approval-md 0.2.0 → 0.3.0

package/dist/src/codex/broker.js

@@ -0,0 +1,548 @@
+/**
+ * The policy-bound Codex workspace change broker (APRV-325.2).
+ *
+ * APRV-325.1 shipped preparation, APRV-325.2.1 shipped the read-only planner,
+ * and this module is the thing both were for: the ONLY way a change reaches a
+ * canonical workspace in a constrained Codex session. It is deliberately not a
+ * mode of `src/mcp/server.ts`. That server publishes the whole agent verb
+ * catalog, including `run`, and a broker that lived inside it would be one
+ * unchecked flag away from the surface it exists to replace.
+ *
+ * ## What the caller may say, and what it may not
+ *
+ * A caller supplies exactly two things: a bounded list of typed operations, and
+ * the SHA-256 it believes the policy currently has. Everything else — the
+ * acting identity, the workspace root, the policy file, the log, the schema
+ * directory, the classes, the reversibility, the sandbox posture — comes from
+ * the installation manifest, which lives under a root-owned install root that
+ * no agent principal can write (`codex/manifest.ts`, `codex/trust.ts`).
+ * {@link parseBrokerInput} refuses an unknown key rather than ignoring it, so a
+ * caller that tries to name its own actor is told no instead of being quietly
+ * overridden, and {@link BROKER_TOOLS} is a POSITIVE allowlist of one: a name
+ * not on it is refused whether or not any surface advertised it.
+ *
+ * ## One action per class, never collapsed
+ *
+ * The planner returns one action leg per distinct path class, and this module
+ * registers, requests, starts and closes each of them separately. Collapsing
+ * four classes into one "workspace write" would lose exactly what the policy
+ * is for: the class is what the operator's roster, budget and autonomy are
+ * keyed to, and an action that reports a cheaper class than it performs is the
+ * self-reporting SPEC.md §11.1 invariant 4 forbids.
+ *
+ * ## The order, and why every step of it is load-bearing
+ *
+ * Read policy once and hash those exact bytes → check attestation against
+ * VERIFIED records → refuse if the caller's expected digest differs → plan →
+ * register the legs → authorize EVERY leg (policy, or a real grant token) →
+ * start EVERY leg → take custody → revalidate the plan UNDER custody → commit
+ * durably → read the workspace back → close every leg with what the reading
+ * said.
+ *
+ * Two of those orderings are the hard-won ones from the 2026-09-09 handover.
+ * **Every leg starts before any byte moves**, so a leg that refuses at start
+ * leaves a workspace that is untouched by construction rather than by cleanup;
+ * the already-started legs are closed `execution.failed` and the filesystem was
+ * never entered. And **revalidation happens under custody**, after the last
+ * start, because a revalidation that precedes the lock proves only what was
+ * true before another writer could act.
+ *
+ * ## Outcomes are read, not remembered
+ *
+ * `codex/workspace-commit.ts` classifies the workspace by reading it back
+ * against the journal. All-after closes every leg `execution.completed`;
+ * all-before closes every leg `execution.failed`; anything else — a partial
+ * apply, a failed rollback, an endpoint that could not be read — closes every
+ * leg `execution.indeterminate` with reason `workspace-commit-unknown`, the
+ * reason this task added to SPEC.md §8's closed set. Nothing here converts an
+ * indeterminate outcome into either of the others; that stays human-owned
+ * (`approval execution reconcile`).
+ */
+import { readFileSync } from "node:fs";
+import { isAbsolute, resolve } from "node:path";
+import { attestationRefusal, checkAttestationOfBytes, policyBytesHash, unreadablePolicyStatus, } from "../core/attest.js";
+import { finishExecution, hasApprovalCycle, indeterminateExecution, startExecution, } from "../core/execute.js";
+import { register, registeredAction, request } from "../core/gate.js";
+import { loadPolicy } from "../core/policy-load.js";
+import { readVerifiedRecords } from "../core/state.js";
+import { acquireWorkspaceCustody, commitWorkspacePlan, touchedDirectories, WORKSPACE_LOCK_FILE, WORKSPACE_TXN_DIR, } from "./workspace-commit.js";
+import { planWorkspaceProposal, revalidateWorkspacePlan, } from "./workspace-plan.js";
+export const BROKER_VERSION = "approval.codex.broker.v1";
+/**
+ * The positive server-side tool allowlist: one name, and nothing is reachable
+ * by any other.
+ *
+ * A deny list would have to name every verb the runtime grows next; this names
+ * the one a constrained Codex session may call, so anything added tomorrow is
+ * unreachable here until somebody decides otherwise. Fail closed, SPEC.md §11.
+ */
+export const BROKER_TOOLS = new Set(["codex_workspace_apply"]);
+/** The indeterminate reason a mixed or unreadable commit records (SPEC.md §8). */
+export const WORKSPACE_COMMIT_UNKNOWN = "workspace-commit-unknown";
+/** Derive the fixed context from a validated instance manifest. */
+export function brokerInstallation(manifest) {
+    return {
+        instanceId: manifest.instance_id,
+        actor: `agent:codex-${manifest.instance_id}`,
+        root: manifest.paths.workspace,
+        policyPath: manifest.paths.policy,
+        logPath: manifest.paths.log,
+    };
+}
+const HEX64 = /^[0-9a-f]{64}$/u;
+/**
+ * Accept `{operations, expected_policy_sha256}` and refuse everything else.
+ *
+ * An unknown key is a refusal rather than a silent drop for the reason the MCP
+ * server refuses `--as`: a caller that named an actor, a root, a class or a
+ * token meant something by it, and the something they meant is not available
+ * here. Being told so is the only way they learn that.
+ */
+export function parseBrokerInput(value) {
+    if (typeof value !== "object" || value === null || Array.isArray(value)) {
+        return { ok: false, message: "the broker accepts one JSON object" };
+    }
+    const allowed = new Set(["operations", "expected_policy_sha256"]);
+    for (const key of Object.keys(value)) {
+        if (allowed.has(key))
+            continue;
+        return {
+            ok: false,
+            message: `unknown property ${JSON.stringify(key)}: the broker accepts "operations" and "expected_policy_sha256" and nothing else. Identity, workspace root, policy, log, class and reversibility are the installation's and no caller input can change them`,
+        };
+    }
+    const record = value;
+    const digest = record["expected_policy_sha256"];
+    if (typeof digest !== "string" || !HEX64.test(digest)) {
+        return { ok: false, message: "expected_policy_sha256 must be a lowercase SHA-256 hex digest" };
+    }
+    if (!("operations" in record)) {
+        return { ok: false, message: "operations is required" };
+    }
+    return { ok: true, input: { operations: record["operations"], expected_policy_sha256: digest } };
+}
+// ---------------------------------------------------------------------------
+// Refusals
+// ---------------------------------------------------------------------------
+/**
+ * Every way the broker can say no. Frozen public API in the sense SPEC.md
+ * §11.1 invariant 6 means: each fires for exactly one condition, they are
+ * distinct from one another, and `tests/codex-broker.test.ts` pins the union.
+ */
+export const BROKER_REFUSAL_CODES = [
+    /** The tool name is not on {@link BROKER_TOOLS}. */
+    "tool-not-allowed",
+    /** The caller's object is not `{operations, expected_policy_sha256}`. */
+    "input-invalid",
+    /** The workspace root is not an absolute normalized path. */
+    "installation-invalid",
+    /** The log could not be read, is torn, or does not verify. */
+    "log-unavailable",
+    /** The policy file could not be read or parsed. */
+    "policy-unavailable",
+    /** The live policy bytes are not the attested ones. */
+    "policy-not-attested",
+    /** The caller's expected digest is not the live attested digest. */
+    "attestation-drift",
+    /** An endpoint names the broker's own reserved transaction paths. */
+    "reserved-path",
+    /** A replace whose after-image equals its preimage: nothing to approve. */
+    "no-op-operation",
+    /** The planner refused. `detail` carries its own code verbatim. */
+    "plan-refused",
+    /** The log already declares this task or key under different bytes. */
+    "replay",
+    /** Registration refused for any other gate reason. */
+    "register-refused",
+    /** Intake refused for any gate reason. */
+    "request-refused",
+    /** A leg needs a human's grant and no token for it was presented. */
+    "approval-required",
+    /** A leg's `execution.started` refused. Nothing was written to the workspace. */
+    "start-refused",
+    /** Another transaction holds the workspace lock. */
+    "custody-contended",
+    /** The lock or staging directory could not be created. */
+    "custody-unavailable",
+    /** The installation requires OS-exclusive custody and the host cannot prove it. */
+    "custody-insufficient",
+    /** The plan no longer validates against the workspace under custody. */
+    "workspace-drift",
+    /** Staging failed; the workspace is untouched by construction. */
+    "stage-failed",
+    /** The commit was attempted and did not take. Every leg is `execution.failed`. */
+    "commit-not-applied",
+    /** The commit was attempted and nobody knows. Every leg is indeterminate. */
+    "commit-unknown",
+];
+function refuse(code, message, extra = {}) {
+    return { ok: false, code, message, ...extra };
+}
+// ---------------------------------------------------------------------------
+// Intake helpers
+// ---------------------------------------------------------------------------
+function readPolicy(policyPath) {
+    let bytes;
+    try {
+        bytes = readFileSync(policyPath);
+    }
+    catch (cause) {
+        return {
+            ok: false,
+            status: unreadablePolicyStatus(policyPath, cause instanceof Error ? cause.message : String(cause)),
+        };
+    }
+    return { ok: true, bytes, sha256: policyBytesHash(bytes), policy: loadPolicy({ file: policyPath }) };
+}
+/** The task id one proposal's bytes always produce. Deterministic, so a replay collides. */
+export function brokerTaskId(instanceId, payloadHash) {
+    return `codex-workspace-${instanceId}-${payloadHash.slice(0, 16)}`;
+}
+/** The action key one class's leg always produces under that task. */
+export function brokerActionKey(task, cls) {
+    return `${task}:${cls}`;
+}
+/**
+ * Endpoints the broker owns and no proposal may name.
+ *
+ * The staging directory has to share a filesystem with the workspace for
+ * `rename` to be atomic, so it lives inside it. Reserving both names is what
+ * stops a proposal from writing its own journal or unlocking its own lock, and
+ * it is checked here rather than in the planner because the planner has no idea
+ * a transaction exists.
+ */
+function reservedEndpoint(path) {
+    const first = path.split("/")[0];
+    return first === WORKSPACE_TXN_DIR || first === WORKSPACE_LOCK_FILE;
+}
+/**
+ * The first reserved endpoint named anywhere in the RAW operations, or null.
+ *
+ * Over the unvalidated input on purpose, so the refusal precedes the planner's
+ * preimage read: the planner has no idea a transaction exists and would happily
+ * bind the bytes of the broker's own journal before anything here objected.
+ * Only the three path-valued fields of the closed operation language are read,
+ * and anything that is not a string is left to the planner to refuse.
+ */
+function reservedInRawOperations(operations) {
+    if (!Array.isArray(operations))
+        return null;
+    for (const entry of operations) {
+        if (typeof entry !== "object" || entry === null)
+            continue;
+        for (const field of ["path", "from", "to"]) {
+            const value = entry[field];
+            if (typeof value === "string" && reservedEndpoint(value))
+                return value;
+        }
+    }
+    return null;
+}
+/**
+ * Does the log's latest cycle for `actionKey` end in a grant nobody has
+ * revoked?
+ *
+ * A HINT and never an authorization: it decides only whether the broker refuses
+ * early with the keys a person must decide, or lets `core/execute.ts` ask the
+ * real question (is this token the granted one, is its TTL alive, was it
+ * spent). Nothing here is compared against a secret and nothing here admits an
+ * execution.
+ */
+function grantOpen(records, actionKey) {
+    let granted = false;
+    for (const record of records) {
+        if (record.action_key !== actionKey)
+            continue;
+        if (record.event === "approval.granted")
+            granted = true;
+        else if (record.event === "approval.rejected" ||
+            record.event === "approval.revoked" ||
+            record.event === "approval.expired" ||
+            record.event === "approval.withdrawn" ||
+            record.event === "approval.requested")
+            granted = false;
+    }
+    return granted;
+}
+function legsOf(plan, task) {
+    return plan.actions.map((action) => ({
+        class: action.class,
+        actionKey: brokerActionKey(task, action.class),
+        mode: "policy",
+    }));
+}
+function envelopeFor(actor, legs, plan) {
+    return {
+        origin: { app: "approval-codex-broker", created_by: actor },
+        state: "proposed",
+        actions: legs.map((leg) => ({
+            class: leg.class,
+            summary: `Codex workspace change (${leg.class}): ${String(plan.payload.operations.length)} bounded operations`,
+            reversible: false,
+            est_cost_usd: "0",
+            idempotency_key: leg.actionKey,
+            payload_hash: plan.payload_hash,
+        })),
+    };
+}
+function executeOptionsFor(installation, options, payloadHash, token) {
+    const base = {
+        policy: { file: installation.policyPath },
+        presentedPayloadHash: payloadHash,
+    };
+    if (options.clock !== undefined)
+        base.clock = options.clock;
+    if (options.schemaDir !== undefined)
+        base.schemaDir = options.schemaDir;
+    if (options.append !== undefined)
+        base.append = options.append;
+    if (token !== undefined)
+        base.token = token;
+    return base;
+}
+// ---------------------------------------------------------------------------
+// The broker
+// ---------------------------------------------------------------------------
+/**
+ * Apply one bounded typed proposal to the canonical workspace, or say exactly
+ * why not.
+ *
+ * `tool` is checked against {@link BROKER_TOOLS} first, before the input is
+ * even parsed: a surface that published nothing still refuses a name it does
+ * not serve, which is the defence in depth `src/mcp/server.ts` keeps for
+ * `mcp-guest-restricted`.
+ */
+export function applyWorkspaceChange(tool, installation, rawInput, options = {}) {
+    if (!BROKER_TOOLS.has(tool)) {
+        return refuse("tool-not-allowed", `${JSON.stringify(tool)} is not a broker tool; this surface serves exactly ${[...BROKER_TOOLS].join(", ")}`);
+    }
+    const parsed = parseBrokerInput(rawInput);
+    if (!parsed.ok)
+        return refuse("input-invalid", parsed.message);
+    if (!isAbsolute(installation.root) || resolve(installation.root) !== installation.root) {
+        return refuse("installation-invalid", "the installation's workspace root is not a normalized absolute path");
+    }
+    // --- Verified log, attested policy, and the caller's expectation of it ---
+    const read = readVerifiedRecords(installation.logPath, options.schemaDir === undefined ? {} : { schemaDir: options.schemaDir });
+    if (!read.ok)
+        return refuse("log-unavailable", read.message, { detail: read.code });
+    const records = read.records;
+    const policy = readPolicy(installation.policyPath);
+    if (!policy.ok) {
+        const attestation = attestationRefusal(policy.status);
+        return refuse("policy-unavailable", attestation?.message ?? "policy could not be read");
+    }
+    const status = checkAttestationOfBytes(records, policy.bytes);
+    const attestation = attestationRefusal(status);
+    if (attestation !== null) {
+        return refuse("policy-not-attested", attestation.message, { detail: attestation.detail });
+    }
+    if (parsed.input.expected_policy_sha256 !== policy.sha256) {
+        return refuse("attestation-drift", `the proposal expects policy ${parsed.input.expected_policy_sha256} and the attested policy is ${policy.sha256}; re-read the policy and rebuild the proposal`);
+    }
+    if (!policy.policy.ok) {
+        return refuse("policy-unavailable", `policy ${installation.policyPath} did not parse: ${policy.policy.message}`);
+    }
+    // --- Plan (the merged read-only intake does the path work) --------------
+    const context = {
+        actor: installation.actor,
+        root: installation.root,
+        policy_sha256: policy.sha256,
+        policy: policy.policy,
+    };
+    // Before the planner, because the planner would read the preimage of an
+    // endpoint it has no reason to think is special. The scan is over the raw
+    // input's own path fields and errs toward refusing.
+    const reserved = reservedInRawOperations(parsed.input.operations);
+    if (reserved !== null) {
+        return refuse("reserved-path", `${reserved} is inside the broker's own transaction custody (${WORKSPACE_TXN_DIR}, ${WORKSPACE_LOCK_FILE}) and is never a proposal endpoint`);
+    }
+    const planned = planWorkspaceProposal(parsed.input.operations, context);
+    if (!planned.ok) {
+        return refuse("plan-refused", `${planned.code}: ${planned.message}`, { detail: planned.code });
+    }
+    const plan = planned.plan;
+    for (const operation of plan.payload.operations) {
+        if (operation.kind !== "replace" || operation.before.sha256 !== operation.after.sha256)
+            continue;
+        return refuse("no-op-operation", `${operation.path} replaces its own bytes; a change with no effect has no outcome to report honestly`);
+    }
+    const task = brokerTaskId(installation.instanceId, plan.payload_hash);
+    const legs = legsOf(plan, task);
+    // --- Register: one declared action per class, all bound to one payload ---
+    const registration = register(installation.logPath, { task, envelope: envelopeFor(installation.actor, legs, plan) }, installation.actor, {
+        ...(options.clock === undefined ? {} : { clock: options.clock }),
+        ...(options.schemaDir === undefined ? {} : { schemaDir: options.schemaDir }),
+        ...(options.append === undefined ? {} : { append: options.append }),
+    });
+    if (!registration.ok) {
+        if (registration.code !== "task-already-registered") {
+            return refuse("register-refused", registration.message, { detail: registration.code });
+        }
+        // The same bytes produce the same task id, so a second apply of an
+        // identical proposal lands here. It is legitimate only when the log's own
+        // declaration is byte-for-byte the one we just derived; anything else is a
+        // key this installation does not own and nothing may execute from it.
+        for (const leg of legs) {
+            const declared = registeredAction(records, task, leg.actionKey);
+            if (!declared.ok || declared.action.class !== leg.class || declared.action.payload_hash !== plan.payload_hash) {
+                return refuse("replay", `${task} is already registered under different bytes or classes; this proposal cannot reuse it`, { detail: registration.code });
+            }
+        }
+    }
+    // --- Authorize every leg BEFORE any start and before any mutation -------
+    const pending = [];
+    for (const leg of legs) {
+        if (hasApprovalCycle(records, leg.actionKey)) {
+            // Already asked. Re-requesting would open a second cycle for one
+            // decision, so the token (or its absence) settles this leg.
+            leg.mode = "token";
+            continue;
+        }
+        const intake = request(installation.logPath, {
+            task,
+            actionKey: leg.actionKey,
+            cls: leg.class,
+            est_cost_usd: "0",
+            reversible: false,
+            summary: `Codex workspace change (${leg.class})`,
+            payload_hash: plan.payload_hash,
+            payload: { value: plan.payload },
+        }, installation.actor, {
+            policy: { file: installation.policyPath },
+            ...(options.clock === undefined ? {} : { clock: options.clock }),
+            ...(options.schemaDir === undefined ? {} : { schemaDir: options.schemaDir }),
+            ...(options.append === undefined ? {} : { append: options.append }),
+        });
+        if (!intake.ok) {
+            return refuse("request-refused", intake.message, { detail: intake.code });
+        }
+        leg.mode = intake.proceed ? "policy" : "token";
+    }
+    const tokens = options.tokens ?? {};
+    const afterIntake = readVerifiedRecords(installation.logPath, options.schemaDir === undefined ? {} : { schemaDir: options.schemaDir });
+    if (!afterIntake.ok)
+        return refuse("log-unavailable", afterIntake.message, { detail: afterIntake.code });
+    for (const leg of legs) {
+        if (leg.mode !== "token")
+            continue;
+        if (typeof tokens[leg.class] === "string")
+            continue;
+        // No token in hand is not the same as no authority. Sealed delivery
+        // (SPEC.md §10.4) puts the grant's token beside the log for the requester
+        // that asked, and `startExecution` opens it itself; the broker's job is
+        // only to tell a caller with NO grant what is waiting for a person. This
+        // check reduces no scrutiny: the grant is still verified where it always
+        // was, against the log's digest, and a leg that reaches `startExecution`
+        // with nothing to open is refused there.
+        if (grantOpen(afterIntake.records, leg.actionKey))
+            continue;
+        pending.push(leg.actionKey);
+    }
+    if (pending.length > 0) {
+        return refuse("approval-required", `${String(pending.length)} action(s) resolve to a human decision and no grant token was presented for them. Nothing was written`, { pending });
+    }
+    // --- Start every leg. A later refusal must mean no filesystem effect. ---
+    const started = [];
+    for (const leg of legs) {
+        const execOptions = executeOptionsFor(installation, options, plan.payload_hash, leg.mode === "token" ? tokens[leg.class] : undefined);
+        const start = startExecution(installation.logPath, leg.actionKey, execOptions, installation.actor);
+        if (start.ok) {
+            started.push(leg);
+            continue;
+        }
+        closeLegs(installation, options, plan, started, "failed", {
+            code: "leg-start-refused",
+            message: `a later action leg refused to start (${start.code}); no workspace operation was attempted`,
+        });
+        return refuse("start-refused", `${leg.actionKey} could not start: ${start.message}. No workspace operation was attempted`, { detail: start.code });
+    }
+    options.afterStart?.();
+    // --- Custody, then revalidation UNDER it, then the durable commit -------
+    const directories = touchedDirectories(plan);
+    const acquired = acquireWorkspaceCustody(installation.root, directories);
+    if (!acquired.ok) {
+        closeLegs(installation, options, plan, started, "failed", {
+            code: acquired.code,
+            message: "workspace custody was not obtained; no operation was attempted",
+        });
+        return refuse(acquired.code, acquired.message);
+    }
+    const custody = acquired.custody;
+    // A mixed commit leaves its journal inside the staging directory for a
+    // person, and `release` removes that directory. This is the one flag that
+    // decides between the two, and it is set only where the readback said mixed.
+    let keepStaging = false;
+    try {
+        if (options.requireExclusiveCustody === true && custody.report.kind !== "os-exclusive") {
+            closeLegs(installation, options, plan, started, "failed", {
+                code: "custody-insufficient",
+                message: "this installation requires OS-exclusive workspace custody",
+            });
+            return refuse("custody-insufficient", `this installation requires OS-exclusive workspace custody and the host proved only ${custody.report.kind} (${custody.report.findings.join(", ")})`);
+        }
+        const revalidated = revalidateWorkspacePlan(plan, context);
+        if (!revalidated.ok) {
+            closeLegs(installation, options, plan, started, "failed", {
+                code: revalidated.code,
+                message: "the workspace no longer matched the approved snapshot; no operation was attempted",
+            });
+            return refuse("workspace-drift", revalidated.message, { detail: revalidated.code });
+        }
+        const commit = commitWorkspacePlan(plan, custody, options.onStep === undefined ? {} : { onStep: options.onStep });
+        if (!commit.ok) {
+            closeLegs(installation, options, plan, started, "failed", {
+                code: commit.code,
+                message: "staging failed before any mutation; the workspace is unchanged",
+            });
+            return refuse("stage-failed", commit.message, { state: "before" });
+        }
+        const { state, failure } = commit.outcome;
+        if (state === "after") {
+            closeLegs(installation, options, plan, started, "completed");
+            return {
+                ok: true,
+                version: BROKER_VERSION,
+                task,
+                payload_hash: plan.payload_hash,
+                policy_sha256: policy.sha256,
+                legs: started,
+                custody: custody.report,
+                state: "after",
+            };
+        }
+        if (state === "before") {
+            closeLegs(installation, options, plan, started, "failed", {
+                code: "workspace-commit-reverted",
+                message: "the commit did not take and the workspace was read back as unchanged",
+            });
+            return refuse("commit-not-applied", `the workspace was read back as unchanged${failure === undefined ? "" : `: ${failure}`}`, { state });
+        }
+        keepStaging = commit.outcome.journalRetained;
+        closeLegs(installation, options, plan, started, "indeterminate");
+        return refuse("commit-unknown", `the workspace read back as neither the approved before-state nor the approved after-state${failure === undefined ? "" : `: ${failure}`}. The transaction journal and the workspace lock were retained, so no further brokered change can run until a person reads the journal and clears them; nothing here resolves it`, { state });
+    }
+    finally {
+        if (!keepStaging)
+            custody.release();
+    }
+}
+/**
+ * Close every started leg with the outcome the workspace readback established.
+ *
+ * Best effort per leg and never a throw: a leg whose close cannot be appended
+ * leaves a DANGLING execution, which is the honest state for it (SPEC.md §8),
+ * and failing to close the second leg must not stop the third from being told
+ * the truth.
+ */
+function closeLegs(installation, options, plan, legs, outcome, reason) {
+    for (const leg of legs) {
+        const base = executeOptionsFor(installation, options, plan.payload_hash);
+        if (outcome === "indeterminate") {
+            indeterminateExecution(installation.logPath, leg.actionKey, WORKSPACE_COMMIT_UNKNOWN, installation.actor, base);
+            continue;
+        }
+        finishExecution(installation.logPath, leg.actionKey, outcome === "completed" ? 0 : 1, installation.actor, outcome === "completed" ? base : { ...base, ...(reason === undefined ? {} : { reason }) });
+    }
+}
+//# sourceMappingURL=broker.js.map

package/dist/src/codex/broker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"broker.js","sourceRoot":"","sources":["../../../src/codex/broker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2DG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEhD,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,eAAe,EACf,sBAAsB,GAEvB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,sBAAsB,EACtB,cAAc,GAEf,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAEtE,OAAO,EAAE,UAAU,EAAyB,MAAM,wBAAwB,CAAC;AAC3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAEvD,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACnB,iBAAiB,GAGlB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,qBAAqB,EACrB,uBAAuB,GAGxB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,CAAC,MAAM,cAAc,GAAG,0BAAmC,CAAC;AAElE;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,YAAY,GAAwB,IAAI,GAAG,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC;AAEpF,kFAAkF;AAClF,MAAM,CAAC,MAAM,wBAAwB,GAAG,0BAAmC,CAAC;AAoB5E,mEAAmE;AACnE,MAAM,UAAU,kBAAkB,CAAC,QAA+B;IAChE,OAAO;QACL,UAAU,EAAE,QAAQ,CAAC,WAAW;QAChC,KAAK,EAAE,eAAe,QAAQ,CAAC,WAAW,EAAE;QAC5C,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS;QAC9B,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM;QACjC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG;KAC5B,CAAC;AACJ,CAAC;AAYD,MAAM,KAAK,GAAG,iBAAiB,CAAC;AAMhC;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC;IACtE,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAClE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC/B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,oBAAoB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,4MAA4M;SAC7P,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,MAAM,GAAG,MAAM,CAAC,wBAAwB,CAAC,CAAC;IAChD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,+DAA+D,EAAE,CAAC;IACjG,CAAC;IACD,IAAI,CAAC,CAAC,YAAY,IAAI,MAAM,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;IAC1D,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,YAAY,CAAC,EAAE,sBAAsB,EAAE,MAAM,EAAE,EAAE,CAAC;AACnG,CAAC;AAED,8EAA8E;AAC9E,WAAW;AACX,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,oDAAoD;IACpD,kBAAkB;IAClB,yEAAyE;IACzE,eAAe;IACf,6DAA6D;IAC7D,sBAAsB;IACtB,8DAA8D;IAC9D,iBAAiB;IACjB,mDAAmD;IACnD,oBAAoB;IACpB,uDAAuD;IACvD,qBAAqB;IACrB,oEAAoE;IACpE,mBAAmB;IACnB,qEAAqE;IACrE,eAAe;IACf,2EAA2E;IAC3E,iBAAiB;IACjB,mEAAmE;IACnE,cAAc;IACd,uEAAuE;IACvE,QAAQ;IACR,sDAAsD;IACtD,kBAAkB;IAClB,0CAA0C;IAC1C,iBAAiB;IACjB,qEAAqE;IACrE,mBAAmB;IACnB,iFAAiF;IACjF,eAAe;IACf,oDAAoD;IACpD,mBAAmB;IACnB,0DAA0D;IAC1D,qBAAqB;IACrB,mFAAmF;IACnF,sBAAsB;IACtB,wEAAwE;IACxE,iBAAiB;IACjB,kEAAkE;IAClE,cAAc;IACd,kFAAkF;IAClF,oBAAoB;IACpB,6EAA6E;IAC7E,gBAAgB;CACR,CAAC;AAgBX,SAAS,MAAM,CACb,IAAuB,EACvB,OAAe,EACf,KAAK,GAAmD,EAAE;IAE1D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC;AAChD,CAAC;AAmDD,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,SAAS,UAAU,CAAC,UAAkB;IAGpC,IAAI,KAAiB,CAAC;IACtB,IAAI,CAAC;QACH,KAAK,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,sBAAsB,CAAC,UAAU,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;SACnG,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;AACvG,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,YAAY,CAAC,UAAkB,EAAE,WAAmB;IAClE,OAAO,mBAAmB,UAAU,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACrE,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,GAAW;IACvD,OAAO,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC;AAC1B,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,gBAAgB,CAAC,IAAY;IACpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACjC,OAAO,KAAK,KAAK,iBAAiB,IAAI,KAAK,KAAK,mBAAmB,CAAC;AACtE,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,uBAAuB,CAAC,UAAmB;IAClD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;YAAE,SAAS;QAC1D,KAAK,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAI,KAAiC,CAAC,KAAK,CAAC,CAAC;YACxD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,gBAAgB,CAAC,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;QACzE,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,SAAS,CAAC,OAA+B,EAAE,SAAiB;IACnE,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;YAAE,SAAS;QAC9C,IAAI,MAAM,CAAC,KAAK,KAAK,kBAAkB;YAAE,OAAO,GAAG,IAAI,CAAC;aACnD,IACH,MAAM,CAAC,KAAK,KAAK,mBAAmB;YACpC,MAAM,CAAC,KAAK,KAAK,kBAAkB;YACnC,MAAM,CAAC,KAAK,KAAK,kBAAkB;YACnC,MAAM,CAAC,KAAK,KAAK,oBAAoB;YACrC,MAAM,CAAC,KAAK,KAAK,oBAAoB;YACrC,OAAO,GAAG,KAAK,CAAC;IACpB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,MAAM,CAAC,IAAmB,EAAE,IAAY;IAC/C,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACnC,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,SAAS,EAAE,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC;QAC9C,IAAI,EAAE,QAAiB;KACxB,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,WAAW,CAClB,KAAa,EACb,IAA0B,EAC1B,IAAmB;IAEnB,OAAO;QACL,MAAM,EAAE,EAAE,GAAG,EAAE,uBAAuB,EAAE,UAAU,EAAE,KAAK,EAAE;QAC3D,KAAK,EAAE,UAAU;QACjB,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAC1B,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,OAAO,EAAE,2BAA2B,GAAG,CAAC,KAAK,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,qBAAqB;YAC9G,UAAU,EAAE,KAAK;YACjB,YAAY,EAAE,GAAG;YACjB,eAAe,EAAE,GAAG,CAAC,SAAS;YAC9B,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CACxB,YAAgC,EAChC,OAAsB,EACtB,WAAmB,EACnB,KAAc;IAEd,MAAM,IAAI,GAAmB;QAC3B,MAAM,EAAE,EAAE,IAAI,EAAE,YAAY,CAAC,UAAU,EAAE;QACzC,oBAAoB,EAAE,WAAW;KAClC,CAAC;IACF,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;QAAE,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5D,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;QAAE,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IACxE,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;QAAE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC/D,IAAI,KAAK,KAAK,SAAS;QAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IAC5C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAY,EACZ,YAAgC,EAChC,QAAiB,EACjB,OAAO,GAAkB,EAAE;IAE3B,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,OAAO,MAAM,CACX,kBAAkB,EAClB,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,sDAAsD,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC5G,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/D,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,YAAY,CAAC,IAAI,EAAE,CAAC;QACvF,OAAO,MAAM,CAAC,sBAAsB,EAAE,qEAAqE,CAAC,CAAC;IAC/G,CAAC;IAED,4EAA4E;IAC5E,MAAM,IAAI,GAAG,mBAAmB,CAC9B,YAAY,CAAC,OAAO,EACpB,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CACxE,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC,iBAAiB,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACpF,MAAM,OAAO,GAAkB,IAAI,CAAC,OAAO,CAAC;IAE5C,MAAM,MAAM,GAAG,UAAU,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,WAAW,GAAG,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACtD,OAAO,MAAM,CAAC,oBAAoB,EAAE,WAAW,EAAE,OAAO,IAAI,0BAA0B,CAAC,CAAC;IAC1F,CAAC;IACD,MAAM,MAAM,GAAG,uBAAuB,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9D,MAAM,WAAW,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC,qBAAqB,EAAE,WAAW,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,CAAC,sBAAsB,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;QAC1D,OAAO,MAAM,CACX,mBAAmB,EACnB,+BAA+B,MAAM,CAAC,KAAK,CAAC,sBAAsB,+BAA+B,MAAM,CAAC,MAAM,+CAA+C,CAC9J,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACtB,OAAO,MAAM,CAAC,oBAAoB,EAAE,UAAU,YAAY,CAAC,UAAU,mBAAmB,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IACnH,CAAC;IAED,2EAA2E;IAC3E,MAAM,OAAO,GAAyB;QACpC,KAAK,EAAE,YAAY,CAAC,KAAK;QACzB,IAAI,EAAE,YAAY,CAAC,IAAI;QACvB,aAAa,EAAE,MAAM,CAAC,MAAM;QAC5B,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC;IACF,wEAAwE;IACxE,0EAA0E;IAC1E,oDAAoD;IACpD,MAAM,QAAQ,GAAG,uBAAuB,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAClE,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO,MAAM,CACX,eAAe,EACf,GAAG,QAAQ,oDAAoD,iBAAiB,KAAK,mBAAmB,oCAAoC,CAC7I,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACxE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,MAAM,CACX,cAAc,EACd,GAAG,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,EAAE,EACrC,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,CACzB,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAE1B,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QAChD,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,KAAK,CAAC,MAAM;YAAE,SAAS;QACjG,OAAO,MAAM,CACX,iBAAiB,EACjB,GAAG,SAAS,CAAC,IAAI,oFAAoF,CACtG,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,YAAY,CAAC,YAAY,CAAC,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAEhC,4EAA4E;IAC5E,MAAM,YAAY,GAAG,QAAQ,CAC3B,YAAY,CAAC,OAAO,EACpB,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAC/D,YAAY,CAAC,KAAK,EAClB;QACE,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QAChE,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;QAC5E,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;KACpE,CACF,CAAC;IACF,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;QACrB,IAAI,YAAY,CAAC,IAAI,KAAK,yBAAyB,EAAE,CAAC;YACpD,OAAO,MAAM,CAAC,kBAAkB,EAAE,YAAY,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,mEAAmE;QACnE,0EAA0E;QAC1E,2EAA2E;QAC3E,sEAAsE;QACtE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;YAChE,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,IAAI,QAAQ,CAAC,MAAM,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;gBAC9G,OAAO,MAAM,CACX,QAAQ,EACR,GAAG,IAAI,wFAAwF,EAC/F,EAAE,MAAM,EAAE,YAAY,CAAC,IAAI,EAAE,CAC9B,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,gBAAgB,CAAC,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7C,iEAAiE;YACjE,4DAA4D;YAC5D,GAAG,CAAC,IAAI,GAAG,OAAO,CAAC;YACnB,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CACpB,YAAY,CAAC,OAAO,EACpB;YACE,IAAI;YACJ,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,GAAG,EAAE,GAAG,CAAC,KAAK;YACd,YAAY,EAAE,GAAG;YACjB,UAAU,EAAE,KAAK;YACjB,OAAO,EAAE,2BAA2B,GAAG,CAAC,KAAK,GAAG;YAChD,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE;SACjC,EACD,YAAY,CAAC,KAAK,EAClB;YACE,MAAM,EAAE,EAAE,IAAI,EAAE,YAAY,CAAC,UAAU,EAAE;YACzC,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;YAChE,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;YAC5E,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;SACpE,CACF,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,GAAG,CAAC,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;IACjD,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;IACpC,MAAM,WAAW,GAAG,mBAAmB,CACrC,YAAY,CAAC,OAAO,EACpB,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CACxE,CAAC;IACF,IAAI,CAAC,WAAW,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC,iBAAiB,EAAE,WAAW,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;IACzG,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO;YAAE,SAAS;QACnC,IAAI,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,QAAQ;YAAE,SAAS;QACpD,oEAAoE;QACpE,0EAA0E;QAC1E,wEAAwE;QACxE,yEAAyE;QACzE,yEAAyE;QACzE,yEAAyE;QACzE,yCAAyC;QACzC,IAAI,SAAS,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC;YAAE,SAAS;QAC5D,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,MAAM,CACX,mBAAmB,EACnB,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,uGAAuG,EAChI,EAAE,OAAO,EAAE,CACZ,CAAC;IACJ,CAAC;IAED,2EAA2E;IAC3E,MAAM,OAAO,GAAgB,EAAE,CAAC;IAChC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,iBAAiB,CACnC,YAAY,EACZ,OAAO,EACP,IAAI,CAAC,YAAY,EACjB,GAAG,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CACrD,CAAC;QACF,MAAM,KAAK,GAAG,cAAc,CAAC,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QACnG,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClB,SAAS;QACX,CAAC;QACD,SAAS,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE;YACxD,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,wCAAwC,KAAK,CAAC,IAAI,yCAAyC;SACrG,CAAC,CAAC;QACH,OAAO,MAAM,CACX,eAAe,EACf,GAAG,GAAG,CAAC,SAAS,qBAAqB,KAAK,CAAC,OAAO,wCAAwC,EAC1F,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,CACvB,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;IAEvB,2EAA2E;IAC3E,MAAM,WAAW,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,uBAAuB,CAAC,YAAY,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACzE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,SAAS,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE;YACxD,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,OAAO,EAAE,gEAAgE;SAC1E,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IACjC,uEAAuE;IACvE,0EAA0E;IAC1E,6EAA6E;IAC7E,IAAI,WAAW,GAAG,KAAK,CAAC;IAExB,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,uBAAuB,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YACvF,SAAS,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE;gBACxD,IAAI,EAAE,sBAAsB;gBAC5B,OAAO,EAAE,2DAA2D;aACrE,CAAC,CAAC;YACH,OAAO,MAAM,CACX,sBAAsB,EACtB,sFAAsF,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACpJ,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,uBAAuB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3D,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;YACpB,SAAS,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE;gBACxD,IAAI,EAAE,WAAW,CAAC,IAAI;gBACtB,OAAO,EAAE,mFAAmF;aAC7F,CAAC,CAAC;YACH,OAAO,MAAM,CAAC,iBAAiB,EAAE,WAAW,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;QACtF,CAAC;QAED,MAAM,MAAM,GAAG,mBAAmB,CAChC,IAAI,EACJ,OAAO,EACP,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAC/D,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,SAAS,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE;gBACxD,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,OAAO,EAAE,gEAAgE;aAC1E,CAAC,CAAC;YACH,OAAO,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC;QAC1C,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;YACtB,SAAS,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;YAC7D,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE,cAAc;gBACvB,IAAI;gBACJ,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,aAAa,EAAE,MAAM,CAAC,MAAM;gBAC5B,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,OAAO,CAAC,MAAM;gBACvB,KAAK,EAAE,OAAO;aACf,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvB,SAAS,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE;gBACxD,IAAI,EAAE,2BAA2B;gBACjC,OAAO,EAAE,sEAAsE;aAChF,CAAC,CAAC;YACH,OAAO,MAAM,CACX,oBAAoB,EACpB,2CAA2C,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,EAAE,EACxF,EAAE,KAAK,EAAE,CACV,CAAC;QACJ,CAAC;QACD,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC;QAC7C,SAAS,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC;QACjE,OAAO,MAAM,CACX,gBAAgB,EAChB,4FAA4F,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,kLAAkL,EACzT,EAAE,KAAK,EAAE,CACV,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,WAAW;YAAE,OAAO,CAAC,OAAO,EAAE,CAAC;IACtC,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,SAAS,CAChB,YAAgC,EAChC,OAAsB,EACtB,IAAmB,EACnB,IAA0B,EAC1B,OAAiD,EACjD,MAA0C;IAE1C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,iBAAiB,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QACzE,IAAI,OAAO,KAAK,eAAe,EAAE,CAAC;YAChC,sBAAsB,CACpB,YAAY,CAAC,OAAO,EACpB,GAAG,CAAC,SAAS,EACb,wBAAwB,EACxB,YAAY,CAAC,KAAK,EAClB,IAAI,CACL,CAAC;YACF,SAAS;QACX,CAAC;QACD,eAAe,CACb,YAAY,CAAC,OAAO,EACpB,GAAG,CAAC,SAAS,EACb,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAC/B,YAAY,CAAC,KAAK,EAClB,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAC1F,CAAC;IACJ,CAAC;AACH,CAAC"}