ftown 0.24.0 → 0.25.1

package/dist/security/crypto.d.ts

@@ -1,6 +1,8 @@
 import type { EndpointIdentity, EndpointKind, EndpointPublic, EnvelopeHeader, OpenContext, SecureEnvelope, SecurePublication, SecurityErrorCode, SecurityFailure } from './protocol.js';
 /** Wire limits apply to serialized UTF-8, including headers and base64 expansion. */
 export declare const MAX_ENVELOPE_BYTES = 450000;
+/** Upper bound of validated public keys kept; the least recently used one is dropped first. */
+export declare const PUBLIC_KEY_CACHE_LIMIT = 256;
 /** A safe, stable error: underlying crypto/input details never cross this boundary. */
 export declare class SecurityError extends Error implements SecurityFailure {
     readonly code: SecurityErrorCode;

package/dist/security/crypto.js

@@ -13,6 +13,17 @@ const fields = [
 const suite = new CipherSuite({
     kem: new DhkemP256HkdfSha256(), kdf: new HkdfSha256(), aead: new Aes256Gcm(),
 });
+/** Upper bound of validated public keys kept; the least recently used one is dropped first. */
+export const PUBLIC_KEY_CACHE_LIMIT = 256;
+/**
+ * Public keys that passed full validation, by their exact canonical base64url bytes: the SHA-256 fingerprint of those bytes and the
+ * imported handle. Public material only. An entry exists only after the digest matched the claimed id AND the import succeeded, and
+ * every use still compares the claimed id with the stored fingerprint. It authorizes nothing: whom to seal to or accept from is decided
+ * by the caller's policy on every message; this only avoids hashing and importing the same bytes again.
+ */
+const validatedPublicKeys = new Map();
+/** Raw export of an identity's own public CryptoKey (immutable once created), by key identity. Failed exports are not recorded. */
+const exportedPublicKeys = new WeakMap();
 /** A safe, stable error: underlying crypto/input details never cross this boundary. */
 export class SecurityError extends Error {
     code;
@@ -179,14 +190,37 @@ async function endpointKey(endpoint) {
     if (endpoint.version !== 1 || !owner(endpoint.ownerId) || !kinds.includes(endpoint.kind) || !fingerprintSyntax(endpoint.id))
         return invalid();
     const raw = bytes(endpoint.publicKey, 65);
+    const known = validatedPublicKeys.get(endpoint.publicKey);
+    if (known) {
+        if (known.id !== endpoint.id)
+            return invalid();
+        validatedPublicKeys.delete(endpoint.publicKey);
+        validatedPublicKeys.set(endpoint.publicKey, known);
+        return known.key;
+    }
     const digest = base64(new Uint8Array(await subtle().digest('SHA-256', raw)));
     if (digest !== endpoint.id)
         return invalid();
-    return importPublicKey(endpoint.publicKey);
+    const key = await importPublicKey(endpoint.publicKey);
+    validatedPublicKeys.set(endpoint.publicKey, { id: digest, key });
+    for (const oldest of validatedPublicKeys.keys()) {
+        if (validatedPublicKeys.size <= PUBLIC_KEY_CACHE_LIMIT)
+            break;
+        validatedPublicKeys.delete(oldest);
+    }
+    return key;
+}
+async function ownPublicKey(key) {
+    const known = exportedPublicKeys.get(key);
+    if (known !== undefined)
+        return known;
+    const exported = await exportPublicKey(key);
+    exportedPublicKeys.set(key, exported);
+    return exported;
 }
 async function validateIdentity(identity) {
     await endpointKey(identity.endpoint);
-    if (await exportPublicKey(identity.keyPair.publicKey) !== identity.endpoint.publicKey
+    if (await ownPublicKey(identity.keyPair.publicKey) !== identity.endpoint.publicKey
         || identity.keyPair.privateKey.type !== 'private' || identity.keyPair.privateKey.algorithm.name !== 'ECDH'
         || !('namedCurve' in identity.keyPair.privateKey.algorithm) || identity.keyPair.privateKey.algorithm.namedCurve !== 'P-256'
         || !identity.keyPair.privateKey.usages.includes('deriveBits'))
@@ -252,8 +286,13 @@ export async function seal(identity, recipient, input, plaintext) {
         throw new SecurityError('capacity_exceeded', 'Encrypted packet exceeds the transport limit');
     try {
         const sender = await suite.createSenderContext({ recipientPublicKey, senderKey: identity.keyPair, info: domain });
-        const ciphertext = await sender.seal(plaintext, aad(parsed));
-        return parseSecureEnvelope({ ...parsed, enc: base64(new Uint8Array(sender.enc)), ciphertext: base64(new Uint8Array(ciphertext)) });
+        const enc = new Uint8Array(sender.enc);
+        const ciphertext = new Uint8Array(await sender.seal(plaintext, aad(parsed)));
+        // The header was validated above and the size bounded before encrypting, so the only parts of this envelope not yet checked are
+        // the two HPKE outputs. These are the properties parseSecureEnvelope requires of them, without decoding the envelope again.
+        if (enc.length !== 65 || enc[0] !== 4 || ciphertext.length !== plaintext.byteLength + 16)
+            return invalid();
+        return { ...parsed, enc: base64(enc), ciphertext: base64(ciphertext) };
     }
     catch (error) {
         if (error instanceof SecurityError)

package/dist/security/crypto.js.map

@@ -1 +1 @@
-{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../src/security/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAMrF,qFAAqF;AACrF,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAC1C,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAClC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;AAC/C,MAAM,KAAK,GAA4B,CAAC,QAAQ,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;AAC1E,MAAM,QAAQ,GAA+B,CAAC,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;AACvG,MAAM,MAAM,GAAG;IACb,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS;IAC9E,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,eAAe,EAAE,KAAK,EAAE,YAAY;CACvF,CAAC;AACF,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC;IAC5B,GAAG,EAAE,IAAI,mBAAmB,EAAE,EAAE,GAAG,EAAE,IAAI,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,SAAS,EAAE;CAC7E,CAAC,CAAC;AAEH,uFAAuF;AACvF,MAAM,OAAO,aAAc,SAAQ,KAAK;IACjB;IAAmD;IAAxE,YAAqB,IAAuB,EAAE,OAAe,EAAW,YAAY,KAAK;QACvF,KAAK,CAAC,OAAO,CAAC,CAAC;QADI,SAAI,GAAJ,IAAI,CAAmB;QAA4B,cAAS,GAAT,SAAS,CAAQ;QAEvF,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AACD,MAAM,OAAO,GAAG,GAAU,EAAE,GAAG,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,0BAA0B,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1G,MAAM,YAAY,GAAG,GAAU,EAAE,GAAG,MAAM,IAAI,aAAa,CAAC,eAAe,EAAE,8CAA8C,CAAC,CAAC,CAAC,CAAC,CAAC;AAChI,SAAS,MAAM;IACb,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM;QAAE,MAAM,IAAI,aAAa,CAAC,yBAAyB,EAAE,oDAAoD,CAAC,CAAC;IACzI,OAAO,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC;AAClC,CAAC;AACD,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AACD,SAAS,KAAK,CAAC,KAA8B,EAAE,IAAuB;IACpE,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;AAClH,CAAC;AACD,SAAS,KAAK,CAAC,KAAc,EAAE,GAAG,GAAG,GAAG;IACtC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAChH,CAAC;AACD,SAAS,KAAK,CAAC,KAAc;IAC3B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,iEAAiE,CAAC,IAAI,CAAC,KAAK,CAAC;WAC7G,6BAA6B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AACvF,CAAC;AACD,SAAS,MAAM,CAAC,KAAiB;IAC/B,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,MAAM,IAAI,MAAM,EAAE,CAAC;QAC7D,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACnF,CAAC;AACD,SAAS,KAAK,CAAC,KAAc,EAAE,GAAW,EAAE,GAAG,GAAG,GAAG;IACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,EAAE,CAAC;IAC5H,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,OAAO,EAAE,CAAC;IAAC,CAAC;IACnG,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,OAAO,EAAE,CAAC;IACjE,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7E,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,KAAK;QAAE,OAAO,OAAO,EAAE,CAAC;IAC/C,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IACnE,IAAI,CAAC;QAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AAChE,CAAC;AACD,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,EAAE,CAAC;IACrC,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC;WACtD,CAAC,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,WAAW,CAAC;WAC3E,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC;WAC/C,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;WAChF,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC;WACzF,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC;WAChH,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;WAC1E,KAAK,CAAC,SAAS,GAAG,CAAC,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS;WACzD,CAAC,KAAK,CAAC,aAAa,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;QAAE,OAAO,OAAO,EAAE,CAAC;IAC1F,uEAAuE;IACvE,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,KAAK,KAAK,CAAC,OAAO,CAAC,CAAC;IACxE,IAAI,CAAC,OAAO;QAAE,OAAO,OAAO,EAAE,CAAC;IAC/B,OAAO;QACL,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW;QAC7F,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO;QACjF,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS;QAClF,aAAa,EAAE,KAAK,CAAC,aAAa;KACnC,CAAC;AACJ,CAAC;AACD,qFAAqF;AACrF,SAAS,GAAG,CAAC,KAAqB;IAChC,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;QACnC,eAAe,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,WAAW;QAC7E,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS;QAC5E,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,aAAa;KACtD,CAAC,CAAC,CAAC;AACN,CAAC;AACD,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,CAAC;QAAC,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,OAAO,EAAE,CAAC;IAAC,CAAC;AAC9F,CAAC;AACD,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,EAAE,CAAC;IACrC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACrB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,6EAA6E;IAC7E,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACjC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,EAAE,CAAC;IACnC,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,EAAE,kBAAkB,CAAC,CAAC;IAChD,IAAI,cAAc,CAAC,KAAK,CAAC,GAAG,kBAAkB,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;QAAE,OAAO,OAAO,EAAE,CAAC;IAC1I,OAAO,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;AACrE,CAAC;AACD,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,EAAE,CAAC;IACrC,KAAK,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;IAC/C,IAAI,KAAK,CAAC,IAAI,KAAK,uBAAuB,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;WAC/F,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,cAAc;WACrE,cAAc,CAAC,KAAK,CAAC,GAAG,kBAAkB;QAAE,OAAO,OAAO,EAAE,CAAC;IAClE,OAAO,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;AAC5G,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAc;IAClD,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,YAAY,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,UAAU,KAAK,OAAO;YAAE,OAAO,OAAO,EAAE,CAAC;QACzJ,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QACjE,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO,OAAO,EAAE,CAAC;QACxD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,aAAa;YAAE,MAAM,KAAK,CAAC;QAChD,MAAM,IAAI,aAAa,CAAC,iBAAiB,EAAE,sCAAsC,CAAC,CAAC;IACrF,CAAC;AACH,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAW;IAC/C,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAC/B,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,EAAE,CAAC;IACvC,IAAI,CAAC;QAAC,OAAO,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAAC,CAAC;IACzG,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,KAAK,YAAY,aAAa;YAAE,MAAM,KAAK,CAAC;QAChD,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AACD,KAAK,UAAU,WAAW,CAAC,QAAwB;IACjD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,EAAE,CAAC;IACxC,KAAK,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;IACnE,IAAI,QAAQ,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAAE,OAAO,OAAO,EAAE,CAAC;IAC9I,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,UAAU,CAAC,MAAM,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAC7E,IAAI,MAAM,KAAK,QAAQ,CAAC,EAAE;QAAE,OAAO,OAAO,EAAE,CAAC;IAC7C,OAAO,eAAe,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AAC7C,CAAC;AACD,KAAK,UAAU,gBAAgB,CAAC,QAA0B;IACxD,MAAM,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,MAAM,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,QAAQ,CAAC,SAAS;WAChF,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM;WACvG,CAAC,CAAC,YAAY,IAAI,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,KAAK,OAAO;WACxH,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,OAAO,EAAE,CAAC;AACpF,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAe,EAAE,IAAkB,EAAE,WAAW,GAAG,KAAK;IAC7F,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,OAAO,EAAE,CAAC;IAC/D,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;QAC/G,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC3D,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,UAAU,CAAC,MAAM,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1F,OAAO,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,CAAC;IAC7E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,aAAa;YAAE,MAAM,KAAK,CAAC;QAChD,MAAM,IAAI,aAAa,CAAC,iBAAiB,EAAE,0CAA0C,CAAC,CAAC;IACzF,CAAC;AACH,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAwB,EAAE,UAAsB,EAAE,WAAW,GAAG,KAAK;IACxG,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,CAAC;QACH,6EAA6E;QAC7E,MAAM,SAAS,GAAG,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC7D,IAAI,UAAU,CAAC,GAAG,KAAK,IAAI,IAAI,UAAU,CAAC,GAAG,KAAK,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC;eACrE,UAAU,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;YAAE,OAAO,OAAO,EAAE,CAAC;QACpF,MAAM,QAAQ,GAAG,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;QACjI,MAAM,QAAQ,GAAG,EAAE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,CAAC;QAC7F,gGAAgG;QAChG,MAAM,SAAS,GAAG,MAAM,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;QAC3G,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,EAAE,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;QACrH,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,EAAE,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC;QACxH,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE;YAAE,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3F,IAAI,UAAU,KAAK,CAAC;YAAE,OAAO,OAAO,EAAE,CAAC;QACvC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,aAAa;YAAE,MAAM,KAAK,CAAC;QAChD,MAAM,IAAI,aAAa,CAAC,iBAAiB,EAAE,yCAAyC,CAAC,CAAC;IACxF,CAAC;AACH,CAAC;AACD,SAAS,cAAc,CAAC,KAAqB,EAAE,QAAqB;IAClE,IAAI,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,IAAI,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;WAC/G,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,IAAI,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;QAAE,OAAO,YAAY,EAAE,CAAC;AAC/G,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,QAA0B,EAAE,SAAyB,EAAE,KAAqB,EAAE,SAAqB;IAC5H,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACjC,MAAM,kBAAkB,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,CAAC;IACxD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,EAAE;WAC9E,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,QAAQ,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,OAAO;QAAE,OAAO,YAAY,EAAE,CAAC;IACjH,kGAAkG;IAClG,MAAM,QAAQ,GAAG,cAAc,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;IACpF,IAAI,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,UAAU,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,kBAAkB;QAAE,MAAM,IAAI,aAAa,CAAC,mBAAmB,EAAE,8CAA8C,CAAC,CAAC;IACjL,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,mBAAmB,CAAC,EAAE,kBAAkB,EAAE,SAAS,EAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAClH,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7D,OAAO,mBAAmB,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC;IACrI,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,aAAa;YAAE,MAAM,KAAK,CAAC;QAChD,MAAM,IAAI,aAAa,CAAC,uBAAuB,EAAE,sCAAsC,CAAC,CAAC;IAC3F,CAAC;AACH,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,QAA0B,EAAE,MAAsB,EAAE,KAAqB,EAAE,QAAqB;IACzH,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC5C,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACnC,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACjC,MAAM,eAAe,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,QAAQ,CAAC,WAAW,KAAK,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAC,EAAE;WAC/E,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;QAAE,OAAO,YAAY,EAAE,CAAC;IAClH,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,sBAAsB,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACtJ,OAAO,IAAI,UAAU,CAAC,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,EAAE,kBAAkB,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACjH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,aAAa,CAAC,uBAAuB,EAAE,wCAAwC,CAAC,CAAC;IAC7F,CAAC;AACH,CAAC"}
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../src/security/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAMrF,qFAAqF;AACrF,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAC1C,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAClC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;AAC/C,MAAM,KAAK,GAA4B,CAAC,QAAQ,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;AAC1E,MAAM,QAAQ,GAA+B,CAAC,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;AACvG,MAAM,MAAM,GAAG;IACb,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS;IAC9E,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,eAAe,EAAE,KAAK,EAAE,YAAY;CACvF,CAAC;AACF,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC;IAC5B,GAAG,EAAE,IAAI,mBAAmB,EAAE,EAAE,GAAG,EAAE,IAAI,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,SAAS,EAAE;CAC7E,CAAC,CAAC;AACH,+FAA+F;AAC/F,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAC1C;;;;;GAKG;AACH,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAA0C,CAAC;AAC9E,mIAAmI;AACnI,MAAM,kBAAkB,GAAG,IAAI,OAAO,EAAqB,CAAC;AAE5D,uFAAuF;AACvF,MAAM,OAAO,aAAc,SAAQ,KAAK;IACjB;IAAmD;IAAxE,YAAqB,IAAuB,EAAE,OAAe,EAAW,YAAY,KAAK;QACvF,KAAK,CAAC,OAAO,CAAC,CAAC;QADI,SAAI,GAAJ,IAAI,CAAmB;QAA4B,cAAS,GAAT,SAAS,CAAQ;QAEvF,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AACD,MAAM,OAAO,GAAG,GAAU,EAAE,GAAG,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,0BAA0B,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1G,MAAM,YAAY,GAAG,GAAU,EAAE,GAAG,MAAM,IAAI,aAAa,CAAC,eAAe,EAAE,8CAA8C,CAAC,CAAC,CAAC,CAAC,CAAC;AAChI,SAAS,MAAM;IACb,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM;QAAE,MAAM,IAAI,aAAa,CAAC,yBAAyB,EAAE,oDAAoD,CAAC,CAAC;IACzI,OAAO,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC;AAClC,CAAC;AACD,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AACD,SAAS,KAAK,CAAC,KAA8B,EAAE,IAAuB;IACpE,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;AAClH,CAAC;AACD,SAAS,KAAK,CAAC,KAAc,EAAE,GAAG,GAAG,GAAG;IACtC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAChH,CAAC;AACD,SAAS,KAAK,CAAC,KAAc;IAC3B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,iEAAiE,CAAC,IAAI,CAAC,KAAK,CAAC;WAC7G,6BAA6B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AACvF,CAAC;AACD,SAAS,MAAM,CAAC,KAAiB;IAC/B,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,MAAM,IAAI,MAAM,EAAE,CAAC;QAC7D,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACnF,CAAC;AACD,SAAS,KAAK,CAAC,KAAc,EAAE,GAAW,EAAE,GAAG,GAAG,GAAG;IACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,EAAE,CAAC;IAC5H,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,OAAO,EAAE,CAAC;IAAC,CAAC;IACnG,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,OAAO,EAAE,CAAC;IACjE,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7E,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,KAAK;QAAE,OAAO,OAAO,EAAE,CAAC;IAC/C,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IACnE,IAAI,CAAC;QAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AAChE,CAAC;AACD,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,EAAE,CAAC;IACrC,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC;WACtD,CAAC,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,WAAW,CAAC;WAC3E,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC;WAC/C,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;WAChF,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC;WACzF,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC;WAChH,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;WAC1E,KAAK,CAAC,SAAS,GAAG,CAAC,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS;WACzD,CAAC,KAAK,CAAC,aAAa,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;QAAE,OAAO,OAAO,EAAE,CAAC;IAC1F,uEAAuE;IACvE,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,KAAK,KAAK,CAAC,OAAO,CAAC,CAAC;IACxE,IAAI,CAAC,OAAO;QAAE,OAAO,OAAO,EAAE,CAAC;IAC/B,OAAO;QACL,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW;QAC7F,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO;QACjF,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS;QAClF,aAAa,EAAE,KAAK,CAAC,aAAa;KACnC,CAAC;AACJ,CAAC;AACD,qFAAqF;AACrF,SAAS,GAAG,CAAC,KAAqB;IAChC,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;QACnC,eAAe,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,WAAW;QAC7E,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS;QAC5E,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,aAAa;KACtD,CAAC,CAAC,CAAC;AACN,CAAC;AACD,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,CAAC;QAAC,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,OAAO,EAAE,CAAC;IAAC,CAAC;AAC9F,CAAC;AACD,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,EAAE,CAAC;IACrC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACrB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,6EAA6E;IAC7E,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACjC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,EAAE,CAAC;IACnC,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,EAAE,kBAAkB,CAAC,CAAC;IAChD,IAAI,cAAc,CAAC,KAAK,CAAC,GAAG,kBAAkB,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;QAAE,OAAO,OAAO,EAAE,CAAC;IAC1I,OAAO,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;AACrE,CAAC;AACD,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,EAAE,CAAC;IACrC,KAAK,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;IAC/C,IAAI,KAAK,CAAC,IAAI,KAAK,uBAAuB,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;WAC/F,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,cAAc;WACrE,cAAc,CAAC,KAAK,CAAC,GAAG,kBAAkB;QAAE,OAAO,OAAO,EAAE,CAAC;IAClE,OAAO,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;AAC5G,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAc;IAClD,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,YAAY,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,UAAU,KAAK,OAAO;YAAE,OAAO,OAAO,EAAE,CAAC;QACzJ,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QACjE,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO,OAAO,EAAE,CAAC;QACxD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,aAAa;YAAE,MAAM,KAAK,CAAC;QAChD,MAAM,IAAI,aAAa,CAAC,iBAAiB,EAAE,sCAAsC,CAAC,CAAC;IACrF,CAAC;AACH,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAW;IAC/C,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAC/B,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,EAAE,CAAC;IACvC,IAAI,CAAC;QAAC,OAAO,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAAC,CAAC;IACzG,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,KAAK,YAAY,aAAa;YAAE,MAAM,KAAK,CAAC;QAChD,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AACD,KAAK,UAAU,WAAW,CAAC,QAAwB;IACjD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,EAAE,CAAC;IACxC,KAAK,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;IACnE,IAAI,QAAQ,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAAE,OAAO,OAAO,EAAE,CAAC;IAC9I,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC1D,IAAI,KAAK,EAAE,CAAC;QACV,IAAI,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE;YAAE,OAAO,OAAO,EAAE,CAAC;QAC/C,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC/C,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACnD,OAAO,KAAK,CAAC,GAAG,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,UAAU,CAAC,MAAM,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAC7E,IAAI,MAAM,KAAK,QAAQ,CAAC,EAAE;QAAE,OAAO,OAAO,EAAE,CAAC;IAC7C,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACtD,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACjE,KAAK,MAAM,MAAM,IAAI,mBAAmB,CAAC,IAAI,EAAE,EAAE,CAAC;QAChD,IAAI,mBAAmB,CAAC,IAAI,IAAI,sBAAsB;YAAE,MAAM;QAC9D,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AACD,KAAK,UAAU,YAAY,CAAC,GAAc;IACxC,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;IAC5C,kBAAkB,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACtC,OAAO,QAAQ,CAAC;AAClB,CAAC;AACD,KAAK,UAAU,gBAAgB,CAAC,QAA0B;IACxD,MAAM,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,MAAM,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,QAAQ,CAAC,SAAS;WAC7E,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM;WACvG,CAAC,CAAC,YAAY,IAAI,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,KAAK,OAAO;WACxH,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,OAAO,EAAE,CAAC;AACpF,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAe,EAAE,IAAkB,EAAE,WAAW,GAAG,KAAK;IAC7F,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,OAAO,EAAE,CAAC;IAC/D,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;QAC/G,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC3D,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,UAAU,CAAC,MAAM,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1F,OAAO,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,CAAC;IAC7E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,aAAa;YAAE,MAAM,KAAK,CAAC;QAChD,MAAM,IAAI,aAAa,CAAC,iBAAiB,EAAE,0CAA0C,CAAC,CAAC;IACzF,CAAC;AACH,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAwB,EAAE,UAAsB,EAAE,WAAW,GAAG,KAAK;IACxG,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,CAAC;QACH,6EAA6E;QAC7E,MAAM,SAAS,GAAG,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC7D,IAAI,UAAU,CAAC,GAAG,KAAK,IAAI,IAAI,UAAU,CAAC,GAAG,KAAK,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC;eACrE,UAAU,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;YAAE,OAAO,OAAO,EAAE,CAAC;QACpF,MAAM,QAAQ,GAAG,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;QACjI,MAAM,QAAQ,GAAG,EAAE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,CAAC;QAC7F,gGAAgG;QAChG,MAAM,SAAS,GAAG,MAAM,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;QAC3G,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,EAAE,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;QACrH,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,EAAE,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC;QACxH,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE;YAAE,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3F,IAAI,UAAU,KAAK,CAAC;YAAE,OAAO,OAAO,EAAE,CAAC;QACvC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,aAAa;YAAE,MAAM,KAAK,CAAC;QAChD,MAAM,IAAI,aAAa,CAAC,iBAAiB,EAAE,yCAAyC,CAAC,CAAC;IACxF,CAAC;AACH,CAAC;AACD,SAAS,cAAc,CAAC,KAAqB,EAAE,QAAqB;IAClE,IAAI,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,IAAI,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;WAC/G,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,IAAI,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;QAAE,OAAO,YAAY,EAAE,CAAC;AAC/G,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,QAA0B,EAAE,SAAyB,EAAE,KAAqB,EAAE,SAAqB;IAC5H,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACjC,MAAM,kBAAkB,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,CAAC;IACxD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,EAAE;WAC9E,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,QAAQ,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,OAAO;QAAE,OAAO,YAAY,EAAE,CAAC;IACjH,kGAAkG;IAClG,MAAM,QAAQ,GAAG,cAAc,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;IACpF,IAAI,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,UAAU,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,kBAAkB;QAAE,MAAM,IAAI,aAAa,CAAC,mBAAmB,EAAE,8CAA8C,CAAC,CAAC;IACjL,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,mBAAmB,CAAC,EAAE,kBAAkB,EAAE,SAAS,EAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAClH,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC7E,gIAAgI;QAChI,4HAA4H;QAC5H,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS,CAAC,UAAU,GAAG,EAAE;YAAE,OAAO,OAAO,EAAE,CAAC;QAC3G,OAAO,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;IACzE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,aAAa;YAAE,MAAM,KAAK,CAAC;QAChD,MAAM,IAAI,aAAa,CAAC,uBAAuB,EAAE,sCAAsC,CAAC,CAAC;IAC3F,CAAC;AACH,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,QAA0B,EAAE,MAAsB,EAAE,KAAqB,EAAE,QAAqB;IACzH,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC5C,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACnC,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACjC,MAAM,eAAe,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,QAAQ,CAAC,WAAW,KAAK,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAC,EAAE;WAC/E,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;QAAE,OAAO,YAAY,EAAE,CAAC;IAClH,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,sBAAsB,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACtJ,OAAO,IAAI,UAAU,CAAC,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,EAAE,kBAAkB,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACjH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,aAAa,CAAC,uBAAuB,EAAE,wCAAwC,CAAC,CAAC;IAC7F,CAAC;AACH,CAAC"}

package/dist/session-ids.d.ts

@@ -6,9 +6,9 @@ export interface AgentSessionIdPersisterDeps {
     publishSessionUpdate: (session: Session) => Promise<void>;
 }
 /**
- * Persists agent-native session identity (Claude/Codex/Pi/opencode/Muse
- * session_id, Pi session_file, or Cursor conversation_id) from hook events
- * onto the stored session record, with an in-memory cache of the last
+ * Persists agent-native session identity (Claude/Codex/Pi/opencode/Muse/Grok/
+ * Antigravity session_id, Pi session_file, or Cursor conversation_id) from hook
+ * events onto the stored session record, with an in-memory cache of the last
  * persisted values to skip disk reads on the hot hook path.
  */
 export declare class AgentSessionIdPersister {

package/dist/session-ids.js

@@ -1,7 +1,27 @@
 /**
- * Persists agent-native session identity (Claude/Codex/Pi/opencode/Muse
- * session_id, Pi session_file, or Cursor conversation_id) from hook events
- * onto the stored session record, with an in-memory cache of the last
+ * True when the cached entry already holds `agentId` as the native id for the
+ * session's harness. Claude is the default: any shell type without its own
+ * native-id field is compared against the cached Claude session id.
+ */
+function cachedNativeIdMatches(cached, agentId) {
+    if (cached.isPi)
+        return cached.pi === agentId;
+    if (cached.isCodex)
+        return cached.codex === agentId;
+    if (cached.isOpencode)
+        return cached.opencode === agentId;
+    if (cached.isMuse)
+        return cached.muse === agentId;
+    if (cached.isGrok)
+        return cached.grok === agentId;
+    if (cached.isAntigravity)
+        return cached.antigravity === agentId;
+    return cached.claude === agentId;
+}
+/**
+ * Persists agent-native session identity (Claude/Codex/Pi/opencode/Muse/Grok/
+ * Antigravity session_id, Pi session_file, or Cursor conversation_id) from hook
+ * events onto the stored session record, with an in-memory cache of the last
  * persisted values to skip disk reads on the hot hook path.
  */
 export class AgentSessionIdPersister {
@@ -29,15 +49,7 @@ export class AgentSessionIdPersister {
             return;
         const cached = this.cache.get(hookEvent.sessionId);
         if (cached
-            && (!agentId || (cached.isPi
-                ? cached.pi === agentId
-                : cached.isCodex
-                    ? cached.codex === agentId
-                    : cached.isOpencode
-                        ? cached.opencode === agentId
-                        : cached.isMuse
-                            ? cached.muse === agentId
-                            : cached.claude === agentId))
+            && (!agentId || cachedNativeIdMatches(cached, agentId))
             && (!cursorId || cached.cursor === cursorId)
             && (!sessionFile || cached.piFile === sessionFile)) {
             return;
@@ -49,6 +61,8 @@ export class AgentSessionIdPersister {
         const isPi = session.shellType === 'pi';
         const isOpencode = session.shellType === 'opencode';
         const isMuse = session.shellType === 'muse';
+        const isGrok = session.shellType === 'grok';
+        const isAntigravity = session.shellType === 'antigravity';
         let changed = false;
         if (agentId) {
             if (isPi && session.piSessionId !== agentId) {
@@ -67,7 +81,16 @@ export class AgentSessionIdPersister {
                 session.museSessionId = agentId;
                 changed = true;
             }
-            else if (!isCodex && !isOpencode && !isMuse && session.claudeSessionId !== agentId) {
+            else if (isGrok && session.grokSessionId !== agentId) {
+                session.grokSessionId = agentId;
+                changed = true;
+            }
+            else if (isAntigravity && session.antigravitySessionId !== agentId) {
+                session.antigravitySessionId = agentId;
+                changed = true;
+            }
+            else if (!isPi && !isCodex && !isOpencode && !isMuse && !isGrok && !isAntigravity
+                && session.claudeSessionId !== agentId) {
                 session.claudeSessionId = agentId;
                 changed = true;
             }
@@ -80,26 +103,7 @@ export class AgentSessionIdPersister {
             session.piSessionFile = sessionFile;
             changed = true;
         }
-        if (!changed) {
-            this.cache.set(hookEvent.sessionId, {
-                claude: session.claudeSessionId,
-                cursor: session.cursorSessionId,
-                codex: session.codexSessionId,
-                pi: session.piSessionId,
-                piFile: session.piSessionFile,
-                opencode: session.opencodeSessionId,
-                muse: session.museSessionId,
-                isCodex,
-                isPi,
-                isOpencode,
-                isMuse,
-            });
-            return;
-        }
-        session.updatedAt = new Date().toISOString();
-        await this.deps.store.saveSession(session);
-        // Cache only after a successful save, so a failed persist is retried.
-        this.cache.set(hookEvent.sessionId, {
+        const nextCache = {
             claude: session.claudeSessionId,
             cursor: session.cursorSessionId,
             codex: session.codexSessionId,
@@ -107,11 +111,23 @@ export class AgentSessionIdPersister {
             piFile: session.piSessionFile,
             opencode: session.opencodeSessionId,
             muse: session.museSessionId,
+            grok: session.grokSessionId,
+            antigravity: session.antigravitySessionId,
             isCodex,
             isPi,
             isOpencode,
             isMuse,
-        });
+            isGrok,
+            isAntigravity,
+        };
+        if (!changed) {
+            this.cache.set(hookEvent.sessionId, nextCache);
+            return;
+        }
+        session.updatedAt = new Date().toISOString();
+        await this.deps.store.saveSession(session);
+        // Cache only after a successful save, so a failed persist is retried.
+        this.cache.set(hookEvent.sessionId, nextCache);
         await this.deps.publishSessionUpdate(session);
     }
 }

package/dist/session-ids.js.map

@@ -1 +1 @@
-{"version":3,"file":"session-ids.js","sourceRoot":"","sources":["../src/session-ids.ts"],"names":[],"mappings":"AAuBA;;;;;GAKG;AACH,MAAM,OAAO,uBAAuB;IAGL;IAFZ,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;IAE3D,YAA6B,IAAiC;QAAjC,SAAI,GAAJ,IAAI,CAA6B;IAAG,CAAC;IAElE,KAAK,CAAC,OAAO,CAAC,SAAoB;QAChC,wEAAwE;QACxE,6DAA6D;QAC7D,IAAI,SAAS,CAAC,MAAM,KAAK,WAAW;YAAE,OAAO;QAE7C,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAChD,MAAM,WAAW,GAAG,SAAS,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACtD,MAAM,cAAc,GAAG,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACtD,wEAAwE;QACxE,2EAA2E;QAC3E,MAAM,OAAO,GAAG,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;QACtF,MAAM,QAAQ,GAAG,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1F,MAAM,WAAW,GAAG,OAAO,cAAc,KAAK,QAAQ,IAAI,cAAc;YACtE,CAAC,CAAC,cAAc;YAChB,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,IAAI,CAAC,WAAW;YAAE,OAAO;QAElD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,MAAM;eACL,CAAC,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI;gBAC1B,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,OAAO;gBACvB,CAAC,CAAC,MAAM,CAAC,OAAO;oBACd,CAAC,CAAC,MAAM,CAAC,KAAK,KAAK,OAAO;oBAC1B,CAAC,CAAC,MAAM,CAAC,UAAU;wBACjB,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO;wBAC7B,CAAC,CAAC,MAAM,CAAC,MAAM;4BACb,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO;4BACzB,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC;eAClC,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC;eACzC,CAAC,CAAC,WAAW,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,CAAC,EAAE,CAAC;YACrD,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACvE,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC;QAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,KAAK,IAAI,CAAC;QACxC,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,KAAK,UAAU,CAAC;QACpD,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,KAAK,MAAM,CAAC;QAE5C,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,IAAI,IAAI,OAAO,CAAC,WAAW,KAAK,OAAO,EAAE,CAAC;gBAC5C,OAAO,CAAC,WAAW,GAAG,OAAO,CAAC;gBAC9B,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;iBAAM,IAAI,OAAO,IAAI,OAAO,CAAC,cAAc,KAAK,OAAO,EAAE,CAAC;gBACzD,OAAO,CAAC,cAAc,GAAG,OAAO,CAAC;gBACjC,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;iBAAM,IAAI,UAAU,IAAI,OAAO,CAAC,iBAAiB,KAAK,OAAO,EAAE,CAAC;gBAC/D,OAAO,CAAC,iBAAiB,GAAG,OAAO,CAAC;gBACpC,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;iBAAM,IAAI,MAAM,IAAI,OAAO,CAAC,aAAa,KAAK,OAAO,EAAE,CAAC;gBACvD,OAAO,CAAC,aAAa,GAAG,OAAO,CAAC;gBAChC,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;iBAAM,IAAI,CAAC,OAAO,IAAI,CAAC,UAAU,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,eAAe,KAAK,OAAO,EAAE,CAAC;gBACrF,OAAO,CAAC,eAAe,GAAG,OAAO,CAAC;gBAClC,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;QACH,CAAC;QACD,IAAI,QAAQ,IAAI,OAAO,CAAC,eAAe,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,CAAC,eAAe,GAAG,QAAQ,CAAC;YACnC,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;QACD,IAAI,IAAI,IAAI,WAAW,IAAI,OAAO,CAAC,aAAa,KAAK,WAAW,EAAE,CAAC;YACjE,OAAO,CAAC,aAAa,GAAG,WAAW,CAAC;YACpC,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,EAAE;gBAClC,MAAM,EAAE,OAAO,CAAC,eAAe;gBAC/B,MAAM,EAAE,OAAO,CAAC,eAAe;gBAC/B,KAAK,EAAE,OAAO,CAAC,cAAc;gBAC7B,EAAE,EAAE,OAAO,CAAC,WAAW;gBACvB,MAAM,EAAE,OAAO,CAAC,aAAa;gBAC7B,QAAQ,EAAE,OAAO,CAAC,iBAAiB;gBACnC,IAAI,EAAE,OAAO,CAAC,aAAa;gBAC3B,OAAO;gBACP,IAAI;gBACJ,UAAU;gBACV,MAAM;aACP,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,OAAO,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC7C,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC3C,sEAAsE;QACtE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,EAAE;YAClC,MAAM,EAAE,OAAO,CAAC,eAAe;YAC/B,MAAM,EAAE,OAAO,CAAC,eAAe;YAC/B,KAAK,EAAE,OAAO,CAAC,cAAc;YAC7B,EAAE,EAAE,OAAO,CAAC,WAAW;YACvB,MAAM,EAAE,OAAO,CAAC,aAAa;YAC7B,QAAQ,EAAE,OAAO,CAAC,iBAAiB;YACnC,IAAI,EAAE,OAAO,CAAC,aAAa;YAC3B,OAAO;YACP,IAAI;YACJ,UAAU;YACV,MAAM;SACP,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAChD,CAAC;CACF"}
+{"version":3,"file":"session-ids.js","sourceRoot":"","sources":["../src/session-ids.ts"],"names":[],"mappings":"AA2BA;;;;GAIG;AACH,SAAS,qBAAqB,CAAC,MAAsB,EAAE,OAAe;IACpE,IAAI,MAAM,CAAC,IAAI;QAAE,OAAO,MAAM,CAAC,EAAE,KAAK,OAAO,CAAC;IAC9C,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC,KAAK,KAAK,OAAO,CAAC;IACpD,IAAI,MAAM,CAAC,UAAU;QAAE,OAAO,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC;IAC1D,IAAI,MAAM,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC;IAClD,IAAI,MAAM,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC;IAClD,IAAI,MAAM,CAAC,aAAa;QAAE,OAAO,MAAM,CAAC,WAAW,KAAK,OAAO,CAAC;IAChE,OAAO,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC;AACnC,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,uBAAuB;IAGL;IAFZ,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;IAE3D,YAA6B,IAAiC;QAAjC,SAAI,GAAJ,IAAI,CAA6B;IAAG,CAAC;IAElE,KAAK,CAAC,OAAO,CAAC,SAAoB;QAChC,wEAAwE;QACxE,6DAA6D;QAC7D,IAAI,SAAS,CAAC,MAAM,KAAK,WAAW;YAAE,OAAO;QAE7C,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAChD,MAAM,WAAW,GAAG,SAAS,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACtD,MAAM,cAAc,GAAG,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACtD,wEAAwE;QACxE,2EAA2E;QAC3E,MAAM,OAAO,GAAG,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;QACtF,MAAM,QAAQ,GAAG,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1F,MAAM,WAAW,GAAG,OAAO,cAAc,KAAK,QAAQ,IAAI,cAAc;YACtE,CAAC,CAAC,cAAc;YAChB,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,IAAI,CAAC,WAAW;YAAE,OAAO;QAElD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,MAAM;eACL,CAAC,CAAC,OAAO,IAAI,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;eACpD,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC;eACzC,CAAC,CAAC,WAAW,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,CAAC,EAAE,CAAC;YACrD,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACvE,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC;QAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,KAAK,IAAI,CAAC;QACxC,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,KAAK,UAAU,CAAC;QACpD,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,KAAK,MAAM,CAAC;QAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,KAAK,MAAM,CAAC;QAC5C,MAAM,aAAa,GAAG,OAAO,CAAC,SAAS,KAAK,aAAa,CAAC;QAE1D,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,IAAI,IAAI,OAAO,CAAC,WAAW,KAAK,OAAO,EAAE,CAAC;gBAC5C,OAAO,CAAC,WAAW,GAAG,OAAO,CAAC;gBAC9B,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;iBAAM,IAAI,OAAO,IAAI,OAAO,CAAC,cAAc,KAAK,OAAO,EAAE,CAAC;gBACzD,OAAO,CAAC,cAAc,GAAG,OAAO,CAAC;gBACjC,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;iBAAM,IAAI,UAAU,IAAI,OAAO,CAAC,iBAAiB,KAAK,OAAO,EAAE,CAAC;gBAC/D,OAAO,CAAC,iBAAiB,GAAG,OAAO,CAAC;gBACpC,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;iBAAM,IAAI,MAAM,IAAI,OAAO,CAAC,aAAa,KAAK,OAAO,EAAE,CAAC;gBACvD,OAAO,CAAC,aAAa,GAAG,OAAO,CAAC;gBAChC,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;iBAAM,IAAI,MAAM,IAAI,OAAO,CAAC,aAAa,KAAK,OAAO,EAAE,CAAC;gBACvD,OAAO,CAAC,aAAa,GAAG,OAAO,CAAC;gBAChC,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;iBAAM,IAAI,aAAa,IAAI,OAAO,CAAC,oBAAoB,KAAK,OAAO,EAAE,CAAC;gBACrE,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC;gBACvC,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;iBAAM,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,UAAU,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC,aAAa;mBAC9E,OAAO,CAAC,eAAe,KAAK,OAAO,EAAE,CAAC;gBACzC,OAAO,CAAC,eAAe,GAAG,OAAO,CAAC;gBAClC,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;QACH,CAAC;QACD,IAAI,QAAQ,IAAI,OAAO,CAAC,eAAe,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,CAAC,eAAe,GAAG,QAAQ,CAAC;YACnC,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;QACD,IAAI,IAAI,IAAI,WAAW,IAAI,OAAO,CAAC,aAAa,KAAK,WAAW,EAAE,CAAC;YACjE,OAAO,CAAC,aAAa,GAAG,WAAW,CAAC;YACpC,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;QACD,MAAM,SAAS,GAAmB;YAChC,MAAM,EAAE,OAAO,CAAC,eAAe;YAC/B,MAAM,EAAE,OAAO,CAAC,eAAe;YAC/B,KAAK,EAAE,OAAO,CAAC,cAAc;YAC7B,EAAE,EAAE,OAAO,CAAC,WAAW;YACvB,MAAM,EAAE,OAAO,CAAC,aAAa;YAC7B,QAAQ,EAAE,OAAO,CAAC,iBAAiB;YACnC,IAAI,EAAE,OAAO,CAAC,aAAa;YAC3B,IAAI,EAAE,OAAO,CAAC,aAAa;YAC3B,WAAW,EAAE,OAAO,CAAC,oBAAoB;YACzC,OAAO;YACP,IAAI;YACJ,UAAU;YACV,MAAM;YACN,MAAM;YACN,aAAa;SACd,CAAC;QACF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAC/C,OAAO;QACT,CAAC;QAED,OAAO,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC7C,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC3C,sEAAsE;QACtE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC/C,MAAM,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAChD,CAAC;CACF"}

package/dist/session-store.d.ts

@@ -5,8 +5,14 @@ export declare class SessionStore {
     private readonly writeLocks;
     private readonly retiredSessionIds;
     private readonly maxTerminalLogBytes;
+    private readonly recordIndex;
+    private readonly terminalDirsReady;
+    private readonly terminalLogSizes;
+    private flushPendingTerminalData;
+    private readonly now;
     constructor(dataDir: string, options?: {
         maxTerminalLogBytes?: number;
+        now?: () => number;
     });
     /** Per-session data dir (session.json, terminal.log, inbox.jsonl). */
     sessionDir(sessionId: string): string;
@@ -15,9 +21,25 @@ export declare class SessionStore {
     /** Serialize all directory mutations, recovering after a failed operation. */
     private withSessionWrite;
     saveSession(session: Session): Promise<void>;
+    /** One stat of a file, reduced to its stamp; undefined when it cannot be stat'ed. */
+    private stampOf;
+    /**
+     * session.json content as JSON text for a stamp just taken from disk, or null
+     * when the file does not exist — including when it was removed between the
+     * stat and the read. Reads and parses only a new or changed file; corrupt
+     * files throw and are never indexed.
+     */
+    private recordJsonAt;
     loadSession(sessionId: string): Promise<Session | null>;
     listSessions(): Promise<Session[]>;
+    /**
+     * Registers the owner of not-yet-persisted terminal output (the pump). It is
+     * invoked before terminal.log is read or cleared so no reader can observe a
+     * log that is missing bytes still waiting in a coalescing window.
+     */
+    setPendingTerminalFlush(flush: (sessionId: string) => void): void;
     appendTerminalData(sessionId: string, data: string): Promise<void>;
+    private appendTerminalBytes;
     /**
      * Cap a terminal.log's on-disk size. Runs inside the per-session write lock,
      * so it never races an append. The file is allowed to grow to 2x the retained

package/dist/session-store.js

@@ -2,6 +2,7 @@ import { readFile, writeFile, mkdir, readdir, appendFile, rm, truncate, stat, op
 import { randomUUID } from 'node:crypto';
 import { join, dirname } from 'node:path';
 import { existsSync } from 'node:fs';
+import { isSettledStamp, sameStamp, toFileStamp } from './file-stamp.js';
 /**
  * Drop the legacy preview shape on load: version !== 2 or a preview without a
  * files array means both fields go, so a stale descriptor never reaches the
@@ -18,6 +19,16 @@ function dropLegacyPreviewShape(session) {
         delete session.previewSource;
     }
 }
+/**
+ * A fresh Session parsed from cached session.json text, with the legacy
+ * preview shape dropped. Every read path goes through here so the stat-validated
+ * cache never serves a legacy preview.
+ */
+function parseSessionRecord(json) {
+    const session = JSON.parse(json);
+    dropLegacyPreviewShape(session);
+    return session;
+}
 /**
  * Retained tail size for a session's terminal.log. A misbehaving child (e.g. a
  * TUI stuck in a runaway repaint loop) can otherwise stream unbounded output
@@ -29,6 +40,20 @@ function dropLegacyPreviewShape(session) {
  */
 const DEFAULT_MAX_TERMINAL_LOG_BYTES = 64 * 1024 * 1024;
 const NEWLINE = 0x0a;
+/**
+ * session.json files stat'ed concurrently while listing. Each batch is awaited,
+ * so a listing of any size yields to the event loop between batches instead of
+ * holding it for the whole directory.
+ */
+const LIST_STAT_CONCURRENCY = 32;
+function isMissing(error) {
+    return error?.code === 'ENOENT';
+}
+/** The file, or a directory on the way to it, is no longer there. */
+function isGone(error) {
+    const code = error?.code;
+    return code === 'ENOENT' || code === 'ENOTDIR';
+}
 export class SessionStore {
     sessionsDir;
     archivePath;
@@ -36,7 +61,19 @@ export class SessionStore {
     // Removal is final for this store's lifetime; explicit revival uses a new ID.
     retiredSessionIds = new Set();
     maxTerminalLogBytes;
+    // session.json index, keyed by session id. An entry is served only while a
+    // fresh stat of the file still matches its stamp, and is stored only for a
+    // file that was already quiet when it was read (see file-stamp.ts), so it can
+    // never be stale.
+    recordIndex = new Map();
+    // Sessions whose directory this process has already created.
+    terminalDirsReady = new Set();
+    // terminal.log size in bytes, tracked after one initial stat per session.
+    terminalLogSizes = new Map();
+    flushPendingTerminalData;
+    now;
     constructor(dataDir, options = {}) {
+        this.now = options.now ?? Date.now;
         this.sessionsDir = join(dataDir, 'sessions');
         this.archivePath = join(dataDir, 'archive.jsonl');
         const envCap = Number(process.env.FTOWN_MAX_TERMINAL_LOG_BYTES);
@@ -83,51 +120,140 @@ export class SessionStore {
                 // incomplete document. A same-directory rename is atomic for readers.
                 // 0600: session.json carries the env map with provider tokens, the exact
                 // field toWireSession strips from the wire. Never world-readable.
-                await writeFile(tempFilePath, JSON.stringify(session, null, 2), { encoding: 'utf-8', mode: 0o600 });
+                const text = JSON.stringify(session, null, 2);
+                const handle = await open(tempFilePath, 'w', 0o600);
+                try {
+                    await handle.writeFile(text, 'utf-8');
+                }
+                finally {
+                    await handle.close();
+                }
                 await rename(tempFilePath, filePath);
             }
             catch (error) {
                 await rm(tempFilePath, { force: true }).catch(() => undefined);
                 throw error;
             }
+            finally {
+                // A file published just now cannot be validated by its stamp (another
+                // writer in the same timestamp tick would leave it unchanged), so the
+                // record is read back from disk once it has settled.
+                this.recordIndex.delete(session.id);
+            }
         });
     }
-    async loadSession(sessionId) {
-        const filePath = this.sessionFilePath(sessionId);
-        if (!existsSync(filePath)) {
+    /** One stat of a file, reduced to its stamp; undefined when it cannot be stat'ed. */
+    async stampOf(filePath) {
+        try {
+            return toFileStamp(await stat(filePath, { bigint: true }));
+        }
+        catch {
+            return undefined;
+        }
+    }
+    /**
+     * session.json content as JSON text for a stamp just taken from disk, or null
+     * when the file does not exist — including when it was removed between the
+     * stat and the read. Reads and parses only a new or changed file; corrupt
+     * files throw and are never indexed.
+     */
+    async recordJsonAt(sessionId, stamp) {
+        if (!stamp) {
+            this.recordIndex.delete(sessionId);
             return null;
         }
-        const data = await readFile(filePath, 'utf-8');
-        const session = JSON.parse(data);
-        dropLegacyPreviewShape(session);
-        return session;
+        const indexed = this.recordIndex.get(sessionId);
+        if (indexed && sameStamp(indexed, stamp)) {
+            return indexed.json;
+        }
+        // The stamp was taken BEFORE the read: if the file is replaced meanwhile,
+        // the next stat differs from it and the entry is re-read.
+        this.recordIndex.delete(sessionId);
+        const readStartedAt = this.now();
+        let raw;
+        try {
+            raw = await readFile(this.sessionFilePath(sessionId), 'utf-8');
+        }
+        catch (error) {
+            if (isGone(error))
+                return null;
+            throw error;
+        }
+        const json = JSON.stringify(JSON.parse(raw));
+        if (isSettledStamp(stamp, readStartedAt))
+            this.recordIndex.set(sessionId, { ...stamp, json });
+        return json;
+    }
+    async loadSession(sessionId) {
+        const json = await this.recordJsonAt(sessionId, await this.stampOf(this.sessionFilePath(sessionId)));
+        return json === null ? null : parseSessionRecord(json);
     }
     async listSessions() {
         if (!existsSync(this.sessionsDir)) {
+            this.recordIndex.clear();
             return [];
         }
         const entries = await readdir(this.sessionsDir, { withFileTypes: true });
+        const ids = entries.filter((entry) => entry.isDirectory()).map((entry) => entry.name);
         const sessions = [];
-        for (const entry of entries) {
-            if (entry.isDirectory()) {
-                const session = await this.loadSession(entry.name);
+        // Directory order is kept: stats run a batch at a time, records are then
+        // resolved one by one in that order.
+        for (let start = 0; start < ids.length; start += LIST_STAT_CONCURRENCY) {
+            const batch = ids.slice(start, start + LIST_STAT_CONCURRENCY);
+            const stamps = await Promise.all(batch.map((id) => this.stampOf(this.sessionFilePath(id))));
+            for (let i = 0; i < batch.length; i++) {
+                const json = await this.recordJsonAt(batch[i], stamps[i]);
+                const session = json === null ? null : parseSessionRecord(json);
                 if (session) {
                     sessions.push(session);
                 }
             }
         }
+        const present = new Set(ids);
+        for (const sessionId of this.recordIndex.keys()) {
+            if (!present.has(sessionId))
+                this.recordIndex.delete(sessionId);
+        }
         return sessions.sort((a, b) => new Date(b.createdAt).getTime() - new Date(a.createdAt).getTime());
     }
+    /**
+     * Registers the owner of not-yet-persisted terminal output (the pump). It is
+     * invoked before terminal.log is read or cleared so no reader can observe a
+     * log that is missing bytes still waiting in a coalescing window.
+     */
+    setPendingTerminalFlush(flush) {
+        this.flushPendingTerminalData = flush;
+    }
     async appendTerminalData(sessionId, data) {
         await this.withSessionWrite(sessionId, async () => {
             if (this.retiredSessionIds.has(sessionId))
                 return;
-            await mkdir(this.sessionDir(sessionId), { recursive: true, mode: 0o700 });
             const filePath = this.terminalLogPath(sessionId);
-            await appendFile(filePath, data, { encoding: 'utf-8', mode: 0o600 });
-            await this.trimTerminalLogIfNeeded(filePath);
+            const bytes = Buffer.from(data, 'utf-8');
+            try {
+                await this.appendTerminalBytes(sessionId, filePath, bytes);
+            }
+            catch (error) {
+                this.terminalDirsReady.delete(sessionId);
+                this.terminalLogSizes.delete(sessionId);
+                if (!isMissing(error))
+                    throw error;
+                // The directory vanished since it was created: recreate it and retry.
+                await this.appendTerminalBytes(sessionId, filePath, bytes);
+            }
+            await this.trimTerminalLogIfNeeded(sessionId, filePath);
         });
     }
+    async appendTerminalBytes(sessionId, filePath, bytes) {
+        if (!this.terminalDirsReady.has(sessionId)) {
+            await mkdir(this.sessionDir(sessionId), { recursive: true, mode: 0o700 });
+            this.terminalDirsReady.add(sessionId);
+        }
+        await appendFile(filePath, bytes, { mode: 0o600 });
+        const known = this.terminalLogSizes.get(sessionId);
+        if (known !== undefined)
+            this.terminalLogSizes.set(sessionId, known + bytes.length);
+    }
     /**
      * Cap a terminal.log's on-disk size. Runs inside the per-session write lock,
      * so it never races an append. The file is allowed to grow to 2x the retained
@@ -138,10 +264,19 @@ export class SessionStore {
      * older output was discarded. Best-effort: any failure is swallowed so it can
      * never poison the write-lock chain and stall future appends.
      */
-    async trimTerminalLogIfNeeded(filePath) {
+    async trimTerminalLogIfNeeded(sessionId, filePath) {
         try {
+            // The size is tracked in memory after one stat; the file is stat'ed again
+            // only when the tracked size says a trim is due (the trim needs the real
+            // size) or after an error dropped the tracked value.
+            const tracked = this.terminalLogSizes.get(sessionId);
+            if (tracked !== undefined && tracked <= this.maxTerminalLogBytes * 2) {
+                return;
+            }
+            this.terminalLogSizes.delete(sessionId);
             const { size } = await stat(filePath);
             if (size <= this.maxTerminalLogBytes * 2) {
+                this.terminalLogSizes.set(sessionId, size);
                 return;
             }
             const keep = this.maxTerminalLogBytes;
@@ -165,14 +300,20 @@ export class SessionStore {
             const tmpPath = `${filePath}.trim-${process.pid}.tmp`;
             await writeFile(tmpPath, Buffer.concat([marker, body]), { mode: 0o600 });
             await rename(tmpPath, filePath);
+            this.terminalLogSizes.set(sessionId, marker.length + body.length);
         }
         catch (err) {
+            this.terminalLogSizes.delete(sessionId);
             console.error(`[SessionStore] Failed to trim terminal log ${filePath}:`, err);
         }
     }
     async deleteSession(sessionId) {
         await this.withSessionWrite(sessionId, async () => {
+            this.recordIndex.delete(sessionId);
+            this.terminalDirsReady.delete(sessionId);
+            this.terminalLogSizes.delete(sessionId);
             await rm(this.sessionDir(sessionId), { recursive: true, force: true });
+            this.recordIndex.delete(sessionId);
             // Latch only after successful deletion so failures remain retryable.
             this.retiredSessionIds.add(sessionId);
         });
@@ -237,16 +378,24 @@ export class SessionStore {
         return archived;
     }
     async clearTerminalLog(sessionId) {
+        // Queue pending output ahead of the truncate so it cannot land afterwards.
+        this.flushPendingTerminalData?.(sessionId);
         await this.withSessionWrite(sessionId, async () => {
             if (this.retiredSessionIds.has(sessionId))
                 return;
             const filePath = this.terminalLogPath(sessionId);
+            this.terminalLogSizes.delete(sessionId);
             if (existsSync(filePath)) {
                 await truncate(filePath, 0);
+                this.terminalLogSizes.set(sessionId, 0);
             }
         });
     }
     async loadTerminalLog(sessionId) {
+        // Pending output is handed to appendTerminalData synchronously, which joins
+        // the session's write chain; waiting for that chain makes the read complete.
+        this.flushPendingTerminalData?.(sessionId);
+        await this.writeLocks.get(sessionId);
         const filePath = this.terminalLogPath(sessionId);
         if (!existsSync(filePath)) {
             return '';