approval-md 0.1.0 → 0.3.0

package/dist/src/core/channel-owner.js

@@ -0,0 +1,358 @@
+/**
+ * Which instance owns which bot (APRV-390).
+ *
+ * APRV-178 scoped the OS keystore's ITEM NAMES to an instance, which closed the
+ * half of the incident where two gates read one item. It did not close the
+ * other half: two instances can still be handed the same bot token under two
+ * perfectly distinct names. `core/instance.ts` answers its questions from names
+ * alone, on purpose, and a name cannot tell you that two different names hold
+ * one value.
+ *
+ * Observed again on 2026-09-19: the primary daemon and the demo gate in
+ * `~/demo-gate` both long-polled one bot, both printed `getUpdates` HTTP 409
+ * Conflict on every poll, and neither phone channel worked. The only thing that
+ * distinguishes those two processes is what the Bot API says the token IS, and
+ * the only call that asks is `getMe`. So this module records `getMe`'s answer
+ * and makes the second claim on one bot a refusal instead of a 409.
+ *
+ * ## The two records
+ *
+ * ```
+ * <instance>/.approval/channel-owner.json     one instance's own bots
+ * <state dir>/approval/bots.json              every instance's claims, per machine
+ * ```
+ *
+ * The per-instance file is this instance's copy of what it probed, gitignored
+ * and rebuildable by one `getMe`. The registry is the part that has to be
+ * SHARED, because the question is "does anything else on this machine hold this
+ * bot", and no file inside one instance can answer that.
+ *
+ * ## Why the registry is a plain file, and why it is not under `.approval`
+ *
+ * **Not the OS keystore.** Every reader of this registry is a diagnostic or a
+ * start-up preflight, and neither may block on an unlock dialog — that is
+ * `NON_RESOLVING_RUNNER`'s rule in `core/env-file.ts`, and `approval doctor`
+ * already answers the whole keychain-scope row from names for exactly this
+ * reason. A machine with no keystore backend at all still needs this refusal,
+ * and would get nothing from a store it does not have. And there is no secret
+ * here to justify one: a bot id, a `@username`, an instance id and a directory
+ * path are all things `.approval/env` carries in the open.
+ *
+ * **Not a `.approval` directory under the home directory**, which was the other
+ * candidate. This project's own policy reserves anything under `.approval/` to
+ * the human's ceremony (`policy.core`, human-only), and the hook classifier
+ * applies that to the name wherever it appears. A file the runtime rewrites on
+ * every listener start does not belong in the directory the policy holds shut.
+ *
+ * So it goes where this runtime already puts per-user state that is derived
+ * rather than evidence: the same platform split `cli/setup-service.ts` uses for
+ * a service's console output. {@link APPROVAL_STATE_DIR_ENV} overrides it, which
+ * is what the test suite sets — a suite that wrote the operator's real registry
+ * would be the mistake the Muse probe's suite made with its live pointer.
+ *
+ * ## What it is not
+ *
+ * Not evidence, and never consulted by an enforcement path. Nothing in here
+ * widens a permission, and losing the whole file costs one re-probe. It answers
+ * one question — "is another instance on this machine already polling this
+ * bot?" — and that answer only ever produces a REFUSAL. A registry that could
+ * be edited into granting something would be a policy file; this one can be
+ * edited into letting a 409 happen, which is the state without it.
+ */
+import { mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+import { instanceHomeFor, instanceIdFor } from "./instance.js";
+/** The per-instance record's filename, inside `.approval/`. Gitignored. */
+export const CHANNEL_OWNER_FILE = "channel-owner.json";
+/** The per-machine registry's filename, inside the state directory. */
+export const BOT_REGISTRY_FILE = "bots.json";
+/**
+ * Where the per-machine registry lives, overriding the platform default.
+ *
+ * Set by the test suite, and available to an operator running two gates under
+ * one account who wants them in separate state trees. An empty or unset value
+ * means the platform default.
+ */
+export const APPROVAL_STATE_DIR_ENV = "APPROVAL_STATE_DIR";
+/** The only format version this build writes, and the only one it reads. */
+export const CHANNEL_OWNER_VERSION = 1;
+/**
+ * One Bot API base, reduced so two spellings of one deployment compare equal.
+ *
+ * Lowercased and stripped of trailing slashes, which are the two ways the same
+ * base is written. Nothing more is attempted: a host that resolves to the same
+ * server under two names is two names here, and that is the safe direction of
+ * the error — two identities, so the second gate is allowed to start, exactly
+ * as it was before this module existed.
+ */
+export function normaliseApiBase(apiBase) {
+    return apiBase.trim().replace(/\/+$/u, "").toLowerCase();
+}
+// ---------------------------------------------------------------------------
+// Paths
+// ---------------------------------------------------------------------------
+/**
+ * The per-user state directory for this runtime.
+ *
+ * The split is `cli/setup-service.ts`'s `defaultLogsDir`, one level up: macOS
+ * keeps user application state under `Library/Application Support` and Linux
+ * under `.local/state` (XDG's state home, which is where "state that should
+ * persist between restarts but is not config and is not a cache" belongs).
+ */
+export function stateDirFor(env = process.env) {
+    const override = env[APPROVAL_STATE_DIR_ENV];
+    if (override !== undefined && override.length > 0)
+        return override;
+    if (process.platform === "darwin") {
+        return join(homedir(), "Library", "Application Support", "approval");
+    }
+    const xdg = env["XDG_STATE_HOME"];
+    const base = xdg !== undefined && xdg.length > 0 ? xdg : join(homedir(), ".local", "state");
+    return join(base, "approval");
+}
+/** The per-machine registry's path. */
+export function registryPathFor(env = process.env) {
+    return join(stateDirFor(env), BOT_REGISTRY_FILE);
+}
+/** The per-instance record's path, for the instance owning `logPath`. */
+export function ownerPathFor(logPath) {
+    return join(instanceHomeFor(logPath), CHANNEL_OWNER_FILE);
+}
+// ---------------------------------------------------------------------------
+// Reading
+// ---------------------------------------------------------------------------
+/**
+ * Parse one claim, or `null`.
+ *
+ * Strict field by field, and `null` for anything short of complete: a
+ * half-readable claim is one this build cannot say whose bot it names, and the
+ * safe direction for THAT is to forget it (the preflight then re-probes and
+ * re-claims) rather than to refuse a start-up over a row nobody can read.
+ */
+function parseClaim(raw) {
+    if (typeof raw !== "object" || raw === null)
+        return null;
+    const record = raw;
+    const channel = record["channel"];
+    const botId = record["bot_id"];
+    const username = record["username"];
+    const apiBase = record["api_base"];
+    const instanceId = record["instance_id"];
+    const instanceHome = record["instance_home"];
+    const claimedAt = record["claimed_at"];
+    if (channel !== "telegram")
+        return null;
+    if (typeof botId !== "string" || botId.length === 0)
+        return null;
+    if (typeof username !== "string")
+        return null;
+    if (typeof apiBase !== "string" || apiBase.length === 0)
+        return null;
+    if (typeof instanceId !== "string" || instanceId.length === 0)
+        return null;
+    if (typeof instanceHome !== "string" || instanceHome.length === 0)
+        return null;
+    if (typeof claimedAt !== "string")
+        return null;
+    return { channel, botId, username, apiBase, instanceId, instanceHome, claimedAt };
+}
+function serialiseClaim(claim) {
+    return {
+        channel: claim.channel,
+        bot_id: claim.botId,
+        username: claim.username,
+        api_base: claim.apiBase,
+        instance_id: claim.instanceId,
+        instance_home: claim.instanceHome,
+        claimed_at: claim.claimedAt,
+    };
+}
+function readJson(path) {
+    let raw;
+    try {
+        raw = readFileSync(path, "utf8");
+    }
+    catch {
+        return null;
+    }
+    try {
+        return JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Every claim recorded on this machine, newest write last.
+ *
+ * An unreadable, absent or malformed registry is an EMPTY one. It is a cache of
+ * probes, so "I do not know of any claim" is the honest answer and it costs one
+ * `getMe` to rebuild — whereas failing a listener start-up because a JSON file
+ * in a state directory got truncated would take the phone channel down for a
+ * reason that has nothing to do with the gate.
+ */
+export function readRegistry(env = process.env) {
+    const parsed = readJson(registryPathFor(env));
+    if (typeof parsed !== "object" || parsed === null)
+        return [];
+    const record = parsed;
+    if (record["version"] !== CHANNEL_OWNER_VERSION)
+        return [];
+    const claims = record["claims"];
+    if (!Array.isArray(claims))
+        return [];
+    return claims
+        .map((entry) => parseClaim(entry))
+        .filter((claim) => claim !== null);
+}
+/** What this instance last recorded about its own channels. */
+export function readOwner(logPath) {
+    const parsed = readJson(ownerPathFor(logPath));
+    if (typeof parsed !== "object" || parsed === null)
+        return [];
+    const record = parsed;
+    if (record["version"] !== CHANNEL_OWNER_VERSION)
+        return [];
+    const claims = record["claims"];
+    if (!Array.isArray(claims))
+        return [];
+    return claims
+        .map((entry) => parseClaim(entry))
+        .filter((claim) => claim !== null);
+}
+/**
+ * The claim this instance holds on `channel`, or `null`.
+ *
+ * Read from the per-instance file, which is what `approval channel telegram
+ * health` and `approval doctor` report from: both are offline, and both must
+ * answer without a network call or a keystore lookup.
+ */
+export function ownedBot(logPath, channel) {
+    return readOwner(logPath).find((claim) => claim.channel === channel) ?? null;
+}
+/**
+ * Every OTHER instance on this machine that has claimed `botId`.
+ *
+ * "Other" is decided by instance id, so a re-run in the same instance is never
+ * reported against itself, and two directories that reach one gate by different
+ * spellings are two instances — which is `core/instance.ts`'s deliberate choice
+ * of the safe error direction, and this module inherits it rather than adding a
+ * second rule that could disagree.
+ */
+export function otherOwnersOf(logPath, botId, apiBase, env = process.env) {
+    const mine = instanceIdFor(logPath);
+    const base = normaliseApiBase(apiBase);
+    return readRegistry(env).filter((claim) => claim.botId === botId && normaliseApiBase(claim.apiBase) === base && claim.instanceId !== mine);
+}
+/**
+ * One sentence naming who else holds this bot, for a refusal or a 409 report.
+ *
+ * Exported because three surfaces print it — the listener preflight, `approval
+ * setup channel telegram`, and the runtime 409 report — and three spellings of
+ * "another instance owns this bot" is three chances for them to name different
+ * instances for one fact.
+ */
+export function describeOwners(owners) {
+    return owners
+        .map((claim) => `${claim.instanceHome} (instance ${claim.instanceId})`)
+        .join(" and ");
+}
+/**
+ * Record this instance as `identity`'s owner, unless somebody else already is.
+ *
+ * Read-then-write rather than compare-and-append: this is a local cache of
+ * probes and not the log, so the property it needs is "two instances racing
+ * both see a refusal or one of them wins", which a same-machine read-then-write
+ * over a file rewritten in whole gives. It is deliberately NOT passed through
+ * the log's append path — nothing here is evidence, and putting a re-probe on
+ * every listener start into the hash chain would be writing a heartbeat into
+ * the record the project's whole argument says must stay small and meaningful.
+ *
+ * The refusal names the other instance, because "this bot is taken" without
+ * saying by what is a message that sends an operator looking through `ps`.
+ */
+export function claimBot(logPath, identity, options = {}) {
+    const env = options.env ?? process.env;
+    const now = options.now ?? (() => new Date());
+    const instanceId = instanceIdFor(logPath);
+    const instanceHome = instanceHomeFor(logPath);
+    const registry = readRegistry(env);
+    const base = normaliseApiBase(identity.apiBase);
+    const owners = registry.filter((claim) => claim.botId === identity.botId &&
+        normaliseApiBase(claim.apiBase) === base &&
+        claim.instanceId !== instanceId);
+    if (owners.length > 0) {
+        return {
+            ok: false,
+            code: "bot-owned-elsewhere",
+            owners,
+            message: `${identity.username} (bot id ${identity.botId}) is already recorded on this machine as ${describeOwners(owners)}, and this instance is ${instanceHome} (instance ${instanceId}). Two gates polling one bot is the HTTP 409 loop: their getUpdates offsets acknowledge each other's updates and an approval tap is answered by whichever listener asked first. Give this instance its own bot from @BotFather, or retire the other instance`,
+        };
+    }
+    const claim = {
+        ...identity,
+        apiBase: base,
+        instanceId,
+        instanceHome,
+        claimedAt: now().toISOString(),
+    };
+    // This instance's rows for this channel are replaced, never appended to: an
+    // instance pointed at a new bot owns the new one and stops owning the old,
+    // and a registry that accumulated every bot an instance ever had would refuse
+    // a bot the operator deliberately moved between two gates.
+    const kept = registry.filter((entry) => !(entry.instanceId === instanceId && entry.channel === identity.channel));
+    writeRegistry([...kept, claim], env);
+    writeOwner(logPath, claim);
+    return { ok: true, claim };
+}
+/**
+ * Drop this instance's claim on `channel`, from both records.
+ *
+ * Used by nothing on the happy path. It exists because the alternative to a way
+ * out is an operator hand-editing a JSON file in a state directory to recover
+ * from a stale claim, and a recovery step that is not a command is a recovery
+ * step that gets done wrong.
+ */
+export function releaseBot(logPath, channel, env = process.env) {
+    const instanceId = instanceIdFor(logPath);
+    writeRegistry(readRegistry(env).filter((claim) => !(claim.instanceId === instanceId && claim.channel === channel)), env);
+    writeOwnerClaims(logPath, readOwner(logPath).filter((claim) => claim.channel !== channel));
+}
+// ---------------------------------------------------------------------------
+// Writing
+// ---------------------------------------------------------------------------
+/**
+ * Write `path` by rename, so a reader never sees half a file.
+ *
+ * A best-effort write: a state directory that cannot be created (a read-only
+ * home, a container with no writable state tree) leaves the runtime exactly
+ * where it was before this module existed, which is a machine that can still
+ * get a 409. Failing a listener start-up over it would trade a recoverable
+ * conflict for an unrecoverable one.
+ */
+function writeAtomic(path, body) {
+    try {
+        mkdirSync(dirname(path), { recursive: true });
+        const temporary = `${path}.${String(process.pid)}.tmp`;
+        writeFileSync(temporary, body, { encoding: "utf8", mode: 0o600 });
+        renameSync(temporary, path);
+    }
+    catch {
+        /* see the doc above: the registry is a cache, and its absence is the status quo ante */
+    }
+}
+function writeRegistry(claims, env) {
+    const body = `${JSON.stringify({ version: CHANNEL_OWNER_VERSION, claims: claims.map((claim) => serialiseClaim(claim)) }, null, 2)}\n`;
+    writeAtomic(registryPathFor(env), body);
+}
+function writeOwnerClaims(logPath, claims) {
+    const body = `${JSON.stringify({ version: CHANNEL_OWNER_VERSION, claims: claims.map((claim) => serialiseClaim(claim)) }, null, 2)}\n`;
+    writeAtomic(ownerPathFor(logPath), body);
+}
+/** Record one claim in this instance's own file, replacing its channel's row. */
+function writeOwner(logPath, claim) {
+    const kept = readOwner(logPath).filter((entry) => entry.channel !== claim.channel);
+    writeOwnerClaims(logPath, [...kept, claim]);
+}
+//# sourceMappingURL=channel-owner.js.map

package/dist/src/core/channel-owner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"channel-owner.js","sourceRoot":"","sources":["../../../src/core/channel-owner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4DG;AAEH,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE/D,2EAA2E;AAC3E,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAEvD,uEAAuE;AACvE,MAAM,CAAC,MAAM,iBAAiB,GAAG,WAAW,CAAC;AAE7C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,oBAAoB,CAAC;AAE3D,4EAA4E;AAC5E,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAiCvC;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAC3D,CAAC;AAYD,8EAA8E;AAC9E,QAAQ;AACR,8EAA8E;AAE9E;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG;IAC9D,MAAM,QAAQ,GAAG,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAC7C,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IACnE,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,qBAAqB,EAAE,UAAU,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC5F,OAAO,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;AAChC,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,eAAe,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG;IAClE,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,iBAAiB,CAAC,CAAC;AACnD,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,OAAO,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,kBAAkB,CAAC,CAAC;AAC5D,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E;;;;;;;GAOG;AACH,SAAS,UAAU,CAAC,GAAY;IAC9B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACzD,MAAM,MAAM,GAAG,GAA8B,CAAC;IAC9C,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IACnC,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;IACzC,MAAM,YAAY,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IACvC,IAAI,OAAO,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrE,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3E,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/E,IAAI,OAAO,SAAS,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC/C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;AACpF,CAAC;AAED,SAAS,cAAc,CAAC,KAAe;IACrC,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,KAAK,CAAC,KAAK;QACnB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,QAAQ,EAAE,KAAK,CAAC,OAAO;QACvB,WAAW,EAAE,KAAK,CAAC,UAAU;QAC7B,aAAa,EAAE,KAAK,CAAC,YAAY;QACjC,UAAU,EAAE,KAAK,CAAC,SAAS;KAC5B,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG;IAC/D,MAAM,MAAM,GAAG,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAC7D,MAAM,MAAM,GAAG,MAAiC,CAAC;IACjD,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,qBAAqB;QAAE,OAAO,EAAE,CAAC;IAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC;IACtC,OAAO,MAAM;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;SACjC,MAAM,CAAC,CAAC,KAAK,EAAqB,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;AAC1D,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,SAAS,CAAC,OAAe;IACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAC7D,MAAM,MAAM,GAAG,MAAiC,CAAC;IACjD,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,qBAAqB;QAAE,OAAO,EAAE,CAAC;IAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC;IACtC,OAAO,MAAM;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;SACjC,MAAM,CAAC,CAAC,KAAK,EAAqB,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ,CAAC,OAAe,EAAE,OAAqB;IAC7D,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,IAAI,IAAI,CAAC;AAC/E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAC3B,OAAe,EACf,KAAa,EACb,OAAe,EACf,GAAG,GAAsB,OAAO,CAAC,GAAG;IAEpC,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACvC,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,MAAM,CAC7B,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,KAAK,KAAK,KAAK,IAAI,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,CACjG,CAAC;AACJ,CAAC;AAaD;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,MAA2B;IACxD,OAAO,MAAM;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,YAAY,cAAc,KAAK,CAAC,UAAU,GAAG,CAAC;SACtE,IAAI,CAAC,OAAO,CAAC,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,QAAQ,CACtB,OAAe,EACf,QAAqB,EACrB,OAAO,GAAkD,EAAE;IAE3D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAS,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,YAAY,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAE9C,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAC5B,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK;QAC9B,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI;QACxC,KAAK,CAAC,UAAU,KAAK,UAAU,CAClC,CAAC;IACF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,qBAAqB;YAC3B,MAAM;YACN,OAAO,EAAE,GAAG,QAAQ,CAAC,QAAQ,YAAY,QAAQ,CAAC,KAAK,4CAA4C,cAAc,CAAC,MAAM,CAAC,0BAA0B,YAAY,cAAc,UAAU,8PAA8P;SACtb,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAa;QACtB,GAAG,QAAQ;QACX,OAAO,EAAE,IAAI;QACb,UAAU;QACV,YAAY;QACZ,SAAS,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE;KAC/B,CAAC;IAEF,4EAA4E;IAC5E,2EAA2E;IAC3E,8EAA8E;IAC9E,2DAA2D;IAC3D,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAC1B,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,KAAK,UAAU,IAAI,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,CAAC,CACpF,CAAC;IACF,aAAa,CAAC,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;IACrC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC3B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CACxB,OAAe,EACf,OAAqB,EACrB,GAAG,GAAsB,OAAO,CAAC,GAAG;IAEpC,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IAC1C,aAAa,CACX,YAAY,CAAC,GAAG,CAAC,CAAC,MAAM,CACtB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,KAAK,UAAU,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,CAC3E,EACD,GAAG,CACJ,CAAC;IACF,gBAAgB,CACd,OAAO,EACP,SAAS,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,CAChE,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E;;;;;;;;GAQG;AACH,SAAS,WAAW,CAAC,IAAY,EAAE,IAAY;IAC7C,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;QACvD,aAAa,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClE,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,wFAAwF;IAC1F,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,MAA2B,EAAE,GAAsB;IACxE,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAC5B,EAAE,OAAO,EAAE,qBAAqB,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,EACxF,IAAI,EACJ,CAAC,CACF,IAAI,CAAC;IACN,WAAW,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe,EAAE,MAA2B;IACpE,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAC5B,EAAE,OAAO,EAAE,qBAAqB,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,EACxF,IAAI,EACJ,CAAC,CACF,IAAI,CAAC;IACN,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED,iFAAiF;AACjF,SAAS,UAAU,CAAC,OAAe,EAAE,KAAe;IAClD,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC,CAAC;IACnF,gBAAgB,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;AAC9C,CAAC"}