cordisx 0.1.0-beta.2 → 0.1.0-beta.21

package/dist/src/launcher/local-usage.js

@@ -0,0 +1,398 @@
+import { classifyWorkUsageHeader } from './work-usage.js';
+import { createHash, randomUUID } from 'node:crypto';
+import { mkdir, open, readdir, realpath } from 'node:fs/promises';
+import path from 'node:path';
+import { DatabaseSync } from 'node:sqlite';
+import { constants } from 'node:fs';
+import { isUsageSourceState, reduceUsageRecords } from './usage-reducer.js';
+const hash = (value) => createHash('sha256').update(value).digest('hex');
+const record = (value) => typeof value === 'object' && value !== null && !Array.isArray(value);
+const integer = (value) => Number.isSafeInteger(value) && Number(value) >= 0;
+const unavailable = (reason) => ({
+    schemaVersion: 1,
+    status: 'unavailable',
+    reason,
+    diagnostics: [{ code: reason }],
+});
+function decode(value, scopeId) {
+    if (typeof value !== 'string')
+        throw new Error('Invalid usage ledger');
+    const ledger = JSON.parse(value);
+    if (!record(ledger))
+        throw new Error('Invalid usage ledger');
+    const snap = ledger.snapshot;
+    if (ledger.version !== 1 || !integer(ledger.sequence) || !integer(ledger.scanIndex) || !snap || snap.scopeId !== scopeId
+        || snap.schemaVersion !== 1 || snap.status !== 'ready' || snap.policyId !== 'codex-local-input-output-v1'
+        || snap.sourceId !== 'codex-local-rollouts-v1' || typeof snap.epoch !== 'string'
+        || !/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/.test(snap.epoch) || !integer(snap.revision)
+        || !integer(snap.inputTokens)
+        || !integer(snap.outputTokens) || !integer(snap.eligibleTokens)
+        || snap.eligibleTokens !== snap.inputTokens + snap.outputTokens || !integer(snap.enabledAt)
+        || !integer(snap.observedThrough) || snap.coverage !== 'partial' || snap.revision > ledger.sequence
+        || Object.keys(snap).some(key => ![
+            'schemaVersion',
+            'status',
+            'scopeId',
+            'sourceId',
+            'epoch',
+            'revision',
+            'policyId',
+            'eligibleTokens',
+            'inputTokens',
+            'outputTokens',
+            'enabledAt',
+            'observedThrough',
+            'coverage',
+            'diagnostics',
+        ].includes(key))
+        || !Array.isArray(snap.diagnostics) || snap.diagnostics.some(item => !record(item) || typeof item.code !== 'string'
+        || !/^[a-z][a-z0-9-]{0,63}$/.test(item.code) || (item.count !== undefined && !integer(item.count))
+        || Object.keys(item).some(key => !['code', 'count'].includes(key))) || !ledger.sources || typeof ledger.sources !== 'object'
+        || Array.isArray(ledger.sources) || Object.keys(ledger.sources).length > 20_000)
+        throw new Error('Invalid usage ledger');
+    for (const [key, checkpoint] of Object.entries(ledger.sources)) {
+        if (!/^[a-f0-9]{64}$/.test(key) || !record(checkpoint) || !integer(checkpoint.offset)
+            || !/^[a-f0-9]{64}$/.test(checkpoint.digest) || !isUsageSourceState(checkpoint.state)
+            || checkpoint.state.ownerId === null || key !== hash(checkpoint.state.ownerId)
+            || (checkpoint.blocked !== undefined && checkpoint.blocked !== true))
+            throw new Error('Invalid usage checkpoint');
+    }
+    return ledger;
+}
+export function localUsageLedgerIdentity(value, scopeId) {
+    const { epoch } = decode(value, scopeId).snapshot;
+    return { scopeId, epoch };
+}
+/** The only persisted source data are counters, source hashes and continuity checkpoints.
+ * SQLite atomically commits aggregate and checkpoints; sequence CAS also fences other processes. */
+export class LocalUsageHost {
+    options;
+    active;
+    closed = false;
+    constructor(options) {
+        this.options = options;
+    }
+    dispose() {
+        this.closed = true;
+    }
+    read() {
+        if (this.closed)
+            return Promise.resolve(unavailable('store-unavailable'));
+        if (this.active)
+            return this.active;
+        this.active = this.scan().catch(() => unavailable('store-unavailable')).finally(() => {
+            this.active = undefined;
+        });
+        return this.active;
+    }
+    async scan() {
+        const now = this.options.now ?? Date.now;
+        const home = await realpath(this.options.codexHome).catch(() => undefined);
+        if (!home)
+            return unavailable('source-unavailable');
+        const scopeId = hash(`${home}\0${this.options.profileName}${this.options.projection === 'work-v2' ? '\0work-v2' : ''}`);
+        const directory = path.join(this.options.cacheDir, this.options.projection === 'work-v2' ? 'local-work-usage-v2' : 'local-usage-v1');
+        await mkdir(directory, { recursive: true, mode: 0o700 });
+        const db = new DatabaseSync(path.join(directory, `${scopeId}.sqlite`));
+        try {
+            db.exec('PRAGMA busy_timeout=1000; PRAGMA journal_mode=WAL; PRAGMA synchronous=FULL; CREATE TABLE IF NOT EXISTS ledger (id INTEGER PRIMARY KEY CHECK(id=1), value TEXT NOT NULL)');
+            const row = db.prepare('SELECT value FROM ledger WHERE id=1').get();
+            const expected = this.options.expectedWorkIdentity;
+            if (expected
+                && (!row || scopeId !== expected.scopeId || decode(row.value, scopeId).snapshot.epoch !== expected.epoch)) {
+                throw new Error('work ledger identity changed');
+            }
+            const stamp = now();
+            const ledger = row ? decode(row.value, scopeId) : {
+                version: 1,
+                sequence: 0,
+                scanIndex: 0,
+                sources: {},
+                snapshot: {
+                    schemaVersion: 1,
+                    status: 'ready',
+                    scopeId,
+                    sourceId: 'codex-local-rollouts-v1',
+                    epoch: randomUUID(),
+                    revision: 0,
+                    policyId: 'codex-local-input-output-v1',
+                    eligibleTokens: 0,
+                    inputTokens: 0,
+                    outputTokens: 0,
+                    enabledAt: stamp,
+                    observedThrough: stamp,
+                    coverage: 'partial',
+                    diagnostics: [],
+                },
+            };
+            // Reuse only a previously committed projection. Separate windows/processes
+            // share this cooldown; permission checks stay at the public-service boundary.
+            const elapsed = stamp - ledger.snapshot.observedThrough;
+            if (row && elapsed >= 0 && elapsed < (this.options.scanCooldownMs ?? 30_000)) {
+                return ledger.snapshot;
+            }
+            const expectedSequence = row ? ledger.sequence : undefined;
+            const diagnostics = new Map();
+            const diagnostic = (code, count = 1) => diagnostics.set(code, (diagnostics.get(code) ?? 0) + count);
+            const maxBytes = this.options.maxScanBytes ?? 256 * 1024 * 1024;
+            const deadline = now() + (this.options.maxScanMs ?? 5_000);
+            const files = [];
+            let roots = 0, bytes = 0;
+            const visit = async (directory) => {
+                const entries = await readdir(directory, { withFileTypes: true }).catch(() => undefined);
+                if (!entries)
+                    return;
+                for (const entry of entries) {
+                    if (files.length >= 20_000 || now() > deadline) {
+                        diagnostic('scan-budget');
+                        return;
+                    }
+                    if (entry.isSymbolicLink())
+                        continue;
+                    const file = path.join(directory, entry.name);
+                    if (entry.isDirectory())
+                        await visit(file);
+                    else if (entry.isFile() && entry.name.endsWith('.jsonl'))
+                        files.push(file);
+                }
+            };
+            for (const name of ['sessions', 'archived_sessions']) {
+                const root = path.join(home, name);
+                const canonical = await realpath(root).catch(() => undefined);
+                if (canonical !== root)
+                    continue;
+                roots++;
+                await visit(root);
+            }
+            if (!roots)
+                return unavailable('source-unavailable');
+            let input = 0, output = 0;
+            // Stable traversal prevents archive aliases from minting a second source. Continuity is owner-based.
+            const seen = new Map();
+            files.sort();
+            const scanStart = ledger.scanIndex % Math.max(1, files.length);
+            const rotating = [...files.slice(scanStart), ...files.slice(0, scanStart)];
+            // A bounded header probe finds append work by each owner's checkpoint, not
+            // the global observation timestamp: deferred appends remain eligible.
+            const priority = [];
+            let probeBytes = 0;
+            const probeDeadline = now() + Math.max(1, (deadline - now()) / 4);
+            for (const file of rotating) {
+                if (now() > probeDeadline)
+                    break;
+                const handle = await open(file, constants.O_RDONLY | constants.O_NOFOLLOW).catch(() => undefined);
+                if (!handle)
+                    continue;
+                try {
+                    const stat = await handle.stat();
+                    if (!stat.isFile() || stat.size > Math.min(64 * 1024 * 1024, maxBytes / 2))
+                        continue;
+                    // Standard rollout names carry an owner UUID. This is only a scheduling
+                    // hint: the accounting pass still validates the complete metadata and
+                    // prefix digest. Large instruction-bearing headers need not be probed.
+                    const namedOwner = path.basename(file).match(/-([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\.jsonl$/i)?.[1];
+                    if (namedOwner) {
+                        const previous = ledger.sources[hash(namedOwner)];
+                        if (previous && !previous.blocked && stat.size > previous.offset)
+                            priority.push(file);
+                        continue;
+                    }
+                    if (probeBytes >= 8 * 1024 * 1024)
+                        continue;
+                    const header = Buffer.alloc(Math.min(64 * 1024, stat.size));
+                    const { bytesRead } = await handle.read(header, 0, header.length, 0);
+                    probeBytes += bytesRead;
+                    const end = header.subarray(0, bytesRead).indexOf(10);
+                    if (end < 0)
+                        continue;
+                    const owner = reduceUsageRecords(undefined, [header.subarray(0, end).toString('utf8')], { baseline: true }).state.ownerId;
+                    const previous = owner ? ledger.sources[hash(owner)] : undefined;
+                    if (previous && !previous.blocked && stat.size > previous.offset)
+                        priority.push(file);
+                }
+                finally {
+                    await handle.close();
+                }
+            }
+            // At most half the read budget goes to appends; the durable rotation keeps
+            // discovering new sources and verifying unchanged/rewritten old sources.
+            const ordered = [
+                ...priority.map(file => ({ file, urgent: true })),
+                ...rotating.map(file => ({ file, urgent: false })),
+            ];
+            const priorityDeadline = now() + Math.max(1, (deadline - now()) / 2);
+            const priorityRead = new Set();
+            let attempted = 0;
+            for (const { file, urgent } of ordered) {
+                if (urgent && (bytes >= maxBytes / 2 || now() > priorityDeadline))
+                    continue;
+                if (!urgent && priorityRead.has(file)) {
+                    ledger.scanIndex = (files.indexOf(file) + 1) % Math.max(1, files.length);
+                    continue;
+                }
+                // Time budgets are cooperative. Once discovery found files, attempt at least
+                // one bounded read so slow directory enumeration cannot starve every scan.
+                if ((now() > deadline && attempted > 0) || bytes >= maxBytes) {
+                    diagnostic('scan-budget');
+                    break;
+                }
+                attempted++;
+                if (!urgent)
+                    ledger.scanIndex = (files.indexOf(file) + 1) % Math.max(1, files.length);
+                const canonical = await realpath(file).catch(() => undefined);
+                if (canonical !== file) {
+                    diagnostic('source-read-failed');
+                    continue;
+                }
+                const handle = await open(file, constants.O_RDONLY | constants.O_NOFOLLOW).catch(() => undefined);
+                if (!handle) {
+                    diagnostic('source-read-failed');
+                    continue;
+                }
+                try {
+                    const stat = await handle.stat();
+                    if (!stat.isFile() || stat.size > 64 * 1024 * 1024 || stat.size > maxBytes) {
+                        diagnostic('scan-budget');
+                        continue;
+                    }
+                    if (urgent && bytes + stat.size > maxBytes / 2)
+                        continue;
+                    if (bytes + stat.size > maxBytes) {
+                        // Resume at the first deferred file. Advancing past it would repeatedly
+                        // spend the next scan's budget on the same earlier files.
+                        ledger.scanIndex = files.indexOf(file);
+                        diagnostic('scan-budget');
+                        break;
+                    }
+                    // Bounded reads ignore concurrently appended bytes until the next observation.
+                    const buffer = Buffer.alloc(stat.size);
+                    let read = 0;
+                    while (read < buffer.length) {
+                        const result = await handle.read(buffer, read, buffer.length - read, read);
+                        if (!result.bytesRead)
+                            break;
+                        read += result.bytesRead;
+                    }
+                    bytes += read;
+                    if (urgent)
+                        priorityRead.add(file);
+                    const complete = buffer.subarray(0, read).lastIndexOf(10) + 1;
+                    if (!complete) {
+                        diagnostic('incomplete-record');
+                        continue;
+                    }
+                    const content = buffer.subarray(0, complete);
+                    const header = content.subarray(0, content.indexOf(10)).toString('utf8');
+                    const ownership = reduceUsageRecords(undefined, [header], { baseline: true }).state;
+                    if (!ownership.ownerId) {
+                        diagnostic('missing-owner');
+                        continue;
+                    }
+                    const key = hash(ownership.ownerId);
+                    const alias = seen.get(key);
+                    if (alias) {
+                        const shorter = content.length < alias.content.length ? content : alias.content;
+                        const longer = content.length < alias.content.length ? alias.content : content;
+                        const conflict = !longer.subarray(0, shorter.length).equals(shorter);
+                        diagnostic(conflict ? 'conflicting-source' : 'duplicate-source');
+                        seen.set(key, { content: longer, conflict: alias.conflict || conflict });
+                    }
+                    else
+                        seen.set(key, { content, conflict: false });
+                }
+                finally {
+                    await handle.close();
+                }
+            }
+            for (const [key, candidate] of seen) {
+                const { content } = candidate;
+                const complete = content.length;
+                const previous = ledger.sources[key];
+                if (!previous && Object.keys(ledger.sources).length >= 20_000) {
+                    diagnostic('source-budget');
+                    continue;
+                }
+                if (previous?.blocked) {
+                    diagnostic('quarantined-source');
+                    continue;
+                }
+                if (candidate.conflict) {
+                    const checkpoint = previous
+                        ?? {
+                            offset: complete,
+                            digest: hash(content),
+                            state: reduceUsageRecords(undefined, content.toString('utf8').split('\n').filter(Boolean), { baseline: true })
+                                .state,
+                        };
+                    ledger.sources[key] = { ...checkpoint, blocked: true };
+                    continue;
+                }
+                if (previous && previous.offset > complete) {
+                    // A shorter archive alias cannot roll back a longer checkpoint. Retain
+                    // it unchanged: a future longer candidate must still prove the old digest.
+                    diagnostic('short-source');
+                    continue;
+                }
+                const continuous = previous !== undefined && previous.offset <= complete
+                    && hash(content.subarray(0, previous.offset)) === previous.digest;
+                if (previous && !continuous) {
+                    diagnostic('quarantined-source');
+                    ledger.sources[key] = { ...previous, blocked: true };
+                    continue;
+                }
+                const start = continuous ? previous.offset : 0;
+                const records = content.subarray(start).toString('utf8').split('\n').filter(Boolean);
+                const reduced = reduceUsageRecords(continuous ? previous.state : undefined, records, { baseline: !continuous });
+                for (const item of reduced.diagnostics)
+                    diagnostic(item.code, item.count);
+                ledger.sources[key] = { offset: complete, digest: hash(content), state: reduced.state };
+                if (this.options.projection === 'work-v2') {
+                    const classification = classifyWorkUsageHeader(content.subarray(0, content.indexOf(10)).toString('utf8'));
+                    if (classification !== 'work' || reduced.state.ownership !== 'root') {
+                        diagnostic(classification === 'game' ? 'host-game-source-excluded' : 'unclassified-source-excluded');
+                        continue;
+                    }
+                }
+                input += reduced.increment.inputTokens;
+                output += reduced.increment.outputTokens;
+            }
+            const inputTokens = ledger.snapshot.inputTokens + input, outputTokens = ledger.snapshot.outputTokens + output;
+            if (![inputTokens, outputTokens, inputTokens + outputTokens, ledger.sequence + 1, ledger.snapshot.revision + 1]
+                .every(integer)) {
+                return unavailable('store-unavailable');
+            }
+            const publicDiagnostics = [...diagnostics].map(([code, count]) => ({ code, count }));
+            ledger.snapshot = {
+                ...ledger.snapshot,
+                inputTokens,
+                outputTokens,
+                eligibleTokens: inputTokens + outputTokens,
+                revision: ledger.snapshot.revision + (input + output > 0 ? 1 : 0),
+                observedThrough: Math.max(ledger.snapshot.observedThrough, now()),
+                diagnostics: publicDiagnostics,
+            };
+            ledger.sequence++;
+            if (this.closed)
+                return unavailable('store-unavailable');
+            db.exec('BEGIN IMMEDIATE');
+            try {
+                const latest = db.prepare('SELECT value FROM ledger WHERE id=1').get();
+                if (latest ? decode(latest.value, scopeId).sequence !== expectedSequence : expectedSequence !== undefined) {
+                    db.exec('ROLLBACK');
+                    return latest ? decode(latest.value, scopeId).snapshot : unavailable('store-unavailable');
+                }
+                db.prepare('INSERT INTO ledger(id,value) VALUES(1,?) ON CONFLICT(id) DO UPDATE SET value=excluded.value').run(JSON.stringify(ledger));
+                db.exec('COMMIT');
+            }
+            catch (error) {
+                db.exec('ROLLBACK');
+                throw error;
+            }
+            return ledger.snapshot;
+        }
+        finally {
+            db.close();
+        }
+    }
+}
+//# sourceMappingURL=local-usage.js.map

package/dist/src/launcher/local-usage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-usage.js","sourceRoot":"","sources":["../../../src/launcher/local-usage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAA;AACzD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AACjE,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AAEnC,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAyB,MAAM,oBAAoB,CAAA;AA0BlG,MAAM,IAAI,GAAG,CAAC,KAAsB,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACjG,MAAM,MAAM,GAAG,CAAC,KAAc,EAAoC,EAAE,CAClE,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AACtE,MAAM,OAAO,GAAG,CAAC,KAAc,EAAmB,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;AACtG,MAAM,WAAW,GAAG,CAAC,MAAkD,EAAmB,EAAE,CAAC,CAAC;IAC5F,aAAa,EAAE,CAAC;IAChB,MAAM,EAAE,aAAa;IACrB,MAAM;IACN,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;CAChC,CAAC,CAAA;AACF,SAAS,MAAM,CAAC,KAAc,EAAE,OAAe;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;IACtE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAW,CAAA;IAC1C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;IAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAA;IAC5B,IACE,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO;WACjH,IAAI,CAAC,aAAa,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,IAAI,IAAI,CAAC,QAAQ,KAAK,6BAA6B;WACtG,IAAI,CAAC,QAAQ,KAAK,yBAAyB,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;WAC7E,CAAC,gEAAgE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;WAC7G,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC;WAC1B,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC;WAC5D,IAAI,CAAC,cAAc,KAAK,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;WACxF,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ;WAChG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAC9B,CAAC;YACC,eAAe;YACf,QAAQ;YACR,SAAS;YACT,UAAU;YACV,OAAO;YACP,UAAU;YACV,UAAU;YACV,gBAAgB;YAChB,aAAa;YACb,cAAc;YACd,WAAW;YACX,iBAAiB;YACjB,UAAU;YACV,aAAa;SACd,CAAC,QAAQ,CAAC,GAAG,CAAC,CAChB;WACE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAClE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;WAC3C,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;WAC/F,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CACnE,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;WACvD,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,MAAM;QAC/E,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;IACzC,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/D,IACE,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;eAC9E,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,KAAK,CAAC;eAClF,UAAU,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC;eAC3E,CAAC,UAAU,CAAC,OAAO,KAAK,SAAS,IAAI,UAAU,CAAC,OAAO,KAAK,IAAI,CAAC;YACpE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;IAC/C,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AACD,MAAM,UAAU,wBAAwB,CAAC,KAAc,EAAE,OAAe;IACtE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAA;IACjD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;AAC3B,CAAC;AACD;oGACoG;AACpG,MAAM,OAAO,cAAc;IAGI;IAFrB,MAAM,CAAsC;IAC5C,MAAM,GAAG,KAAK,CAAA;IACtB,YAA6B,OAA0B;QAA1B,YAAO,GAAP,OAAO,CAAmB;IAAG,CAAC;IAC3D,OAAO;QACL,IAAI,CAAC,MAAM,GAAG,IAAI,CAAA;IACpB,CAAC;IACD,IAAI;QACF,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC,CAAA;QACzE,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,MAAM,CAAA;QACnC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YACnF,IAAI,CAAC,MAAM,GAAG,SAAS,CAAA;QACzB,CAAC,CAAC,CAAA;QACF,OAAO,IAAI,CAAC,MAAM,CAAA;IACpB,CAAC;IACO,KAAK,CAAC,IAAI;QAChB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAA;QACxC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAC1E,IAAI,CAAC,IAAI;YAAE,OAAO,WAAW,CAAC,oBAAoB,CAAC,CAAA;QACnD,MAAM,OAAO,GAAG,IAAI,CAClB,GAAG,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAClG,CAAA;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CACzB,IAAI,CAAC,OAAO,CAAC,QAAQ,EACrB,IAAI,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,gBAAgB,CACjF,CAAA;QACD,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACxD,MAAM,EAAE,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,OAAO,SAAS,CAAC,CAAC,CAAA;QACtE,IAAI,CAAC;YACH,EAAE,CAAC,IAAI,CACL,yKAAyK,CAC1K,CAAA;YACD,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC,GAAG,EAAE,CAAA;YACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAA;YAClD,IACE,QAAQ;mBACL,CAAC,CAAC,GAAG,IAAI,OAAO,KAAK,QAAQ,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK,CAAC,EACzG,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;YACjD,CAAC;YACD,MAAM,KAAK,GAAG,GAAG,EAAE,CAAA;YACnB,MAAM,MAAM,GAAW,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;gBACxD,OAAO,EAAE,CAAC;gBACV,QAAQ,EAAE,CAAC;gBACX,SAAS,EAAE,CAAC;gBACZ,OAAO,EAAE,EAAE;gBACX,QAAQ,EAAE;oBACR,aAAa,EAAE,CAAC;oBAChB,MAAM,EAAE,OAAO;oBACf,OAAO;oBACP,QAAQ,EAAE,yBAAyB;oBACnC,KAAK,EAAE,UAAU,EAAE;oBACnB,QAAQ,EAAE,CAAC;oBACX,QAAQ,EAAE,6BAA6B;oBACvC,cAAc,EAAE,CAAC;oBACjB,WAAW,EAAE,CAAC;oBACd,YAAY,EAAE,CAAC;oBACf,SAAS,EAAE,KAAK;oBAChB,eAAe,EAAE,KAAK;oBACtB,QAAQ,EAAE,SAAS;oBACnB,WAAW,EAAE,EAAE;iBAChB;aACF,CAAA;YACD,2EAA2E;YAC3E,8EAA8E;YAC9E,MAAM,OAAO,GAAG,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAA;YACvD,IAAI,GAAG,IAAI,OAAO,IAAI,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,MAAM,CAAC,EAAE,CAAC;gBAC7E,OAAO,MAAM,CAAC,QAAQ,CAAA;YACxB,CAAC;YACD,MAAM,gBAAgB,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAA;YAC1D,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAA;YAC7C,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,KAAK,GAAG,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAA;YAC3G,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,GAAG,GAAG,IAAI,GAAG,IAAI,CAAA;YAC/D,MAAM,QAAQ,GAAG,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,CAAA;YAC1D,MAAM,KAAK,GAAa,EAAE,CAAA;YAC1B,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAA;YACxB,MAAM,KAAK,GAAG,KAAK,EAAE,SAAiB,EAAiB,EAAE;gBACvD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;gBACxF,IAAI,CAAC,OAAO;oBAAE,OAAM;gBACpB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;oBAC5B,IAAI,KAAK,CAAC,MAAM,IAAI,MAAM,IAAI,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;wBAC/C,UAAU,CAAC,aAAa,CAAC,CAAA;wBACzB,OAAM;oBACR,CAAC;oBACD,IAAI,KAAK,CAAC,cAAc,EAAE;wBAAE,SAAQ;oBACpC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;oBAC7C,IAAI,KAAK,CAAC,WAAW,EAAE;wBAAE,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;yBACrC,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;wBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBAC5E,CAAC;YACH,CAAC,CAAA;YACD,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC,EAAE,CAAC;gBACrD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;gBAClC,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;gBAC7D,IAAI,SAAS,KAAK,IAAI;oBAAE,SAAQ;gBAChC,KAAK,EAAE,CAAA;gBACP,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;YACnB,CAAC;YACD,IAAI,CAAC,KAAK;gBAAE,OAAO,WAAW,CAAC,oBAAoB,CAAC,CAAA;YACpD,IAAI,KAAK,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,CAAA;YACzB,qGAAqG;YACrG,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkD,CAAA;YACtE,KAAK,CAAC,IAAI,EAAE,CAAA;YACZ,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;YAC9D,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAA;YAC1E,2EAA2E;YAC3E,sEAAsE;YACtE,MAAM,QAAQ,GAAa,EAAE,CAAA;YAC7B,IAAI,UAAU,GAAG,CAAC,CAAA;YAClB,MAAM,aAAa,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,QAAQ,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;YACjE,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;gBAC5B,IAAI,GAAG,EAAE,GAAG,aAAa;oBAAE,MAAK;gBAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;gBACjG,IAAI,CAAC,MAAM;oBAAE,SAAQ;gBACrB,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;oBAChC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,QAAQ,GAAG,CAAC,CAAC;wBAAE,SAAQ;oBACpF,wEAAwE;oBACxE,sEAAsE;oBACtE,uEAAuE;oBACvE,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAC1C,0EAA0E,CAC3E,EAAE,CAAC,CAAC,CAAC,CAAA;oBACN,IAAI,UAAU,EAAE,CAAC;wBACf,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAA;wBACjD,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC,MAAM;4BAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;wBACrF,SAAQ;oBACV,CAAC;oBACD,IAAI,UAAU,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI;wBAAE,SAAQ;oBAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;oBAC3D,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;oBACpE,UAAU,IAAI,SAAS,CAAA;oBACvB,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;oBACrD,IAAI,GAAG,GAAG,CAAC;wBAAE,SAAQ;oBACrB,MAAM,KAAK,GACT,kBAAkB,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAA;oBAC7G,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;oBAChE,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC,MAAM;wBAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBACvF,CAAC;wBAAS,CAAC;oBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;gBACtB,CAAC;YACH,CAAC;YACD,2EAA2E;YAC3E,yEAAyE;YACzE,MAAM,OAAO,GAAG;gBACd,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;gBACjD,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;aACnD,CAAA;YACD,MAAM,gBAAgB,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,QAAQ,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;YACpE,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAA;YACtC,IAAI,SAAS,GAAG,CAAC,CAAA;YACjB,KAAK,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;gBACvC,IAAI,MAAM,IAAI,CAAC,KAAK,IAAI,QAAQ,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,gBAAgB,CAAC;oBAAE,SAAQ;gBAC3E,IAAI,CAAC,MAAM,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtC,MAAM,CAAC,SAAS,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;oBACxE,SAAQ;gBACV,CAAC;gBACD,6EAA6E;gBAC7E,2EAA2E;gBAC3E,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,IAAI,SAAS,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,QAAQ,EAAE,CAAC;oBAC7D,UAAU,CAAC,aAAa,CAAC,CAAA;oBACzB,MAAK;gBACP,CAAC;gBACD,SAAS,EAAE,CAAA;gBACX,IAAI,CAAC,MAAM;oBAAE,MAAM,CAAC,SAAS,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;gBACrF,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;gBAC7D,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;oBACvB,UAAU,CAAC,oBAAoB,CAAC,CAAA;oBAChC,SAAQ;gBACV,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;gBACjG,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,UAAU,CAAC,oBAAoB,CAAC,CAAA;oBAChC,SAAQ;gBACV,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;oBAChC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,IAAI,IAAI,CAAC,IAAI,GAAG,QAAQ,EAAE,CAAC;wBAC3E,UAAU,CAAC,aAAa,CAAC,CAAA;wBACzB,SAAQ;oBACV,CAAC;oBACD,IAAI,MAAM,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,GAAG,QAAQ,GAAG,CAAC;wBAAE,SAAQ;oBACxD,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,GAAG,QAAQ,EAAE,CAAC;wBACjC,wEAAwE;wBACxE,0DAA0D;wBAC1D,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;wBACtC,UAAU,CAAC,aAAa,CAAC,CAAA;wBACzB,MAAK;oBACP,CAAC;oBACD,+EAA+E;oBAC/E,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;oBACtC,IAAI,IAAI,GAAG,CAAC,CAAA;oBACZ,OAAO,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;wBAC5B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,GAAG,IAAI,EAAE,IAAI,CAAC,CAAA;wBAC1E,IAAI,CAAC,MAAM,CAAC,SAAS;4BAAE,MAAK;wBAC5B,IAAI,IAAI,MAAM,CAAC,SAAS,CAAA;oBAC1B,CAAC;oBACD,KAAK,IAAI,IAAI,CAAA;oBACb,IAAI,MAAM;wBAAE,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;oBAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,GAAG,CAAC,CAAA;oBAC7D,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACd,UAAU,CAAC,mBAAmB,CAAC,CAAA;wBAC/B,SAAQ;oBACV,CAAC;oBACD,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAA;oBAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;oBACxE,MAAM,SAAS,GAAG,kBAAkB,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAA;oBACnF,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;wBACvB,UAAU,CAAC,eAAe,CAAC,CAAA;wBAC3B,SAAQ;oBACV,CAAC;oBACD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;oBACnC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;oBAC3B,IAAI,KAAK,EAAE,CAAC;wBACV,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAA;wBAC/E,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAA;wBAC9E,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;wBACpE,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAA;wBAChE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,QAAQ,EAAE,CAAC,CAAA;oBAC1E,CAAC;;wBAAM,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAA;gBACpD,CAAC;wBAAS,CAAC;oBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;gBACtB,CAAC;YACH,CAAC;YACD,KAAK,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC;gBACpC,MAAM,EAAE,OAAO,EAAE,GAAG,SAAS,CAAA;gBAC7B,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAA;gBAC/B,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;gBACpC,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,IAAI,MAAM,EAAE,CAAC;oBAC9D,UAAU,CAAC,eAAe,CAAC,CAAA;oBAC3B,SAAQ;gBACV,CAAC;gBACD,IAAI,QAAQ,EAAE,OAAO,EAAE,CAAC;oBACtB,UAAU,CAAC,oBAAoB,CAAC,CAAA;oBAChC,SAAQ;gBACV,CAAC;gBACD,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;oBACvB,MAAM,UAAU,GAAG,QAAQ;2BACtB;4BACD,MAAM,EAAE,QAAQ;4BAChB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC;4BACrB,KAAK,EACH,kBAAkB,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;iCACpG,KAAK;yBACX,CAAA;oBACH,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;oBACtD,SAAQ;gBACV,CAAC;gBACD,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;oBAC3C,uEAAuE;oBACvE,2EAA2E;oBAC3E,UAAU,CAAC,cAAc,CAAC,CAAA;oBAC1B,SAAQ;gBACV,CAAC;gBACD,MAAM,UAAU,GAAG,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,IAAI,QAAQ;uBACnE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,QAAQ,CAAC,MAAM,CAAA;gBACnE,IAAI,QAAQ,IAAI,CAAC,UAAU,EAAE,CAAC;oBAC5B,UAAU,CAAC,oBAAoB,CAAC,CAAA;oBAChC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;oBACpD,SAAQ;gBACV,CAAC;gBACD,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;gBAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;gBACpF,MAAM,OAAO,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,UAAU,EAAE,CAAC,CAAA;gBAC/G,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,WAAW;oBAAE,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;gBACzE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAA;gBACvF,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;oBAC1C,MAAM,cAAc,GAAG,uBAAuB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;oBACzG,IAAI,cAAc,KAAK,MAAM,IAAI,OAAO,CAAC,KAAK,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;wBACpE,UAAU,CAAC,cAAc,KAAK,MAAM,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAA;wBACpG,SAAQ;oBACV,CAAC;gBACH,CAAC;gBACD,KAAK,IAAI,OAAO,CAAC,SAAS,CAAC,WAAW,CAAA;gBACtC,MAAM,IAAI,OAAO,CAAC,SAAS,CAAC,YAAY,CAAA;YAC1C,CAAC;YACD,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,GAAG,KAAK,EAAE,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,YAAY,GAAG,MAAM,CAAA;YAC7G,IACE,CAAC,CAAC,WAAW,EAAE,YAAY,EAAE,WAAW,GAAG,YAAY,EAAE,MAAM,CAAC,QAAQ,GAAG,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,CAAC,CAAC;iBACxG,KAAK,CAAC,OAAO,CAAC,EACjB,CAAC;gBACD,OAAO,WAAW,CAAC,mBAAmB,CAAC,CAAA;YACzC,CAAC;YACD,MAAM,iBAAiB,GAAwB,CAAC,GAAG,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAA;YACzG,MAAM,CAAC,QAAQ,GAAG;gBAChB,GAAG,MAAM,CAAC,QAAQ;gBAClB,WAAW;gBACX,YAAY;gBACZ,cAAc,EAAE,WAAW,GAAG,YAAY;gBAC1C,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,CAAC,KAAK,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACjE,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC;gBACjE,WAAW,EAAE,iBAAiB;aAC/B,CAAA;YACD,MAAM,CAAC,QAAQ,EAAE,CAAA;YACjB,IAAI,IAAI,CAAC,MAAM;gBAAE,OAAO,WAAW,CAAC,mBAAmB,CAAC,CAAA;YACxD,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;YAC1B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC,GAAG,EAAE,CAAA;gBACtE,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,KAAK,gBAAgB,CAAC,CAAC,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;oBAC1G,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;oBACnB,OAAO,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAA;gBAC3F,CAAC;gBACD,EAAE,CAAC,OAAO,CAAC,6FAA6F,CAAC,CAAC,GAAG,CAC3G,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CACvB,CAAA;gBACD,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACnB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;gBACnB,MAAM,KAAK,CAAA;YACb,CAAC;YACD,OAAO,MAAM,CAAC,QAAQ,CAAA;QACxB,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAA;QACZ,CAAC;IACH,CAAC;CACF"}

package/dist/src/launcher/local-wallet-authority.d.ts

@@ -0,0 +1,39 @@
+import type { LocalWorkSettlementCustody } from './local-work-settlement-custody.js';
+import type { WorkUsageReader } from './work-usage.js';
+import type { OwnerDocumentPrincipal } from './owner-document-rpc.js';
+import type { LauncherKeychainBackend } from './secret-store.js';
+import { type ManagedSourceTrust } from './managed-source-authority.js';
+import { type HttpNativeAccountValue } from './plugin-http-native-account-diagnostics.js';
+import { type LocalWalletProfile, LocalWalletRegistry } from './local-wallet-registry.js';
+/** Independent local authority. Native reads occur exclusively during original-account enrollment. */
+export declare class LocalWalletAuthority {
+    private readonly options;
+    private disposed;
+    private readonly operations;
+    private readonly queues;
+    private readonly leases;
+    constructor(options: {
+        readonly custody?: LocalWorkSettlementCustody;
+        readonly registry: LocalWalletRegistry;
+        readonly keychain: LauncherKeychainBackend;
+        readonly fetch: typeof fetch;
+        readonly trusts: () => Promise<readonly ManagedSourceTrust[]>;
+        readonly trustsNow: () => readonly ManagedSourceTrust[];
+        readonly live: (principal: OwnerDocumentPrincipal) => boolean;
+    });
+    private trust;
+    current(profile: LocalWalletProfile): boolean;
+    closeOwner(principal: OwnerDocumentPrincipal): void;
+    execute(principal: OwnerDocumentPrincipal, raw: unknown, deadline: number, active: () => boolean, enrollment?: {
+        readonly originalAccountId: string;
+        readonly account: () => Promise<HttpNativeAccountValue>;
+        readonly bearer: () => Promise<string>;
+    }, readWork?: WorkUsageReader, settlement?: boolean): Promise<{
+        body: Record<string, unknown>;
+        statusCode: number;
+        profile: LocalWalletProfile;
+        publicationGuard: () => void;
+    }>;
+    dispose(): void;
+}
+//# sourceMappingURL=local-wallet-authority.d.ts.map

package/dist/src/launcher/local-wallet-authority.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-wallet-authority.d.ts","sourceRoot":"","sources":["../../../src/launcher/local-wallet-authority.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAA;AAMpF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AACtD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAA;AACrE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAA;AAChE,OAAO,EAAmC,KAAK,kBAAkB,EAAE,MAAM,+BAA+B,CAAA;AACxG,OAAO,EACL,KAAK,sBAAsB,EAE5B,MAAM,6CAA6C,CAAA;AACpD,OAAO,EAGL,KAAK,kBAAkB,EAEvB,mBAAmB,EACpB,MAAM,4BAA4B,CAAA;AAanC,sGAAsG;AACtG,qBAAa,oBAAoB;IAM7B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAL1B,OAAO,CAAC,QAAQ,CAAQ;IACxB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA6B;IACxD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsC;IAC7D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwE;gBAE5E,OAAO,EAAE;QACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,0BAA0B,CAAA;QAC7C,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAA;QACtC,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAA;QAC1C,QAAQ,CAAC,KAAK,EAAE,OAAO,KAAK,CAAA;QAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,OAAO,CAAC,SAAS,kBAAkB,EAAE,CAAC,CAAA;QAC7D,QAAQ,CAAC,SAAS,EAAE,MAAM,SAAS,kBAAkB,EAAE,CAAA;QACvD,QAAQ,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,sBAAsB,KAAK,OAAO,CAAA;KAC9D;IAEH,OAAO,CAAC,KAAK;IAcb,OAAO,CAAC,OAAO,EAAE,kBAAkB;IAGnC,UAAU,CAAC,SAAS,EAAE,sBAAsB;IAItC,OAAO,CACX,SAAS,EAAE,sBAAsB,EACjC,GAAG,EAAE,OAAO,EACZ,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,OAAO,EACrB,UAAU,CAAC,EAAE;QACX,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAA;QAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,OAAO,CAAC,sBAAsB,CAAC,CAAA;QACvD,QAAQ,CAAC,MAAM,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAA;KACvC,EACD,QAAQ,CAAC,EAAE,eAAe,EAC1B,UAAU,UAAQ;;;;;;IA6UpB,OAAO;CAKR"}