anchordb 0.2.0

package/dist/esm/inspector/agent.js

@@ -0,0 +1,482 @@
+import { MongoServerError, ValidationError } from "../core/errors.js";
+import { exportCollection, importCollection } from "../interop/export-import.js";
+import { QUEUE_COLLECTION } from "../sync/queue.js";
+import { SHADOW_COLLECTION } from "../sync/engine.js";
+import { flattenPaths } from "../query/path.js";
+import { InspectorAuth } from "./auth.js";
+import { INSPECTOR_PROTOCOL_VERSION, isRequest, makeError, makeEvent, makeResponse, } from "./protocol.js";
+/**
+ * The inspector agent — the AnchorDB side of the protocol.
+ *
+ * ## The rule that makes Lens trustworthy
+ *
+ * Every mutating method goes through the **public Model API**, never the storage adapter. A Lens
+ * edit therefore runs the same validation, stamps the same timestamps, fires the same change
+ * events, and enqueues the same mutation as an edit made by the app. A second, hidden write path
+ * would mean Lens shows you a database that behaves differently from the one your app uses — which
+ * would make it worse than useless for debugging.
+ *
+ * Reads are paged. `getDocuments` has a hard cap regardless of what the client asks for, because an
+ * inspector that can be made to materialise a 100k-document collection is a way to crash the app
+ * you are debugging.
+ */
+const MAX_PAGE_SIZE = 200;
+/** Collections that are AnchorDB's own bookkeeping, surfaced through dedicated methods instead. */
+const INTERNAL_COLLECTIONS = new Set([QUEUE_COLLECTION, SHADOW_COLLECTION]);
+export class InspectorAgent {
+    constructor(db, options = {}) {
+        this.transports = new Set();
+        this.authenticated = new WeakMap();
+        this.subscribed = new Set();
+        this.conflicts = [];
+        this.detach = [];
+        this.db = db;
+        this.opts = options;
+        this.auth = new InspectorAuth(options.auth ?? {});
+        this.wireEvents();
+    }
+    /** Begin a pairing window; the result is what a QR code encodes. */
+    startPairing() {
+        return this.auth.startPairing();
+    }
+    capabilities() {
+        const base = [
+            "documents:read",
+            "indexes:read",
+            "aggregate",
+            "export",
+            "subscribe",
+        ];
+        if (!this.opts.readOnly)
+            base.push("documents:write", "documents:bulk", "indexes:write", "import");
+        if (this.db.syncEnabled) {
+            base.push("sync:read", "conflicts:read");
+            if (!this.opts.readOnly)
+                base.push("sync:write", "conflicts:write");
+        }
+        return base;
+    }
+    /** Attach a transport. Multiple may be attached at once (§45). */
+    attach(transport) {
+        this.transports.add(transport);
+        const off = transport.onMessage((message) => {
+            void this.handle(transport, message);
+        });
+        return () => {
+            off();
+            this.transports.delete(transport);
+            this.subscribed.delete(transport);
+        };
+    }
+    async close() {
+        for (const detach of this.detach)
+            detach();
+        this.detach = [];
+        for (const transport of this.transports)
+            await transport.close();
+        this.transports.clear();
+        this.subscribed.clear();
+    }
+    // ---- dispatch ------------------------------------------------------------
+    async handle(transport, message) {
+        if (!isRequest(message))
+            return;
+        if (message.v !== INSPECTOR_PROTOCOL_VERSION) {
+            await transport.send(makeError(message.id, "protocol_version", `This agent speaks Anchor Inspector Protocol v${INSPECTOR_PROTOCOL_VERSION}, ` +
+                `the client sent v${String(message.v)}.`));
+            return;
+        }
+        try {
+            const result = await this.dispatch(transport, message);
+            await transport.send(makeResponse(message.id, result));
+        }
+        catch (err) {
+            await transport.send(this.toErrorResponse(message.id, err));
+        }
+    }
+    toErrorResponse(id, err) {
+        if (err instanceof ValidationError) {
+            return makeError(id, "validation_failed", err.message, {
+                errors: Object.fromEntries(Object.entries(err.errors).map(([path, e]) => [path, { message: e.message, kind: e.kind }])),
+            });
+        }
+        if (err instanceof MongoServerError && err.code === 11000) {
+            return makeError(id, "duplicate_key", err.message, { keyValue: err.keyValue ?? {} });
+        }
+        if (err instanceof InspectorRequestError)
+            return makeError(id, err.code, err.message);
+        return makeError(id, "internal", err.message);
+    }
+    async dispatch(transport, request) {
+        const { method, params = {} } = request;
+        if (method === "connect")
+            return this.connect();
+        if (method === "authenticate")
+            return this.authenticate(transport, params);
+        // Everything else requires a session.
+        const token = this.authenticated.get(transport) ?? params.sessionToken;
+        if (!this.auth.verify(token)) {
+            throw new InspectorRequestError("unauthenticated", "Authenticate before calling this method.");
+        }
+        if (this.opts.readOnly && MUTATING.has(method)) {
+            throw new InspectorRequestError("unauthorized", `This inspector session is read-only (${method} refused).`);
+        }
+        switch (method) {
+            case "getDatabases":
+                return [{ name: this.db.name, syncEnabled: this.db.syncEnabled }];
+            case "getCollections":
+                return this.getCollections();
+            case "getStats":
+                return this.getStats();
+            case "getIndexes":
+                return this.getIndexes(String(params.collection));
+            case "getDocuments":
+                return this.getDocuments(params);
+            case "getDocument":
+                return this.getDocument(String(params.collection), String(params.documentId));
+            case "countDocuments":
+                return this.model(String(params.collection)).countDocuments(params.filter ?? {});
+            case "insertDocument":
+                return this.insertDocument(String(params.collection), params.document);
+            case "updateDocument":
+                return this.updateDocument(String(params.collection), String(params.documentId), params.update);
+            case "updateMany":
+                return this.updateMany(String(params.collection), params.filter ?? {}, params.update ?? {}, params.all === true);
+            case "deleteMany":
+                return this.deleteMany(String(params.collection), params.filter ?? {}, params.all === true);
+            case "deleteDocument":
+                return this.deleteDocument(String(params.collection), String(params.documentId));
+            case "aggregate":
+                return this.model(String(params.collection)).aggregate(params.pipeline ?? []);
+            case "explain":
+                return this.model(String(params.collection)).explainAggregate(params.pipeline ?? []);
+            case "getSyncStatus":
+                return this.getSyncStatus();
+            case "getMutations":
+                return this.getMutations();
+            case "retryMutation":
+                return this.retryMutation(String(params.mutationId));
+            case "triggerSync":
+                return this.db.sync.now();
+            case "getConflicts":
+                return this.conflicts;
+            case "resolveConflict":
+                return this.resolveConflict(String(params.conflictId), params.document);
+            case "exportCollection":
+                return exportCollection(this.db, String(params.collection), params.options ?? {});
+            case "importCollection":
+                return importCollection(this.db, String(params.collection), params.data, params.options ?? {});
+            case "subscribeToChanges":
+                this.subscribed.add(transport);
+                return { subscribed: true };
+            case "unsubscribeFromChanges":
+                this.subscribed.delete(transport);
+                return { subscribed: false };
+            default:
+                throw new InspectorRequestError("unsupported_method", `Unknown method "${String(method)}"`);
+        }
+    }
+    // ---- handshake -----------------------------------------------------------
+    connect() {
+        const env = globalThis.process?.env;
+        return {
+            protocolVersion: INSPECTOR_PROTOCOL_VERSION,
+            capabilities: this.capabilities(),
+            environment: {
+                databaseName: this.db.name,
+                platform: this.opts.platform ?? detectPlatform(),
+                anchorVersion: this.opts.anchorVersion ?? "0.1.0",
+                nodeEnv: env?.NODE_ENV ?? "development",
+                syncEnabled: this.db.syncEnabled,
+                readOnly: this.opts.readOnly ?? false,
+            },
+            requiresAuth: !this.auth.isDisabled,
+        };
+    }
+    authenticate(transport, params) {
+        const session = this.auth.authenticate(String(params.proof ?? ""), String(params.clientName ?? "Anchor Lens"));
+        if (!session) {
+            throw new InspectorRequestError("unauthenticated", "Pairing failed. The code may have expired or already been used — generate a new one.");
+        }
+        this.authenticated.set(transport, session.token);
+        return {
+            sessionToken: session.token,
+            expiresAt: session.expiresAt,
+            capabilities: this.capabilities(),
+        };
+    }
+    /** The challenge a client signs. Exposed so a transport can hand it over during pairing. */
+    challenge() {
+        return this.auth.currentChallenge();
+    }
+    // ---- data ----------------------------------------------------------------
+    model(collection) {
+        if (INTERNAL_COLLECTIONS.has(collection)) {
+            throw new InspectorRequestError("unauthorized", `"${collection}" is AnchorDB's internal bookkeeping. Use getMutations/getConflicts instead.`);
+        }
+        // Always through the public API: a registered model when one exists (so schema validation and
+        // typing apply), otherwise the schemaless accessor.
+        return this.db.modelForCollection(collection) ?? this.db.collection(collection);
+    }
+    async getCollections() {
+        const names = (await this.db.listCollections()).filter((n) => !n.startsWith("__anchor"));
+        const out = [];
+        for (const name of names) {
+            const model = this.db.modelForCollection(name) ?? this.db.collection(name);
+            out.push({
+                name,
+                ...(this.db.modelForCollection(name) ? { modelName: this.db.modelForCollection(name).modelName } : {}),
+                count: await model.countDocuments({}),
+                indexes: (await model.listIndexes()).length,
+                hasSchema: this.db.modelForCollection(name) !== undefined,
+            });
+        }
+        return out;
+    }
+    async getStats() {
+        const stats = await this.db.stats();
+        const pending = this.db.syncEnabled ? await this.db.sync.pending() : 0;
+        const mutations = this.db.syncEnabled ? await this.readQueue() : [];
+        return {
+            database: this.db.name,
+            collections: stats.collections,
+            documents: stats.documents,
+            indexes: stats.indexes,
+            tombstones: stats.tombstones,
+            ...(stats.sizeBytes !== undefined ? { sizeBytes: stats.sizeBytes } : {}),
+            pendingMutations: pending,
+            failedMutations: mutations.filter((m) => m.status === "failed").length,
+            syncEnabled: this.db.syncEnabled,
+            ...(this.lastSyncAt ? { lastSyncAt: this.lastSyncAt } : {}),
+        };
+    }
+    async getIndexes(collection) {
+        return this.model(collection).listIndexes();
+    }
+    /** Paged, always. The cap is enforced here, not trusted from the client (§34). */
+    async getDocuments(params) {
+        const collection = String(params.collection);
+        const model = this.model(collection);
+        const filter = params.filter ?? {};
+        const skip = Math.max(0, Number(params.skip ?? 0));
+        const limit = Math.min(Math.max(1, Number(params.limit ?? 50)), MAX_PAGE_SIZE);
+        const query = model.find(filter).skip(skip).limit(limit).lean();
+        if (params.sort)
+            query.sort(params.sort);
+        const documents = (await query.exec());
+        const total = await model.countDocuments(filter);
+        return { collection, documents, total, skip, limit, hasMore: skip + documents.length < total };
+    }
+    async getDocument(collection, documentId) {
+        const doc = await this.model(collection).findById(documentId).lean().exec();
+        if (!doc)
+            throw new InspectorRequestError("not_found", `${collection}/${documentId} does not exist`);
+        return doc;
+    }
+    async insertDocument(collection, document) {
+        // Through the model: validation, timestamps, events and the sync queue all apply.
+        return this.model(collection).insertOne(document);
+    }
+    async updateDocument(collection, documentId, update) {
+        const hasOperators = Object.keys(update).some((k) => k.startsWith("$"));
+        const model = this.model(collection);
+        if (hasOperators)
+            await model.updateOne({ _id: documentId }, update);
+        else
+            await model.replaceOne({ _id: documentId }, update);
+        return this.getDocument(collection, documentId);
+    }
+    async deleteDocument(collection, documentId) {
+        return this.model(collection).deleteOne({ _id: documentId });
+    }
+    /**
+     * Bulk update (Compass's "Update" on the collection toolbar).
+     *
+     * Routed through `Model.updateMany`, so every matching document gets the same validation,
+     * timestamps, change events and queued mutations as an app write — and the whole thing is one
+     * pass over an index rather than N round trips from the inspector.
+     */
+    async updateMany(collection, filter, update, all) {
+        assertBulkFilter(filter, all, "update");
+        // A document with no operators would replace every match with the *same* content, silently
+        // collapsing the collection into N copies of one document. Mongo refuses this too.
+        if (!Object.keys(update).some((key) => key.startsWith("$"))) {
+            throw new InspectorRequestError("bad_request", "A bulk update needs update operators, for example { \"$set\": { \"status\": \"active\" } }. " +
+                "A plain document would overwrite every matching document with identical content.");
+        }
+        const result = await this.model(collection).updateMany(filter, update);
+        return {
+            collection,
+            matchedCount: result.matchedCount,
+            modifiedCount: result.modifiedCount,
+            deletedCount: 0,
+        };
+    }
+    /** Bulk delete (Compass's "Delete"). Same reasoning as {@link updateMany}. */
+    async deleteMany(collection, filter, all) {
+        assertBulkFilter(filter, all, "delete");
+        const result = await this.model(collection).deleteMany(filter);
+        return { collection, matchedCount: result.deletedCount, modifiedCount: 0, deletedCount: result.deletedCount };
+    }
+    // ---- sync ----------------------------------------------------------------
+    async getSyncStatus() {
+        if (!this.db.syncEnabled) {
+            // Lens renders an explicit "local-only" state rather than an empty dashboard.
+            return { enabled: false, status: "disabled", pending: 0, failed: 0, conflicts: 0 };
+        }
+        const mutations = await this.readQueue();
+        return {
+            enabled: true,
+            status: this.db.sync.status(),
+            pending: mutations.filter((m) => m.status === "pending").length,
+            failed: mutations.filter((m) => m.status === "failed").length,
+            conflicts: this.conflicts.length,
+            ...(this.lastSyncAt ? { lastSyncAt: this.lastSyncAt } : {}),
+        };
+    }
+    async readQueue() {
+        const rows = [];
+        for await (const row of this.db.adapter.scan(QUEUE_COLLECTION))
+            rows.push(row.doc);
+        return rows;
+    }
+    async getMutations() {
+        if (!this.db.syncEnabled)
+            return [];
+        const rows = (await this.readQueue());
+        return rows.sort((a, b) => Number(a.seq ?? 0) - Number(b.seq ?? 0));
+    }
+    async retryMutation(mutationId) {
+        if (!this.db.syncEnabled) {
+            throw new InspectorRequestError("bad_request", "Sync is not enabled on this database.");
+        }
+        const { MutationQueue } = await import("../sync/queue.js");
+        const queue = new MutationQueue(this.db.adapter, this.db.clientId);
+        const ok = await queue.retry(mutationId);
+        if (!ok)
+            throw new InspectorRequestError("not_found", `No mutation ${mutationId}`);
+        return { retried: true };
+    }
+    /**
+     * Manual conflict resolution from Lens.
+     *
+     * Deliberately routed through `updateDocument` rather than written straight to storage: the
+     * developer's decision becomes an ordinary mutation that syncs like any other (§41). Bypassing
+     * the queue would let Lens create state the server never learns about.
+     */
+    async resolveConflict(conflictId, document) {
+        const conflict = this.conflicts.find((c) => c.id === conflictId);
+        if (!conflict)
+            throw new InspectorRequestError("not_found", `No conflict ${conflictId}`);
+        const result = await this.updateDocument(conflict.collection, conflict.documentId, document);
+        this.conflicts.splice(this.conflicts.indexOf(conflict), 1);
+        return result;
+    }
+    // ---- events --------------------------------------------------------------
+    wireEvents() {
+        const push = (event, payload) => {
+            const message = makeEvent(event, payload);
+            for (const transport of this.subscribed) {
+                if (transport.isOpen)
+                    void transport.send(message);
+            }
+        };
+        this.detach.push(this.db.on("change", (e) => {
+            const name = e.operation === "insert"
+                ? "documentInserted"
+                : e.operation === "delete"
+                    ? "documentDeleted"
+                    : "documentUpdated";
+            push(name, e);
+            push("collectionChanged", { collection: e.collection });
+        }), this.db.on("sync:start", (e) => push("syncStarted", e)), this.db.on("sync:complete", (e) => {
+            this.lastSyncAt = new Date().toISOString();
+            push("syncCompleted", e);
+        }), this.db.on("sync:error", (e) => push("syncError", { message: e.error.message, phase: e.phase })), this.db.on("queue:changed", (e) => push("queueChanged", e)), this.db.on("conflict", (e) => {
+            const record = toConflictRecord(e);
+            this.conflicts.unshift(record);
+            const max = this.opts.conflictHistory ?? 50;
+            if (this.conflicts.length > max)
+                this.conflicts.length = max;
+            push("conflictDetected", record);
+        }));
+    }
+}
+const MUTATING = new Set([
+    "insertDocument",
+    "updateDocument",
+    "deleteDocument",
+    "updateMany",
+    "deleteMany",
+    "importCollection",
+    "resolveConflict",
+    "retryMutation",
+    "triggerSync",
+]);
+/**
+ * An empty filter means "every document in the collection".
+ *
+ * That is a legitimate thing to want and Compass allows it, but it is never something to do by
+ * accident from a phone — one mis-tap would empty a collection with no undo. So it has to be asked
+ * for twice: the client sets `all` only after the user has typed the collection name to confirm.
+ */
+function assertBulkFilter(filter, all, verb) {
+    if (Object.keys(filter).length === 0 && !all) {
+        throw new InspectorRequestError("bad_request", `A bulk ${verb} with an empty filter affects every document in the collection. ` +
+            `Send { all: true } to confirm that is intended.`);
+    }
+}
+export class InspectorRequestError extends Error {
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = "InspectorRequestError";
+    }
+}
+/** Build the per-field breakdown the Lens conflict table renders (§40). */
+function toConflictRecord(e) {
+    const local = flattenPaths(e.local);
+    const remote = flattenPaths(e.remote);
+    const resolved = flattenPaths(e.resolved);
+    const paths = new Set([...local.keys(), ...remote.keys(), ...resolved.keys()]);
+    const fields = [];
+    for (const path of paths) {
+        if (path === "_id" || path === "updatedAt" || path === "__v")
+            continue;
+        const l = local.get(path);
+        const r = remote.get(path);
+        const res = resolved.get(path);
+        const source = JSON.stringify(res) === JSON.stringify(l) && JSON.stringify(l) !== JSON.stringify(r)
+            ? "local"
+            : JSON.stringify(res) === JSON.stringify(r) && JSON.stringify(l) !== JSON.stringify(r)
+                ? "server"
+                : JSON.stringify(l) === JSON.stringify(r)
+                    ? "same"
+                    : "merged";
+        fields.push({ path, local: l, remote: r, result: res, source });
+    }
+    return {
+        id: `${e.collection}:${e.documentId}:${Date.now()}`,
+        collection: e.collection,
+        documentId: e.documentId,
+        strategy: e.strategy,
+        winner: e.winner,
+        ...(e.base ? { base: e.base } : {}),
+        local: e.local,
+        remote: e.remote,
+        resolved: e.resolved,
+        fields,
+        at: new Date().toISOString(),
+    };
+}
+function detectPlatform() {
+    const g = globalThis;
+    if (g.navigator?.product === "ReactNative")
+        return "react-native";
+    if (g.process?.platform)
+        return `node/${g.process.platform}`;
+    if (typeof globalThis.document !== "undefined")
+        return "browser";
+    return "unknown";
+}
+//# sourceMappingURL=agent.js.map

package/dist/esm/inspector/agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.js","sourceRoot":"","sources":["../../../src/inspector/agent.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,aAAa,EAA+C,MAAM,WAAW,CAAC;AACvF,OAAO,EACL,0BAA0B,EAC1B,SAAS,EACT,SAAS,EACT,SAAS,EACT,YAAY,GAWb,MAAM,eAAe,CAAC;AAEvB;;;;;;;;;;;;;;GAcG;AAEH,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,mGAAmG;AACnG,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,CAAC,CAAC;AAY5E,MAAM,OAAO,cAAc;IAWzB,YAAY,EAAY,EAAE,UAAiC,EAAE;QAP5C,eAAU,GAAG,IAAI,GAAG,EAAsB,CAAC;QAC3C,kBAAa,GAAG,IAAI,OAAO,EAA8B,CAAC;QAC1D,eAAU,GAAG,IAAI,GAAG,EAAsB,CAAC;QAC3C,cAAS,GAAqB,EAAE,CAAC;QAC1C,WAAM,GAAsB,EAAE,CAAC;QAIrC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC;QACpB,IAAI,CAAC,IAAI,GAAG,IAAI,aAAa,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,UAAU,EAAE,CAAC;IACpB,CAAC;IAED,oEAAoE;IACpE,YAAY;QACV,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;IAClC,CAAC;IAED,YAAY;QACV,MAAM,IAAI,GAA0B;YAClC,gBAAgB;YAChB,cAAc;YACd,WAAW;YACX,QAAQ;YACR,WAAW;SACZ,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,gBAAgB,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC;QACnG,IAAI,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;YACzC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ;gBAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,kEAAkE;IAClE,MAAM,CAAC,SAA6B;QAClC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/B,MAAM,GAAG,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE;YAC1C,KAAK,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QACH,OAAO,GAAG,EAAE;YACV,GAAG,EAAE,CAAC;YACN,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAClC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACpC,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK;QACT,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,EAAE,CAAC;QAC3C,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;QACjB,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,UAAU;YAAE,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;QACjE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAC1B,CAAC;IAED,6EAA6E;IAErE,KAAK,CAAC,MAAM,CAAC,SAA6B,EAAE,OAAyB;QAC3E,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YAAE,OAAO;QAEhC,IAAI,OAAO,CAAC,CAAC,KAAK,0BAA0B,EAAE,CAAC;YAC7C,MAAM,SAAS,CAAC,IAAI,CAClB,SAAS,CACP,OAAO,CAAC,EAAE,EACV,kBAAkB,EAClB,gDAAgD,0BAA0B,IAAI;gBAC5E,oBAAoB,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAC3C,CACF,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACvD,MAAM,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAEO,eAAe,CAAC,EAAU,EAAE,GAAY;QAC9C,IAAI,GAAG,YAAY,eAAe,EAAE,CAAC;YACnC,OAAO,SAAS,CAAC,EAAE,EAAE,mBAAmB,EAAE,GAAG,CAAC,OAAO,EAAE;gBACrD,MAAM,EAAE,MAAM,CAAC,WAAW,CACxB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,EAAG,CAAuB,CAAC,IAAI,EAAE,CAAC,CAAC,CACnH;aACF,CAAC,CAAC;QACL,CAAC;QACD,IAAI,GAAG,YAAY,gBAAgB,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC1D,OAAO,SAAS,CAAC,EAAE,EAAE,eAAe,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,GAAG,YAAY,qBAAqB;YAAE,OAAO,SAAS,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QACtF,OAAO,SAAS,CAAC,EAAE,EAAE,UAAU,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;IAC3D,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,SAA6B,EAAE,OAAyB;QAC7E,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC;QAExC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;QAChD,IAAI,MAAM,KAAK,cAAc;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAE3E,sCAAsC;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,IAAK,MAAM,CAAC,YAAmC,CAAC;QAC/F,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,qBAAqB,CAAC,iBAAiB,EAAE,0CAA0C,CAAC,CAAC;QACjG,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,qBAAqB,CAAC,cAAc,EAAE,wCAAwC,MAAM,YAAY,CAAC,CAAC;QAC9G,CAAC;QAED,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,cAAc;gBACjB,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;YACpE,KAAK,gBAAgB;gBACnB,OAAO,IAAI,CAAC,cAAc,EAAE,CAAC;YAC/B,KAAK,UAAU;gBACb,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;YACzB,KAAK,YAAY;gBACf,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;YACpD,KAAK,cAAc;gBACjB,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YACnC,KAAK,aAAa;gBAChB,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;YAChF,KAAK,gBAAgB;gBACnB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,CAAE,MAAM,CAAC,MAAgB,IAAI,EAAE,CAAC,CAAC;YAC9F,KAAK,gBAAgB;gBACnB,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,QAAmC,CAAC,CAAC;YACpG,KAAK,gBAAgB;gBACnB,OAAO,IAAI,CAAC,cAAc,CACxB,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EACzB,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EACzB,MAAM,CAAC,MAAiC,CACzC,CAAC;YACJ,KAAK,YAAY;gBACf,OAAO,IAAI,CAAC,UAAU,CACpB,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EACxB,MAAM,CAAC,MAAkC,IAAI,EAAE,EAC/C,MAAM,CAAC,MAAkC,IAAI,EAAE,EAChD,MAAM,CAAC,GAAG,KAAK,IAAI,CACpB,CAAC;YACJ,KAAK,YAAY;gBACf,OAAO,IAAI,CAAC,UAAU,CACpB,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EACxB,MAAM,CAAC,MAAkC,IAAI,EAAE,EAChD,MAAM,CAAC,GAAG,KAAK,IAAI,CACpB,CAAC;YACJ,KAAK,gBAAgB;gBACnB,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;YACnF,KAAK,WAAW;gBACd,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAE,MAAM,CAAC,QAAkB,IAAI,EAAE,CAAC,CAAC;YAC3F,KAAK,SAAS;gBACZ,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAE,MAAM,CAAC,QAAkB,IAAI,EAAE,CAAC,CAAC;YAClG,KAAK,eAAe;gBAClB,OAAO,IAAI,CAAC,aAAa,EAAE,CAAC;YAC9B,KAAK,cAAc;gBACjB,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC;YAC7B,KAAK,eAAe;gBAClB,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;YACvD,KAAK,aAAa;gBAChB,OAAO,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YAC5B,KAAK,cAAc;gBACjB,OAAO,IAAI,CAAC,SAAS,CAAC;YACxB,KAAK,iBAAiB;gBACpB,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,QAAmC,CAAC,CAAC;YACrG,KAAK,kBAAkB;gBACrB,OAAO,gBAAgB,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAG,MAAM,CAAC,OAAiB,IAAI,EAAE,CAAC,CAAC;YAC/F,KAAK,kBAAkB;gBACrB,OAAO,gBAAgB,CACrB,IAAI,CAAC,EAAE,EACP,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EACzB,MAAM,CAAC,IAAc,EACpB,MAAM,CAAC,OAAiB,IAAI,EAAE,CAChC,CAAC;YACJ,KAAK,oBAAoB;gBACvB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC/B,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YAC9B,KAAK,wBAAwB;gBAC3B,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAClC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;YAC/B;gBACE,MAAM,IAAI,qBAAqB,CAAC,oBAAoB,EAAE,mBAAmB,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChG,CAAC;IACH,CAAC;IAED,6EAA6E;IAErE,OAAO;QACb,MAAM,GAAG,GAAI,UAAyE,CAAC,OAAO,EAAE,GAAG,CAAC;QACpG,OAAO;YACL,eAAe,EAAE,0BAA0B;YAC3C,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE;YACjC,WAAW,EAAE;gBACX,YAAY,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI;gBAC1B,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,cAAc,EAAE;gBAChD,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,OAAO;gBACjD,OAAO,EAAE,GAAG,EAAE,QAAQ,IAAI,aAAa;gBACvC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,WAAW;gBAChC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,KAAK;aACtC;YACD,YAAY,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU;SACpC,CAAC;IACJ,CAAC;IAEO,YAAY,CAAC,SAA6B,EAAE,MAA+B;QACjF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,CACpC,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,EAC1B,MAAM,CAAC,MAAM,CAAC,UAAU,IAAI,aAAa,CAAC,CAC3C,CAAC;QACF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,qBAAqB,CAC7B,iBAAiB,EACjB,sFAAsF,CACvF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACjD,OAAO;YACL,YAAY,EAAE,OAAO,CAAC,KAAK;YAC3B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE;SAClC,CAAC;IACJ,CAAC;IAED,4FAA4F;IAC5F,SAAS;QACP,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;IACtC,CAAC;IAED,6EAA6E;IAErE,KAAK,CAAC,UAAkB;QAC9B,IAAI,oBAAoB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,qBAAqB,CAC7B,cAAc,EACd,IAAI,UAAU,8EAA8E,CAC7F,CAAC;QACJ,CAAC;QACD,8FAA8F;QAC9F,oDAAoD;QACpD,OAAO,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAClF,CAAC;IAEO,KAAK,CAAC,cAAc;QAC1B,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;QACzF,MAAM,GAAG,GAAwB,EAAE,CAAC;QACpC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAC3E,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI;gBACJ,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAE,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvG,KAAK,EAAE,MAAM,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;gBACrC,OAAO,EAAE,CAAC,MAAM,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM;gBAC3C,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,SAAS;aAC1D,CAAC,CAAC;QACL,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,KAAK,CAAC,QAAQ;QACpB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACvE,MAAM,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,gBAAgB,EAAE,OAAO;YACzB,eAAe,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAyB,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,MAAM;YAC/F,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,WAAW;YAChC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5D,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,UAAkB;QACzC,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9C,CAAC;IAED,kFAAkF;IAC1E,KAAK,CAAC,YAAY,CAAC,MAA+B;QACxD,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACrC,MAAM,MAAM,GAAI,MAAM,CAAC,MAAkC,IAAI,EAAE,CAAC;QAChE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;QAE/E,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;QAChE,IAAI,MAAM,CAAC,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAa,CAAC,CAAC;QAElD,MAAM,SAAS,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAmC,CAAC;QACzE,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAEjD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,GAAG,SAAS,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;IACjG,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,UAAkB,EAAE,UAAkB;QAC9D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;QAC5E,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,qBAAqB,CAAC,WAAW,EAAE,GAAG,UAAU,IAAI,UAAU,iBAAiB,CAAC,CAAC;QACrG,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,UAAkB,EAAE,QAAiC;QAChF,kFAAkF;QAClF,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,QAAiB,CAAC,CAAC;IAC7D,CAAC;IAEO,KAAK,CAAC,cAAc,CAC1B,UAAkB,EAClB,UAAkB,EAClB,MAA+B;QAE/B,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QACxE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACrC,IAAI,YAAY;YAAE,MAAM,KAAK,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,MAAM,CAAC,CAAC;;YAChE,MAAM,KAAK,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,MAAe,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAClD,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,UAAkB,EAAE,UAAkB;QACjE,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,UAAU,CACtB,UAAkB,EAClB,MAA+B,EAC/B,MAA+B,EAC/B,GAAY;QAEZ,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QAExC,2FAA2F;QAC3F,mFAAmF;QACnF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,qBAAqB,CAC7B,aAAa,EACb,8FAA8F;gBAC5F,kFAAkF,CACrF,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,MAAe,CAAC,CAAC;QAChF,OAAO;YACL,UAAU;YACV,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,YAAY,EAAE,CAAC;SAChB,CAAC;IACJ,CAAC;IAED,8EAA8E;IACtE,KAAK,CAAC,UAAU,CACtB,UAAkB,EAClB,MAA+B,EAC/B,GAAY;QAEZ,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QAExC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC/D,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,aAAa,EAAE,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC;IAChH,CAAC;IAED,6EAA6E;IAErE,KAAK,CAAC,aAAa;QACzB,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;YACzB,8EAA8E;YAC9E,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QACrF,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACzC,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE;YAC7B,OAAO,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAyB,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM;YACxF,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAyB,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,MAAM;YACtF,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM;YAChC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5D,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,SAAS;QACrB,MAAM,IAAI,GAAc,EAAE,CAAC;QAC3B,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnF,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW;YAAE,OAAO,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,SAAS,EAAE,CAAmC,CAAC;QACxE,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACtE,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,UAAkB;QAC5C,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;YACzB,MAAM,IAAI,qBAAqB,CAAC,aAAa,EAAE,uCAAuC,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;QACnE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACzC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,qBAAqB,CAAC,WAAW,EAAE,eAAe,UAAU,EAAE,CAAC,CAAC;QACnF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,eAAe,CAAC,UAAkB,EAAE,QAAiC;QACjF,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,UAAU,CAAC,CAAC;QACjE,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,qBAAqB,CAAC,WAAW,EAAE,eAAe,UAAU,EAAE,CAAC,CAAC;QACzF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC7F,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,6EAA6E;IAErE,UAAU;QAChB,MAAM,IAAI,GAAG,CAAC,KAAsC,EAAE,OAAgB,EAAE,EAAE;YACxE,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAC1C,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACxC,IAAI,SAAS,CAAC,MAAM;oBAAE,KAAK,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACrD,CAAC;QACH,CAAC,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;YACzB,MAAM,IAAI,GACR,CAAC,CAAC,SAAS,KAAK,QAAQ;gBACtB,CAAC,CAAC,kBAAkB;gBACpB,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,QAAQ;oBACxB,CAAC,CAAC,iBAAiB;oBACnB,CAAC,CAAC,iBAAiB,CAAC;YAC1B,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACd,IAAI,CAAC,mBAAmB,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;QAC1D,CAAC,CAAC,EACF,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EACvD,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE;YAChC,IAAI,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC3C,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;QAC3B,CAAC,CAAC,EACF,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,EAChG,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAC3D,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE;YAC3B,MAAM,MAAM,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;YACnC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,GAAG;gBAAE,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,GAAG,CAAC;YAC7D,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;QACnC,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;CACF;AAED,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC;IACvB,gBAAgB;IAChB,gBAAgB;IAChB,gBAAgB;IAChB,YAAY;IACZ,YAAY;IACZ,kBAAkB;IAClB,iBAAiB;IACjB,eAAe;IACf,aAAa;CACd,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,SAAS,gBAAgB,CAAC,MAA+B,EAAE,GAAY,EAAE,IAAY;IACnF,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7C,MAAM,IAAI,qBAAqB,CAC7B,aAAa,EACb,UAAU,IAAI,kEAAkE;YAC9E,iDAAiD,CACpD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAE9C,YAAY,IAAmC,EAAE,OAAe;QAC9D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,2EAA2E;AAC3E,SAAS,gBAAgB,CAAC,CASzB;IACC,MAAM,KAAK,GAAG,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAE1C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/E,MAAM,MAAM,GAA6B,EAAE,CAAC;IAE5C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK;YAAE,SAAS;QACvE,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1B,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3B,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,MAAM,GACV,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;YAClF,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;gBACpF,CAAC,CAAC,QAAQ;gBACV,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;oBACvC,CAAC,CAAC,MAAM;oBACR,CAAC,CAAC,QAAQ,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE;QACnD,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,MAAM;QACN,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAC7B,CAAC;AACJ,CAAC;AAED,SAAS,cAAc;IACrB,MAAM,CAAC,GAAG,UAAmF,CAAC;IAC9F,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,KAAK,aAAa;QAAE,OAAO,cAAc,CAAC;IAClE,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ;QAAE,OAAO,QAAQ,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;IAC7D,IAAI,OAAQ,UAAqC,CAAC,QAAQ,KAAK,WAAW;QAAE,OAAO,SAAS,CAAC;IAC7F,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/esm/inspector/auth.d.ts

@@ -0,0 +1,49 @@
+export declare function hmacSha256(key: string, message: string): string;
+/** Constant-time comparison — a length-independent early return would leak the proof by timing. */
+export declare function timingSafeEqual(a: string, b: string): boolean;
+export interface PairingInfo {
+    /** Short, human-transcribable. Never sent over the wire — only proved. */
+    code: string;
+    challenge: string;
+    expiresAt: string;
+}
+export interface Session {
+    token: string;
+    clientName: string;
+    createdAt: string;
+    expiresAt: string;
+}
+export interface InspectorAuthOptions {
+    /** How long a pairing code stays valid. Short by design. */
+    pairingTtlMs?: number;
+    /** How long an authenticated session lasts before re-pairing is required. */
+    sessionTtlMs?: number;
+    /** Disable authentication entirely. Only sane for the in-process transport. */
+    disabled?: boolean;
+    now?: () => number;
+}
+export declare class InspectorAuth {
+    private pairing;
+    private readonly sessions;
+    private readonly opts;
+    constructor(options?: InspectorAuthOptions);
+    get isDisabled(): boolean;
+    /** Begin a pairing window. Any previous unused code is invalidated. */
+    startPairing(): PairingInfo;
+    /** The challenge a client must sign. Null when no pairing window is open. */
+    currentChallenge(): string | null;
+    /** What a client computes from the code it scanned. */
+    static proofFor(pairingCode: string, challenge: string): string;
+    /**
+     * Verify a proof and issue a session.
+     *
+     * The pairing code is consumed whether or not the proof was correct, so a captured challenge
+     * cannot be brute-forced by replaying against the same window.
+     */
+    authenticate(proof: string, clientName?: string): Session | null;
+    private issueSession;
+    verify(token: string | undefined): Session | null;
+    revoke(token: string): void;
+    activeSessions(): Session[];
+}
+//# sourceMappingURL=auth.d.ts.map

package/dist/esm/inspector/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/inspector/auth.ts"],"names":[],"mappings":"AAyGA,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAyB/D;AAED,mGAAmG;AACnG,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAK7D;AAED,MAAM,WAAW,WAAW;IAC1B,0EAA0E;IAC1E,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,OAAO;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,oBAAoB;IACnC,4DAA4D;IAC5D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,6EAA6E;IAC7E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,qBAAa,aAAa;IACxB,OAAO,CAAC,OAAO,CAA4B;IAC3C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA8B;IACvD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAsE;gBAE/E,OAAO,GAAE,oBAAyB;IAS9C,IAAI,UAAU,IAAI,OAAO,CAExB;IAED,uEAAuE;IACvE,YAAY,IAAI,WAAW;IAW3B,6EAA6E;IAC7E,gBAAgB,IAAI,MAAM,GAAG,IAAI;IASjC,uDAAuD;IACvD,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM;IAI/D;;;;;OAKG;IACH,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,SAAgB,GAAG,OAAO,GAAG,IAAI;IAiBvE,OAAO,CAAC,YAAY;IAWpB,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,IAAI;IAYjD,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAI3B,cAAc,IAAI,OAAO,EAAE;CAO5B"}