@xyo-network/event-kit-node 2.2.0 → 2.2.1

package/dist/node/runtime.mjs.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/runtime/boundedFetch.ts", "../../src/runtime/abort.ts", "../../src/runtime/handshakeDiscovery.ts", "../../src/runtime/httpsTransport.ts", "../../src/runtime/sources.ts", "../../src/runtime/publisherRuntime.ts", "../../src/runtime/publisherDeliveryState.ts", "../../src/runtime/sourceSigner.ts", "../../src/runtime/restGateway.ts", "../../src/runtime/sqliteHandshakeStores.ts", "../../src/handshakeMutationIntent.ts", "../../src/runtime/sqlitePublisherState.ts", "../../src/filesystemJson.ts"],
-  "sourcesContent": ["import { Buffer } from 'node:buffer'\n\nimport type { FetchGetUrlFunc } from 'ethers'\n\nimport { publisherAbortScope } from './abort.ts'\nexport interface BoundedPublisherFetchOptions {\n  readonly maxConcurrency?: number\n  readonly maxResponseBytes?: number\n  readonly requestTimeoutMs?: number\n  readonly signal?: AbortSignal\n}\n/** Per-instance SDK transport: aborts the real request, including its body, without changing global fetch. */\nexport function createBoundedPublisherFetch(options: BoundedPublisherFetchOptions = {}) {\n  const owner = new AbortController()\n  const timeout = options.requestTimeoutMs ?? 10_000\n  const maximum = options.maxResponseBytes ?? 16 * 1024 * 1024\n  const concurrency = options.maxConcurrency ?? 16\n  if (!Number.isSafeInteger(timeout) || timeout < 100 || timeout > 60_000\n    || !Number.isSafeInteger(maximum) || maximum < 1 || maximum > 64 * 1024 * 1024\n    || !Number.isSafeInteger(concurrency) || concurrency < 1 || concurrency > 64)\n    throw new Error('Invalid publisher fetch limits')\n  const active = new Set<Promise<Response>>()\n  const nativeFetch = globalThis.fetch.bind(globalThis)\n  const fetchFn: typeof globalThis.fetch = (input, init) => {\n    if (active.size >= concurrency)\n      return Promise.reject(new Error('Publisher HTTP concurrency limit exceeded'))\n    const operation = (async () => {\n      const signals = [owner.signal,\n        ...(options.signal === undefined ? [] : [options.signal]),\n        ...(init?.signal == null ? [] : [init.signal]),\n        ...(input instanceof Request ? [input.signal] : [])]\n      const scope = publisherAbortScope(signals, timeout)\n      try {\n        scope.signal.throwIfAborted()\n        const response = await nativeFetch(input, {\n          ...init, redirect: 'error', signal: scope.signal,\n        })\n        if (response.body === null)\n          return response\n        const reader = response.body.getReader()\n        const chunks: Uint8Array[] = []\n        let size = 0\n        try {\n          for (;;) {\n            const chunk = await reader.read()\n            if (chunk.done)\n              break\n            const bytes: unknown = chunk.value\n            if (!(bytes instanceof Uint8Array)) throw new Error('Publisher HTTP body returned a non-byte chunk')\n            size += bytes.byteLength\n            if (size > maximum) {\n              await reader.cancel()\n              throw new Error('Publisher HTTP body exceeds its bound')\n            }\n            chunks.push(bytes)\n          }\n        } finally {\n          reader.releaseLock()\n        }\n        const headers = new Headers(response.headers)\n        headers.delete('content-encoding')\n        headers.delete('transfer-encoding')\n        headers.set('content-length', String(size))\n        return new Response(Buffer.concat(chunks), {\n          status: response.status, statusText: response.statusText, headers,\n        })\n      } finally {\n        scope.dispose()\n      }\n    })()\n    active.add(operation)\n    void operation.then(() => active.delete(operation), () => active.delete(operation))\n    return operation\n  }\n  return {\n    fetchFn,\n    async close() {\n      owner.abort()\n      await Promise.allSettled(active)\n    },\n    get activeRequests() {\n      return active.size\n    },\n  }\n}\n\n/** Ethers' documented per-request HTTP hook, without its unbounded Node body reader. */\nexport function createBoundedPublisherEthersTransport(options: BoundedPublisherFetchOptions = {}) {\n  const bounded = createBoundedPublisherFetch(options)\n  const getUrl: FetchGetUrlFunc = async (request, cancellation) => {\n    const controller = new AbortController()\n    cancellation?.addListener(() => controller.abort())\n    cancellation?.checkSignal()\n    const response = await bounded.fetchFn(request.url, {\n      body: request.body === null ? undefined : Buffer.from(request.body),\n      headers: request.headers,\n      method: request.method,\n      signal: controller.signal,\n    })\n    return {\n      body: new Uint8Array(await response.arrayBuffer()),\n      headers: Object.fromEntries(response.headers),\n      statusCode: response.status,\n      statusMessage: response.statusText,\n    }\n  }\n  return {\n    getUrl,\n    async close() { await bounded.close() },\n    get activeRequests() { return bounded.activeRequests },\n  }\n}\n", "import { clearTimeout, setTimeout } from 'node:timers'\n\n/** Own every listener/timer used by a bounded operation; disposal is mandatory. */\nexport function publisherAbortScope(signals: readonly AbortSignal[], timeoutMs?: number) {\n  const controller = new AbortController()\n  const abort = () => controller.abort()\n  const timer = timeoutMs === undefined ? undefined : setTimeout(abort, timeoutMs)\n  timer?.unref()\n  for (const signal of signals) {\n    if (signal.aborted) controller.abort()\n    else signal.addEventListener('abort', abort, { once: true })\n  }\n  return {\n    signal: controller.signal,\n    dispose() {\n      if (timer !== undefined) clearTimeout(timer)\n      for (const signal of signals) signal.removeEventListener('abort', abort)\n    },\n  }\n}\n", "import { isDeepStrictEqual } from 'node:util'\n\nimport { decryptWakeSubscription, sourceWakeFilterHash } from '@xyo-network/event-kit-protocol'\nimport type {\n  BestEffortDeliveryPolicy, EndpointChallengeResponse, WakeDeliveryMode,\n} from '@xyo-network/event-kit-schemas'\nimport { EndpointChallengeResponseZod } from '@xyo-network/event-kit-schemas'\nimport type { FinalizedSubscriptionTuple } from '@xyo-network/event-kit-statement-graph'\n\nimport type { PublisherEncryptionKeyCustody, PublisherHandshakeClient } from '../handshakeClients.ts'\nimport { publisherAbortScope } from './abort.ts'\nimport type { PublisherHttpsTransport } from './httpsTransport.ts'\nimport type {\n  PublisherRuntimeDiscovery, PublisherRuntimeDiscoveryStatus, PublisherRuntimeSubscription,\n} from './publisherRuntime.ts'\nimport type { SqlitePublisherState } from './sqlitePublisherState.ts'\ninterface PendingChallenge {\n  readonly challengeHash: string\n  readonly expiresAt: number\n  readonly response?: EndpointChallengeResponse\n  readonly subscriber: string\n  readonly subscription: string\n}\n/** Real D005 lifecycle discovery. Off-chain configuration never grants delivery authority. */\nexport function createPublisherHandshakeDiscovery(options: {\n  readonly authorizationChainId: string\n  readonly bestEffort?: BestEffortDeliveryPolicy\n  readonly client: PublisherHandshakeClient\n  readonly deliveryMode?: WakeDeliveryMode\n  readonly keys: PublisherEncryptionKeyCustody\n  readonly maxSubscriptions?: number\n  readonly nowSeconds?: () => number\n  readonly publisher: string\n  readonly serviceHash?: string\n  readonly state: SqlitePublisherState\n  readonly transport: PublisherHttpsTransport\n}): PublisherRuntimeDiscovery {\n  const clock = options.nowSeconds ?? (() => Math.floor(Date.now() / 1000))\n  const owner = new AbortController()\n  let accepting: Promise<void> | undefined\n  let viewing: ReturnType<PublisherHandshakeClient['subscriptions']> | undefined\n  let status: PublisherRuntimeDiscoveryStatus = {\n    authorizationChainId: options.authorizationChainId,\n    keyLoaded: false,\n    activeKeyIds: [],\n    pendingSubscriptions: 0,\n    rejectedSubscriptions: 0,\n    challengeFailures: 0,\n  }\n  function selectedTuple(tuple: FinalizedSubscriptionTuple): boolean {\n    return (options.serviceHash === undefined || tuple.service.objectHash === options.serviceHash)\n      && (options.deliveryMode === undefined || tuple.service.body.deliveryMode === options.deliveryMode)\n      && (options.deliveryMode === undefined || tuple.subscription.body.deliveryMode === options.deliveryMode)\n      && (options.deliveryMode === undefined || isDeepStrictEqual(tuple.service.body.bestEffort, options.bestEffort))\n  }\n  async function activeView(signal: AbortSignal) {\n    signal.throwIfAborted()\n    // A timed-out caller does not create a second SDK replay while the first\n    // remains in flight. The configured REST transport aborts actual reads.\n    viewing ??= (async () => {\n      try {\n        return await options.client.subscriptions()\n      } finally {\n        viewing = undefined\n      }\n    })()\n    const view = await viewing\n    signal.throwIfAborted()\n    if (!view.ok || view.indexedThrough !== view.finalizedHead)\n      throw new Error('Publisher subscription view is unavailable or stale')\n    status = {\n      ...status,\n      finalizedHead: view.finalizedHead,\n      indexedThrough: view.indexedThrough,\n      pendingSubscriptions: view.subscriptions.filter(item => item.state === 'pending' && item.tuples.some(selectedTuple)).length,\n      rejectedSubscriptions: view.rejections.length,\n    }\n    return view\n  }\n  async function acceptCandidate(subscriber: string, subscription: string, signal: AbortSignal) {\n    try {\n      let pending = options.state.get<PendingChallenge>('outbound-challenges', subscription)\n      if (pending !== undefined && pending.response === undefined && clock() >= pending.expiresAt)\n        pending = undefined\n      if (pending === undefined) {\n        const issued = await options.client.issueChallenge({\n          issuedAt: clock(), lifetimeSeconds: 300, subscriber: subscriber, subscription,\n        })\n        pending = {\n          challengeHash: issued.challengeHash, subscriber: subscriber, subscription, expiresAt: issued.challenge.expiresAt,\n        }\n        options.state.set('outbound-challenges', subscription, pending)\n      }\n      if (pending.response === undefined) {\n        const begun = await options.client.beginChallenge({ challengeHash: pending.challengeHash, nowSeconds: clock })\n        if (begun.kind !== 'started')\n          return\n        signal.throwIfAborted()\n        const response = await options.transport.post(begun.target.endpoint, begun.challenge, signal)\n        if (response.status !== 200)\n          throw new Error('Endpoint challenge was rejected')\n        pending = { ...pending, response: EndpointChallengeResponseZod.parse(response.body) }\n        options.state.set('outbound-challenges', subscription, pending)\n      }\n      signal.throwIfAborted()\n      const response = pending.response\n      if (response === undefined)\n        throw new Error('Endpoint proof is unavailable')\n      await options.client.completeChallengeAndAccept({\n        ...pending, response, nowSeconds: clock,\n      })\n    } catch {\n      if (signal.aborted)\n        return\n      const failures = options.state.get<number>('challenge-failures', subscription) ?? 0\n      options.state.set('challenge-failures', subscription, failures + 1)\n      const pending = options.state.get<PendingChallenge>('outbound-challenges', subscription)\n      if (pending !== undefined && clock() >= pending.expiresAt)\n        options.state.remove('outbound-challenges', subscription)\n    }\n  }\n\n  async function accept(signal: AbortSignal) {\n    signal.throwIfAborted()\n    const now = clock()\n    if (now < (options.state.get<number>('challenge-rate', 'next-pass') ?? 0))\n      return\n    options.state.set('challenge-rate', 'next-pass', now + 10)\n    const found = await options.client.acceptanceCandidates()\n    if (!found.ok)\n      throw new Error('Publisher acceptance candidates are unavailable')\n    const offset = options.state.get<number>('challenge-rate', 'offset') ?? 0\n    const candidates = found.candidates.filter(candidate => selectedTuple(candidate.tuple))\n    let attempted = 0\n    // Bound inspected candidates and rotate the starting point: four failed\n    // candidates must not permanently prevent the fifth from being challenged.\n    for (let index = 0; index < Math.min(candidates.length, 128) && attempted < 4; index += 1) {\n      const candidate = candidates[(offset + index) % candidates.length]\n      if (candidate === undefined)\n        break\n      options.state.set('challenge-rate', 'offset', (offset + index + 1) % candidates.length)\n      const next = options.state.get<number>('challenge-controller-rate', candidate.subscriber) ?? 0\n      if (now < next)\n        continue\n      options.state.set('challenge-controller-rate', candidate.subscriber, now + 30)\n      attempted += 1\n      signal.throwIfAborted()\n      await acceptCandidate(candidate.subscriber, candidate.tuple.subscription.objectHash, signal)\n    }\n  }\n  async function loadScopedKeys(view: Extract<Awaited<ReturnType<PublisherHandshakeClient['subscriptions']>>, { ok: true }>, active: typeof view.subscriptions) {\n    const scopedKeys = active.flatMap(item => item.tuples.filter(tuple => tuple.subscription.objectHash === item.selectedSubscription).map(tuple => ({\n      encryptionKey: tuple.subscription.body.encryptionKey, keyId: tuple.subscription.body.keyId, publisher: options.publisher,\n    })))\n    if (view.hasCurrentAdvertisement && (options.serviceHash === undefined || view.service.objectHash === options.serviceHash)\n      && (options.deliveryMode === undefined || view.service.body.deliveryMode === options.deliveryMode)) {\n      scopedKeys.push({\n        encryptionKey: view.key.objectHash, keyId: view.key.body.keyId, publisher: options.publisher,\n      })\n    }\n    const loadedKeys = await Promise.all(scopedKeys.map(async key => await options.keys.getPrivateKey(key)))\n    status = {\n      ...status,\n      keyLoaded: scopedKeys.length > 0 && loadedKeys.every(key => key !== undefined),\n      activeKeyIds: [...new Set(scopedKeys.map(key => key.keyId))],\n    }\n  }\n  return {\n    async discover(signal) {\n      const view = await activeView(signal)\n      const active = view.subscriptions.filter(item => item.state === 'active' && item.tuples.some(tuple => tuple.subscription.objectHash === item.selectedSubscription && selectedTuple(tuple)))\n      await loadScopedKeys(view, active)\n      if (active.length > (options.maxSubscriptions ?? 64))\n        throw new Error('Publisher active subscription limit exceeded')\n      const subscriptions: PublisherRuntimeSubscription[] = []\n      for (const lifecycle of active) {\n        if (lifecycle.state !== 'active' || lifecycle.activeFromBlock === undefined)\n          continue\n        try {\n          const tuple = lifecycle.tuples.find(item => item.subscription.objectHash === lifecycle.selectedSubscription)\n          if (tuple === undefined || !selectedTuple(tuple))\n            throw new Error('Active publisher subscription has no selected tuple')\n          const encrypted = tuple.subscription.body\n          if (encrypted.chainId !== options.authorizationChainId)\n            throw new Error('Subscription authorization chain mismatch')\n          const publisherKey = await options.keys.getPrivateKey({\n            encryptionKey: encrypted.encryptionKey, keyId: encrypted.keyId, publisher: options.publisher,\n          })\n          if (publisherKey === undefined)\n            throw new Error('Subscription encryption key is unavailable')\n          const plaintext = await decryptWakeSubscription({\n            publisherKey, subscriber: tuple.subscriber, subscription: encrypted,\n          })\n          options.transport.assertAllowed(plaintext.endpoint)\n          subscriptions.push({\n            subscriptionHash: tuple.subscription.objectHash,\n            serviceHash: tuple.service.objectHash,\n            deliveryMode: plaintext.filter.deliveryMode,\n            ...(plaintext.filter.bestEffort === undefined ? {} : { bestEffort: plaintext.filter.bestEffort }),\n            authorizationChainId: options.authorizationChainId,\n            controller: tuple.subscriber,\n            audience: plaintext.audience,\n            endpoint: plaintext.endpoint,\n            deploymentId: plaintext.deploymentId,\n            ...(plaintext.queueId === null ? {} : { queueId: plaintext.queueId }),\n            source: plaintext.filter.source,\n            fromPosition: plaintext.filter.fromPosition,\n            maxPositionsPerWake: plaintext.filter.maxPositionsPerWake,\n            filterHash: await sourceWakeFilterHash(plaintext.filter),\n          })\n        } catch {\n          // A malformed or locally disallowed endpoint cannot stop independent\n          // accepted subscribers. Durable pending work remains until a fresh\n          // authoritative check proves the subscription is inactive.\n          status = { ...status, rejectedSubscriptions: status.rejectedSubscriptions + 1 }\n        }\n      }\n      return subscriptions\n    },\n    async isActive(subscription, signal) {\n      const view = await activeView(signal)\n      return view.subscriptions.some(item => item.state === 'active' && item.selectedSubscription === subscription.subscriptionHash\n        && item.tuples.some(tuple => tuple.subscription.objectHash === subscription.subscriptionHash && tuple.subscriber === subscription.controller && selectedTuple(tuple)))\n    },\n    async acceptPending(signal) {\n      // A slow finality operation is shared across passes; timeout does not\n      // spawn another acceptance/signing operation against the same state.\n      if (accepting === undefined) {\n        const scope = publisherAbortScope([owner.signal, signal])\n        accepting = (async () => {\n          try {\n            await accept(scope.signal)\n          } finally {\n            scope.dispose()\n            accepting = undefined\n          }\n        })()\n      }\n      await accepting\n    },\n    async close() {\n      await Promise.allSettled([accepting, viewing].filter(item => item !== undefined))\n    },\n    status: () => ({ ...status, challengeFailures: options.state.entries<number>('challenge-failures').reduce((sum, item) => sum + item.value, 0) }),\n  }\n}\n", "import { Buffer } from 'node:buffer'\nimport { lookup } from 'node:dns/promises'\nimport { request } from 'node:https'\nimport { BlockList, isIP } from 'node:net'\n\nimport { z } from 'zod'\n\nimport { publisherAbortScope } from './abort.ts'\nimport { boundedPublisherOperation } from './sources.ts'\nconst OptionsZod = z.strictObject({\n  allowedEndpoints: z.array(z.url()).min(1).max(64),\n  endpointHeaders: z.array(z.strictObject({\n    endpoint: z.url(),\n    headers: z.strictObject({ 'x-vercel-protection-bypass': z.string().min(1).max(4096).regex(/^[\\u{21}-\\u{7E}]+$/u) }),\n  })).max(64).default([]),\n  maxResponseBytes: z.number().int().min(1).max(1_048_576).default(65_536),\n  requestTimeoutMs: z.number().int().min(100).max(60_000).default(10_000),\n})\nexport interface PublisherHttpsTransportOptions {\n  /** Exact public HTTPS destinations approved by the operator, including their path. */\n  readonly allowedEndpoints: readonly string[]\n  /** Private operator-provisioned Vercel automation credential, bound to one exact destination. */\n  readonly endpointHeaders?: readonly { readonly endpoint: string; readonly headers: Readonly<Record<string, string>> }[]\n  readonly maxResponseBytes?: number\n  readonly requestTimeoutMs?: number\n}\nexport interface PublisherHttpsResponse {\n  readonly body: unknown\n  readonly retryAfterMs?: number\n  readonly status: number\n}\nexport interface PublisherHttpsTransport {\n  assertAllowed(endpoint: string): void\n  post(endpoint: string, body: unknown, signal: AbortSignal, jwt?: string): Promise<PublisherHttpsResponse>\n}\nconst NON_PUBLIC_IPV4_SUBNETS = [\n  ['0.0.0.0', 8],\n  ['10.0.0.0', 8],\n  ['100.64.0.0', 10],\n  ['127.0.0.0', 8],\n  ['169.254.0.0', 16],\n  ['172.16.0.0', 12],\n  ['192.0.0.0', 24],\n  ['192.0.2.0', 24],\n  ['192.88.99.0', 24],\n  ['192.168.0.0', 16],\n  ['198.18.0.0', 15],\n  ['198.51.100.0', 24],\n  ['203.0.113.0', 24],\n  ['224.0.0.0', 4],\n  ['240.0.0.0', 4],\n] as const\nconst NON_PUBLIC_IPV6_SUBNETS = [\n  ['2001::', 23], ['2001:db8::', 32], ['2002::', 16], ['3fff::', 20],\n] as const\n\ninterface PublisherAddressPolicy {\n  readonly globalIpv6: BlockList\n  readonly nonPublicIpv4: BlockList\n  readonly nonPublicIpv6: BlockList\n}\n\nlet publisherAddressPolicy: PublisherAddressPolicy | undefined\n\nfunction loadPublisherAddressPolicy(): PublisherAddressPolicy {\n  if (publisherAddressPolicy !== undefined) return publisherAddressPolicy\n  const nonPublicIpv4 = new BlockList()\n  for (const [address, prefix] of NON_PUBLIC_IPV4_SUBNETS) {\n    nonPublicIpv4.addSubnet(address, prefix, 'ipv4')\n  }\n  const globalIpv6 = new BlockList()\n  globalIpv6.addSubnet('2000::', 3, 'ipv6')\n  const nonPublicIpv6 = new BlockList()\n  for (const [address, prefix] of NON_PUBLIC_IPV6_SUBNETS) {\n    nonPublicIpv6.addSubnet(address, prefix, 'ipv6')\n  }\n  publisherAddressPolicy = {\n    globalIpv6, nonPublicIpv4, nonPublicIpv6,\n  }\n  return publisherAddressPolicy\n}\n\n/** Conservative public-unicast policy, with numeric subnet checks for every IPv6 spelling. */\nexport function isPublicPublisherAddress(address: string): boolean {\n  const policy = loadPublisherAddressPolicy()\n  return isIP(address) === 4\n    ? !policy.nonPublicIpv4.check(address, 'ipv4')\n    : isIP(address) === 6 && policy.globalIpv6.check(address, 'ipv6') && !policy.nonPublicIpv6.check(address, 'ipv6')\n}\nexport function createPublisherHttpsTransport(input: PublisherHttpsTransportOptions): PublisherHttpsTransport {\n  const parsed = OptionsZod.safeParse(input)\n  if (!parsed.success) throw new Error('Invalid publisher HTTPS transport configuration')\n  const options = parsed.data\n  const allowed = new Set(options.allowedEndpoints.map((endpoint) => {\n    const url = new URL(endpoint)\n    if (url.href !== endpoint || url.protocol !== 'https:' || (url.port !== '' && url.port !== '443')\n      || url.username !== '' || url.password !== '' || url.hash !== '')\n      throw new Error('Publisher destinations must be canonical public HTTPS URLs on port 443')\n    const literal = url.hostname.replaceAll(/^\\[|\\]$/gu, '')\n    if (isIP(literal) !== 0 && !isPublicPublisherAddress(literal))\n      throw new Error('Publisher destination is not public')\n    if (url.hostname === 'localhost' || url.hostname.endsWith('.localhost') || url.hostname.endsWith('.local'))\n      throw new Error('Publisher destination is not public')\n    return endpoint\n  }))\n  const assertAllowed = (endpoint: string) => {\n    if (!allowed.has(endpoint))\n      throw new Error('Publisher destination is not explicitly allowed')\n  }\n  const endpointHeaders = new Map<string, Readonly<Record<string, string>>>()\n  for (const entry of options.endpointHeaders) {\n    assertAllowed(entry.endpoint)\n    if (endpointHeaders.has(entry.endpoint)) throw new Error('Duplicate publisher endpoint header configuration')\n    endpointHeaders.set(entry.endpoint, entry.headers)\n  }\n  return {\n    assertAllowed,\n    async post(endpoint, body, signal, jwt) {\n      assertAllowed(endpoint)\n      signal.throwIfAborted()\n      const url = new URL(endpoint)\n      const scope = publisherAbortScope([signal], options.requestTimeoutMs)\n      const combined = scope.signal\n      try {\n        const addresses = await boundedPublisherOperation(lookup(url.hostname.replaceAll(/^\\[|\\]$/gu, ''), { all: true, verbatim: true }), combined, options.requestTimeoutMs)\n        combined.throwIfAborted()\n        if (addresses.length === 0 || addresses.some(item => !isPublicPublisherAddress(item.address)))\n          throw new Error('Publisher DNS answer includes a non-public address')\n        const selected = addresses[0]\n        if (selected === undefined)\n          throw new Error('Publisher DNS lookup was empty')\n        const encoded = Buffer.from(JSON.stringify(body))\n        if (encoded.byteLength > 65_536)\n          throw new Error('Publisher request body is too large')\n        return await new Promise<PublisherHttpsResponse>((resolve, reject) => {\n          const call = request(url, {\n            agent: false,\n            headers: {\n              ...endpointHeaders.get(endpoint),\n              'content-length': encoded.byteLength,\n              'content-type': 'application/json',\n              ...(jwt === undefined ? {} : { authorization: `Bearer ${jwt}` }),\n            },\n            lookup(_hostname, lookupOptions, callback) {\n              // Pin the validated DNS answer for this connection; TLS still validates\n              // the original hostname. No second resolver can rebind to a private IP.\n              if (lookupOptions.all)\n                callback(null, [{ address: selected.address, family: selected.family }])\n              else\n                callback(null, selected.address, selected.family)\n            },\n            method: 'POST',\n            rejectUnauthorized: true,\n            signal: combined,\n          }, (response) => {\n            const status = response.statusCode ?? 500\n            if (status >= 300 && status < 400) {\n              response.destroy()\n              reject(new Error('Publisher HTTPS redirects are forbidden'))\n              return\n            }\n            let size = 0\n            const chunks: Buffer[] = []\n            response.on('data', (chunk: Buffer) => {\n              size += chunk.byteLength\n              if (size > options.maxResponseBytes) {\n                response.destroy()\n                reject(new Error('Publisher HTTPS response is too large'))\n              } else\n                chunks.push(chunk)\n            })\n            response.on('error', () => reject(new Error('Publisher HTTPS response failed')))\n            response.on('end', () => {\n              try {\n                const responseBody: unknown = size === 0 ? null : JSON.parse(Buffer.concat(chunks).toString('utf8'))\n                const retry = Number(response.headers['retry-after'])\n                resolve({\n                  status, body: responseBody, ...(Number.isFinite(retry) && retry > 0 ? { retryAfterMs: Math.min(retry * 1000, 3_600_000) } : {}),\n                })\n              } catch {\n                reject(new Error('Publisher HTTPS response is not JSON'))\n              }\n            })\n          })\n          call.on('error', () => reject(new Error('Publisher HTTPS request failed')))\n          call.end(encoded)\n        })\n      } finally {\n        scope.dispose()\n      }\n    },\n  }\n}\n", "import { createHash } from 'node:crypto'\n\nimport { canonicalJson } from '@xyo-network/event-kit-protocol'\nimport type { WakeSource } from '@xyo-network/event-kit-schemas'\nimport { completedUtcIntervalPosition, WakeSourceZod } from '@xyo-network/event-kit-schemas'\nimport { PayloadBuilder } from '@xyo-network/sdk'\nimport type { XyoGateway } from '@xyo-network/xl1-sdk'\nimport { asXL1BlockNumber } from '@xyo-network/xl1-sdk'\nimport { FetchRequest, JsonRpcProvider } from 'ethers'\n\nimport { publisherAbortScope } from './abort.ts'\nimport { createBoundedPublisherEthersTransport } from './boundedFetch.ts'\nexport interface PublisherSourceHead {\n  readonly hash?: string\n  readonly position: number\n}\nexport interface PublisherSourceReader {\n  readonly source: WakeSource\n  close?(): void | Promise<void>\n  head(signal: AbortSignal): Promise<PublisherSourceHead>\n}\nexport function publisherSourceKey(source: WakeSource): string {\n  return createHash('sha256').update(canonicalJson(WakeSourceZod.parse(source))).digest('hex')\n}\nexport async function boundedPublisherOperation<T>(operation: Promise<T>, signal: AbortSignal, timeoutMs = 10_000): Promise<T> {\n  const scope = publisherAbortScope([signal], timeoutMs)\n  const combined = scope.signal\n  let rejectAbort: (() => void) | undefined\n  const aborted = new Promise<never>((_resolve, reject) => {\n    rejectAbort = () => reject(new Error('Publisher operation aborted or timed out'))\n    combined.addEventListener('abort', rejectAbort, { once: true })\n  })\n  try {\n    combined.throwIfAborted()\n    return await Promise.race([operation, aborted])\n  } finally {\n    if (rejectAbort !== undefined)\n      combined.removeEventListener('abort', rejectAbort)\n    scope.dispose()\n  }\n}\ntype GatewayViewer = NonNullable<XyoGateway['connection']['viewer']>\nexport function createXl1PublisherSource(options: {\n  readonly source: Extract<WakeSource, {\n    kind: 'xl1-finalized'\n  }>\n  readonly viewer: Pick<GatewayViewer, 'block' | 'chainId' | 'finalization'>\n}): PublisherSourceReader {\n  const source = WakeSourceZod.parse(options.source)\n  if (source.kind !== 'xl1-finalized')\n    throw new Error('Expected an XL1 finalized source')\n  return {\n    source,\n    async head(signal) {\n      const chainId = String(await boundedPublisherOperation(Promise.resolve(options.viewer.chainId()), signal))\n      if (chainId !== source.chainId)\n        throw new Error('XL1 source chain identity changed')\n      const position = Number(await boundedPublisherOperation(Promise.resolve(options.viewer.finalization.headNumber()), signal))\n      if (!Number.isSafeInteger(position) || position < 0)\n        throw new Error('XL1 finalized head is invalid')\n      const block = await boundedPublisherOperation(Promise.resolve(options.viewer.block.blockByNumber(asXL1BlockNumber(position, true))), signal)\n      if (block?.[0].block !== position || !/^[0-9a-f]{64}$/u.test(block[0]._hash)) {\n        throw new Error('XL1 finalized head block is unavailable or inconsistent')\n      }\n      if (String(block[0].chain) !== source.chainId || await PayloadBuilder.hash(block[0]) !== block[0]._hash) {\n        throw new Error('XL1 finalized head block chain or hash is inconsistent')\n      }\n      return { position, hash: block[0]._hash }\n    },\n  }\n}\nexport function createEthereumFinalizedPublisherSource(options: {\n  readonly requestTimeoutMs?: number\n  readonly rpcUrl: string\n  readonly source: Extract<WakeSource, {\n    kind: 'ethereum-finalized'\n  }>\n}): PublisherSourceReader {\n  const source = WakeSourceZod.parse(options.source)\n  if (source.kind !== 'ethereum-finalized')\n    throw new Error('Expected an Ethereum finalized source')\n  const { chainId, genesisHash } = source\n  const url = new URL(options.rpcUrl)\n  if (url.protocol !== 'https:' || url.username !== '' || url.password !== '' || url.hash !== '') {\n    throw new Error('Ethereum source RPC must use HTTPS without URL credentials or fragments')\n  }\n  const connection = new FetchRequest(url.href)\n  connection.timeout = options.requestTimeoutMs ?? 10_000\n  const transport = createBoundedPublisherEthersTransport({\n    requestTimeoutMs: options.requestTimeoutMs, maxResponseBytes: 2 * 1024 * 1024, maxConcurrency: 8,\n  })\n  connection.getUrlFunc = transport.getUrl\n  connection.setThrottleParams({ maxAttempts: 1 })\n  const provider = new JsonRpcProvider(connection, undefined, { batchMaxCount: 1, cacheTimeout: -1 })\n  let reading: Promise<PublisherSourceHead> | undefined\n  let closed = false\n  let closing: Promise<void> | undefined\n  const close = () => closing ??= (async () => {\n    closed = true\n    provider.destroy()\n    await transport.close()\n  })()\n  const onAbort = () => {\n    void close()\n  }\n  async function read() {\n    const requests = [provider.getNetwork(), provider.getBlock(0), provider.getBlock('finalized')] as const\n    // A failing sibling request cannot release the single-flight slot while\n    // another request still owns a connection or a bounded response body.\n    try {\n      const [network, genesis, block] = await Promise.all(requests)\n      if (network.chainId.toString() !== chainId || genesis?.hash?.slice(2).toLowerCase() !== genesisHash) {\n        throw new Error('Ethereum source chain identity mismatch')\n      }\n      if (block?.hash === null || block === null || !/^0x[0-9a-fA-F]{64}$/u.test(block.hash)\n        || !Number.isSafeInteger(block.number) || block.number < 0) throw new Error('Ethereum finalized head is unavailable')\n      return { position: block.number, hash: block.hash.slice(2).toLowerCase() }\n    } catch (error) {\n      await Promise.allSettled(requests)\n      throw error\n    }\n  }\n  return {\n    source,\n    close,\n    async head(signal) {\n      signal.throwIfAborted()\n      if (closed) throw new Error('Ethereum source is closed')\n      signal.addEventListener('abort', onAbort, { once: true })\n      reading ??= (async () => {\n        try {\n          return await read()\n        } finally {\n          reading = undefined\n        }\n      })()\n      try {\n        return await boundedPublisherOperation(reading, signal, options.requestTimeoutMs ?? 10_000)\n      } finally {\n        signal.removeEventListener('abort', onAbort)\n      }\n    },\n  }\n}\n\nexport function createUtcIntervalPublisherSource(options: {\n  readonly nowSeconds?: () => number\n  readonly source: Extract<WakeSource, {\n    kind: 'utc-interval'\n  }>\n}): PublisherSourceReader {\n  const source = WakeSourceZod.parse(options.source)\n  if (source.kind !== 'utc-interval')\n    throw new Error('Expected a UTC interval source')\n  const nowSeconds = options.nowSeconds ?? (() => Math.floor(Date.now() / 1000))\n  return {\n    source,\n    async head(signal) {\n      signal.throwIfAborted()\n      const now = nowSeconds()\n      if (!Number.isSafeInteger(now) || now < 0)\n        throw new Error('UTC interval clock is invalid')\n      return { position: completedUtcIntervalPosition(source, now) ?? -1 }\n    },\n  }\n}\n", "import { isDeepStrictEqual } from 'node:util'\n\nimport type { PeriodicActorParams, PeriodicPassContext } from '@ariestools/actor'\nimport { createMemoryLocator, PeriodicActor } from '@ariestools/actor'\nimport { creatable } from '@ariestools/sdk'\nimport { BestEffortAdmissionAcknowledgmentZod } from '@xyo-network/event-kit-protocol'\nimport type {\n  BestEffortDeliveryPolicy, WakeDeliveryMode, WakeEnvelope, WakeSource,\n} from '@xyo-network/event-kit-schemas'\nimport { BestEffortDeliveryPolicyZod, WakeDeliveryModeZod } from '@xyo-network/event-kit-schemas'\nimport type { AccountInstance } from '@xyo-network/sdk'\nimport { z } from 'zod'\n\nimport { publisherAbortScope } from './abort.ts'\nimport type { PublisherHttpsTransport } from './httpsTransport.ts'\nimport type { DeliveryState } from './publisherDeliveryState.ts'\nimport {\n  assertDeliveryState, DeliveryResponseError, failedDelivery, makeEvent, prepareBestEffortDelivery,\n} from './publisherDeliveryState.ts'\nimport type { PublisherSourceHead, PublisherSourceReader } from './sources.ts'\nimport { boundedPublisherOperation, publisherSourceKey } from './sources.ts'\nimport { createAccountSourceWakeSigner } from './sourceSigner.ts'\nimport type { SqlitePublisherState } from './sqlitePublisherState.ts'\nexport interface PublisherRuntimeSubscription {\n  readonly audience: string\n  readonly authorizationChainId: string\n  readonly bestEffort?: BestEffortDeliveryPolicy\n  readonly controller: string\n  readonly deliveryMode: WakeDeliveryMode\n  readonly deploymentId: string\n  readonly endpoint: string\n  readonly filterHash: string\n  readonly fromPosition: number\n  readonly maxPositionsPerWake: number\n  readonly queueId?: string\n  readonly serviceHash?: string\n  readonly source: WakeSource\n  readonly subscriptionHash: string\n}\n/** Discovery MUST return only current finalized, accepted subscriptions. */\nexport interface PublisherRuntimeDiscovery {\n  acceptPending?(signal: AbortSignal): Promise<void>\n  close?(): Promise<void>\n  discover(signal: AbortSignal): Promise<readonly PublisherRuntimeSubscription[]>\n  /** Re-check the exact current revision before each attempt, including retries. */\n  isActive(subscription: PublisherRuntimeSubscription, signal: AbortSignal): Promise<boolean>\n  status?(): PublisherRuntimeDiscoveryStatus\n}\nexport interface PublisherRuntimeDiscoveryStatus {\n  readonly activeKeyIds: readonly string[]\n  readonly authorizationChainId: string\n  readonly challengeFailures: number\n  readonly finalizedHead?: number\n  readonly indexedThrough?: number\n  readonly keyLoaded: boolean\n  readonly pendingSubscriptions: number\n  readonly rejectedSubscriptions: number\n}\nfunction activationReady(status?: PublisherRuntimeDiscoveryStatus): boolean {\n  return (status?.keyLoaded ?? true) && (status?.pendingSubscriptions ?? 0) === 0\n}\n\nexport interface PersistentEventPublisherOptions {\n  readonly account: AccountInstance\n  readonly bestEffort?: BestEffortDeliveryPolicy\n  readonly concurrency?: number\n  readonly deliveryMode: WakeDeliveryMode\n  readonly discovery: PublisherRuntimeDiscovery\n  readonly intervalMs?: number\n  readonly maxSubscriptions?: number\n  readonly nowSeconds?: () => number\n  readonly publisher: string\n  readonly requestTimeoutMs?: number\n  /** Optional immutable operator pin; mismatches fail readiness without revoking subscriptions. */\n  readonly serviceHash?: string\n  readonly sources: readonly PublisherSourceReader[]\n  readonly state: SqlitePublisherState\n  readonly transport: PublisherHttpsTransport\n}\nexport interface PersistentEventPublisherStatus {\n  readonly abandoned: number\n  readonly activeSubscriptions: number\n  readonly bestEffort?: BestEffortDeliveryPolicy\n  readonly clockHealthy: boolean\n  readonly degraded: boolean\n  readonly delivered: number\n  readonly deliveryMode: WakeDeliveryMode\n  readonly failures: number\n  readonly handshake?: PublisherRuntimeDiscoveryStatus\n  readonly lastError?: string\n  readonly passes: number\n  readonly pendingDeliveries: number\n  readonly publisher: string\n  readonly ready: boolean\n  readonly running: boolean\n  readonly sources: readonly {\n    readonly hash?: string\n    readonly id: string\n    readonly position: number\n  }[]\n  readonly subscriptions: readonly {\n    readonly attempts?: number\n    readonly cursor: number\n    readonly failures: number\n    readonly id: string\n    /** Best Effort admission target is not a contiguous source prefix. */\n    readonly lastAdmissionTarget?: number\n    readonly lastHintAt?: number\n    readonly pending: boolean\n    readonly state: string\n  }[]\n  readonly superseded: number\n  readonly totalAttempts: number\n}\nexport interface PersistentEventPublisher {\n  runOnce(): Promise<void>\n  start(): Promise<void>\n  status(): PersistentEventPublisherStatus\n  stop(): Promise<void>\n}\ninterface RuntimeActorParams extends PeriodicActorParams {\n  readonly tick: (signal: AbortSignal) => Promise<void>\n}\n@creatable()\nclass PublisherRuntimeActor extends PeriodicActor<RuntimeActorParams> {\n  protected override async runPass(context: PeriodicPassContext): Promise<void> {\n    await this.params.tick(context.signal)\n  }\n}\nconst TimingZod = z.object({\n  concurrency: z.number().int().min(1).max(32).default(4),\n  intervalMs: z.number().int().min(100).max(60_000).default(1000),\n  maxSubscriptions: z.number().int().min(1).max(1024).default(64),\n  requestTimeoutMs: z.number().int().min(100).max(60_000).default(10_000),\n})\n\nfunction runtimeSettings(options: PersistentEventPublisherOptions) {\n  const deliveryMode = WakeDeliveryModeZod.parse(options.deliveryMode)\n  const bestEffort = options.bestEffort === undefined ? undefined : BestEffortDeliveryPolicyZod.parse(options.bestEffort)\n  if ((deliveryMode === 'best-effort') !== (bestEffort !== undefined)) throw new TypeError('Explicit delivery mode requires its exact policy')\n  return {\n    bestEffort,\n    deliveryMode,\n    deliveryNamespace: deliveryMode === 'best-effort' ? 'best-effort-deliveries' : 'deliveries',\n    timing: TimingZod.parse(options),\n  }\n}\nexport async function createPersistentEventPublisherRuntime(options: PersistentEventPublisherOptions): Promise<PersistentEventPublisher> {\n  const {\n    bestEffort, deliveryMode, deliveryNamespace, timing,\n  } = runtimeSettings(options)\n  if (options.sources.length < 1 || options.sources.length > 16)\n    throw new Error('Publisher requires between one and sixteen bounded sources')\n  const clock = options.nowSeconds ?? (() => Math.floor(Date.now() / 1000))\n  const signer = createAccountSourceWakeSigner({\n    account: options.account, publisher: options.publisher, nowSeconds: clock,\n  })\n  const sourceReaders = new Map(options.sources.map(reader => [publisherSourceKey(reader.source), reader]))\n  if (sourceReaders.size !== options.sources.length)\n    throw new Error('Duplicate publisher source identity')\n  const state = options.state\n  const existingMode = state.get<string>('metadata', 'runtime-delivery-mode')\n  if (existingMode !== undefined && existingMode !== deliveryMode) throw new Error('Publisher state delivery mode mismatch; preserve custody and use an explicitly qualified state binding')\n  state.set('metadata', 'runtime-delivery-mode', deliveryMode)\n  const abort = new AbortController()\n  const seenThisProcess = new Set<string>()\n  let running = false\n  let ready = false\n  let clockHealthy = true\n  let passes = 0\n  let lastError: string | undefined\n  let sourcesHealthy = false\n  let stop: Promise<void> | undefined\n  const timed = <T>(promise: Promise<T>, signal: AbortSignal) => boundedPublisherOperation(promise, signal, timing.requestTimeoutMs)\n  function loadDelivery(subscription: PublisherRuntimeSubscription, now: number): DeliveryState {\n    if (subscription.deliveryMode !== deliveryMode || !isDeepStrictEqual(subscription.bestEffort, bestEffort))\n      throw new Error('Subscription delivery mode or policy disagrees with runtime')\n    if (deliveryMode === 'best-effort' && (subscription.maxPositionsPerWake !== 1 || subscription.serviceHash === undefined)) throw new Error('Best Effort requires point range')\n    if (options.serviceHash !== undefined && subscription.serviceHash !== options.serviceHash)\n      throw new Error('Subscription does not match the configured exact service descriptor')\n    const key = subscription.subscriptionHash\n    if (deliveryMode === 'best-effort' && state.get(deliveryNamespace, key) === undefined\n      && state.entries(deliveryNamespace).length >= timing.maxSubscriptions) throw new Error('Best Effort state capacity exceeded; live records are not evicted')\n    let record = state.get<DeliveryState>(deliveryNamespace, key)\n    if (record === undefined) {\n      makeEvent(subscription, subscription.fromPosition, subscription.fromPosition, now, '0'.repeat(32))\n      if (!Number.isSafeInteger(subscription.maxPositionsPerWake) || subscription.maxPositionsPerWake < 1 || subscription.maxPositionsPerWake > 4096) {\n        throw new Error('Invalid source range budget')\n      }\n      record = {\n        subscription, cursor: subscription.fromPosition - 1, delivered: 0, failures: 0, nextAttemptMs: 0, state: 'active',\n      }\n      state.set(deliveryNamespace, key, record)\n    }\n    assertDeliveryState(record, subscription)\n    return record\n  }\n\n  function prepareDelivery(record: DeliveryState, now: number, heads: ReadonlyMap<string, PublisherSourceHead | Error>) {\n    if (deliveryMode === 'best-effort' && bestEffort !== undefined) {\n      const first = !seenThisProcess.has(record.subscription.subscriptionHash)\n      const head = heads.get(publisherSourceKey(record.subscription.source))\n      if (head !== undefined && !(head instanceof Error) && head.position >= record.subscription.fromPosition)\n        seenThisProcess.add(record.subscription.subscriptionHash)\n      return prepareBestEffortDelivery({\n        bestEffort, first, heads, now, record, state,\n      })\n    }\n    if (record.pending !== undefined) return { ...record, pending: record.pending }\n    const subscription = record.subscription\n    const head = heads.get(publisherSourceKey(subscription.source))\n    if (head === undefined || head instanceof Error) throw new Error('Configured source is unavailable')\n    if (head.position <= record.cursor) return\n    const fromPosition = record.cursor + 1\n    const pending = makeEvent(subscription, fromPosition, Math.min(head.position, fromPosition + subscription.maxPositionsPerWake - 1), now)\n    const prepared = { ...record, pending }\n    state.transaction(() => {\n      const logicalKey = JSON.stringify([subscription.subscriptionHash, pending.fromPosition, pending.toPosition])\n      if (!state.insert('delivery-events', logicalKey, pending)) throw new Error('Publisher logical range already exists outside its contiguous cursor')\n      state.set(deliveryNamespace, subscription.subscriptionHash, prepared)\n    })\n    return prepared\n  }\n\n  async function stillActive(record: DeliveryState, signal: AbortSignal): Promise<boolean> {\n    if (await timed(options.discovery.isActive(record.subscription, signal), signal)) return true\n    state.set(deliveryNamespace, record.subscription.subscriptionHash, {\n      ...record, pending: undefined, state: 'cancelled',\n    })\n    return false\n  }\n\n  function acknowledgeBestEffort(record: DeliveryState & { readonly pending: WakeEnvelope }, body: unknown, eventHash: string, signal: AbortSignal, now: number) {\n    const { pending, subscription } = record\n    const acknowledgment = BestEffortAdmissionAcknowledgmentZod.safeParse(body)\n    if (!acknowledgment.success || acknowledgment.data.eventHash !== eventHash || acknowledgment.data.wakeId !== pending.wakeId\n      || acknowledgment.data.expiresAt !== pending.issuedAt + (bestEffort?.maxHintAgeSeconds ?? 0) + 60\n      || acknowledgment.data.acceptedAt < pending.issuedAt - 60 || acknowledgment.data.acceptedAt > now + 60)\n      throw new Error('Publisher did not receive a matching finite acknowledgment')\n    signal.throwIfAborted()\n    state.set(deliveryNamespace, subscription.subscriptionHash, {\n      subscription,\n      cursor: pending.toPosition,\n      delivered: record.delivered + 1,\n      failures: 0,\n      attempts: 0,\n      superseded: record.superseded ?? 0,\n      abandoned: record.abandoned ?? 0,\n      totalAttempts: (record.totalAttempts ?? 0) + 1,\n      lastNotifiedAt: now,\n      lastHintAt: pending.issuedAt,\n      lastHintTarget: pending.toPosition,\n      nextAttemptMs: 0,\n      state: 'active',\n    } satisfies DeliveryState)\n  }\n\n  async function sendDelivery(record: DeliveryState & { readonly pending: WakeEnvelope }, signal: AbortSignal, now: number) {\n    const { pending, subscription } = record\n    signal.throwIfAborted()\n    const signed = await signer.sign(pending, subscription.audience)\n    signal.throwIfAborted()\n    const attempt = deliveryMode === 'best-effort' ? record.attempts ?? 0 : state.get<{ count: number }>('delivery-attempts', pending.wakeId)?.count ?? 0\n    if (deliveryMode === 'best-effort') state.set(deliveryNamespace, subscription.subscriptionHash, {\n      ...record, attempts: attempt + 1, totalAttempts: (record.totalAttempts ?? 0) + 1,\n    })\n    else state.set('delivery-attempts', pending.wakeId, {\n      count: attempt + 1, startedAt: now, status: 'in-flight',\n    })\n    const response = await options.transport.post(subscription.endpoint, signed.event, signal, signed.jwt)\n    if (deliveryMode === 'durable') state.set('delivery-attempts', pending.wakeId, {\n      count: attempt + 1, startedAt: now, status: response.status,\n    })\n    if (response.status !== 200 && response.status !== 202) throw new DeliveryResponseError(response.status, response.retryAfterMs)\n    if (deliveryMode === 'best-effort') {\n      acknowledgeBestEffort(record, response.body, signed.eventHash, signal, now)\n      return\n    }\n    const receipt = z.object({ receiptId: z.string().min(1), wakeId: z.literal(pending.wakeId) }).safeParse(response.body)\n    if (!receipt.success) throw new Error('Publisher admission did not return a matching durable receipt')\n    signal.throwIfAborted()\n    // Receipt, contiguous cursor, and outbox clear commit together. A lost\n    // response or death before this transaction reuses the exact pending body.\n    state.transaction(() => {\n      state.set('delivery-receipts', pending.wakeId, { receiptId: receipt.data.receiptId, receivedAt: now })\n      state.set(deliveryNamespace, subscription.subscriptionHash, {\n        subscription,\n        cursor: pending.toPosition,\n        delivered: record.delivered + 1,\n        failures: 0,\n        nextAttemptMs: 0,\n        state: 'active',\n      } satisfies DeliveryState)\n    })\n  }\n\n  async function deliver(subscription: PublisherRuntimeSubscription, signal: AbortSignal, now: number, heads: ReadonlyMap<string, PublisherSourceHead | Error>) {\n    let record = loadDelivery(subscription, now)\n    if (deliveryMode === 'durable' && (record.state !== 'active' || record.nextAttemptMs > now * 1000)) return\n    try {\n      if (!await stillActive(record, signal)) return\n      options.transport.assertAllowed(subscription.endpoint)\n      if (!sourceReaders.has(publisherSourceKey(subscription.source))) throw new Error('Subscription source is not configured')\n      const prepared = prepareDelivery(record, now, heads)\n      if (prepared === undefined) return\n      record = prepared\n      if (record.nextAttemptMs > now * 1000) return\n      // Reconcile once more after observing source progress, before every attempt.\n      if (!await stillActive(record, signal)) return\n      await sendDelivery(prepared, signal, now)\n    } catch (error) {\n      if (signal.aborted) return\n      state.set(\n        deliveryNamespace,\n        subscription.subscriptionHash,\n        failedDelivery(record, state.get<DeliveryState>(deliveryNamespace, subscription.subscriptionHash), deliveryMode, error, now),\n      )\n    }\n  }\n  async function readSources(signal: AbortSignal): Promise<ReadonlyMap<string, PublisherSourceHead | Error>> {\n    const heads = new Map<string, PublisherSourceHead | Error>()\n    const results = await Promise.allSettled([...sourceReaders].map(async ([key, reader]) => {\n      const head = await timed(reader.head(signal), signal)\n      if (!Number.isSafeInteger(head.position) || head.position < -1)\n        throw new Error('Source head is invalid')\n      const previous = state.get<PublisherSourceHead>('source-heads', key)\n      if (previous !== undefined && (head.position < previous.position || (head.position === previous.position && head.hash !== previous.hash))) {\n        throw new Error('Finalized source regressed or changed hash')\n      }\n      signal.throwIfAborted()\n      state.set('source-heads', key, head)\n      heads.set(key, head)\n    }))\n    sourcesHealthy = results.every(item => item.status === 'fulfilled')\n    // All rejections are inspected; delivery sees an unavailable source without\n    // exposing provider URLs or allowing one source to deny another service.\n    for (const [index, result] of results.entries())\n      if (result.status === 'rejected') {\n        const key = sourceReaders.keys().toArray()[index]\n        if (key !== undefined)\n          heads.set(key, new Error('Source read failed'))\n      }\n    return heads\n  }\n  async function reconcileDeliveries(subscriptions: readonly PublisherRuntimeSubscription[], signal: AbortSignal) {\n    if (subscriptions.length > timing.maxSubscriptions) throw new Error('Publisher subscription limit exceeded')\n    const active = new Set(subscriptions.map(subscription => subscription.subscriptionHash))\n    if (active.size !== subscriptions.length) throw new Error('Duplicate subscription identity')\n    const unavailable = state.entries<DeliveryState>(deliveryNamespace).filter(item => !active.has(item.key) && item.value.state !== 'cancelled')\n    let available = true\n    for (let offset = 0; offset < unavailable.length; offset += timing.concurrency) {\n      signal.throwIfAborted()\n      const results = await Promise.allSettled(unavailable.slice(offset, offset + timing.concurrency).map(async ({ key, value }) => {\n        const stillAuthorized = await timed(options.discovery.isActive(value.subscription, signal), signal)\n        if (!stillAuthorized) state.set(deliveryNamespace, key, {\n          ...value, pending: undefined, state: 'cancelled',\n        })\n        return stillAuthorized\n      }))\n      // Local key loss, endpoint policy, or a failed replay cannot revoke a\n      // finalized subscription. Preserve its exact pending body for restoration.\n      available = available && results.every(result => result.status === 'fulfilled' && !result.value)\n    }\n    return available\n  }\n\n  async function tick(actorSignal: AbortSignal) {\n    const scope = publisherAbortScope([abort.signal, actorSignal])\n    const signal = scope.signal\n    try {\n      signal.throwIfAborted()\n      const now = clock()\n      const prior = state.get<number>('runtime', 'highest-wall-clock') ?? 0\n      clockHealthy = Number.isSafeInteger(now) && now >= prior\n      if (!clockHealthy)\n        throw new Error('Publisher clock moved backwards')\n      state.set('runtime', 'highest-wall-clock', now)\n      const subscriptions = await timed(options.discovery.discover(signal), signal)\n      const subscriptionsAvailable = await reconcileDeliveries(subscriptions, signal)\n      const heads = await readSources(signal)\n      for (let offset = 0; offset < subscriptions.length; offset += timing.concurrency) {\n        signal.throwIfAborted()\n        const outcomes = await Promise.allSettled(subscriptions.slice(offset, offset + timing.concurrency).map(subscription => deliver(subscription, signal, now, heads)))\n        const failed = outcomes.find(result => result.status === 'rejected')\n        if (failed?.status === 'rejected')\n          throw failed.reason\n      }\n      // Challenge/finality work is bounded and occurs after already-active\n      // subscribers, so a new or broken subscriber cannot starve delivery.\n      if (options.discovery.acceptPending !== undefined)\n        await timed(options.discovery.acceptPending(signal), signal)\n      const discoveryStatus = options.discovery.status?.()\n      ready = subscriptionsAvailable && sourcesHealthy && activationReady(discoveryStatus)\n      lastError = subscriptionsAvailable ? undefined : 'publisher-subscription-unavailable'\n      passes += 1\n    } catch (error) {\n      ready = false\n      lastError = clockHealthy ? 'publisher-pass-failed' : 'publisher-clock-unhealthy'\n      if (!signal.aborted)\n        throw error\n    } finally {\n      scope.dispose()\n    }\n  }\n  const actor = await PublisherRuntimeActor.create({\n    locator: createMemoryLocator({}), intervalMs: timing.intervalMs, firstRun: 'immediate', readiness: 'immediate', tick,\n  })\n  return {\n    async start() {\n      if (stop !== undefined)\n        throw new Error('Publisher is stopped')\n      if (running) {\n        return\n      }\n\n      await actor.start()\n      running = true\n    },\n    async runOnce() {\n      if (stop !== undefined)\n        throw new Error('Publisher is stopped')\n      await actor.runOnce()\n    },\n    stop: () => stop ??= (async () => {\n      abort.abort()\n      const failures: unknown[] = []\n      try {\n        await actor.stop()\n      } catch (error) {\n        failures.push(error)\n      }\n      try {\n        await options.discovery.close?.()\n      } catch (error) {\n        failures.push(error)\n      }\n      for (const source of options.sources)\n        try {\n          await source.close?.()\n        } catch (error) {\n          failures.push(error)\n        }\n      running = false\n      ready = false\n      if (failures.length > 0)\n        throw new AggregateError(failures, 'Publisher runtime shutdown failed')\n    })(),\n    status() {\n      const deliveries = state.entries<DeliveryState>(deliveryNamespace).map(item => item.value)\n      return {\n        running,\n        deliveryMode,\n        ...(bestEffort === undefined ? {} : { bestEffort: Object.freeze({ ...bestEffort }) }),\n        superseded: deliveries.reduce((sum, item) => sum + (item.superseded ?? 0), 0),\n        abandoned: deliveries.reduce((sum, item) => sum + (item.abandoned ?? 0), 0),\n        totalAttempts: deliveries.reduce((sum, item) => sum + (item.totalAttempts ?? 0), 0),\n        ready: running && ready,\n        clockHealthy,\n        degraded: !ready || deliveries.some(item => item.state !== 'cancelled' && item.failures > 0),\n        publisher: options.publisher,\n        activeSubscriptions: deliveries.filter(item => item.state === 'active').length,\n        pendingDeliveries: deliveries.filter(item => item.pending !== undefined).length,\n        delivered: deliveries.reduce((sum, item) => sum + item.delivered, 0),\n        failures: deliveries.reduce((sum, item) => sum + item.failures, 0),\n        passes,\n        ...(lastError === undefined ? {} : { lastError }),\n        ...(options.discovery.status === undefined ? {} : { handshake: options.discovery.status() }),\n        sources: state.entries<PublisherSourceHead>('source-heads').filter(item => sourceReaders.has(item.key)).map(item => ({ id: item.key, ...item.value })),\n        subscriptions: state.entries<DeliveryState>(deliveryNamespace).map(item => ({\n          id: item.key,\n          cursor: item.value.cursor,\n          ...(deliveryMode === 'best-effort'\n            ? {\n                ...(item.value.cursor < item.value.subscription.fromPosition ? {} : { lastAdmissionTarget: item.value.cursor }),\n                attempts: item.value.attempts ?? 0,\n                lastHintAt: item.value.lastHintAt,\n              }\n            : {}),\n          state: item.value.state,\n          pending: item.value.pending !== undefined,\n          failures: item.value.failures,\n        })),\n      }\n    },\n  }\n}\n", "import { randomBytes } from 'node:crypto'\nimport { isDeepStrictEqual } from 'node:util'\n\nimport type { BestEffortDeliveryPolicy, WakeEnvelope } from '@xyo-network/event-kit-schemas'\nimport { WakeEnvelopeSchema, WakeEnvelopeZod } from '@xyo-network/event-kit-schemas'\n\nimport type { PublisherRuntimeSubscription } from './publisherRuntime.ts'\nimport type { PublisherSourceHead } from './sources.ts'\nimport { publisherSourceKey } from './sources.ts'\nimport type { SqlitePublisherState } from './sqlitePublisherState.ts'\n\nexport interface DeliveryState {\n  readonly abandoned?: number\n  readonly attempts?: number\n  readonly cursor: number\n  readonly delivered: number\n  readonly failures: number\n  readonly lastError?: string\n  readonly lastHintAt?: number\n  readonly lastHintTarget?: number\n  readonly lastNotifiedAt?: number\n  readonly nextAttemptMs: number\n  readonly pending?: WakeEnvelope\n  readonly state: 'active' | 'blocked' | 'cancelled'\n  readonly subscription: PublisherRuntimeSubscription\n  readonly superseded?: number\n  readonly totalAttempts?: number\n}\nexport function assertDeliveryState(record: DeliveryState, subscription: PublisherRuntimeSubscription): void {\n  if (!isDeepStrictEqual(record.subscription, subscription))\n    throw new Error('Subscription revision changed without a new identity')\n  if (!Number.isSafeInteger(record.cursor) || record.cursor < subscription.fromPosition - 1\n    || [record.delivered, record.failures, record.nextAttemptMs].some(value => !(Number.isSafeInteger(value) && value >= 0))\n    || [record.attempts, record.superseded, record.abandoned, record.totalAttempts, record.lastHintAt, record.lastNotifiedAt, record.lastHintTarget]\n      .some(value => value !== undefined && !(Number.isSafeInteger(value) && value >= 0))\n      || !['active', 'blocked', 'cancelled'].includes(record.state))\n    throw new Error('Persisted publisher delivery state is invalid')\n  if (record.pending === undefined) return\n  const pending = WakeEnvelopeZod.parse(record.pending)\n  if ((subscription.deliveryMode === 'durable' && pending.fromPosition !== record.cursor + 1)\n    || pending.deliveryMode !== subscription.deliveryMode || pending.toPosition - pending.fromPosition + 1 > subscription.maxPositionsPerWake\n    || pending.authorizationChainId !== subscription.authorizationChainId || pending.deploymentId !== subscription.deploymentId\n    || pending.queueId !== subscription.queueId || pending.filterHash !== subscription.filterHash\n    || !isDeepStrictEqual(pending.source, subscription.source))\n    throw new Error('Persisted publisher outbox binding is invalid')\n}\nexport function makeEvent(subscription: PublisherRuntimeSubscription, fromPosition: number, toPosition: number, now: number, wakeId = randomBytes(16).toString('hex')) {\n  return WakeEnvelopeZod.parse({\n    schema: WakeEnvelopeSchema,\n    authorizationChainId: subscription.authorizationChainId,\n    deliveryMode: subscription.deliveryMode,\n    deploymentId: subscription.deploymentId,\n    filterHash: subscription.filterHash,\n    fromPosition,\n    issuedAt: now,\n    source: subscription.source,\n    toPosition,\n    wakeId,\n    ...(subscription.queueId === undefined ? {} : { queueId: subscription.queueId }),\n  })\n}\n\nexport class DeliveryResponseError extends Error {\n  readonly retryAfterMs?: number\n  readonly status: number\n  constructor(status: number, retryAfterMs?: number) {\n    super('Publisher admission failed')\n    this.status = status\n    this.retryAfterMs = retryAfterMs\n  }\n\n  get retryable() {\n    return this.status === 408 || this.status === 429 || this.status >= 500\n  }\n}\n\nexport function prepareBestEffortDelivery(options: {\n  readonly bestEffort: BestEffortDeliveryPolicy\n  readonly first: boolean\n  readonly heads: ReadonlyMap<string, PublisherSourceHead | Error>\n  readonly now: number\n  readonly record: DeliveryState\n  readonly state: SqlitePublisherState\n}) {\n  const {\n    bestEffort, first, heads, now, record, state,\n  } = options\n  const subscription = record.subscription\n  const head = heads.get(publisherSourceKey(subscription.source))\n  const prior = record.pending\n  const expired = isHintExpired(record, now, bestEffort)\n  if (head === undefined || head instanceof Error || head.position < subscription.fromPosition) {\n    if (prior !== undefined && !expired) return { ...record, pending: prior }\n    if (prior !== undefined) state.set('best-effort-deliveries', subscription.subscriptionHash, {\n      ...record, pending: undefined, abandoned: (record.abandoned ?? 0) + 1,\n    })\n    return\n  }\n  const refresh = refreshDue(record, now, bestEffort)\n  if (freshHintRequired(record, head.position, first, refresh, expired)) {\n    const pending = makeEvent(subscription, head.position, head.position, now)\n    const prepared = {\n      ...record,\n      pending,\n      attempts: 0,\n      lastHintAt: now,\n      lastHintTarget: head.position,\n      superseded: (record.superseded ?? 0) + (prior !== undefined && !expired ? 1 : 0),\n      abandoned: (record.abandoned ?? 0) + (expired ? 1 : 0),\n      nextAttemptMs: 0,\n      state: 'active' as const,\n    }\n    state.set('best-effort-deliveries', subscription.subscriptionHash, prepared)\n    return prepared\n  }\n  if (expired) state.set('best-effort-deliveries', subscription.subscriptionHash, {\n    ...record, pending: undefined, abandoned: (record.abandoned ?? 0) + 1,\n  })\n  return prior === undefined || expired ? undefined : { ...record, pending: prior }\n}\n\nfunction isHintExpired(record: DeliveryState, now: number, policy: BestEffortDeliveryPolicy): boolean {\n  return record.pending !== undefined && (now > record.pending.issuedAt + policy.maxHintAgeSeconds || (record.attempts ?? 0) >= policy.maxAttempts)\n}\nfunction refreshDue(record: DeliveryState, now: number, policy: BestEffortDeliveryPolicy): boolean {\n  return now - (record.lastHintAt ?? record.lastNotifiedAt ?? 0) >= policy.refreshIntervalSeconds\n}\nfunction freshHintRequired(record: DeliveryState, head: number, first: boolean, refresh: boolean, expired: boolean): boolean {\n  return first || head > (record.pending?.toPosition ?? record.lastHintTarget ?? record.cursor) || (refresh && (record.pending === undefined || expired))\n}\nexport function failedDelivery(record: DeliveryState, current: DeliveryState | undefined, mode: string, error: unknown, now: number): DeliveryState {\n  const bestEffort = mode === 'best-effort'\n  const wait = error instanceof DeliveryResponseError && error.retryAfterMs !== undefined\n    ? error.retryAfterMs\n    : Math.min(300_000, 1000 * (2 ** Math.min(record.failures, 8)))\n  return {\n    ...record,\n    failures: record.failures + 1,\n    totalAttempts: bestEffort ? current?.totalAttempts ?? record.totalAttempts ?? 0 : record.totalAttempts,\n    attempts: bestEffort ? current?.attempts ?? record.attempts ?? 0 : record.attempts,\n    state: !bestEffort && error instanceof DeliveryResponseError && !error.retryable ? 'blocked' : 'active',\n    nextAttemptMs: now * 1000 + Math.min(3_600_000, wait),\n    lastError: 'delivery-failed',\n  }\n}\n", "import { randomBytes } from 'node:crypto'\n\nimport type { WakeEnvelope } from '@xyo-network/event-kit-schemas'\nimport {\n  NormalizedAddressZod, WakeEnvelopeZod, WakeJwtSchema,\n} from '@xyo-network/event-kit-schemas'\nimport type { AccountInstance } from '@xyo-network/sdk'\nimport { PayloadBuilder } from '@xyo-network/sdk'\n/** The wallet-JWT profile commits to the complete strict source-aware body. */\nexport function createAccountSourceWakeSigner(options: {\n  readonly account: AccountInstance\n  readonly nowSeconds?: () => number\n  readonly publisher: string\n}) {\n  const publisher = NormalizedAddressZod.parse(options.publisher)\n  if (String(options.account.address).replace(/^0x/u, '').toLowerCase() !== publisher)\n    throw new Error('Publisher signing account mismatch')\n  return {\n    async sign(input: WakeEnvelope, audience: string) {\n      const event = WakeEnvelopeZod.parse(input)\n      const eventHash = await PayloadBuilder.dataHash(event)\n      const now = options.nowSeconds?.() ?? Math.floor(Date.now() / 1000)\n      if (!Number.isSafeInteger(now) || now < 0)\n        throw new Error('Publisher signing clock is invalid')\n      const { token: jwt } = await options.account.signJwt({\n        audience,\n        claims: { eventHash, jti: randomBytes(16).toString('hex') },\n        now,\n        schema: WakeJwtSchema,\n        ttl: 60,\n      })\n      return {\n        event, eventHash, jwt, publisher,\n      }\n    },\n  }\n}\n", "import { FetchJsonClient } from '@ariestools/sdk'\nimport type { AccountInstance } from '@xyo-network/sdk'\nimport type {\n  GatewaySession, XyoGateway, XyoGatewayRunner,\n} from '@xyo-network/xl1-sdk'\nimport {\n  baseConfigFactoryLocator, basicRestRunnerLocator, basicRestViewerLocator, creatableProvider,\n  releaseProviderFactoryLocator, RestDataLakeRunner, RestDataLakeViewer, XyoGatewayMoniker, XyoGatewayRunnerMoniker,\n} from '@xyo-network/xl1-sdk'\nexport interface PublisherRestGatewayOptions {\n  readonly chainStateUrl: string\n  readonly fetchFn: typeof globalThis.fetch\n  readonly finalizedUrl: string\n  readonly indexUrl?: string\n  readonly rpcUrl: string\n}\n/** Owned public SDK REST gateway; only the optional mutation runner uses RPC. */\nexport function openPublisherRestGateway(options: PublisherRestGatewayOptions & {\n  readonly account: AccountInstance\n}): Promise<GatewaySession<XyoGatewayRunner>>\nexport function openPublisherRestGateway(options: PublisherRestGatewayOptions & {\n  readonly account?: undefined\n}): Promise<GatewaySession<XyoGateway>>\nexport async function openPublisherRestGateway(options: PublisherRestGatewayOptions & {\n  readonly account?: AccountInstance\n}): Promise<GatewaySession<XyoGateway | XyoGatewayRunner>> {\n  const rest = {\n    finalized: { type: 'rest' as const, baseUrl: options.finalizedUrl },\n    chainState: { type: 'rest' as const, baseUrl: options.chainStateUrl },\n    index: { type: 'rest' as const, baseUrl: options.indexUrl ?? options.finalizedUrl },\n  }\n  const locator = options.account === undefined\n    ? await basicRestViewerLocator('event-kit-publisher-read', rest, undefined, { fetchFn: options.fetchFn, primeCaches: 'off' })\n    : await basicRestRunnerLocator('event-kit-publisher-write', rest, undefined, {\n        fetchFn: options.fetchFn, primeCaches: 'off', rpcUrl: options.rpcUrl, signerAccount: options.account,\n      })\n  try {\n    const gateway = options.account === undefined\n      ? await locator.getInstance<XyoGateway>(XyoGatewayMoniker)\n      : await locator.getInstance<XyoGatewayRunner>(XyoGatewayRunnerMoniker)\n    let stopping: Promise<void> | undefined\n    return Object.freeze({ gateway, stop: () => stopping ??= releaseProviderFactoryLocator(locator) })\n  } catch (error) {\n    await releaseProviderFactoryLocator(locator)\n    throw error\n  }\n}\n@creatableProvider()\nclass BoundedRestDataLakeViewer extends RestDataLakeViewer {\n  override get client() {\n    if (this.context.fetchFn === undefined)\n      throw new Error('Publisher datalake requires its bounded fetch transport')\n    return new FetchJsonClient({ fetcher: this.context.fetchFn })\n  }\n}\n@creatableProvider()\nclass BoundedRestDataLakeRunner extends RestDataLakeRunner {\n  override get client() {\n    if (this.context.fetchFn === undefined)\n      throw new Error('Publisher datalake requires its bounded fetch transport')\n    return new FetchJsonClient({ fetcher: this.context.fetchFn })\n  }\n}\n/** Keeps SDK datalake methods and response semantics, overriding only its per-instance HTTP client. */\nexport async function openPublisherDataLake(options: {\n  readonly fetchFn: typeof globalThis.fetch\n  readonly url: string\n  readonly writable: boolean\n}) {\n  const locator = await baseConfigFactoryLocator({\n    connections: { 'event-kit-lake': { type: 'rest', baseUrl: options.url } },\n    providerBindings: { DataLakeViewer: { connection: 'event-kit-lake' }, DataLakeRunner: { connection: 'event-kit-lake' } },\n  })\n  locator.context.fetchFn = options.fetchFn\n  locator.register(BoundedRestDataLakeViewer.factory<BoundedRestDataLakeViewer>(BoundedRestDataLakeViewer.dependencies))\n  if (options.writable)\n    locator.register(BoundedRestDataLakeRunner.factory<BoundedRestDataLakeRunner>(BoundedRestDataLakeRunner.dependencies))\n  locator.freeze()\n  try {\n    const reader = await locator.getInstance<BoundedRestDataLakeViewer>(BoundedRestDataLakeViewer.defaultMoniker)\n    const writer = options.writable ? await locator.getInstance<BoundedRestDataLakeRunner>(BoundedRestDataLakeRunner.defaultMoniker) : undefined\n    return {\n      reader, writer, async close() { await releaseProviderFactoryLocator(locator) },\n    }\n  } catch (error) {\n    await releaseProviderFactoryLocator(locator)\n    throw error\n  }\n}\n", "import { isDeepStrictEqual } from 'node:util'\n\nimport type { PublisherEndpointChallengeRecord, PublisherEndpointChallengeStore } from '@xyo-network/event-kit-protocol'\nimport { endpointChallengeHash } from '@xyo-network/event-kit-protocol'\nimport {\n  Base64Url32BytesZod, EndpointChallengeZod, HandshakeIdZod, HashZod, NormalizedAddressZod,\n} from '@xyo-network/event-kit-schemas'\nimport type { EventKitReplayCheckpointStore } from '@xyo-network/event-kit-statement-graph'\nimport type {\n  FinalizedStatementPublicationIntent, FinalizedStatementPublicationJournal, FinalizedStatementPublicationRecord,\n} from '@xyo-network/event-kit-xl1'\nimport { z } from 'zod'\n\nimport type { PublisherEncryptionKeyCustody } from '../handshakeClients.ts'\nimport type { HandshakeMutationIntent, HandshakeMutationIntentStore } from '../handshakeMutationIntent.ts'\nimport {\n  assertSameIntentBinding, intentLookupKey, parseHandshakeMutationIntent,\n} from '../handshakeMutationIntent.ts'\nimport type { SqlitePublisherState } from './sqlitePublisherState.ts'\n\nconst KeyZod = z.strictObject({\n  encryptionKey: HashZod, keyId: HandshakeIdZod, privateKey: Base64Url32BytesZod, publisher: NormalizedAddressZod,\n})\nconst phases = ['signed', 'content-written', 'content-verified', 'broadcast', 'included', 'finalized'] as const\n\nfunction requireTime(value: number): void {\n  if (!Number.isSafeInteger(value) || value < 0) throw new Error('Publisher clock is invalid')\n}\n\nfunction samePublicationIntent(left: FinalizedStatementPublicationIntent, right: FinalizedStatementPublicationIntent): boolean {\n  return left.chainId === right.chainId && left.source === right.source && left.operationId === right.operationId\n    && isDeepStrictEqual(left.eventHashes, right.eventHashes) && isDeepStrictEqual(left.attachmentHashes, right.attachmentHashes)\n}\n\nfunction publicationKey(intent: FinalizedStatementPublicationIntent): string {\n  if (!/^[0-9a-f]{40}$/u.test(intent.chainId) || !/^[0-9a-f]{40}$/u.test(intent.source)\n    || intent.operationId.length === 0 || intent.operationId.length > 256\n    || [...intent.eventHashes, ...intent.attachmentHashes].some(hash => !HashZod.safeParse(hash).success)) {\n    throw new Error('Invalid publication intent')\n  }\n  return JSON.stringify([intent.chainId, intent.source, intent.operationId])\n}\n\n/** All handshake durability uses the same single-owner SQLite authority as delivery. */\nexport function createSqlitePublisherHandshakeStores(state: SqlitePublisherState, options: { readonly replayNamespace?: string } = {}): {\n  readonly challenges: PublisherEndpointChallengeStore\n  readonly intents: HandshakeMutationIntentStore\n  readonly journal: FinalizedStatementPublicationJournal\n  readonly keys: PublisherEncryptionKeyCustody\n  readonly replay: EventKitReplayCheckpointStore\n} {\n  const replayKey = options.replayNamespace === undefined ? 'checkpoint' : `checkpoint:${z.string().min(1).max(128).regex(/^[A-Za-z0-9_-]+$/u).parse(options.replayNamespace)}`\n  const replay: EventKitReplayCheckpointStore = {\n    load: async () => state.get('replay', replayKey),\n    async save(checkpoint) { state.set('replay', replayKey, checkpoint) },\n  }\n  const intents: HandshakeMutationIntentStore = {\n    async get(lookup) {\n      const value = state.get('intents', intentLookupKey(lookup))\n      return value === undefined ? undefined : await parseHandshakeMutationIntent(value)\n    },\n    async getOrCreate(raw) {\n      const proposed = await parseHandshakeMutationIntent(raw) as typeof raw\n      return state.transaction(() => {\n        const key = intentLookupKey(proposed)\n        const winner = state.get<HandshakeMutationIntent>('intents', key)\n        if (winner !== undefined) {\n          assertSameIntentBinding(winner, proposed)\n          return { disposition: 'resumed' as const, intent: winner as typeof raw }\n        }\n        state.set('intents', key, proposed)\n        return { disposition: 'created' as const, intent: proposed }\n      })\n    },\n  }\n  const keys: PublisherEncryptionKeyCustody = {\n    async getPrivateKey(input) {\n      const key = `${NormalizedAddressZod.parse(input.publisher)}:${HandshakeIdZod.parse(input.keyId)}`\n      const raw = state.get('encryption-keys', key)\n      if (raw === undefined) return\n      const record = KeyZod.parse(raw)\n      if (record.encryptionKey !== HashZod.parse(input.encryptionKey)) throw new Error('Encryption key identity mismatch')\n      const { publisher: _publisher, ...privateKey } = record\n      return privateKey\n    },\n    async putPrivateKey(input) {\n      const record = KeyZod.parse({ ...input.key, publisher: input.publisher })\n      return state.transaction(() => {\n        const key = `${record.publisher}:${record.keyId}`\n        const prior = state.get('encryption-keys', key)\n        if (prior !== undefined) {\n          if (!isDeepStrictEqual(prior, record)) throw new Error('Encryption key collision')\n          return 'duplicate'\n        }\n        state.set('encryption-keys', key, record)\n        return 'stored'\n      })\n    },\n  }\n  const current = (hash: string) => state.get<PublisherEndpointChallengeRecord>('challenges', HashZod.parse(hash))\n  const live = (record: PublisherEndpointChallengeRecord, now: number) => record.challenge.issuedAt <= now && now < record.challenge.expiresAt\n  const challenges: PublisherEndpointChallengeStore = {\n    get: async hash => current(hash),\n    async issue(input) {\n      const challenge = EndpointChallengeZod.parse(input.challenge)\n      const hash = HashZod.parse(input.challengeHash)\n      if (await endpointChallengeHash(challenge) !== hash) return { kind: 'collision' }\n      return state.transaction(() => {\n        const priorNonce = state.get<string>('challenge-nonces', challenge.nonce)\n        if (priorNonce !== undefined && priorNonce !== hash) return { kind: 'collision' as const }\n        const prior = current(hash)\n        if (prior !== undefined) return isDeepStrictEqual(prior.challenge, challenge)\n          ? { kind: 'duplicate' as const, record: prior }\n          : { kind: 'collision' as const }\n        const record: PublisherEndpointChallengeRecord = {\n          challenge, challengeHash: hash, state: 'issued',\n        }\n        state.set('challenge-nonces', challenge.nonce, hash)\n        state.set('challenges', hash, record)\n        return { kind: 'issued' as const, record }\n      })\n    },\n    async beginAttempt(input) {\n      requireTime(input.nowSeconds)\n      return state.transaction(() => {\n        const record = current(input.challengeHash)\n        if (record === undefined) return { kind: 'missing' as const }\n        if (record.state === 'verified') return { kind: 'verified' as const, record }\n        if (record.state === 'attempted') return { kind: 'already-attempted' as const, record }\n        if (!live(record, input.nowSeconds)) return { kind: 'expired' as const, record }\n        const attempted: PublisherEndpointChallengeRecord = { ...record, state: 'attempted' }\n        state.set('challenges', input.challengeHash, attempted)\n        return { kind: 'started' as const, record: attempted }\n      })\n    },\n    async completeVerified(input) {\n      requireTime(input.nowSeconds)\n      const responseHash = HashZod.parse(input.responseHash)\n      return state.transaction(() => {\n        const record = current(input.challengeHash)\n        if (record === undefined) return { kind: 'missing' as const }\n        if (record.state === 'verified') return { kind: record.responseHash === responseHash ? 'duplicate' as const : 'collision' as const, record }\n        if (record.state !== 'attempted') return { kind: 'not-attempted' as const, record }\n        if (!live(record, input.nowSeconds)) return { kind: 'expired' as const, record }\n        const verified: PublisherEndpointChallengeRecord = {\n          ...record, responseHash, state: 'verified',\n        }\n        state.set('challenges', input.challengeHash, verified)\n        return { kind: 'verified' as const, record: verified }\n      })\n    },\n  }\n  const journal: FinalizedStatementPublicationJournal = {\n    async load(intent) {\n      const key = publicationKey(intent)\n      const signed = state.get<FinalizedStatementPublicationRecord>('publication:signed', key)\n      if (signed === undefined) return\n      if (!samePublicationIntent(signed, intent)) throw new Error('Publication intent collision')\n      let latest = signed\n      for (const phase of phases) {\n        const record = state.get<FinalizedStatementPublicationRecord>(`publication:${phase}`, key)\n        if (record === undefined) continue\n        if (record.phase !== phase || !samePublicationIntent(record, intent) || !isDeepStrictEqual(record.evidence, signed.evidence)) {\n          throw new Error('Publication evidence collision')\n        }\n        latest = record\n      }\n      return latest\n    },\n    async save(record) {\n      const key = publicationKey(record)\n      HashZod.parse(record.evidence.transactionHash)\n      if (!phases.includes(record.phase)) throw new Error('Unknown publication phase')\n      state.transaction(() => {\n        const signed = state.get<FinalizedStatementPublicationRecord>('publication:signed', key)\n        if (signed === undefined && record.phase !== 'signed') throw new Error('Publication must bind signed evidence first')\n        if (signed !== undefined && (!samePublicationIntent(signed, record) || !isDeepStrictEqual(signed.evidence, record.evidence))) {\n          throw new Error('Publication intent or evidence collision')\n        }\n        const namespace = `publication:${record.phase}`\n        const prior = state.get(namespace, key)\n        if (prior !== undefined && !isDeepStrictEqual(prior, record)) throw new Error('Publication phase collision')\n        if (prior === undefined) state.set(namespace, key, record)\n      })\n    },\n  }\n  return {\n    challenges, intents, journal, keys, replay,\n  }\n}\n", "import {\n  canonicalJsonBytes,\n  handshakeObjectHash,\n} from '@xyo-network/event-kit-protocol'\nimport type {\n  ChainId,\n  Hash,\n  NormalizedAddress,\n} from '@xyo-network/event-kit-schemas'\nimport {\n  Base64Url32BytesZod,\n  ChainIdZod,\n  EncryptedWakeSubscriptionZod,\n  EndpointChallengeResponseZod,\n  EndpointChallengeZod,\n  HandshakeIdZod,\n  HashZod,\n  NormalizedAddressZod,\n  PublisherEncryptionKeyRevocationZod,\n  PublisherEncryptionKeyZod,\n  PublisherServiceRevocationZod,\n  PublisherServiceZod,\n  WakeGrantObjectZod,\n  WakeGrantRevocationZod,\n  WakeSubscriptionAcceptanceZod,\n  WakeSubscriptionRevocationZod,\n} from '@xyo-network/event-kit-schemas'\nimport { z } from 'zod'\n\nexport const HandshakeMutationIntentKinds = [\n  'publisher-encryption-key-retire',\n  'publisher-service-publish',\n  'publisher-service-retire',\n  'publisher-service-rotate-key',\n  'publisher-subscription-accept',\n  'subscriber-grant-revoke',\n  'subscriber-subscription-revoke',\n  'subscriber-subscription-subscribe',\n] as const\n\nexport type HandshakeMutationIntentKind = typeof HandshakeMutationIntentKinds[number]\nexport type HandshakeMutationIntentDisposition = 'created' | 'resumed'\n\nconst HandshakeMutationIntentKindZod = z.enum(HandshakeMutationIntentKinds)\nconst HandshakeMutationOperationIdZod = z.union([HandshakeIdZod, HashZod])\nconst WakeSubscriptionPrivateKeyZod = z.strictObject({\n  encryptionKey: HashZod,\n  keyId: HandshakeIdZod,\n  privateKey: Base64Url32BytesZod,\n})\n\nconst IntentBaseFields = {\n  chainId: ChainIdZod,\n  operationId: HandshakeMutationOperationIdZod,\n  publisher: NormalizedAddressZod,\n  requestFingerprint: HashZod,\n  source: NormalizedAddressZod,\n  version: z.literal(1),\n} as const\n\nconst PublisherServicePublishIntentZod = z.strictObject({\n  ...IntentBaseFields,\n  kind: z.literal('publisher-service-publish'),\n  operationId: HandshakeIdZod,\n  encryptionKey: PublisherEncryptionKeyZod,\n  privateKey: WakeSubscriptionPrivateKeyZod,\n  service: PublisherServiceZod,\n})\n\nconst PublisherServiceRotateKeyIntentZod = z.strictObject({\n  ...IntentBaseFields,\n  kind: z.literal('publisher-service-rotate-key'),\n  operationId: HandshakeIdZod,\n  encryptionKey: PublisherEncryptionKeyZod,\n  privateKey: WakeSubscriptionPrivateKeyZod,\n  selectedKey: HashZod,\n  selectedService: HashZod,\n  service: PublisherServiceZod,\n})\n\nconst SubscriberSubscriptionIntentZod = z.strictObject({\n  ...IntentBaseFields,\n  kind: z.literal('subscriber-subscription-subscribe'),\n  operationId: HandshakeIdZod,\n  encryptionKey: PublisherEncryptionKeyZod,\n  grant: WakeGrantObjectZod,\n  selectedKey: HashZod,\n  selectedService: HashZod,\n  service: PublisherServiceZod,\n  subscription: EncryptedWakeSubscriptionZod,\n})\n\nconst PublisherAcceptanceIntentZod = z.strictObject({\n  ...IntentBaseFields,\n  acceptance: WakeSubscriptionAcceptanceZod,\n  challenge: EndpointChallengeZod,\n  kind: z.literal('publisher-subscription-accept'),\n  operationId: HashZod,\n  response: EndpointChallengeResponseZod,\n})\n\nconst PublisherServiceRetireIntentZod = z.strictObject({\n  ...IntentBaseFields,\n  kind: z.literal('publisher-service-retire'),\n  operationId: HashZod,\n  revocation: PublisherServiceRevocationZod,\n})\n\nconst PublisherEncryptionKeyRetireIntentZod = z.strictObject({\n  ...IntentBaseFields,\n  kind: z.literal('publisher-encryption-key-retire'),\n  operationId: HashZod,\n  revocation: PublisherEncryptionKeyRevocationZod,\n})\n\nconst SubscriberGrantRevokeIntentZod = z.strictObject({\n  ...IntentBaseFields,\n  kind: z.literal('subscriber-grant-revoke'),\n  operationId: HashZod,\n  revocation: WakeGrantRevocationZod,\n})\n\nconst SubscriberSubscriptionRevokeIntentZod = z.strictObject({\n  ...IntentBaseFields,\n  kind: z.literal('subscriber-subscription-revoke'),\n  operationId: HashZod,\n  revocation: WakeSubscriptionRevocationZod,\n})\n\nexport const HandshakeMutationIntentZod = z.discriminatedUnion('kind', [\n  PublisherEncryptionKeyRetireIntentZod,\n  PublisherServicePublishIntentZod,\n  PublisherServiceRetireIntentZod,\n  PublisherServiceRotateKeyIntentZod,\n  PublisherAcceptanceIntentZod,\n  SubscriberGrantRevokeIntentZod,\n  SubscriberSubscriptionRevokeIntentZod,\n  SubscriberSubscriptionIntentZod,\n])\n\nexport type HandshakeMutationIntent = z.infer<typeof HandshakeMutationIntentZod>\nexport type PublisherServicePublishIntent = z.infer<typeof PublisherServicePublishIntentZod>\nexport type PublisherServiceRotateKeyIntent = z.infer<typeof PublisherServiceRotateKeyIntentZod>\nexport type SubscriberSubscriptionIntent = z.infer<typeof SubscriberSubscriptionIntentZod>\nexport type PublisherAcceptanceIntent = z.infer<typeof PublisherAcceptanceIntentZod>\nexport type PublisherServiceRetireIntent = z.infer<typeof PublisherServiceRetireIntentZod>\nexport type PublisherEncryptionKeyRetireIntent = z.infer<typeof PublisherEncryptionKeyRetireIntentZod>\nexport type SubscriberGrantRevokeIntent = z.infer<typeof SubscriberGrantRevokeIntentZod>\nexport type SubscriberSubscriptionRevokeIntent = z.infer<typeof SubscriberSubscriptionRevokeIntentZod>\n\nexport interface HandshakeMutationIntentLookup {\n  readonly chainId: ChainId\n  readonly kind: HandshakeMutationIntentKind\n  readonly operationId: string\n  readonly publisher: NormalizedAddress\n  readonly source: NormalizedAddress\n}\n\nexport interface HandshakeMutationIntentResolution<TIntent extends HandshakeMutationIntent = HandshakeMutationIntent> {\n  readonly disposition: HandshakeMutationIntentDisposition\n  readonly intent: TIntent\n}\n\n/** Durable, first-writer-wins boundary for exact logical handshake mutations. */\nexport interface HandshakeMutationIntentStore {\n  get(lookup: HandshakeMutationIntentLookup): Promise<HandshakeMutationIntent | undefined>\n  getOrCreate<TIntent extends HandshakeMutationIntent>(\n    intent: TIntent,\n  ): Promise<HandshakeMutationIntentResolution<TIntent>>\n}\n\n/** Stable error for reuse of one operation ID with different request or chain context. */\nexport class HandshakeMutationIntentConflictError extends Error {\n  constructor(message = 'Handshake mutation operation ID is already bound to different intent') {\n    super(message)\n    this.name = 'HandshakeMutationIntentConflictError'\n  }\n}\n\n/** SHA-256 over the canonical private/public caller-input representation. */\nexport async function handshakeMutationRequestFingerprint(value: unknown): Promise<Hash> {\n  const canonical = canonicalJsonBytes(value)\n  const digestInput = new Uint8Array(canonical.byteLength)\n  digestInput.set(canonical)\n  const digest = await globalThis.crypto.subtle.digest('SHA-256', digestInput)\n  const hex = Array.from(new Uint8Array(digest), byte => byte.toString(16).padStart(2, '0')).join('')\n  return HashZod.parse(hex)\n}\n\nexport function parseHandshakeMutationIntentLookup(value: HandshakeMutationIntentLookup): HandshakeMutationIntentLookup {\n  return Object.freeze({\n    chainId: ChainIdZod.parse(value.chainId),\n    kind: HandshakeMutationIntentKindZod.parse(value.kind),\n    operationId: HandshakeMutationOperationIdZod.parse(value.operationId),\n    publisher: NormalizedAddressZod.parse(value.publisher),\n    source: NormalizedAddressZod.parse(value.source),\n  })\n}\n\n/** Strictly validates an intent and recomputes every canonical object binding. */\nexport async function parseHandshakeMutationIntent(value: unknown): Promise<HandshakeMutationIntent> {\n  const intent = HandshakeMutationIntentZod.parse(value)\n  await assertIntentIntegrity(intent)\n  return Object.freeze(intent)\n}\n\n/** In-memory first-writer-wins adapter for focused tests and ephemeral composition. */\nexport function createMemoryHandshakeMutationIntentStore(): HandshakeMutationIntentStore {\n  const intents = new Map<string, HandshakeMutationIntent>()\n  return {\n    async get(rawLookup) {\n      const lookup = parseHandshakeMutationIntentLookup(rawLookup)\n      return intents.get(intentLookupKey(lookup))\n    },\n    async getOrCreate(rawIntent) {\n      const proposed = await parseHandshakeMutationIntent(rawIntent) as typeof rawIntent\n      const key = intentLookupKey(proposed)\n      const existing = intents.get(key)\n      if (existing === undefined) {\n        intents.set(key, proposed)\n        return Object.freeze({ disposition: 'created' as const, intent: proposed })\n      }\n      assertSameIntentBinding(existing, proposed)\n      return Object.freeze({ disposition: 'resumed' as const, intent: existing as typeof rawIntent })\n    },\n  }\n}\n\nexport function intentLookupKey(lookup: HandshakeMutationIntentLookup): string {\n  const parsed = parseHandshakeMutationIntentLookup(lookup)\n  return [parsed.chainId, parsed.publisher, parsed.source, parsed.kind, parsed.operationId].join('/')\n}\n\nexport function assertSameIntentBinding(left: HandshakeMutationIntent, right: HandshakeMutationIntent): void {\n  const shared = left.version === right.version\n    && left.chainId === right.chainId\n    && left.kind === right.kind\n    && left.operationId === right.operationId\n    && left.publisher === right.publisher\n    && left.source === right.source\n    && left.requestFingerprint === right.requestFingerprint\n  const bothRotate = left.kind === 'publisher-service-rotate-key'\n    && right.kind === 'publisher-service-rotate-key'\n  const bothSubscribe = left.kind === 'subscriber-subscription-subscribe'\n    && right.kind === 'subscriber-subscription-subscribe'\n  const selected = bothRotate || bothSubscribe\n    ? left.selectedService === right.selectedService && left.selectedKey === right.selectedKey\n    : !('selectedService' in left) && !('selectedService' in right)\n  if (!shared || !selected) throw new HandshakeMutationIntentConflictError()\n}\n\nasync function assertIntentIntegrity(intent: HandshakeMutationIntent): Promise<void> {\n  if (intent.kind.startsWith('publisher-') && intent.source !== intent.publisher) {\n    throw new TypeError('Publisher mutation intent source must equal publisher')\n  }\n  if (intent.kind === 'publisher-service-publish' || intent.kind === 'publisher-service-rotate-key') {\n    await assertPublisherServiceIntent(intent)\n    return\n  }\n  if (intent.kind === 'subscriber-subscription-subscribe') {\n    await assertSubscriberSubscriptionIntent(intent)\n    return\n  }\n  if (intent.kind === 'publisher-subscription-accept') {\n    await assertPublisherAcceptanceIntent(intent)\n    return\n  }\n  await assertRevocationIntent(intent)\n}\n\nasync function assertPublisherServiceIntent(\n  intent: PublisherServicePublishIntent | PublisherServiceRotateKeyIntent,\n): Promise<void> {\n  const keyHash = await handshakeObjectHash(intent.encryptionKey)\n  if (intent.privateKey.encryptionKey !== keyHash\n    || intent.privateKey.keyId !== intent.encryptionKey.keyId\n    || intent.service.preferredEncryptionKey !== keyHash\n    || intent.service.encryptionKeys.length !== 1\n    || intent.service.encryptionKeys[0] !== keyHash) {\n    throw new TypeError('Publisher service mutation intent has inconsistent encryption-key artifacts')\n  }\n  if (intent.kind === 'publisher-service-publish') {\n    if (intent.service.revision !== 1 || intent.service.supersedes !== undefined) {\n      throw new TypeError('Publisher service root intent must contain a root service revision')\n    }\n  } else if (intent.service.supersedes !== intent.selectedService || intent.service.revision <= 1) {\n    throw new TypeError('Publisher service rotation intent does not extend its selected service')\n  }\n}\n\nasync function assertSubscriberSubscriptionIntent(intent: SubscriberSubscriptionIntent): Promise<void> {\n  const [keyHash, serviceHash, grantHash] = await Promise.all([\n    handshakeObjectHash(intent.encryptionKey),\n    handshakeObjectHash(intent.service),\n    handshakeObjectHash(intent.grant),\n  ])\n  if (keyHash !== intent.selectedKey\n    || serviceHash !== intent.selectedService\n    || intent.service.preferredEncryptionKey !== keyHash\n    || !intent.service.encryptionKeys.includes(keyHash)\n    || intent.grant.publisher !== intent.publisher\n    || intent.subscription.publisher !== intent.publisher\n    || intent.subscription.service !== serviceHash\n    || intent.subscription.encryptionKey !== keyHash\n    || intent.subscription.keyId !== intent.encryptionKey.keyId\n    || intent.subscription.grant !== grantHash) {\n    throw new TypeError('Subscriber subscription intent has inconsistent public artifacts')\n  }\n}\n\nasync function assertPublisherAcceptanceIntent(intent: PublisherAcceptanceIntent): Promise<void> {\n  const [challengeHash, responseHash] = await Promise.all([\n    handshakeObjectHash(intent.challenge),\n    handshakeObjectHash(intent.response),\n  ])\n  if (challengeHash !== intent.operationId\n    || intent.challenge.publisher !== intent.publisher\n    || intent.response.challenge !== challengeHash\n    || intent.acceptance.challenge !== challengeHash\n    || intent.acceptance.response !== responseHash\n    || intent.acceptance.service !== intent.challenge.service\n    || intent.acceptance.encryptionKey !== intent.challenge.encryptionKey\n    || intent.acceptance.grant !== intent.challenge.grant\n    || intent.acceptance.subscription !== intent.challenge.subscription) {\n    throw new TypeError('Publisher acceptance intent has inconsistent public artifacts')\n  }\n}\n\nasync function assertRevocationIntent(\n  intent:\n    | PublisherEncryptionKeyRetireIntent\n    | PublisherServiceRetireIntent\n    | SubscriberGrantRevokeIntent\n    | SubscriberSubscriptionRevokeIntent,\n): Promise<void> {\n  const target = intent.kind === 'publisher-encryption-key-retire'\n    ? intent.revocation.key\n    : intent.kind === 'publisher-service-retire'\n      ? intent.revocation.service\n      : intent.kind === 'subscriber-grant-revoke'\n        ? intent.revocation.grant\n        : intent.revocation.subscription\n  if (target !== intent.operationId) {\n    throw new TypeError('Handshake revocation intent has inconsistent target binding')\n  }\n}\n", "import { randomBytes } from 'node:crypto'\nimport { constants } from 'node:fs'\nimport {\n  lstat, mkdir, open,\n} from 'node:fs/promises'\nimport { hostname } from 'node:os'\nimport PATH from 'node:path'\n\nimport { stringifyJson } from '../filesystemJson.ts'\nexport interface SqlitePublisherStateOptions {\n  /** Immutable chain/publisher binding. A database must never silently change owners. */\n  readonly identity: string\n  readonly path: string\n}\ninterface JsonRow {\n  readonly value: string\n}\ninterface OwnerRow {\n  readonly host: string\n  readonly pid: number\n  readonly token: string\n}\n/** Single-process SQLite authority for publisher checkpoints, custody and delivery records. */\nexport interface SqlitePublisherState {\n  readonly path: string\n  close(): void\n  entries<T>(namespace: string): readonly {\n    readonly key: string\n    readonly value: T\n  }[]\n  get<T>(namespace: string, key: string): T | undefined\n  insert(namespace: string, key: string, value: unknown): boolean\n  remove(namespace: string, key: string): void\n  set(namespace: string, key: string, value: unknown): void\n  transaction<T>(work: () => T): T\n}\nfunction decode<T>(value: string): T {\n  return JSON.parse(value, (_key, candidate: unknown) => {\n    return typeof candidate === 'object' && candidate !== null && Object.keys(candidate).length === 1\n      && '$eventKitBigInt' in candidate && typeof candidate.$eventKitBigInt === 'string'\n      && /^(?:0|[1-9][0-9]*)$/u.test(candidate.$eventKitBigInt)\n      ? BigInt(candidate.$eventKitBigInt)\n      : candidate\n  }) as T\n}\nfunction processExists(pid: number): boolean {\n  if (!Number.isSafeInteger(pid) || pid < 1)\n    throw new Error('Invalid publisher owner record')\n  try {\n    process.kill(pid, 0)\n    return true\n  } catch (error) {\n    if (typeof error === 'object' && error !== null && 'code' in error && error.code === 'ESRCH')\n      return false\n    return true\n  }\n}\nexport async function openSqlitePublisherState(options: SqlitePublisherStateOptions): Promise<SqlitePublisherState> {\n  if (options.path === ':memory:' || options.identity.length === 0)\n    throw new Error('Persistent publisher needs a file and an identity')\n  const path = PATH.resolve(options.path)\n  const directory = PATH.dirname(path)\n  await mkdir(directory, { recursive: true, mode: 0o700 })\n  const metadata = await lstat(directory)\n  if (!metadata.isDirectory() || (metadata.mode & 0o077) !== 0)\n    throw new Error('Publisher state directory must be a real directory with 0700 permissions')\n  const file = await open(path, constants.O_CREAT | constants.O_RDWR | constants.O_NOFOLLOW, 0o600)\n  try {\n    const metadata = await file.stat()\n    if (!metadata.isFile() || (metadata.mode & 0o077) !== 0)\n      throw new Error('Publisher database permissions must be 0600')\n    await file.sync()\n  } finally {\n    await file.close()\n  }\n  const { DatabaseSync } = await import('node:sqlite')\n  const database = new DatabaseSync(path)\n  const token = randomBytes(16).toString('hex')\n  let closed = false\n  let inTransaction = false\n  const transaction = <T>(work: () => T): T => {\n    if (closed)\n      throw new Error('Publisher state is closed')\n    if (inTransaction)\n      return work()\n    database.exec('BEGIN IMMEDIATE')\n    inTransaction = true\n    try {\n      const result = work()\n      if (result instanceof Promise)\n        throw new Error('Publisher state transactions must be synchronous')\n      database.exec('COMMIT')\n      return result\n    } catch (error) {\n      database.exec('ROLLBACK')\n      throw error\n    } finally {\n      inTransaction = false\n    }\n  }\n  try {\n    database.exec(`\n      PRAGMA journal_mode = WAL;\n      PRAGMA synchronous = FULL;\n      PRAGMA busy_timeout = 5000;\n      CREATE TABLE IF NOT EXISTS publisher_records (namespace TEXT NOT NULL, key TEXT NOT NULL, value TEXT NOT NULL, PRIMARY KEY(namespace, key));\n      CREATE TABLE IF NOT EXISTS publisher_owner (id INTEGER PRIMARY KEY CHECK(id = 1), host TEXT NOT NULL, pid INTEGER NOT NULL, token TEXT NOT NULL);\n    `)\n    transaction(() => {\n      const prior = database.prepare('SELECT host, pid, token FROM publisher_owner WHERE id = 1').get() as OwnerRow | undefined\n      if (prior !== undefined && (prior.host !== hostname() || processExists(prior.pid))) {\n        throw new Error('Publisher database already has an active owner; a shared or multi-host database is not supported')\n      }\n      const binding = database.prepare('SELECT value FROM publisher_records WHERE namespace = ? AND key = ?').get('metadata', 'identity') as JsonRow | undefined\n      if (binding !== undefined && decode(binding.value) !== options.identity)\n        throw new Error('Publisher database identity mismatch')\n      database.prepare('INSERT OR IGNORE INTO publisher_records(namespace,key,value) VALUES (?,?,?)').run('metadata', 'identity', stringifyJson(options.identity))\n      database.prepare('INSERT OR REPLACE INTO publisher_owner(id,host,pid,token) VALUES (1,?,?,?)').run(hostname(), process.pid, token)\n    })\n  } catch (error) {\n    database.close()\n    throw error\n  }\n  const read = database.prepare('SELECT value FROM publisher_records WHERE namespace = ? AND key = ?')\n  const list = database.prepare('SELECT key, value FROM publisher_records WHERE namespace = ? ORDER BY key')\n  const write = database.prepare('INSERT INTO publisher_records(namespace,key,value) VALUES (?,?,?) ON CONFLICT(namespace,key) DO UPDATE SET value = excluded.value')\n  const insert = database.prepare('INSERT OR IGNORE INTO publisher_records(namespace,key,value) VALUES (?,?,?)')\n  const remove = database.prepare('DELETE FROM publisher_records WHERE namespace = ? AND key = ?')\n  const assertOpen = () => {\n    if (closed)\n      throw new Error('Publisher state is closed')\n  }\n  return {\n    path,\n    get<T>(namespace: string, key: string): T | undefined {\n      assertOpen()\n      const row = read.get(namespace, key) as JsonRow | undefined\n      return row === undefined ? undefined : decode<T>(row.value)\n    },\n    entries<T>(namespace: string) {\n      assertOpen()\n      return (list.all(namespace) as {\n        key: string\n        value: string\n      }[]).map(row => ({ key: row.key, value: decode<T>(row.value) }))\n    },\n    set(namespace, key, value) {\n      assertOpen()\n      write.run(namespace, key, stringifyJson(value))\n    },\n    insert(namespace, key, value) {\n      assertOpen()\n      return insert.run(namespace, key, stringifyJson(value)).changes === 1\n    },\n    remove(namespace, key) {\n      assertOpen()\n      remove.run(namespace, key)\n    },\n    transaction,\n    close() {\n      if (closed)\n        return\n      transaction(() => {\n        database.prepare('DELETE FROM publisher_owner WHERE id = 1 AND token = ?').run(token)\n      })\n      database.close()\n      closed = true\n    },\n  }\n}\n", "import { randomBytes } from 'node:crypto'\nimport {\n  link, open, rename, unlink,\n} from 'node:fs/promises'\nimport PATH from 'node:path'\n\nimport {\n  ensureDurableDirectory,\n  syncDirectory,\n  writeDurableFile,\n} from './filesystemDurability.ts'\n\nexport interface FilesystemJsonWriteOptions {\n  readonly directoryMode?: number\n  readonly mode?: number\n}\n\nexport async function readJsonFileStrict(path: string): Promise<unknown> {\n  let handle\n  try {\n    handle = await open(path, 'r')\n  } catch (error) {\n    if (errorCode(error) === 'ENOENT') return undefined\n    throw error\n  }\n  try {\n    return JSON.parse(await handle.readFile('utf8'), reviveJson) as unknown\n  } finally { await handle.close() }\n}\n\n/** Atomically replaces one JSON file after its new bytes have reached disk. */\nexport async function replaceJsonFile(\n  path: string,\n  value: unknown,\n  options: FilesystemJsonWriteOptions = {},\n): Promise<void> {\n  const directory = PATH.dirname(path)\n  await ensureDurableDirectory(directory, options.directoryMode)\n  const tempPath = PATH.join(directory, `.${PATH.basename(path)}.${process.pid}.${suffix()}.tmp`)\n  try {\n    await writeDurableFile(tempPath, `${stringifyJson(value)}\\n`, options.mode)\n    await rename(tempPath, path)\n    await syncDirectory(directory)\n  } catch (error) {\n    await unlinkIfMissing(tempPath)\n    throw error\n  }\n}\n\n/**\n * Publishes immutable JSON with an exclusive hard link. Returns `false` when\n * another process already owns the destination.\n */\nexport async function publishJsonFile(\n  path: string,\n  value: unknown,\n  options: FilesystemJsonWriteOptions = {},\n): Promise<boolean> {\n  const directory = PATH.dirname(path)\n  await ensureDurableDirectory(directory, options.directoryMode)\n  const tempPath = PATH.join(directory, `.${PATH.basename(path)}.${process.pid}.${suffix()}.tmp`)\n  try {\n    await writeDurableFile(tempPath, `${stringifyJson(value)}\\n`, options.mode)\n    await link(tempPath, path)\n    await syncDirectory(directory)\n    return true\n  } catch (error) {\n    if (errorCode(error) === 'EEXIST') return false\n    throw error\n  } finally {\n    await unlinkIfMissing(tempPath)\n  }\n}\n\nfunction suffix(): string {\n  return randomBytes(8).toString('hex')\n}\n\nexport function stringifyJson(value: unknown): string {\n  return JSON.stringify(value, replaceJsonValue)\n}\n\nfunction replaceJsonValue(_key: string, candidate: unknown): unknown {\n  return typeof candidate === 'bigint'\n    ? { $eventKitBigInt: candidate.toString() }\n    : candidate\n}\n\nfunction reviveJson(_key: string, candidate: unknown): unknown {\n  return typeof candidate === 'object'\n    && candidate !== null\n    && Object.keys(candidate).length === 1\n    && '$eventKitBigInt' in candidate\n    && typeof candidate.$eventKitBigInt === 'string'\n    && /^(?:0|[1-9][0-9]*)$/u.test(candidate.$eventKitBigInt)\n    ? BigInt(candidate.$eventKitBigInt)\n    : candidate\n}\n\nasync function unlinkIfMissing(path: string): Promise<void> {\n  try {\n    await unlink(path)\n  } catch (error) {\n    if (errorCode(error) !== 'ENOENT') throw error\n  }\n}\n\nfunction errorCode(error: unknown): unknown {\n  return typeof error === 'object' && error !== null && 'code' in error\n    ? (error as { code?: unknown }).code\n    : undefined\n}\n"],
-  "mappings": ";;;;;;;;;;;;AAAA,SAAS,UAAAA,eAAc;;;ACAvB,SAAS,cAAc,kBAAkB;AAGlC,SAAS,oBAAoB,SAAiC,WAAoB;AACvF,QAAM,aAAa,IAAI,gBAAgB;AACvC,QAAM,QAAQ,MAAM,WAAW,MAAM;AACrC,QAAM,QAAQ,cAAc,SAAY,SAAY,WAAW,OAAO,SAAS;AAC/E,SAAO,MAAM;AACb,aAAW,UAAU,SAAS;AAC5B,QAAI,OAAO,QAAS,YAAW,MAAM;AAAA,QAChC,QAAO,iBAAiB,SAAS,OAAO,EAAE,MAAM,KAAK,CAAC;AAAA,EAC7D;AACA,SAAO;AAAA,IACL,QAAQ,WAAW;AAAA,IACnB,UAAU;AACR,UAAI,UAAU,OAAW,cAAa,KAAK;AAC3C,iBAAW,UAAU,QAAS,QAAO,oBAAoB,SAAS,KAAK;AAAA,IACzE;AAAA,EACF;AACF;;;ADPO,SAAS,4BAA4B,UAAwC,CAAC,GAAG;AACtF,QAAM,QAAQ,IAAI,gBAAgB;AAClC,QAAM,UAAU,QAAQ,oBAAoB;AAC5C,QAAM,UAAU,QAAQ,oBAAoB,KAAK,OAAO;AACxD,QAAM,cAAc,QAAQ,kBAAkB;AAC9C,MAAI,CAAC,OAAO,cAAc,OAAO,KAAK,UAAU,OAAO,UAAU,OAC5D,CAAC,OAAO,cAAc,OAAO,KAAK,UAAU,KAAK,UAAU,KAAK,OAAO,QACvE,CAAC,OAAO,cAAc,WAAW,KAAK,cAAc,KAAK,cAAc;AAC1E,UAAM,IAAI,MAAM,gCAAgC;AAClD,QAAM,SAAS,oBAAI,IAAuB;AAC1C,QAAM,cAAc,WAAW,MAAM,KAAK,UAAU;AACpD,QAAM,UAAmC,CAAC,OAAO,SAAS;AACxD,QAAI,OAAO,QAAQ;AACjB,aAAO,QAAQ,OAAO,IAAI,MAAM,2CAA2C,CAAC;AAC9E,UAAM,aAAa,YAAY;AAC7B,YAAM,UAAU;AAAA,QAAC,MAAM;AAAA,QACrB,GAAI,QAAQ,WAAW,SAAY,CAAC,IAAI,CAAC,QAAQ,MAAM;AAAA,QACvD,GAAI,MAAM,UAAU,OAAO,CAAC,IAAI,CAAC,KAAK,MAAM;AAAA,QAC5C,GAAI,iBAAiB,UAAU,CAAC,MAAM,MAAM,IAAI,CAAC;AAAA,MAAE;AACrD,YAAM,QAAQ,oBAAoB,SAAS,OAAO;AAClD,UAAI;AACF,cAAM,OAAO,eAAe;AAC5B,cAAM,WAAW,MAAM,YAAY,OAAO;AAAA,UACxC,GAAG;AAAA,UAAM,UAAU;AAAA,UAAS,QAAQ,MAAM;AAAA,QAC5C,CAAC;AACD,YAAI,SAAS,SAAS;AACpB,iBAAO;AACT,cAAM,SAAS,SAAS,KAAK,UAAU;AACvC,cAAM,SAAuB,CAAC;AAC9B,YAAI,OAAO;AACX,YAAI;AACF,qBAAS;AACP,kBAAM,QAAQ,MAAM,OAAO,KAAK;AAChC,gBAAI,MAAM;AACR;AACF,kBAAM,QAAiB,MAAM;AAC7B,gBAAI,EAAE,iBAAiB,YAAa,OAAM,IAAI,MAAM,+CAA+C;AACnG,oBAAQ,MAAM;AACd,gBAAI,OAAO,SAAS;AAClB,oBAAM,OAAO,OAAO;AACpB,oBAAM,IAAI,MAAM,uCAAuC;AAAA,YACzD;AACA,mBAAO,KAAK,KAAK;AAAA,UACnB;AAAA,QACF,UAAE;AACA,iBAAO,YAAY;AAAA,QACrB;AACA,cAAM,UAAU,IAAI,QAAQ,SAAS,OAAO;AAC5C,gBAAQ,OAAO,kBAAkB;AACjC,gBAAQ,OAAO,mBAAmB;AAClC,gBAAQ,IAAI,kBAAkB,OAAO,IAAI,CAAC;AAC1C,eAAO,IAAI,SAASC,QAAO,OAAO,MAAM,GAAG;AAAA,UACzC,QAAQ,SAAS;AAAA,UAAQ,YAAY,SAAS;AAAA,UAAY;AAAA,QAC5D,CAAC;AAAA,MACH,UAAE;AACA,cAAM,QAAQ;AAAA,MAChB;AAAA,IACF,GAAG;AACH,WAAO,IAAI,SAAS;AACpB,SAAK,UAAU,KAAK,MAAM,OAAO,OAAO,SAAS,GAAG,MAAM,OAAO,OAAO,SAAS,CAAC;AAClF,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL;AAAA,IACA,MAAM,QAAQ;AACZ,YAAM,MAAM;AACZ,YAAM,QAAQ,WAAW,MAAM;AAAA,IACjC;AAAA,IACA,IAAI,iBAAiB;AACnB,aAAO,OAAO;AAAA,IAChB;AAAA,EACF;AACF;AAGO,SAAS,sCAAsC,UAAwC,CAAC,GAAG;AAChG,QAAM,UAAU,4BAA4B,OAAO;AACnD,QAAM,SAA0B,OAAOC,UAAS,iBAAiB;AAC/D,UAAM,aAAa,IAAI,gBAAgB;AACvC,kBAAc,YAAY,MAAM,WAAW,MAAM,CAAC;AAClD,kBAAc,YAAY;AAC1B,UAAM,WAAW,MAAM,QAAQ,QAAQA,SAAQ,KAAK;AAAA,MAClD,MAAMA,SAAQ,SAAS,OAAO,SAAYD,QAAO,KAAKC,SAAQ,IAAI;AAAA,MAClE,SAASA,SAAQ;AAAA,MACjB,QAAQA,SAAQ;AAAA,MAChB,QAAQ,WAAW;AAAA,IACrB,CAAC;AACD,WAAO;AAAA,MACL,MAAM,IAAI,WAAW,MAAM,SAAS,YAAY,CAAC;AAAA,MACjD,SAAS,OAAO,YAAY,SAAS,OAAO;AAAA,MAC5C,YAAY,SAAS;AAAA,MACrB,eAAe,SAAS;AAAA,IAC1B;AAAA,EACF;AACA,SAAO;AAAA,IACL;AAAA,IACA,MAAM,QAAQ;AAAE,YAAM,QAAQ,MAAM;AAAA,IAAE;AAAA,IACtC,IAAI,iBAAiB;AAAE,aAAO,QAAQ;AAAA,IAAe;AAAA,EACvD;AACF;;;AE/GA,SAAS,yBAAyB;AAElC,SAAS,yBAAyB,4BAA4B;AAI9D,SAAS,oCAAoC;AAkBtC,SAAS,kCAAkC,SAYpB;AAC5B,QAAM,QAAQ,QAAQ,eAAe,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AACvE,QAAM,QAAQ,IAAI,gBAAgB;AAClC,MAAI;AACJ,MAAI;AACJ,MAAI,SAA0C;AAAA,IAC5C,sBAAsB,QAAQ;AAAA,IAC9B,WAAW;AAAA,IACX,cAAc,CAAC;AAAA,IACf,sBAAsB;AAAA,IACtB,uBAAuB;AAAA,IACvB,mBAAmB;AAAA,EACrB;AACA,WAAS,cAAc,OAA4C;AACjE,YAAQ,QAAQ,gBAAgB,UAAa,MAAM,QAAQ,eAAe,QAAQ,iBAC5E,QAAQ,iBAAiB,UAAa,MAAM,QAAQ,KAAK,iBAAiB,QAAQ,kBAClF,QAAQ,iBAAiB,UAAa,MAAM,aAAa,KAAK,iBAAiB,QAAQ,kBACvF,QAAQ,iBAAiB,UAAa,kBAAkB,MAAM,QAAQ,KAAK,YAAY,QAAQ,UAAU;AAAA,EACjH;AACA,iBAAe,WAAW,QAAqB;AAC7C,WAAO,eAAe;AAGtB,iBAAa,YAAY;AACvB,UAAI;AACF,eAAO,MAAM,QAAQ,OAAO,cAAc;AAAA,MAC5C,UAAE;AACA,kBAAU;AAAA,MACZ;AAAA,IACF,GAAG;AACH,UAAM,OAAO,MAAM;AACnB,WAAO,eAAe;AACtB,QAAI,CAAC,KAAK,MAAM,KAAK,mBAAmB,KAAK;AAC3C,YAAM,IAAI,MAAM,qDAAqD;AACvE,aAAS;AAAA,MACP,GAAG;AAAA,MACH,eAAe,KAAK;AAAA,MACpB,gBAAgB,KAAK;AAAA,MACrB,sBAAsB,KAAK,cAAc,OAAO,UAAQ,KAAK,UAAU,aAAa,KAAK,OAAO,KAAK,aAAa,CAAC,EAAE;AAAA,MACrH,uBAAuB,KAAK,WAAW;AAAA,IACzC;AACA,WAAO;AAAA,EACT;AACA,iBAAe,gBAAgB,YAAoB,cAAsB,QAAqB;AAC5F,QAAI;AACF,UAAI,UAAU,QAAQ,MAAM,IAAsB,uBAAuB,YAAY;AACrF,UAAI,YAAY,UAAa,QAAQ,aAAa,UAAa,MAAM,KAAK,QAAQ;AAChF,kBAAU;AACZ,UAAI,YAAY,QAAW;AACzB,cAAM,SAAS,MAAM,QAAQ,OAAO,eAAe;AAAA,UACjD,UAAU,MAAM;AAAA,UAAG,iBAAiB;AAAA,UAAK;AAAA,UAAwB;AAAA,QACnE,CAAC;AACD,kBAAU;AAAA,UACR,eAAe,OAAO;AAAA,UAAe;AAAA,UAAwB;AAAA,UAAc,WAAW,OAAO,UAAU;AAAA,QACzG;AACA,gBAAQ,MAAM,IAAI,uBAAuB,cAAc,OAAO;AAAA,MAChE;AACA,UAAI,QAAQ,aAAa,QAAW;AAClC,cAAM,QAAQ,MAAM,QAAQ,OAAO,eAAe,EAAE,eAAe,QAAQ,eAAe,YAAY,MAAM,CAAC;AAC7G,YAAI,MAAM,SAAS;AACjB;AACF,eAAO,eAAe;AACtB,cAAMC,YAAW,MAAM,QAAQ,UAAU,KAAK,MAAM,OAAO,UAAU,MAAM,WAAW,MAAM;AAC5F,YAAIA,UAAS,WAAW;AACtB,gBAAM,IAAI,MAAM,iCAAiC;AACnD,kBAAU,EAAE,GAAG,SAAS,UAAU,6BAA6B,MAAMA,UAAS,IAAI,EAAE;AACpF,gBAAQ,MAAM,IAAI,uBAAuB,cAAc,OAAO;AAAA,MAChE;AACA,aAAO,eAAe;AACtB,YAAM,WAAW,QAAQ;AACzB,UAAI,aAAa;AACf,cAAM,IAAI,MAAM,+BAA+B;AACjD,YAAM,QAAQ,OAAO,2BAA2B;AAAA,QAC9C,GAAG;AAAA,QAAS;AAAA,QAAU,YAAY;AAAA,MACpC,CAAC;AAAA,IACH,QAAQ;AACN,UAAI,OAAO;AACT;AACF,YAAM,WAAW,QAAQ,MAAM,IAAY,sBAAsB,YAAY,KAAK;AAClF,cAAQ,MAAM,IAAI,sBAAsB,cAAc,WAAW,CAAC;AAClE,YAAM,UAAU,QAAQ,MAAM,IAAsB,uBAAuB,YAAY;AACvF,UAAI,YAAY,UAAa,MAAM,KAAK,QAAQ;AAC9C,gBAAQ,MAAM,OAAO,uBAAuB,YAAY;AAAA,IAC5D;AAAA,EACF;AAEA,iBAAe,OAAO,QAAqB;AACzC,WAAO,eAAe;AACtB,UAAM,MAAM,MAAM;AAClB,QAAI,OAAO,QAAQ,MAAM,IAAY,kBAAkB,WAAW,KAAK;AACrE;AACF,YAAQ,MAAM,IAAI,kBAAkB,aAAa,MAAM,EAAE;AACzD,UAAM,QAAQ,MAAM,QAAQ,OAAO,qBAAqB;AACxD,QAAI,CAAC,MAAM;AACT,YAAM,IAAI,MAAM,iDAAiD;AACnE,UAAM,SAAS,QAAQ,MAAM,IAAY,kBAAkB,QAAQ,KAAK;AACxE,UAAM,aAAa,MAAM,WAAW,OAAO,eAAa,cAAc,UAAU,KAAK,CAAC;AACtF,QAAI,YAAY;AAGhB,aAAS,QAAQ,GAAG,QAAQ,KAAK,IAAI,WAAW,QAAQ,GAAG,KAAK,YAAY,GAAG,SAAS,GAAG;AACzF,YAAM,YAAY,YAAY,SAAS,SAAS,WAAW,MAAM;AACjE,UAAI,cAAc;AAChB;AACF,cAAQ,MAAM,IAAI,kBAAkB,WAAW,SAAS,QAAQ,KAAK,WAAW,MAAM;AACtF,YAAM,OAAO,QAAQ,MAAM,IAAY,6BAA6B,UAAU,UAAU,KAAK;AAC7F,UAAI,MAAM;AACR;AACF,cAAQ,MAAM,IAAI,6BAA6B,UAAU,YAAY,MAAM,EAAE;AAC7E,mBAAa;AACb,aAAO,eAAe;AACtB,YAAM,gBAAgB,UAAU,YAAY,UAAU,MAAM,aAAa,YAAY,MAAM;AAAA,IAC7F;AAAA,EACF;AACA,iBAAe,eAAe,MAA6F,QAAmC;AAC5J,UAAM,aAAa,OAAO,QAAQ,UAAQ,KAAK,OAAO,OAAO,WAAS,MAAM,aAAa,eAAe,KAAK,oBAAoB,EAAE,IAAI,YAAU;AAAA,MAC/I,eAAe,MAAM,aAAa,KAAK;AAAA,MAAe,OAAO,MAAM,aAAa,KAAK;AAAA,MAAO,WAAW,QAAQ;AAAA,IACjH,EAAE,CAAC;AACH,QAAI,KAAK,4BAA4B,QAAQ,gBAAgB,UAAa,KAAK,QAAQ,eAAe,QAAQ,iBACxG,QAAQ,iBAAiB,UAAa,KAAK,QAAQ,KAAK,iBAAiB,QAAQ,eAAe;AACpG,iBAAW,KAAK;AAAA,QACd,eAAe,KAAK,IAAI;AAAA,QAAY,OAAO,KAAK,IAAI,KAAK;AAAA,QAAO,WAAW,QAAQ;AAAA,MACrF,CAAC;AAAA,IACH;AACA,UAAM,aAAa,MAAM,QAAQ,IAAI,WAAW,IAAI,OAAM,QAAO,MAAM,QAAQ,KAAK,cAAc,GAAG,CAAC,CAAC;AACvG,aAAS;AAAA,MACP,GAAG;AAAA,MACH,WAAW,WAAW,SAAS,KAAK,WAAW,MAAM,SAAO,QAAQ,MAAS;AAAA,MAC7E,cAAc,CAAC,GAAG,IAAI,IAAI,WAAW,IAAI,SAAO,IAAI,KAAK,CAAC,CAAC;AAAA,IAC7D;AAAA,EACF;AACA,SAAO;AAAA,IACL,MAAM,SAAS,QAAQ;AACrB,YAAM,OAAO,MAAM,WAAW,MAAM;AACpC,YAAM,SAAS,KAAK,cAAc,OAAO,UAAQ,KAAK,UAAU,YAAY,KAAK,OAAO,KAAK,WAAS,MAAM,aAAa,eAAe,KAAK,wBAAwB,cAAc,KAAK,CAAC,CAAC;AAC1L,YAAM,eAAe,MAAM,MAAM;AACjC,UAAI,OAAO,UAAU,QAAQ,oBAAoB;AAC/C,cAAM,IAAI,MAAM,8CAA8C;AAChE,YAAM,gBAAgD,CAAC;AACvD,iBAAW,aAAa,QAAQ;AAC9B,YAAI,UAAU,UAAU,YAAY,UAAU,oBAAoB;AAChE;AACF,YAAI;AACF,gBAAM,QAAQ,UAAU,OAAO,KAAK,UAAQ,KAAK,aAAa,eAAe,UAAU,oBAAoB;AAC3G,cAAI,UAAU,UAAa,CAAC,cAAc,KAAK;AAC7C,kBAAM,IAAI,MAAM,qDAAqD;AACvE,gBAAM,YAAY,MAAM,aAAa;AACrC,cAAI,UAAU,YAAY,QAAQ;AAChC,kBAAM,IAAI,MAAM,2CAA2C;AAC7D,gBAAM,eAAe,MAAM,QAAQ,KAAK,cAAc;AAAA,YACpD,eAAe,UAAU;AAAA,YAAe,OAAO,UAAU;AAAA,YAAO,WAAW,QAAQ;AAAA,UACrF,CAAC;AACD,cAAI,iBAAiB;AACnB,kBAAM,IAAI,MAAM,4CAA4C;AAC9D,gBAAM,YAAY,MAAM,wBAAwB;AAAA,YAC9C;AAAA,YAAc,YAAY,MAAM;AAAA,YAAY,cAAc;AAAA,UAC5D,CAAC;AACD,kBAAQ,UAAU,cAAc,UAAU,QAAQ;AAClD,wBAAc,KAAK;AAAA,YACjB,kBAAkB,MAAM,aAAa;AAAA,YACrC,aAAa,MAAM,QAAQ;AAAA,YAC3B,cAAc,UAAU,OAAO;AAAA,YAC/B,GAAI,UAAU,OAAO,eAAe,SAAY,CAAC,IAAI,EAAE,YAAY,UAAU,OAAO,WAAW;AAAA,YAC/F,sBAAsB,QAAQ;AAAA,YAC9B,YAAY,MAAM;AAAA,YAClB,UAAU,UAAU;AAAA,YACpB,UAAU,UAAU;AAAA,YACpB,cAAc,UAAU;AAAA,YACxB,GAAI,UAAU,YAAY,OAAO,CAAC,IAAI,EAAE,SAAS,UAAU,QAAQ;AAAA,YACnE,QAAQ,UAAU,OAAO;AAAA,YACzB,cAAc,UAAU,OAAO;AAAA,YAC/B,qBAAqB,UAAU,OAAO;AAAA,YACtC,YAAY,MAAM,qBAAqB,UAAU,MAAM;AAAA,UACzD,CAAC;AAAA,QACH,QAAQ;AAIN,mBAAS,EAAE,GAAG,QAAQ,uBAAuB,OAAO,wBAAwB,EAAE;AAAA,QAChF;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAAA,IACA,MAAM,SAAS,cAAc,QAAQ;AACnC,YAAM,OAAO,MAAM,WAAW,MAAM;AACpC,aAAO,KAAK,cAAc,KAAK,UAAQ,KAAK,UAAU,YAAY,KAAK,yBAAyB,aAAa,oBACxG,KAAK,OAAO,KAAK,WAAS,MAAM,aAAa,eAAe,aAAa,oBAAoB,MAAM,eAAe,aAAa,cAAc,cAAc,KAAK,CAAC,CAAC;AAAA,IACzK;AAAA,IACA,MAAM,cAAc,QAAQ;AAG1B,UAAI,cAAc,QAAW;AAC3B,cAAM,QAAQ,oBAAoB,CAAC,MAAM,QAAQ,MAAM,CAAC;AACxD,qBAAa,YAAY;AACvB,cAAI;AACF,kBAAM,OAAO,MAAM,MAAM;AAAA,UAC3B,UAAE;AACA,kBAAM,QAAQ;AACd,wBAAY;AAAA,UACd;AAAA,QACF,GAAG;AAAA,MACL;AACA,YAAM;AAAA,IACR;AAAA,IACA,MAAM,QAAQ;AACZ,YAAM,QAAQ,WAAW,CAAC,WAAW,OAAO,EAAE,OAAO,UAAQ,SAAS,MAAS,CAAC;AAAA,IAClF;AAAA,IACA,QAAQ,OAAO,EAAE,GAAG,QAAQ,mBAAmB,QAAQ,MAAM,QAAgB,oBAAoB,EAAE,OAAO,CAAC,KAAK,SAAS,MAAM,KAAK,OAAO,CAAC,EAAE;AAAA,EAChJ;AACF;;;ACrPA,SAAS,UAAAC,eAAc;AACvB,SAAS,cAAc;AACvB,SAAS,eAAe;AACxB,SAAS,WAAW,YAAY;AAEhC,SAAS,SAAS;;;ACLlB,SAAS,kBAAkB;AAE3B,SAAS,qBAAqB;AAE9B,SAAS,8BAA8B,qBAAqB;AAC5D,SAAS,sBAAsB;AAE/B,SAAS,wBAAwB;AACjC,SAAS,cAAc,uBAAuB;AAavC,SAAS,mBAAmB,QAA4B;AAC7D,SAAO,WAAW,QAAQ,EAAE,OAAO,cAAc,cAAc,MAAM,MAAM,CAAC,CAAC,EAAE,OAAO,KAAK;AAC7F;AACA,eAAsB,0BAA6B,WAAuB,QAAqB,YAAY,KAAoB;AAC7H,QAAM,QAAQ,oBAAoB,CAAC,MAAM,GAAG,SAAS;AACrD,QAAM,WAAW,MAAM;AACvB,MAAI;AACJ,QAAM,UAAU,IAAI,QAAe,CAAC,UAAU,WAAW;AACvD,kBAAc,MAAM,OAAO,IAAI,MAAM,0CAA0C,CAAC;AAChF,aAAS,iBAAiB,SAAS,aAAa,EAAE,MAAM,KAAK,CAAC;AAAA,EAChE,CAAC;AACD,MAAI;AACF,aAAS,eAAe;AACxB,WAAO,MAAM,QAAQ,KAAK,CAAC,WAAW,OAAO,CAAC;AAAA,EAChD,UAAE;AACA,QAAI,gBAAgB;AAClB,eAAS,oBAAoB,SAAS,WAAW;AACnD,UAAM,QAAQ;AAAA,EAChB;AACF;AAEO,SAAS,yBAAyB,SAKf;AACxB,QAAM,SAAS,cAAc,MAAM,QAAQ,MAAM;AACjD,MAAI,OAAO,SAAS;AAClB,UAAM,IAAI,MAAM,kCAAkC;AACpD,SAAO;AAAA,IACL;AAAA,IACA,MAAM,KAAK,QAAQ;AACjB,YAAM,UAAU,OAAO,MAAM,0BAA0B,QAAQ,QAAQ,QAAQ,OAAO,QAAQ,CAAC,GAAG,MAAM,CAAC;AACzG,UAAI,YAAY,OAAO;AACrB,cAAM,IAAI,MAAM,mCAAmC;AACrD,YAAM,WAAW,OAAO,MAAM,0BAA0B,QAAQ,QAAQ,QAAQ,OAAO,aAAa,WAAW,CAAC,GAAG,MAAM,CAAC;AAC1H,UAAI,CAAC,OAAO,cAAc,QAAQ,KAAK,WAAW;AAChD,cAAM,IAAI,MAAM,+BAA+B;AACjD,YAAM,QAAQ,MAAM,0BAA0B,QAAQ,QAAQ,QAAQ,OAAO,MAAM,cAAc,iBAAiB,UAAU,IAAI,CAAC,CAAC,GAAG,MAAM;AAC3I,UAAI,QAAQ,CAAC,EAAE,UAAU,YAAY,CAAC,kBAAkB,KAAK,MAAM,CAAC,EAAE,KAAK,GAAG;AAC5E,cAAM,IAAI,MAAM,yDAAyD;AAAA,MAC3E;AACA,UAAI,OAAO,MAAM,CAAC,EAAE,KAAK,MAAM,OAAO,WAAW,MAAM,eAAe,KAAK,MAAM,CAAC,CAAC,MAAM,MAAM,CAAC,EAAE,OAAO;AACvG,cAAM,IAAI,MAAM,wDAAwD;AAAA,MAC1E;AACA,aAAO,EAAE,UAAU,MAAM,MAAM,CAAC,EAAE,MAAM;AAAA,IAC1C;AAAA,EACF;AACF;AACO,SAAS,uCAAuC,SAM7B;AACxB,QAAM,SAAS,cAAc,MAAM,QAAQ,MAAM;AACjD,MAAI,OAAO,SAAS;AAClB,UAAM,IAAI,MAAM,uCAAuC;AACzD,QAAM,EAAE,SAAS,YAAY,IAAI;AACjC,QAAM,MAAM,IAAI,IAAI,QAAQ,MAAM;AAClC,MAAI,IAAI,aAAa,YAAY,IAAI,aAAa,MAAM,IAAI,aAAa,MAAM,IAAI,SAAS,IAAI;AAC9F,UAAM,IAAI,MAAM,yEAAyE;AAAA,EAC3F;AACA,QAAM,aAAa,IAAI,aAAa,IAAI,IAAI;AAC5C,aAAW,UAAU,QAAQ,oBAAoB;AACjD,QAAM,YAAY,sCAAsC;AAAA,IACtD,kBAAkB,QAAQ;AAAA,IAAkB,kBAAkB,IAAI,OAAO;AAAA,IAAM,gBAAgB;AAAA,EACjG,CAAC;AACD,aAAW,aAAa,UAAU;AAClC,aAAW,kBAAkB,EAAE,aAAa,EAAE,CAAC;AAC/C,QAAM,WAAW,IAAI,gBAAgB,YAAY,QAAW,EAAE,eAAe,GAAG,cAAc,GAAG,CAAC;AAClG,MAAI;AACJ,MAAI,SAAS;AACb,MAAI;AACJ,QAAM,QAAQ,MAAM,aAAa,YAAY;AAC3C,aAAS;AACT,aAAS,QAAQ;AACjB,UAAM,UAAU,MAAM;AAAA,EACxB,GAAG;AACH,QAAM,UAAU,MAAM;AACpB,SAAK,MAAM;AAAA,EACb;AACA,iBAAe,OAAO;AACpB,UAAM,WAAW,CAAC,SAAS,WAAW,GAAG,SAAS,SAAS,CAAC,GAAG,SAAS,SAAS,WAAW,CAAC;AAG7F,QAAI;AACF,YAAM,CAAC,SAAS,SAAS,KAAK,IAAI,MAAM,QAAQ,IAAI,QAAQ;AAC5D,UAAI,QAAQ,QAAQ,SAAS,MAAM,WAAW,SAAS,MAAM,MAAM,CAAC,EAAE,YAAY,MAAM,aAAa;AACnG,cAAM,IAAI,MAAM,yCAAyC;AAAA,MAC3D;AACA,UAAI,OAAO,SAAS,QAAQ,UAAU,QAAQ,CAAC,uBAAuB,KAAK,MAAM,IAAI,KAChF,CAAC,OAAO,cAAc,MAAM,MAAM,KAAK,MAAM,SAAS,EAAG,OAAM,IAAI,MAAM,wCAAwC;AACtH,aAAO,EAAE,UAAU,MAAM,QAAQ,MAAM,MAAM,KAAK,MAAM,CAAC,EAAE,YAAY,EAAE;AAAA,IAC3E,SAAS,OAAO;AACd,YAAM,QAAQ,WAAW,QAAQ;AACjC,YAAM;AAAA,IACR;AAAA,EACF;AACA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,MAAM,KAAK,QAAQ;AACjB,aAAO,eAAe;AACtB,UAAI,OAAQ,OAAM,IAAI,MAAM,2BAA2B;AACvD,aAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;AACxD,mBAAa,YAAY;AACvB,YAAI;AACF,iBAAO,MAAM,KAAK;AAAA,QACpB,UAAE;AACA,oBAAU;AAAA,QACZ;AAAA,MACF,GAAG;AACH,UAAI;AACF,eAAO,MAAM,0BAA0B,SAAS,QAAQ,QAAQ,oBAAoB,GAAM;AAAA,MAC5F,UAAE;AACA,eAAO,oBAAoB,SAAS,OAAO;AAAA,MAC7C;AAAA,IACF;AAAA,EACF;AACF;AAEO,SAAS,iCAAiC,SAKvB;AACxB,QAAM,SAAS,cAAc,MAAM,QAAQ,MAAM;AACjD,MAAI,OAAO,SAAS;AAClB,UAAM,IAAI,MAAM,gCAAgC;AAClD,QAAM,aAAa,QAAQ,eAAe,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AAC5E,SAAO;AAAA,IACL;AAAA,IACA,MAAM,KAAK,QAAQ;AACjB,aAAO,eAAe;AACtB,YAAM,MAAM,WAAW;AACvB,UAAI,CAAC,OAAO,cAAc,GAAG,KAAK,MAAM;AACtC,cAAM,IAAI,MAAM,+BAA+B;AACjD,aAAO,EAAE,UAAU,6BAA6B,QAAQ,GAAG,KAAK,GAAG;AAAA,IACrE;AAAA,EACF;AACF;;;AD5JA,IAAM,aAAa,EAAE,aAAa;AAAA,EAChC,kBAAkB,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE;AAAA,EAChD,iBAAiB,EAAE,MAAM,EAAE,aAAa;AAAA,IACtC,UAAU,EAAE,IAAI;AAAA,IAChB,SAAS,EAAE,aAAa,EAAE,8BAA8B,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI,EAAE,MAAM,qBAAqB,EAAE,CAAC;AAAA,EACpH,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC;AAAA,EACtB,kBAAkB,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,OAAS,EAAE,QAAQ,KAAM;AAAA,EACvE,kBAAkB,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,IAAI,GAAM,EAAE,QAAQ,GAAM;AACxE,CAAC;AAkBD,IAAM,0BAA0B;AAAA,EAC9B,CAAC,WAAW,CAAC;AAAA,EACb,CAAC,YAAY,CAAC;AAAA,EACd,CAAC,cAAc,EAAE;AAAA,EACjB,CAAC,aAAa,CAAC;AAAA,EACf,CAAC,eAAe,EAAE;AAAA,EAClB,CAAC,cAAc,EAAE;AAAA,EACjB,CAAC,aAAa,EAAE;AAAA,EAChB,CAAC,aAAa,EAAE;AAAA,EAChB,CAAC,eAAe,EAAE;AAAA,EAClB,CAAC,eAAe,EAAE;AAAA,EAClB,CAAC,cAAc,EAAE;AAAA,EACjB,CAAC,gBAAgB,EAAE;AAAA,EACnB,CAAC,eAAe,EAAE;AAAA,EAClB,CAAC,aAAa,CAAC;AAAA,EACf,CAAC,aAAa,CAAC;AACjB;AACA,IAAM,0BAA0B;AAAA,EAC9B,CAAC,UAAU,EAAE;AAAA,EAAG,CAAC,cAAc,EAAE;AAAA,EAAG,CAAC,UAAU,EAAE;AAAA,EAAG,CAAC,UAAU,EAAE;AACnE;AAQA,IAAI;AAEJ,SAAS,6BAAqD;AAC5D,MAAI,2BAA2B,OAAW,QAAO;AACjD,QAAM,gBAAgB,IAAI,UAAU;AACpC,aAAW,CAAC,SAAS,MAAM,KAAK,yBAAyB;AACvD,kBAAc,UAAU,SAAS,QAAQ,MAAM;AAAA,EACjD;AACA,QAAM,aAAa,IAAI,UAAU;AACjC,aAAW,UAAU,UAAU,GAAG,MAAM;AACxC,QAAM,gBAAgB,IAAI,UAAU;AACpC,aAAW,CAAC,SAAS,MAAM,KAAK,yBAAyB;AACvD,kBAAc,UAAU,SAAS,QAAQ,MAAM;AAAA,EACjD;AACA,2BAAyB;AAAA,IACvB;AAAA,IAAY;AAAA,IAAe;AAAA,EAC7B;AACA,SAAO;AACT;AAGO,SAAS,yBAAyB,SAA0B;AACjE,QAAM,SAAS,2BAA2B;AAC1C,SAAO,KAAK,OAAO,MAAM,IACrB,CAAC,OAAO,cAAc,MAAM,SAAS,MAAM,IAC3C,KAAK,OAAO,MAAM,KAAK,OAAO,WAAW,MAAM,SAAS,MAAM,KAAK,CAAC,OAAO,cAAc,MAAM,SAAS,MAAM;AACpH;AACO,SAAS,8BAA8B,OAAgE;AAC5G,QAAM,SAAS,WAAW,UAAU,KAAK;AACzC,MAAI,CAAC,OAAO,QAAS,OAAM,IAAI,MAAM,iDAAiD;AACtF,QAAM,UAAU,OAAO;AACvB,QAAM,UAAU,IAAI,IAAI,QAAQ,iBAAiB,IAAI,CAAC,aAAa;AACjE,UAAM,MAAM,IAAI,IAAI,QAAQ;AAC5B,QAAI,IAAI,SAAS,YAAY,IAAI,aAAa,YAAa,IAAI,SAAS,MAAM,IAAI,SAAS,SACtF,IAAI,aAAa,MAAM,IAAI,aAAa,MAAM,IAAI,SAAS;AAC9D,YAAM,IAAI,MAAM,wEAAwE;AAC1F,UAAM,UAAU,IAAI,SAAS,WAAW,aAAa,EAAE;AACvD,QAAI,KAAK,OAAO,MAAM,KAAK,CAAC,yBAAyB,OAAO;AAC1D,YAAM,IAAI,MAAM,qCAAqC;AACvD,QAAI,IAAI,aAAa,eAAe,IAAI,SAAS,SAAS,YAAY,KAAK,IAAI,SAAS,SAAS,QAAQ;AACvG,YAAM,IAAI,MAAM,qCAAqC;AACvD,WAAO;AAAA,EACT,CAAC,CAAC;AACF,QAAM,gBAAgB,CAAC,aAAqB;AAC1C,QAAI,CAAC,QAAQ,IAAI,QAAQ;AACvB,YAAM,IAAI,MAAM,iDAAiD;AAAA,EACrE;AACA,QAAM,kBAAkB,oBAAI,IAA8C;AAC1E,aAAW,SAAS,QAAQ,iBAAiB;AAC3C,kBAAc,MAAM,QAAQ;AAC5B,QAAI,gBAAgB,IAAI,MAAM,QAAQ,EAAG,OAAM,IAAI,MAAM,mDAAmD;AAC5G,oBAAgB,IAAI,MAAM,UAAU,MAAM,OAAO;AAAA,EACnD;AACA,SAAO;AAAA,IACL;AAAA,IACA,MAAM,KAAK,UAAU,MAAM,QAAQ,KAAK;AACtC,oBAAc,QAAQ;AACtB,aAAO,eAAe;AACtB,YAAM,MAAM,IAAI,IAAI,QAAQ;AAC5B,YAAM,QAAQ,oBAAoB,CAAC,MAAM,GAAG,QAAQ,gBAAgB;AACpE,YAAM,WAAW,MAAM;AACvB,UAAI;AACF,cAAM,YAAY,MAAM,0BAA0B,OAAO,IAAI,SAAS,WAAW,aAAa,EAAE,GAAG,EAAE,KAAK,MAAM,UAAU,KAAK,CAAC,GAAG,UAAU,QAAQ,gBAAgB;AACrK,iBAAS,eAAe;AACxB,YAAI,UAAU,WAAW,KAAK,UAAU,KAAK,UAAQ,CAAC,yBAAyB,KAAK,OAAO,CAAC;AAC1F,gBAAM,IAAI,MAAM,oDAAoD;AACtE,cAAM,WAAW,UAAU,CAAC;AAC5B,YAAI,aAAa;AACf,gBAAM,IAAI,MAAM,gCAAgC;AAClD,cAAM,UAAUC,QAAO,KAAK,KAAK,UAAU,IAAI,CAAC;AAChD,YAAI,QAAQ,aAAa;AACvB,gBAAM,IAAI,MAAM,qCAAqC;AACvD,eAAO,MAAM,IAAI,QAAgC,CAAC,SAAS,WAAW;AACpE,gBAAM,OAAO,QAAQ,KAAK;AAAA,YACxB,OAAO;AAAA,YACP,SAAS;AAAA,cACP,GAAG,gBAAgB,IAAI,QAAQ;AAAA,cAC/B,kBAAkB,QAAQ;AAAA,cAC1B,gBAAgB;AAAA,cAChB,GAAI,QAAQ,SAAY,CAAC,IAAI,EAAE,eAAe,UAAU,GAAG,GAAG;AAAA,YAChE;AAAA,YACA,OAAO,WAAW,eAAe,UAAU;AAGzC,kBAAI,cAAc;AAChB,yBAAS,MAAM,CAAC,EAAE,SAAS,SAAS,SAAS,QAAQ,SAAS,OAAO,CAAC,CAAC;AAAA;AAEvE,yBAAS,MAAM,SAAS,SAAS,SAAS,MAAM;AAAA,YACpD;AAAA,YACA,QAAQ;AAAA,YACR,oBAAoB;AAAA,YACpB,QAAQ;AAAA,UACV,GAAG,CAAC,aAAa;AACf,kBAAM,SAAS,SAAS,cAAc;AACtC,gBAAI,UAAU,OAAO,SAAS,KAAK;AACjC,uBAAS,QAAQ;AACjB,qBAAO,IAAI,MAAM,yCAAyC,CAAC;AAC3D;AAAA,YACF;AACA,gBAAI,OAAO;AACX,kBAAM,SAAmB,CAAC;AAC1B,qBAAS,GAAG,QAAQ,CAAC,UAAkB;AACrC,sBAAQ,MAAM;AACd,kBAAI,OAAO,QAAQ,kBAAkB;AACnC,yBAAS,QAAQ;AACjB,uBAAO,IAAI,MAAM,uCAAuC,CAAC;AAAA,cAC3D;AACE,uBAAO,KAAK,KAAK;AAAA,YACrB,CAAC;AACD,qBAAS,GAAG,SAAS,MAAM,OAAO,IAAI,MAAM,iCAAiC,CAAC,CAAC;AAC/E,qBAAS,GAAG,OAAO,MAAM;AACvB,kBAAI;AACF,sBAAM,eAAwB,SAAS,IAAI,OAAO,KAAK,MAAMA,QAAO,OAAO,MAAM,EAAE,SAAS,MAAM,CAAC;AACnG,sBAAM,QAAQ,OAAO,SAAS,QAAQ,aAAa,CAAC;AACpD,wBAAQ;AAAA,kBACN;AAAA,kBAAQ,MAAM;AAAA,kBAAc,GAAI,OAAO,SAAS,KAAK,KAAK,QAAQ,IAAI,EAAE,cAAc,KAAK,IAAI,QAAQ,KAAM,IAAS,EAAE,IAAI,CAAC;AAAA,gBAC/H,CAAC;AAAA,cACH,QAAQ;AACN,uBAAO,IAAI,MAAM,sCAAsC,CAAC;AAAA,cAC1D;AAAA,YACF,CAAC;AAAA,UACH,CAAC;AACD,eAAK,GAAG,SAAS,MAAM,OAAO,IAAI,MAAM,gCAAgC,CAAC,CAAC;AAC1E,eAAK,IAAI,OAAO;AAAA,QAClB,CAAC;AAAA,MACH,UAAE;AACA,cAAM,QAAQ;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AACF;;;AEhMA,SAAS,qBAAAC,0BAAyB;AAGlC,SAAS,qBAAqB,qBAAqB;AACnD,SAAS,iBAAiB;AAC1B,SAAS,4CAA4C;AAIrD,SAAS,6BAA6B,2BAA2B;AAEjE,SAAS,KAAAC,UAAS;;;ACXlB,SAAS,mBAAmB;AAC5B,SAAS,qBAAAC,0BAAyB;AAGlC,SAAS,oBAAoB,uBAAuB;AAwB7C,SAAS,oBAAoB,QAAuB,cAAkD;AAC3G,MAAI,CAACC,mBAAkB,OAAO,cAAc,YAAY;AACtD,UAAM,IAAI,MAAM,sDAAsD;AACxE,MAAI,CAAC,OAAO,cAAc,OAAO,MAAM,KAAK,OAAO,SAAS,aAAa,eAAe,KACnF,CAAC,OAAO,WAAW,OAAO,UAAU,OAAO,aAAa,EAAE,KAAK,WAAS,EAAE,OAAO,cAAc,KAAK,KAAK,SAAS,EAAE,KACpH,CAAC,OAAO,UAAU,OAAO,YAAY,OAAO,WAAW,OAAO,eAAe,OAAO,YAAY,OAAO,gBAAgB,OAAO,cAAc,EAC5I,KAAK,WAAS,UAAU,UAAa,EAAE,OAAO,cAAc,KAAK,KAAK,SAAS,EAAE,KAC/E,CAAC,CAAC,UAAU,WAAW,WAAW,EAAE,SAAS,OAAO,KAAK;AAC9D,UAAM,IAAI,MAAM,+CAA+C;AACjE,MAAI,OAAO,YAAY,OAAW;AAClC,QAAM,UAAU,gBAAgB,MAAM,OAAO,OAAO;AACpD,MAAK,aAAa,iBAAiB,aAAa,QAAQ,iBAAiB,OAAO,SAAS,KACpF,QAAQ,iBAAiB,aAAa,gBAAgB,QAAQ,aAAa,QAAQ,eAAe,IAAI,aAAa,uBACnH,QAAQ,yBAAyB,aAAa,wBAAwB,QAAQ,iBAAiB,aAAa,gBAC5G,QAAQ,YAAY,aAAa,WAAW,QAAQ,eAAe,aAAa,cAChF,CAACA,mBAAkB,QAAQ,QAAQ,aAAa,MAAM;AACzD,UAAM,IAAI,MAAM,+CAA+C;AACnE;AACO,SAAS,UAAU,cAA4C,cAAsB,YAAoB,KAAa,SAAS,YAAY,EAAE,EAAE,SAAS,KAAK,GAAG;AACrK,SAAO,gBAAgB,MAAM;AAAA,IAC3B,QAAQ;AAAA,IACR,sBAAsB,aAAa;AAAA,IACnC,cAAc,aAAa;AAAA,IAC3B,cAAc,aAAa;AAAA,IAC3B,YAAY,aAAa;AAAA,IACzB;AAAA,IACA,UAAU;AAAA,IACV,QAAQ,aAAa;AAAA,IACrB;AAAA,IACA;AAAA,IACA,GAAI,aAAa,YAAY,SAAY,CAAC,IAAI,EAAE,SAAS,aAAa,QAAQ;AAAA,EAChF,CAAC;AACH;AAEO,IAAM,wBAAN,cAAoC,MAAM;AAAA,EACtC;AAAA,EACA;AAAA,EACT,YAAY,QAAgB,cAAuB;AACjD,UAAM,4BAA4B;AAClC,SAAK,SAAS;AACd,SAAK,eAAe;AAAA,EACtB;AAAA,EAEA,IAAI,YAAY;AACd,WAAO,KAAK,WAAW,OAAO,KAAK,WAAW,OAAO,KAAK,UAAU;AAAA,EACtE;AACF;AAEO,SAAS,0BAA0B,SAOvC;AACD,QAAM;AAAA,IACJ;AAAA,IAAY;AAAA,IAAO;AAAA,IAAO;AAAA,IAAK;AAAA,IAAQ;AAAA,EACzC,IAAI;AACJ,QAAM,eAAe,OAAO;AAC5B,QAAM,OAAO,MAAM,IAAI,mBAAmB,aAAa,MAAM,CAAC;AAC9D,QAAM,QAAQ,OAAO;AACrB,QAAM,UAAU,cAAc,QAAQ,KAAK,UAAU;AACrD,MAAI,SAAS,UAAa,gBAAgB,SAAS,KAAK,WAAW,aAAa,cAAc;AAC5F,QAAI,UAAU,UAAa,CAAC,QAAS,QAAO,EAAE,GAAG,QAAQ,SAAS,MAAM;AACxE,QAAI,UAAU,OAAW,OAAM,IAAI,0BAA0B,aAAa,kBAAkB;AAAA,MAC1F,GAAG;AAAA,MAAQ,SAAS;AAAA,MAAW,YAAY,OAAO,aAAa,KAAK;AAAA,IACtE,CAAC;AACD;AAAA,EACF;AACA,QAAM,UAAU,WAAW,QAAQ,KAAK,UAAU;AAClD,MAAI,kBAAkB,QAAQ,KAAK,UAAU,OAAO,SAAS,OAAO,GAAG;AACrE,UAAM,UAAU,UAAU,cAAc,KAAK,UAAU,KAAK,UAAU,GAAG;AACzE,UAAM,WAAW;AAAA,MACf,GAAG;AAAA,MACH;AAAA,MACA,UAAU;AAAA,MACV,YAAY;AAAA,MACZ,gBAAgB,KAAK;AAAA,MACrB,aAAa,OAAO,cAAc,MAAM,UAAU,UAAa,CAAC,UAAU,IAAI;AAAA,MAC9E,YAAY,OAAO,aAAa,MAAM,UAAU,IAAI;AAAA,MACpD,eAAe;AAAA,MACf,OAAO;AAAA,IACT;AACA,UAAM,IAAI,0BAA0B,aAAa,kBAAkB,QAAQ;AAC3E,WAAO;AAAA,EACT;AACA,MAAI,QAAS,OAAM,IAAI,0BAA0B,aAAa,kBAAkB;AAAA,IAC9E,GAAG;AAAA,IAAQ,SAAS;AAAA,IAAW,YAAY,OAAO,aAAa,KAAK;AAAA,EACtE,CAAC;AACD,SAAO,UAAU,UAAa,UAAU,SAAY,EAAE,GAAG,QAAQ,SAAS,MAAM;AAClF;AAEA,SAAS,cAAc,QAAuB,KAAa,QAA2C;AACpG,SAAO,OAAO,YAAY,WAAc,MAAM,OAAO,QAAQ,WAAW,OAAO,sBAAsB,OAAO,YAAY,MAAM,OAAO;AACvI;AACA,SAAS,WAAW,QAAuB,KAAa,QAA2C;AACjG,SAAO,OAAO,OAAO,cAAc,OAAO,kBAAkB,MAAM,OAAO;AAC3E;AACA,SAAS,kBAAkB,QAAuB,MAAc,OAAgB,SAAkB,SAA2B;AAC3H,SAAO,SAAS,QAAQ,OAAO,SAAS,cAAc,OAAO,kBAAkB,OAAO,WAAY,YAAY,OAAO,YAAY,UAAa;AAChJ;AACO,SAAS,eAAe,QAAuB,SAAoC,MAAc,OAAgB,KAA4B;AAClJ,QAAM,aAAa,SAAS;AAC5B,QAAM,OAAO,iBAAiB,yBAAyB,MAAM,iBAAiB,SAC1E,MAAM,eACN,KAAK,IAAI,KAAS,MAAQ,KAAK,KAAK,IAAI,OAAO,UAAU,CAAC,CAAE;AAChE,SAAO;AAAA,IACL,GAAG;AAAA,IACH,UAAU,OAAO,WAAW;AAAA,IAC5B,eAAe,aAAa,SAAS,iBAAiB,OAAO,iBAAiB,IAAI,OAAO;AAAA,IACzF,UAAU,aAAa,SAAS,YAAY,OAAO,YAAY,IAAI,OAAO;AAAA,IAC1E,OAAO,CAAC,cAAc,iBAAiB,yBAAyB,CAAC,MAAM,YAAY,YAAY;AAAA,IAC/F,eAAe,MAAM,MAAO,KAAK,IAAI,MAAW,IAAI;AAAA,IACpD,WAAW;AAAA,EACb;AACF;;;AChJA,SAAS,eAAAC,oBAAmB;AAG5B;AAAA,EACE;AAAA,EAAsB,mBAAAC;AAAA,EAAiB;AAAA,OAClC;AAEP,SAAS,kBAAAC,uBAAsB;AAExB,SAAS,8BAA8B,SAI3C;AACD,QAAM,YAAY,qBAAqB,MAAM,QAAQ,SAAS;AAC9D,MAAI,OAAO,QAAQ,QAAQ,OAAO,EAAE,QAAQ,QAAQ,EAAE,EAAE,YAAY,MAAM;AACxE,UAAM,IAAI,MAAM,oCAAoC;AACtD,SAAO;AAAA,IACL,MAAM,KAAK,OAAqB,UAAkB;AAChD,YAAM,QAAQD,iBAAgB,MAAM,KAAK;AACzC,YAAM,YAAY,MAAMC,gBAAe,SAAS,KAAK;AACrD,YAAM,MAAM,QAAQ,aAAa,KAAK,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AAClE,UAAI,CAAC,OAAO,cAAc,GAAG,KAAK,MAAM;AACtC,cAAM,IAAI,MAAM,oCAAoC;AACtD,YAAM,EAAE,OAAO,IAAI,IAAI,MAAM,QAAQ,QAAQ,QAAQ;AAAA,QACnD;AAAA,QACA,QAAQ,EAAE,WAAW,KAAKF,aAAY,EAAE,EAAE,SAAS,KAAK,EAAE;AAAA,QAC1D;AAAA,QACA,QAAQ;AAAA,QACR,KAAK;AAAA,MACP,CAAC;AACD,aAAO;AAAA,QACL;AAAA,QAAO;AAAA,QAAW;AAAA,QAAK;AAAA,MACzB;AAAA,IACF;AAAA,EACF;AACF;;;AFsBA,SAAS,gBAAgB,QAAmD;AAC1E,UAAQ,QAAQ,aAAa,UAAU,QAAQ,wBAAwB,OAAO;AAChF;AAgEA,IAAM,wBAAN,cAAoC,cAAkC;AAAA,EACpE,MAAyB,QAAQ,SAA6C;AAC5E,UAAM,KAAK,OAAO,KAAK,QAAQ,MAAM;AAAA,EACvC;AACF;AAJM,wBAAN;AAAA,EADC,UAAU;AAAA,GACL;AAKN,IAAM,YAAYG,GAAE,OAAO;AAAA,EACzB,aAAaA,GAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,QAAQ,CAAC;AAAA,EACtD,YAAYA,GAAE,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,IAAI,GAAM,EAAE,QAAQ,GAAI;AAAA,EAC9D,kBAAkBA,GAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI,EAAE,QAAQ,EAAE;AAAA,EAC9D,kBAAkBA,GAAE,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,IAAI,GAAM,EAAE,QAAQ,GAAM;AACxE,CAAC;AAED,SAAS,gBAAgB,SAA0C;AACjE,QAAM,eAAe,oBAAoB,MAAM,QAAQ,YAAY;AACnE,QAAM,aAAa,QAAQ,eAAe,SAAY,SAAY,4BAA4B,MAAM,QAAQ,UAAU;AACtH,MAAK,iBAAiB,mBAAoB,eAAe,QAAY,OAAM,IAAI,UAAU,kDAAkD;AAC3I,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,mBAAmB,iBAAiB,gBAAgB,2BAA2B;AAAA,IAC/E,QAAQ,UAAU,MAAM,OAAO;AAAA,EACjC;AACF;AACA,eAAsB,sCAAsC,SAA6E;AACvI,QAAM;AAAA,IACJ;AAAA,IAAY;AAAA,IAAc;AAAA,IAAmB;AAAA,EAC/C,IAAI,gBAAgB,OAAO;AAC3B,MAAI,QAAQ,QAAQ,SAAS,KAAK,QAAQ,QAAQ,SAAS;AACzD,UAAM,IAAI,MAAM,4DAA4D;AAC9E,QAAM,QAAQ,QAAQ,eAAe,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AACvE,QAAM,SAAS,8BAA8B;AAAA,IAC3C,SAAS,QAAQ;AAAA,IAAS,WAAW,QAAQ;AAAA,IAAW,YAAY;AAAA,EACtE,CAAC;AACD,QAAM,gBAAgB,IAAI,IAAI,QAAQ,QAAQ,IAAI,YAAU,CAAC,mBAAmB,OAAO,MAAM,GAAG,MAAM,CAAC,CAAC;AACxG,MAAI,cAAc,SAAS,QAAQ,QAAQ;AACzC,UAAM,IAAI,MAAM,qCAAqC;AACvD,QAAM,QAAQ,QAAQ;AACtB,QAAM,eAAe,MAAM,IAAY,YAAY,uBAAuB;AAC1E,MAAI,iBAAiB,UAAa,iBAAiB,aAAc,OAAM,IAAI,MAAM,wGAAwG;AACzL,QAAM,IAAI,YAAY,yBAAyB,YAAY;AAC3D,QAAM,QAAQ,IAAI,gBAAgB;AAClC,QAAM,kBAAkB,oBAAI,IAAY;AACxC,MAAI,UAAU;AACd,MAAI,QAAQ;AACZ,MAAI,eAAe;AACnB,MAAI,SAAS;AACb,MAAI;AACJ,MAAI,iBAAiB;AACrB,MAAI;AACJ,QAAM,QAAQ,CAAI,SAAqB,WAAwB,0BAA0B,SAAS,QAAQ,OAAO,gBAAgB;AACjI,WAAS,aAAa,cAA4C,KAA4B;AAC5F,QAAI,aAAa,iBAAiB,gBAAgB,CAACC,mBAAkB,aAAa,YAAY,UAAU;AACtG,YAAM,IAAI,MAAM,6DAA6D;AAC/E,QAAI,iBAAiB,kBAAkB,aAAa,wBAAwB,KAAK,aAAa,gBAAgB,QAAY,OAAM,IAAI,MAAM,kCAAkC;AAC5K,QAAI,QAAQ,gBAAgB,UAAa,aAAa,gBAAgB,QAAQ;AAC5E,YAAM,IAAI,MAAM,qEAAqE;AACvF,UAAM,MAAM,aAAa;AACzB,QAAI,iBAAiB,iBAAiB,MAAM,IAAI,mBAAmB,GAAG,MAAM,UACvE,MAAM,QAAQ,iBAAiB,EAAE,UAAU,OAAO,iBAAkB,OAAM,IAAI,MAAM,mEAAmE;AAC5J,QAAI,SAAS,MAAM,IAAmB,mBAAmB,GAAG;AAC5D,QAAI,WAAW,QAAW;AACxB,gBAAU,cAAc,aAAa,cAAc,aAAa,cAAc,KAAK,IAAI,OAAO,EAAE,CAAC;AACjG,UAAI,CAAC,OAAO,cAAc,aAAa,mBAAmB,KAAK,aAAa,sBAAsB,KAAK,aAAa,sBAAsB,MAAM;AAC9I,cAAM,IAAI,MAAM,6BAA6B;AAAA,MAC/C;AACA,eAAS;AAAA,QACP;AAAA,QAAc,QAAQ,aAAa,eAAe;AAAA,QAAG,WAAW;AAAA,QAAG,UAAU;AAAA,QAAG,eAAe;AAAA,QAAG,OAAO;AAAA,MAC3G;AACA,YAAM,IAAI,mBAAmB,KAAK,MAAM;AAAA,IAC1C;AACA,wBAAoB,QAAQ,YAAY;AACxC,WAAO;AAAA,EACT;AAEA,WAAS,gBAAgB,QAAuB,KAAa,OAAyD;AACpH,QAAI,iBAAiB,iBAAiB,eAAe,QAAW;AAC9D,YAAM,QAAQ,CAAC,gBAAgB,IAAI,OAAO,aAAa,gBAAgB;AACvE,YAAMC,QAAO,MAAM,IAAI,mBAAmB,OAAO,aAAa,MAAM,CAAC;AACrE,UAAIA,UAAS,UAAa,EAAEA,iBAAgB,UAAUA,MAAK,YAAY,OAAO,aAAa;AACzF,wBAAgB,IAAI,OAAO,aAAa,gBAAgB;AAC1D,aAAO,0BAA0B;AAAA,QAC/B;AAAA,QAAY;AAAA,QAAO;AAAA,QAAO;AAAA,QAAK;AAAA,QAAQ;AAAA,MACzC,CAAC;AAAA,IACH;AACA,QAAI,OAAO,YAAY,OAAW,QAAO,EAAE,GAAG,QAAQ,SAAS,OAAO,QAAQ;AAC9E,UAAM,eAAe,OAAO;AAC5B,UAAM,OAAO,MAAM,IAAI,mBAAmB,aAAa,MAAM,CAAC;AAC9D,QAAI,SAAS,UAAa,gBAAgB,MAAO,OAAM,IAAI,MAAM,kCAAkC;AACnG,QAAI,KAAK,YAAY,OAAO,OAAQ;AACpC,UAAM,eAAe,OAAO,SAAS;AACrC,UAAM,UAAU,UAAU,cAAc,cAAc,KAAK,IAAI,KAAK,UAAU,eAAe,aAAa,sBAAsB,CAAC,GAAG,GAAG;AACvI,UAAM,WAAW,EAAE,GAAG,QAAQ,QAAQ;AACtC,UAAM,YAAY,MAAM;AACtB,YAAM,aAAa,KAAK,UAAU,CAAC,aAAa,kBAAkB,QAAQ,cAAc,QAAQ,UAAU,CAAC;AAC3G,UAAI,CAAC,MAAM,OAAO,mBAAmB,YAAY,OAAO,EAAG,OAAM,IAAI,MAAM,sEAAsE;AACjJ,YAAM,IAAI,mBAAmB,aAAa,kBAAkB,QAAQ;AAAA,IACtE,CAAC;AACD,WAAO;AAAA,EACT;AAEA,iBAAe,YAAY,QAAuB,QAAuC;AACvF,QAAI,MAAM,MAAM,QAAQ,UAAU,SAAS,OAAO,cAAc,MAAM,GAAG,MAAM,EAAG,QAAO;AACzF,UAAM,IAAI,mBAAmB,OAAO,aAAa,kBAAkB;AAAA,MACjE,GAAG;AAAA,MAAQ,SAAS;AAAA,MAAW,OAAO;AAAA,IACxC,CAAC;AACD,WAAO;AAAA,EACT;AAEA,WAAS,sBAAsB,QAA4D,MAAe,WAAmB,QAAqB,KAAa;AAC7J,UAAM,EAAE,SAAS,aAAa,IAAI;AAClC,UAAM,iBAAiB,qCAAqC,UAAU,IAAI;AAC1E,QAAI,CAAC,eAAe,WAAW,eAAe,KAAK,cAAc,aAAa,eAAe,KAAK,WAAW,QAAQ,UAChH,eAAe,KAAK,cAAc,QAAQ,YAAY,YAAY,qBAAqB,KAAK,MAC5F,eAAe,KAAK,aAAa,QAAQ,WAAW,MAAM,eAAe,KAAK,aAAa,MAAM;AACpG,YAAM,IAAI,MAAM,4DAA4D;AAC9E,WAAO,eAAe;AACtB,UAAM,IAAI,mBAAmB,aAAa,kBAAkB;AAAA,MAC1D;AAAA,MACA,QAAQ,QAAQ;AAAA,MAChB,WAAW,OAAO,YAAY;AAAA,MAC9B,UAAU;AAAA,MACV,UAAU;AAAA,MACV,YAAY,OAAO,cAAc;AAAA,MACjC,WAAW,OAAO,aAAa;AAAA,MAC/B,gBAAgB,OAAO,iBAAiB,KAAK;AAAA,MAC7C,gBAAgB;AAAA,MAChB,YAAY,QAAQ;AAAA,MACpB,gBAAgB,QAAQ;AAAA,MACxB,eAAe;AAAA,MACf,OAAO;AAAA,IACT,CAAyB;AAAA,EAC3B;AAEA,iBAAe,aAAa,QAA4D,QAAqB,KAAa;AACxH,UAAM,EAAE,SAAS,aAAa,IAAI;AAClC,WAAO,eAAe;AACtB,UAAM,SAAS,MAAM,OAAO,KAAK,SAAS,aAAa,QAAQ;AAC/D,WAAO,eAAe;AACtB,UAAM,UAAU,iBAAiB,gBAAgB,OAAO,YAAY,IAAI,MAAM,IAAuB,qBAAqB,QAAQ,MAAM,GAAG,SAAS;AACpJ,QAAI,iBAAiB,cAAe,OAAM,IAAI,mBAAmB,aAAa,kBAAkB;AAAA,MAC9F,GAAG;AAAA,MAAQ,UAAU,UAAU;AAAA,MAAG,gBAAgB,OAAO,iBAAiB,KAAK;AAAA,IACjF,CAAC;AAAA,QACI,OAAM,IAAI,qBAAqB,QAAQ,QAAQ;AAAA,MAClD,OAAO,UAAU;AAAA,MAAG,WAAW;AAAA,MAAK,QAAQ;AAAA,IAC9C,CAAC;AACD,UAAM,WAAW,MAAM,QAAQ,UAAU,KAAK,aAAa,UAAU,OAAO,OAAO,QAAQ,OAAO,GAAG;AACrG,QAAI,iBAAiB,UAAW,OAAM,IAAI,qBAAqB,QAAQ,QAAQ;AAAA,MAC7E,OAAO,UAAU;AAAA,MAAG,WAAW;AAAA,MAAK,QAAQ,SAAS;AAAA,IACvD,CAAC;AACD,QAAI,SAAS,WAAW,OAAO,SAAS,WAAW,IAAK,OAAM,IAAI,sBAAsB,SAAS,QAAQ,SAAS,YAAY;AAC9H,QAAI,iBAAiB,eAAe;AAClC,4BAAsB,QAAQ,SAAS,MAAM,OAAO,WAAW,QAAQ,GAAG;AAC1E;AAAA,IACF;AACA,UAAM,UAAUF,GAAE,OAAO,EAAE,WAAWA,GAAE,OAAO,EAAE,IAAI,CAAC,GAAG,QAAQA,GAAE,QAAQ,QAAQ,MAAM,EAAE,CAAC,EAAE,UAAU,SAAS,IAAI;AACrH,QAAI,CAAC,QAAQ,QAAS,OAAM,IAAI,MAAM,+DAA+D;AACrG,WAAO,eAAe;AAGtB,UAAM,YAAY,MAAM;AACtB,YAAM,IAAI,qBAAqB,QAAQ,QAAQ,EAAE,WAAW,QAAQ,KAAK,WAAW,YAAY,IAAI,CAAC;AACrG,YAAM,IAAI,mBAAmB,aAAa,kBAAkB;AAAA,QAC1D;AAAA,QACA,QAAQ,QAAQ;AAAA,QAChB,WAAW,OAAO,YAAY;AAAA,QAC9B,UAAU;AAAA,QACV,eAAe;AAAA,QACf,OAAO;AAAA,MACT,CAAyB;AAAA,IAC3B,CAAC;AAAA,EACH;AAEA,iBAAe,QAAQ,cAA4C,QAAqB,KAAa,OAAyD;AAC5J,QAAI,SAAS,aAAa,cAAc,GAAG;AAC3C,QAAI,iBAAiB,cAAc,OAAO,UAAU,YAAY,OAAO,gBAAgB,MAAM,KAAO;AACpG,QAAI;AACF,UAAI,CAAC,MAAM,YAAY,QAAQ,MAAM,EAAG;AACxC,cAAQ,UAAU,cAAc,aAAa,QAAQ;AACrD,UAAI,CAAC,cAAc,IAAI,mBAAmB,aAAa,MAAM,CAAC,EAAG,OAAM,IAAI,MAAM,uCAAuC;AACxH,YAAM,WAAW,gBAAgB,QAAQ,KAAK,KAAK;AACnD,UAAI,aAAa,OAAW;AAC5B,eAAS;AACT,UAAI,OAAO,gBAAgB,MAAM,IAAM;AAEvC,UAAI,CAAC,MAAM,YAAY,QAAQ,MAAM,EAAG;AACxC,YAAM,aAAa,UAAU,QAAQ,GAAG;AAAA,IAC1C,SAAS,OAAO;AACd,UAAI,OAAO,QAAS;AACpB,YAAM;AAAA,QACJ;AAAA,QACA,aAAa;AAAA,QACb,eAAe,QAAQ,MAAM,IAAmB,mBAAmB,aAAa,gBAAgB,GAAG,cAAc,OAAO,GAAG;AAAA,MAC7H;AAAA,IACF;AAAA,EACF;AACA,iBAAe,YAAY,QAAgF;AACzG,UAAM,QAAQ,oBAAI,IAAyC;AAC3D,UAAM,UAAU,MAAM,QAAQ,WAAW,CAAC,GAAG,aAAa,EAAE,IAAI,OAAO,CAAC,KAAK,MAAM,MAAM;AACvF,YAAM,OAAO,MAAM,MAAM,OAAO,KAAK,MAAM,GAAG,MAAM;AACpD,UAAI,CAAC,OAAO,cAAc,KAAK,QAAQ,KAAK,KAAK,WAAW;AAC1D,cAAM,IAAI,MAAM,wBAAwB;AAC1C,YAAM,WAAW,MAAM,IAAyB,gBAAgB,GAAG;AACnE,UAAI,aAAa,WAAc,KAAK,WAAW,SAAS,YAAa,KAAK,aAAa,SAAS,YAAY,KAAK,SAAS,SAAS,OAAQ;AACzI,cAAM,IAAI,MAAM,4CAA4C;AAAA,MAC9D;AACA,aAAO,eAAe;AACtB,YAAM,IAAI,gBAAgB,KAAK,IAAI;AACnC,YAAM,IAAI,KAAK,IAAI;AAAA,IACrB,CAAC,CAAC;AACF,qBAAiB,QAAQ,MAAM,UAAQ,KAAK,WAAW,WAAW;AAGlE,eAAW,CAAC,OAAO,MAAM,KAAK,QAAQ,QAAQ;AAC5C,UAAI,OAAO,WAAW,YAAY;AAChC,cAAM,MAAM,cAAc,KAAK,EAAE,QAAQ,EAAE,KAAK;AAChD,YAAI,QAAQ;AACV,gBAAM,IAAI,KAAK,IAAI,MAAM,oBAAoB,CAAC;AAAA,MAClD;AACF,WAAO;AAAA,EACT;AACA,iBAAe,oBAAoB,eAAwD,QAAqB;AAC9G,QAAI,cAAc,SAAS,OAAO,iBAAkB,OAAM,IAAI,MAAM,uCAAuC;AAC3G,UAAM,SAAS,IAAI,IAAI,cAAc,IAAI,kBAAgB,aAAa,gBAAgB,CAAC;AACvF,QAAI,OAAO,SAAS,cAAc,OAAQ,OAAM,IAAI,MAAM,iCAAiC;AAC3F,UAAM,cAAc,MAAM,QAAuB,iBAAiB,EAAE,OAAO,UAAQ,CAAC,OAAO,IAAI,KAAK,GAAG,KAAK,KAAK,MAAM,UAAU,WAAW;AAC5I,QAAI,YAAY;AAChB,aAAS,SAAS,GAAG,SAAS,YAAY,QAAQ,UAAU,OAAO,aAAa;AAC9E,aAAO,eAAe;AACtB,YAAM,UAAU,MAAM,QAAQ,WAAW,YAAY,MAAM,QAAQ,SAAS,OAAO,WAAW,EAAE,IAAI,OAAO,EAAE,KAAK,MAAM,MAAM;AAC5H,cAAM,kBAAkB,MAAM,MAAM,QAAQ,UAAU,SAAS,MAAM,cAAc,MAAM,GAAG,MAAM;AAClG,YAAI,CAAC,gBAAiB,OAAM,IAAI,mBAAmB,KAAK;AAAA,UACtD,GAAG;AAAA,UAAO,SAAS;AAAA,UAAW,OAAO;AAAA,QACvC,CAAC;AACD,eAAO;AAAA,MACT,CAAC,CAAC;AAGF,kBAAY,aAAa,QAAQ,MAAM,YAAU,OAAO,WAAW,eAAe,CAAC,OAAO,KAAK;AAAA,IACjG;AACA,WAAO;AAAA,EACT;AAEA,iBAAe,KAAK,aAA0B;AAC5C,UAAM,QAAQ,oBAAoB,CAAC,MAAM,QAAQ,WAAW,CAAC;AAC7D,UAAM,SAAS,MAAM;AACrB,QAAI;AACF,aAAO,eAAe;AACtB,YAAM,MAAM,MAAM;AAClB,YAAM,QAAQ,MAAM,IAAY,WAAW,oBAAoB,KAAK;AACpE,qBAAe,OAAO,cAAc,GAAG,KAAK,OAAO;AACnD,UAAI,CAAC;AACH,cAAM,IAAI,MAAM,iCAAiC;AACnD,YAAM,IAAI,WAAW,sBAAsB,GAAG;AAC9C,YAAM,gBAAgB,MAAM,MAAM,QAAQ,UAAU,SAAS,MAAM,GAAG,MAAM;AAC5E,YAAM,yBAAyB,MAAM,oBAAoB,eAAe,MAAM;AAC9E,YAAM,QAAQ,MAAM,YAAY,MAAM;AACtC,eAAS,SAAS,GAAG,SAAS,cAAc,QAAQ,UAAU,OAAO,aAAa;AAChF,eAAO,eAAe;AACtB,cAAM,WAAW,MAAM,QAAQ,WAAW,cAAc,MAAM,QAAQ,SAAS,OAAO,WAAW,EAAE,IAAI,kBAAgB,QAAQ,cAAc,QAAQ,KAAK,KAAK,CAAC,CAAC;AACjK,cAAM,SAAS,SAAS,KAAK,YAAU,OAAO,WAAW,UAAU;AACnE,YAAI,QAAQ,WAAW;AACrB,gBAAM,OAAO;AAAA,MACjB;AAGA,UAAI,QAAQ,UAAU,kBAAkB;AACtC,cAAM,MAAM,QAAQ,UAAU,cAAc,MAAM,GAAG,MAAM;AAC7D,YAAM,kBAAkB,QAAQ,UAAU,SAAS;AACnD,cAAQ,0BAA0B,kBAAkB,gBAAgB,eAAe;AACnF,kBAAY,yBAAyB,SAAY;AACjD,gBAAU;AAAA,IACZ,SAAS,OAAO;AACd,cAAQ;AACR,kBAAY,eAAe,0BAA0B;AACrD,UAAI,CAAC,OAAO;AACV,cAAM;AAAA,IACV,UAAE;AACA,YAAM,QAAQ;AAAA,IAChB;AAAA,EACF;AACA,QAAM,QAAQ,MAAM,sBAAsB,OAAO;AAAA,IAC/C,SAAS,oBAAoB,CAAC,CAAC;AAAA,IAAG,YAAY,OAAO;AAAA,IAAY,UAAU;AAAA,IAAa,WAAW;AAAA,IAAa;AAAA,EAClH,CAAC;AACD,SAAO;AAAA,IACL,MAAM,QAAQ;AACZ,UAAI,SAAS;AACX,cAAM,IAAI,MAAM,sBAAsB;AACxC,UAAI,SAAS;AACX;AAAA,MACF;AAEA,YAAM,MAAM,MAAM;AAClB,gBAAU;AAAA,IACZ;AAAA,IACA,MAAM,UAAU;AACd,UAAI,SAAS;AACX,cAAM,IAAI,MAAM,sBAAsB;AACxC,YAAM,MAAM,QAAQ;AAAA,IACtB;AAAA,IACA,MAAM,MAAM,UAAU,YAAY;AAChC,YAAM,MAAM;AACZ,YAAM,WAAsB,CAAC;AAC7B,UAAI;AACF,cAAM,MAAM,KAAK;AAAA,MACnB,SAAS,OAAO;AACd,iBAAS,KAAK,KAAK;AAAA,MACrB;AACA,UAAI;AACF,cAAM,QAAQ,UAAU,QAAQ;AAAA,MAClC,SAAS,OAAO;AACd,iBAAS,KAAK,KAAK;AAAA,MACrB;AACA,iBAAW,UAAU,QAAQ;AAC3B,YAAI;AACF,gBAAM,OAAO,QAAQ;AAAA,QACvB,SAAS,OAAO;AACd,mBAAS,KAAK,KAAK;AAAA,QACrB;AACF,gBAAU;AACV,cAAQ;AACR,UAAI,SAAS,SAAS;AACpB,cAAM,IAAI,eAAe,UAAU,mCAAmC;AAAA,IAC1E,GAAG;AAAA,IACH,SAAS;AACP,YAAM,aAAa,MAAM,QAAuB,iBAAiB,EAAE,IAAI,UAAQ,KAAK,KAAK;AACzF,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA,GAAI,eAAe,SAAY,CAAC,IAAI,EAAE,YAAY,OAAO,OAAO,EAAE,GAAG,WAAW,CAAC,EAAE;AAAA,QACnF,YAAY,WAAW,OAAO,CAAC,KAAK,SAAS,OAAO,KAAK,cAAc,IAAI,CAAC;AAAA,QAC5E,WAAW,WAAW,OAAO,CAAC,KAAK,SAAS,OAAO,KAAK,aAAa,IAAI,CAAC;AAAA,QAC1E,eAAe,WAAW,OAAO,CAAC,KAAK,SAAS,OAAO,KAAK,iBAAiB,IAAI,CAAC;AAAA,QAClF,OAAO,WAAW;AAAA,QAClB;AAAA,QACA,UAAU,CAAC,SAAS,WAAW,KAAK,UAAQ,KAAK,UAAU,eAAe,KAAK,WAAW,CAAC;AAAA,QAC3F,WAAW,QAAQ;AAAA,QACnB,qBAAqB,WAAW,OAAO,UAAQ,KAAK,UAAU,QAAQ,EAAE;AAAA,QACxE,mBAAmB,WAAW,OAAO,UAAQ,KAAK,YAAY,MAAS,EAAE;AAAA,QACzE,WAAW,WAAW,OAAO,CAAC,KAAK,SAAS,MAAM,KAAK,WAAW,CAAC;AAAA,QACnE,UAAU,WAAW,OAAO,CAAC,KAAK,SAAS,MAAM,KAAK,UAAU,CAAC;AAAA,QACjE;AAAA,QACA,GAAI,cAAc,SAAY,CAAC,IAAI,EAAE,UAAU;AAAA,QAC/C,GAAI,QAAQ,UAAU,WAAW,SAAY,CAAC,IAAI,EAAE,WAAW,QAAQ,UAAU,OAAO,EAAE;AAAA,QAC1F,SAAS,MAAM,QAA6B,cAAc,EAAE,OAAO,UAAQ,cAAc,IAAI,KAAK,GAAG,CAAC,EAAE,IAAI,WAAS,EAAE,IAAI,KAAK,KAAK,GAAG,KAAK,MAAM,EAAE;AAAA,QACrJ,eAAe,MAAM,QAAuB,iBAAiB,EAAE,IAAI,WAAS;AAAA,UAC1E,IAAI,KAAK;AAAA,UACT,QAAQ,KAAK,MAAM;AAAA,UACnB,GAAI,iBAAiB,gBACjB;AAAA,YACE,GAAI,KAAK,MAAM,SAAS,KAAK,MAAM,aAAa,eAAe,CAAC,IAAI,EAAE,qBAAqB,KAAK,MAAM,OAAO;AAAA,YAC7G,UAAU,KAAK,MAAM,YAAY;AAAA,YACjC,YAAY,KAAK,MAAM;AAAA,UACzB,IACA,CAAC;AAAA,UACL,OAAO,KAAK,MAAM;AAAA,UAClB,SAAS,KAAK,MAAM,YAAY;AAAA,UAChC,UAAU,KAAK,MAAM;AAAA,QACvB,EAAE;AAAA,MACJ;AAAA,IACF;AAAA,EACF;AACF;;;AGreA,SAAS,uBAAuB;AAKhC;AAAA,EACE;AAAA,EAA0B;AAAA,EAAwB;AAAA,EAAwB;AAAA,EAC1E;AAAA,EAA+B;AAAA,EAAoB;AAAA,EAAoB;AAAA,EAAmB;AAAA,OACrF;AAeP,eAAsB,yBAAyB,SAEY;AACzD,QAAM,OAAO;AAAA,IACX,WAAW,EAAE,MAAM,QAAiB,SAAS,QAAQ,aAAa;AAAA,IAClE,YAAY,EAAE,MAAM,QAAiB,SAAS,QAAQ,cAAc;AAAA,IACpE,OAAO,EAAE,MAAM,QAAiB,SAAS,QAAQ,YAAY,QAAQ,aAAa;AAAA,EACpF;AACA,QAAM,UAAU,QAAQ,YAAY,SAChC,MAAM,uBAAuB,4BAA4B,MAAM,QAAW,EAAE,SAAS,QAAQ,SAAS,aAAa,MAAM,CAAC,IAC1H,MAAM,uBAAuB,6BAA6B,MAAM,QAAW;AAAA,IACzE,SAAS,QAAQ;AAAA,IAAS,aAAa;AAAA,IAAO,QAAQ,QAAQ;AAAA,IAAQ,eAAe,QAAQ;AAAA,EAC/F,CAAC;AACL,MAAI;AACF,UAAM,UAAU,QAAQ,YAAY,SAChC,MAAM,QAAQ,YAAwB,iBAAiB,IACvD,MAAM,QAAQ,YAA8B,uBAAuB;AACvE,QAAI;AACJ,WAAO,OAAO,OAAO,EAAE,SAAS,MAAM,MAAM,aAAa,8BAA8B,OAAO,EAAE,CAAC;AAAA,EACnG,SAAS,OAAO;AACd,UAAM,8BAA8B,OAAO;AAC3C,UAAM;AAAA,EACR;AACF;AAEA,IAAM,4BAAN,cAAwC,mBAAmB;AAAA,EACzD,IAAa,SAAS;AACpB,QAAI,KAAK,QAAQ,YAAY;AAC3B,YAAM,IAAI,MAAM,yDAAyD;AAC3E,WAAO,IAAI,gBAAgB,EAAE,SAAS,KAAK,QAAQ,QAAQ,CAAC;AAAA,EAC9D;AACF;AANM,4BAAN;AAAA,EADC,kBAAkB;AAAA,GACb;AAQN,IAAM,4BAAN,cAAwC,mBAAmB;AAAA,EACzD,IAAa,SAAS;AACpB,QAAI,KAAK,QAAQ,YAAY;AAC3B,YAAM,IAAI,MAAM,yDAAyD;AAC3E,WAAO,IAAI,gBAAgB,EAAE,SAAS,KAAK,QAAQ,QAAQ,CAAC;AAAA,EAC9D;AACF;AANM,4BAAN;AAAA,EADC,kBAAkB;AAAA,GACb;AAQN,eAAsB,sBAAsB,SAIzC;AACD,QAAM,UAAU,MAAM,yBAAyB;AAAA,IAC7C,aAAa,EAAE,kBAAkB,EAAE,MAAM,QAAQ,SAAS,QAAQ,IAAI,EAAE;AAAA,IACxE,kBAAkB,EAAE,gBAAgB,EAAE,YAAY,iBAAiB,GAAG,gBAAgB,EAAE,YAAY,iBAAiB,EAAE;AAAA,EACzH,CAAC;AACD,UAAQ,QAAQ,UAAU,QAAQ;AAClC,UAAQ,SAAS,0BAA0B,QAAmC,0BAA0B,YAAY,CAAC;AACrH,MAAI,QAAQ;AACV,YAAQ,SAAS,0BAA0B,QAAmC,0BAA0B,YAAY,CAAC;AACvH,UAAQ,OAAO;AACf,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ,YAAuC,0BAA0B,cAAc;AAC5G,UAAM,SAAS,QAAQ,WAAW,MAAM,QAAQ,YAAuC,0BAA0B,cAAc,IAAI;AACnI,WAAO;AAAA,MACL;AAAA,MAAQ;AAAA,MAAQ,MAAM,QAAQ;AAAE,cAAM,8BAA8B,OAAO;AAAA,MAAE;AAAA,IAC/E;AAAA,EACF,SAAS,OAAO;AACd,UAAM,8BAA8B,OAAO;AAC3C,UAAM;AAAA,EACR;AACF;;;ACxFA,SAAS,qBAAAG,0BAAyB;AAGlC,SAAS,6BAA6B;AACtC;AAAA,EACE,uBAAAC;AAAA,EAAqB,wBAAAC;AAAA,EAAsB,kBAAAC;AAAA,EAAgB,WAAAC;AAAA,EAAS,wBAAAC;AAAA,OAC/D;AAKP,SAAS,KAAAC,UAAS;;;ACXlB;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAMP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA,gCAAAC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,wBAAAC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,KAAAC,UAAS;AAEX,IAAM,+BAA+B;AAAA,EAC1C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAKA,IAAM,iCAAiCA,GAAE,KAAK,4BAA4B;AAC1E,IAAM,kCAAkCA,GAAE,MAAM,CAAC,gBAAgB,OAAO,CAAC;AACzE,IAAM,gCAAgCA,GAAE,aAAa;AAAA,EACnD,eAAe;AAAA,EACf,OAAO;AAAA,EACP,YAAY;AACd,CAAC;AAED,IAAM,mBAAmB;AAAA,EACvB,SAAS;AAAA,EACT,aAAa;AAAA,EACb,WAAWD;AAAA,EACX,oBAAoB;AAAA,EACpB,QAAQA;AAAA,EACR,SAASC,GAAE,QAAQ,CAAC;AACtB;AAEA,IAAM,mCAAmCA,GAAE,aAAa;AAAA,EACtD,GAAG;AAAA,EACH,MAAMA,GAAE,QAAQ,2BAA2B;AAAA,EAC3C,aAAa;AAAA,EACb,eAAe;AAAA,EACf,YAAY;AAAA,EACZ,SAAS;AACX,CAAC;AAED,IAAM,qCAAqCA,GAAE,aAAa;AAAA,EACxD,GAAG;AAAA,EACH,MAAMA,GAAE,QAAQ,8BAA8B;AAAA,EAC9C,aAAa;AAAA,EACb,eAAe;AAAA,EACf,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,iBAAiB;AAAA,EACjB,SAAS;AACX,CAAC;AAED,IAAM,kCAAkCA,GAAE,aAAa;AAAA,EACrD,GAAG;AAAA,EACH,MAAMA,GAAE,QAAQ,mCAAmC;AAAA,EACnD,aAAa;AAAA,EACb,eAAe;AAAA,EACf,OAAO;AAAA,EACP,aAAa;AAAA,EACb,iBAAiB;AAAA,EACjB,SAAS;AAAA,EACT,cAAc;AAChB,CAAC;AAED,IAAM,+BAA+BA,GAAE,aAAa;AAAA,EAClD,GAAG;AAAA,EACH,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,MAAMA,GAAE,QAAQ,+BAA+B;AAAA,EAC/C,aAAa;AAAA,EACb,UAAUF;AACZ,CAAC;AAED,IAAM,kCAAkCE,GAAE,aAAa;AAAA,EACrD,GAAG;AAAA,EACH,MAAMA,GAAE,QAAQ,0BAA0B;AAAA,EAC1C,aAAa;AAAA,EACb,YAAY;AACd,CAAC;AAED,IAAM,wCAAwCA,GAAE,aAAa;AAAA,EAC3D,GAAG;AAAA,EACH,MAAMA,GAAE,QAAQ,iCAAiC;AAAA,EACjD,aAAa;AAAA,EACb,YAAY;AACd,CAAC;AAED,IAAM,iCAAiCA,GAAE,aAAa;AAAA,EACpD,GAAG;AAAA,EACH,MAAMA,GAAE,QAAQ,yBAAyB;AAAA,EACzC,aAAa;AAAA,EACb,YAAY;AACd,CAAC;AAED,IAAM,wCAAwCA,GAAE,aAAa;AAAA,EAC3D,GAAG;AAAA,EACH,MAAMA,GAAE,QAAQ,gCAAgC;AAAA,EAChD,aAAa;AAAA,EACb,YAAY;AACd,CAAC;AAEM,IAAM,6BAA6BA,GAAE,mBAAmB,QAAQ;AAAA,EACrE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAkCM,IAAM,uCAAN,cAAmD,MAAM;AAAA,EAC9D,YAAY,UAAU,wEAAwE;AAC5F,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAYO,SAAS,mCAAmC,OAAqE;AACtH,SAAO,OAAO,OAAO;AAAA,IACnB,SAAS,WAAW,MAAM,MAAM,OAAO;AAAA,IACvC,MAAM,+BAA+B,MAAM,MAAM,IAAI;AAAA,IACrD,aAAa,gCAAgC,MAAM,MAAM,WAAW;AAAA,IACpE,WAAWC,sBAAqB,MAAM,MAAM,SAAS;AAAA,IACrD,QAAQA,sBAAqB,MAAM,MAAM,MAAM;AAAA,EACjD,CAAC;AACH;AAGA,eAAsB,6BAA6B,OAAkD;AACnG,QAAM,SAAS,2BAA2B,MAAM,KAAK;AACrD,QAAM,sBAAsB,MAAM;AAClC,SAAO,OAAO,OAAO,MAAM;AAC7B;AAwBO,SAAS,gBAAgBC,SAA+C;AAC7E,QAAM,SAAS,mCAAmCA,OAAM;AACxD,SAAO,CAAC,OAAO,SAAS,OAAO,WAAW,OAAO,QAAQ,OAAO,MAAM,OAAO,WAAW,EAAE,KAAK,GAAG;AACpG;AAEO,SAAS,wBAAwB,MAA+B,OAAsC;AAC3G,QAAM,SAAS,KAAK,YAAY,MAAM,WACjC,KAAK,YAAY,MAAM,WACvB,KAAK,SAAS,MAAM,QACpB,KAAK,gBAAgB,MAAM,eAC3B,KAAK,cAAc,MAAM,aACzB,KAAK,WAAW,MAAM,UACtB,KAAK,uBAAuB,MAAM;AACvC,QAAM,aAAa,KAAK,SAAS,kCAC5B,MAAM,SAAS;AACpB,QAAM,gBAAgB,KAAK,SAAS,uCAC/B,MAAM,SAAS;AACpB,QAAM,WAAW,cAAc,gBAC3B,KAAK,oBAAoB,MAAM,mBAAmB,KAAK,gBAAgB,MAAM,cAC7E,EAAE,qBAAqB,SAAS,EAAE,qBAAqB;AAC3D,MAAI,CAAC,UAAU,CAAC,SAAU,OAAM,IAAI,qCAAqC;AAC3E;AAEA,eAAe,sBAAsB,QAAgD;AACnF,MAAI,OAAO,KAAK,WAAW,YAAY,KAAK,OAAO,WAAW,OAAO,WAAW;AAC9E,UAAM,IAAI,UAAU,uDAAuD;AAAA,EAC7E;AACA,MAAI,OAAO,SAAS,+BAA+B,OAAO,SAAS,gCAAgC;AACjG,UAAM,6BAA6B,MAAM;AACzC;AAAA,EACF;AACA,MAAI,OAAO,SAAS,qCAAqC;AACvD,UAAM,mCAAmC,MAAM;AAC/C;AAAA,EACF;AACA,MAAI,OAAO,SAAS,iCAAiC;AACnD,UAAM,gCAAgC,MAAM;AAC5C;AAAA,EACF;AACA,QAAM,uBAAuB,MAAM;AACrC;AAEA,eAAe,6BACb,QACe;AACf,QAAM,UAAU,MAAM,oBAAoB,OAAO,aAAa;AAC9D,MAAI,OAAO,WAAW,kBAAkB,WACnC,OAAO,WAAW,UAAU,OAAO,cAAc,SACjD,OAAO,QAAQ,2BAA2B,WAC1C,OAAO,QAAQ,eAAe,WAAW,KACzC,OAAO,QAAQ,eAAe,CAAC,MAAM,SAAS;AACjD,UAAM,IAAI,UAAU,6EAA6E;AAAA,EACnG;AACA,MAAI,OAAO,SAAS,6BAA6B;AAC/C,QAAI,OAAO,QAAQ,aAAa,KAAK,OAAO,QAAQ,eAAe,QAAW;AAC5E,YAAM,IAAI,UAAU,oEAAoE;AAAA,IAC1F;AAAA,EACF,WAAW,OAAO,QAAQ,eAAe,OAAO,mBAAmB,OAAO,QAAQ,YAAY,GAAG;AAC/F,UAAM,IAAI,UAAU,wEAAwE;AAAA,EAC9F;AACF;AAEA,eAAe,mCAAmC,QAAqD;AACrG,QAAM,CAAC,SAAS,aAAa,SAAS,IAAI,MAAM,QAAQ,IAAI;AAAA,IAC1D,oBAAoB,OAAO,aAAa;AAAA,IACxC,oBAAoB,OAAO,OAAO;AAAA,IAClC,oBAAoB,OAAO,KAAK;AAAA,EAClC,CAAC;AACD,MAAI,YAAY,OAAO,eAClB,gBAAgB,OAAO,mBACvB,OAAO,QAAQ,2BAA2B,WAC1C,CAAC,OAAO,QAAQ,eAAe,SAAS,OAAO,KAC/C,OAAO,MAAM,cAAc,OAAO,aAClC,OAAO,aAAa,cAAc,OAAO,aACzC,OAAO,aAAa,YAAY,eAChC,OAAO,aAAa,kBAAkB,WACtC,OAAO,aAAa,UAAU,OAAO,cAAc,SACnD,OAAO,aAAa,UAAU,WAAW;AAC5C,UAAM,IAAI,UAAU,kEAAkE;AAAA,EACxF;AACF;AAEA,eAAe,gCAAgC,QAAkD;AAC/F,QAAM,CAAC,eAAe,YAAY,IAAI,MAAM,QAAQ,IAAI;AAAA,IACtD,oBAAoB,OAAO,SAAS;AAAA,IACpC,oBAAoB,OAAO,QAAQ;AAAA,EACrC,CAAC;AACD,MAAI,kBAAkB,OAAO,eACxB,OAAO,UAAU,cAAc,OAAO,aACtC,OAAO,SAAS,cAAc,iBAC9B,OAAO,WAAW,cAAc,iBAChC,OAAO,WAAW,aAAa,gBAC/B,OAAO,WAAW,YAAY,OAAO,UAAU,WAC/C,OAAO,WAAW,kBAAkB,OAAO,UAAU,iBACrD,OAAO,WAAW,UAAU,OAAO,UAAU,SAC7C,OAAO,WAAW,iBAAiB,OAAO,UAAU,cAAc;AACrE,UAAM,IAAI,UAAU,+DAA+D;AAAA,EACrF;AACF;AAEA,eAAe,uBACb,QAKe;AACf,QAAM,SAAS,OAAO,SAAS,oCAC3B,OAAO,WAAW,MAClB,OAAO,SAAS,6BACd,OAAO,WAAW,UAClB,OAAO,SAAS,4BACd,OAAO,WAAW,QAClB,OAAO,WAAW;AAC1B,MAAI,WAAW,OAAO,aAAa;AACjC,UAAM,IAAI,UAAU,6DAA6D;AAAA,EACnF;AACF;;;ADrUA,IAAM,SAASC,GAAE,aAAa;AAAA,EAC5B,eAAeC;AAAA,EAAS,OAAOC;AAAA,EAAgB,YAAYC;AAAA,EAAqB,WAAWC;AAC7F,CAAC;AACD,IAAM,SAAS,CAAC,UAAU,mBAAmB,oBAAoB,aAAa,YAAY,WAAW;AAErG,SAAS,YAAY,OAAqB;AACxC,MAAI,CAAC,OAAO,cAAc,KAAK,KAAK,QAAQ,EAAG,OAAM,IAAI,MAAM,4BAA4B;AAC7F;AAEA,SAAS,sBAAsB,MAA2C,OAAqD;AAC7H,SAAO,KAAK,YAAY,MAAM,WAAW,KAAK,WAAW,MAAM,UAAU,KAAK,gBAAgB,MAAM,eAC/FC,mBAAkB,KAAK,aAAa,MAAM,WAAW,KAAKA,mBAAkB,KAAK,kBAAkB,MAAM,gBAAgB;AAChI;AAEA,SAAS,eAAe,QAAqD;AAC3E,MAAI,CAAC,kBAAkB,KAAK,OAAO,OAAO,KAAK,CAAC,kBAAkB,KAAK,OAAO,MAAM,KAC/E,OAAO,YAAY,WAAW,KAAK,OAAO,YAAY,SAAS,OAC/D,CAAC,GAAG,OAAO,aAAa,GAAG,OAAO,gBAAgB,EAAE,KAAK,UAAQ,CAACJ,SAAQ,UAAU,IAAI,EAAE,OAAO,GAAG;AACvG,UAAM,IAAI,MAAM,4BAA4B;AAAA,EAC9C;AACA,SAAO,KAAK,UAAU,CAAC,OAAO,SAAS,OAAO,QAAQ,OAAO,WAAW,CAAC;AAC3E;AAGO,SAAS,qCAAqC,OAA6B,UAAiD,CAAC,GAMlI;AACA,QAAM,YAAY,QAAQ,oBAAoB,SAAY,eAAe,cAAcD,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,MAAM,mBAAmB,EAAE,MAAM,QAAQ,eAAe,CAAC;AAC3K,QAAM,SAAwC;AAAA,IAC5C,MAAM,YAAY,MAAM,IAAI,UAAU,SAAS;AAAA,IAC/C,MAAM,KAAK,YAAY;AAAE,YAAM,IAAI,UAAU,WAAW,UAAU;AAAA,IAAE;AAAA,EACtE;AACA,QAAM,UAAwC;AAAA,IAC5C,MAAM,IAAIM,SAAQ;AAChB,YAAM,QAAQ,MAAM,IAAI,WAAW,gBAAgBA,OAAM,CAAC;AAC1D,aAAO,UAAU,SAAY,SAAY,MAAM,6BAA6B,KAAK;AAAA,IACnF;AAAA,IACA,MAAM,YAAY,KAAK;AACrB,YAAM,WAAW,MAAM,6BAA6B,GAAG;AACvD,aAAO,MAAM,YAAY,MAAM;AAC7B,cAAM,MAAM,gBAAgB,QAAQ;AACpC,cAAM,SAAS,MAAM,IAA6B,WAAW,GAAG;AAChE,YAAI,WAAW,QAAW;AACxB,kCAAwB,QAAQ,QAAQ;AACxC,iBAAO,EAAE,aAAa,WAAoB,QAAQ,OAAqB;AAAA,QACzE;AACA,cAAM,IAAI,WAAW,KAAK,QAAQ;AAClC,eAAO,EAAE,aAAa,WAAoB,QAAQ,SAAS;AAAA,MAC7D,CAAC;AAAA,IACH;AAAA,EACF;AACA,QAAM,OAAsC;AAAA,IAC1C,MAAM,cAAc,OAAO;AACzB,YAAM,MAAM,GAAGF,sBAAqB,MAAM,MAAM,SAAS,CAAC,IAAIF,gBAAe,MAAM,MAAM,KAAK,CAAC;AAC/F,YAAM,MAAM,MAAM,IAAI,mBAAmB,GAAG;AAC5C,UAAI,QAAQ,OAAW;AACvB,YAAM,SAAS,OAAO,MAAM,GAAG;AAC/B,UAAI,OAAO,kBAAkBD,SAAQ,MAAM,MAAM,aAAa,EAAG,OAAM,IAAI,MAAM,kCAAkC;AACnH,YAAM,EAAE,WAAW,YAAY,GAAG,WAAW,IAAI;AACjD,aAAO;AAAA,IACT;AAAA,IACA,MAAM,cAAc,OAAO;AACzB,YAAM,SAAS,OAAO,MAAM,EAAE,GAAG,MAAM,KAAK,WAAW,MAAM,UAAU,CAAC;AACxE,aAAO,MAAM,YAAY,MAAM;AAC7B,cAAM,MAAM,GAAG,OAAO,SAAS,IAAI,OAAO,KAAK;AAC/C,cAAM,QAAQ,MAAM,IAAI,mBAAmB,GAAG;AAC9C,YAAI,UAAU,QAAW;AACvB,cAAI,CAACI,mBAAkB,OAAO,MAAM,EAAG,OAAM,IAAI,MAAM,0BAA0B;AACjF,iBAAO;AAAA,QACT;AACA,cAAM,IAAI,mBAAmB,KAAK,MAAM;AACxC,eAAO;AAAA,MACT,CAAC;AAAA,IACH;AAAA,EACF;AACA,QAAM,UAAU,CAAC,SAAiB,MAAM,IAAsC,cAAcJ,SAAQ,MAAM,IAAI,CAAC;AAC/G,QAAM,OAAO,CAAC,QAA0C,QAAgB,OAAO,UAAU,YAAY,OAAO,MAAM,OAAO,UAAU;AACnI,QAAM,aAA8C;AAAA,IAClD,KAAK,OAAM,SAAQ,QAAQ,IAAI;AAAA,IAC/B,MAAM,MAAM,OAAO;AACjB,YAAM,YAAYM,sBAAqB,MAAM,MAAM,SAAS;AAC5D,YAAM,OAAON,SAAQ,MAAM,MAAM,aAAa;AAC9C,UAAI,MAAM,sBAAsB,SAAS,MAAM,KAAM,QAAO,EAAE,MAAM,YAAY;AAChF,aAAO,MAAM,YAAY,MAAM;AAC7B,cAAM,aAAa,MAAM,IAAY,oBAAoB,UAAU,KAAK;AACxE,YAAI,eAAe,UAAa,eAAe,KAAM,QAAO,EAAE,MAAM,YAAqB;AACzF,cAAM,QAAQ,QAAQ,IAAI;AAC1B,YAAI,UAAU,OAAW,QAAOI,mBAAkB,MAAM,WAAW,SAAS,IACxE,EAAE,MAAM,aAAsB,QAAQ,MAAM,IAC5C,EAAE,MAAM,YAAqB;AACjC,cAAM,SAA2C;AAAA,UAC/C;AAAA,UAAW,eAAe;AAAA,UAAM,OAAO;AAAA,QACzC;AACA,cAAM,IAAI,oBAAoB,UAAU,OAAO,IAAI;AACnD,cAAM,IAAI,cAAc,MAAM,MAAM;AACpC,eAAO,EAAE,MAAM,UAAmB,OAAO;AAAA,MAC3C,CAAC;AAAA,IACH;AAAA,IACA,MAAM,aAAa,OAAO;AACxB,kBAAY,MAAM,UAAU;AAC5B,aAAO,MAAM,YAAY,MAAM;AAC7B,cAAM,SAAS,QAAQ,MAAM,aAAa;AAC1C,YAAI,WAAW,OAAW,QAAO,EAAE,MAAM,UAAmB;AAC5D,YAAI,OAAO,UAAU,WAAY,QAAO,EAAE,MAAM,YAAqB,OAAO;AAC5E,YAAI,OAAO,UAAU,YAAa,QAAO,EAAE,MAAM,qBAA8B,OAAO;AACtF,YAAI,CAAC,KAAK,QAAQ,MAAM,UAAU,EAAG,QAAO,EAAE,MAAM,WAAoB,OAAO;AAC/E,cAAM,YAA8C,EAAE,GAAG,QAAQ,OAAO,YAAY;AACpF,cAAM,IAAI,cAAc,MAAM,eAAe,SAAS;AACtD,eAAO,EAAE,MAAM,WAAoB,QAAQ,UAAU;AAAA,MACvD,CAAC;AAAA,IACH;AAAA,IACA,MAAM,iBAAiB,OAAO;AAC5B,kBAAY,MAAM,UAAU;AAC5B,YAAM,eAAeJ,SAAQ,MAAM,MAAM,YAAY;AACrD,aAAO,MAAM,YAAY,MAAM;AAC7B,cAAM,SAAS,QAAQ,MAAM,aAAa;AAC1C,YAAI,WAAW,OAAW,QAAO,EAAE,MAAM,UAAmB;AAC5D,YAAI,OAAO,UAAU,WAAY,QAAO,EAAE,MAAM,OAAO,iBAAiB,eAAe,cAAuB,aAAsB,OAAO;AAC3I,YAAI,OAAO,UAAU,YAAa,QAAO,EAAE,MAAM,iBAA0B,OAAO;AAClF,YAAI,CAAC,KAAK,QAAQ,MAAM,UAAU,EAAG,QAAO,EAAE,MAAM,WAAoB,OAAO;AAC/E,cAAM,WAA6C;AAAA,UACjD,GAAG;AAAA,UAAQ;AAAA,UAAc,OAAO;AAAA,QAClC;AACA,cAAM,IAAI,cAAc,MAAM,eAAe,QAAQ;AACrD,eAAO,EAAE,MAAM,YAAqB,QAAQ,SAAS;AAAA,MACvD,CAAC;AAAA,IACH;AAAA,EACF;AACA,QAAM,UAAgD;AAAA,IACpD,MAAM,KAAK,QAAQ;AACjB,YAAM,MAAM,eAAe,MAAM;AACjC,YAAM,SAAS,MAAM,IAAyC,sBAAsB,GAAG;AACvF,UAAI,WAAW,OAAW;AAC1B,UAAI,CAAC,sBAAsB,QAAQ,MAAM,EAAG,OAAM,IAAI,MAAM,8BAA8B;AAC1F,UAAI,SAAS;AACb,iBAAW,SAAS,QAAQ;AAC1B,cAAM,SAAS,MAAM,IAAyC,eAAe,KAAK,IAAI,GAAG;AACzF,YAAI,WAAW,OAAW;AAC1B,YAAI,OAAO,UAAU,SAAS,CAAC,sBAAsB,QAAQ,MAAM,KAAK,CAACI,mBAAkB,OAAO,UAAU,OAAO,QAAQ,GAAG;AAC5H,gBAAM,IAAI,MAAM,gCAAgC;AAAA,QAClD;AACA,iBAAS;AAAA,MACX;AACA,aAAO;AAAA,IACT;AAAA,IACA,MAAM,KAAK,QAAQ;AACjB,YAAM,MAAM,eAAe,MAAM;AACjC,MAAAJ,SAAQ,MAAM,OAAO,SAAS,eAAe;AAC7C,UAAI,CAAC,OAAO,SAAS,OAAO,KAAK,EAAG,OAAM,IAAI,MAAM,2BAA2B;AAC/E,YAAM,YAAY,MAAM;AACtB,cAAM,SAAS,MAAM,IAAyC,sBAAsB,GAAG;AACvF,YAAI,WAAW,UAAa,OAAO,UAAU,SAAU,OAAM,IAAI,MAAM,6CAA6C;AACpH,YAAI,WAAW,WAAc,CAAC,sBAAsB,QAAQ,MAAM,KAAK,CAACI,mBAAkB,OAAO,UAAU,OAAO,QAAQ,IAAI;AAC5H,gBAAM,IAAI,MAAM,0CAA0C;AAAA,QAC5D;AACA,cAAM,YAAY,eAAe,OAAO,KAAK;AAC7C,cAAM,QAAQ,MAAM,IAAI,WAAW,GAAG;AACtC,YAAI,UAAU,UAAa,CAACA,mBAAkB,OAAO,MAAM,EAAG,OAAM,IAAI,MAAM,6BAA6B;AAC3G,YAAI,UAAU,OAAW,OAAM,IAAI,WAAW,KAAK,MAAM;AAAA,MAC3D,CAAC;AAAA,IACH;AAAA,EACF;AACA,SAAO;AAAA,IACL;AAAA,IAAY;AAAA,IAAS;AAAA,IAAS;AAAA,IAAM;AAAA,EACtC;AACF;;;AE7LA,SAAS,eAAAG,oBAAmB;AAC5B,SAAS,iBAAiB;AAC1B;AAAA,EACE;AAAA,EAAO;AAAA,EAAO;AAAA,OACT;AACP,SAAS,gBAAgB;AACzB,OAAO,UAAU;;;ACwEV,SAAS,cAAc,OAAwB;AACpD,SAAO,KAAK,UAAU,OAAO,gBAAgB;AAC/C;AAEA,SAAS,iBAAiB,MAAc,WAA6B;AACnE,SAAO,OAAO,cAAc,WACxB,EAAE,iBAAiB,UAAU,SAAS,EAAE,IACxC;AACN;;;ADlDA,SAAS,OAAU,OAAkB;AACnC,SAAO,KAAK,MAAM,OAAO,CAAC,MAAM,cAAuB;AACrD,WAAO,OAAO,cAAc,YAAY,cAAc,QAAQ,OAAO,KAAK,SAAS,EAAE,WAAW,KAC3F,qBAAqB,aAAa,OAAO,UAAU,oBAAoB,YACvE,uBAAuB,KAAK,UAAU,eAAe,IACtD,OAAO,UAAU,eAAe,IAChC;AAAA,EACN,CAAC;AACH;AACA,SAAS,cAAc,KAAsB;AAC3C,MAAI,CAAC,OAAO,cAAc,GAAG,KAAK,MAAM;AACtC,UAAM,IAAI,MAAM,gCAAgC;AAClD,MAAI;AACF,YAAQ,KAAK,KAAK,CAAC;AACnB,WAAO;AAAA,EACT,SAAS,OAAO;AACd,QAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,UAAU,SAAS,MAAM,SAAS;AACnF,aAAO;AACT,WAAO;AAAA,EACT;AACF;AACA,eAAsB,yBAAyB,SAAqE;AAClH,MAAI,QAAQ,SAAS,cAAc,QAAQ,SAAS,WAAW;AAC7D,UAAM,IAAI,MAAM,mDAAmD;AACrE,QAAM,OAAO,KAAK,QAAQ,QAAQ,IAAI;AACtC,QAAM,YAAY,KAAK,QAAQ,IAAI;AACnC,QAAM,MAAM,WAAW,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACvD,QAAM,WAAW,MAAM,MAAM,SAAS;AACtC,MAAI,CAAC,SAAS,YAAY,MAAM,SAAS,OAAO,QAAW;AACzD,UAAM,IAAI,MAAM,0EAA0E;AAC5F,QAAM,OAAO,MAAM,KAAK,MAAM,UAAU,UAAU,UAAU,SAAS,UAAU,YAAY,GAAK;AAChG,MAAI;AACF,UAAMC,YAAW,MAAM,KAAK,KAAK;AACjC,QAAI,CAACA,UAAS,OAAO,MAAMA,UAAS,OAAO,QAAW;AACpD,YAAM,IAAI,MAAM,6CAA6C;AAC/D,UAAM,KAAK,KAAK;AAAA,EAClB,UAAE;AACA,UAAM,KAAK,MAAM;AAAA,EACnB;AACA,QAAM,EAAE,aAAa,IAAI,MAAM,OAAO,aAAa;AACnD,QAAM,WAAW,IAAI,aAAa,IAAI;AACtC,QAAM,QAAQC,aAAY,EAAE,EAAE,SAAS,KAAK;AAC5C,MAAI,SAAS;AACb,MAAI,gBAAgB;AACpB,QAAM,cAAc,CAAI,SAAqB;AAC3C,QAAI;AACF,YAAM,IAAI,MAAM,2BAA2B;AAC7C,QAAI;AACF,aAAO,KAAK;AACd,aAAS,KAAK,iBAAiB;AAC/B,oBAAgB;AAChB,QAAI;AACF,YAAM,SAAS,KAAK;AACpB,UAAI,kBAAkB;AACpB,cAAM,IAAI,MAAM,kDAAkD;AACpE,eAAS,KAAK,QAAQ;AACtB,aAAO;AAAA,IACT,SAAS,OAAO;AACd,eAAS,KAAK,UAAU;AACxB,YAAM;AAAA,IACR,UAAE;AACA,sBAAgB;AAAA,IAClB;AAAA,EACF;AACA,MAAI;AACF,aAAS,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,KAMb;AACD,gBAAY,MAAM;AAChB,YAAM,QAAQ,SAAS,QAAQ,2DAA2D,EAAE,IAAI;AAChG,UAAI,UAAU,WAAc,MAAM,SAAS,SAAS,KAAK,cAAc,MAAM,GAAG,IAAI;AAClF,cAAM,IAAI,MAAM,kGAAkG;AAAA,MACpH;AACA,YAAM,UAAU,SAAS,QAAQ,qEAAqE,EAAE,IAAI,YAAY,UAAU;AAClI,UAAI,YAAY,UAAa,OAAO,QAAQ,KAAK,MAAM,QAAQ;AAC7D,cAAM,IAAI,MAAM,sCAAsC;AACxD,eAAS,QAAQ,6EAA6E,EAAE,IAAI,YAAY,YAAY,cAAc,QAAQ,QAAQ,CAAC;AAC3J,eAAS,QAAQ,4EAA4E,EAAE,IAAI,SAAS,GAAG,QAAQ,KAAK,KAAK;AAAA,IACnI,CAAC;AAAA,EACH,SAAS,OAAO;AACd,aAAS,MAAM;AACf,UAAM;AAAA,EACR;AACA,QAAM,OAAO,SAAS,QAAQ,qEAAqE;AACnG,QAAM,OAAO,SAAS,QAAQ,2EAA2E;AACzG,QAAM,QAAQ,SAAS,QAAQ,mIAAmI;AAClK,QAAM,SAAS,SAAS,QAAQ,6EAA6E;AAC7G,QAAM,SAAS,SAAS,QAAQ,+DAA+D;AAC/F,QAAM,aAAa,MAAM;AACvB,QAAI;AACF,YAAM,IAAI,MAAM,2BAA2B;AAAA,EAC/C;AACA,SAAO;AAAA,IACL;AAAA,IACA,IAAO,WAAmB,KAA4B;AACpD,iBAAW;AACX,YAAM,MAAM,KAAK,IAAI,WAAW,GAAG;AACnC,aAAO,QAAQ,SAAY,SAAY,OAAU,IAAI,KAAK;AAAA,IAC5D;AAAA,IACA,QAAW,WAAmB;AAC5B,iBAAW;AACX,aAAQ,KAAK,IAAI,SAAS,EAGrB,IAAI,UAAQ,EAAE,KAAK,IAAI,KAAK,OAAO,OAAU,IAAI,KAAK,EAAE,EAAE;AAAA,IACjE;AAAA,IACA,IAAI,WAAW,KAAK,OAAO;AACzB,iBAAW;AACX,YAAM,IAAI,WAAW,KAAK,cAAc,KAAK,CAAC;AAAA,IAChD;AAAA,IACA,OAAO,WAAW,KAAK,OAAO;AAC5B,iBAAW;AACX,aAAO,OAAO,IAAI,WAAW,KAAK,cAAc,KAAK,CAAC,EAAE,YAAY;AAAA,IACtE;AAAA,IACA,OAAO,WAAW,KAAK;AACrB,iBAAW;AACX,aAAO,IAAI,WAAW,GAAG;AAAA,IAC3B;AAAA,IACA;AAAA,IACA,QAAQ;AACN,UAAI;AACF;AACF,kBAAY,MAAM;AAChB,iBAAS,QAAQ,wDAAwD,EAAE,IAAI,KAAK;AAAA,MACtF,CAAC;AACD,eAAS,MAAM;AACf,eAAS;AAAA,IACX;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { Buffer } from 'node:buffer'\n\nimport type { FetchGetUrlFunc } from 'ethers'\n\nimport { publisherAbortScope } from './abort.ts'\nexport interface BoundedPublisherFetchOptions {\n  readonly maxConcurrency?: number\n  readonly maxResponseBytes?: number\n  readonly requestTimeoutMs?: number\n  readonly signal?: AbortSignal\n}\n/** Per-instance SDK transport: aborts the real request, including its body, without changing global fetch. */\nexport function createBoundedPublisherFetch(options: BoundedPublisherFetchOptions = {}) {\n  const owner = new AbortController()\n  const timeout = options.requestTimeoutMs ?? 10_000\n  const maximum = options.maxResponseBytes ?? 16 * 1024 * 1024\n  const concurrency = options.maxConcurrency ?? 16\n  if (!Number.isSafeInteger(timeout) || timeout < 100 || timeout > 60_000\n    || !Number.isSafeInteger(maximum) || maximum < 1 || maximum > 64 * 1024 * 1024\n    || !Number.isSafeInteger(concurrency) || concurrency < 1 || concurrency > 64)\n    throw new Error('Invalid publisher fetch limits')\n  const active = new Set<Promise<Response>>()\n  const nativeFetch = globalThis.fetch.bind(globalThis)\n  const fetchFn: typeof globalThis.fetch = (input, init) => {\n    if (active.size >= concurrency)\n      return Promise.reject(new Error('Publisher HTTP concurrency limit exceeded'))\n    const operation = (async () => {\n      const signals = [owner.signal,\n        ...(options.signal === undefined ? [] : [options.signal]),\n        ...(init?.signal == null ? [] : [init.signal]),\n        ...(input instanceof Request ? [input.signal] : [])]\n      const scope = publisherAbortScope(signals, timeout)\n      try {\n        scope.signal.throwIfAborted()\n        const response = await nativeFetch(input, {\n          ...init, redirect: 'error', signal: scope.signal,\n        })\n        if (response.body === null)\n          return response\n        const reader = response.body.getReader()\n        const chunks: Uint8Array[] = []\n        let size = 0\n        try {\n          for (;;) {\n            const chunk = await reader.read()\n            if (chunk.done)\n              break\n            const bytes: unknown = chunk.value\n            if (!(bytes instanceof Uint8Array)) throw new TypeError('Publisher HTTP body returned a non-byte chunk')\n            size += bytes.byteLength\n            if (size > maximum) {\n              await reader.cancel()\n              throw new Error('Publisher HTTP body exceeds its bound')\n            }\n            chunks.push(bytes)\n          }\n        } finally {\n          reader.releaseLock()\n        }\n        const headers = new Headers(response.headers)\n        headers.delete('content-encoding')\n        headers.delete('transfer-encoding')\n        headers.set('content-length', String(size))\n        return new Response(Buffer.concat(chunks), {\n          status: response.status, statusText: response.statusText, headers,\n        })\n      } finally {\n        scope.dispose()\n      }\n    })()\n    active.add(operation)\n    void operation.then(() => active.delete(operation), () => active.delete(operation))\n    return operation\n  }\n  return {\n    fetchFn,\n    async close() {\n      owner.abort()\n      await Promise.allSettled(active)\n    },\n    get activeRequests() {\n      return active.size\n    },\n  }\n}\n\n/** Ethers' documented per-request HTTP hook, without its unbounded Node body reader. */\nexport function createBoundedPublisherEthersTransport(options: BoundedPublisherFetchOptions = {}) {\n  const bounded = createBoundedPublisherFetch(options)\n  const getUrl: FetchGetUrlFunc = async (request, cancellation) => {\n    const controller = new AbortController()\n    cancellation?.addListener(() => controller.abort())\n    cancellation?.checkSignal()\n    const response = await bounded.fetchFn(request.url, {\n      body: request.body === null ? undefined : Buffer.from(request.body),\n      headers: request.headers,\n      method: request.method,\n      signal: controller.signal,\n    })\n    return {\n      body: new Uint8Array(await response.arrayBuffer()),\n      headers: Object.fromEntries(response.headers),\n      statusCode: response.status,\n      statusMessage: response.statusText,\n    }\n  }\n  return {\n    getUrl,\n    async close() { await bounded.close() },\n    get activeRequests() { return bounded.activeRequests },\n  }\n}\n", "import { clearTimeout, setTimeout } from 'node:timers'\n\n/** Own every listener/timer used by a bounded operation; disposal is mandatory. */\nexport function publisherAbortScope(signals: readonly AbortSignal[], timeoutMs?: number) {\n  const controller = new AbortController()\n  const abort = () => controller.abort()\n  const timer = timeoutMs === undefined ? undefined : setTimeout(abort, timeoutMs)\n  timer?.unref()\n  for (const signal of signals) {\n    if (signal.aborted) controller.abort()\n    else signal.addEventListener('abort', abort, { once: true })\n  }\n  return {\n    signal: controller.signal,\n    dispose() {\n      if (timer !== undefined) clearTimeout(timer)\n      for (const signal of signals) signal.removeEventListener('abort', abort)\n    },\n  }\n}\n", "import { isDeepStrictEqual } from 'node:util'\n\nimport { decryptWakeSubscription, sourceWakeFilterHash } from '@xyo-network/event-kit-protocol'\nimport type {\n  BestEffortDeliveryPolicy, EndpointChallengeResponse, WakeDeliveryMode,\n} from '@xyo-network/event-kit-schemas'\nimport { EndpointChallengeResponseZod } from '@xyo-network/event-kit-schemas'\nimport type { FinalizedSubscriptionTuple } from '@xyo-network/event-kit-statement-graph'\n\nimport type { PublisherEncryptionKeyCustody, PublisherHandshakeClient } from '../handshakeClients.ts'\nimport { publisherAbortScope } from './abort.ts'\nimport type { PublisherHttpsTransport } from './httpsTransport.ts'\nimport type {\n  PublisherRuntimeDiscovery, PublisherRuntimeDiscoveryStatus, PublisherRuntimeSubscription,\n} from './publisherRuntime.ts'\nimport type { SqlitePublisherState } from './sqlitePublisherState.ts'\ninterface PendingChallenge {\n  readonly challengeHash: string\n  readonly expiresAt: number\n  readonly response?: EndpointChallengeResponse\n  readonly subscriber: string\n  readonly subscription: string\n}\n/** Real D005 lifecycle discovery. Off-chain configuration never grants delivery authority. */\nexport function createPublisherHandshakeDiscovery(options: {\n  readonly authorizationChainId: string\n  readonly bestEffort?: BestEffortDeliveryPolicy\n  readonly client: PublisherHandshakeClient\n  readonly deliveryMode?: WakeDeliveryMode\n  readonly keys: PublisherEncryptionKeyCustody\n  readonly maxSubscriptions?: number\n  readonly nowSeconds?: () => number\n  readonly publisher: string\n  readonly serviceHash?: string\n  readonly state: SqlitePublisherState\n  readonly transport: PublisherHttpsTransport\n}): PublisherRuntimeDiscovery {\n  const clock = options.nowSeconds ?? (() => Math.floor(Date.now() / 1000))\n  const owner = new AbortController()\n  let accepting: Promise<void> | undefined\n  let viewing: ReturnType<PublisherHandshakeClient['subscriptions']> | undefined\n  let status: PublisherRuntimeDiscoveryStatus = {\n    authorizationChainId: options.authorizationChainId,\n    keyLoaded: false,\n    activeKeyIds: [],\n    pendingSubscriptions: 0,\n    rejectedSubscriptions: 0,\n    challengeFailures: 0,\n  }\n  function selectedTuple(tuple: FinalizedSubscriptionTuple): boolean {\n    return (options.serviceHash === undefined || tuple.service.objectHash === options.serviceHash)\n      && (options.deliveryMode === undefined || tuple.service.body.deliveryMode === options.deliveryMode)\n      && (options.deliveryMode === undefined || tuple.subscription.body.deliveryMode === options.deliveryMode)\n      && (options.deliveryMode === undefined || isDeepStrictEqual(tuple.service.body.bestEffort, options.bestEffort))\n  }\n  async function activeView(signal: AbortSignal) {\n    signal.throwIfAborted()\n    // A timed-out caller does not create a second SDK replay while the first\n    // remains in flight. The configured REST transport aborts actual reads.\n    viewing ??= (async () => {\n      try {\n        return await options.client.subscriptions()\n      } finally {\n        viewing = undefined\n      }\n    })()\n    const view = await viewing\n    signal.throwIfAborted()\n    if (!view.ok || view.indexedThrough !== view.finalizedHead)\n      throw new Error('Publisher subscription view is unavailable or stale')\n    status = {\n      ...status,\n      finalizedHead: view.finalizedHead,\n      indexedThrough: view.indexedThrough,\n      pendingSubscriptions: view.subscriptions.filter(item => item.state === 'pending' && item.tuples.some(selectedTuple)).length,\n      rejectedSubscriptions: view.rejections.length,\n    }\n    return view\n  }\n  async function acceptCandidate(subscriber: string, subscription: string, signal: AbortSignal) {\n    try {\n      let pending = options.state.get<PendingChallenge>('outbound-challenges', subscription)\n      if (pending !== undefined && pending.response === undefined && clock() >= pending.expiresAt)\n        pending = undefined\n      if (pending === undefined) {\n        const issued = await options.client.issueChallenge({\n          issuedAt: clock(), lifetimeSeconds: 300, subscriber: subscriber, subscription,\n        })\n        pending = {\n          challengeHash: issued.challengeHash, subscriber: subscriber, subscription, expiresAt: issued.challenge.expiresAt,\n        }\n        options.state.set('outbound-challenges', subscription, pending)\n      }\n      if (pending.response === undefined) {\n        const begun = await options.client.beginChallenge({ challengeHash: pending.challengeHash, nowSeconds: clock })\n        if (begun.kind !== 'started')\n          return\n        signal.throwIfAborted()\n        const response = await options.transport.post(begun.target.endpoint, begun.challenge, signal)\n        if (response.status !== 200)\n          throw new Error('Endpoint challenge was rejected')\n        pending = { ...pending, response: EndpointChallengeResponseZod.parse(response.body) }\n        options.state.set('outbound-challenges', subscription, pending)\n      }\n      signal.throwIfAborted()\n      const response = pending.response\n      if (response === undefined)\n        throw new Error('Endpoint proof is unavailable')\n      await options.client.completeChallengeAndAccept({\n        ...pending, response, nowSeconds: clock,\n      })\n    } catch {\n      if (signal.aborted)\n        return\n      const failures = options.state.get<number>('challenge-failures', subscription) ?? 0\n      options.state.set('challenge-failures', subscription, failures + 1)\n      const pending = options.state.get<PendingChallenge>('outbound-challenges', subscription)\n      if (pending !== undefined && clock() >= pending.expiresAt)\n        options.state.remove('outbound-challenges', subscription)\n    }\n  }\n\n  async function accept(signal: AbortSignal) {\n    signal.throwIfAborted()\n    const now = clock()\n    if (now < (options.state.get<number>('challenge-rate', 'next-pass') ?? 0))\n      return\n    options.state.set('challenge-rate', 'next-pass', now + 10)\n    const found = await options.client.acceptanceCandidates()\n    if (!found.ok)\n      throw new Error('Publisher acceptance candidates are unavailable')\n    const offset = options.state.get<number>('challenge-rate', 'offset') ?? 0\n    const candidates = found.candidates.filter(candidate => selectedTuple(candidate.tuple))\n    let attempted = 0\n    // Bound inspected candidates and rotate the starting point: four failed\n    // candidates must not permanently prevent the fifth from being challenged.\n    for (let index = 0; index < Math.min(candidates.length, 128) && attempted < 4; index += 1) {\n      const candidate = candidates[(offset + index) % candidates.length]\n      if (candidate === undefined)\n        break\n      options.state.set('challenge-rate', 'offset', (offset + index + 1) % candidates.length)\n      const next = options.state.get<number>('challenge-controller-rate', candidate.subscriber) ?? 0\n      if (now < next)\n        continue\n      options.state.set('challenge-controller-rate', candidate.subscriber, now + 30)\n      attempted += 1\n      signal.throwIfAborted()\n      await acceptCandidate(candidate.subscriber, candidate.tuple.subscription.objectHash, signal)\n    }\n  }\n  async function loadScopedKeys(view: Extract<Awaited<ReturnType<PublisherHandshakeClient['subscriptions']>>, { ok: true }>, active: typeof view.subscriptions) {\n    const scopedKeys = active.flatMap(item => item.tuples.filter(tuple => tuple.subscription.objectHash === item.selectedSubscription).map(tuple => ({\n      encryptionKey: tuple.subscription.body.encryptionKey, keyId: tuple.subscription.body.keyId, publisher: options.publisher,\n    })))\n    if (view.hasCurrentAdvertisement && (options.serviceHash === undefined || view.service.objectHash === options.serviceHash)\n      && (options.deliveryMode === undefined || view.service.body.deliveryMode === options.deliveryMode)) {\n      scopedKeys.push({\n        encryptionKey: view.key.objectHash, keyId: view.key.body.keyId, publisher: options.publisher,\n      })\n    }\n    const loadedKeys = await Promise.all(scopedKeys.map(async key => await options.keys.getPrivateKey(key)))\n    status = {\n      ...status,\n      keyLoaded: scopedKeys.length > 0 && loadedKeys.every(key => key !== undefined),\n      activeKeyIds: [...new Set(scopedKeys.map(key => key.keyId))],\n    }\n  }\n  return {\n    async discover(signal) {\n      const view = await activeView(signal)\n      const active = view.subscriptions.filter(item => item.state === 'active' && item.tuples.some(tuple => tuple.subscription.objectHash === item.selectedSubscription && selectedTuple(tuple)))\n      await loadScopedKeys(view, active)\n      if (active.length > (options.maxSubscriptions ?? 64))\n        throw new Error('Publisher active subscription limit exceeded')\n      const subscriptions: PublisherRuntimeSubscription[] = []\n      for (const lifecycle of active) {\n        if (lifecycle.state !== 'active' || lifecycle.activeFromBlock === undefined)\n          continue\n        try {\n          const tuple = lifecycle.tuples.find(item => item.subscription.objectHash === lifecycle.selectedSubscription)\n          if (tuple === undefined || !selectedTuple(tuple))\n            throw new Error('Active publisher subscription has no selected tuple')\n          const encrypted = tuple.subscription.body\n          if (encrypted.chainId !== options.authorizationChainId)\n            throw new Error('Subscription authorization chain mismatch')\n          const publisherKey = await options.keys.getPrivateKey({\n            encryptionKey: encrypted.encryptionKey, keyId: encrypted.keyId, publisher: options.publisher,\n          })\n          if (publisherKey === undefined)\n            throw new Error('Subscription encryption key is unavailable')\n          const plaintext = await decryptWakeSubscription({\n            publisherKey, subscriber: tuple.subscriber, subscription: encrypted,\n          })\n          options.transport.assertAllowed(plaintext.endpoint)\n          subscriptions.push({\n            subscriptionHash: tuple.subscription.objectHash,\n            serviceHash: tuple.service.objectHash,\n            deliveryMode: plaintext.filter.deliveryMode,\n            ...(plaintext.filter.bestEffort === undefined ? {} : { bestEffort: plaintext.filter.bestEffort }),\n            authorizationChainId: options.authorizationChainId,\n            controller: tuple.subscriber,\n            audience: plaintext.audience,\n            endpoint: plaintext.endpoint,\n            deploymentId: plaintext.deploymentId,\n            ...(plaintext.queueId === null ? {} : { queueId: plaintext.queueId }),\n            source: plaintext.filter.source,\n            fromPosition: plaintext.filter.fromPosition,\n            maxPositionsPerWake: plaintext.filter.maxPositionsPerWake,\n            filterHash: await sourceWakeFilterHash(plaintext.filter),\n          })\n        } catch {\n          // A malformed or locally disallowed endpoint cannot stop independent\n          // accepted subscribers. Durable pending work remains until a fresh\n          // authoritative check proves the subscription is inactive.\n          status = { ...status, rejectedSubscriptions: status.rejectedSubscriptions + 1 }\n        }\n      }\n      return subscriptions\n    },\n    async isActive(subscription, signal) {\n      const view = await activeView(signal)\n      return view.subscriptions.some(item => item.state === 'active' && item.selectedSubscription === subscription.subscriptionHash\n        && item.tuples.some(tuple => tuple.subscription.objectHash === subscription.subscriptionHash && tuple.subscriber === subscription.controller && selectedTuple(tuple)))\n    },\n    async acceptPending(signal) {\n      // A slow finality operation is shared across passes; timeout does not\n      // spawn another acceptance/signing operation against the same state.\n      if (accepting === undefined) {\n        const scope = publisherAbortScope([owner.signal, signal])\n        accepting = (async () => {\n          try {\n            await accept(scope.signal)\n          } finally {\n            scope.dispose()\n            accepting = undefined\n          }\n        })()\n      }\n      await accepting\n    },\n    async close() {\n      await Promise.allSettled([accepting, viewing].filter(item => item !== undefined))\n    },\n    status: () => ({ ...status, challengeFailures: options.state.entries<number>('challenge-failures').reduce((sum, item) => sum + item.value, 0) }),\n  }\n}\n", "import { Buffer } from 'node:buffer'\nimport { lookup } from 'node:dns/promises'\nimport { request } from 'node:https'\nimport { BlockList, isIP } from 'node:net'\n\nimport { z } from 'zod'\n\nimport { publisherAbortScope } from './abort.ts'\nimport { boundedPublisherOperation } from './sources.ts'\nconst OptionsZod = z.strictObject({\n  allowedEndpoints: z.array(z.url()).min(1).max(64),\n  endpointHeaders: z.array(z.strictObject({\n    endpoint: z.url(),\n    headers: z.strictObject({ 'x-vercel-protection-bypass': z.string().min(1).max(4096).regex(/^[\\u{21}-\\u{7E}]+$/u) }),\n  })).max(64).default([]),\n  maxResponseBytes: z.number().int().min(1).max(1_048_576).default(65_536),\n  requestTimeoutMs: z.number().int().min(100).max(60_000).default(10_000),\n})\nexport interface PublisherHttpsTransportOptions {\n  /** Exact public HTTPS destinations approved by the operator, including their path. */\n  readonly allowedEndpoints: readonly string[]\n  /** Private operator-provisioned Vercel automation credential, bound to one exact destination. */\n  readonly endpointHeaders?: readonly { readonly endpoint: string; readonly headers: Readonly<Record<string, string>> }[]\n  readonly maxResponseBytes?: number\n  readonly requestTimeoutMs?: number\n}\nexport interface PublisherHttpsResponse {\n  readonly body: unknown\n  readonly retryAfterMs?: number\n  readonly status: number\n}\nexport interface PublisherHttpsTransport {\n  assertAllowed(endpoint: string): void\n  post(endpoint: string, body: unknown, signal: AbortSignal, jwt?: string): Promise<PublisherHttpsResponse>\n}\nconst NON_PUBLIC_IPV4_SUBNETS = [\n  ['0.0.0.0', 8],\n  ['10.0.0.0', 8],\n  ['100.64.0.0', 10],\n  ['127.0.0.0', 8],\n  ['169.254.0.0', 16],\n  ['172.16.0.0', 12],\n  ['192.0.0.0', 24],\n  ['192.0.2.0', 24],\n  ['192.88.99.0', 24],\n  ['192.168.0.0', 16],\n  ['198.18.0.0', 15],\n  ['198.51.100.0', 24],\n  ['203.0.113.0', 24],\n  ['224.0.0.0', 4],\n  ['240.0.0.0', 4],\n] as const\nconst NON_PUBLIC_IPV6_SUBNETS = [\n  ['2001::', 23], ['2001:db8::', 32], ['2002::', 16], ['3fff::', 20],\n] as const\n\ninterface PublisherAddressPolicy {\n  readonly globalIpv6: BlockList\n  readonly nonPublicIpv4: BlockList\n  readonly nonPublicIpv6: BlockList\n}\n\nlet publisherAddressPolicy: PublisherAddressPolicy | undefined\n\nfunction loadPublisherAddressPolicy(): PublisherAddressPolicy {\n  if (publisherAddressPolicy !== undefined) return publisherAddressPolicy\n  const nonPublicIpv4 = new BlockList()\n  for (const [address, prefix] of NON_PUBLIC_IPV4_SUBNETS) {\n    nonPublicIpv4.addSubnet(address, prefix, 'ipv4')\n  }\n  const globalIpv6 = new BlockList()\n  globalIpv6.addSubnet('2000::', 3, 'ipv6')\n  const nonPublicIpv6 = new BlockList()\n  for (const [address, prefix] of NON_PUBLIC_IPV6_SUBNETS) {\n    nonPublicIpv6.addSubnet(address, prefix, 'ipv6')\n  }\n  publisherAddressPolicy = {\n    globalIpv6, nonPublicIpv4, nonPublicIpv6,\n  }\n  return publisherAddressPolicy\n}\n\n/** Conservative public-unicast policy, with numeric subnet checks for every IPv6 spelling. */\nexport function isPublicPublisherAddress(address: string): boolean {\n  const policy = loadPublisherAddressPolicy()\n  return isIP(address) === 4\n    ? !policy.nonPublicIpv4.check(address, 'ipv4')\n    : isIP(address) === 6 && policy.globalIpv6.check(address, 'ipv6') && !policy.nonPublicIpv6.check(address, 'ipv6')\n}\nexport function createPublisherHttpsTransport(input: PublisherHttpsTransportOptions): PublisherHttpsTransport {\n  const parsed = OptionsZod.safeParse(input)\n  if (!parsed.success) throw new Error('Invalid publisher HTTPS transport configuration')\n  const options = parsed.data\n  const allowed = new Set(options.allowedEndpoints.map((endpoint) => {\n    const url = new URL(endpoint)\n    if (url.href !== endpoint || url.protocol !== 'https:' || (url.port !== '' && url.port !== '443')\n      || url.username !== '' || url.password !== '' || url.hash !== '')\n      throw new Error('Publisher destinations must be canonical public HTTPS URLs on port 443')\n    const literal = url.hostname.replaceAll(/^\\[|\\]$/gu, '')\n    if (isIP(literal) !== 0 && !isPublicPublisherAddress(literal))\n      throw new Error('Publisher destination is not public')\n    if (url.hostname === 'localhost' || url.hostname.endsWith('.localhost') || url.hostname.endsWith('.local'))\n      throw new Error('Publisher destination is not public')\n    return endpoint\n  }))\n  const assertAllowed = (endpoint: string) => {\n    if (!allowed.has(endpoint))\n      throw new Error('Publisher destination is not explicitly allowed')\n  }\n  const endpointHeaders = new Map<string, Readonly<Record<string, string>>>()\n  for (const entry of options.endpointHeaders) {\n    assertAllowed(entry.endpoint)\n    if (endpointHeaders.has(entry.endpoint)) throw new Error('Duplicate publisher endpoint header configuration')\n    endpointHeaders.set(entry.endpoint, entry.headers)\n  }\n  return {\n    assertAllowed,\n    async post(endpoint, body, signal, jwt) {\n      assertAllowed(endpoint)\n      signal.throwIfAborted()\n      const url = new URL(endpoint)\n      const scope = publisherAbortScope([signal], options.requestTimeoutMs)\n      const combined = scope.signal\n      try {\n        const addresses = await boundedPublisherOperation(lookup(url.hostname.replaceAll(/^\\[|\\]$/gu, ''), { all: true, verbatim: true }), combined, options.requestTimeoutMs)\n        combined.throwIfAborted()\n        if (addresses.length === 0 || addresses.some(item => !isPublicPublisherAddress(item.address)))\n          throw new Error('Publisher DNS answer includes a non-public address')\n        const selected = addresses[0]\n        if (selected === undefined)\n          throw new Error('Publisher DNS lookup was empty')\n        const encoded = Buffer.from(JSON.stringify(body))\n        if (encoded.byteLength > 65_536)\n          throw new Error('Publisher request body is too large')\n        return await new Promise<PublisherHttpsResponse>((resolve, reject) => {\n          const call = request(url, {\n            agent: false,\n            headers: {\n              ...endpointHeaders.get(endpoint),\n              'content-length': encoded.byteLength,\n              'content-type': 'application/json',\n              ...(jwt === undefined ? {} : { authorization: `Bearer ${jwt}` }),\n            },\n            lookup(_hostname, lookupOptions, callback) {\n              // Pin the validated DNS answer for this connection; TLS still validates\n              // the original hostname. No second resolver can rebind to a private IP.\n              if (lookupOptions.all)\n                callback(null, [{ address: selected.address, family: selected.family }])\n              else\n                callback(null, selected.address, selected.family)\n            },\n            method: 'POST',\n            rejectUnauthorized: true,\n            signal: combined,\n          }, (response) => {\n            const status = response.statusCode ?? 500\n            if (status >= 300 && status < 400) {\n              response.destroy()\n              reject(new Error('Publisher HTTPS redirects are forbidden'))\n              return\n            }\n            let size = 0\n            const chunks: Buffer[] = []\n            response.on('data', (chunk: Buffer) => {\n              size += chunk.byteLength\n              if (size > options.maxResponseBytes) {\n                response.destroy()\n                reject(new Error('Publisher HTTPS response is too large'))\n              } else\n                chunks.push(chunk)\n            })\n            response.on('error', () => reject(new Error('Publisher HTTPS response failed')))\n            response.on('end', () => {\n              try {\n                const responseBody: unknown = size === 0 ? null : JSON.parse(Buffer.concat(chunks).toString('utf8'))\n                const retry = Number(response.headers['retry-after'])\n                resolve({\n                  status, body: responseBody, ...(Number.isFinite(retry) && retry > 0 ? { retryAfterMs: Math.min(retry * 1000, 3_600_000) } : {}),\n                })\n              } catch {\n                reject(new Error('Publisher HTTPS response is not JSON'))\n              }\n            })\n          })\n          call.on('error', () => reject(new Error('Publisher HTTPS request failed')))\n          call.end(encoded)\n        })\n      } finally {\n        scope.dispose()\n      }\n    },\n  }\n}\n", "import { createHash } from 'node:crypto'\n\nimport { canonicalJson } from '@xyo-network/event-kit-protocol'\nimport type { WakeSource } from '@xyo-network/event-kit-schemas'\nimport { completedUtcIntervalPosition, WakeSourceZod } from '@xyo-network/event-kit-schemas'\nimport { PayloadBuilder } from '@xyo-network/sdk'\nimport type { XyoGateway } from '@xyo-network/xl1-sdk'\nimport { asXL1BlockNumber } from '@xyo-network/xl1-sdk'\nimport { FetchRequest, JsonRpcProvider } from 'ethers'\n\nimport { publisherAbortScope } from './abort.ts'\nimport { createBoundedPublisherEthersTransport } from './boundedFetch.ts'\nexport interface PublisherSourceHead {\n  readonly hash?: string\n  readonly position: number\n}\nexport interface PublisherSourceReader {\n  readonly source: WakeSource\n  close?(): void | Promise<void>\n  head(signal: AbortSignal): Promise<PublisherSourceHead>\n}\nexport function publisherSourceKey(source: WakeSource): string {\n  return createHash('sha256').update(canonicalJson(WakeSourceZod.parse(source))).digest('hex')\n}\nexport async function boundedPublisherOperation<T>(operation: Promise<T>, signal: AbortSignal, timeoutMs = 10_000): Promise<T> {\n  const scope = publisherAbortScope([signal], timeoutMs)\n  const combined = scope.signal\n  let rejectAbort: (() => void) | undefined\n  const aborted = new Promise<never>((_resolve, reject) => {\n    rejectAbort = () => reject(new Error('Publisher operation aborted or timed out'))\n    combined.addEventListener('abort', rejectAbort, { once: true })\n  })\n  try {\n    combined.throwIfAborted()\n    return await Promise.race([operation, aborted])\n  } finally {\n    if (rejectAbort !== undefined)\n      combined.removeEventListener('abort', rejectAbort)\n    scope.dispose()\n  }\n}\ntype GatewayViewer = NonNullable<XyoGateway['connection']['viewer']>\nexport function createXl1PublisherSource(options: {\n  readonly source: Extract<WakeSource, {\n    kind: 'xl1-finalized'\n  }>\n  readonly viewer: Pick<GatewayViewer, 'block' | 'chainId' | 'finalization'>\n}): PublisherSourceReader {\n  const source = WakeSourceZod.parse(options.source)\n  if (source.kind !== 'xl1-finalized')\n    throw new Error('Expected an XL1 finalized source')\n  return {\n    source,\n    async head(signal) {\n      const chainId = String(await boundedPublisherOperation(Promise.resolve(options.viewer.chainId()), signal))\n      if (chainId !== source.chainId)\n        throw new Error('XL1 source chain identity changed')\n      const position = Number(await boundedPublisherOperation(Promise.resolve(options.viewer.finalization.headNumber()), signal))\n      if (!Number.isSafeInteger(position) || position < 0)\n        throw new Error('XL1 finalized head is invalid')\n      const block = await boundedPublisherOperation(Promise.resolve(options.viewer.block.blockByNumber(asXL1BlockNumber(position, true))), signal)\n      if (block?.[0].block !== position || !/^[0-9a-f]{64}$/u.test(block[0]._hash)) {\n        throw new Error('XL1 finalized head block is unavailable or inconsistent')\n      }\n      if (String(block[0].chain) !== source.chainId || await PayloadBuilder.hash(block[0]) !== block[0]._hash) {\n        throw new Error('XL1 finalized head block chain or hash is inconsistent')\n      }\n      return { position, hash: block[0]._hash }\n    },\n  }\n}\nexport function createEthereumFinalizedPublisherSource(options: {\n  readonly requestTimeoutMs?: number\n  readonly rpcUrl: string\n  readonly source: Extract<WakeSource, {\n    kind: 'ethereum-finalized'\n  }>\n}): PublisherSourceReader {\n  const source = WakeSourceZod.parse(options.source)\n  if (source.kind !== 'ethereum-finalized')\n    throw new Error('Expected an Ethereum finalized source')\n  const { chainId, genesisHash } = source\n  const url = new URL(options.rpcUrl)\n  if (url.protocol !== 'https:' || url.username !== '' || url.password !== '' || url.hash !== '') {\n    throw new Error('Ethereum source RPC must use HTTPS without URL credentials or fragments')\n  }\n  const connection = new FetchRequest(url.href)\n  connection.timeout = options.requestTimeoutMs ?? 10_000\n  const transport = createBoundedPublisherEthersTransport({\n    requestTimeoutMs: options.requestTimeoutMs, maxResponseBytes: 2 * 1024 * 1024, maxConcurrency: 8,\n  })\n  connection.getUrlFunc = transport.getUrl\n  connection.setThrottleParams({ maxAttempts: 1 })\n  const provider = new JsonRpcProvider(connection, undefined, { batchMaxCount: 1, cacheTimeout: -1 })\n  let reading: Promise<PublisherSourceHead> | undefined\n  let closed = false\n  let closing: Promise<void> | undefined\n  const close = () => closing ??= (async () => {\n    closed = true\n    provider.destroy()\n    await transport.close()\n  })()\n  const onAbort = () => {\n    void close()\n  }\n  async function read() {\n    const requests = [provider.getNetwork(), provider.getBlock(0), provider.getBlock('finalized')] as const\n    // A failing sibling request cannot release the single-flight slot while\n    // another request still owns a connection or a bounded response body.\n    try {\n      const [network, genesis, block] = await Promise.all(requests)\n      if (network.chainId.toString() !== chainId || genesis?.hash?.slice(2).toLowerCase() !== genesisHash) {\n        throw new Error('Ethereum source chain identity mismatch')\n      }\n      if (block?.hash === null || block === null || !/^0x[0-9a-fA-F]{64}$/u.test(block.hash)\n        || !Number.isSafeInteger(block.number) || block.number < 0) throw new Error('Ethereum finalized head is unavailable')\n      return { position: block.number, hash: block.hash.slice(2).toLowerCase() }\n    } catch (error) {\n      await Promise.allSettled(requests)\n      throw error\n    }\n  }\n  return {\n    source,\n    close,\n    async head(signal) {\n      signal.throwIfAborted()\n      if (closed) throw new Error('Ethereum source is closed')\n      signal.addEventListener('abort', onAbort, { once: true })\n      reading ??= (async () => {\n        try {\n          return await read()\n        } finally {\n          reading = undefined\n        }\n      })()\n      try {\n        return await boundedPublisherOperation(reading, signal, options.requestTimeoutMs ?? 10_000)\n      } finally {\n        signal.removeEventListener('abort', onAbort)\n      }\n    },\n  }\n}\n\nexport function createUtcIntervalPublisherSource(options: {\n  readonly nowSeconds?: () => number\n  readonly source: Extract<WakeSource, {\n    kind: 'utc-interval'\n  }>\n}): PublisherSourceReader {\n  const source = WakeSourceZod.parse(options.source)\n  if (source.kind !== 'utc-interval')\n    throw new Error('Expected a UTC interval source')\n  const nowSeconds = options.nowSeconds ?? (() => Math.floor(Date.now() / 1000))\n  return {\n    source,\n    async head(signal) {\n      signal.throwIfAborted()\n      const now = nowSeconds()\n      if (!Number.isSafeInteger(now) || now < 0)\n        throw new Error('UTC interval clock is invalid')\n      return { position: completedUtcIntervalPosition(source, now) ?? -1 }\n    },\n  }\n}\n", "import { isDeepStrictEqual } from 'node:util'\n\nimport type { PeriodicActorParams, PeriodicPassContext } from '@ariestools/actor'\nimport { createMemoryLocator, PeriodicActor } from '@ariestools/actor'\nimport { creatable } from '@ariestools/sdk'\nimport { BestEffortAdmissionAcknowledgmentZod } from '@xyo-network/event-kit-protocol'\nimport type {\n  BestEffortDeliveryPolicy, WakeDeliveryMode, WakeEnvelope, WakeSource,\n} from '@xyo-network/event-kit-schemas'\nimport { BestEffortDeliveryPolicyZod, WakeDeliveryModeZod } from '@xyo-network/event-kit-schemas'\nimport type { AccountInstance } from '@xyo-network/sdk'\nimport { z } from 'zod'\n\nimport { publisherAbortScope } from './abort.ts'\nimport type { PublisherHttpsTransport } from './httpsTransport.ts'\nimport type { DeliveryState } from './publisherDeliveryState.ts'\nimport {\n  assertDeliveryState, DeliveryResponseError, failedDelivery, makeEvent, prepareBestEffortDelivery,\n} from './publisherDeliveryState.ts'\nimport type { PublisherSourceHead, PublisherSourceReader } from './sources.ts'\nimport { boundedPublisherOperation, publisherSourceKey } from './sources.ts'\nimport { createAccountSourceWakeSigner } from './sourceSigner.ts'\nimport type { SqlitePublisherState } from './sqlitePublisherState.ts'\nexport interface PublisherRuntimeSubscription {\n  readonly audience: string\n  readonly authorizationChainId: string\n  readonly bestEffort?: BestEffortDeliveryPolicy\n  readonly controller: string\n  readonly deliveryMode: WakeDeliveryMode\n  readonly deploymentId: string\n  readonly endpoint: string\n  readonly filterHash: string\n  readonly fromPosition: number\n  readonly maxPositionsPerWake: number\n  readonly queueId?: string\n  readonly serviceHash?: string\n  readonly source: WakeSource\n  readonly subscriptionHash: string\n}\n/** Discovery MUST return only current finalized, accepted subscriptions. */\nexport interface PublisherRuntimeDiscovery {\n  acceptPending?(signal: AbortSignal): Promise<void>\n  close?(): Promise<void>\n  discover(signal: AbortSignal): Promise<readonly PublisherRuntimeSubscription[]>\n  /** Re-check the exact current revision before each attempt, including retries. */\n  isActive(subscription: PublisherRuntimeSubscription, signal: AbortSignal): Promise<boolean>\n  status?(): PublisherRuntimeDiscoveryStatus\n}\nexport interface PublisherRuntimeDiscoveryStatus {\n  readonly activeKeyIds: readonly string[]\n  readonly authorizationChainId: string\n  readonly challengeFailures: number\n  readonly finalizedHead?: number\n  readonly indexedThrough?: number\n  readonly keyLoaded: boolean\n  readonly pendingSubscriptions: number\n  readonly rejectedSubscriptions: number\n}\nfunction activationReady(status?: PublisherRuntimeDiscoveryStatus): boolean {\n  return (status?.keyLoaded ?? true) && (status?.pendingSubscriptions ?? 0) === 0\n}\n\nexport interface PersistentEventPublisherOptions {\n  readonly account: AccountInstance\n  readonly bestEffort?: BestEffortDeliveryPolicy\n  readonly concurrency?: number\n  readonly deliveryMode: WakeDeliveryMode\n  readonly discovery: PublisherRuntimeDiscovery\n  readonly intervalMs?: number\n  readonly maxSubscriptions?: number\n  readonly nowSeconds?: () => number\n  readonly publisher: string\n  readonly requestTimeoutMs?: number\n  /** Optional immutable operator pin; mismatches fail readiness without revoking subscriptions. */\n  readonly serviceHash?: string\n  readonly sources: readonly PublisherSourceReader[]\n  readonly state: SqlitePublisherState\n  readonly transport: PublisherHttpsTransport\n}\nexport interface PersistentEventPublisherStatus {\n  readonly abandoned: number\n  readonly activeSubscriptions: number\n  readonly bestEffort?: BestEffortDeliveryPolicy\n  readonly clockHealthy: boolean\n  readonly degraded: boolean\n  readonly delivered: number\n  readonly deliveryMode: WakeDeliveryMode\n  readonly failures: number\n  readonly handshake?: PublisherRuntimeDiscoveryStatus\n  readonly lastError?: string\n  readonly passes: number\n  readonly pendingDeliveries: number\n  readonly publisher: string\n  readonly ready: boolean\n  readonly running: boolean\n  readonly sources: readonly {\n    readonly hash?: string\n    readonly id: string\n    readonly position: number\n  }[]\n  readonly subscriptions: readonly {\n    readonly attempts?: number\n    readonly cursor: number\n    readonly failures: number\n    readonly id: string\n    /** Best Effort admission target is not a contiguous source prefix. */\n    readonly lastAdmissionTarget?: number\n    readonly lastHintAt?: number\n    readonly pending: boolean\n    readonly state: string\n  }[]\n  readonly superseded: number\n  readonly totalAttempts: number\n}\nexport interface PersistentEventPublisher {\n  runOnce(): Promise<void>\n  start(): Promise<void>\n  status(): PersistentEventPublisherStatus\n  stop(): Promise<void>\n}\ninterface RuntimeActorParams extends PeriodicActorParams {\n  readonly tick: (signal: AbortSignal) => Promise<void>\n}\n@creatable()\nclass PublisherRuntimeActor extends PeriodicActor<RuntimeActorParams> {\n  protected override async runPass(context: PeriodicPassContext): Promise<void> {\n    await this.params.tick(context.signal)\n  }\n}\nconst TimingZod = z.object({\n  concurrency: z.number().int().min(1).max(32).default(4),\n  intervalMs: z.number().int().min(100).max(60_000).default(1000),\n  maxSubscriptions: z.number().int().min(1).max(1024).default(64),\n  requestTimeoutMs: z.number().int().min(100).max(60_000).default(10_000),\n})\n\nfunction runtimeSettings(options: PersistentEventPublisherOptions) {\n  const deliveryMode = WakeDeliveryModeZod.parse(options.deliveryMode)\n  const bestEffort = options.bestEffort === undefined ? undefined : BestEffortDeliveryPolicyZod.parse(options.bestEffort)\n  if ((deliveryMode === 'best-effort') !== (bestEffort !== undefined)) throw new TypeError('Explicit delivery mode requires its exact policy')\n  return {\n    bestEffort,\n    deliveryMode,\n    deliveryNamespace: deliveryMode === 'best-effort' ? 'best-effort-deliveries' : 'deliveries',\n    timing: TimingZod.parse(options),\n  }\n}\nexport async function createPersistentEventPublisherRuntime(options: PersistentEventPublisherOptions): Promise<PersistentEventPublisher> {\n  const {\n    bestEffort, deliveryMode, deliveryNamespace, timing,\n  } = runtimeSettings(options)\n  if (options.sources.length < 1 || options.sources.length > 16)\n    throw new Error('Publisher requires between one and sixteen bounded sources')\n  const clock = options.nowSeconds ?? (() => Math.floor(Date.now() / 1000))\n  const signer = createAccountSourceWakeSigner({\n    account: options.account, publisher: options.publisher, nowSeconds: clock,\n  })\n  const sourceReaders = new Map(options.sources.map(reader => [publisherSourceKey(reader.source), reader]))\n  if (sourceReaders.size !== options.sources.length)\n    throw new Error('Duplicate publisher source identity')\n  const state = options.state\n  const existingMode = state.get<string>('metadata', 'runtime-delivery-mode')\n  if (existingMode !== undefined && existingMode !== deliveryMode) throw new Error('Publisher state delivery mode mismatch; preserve custody and use an explicitly qualified state binding')\n  state.set('metadata', 'runtime-delivery-mode', deliveryMode)\n  const abort = new AbortController()\n  const seenThisProcess = new Set<string>()\n  let running = false\n  let ready = false\n  let clockHealthy = true\n  let passes = 0\n  let lastError: string | undefined\n  let sourcesHealthy = false\n  let stop: Promise<void> | undefined\n  const timed = <T>(promise: Promise<T>, signal: AbortSignal) => boundedPublisherOperation(promise, signal, timing.requestTimeoutMs)\n  function loadDelivery(subscription: PublisherRuntimeSubscription, now: number): DeliveryState {\n    if (subscription.deliveryMode !== deliveryMode || !isDeepStrictEqual(subscription.bestEffort, bestEffort))\n      throw new Error('Subscription delivery mode or policy disagrees with runtime')\n    if (deliveryMode === 'best-effort' && (subscription.maxPositionsPerWake !== 1 || subscription.serviceHash === undefined)) throw new Error('Best Effort requires point range')\n    if (options.serviceHash !== undefined && subscription.serviceHash !== options.serviceHash)\n      throw new Error('Subscription does not match the configured exact service descriptor')\n    const key = subscription.subscriptionHash\n    if (deliveryMode === 'best-effort' && state.get(deliveryNamespace, key) === undefined\n      && state.entries(deliveryNamespace).length >= timing.maxSubscriptions) throw new Error('Best Effort state capacity exceeded; live records are not evicted')\n    let record = state.get<DeliveryState>(deliveryNamespace, key)\n    if (record === undefined) {\n      makeEvent(subscription, subscription.fromPosition, subscription.fromPosition, now, '0'.repeat(32))\n      if (!Number.isSafeInteger(subscription.maxPositionsPerWake) || subscription.maxPositionsPerWake < 1 || subscription.maxPositionsPerWake > 4096) {\n        throw new Error('Invalid source range budget')\n      }\n      record = {\n        subscription, cursor: subscription.fromPosition - 1, delivered: 0, failures: 0, nextAttemptMs: 0, state: 'active',\n      }\n      state.set(deliveryNamespace, key, record)\n    }\n    assertDeliveryState(record, subscription)\n    return record\n  }\n\n  function prepareDelivery(record: DeliveryState, now: number, heads: ReadonlyMap<string, PublisherSourceHead | Error>) {\n    if (deliveryMode === 'best-effort' && bestEffort !== undefined) {\n      const first = !seenThisProcess.has(record.subscription.subscriptionHash)\n      const head = heads.get(publisherSourceKey(record.subscription.source))\n      if (head !== undefined && !(head instanceof Error) && head.position >= record.subscription.fromPosition)\n        seenThisProcess.add(record.subscription.subscriptionHash)\n      return prepareBestEffortDelivery({\n        bestEffort, first, heads, now, record, state,\n      })\n    }\n    if (record.pending !== undefined) return { ...record, pending: record.pending }\n    const subscription = record.subscription\n    const head = heads.get(publisherSourceKey(subscription.source))\n    if (head === undefined || head instanceof Error) throw new Error('Configured source is unavailable')\n    if (head.position <= record.cursor) return\n    const fromPosition = record.cursor + 1\n    const pending = makeEvent(subscription, fromPosition, Math.min(head.position, fromPosition + subscription.maxPositionsPerWake - 1), now)\n    const prepared = { ...record, pending }\n    state.transaction(() => {\n      const logicalKey = JSON.stringify([subscription.subscriptionHash, pending.fromPosition, pending.toPosition])\n      if (!state.insert('delivery-events', logicalKey, pending)) throw new Error('Publisher logical range already exists outside its contiguous cursor')\n      state.set(deliveryNamespace, subscription.subscriptionHash, prepared)\n    })\n    return prepared\n  }\n\n  async function stillActive(record: DeliveryState, signal: AbortSignal): Promise<boolean> {\n    if (await timed(options.discovery.isActive(record.subscription, signal), signal)) return true\n    state.set(deliveryNamespace, record.subscription.subscriptionHash, {\n      ...record, pending: undefined, state: 'cancelled',\n    })\n    return false\n  }\n\n  function acknowledgeBestEffort(record: DeliveryState & { readonly pending: WakeEnvelope }, body: unknown, eventHash: string, signal: AbortSignal, now: number) {\n    const { pending, subscription } = record\n    const acknowledgment = BestEffortAdmissionAcknowledgmentZod.safeParse(body)\n    if (!acknowledgment.success || acknowledgment.data.eventHash !== eventHash || acknowledgment.data.wakeId !== pending.wakeId\n      || acknowledgment.data.expiresAt !== pending.issuedAt + (bestEffort?.maxHintAgeSeconds ?? 0) + 60\n      || acknowledgment.data.acceptedAt < pending.issuedAt - 60 || acknowledgment.data.acceptedAt > now + 60)\n      throw new Error('Publisher did not receive a matching finite acknowledgment')\n    signal.throwIfAborted()\n    state.set(deliveryNamespace, subscription.subscriptionHash, {\n      subscription,\n      cursor: pending.toPosition,\n      delivered: record.delivered + 1,\n      failures: 0,\n      attempts: 0,\n      superseded: record.superseded ?? 0,\n      abandoned: record.abandoned ?? 0,\n      totalAttempts: (record.totalAttempts ?? 0) + 1,\n      lastNotifiedAt: now,\n      lastHintAt: pending.issuedAt,\n      lastHintTarget: pending.toPosition,\n      nextAttemptMs: 0,\n      state: 'active',\n    } satisfies DeliveryState)\n  }\n\n  async function sendDelivery(record: DeliveryState & { readonly pending: WakeEnvelope }, signal: AbortSignal, now: number) {\n    const { pending, subscription } = record\n    signal.throwIfAborted()\n    const signed = await signer.sign(pending, subscription.audience)\n    signal.throwIfAborted()\n    const attempt = deliveryMode === 'best-effort' ? record.attempts ?? 0 : state.get<{ count: number }>('delivery-attempts', pending.wakeId)?.count ?? 0\n    if (deliveryMode === 'best-effort') state.set(deliveryNamespace, subscription.subscriptionHash, {\n      ...record, attempts: attempt + 1, totalAttempts: (record.totalAttempts ?? 0) + 1,\n    })\n    else state.set('delivery-attempts', pending.wakeId, {\n      count: attempt + 1, startedAt: now, status: 'in-flight',\n    })\n    const response = await options.transport.post(subscription.endpoint, signed.event, signal, signed.jwt)\n    if (deliveryMode === 'durable') state.set('delivery-attempts', pending.wakeId, {\n      count: attempt + 1, startedAt: now, status: response.status,\n    })\n    if (response.status !== 200 && response.status !== 202) throw new DeliveryResponseError(response.status, response.retryAfterMs)\n    if (deliveryMode === 'best-effort') {\n      acknowledgeBestEffort(record, response.body, signed.eventHash, signal, now)\n      return\n    }\n    const receipt = z.object({ receiptId: z.string().min(1), wakeId: z.literal(pending.wakeId) }).safeParse(response.body)\n    if (!receipt.success) throw new Error('Publisher admission did not return a matching durable receipt')\n    signal.throwIfAborted()\n    // Receipt, contiguous cursor, and outbox clear commit together. A lost\n    // response or death before this transaction reuses the exact pending body.\n    state.transaction(() => {\n      state.set('delivery-receipts', pending.wakeId, { receiptId: receipt.data.receiptId, receivedAt: now })\n      state.set(deliveryNamespace, subscription.subscriptionHash, {\n        subscription,\n        cursor: pending.toPosition,\n        delivered: record.delivered + 1,\n        failures: 0,\n        nextAttemptMs: 0,\n        state: 'active',\n      } satisfies DeliveryState)\n    })\n  }\n\n  async function deliver(subscription: PublisherRuntimeSubscription, signal: AbortSignal, now: number, heads: ReadonlyMap<string, PublisherSourceHead | Error>) {\n    let record = loadDelivery(subscription, now)\n    if (deliveryMode === 'durable' && (record.state !== 'active' || record.nextAttemptMs > now * 1000)) return\n    try {\n      if (!await stillActive(record, signal)) return\n      options.transport.assertAllowed(subscription.endpoint)\n      if (!sourceReaders.has(publisherSourceKey(subscription.source))) throw new Error('Subscription source is not configured')\n      const prepared = prepareDelivery(record, now, heads)\n      if (prepared === undefined) return\n      record = prepared\n      if (record.nextAttemptMs > now * 1000) return\n      // Reconcile once more after observing source progress, before every attempt.\n      if (!await stillActive(record, signal)) return\n      await sendDelivery(prepared, signal, now)\n    } catch (error) {\n      if (signal.aborted) return\n      state.set(\n        deliveryNamespace,\n        subscription.subscriptionHash,\n        failedDelivery(record, state.get<DeliveryState>(deliveryNamespace, subscription.subscriptionHash), deliveryMode, error, now),\n      )\n    }\n  }\n  async function readSources(signal: AbortSignal): Promise<ReadonlyMap<string, PublisherSourceHead | Error>> {\n    const heads = new Map<string, PublisherSourceHead | Error>()\n    const results = await Promise.allSettled([...sourceReaders].map(async ([key, reader]) => {\n      const head = await timed(reader.head(signal), signal)\n      if (!Number.isSafeInteger(head.position) || head.position < -1)\n        throw new Error('Source head is invalid')\n      const previous = state.get<PublisherSourceHead>('source-heads', key)\n      if (previous !== undefined && (head.position < previous.position || (head.position === previous.position && head.hash !== previous.hash))) {\n        throw new Error('Finalized source regressed or changed hash')\n      }\n      signal.throwIfAborted()\n      state.set('source-heads', key, head)\n      heads.set(key, head)\n    }))\n    sourcesHealthy = results.every(item => item.status === 'fulfilled')\n    // All rejections are inspected; delivery sees an unavailable source without\n    // exposing provider URLs or allowing one source to deny another service.\n    for (const [index, result] of results.entries())\n      if (result.status === 'rejected') {\n        const key = sourceReaders.keys().toArray()[index]\n        if (key !== undefined)\n          heads.set(key, new Error('Source read failed'))\n      }\n    return heads\n  }\n  async function reconcileDeliveries(subscriptions: readonly PublisherRuntimeSubscription[], signal: AbortSignal) {\n    if (subscriptions.length > timing.maxSubscriptions) throw new Error('Publisher subscription limit exceeded')\n    const active = new Set(subscriptions.map(subscription => subscription.subscriptionHash))\n    if (active.size !== subscriptions.length) throw new Error('Duplicate subscription identity')\n    const unavailable = state.entries<DeliveryState>(deliveryNamespace).filter(item => !active.has(item.key) && item.value.state !== 'cancelled')\n    let available = true\n    for (let offset = 0; offset < unavailable.length; offset += timing.concurrency) {\n      signal.throwIfAborted()\n      const results = await Promise.allSettled(unavailable.slice(offset, offset + timing.concurrency).map(async ({ key, value }) => {\n        const stillAuthorized = await timed(options.discovery.isActive(value.subscription, signal), signal)\n        if (!stillAuthorized) state.set(deliveryNamespace, key, {\n          ...value, pending: undefined, state: 'cancelled',\n        })\n        return stillAuthorized\n      }))\n      // Local key loss, endpoint policy, or a failed replay cannot revoke a\n      // finalized subscription. Preserve its exact pending body for restoration.\n      available = available && results.every(result => result.status === 'fulfilled' && !result.value)\n    }\n    return available\n  }\n\n  async function tick(actorSignal: AbortSignal) {\n    const scope = publisherAbortScope([abort.signal, actorSignal])\n    const signal = scope.signal\n    try {\n      signal.throwIfAborted()\n      const now = clock()\n      const prior = state.get<number>('runtime', 'highest-wall-clock') ?? 0\n      clockHealthy = Number.isSafeInteger(now) && now >= prior\n      if (!clockHealthy)\n        throw new Error('Publisher clock moved backwards')\n      state.set('runtime', 'highest-wall-clock', now)\n      const subscriptions = await timed(options.discovery.discover(signal), signal)\n      const subscriptionsAvailable = await reconcileDeliveries(subscriptions, signal)\n      const heads = await readSources(signal)\n      for (let offset = 0; offset < subscriptions.length; offset += timing.concurrency) {\n        signal.throwIfAborted()\n        const outcomes = await Promise.allSettled(subscriptions.slice(offset, offset + timing.concurrency).map(subscription => deliver(subscription, signal, now, heads)))\n        const failed = outcomes.find(result => result.status === 'rejected')\n        if (failed?.status === 'rejected')\n          throw failed.reason\n      }\n      // Challenge/finality work is bounded and occurs after already-active\n      // subscribers, so a new or broken subscriber cannot starve delivery.\n      if (options.discovery.acceptPending !== undefined)\n        await timed(options.discovery.acceptPending(signal), signal)\n      const discoveryStatus = options.discovery.status?.()\n      ready = subscriptionsAvailable && sourcesHealthy && activationReady(discoveryStatus)\n      lastError = subscriptionsAvailable ? undefined : 'publisher-subscription-unavailable'\n      passes += 1\n    } catch (error) {\n      ready = false\n      lastError = clockHealthy ? 'publisher-pass-failed' : 'publisher-clock-unhealthy'\n      if (!signal.aborted)\n        throw error\n    } finally {\n      scope.dispose()\n    }\n  }\n  const actor = await PublisherRuntimeActor.create({\n    locator: createMemoryLocator({}), intervalMs: timing.intervalMs, firstRun: 'immediate', readiness: 'immediate', tick,\n  })\n  return {\n    async start() {\n      if (stop !== undefined)\n        throw new Error('Publisher is stopped')\n      if (running) {\n        return\n      }\n\n      await actor.start()\n      running = true\n    },\n    async runOnce() {\n      if (stop !== undefined)\n        throw new Error('Publisher is stopped')\n      await actor.runOnce()\n    },\n    stop: () => stop ??= (async () => {\n      abort.abort()\n      const failures: unknown[] = []\n      try {\n        await actor.stop()\n      } catch (error) {\n        failures.push(error)\n      }\n      try {\n        await options.discovery.close?.()\n      } catch (error) {\n        failures.push(error)\n      }\n      for (const source of options.sources)\n        try {\n          await source.close?.()\n        } catch (error) {\n          failures.push(error)\n        }\n      running = false\n      ready = false\n      if (failures.length > 0)\n        throw new AggregateError(failures, 'Publisher runtime shutdown failed')\n    })(),\n    status() {\n      const deliveries = state.entries<DeliveryState>(deliveryNamespace).map(item => item.value)\n      return {\n        running,\n        deliveryMode,\n        ...(bestEffort === undefined ? {} : { bestEffort: Object.freeze({ ...bestEffort }) }),\n        superseded: deliveries.reduce((sum, item) => sum + (item.superseded ?? 0), 0),\n        abandoned: deliveries.reduce((sum, item) => sum + (item.abandoned ?? 0), 0),\n        totalAttempts: deliveries.reduce((sum, item) => sum + (item.totalAttempts ?? 0), 0),\n        ready: running && ready,\n        clockHealthy,\n        degraded: !ready || deliveries.some(item => item.state !== 'cancelled' && item.failures > 0),\n        publisher: options.publisher,\n        activeSubscriptions: deliveries.filter(item => item.state === 'active').length,\n        pendingDeliveries: deliveries.filter(item => item.pending !== undefined).length,\n        delivered: deliveries.reduce((sum, item) => sum + item.delivered, 0),\n        failures: deliveries.reduce((sum, item) => sum + item.failures, 0),\n        passes,\n        ...(lastError === undefined ? {} : { lastError }),\n        ...(options.discovery.status === undefined ? {} : { handshake: options.discovery.status() }),\n        sources: state.entries<PublisherSourceHead>('source-heads').filter(item => sourceReaders.has(item.key)).map(item => ({ id: item.key, ...item.value })),\n        subscriptions: state.entries<DeliveryState>(deliveryNamespace).map(item => ({\n          id: item.key,\n          cursor: item.value.cursor,\n          ...(deliveryMode === 'best-effort'\n            ? {\n                ...(item.value.cursor < item.value.subscription.fromPosition ? {} : { lastAdmissionTarget: item.value.cursor }),\n                attempts: item.value.attempts ?? 0,\n                lastHintAt: item.value.lastHintAt,\n              }\n            : {}),\n          state: item.value.state,\n          pending: item.value.pending !== undefined,\n          failures: item.value.failures,\n        })),\n      }\n    },\n  }\n}\n", "import { randomBytes } from 'node:crypto'\nimport { isDeepStrictEqual } from 'node:util'\n\nimport type { BestEffortDeliveryPolicy, WakeEnvelope } from '@xyo-network/event-kit-schemas'\nimport { WakeEnvelopeSchema, WakeEnvelopeZod } from '@xyo-network/event-kit-schemas'\n\nimport type { PublisherRuntimeSubscription } from './publisherRuntime.ts'\nimport type { PublisherSourceHead } from './sources.ts'\nimport { publisherSourceKey } from './sources.ts'\nimport type { SqlitePublisherState } from './sqlitePublisherState.ts'\n\nexport interface DeliveryState {\n  readonly abandoned?: number\n  readonly attempts?: number\n  readonly cursor: number\n  readonly delivered: number\n  readonly failures: number\n  readonly lastError?: string\n  readonly lastHintAt?: number\n  readonly lastHintTarget?: number\n  readonly lastNotifiedAt?: number\n  readonly nextAttemptMs: number\n  readonly pending?: WakeEnvelope\n  readonly state: 'active' | 'blocked' | 'cancelled'\n  readonly subscription: PublisherRuntimeSubscription\n  readonly superseded?: number\n  readonly totalAttempts?: number\n}\nexport function assertDeliveryState(record: DeliveryState, subscription: PublisherRuntimeSubscription): void {\n  if (!isDeepStrictEqual(record.subscription, subscription))\n    throw new Error('Subscription revision changed without a new identity')\n  if (!Number.isSafeInteger(record.cursor) || record.cursor < subscription.fromPosition - 1\n    || [record.delivered, record.failures, record.nextAttemptMs].some(value => !(Number.isSafeInteger(value) && value >= 0))\n    || [record.attempts, record.superseded, record.abandoned, record.totalAttempts, record.lastHintAt, record.lastNotifiedAt, record.lastHintTarget]\n      .some(value => value !== undefined && !(Number.isSafeInteger(value) && value >= 0))\n      || !['active', 'blocked', 'cancelled'].includes(record.state))\n    throw new Error('Persisted publisher delivery state is invalid')\n  if (record.pending === undefined) return\n  const pending = WakeEnvelopeZod.parse(record.pending)\n  if ((subscription.deliveryMode === 'durable' && pending.fromPosition !== record.cursor + 1)\n    || pending.deliveryMode !== subscription.deliveryMode || pending.toPosition - pending.fromPosition + 1 > subscription.maxPositionsPerWake\n    || pending.authorizationChainId !== subscription.authorizationChainId || pending.deploymentId !== subscription.deploymentId\n    || pending.queueId !== subscription.queueId || pending.filterHash !== subscription.filterHash\n    || !isDeepStrictEqual(pending.source, subscription.source))\n    throw new Error('Persisted publisher outbox binding is invalid')\n}\nexport function makeEvent(subscription: PublisherRuntimeSubscription, fromPosition: number, toPosition: number, now: number, wakeId = randomBytes(16).toString('hex')) {\n  return WakeEnvelopeZod.parse({\n    schema: WakeEnvelopeSchema,\n    authorizationChainId: subscription.authorizationChainId,\n    deliveryMode: subscription.deliveryMode,\n    deploymentId: subscription.deploymentId,\n    filterHash: subscription.filterHash,\n    fromPosition,\n    issuedAt: now,\n    source: subscription.source,\n    toPosition,\n    wakeId,\n    ...(subscription.queueId === undefined ? {} : { queueId: subscription.queueId }),\n  })\n}\n\nexport class DeliveryResponseError extends Error {\n  readonly retryAfterMs?: number\n  readonly status: number\n  constructor(status: number, retryAfterMs?: number) {\n    super('Publisher admission failed')\n    this.status = status\n    this.retryAfterMs = retryAfterMs\n  }\n\n  get retryable() {\n    return this.status === 408 || this.status === 429 || this.status >= 500\n  }\n}\n\nexport function prepareBestEffortDelivery(options: {\n  readonly bestEffort: BestEffortDeliveryPolicy\n  readonly first: boolean\n  readonly heads: ReadonlyMap<string, PublisherSourceHead | Error>\n  readonly now: number\n  readonly record: DeliveryState\n  readonly state: SqlitePublisherState\n}) {\n  const {\n    bestEffort, first, heads, now, record, state,\n  } = options\n  const subscription = record.subscription\n  const head = heads.get(publisherSourceKey(subscription.source))\n  const prior = record.pending\n  const expired = isHintExpired(record, now, bestEffort)\n  if (head === undefined || head instanceof Error || head.position < subscription.fromPosition) {\n    if (prior !== undefined && !expired) return { ...record, pending: prior }\n    if (prior !== undefined) state.set('best-effort-deliveries', subscription.subscriptionHash, {\n      ...record, pending: undefined, abandoned: (record.abandoned ?? 0) + 1,\n    })\n    return\n  }\n  const refresh = refreshDue(record, now, bestEffort)\n  if (freshHintRequired(record, head.position, first, refresh, expired)) {\n    const pending = makeEvent(subscription, head.position, head.position, now)\n    const prepared = {\n      ...record,\n      pending,\n      attempts: 0,\n      lastHintAt: now,\n      lastHintTarget: head.position,\n      superseded: (record.superseded ?? 0) + (prior !== undefined && !expired ? 1 : 0),\n      abandoned: (record.abandoned ?? 0) + (expired ? 1 : 0),\n      nextAttemptMs: 0,\n      state: 'active' as const,\n    }\n    state.set('best-effort-deliveries', subscription.subscriptionHash, prepared)\n    return prepared\n  }\n  if (expired) state.set('best-effort-deliveries', subscription.subscriptionHash, {\n    ...record, pending: undefined, abandoned: (record.abandoned ?? 0) + 1,\n  })\n  return prior === undefined || expired ? undefined : { ...record, pending: prior }\n}\n\nfunction isHintExpired(record: DeliveryState, now: number, policy: BestEffortDeliveryPolicy): boolean {\n  return record.pending !== undefined && (now > record.pending.issuedAt + policy.maxHintAgeSeconds || (record.attempts ?? 0) >= policy.maxAttempts)\n}\nfunction refreshDue(record: DeliveryState, now: number, policy: BestEffortDeliveryPolicy): boolean {\n  return now - (record.lastHintAt ?? record.lastNotifiedAt ?? 0) >= policy.refreshIntervalSeconds\n}\nfunction freshHintRequired(record: DeliveryState, head: number, first: boolean, refresh: boolean, expired: boolean): boolean {\n  return first || head > (record.pending?.toPosition ?? record.lastHintTarget ?? record.cursor) || (refresh && (record.pending === undefined || expired))\n}\nexport function failedDelivery(record: DeliveryState, current: DeliveryState | undefined, mode: string, error: unknown, now: number): DeliveryState {\n  const bestEffort = mode === 'best-effort'\n  const wait = error instanceof DeliveryResponseError && error.retryAfterMs !== undefined\n    ? error.retryAfterMs\n    : Math.min(300_000, 1000 * (2 ** Math.min(record.failures, 8)))\n  return {\n    ...record,\n    failures: record.failures + 1,\n    totalAttempts: bestEffort ? current?.totalAttempts ?? record.totalAttempts ?? 0 : record.totalAttempts,\n    attempts: bestEffort ? current?.attempts ?? record.attempts ?? 0 : record.attempts,\n    state: !bestEffort && error instanceof DeliveryResponseError && !error.retryable ? 'blocked' : 'active',\n    nextAttemptMs: now * 1000 + Math.min(3_600_000, wait),\n    lastError: 'delivery-failed',\n  }\n}\n", "import { randomBytes } from 'node:crypto'\n\nimport type { WakeEnvelope } from '@xyo-network/event-kit-schemas'\nimport {\n  NormalizedAddressZod, WakeEnvelopeZod, WakeJwtSchema,\n} from '@xyo-network/event-kit-schemas'\nimport type { AccountInstance } from '@xyo-network/sdk'\nimport { PayloadBuilder } from '@xyo-network/sdk'\n/** The wallet-JWT profile commits to the complete strict source-aware body. */\nexport function createAccountSourceWakeSigner(options: {\n  readonly account: AccountInstance\n  readonly nowSeconds?: () => number\n  readonly publisher: string\n}) {\n  const publisher = NormalizedAddressZod.parse(options.publisher)\n  if (String(options.account.address).replace(/^0x/u, '').toLowerCase() !== publisher)\n    throw new Error('Publisher signing account mismatch')\n  return {\n    async sign(input: WakeEnvelope, audience: string) {\n      const event = WakeEnvelopeZod.parse(input)\n      const eventHash = await PayloadBuilder.dataHash(event)\n      const now = options.nowSeconds?.() ?? Math.floor(Date.now() / 1000)\n      if (!Number.isSafeInteger(now) || now < 0)\n        throw new Error('Publisher signing clock is invalid')\n      const { token: jwt } = await options.account.signJwt({\n        audience,\n        claims: { eventHash, jti: randomBytes(16).toString('hex') },\n        now,\n        schema: WakeJwtSchema,\n        ttl: 60,\n      })\n      return {\n        event, eventHash, jwt, publisher,\n      }\n    },\n  }\n}\n", "import { FetchJsonClient } from '@ariestools/sdk'\nimport type { AccountInstance } from '@xyo-network/sdk'\nimport type {\n  GatewaySession, XyoGateway, XyoGatewayRunner,\n} from '@xyo-network/xl1-sdk'\nimport {\n  baseConfigFactoryLocator, basicRestRunnerLocator, basicRestViewerLocator, creatableProvider,\n  releaseProviderFactoryLocator, RestDataLakeRunner, RestDataLakeViewer, XyoGatewayMoniker, XyoGatewayRunnerMoniker,\n} from '@xyo-network/xl1-sdk'\nexport interface PublisherRestGatewayOptions {\n  readonly chainStateUrl: string\n  readonly fetchFn: typeof globalThis.fetch\n  readonly finalizedUrl: string\n  readonly indexUrl?: string\n  readonly rpcUrl: string\n}\n/** Owned public SDK REST gateway; only the optional mutation runner uses RPC. */\nexport function openPublisherRestGateway(options: PublisherRestGatewayOptions & {\n  readonly account: AccountInstance\n}): Promise<GatewaySession<XyoGatewayRunner>>\nexport function openPublisherRestGateway(options: PublisherRestGatewayOptions & {\n  readonly account?: undefined\n}): Promise<GatewaySession<XyoGateway>>\nexport async function openPublisherRestGateway(options: PublisherRestGatewayOptions & {\n  readonly account?: AccountInstance\n}): Promise<GatewaySession<XyoGateway | XyoGatewayRunner>> {\n  const rest = {\n    finalized: { type: 'rest' as const, baseUrl: options.finalizedUrl },\n    chainState: { type: 'rest' as const, baseUrl: options.chainStateUrl },\n    index: { type: 'rest' as const, baseUrl: options.indexUrl ?? options.finalizedUrl },\n  }\n  const locator = options.account === undefined\n    ? await basicRestViewerLocator('event-kit-publisher-read', rest, undefined, { fetchFn: options.fetchFn, primeCaches: 'off' })\n    : await basicRestRunnerLocator('event-kit-publisher-write', rest, undefined, {\n        fetchFn: options.fetchFn, primeCaches: 'off', rpcUrl: options.rpcUrl, signerAccount: options.account,\n      })\n  try {\n    const gateway = options.account === undefined\n      ? await locator.getInstance<XyoGateway>(XyoGatewayMoniker)\n      : await locator.getInstance<XyoGatewayRunner>(XyoGatewayRunnerMoniker)\n    let stopping: Promise<void> | undefined\n    return Object.freeze({ gateway, stop: () => stopping ??= releaseProviderFactoryLocator(locator) })\n  } catch (error) {\n    await releaseProviderFactoryLocator(locator)\n    throw error\n  }\n}\n@creatableProvider()\nclass BoundedRestDataLakeViewer extends RestDataLakeViewer {\n  override get client() {\n    if (this.context.fetchFn === undefined)\n      throw new Error('Publisher datalake requires its bounded fetch transport')\n    return new FetchJsonClient({ fetcher: this.context.fetchFn })\n  }\n}\n@creatableProvider()\nclass BoundedRestDataLakeRunner extends RestDataLakeRunner {\n  override get client() {\n    if (this.context.fetchFn === undefined)\n      throw new Error('Publisher datalake requires its bounded fetch transport')\n    return new FetchJsonClient({ fetcher: this.context.fetchFn })\n  }\n}\n/** Keeps SDK datalake methods and response semantics, overriding only its per-instance HTTP client. */\nexport async function openPublisherDataLake(options: {\n  readonly fetchFn: typeof globalThis.fetch\n  readonly url: string\n  readonly writable: boolean\n}) {\n  const locator = await baseConfigFactoryLocator({\n    connections: { 'event-kit-lake': { type: 'rest', baseUrl: options.url } },\n    providerBindings: { DataLakeViewer: { connection: 'event-kit-lake' }, DataLakeRunner: { connection: 'event-kit-lake' } },\n  })\n  locator.context.fetchFn = options.fetchFn\n  locator.register(BoundedRestDataLakeViewer.factory<BoundedRestDataLakeViewer>(BoundedRestDataLakeViewer.dependencies))\n  if (options.writable)\n    locator.register(BoundedRestDataLakeRunner.factory<BoundedRestDataLakeRunner>(BoundedRestDataLakeRunner.dependencies))\n  locator.freeze()\n  try {\n    const reader = await locator.getInstance<BoundedRestDataLakeViewer>(BoundedRestDataLakeViewer.defaultMoniker)\n    const writer = options.writable ? await locator.getInstance<BoundedRestDataLakeRunner>(BoundedRestDataLakeRunner.defaultMoniker) : undefined\n    return {\n      reader, writer, async close() { await releaseProviderFactoryLocator(locator) },\n    }\n  } catch (error) {\n    await releaseProviderFactoryLocator(locator)\n    throw error\n  }\n}\n", "import { isDeepStrictEqual } from 'node:util'\n\nimport type { PublisherEndpointChallengeRecord, PublisherEndpointChallengeStore } from '@xyo-network/event-kit-protocol'\nimport { endpointChallengeHash } from '@xyo-network/event-kit-protocol'\nimport {\n  Base64Url32BytesZod, EndpointChallengeZod, HandshakeIdZod, HashZod, NormalizedAddressZod,\n} from '@xyo-network/event-kit-schemas'\nimport type { EventKitReplayCheckpointStore } from '@xyo-network/event-kit-statement-graph'\nimport type {\n  FinalizedStatementPublicationIntent, FinalizedStatementPublicationJournal, FinalizedStatementPublicationRecord,\n} from '@xyo-network/event-kit-xl1'\nimport { z } from 'zod'\n\nimport type { PublisherEncryptionKeyCustody } from '../handshakeClients.ts'\nimport type { HandshakeMutationIntent, HandshakeMutationIntentStore } from '../handshakeMutationIntent.ts'\nimport {\n  assertSameIntentBinding, intentLookupKey, parseHandshakeMutationIntent,\n} from '../handshakeMutationIntent.ts'\nimport type { SqlitePublisherState } from './sqlitePublisherState.ts'\n\nconst KeyZod = z.strictObject({\n  encryptionKey: HashZod, keyId: HandshakeIdZod, privateKey: Base64Url32BytesZod, publisher: NormalizedAddressZod,\n})\nconst phases = ['signed', 'content-written', 'content-verified', 'broadcast', 'included', 'finalized'] as const\n\nfunction requireTime(value: number): void {\n  if (!Number.isSafeInteger(value) || value < 0) throw new Error('Publisher clock is invalid')\n}\n\nfunction samePublicationIntent(left: FinalizedStatementPublicationIntent, right: FinalizedStatementPublicationIntent): boolean {\n  return left.chainId === right.chainId && left.source === right.source && left.operationId === right.operationId\n    && isDeepStrictEqual(left.eventHashes, right.eventHashes) && isDeepStrictEqual(left.attachmentHashes, right.attachmentHashes)\n}\n\nfunction publicationKey(intent: FinalizedStatementPublicationIntent): string {\n  if (!/^[0-9a-f]{40}$/u.test(intent.chainId) || !/^[0-9a-f]{40}$/u.test(intent.source)\n    || intent.operationId.length === 0 || intent.operationId.length > 256\n    || [...intent.eventHashes, ...intent.attachmentHashes].some(hash => !HashZod.safeParse(hash).success)) {\n    throw new Error('Invalid publication intent')\n  }\n  return JSON.stringify([intent.chainId, intent.source, intent.operationId])\n}\n\n/** All handshake durability uses the same single-owner SQLite authority as delivery. */\nexport function createSqlitePublisherHandshakeStores(state: SqlitePublisherState, options: { readonly replayNamespace?: string } = {}): {\n  readonly challenges: PublisherEndpointChallengeStore\n  readonly intents: HandshakeMutationIntentStore\n  readonly journal: FinalizedStatementPublicationJournal\n  readonly keys: PublisherEncryptionKeyCustody\n  readonly replay: EventKitReplayCheckpointStore\n} {\n  const replayKey = options.replayNamespace === undefined ? 'checkpoint' : `checkpoint:${z.string().min(1).max(128).regex(/^[A-Za-z0-9_-]+$/u).parse(options.replayNamespace)}`\n  const replay: EventKitReplayCheckpointStore = {\n    load: async () => state.get('replay', replayKey),\n    async save(checkpoint) { state.set('replay', replayKey, checkpoint) },\n  }\n  const intents: HandshakeMutationIntentStore = {\n    async get(lookup) {\n      const value = state.get('intents', intentLookupKey(lookup))\n      return value === undefined ? undefined : await parseHandshakeMutationIntent(value)\n    },\n    async getOrCreate(raw) {\n      const proposed = await parseHandshakeMutationIntent(raw) as typeof raw\n      return state.transaction(() => {\n        const key = intentLookupKey(proposed)\n        const winner = state.get<HandshakeMutationIntent>('intents', key)\n        if (winner !== undefined) {\n          assertSameIntentBinding(winner, proposed)\n          return { disposition: 'resumed' as const, intent: winner as typeof raw }\n        }\n        state.set('intents', key, proposed)\n        return { disposition: 'created' as const, intent: proposed }\n      })\n    },\n  }\n  const keys: PublisherEncryptionKeyCustody = {\n    async getPrivateKey(input) {\n      const key = `${NormalizedAddressZod.parse(input.publisher)}:${HandshakeIdZod.parse(input.keyId)}`\n      const raw = state.get('encryption-keys', key)\n      if (raw === undefined) return\n      const record = KeyZod.parse(raw)\n      if (record.encryptionKey !== HashZod.parse(input.encryptionKey)) throw new Error('Encryption key identity mismatch')\n      const { publisher: _publisher, ...privateKey } = record\n      return privateKey\n    },\n    async putPrivateKey(input) {\n      const record = KeyZod.parse({ ...input.key, publisher: input.publisher })\n      return state.transaction(() => {\n        const key = `${record.publisher}:${record.keyId}`\n        const prior = state.get('encryption-keys', key)\n        if (prior !== undefined) {\n          if (!isDeepStrictEqual(prior, record)) throw new Error('Encryption key collision')\n          return 'duplicate'\n        }\n        state.set('encryption-keys', key, record)\n        return 'stored'\n      })\n    },\n  }\n  const current = (hash: string) => state.get<PublisherEndpointChallengeRecord>('challenges', HashZod.parse(hash))\n  const live = (record: PublisherEndpointChallengeRecord, now: number) => record.challenge.issuedAt <= now && now < record.challenge.expiresAt\n  const challenges: PublisherEndpointChallengeStore = {\n    get: async hash => current(hash),\n    async issue(input) {\n      const challenge = EndpointChallengeZod.parse(input.challenge)\n      const hash = HashZod.parse(input.challengeHash)\n      if (await endpointChallengeHash(challenge) !== hash) return { kind: 'collision' }\n      return state.transaction(() => {\n        const priorNonce = state.get<string>('challenge-nonces', challenge.nonce)\n        if (priorNonce !== undefined && priorNonce !== hash) return { kind: 'collision' as const }\n        const prior = current(hash)\n        if (prior !== undefined) return isDeepStrictEqual(prior.challenge, challenge)\n          ? { kind: 'duplicate' as const, record: prior }\n          : { kind: 'collision' as const }\n        const record: PublisherEndpointChallengeRecord = {\n          challenge, challengeHash: hash, state: 'issued',\n        }\n        state.set('challenge-nonces', challenge.nonce, hash)\n        state.set('challenges', hash, record)\n        return { kind: 'issued' as const, record }\n      })\n    },\n    async beginAttempt(input) {\n      requireTime(input.nowSeconds)\n      return state.transaction(() => {\n        const record = current(input.challengeHash)\n        if (record === undefined) return { kind: 'missing' as const }\n        if (record.state === 'verified') return { kind: 'verified' as const, record }\n        if (record.state === 'attempted') return { kind: 'already-attempted' as const, record }\n        if (!live(record, input.nowSeconds)) return { kind: 'expired' as const, record }\n        const attempted: PublisherEndpointChallengeRecord = { ...record, state: 'attempted' }\n        state.set('challenges', input.challengeHash, attempted)\n        return { kind: 'started' as const, record: attempted }\n      })\n    },\n    async completeVerified(input) {\n      requireTime(input.nowSeconds)\n      const responseHash = HashZod.parse(input.responseHash)\n      return state.transaction(() => {\n        const record = current(input.challengeHash)\n        if (record === undefined) return { kind: 'missing' as const }\n        if (record.state === 'verified') return { kind: record.responseHash === responseHash ? 'duplicate' as const : 'collision' as const, record }\n        if (record.state !== 'attempted') return { kind: 'not-attempted' as const, record }\n        if (!live(record, input.nowSeconds)) return { kind: 'expired' as const, record }\n        const verified: PublisherEndpointChallengeRecord = {\n          ...record, responseHash, state: 'verified',\n        }\n        state.set('challenges', input.challengeHash, verified)\n        return { kind: 'verified' as const, record: verified }\n      })\n    },\n  }\n  const journal: FinalizedStatementPublicationJournal = {\n    async load(intent) {\n      const key = publicationKey(intent)\n      const signed = state.get<FinalizedStatementPublicationRecord>('publication:signed', key)\n      if (signed === undefined) return\n      if (!samePublicationIntent(signed, intent)) throw new Error('Publication intent collision')\n      let latest = signed\n      for (const phase of phases) {\n        const record = state.get<FinalizedStatementPublicationRecord>(`publication:${phase}`, key)\n        if (record === undefined) continue\n        if (record.phase !== phase || !samePublicationIntent(record, intent) || !isDeepStrictEqual(record.evidence, signed.evidence)) {\n          throw new Error('Publication evidence collision')\n        }\n        latest = record\n      }\n      return latest\n    },\n    async save(record) {\n      const key = publicationKey(record)\n      HashZod.parse(record.evidence.transactionHash)\n      if (!phases.includes(record.phase)) throw new Error('Unknown publication phase')\n      state.transaction(() => {\n        const signed = state.get<FinalizedStatementPublicationRecord>('publication:signed', key)\n        if (signed === undefined && record.phase !== 'signed') throw new Error('Publication must bind signed evidence first')\n        if (signed !== undefined && (!samePublicationIntent(signed, record) || !isDeepStrictEqual(signed.evidence, record.evidence))) {\n          throw new Error('Publication intent or evidence collision')\n        }\n        const namespace = `publication:${record.phase}`\n        const prior = state.get(namespace, key)\n        if (prior !== undefined && !isDeepStrictEqual(prior, record)) throw new Error('Publication phase collision')\n        if (prior === undefined) state.set(namespace, key, record)\n      })\n    },\n  }\n  return {\n    challenges, intents, journal, keys, replay,\n  }\n}\n", "import {\n  canonicalJsonBytes,\n  handshakeObjectHash,\n} from '@xyo-network/event-kit-protocol'\nimport type {\n  ChainId,\n  Hash,\n  NormalizedAddress,\n} from '@xyo-network/event-kit-schemas'\nimport {\n  Base64Url32BytesZod,\n  ChainIdZod,\n  EncryptedWakeSubscriptionZod,\n  EndpointChallengeResponseZod,\n  EndpointChallengeZod,\n  HandshakeIdZod,\n  HashZod,\n  NormalizedAddressZod,\n  PublisherEncryptionKeyRevocationZod,\n  PublisherEncryptionKeyZod,\n  PublisherServiceRevocationZod,\n  PublisherServiceZod,\n  WakeGrantObjectZod,\n  WakeGrantRevocationZod,\n  WakeSubscriptionAcceptanceZod,\n  WakeSubscriptionRevocationZod,\n} from '@xyo-network/event-kit-schemas'\nimport { z } from 'zod'\n\nexport const HandshakeMutationIntentKinds = [\n  'publisher-encryption-key-retire',\n  'publisher-service-publish',\n  'publisher-service-retire',\n  'publisher-service-rotate-key',\n  'publisher-subscription-accept',\n  'subscriber-grant-revoke',\n  'subscriber-subscription-revoke',\n  'subscriber-subscription-subscribe',\n] as const\n\nexport type HandshakeMutationIntentKind = typeof HandshakeMutationIntentKinds[number]\nexport type HandshakeMutationIntentDisposition = 'created' | 'resumed'\n\nconst HandshakeMutationIntentKindZod = z.enum(HandshakeMutationIntentKinds)\nconst HandshakeMutationOperationIdZod = z.union([HandshakeIdZod, HashZod])\nconst WakeSubscriptionPrivateKeyZod = z.strictObject({\n  encryptionKey: HashZod,\n  keyId: HandshakeIdZod,\n  privateKey: Base64Url32BytesZod,\n})\n\nconst IntentBaseFields = {\n  chainId: ChainIdZod,\n  operationId: HandshakeMutationOperationIdZod,\n  publisher: NormalizedAddressZod,\n  requestFingerprint: HashZod,\n  source: NormalizedAddressZod,\n  version: z.literal(1),\n} as const\n\nconst PublisherServicePublishIntentZod = z.strictObject({\n  ...IntentBaseFields,\n  kind: z.literal('publisher-service-publish'),\n  operationId: HandshakeIdZod,\n  encryptionKey: PublisherEncryptionKeyZod,\n  privateKey: WakeSubscriptionPrivateKeyZod,\n  service: PublisherServiceZod,\n})\n\nconst PublisherServiceRotateKeyIntentZod = z.strictObject({\n  ...IntentBaseFields,\n  kind: z.literal('publisher-service-rotate-key'),\n  operationId: HandshakeIdZod,\n  encryptionKey: PublisherEncryptionKeyZod,\n  privateKey: WakeSubscriptionPrivateKeyZod,\n  selectedKey: HashZod,\n  selectedService: HashZod,\n  service: PublisherServiceZod,\n})\n\nconst SubscriberSubscriptionIntentZod = z.strictObject({\n  ...IntentBaseFields,\n  kind: z.literal('subscriber-subscription-subscribe'),\n  operationId: HandshakeIdZod,\n  encryptionKey: PublisherEncryptionKeyZod,\n  grant: WakeGrantObjectZod,\n  selectedKey: HashZod,\n  selectedService: HashZod,\n  service: PublisherServiceZod,\n  subscription: EncryptedWakeSubscriptionZod,\n})\n\nconst PublisherAcceptanceIntentZod = z.strictObject({\n  ...IntentBaseFields,\n  acceptance: WakeSubscriptionAcceptanceZod,\n  challenge: EndpointChallengeZod,\n  kind: z.literal('publisher-subscription-accept'),\n  operationId: HashZod,\n  response: EndpointChallengeResponseZod,\n})\n\nconst PublisherServiceRetireIntentZod = z.strictObject({\n  ...IntentBaseFields,\n  kind: z.literal('publisher-service-retire'),\n  operationId: HashZod,\n  revocation: PublisherServiceRevocationZod,\n})\n\nconst PublisherEncryptionKeyRetireIntentZod = z.strictObject({\n  ...IntentBaseFields,\n  kind: z.literal('publisher-encryption-key-retire'),\n  operationId: HashZod,\n  revocation: PublisherEncryptionKeyRevocationZod,\n})\n\nconst SubscriberGrantRevokeIntentZod = z.strictObject({\n  ...IntentBaseFields,\n  kind: z.literal('subscriber-grant-revoke'),\n  operationId: HashZod,\n  revocation: WakeGrantRevocationZod,\n})\n\nconst SubscriberSubscriptionRevokeIntentZod = z.strictObject({\n  ...IntentBaseFields,\n  kind: z.literal('subscriber-subscription-revoke'),\n  operationId: HashZod,\n  revocation: WakeSubscriptionRevocationZod,\n})\n\nexport const HandshakeMutationIntentZod = z.discriminatedUnion('kind', [\n  PublisherEncryptionKeyRetireIntentZod,\n  PublisherServicePublishIntentZod,\n  PublisherServiceRetireIntentZod,\n  PublisherServiceRotateKeyIntentZod,\n  PublisherAcceptanceIntentZod,\n  SubscriberGrantRevokeIntentZod,\n  SubscriberSubscriptionRevokeIntentZod,\n  SubscriberSubscriptionIntentZod,\n])\n\nexport type HandshakeMutationIntent = z.infer<typeof HandshakeMutationIntentZod>\nexport type PublisherServicePublishIntent = z.infer<typeof PublisherServicePublishIntentZod>\nexport type PublisherServiceRotateKeyIntent = z.infer<typeof PublisherServiceRotateKeyIntentZod>\nexport type SubscriberSubscriptionIntent = z.infer<typeof SubscriberSubscriptionIntentZod>\nexport type PublisherAcceptanceIntent = z.infer<typeof PublisherAcceptanceIntentZod>\nexport type PublisherServiceRetireIntent = z.infer<typeof PublisherServiceRetireIntentZod>\nexport type PublisherEncryptionKeyRetireIntent = z.infer<typeof PublisherEncryptionKeyRetireIntentZod>\nexport type SubscriberGrantRevokeIntent = z.infer<typeof SubscriberGrantRevokeIntentZod>\nexport type SubscriberSubscriptionRevokeIntent = z.infer<typeof SubscriberSubscriptionRevokeIntentZod>\n\nexport interface HandshakeMutationIntentLookup {\n  readonly chainId: ChainId\n  readonly kind: HandshakeMutationIntentKind\n  readonly operationId: string\n  readonly publisher: NormalizedAddress\n  readonly source: NormalizedAddress\n}\n\nexport interface HandshakeMutationIntentResolution<TIntent extends HandshakeMutationIntent = HandshakeMutationIntent> {\n  readonly disposition: HandshakeMutationIntentDisposition\n  readonly intent: TIntent\n}\n\n/** Durable, first-writer-wins boundary for exact logical handshake mutations. */\nexport interface HandshakeMutationIntentStore {\n  get(lookup: HandshakeMutationIntentLookup): Promise<HandshakeMutationIntent | undefined>\n  getOrCreate<TIntent extends HandshakeMutationIntent>(\n    intent: TIntent,\n  ): Promise<HandshakeMutationIntentResolution<TIntent>>\n}\n\n/** Stable error for reuse of one operation ID with different request or chain context. */\nexport class HandshakeMutationIntentConflictError extends Error {\n  constructor(message = 'Handshake mutation operation ID is already bound to different intent') {\n    super(message)\n    this.name = 'HandshakeMutationIntentConflictError'\n  }\n}\n\n/** SHA-256 over the canonical private/public caller-input representation. */\nexport async function handshakeMutationRequestFingerprint(value: unknown): Promise<Hash> {\n  const canonical = canonicalJsonBytes(value)\n  const digestInput = new Uint8Array(canonical.byteLength)\n  digestInput.set(canonical)\n  const digest = await globalThis.crypto.subtle.digest('SHA-256', digestInput)\n  const hex = Array.from(new Uint8Array(digest), byte => byte.toString(16).padStart(2, '0')).join('')\n  return HashZod.parse(hex)\n}\n\nexport function parseHandshakeMutationIntentLookup(value: HandshakeMutationIntentLookup): HandshakeMutationIntentLookup {\n  return Object.freeze({\n    chainId: ChainIdZod.parse(value.chainId),\n    kind: HandshakeMutationIntentKindZod.parse(value.kind),\n    operationId: HandshakeMutationOperationIdZod.parse(value.operationId),\n    publisher: NormalizedAddressZod.parse(value.publisher),\n    source: NormalizedAddressZod.parse(value.source),\n  })\n}\n\n/** Strictly validates an intent and recomputes every canonical object binding. */\nexport async function parseHandshakeMutationIntent(value: unknown): Promise<HandshakeMutationIntent> {\n  const intent = HandshakeMutationIntentZod.parse(value)\n  await assertIntentIntegrity(intent)\n  return Object.freeze(intent)\n}\n\n/** In-memory first-writer-wins adapter for focused tests and ephemeral composition. */\nexport function createMemoryHandshakeMutationIntentStore(): HandshakeMutationIntentStore {\n  const intents = new Map<string, HandshakeMutationIntent>()\n  return {\n    async get(rawLookup) {\n      const lookup = parseHandshakeMutationIntentLookup(rawLookup)\n      return intents.get(intentLookupKey(lookup))\n    },\n    async getOrCreate(rawIntent) {\n      const proposed = await parseHandshakeMutationIntent(rawIntent) as typeof rawIntent\n      const key = intentLookupKey(proposed)\n      const existing = intents.get(key)\n      if (existing === undefined) {\n        intents.set(key, proposed)\n        return Object.freeze({ disposition: 'created' as const, intent: proposed })\n      }\n      assertSameIntentBinding(existing, proposed)\n      return Object.freeze({ disposition: 'resumed' as const, intent: existing as typeof rawIntent })\n    },\n  }\n}\n\nexport function intentLookupKey(lookup: HandshakeMutationIntentLookup): string {\n  const parsed = parseHandshakeMutationIntentLookup(lookup)\n  return [parsed.chainId, parsed.publisher, parsed.source, parsed.kind, parsed.operationId].join('/')\n}\n\nexport function assertSameIntentBinding(left: HandshakeMutationIntent, right: HandshakeMutationIntent): void {\n  const shared = left.version === right.version\n    && left.chainId === right.chainId\n    && left.kind === right.kind\n    && left.operationId === right.operationId\n    && left.publisher === right.publisher\n    && left.source === right.source\n    && left.requestFingerprint === right.requestFingerprint\n  const bothRotate = left.kind === 'publisher-service-rotate-key'\n    && right.kind === 'publisher-service-rotate-key'\n  const bothSubscribe = left.kind === 'subscriber-subscription-subscribe'\n    && right.kind === 'subscriber-subscription-subscribe'\n  const selected = bothRotate || bothSubscribe\n    ? left.selectedService === right.selectedService && left.selectedKey === right.selectedKey\n    : !('selectedService' in left) && !('selectedService' in right)\n  if (!shared || !selected) throw new HandshakeMutationIntentConflictError()\n}\n\nasync function assertIntentIntegrity(intent: HandshakeMutationIntent): Promise<void> {\n  if (intent.kind.startsWith('publisher-') && intent.source !== intent.publisher) {\n    throw new TypeError('Publisher mutation intent source must equal publisher')\n  }\n  if (intent.kind === 'publisher-service-publish' || intent.kind === 'publisher-service-rotate-key') {\n    await assertPublisherServiceIntent(intent)\n    return\n  }\n  if (intent.kind === 'subscriber-subscription-subscribe') {\n    await assertSubscriberSubscriptionIntent(intent)\n    return\n  }\n  if (intent.kind === 'publisher-subscription-accept') {\n    await assertPublisherAcceptanceIntent(intent)\n    return\n  }\n  await assertRevocationIntent(intent)\n}\n\nasync function assertPublisherServiceIntent(\n  intent: PublisherServicePublishIntent | PublisherServiceRotateKeyIntent,\n): Promise<void> {\n  const keyHash = await handshakeObjectHash(intent.encryptionKey)\n  if (intent.privateKey.encryptionKey !== keyHash\n    || intent.privateKey.keyId !== intent.encryptionKey.keyId\n    || intent.service.preferredEncryptionKey !== keyHash\n    || intent.service.encryptionKeys.length !== 1\n    || intent.service.encryptionKeys[0] !== keyHash) {\n    throw new TypeError('Publisher service mutation intent has inconsistent encryption-key artifacts')\n  }\n  if (intent.kind === 'publisher-service-publish') {\n    if (intent.service.revision !== 1 || intent.service.supersedes !== undefined) {\n      throw new TypeError('Publisher service root intent must contain a root service revision')\n    }\n  } else if (intent.service.supersedes !== intent.selectedService || intent.service.revision <= 1) {\n    throw new TypeError('Publisher service rotation intent does not extend its selected service')\n  }\n}\n\nasync function assertSubscriberSubscriptionIntent(intent: SubscriberSubscriptionIntent): Promise<void> {\n  const [keyHash, serviceHash, grantHash] = await Promise.all([\n    handshakeObjectHash(intent.encryptionKey),\n    handshakeObjectHash(intent.service),\n    handshakeObjectHash(intent.grant),\n  ])\n  if (keyHash !== intent.selectedKey\n    || serviceHash !== intent.selectedService\n    || intent.service.preferredEncryptionKey !== keyHash\n    || !intent.service.encryptionKeys.includes(keyHash)\n    || intent.grant.publisher !== intent.publisher\n    || intent.subscription.publisher !== intent.publisher\n    || intent.subscription.service !== serviceHash\n    || intent.subscription.encryptionKey !== keyHash\n    || intent.subscription.keyId !== intent.encryptionKey.keyId\n    || intent.subscription.grant !== grantHash) {\n    throw new TypeError('Subscriber subscription intent has inconsistent public artifacts')\n  }\n}\n\nasync function assertPublisherAcceptanceIntent(intent: PublisherAcceptanceIntent): Promise<void> {\n  const [challengeHash, responseHash] = await Promise.all([\n    handshakeObjectHash(intent.challenge),\n    handshakeObjectHash(intent.response),\n  ])\n  if (challengeHash !== intent.operationId\n    || intent.challenge.publisher !== intent.publisher\n    || intent.response.challenge !== challengeHash\n    || intent.acceptance.challenge !== challengeHash\n    || intent.acceptance.response !== responseHash\n    || intent.acceptance.service !== intent.challenge.service\n    || intent.acceptance.encryptionKey !== intent.challenge.encryptionKey\n    || intent.acceptance.grant !== intent.challenge.grant\n    || intent.acceptance.subscription !== intent.challenge.subscription) {\n    throw new TypeError('Publisher acceptance intent has inconsistent public artifacts')\n  }\n}\n\nasync function assertRevocationIntent(\n  intent:\n    | PublisherEncryptionKeyRetireIntent\n    | PublisherServiceRetireIntent\n    | SubscriberGrantRevokeIntent\n    | SubscriberSubscriptionRevokeIntent,\n): Promise<void> {\n  const target = intent.kind === 'publisher-encryption-key-retire'\n    ? intent.revocation.key\n    : intent.kind === 'publisher-service-retire'\n      ? intent.revocation.service\n      : intent.kind === 'subscriber-grant-revoke'\n        ? intent.revocation.grant\n        : intent.revocation.subscription\n  if (target !== intent.operationId) {\n    throw new TypeError('Handshake revocation intent has inconsistent target binding')\n  }\n}\n", "import { randomBytes } from 'node:crypto'\nimport { constants } from 'node:fs'\nimport {\n  lstat, mkdir, open,\n} from 'node:fs/promises'\nimport { hostname } from 'node:os'\nimport PATH from 'node:path'\n\nimport { stringifyJson } from '../filesystemJson.ts'\nexport interface SqlitePublisherStateOptions {\n  /** Immutable chain/publisher binding. A database must never silently change owners. */\n  readonly identity: string\n  readonly path: string\n}\ninterface JsonRow {\n  readonly value: string\n}\ninterface OwnerRow {\n  readonly host: string\n  readonly pid: number\n  readonly token: string\n}\n/** Single-process SQLite authority for publisher checkpoints, custody and delivery records. */\nexport interface SqlitePublisherState {\n  readonly path: string\n  close(): void\n  entries<T>(namespace: string): readonly {\n    readonly key: string\n    readonly value: T\n  }[]\n  get<T>(namespace: string, key: string): T | undefined\n  insert(namespace: string, key: string, value: unknown): boolean\n  remove(namespace: string, key: string): void\n  set(namespace: string, key: string, value: unknown): void\n  transaction<T>(work: () => T): T\n}\nfunction decode<T>(value: string): T {\n  return JSON.parse(value, (_key, candidate: unknown) => {\n    return typeof candidate === 'object' && candidate !== null && Object.keys(candidate).length === 1\n      && '$eventKitBigInt' in candidate && typeof candidate.$eventKitBigInt === 'string'\n      && /^(?:0|[1-9][0-9]*)$/u.test(candidate.$eventKitBigInt)\n      ? BigInt(candidate.$eventKitBigInt)\n      : candidate\n  }) as T\n}\nfunction processExists(pid: number): boolean {\n  if (!Number.isSafeInteger(pid) || pid < 1)\n    throw new Error('Invalid publisher owner record')\n  try {\n    process.kill(pid, 0)\n    return true\n  } catch (error) {\n    if (typeof error === 'object' && error !== null && 'code' in error && error.code === 'ESRCH')\n      return false\n    return true\n  }\n}\nexport async function openSqlitePublisherState(options: SqlitePublisherStateOptions): Promise<SqlitePublisherState> {\n  if (options.path === ':memory:' || options.identity.length === 0)\n    throw new Error('Persistent publisher needs a file and an identity')\n  const path = PATH.resolve(options.path)\n  const directory = PATH.dirname(path)\n  await mkdir(directory, { recursive: true, mode: 0o700 })\n  const metadata = await lstat(directory)\n  if (!metadata.isDirectory() || (metadata.mode & 0o077) !== 0)\n    throw new Error('Publisher state directory must be a real directory with 0700 permissions')\n  const file = await open(path, constants.O_CREAT | constants.O_RDWR | constants.O_NOFOLLOW, 0o600)\n  try {\n    const metadata = await file.stat()\n    if (!metadata.isFile() || (metadata.mode & 0o077) !== 0)\n      throw new Error('Publisher database permissions must be 0600')\n    await file.sync()\n  } finally {\n    await file.close()\n  }\n  const { DatabaseSync } = await import('node:sqlite')\n  const database = new DatabaseSync(path)\n  const token = randomBytes(16).toString('hex')\n  let closed = false\n  let inTransaction = false\n  const transaction = <T>(work: () => T): T => {\n    if (closed)\n      throw new Error('Publisher state is closed')\n    if (inTransaction)\n      return work()\n    database.exec('BEGIN IMMEDIATE')\n    inTransaction = true\n    try {\n      const result = work()\n      if (result instanceof Promise)\n        throw new TypeError('Publisher state transactions must be synchronous')\n      database.exec('COMMIT')\n      return result\n    } catch (error) {\n      database.exec('ROLLBACK')\n      throw error\n    } finally {\n      inTransaction = false\n    }\n  }\n  try {\n    database.exec(`\n      PRAGMA journal_mode = WAL;\n      PRAGMA synchronous = FULL;\n      PRAGMA busy_timeout = 5000;\n      CREATE TABLE IF NOT EXISTS publisher_records (namespace TEXT NOT NULL, key TEXT NOT NULL, value TEXT NOT NULL, PRIMARY KEY(namespace, key));\n      CREATE TABLE IF NOT EXISTS publisher_owner (id INTEGER PRIMARY KEY CHECK(id = 1), host TEXT NOT NULL, pid INTEGER NOT NULL, token TEXT NOT NULL);\n    `)\n    transaction(() => {\n      const prior = database.prepare('SELECT host, pid, token FROM publisher_owner WHERE id = 1').get() as OwnerRow | undefined\n      if (prior !== undefined && (prior.host !== hostname() || processExists(prior.pid))) {\n        throw new Error('Publisher database already has an active owner; a shared or multi-host database is not supported')\n      }\n      const binding = database.prepare('SELECT value FROM publisher_records WHERE namespace = ? AND key = ?').get('metadata', 'identity') as JsonRow | undefined\n      if (binding !== undefined && decode(binding.value) !== options.identity)\n        throw new Error('Publisher database identity mismatch')\n      database.prepare('INSERT OR IGNORE INTO publisher_records(namespace,key,value) VALUES (?,?,?)').run('metadata', 'identity', stringifyJson(options.identity))\n      database.prepare('INSERT OR REPLACE INTO publisher_owner(id,host,pid,token) VALUES (1,?,?,?)').run(hostname(), process.pid, token)\n    })\n  } catch (error) {\n    database.close()\n    throw error\n  }\n  const read = database.prepare('SELECT value FROM publisher_records WHERE namespace = ? AND key = ?')\n  const list = database.prepare('SELECT key, value FROM publisher_records WHERE namespace = ? ORDER BY key')\n  const write = database.prepare('INSERT INTO publisher_records(namespace,key,value) VALUES (?,?,?) ON CONFLICT(namespace,key) DO UPDATE SET value = excluded.value')\n  const insert = database.prepare('INSERT OR IGNORE INTO publisher_records(namespace,key,value) VALUES (?,?,?)')\n  const remove = database.prepare('DELETE FROM publisher_records WHERE namespace = ? AND key = ?')\n  const assertOpen = () => {\n    if (closed)\n      throw new Error('Publisher state is closed')\n  }\n  return {\n    path,\n    get<T>(namespace: string, key: string): T | undefined {\n      assertOpen()\n      const row = read.get(namespace, key) as JsonRow | undefined\n      return row === undefined ? undefined : decode<T>(row.value)\n    },\n    entries<T>(namespace: string) {\n      assertOpen()\n      return (list.all(namespace) as {\n        key: string\n        value: string\n      }[]).map(row => ({ key: row.key, value: decode<T>(row.value) }))\n    },\n    set(namespace, key, value) {\n      assertOpen()\n      write.run(namespace, key, stringifyJson(value))\n    },\n    insert(namespace, key, value) {\n      assertOpen()\n      return insert.run(namespace, key, stringifyJson(value)).changes === 1\n    },\n    remove(namespace, key) {\n      assertOpen()\n      remove.run(namespace, key)\n    },\n    transaction,\n    close() {\n      if (closed)\n        return\n      transaction(() => {\n        database.prepare('DELETE FROM publisher_owner WHERE id = 1 AND token = ?').run(token)\n      })\n      database.close()\n      closed = true\n    },\n  }\n}\n", "import { randomBytes } from 'node:crypto'\nimport {\n  link, open, rename, unlink,\n} from 'node:fs/promises'\nimport PATH from 'node:path'\n\nimport {\n  ensureDurableDirectory,\n  syncDirectory,\n  writeDurableFile,\n} from './filesystemDurability.ts'\n\nexport interface FilesystemJsonWriteOptions {\n  readonly directoryMode?: number\n  readonly mode?: number\n}\n\nexport async function readJsonFileStrict(path: string): Promise<unknown> {\n  let handle\n  try {\n    handle = await open(path, 'r')\n  } catch (error) {\n    if (errorCode(error) === 'ENOENT') return undefined\n    throw error\n  }\n  try {\n    return JSON.parse(await handle.readFile('utf8'), reviveJson) as unknown\n  } finally { await handle.close() }\n}\n\n/** Atomically replaces one JSON file after its new bytes have reached disk. */\nexport async function replaceJsonFile(\n  path: string,\n  value: unknown,\n  options: FilesystemJsonWriteOptions = {},\n): Promise<void> {\n  const directory = PATH.dirname(path)\n  await ensureDurableDirectory(directory, options.directoryMode)\n  const tempPath = PATH.join(directory, `.${PATH.basename(path)}.${process.pid}.${suffix()}.tmp`)\n  try {\n    await writeDurableFile(tempPath, `${stringifyJson(value)}\\n`, options.mode)\n    await rename(tempPath, path)\n    await syncDirectory(directory)\n  } catch (error) {\n    await unlinkIfMissing(tempPath)\n    throw error\n  }\n}\n\n/**\n * Publishes immutable JSON with an exclusive hard link. Returns `false` when\n * another process already owns the destination.\n */\nexport async function publishJsonFile(\n  path: string,\n  value: unknown,\n  options: FilesystemJsonWriteOptions = {},\n): Promise<boolean> {\n  const directory = PATH.dirname(path)\n  await ensureDurableDirectory(directory, options.directoryMode)\n  const tempPath = PATH.join(directory, `.${PATH.basename(path)}.${process.pid}.${suffix()}.tmp`)\n  try {\n    await writeDurableFile(tempPath, `${stringifyJson(value)}\\n`, options.mode)\n    await link(tempPath, path)\n    await syncDirectory(directory)\n    return true\n  } catch (error) {\n    if (errorCode(error) === 'EEXIST') return false\n    throw error\n  } finally {\n    await unlinkIfMissing(tempPath)\n  }\n}\n\nfunction suffix(): string {\n  return randomBytes(8).toString('hex')\n}\n\nexport function stringifyJson(value: unknown): string {\n  return JSON.stringify(value, replaceJsonValue)\n}\n\nfunction replaceJsonValue(_key: string, candidate: unknown): unknown {\n  return typeof candidate === 'bigint'\n    ? { $eventKitBigInt: candidate.toString() }\n    : candidate\n}\n\nfunction reviveJson(_key: string, candidate: unknown): unknown {\n  return typeof candidate === 'object'\n    && candidate !== null\n    && Object.keys(candidate).length === 1\n    && '$eventKitBigInt' in candidate\n    && typeof candidate.$eventKitBigInt === 'string'\n    && /^(?:0|[1-9][0-9]*)$/u.test(candidate.$eventKitBigInt)\n    ? BigInt(candidate.$eventKitBigInt)\n    : candidate\n}\n\nasync function unlinkIfMissing(path: string): Promise<void> {\n  try {\n    await unlink(path)\n  } catch (error) {\n    if (errorCode(error) !== 'ENOENT') throw error\n  }\n}\n\nfunction errorCode(error: unknown): unknown {\n  return typeof error === 'object' && error !== null && 'code' in error\n    ? (error as { code?: unknown }).code\n    : undefined\n}\n"],
+  "mappings": ";;;;;;;;;;;;AAAA,SAAS,UAAAA,eAAc;;;ACAvB,SAAS,cAAc,kBAAkB;AAGlC,SAAS,oBAAoB,SAAiC,WAAoB;AACvF,QAAM,aAAa,IAAI,gBAAgB;AACvC,QAAM,QAAQ,MAAM,WAAW,MAAM;AACrC,QAAM,QAAQ,cAAc,SAAY,SAAY,WAAW,OAAO,SAAS;AAC/E,SAAO,MAAM;AACb,aAAW,UAAU,SAAS;AAC5B,QAAI,OAAO,QAAS,YAAW,MAAM;AAAA,QAChC,QAAO,iBAAiB,SAAS,OAAO,EAAE,MAAM,KAAK,CAAC;AAAA,EAC7D;AACA,SAAO;AAAA,IACL,QAAQ,WAAW;AAAA,IACnB,UAAU;AACR,UAAI,UAAU,OAAW,cAAa,KAAK;AAC3C,iBAAW,UAAU,QAAS,QAAO,oBAAoB,SAAS,KAAK;AAAA,IACzE;AAAA,EACF;AACF;;;ADPO,SAAS,4BAA4B,UAAwC,CAAC,GAAG;AACtF,QAAM,QAAQ,IAAI,gBAAgB;AAClC,QAAM,UAAU,QAAQ,oBAAoB;AAC5C,QAAM,UAAU,QAAQ,oBAAoB,KAAK,OAAO;AACxD,QAAM,cAAc,QAAQ,kBAAkB;AAC9C,MAAI,CAAC,OAAO,cAAc,OAAO,KAAK,UAAU,OAAO,UAAU,OAC5D,CAAC,OAAO,cAAc,OAAO,KAAK,UAAU,KAAK,UAAU,KAAK,OAAO,QACvE,CAAC,OAAO,cAAc,WAAW,KAAK,cAAc,KAAK,cAAc;AAC1E,UAAM,IAAI,MAAM,gCAAgC;AAClD,QAAM,SAAS,oBAAI,IAAuB;AAC1C,QAAM,cAAc,WAAW,MAAM,KAAK,UAAU;AACpD,QAAM,UAAmC,CAAC,OAAO,SAAS;AACxD,QAAI,OAAO,QAAQ;AACjB,aAAO,QAAQ,OAAO,IAAI,MAAM,2CAA2C,CAAC;AAC9E,UAAM,aAAa,YAAY;AAC7B,YAAM,UAAU;AAAA,QAAC,MAAM;AAAA,QACrB,GAAI,QAAQ,WAAW,SAAY,CAAC,IAAI,CAAC,QAAQ,MAAM;AAAA,QACvD,GAAI,MAAM,UAAU,OAAO,CAAC,IAAI,CAAC,KAAK,MAAM;AAAA,QAC5C,GAAI,iBAAiB,UAAU,CAAC,MAAM,MAAM,IAAI,CAAC;AAAA,MAAE;AACrD,YAAM,QAAQ,oBAAoB,SAAS,OAAO;AAClD,UAAI;AACF,cAAM,OAAO,eAAe;AAC5B,cAAM,WAAW,MAAM,YAAY,OAAO;AAAA,UACxC,GAAG;AAAA,UAAM,UAAU;AAAA,UAAS,QAAQ,MAAM;AAAA,QAC5C,CAAC;AACD,YAAI,SAAS,SAAS;AACpB,iBAAO;AACT,cAAM,SAAS,SAAS,KAAK,UAAU;AACvC,cAAM,SAAuB,CAAC;AAC9B,YAAI,OAAO;AACX,YAAI;AACF,qBAAS;AACP,kBAAM,QAAQ,MAAM,OAAO,KAAK;AAChC,gBAAI,MAAM;AACR;AACF,kBAAM,QAAiB,MAAM;AAC7B,gBAAI,EAAE,iBAAiB,YAAa,OAAM,IAAI,UAAU,+CAA+C;AACvG,oBAAQ,MAAM;AACd,gBAAI,OAAO,SAAS;AAClB,oBAAM,OAAO,OAAO;AACpB,oBAAM,IAAI,MAAM,uCAAuC;AAAA,YACzD;AACA,mBAAO,KAAK,KAAK;AAAA,UACnB;AAAA,QACF,UAAE;AACA,iBAAO,YAAY;AAAA,QACrB;AACA,cAAM,UAAU,IAAI,QAAQ,SAAS,OAAO;AAC5C,gBAAQ,OAAO,kBAAkB;AACjC,gBAAQ,OAAO,mBAAmB;AAClC,gBAAQ,IAAI,kBAAkB,OAAO,IAAI,CAAC;AAC1C,eAAO,IAAI,SAASC,QAAO,OAAO,MAAM,GAAG;AAAA,UACzC,QAAQ,SAAS;AAAA,UAAQ,YAAY,SAAS;AAAA,UAAY;AAAA,QAC5D,CAAC;AAAA,MACH,UAAE;AACA,cAAM,QAAQ;AAAA,MAChB;AAAA,IACF,GAAG;AACH,WAAO,IAAI,SAAS;AACpB,SAAK,UAAU,KAAK,MAAM,OAAO,OAAO,SAAS,GAAG,MAAM,OAAO,OAAO,SAAS,CAAC;AAClF,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL;AAAA,IACA,MAAM,QAAQ;AACZ,YAAM,MAAM;AACZ,YAAM,QAAQ,WAAW,MAAM;AAAA,IACjC;AAAA,IACA,IAAI,iBAAiB;AACnB,aAAO,OAAO;AAAA,IAChB;AAAA,EACF;AACF;AAGO,SAAS,sCAAsC,UAAwC,CAAC,GAAG;AAChG,QAAM,UAAU,4BAA4B,OAAO;AACnD,QAAM,SAA0B,OAAOC,UAAS,iBAAiB;AAC/D,UAAM,aAAa,IAAI,gBAAgB;AACvC,kBAAc,YAAY,MAAM,WAAW,MAAM,CAAC;AAClD,kBAAc,YAAY;AAC1B,UAAM,WAAW,MAAM,QAAQ,QAAQA,SAAQ,KAAK;AAAA,MAClD,MAAMA,SAAQ,SAAS,OAAO,SAAYD,QAAO,KAAKC,SAAQ,IAAI;AAAA,MAClE,SAASA,SAAQ;AAAA,MACjB,QAAQA,SAAQ;AAAA,MAChB,QAAQ,WAAW;AAAA,IACrB,CAAC;AACD,WAAO;AAAA,MACL,MAAM,IAAI,WAAW,MAAM,SAAS,YAAY,CAAC;AAAA,MACjD,SAAS,OAAO,YAAY,SAAS,OAAO;AAAA,MAC5C,YAAY,SAAS;AAAA,MACrB,eAAe,SAAS;AAAA,IAC1B;AAAA,EACF;AACA,SAAO;AAAA,IACL;AAAA,IACA,MAAM,QAAQ;AAAE,YAAM,QAAQ,MAAM;AAAA,IAAE;AAAA,IACtC,IAAI,iBAAiB;AAAE,aAAO,QAAQ;AAAA,IAAe;AAAA,EACvD;AACF;;;AE/GA,SAAS,yBAAyB;AAElC,SAAS,yBAAyB,4BAA4B;AAI9D,SAAS,oCAAoC;AAkBtC,SAAS,kCAAkC,SAYpB;AAC5B,QAAM,QAAQ,QAAQ,eAAe,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AACvE,QAAM,QAAQ,IAAI,gBAAgB;AAClC,MAAI;AACJ,MAAI;AACJ,MAAI,SAA0C;AAAA,IAC5C,sBAAsB,QAAQ;AAAA,IAC9B,WAAW;AAAA,IACX,cAAc,CAAC;AAAA,IACf,sBAAsB;AAAA,IACtB,uBAAuB;AAAA,IACvB,mBAAmB;AAAA,EACrB;AACA,WAAS,cAAc,OAA4C;AACjE,YAAQ,QAAQ,gBAAgB,UAAa,MAAM,QAAQ,eAAe,QAAQ,iBAC5E,QAAQ,iBAAiB,UAAa,MAAM,QAAQ,KAAK,iBAAiB,QAAQ,kBAClF,QAAQ,iBAAiB,UAAa,MAAM,aAAa,KAAK,iBAAiB,QAAQ,kBACvF,QAAQ,iBAAiB,UAAa,kBAAkB,MAAM,QAAQ,KAAK,YAAY,QAAQ,UAAU;AAAA,EACjH;AACA,iBAAe,WAAW,QAAqB;AAC7C,WAAO,eAAe;AAGtB,iBAAa,YAAY;AACvB,UAAI;AACF,eAAO,MAAM,QAAQ,OAAO,cAAc;AAAA,MAC5C,UAAE;AACA,kBAAU;AAAA,MACZ;AAAA,IACF,GAAG;AACH,UAAM,OAAO,MAAM;AACnB,WAAO,eAAe;AACtB,QAAI,CAAC,KAAK,MAAM,KAAK,mBAAmB,KAAK;AAC3C,YAAM,IAAI,MAAM,qDAAqD;AACvE,aAAS;AAAA,MACP,GAAG;AAAA,MACH,eAAe,KAAK;AAAA,MACpB,gBAAgB,KAAK;AAAA,MACrB,sBAAsB,KAAK,cAAc,OAAO,UAAQ,KAAK,UAAU,aAAa,KAAK,OAAO,KAAK,aAAa,CAAC,EAAE;AAAA,MACrH,uBAAuB,KAAK,WAAW;AAAA,IACzC;AACA,WAAO;AAAA,EACT;AACA,iBAAe,gBAAgB,YAAoB,cAAsB,QAAqB;AAC5F,QAAI;AACF,UAAI,UAAU,QAAQ,MAAM,IAAsB,uBAAuB,YAAY;AACrF,UAAI,YAAY,UAAa,QAAQ,aAAa,UAAa,MAAM,KAAK,QAAQ;AAChF,kBAAU;AACZ,UAAI,YAAY,QAAW;AACzB,cAAM,SAAS,MAAM,QAAQ,OAAO,eAAe;AAAA,UACjD,UAAU,MAAM;AAAA,UAAG,iBAAiB;AAAA,UAAK;AAAA,UAAwB;AAAA,QACnE,CAAC;AACD,kBAAU;AAAA,UACR,eAAe,OAAO;AAAA,UAAe;AAAA,UAAwB;AAAA,UAAc,WAAW,OAAO,UAAU;AAAA,QACzG;AACA,gBAAQ,MAAM,IAAI,uBAAuB,cAAc,OAAO;AAAA,MAChE;AACA,UAAI,QAAQ,aAAa,QAAW;AAClC,cAAM,QAAQ,MAAM,QAAQ,OAAO,eAAe,EAAE,eAAe,QAAQ,eAAe,YAAY,MAAM,CAAC;AAC7G,YAAI,MAAM,SAAS;AACjB;AACF,eAAO,eAAe;AACtB,cAAMC,YAAW,MAAM,QAAQ,UAAU,KAAK,MAAM,OAAO,UAAU,MAAM,WAAW,MAAM;AAC5F,YAAIA,UAAS,WAAW;AACtB,gBAAM,IAAI,MAAM,iCAAiC;AACnD,kBAAU,EAAE,GAAG,SAAS,UAAU,6BAA6B,MAAMA,UAAS,IAAI,EAAE;AACpF,gBAAQ,MAAM,IAAI,uBAAuB,cAAc,OAAO;AAAA,MAChE;AACA,aAAO,eAAe;AACtB,YAAM,WAAW,QAAQ;AACzB,UAAI,aAAa;AACf,cAAM,IAAI,MAAM,+BAA+B;AACjD,YAAM,QAAQ,OAAO,2BAA2B;AAAA,QAC9C,GAAG;AAAA,QAAS;AAAA,QAAU,YAAY;AAAA,MACpC,CAAC;AAAA,IACH,QAAQ;AACN,UAAI,OAAO;AACT;AACF,YAAM,WAAW,QAAQ,MAAM,IAAY,sBAAsB,YAAY,KAAK;AAClF,cAAQ,MAAM,IAAI,sBAAsB,cAAc,WAAW,CAAC;AAClE,YAAM,UAAU,QAAQ,MAAM,IAAsB,uBAAuB,YAAY;AACvF,UAAI,YAAY,UAAa,MAAM,KAAK,QAAQ;AAC9C,gBAAQ,MAAM,OAAO,uBAAuB,YAAY;AAAA,IAC5D;AAAA,EACF;AAEA,iBAAe,OAAO,QAAqB;AACzC,WAAO,eAAe;AACtB,UAAM,MAAM,MAAM;AAClB,QAAI,OAAO,QAAQ,MAAM,IAAY,kBAAkB,WAAW,KAAK;AACrE;AACF,YAAQ,MAAM,IAAI,kBAAkB,aAAa,MAAM,EAAE;AACzD,UAAM,QAAQ,MAAM,QAAQ,OAAO,qBAAqB;AACxD,QAAI,CAAC,MAAM;AACT,YAAM,IAAI,MAAM,iDAAiD;AACnE,UAAM,SAAS,QAAQ,MAAM,IAAY,kBAAkB,QAAQ,KAAK;AACxE,UAAM,aAAa,MAAM,WAAW,OAAO,eAAa,cAAc,UAAU,KAAK,CAAC;AACtF,QAAI,YAAY;AAGhB,aAAS,QAAQ,GAAG,QAAQ,KAAK,IAAI,WAAW,QAAQ,GAAG,KAAK,YAAY,GAAG,SAAS,GAAG;AACzF,YAAM,YAAY,YAAY,SAAS,SAAS,WAAW,MAAM;AACjE,UAAI,cAAc;AAChB;AACF,cAAQ,MAAM,IAAI,kBAAkB,WAAW,SAAS,QAAQ,KAAK,WAAW,MAAM;AACtF,YAAM,OAAO,QAAQ,MAAM,IAAY,6BAA6B,UAAU,UAAU,KAAK;AAC7F,UAAI,MAAM;AACR;AACF,cAAQ,MAAM,IAAI,6BAA6B,UAAU,YAAY,MAAM,EAAE;AAC7E,mBAAa;AACb,aAAO,eAAe;AACtB,YAAM,gBAAgB,UAAU,YAAY,UAAU,MAAM,aAAa,YAAY,MAAM;AAAA,IAC7F;AAAA,EACF;AACA,iBAAe,eAAe,MAA6F,QAAmC;AAC5J,UAAM,aAAa,OAAO,QAAQ,UAAQ,KAAK,OAAO,OAAO,WAAS,MAAM,aAAa,eAAe,KAAK,oBAAoB,EAAE,IAAI,YAAU;AAAA,MAC/I,eAAe,MAAM,aAAa,KAAK;AAAA,MAAe,OAAO,MAAM,aAAa,KAAK;AAAA,MAAO,WAAW,QAAQ;AAAA,IACjH,EAAE,CAAC;AACH,QAAI,KAAK,4BAA4B,QAAQ,gBAAgB,UAAa,KAAK,QAAQ,eAAe,QAAQ,iBACxG,QAAQ,iBAAiB,UAAa,KAAK,QAAQ,KAAK,iBAAiB,QAAQ,eAAe;AACpG,iBAAW,KAAK;AAAA,QACd,eAAe,KAAK,IAAI;AAAA,QAAY,OAAO,KAAK,IAAI,KAAK;AAAA,QAAO,WAAW,QAAQ;AAAA,MACrF,CAAC;AAAA,IACH;AACA,UAAM,aAAa,MAAM,QAAQ,IAAI,WAAW,IAAI,OAAM,QAAO,MAAM,QAAQ,KAAK,cAAc,GAAG,CAAC,CAAC;AACvG,aAAS;AAAA,MACP,GAAG;AAAA,MACH,WAAW,WAAW,SAAS,KAAK,WAAW,MAAM,SAAO,QAAQ,MAAS;AAAA,MAC7E,cAAc,CAAC,GAAG,IAAI,IAAI,WAAW,IAAI,SAAO,IAAI,KAAK,CAAC,CAAC;AAAA,IAC7D;AAAA,EACF;AACA,SAAO;AAAA,IACL,MAAM,SAAS,QAAQ;AACrB,YAAM,OAAO,MAAM,WAAW,MAAM;AACpC,YAAM,SAAS,KAAK,cAAc,OAAO,UAAQ,KAAK,UAAU,YAAY,KAAK,OAAO,KAAK,WAAS,MAAM,aAAa,eAAe,KAAK,wBAAwB,cAAc,KAAK,CAAC,CAAC;AAC1L,YAAM,eAAe,MAAM,MAAM;AACjC,UAAI,OAAO,UAAU,QAAQ,oBAAoB;AAC/C,cAAM,IAAI,MAAM,8CAA8C;AAChE,YAAM,gBAAgD,CAAC;AACvD,iBAAW,aAAa,QAAQ;AAC9B,YAAI,UAAU,UAAU,YAAY,UAAU,oBAAoB;AAChE;AACF,YAAI;AACF,gBAAM,QAAQ,UAAU,OAAO,KAAK,UAAQ,KAAK,aAAa,eAAe,UAAU,oBAAoB;AAC3G,cAAI,UAAU,UAAa,CAAC,cAAc,KAAK;AAC7C,kBAAM,IAAI,MAAM,qDAAqD;AACvE,gBAAM,YAAY,MAAM,aAAa;AACrC,cAAI,UAAU,YAAY,QAAQ;AAChC,kBAAM,IAAI,MAAM,2CAA2C;AAC7D,gBAAM,eAAe,MAAM,QAAQ,KAAK,cAAc;AAAA,YACpD,eAAe,UAAU;AAAA,YAAe,OAAO,UAAU;AAAA,YAAO,WAAW,QAAQ;AAAA,UACrF,CAAC;AACD,cAAI,iBAAiB;AACnB,kBAAM,IAAI,MAAM,4CAA4C;AAC9D,gBAAM,YAAY,MAAM,wBAAwB;AAAA,YAC9C;AAAA,YAAc,YAAY,MAAM;AAAA,YAAY,cAAc;AAAA,UAC5D,CAAC;AACD,kBAAQ,UAAU,cAAc,UAAU,QAAQ;AAClD,wBAAc,KAAK;AAAA,YACjB,kBAAkB,MAAM,aAAa;AAAA,YACrC,aAAa,MAAM,QAAQ;AAAA,YAC3B,cAAc,UAAU,OAAO;AAAA,YAC/B,GAAI,UAAU,OAAO,eAAe,SAAY,CAAC,IAAI,EAAE,YAAY,UAAU,OAAO,WAAW;AAAA,YAC/F,sBAAsB,QAAQ;AAAA,YAC9B,YAAY,MAAM;AAAA,YAClB,UAAU,UAAU;AAAA,YACpB,UAAU,UAAU;AAAA,YACpB,cAAc,UAAU;AAAA,YACxB,GAAI,UAAU,YAAY,OAAO,CAAC,IAAI,EAAE,SAAS,UAAU,QAAQ;AAAA,YACnE,QAAQ,UAAU,OAAO;AAAA,YACzB,cAAc,UAAU,OAAO;AAAA,YAC/B,qBAAqB,UAAU,OAAO;AAAA,YACtC,YAAY,MAAM,qBAAqB,UAAU,MAAM;AAAA,UACzD,CAAC;AAAA,QACH,QAAQ;AAIN,mBAAS,EAAE,GAAG,QAAQ,uBAAuB,OAAO,wBAAwB,EAAE;AAAA,QAChF;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAAA,IACA,MAAM,SAAS,cAAc,QAAQ;AACnC,YAAM,OAAO,MAAM,WAAW,MAAM;AACpC,aAAO,KAAK,cAAc,KAAK,UAAQ,KAAK,UAAU,YAAY,KAAK,yBAAyB,aAAa,oBACxG,KAAK,OAAO,KAAK,WAAS,MAAM,aAAa,eAAe,aAAa,oBAAoB,MAAM,eAAe,aAAa,cAAc,cAAc,KAAK,CAAC,CAAC;AAAA,IACzK;AAAA,IACA,MAAM,cAAc,QAAQ;AAG1B,UAAI,cAAc,QAAW;AAC3B,cAAM,QAAQ,oBAAoB,CAAC,MAAM,QAAQ,MAAM,CAAC;AACxD,qBAAa,YAAY;AACvB,cAAI;AACF,kBAAM,OAAO,MAAM,MAAM;AAAA,UAC3B,UAAE;AACA,kBAAM,QAAQ;AACd,wBAAY;AAAA,UACd;AAAA,QACF,GAAG;AAAA,MACL;AACA,YAAM;AAAA,IACR;AAAA,IACA,MAAM,QAAQ;AACZ,YAAM,QAAQ,WAAW,CAAC,WAAW,OAAO,EAAE,OAAO,UAAQ,SAAS,MAAS,CAAC;AAAA,IAClF;AAAA,IACA,QAAQ,OAAO,EAAE,GAAG,QAAQ,mBAAmB,QAAQ,MAAM,QAAgB,oBAAoB,EAAE,OAAO,CAAC,KAAK,SAAS,MAAM,KAAK,OAAO,CAAC,EAAE;AAAA,EAChJ;AACF;;;ACrPA,SAAS,UAAAC,eAAc;AACvB,SAAS,cAAc;AACvB,SAAS,eAAe;AACxB,SAAS,WAAW,YAAY;AAEhC,SAAS,SAAS;;;ACLlB,SAAS,kBAAkB;AAE3B,SAAS,qBAAqB;AAE9B,SAAS,8BAA8B,qBAAqB;AAC5D,SAAS,sBAAsB;AAE/B,SAAS,wBAAwB;AACjC,SAAS,cAAc,uBAAuB;AAavC,SAAS,mBAAmB,QAA4B;AAC7D,SAAO,WAAW,QAAQ,EAAE,OAAO,cAAc,cAAc,MAAM,MAAM,CAAC,CAAC,EAAE,OAAO,KAAK;AAC7F;AACA,eAAsB,0BAA6B,WAAuB,QAAqB,YAAY,KAAoB;AAC7H,QAAM,QAAQ,oBAAoB,CAAC,MAAM,GAAG,SAAS;AACrD,QAAM,WAAW,MAAM;AACvB,MAAI;AACJ,QAAM,UAAU,IAAI,QAAe,CAAC,UAAU,WAAW;AACvD,kBAAc,MAAM,OAAO,IAAI,MAAM,0CAA0C,CAAC;AAChF,aAAS,iBAAiB,SAAS,aAAa,EAAE,MAAM,KAAK,CAAC;AAAA,EAChE,CAAC;AACD,MAAI;AACF,aAAS,eAAe;AACxB,WAAO,MAAM,QAAQ,KAAK,CAAC,WAAW,OAAO,CAAC;AAAA,EAChD,UAAE;AACA,QAAI,gBAAgB;AAClB,eAAS,oBAAoB,SAAS,WAAW;AACnD,UAAM,QAAQ;AAAA,EAChB;AACF;AAEO,SAAS,yBAAyB,SAKf;AACxB,QAAM,SAAS,cAAc,MAAM,QAAQ,MAAM;AACjD,MAAI,OAAO,SAAS;AAClB,UAAM,IAAI,MAAM,kCAAkC;AACpD,SAAO;AAAA,IACL;AAAA,IACA,MAAM,KAAK,QAAQ;AACjB,YAAM,UAAU,OAAO,MAAM,0BAA0B,QAAQ,QAAQ,QAAQ,OAAO,QAAQ,CAAC,GAAG,MAAM,CAAC;AACzG,UAAI,YAAY,OAAO;AACrB,cAAM,IAAI,MAAM,mCAAmC;AACrD,YAAM,WAAW,OAAO,MAAM,0BAA0B,QAAQ,QAAQ,QAAQ,OAAO,aAAa,WAAW,CAAC,GAAG,MAAM,CAAC;AAC1H,UAAI,CAAC,OAAO,cAAc,QAAQ,KAAK,WAAW;AAChD,cAAM,IAAI,MAAM,+BAA+B;AACjD,YAAM,QAAQ,MAAM,0BAA0B,QAAQ,QAAQ,QAAQ,OAAO,MAAM,cAAc,iBAAiB,UAAU,IAAI,CAAC,CAAC,GAAG,MAAM;AAC3I,UAAI,QAAQ,CAAC,EAAE,UAAU,YAAY,CAAC,kBAAkB,KAAK,MAAM,CAAC,EAAE,KAAK,GAAG;AAC5E,cAAM,IAAI,MAAM,yDAAyD;AAAA,MAC3E;AACA,UAAI,OAAO,MAAM,CAAC,EAAE,KAAK,MAAM,OAAO,WAAW,MAAM,eAAe,KAAK,MAAM,CAAC,CAAC,MAAM,MAAM,CAAC,EAAE,OAAO;AACvG,cAAM,IAAI,MAAM,wDAAwD;AAAA,MAC1E;AACA,aAAO,EAAE,UAAU,MAAM,MAAM,CAAC,EAAE,MAAM;AAAA,IAC1C;AAAA,EACF;AACF;AACO,SAAS,uCAAuC,SAM7B;AACxB,QAAM,SAAS,cAAc,MAAM,QAAQ,MAAM;AACjD,MAAI,OAAO,SAAS;AAClB,UAAM,IAAI,MAAM,uCAAuC;AACzD,QAAM,EAAE,SAAS,YAAY,IAAI;AACjC,QAAM,MAAM,IAAI,IAAI,QAAQ,MAAM;AAClC,MAAI,IAAI,aAAa,YAAY,IAAI,aAAa,MAAM,IAAI,aAAa,MAAM,IAAI,SAAS,IAAI;AAC9F,UAAM,IAAI,MAAM,yEAAyE;AAAA,EAC3F;AACA,QAAM,aAAa,IAAI,aAAa,IAAI,IAAI;AAC5C,aAAW,UAAU,QAAQ,oBAAoB;AACjD,QAAM,YAAY,sCAAsC;AAAA,IACtD,kBAAkB,QAAQ;AAAA,IAAkB,kBAAkB,IAAI,OAAO;AAAA,IAAM,gBAAgB;AAAA,EACjG,CAAC;AACD,aAAW,aAAa,UAAU;AAClC,aAAW,kBAAkB,EAAE,aAAa,EAAE,CAAC;AAC/C,QAAM,WAAW,IAAI,gBAAgB,YAAY,QAAW,EAAE,eAAe,GAAG,cAAc,GAAG,CAAC;AAClG,MAAI;AACJ,MAAI,SAAS;AACb,MAAI;AACJ,QAAM,QAAQ,MAAM,aAAa,YAAY;AAC3C,aAAS;AACT,aAAS,QAAQ;AACjB,UAAM,UAAU,MAAM;AAAA,EACxB,GAAG;AACH,QAAM,UAAU,MAAM;AACpB,SAAK,MAAM;AAAA,EACb;AACA,iBAAe,OAAO;AACpB,UAAM,WAAW,CAAC,SAAS,WAAW,GAAG,SAAS,SAAS,CAAC,GAAG,SAAS,SAAS,WAAW,CAAC;AAG7F,QAAI;AACF,YAAM,CAAC,SAAS,SAAS,KAAK,IAAI,MAAM,QAAQ,IAAI,QAAQ;AAC5D,UAAI,QAAQ,QAAQ,SAAS,MAAM,WAAW,SAAS,MAAM,MAAM,CAAC,EAAE,YAAY,MAAM,aAAa;AACnG,cAAM,IAAI,MAAM,yCAAyC;AAAA,MAC3D;AACA,UAAI,OAAO,SAAS,QAAQ,UAAU,QAAQ,CAAC,uBAAuB,KAAK,MAAM,IAAI,KAChF,CAAC,OAAO,cAAc,MAAM,MAAM,KAAK,MAAM,SAAS,EAAG,OAAM,IAAI,MAAM,wCAAwC;AACtH,aAAO,EAAE,UAAU,MAAM,QAAQ,MAAM,MAAM,KAAK,MAAM,CAAC,EAAE,YAAY,EAAE;AAAA,IAC3E,SAAS,OAAO;AACd,YAAM,QAAQ,WAAW,QAAQ;AACjC,YAAM;AAAA,IACR;AAAA,EACF;AACA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,MAAM,KAAK,QAAQ;AACjB,aAAO,eAAe;AACtB,UAAI,OAAQ,OAAM,IAAI,MAAM,2BAA2B;AACvD,aAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;AACxD,mBAAa,YAAY;AACvB,YAAI;AACF,iBAAO,MAAM,KAAK;AAAA,QACpB,UAAE;AACA,oBAAU;AAAA,QACZ;AAAA,MACF,GAAG;AACH,UAAI;AACF,eAAO,MAAM,0BAA0B,SAAS,QAAQ,QAAQ,oBAAoB,GAAM;AAAA,MAC5F,UAAE;AACA,eAAO,oBAAoB,SAAS,OAAO;AAAA,MAC7C;AAAA,IACF;AAAA,EACF;AACF;AAEO,SAAS,iCAAiC,SAKvB;AACxB,QAAM,SAAS,cAAc,MAAM,QAAQ,MAAM;AACjD,MAAI,OAAO,SAAS;AAClB,UAAM,IAAI,MAAM,gCAAgC;AAClD,QAAM,aAAa,QAAQ,eAAe,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AAC5E,SAAO;AAAA,IACL;AAAA,IACA,MAAM,KAAK,QAAQ;AACjB,aAAO,eAAe;AACtB,YAAM,MAAM,WAAW;AACvB,UAAI,CAAC,OAAO,cAAc,GAAG,KAAK,MAAM;AACtC,cAAM,IAAI,MAAM,+BAA+B;AACjD,aAAO,EAAE,UAAU,6BAA6B,QAAQ,GAAG,KAAK,GAAG;AAAA,IACrE;AAAA,EACF;AACF;;;AD5JA,IAAM,aAAa,EAAE,aAAa;AAAA,EAChC,kBAAkB,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE;AAAA,EAChD,iBAAiB,EAAE,MAAM,EAAE,aAAa;AAAA,IACtC,UAAU,EAAE,IAAI;AAAA,IAChB,SAAS,EAAE,aAAa,EAAE,8BAA8B,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI,EAAE,MAAM,qBAAqB,EAAE,CAAC;AAAA,EACpH,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC;AAAA,EACtB,kBAAkB,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,OAAS,EAAE,QAAQ,KAAM;AAAA,EACvE,kBAAkB,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,IAAI,GAAM,EAAE,QAAQ,GAAM;AACxE,CAAC;AAkBD,IAAM,0BAA0B;AAAA,EAC9B,CAAC,WAAW,CAAC;AAAA,EACb,CAAC,YAAY,CAAC;AAAA,EACd,CAAC,cAAc,EAAE;AAAA,EACjB,CAAC,aAAa,CAAC;AAAA,EACf,CAAC,eAAe,EAAE;AAAA,EAClB,CAAC,cAAc,EAAE;AAAA,EACjB,CAAC,aAAa,EAAE;AAAA,EAChB,CAAC,aAAa,EAAE;AAAA,EAChB,CAAC,eAAe,EAAE;AAAA,EAClB,CAAC,eAAe,EAAE;AAAA,EAClB,CAAC,cAAc,EAAE;AAAA,EACjB,CAAC,gBAAgB,EAAE;AAAA,EACnB,CAAC,eAAe,EAAE;AAAA,EAClB,CAAC,aAAa,CAAC;AAAA,EACf,CAAC,aAAa,CAAC;AACjB;AACA,IAAM,0BAA0B;AAAA,EAC9B,CAAC,UAAU,EAAE;AAAA,EAAG,CAAC,cAAc,EAAE;AAAA,EAAG,CAAC,UAAU,EAAE;AAAA,EAAG,CAAC,UAAU,EAAE;AACnE;AAQA,IAAI;AAEJ,SAAS,6BAAqD;AAC5D,MAAI,2BAA2B,OAAW,QAAO;AACjD,QAAM,gBAAgB,IAAI,UAAU;AACpC,aAAW,CAAC,SAAS,MAAM,KAAK,yBAAyB;AACvD,kBAAc,UAAU,SAAS,QAAQ,MAAM;AAAA,EACjD;AACA,QAAM,aAAa,IAAI,UAAU;AACjC,aAAW,UAAU,UAAU,GAAG,MAAM;AACxC,QAAM,gBAAgB,IAAI,UAAU;AACpC,aAAW,CAAC,SAAS,MAAM,KAAK,yBAAyB;AACvD,kBAAc,UAAU,SAAS,QAAQ,MAAM;AAAA,EACjD;AACA,2BAAyB;AAAA,IACvB;AAAA,IAAY;AAAA,IAAe;AAAA,EAC7B;AACA,SAAO;AACT;AAGO,SAAS,yBAAyB,SAA0B;AACjE,QAAM,SAAS,2BAA2B;AAC1C,SAAO,KAAK,OAAO,MAAM,IACrB,CAAC,OAAO,cAAc,MAAM,SAAS,MAAM,IAC3C,KAAK,OAAO,MAAM,KAAK,OAAO,WAAW,MAAM,SAAS,MAAM,KAAK,CAAC,OAAO,cAAc,MAAM,SAAS,MAAM;AACpH;AACO,SAAS,8BAA8B,OAAgE;AAC5G,QAAM,SAAS,WAAW,UAAU,KAAK;AACzC,MAAI,CAAC,OAAO,QAAS,OAAM,IAAI,MAAM,iDAAiD;AACtF,QAAM,UAAU,OAAO;AACvB,QAAM,UAAU,IAAI,IAAI,QAAQ,iBAAiB,IAAI,CAAC,aAAa;AACjE,UAAM,MAAM,IAAI,IAAI,QAAQ;AAC5B,QAAI,IAAI,SAAS,YAAY,IAAI,aAAa,YAAa,IAAI,SAAS,MAAM,IAAI,SAAS,SACtF,IAAI,aAAa,MAAM,IAAI,aAAa,MAAM,IAAI,SAAS;AAC9D,YAAM,IAAI,MAAM,wEAAwE;AAC1F,UAAM,UAAU,IAAI,SAAS,WAAW,aAAa,EAAE;AACvD,QAAI,KAAK,OAAO,MAAM,KAAK,CAAC,yBAAyB,OAAO;AAC1D,YAAM,IAAI,MAAM,qCAAqC;AACvD,QAAI,IAAI,aAAa,eAAe,IAAI,SAAS,SAAS,YAAY,KAAK,IAAI,SAAS,SAAS,QAAQ;AACvG,YAAM,IAAI,MAAM,qCAAqC;AACvD,WAAO;AAAA,EACT,CAAC,CAAC;AACF,QAAM,gBAAgB,CAAC,aAAqB;AAC1C,QAAI,CAAC,QAAQ,IAAI,QAAQ;AACvB,YAAM,IAAI,MAAM,iDAAiD;AAAA,EACrE;AACA,QAAM,kBAAkB,oBAAI,IAA8C;AAC1E,aAAW,SAAS,QAAQ,iBAAiB;AAC3C,kBAAc,MAAM,QAAQ;AAC5B,QAAI,gBAAgB,IAAI,MAAM,QAAQ,EAAG,OAAM,IAAI,MAAM,mDAAmD;AAC5G,oBAAgB,IAAI,MAAM,UAAU,MAAM,OAAO;AAAA,EACnD;AACA,SAAO;AAAA,IACL;AAAA,IACA,MAAM,KAAK,UAAU,MAAM,QAAQ,KAAK;AACtC,oBAAc,QAAQ;AACtB,aAAO,eAAe;AACtB,YAAM,MAAM,IAAI,IAAI,QAAQ;AAC5B,YAAM,QAAQ,oBAAoB,CAAC,MAAM,GAAG,QAAQ,gBAAgB;AACpE,YAAM,WAAW,MAAM;AACvB,UAAI;AACF,cAAM,YAAY,MAAM,0BAA0B,OAAO,IAAI,SAAS,WAAW,aAAa,EAAE,GAAG,EAAE,KAAK,MAAM,UAAU,KAAK,CAAC,GAAG,UAAU,QAAQ,gBAAgB;AACrK,iBAAS,eAAe;AACxB,YAAI,UAAU,WAAW,KAAK,UAAU,KAAK,UAAQ,CAAC,yBAAyB,KAAK,OAAO,CAAC;AAC1F,gBAAM,IAAI,MAAM,oDAAoD;AACtE,cAAM,WAAW,UAAU,CAAC;AAC5B,YAAI,aAAa;AACf,gBAAM,IAAI,MAAM,gCAAgC;AAClD,cAAM,UAAUC,QAAO,KAAK,KAAK,UAAU,IAAI,CAAC;AAChD,YAAI,QAAQ,aAAa;AACvB,gBAAM,IAAI,MAAM,qCAAqC;AACvD,eAAO,MAAM,IAAI,QAAgC,CAAC,SAAS,WAAW;AACpE,gBAAM,OAAO,QAAQ,KAAK;AAAA,YACxB,OAAO;AAAA,YACP,SAAS;AAAA,cACP,GAAG,gBAAgB,IAAI,QAAQ;AAAA,cAC/B,kBAAkB,QAAQ;AAAA,cAC1B,gBAAgB;AAAA,cAChB,GAAI,QAAQ,SAAY,CAAC,IAAI,EAAE,eAAe,UAAU,GAAG,GAAG;AAAA,YAChE;AAAA,YACA,OAAO,WAAW,eAAe,UAAU;AAGzC,kBAAI,cAAc;AAChB,yBAAS,MAAM,CAAC,EAAE,SAAS,SAAS,SAAS,QAAQ,SAAS,OAAO,CAAC,CAAC;AAAA;AAEvE,yBAAS,MAAM,SAAS,SAAS,SAAS,MAAM;AAAA,YACpD;AAAA,YACA,QAAQ;AAAA,YACR,oBAAoB;AAAA,YACpB,QAAQ;AAAA,UACV,GAAG,CAAC,aAAa;AACf,kBAAM,SAAS,SAAS,cAAc;AACtC,gBAAI,UAAU,OAAO,SAAS,KAAK;AACjC,uBAAS,QAAQ;AACjB,qBAAO,IAAI,MAAM,yCAAyC,CAAC;AAC3D;AAAA,YACF;AACA,gBAAI,OAAO;AACX,kBAAM,SAAmB,CAAC;AAC1B,qBAAS,GAAG,QAAQ,CAAC,UAAkB;AACrC,sBAAQ,MAAM;AACd,kBAAI,OAAO,QAAQ,kBAAkB;AACnC,yBAAS,QAAQ;AACjB,uBAAO,IAAI,MAAM,uCAAuC,CAAC;AAAA,cAC3D;AACE,uBAAO,KAAK,KAAK;AAAA,YACrB,CAAC;AACD,qBAAS,GAAG,SAAS,MAAM,OAAO,IAAI,MAAM,iCAAiC,CAAC,CAAC;AAC/E,qBAAS,GAAG,OAAO,MAAM;AACvB,kBAAI;AACF,sBAAM,eAAwB,SAAS,IAAI,OAAO,KAAK,MAAMA,QAAO,OAAO,MAAM,EAAE,SAAS,MAAM,CAAC;AACnG,sBAAM,QAAQ,OAAO,SAAS,QAAQ,aAAa,CAAC;AACpD,wBAAQ;AAAA,kBACN;AAAA,kBAAQ,MAAM;AAAA,kBAAc,GAAI,OAAO,SAAS,KAAK,KAAK,QAAQ,IAAI,EAAE,cAAc,KAAK,IAAI,QAAQ,KAAM,IAAS,EAAE,IAAI,CAAC;AAAA,gBAC/H,CAAC;AAAA,cACH,QAAQ;AACN,uBAAO,IAAI,MAAM,sCAAsC,CAAC;AAAA,cAC1D;AAAA,YACF,CAAC;AAAA,UACH,CAAC;AACD,eAAK,GAAG,SAAS,MAAM,OAAO,IAAI,MAAM,gCAAgC,CAAC,CAAC;AAC1E,eAAK,IAAI,OAAO;AAAA,QAClB,CAAC;AAAA,MACH,UAAE;AACA,cAAM,QAAQ;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AACF;;;AEhMA,SAAS,qBAAAC,0BAAyB;AAGlC,SAAS,qBAAqB,qBAAqB;AACnD,SAAS,iBAAiB;AAC1B,SAAS,4CAA4C;AAIrD,SAAS,6BAA6B,2BAA2B;AAEjE,SAAS,KAAAC,UAAS;;;ACXlB,SAAS,mBAAmB;AAC5B,SAAS,qBAAAC,0BAAyB;AAGlC,SAAS,oBAAoB,uBAAuB;AAwB7C,SAAS,oBAAoB,QAAuB,cAAkD;AAC3G,MAAI,CAACC,mBAAkB,OAAO,cAAc,YAAY;AACtD,UAAM,IAAI,MAAM,sDAAsD;AACxE,MAAI,CAAC,OAAO,cAAc,OAAO,MAAM,KAAK,OAAO,SAAS,aAAa,eAAe,KACnF,CAAC,OAAO,WAAW,OAAO,UAAU,OAAO,aAAa,EAAE,KAAK,WAAS,EAAE,OAAO,cAAc,KAAK,KAAK,SAAS,EAAE,KACpH,CAAC,OAAO,UAAU,OAAO,YAAY,OAAO,WAAW,OAAO,eAAe,OAAO,YAAY,OAAO,gBAAgB,OAAO,cAAc,EAC5I,KAAK,WAAS,UAAU,UAAa,EAAE,OAAO,cAAc,KAAK,KAAK,SAAS,EAAE,KAC/E,CAAC,CAAC,UAAU,WAAW,WAAW,EAAE,SAAS,OAAO,KAAK;AAC9D,UAAM,IAAI,MAAM,+CAA+C;AACjE,MAAI,OAAO,YAAY,OAAW;AAClC,QAAM,UAAU,gBAAgB,MAAM,OAAO,OAAO;AACpD,MAAK,aAAa,iBAAiB,aAAa,QAAQ,iBAAiB,OAAO,SAAS,KACpF,QAAQ,iBAAiB,aAAa,gBAAgB,QAAQ,aAAa,QAAQ,eAAe,IAAI,aAAa,uBACnH,QAAQ,yBAAyB,aAAa,wBAAwB,QAAQ,iBAAiB,aAAa,gBAC5G,QAAQ,YAAY,aAAa,WAAW,QAAQ,eAAe,aAAa,cAChF,CAACA,mBAAkB,QAAQ,QAAQ,aAAa,MAAM;AACzD,UAAM,IAAI,MAAM,+CAA+C;AACnE;AACO,SAAS,UAAU,cAA4C,cAAsB,YAAoB,KAAa,SAAS,YAAY,EAAE,EAAE,SAAS,KAAK,GAAG;AACrK,SAAO,gBAAgB,MAAM;AAAA,IAC3B,QAAQ;AAAA,IACR,sBAAsB,aAAa;AAAA,IACnC,cAAc,aAAa;AAAA,IAC3B,cAAc,aAAa;AAAA,IAC3B,YAAY,aAAa;AAAA,IACzB;AAAA,IACA,UAAU;AAAA,IACV,QAAQ,aAAa;AAAA,IACrB;AAAA,IACA;AAAA,IACA,GAAI,aAAa,YAAY,SAAY,CAAC,IAAI,EAAE,SAAS,aAAa,QAAQ;AAAA,EAChF,CAAC;AACH;AAEO,IAAM,wBAAN,cAAoC,MAAM;AAAA,EACtC;AAAA,EACA;AAAA,EACT,YAAY,QAAgB,cAAuB;AACjD,UAAM,4BAA4B;AAClC,SAAK,SAAS;AACd,SAAK,eAAe;AAAA,EACtB;AAAA,EAEA,IAAI,YAAY;AACd,WAAO,KAAK,WAAW,OAAO,KAAK,WAAW,OAAO,KAAK,UAAU;AAAA,EACtE;AACF;AAEO,SAAS,0BAA0B,SAOvC;AACD,QAAM;AAAA,IACJ;AAAA,IAAY;AAAA,IAAO;AAAA,IAAO;AAAA,IAAK;AAAA,IAAQ;AAAA,EACzC,IAAI;AACJ,QAAM,eAAe,OAAO;AAC5B,QAAM,OAAO,MAAM,IAAI,mBAAmB,aAAa,MAAM,CAAC;AAC9D,QAAM,QAAQ,OAAO;AACrB,QAAM,UAAU,cAAc,QAAQ,KAAK,UAAU;AACrD,MAAI,SAAS,UAAa,gBAAgB,SAAS,KAAK,WAAW,aAAa,cAAc;AAC5F,QAAI,UAAU,UAAa,CAAC,QAAS,QAAO,EAAE,GAAG,QAAQ,SAAS,MAAM;AACxE,QAAI,UAAU,OAAW,OAAM,IAAI,0BAA0B,aAAa,kBAAkB;AAAA,MAC1F,GAAG;AAAA,MAAQ,SAAS;AAAA,MAAW,YAAY,OAAO,aAAa,KAAK;AAAA,IACtE,CAAC;AACD;AAAA,EACF;AACA,QAAM,UAAU,WAAW,QAAQ,KAAK,UAAU;AAClD,MAAI,kBAAkB,QAAQ,KAAK,UAAU,OAAO,SAAS,OAAO,GAAG;AACrE,UAAM,UAAU,UAAU,cAAc,KAAK,UAAU,KAAK,UAAU,GAAG;AACzE,UAAM,WAAW;AAAA,MACf,GAAG;AAAA,MACH;AAAA,MACA,UAAU;AAAA,MACV,YAAY;AAAA,MACZ,gBAAgB,KAAK;AAAA,MACrB,aAAa,OAAO,cAAc,MAAM,UAAU,UAAa,CAAC,UAAU,IAAI;AAAA,MAC9E,YAAY,OAAO,aAAa,MAAM,UAAU,IAAI;AAAA,MACpD,eAAe;AAAA,MACf,OAAO;AAAA,IACT;AACA,UAAM,IAAI,0BAA0B,aAAa,kBAAkB,QAAQ;AAC3E,WAAO;AAAA,EACT;AACA,MAAI,QAAS,OAAM,IAAI,0BAA0B,aAAa,kBAAkB;AAAA,IAC9E,GAAG;AAAA,IAAQ,SAAS;AAAA,IAAW,YAAY,OAAO,aAAa,KAAK;AAAA,EACtE,CAAC;AACD,SAAO,UAAU,UAAa,UAAU,SAAY,EAAE,GAAG,QAAQ,SAAS,MAAM;AAClF;AAEA,SAAS,cAAc,QAAuB,KAAa,QAA2C;AACpG,SAAO,OAAO,YAAY,WAAc,MAAM,OAAO,QAAQ,WAAW,OAAO,sBAAsB,OAAO,YAAY,MAAM,OAAO;AACvI;AACA,SAAS,WAAW,QAAuB,KAAa,QAA2C;AACjG,SAAO,OAAO,OAAO,cAAc,OAAO,kBAAkB,MAAM,OAAO;AAC3E;AACA,SAAS,kBAAkB,QAAuB,MAAc,OAAgB,SAAkB,SAA2B;AAC3H,SAAO,SAAS,QAAQ,OAAO,SAAS,cAAc,OAAO,kBAAkB,OAAO,WAAY,YAAY,OAAO,YAAY,UAAa;AAChJ;AACO,SAAS,eAAe,QAAuB,SAAoC,MAAc,OAAgB,KAA4B;AAClJ,QAAM,aAAa,SAAS;AAC5B,QAAM,OAAO,iBAAiB,yBAAyB,MAAM,iBAAiB,SAC1E,MAAM,eACN,KAAK,IAAI,KAAS,MAAQ,KAAK,KAAK,IAAI,OAAO,UAAU,CAAC,CAAE;AAChE,SAAO;AAAA,IACL,GAAG;AAAA,IACH,UAAU,OAAO,WAAW;AAAA,IAC5B,eAAe,aAAa,SAAS,iBAAiB,OAAO,iBAAiB,IAAI,OAAO;AAAA,IACzF,UAAU,aAAa,SAAS,YAAY,OAAO,YAAY,IAAI,OAAO;AAAA,IAC1E,OAAO,CAAC,cAAc,iBAAiB,yBAAyB,CAAC,MAAM,YAAY,YAAY;AAAA,IAC/F,eAAe,MAAM,MAAO,KAAK,IAAI,MAAW,IAAI;AAAA,IACpD,WAAW;AAAA,EACb;AACF;;;AChJA,SAAS,eAAAC,oBAAmB;AAG5B;AAAA,EACE;AAAA,EAAsB,mBAAAC;AAAA,EAAiB;AAAA,OAClC;AAEP,SAAS,kBAAAC,uBAAsB;AAExB,SAAS,8BAA8B,SAI3C;AACD,QAAM,YAAY,qBAAqB,MAAM,QAAQ,SAAS;AAC9D,MAAI,OAAO,QAAQ,QAAQ,OAAO,EAAE,QAAQ,QAAQ,EAAE,EAAE,YAAY,MAAM;AACxE,UAAM,IAAI,MAAM,oCAAoC;AACtD,SAAO;AAAA,IACL,MAAM,KAAK,OAAqB,UAAkB;AAChD,YAAM,QAAQD,iBAAgB,MAAM,KAAK;AACzC,YAAM,YAAY,MAAMC,gBAAe,SAAS,KAAK;AACrD,YAAM,MAAM,QAAQ,aAAa,KAAK,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AAClE,UAAI,CAAC,OAAO,cAAc,GAAG,KAAK,MAAM;AACtC,cAAM,IAAI,MAAM,oCAAoC;AACtD,YAAM,EAAE,OAAO,IAAI,IAAI,MAAM,QAAQ,QAAQ,QAAQ;AAAA,QACnD;AAAA,QACA,QAAQ,EAAE,WAAW,KAAKF,aAAY,EAAE,EAAE,SAAS,KAAK,EAAE;AAAA,QAC1D;AAAA,QACA,QAAQ;AAAA,QACR,KAAK;AAAA,MACP,CAAC;AACD,aAAO;AAAA,QACL;AAAA,QAAO;AAAA,QAAW;AAAA,QAAK;AAAA,MACzB;AAAA,IACF;AAAA,EACF;AACF;;;AFsBA,SAAS,gBAAgB,QAAmD;AAC1E,UAAQ,QAAQ,aAAa,UAAU,QAAQ,wBAAwB,OAAO;AAChF;AAgEA,IAAM,wBAAN,cAAoC,cAAkC;AAAA,EACpE,MAAyB,QAAQ,SAA6C;AAC5E,UAAM,KAAK,OAAO,KAAK,QAAQ,MAAM;AAAA,EACvC;AACF;AAJM,wBAAN;AAAA,EADC,UAAU;AAAA,GACL;AAKN,IAAM,YAAYG,GAAE,OAAO;AAAA,EACzB,aAAaA,GAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,QAAQ,CAAC;AAAA,EACtD,YAAYA,GAAE,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,IAAI,GAAM,EAAE,QAAQ,GAAI;AAAA,EAC9D,kBAAkBA,GAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI,EAAE,QAAQ,EAAE;AAAA,EAC9D,kBAAkBA,GAAE,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,IAAI,GAAM,EAAE,QAAQ,GAAM;AACxE,CAAC;AAED,SAAS,gBAAgB,SAA0C;AACjE,QAAM,eAAe,oBAAoB,MAAM,QAAQ,YAAY;AACnE,QAAM,aAAa,QAAQ,eAAe,SAAY,SAAY,4BAA4B,MAAM,QAAQ,UAAU;AACtH,MAAK,iBAAiB,mBAAoB,eAAe,QAAY,OAAM,IAAI,UAAU,kDAAkD;AAC3I,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,mBAAmB,iBAAiB,gBAAgB,2BAA2B;AAAA,IAC/E,QAAQ,UAAU,MAAM,OAAO;AAAA,EACjC;AACF;AACA,eAAsB,sCAAsC,SAA6E;AACvI,QAAM;AAAA,IACJ;AAAA,IAAY;AAAA,IAAc;AAAA,IAAmB;AAAA,EAC/C,IAAI,gBAAgB,OAAO;AAC3B,MAAI,QAAQ,QAAQ,SAAS,KAAK,QAAQ,QAAQ,SAAS;AACzD,UAAM,IAAI,MAAM,4DAA4D;AAC9E,QAAM,QAAQ,QAAQ,eAAe,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AACvE,QAAM,SAAS,8BAA8B;AAAA,IAC3C,SAAS,QAAQ;AAAA,IAAS,WAAW,QAAQ;AAAA,IAAW,YAAY;AAAA,EACtE,CAAC;AACD,QAAM,gBAAgB,IAAI,IAAI,QAAQ,QAAQ,IAAI,YAAU,CAAC,mBAAmB,OAAO,MAAM,GAAG,MAAM,CAAC,CAAC;AACxG,MAAI,cAAc,SAAS,QAAQ,QAAQ;AACzC,UAAM,IAAI,MAAM,qCAAqC;AACvD,QAAM,QAAQ,QAAQ;AACtB,QAAM,eAAe,MAAM,IAAY,YAAY,uBAAuB;AAC1E,MAAI,iBAAiB,UAAa,iBAAiB,aAAc,OAAM,IAAI,MAAM,wGAAwG;AACzL,QAAM,IAAI,YAAY,yBAAyB,YAAY;AAC3D,QAAM,QAAQ,IAAI,gBAAgB;AAClC,QAAM,kBAAkB,oBAAI,IAAY;AACxC,MAAI,UAAU;AACd,MAAI,QAAQ;AACZ,MAAI,eAAe;AACnB,MAAI,SAAS;AACb,MAAI;AACJ,MAAI,iBAAiB;AACrB,MAAI;AACJ,QAAM,QAAQ,CAAI,SAAqB,WAAwB,0BAA0B,SAAS,QAAQ,OAAO,gBAAgB;AACjI,WAAS,aAAa,cAA4C,KAA4B;AAC5F,QAAI,aAAa,iBAAiB,gBAAgB,CAACC,mBAAkB,aAAa,YAAY,UAAU;AACtG,YAAM,IAAI,MAAM,6DAA6D;AAC/E,QAAI,iBAAiB,kBAAkB,aAAa,wBAAwB,KAAK,aAAa,gBAAgB,QAAY,OAAM,IAAI,MAAM,kCAAkC;AAC5K,QAAI,QAAQ,gBAAgB,UAAa,aAAa,gBAAgB,QAAQ;AAC5E,YAAM,IAAI,MAAM,qEAAqE;AACvF,UAAM,MAAM,aAAa;AACzB,QAAI,iBAAiB,iBAAiB,MAAM,IAAI,mBAAmB,GAAG,MAAM,UACvE,MAAM,QAAQ,iBAAiB,EAAE,UAAU,OAAO,iBAAkB,OAAM,IAAI,MAAM,mEAAmE;AAC5J,QAAI,SAAS,MAAM,IAAmB,mBAAmB,GAAG;AAC5D,QAAI,WAAW,QAAW;AACxB,gBAAU,cAAc,aAAa,cAAc,aAAa,cAAc,KAAK,IAAI,OAAO,EAAE,CAAC;AACjG,UAAI,CAAC,OAAO,cAAc,aAAa,mBAAmB,KAAK,aAAa,sBAAsB,KAAK,aAAa,sBAAsB,MAAM;AAC9I,cAAM,IAAI,MAAM,6BAA6B;AAAA,MAC/C;AACA,eAAS;AAAA,QACP;AAAA,QAAc,QAAQ,aAAa,eAAe;AAAA,QAAG,WAAW;AAAA,QAAG,UAAU;AAAA,QAAG,eAAe;AAAA,QAAG,OAAO;AAAA,MAC3G;AACA,YAAM,IAAI,mBAAmB,KAAK,MAAM;AAAA,IAC1C;AACA,wBAAoB,QAAQ,YAAY;AACxC,WAAO;AAAA,EACT;AAEA,WAAS,gBAAgB,QAAuB,KAAa,OAAyD;AACpH,QAAI,iBAAiB,iBAAiB,eAAe,QAAW;AAC9D,YAAM,QAAQ,CAAC,gBAAgB,IAAI,OAAO,aAAa,gBAAgB;AACvE,YAAMC,QAAO,MAAM,IAAI,mBAAmB,OAAO,aAAa,MAAM,CAAC;AACrE,UAAIA,UAAS,UAAa,EAAEA,iBAAgB,UAAUA,MAAK,YAAY,OAAO,aAAa;AACzF,wBAAgB,IAAI,OAAO,aAAa,gBAAgB;AAC1D,aAAO,0BAA0B;AAAA,QAC/B;AAAA,QAAY;AAAA,QAAO;AAAA,QAAO;AAAA,QAAK;AAAA,QAAQ;AAAA,MACzC,CAAC;AAAA,IACH;AACA,QAAI,OAAO,YAAY,OAAW,QAAO,EAAE,GAAG,QAAQ,SAAS,OAAO,QAAQ;AAC9E,UAAM,eAAe,OAAO;AAC5B,UAAM,OAAO,MAAM,IAAI,mBAAmB,aAAa,MAAM,CAAC;AAC9D,QAAI,SAAS,UAAa,gBAAgB,MAAO,OAAM,IAAI,MAAM,kCAAkC;AACnG,QAAI,KAAK,YAAY,OAAO,OAAQ;AACpC,UAAM,eAAe,OAAO,SAAS;AACrC,UAAM,UAAU,UAAU,cAAc,cAAc,KAAK,IAAI,KAAK,UAAU,eAAe,aAAa,sBAAsB,CAAC,GAAG,GAAG;AACvI,UAAM,WAAW,EAAE,GAAG,QAAQ,QAAQ;AACtC,UAAM,YAAY,MAAM;AACtB,YAAM,aAAa,KAAK,UAAU,CAAC,aAAa,kBAAkB,QAAQ,cAAc,QAAQ,UAAU,CAAC;AAC3G,UAAI,CAAC,MAAM,OAAO,mBAAmB,YAAY,OAAO,EAAG,OAAM,IAAI,MAAM,sEAAsE;AACjJ,YAAM,IAAI,mBAAmB,aAAa,kBAAkB,QAAQ;AAAA,IACtE,CAAC;AACD,WAAO;AAAA,EACT;AAEA,iBAAe,YAAY,QAAuB,QAAuC;AACvF,QAAI,MAAM,MAAM,QAAQ,UAAU,SAAS,OAAO,cAAc,MAAM,GAAG,MAAM,EAAG,QAAO;AACzF,UAAM,IAAI,mBAAmB,OAAO,aAAa,kBAAkB;AAAA,MACjE,GAAG;AAAA,MAAQ,SAAS;AAAA,MAAW,OAAO;AAAA,IACxC,CAAC;AACD,WAAO;AAAA,EACT;AAEA,WAAS,sBAAsB,QAA4D,MAAe,WAAmB,QAAqB,KAAa;AAC7J,UAAM,EAAE,SAAS,aAAa,IAAI;AAClC,UAAM,iBAAiB,qCAAqC,UAAU,IAAI;AAC1E,QAAI,CAAC,eAAe,WAAW,eAAe,KAAK,cAAc,aAAa,eAAe,KAAK,WAAW,QAAQ,UAChH,eAAe,KAAK,cAAc,QAAQ,YAAY,YAAY,qBAAqB,KAAK,MAC5F,eAAe,KAAK,aAAa,QAAQ,WAAW,MAAM,eAAe,KAAK,aAAa,MAAM;AACpG,YAAM,IAAI,MAAM,4DAA4D;AAC9E,WAAO,eAAe;AACtB,UAAM,IAAI,mBAAmB,aAAa,kBAAkB;AAAA,MAC1D;AAAA,MACA,QAAQ,QAAQ;AAAA,MAChB,WAAW,OAAO,YAAY;AAAA,MAC9B,UAAU;AAAA,MACV,UAAU;AAAA,MACV,YAAY,OAAO,cAAc;AAAA,MACjC,WAAW,OAAO,aAAa;AAAA,MAC/B,gBAAgB,OAAO,iBAAiB,KAAK;AAAA,MAC7C,gBAAgB;AAAA,MAChB,YAAY,QAAQ;AAAA,MACpB,gBAAgB,QAAQ;AAAA,MACxB,eAAe;AAAA,MACf,OAAO;AAAA,IACT,CAAyB;AAAA,EAC3B;AAEA,iBAAe,aAAa,QAA4D,QAAqB,KAAa;AACxH,UAAM,EAAE,SAAS,aAAa,IAAI;AAClC,WAAO,eAAe;AACtB,UAAM,SAAS,MAAM,OAAO,KAAK,SAAS,aAAa,QAAQ;AAC/D,WAAO,eAAe;AACtB,UAAM,UAAU,iBAAiB,gBAAgB,OAAO,YAAY,IAAI,MAAM,IAAuB,qBAAqB,QAAQ,MAAM,GAAG,SAAS;AACpJ,QAAI,iBAAiB,cAAe,OAAM,IAAI,mBAAmB,aAAa,kBAAkB;AAAA,MAC9F,GAAG;AAAA,MAAQ,UAAU,UAAU;AAAA,MAAG,gBAAgB,OAAO,iBAAiB,KAAK;AAAA,IACjF,CAAC;AAAA,QACI,OAAM,IAAI,qBAAqB,QAAQ,QAAQ;AAAA,MAClD,OAAO,UAAU;AAAA,MAAG,WAAW;AAAA,MAAK,QAAQ;AAAA,IAC9C,CAAC;AACD,UAAM,WAAW,MAAM,QAAQ,UAAU,KAAK,aAAa,UAAU,OAAO,OAAO,QAAQ,OAAO,GAAG;AACrG,QAAI,iBAAiB,UAAW,OAAM,IAAI,qBAAqB,QAAQ,QAAQ;AAAA,MAC7E,OAAO,UAAU;AAAA,MAAG,WAAW;AAAA,MAAK,QAAQ,SAAS;AAAA,IACvD,CAAC;AACD,QAAI,SAAS,WAAW,OAAO,SAAS,WAAW,IAAK,OAAM,IAAI,sBAAsB,SAAS,QAAQ,SAAS,YAAY;AAC9H,QAAI,iBAAiB,eAAe;AAClC,4BAAsB,QAAQ,SAAS,MAAM,OAAO,WAAW,QAAQ,GAAG;AAC1E;AAAA,IACF;AACA,UAAM,UAAUF,GAAE,OAAO,EAAE,WAAWA,GAAE,OAAO,EAAE,IAAI,CAAC,GAAG,QAAQA,GAAE,QAAQ,QAAQ,MAAM,EAAE,CAAC,EAAE,UAAU,SAAS,IAAI;AACrH,QAAI,CAAC,QAAQ,QAAS,OAAM,IAAI,MAAM,+DAA+D;AACrG,WAAO,eAAe;AAGtB,UAAM,YAAY,MAAM;AACtB,YAAM,IAAI,qBAAqB,QAAQ,QAAQ,EAAE,WAAW,QAAQ,KAAK,WAAW,YAAY,IAAI,CAAC;AACrG,YAAM,IAAI,mBAAmB,aAAa,kBAAkB;AAAA,QAC1D;AAAA,QACA,QAAQ,QAAQ;AAAA,QAChB,WAAW,OAAO,YAAY;AAAA,QAC9B,UAAU;AAAA,QACV,eAAe;AAAA,QACf,OAAO;AAAA,MACT,CAAyB;AAAA,IAC3B,CAAC;AAAA,EACH;AAEA,iBAAe,QAAQ,cAA4C,QAAqB,KAAa,OAAyD;AAC5J,QAAI,SAAS,aAAa,cAAc,GAAG;AAC3C,QAAI,iBAAiB,cAAc,OAAO,UAAU,YAAY,OAAO,gBAAgB,MAAM,KAAO;AACpG,QAAI;AACF,UAAI,CAAC,MAAM,YAAY,QAAQ,MAAM,EAAG;AACxC,cAAQ,UAAU,cAAc,aAAa,QAAQ;AACrD,UAAI,CAAC,cAAc,IAAI,mBAAmB,aAAa,MAAM,CAAC,EAAG,OAAM,IAAI,MAAM,uCAAuC;AACxH,YAAM,WAAW,gBAAgB,QAAQ,KAAK,KAAK;AACnD,UAAI,aAAa,OAAW;AAC5B,eAAS;AACT,UAAI,OAAO,gBAAgB,MAAM,IAAM;AAEvC,UAAI,CAAC,MAAM,YAAY,QAAQ,MAAM,EAAG;AACxC,YAAM,aAAa,UAAU,QAAQ,GAAG;AAAA,IAC1C,SAAS,OAAO;AACd,UAAI,OAAO,QAAS;AACpB,YAAM;AAAA,QACJ;AAAA,QACA,aAAa;AAAA,QACb,eAAe,QAAQ,MAAM,IAAmB,mBAAmB,aAAa,gBAAgB,GAAG,cAAc,OAAO,GAAG;AAAA,MAC7H;AAAA,IACF;AAAA,EACF;AACA,iBAAe,YAAY,QAAgF;AACzG,UAAM,QAAQ,oBAAI,IAAyC;AAC3D,UAAM,UAAU,MAAM,QAAQ,WAAW,CAAC,GAAG,aAAa,EAAE,IAAI,OAAO,CAAC,KAAK,MAAM,MAAM;AACvF,YAAM,OAAO,MAAM,MAAM,OAAO,KAAK,MAAM,GAAG,MAAM;AACpD,UAAI,CAAC,OAAO,cAAc,KAAK,QAAQ,KAAK,KAAK,WAAW;AAC1D,cAAM,IAAI,MAAM,wBAAwB;AAC1C,YAAM,WAAW,MAAM,IAAyB,gBAAgB,GAAG;AACnE,UAAI,aAAa,WAAc,KAAK,WAAW,SAAS,YAAa,KAAK,aAAa,SAAS,YAAY,KAAK,SAAS,SAAS,OAAQ;AACzI,cAAM,IAAI,MAAM,4CAA4C;AAAA,MAC9D;AACA,aAAO,eAAe;AACtB,YAAM,IAAI,gBAAgB,KAAK,IAAI;AACnC,YAAM,IAAI,KAAK,IAAI;AAAA,IACrB,CAAC,CAAC;AACF,qBAAiB,QAAQ,MAAM,UAAQ,KAAK,WAAW,WAAW;AAGlE,eAAW,CAAC,OAAO,MAAM,KAAK,QAAQ,QAAQ;AAC5C,UAAI,OAAO,WAAW,YAAY;AAChC,cAAM,MAAM,cAAc,KAAK,EAAE,QAAQ,EAAE,KAAK;AAChD,YAAI,QAAQ;AACV,gBAAM,IAAI,KAAK,IAAI,MAAM,oBAAoB,CAAC;AAAA,MAClD;AACF,WAAO;AAAA,EACT;AACA,iBAAe,oBAAoB,eAAwD,QAAqB;AAC9G,QAAI,cAAc,SAAS,OAAO,iBAAkB,OAAM,IAAI,MAAM,uCAAuC;AAC3G,UAAM,SAAS,IAAI,IAAI,cAAc,IAAI,kBAAgB,aAAa,gBAAgB,CAAC;AACvF,QAAI,OAAO,SAAS,cAAc,OAAQ,OAAM,IAAI,MAAM,iCAAiC;AAC3F,UAAM,cAAc,MAAM,QAAuB,iBAAiB,EAAE,OAAO,UAAQ,CAAC,OAAO,IAAI,KAAK,GAAG,KAAK,KAAK,MAAM,UAAU,WAAW;AAC5I,QAAI,YAAY;AAChB,aAAS,SAAS,GAAG,SAAS,YAAY,QAAQ,UAAU,OAAO,aAAa;AAC9E,aAAO,eAAe;AACtB,YAAM,UAAU,MAAM,QAAQ,WAAW,YAAY,MAAM,QAAQ,SAAS,OAAO,WAAW,EAAE,IAAI,OAAO,EAAE,KAAK,MAAM,MAAM;AAC5H,cAAM,kBAAkB,MAAM,MAAM,QAAQ,UAAU,SAAS,MAAM,cAAc,MAAM,GAAG,MAAM;AAClG,YAAI,CAAC,gBAAiB,OAAM,IAAI,mBAAmB,KAAK;AAAA,UACtD,GAAG;AAAA,UAAO,SAAS;AAAA,UAAW,OAAO;AAAA,QACvC,CAAC;AACD,eAAO;AAAA,MACT,CAAC,CAAC;AAGF,kBAAY,aAAa,QAAQ,MAAM,YAAU,OAAO,WAAW,eAAe,CAAC,OAAO,KAAK;AAAA,IACjG;AACA,WAAO;AAAA,EACT;AAEA,iBAAe,KAAK,aAA0B;AAC5C,UAAM,QAAQ,oBAAoB,CAAC,MAAM,QAAQ,WAAW,CAAC;AAC7D,UAAM,SAAS,MAAM;AACrB,QAAI;AACF,aAAO,eAAe;AACtB,YAAM,MAAM,MAAM;AAClB,YAAM,QAAQ,MAAM,IAAY,WAAW,oBAAoB,KAAK;AACpE,qBAAe,OAAO,cAAc,GAAG,KAAK,OAAO;AACnD,UAAI,CAAC;AACH,cAAM,IAAI,MAAM,iCAAiC;AACnD,YAAM,IAAI,WAAW,sBAAsB,GAAG;AAC9C,YAAM,gBAAgB,MAAM,MAAM,QAAQ,UAAU,SAAS,MAAM,GAAG,MAAM;AAC5E,YAAM,yBAAyB,MAAM,oBAAoB,eAAe,MAAM;AAC9E,YAAM,QAAQ,MAAM,YAAY,MAAM;AACtC,eAAS,SAAS,GAAG,SAAS,cAAc,QAAQ,UAAU,OAAO,aAAa;AAChF,eAAO,eAAe;AACtB,cAAM,WAAW,MAAM,QAAQ,WAAW,cAAc,MAAM,QAAQ,SAAS,OAAO,WAAW,EAAE,IAAI,kBAAgB,QAAQ,cAAc,QAAQ,KAAK,KAAK,CAAC,CAAC;AACjK,cAAM,SAAS,SAAS,KAAK,YAAU,OAAO,WAAW,UAAU;AACnE,YAAI,QAAQ,WAAW;AACrB,gBAAM,OAAO;AAAA,MACjB;AAGA,UAAI,QAAQ,UAAU,kBAAkB;AACtC,cAAM,MAAM,QAAQ,UAAU,cAAc,MAAM,GAAG,MAAM;AAC7D,YAAM,kBAAkB,QAAQ,UAAU,SAAS;AACnD,cAAQ,0BAA0B,kBAAkB,gBAAgB,eAAe;AACnF,kBAAY,yBAAyB,SAAY;AACjD,gBAAU;AAAA,IACZ,SAAS,OAAO;AACd,cAAQ;AACR,kBAAY,eAAe,0BAA0B;AACrD,UAAI,CAAC,OAAO;AACV,cAAM;AAAA,IACV,UAAE;AACA,YAAM,QAAQ;AAAA,IAChB;AAAA,EACF;AACA,QAAM,QAAQ,MAAM,sBAAsB,OAAO;AAAA,IAC/C,SAAS,oBAAoB,CAAC,CAAC;AAAA,IAAG,YAAY,OAAO;AAAA,IAAY,UAAU;AAAA,IAAa,WAAW;AAAA,IAAa;AAAA,EAClH,CAAC;AACD,SAAO;AAAA,IACL,MAAM,QAAQ;AACZ,UAAI,SAAS;AACX,cAAM,IAAI,MAAM,sBAAsB;AACxC,UAAI,SAAS;AACX;AAAA,MACF;AAEA,YAAM,MAAM,MAAM;AAClB,gBAAU;AAAA,IACZ;AAAA,IACA,MAAM,UAAU;AACd,UAAI,SAAS;AACX,cAAM,IAAI,MAAM,sBAAsB;AACxC,YAAM,MAAM,QAAQ;AAAA,IACtB;AAAA,IACA,MAAM,MAAM,UAAU,YAAY;AAChC,YAAM,MAAM;AACZ,YAAM,WAAsB,CAAC;AAC7B,UAAI;AACF,cAAM,MAAM,KAAK;AAAA,MACnB,SAAS,OAAO;AACd,iBAAS,KAAK,KAAK;AAAA,MACrB;AACA,UAAI;AACF,cAAM,QAAQ,UAAU,QAAQ;AAAA,MAClC,SAAS,OAAO;AACd,iBAAS,KAAK,KAAK;AAAA,MACrB;AACA,iBAAW,UAAU,QAAQ;AAC3B,YAAI;AACF,gBAAM,OAAO,QAAQ;AAAA,QACvB,SAAS,OAAO;AACd,mBAAS,KAAK,KAAK;AAAA,QACrB;AACF,gBAAU;AACV,cAAQ;AACR,UAAI,SAAS,SAAS;AACpB,cAAM,IAAI,eAAe,UAAU,mCAAmC;AAAA,IAC1E,GAAG;AAAA,IACH,SAAS;AACP,YAAM,aAAa,MAAM,QAAuB,iBAAiB,EAAE,IAAI,UAAQ,KAAK,KAAK;AACzF,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA,GAAI,eAAe,SAAY,CAAC,IAAI,EAAE,YAAY,OAAO,OAAO,EAAE,GAAG,WAAW,CAAC,EAAE;AAAA,QACnF,YAAY,WAAW,OAAO,CAAC,KAAK,SAAS,OAAO,KAAK,cAAc,IAAI,CAAC;AAAA,QAC5E,WAAW,WAAW,OAAO,CAAC,KAAK,SAAS,OAAO,KAAK,aAAa,IAAI,CAAC;AAAA,QAC1E,eAAe,WAAW,OAAO,CAAC,KAAK,SAAS,OAAO,KAAK,iBAAiB,IAAI,CAAC;AAAA,QAClF,OAAO,WAAW;AAAA,QAClB;AAAA,QACA,UAAU,CAAC,SAAS,WAAW,KAAK,UAAQ,KAAK,UAAU,eAAe,KAAK,WAAW,CAAC;AAAA,QAC3F,WAAW,QAAQ;AAAA,QACnB,qBAAqB,WAAW,OAAO,UAAQ,KAAK,UAAU,QAAQ,EAAE;AAAA,QACxE,mBAAmB,WAAW,OAAO,UAAQ,KAAK,YAAY,MAAS,EAAE;AAAA,QACzE,WAAW,WAAW,OAAO,CAAC,KAAK,SAAS,MAAM,KAAK,WAAW,CAAC;AAAA,QACnE,UAAU,WAAW,OAAO,CAAC,KAAK,SAAS,MAAM,KAAK,UAAU,CAAC;AAAA,QACjE;AAAA,QACA,GAAI,cAAc,SAAY,CAAC,IAAI,EAAE,UAAU;AAAA,QAC/C,GAAI,QAAQ,UAAU,WAAW,SAAY,CAAC,IAAI,EAAE,WAAW,QAAQ,UAAU,OAAO,EAAE;AAAA,QAC1F,SAAS,MAAM,QAA6B,cAAc,EAAE,OAAO,UAAQ,cAAc,IAAI,KAAK,GAAG,CAAC,EAAE,IAAI,WAAS,EAAE,IAAI,KAAK,KAAK,GAAG,KAAK,MAAM,EAAE;AAAA,QACrJ,eAAe,MAAM,QAAuB,iBAAiB,EAAE,IAAI,WAAS;AAAA,UAC1E,IAAI,KAAK;AAAA,UACT,QAAQ,KAAK,MAAM;AAAA,UACnB,GAAI,iBAAiB,gBACjB;AAAA,YACE,GAAI,KAAK,MAAM,SAAS,KAAK,MAAM,aAAa,eAAe,CAAC,IAAI,EAAE,qBAAqB,KAAK,MAAM,OAAO;AAAA,YAC7G,UAAU,KAAK,MAAM,YAAY;AAAA,YACjC,YAAY,KAAK,MAAM;AAAA,UACzB,IACA,CAAC;AAAA,UACL,OAAO,KAAK,MAAM;AAAA,UAClB,SAAS,KAAK,MAAM,YAAY;AAAA,UAChC,UAAU,KAAK,MAAM;AAAA,QACvB,EAAE;AAAA,MACJ;AAAA,IACF;AAAA,EACF;AACF;;;AGreA,SAAS,uBAAuB;AAKhC;AAAA,EACE;AAAA,EAA0B;AAAA,EAAwB;AAAA,EAAwB;AAAA,EAC1E;AAAA,EAA+B;AAAA,EAAoB;AAAA,EAAoB;AAAA,EAAmB;AAAA,OACrF;AAeP,eAAsB,yBAAyB,SAEY;AACzD,QAAM,OAAO;AAAA,IACX,WAAW,EAAE,MAAM,QAAiB,SAAS,QAAQ,aAAa;AAAA,IAClE,YAAY,EAAE,MAAM,QAAiB,SAAS,QAAQ,cAAc;AAAA,IACpE,OAAO,EAAE,MAAM,QAAiB,SAAS,QAAQ,YAAY,QAAQ,aAAa;AAAA,EACpF;AACA,QAAM,UAAU,QAAQ,YAAY,SAChC,MAAM,uBAAuB,4BAA4B,MAAM,QAAW,EAAE,SAAS,QAAQ,SAAS,aAAa,MAAM,CAAC,IAC1H,MAAM,uBAAuB,6BAA6B,MAAM,QAAW;AAAA,IACzE,SAAS,QAAQ;AAAA,IAAS,aAAa;AAAA,IAAO,QAAQ,QAAQ;AAAA,IAAQ,eAAe,QAAQ;AAAA,EAC/F,CAAC;AACL,MAAI;AACF,UAAM,UAAU,QAAQ,YAAY,SAChC,MAAM,QAAQ,YAAwB,iBAAiB,IACvD,MAAM,QAAQ,YAA8B,uBAAuB;AACvE,QAAI;AACJ,WAAO,OAAO,OAAO,EAAE,SAAS,MAAM,MAAM,aAAa,8BAA8B,OAAO,EAAE,CAAC;AAAA,EACnG,SAAS,OAAO;AACd,UAAM,8BAA8B,OAAO;AAC3C,UAAM;AAAA,EACR;AACF;AAEA,IAAM,4BAAN,cAAwC,mBAAmB;AAAA,EACzD,IAAa,SAAS;AACpB,QAAI,KAAK,QAAQ,YAAY;AAC3B,YAAM,IAAI,MAAM,yDAAyD;AAC3E,WAAO,IAAI,gBAAgB,EAAE,SAAS,KAAK,QAAQ,QAAQ,CAAC;AAAA,EAC9D;AACF;AANM,4BAAN;AAAA,EADC,kBAAkB;AAAA,GACb;AAQN,IAAM,4BAAN,cAAwC,mBAAmB;AAAA,EACzD,IAAa,SAAS;AACpB,QAAI,KAAK,QAAQ,YAAY;AAC3B,YAAM,IAAI,MAAM,yDAAyD;AAC3E,WAAO,IAAI,gBAAgB,EAAE,SAAS,KAAK,QAAQ,QAAQ,CAAC;AAAA,EAC9D;AACF;AANM,4BAAN;AAAA,EADC,kBAAkB;AAAA,GACb;AAQN,eAAsB,sBAAsB,SAIzC;AACD,QAAM,UAAU,MAAM,yBAAyB;AAAA,IAC7C,aAAa,EAAE,kBAAkB,EAAE,MAAM,QAAQ,SAAS,QAAQ,IAAI,EAAE;AAAA,IACxE,kBAAkB,EAAE,gBAAgB,EAAE,YAAY,iBAAiB,GAAG,gBAAgB,EAAE,YAAY,iBAAiB,EAAE;AAAA,EACzH,CAAC;AACD,UAAQ,QAAQ,UAAU,QAAQ;AAClC,UAAQ,SAAS,0BAA0B,QAAmC,0BAA0B,YAAY,CAAC;AACrH,MAAI,QAAQ;AACV,YAAQ,SAAS,0BAA0B,QAAmC,0BAA0B,YAAY,CAAC;AACvH,UAAQ,OAAO;AACf,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ,YAAuC,0BAA0B,cAAc;AAC5G,UAAM,SAAS,QAAQ,WAAW,MAAM,QAAQ,YAAuC,0BAA0B,cAAc,IAAI;AACnI,WAAO;AAAA,MACL;AAAA,MAAQ;AAAA,MAAQ,MAAM,QAAQ;AAAE,cAAM,8BAA8B,OAAO;AAAA,MAAE;AAAA,IAC/E;AAAA,EACF,SAAS,OAAO;AACd,UAAM,8BAA8B,OAAO;AAC3C,UAAM;AAAA,EACR;AACF;;;ACxFA,SAAS,qBAAAG,0BAAyB;AAGlC,SAAS,6BAA6B;AACtC;AAAA,EACE,uBAAAC;AAAA,EAAqB,wBAAAC;AAAA,EAAsB,kBAAAC;AAAA,EAAgB,WAAAC;AAAA,EAAS,wBAAAC;AAAA,OAC/D;AAKP,SAAS,KAAAC,UAAS;;;ACXlB;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAMP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA,gCAAAC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,wBAAAC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,KAAAC,UAAS;AAEX,IAAM,+BAA+B;AAAA,EAC1C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAKA,IAAM,iCAAiCA,GAAE,KAAK,4BAA4B;AAC1E,IAAM,kCAAkCA,GAAE,MAAM,CAAC,gBAAgB,OAAO,CAAC;AACzE,IAAM,gCAAgCA,GAAE,aAAa;AAAA,EACnD,eAAe;AAAA,EACf,OAAO;AAAA,EACP,YAAY;AACd,CAAC;AAED,IAAM,mBAAmB;AAAA,EACvB,SAAS;AAAA,EACT,aAAa;AAAA,EACb,WAAWD;AAAA,EACX,oBAAoB;AAAA,EACpB,QAAQA;AAAA,EACR,SAASC,GAAE,QAAQ,CAAC;AACtB;AAEA,IAAM,mCAAmCA,GAAE,aAAa;AAAA,EACtD,GAAG;AAAA,EACH,MAAMA,GAAE,QAAQ,2BAA2B;AAAA,EAC3C,aAAa;AAAA,EACb,eAAe;AAAA,EACf,YAAY;AAAA,EACZ,SAAS;AACX,CAAC;AAED,IAAM,qCAAqCA,GAAE,aAAa;AAAA,EACxD,GAAG;AAAA,EACH,MAAMA,GAAE,QAAQ,8BAA8B;AAAA,EAC9C,aAAa;AAAA,EACb,eAAe;AAAA,EACf,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,iBAAiB;AAAA,EACjB,SAAS;AACX,CAAC;AAED,IAAM,kCAAkCA,GAAE,aAAa;AAAA,EACrD,GAAG;AAAA,EACH,MAAMA,GAAE,QAAQ,mCAAmC;AAAA,EACnD,aAAa;AAAA,EACb,eAAe;AAAA,EACf,OAAO;AAAA,EACP,aAAa;AAAA,EACb,iBAAiB;AAAA,EACjB,SAAS;AAAA,EACT,cAAc;AAChB,CAAC;AAED,IAAM,+BAA+BA,GAAE,aAAa;AAAA,EAClD,GAAG;AAAA,EACH,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,MAAMA,GAAE,QAAQ,+BAA+B;AAAA,EAC/C,aAAa;AAAA,EACb,UAAUF;AACZ,CAAC;AAED,IAAM,kCAAkCE,GAAE,aAAa;AAAA,EACrD,GAAG;AAAA,EACH,MAAMA,GAAE,QAAQ,0BAA0B;AAAA,EAC1C,aAAa;AAAA,EACb,YAAY;AACd,CAAC;AAED,IAAM,wCAAwCA,GAAE,aAAa;AAAA,EAC3D,GAAG;AAAA,EACH,MAAMA,GAAE,QAAQ,iCAAiC;AAAA,EACjD,aAAa;AAAA,EACb,YAAY;AACd,CAAC;AAED,IAAM,iCAAiCA,GAAE,aAAa;AAAA,EACpD,GAAG;AAAA,EACH,MAAMA,GAAE,QAAQ,yBAAyB;AAAA,EACzC,aAAa;AAAA,EACb,YAAY;AACd,CAAC;AAED,IAAM,wCAAwCA,GAAE,aAAa;AAAA,EAC3D,GAAG;AAAA,EACH,MAAMA,GAAE,QAAQ,gCAAgC;AAAA,EAChD,aAAa;AAAA,EACb,YAAY;AACd,CAAC;AAEM,IAAM,6BAA6BA,GAAE,mBAAmB,QAAQ;AAAA,EACrE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAkCM,IAAM,uCAAN,cAAmD,MAAM;AAAA,EAC9D,YAAY,UAAU,wEAAwE;AAC5F,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAYO,SAAS,mCAAmC,OAAqE;AACtH,SAAO,OAAO,OAAO;AAAA,IACnB,SAAS,WAAW,MAAM,MAAM,OAAO;AAAA,IACvC,MAAM,+BAA+B,MAAM,MAAM,IAAI;AAAA,IACrD,aAAa,gCAAgC,MAAM,MAAM,WAAW;AAAA,IACpE,WAAWC,sBAAqB,MAAM,MAAM,SAAS;AAAA,IACrD,QAAQA,sBAAqB,MAAM,MAAM,MAAM;AAAA,EACjD,CAAC;AACH;AAGA,eAAsB,6BAA6B,OAAkD;AACnG,QAAM,SAAS,2BAA2B,MAAM,KAAK;AACrD,QAAM,sBAAsB,MAAM;AAClC,SAAO,OAAO,OAAO,MAAM;AAC7B;AAwBO,SAAS,gBAAgBC,SAA+C;AAC7E,QAAM,SAAS,mCAAmCA,OAAM;AACxD,SAAO,CAAC,OAAO,SAAS,OAAO,WAAW,OAAO,QAAQ,OAAO,MAAM,OAAO,WAAW,EAAE,KAAK,GAAG;AACpG;AAEO,SAAS,wBAAwB,MAA+B,OAAsC;AAC3G,QAAM,SAAS,KAAK,YAAY,MAAM,WACjC,KAAK,YAAY,MAAM,WACvB,KAAK,SAAS,MAAM,QACpB,KAAK,gBAAgB,MAAM,eAC3B,KAAK,cAAc,MAAM,aACzB,KAAK,WAAW,MAAM,UACtB,KAAK,uBAAuB,MAAM;AACvC,QAAM,aAAa,KAAK,SAAS,kCAC5B,MAAM,SAAS;AACpB,QAAM,gBAAgB,KAAK,SAAS,uCAC/B,MAAM,SAAS;AACpB,QAAM,WAAW,cAAc,gBAC3B,KAAK,oBAAoB,MAAM,mBAAmB,KAAK,gBAAgB,MAAM,cAC7E,EAAE,qBAAqB,SAAS,EAAE,qBAAqB;AAC3D,MAAI,CAAC,UAAU,CAAC,SAAU,OAAM,IAAI,qCAAqC;AAC3E;AAEA,eAAe,sBAAsB,QAAgD;AACnF,MAAI,OAAO,KAAK,WAAW,YAAY,KAAK,OAAO,WAAW,OAAO,WAAW;AAC9E,UAAM,IAAI,UAAU,uDAAuD;AAAA,EAC7E;AACA,MAAI,OAAO,SAAS,+BAA+B,OAAO,SAAS,gCAAgC;AACjG,UAAM,6BAA6B,MAAM;AACzC;AAAA,EACF;AACA,MAAI,OAAO,SAAS,qCAAqC;AACvD,UAAM,mCAAmC,MAAM;AAC/C;AAAA,EACF;AACA,MAAI,OAAO,SAAS,iCAAiC;AACnD,UAAM,gCAAgC,MAAM;AAC5C;AAAA,EACF;AACA,QAAM,uBAAuB,MAAM;AACrC;AAEA,eAAe,6BACb,QACe;AACf,QAAM,UAAU,MAAM,oBAAoB,OAAO,aAAa;AAC9D,MAAI,OAAO,WAAW,kBAAkB,WACnC,OAAO,WAAW,UAAU,OAAO,cAAc,SACjD,OAAO,QAAQ,2BAA2B,WAC1C,OAAO,QAAQ,eAAe,WAAW,KACzC,OAAO,QAAQ,eAAe,CAAC,MAAM,SAAS;AACjD,UAAM,IAAI,UAAU,6EAA6E;AAAA,EACnG;AACA,MAAI,OAAO,SAAS,6BAA6B;AAC/C,QAAI,OAAO,QAAQ,aAAa,KAAK,OAAO,QAAQ,eAAe,QAAW;AAC5E,YAAM,IAAI,UAAU,oEAAoE;AAAA,IAC1F;AAAA,EACF,WAAW,OAAO,QAAQ,eAAe,OAAO,mBAAmB,OAAO,QAAQ,YAAY,GAAG;AAC/F,UAAM,IAAI,UAAU,wEAAwE;AAAA,EAC9F;AACF;AAEA,eAAe,mCAAmC,QAAqD;AACrG,QAAM,CAAC,SAAS,aAAa,SAAS,IAAI,MAAM,QAAQ,IAAI;AAAA,IAC1D,oBAAoB,OAAO,aAAa;AAAA,IACxC,oBAAoB,OAAO,OAAO;AAAA,IAClC,oBAAoB,OAAO,KAAK;AAAA,EAClC,CAAC;AACD,MAAI,YAAY,OAAO,eAClB,gBAAgB,OAAO,mBACvB,OAAO,QAAQ,2BAA2B,WAC1C,CAAC,OAAO,QAAQ,eAAe,SAAS,OAAO,KAC/C,OAAO,MAAM,cAAc,OAAO,aAClC,OAAO,aAAa,cAAc,OAAO,aACzC,OAAO,aAAa,YAAY,eAChC,OAAO,aAAa,kBAAkB,WACtC,OAAO,aAAa,UAAU,OAAO,cAAc,SACnD,OAAO,aAAa,UAAU,WAAW;AAC5C,UAAM,IAAI,UAAU,kEAAkE;AAAA,EACxF;AACF;AAEA,eAAe,gCAAgC,QAAkD;AAC/F,QAAM,CAAC,eAAe,YAAY,IAAI,MAAM,QAAQ,IAAI;AAAA,IACtD,oBAAoB,OAAO,SAAS;AAAA,IACpC,oBAAoB,OAAO,QAAQ;AAAA,EACrC,CAAC;AACD,MAAI,kBAAkB,OAAO,eACxB,OAAO,UAAU,cAAc,OAAO,aACtC,OAAO,SAAS,cAAc,iBAC9B,OAAO,WAAW,cAAc,iBAChC,OAAO,WAAW,aAAa,gBAC/B,OAAO,WAAW,YAAY,OAAO,UAAU,WAC/C,OAAO,WAAW,kBAAkB,OAAO,UAAU,iBACrD,OAAO,WAAW,UAAU,OAAO,UAAU,SAC7C,OAAO,WAAW,iBAAiB,OAAO,UAAU,cAAc;AACrE,UAAM,IAAI,UAAU,+DAA+D;AAAA,EACrF;AACF;AAEA,eAAe,uBACb,QAKe;AACf,QAAM,SAAS,OAAO,SAAS,oCAC3B,OAAO,WAAW,MAClB,OAAO,SAAS,6BACd,OAAO,WAAW,UAClB,OAAO,SAAS,4BACd,OAAO,WAAW,QAClB,OAAO,WAAW;AAC1B,MAAI,WAAW,OAAO,aAAa;AACjC,UAAM,IAAI,UAAU,6DAA6D;AAAA,EACnF;AACF;;;ADrUA,IAAM,SAASC,GAAE,aAAa;AAAA,EAC5B,eAAeC;AAAA,EAAS,OAAOC;AAAA,EAAgB,YAAYC;AAAA,EAAqB,WAAWC;AAC7F,CAAC;AACD,IAAM,SAAS,CAAC,UAAU,mBAAmB,oBAAoB,aAAa,YAAY,WAAW;AAErG,SAAS,YAAY,OAAqB;AACxC,MAAI,CAAC,OAAO,cAAc,KAAK,KAAK,QAAQ,EAAG,OAAM,IAAI,MAAM,4BAA4B;AAC7F;AAEA,SAAS,sBAAsB,MAA2C,OAAqD;AAC7H,SAAO,KAAK,YAAY,MAAM,WAAW,KAAK,WAAW,MAAM,UAAU,KAAK,gBAAgB,MAAM,eAC/FC,mBAAkB,KAAK,aAAa,MAAM,WAAW,KAAKA,mBAAkB,KAAK,kBAAkB,MAAM,gBAAgB;AAChI;AAEA,SAAS,eAAe,QAAqD;AAC3E,MAAI,CAAC,kBAAkB,KAAK,OAAO,OAAO,KAAK,CAAC,kBAAkB,KAAK,OAAO,MAAM,KAC/E,OAAO,YAAY,WAAW,KAAK,OAAO,YAAY,SAAS,OAC/D,CAAC,GAAG,OAAO,aAAa,GAAG,OAAO,gBAAgB,EAAE,KAAK,UAAQ,CAACJ,SAAQ,UAAU,IAAI,EAAE,OAAO,GAAG;AACvG,UAAM,IAAI,MAAM,4BAA4B;AAAA,EAC9C;AACA,SAAO,KAAK,UAAU,CAAC,OAAO,SAAS,OAAO,QAAQ,OAAO,WAAW,CAAC;AAC3E;AAGO,SAAS,qCAAqC,OAA6B,UAAiD,CAAC,GAMlI;AACA,QAAM,YAAY,QAAQ,oBAAoB,SAAY,eAAe,cAAcD,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,MAAM,mBAAmB,EAAE,MAAM,QAAQ,eAAe,CAAC;AAC3K,QAAM,SAAwC;AAAA,IAC5C,MAAM,YAAY,MAAM,IAAI,UAAU,SAAS;AAAA,IAC/C,MAAM,KAAK,YAAY;AAAE,YAAM,IAAI,UAAU,WAAW,UAAU;AAAA,IAAE;AAAA,EACtE;AACA,QAAM,UAAwC;AAAA,IAC5C,MAAM,IAAIM,SAAQ;AAChB,YAAM,QAAQ,MAAM,IAAI,WAAW,gBAAgBA,OAAM,CAAC;AAC1D,aAAO,UAAU,SAAY,SAAY,MAAM,6BAA6B,KAAK;AAAA,IACnF;AAAA,IACA,MAAM,YAAY,KAAK;AACrB,YAAM,WAAW,MAAM,6BAA6B,GAAG;AACvD,aAAO,MAAM,YAAY,MAAM;AAC7B,cAAM,MAAM,gBAAgB,QAAQ;AACpC,cAAM,SAAS,MAAM,IAA6B,WAAW,GAAG;AAChE,YAAI,WAAW,QAAW;AACxB,kCAAwB,QAAQ,QAAQ;AACxC,iBAAO,EAAE,aAAa,WAAoB,QAAQ,OAAqB;AAAA,QACzE;AACA,cAAM,IAAI,WAAW,KAAK,QAAQ;AAClC,eAAO,EAAE,aAAa,WAAoB,QAAQ,SAAS;AAAA,MAC7D,CAAC;AAAA,IACH;AAAA,EACF;AACA,QAAM,OAAsC;AAAA,IAC1C,MAAM,cAAc,OAAO;AACzB,YAAM,MAAM,GAAGF,sBAAqB,MAAM,MAAM,SAAS,CAAC,IAAIF,gBAAe,MAAM,MAAM,KAAK,CAAC;AAC/F,YAAM,MAAM,MAAM,IAAI,mBAAmB,GAAG;AAC5C,UAAI,QAAQ,OAAW;AACvB,YAAM,SAAS,OAAO,MAAM,GAAG;AAC/B,UAAI,OAAO,kBAAkBD,SAAQ,MAAM,MAAM,aAAa,EAAG,OAAM,IAAI,MAAM,kCAAkC;AACnH,YAAM,EAAE,WAAW,YAAY,GAAG,WAAW,IAAI;AACjD,aAAO;AAAA,IACT;AAAA,IACA,MAAM,cAAc,OAAO;AACzB,YAAM,SAAS,OAAO,MAAM,EAAE,GAAG,MAAM,KAAK,WAAW,MAAM,UAAU,CAAC;AACxE,aAAO,MAAM,YAAY,MAAM;AAC7B,cAAM,MAAM,GAAG,OAAO,SAAS,IAAI,OAAO,KAAK;AAC/C,cAAM,QAAQ,MAAM,IAAI,mBAAmB,GAAG;AAC9C,YAAI,UAAU,QAAW;AACvB,cAAI,CAACI,mBAAkB,OAAO,MAAM,EAAG,OAAM,IAAI,MAAM,0BAA0B;AACjF,iBAAO;AAAA,QACT;AACA,cAAM,IAAI,mBAAmB,KAAK,MAAM;AACxC,eAAO;AAAA,MACT,CAAC;AAAA,IACH;AAAA,EACF;AACA,QAAM,UAAU,CAAC,SAAiB,MAAM,IAAsC,cAAcJ,SAAQ,MAAM,IAAI,CAAC;AAC/G,QAAM,OAAO,CAAC,QAA0C,QAAgB,OAAO,UAAU,YAAY,OAAO,MAAM,OAAO,UAAU;AACnI,QAAM,aAA8C;AAAA,IAClD,KAAK,OAAM,SAAQ,QAAQ,IAAI;AAAA,IAC/B,MAAM,MAAM,OAAO;AACjB,YAAM,YAAYM,sBAAqB,MAAM,MAAM,SAAS;AAC5D,YAAM,OAAON,SAAQ,MAAM,MAAM,aAAa;AAC9C,UAAI,MAAM,sBAAsB,SAAS,MAAM,KAAM,QAAO,EAAE,MAAM,YAAY;AAChF,aAAO,MAAM,YAAY,MAAM;AAC7B,cAAM,aAAa,MAAM,IAAY,oBAAoB,UAAU,KAAK;AACxE,YAAI,eAAe,UAAa,eAAe,KAAM,QAAO,EAAE,MAAM,YAAqB;AACzF,cAAM,QAAQ,QAAQ,IAAI;AAC1B,YAAI,UAAU,OAAW,QAAOI,mBAAkB,MAAM,WAAW,SAAS,IACxE,EAAE,MAAM,aAAsB,QAAQ,MAAM,IAC5C,EAAE,MAAM,YAAqB;AACjC,cAAM,SAA2C;AAAA,UAC/C;AAAA,UAAW,eAAe;AAAA,UAAM,OAAO;AAAA,QACzC;AACA,cAAM,IAAI,oBAAoB,UAAU,OAAO,IAAI;AACnD,cAAM,IAAI,cAAc,MAAM,MAAM;AACpC,eAAO,EAAE,MAAM,UAAmB,OAAO;AAAA,MAC3C,CAAC;AAAA,IACH;AAAA,IACA,MAAM,aAAa,OAAO;AACxB,kBAAY,MAAM,UAAU;AAC5B,aAAO,MAAM,YAAY,MAAM;AAC7B,cAAM,SAAS,QAAQ,MAAM,aAAa;AAC1C,YAAI,WAAW,OAAW,QAAO,EAAE,MAAM,UAAmB;AAC5D,YAAI,OAAO,UAAU,WAAY,QAAO,EAAE,MAAM,YAAqB,OAAO;AAC5E,YAAI,OAAO,UAAU,YAAa,QAAO,EAAE,MAAM,qBAA8B,OAAO;AACtF,YAAI,CAAC,KAAK,QAAQ,MAAM,UAAU,EAAG,QAAO,EAAE,MAAM,WAAoB,OAAO;AAC/E,cAAM,YAA8C,EAAE,GAAG,QAAQ,OAAO,YAAY;AACpF,cAAM,IAAI,cAAc,MAAM,eAAe,SAAS;AACtD,eAAO,EAAE,MAAM,WAAoB,QAAQ,UAAU;AAAA,MACvD,CAAC;AAAA,IACH;AAAA,IACA,MAAM,iBAAiB,OAAO;AAC5B,kBAAY,MAAM,UAAU;AAC5B,YAAM,eAAeJ,SAAQ,MAAM,MAAM,YAAY;AACrD,aAAO,MAAM,YAAY,MAAM;AAC7B,cAAM,SAAS,QAAQ,MAAM,aAAa;AAC1C,YAAI,WAAW,OAAW,QAAO,EAAE,MAAM,UAAmB;AAC5D,YAAI,OAAO,UAAU,WAAY,QAAO,EAAE,MAAM,OAAO,iBAAiB,eAAe,cAAuB,aAAsB,OAAO;AAC3I,YAAI,OAAO,UAAU,YAAa,QAAO,EAAE,MAAM,iBAA0B,OAAO;AAClF,YAAI,CAAC,KAAK,QAAQ,MAAM,UAAU,EAAG,QAAO,EAAE,MAAM,WAAoB,OAAO;AAC/E,cAAM,WAA6C;AAAA,UACjD,GAAG;AAAA,UAAQ;AAAA,UAAc,OAAO;AAAA,QAClC;AACA,cAAM,IAAI,cAAc,MAAM,eAAe,QAAQ;AACrD,eAAO,EAAE,MAAM,YAAqB,QAAQ,SAAS;AAAA,MACvD,CAAC;AAAA,IACH;AAAA,EACF;AACA,QAAM,UAAgD;AAAA,IACpD,MAAM,KAAK,QAAQ;AACjB,YAAM,MAAM,eAAe,MAAM;AACjC,YAAM,SAAS,MAAM,IAAyC,sBAAsB,GAAG;AACvF,UAAI,WAAW,OAAW;AAC1B,UAAI,CAAC,sBAAsB,QAAQ,MAAM,EAAG,OAAM,IAAI,MAAM,8BAA8B;AAC1F,UAAI,SAAS;AACb,iBAAW,SAAS,QAAQ;AAC1B,cAAM,SAAS,MAAM,IAAyC,eAAe,KAAK,IAAI,GAAG;AACzF,YAAI,WAAW,OAAW;AAC1B,YAAI,OAAO,UAAU,SAAS,CAAC,sBAAsB,QAAQ,MAAM,KAAK,CAACI,mBAAkB,OAAO,UAAU,OAAO,QAAQ,GAAG;AAC5H,gBAAM,IAAI,MAAM,gCAAgC;AAAA,QAClD;AACA,iBAAS;AAAA,MACX;AACA,aAAO;AAAA,IACT;AAAA,IACA,MAAM,KAAK,QAAQ;AACjB,YAAM,MAAM,eAAe,MAAM;AACjC,MAAAJ,SAAQ,MAAM,OAAO,SAAS,eAAe;AAC7C,UAAI,CAAC,OAAO,SAAS,OAAO,KAAK,EAAG,OAAM,IAAI,MAAM,2BAA2B;AAC/E,YAAM,YAAY,MAAM;AACtB,cAAM,SAAS,MAAM,IAAyC,sBAAsB,GAAG;AACvF,YAAI,WAAW,UAAa,OAAO,UAAU,SAAU,OAAM,IAAI,MAAM,6CAA6C;AACpH,YAAI,WAAW,WAAc,CAAC,sBAAsB,QAAQ,MAAM,KAAK,CAACI,mBAAkB,OAAO,UAAU,OAAO,QAAQ,IAAI;AAC5H,gBAAM,IAAI,MAAM,0CAA0C;AAAA,QAC5D;AACA,cAAM,YAAY,eAAe,OAAO,KAAK;AAC7C,cAAM,QAAQ,MAAM,IAAI,WAAW,GAAG;AACtC,YAAI,UAAU,UAAa,CAACA,mBAAkB,OAAO,MAAM,EAAG,OAAM,IAAI,MAAM,6BAA6B;AAC3G,YAAI,UAAU,OAAW,OAAM,IAAI,WAAW,KAAK,MAAM;AAAA,MAC3D,CAAC;AAAA,IACH;AAAA,EACF;AACA,SAAO;AAAA,IACL;AAAA,IAAY;AAAA,IAAS;AAAA,IAAS;AAAA,IAAM;AAAA,EACtC;AACF;;;AE7LA,SAAS,eAAAG,oBAAmB;AAC5B,SAAS,iBAAiB;AAC1B;AAAA,EACE;AAAA,EAAO;AAAA,EAAO;AAAA,OACT;AACP,SAAS,gBAAgB;AACzB,OAAO,UAAU;;;ACwEV,SAAS,cAAc,OAAwB;AACpD,SAAO,KAAK,UAAU,OAAO,gBAAgB;AAC/C;AAEA,SAAS,iBAAiB,MAAc,WAA6B;AACnE,SAAO,OAAO,cAAc,WACxB,EAAE,iBAAiB,UAAU,SAAS,EAAE,IACxC;AACN;;;ADlDA,SAAS,OAAU,OAAkB;AACnC,SAAO,KAAK,MAAM,OAAO,CAAC,MAAM,cAAuB;AACrD,WAAO,OAAO,cAAc,YAAY,cAAc,QAAQ,OAAO,KAAK,SAAS,EAAE,WAAW,KAC3F,qBAAqB,aAAa,OAAO,UAAU,oBAAoB,YACvE,uBAAuB,KAAK,UAAU,eAAe,IACtD,OAAO,UAAU,eAAe,IAChC;AAAA,EACN,CAAC;AACH;AACA,SAAS,cAAc,KAAsB;AAC3C,MAAI,CAAC,OAAO,cAAc,GAAG,KAAK,MAAM;AACtC,UAAM,IAAI,MAAM,gCAAgC;AAClD,MAAI;AACF,YAAQ,KAAK,KAAK,CAAC;AACnB,WAAO;AAAA,EACT,SAAS,OAAO;AACd,QAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,UAAU,SAAS,MAAM,SAAS;AACnF,aAAO;AACT,WAAO;AAAA,EACT;AACF;AACA,eAAsB,yBAAyB,SAAqE;AAClH,MAAI,QAAQ,SAAS,cAAc,QAAQ,SAAS,WAAW;AAC7D,UAAM,IAAI,MAAM,mDAAmD;AACrE,QAAM,OAAO,KAAK,QAAQ,QAAQ,IAAI;AACtC,QAAM,YAAY,KAAK,QAAQ,IAAI;AACnC,QAAM,MAAM,WAAW,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACvD,QAAM,WAAW,MAAM,MAAM,SAAS;AACtC,MAAI,CAAC,SAAS,YAAY,MAAM,SAAS,OAAO,QAAW;AACzD,UAAM,IAAI,MAAM,0EAA0E;AAC5F,QAAM,OAAO,MAAM,KAAK,MAAM,UAAU,UAAU,UAAU,SAAS,UAAU,YAAY,GAAK;AAChG,MAAI;AACF,UAAMC,YAAW,MAAM,KAAK,KAAK;AACjC,QAAI,CAACA,UAAS,OAAO,MAAMA,UAAS,OAAO,QAAW;AACpD,YAAM,IAAI,MAAM,6CAA6C;AAC/D,UAAM,KAAK,KAAK;AAAA,EAClB,UAAE;AACA,UAAM,KAAK,MAAM;AAAA,EACnB;AACA,QAAM,EAAE,aAAa,IAAI,MAAM,OAAO,aAAa;AACnD,QAAM,WAAW,IAAI,aAAa,IAAI;AACtC,QAAM,QAAQC,aAAY,EAAE,EAAE,SAAS,KAAK;AAC5C,MAAI,SAAS;AACb,MAAI,gBAAgB;AACpB,QAAM,cAAc,CAAI,SAAqB;AAC3C,QAAI;AACF,YAAM,IAAI,MAAM,2BAA2B;AAC7C,QAAI;AACF,aAAO,KAAK;AACd,aAAS,KAAK,iBAAiB;AAC/B,oBAAgB;AAChB,QAAI;AACF,YAAM,SAAS,KAAK;AACpB,UAAI,kBAAkB;AACpB,cAAM,IAAI,UAAU,kDAAkD;AACxE,eAAS,KAAK,QAAQ;AACtB,aAAO;AAAA,IACT,SAAS,OAAO;AACd,eAAS,KAAK,UAAU;AACxB,YAAM;AAAA,IACR,UAAE;AACA,sBAAgB;AAAA,IAClB;AAAA,EACF;AACA,MAAI;AACF,aAAS,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,KAMb;AACD,gBAAY,MAAM;AAChB,YAAM,QAAQ,SAAS,QAAQ,2DAA2D,EAAE,IAAI;AAChG,UAAI,UAAU,WAAc,MAAM,SAAS,SAAS,KAAK,cAAc,MAAM,GAAG,IAAI;AAClF,cAAM,IAAI,MAAM,kGAAkG;AAAA,MACpH;AACA,YAAM,UAAU,SAAS,QAAQ,qEAAqE,EAAE,IAAI,YAAY,UAAU;AAClI,UAAI,YAAY,UAAa,OAAO,QAAQ,KAAK,MAAM,QAAQ;AAC7D,cAAM,IAAI,MAAM,sCAAsC;AACxD,eAAS,QAAQ,6EAA6E,EAAE,IAAI,YAAY,YAAY,cAAc,QAAQ,QAAQ,CAAC;AAC3J,eAAS,QAAQ,4EAA4E,EAAE,IAAI,SAAS,GAAG,QAAQ,KAAK,KAAK;AAAA,IACnI,CAAC;AAAA,EACH,SAAS,OAAO;AACd,aAAS,MAAM;AACf,UAAM;AAAA,EACR;AACA,QAAM,OAAO,SAAS,QAAQ,qEAAqE;AACnG,QAAM,OAAO,SAAS,QAAQ,2EAA2E;AACzG,QAAM,QAAQ,SAAS,QAAQ,mIAAmI;AAClK,QAAM,SAAS,SAAS,QAAQ,6EAA6E;AAC7G,QAAM,SAAS,SAAS,QAAQ,+DAA+D;AAC/F,QAAM,aAAa,MAAM;AACvB,QAAI;AACF,YAAM,IAAI,MAAM,2BAA2B;AAAA,EAC/C;AACA,SAAO;AAAA,IACL;AAAA,IACA,IAAO,WAAmB,KAA4B;AACpD,iBAAW;AACX,YAAM,MAAM,KAAK,IAAI,WAAW,GAAG;AACnC,aAAO,QAAQ,SAAY,SAAY,OAAU,IAAI,KAAK;AAAA,IAC5D;AAAA,IACA,QAAW,WAAmB;AAC5B,iBAAW;AACX,aAAQ,KAAK,IAAI,SAAS,EAGrB,IAAI,UAAQ,EAAE,KAAK,IAAI,KAAK,OAAO,OAAU,IAAI,KAAK,EAAE,EAAE;AAAA,IACjE;AAAA,IACA,IAAI,WAAW,KAAK,OAAO;AACzB,iBAAW;AACX,YAAM,IAAI,WAAW,KAAK,cAAc,KAAK,CAAC;AAAA,IAChD;AAAA,IACA,OAAO,WAAW,KAAK,OAAO;AAC5B,iBAAW;AACX,aAAO,OAAO,IAAI,WAAW,KAAK,cAAc,KAAK,CAAC,EAAE,YAAY;AAAA,IACtE;AAAA,IACA,OAAO,WAAW,KAAK;AACrB,iBAAW;AACX,aAAO,IAAI,WAAW,GAAG;AAAA,IAC3B;AAAA,IACA;AAAA,IACA,QAAQ;AACN,UAAI;AACF;AACF,kBAAY,MAAM;AAChB,iBAAS,QAAQ,wDAAwD,EAAE,IAAI,KAAK;AAAA,MACtF,CAAC;AACD,eAAS,MAAM;AACf,eAAS;AAAA,IACX;AAAA,EACF;AACF;",
   "names": ["Buffer", "Buffer", "request", "response", "Buffer", "Buffer", "isDeepStrictEqual", "z", "isDeepStrictEqual", "isDeepStrictEqual", "randomBytes", "WakeEnvelopeZod", "PayloadBuilder", "z", "isDeepStrictEqual", "head", "isDeepStrictEqual", "Base64Url32BytesZod", "EndpointChallengeZod", "HandshakeIdZod", "HashZod", "NormalizedAddressZod", "z", "EndpointChallengeResponseZod", "NormalizedAddressZod", "z", "NormalizedAddressZod", "lookup", "z", "HashZod", "HandshakeIdZod", "Base64Url32BytesZod", "NormalizedAddressZod", "isDeepStrictEqual", "lookup", "EndpointChallengeZod", "randomBytes", "metadata", "randomBytes"]
 }