients.read();
+        if (chatId !== null && allowed && !allowed.some((chat) => chat.id === chatId)) {
+            throw new CliError("confirmation_required", `chat ${chatId} is not on the recipient list of profile ${profile} — ` +
+                `the owner adds it with \`${command} ${profile} recipients add ${chatId}\``, { chat_id: chatId });
+        }
+        // Adding somebody to a group writes to them as surely as a message does.
+        const strangers = allowed ? (personIds ?? []).filter((id) => !allowed.some((chat) => chat.partnerId === id)) : [];
+        if (strangers.length > 0) {
+            throw new CliError("confirmation_required", `${strangers.join(", ")} ${strangers.length === 1 ? "is" : "are"} not on the recipient list of profile ${profile} — ` +
+                `the owner adds the one-to-one chat with each person (\`${command} ${profile} recipients add <chat>\`); ` +
+                "a chat added to the list earlier is added again to be recognised", { person_ids: strangers });
+        }
+    };
+    const withinLimit = (request, entries) => {
+        const { chatId, sendId } = request;
+        const asked = { ...request, people: request.personIds?.length ?? request.count };
+        const count = weightOf(asked);
+        if (count > sendsPerHour) {
+            throw new CliError("rate_limited", `${count} at once is more than the hourly limit of profile ${profile} (sendsPerHour ${sendsPerHour}) — ` +
+                "do fewer at a time");
+        }
+        const at = request.scheduledFor ? Date.parse(request.scheduledFor) : now().getTime();
+        const counted = entries
+            .filter(countsTowardLimit)
+            .filter((entry) => entry.outcome === "sent" || entry.outcome === "outcome_unknown" || entry.outcome === "reserved")
+            .filter((entry) => Math.abs(timeOf(entry) - at) < HOUR_MS);
+        // A retry of a send whose outcome was unknown repeats its send id in the same chat, and the
+        // provider delivers one message for both. Only that: an id that was sent, or another chat, is a new send.
+        const unsure = (entry) => entry.outcome === "outcome_unknown";
+        const same = (a, b) => a.sendId !== undefined && a.sendId === b.sendId && a.chatId === b.chatId;
+        const last = [...counted].reverse().find((entry) => same(entry, { chatId, sendId }));
+        if (sendId !== undefined && last && unsure(last)) {
+            if (last.sendAs !== request.sendAs) {
+                throw new CliError("validation_error", "this send id was tried under another identity; repeat it with the same --send-as, or it may post twice", { send_id: sendId, retryable: false });
+            }
+            return false;
+        }
+        const recent = counted
+            .filter((entry, index) => !(unsure(entry) && counted.slice(index + 1).some((later) => same(later, entry))))
+            .map((entry) => ({ time: timeOf(entry), weight: weightOf(entry) }))
+            .sort((a, b) => a.time - b.time);
+        const used = recent.reduce((sum, { weight }) => sum + weight, 0);
+        if (used + count > sendsPerHour) {
+            // The limit may have been lowered below what the last hour already holds: it opens when
+            // enough of it has aged out, not when the oldest has.
+            let freed = 0;
+            const opening = recent.find(({ weight }) => {
+                freed += weight;
+                return used - freed + count <= sendsPerHour;
+            });
+            const nextMs = (opening?.time ?? 0) + HOUR_MS;
+            const next = new Date(nextMs).toISOString();
+            throw new CliError("rate_limited", `profile ${profile} has sent ${used} messages in the hour around ${new Date(at).toISOString()}, and its limit is ` +
+                `${sendsPerHour} (sendsPerHour) — the next send is possible at ${next}`, { retry_after_ms: nextMs - now().getTime(), retry_at: next });
+        }
+        return true;
+    };
+    return {
+        ask: async (request) => {
+            const levels = currentPermissions();
+            if (levels === undefined)
+                return;
+            const key = request.key ?? keyForWrite(request.kind ?? "message", request.action);
+            if (levelFor(levels, key, permissionDefaults).level !== "ask")
+                return;
+            await ask(key, request);
+            answered.add(request);
+        },
+        check: (request, { reserve = true } = {}) => {
+            permitted(request);
+            const asked = { ...request, people: request.personIds?.length ?? request.count };
+            const creatingTopic = request.kind === "chat" && request.action === "topic-create";
+            if (!countsTowardLimit(asked) && !creatingTopic)
+                return;
+            const block = flood?.sendBlock();
+            if (block) {
+                throw new CliError("permission_error", `profile ${profile} holds its writes until ${block.until}: ${block.hint} — reads still work; ` +
+                    `do not retry: the owner checks the account with \`${command} ${profile} doctor --online\`, and lifts the ` +
+                    `hold with \`${command} ${profile} flood clear\` once it is over`, { sendBlock: block, standing: { state: block.state, hint: block.hint } });
+            }
+            const checked = (entries) => {
+                if (!creatingTopic)
+                    return withinLimit(request, entries);
+                if (request.sendId === undefined)
+                    throw new CliError("validation_error", "a topic creation needs an attempt id");
+                if (entries.some((entry) => entry.action === "topic-create" &&
+                    entry.sendId === request.sendId &&
+                    ["sent", "outcome_unknown", "reserved"].includes(entry.outcome))) {
+                    throw new CliError("validation_error", "this topic creation was already attempted; check topics list and do not repeat an unknown creation", { send_id: request.sendId, retryable: false });
+                }
+                return true;
+            };
+            if (!reserve) {
+                checked(journal.entries());
+                return;
+            }
+            journal.locked(() => {
+                if (!checked(journal.entries()))
+                    return;
+                const id = randomUUID();
+                const { chatId, kind, action, sendId, operationId, scheduledFor, notify } = request;
+                journal.append({
+                    at: now().toISOString(),
+                    profile,
+                    chatId,
+                    outcome: "reserved",
+                    reservation: id,
+                    ...(kind ? { kind } : {}),
+                    ...(action ? { action } : {}),
+                    ...(asked.people === undefined ? {} : kind === "delete" ? { count: asked.people } : { people: asked.people }),
+                    ...(sendId === undefined ? {} : { sendId }),
+                    ...(operationId === undefined ? {} : { operationId }),
+                    ...(scheduledFor ? { scheduledFor } : {}),
+                    ...(notify === undefined ? {} : { notify }),
+                });
+                reservation = id;
+            });
+        },
+        // After a send, a failure to write here must not become the command's answer: the message is
+        // already with a person, and an error would invite the caller to send it again.
+        record: (entry) => {
+            const { personIds: _, ...kept } = entry;
+            const settles = entry.outcome === "refused" ? undefined : reservation;
+            reservation = undefined;
+            try {
+                journal.append({ at: now().toISOString(), profile, ...kept, ...(settles ? { reservation: settles } : {}) });
+            }
+            catch (error) {
+                warn(`this send is not in the send journal: ${error instanceof Error ? error.message : String(error)}`);
+            }
+        },
+    };
+};
+const refuseToAsk = async (key) => {
+    throw new CliError("confirmation_required", `${key} asks before it acts (its permission level is ask), and nobody is here to answer — ` +
+        `add ${skipFlagFor(key)} to go ahead`);
+};
+/**
+ * The guard a profile's configuration asks for — the command's, and a background server's for every
+ * write it forwards. Built per request there, so `config set readOnly true` needs no restart.
+ */
+export const guardFor = (app, settings, warn, env = process.env, ask) => sendGuard({
+    profile: settings.profile,
+    command: app.command,
+    readOnly: settings.readOnly,
+    readOnlyFrom: settings.sources.readOnly ?? "default",
+    ...(settings.readOnlyLock ? { readOnlyLock: settings.readOnlyLock } : {}),
+    ...(settings.allow ? { allow: settings.allow, allowFrom: settings.sources.allow ?? "default" } : {}),
+    permissions: () => settings.permissions,
+    permissionSources: settings.permissionSources,
+    ...(ask ? { ask } : {}),
+    sendsPerHour: settings.sendsPerHour,
+    journal: new SendJournal(sendsPathFor(app, settings.profile, env), { service: app.command, version: app.version }),
+    recipients: new RecipientList(recipientsPathFor(app, settings.profile, env), app.command),
+    flood: new FloodMemory(floodPathFor(app, settings.profile, env)),
+    warn,
+});
+/**
+ * Over a background server, the server journals what it forwards, with the outcome it saw; the command
+ * writes only the refusals of its own check, which never reached the server.
+ */
+export const sharedJournal = (guard, wire) => wire
+    ? {
+        // The check comes before the connection, when `journals` cannot tell yet; the server
+        // reserves under its own lock, and a command that falls back to its own socket goes unreserved.
+        check: (request) => guard.check(request, { reserve: false }),
+        ...(guard.ask ? { ask: guard.ask } : {}),
+        record: (entry) => {
+            if (entry.outcome === "refused" || !wire.journals)
+                guard.record(entry);
+        },
+    }
+    : guard;
+//# sourceMappingURL=guard.js.map

package/dist/sends/guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.js","sourceRoot":"","sources":["../../src/sends/guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAI5C,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACtD,OAAO,EAIL,WAAW,EAEX,YAAY,GACb,MAAM,cAAc,CAAA;AACrB,OAAO,EACL,WAAW,EAEX,QAAQ,EAGR,aAAa,EACb,WAAW,GACZ,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AAElE,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AA4E9B;;;;;;GAMG;AACH,MAAM,iBAAiB,GAAG,CAAC,EAAE,IAAI,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,EAAW,EAAE,EAAE,CAC1E,IAAI,KAAK,SAAS;IAClB,IAAI,KAAK,SAAS;IAClB,IAAI,KAAK,MAAM;IACf,IAAI,KAAK,QAAQ;IACjB,CAAC,IAAI,KAAK,KAAK,IAAI,MAAM,KAAK,IAAI,CAAC;IACnC,MAAM,KAAK,QAAQ;IACnB,MAAM,KAAK,aAAa;IACxB,MAAM,KAAK,iBAAiB;IAC5B,MAAM,KAAK,MAAM;IACjB,MAAM,KAAK,gBAAgB,CAAA;AAE7B;;;GAGG;AACH,MAAM,QAAQ,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAW,EAAU,EAAE,CACpE,IAAI,KAAK,QAAQ;IACf,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IACd,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,aAAa,IAAI,MAAM,KAAK,iBAAiB,IAAI,MAAM,KAAK,gBAAgB;QAC9G,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,IAAI,KAAK,IAAI,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC,CAAA;AAET,oEAAoE;AACpE,MAAM,MAAM,GAAG,CAAC,KAA6C,EAAU,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,EAAE,CAAC,CAAA;AAEpH;;;;GAIG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,EACxB,OAAO,EACP,UAAU,EACV,OAAO,GAAG,UAAU,CAAC,OAAO,EAC5B,QAAQ,EACR,YAAY,EACZ,YAAY,EACZ,KAAK,EACL,SAAS,GAAG,SAAS,EACrB,QAAQ,EACR,WAAW,EACX,iBAAiB,GAAG,EAAE,EACtB,kBAAkB,EAClB,aAAa,EACb,GAAG,GAAG,WAAW,EACjB,YAAY,EACZ,OAAO,EACP,KAAK,EACL,IAAI,EACJ,GAAG,GAAG,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,GACL,EAAa,EAAE;IAChC,MAAM,kBAAkB,GAAG,GAAG,EAAE,CAAC,CAAC,OAAO,WAAW,KAAK,UAAU,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAA;IAClG,IAAI,WAA+B,CAAA;IACnC,MAAM,QAAQ,GAAG,IAAI,OAAO,EAAgB,CAAA;IAE5C,MAAM,SAAS,GAAG,CAAC,OAAqB,EAAE,EAAE;QAC1C,MAAM,EAAE,MAAM,EAAE,IAAI,GAAG,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,CAAA;QAC/D,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,IAAI,QAAQ,CAChB,kBAAkB,EAClB,8BAA8B,YAAY,+DAA+D,CAC1G,CAAA;QACH,CAAC;QACD,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAA;QACnC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,IAAI,QAAQ,CAChB,kBAAkB,EAClB,WAAW,OAAO,qCAAqC,YAAY,+DAA+D,CACnI,CAAA;YACH,CAAC;YACD,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;YAC9C,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBACzC,MAAM,GAAG,GACP,QAAQ;oBACR,CAAC,SAAS,KAAK,iBAAiB;wBAC9B,CAAC,CAAC,GAAG,OAAO,8BAA8B;wBAC1C,CAAC,CAAC,GAAG,OAAO,IAAI,OAAO,mBAAmB,CAAC,CAAA;gBAC/C,MAAM,IAAI,QAAQ,CAChB,kBAAkB,EAClB,WAAW,OAAO,mBAAmB,UAAU,YAAY,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,eAAe,SAAS,KAAK;oBACnH,gBAAgB,GAAG,IAAI,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAC3D,EAAE,UAAU,EAAE,CACf,CAAA;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;YACpD,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE,kBAAkB,CAAC,CAAA;YACvE,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;gBAC7C,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,GAAG,OAAO,IAAI,OAAO,2BAA2B,GAAG,QAAQ,CAAA;gBACxG,MAAM,IAAI,QAAQ,CAChB,kBAAkB,EAClB,WAAW,OAAO,iBAAiB,GAAG,uBAAuB,KAAK,OAAO,KAAK,aAAa;oBACzF,GAAG,iBAAiB,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,SAAS,mBAAmB,GAAG,EAAE,EACxE,EAAE,UAAU,EAAE,GAAG,EAAE,CACpB,CAAA;YACH,CAAC;YACD,IAAI,KAAK,KAAK,KAAK,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9C,MAAM,IAAI,QAAQ,CAAC,uBAAuB,EAAE,GAAG,GAAG,4CAA4C,CAAC,CAAA;YACjG,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,CAAA;QACjC,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,QAAQ,CAChB,uBAAuB,EACvB,QAAQ,MAAM,4CAA4C,OAAO,KAAK;gBACpE,4BAA4B,OAAO,IAAI,OAAO,mBAAmB,MAAM,IAAI,EAC7E,EAAE,OAAO,EAAE,MAAM,EAAE,CACpB,CAAA;QACH,CAAC;QACD,yEAAyE;QACzE,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QACjH,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,QAAQ,CAChB,uBAAuB,EACvB,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,yCAAyC,OAAO,KAAK;gBACnH,0DAA0D,OAAO,IAAI,OAAO,6BAA6B;gBACzG,kEAAkE,EACpE,EAAE,UAAU,EAAE,SAAS,EAAE,CAC1B,CAAA;QACH,CAAC;IACH,CAAC,CAAA;IAED,MAAM,WAAW,GAAG,CAAC,OAAqB,EAAE,OAAoB,EAAE,EAAE;QAClE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAA;QAClC,MAAM,KAAK,GAAG,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,EAAE,MAAM,IAAI,OAAO,CAAC,KAAK,EAAE,CAAA;QAChF,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;QAC7B,IAAI,KAAK,GAAG,YAAY,EAAE,CAAC;YACzB,MAAM,IAAI,QAAQ,CAChB,cAAc,EACd,GAAG,KAAK,qDAAqD,OAAO,kBAAkB,YAAY,MAAM;gBACtG,oBAAoB,CACvB,CAAA;QACH,CAAC;QAED,MAAM,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAA;QACpF,MAAM,OAAO,GAAG,OAAO;aACpB,MAAM,CAAC,iBAAiB,CAAC;aACzB,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,MAAM,IAAI,KAAK,CAAC,OAAO,KAAK,iBAAiB,IAAI,KAAK,CAAC,OAAO,KAAK,UAAU,CAC3G;aACA,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,OAAO,CAAC,CAAA;QAC5D,4FAA4F;QAC5F,0GAA0G;QAC1G,MAAM,MAAM,GAAG,CAAC,KAAgB,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,iBAAiB,CAAA;QACxE,MAAM,IAAI,GAAG,CAAC,CAAY,EAAE,CAAyC,EAAE,EAAE,CACvE,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,CAAA;QAC1E,MAAM,IAAI,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAA;QACpF,IAAI,MAAM,KAAK,SAAS,IAAI,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACjD,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnC,MAAM,IAAI,QAAQ,CAChB,kBAAkB,EAClB,wGAAwG,EACxG,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CACtC,CAAA;YACH,CAAC;YACD,OAAO,KAAK,CAAA;QACd,CAAC;QACD,MAAM,MAAM,GAAG,OAAO;aACnB,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;aAC1G,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;aAClE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAA;QAClC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,GAAG,GAAG,MAAM,EAAE,CAAC,CAAC,CAAA;QAChE,IAAI,IAAI,GAAG,KAAK,GAAG,YAAY,EAAE,CAAC;YAChC,wFAAwF;YACxF,sDAAsD;YACtD,IAAI,KAAK,GAAG,CAAC,CAAA;YACb,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE;gBACzC,KAAK,IAAI,MAAM,CAAA;gBACf,OAAO,IAAI,GAAG,KAAK,GAAG,KAAK,IAAI,YAAY,CAAA;YAC7C,CAAC,CAAC,CAAA;YACF,MAAM,MAAM,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,CAAC,GAAG,OAAO,CAAA;YAC7C,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAA;YAC3C,MAAM,IAAI,QAAQ,CAChB,cAAc,EACd,WAAW,OAAO,aAAa,IAAI,gCAAgC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,qBAAqB;gBAChH,GAAG,YAAY,kDAAkD,IAAI,EAAE,EACzE,EAAE,cAAc,EAAE,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAC7D,CAAA;QACH,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC,CAAA;IAED,OAAO;QACL,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACrB,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAA;YACnC,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAM;YAChC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,OAAO,CAAC,IAAI,IAAI,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;YACjF,IAAI,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE,kBAAkB,CAAC,CAAC,KAAK,KAAK,KAAK;gBAAE,OAAM;YACrE,MAAM,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;YACvB,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACvB,CAAC;QAED,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,OAAO,GAAG,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE;YAC1C,SAAS,CAAC,OAAO,CAAC,CAAA;YAClB,MAAM,KAAK,GAAG,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,EAAE,MAAM,IAAI,OAAO,CAAC,KAAK,EAAE,CAAA;YAChF,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,cAAc,CAAA;YAClF,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa;gBAAE,OAAM;YACvD,MAAM,KAAK,GAAG,KAAK,EAAE,SAAS,EAAE,CAAA;YAChC,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,IAAI,QAAQ,CAChB,kBAAkB,EAClB,WAAW,OAAO,2BAA2B,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,uBAAuB;oBAC5F,qDAAqD,OAAO,IAAI,OAAO,oCAAoC;oBAC3G,eAAe,OAAO,IAAI,OAAO,gCAAgC,EACnE,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,CACzE,CAAA;YACH,CAAC;YACD,MAAM,OAAO,GAAG,CAAC,OAAoB,EAAE,EAAE;gBACvC,IAAI,CAAC,aAAa;oBAAE,OAAO,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;gBACxD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;oBAAE,MAAM,IAAI,QAAQ,CAAC,kBAAkB,EAAE,sCAAsC,CAAC,CAAA;gBAChH,IACE,OAAO,CAAC,IAAI,CACV,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,MAAM,KAAK,cAAc;oBAC/B,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;oBAC/B,CAAC,MAAM,EAAE,iBAAiB,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAClE,EACD,CAAC;oBACD,MAAM,IAAI,QAAQ,CAChB,kBAAkB,EAClB,oGAAoG,EACpG,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAC9C,CAAA;gBACH,CAAC;gBACD,OAAO,IAAI,CAAA;YACb,CAAC,CAAA;YACD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;gBAC1B,OAAM;YACR,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE;gBAClB,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;oBAAE,OAAM;gBACvC,MAAM,EAAE,GAAG,UAAU,EAAE,CAAA;gBACvB,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,OAAO,CAAA;gBACnF,OAAO,CAAC,MAAM,CAAC;oBACb,EAAE,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE;oBACvB,OAAO;oBACP,MAAM;oBACN,OAAO,EAAE,UAAU;oBACnB,WAAW,EAAE,EAAE;oBACf,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACzB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC7B,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;oBAC7G,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;oBAC3C,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;oBACrD,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACzC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;iBAC5C,CAAC,CAAA;gBACF,WAAW,GAAG,EAAE,CAAA;YAClB,CAAC,CAAC,CAAA;QACJ,CAAC;QAED,6FAA6F;QAC7F,gFAAgF;QAChF,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YAChB,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,KAA4C,CAAA;YAC9E,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAA;YACrE,WAAW,GAAG,SAAS,CAAA;YACvB,IAAI,CAAC;gBACH,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;YAC7G,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,yCAAyC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;YACzG,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC,CAAA;AAED,MAAM,WAAW,GAAU,KAAK,EAAE,GAAG,EAAE,EAAE;IACvC,MAAM,IAAI,QAAQ,CAChB,uBAAuB,EACvB,GAAG,GAAG,qFAAqF;QACzF,OAAO,WAAW,CAAC,GAAG,CAAC,cAAc,CACxC,CAAA;AACH,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,CACtB,GAAgB,EAChB,QAAkB,EAClB,IAA+B,EAC/B,GAAG,GAAsB,OAAO,CAAC,GAAG,EACpC,GAAW,EACA,EAAE,CACb,SAAS,CAAC;IACR,OAAO,EAAE,QAAQ,CAAC,OAAO;IACzB,OAAO,EAAE,GAAG,CAAC,OAAO;IACpB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;IAC3B,YAAY,EAAE,QAAQ,CAAC,OAAO,CAAC,QAAQ,IAAI,SAAS;IACpD,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACpG,WAAW,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,WAAW;IACvC,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;IAC7C,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACvB,YAAY,EAAE,QAAQ,CAAC,YAAY;IACnC,OAAO,EAAE,IAAI,WAAW,CAAC,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;IAClH,UAAU,EAAE,IAAI,aAAa,CAAC,iBAAiB,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC;IACzF,KAAK,EAAE,IAAI,WAAW,CAAC,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAChE,IAAI;CACL,CAAC,CAAA;AAEJ;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,KAAgB,EAAE,IAAgD,EAAa,EAAE,CAC7G,IAAI;IACF,CAAC,CAAC;QACE,qFAAqF;QACrF,gGAAgG;QAChG,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5D,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YAChB,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,QAAQ;gBAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACxE,CAAC;KACF;IACH,CAAC,CAAC,KAAK,CAAA"}

package/dist/sends/guarded.d.ts

@@ -0,0 +1,40 @@
+import { AsyncLocalStorage } from "node:async_hooks";
+import type { Id } from "../domain/models.js";
+import type { SendGuard } from "./guard.js";
+import type { SendEntry } from "./journal.js";
+import type { PermissionKey } from "./permissions.js";
+/** `personIds` reach the guard's recipient check and never the journal. */
+type Attempt = Omit<SendEntry, "at" | "profile" | "outcome"> & {
+    operationId: string;
+    key?: PermissionKey;
+    personIds?: Id[];
+};
+/** A write's answer, with the id its journal lines and run events carry. */
+export type Operated<T> = T & {
+    operationId: string;
+};
+/** A write that has gone and not been answered: `cut` records it as an unknown outcome, once. */
+export interface WriteInFlight {
+    operationId: string;
+    preparing?: boolean;
+    cut: () => void;
+}
+/**
+ * The writes in flight inside one command's deadline (`withDeadline`). A deadline that ends the
+ * command while one is out cannot say "timeout" — the messenger may have carried it out — so it
+ * cuts each into an unknown outcome. Per deadline, not per process: an MCP server runs many.
+ */
+export declare const writesInFlight: AsyncLocalStorage<Set<WriteInFlight>>;
+export declare const withWriteScope: <T>(scope: Set<WriteInFlight>, body: () => T) => T;
+export declare const stopWrites: (scope: Set<WriteInFlight>, reason: unknown) => void;
+/** The write in progress, so the run events of the calls it makes name it without the port passing it along. */
+export declare const currentOperation: () => string | undefined;
+/**
+ * **Checked before it goes, recorded after, on every outcome** — the shape of every write. The chat
+ * must already be resolved and the adapter's method found: a throw between `check` and `record`
+ * would leave a reservation counted against the hourly limit.
+ */
+export declare const guardedWrite: <T>(guard: SendGuard, attempt: Attempt, act: () => Promise<T>, settled?: (done: T) => Partial<Attempt>, prepare?: () => Promise<void>) => Promise<T>;
+export declare const codeOf: (error: unknown) => string;
+export {};
+//# sourceMappingURL=guarded.d.ts.map

package/dist/sends/guarded.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guarded.d.ts","sourceRoot":"","sources":["../../src/sends/guarded.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAEpD,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,qBAAqB,CAAA;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAC3C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAErD,2EAA2E;AAC3E,KAAK,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,GAAG,SAAS,GAAG,SAAS,CAAC,GAAG;IAC7D,WAAW,EAAE,MAAM,CAAA;IACnB,GAAG,CAAC,EAAE,aAAa,CAAA;IACnB,SAAS,CAAC,EAAE,EAAE,EAAE,CAAA;CACjB,CAAA;AAED,4EAA4E;AAC5E,MAAM,MAAM,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,CAAA;AAIrD,iGAAiG;AACjG,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,GAAG,EAAE,MAAM,IAAI,CAAA;CAChB;AAED;;;;GAIG;AACH,eAAO,MAAM,cAAc,uCAA8C,CAAA;AAQzE,eAAO,MAAM,cAAc,GAAI,CAAC,SAAS,GAAG,CAAC,aAAa,CAAC,QAAQ,MAAM,CAAC,KAAG,CAI5E,CAAA;AACD,eAAO,MAAM,UAAU,UAAW,GAAG,CAAC,aAAa,CAAC,UAAU,OAAO,KAAG,IAGvE,CAAA;AAKD,gHAAgH;AAChH,eAAO,MAAM,gBAAgB,QAAO,MAAM,GAAG,SAA+B,CAAA;AAE5E;;;;GAIG;AACH,eAAO,MAAM,YAAY,GAAU,CAAC,SAC3B,SAAS,WACP,OAAO,OACX,MAAM,OAAO,CAAC,CAAC,CAAC,YACZ,CAAC,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,YAC5B,MAAM,OAAO,CAAC,IAAI,CAAC,KAC5B,OAAO,CAAC,CAAC,CAyDX,CAAA;AAED,eAAO,MAAM,MAAM,UAAW,OAAO,KAAG,MACgE,CAAA"}

package/dist/sends/guarded.js

@@ -0,0 +1,104 @@
+import { AsyncLocalStorage } from "node:async_hooks";
+import { CliError } from "@wirecat/cli-base";
+const current = new AsyncLocalStorage();
+/**
+ * The writes in flight inside one command's deadline (`withDeadline`). A deadline that ends the
+ * command while one is out cannot say "timeout" — the messenger may have carried it out — so it
+ * cuts each into an unknown outcome. Per deadline, not per process: an MCP server runs many.
+ */
+export const writesInFlight = new AsyncLocalStorage();
+const parents = new WeakMap();
+const stopped = new WeakMap();
+const scopesFor = (scope = writesInFlight.getStore()) => {
+    const result = [];
+    for (let at = scope; at; at = parents.get(at))
+        result.push(at);
+    return result;
+};
+export const withWriteScope = (scope, body) => {
+    const parent = writesInFlight.getStore();
+    if (parent && parent !== scope)
+        parents.set(scope, parent);
+    return writesInFlight.run(scope, body);
+};
+export const stopWrites = (scope, reason) => {
+    stopped.set(scope, reason);
+    for (const write of scope)
+        write.cut();
+};
+const refuseStopped = (scopes) => {
+    for (const scope of scopes)
+        if (stopped.has(scope))
+            throw stopped.get(scope);
+};
+/** The write in progress, so the run events of the calls it makes name it without the port passing it along. */
+export const currentOperation = () => current.getStore();
+/**
+ * **Checked before it goes, recorded after, on every outcome** — the shape of every write. The chat
+ * must already be resolved and the adapter's method found: a throw between `check` and `record`
+ * would leave a reservation counted against the hourly limit.
+ */
+export const guardedWrite = async (guard, attempt, act, settled = () => ({}), prepare) => {
+    const scopes = scopesFor();
+    refuseStopped(scopes);
+    try {
+        await guard.ask?.(attempt);
+        refuseStopped(scopes);
+        guard.check(attempt);
+    }
+    catch (error) {
+        guard.record({ ...attempt, outcome: "refused", errorCode: codeOf(error) });
+        throw error;
+    }
+    let recorded = false;
+    const once = (entry) => {
+        if (recorded)
+            return;
+        recorded = true;
+        guard.record(entry);
+    };
+    let cancelled = false;
+    const flight = {
+        operationId: attempt.operationId,
+        preparing: prepare !== undefined,
+        cut: () => {
+            cancelled = true;
+            once({
+                ...attempt,
+                outcome: flight.preparing ? "failed" : "outcome_unknown",
+                errorCode: flight.preparing ? "timeout" : "outcome_unknown",
+            });
+        },
+    };
+    for (const scope of scopes)
+        scope.add(flight);
+    try {
+        if (prepare !== undefined)
+            await prepare();
+        if (cancelled)
+            throw new CliError("timeout", "the command ended before sending; nothing was sent");
+        flight.preparing = false;
+        const done = await current.run(attempt.operationId, act);
+        if (cancelled)
+            throw new CliError("outcome_unknown", "the command ended with a write in flight; check its result before continuing", { operation_id: attempt.operationId });
+        once({ ...attempt, ...settled(done), outcome: "sent" });
+        return done;
+    }
+    catch (error) {
+        const code = codeOf(error);
+        once({ ...attempt, outcome: code === "outcome_unknown" ? "outcome_unknown" : "failed", errorCode: code });
+        if (code === "outcome_unknown" && error instanceof Error)
+            throw new CliError("outcome_unknown", error.message, {
+                ...error.details,
+                operation_id: attempt.operationId,
+                retryable: false,
+            });
+        throw error;
+    }
+    finally {
+        for (const scope of scopes)
+            scope.delete(flight);
+    }
+};
+export const codeOf = (error) => typeof error?.code === "string" ? error.code : "unknown";
+//# sourceMappingURL=guarded.js.map

package/dist/sends/guarded.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guarded.js","sourceRoot":"","sources":["../../src/sends/guarded.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAgB5C,MAAM,OAAO,GAAG,IAAI,iBAAiB,EAAU,CAAA;AAS/C;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,iBAAiB,EAAsB,CAAA;AACzE,MAAM,OAAO,GAAG,IAAI,OAAO,EAA0C,CAAA;AACrE,MAAM,OAAO,GAAG,IAAI,OAAO,EAA+B,CAAA;AAC1D,MAAM,SAAS,GAAG,CAAC,KAAK,GAAG,cAAc,CAAC,QAAQ,EAAE,EAAwB,EAAE;IAC5E,MAAM,MAAM,GAAyB,EAAE,CAAA;IACvC,KAAK,IAAI,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC9D,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AACD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAI,KAAyB,EAAE,IAAa,EAAK,EAAE;IAC/E,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,EAAE,CAAA;IACxC,IAAI,MAAM,IAAI,MAAM,KAAK,KAAK;QAAE,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;IAC1D,OAAO,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;AACxC,CAAC,CAAA;AACD,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAyB,EAAE,MAAe,EAAQ,EAAE;IAC7E,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;IAC1B,KAAK,MAAM,KAAK,IAAI,KAAK;QAAE,KAAK,CAAC,GAAG,EAAE,CAAA;AACxC,CAAC,CAAA;AACD,MAAM,aAAa,GAAG,CAAC,MAAqC,EAAE,EAAE;IAC9D,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;AAC9E,CAAC,CAAA;AAED,gHAAgH;AAChH,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAuB,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAA;AAE5E;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAC/B,KAAgB,EAChB,OAAgB,EAChB,GAAqB,EACrB,OAAO,GAAkC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EACnD,OAA6B,EACjB,EAAE;IACd,MAAM,MAAM,GAAG,SAAS,EAAE,CAAA;IAC1B,aAAa,CAAC,MAAM,CAAC,CAAA;IACrB,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAA;QAC1B,aAAa,CAAC,MAAM,CAAC,CAAA;QACrB,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAC1E,MAAM,KAAK,CAAA;IACb,CAAC;IACD,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,MAAM,IAAI,GAAG,CAAC,KAAyC,EAAE,EAAE;QACzD,IAAI,QAAQ;YAAE,OAAM;QACpB,QAAQ,GAAG,IAAI,CAAA;QACf,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACrB,CAAC,CAAA;IACD,IAAI,SAAS,GAAG,KAAK,CAAA;IACrB,MAAM,MAAM,GAAkB;QAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,SAAS,EAAE,OAAO,KAAK,SAAS;QAChC,GAAG,EAAE,GAAG,EAAE;YACR,SAAS,GAAG,IAAI,CAAA;YAChB,IAAI,CAAC;gBACH,GAAG,OAAO;gBACV,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,iBAAiB;gBACxD,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB;aAC5D,CAAC,CAAA;QACJ,CAAC;KACF,CAAA;IACD,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IAC7C,IAAI,CAAC;QACH,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM,OAAO,EAAE,CAAA;QAC1C,IAAI,SAAS;YAAE,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE,oDAAoD,CAAC,CAAA;QAClG,MAAM,CAAC,SAAS,GAAG,KAAK,CAAA;QACxB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAA;QACxD,IAAI,SAAS;YACX,MAAM,IAAI,QAAQ,CAChB,iBAAiB,EACjB,8EAA8E,EAC9E,EAAE,YAAY,EAAE,OAAO,CAAC,WAAW,EAAE,CACtC,CAAA;QACH,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAA;QACvD,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;QAC1B,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACzG,IAAI,IAAI,KAAK,iBAAiB,IAAI,KAAK,YAAY,KAAK;YACtD,MAAM,IAAI,QAAQ,CAAC,iBAAiB,EAAE,KAAK,CAAC,OAAO,EAAE;gBACnD,GAAI,KAAkB,CAAC,OAAO;gBAC9B,YAAY,EAAE,OAAO,CAAC,WAAW;gBACjC,SAAS,EAAE,KAAK;aACjB,CAAC,CAAA;QACJ,MAAM,KAAK,CAAA;IACb,CAAC;YAAS,CAAC;QACT,KAAK,MAAM,KAAK,IAAI,MAAM;YAAE,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAClD,CAAC;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,KAAc,EAAU,EAAE,CAC/C,OAAQ,KAA4B,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,KAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA"}

package/dist/sends/index.d.ts

@@ -0,0 +1,9 @@
+export { type FloodDeadline, FloodMemory, type FloodState, FROZEN_HOLD_MS, floodPathFor, LIMITED_HOLD_MS, type SendBlock, } from "./flood.js";
+export { type Asker, type GuardRequest, guardFor, type SendGuard, type SendGuardOptions, sendGuard, sharedJournal, } from "./guard.js";
+export { currentOperation, guardedWrite, type Operated } from "./guarded.js";
+export { type AccountAction, type ChatAction, type SendEntry, SendJournal, type SendKind, type SendOutcome, sendsPathFor, } from "./journal.js";
+export { assertStatsPermissionsCurrent, DEFAULT_PERMISSIONS, fromOldSettings, keyForCommand, keyForWrite, LEVELS, type Level, layerPermissions, levelFor, PERMISSIONS, type Permission, type PermissionKey, permissionFor, permissionOverrides, readKeysForCommand, skipFlagFor, WRITE_KEYS, } from "./permissions.js";
+export { type Recipient, RecipientList, recipientsPathFor } from "./recipients.js";
+export { newOperationId, newSendId } from "./send-id.js";
+export { readUpload, type Upload, type UploadKind } from "./upload.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/sends/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/sends/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAClB,WAAW,EACX,KAAK,UAAU,EACf,cAAc,EACd,YAAY,EACZ,eAAe,EACf,KAAK,SAAS,GACf,MAAM,YAAY,CAAA;AACnB,OAAO,EACL,KAAK,KAAK,EACV,KAAK,YAAY,EACjB,QAAQ,EACR,KAAK,SAAS,EACd,KAAK,gBAAgB,EACrB,SAAS,EACT,aAAa,GACd,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,KAAK,QAAQ,EAAE,MAAM,cAAc,CAAA;AAC5E,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,SAAS,EACd,WAAW,EACX,KAAK,QAAQ,EACb,KAAK,WAAW,EAChB,YAAY,GACb,MAAM,cAAc,CAAA;AACrB,OAAO,EACL,6BAA6B,EAC7B,mBAAmB,EACnB,eAAe,EACf,aAAa,EACb,WAAW,EACX,MAAM,EACN,KAAK,KAAK,EACV,gBAAgB,EAChB,QAAQ,EACR,WAAW,EACX,KAAK,UAAU,EACf,KAAK,aAAa,EAClB,aAAa,EACb,mBAAmB,EACnB,kBAAkB,EAClB,WAAW,EACX,UAAU,GACX,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,KAAK,SAAS,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AAClF,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AACxD,OAAO,EAAE,UAAU,EAAE,KAAK,MAAM,EAAE,KAAK,UAAU,EAAE,MAAM,aAAa,CAAA"}

package/dist/sends/index.js

@@ -0,0 +1,9 @@
+export { FloodMemory, FROZEN_HOLD_MS, floodPathFor, LIMITED_HOLD_MS, } from "./flood.js";
+export { guardFor, sendGuard, sharedJournal, } from "./guard.js";
+export { currentOperation, guardedWrite } from "./guarded.js";
+export { SendJournal, sendsPathFor, } from "./journal.js";
+export { assertStatsPermissionsCurrent, DEFAULT_PERMISSIONS, fromOldSettings, keyForCommand, keyForWrite, LEVELS, layerPermissions, levelFor, PERMISSIONS, permissionFor, permissionOverrides, readKeysForCommand, skipFlagFor, WRITE_KEYS, } from "./permissions.js";
+export { RecipientList, recipientsPathFor } from "./recipients.js";
+export { newOperationId, newSendId } from "./send-id.js";
+export { readUpload } from "./upload.js";
+//# sourceMappingURL=index.js.map

package/dist/sends/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/sends/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,WAAW,EAEX,cAAc,EACd,YAAY,EACZ,eAAe,GAEhB,MAAM,YAAY,CAAA;AACnB,OAAO,EAGL,QAAQ,EAGR,SAAS,EACT,aAAa,GACd,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAiB,MAAM,cAAc,CAAA;AAC5E,OAAO,EAIL,WAAW,EAGX,YAAY,GACb,MAAM,cAAc,CAAA;AACrB,OAAO,EACL,6BAA6B,EAC7B,mBAAmB,EACnB,eAAe,EACf,aAAa,EACb,WAAW,EACX,MAAM,EAEN,gBAAgB,EAChB,QAAQ,EACR,WAAW,EAGX,aAAa,EACb,mBAAmB,EACnB,kBAAkB,EAClB,WAAW,EACX,UAAU,GACX,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAkB,aAAa,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AAClF,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AACxD,OAAO,EAAE,UAAU,EAAgC,MAAM,aAAa,CAAA"}