approval-md 0.0.1 → 0.1.0

package/dist/src/cli/gate.js

@@ -0,0 +1,557 @@
+/**
+ * The gate verbs of SPEC.md §10.1: `approval register`, `approval request`,
+ * `approval grant|reject|revoke`, and `approval expire`.
+ *
+ * As everywhere else in this CLI, **no logic lives here.** State derivation,
+ * transition legality, TTL arithmetic, attestation, and budgets are all
+ * `core/gate.ts`; frontmatter reading is `core/frontmatter.ts`; the append is
+ * `core/log.ts`. This file resolves paths and identity, chooses an exit code,
+ * and formats output.
+ *
+ * Four choices are load-bearing enough to state plainly.
+ *
+ * **A gate refusal is exit 1, not exit 2.** "You may not do that" is not a
+ * usage error — the command was well-formed, the runtime understood it, and the
+ * answer is no. Grouping refusals with typos would train agents to retry with
+ * different flags when the correct response is to ask a human. Exit 2 stays what
+ * it has always been: an unknown flag, a missing argument, an unresolvable
+ * identity. The frozen `error.code` inside `--json` is what a caller branches on
+ * to tell *which* refusal it was.
+ *
+ * **The log supplies the action's declaration, not flags.** `approval request
+ * <task> --action <key>` reads the action's class, cost, reversibility and
+ * summary from the `task.registered` record in the log — the same record
+ * `approval register` wrote from the envelope. There are no `--class` /
+ * `--cost` flags, deliberately: an agent that could name its own class at
+ * request time could declare `read.web` for an action registered as
+ * `financial.spend`, and SPEC.md §7's "class MUST be declared before a token can
+ * be requested" would mean nothing. Register once from the file; request against
+ * what was registered. A task file edited after registration is `envelope.drift`
+ * (M5), not a silent re-declaration.
+ *
+ * **`register` reads task files but never writes them.** Unknown frontmatter
+ * keys are preserved trivially here because nothing is rewritten at all;
+ * round-trip rewriting is M6.
+ *
+ * **grant / reject / revoke are human-only**, via `resolveHumanActor` — `--as
+ * human:<id>` or `APPROVAL_HUMAN`, refused at exit 2 when absent or when it
+ * names an agent. `expire` takes no identity at all: it is the system verb, and
+ * `core/gate.ts` stamps `system:gate`.
+ *
+ * **This layer no longer reads the clock.** It used to pass `new Date()` into
+ * every gate call; under amended SPEC.md §8 (A2) a gate-typed event's `ts` is
+ * assigned inside core at the write boundary, and there is no parameter here to
+ * pass one through. Nothing about determinism is lost — core reads an injected
+ * clock — and one caller-supplied-timestamp seam is gone.
+ */
+import { readFileSync } from "node:fs";
+import { isAbsolute, resolve as resolvePathSegments } from "node:path";
+import { HUMAN_ACTOR_ENV, resolveHumanActor } from "../core/attest.js";
+// The graded reaction a grant may carry (APRV-239). Defined in `core/audit.ts`
+// beside the projection that reads it back, so there is one vocabulary and one
+// spelling of it across both surfaces that write it.
+import { isReaction, REACTIONS } from "../core/audit.js";
+import { decide, expire, register, registeredAction, request, readGateRecords, withdraw, } from "../core/gate.js";
+import { recordRefusedDecision } from "../core/decision-refusal.js";
+import { isWithdrawReason, WITHDRAW_REASONS } from "../core/state.js";
+import { boolFlag, parseFlags, stringFlag } from "./args.js";
+import { EXIT_INTEGRITY, EXIT_IO, EXIT_OK, EXIT_TORN_TAIL, EXIT_USAGE, } from "./exit-codes.js";
+import { EXPIRE_HELP, GRANT_HELP, REGISTER_HELP, REJECT_HELP, REQUEST_HELP, REVOKE_HELP, WITHDRAW_HELP, } from "./help.js";
+import { DEFAULT_LOG_PATH, resolvePath } from "./paths.js";
+import { refusal as renderRefusal, style, tokenPanel } from "./style.js";
+import { usageErrorText } from "./usage.js";
+/** Identity accepted by the proposing verbs: a person or an agent. */
+const PRINCIPAL_ACTOR = /^(human|agent):.+/u;
+const COMMON_FLAGS = {
+    "--log": "string",
+    "--json": "boolean",
+    "--help": "boolean",
+    "-h": "boolean",
+};
+const POLICY_FLAGS = {
+    "--policy": "string",
+    "--dir": "string",
+};
+function wantsJson(argv) {
+    return argv.includes("--json");
+}
+function absolute(value, cwd) {
+    return isAbsolute(value) ? value : resolvePathSegments(cwd, value);
+}
+function usageError(streams, json, message, helpText) {
+    if (json)
+        streams.err(`${JSON.stringify({ error: { code: "usage", message } })}\n`);
+    else
+        streams.err(usageErrorText(message, helpText));
+    return EXIT_USAGE;
+}
+/** A filesystem fact, reported as one: exit 4, never a gate refusal code. */
+function ioError(streams, json, message) {
+    if (json)
+        streams.err(`${JSON.stringify({ error: { code: "io", message } })}\n`);
+    else
+        streams.err(`approval: ${message}\n`);
+    return EXIT_IO;
+}
+/**
+ * Map a core refusal onto the frozen exit table.
+ *
+ * Everything the gate itself decided is {@link EXIT_INTEGRITY}. Only facts about
+ * the filesystem are {@link EXIT_IO}, and only a crashed write is
+ * {@link EXIT_TORN_TAIL} — the same split the log commands already draw.
+ */
+function refusalExitCode(refusal) {
+    switch (refusal.code) {
+        case "log-unreadable":
+        case "task-file-unreadable":
+        // The store could not be written: a filesystem fact, like the two above,
+        // and not a statement about what the gate decided. `payload-mismatch` is
+        // the opposite and stays at EXIT_INTEGRITY — the gate looked at the bytes
+        // and said no.
+        case "payload-store-failed":
+            return EXIT_IO;
+        case "log-torn-tail":
+            return EXIT_TORN_TAIL;
+        case "append-failed":
+            switch (refusal.append?.code) {
+                case "corrupt-tail":
+                    return EXIT_TORN_TAIL;
+                case "io":
+                case "lock-timeout":
+                    return EXIT_IO;
+                default:
+                    return EXIT_INTEGRITY;
+            }
+        default:
+            return EXIT_INTEGRITY;
+    }
+}
+/** Emit a refusal in the frozen shape and return its exit code. */
+function emitRefusal(streams, json, refusal) {
+    if (json) {
+        const error = { code: refusal.code, message: refusal.message };
+        if (refusal.detail !== undefined)
+            error["detail"] = refusal.detail;
+        if (refusal.state !== undefined)
+            error["state"] = refusal.state;
+        if (refusal.verdicts !== undefined)
+            error["verdicts"] = refusal.verdicts;
+        // APRV-173: the request-volume verdicts behind `queue-full` / `rate-limited`.
+        // Their own key rather than `verdicts`, because a caller reading money out
+        // of a budget refusal must not find queue counts under the same name.
+        if (refusal.limits !== undefined)
+            error["limits"] = refusal.limits;
+        if (refusal.errors !== undefined)
+            error["errors"] = refusal.errors;
+        if (refusal.record !== undefined)
+            error["seq"] = refusal.record.seq;
+        streams.err(`${JSON.stringify({ ok: false, error })}\n`);
+    }
+    else {
+        // APRV-91 #8/#13: glyph, machine-readable code, message. No help page
+        // follows a refusal, and no `fix:` line is invented here — the gate's
+        // refusals name a state (`not-granted`, `already-decided`) rather than a
+        // single command that repairs it, and a wrong fix is worse than none.
+        streams.err(`${renderRefusal(style({ json }), refusal.code, refusal.message)}\n`);
+    }
+    return refusalExitCode(refusal);
+}
+function emitJson(streams, value) {
+    streams.out(`${JSON.stringify(value)}\n`);
+}
+/** Where policy lives, from `--policy` / `--dir`, with the CLI's cwd default. */
+function gateOptions(flags, cwd) {
+    const policyFlag = stringFlag(flags, "--policy");
+    const dirFlag = stringFlag(flags, "--dir");
+    if (policyFlag !== null)
+        return { policy: { file: absolute(policyFlag, cwd) } };
+    return { policy: { dir: dirFlag === null ? cwd : absolute(dirFlag, cwd) } };
+}
+function front(argv, spec, helpText, streams, cwd) {
+    const json = wantsJson(argv);
+    const parsed = parseFlags(argv, spec);
+    if (!parsed.ok) {
+        return { kind: "handled", code: usageError(streams, json, parsed.message, helpText) };
+    }
+    if (boolFlag(parsed.flags, "--help") || boolFlag(parsed.flags, "-h")) {
+        streams.out(`${helpText}\n`);
+        return { kind: "handled", code: EXIT_OK };
+    }
+    return {
+        kind: "run",
+        flags: parsed.flags,
+        positionals: parsed.positionals,
+        json,
+        logPath: resolvePath(stringFlag(parsed.flags, "--log"), DEFAULT_LOG_PATH, cwd),
+    };
+}
+/**
+ * Identity for the proposing verbs (`register`, `request`).
+ *
+ * `--as` accepts `human:<id>` or `agent:<id>` — an agent proposing an action is
+ * the normal case, and the whole point of the gate is that proposing is not
+ * deciding. `APPROVAL_HUMAN` is the fallback and, being a *human* variable,
+ * supplies only a human identity. There is no default: an unattributed request
+ * is a request nobody can be asked about.
+ */
+function resolvePrincipalActor(asFlag) {
+    if (asFlag !== null)
+        return PRINCIPAL_ACTOR.test(asFlag) ? asFlag : null;
+    return resolveHumanActor();
+}
+// ---------------------------------------------------------------------------
+// register
+// ---------------------------------------------------------------------------
+export function commandRegister(argv, streams, cwd) {
+    const outcome = front(argv, { ...COMMON_FLAGS, "--as": "string" }, REGISTER_HELP, streams, cwd);
+    if (outcome.kind === "handled")
+        return outcome.code;
+    const { flags, positionals, json, logPath } = outcome;
+    const file = positionals[0];
+    if (file === undefined)
+        return usageError(streams, json, "missing <task-file> argument", REGISTER_HELP);
+    const extra = positionals[1];
+    if (extra !== undefined) {
+        return usageError(streams, json, `unexpected argument ${JSON.stringify(extra)}`, REGISTER_HELP);
+    }
+    const asFlag = stringFlag(flags, "--as");
+    const actor = resolvePrincipalActor(asFlag);
+    if (actor === null)
+        return identityUsageError(streams, json, asFlag, REGISTER_HELP);
+    const result = register(logPath, { file: absolute(file, cwd) }, actor);
+    if (!result.ok)
+        return emitRefusal(streams, json, result);
+    if (json) {
+        emitJson(streams, {
+            ok: true,
+            seq: result.record.seq,
+            task: result.task,
+            actions: result.actions.length,
+        });
+    }
+    else {
+        streams.out(`registered ${result.task} at seq ${result.record.seq}: ${result.actions.length} action(s)\n`);
+    }
+    return EXIT_OK;
+}
+function identityUsageError(streams, json, asFlag, helpText) {
+    if (asFlag !== null) {
+        return usageError(streams, json, `--as expects human:<id> or agent:<id>, got ${JSON.stringify(asFlag)}`, helpText);
+    }
+    return usageError(streams, json, `no identity: set ${HUMAN_ACTOR_ENV}=human:<id> or pass --as human:<id> | agent:<id>`, helpText);
+}
+/**
+ * `--payload <file>` or `--payload -` (stdin), as a JSON value.
+ *
+ * Two failures, two exit codes, on purpose: a file that cannot be read is an I/O
+ * fact (exit 4) and bytes that are not JSON are a usage error (exit 2). Neither
+ * is a gate refusal — the gate was never asked — and neither writes anything.
+ *
+ * The value is handed to `core/gate.ts` as a value, not as a path: the store is
+ * addressed by the RFC 8785 hash of the *material*, so a file's own formatting,
+ * key order and whitespace are irrelevant by construction.
+ */
+function readPayloadFlag(flag, cwd) {
+    const source = flag === "-" ? 0 : absolute(flag, cwd);
+    const where = flag === "-" ? "stdin" : String(source);
+    let raw;
+    try {
+        raw = readFileSync(source, "utf8");
+    }
+    catch (cause) {
+        return {
+            ok: false,
+            code: EXIT_IO,
+            message: `--payload ${where} could not be read: ${cause instanceof Error ? cause.message : String(cause)}`,
+        };
+    }
+    try {
+        return { ok: true, value: JSON.parse(raw) };
+    }
+    catch (cause) {
+        return {
+            ok: false,
+            code: EXIT_USAGE,
+            message: `--payload ${where} is not valid JSON: ${cause instanceof Error ? cause.message : String(cause)}; the payload store holds the exact material the binding names, so it must parse before it can be hashed`,
+        };
+    }
+}
+export function commandRequest(argv, streams, cwd) {
+    const outcome = front(argv, {
+        ...COMMON_FLAGS,
+        ...POLICY_FLAGS,
+        "--as": "string",
+        "--action": "string",
+        "--payload": "string",
+    }, REQUEST_HELP, streams, cwd);
+    if (outcome.kind === "handled")
+        return outcome.code;
+    const { flags, positionals, json, logPath } = outcome;
+    const task = positionals[0];
+    if (task === undefined)
+        return usageError(streams, json, "missing <task> argument", REQUEST_HELP);
+    const extra = positionals[1];
+    if (extra !== undefined) {
+        return usageError(streams, json, `unexpected argument ${JSON.stringify(extra)}`, REQUEST_HELP);
+    }
+    const actionKey = stringFlag(flags, "--action");
+    if (actionKey === null) {
+        return usageError(streams, json, "missing --action <key>", REQUEST_HELP);
+    }
+    const asFlag = stringFlag(flags, "--as");
+    const actor = resolvePrincipalActor(asFlag);
+    if (actor === null)
+        return identityUsageError(streams, json, asFlag, REQUEST_HELP);
+    // APRV-28: the bytes, read at the edge and handed to core as a value. Read
+    // before anything is appended so an unreadable file costs nothing.
+    const payloadFlag = stringFlag(flags, "--payload");
+    const material = payloadFlag === null ? null : readPayloadFlag(payloadFlag, cwd);
+    if (material !== null && !material.ok) {
+        return material.code === EXIT_IO
+            ? ioError(streams, json, material.message)
+            : usageError(streams, json, material.message, REQUEST_HELP);
+    }
+    // The action's declaration comes from the log's task.registered record, never
+    // from flags — see the module header.
+    const read = readGateRecords(logPath);
+    if (!read.ok)
+        return emitRefusal(streams, json, read);
+    const declared = registeredAction(read.records, task, actionKey);
+    if (!declared.ok)
+        return emitRefusal(streams, json, declared);
+    const options = gateOptions(flags, cwd);
+    const result = request(logPath, {
+        task,
+        actionKey,
+        cls: declared.action.class,
+        ...(declared.action.est_cost_usd === undefined
+            ? {}
+            : { est_cost_usd: declared.action.est_cost_usd }),
+        ...(declared.action.reversible === undefined
+            ? {}
+            : { reversible: declared.action.reversible }),
+        ...(declared.action.summary === undefined ? {} : { summary: declared.action.summary }),
+        ...(material === null || !material.ok ? {} : { payload: { value: material.value } }),
+    }, actor, options);
+    if (!result.ok)
+        return emitRefusal(streams, json, result);
+    if (json) {
+        emitJson(streams, {
+            ok: true,
+            task,
+            action_key: actionKey,
+            class: declared.action.class,
+            autonomy: result.autonomy,
+            proceed: result.proceed,
+            requested: result.record !== null,
+            seq: result.record === null ? null : result.record.seq,
+        });
+    }
+    else if (result.record === null) {
+        streams.out(`${actionKey}: ${result.autonomy} — no approval required, proceed to execution (no approval.* event is appended on this path)\n`);
+    }
+    else {
+        streams.out(`requested ${task} ${actionKey} at seq ${result.record.seq} (manual)\n`);
+    }
+    return EXIT_OK;
+}
+// ---------------------------------------------------------------------------
+// grant / reject / revoke
+// ---------------------------------------------------------------------------
+const DECISION_HELP = {
+    grant: GRANT_HELP,
+    reject: REJECT_HELP,
+    revoke: REVOKE_HELP,
+};
+export function commandDecide(decision, argv, streams, cwd) {
+    const helpText = DECISION_HELP[decision];
+    const outcome = front(argv, { ...COMMON_FLAGS, ...POLICY_FLAGS, "--as": "string", "--note": "string", "--reaction": "string" }, helpText, streams, cwd);
+    if (outcome.kind === "handled")
+        return outcome.code;
+    const { flags, positionals, json, logPath } = outcome;
+    const actionKey = positionals[0];
+    if (actionKey === undefined) {
+        return usageError(streams, json, "missing <action-key> argument", helpText);
+    }
+    const extra = positionals[1];
+    if (extra !== undefined) {
+        return usageError(streams, json, `unexpected argument ${JSON.stringify(extra)}`, helpText);
+    }
+    const asFlag = stringFlag(flags, "--as");
+    const actor = resolveHumanActor(asFlag === null ? {} : { actor: asFlag });
+    if (actor === null) {
+        if (asFlag !== null) {
+            return usageError(streams, json, `--as expects a human identity matching human:<id>, got ${JSON.stringify(asFlag)}; ${decision} is human-only and an agent: or system: actor cannot perform it`, helpText);
+        }
+        return usageError(streams, json, `no human identity: set ${HUMAN_ACTOR_ENV}=human:<id> or pass --as human:<id>`, helpText);
+    }
+    const note = stringFlag(flags, "--note");
+    // APRV-239. `--reaction` is a GRANT flag. A rejection or a revocation already
+    // has one field for the human's reason and that field is `--note`; a grade
+    // beside a refusal would be a second answer to a question that has one, and
+    // SPEC.md §5.2 says those two decisions carry no reaction at all. Refused at
+    // exit 2 rather than ignored, so a caller that meant something by it finds out.
+    const reactionFlag = stringFlag(flags, "--reaction");
+    if (reactionFlag !== null && decision !== "grant") {
+        return usageError(streams, json, `--reaction is a grant flag; ${decision} carries no reaction. Its reason IS its note, so put what you want to say in --note "<text>"`, helpText);
+    }
+    if (reactionFlag !== null && !isReaction(reactionFlag)) {
+        return usageError(streams, json, `--reaction expects one of ${REACTIONS.join(" | ")}, got ${JSON.stringify(reactionFlag)}`, helpText);
+    }
+    const decideOptions = {
+        ...gateOptions(flags, cwd),
+        ...(note === null ? {} : { note }),
+        ...(reactionFlag === null ? {} : { reaction: reactionFlag }),
+    };
+    const result = decide(logPath, actionKey, decision, actor, decideOptions);
+    if (!result.ok) {
+        // APRV-235, and the same append the channels make through
+        // `recordChannelDecision`: a person ran this verb, the gate would not take
+        // their answer, and the log used to say nothing about it at all. `decide`
+        // appends nothing on a refusal by design; the surface that collected the
+        // gesture is what knows a HUMAN produced it. On `policy-drift` this also
+        // withdraws the request the gate has just declared void, so it stops being
+        // offered on every other surface. Best effort: the refusal below is printed
+        // and the exit code is unchanged whatever this write does.
+        recordRefusedDecision(logPath, { actionKey, decision, actor, channel: "cli" }, {
+            code: result.code,
+            message: result.message,
+            ...(result.drift === undefined ? {} : { drift: result.drift }),
+        }, decideOptions);
+        return emitRefusal(streams, json, result);
+    }
+    // APRV-17: a grant mints the single-use token and this is the ONLY place it is
+    // ever printed. The log holds sha256(token) alone, so once this output is gone
+    // the value is unrecoverable — hence the warning beside it.
+    if (json) {
+        emitJson(streams, {
+            ok: true,
+            decision,
+            state: result.state,
+            action_key: actionKey,
+            seq: result.record.seq,
+            ...(result.token === undefined ? {} : { token: result.token }),
+        });
+    }
+    else {
+        streams.out(`${result.state} ${actionKey} at seq ${result.record.seq} by ${actor}\n`);
+        if (result.token !== undefined) {
+            // APRV-102: the rule-boxed panel of APRV-91's brief. The prose that used
+            // to follow the token said what the notice says in one line; what it also
+            // did was put the one unrecoverable value in this CLI on a line with a
+            // label in front of it, where a triple-click takes the label too.
+            streams.out(`${tokenPanel(style({ json }), actionKey, result.token)}\n`);
+        }
+    }
+    return EXIT_OK;
+}
+// ---------------------------------------------------------------------------
+// withdraw
+// ---------------------------------------------------------------------------
+/**
+ * `approval withdraw <task> --action <key>` — the requester takes its own
+ * pending request back (APRV-106).
+ *
+ * Agent-facing, unlike every other terminal verb here: the whole point is that
+ * the party who asked can stop asking, and the party who asks is usually an
+ * agent. Identity resolves through {@link resolvePrincipalActor}, and the gate
+ * then checks it against the actor on the `approval.requested` record — so
+ * passing `--as` does not let a caller withdraw someone else's request, it only
+ * lets the caller say who it is.
+ *
+ * The task id is positional and the action key is a flag, matching
+ * `approval request` exactly: the two verbs are the open and the close of one
+ * gesture, and an agent that can spell one can spell the other.
+ */
+export function commandWithdraw(argv, streams, cwd) {
+    const outcome = front(argv, {
+        ...COMMON_FLAGS,
+        ...POLICY_FLAGS,
+        "--as": "string",
+        "--action": "string",
+        "--reason": "string",
+        "--note": "string",
+    }, WITHDRAW_HELP, streams, cwd);
+    if (outcome.kind === "handled")
+        return outcome.code;
+    const { flags, positionals, json, logPath } = outcome;
+    const task = positionals[0];
+    if (task === undefined) {
+        return usageError(streams, json, "missing <task> argument", WITHDRAW_HELP);
+    }
+    const extra = positionals[1];
+    if (extra !== undefined) {
+        return usageError(streams, json, `unexpected argument ${JSON.stringify(extra)}`, WITHDRAW_HELP);
+    }
+    const actionKey = stringFlag(flags, "--action");
+    if (actionKey === null) {
+        return usageError(streams, json, "missing --action <key>", WITHDRAW_HELP);
+    }
+    const asFlag = stringFlag(flags, "--as");
+    const actor = resolvePrincipalActor(asFlag);
+    if (actor === null)
+        return identityUsageError(streams, json, asFlag, WITHDRAW_HELP);
+    // Closed vocabulary, refused at exit 2 rather than defaulted. An unrecognized
+    // reason silently becoming `cancelled` would put a word in the requester's
+    // mouth in an append-only log.
+    const reasonFlag = stringFlag(flags, "--reason");
+    if (reasonFlag !== null && !isWithdrawReason(reasonFlag)) {
+        return usageError(streams, json, `--reason expects one of ${WITHDRAW_REASONS.join(" | ")}, got ${JSON.stringify(reasonFlag)}`, WITHDRAW_HELP);
+    }
+    const note = stringFlag(flags, "--note");
+    const result = withdraw(logPath, actionKey, actor, {
+        ...gateOptions(flags, cwd),
+        ...(reasonFlag === null ? {} : { reason: reasonFlag }),
+        ...(note === null ? {} : { note }),
+    });
+    if (!result.ok)
+        return emitRefusal(streams, json, result);
+    const reason = reasonFlag ?? "cancelled";
+    if (json) {
+        emitJson(streams, {
+            ok: true,
+            task,
+            action_key: actionKey,
+            state: result.state,
+            reason,
+            seq: result.record.seq,
+        });
+    }
+    else {
+        streams.out(`withdrawn ${actionKey} at seq ${result.record.seq} by ${actor} (${reason})\n`);
+    }
+    return EXIT_OK;
+}
+// ---------------------------------------------------------------------------
+// expire
+// ---------------------------------------------------------------------------
+export function commandExpire(argv, streams, cwd) {
+    const outcome = front(argv, { ...COMMON_FLAGS, ...POLICY_FLAGS }, EXPIRE_HELP, streams, cwd);
+    if (outcome.kind === "handled")
+        return outcome.code;
+    const { flags, positionals, json, logPath } = outcome;
+    const actionKey = positionals[0];
+    if (actionKey === undefined) {
+        return usageError(streams, json, "missing <action-key> argument", EXPIRE_HELP);
+    }
+    const extra = positionals[1];
+    if (extra !== undefined) {
+        return usageError(streams, json, `unexpected argument ${JSON.stringify(extra)}`, EXPIRE_HELP);
+    }
+    const result = expire(logPath, actionKey, gateOptions(flags, cwd));
+    if (!result.ok)
+        return emitRefusal(streams, json, result);
+    if (json) {
+        emitJson(streams, {
+            ok: true,
+            action_key: actionKey,
+            actor: result.record.actor,
+            seq: result.record.seq,
+        });
+    }
+    else {
+        streams.out(`expired ${actionKey} at seq ${result.record.seq} by ${result.record.actor}\n`);
+    }
+    return EXIT_OK;
+}
+//# sourceMappingURL=gate.js.map

package/dist/src/cli/gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.js","sourceRoot":"","sources":["../../../src/cli/gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,OAAO,IAAI,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAEvE,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACvE,+EAA+E;AAC/E,+EAA+E;AAC/E,qDAAqD;AACrD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EACL,MAAM,EACN,MAAM,EACN,QAAQ,EACR,gBAAgB,EAChB,OAAO,EACP,eAAe,EACf,QAAQ,GAIT,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAiB,MAAM,WAAW,CAAC;AAC5E,OAAO,EACL,cAAc,EACd,OAAO,EACP,OAAO,EACP,cAAc,EACd,UAAU,GACX,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,WAAW,EACX,UAAU,EACV,aAAa,EACb,WAAW,EACX,YAAY,EACZ,WAAW,EACX,aAAa,GACd,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C,sEAAsE;AACtE,MAAM,eAAe,GAAG,oBAAoB,CAAC;AAE7C,MAAM,YAAY,GAA6B;IAC7C,OAAO,EAAE,QAAQ;IACjB,QAAQ,EAAE,SAAS;IACnB,QAAQ,EAAE,SAAS;IACnB,IAAI,EAAE,SAAS;CAChB,CAAC;AAEF,MAAM,YAAY,GAA6B;IAC7C,UAAU,EAAE,QAAQ;IACpB,OAAO,EAAE,QAAQ;CAClB,CAAC;AAEF,SAAS,SAAS,CAAC,IAAc;IAC/B,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,GAAW;IAC1C,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,UAAU,CAAC,OAAgB,EAAE,IAAa,EAAE,OAAe,EAAE,QAAgB;IACpF,IAAI,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;;QAC/E,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IACpD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,6EAA6E;AAC7E,SAAS,OAAO,CAAC,OAAgB,EAAE,IAAa,EAAE,OAAe;IAC/D,IAAI,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;;QAC5E,OAAO,CAAC,GAAG,CAAC,aAAa,OAAO,IAAI,CAAC,CAAC;IAC3C,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,eAAe,CAAC,OAAoB;IAC3C,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,gBAAgB,CAAC;QACtB,KAAK,sBAAsB,CAAC;QAC5B,yEAAyE;QACzE,yEAAyE;QACzE,0EAA0E;QAC1E,eAAe;QACf,KAAK,sBAAsB;YACzB,OAAO,OAAO,CAAC;QACjB,KAAK,eAAe;YAClB,OAAO,cAAc,CAAC;QACxB,KAAK,eAAe;YAClB,QAAQ,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;gBAC7B,KAAK,cAAc;oBACjB,OAAO,cAAc,CAAC;gBACxB,KAAK,IAAI,CAAC;gBACV,KAAK,cAAc;oBACjB,OAAO,OAAO,CAAC;gBACjB;oBACE,OAAO,cAAc,CAAC;YAC1B,CAAC;QACH;YACE,OAAO,cAAc,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,mEAAmE;AACnE,SAAS,WAAW,CAAC,OAAgB,EAAE,IAAa,EAAE,OAAoB;IACxE,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,KAAK,GAA4B,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;QACxF,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;YAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;QACnE,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;YAAE,KAAK,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC;QAChE,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS;YAAE,KAAK,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;QACzE,8EAA8E;QAC9E,2EAA2E;QAC3E,sEAAsE;QACtE,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;YAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;QACnE,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;YAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;QACnE,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;YAAE,KAAK,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC;QACpE,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC;IAC3D,CAAC;SAAM,CAAC;QACN,sEAAsE;QACtE,sEAAsE;QACtE,yEAAyE;QACzE,sEAAsE;QACtE,OAAO,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,QAAQ,CAAC,OAAgB,EAAE,KAAc;IAChD,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC5C,CAAC;AAED,iFAAiF;AACjF,SAAS,WAAW,CAClB,KAAuC,EACvC,GAAW;IAEX,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC3C,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;IAChF,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;AAC9E,CAAC;AAWD,SAAS,KAAK,CACZ,IAAc,EACd,IAA8B,EAC9B,QAAgB,EAChB,OAAgB,EAChB,GAAW;IAEX,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;IACxF,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;QACrE,OAAO,CAAC,GAAG,CAAC,GAAG,QAAQ,IAAI,CAAC,CAAC;QAC7B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC5C,CAAC;IACD,OAAO;QACL,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,IAAI;QACJ,OAAO,EAAE,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,gBAAgB,EAAE,GAAG,CAAC;KAC/E,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,qBAAqB,CAAC,MAAqB;IAClD,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IACzE,OAAO,iBAAiB,EAAE,CAAC;AAC7B,CAAC;AAED,8EAA8E;AAC9E,WAAW;AACX,8EAA8E;AAE9E,MAAM,UAAU,eAAe,CAAC,IAAc,EAAE,OAAgB,EAAE,GAAW;IAC3E,MAAM,OAAO,GAAG,KAAK,CACnB,IAAI,EACJ,EAAE,GAAG,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,EACrC,aAAa,EACb,OAAO,EACP,GAAG,CACJ,CAAC;IACF,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,IAAI,CAAC;IACpD,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAEtD,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,8BAA8B,EAAE,aAAa,CAAC,CAAC;IACxG,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,uBAAuB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC;IAClG,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,kBAAkB,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;IAEpF,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IACvE,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAE1D,IAAI,IAAI,EAAE,CAAC;QACT,QAAQ,CAAC,OAAO,EAAE;YAChB,EAAE,EAAE,IAAI;YACR,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG;YACtB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM;SAC/B,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CACT,cAAc,MAAM,CAAC,IAAI,WAAW,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,OAAO,CAAC,MAAM,cAAc,CAC9F,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,kBAAkB,CACzB,OAAgB,EAChB,IAAa,EACb,MAAqB,EACrB,QAAgB;IAEhB,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO,UAAU,CACf,OAAO,EACP,IAAI,EACJ,8CAA8C,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,EACtE,QAAQ,CACT,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CACf,OAAO,EACP,IAAI,EACJ,oBAAoB,eAAe,kDAAkD,EACrF,QAAQ,CACT,CAAC;AACJ,CAAC;AAUD;;;;;;;;;;GAUG;AACH,SAAS,eAAe,CAAC,IAAY,EAAE,GAAW;IAChD,MAAM,MAAM,GAAG,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,aAAa,KAAK,uBACzB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE;SACH,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,EAAE,CAAC;IACzD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,aAAa,KAAK,uBACzB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,0GAA0G;SAC3G,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAc,EAAE,OAAgB,EAAE,GAAW;IAC1E,MAAM,OAAO,GAAG,KAAK,CACnB,IAAI,EACJ;QACE,GAAG,YAAY;QACf,GAAG,YAAY;QACf,MAAM,EAAE,QAAQ;QAChB,UAAU,EAAE,QAAQ;QACpB,WAAW,EAAE,QAAQ;KACtB,EACD,YAAY,EACZ,OAAO,EACP,GAAG,CACJ,CAAC;IACF,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,IAAI,CAAC;IACpD,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAEtD,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,yBAAyB,EAAE,YAAY,CAAC,CAAC;IAClG,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,uBAAuB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;IACjG,CAAC;IACD,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAChD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,wBAAwB,EAAE,YAAY,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,kBAAkB,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;IAEnF,2EAA2E;IAC3E,mEAAmE;IACnE,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IACjF,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACtC,OAAO,QAAQ,CAAC,IAAI,KAAK,OAAO;YAC9B,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC;YAC1C,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAChE,CAAC;IAED,8EAA8E;IAC9E,sCAAsC;IACtC,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IACjE,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAE9D,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,OAAO,CACpB,OAAO,EACP;QACE,IAAI;QACJ,SAAS;QACT,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK;QAC1B,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS;YAC5C,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QACnD,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS;YAC1C,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QAC/C,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACtF,GAAG,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;KACrF,EACD,KAAK,EACL,OAAO,CACR,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAE1D,IAAI,IAAI,EAAE,CAAC;QACT,QAAQ,CAAC,OAAO,EAAE;YAChB,EAAE,EAAE,IAAI;YACR,IAAI;YACJ,UAAU,EAAE,SAAS;YACrB,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK;YAC5B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,MAAM,CAAC,MAAM,KAAK,IAAI;YACjC,GAAG,EAAE,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG;SACvD,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAClC,OAAO,CAAC,GAAG,CACT,GAAG,SAAS,KAAK,MAAM,CAAC,QAAQ,gGAAgG,CACjI,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,IAAI,SAAS,WAAW,MAAM,CAAC,MAAM,CAAC,GAAG,aAAa,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,8EAA8E;AAC9E,0BAA0B;AAC1B,8EAA8E;AAE9E,MAAM,aAAa,GAAuC;IACxD,KAAK,EAAE,UAAU;IACjB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,WAAW;CACpB,CAAC;AAEF,MAAM,UAAU,aAAa,CAC3B,QAAkB,EAClB,IAAc,EACd,OAAgB,EAChB,GAAW;IAEX,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,KAAK,CACnB,IAAI,EACJ,EAAE,GAAG,YAAY,EAAE,GAAG,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,EAClG,QAAQ,EACR,OAAO,EACP,GAAG,CACJ,CAAC;IACF,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,IAAI,CAAC;IACpD,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAEtD,MAAM,SAAS,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,+BAA+B,EAAE,QAAQ,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,uBAAuB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC7F,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1E,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,UAAU,CACf,OAAO,EACP,IAAI,EACJ,0DAA0D,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,QAAQ,iEAAiE,EAC9J,QAAQ,CACT,CAAC;QACJ,CAAC;QACD,OAAO,UAAU,CACf,OAAO,EACP,IAAI,EACJ,0BAA0B,eAAe,qCAAqC,EAC9E,QAAQ,CACT,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAEzC,8EAA8E;IAC9E,2EAA2E;IAC3E,4EAA4E;IAC5E,6EAA6E;IAC7E,gFAAgF;IAChF,MAAM,YAAY,GAAG,UAAU,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACrD,IAAI,YAAY,KAAK,IAAI,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAClD,OAAO,UAAU,CACf,OAAO,EACP,IAAI,EACJ,+BAA+B,QAAQ,8FAA8F,EACrI,QAAQ,CACT,CAAC;IACJ,CAAC;IACD,IAAI,YAAY,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACvD,OAAO,UAAU,CACf,OAAO,EACP,IAAI,EACJ,6BAA6B,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,EACzF,QAAQ,CACT,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG;QACpB,GAAG,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC;QAC1B,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QAClC,GAAG,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;KAC7D,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;IAC1E,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,0DAA0D;QAC1D,2EAA2E;QAC3E,0EAA0E;QAC1E,yEAAyE;QACzE,yEAAyE;QACzE,2EAA2E;QAC3E,4EAA4E;QAC5E,2DAA2D;QAC3D,qBAAqB,CACnB,OAAO,EACP,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAC9C;YACE,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;SAC/D,EACD,aAAa,CACd,CAAC;QACF,OAAO,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5C,CAAC;IAED,+EAA+E;IAC/E,+EAA+E;IAC/E,4DAA4D;IAC5D,IAAI,IAAI,EAAE,CAAC;QACT,QAAQ,CAAC,OAAO,EAAE;YAChB,EAAE,EAAE,IAAI;YACR,QAAQ;YACR,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,UAAU,EAAE,SAAS;YACrB,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG;YACtB,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;SAC/D,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,IAAI,SAAS,WAAW,MAAM,CAAC,MAAM,CAAC,GAAG,OAAO,KAAK,IAAI,CAAC,CAAC;QACtF,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/B,yEAAyE;YACzE,0EAA0E;YAC1E,uEAAuE;YACvE,kEAAkE;YAClE,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,8EAA8E;AAC9E,WAAW;AACX,8EAA8E;AAE9E;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,eAAe,CAAC,IAAc,EAAE,OAAgB,EAAE,GAAW;IAC3E,MAAM,OAAO,GAAG,KAAK,CACnB,IAAI,EACJ;QACE,GAAG,YAAY;QACf,GAAG,YAAY;QACf,MAAM,EAAE,QAAQ;QAChB,UAAU,EAAE,QAAQ;QACpB,UAAU,EAAE,QAAQ;QACpB,QAAQ,EAAE,QAAQ;KACnB,EACD,aAAa,EACb,OAAO,EACP,GAAG,CACJ,CAAC;IACF,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,IAAI,CAAC;IACpD,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAEtD,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,yBAAyB,EAAE,aAAa,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,uBAAuB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC;IAClG,CAAC;IACD,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAChD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,wBAAwB,EAAE,aAAa,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,kBAAkB,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;IAEpF,8EAA8E;IAC9E,2EAA2E;IAC3E,+BAA+B;IAC/B,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACjD,IAAI,UAAU,KAAK,IAAI,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,CAAC;QACzD,OAAO,UAAU,CACf,OAAO,EACP,IAAI,EACJ,2BAA2B,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,EAC5F,aAAa,CACd,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAEzC,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE;QACjD,GAAG,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC;QAC1B,GAAG,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QACtD,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;KACnC,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAE1D,MAAM,MAAM,GAAG,UAAU,IAAI,WAAW,CAAC;IACzC,IAAI,IAAI,EAAE,CAAC;QACT,QAAQ,CAAC,OAAO,EAAE;YAChB,EAAE,EAAE,IAAI;YACR,IAAI;YACJ,UAAU,EAAE,SAAS;YACrB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,MAAM;YACN,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG;SACvB,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CACT,aAAa,SAAS,WAAW,MAAM,CAAC,MAAM,CAAC,GAAG,OAAO,KAAK,KAAK,MAAM,KAAK,CAC/E,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,8EAA8E;AAC9E,SAAS;AACT,8EAA8E;AAE9E,MAAM,UAAU,aAAa,CAAC,IAAc,EAAE,OAAgB,EAAE,GAAW;IACzE,MAAM,OAAO,GAAG,KAAK,CACnB,IAAI,EACJ,EAAE,GAAG,YAAY,EAAE,GAAG,YAAY,EAAE,EACpC,WAAW,EACX,OAAO,EACP,GAAG,CACJ,CAAC;IACF,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,IAAI,CAAC;IACpD,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAEtD,MAAM,SAAS,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,+BAA+B,EAAE,WAAW,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,uBAAuB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;IAChG,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IACnE,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAE1D,IAAI,IAAI,EAAE,CAAC;QACT,QAAQ,CAAC,OAAO,EAAE;YAChB,EAAE,EAAE,IAAI;YACR,UAAU,EAAE,SAAS;YACrB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK;YAC1B,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG;SACvB,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,WAAW,SAAS,WAAW,MAAM,CAAC,MAAM,CAAC,GAAG,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}