aimeat 3.1.0 → 3.3.0

package/dist/src/routes/capabilities.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"capabilities.d.ts","sourceRoot":"","sources":["../../../src/routes/capabilities.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAKjC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAoB,MAAM,yBAAyB,CAAC;AAKzE,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CA4KjF"}
+{"version":3,"file":"capabilities.d.ts","sourceRoot":"","sources":["../../../src/routes/capabilities.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAKjC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAsC,MAAM,yBAAyB,CAAC;AAsI3F,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAqNjF"}

package/dist/src/routes/capabilities.js

@@ -3,6 +3,7 @@
  * @description Capability Layer REST API: discovery, CRUD, invoke proxy, telemetry, vouch, test.
  * @structure
  *   - discovery: GET /v1/capabilities and /:id, with the private-row rules
+ *   - SERVER_OWNED_CAPABILITY_FIELDS, and the webhook gate a PUT has to pass
  *   - CRUD: POST / PUT / DELETE, each rendering what services/capability-record.ts decided
  *   - invoke, telemetry, vouch, test
  * @usage Mounted by mountRoutes(); the shared write lives in services/capability-record.ts.
@@ -17,12 +18,153 @@
  *            call as well. This file keeps the envelope and nothing else. PUT now applies the
  *            moderation gate to a status change, which it never did — publishing a public
  *            capability on a moderated node no longer skips the review the tool door enforced.
+ *   v1.2.0 - 2026-08-14 - August 2026 audit NEW-2: PUT handed the whole request body to the shared
+ *            write, so an owner could award themselves the node operator's review by patching
+ *            `trust`, and could set their own invocation counters by patching `stats`. The body is
+ *            now filtered against SERVER_OWNED_CAPABILITY_FIELDS before it leaves this file.
+ *   v1.3.0 - 2026-08-14 - August 2026 audit: PUT applied no webhook policy at all, so a node running
+ *            capabilityWebhooks 'disabled' or 'allowlist_only' was defeated in two requests - create
+ *            without a webhook, then PUT one on. The gate now fires on a CHANGE of the webhook the
+ *            node would end up calling, with the same three refusal codes createCapability gives.
+ *   v1.4.0 - 2026-08-15 - The telemetry ping stops taking three things on the caller's word. It is
+ *            self-reported by design (a client-side call is one the node never saw, and a
+ *            third-party caller is the normal case), but any authenticated principal could ping ANY
+ *            id — including one that does not exist, which wrote stats for a row nobody owns — with
+ *            an unbounded duration that moves the published average by any amount, and with free
+ *            `lastError` text rendered on somebody else's public capability record. The capability
+ *            must now exist, the duration is clamped, and the error TEXT is taken from the owner
+ *            only; a third party still counts their failure. E2E test-quality audit finding A12.
  */
 import { Router } from 'express';
 import { createCapability, updateCapability, deleteCapability, vouchCapability, recordCapabilityInvocation, } from '../services/capability-record.js';
 import { success, error } from '../middleware/envelope.js';
 import { requireAuth, requireRole } from '../auth/middleware.js';
 import { resolveIdentity } from '../utils/gaii.js';
+/**
+ * What a capability's owner may NOT put in a PUT body. Each of these is written by the node about
+ * the record, so a client that could patch one would be making the node say something it never
+ * decided. `PUT /v1/capabilities/:id` passes a body straight through to the shared write, which
+ * merges what it is given, and only `id`, `ownerGhii` and `createdAt` were ever taken back out.
+ *
+ *   trust            the operator's review verdict and the vouch count. This is the one that was
+ *                    exploitable: an owner PUT `{"trust":{"operatorReviewed":true,"codeAudited":true}}`
+ *                    on their own capability and the public directory then showed it as reviewed and
+ *                    audited by the node operator. It is written by storage.setCapabilityTrust and
+ *                    the vouch counters, nowhere else.
+ *   stats            invocation counters, written by storage.incrementCapabilityStats after a call
+ *                    that really happened. A patch could claim any usage history it liked.
+ *   operatorOverride the operator's disable switch and notes. It has its own operator-gated door,
+ *                    PUT /v1/admin/capabilities/:id/override, and invoke refuses a capability whose
+ *                    override says disabled — so a self-patch would be an un-disable.
+ *   rejectionReason  the reviewer's words about why this was refused. Same reason as trust: the
+ *                    subject of a review does not get to write the review.
+ *   schemaHash       computed at create from the input and output schemas. The aggregator compares
+ *                    it to decide a source has drifted and needs refreshing.
+ *   scope            always 'local' on this node. Federation, when it arrives, decides this.
+ *   id, ownerGhii    identity. Patching either moves the record to another address or another owner.
+ *   createdAt        the record's birth date.
+ *   updatedAt        stamped by the shared write on every patch.
+ *
+ * The last four are handled again in services/capability-record.ts, which deletes three of them and
+ * stamps updatedAt itself. They are named here anyway, because this list is the door's contract with
+ * its callers and should be readable without opening the service.
+ *
+ * A forbidden field is dropped rather than refused: the response carries the stored record, so a
+ * client sees that its value did not take, and a UI that PUTs a whole record back keeps working.
+ *
+ * The MCP door needs none of this. `aimeat_capabilities_update` declares a fixed parameter list and
+ * copies the eight fields it accepts into a fresh object, so nothing else can arrive. That is the
+ * difference between a tool that publishes its parameters and a route that takes a body.
+ */
+const SERVER_OWNED_CAPABILITY_FIELDS = [
+    'trust', 'stats', 'operatorOverride', 'rejectionReason', 'schemaHash', 'scope',
+    'id', 'ownerGhii', 'createdAt', 'updatedAt',
+];
+/** A self-reported client-side call cannot legitimately claim to have taken longer than this, and
+ *  an unbounded number moves the published average by any amount the reporter chooses. One hour. */
+const MAX_TELEMETRY_DURATION_MS = 3_600_000;
+/**
+ * The node's webhook policy, answered with the SAME three codes createCapability answers with:
+ * WEBHOOKS_DISABLED, INVALID_WEBHOOK_URL and WEBHOOK_DOMAIN_NOT_ALLOWED. A caller that gets a
+ * different code from PUT than from POST for the same URL learns nothing from either.
+ *
+ * WHY THIS RULE IS WRITTEN OUT HERE, in a route, when the create-time copy lives in
+ * services/capability-record.ts. The honest home is inside updateCapability(), next to the copy it
+ * mirrors, and that is where it should move the day anything else needs it. It is here because the
+ * gate this repairs is a gap in ONE door: `aimeat_capabilities_update` declares a fixed parameter
+ * list with no webhookUrl in it, so no webhook can reach the shared write from the tool surface at
+ * all, and the HTTP body is the only way in. check:copied-logic exists to catch a decision written
+ * out twice, so this comment is the answer to it: two copies, known, and the moment webhookUrl
+ * becomes settable on the MCP door this check belongs in the shared write instead of here.
+ */
+function webhookPolicyRefusal(config, url) {
+    if (config.capabilityWebhooks === 'disabled') {
+        return { status: 403, code: 'WEBHOOKS_DISABLED', message: 'Webhook capabilities are disabled on this node' };
+    }
+    if (config.capabilityWebhooks !== 'allowlist_only')
+        return null;
+    let domain;
+    try {
+        domain = new URL(url).hostname;
+    }
+    catch {
+        return { status: 400, code: 'INVALID_WEBHOOK_URL', message: 'Invalid webhook URL' };
+    }
+    if (config.capabilityWebhookDomainAllowlist.includes(domain))
+        return null;
+    return { status: 403, code: 'WEBHOOK_DOMAIN_NOT_ALLOWED', message: `Domain '${domain}' is not on the webhook allowlist` };
+}
+/** No webhook is the empty string, whatever shape "no webhook" arrived in. */
+function webhookString(value) {
+    return value === null || value === undefined ? '' : String(value);
+}
+/**
+ * The source type the record will carry once this patch is applied. A `source` object with no
+ * `type` normalises to 'manual' at create (normaliseSource in services/capability-record.ts), so it
+ * is read the same way here. Reading it any other way is the NEW-1 defect again: the gate and the
+ * stored record disagreeing about what the request was.
+ *
+ * The two storage providers do not in fact agree on what a partial `source` does to the stored row
+ * (sqlite merges it over the existing one, postgres-kysely writes all three columns from what it was
+ * given), so there is no single answer to read. 'manual' is the reading that refuses.
+ */
+function patchedSourceType(cap, patch) {
+    const patched = patch.source;
+    if (!patched || typeof patched !== 'object')
+        return cap.source.type;
+    const type = patched.type;
+    return typeof type === 'string' ? type : 'manual';
+}
+/**
+ * The webhook this patch is asking the node to start calling, or null if it is asking for nothing
+ * new. Null means the PUT goes through untouched.
+ *
+ * THE GATE FIRES ON A CHANGE, NOT ON PRESENCE. A UI PUTs the whole record back, so an unchanged
+ * webhookUrl arrives in the body of every unrelated patch: gating on presence would refuse a rename
+ * on a node running 'disabled', which is a capability the owner already has and the policy never
+ * meant to take away. What the policy is about is the node being made to call somewhere it has not
+ * agreed to call, so the comparison is against what is stored.
+ *
+ * The pair compared is (url, is it manual), not the url alone, because invoke only calls webhookUrl
+ * for a manual source. Both halves matter:
+ *   - a url appearing where there was none, or one domain becoming another  -> gate
+ *   - the same url on a record that was already a manual webhook            -> through
+ *   - clearing it                                                          -> through, always
+ *   - a source flipping to 'manual' while a webhook sits on the record      -> gate
+ * That last one is not hypothetical tidiness. Without it the two-step way in survives: PUT the
+ * webhook onto a non-manual source (ungated, because create does not gate those either and invoke
+ * ignores them), then PUT the source back to 'manual' with no webhookUrl in the body at all, and
+ * the record is the manual webhook capability the node refuses to be handed in one request.
+ */
+function proposedWebhook(cap, patch) {
+    const stored = webhookString(cap.webhookUrl);
+    const next = 'webhookUrl' in patch ? webhookString(patch.webhookUrl) : stored;
+    if (!next || patchedSourceType(cap, patch) !== 'manual')
+        return null;
+    if (next === stored && cap.source.type === 'manual')
+        return null;
+    return next;
+}
 export function capabilitiesRouter(config, storage) {
     const router = Router();
     const resolve = (req) => resolveIdentity(req.auth, config.nodeId);
@@ -98,7 +240,29 @@ export function capabilitiesRouter(config, storage) {
         res.status(201).json(success(config.nodeId, created.value));
     });
     router.put('/v1/capabilities/:id', requireAuth(), requireRole('owner'), async (req, res) => {
-        const updated = await updateCapability({ storage, config }, caller(req), req.params.id, req.body);
+        // The body is the caller's, so the fields the node owns come out before it goes any further.
+        const patch = { ...(req.body ?? {}) };
+        for (const field of SERVER_OWNED_CAPABILITY_FIELDS)
+            delete patch[field];
+        // The webhook policy, which this door applied nowhere. Only create was gated, so a node running
+        // capabilityWebhooks 'disabled' or 'allowlist_only' was two requests from being defeated: create
+        // a capability with no webhook, then PUT one on. The operator's setting decided nothing.
+        //
+        // The read costs an extra getCapability, so it happens only when the patch touches one of the two
+        // fields the answer depends on. NOT_FOUND and FORBIDDEN stay updateCapability's to give, and this
+        // gate stands aside for both: answering them here would make the refusal an oracle, telling a
+        // stranger whether some other owner's capability already carries the URL they just sent.
+        if ('webhookUrl' in patch || 'source' in patch) {
+            const who = caller(req);
+            const cap = await storage.getCapability(req.params.id);
+            if (cap && (cap.ownerGhii === who.gaii || who.isOperator)) {
+                const proposed = proposedWebhook(cap, patch);
+                const refusal = proposed ? webhookPolicyRefusal(config, proposed) : null;
+                if (refusal)
+                    return res.status(refusal.status).json(error(config.nodeId, refusal.code, refusal.message));
+            }
+        }
+        const updated = await updateCapability({ storage, config }, caller(req), req.params.id, patch);
         if (!updated.ok)
             return res.status(updated.status).json(error(config.nodeId, updated.code, updated.message));
         res.json(success(config.nodeId, updated.value));
@@ -139,14 +303,33 @@ export function capabilitiesRouter(config, storage) {
         }
     });
     // ── Telemetry (client-side stats ping) ──
+    // A client-side invocation is one the node never saw, so this counter is self-reported by
+    // whoever called it — that is the feature, and third-party callers are the normal case. Three
+    // things are still not the caller's to decide, and all three were: that the capability EXISTS
+    // (a ping to any id wrote stats for a row nobody owns), how long it took (an unbounded number
+    // moves the published average by any amount), and `lastError` — free text that is rendered on
+    // somebody else's public capability record, which is a stranger writing on the owner's page.
+    // The error TEXT is accepted from the owner only; a third party still counts their failure.
     router.post('/v1/capabilities/:id/telemetry', requireAuth(), async (req, res) => {
-        const { duration_ms, status: telStatus } = req.body;
         const capId = req.params.id;
+        const cap = await storage.getCapability(capId);
+        if (!cap) {
+            res.status(404).json(error(config.nodeId, 'NOT_FOUND', 'Capability not found'));
+            return;
+        }
+        const { duration_ms, status: telStatus } = req.body ?? {};
+        const raw = typeof duration_ms === 'number' && Number.isFinite(duration_ms) ? duration_ms : 0;
+        const totalMs = Math.min(Math.max(raw, 0), MAX_TELEMETRY_DURATION_MS);
         if (telStatus === 'success') {
-            await storage.incrementCapabilityStats(capId, { success: 1, error: 0, totalMs: duration_ms || 0 });
+            await storage.incrementCapabilityStats(capId, { success: 1, error: 0, totalMs });
         }
         else {
-            await storage.incrementCapabilityStats(capId, { success: 0, error: 1, totalMs: duration_ms || 0, lastError: req.body.error });
+            const isOwner = cap.ownerGhii === resolve(req);
+            const reported = typeof req.body?.error === 'string' ? req.body.error.slice(0, 500) : undefined;
+            await storage.incrementCapabilityStats(capId, {
+                success: 0, error: 1, totalMs,
+                lastError: isOwner ? reported : 'Reported by a caller (details withheld)',
+            });
         }
         res.status(204).end();
     });

package/dist/src/routes/capabilities.js.map

@@ -1 +1 @@
-{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../../../src/routes/capabilities.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EACL,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,eAAe,EAAE,0BAA0B,GAClG,MAAM,kCAAkC,CAAC;AAI1C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnD,MAAM,UAAU,kBAAkB,CAAC,MAAoB,EAAE,OAAgB;IACvE,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,MAAM,OAAO,GAAG,CAAC,GAAY,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,IAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5E,4DAA4D;IAC5D,MAAM,MAAM,GAAG,CAAC,GAAY,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,IAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAE5G,0DAA0D;IAE1D,MAAM,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAChD,MAAM,OAAO,GAAqB,EAAE,CAAC;QACrC,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM;YAAE,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,MAAgB,CAAC;QAClE,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI;YAAE,OAAO,CAAC,IAAI,GAAI,GAAG,CAAC,KAAK,CAAC,IAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzE,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS;YAAE,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC;QACvF,IAAI,GAAG,CAAC,KAAK,CAAC,YAAY;YAAE,OAAO,CAAC,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,YAAsB,CAAC;QACpF,IAAI,GAAG,CAAC,KAAK,CAAC,WAAW;YAAE,OAAO,CAAC,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,WAAqB,CAAC;QAChF,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM;YAAE,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,MAAgB,CAAC;QAClE,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK;YAAE,OAAO,CAAC,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,KAAe,CAAC;QACnE,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAc,CAAC,IAAI,CAAC,CAAC;QACvD,OAAO,CAAC,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,QAAkB,CAAC,IAAI,EAAE,CAAC;QAE/D,4FAA4F;QAC5F,2FAA2F;QAC3F,mGAAmG;QACnG,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpC,OAAO,CAAC,UAAU,GAAG,QAAQ,CAAC;YAC9B,IAAI,CAAC,OAAO,CAAC,MAAM;gBAAE,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC;QACjD,CAAC;aAAM,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACxD,kGAAkG;YAClG,mGAAmG;YACnG,+FAA+F;YAC/F,OAAO,CAAC,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QACvC,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACvD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;YAC9B,GAAG,MAAM;YACT,MAAM,EAAE;gBACN,UAAU,EAAE,MAAM,CAAC,oBAAoB;gBACvC,UAAU,EAAE,MAAM,CAAC,oBAAoB;gBACvC,QAAQ,EAAE,MAAM,CAAC,kBAAkB;aACpC;SACF,CAAC,CAAC,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,sBAAsB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACpD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAY,CAAC,CAAC;QACjE,IAAI,CAAC,GAAG;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,sBAAsB,CAAC,CAAC,CAAC;QAEjG,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAClF,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,sBAAsB,CAAC,CAAC,CAAC;QACzF,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,+CAA+C;IAE/C,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACtF,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QACtB,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE;YACvE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU;YAChF,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM;YACxC,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACxD,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO;YACrF,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY;YAC7E,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY;YACxD,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa;YAC/E,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI;SACrD,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7G,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,sBAAsB,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACzF,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,EAAY,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5G,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7G,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,MAAM,CAAC,sBAAsB,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5F,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,EAAY,CAAC,CAAC;QAClG,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7G,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,wBAAwB;IAExB,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC3E,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAY,CAAC,CAAC;QACjE,IAAI,CAAC,GAAG;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,sBAAsB,CAAC,CAAC,CAAC;QAEjG,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,qGAAqG;QACrG,oGAAoG;QACpG,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,GAAG,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,IAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1G,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,sBAAsB,CAAC,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACrE,MAAM,IAAI,GAAI,GAAG,CAAC,KAAK,CAAC,IAAe,KAAK,KAAK,CAAC,CAAC,CAAC,KAAc,CAAC,CAAC,CAAC,QAAiB,CAAC;QACvF,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAEnC,IAAI,CAAC;YACH,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,kCAAkC,CAAC,CAAC;YAC9E,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;YAE1F,MAAM,0BAA0B,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YAEpH,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,GAA+D,CAAC;YAC1E,MAAM,UAAU,GAAG,CAAC,CAAC,UAAU,IAAI,GAAG,CAAC;YACvC,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,eAAe,CAAC;YACvC,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAEjE,MAAM,0BAA0B,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YAE9F,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QACnE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,2CAA2C;IAE3C,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC9E,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QACpD,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,EAAY,CAAC;QACtC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,OAAO,CAAC,wBAAwB,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,WAAW,IAAI,CAAC,EAAE,CAAC,CAAC;QACrG,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,CAAC,wBAAwB,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,WAAW,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAChI,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,iBAAiB;IAEjB,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAChG,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,EAAY,CAAC,CAAC;QACjG,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7G,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,MAAM,CAAC,4BAA4B,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAClG,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAY,CAAC,CAAC;QACjE,IAAI,CAAC,GAAG;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,sBAAsB,CAAC,CAAC,CAAC;QACjG,MAAM,OAAO,CAAC,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAY,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAY,CAAC,CAAC;QACrE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,UAAU,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,8DAA8D;IAE9D,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC/F,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAY,CAAC,CAAC;QACjE,IAAI,CAAC,GAAG;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,sBAAsB,CAAC,CAAC,CAAC;QACjG,IAAI,GAAG,CAAC,SAAS,KAAK,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5E,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAClD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,iDAAiD,CAAC,CAAC,CAAC;QACvH,CAAC;QAED,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,kCAAkC,CAAC,CAAC;QAC9E,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACrE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC/G,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAClH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACjI,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../../../src/routes/capabilities.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EACL,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,eAAe,EAAE,0BAA0B,GAClG,MAAM,kCAAkC,CAAC;AAI1C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,MAAM,8BAA8B,GAAG;IACrC,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,YAAY,EAAE,OAAO;IAC9E,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW;CACnC,CAAC;AAEX;oGACoG;AACpG,MAAM,yBAAyB,GAAG,SAAS,CAAC;AAK5C;;;;;;;;;;;;;GAaG;AACH,SAAS,oBAAoB,CAAC,MAAoB,EAAE,GAAW;IAC7D,IAAI,MAAM,CAAC,kBAAkB,KAAK,UAAU,EAAE,CAAC;QAC7C,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,gDAAgD,EAAE,CAAC;IAC/G,CAAC;IACD,IAAI,MAAM,CAAC,kBAAkB,KAAK,gBAAgB;QAAE,OAAO,IAAI,CAAC;IAEhE,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC;IACtF,CAAC;IACD,IAAI,MAAM,CAAC,gCAAgC,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1E,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,4BAA4B,EAAE,OAAO,EAAE,WAAW,MAAM,mCAAmC,EAAE,CAAC;AAC5H,CAAC;AAED,8EAA8E;AAC9E,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACpE,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,iBAAiB,CAAC,GAAqB,EAAE,KAA8B;IAC9E,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC;IAC7B,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;IACpE,MAAM,IAAI,GAAI,OAA8B,CAAC,IAAI,CAAC;IAClD,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;AACpD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,SAAS,eAAe,CAAC,GAAqB,EAAE,KAA8B;IAC5E,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,YAAY,IAAI,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC9E,IAAI,CAAC,IAAI,IAAI,iBAAiB,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACrE,IAAI,IAAI,KAAK,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAoB,EAAE,OAAgB;IACvE,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,MAAM,OAAO,GAAG,CAAC,GAAY,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,IAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5E,4DAA4D;IAC5D,MAAM,MAAM,GAAG,CAAC,GAAY,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,IAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAE5G,0DAA0D;IAE1D,MAAM,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAChD,MAAM,OAAO,GAAqB,EAAE,CAAC;QACrC,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM;YAAE,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,MAAgB,CAAC;QAClE,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI;YAAE,OAAO,CAAC,IAAI,GAAI,GAAG,CAAC,KAAK,CAAC,IAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzE,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS;YAAE,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC;QACvF,IAAI,GAAG,CAAC,KAAK,CAAC,YAAY;YAAE,OAAO,CAAC,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,YAAsB,CAAC;QACpF,IAAI,GAAG,CAAC,KAAK,CAAC,WAAW;YAAE,OAAO,CAAC,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,WAAqB,CAAC;QAChF,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM;YAAE,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,MAAgB,CAAC;QAClE,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK;YAAE,OAAO,CAAC,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,KAAe,CAAC;QACnE,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAc,CAAC,IAAI,CAAC,CAAC;QACvD,OAAO,CAAC,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,QAAkB,CAAC,IAAI,EAAE,CAAC;QAE/D,4FAA4F;QAC5F,2FAA2F;QAC3F,mGAAmG;QACnG,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpC,OAAO,CAAC,UAAU,GAAG,QAAQ,CAAC;YAC9B,IAAI,CAAC,OAAO,CAAC,MAAM;gBAAE,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC;QACjD,CAAC;aAAM,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACxD,kGAAkG;YAClG,mGAAmG;YACnG,+FAA+F;YAC/F,OAAO,CAAC,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QACvC,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACvD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;YAC9B,GAAG,MAAM;YACT,MAAM,EAAE;gBACN,UAAU,EAAE,MAAM,CAAC,oBAAoB;gBACvC,UAAU,EAAE,MAAM,CAAC,oBAAoB;gBACvC,QAAQ,EAAE,MAAM,CAAC,kBAAkB;aACpC;SACF,CAAC,CAAC,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,sBAAsB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACpD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAY,CAAC,CAAC;QACjE,IAAI,CAAC,GAAG;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,sBAAsB,CAAC,CAAC,CAAC;QAEjG,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAClF,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,sBAAsB,CAAC,CAAC,CAAC;QACzF,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,+CAA+C;IAE/C,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACtF,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QACtB,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE;YACvE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU;YAChF,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM;YACxC,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACxD,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO;YACrF,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY;YAC7E,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY;YACxD,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa;YAC/E,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI;SACrD,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7G,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,sBAAsB,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACzF,6FAA6F;QAC7F,MAAM,KAAK,GAA4B,EAAE,GAAG,CAAC,GAAG,CAAC,IAAsC,IAAI,EAAE,CAAC,EAAE,CAAC;QACjG,KAAK,MAAM,KAAK,IAAI,8BAA8B;YAAE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC;QAExE,gGAAgG;QAChG,iGAAiG;QACjG,yFAAyF;QACzF,EAAE;QACF,kGAAkG;QAClG,kGAAkG;QAClG,8FAA8F;QAC9F,yFAAyF;QACzF,IAAI,YAAY,IAAI,KAAK,IAAI,QAAQ,IAAI,KAAK,EAAE,CAAC;YAC/C,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YACxB,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAY,CAAC,CAAC;YACjE,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,KAAK,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC1D,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBAC7C,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,oBAAoB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBACzE,IAAI,OAAO;oBAAE,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;YAC3G,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,EAAY,EAAE,KAAK,CAAC,CAAC;QACzG,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7G,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,MAAM,CAAC,sBAAsB,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5F,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,EAAY,CAAC,CAAC;QAClG,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7G,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,wBAAwB;IAExB,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC3E,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAY,CAAC,CAAC;QACjE,IAAI,CAAC,GAAG;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,sBAAsB,CAAC,CAAC,CAAC;QAEjG,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,qGAAqG;QACrG,oGAAoG;QACpG,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,GAAG,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,IAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1G,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,sBAAsB,CAAC,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACrE,MAAM,IAAI,GAAI,GAAG,CAAC,KAAK,CAAC,IAAe,KAAK,KAAK,CAAC,CAAC,CAAC,KAAc,CAAC,CAAC,CAAC,QAAiB,CAAC;QACvF,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAEnC,IAAI,CAAC;YACH,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,kCAAkC,CAAC,CAAC;YAC9E,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;YAE1F,MAAM,0BAA0B,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YAEpH,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,GAA+D,CAAC;YAC1E,MAAM,UAAU,GAAG,CAAC,CAAC,UAAU,IAAI,GAAG,CAAC;YACvC,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,eAAe,CAAC;YACvC,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAEjE,MAAM,0BAA0B,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YAE9F,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QACnE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,2CAA2C;IAE3C,0FAA0F;IAC1F,8FAA8F;IAC9F,8FAA8F;IAC9F,8FAA8F;IAC9F,8FAA8F;IAC9F,6FAA6F;IAC7F,4FAA4F;IAC5F,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC9E,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,EAAY,CAAC;QACtC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,sBAAsB,CAAC,CAAC,CAAC;YAChF,OAAO;QACT,CAAC;QACD,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAC1D,MAAM,GAAG,GAAG,OAAO,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9F,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,yBAAyB,CAAC,CAAC;QACtE,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,OAAO,CAAC,wBAAwB,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QACnF,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;YAC/C,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,IAAI,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,MAAM,OAAO,CAAC,wBAAwB,CAAC,KAAK,EAAE;gBAC5C,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO;gBAC7B,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,yCAAyC;aAC1E,CAAC,CAAC;QACL,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,iBAAiB;IAEjB,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAChG,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,EAAY,CAAC,CAAC;QACjG,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7G,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,MAAM,CAAC,4BAA4B,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAClG,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAY,CAAC,CAAC;QACjE,IAAI,CAAC,GAAG;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,sBAAsB,CAAC,CAAC,CAAC;QACjG,MAAM,OAAO,CAAC,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAY,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAY,CAAC,CAAC;QACrE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,UAAU,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,8DAA8D;IAE9D,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC/F,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAY,CAAC,CAAC;QACjE,IAAI,CAAC,GAAG;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,sBAAsB,CAAC,CAAC,CAAC;QACjG,IAAI,GAAG,CAAC,SAAS,KAAK,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5E,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAClD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,iDAAiD,CAAC,CAAC,CAAC;QACvH,CAAC;QAED,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,kCAAkC,CAAC,CAAC;QAC9E,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACrE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC/G,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAClH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACjI,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/src/routes/chat.d.ts

@@ -0,0 +1,23 @@
+/**
+ * @file src/routes/chat.ts
+ * @description The chat surface: the person's conversations, and one turn streamed as it happens.
+ *
+ *   A turn takes minutes when the agent is building something, so the answer cannot be one JSON
+ *   response at the end. It is an event stream, and the events are the same ones the agent emits:
+ *   words as they are written, and each tool call as it starts and finishes. Showing the tool calls
+ *   is not decoration — it is how a person can tell what was done on their behalf.
+ *
+ *   Owner-only throughout. This is the person's own chat with their own agent, and an app-grant
+ *   token that could read it would be reading everything they have ever asked for.
+ * @structure
+ *   - chatRouter(config, storage) — GET/POST/DELETE threads, POST .../turn (SSE), GET /v1/chat/status
+ * @usage mounted in server-bootstrap/routes-loader.ts
+ * @version-history
+ *   v1.0.0 — 2026-08-16 — Initial. Delete and reset look the conversation up before acting, so a
+ *     caller who cannot see it is told nothing exists rather than that something happened.
+ */
+import { Router } from 'express';
+import type { AimeatConfig } from '../config.js';
+import type { Storage } from '../storage/interface.js';
+export declare function chatRouter(config: AimeatConfig, storage: Storage): Router;
+//# sourceMappingURL=chat.d.ts.map

package/dist/src/routes/chat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat.d.ts","sourceRoot":"","sources":["../../../src/routes/chat.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,MAAM,EAA+B,MAAM,SAAS,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAYvD,wBAAgB,UAAU,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAkJzE"}

package/dist/src/routes/chat.js

@@ -0,0 +1,165 @@
+/**
+ * @file src/routes/chat.ts
+ * @description The chat surface: the person's conversations, and one turn streamed as it happens.
+ *
+ *   A turn takes minutes when the agent is building something, so the answer cannot be one JSON
+ *   response at the end. It is an event stream, and the events are the same ones the agent emits:
+ *   words as they are written, and each tool call as it starts and finishes. Showing the tool calls
+ *   is not decoration — it is how a person can tell what was done on their behalf.
+ *
+ *   Owner-only throughout. This is the person's own chat with their own agent, and an app-grant
+ *   token that could read it would be reading everything they have ever asked for.
+ * @structure
+ *   - chatRouter(config, storage) — GET/POST/DELETE threads, POST .../turn (SSE), GET /v1/chat/status
+ * @usage mounted in server-bootstrap/routes-loader.ts
+ * @version-history
+ *   v1.0.0 — 2026-08-16 — Initial. Delete and reset look the conversation up before acting, so a
+ *     caller who cannot see it is told nothing exists rather than that something happened.
+ */
+import { Router } from 'express';
+import { requireAuth, requireRole } from '../auth/middleware.js';
+import { success, error } from '../middleware/envelope.js';
+import { resolveIdentity } from '../utils/gaii.js';
+import { createThread, readThread, listThreads, deleteThread, } from '../services/chat-threads.js';
+import { chatEnabled, runChatTurn, resetChatSession } from '../services/chat-session.js';
+import { ensureChatAgent } from '../services/chat-agent.js';
+import { readAllowance, remainingOf } from '../services/ai-allowance.js';
+import { logger } from '../utils/logger.js';
+export function chatRouter(config, storage) {
+    const router = Router();
+    const owner = (req) => req.auth.owner;
+    const identity = (req) => resolveIdentity(req.auth, config.nodeId);
+    // GET /v1/chat/status — is there an agent here, what is it called, what is left to spend.
+    // The chat page asks this first: a node with no agent configured has to say so plainly rather
+    // than offer a box that will never answer.
+    router.get('/v1/chat/status', requireAuth(), requireRole('owner'), async (req, res) => {
+        const gaii = identity(req);
+        const enabled = chatEnabled(config);
+        const allowance = await readAllowance(storage, config, gaii);
+        res.json(success(config.nodeId, {
+            enabled,
+            agent_name: `chat#${owner(req)}@${config.nodeId}`,
+            allowance_remaining_usd: remainingOf(allowance),
+            has_own_key: !!(await storage.getMemory(gaii, 'openrouter.apikey')),
+            note: enabled ? undefined
+                : 'No chat agent is configured on this node. An operator sets AIMEAT_GOOSE_BIN.',
+        }));
+    });
+    // GET /v1/chat/threads — the person's open conversations, newest first.
+    router.get('/v1/chat/threads', requireAuth(), requireRole('owner'), async (req, res) => {
+        const threads = await listThreads(storage, identity(req));
+        res.json(success(config.nodeId, {
+            threads: threads.map((t) => ({
+                id: t.id, title: t.title, created_at: t.createdAt,
+                updated_at: t.updatedAt, turns: t.turns.length,
+            })),
+        }));
+    });
+    // POST /v1/chat/threads — start one.
+    router.post('/v1/chat/threads', requireAuth(), requireRole('owner'), async (req, res) => {
+        const { title } = req.body ?? {};
+        const thread = await createThread(storage, config, identity(req), typeof title === 'string' && title.trim() ? title.trim().slice(0, 60) : undefined);
+        // Provision the agent now rather than on the first turn, so it appears in the Agents tab
+        // the moment a person opens the chat and its scopes can be seen before anything runs.
+        await ensureChatAgent(storage, config, owner(req));
+        res.status(201).json(success(config.nodeId, { thread }, [
+            { description: 'Send a message', method: 'POST', url: `/v1/chat/threads/${thread.id}/turn` },
+        ]));
+    });
+    // GET /v1/chat/threads/:id — one conversation, in full.
+    router.get('/v1/chat/threads/:id', requireAuth(), requireRole('owner'), async (req, res) => {
+        const thread = await readThread(storage, identity(req), req.params.id);
+        if (!thread) {
+            res.status(404).json(error(config.nodeId, 'NOT_FOUND', 'No such conversation.'));
+            return;
+        }
+        res.json(success(config.nodeId, { thread }));
+    });
+    // DELETE /v1/chat/threads/:id
+    //
+    // The conversation is looked up before it is deleted, and a caller who cannot see it is told
+    // nothing exists. Deleting by key alone would answer "deleted: true" to somebody who owns
+    // nothing, which is a claim about another person's data.
+    router.delete('/v1/chat/threads/:id', requireAuth(), requireRole('owner'), async (req, res) => {
+        const gaii = identity(req);
+        const id = req.params.id;
+        if (!await readThread(storage, gaii, id)) {
+            res.status(404).json(error(config.nodeId, 'NOT_FOUND', 'No such conversation.'));
+            return;
+        }
+        await deleteThread(storage, gaii, id);
+        res.json(success(config.nodeId, { deleted: true }));
+    });
+    // POST /v1/chat/threads/:id/reset — forget the agent session, keep the conversation.
+    // What a scope change needs: the session's MCP token carries the scopes it was minted with, so
+    // changing them in the Agents tab has to reach the chat. This is how, and it costs one
+    // handshake rather than the reconnect a person used to have to perform by hand.
+    router.post('/v1/chat/threads/:id/reset', requireAuth(), requireRole('owner'), async (req, res) => {
+        const gaii = identity(req);
+        const id = req.params.id;
+        if (!await readThread(storage, gaii, id)) {
+            res.status(404).json(error(config.nodeId, 'NOT_FOUND', 'No such conversation.'));
+            return;
+        }
+        await resetChatSession({ storage, config }, gaii, id);
+        res.json(success(config.nodeId, { reset: true }));
+    });
+    // POST /v1/chat/threads/:id/turn — say something, and watch what happens.
+    //
+    // Server-sent events rather than one response: a turn takes minutes when the agent is building
+    // something, and a person watching a spinner for four minutes cannot tell work from a hang.
+    router.post('/v1/chat/threads/:id/turn', requireAuth(), requireRole('owner'), async (req, res) => {
+        const threadId = req.params.id;
+        const { text } = req.body ?? {};
+        if (typeof text !== 'string' || !text.trim()) {
+            res.status(400).json(error(config.nodeId, 'INVALID_BODY', 'text is required.'));
+            return;
+        }
+        const thread = await readThread(storage, identity(req), threadId);
+        if (!thread) {
+            res.status(404).json(error(config.nodeId, 'NOT_FOUND', 'No such conversation.'));
+            return;
+        }
+        res.writeHead(200, {
+            'Content-Type': 'text/event-stream',
+            'Cache-Control': 'no-cache',
+            'Connection': 'keep-alive',
+            'X-Accel-Buffering': 'no',
+        });
+        res.flushHeaders();
+        const flush = () => { res.flush?.(); };
+        const send = (event) => { res.write(`data: ${JSON.stringify(event)}\n\n`); flush(); };
+        // Open immediately. Without a first byte the stream is indistinguishable from a hung
+        // connection, and the first real event may be a minute away.
+        res.write('retry: 3000\n\n');
+        res.write(':open\n\n');
+        flush();
+        // A turn outlives the default socket timeout by a wide margin.
+        req.setTimeout(0);
+        res.setTimeout(0);
+        // A keepalive comment, so an intermediary with a short read timeout does not drop a turn
+        // that is thinking. Comments carry no data and the client ignores them.
+        const keepalive = setInterval(() => { res.write(':keepalive\n\n'); flush(); }, 15_000);
+        let finished = false;
+        req.on('close', () => { finished = true; clearInterval(keepalive); });
+        try {
+            for await (const update of runChatTurn({ storage, config }, owner(req), threadId, text)) {
+                if (finished)
+                    break;
+                send(update);
+            }
+        }
+        catch (err) {
+            logger.warn(`[chat] turn failed: ${err.message}`);
+            if (!finished)
+                send({ kind: 'error', message: err.message });
+        }
+        finally {
+            clearInterval(keepalive);
+            if (!finished)
+                res.end();
+        }
+    });
+    return router;
+}
+//# sourceMappingURL=chat.js.map

package/dist/src/routes/chat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat.js","sourceRoot":"","sources":["../../../src/routes/chat.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,MAAM,EAA+B,MAAM,SAAS,CAAC;AAG9D,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EACH,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,GACtD,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AACzF,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,MAAM,UAAU,UAAU,CAAC,MAAoB,EAAE,OAAgB;IAC7D,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,MAAM,KAAK,GAAG,CAAC,GAAY,EAAE,EAAE,CAAC,GAAG,CAAC,IAAK,CAAC,KAAK,CAAC;IAChD,MAAM,QAAQ,GAAG,CAAC,GAAY,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,IAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAE7E,0FAA0F;IAC1F,8FAA8F;IAC9F,2CAA2C;IAC3C,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAClF,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC3B,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAC7D,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;YAC5B,OAAO;YACP,UAAU,EAAE,QAAQ,KAAK,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE;YACjD,uBAAuB,EAAE,WAAW,CAAC,SAAS,CAAC;YAC/C,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;YACnE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;gBACrB,CAAC,CAAC,8EAA8E;SACvF,CAAC,CAAC,CAAC;IACR,CAAC,CAAC,CAAC;IAEH,wEAAwE;IACxE,MAAM,CAAC,GAAG,CAAC,kBAAkB,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACnF,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1D,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;YAC5B,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACzB,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,SAAS;gBACjD,UAAU,EAAE,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM;aACjD,CAAC,CAAC;SACN,CAAC,CAAC,CAAC;IACR,CAAC,CAAC,CAAC;IAEH,qCAAqC;IACrC,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACpF,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,EAC5D,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACvF,yFAAyF;QACzF,sFAAsF;QACtF,MAAM,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QACnD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE;YACpD,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,oBAAoB,MAAM,CAAC,EAAE,OAAO,EAAE;SAC/F,CAAC,CAAC,CAAC;IACR,CAAC,CAAC,CAAC;IAEH,wDAAwD;IACxD,MAAM,CAAC,GAAG,CAAC,sBAAsB,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACvF,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,EAAY,CAAC,CAAC;QACjF,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,uBAAuB,CAAC,CAAC,CAAC;YACjF,OAAO;QACX,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,8BAA8B;IAC9B,EAAE;IACF,6FAA6F;IAC7F,0FAA0F;IAC1F,yDAAyD;IACzD,MAAM,CAAC,MAAM,CAAC,sBAAsB,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC1F,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC3B,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,EAAY,CAAC;QACnC,IAAI,CAAC,MAAM,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,uBAAuB,CAAC,CAAC,CAAC;YACjF,OAAO;QACX,CAAC;QACD,MAAM,YAAY,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACtC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,qFAAqF;IACrF,+FAA+F;IAC/F,uFAAuF;IACvF,gFAAgF;IAChF,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC9F,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC3B,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,EAAY,CAAC;QACnC,IAAI,CAAC,MAAM,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,uBAAuB,CAAC,CAAC,CAAC;YACjF,OAAO;QACX,CAAC;QACD,MAAM,gBAAgB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACtD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,0EAA0E;IAC1E,EAAE;IACF,+FAA+F;IAC/F,4FAA4F;IAC5F,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QAChH,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,EAAY,CAAC;QACzC,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAChC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YAC3C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,mBAAmB,CAAC,CAAC,CAAC;YAChF,OAAO;QACX,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;QAClE,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,uBAAuB,CAAC,CAAC,CAAC;YACjF,OAAO;QACX,CAAC;QAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACf,cAAc,EAAE,mBAAmB;YACnC,eAAe,EAAE,UAAU;YAC3B,YAAY,EAAE,YAAY;YAC1B,mBAAmB,EAAE,IAAI;SAC5B,CAAC,CAAC;QACH,GAAG,CAAC,YAAY,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,GAAG,EAAE,GAAI,GAAyC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9E,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;QAE/F,qFAAqF;QACrF,6DAA6D;QAC7D,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC7B,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACvB,KAAK,EAAE,CAAC;QAER,+DAA+D;QAC/D,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAClB,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAElB,yFAAyF;QACzF,wEAAwE;QACxE,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAEvF,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,QAAQ,GAAG,IAAI,CAAC,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAEtE,IAAI,CAAC;YACD,IAAI,KAAK,EAAE,MAAM,MAAM,IAAI,WAAW,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC;gBACtF,IAAI,QAAQ;oBAAE,MAAM;gBACpB,IAAI,CAAC,MAAM,CAAC,CAAC;YACjB,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC,uBAAwB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7D,IAAI,CAAC,QAAQ;gBAAE,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5E,CAAC;gBAAS,CAAC;YACP,aAAa,CAAC,SAAS,CAAC,CAAC;YACzB,IAAI,CAAC,QAAQ;gBAAE,GAAG,CAAC,GAAG,EAAE,CAAC;QAC7B,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAClB,CAAC"}

package/dist/src/routes/commerce.js

@@ -29,7 +29,7 @@
  */
 import { Router } from 'express';
 import { z } from 'zod';
-import { requireAuth, requireRole } from '../auth/middleware.js';
+import { requireAuth, requireRole, requireScope } from '../auth/middleware.js';
 import { success, error } from '../middleware/envelope.js';
 import { resolveIdentity } from '../utils/gaii.js';
 import { isEvmAddressShape, toChecksumAddress, checksumIsWrong, settlementAssetMatch, probeIsContract } from '../commerce/evm-address.js';
@@ -352,7 +352,7 @@ export function commerceRouter(config, storage) {
         }).optional(),
     });
     // POST /v1/commerce/holds — authorize money on the buyer's instrument toward one seller.
-    router.post('/v1/commerce/holds', requireAuth(), async (req, res) => {
+    router.post('/v1/commerce/holds', requireAuth(), requireScope('commerce:sell'), async (req, res) => {
         const parsed = HoldCreateSchema.safeParse(req.body);
         if (!parsed.success) {
             res.status(400).json(error(config.nodeId, 'INVALID_HOLD', parsed.error.message));
@@ -397,7 +397,7 @@ export function commerceRouter(config, storage) {
         }
     });
     // POST /v1/commerce/holds/:id/capture — seller settles up to the held amount (partial allowed).
-    router.post('/v1/commerce/holds/:id/capture', requireAuth(), async (req, res) => {
+    router.post('/v1/commerce/holds/:id/capture', requireAuth(), requireScope('commerce:sell'), async (req, res) => {
         const amount = req.body?.amount;
         if (amount !== undefined && (typeof amount !== 'number' || !Number.isInteger(amount))) {
             res.status(400).json(error(config.nodeId, 'INVALID_HOLD', 'amount must be an integer number of micro-units'));
@@ -412,7 +412,7 @@ export function commerceRouter(config, storage) {
         }
     });
     // POST /v1/commerce/holds/:id/release — buyer or seller cancels an open hold.
-    router.post('/v1/commerce/holds/:id/release', requireAuth(), async (req, res) => {
+    router.post('/v1/commerce/holds/:id/release', requireAuth(), requireScope('commerce:sell'), async (req, res) => {
         try {
             const hold = await releaseHold(storage, config, req.auth.owner, req.params.id);
             res.json(success(config.nodeId, { hold }));