approval-md 0.2.0 → 0.4.0

package/dist/src/core/shlex.d.ts

@@ -0,0 +1,102 @@
+/**
+ * Shell word splitting and joining, for the one place this runtime reads a
+ * command as a RENDERING of an argv rather than as bytes it was handed
+ * (APRV-362).
+ *
+ * ## Why this exists at all
+ *
+ * Every harness hook is handed a command as a string, and the classifier reads
+ * that string. Codex's app-server is the exception: what it will execute is an
+ * argv, and the item-based API delivers that argv already joined into one
+ * string by `shlex_join` (`docs/codex-app-server-bridge.md`, question 1). A
+ * bridge that classified the joined string without ever naming the argv would
+ * be approving its own re-parse, and the gap between the two is where an
+ * approval could authorize words nobody read.
+ *
+ * So the bridge names the argv, and these functions are how. They are pure,
+ * total and exhaustively tested, which is what SPEC.md §11's deterministic-core
+ * rule asks of anything a decision rests on.
+ *
+ * ## The grammar, and why it is narrower than a shell's
+ *
+ * This is `shlex`, not a shell. It knows three things: runs of whitespace
+ * separate words, a single-quoted run is literal, and a backslash outside
+ * quotes makes the next character literal. It does NOT know operators: `>`,
+ * `|`, `&&` and `;` are ordinary characters in ordinary words. That is correct
+ * here, because what is being un-joined is an argv and an argv has no
+ * operators. The shell metacharacters in a real Codex call live INSIDE one word
+ * (`/bin/zsh -lc 'printf x > f'`), and the hook's own classifier is what reads
+ * that word as a script.
+ *
+ * A DOUBLE QUOTE outside a single-quoted run is refused rather than
+ * interpreted. A join never emits one: a word needing protection comes back
+ * single-quoted and a word not needing it comes back bare. So a bare `"` says
+ * the string was not produced by joining an argv, and this runtime will not
+ * guess whose escaping rules apply inside it. Refusing is the fail-closed
+ * direction and it costs nothing a real server sends.
+ *
+ * ## The round trip, and the one thing it does not claim
+ *
+ * {@link shlexJoin} quotes a word when, and only when, {@link shlexSplit} would
+ * otherwise read it as something else: an empty word, or one carrying
+ * whitespace, a quote or a backslash. That makes
+ * `shlexSplit(shlexJoin(argv)).argv` equal to `argv` for every argv, which is
+ * the property {@link shlexRoundTrips} states and the bridge checks before it
+ * binds either value.
+ *
+ * The converse is NOT claimed: `shlexJoin(shlexSplit(text).argv)` is a normal
+ * form of `text`, not `text` itself. A counterpart is free to quote more
+ * conservatively than this does (a join written for shell safety quotes `>` and
+ * `:`, which this one leaves bare), and byte equality with the received string
+ * would therefore mean pinning that counterpart's quoting predicate. This
+ * repository has no record of it and cannot acquire one here, so demanding
+ * equality would refuse traffic on a guess. What is demanded instead is
+ * {@link ShlexSplit.joinShaped}: words separated by exactly one space, which
+ * every join produces and which is checkable without knowing which characters
+ * it chose to quote. The bridge records the received string and the argv side
+ * by side so any remaining difference is visible rather than asserted away.
+ */
+export type ShlexSplit = {
+    ok: true;
+    argv: string[];
+    /**
+     * Were the words separated by exactly one space each, with none before
+     * the first or after the last?
+     *
+     * True of every string a join produces. False says the string reached
+     * this runtime some other way, which is a fact about the counterpart
+     * rather than about the argv, and the caller decides what to do with it.
+     */
+    joinShaped: boolean;
+} | {
+    ok: false;
+    reason: string;
+};
+/**
+ * Split a joined command string into the argv it renders.
+ *
+ * Refuses rather than guessing on the three shapes whose reading is not agreed:
+ * an unterminated single-quoted run, a trailing backslash with nothing to
+ * escape, and a double quote outside a quoted run (see the module header).
+ */
+export declare function shlexSplit(text: string): ShlexSplit;
+/**
+ * Render an argv as one command string that {@link shlexSplit} reads back as
+ * the same argv.
+ *
+ * Minimal quoting: a word is emitted bare unless it is empty or carries
+ * whitespace, a quote or a backslash, in which case it is single-quoted with
+ * the `'\''` idiom for an embedded quote. That idiom closes the run, escapes
+ * one quote and opens the next, which is three pieces of ONE word rather than
+ * three words, because nothing separates them.
+ */
+export declare function shlexJoin(argv: readonly string[]): string;
+/**
+ * Does `argv` survive a render-and-re-split cycle unchanged?
+ *
+ * True for every argv this module can render, and checked anyway at the one
+ * call site that binds an argv to an approval: a parser bug here would bind
+ * words nobody is going to run, and the cost of proving otherwise is one pass
+ * over a short string.
+ */
+export declare function shlexRoundTrips(argv: readonly string[]): boolean;

package/dist/src/core/shlex.js

@@ -0,0 +1,159 @@
+/**
+ * Shell word splitting and joining, for the one place this runtime reads a
+ * command as a RENDERING of an argv rather than as bytes it was handed
+ * (APRV-362).
+ *
+ * ## Why this exists at all
+ *
+ * Every harness hook is handed a command as a string, and the classifier reads
+ * that string. Codex's app-server is the exception: what it will execute is an
+ * argv, and the item-based API delivers that argv already joined into one
+ * string by `shlex_join` (`docs/codex-app-server-bridge.md`, question 1). A
+ * bridge that classified the joined string without ever naming the argv would
+ * be approving its own re-parse, and the gap between the two is where an
+ * approval could authorize words nobody read.
+ *
+ * So the bridge names the argv, and these functions are how. They are pure,
+ * total and exhaustively tested, which is what SPEC.md §11's deterministic-core
+ * rule asks of anything a decision rests on.
+ *
+ * ## The grammar, and why it is narrower than a shell's
+ *
+ * This is `shlex`, not a shell. It knows three things: runs of whitespace
+ * separate words, a single-quoted run is literal, and a backslash outside
+ * quotes makes the next character literal. It does NOT know operators: `>`,
+ * `|`, `&&` and `;` are ordinary characters in ordinary words. That is correct
+ * here, because what is being un-joined is an argv and an argv has no
+ * operators. The shell metacharacters in a real Codex call live INSIDE one word
+ * (`/bin/zsh -lc 'printf x > f'`), and the hook's own classifier is what reads
+ * that word as a script.
+ *
+ * A DOUBLE QUOTE outside a single-quoted run is refused rather than
+ * interpreted. A join never emits one: a word needing protection comes back
+ * single-quoted and a word not needing it comes back bare. So a bare `"` says
+ * the string was not produced by joining an argv, and this runtime will not
+ * guess whose escaping rules apply inside it. Refusing is the fail-closed
+ * direction and it costs nothing a real server sends.
+ *
+ * ## The round trip, and the one thing it does not claim
+ *
+ * {@link shlexJoin} quotes a word when, and only when, {@link shlexSplit} would
+ * otherwise read it as something else: an empty word, or one carrying
+ * whitespace, a quote or a backslash. That makes
+ * `shlexSplit(shlexJoin(argv)).argv` equal to `argv` for every argv, which is
+ * the property {@link shlexRoundTrips} states and the bridge checks before it
+ * binds either value.
+ *
+ * The converse is NOT claimed: `shlexJoin(shlexSplit(text).argv)` is a normal
+ * form of `text`, not `text` itself. A counterpart is free to quote more
+ * conservatively than this does (a join written for shell safety quotes `>` and
+ * `:`, which this one leaves bare), and byte equality with the received string
+ * would therefore mean pinning that counterpart's quoting predicate. This
+ * repository has no record of it and cannot acquire one here, so demanding
+ * equality would refuse traffic on a guess. What is demanded instead is
+ * {@link ShlexSplit.joinShaped}: words separated by exactly one space, which
+ * every join produces and which is checkable without knowing which characters
+ * it chose to quote. The bridge records the received string and the argv side
+ * by side so any remaining difference is visible rather than asserted away.
+ */
+/** Whitespace that separates words. Everything else is a word character. */
+const SEPARATORS = new Set([" ", "\t", "\n", "\r", "\f", "\v"]);
+/** A word must be quoted when a bare rendering would not read back as itself. */
+const NEEDS_QUOTING = /[\s'"\\]/u;
+/**
+ * Split a joined command string into the argv it renders.
+ *
+ * Refuses rather than guessing on the three shapes whose reading is not agreed:
+ * an unterminated single-quoted run, a trailing backslash with nothing to
+ * escape, and a double quote outside a quoted run (see the module header).
+ */
+export function shlexSplit(text) {
+    const argv = [];
+    let word = "";
+    /** Distinct from `word.length > 0`: `''` is an empty word, not no word. */
+    let started = false;
+    let joinShaped = true;
+    let index = 0;
+    while (index < text.length) {
+        const char = text[index];
+        if (SEPARATORS.has(char)) {
+            // A separator before any word, one that is not a plain space, or a second
+            // one in a row: all three are shapes a join does not emit.
+            if (!started || char !== " " || SEPARATORS.has(text[index + 1] ?? ""))
+                joinShaped = false;
+            if (started) {
+                argv.push(word);
+                word = "";
+                started = false;
+            }
+            index += 1;
+            continue;
+        }
+        if (char === "'") {
+            const close = text.indexOf("'", index + 1);
+            if (close === -1) {
+                return {
+                    ok: false,
+                    reason: `a single-quoted run opened at offset ${String(index)} is never closed`,
+                };
+            }
+            word += text.slice(index + 1, close);
+            started = true;
+            index = close + 1;
+            continue;
+        }
+        if (char === '"') {
+            return {
+                ok: false,
+                reason: `a double quote at offset ${String(index)} is outside any quoted run, and a joined argv never carries one`,
+            };
+        }
+        if (char === "\\") {
+            if (index + 1 >= text.length) {
+                return { ok: false, reason: "the string ends in a backslash with nothing to escape" };
+            }
+            word += text[index + 1];
+            started = true;
+            index += 2;
+            continue;
+        }
+        word += char;
+        started = true;
+        index += 1;
+    }
+    if (started)
+        argv.push(word);
+    else if (text.length > 0)
+        joinShaped = false;
+    return { ok: true, argv, joinShaped };
+}
+/**
+ * Render an argv as one command string that {@link shlexSplit} reads back as
+ * the same argv.
+ *
+ * Minimal quoting: a word is emitted bare unless it is empty or carries
+ * whitespace, a quote or a backslash, in which case it is single-quoted with
+ * the `'\''` idiom for an embedded quote. That idiom closes the run, escapes
+ * one quote and opens the next, which is three pieces of ONE word rather than
+ * three words, because nothing separates them.
+ */
+export function shlexJoin(argv) {
+    return argv
+        .map((word) => word.length > 0 && !NEEDS_QUOTING.test(word) ? word : `'${word.split("'").join("'\\''")}'`)
+        .join(" ");
+}
+/**
+ * Does `argv` survive a render-and-re-split cycle unchanged?
+ *
+ * True for every argv this module can render, and checked anyway at the one
+ * call site that binds an argv to an approval: a parser bug here would bind
+ * words nobody is going to run, and the cost of proving otherwise is one pass
+ * over a short string.
+ */
+export function shlexRoundTrips(argv) {
+    const back = shlexSplit(shlexJoin(argv));
+    if (!back.ok || back.argv.length !== argv.length)
+        return false;
+    return back.argv.every((word, at) => word === argv[at]);
+}
+//# sourceMappingURL=shlex.js.map

package/dist/src/core/shlex.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shlex.js","sourceRoot":"","sources":["../../../src/core/shlex.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDG;AAEH,4EAA4E;AAC5E,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAEhE,iFAAiF;AACjF,MAAM,aAAa,GAAG,WAAW,CAAC;AAkBlC;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,2EAA2E;IAC3E,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,UAAU,GAAG,IAAI,CAAC;IACtB,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,OAAO,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAW,CAAC;QACnC,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,0EAA0E;YAC1E,2DAA2D;YAC3D,IAAI,CAAC,OAAO,IAAI,IAAI,KAAK,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;gBAAE,UAAU,GAAG,KAAK,CAAC;YAC1F,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAChB,IAAI,GAAG,EAAE,CAAC;gBACV,OAAO,GAAG,KAAK,CAAC;YAClB,CAAC;YACD,KAAK,IAAI,CAAC,CAAC;YACX,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAC3C,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBACjB,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,wCAAwC,MAAM,CAAC,KAAK,CAAC,kBAAkB;iBAChF,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;YACrC,OAAO,GAAG,IAAI,CAAC;YACf,KAAK,GAAG,KAAK,GAAG,CAAC,CAAC;YAClB,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,4BAA4B,MAAM,CAAC,KAAK,CAAC,iEAAiE;aACnH,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uDAAuD,EAAE,CAAC;YACxF,CAAC;YACD,IAAI,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,CAAW,CAAC;YAClC,OAAO,GAAG,IAAI,CAAC;YACf,KAAK,IAAI,CAAC,CAAC;YACX,SAAS;QACX,CAAC;QACD,IAAI,IAAI,IAAI,CAAC;QACb,OAAO,GAAG,IAAI,CAAC;QACf,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IAED,IAAI,OAAO;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SACxB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,UAAU,GAAG,KAAK,CAAC;IAC7C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AACxC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,SAAS,CAAC,IAAuB;IAC/C,OAAO,IAAI;SACR,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACZ,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAC3F;SACA,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,IAAuB;IACrD,MAAM,IAAI,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC/D,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AAC1D,CAAC"}

package/dist/src/core/state.d.ts

@@ -424,6 +424,27 @@ export interface DeclaredAction {
      * is, never less.
      */
     wait_until: string | null;
+    /**
+     * The harness's own ceiling on the hook process that opened this request, in
+     * milliseconds, or `null` (APRV-423).
+     *
+     * A BOUNDED INPUT rather than a deadline. The hook states the per-entry
+     * timeout its harness runs it under (Hermes caps an entry at 300 s; Claude
+     * Code kills the process at the `timeout` in its settings file), and the
+     * runtime takes the SHORTER of that minus a fixed margin and the policy's
+     * own `defaults.approval_ttl` — see `core/harness-wait.ts`'s
+     * `harnessCappedTtlMs`. Claimed, and on the ratchet's safe side for the same
+     * structural reason `execution` is: the minimum can only move the deadline
+     * EARLIER, so a requester that overstates its cap changes nothing and one
+     * that understates it gives itself less time, never more (SPEC.md §11.1
+     * invariant 4).
+     *
+     * A value that is not a positive integer reads as `null`, which is the
+     * pre-APRV-423 shape: the policy's TTL governs alone. That is the baseline
+     * rather than a reduction below it, and the write boundary refuses such a
+     * value anyway.
+     */
+    harness_cap_ms: number | null;
     /**
      * The SHA-256 of the attested policy in force when the runtime evaluated the
      * request (APRV-118, amended SPEC.md §5.2), or `null` for a record written
@@ -464,6 +485,16 @@ export interface RequestDerivation {
     expiredByEvent: boolean;
     /** The TTL lapsed by arithmetic, with no `approval.expired` record. */
     expiredLazily: boolean;
+    /**
+     * The window this cycle was actually judged by: the policy's TTL narrowed by
+     * the requesting hook's declared harness ceiling, or `null` when neither
+     * bounds it (APRV-423).
+     *
+     * Reported rather than left to be recomputed. A caller that wants to SAY the
+     * deadline (the hook's deny text, the expiry record, a channel's line) reads
+     * it from here, so the words and the verdict come from one derivation.
+     */
+    effectiveTtlMs: number | null;
     declared: DeclaredAction;
     execution: ExecutionFacts;
 }
@@ -496,10 +527,30 @@ export declare function payloadOf(record: EventRecord): Record<string, unknown>;
  *   appended after a human's answer does not erase the answer; the gate refuses
  *   to append one at all in that case.
  * - Expiry: an `approval.expired` record sets `expiredByEvent`. With no such
- *   record, `ttlMs !== null` and `ts > requestTs + ttlMs` sets `expiredLazily`.
+ *   record, the request lapses against the EFFECTIVE window — `ttlMs` narrowed
+ *   by the declared harness ceiling (APRV-423, `core/harness-wait.ts`) — and
+ *   `ts > requestTs + effectiveTtlMs` sets `expiredLazily`. The ceiling can
+ *   only shorten that window, never lengthen it, so a request under a policy
+ *   with no TTL is bounded exactly when the hook that opened it declared a
+ *   ceiling and not otherwise.
  *   Both yield `state: "expired"`. An unparseable `requestTs` or `ts` also
  *   yields `expired`: liveness that cannot be demonstrated is not assumed. (The
  *   event schema's `date-time` format makes that unreachable through the real
  *   append path; it is a backstop, not a live branch.)
  */
 export declare function requestState(records: EventRecord[], actionKey: string, ts: string, ttlMs: number | null): RequestDerivation;
+/**
+ * The instant this request lapses, ISO-8601, or `null` when nothing bounds it
+ * (APRV-423).
+ *
+ * The deadline in words, for the places that have to SAY it: the hook's deny
+ * text, the `approval.expired` payload's own account of the window it closed,
+ * and the line a channel renders on a phone. Derived from the same
+ * `effectiveTtlMs` the state above was derived from, so a message can never
+ * name a deadline the verdict beside it disagreed with.
+ *
+ * `null` for a request whose instant does not parse, because a deadline
+ * measured from an unreadable start is not a deadline — that request already
+ * reads `expired`, and the caller says so in those words instead.
+ */
+export declare function requestExpiresAt(derivation: RequestDerivation): string | null;

package/dist/src/core/state.js

@@ -124,6 +124,7 @@ import { createHash } from "node:crypto";
 import { closeSync, fstatSync, openSync, readFileSync, readSync, statSync } from "node:fs";
 import { resolve } from "node:path";
 import { isPolicySha256, POLICY_HASH_FIELD } from "./attest.js";
+import { harnessCappedTtlMs } from "./harness-wait.js";
 import { onLogAppended } from "./log.js";
 import { normalizeUsd } from "./money.js";
 import { isPayloadHash } from "./payload.js";
@@ -827,6 +828,7 @@ function declaredFrom(record) {
     const hash = payload["payload_hash"];
     const execution = payload["execution"];
     const waitUntil = payload["wait_until"];
+    const capMs = payload["harness_cap_ms"];
     const policySha256 = payload[POLICY_HASH_FIELD];
     return {
         class: typeof cls === "string" ? cls : null,
@@ -839,6 +841,11 @@ function declaredFrom(record) {
         // understand must not change what the runtime does.
         execution: execution === "harness" ? "harness" : null,
         wait_until: typeof waitUntil === "string" && !Number.isNaN(Date.parse(waitUntil)) ? waitUntil : null,
+        // A positive integer or nothing (APRV-423). Zero, a fraction, a negative
+        // and a non-number all read as `null` — the policy TTL alone — because a
+        // cap this runtime cannot read is a cap it cannot subtract a margin from,
+        // and guessing one would be inventing a deadline for the requester.
+        harness_cap_ms: typeof capMs === "number" && Number.isInteger(capMs) && capMs > 0 ? capMs : null,
         // A malformed hash reads as `null`, which is the pre-APRV-118 shape: the
         // grant path then has nothing to compare and proceeds under the current
         // policy. Treating an unreadable value as a mismatch would let a corrupt
@@ -874,7 +881,12 @@ function declaredFrom(record) {
  *   appended after a human's answer does not erase the answer; the gate refuses
  *   to append one at all in that case.
  * - Expiry: an `approval.expired` record sets `expiredByEvent`. With no such
- *   record, `ttlMs !== null` and `ts > requestTs + ttlMs` sets `expiredLazily`.
+ *   record, the request lapses against the EFFECTIVE window — `ttlMs` narrowed
+ *   by the declared harness ceiling (APRV-423, `core/harness-wait.ts`) — and
+ *   `ts > requestTs + effectiveTtlMs` sets `expiredLazily`. The ceiling can
+ *   only shorten that window, never lengthen it, so a request under a policy
+ *   with no TTL is bounded exactly when the hook that opened it declared a
+ *   ceiling and not otherwise.
  *   Both yield `state: "expired"`. An unparseable `requestTs` or `ts` also
  *   yields `expired`: liveness that cannot be demonstrated is not assumed. (The
  *   event schema's `date-time` format makes that unreachable through the real
@@ -897,6 +909,7 @@ export function requestState(records, actionKey, ts, ttlMs) {
         payload_hash: null,
         execution: null,
         wait_until: null,
+        harness_cap_ms: null,
         policy_sha256: null,
     };
     const execution = { started: null, completed: null, failed: null };
@@ -963,16 +976,26 @@ export function requestState(records, actionKey, ts, ttlMs) {
     }
     let state;
     let expiredLazily = false;
+    // APRV-423. The window this cycle is judged by, which is the policy's TTL
+    // narrowed by whatever ceiling the requesting hook declared it runs under.
+    // Derived HERE, from the declaration this loop just read, so that every
+    // caller of this function — the gate's decide, the withdraw and expire
+    // verbs, the carry lookup, the daemon's sweep, the queue, the channels —
+    // reaches the same deadline without a second copy of the arithmetic. Two
+    // copies would be two answers to "has this lapsed", and the one that said
+    // "no" would be the one a late tap was recorded against.
+    const effectiveTtlMs = harnessCappedTtlMs(ttlMs, declared.harness_cap_ms);
     if (requestSeq === null) {
         state = "none";
     }
     else if (decision !== null) {
         state = decision;
     }
-    else if (ttlMs === null) {
-        // No `defaults.approval_ttl` means the policy declares no lapse. A request
-        // stays live until a human decides it; inventing a default TTL here would
-        // silently reject approvals a policy author never asked to expire.
+    else if (effectiveTtlMs === null) {
+        // No `defaults.approval_ttl` and no declared cap means nothing bounded this
+        // request. It stays live until a human decides it; inventing a default TTL
+        // here would silently reject approvals a policy author never asked to
+        // expire.
         state = "requested";
     }
     else {
@@ -982,7 +1005,7 @@ export function requestState(records, actionKey, ts, ttlMs) {
             state = "expired";
             expiredLazily = true;
         }
-        else if (now > requestedAt + ttlMs) {
+        else if (now > requestedAt + effectiveTtlMs) {
             state = "expired";
             expiredLazily = true;
         }
@@ -1002,8 +1025,31 @@ export function requestState(records, actionKey, ts, ttlMs) {
         decisionTs,
         expiredByEvent,
         expiredLazily,
+        effectiveTtlMs,
         declared,
         execution,
     };
 }
+/**
+ * The instant this request lapses, ISO-8601, or `null` when nothing bounds it
+ * (APRV-423).
+ *
+ * The deadline in words, for the places that have to SAY it: the hook's deny
+ * text, the `approval.expired` payload's own account of the window it closed,
+ * and the line a channel renders on a phone. Derived from the same
+ * `effectiveTtlMs` the state above was derived from, so a message can never
+ * name a deadline the verdict beside it disagreed with.
+ *
+ * `null` for a request whose instant does not parse, because a deadline
+ * measured from an unreadable start is not a deadline — that request already
+ * reads `expired`, and the caller says so in those words instead.
+ */
+export function requestExpiresAt(derivation) {
+    if (derivation.effectiveTtlMs === null)
+        return null;
+    const requestedAt = Date.parse(derivation.requestTs ?? "");
+    if (Number.isNaN(requestedAt))
+        return null;
+    return new Date(requestedAt + derivation.effectiveTtlMs).toISOString();
+}
 //# sourceMappingURL=state.js.map

package/dist/src/core/state.js.map

@@ -1 +1 @@
-{"version":3,"file":"state.js","sourceRoot":"","sources":["../../../src/core/state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyHG;AAEH,OAAO,EAAE,UAAU,EAAa,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC3F,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,aAAa,EAAkC,MAAM,UAAU,CAAC;AACzE,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC/E,OAAO,EACL,UAAU,EACV,iBAAiB,GAIlB,MAAM,aAAa,CAAC;AAmFrB;;;;;;;;;;;;;;GAcG;AACH,IAAI,aAAa,GAAG,KAAK,CAAC;AAE1B;;;;;;;;;;;;GAYG;AACH,IAAI,gBAAgB,GAAqB,IAAI,CAAC;AAE9C;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,KAAuB;IAClD,gBAAgB,GAAG,KAAK,CAAC;AAC3B,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,gBAAgB;IAC9B,OAAO,gBAAgB,IAAI,eAAe,CAAC;AAC7C,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,aAAa,GAAG,OAAO,CAAC;AAC1B,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,wBAAwB;IACtC,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,SAAS,UAAU,CAAC,IAAwB,EAAE,OAAe;IAC3D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,MAAM,CAAC,OAAsB;IAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzC,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;AACxE,CAAC;AAED,8EAA8E;AAC9E,0BAA0B;AAC1B,EAAE;AACF,2EAA2E;AAC3E,8EAA8E;AAC9E,4BAA4B;AAC5B,8EAA8E;AAE9E,MAAM,OAAO,GAAG,IAAI,CAAC;AAiCrB,8EAA8E;AAC9E,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAE7C,+DAA+D;AAC/D,MAAM,CAAC,MAAM,6BAA6B,GAAG,MAAM,CAAC;AAWpD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,eAAe,GAAc,MAAM,CAAC,MAAM,CAAC;IACtD,IAAI,EAAE,MAAM;IACZ,UAAU,EAAE,0BAA0B;IACtC,OAAO,EAAE,6BAA6B;CACvC,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,IAAI,WAAW,GAAG,CAAC,CAAC;AAEpB,6EAA6E;AAC7E,MAAM,UAAU,eAAe;IAC7B,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,oBAAoB;IAClC,WAAW,GAAG,CAAC,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,eAAe,GAAG,CAAC,CAAC;AAyD1B,SAAS,MAAM,CAAC,KAAiB;IAC/B,WAAW,IAAI,KAAK,CAAC,MAAM,CAAC;IAC5B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,yEAAyE;AACzE,SAAS,SAAS,CAAC,KAAiB;IAClC,WAAW,IAAI,KAAK,CAAC,MAAM,CAAC;IAC5B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5C,CAAC;AAED,6EAA6E;AAC7E,SAAS,QAAQ,CAAC,KAAW,EAAE,KAAiB;IAC9C,WAAW,IAAI,KAAK,CAAC,MAAM,CAAC;IAC5B,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpB,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,KAAiB,EAAE,KAAgB,EAAE,GAAW;IACtE,IAAI,KAAK,CAAC,gBAAgB;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC1C,4EAA4E;IAC5E,2EAA2E;IAC3E,0CAA0C;IAC1C,IAAI,KAAK,CAAC,qBAAqB,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IACrE,OAAO,GAAG,GAAG,KAAK,CAAC,iBAAiB,IAAI,KAAK,CAAC,OAAO,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,EAAU,EAAE,IAAY,EAAE,QAAgB;IAC7D,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,OAAO,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1B,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,GAAG,IAAI,EAAE,QAAQ,GAAG,IAAI,CAAC,CAAC;QACtE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,GAAG,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3B,IAAI,IAAI,GAAG,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO;IAClF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAgC,CAAC;QAAE,UAAU,CAAC,KAAK,CAAC,CAAC;AACzF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,iBAAiB;IACnB,QAAQ,GAAG,IAAI,GAAG,EAAsB,CAAC;IAClD,KAAK,GAAG,CAAC,CAAC;IACV,OAAO,GAAG,CAAC,CAAC;IACZ;;;;;OAKG;IACH,QAAQ,GAAG,CAAC,CAAC;IACb;;;;OAIG;IACH,aAAa,GAAG,CAAC,CAAC;IAElB,wEAAwE;IACxE,KAAK;QACH,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;QACf,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;QACjB,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;QAClB,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;IACzB,CAAC;IAED,gEAAgE;IAChE,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC5B,CAAC;IAED;;;;;;OAMG;IACH,IAAI,KAAK;QACP,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,KAAK;YAChB,MAAM,EAAE,IAAI,CAAC,OAAO;YACpB,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,YAAY,EAAE,IAAI,CAAC,aAAa;SACjC,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,kBAAkB,CAAC,OAAe;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QAClD,IAAI,KAAK,KAAK,SAAS;YAAE,KAAK,CAAC,gBAAgB,GAAG,IAAI,CAAC;IACzD,CAAC;IAED;;;;;OAKG;IACH,IAAI,CACF,OAAe,EACf,OAAsB,EACtB,QAAQ,GAAgB,EAAE,EAC1B,KAAK,GAAc,eAAe;QAElC,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAErC,4EAA4E;QAC5E,4EAA4E;QAC5E,0EAA0E;QAC1E,sEAAsE;QACtE,IACE,KAAK,CAAC,IAAI,KAAK,aAAa;YAC5B,KAAK,KAAK,SAAS;YACnB,KAAK,CAAC,SAAS,KAAK,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACvF,CAAC,cAAc,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,EACzC,CAAC;YACD,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;YAC3E,IAAI,WAAW,KAAK,IAAI;gBAAE,OAAO,WAAW,CAAC;QAC/C,CAAC;QAED,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACtE,CAAC;IAED;;;;;;;OAOG;IACH,UAAU,CACR,OAAe,EACf,GAAW,EACX,OAAsB,EACtB,QAAqB,EACrB,IAAmB;QAEnB,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC;QAExB,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,0EAA0E;YAC1E,0EAA0E;YAC1E,uEAAuE;YACvE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1B,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;YAClB,OAAO,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7C,CAAC;QAED,IAAI,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC;QACzB,IAAI,CAAC;YACH,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,2EAA2E;QAC7E,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACpF,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAE3F,yEAAyE;QACzE,0EAA0E;QAC1E,0EAA0E;QAC1E,mDAAmD;QACnD,IAAI,MAAM,GAAG,MAAM,CAAC;QACpB,4DAA4D;QAC5D,IAAI,YAAY,GAAkB,IAAI,CAAC;QACvC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1B,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;YAClB,IAAI,QAAQ,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;gBAC9B,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;gBACjE,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;oBAChB,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;oBACzB,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;oBACnB,uEAAuE;oBACvE,kEAAkE;oBAClE,kEAAkE;oBAClE,mEAAmE;oBACnE,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,CAAC,UAAU;wBAAE,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC;gBAChF,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;QAC9F,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAE5D,sEAAsE;QACtE,2EAA2E;QAC3E,0EAA0E;QAC1E,6EAA6E;QAC7E,4EAA4E;QAC5E,2EAA2E;QAC3E,yDAAyD;QACzD,MAAM,KAAK,GACT,KAAK,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC,UAAU;YACvE,CAAC,CAAC,KAAK,CAAC,UAAU;YAClB,CAAC,CAAC,YAAY,CAAC;QAEnB,0EAA0E;QAC1E,yEAAyE;QACzE,2EAA2E;QAC3E,sEAAsE;QACtE,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC/B,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACtD,wEAAwE;YACxE,sEAAsE;YACtE,uEAAuE;YACvE,qEAAqE;YACrE,IAAI,OAAoB,CAAC;YACzB,IAAI,MAAc,CAAC;YACnB,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;gBAC9E,yEAAyE;gBACzE,qEAAqE;gBACrE,qEAAqE;gBACrE,iEAAiE;gBACjE,0DAA0D;gBAC1D,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC;gBAC1B,OAAO;oBACL,KAAK,CAAC,SAAS,IAAI,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACxE,CAAC;iBAAM,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBAC1B,qEAAqE;gBACrE,qEAAqE;gBACrE,6BAA6B;gBAC7B,MAAM,GAAG,KAAK,CAAC;gBACf,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACN,oEAAoE;gBACpE,6DAA6D;gBAC7D,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;gBACzB,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACxC,CAAC;YACD,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;YACxE,0EAA0E;YAC1E,wEAAwE;YACxE,uDAAuD;YACvD,IAAI,QAAQ,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;gBAC9B,qBAAqB,CACnB,OAAO,EACP,GAAG,CAAC,MAAM,EACV,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,OAAO,EACjD,MAAM,EACN,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,IAAI,EACX,OAAO,CAAC,SAAS,CAClB,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;;;;OAQG;IACH,SAAS,CACP,OAAe,EACf,GAAW,EACX,KAAiB,EACjB,OAAsB,EACtB,QAAqB;QAErB,IAAI,EAAU,CAAC;QACf,IAAI,CAAC;YACH,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC;YACH,IAAI,IAAY,CAAC;YACjB,IAAI,OAAe,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;gBAC5B,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;oBAAE,OAAO,IAAI,CAAC;gBACjC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;gBAClB,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;YAED,sEAAsE;YACtE,wEAAwE;YACxE,wEAAwE;YACxE,oDAAoD;YACpD,IAAI,IAAI,GAAG,KAAK,CAAC,UAAU;gBAAE,OAAO,IAAI,CAAC;YACzC,IAAI,IAAI,KAAK,KAAK,CAAC,UAAU,IAAI,OAAO,KAAK,KAAK,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAC;YAExE,MAAM,WAAW,GAAG,KAAK,CAAC,aAAa,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;YAChE,IAAI,WAAW,GAAG,CAAC,KAAK,KAAK,CAAC,UAAU;gBAAE,OAAO,IAAI,CAAC;YACtD,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAChE,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,aAAa,CAAC;gBAAE,OAAO,IAAI,CAAC;YAClE,IAAI,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,OAAO;gBAAE,OAAO,IAAI,CAAC;YAC7D,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAAE,OAAO,IAAI,CAAC;YAEtF,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;YACzD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC;gBAAE,OAAO,IAAI,CAAC;YAE7E,qEAAqE;YACrE,wEAAwE;YACxE,0EAA0E;YAC1E,iDAAiD;YACjD,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YACvE,IAAI,KAAK,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YAChC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAE1C,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;YAChB,MAAM,MAAM,GAAmB;gBAC7B,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC;YACF,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YAC7E,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;YAC/B,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBACtD,uEAAuE;gBACvE,kEAAkE;gBAClE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC1B,OAAO,QAAQ,CAAC;YAClB,CAAC;YAED,wEAAwE;YACxE,uEAAuE;YACvE,4DAA4D;YAC5D,IAAI,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;YACxC,IAAI,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;YAC9B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;gBAChE,aAAa,GAAG,KAAK,CAAC,UAAU,GAAG,QAAQ,CAAC;gBAC5C,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;YACnE,CAAC;YAED,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;YACtC,KAAK,MAAM,MAAM,IAAI,OAAO;gBAAE,UAAU,CAAC,MAAM,CAAC,CAAC;YACjD,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE;gBACf,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,UAAU,EAAE,IAAI;gBAChB,KAAK,EAAE,MAAM,CAAC,OAAO;gBACrB,UAAU,EAAE,MAAM;gBAClB,aAAa;gBACb,QAAQ;gBACR,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,OAAO;gBACP,OAAO;gBACP,SAAS,EAAE,KAAK;gBAChB,sEAAsE;gBACtE,mDAAmD;gBACnD,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;gBAC1C,qBAAqB,EAAE,KAAK,CAAC,qBAAqB,GAAG,CAAC;gBACtD,gBAAgB,EAAE,KAAK;aACxB,CAAC,CAAC;YAEH,IAAI,QAAQ,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;gBAC9B,qBAAqB,CACnB,OAAO,EACP,IAAI,EACJ,IAAI,EACJ,MAAM,EACN,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,IAAI,EACX,OAAO,CAAC,SAAS,CAClB,CAAC;YACJ,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC;gBACH,SAAS,CAAC,EAAE,CAAC,CAAC;YAChB,CAAC;YAAC,MAAM,CAAC;gBACP,uEAAuE;YACzE,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,SAAS,CACP,GAAW,EACX,GAAW,EACX,SAAiB,EACjB,OAAe,EACf,QAAqB;IACrB;;;OAGG;IACH,WAA0B;IAC1B;;;OAGG;IACH,KAAkB;QAElB,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC/B,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACtD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1B,OAAO;QACT,CAAC;QAED,yEAAyE;QACzE,oDAAoD;QACpD,MAAM,aAAa,GAAG,GAAG,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;QACnE,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;QACtC,KAAK,MAAM,MAAM,IAAI,OAAO;YAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QAEjD,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE;YACf,SAAS;YACT,UAAU,EAAE,GAAG,CAAC,MAAM;YACtB,KAAK,EAAE,MAAM,CAAC,OAAO;YACrB,UAAU,EAAE,WAAW,IAAI,MAAM,CAAC,GAAG,CAAC;YACtC,aAAa;YACb,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,aAAa,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAClE,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO;YACP,OAAO;YACP,SAAS,EAAE,KAAK;YAChB,sEAAsE;YACtE,0DAA0D;YAC1D,iBAAiB,EAAE,IAAI,CAAC,GAAG,EAAE;YAC7B,qBAAqB,EAAE,CAAC;YACxB,gBAAgB,EAAE,KAAK;SACxB,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,MAAM,CAAC,GAAW,EAAE,KAAiB;QACnC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,eAAe,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;YAC3C,IAAI,CAAC,MAAM,CAAC,IAAI;gBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAChC,CAAC;CACF;AAED;;;;;;;GAOG;AACH,SAAS,cAAc,CACrB,KAAiB,EACjB,GAAW,EACX,SAAiB,EACjB,OAAe;IAEf,0EAA0E;IAC1E,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAE/C,6EAA6E;IAC7E,2EAA2E;IAC3E,IAAI,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAE/C,8EAA8E;IAC9E,uEAAuE;IACvE,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC,UAAU,IAAI,OAAO,KAAK,KAAK,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE9E,8EAA8E;IAC9E,mCAAmC;IACnC,MAAM,WAAW,GAAG,KAAK,CAAC,aAAa,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;IAChE,IAAI,WAAW,GAAG,CAAC,KAAK,KAAK,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IACtD,IAAI,GAAG,CAAC,WAAW,CAAC,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAExF,gEAAgE;IAChE,IAAI,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,KAAK,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAEhF,OAAO;QACL,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,iBAAiB,EAAE,CAAC;AAExD;;;;;;;;;GASG;AACH,aAAa,CAAC,CAAC,OAAO,EAAE,EAAE;IACxB,gBAAgB,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;AAC/C,CAAC,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAe,EACf,OAAO,GAAwB,EAAE;IAEjC,IAAI,CAAC;QACH,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAC/C,CAAC;QACD,OAAO,UAAU,CACf,gBAAgB,EAChB,OAAO,OAAO,uBAAuB,YAAY,CAAC,KAAK,CAAC,EAAE,CAC3D,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,aAAa,EAAE,GAAG,OAAO,CAAC;IAC5F,MAAM,KAAK,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,0EAA0E;IAC1E,4EAA4E;IAC5E,gCAAgC;IAChC,MAAM,QAAQ,GACZ,KAAK,KAAK,IAAI;QACZ,CAAC,CAAC,iBAAiB,CAAC,OAAO,EAAE,aAAa,CAAC;QAC3C,CAAC,CAAC,KAAK,CAAC,IAAI,CACR,OAAO,EACP,aAAa,EACb;YACE,OAAO,EAAE,aAAa;YACtB,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;SAC9C,EACD,SAAS,IAAI,gBAAgB,IAAI,eAAe,CACjD,CAAC;IAER,QAAQ,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAC/B,KAAK,OAAO;YACV,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC7E,KAAK,WAAW;YACd,OAAO,UAAU,CACf,eAAe,EACf,OAAO,OAAO,kJAAkJ,CACjK,CAAC;QACJ,KAAK,SAAS;YACZ,OAAO,UAAU,CACf,aAAa,EACb,OAAO,OAAO,qBAAqB,QAAQ,CAAC,MAAM,CAAC,MAAM,GACvD,QAAQ,CAAC,MAAM,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,QAAQ,CAAC,MAAM,CAAC,WAAW,EACpF,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,2FAA2F,CACzH,CAAC;IACN,CAAC;AACH,CAAC;AAwCD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,YAAY,CAAU,CAAC;AAIhF,uDAAuD;AACvD,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAK,gBAAsC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC9F,CAAC;AA+GD,6DAA6D;AAC7D,MAAM,UAAU,SAAS,CAAC,MAAmB;IAC3C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC/B,OAAO,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;AACxE,CAAC;AAED,SAAS,YAAY,CAAC,MAAmB;IACvC,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IACxC,MAAM,YAAY,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAChD,OAAO;QACL,KAAK,EAAE,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI;QAC3C,YAAY,EAAE,YAAY,CAAC,IAAI,CAAC;QAChC,UAAU,EAAE,OAAO,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;QAC/D,OAAO,EAAE,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;QACrD,YAAY,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;QAC/C,uEAAuE;QACvE,yEAAyE;QACzE,oDAAoD;QACpD,SAAS,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;QACrD,UAAU,EACR,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;QAC1F,yEAAyE;QACzE,wEAAwE;QACxE,yEAAyE;QACzE,sEAAsE;QACtE,+CAA+C;QAC/C,aAAa,EAAE,cAAc,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI;KAClE,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,UAAU,YAAY,CAC1B,OAAsB,EACtB,SAAiB,EACjB,EAAU,EACV,KAAoB;IAEpB,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,IAAI,SAAS,GAAkB,IAAI,CAAC;IACpC,IAAI,YAAY,GAAkB,IAAI,CAAC;IACvC,IAAI,QAAQ,GAAkC,IAAI,CAAC;IACnD,IAAI,WAAW,GAAkB,IAAI,CAAC;IACtC,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,QAAQ,GAAmB;QAC7B,KAAK,EAAE,IAAI;QACX,YAAY,EAAE,IAAI;QAClB,UAAU,EAAE,IAAI;QAChB,OAAO,EAAE,IAAI;QACb,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,IAAI;QACf,UAAU,EAAE,IAAI;QAChB,aAAa,EAAE,IAAI;KACpB,CAAC;IACF,MAAM,SAAS,GAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAEnF,MAAM,MAAM,GAAG,CACb,MAAmB,EACnB,KAAiD,EAC3C,EAAE;QACR,IAAI,UAAU,KAAK,IAAI;YAAE,OAAO;QAChC,sEAAsE;QACtE,mEAAmE;QACnE,uEAAuE;QACvE,sEAAsE;QACtE,uEAAuE;QACvE,8EAA8E;QAC9E,IAAI,QAAQ,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO;QACrD,QAAQ,GAAG,KAAK,CAAC;QACjB,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC;QACzB,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC;QACvB,IAAI,KAAK,KAAK,SAAS;YAAE,cAAc,GAAG,IAAI,CAAC;IACjD,CAAC,CAAC;IAEF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;YAAE,SAAS;QAC9C,QAAQ,MAAM,CAAC,KAAK,EAAE,CAAC;YACrB,KAAK,oBAAoB;gBACvB,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC;gBAC3B,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC;gBACxB,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC;gBACtB,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC;gBAC5B,QAAQ,GAAG,IAAI,CAAC;gBAChB,WAAW,GAAG,IAAI,CAAC;gBACnB,UAAU,GAAG,IAAI,CAAC;gBAClB,cAAc,GAAG,KAAK,CAAC;gBACvB,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;gBAChC,MAAM;YACR,KAAK,kBAAkB;gBACrB,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;gBAC1B,MAAM;YACR,KAAK,mBAAmB;gBACtB,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;gBAC3B,MAAM;YACR,KAAK,kBAAkB;gBACrB,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;gBAC1B,MAAM;YACR,KAAK,kBAAkB;gBACrB,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;gBAC1B,MAAM;YACR,KAAK,oBAAoB;gBACvB,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;gBAC5B,MAAM;YACR,KAAK,mBAAmB;gBACtB,SAAS,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC;gBAC/B,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC;gBAC3B,MAAM;YACR,KAAK,qBAAqB;gBACxB,SAAS,CAAC,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC;gBACjC,MAAM;YACR,KAAK,kBAAkB;gBACrB,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC;gBAC9B,MAAM;YACR;gBACE,MAAM;QACV,CAAC;IACH,CAAC;IAED,IAAI,KAAmB,CAAC;IACxB,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,KAAK,GAAG,MAAM,CAAC;IACjB,CAAC;SAAM,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC7B,KAAK,GAAG,QAAQ,CAAC;IACnB,CAAC;SAAM,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1B,2EAA2E;QAC3E,0EAA0E;QAC1E,mEAAmE;QACnE,KAAK,GAAG,WAAW,CAAC;IACtB,CAAC;SAAM,CAAC;QACN,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3B,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACnD,KAAK,GAAG,SAAS,CAAC;YAClB,aAAa,GAAG,IAAI,CAAC;QACvB,CAAC;aAAM,IAAI,GAAG,GAAG,WAAW,GAAG,KAAK,EAAE,CAAC;YACrC,KAAK,GAAG,SAAS,CAAC;YAClB,aAAa,GAAG,IAAI,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,KAAK,GAAG,WAAW,CAAC;QACtB,CAAC;IACH,CAAC;IAED,OAAO;QACL,SAAS;QACT,KAAK;QACL,IAAI;QACJ,UAAU;QACV,SAAS;QACT,YAAY;QACZ,QAAQ;QACR,WAAW;QACX,UAAU;QACV,cAAc;QACd,aAAa;QACb,QAAQ;QACR,SAAS;KACV,CAAC;AACJ,CAAC"}
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../../../src/core/state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyHG;AAEH,OAAO,EAAE,UAAU,EAAa,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC3F,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAkC,MAAM,UAAU,CAAC;AACzE,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC/E,OAAO,EACL,UAAU,EACV,iBAAiB,GAIlB,MAAM,aAAa,CAAC;AAmFrB;;;;;;;;;;;;;;GAcG;AACH,IAAI,aAAa,GAAG,KAAK,CAAC;AAE1B;;;;;;;;;;;;GAYG;AACH,IAAI,gBAAgB,GAAqB,IAAI,CAAC;AAE9C;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,KAAuB;IAClD,gBAAgB,GAAG,KAAK,CAAC;AAC3B,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,gBAAgB;IAC9B,OAAO,gBAAgB,IAAI,eAAe,CAAC;AAC7C,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,aAAa,GAAG,OAAO,CAAC;AAC1B,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,wBAAwB;IACtC,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,SAAS,UAAU,CAAC,IAAwB,EAAE,OAAe;IAC3D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,MAAM,CAAC,OAAsB;IAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzC,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;AACxE,CAAC;AAED,8EAA8E;AAC9E,0BAA0B;AAC1B,EAAE;AACF,2EAA2E;AAC3E,8EAA8E;AAC9E,4BAA4B;AAC5B,8EAA8E;AAE9E,MAAM,OAAO,GAAG,IAAI,CAAC;AAiCrB,8EAA8E;AAC9E,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAE7C,+DAA+D;AAC/D,MAAM,CAAC,MAAM,6BAA6B,GAAG,MAAM,CAAC;AAWpD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,eAAe,GAAc,MAAM,CAAC,MAAM,CAAC;IACtD,IAAI,EAAE,MAAM;IACZ,UAAU,EAAE,0BAA0B;IACtC,OAAO,EAAE,6BAA6B;CACvC,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,IAAI,WAAW,GAAG,CAAC,CAAC;AAEpB,6EAA6E;AAC7E,MAAM,UAAU,eAAe;IAC7B,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,oBAAoB;IAClC,WAAW,GAAG,CAAC,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,eAAe,GAAG,CAAC,CAAC;AAyD1B,SAAS,MAAM,CAAC,KAAiB;IAC/B,WAAW,IAAI,KAAK,CAAC,MAAM,CAAC;IAC5B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,yEAAyE;AACzE,SAAS,SAAS,CAAC,KAAiB;IAClC,WAAW,IAAI,KAAK,CAAC,MAAM,CAAC;IAC5B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5C,CAAC;AAED,6EAA6E;AAC7E,SAAS,QAAQ,CAAC,KAAW,EAAE,KAAiB;IAC9C,WAAW,IAAI,KAAK,CAAC,MAAM,CAAC;IAC5B,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpB,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,KAAiB,EAAE,KAAgB,EAAE,GAAW;IACtE,IAAI,KAAK,CAAC,gBAAgB;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC1C,4EAA4E;IAC5E,2EAA2E;IAC3E,0CAA0C;IAC1C,IAAI,KAAK,CAAC,qBAAqB,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IACrE,OAAO,GAAG,GAAG,KAAK,CAAC,iBAAiB,IAAI,KAAK,CAAC,OAAO,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,EAAU,EAAE,IAAY,EAAE,QAAgB;IAC7D,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,OAAO,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1B,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,GAAG,IAAI,EAAE,QAAQ,GAAG,IAAI,CAAC,CAAC;QACtE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,GAAG,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3B,IAAI,IAAI,GAAG,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO;IAClF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAgC,CAAC;QAAE,UAAU,CAAC,KAAK,CAAC,CAAC;AACzF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,iBAAiB;IACnB,QAAQ,GAAG,IAAI,GAAG,EAAsB,CAAC;IAClD,KAAK,GAAG,CAAC,CAAC;IACV,OAAO,GAAG,CAAC,CAAC;IACZ;;;;;OAKG;IACH,QAAQ,GAAG,CAAC,CAAC;IACb;;;;OAIG;IACH,aAAa,GAAG,CAAC,CAAC;IAElB,wEAAwE;IACxE,KAAK;QACH,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;QACf,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;QACjB,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;QAClB,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;IACzB,CAAC;IAED,gEAAgE;IAChE,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC5B,CAAC;IAED;;;;;;OAMG;IACH,IAAI,KAAK;QACP,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,KAAK;YAChB,MAAM,EAAE,IAAI,CAAC,OAAO;YACpB,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,YAAY,EAAE,IAAI,CAAC,aAAa;SACjC,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,kBAAkB,CAAC,OAAe;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QAClD,IAAI,KAAK,KAAK,SAAS;YAAE,KAAK,CAAC,gBAAgB,GAAG,IAAI,CAAC;IACzD,CAAC;IAED;;;;;OAKG;IACH,IAAI,CACF,OAAe,EACf,OAAsB,EACtB,QAAQ,GAAgB,EAAE,EAC1B,KAAK,GAAc,eAAe;QAElC,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAErC,4EAA4E;QAC5E,4EAA4E;QAC5E,0EAA0E;QAC1E,sEAAsE;QACtE,IACE,KAAK,CAAC,IAAI,KAAK,aAAa;YAC5B,KAAK,KAAK,SAAS;YACnB,KAAK,CAAC,SAAS,KAAK,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACvF,CAAC,cAAc,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,EACzC,CAAC;YACD,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;YAC3E,IAAI,WAAW,KAAK,IAAI;gBAAE,OAAO,WAAW,CAAC;QAC/C,CAAC;QAED,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACtE,CAAC;IAED;;;;;;;OAOG;IACH,UAAU,CACR,OAAe,EACf,GAAW,EACX,OAAsB,EACtB,QAAqB,EACrB,IAAmB;QAEnB,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC;QAExB,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,0EAA0E;YAC1E,0EAA0E;YAC1E,uEAAuE;YACvE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1B,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;YAClB,OAAO,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7C,CAAC;QAED,IAAI,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC;QACzB,IAAI,CAAC;YACH,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,2EAA2E;QAC7E,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACpF,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAE3F,yEAAyE;QACzE,0EAA0E;QAC1E,0EAA0E;QAC1E,mDAAmD;QACnD,IAAI,MAAM,GAAG,MAAM,CAAC;QACpB,4DAA4D;QAC5D,IAAI,YAAY,GAAkB,IAAI,CAAC;QACvC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1B,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;YAClB,IAAI,QAAQ,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;gBAC9B,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;gBACjE,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;oBAChB,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;oBACzB,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;oBACnB,uEAAuE;oBACvE,kEAAkE;oBAClE,kEAAkE;oBAClE,mEAAmE;oBACnE,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,CAAC,UAAU;wBAAE,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC;gBAChF,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;QAC9F,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAE5D,sEAAsE;QACtE,2EAA2E;QAC3E,0EAA0E;QAC1E,6EAA6E;QAC7E,4EAA4E;QAC5E,2EAA2E;QAC3E,yDAAyD;QACzD,MAAM,KAAK,GACT,KAAK,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC,UAAU;YACvE,CAAC,CAAC,KAAK,CAAC,UAAU;YAClB,CAAC,CAAC,YAAY,CAAC;QAEnB,0EAA0E;QAC1E,yEAAyE;QACzE,2EAA2E;QAC3E,sEAAsE;QACtE,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC/B,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACtD,wEAAwE;YACxE,sEAAsE;YACtE,uEAAuE;YACvE,qEAAqE;YACrE,IAAI,OAAoB,CAAC;YACzB,IAAI,MAAc,CAAC;YACnB,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;gBAC9E,yEAAyE;gBACzE,qEAAqE;gBACrE,qEAAqE;gBACrE,iEAAiE;gBACjE,0DAA0D;gBAC1D,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC;gBAC1B,OAAO;oBACL,KAAK,CAAC,SAAS,IAAI,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACxE,CAAC;iBAAM,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBAC1B,qEAAqE;gBACrE,qEAAqE;gBACrE,6BAA6B;gBAC7B,MAAM,GAAG,KAAK,CAAC;gBACf,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACN,oEAAoE;gBACpE,6DAA6D;gBAC7D,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;gBACzB,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACxC,CAAC;YACD,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;YACxE,0EAA0E;YAC1E,wEAAwE;YACxE,uDAAuD;YACvD,IAAI,QAAQ,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;gBAC9B,qBAAqB,CACnB,OAAO,EACP,GAAG,CAAC,MAAM,EACV,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,OAAO,EACjD,MAAM,EACN,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,IAAI,EACX,OAAO,CAAC,SAAS,CAClB,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;;;;OAQG;IACH,SAAS,CACP,OAAe,EACf,GAAW,EACX,KAAiB,EACjB,OAAsB,EACtB,QAAqB;QAErB,IAAI,EAAU,CAAC;QACf,IAAI,CAAC;YACH,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC;YACH,IAAI,IAAY,CAAC;YACjB,IAAI,OAAe,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;gBAC5B,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;oBAAE,OAAO,IAAI,CAAC;gBACjC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;gBAClB,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;YAED,sEAAsE;YACtE,wEAAwE;YACxE,wEAAwE;YACxE,oDAAoD;YACpD,IAAI,IAAI,GAAG,KAAK,CAAC,UAAU;gBAAE,OAAO,IAAI,CAAC;YACzC,IAAI,IAAI,KAAK,KAAK,CAAC,UAAU,IAAI,OAAO,KAAK,KAAK,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAC;YAExE,MAAM,WAAW,GAAG,KAAK,CAAC,aAAa,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;YAChE,IAAI,WAAW,GAAG,CAAC,KAAK,KAAK,CAAC,UAAU;gBAAE,OAAO,IAAI,CAAC;YACtD,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAChE,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,aAAa,CAAC;gBAAE,OAAO,IAAI,CAAC;YAClE,IAAI,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,OAAO;gBAAE,OAAO,IAAI,CAAC;YAC7D,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAAE,OAAO,IAAI,CAAC;YAEtF,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;YACzD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC;gBAAE,OAAO,IAAI,CAAC;YAE7E,qEAAqE;YACrE,wEAAwE;YACxE,0EAA0E;YAC1E,iDAAiD;YACjD,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YACvE,IAAI,KAAK,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YAChC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAE1C,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;YAChB,MAAM,MAAM,GAAmB;gBAC7B,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC;YACF,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YAC7E,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;YAC/B,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBACtD,uEAAuE;gBACvE,kEAAkE;gBAClE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC1B,OAAO,QAAQ,CAAC;YAClB,CAAC;YAED,wEAAwE;YACxE,uEAAuE;YACvE,4DAA4D;YAC5D,IAAI,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;YACxC,IAAI,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;YAC9B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;gBAChE,aAAa,GAAG,KAAK,CAAC,UAAU,GAAG,QAAQ,CAAC;gBAC5C,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;YACnE,CAAC;YAED,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;YACtC,KAAK,MAAM,MAAM,IAAI,OAAO;gBAAE,UAAU,CAAC,MAAM,CAAC,CAAC;YACjD,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE;gBACf,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,UAAU,EAAE,IAAI;gBAChB,KAAK,EAAE,MAAM,CAAC,OAAO;gBACrB,UAAU,EAAE,MAAM;gBAClB,aAAa;gBACb,QAAQ;gBACR,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,OAAO;gBACP,OAAO;gBACP,SAAS,EAAE,KAAK;gBAChB,sEAAsE;gBACtE,mDAAmD;gBACnD,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;gBAC1C,qBAAqB,EAAE,KAAK,CAAC,qBAAqB,GAAG,CAAC;gBACtD,gBAAgB,EAAE,KAAK;aACxB,CAAC,CAAC;YAEH,IAAI,QAAQ,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;gBAC9B,qBAAqB,CACnB,OAAO,EACP,IAAI,EACJ,IAAI,EACJ,MAAM,EACN,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,IAAI,EACX,OAAO,CAAC,SAAS,CAClB,CAAC;YACJ,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC;gBACH,SAAS,CAAC,EAAE,CAAC,CAAC;YAChB,CAAC;YAAC,MAAM,CAAC;gBACP,uEAAuE;YACzE,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,SAAS,CACP,GAAW,EACX,GAAW,EACX,SAAiB,EACjB,OAAe,EACf,QAAqB;IACrB;;;OAGG;IACH,WAA0B;IAC1B;;;OAGG;IACH,KAAkB;QAElB,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC/B,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACtD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1B,OAAO;QACT,CAAC;QAED,yEAAyE;QACzE,oDAAoD;QACpD,MAAM,aAAa,GAAG,GAAG,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;QACnE,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;QACtC,KAAK,MAAM,MAAM,IAAI,OAAO;YAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QAEjD,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE;YACf,SAAS;YACT,UAAU,EAAE,GAAG,CAAC,MAAM;YACtB,KAAK,EAAE,MAAM,CAAC,OAAO;YACrB,UAAU,EAAE,WAAW,IAAI,MAAM,CAAC,GAAG,CAAC;YACtC,aAAa;YACb,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,aAAa,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAClE,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO;YACP,OAAO;YACP,SAAS,EAAE,KAAK;YAChB,sEAAsE;YACtE,0DAA0D;YAC1D,iBAAiB,EAAE,IAAI,CAAC,GAAG,EAAE;YAC7B,qBAAqB,EAAE,CAAC;YACxB,gBAAgB,EAAE,KAAK;SACxB,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,MAAM,CAAC,GAAW,EAAE,KAAiB;QACnC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,eAAe,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;YAC3C,IAAI,CAAC,MAAM,CAAC,IAAI;gBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAChC,CAAC;CACF;AAED;;;;;;;GAOG;AACH,SAAS,cAAc,CACrB,KAAiB,EACjB,GAAW,EACX,SAAiB,EACjB,OAAe;IAEf,0EAA0E;IAC1E,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAE/C,6EAA6E;IAC7E,2EAA2E;IAC3E,IAAI,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAE/C,8EAA8E;IAC9E,uEAAuE;IACvE,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC,UAAU,IAAI,OAAO,KAAK,KAAK,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE9E,8EAA8E;IAC9E,mCAAmC;IACnC,MAAM,WAAW,GAAG,KAAK,CAAC,aAAa,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;IAChE,IAAI,WAAW,GAAG,CAAC,KAAK,KAAK,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IACtD,IAAI,GAAG,CAAC,WAAW,CAAC,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAExF,gEAAgE;IAChE,IAAI,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,KAAK,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAEhF,OAAO;QACL,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,iBAAiB,EAAE,CAAC;AAExD;;;;;;;;;GASG;AACH,aAAa,CAAC,CAAC,OAAO,EAAE,EAAE;IACxB,gBAAgB,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;AAC/C,CAAC,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAe,EACf,OAAO,GAAwB,EAAE;IAEjC,IAAI,CAAC;QACH,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAC/C,CAAC;QACD,OAAO,UAAU,CACf,gBAAgB,EAChB,OAAO,OAAO,uBAAuB,YAAY,CAAC,KAAK,CAAC,EAAE,CAC3D,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,aAAa,EAAE,GAAG,OAAO,CAAC;IAC5F,MAAM,KAAK,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,0EAA0E;IAC1E,4EAA4E;IAC5E,gCAAgC;IAChC,MAAM,QAAQ,GACZ,KAAK,KAAK,IAAI;QACZ,CAAC,CAAC,iBAAiB,CAAC,OAAO,EAAE,aAAa,CAAC;QAC3C,CAAC,CAAC,KAAK,CAAC,IAAI,CACR,OAAO,EACP,aAAa,EACb;YACE,OAAO,EAAE,aAAa;YACtB,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;SAC9C,EACD,SAAS,IAAI,gBAAgB,IAAI,eAAe,CACjD,CAAC;IAER,QAAQ,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAC/B,KAAK,OAAO;YACV,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC7E,KAAK,WAAW;YACd,OAAO,UAAU,CACf,eAAe,EACf,OAAO,OAAO,kJAAkJ,CACjK,CAAC;QACJ,KAAK,SAAS;YACZ,OAAO,UAAU,CACf,aAAa,EACb,OAAO,OAAO,qBAAqB,QAAQ,CAAC,MAAM,CAAC,MAAM,GACvD,QAAQ,CAAC,MAAM,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,QAAQ,CAAC,MAAM,CAAC,WAAW,EACpF,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,2FAA2F,CACzH,CAAC;IACN,CAAC;AACH,CAAC;AAwCD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,YAAY,CAAU,CAAC;AAIhF,uDAAuD;AACvD,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAK,gBAAsC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC9F,CAAC;AA8ID,6DAA6D;AAC7D,MAAM,UAAU,SAAS,CAAC,MAAmB;IAC3C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC/B,OAAO,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;AACxE,CAAC;AAED,SAAS,YAAY,CAAC,MAAmB;IACvC,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACxC,MAAM,YAAY,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAChD,OAAO;QACL,KAAK,EAAE,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI;QAC3C,YAAY,EAAE,YAAY,CAAC,IAAI,CAAC;QAChC,UAAU,EAAE,OAAO,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;QAC/D,OAAO,EAAE,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;QACrD,YAAY,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;QAC/C,uEAAuE;QACvE,yEAAyE;QACzE,oDAAoD;QACpD,SAAS,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;QACrD,UAAU,EACR,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;QAC1F,yEAAyE;QACzE,yEAAyE;QACzE,0EAA0E;QAC1E,oEAAoE;QACpE,cAAc,EACZ,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;QAClF,yEAAyE;QACzE,wEAAwE;QACxE,yEAAyE;QACzE,sEAAsE;QACtE,+CAA+C;QAC/C,aAAa,EAAE,cAAc,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI;KAClE,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,MAAM,UAAU,YAAY,CAC1B,OAAsB,EACtB,SAAiB,EACjB,EAAU,EACV,KAAoB;IAEpB,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,IAAI,SAAS,GAAkB,IAAI,CAAC;IACpC,IAAI,YAAY,GAAkB,IAAI,CAAC;IACvC,IAAI,QAAQ,GAAkC,IAAI,CAAC;IACnD,IAAI,WAAW,GAAkB,IAAI,CAAC;IACtC,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,QAAQ,GAAmB;QAC7B,KAAK,EAAE,IAAI;QACX,YAAY,EAAE,IAAI;QAClB,UAAU,EAAE,IAAI;QAChB,OAAO,EAAE,IAAI;QACb,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,IAAI;QACf,UAAU,EAAE,IAAI;QAChB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,IAAI;KACpB,CAAC;IACF,MAAM,SAAS,GAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAEnF,MAAM,MAAM,GAAG,CACb,MAAmB,EACnB,KAAiD,EAC3C,EAAE;QACR,IAAI,UAAU,KAAK,IAAI;YAAE,OAAO;QAChC,sEAAsE;QACtE,mEAAmE;QACnE,uEAAuE;QACvE,sEAAsE;QACtE,uEAAuE;QACvE,8EAA8E;QAC9E,IAAI,QAAQ,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO;QACrD,QAAQ,GAAG,KAAK,CAAC;QACjB,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC;QACzB,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC;QACvB,IAAI,KAAK,KAAK,SAAS;YAAE,cAAc,GAAG,IAAI,CAAC;IACjD,CAAC,CAAC;IAEF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;YAAE,SAAS;QAC9C,QAAQ,MAAM,CAAC,KAAK,EAAE,CAAC;YACrB,KAAK,oBAAoB;gBACvB,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC;gBAC3B,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC;gBACxB,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC;gBACtB,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC;gBAC5B,QAAQ,GAAG,IAAI,CAAC;gBAChB,WAAW,GAAG,IAAI,CAAC;gBACnB,UAAU,GAAG,IAAI,CAAC;gBAClB,cAAc,GAAG,KAAK,CAAC;gBACvB,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;gBAChC,MAAM;YACR,KAAK,kBAAkB;gBACrB,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;gBAC1B,MAAM;YACR,KAAK,mBAAmB;gBACtB,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;gBAC3B,MAAM;YACR,KAAK,kBAAkB;gBACrB,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;gBAC1B,MAAM;YACR,KAAK,kBAAkB;gBACrB,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;gBAC1B,MAAM;YACR,KAAK,oBAAoB;gBACvB,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;gBAC5B,MAAM;YACR,KAAK,mBAAmB;gBACtB,SAAS,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC;gBAC/B,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC;gBAC3B,MAAM;YACR,KAAK,qBAAqB;gBACxB,SAAS,CAAC,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC;gBACjC,MAAM;YACR,KAAK,kBAAkB;gBACrB,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC;gBAC9B,MAAM;YACR;gBACE,MAAM;QACV,CAAC;IACH,CAAC;IAED,IAAI,KAAmB,CAAC;IACxB,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,0EAA0E;IAC1E,2EAA2E;IAC3E,wEAAwE;IACxE,uEAAuE;IACvE,yEAAyE;IACzE,yEAAyE;IACzE,0EAA0E;IAC1E,yDAAyD;IACzD,MAAM,cAAc,GAAG,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;IAC1E,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,KAAK,GAAG,MAAM,CAAC;IACjB,CAAC;SAAM,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC7B,KAAK,GAAG,QAAQ,CAAC;IACnB,CAAC;SAAM,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;QACnC,4EAA4E;QAC5E,2EAA2E;QAC3E,sEAAsE;QACtE,UAAU;QACV,KAAK,GAAG,WAAW,CAAC;IACtB,CAAC;SAAM,CAAC;QACN,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3B,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACnD,KAAK,GAAG,SAAS,CAAC;YAClB,aAAa,GAAG,IAAI,CAAC;QACvB,CAAC;aAAM,IAAI,GAAG,GAAG,WAAW,GAAG,cAAc,EAAE,CAAC;YAC9C,KAAK,GAAG,SAAS,CAAC;YAClB,aAAa,GAAG,IAAI,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,KAAK,GAAG,WAAW,CAAC;QACtB,CAAC;IACH,CAAC;IAED,OAAO;QACL,SAAS;QACT,KAAK;QACL,IAAI;QACJ,UAAU;QACV,SAAS;QACT,YAAY;QACZ,QAAQ;QACR,WAAW;QACX,UAAU;QACV,cAAc;QACd,aAAa;QACb,cAAc;QACd,QAAQ;QACR,SAAS;KACV,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAA6B;IAC5D,IAAI,UAAU,CAAC,cAAc,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACpD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IAC3D,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,OAAO,IAAI,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,cAAc,CAAC,CAAC,WAAW,EAAE,CAAC;AACzE,CAAC"}

package/dist/src/core/telegram-config.d.ts

@@ -32,6 +32,85 @@ export declare const TELEGRAM_TOKEN_ENV = "APPROVAL_TG_TOKEN";
  * declares no `channels.telegram.chat_id_env`. Also a default.
  */
 export declare const TELEGRAM_CHAT_ENV = "APPROVAL_TG_CHAT";
+/**
+ * The environment variable the webhook `secret_token` is read from (APRV-424).
+ *
+ * ## Why this one is conventional and the two above are declared
+ *
+ * `token_env` and `chat_id_env` are policy keys because a machine may run two
+ * gates against two bots, and the policy is where that pair is written down.
+ * This is not that kind of key, for two reasons and in that order:
+ *
+ * 1. `channels.telegram` in `schema/policy.schema.json` is
+ *    `additionalProperties: false`, so declaring a name there is a schema
+ *    amendment, which is its own task. A capability does not get to arrive by
+ *    widening a validated document on the way past.
+ * 2. It is launch configuration in the sense of SPEC.md §11.1 invariant 7,
+ *    which is where the precedent is: `APPROVAL_SENDER_KEY` (APRV-370) and
+ *    `approval serve`'s two bearer credentials (APRV-421) are conventional
+ *    names for the same reason. The host that launches one process per tenant
+ *    sets it, exactly as it sets the bot token and the vault passphrase
+ *    (`design/hosted-daemon-identity.md` §1.2), and two gates on one machine
+ *    already have two environments rather than one.
+ *
+ * The VALUE never appears in a policy, a log, a record or a message. Telegram
+ * constrains it to 1-256 characters of `A-Z a-z 0-9 _ -`; the verb refuses
+ * anything outside that, and anything short enough to have been chosen by a
+ * person rather than generated.
+ */
+export declare const TELEGRAM_WEBHOOK_SECRET_ENV = "APPROVAL_TG_WEBHOOK_SECRET";
+/**
+ * One webhook URL, reduced so two spellings of one endpoint compare equal
+ * (APRV-424, review finding 6).
+ *
+ * The host is lowercased and one trailing slash is dropped from the path.
+ * Nothing more is attempted: `normaliseApiBase` in `core/channel-owner.ts`
+ * argues the same restraint, and the direction of the error matters here. Two
+ * spellings that compare UNEQUAL turn a restart into a refusal, which an
+ * operator clears with one flag; two that compare equal when they are
+ * different endpoints would let a second host quietly take a first host's
+ * taps, which nobody would see.
+ *
+ * The path's case is preserved, because a path is case-sensitive and a webhook
+ * path is often a random token.
+ *
+ * `null` for anything that is not a URL, so a caller compares two known URLs
+ * or refuses. A failed parse is never "equal to everything".
+ */
+export declare function normaliseWebhookUrl(raw: string): string | null;
+/**
+ * A webhook PATH as it may be printed (APRV-424, reviews 1 to 3).
+ *
+ * With two segments or more, the first is kept and the rest is replaced:
+ * `/hook/8Xk2-a-long-random-value` prints as `/hook/<path redacted>`, which is
+ * enough for an operator to recognise their own endpoint while the bearer half
+ * stays theirs. With exactly ONE segment the whole path is replaced, because a
+ * single-segment path is the shape a tunnel's own token takes
+ * (`https://host/8Xk2-a-long-random-value`) and keeping "the first segment"
+ * there would print the token itself (third review, finding 3).
+ *
+ * The operator loses nothing either way. They typed it into `--url`.
+ *
+ * The second review found the first version printing the SERVED path verbatim,
+ * on the argument that a path this process serves is a path the operator
+ * chose. That argument is right about the operator and wrong about everyone
+ * else who reads a terminal, a log aggregator or a pasted banner.
+ */
+export declare function redactWebhookPath(path: string): string;
+/**
+ * A webhook URL as it may be printed (APRV-424, review finding 10).
+ *
+ * The origin, which carries no userinfo by construction, plus
+ * {@link redactWebhookPath}'s reading of the path. Used by every line this
+ * runtime writes about a webhook url: the start-up banner, the
+ * `webhook_started` object, the registration refusal and the listener's
+ * `webhook-registered` message, whether the url is this process's own or
+ * another host's.
+ *
+ * A url carrying userinfo is refused at startup rather than printed; this is
+ * the belt on that brace, because the origin never contains it.
+ */
+export declare function redactWebhookUrl(raw: string): string;
 /** The NAME of the variable this policy says the bot token lives in. */
 export declare function telegramTokenEnvFor(load: PolicyLoadResult): string;
 /** The NAME of the variable this policy says the approver chat id lives in. */