@yiaany/ghostapi 0.1.7 → 0.1.8

package/dist/actions/gateway.js

@@ -0,0 +1,514 @@
+import { createHash, createPrivateKey, createPublicKey, generateKeyPairSync, KeyObject, randomUUID, sign, verify } from "node:crypto";
+import { lstat, readFile } from "node:fs/promises";
+import { join } from "node:path";
+import { getDataPaths } from "../config/dataPaths.js";
+import { createLocalSafetyController } from "../safety/index.js";
+import { sanitizeSecretString } from "../security/secrets.js";
+import { atomicWriteJson, ensurePrivateDirectory, withFileLock } from "../storage/fileStore.js";
+import { inspectWorld, runSubscriptionFailureWorkflow } from "../worlds/index.js";
+const ACTION_SCHEMA_VERSION = 1;
+const ACTION_KIND = "ghostapi.action";
+const APPROVAL_KIND = "ghostapi.action-approval";
+const RECORD_KIND = "ghostapi.action-record";
+const MAX_ACTION_BYTES = 128 * 1024;
+const MAX_RECEIPTS = 20;
+const IDENTIFIER = /^[a-z0-9][a-z0-9._-]{0,127}$/;
+const HASH = /^[a-f0-9]{64}$/;
+export class ActionGatewayError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "ActionGatewayError";
+    }
+}
+export function canonicalizeActionEnvelope(value) {
+    return canonicalJson(validateActionEnvelope(value));
+}
+export function actionHash(value) {
+    return sha256(canonicalizeActionEnvelope(value));
+}
+export function actionApprovalHash(value) {
+    return sha256(canonicalJson(validateActionApproval(value)));
+}
+export function validateActionEnvelope(value) {
+    const action = object(value, "Action envelope must be an object.");
+    exactKeys(action, ["schemaVersion", "kind", "actionId", "idempotencyKey", "actor", "project", "provider", "operation", "resource", "arguments", "expectedSideEffects", "riskClass", "reversibility", "policy", "evidence", "expiresAt", "nonce"], "Action envelope");
+    if (action.schemaVersion !== ACTION_SCHEMA_VERSION || action.kind !== ACTION_KIND)
+        throw new ActionGatewayError("Unsupported action envelope schema.");
+    const actor = object(action.actor, "Action actor is invalid.");
+    exactKeys(actor, ["id", "workloadId", "type"], "Action actor");
+    if (actor.type !== "agent" && actor.type !== "service")
+        throw new ActionGatewayError("Action actor type is invalid.");
+    const project = object(action.project, "Action project is invalid.");
+    exactKeys(project, ["id", "environment"], "Action project");
+    if (project.environment !== "synthetic")
+        throw new ActionGatewayError("Only the synthetic action environment is available.");
+    if (action.provider !== "ghostapi-synthetic")
+        throw new ActionGatewayError("Unknown action provider.");
+    const resource = object(action.resource, "Action resource is invalid.");
+    exactKeys(resource, ["type", "id"], "Action resource");
+    if (resource.type !== "synthetic-world")
+        throw new ActionGatewayError("Action resource type is invalid.");
+    const args = object(action.arguments, "Action arguments are invalid.");
+    exactKeys(args, ["worldId"], "Action arguments");
+    const operation = identifier(action.operation, "Action operation");
+    const sideEffects = action.expectedSideEffects;
+    const expected = ["stripe.subscription.past_due", "email.subscription_payment_failed", "github.recovery_issue", "generic_rest.payment_failed"];
+    if (!Array.isArray(sideEffects) || sideEffects.length > 16 || sideEffects.some((value) => typeof value !== "string" || !IDENTIFIER.test(value) || sanitizeSecretString(value) !== value) || new Set(sideEffects).size !== sideEffects.length)
+        throw new ActionGatewayError("Action expected side effects must be a bounded unique list of safe identifiers.");
+    if (operation === "synthetic.subscription_failure" && (sideEffects.length !== expected.length || sideEffects.some((value, index) => value !== expected[index])))
+        throw new ActionGatewayError("Action expected side effects are invalid for the synthetic operation.");
+    if (action.riskClass !== "read" && action.riskClass !== "write" && action.riskClass !== "money_movement" && action.riskClass !== "external_communication" && action.riskClass !== "delete" && action.riskClass !== "deploy")
+        throw new ActionGatewayError("Action risk class is invalid.");
+    if (action.reversibility !== "none" && action.reversibility !== "compensatable")
+        throw new ActionGatewayError("Action reversibility is invalid.");
+    const policy = object(action.policy, "Action policy reference is invalid.");
+    exactKeys(policy, ["version", "hash"], "Action policy reference");
+    const evidence = object(action.evidence, "Action evidence reference is invalid.");
+    exactKeys(evidence, ["hash"], "Action evidence reference");
+    const worldId = identifier(args.worldId, "Action world id");
+    if (resource.id !== worldId)
+        throw new ActionGatewayError("Action resource and normalized world argument must match.");
+    return {
+        schemaVersion: 1,
+        kind: "ghostapi.action",
+        actionId: identifier(action.actionId, "Action id"),
+        idempotencyKey: identifier(action.idempotencyKey, "Action idempotency key"),
+        actor: { id: identifier(actor.id, "Action actor id"), workloadId: identifier(actor.workloadId, "Action workload id"), type: actor.type },
+        project: { id: identifier(project.id, "Action project id"), environment: "synthetic" },
+        provider: "ghostapi-synthetic",
+        operation,
+        resource: { type: "synthetic-world", id: worldId },
+        arguments: { worldId },
+        expectedSideEffects: [...sideEffects],
+        riskClass: action.riskClass,
+        reversibility: action.reversibility,
+        policy: { version: positiveInteger(policy.version, "Action policy version"), hash: hash(policy.hash, "Action policy hash") },
+        evidence: { hash: hash(evidence.hash, "Action evidence hash") },
+        expiresAt: futureTimestamp(action.expiresAt, "Action expiry"),
+        nonce: identifier(action.nonce, "Action nonce")
+    };
+}
+export function validateActionApproval(value) {
+    const approval = object(value, "Action approval must be an object.");
+    exactKeys(approval, ["schemaVersion", "kind", "approvalId", "actionHash", "approvedBy", "approvedAt", "expiresAt", "nonce", "provenance"], "Action approval");
+    if (approval.schemaVersion !== ACTION_SCHEMA_VERSION || approval.kind !== APPROVAL_KIND)
+        throw new ActionGatewayError("Unsupported action approval schema.");
+    const approvedAt = timestamp(approval.approvedAt, "Action approval timestamp");
+    const expiresAt = futureTimestamp(approval.expiresAt, "Action approval expiry");
+    if (Date.parse(expiresAt) <= Date.parse(approvedAt))
+        throw new ActionGatewayError("Action approval must expire after it was issued.");
+    const provenance = object(approval.provenance, "Action approval provenance is invalid.");
+    exactKeys(provenance, ["kind", "keyId", "signature"], "Action approval provenance");
+    if (provenance.kind !== "ghostapi.ed25519-signature" || typeof provenance.signature !== "string" || !/^[A-Za-z0-9_-]{86}$/.test(provenance.signature))
+        throw new ActionGatewayError("Action approval provenance is invalid.");
+    return { schemaVersion: 1, kind: "ghostapi.action-approval", approvalId: identifier(approval.approvalId, "Action approval id"), actionHash: hash(approval.actionHash, "Action approval hash"), approvedBy: identifier(approval.approvedBy, "Action approver id"), approvedAt, expiresAt, nonce: identifier(approval.nonce, "Action approval nonce"), provenance: { kind: "ghostapi.ed25519-signature", keyId: identifier(provenance.keyId, "Action approval provenance key id"), signature: provenance.signature } };
+}
+export function createSyntheticActionAdapter() {
+    return {
+        provider: "ghostapi-synthetic",
+        supports: (operation) => operation === "synthetic.subscription_failure",
+        async plan(action) {
+            if (action.resource.id !== action.arguments.worldId)
+                throw new ActionGatewayError("Synthetic action resource does not match normalized arguments.");
+        },
+        async simulate(action) {
+            await inspectWorld(action.arguments.worldId);
+        },
+        async execute(action, controls) {
+            const receipt = await runSubscriptionFailureWorkflow(action.arguments.worldId, action.actionId, controls?.commit);
+            return { outcome: "committed", providerRequestId: `synthetic_${receipt.actionId}`, result: { worldId: action.arguments.worldId, subscriptionId: receipt.subscriptionId, syntheticReceiptId: receipt.actionId } };
+        },
+        async verify(action) {
+            const world = await inspectWorld(action.arguments.worldId);
+            const receipt = world.state.receipts.find((candidate) => candidate.actionId === action.actionId);
+            return receipt === undefined
+                ? { committed: false }
+                : { committed: true, providerRequestId: `synthetic_${receipt.actionId}`, result: { worldId: action.arguments.worldId, subscriptionId: receipt.subscriptionId, syntheticReceiptId: receipt.actionId } };
+        }
+    };
+}
+export class LocalActionGateway {
+    now;
+    pathForAction;
+    adapter;
+    safetyController;
+    approvalVerifier;
+    constructor(options = {}) {
+        this.now = options.now ?? (() => new Date());
+        this.pathForAction = options.pathForAction ?? getActionPath;
+        this.adapter = options.adapter ?? createSyntheticActionAdapter();
+        this.safetyController = options.safetyController ?? createLocalSafetyController({ now: this.now });
+        this.approvalVerifier = options.approvalVerifier ?? createDisabledActionApprovalVerifier();
+    }
+    async submit(actionValue, approvalValue, policy) {
+        const action = validateActionEnvelope(actionValue);
+        const approval = validateActionApproval(approvalValue);
+        const verification = await this.approvalVerifier.verify(action, approval, { phase: "submit" });
+        requireApprovalInboxVerification(approval, verification);
+        const current = this.now().toISOString();
+        verifyPolicy(action, policy);
+        const actionDigest = actionHash(action);
+        const path = this.pathForAction(action.actionId);
+        return withFileLock(path, async () => {
+            const existing = await readStoredAction(path, false);
+            if (existing !== null) {
+                if (existing.actionHash === actionDigest && actionApprovalHash(existing.approval) === actionApprovalHash(approval))
+                    return existing;
+                throw new ActionGatewayError("Action id already exists with a different immutable envelope or approval.");
+            }
+            if (Date.parse(action.expiresAt) <= Date.parse(current))
+                throw new ActionGatewayError("Action has expired.");
+            verifyApproval(action, approval, current);
+            const record = { schemaVersion: 1, kind: "ghostapi.action-record", envelope: action, actionHash: actionDigest, approval, receipts: [] };
+            record.receipts.push(createReceipt(record, "requested", current));
+            await writeStoredAction(path, record);
+            return record;
+        });
+    }
+    async inspect(actionId) {
+        return readStoredAction(this.pathForAction(identifier(actionId, "Action id")), true);
+    }
+    async execute(actionValue, identity, policy) {
+        const requested = validateActionEnvelope(actionValue);
+        const path = this.pathForAction(requested.actionId);
+        return withFileLock(path, async () => {
+            const record = await readStoredAction(path, true);
+            if (record === null)
+                throw new ActionGatewayError("Action was not submitted.");
+            const approvalVerification = await this.approvalVerifier.verify(record.envelope, record.approval, { phase: "execute" });
+            requireApprovalInboxVerification(record.approval, approvalVerification);
+            const current = this.now().toISOString();
+            if (actionHash(requested) !== record.actionHash || canonicalizeActionEnvelope(requested) !== canonicalizeActionEnvelope(record.envelope))
+                throw new ActionGatewayError("Action envelope changed after approval; execution is blocked.");
+            verifyApproval(record.envelope, record.approval, current, false);
+            verifyPolicy(record.envelope, policy);
+            if (identity.actorId !== record.envelope.actor.id || identity.workloadId !== record.envelope.actor.workloadId)
+                throw new ActionGatewayError("Execution identity does not match the approved action.");
+            if (!this.adapter.supports(record.envelope.operation))
+                throw new ActionGatewayError(`Execution adapter does not support action operation: ${record.envelope.operation}`);
+            const verified = findLatestReceipt(record.receipts, "verified");
+            if (verified !== undefined)
+                return verified;
+            const committed = findLatestReceipt(record.receipts, "committed");
+            if (committed !== undefined) {
+                const reconciliation = await this.adapter.verify(record.envelope);
+                if (!reconciliation.committed || reconciliation.providerRequestId === undefined || reconciliation.result === undefined)
+                    throw new ActionGatewayError("Committed action verification is incomplete; execution will not retry without idempotency proof.");
+                const verifiedReceipt = createReceipt(record, "verified", current, reconciliation.providerRequestId, reconciliation.result);
+                appendReceipt(record, verifiedReceipt);
+                await writeStoredAction(path, record);
+                return verifiedReceipt;
+            }
+            const attempted = findLatestReceipt(record.receipts, "attempted");
+            if (attempted !== undefined) {
+                const reconciliation = await this.adapter.verify(record.envelope);
+                if (!reconciliation.committed || reconciliation.providerRequestId === undefined || reconciliation.result === undefined)
+                    throw new ActionGatewayError("Prior action outcome is unknown; execution will not retry without idempotency proof.");
+                appendReceipt(record, createReceipt(record, "committed", current, reconciliation.providerRequestId, reconciliation.result));
+                const verifiedReceipt = createReceipt(record, "verified", current, reconciliation.providerRequestId, reconciliation.result);
+                appendReceipt(record, verifiedReceipt);
+                await writeStoredAction(path, record);
+                return verifiedReceipt;
+            }
+            if (Date.parse(record.envelope.expiresAt) <= Date.parse(current))
+                throw new ActionGatewayError("Action has expired.");
+            verifyApproval(record.envelope, record.approval, current);
+            await this.adapter.plan(record.envelope);
+            await this.adapter.simulate(record.envelope);
+            const safety = await this.safetyController.admit(safetyAction(record.envelope, record.actionHash));
+            if (safety.replay)
+                throw new ActionGatewayError("Safety controller replay was reached before a verified action receipt.");
+            appendReceipt(record, createReceipt(record, "attempted", current));
+            await writeStoredAction(path, record);
+            let execution;
+            try {
+                execution = await this.adapter.execute(record.envelope, { commit: safety.commit });
+            }
+            catch {
+                await safety.complete({ success: false, latencyMs: 0, reason: "synthetic execution failed or was stopped" });
+                const failed = createReceipt(record, "failed", this.now().toISOString(), undefined, undefined, { code: "execution_error", retrySafe: false });
+                appendReceipt(record, failed);
+                await writeStoredAction(path, record);
+                throw new ActionGatewayError("Action execution failed; it was not automatically retried.");
+            }
+            if (execution.outcome === "unknown") {
+                await safety.complete({ success: false, latencyMs: 0, reason: "synthetic execution outcome is unknown" });
+                const failed = createReceipt(record, "failed", this.now().toISOString(), undefined, undefined, { code: "unknown_outcome", retrySafe: false });
+                appendReceipt(record, failed);
+                await writeStoredAction(path, record);
+                throw new ActionGatewayError("Action provider outcome is unknown; it was not automatically retried.");
+            }
+            appendReceipt(record, createReceipt(record, "committed", this.now().toISOString(), execution.providerRequestId, execution.result));
+            await writeStoredAction(path, record);
+            const verification = await this.adapter.verify(record.envelope);
+            if (!verification.committed || verification.providerRequestId === undefined || verification.result === undefined) {
+                await safety.complete({ success: false, reconciliationMismatch: true, latencyMs: 0, reason: "synthetic verification did not prove the result" });
+                const failed = createReceipt(record, "failed", this.now().toISOString(), execution.providerRequestId, execution.result, { code: "verification_failed", retrySafe: false });
+                appendReceipt(record, failed);
+                await writeStoredAction(path, record);
+                throw new ActionGatewayError("Action committed but verification did not prove its result; it was not automatically retried.");
+            }
+            const verifiedReceipt = createReceipt(record, "verified", this.now().toISOString(), verification.providerRequestId, verification.result);
+            appendReceipt(record, verifiedReceipt);
+            await writeStoredAction(path, record);
+            await safety.complete({ success: true, latencyMs: 0 });
+            return verifiedReceipt;
+        });
+    }
+    async compensate(actionId) {
+        const action = await this.inspect(actionId);
+        if (this.adapter.compensate === undefined || action.envelope.reversibility !== "compensatable")
+            throw new ActionGatewayError("Compensation is unsupported for this action; no rollback is claimed.");
+        await this.adapter.compensate(action.envelope);
+        throw new ActionGatewayError("Compensation adapters must return a durable compensation receipt before this operation can be exposed.");
+    }
+}
+function safetyAction(action, actionDigest) {
+    return {
+        organizationId: "ghostapi-local",
+        projectId: action.project.id,
+        environment: action.project.environment,
+        actorId: action.actor.id,
+        workloadId: action.actor.workloadId,
+        provider: action.provider,
+        operation: action.operation,
+        riskClass: action.riskClass,
+        idempotencyKey: action.idempotencyKey,
+        actionHash: actionDigest,
+        costs: { monetaryAmountMinor: 0, requests: 1, messages: 1, mutations: 1, deletes: 0, tokenCost: 0 }
+    };
+}
+export function createLocalActionGateway(options = {}) {
+    return new LocalActionGateway(options);
+}
+export function createDisabledActionApprovalVerifier() {
+    return { async verify() { throw new ActionGatewayError("Action approval authenticity could not be verified."); } };
+}
+export function createEd25519ActionApprovalSigner(options) {
+    const keyId = identifier(options.keyId, "Action approval signing key id");
+    const privateKey = options.privateKey instanceof KeyObject ? options.privateKey : createPrivateKey(options.privateKey);
+    if (privateKey.type !== "private" || privateKey.asymmetricKeyType !== "ed25519")
+        throw new ActionGatewayError("Action approval signing key must be an Ed25519 private key.");
+    return {
+        issue(value) {
+            const approval = validateUnsignedActionApproval(value);
+            const signature = sign(null, Buffer.from(canonicalJson(approval), "utf8"), privateKey).toString("base64url");
+            return { ...approval, provenance: { kind: "ghostapi.ed25519-signature", keyId, signature } };
+        }
+    };
+}
+export function createEd25519ActionApprovalVerifier(options) {
+    const keys = new Map(Object.entries(options.trustedKeys).map(([keyId, key]) => {
+        const parsedId = identifier(keyId, "Action approval verification key id");
+        const publicKey = key instanceof KeyObject && key.type === "public" ? key : createPublicKey(key);
+        if (publicKey.asymmetricKeyType !== "ed25519")
+            throw new ActionGatewayError("Action approval verification key must be Ed25519.");
+        return [parsedId, publicKey];
+    }));
+    return {
+        async verify(action, approval) {
+            const parsed = validateActionApproval(approval);
+            const publicKey = keys.get(parsed.provenance.keyId);
+            const valid = publicKey !== undefined && verify(null, Buffer.from(canonicalJson(unsignedActionApproval(parsed)), "utf8"), publicKey, Buffer.from(parsed.provenance.signature, "base64url"));
+            if (!valid || parsed.actionHash !== actionHash(action))
+                throw new ActionGatewayError("Action approval authenticity could not be verified.");
+            return { provenance: "verified" };
+        }
+    };
+}
+export function createTestActionApprovalVerifier() {
+    const { privateKey, publicKey } = generateKeyPairSync("ed25519");
+    const signer = createEd25519ActionApprovalSigner({ keyId: "test-approval-key", privateKey });
+    return {
+        verifier: createEd25519ActionApprovalVerifier({ trustedKeys: { "test-approval-key": publicKey } }),
+        signer,
+        issue: (approval) => signer.issue(approval)
+    };
+}
+export function getActionPath(actionId) {
+    return join(getDataPaths().actions, `${identifier(actionId, "Action id")}.action.json`);
+}
+async function readStoredAction(path, required) {
+    await ensurePrivateDirectory(getDataPaths().actions);
+    const info = await lstat(path).catch((error) => isErrorCode(error, "ENOENT") ? null : Promise.reject(error));
+    if (info === null) {
+        if (required)
+            throw new ActionGatewayError("Action was not found.");
+        return null;
+    }
+    if (!info.isFile() || info.isSymbolicLink())
+        throw new ActionGatewayError("Action record must be a regular non-symlink file.");
+    const source = await readFile(path, "utf8");
+    if (Buffer.byteLength(source, "utf8") > MAX_ACTION_BYTES)
+        throw new ActionGatewayError(`Action record exceeds ${MAX_ACTION_BYTES} bytes.`);
+    try {
+        return validateStoredAction(JSON.parse(source));
+    }
+    catch (error) {
+        if (error instanceof ActionGatewayError)
+            throw error;
+        throw new ActionGatewayError("Action record is not valid JSON.");
+    }
+}
+async function writeStoredAction(path, record) {
+    await ensurePrivateDirectory(getDataPaths().actions);
+    await atomicWriteJson(path, validateStoredAction(record));
+}
+export function validateStoredAction(value) {
+    const record = object(value, "Action record must be an object.");
+    exactKeys(record, ["schemaVersion", "kind", "envelope", "actionHash", "approval", "receipts"], "Action record");
+    if (record.schemaVersion !== ACTION_SCHEMA_VERSION || record.kind !== RECORD_KIND)
+        throw new ActionGatewayError("Unsupported action record schema.");
+    const envelope = validateActionEnvelope(record.envelope);
+    const digest = hash(record.actionHash, "Action record hash");
+    if (digest !== actionHash(envelope))
+        throw new ActionGatewayError("Action record hash does not match its envelope.");
+    const approval = validateActionApproval(record.approval);
+    verifyApproval(envelope, approval, new Date(0).toISOString(), false);
+    const rawReceipts = record.receipts;
+    if (!Array.isArray(rawReceipts) || rawReceipts.length < 1 || rawReceipts.length > MAX_RECEIPTS)
+        throw new ActionGatewayError("Action record receipts are invalid.");
+    const receipts = rawReceipts.map((receipt, index) => validateReceipt(receipt, envelope.actionId, digest, index === 0 ? receiptGenesisHash(digest) : rawReceipts[index - 1].receiptHash));
+    if (receipts[0].status !== "requested")
+        throw new ActionGatewayError("Action record must begin with a requested receipt.");
+    return { schemaVersion: 1, kind: "ghostapi.action-record", envelope, actionHash: digest, approval, receipts };
+}
+function createReceipt(record, status, timestamp, providerRequestId, result, failure) {
+    const previousReceiptHash = record.receipts.length === 0 ? receiptGenesisHash(record.actionHash) : record.receipts.at(-1).receiptHash;
+    const base = { receiptId: identifier(`receipt-${randomUUID().replace(/-/g, "")}`, "Receipt id"), actionId: record.envelope.actionId, actionHash: record.actionHash, status, timestamp: timestampValue(timestamp, "Action receipt timestamp"), ...(providerRequestId === undefined ? {} : { providerRequestId: identifier(providerRequestId, "Provider request id") }), ...(result === undefined ? {} : { result }), ...(failure === undefined ? {} : { failure }), previousReceiptHash };
+    return { ...base, receiptHash: sha256(canonicalJson(base)) };
+}
+function appendReceipt(record, receipt) {
+    if (record.receipts.length >= MAX_RECEIPTS)
+        throw new ActionGatewayError(`Action receipt limit of ${MAX_RECEIPTS} was reached.`);
+    record.receipts.push(receipt);
+}
+function validateReceipt(value, actionId, actionDigest, previousReceiptHash) {
+    const receipt = object(value, "Action receipt is invalid.");
+    exactKeys(receipt, ["receiptId", "actionId", "actionHash", "status", "timestamp", "providerRequestId", "result", "failure", "previousReceiptHash", "receiptHash"], "Action receipt");
+    if (receipt.actionId !== actionId || receipt.actionHash !== actionDigest || receipt.previousReceiptHash !== previousReceiptHash || (receipt.status !== "requested" && receipt.status !== "attempted" && receipt.status !== "committed" && receipt.status !== "verified" && receipt.status !== "failed"))
+        throw new ActionGatewayError("Action receipt linkage is invalid.");
+    const providerRequestId = receipt.providerRequestId === undefined ? undefined : identifier(receipt.providerRequestId, "Provider request id");
+    const result = receipt.result === undefined ? undefined : normalizeResult(receipt.result);
+    const failure = receipt.failure === undefined ? undefined : normalizeFailure(receipt.failure);
+    if ((receipt.status === "committed" || receipt.status === "verified") && (providerRequestId === undefined || result === undefined))
+        throw new ActionGatewayError("Committed and verified receipts require a provider result.");
+    if (receipt.status === "failed" && failure === undefined)
+        throw new ActionGatewayError("Failed receipt requires a failure classification.");
+    const status = receipt.status;
+    const base = { receiptId: identifier(receipt.receiptId, "Receipt id"), actionId, actionHash: actionDigest, status, timestamp: timestampValue(receipt.timestamp, "Action receipt timestamp"), ...(providerRequestId === undefined ? {} : { providerRequestId }), ...(result === undefined ? {} : { result }), ...(failure === undefined ? {} : { failure }), previousReceiptHash };
+    if (hash(receipt.receiptHash, "Action receipt hash") !== sha256(canonicalJson(base)))
+        throw new ActionGatewayError("Action receipt hash is invalid.");
+    return { ...base, receiptHash: receipt.receiptHash };
+}
+function normalizeResult(value) {
+    const result = object(value, "Action receipt result is invalid.");
+    exactKeys(result, ["worldId", "subscriptionId", "syntheticReceiptId"], "Action receipt result");
+    return { worldId: identifier(result.worldId, "Action receipt world id"), subscriptionId: identifier(result.subscriptionId, "Action receipt subscription id"), syntheticReceiptId: identifier(result.syntheticReceiptId, "Action receipt synthetic receipt id") };
+}
+function normalizeFailure(value) {
+    const failure = object(value, "Action receipt failure is invalid.");
+    exactKeys(failure, ["code", "retrySafe"], "Action receipt failure");
+    if ((failure.code !== "execution_error" && failure.code !== "unknown_outcome" && failure.code !== "verification_failed") || failure.retrySafe !== false)
+        throw new ActionGatewayError("Action receipt failure is invalid.");
+    return { code: failure.code, retrySafe: false };
+}
+function verifyApproval(action, approval, now, enforceExpiry = true) {
+    if (approval.actionHash !== actionHash(action))
+        throw new ActionGatewayError("Action approval is not bound to the exact canonical action hash.");
+    if (approval.approvedBy === action.actor.id || approval.approvedBy === action.actor.workloadId)
+        throw new ActionGatewayError("An action actor cannot approve its own high-risk action.");
+    if (enforceExpiry && Date.parse(approval.approvedAt) > Date.parse(now))
+        throw new ActionGatewayError("Action approval timestamp is in the future.");
+    if (enforceExpiry && Date.parse(approval.expiresAt) <= Date.parse(now))
+        throw new ActionGatewayError("Action approval has expired.");
+}
+function verifyPolicy(action, policy) {
+    if (!policy.allowed)
+        throw new ActionGatewayError("Current policy denies action execution.");
+    if (policy.version !== action.policy.version || policy.hash !== action.policy.hash)
+        throw new ActionGatewayError("Current policy reference does not match the approved action.");
+}
+function receiptGenesisHash(actionDigest) {
+    return sha256(`ghostapi.action.receipt.v1:${actionDigest}`);
+}
+function findLatestReceipt(receipts, status) {
+    for (let index = receipts.length - 1; index >= 0; index -= 1) {
+        const receipt = receipts[index];
+        if (receipt.status === status)
+            return receipt;
+    }
+    return undefined;
+}
+function object(value, message) {
+    if (value === null || typeof value !== "object" || Array.isArray(value))
+        throw new ActionGatewayError(message);
+    return value;
+}
+function exactKeys(value, keys, label) {
+    for (const key of Object.keys(value))
+        if (!keys.includes(key))
+            throw new ActionGatewayError(`${label} contains unsupported field: ${key}`);
+}
+function identifier(value, label) {
+    if (typeof value !== "string" || !IDENTIFIER.test(value) || sanitizeSecretString(value) !== value)
+        throw new ActionGatewayError(`${label} must be a safe stable identifier.`);
+    return value;
+}
+function hash(value, label) {
+    if (typeof value !== "string" || !HASH.test(value))
+        throw new ActionGatewayError(`${label} must be a SHA-256 hex digest.`);
+    return value;
+}
+function positiveInteger(value, label) {
+    if (!Number.isInteger(value) || typeof value !== "number" || value < 1)
+        throw new ActionGatewayError(`${label} must be a positive integer.`);
+    return value;
+}
+function timestamp(value, label) {
+    return timestampValue(value, label);
+}
+function timestampValue(value, label) {
+    if (typeof value !== "string" || !/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/.test(value) || !Number.isFinite(Date.parse(value)))
+        throw new ActionGatewayError(`${label} must be an ISO UTC timestamp.`);
+    return value;
+}
+function futureTimestamp(value, label) {
+    return timestampValue(value, label);
+}
+function canonicalJson(value) {
+    if (value === null || typeof value === "boolean" || typeof value === "string")
+        return JSON.stringify(value);
+    if (typeof value === "number") {
+        if (!Number.isFinite(value))
+            throw new ActionGatewayError("Canonical action values must be finite.");
+        return JSON.stringify(value);
+    }
+    if (Array.isArray(value))
+        return `[${value.map(canonicalJson).join(",")}]`;
+    if (typeof value === "object") {
+        const record = value;
+        return `{${Object.keys(record).sort().map((key) => `${JSON.stringify(key)}:${canonicalJson(record[key])}`).join(",")}}`;
+    }
+    throw new ActionGatewayError("Canonical action values must be JSON data.");
+}
+function requireApprovalInboxVerification(approval, verification) {
+    if (approval.approvedBy === "approval-inbox" && verification.approvalInboxRequestId !== approval.approvalId)
+        throw new ActionGatewayError("Approval inbox provenance is not active for execution.");
+}
+function validateUnsignedActionApproval(value) {
+    const approval = object(value, "Action approval must be an object.");
+    exactKeys(approval, ["schemaVersion", "kind", "approvalId", "actionHash", "approvedBy", "approvedAt", "expiresAt", "nonce"], "Unsigned action approval");
+    return unsignedActionApproval(validateActionApproval({ ...approval, provenance: { kind: "ghostapi.ed25519-signature", keyId: "validation-key", signature: "A".repeat(86) } }));
+}
+function unsignedActionApproval(approval) {
+    const { provenance: _provenance, ...unsigned } = approval;
+    return unsigned;
+}
+function sha256(value) {
+    return createHash("sha256").update(value, "utf8").digest("hex");
+}
+function isErrorCode(error, code) {
+    return error instanceof Error && "code" in error && error.code === code;
+}
+//# sourceMappingURL=gateway.js.map

package/dist/actions/gateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway.js","sourceRoot":"","sources":["../../src/actions/gateway.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,eAAe,EAAE,mBAAmB,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACtI,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,2BAA2B,EAAiD,MAAM,oBAAoB,CAAC;AAChH,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAChG,OAAO,EAAE,YAAY,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AAElF,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAChC,MAAM,WAAW,GAAG,iBAAiB,CAAC;AACtC,MAAM,aAAa,GAAG,0BAA0B,CAAC;AACjD,MAAM,WAAW,GAAG,wBAAwB,CAAC;AAC7C,MAAM,gBAAgB,GAAG,GAAG,GAAG,IAAI,CAAC;AACpC,MAAM,YAAY,GAAG,EAAE,CAAC;AACxB,MAAM,UAAU,GAAG,8BAA8B,CAAC;AAClD,MAAM,IAAI,GAAG,gBAAgB,CAAC;AAuF9B,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAC3C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,OAAO,aAAa,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,OAAO,MAAM,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,OAAO,MAAM,CAAC,aAAa,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,oCAAoC,CAAC,CAAC;IACnE,SAAS,CAAC,MAAM,EAAE,CAAC,eAAe,EAAE,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,qBAAqB,EAAE,WAAW,EAAE,eAAe,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,iBAAiB,CAAC,CAAC;IACrQ,IAAI,MAAM,CAAC,aAAa,KAAK,qBAAqB,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW;QAAE,MAAM,IAAI,kBAAkB,CAAC,qCAAqC,CAAC,CAAC;IACvJ,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,0BAA0B,CAAC,CAAC;IAC/D,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,cAAc,CAAC,CAAC;IAC/D,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,MAAM,IAAI,kBAAkB,CAAC,+BAA+B,CAAC,CAAC;IACtH,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,4BAA4B,CAAC,CAAC;IACrE,SAAS,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,gBAAgB,CAAC,CAAC;IAC5D,IAAI,OAAO,CAAC,WAAW,KAAK,WAAW;QAAE,MAAM,IAAI,kBAAkB,CAAC,qDAAqD,CAAC,CAAC;IAC7H,IAAI,MAAM,CAAC,QAAQ,KAAK,oBAAoB;QAAE,MAAM,IAAI,kBAAkB,CAAC,0BAA0B,CAAC,CAAC;IACvG,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,6BAA6B,CAAC,CAAC;IACxE,SAAS,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,iBAAiB,CAAC,CAAC;IACvD,IAAI,QAAQ,CAAC,IAAI,KAAK,iBAAiB;QAAE,MAAM,IAAI,kBAAkB,CAAC,kCAAkC,CAAC,CAAC;IAC1G,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,+BAA+B,CAAC,CAAC;IACvE,SAAS,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,kBAAkB,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IACnE,MAAM,WAAW,GAAG,MAAM,CAAC,mBAAmB,CAAC;IAC/C,MAAM,QAAQ,GAA0C,CAAC,8BAA8B,EAAE,mCAAmC,EAAE,uBAAuB,EAAE,6BAA6B,CAAC,CAAC;IACtL,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC,MAAM,GAAG,EAAE,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,oBAAoB,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,MAAM;QAAE,MAAM,IAAI,kBAAkB,CAAC,iFAAiF,CAAC,CAAC;IAC9V,IAAI,SAAS,KAAK,gCAAgC,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,uEAAuE,CAAC,CAAC;IACvQ,IAAI,MAAM,CAAC,SAAS,KAAK,MAAM,IAAI,MAAM,CAAC,SAAS,KAAK,OAAO,IAAI,MAAM,CAAC,SAAS,KAAK,gBAAgB,IAAI,MAAM,CAAC,SAAS,KAAK,wBAAwB,IAAI,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,KAAK,QAAQ;QAAE,MAAM,IAAI,kBAAkB,CAAC,+BAA+B,CAAC,CAAC;IAC3R,IAAI,MAAM,CAAC,aAAa,KAAK,MAAM,IAAI,MAAM,CAAC,aAAa,KAAK,eAAe;QAAE,MAAM,IAAI,kBAAkB,CAAC,kCAAkC,CAAC,CAAC;IAClJ,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,qCAAqC,CAAC,CAAC;IAC5E,SAAS,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,yBAAyB,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,uCAAuC,CAAC,CAAC;IAClF,SAAS,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,2BAA2B,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IAC5D,IAAI,QAAQ,CAAC,EAAE,KAAK,OAAO;QAAE,MAAM,IAAI,kBAAkB,CAAC,2DAA2D,CAAC,CAAC;IACvH,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,IAAI,EAAE,iBAAiB;QACvB,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC;QAClD,cAAc,EAAE,UAAU,CAAC,MAAM,CAAC,cAAc,EAAE,wBAAwB,CAAC;QAC3E,KAAK,EAAE,EAAE,EAAE,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,EAAE,iBAAiB,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC,UAAU,EAAE,oBAAoB,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE;QACxI,OAAO,EAAE,EAAE,EAAE,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,EAAE,mBAAmB,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE;QACtF,QAAQ,EAAE,oBAAoB;QAC9B,SAAS;QACT,QAAQ,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,OAAO,EAAE;QAClD,SAAS,EAAE,EAAE,OAAO,EAAE;QACtB,mBAAmB,EAAE,CAAC,GAAG,WAAW,CAAa;QACjD,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,MAAM,EAAE,EAAE,OAAO,EAAE,eAAe,CAAC,MAAM,CAAC,OAAO,EAAE,uBAAuB,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,oBAAoB,CAAC,EAAE;QAC5H,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC,EAAE;QAC/D,SAAS,EAAE,eAAe,CAAC,MAAM,CAAC,SAAS,EAAE,eAAe,CAAC;QAC7D,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,cAAc,CAAC;KAChD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,EAAE,oCAAoC,CAAC,CAAC;IACrE,SAAS,CAAC,QAAQ,EAAE,CAAC,eAAe,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE,iBAAiB,CAAC,CAAC;IAC9J,IAAI,QAAQ,CAAC,aAAa,KAAK,qBAAqB,IAAI,QAAQ,CAAC,IAAI,KAAK,aAAa;QAAE,MAAM,IAAI,kBAAkB,CAAC,qCAAqC,CAAC,CAAC;IAC7J,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,2BAA2B,CAAC,CAAC;IAC/E,MAAM,SAAS,GAAG,eAAe,CAAC,QAAQ,CAAC,SAAS,EAAE,wBAAwB,CAAC,CAAC;IAChF,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,kDAAkD,CAAC,CAAC;IACtI,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,wCAAwC,CAAC,CAAC;IACzF,SAAS,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,4BAA4B,CAAC,CAAC;IACpF,IAAI,UAAU,CAAC,IAAI,KAAK,4BAA4B,IAAI,OAAO,UAAU,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,wCAAwC,CAAC,CAAC;IAC9N,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,IAAI,EAAE,0BAA0B,EAAE,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,sBAAsB,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,CAAC,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,4BAA4B,EAAE,KAAK,EAAE,UAAU,CAAC,UAAU,CAAC,KAAK,EAAE,mCAAmC,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC;AACvf,CAAC;AAED,MAAM,UAAU,4BAA4B;IAC1C,OAAO;QACL,QAAQ,EAAE,oBAAoB;QAC9B,QAAQ,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,gCAAgC;QACvE,KAAK,CAAC,IAAI,CAAC,MAAM;YACf,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,KAAK,MAAM,CAAC,SAAS,CAAC,OAAO;gBAAE,MAAM,IAAI,kBAAkB,CAAC,gEAAgE,CAAC,CAAC;QACtJ,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,MAAM;YACnB,MAAM,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC/C,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ;YAC5B,MAAM,OAAO,GAAG,MAAM,8BAA8B,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;YAClH,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,aAAa,OAAO,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,kBAAkB,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;QACnN,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,MAAM;YACjB,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC3D,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC,CAAC;YACjG,OAAO,OAAO,KAAK,SAAS;gBAC1B,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE;gBACtB,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,iBAAiB,EAAE,aAAa,OAAO,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,kBAAkB,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;QAC3M,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,kBAAkB;IACZ,GAAG,CAAa;IAChB,aAAa,CAA+B;IAC5C,OAAO,CAAyB;IAChC,gBAAgB,CAAwB;IACxC,gBAAgB,CAAyB;IAE1D,YAAY,UAAgC,EAAE;QAC5C,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,aAAa,CAAC;QAC5D,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,4BAA4B,EAAE,CAAC;QACjE,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,2BAA2B,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACnG,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,oCAAoC,EAAE,CAAC;IAC7F,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,WAAoB,EAAE,aAAsB,EAAE,MAAyB;QAClF,MAAM,MAAM,GAAG,sBAAsB,CAAC,WAAW,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,sBAAsB,CAAC,aAAa,CAAC,CAAC;QACvD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC/F,gCAAgC,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;QACzC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACjD,OAAO,YAAY,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;YACnC,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACrD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtB,IAAI,QAAQ,CAAC,UAAU,KAAK,YAAY,IAAI,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,kBAAkB,CAAC,QAAQ,CAAC;oBAAE,OAAO,QAAQ,CAAC;gBACpI,MAAM,IAAI,kBAAkB,CAAC,2EAA2E,CAAC,CAAC;YAC5G,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;gBAAE,MAAM,IAAI,kBAAkB,CAAC,qBAAqB,CAAC,CAAC;YAC7G,cAAc,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC1C,MAAM,MAAM,GAAiB,EAAE,aAAa,EAAE,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;YACtJ,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;YAClE,MAAM,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACtC,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,QAAgB;QAC5B,OAAO,gBAAgB,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,EAAE,IAAI,CAA0B,CAAC;IAChH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,WAAoB,EAAE,QAAiC,EAAE,MAAyB;QAC9F,MAAM,SAAS,GAAG,sBAAsB,CAAC,WAAW,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACpD,OAAO,YAAY,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;YACnC,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAClD,IAAI,MAAM,KAAK,IAAI;gBAAE,MAAM,IAAI,kBAAkB,CAAC,2BAA2B,CAAC,CAAC;YAC/E,MAAM,oBAAoB,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;YACxH,gCAAgC,CAAC,MAAM,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;YACxE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;YACzC,IAAI,UAAU,CAAC,SAAS,CAAC,KAAK,MAAM,CAAC,UAAU,IAAI,0BAA0B,CAAC,SAAS,CAAC,KAAK,0BAA0B,CAAC,MAAM,CAAC,QAAQ,CAAC;gBAAE,MAAM,IAAI,kBAAkB,CAAC,+DAA+D,CAAC,CAAC;YACxO,cAAc,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;YACjE,YAAY,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACtC,IAAI,QAAQ,CAAC,OAAO,KAAK,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,QAAQ,CAAC,UAAU,KAAK,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU;gBAAE,MAAM,IAAI,kBAAkB,CAAC,wDAAwD,CAAC,CAAC;YACtM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAAE,MAAM,IAAI,kBAAkB,CAAC,wDAAwD,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;YACzK,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YAChE,IAAI,QAAQ,KAAK,SAAS;gBAAE,OAAO,QAAQ,CAAC;YAC5C,MAAM,SAAS,GAAG,iBAAiB,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;YAClE,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAClE,IAAI,CAAC,cAAc,CAAC,SAAS,IAAI,cAAc,CAAC,iBAAiB,KAAK,SAAS,IAAI,cAAc,CAAC,MAAM,KAAK,SAAS;oBAAE,MAAM,IAAI,kBAAkB,CAAC,kGAAkG,CAAC,CAAC;gBACzP,MAAM,eAAe,GAAG,aAAa,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,CAAC,iBAAiB,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;gBAC5H,aAAa,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;gBACvC,MAAM,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBACtC,OAAO,eAAe,CAAC;YACzB,CAAC;YACD,MAAM,SAAS,GAAG,iBAAiB,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;YAClE,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAClE,IAAI,CAAC,cAAc,CAAC,SAAS,IAAI,cAAc,CAAC,iBAAiB,KAAK,SAAS,IAAI,cAAc,CAAC,MAAM,KAAK,SAAS;oBAAE,MAAM,IAAI,kBAAkB,CAAC,sFAAsF,CAAC,CAAC;gBAC7O,aAAa,CAAC,MAAM,EAAE,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,CAAC,iBAAiB,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC5H,MAAM,eAAe,GAAG,aAAa,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,CAAC,iBAAiB,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;gBAC5H,aAAa,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;gBACvC,MAAM,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBACtC,OAAO,eAAe,CAAC;YACzB,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;gBAAE,MAAM,IAAI,kBAAkB,CAAC,qBAAqB,CAAC,CAAC;YACtH,cAAc,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC1D,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACzC,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC7C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;YACnG,IAAI,MAAM,CAAC,MAAM;gBAAE,MAAM,IAAI,kBAAkB,CAAC,wEAAwE,CAAC,CAAC;YAC1H,aAAa,CAAC,MAAM,EAAE,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;YACnE,MAAM,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACtC,IAAI,SAAiE,CAAC;YACtE,IAAI,CAAC;gBACH,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YACrF,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,2CAA2C,EAAE,CAAC,CAAC;gBAC7G,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC9I,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAC9B,MAAM,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBACtC,MAAM,IAAI,kBAAkB,CAAC,4DAA4D,CAAC,CAAC;YAC7F,CAAC;YACD,IAAI,SAAS,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBACpC,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC,CAAC;gBAC1G,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC9I,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAC9B,MAAM,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBACtC,MAAM,IAAI,kBAAkB,CAAC,uEAAuE,CAAC,CAAC;YACxG,CAAC;YACD,aAAa,CAAC,MAAM,EAAE,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,CAAC,iBAAiB,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;YACnI,MAAM,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACtC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAChE,IAAI,CAAC,YAAY,CAAC,SAAS,IAAI,YAAY,CAAC,iBAAiB,KAAK,SAAS,IAAI,YAAY,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACjH,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,sBAAsB,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,iDAAiD,EAAE,CAAC,CAAC;gBACjJ,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,CAAC,iBAAiB,EAAE,SAAS,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC3K,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAC9B,MAAM,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBACtC,MAAM,IAAI,kBAAkB,CAAC,+FAA+F,CAAC,CAAC;YAChI,CAAC;YACD,MAAM,eAAe,GAAG,aAAa,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,YAAY,CAAC,iBAAiB,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;YACzI,aAAa,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;YACvC,MAAM,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACtC,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;YACvD,OAAO,eAAe,CAAC;QACzB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,QAAgB;QAC/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,aAAa,KAAK,eAAe;YAAE,MAAM,IAAI,kBAAkB,CAAC,sEAAsE,CAAC,CAAC;QACrM,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,IAAI,kBAAkB,CAAC,wGAAwG,CAAC,CAAC;IACzI,CAAC;CACF;AAED,SAAS,YAAY,CAAC,MAAsB,EAAE,YAAoB;IAChE,OAAO;QACL,cAAc,EAAE,gBAAgB;QAChC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE;QAC5B,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW;QACvC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE;QACxB,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU;QACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,UAAU,EAAE,YAAY;QACxB,KAAK,EAAE,EAAE,mBAAmB,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE;KACpG,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,UAAgC,EAAE;IACzE,OAAO,IAAI,kBAAkB,CAAC,OAAO,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,oCAAoC;IAClD,OAAO,EAAE,KAAK,CAAC,MAAM,KAAqB,MAAM,IAAI,kBAAkB,CAAC,qDAAqD,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACrI,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,OAAmE;IACnH,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,gCAAgC,CAAC,CAAC;IAC1E,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,YAAY,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACvH,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,IAAI,UAAU,CAAC,iBAAiB,KAAK,SAAS;QAAE,MAAM,IAAI,kBAAkB,CAAC,6DAA6D,CAAC,CAAC;IAC7K,OAAO;QACL,KAAK,CAAC,KAA6B;YACjC,MAAM,QAAQ,GAAG,8BAA8B,CAAC,KAAK,CAAC,CAAC;YACvD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAC7G,OAAO,EAAE,GAAG,QAAQ,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,4BAA4B,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC;QAC/F,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mCAAmC,CAAC,OAA+E;IACjI,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE;QAC5E,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,EAAE,qCAAqC,CAAC,CAAC;QAC1E,MAAM,SAAS,GAAG,GAAG,YAAY,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QACjG,IAAI,SAAS,CAAC,iBAAiB,KAAK,SAAS;YAAE,MAAM,IAAI,kBAAkB,CAAC,mDAAmD,CAAC,CAAC;QACjI,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAU,CAAC;IACxC,CAAC,CAAC,CAAC,CAAC;IACJ,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,MAAsB,EAAE,QAAiB;YACpD,MAAM,MAAM,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;YAChD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACpD,MAAM,KAAK,GAAG,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;YAC5L,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,UAAU,KAAK,UAAU,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,kBAAkB,CAAC,qDAAqD,CAAC,CAAC;YAC5I,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;QACpC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gCAAgC;IAC9C,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,iCAAiC,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,UAAU,EAAE,CAAC,CAAC;IAC7F,OAAO;QACL,QAAQ,EAAE,mCAAmC,CAAC,EAAE,WAAW,EAAE,EAAE,mBAAmB,EAAE,SAAS,EAAE,EAAE,CAAC;QAClG,MAAM;QACN,KAAK,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAmB;KAC9D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC,OAAO,EAAE,GAAG,UAAU,CAAC,QAAQ,EAAE,WAAW,CAAC,cAAc,CAAC,CAAC;AAC1F,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,QAAiB;IAC7D,MAAM,sBAAsB,CAAC,YAAY,EAAE,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACtH,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,IAAI,QAAQ;YAAE,MAAM,IAAI,kBAAkB,CAAC,uBAAuB,CAAC,CAAC;QACpE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;QAAE,MAAM,IAAI,kBAAkB,CAAC,mDAAmD,CAAC,CAAC;IAC/H,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5C,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,gBAAgB;QAAE,MAAM,IAAI,kBAAkB,CAAC,yBAAyB,gBAAgB,SAAS,CAAC,CAAC;IAC3I,IAAI,CAAC;QACH,OAAO,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,kBAAkB;YAAE,MAAM,KAAK,CAAC;QACrD,MAAM,IAAI,kBAAkB,CAAC,kCAAkC,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,IAAY,EAAE,MAAoB;IACjE,MAAM,sBAAsB,CAAC,YAAY,EAAE,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,eAAe,CAAC,IAAI,EAAE,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,kCAAkC,CAAC,CAAC;IACjE,SAAS,CAAC,MAAM,EAAE,CAAC,eAAe,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,eAAe,CAAC,CAAC;IAChH,IAAI,MAAM,CAAC,aAAa,KAAK,qBAAqB,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW;QAAE,MAAM,IAAI,kBAAkB,CAAC,mCAAmC,CAAC,CAAC;IACrJ,MAAM,QAAQ,GAAG,sBAAsB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAC;IAC7D,IAAI,MAAM,KAAK,UAAU,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,iDAAiD,CAAC,CAAC;IACrH,MAAM,QAAQ,GAAG,sBAAsB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACzD,cAAc,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,KAAK,CAAC,CAAC;IACrE,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC;IACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,CAAC,MAAM,GAAG,YAAY;QAAE,MAAM,IAAI,kBAAkB,CAAC,qCAAqC,CAAC,CAAC;IACpK,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,GAAG,CAAC,CAAE,CAAC,WAAqB,CAAC,CAAC,CAAC;IACpM,IAAI,QAAQ,CAAC,CAAC,CAAE,CAAC,MAAM,KAAK,WAAW;QAAE,MAAM,IAAI,kBAAkB,CAAC,oDAAoD,CAAC,CAAC;IAC5H,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAChH,CAAC;AAED,SAAS,aAAa,CAAC,MAAoB,EAAE,MAA2B,EAAE,SAAiB,EAAE,iBAA0B,EAAE,MAAyC,EAAE,OAA2C;IAC7M,MAAM,mBAAmB,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,WAAW,CAAC;IACvI,MAAM,IAAI,GAAG,EAAE,SAAS,EAAE,UAAU,CAAC,WAAW,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,YAAY,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,CAAC,SAAS,EAAE,0BAA0B,CAAC,EAAE,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,UAAU,CAAC,iBAAiB,EAAE,qBAAqB,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACzd,OAAO,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;AAC/D,CAAC;AAED,SAAS,aAAa,CAAC,MAAoB,EAAE,OAA+B;IAC1E,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,YAAY;QAAE,MAAM,IAAI,kBAAkB,CAAC,2BAA2B,YAAY,eAAe,CAAC,CAAC;IACjI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,QAAgB,EAAE,YAAoB,EAAE,mBAA2B;IAC1G,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,4BAA4B,CAAC,CAAC;IAC5D,SAAS,CAAC,OAAO,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,EAAE,QAAQ,EAAE,SAAS,EAAE,qBAAqB,EAAE,aAAa,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACrL,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,UAAU,KAAK,YAAY,IAAI,OAAO,CAAC,mBAAmB,KAAK,mBAAmB,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,WAAW,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,oCAAoC,CAAC,CAAC;IAC5W,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,iBAAiB,EAAE,qBAAqB,CAAC,CAAC;IAC7I,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1F,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9F,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,WAAW,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,IAAI,CAAC,iBAAiB,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,4DAA4D,CAAC,CAAC;IAC/N,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,KAAK,SAAS;QAAE,MAAM,IAAI,kBAAkB,CAAC,mDAAmD,CAAC,CAAC;IAC5I,MAAM,MAAM,GAAG,OAAO,CAAC,MAA6B,CAAC;IACrD,MAAM,IAAI,GAAG,EAAE,SAAS,EAAE,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,YAAY,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,CAAC,OAAO,CAAC,SAAS,EAAE,0BAA0B,CAAC,EAAE,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAClX,IAAI,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,qBAAqB,CAAC,KAAK,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,iCAAiC,CAAC,CAAC;IACtJ,OAAO,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,WAAqB,EAAE,CAAC;AACjE,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,mCAAmC,CAAC,CAAC;IAClE,SAAS,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,gBAAgB,EAAE,oBAAoB,CAAC,EAAE,uBAAuB,CAAC,CAAC;IAChG,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,yBAAyB,CAAC,EAAE,cAAc,EAAE,UAAU,CAAC,MAAM,CAAC,cAAc,EAAE,gCAAgC,CAAC,EAAE,kBAAkB,EAAE,UAAU,CAAC,MAAM,CAAC,kBAAkB,EAAE,qCAAqC,CAAC,EAAE,CAAC;AACnQ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,oCAAoC,CAAC,CAAC;IACpE,SAAS,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,wBAAwB,CAAC,CAAC;IACpE,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,iBAAiB,IAAI,OAAO,CAAC,IAAI,KAAK,iBAAiB,IAAI,OAAO,CAAC,IAAI,KAAK,qBAAqB,CAAC,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK;QAAE,MAAM,IAAI,kBAAkB,CAAC,oCAAoC,CAAC,CAAC;IAC5N,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,cAAc,CAAC,MAAsB,EAAE,QAAwB,EAAE,GAAW,EAAE,aAAa,GAAG,IAAI;IACzG,IAAI,QAAQ,CAAC,UAAU,KAAK,UAAU,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,kEAAkE,CAAC,CAAC;IACjJ,IAAI,QAAQ,CAAC,UAAU,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,QAAQ,CAAC,UAAU,KAAK,MAAM,CAAC,KAAK,CAAC,UAAU;QAAE,MAAM,IAAI,kBAAkB,CAAC,0DAA0D,CAAC,CAAC;IACzL,IAAI,aAAa,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,6CAA6C,CAAC,CAAC;IACpJ,IAAI,aAAa,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,8BAA8B,CAAC,CAAC;AACvI,CAAC;AAED,SAAS,YAAY,CAAC,MAAsB,EAAE,MAAyB;IACrE,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,kBAAkB,CAAC,yCAAyC,CAAC,CAAC;IAC7F,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI;QAAE,MAAM,IAAI,kBAAkB,CAAC,8DAA8D,CAAC,CAAC;AACnL,CAAC;AAED,SAAS,kBAAkB,CAAC,YAAoB;IAC9C,OAAO,MAAM,CAAC,8BAA8B,YAAY,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,iBAAiB,CAAC,QAA2C,EAAE,MAA2B;IACjG,KAAK,IAAI,KAAK,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC7D,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAE,CAAC;QACjC,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,OAAO,CAAC;IAChD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,OAAe;IAC7C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC/G,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,SAAS,CAAC,KAA8B,EAAE,IAAc,EAAE,KAAa;IAC9E,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,kBAAkB,CAAC,GAAG,KAAK,gCAAgC,GAAG,EAAE,CAAC,CAAC;AAC7I,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,KAAa;IAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,oBAAoB,CAAC,KAAK,CAAC,KAAK,KAAK;QAAE,MAAM,IAAI,kBAAkB,CAAC,GAAG,KAAK,oCAAoC,CAAC,CAAC;IAC9K,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,IAAI,CAAC,KAAc,EAAE,KAAa;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,GAAG,KAAK,gCAAgC,CAAC,CAAC;IAC3H,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,KAAa;IACpD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,GAAG,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,GAAG,KAAK,8BAA8B,CAAC,CAAC;IAC7I,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,KAAa;IAC9C,OAAO,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,KAAa;IACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,+CAA+C,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,GAAG,KAAK,gCAAgC,CAAC,CAAC;IAC7M,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,KAAa;IACpD,OAAO,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC5G,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,kBAAkB,CAAC,yCAAyC,CAAC,CAAC;QACrG,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3E,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC1H,CAAC;IACD,MAAM,IAAI,kBAAkB,CAAC,4CAA4C,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,gCAAgC,CAAC,QAAwB,EAAE,YAAwC;IAC1G,IAAI,QAAQ,CAAC,UAAU,KAAK,gBAAgB,IAAI,YAAY,CAAC,sBAAsB,KAAK,QAAQ,CAAC,UAAU;QAAE,MAAM,IAAI,kBAAkB,CAAC,wDAAwD,CAAC,CAAC;AACtM,CAAC;AAED,SAAS,8BAA8B,CAAC,KAAc;IACpD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,EAAE,oCAAoC,CAAC,CAAC;IACrE,SAAS,CAAC,QAAQ,EAAE,CAAC,eAAe,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,0BAA0B,CAAC,CAAC;IACzJ,OAAO,sBAAsB,CAAC,sBAAsB,CAAC,EAAE,GAAG,QAAQ,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,4BAA4B,EAAE,KAAK,EAAE,gBAAgB,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AACjL,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAwB;IACtD,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,QAAQ,EAAE,GAAG,QAAQ,CAAC;IAC1D,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,IAAY;IAC/C,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;AAC1E,CAAC"}

package/dist/actions/index.d.ts

@@ -0,0 +1,2 @@
+export { ActionGatewayError, LocalActionGateway, actionApprovalHash, actionHash, canonicalizeActionEnvelope, createLocalActionGateway, createDisabledActionApprovalVerifier, createEd25519ActionApprovalSigner, createEd25519ActionApprovalVerifier, createSyntheticActionAdapter, createTestActionApprovalVerifier, getActionPath, validateActionApproval, validateActionEnvelope, validateStoredAction } from "./gateway.js";
+export type { ActionApproval, ActionApprovalVerifier, ActionApprovalSigner, ActionApprovalVerification, ActionApprovalVerificationContext, ActionEnvelope, ActionExecutionAdapter, ActionExecutionIdentity, ActionExecutionReceipt, ActionGatewayOptions, ActionPolicyCheck, ActionReceiptStatus, ActionReversibility, ActionRiskClass, StoredAction, UnsignedActionApproval } from "./gateway.js";

package/dist/actions/index.js

@@ -0,0 +1,2 @@
+export { ActionGatewayError, LocalActionGateway, actionApprovalHash, actionHash, canonicalizeActionEnvelope, createLocalActionGateway, createDisabledActionApprovalVerifier, createEd25519ActionApprovalSigner, createEd25519ActionApprovalVerifier, createSyntheticActionAdapter, createTestActionApprovalVerifier, getActionPath, validateActionApproval, validateActionEnvelope, validateStoredAction } from "./gateway.js";
+//# sourceMappingURL=index.js.map

package/dist/actions/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/actions/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,UAAU,EACV,0BAA0B,EAC1B,wBAAwB,EACxB,oCAAoC,EACpC,iCAAiC,EACjC,mCAAmC,EACnC,4BAA4B,EAC5B,gCAAgC,EAChC,aAAa,EACb,sBAAsB,EACtB,sBAAsB,EACtB,oBAAoB,EACrB,MAAM,cAAc,CAAC"}

package/dist/ai/aiClient.js

@@ -1,10 +1,11 @@
 export async function askLLM(messages, config) {
-    if (!config.apiKey) {
-        throw new Error("No LLM API key configured");
+    if (config.offline || config.allowExternalLlm !== true || !config.apiKey) {
+        throw new Error("External LLM access requires explicit opt-in and GHOSTAPI_LLM_API_KEY");
     }
     // A basic OpenAI-compatible implementation. Since GPT-4o-mini / GPT-4o are standard defaults, 
     // OpenAI chat completions endpoint is assumed for MVP.
     const response = await fetch("https://api.openai.com/v1/chat/completions", {
+        signal: AbortSignal.timeout(15_000),
         method: "POST",
         headers: {
             "Content-Type": "application/json",
@@ -17,8 +18,7 @@ export async function askLLM(messages, config) {
         })
     });
     if (!response.ok) {
-        const text = await response.text();
-        throw new Error(`LLM Error: ${response.status} ${text}`);
+        throw new Error(`LLM request failed with status ${response.status}`);
     }
     const json = await response.json();
     const content = json.choices?.[0]?.message?.content;

package/dist/ai/aiClient.js.map

@@ -1 +1 @@
-{"version":3,"file":"aiClient.js","sourceRoot":"","sources":["../../src/ai/aiClient.ts"],"names":[],"mappings":"AAWA,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,QAAqB,EAAE,MAAoB;IACtE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IAED,+FAA+F;IAC/F,uDAAuD;IACvD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,4CAA4C,EAAE;QACzE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,MAAM,CAAC,MAAM,EAAE;SACzC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,QAAQ;YACR,WAAW,EAAE,GAAG;SACjB,CAAC;KACH,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,cAAc,QAAQ,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAA4B,CAAC;IAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC;IACpD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"aiClient.js","sourceRoot":"","sources":["../../src/ai/aiClient.ts"],"names":[],"mappings":"AAWA,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,QAAqB,EAAE,MAAoB;IACtE,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,gBAAgB,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAC3F,CAAC;IAED,+FAA+F;IAC/F,uDAAuD;IACvD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,4CAA4C,EAAE;QACzE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;QACnC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,MAAM,CAAC,MAAM,EAAE;SACzC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,QAAQ;YACR,WAAW,EAAE,GAAG;SACjB,CAAC;KACH,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,kCAAkC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAA4B,CAAC;IAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC;IACpD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}